From b0444a52c614dc8ba1f27024fcef853329be3c41 Mon Sep 17 00:00:00 2001
From: lockbitchat <lockbitchat@tutanota.com>
Date: Sun, 27 Sep 2026 16:23:03 -0400
Subject: [PATCH] v6.8.12: new design for exchanging invitations

---
 CHANGELOG.md                            |   6 +
 README.md                               |   4 +-
 ar/index.html                           |  38 ++--
 assets/app.css                          |   2 +-
 assets/screenshots/web-verification.png | Bin 129700 -> 100629 bytes
 de/index.html                           |  38 ++--
 dist/app-boot.js                        |   6 +-
 dist/app-boot.js.map                    |   4 +-
 dist/app.js                             |  18 +-
 dist/app.js.map                         |   6 +-
 doc/CRYPTOGRAPHY.md                     |   4 +-
 docs/cryptography/index.html            |   4 +-
 es/index.html                           |  38 ++--
 fa/index.html                           |  38 ++--
 fr/index.html                           |  38 ++--
 he/index.html                           |  38 ++--
 hi/index.html                           |  38 ++--
 index.html                              |  36 ++--
 ko/index.html                           |  38 ++--
 locales/ar.json                         |  28 +--
 locales/de.json                         |  28 +--
 locales/en.json                         |  28 +--
 locales/es.json                         |  28 +--
 locales/fa.json                         |  28 +--
 locales/fr.json                         |  28 +--
 locales/he.json                         |  28 +--
 locales/hi.json                         |  28 +--
 locales/ko.json                         |  26 ++-
 locales/ru.json                         |  28 +--
 locales/uk.json                         |  28 +--
 locales/ur.json                         |  26 ++-
 locales/zh.json                         |  26 ++-
 meta.json                               |  14 +-
 package.json                            |   2 +-
 ru/index.html                           |  38 ++--
 sitemap.xml                             |  46 ++--
 src/app.jsx                             | 276 ++++++++++++++++--------
 src/components/ui/DownloadApps.jsx      |   2 +-
 src/i18n/dict/ar.js                     |  28 +--
 src/i18n/dict/de.js                     |  28 +--
 src/i18n/dict/en.js                     |  28 +--
 src/i18n/dict/es.js                     |  28 +--
 src/i18n/dict/fa.js                     |  28 +--
 src/i18n/dict/fr.js                     |  28 +--
 src/i18n/dict/he.js                     |  28 +--
 src/i18n/dict/hi.js                     |  28 +--
 src/i18n/dict/ko.js                     |  26 ++-
 src/i18n/dict/ru.js                     |  28 +--
 src/i18n/dict/uk.js                     |  28 +--
 src/i18n/dict/ur.js                     |  26 ++-
 src/i18n/dict/zh.js                     |  26 ++-
 src/styles/components.css               |   1 +
 sw.js                                   |   2 +-
 tests/rtl-layout.test.mjs               |   7 +
 uk/index.html                           |  38 ++--
 ur/index.html                           |  38 ++--
 zh/index.html                           |  38 ++--
 57 files changed, 919 insertions(+), 693 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 550d9d8..91a87cf 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,5 +1,11 @@
 # Changelog
 
+## v6.8.12 — New design for exchanging invitations
+
+New design for the screens where you exchange invitations and answers with your
+peer, and for the safety code check. The download buttons now give you desktop
+version 1.0.5.
+
 ## v6.8.8 — Project support section
 
 Added a section to support the project.
diff --git a/README.md b/README.md
index 3167f0e..4008e84 100644
--- a/README.md
+++ b/README.md
@@ -9,7 +9,7 @@
 No accounts. No servers storing your messages. No installation required.
 
 [![License: MIT](https://img.shields.io/badge/License-MIT-f0892a.svg)](LICENSE)
-[![Version](https://img.shields.io/badge/version-6.8.8-3ecf8e.svg)](CHANGELOG.md)
+[![Version](https://img.shields.io/badge/version-6.8.12-3ecf8e.svg)](CHANGELOG.md)
 [![Get it from the Snap Store](https://snapcraft.io/securebit-chat/badge.svg)](https://snapcraft.io/securebit-chat)
 [![PWA](https://img.shields.io/badge/PWA-installable-3ecf8e.svg)](#install-as-an-app)
 [![Encryption](https://img.shields.io/badge/crypto-ECDH%20P--384%20%C2%B7%20AES--256--GCM-blue.svg)](#security-model)
@@ -31,7 +31,7 @@ From the web app at [securebit.chat](https://securebit.chat) — no install, no
 
 | Open a channel | Verify the safety code |
 | :---: | :---: |
-| ![The landing page, with the option to create a channel or join one with an invitation](assets/screenshots/web-start.png) | ![The security verification screen, showing a seven-digit safety code to compare with the other person](assets/screenshots/web-verification.png) |
+| ![The landing page, with the option to create a channel or join one with an invitation](assets/screenshots/web-start.png) | ![The Verify your peer screen: a seven-digit safety code to read aloud, boxes to type it in, and You and Peer confirmation marks](assets/screenshots/web-verification.png) |
 | Your device generates the keys and a one-time invitation. Nothing touches a server. | Compare the code out of band. Until both sides confirm, the chat stays locked. |
 
 | Encrypted conversation | Voice and video |
diff --git a/ar/index.html b/ar/index.html
index 98ff329..e0af179 100644
--- a/ar/index.html
+++ b/ar/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/ar/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/ar.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/ar.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/assets/app.css b/assets/app.css
index 7c43029..36dda9a 100644
--- a/assets/app.css
+++ b/assets/app.css
@@ -1 +1 @@
-*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }/*! tailwindcss v3.4.17 | MIT License | https://tailwindcss.com*/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.\!container{width:100%!important}.container{width:100%}@media(min-width:640px){.\!container{max-width:640px!important}.container{max-width:640px}}@media(min-width:768px){.\!container{max-width:768px!important}.container{max-width:768px}}@media(min-width:1024px){.\!container{max-width:1024px!important}.container{max-width:1024px}}@media(min-width:1280px){.\!container{max-width:1280px!important}.container{max-width:1280px}}@media(min-width:1536px){.\!container{max-width:1536px!important}.container{max-width:1536px}}.pointer-events-none{pointer-events:none}.visible{visibility:visible}.invisible{visibility:hidden}.collapse{visibility:collapse}.static{position:static}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.sticky{position:sticky}.inset-0{inset:0}.bottom-4{bottom:1rem}.end-0{inset-inline-end:0}.end-4{inset-inline-end:1rem}.left-1\/2{left:50%}.left-4{left:1rem}.right-4{right:1rem}.top-0{top:0}.top-1\/2{top:50%}.top-4{top:1rem}.isolate{isolation:isolate}.z-10{z-index:10}.z-30{z-index:30}.z-40{z-index:40}.z-50{z-index:50}.mx-4{margin-left:1rem;margin-right:1rem}.mx-auto{margin-left:auto;margin-right:auto}.my-1{margin-top:.25rem}.mb-1,.my-1{margin-bottom:.25rem}.mb-12{margin-bottom:3rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-6{margin-bottom:1.5rem}.me-1{margin-inline-end:.25rem}.me-2{margin-inline-end:.5rem}.me-3{margin-inline-end:.75rem}.me-4{margin-inline-end:1rem}.ms-2{margin-inline-start:.5rem}.ms-6{margin-inline-start:1.5rem}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-20{margin-top:5rem}.mt-4{margin-top:1rem}.mt-6{margin-top:1.5rem}.block{display:block}.inline-block{display:inline-block}.inline{display:inline}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.contents{display:contents}.hidden{display:none}.h-10{height:2.5rem}.h-12{height:3rem}.h-28{height:7rem}.h-8{height:2rem}.h-80{height:20rem}.h-9{height:2.25rem}.max-h-\[80vh\]{max-height:80vh}.min-h-screen{min-height:100vh}.w-10{width:2.5rem}.w-12{width:3rem}.w-28{width:7rem}.w-4{width:1rem}.w-8{width:2rem}.w-full{width:100%}.min-w-\[180px\]{min-width:180px}.max-w-2xl{max-width:42rem}.max-w-3xl{max-width:48rem}.max-w-4xl{max-width:56rem}.max-w-7xl{max-width:80rem}.max-w-\[78vw\]{max-width:78vw}.max-w-lg{max-width:32rem}.max-w-md{max-width:28rem}.max-w-sm{max-width:24rem}.flex-1{flex:1 1 0%}.flex-shrink-0{flex-shrink:0}.shrink{flex-shrink:1}.grow{flex-grow:1}.-translate-x-1\/2{--tw-translate-x:-50%}.-translate-x-1\/2,.-translate-y-1\/2{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.-translate-y-1\/2{--tw-translate-y:-50%}.translate-x-full{--tw-translate-x:100%}.transform,.translate-x-full{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}@keyframes spin{to{transform:rotate(1turn)}}.animate-spin{animation:spin 1s linear infinite}.cursor-not-allowed{cursor:not-allowed}.cursor-pointer{cursor:pointer}.resize{resize:both}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-6{gap:1.5rem}.space-x-2>:not([hidden])~:not([hidden]){--tw-space-x-reverse:0;margin-right:calc(.5rem*var(--tw-space-x-reverse));margin-left:calc(.5rem*(1 - var(--tw-space-x-reverse)))}.space-x-3>:not([hidden])~:not([hidden]){--tw-space-x-reverse:0;margin-right:calc(.75rem*var(--tw-space-x-reverse));margin-left:calc(.75rem*(1 - var(--tw-space-x-reverse)))}.space-y-1>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.25rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.25rem*var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.5rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem*var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.75rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem*var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem*var(--tw-space-y-reverse))}.space-y-6>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1.5rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.5rem*var(--tw-space-y-reverse))}.self-center{align-self:center}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:1rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-blue-500\/20{border-color:#3b82f633}.border-gray-500\/20{border-color:#6b728033}.border-gray-600\/30{border-color:#4b55634d}.border-green-500\/20{border-color:#22c55e33}.border-orange-500\/20{border-color:#f9731633}.border-purple-500\/20{border-color:#a855f733}.border-purple-500\/30{border-color:#a855f74d}.border-red-500\/20{border-color:#ef444433}.border-yellow-500\/20{border-color:#eab30833}.bg-black\/20{background-color:#0003}.bg-black\/30{background-color:#0000004d}.bg-black\/50{background-color:#00000080}.bg-black\/80{background-color:#000c}.bg-blue-500{--tw-bg-opacity:1;background-color:rgb(59 130 246/var(--tw-bg-opacity,1))}.bg-blue-500\/10{background-color:#3b82f61a}.bg-blue-500\/90{background-color:#3b82f6e6}.bg-emerald-500{--tw-bg-opacity:1;background-color:rgb(16 185 129/var(--tw-bg-opacity,1))}.bg-gray-500\/10{background-color:#6b72801a}.bg-gray-500\/20{background-color:#6b728033}.bg-gray-600{--tw-bg-opacity:1;background-color:rgb(75 85 99/var(--tw-bg-opacity,1))}.bg-gray-700{--tw-bg-opacity:1;background-color:rgb(55 65 81/var(--tw-bg-opacity,1))}.bg-gray-700\/50{background-color:#37415180}.bg-gray-800{--tw-bg-opacity:1;background-color:rgb(31 41 55/var(--tw-bg-opacity,1))}.bg-gray-800\/50{background-color:#1f293780}.bg-gray-900\/30{background-color:#1118274d}.bg-green-500{--tw-bg-opacity:1;background-color:rgb(34 197 94/var(--tw-bg-opacity,1))}.bg-green-500\/10{background-color:#22c55e1a}.bg-green-500\/90{background-color:#22c55ee6}.bg-orange-500\/10{background-color:#f973161a}.bg-purple-500\/10{background-color:#a855f71a}.bg-red-500{--tw-bg-opacity:1;background-color:rgb(239 68 68/var(--tw-bg-opacity,1))}.bg-red-500\/10{background-color:#ef44441a}.bg-red-500\/20{background-color:#ef444433}.bg-red-900\/50{background-color:#7f1d1d80}.bg-white\/20{background-color:#fff3}.bg-yellow-500{--tw-bg-opacity:1;background-color:rgb(234 179 8/var(--tw-bg-opacity,1))}.bg-yellow-500\/10{background-color:#eab3081a}.bg-yellow-500\/90{background-color:#eab308e6}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-6{padding:1.5rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-4{padding-top:1rem;padding-bottom:1rem}.text-center{text-align:center}.text-start{text-align:start}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-\[11px\]{font-size:11px}.text-\[13px\]{font-size:13px}.text-\[3rem\]{font-size:3rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.lowercase{text-transform:lowercase}.italic{font-style:italic}.leading-none{line-height:1}.leading-relaxed{line-height:1.625}.tracking-\[0\.3em\]{letter-spacing:.3em}.tracking-wide{letter-spacing:.025em}.text-amber-300{--tw-text-opacity:1;color:rgb(252 211 77/var(--tw-text-opacity,1))}.text-black{--tw-text-opacity:1;color:rgb(0 0 0/var(--tw-text-opacity,1))}.text-blue-200{--tw-text-opacity:1;color:rgb(191 219 254/var(--tw-text-opacity,1))}.text-blue-300{--tw-text-opacity:1;color:rgb(147 197 253/var(--tw-text-opacity,1))}.text-blue-400{--tw-text-opacity:1;color:rgb(96 165 250/var(--tw-text-opacity,1))}.text-blue-500{--tw-text-opacity:1;color:rgb(59 130 246/var(--tw-text-opacity,1))}.text-gray-200{--tw-text-opacity:1;color:rgb(229 231 235/var(--tw-text-opacity,1))}.text-gray-300{--tw-text-opacity:1;color:rgb(209 213 219/var(--tw-text-opacity,1))}.text-gray-400{--tw-text-opacity:1;color:rgb(156 163 175/var(--tw-text-opacity,1))}.text-gray-500{--tw-text-opacity:1;color:rgb(107 114 128/var(--tw-text-opacity,1))}.text-green-400{--tw-text-opacity:1;color:rgb(74 222 128/var(--tw-text-opacity,1))}.text-green-500{--tw-text-opacity:1;color:rgb(34 197 94/var(--tw-text-opacity,1))}.text-orange-200{--tw-text-opacity:1;color:rgb(254 215 170/var(--tw-text-opacity,1))}.text-orange-300{--tw-text-opacity:1;color:rgb(253 186 116/var(--tw-text-opacity,1))}.text-orange-400{--tw-text-opacity:1;color:rgb(251 146 60/var(--tw-text-opacity,1))}.text-orange-500{--tw-text-opacity:1;color:rgb(249 115 22/var(--tw-text-opacity,1))}.text-purple-300{--tw-text-opacity:1;color:rgb(216 180 254/var(--tw-text-opacity,1))}.text-purple-400{--tw-text-opacity:1;color:rgb(192 132 252/var(--tw-text-opacity,1))}.text-red-400{--tw-text-opacity:1;color:rgb(248 113 113/var(--tw-text-opacity,1))}.text-red-500{--tw-text-opacity:1;color:rgb(239 68 68/var(--tw-text-opacity,1))}.text-sky-300{--tw-text-opacity:1;color:rgb(125 211 252/var(--tw-text-opacity,1))}.text-white{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.text-white\/10{color:#ffffff1a}.text-yellow-400{--tw-text-opacity:1;color:rgb(250 204 21/var(--tw-text-opacity,1))}.text-yellow-600{--tw-text-opacity:1;color:rgb(202 138 4/var(--tw-text-opacity,1))}.line-through{text-decoration-line:line-through}.placeholder-gray-500::-moz-placeholder{--tw-placeholder-opacity:1;color:rgb(107 114 128/var(--tw-placeholder-opacity,1))}.placeholder-gray-500::placeholder{--tw-placeholder-opacity:1;color:rgb(107 114 128/var(--tw-placeholder-opacity,1))}.opacity-0{opacity:0}.opacity-90{opacity:.9}.shadow{--tw-shadow:0 1px 3px 0 rgba(0,0,0,.1),0 1px 2px -1px rgba(0,0,0,.1);--tw-shadow-colored:0 1px 3px 0 var(--tw-shadow-color),0 1px 2px -1px var(--tw-shadow-color)}.shadow,.shadow-2xl{box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.shadow-2xl{--tw-shadow:0 25px 50px -12px rgba(0,0,0,.25);--tw-shadow-colored:0 25px 50px -12px var(--tw-shadow-color)}.shadow-lg{--tw-shadow:0 10px 15px -3px rgba(0,0,0,.1),0 4px 6px -4px rgba(0,0,0,.1);--tw-shadow-colored:0 10px 15px -3px var(--tw-shadow-color),0 4px 6px -4px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.outline{outline-style:solid}.ring{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(3px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.blur{--tw-blur:blur(8px)}.blur,.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.backdrop-blur-md{--tw-backdrop-blur:blur(12px)}.backdrop-blur-md,.backdrop-blur-sm{-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.backdrop-blur-sm{--tw-backdrop-blur:blur(4px)}.backdrop-filter{-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-opacity{transition-property:opacity;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-transform{transition-property:transform;transition-timing-function:cubic-bezier(.4,0,.2,1)}.duration-150,.transition-transform{transition-duration:.15s}.duration-200{transition-duration:.2s}.duration-300{transition-duration:.3s}.duration-500{transition-duration:.5s}.ease-in-out{transition-timing-function:cubic-bezier(.4,0,.2,1)}.ease-out{transition-timing-function:cubic-bezier(0,0,.2,1)}.\[checksum\:4\]{checksum:4}.\[data\:variable\]{data:variable}.\[name\:4\]{name:4}.\[size\:4\]{size:4}.hover\:bg-blue-600:hover{--tw-bg-opacity:1;background-color:rgb(37 99 235/var(--tw-bg-opacity,1))}.hover\:bg-emerald-600:hover{--tw-bg-opacity:1;background-color:rgb(5 150 105/var(--tw-bg-opacity,1))}.hover\:bg-gray-500:hover{--tw-bg-opacity:1;background-color:rgb(107 114 128/var(--tw-bg-opacity,1))}.hover\:bg-gray-700\/40:hover{background-color:#37415166}.hover\:bg-gray-700\/50:hover{background-color:#37415180}.hover\:bg-red-500\/20:hover{background-color:#ef444433}.hover\:bg-red-500\/30:hover{background-color:#ef44444d}.hover\:bg-white\/30:hover{background-color:#ffffff4d}.hover\:text-gray-200:hover{--tw-text-opacity:1;color:rgb(229 231 235/var(--tw-text-opacity,1))}.hover\:text-gray-700:hover{--tw-text-opacity:1;color:rgb(55 65 81/var(--tw-text-opacity,1))}.hover\:text-green-300:hover{--tw-text-opacity:1;color:rgb(134 239 172/var(--tw-text-opacity,1))}.hover\:text-green-400:hover{--tw-text-opacity:1;color:rgb(74 222 128/var(--tw-text-opacity,1))}.hover\:text-red-300:hover{--tw-text-opacity:1;color:rgb(252 165 165/var(--tw-text-opacity,1))}.hover\:text-white:hover{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.focus\:border-purple-400:focus{--tw-border-opacity:1;border-color:rgb(192 132 252/var(--tw-border-opacity,1))}.focus\:border-purple-500\/40:focus{border-color:#a855f766}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.active\:bg-gray-700\/60:active{background-color:#37415199}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:opacity-60:disabled{opacity:.6}.group:hover .group-hover\:scale-105{--tw-scale-x:1.05;--tw-scale-y:1.05;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.group:hover .group-hover\:opacity-100{opacity:1}@media(min-width:640px){.sm\:block{display:block}.sm\:inline{display:inline}.sm\:flex{display:flex}.sm\:py-2\.5{padding-top:.625rem;padding-bottom:.625rem}}@media(min-width:768px){.md\:h-\[32rem\]{height:32rem}}.fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-regular,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-solid,.fas{font-weight:900}.fa-regular,.far,.fa-brands,.fab{font-weight:400}.fa-spin{animation-name:fa-spin;animation-duration:var(--fa-animation-duration,2s);animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-timing-function:var(--fa-animation-timing,linear)}.fa-pulse,.fa-spin-pulse{animation-name:fa-spin;animation-duration:var(--fa-animation-duration,1s);animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-timing-function:var(--fa-animation-timing,steps(8))}@keyframes fa-spin{0%{transform:rotate(0)}to{transform:rotate(1turn)}}@media(prefers-reduced-motion:reduce){.fa-pulse,.fa-spin,.fa-spin-pulse{animation-delay:-1ms;animation-duration:1ms;animation-iteration-count:1}}@font-face{font-family:"Font Awesome 6 Brands";font-style:normal;font-weight:400;font-display:block;src:url(/assets/fontawesome/webfonts/fa-brands-400.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 6 Free";font-style:normal;font-weight:400;font-display:block;src:url(/assets/fontawesome/webfonts/fa-regular-400.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 6 Free";font-style:normal;font-weight:900;font-display:block;src:url(/assets/fontawesome/webfonts/fa-solid-900.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 5 Brands";font-display:block;font-weight:400;src:url(/assets/fontawesome/webfonts/fa-brands-400.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:900;src:url(/assets/fontawesome/webfonts/fa-solid-900.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:400;src:url(/assets/fontawesome/webfonts/fa-regular-400.subset.woff2) format("woff2")}@font-face{font-family:FontAwesome;font-display:block;src:url(/assets/fontawesome/webfonts/fa-solid-900.subset.woff2) format("woff2")}@font-face{font-family:FontAwesome;font-display:block;src:url(/assets/fontawesome/webfonts/fa-brands-400.subset.woff2) format("woff2")}@font-face{font-family:FontAwesome;font-display:block;src:url(/assets/fontawesome/webfonts/fa-regular-400.subset.woff2) format("woff2");unicode-range:u+f003,u+f006,u+f014,u+f016-f017,u+f01a-f01b,u+f01d,u+f022,u+f03e,u+f044,u+f046,u+f05c-f05d,u+f06e,u+f070,u+f087-f088,u+f08a,u+f094,u+f096-f097,u+f09d,u+f0a0,u+f0a2,u+f0a4-f0a7,u+f0c5,u+f0c7,u+f0e5-f0e6,u+f0eb,u+f0f6-f0f8,u+f10c,u+f114-f115,u+f118-f11a,u+f11c-f11d,u+f133,u+f147,u+f14e,u+f150-f152,u+f185-f186,u+f18e,u+f190-f192,u+f196,u+f1c1-f1c9,u+f1d9,u+f1db,u+f1e3,u+f1ea,u+f1f7,u+f1f9,u+f20a,u+f247-f248,u+f24a,u+f24d,u+f255-f25b,u+f25d,u+f271-f274,u+f278,u+f27b,u+f28c,u+f28e,u+f29c,u+f2b5,u+f2b7,u+f2ba,u+f2bc,u+f2be,u+f2c0-f2c1,u+f2c3,u+f2d0,u+f2d2,u+f2d4,u+f2dc}.fa-android:before{content:"\f17b"}.fa-angle-left:before{content:"\f104"}.fa-angle-right:before{content:"\f105"}.fa-apple:before{content:"\f179"}.fa-arrow-down:before{content:"\f063"}.fa-arrow-left:before{content:"\f060"}.fa-arrow-right:before{content:"\f061"}.fa-arrow-up:before{content:"\f062"}.fa-arrow-up-from-bracket:before{content:"\e09a"}.fa-ban:before{content:"\f05e"}.fa-bolt:before{content:"\f0e7"}.fa-camera:before{content:"\f030"}.fa-caret-left:before{content:"\f0d9"}.fa-caret-right:before{content:"\f0da"}.fa-check:before{content:"\f00c"}.fa-check-circle:before{content:"\f058"}.fa-check-double:before{content:"\f560"}.fa-chevron-down:before{content:"\f078"}.fa-chevron-left:before{content:"\f053"}.fa-chevron-right:before{content:"\f054"}.fa-chrome:before{content:"\f268"}.fa-circle:before{content:"\f111"}.fa-circle-notch:before{content:"\f1ce"}.fa-clock:before{content:"\f017"}.fa-code:before{content:"\f121"}.fa-cog:before{content:"\f013"}.fa-cogs:before{content:"\f085"}.fa-comments:before{content:"\f086"}.fa-copy:before{content:"\f0c5"}.fa-download:before{content:"\f019"}.fa-edge:before{content:"\f282"}.fa-exchange-alt:before{content:"\f362"}.fa-exclamation-triangle:before{content:"\f071"}.fa-eye:before{content:"\f06e"}.fa-eye-slash:before{content:"\f070"}.fa-file-arrow-down:before{content:"\f56d"}.fa-fingerprint:before{content:"\f577"}.fa-firefox-browser:before{content:"\e007"}.fa-folder-open:before{content:"\f07c"}.fa-globe:before{content:"\f0ac"}.fa-info:before{content:"\f129"}.fa-info-circle:before{content:"\f05a"}.fa-key:before{content:"\f084"}.fa-lightbulb:before{content:"\f0eb"}.fa-link:before{content:"\f0c1"}.fa-linux:before{content:"\f17c"}.fa-lock:before{content:"\f023"}.fa-lock-open:before{content:"\f3c1"}.fa-microphone-slash:before{content:"\f131"}.fa-network-wired:before{content:"\f6ff"}.fa-opera:before{content:"\f26a"}.fa-paper-plane:before{content:"\f1d8"}.fa-paperclip:before{content:"\f0c6"}.fa-paste:before{content:"\f0ea"}.fa-pen:before{content:"\f304"}.fa-play-circle:before{content:"\f144"}.fa-plus:before{content:"+"}.fa-power-off:before{content:"\f011"}.fa-puzzle-piece:before{content:"\f12e"}.fa-qrcode:before{content:"\f029"}.fa-question-circle:before{content:"\f059"}.fa-reply:before{content:"\f3e5"}.fa-right-left:before{content:"\f362"}.fa-rocket:before{content:"\f135"}.fa-safari:before{content:"\f267"}.fa-share:before{content:"\f064"}.fa-shield-alt:before{content:"\f3ed"}.fa-shield-halved:before{content:"\f3ed"}.fa-signature:before{content:"\f5b7"}.fa-sliders-h:before{content:"\f1de"}.fa-spinner:before{content:"\f110"}.fa-stopwatch:before{content:"\f2f2"}.fa-sync-alt:before{content:"\f2f1"}.fa-times:before{content:"\f00d"}.fa-times-circle:before{content:"\f057"}.fa-trash-can:before{content:"\f2ed"}.fa-triangle-exclamation:before{content:"\f071"}.fa-unlock-alt:before{content:"\f13e"}.fa-user:before{content:"\f007"}.fa-vial:before{content:"\f492"}.fa-windows:before{content:"\f17a"}.fa-xmark:before{content:"\f00d"}@font-face{font-family:Inter;font-style:normal;font-weight:100 900;font-display:swap;src:url(/assets/fonts/inter/files/inter-latin-ext.woff2) format("woff2");unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Inter;font-style:normal;font-weight:100 900;font-display:swap;src:url(/assets/fonts/inter/files/inter-latin.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}:root{color-scheme:dark;--sb-ink: 255, 255, 255;--sb-bg-deepest: #0a0a0c;--sb-bg-deep: #0c0c0e;--sb-bg: #0f0f11;--sb-surface: #141416;--sb-surface-2: #1a1a1f;--sb-surface-warm: #201416;--sb-surface-3: #26262b;--sb-surface-4: #2a2a30;--sb-surface-5: #3f3f47;--sb-grad-1: #15151b;--sb-grad-2: #1d1a24;--sb-grad-3: #161620;--sb-text-1: #f4f4f6;--sb-text-2: #e8e8eb;--sb-text-3: #d7d7db;--sb-text-4: #cfcfd4;--sb-text-5: #b3b3ba;--sb-text-5b: #a7a7b0;--sb-text-6: #9a9aa2;--sb-text-7: #8a8a92;--sb-text-8: #7b7b83;--sb-text-9: #6b6b73;--sb-text-faint: #56565e;--sb-text-code: #c9ccd8;--sb-green: #3ecf8e;--sb-green-soft: #8fe0bb;--sb-green-muted: #a8b8ae;--sb-orange: #f0892a;--sb-orange-hi: #ff9637;--sb-orange-2: #f0a455;--sb-orange-3: #f0b072;--sb-orange-4: #e8b27a;--sb-red: #e5727a;--sb-red-soft: #f0a6ab;--sb-yellow: #e3c84e;--sb-yellow-2: #e3b341;--sb-on-accent: #1a0f04;--sb-on-green: #06231a;--sb-on-green-2: #08160e;--sb-diag-text: #d8cfc1;--sb-diag-label: #8f8b84;--sb-diag-stroke: #6b6760;--sb-diag-dim: #85817b;--sb-legacy-1: #1b1c1b;--sb-legacy-2: #222322;--sb-legacy-3: #1f201f;--sb-legacy-panel: #1a1a1a;--sb-legacy-body: #2a2b2a;--sb-legacy-body-2: #252625;--sb-legacy-bar-rgb: 35, 36, 35;--sb-legacy-slate-rgb: 55, 65, 81;--sb-legacy-green-rgb: 52, 211, 153;--sb-legacy-header: #232323;--sb-legacy-table: #1c1c1c;--sb-orange-solid: #f0892a;--sb-green-solid: #3ecf8e;--sb-red-solid: #e5727a;--sb-red-strong-solid: #e5484d;--sb-yellow-solid: #e3c84e;--sb-yellow-2-solid: #e3b341;--sb-green-rgb: 62, 207, 142;--sb-orange-rgb: 240, 137, 42;--sb-red-rgb: 229, 114, 122;--sb-red-strong-rgb: 229, 72, 77;--sb-yellow-rgb: 227, 200, 78;--sb-yellow-2-rgb: 227, 179, 65;--sb-blue-rgb: 96, 165, 250;--sb-bg-rgb: 18, 18, 20;--sb-surface-rgb: 20, 20, 22;--sb-text-7-rgb: 138, 138, 146;--sb-text-9-rgb: 107, 107, 115;--sb-scrim-rgb: 6, 6, 8;--sb-legacy-orange: #fb923c;--sb-legacy-green: #34d399;--sb-legacy-red: #f87171;--sb-legacy-yellow: #fbbf24;--sb-legacy-purple: #a78bfa;--sb-legacy-blue: #60a5fa;--sb-legacy-gray: #9ca3af;--sb-legacy-cyan: #22d3ee;--sb-legacy-text: #f1f5f9;--sb-legacy-text-2: #b6b6b6;--sb-legacy-text-3: #818080;--sb-legacy-body-text: #c5c7ce;--sb-legacy-border-rgb: 75, 85, 99;--sb-legacy-fill-rgb: 42, 43, 42;--sb-legacy-scroll-rgb: 156, 163, 175;--sb-legacy-orange-500: #f97316;--sb-legacy-orange-500-rgb: 249, 115, 22;--sb-legacy-orange-600: #ea580c;--sb-legacy-amber-500: #f59e0b;--sb-legacy-amber-600: #d97706;--sb-legacy-amber-700: #b45309;--sb-legacy-red-500: #ef4444;--sb-legacy-red-600: #dc2626;--sb-legacy-blue-500: #3b82f6;--sb-legacy-emerald-500: #10b981;--sb-legacy-gray-500: #6b7280;--sb-legacy-blue-rgb: 59, 130, 246;--sb-legacy-emerald-rgb: 16, 185, 129;--sb-legacy-amber-rgb: 245, 158, 11;--sb-legacy-raise-1: #3a3b3a;--sb-legacy-raise-2: #4a4b4a;--sb-legacy-splash: #2d2d2d;--sb-motion-surface: #18181a;--sb-motion-raise: #202022;--sb-motion-text: #e4e4e8;--sb-motion-text-2: #c8c8cf;--sb-motion-text-3: #c3c3c9;--sb-legacy-ground: #07090d;--sb-shadow-rgb: 0, 0, 0;--sb-shadow-k: 1}:root[data-theme=light]{color-scheme:light;--sb-ink: 0, 0, 0;--sb-bg-deepest: #e7e7ea;--sb-bg-deep: #eff0f2;--sb-bg: #f6f7f8;--sb-surface: #ffffff;--sb-surface-2: #f2f3f5;--sb-surface-warm: #fdeced;--sb-surface-3: #e7e8ec;--sb-surface-4: #e0e1e6;--sb-surface-5: #cfd0d7;--sb-grad-1: #f1f1f5;--sb-grad-2: #eae7f0;--sb-grad-3: #eeeef4;--sb-text-1: #0e0e12;--sb-text-2: #1b1b20;--sb-text-3: #26262c;--sb-text-4: #333339;--sb-text-5: #4a4a52;--sb-text-5b: #52525b;--sb-text-6: #56565f;--sb-text-7: #63636c;--sb-text-8: #6f6f78;--sb-text-9: #7c7c85;--sb-text-faint: #85858f;--sb-text-code: #2f3340;--sb-green: #0a8657;--sb-green-soft: #0e7a52;--sb-green-muted: #4f6259;--sb-orange: #b05c08;--sb-orange-hi: #ff9637;--sb-orange-2: #f0a455;--sb-orange-3: #96550f;--sb-orange-4: #8d5417;--sb-red: #c62f38;--sb-red-soft: #b8434c;--sb-yellow: #7d6400;--sb-yellow-2: #8a6c00;--sb-on-accent: #1a0f04;--sb-on-green: #06231a;--sb-on-green-2: #08160e;--sb-diag-text: #35302a;--sb-diag-label: #6a665f;--sb-diag-stroke: #a9a49b;--sb-diag-dim: #75716b;--sb-legacy-1: #ffffff;--sb-legacy-2: #f4f5f7;--sb-legacy-3: #ffffff;--sb-legacy-panel: #ffffff;--sb-legacy-body: #f6f7f8;--sb-legacy-body-2: #f1f2f4;--sb-legacy-bar-rgb: 250, 250, 251;--sb-legacy-slate-rgb: 226, 228, 233;--sb-legacy-green-rgb: 52, 211, 153;--sb-legacy-header: #ffffff;--sb-legacy-table: #f4f5f7;--sb-orange-solid: #f0892a;--sb-green-solid: #3ecf8e;--sb-red-solid: #e5727a;--sb-red-strong-solid: #e5484d;--sb-yellow-solid: #e3c84e;--sb-yellow-2-solid: #e3b341;--sb-green-rgb: 62, 207, 142;--sb-orange-rgb: 240, 137, 42;--sb-red-rgb: 229, 114, 122;--sb-red-strong-rgb: 229, 72, 77;--sb-yellow-rgb: 227, 200, 78;--sb-yellow-2-rgb: 227, 179, 65;--sb-blue-rgb: 29, 100, 200;--sb-bg-rgb: 246, 247, 248;--sb-surface-rgb: 255, 255, 255;--sb-text-7-rgb: 99, 99, 108;--sb-text-9-rgb: 124, 124, 133;--sb-scrim-rgb: 24, 26, 34;--sb-legacy-orange: #b05c08;--sb-legacy-green: #0a8657;--sb-legacy-red: #c62f38;--sb-legacy-yellow: #8a6c00;--sb-legacy-purple: #6d45d9;--sb-legacy-blue: #1d64c8;--sb-legacy-gray: #63636c;--sb-legacy-cyan: #0e7490;--sb-legacy-text: #0e0e12;--sb-legacy-text-2: #4a4a52;--sb-legacy-text-3: #6f6f78;--sb-legacy-body-text: #333339;--sb-legacy-border-rgb: 148, 155, 168;--sb-legacy-fill-rgb: 244, 245, 247;--sb-legacy-scroll-rgb: 120, 126, 138;--sb-legacy-orange-500: #b05c08;--sb-legacy-orange-500-rgb: 249, 115, 22;--sb-legacy-orange-600: #9c5007;--sb-legacy-amber-500: #8a6c00;--sb-legacy-amber-600: #7a5f00;--sb-legacy-amber-700: #6a5200;--sb-legacy-red-500: #c62f38;--sb-legacy-red-600: #b0212a;--sb-legacy-blue-500: #1d64c8;--sb-legacy-emerald-500: #0a8657;--sb-legacy-gray-500: #63636c;--sb-legacy-blue-rgb: 59, 130, 246;--sb-legacy-emerald-rgb: 16, 185, 129;--sb-legacy-amber-rgb: 245, 158, 11;--sb-legacy-raise-1: #eceef1;--sb-legacy-raise-2: #e0e2e7;--sb-legacy-splash: #e7e8ec;--sb-motion-surface: #ffffff;--sb-motion-raise: #f2f3f5;--sb-motion-text: #1b1b20;--sb-motion-text-2: #333339;--sb-motion-text-3: #3a3a41;--sb-legacy-ground: #eef0f2;--sb-shadow-rgb: 16, 18, 27;--sb-shadow-k: .26}@media(prefers-color-scheme:light){:root:not([data-theme]){color-scheme:light;--sb-ink: 0, 0, 0;--sb-bg-deepest: #e7e7ea;--sb-bg-deep: #eff0f2;--sb-bg: #f6f7f8;--sb-surface: #ffffff;--sb-surface-2: #f2f3f5;--sb-surface-3: #e7e8ec;--sb-surface-4: #e0e1e6;--sb-surface-5: #cfd0d7;--sb-text-1: #0e0e12;--sb-text-2: #1b1b20;--sb-text-3: #26262c;--sb-text-4: #333339;--sb-text-5: #4a4a52;--sb-text-6: #56565f;--sb-text-7: #63636c;--sb-text-8: #6f6f78;--sb-text-9: #7c7c85;--sb-text-faint: #85858f;--sb-green: #0a8657;--sb-green-rgb: 10, 134, 87;--sb-orange: #b05c08;--sb-orange-rgb: 176, 92, 8}}:root[data-theme=light] .text-white{color:#1b1b20}:root[data-theme=light] .text-gray-200{color:#333339}:root[data-theme=light] .text-gray-400{color:#63636c}:root[data-theme=light] .text-gray-500{color:#6f6f78}:root[data-theme=light] .placeholder-gray-500::placeholder{color:#85858f}:root[data-theme=light] .text-white\/10{color:#00000014}:root[data-theme=light] .bg-gray-700\/40{background-color:#0000000a}:root[data-theme=light] .bg-gray-700\/50{background-color:#0000000d}:root[data-theme=light] .bg-gray-700\/60{background-color:#0000000f}:root[data-theme=light] .bg-gray-900\/30{background-color:#0000000a}:root[data-theme=light] .bg-black\/20{background-color:#0000000a}:root[data-theme=light] .bg-black\/30{background-color:#ffffffd1}:root[data-theme=light] .text-green-300,:root[data-theme=light] .text-green-400,:root[data-theme=light] .text-green-500{color:#0a8657}:root[data-theme=light] .text-red-300,:root[data-theme=light] .text-red-400,:root[data-theme=light] .text-red-500{color:#c62f38}:root[data-theme=light] .text-yellow-400{color:#7d6400}:root[data-theme=light] .text-orange-400,:root[data-theme=light] .text-orange-500{color:#b05c08}:root[data-theme=light] .text-purple-300,:root[data-theme=light] .text-purple-400{color:#6d45d9}:root[data-theme=light] .text-blue-400,:root[data-theme=light] .text-blue-500{color:#1d64c8}:root[data-theme=light] .text-sky-300{color:#0b6fa8}:root[data-theme=light] .text-amber-300{color:#8a6c00}:root[data-theme=light] .border-purple-400{border-color:#6d45d9}:root.sb-theme-switching,:root.sb-theme-switching *{transition:background-color .2s ease,border-color .2s ease,color .2s ease!important}@media(prefers-reduced-motion:reduce){:root.sb-theme-switching,:root.sb-theme-switching *{transition:none!important}}*{font-family:Inter,-apple-system,BlinkMacSystemFont,sans-serif}body{background:var(--sb-legacy-body);overflow-x:hidden}.bg-custom-bg{background-color:var(--sb-legacy-body-2)!important}.bg-my{background-color:var(--sb-legacy-panel)}.bg-header{background-color:var(--sb-legacy-header)!important}.minimal-bg{background:linear-gradient(135deg,var(--sb-legacy-panel) 0%,var(--sb-legacy-body) 100%);position:relative;min-height:100vh}.card-minimal.rounded-xl.p-6.cursor-pointer.group.flex-1.create{background-color:rgba(var(--sb-blue-rgb),.03)}.card-minimal.rounded-xl.p-6.cursor-pointer.group.flex-1.join{background-color:rgba(var(--sb-legacy-green-rgb),.03)}tr.bg-black-table{background-color:var(--sb-legacy-table)}.text-primary{color:var(--sb-legacy-text)}.text-secondary{color:var(--sb-legacy-text-2)}.text-muted{color:var(--sb-legacy-text-3)}.accent-orange{color:var(--sb-legacy-orange)}.accent-green{color:var(--sb-legacy-green)}.accent-red{color:var(--sb-legacy-red)}.accent-yellow{color:var(--sb-legacy-yellow)}.accent-purple{color:var(--sb-legacy-purple)}.accent-blue{color:var(--sb-legacy-blue)}.accent-gray{color:var(--sb-legacy-gray)}.accent-cyan{color:var(--sb-legacy-cyan)}.custom-scrollbar::-webkit-scrollbar-track{background:rgba(var(--sb-legacy-fill-rgb),.3);border-radius:3px}.custom-scrollbar::-webkit-scrollbar-thumb{background:rgba(var(--sb-legacy-border-rgb),.5);border-radius:3px}.custom-scrollbar::-webkit-scrollbar-thumb:hover{background:rgba(var(--sb-legacy-border-rgb),.7)}.scroll-smooth{scroll-behavior:smooth}.messages-container,.chat-messages-area{scroll-behavior:smooth;scroll-padding-bottom:20px}.chat-messages-area>div:first-child{scroll-behavior:smooth;scroll-padding-bottom:20px}[class*=chat]{scroll-behavior:smooth}@media(max-width:640px){.header-minimal{padding:0 8px}.icon-container{min-width:32px;min-height:32px}.verification-code{font-size:.875rem;padding:6px 8px}.header-minimal .max-w-7xl{padding-inline:8px}.header-minimal button{min-width:32px;min-height:32px}}@media(min-width:641px)and (max-width:1024px){.header-minimal .max-w-7xl{padding-inline:16px}}.card{position:relative;border-radius:12px;overflow:hidden;transition:transform .3s ease}.card:before{content:"";position:absolute;inset:0;border-radius:12px;padding:2px;background:radial-gradient(circle at var(--x, 50%) var(--y, 50%),var(--color),transparent 80%);opacity:0;transition:opacity .4s;-webkit-mask:linear-gradient(#fff 0 0) content-box,linear-gradient(#fff 0 0);-webkit-mask-composite:xor;mask-composite:exclude}.card.active-glow:before{opacity:1}.card:after{content:"";position:absolute;inset:3px;border-radius:10px;z-index:1}:root{--gap: 1.25rem;--speed: .55s cubic-bezier(.25, .46, .45, .94);--closed: 5rem;--open: 30rem;--accent: var(--sb-legacy-orange)}*{margin:0;padding:0;box-sizing:border-box}body{font-family:Inter,sans-serif;background:var(--sb-legacy-ground);color:var(--sb-legacy-body-text)}.head{max-width:1400px;margin:auto;padding:70px 20px 40px;display:flex;justify-content:space-between;align-items:flex-end;gap:2rem}.nav-btn{width:2.5rem;height:2.5rem;border:none;border-radius:50%;background:rgba(var(--sb-ink),.12);color:#fff;font-size:1.5rem;display:flex;align-items:center;justify-content:center;cursor:pointer;transition:.3s}.nav-btn:hover{background:var(--accent)}.nav-btn:disabled{opacity:.3;cursor:default}.slider{max-width:1400px;margin:auto;overflow:hidden}.controls{display:flex;flex-direction:row;gap:.5rem}.track{display:flex;gap:var(--gap);align-items:flex-start;justify-content:center;scroll-behavior:smooth;scroll-snap-type:x mandatory;padding-bottom:40px}.track::-webkit-scrollbar{display:none}.project-card{position:relative;flex:0 0 var(--closed);height:26rem;border-radius:1rem;overflow:hidden;cursor:pointer;transition:flex-basis var(--speed),transform var(--speed)}.project-card[active]{flex-basis:var(--open);transform:translateY(-6px);box-shadow:0 15px 12px rgba(var(--sb-shadow-rgb),calc(.25 * var(--sb-shadow-k)))}.project-card__bg{position:absolute;inset:0;width:100%;height:100%;object-fit:cover;filter:brightness(.75) saturate(75%);transition:filter .3s,transform var(--speed)}.project-card:hover .project-card__bg{filter:brightness(.9) saturate(100%);transform:scale(1.06)}.project-card__content{position:absolute;inset:0;display:flex;flex-direction:column;justify-content:center;align-items:center;gap:.7rem;padding:0;background:linear-gradient(transparent 40%,rgba(var(--sb-shadow-rgb),calc(.35 * var(--sb-shadow-k))));z-index:2}.project-card__title{color:#fff;font-weight:700;font-size:1.35rem;writing-mode:vertical-rl;transform:rotate(180deg)}.project-card__thumb,.project-card__desc,.project-card__btn{display:none}.project-card[active] .project-card__content{flex-direction:row;align-items:center;padding:1.2rem 2rem;gap:1.1rem}.project-card[active] .project-card__title{writing-mode:horizontal-tb;transform:none;font-size:2.4rem}.project-card[active] .project-card__thumb,.project-card[active] .project-card__desc,.project-card[active] .project-card__btn{display:block}.project-card__thumb{width:133px;height:269px;border-radius:.45rem;object-fit:cover;box-shadow:0 4px 10px rgba(var(--sb-shadow-rgb),calc(.4 * var(--sb-shadow-k)))}.project-card__desc{color:var(--sb-legacy-text-2);font-size:1rem;line-height:1.4;max-width:16rem}@media(max-width:767px){:root{--closed: 4rem;--open: 22rem}.head{padding:50px 20px 30px}.track{flex-direction:column;scroll-snap-type:y mandatory;align-items:center;justify-content:flex-start;padding-bottom:0}.project-card{height:20rem}.project-card__title{font-size:1.1rem;writing-mode:horizontal-tb;transform:none;text-align:center;padding-inline:.3rem}.nav-btn{width:2rem;height:2rem;font-size:1.2rem}}@media(max-width:767px){:root{--closed: 100%;--open: 100%;--gap: .8rem}.head{padding:30px 15px 20px;flex-direction:column;align-items:flex-start;gap:1rem}.slider{padding:0 15px}.track{flex-direction:column;scroll-snap-type:y mandatory;gap:.8rem;padding-bottom:20px}.project-card{height:auto;min-height:80px;flex:0 0 auto;width:100%;scroll-snap-align:start}.project-card[active]{min-height:300px;transform:none;box-shadow:0 8px 25px rgba(var(--sb-shadow-rgb),calc(.3 * var(--sb-shadow-k)))}.project-card__content{flex-direction:row;justify-content:flex-start;padding:1rem;align-items:center;gap:1rem}.project-card__title{writing-mode:horizontal-tb;transform:none;font-size:1.2rem;margin-inline-end:auto}.project-card__thumb,.project-card__desc,.project-card__btn{display:none}.project-card[active] .project-card__content{align-items:flex-start;padding:1.5rem}.project-card[active] .project-card__title{font-size:1.8rem;margin-bottom:1rem;margin-top:2rem}.project-card[active] .project-card__thumb{width:200px;height:267px;border-radius:.35rem;margin-bottom:1rem}.project-card[active] .project-card__desc{font-size:.95rem;max-width:100%;margin-bottom:1rem}.project-card[active] .project-card__btn{align-self:center;width:100%;text-align:center;padding:.7rem}.dots{display:none}.controls{width:100%;justify-content:space-between;padding:0 15px 20px}.nav-btn{position:static;transform:none}}@keyframes pulse{0%,to{transform:scale(1)}50%{transform:scale(1.05)}}@keyframes vmRec{0%,to{opacity:1;transform:scale(1)}50%{opacity:.35;transform:scale(.82)}}@keyframes vmRing{0%{transform:scale(1);opacity:.5}to{transform:scale(2.1);opacity:0}}@keyframes sbCallPulse{0%{transform:scale(1);opacity:.5}to{transform:scale(1.85);opacity:0}}@keyframes sbLiveBg{0%,to{background-position:0% 50%}50%{background-position:100% 50%}}.minimal-bg{min-height:100vh;display:flex;flex-direction:column}.hide-scrollbar{-ms-overflow-style:none;scrollbar-width:none}.hide-scrollbar::-webkit-scrollbar{display:none}.file-transfer-component{margin-top:1rem}@media(max-width:768px){.mobile-chat-height{height:calc(100dvh - 64px)!important}.scroll-to-bottom-mobile{bottom:140px!important;inset-inline-end:16px!important;width:40px!important;height:40px!important}}@media(max-width:480px){.header-minimal{height:56px}.mobile-chat-height{height:calc(100dvh - 56px)!important}}.file-drop-zone{border:2px dashed rgba(var(--sb-legacy-border-rgb),1);border-radius:12px;padding:2rem;text-align:center;cursor:pointer;transition:all .3s ease;background:rgba(var(--sb-legacy-slate-rgb),.1)}.file-drop-zone:hover{border-color:var(--sb-legacy-blue-500);background:rgba(var(--sb-legacy-blue-rgb),.1)}.file-drop-zone.drag-over{border-color:var(--sb-legacy-emerald-500);background:rgba(var(--sb-legacy-emerald-rgb),.1);transform:scale(1.02)}.drop-content{pointer-events:none}.active-transfers{max-height:300px;overflow-y:auto}.transfer-item{transition:all .2s ease}.transfer-item:hover{transform:translateY(-1px)}.progress-bar{position:relative;height:6px;background:rgba(var(--sb-legacy-border-rgb),.3);border-radius:3px;overflow:hidden}.progress-fill{height:100%;transition:width .3s ease;border-radius:3px}.progress-text{position:absolute;top:-20px;inset-inline-end:0;color:var(--sb-legacy-gray)}.file-transfer-section{border-top:1px solid rgba(var(--sb-legacy-border-rgb),.1)}@media(max-width:640px){.file-drop-zone{padding:1.5rem}.transfer-item{padding:.75rem}.progress-text{font-size:.75rem}}.header-minimal{background:rgba(var(--sb-legacy-bar-rgb),.13);backdrop-filter:blur(5px);-webkit-backdrop-filter:blur(5px);flex-shrink:0;height:64px;position:sticky;top:0;z-index:40}.header-minimal .cursor-pointer:hover{transform:scale(1.05);transition:transform .2s ease}.header-minimal .cursor-pointer:active{transform:scale(.95)}.chat-container{flex-direction:column;height:calc(100vh - 64px);min-height:0}.chat-messages-area{flex:1;min-height:0;overflow:hidden;display:flex;flex-direction:column}.chat-input-area{flex-shrink:0;position:sticky;bottom:0;background:rgba(var(--sb-legacy-fill-rgb),.95);backdrop-filter:blur(10px);border-top:1px solid rgba(var(--sb-legacy-border-rgb),.2)}.chat-messages-area>div:first-child{height:100%;overflow-y:auto;padding:1rem;scroll-behavior:smooth;scroll-padding-bottom:20px;scroll-margin-bottom:20px}@media(max-width:768px){.chat-container{height:calc(100vh - 64px);height:calc(100dvh - 64px)}}main{flex:1;display:flex;flex-direction:column;min-height:0}.card-minimal{background:rgba(var(--sb-legacy-fill-rgb),.8);backdrop-filter:blur(16px);border:1px solid rgba(var(--sb-legacy-border-rgb),.2);box-shadow:0 4px 16px rgba(var(--sb-shadow-rgb),calc(.1 * var(--sb-shadow-k)))}.card-minimal--selected{background:rgba(var(--sb-legacy-orange-500-rgb),.15)!important;border-color:rgba(var(--sb-legacy-orange-500-rgb),1)!important;box-shadow:0 0 0 2px rgba(var(--sb-legacy-orange-500-rgb),.3)!important}.status-dot{width:8px;height:8px;border-radius:50%;display:inline-block;margin-inline-end:8px}.status-connected{background:var(--sb-legacy-emerald-500)}.status-connecting{background:var(--sb-legacy-gray-500)}.status-failed{background:var(--sb-legacy-red-500)}.status-disconnected{background:var(--sb-legacy-gray-500)}.status-verifying{background:var(--sb-legacy-gray)}.security-shield{background:linear-gradient(135deg,var(--sb-legacy-body) 0%,var(--sb-legacy-raise-1) 100%);border:1px solid rgba(var(--sb-legacy-border-rgb),.3)}.verification-code{background:rgba(var(--sb-legacy-fill-rgb),.8);border:1px solid rgba(var(--sb-legacy-border-rgb),.3);color:var(--sb-legacy-text);font-family:Monaco,Menlo,monospace;letter-spacing:.1em;font-size:1.2em;padding:8px 12px;border-radius:8px;text-align:center}.icon-container{width:40px;height:40px;background:rgba(var(--sb-legacy-fill-rgb),.8);border:1px solid rgba(var(--sb-legacy-border-rgb),.3);border-radius:8px;display:flex;align-items:center;justify-content:center}.icon-container i{font-size:1.25rem;line-height:1}.icon-sm{font-size:.875rem}.icon-md{font-size:1rem}.icon-lg{font-size:1.125rem}.icon-xl{font-size:1.25rem}.icon-2xl{font-size:1.5rem}.step-number{width:32px;height:32px;background:linear-gradient(135deg,var(--sb-legacy-orange-500),var(--sb-legacy-orange-600));color:#fff;border-radius:8px;display:flex;align-items:center;justify-content:center;font-weight:600;font-size:14px}.icon-fallback{display:inline-block;width:1em;height:1em;background-size:contain;background-repeat:no-repeat;background-position:center}.fas,.far,.fab{display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1;vertical-align:middle}.fas:before,.far:before,.fab:before{display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.icon-loading{opacity:.7;animation:iconPulse 1.5s ease-in-out infinite}.fa-fallback .fas.fa-shield-halved:before{content:"\1f6e1\fe0f"}.fa-fallback .fas.fa-shield-alt:before{content:"\1f6e1\fe0f"}.fa-fallback .fas.fa-lock:before{content:"\1f512"}.fa-fallback .fas.fa-unlock-alt:before{content:"\1f513"}.fa-fallback .fas.fa-key:before{content:"\1f511"}.fa-fallback .fas.fa-fingerprint:before{content:"\1f446"}.fa-fallback .fas.fa-exchange-alt:before{content:"\1f504"}.fa-fallback .fas.fa-plus:before{content:"\2795"}.fa-fallback .fas.fa-link:before{content:"\1f517"}.fa-fallback .fas.fa-paste:before{content:"\1f4cb"}.fa-fallback .fas.fa-check-circle:before{content:"\2705"}.fa-fallback .fas.fa-cogs:before{content:"\2699\fe0f"}.fa-fallback .fas.fa-rocket:before{content:"\1f680"}.fa-fallback .fas.fa-copy:before{content:"\1f4c4"}.fa-fallback .fas.fa-check:before{content:"\2713"}.fa-fallback .fas.fa-times:before{content:"\2717"}.fa-fallback .fas.fa-exclamation-triangle:before{content:"\26a0\fe0f"}.fa-fallback .fas.fa-info-circle:before{content:"\2139\fe0f"}.fa-fallback .fas.fa-circle:before{content:"\25cf"}.fa-fallback .fas.fa-paper-plane:before{content:"\1f4e4"}.fa-fallback .fas.fa-comments:before{content:"\1f4ac"}.fa-fallback .fas.fa-signature:before{content:"\270d\fe0f"}.fa-fallback .fas.fa-power-off:before{content:"\23fb"}.fa-fallback .fas.fa-arrow-left:before{content:"\2190"}.fa-fallback .fas.fa-chevron-down:before{content:"\2193"}.fa-fallback .fas:before{font-family:"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-size:inherit}button i{vertical-align:middle;margin-inline-end:.5rem}.lightning-button{background:linear-gradient(135deg,var(--sb-legacy-amber-500) 0%,var(--sb-legacy-amber-600) 100%);border:1px solid rgba(var(--sb-legacy-amber-rgb),.3);transition:all .3s ease}.lightning-button:hover{background:linear-gradient(135deg,var(--sb-legacy-amber-600) 0%,var(--sb-legacy-amber-700) 100%);transform:translateY(-2px)}.btn-primary{background:linear-gradient(135deg,var(--sb-legacy-orange-500) 0%,var(--sb-legacy-orange-600) 100%);border:1px solid rgba(var(--sb-legacy-orange-500-rgb),.3)}.btn-primary:hover{background:linear-gradient(135deg,var(--sb-legacy-orange-600) 0%,var(--sb-legacy-red-600) 100%);transform:translateY(-1px)}.btn-secondary{background:linear-gradient(135deg,var(--sb-legacy-body) 0%,var(--sb-legacy-raise-1) 100%);border:1px solid rgba(var(--sb-legacy-border-rgb),.3)}.btn-secondary:hover{background:linear-gradient(135deg,var(--sb-legacy-raise-1) 0%,var(--sb-legacy-raise-2) 100%);transform:translateY(-1px)}.btn-verify{background:linear-gradient(135deg,var(--sb-legacy-body) 0%,var(--sb-legacy-raise-1) 100%);border:1px solid rgba(var(--sb-legacy-border-rgb),.3)}.btn-verify:hover{background:linear-gradient(135deg,var(--sb-legacy-raise-1) 0%,var(--sb-legacy-raise-2) 100%);transform:translateY(-1px)}.wallet-logos-container{display:flex;align-items:center;overflow:hidden;position:relative;height:64px;margin:20px 0;width:100%}.wallet-logos-track{display:flex;align-items:center;gap:20px;animation:walletLogosScroll 30s linear infinite;width:max-content}.wallet-logo{display:flex;align-items:center;justify-content:center;width:100px;height:48px;background:rgba(var(--sb-legacy-fill-rgb),.8);border:1px solid rgba(var(--sb-legacy-border-rgb),.3);border-radius:8px;font-size:14px;font-weight:600;color:var(--sb-legacy-text);flex-shrink:0;transition:all .3s ease}.wallet-logo:hover{border-color:rgba(var(--sb-legacy-orange-500-rgb),.3);background:rgba(var(--sb-legacy-orange-500-rgb),.1);transform:translateY(-2px) scale(1.05);box-shadow:0 4px 10px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k)))}.wallet-logo.bitcoin-lightning{background:transparent;padding:4px}.wallet-logo.bitcoin-lightning img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.impervious{background:transparent;padding:4px}.wallet-logo.impervious img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.strike{background:transparent;padding:4px}.wallet-logo.strike img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.lnbits{background:transparent;padding:4px}.wallet-logo.lnbits img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.lightning-labs{background:transparent;padding:4px}.wallet-logo.lightning-labs img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.atomic{background:transparent;padding:4px}.wallet-logo.atomic img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.breez{background:transparent;padding:4px}.wallet-logo.breez img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.alby{background:transparent;padding:4px}.wallet-logo.alby img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.phoenix,.wallet-logo.blixt{background:transparent}.wallet-logo.zeus{background:transparent;padding:4px}.wallet-logo.zeus img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.wos{background:transparent;padding:4px}.wallet-logo.wos img{width:80px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.muun{background:transparent;padding:4px}.wallet-logo.muun img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logos-container:hover .wallet-logos-track{animation-play-state:paused}.message-slide{animation:messageSlideIn .3s ease-out}.chat-messages-area .message:last-child{scroll-margin-bottom:20px}.message{word-wrap:break-word;overflow-wrap:break-word;white-space:normal;max-width:100%}.message span{word-wrap:break-word;overflow-wrap:break-word;white-space:normal;display:inline-block;max-width:100%}.chat-messages-area{scroll-behavior:smooth;scroll-padding-bottom:20px}@keyframes iconPulse{0%,to{opacity:.7}50%{opacity:1}}@keyframes messageSlideIn{0%{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}@keyframes walletLogosScroll{0%{transform:translate(0)}to{transform:translate(-50%)}}@keyframes pulse{0%,to{opacity:1}50%{opacity:.7}}@keyframes shimmer{0%{transform:translate(-100%) skew(-15deg)}to{transform:translate(200%) skew(-15deg)}}.btn-partner-modern{position:relative;background:linear-gradient(135deg,var(--sb-legacy-orange-500) 0%,var(--sb-legacy-orange-600) 50%,var(--sb-legacy-red-600) 100%);background-size:200% 200%;background-position:0% 0;box-shadow:0 4px 15px rgba(var(--sb-legacy-orange-500-rgb),.3);transition:all .3s cubic-bezier(.4,0,.2,1);overflow:hidden}.btn-partner-modern:before{content:"";position:absolute;top:0;left:-100%;width:100%;height:100%;background:linear-gradient(90deg,transparent 0%,rgba(255,255,255,.2) 50%,transparent 100%);transition:left .5s}.btn-partner-modern:hover{background-position:100% 0;transform:translateY(-2px) scale(1.02);box-shadow:0 8px 25px rgba(var(--sb-legacy-orange-500-rgb),.5),0 0 30px rgba(var(--sb-legacy-orange-500-rgb),.3)}.btn-partner-modern:hover:before{left:100%;animation:shimmer 1.5s ease-in-out}.btn-partner-modern:active{transform:translateY(0) scale(.98);box-shadow:0 2px 10px rgba(var(--sb-legacy-orange-500-rgb),.4)}.custom-scrollbar{scrollbar-width:thin;scrollbar-color:rgba(var(--sb-legacy-scroll-rgb),.5) transparent}.custom-scrollbar::-webkit-scrollbar{width:6px}.custom-scrollbar::-webkit-scrollbar-track{background:transparent}.custom-scrollbar::-webkit-scrollbar-thumb{background-color:rgba(var(--sb-legacy-scroll-rgb),.5);border-radius:3px}.custom-scrollbar::-webkit-scrollbar-thumb:hover{background-color:rgba(var(--sb-legacy-scroll-rgb),.7)}.accent-orange{color:var(--sb-legacy-orange)!important}.accent-green{color:var(--sb-legacy-green)!important}.accent-red{color:var(--sb-legacy-red)!important}.accent-yellow{color:var(--sb-legacy-yellow)!important}.accent-purple{color:var(--sb-legacy-purple)!important}.accent-gray{color:var(--sb-legacy-gray)!important}.accent-cyan{color:var(--sb-legacy-cyan)!important}.accent-blue{color:var(--sb-legacy-blue)!important}.text-secondary i{opacity:.8}.button-container{perspective:1000px}.button{width:200px;height:60px;border-radius:30px;background:linear-gradient(to bottom,#ffffff26,#ffffff0d);box-shadow:inset 0 1px 2px #fff6,inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 4px 8px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 0 20px #ffffff1a;transform:rotateX(15deg) translateZ(0);transition:all .3s cubic-bezier(.68,-.55,.27,1.55);position:relative;cursor:pointer;animation:pulse 2s infinite ease-in-out;overflow:hidden;text-decoration:none;display:block}.button:before{content:"";position:absolute;top:0;left:-50px;width:50px;height:100%;background:linear-gradient(to right,transparent,rgba(255,255,255,.1),rgba(255,255,255,.2),rgba(255,255,255,.1),transparent);transform:skew(-25deg);animation:shine 3s infinite linear;pointer-events:none;z-index:1}.button:after{content:"";position:absolute;bottom:-10px;left:10%;width:80%;height:10px;background:radial-gradient(ellipse at center,rgba(var(--sb-shadow-rgb),calc(.3 * var(--sb-shadow-k))) 0%,transparent 70%);z-index:-1}.button span{position:relative;z-index:2;color:#fff;font-size:18px;font-family:Arial,sans-serif;text-shadow:0 1px 2px rgba(var(--sb-shadow-rgb),calc(.5 * var(--sb-shadow-k)));display:block;line-height:60px;text-align:center}.button:hover{transform:rotateX(0) translateZ(15px) scale(1.05);box-shadow:inset 0 1px 2px #fff6,inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 8px 16px rgba(var(--sb-shadow-rgb),calc(.3 * var(--sb-shadow-k))),0 0 40px #ffffff40}.button:active{transform:rotateX(0) translateZ(-5px) scale(.95);box-shadow:inset 0 1px 2px #fff6,inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 2px 4px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 0 10px #ffffff1a}@keyframes pulse{0%,to{box-shadow:inset 0 1px 2px #fff6,inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 4px 8px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 0 20px #ffffff1a}50%{box-shadow:inset 0 1px 2px rgba(var(--sb-ink),.4),inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 4px 8px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 0 30px rgba(var(--sb-ink),.2)}}@keyframes shine{0%{left:-50px}to{left:250px}}.sb-scroll{scrollbar-gutter:auto;scrollbar-width:thin;scrollbar-color:rgba(var(--sb-ink),.13) transparent}.sb-scroll::-webkit-scrollbar{width:9px}.sb-scroll::-webkit-scrollbar-track{background:transparent}.sb-scroll::-webkit-scrollbar-thumb{background:rgba(var(--sb-ink),.07);border-radius:99px;border:2px solid transparent;background-clip:padding-box}.sb-scroll::-webkit-scrollbar-thumb:hover{background:rgba(var(--sb-ink),.13);background-clip:padding-box}.sb-textarea::placeholder{color:var(--sb-text-faint)}.sb-chip:hover{border-color:rgba(var(--sb-ink),.16)!important;color:var(--sb-text-2)!important}.sb-send:hover:not(:disabled){filter:brightness(1.06)}.sb-unsend:hover{color:var(--sb-red)!important}.sb-link:hover{color:var(--sb-text-2)!important}.sb-disconnect:hover{border-color:rgba(var(--sb-red-rgb),.4)!important;color:var(--sb-red)!important;background:rgba(var(--sb-red-rgb),.06)!important}@media(max-width:560px){.sb-hide-sm{display:none}}.sb-secpill:hover{border-color:rgba(var(--sb-ink),.16)!important;background:rgba(var(--sb-ink),.05)!important}@keyframes sbFlowR{0%{left:4%;opacity:0}12%{opacity:1}88%{opacity:1}to{left:96%;opacity:0}}@keyframes sbFlowL{0%{left:96%;opacity:0}12%{opacity:1}88%{opacity:1}to{left:4%;opacity:0}}@keyframes sbPulse{0%,to{transform:translate(-50%,-50%) scale(1);opacity:.5}50%{transform:translate(-50%,-50%) scale(1.5);opacity:0}}@keyframes sbSpin{to{transform:rotate(360deg)}}@keyframes sbUp{0%{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}@keyframes sbNode{0%,to{box-shadow:0 0 rgba(var(--sb-green-rgb),0)}50%{box-shadow:0 0 0 6px rgba(var(--sb-green-rgb),.06)}}@keyframes sbScan{0%{top:8%}to{top:88%}}@keyframes sbSlideUp{0%{transform:translateY(100%)}to{transform:translateY(0)}}#qr-reader{width:100%;height:100%;border:none!important}#qr-reader video{width:100%!important;height:100%!important;object-fit:cover!important;display:block}#qr-reader img,#qr-reader__dashboard,#qr-reader__status_span{display:none!important}@media(max-width:1024px){.sb-conn-footer{flex-direction:column!important;align-items:stretch!important}.sb-conn-footer>button{width:100%!important;justify-content:center!important}.sb-conn-footer>.sb-platforms-menu{width:100%!important}}.sb-start textarea::placeholder,.sb-start input::placeholder{color:var(--sb-text-faint)}.sb-start .sb-sc::-webkit-scrollbar{width:8px}.sb-start .sb-sc::-webkit-scrollbar-thumb{background:rgba(var(--sb-ink),.1);border-radius:99px}.sb-seg-btn{transition:color .2s}.sb-soft-btn{transition:all .15s}.sb-soft-btn:hover{border-color:rgba(var(--sb-ink),.18)!important;color:var(--sb-text-2)!important}.sb-scan-btn:hover{border-color:rgba(var(--sb-green-rgb),.5)!important;background:rgba(var(--sb-green-rgb),.1)!important}.sb-gen-btn:hover{background:var(--sb-orange-hi)!important}.sb-start-card{transition:transform .26s cubic-bezier(.3,.8,.3,1)}@media(max-width:900px){.sb-start-left{border-inline-end:none!important}}@media(max-width:560px){.sb-start-left{padding:30px 22px!important}}body.sb-in-chat #pwa-install-button{display:none!important}body.sb-in-chat #pwa-connection-status{top:calc(var(--sb-bar-h, 64px) + 12px + var(--sb-safe-top, 0px) + var(--sb-bar-extra, 0px))!important}.sb-start button i,.sb-ice-overlay button i{margin-inline-end:0;vertical-align:baseline}:root{--sb-press: .11s cubic-bezier(.2, 0, 0, 1);--sb-settle: .24s cubic-bezier(.2, .7, .3, 1)}button,[role=button],a,label,summary,input[type=checkbox],input[type=radio],.cursor-pointer{touch-action:manipulation;-webkit-tap-highlight-color:transparent}button:not(:disabled):active,[role=button]:not([aria-disabled=true]):active,.cursor-pointer:active{transform:scale(.97);transition:transform var(--sb-press)}button,[role=button]{transition:transform var(--sb-settle)}button:disabled,[aria-disabled=true]{cursor:not-allowed}@media(hover:none){.card-minimal:hover,.wallet-logo:hover,.btn-primary:hover,.btn-secondary:hover,.btn-verify:hover,.lightning-button:hover,.btn-partner-modern:hover,.transfer-item:hover,.file-drop-zone:hover,.project-card:hover .project-card__bg{transform:none;box-shadow:none}}:focus-visible{outline:2px solid rgba(var(--sb-legacy-orange-500-rgb),.75);outline-offset:2px}.header-minimal{box-shadow:inset 0 1px rgba(var(--sb-ink),.05)}.card-minimal{backdrop-filter:blur(14px) saturate(140%);-webkit-backdrop-filter:blur(14px) saturate(140%)}html{font-optical-sizing:auto}h1,.text-6xl,.text-5xl{letter-spacing:-.024em;line-height:1.05}h2,.text-4xl{letter-spacing:-.021em;line-height:1.1}h3,.text-3xl{letter-spacing:-.018em;line-height:1.15}.text-2xl{letter-spacing:-.014em}.text-xl{letter-spacing:-.011em}.text-lg{letter-spacing:-.006em}.text-base,p{letter-spacing:0}.text-sm{letter-spacing:.004em}.text-xs{letter-spacing:.012em}.header-minimal .text-secondary,.chat-input-area .text-secondary,.card-minimal .text-muted{color:var(--sb-motion-text-3);letter-spacing:.01em}@media(prefers-reduced-motion:reduce){.wallet-logos-track,.button,.button:before,.icon-loading,[style*=sbPulse],[style*=sbFlow],[style*=sbNode],[style*=sbScan],[style*=sbTrav],[style*=sbRing],[style*=sbLiveBg],[style*=sbCallPulse],[style*=rmPulse],[style*=vmRing]{animation:none!important}@keyframes sbFadeInPlace{0%{opacity:0}to{opacity:1}}.message-slide,[style*=sbUp],[style*=sbSlideUp],[style*=sbExpand],[style*=ccUp],[style*=ptUp],[style*=wuUp],[style*=rmExp],[style*=sbRow],[style*=sbIn1],[style*=sbIn2]{animation:sbFadeInPlace .16s ease-out both!important;transform:none!important}[style*=vmRec]{animation:vmRecSoft 1.4s ease-in-out infinite!important;transform:none!important}@keyframes vmRecSoft{0%,to{opacity:1}50%{opacity:.4}}.card-minimal:hover,.wallet-logo:hover,.btn-primary:hover,.btn-secondary:hover,.btn-verify:hover,.lightning-button:hover,.btn-partner-modern:hover,.transfer-item:hover,.file-drop-zone:hover,.project-card:hover,.project-card:hover .project-card__bg,.header-minimal .cursor-pointer:hover{transform:none!important}button:not(:disabled):active,[role=button]:active,.cursor-pointer:active{transform:none!important;opacity:.7}.sb-drawer-overlay{transition:opacity .16s ease!important}html,body,.scroll-smooth,.messages-container,.chat-messages-area,.sb-scroll,.track{scroll-behavior:auto!important}}@media(prefers-reduced-transparency:reduce){.header-minimal,.card-minimal,.sb-chat-header{backdrop-filter:none!important;-webkit-backdrop-filter:none!important}.header-minimal{background:var(--sb-motion-surface)!important}.card-minimal{background:var(--sb-motion-raise)!important}}@media(prefers-contrast:more){.card-minimal,.icon-container,.verification-code,.security-shield{background:var(--sb-surface)!important;border-color:rgba(var(--sb-ink),.42)!important}.text-secondary{color:var(--sb-motion-text)!important}.text-muted{color:var(--sb-motion-text-2)!important}:focus-visible{outline-width:3px}}[lang=ar],[lang=fa],[lang=ur]{font-family:Inter,SF Arabic,Geeza Pro,Segoe UI,Tahoma,Noto Naskh Arabic,Noto Sans Arabic,Droid Arabic Naskh,sans-serif}[lang=ur]{font-family:Noto Nastaliq Urdu,Jameel Noori Nastaleeq,Urdu Typesetting,Inter,SF Arabic,Segoe UI,Tahoma,Noto Naskh Arabic,sans-serif;line-height:2}[lang=he]{font-family:Inter,SF Hebrew,Arial Hebrew,Segoe UI,Noto Sans Hebrew,sans-serif}[dir=rtl] code,[dir=rtl] pre,[dir=rtl] .sb-sc{direction:ltr;unicode-bidi:isolate;text-align:start}[dir=rtl] .fa-chevron-left,[dir=rtl] .fa-chevron-right,[dir=rtl] .fa-angle-left,[dir=rtl] .fa-angle-right,[dir=rtl] .fa-arrow-left,[dir=rtl] .fa-arrow-right,[dir=rtl] .fa-caret-left,[dir=rtl] .fa-caret-right,[dir=rtl] .fa-reply,[dir=rtl] .sb-mirror-rtl{transform:scaleX(-1)}[dir=rtl] .translate-x-full{--tw-translate-x: -100%}[dir=rtl] .-translate-x-full{--tw-translate-x: 100%}#pwa-update-banner{backdrop-filter:blur(10px);border-bottom:1px solid rgba(var(--sb-ink),.1);animation:slideDown .3s ease-out}@keyframes slideDown{0%{transform:translateY(-100%);opacity:0}to{transform:translateY(0);opacity:1}}.pwa-notification{backdrop-filter:blur(10px);border:1px solid rgba(var(--sb-ink),.1)}:root{--sb-safe-top: 0px;--sb-bar-extra: 0px;--sb-bar-h: 64px}@media(display-mode:standalone){:root{--sb-safe-top: min(env(safe-area-inset-top, 0px), max(20px, env(safe-area-inset-top, 0px) - 3px));--sb-bar-h: 56px;--sb-bar-extra: 7px}.header-minimal{height:auto}}body.pwa-installed{--sb-safe-top: min(env(safe-area-inset-top, 0px), max(20px, env(safe-area-inset-top, 0px) - 3px));--sb-bar-h: 56px;--sb-bar-extra: 7px}body.pwa-installed .header-minimal{height:auto}.pwa-splash{position:fixed;top:0;left:0;width:100%;height:100%;background:linear-gradient(135deg,var(--sb-legacy-panel) 0%,var(--sb-legacy-splash) 100%);display:flex;flex-direction:column;align-items:center;justify-content:center;z-index:9999;transition:opacity .5s ease-out,visibility .5s ease-out}.pwa-splash.hidden{opacity:0;visibility:hidden}.pwa-splash .logo{width:120px;height:120px;background:linear-gradient(135deg,#ff6b35,#f7941d);border-radius:24px;display:flex;align-items:center;justify-content:center;margin-bottom:24px;animation:pulse-logo 2s infinite}.pwa-splash .logo i{font-size:48px;color:#fff}@keyframes pulse-logo{0%,to{transform:scale(1);box-shadow:0 0 #ff6b3566}50%{transform:scale(1.05);box-shadow:0 0 0 20px #ff6b3500}}.pwa-splash .title{color:#ff6b35;font-size:24px;font-weight:600;margin-bottom:8px}.pwa-splash .subtitle{color:var(--sb-legacy-gray);font-size:14px;margin-bottom:32px}.pwa-splash .loading{width:200px;height:4px;background:#ff6b3533;border-radius:2px;overflow:hidden}.pwa-splash .loading:after{content:"";display:block;width:50%;height:100%;background:linear-gradient(90deg,#ff6b35,#f7941d);border-radius:2px;animation:loading-bar 1.5s ease-in-out infinite}@keyframes loading-bar{0%{transform:translate(-100%)}to{transform:translate(300%)}}.pwa-offline-indicator{position:fixed;bottom:20px;left:50%;transform:translate(-50%);background:#ef4444e6;color:#fff;padding:8px 16px;border-radius:20px;font-size:14px;font-weight:500;backdrop-filter:blur(10px);border:1px solid rgba(239,68,68,.3);animation:fadeInUp .3s ease-out;z-index:1000}.pwa-online-indicator{position:fixed;bottom:20px;left:50%;transform:translate(-50%);background:#22c55ee6;color:#fff;padding:8px 16px;border-radius:20px;font-size:14px;font-weight:500;backdrop-filter:blur(10px);border:1px solid rgba(34,197,94,.3);animation:fadeInUp .3s ease-out;z-index:1000}@keyframes fadeInUp{0%{opacity:0;transform:translate(-50%,20px)}to{opacity:1;transform:translate(-50%)}}@supports (padding: max(0px)){.pwa-safe-area{padding-left:max(16px,env(safe-area-inset-left));padding-right:max(16px,env(safe-area-inset-right));padding-bottom:max(16px,env(safe-area-inset-bottom))}.pwa-safe-area-top{padding-top:max(16px,env(safe-area-inset-top))}}@media(prefers-color-scheme:dark){.pwa-notification{border-color:rgba(var(--sb-ink),.1)}}.pwa-fade-in{animation:fadeIn .3s ease-out}.pwa-slide-up{animation:slideUp .3s ease-out}.pwa-scale-in{animation:scaleIn .3s ease-out}@keyframes fadeIn{0%{opacity:0}to{opacity:1}}@keyframes slideUp{0%{opacity:0;transform:translateY(20px)}to{opacity:1;transform:translateY(0)}}@keyframes scaleIn{0%{opacity:0;transform:scale(.9)}to{opacity:1;transform:scale(1)}}
+*,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness:proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width:0px;--tw-ring-offset-color:#fff;--tw-ring-color:rgba(59,130,246,.5);--tw-ring-offset-shadow:0 0 #0000;--tw-ring-shadow:0 0 #0000;--tw-shadow:0 0 #0000;--tw-shadow-colored:0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }/*! tailwindcss v3.4.17 | MIT License | https://tailwindcss.com*/*,:after,:before{box-sizing:border-box;border:0 solid #e5e7eb}:after,:before{--tw-content:""}:host,html{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:ui-sans-serif,system-ui,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,pre,samp{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dd,dl,figure,h1,h2,h3,h4,h5,h6,hr,p,pre{margin:0}fieldset{margin:0}fieldset,legend{padding:0}menu,ol,ul{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}[role=button],button{cursor:pointer}:disabled{cursor:default}audio,canvas,embed,iframe,img,object,svg,video{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}.\!container{width:100%!important}.container{width:100%}@media(min-width:640px){.\!container{max-width:640px!important}.container{max-width:640px}}@media(min-width:768px){.\!container{max-width:768px!important}.container{max-width:768px}}@media(min-width:1024px){.\!container{max-width:1024px!important}.container{max-width:1024px}}@media(min-width:1280px){.\!container{max-width:1280px!important}.container{max-width:1280px}}@media(min-width:1536px){.\!container{max-width:1536px!important}.container{max-width:1536px}}.pointer-events-none{pointer-events:none}.visible{visibility:visible}.invisible{visibility:hidden}.collapse{visibility:collapse}.static{position:static}.fixed{position:fixed}.absolute{position:absolute}.relative{position:relative}.sticky{position:sticky}.inset-0{inset:0}.bottom-4{bottom:1rem}.end-0{inset-inline-end:0}.end-4{inset-inline-end:1rem}.left-1\/2{left:50%}.left-4{left:1rem}.right-4{right:1rem}.top-0{top:0}.top-1\/2{top:50%}.top-4{top:1rem}.isolate{isolation:isolate}.z-10{z-index:10}.z-30{z-index:30}.z-40{z-index:40}.z-50{z-index:50}.mx-4{margin-left:1rem;margin-right:1rem}.mx-auto{margin-left:auto;margin-right:auto}.my-1{margin-top:.25rem}.mb-1,.my-1{margin-bottom:.25rem}.mb-12{margin-bottom:3rem}.mb-2{margin-bottom:.5rem}.mb-3{margin-bottom:.75rem}.mb-4{margin-bottom:1rem}.mb-5{margin-bottom:1.25rem}.mb-6{margin-bottom:1.5rem}.me-1{margin-inline-end:.25rem}.me-2{margin-inline-end:.5rem}.me-3{margin-inline-end:.75rem}.me-4{margin-inline-end:1rem}.ms-2{margin-inline-start:.5rem}.ms-6{margin-inline-start:1.5rem}.mt-0\.5{margin-top:.125rem}.mt-1{margin-top:.25rem}.mt-20{margin-top:5rem}.mt-4{margin-top:1rem}.mt-6{margin-top:1.5rem}.block{display:block}.inline-block{display:inline-block}.inline{display:inline}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.contents{display:contents}.hidden{display:none}.h-10{height:2.5rem}.h-12{height:3rem}.h-28{height:7rem}.h-8{height:2rem}.h-80{height:20rem}.h-9{height:2.25rem}.max-h-\[80vh\]{max-height:80vh}.min-h-screen{min-height:100vh}.w-10{width:2.5rem}.w-12{width:3rem}.w-28{width:7rem}.w-4{width:1rem}.w-8{width:2rem}.w-full{width:100%}.min-w-\[180px\]{min-width:180px}.max-w-2xl{max-width:42rem}.max-w-3xl{max-width:48rem}.max-w-4xl{max-width:56rem}.max-w-7xl{max-width:80rem}.max-w-\[78vw\]{max-width:78vw}.max-w-lg{max-width:32rem}.max-w-md{max-width:28rem}.max-w-sm{max-width:24rem}.flex-1{flex:1 1 0%}.flex-shrink-0{flex-shrink:0}.shrink{flex-shrink:1}.grow{flex-grow:1}.-translate-x-1\/2{--tw-translate-x:-50%}.-translate-x-1\/2,.-translate-y-1\/2{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.-translate-y-1\/2{--tw-translate-y:-50%}.translate-x-full{--tw-translate-x:100%}.transform,.translate-x-full{transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}@keyframes spin{to{transform:rotate(1turn)}}.animate-spin{animation:spin 1s linear infinite}.cursor-not-allowed{cursor:not-allowed}.cursor-pointer{cursor:pointer}.resize{resize:both}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-6{gap:1.5rem}.space-x-2>:not([hidden])~:not([hidden]){--tw-space-x-reverse:0;margin-right:calc(.5rem*var(--tw-space-x-reverse));margin-left:calc(.5rem*(1 - var(--tw-space-x-reverse)))}.space-x-3>:not([hidden])~:not([hidden]){--tw-space-x-reverse:0;margin-right:calc(.75rem*var(--tw-space-x-reverse));margin-left:calc(.75rem*(1 - var(--tw-space-x-reverse)))}.space-y-1>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.25rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.25rem*var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.5rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem*var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(.75rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem*var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem*var(--tw-space-y-reverse))}.space-y-6>:not([hidden])~:not([hidden]){--tw-space-y-reverse:0;margin-top:calc(1.5rem*(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.5rem*var(--tw-space-y-reverse))}.self-center{align-self:center}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.overflow-y-auto{overflow-y:auto}.break-words{overflow-wrap:break-word}.break-all{word-break:break-all}.rounded{border-radius:.25rem}.rounded-2xl{border-radius:1rem}.rounded-full{border-radius:9999px}.rounded-lg{border-radius:.5rem}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-blue-500\/20{border-color:#3b82f633}.border-gray-500\/20{border-color:#6b728033}.border-gray-600\/30{border-color:#4b55634d}.border-green-500\/20{border-color:#22c55e33}.border-orange-500\/20{border-color:#f9731633}.border-purple-500\/20{border-color:#a855f733}.border-purple-500\/30{border-color:#a855f74d}.border-red-500\/20{border-color:#ef444433}.border-yellow-500\/20{border-color:#eab30833}.bg-black\/20{background-color:#0003}.bg-black\/30{background-color:#0000004d}.bg-black\/50{background-color:#00000080}.bg-black\/80{background-color:#000c}.bg-blue-500{--tw-bg-opacity:1;background-color:rgb(59 130 246/var(--tw-bg-opacity,1))}.bg-blue-500\/10{background-color:#3b82f61a}.bg-blue-500\/90{background-color:#3b82f6e6}.bg-emerald-500{--tw-bg-opacity:1;background-color:rgb(16 185 129/var(--tw-bg-opacity,1))}.bg-gray-500\/10{background-color:#6b72801a}.bg-gray-500\/20{background-color:#6b728033}.bg-gray-600{--tw-bg-opacity:1;background-color:rgb(75 85 99/var(--tw-bg-opacity,1))}.bg-gray-700{--tw-bg-opacity:1;background-color:rgb(55 65 81/var(--tw-bg-opacity,1))}.bg-gray-700\/50{background-color:#37415180}.bg-gray-800{--tw-bg-opacity:1;background-color:rgb(31 41 55/var(--tw-bg-opacity,1))}.bg-gray-800\/50{background-color:#1f293780}.bg-gray-900\/30{background-color:#1118274d}.bg-green-500{--tw-bg-opacity:1;background-color:rgb(34 197 94/var(--tw-bg-opacity,1))}.bg-green-500\/10{background-color:#22c55e1a}.bg-green-500\/90{background-color:#22c55ee6}.bg-orange-500\/10{background-color:#f973161a}.bg-purple-500\/10{background-color:#a855f71a}.bg-red-500{--tw-bg-opacity:1;background-color:rgb(239 68 68/var(--tw-bg-opacity,1))}.bg-red-500\/10{background-color:#ef44441a}.bg-red-500\/20{background-color:#ef444433}.bg-red-900\/50{background-color:#7f1d1d80}.bg-white\/20{background-color:#fff3}.bg-yellow-500{--tw-bg-opacity:1;background-color:rgb(234 179 8/var(--tw-bg-opacity,1))}.bg-yellow-500\/10{background-color:#eab3081a}.bg-yellow-500\/90{background-color:#eab308e6}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-6{padding:1.5rem}.px-2{padding-left:.5rem;padding-right:.5rem}.px-3{padding-left:.75rem;padding-right:.75rem}.px-4{padding-left:1rem;padding-right:1rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-1\.5{padding-top:.375rem;padding-bottom:.375rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-4{padding-top:1rem;padding-bottom:1rem}.text-center{text-align:center}.text-start{text-align:start}.font-mono{font-family:ui-monospace,SFMono-Regular,Menlo,Monaco,Consolas,Liberation Mono,Courier New,monospace}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-\[11px\]{font-size:11px}.text-\[13px\]{font-size:13px}.text-\[3rem\]{font-size:3rem}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xl{font-size:1.25rem;line-height:1.75rem}.text-xs{font-size:.75rem;line-height:1rem}.font-bold{font-weight:700}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.lowercase{text-transform:lowercase}.italic{font-style:italic}.leading-none{line-height:1}.leading-relaxed{line-height:1.625}.tracking-\[0\.3em\]{letter-spacing:.3em}.tracking-wide{letter-spacing:.025em}.text-amber-300{--tw-text-opacity:1;color:rgb(252 211 77/var(--tw-text-opacity,1))}.text-black{--tw-text-opacity:1;color:rgb(0 0 0/var(--tw-text-opacity,1))}.text-blue-200{--tw-text-opacity:1;color:rgb(191 219 254/var(--tw-text-opacity,1))}.text-blue-300{--tw-text-opacity:1;color:rgb(147 197 253/var(--tw-text-opacity,1))}.text-blue-400{--tw-text-opacity:1;color:rgb(96 165 250/var(--tw-text-opacity,1))}.text-blue-500{--tw-text-opacity:1;color:rgb(59 130 246/var(--tw-text-opacity,1))}.text-gray-200{--tw-text-opacity:1;color:rgb(229 231 235/var(--tw-text-opacity,1))}.text-gray-300{--tw-text-opacity:1;color:rgb(209 213 219/var(--tw-text-opacity,1))}.text-gray-400{--tw-text-opacity:1;color:rgb(156 163 175/var(--tw-text-opacity,1))}.text-gray-500{--tw-text-opacity:1;color:rgb(107 114 128/var(--tw-text-opacity,1))}.text-green-400{--tw-text-opacity:1;color:rgb(74 222 128/var(--tw-text-opacity,1))}.text-green-500{--tw-text-opacity:1;color:rgb(34 197 94/var(--tw-text-opacity,1))}.text-orange-200{--tw-text-opacity:1;color:rgb(254 215 170/var(--tw-text-opacity,1))}.text-orange-300{--tw-text-opacity:1;color:rgb(253 186 116/var(--tw-text-opacity,1))}.text-orange-400{--tw-text-opacity:1;color:rgb(251 146 60/var(--tw-text-opacity,1))}.text-orange-500{--tw-text-opacity:1;color:rgb(249 115 22/var(--tw-text-opacity,1))}.text-purple-300{--tw-text-opacity:1;color:rgb(216 180 254/var(--tw-text-opacity,1))}.text-purple-400{--tw-text-opacity:1;color:rgb(192 132 252/var(--tw-text-opacity,1))}.text-red-400{--tw-text-opacity:1;color:rgb(248 113 113/var(--tw-text-opacity,1))}.text-red-500{--tw-text-opacity:1;color:rgb(239 68 68/var(--tw-text-opacity,1))}.text-sky-300{--tw-text-opacity:1;color:rgb(125 211 252/var(--tw-text-opacity,1))}.text-white{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.text-white\/10{color:#ffffff1a}.text-yellow-400{--tw-text-opacity:1;color:rgb(250 204 21/var(--tw-text-opacity,1))}.text-yellow-600{--tw-text-opacity:1;color:rgb(202 138 4/var(--tw-text-opacity,1))}.line-through{text-decoration-line:line-through}.placeholder-gray-500::-moz-placeholder{--tw-placeholder-opacity:1;color:rgb(107 114 128/var(--tw-placeholder-opacity,1))}.placeholder-gray-500::placeholder{--tw-placeholder-opacity:1;color:rgb(107 114 128/var(--tw-placeholder-opacity,1))}.opacity-0{opacity:0}.opacity-90{opacity:.9}.shadow{--tw-shadow:0 1px 3px 0 rgba(0,0,0,.1),0 1px 2px -1px rgba(0,0,0,.1);--tw-shadow-colored:0 1px 3px 0 var(--tw-shadow-color),0 1px 2px -1px var(--tw-shadow-color)}.shadow,.shadow-2xl{box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.shadow-2xl{--tw-shadow:0 25px 50px -12px rgba(0,0,0,.25);--tw-shadow-colored:0 25px 50px -12px var(--tw-shadow-color)}.shadow-lg{--tw-shadow:0 10px 15px -3px rgba(0,0,0,.1),0 4px 6px -4px rgba(0,0,0,.1);--tw-shadow-colored:0 10px 15px -3px var(--tw-shadow-color),0 4px 6px -4px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow,0 0 #0000),var(--tw-ring-shadow,0 0 #0000),var(--tw-shadow)}.outline{outline-style:solid}.ring{--tw-ring-offset-shadow:var(--tw-ring-inset) 0 0 0 var(--tw-ring-offset-width) var(--tw-ring-offset-color);--tw-ring-shadow:var(--tw-ring-inset) 0 0 0 calc(3px + var(--tw-ring-offset-width)) var(--tw-ring-color);box-shadow:var(--tw-ring-offset-shadow),var(--tw-ring-shadow),var(--tw-shadow,0 0 #0000)}.blur{--tw-blur:blur(8px)}.blur,.filter{filter:var(--tw-blur) var(--tw-brightness) var(--tw-contrast) var(--tw-grayscale) var(--tw-hue-rotate) var(--tw-invert) var(--tw-saturate) var(--tw-sepia) var(--tw-drop-shadow)}.backdrop-blur-md{--tw-backdrop-blur:blur(12px)}.backdrop-blur-md,.backdrop-blur-sm{-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.backdrop-blur-sm{--tw-backdrop-blur:blur(4px)}.backdrop-filter{-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,-webkit-backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter,-webkit-backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-all{transition-property:all;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-opacity{transition-property:opacity;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-transform{transition-property:transform;transition-timing-function:cubic-bezier(.4,0,.2,1)}.duration-150,.transition-transform{transition-duration:.15s}.duration-200{transition-duration:.2s}.duration-300{transition-duration:.3s}.duration-500{transition-duration:.5s}.ease-in-out{transition-timing-function:cubic-bezier(.4,0,.2,1)}.ease-out{transition-timing-function:cubic-bezier(0,0,.2,1)}.\[checksum\:4\]{checksum:4}.\[data\:variable\]{data:variable}.\[name\:4\]{name:4}.\[size\:4\]{size:4}.hover\:bg-blue-600:hover{--tw-bg-opacity:1;background-color:rgb(37 99 235/var(--tw-bg-opacity,1))}.hover\:bg-emerald-600:hover{--tw-bg-opacity:1;background-color:rgb(5 150 105/var(--tw-bg-opacity,1))}.hover\:bg-gray-500:hover{--tw-bg-opacity:1;background-color:rgb(107 114 128/var(--tw-bg-opacity,1))}.hover\:bg-gray-700\/40:hover{background-color:#37415166}.hover\:bg-gray-700\/50:hover{background-color:#37415180}.hover\:bg-red-500\/20:hover{background-color:#ef444433}.hover\:bg-red-500\/30:hover{background-color:#ef44444d}.hover\:bg-white\/30:hover{background-color:#ffffff4d}.hover\:text-gray-200:hover{--tw-text-opacity:1;color:rgb(229 231 235/var(--tw-text-opacity,1))}.hover\:text-gray-700:hover{--tw-text-opacity:1;color:rgb(55 65 81/var(--tw-text-opacity,1))}.hover\:text-green-300:hover{--tw-text-opacity:1;color:rgb(134 239 172/var(--tw-text-opacity,1))}.hover\:text-green-400:hover{--tw-text-opacity:1;color:rgb(74 222 128/var(--tw-text-opacity,1))}.hover\:text-red-300:hover{--tw-text-opacity:1;color:rgb(252 165 165/var(--tw-text-opacity,1))}.hover\:text-white:hover{--tw-text-opacity:1;color:rgb(255 255 255/var(--tw-text-opacity,1))}.focus\:border-purple-400:focus{--tw-border-opacity:1;border-color:rgb(192 132 252/var(--tw-border-opacity,1))}.focus\:border-purple-500\/40:focus{border-color:#a855f766}.focus\:outline-none:focus{outline:2px solid transparent;outline-offset:2px}.active\:bg-gray-700\/60:active{background-color:#37415199}.disabled\:cursor-not-allowed:disabled{cursor:not-allowed}.disabled\:opacity-60:disabled{opacity:.6}.group:hover .group-hover\:scale-105{--tw-scale-x:1.05;--tw-scale-y:1.05;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.group:hover .group-hover\:opacity-100{opacity:1}@media(min-width:640px){.sm\:block{display:block}.sm\:inline{display:inline}.sm\:flex{display:flex}.sm\:py-2\.5{padding-top:.625rem;padding-bottom:.625rem}}@media(min-width:768px){.md\:h-\[32rem\]{height:32rem}}.fa{font-family:var(--fa-style-family,"Font Awesome 6 Free");font-weight:var(--fa-style,900)}.fa,.fa-brands,.fa-regular,.fa-solid,.fab,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family:"Font Awesome 6 Brands"}.fa-solid,.fas{font-weight:900}.fa-regular,.far,.fa-brands,.fab{font-weight:400}.fa-spin{animation-name:fa-spin;animation-duration:var(--fa-animation-duration,2s);animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-timing-function:var(--fa-animation-timing,linear)}.fa-pulse,.fa-spin-pulse{animation-name:fa-spin;animation-duration:var(--fa-animation-duration,1s);animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-timing-function:var(--fa-animation-timing,steps(8))}@keyframes fa-spin{0%{transform:rotate(0)}to{transform:rotate(1turn)}}@media(prefers-reduced-motion:reduce){.fa-pulse,.fa-spin,.fa-spin-pulse{animation-delay:-1ms;animation-duration:1ms;animation-iteration-count:1}}@font-face{font-family:"Font Awesome 6 Brands";font-style:normal;font-weight:400;font-display:block;src:url(/assets/fontawesome/webfonts/fa-brands-400.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 6 Free";font-style:normal;font-weight:400;font-display:block;src:url(/assets/fontawesome/webfonts/fa-regular-400.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 6 Free";font-style:normal;font-weight:900;font-display:block;src:url(/assets/fontawesome/webfonts/fa-solid-900.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 5 Brands";font-display:block;font-weight:400;src:url(/assets/fontawesome/webfonts/fa-brands-400.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:900;src:url(/assets/fontawesome/webfonts/fa-solid-900.subset.woff2) format("woff2")}@font-face{font-family:"Font Awesome 5 Free";font-display:block;font-weight:400;src:url(/assets/fontawesome/webfonts/fa-regular-400.subset.woff2) format("woff2")}@font-face{font-family:FontAwesome;font-display:block;src:url(/assets/fontawesome/webfonts/fa-solid-900.subset.woff2) format("woff2")}@font-face{font-family:FontAwesome;font-display:block;src:url(/assets/fontawesome/webfonts/fa-brands-400.subset.woff2) format("woff2")}@font-face{font-family:FontAwesome;font-display:block;src:url(/assets/fontawesome/webfonts/fa-regular-400.subset.woff2) format("woff2");unicode-range:u+f003,u+f006,u+f014,u+f016-f017,u+f01a-f01b,u+f01d,u+f022,u+f03e,u+f044,u+f046,u+f05c-f05d,u+f06e,u+f070,u+f087-f088,u+f08a,u+f094,u+f096-f097,u+f09d,u+f0a0,u+f0a2,u+f0a4-f0a7,u+f0c5,u+f0c7,u+f0e5-f0e6,u+f0eb,u+f0f6-f0f8,u+f10c,u+f114-f115,u+f118-f11a,u+f11c-f11d,u+f133,u+f147,u+f14e,u+f150-f152,u+f185-f186,u+f18e,u+f190-f192,u+f196,u+f1c1-f1c9,u+f1d9,u+f1db,u+f1e3,u+f1ea,u+f1f7,u+f1f9,u+f20a,u+f247-f248,u+f24a,u+f24d,u+f255-f25b,u+f25d,u+f271-f274,u+f278,u+f27b,u+f28c,u+f28e,u+f29c,u+f2b5,u+f2b7,u+f2ba,u+f2bc,u+f2be,u+f2c0-f2c1,u+f2c3,u+f2d0,u+f2d2,u+f2d4,u+f2dc}.fa-android:before{content:"\f17b"}.fa-angle-left:before{content:"\f104"}.fa-angle-right:before{content:"\f105"}.fa-apple:before{content:"\f179"}.fa-arrow-down:before{content:"\f063"}.fa-arrow-left:before{content:"\f060"}.fa-arrow-right:before{content:"\f061"}.fa-arrow-up:before{content:"\f062"}.fa-arrow-up-from-bracket:before{content:"\e09a"}.fa-ban:before{content:"\f05e"}.fa-bolt:before{content:"\f0e7"}.fa-camera:before{content:"\f030"}.fa-caret-left:before{content:"\f0d9"}.fa-caret-right:before{content:"\f0da"}.fa-check:before{content:"\f00c"}.fa-check-circle:before{content:"\f058"}.fa-check-double:before{content:"\f560"}.fa-chevron-down:before{content:"\f078"}.fa-chevron-left:before{content:"\f053"}.fa-chevron-right:before{content:"\f054"}.fa-chrome:before{content:"\f268"}.fa-circle:before{content:"\f111"}.fa-circle-notch:before{content:"\f1ce"}.fa-clock:before{content:"\f017"}.fa-code:before{content:"\f121"}.fa-cog:before{content:"\f013"}.fa-cogs:before{content:"\f085"}.fa-comments:before{content:"\f086"}.fa-copy:before{content:"\f0c5"}.fa-download:before{content:"\f019"}.fa-edge:before{content:"\f282"}.fa-exchange-alt:before{content:"\f362"}.fa-exclamation-triangle:before{content:"\f071"}.fa-eye:before{content:"\f06e"}.fa-eye-slash:before{content:"\f070"}.fa-file-arrow-down:before{content:"\f56d"}.fa-fingerprint:before{content:"\f577"}.fa-firefox-browser:before{content:"\e007"}.fa-folder-open:before{content:"\f07c"}.fa-globe:before{content:"\f0ac"}.fa-info:before{content:"\f129"}.fa-info-circle:before{content:"\f05a"}.fa-key:before{content:"\f084"}.fa-lightbulb:before{content:"\f0eb"}.fa-link:before{content:"\f0c1"}.fa-linux:before{content:"\f17c"}.fa-lock:before{content:"\f023"}.fa-lock-open:before{content:"\f3c1"}.fa-microphone-slash:before{content:"\f131"}.fa-network-wired:before{content:"\f6ff"}.fa-opera:before{content:"\f26a"}.fa-paper-plane:before{content:"\f1d8"}.fa-paperclip:before{content:"\f0c6"}.fa-paste:before{content:"\f0ea"}.fa-pen:before{content:"\f304"}.fa-play-circle:before{content:"\f144"}.fa-plus:before{content:"+"}.fa-power-off:before{content:"\f011"}.fa-puzzle-piece:before{content:"\f12e"}.fa-qrcode:before{content:"\f029"}.fa-question-circle:before{content:"\f059"}.fa-reply:before{content:"\f3e5"}.fa-right-left:before{content:"\f362"}.fa-rocket:before{content:"\f135"}.fa-safari:before{content:"\f267"}.fa-share:before{content:"\f064"}.fa-shield-alt:before{content:"\f3ed"}.fa-shield-halved:before{content:"\f3ed"}.fa-signature:before{content:"\f5b7"}.fa-sliders-h:before{content:"\f1de"}.fa-spinner:before{content:"\f110"}.fa-stopwatch:before{content:"\f2f2"}.fa-sync-alt:before{content:"\f2f1"}.fa-times:before{content:"\f00d"}.fa-times-circle:before{content:"\f057"}.fa-trash-can:before{content:"\f2ed"}.fa-triangle-exclamation:before{content:"\f071"}.fa-unlock-alt:before{content:"\f13e"}.fa-user:before{content:"\f007"}.fa-vial:before{content:"\f492"}.fa-windows:before{content:"\f17a"}.fa-xmark:before{content:"\f00d"}@font-face{font-family:Inter;font-style:normal;font-weight:100 900;font-display:swap;src:url(/assets/fonts/inter/files/inter-latin-ext.woff2) format("woff2");unicode-range:U+0100-02BA,U+02BD-02C5,U+02C7-02CC,U+02CE-02D7,U+02DD-02FF,U+0304,U+0308,U+0329,U+1D00-1DBF,U+1E00-1E9F,U+1EF2-1EFF,U+2020,U+20A0-20AB,U+20AD-20C0,U+2113,U+2C60-2C7F,U+A720-A7FF}@font-face{font-family:Inter;font-style:normal;font-weight:100 900;font-display:swap;src:url(/assets/fonts/inter/files/inter-latin.woff2) format("woff2");unicode-range:U+0000-00FF,U+0131,U+0152-0153,U+02BB-02BC,U+02C6,U+02DA,U+02DC,U+0304,U+0308,U+0329,U+2000-206F,U+20AC,U+2122,U+2191,U+2193,U+2212,U+2215,U+FEFF,U+FFFD}:root{color-scheme:dark;--sb-ink: 255, 255, 255;--sb-bg-deepest: #0a0a0c;--sb-bg-deep: #0c0c0e;--sb-bg: #0f0f11;--sb-surface: #141416;--sb-surface-2: #1a1a1f;--sb-surface-warm: #201416;--sb-surface-3: #26262b;--sb-surface-4: #2a2a30;--sb-surface-5: #3f3f47;--sb-grad-1: #15151b;--sb-grad-2: #1d1a24;--sb-grad-3: #161620;--sb-text-1: #f4f4f6;--sb-text-2: #e8e8eb;--sb-text-3: #d7d7db;--sb-text-4: #cfcfd4;--sb-text-5: #b3b3ba;--sb-text-5b: #a7a7b0;--sb-text-6: #9a9aa2;--sb-text-7: #8a8a92;--sb-text-8: #7b7b83;--sb-text-9: #6b6b73;--sb-text-faint: #56565e;--sb-text-code: #c9ccd8;--sb-green: #3ecf8e;--sb-green-soft: #8fe0bb;--sb-green-muted: #a8b8ae;--sb-orange: #f0892a;--sb-orange-hi: #ff9637;--sb-orange-2: #f0a455;--sb-orange-3: #f0b072;--sb-orange-4: #e8b27a;--sb-red: #e5727a;--sb-red-soft: #f0a6ab;--sb-yellow: #e3c84e;--sb-yellow-2: #e3b341;--sb-on-accent: #1a0f04;--sb-on-green: #06231a;--sb-on-green-2: #08160e;--sb-diag-text: #d8cfc1;--sb-diag-label: #8f8b84;--sb-diag-stroke: #6b6760;--sb-diag-dim: #85817b;--sb-legacy-1: #1b1c1b;--sb-legacy-2: #222322;--sb-legacy-3: #1f201f;--sb-legacy-panel: #1a1a1a;--sb-legacy-body: #2a2b2a;--sb-legacy-body-2: #252625;--sb-legacy-bar-rgb: 35, 36, 35;--sb-legacy-slate-rgb: 55, 65, 81;--sb-legacy-green-rgb: 52, 211, 153;--sb-legacy-header: #232323;--sb-legacy-table: #1c1c1c;--sb-orange-solid: #f0892a;--sb-green-solid: #3ecf8e;--sb-red-solid: #e5727a;--sb-red-strong-solid: #e5484d;--sb-yellow-solid: #e3c84e;--sb-yellow-2-solid: #e3b341;--sb-green-rgb: 62, 207, 142;--sb-orange-rgb: 240, 137, 42;--sb-red-rgb: 229, 114, 122;--sb-red-strong-rgb: 229, 72, 77;--sb-yellow-rgb: 227, 200, 78;--sb-yellow-2-rgb: 227, 179, 65;--sb-blue-rgb: 96, 165, 250;--sb-bg-rgb: 18, 18, 20;--sb-surface-rgb: 20, 20, 22;--sb-text-7-rgb: 138, 138, 146;--sb-text-9-rgb: 107, 107, 115;--sb-scrim-rgb: 6, 6, 8;--sb-legacy-orange: #fb923c;--sb-legacy-green: #34d399;--sb-legacy-red: #f87171;--sb-legacy-yellow: #fbbf24;--sb-legacy-purple: #a78bfa;--sb-legacy-blue: #60a5fa;--sb-legacy-gray: #9ca3af;--sb-legacy-cyan: #22d3ee;--sb-legacy-text: #f1f5f9;--sb-legacy-text-2: #b6b6b6;--sb-legacy-text-3: #818080;--sb-legacy-body-text: #c5c7ce;--sb-legacy-border-rgb: 75, 85, 99;--sb-legacy-fill-rgb: 42, 43, 42;--sb-legacy-scroll-rgb: 156, 163, 175;--sb-legacy-orange-500: #f97316;--sb-legacy-orange-500-rgb: 249, 115, 22;--sb-legacy-orange-600: #ea580c;--sb-legacy-amber-500: #f59e0b;--sb-legacy-amber-600: #d97706;--sb-legacy-amber-700: #b45309;--sb-legacy-red-500: #ef4444;--sb-legacy-red-600: #dc2626;--sb-legacy-blue-500: #3b82f6;--sb-legacy-emerald-500: #10b981;--sb-legacy-gray-500: #6b7280;--sb-legacy-blue-rgb: 59, 130, 246;--sb-legacy-emerald-rgb: 16, 185, 129;--sb-legacy-amber-rgb: 245, 158, 11;--sb-legacy-raise-1: #3a3b3a;--sb-legacy-raise-2: #4a4b4a;--sb-legacy-splash: #2d2d2d;--sb-motion-surface: #18181a;--sb-motion-raise: #202022;--sb-motion-text: #e4e4e8;--sb-motion-text-2: #c8c8cf;--sb-motion-text-3: #c3c3c9;--sb-legacy-ground: #07090d;--sb-shadow-rgb: 0, 0, 0;--sb-shadow-k: 1}:root[data-theme=light]{color-scheme:light;--sb-ink: 0, 0, 0;--sb-bg-deepest: #e7e7ea;--sb-bg-deep: #eff0f2;--sb-bg: #f6f7f8;--sb-surface: #ffffff;--sb-surface-2: #f2f3f5;--sb-surface-warm: #fdeced;--sb-surface-3: #e7e8ec;--sb-surface-4: #e0e1e6;--sb-surface-5: #cfd0d7;--sb-grad-1: #f1f1f5;--sb-grad-2: #eae7f0;--sb-grad-3: #eeeef4;--sb-text-1: #0e0e12;--sb-text-2: #1b1b20;--sb-text-3: #26262c;--sb-text-4: #333339;--sb-text-5: #4a4a52;--sb-text-5b: #52525b;--sb-text-6: #56565f;--sb-text-7: #63636c;--sb-text-8: #6f6f78;--sb-text-9: #7c7c85;--sb-text-faint: #85858f;--sb-text-code: #2f3340;--sb-green: #0a8657;--sb-green-soft: #0e7a52;--sb-green-muted: #4f6259;--sb-orange: #b05c08;--sb-orange-hi: #ff9637;--sb-orange-2: #f0a455;--sb-orange-3: #96550f;--sb-orange-4: #8d5417;--sb-red: #c62f38;--sb-red-soft: #b8434c;--sb-yellow: #7d6400;--sb-yellow-2: #8a6c00;--sb-on-accent: #1a0f04;--sb-on-green: #06231a;--sb-on-green-2: #08160e;--sb-diag-text: #35302a;--sb-diag-label: #6a665f;--sb-diag-stroke: #a9a49b;--sb-diag-dim: #75716b;--sb-legacy-1: #ffffff;--sb-legacy-2: #f4f5f7;--sb-legacy-3: #ffffff;--sb-legacy-panel: #ffffff;--sb-legacy-body: #f6f7f8;--sb-legacy-body-2: #f1f2f4;--sb-legacy-bar-rgb: 250, 250, 251;--sb-legacy-slate-rgb: 226, 228, 233;--sb-legacy-green-rgb: 52, 211, 153;--sb-legacy-header: #ffffff;--sb-legacy-table: #f4f5f7;--sb-orange-solid: #f0892a;--sb-green-solid: #3ecf8e;--sb-red-solid: #e5727a;--sb-red-strong-solid: #e5484d;--sb-yellow-solid: #e3c84e;--sb-yellow-2-solid: #e3b341;--sb-green-rgb: 62, 207, 142;--sb-orange-rgb: 240, 137, 42;--sb-red-rgb: 229, 114, 122;--sb-red-strong-rgb: 229, 72, 77;--sb-yellow-rgb: 227, 200, 78;--sb-yellow-2-rgb: 227, 179, 65;--sb-blue-rgb: 29, 100, 200;--sb-bg-rgb: 246, 247, 248;--sb-surface-rgb: 255, 255, 255;--sb-text-7-rgb: 99, 99, 108;--sb-text-9-rgb: 124, 124, 133;--sb-scrim-rgb: 24, 26, 34;--sb-legacy-orange: #b05c08;--sb-legacy-green: #0a8657;--sb-legacy-red: #c62f38;--sb-legacy-yellow: #8a6c00;--sb-legacy-purple: #6d45d9;--sb-legacy-blue: #1d64c8;--sb-legacy-gray: #63636c;--sb-legacy-cyan: #0e7490;--sb-legacy-text: #0e0e12;--sb-legacy-text-2: #4a4a52;--sb-legacy-text-3: #6f6f78;--sb-legacy-body-text: #333339;--sb-legacy-border-rgb: 148, 155, 168;--sb-legacy-fill-rgb: 244, 245, 247;--sb-legacy-scroll-rgb: 120, 126, 138;--sb-legacy-orange-500: #b05c08;--sb-legacy-orange-500-rgb: 249, 115, 22;--sb-legacy-orange-600: #9c5007;--sb-legacy-amber-500: #8a6c00;--sb-legacy-amber-600: #7a5f00;--sb-legacy-amber-700: #6a5200;--sb-legacy-red-500: #c62f38;--sb-legacy-red-600: #b0212a;--sb-legacy-blue-500: #1d64c8;--sb-legacy-emerald-500: #0a8657;--sb-legacy-gray-500: #63636c;--sb-legacy-blue-rgb: 59, 130, 246;--sb-legacy-emerald-rgb: 16, 185, 129;--sb-legacy-amber-rgb: 245, 158, 11;--sb-legacy-raise-1: #eceef1;--sb-legacy-raise-2: #e0e2e7;--sb-legacy-splash: #e7e8ec;--sb-motion-surface: #ffffff;--sb-motion-raise: #f2f3f5;--sb-motion-text: #1b1b20;--sb-motion-text-2: #333339;--sb-motion-text-3: #3a3a41;--sb-legacy-ground: #eef0f2;--sb-shadow-rgb: 16, 18, 27;--sb-shadow-k: .26}@media(prefers-color-scheme:light){:root:not([data-theme]){color-scheme:light;--sb-ink: 0, 0, 0;--sb-bg-deepest: #e7e7ea;--sb-bg-deep: #eff0f2;--sb-bg: #f6f7f8;--sb-surface: #ffffff;--sb-surface-2: #f2f3f5;--sb-surface-3: #e7e8ec;--sb-surface-4: #e0e1e6;--sb-surface-5: #cfd0d7;--sb-text-1: #0e0e12;--sb-text-2: #1b1b20;--sb-text-3: #26262c;--sb-text-4: #333339;--sb-text-5: #4a4a52;--sb-text-6: #56565f;--sb-text-7: #63636c;--sb-text-8: #6f6f78;--sb-text-9: #7c7c85;--sb-text-faint: #85858f;--sb-green: #0a8657;--sb-green-rgb: 10, 134, 87;--sb-orange: #b05c08;--sb-orange-rgb: 176, 92, 8}}:root[data-theme=light] .text-white{color:#1b1b20}:root[data-theme=light] .text-gray-200{color:#333339}:root[data-theme=light] .text-gray-400{color:#63636c}:root[data-theme=light] .text-gray-500{color:#6f6f78}:root[data-theme=light] .placeholder-gray-500::placeholder{color:#85858f}:root[data-theme=light] .text-white\/10{color:#00000014}:root[data-theme=light] .bg-gray-700\/40{background-color:#0000000a}:root[data-theme=light] .bg-gray-700\/50{background-color:#0000000d}:root[data-theme=light] .bg-gray-700\/60{background-color:#0000000f}:root[data-theme=light] .bg-gray-900\/30{background-color:#0000000a}:root[data-theme=light] .bg-black\/20{background-color:#0000000a}:root[data-theme=light] .bg-black\/30{background-color:#ffffffd1}:root[data-theme=light] .text-green-300,:root[data-theme=light] .text-green-400,:root[data-theme=light] .text-green-500{color:#0a8657}:root[data-theme=light] .text-red-300,:root[data-theme=light] .text-red-400,:root[data-theme=light] .text-red-500{color:#c62f38}:root[data-theme=light] .text-yellow-400{color:#7d6400}:root[data-theme=light] .text-orange-400,:root[data-theme=light] .text-orange-500{color:#b05c08}:root[data-theme=light] .text-purple-300,:root[data-theme=light] .text-purple-400{color:#6d45d9}:root[data-theme=light] .text-blue-400,:root[data-theme=light] .text-blue-500{color:#1d64c8}:root[data-theme=light] .text-sky-300{color:#0b6fa8}:root[data-theme=light] .text-amber-300{color:#8a6c00}:root[data-theme=light] .border-purple-400{border-color:#6d45d9}:root.sb-theme-switching,:root.sb-theme-switching *{transition:background-color .2s ease,border-color .2s ease,color .2s ease!important}@media(prefers-reduced-motion:reduce){:root.sb-theme-switching,:root.sb-theme-switching *{transition:none!important}}*{font-family:Inter,-apple-system,BlinkMacSystemFont,sans-serif}body{background:var(--sb-legacy-body);overflow-x:hidden}.bg-custom-bg{background-color:var(--sb-legacy-body-2)!important}.bg-my{background-color:var(--sb-legacy-panel)}.bg-header{background-color:var(--sb-legacy-header)!important}.minimal-bg{background:linear-gradient(135deg,var(--sb-legacy-panel) 0%,var(--sb-legacy-body) 100%);position:relative;min-height:100vh}.card-minimal.rounded-xl.p-6.cursor-pointer.group.flex-1.create{background-color:rgba(var(--sb-blue-rgb),.03)}.card-minimal.rounded-xl.p-6.cursor-pointer.group.flex-1.join{background-color:rgba(var(--sb-legacy-green-rgb),.03)}tr.bg-black-table{background-color:var(--sb-legacy-table)}.text-primary{color:var(--sb-legacy-text)}.text-secondary{color:var(--sb-legacy-text-2)}.text-muted{color:var(--sb-legacy-text-3)}.accent-orange{color:var(--sb-legacy-orange)}.accent-green{color:var(--sb-legacy-green)}.accent-red{color:var(--sb-legacy-red)}.accent-yellow{color:var(--sb-legacy-yellow)}.accent-purple{color:var(--sb-legacy-purple)}.accent-blue{color:var(--sb-legacy-blue)}.accent-gray{color:var(--sb-legacy-gray)}.accent-cyan{color:var(--sb-legacy-cyan)}.custom-scrollbar::-webkit-scrollbar-track{background:rgba(var(--sb-legacy-fill-rgb),.3);border-radius:3px}.custom-scrollbar::-webkit-scrollbar-thumb{background:rgba(var(--sb-legacy-border-rgb),.5);border-radius:3px}.custom-scrollbar::-webkit-scrollbar-thumb:hover{background:rgba(var(--sb-legacy-border-rgb),.7)}.scroll-smooth{scroll-behavior:smooth}.messages-container,.chat-messages-area{scroll-behavior:smooth;scroll-padding-bottom:20px}.chat-messages-area>div:first-child{scroll-behavior:smooth;scroll-padding-bottom:20px}[class*=chat]{scroll-behavior:smooth}@media(max-width:640px){.header-minimal{padding:0 8px}.icon-container{min-width:32px;min-height:32px}.verification-code{font-size:.875rem;padding:6px 8px}.header-minimal .max-w-7xl{padding-inline:8px}.header-minimal button{min-width:32px;min-height:32px}}@media(min-width:641px)and (max-width:1024px){.header-minimal .max-w-7xl{padding-inline:16px}}.card{position:relative;border-radius:12px;overflow:hidden;transition:transform .3s ease}.card:before{content:"";position:absolute;inset:0;border-radius:12px;padding:2px;background:radial-gradient(circle at var(--x, 50%) var(--y, 50%),var(--color),transparent 80%);opacity:0;transition:opacity .4s;-webkit-mask:linear-gradient(#fff 0 0) content-box,linear-gradient(#fff 0 0);-webkit-mask-composite:xor;mask-composite:exclude}.card.active-glow:before{opacity:1}.card:after{content:"";position:absolute;inset:3px;border-radius:10px;z-index:1}:root{--gap: 1.25rem;--speed: .55s cubic-bezier(.25, .46, .45, .94);--closed: 5rem;--open: 30rem;--accent: var(--sb-legacy-orange)}*{margin:0;padding:0;box-sizing:border-box}body{font-family:Inter,sans-serif;background:var(--sb-legacy-ground);color:var(--sb-legacy-body-text)}.head{max-width:1400px;margin:auto;padding:70px 20px 40px;display:flex;justify-content:space-between;align-items:flex-end;gap:2rem}.nav-btn{width:2.5rem;height:2.5rem;border:none;border-radius:50%;background:rgba(var(--sb-ink),.12);color:#fff;font-size:1.5rem;display:flex;align-items:center;justify-content:center;cursor:pointer;transition:.3s}.nav-btn:hover{background:var(--accent)}.nav-btn:disabled{opacity:.3;cursor:default}.slider{max-width:1400px;margin:auto;overflow:hidden}.controls{display:flex;flex-direction:row;gap:.5rem}.track{display:flex;gap:var(--gap);align-items:flex-start;justify-content:center;scroll-behavior:smooth;scroll-snap-type:x mandatory;padding-bottom:40px}.track::-webkit-scrollbar{display:none}.project-card{position:relative;flex:0 0 var(--closed);height:26rem;border-radius:1rem;overflow:hidden;cursor:pointer;transition:flex-basis var(--speed),transform var(--speed)}.project-card[active]{flex-basis:var(--open);transform:translateY(-6px);box-shadow:0 15px 12px rgba(var(--sb-shadow-rgb),calc(.25 * var(--sb-shadow-k)))}.project-card__bg{position:absolute;inset:0;width:100%;height:100%;object-fit:cover;filter:brightness(.75) saturate(75%);transition:filter .3s,transform var(--speed)}.project-card:hover .project-card__bg{filter:brightness(.9) saturate(100%);transform:scale(1.06)}.project-card__content{position:absolute;inset:0;display:flex;flex-direction:column;justify-content:center;align-items:center;gap:.7rem;padding:0;background:linear-gradient(transparent 40%,rgba(var(--sb-shadow-rgb),calc(.35 * var(--sb-shadow-k))));z-index:2}.project-card__title{color:#fff;font-weight:700;font-size:1.35rem;writing-mode:vertical-rl;transform:rotate(180deg)}.project-card__thumb,.project-card__desc,.project-card__btn{display:none}.project-card[active] .project-card__content{flex-direction:row;align-items:center;padding:1.2rem 2rem;gap:1.1rem}.project-card[active] .project-card__title{writing-mode:horizontal-tb;transform:none;font-size:2.4rem}.project-card[active] .project-card__thumb,.project-card[active] .project-card__desc,.project-card[active] .project-card__btn{display:block}.project-card__thumb{width:133px;height:269px;border-radius:.45rem;object-fit:cover;box-shadow:0 4px 10px rgba(var(--sb-shadow-rgb),calc(.4 * var(--sb-shadow-k)))}.project-card__desc{color:var(--sb-legacy-text-2);font-size:1rem;line-height:1.4;max-width:16rem}@media(max-width:767px){:root{--closed: 4rem;--open: 22rem}.head{padding:50px 20px 30px}.track{flex-direction:column;scroll-snap-type:y mandatory;align-items:center;justify-content:flex-start;padding-bottom:0}.project-card{height:20rem}.project-card__title{font-size:1.1rem;writing-mode:horizontal-tb;transform:none;text-align:center;padding-inline:.3rem}.nav-btn{width:2rem;height:2rem;font-size:1.2rem}}@media(max-width:767px){:root{--closed: 100%;--open: 100%;--gap: .8rem}.head{padding:30px 15px 20px;flex-direction:column;align-items:flex-start;gap:1rem}.slider{padding:0 15px}.track{flex-direction:column;scroll-snap-type:y mandatory;gap:.8rem;padding-bottom:20px}.project-card{height:auto;min-height:80px;flex:0 0 auto;width:100%;scroll-snap-align:start}.project-card[active]{min-height:300px;transform:none;box-shadow:0 8px 25px rgba(var(--sb-shadow-rgb),calc(.3 * var(--sb-shadow-k)))}.project-card__content{flex-direction:row;justify-content:flex-start;padding:1rem;align-items:center;gap:1rem}.project-card__title{writing-mode:horizontal-tb;transform:none;font-size:1.2rem;margin-inline-end:auto}.project-card__thumb,.project-card__desc,.project-card__btn{display:none}.project-card[active] .project-card__content{align-items:flex-start;padding:1.5rem}.project-card[active] .project-card__title{font-size:1.8rem;margin-bottom:1rem;margin-top:2rem}.project-card[active] .project-card__thumb{width:200px;height:267px;border-radius:.35rem;margin-bottom:1rem}.project-card[active] .project-card__desc{font-size:.95rem;max-width:100%;margin-bottom:1rem}.project-card[active] .project-card__btn{align-self:center;width:100%;text-align:center;padding:.7rem}.dots{display:none}.controls{width:100%;justify-content:space-between;padding:0 15px 20px}.nav-btn{position:static;transform:none}}@keyframes pulse{0%,to{transform:scale(1)}50%{transform:scale(1.05)}}@keyframes vmRec{0%,to{opacity:1;transform:scale(1)}50%{opacity:.35;transform:scale(.82)}}@keyframes vmRing{0%{transform:scale(1);opacity:.5}to{transform:scale(2.1);opacity:0}}@keyframes sbCallPulse{0%{transform:scale(1);opacity:.5}to{transform:scale(1.85);opacity:0}}@keyframes sbLiveBg{0%,to{background-position:0% 50%}50%{background-position:100% 50%}}.minimal-bg{min-height:100vh;display:flex;flex-direction:column}.hide-scrollbar{-ms-overflow-style:none;scrollbar-width:none}.hide-scrollbar::-webkit-scrollbar{display:none}.file-transfer-component{margin-top:1rem}@media(max-width:768px){.mobile-chat-height{height:calc(100dvh - 64px)!important}.scroll-to-bottom-mobile{bottom:140px!important;inset-inline-end:16px!important;width:40px!important;height:40px!important}}@media(max-width:480px){.header-minimal{height:56px}.mobile-chat-height{height:calc(100dvh - 56px)!important}}.file-drop-zone{border:2px dashed rgba(var(--sb-legacy-border-rgb),1);border-radius:12px;padding:2rem;text-align:center;cursor:pointer;transition:all .3s ease;background:rgba(var(--sb-legacy-slate-rgb),.1)}.file-drop-zone:hover{border-color:var(--sb-legacy-blue-500);background:rgba(var(--sb-legacy-blue-rgb),.1)}.file-drop-zone.drag-over{border-color:var(--sb-legacy-emerald-500);background:rgba(var(--sb-legacy-emerald-rgb),.1);transform:scale(1.02)}.drop-content{pointer-events:none}.active-transfers{max-height:300px;overflow-y:auto}.transfer-item{transition:all .2s ease}.transfer-item:hover{transform:translateY(-1px)}.progress-bar{position:relative;height:6px;background:rgba(var(--sb-legacy-border-rgb),.3);border-radius:3px;overflow:hidden}.progress-fill{height:100%;transition:width .3s ease;border-radius:3px}.progress-text{position:absolute;top:-20px;inset-inline-end:0;color:var(--sb-legacy-gray)}.file-transfer-section{border-top:1px solid rgba(var(--sb-legacy-border-rgb),.1)}@media(max-width:640px){.file-drop-zone{padding:1.5rem}.transfer-item{padding:.75rem}.progress-text{font-size:.75rem}}.header-minimal{background:rgba(var(--sb-legacy-bar-rgb),.13);backdrop-filter:blur(5px);-webkit-backdrop-filter:blur(5px);flex-shrink:0;height:64px;position:sticky;top:0;z-index:40}.header-minimal .cursor-pointer:hover{transform:scale(1.05);transition:transform .2s ease}.header-minimal .cursor-pointer:active{transform:scale(.95)}.chat-container{flex-direction:column;height:calc(100vh - 64px);min-height:0}.chat-messages-area{flex:1;min-height:0;overflow:hidden;display:flex;flex-direction:column}.chat-input-area{flex-shrink:0;position:sticky;bottom:0;background:rgba(var(--sb-legacy-fill-rgb),.95);backdrop-filter:blur(10px);border-top:1px solid rgba(var(--sb-legacy-border-rgb),.2)}.chat-messages-area>div:first-child{height:100%;overflow-y:auto;padding:1rem;scroll-behavior:smooth;scroll-padding-bottom:20px;scroll-margin-bottom:20px}@media(max-width:768px){.chat-container{height:calc(100vh - 64px);height:calc(100dvh - 64px)}}main{flex:1;display:flex;flex-direction:column;min-height:0}.card-minimal{background:rgba(var(--sb-legacy-fill-rgb),.8);backdrop-filter:blur(16px);border:1px solid rgba(var(--sb-legacy-border-rgb),.2);box-shadow:0 4px 16px rgba(var(--sb-shadow-rgb),calc(.1 * var(--sb-shadow-k)))}.card-minimal--selected{background:rgba(var(--sb-legacy-orange-500-rgb),.15)!important;border-color:rgba(var(--sb-legacy-orange-500-rgb),1)!important;box-shadow:0 0 0 2px rgba(var(--sb-legacy-orange-500-rgb),.3)!important}.status-dot{width:8px;height:8px;border-radius:50%;display:inline-block;margin-inline-end:8px}.status-connected{background:var(--sb-legacy-emerald-500)}.status-connecting{background:var(--sb-legacy-gray-500)}.status-failed{background:var(--sb-legacy-red-500)}.status-disconnected{background:var(--sb-legacy-gray-500)}.status-verifying{background:var(--sb-legacy-gray)}.security-shield{background:linear-gradient(135deg,var(--sb-legacy-body) 0%,var(--sb-legacy-raise-1) 100%);border:1px solid rgba(var(--sb-legacy-border-rgb),.3)}.verification-code{background:rgba(var(--sb-legacy-fill-rgb),.8);border:1px solid rgba(var(--sb-legacy-border-rgb),.3);color:var(--sb-legacy-text);font-family:Monaco,Menlo,monospace;letter-spacing:.1em;font-size:1.2em;padding:8px 12px;border-radius:8px;text-align:center}.icon-container{width:40px;height:40px;background:rgba(var(--sb-legacy-fill-rgb),.8);border:1px solid rgba(var(--sb-legacy-border-rgb),.3);border-radius:8px;display:flex;align-items:center;justify-content:center}.icon-container i{font-size:1.25rem;line-height:1}.icon-sm{font-size:.875rem}.icon-md{font-size:1rem}.icon-lg{font-size:1.125rem}.icon-xl{font-size:1.25rem}.icon-2xl{font-size:1.5rem}.step-number{width:32px;height:32px;background:linear-gradient(135deg,var(--sb-legacy-orange-500),var(--sb-legacy-orange-600));color:#fff;border-radius:8px;display:flex;align-items:center;justify-content:center;font-weight:600;font-size:14px}.icon-fallback{display:inline-block;width:1em;height:1em;background-size:contain;background-repeat:no-repeat;background-position:center}.fas,.far,.fab{display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1;vertical-align:middle}.fas:before,.far:before,.fab:before{display:inline-block;font-style:normal;font-variant:normal;text-rendering:auto;line-height:1}.icon-loading{opacity:.7;animation:iconPulse 1.5s ease-in-out infinite}.fa-fallback .fas.fa-shield-halved:before{content:"\1f6e1\fe0f"}.fa-fallback .fas.fa-shield-alt:before{content:"\1f6e1\fe0f"}.fa-fallback .fas.fa-lock:before{content:"\1f512"}.fa-fallback .fas.fa-unlock-alt:before{content:"\1f513"}.fa-fallback .fas.fa-key:before{content:"\1f511"}.fa-fallback .fas.fa-fingerprint:before{content:"\1f446"}.fa-fallback .fas.fa-exchange-alt:before{content:"\1f504"}.fa-fallback .fas.fa-plus:before{content:"\2795"}.fa-fallback .fas.fa-link:before{content:"\1f517"}.fa-fallback .fas.fa-paste:before{content:"\1f4cb"}.fa-fallback .fas.fa-check-circle:before{content:"\2705"}.fa-fallback .fas.fa-cogs:before{content:"\2699\fe0f"}.fa-fallback .fas.fa-rocket:before{content:"\1f680"}.fa-fallback .fas.fa-copy:before{content:"\1f4c4"}.fa-fallback .fas.fa-check:before{content:"\2713"}.fa-fallback .fas.fa-times:before{content:"\2717"}.fa-fallback .fas.fa-exclamation-triangle:before{content:"\26a0\fe0f"}.fa-fallback .fas.fa-info-circle:before{content:"\2139\fe0f"}.fa-fallback .fas.fa-circle:before{content:"\25cf"}.fa-fallback .fas.fa-paper-plane:before{content:"\1f4e4"}.fa-fallback .fas.fa-comments:before{content:"\1f4ac"}.fa-fallback .fas.fa-signature:before{content:"\270d\fe0f"}.fa-fallback .fas.fa-power-off:before{content:"\23fb"}.fa-fallback .fas.fa-arrow-left:before{content:"\2190"}.fa-fallback .fas.fa-chevron-down:before{content:"\2193"}.fa-fallback .fas:before{font-family:"Apple Color Emoji","Segoe UI Emoji",Segoe UI Symbol,"Noto Color Emoji";font-size:inherit}button i{vertical-align:middle;margin-inline-end:.5rem}.lightning-button{background:linear-gradient(135deg,var(--sb-legacy-amber-500) 0%,var(--sb-legacy-amber-600) 100%);border:1px solid rgba(var(--sb-legacy-amber-rgb),.3);transition:all .3s ease}.lightning-button:hover{background:linear-gradient(135deg,var(--sb-legacy-amber-600) 0%,var(--sb-legacy-amber-700) 100%);transform:translateY(-2px)}.btn-primary{background:linear-gradient(135deg,var(--sb-legacy-orange-500) 0%,var(--sb-legacy-orange-600) 100%);border:1px solid rgba(var(--sb-legacy-orange-500-rgb),.3)}.btn-primary:hover{background:linear-gradient(135deg,var(--sb-legacy-orange-600) 0%,var(--sb-legacy-red-600) 100%);transform:translateY(-1px)}.btn-secondary{background:linear-gradient(135deg,var(--sb-legacy-body) 0%,var(--sb-legacy-raise-1) 100%);border:1px solid rgba(var(--sb-legacy-border-rgb),.3)}.btn-secondary:hover{background:linear-gradient(135deg,var(--sb-legacy-raise-1) 0%,var(--sb-legacy-raise-2) 100%);transform:translateY(-1px)}.btn-verify{background:linear-gradient(135deg,var(--sb-legacy-body) 0%,var(--sb-legacy-raise-1) 100%);border:1px solid rgba(var(--sb-legacy-border-rgb),.3)}.btn-verify:hover{background:linear-gradient(135deg,var(--sb-legacy-raise-1) 0%,var(--sb-legacy-raise-2) 100%);transform:translateY(-1px)}.wallet-logos-container{display:flex;align-items:center;overflow:hidden;position:relative;height:64px;margin:20px 0;width:100%}.wallet-logos-track{display:flex;align-items:center;gap:20px;animation:walletLogosScroll 30s linear infinite;width:max-content}.wallet-logo{display:flex;align-items:center;justify-content:center;width:100px;height:48px;background:rgba(var(--sb-legacy-fill-rgb),.8);border:1px solid rgba(var(--sb-legacy-border-rgb),.3);border-radius:8px;font-size:14px;font-weight:600;color:var(--sb-legacy-text);flex-shrink:0;transition:all .3s ease}.wallet-logo:hover{border-color:rgba(var(--sb-legacy-orange-500-rgb),.3);background:rgba(var(--sb-legacy-orange-500-rgb),.1);transform:translateY(-2px) scale(1.05);box-shadow:0 4px 10px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k)))}.wallet-logo.bitcoin-lightning{background:transparent;padding:4px}.wallet-logo.bitcoin-lightning img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.impervious{background:transparent;padding:4px}.wallet-logo.impervious img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.strike{background:transparent;padding:4px}.wallet-logo.strike img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.lnbits{background:transparent;padding:4px}.wallet-logo.lnbits img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.lightning-labs{background:transparent;padding:4px}.wallet-logo.lightning-labs img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.atomic{background:transparent;padding:4px}.wallet-logo.atomic img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.breez{background:transparent;padding:4px}.wallet-logo.breez img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.alby{background:transparent;padding:4px}.wallet-logo.alby img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.phoenix,.wallet-logo.blixt{background:transparent}.wallet-logo.zeus{background:transparent;padding:4px}.wallet-logo.zeus img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.wos{background:transparent;padding:4px}.wallet-logo.wos img{width:80px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logo.muun{background:transparent;padding:4px}.wallet-logo.muun img{width:48px;height:48px;filter:brightness(0) saturate(100%) invert(43%) sepia(8%) saturate(670%) hue-rotate(202deg) brightness(97%) contrast(86%)}.wallet-logos-container:hover .wallet-logos-track{animation-play-state:paused}.message-slide{animation:messageSlideIn .3s ease-out}.chat-messages-area .message:last-child{scroll-margin-bottom:20px}.message{word-wrap:break-word;overflow-wrap:break-word;white-space:normal;max-width:100%}.message span{word-wrap:break-word;overflow-wrap:break-word;white-space:normal;display:inline-block;max-width:100%}.chat-messages-area{scroll-behavior:smooth;scroll-padding-bottom:20px}@keyframes iconPulse{0%,to{opacity:.7}50%{opacity:1}}@keyframes messageSlideIn{0%{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}@keyframes walletLogosScroll{0%{transform:translate(0)}to{transform:translate(-50%)}}@keyframes pulse{0%,to{opacity:1}50%{opacity:.7}}@keyframes shimmer{0%{transform:translate(-100%) skew(-15deg)}to{transform:translate(200%) skew(-15deg)}}.btn-partner-modern{position:relative;background:linear-gradient(135deg,var(--sb-legacy-orange-500) 0%,var(--sb-legacy-orange-600) 50%,var(--sb-legacy-red-600) 100%);background-size:200% 200%;background-position:0% 0;box-shadow:0 4px 15px rgba(var(--sb-legacy-orange-500-rgb),.3);transition:all .3s cubic-bezier(.4,0,.2,1);overflow:hidden}.btn-partner-modern:before{content:"";position:absolute;top:0;left:-100%;width:100%;height:100%;background:linear-gradient(90deg,transparent 0%,rgba(255,255,255,.2) 50%,transparent 100%);transition:left .5s}.btn-partner-modern:hover{background-position:100% 0;transform:translateY(-2px) scale(1.02);box-shadow:0 8px 25px rgba(var(--sb-legacy-orange-500-rgb),.5),0 0 30px rgba(var(--sb-legacy-orange-500-rgb),.3)}.btn-partner-modern:hover:before{left:100%;animation:shimmer 1.5s ease-in-out}.btn-partner-modern:active{transform:translateY(0) scale(.98);box-shadow:0 2px 10px rgba(var(--sb-legacy-orange-500-rgb),.4)}.custom-scrollbar{scrollbar-width:thin;scrollbar-color:rgba(var(--sb-legacy-scroll-rgb),.5) transparent}.custom-scrollbar::-webkit-scrollbar{width:6px}.custom-scrollbar::-webkit-scrollbar-track{background:transparent}.custom-scrollbar::-webkit-scrollbar-thumb{background-color:rgba(var(--sb-legacy-scroll-rgb),.5);border-radius:3px}.custom-scrollbar::-webkit-scrollbar-thumb:hover{background-color:rgba(var(--sb-legacy-scroll-rgb),.7)}.accent-orange{color:var(--sb-legacy-orange)!important}.accent-green{color:var(--sb-legacy-green)!important}.accent-red{color:var(--sb-legacy-red)!important}.accent-yellow{color:var(--sb-legacy-yellow)!important}.accent-purple{color:var(--sb-legacy-purple)!important}.accent-gray{color:var(--sb-legacy-gray)!important}.accent-cyan{color:var(--sb-legacy-cyan)!important}.accent-blue{color:var(--sb-legacy-blue)!important}.text-secondary i{opacity:.8}.button-container{perspective:1000px}.button{width:200px;height:60px;border-radius:30px;background:linear-gradient(to bottom,#ffffff26,#ffffff0d);box-shadow:inset 0 1px 2px #fff6,inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 4px 8px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 0 20px #ffffff1a;transform:rotateX(15deg) translateZ(0);transition:all .3s cubic-bezier(.68,-.55,.27,1.55);position:relative;cursor:pointer;animation:pulse 2s infinite ease-in-out;overflow:hidden;text-decoration:none;display:block}.button:before{content:"";position:absolute;top:0;left:-50px;width:50px;height:100%;background:linear-gradient(to right,transparent,rgba(255,255,255,.1),rgba(255,255,255,.2),rgba(255,255,255,.1),transparent);transform:skew(-25deg);animation:shine 3s infinite linear;pointer-events:none;z-index:1}.button:after{content:"";position:absolute;bottom:-10px;left:10%;width:80%;height:10px;background:radial-gradient(ellipse at center,rgba(var(--sb-shadow-rgb),calc(.3 * var(--sb-shadow-k))) 0%,transparent 70%);z-index:-1}.button span{position:relative;z-index:2;color:#fff;font-size:18px;font-family:Arial,sans-serif;text-shadow:0 1px 2px rgba(var(--sb-shadow-rgb),calc(.5 * var(--sb-shadow-k)));display:block;line-height:60px;text-align:center}.button:hover{transform:rotateX(0) translateZ(15px) scale(1.05);box-shadow:inset 0 1px 2px #fff6,inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 8px 16px rgba(var(--sb-shadow-rgb),calc(.3 * var(--sb-shadow-k))),0 0 40px #ffffff40}.button:active{transform:rotateX(0) translateZ(-5px) scale(.95);box-shadow:inset 0 1px 2px #fff6,inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 2px 4px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 0 10px #ffffff1a}@keyframes pulse{0%,to{box-shadow:inset 0 1px 2px #fff6,inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 4px 8px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 0 20px #ffffff1a}50%{box-shadow:inset 0 1px 2px rgba(var(--sb-ink),.4),inset 0 -1px 2px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 4px 8px rgba(var(--sb-shadow-rgb),calc(.2 * var(--sb-shadow-k))),0 0 30px rgba(var(--sb-ink),.2)}}@keyframes shine{0%{left:-50px}to{left:250px}}.sb-scroll{scrollbar-gutter:auto;scrollbar-width:thin;scrollbar-color:rgba(var(--sb-ink),.13) transparent}.sb-scroll::-webkit-scrollbar{width:9px}.sb-scroll::-webkit-scrollbar-track{background:transparent}.sb-scroll::-webkit-scrollbar-thumb{background:rgba(var(--sb-ink),.07);border-radius:99px;border:2px solid transparent;background-clip:padding-box}.sb-scroll::-webkit-scrollbar-thumb:hover{background:rgba(var(--sb-ink),.13);background-clip:padding-box}.sb-textarea::placeholder{color:var(--sb-text-faint)}.sb-chip:hover{border-color:rgba(var(--sb-ink),.16)!important;color:var(--sb-text-2)!important}.sb-send:hover:not(:disabled){filter:brightness(1.06)}.sb-unsend:hover{color:var(--sb-red)!important}.sb-link:hover{color:var(--sb-text-2)!important}.sb-disconnect:hover{border-color:rgba(var(--sb-red-rgb),.4)!important;color:var(--sb-red)!important;background:rgba(var(--sb-red-rgb),.06)!important}@media(max-width:560px){.sb-hide-sm{display:none}}.sb-secpill:hover{border-color:rgba(var(--sb-ink),.16)!important;background:rgba(var(--sb-ink),.05)!important}@keyframes sbFlowR{0%{left:4%;opacity:0}12%{opacity:1}88%{opacity:1}to{left:96%;opacity:0}}@keyframes sbFlowL{0%{left:96%;opacity:0}12%{opacity:1}88%{opacity:1}to{left:4%;opacity:0}}@keyframes sbPulse{0%,to{transform:translate(-50%,-50%) scale(1);opacity:.5}50%{transform:translate(-50%,-50%) scale(1.5);opacity:0}}@keyframes sbSpin{to{transform:rotate(360deg)}}@keyframes sbUp{0%{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}@keyframes sbNode{0%,to{box-shadow:0 0 rgba(var(--sb-green-rgb),0)}50%{box-shadow:0 0 0 6px rgba(var(--sb-green-rgb),.06)}}@keyframes sbScan{0%{top:8%}to{top:88%}}@keyframes sbSlideUp{0%{transform:translateY(100%)}to{transform:translateY(0)}}#qr-reader{width:100%;height:100%;border:none!important}#qr-reader video{width:100%!important;height:100%!important;object-fit:cover!important;display:block}#qr-reader img,#qr-reader__dashboard,#qr-reader__status_span{display:none!important}@media(max-width:1024px){.sb-conn-footer{flex-direction:column!important;align-items:stretch!important}.sb-conn-footer>button{width:100%!important;justify-content:center!important}.sb-conn-footer>.sb-platforms-menu{width:100%!important}}.sb-start textarea::placeholder,.sb-start input::placeholder{color:var(--sb-text-faint)}.sb-start .sb-sc::-webkit-scrollbar{width:8px}.sb-start .sb-sc::-webkit-scrollbar-thumb{background:rgba(var(--sb-ink),.1);border-radius:99px}.sb-seg-btn{transition:color .2s}.sb-soft-btn{transition:all .15s}.sb-qr-row:hover{background:rgba(var(--sb-ink),.025)!important}.sb-soft-btn:hover{border-color:rgba(var(--sb-ink),.18)!important;color:var(--sb-text-2)!important}.sb-scan-btn:hover{border-color:rgba(var(--sb-green-rgb),.5)!important;background:rgba(var(--sb-green-rgb),.1)!important}.sb-gen-btn:hover{background:var(--sb-orange-hi)!important}.sb-start-card{transition:transform .26s cubic-bezier(.3,.8,.3,1)}@media(max-width:900px){.sb-start-left{border-inline-end:none!important}}@media(max-width:560px){.sb-start-left{padding:30px 22px!important}}body.sb-in-chat #pwa-install-button{display:none!important}body.sb-in-chat #pwa-connection-status{top:calc(var(--sb-bar-h, 64px) + 12px + var(--sb-safe-top, 0px) + var(--sb-bar-extra, 0px))!important}.sb-start button i,.sb-ice-overlay button i{margin-inline-end:0;vertical-align:baseline}:root{--sb-press: .11s cubic-bezier(.2, 0, 0, 1);--sb-settle: .24s cubic-bezier(.2, .7, .3, 1)}button,[role=button],a,label,summary,input[type=checkbox],input[type=radio],.cursor-pointer{touch-action:manipulation;-webkit-tap-highlight-color:transparent}button:not(:disabled):active,[role=button]:not([aria-disabled=true]):active,.cursor-pointer:active{transform:scale(.97);transition:transform var(--sb-press)}button,[role=button]{transition:transform var(--sb-settle)}button:disabled,[aria-disabled=true]{cursor:not-allowed}@media(hover:none){.card-minimal:hover,.wallet-logo:hover,.btn-primary:hover,.btn-secondary:hover,.btn-verify:hover,.lightning-button:hover,.btn-partner-modern:hover,.transfer-item:hover,.file-drop-zone:hover,.project-card:hover .project-card__bg{transform:none;box-shadow:none}}:focus-visible{outline:2px solid rgba(var(--sb-legacy-orange-500-rgb),.75);outline-offset:2px}.header-minimal{box-shadow:inset 0 1px rgba(var(--sb-ink),.05)}.card-minimal{backdrop-filter:blur(14px) saturate(140%);-webkit-backdrop-filter:blur(14px) saturate(140%)}html{font-optical-sizing:auto}h1,.text-6xl,.text-5xl{letter-spacing:-.024em;line-height:1.05}h2,.text-4xl{letter-spacing:-.021em;line-height:1.1}h3,.text-3xl{letter-spacing:-.018em;line-height:1.15}.text-2xl{letter-spacing:-.014em}.text-xl{letter-spacing:-.011em}.text-lg{letter-spacing:-.006em}.text-base,p{letter-spacing:0}.text-sm{letter-spacing:.004em}.text-xs{letter-spacing:.012em}.header-minimal .text-secondary,.chat-input-area .text-secondary,.card-minimal .text-muted{color:var(--sb-motion-text-3);letter-spacing:.01em}@media(prefers-reduced-motion:reduce){.wallet-logos-track,.button,.button:before,.icon-loading,[style*=sbPulse],[style*=sbFlow],[style*=sbNode],[style*=sbScan],[style*=sbTrav],[style*=sbRing],[style*=sbLiveBg],[style*=sbCallPulse],[style*=rmPulse],[style*=vmRing]{animation:none!important}@keyframes sbFadeInPlace{0%{opacity:0}to{opacity:1}}.message-slide,[style*=sbUp],[style*=sbSlideUp],[style*=sbExpand],[style*=ccUp],[style*=ptUp],[style*=wuUp],[style*=rmExp],[style*=sbRow],[style*=sbIn1],[style*=sbIn2]{animation:sbFadeInPlace .16s ease-out both!important;transform:none!important}[style*=vmRec]{animation:vmRecSoft 1.4s ease-in-out infinite!important;transform:none!important}@keyframes vmRecSoft{0%,to{opacity:1}50%{opacity:.4}}.card-minimal:hover,.wallet-logo:hover,.btn-primary:hover,.btn-secondary:hover,.btn-verify:hover,.lightning-button:hover,.btn-partner-modern:hover,.transfer-item:hover,.file-drop-zone:hover,.project-card:hover,.project-card:hover .project-card__bg,.header-minimal .cursor-pointer:hover{transform:none!important}button:not(:disabled):active,[role=button]:active,.cursor-pointer:active{transform:none!important;opacity:.7}.sb-drawer-overlay{transition:opacity .16s ease!important}html,body,.scroll-smooth,.messages-container,.chat-messages-area,.sb-scroll,.track{scroll-behavior:auto!important}}@media(prefers-reduced-transparency:reduce){.header-minimal,.card-minimal,.sb-chat-header{backdrop-filter:none!important;-webkit-backdrop-filter:none!important}.header-minimal{background:var(--sb-motion-surface)!important}.card-minimal{background:var(--sb-motion-raise)!important}}@media(prefers-contrast:more){.card-minimal,.icon-container,.verification-code,.security-shield{background:var(--sb-surface)!important;border-color:rgba(var(--sb-ink),.42)!important}.text-secondary{color:var(--sb-motion-text)!important}.text-muted{color:var(--sb-motion-text-2)!important}:focus-visible{outline-width:3px}}[lang=ar],[lang=fa],[lang=ur]{font-family:Inter,SF Arabic,Geeza Pro,Segoe UI,Tahoma,Noto Naskh Arabic,Noto Sans Arabic,Droid Arabic Naskh,sans-serif}[lang=ur]{font-family:Noto Nastaliq Urdu,Jameel Noori Nastaleeq,Urdu Typesetting,Inter,SF Arabic,Segoe UI,Tahoma,Noto Naskh Arabic,sans-serif;line-height:2}[lang=he]{font-family:Inter,SF Hebrew,Arial Hebrew,Segoe UI,Noto Sans Hebrew,sans-serif}[dir=rtl] code,[dir=rtl] pre,[dir=rtl] .sb-sc{direction:ltr;unicode-bidi:isolate;text-align:start}[dir=rtl] .fa-chevron-left,[dir=rtl] .fa-chevron-right,[dir=rtl] .fa-angle-left,[dir=rtl] .fa-angle-right,[dir=rtl] .fa-arrow-left,[dir=rtl] .fa-arrow-right,[dir=rtl] .fa-caret-left,[dir=rtl] .fa-caret-right,[dir=rtl] .fa-reply,[dir=rtl] .sb-mirror-rtl{transform:scaleX(-1)}[dir=rtl] .translate-x-full{--tw-translate-x: -100%}[dir=rtl] .-translate-x-full{--tw-translate-x: 100%}#pwa-update-banner{backdrop-filter:blur(10px);border-bottom:1px solid rgba(var(--sb-ink),.1);animation:slideDown .3s ease-out}@keyframes slideDown{0%{transform:translateY(-100%);opacity:0}to{transform:translateY(0);opacity:1}}.pwa-notification{backdrop-filter:blur(10px);border:1px solid rgba(var(--sb-ink),.1)}:root{--sb-safe-top: 0px;--sb-bar-extra: 0px;--sb-bar-h: 64px}@media(display-mode:standalone){:root{--sb-safe-top: min(env(safe-area-inset-top, 0px), max(20px, env(safe-area-inset-top, 0px) - 3px));--sb-bar-h: 56px;--sb-bar-extra: 7px}.header-minimal{height:auto}}body.pwa-installed{--sb-safe-top: min(env(safe-area-inset-top, 0px), max(20px, env(safe-area-inset-top, 0px) - 3px));--sb-bar-h: 56px;--sb-bar-extra: 7px}body.pwa-installed .header-minimal{height:auto}.pwa-splash{position:fixed;top:0;left:0;width:100%;height:100%;background:linear-gradient(135deg,var(--sb-legacy-panel) 0%,var(--sb-legacy-splash) 100%);display:flex;flex-direction:column;align-items:center;justify-content:center;z-index:9999;transition:opacity .5s ease-out,visibility .5s ease-out}.pwa-splash.hidden{opacity:0;visibility:hidden}.pwa-splash .logo{width:120px;height:120px;background:linear-gradient(135deg,#ff6b35,#f7941d);border-radius:24px;display:flex;align-items:center;justify-content:center;margin-bottom:24px;animation:pulse-logo 2s infinite}.pwa-splash .logo i{font-size:48px;color:#fff}@keyframes pulse-logo{0%,to{transform:scale(1);box-shadow:0 0 #ff6b3566}50%{transform:scale(1.05);box-shadow:0 0 0 20px #ff6b3500}}.pwa-splash .title{color:#ff6b35;font-size:24px;font-weight:600;margin-bottom:8px}.pwa-splash .subtitle{color:var(--sb-legacy-gray);font-size:14px;margin-bottom:32px}.pwa-splash .loading{width:200px;height:4px;background:#ff6b3533;border-radius:2px;overflow:hidden}.pwa-splash .loading:after{content:"";display:block;width:50%;height:100%;background:linear-gradient(90deg,#ff6b35,#f7941d);border-radius:2px;animation:loading-bar 1.5s ease-in-out infinite}@keyframes loading-bar{0%{transform:translate(-100%)}to{transform:translate(300%)}}.pwa-offline-indicator{position:fixed;bottom:20px;left:50%;transform:translate(-50%);background:#ef4444e6;color:#fff;padding:8px 16px;border-radius:20px;font-size:14px;font-weight:500;backdrop-filter:blur(10px);border:1px solid rgba(239,68,68,.3);animation:fadeInUp .3s ease-out;z-index:1000}.pwa-online-indicator{position:fixed;bottom:20px;left:50%;transform:translate(-50%);background:#22c55ee6;color:#fff;padding:8px 16px;border-radius:20px;font-size:14px;font-weight:500;backdrop-filter:blur(10px);border:1px solid rgba(34,197,94,.3);animation:fadeInUp .3s ease-out;z-index:1000}@keyframes fadeInUp{0%{opacity:0;transform:translate(-50%,20px)}to{opacity:1;transform:translate(-50%)}}@supports (padding: max(0px)){.pwa-safe-area{padding-left:max(16px,env(safe-area-inset-left));padding-right:max(16px,env(safe-area-inset-right));padding-bottom:max(16px,env(safe-area-inset-bottom))}.pwa-safe-area-top{padding-top:max(16px,env(safe-area-inset-top))}}@media(prefers-color-scheme:dark){.pwa-notification{border-color:rgba(var(--sb-ink),.1)}}.pwa-fade-in{animation:fadeIn .3s ease-out}.pwa-slide-up{animation:slideUp .3s ease-out}.pwa-scale-in{animation:scaleIn .3s ease-out}@keyframes fadeIn{0%{opacity:0}to{opacity:1}}@keyframes slideUp{0%{opacity:0;transform:translateY(20px)}to{opacity:1;transform:translateY(0)}}@keyframes scaleIn{0%{opacity:0;transform:scale(.9)}to{opacity:1;transform:scale(1)}}
diff --git a/assets/screenshots/web-verification.png b/assets/screenshots/web-verification.png
index 8d91348bfb23c626363a697b42b5ae60be560e83..23e8f382b9ab962a5daf3c08d2216878168148f6 100644
GIT binary patch
literal 100629
zcmd43cUV)~);>yAj3_8gM2ZcRE=aF}h)R(j6lu~+0O>tcQE4htlnzQsC{hx7SE@AW
z34|t{5L!Y_xXXRc_xsL0JNy21@AF)IlB}#X=bB}WIp!Ge`^Gmq+Un;(mq8R16z3j2
zyst+=LF-FFK`lXd3OLiv`KgJ50t9nVRn>W<s>-9|?rQ7cY(qiu@J(X!X`O@#))3rD
zepEyfqin?Gw>;?-dMXSJQo3gzh3LGXr(u>Wuci`s`<9OXZ3*bsEq)%Sd-uzPKp<~6
zYh9huA7SSb_o!9Jr=)NVes+sLiHpA{J^B=Cd=`%>-Yv*n)0GuuP<|z<ab<B{JN`{<
z?z|Zl6%RG71s%Qgq~-;I8#gF;#Og?<io2Bdjty3lENj!ylhT~#c{_K?5EVx4-!|^z
zjEa%Vx4<|0s3;H&Worx8Z}O_CEn$~#GtM6Ar^&bF>ZeKf+KXbDE-Z$MvQWssX}iEj
zt(<e++h0<O{f(-->bOcL6Ws;YtLq=$mwk-dd>IkT$o>7n=ePZu#~NwBn|^41Z2#@{
z;j6qyl0!=XNK9=djpf8nj#Op+MZ?xZl=0@**FkN0+gBBi6d;97A0yw~YpD>N=^eiN
z<Mzer&ZmpE{@;7uZT+PKlKiebfjXq^W`#V}zUZqFMDuk0_0vT=|H%GwUx$>tt{=w3
zC3>!GJwNxM@?oJuWPeh7zt)@A84J$$4Bk~DE8R|HxETsf1<xd8M2hUb%<Nec!m2)4
zH189((Acy6dVl}%QS&EwrigX#kDoE`N89HE{Cf}XKPIX@-T3u9XP2>1Noh*mvH$1!
z<c(ex;iX9oqXUD!Oz_nTdKw-^HwvlfCV3~AZ~WIBmKXQjAG4-M){82p3;q7wpKJ2e
zc!E+CZ)R80CWqRUi?APCa^`r{iC4TMBXbbcx9D`L`At3r<JzKgOan#d)sumdz>@oE
z3RbDX8kdx5+(SSHp{xVc51Q$XDdlEpCPUaZsatrczK8t?Ijg69iZT4kH&D@O+AKO}
zN;zfP0;<!^7u@LYhS|EYKBoaUpL65b4O7qJrVj;M&<9d5G1AQPh}{o0xC-f{5Q{A0
z;r&hJcaKu%67$)c%3bdmKPbbq&gon*02wMDWnW&V@jO*aXBu9ceR_c6E>%NhWAm*P
z8huNxamEY=aZA>92KDCX8Eaqmw6jZXsk83YmlZ)$Eo`$KZX%NmO<^6n6gR_jvORTd
zZ}E0hv&6hry_x;JK%zj!fE{+(Fy2wkD`z9?P&c=r-(K)@SYB@LfVRE4=Z(+NX0Ob`
zg&%;k;<Hi*IG5#?DR(a&%DsviY)*M`<&Lu^JuiDg`0eJ8mgg<Ct%R-o@2I9Q7z-x7
zva!IHHI5rQ^LyV!UaC8d4uQ0JTb(YOm%gISV)xdgopxTjTJSlg3){x64XTpUQV~ZH
z$t_Ov#haLY>3YV@D3P|Yx&HZpO_5C|8ow~gmiLUBGZ%~)AJd&aQygIuakZ63H?)&S
zmg)NI!teO+?k^O!#J28irN_j?l*EK<7Q`sqrfb&xeEA73MlF{4=<N-r52tTu+_(zi
z<>W=Y=X!^E-({^@&LI<*riRfhxoUn*=_d5U*Ury9<u-ohPBsEIsn!A3<~<jF)BiSh
zk6v(J=>DzUJ@tVjk*|}ZJD}6!_gE*mJM(=LpHhjk?l%KEqfVV$Mg@k|d7?$H_3s+&
z>ixdGD8Qvt|3&)YJ>A_~T+G5Y)C)WdVm7beeibWlcH~FA_K!iSaq8<Cl<U6Ldsbpl
z=&4<p`6`F~*LbDpvopo-N7avViVA<~Eeg2mm4G*NNd-A2b9t@c+XfCgD~1O-kHL67
zE&VANs_5|kxnkQKR#;Ll5{xZJ704P+JxYh06<`WTI@F`0gLFg2g)f!o^V+NPlJes7
z9(p7%-t5&C`ka(%1RM1(-g$N%#SCGCgc7{5XHg<6k3Crx(#^DSS@A3O%loSjJqc@`
zE1Jt<p4Yv0JUKiwmoMN`{2%$F@hE)zE&@-D2d|8+DBb0`BzjJd-utrW<-ohvmmYAq
z+;x_`Vp||O9`pPG=X}|PiOv!GPr8UfQ>&soL(;vz@mmn4@$aKIeth}$JL$HwqaDBK
zlod*WLA>8G!_5p|A7Fb!Jn1R&Y5GKnOs{;ie1HAKF+PxZ@N%cB50`c_)jE1@YA)-?
zbqzHQr5^bnqn;`wUZdym$MCvQYbVz=#Hi4ytFtC#Uorr)f!1@ThDf21=-`TqDkk&@
zI(B>w%{PuiHg$XvQ%(8t6Mp{EX`d*>c{@%;Ih2g8jHE1S#d`7MqQTnT`jE1arkR<r
zdv>OFaXZ0F!ECh}VLgh;!C+2soD*VATuMPI1AVoMP0-4Sf9=*9qAs#-oLG6J&Y&JY
z!Uf5=^@O`$rC(S?t@L3js5Bo_i|N96VXPF9iUL8Xz&nkkMw1|1nZ(3%?{fh^`!TKv
z^C+b*rOBq&lcyn%LZq`K7|-vXon+mY?&NuRY4{3#*hC9DEHgq>B`Naw;@flQ&J@!J
zaoMsX`HRHUE;in%mpoRD2)O^~d+x*BhmWiSK0Y@HG|(FEu<u{~wM<GmxC6Ix`40O5
zdSNo>_EPs{)Lc88ztCiv+bxV_BTu921*^erwJ}z>khXcC%bUrIeIF9eq(m%7pdw1s
zEVL!;<lm=P%e{<QYnkc_`r$DTS&H3EKlpmg_NedC*GFw#eO>4e>Uz)hyY(K>a)p6f
zQVphuVZ-qbEe=sbyhFJ|9Aca7XV~o`-nQPg?9eOz+LP=Zt*J(vL$ZnM@fPG@I*Mkn
zQTY@tW>Q|zY2m5=;>N)}v3J-Hrk{wn`S_Q9yGJgxE=Yk>ipDGF)Jl9d`UM6BY6Q^W
zm7-@&jusM5c#_1x=kF3&C;aGQDd)4Lij7YHxx-3))8f<LiHi->j1Acm=HgIO(hP&5
z(lARW>+7={5Kojb{`#SMOT1}nkrWoS+wczT+t8U)P_*oHr)vN3Ns?0H$=w<m2M_QY
z(=LqAxKOK5kcnv(*KNaFy+WLmtkuO1azO#Jggv>W^=czqeIrCdwSIX;lYCaaO){xO
zsIJlIi@~l@Em(4WbiBb~uS20;K_Os@FbZ}sVlfPw;2ZaWHuaP89NSjQsmG}&PG@k(
z$c`U~?<{>*b&Ps@K1fbbeiC|P{h@knkd{{Q1IQ!J=X`}6GMAydgggCKLU>#J5r_Rb
zwT_mTU0ca~7qxdK4yBNp))_@gHg1l44&5uQyaf(wL&hGDJ)j!S8hh+b;@D#C;(X|x
zlZDNv=@p4fANvy1_%iyHl>Dylwfd$OKz3hj|7aoH#KsH%cwURXfEx6gIN2T%z<`Cl
z%4J2Kdo}tKKF=e>$3Bgvx{goT*E$63?3N;%GB(QB9BXZ$@C9TWc65VwYAN7(fG}pO
z-eW=dXd@Prh1qEAY&_bV!{MiwrnrOOk!E_^)}xr>M-|%Tg#)jhd|5ASA6lJ`fjTW$
zttm;($hhr1-LFs&pKJj)*^x+Iw@zdZ{3gy~*(BPG+U(Tp)m@sN@4GK2E{}Y-Z{Y?(
z*MlLuhr^jJP|THRb`JmR!QuzV{q)tkHXH;~6(1F&M0~epIcGJ?H}XVXQC!I<_zh|M
z#kD1Y4W|RCdDr4;Vv|zF&y+Ogm*3M?bSWZlrG2DnMz>MCv!cwJe6Sc5DZaB?sVqKC
zF+@XR>i;=86s9SRccF;5*6m20bwO7(!sbHy<?w5h6wVN#k%<W(f9=eRg4;jzO1UyS
zHLHh)${CJTZEg3PhKc<wnraBjljkS2(yu^Hk6)N$fZ#RB#`uw~mKFs+a7;%*OL>uk
z8aSc^{!vg~rl9@nn1bRlCCC3c)}y@j?=n;r6j2ToH2*I14EX%>_YQagwg3G|{oxhG
zY2e#M;1!WY^*^O)eY2?l=a^aoxJGeLU-i)=;8Wkq-Nwen!`{_%pFV>GoH*n5@Tms{
z1?$Z}FUm)HH#R9Ks3sf?j6IFDG-a(^A;Ol{t}kqaeIagt?n5E(D+?S#Y&<P_d?C&*
z9<sg)*ZwLY3mpGBEpm<LuOgmK3fGLaba+%<-EDXzg++x$uPK6fczER9t!-uX?mzf<
zb>N%AHG5A_H(3!8A0HoKA8}z<cRLXvc#{zk6%!E?69P&IdHA__TKWpPcwGP2P5$RT
z_ia3^+#TFJ9b8>_{@mB{g{zmR!nJFE8u~wf|LUiwgYEye<l^z~VF3da`Ey0&j<Bc*
zxoS4P4*yW?&y{~w`)gePYEJ&o&19eI*?71*d;RH_;+?y9<^O8p|919&JNT~}|69S(
z#lcfi?B7-X>-2xuGXCG||IyBWp8f9{Puv}BfT{df&;H%Wf1dk~@_)uBtK;Bn<7|B2
z0RkA!pV5fl6$6Gt_R@b>HT1A?S9OH|H9Zyo*X;gX`9ClIcg4TjeEPp_iiwKK{AZj0
zap~Vx<wgEH{Qoe9e_7gJX8}`F1j&p1AG1{iy}ci1LP4QS@#y|N17FJZDW8<*OMcVD
zfK`I2pg%5>M){l1+ZQZqgYTJPa&as_%4~ilt>5?FMFm?8A(=n9Tg#MjnhTeHF|N5{
zV*17UX{-VBo1E_$iX29YH*u!UxFO8ZUYf%Aj~6|H-*~D5`@MSme%|i)>$9^xIlwmT
zJsKVzO^%_Zq{)j_E;J}#U3C;-2F>1q@V4J)RHmS$`LDOUbY*u`@9Q&HLnx@|c*wkc
zys6x5!pbD~PX&gagoOAU2J!x+``f+$)zmGGkdP`tUT>AZH~v?Fyi5v8-0qQP$_4Tr
z;L%B<pmcqzxgPNkJ=9d9q{6K1eG<L?--G-2ShECy0_7>=Xa1pwDZx}U^+Pyu%Lim<
zfG0%xDb-3jLAF7EZWrFwa7)X@hw#AS*_j)Hv*tv-!eiXaR)*K!A}1*hUR|1}$TVW{
zfbQdk%?GndRPg&MmLt|Gm|qs1iS)DM)>P%}*&R3R8kG4H%dPdM54u?D)Ti+|EYUZi
z%ytb-Y_G|Tc@ssa$+*cYnD~}zO0Up9Qst$dVNC58YcapWd*gUiU}u`wHWkQQ{8J3{
zWQddwR)#AXeKe1SE4^Nhzv|z&;68ij(>$M&RU8>}U`&aony0BhqmiFr7G(Ubv9WOn
zRKV<RQ}GmDRJ7YH$R0LV^SW1}pFY%DjHMACsnX&fP^ZeWVcj-SFsE>VRIRJ4dm(JD
zu@Unq^1HZd^wVo(OsYPK%IZ}8is!Y6I#W|qJ7RPV%sqFteK^7cJeV6+Od^p)wIPt=
zsOO-#gDU))t?^kyHXTtDLqm2_RyM8(<MbwzPyA|RE9gytzkg9}t?co8Rj8m$av86O
z89|MVnWe~4S<%!FHYM*72pJc?^QXYz@Cp_IBh+GVs&m(eg`{oL7gGOPW9C2()GFRp
zIB}QwL^8b+N?LNwD4`lnF*F>pi;?rGuKBehn58V4T1+=RKRdf&@bfA3cR@+XnU*`y
z$rO-oJGlvc*IYnZdbk0T2=|XVZ*Ej%Y<aRVP5dwwfNMZ{u82*40jZreeEU_eWgC-Q
zRS=cm0P4|Bm$k{PKAD#k6?OB!)KF4TKyMh6K&;vu3g4s(J<F4&WMN(5;MyaKH$<+Q
z7dv7!c{%t|g>wxQ+&rpeCfq~EVmJgmJJjjsLpr7<m@9fWHLPSv9W<rwp=R6Eix3Ej
z2qQIy5)jua|9GsK`pIX~L_Y~ih;^0sJ>|qqVpW*Y(jJe$3!@or>d3tFJ;s+Qa;&y%
zG$utj!ILrwhi|B7WI<k*%j}OD<+Zp@=85x&8dBw+s=q9M9*loBJ6wk$y3}C_=;E4#
zj|#g3s)Rl0iHw~8u05SEqM{0QE)?=S5gxMt{mr~=;IHVuVhe-B@6X<<A%auP?%_5m
zfb410E1FdZqyT=BCOzAdkt}mMyHo5rvr=BM@-b%ylF9l7*_BKWiecY8&!&ePkeVWj
z6xG#rG#*XiP_8EgXnDqlHXPm^!Q;K(_|}@mm#_p{#QODCOgs`flsdq#NsV_W!sUN!
zp~|c}oKHx}MR2%WL~jC@+gpZ*U-cB5@S_6*Ggv-%F88HlUU%y3n~|{3BOUlBq~H2T
zn;zZ(T);_e!)EIa28tN9(*<Gq=@|3(sr`DRqWKXA&&_uj!p@NKz8>0HMIk=;Rl`x~
zra=@6jrD-;DHZ4Dwh2#vYYsl>O)Zj5h=Vy9X0LXYxYXpi?R_Fb2%8mr&i(JT*ZQO6
zzG=ONTS%vCN9yc?p?EN4Fefrt^H(?!TX#T@)sJ$OYNuu8<bYuv`YVmiRD?+wvO5i4
zdbTTheliE5Sn<ug(o|`F-t*_o?Ck!sS0&UlBfD%Q)mZBDQBTvcM&15gbfBUsMjxS6
zSt;#i(KH1;;hyMAmus8k;8;33w*YgVC|@AVGMuRUtW`GcM>lQqRNtf-Qx%^b(PVzz
zB$X-&DJKxl%LN}7+)OxhDJL@nbUd4@bRStZ^N8&_)I`6vJ)VjK1O1c<g)za3y-8%>
zMQXo(Wrb$LR~%e7HEup8WH=?GNhaV4S0eE&p_i{g>mK{p`kLoW4I5rnXmzE-D6Z-}
z6@=T9C&^R6N1O!G-bs$a&d(u2O+Qh@<eNof@zaXY#r{kjrBgnqv>Q)EA82xQ%_#_d
zxwItR4g!H-1oqvQS?b*vK-18B1?7fLZ~S%^{USFX<M<}$i*IO0Sh?2((!KK%ugO)9
zAMZ-w3(6eH+gt7NUmnOFNV=BzI3T316YlP`-o=**D!x_HMDnjY+Ne_*IF9qFZ&N(z
zI&nP9CQPW|tTb_{`JuQOYEJO0MCZmUIw~D>J!uU*Lv5Zeau6x4!Mu^=j7D;Lqai-y
zQcVY0P^q^x^=wqBcP^0eLha1A1ZET#f_zd_wT**Rb0L`e3Dq7Vp{ePl+|ak|h1xTz
zuiMrmOr<&(*7Bc?>R3uSr`b6z8IJQ!2fgQ%#@O_8Z(R1cxOFNvcgx8UhD`*YM{}QS
z5eakAb*gH(IL_n<Njf~<i;&uMkhz|Y3(OxG9reYphXgIjO(TKv^~3E?ulqpv_SQ23
zHqIngOifKSV&w>#Cp%C=$UZe;N9n|a063i|N1f`yLzwNPs_{(HO8$Cbeg-lgdOY7q
zs>s&cAINU=#v;bXI}{1#&eM%Sgn*{K0HosxOlP9bb(-slIDMiTK$yr^#m!clAK57#
zu^)AV8`nJ!UlaRq$4L^BlKvD8%>v%gp(J6`_3Ul=qaWtSYHL`|Z*Sj%j^Is)0!Oja
z``?JT6C#6U+!kU-zJkVJp}}kI=G94J3qzx8oez$%x>FvUZaW$&W<n<12z3zBF}n5@
zssKHH!?)hf;aV=YQ7>1?BRx87%}t!c4Cou}sp#9$OgRcIbb(vKQ30jT9QT@n5{hB{
zsHU3W8sZ`wAtI=KNJni=L!^P3G-ZlqC$0CBCb<IE?=To-mOTkt)epujVW&xG^KU2n
z+$Z5Da>r+mTG<*cq$b_MPdA^SsApBP4++V^E7N{zkc6N$lj(AS()w=9PKM9KPQMZ^
z`=z0MYF4)??cm7B2-0^eN9T=+?tA=Lv_h821^$4{Ac72oIb5|a@*IaGYOIkU;ad0(
z3D}sO{64YZ^bg!QN>_}@llrY#pMcV-=yki`MZ5aT)lxqTo0_KK!N~_!Ur*NsUA=FF
z_@-iJh~tv;Ztc*BRc}E$2xd8MK+wnu4vbr}!ttgm;X70Og$?cb{^&w7;bp~B!1;kg
zN0Xb5BL_6Rv%&enGt}I>-Kcc$NfVCa{XunSo8FMq88_E@Ss<2>(G2Nv7xTdN>ZxjE
zU+_WRf;aZ9Bm5_Cv5&ICm3A|+Pcg*JD5XlJlbxn-J`HPANPqlebfrUh11<=6wguO8
zvUh?pJ2^Bto}OXKHf=pCvR=8+1NObS@Pi9Eb-|@IZ;;z}hH|LU)vqTNTT-{N-CR9I
zJ)$XHR-zWIVn$32%GQx47QH^K3SO%sK5JTLX~mVta!5rQf$F@mpr!hQ#nknjXk<ic
z{z|pVRh-aGGrO_p9tiM8-%dzXzq)qBW7EhcP?2G15t7~&cxVkO)o6IsNu~~EdarGp
zd^hn<{q*K|#|;%%b5oOS9r-D+ZzXXg**JdOsxrt}3fYW=Bp>b-cX(q_kBpThnN0pG
z(*NtL@HgeBl%<PV1RCg$)JYrlP=LxnomB^m_oG5an2kvPh7|6jMKMtg-B`&_Q!l${
z5RkbLq#B!fGj%&e>h8)&Qdv@jp^*{FPH~6*2(#C?Msx*Fd`&j9#rbxiRSFIp_lRg6
zzto-7>cVRTA`S|@WWTr3aCLH|x4-g={JuM#OB1l;P5?{VzF@s!tDU0_=_$(;Huj#S
z5@dx&p|F69)}?zPz|XHxJ=8mLk$|jfm<k^V+cQ?+QW?_ByB3klj?+5sdJ_Drk%T`z
zx!`j2olkKV%M;u|*qE|9s1ILWc7q}}tu`AR)78zHtNGJnSvi>+O5kvYdr1G&KAx44
z9`RT1MHMQ1FSqGAp7djAHYdED#pv!C7SwsJl#70U!_*PT?Lsg4%OhuR`Uq1+WT4wS
z<YvVzLzEjAid7y|W!PUqk_~d)6sc@Z*UNVGrHlC9#44K9I3h*@mQ#8boToJcu<Q&M
z6;7W^{5FkY*UFbosMJUrF~+owQ)?-VE{!xW3DtI?>ZXZjF-Efr!Kw&5c~PR(Q42$`
z1-i<0#}Q+gEo&&H*ki4iJ<@_BZQxL~UTf<gG>}oLpKiZySo{oEQNw<gfMYQM(;Gs}
zm>J6TF$IbZ`uwK-IU&rFPqb+eexxmr$*=;pDgg@C&!)W(Jqh6+yYNgUP1dU$?&S&^
ztG4Tpwp8kmP>lvnEo<%QG0ebVmz!!(IRzqRnfEANTU}-IXOJ*hH#|)0XuN}1J^6YQ
z@%v;kb1S5-TXoXAl&a5I(j@yrU?W>(YP*-Ww=dn4m~@Bb&|b3GM7a&T3M##R4@ZUm
zW?7-IH#u~@?*eB+udOrjFqZ2+?%Wtt<bYjVM_n21ZbwL7UIM0eKAIqMvQVeec~tBg
zG^8{{Dr0zYmTZp5rfi`{>54MBZjcWe_1_Ia99kPlJX`2DG`!4PB5#OrX~onAHJT!d
zx}Vi~5F+iK6-}G4YS!PVzqWtBV6@?Qy9ax?R(kg8cAl1r3Y^9e&n4qN95CBB;nIMY
zEX^oBlUVOGR)RbsOp_+5t4hbyeK59F)4{1hThZp*n?4Xa)e{o#<mzsVVf-YgoG_l1
z-h7MEJ3Bs|J5BEn%{R~s#I5H+$6Foi`AR{P;WGkQhLcSOmB>v)u&IsX*{uOphDajI
zui(va?#fK!1k?s-Y%4_4=7|#V;|ZE{HeBJUgjwqn#sT!&(DKL*N|=@xCAryO&vsn!
z9Xz)<ytg+OU3K8cy#+!iVx+43;P3bL&((YT^VG@2u;7%ApR&|QNW@-!=;A25A?0nt
z$kp}b@c4X?uq-bOW6I*9ov&=V^ySdA+SaesOBIoqXWP_*SyK2Nq;9{Ior-&zi`YIM
zKT9sHb)?ZVyXimOnQf3=Kq@~3pZIq9+6UlamybFj0_(9Rixb$?rHOQt%j<Eyr15c!
zDoEN={HZz{)$oR;a#})C@s29h@yL?NI#k}jb(_ngT|-UH;FIid91kjIX9Hc;|I7rf
z@U4iT4k@q?I#>uNR6&m%jwY8B+5ERM<R`2(k^~7Idbj}ed?*&&;EIFpx#8IvUIetp
z{$hU4r5N~Kk+|{%eR60HT`FZjQ{lLakf7q?Vgl9`Di={H(zu_au-$nb)8XS}kKLRJ
zXLvPwN<m>N*rUo$;Z{0M>V?UbXX?wZT)BzM>W~u>F`LS`A;>EjPh)fx5yeevoQ}ZG
zTgJf{H<p*bxdzUsW<P<qT0}zqNrUlRWeNe_nHNsM6vFvKl10XP$NlR^T0snT@y|3g
zqECMdY7F+1PVT#%KO23;$;s(B#n8xHssHfkNd8O7t_&x^$w0&m%Z+$5a7DP*zHa*C
z#?7WPll<HQ3kq-5U5`YMuXxNN6shqKxGud$Ica+K9$py+KgDXGP^ea1bo(VIU9V~`
zSRl8n5@%`f@ZocHQe2FL<Qloqa4}Cg2Z;>6<;Qtf=O#==1@9J{EC3!J&#d=KhnN{V
z)YNl}T~aK3J7!fd@IhIkmOl)yISArf-f-AJ>;(_Pg94($Uc`dU%}W)YRNWb<_0`Qv
z>|au;uJhfRW9&p$rj;))@-lS%x_W8IJ2pEC=5AtQqVl@1Sqr_`>qH-#Pi2I7GVt;;
z7|k+H*xQT3!?Fz3;4UewU^D*VI8}+*ugb<FjVSe&Z=`ePYs}5JzYI0{k4l4He9bmG
zy9L~FlmYZJx3RHMRNZhr?z!iAgwepU#FAZxpM1nC*^Y%|b1X|PpL{{E%yW2Ojs4(<
z0hJs$yr;CP&!u|S3zIbaG}9_`I&C9I=S<N-flYXrnT+J!yNAYL+9!w)%UJArtmxs<
z%2k0OU}`s~E*(t7?3raY#En?ht4*I#U<Sokl`7&^S64UFhkU{S)a~z^ZfF_J1IXaa
z!7ujcXX4Jr#x~QzWxZT6CPMq#FCP>tKki^Ac5K(iOqC-?R|WLFD~nHx+`!ZVlfOv0
zLa00n!>j8p;irSxXe$c831iIBb#(zMXc}y(vV>WsR(472)GRv3BT4=S1hj@XTN=n2
zdpVM4))C!q=$oHW^Ng9%DNtyOG}}AFU})Fg(SgRBF~ok|G>-Spob6aev@7{-r$p6r
zXc_i^V%F9;TD7pu`$A^*-}m$oo7timAf%wl?dxMx9l-&qj0(r=&!0c*5aDh*9(v>O
zgIjc9o9&?|O0)AHRSe5vJ|i&8A{hrW4~M}$z07dMJ$E*&IZ3RYt?8I@oQdqz3{mA8
zZNe5p+_e$ZDeF0+`w)|*2@%tpW^XBm@zTI~miUWNth8}n!QqmI2>wg9?6=?1v9#6R
zPD3f(8aMrBp<A$M@UGyk#ng;O^r(-I`q4_mGjl=HTEU1KKJ6<?oO+UyeGH}ZM)V*N
z!$EkrS>)vIOrlw3fy6^7R9L!WEpP6rxmRp)i233??W)11cBHfwnH<zZ^$&iMT#`hq
zpkSJ71WQu&AObsyw@o5(;z??~Y1_aBkYEF@^t9>m+QGZ-Po)Naa8dBptk%Z&BVRyW
z2>R(KxF{S4E*HPGbzMLUVYYNh#Cdqj!{&Xa|K@78BuKwzd8Ysd1I@3>&kLcnqhD=B
zjK3m-{4t&d@Qb|TJV(dV15;Bhu=DfOygSc7Jwk<4dFlw9j(iR3^V|`K`S9g-HkKll
zy}S~m=DxOMbRQ~QQhLV;4L-xL#zbn^!;I9tf%{0XQsVY=oXO#3mo8ospBWJ@G#EB9
zIB6{%rO2JS<ZNG1W?txSFkAAB&OXM2({5e-8*OMI(*XB%0|-1zBAG)vALneq&PhC9
z_`-B#bWm%bH-nE7_x-_oD7m4WiSbWBTvAU&>f$XCQKn{ZI9ewxiL7&+9ll1LELE2W
zocMh@LSEo2FX}X-&}g}R^*4`CHk|wypg2TTBkrr70TG^2x7yGXM&|Az%?4*<I5t<U
zbqnAb-v*mL^Cd8Gxwl_oNphg4{VquNlbJHe)$k=;N$0*4XN>=~WVw^&0P{=78_CNa
z&xNlXk;z8rG#_WJS9%u|w;t?XPamEfXAd1S;DNOY`7P9tl<(A}Qmu~rvXf-ZI>gDw
zDEe1*yqo1%_^jw@Y+)2vv6{r+DN=tgDOyLHQ&-Tt;q-g;@2=#pH5B^vwsNzafRd3g
zh}@c@q*)9D0QKklA8Q_v@kT(EltcjTuGqF($RXc?g)klCW?$r!PfqvAV5!O!|9|Mf
zJM9}6E4Ev!Zvm63T=?bFPJoQQlG0-A-)*7(Gu4U#Ki)AT-s5UWGYwUtLDvT}6Z2b|
z->#>U-4E-PQOPp#6ckiLkFuB_`!caAJjwrbhmFi!hOY3w+rVPeT|8bW(*1Oxq^*;X
zka%$PQHCfnGxzs<hnCYUxBNd-Da~?0<Uz1MnCj2_0FCi!zwnM7nZEong=Shh--F9!
z9N1rAsJH<@)VvCI)8rs;HjF$o3v%SJ+rQe@0orCiY`FvZhqgmPl5u~Z{D1XDR2Ar$
z-SX*<%D+#_zxqOD)<{hjvE>PArf1=qNzdlKGW39~HB!<5gFgTN(V#<LQe&*eEW3Vh
znqEwLc%Q-4_1gR0j)6pV^eY@UF88Hp8i5;CLX>FCc*>ZfMHN_TH<aInAk&#4Fi&Ey
z(WI2S|5v>(7!2n8<E;dMyj;}y`eAfx3bNwaJyyIurjQq8RPx-Wp&=-#f2ob}EURFp
zS~TlZJ3G7a5>cOpZWg3P%ZpU0(!oCn<yx=5zkgs+jF4$<D|b)t(#*VPl+}a2$UVBB
zcSCDy{Q+!4V?Xy*Fk9aO!=+D}yvK^mdw+Przb|?qLV4Bg5QWWFcHCJkMmj%bZgfF=
zf4W`y`0Fp^%XwRPK>=N2RjQ<^bz)*-xTQ<$XffK_q-x_E3Uyh4HJZyg@i^rz;|BjG
ztf&Zd^<`Pgo`ugR$b|d*OoTm$r1S2kkFK=s_+8&O%`q2sE}58`LdHye!cAZPNJIu6
zfKIg8Y=<R8pOWj?r<?D%WK1IsK50rC%qilB=SL?et=UW~N5Us6@q2rbjL4FbQMgOg
z`Pi`HXAHsOqrcp{<4v7`7{AfAi-1Mj02u;)plTEV9ar3B4GH|~y$kN%>*IHn)GOkr
zpxTLX*O&SOXv_pCiCi}lZlf#gs?O2VM<|8W8+pvule5S_u>i;n&oBagwdAh57O4<m
zM&D8#HetZOkXXyn@WIE)w^&Dm0b$p<be3yfGN2ibJYUFD&@AwNVC}wfei>fcfA^c0
zmlp~EO*UBSO;l`flRQiOcJPqKF;i1cqz^7S9LsWX)(>eWG8Rc@MQx(a#$4W9o$l87
z`og{mK=BYSbQnx&YXB<F8|#mOzsv+R_>A=3i;q0Z_G<LpxpT2b`ueyNn3=e3^;e=H
zWj*vnF<`r^gXq<6RQyam`qdcesF}XcglDDcbmDCMrPZg!X0?Zn6=aN<j>qjPO&`dY
z<w2pBivG}<(xNGAHuJzYdlyaF!%P<pK*1h0lqYPvqyck->{9>j(UB2=4G<Zx=vQ1o
z`ztV-xygRRo3_5(qP=y)#re5&@^kmXy*blWxW*_3bJ=x~J(T@+)^z0RDnG6%AaR9(
z6L@-CxP6=KhOU@;9$qreoktW)t2g2NBPh4G9D(>Dz>q6+`usWvy#>?NaqRLk-E7HW
zj5h%JfYcfk{kDyl6;NYiYyCl^V`FT{+suIPM)dW?iDs$%E-4`l{JPiR8_%t@2)yg8
zNTW`-)Uw~qdh0Xw?pxu?mnsQ|GZ5`(CQr_hLcbh8HZvsgi;jl>({j3qK;UzEAA*wJ
z{&*p+9a?l4?Wl_{HghsPezt~io%8{(MR7C5v$&3to>iLH$4s)8F0qGxx{-zR&t}Az
z#4V<$c+!@(1JvUAChj(<y6p#Q4{~vuuNTcPtMmtySo`d?O|OOe(fx%OiBWmu_-4(E
z13n7reLuh476+4CSnPssMhqDCKp{;|avlLVm!c0u2_CESi!aDKZ41dWK$MX8B*Ez(
zS-%`A0|*D?@)cc#S;@Cxn*f9<&WCqvSjlwo|D6uJ<H9*Iy@|M)@MuUJK#o3&=<p{N
z84G>}yfqn;gt1!Z4@tS=iQ?zy7fkIvf2yAO(5!$V<fUCcAf>2O$+n=TmVxe?C}w7+
zvvnJi3li(|sO)I!VZ+5R*dOUdsr+4rukJ}b3q-FiiS!$M>K1utZd`l>c>VCECx)X#
zL)du5CVGB<JCt2l;NRytbVX29a7N1*Aj1LB^{KgeCYYOlT*9?qG(Eq6k})NN>Z{&W
zgUv;E8I62#Qk@|iY__hpHh(GN6U*Nt%aG<6W;)8!u*urmRUOFq)KpNd>#f<1m}AXP
zyLT_VhC&U_Oi!7912Vi#b*9MrEu@2(VIH~A9oWuQJf@r_u@H7gqIqY4c2u4Cu78Ro
z)sUVtMB6_gpbhsac-olk6sLefzrcK)932~`H$qM{WE#BlsS@unUee;p6frJK*?9*}
ztlypE?0xM;&iN)VJ<J<=)MG6+I-NN`-Ogv%fdRsDWeEG>;i=<2p*1NB4XssUZ?b`c
z#obVAeimX~wF~G6kTS3tDL2`H{8={jegs$+vy)i`DQBs;fMjdBU1N6fiN|ah5KfzE
zgjS2Iim{{2o09ZrC&_iOLYe1_=IxUewaCUaCvzQ6pOTJOObnzH*vnV(T~6dJUD?7L
z^yREsL!Irt$gdn4$Q|R%h1S^7oNAvr4dH{PRHtcc-}54;bLZZ~bJnOEs1-p?;z?en
zmaa8Bmt<IRf47^z7F_6r$h(dH<aK=N+Pb-E<9E_>W;`0438@&4sBvU&<h}T)$F{-<
zkZWY<n}M#-HYP*~u=au?>!;Tt&93)H06dgy_wca_rpwBmhKx1+2}sX`x<yGW6r6P$
z0(jTU*i0WJIwY!5S7O8dlx}sZc772OiQyLzP`Q-aza*60lfDz1`=JY1j<?~3h1)Nk
z01myUwyv(<QodKjZ0?JHrPr2Xf*+S+TpWk%@%y9pC3b9zFM4yyw`q3Gmz?+i6PePV
zi3kC^?nHhND(EtnOcyo8$FYbcJwDT8{cCi5d^yy)6$q15n&Ef)5dPo}SXh;T9<3|%
zQWFw6nkf$KJB#S<;@^e^m#6Fb&l}^5;BQKAnc?8Pi2L))mvdP!%1UzyTqsef4NY3)
zkM`xNEh$L+@u@>?=S}<BD0(iohCF}2&Im9$OQ7Qst!-Wj@!9RYK9-~jxpWzz#9w^?
zPk2XJ>;#5Q&Dy>0=vvrL>i6-x=~_H8CS?o&W75+)59N*vvd2KiYpagyFnGzXMRi+7
z@L?h2m9b$1w8YqRD^5;q<Hic(C3Q<@=79%GvEgXx%GmbUDi(PP^Ez(?1XX$4fM03r
zJJakTVyr!uBM^NVjR4qe8TX&mQ*$dpd+QTc`PztauQ5}Ol6in&-NmxPK9*L`J=VYJ
zIq6}%q$e79y#F$QbigLB%v~#KM$XUui4LyQ^0II8s+hd`D7AuJT|G0q(Mg#<7j$J8
zCTo1v6>wH~0^#tWo!b<0&8XDOCX=*lr%AakH+>+?V08p218e}oH@H0`aQk+^5qkOp
zl`$>6>x*#HZ%cR5ZtZMhm8{92s|r|fv2C83dq0HODpKDMPdZu;!T}5=z-fY*`~h;=
z<z!arxHf26waEp#=L2Qq|2(~$CpE!++!91EX~LhN+8C6WN0qia<FTAL-+=K(&lNp@
zGTLAm13!Jr4oe*QaP9rAiEsu|0`agE+8MwBezkQ#&g=cLwHRK}HzDAWItSc)6Hb&^
zjO4gM=}_$GaCtToDI8J15W{V_=%0H^1ZqfIgp#v2-Mtmb<1^bD>AjThgGv%gRgm7O
zQ0Mad&K0z)8?ci)?F=_628EXPC2Hpb_;T{PfcXJT=vn2sOXGoUX)E>{4EDHgtwajt
z)3}2jntyV)s`@ebsB3Gy%!=?nKJdoR9aZkbEbzXW9rU>4<hsFzq*UgvhaKPL57>V&
z$PU`>^S&(aU^xcZ(*|3Y!4qZ=mC~&&ESjk?jtuhR!5B)Vsd1Znl=%n(Mlfv*tob8{
z0EjiaoyC#NJJSq7%VX;R|6mG);TKU_$CLfUw1yL6lXDfuA3o*Qb}o;?ICQ;GKY#sb
z`lK<4v|~;$#5MeCb|>>B4B&mI0D3hQvNd<pdv|&85mSNBOCO*3)8D7hV7V{=(HA+&
z7O!~7q%^G>JYTyy5as)e+Jj60{8u`9JG7kItkA&7R>7^e38oBd9#I%ApQwz=rk+PS
zJml5KG!b4a;D`0SdxWIW#Jy=8ggxV1k8s^&e1C)^8ese7JeO^b&`rdmD(!tU`%jyI
z0HG9%aw<hIK=-Abr)m*|KO7AvET;zp@SOg1f!%EjU%=}a78ry(aPuC+`??0hHj#*d
zy|d=~VF59mvhk5$y_r61@F#*8u=z6l_s6u>$!~!GfbxchH}M9)vLQMGoa^ti|J_gv
z?(w9uK+LEi6ne4;o%SIrlvYkHLM}=AnM7(cM6qb{so-Dg>sL&94rzJgN5KA2%z~wH
z<d~KgpS*SNE2p18vO&X5*pjV>v^mxRw5qDtrcl-7MNH33tZQIy(29mRVO}AWa5JGR
z0%X?<#&Y(V4PU$F$dnB!Mb1y`Sf2X_4{sehsMmR?bO}L!qer0%X6~~wxgf-b;XYh}
zQB`MWw~)5Dm2k6;S0^K|R@_I%bT3bSKOub=@F^{e<rq6a-lu!-wId<4It?F#aW#?-
zIaGS0nE2w*Yi4`0)1SY^#l;QuSuS)haPd?{Spj+3EcV8#D(wc4xv8eWi3Y`MH7?5y
zK*Gq$A1cw_tbDRE^OV|N=^p|{<*etSk7(<e&cRj<Xp^74ib{N@B%j5J!u`b0Hs9XQ
zepgjd(F0_Hex>8R6Qji@ZGp_Au;kLd>9MgTsTlZ{VuO?X_mTQs{^#*8+UQ%q?yqU`
z0!f`K9pp0U2znwOFcW%OweIy1?j&L=Xpcj6|0tJR;RT;|8oiVQyrg6s%L0gTssd;?
zF9giJ=}?t$&3;#bUmHW`E8_E8R3O|Wf~yi%!H1i$_f<4%IZdCUneiW%DIZOq;EbU?
ztl4wr*VoZszg_?dEv4IFj+)uXvn8qPaxaL)+DFeSrvV1L_1tjW6`8q_${&o)+Fz?t
z5;qc781wjlPc;No_0N98PB%@H7F|j0n8VR36af8lV8GxpK$p~;U5?bbHPIM!bj)i%
z#dV&IcnT8xhlApR9zSZjjq+)TZF^*HzL~X02@tmFrk;apgptzVABu;A@sSw~KmxB?
z-Ogs_iy<ABo}d8D0SnclX`Ocz>v@wZvn#^-_dKkuRF}^N?r**qRZ15>-<kg_tc+|(
z_$T_g;dq%fF?fE%ivX7znV3bUO&x)ciYiL&GvYJKZZ(_M`@USZOzm0d8_$!Xrl!sg
zYUxlSssGtOcq39D;XF2hl`QAo!Ra$zdfZ*=`?^NJ0QN`PhXg!UI9HM+x|E12_4~Re
z0MvXMe)v{e8p!?5K`y)kQ^g}s?AI>7`4Ux$xSE1p)qDL+jJDr#dH{pjp!C!#SjMh#
zY`&A4#W}V4dF4vrNyTvZnX8qUj%b&-ym@AVqvj_;v-(aG8Nst-1<G|bH8&$_2OCGO
zI>*J2c|3ViTDKqwJM4{kIXs_YLjWxw72%Sf`4qejti)9ibOjiK*!C5FVsKPoGH}0U
zWb;R(&DB#jAeoUUNm#d*@3&_-%hgs!Pk$F17M8@Tn?RO<Ksc>6oZj&Ao@u_v;F~|^
z{(w8zfZt#3<uD(Zvg8m8`x?d?Ie^N`(t_M%E<sfJ(7R~(8k<PZkAG`{-WrEE48FX4
zeHOwl=DlhV4W^QcEMs1EOlOT99A%AVH=-xK?w^>NnrCTqbh^-MxvyAHHns*5!1jxq
zCU3NQbNHVkEIJpq&3@G0HTY>{Wb~^0IYL&)?Q{PU@s;fw_JfA^I3Q-5vs^w?haWX5
zDi`B`ndRH^=EmnR8ZiigZ1fAQeZNx{XUyB|H$IcvZWvXwqK_@~x~!jF;!n}B^vhpp
z>rz|hyhr=m+}_}YWAX?!&>gmvauCLV-%_OMxSUhocfh4~#p{m}F%SHeFm98K-L#N$
zTmeLLO)Gh+4GZ@g6!vGv6eb%aD!q&w{A2f8gSzZwZHCxSU=wfuX%C_by$zqy`ub~@
z*A{x14_#I8Vn72<*YS@s09;|@i!b5#jn3X%j+MeJ2iYAtcf@f5_+4P>F67%<X_I25
zd<t#Gb1L$VmuC}pM$@6INCgwcby%Wsv@V{FEAgNBBM~T<s-HbKYpZL5biSkTIrYf|
z;4M}5(bLm*rBI>};h-NH{LK{y_r|9ElOjK5kV^mZ=3_vFRH)xOIz0S4v39jfZf2y8
zl?s#U+9)&Wi4{577QsfFABT+qQ750`)+00$QU?KS23YA1E1sTK<zw0-d>l#Dw@Wb{
zrKhFRgD=<MR?gLvORN8!6RvLlc)I@cOR-Pe>Ua0p%*Gd_bm8TIyxc7p@n`bNPj;ZB
z_`M}8vae73Xgj&d-UoAV3fE(@bUKFR%LA*#6A$ZKa@)l5>npY|Yp<p~4b;3gsUuV*
zJ1+`}mwV1k#2fSyV-hyWsqg>56PNUPbcenb>~i>&R+u*w_MNX<SjRM>?9zkOG~zl1
zSp0>}>c;~X7904bY8_B1x#!V3f~+bQumP}D0b8lc@NWw$`M`i{cjmqT*-2qxVHpNv
zwzj;yY1NOhTlT!^dh`xobtcma>T9IKQCy*;C0~i#e91iO_-MQ}G8)Kp#M7QE6~mpr
zjgIP@#a@ZeCwg+)?kx76?Z;vvS7}C*?AaBOqu=M(@STun9b#ab-Jp`<;&anB#6hb+
zo}v&yf(&uBcdnAxzgV65ezU*|qJ+bPyho7t?j@<1HpI1=o>L4wI>;!}xrI8!uVHJ~
zO7><9?>RDmH}mMlW2jzOEpNeLCbU0wm!Dmxw`H<~+H^=^_GL|KJtJA7)o|wmQ-QgL
z2@A9K(>ox7jtCl%wNZ%W^sQ<`gzJ?V$CKrh<-lj$hSW!A|7k;>si)=T+|1|`=|39I
zWytC_jx5|#9f?^GIpgGt+vTV+{hjR$q4P8p^4t1h5)`CPm&_(;%n0)Y<X@_Ih?-g=
z&V<_q1U5BwidQ1(<G2HVCJ8>Zbs8-y<I4<eHF@OehuAo75jAG{fyjpW_GhFc0TpN|
zqqd1^TRkI<h*|wz=V)qk!xzFpOdY@=6`?+C<tsL3KpLswBfso^3WYwx&lm=rGA!Wt
z<b)Zd%ZkPVxogoo5#vF)xoR&QjAjKL3|xMZLpW7v@GFj6Y4wDJ`J>mV;>*}~@HJ8n
z*j=`)JKh$kpCf!2fMpjKPXYUoYb0n=L%3$x-@jI2GDt9@rC;eJjk~IknPe8YCE3*c
z0l>mX2+h>yTbLHpKS2a~W2#PJ7easX00>T80W~1H=<C-X0B<0l)`uQzA}JSW2e)x-
zY*SSKGLheXYBe8tM5sEMIM3-n(Y81|+;ZpQKaB5D=p(~T*q#e-LJf}&|1jsJOLW8_
zsbUziuEf-S%v7u&Ch!x5k_|L*`4;AVJmeG?u-9nMA>~r;DT^&;myFy4ehT3|VmRiv
ze3bG>!3l_OADdLU6yp-MnrrQ+j~B<VGcCmI&*0g$C(uJHhPP<!328d2;jvF?6yl5t
zkWqkVN6}%l(d(V>+c12H?(&JZjNWi_oOr+d%GJ%})=RM8hDWcQk=>01gb2zio_OPm
z9P|45(mBpG{Qg+C5qSh91x=MuFr$^?0{R+U3A#NJ?#-Y4;?B}M!?=Q!P#HsmUAT~a
zCrY`|o<U*MdGDluYIH<@lcVVe5z?XPA)8*FY=&}zb(>bXSXEy@sWJq0nB2M>!2vEd
zZyE$r*EK2KwX-a>m$y6LU(Y_2OznNOYHhd<%Pi%8>y-cpey+l}U1HwUBH#(f4j1Y-
zLMxuA?A(srtg5R+$8pMC<_~3|cM_b6&`NBpbx4I}nwX#ir+qitN^Oe9wi@NhN(q4^
z$L?%e97jLKbMZ25HZ0Dt)5MSkU#j2{zY{PvmR!~TDuy`M-~`dN8r_ck@U_8_U?;!X
zFu(dEiQ|&lf-IrNQ?&w#l$7(^{xZ#j^~U9+f8$K#zi`scuJxt&`$=HqRd3>E+oDdH
z+`KOpGE`98C#@cb(z&7VQ40XYxNu+Vz5^cryIJ5%a7yz)Bgj4%$+C6FU-9K!M6q$1
z*p({VURl>cQITENQQz3uSj*>;3y%1#GG-7w*)@>lb}^VNe*g^2iZ1QKCV$=)=%Ch5
zR8TUYCbjLD_WEEl!kb+tIX~+X39fr^`lw-4Wn=@jAYr8Wk!^Fe^F<jWN=)!srKr4<
zX~5C#()FpOAm7qTAfc0&7kF-HQ|y1-t|1Jj8>#cp>^T=fI0v#ed8X~BJjvwpk<cx0
zq!6KXSf&PL4(!jt$=!W*NGI@R3cy6F{FcAfZTKf($6q=W(2VxZdnO?3aKRo0ugt35
zvKv;kl;(>?%FUkEw{KL>3o9j&>bI6!$kY3DF+%UUjYcPZ+VURM*?L7H_E@ppnf6<w
zbg%~sM?A&)%7u^3@M(sfg?svCw**IeM_g*1Lxna$W|5t;=6y@sUvZp>Adx*^1ol?K
z<%Qp%ha;@_g4`K6Wq)5S9ve%#IJ;<DJMjr6B7d~5Z#IQq&vwd`kjkVN;_z&Yi$e~C
z-6Mto01|O<Zp@gTa{bl0wR$l?+&E(hozBP*p01kcA7P=gFgy=;ugc98k16CRDYW?x
zSVF+jD=Vb?0zbN9NsS>DeVh{4va=iY)@mwCE3`b!8e;dUfeJQkgk~VVyb9Y_JbE^=
z_Do1+*McnQZy^{u5DqSL=yvi$H)yG}m|Tykx<zAHM@{=-^-gM+!K>8VmFk@{Ukolx
z{u;D`5);D-0=VZm1z&MYUQ7LH*93)Q--OKkdN;7g*cC5*Nrd4;AiQcAg`>RpHWVx~
zfEf5dO-f2CYR|uT0g!f`fpFYy52Ze8bBgQ*wA95>C_JH!n>1h|@I^(`XYPB~X3@Ki
z=1}UZKS$QuqRh`&6`l(}B$Sv`wV*|;k9l2AD;OxUt86s{?46H;DE2qZjuQxR1Nq==
zQS$pN0O`FC$<K5YwHTcMSGqO~I4EG&yhYcp?2Jn*8%jR|5>*%Zq~3N)=VSTBSu1B9
z<ttML*yi^xCROF_va%k8V~zCew_`iwkAyzw!knW-25ZIJhQ90_7>00&w6%@QmX7%B
zt>kBlO=$|rwySPg>a^_{uALTwK(K#yhciTP!wW?OR{qW_GV%MyvGC0lvIG<m@7z-7
zx#LQj`vpNKkJoE91=-mp<Ne_g@BETHDsfDwlRy%99bZ4;=yu)6;=?7FI~c-ja4z+c
zdhz8xo1ca94~lPjLac}yMB}AjUbm}_USB!gW`*rJoDj+4-vg9z1F27?1g~I^z69+?
zC8*pZW{u2$BHNYFLE2yJIH#k1fhjXnl+A>vyWVWcs~Bq2$cn*p9S@XrWt`^AhO>DT
zie!;#RwBEKOPBi|WN+T+i5J=ZA*%QfyBH{RpiOzpiXbmwGw<eYRN!`jd?F2q2N)m1
zSX3(0tXw16-QH_n2wl0(NX#f)I8FWmFA2<0y7r+3Z!|zl!uVA3cW4)UY1)|vaGwsv
z)SG;cb#3GYkmT@CO+iL}-<<<WfQR9dzaXup+0I3mR;SFHfHxbdabs%n;Eudb7N>tr
z^Wmll-}=S|!dX&-MPwR8Bb=h#1#S9})Mb6VS9}zf9vMom;$o7r*sPB_$ED>e5{VM{
zappFBOlS;1oGct^a*%wE;d;8dHbFr_Nj-%^ppk9;`JP*UpQGkU)`uO*(-RXe=g#dE
z!C<Xzm|)j29Z-WxE_Qb@Hr@9@mVBsmvsOg+lryr`M4a9jkRtd+Rj`qLE;e*&=Y7vc
z<{%J=r$IptQS~EcHYp5JVQ<4Q(nb7M_q_q1Q96Lo`I`FJrd~)@_IU9AY)Nn?d6X=L
zKXiz)lw|XKRzDyhV7UVTffo7`uNGYU_?h3O{gVLIATA-21GeJx*l?@TCPg4qaqP|C
z6SaDOs(fn9Y`(!0OlWB6X6Ztgb+?pmi`-<?7@g(~9e@vF;8iOP6NxZA<HL8+N{-C9
znrr9)zP&xP1SR>Ma-@d7?+)Eh2qn=nLMiSi7DoY&|9h*?jYIEHVP^SmW?e36`A5#D
zmhMJ=&;69sWZL}emd(EbWeeZZ56s`6+rO??UI2tKlH9aRWPLG^_3-im46KX@;h%E$
zyjXyNtvtAuLiZ1S5S0N`KV5!hWOQnOP*@&O2++m+UiFsy<dGeU&@O-^*6xdLAZNlr
zoluACKo=p3AYQU6KA;UvZ9ui;ZnpkU^beqBqQW@r=!#w-9~mlJxC1<P!p;lVf4YtW
z)Nb0T@nLWNDPl=r0_Hi5EujBpsGdU{wc7!?2Qu_{CJmUYSI-lspyeuT{(-$qBhnq#
zn37Pg|M|ZFN>hpEL7|?qHgCSep=N#Le%c+<Y)_Q{@|}MtzM}r4H0o5WUg_-G{21u_
z+?eW7JbrckWjjjWYBl@7{`Se0L6RM5*e^;cr+6^s4dZJ1^uAq2tdF>ca%NC#Qzsl;
zTK4uWZ0ES7x5&v3Nw&{m9@C9sW;Yu#2RIzQlO<pS=vzn8=%rc5*0GTzk6&+p<lymm
zV?ZlQFINfu1#oqNCQ!PryAPf`san{H6g3l0-YN4h&dX~DSiZot59jE2qqa1H=gRnb
z5skIAsQ5x8K$-))qM|LPeBv>~Z29QK#EM7XA)))5(D{|swKaehjFPd>S*a|6kD99i
z*H^{^6_+~f0OnBmdFJBe*jRqAAn+?#>p}w*(zWSlQ_s|FUBW}nRorzC?U=LVEW3J>
z%7(Tc^dO<@16ZU4L3@_<py=_{cT<Qp8S~6?2-@3sb7JkD^RMt>ZFJq<4@LqE^|B@G
zhZz=#n{XRba;nmSTR+g)A8eUbNTd+}e&$L@NlmnbA3+wn6OnGSdfatA@sIYU>snt1
z6Dn>n9~&7OPAvACDEMml7o;M<W-`n1$-oaR{g5wyfc_xCMcLVy(GpYFCyEEgDN$7D
zViS=w^ZyrjU;P(ll)kM9N=OI-DrFD~0xHtoN+S#nBZ7i-cZjqgq0$XfGjumNG?K#5
z-7?J3UGHIcb=~i}|G>)+g7cYq=6TLJcVG8)3+;`o+>ukeP~)=0M;v5|aK1iYxBWwp
z*!hZEJOm)aK9NxG?d_e%fe2Kg*itcL$A_D&Bqz!u$m+h=O+6cu&0}+We~%s3P4MFr
z;zL|^KdBd~jmC1K&~4%B=RM0cuu?A7ZrBP$6gAVBuc6YvL4sveOs*%YJ(E9lbQonm
zRVN4#Su**b5-6qA!(cBpW;9;E&Q<SyBi5@0fsirZ+rv!E-7!yN)hv3NLuW37|B;ei
z&ji-uzR^r6Kri$*h~j}<8OiS8;GlnpE@Z#uTW&~S1#I2i%xoJCp&e%s<H?;?Lsr75
zL-be*6!vS>58_<}-U&V8aTpysdam)N_T6bf7-$JPJ@(C{gUMJLM=yB>Xe@_Hp1LZL
z)lnAHdK3ID;TIi=^%}BnvWQ=G-Kngk#77OENilKzC44#b1#ZOvqbQmjkQCJFigk-a
zeJk3P68IlIn*R1v1ou5Z|5)SWLaDpT!BD?P+@GJjOvhbCU&F^Sr!tANa*_5-xm})-
zF$g!~&#A5L8WY<-+DCdQY*~Luk@RMEL<)(mr7_IhStqUc%P6QTwD$5Z&-d9SIyu32
zymGwnqrT^`PhB(<rji*eFmAd%N1<to$}R|n1xc&f5GB6L)TB>Vy94l9DPp=)+>j6O
zGtA)*mHE#f3#T;C59l5d`3mFq=IK+ouj}Cdw|ai$jooq8NtX5#vnqtalCk8iMyW~Z
z6?iVKQ<<-l{WmPgQ?~7uNq0TGu{C|mQVt1sS(R)tTz}bgF%2d<2%7o2EMvd77XX92
z$_mk`c2L1JKSw^Lj4ofyZ&9*>%e>r?LONxu%D@{_t@7$U8<xWN@b%DC2_OwC_Qn?p
z+ZVK%x55qLq|6PXRn{-oqvLnrDX}#+i(eC+a&TQOq)pNeN=oaTUHW#g{&Wj_djcfO
zw(&O-^fy<K0-mQ>mX~ZA&aAAN-M9f@rI8Nj%_Q=%!Cy4A*T`)pwFY>yN-n{+MupYJ
zbXO;Siiz5{EN1h)wJ8)g+jrj%4G0(Pu9~}Z6stCEB4lS2<g1Tho|cZwrf?H&$Ys=J
zGnZTw-JJ!9=cJCs%Ysb@&{aC4?TY)Be1J`}s8f8hB!Le}EjBtiNt@J9D}44r$v1nw
zA}{aTrIix8Aqr+|NEbY=Fx!S(E7fHF8}}Uny-FMN;j`hwdo!c<=CDOO(nwAA<Tdvs
z|6}Qs>Kmn|y^b~6*(2x4p($b@u~RsRQ_VBTG}eC`L9e&W=Z`nd8HL)T3Po>GrR1)^
z<GAL6a&T~Pei^$Nc?C9)E*JMF+L!My^Pw$2IjK!iU;9ALa`L0}%**N$7f$ZV44kSg
zSF4oE#|Tu3?#MxU;V_+@nvXE+Rt05<uJh)6pp`i1&LO0<z+xana>fR@Q#bBKeRnm^
z`7rj$zmnWxwyDsHW`!z8n(;H?PzH(iQYf=i+7?C70m&QG)CPg?`<|V!P$b5d##K)r
z>o{5xD{$Qz#psQ1v*Z3E3vQ)O{P*-90L%DH1$Uy9zw4&P<vy5J4S@BkrbLa>Uk~!_
zHMvuzuO*}^U{Y<-o$*KwS%dGAmd;Zlgr3_zv|b5^-)1!_OfKxuPTf*hRdwl^tPxfX
zq{6WYl;{v2sR3q%pwHB|1y=X5Ro(PT=|?5|jL5#8{EjY}smQBC)IFTk4WYaY$!kAA
zKi>)Q%_}FNBngKtI$<bvmg^JLN}j5{{}Z_fAPpwbJj5Z5qfWZVdSi1#8(f0KQ0~FQ
zzLvo{GS)O2ZZ}#0wBwbcGOF1j>k2{_E56KGYa7sgaB*!w^T}WGZjZ)rI?VbW#p@d?
z!Oa_o2t5UD#td6-)~!k8ODEdSJNsMGfwZrIUy|+q<Hn&a7YyFIZnSF>uX^x5+`Rwz
zM-J*muqC|MzvmKj^S_nCKYcP&;FB43Nw@p{-JfaDId^AFlX!-L{^QcW-(4&PJgz~v
zFFOCjE9~U-vbHQzV?IFl`%S3Gtd%x_QjAJ18!dFMWvN05HM@~{cuR^Z)HF<{qzN+@
z({!{P;8agg3f{2vq31CK^_21N!55|2%lLQP`q^JJ3$q&FhV6zwrdZIdnkh<G??g{B
zk+v7qF7q?rpsG~(tdRbx4vHwJJQ;q0i;~igQh+D(%q%@TNV~C1rKNrq#i_uT>ug+a
ztotOpaz&#n_xd8oVO4Ry=+VznyN?FC;&!?loDxI%>y{;^0YlBU{T>TCjg`9UhP2Q|
zLm?`6KQi6M^&ZpZTZ_9!WbS)AN00g(yFIP{9;j3_U}c+?&DIt7gcry$nva+biuZ`&
zz5(nz0J7(j6;tLWwC4ZC&D9s8s=8nGWx<A*_^Rw_-IE-Z3lwN04;{&2b$zRpuq^{J
z;75?R452_-rj^mX-UJ$jx76=kng@fmEPcY8vB*}%{iapJhCha{uW*Y!VbJ5iszy&8
z0`ar&<CWE?*7Yu1*oyUEj3cxi<cxRMeO}K79z0KXh)P%8jWEJUSKLh(UvUogVF^C%
zvT7QT2OZ)YwQnAJbX+xS+Pn1hpog*QvQV5&9kfw6ZuuyE%6p%md$aiFAx$6M#UC^L
zX~Lv(Z~FE`JnjCs@JIpZV{qv=lF}zWF#HGPKFkHG5ZEM2^IJ}&vF^-vRRt+mlDhp{
z)#j{V887pc<N_Z2ob8;wwA>)E*TUXOPidjwjP0_Rz0wT)cU2&71@v@yc}v)0^IL)z
z;kUUHTaAZE^1m;oS@G8m8rLZ!tx9^FhSE_{+Rj7C8!gp&8~Jx&u!M0VGEbs8-Nuom
zp|FEqd&!ilyqCM4T=-Ls5iZMgo=Z|5T!+-NYf)I+a*U_q&kyujFIv7_{970Xx<vv<
zM-RjJ9t5Z&^O)7<UOoYN(A(U%n253%t1&vE{hFC$g`aD8e>xGys<_egcRB8lGn!ID
z`wc_+lWapgbC~Pq-l^AXFFZUv0SE!1lPh61A^LQGvvZXXtg5c$pLRi6aW7xy^OjKc
z;t_b%zY@OoT^B$IBlu5EOQ*~#@<yx()7(${=c-f}K*eu~Y`|?mn9l+ymG^((wLP$^
zI5aiv(hBS9Xgz7ld2Wn1kYVA*XNp|sLS6P*8H0QDC|8GXQAalZw{ZfUL^TaBaV!x4
z(s|{v6x=O-OX0$8t4S;X=kT|vq1Y)~bVS!E-#o9c{hzvD^c+@u)}Dn)2nUFkYWT2V
zpL&*TJ)R&Y)TQJ9cBjSKx3f(U9UaW4uiYFxyLBd>UQ<$>>^ss{{EYX6@V_n(0>_&S
z)47ghr)#q~vh*?>CbM!BUNQHRC#yk+!ps}f?U{tYq}#TC2@f)&M6}M>5_>4!)Q-RJ
zZyy>*cdcH(ugOTZH;tr&?AOL6Byp(!1$Pe~qWx9hF|>tzJ@F`2rYRg5@LAIlW3>1T
z`%R<>VryK7&C&#!JoNByffjCjs0d$zg4UCmqSI3^TcY?E**<h|HDYB?<+Y>fv-gSH
z&Ji_y6*pW$Lh9INmK1!@%FrKMmDfWgUozs-=j7+JyDeo;Cg3Ge+Wy7=%_tXnlF+Ro
zDe2o|V<YG^_hCZf?$1_rO$ek^Qq=N+59mrls_E)-VE87cbE~R4&R&D21({e`yDeCX
zek%SeoNjTHlW&6^NiUuF|48gkyW#x6mm=_;{R(#^UtG~(A0%ugx;l?=g)qP}E!EW>
zqvLjOnkHz8XCZ(aeNdk(9Z{nUF*wN1!P0>csH>?tliSpXekNGzKZe0f%mCnwuJSo_
z>HuLQfR%=~d<0vA)kPiVecB4iXyW_ZcH7{*h>=^Ya}yHImQjbCyeS^(l~v6px2e2H
z9Jpl^uY!^;)4frtux9_6dxsuL3b_P2xOZC`UbEo`Qc+P3gR(qrh^2|i=Di>_ZS6Ib
z1z|3emR790?&h}J^&&~pB9|+ukIc+-L$Usd#eMe@d1>RoA!!4NwNkxS3H{v|)GKeN
zGmciFBb`281oo94aw+1iewN4>HYI!r>d^fGVAylz7$rYgd%bVbGL_V~t55S+^Q`v`
z9#(iPg4`pz7$G(zaTi~@6f+)`VnAL5l)qoHYKk>)5Y~BHP4(f5srf|JPR66X-V|~D
zcz9mbAjrF#^(5*}O5HU84J3N#xQ*WO9+u$hV|zYoxQT&pCrG@_d>M`GdXtlp!KixI
zRQvh`ZDU?#?Xl_BjGW9&?$t~aIS6r2oH|`gUm@%RW_1-emjzIviE9jjZqi+VO83a~
zTdykTz9r7e3Tl<&!t)<K$V_pO#FO80w6}L5$>Y7M8DY>U)UPN)mr^%&sB^%RIknUn
z{C~wC$Y%^=*e1!AkZ+<1TuEX2`o#4v#K+Wb_F=&|m@2d1v@9#-b>qn5<!C=Ysp{<?
z-%p@ZEP_0_<)9Epc6g{~kK`;n?^9WbP&ez(kauV#%rEYWD+e50EV-c1qj3b^b&hJv
zkcNhawxw(=!LhDyFh|q$XcxV+WUqJ8EzZ9=-)VhxPDQyw3;)h$7x$D2s9}~J9#&cD
zO?=G*rPS7{R!~Ydq13gr#ti~>6Lbp|bm>TE@yHU;x(q7B^U%VQ)+(2vPRrUQ_oRvZ
z4KP(G+9`)8HFZBThK@LqN7m~5ZrrZJV@8<@3Ha0tZc+;sg*~PW$rOyvXNjm#W`irc
zs_S)XNyJNkY1{xB;{`XLN;Qse6d9|v>qVRp$~Vt_CcoC!-tt^sN3GhzKZ+rUsGZtD
z+Q3v@*FHggG(#-t63*L?AGgq$>M1kO8CLX}NpaMVFm5%3f0D#cv-pj7{nU;3`Z$IB
z4m#JE-N|wDb*m?r$RKMlw6_JWBS4^ztsvpGPbxTl8q{^HOZ|&v5eL^-^*|SvJ{t^Q
zE!nM$bI6zZ)y~Dboxw4H)<oA?jwY3l%r?u44QEa}j+MzC*Ki88`Z^pe;5)G6rxat&
zo!8DRRqQtmnR9#8UUiwWC#%sMdW#%aZ;$o_-2ClP{-F{(4ZXf%_1eH3$>p+PO6G(z
z>6-|3nzYu+hcR-a#4Kw9iD(z&$P&=LKbq)y%9|fs`#^P+nFNy5kAx5TknBdN>y-gw
zt^K(y|6(e!HizY2QGkP~tcQ|mvCZ3@+^NtlGOPr6pGQ79D}*_o*_LKHH(;K0p2v@m
z0F%)xV!`bMC0#0LS|a4+D4pGXa!hRXyoxvg_lK4N_>Ac}=iSTN+6jkt27ZK&Z6)F*
zxzPgwIE-VH*^i4@_;`kR6%IWq0)!A}L*CQrLT9hNkCK8ITjl7yUKrD*hSkRl!{m~j
zImrH|#D3ln>s+vzv`86R;!=**+7v2_NO@5j|58Rj-6*fl^Qpyky-2Ek#+n4tou3BZ
zy;LN><}J+l*Hdb-jXTYCd3gBtrIW~^4k_4lNVJ|BPki%c_oc14LPWj36J&-OM5iQp
zPr_r>j%axbdc=`pJhhAYb=CMT_Ov*?_@Vw&*s^zQZMU*X4p+v1+6{`&<rO3y=E0`&
zM)jMJaj<z+jXZo4-vMzc<uknmjT1*?M@muAY_M&F0Ya!>MFhEUIMHj={ns>Y!vQWm
zIdf$3{oohFHz!t2kMBLruy~sBVMsD4(nWa0nRbv-@N1{bvv@+$#r=B#PqVvzJ*QK0
z2KK%fBu8qCcB^NOf$y85rFLR{bm$_sfVmfX{AhdmBZz}tebL`~sniAS|B-rH(;F)S
zZOd6O$9$M$>HRDrdsw@+0ChQfjD3R(U)_Zzz*NkM+P@}N{Q7u$O{sVijj%^&Bs-KG
z7RYTrO6`JUstbieagiWZu!wAio1sTbg*^DM>-#ES(DGOkM6`n5LQd?ysyrt)eX--{
zaI8bYTQ`=8xo6_`Lzy`?Nn@V=MXfi$?}v38zPO{KI;HKaXuux$E$-vn&_YMm3iu<y
z-DgjWVIv~X50q#ZN7kO^|Ab7omUWNasNoUS#!Y~ac~57#IIQwY+A1@cOG_K!CP7|T
zyY8_a{ZynYMdelZ^+2!Q!F*N(bxM_;?+M(N9>xjDmFGb3-d&01YS-1_KBXAAEl5@R
zil`5fvOY&)FlEwo?)2Np+TBqULI}Vm??gk|Kq_Qs6#OzORj=6UuCDRNOaPR|k_+er
z6sv&qGC!+ZN-W<mE9t54T1p~F5(Q{k2z<~99#E>EXCi35X{cgFGxa{VA9{Nx$@6SG
ziIL+ko(KuxaLta5tvX_6ev%@intQ25dv*|O4xLt4zOw@`Yp-B_f=*WTQw=%YfPjtm
z{Q%JEJ{0&MK|H7Sl{p%6fxj>H0gH~grDf^4(p}NW1=N5N0FnXHl}>aML{koJmxeLD
zLi#<4l;}Vv50|P>Ma9MaOU}J4Zp6-1zNZECyKgNlHv3x{(|h&wM~c$xYWp29<2So2
z-}Y0il^?yT=*D1ZRbCgopU%?tM$CP_)64I$8sOh8TxQT3;!Co(zcKes6xrM(bo8ZX
z?HP~5!Dd88T($cg6?6-YrVXw)1VALRB*(Q1Ju==xcNg4c{#+SbRu{p+{P;s%lq-$8
zzhdYJ2f<&ZpD|1=!i+8I28ZznrkqExsw!seuLo{#J5P{WK-8F3F;X*cLOD4TwyAts
zci)wM52ag=#O1s*{-KrjAjkHB-C)<$_3e=IEOSvu$0)(wVMQ^kjF*rg3*(HJs_quZ
z)8z8<)<l<;!hZ1whC$l2HT$y!cb=(u>J*Csp2BFF30xLF3DJ0$8GweOFVRtAurfEV
z^)F&~ZK&qo9)Z~BbyN0;&aF+Iy;w%WmA8c^Gd@hT(z-sqH7;(5&Xk4Z>p`&K5#C~k
zrGCASH*~HLPrq%!|8m(g^fH3(hTrMCM+WQxfqw(D)c9fj)L~l_Rhi5rQHO<aQcW1<
z-W`7_cV}7S2+pJI1=qTsqgBeMTFIteHm;ft>i{j+GpJF-mWI*heWZ9ntP&o-as$=J
za9m_*W2?&TScO(Jd8(Ct)&yc*5TYDITQ<8|IBT0_|Nig@)b=N}nK}u!RGKYJO@pAJ
z?<caJ*bcuG+8sfa=x*`b3RTT$J;ttuUBIlZ?Fk`bha{4|uNQB)FybydikQo`z<`@Q
z)Ij~WXeh&9Bo$-@QLoduuFNTBU)N$?zO27O&abwfwW3{mo`KcHb=pyIH$k=}r=)a?
zcLf7xDKDjO{0<F}&BO}Alod5@`#3$>2dbzQ=n|)=Z<UIsE>&s9{i}Z6KGprG;-n8F
z%ft*3DbNxZ>Cm#}Y6uXFIwJ!#$EbCV_}`)|SFFI67956&d3dI@pkC{h0N3phB&F(%
z1z*DYZKuR3rQ9c~Gq9EN%uFVq(iJbb707CGZ6`q@)-;w>wXqV6a%?{etCZb+<c_oL
z`eblVub6Q<p)QGr<1gQq5htQWo`vs(q|ncSjn8~m<Kf(WQQ}LW?nK~CnBtfRBTg%T
z4chhJhnxZJR1m>3G@Pv>?{TS6P%oY5upS22{kFe!%ay`R^d%obmb_i|*ZPd$qwh}>
z*u5(MT2UwSvii(vFM1<CRmm1I%r_}NSOPj)0c9_xbAam)BHD2}gsyK3zH{+Nj`@^F
zcKO?Ax-#IlG+NdT&YzgZxo@ZFRc=&*!j!nF|0dvBxgQyGH+ii?VyZmGhV^qoW}cu)
zUl;-RwRkwuXL|$Bzlm%g&L@-4y+cE5+Dywm(@4LF2y$<3(ycEmIqAz|EGNq3E~_va
zaX@_}>~id<UrRfmSOoNzZ`@}Zeut*UF`@dOTD9tjAzW&}NU45w_AV+`5bVImdAq=d
zpUhP4DNq)YfC<XD(Zk`Ady~Z}^!-uzR#HxD+Z>Zieq6Bpv3s2HmzXNSL%|Ogb=)WQ
z{2Y)N=f4P;t>o?8x+<5Zi_;pEc`}V&UT(vdB{1<^l~Qw4Q`rhHRc8A)0hwwfwY7qv
zBm0^HAd<bsY$r`{_*89tQa|UQ2}S-wP1Ud#M`ExQb1UbnypxlT>BNMfe!LS@Ff_h8
zMExk>RiRatuFv4dGRu-d0k=FN?r)zoffl+le90)7ijEGDjKy!1^$j*J1@GPTaI3M{
zx8B$d?}?3C1YK>EF0?3HWx9DCi-t>wU-R<`Azxhp=HTa$?$vMATJ~+a+-0brKl#up
z8*^I#;Vm$0-?;R&kFU#o1|ccrQSPY+N`BnO`%cFrhdHJZ`C4I}>8QlqB&NT$$JY#E
zJs`fgrot2Z{iAzhvGJ$Cf}Uma^3i)UUN42PYc5@a;R@L*2aHcmt&NSj)$3HWYpJVe
zuBmSOBc^A9x+93aHr7kiYS|+2%k16)VzuSI#yVNVrLix%_DFlsi7|i2#uJxQCHt!|
zlUTDAb<TreRgzkdlSPuM>{*SVU5Iab8R~I~=L77tu`=D+B^?t$Q(OpIYOQE{loZ!8
z=j`QF(|Mmt+0_}-S|{h(ue9GvV29BUx^{8ilD1`YISNv(2nn~vC!^gEKgtJ~LbmGF
z509qOWup!ROl#Myi_6=L*VS(Fn|*sP2`Y6TNRFB9>M>PR=749{<5G>El{vn9b=9c*
z{BrTl*w2e8kD#o)cC39UC;ae<u;N83bY|RQd+JMdJ!koSH-5g+lUt>0VY&j{tL_Ru
zYoo*U(tQ!AP@=<-rm4>(sBaN}lgs$fhH3f17eaoSmPR<a_x#y>r~85g6#Ziw_mpm=
zcl1agRO*!}aH?IF1xzMLSnoCJ=0YS3Es8RDKh_&ZfsVF(5p&!l(7cFP?6KUg%&5^S
zofQ9G^{wD3xdkSpW74=j)zb1QP8mpAl-VwA3HkZr_nUE%F~5g|=M<<Mv3!XW_N)W-
zj!}SxU-RG6b43$Qs_eg0N5GzFezQPOu<MbEX+rv7g1#<<a1#}CCW?m|HxT0h3u$U;
zxwXzgGx&B2gRw}OdTwc}Y;X=;>;_@vH<K9z!<~7gvzC??LLkjl$@rGLL*taXy86*E
zKZ5hY0H9bzq4zfo$_(3I5!c%8j@v4Z0R$Sk3nM6fJyqSoj1;%-@vd;UYg>W<%tR}{
zKx677aD_;SP{qnOCi?moAwRYd{<fglLNW<oXsL1j_$@m<o!6(;WUSC?X13qf(!v72
zmHTPuRvbEaw~|u6b;-u}TaV#!k87D3>l|EAn=JzMf6{FK_;1BKte^L-Sl6bSKev~t
z`>6SN=F^!f82DEAoi;X(&*b|{sjNqIWr*PpkBvdqmNVbk8cKehWQm5{fK%0juFxj&
z&Rh8kx^F_y&Q@!$e9;-Q&v50FwiD^*U6P|G4el6t78{=PsBE=Ruxv8e_Li`0nW1o3
zuwdfeapKUhOWDIK&m$i`et!M+r<WH*>F+MZ_qB;!GETP58UY=E%E*tHH{N30RqxjF
zAi9vfMAz=gsY*$T)5A3(?a7VZTe1uI^ox;SzKq)H-4JvM=GU+sueix5&rAqdFLxy8
z?rv~ZgpKs}zD%`NT@*<trl0JvhV#%f_rw%8j6u}ZW0d%BuTIsEt&k>N?a%DltZKB8
z4W;21G8--!#2%W_Um1AI)*^FzqUd!{gl8LZ5QXIX)xI?UiMK3|RZ~|0op9q|?pnnq
zwO4R1-U4l{*oRXRRC@OIgoA5@reo6zZvyKw6_d)GsB(0q5=w`7Nv#<4%AG0$skrmv
zrd@=BZ*ojZYU1UaaJ+1I_sH|~F8`TNEv=cm6x%sv+tEIgBJEa9^KB-ku@)LyF7weF
zjB?SWQo%Q73W=$>5H#brEce%E99S2$P8$&+G}^gSpDC(6j4SH7b!}m<b4{h#b~L`!
z*B3ML<BD9sB6)WK`}T#4|Nhe}@ow0I@NCzhoc0H!v#IeGjceJg_rzb5;OngRqcE1F
z{FavN{$_wXASe|;w9B4g-y82U{ge?{7{hq17X5kG1yGTMmBNY0m=uUycUOtPQ*nfE
zW>ji2O_GW(bVq2w_)0%B%5!emq!z+CtV>3QCBkJ2K3h32c0MPw8gf0GYmtA_SJswL
zXw;Kv-D>IV>`5ulBp*AESSd7+&Ru&$7A>tU9mCdUF;dj0TVm58^GwKo<x3C<h5QJ-
zZ>jL!4?!S29Q5c1nMv`=Y%nm@#*()jHT9-L%!2B8^&PUaTjBSv=*CBC<a{C|W0cz+
zpP!EiqX}x$)Er^d;*P#hJJK|)k~o(kj}nt?e!v2G+@@Pa+M}4jhj~?n{gxNb0BbG$
zE}FxO4834;#d5fyd!m||@LFXU`N2uu&%^E=XVkJw?Nl+7@V^)J&-JaAy{(d(E`iWU
zUWK{h#c17Ub@=J96rXo!>iKX*QDOKE86|4fs+Dc3Y)P`zYXQ;K-CZb-=QzvEgjd+1
zNZ`_L&77jHFqHEU$t}NoS6MAJdl%&vArm&8h10gVWoya##h7_1*9T*dnk;G^V@!?I
zc<z_NmeoRtR9Iprj(DzQR#_RI#gtjFGNq=bxAAzPE`r5neOjN9VyNl{j1<>~L^dFT
zV}H1?v0Hq0E8yC_+7>JNO__&X1x2_gxuIpe4=5s}mxuB@4aTbM;jLc}o9;=6Tvf@C
z+t?(GVu$VuHHqx_EZhYh(PG1;rvB(qj-r?X?$S~%rMyW=i-^hq59+KfhYm$+7Vf|*
z=Dyq9#nfQj9gjn0L$hK!)BNqoeYnF!9LiAO=b?;Tv;5T;2N|Y9O@x0e;lKa1vcxkq
zeawWHhD36+e!4E1-&mo_Uq0EC-NqXm<Lvs@he**iDq%$tEA^*0qm<0ckEpG>?|}}(
zcH_w|Wj4_vw1R_rQ2UE2h?FK{ywZh*OSMnEn`8q`ZB}G>K9>2cQSn%bR5)$a;DvJ6
z$Tc2pRWeo)*<7(;rVMOh)(lI6P9x0e2Q`&vuRC<SZVFIl8<q*HwORPE6`{i8(8tA1
zymPCD)P+GRNsxtUm4rp#s(HMkx#b>nd2$hs)@}57<rbGzP?UvI?PP4MmMK}_a2&Vg
zx&TtK=7DgfRk_8)G6MeUQ}TTZ0!ksnIY>nX-%AnCrA*#)PJFa5`b3Hi9j!cIDxg?6
z#<imI-p!BS8zLrlwKN;shq^)B@2WXjwS-|;;o-AHx}CF^$4Fu#t<IiznK~TAQW!(L
zf3M;n;%`-sw}01EQ`6kH#*s>5*1*D|EC@#Gb}!S+PK_Rm(Y4proRo5owe+K&Y*a8!
zp3TT)J7c(ty#X=pxDjHN$FTzTurX1vI;Z<>T2Mfs#ODa+=;c(PwvKf7k<J?qoAcIi
zB!7#~0GY?+mk0f3k4rDI?I!YABe2)AawU4^T0>*SOOx0;GlaV1dCkREa18FGaI7d}
z<XE#ZVyj1q=!BMEE!DZZHiBODT1?J()rYkPFL(XHoDnsDN59g}M~}DT1&5q+wH|*a
z&=6a$u%62am7+Q;2+Zbwfo&2vTTal)%$~Aq(<((Yl4aJ|;N?B;%Tm5Mklmk<;A6z=
z4Dk?S8&~D}0G*S46cv_d5SxY?%0D!%OxwBV<%0sZrx{OHQ%ha*_-tSp4$G@9$o)aF
zA}jo`tsVZD)<=Hm*|xZpYVpCv=SQN^S~foaN45TA#rJ$f{E+YEpIykwU$c1bb6)|^
zi}W!ArsIL>lU(+W^fa3an4FhH^)u?O<(JTTp$MMrCpf;oI2a-e<E+rj6^-@bSz5+o
z)^)9EMHeW<qPZ>Wn!{*7GGZpk^SMSuSZvjU?wT4mG9D`VFJ=Won>r<5!m>S7#-z&!
zze8A<Ok_<lFC6ZDQ!o%b-9K`>!~KyV9O5q1IZz2>&yj4Sk6x*b&mq-re!}djw6+1O
zrI`It<`dK(o7omI&XqAJWu7>o=KNehe&RY5767Mi(z%;ES_aKw6H=dbxUQ0xkc4)Z
zZGg1<8plhS#?Dx;)av}$U@W&aS+xmfan$8+-x_PVndDk8Xj%se)qGWz$6aVrFKLdS
z5PG9f^e@H;tXMJ!*3IT-hTOXT?pV7z=;#-0=D_#Nc*#GoY>H%RzBr|Sx@c1ko2W(y
zNg&D;2D+s&tIswE&z@PC7fK?fT&RJiwbEBP;-9=5&c&B8v~d(N+B%nI{{t___RCgN
zpo-a@A~HRbyUaM@qtb49yUpO8Q383^vs~G8Z#|8)1#&lTSXVoF9_#g(kS)bk)t{g$
z<j1Am5=WcomZNF2t;<3MG15!vyXgQ|$GB0JlQV$5u0^)ZaNIin$@$(oqvksPe;e8J
z=Q72*S%#~AmqMMtH?~TsdZMqw0<M!nnqAV)3PVrqI;YX@-^<M6s#J6}?T@bI)w5h^
z=5h2EL5z?3=2~pD?Tpu{V^8i%I1&F<kb7@>nIV55S+`&#v3B|ngEgoV=B{23)H20Z
z$Zo0dnni6rr5LLA#+JoKYEmL&@+P@;!p||#9wx|lBL3H%7>8na4#v(bkYn;o+Ad?c
ze|{H?W}dq<<OXIJSzeY={Vz}AANTcE^tQIeXjPRDp2FK}?4n|~bMXufB?uPZ>Q_so
z&XE$nO}PE-*Y~Z9koMLy%+eL~Z%mQ5(@mB-G+pBLrT?Y+MQ)L`S(uoZ5YqW_e_RUh
z?e_zcl-_NYtK4P8W)9|3-T9XyTmJISM>n@RrTR-Mj-RU~I!M90YVK0st-H*;Oqb+p
z65D7T8}WYM?ldh)+aUV@tdYt+rf>G;-fet8pN30fB4-y&%*@s$uh4~kc~17PE%Z8y
ze&;hWKCVOQSej)c8$?~u^){+-u(z$Vv#9j>6ITC>UNEoaOh~3$0{6zR&s_N=Qf6_p
zr@g(Do#PvYCyWdCehu+_gvgItk=uu6U{=B&0$@ac@1jfOJB$qT{rgs}reMk<UUfJ@
znUOTQa&kw!MyJi$`QVOl{q2E)f$4cP@A&rBe|@Y$m;Pmug;Z94emVQ&gT+ZC`{2M_
zZIIhfe5`WZ`T612t};*(i{C8ITF3fzU)%IyR(DD&E8Bf~wesuX0`#9UwiqdG%+2NR
zKYUo^Nw+Y9(s~`y{ooq^FAtIU!bSG5bUu~CyJ=b~$`cRknglM`Dt-`@6IoE4mE@bh
z{NR3X=>40!FBd{+r4;vmE%Ejvubdp}{Ay4TOWIAfkj?@WR%jyWh{U#)<wr-qy-$&(
zyH=(+*u0LV*?wwzdLi!0{bEY)%xdqwM6|B;hB9bs_JuN#IsiW5nnWtLu##A*_rCwq
zu*ozRW5jH1ZOwGOq>lE)WUJHmTD5P!oLA^>Z?`7vJP9Y){N?Lf)sqHbZYs7blrv;w
zzF<%J`MsfZDTX8um9?}mp1n_V(biHDHQ#QQ7Au%Et?v$1ORRNIIt)-BMy6V@vi4zJ
z%|5cr!>o36bU1KZZ!gFM)i=Yp-uM7|b2{mx*|EvE*jNGDKojelcK4Vv_QM^)ZqX1K
zv}s&p^-?<ZwycLq9(rp<z~4}hW{G40X-(8#GrE+#G3V}RYVnCzg5_>23%(;4ce`^%
zxh)w~cEjE&e^JVMnNDaFut6Vlr1ap==G~hi{<R}-6-1`&OGq>oEl5A9aJ%n$TE<a$
zRBvrwI~2<H<S6*9Q@!dGrn$Vz3zb<~WCDIfB|i&;xa+xp`{99?N~*NAxoHNK&B}{>
zHumb3S{eHwqy8fpXvj>Wc+kt}U(gLI+$9dAwj4F=?#~B??d|2u*!xZNB+DhTg{)*{
zYlCWWaGX7I>gu|ijRIpnh`SqiN~HERtE2lf*k1!5;A7@#Dm6W`Y))r;yUiVb&MPNk
z`TGMI8H>9$v()oe-N3)4j@7ay)Ll$wuV-bor*&25T~;e-X;~z)4VzBrgu4@!_sARZ
zHre(=i2BAQwvr!Lb8v46jH4=_>p}M%EbO{|Uhz3Rl&Ysl1HH<03=eeINq_6y?Q2+Q
zoMDVly6xSBGSr&np-29jePI@SZRarL*2j^ZO7ppA8iEtAxP4UtvLSJ*3}@}%C$fsH
z?LHgZ+oOJ`D>s{=IkW868?KyamZMpo>nhYx^`lv?`Q9ztVWfcFQ|Mmf`2Bq2{#KO2
z={3?WX?=ZtIEve*vbA>Omylk-#&BMAF9$9~68pfzd*UmO<$16AouBBone`3O?^zm6
zg{R_-Q?P2yx_=M5L)IR{VTAbE&xD?$dtz<;bvfyA-@Y=mZ?Aj)G$SK&z3pD8pK_X%
zuTkOwC5MVc&_svQ4`hZ1K0dyiTZ}+eoPoN#&DDP|!*#DQ>KYot>+Z@jv~SP!q<@%0
ztD48I%^ltGKjLLy7(5WxNliQcB~TZzh_NmP7Ww*0>QC1A&g^fbF%GKj)40$q<ndo-
z$n)4vqXYAV;)$c!bgu#&scrZk)zto&)xqY1l8%nyD{HSc08A=dTF!gGYND;AH1D_x
zQJ*TQJ~ctC&om;M0zbQF9Ulwu=l5a;;SSP|rjUHG7k7W1)-Vg~Du(q8?H5f1zqR7|
zo@^6hJz;pJs#|3zd4u1<47kBi_@#3A{(PIf4@lAam6}fBv#1G>0%EHvpC3P7K&M_d
ze<0Uycqcmf2Jr0bw}znE@Y!{%1cIq~fA~xsS^>VGg17xrWHyk=oWAc*JLAglU%mN+
zCr9t(O;%3M)9_084W7%tZ{dgc1?bx!28jXxK3qVlyp<N2%^Nh)s5{mtb8Phir2bbh
zZAh(KYh{`vx@4x(z6V>BKGt)LK3hxd(XM-+*5df=Gw^Cl83&07=nmSX<wd#)Y!^H6
z0E}O?!nt^KP^^s*@D&-}XJ_C0M8sV9$Pt5B-=7Qhhry_3T0SzfRIgiHv!edJv0txT
zq^|k-SW)6nhu*8?Ub3$z0|Jyj9=h#SPvMc18<}mC#9Pd#@Kpu&)_XeN;CK@s;dp=h
z6aMSh3o|Q78QWEh;wJ>0dKvor>o_T2zdn^q68hdWCp%NQblObQ$nmE0>5@fIl<9p|
zR_;6dKdqK~XVzP&;59YW_V(3}37>lXOBLT{#jQC~TzVURSyb#l{0R4tB2rRn6&@$B
z2w5HqM)}y)_vSS`T0@0zG!A?^3+z!8WPbJLsp!4N>2Kb-erv~%%tyBiY!(dk0c{xD
zDy%M_tMYwZ>@75J>qO;JPZB|CDRP&ufA{qmiq8}}zOwR>;uVVTa>(y*_1XqBzj3r%
z5?_89qH`PYj2|l|=H_BW?JdwGj{}e4Z|GnYz+gs0C<rW);(f;S8~x%q9N$C>ILjED
znOz;q(<Qzq6<m@LSYSDoIQW79R@(atGw!WF-SAC+W42juZSQl^aWHZfy=E~18uonv
zdClOf8#h43?2;Z=s;ijoQPv+W+99o1&iHr@`(AB904^3Wmsfl|^;zpP$J33im!I#t
z{>m6&a4sT|<`#pque%n*&{fg7@fFOOR)^aU*wbzoa%xTI7~}^=pi7?+jpz?#6{bMz
zU$OK(8uS?xWt^tPM-A34D2%6w`}=|^e53pFgO29IwXRV+o<GJbFCjqKg-90lM$9x`
zF*^%ME*sVJJb|zeJ+hvqXCYUfK@?*zcXPSZsaTLkPO-LjAHEd+Wot;53IE}Wk0%XK
zeZ6@JYl8l^vbz1^tmjkvt*5cSg!h7%-ksz%=99x60?_1>0)ED3GgoFP$jL`Thrdxi
zL&-daXyQbu;NIy!Bvx}t8Sxo6akbdo=;)9!zf($WyFPgpn3K8!EphR*O7E@Qs}eDR
zMe>Z(dRuEMl9D)+=aXV&I1M%H87N%6_l7jDb`&NjH?)4@nb54(yV!mE_g+uyf+25p
z1h<LAlgsgLukUhMw|M{Sj7}@y)~I`_8<dpL>lC0vUNVdFOb+OYS-R=D$r0)7WFJ<K
zUe}fl>Q*6yCXmq#J+2K6VX~m<KMmn36`w{2T>b5{EC*p19lcU&!v3u!{-LLIu}GC6
zE;9<{c`|oP)>tUa$JU091`ISc+n*4S+AaK$pLo$49Ktk~S!Q~sWzMi&^zX$3cDlPh
zVrM5ffcUqFpC8+0Wh{C5k7~QO$8<{t`FaIcbY?9a93rE9!l<GNf4_74H5P7-yR$>U
zzh43$b`O5n)Z=#<iRgNI?P+<aq$4-txlc`vPCj|gXniCb)xS5mADhJKXnUK4`u9s9
zJqXUML~66dq>J{z!=8jZQunne`JnQJ`FUSJ=|JZE+5X*H)N$LTf8B)FQRoFur?q-s
zhI_wG^FP+)zE@lG*tES9a5i$kh#DAMSnT5TxY$k8uIL;*OH(_UjE~o$%#Y|lq1V|X
z;j8*(h?0p(M5fV~K8xV~-q>>?mc{~DwZ-W!yvoYTQ))4UEY(+Sw(yI*{n#rMj+ncc
zjIpbv?Eid->2Hkh8jfD}2#@@VGtR?=X{Niq!^6`=lbxM%`QPJWVmuaZX=%~Rl~**x
zJ)^h6oJy!;GyVEN?-*DY*EpWJ-}`ia1);knQIErpIKzz<#yV#OW|vCjeHwnnAWqZZ
z^a)w1C?Nj4@8z3V0cnDb5qiJg_D)0{`$;ul+v7ji>U_WdNXsr)pYIB0oaE-8yYkyf
zIX}~0Y~X}D1p0gb`MEzXalVUe7qKVn__-ziZP5PX65xrFWx?suot?S;zrUwW_JUXW
zS~p?%pDXcyZuip#EXyb-9^C(si9eqyd5sk8X|=7m;s3tfD*AT~V+^!JzqR>)UG4vi
zWdSZtVAwPIht~y%|JaRJSR)$*iNDXtKed)!ln8y9R4&Jp?N!eg3Q@P?+~Tfr%3vze
z)K~6v%+DM8Mn+P&J{>zUu8~Mh@8XGxaniuxvVQz^m1nMCbKeU4(*Kd|yWlm+5Ec`2
zt*F@6f^c+TU|h-$c^;~{Hr+MD1?tA!XIPuban9FgcBI(IXJfAQ+z9~&k`NG6GCq5X
z8Oo=>PD!aPpqWxw_*kdPu3d6k;{rx%@3%7m+#~r5Ufj8vq0_(a<NQ?iR%6d6v$9Z;
zoKGJl(;&OU!NI>eQancMs%r>&`UJ%Wt$TQtR-oxSGiV~?1S9TDTv?aU3FbD-Z;Y1w
zg!chLErNv(?;Mm}oOEI~T;r?~{q(KOKA7N0ks%*Picb)PXby@(sMl>qSe+bl2El97
z_PblsIe#DQXQ0=-=I0ZYrvLDoghWKJEZ@GZUk4bzKA*|Wu&5}iQ!s){=orj-3?ZoD
z(|hq^r4@7m&WfQ-^J^(4o#qHBUDK|ojuI-5_^ICEO3(0)digAxid+BWjo;?x3&%wh
z0bU14(F~a0$E~x9M8$E#5!ou_ceuHSdfGcxq1o=H^SdXeNo4~kE=ewWMy<244a!Gj
zvPxeQhcrD$lSUQXM`-iS!)J&Vj1`Z$OU>;pmdw*^U!W+ay7@;eRTacfOm)y}e2b1$
z+?W`nUs}W^5y)T<#~bWlFPtB)ac=CQq9UDVf_BSFPAl0=^1+?BL6q!V%H{L}NTk*S
zzYO36I5`e2E-YwHjIRREcu`43g$y5mQ~q67@ee{x2R+>L#=^?VLP%TZdJ)m%`{<sI
z4x)pD%E3IL<F2V=bEm_fp*|o@>VMAJckP~^e=D6QqD4i1(r^8oKtqPx>?#=N$t4wn
z_dTWznttz7YSv+p@At?^#!%6@*Kgi9yEfC$Jb`UcNq%yXdu3*8YnLdaYD{h3)zw9t
z*4@?CX6N;kgM%-_-G&WriI-_3klFIG`QgK!EQ^A}zR08`BeeFzsLP)D!lXuNwmWPy
z4D8p%6+*DhKTb^-wu%*Z51DTCJAb%0J28JWcO%t7GZ+1oy^G5tZ7177S%**9L4xHh
zIQSvi?v~b;LQ7WLZ<$<n2gjwhC;r->r#P$(oBr0|pql@Xo~xk1M$>1uUKke!<eU+h
z30EC6oeHZ$WDDyP(ZW6%<}886xRk7{Hkk)<1fW!ccj@v~E79%kpC1Z5&rYo{<Gf^q
z;u=K~V%FI~asEU!g+i@|06C`1$ect3=84_2U757IsOc`LFiAlcNreD_6a*NY)R-z6
zq;oq0*Li*V8}P?P*Q#r31O&EwUr;hHJc+!K^MZ&}mPs!9rM0}h^*L)#4zzx<St+pb
zoFNPd@z%kMtIX1m-*hfNvR@f^<hGA%OKIfKqR!?I3Of69fa6!cH(50DJE`yzh&$+H
z5snrX9vWq4F?bWC(%OhvPD}s3G-*wt&pPh}Z8H#(XrLrqAAE??bLn%EQMGUobv->k
z7-SoEikJZ-m(`-2LeO+?W}S7<%NK$~PU9Wf$;rJEyU+DE=i5`jGBAz~@;9Cw?fHU8
z>BeW{Yc-!fJz=+g>~V~3Fx9iKRvnP%T<KE!V=k88F=UB3e1Cs~Y%ybyw?BRl27w1Z
zAQ(F^+`95l%V`w~tncK#^{amdkY08S$v6XpdG2G_4J?>(Ru&dQ0*X#z5J@^p142yV
zN|J2f9*4Ebh4(Y{M~-J)$FuCG(v&o|Ha0pufW>0-2chQ%<(VZYZw4SoPErZ{ZDL_(
z%|UedAOI!=EWuNcE;@X|i?!9w8n1JYBS>G776Yh3hy6z3<9lRmJqLHqNI4g%PyIdj
zTi4Gg%nA+GI1?bCXFF$4^f~V7)VcAx&61sQ=~S!zB$}?Y1&Z!$OPKp{X>)fzKHb@V
zYa`%Qsy+6RQG5shZ4#X%r<?3&KYGqadMfvSaRGqwt@4ysK|x0cuDrpZVr?;ZBECOZ
zUiXvN18wSwo&}W{f3qCLXk7O$6Vg2bz_EMA?MiD#fZ&W4IraItV~OxQ?WupY7I!|2
zLoS$=p!iMKRe*md27HJ4kx*}TT5iu%v7obj0ja=zo5!BBWOT)&jm?7@eN78#iH)-C
zCvCIc#Iq-Kr;R;h2s^TP-=+}|6vaKN@7UZwlRFlgN35|QBYOOk4zqir-|=_)YT<Q&
zW^ddc!9AV*(V^2bC1vZ;B{U$b*}cJSp<|g^O+8B12!rJN0&oeA7q_l(+rLVIdxRG~
zOlmDNK1uvxIB)mzW7ChzTtFgBtVg^VWFtqXV=#INoTg<_CcUhu`8As`e)+Tg&@=ir
zFJSMM6`**j>FMb+wn;~F`(P@hW7o&A9-T~_#beeo>H2jrC$nt|T4B|#lWost2-~%M
zn=K<c;4d4+R{ic)#H}_fZcHE<Q{yh0AAL;9U*1MtZ9_^~eZR`EU7XE0GBPp-zW0pB
zb}=}xSlQW!RlCe@WhIWb5tLLPPL8nApI7Uf21gc!*b0Q+SH4m76+ZZ!@05+ZV>^Su
zA#(_gZHQSw*Bvjg#~B}e2^y1>Y#xM$3*wu{8|yWRAKB$(J)5=42+TjAP3us92(23!
zuldYcF3YAG$B2q+(v0v9xUt|5Qb<04F)g!(-ml|T)@pN&v#s3iGw(-+ZAvI3=lwL{
zLz`$0qY(ad$F)iG!laVp?~O~sXZ<tWo?GQLO$fj-n|)4#T8*h26mtTY){^*c-|&0V
ze$b;*D6#OKt+44Fyi>fcRYxP*G6*Gzc~xMOpO;q`p?&><=PzAZ0frnot>M_W{8<kJ
z$^0+^wfD;_NXyuUC;%R<eEGdYre?rP;z!$Km#+8<l-&K}no6}Rm6z<gVoMn%PV4wJ
z8H&IVJ%3`iX>Wb7M2s-53S*X;EznA^IDW!!x@WYwscSA~97(5At5vB~zZoHHw*)h3
zlvzLN7e47<hn}I-8wuD2)(G<2k$euTJY+1=F&AP{C*RR5Q5ay)O<psa$VEdYrXJef
zperuAN`)?+G;)>KFO7R_P}MBhi!%naQ*4}5Kwu`z!)`{$i{C%86xso8I%xShDr)~A
z>5P{wYAYddyujtFg-d=_xr;>HsD?6*DH!5@9pH*6A4UliOzpRDn|T&*LHIWYc)Pmr
z48o}<JzVAY=Y&t|5svjoG~esHX$kdC#qy?m+%Z$yH-k?x$GWvH_WNKA^~pM*$<D-B
zQLF(z>3e$h`{3ZlSGz7So=)y1J}%!{t1?x8{YVvY?iR%dRWh?*YmT2`pguiFsz=o%
zIWOKcjY7s=QT*k0kF#KXF|JUbze)LL!0}d2L~J?E5)27Bgx4?T4fLh8YOsz4s=@TV
z_=O<cKtsAOO4X7qb|+ZAN~5@C%B8>W7nmC)cjKz)&Rd3}j!J&ZNgZJ}dglD~aoe8Q
zcL(IQ$6T&Aaar$Y$Xkp6SV%O1Q+ZHUc*FRz*rwN|D--Eeo@W>Ho3+){-rPmYu`pP7
zne-{_?5gMKJhrw=z^hdD<b&?Kg*q=l8_(zXjwM-T7V4DQT#ycmF7>fTaYa`<q=qIL
zWajCesO>LugCvrf`3)Yc<f!0h^tW`UX`dJdEZt41s*W=`z>HTmHm#lYH=)1ljj2<Q
zT9T$j^r+V#P9Xq~x_ldrvBHEiEqpXjr}76)9nAA#xRzKA#W%90bH8^W>#D8zlD4yd
zsOyOyYix$^PcdUW7PW_an?$7b3#qhRW&u%gz0}4k53WWSpKJY8yjo5QgUHsOR}L=y
zD|~4Xyk~X9?dM8?f9Y3n`A>iRr<e#<J~jmT0c1A=1N}zW*Z`ioR~JtDYRU!GrHz$4
zo@JBdvEN9?)rz^IGj0AhaAl?=A}$GPoLxTnq(Bl;W-&3FYUSaP7?@|So9e=@ZejC%
zeb0oYZ+~ZK%9xz9Sk5ZZsMIK5>t}%1prT*Io#DkD4+e!6uqc3K@J_s-YYTR-vYvs%
zXi2u3gMP@;3vKPC%HtpGCq>mJ_L%T{{%HHpc&Rvb>l&ae74i7~_Kz#f_wHm`Trabc
zsd8et?^yDDdZPX;IpSG`;X?vGli8!Doz2&*D-La~{bJU@sd;3y@njA;O@NSm{ow9i
zfdnel?Q1%rWu+IymYa#GXZA~SqER}P$Kqgg24KaoP=9zT7bLkw+RToDow%O3M10h>
zgA20%()JbQ=URo;Q_BCJ;n6<=Oc5>8uzTB!UCd-c>TwO#oz!r7MtYAX?3NTZH<{}Z
zjp`UhWN%jqq{A-mjM!tn(Q0MjIT<xaSIk(CM3b3o!VCsdsaX1)I^q(<VEku>hkC9H
zr`rqxwBXaV^hMf4qd8cPXi32sut%=w(c|N<0kC0(q`XJrj_&)NMnZE-fVH0PQ7gtt
za_;>)aMCQBzwTcqqJFvYT04hzF_pFaG(!4Ocxk(=)UzD55uCtoSU8JUbw$N6wDmn0
zKzoY{RU5i{q%vh%gFxIR%eg|;+RxTNM9ouy?23QOHW8<{A{K;r(7lxCDiqJ}I9S!T
ze%MSJK%UmY)|n{SYJ-buImz@qe3O-(z3ZU0EdQzod!s*7am<$9kA<!>fuAf}Wp4g=
z3{)$fe6)9UM^7&JKeJa~FJ27HhBd;A2w;}{uDcK6n*2@J4V_l&)1tOtG29#L8T>j6
zmm_Yw0FM*Se&nbI-9s(@n4o25$&c3FE{f89Ms7C+56F5!1RMvB%%2MPq6>ap{ao9U
zFC*0!QDreP#;75+aPw8uE!m*@^C8J>vnFT2(6lS*O-|W5AEC=THC-od_+Cm6l#Q5f
zbkGQx3_Q~&!8Gbcia93<d$Osjs%lhcy}_JkG4F-uJXK%Uplo0;k##~lxjKq!W97>*
zWqDu*vOm}MfH7w`&ZI&i-Af=SskUO%-vzXNGbrd;)#I}&b`i%Nlk^Cutf!A%a|`pg
z9cJtF8xPlk=__5&wLJN};5@9;6R~J4wB&4xnMK!j%eo2m{8pXrSUgT^LMkqQ8nuQ?
zq9U(gE2}aR@c>P_^e`$@=0=WYaf<{3g&{d-v&m)5Gufi>fgVIa3FlfB*UP{x=4+0r
zfEMzbNp+pU5$OX=Z`rHNrhW~bU^w-1ZBx6k=YZat<z$UM+azRW#-EOB$Rt~M{>Mb2
zff0|}epc&{$NTy9i3;nq%2$d$g$AuLu8!|{txDf%=dyO}`f>IY@YUu=H|`a)6(}SL
z2_A=@Z7g9zbSpQN9htt9AI;I74L75KKQo$YCSF^&PIuB5g#cHn<+AvaW>YwdyTYl!
z=(6NleR!|Vh8~bNpV>HVwln31U~uyr;qEZU;}v+mQw%<mxcmEeg8B`rdW*Yz^xt`z
z0?JKxJNiJkk>}uO-7Sw@BhPM1f0f!f5GqZ`3b-wc)0I>ZOh8V$EIq#SHtCmrEQdei
z{gs&#vAhQIL##i7e`(Eg3HLezS<C@YJ9F(Ci{Z$OJ1T9*k)2pMYoW5Ns9-5y-K#$f
zMiwWKgX!^^a&iv|fW<$X#OVWNLEAW50x)#p>;}L}uCh%Z9%^NN{d74z>;4Sa41rg3
zE5Kgq%mXszt<8(}_B)f%7e1XO8&GcREpE5MN0oXEy>$nRD3I|O^<CUmxpPs2(+Ly>
zmV&a8NKVZW9Nw3q(OdTZ1f>94O5nMpe#UYhH@s(E<Z9>;?%ZgeSpoHGHq2<LY1hRg
zR&9Fpi~Sj5Ps6(_nL36vPYkmvy}lz71&<KXj}2;6-*?bI%Q@#YioUL>q9ShEjZTxT
zi;62toy`d>S^D_%D!ZVvwl*p#+Z~KHdAzqdX|>pSGZa<WN^85Z3&vs8Y-PhupQapS
z@w%LK+l($Q1ygYkZbqA0e<Y~imObl}RmiGo0rtG{>^SMHoY$#mq>eGDaL_<y{8jt!
z)t>?bEyo-e-#`1MYR^+PVGh{yIbc{eU7WUkK#(`73>@(K0UD_;&R7)D7z~D*`3^lT
z3jCmLzERA8$%1^;Wu?d<CC;xc>u8=(hw3gYkk3mAy6)yAP$5erl3Dgv^K`3qhHITR
z-VepNpB^mLK7Eh90NQD9@JD#Ht^dFWqt4VmOvCWv8Q8F(b#CpZSmo?JBo`Gmgq`b*
zV@$eboRAqVrGT`#><3Yl+_SEoANZa}<xuX8EsgW!Mh<ne5=uK{CQi-bm8sK=FI{Yf
z>o-YE{eI9{D~}EVK=p3dfqq>5R_OXC{F9?7*XIGiIZx~d$0(;<xgCFD9GOu>@M;TW
zf*!kVeoiWB{vqX}J1!r`<+lb##ZVZm*VOMfv-^g+uciTK)IV5Mm|gJB<^1~7s-QKP
zyW4qr3=E3lp8+CPQ5{5pkFV1v=!nsA`k7AW>o_@L=Deh-8AP~fm{(lzL~ea@D&<lY
zJo?`v&_nu<%Ja$LkK#*x0D#deh;?}7qZ*4^0?!|*LJ=ran3jqfn-<<z7lqmcD5uNL
zL`GItFRdh-)ntWrKjm>pcejJS+LZSz>(Y}08X8#|bwpl#)p^a&$YaqcM+kkLQe|sv
zi#0@!O!%z1L;UyyK~uJMV6F^{0GM;4-~3@=CXgu+A9PFaIKY&TfFsSJmgL~g8bX0Y
zL#S;gK(Z)~|Nl|<)?ra@ZTznyh=ihaBT7k%NT-ORA|)}@fPm6nLk%S%4Jv|kNVnt+
zrKHk5NOug~F~nK8U-#>N-}C;?b)7%Xb)A2__GTDnp7pF}t$W?~_xrgkzdxD;PZ5R7
zTtU=@T&^Q})?!4zuuh%s+{~hLe44=;8_)X9x$w~v(5xr3#;JH%&KW*|88<e3edJ>U
zQc5f~5N%Fs$((4KZ4md^%?An3({Wv)K-ff8m3y27K{=x%+_sHETNo;q6+-SzZT&95
zdh4=u?{+oR&=NNMGatPqD<%CJO&<O1$rwdo(x-VQ%e#UmHNlBy6a<-O98+a!_M)PL
z9-~htxvtioF4v*Cr(&rCqXyJr`!CN=p~KL;?3t#`ry**>Z-6QBlnB<K4nb)g`s8ec
zpB>2C&$l+k9vi<mXzz%MtN0oJ1yvJlqBr6<Vvr(em8QY`N*2+08<t@IB}!(SoZ=(%
zH9^5#cbRh0pn<w(#Zcvirt0P8<&G%r1xwP0nB$q4oLuG?DCeq!QRm}=d1k8yzTaue
z{V=JmxYn9r@5tY0sq;tif;X<OSEF<k|6-s#yv;jD1Zjs4QP(YVEhE#V21RaYMPQsQ
zq1^#J5aB<&kyqh2RiOFQpF<xUR6sE|k)M~}wvCLY0%Z@|eoI%Dy)eFH9@vzFz_fA{
z9%Tm*F>D#jp`caJUDTM+?c!?V`Sjd_zpLP16&1XQuSyC(boKfQWlq+fWb3hkME3q&
znIO7;G3pK*2S-T=UwbGA#H=jpu}N*mRBVvUM4hUD^u#ySRw;h?oJpvh?C0_tibAp^
zvkMfYvzQI`+~hA;Eq?E=Qc@teLtMMr-2(DBd&PK+w7(OXy<uMHE-mFt_CJk=Z`+O3
zY7^%y<lehN>_6vfsdqXx*15hka}-92qFoE#+;uqJ`K^wVTEJ%O=@zC5`?C-M($h~S
zYd$=Bi#=xIU0NGs2b1I4X&MT|``2;EJCXT1SMhL(AxJCyxfuSLLI<)0;Gr9*_j(rn
z_qYFNK?K}0*Eb*^YprBN`1>;c`>%-ux<LhQaxe4${3P#jP|qHr`2b3<|Lc>aepSmZ
zW;y(s*8XSZBw6r$NH4!`{xy~U`P#p}clRYQ`feB4q5p^C3+U`qUGv}*?|)y&@9*~i
zc34JX*u)=|(KA*ol=~x&NrAq@K-_5+>RE9V_{1T6tR~GV^ET^tpwL*pu;QLu=8g1+
zZpFx|>ghZTONA(gu&g7+Sg5Jm*&jS9;I@Ga3E)fn^QKSM-U2lbI#BaCiHwROxp(iw
z_}GmJAe*U~7{SQxB>{CnP;juN4nrmCr`Zq)#Dn=TtgWJae78x-$Z+Pi-&+Sp#Kkde
zZ4-E;#&~QAt*H~)0w9H=eo8@beAPSc2M>DSjd!A8^^znmE-oMSJifOc{V3?lS~#$e
zE|MU4Gc<Pk^Lc0rOmDe_1n!UApYTadosNixOk!0^cpj}kQC6-SzZ%<fKCq*&v0yXW
zjnHd>YyTK$@7m`#BTeuOn?tVg8Fvzb#kr!T^sZTdOvL;5#`>&H$zch$3Bm;LF$*2q
zl>S5v^s#X>wRsSGroCl|L8@8Gs<nVO3lC^$Uq4Y%dOtIS=Dpk=#ro1BVumtpGu3dl
zD+tp;7)&8adYO>YnM0v${UE+y;+<uq@~=h-h}{x<?P~p&6DCcWn)KT6BMUP#JdiG~
zaQS4<k<lN?FR1Kp*=0Gwa#&lkCnD*=q%B)0B9aM@du!b<i!Lr-FgtAtp)x*f-*X3A
zCt`m>DyINM*{Vuf;5QH~H_ZM}c@xuw812lkw18Gr!Q(68TR&yjUtSX#Vc-kHD1>IF
zq3}o?>_dLW0BwxVUF&hIuHwqd&+;>~y91{pZ<~XKWO!e{e(krlb@B9)@4VsB4%O)=
zYtyIAg93Gn)h2pk7HFZK%~?v@xV<jh&g=!2mXI!#amMG*NuK^YnnC-lZgS$1!=k`=
zV+?ebl$WnkQ>*7WH*O<OMqlw%`<%}!)VZKwm+F?ppU?9SFBUP3>D?0>8gbX>F+#S_
zoTmf#1E~0n{51|DyGezwsL(}6UPwQQ+~!w!jwz{u1365Lh+_^xW~5E703J!qy?W5q
z<9STnjDd=kl|qcTTbL+5U@Pbh1-S(e%bwf`11@bvyr#&z`Rb8gOt6Bz<r~7jhLLPR
zl01r?a~8q&kI%(9%1^OMI)7M-%dSt`?`XxvM}2D!8hJ&@QPU-0RWeFOMKEkD*(xl-
zv-Iv-=dDlCTi?xICs6rcrJ-*QPkITL<vr{^W&I%`0(wek?B(jrwT87f;=$U?3T6kx
zww2v#C`w)t{!nh5+jCK*he)>O-d@|}zrN40sUUsU7)TOg8%z)kvSjNwD<*AaXIKo?
zI1S#%#Vw;C_weUFT4L_4I&X+MjNM_Go9M|H>W`*vq?TPZWHDn{UyoI5d7cLRD>E6j
zJJ*St$n}WK!0&X8gZWSodZjU9zP<hc_rL5LK(9qj@A4`=A<0edm^A#@eK)%Of!K%l
z^J*<+OGlhM>kOdx-wE)&9PDyjb2U)`Y#oG0Vu3Yp&uNx*P53agp`!B$tc`V^3QEvp
zd}j?}|9P7~QG)OA@X;w%uO~^WSgP%N!-^<zzyRQEejX0*Np0GjD6$12sn*%2zwUp8
zKX&Tby-fW{-+xQ{em$?ESj1|8t$$tD6CM>T%K?$l4;y6GU+7$Axju*Z&SngimzM|i
z1Cy+RT7B+;-n&jK8YHjqAA;7^LblTy;1t)|*da}_$x=nLj~?J)seUz1oc19_CLV}+
zkP$j6Dm0ym;xr&#V}^;dIJ-+y^0?}P^U6@9lA7aK8)*oG<ai_Mi;|um!#N}p^UwyT
z)%C-bsMiaj1aEMO2(Mn12TcRFr;ZOx1{JRWQPYkGv$JlsGh@62ytUb^TpNMWBqR|B
zMyUc<$;gP<srsDGK1y_EYHEG>2*bpOzKyBd9o{01TWwc>&*vP5x?zac=KX0!aeqLe
zB0;Y@OP~eX9(&)^Zm7;PsY#2Xwe|9_b3;8K>917hforY2Ycu)M&}FRcvCN4JD&Lcs
z`=(;d-Epf&JOX>WQ$xjRER+0xcqADbl5TK`*@(ou`tQP3Kw`O&^<W59s8_KkYq4^f
zL2f$c2;s0~AmoVt+>&!3_w1QGXWucohUb7&r)}JRT%tAUlXiHXErUZa24Qb3wpQ$9
zNlH%c7RIVTOB59a;cO;1WDt&vg1AMekIVV?Bamx3Iaa03TE?4-d-ig2a+VSbBh~Sy
zHRV2f50L^)<gMNX%c`j0`NxQ78-4MnDul!r4fXX<yHOlbgKJrOZ_u8jl`#YSBcAOA
zRa#Z*EQs#xt&0X~YHF`Lm76}9+dDQCoXvDXH^XTJJ7?-#w*5VI&CGL8THgEkJb4-2
zpbd`)1{lgk*TBNpL_LL`@GyFh1Ld~-Th+%~a?Qm(h$kBZyD122UIQ6QVY|`=r@2<<
zbsprk#+)C8B!QX0-%z^A?R*Vs#m;Wz53MT4?TDg$I-79sbxw=kix=}gOQ3Eq)(rj`
zIu$W4Fn^S~4Mqhn5kN?VPJ-YSQ*g^9afK$e%Z82G!BXXXYhAXDIKruoKRe;z;5dcO
z1%Mr9h>~@6)VFDT1(o9ApnTfO#md^^;rnTR-I1&54BAs>vx`=n5gpbDDeamji#yX=
zXQh&DjH)}21bPAV%o^EFYWrs_kxX<WqKM_2OqeR-fT{7xhyGe&`}rfwU1A%i+3b*S
zppDhMK`?eS2c)2K=x5!T7Z4g2YGDqY<PLQxEL73wicanv=DsNBp{}OKctv(B&t7)4
zw(`rab5hJOakh>j%mz5t=7FO(CAi#-!`68qCt4c=%t35Z^(YcWv8CcC7Vj_z0g~>W
zez%3mnZG`*jxs!mf_SV<$BcRqr*<WZFZd*4%j3y`bJF}vkJd+A32D7#JT*J1;XEvM
zN#x{v1Z^L=2tq@NIY{(@XL{<Vaos|F>eh$1SsMIK^708~xv+q(+`?J|i`;t9muyP9
z%vTcOpf>oxXFW^#_DMX*xM*@d6ff+{WaehAkhx_isTg~|Nv3m~W$)=tdirq}W4K1G
zyI+Zz`+--m8M|l-sx6vl-|k9mu4c(Rk_}<lq8{v)f|qki9$>BQ=?Mz#!dnBy0MvwH
z>v5>oOM7+laSsd^MIV`bBRr(!MIA5bjpf`qO>fAILq6=Tvo}OK5zKS?b%=Sp@<gp3
zXbCwO_K7KoS4ndlyTK6`>855dH`hi1Rf2?MEMww35=6T^m@4OI0`sS{^Qu>-(+Vg$
z^r}s*jM`(Y>?NBD-jFzj8av}*cjPuszHU<=%0GR$a{Mf=1VP{TkxP4Yu0R-^ed9Y!
z%epdK>2#`{d*rbC2hlA-ee*@|_JWjq!705n(Jzk&wXG2k-9b56!e7QdO2>Kr(|YV%
z*B=t*mN>e_0}FXTuP1hP?0TmEP|_g&?gI^j!U8ap9pIqN?SU;^0aEBOhJAX;L)=t?
zom~Mzna6NmbuotSSegFVFjw)(p4T``0(tIfkACc9v$ln5&qUcUS~AeP5wqu#xFEKB
z$=^Vu*dRT0TT7`nTzv0y0>etli}kZm=iLF%G6r4+Ez!BO!ymiv@GjwA`yyOrVL4yv
zb+$K>n_#S|ncea2&RM&Bk_3l4=pVb&6+QoK`#x-qR#csO+<n^-W8HQAY!q}^sT(Rb
zSsSq0oKDxDsD+ceMV;((Oqg$6qrU$g$F!;WJPUJ^4zIKZ!brz=)9BCmLMj=B_vCpb
zjm_yX4)^yboFJu?iN~U;j+|nI@mdXSlm|v&poH(GI4)YXee7W2w6bA*+9`o>8EDyC
z)qdkEfhSBwWvM0}D1%ExZ=?LQKrawR{Kg@7H;irsdS$fSGMK=IxSrm1k&$G8y}mir
z{M^VV{~^{gHQZ`7{7CJLegEdgB|i#qfLsq?;f7S+6*O$7&21ZgH9g43ZSzB4%xzDM
z<ZAGV%gIrNWwkM<|5cVRnxyj?s&objNkOa8>jD-U>(>UC`izkgS%HyX*{7Z;%y-10
z0`j#dY#BAf^lbZC^qq%GKMfj}<8^dt>2$@}IDMPeF_BGsfi>QJ`b0JAX2t?2j8{ov
z>Iu3^@m&O0HMWvmh#AY?elYuDHCj1t;Mv)@2Z36kEH~^Pn9<+kD;bT<rX;`*f@-`s
zR3Yq2k~Fpzdv)@-VgXcjn}5<uxOeX@33x_@es@TLZ_mTrJ!XeK+@x-L*9tEV&bhJA
zAhe&FDouf3VL5_cpciZ@^EC)8dEAUyUkpbt05@WNLIS8Mzq22yg_m^Y#}@`cZq00W
zNiHZX3aRfhN4~I<7hf7Y1M$$2BhzCb=-4kd+|*iak}c4|dxus`&G&tNLdkf;4pl(c
z`OF}*HG0uLd5gv@(|qZBWZIq!)hZ`hS^*@mw!uI2t^&!4tS^P0`=A8F`p{wUD(=Om
zq^W`li0&bTBA)E5JLR?&lrM+_!MqYL4bueOI5nyxUt}A@jb<s61T6ibuty&O_P`T4
z4|<`kSTc{dPI2gCc2Rmx1xK4kZ6D<m_rZKR#wBRFUaX=SWO2qTC4G!^G=EOZV2)Bq
zp+gag_Z$Q%qWmS?X4=#9&WskftMnVR&Q_j8p!jp-Z|wrn_Nr^V8E^G83Jux>=?o3t
zGC8VVmQ4fFg-4ig^DQjLAAde%ev!JITU`8Yep4z!D1XS|>W=|#SgpZZ!KTb*yZtrj
z+KWL?ZBWW`2-X}8`z2>ulDT=Phj0jr)%a%)#O=A%+7I_SF1-pfxmQ1{UETyff8;^1
z>vi!&-b8!aN*Q6vJh(Kt1CrT@3whdQ=@-e!$qzgN<%nIGnssViYeH}K3G~S1evQ&M
zP_HSITriXq`xuixQo*d0L)++sL-ff@p#7-IpkBT7!u#nDMR!=!TN$#5qHbuE%wL58
zD{;<U3cyRuuOcLaoSnWNOtP9F(k*xp_E?zGdNixN``(y7ThEi!0@`>%YqL7Dj^?w`
zAoOhOCt<fecbMrjrC{t9jrPvF>Th&nKGJAi(-o#sn}O7SlrgXjk|b_tQZPbpt4Jr%
zMzSj=SC&eSGv#HM`eF-?Iq`^V`s7=sK)}Pca!=n1kQ0P#-V#jPNtrz#Yvs`w<l$)<
zhE$nkc<?`lLLZ9xO6Gb(iHJGo96riv3>O*%?o`CMd6Lj7mf95xWad=r?QCJ&ZK8Do
z6N&ZS9}g2cE{7ISAihRb=oGigZ!?!8uQ6Xs61E@KC=cCL$Ia)7jiV7~?f6u1n^%GC
z&A@XPHtVPhJ)`j=j-!RVcp=0jbGie&+{&tR^j}KSmgVO}W@9YP%xrEb7xaP#)uW?5
z5A%~ApXp2a<Tbj7=GxuNVdh9tC3JwJ1_!CuwW<oN4vd-cwNdi!t8BF|XZkfqTg4}E
z)OIuF*IssnYJk#c=Oe>Vc<bnQ<mE;=$@@<}MBlE-d4|$^!}k``y*ap6t$5NSaUyly
zw#sNd?gZH*jHKV8O-e)AA(xTwyf`Y#3m6kfN(SB00mO6c`a0X1KyC7KSr&gc#T;6^
zT#{+7Q9Z-!!1@iq973Rx1V7m0Y$v~ZbUoT+s$i;c)*F>QPW)?9J_cE^B>}^K7*xE0
zd{FuwZM@xmb=7tP&|4hse$7_U)M5FMisOz=yIC1IVhFUwqy?>T?-bHhSx;E;v?aTK
zCaz;*St5r8IuOSP1rtEqO_MSjp9wpt5%Bk#Gxa}N3}N`@Tl$!!(QNcn=I|H0D-hKW
zpKM^OA75t077#l!m;cyh^EPjf*<>k5*f_xKGnnv_x)9o#Jd?`HMl4N7Pk*?;aZ$xl
zirH$ZCTxA8F0(AuiU-os^+fgEbpg{}rmn;EXx$>pxSGedoG%}5vR1$HdPedjB5IMX
zShHeK7VC9Ac9Vz1N9?NaDW5imm`0znMRO?oq{ZiNvgm&)C}=)1w`&ek6Mp(Zbxe6c
zGpeZEVF@25nzJKqwPr%mb>A}wn)8AbE!$}%F55nHBg89#CtwbQMEYT9OWiolTS$$j
zIPB85Ze<Hmvl5+6@==-*lvRc;*I+UnM3%e_2aaer-iQV*)Emky?(O6U567C=Hx;Md
z+~JGIofRgD{jf%UHNucCGh0SIN!llqYF2;*a4hn!h#h77dQPp%ql{8BV~$-}*zODZ
zUPMv$a1k+T<{drq+H3*P6z&}qLUT(!aDN)7_8bTv?B=-i9V(9pacF&3kW?~pA9xgI
z*S>`?Gs)s--6O0D%XQZ+6&mhMZ<E&<Uzy(Z#Uoi2VJ}96NZ1pHk_8+oN=$Fwujp}(
zEzAm$ZhzR4>YTdm5VnUi)3=!9c9NXdWshEvIkS8#gL0h_?zZoC8Q#f@XF5PrtC?Qi
zynZQxwP4k-AH(K3fYZ5ik0OU8?;atsA2?0EqP-oBAnFxSK*wx){89yf=JTFatXhi4
zDgLL3pyrtr)@KmGDuUk4v$qnS-F~72#Gc8hdr`O5*1CBOn@fY-1a%rCivU?fio(ZX
zq)LV|iaG-0I91=o;y>p+k&X8>B9a95Jwm_M`Qs@3>ebCu?MQ7U=_vBfcSRg24qv?(
z*YaqMEBssHuo)4TfoNzdSfeAUuG?Bg5AZVa{BS&SPrWYA%`-vK7?4V~!t5aq*k$w0
z`q>qPuQPW)yC7;en;Z-UtWDb~Snua-ZrbG-fhKN7g;YCT-4vclmW32-6+EZVP**Sp
zq{Oz-oSNv0rQCud8AGm4=1nE$i$<NQ2_sMQ7noM!;cL!nI><5I`ZVnC&V55#O!5Y+
z^?u4LavwSEQF+++JEG&;a~|Yr4>T!-X$?@(i#o*z#}ea!lh2BMmP_=@1mx4jK8e75
z;wQ}I=o@%_%5AD^NctCuHYk^Ip7T<<TcE2!>OQi0M~R+zeOF{0#0F_93(p$k`OOnM
z+T80BRZpdYVcA3pBOdREXy+m~Jot%-@uOm~n+CJ19Ak%xDDMtY%A$e`vcd5?_N7~o
zhg8;GbrQ~n)A^T)vtYWuf=I?1ZuSt}YWpZYJ$H%8t95{0RIN}4f!@p|eQU<YAZ+(_
zK7H6;{xzNF{OlThrI;07Ko(v8WTn<LouPbqS9oOJH4=3QEuOw%F4$jCLwy$C`m}Ia
z4z&&@XZ?7MTf+P4kRg0^clpPtd^72;SpE_0z877r^B-qP6Vl9O7h0FZ92RXvjl=Xx
zkb_O?Vfw<>O$w5!&l5zNjyQ{LXS$xM`aGCp0$9cQBtFDOI9;DX2r4fjrkSAq(KdNg
zuif%?^8Ps>SL+*E)-h^^;RWZF2~y*B`NElAu1(v&X6tQlPHoejwk1j--iMPOEH^0v
zYeUfAe%Bj+8B7RabB_sBpquNQ#5da7FjbQ*ta;cHfnvma=V$}0BJ8ig%T!6CW+l({
zEL|HtXV#zp6AY^3lpIzMkexy+<;aX@CDgcd;E)$I!j~LtTRFdTu>~ZV6`<Aa5iix&
zRqBVwYedKB@-#}94uN8fe*f)_w9$)5I7XmOT$jN5$4R#K8gn_QXpTJ6!}CN!bvvc;
zB9Q62yXwroW@2~)?54?Db#`X-VwDp(GNI`K2U-2!fRb-4!R7Rrs!MzACE~UkxpaLF
zHVWwDV$I7NaUcVDQA61{DgM{!jCiA5&$L3G*QcVd<dS{^&40uggrD;B7_d80Yh!)X
z2|cesnqClAKo!8-{0#Bh>||T{vt65sQ<?XE{NRXm2W~U^zRrY^>K(6mB(XoUQnP&;
zFEuqa^eerD`)5&BH8ZKXYYxFRGIcQz8=<>#hHE1=0>uSa=U8F6G9$SVN6YwoMlJ##
z33Id^+0W=@r0qV$JyT($AIKO8zZ}h-P@z@19P&x$^U1NgCvR9hBKE}OeTk0YB6UC4
z3AG$5GQI=QarRDqg9C5Wk@M6s!m<r|99?I>>sJ+2j0j!zpnDrdiz5E077hsxU!v|m
z{{AVKfvmr-RgsYTe)pE}jFoX&o%^AWr+VrEk1JfO<Ds&0v7R83yAfGbG$a?3h28k}
zMuWJZaJ7oPis_}m<g~}3TV2W1(26y#I+mSFZ)mHK<#T!B?gtTbMIGKIoKQaEwy3&i
z2`1MDbcN9(5e>TV;JSHbLdUVkD8(@NWwn<54_yJRGK<@KD)xQDx*O(dbCCYCEakM-
zIx=<&+n&ZDs7Fl`DqvoIwX{3I<0f&{?lS7Y_;G=2)6LBCMtIaz_b#*g(eW}aCE^EJ
zOZ%si)oRDnPnPSG11@M;l+AtF=wq$7g$oDNQ&gZFBPDX<dy!tdQbez5^V{88R^W`&
z+uEJGbL4katN01~cj)@$A=V~Q53y0{Q<;9bz`WvRrQqjJIs19XB)CxVzA_1EC&U@I
zE^-~Q1`f+wsS6VinD<xcng%C0MP4U4p`;HloC$imzMD7kV?ggX;n_@vm08+p|Kl#Z
z+s&4wnZ6QpY0fWZ`X%sQ5~to*=PYn^QV=r|OKfDFD>#^@ov9osFYypDq}b=^(Y}>B
z+_c$jxGZdx>10=ru9=sKJ5myB<(jA3zkTh8aNrO+zA{0#MVr)66-P--H0U;!wf36j
zwt1=j?Te7rvZih7y1j&a&s6&|8}<7<!}-N3UGkQNsO**<5&opT^{6&ki7h;md)8V{
z-$9-qx5HR?3)jB%mSvegM+9a!tHzIoN(RXlvz9y!744Kuk{lQv5F*}IS<o_kgmUuN
zYuKbs-+GG)#DvWR?=Ne%4BH1yENk+XpNPpO&1DtFc+U$TS$iFY2$uDD2p{eW_hsxu
zn<zs+-Hr705*<+Um;?EkWgqu=*-=k3$?U?J8L{(y5}3w-=R?T6(Or+EJDL!C9OD}F
z^x9vww2iOVyZ2-Frk_E6OqgN{j(UsNc2Jr$tEfTc<Aj8?Jt*CBr)^oWuFlP6la<AT
zRnG~_(Swk+a<{_OneFja#I{hQIPs;4{P4XN(e)B|o2VPlH)Ur0*;i^OLmKW@6LPSY
z^*pFCW+c2XVIM80ZH($3qs=XGMpCEc8rph}nUYitlwdnVk$mDc{8*Jcw;1Z#_{6fs
z{QUgCe;d>nF}CVI?&RYw1`}dgYbi4R&CEEj5*cIf&_T70eU{)Kt*A3^XBMJ4Sn1HF
z@q{Vom%S+9y?FY`N-&f0zbcE9-)?yo#c^-bjqyiB?T+hAF1=&^m8dgOyvdI2_uyIo
zJ#qhUiiOEtBtWIJts>*~yW;n&%J%g{{wDH7^29!5`)$$$R~i_j3J;-ce-#>?i$LK-
zVrW}&?;r1xDkOP=4?K8O<tC6LNM~D-=yb^!yZFzEW!E(!aa&;{=E{i0o&hS_-v&+q
zg@K;wRg{zr{jTqx*TsK*1`McIO>}h=@sg>^udCX#@i1I(4x@v$ob05N01BTpD6icG
zVXvOAMZGVcK8SQa>d6J@n|W$#p51-js=5%7kU#=zgZY*(4%RkgoPMV*yBWbvxK>>B
zn*{RL^(=;X$+U(wR`#D{7p8fX9w?iIN5-I>^w67=t9<uv!HmDusouD|#%K0ktjdyR
zRWXsFPN6(Zcg#ZpwwJj#;)q$y(#f@7;3hmdit?YIpTBE0da%*`kjM{Mxa32!;mlO&
z&6H(t7pC?EvMopI6lxWj-WAT&P8YvNq?ZS_4A__I`K$s-TSIG<V$939*V60fJ`S6<
zr!6zGqY_i~>*pG|oh3fbg?3OLq$F|69P%jZA>WOol^kx<`<+}8VTm~1$8rR{2>)@r
zz3CYvt_TYso_jN<deaF~va^L}=jVMdUb^fDd_%FK{HP`gJh-6s_!UT@E^i8t?}In~
zLzuXfjEv#YSj|BXo2<NQi-mc=>FHY}NB34D$+&fdmRFg#=H|(L-@SW5lh%XX^9}%0
zt^>apB{dCA4Yt>4Az=ON>0)?(+SeF!3NC@;{E6f1xdEG*$5Bmc*PqF?<ykkyF?1$~
z_BHG0*aHg3sIu#-R#bxhSf^qoA3vI-VLE>&zEo1OZbLm06b*<_g%B+ap|zg6y48uV
z&Fb*(pvSw`y(0aG4O?>@VgUd}Lh)cum+roa4I3L9J~%yuYNoGR7ZYFpDe+iWS04~n
zifMV`*hXh(obAX1I@R1;vkM9a4OMCIz60k#r<$#*8nncvZO_Hb<a*b%lD4+xp(;k_
znaMc^Y`stCL)6t$fs+vU`w~l&EIBGj8mqLvesN2t%N<V69pRqSu`1Y*7;0$f+sq3q
z_Mb|iXfV2E5g*)q7T;l<)|5m75@gofLp(rF*f~QnvbAN`CfU}B&=1eeN6CEP|65~k
za_-CIA{zgv3<i2VqV0=bUFt^dKAi1%QI;p>rW<z%ou~wGkkn6f#Z}xrCm}TTH8*Dz
z8FiSEcy##z#`i6YiCSiWKScR`%S?1-uiohm)*mXm0o?BC+`i8)eE7~9S(Kg496~S7
zB(^v7p8M`I?2m5|F59B|>*Hfi<9A7(G1%U?D=Ip2G)4hLum)HL4>XVt2)yt&Vg!Nd
z*0qPRcyX5+a3warsb4G=u0BHJkjN}+Kl(040cE}=H~QfwXkNI?!fxaX{2MNM!-ciu
zuFF>`SU}$D)n;h97zuX}5aiJe>d9*qPwP`~FvqB?K`T7^YddkC;eE8Ln4g{XH|@&+
zRhWBMi47QBO+EzzhYI%%;BzM<>EiJZB+2ykBcKqL!}|<yYxv-lVz;UB!<3svF_GA)
zBi0bhriP#r=nQv-HNU*d4*Yx~&JdWNt6pQ#vh5D?FcjqER8`LxxKeZs*0NPt8)&Sn
z$uASplb)9(TkfQsevf=3uxAu%LKHX<Syb(?bk80gc2^lW++@;J0LtDafGKFYjHwQ;
z0F4$L1wd~N78WA>F3B@EMHE?uPCNTTG6UX@#~89qzb7@oVnRuBuv=-JkhwDW&fh-m
z3X;jQhzdUazbP=k7SnFLi->!3Hc>)C`t?i{3~F*}ojSt&3+<nlZ><2qGIFxg;-?+O
zv$^jd4%h_?JEO9)>~Mw!ffta(a(~E$#<G8L&s}_Bb~Z*sY}juAq6cS=7uUXVUW+1O
z-Ii~JPWh}K?Jff#Nv6fwGYWN9h4|Tu)Aga^4(y2z-37<3SyPGmBK_M9z?fD)VqM7F
zQ}&~&Yu;$!4HuuStuCl~76oSoDR&M%ea{l7A<VZjil`|oG_6&f!v%2FmDH^ad79@I
z^i)P&i8I%xK$#=<rYoDp&#f>LPQXH9RL3fQM)f5AW1rJPCml;xqEpX3Nl8gs5r?mh
z18OWXL^k@6TN|xW;Z@6yW5|jz(<%Ut;P!0}QLQx?uf`d)RvD_aO+XlQ#VKh|E4(Zo
ztA%R=hFn$f*K@c-F>$l&+l~o-nq@VLVQ^uzpg{)R-s*^<aJyqbzRYTB>boNShGCoO
zMqZM2hRw>@xHLrMfrL>zCB>@=7vr=|_qM}UMow?YwRs;OX-Qe>lKH(dl)C2lRql4s
z+W4rNh+b^SK*HQ$<0(Zc=om0NBPS+lKksl|8xKXC_I{2=1abH0zc5$MUguln*Y}F(
zKexzA6)a-*<z;i|X#9QC)F>r3KGx-!B6E}z$-2KA)kQp4VngP;AR*n`dV99A^3EpD
z_^f-BQub+QlBD^qNp5?TZYU9^BrLnsD;{CD2gsQ}o1jr{lp+qkRnl{_YNB{$><c#;
zRVq&9N`Wu;rPXL0%l+0Lv8MI&YQgpa!p1zGu2Ye@51ay(UpQ=KX!B!(5`_tnB`>*T
zWBbvT&&^#Ld!5(x&Hvg!j3&$DdAB7zVGodtdb!#E>8_^!^nws9z11@J9f48puKb~1
zoyR~zw(CbWZb;!M5_Fo_vG0l(o|z$|ps13{*}^qoW6hPBNKI8O=4+6dR?+p4zJ)0>
zkFFsS_E$`jSmM?kXeOhHlDh7J_{cops_(WrjbrZFEVKR|aB2)CWbJMQr;L8L8_ap`
z`|Q<|(oouJ0rO@BUXVTffn$zWS_NA#J+a$2I@p|_XW^Lu6aWi@JprB{MTRZp#-wG+
zT;smsDp2T*bU~}jlWw&YJ13Ak{F+C6RZ|l!=yD<>bNJg-=mnHic65Jgi!NZnWTd9&
zQy$`u&E07!@I8OXH5sT_jErI?V-_5p97k%NUH=ZhqpTFBW9k6d1s*zYVg<~1P2yIo
zIbq)AS7jVs`10YSdWpe4%AOq(1+7y3gM)tJZcd08_8tvKC*~~yK|z0zAFGPVCdMUZ
zA4t+|iPOy?Uj=SVq!7FE_8SKGVZdm(!)%r_Z>^&8M%X=Eiw0qJyI8qC`{=_>m+3}Z
zil7M(x3b_K;zY@vl+3XKT2Z|;UcM7|VT-0`+Nvr;r?y7l8tY3mntgJbl@jy<CyCvg
zp2tlChDa4b7Q0HZK~tJ8vHs4Yt@`jZ-oj`<Q>LA&$b*F}PvO8OQG;}?I?ZtiV33>l
zRTAg#ul!t{V@ZuUj_Asr4xhi*Lf2)hW5(Di0&!O>L;$5~BJPofrK47dt^Yd2(x_tr
z6d`nMJ}zTU*3Tli>IDWLnL#1EC2aVozXP$GSU;=<HvS_X?Y@e|UYzXrrF8Nq*wvqh
zh@x+q0(NWRoXG1|2a352g@h&M8?y&BuDdzH+AYJUH`IMzehK_~Skc(7s(;tf881w$
zT8<wo8$wA2Y)#A33r)cb(9(fT`vnDHD3)g;oIm|wzx#op83Z~`kb<N4=4u8RzKwfv
zI-l*16h7VSz|oB|jOb=>Sq6T<yspc^C$0Ilvv+~sIfRE2Hq*=>{!qFQ-S#m$+9ec<
zFr3pOV-+^wcdCB6@sY#1KdZ;-dBO0=%)5h}*b)G}EzzOo%<QYJjBAdxp|d77%9M}O
zhhxL!%p*mkY9rh<ZNZtpTc-z-hiDv~9lYp2_=ZX%aZBBD6ucQZqM4er_1+{`ew~Az
zy_&WWM1OGI%;%q05RHhS6de?#KvhdP6c|YxfY>S_AA6x6h)CgFD66MWi=&2OOl|e<
zE$j(UxC0@C&J*<||99`~D6&+#7XIZMnS8+d^_Dr&5t-EKpX-w|5jN8WGvxx)J|is`
z?-MZL-4GWL;$Y8S41*we)o9c!)^c?kzP#obea&v17hgmyqLv|rWtk&-|C+4yD@)5z
z#7kT)u5o4EB(Q$-mlt*}H%ROasgzR=k*uA5h+(V9iEnBM2;ZTuAvT_SoL?}$CSClD
zu@UQ)n18dHun$lPbJYgO4_RzIYEm_O(5V%g>sm*w&fM90C(jx5crkU6m`(lSdrlaw
zyrT8ug<Wpac~0)SYwIKVP*!ivYonKN_xv|!ScNWeal+<;WQG=<b?Q@UYkT7JtcCfw
zD5C)ipkHrRI?UH>j>A7EA@`ICG$m{br4g(jDxOIw(<#-uqDaec%-)u4+(a9mjzY_|
zG@AEi>;n1pxHZ2Q0|?^uYFB)0ISJ*wKAO7#je$PsM=TMLQ|JadiBQBbvzzNO-^(ok
zFjBs1_ZASL93#>nwVR*dVuj}4BLtx04cB_}!Rk4KwbVy#A!-Q(%b<>Xm$&-6Ii9($
zs==Gz$QN%W?~v)~cjb~vEa97gJz0s1Jv$wt@<^|G_vP>N6JWxGOV!7Jc>N&Q)>OG@
z-D5uqdaN2xe5SfBAS&8oR<9o0ojJ0T_U>}dYi$jUS#F)NFg+-Abyc<X0l&41AYPbC
zrUDVbR5>3kc%EidJz~ah#mhTQMSk(qr2$0Z_*A={){dN}T2&IrwPAqvq40Hdt0Ong
z&FK}gJi}w6D13HxXI*ccT}juGH5XexN<t~j?sLxLB5ak_=)2h`?4pb*s*bOi$tzYf
zdmkAz(O4f9Wa5m1KNKRL?>P~?jpD`o<XVuOy{R#)y9#(}`-Rl?!v?HhhL_4{tF-bI
z%DmL<HMDJQBT-ue66W&?8hC@mUz)Tg_*7b6B)S%EH`QikeI5OJBJNQfRY@0~d&*x<
z+XzhgJ18|ZRL%W>#@C^A!l5MG_vF5Qbk2)K0*NKj#9^l({1o62pdspdTC@tZ_w~?_
z*L00K+guOyHh+u(iMl*Zq;~Od>K?rV$T$3YQs7};wUf6t_7J9wH-8_xUR-&i0|hyA
z1UD;=uo>`bqf_H!7ptC^dTBAqWCX<x7tRzbQ4-XZw>=v9z^LOz%V!jV5TWn`CE#!4
zxgYb)j#+ZsADv|DTBu?K*97@5ho+niqk4okW9Smn499*lG?4{XCX|J@JYD58dQS~$
z=awK}7?RlUKfTW|{9@)wBE@Eq%n~7Nv6;}CL9WatZLjAr@;W`=b2^p6kp=37$Q408
zPTlH8P;g0N?9mI}T%D*ZbX0h^O&`vxTnh&r?YPk<SGv0WgyX-_Utl}DA(b3{qnknt
zdt5@`j_+>+j}#47&pw&3eA;k{IAf(LAwpocJO9)I$n@>A@&Uf7Y0TgMNSm3fmxt!o
zxo{U8<#(W9^x!b7w<{N!0l&vfLCo}D#g5((DbDd--%6Ua#ZcbqV&^qstXNrbn~6PI
zL)Tw#_Qs975S%CepJ@hXMQqm>L!p<@zu$GGO1$OcZ_LWA2+o%{M8EIOzmf@mE^$vd
zz!x&*hhqQU{{K!n{QX-up90v)4<E?iKlm>pcyADpLutuVeEYqf{gt%%^9@e`97q1k
zB-!tT#-FeK+V;FlZvn2Edf%g>|9UAUqeJpH3*fH|1$f6hAcB6+>5TLD5B~GwZsvnP
zCS$<i2Iv3&OeT>2U?R}{=lSx_&;S3!@ccaj|DO%XPg63k|G3xt@qmN(xcgu0^*e0h
zK$*Y(N6Pv<p=LQ9g8TRP1YVE(tU#?!1;8!6Vg&W)URN6!-hF<4#*K04=N(W(ad;1A
zl;DG&f1@7H1JWzpx|1(vo}JGZ8&U6ry3o-n8&R4)@RIm>roi~H_aBaiH4ZFdZjc>2
zw$)>PeDD0Wu3=ql9ILtz$ql}OC=1x~VId(T|2c8~J-q?P2t2KZ^lyLDW&gN@fBolI
zI&gV4hOgrPd&>Ws*5KEYt<Pa!G}}_7f6lDmum1IEYcUtF*6D7~`~z+C&lnv31`NqW
z3~uT_-}&daw`l<n#X2Pw>p$Q5=f^J6fM3Bhi(SY0-%o`oK#RGxd>6X-za1G9=cWz8
zd2hBqKmMOXFv<%aF44!$|7H^Zdtm?d{f;h!U#aCKlKD3$_&@*NWEeO&j`QAA_}^FE
z{mc6i>T(nRf3I_}=NG*9!y;|5{`XbaJ^)k5y8V*!{~o+bLogryAE(Su_-(@fyh$6A
z*Pk#Er=+LPsn=6cQ8Dsu*Bn|;*S^50w4ix7IF<(~*LVGnEUm1p?2*%I6Rx$8k+G0m
zxW`z>Qq9IHn^kCL?f5c(w}kFoU(asx>H1uJS@`?EP{cMcu+ELsh3#Pdb9N?cV}o8g
z(odg0U7V=%j1c1JSq1PLp!d#&an?Tl-Uh6#fToW(H#b+&8C?mRYmKr2<VSFDJV^A_
z-OV2Y4uRQ|%%D#|@(aY(+aUirFTOj*rIc_V&CYEr23s4YYf7gLxJoncVj_VodCD{(
z7G&+lSXQz<Q^~)6PLB~57OsfR;n~c~%iB49p*dmJA4);}Z~>I@dkX_98Rp3Jh=5J5
zM#6aPN&?HTNxDG-9+eZkNn7@R-Y4%h;)w4o7p;0fKb<mUz-YwW)%OW@AwE(s)TOIE
zS+x#WSy?+Fk%uqwzHa@nv6vR_52Uv-S44*%Mjo*BY@QQ|>=!zL;MUp~gm`0-S(!p0
z%v^!<=v3YXjY*oZe^@Z6yirxxz3R5Vwp$4l0IL|c2C7(U6u9yR06(${HV3-KDbO61
za4b+Ro+-i;_~&gNs6MYMxdXx5(mO#z9$H$iR*6{8R5ExROclNSh7~RfV5goXunFaN
zqjNQ9b#yFUoog2H9aUOQYEr_foJ==D35jnBedQg(B^;tOEI6Ci!N9&9=)Nf-#C6}W
zy-EM{rVQzo&t&hUgfj=`<6(BNuH(cmm7KBhpNXFmyZe@)dn-E*5cqO7WcPj=@LcEL
zwz_ob%{j?z3V3G;>HuU#d?mEurvbW0WVj`WjKgQo_8Sg`^V?Ct2*h;T0=n#NvBOys
zs}hfsBU^KBr@Fj=^EUTN9^Nu;ZnCy#1nQ?+*%!Q#pxLoret!NbZtUq3!v}viSIhFa
zcmhR@j?#k0OJ6n$U^N^%ZmVUWZ-FL#Bl@(^V>kEQC+ZA<qnzlM{E5v+lem(U+=$tC
zca1w~Y3i1q;97GFl3u=i`P_0VK6w)Dc^JJ>PryS;wq<64gY-NI@T9b=oVvVjWoc?!
zY?*e4X=gtN>#1X##MbxQ=gwTa%7w(F;aXO~CK+X13yy4VoET-Opg*%5c|Z@^b*D!*
zzktUNxHA)Pv-s_$dBFzr!feh?mh+Y!17UOIT8iEUVWMk;YS-()NNgOT>c;8%am0p+
zQ70)xa5f#!lU;p4P|}5o(8(w1KOFH05MvvR$vG?^IUTq(VenAb@j{X-I(rH*z>55~
zAX-BcbKe}@J5?(>KOvn_`Pvk<JLx=rdS^$dN8${RMY-2x&qpqc)_Z!Kz98N;8~Y!v
zz_Zvd;=BPG4?JtPk&${)5SH5vY8tx~Whg0p)2F2;cT@Ul(Oh3$Hl>nu^dX>{T2Bwy
zinqFzQzii?s`|E?3K5%<`h~;uF-)nda%=DGVB3f%I|WoAq3Q+k_00$+M}V?wsq)(0
z^a#z4cyY1J$IPz{^t!nUX3h?8-!)P<v8KFC<nYKy11NJwg6w)tSA!khwuvLuzJtGT
zpsYjGWjpgBB|<XP9>~YcznJV@cbT0z(p+8?Gc~)aiC!=u&(FNBHMO>WcDi1t4%?W7
zdRJv2Bho~Q7dqk=5^Cx&Rdt4#C%#?o^L#0Fb)M~BTKsHMgC7W!j%QgLv?q=RZ$l?V
zVQYj(FKS}zAF4bwL0)wX2WQHWBuO+iw}1@yyt5|m`KTp}VPRL#*%}xA(Jl9;5-t`#
z3%}qRtHfsD1^}k~d?SEUg+ERjq5w#Q(O3<y?vafH%Z>AXR&#G^`0j+uLIU}g)ebLz
ze*HQ?;W-!OU0BbEv%-gsIYKHiYgH{P#DmVD`>&s0eZ_(6FwmCQQr2#UT048?dO@a&
zrPby6lXv;)zJf(zMMc1wm-#>zgE-#esIQuU=c1TV$H@MCu`k?IqjqgvhJ)$dPBu1Q
zMYPU3F3tA%j8x_xo~(P;;TGIe%gR473+W-ZtZ-T#wpq@vaIMTmI<5`u9#6g@@(1U6
zR}=RsKMGgDavyuYo~`PWy^;KqgHztF=)K$%j>fb6i6btahZyJM%@#Puncbg6LFil3
zCF3M`xnw{=%^tPewHm?WT>#`VNw=3g@5m}ehIf5Kz2`@&>Yr`=vbZn$S#B?MRlM99
zOUcjg5H%rdHY-qb{E<^-e@pKExX(tjU~SJEosM8kJ71SSp!nEJWMDn=`*3tn<5PDI
z_1aGwV9r^>u01<h4@ZbvZhx$(ZfY=wf7YX`JBL$Iu2s%lOOlo{l-&4w$-}mo$73_t
z!y@PDRIZ4HV-LUIU|)@lW6j|csJOWJRMOdDQUk1Zn{M4s4O(|JP#D&quAnxMUZmw{
zdLr#;s^ix(aXc?LmaFtN7gO4qbo?VpL)Jbml;*^}g${=Np|Q<kF4{qsx8Q}eB^&nu
zu;|@8#H#Q23OD&7Uj`2WQgNQ5Nu^>H%z^c9CmJ8A&l*V-cNQSWM&3v}$+N>QOgVmX
znF;mvvBHAM#ZbS-$ZYZZ1ODijzgE92-HTY`XmOZo*!gnl^{;=(xRW;&w$bb_-F64A
zk{6AWoq{Yv%O(DfXpx>rGaU&dODK!(V<htJAb_-7TE9HdR6kv$%y0sU$%V5`st#p`
zZ-!IMni9%?OGao}Lg=YEB2<N_!t;yQ$^akb?g|>cbq9-_GiIItPAO;8t%hSH>DwGb
z&5K4JP-NvW@MWNv*;mv}a+bB(vgpl~l|+V9ZPhhVprdzP-|@ThI$vns%2NWf^_^~K
zPL+g0p~i5O+hR(9#k04U=nq;js&J%Uxt8KcS$P=4X|9#u5W2hL)jg}td}}xdcs?aJ
zQ~1NkLkkxII}4vXc+#Gtopj;~+a-TpzZ$F5S8d145T8F=fhNadlh!Y#?ctA~gVhgZ
zF}uo#KYY!GAJau6O=7Kb%~e25LHM0Pv4Sk98Jc^fIaX#n3Hi=*?MQV&d|!rw)$MRD
z8eSE-U5Z{1(ij+uMe658ly;v6)hIfedQP0~Rh(#))d7N9Q<a_UV0!E{@_ucG9$N-?
zsPJGa;=Q8C((G;f9gmY`JtENdnhJJ=J&<WiJWI0vP(^@k0|G@Vwq$mW_bG^Wcn-o{
zpSMsZ)%BS5IRVn&Ck)$L^}B_W+9T%U#yA`JF}pE|f|4gois3q>++YR4P+CrmhX2|s
zg~37;WzU`UkHy^VxzxoZ5lczT&o2M-X-Z#x$19|vHjv&*Z2X+wc{`51TBVzU2cM8^
z7z*DV7-!BYP=aSKJLWy&H|501wuKK{y?UFY&?CoF(_i(Nj43Dh0C?QD3H+mOafU4S
zIuOnbIR0Rc_T@JptSmvh?)_YFPaOF%m~JS(^!a_B+dlb3MJKes1~WFJga5O24G>nY
z?T^9qD$zN)?u5|U=l0Cz)K~r1@L%#L6-&RO(-TPmd~NYb=+E1$+xsc@X=}4!SO&r&
z%j^*o#fAZjQ?_G{C_lA9m(lU@`EUjyo9=lo560tZin>y(sen}-<Cd!t+xsn+=L?E=
zE7{G-{89UdumAmMfS6(q3!i+~)*Y%OS3y>PCnl~n^#X)0<xq~+9WCKk8m;Gn(2L;2
zC+zch@FnSF#rTomJAD4_=;LCtMfUs0farERsZFiLZn0axDj7wm`yS~pR~7<6fuN?E
z8``hnNGCD6YLDAy_Qi22ehJHnHL<c8`dZmyzkt@E7PdM}R=eTHb8w#m854_T(h-{X
z6{=!t;xSv&DZ-Hls8|h)K*-HB>NH|G&KN%ts`I@pKYy(2AuW0xY?(Zq`-%J2tnnU4
zONEZM9F+`P5s;L#x#&6x_c@NUH41%>`z-s6=c|Bf(uIrGy9s>kkN=L5z<98eQ09`@
z-wSxhfSk83yr4doe7@i1H#miQ9_ul5oNYzdtuP$&WP}wr56YfOo^FN*m=_@CpD4ir
zHE2Zk%+s#D|H>i1JZjYdjoceH4}bnJ1$m!h)tPb0WcQBJU@6|ZbBm}uS?D$Z>SG@D
z2HA$RsEsWT=5M=rlSzZ^QxtIYMlV5eN?dikORYEvYqvW^^V;?(W}HxFahfH=a9!xC
z+_zJ3GH4K9h&SBk;@K5W0_Ko;#*#e>MU+j?BZ`2|P8WTkh#c39pE#jIwZnehX*4mo
z(*@g)%Kp65UQ!Rdg+@<;>kbH#q#tlBO`GU}cJl706P0Zxlg%@u*~N~LCE;L681JEm
zHJTNS1CXERmO}rJ%h@w4uI&LcNDzI5YqV@tg*%|lbPWa^0SNRdZZ*EGb<OTzQLD(u
zG6pUXRh^OY?_24Vw)1yh6&$@jzLO!SSv2gz)IC;Vos`7T(URK@@i;p57t~pY_8{3}
zrAK;vEJO2yGqT$>D##AZMDVy^<A>0y@8e_Y%SIDtfCsXuBBkTd^T>&}+(KyXgGxOp
z=3h(_ka@6Yf_WSMX8qSiMsb0a?&m@P8qD;6$8X-YIHXeS)tC}V3}2EP#5<vW%-Vg1
z=G68q8#{qon=Tn&dAG;21Ct}QS&Q+Yk~rUBc8KQiVduTo9c%V$);n^SYd0zY>jiA}
zx-kxwx!v1fn<W$+b9j%NDO&}rTku}0WSuP|n_jvnak5lbWHnhv|Jh8zNIrUVr%w@s
z({;b2p2|3$z8_v~Ggbd9{_z<mfqRS>i$pkv;a<KR=J3Ki8h@OBVtqkkUs#f7xQ<-@
z#uty1%W>?}XD$mxo!J?iO0vcAi_?xQr{~*Tj=Gmug_$Cq-=A%CrD_No6XKASG2m-Y
z2XTnW^fy(JuAKskUk#kpGY%&~mZx6e1|N<${zZPSH}k0jIN$p3<XqphKApEdHw}uU
ze6_!Yp*J5BayUKTg`ws632La5{fTwQB_Ah}PmdWr_3jOngWSCv*O0FMSQQmf=^3W(
zOw^?HO{JT#XPk5ee;E4cjpRWxPNne>Z4=cxwz}-D=LyR5u&G<MM8t-ION&&%Vra6H
zT2JNSIg<(hJbsV{t?a*D)5fVD8ylma?fS&G@C5ICX>L$a6esJaqQ$Kk?yA{8ZO`bf
zWIdi@@c8~_%4K{0&~Gcz^Yrlch~1@MVW$Yry8%rBwLb^s0@g0q^?<5qsFUWwPNpQB
zX>=gI3PdkwRJDMl;}3j?@^`?G3X%>QS;Ks*&{x#<vqfaU8Bw2z)%a-U1Rn<ZS&Ek<
z*LROiMhzPK@qwfGPWMBV9J!h0RAXyT%n0ZGP8W&|VDO{@5qThNJ*VN|ogDX`>5YDz
zV*oc9!s)Cv*q*6H>lgY!Ru!k#0QYa;Hnb)7@stk%w@|O8_Ts04ml_nNBVZxN>Fx0x
zHs{1C$IsgC3LaF0Y=IrdL;#OLA$%FjI>#I5*Ht2Mt~lpnj+Mp#2yU+Qr+C#v;n{|e
zsRC(T94AoU-Vla?K>zI9LQtrv5bLwg$u=Fa{Pd~77uYe5$i<v*`cdMe;#0mP?(9L@
zR*0tM7nSF1u2)+1&`<1d&sjMO_Saf2=7GjekAAT9lI2-0v@eO>bMytFbyqS^0!2dM
zfgH37c!D;A^GwADQYKvi>CnTibURaFl{L|M`Uy10I?8Wiv!C#AWQiB2lUh3%-Pcd|
zf4+`SQncNmL9rVBny&k16Zfygfc4p)wE$NG#mTf5QYFRWSdDFmLnd<<bT4^DqzsN?
zup`+MGNy6c7P@l=rQ{T<?zAkxmzsxOdtwHOA1X|@Z_0pt8#7Pk(IPrN<!E~3Gh$sg
zhCVv0PSfCjp3c2GQ@!1}?P5db#l8aH`T_1D+L^2$6g<CY7*XzAS2G0a_+B2H42){#
zUdno`9AqB9aJNJnlAm@#eTG!4G^`vV>!_%>9$BOz5Uc)>u4*{5)&X<8-9?0g!V*s6
zw|N~S1s#bMnM%1;asS$jKInM~JGXgW%lc!P0(X~9OX^!<{g@&gtuh5Tmb(#(jFaaF
z8(<ej6gjOf2{e5zKFiLuB)uhZdN6Yem88%jrA)MIy+fZ`yJ`t~0xPC00mhY>RDvih
zQIF7KcJJu$lX2oEcYhDo4`~d?p2R@<g&oj5<dyTX_5}KyxlT0J0%(S$ybPig;~I0P
zYUF)g6_xj}btgwh7q*-tHT(4(w~8SIY{sznwA|t+ap@WOKHr<$TygW~`3A+R@gZc>
zIdQNk$FUr9jf+KlKf5E!T^#fXfy{}Xe{#U1bQS5iyt3>;WL-uC6_f9SjDnzEA8dbC
z=`VFCzQ0dtMirk&DjRpit~k%|HJ@)?$*wqICm?AfevSRtq5SW)+)P*Mfw8Qt?7^a}
zB%1CMx>NOTc41R6MF1d^HqbAI`YI&?rA2LW@Vnjp{qUn=cR$Z{R}|M2I5%!FmP+D8
zAuD5%E@YR(2w`QZ^NwIy#1y*Ij|N^&xoyt1W3Pi6nK*Tt@YIRsX37W~C`JPo>Ctj3
zmX@Y2pm|M&T37cxRB~KL-?9UTP}FCn&fMq2h`PP9vnwE=VOdNyLX1Y>_M?m7M@yOc
z+vTjKWo3tt20-&++KKS_zOgz_PjJvWAUcy!zmRL6W-4q|wK`Fc9$+0pv9DVUjyA^1
zIs>GMES9ccl~(W4hpt`B`B|NQZ&^t5*M63x?FHFFOL(gO3T}TNY}DA2Hx$RB@kdB&
z!^o!R7!rMSpp?sCd)iS_8)<3F&P;r9*L`3H|0T!?uF~aD8<swDtXXp`EQu)kA*wMG
z4CB)5eLa>bM_`p<=|C9EqyEkO4*BXs@7Hp2VB&J=in&5_9=7DabgV|cN=@Fq#Bd;`
zQEC#YXnyzp{gtsQ<lCRGq|FENF6^yU)iEHE<cEIf`#5jv&)2U0ORn+>$zEy+4LQn;
z+ig5`#I?Km)-JeKugohAIbGL|L2yN=cTi7Jk1KhQlDzOhTid*HF*W#D+H#YUT92*)
z7@}Vt^hVdNP^59}xd=9|xm@|R24Z1fapst0Qo{Pj8W`?{CFs~=W(C2?#=p3$>^`Q~
zo*JPr;^fp>tYouOB;d)3lYpKaC^zKFd2n&Y2PfR6Vo77UIXv6KGE*4p$eFG&jih(W
zJ3y)igjK~L`x*00sYusy%ponsfcQ#ayv{A+&f_pjEeowie}vYZ4%l??LolS2!;1Fy
z!HP}EN)UTIbLtRaduJSVTdx_%%Rht#<Gp;H#(SOx#gI}7jyoF)&4lo+&~k5B>4L`M
zwWjXk*1#{$;EPMIvEXf&-3ehNSbKQBD6l0+rPkD>Rn}d32Dx<mwwF|*7ZTT@N#`Uo
zn}_`G)PVOevC`z=`1soP0{d5$?->X!vb9i($|dVZj&5daP&lfqi4*MgxP@4~#Th2u
z&bC5XBEg#X%gH<bFZSL#D#|W=7ZwzeK|(2|Em9Da?ocr3mPU{+fuU0v5D`!@2x-Zo
zo1p}hQp#cIA*C4_M*8gWHSl-dcb#?C_x<y&_5H(|#WS;?9rxb*j_bbedN^?n6~$fZ
z8}<hxss<T)mX(gf_QQJ^4Lx4yoDS8K>>Ik}P{yq#^g@88xA*p>(uS*T7WsXHYQQ6~
zIpZ%9NQJP;KH2^j?%}~dn%|q4X<ALDh)SM2R}xuP=IRx3+M^|BrXL8wx0&0`d?U_w
zDa|cAKa{j73g$5`kP|PLl;nTler1g7c4Pc66;-PJ)U1O9)L_1f8s_oor01n_F6vv!
z3F*hrT`SNqc%-AV*srT>`t~~CRj7f8Ip&g~%T=VXWNt^?R`Rv*ILR_vQ9gsft*rdj
z4pn{A<Yn4>yI(1pX*oyoBNQj8cf~mQ1b*5A>A)6vm_U=AZHl*#C-*_GS@{?#15UPn
z9LP!21RH{fEe|=8ms$!p)?0iOu-{=@tv>(s|BNx|$XZ3Q_OEaMbA|_qP(_CpKv}j_
zGcqC@aW)2rQWD>dG3{X!HS(i!`r9P|>@F{0pq9ER319rXtzR9<qyVlA5#ernmVa-c
zCjkrt6R#feV_W>wk6*vVjb#2NP!g4t_(DRDx<Y<U_A&fYoM*sm=G7&c|NXZ(V^QP`
zFd?ES+D$J0I&J>^7JQPz0AE$_i15^tzx3_jJxEdl`*h*kP3P#pe)hXB|Nrp+AFjR>
zVv98Nuf+>cgS=PEdam%5Q|+#4liaa@d5V@PClgD{%pFL^1K{BH1QL}k38VkL2w-Jz
zu=0qBEsCmtpc_r7tSM#%!kBcO00fDF|E}*A+8k$Zn5+5wyRnoGfFdTp1z3}tJmj29
zmgaWod+!tE(XMz6Xe-u-fJcuFe7XEKo7Rt$?C13zkc#iJ%vd@`{i^{LB|Mf6jtq(2
zqxSf3*#WOiXO{XPN+2e1>tBTv??f9rkX|L9t?;8``O~{o3eup<5O-UEe>n2r-@QNe
zN*(m_-OeK2(U%^P<mku8@Rli8`YHe8Ia>zUeZrdqg8$w;GY<inYxc21_WyVeCIElL
zX};Lu-#5RMF$A0r>K{zi|KoYmJDi`r$71wfM+aiSlwkX1_&2Bj$8#xRU`l+>>a0EL
z7d$f80qm#9SCsG~760qG6NG%_je4Tb-xk-Ox2cmekHzCN#{K*0aSVTo65Is;mjV#5
zMs%8tECkeeE22!=w?4f3>vd9<xY78W?Em3L|GDHqIdXLV)~6Ga40Wy?ekIer$Lms6
zSt<M_7RB3Ze{V|%Xp@%K)(Kx%U*!m${3(b5h_ko*P~A=iznaE1#`6#l2G2<JH3zi|
zlt8pt!cZWNBvSIga&}=s)G4tyj0u!1g#f-wGN6Kz#(YT{&2QdJyAt!vQ+XnBUul<h
z#1PBbh11K!3pqEi*bv~u69-@?p}p_Tk_EiQwf5DuWsy~0P@{wW)&A83c?sVQU(BJU
zvVymtsi|qjS{u9(z|}F)OvG6l^SArOopRibyycJmm=E}*gr_+BhOSCxk-PZ*2#xMU
zU*LCMU#uxnEzlf<PedG)szuZkD<2i4Oc6ZTmACp%cPc<s1SIpoLCFi&ASzBRm<ysF
zp&KUyisAWbyV+eo4@>0K$~o=evoIv9t^GEn5@Lj$b5UWn)zce#;jb~C)zpQ3^G2&Y
zG>{Ur0LYc~bV@QmFEN$v=RrW6BQJM|5=5=+>PY09x`PqQ{2%dh$hHP02kUzK4)k<&
zBW&F^4hCuu-AB9k!zI$KMX|%{xHK8An-PeY{BrWmAojaZ1n!!tQ!XxFR{Kb5(w|ZH
zGwNX+bt)WJGYxiVQ)_&*q9y$T>K>&D<_``IhSBf#i?34P){Ft)Wko6EqUoPK&#YpB
zkHIh`mzN6y?Nbu_LEtSN<oNM@oH<^iG(=tJ(DANgW$p8|fxfVD5bY!a%w!}WUxO5M
zD;1Pul+eRoBsQQP>LD4xRT>DIN%ZRw1yvSwjAMxwzG8^6Xe=?AB4xV1Q)}AR_wxcx
z$z5nPMqPsKea&pjJz0yHVSu2ISXpT#3$CxPcbw14fJG@ww9nrLwK@d6+#az+ttuH3
z6hK@-dWOu9eL}7zIWUAPae>#Mf#R9|eVXs?x`&`v$!S0WQxsB8W8hNgH(KtHAA*E<
z1P2FmeKVx$5L<^*^9cq4C~y$)qVy$aWDJqaFIv@)UsO@W_q=g;d<hT=EN)tL`Q;1R
z>Nu1WLR>fD?)!!dNc=DwH&`GcmP%h4jmXWlW1MfwXGNn!8h18Bi1Un8*(d?dg`ZuD
z&_OXlixl$bU<~*QVe0`qsU%|flZ0XesI294HwZXzS@k{V7Py$LNO0s;4(^TNy|+X~
zEg>PcTIf7k>Mx`N8xWgDDs6qc3zh}k72D%G3!|0`?GV;@m%G3pZX-jv#u%R>jWem6
zR5G(~g%{1os<RCZ2sdNX*y(x{-6q2w)^>YpKxDfQMxmtR{DuC*OuU<P#rKJOHH^>`
zM!wscBdu_9ESSHouKUSdB!bngqR%=dcHcP;Jk)k~TYGusp7?P0qmr^RU5uco|NF#i
zmEW!}a7Z-ErhHAnlLH%U^#os414!S-D874EhgV`;f04|id42+A3Tg(G%$e`_w8eC9
zB@4!GEe<?%(86pAmTokiB?jWB!i_uMTZ@g3Y`bh7sSCGlY^n${Sc6dTKKBn<9xilr
z$Pt5GK&5?o4}`gW?d}HO1T<6`dzL7ZD(9I9M_@sE(O^Isot&Z4=4Ox~6iQeNF<q*`
zTJ(nRJ||40)sC<0KG)cLVfT4wW1JGJkHjb;lRk~_!MfMtC8QnW7q%}b7t%pFBT(~o
zQ%ZQcw}(9T0Z5#x84r=H=G+5*v9%=w*jGUDFWp~eXY>64y9^-{b2JhH^`&e%f~iJ?
zt3f)RBNjcn&OL6a)OmrdTv;5NODGKrENsnP1mbped4z%U=2M$-QT$V{l%$+3;mES8
z-6XeBo4Zs#v{H3-u(u|0U$59XoaI`Pa?cqZudOv)SP?fy@39~Dd{{z@&JJFC)>Z>{
z>~VaBZl2>Ui}*)GOP4}r7U8y>0MG$gkIdvqF?gfEi`y`Op5Fe{14@I;Nk5h7$RUPX
z4HEb$h`jymF#}I`Q5h@pJFH#lH;wdo8(${rGHcwAfPQ}As135;>+_qw);d+rmZgXG
z141k4XxYI2`NZSe&flzkax>;=fb)tM4jp~5a;wyaHWV{dem|Gc4xK65zcpb{4SZ__
zW9D_r<;GR({-Er^fJ{oG?-vlRO1g!$sjjVMgbP}zD~j2vYj12<*ZuHzwXr6#>#Ai1
z`CLr;JbL?U4^Qj+2hV3Go?qfrPl78SpQSkNNz%2vr4u%CRTpHf)o3kl^p&mlGTB^Z
z#A#6J7kReeC=EGty(5A|o_QaS;5?!rI$f;`7R=WkFx{w`l=56F67HpBa+iLE<D3tA
z!Ei>M!*;l$-j=V^zRs<V{g{@ZgRE>@Uu2miZG+`$#r33J)CIT)f9dRuCE8e8$wiN$
z!pFzwpklf~(=s(u)h5)s^#sO<CKxGJ4MKUPMm$QB4ud82phBKvU@a-rQX#WD9J*=0
z$~;r_nH!tM(1U^RTXh%^G|cZH<;$Q7kl=}9{cdd_4yi(ox6f!^+)Y3QVi$`JLL{VH
zLkm)T?Vnd~v7a_HbNIHnHD?^*Cw7=%l1M5?^SUSQzNeiDPV;QL^1O(%!#7=D)S?cw
zqa$_r==~x2`Grf;u<~z)zosN<1AoinDJ+#Ux486E!=O@Py75T0hbwQ<TkqP>KvZ@K
zkbHtmU>i4p^L9GEDAq=sMs}#^VH80Q9oOv`CXj<M6OhlHnNFO0i^kyd_NVrZ@~*<<
z)`DEg(cVPNkj>qbFwXfd&6X<j_B*aGQs08gQ#G>;h%jodwaAAVND={p#&zmy#+B8c
z`|vTr1W6r!kZy*w_U+AhJ3FsCA31mN5l|Q6R(jNxcL=8V>hha<s%sI)hCqVb{)8>0
z6#6b!wgQCq=?zz{*fc1>0rE;&D*plriItytm)*Y70tqv8i)nZ8tbx8FQuylqqN}$3
zE7^V!<B~Rht?MxmxK?f<kNaC6h{>M)Xg46712bbRa^kG(=1}(tA~s_6Jn)jUuq8=S
zyA+bv3@OYspIFuTW%8QeHtw&wPZfMq(T0dvwut(v?Zz>_x1V*N6tzzyY_VhNNUltE
zZG+nQ_;`W+1}!qZDg>fhPswlH5^+KimE_@0HE2JOVqax?sD3NpSrf1un)%xwZxw<{
z*JL&T2WH1m>Q$qsy?{#sZPZb`lI-CpACaM=MPr84I76$96t`pozBw5qRJF%C%fiWs
zB^<R2fC-)K?KwT)kJ=#L8Bz==Us8XPGl}e>06L$FFJ4W3Y99$f4Z?8{kW>&;rwRH}
zbL*Qq^tgPdyLIXK*b6%LF;tvHl`Ez|(7Wgo)3gO{LgavwXz?m8{sK=eQ0~9W<pliH
z6sKrZ&RxIGqiJCyww!~|-mLKL-PfJ4OJS#?gfu(%aI`48)7ZNh^)SrPg@0%DI~|^%
z@9s_T38-qOtJ5%q)#Sbn+Fdl4X*AzMh`;?N{l>@AEG@g#-BN>+YYg{X{PdNp9dOE+
z2SLxn{J94k(^0-g#9Rm?2i-X@KfnCk>szmgclP`Gy8FUpQk|G^+RF`~-rtz~VhG&A
z%sY*bNk>xZb<X@b7k_=qG{s|qWlu(RCjYx0E(Ik9h!X5}s^_o0azw`mjey?+CxgT`
zy$E>ezu5U2<-p8=CQ4@i?Tr0pC<Ta611G`%%dbaX;jukFXOsTc3FDR?8MXf-fQ#!~
zD$#p+FaO=YED~@-Qx>o+a>gt4YoBVpd9nYnv*o(2C{vN2lWcu$aG=k+uDRLF;%^W@
zCOH@|MEK0BUuzGBEyYjtvEJU4;|wh_wClNoXA2#ys<F3SZ}3&0e7RpR)sk+DXmoM@
zqDo6YwxTT5la!M;A>aycJJELq6j$tAo{!j4j7Zs>1ou4S@)xB;=Pcd!=C=<>a3bdo
z-nJU9^CL#}Yv$KZPzLHY+FO>rLBBak?5ciecVMY>OwA;J$)?BWN-TLtEL4_7lz!)i
ztjPx%bjkj(WvLkk?!ZH{gOT{`5f%|mb^1zfzXrz?-n2`IkB5u&E+A%EyM|6^tDV3A
z?OYQTzpOgz>aBmr>*bZG?m{YE2gDLxnHy1x^8*J`h0nr;qoFQPiMJb~Nu#hVv1`qu
z*RCfljpCuiD4;WahIdm}PkYb<**FJGY*DqK#G~_Vtbhlr$_>xzGMBb*6LCk~5QVcd
zP(%5G%FKz&48ydznpf=yc?sjj0_TUr>5Qq$HguD!b{$#h7e9Mcyi-b-;fOjVe!TLL
ztf5`L6g)Y(9=|g6Le|o?PbpHjO&9LrX|qHT4cNLiB&U>VN2B`tXQ4BMdTE*Bd3r3B
z?<%K@40oSj!645&Wx0ma#FNEGv0X;_-g~4^E0}FGbF(>pvTaAW+mzydgg7gSt1q8s
zXhLpUmVs$AiwLVH<J>kS9kt$WH-c`_P1>lt>iYI1ji?sy!c^R>8*`ps`DF9c^Q;m|
z;@TT&qo!PG*`j{77|}evEsCt6uy0IYHIq)@hi+{}eBIkrd;H-1*#J*~zB~=km-+jv
z@8BV_)8~H9R8rfC!K=e|4n-@9&P%$O&oct|D~7%yFVW9-!t8fx3#bQeLl0gR4tI(K
zQ5ZHZzA>{b${QC4h_^vO<K1WG6PU8G^5*$-3zDvsr}_E$J%rx---&+*+1bGAWKqMU
zchuP6x1?2#j1mcJKb^Rhtq2tq6!b!?Vy!4?J6+Jnk5Aie(x_wI6S56hM3_V*!n1Z$
z)>CrtIV;%;mff7WG?MXHjX|$4+4MlTn|F3*?;0kVGHf2DO}_$PIymq>Tt0=C97&<w
zY?5;>_9aXi$!`(O_N&IQ?tX7UY|_6hpTAaSPk`8AP}$ctPq)Xguf3^kFhGe53F&B{
z2V-%8O19U>7^>4=KGZ*Q=m6x+8NFfx`21H*n*59JqY%0c!@a=;`zivqCH_#qNa$JJ
zrtFo>S7B?M2K{!f_e64{ht9oew>q7x*t*iNB{6hZ0Hw(gTf}ry=E+K@;9rC$b0n$i
zP=q+8<>;9<C+o|~4mK*lZq?M(OrCVkRyL^O;^Hz)!RLjU-Y_VaDXp+kgDUfX)7*zF
z_IyiP7NLoG))CsU6XVW(%On$_jhtiK=<6Z(@e!X4u3i;Z#UQxCtc6&!HD^>huZSN`
zASRP~#_xSsreB+{e1C0wE<9qj;p>ae*G{P187uwrJ<1JWr{cUCNr6AyN&)!zJE<_z
z5qzFuz)1Y#Y<)<ha#|n*C30YEeR4PI%Da-xD_0k6A(8e=Bnwzl9cBxI=n+k!8)+N}
z)Tq+n%-4=4$MLqZ0_=*hyQ^0|O_GNvcGEl}CR=)e^Rk_T12#gM;O-|^Yo$ZgtibCK
zN-B-bjg9ZCl!KA;T1oE_n#(su6o|tGU+-$%8<x%*0@3x!VB{nwAE+6}<r%c;pHm~-
zg-0qVJoKAWeA@0i9AlH}6FzU(y#u)eRhqExa1wtDiKjrRS%&s$qD4kRUG}MI9XPO`
zN@v~Fq^;cCBI6IcMLjh06F5cWv-LV($M`19x@(rtYoa|#XWfje9X&aeY{S6VpRtnr
za9dWFy5kO&-|@V8T`3dmK!cA8<4ezBbk0LxP1+l#S9;10R@U+kjEm`lUUiC!I4eNj
zf#X-$B#Pim-9Qh8))%D984~Jw-S6h=f_%C)+hLFI5Zr_WQ?hVmvdc?RqF$|#t4hCq
zd=d6EJEJQ_*g&(~n#-aBKBy6huZZGO=4VytRcVGRSu<2c+)K8uCadEOJp9<4M5_^I
z{j}rG_(jT<Pw`bnY}yrcUQ>w_F%f06LYn0r@$<c|tA&weidjp2zLSpn<wJvVe%y1F
zDeK9jR49WyM{VkC&COYl6p@W8c4b_ICP^Q^`JhxikE8$E(Ti21#J@qK9SXlS-o!4z
z-`E>Cu(H=7aX7HVF_hxNc??})!Bbsf!~CwSUu195f{Tm#ZgbivJk={c?{(ii>ZcE}
z?`3j-mNsv1`Gh-D;KjCQ<ax7LKNa+&q|6VB&K21mq1+-gu`E*PNQf4{eI*SlNmnDP
zBQ!zp5)A_!0IDyeI;Zl)58ttkX^si4y_>Z_(TBXBI_+kvj>>h^@3d3YOBs~w%^eN>
z-X0{R!By_2UpL>qF64Q`c%tt3su1uv;S3URD^Q7-9dXPiMVz4J8q@UVg$tjbE)xuH
z&NX%IpDxJtSKx*`;tKI{vPpD1-|676@|?}i`6OqeI{H!cIX6A6wk&m(G#=GtElPU^
zy%<LAQ`udGXYng5L{Mpty8NXj&qjD@^Cj23ysHs)UnNEu6DfSIQ3}ob!ZN${>!%j{
z8LVg%DG1UP6=9vB^S#2H7KFCR2u<Xeag)AY1o3B#_GF7kX35OcoXyya+BHoDKQ<`&
z7%GE)ev#sjECLvq%I$3Sb1teypBTbT9NYvJF|AaK_E-Covzi+BD+{(i80$QsF(_sa
zkZpS`q&R6jH}@h^Mf+}sWo=Z05`jI0g6iwkHGq-~drfVdC5OsI@R3<1EA{P7p7YRa
zPRo;LD3>V$sqRq;oUo42jt~(O0Q!j(HJXwjjgPW?8akPH55f%1bLl8Cyu#%vk(uWr
z0)3aoi1g^%&isg&ET~rLbGdR}9asfDdAOKQf?mYwBi*;6>M|pI8Z>?1ZLuuyd}5fJ
zt{V?YAUiD@Avx)M!b>6c?Q4#HHA`(PyceW;cyAgwVS3wP)|$^Vn>l$;Xc|1yesqy{
z^{`rlSt~SPw{Yfiyx-lu?bIX<2Um@GXLbqJOQLt7wQHRNyo6eKlC#2jI}n1j9q}iD
zJrK6d=(8H-wJzN^f5<#NKE<KYn3G1U#8H(Y=?lK9T6TI}Z<EIC`JU#lpY_!O(D3wx
zfD3Wy7a(_QZtlw0mpo3rd-~f%ql#VYw?e#p#;}FFp21WE*FoY(3K=}JG{(1!lcq?_
z-YvZMq~&ThOu6<R+C`P~+!|F0daw1%6X;aY2T!98HO2*Sy7MKR?%eQ2>Ca(9p2>g*
zOqHZ^HJXL)(y$x`BeWTQ%cMLzS{(AE<XMjMx6U-U@w9wiuqiy4R$kN@rSFw&`qWPz
zBCbV*Ma8;ZiB>y~e~OY-Wvnw{Lcomc$U#P)X@s}aGmjm1{`OOaR=E#4@ER(S36iLO
z^&tR3p)zURJALEf51jIkV=%e`m?0nA`;YiL!2Y@;HNFIN0-YOm?3Y=2Ll*d6*Yo_+
z&81Ml>#l{#N_G6*FhGMD8S@BIavR*>+*?J3El$|osXFVk$wVRlTc7{(9=u4wy7=0W
zUy%#ReON;~Hocs7Y_uwtjU%XT-17VFP(OzM2^bF44xeIwy&89kshkbCsWQoZgYVUe
zx6;3qohD#a+3cNgc0c;f->+s?sRENx>SZr{{piboUjyWskAR9yD_Kv^c=VwBV~hNo
z$p4vEyc5>?Adu6f%oFk>LFUhUe|;+D1c9QenKze?#-si;5I{=<ESOb_FXO+>jK9Vq
zg#k0(yHq*V@@pmk{1*2q>HmYnPqIGoGV~^@=Wg<^p-NrBB_4boNcw{=00CqL=6Ho5
z8rQ9mT|*H{&y&IU!VdA`ctXFly67S)&$dfEKed~mP4V0baN!8rHCozwUT(odbN2rz
zQ#|eXv9Tr&$}Ec#?}+AJeX9Cag}nO3@n>@?3pnZV4HlL-B0U`XQWqS)ig^5kjQO!H
zEZiUHt0@FciI04ZJkv2?9FiZo_G{$=<^U=-p8HPIpDic_!qiTU)QMX2`VfInfp_U>
zvpb%+>6B?!D3mR=+6zYAgjx6az?KqQ5lutd$vfG}_6*v|Mu9TTHxlq7aW?lRxDWNN
zS;S7>{AJ$(v+pTBwbk~inn2m)(qtLd&!uPe=+u(0QD}Q@BsmLLJ<&@$iPSQ`9<$NK
zBiW)>BP%N_PnLr3z`!5xE|hC3itw3Yc-PT-+YbeI)@X$`mxkwvQ%5jG`sI}@H#Rm)
zUNg&ESIr7j*raWI3}*k8Y?6}^!{_AszmMG{|K_weqgSFr3-U!N5axn9aR&98pFJ}~
z4&S(@HwKK@s+<rvyER`c<b5Yijf(C|8q$jF$=Y#46S-v7i<w(@^(V+(QVftHN(^xk
zRcbUb7RC3;T-I&GJe4@sC9~wcxY<`w+G!GRClGQckvo+y6FEJ7x|aj2b2e7Q4n4jA
z#Caw|K-->C>fq|s?O#g(woK;vfOq(YqOlAiCmS2Kg1ZLZKwk4vJYJjbZ8Fo5$Y8e>
z=b4ob<Hwi7%NKvsY9^Km?~y7@PQGyZ^l2S*v&2J6+9{`)q-IV#)!RcoJ>SYM$yTmf
zYmy5H3E?>1n)OO;BjIHVES}s`G|A4_`Cb(}t9g_zyqm2&D>=Hp&@23PKRleI8P>bK
z@Oq(aUM-1xbnjN@>wtjzr+W-4@oR6YY;kfG-~{5IZ)D?rj>Ioj9^yls2%Tkn)2JKj
zNA!jI-x66|vnfth$<aL@_L@e?XppwZ)wFZG{&`UnpJ~>{bAoHSlpk>MzUk@dHa4Mr
z2+&nssUF;~do*%M75m8V(4QbHoT`r@6G0XI8G1cF3{tX5pZ)Q<HvgP3MSPU0Qs`k<
zU*8N=dAcH!$!=#UwDZn}xpeZ3T3vi`@KfS@Q~mw@8-sE5&AnXl_0l!lFET3-nsFoF
zo|h+F!yV-y`Uk?I$sI=pBl9}mC$8gx)NgdZ!cR?ZGx(TH4L3PXG`vab7;(CmZSrY2
zxWH9a-Q7gqp(We7@9BJ}<;!48RiXFHYWJ?ds&_2Q=jRp{%KbA}ysIFQ*JErgt*k;x
z)A0|M{7<p{;sSVWL2vu8IBG#(gE@V&S7^0)opY?Kni}<<+^wWb3Eey|ko$f{&0A?h
zOxq4d9nUGA=;Ezgr$#Maj>3ZvLb&E7dbgjuU1|SBmw0$^Q2TW4s#yyF;DEb?-794A
zMyZ!O{ds&8JGtLSixNo|_<Ck0?ayO5+d!(@G_~}TKstpqjjnnK$g7EyUH+gV)b)0q
z8JfO+5lT&_$8gV1X^dFA6ecbpx$?Ox7ujjuZWbaNiHaH3$f(Pwq-1}kTEX9KMUcKr
z&ylHCkj9f&Uhei~yfgygK3OTztY7(&tc{zr%+u2|f;V9{52_DwL-E4bRhQ}lG{Yhk
zO(xxEZmJV~9N(}En7=8`QdQe=XYZtxi_%27fLuiM%1m7KWTmHk9&eOnGq5i6tE#G+
z#SYiB+OrMHKX2=+qD8Pf4uT#Q#m!2byivi6#9(mDV^hNZQUtjBf9y{3<)7!ABOXCE
z#65~Sd8u5byp;E0d~tYkF8h?a(1u>-d@?*YS4!s$(#0=}Jltyg?yTjVVD+4^?>)DA
z@kFDEJM9)WxlK1Qu0x%HTAeLd5=PbioY}u{%HMv^15cKg){F{?H6?WFK9kw;PEj)X
zxi(W_-*sdu+@8P|QdYutEL?m);?4m@NVNznq{AiH;-G(H^-zwCjH-8YYwMX8ALRWe
zRY=;P@$`a(r&5W7_}eD0NtuPY>Q+6Y)$38E3u0jG=w9cn=;!(imQ_x@40RWhm*?Lw
z<}L`iPJv(&vx+q?+qHSsZ}pXD{xbl4OohxwX7~1L9R}Kn9Oy7Y<;8y8@~0GJqz3fj
zU<f<KJ7gZ}tv7Xe^LejEqbMntmX_Otmjd1?h8yF3wLuCiJP=H^PnlKT)nHxCnbwF#
z#zJyQs0FZQjc_kJ+T-o*#`hvoj{W$C%8&OGCJ$Am-YY4>-l)!Ga=+6Y^jDI8vz2j;
z3j%M7JvsJ0J1|7Ay<JftxWNiV2YZ%wdS(JaK@_%yxjeh9L7<1+#%6CNub&}wd*rU$
zHu=)Q+g5~it%vfYNLlEjc0ek^g8xlAZ#Ts?Po>vOlI4?#O#>ql8c*(Unx$#Uj0t<d
z${G>l$9)CkcE9d8<aQX5+vFfLZ$tk@)teaiyl-AMhikoj3_A~g1WIt(4@);b9Gp3K
z0T^ibK}^5&vxyUDsoP5US-5l*2l+^dI#sAjxEC!;cGdC?E`52NSNIjhPOo_YySZZr
z2}Yv>O%e&JbzP+S6`7K=&Zi{VEi$lYs$$ddxzXHHDgJDvqZ<b5$JlyeZ$CfRm!Uh!
z-6S-I#I`=8iWDBi?meQi&N4?CX8X+P&%T>ISGqh)q?w(hF)5F35D{Q_TdO?XuaVzi
z75_Fyh}F|Kj8%m7Jlw~r^9qW#kIRc|duDh!I^A#L(G)!YyBqUCO>~PrpVpoz`Qg(1
zu33jc;cocCo65)N)*ge!S{*X5DWabM#r9^24o$#$;EN-1S?M^&SM>{X#7@MfZ&m1D
zK7g=5DcY#27Yz6LMm!!psW_Rmk#!<WW;n+{Gq)2F1hOFn6?6&CS9LqkJYFc~9(mA!
z-upVi!%O;fjVZ2UXh%;uS%scb5o#MBQsIi`MqNikY1A`BUZKYCw@s=sbQjK5D|FIl
zqdb)~+<Y;g-lewYP)K4YM*~}*y{K#df?|LQHP;bu^E=|eMr=5bdS&OaU3udm{{v&@
zF@}JK$Y0vd3;Z?;WESuT`j^+&@<AWVKig@h<-RxId>+F#sN8$t+om%nYOH?K%q~KA
z_r;H#0G!s5Nf%(*5Q`AjC;bbqlzvZ2I(xbr^=T578>iJ`GoII6ov@+QmjH=O6>Q?_
z+pP5Ecgqv;`mIL=cmjB4ZuyOl)g!kaP|(^mogsRum1omET!R0o(dX_Zm1v(iXVWPb
z{I?GHds8y=Tmi~G`)VQYzw7qQDiYxN8X#0Zs<!>H4Wx|k0`*UQ!qoIXo+o*O=Tm@&
z?B@jjdGkM?KD@%ApguM?{l{~uZQKP3DA0}?tbg>lV*%_yFIEbT4F9j^YvB1CkjVA#
z(U)WR>Nt(_EEC<)=TcVzdYV2sBxI6lzsi@<W0aS31sIpiD#`fO>6){l$yZO13n?-C
z42usR2~vP5R*;gyv*&mX!C<%mUj_erB*}#sg&=)<HnZZGE+mp}XJ_Z?ECVF;<^%jo
z#T=kTo^^cFn)HX)W4eYu+YEk5q}qCN4BwRK^5BqYgin}HPN@g*Bi!Xql4Q}<)5AzU
zaXQdkV<-aESpQi9<Cpk5Rks4{ymoWC1_rF^?K#-?TFi?_O5+q*Ftsk0mbXIyj-|kD
z*_T+(^OOhcT)R0Kg>Jxie!JcrQZL20NeBIKZ$;!njA0*+OQ6=rQ*mL6Ker?U)(v=@
zPJy+*_*{n|AO=9e;_ujP{c@D5QvpbiFTh$wK<BoC8bipuo{RGFeZ$Ld7}el7PfHgk
zD=!}c#R|aCRoGw<-lce=K$U<2Edu{MkKaKxkJpwhvHk8MKc*`)-%2;5u&{fiVuC;S
z1nc7qXQYfD<6s8TJX%LXS^;BtOCbE1^V!b6zu2NYq-y8H%aNQi`AG7I#YAMccXoHH
zFWGme5FD_l0sf3_Kq9C0?Ido^<nU@-+Y=@GB*P1U7!lQ`KWqfW6Fn3;C$~-ePW4oQ
z&0ZsUTnHDC{Uui{Y~+3umLt{MCWi+;y)V2zJVsxjyOLlec)&=K^F=V~d<nCAB6K6Y
zG36F<Aij~$hDVOD2Y+tho8aJ+M#{S=pU@!0W4e_3Z5m+x%1PCYcE{b^vVL&wQma{8
zhAi7Ao?O0_opip{e2cjIic}ZtnWr9#$aj;(H1qtqe#3nwYD|QaAQ-t1c@L&iLcK1e
z^Tj2V82p{cbNesO96nNy(Nv@QxnFzW{`kFldECTOPN1q}{G|qTx5nApgz4O#SER8B
zz-F-GUA;qhJGqs=PoGXJSC>J+VPw(dp0o44ii4en#)(g1`?c=Mrm&BzA~?9(U22s+
zzl-`%6lxq~-H>I(mkHz;`aDLzE%C6&GOWuzH)MkBcSO4S@yh4+m0Y=pusv|BNym6%
z>KY?_Qs=)vO6e;(@U2OQ4%+B8WMs2z46P11k>Lcr1_$=aXH7j~#H%3jA*#B%v9chs
z0Kh-O6w9A)Mhs4nikQ%_&~AK?LyBgm3dV`ohH2y75fD8GkSwQ(J@Si5$7{yx37Jm!
z8G0FfkCNQJi7U`8zPC3cNvx>Ye(+*efyE}ku}wBn-@c`eH40)B%yo`&3wp}nsi<rY
z3~1bo+9+S;sPQ*?BUGS_1vN;VnOGm2-yFYZgy722EARNMMh+JYak(H5#m-~(>(+Np
z1aNz&TRkXwuf~3e?%Vfd=rT>^@~kc`9Wd-0T;x}DU{T!TS6qME886z0@WV1>nUw55
z!T}vsAb29~_mbP9PbsMSla8?C7YYAdw^s^M(qG;Q7mMqoOKq@0*wjb^&LGuuU;FwN
z0vwW8G?T;gln!w$0FM(oRzQ*>EYfdJS-heWQ|3nk;8#xWeN`h=fI9?I<v)}IsAx|n
zmVp7;uO<S9YbLEceJcCfZS$&vA;!9bIQ;jk)G%>iZt(cv!+h(A!}CTvv9(w?3^bY5
zdo|3D2A9m`xQXf;+#oa<Z<ahT0VS<I;^-8DIrFQVX4XeQd5St|J}*~!_uZk<Gaz5I
zJP6=4gaIvd`*bI!tS>?^1fa==L?3sGEaa>#7I*Hj;>q=<8f|xUD0wN`oR0EQL}r}l
zWAae$oXxj_Ma1ml47j<o=l1P#<_3>X{&6M&lZb@qv>y4_Z_bMIlV9eO;`(0}*cFc$
z^mTPv#&M{K`#y6KIiKJ$9pebd3W7%uFmXA~*iNzP?W($6KSmzEdG*9C|L-f~jpJ*d
zjh6Y*Udx@0LnB*y;{k+>r+^DEQh5rDY?(+|eA5L~@zWNkXM}4(3Cl|OsB$cFFz(>I
zm80pZM$A{B;zTE}HA-ZFwUMA59I}9o?$%(3dWgbm;8^9ujZU#3O}FLU(L=%m(Zl#<
zZ`SH%pE`@=<=24UF`<B+F|SC_RV(;#*YB_?aO_5>7!na67{Z$9?exrGfj_r<2Ai;G
zGYCB4M#z-Pdg8kDaMfdExXqys0`~FOFC0HICn`qx5SdhBaz*ZzCkV6DEK0ezNJ`>L
z$6d@Q5x|IsDt0>BxdY0U>Zs+&gV{#v?^j6<7yR~b0X}1|?+bMYlGKZ};$nL%jRMe{
zUY7RuTagbJ)K!bkOLuP#rZ9VK)XbgX|31inm*tFZq&RovMU_tc*fr)juBB3$_yPli
zuv~SlxXGudQzocv&2g{M-MsczuUP0r0?ktGZr%z=r3(Qi?j(mD8|fNl$;2r~R)QDy
z8!Q2g@0s6qDfLS4^|;XjK^t8$omwEig~C<kl#3(boneN^l)kiy`Df)}b<IN&i=+`u
zGyfPB;M!3mz9I2*tKcSrpC!prdwlL=mD{CLFm{CdOZ?$N>h{9Qho93|iWAWk5?h6l
z_bb+Y60J?P*QR`VQ$dQO7+@@y1o$fU>LsX!2Tg*tdP|BGv&+!IVd<E8j`*!etNoFY
zgjH=bfCB)jeRW}<PA2X!^xQg!3Wc-NfxMrpMv$vGI*wS#!+N*?8WyJBJaM!kP1&IS
zh*u+y+~_gEdSiVcVFLhsj`P>7G^`)Ug^L82JB$KO9)K|pe@k0xu1JLJ=}|FzySmyq
z%dgm+DeU*3&WkjBh$7Gsd=iE<=4Wq(KNY8kBG_+t!(O`7^M?!eri?uVWdRv`KprO&
z|CO=i@@X8r)F23>P{sDOx4?7Lx~@W1S-HHk6;wO5UOqrh#?B{4FBzbc3Zbg3z;75W
zfwyl+RW-~1aD7^FoataZthN>47OU?af`S2Cx-T|7T>LiSgtkkV&wHDb9|8iC>-@S#
zzgJF14A~`&@Q=SzS6W@s4zOp5DirkENRKomgk19^nO|OBw?A}2m^9GbLE7j#JEszU
z{ZyS!mG{^S=wty|IQ^_WGWUpnmdS}naHXaOO&!d=A$%PrE!wR#($OKzSiONIdv?D1
zV?kph5m^w`N02Jv2y!%G#hns;(^LCFMm?FSsh9SEKo=V+U{;%%%IE0wimm7*Y~uan
z8Bf#1P6{%5eZz(Zsa`6d0t#z%tdvN6Q9<eGwSqTFoO$QAMz=#4J-gD4J-X6O-2>g`
zx$hT!Ot-IS6!9nzTK1la^9?8k^dhnXw;II~ov|z9vRl(i^QDf0p6li%Z5y%af+5u0
zJvO>kJ{)5of((%xvB|{B+4tOylPda3x~<25V7iL%+2c&-Z$zP^F~IlChriR3IzkjN
z?ZnY8agGXD0zZ_D=o~2lQ8T6hrCs@~swy(CW<6e}dPZ7W(%f7w>h~`9L(q(57R{qd
zNG>xRtURzm4<<=Sx=41dZqG@`W%jw-%E3yATL^Sv3ESlkQ0>z3wSbKXz?<Fj9o7Ma
z&E5Zo7R{&`S3fBTS8$Wpke&`{45`9Au!`JWt^%26`#U2@<Ye+PP=s(bJsShb4%&R{
zmdiKEV4Dj@rGjp*+ji}ZxP;^W409Drz*?g`K*>#)^Py0ZBdL#XUobj7q$_$=<Ju%c
zj3IJx5Zw9z&fFhoRAadAKC~)?yYSIJpcq8n#t#r~ognnUqb8MXZ({>L40$;X|6vjT
zm<tYN<Nk){=>^`~*OzsM%IvBLE}C{0XEEQ@js_^Rn8WzgEGo*BXLXr@*X+>lBqJ9x
z>^873C4A9ezb-O-0N8NGC63c-Z}Yi}(s{JC%larux~Z1J2Kv6E3V{0eN+}8GmV`|7
z^z?;MCS*!+ae8}hM(Cozz~f~RkM$IHznax8gm1;Z+!PGhpiL%bu@?5dTIcmqQr$=K
z^G@8|Pc`Y`{rr+RV+)DPcOiLlI^cr~aPcT*u$cZ-Wu)d#^i&FPUNszk=)AV2ONcfk
z_S)t0E^WDze_u&b?|1^NFt@j|>O*4;pvv;#(f79NW{r!$d=THU%E$zTLzOnMuVk3e
z`9qhOuKCvGfMl>6?Bx4P^Zegtmz@s|A`L$(I84(UupY!~kI{`vj_7Pp%9V%s494W;
zJupO`9eI^XTs_y$;`4wR@-C9;wHNMcjlt!15Ix)q_;BLHM#w3KYKmi~nm>h)EzW<9
zs{Q`JfN<wb)#B39Ru=j7n0Ib7*0saI!6o^~-d^+Mr6hyXcKHMi;#%w7j_J09A0lvj
zSqx`5EDdi<ESIN0>v}i2oo^MJAm?Cjg*Xo-Tt-(#_LYdq+Ft}PI-Joq*<pC*oF+)}
z(V%7gsagj>r~nFmgS@=7v^_)p_T?S}xRQtu*@d`v&lR`_A5_!Jp&+-*6lY&aB~@0o
z8X-4Yk1L+J0klZ~XQ-)NjcvLCLUwJ}fGg#|S&HBk{UxanUZ)8qe_obSuTRa&+@9}6
z=~wQwIB}$frIPFpSI1tv5!JfmLZs;=^a{)_l$*RReQv@g^hCZD^uT3o<xHk~fXgTC
z+W|*yP?c4DM8)%TV<AuJOE^{`N6hGK-01WVlo9O-cSU$`@y+m4%;X>l*L3zr-2I=e
z4W@~mn4ZM>4xsdDJqA=jS3E;xn=gb77#B~;3l;``piqv!=^sNFSdSX1z!u?8;J5y-
zlq&^)|F;=<N3O-A&8VaSOIy=(g6+Q&rhfP*|HBWUkp*7;Izg!Izg~UH-GlUqM)JGQ
zxc_N#faOSIjVL;D#{agZaI=DMm~i}PSC9N!>NU<^Iv1L1`%^mq`XTrq81l@2bej49
zION;1M_vV5c_m})?p{IJcpaCq$uo%$4DlvxD=AL4AAlff*y{)4N4vo$!+hpt>&@Gj
zUvAxERy%PH4zyFMQ?n!h7MBci@-zrgY8OGsKMrR?#y^Sx*4}R!czNowj7WT0{wsoN
zh+8QI{>V#}8*HEh(%`g1k3auR5@IW0Gg|yGGr$0MxWK^MiK`s{f}&8eCrOnT7V^GV
zd(>x7x%l;i-eqR^1%Ihe#HYy?qKN88KG2p47QMU>b!R|3IAY|fq%-9cDIX9N>23Cy
zW;?PLY@t#duge_E>l@K87^)QN_0Bq-ymc&~2*Nh2*uP-dV2C|yVr<-%Vb5lBXAwYv
z<_($eWATq2UG5L>PpD;SSlVmN*teBghy>rcP;>?eY?eR%hzr=!MIYW;rrlM(`0$d-
z4g6{d>Pyx)sb5n8CMEh#z)ed_%gg=IcbsrO1S-}f!HNy`lRq#C|B@!BktHP?$er2b
zr=&4Ahm(wGV8k=ZC7MMyNuS51wM6?L^LwFqEKKvrD5a$E=SNUeV$p8`W^m4$q`n51
z*n9M=3Se>n#R;VH8Xr-hay`q#?H}jb<s?$W>4~XIuozRoCB*esZ1*UD<}Sg@J0hs;
zjUH71V0d+#IYvRZ<#Pt@-H)F^9vV*saB>Psi9I_isPY8Bft2f|ElFWUuQ`s(t7OJA
zr14+`GW7d+{3Gm{4+4UGC@Y_S&Ts)jWIRZ)krI8%lj0f9gBWcE6yg|a3%~zu52>i*
zdm_UGYpv&BIq{s*czrC&LK8KYqVro0aS{n!aPvyf=qOXAY&>-<Qy--kM%{rvVa41-
zKbM^n?dRRf@eB#(GYGYgXAI<ZZI=D#EzfY+QWi3@BYsBQUb-z6U=E_8z=$X^zCi_i
zMi_YKqx7>*99KbEUm}pgvbqWwK&hrXjmUw=su3`&(H0HVKZU4jE`#a<z%3--U+$m`
zvhv`WJMLva8t=g|KkdgmN1Vg;_LmQaJo>r6Ogm5uO<G@00cRQtzx_Qyehi=-*#dPr
zT<Pw`mv!%@mSu}Gk}wh04H||m`C+DclV<^|RpW5wx{R{2Lw}W9{xZlvQ@WjYwv5S6
z-Q5r=Gs*s>cYn1u_3qlC_#liP<x+B7d$&7Jt~Y;kf|jrLDkx4*1$;>|4*B>av#ahy
z-Pm{|!t#H_ESeFl!`ve?%A?(sN@5|Pv@9zt3(|xuoyK77On|eow^GzNU~v!V<g}90
z;MUh|5vKn-cXFZ0ZsWPe!Z)Y;WV&>8aeH1slU^wsXjFrx>gwtZaq(a_ngI{Q+3PWQ
zL(O@P-&drG-HJz0@CXxvHd=Ws`)$QEm(e8gky-UCH{(n0zzYYqM9uiOcE4{Qvb{&S
z0`G?}c5Eyu5-z0`In^gABs8}BlnLqEQ!gge?@-E8^M<V@T*f3kt69@1*=MG&9z=j~
z^PLVdZQVrp&*Oqvf95|^I3StFVFW)>#-uOLz+`{ttsNp*A84N{z&r4s$II2Czt$&A
z@qSWX?`r{=Y#8yzhD%6$oY5xxX{|i5dKnZ;6?$ReejOZoXip4q{w2IhB?Tn|P4tj3
zn*0Lp5k}%jnjkQ5jw@paU8vG8TfCw!Zdi8`z&BUIEWkhwiaT9cF^S_&ZfqO}HL*M^
z#4I}W$=u6r2PpZ_fzz!hK!R49t5et}Gj`wC$j{HO%M+-`Sf8s#c{_TgWqpMn>nDdC
z%Ebkm%aEq+uBRdH6ow9B_S$_f3oN@I<lk#P0~K&s_gTStr+{RqQQv;!Nr;PK9o=Or
zHTaO*Lqnp~Hd^te^Gcc)OZ9<XjbYa$C_qVavwCxNl_ziy7c$0Si{x49M0suGxy&KJ
ze}+Q1%y@>tW%Lx+3*1+)liehv7a9wA#Qm0d7rVSgs*{`VW330vhUkcjm=E+5iW!5=
zQ@ShS^A5N!cSIm>k#ll-Gf9LMpr~4@J$mo(n_^Jfy|*DS;wsx`jER!k^^Yj$1$0A-
z=9j&54`j6tWyqk&xmN^zpM4-iu&Vj7aQp|*CDL6xhANRjV2)Zdv;>x+i3}4Fi9aI=
zY^6B-FSR*H4F9v@Qc2kaFR9<9i;bZ+h`L{{a1ZS7lJ!T*GCt!7((Fe(nmlP_gqI_O
zc5gcgONL0H2H<%^nd<^p2Gydr_M;D}pP6G;F^r5uS1YKOYRg!6^OCfYQj0?w$Al~{
zU@rQp1grx-HJ_Y_hyj6K*EovuzAe#C(MMDWYu!^^^E;a2gT8=ZMS?1*7uC<jWk=2I
zrpx2QW;<BY-7pxmFE$imlK?|v7$@daoah9qZHFvu7pci!W1e4aiMJancVEe6XLL#A
zCeILtVV6g3ynHcI)sP=#T;M$20rzXh=&LhF?~7vrv1e3hvSrkuYt}oD$H&EcAH}VZ
zyVXA?7<mL|C+XpWd)NS)G?u6hyTL))NSAKwd3?q0B!3NqyzaeHYBI6`%^q7XpDCyF
zWVhuf*y*)+#DvblN>?Xio826FY=)-1+ky@b@Qmc0S2$jEkZDtWo0q_(*46b@1!FNo
zlhQ>97;>)Sz*kfY-Jv6do-k;J*q4Umn?SG0uM=`sgim8M#k(oVV-E#Q)n#q59|TFW
zHidARi#Tb;T~V*EPX2v5^IzaubnfBSrEI?e=hh~uT%U2<_AUdo%&S)56uwYr9LxPN
zT}nfplkHrGnG<6Q$1$$zZ*CQG$#aDZw`io0TdM?}YfO<cJud)Jv@@TDeTPinGgSYy
zy2QrTR{tv!PH%<w7<h-FIN&s~Pj(s1@KZUL>)}bY#WAc!Sb)EHzu4R>2`)m(VdJf6
zP-r(qt(X6)S&|liM*H)xqs9mvH9Lyu|4x+2JdX!m%0@!5OAM}srLgh$QN5ltdEAfF
z?X?tNBz0&(bGh{^gx)!|&5e}8pSvN`Nf=MUy|fGpS5t<X554(jQ9G-9m6ys<=O7wU
zt*`t#54UH(d+yC1xYQxM!GTJvl`p~m&at6&<W^3l3$#!WRs-><LQsc9DH|>f3Gltg
zTznL_&)ZG{s<X8@PK0LcxW>B5G}<u5Is@`AWC{5^dGDuhXG33AE<XK?%c8_B!4<08
z`~m_#>F>Ra0oE_N0H`d}OHa86dB(#BeqUm2h5pmmQN!t1H!nV4nIl6~RdEe3VpTN#
z;MTQhkW;)3>*OQLmr-l)hRYd1D}igLQPxDUJ&9RE{p##RtH#FePLT0O{cNeY5M>v4
z3Zy!h<p<`&%8B&qntMl=TXeO{L4^8N*Sa!8F`yV+XFt>PXlQ5%BW+Vs_o_X^tKX()
zN4IAVZm$pR&6b1CSSuN!vW8+M9ymI7F{y_XE%m*tm6a9tQ$XHjyWD$g7?e1(!Db!o
zAJpXM4>79S5gpz)sqogBmzQ!7F)QwNxqxWL0h+$Nmui@%eR|Mm&w_2M1^Y__Z@(}n
z?D}k^yieh8z47(sq&m%w?%k#)IpT)z%At2f1aGK@A<R)R@V&dz*)pAbS3Jcqog`4K
zT!3wXlmKRERzlovVo48{@yJ+IEQh$<N@8ShlfOpxYc1vVnFz6&2z$RhcTYoWKU%@T
zrVz2U$cE|JRZBlrlJ3S-RK7eFhm9V=S4ftoHeanh>*DH3KmADd*-7l=DG!6;E@$T0
zj>*}*uh2(h^p}D18U)miTklRjl^V<RKOnz6CO%)!_47E)yo$G<EAv6`{*0M9{QUX(
z$VCl$%<A_8_x;d4F((6t)t23+U61!_)wN5JHeWG&yUkv<InC?MJ)T!fxq&gXU=ckj
zn^Z&)9avt}NrpNS^8kWFb(zP|QFw6j(sE);=cPWX<{yn+9&g#4Y?iO8>yntXn^-or
zqswpn!4wJZXQQ$H`!gAS-f~9}Y~b{wJU1|>6Ghl6jcflFWS0L?f5rlv)A1j~9_fl;
zrwy{5Kf*l|Fi7)cS_Vb`zSJ*={sNF<l^lOVid5p0)KvrvxHgc0a7NVU&9k6Cm!Oov
zsncZ67y1!G-MC4k<VxCZC2|j&esBxOygAT^tWG`@I&z6v8!*4U)RMXB{AKlm|A&t!
zK+?PI@qc9E2C&*i*QXbc?EL@^nsbl=+w```fHiP52h35lm|a&exZ(2-*9Qt*)RFld
z{77h4Wf?!#=6YOvuzrMnsiz;e;~p@<7fX3&jC62f_ivi}Q=o^VK8ac~*y!8kK2^Sy
zb_q~#5b!N8eK?j6Q#Uhn1_Ma}`a31wz>)Na08h#%2zO@_N5|*H#HdLMe^X!?A5u1c
zkgBWc{sd$75W(s31Yf7n;$DA+DXpnguzBg$U05*k=XcYxH&rrm2074X4R^syyHp}7
z-B>R-xBUnX0Y7)<4_g%U{l}pKy_n=E2r@fcc)#H}h{Th&nq9wqHdN%y7!L@Z8lK=|
zkmVB(pJvuB5WQKUca1f1@@7&4xY{`PPN*J5=f37nnxjogk~MMYXh6S*RjYou*QGaS
z5xE1lsu*6)i`R!DH2YunCMPR#zPc}<0LSu|`#+dvew|#_y3C~FXG1S6%%YONe$qp-
zz6+F1$~%!Fr7e98cL%9h0dK==SGmj|oZ|od3aq9Ot^e~NjqNNP<IE4mA`?HrjH>5$
z=#SC;+aChpDk4sDJW5=1^lK_4;5{hEH<?GI<}Wps4Y=j>j=`#q>M_3t0sa?Y4Lo7F
z|M+TtP4dz9{iX1L5aYA`&H?)CAy^fSKyXa(zq?|6bnhMQ0R&jw)KcTzM>fIHz9i9t
z0m8?xs$TkMh5u*!%qqaeQGN{K_V*$2=W8h307)!DY5&q){`3IkF`cL;P^tJ^d;g==
z0gOBTh_%qY9)K+P)9R5=lwgLq072!Ee*xJR|3Tz}3!%DrrF`z{as;>n3bgI;CVzTU
z!eWXYtFu@XdQ@j9D<X@rQ)hDh9IkN?vIg#l<;t0szdK6?jf;(KcuYXt0Kz7~FS51!
zG)?u1h~L4UV;g%0OoKz5D<Hc;B^)}RWmA*h3abw7>g_!Xk|y_6_~f|X#=Y5*8~ix_
zy=8YY5h|8FS%T~hu5=d7pww+PUHd0VIzWdRBqMIbd?&=E@jg7o$H(`bDdF{3JC*Ys
z8h=0<z$*=5Q5G_RR!qk(;23*t@V=b~byYtBt1TYTj$FGOMMQQfBsh3)8F};KnT@nt
ze(?DNeQr8KEW)|*;ada71fQ)e9-ilg&5tG1p=;%;EwtfOi@rX$OsAN%>ED!<mi~xI
z)<l5IU6+fUEFmOB^WMr}i2<K^&lJ4SPJ=10u<*jL`=lNhn^JIloFELxkcbPOM%cN5
z!>@T!Z?`9<kgs<BX{7YzCumbM{eC<nI^Pc1V03`LFN8tVwI9*_XzrjwE4+JTgxVf4
zH|;pvbpdV>7#ZU*N$|^_i6XzP{D4m22#^}LD>9w%2%gWg)Ew*xdbrJ9iWH-djf>-&
z6~6`;HiAW$zL&vDk5em@g#iB6p$&XtGI>Hm!u^)gyrt#2xh;%{h`F9+Oo_@3i}+%@
zt$vxrm&Tn51_uTKSu%j8(u2Byv|q<doIavaog{lqBmN`Af{?IS+O({sL}!K8<eF|t
zm#=;C^9|$vI={M*ECvP!Ex*BDrqjS{07zUG3XhjbUk54ZR~JWWkcgM+y(HecfN$^~
zK&5zrD9D2NlL%~$alJR0PiaEaXr;3S&Xuf7#vnpY$|&}YfKNbRhc`oweW-Z^kh)NS
zs<8|m;#hnmz@S{?6-ihnLMqJGg_59B0rq)wj&4H(4D{T@S-{J-pPqsJ@E=WDr5fz^
zRV|zo{>XOddG3#JQ{L!6RxKYGx-S;W=MM2dte-K~DSQBf<%EN(9TAR=B!aps1NL|i
zdx*R`#U)plkPG>B7p@v0hL4W~2eXhpa;`KX<`uPz6C5ln_KwpwLX!iI5XQu&@j)90
z$GYk1^n!<<r&rb!N1ZQ^X^eUA%vl71@FRrGld8uW@gzC<o!t%k4$<WXN5EL_>7S!C
z1o$Um(9@DO0UN?5?Xgi@w&II;4!{on-W|EL#-qznGT&=ZVEn>u8O;CAcggKLiLh$A
zY6*t**V={)(nY<A{5EBhAQ%R!;ev`1g2O&oH@iK<g;Ty!A+@dF3K-mszK@eFLqH@|
zO{dly#?%MI-)dpxypqUVkK^j6w>lVALBNzFc}~E7_**HPrD3soI1F73xLm|&Kz#zQ
z{qNq#e%W7V@xRoI67l^HaRg9chEg0wLq{LruNY`(maalONH04y0I<VxVu4-p(*_le
zkK9-4jXa{W*-82OmO#CZMnIX$P=cO}lr$f=EOtW<UMB2q_pBvI;B34UxyJ&EQ{SWh
zl3)?A>O?G~TqfnA>3*<n(STHzoU6~p*XNoa)=cu8OUuWuxT6ufITYnXBF=Q)x+fL=
z9H(Au-?yy#d|Z{F5EMI(cWdDYGDNt<5M<KjypeBcd(A1f(r#8{f<{0E7#if3zXOs<
zDhxZQ0yCKp?P1*S90w&Dbp+SN$SP5VaAps%W6PFOwRWu!)y8ro%+Xi?;}|N;**+Yq
zTDQE@u~s{&JZiY)YcYByoKJ?B_Rgh}OI?s?2HOx*rVpg#&Gi=!E;ajod>8dDdhbR5
zqj%1yLwy#F15H5%>#N7{O{s~vsF_P5p7VWu@`5kc$7tEtt94yW)4>foT8rI!we+PY
zew+FWCcAv3JbMR;dfBmDyZ$P%Il}8(%Nerh_73x7qmP==5>?n2@{BJ{n<K2|!oo!w
z%QI&p?@H>7+1&85E8F-Wm8g633d@(r|KJz{)Tu1@=r9`cUzz?~Ke$iE(!@G<VEWwI
zVRWxKTdbZ4=Z#O^No@B5H2ZBMHC}vO-o1fF#EM+Q234-{oz;NFw^^JAUD#;-ZF++D
ztvip`T$;n$St4rpJl)dXdsm)?E4t^75_4B{1$H`ld_8VJER;(bglhF!{ls<*pt7t;
z+)_hQ?tic;e!`{TyZVWX_N+s<X<qO7s<2@{Gc%3+Rbe!?nh+UAP2yo${qXZTZ4YBl
z8L#*u-tz9wLcWc`Xq4~B%J`I%$LJwoiJD(T_tn@h0|HdGYt<`{gYzFIhTC#edm6cP
ze{yQQLRbClV^>#FCnX~T!wcY!Cy6mye@Q}pPVdS7+Go9~gWbCP8_|BV($M6tG#^7$
z!Jdc5CdzInA-DQwx#3AXhwoS2e>jqbpx_=>7c@O_^kiXnR60d3=B{G#X3N9Urqq~A
zrDkieyd^|p!-PbGkpFV7XTPwp)ou#Zruck0_0vJbYpH_4($ZLQ7X_D^%qe0yu}pNe
zN3qyi%kiC+!WzTAEzqBZ<Sf+p(gB2kO>czFr0rHdL!&iH>3_BN<^NEw|Nljn5-Onx
zsgP`yExVGGwUm9&G8kKyv2O{LEM=JxLdY`4HZzv7rL5VP!7#{fjIl4n@V(D@pZBTW
z$LAmTK8~O6`^G(UUDxY+UC-C{d}(TyJAZx)o-KypCB?-HcPr88=kYI!42t7h<HF&(
zD2zQ7Ho&N008UjVVI*ak!B*ehFnA}K^L8{?+>cOwmqDkNn(m{J9}--qeRA`nv?vg)
zO-|#>lX9Sm=Hvw(^}2;LscPRwoH@l}iba})Q`HZ2c7P^)yrLuXE$IIgnBd1uAE}AC
z-rc{4sBZBcE682~QjHcx^_*+T!f9ECf(d1^^+r~Jsy4hd@nYcR=(S`C$9JC9_)*j3
z0aaf8a=VF7{jL79GGqDE#~ExZp0~+<7KG-@gEx>^TsFcVLn<&${*&X|Rw|^ete^o=
zdBDS{4l8?3mC8~$yg0_h7q)?xnUt>55vnTE1fddSWdTV=$<Hl*PF>SXsi?Zwra1C3
zixn~_IDUCJ=i?+@K!8j_ynoT8vf8>mL1K4+go9uSt3V=95mbkkEcl{*)=|Rk?Dg3-
z2+-8tZDVp{W5YMnj4p>&#I&HkJU(k~RS{#eRcKaQA6@N%XGz&WYjMp%k`)S;04DNP
z>2JEuw<;xMqN|-{^xQ{hztVq8{u9I90#od0=kB_J2#X&82l?=c!N6PC0@~d_3yc0T
zwd>|j6$N$Q=>!rnTf4eqpt42pjsiS)aX_yG6}HcuYyK=&hEgv8pN-Jlq9HZLLCP+N
z?1k6NZ5y=)Zl;YE4h~Nmu&f@)C3(i1Ks)0sOH$cXJp-c$tP#F}GN_WcjA<1@Zw?F8
zINi=`=S2D-0Fv46n=}#lEM}y0V7nTZ{y6&SH&y@TAy;_rZu4cv-Hjngh4H|35)Zuw
znDYn`i&EkGfmEaHTZZbov8ih9giJ0@*Z_X1P0RPe<l-}@Bt$VC2;1&U#o=|1L#xkC
z9}l(N(;uS7VlbG@+gmYVV|<A34KGtI!^3*2{3YO2wOQKT@P^jgf@V%cj|z663DaYr
z8q5766aj12zlAhwXT=N7%cspd94$7X`O9Tycg&R};&SGbnCqL{<6_74KZ6gR*&YOg
z1NDD_>$m(V9_3Qy^I$QO<H0k{%|%fCmkVEJ_HNrCJ1IsdCYVe!F@-rfIeKc0Cw(4-
zd{$Sg59zc=WHc>oB~|F+>Y_m6E{@28{%*q3Qom(9ncFJ;tkU|v{V*TVqBP#SsBX{(
zZI~EhTRpYwaPtLK2FteL{4tsA_?JbFbgu!dRekKs;NVMVl_uo*(jS=q(NUOxc(q^1
z1`5J%nZ>ba=<7ogd%v`DWN^mlB)!mT%s_|Kt#c-|Fe5M78#m6I89fprRkuHXMpq4E
zDAN4Ax+O0wTi__p7~RxZkU#_|vI4i#Zk-ODo{;wbPjGAe31B^H>Acye{qTn|-+S`=
z#82dIcx=%*O8Mw#!pi~n(g%cEtz<rEn18o1H=ZluI-R%_uQ$4j6EXDJrNHGyBjUy6
zy;)>H`|g(tHbQst7pZJ6EY8TiIMVXotRp8=hbY-AeM}u=qY_alaN)8SiBlnPawJ_V
z|F*lv-hWK1kB^VqFGH>=EBt0jjej`%(xx~JHE>}jtnTKbM$Nr?D{vsbo7T*+`UY<q
zAC}G6->UjxT|N@;fWz2sT^1ucNc-Iie4ObdhU)Y~cR7>zlbYsEV{4+X%S#7lYT-AE
z{zFMxmrMKN`Q4nGVKu)%y}zATe?B`8m`3e&;dMN}KmPgmc7So$`}xK%WyHUojLks+
zoTQdNCVcd_$3Km;`#}Ce^1a9#Ki~M<l_E9pe$i!am*c-Z{s~SM*??6Ovw!nHF#qol
zxCt1K$-#`lYJWfZMcDs%)&p3t*^eww{&pz+G?Zihu#Qjq(Hj58<^9WS#M}!Cl8j`t
z{GZqU_cr(>@P3<drSUWWeeypO5iAB+uXcUs0OG<!hiC;@$C8v>6wsgF>G!Ko012{2
zX5+cvgyyFM;36gP{`1?X%8&hDe-H^Q5u149FJt=c1O63(e?{P5E%2`v`1c_A_aOKe
z3;c@({y%|(OgjuWj~tQKd~o;nlb>kmx2u1l;lI$3_H55d)u<L8Nqv=ZS*Fh^AR-j?
z2V>m-qU9K&;3&X+<ouDk$z(;BlHU?kC(Bb>I$F8r{`#c(vqQ}n1LpTE%N;EGJIU`$
zm2}6hVL}z}jJuCEy?P?){raxkk4yT$Bw+rO%<;(MXWwx@AwP6v$NS0{CWb4yyK_o&
zyYL>9X0Qd7uedofbY;)0qnSH?hJAh_dKZS{Vx8kD+#l@yYdIibjz$RzI^B=4z5xSu
z0}R)};Z$l3zxC|<?^r)52S5M*&bS?&-=12Y+s+y2Yh?slc|6m{LFevwpjnj;77d7B
zFfn3C{m^ej>|KfPIXqzbcIG^~_`VuL7VMeYS{wh4hQbU#eU2yvNXLAbjO`g;agxh|
z!MDZ33)^9p0>urwIRu4#;``WNV&H!dM(|j$PaS(ncB8V2P{q6qn~6S9`pvowe?YE!
z7i;*~klk@`DSO78mH3&Fk%0a^Rp_r3ydJLDrZkZ8GB@)fN`uW>!!c>L{21hNk;^f`
zk0~rYn&2+t?OxW~lxDsWq|2sjk|Sb*>(2J;PJ4&iljiq=y{Mf(2+ylECmO0;q0CPt
zy}02<U?h7fn{(4%5!I_g<&2IEpCXBMjyR%axGc%`NR|z!0&!Aki0{E&(fohN)gNOm
zW9kYon7)(UhgQ&hUzuct-RhTjqt<qV*h-yFru`rk95c{3>s;+&1o0KYTM}B#UObsx
z*;q%_1d`t1AWbJ5{_=JF6rn$_%z1+o&d^5&T{~~jgCQukoNCK7A#@FcvYC3K6lbWU
zs}q@eJ>*6-K9wQa0;GP#LOf);M{7m8txRPS6*7bpDM6_(=?)7DH-{;bxxopyLKRzu
zg{+MC*_@}6Vn=<_8dcYlPc+#&S<?lF^29VdlE1KTd1PidZKw7LW+RTmLL5FpR%g7-
z{MC(-+!rvO;q(fZ6%I9<ZAHe9!l#kkT6wjN0xb_Q$#;D5E9)069Pq-()B4R6ExXbu
zY}t>)2ob0s%#OwP#!eG+Jzpk!nDsiCj%^<8umb-=BlgRjyI*=}OYiCbu8>!q1!G97
zGjJzEUf@wQ3zb$)X~5#WbIe)#kpv%B-BW<a_KXy)HZ9w6jCL$;ZZ{TX<}=88DM!XJ
z@M#djHxgIgzWZ&gB0FmK#Rccz$kYBB&$#<>FM3l(>y7Zx%12#SZtB1u1bRXpj7RzO
zV1!tm2-P0Fl1mIyLer<H4CD(pT8AZ&kf-dyR99nYZ5#THVn<hXc5`b_pHC@hO`T*~
z-79?LZFlhgjh0SUSJv*H@998i_n631=U5%k{f?Q9fZ@4O4~4({fWM6Q4=q-D{4S$G
z>E44_6T0|2gX^1W;Zu6fru^)fjaGB5+YWiow1FU*i@T?8rBSVKUDECr>3&sQB3os7
zcYo$p$m$fnfpaFzm5*gD>_IhmGolW|G8V<&P-Dxe@Y9d>%No8Hjxj=dJrX*mg~al*
z?~@z_rYBK_aasP~e8$gGe4Y>g2!vYRQLua`Z7By{xR4rG>*HR#M_>wHFv;*|TU&Sy
zZz4B{=-F5HV6g(zuF9?Ps{R)Q{%1)4xh*>}wd?Dv0E(25!F<WqLOaIq4RC<1KIhB@
z`j2b^Sz3xGj*>O$-C3uESU1{=5}dr8wmwh6ghPZ|%<{G&<Z#%_vk}U<bMEGJKlvwq
z^WMCFP{+FnbX?E6Gd(~bvdT~IRi);g%bUa6A(jLIQeF(|Y~~iWY!%f$?9CAJrz+`o
z$?2h+ZE<tHtnqTi9!5!~FfH4ckhNc!9)G?+*p9-4+hIXuW(wnEz^_I+p^dnc@kb4_
z2!(E}=f*>n-(CXq(@y@f5s4Ql)7{}OBirh@)WK9J-T1}B=3}-Xh#D<L&L6*|S2z!4
z7v}6bANHbZb}^@&T}Fn26rYr*Go3)Mw3;1XO*$n(=fza&$%N;gbG%yvntdlF@XsSJ
zsP4<D<<}os=A9}(cj7~}SKTc9T#To`oayq@OW0twnxyjIcM-4hVRXZndf)}RPnzND
zh=%I_=@a_Dx`-uMSmaCogB}u3^}7hJBjRd-5TMdSHTXlokg#!2<`^<*aH|8fvQR8I
zhv+#eor5~Plr2ls@QY;qt&lrJjz+r+8MDnreaTwG6V{wg-*Thaw8j%V)H+nfzUCle
zP{rwy$jlnirLTu?2~pawj0U|fl1Z&HN|H$cAA|g{)r8f?bf@iB?`-y2^aMtbdom^3
z&GqCVKDA&sJw-J!+fR3s*2Cl{-0C}VA!BsT_n+6N(Dt>7mRC$yKPq6a39Dh2ke0gW
zf9L>=f<NC4sqtU^<h~VDF+^F`LyC7-1$m~oflI;!uG&(ZLuAR>-_i!bAqgw5@-DEa
zymQThs1m>3vG8S-XGWLyreLbS4}WnFbc`>8VC(-#So~kS5~LVTk=o|X(ZxX11>-h%
znv50SnIzWo$}mK$?Vs(bh?ykUrY$9O;<qPOUPp_}-Qe__FWRd|p<0$QEjKKEE}o<Q
z2JI@55_<1A%2kNo&}ZoiAmqxe=8DJ*7;Q!0e}uwTGlSKT*mgH}FV$46#~sZm=y7k#
z<qL2LCCQSL@R@}*2>vpNw79^bf2i|TkqUj%mX@$Sq$QYh(VTlkA8|=xf9H{u*iCLj
zV#ZqcGfcRdtl$B@9y2YVFq}21yc+t!A%Og1FD-5HT?ii^`MvUi4EfUI>7>C$oKH+a
z6RjwyTCEqd3ogEnd1s!S3vNP84sCYFK3-i2w&2&xH;gs_@!;DZmeKWm>#&&2>rd*`
zMS4_$91>O-&7`j!tcs+?gUl2P>x(2xz6+a=Z1QyrR5-Qo`#U(QuY>+BZT(vgfu#+;
z`0-f=S*ur;BFp^dY(7<LLWKQyer2^uF?z%XT4KO{Q{~fB1!?_jhPd>Cz#7t^Qw8Y@
zw>J?XAa)=2dZw}F>;{w1UjO7OqG_|)B1On|enEccD^?_~M%#2hykpM<@!2R~vV%_C
zN}hMj&j;?eO%iv-T1QO7Ifr<Bqaxd!Yw>610m0XSH`&k}*kT{;Z1(O>zf7<!w^D}t
zO=XL_eoH!fu(!rGVp#4+oZOY2Baa*DwsAm3HhSo{<SQ^+L%TK48lLXNCu5qmkQ{H}
zay2UV5a<S0u3`SB#@1DC4omJEYQDkC;&fwGb6D0<fo?%l`fiyjkKwc+-NUxWn(9aM
z`a<hCZZBy#&i}O}SXVcHU|+ur44<5Sy(lli3+E7QiR*Yn=vVakrkGoriC-b9KBC8U
z1`>5D><K|}?luJ}O*UVhu#%T*J&C$$EmiXw+&fF146Qgzrqv3wN_Eo_nS%PI(>rrU
zn0fW#kku`%MQAY4cr<V&W^a_q*DBXk$@BIah@93w;P15cU?+O3W~vGIdA5R>NM0>X
zX_^+<|K=etP@aL=XB<Ylem0UI-ddWi(d^vW(jvr*$dx>Hs&Fs9z#-Je6}Y8yenF_Y
zlBZglNq;Qc6kMU({Sf>5bgX8_Mm-k9UgJ`eXEkuINCtZ0_pShcDSAVyj3A7WkcItd
zJ0w3SUS+%S@$S^F$c3)uvWrZQnWa97f@=#z^@)VBoTJV<!Y17!Y2-TVp3Hhj$Edyz
zn*j#9tGn!;CRYx~TxRhHJ0XM~IJR4G;)86_^v6A8{Ez)Ll-Wm7H)!)dfD*{FjLm!=
zEJULLk$3PtFDTm8{4SEf@m427twcv@%yC!6IxWGo9G^GsLr<01$N$AdnrWLGMyT3t
ze!myaXvTe@4q6JpC;G3x+vG|VRN;nopb?v9=x2z%4n0(JESxhoMdjXfs-y^1Ji^Cn
z{v&5#=L2tbHEjpnvoD~7n!w%@JMb|nZZ2PZsQhkuf%OG_8>TL)s%LdzgL3dZL?30s
zy_Z6`y7-g9>6hJ9cg(%;vk<4i4x54v>u1|5TXdMhI1PL_dMY@cXPdkmAk0-^4Kwzw
zk5RV=QX`Dil#|~M-5$&}$@BTX<!H!{WsGXYh|8MZc=GOf2M#f@8)e5~O7=^|N(sVk
zUBJPs@%c2e_iN_gDX-RYjq*p^y7($mj+%9Yi_Vuv*ZAqTvMu1;S2D7-HiHrzu1>A3
z0xf!_dr@iuD`EWsA54X|9(J2cz`uD)7A$TJHL(g2x-X)#Jpz@H7uYt}22YORp5nk%
zTJtLeHZ^5|L4lrp3rI9hV^Y`ox%Iu^WsOpziR{jhLgrM;Q~x`)=NZ2;9I|_k9($sA
zKv5g^;L`(+v6H%?=KT*J>CQXoCR_WuJG3fww&`uPi5qs*J=ap3)eP->ZY+?#oa_mQ
zvO*Z!)?~C)Js*I4>`&NQvt+M-l6bty!LHXl;NMU(+4a7l_sBrPG^O&+zzn5n?3Nrx
z5K5Hud<dFZf?E6dL+u<#bMMNHWQC00Oc!SkD7?Kw&nhxdLo)@E(QM5j8W4FdF3NZ9
z>6N`Hs+GiYre1B+;~eD)7gyZRjCP9CV~A>gjE&x@AXE~TS**C&Q~Pexx4iGETF#7A
zESFsDFPP+V^y&E}?fU1DRkujdeaw`=bSG!1suXi<@2J5w(9r@RmJGubBWxM+adFw|
z@yS@7#Gc}O#3rHEe~ahlAQW2s>UGB#Sc@Dxw8c;;dO4npkRW0ki96V2gg0-MF~H+r
z>t~WhOr$P~EOEZ2gF@P-^J%`>;N;<0=z{u)jx^J)C+bB*C}NQ|os!%tXsed@U<RHR
zd$0=AlfAw~Z1E+GKTF|o5cP%`D;j_<MQiAy8J0hG+?RKGs=coYqB}^Df8yw;3fF^U
zS4ZM~qMqtO_vRTro5%Ltqv6TN+uVas1!BpQ5j=A%Pr<J=oE;bGtN)WG^NYm)36ee<
zT&#8fOms_{w%bPOE7hAaZYNb0iI)Z?JbGBA$MB}LojqaB0h<w?D!S#oczj~?hQDoM
zdt)_0L(QLsF#K(_<WudH2-0g)H_XD0X}ah$6)^{nfv&9+Dg1jaGQu$%Z6vW%-@OxG
z1PB!`<23ToX({PiD91*kwP7o_`gng^9CL_rg&*M~O_?>lpYw2$K5*h}lt7+E%L^6?
zl1G&*$g4ah<+XE+kB$0_;;IUbv!}08!%l?I#1OkGYXrouAW5})1@q8p>BnA)VdzoA
z)CmnX39S0escTq7k=U_<Pu~*cGFRu2Oor^r#1t>6mfryT7o;OVBM_PqzNmAZJ*eQY
z++cO4W=H+10*PEv<%2a56T#Y|XRr2|10pC4q**_=yn05bvi1&>Sg_Go*gzR49t>L;
z>&2++vTE$CAL!7V5iG1j{h*jC#2H#9c`$ND+*xgy(}ofI-B=*<VPBCX{AdOhsv8-F
zunaqUL*7p#8k|<#KR^(k`SiKIp#1`DPVQm%<e=2XLBNINcJMCYoJ8*+C#_zOBOH@|
zG%KZZGZb88@Qup<y-}|e0WB!pmAUcyU@2E=b$4tiH`q&)BVJWQs6iY%*WYUTBnwEW
z070M|ZY8SKhg+s)tS{}Ckz*=g6$&YXzD!Y182n()_F;7_RUX?b37h?e8<k?W2m=a9
zJ3BWVvz?-O>*RPk1Cu+fxxu%i%}s<Zsyk^_agL_-nj<&#A*pEUsDKM5a4tUM5F4}{
z>6G~BbcDi@j)5Oxq`|w%o>Mf3AVy$Ie$YM2=%wW1Y1rw`z_mxeGe2%OX@ot)aVGz*
zZ3dj`8>Gn2|J~-R6bpohF&=`y(NIpZKv)<W`SS_59rudik`{M-anJNn!_Zdbqnl{v
zxBV0H04D!n8azNeU%x%SF*Em1=vr4H+%?Ta?a?|@Zz0s$3c%YOjk+2zjh3c3bcz-P
zj$KFEov1$C=}|}JM-A5r_O~1RtiI5YvIn0H0V3~f*UZQAi*sM2(SgQgWzW!Jmqr>5
z2b&HvdX7-I(cL`?r`8l%<c#MC=l%4NaRMOo2;O17y0B%R999LOU)935%Z+@mCQY<)
zJIb@Rhm64cVwZKIHnb5PuEIObp3E4b^MmJy9HYE9?#FqiqOnAEd;c)Fv;36?OY7pX
zJizo(mDo<(R=rchZrV9W<$72@=3pv;E@mDLw$+7$rND{LvfDj3_?ZiADS_!kKLYHi
zx35X;aezvH!in=Su5=~Eueqaknz{Qn^vI`?$-c$^rMCO++bWg@L2Zk!^F#AnT3)^0
z+iCEfPKPz2pD5M$@B_u`_j$~xH5c`G#=6Zu?0w7JwR)-wHpXuWzCc-QI??(m`R2vm
z_@(~lZ{v0xefH`Tai@j6>AMH;QaZPigQ-t@D`elP_>jp}95|tMp*{npCmw2l;$xCT
zhnfsdjN+~0kFASH`>{+_1g~$DRx2t^?$W{bh=r82;ed-I-=<uN$UA@Ho<Q6lXXsZ<
zRFXq<$Cuw4ivF!vvyV>+8zahWI{iwPTkJz2^Ne)4s-frtGu?OW1B|WlU?1yg^9Pj?
z-8FV9#nkNU)CrQe_UJz(rq5>9vA1f0&N=KX4nEOf`0zfCbu+4Y1`}@G)cqh)(C9;c
zdSO^i>cm3yYl*>1s+wVAXOssRKR@4pzSf!_Dlj|Q)Zlv<zr@_bi=Gp$S>i%;3#AM&
z(-0ao%Q`9T!&xyhL1;#Nx&47WL!i(}q#}mYlwSkW*!VV#6%rLg;Z@lwKu;7)`;ie;
z#mE=r4M#f5Ne*$xGV-*&4&`Xl8!cUH)l!2<XSuqKaR~-5|II>%lNN;>BHv>e@yF2A
zZHF0#*P%fPwp||w0&SbE=JR>gBfTrd6Z>N9^RyGLw@DtWWH}Q41f!d&h`Q0UX-K;`
z>KDRAD=2uB(VeW~KH6<BONUAN!NAgIcpaSFa=v2VOlUb$;Y1KjYYr@gG%@>O*@rSX
z)Z8;?2!76^t{aFljlj_8FMry&;~_^p{iF<M&G@pXgJsz8djE8_g9&)sFl0%Ky0S92
zNfT+y#d3`0wc>@=ur`Fzi1XfD_}JPehusMWSnNS@Mb(PDjOK{bm>?03O^3<*>g{5I
zW}+T{a4!6h_W`(_IdxTk-0C<yR8>dAiVzG&dX48lgXtVWm}6#sER4xRjiE3j+AK?S
z|K?psTswrs{bRt&P<a3>Eoi{}(rHpcFGnWhU{^jl9=ugPI*hbe5c-bbdSrBYWMg@N
zG|wf{ehTi}1-AThhT|%3)!BNm;c(?5dg82XV80bIFBoQx(jmV+>FrokxY1(ACD8jY
ze~xjt)@gUj7@HIBe68cu7HTt_X9?TaNKFB7%Nmsu&QKvEO&-<SvJ@gn0pLCbmbQU5
z@vm5mTAE6>BSxnd@hk6rj$DXht{q<4i>~>z*~o9Z{SVM}Jy!ATGRc%aN33`wMz6t$
z&RfW`<mO4F*lUqFdFPj#M$KS3!R3ulm;qRzm>{kPnvJkcPNTJY@G+omKqRmG%)nmF
z06pLXR4M{D_(9;1)sGmqGOhO&_=&=$Qp;^FEIfjPS3a&LOnmGc<DqL|!+dqnlrA|#
zIfOqs0*sZ9#ZU;0GQ5ISFNAHNyfDLZn10OMxdHCtZ5wwNGsmHnxt41bATveh{y8TN
zW7XuaW&dImB&VrkJ0-4s6y-6hnta!vZK5!x-iA2LfQ9-+N@kA54N?P|@gHsxfP0A6
zmfp0@LEPK%gjwb(RGy=R5eE1_Cn7jFZYz@d1@b!1FjG$AqG>NH9=dH|BuHy@|6>3~
zqA>SaFA0WE_VHAKKaw<JEOlxS-0HHya-WQH+W)$B+j9`rT61Yr?OoEr%c#1L<Lq2V
z!H0c*Dc#vhUmr1>*LQGp{Su1@-QP{x0;;csaHvQw_-8l`Ecj0{j}h^&xa4^qu)r7$
znC@pIeg2@D_j`-u**{&0G4tRVW=6a?L*IR6)D|Rbp{F!<^^B$yHt`EmgR*0G?WUA?
zzu!@Z!!Xswu1gQkv9oU-!8|uM`r-gMsKtlqZ^H@rp2nEYd+-(AwFnQG$VB-DweBhX
zs}$U28ph6N$Ly7!@)Qh%OYVkzD@T;ehHPvFuq-X8K8Z#>JBMW@VDt!GlV%^59o3AF
z93J7ga_oeT#wYZ<=h<or{2q4YR@~0C$qwz7yyS@u@5%4{t!WwlrlpedwrC?18~D{)
z@#{JYre)_l>;CtRD-dDCmsCjPT{sK=9^N9btaHIg64lfo+oiFI7)G<KuF~I>I&9Mi
z4*@z5&ZEsTXsBrI;pxUAY!?Eh>hDh1{9LG<o`9T2Kl6FRPE`wOJ!LlJW651+uV0kF
z5xnUM_VZuS+zq(GI@ZTEVRU*k9D+9zX&T3`*m5yNM_?K--<ldny$;uM!oklyKGSF?
z)HEJ{Obc60-MiPmkywKhO0pQF{ggpMbGjlPJX3m{S(}nb73^@ltXjc{t--UQ5Y6AW
z5jIEO796qdua$++D!kc$$-oMGf&AJ<y3ycrIHr34KoPWj?^$f;w@5v9QHb)jl>j<h
z$9v8|LakG{ivX!=>Q${aC&SQ80pRB?jo>}jkyIy$a_ANB-|g39tBNi4Ab^=Fx52%T
zGQKkG>5PQsl-D)!>9A+i1BdC*Q?@Ku#qJo=*|H-%tCO>eU&Zk!)njR0tKWopyxF}{
zNm{m3Sod<<Oq6&@eXJv<j(_AsdVXjn@`a<(aXb(u8dM`g`766CJEPw^l>Nz#bEuwv
zA=X;TgI(rFuE=6PcQab#KLelpf$+gcuDrUF=7P&6d|mkxV0yZ_M6uku0o;qQw**%?
zqsmnLGa8E&E;J!C-`rZTCPX5-BJ>VbKf`p}N&~Vl`k(M0Q<I3sfba|Fz@>@RfEq~q
zI)i-`^6j|O<Cx?@j;KW2r_8}rd@<<S*e!QkILgkDeP1sywz78%BO_h|77eR<RkJZ!
zbl52yq!^+2B;)quyi-pM&M<%Z{FGZHOZ&kpX+chGY9nBy15#$2nVUO(#o>~R@Nuyc
zOrs&$H`BRH7p9tJoY0cX&#!kaQcUt*(W7V9G)8L!U*G;PMIWNe0CkR1tf$CMQqU1v
zxIi&dlWN++8ll}CWbc}Hfk!*?N#1<3h5F;m?6e=+D3Y3y^wyJ!OFM<=^^JHddspp7
z-o|RTIfcoBQMaLpt-~m^T?~(jjU&F@!P#n5R$7^xE28pm$`{th5h6VYK=T87KW>oT
z(M_^z6mYwA0K(kP6sen9U&9%1tm7&jf%;r~WxkWKd3o+-$08ysvLh04?D0qzq2{in
z?x8lq_27H-rlUnI;gn>ucE3T@V+pY2>3asVK67W`SKM$UdHlHqtMINy0SY>ekA(J7
zFD6)(zfmB+HbQ}kiETCEQ!Pp>OeM_!A^3pw)@I}pvHrxNM}P)}e2C;RZ8^h)dX{{S
z;rBhs_w6S8yKaIw#X;fOU<*nBYoGEDe+T6n-P?4tx7P-`EPSe}GHP_!MJp6tcX!;0
z8njV+JlAsg8Q**C#~J!dCOg9Xaj$RQxG|*tj{CIaxBPCiJJC1IcLnBOarSCnHwvNo
zM#@w>(5`Cdw7GpTpQ3kZrGkB7j85R$&2)rU1gY+hFFlXeop8JG)@u})!_a$-RPggq
zb(U_H)lqqmF3vm_n{!BNE$$FRtq(4XopRKBp1AbxDfcWlq0Ez&S{-{@{0V}0{%!^D
zWhNaUu;^uZYwM(v?Y(iq<7ENtHZ^Y`a&6PEF_S`5bkdo6pytxU1&)!zG(>OBkpFDu
zrws16j;zT2D6eFff#(9gnteU{&kIb9-#O7k1aurr?_s_3A~do6uNwB7?%+mM_@<}4
zzNM};K3C+W>KU2YytjzALcr)kpQ|qjnr0V(Rwt)3{;79>9r#eB`(g!}`r)QI!t3}0
zU0R<>0v$BYY9k}#WVGINm%cJ3&Q@iPGt6^!A$)*KIfY>aUK$M7@4XD?N{yl9Ym-+h
zkG1Tg3I2Yf%#S~h)E4srhab35qnlU_5&or(+27`i`EA-hN}Mo#s{8YavRCC5w?36r
zrn3spCx|QYNO@%l#wO?@j_GR<%R`Q}h2x`JR5f^2+HT6nL)8+tY$JP~N!^mo;&!H?
zv6JQpb{=o=(9(v1X5s~#tcR6X6x5u7$k$Kz*WXtz_7odIp4k>G4-Jlor>8zI=pCw}
z5gSSAsyxZL*O5@m8w*Qh!1XwJc&%k#!b2gxxzzccGFX1Yu+mp`2269?kl8SKaN23U
zLoARE<zOjF+;TR?zFbE3QEa!XPNi6TUP{=<);p6-h9MYE9MTYU!WrXA@5YNxk~b>1
zVFZ<`l_WOSII<QxA~_O#xEzZh>=v;v@RsjyT=;yrC+kQs)y3<xlivlo2>c!`F=2&#
zjb#pZ<m6HgJZIC3IS=OM;sobKAnQd4ZIt{XtP0yOk{603y^z2PC%o1chLY2Dk)ts3
zwf@)gS2QUX{BXPO%&VN#vk~8HlXI%t55il2r?>fgy~fLqe?PxGoVfeiBt!Xp*;1j?
zhp@z|7Ee&DEnl|1b{9rFT@8fc-I9Q7X=t?Y$*=J544`WGiM~W%YcDVTKe%;UP__PP
zBhQ*lT-VxB&3d&YoeE;j?iAkaAk1&ZEbv}q6W=t))(FgTEN%<EJ1Rf(IBoBf-(>Pw
z9JsK;aPj@&UY(0Ub$3p^7ad1Dr%@J~8qZ>|Ic@~<DV3Od5^fOX5Nj9V7N`Ds?(xLt
z;t&tUEU+5AmO_lv&b`95T}Lye;aq79T7t9yJhohOHK^v9_Rjl2$JM<h;=YXc*e*^$
zNhxAFjJ*&VFQ7*f9E%XHyzf-G;^Sy`MF(h3b2#{=y;yYQ*vv^Uf}9s@__3cTOKd{E
zIKRjA6)w1^AFbL8$L!?`rJ-tuVH3qooKTF}7{4UWE7RD2qhFeCi_Lo>H|LYSU<(3c
zDlkS~+L|s+BNzDXubIUFHQsio_88z*$(Wn;>GJSuh{ur5|49T%r}8l~XzR&XRA?2Y
z;lRYCBs}I|eS&UkEYLh<1Tx>n-#&$S=v~MIZEFK+)~3?KIp1yIF>NXeq(=roMY11I
z71y0uZa8xryvQl*r5MF2mm%u!>5Cm7zr^T87*vK;8|CY)BPK!Z?H&&ne`T-uTVw#_
z(eb{{?zopw3wayXHl3nJ-_i+*Tu|!0wwfrT*GkX2v0H%K@$uBHueTX9{0J6x6&jZd
z*eeGr5ighcZV8`fXNSrV(T{Nl`;4tB@~fv)vXWz=W&sa0Q!lKjmCvU7PC)~AF1rFG
z<93A6RX-D!rb7|qA7A8U9a_r-W<Or(T6D$Jq~`wqUfO2MWs$VF43<8V_0;~=)O^;q
zNvw(=FL7keO~&^?Vs{f@F)yY@iL_;FVCEcf;nTpH^w&%60Ce$>cVJ_rGQWAXKz@Kd
zcD0U@u@ztu$9&4kxgt`tT>_Lrr<6RKyhk5UwWkFFeZuSro7X;Ro_A)o7x!N`Us~Ub
zn(~vJAs?2I<<5JZcoc49)|1ltK<ftIu9kXB^QSO#L+W~)71OeUDpSt%(zfJkD3xRA
zod*&QgX6);p-yAljs7>Kr3)F21zK5amc70AR+_8{!-$)*vWs|t(QNJEQg7P6o+*55
zt~=9pd)Xpzd>CM<yNbCkv*TThGK4jckH^S=BHF;nXp_LiqDWHvEZOAf--`36GIiNJ
zHX}EVh}o!H{<OC@Uhel}fLVJ^`iemK>(v2zC0C+o_@`{dGdH#)olV*>UF-HF=GAGD
zK!X985#JbT05x5+TQf0H*xriJKFKJ%tR&KIZc!BKcF9C~O?xVoHI<dl-LcqzqJM!@
za<NOZZYgblpW7R6<c#sn&12laPHpvU5?-JQXxqc$Terv*Yn;o&X8LJeuE@a6u7I6E
zp*F<kl6|gi5Q!|LGF{clwN>O%gG&f);nPZuQy^t3te&p~Xxz)>9}@JdN1iWjKGZ8M
z_v%(beH(J^vk7)~wOiCemP7@`Tb?_2?j5R{0I9{K29TbSr@v6Sj(TA5ays#U6b$MG
zNY$kr22)*ZsDKHB*#+4%J<Yi$?)_uq^pMo82|S!LDdu^{$i`3!x3zx=vEODs>dl+x
z>Mb0;31JWq69@8poKSb$yXC906G;emHS7+L`IbtteotbR^Onn23m+Hs)vMz|-R9{|
zno2l!4`1!grBUT(-+)mzw9!97`FH`{cW@mzl);rWiE%O&CJx`ak~yi<-GU~Si@vRb
z>tBgwBkk{8-nCxqI4v~VCGVwi8DQ(o7}w_-W1&LlKpgThM#3tk-a<vCAInFd?hX^u
za;ryg*cy3JZ0-!3IF!135{7wVW0~ZcMxA1TDe3kFwNm1e_8|>b!e~@8^I^g+_%PU;
z-b=vHY-_VEY$_y~rOoVMDn_=}Q;@+llLk)y;h|P$)o^WRaf}#eIcW_GlQC1%U=cCB
z1oUl40gC3etQ{P_hYTi0aoQ{n=Z97ieaFJrk2)y4U0UL-n9JB$?NVa24T8eWs;K-}
zE;)~sKLVtlJ6d)%1{zFDNS3Hp_VM+d&QTz*lsywQp(N0$)!i8ZXccC*?w;MYpUSU*
zhoS-6!9K~yYran{ss##Je${S&0V(rzy6<L<d1sjEtCq_B9wL|6p+wn0bqHr-jEM>#
zxl_V_Zur3eM^V8!!Pe>g$}H_DP6r9DplMef+}@028;9qJ5UXi94m55^3p!dT#NCDP
z@O`LTtiOI_a3ODaP{=413e?uO0y|XDtme+H3i(9n^Rp+ExhzY4VAS}YthU9MoF}ox
zg4-r#w)ZJ#vN$&ljKm7ZCl@~m&W0)K1O|6k-sN^~CngT~I~=wM7hNi;W<03jRB1}1
z-cl}i4q7XzbE-q{1r&T^nre12D0}~WJ)!cG$?0Re5zD=o%Z82%q6zc!3H0p3u`naE
z^^X_|Y_fAe{=h6p0w~p6RcR>8b(i2d{~b%?pFpHyHU2aK)&cFx3&X27Ul*7KzPfPB
z<@#yb2!~<!YOXd_d52NbJK2@5meSeTN0(i9#%TguKqqV0dm>f`EfoNymr|X3)H6#E
zY66KLaqn%%VG3tK3cmLmrotK)iDA_SEJfE*qc<P>R@Iapiu$gnQLH7&8k&s472NLD
z9Q=63KTp|@-YyJ%N@~)yVl>_T(Lgh0oiYJtG%n>K<%-&fe@2iulN`1p4FdEZRymDQ
zz3ZHv4yFkh=Q*1oXmAP895DbVX`>3z@`8GvNZk5}&|geY;quo%FeEcnYz&}w)JMd@
z1K#%?QV8qcp5CS$`L+u1Hnad7^g_T{U)s@QGIg}Dy>ApKey6FC9C3+F-M!-oC#9vQ
zb2Gj}Ie6ErDFf^-LM8V7hBm7mt2@R22QN<#ox50wp1^r`u~G^6<MU~_8$a|c@fvFA
zod#GFS>Joq&P1?JPX1=Phg(jWgOc*9Axk<ObrsAKFD;$ZK3=`rD(O2E>VY440Dzv3
zjOs6K!XvJ2jwP<ssuchQ#`HAQY_n_Y>nlswejRr4B9lCx^CXWMpzBQL4d=na7MmZO
zw~EY!Yqrn8+puE_<8Tvc4S={+ZnZ~EWU#+Y9OKXv<OvJ=!kl&*sO>(HGEt>2Ts{u)
zOcD%%E;2m6n~SUGYcx0=4mE;+BggsS$B^@Asq+}03eM&ZkDGKV;wO;`8@UximW%06
zbkpje_mw2b-tuxVZbW>o5A`&@oE$*rH1NbT-@K_453ADhN~FO{_C6JN7xFWy4G5tw
zp+TQ*sPW$wU#?cAoP0!Y={diMH7bKFeWXT<v@+`%^8>8{s^tao%tJN)$($0inA2Kp
zo4xwy!>rp9+EP4mLICw<?=vH@f|Q<s?ofSylVouRZWnoH{K^~4QTVi%wX3Tt<v8?@
zgA7W;g*Jm*NHUHk%~O8*55dqslm{-R?t`coV&OS;p`nzXSyhA-y$LL7>3f?)a6#mW
zU4mDWmZqu!s1vt|B|_V9hzFHovM}|y=^fudL9KxK0HMi;vBE;t*L$C4odz1YxcWad
zGys}T1jgm&mYk%gZ*G#`JZ=E+Wyl`vxvj252j0PtJ0)bQM7Q!ljq^nPe90DetY&_>
z3X1Jfj<;b{<q}G$agUIyGAku`C$(v{PvrV0!#2;LgN4kJiRb7f(Q>|rXO)D<T2D5D
z-HjhGaE|abMRUahv={0O9MX%J&G8VL1)_KM*6qIt4*%hujk$Nx?3zbl2Q|dgbNBlb
zx*JBU$sX9uiKU*Jj1TWWe`i}pMy1$Q<x!nu;9!qMNE-7xlfUosj6Ht$fvP}`%7BzD
zUV_gtvfi$H#&0V(k_b&oFx1cBIR#lzAF3XP@lH-MNyj2H81>oX{dYG>z9r%5kx{9A
zXXyFFPZl=6<B71|T9T8m8Xyhc@=f{hVLh={#<M2dUu7@YUM1?nK#k0Lr?8yvw-BS`
zdYS9jF9OgYZeVpZcf#rRE*HjfaSiCvN2z4GU*CFX5on=-Cxw~&&TM^2bu+082sRH~
zl&2H@0`lqn_Vf`kIq4uVmyz&~8TbQBO^LnfyO5hLY8LKJT`*9Okfs!hP_7xJf=N{s
znuRr8b5&QuG1$wLUC8n-&B&sMEJ_LMkynkTQ^$6764_D;Jg>%`SY@nT;~CnYqwC2O
zbpja*MszeWg7a;K%;+9vN>o+mQJ0WhB<cGK;zD59{i{}OzWQK)$25e2Eqkbwlo_!n
zx9!n!>c|X4<_2B5u`nx@2f*R6*>BJ|jM*G|^HfGf?DAlg!6sSMM1e314I*Ev<D|B&
zwWZzCmN{BARuE9?&x-Zu!bYb5hnC}a(H`GB``*#V!Q`%}TH^b>7G#K}>&|Oa#+;}~
zX!0gTQre_DghjkrZgp5b@z#w(QO^kN{-Cml-`kqgV_p54Znt>08>iN5T3Y0V=5<$^
zSlgDyNaw-XsjRvy3C{HG8Roh`mSKH{PvxT+aIiCCm^OudS7-^zhK7_~9Yib-4i`j+
zHtOEIWXLuf$^NGoxg#csTzZW(`*fDiN_|#${R7w0C8=GbyE*$NDO~<hJ-LcWopZ+Q
zy}8Wf8I^J4s=$uE-NZkCQI|+E?nJD)FR0b-oW6xwN)sc30<K7@Zc;7qu&MIw3QVv)
zzGpXGCV;x`@w9}Ok58b)@8i`7UxX8Evji(3h#Z|yLx-jh?=0giwK>z`vY-X;?mPfV
zF3DWe@>}sO*-g}|mJJEbE)_!7BDDHgB2^2G)aJNMm5kQe2#k*D(bc?LlEc*o(TNwJ
zvMOb1X|(Ty+RvhVzj1zLUCK?gVljOcHW1idhE1IxO|2rpPNblFqZ-}&a$`%oLHksT
zW2~D;Q&M=^Vb6veKS?bQSxgpy^e_JR_Wb4#caREj+ui*>K~pH1Fy^3=GR&B@@#I*?
zQf-6Qw5rmW80wyirS!tt!si%K0T&3dR}9r?#~wRV2ik1-;Q)H@$ID1fgPxcK7hYd_
zwLw;7Z}oth*!so>_y}{TmMBN7h*F?_MOapdvcZ5}%u`$|^LMeQGmt7jf!-ny;>!<L
z^{iK@+Oj-Xg5F$^=jQX|8u(N(lf|IvO)>mE$BGfCYx(%(+RmFbpbLiqC2kRFdw)OV
zv#9p&^jjeomt6&w42>~c=_GPUdM@|Uxr4P1PZX9b3hI{<enZqmb5(32?a{<=$MAay
zA5y~P2ebn{YoWf4&Ma+W?IKn5i(IR$iE6xpdqZ#b&~o9Nkic=G9Wf^h?C-|eSZ+oR
z5-lkEF#DwG1<|!vWo+r<tF`U;xu9OD#*PVSxBI)UIlZp!(`L!y?y|h@shu|<-yv#W
zmeg?y1Yv7KtgLZzvX+dCno^s$riXg@P?A$PgyzAACiul~{?Y`|q-j|Q!`P_1MS3^<
z<BrM?lC*SmWXG5HGoIapNrYjx>Lg4@&p8=Kd{dvFMP<LMV{fB6*p`z?v&%iTqH$2!
zC9R_~P~g3FRo1kdBgWd$sO>$3%aWz>LyK?Ju6yc!GGsWCNwRFjP1FNypB8=t^aCd!
zyJe?x;1oIfy=N@2SD{SFGS;0u#+W0<>&_6qI3?>ASxhD*c$c#db3hES2GY@in!Uo=
zS?SZm*^zd3FK5F^g!7CruCAra&fw8U#O}&747i~qfJfkzE>{@}rNyN!G2rtRiIsNN
zRl7QO3l?nD#a3p=0&~D;aq;F{+n;fi0Xgd{F9w5;^0pVB4^bRA1|aYai@?kKA8UsS
zg?x`Xx7FToFU_(>q8fhf2L4~CWiSKPLibWxIidzM{B}XyE7K4m&gjD~Zk4kEmz>LN
zx|=4$Yn@`Zd+!TpRhh8HYoWdqwKebYa5zTfIrA}=prBFgqvLT&VO5XX=N8Q%>oA7e
z+>-~iE&CpBq5o9XbzhiirNB31i#;cqEalee<-Yj#wV*73&PY+w(Re|eY2Yb?v*lsc
zy=G*uXKt?kKAjzgv>q~U8JI6j&9iITf)M=Ts73YmfQSVPPHRm(G%)B2yr4qGl@b5X
z4+C;=)Gj8rl-Wo;;x&r(*)XQl&&keq51WWvUtj-jczNC3<a(3xxG_@^O}>YxXWQ4W
z<?_a`55*|Z!ONHXHzvTO%nh!y=c~+xf8o>oTQ6T^p>5Ihr*@73yegO=J=rNlk*EDN
zaQc&SZ6MHtR4mr-ddH_s58)FZPieldF@Lp7T<Xh+!<d3G$3GqXU9alOf-tJ0`hbJ9
z1<Yt7z@jFd@7V(mH#|=R#0meX+E`>c;mrsUQsiJ~?<Z<X72c3rD;F*0JK;&F^a`3t
jJUx4eJFjk@W&41&ckWWr?!Lhh;OBv|=H0?O=Fk5hl}@R8

literal 129700
zcmeFZcQ{<%+CPjCG9o01B%-AWf+V8X5R!<_7`;R<gXoM=5+#Wmg6K7RXGZTq5G^vw
zjNaSmLm0zv`<`>2bDk65f8Rfz>vdgYwzbz<d+oLEb+^xF`JkfooC<UUL_|bH_436t
zH6kK1cOs&5HWcT9lB2jyAtEABu9b|8%1ap;RuxBkb1PdjBBB=`qGQQ5qDHUyZk%KX
z`Nz<R_}}=*nna`~O)cw5A06ROBOk(%I`XNFUXPOVmev6HG8q@E&C_S4B@`p8Zy$iV
zYP3qyw!NolT=$dqCp?^b6Y*w`-OSf}B!zd*Nomf%ZyPP)Boe+AcSq!VZ1R`S3LW*N
z4_S$cG<<o2xaiAo-ENIgHnJwvdR0-TZsB5j+zWh8jvGJT2<M$AA(Fk7*dFERL?aQf
zL<4#7iP#tYZbWh0bmonn>=(|bpl832g(&ZNSSAkMyGC`->vaZ!CX2+E{f*ESVxl`D
zud^2&$zI%yq;7G&m8{}la?Q9nF_BEnKb+0h?>DQ!Pj@eKwBZcJ@l`&>%TcYD@4Ih5
zpnbc~Am28c*mkn$a%A7x8KXRJ#46tvLHay=QD%K@zkn<aboFab*q7IA_GMXbdLzg?
z6dyrWV#V5iu3g)s+YvfW`zSP8-kK$(e=TS8a@R<y`j6Q2-xNwspH|$mulW|v-*&Up
znQFU0C_wyOpXRr|zW0h>X7r4YY-OR^kJ1Juyg{|km<xp{4e91YlLS@XPz(QTOw|9b
zxfX5q?L61IAD_OY;kWoO4n>V$?X!4t1^hRTqqfI}vOI5GGh0$pm@-RVIhoMG%)Yk@
z*9)q>35rXM_|9=&n&y&_FV`$@WGKT%rBt2PEjrWhOAj(ze>)@J+lanfH(Hz`X>xB=
zlDM>CNeibKC{o4@vFfk6c-h*n;VZaD&il?P6SEE}V6N3hm_PSU%MZ}2zT@^&VBpm?
zsb|MzIZ}+*h-i(7ZGF!<5HmNClls!o5WjwU<qLTg>$y3i3*XPZYUWfSm2Z+Oq1W&o
zH)0VY4SP$QN}Nc>&`j@e&iSqA)a4~&!W8|r^DIsGNuLV6zo^Oz{Z8}vT>%^U`wJdV
ziB+!AQQdu-8$opCsiP%F#SKnB`81FvuLc!UP_Gn2nvDv>F40QB`LxP@hHGR|Mw|uI
z39Wp__kO&UnbvaWdEm>?a^S#L$IKIyKXuzd-0N}!@uVMY3bIK7O8u<z<n!gO^KH)#
z(r&4A<~V;QMcf33aLRzwtW_0r1b%UAP+L>ru7}F1_d8cmq0cdegvmG!P!4nttoG9{
z$t-y~a~)o-VGs{F4r4RfeK>T@?IL5;`^!e#4`shR{z3f1>WA46CI!ibb611E8ei9f
z*gh1vknlnOt$xt>hr(6?liCva$mN@tvO~+;J!Wn>+)TU(@yCRTzOD6LZO6?@Oh<19
zx|4gcN?hk{VVLUP4BA@U8vo7kTlFnxbI6p^d)7^g;0uft_zQ~u3I5(K_f<o`vwB`J
z`4IOF{LS$-_txXBM_Wmek&&g532L7sRjj_MRsVeSHDA77KIP@g9j-_gj(|Jth3rgs
z_@kI3CO&nVI+ali$33`R%npg-{ge_Z$)Wxk8a>)2Hc#Ib-G%EK?<xjUaGG;Ii1y$-
z;56f82ixUc%)O$~114w)=XHa*z<oIr>P)H`IivZqIrBM%>Y@d%icl%0Y`Y@n)LwO7
zjmd29m-XRq)4!-3-Ph}~?(*(3lb57_Wu`LvOTqdA?mpt3NI_cBbmrya(ia(Ovx#!l
zRI+^8rB<UAR28%pwH3Vahw%>-8y0kWbb9Q1!gXqNBy_wAUl)oLis~3vETf6h+USG|
z#)_1sRF?whbmwhn*JZt->p#D)crH1*1iL6NN&I?;E7(oP#Vlb5ZH5^K1pBFfGOXGU
zH)cwjO7U$z`u=3(wZnu_f5hu0v-?lRUb{DM-qnBCn{F}Ky<E6!d|N!j=yvshLB^#F
zRg=IsiEsSgByG{sre7GmGj1CEGPtuOH_fVQS#9vfV30W}UzT>@s6e?udHBM`9nu~C
z1*(N}7rD<TeCo?F7DKY?y6Zlu$SJFWen6P&m}{?BtW~@%Oe}m{z*%Ug(>la6B)yt6
zq|f(|Z_NC?xkgWwg-n_8=p6dj$S(S)ZL2M%Eu*br-;<;`F{i;F$hb*tBDM^>hY>G>
zR8p7nme`m1tQyTXx#T!kVPCjjbk>_5S^C}HiT<!r(Y@Tj*CssX5$Y7YBgg<@`0%Q*
zJ2gMoCU5o9Fie4yFS0t!14T8vu!?NK7GNyg7~JCU7xpE^ZN<vOF2OGTc>QCh4=tJB
zH#ibCTRmLf5xgF~g6PQaz<f`b)t@K)==c`2=+v}G)*Tt$DbnJJwOQoa635~P`o`_!
z49g|EB)>O~G~SjHXXQz~HD#6hCY811o`cYLVat~)P7m)1J#kmx6h}%VbQhUZ2UP_=
zptPd88_@2r=`TT94vO;U4``icn@(tD=@UrcjvuEXzBO_=;db(~$F~^dj;{oSehkSA
z@nnXw)IX`=4!puAx!~|4NNaM0sx*A&!OYwn?k&zOjxE#{3+)lDJgw&yi+en;>ON&g
z-BGYsXusRR&hmmej`pF&YT_~7;^*|wwNBTa7<%djlr0SQ>YR4K3r-6u3T>J9GMSYK
zT_2`2-pKtNu@e0mSnWLq9fOFmOkAB{os2T<^7*tLXAm#Jx=Cky^`g1E#b>jN7YP3J
zErM~)akYGs=CY<tKW=m@eJ|>6Ud&ubyqp_c_N<Wd;?)N_{dbX989u<S*6@ziIA~qr
z6lM*`bov_lnDg;9L^t=G<ad};y(5>C<b2y=l3phAMMVz06g7hgHk>10IH@D8_pi+~
z%N_U$eg%syjlt?);#St3C~Gm5o&I<n{gjKk@K#Zm4$j6;|EX0o9(5r<0feK3T-_tk
z?8+#9a{QFJG;t%Gzt-p3$^D~Jlfqdv)~1nR=VNi~Nc87uFZ~XEHv&68rOW4rZc0Og
z$-C}Aea2EoS;h^!?Fr``jlw6574}ZQ7Y@01x!ZIn?2{UCI&tcw>(Fn|ZK(LX@q8#o
zvC@9*7;!6OM(L})+4!Y;CL1@eu};ireYXV!YeyKrTidvHdA+(((9#|r?ExN@SZf%A
z_w9FV*yH04oN&ZR=kAg>Fwrrs3Dd!I5NJfrVadca6~9Aho%!aAu1~!g$IlsUpw|0C
z11s`jekR){yy4l*jj&t0&$?eObfVSGvt1Lj5_yV(Rv3n<1x=sqKDo#5nsh;U@aNos
z^C1Jq@KQ3rh^~jy>{#H=x1E5+4xTx~YgShUsrBjf)@<S?x0lprzG4bh3z=eNcn#~X
zxX-IG=3`sHefbu})rO)@Ngnmnf!(2pu8VtvjUp$WHLYJWj<Z&K+LbDMvx>C!7i;Tl
zc_+3TUFHSwd!eG`8_wgQwXhR|uKHwr9sV438B3kV7revnKv&0?jy7eDl+WTQm<}#s
z-rhx=M|{zf0K=rTiNSt#U}3o0-Th)hKwoEHx52fB9A<}WLZa7%Mh+Z%yN@9=kPI1F
zpBzHzETU~y-RJOVR3cGm>_l$cd<|RUhTgc;;O05`_=@oMu1s&xKzLh9g(TDAkE5}@
zyVKpl19in!#q*O78u{VWgk$#y7PbmMJ~`ZzBc@At@Dw4krzVk7BJutC;Rm(Ty~X7V
ze)lGc?@=7FCnr|3lg8;;!-?KYe@0zwy6~*$vZkD~*Ts)G;*yLE>1^}K55jQ0lJAVK
z3hm@?@ZmJwW|=ps;}WM&)b=GI51COHj+_V#FZV%@vRnM!0N?eanbu2lMMWY`;F^Mn
zl=ub_8E{1md?bh&|L0nc_&(9OzsgC7h=Qz$NdH+!3HUz!i2y#QZT|6nE;5ja9Qf-B
z@NrKi`B!Z+_tbO$x;|$E+#`CbF7xsw@U3p*Xl7>TWNGi5y}6VO6kKq4q3uLOboK7(
zhxn!1olPPll3XhdEoUu71rZZ_D37tJ{cAHGcc{Z@KSW~gBETio%-NXL9cpXmB;qc9
z>#rIj!1ZY{?=9B9syN$--_lZ4VU@9WG-DOudC2qdmIR2El~v5q)LcaEncP2{1AmF%
zvUGNK5aH!@b93Wy<KwY+wBUUtEG*3X@G<Y>$J{^-ZYK{rXJdD6JEz<K=;UAhJTr4L
zakO%9wz9WlJ?+={wY`h8_^n%~5Bi^<e~i=F%KYC?vUB?9YXL9FdwPfW5zj;3vznQ?
zTm4P5(>woY_Sbv;<8flAor!3xnK{|px||M6;?a{QVt+m2f0h1wfd6Qrb!LnIEdB2m
z|84-bvvQVr{LhE{SMh(eIvuZwij}*Wt@bl3C?Eu<qkH`Dv49xwnYaGCDcH%(QN|t$
zv~-sEw;27i@qga@?}mRpQ|sT)<a_)C8128G`5(9b*;I`8bTR*9asMGXf0Y8FBLNcQ
z{U0%u08P%xVu*;Oh+aN>s^Lz&HcsxW=N5Nz^1PnGt%GA-T*<b>Dr~SjOXb|1SJERY
zdq>9S8Ylgl%0|EPuKg5VGd7-99-X5mmZpl3{+P7lEczj8<jsa+S;0j23Era}a-*9w
z<MpfC^&6e0=IdkI^~G_ePf|Q~$37n&waA-D6Zu_ckBE$XU0q$RX=o@p6Bc?-nuwT`
zM(Th6dVe7^D4*ove;5Bxtw?27{)50D?=SyP$$wS7Bh}Qs`oH`9chwha#3U1U;4{|*
zNGMo+iT?ZrG`9Ia*Vu2@FHDr5|E{fcY=bfs3eBRVCAqCCRgC@oneLUMBJP!8xaw*p
z61mO1%yqN-_Mh{T@gmibxL7)WcUObDm`)1E@Bj0#CiCl8VHYPSO17c<o&%wQGN@Hi
zF0Ss!e0&54JYF^snXwOn!|M?h6(Q$E!Y=>0(o(6^B=Ae_^g?E)nc6Zk?}C)zRBp2!
zSzU4gMx&#nY~QRYi8XDGTF2yAImmWvdV6|syxi6{Hkd}DWt;E$`|-%=<m7eCAWVs&
z$Kotel9D2UgWNM5Dr;)cHy9boALKYx6&3Zy$Hy0>rm~X0&Segya&NUI@?)d>-q~5Y
zuwd>3?FcH}s-$H~p12KiLDbjPiBX5*CRY29SH{`9+5VguiaX&_DI^oSyHASISe`L3
zV*1+$T5d^6$)b7bVN_tA{20O}7Bw{F?haO0pIzk_P-{yN<7JV%!J7)w2WQx*y$Was
z86%hw7X7hos_tXM)>FUVI5M6wSw?ddcW!QSnyTewM&#~j=;_&Rz$WontUatY$+0Up
z=Ehqi`*9i_o(d$wb2UIS=^^KsJ>@>%<HykXuIFn`Dfr<%MUE$$(dp8!3%mWL$}TJ+
z@{?<=yC053P59(FLtaINgk03&zbNn!BlG75h}2-6_7wy~h_poUO>}kX?PPIS7-2I=
zvaCFYdxr=zZTm{dN+-BTR~Nm=F@}Pd(^0!M?tbO{q9guIxs>P?!F_hok<o9CrvK$R
z+}-b6BG+~3w&jTJ9djPa|Dgh;i2P<bA{?6XjgUJj0r~dpf{i#PQNpgQCRp3dzTqHC
ze1EK5Q%!9qx<=$pJc(iP0?H-f*tx#<_-Ij5TUPeqQODPLy4QC_ti<5j5(C)eoO$QE
zy!V>5Ah7x4(2IVv2Q_P}FjLd_j&x@!f$<B#M7u`UHsA{FEBX4gY@^x6;G2HrYp)EC
z>zG6|(Blo~%^LD<qk5mBB0+Abp{MkrpqD|IOo;+j{_JBf!>A&D1I5{n@XAV{3nU!x
zs*A9WW>Kb_lI_O7J)%BiaZe|FNjh~h*V5WLUf+GXZGv(aF+4Qd2;bw=1cS{+<E#Wc
zY{Rs3hNxs45Bu2l1p@@AVBIUyOS$BDiQItJxy~qTjILej!OkL#wZ^RbD!#|w+ay5%
zYE7+#Z<ue^m!VGtrAlu4QTwkf3=;fxgQ!{dO59e53Xz^TYfPh0O8qR;M#%<zqZVn>
z!K2&YRSnt6ODPR2Pfwru@^QJD>8>s#4~c3{$`901Yg^=-Gn8kBV(KKZy^>Ox;uj$f
z|47{4557M4D&52sE6GN9wSI|%GzFi`?Qt6CmB<-!7feA~Y1_n@zSX{1_29Z5qV?S5
zvu1FvC~VIb->K~VdNCQcr<y<RwbSD|s3<s!M%dIxLg*V*=L_CyCjI6F_0c7-Tp5Sh
zka7?9_fMgk@<@laK~`YD{FmL9Oi=ak)kovKy}f%_OZ}cf+3<X62<B*{L&Dr5@y(&C
z3DnLGk)7<xnfQ5qp}%*gTBREQrBJ(kXb+3A5u7}dz@vwcTMc~R_2cfdq0GPKPz}$a
z{-U?#q>A(7_$&g3cO7f@CnlY?D=zQ+aAf^ch?+iJUUF;7zcPN<FR3YR%6Q}TQ%gC|
zyq+%+CbHMlT%;{i`m?fX4LTVqJv-*IMl-eBkgv@@B}v@vlOS{t%Y4r#^Gu=JJf4+2
z&Iqc7?X8vD``|GXdDDX_#}$ex5-5qofpBz?#4a1P7H{LxHcdhDv|qloA^3+}S^=ju
zm^&dh)&hfs?v&uBn$NjTcr3zv>r6T>Q5OV%{I~|Shb06d!o~N#^dt!ODM=idVyfO`
zESFyAGaq3&-Xzb@%`MF@Za^>mh@17>Ebo)B;jQ0|4EhF&M@$B>c>h{&z{k37wZ)FW
zCU%k?;GZUks=RUehC$X71mijjbTq_Z8E<Lxs&v0$zkY8iBOG0%Un}-tUH|>vNJXjX
z_1$GY=`Y2+>_ar`_b{~I-TyS?e#Wf*8@`a{^@W}U=+Defwj(_wVc}{`H3OTC!>%Z#
zrS&KB1OrswyNhfV))ZbA%3bBudd?q{9^dPh@S5)2Ysq?ypXY<ozE)92znN`6C_^9+
zd%J_m7_Q>F*SvL`Z@INfnl9ZGno3)NG;Gu3zdx6_l4rvQAFZi5k1sws<i)R9NHXS`
zPg+d=ZWpv|@gH$*DQR)lgnjW`Ev!V7OS<P1aK-zWC}jyNK#KBC_25NgJ3oCF6e^4L
z;3F5$jw>kYo+1cbAIH3R+$wqW4uZ-0+7_?+ITmu*uwJ*LG}*`*U<k*7Yj=825H70*
z<u=9jL)$w}iXEv^`yG<UDGyIvsN*M3j`y`)Tnbqhsl7J|G?pildpjv7Vk3bu3<|g9
zr3|$cQY82^k{fxw*fynqUzxJUg6D6qNC{s%Q>AjAPAXgmQsgzlrA)s);m`_`kzEx>
zdia2=G~7g&f((R>8jm_;1)zG!anA`;{5U1PkgbAy399yr6x=c4wF85qE3EdW-cfrt
z<wfkfHR6-VO^5aOHSyU#hn6{O&@x`{Et?6s>6DX$6f6>Bx8ov-%T*4bO$en-+kE9Z
z3EvNp+JA?9-R8Kl%!n{i+01%5UBT&qQhQp-Z&*pcZhaF_NafwUjV-O?KYyy>!%u#P
ztDr;&_kB8;+(u}X#om}ET`eZnBrD-D=?J3|f9GQZ?2E~|=f!(pX@2wi90Vsh|9rU@
zQ>n+$vhr@P@dV$vHxtZzDWRd|2K(R?#S%iyWu;;h?P2fEEy2QxVA&p)`XylMu-Bsb
zUryv-f6Bd+YCLB!U0^`a5c)839eMPY68rNNFE#Ok7p5Kt$ypmWRTgXbIZ<s|AYQ*!
z(nAql+tb6nXIe$*D&oYWR_a|lCX=lBKK{gho>9Q4-LTo}r>#01pKux0XD(T}V?)cX
zwChT>(t$tTZ=96a`k?H;>FSj;(^Im&4N7=y_A$sDl#U8}imLUj%gq(uttRMDWcVx=
z(#7!TuNY&0#PPw<^^!3$G1lQ?+h6MO;~SR>ujj1|Hy($6%?fm-V>?0}iagbkk;x!O
zP%`lB`f7t);w5c{9&kN)@FdjYaCez`Zv}Y|w+dzjrsbEz45Ct7TRRTEUpq;KszU*;
zSq3z3raJp&8sc8SN1g2Kc?_D)u_NZL|JqCb(hgHe?<4=sng<k6Y2@$K=kS!cv*wUy
zDZj~=#DFY8lCT_ZyPrJnx-Pt^`}AoVw_ervdy2`gR}H)edaoteF_x)A*S}n}v6M%!
zhldmuNhFpOq>Vn7>5oqM6x08O{sAW`eqz625lZ>%9Avs6&%vTEd7ilF5R3FrZV-7C
zcerWIg!=_f%?f_20angSlJWG+65s8YVJm@ugQXbw5O5Ng$dYvA(kvDq^4azZ*p4{N
z%~@!tp`@Q`@gN&li)wrKOU=5?sb3+e3R5nJDbu&79Q?2lOFVAl^}c*aNS@tCVFcsT
zqsnFXGiVXA`=W*&L1kOUSdQ$(t2!zQ6}VNyRb+O43}i{%qWA4ogfXVlzBDot(1{&^
zEofz9V^xY03(Q1)Eq1E8D0Wp$V%?25b<q=xjvd1VGTN2F)~iLmILZc6g4c&<E}yZ3
ziAlrguc<WU_wYY?GLo`Ecvq-%@Lus^;f=@A?k-hFC6(8I$Kqd$>Xm0N<cO!Z$S3pj
z3t$?y&tnWn-G7<rkE^ogswhmaYg=$r6|!l1r062#h45?T(DkuV<`vE=Fs~lCX@%6P
zrkFN$esK|B7tGr*!sSJO+;Dtovsc{*pWvxkYH=W`F!Vqa>=g=t^4i5W>UO-u$r6*;
z1Db9Ou8-HkeO6=(@(jqnL-bvu$p=<y^B>v#+y=GsbNohSf=swsBxU`|lxDJ+o9yeh
z<c?agl?d^GWqy8CgE(1_Cv%o!0<-iSN1CKV%!ckxO~OK-;oK@jV{J#}c+`UH=+2vg
zYZb|1@U@XQ$L_AKVPG)${2-i-V%;wPhq8uLFJRIv-KjDUUk-T_R%`3yA${Dme@1wK
z6aN8pQD`dEHFHxrHaY7DO~XW;^V=l1JRN}wbjlD@S!8@xvgTF?UEp%29e#g<+IT&&
zf87YF?>cJ6Y?l`aiBbx2?GxYkr;Q?*P*`ST0OPEipOZrYz1fSKQuEtTR~9$h@LI%R
zqf(Acm#%xs<Qye2wTw997X%wo%$s?NZ}U7mLaxu!SAnb$C-*}_Nrd$CAMa-+*p)f;
z3U|PktS2JxS_DqH*;^WxqTh{2oWs;k;CQG*P`9L;ix$RxP6*hvVq~EUy@HJz?*y>3
zl=n)*;Xf+#_vi*PjkH&Jbt*;xbsbvL%cfiRyMRWk@kX8lH9A>EvEH<^ti*koqhM%w
z&)I{3gV=7*Mb%x=#*&!cWZ7JCRaeg_)ZTf$#4EO%(~-XAFfK_vx+3heI}k*uuGvFZ
z23r3<Sw^nZ_`r<0&k#|+PdpE&d<DgKQ|k$l90G2y!}tUCC{&5Ai!j`*9yhNkta^j~
z@*sgF<`w0B3R=hNq~6n~r2(YVc#JE?3(yZKeR<d{GyIO68qIR@`#FB7vcXJbboA8G
z!2_;6%iF2yh9B|#Hfxy4W2E@;?^&eHFb{RVW`Wjpc<%O|g(N;M#X*tq#s`-_>Hl#e
z*oy@ej3SXHIJuAr1at#_)E15AbRt^z{=;Ly=D)6-^se3S1G}u}fx|JU#sV``s9XQm
zy(27%`5D*4Ay>^JJu7OlO<%&k&q*bLFnLmM@3b*dZ}0}c*-DL}_W6CA<y~G_258Ft
z4z{+sy0dlc11&oqsjCw&^F@E%uk@`h_n?Ow%lQ3WFxUBjuHdWO7uX|hN?L=u>sADH
z*sV`eu{qQw$l`~QRt{uyToCYf!{LgK&vA|C`gylvTdFf61*1C`GUpZ<0;>@F9OB|V
z`NB5VB53Y8vn+I@Av_+wH1;9us08=ICAUaMeq~2&lPba9+6r-)MY9)J;ihcaz1ciz
zUycn5w_{5kBB`!UgUbkA)`3L5eIAfwZJa8v#a-+RA<ljKI3Ol8G&CkEYL;M!*Z}av
z{*S5cvET$!?rho$t8tm2O96SaoYZQFf)>QfsCynZBv3)ntAzM?FATZ?c^RSGe+|+2
z_ALo@h>I>>-G-E`sm9U=?fPW-k^V0e!J4J2ilQQyP9UPkrF#t23?Pu%4OKgfDeKUy
zD=XH}!7M?7F?MIniI;*s0yY7}{9a?8tV8W-6Z;uvfEIdOyaz6xnD6GT2xSy>w=7W6
zCU}@-m0B9+&FI(c-kcn64_$4o5@yrd)%#}HtyFxyKI`ztuP&Y9=!vX`H5rqBo0o<U
z9-bA>hbZ{@bGgqx?sEMwKM1n5Rf;E=L#-&zwXT&!q$^NA5uXhmx4)3K9->k&3bTzt
z_?x*h6;&pso!A+&lNr_I<Y};r4thHqKDBznQKvzaZ>_KBsb^etFTh0SdA$dJTXFtF
zg>WpUvY1es6I93??76to{CiUgukL#qC#Dobt&_7X;f=KWjh13t#-+$y7ncu1!IR2k
zD-9`KU7!?xvn~$6l?}(&ZOyX#f1G{99GT*|qEY;Vn_HZQWJ651bmq#&R*g47WU>J*
zY?)YY-a~~~*m1oo;*A><KRKer1~4R35pOC{2X=%e+>pl2&=@R?R9NBG8CV=U!b33x
z+Wwth|1%O}zEXx{hcuf=1mvBZsE4UZfcQ<G4+^x~Kd~viUrdL4IMi~BzXnJRa=~Xc
zHHq>;lM`9@DX@0JWEpu#to4oWCi+n2oeIU!`ki0;QjFZg<Fn&E;X{LnmJx1UfdKgl
z>Ed4~k-Q-dvfcG@QSo0xP=uKZW1wP!fP13>kR8eF8js^!{Jjl0h`26;YE1|vVDpG7
zzu<wSquzDq8?n*Rf%sfwpSCpXns56l--X~78FM~)Ezuut;*KuvWkOe6uAZ2+8g0D8
zp0(_EVx?NRZ#Zj-u*Dr8>2XsY@&&lo?=|0@wH^JehnJ*YL$>#q3&zuZ%*DM`YH$^6
zDYcZmy)0s#MiVevSjhdHY!1Yj(Lo22o6fjsT7ctc5^ZeD_vAP1cDY1X3o3`p9Q9#z
zb857~<J*isUSibk7tm<5Npe)tUdFuDK!5bboj-jizfZUOvwb1P#`5yI_>`Uf*y)ON
z1q=jbs`v&~QyTTr%-^^2Yh!|$IBB4s)W+q2ycOe{0W0qw-6zAMi==hQ>OLrt)_u5N
zdht&a7%@fyw?4X_Kc}!2^-(rDjUarKL?4QsF5-0C+1WYzrte=%7%)wmzLUD5k5d`?
zu#zsnc&wReBd(vGs<}~JQ&ThTTopogmU?<m76!eE>Gq{-$;!_5*nl9c-%F}$@#Zt*
zN?JI{j6|Nsd)5l@^RwWD+-P3N5eJk4YDU5tJeEflIB{E5G_>JnRKwBx3HC!rS#UFf
zDi~j87$f^<K8ofAv!4Wcoye1bI#AiqLB6_efw8sW%&R4!A~c%94Nvx6zEx9-t+;_`
zfZ>|zi~M~B!+QZOH96K0wnu0C1W9Cv^qbbV^X_DRm9|h?zunK4y8j-{f6;lx=Al?W
zp;Y3}Y4nxarq~soQcRXH&7`=PL^QqDKU!|_r&%<5Lb1Di$0mc=-{jdDuX385j+FKF
z71U1VX#a55)&t6%udq&GNn7;)?ESAES+z+i+@t2>UMK#UjQFcZDRv<7t;9NZ)?EHy
z8Ng3<^-f?CI)O>pm1Vtq_bYF3`Gd2T?FuM!ac=I;bjkI{BoudUH8BYN%|59k0i09*
zPEk*}Fd~w1P|jOHLBUE)hsRl~$a+Aw)E9Bo$M*b;H1TP=EJMTB*X^^!*3G}c9_};}
z5!-J|2Hhk+W6Z!JhMZy-s)yg4M$TU2h$9lxy3UiEj-+Sbe<)8z;r@J?w$J#C3_s9B
zYMYW~^WKTm_seG__kjCN_vu-un7%5D1%;k1q@BD{O$q<EC*Z}#>Kgzk(b3gS_?nfa
zB`^PgWeBdw!NGC-MOznd5?|b5vg$n7iB?+V;76FiwlKe3<7loal6VqU#nbmmi%$l2
ze>fHVxjs^pq=$5yoX(s)%q9m1WSZLA#$a%CgW&kE2@oB{Bqf;uk@@u2h)KMmipmlj
zxS~$;hNx@e*X-=dAg!LB9!&%9k;;sN+4j(V7x`DO6v8h%;;<jgmgnd#q0rJFKWr0(
z-lQ{0c#QzQlskcaW3co48F{x^&eN>Bb<3bqg5AyncS&HNC$*!Y_kk=B$`<#;^LGHy
z$=ZCZVVTvS`N(IE?2#3e^6#d>pFeH4X3C|FqOFw0N`J<xgJ-O=6?aO61O@xfJs@i-
zuG@|z*M1fApgb|LuEaY5NMH^cxKC@_SXo`#&z%!5Dn2hDF-PK=63QYu5X0Npe^23y
zB@oNyKqu-3b|qe)3GJkoOSKRelVkx&%TXjW;nZb>c1D(;rVE)j<ru*TyCXXA29R`f
zRo8gZE-!z{J$jw1xS+JI&P(*v4f-0JTn@OJhTt7KTL4b5E?xpRC4BnyCiA19_v)CO
z(cFdmQ%R5KO@Y*SapQUh^6u@87s9vB(7t}nG%xN?fmQO67p`Alp72a7EJOie#46z_
zy%fjicrlNUNp2G#`@_;$HGT{H9;ul4_91GmKkW*&3%g>xDLM7}#+xx5&P7v4$NE)l
zGE>Xc6->2L0t$uNVqX!@+nRcDxgWoV8#bg28nk9l@#=aZ{2=Vy8J2fS=z?=1t{{lX
zIZ=!osq%a(VVQ5Y>TqKnQ`rIAks~;QaiZQwq(JUxJNS544^=g;sH04HZs@su&|hS%
zNa51cD{N7nyA5G`OiPmSlyxZV+4CEsR%sLV3V(|0sX@9M0pud+b#-*=B3*$X^5~9D
zcTCbEHzQqL-bV<#K9GJ6j*gB#ga@dt6eq+&rs(VL-X*WMFK(ImT_ON_hoA<ZXP~1S
zEi+p@Z1@G!h~f+ab_x}V=j76}0F(9*T%Jc#stR~(Ya?o4s_D_KGnDF`dl3$fc`B~0
zfy2;&^tNeI6$V`slXuvWQq;TbtSmWdU)<t+VIg$7RF2vvI5=3weq7#AS@t~u&Fow2
z1vII;q@#tMHSXtKscKiAaqSge#3T3C$Dsf=a&Jn0?Z7nm4nsc!2jD{^11K2|816bP
z_EJNYUbE{C;y<PecBU8whX1JvFP2HkdwUzV_?#573W$rh0)VKvKls|$CJugn?u+?7
zTu$Jgd=F2B9h5nc_H=0|p8wVUG~CU<?uODw$Rq27mB#!JM%~wcPu{2Lhe@;F`vsHU
zV1Wy#^Qs<-EQ?1aB-r3^IJkcF{GS^b@FSk3Diarnae!Wvb2)?tXtA}eJfYh27J(+$
zQe3q0Tf(tWl}T<0l1#h^xA{|;jpjgi#?sktEh+cY6=F~>ZkSa&ZwSVSndG*j@9@bB
zn4B>4pRJ~TQ{3^2M9h}MkRSh?j(^yaenY@^9e0&7pKaP$AASRDm&_4q3GC1Q|1!3z
zjX(uLw2AoN+&6j;7`LF`7mW7LlvcpH`2ZF0TpgZ&bH9lOuzr`eXq(p0npeO*_d5n<
z?whqCk;uI^bu~4#y%Vqv&l~#gW2O?yWd9tNQRam^fJ(PiOHGK5HUj|dm`|UKb8~Yg
z>@)ow#3(M36W1^5=;##W=60^Et`g7+h9#SAT@LQv*UtSpNe}f%J*nL3pO~4O>lhoS
z0eWB8$*J5ButP!Jj~-qkl}nY9|9$0d+awI2S1@mCYHA+xqjqj@E-yr!5m|VHcCT%6
zj)AK(9V$yp2lDds6`Og8)g=+yRDKc^PXsFu@JgudyhIj3yTs_&SePvDMze%e+5I!d
z^_HwgyfeOKJTdVm7bj;K8m&Ve{UqGTinQ^DP=)c`)ctrK&&g$REeOP-t*vc>^X^cQ
zu@+Tq^I0y&ML(%nK&RhDn7nV%N0_mWFuk=1(!b^KOlm_CHw(42+>8JqXe!1(=Nb@^
zf^J_34;dNRgbgI^$}~?g9ciF})P@XM-66?6Uf#*#Aa9M3v)neL`(!m2-NE(wwD}wg
zx5k*dvV-8a9V&b$!hvm;#%`}EbU`=Peli0xb(ZWly}v4Sk4?=bwMAdQ5@0$ky<40*
zjce+8>37Y|%~jeGLX=re<o<l{dDW>ez7S0B_wSo~7vEK}2m}z3yt_jKKZuNpdGtcp
zl<zDt?d0q?YwAw%W?vobta=_LWo_MMDWVrfe}*|orS#k7SvV+YUl16)%Xho&{EgeW
zGY+h@a9{HDj+(PNr(k`kb~+Uay682gSM6G|;G{ydmRTWN3Kn2ns6d)+b#&rWE?Tp)
zL2YdE_s<RCq>y}SDbK<v&v-oW!gASC!^HM4oQo47mRwn(mAvDXecpuEab}r!uWoUU
zC@L#g0`!XR&d%!&Rr%Snm|tHT8YTcyEX>XQkm}~#U?6OL=0elFr(JqHg_@;G6MrW?
z?)HEODcRsPBCTp)46Xwi)305nr}tpR0GKelO)v?%ig3?MoxWD}u7jp#%>2TF4&YW9
zUYVevJj<Y*3gvB;RE#gABTuDLh`r}$OJ|~v^b|(DC7%Y;Z1?o3AL`eyo9bqw5knxf
zE3gCY)wx+fpl$Bkw_Cfqx(*4Sb3j#JzkY?op%BckUn3)y*5se!;+E;ZV<~Ztw?SnY
zDk9!*LJb+jv#@f^H{P{hY4m|UH|ft*5!Hdr4m!rC<I=Iee{4z?GBy@kN(}$aI&G7B
zUIbG9Y(rQVwVW?0DfR&Y0f5W6JZ-W#RXQAcr^FYTJB27K>)HncJQ2X0*-^iu9q}hm
z1wHQ*Uc6a*wA~Gz`S!tebLuH<%8%R@aP1}xX4F#-KPR~iY3~)<!@Cz{o9&e`u}^=+
zOZx$gAt=78qS357W|WLUZz^r~G~-R}!tXOt=K-L3WJqtqdEI(XMDgv8QylZ%IBcVS
z_$se~E#UMaEmGjU1~4o?OM6QIC3eiI&&39-8|6i}Za3L54rEwIna|_j{T(YpE>WtO
z*#6e@0wN7m?MgT-UCBQSo~v_8<ALqmyKz7N#$GGSaS43gDTQ)%F@OfaPg<V4=SS_;
zv|crPsTLp+tgV&zA@hrBTD*^UQegaLoOUiDs{Q%U``^GNfIGWFUv2%o^mQ8u-%Rao
zl&@J>=5v_sv%S@++`IwgleKF%TPRz!7-hcHP9*yrdr&*j9|GWlVY%Vaj2-M~s{=lI
zf%e|WDU3}0fyHa{DGY;|Fs~fnQ^jw`HomqQF2ZHcMZV%G<%KU(de`3ltYh=Q$|{#_
zjvuy^_Pk}Djl^Jh+ULw=4$<=?Ca(is-Pxh6fnIm0Thbupsen;MHA<#x_hE<2*_g(o
z?#AC2rW#HNEF&o=M;5i~HLGj0EGJd)S;ooDkNN@aii+F<c4I>LrRS0>!{HK#Ifc5F
zy>5I?3kvE@c`JtCZccyj{95fK!7f1r_oVoerjgePVPDt7qnca4=GRqj9XgUtbbp4>
za8dQb4cJ1Qg_o|#B}GtZ#>*^`tfi{-j&w76q5K*5#oi=l9-jril+w;9b_}HP5DWmM
zm5@8njh!nLi_SKvfQt>FFyNB7s3`h8#Z|QKl|+hr;I*OQVOUfCLv?W*SpE!H%5$rY
z0W(tCw)c%z83E~R07SPT31GQkes9fUFw8kCu3euyy@e{r9E0@%j4umGbBZO%REaj!
zAMPLHS$4Z7b?xg>Omsvii$2HM;)LD7Q|3@1>&IY9Y;5CE^kl<YS@-D_6fuc7=NM|_
z-I%Cx$%l~S^9M>VMJb7NGJDKjhT%{UZc$OpyGd_oV)UOD^;840T9K-eKUM?B=Mj9f
za%!AeF{`UJ=*GQ-xa*?AI=5C+T+vnyBLJwj#7*Pq=y-ITElIE{o<n(oznhz9{l!fH
zww0)i<zc*Hf@^%G-8E6y0`Y@6+Px3TW6WqFJ$mUOK}EkpPvU&HVx^CJEtI_O(M2u#
zWGy;Hd3o*LN3$%j-~f-E1y95ArDxV3LTYy&gNEqmR<4j?(3N4&XV2!y5&3=MeVFPC
z5d*o)^sa~-1-*SG?voKA{E5ItH<YRJ1SBUqL`h{EE|%2>5I^kj-G;|kNXFUW4K4b(
zPWVc0Hnwi3x7>#??1S5*0_mcTjdvD$CZZth@#=RAb;J|jv|mRWHNU0V)C`DlkB2aE
zMI6^Q;zb36+f(1jngkcYv;S`I(=5puH4)p>skoLCXdjE-y^9dPiG>D<x~^@?_5v|m
zzo^ipa(b2&4j7W7W%*{pUKe_3NQ*@e+%_~cbSRQnMfk=paT(3!g}KV3XQ_*{wenH8
zq}pGA0VRX=3s&^Os61S&vd^J<@fA%UL)<1xjI1^OmkcCo?<?)l{QUgEqc(_~jkb8v
zlokW_-G#p~bHz=*u+4k4NhBlSe9eG{svre`DXE`iitXYmt_b&<yKP{mtExI+Fv=J(
zJb>_=<k2qsMtzVBTYrRbsybZB$6QF~)Wc1oyb$hHyFXuvFA)Hka2Z?=3OT_}9`~37
zFt>?Tqc=Qf1zIuR9gD$MPTCbW9@oHsx3XL!wh!AMMY&fPg6Vh->PCK1YKaH&XR#-{
zx13wqBX&3|P&_rw(M=a9-N7I7K)-Sbz9jOvkD+MBrP8H_WMXi(z>_EL-~y7K<}ZNv
zszO+SG+G<}ZeduHVL9|QtbhhIq~OOEZ3nXy4a5^-VjS;iVVC#{QgPEkEJ&`Rs+Qs6
z+}y1#3)9Sl5mdS{5Csajt=kq45l-<t=}|u0jxc@i#)^txRJ{^-Tm0`1`||y|MR8XQ
zv~m;(l&x5frpQ|bB!|7fh`OyK0Tfkq`k7tNa}xb>MmzUP!}I`vbHoV6t)M1?AnY~4
zZ<m(d{GEO=rA&<Qg|N+cvZt*1Eo8oodTaR+J6ewM-U>DhG{U9odmqfFv13ttL6S!k
z2A<1z8B#>uit0Dul_LP@$z*@hr;$AO-Im7vXAJ;5psr>wJ(y>kxdsr7Q&!WVnD{Ya
z!)NmNcZVbzuzKcz<GlxLX%5mx#@3M`cQ6*9JwX?KET=85U!^w6R*0Kv-khk1VNYRR
zzCN+R#eAl3&`S8&6GP(?9sc_TnyIzMt)8OpCEqr<D7@!BJ+}p7<A#u!VK~CK{}{|&
zkle6^y+J3?xYf=mu@P)|lwRpFQf{FPOL*U0@|y8X8^Zdqj!bQPhtkA?N%XN2cw}LY
zVRYXv(Hhd*i7fm|wO7OfEp1;ws<3(PHd|`rO1baf-`qQ|502pctdWDS-yp=2r<j=q
zN#7q`Ay~L<m!05!PQnSTl4I6xV_SWDaeZUPjYspmaQ3`N!a<+U)t3HR1!7AGxDMS&
zq5?jNiH`PY!w%eDJ5C-N7<pn2eIEU7K;jqRp;w?ea#kSw86cB!h*>FT2z{CLPuH^Y
zazew<U>Vv@BdNd!$`xM`g1p`{eC%R4Jm6lzqW{DSHXx7zUDCn)x(0+y@bM+@qsL>+
z9wY;+2E{T-b;bGnNntuWxa0oSGk2?zDd^@t$RHqY*zkmh+Kqn6d-;{&rtdy5mugGu
zu&??stc!O`$>HHWY9)FdtDgwZLCz5|=BSpj`~BEDICyI%{iU(aqS<UKx_7mmyxg-O
zAMR`*_f$_AvsQP~i`S_7aVByGq<)pBssLO5!lE~E`Y9G*Nu2~-CC5mcS;rFqtMuGb
zX0xPHw(9pxaQ!XU(Xw)xRP+rVb3l*obd3z`e|GqG_Tu_Vy(Z}ppF%yP+s?aEnVI>G
z%LM!>@3;)W$aYlo$cs7Q#ems9^$NU_byzK#&jvn#zNLmq*zZiCUZQ?&8vzNlz3pzB
z`p0f7zjBeLomZ$m06e=s+D}OW={TPup(gH%$EK`!{`&EEPy$T}aK0z6aSdSa5&Vre
zd``FlY*RooZG_3~$Y!Y-hJYUqrr1gPjR0w~wdL%Tz3jW}?Ae4n=3>f!^PWT`9l*-@
zLa^74H-jcIAL+T)j&@=(<8CLMq%}PP#x10$3|j)$o*K<vSvOf$&Uf_8WT3Oh`DbZj
z;tw8WHP<!chvaALZ<=dx605j4ZNoLMk?V1zu06|b0#150OhwRAn1P5bcVXIqwEW`T
z9$nu1Ay8Y}i{UJ_z6${J#KX+a#Rb9t<QK;89Qj%Ue!cvZ@&N?iSKp4^<l-&fHM_(t
zHWgjFyu56j&;w97`vPdop;%-*gt+VwH-tjDRG;+T)|8woY9IBeUSGF?CsFX+y^CTP
zXmEL{7&^XDXJC8ahb`X`s1Elv*yrZv9&gyVlQ~=+lM%~b%<yMu1SD@xnE}W)mSmF7
z#G_mIiBNTHm+&YOQPDhs%itawDTsLN-8s@ZxV^Jen3~!oGnV{TJwO!{PbZYiZVxa&
zCY4^j+KG^7H&(|Lz13ILX-G?J-gpkKKb9Ihc``IMrf0vEnp#yG!EZ-DcwB+~{c={*
z2!r<AJ^F3ttc&mN?M2SaJj!C#>0Vr9&{9<`o!q#YX>|Z(Tv<%4tX?kmykYV4zVNIV
zRxi0b|I%$kv}YKf(a_Lfh&R6b=j#ypP4o7<j4r>qR{0hTK5TE%*uj8I=`}fa!8G&%
zwdneo;kxyf@#9NdfSpAi>@ZY7_^nSMdT*k+_1tU78*7R`j{SbQ<E-i{3Sj20ScE;5
zv7-(Jk`fD$tu7U^Yx=)2XF?>$KqAB}di848%DBQwzZW(nS;CU`(+I9Ots}>=GvfBY
ze7{?Mv{yIfL_^5xlH~m|$Z6{|DbOh|i3>TI8Mt-UPz@jrN=i!T-dZ(~)m<TmDk&8~
zmaG#!^@c(Ar-b~msy9fBK0AOyEa_iT*{LM%l4rlzOn!1BFM?6pGHG1mK>!Lp6i8)1
z(n>8!^A@97d<=Fdgy)qBf+AfCBVa$ilw#?-(Y$}RpZlYle3i?Fs>h!yi!v^mSkLzN
zkI=QChE%2#tmCd*O*BGGUfiJpw{0HciZQ?jGzQ3&J4g_pMeiko4>bnB-+|0Knd|b`
zSlFhHs;cq+<cS3}bn>9rEdY*m7Xn;x8{6fd<!f6VEamgv5O){|OlCh?Hk$7XurUo`
zHWzyG3kphPg5=?~KF2#O*p>Xr8E|Lm$9XZ>N^S@C6hO#T&rXPe{LYtX%hMa$wqA{R
zf%)K9Q+5`}3ZxY8WH<S8y3^<7acT~C@V(b)D^g0=)K|Bdr5uEIj!BEUypBPk1pOV5
zW3Z5WH#Rw+aC33-lhwup3}y!DNkQp|1S<wZFKwX#OqA=ezT{5Ce%($CtlK|5{Snf<
zCz#Ed@U9OssSlm)WM`?2jJ$$hHQYb|<Y<rXKp?vF{JIX{83=&2;Sqcx>6sEdXlHv{
z+E>@iZ4w?^sE?22)^>~`|IVQAoQp*x2KQ^<%qFC%xqCgtO>aq_A=sySC{@>w7_!MZ
zg^~s50too{x+N?1lD{pEN^x&5Sh*~`0ag>r)msr?a}__H0mD9ToV+SMLX&du+WVDn
zmLO-8lN$!v<NfxO|Kh(#F<a--GFH7KeuVlk`((L_le0_4x3-jE3RX?g17FI=y)9Z@
z<+25WGy#+L0vfcr2mM9^90oo5eS!IkjhBuxu^kkuNa5_}-!*Z-e8~CGdv~BQ-~eH4
zTRb{yk-`*aAvKDZs?ugSTZ2YE1Kjjt>24sJrilo9giz@xG$&Tn*BstU;6pUo`Ak0G
z`rf^Hm5Qu-d2iZH0nt;NhxN;*_IIWFK$dQ0wTyIGy{d~`y9sbtUZ0*ssI*jR)C)a9
zL54kT$Z+GKc~Si5!T0y|?k3JmuL1doxq44QD0&I*5w4%z1AtyNPXc3TLG8*S%cjLM
zNkVVbEC(VM!_fA>$hER+SfIQ$OyevHPDmiZc9wbRWQ)+^M7NgSH`18Tm6peafj5P|
zL?MSqe!UJhr$>*pDA<4qZit{5&43~f*NOB}Z_xp`b=^v6zLDG3%va{FJh-&>D4VE*
zQ6oSrzpsG<X23!vfed`K;%_yOiOay}m4({n`xGfPW!d0<jaR*aUo(s+Zyk7C6Q-m6
z45R9@O$o5=2wuR!7R}nZD>x!Mr|00ylkT&MX(0DH3_#OXylO-I$wY8$(;z|Y;10EK
zM(LZsL0~gprQWVyTd1O4^P*9@=lcDgQsUCnOcFz~FYov{z8B`$iQM~+;_2dKY;8D1
zvWH@$Aw!-4MV^zK?qJ0FJL(Ar^zFpeW&omr7{c3NOLikA6D$y+eC8VahU#WFEp2VP
z1cCa|h8-Yp;xL0GFuQik7#9~++K#Su=k&Z&TFRP&fct>D6N?+;wH@oV8@y>u&uS|D
zsutoa-J9}P^pn;U+1&@BWP_@@6yrl*&ZZ1Y8SVaM%9z29`5#CBWy<n|NB0)|&ev|S
z>lT!1V~J~metLrB!O%Qb4L17+A!61$<MydR&npUl?9$<T*%?O3f;$2^Cj?$mrfu{R
z5U!YE!wbVM-i<+uH+LdP)I*g`!dfhuWL^a;-H2Tw&L`1P9B`~*(!GaFMy9>02<7Y3
zn~83u7T-0>nHrzknT=It<zm!N$68K`bfVWro$4fu^8yiL08df3amf9brnI`VZr{6@
zfg{Vc2BH&2dJ<1;&R-TZFE6hKPPK$cn+JT>=K+-DXHYys<oxWo+-1D2wb?YrX<7yY
z`>(PgvYiFLb10}SxdUlBbsIk*S-SsAEFcl|^^ni1HZJbEYfizK1pb}iT6?}ysmI_B
z)c$2XVf|A*(!^e$LJjsJxpvfwuA*JC0RA=G;#=P~2IP>zfmB%YJ`#96`=bnqRs)$E
z6U4?)B3s?g2&QT=00x!(lz`^Ff6burm}-N(z-6{$a2#uCt9LeGplRvKQW-#r(Af0G
z9;!pVl=9&R$8cnQMVc~w8HgK9h)+twa$iaZ4IlSg>*l2v78M~61KS-$hhPx6HL8Y9
zyl`XM&Zqs;cM;V#N3V#4@16sX<hr|*`~Z%Q{)Hu+G?_i*@sBf(qsgTJNP+#<mq(hP
zqwMCvh%`^Zp-X9!PeAGCZEkJeeDD$(wRTE|IKKGU`%evQv`H%BN&O9~j>w>Q;hu1V
z)Z5`jFL&)h!f<D&c8L5Y$kb|ep3%SUa#_C8AARWzy4GL1(Qld!$k68-l!-Jm0M_}U
zGBLPg72b7LRPeBdtVZDtBO@c>j#Y)$wQ=4{VczbbrEUg&K#vMtpWO8Nc#Zx~jpfin
z8g{{*euZ-ioDdii5<)9L;|g?NPq_q-0}{<B-~>WXeR0#3vsB$}om0%=c|J`pa3Hd*
z+(~Y?*~x+8PJ%C|TX|X85g~V<<1Ck=Y3VAEa0k=d>+9?1%t1>|4@G)C7o>e2-n2>6
zk5}F30eAvvzKh}6{;FrdIx?rA1!HJVdiq$aet<mN&fTR@qbj*6Qc#W>B)Zm<C2zw{
zR#tWd<}UO2EN)(ir{8Wesg5oNK+R<|H8f1g$O6)=OPbGR4Gn3wOe9aaU-WxQqjI<Y
ztv+t7=ll1I(X|L587@qrYfgLSEXbyI_(I5YSDLrC9XIf~AZh*diIf4{i{>dInrl2H
zAh(Q{;MySS*aL<KTRRyY)n|Eu*Xl{?&(~d61P-_^M*^o%8NgS8!8dKuT3T719wZ$^
z+-n)1wdjfYGxzCdO8)|2pSOIy?<_xb&U}pGPL%J2+W?F=uDwU=&+5daN+AH%!T!jB
zB5{Vl>TeW3#l=t}_|?Gnr24<ZHO^fH$U6_&82^11`hQ;q$^q;o%dt_eKV|MO=>4G)
zfZ!6-mYwYb&`23s0t~dE|9=4gpUl7&21^?o1OP>UgBZR1Q^5f#K2I8eFGw5|L~~7n
zn5>qJOcvk}DSj9IQeyj0xK3bUr}SU{3*bL{xYkB;4mgyp1N5#VFaOc71H!(7<N?CZ
zW39QHJ;U%qM#Zfie&ziP4o`({8`uYhEmY)(_2-z-J^IFQOM@eq-6~|^LHx`<t#~g#
z$)_ga#YB5P^B)T?SNt5#65fZb!0GgYLKQv$LIZN07C<ag9v^QF+v&k+>g$^UjHXKM
z@`b~Ng!mh_7-XTQs_ObaC1tQ}Z{h)vUNVF2uOk7^+;fT_e)xliE&+&KIzN7F_h+@u
zs^4n2Ve5yUayPUM3>tVVeNH4W<ra`|nc<O&P+_Nq0D@`4&}fZIR8Z?+R?ntOrQNt~
z)V(BA+ItEmRE!gw9y-b$QE_ortHX`Vd&4u+xVL24K`Y(THg<NU6%`u!#l@AwhCZmu
zZ0NW4<kz*X*v(RoO>=30n&jyj-{>vUw|I6uL%4iRg{+v<6vzfaqu5jENXEF?RJef{
zR(aq0G|Xn?GY=uJx_({T6+m19jJSH#)Cbo>_+s2u@*ipt7m%od=fke^4e^4s>5r9?
z#qK^}p_E4`C@K~PeWPSZzDzQAp&@krl8Cst_?lC$z1#k}zJUFN*Q7xOODMRxv|ZS^
z<<4XXfJ?-gWhV*n>t*3h2KHXb%NJBsd;=UtQ$Y2N`kljjoq*o<37M2eM>Cbd@q7Lb
z?si(d#r5feIw`9I9I3;f4V(sK=_hKQ?Yk73eL2%`E`^`QZQ!qYsV<AXOlcsuV90u2
z7eN2z_t#ti7uC9L>`K`H%pD0sR0RlpN;Ko*mAu(9-YEbum5RN<oAmSzoV#i`+b7GX
zC#ljzTq}XI?p6khu+6E4&CSy5h_{PlW75<ghKt~AYuREU*(l(gzt}^~oGghPw7r2r
zau5_9zW2y=O)Eb?f5+N1w6LtK<((B-4H!(Hrsk$eQMm7qnK#y5_ErED@jd=2{)2}@
z*ocaX$^ge0ngqNi4NN?Ar(g2Pu>&dmLmKbpUFLp#CP10U|K-sW(mPD?{0x!4sA1$w
zY@bIS2U4Q<%G*Zd<#oMNBFh88`Xqe<=&xRdF`f_5DqYds(In4XfLdE`6X8Z;&Oe9n
zb8aRHK(io2c_RD$X+LQqzPflEfnqZvwAm6!PFeB?b)P?LP&=ZeX8>UcOcm^C9kY}H
z4iR4JP`TcYT8ggMQI0|~V0mi_A8}m-lH2^uGaT*`&Px#h>Ng}aYZA_ZrX0?Yl`0ko
zXLMvCH@#othBFqHT})$IVu>^6+nU~-VLUpX8c7isx2S_#7v|>BS&EDWRqi4C6DT2i
zyFBGWPCL}4r+x*}Xu#%4UL@07LFLP%ySn6k3ckulS5|wA-o8E9S`sE{sJwLm;LzJ}
zux5-KV~EuxI{g39^%hW3ep~;zASj{2NGd%jAW}-Hzzo75C{j`i0wN;a-Jl>Pse~fk
zLw9!!NH;QcclQwgGx)vtzQ6x_-?e7BT;upW=j^lhK07}<yRVPe`K#edoS*jIiSl9!
z`&(tm{Ycnee>#k1k4(iY`BO>SZ&ehi^j`_GJBw{j*#esa@q>B`N^BOIHqhah83-NS
zuEKSsOV2{h1m#%cRcV4mW%=gFu#wSF^=yu~NZj1v!*{#YvX3nPr;hu3^Sxuly-Z|Z
zq_Y=2K-fqADqSvn9aTT@dIfLqkMe!bGOGn|SW&Wyx;ojX!G{|S8MVp-RWyR8n|spI
zB*W89ZN{yky5q-BT}+gxXowB_PG)t5Y>kQIO)~k#?5<|d6)_a4zAn`FEm3)NG^>bh
zyCBRcJgO!yzSlUA#HgZOgmfGbd%w5LdP2=rxfv?oB-E1;WaFHt+ZRMM)7#r?veauO
z7Hrpz8W|p*#jxaBWh<P+t8OI3!S{6~GT*E2BpfBu6JGk?+q&f8N}S~78mG0oF+!B1
z^juv_OAnNk7Q3B~o97p0X&PjhAh(s7GPsWWtczgsX^xBXzTWD{?6JzDj(rS2zj8dX
zWTYhdg$90&n&!%KIk4M453w1q8H^J3DT&<jszdSsAz7R<H8N5kmYWOt{no24&jKlk
zY)0m)Fcq-}52%QtAjHP#N;OrSqT|a(F-W_%-@hyAyqXhF(-zF2I;#dJ!U7NRKek7%
zZG66bb)Vs2$VW34`6388FPXw7`ClCMucjVY6q&@RvHb>Sq~`#VNPvRl-n)R~iDuIh
zPkBKV9$Jx<xguj{YUCte=CWcT=U5MHdIJ@{cyvCtCOOlaw3e=#i>sxq*gP>flV^Uk
zxK&ih=e^e(h*zz~Zfhy9Cat(Iv-RVI#Dg(zs3r2jOnt<aJ=Ub(>Nyfc!aY<J|Fs5^
zS@E4b?s&-a1_dUbL)>G_r*#=zC@1Ko$auXm!~eFEs2x3U4kqc2#oys!VMCmY9Jjyz
z4EZl2M{rHmWB5nImz70os{g|pa~CZE{>@nL=6?@rfLfkPY(3n;PQ&7V)y$xr%@q8g
zB6;e6uk#=2u*cTJZ7g{A{5PW<Yv+#<CD~!51W5{uir&0<@dA@ro|B&808HjN$EZ|P
zqHe{=$Ale6v|M4(;oNb-#^E0LLUrf3AT~P?gIKG8V{T>6tanvoX3(*xztVL2hyRaD
z<OL{cG&3|r>VEj}8e8-Rgo6VPpC|#0Z3a|ziY}kr5Qw1xMX@lIGjDJd9!?1$47Nx?
zt^QES(8$R0j&=0k3cTtLY{{=Cra%8DsDlQDMy(|Sebq%@!w0?tzyuJfmt0fFbXSx2
z8o)>FKvI5gcJ}be?ZiOE6$2NUE!1my`AO8kzym{(tehnTosMet6G}S8lLxkQG;UuV
ztF2!;o+aq??;v$lTWHr(OLV>-gn7jrcnAk=VFKN*OQ43)Mrqurw3)#zJG-xrRV{pH
z)QLmg@8}Zu>8f1!p7fqgi@SCJprrqDB#fNAyes~`JP40iF*PqaqF)Kmr_@e_@fF58
z6d$GfhxbUJdt9;@7~U;a&!gmeEVp)^Y)A$f#Dovn6n5yte@-||^tdMI&KzVps0q5l
zu|Fu(>Ij;bzyuBkHPdHh%*`AmVtyvfy+3$=9#nkmha{#ae+$!N($RN!MDD}_Wyb3|
z(L<fMS0r2LdLo>~u%^C(+E8CXp!*+!oZMC;=+`YYK1nh$(6mFP=_a~JqWfKBdL9^_
z>c`AW&h)J5yB3<tq0;6Ox2^#Ku8x$j;CJ>=k%t7qyW7sK+k2=UR&o4p_;3E&bN1lS
zSgqlZep?GtBHsl0=S(@c`D`40(>*%AoqbPyxrBn}fVCO$z%|BHa_4G(Z1!Nl1eWO>
zSPdsw4dJvilQk(bTHMF4B*G?<nJWA?3EwoM)Z_++{tuzX)_=uEBhPnPk0>Z8*0dK}
zK1`;OQab>FW8Qc?=kvb>%A*rEJz5WOKyf4eAk#7bnHxL3NHah1{{!5Si+j~yb7&cU
zhUBXLH(fo&*lkjqQ3n!AN3ot{EZ4nL{T?uqu3XP_t$b3a?re0;_<z6dqP8vwhdZny
zaYv#~fkX?(s~p%=YpkU-)y%pd{u>cl#Tcu0WXTyp{pe5G)ujDvN*lJ6(=c3d*0=*5
zAXMPLZ;jKIr+SE7gnGVGd(e0B3%?Hxz5EnpO_RR1H%zDfUC5$$?E{>g;&}H6`1!gw
zO9rF)C%k@tRkDpfGQ3XHi{Au(zBILLA*%b0;49Q4{!Gx*-GRJn_>mIW|GQyg>sy;h
zesO8(wp<3`%ZPV;L~Q*aX0c}u+A6|djQ1QuCnJFu?4ixtT@!crMCw8wLS-3G6f`2Q
z9FtJvSoDf)U84pvLfwpu!mB(cGcWqsjd1#+ebWA*P=T}7$w~=+N-GQ$Cl3Pml$e*m
z!h3P)eF*`h`6%A;_J$hAwRJ<b=yRF7n`<w89WIFFOGrz$$x?h<8o2QCM0^4QH|Ey=
z2x3)lZ5m{eR+QFh(uMFzphnbV>{l(6i)#}tftN~C-OLExB=<8s6R{zxD_kJX5rvI-
z-L{6NddMRAz8-rn+x817nK1IfU1Qdbs#!XQOf-0z+(o_J$H|E7Z8|WC4PNROOZd#x
z?NZyVF7<%gNe`RLuhl18JTWsGVsM)|H<{nr(sv3luLR$VLb01BdSesHk1wU*^S$NE
zbVQFpettd&H+Pr#sGlDZi4g_u0=9o2m|+vHpk@;=vBRdiqN0w1T+gRZpY|O-L-<fZ
zL1=<I6{5QmzT-y!$ic2$9440O#C|E3%?PXWFH<b8PfP?(mh9Aw;Z<Me*K@%h;2i=$
ztK~TBPemShl1TRcV<IDp&gJ6yfuSMH-A{eOYasW-@pC{kBrR8!DeqIJ{^`EgvAy_8
z#_iW=KX!V4?h#YIoS-OO3%oA~(Hu0W8=kP+^=b*e<{5o)72Zh~T`*^~rJh0okTNVG
zcqjlNcJn;ApKkEDEK^g0FU`g9UI}eTXs3!LR;z40i~lC}Muy0iV(}R#)sv0X5)6?m
z#WuE#g$;CcXaluQ|9ijK^kinF^JpO_cO}P7E{(18U`v1e`#n~4fZ+HC0OIn~yM1fL
zoW^5{EAF>lbtLtA*UcI1seXxazd0I6uB!d?M7J~`eCr~>Wz9``iW$p8?3y{FYIf*?
zEG~TNcS*!p(zsLnX3v$e_NyNQt{iX`O|?woaFkAt%d=E&5IJBT8W{Jb%9Rjvm3C*B
zPP1z%qg0iYu!WKZc{-@0Jj0mg>^U1c{63=3Ha+B=eFHkxwISycZ3ZGH(h-3s*6l_n
z0m?5V+l(f*Fn#mWD9hc`;YaFf@6kaM%^}+6{Gaf5@%=Pu{y9>x&~t70zEiYol|R>5
z4vP7L*IJ>Zr%~A}f%ncP&I8LvFD@MFGF*+6WMq8+ZUf?m#uR|D(9-ad-KsN&uCV5R
zWp|)hM~0T<VC40Ydl8&MDBIQHk6kcKdkAAmD=G^GT3L)EG#$%82TvVnKQb9WdS_Ku
zj*g%0uT*(8{thESxBn<GZu0YAJ6ed%15R@XSM_1OJfU#Y+3}DQ`hLJ%T=!vq8&`?N
z49oDB>no>SOMShs*3K~JhHVjA`rlaP2r-ZJLHk7sW*y@Xl;sFWBI>e6TZgK0!ZE9T
zpa7MIUSG>@3~k&N-mwpgOb<^1gi&X)3EB|Y?72qS4*noYFw|hEd}m`gZ;ak)wFjoE
z#X8;fut8FEgS#q*pDyTNWb^T>XP>YZRX5xt5jKZm2|SyesL9I5@|=6^CZ*4L3C#J!
zqlXf3vJpK5$=`Se&nLXVbPyg*m;EvrVN0MU>G2Io6r?(tw1%|t9D(iHF!YosC*MtR
zw+3A@)9i-oS-H90X#ST`0u8ns<GPBevcv~ww%!kPnn!w*+k{`o2%33-GTc7`Zf8qV
zu8wJ!Gz~#O!Z;`C`)67CgHF3@bjD}?K?(oPTz{_eJDv>%r@B_Z@1_0$ffl2MXgiN6
zT|K=&*99xF1-S2lFYi#B>CzSXfOq$rY(bx#*6i9HrM0M-7;R!oj$I5Wd`Q`P>o7N9
zyWN`ViRu*-b@9@$Y@J&}34GE_r6s~{9GidzmFdA7Y5f7`wXxkSuL-ag3gZ&~uGx9d
z`Ps^XII7Dh2`+l$!g85p^U%T76hX#4?0G(w&hCo2UCvT|njPNP+ItL`AM`qD8UVR8
zFmq@_3;PUMAe-tc9f;SyE6Ns8Y1((jIB)yP$775aJB0W>GYiD<O*2DPo@OI$q+i@P
z-t#2<_Ht?ic%kC*G{n)$RYDfiN!>T!r>Kse0nDaiP?g&$PYCdhy!bzICi0vBh@zs?
zS=Mthq>~lM$3KqWwoM*$Sm;^><#+o$Zw8u=aYp<5d$`0_G92HayN7N5lv#Njz~Pub
z=QO5fB_MM2Lrr&g?lI`%3zZb@%BuG4!2~Wmc8C#thHZ7Bg?lWDJFOm+Z0bNyoFBP5
z>9qY7FlO`BF3&~1XWO)wnJ>y@7Bwa#DX$ZW+gS3-RCyH>Mf5*p0ty?AyIWlmc(>5h
z488HXd?vhp3}7ahUG0f5zYpp?ip?fI0%)ILP?w}GCK}#H{~gq}AFth&?%YPcU6UE8
zM)r<@-nWgnYvg|ZC~PyHLxwl-TOB0UicQqTl1(_w2kot)CH?*6*u1K0Z+IBpb{_ld
zL2~;lqBmI-d;sRf+aVp)B5?Kj7J%!*#la*sal(96QEg#nV0%PXLnF&fyo8G5kqBO;
z!zt2wA7`s3iF8rg%jFd<>F0}HW?&BV+{=bFf?MrEaKc1)dBtKSbrg5S6J4I|Uiw?Y
z{+!MHWo?EIz~e$RsCq@I!Fp;{22#}|ag+;V_S27uIGmyie+>rgqtV-2LHB1}=6|Fb
zj}$JAKY2Qk%Vb#utoDg<;NTakYQ7=+G@3X5&2D3Sj7d0)IE(CtcR0}kW(}w-nn961
zbq*z^@1P<FBl32@^+SrNY8E?rVKoQ@#*ZA3o6W@S6K{PBA9&C|I9NLNoK+?d<T>x|
z_R-DY?C-CsqciL%hKmae9jSkXg^g(z-GdiJbqoJV56T@8OAC`o=+ZigER7b%-P(wr
zy~Y3cV5x;Y7C%28DF3YYI~*84pqRGXrdzs2Xgk&+kQ5kd<=B=Mq$R~LJ7U@3l}{Rv
z;!^{tM?&#q)6qk7%RKz?XK^4TB`)vv4PY3_x`($UT~d5%mhi1ONB*@={{xZDTCE1c
zjucN@A~NxeFW1Z(;{4D6Agi}w7@*8_<ZP6$q>hI^eYyc|HUduCm?D6k;yAFnJ$HY#
zi7J+uRVu@fB&CQ!`7B%W^uuC>Q@YFcx7aQ4=m4ZyVxInLc@;>$!%g?PlxYa|76-Pm
zVUwwx;?!c|lF@As(n;BEvf_KxgGo9)ug$9V8t5tIq69<=Bkf1;I~JLwgn%$$UbTJq
z_ZE!l2X=EMtd`WL0DU`IUBW1AWb9f>ZO>D)-2$&TJDz|)7gskFA2d~zS5w!B<A)g1
z#N7+|mSW(5A6kVkqb7Tby;FqEaN>FF+9NIEacy2KDyW<4{mQ$87v7<XgGLwgWg}SE
z>_$ro$64)8j|GMGm5KfQ{2J)PO-D<a3MGf>j)&HF=K!W1`Nj|cX>r@xRHmrz83tXB
z4kUI1pO{!#QG=Nd50p0PH_iEP2Yng<1{1o%F312)<Rm9#g1p+kyp^#$nUc~>YFx8!
zx{RtY0p&L%%KWA>GDQGR>hk`4)XM1=sBLL@KIvEQ*re@bc3cd&(IyFLUv_nt=*Ix;
z{aCpTD3ueZKiU6C9T2e+azAd!y*krZ85uM>GuwjYk{)JKmrJRJcDuq0wD+(E%?W-z
z>PzWTnvlg#*+qVs=hsEyrVxzNGladJgM(w&Tvho~6}}geW#D0zGG=)Tl+bvS`E?L0
zr`)f?%}Yyb;VPXBH5bbt7}pf#yb|MjytQvQRQIW`+U6~CIv_<q2KP+>9GS1oNJ$)w
z7V|POb`VMN4^)omJV-P#WH5}_JUei!m2=;#C+_k_juP6gmn~ojN7t(kNMM1TI=&Mn
z^^Zj8l_w2<-HzQyL;8!p5Y2vD(_z3MHXVDxuMX&AR<;)H6CPNIJj8#<t0NK(a+?(*
zqE)8W^&&-U?=GwiDO-;~t)coH!p{Orc7ap8*HiPZF;HOd+y;erhn{iA(QdgZiGuw0
zXu8a;JUXny<gt$b<YpIh+u~KvPa3E76KE1*&TnC1b0#-_x7~MqtBHQ~`bT*9va;8R
zcYQbMJ<MHDrq5tzq`2Z0;}*&0t}^i!KhgK4!t2{L#tRNa^88KB_SR0H*@goKH=N-=
zb96Fuatdlr*Uq{Vrb0<Ia|pusiVX*T%eP_>PVzLI3>v5np>jGAN_Zz*+@Qt%;lAfH
z{S1#lTPIZzebC^X;|HQe7l6`{b6MH_U>`>JgNPQJwB=F5dm`3V_xpX~#MZ9R7gxLP
zBG>cDg;sqB84G~W5WI?eZ1*-6UuiPY-&FFvm}GW%*D8g1cAzUZ1|C83K`YZAt4w)H
zaZyT}hC9Az=G~S^Ql*xRxV%)7D{3kOd7!DL+FQ|3gvVm~&c++3$yyi|=!uz=WdF$f
zYs?L+lf$iQxL00-g&)#%Fa9|yi=o`v{B~fMl4aoYoOF=Ebu-zs789vrNS~DHT!>V_
zdVO@bdG3NIeelWWaQJS;^VPPam*-V7@uK9{7A-XX#%8|cxVxf;Bx1P}yCT63@I~3r
zd|>`Jb_t$*(lh~GTX8X&*p66QGY_uInx}D6vk}gmiQOt;49C2iF}Rv^KA$>QS81bQ
zE-C4td21Y)WXIkCqocw#45x9+OSJ>cr8%r>D+W%ejR)0x!mh=MPHjC-S*aw`YG2&#
ztZQT+IpUE59;zd>+ba;O$yn0+B+CW*tX7}8i(T@<{cH5L-jD0*>WQ!`&k7bi_8;}2
zr(oI;#eahh$UU;S@EA$uK_Exl7%F1VuarfGFFST!BPiB+JADfAamEEQHsn~oI#I)|
zv`wE2`rN&OOYSHwgzvp>ifTD4r@6WVq2>gUfW)~U^N%2+*d`X)TpBCiXa-TOBoJ{r
zqT2qfJjTC0deJP-Sccz!LxEL5wL2sH3vzjF&B_rfISSc*)f(kP)rK{##F>J_fBe{M
z>J;j1ZQX*e$v2rm;iQi0&pcK?;rrJU4$c?5<q{Os_fxVv7ML`DeKTcin6}JW46b=~
zi6(6j=vud(s9MX}*)nJF=wXXH@MT}!gMIufZC5;A=VpX7yUN`jj@+|igu}bshI+MN
z60Bph2WcK<`2tubdyBtYrXHVt_C%a>jPLrO9*)@f)Nv*+7uLjMF>il9$S1Ts)<+ZS
z>dqFY?4zWtJfO>%!NAqjq_f(unEFSWTZ92=bKp7mo|Ug}-{w^j=*UNBzOh<sWmWxi
zazrdb0FsAGwg;_!3Grz0NgTXm&bWi<vv!psUzI-xPI{R>SXKu?ge&mT0dJ?Gk7=2i
zyE=@+B2VS+Ry@UeV6Op=%bA)u{Hjt%2KUjGCtgAHQ&yG539+h5+c)~Z?O~$@b(D)z
zYC*<tYEClhnR}MU(iY_8E-O+GjEvk=<EABozk9D|IOv!s{WI)4?QZqcW#UxyF|U{l
z<C5vCw9yEXdqnk5<TN@~D%(Xj?vKibkK6XV*5Q(LGKirM5?qP2+dc94X;b1_ShG&g
zU;+xv7nejHjtD=}#5%-D1lC*krQtU?Z6C^>{_2ih{9DEFl?%s3WpJV7=g-^lyp%IB
zJD!xlSOrNpP1>&}1=lY$n+G=RU}#08Np@X+?{gyP4Mr)XK}#!7HWhHRPlz}<JI2G~
z%gUNEyg_SixrWNh-d@*Bavqeo_7j*_i!Xr7rb=W~3Tp!?Q=2w@%>;~aNZV4GirFmi
zB|OjCyy)v!90rnBKml$PpFzH=5o*4~3x32wfD-5=BKALxxPpI(G763EJj|l+bX<>Y
zuL&6{+5Rg;%ugBjpO(#hwmJ`b4(GKIQ$Mu{gAM;R^1f=~xM+4$0cdTIF>^Zk8lCnE
z)x|D0j_7!O11n?@T#c9yGMuF33CK{vp16{Qx)gh!Aw`0;O9GUy4gL%Z29B91>MTpY
zb8Mn;)61zU?%ZGfGlxp--mBbE8D<U=rgkLf_Z+h}&ao=ZdH@hT$w}a#9Il9z9OcUM
z3`c)qj-M;KX?N5r!s!wcQ&hwcAdJ6BIvBcIUn>us2wb--I@PZZgcChUoZF4OmZ<xI
zs-|O|qsSHXO=|!T@$_@tx=|IV2OS6Q*R2uV_B`Is*V9bZ#peJbcDU~I)z#&U9AXxo
zDt_<!A&_+g3E~{uJx5=LsOC(6&C7;8kbs(sEkli>4WAJQHuvhydg)c*sM6A|)F0=)
z*jx|vKRPBulAFzu?!9fq!+J{Z9uZyBEX_#l>oPojt6JJd<<YQp^bt$wT3?Fp1x^>u
zzT^@yWc61L=l(|ziza+N{^MEV;cDzpt`VqTH9`OrIa^@$kTgNp=}bU=Dz-iYk(!yg
zy6KUcxUCo;KO(Hp&ZXj&<sgA9E;E}L-`^)c)~1#fTR8PV1u-zFy`;S%;(2gHf@=LH
zw{1cHD7UMjOJDeQ6jFnNXu@uyib>RzXle;<yxhN3?CK&Zn&~Qq%nd1G|4=khUakh`
z>WF$cM^55*uraX`u+1Ny7Ft|h{#*Txek@2o5;07wH4rWnnG9t|(>u%lu*~;P1Znxl
zhQ?zK_c)Zp_Q>Qix6fV@Q~ojq2oW=wNI|pss^jGm(n-@|tPA^#!z`ZeQ7-%|XTxB&
zh7M>M$_G`qUYmQpqy!uJ`45YxeBQ`K^7O#pvJ-IKzkeO0e+^}0N#J$g1^tA@YYGGh
zw&IswCoUUj@d8BBZo%C8gH-(8+n~wQZxs~tPRP!VkL3mQALY|zp<u6K6)zf=sngtD
z1s3&^&hlTt<&GXdkXIO#1j;5<OB7DL`-YpBw-0_fgJI*{i8BG*vfg$!v1{GeO+e07
zArR~2QpezGT&X;MN2;vF@^F>RrkB^nyoZDZ-^V4LYtS*8wWIGrXS7h)$If4LVvU!_
zJvCXKoTh!lBm?35CVC1A3IsL<;**bh)Meh<{!v~VNCs(p(+m}nX{Jn9`Q=xNifc29
zqJR4P7nO^M*b^C&MsmbDcDl46NbLj63Gn={Q8c;jxZ50U6N{LG022{wwE8>H-5FdW
zTe_GaeX2e*4Jv6X9TKa~jx$npm6bEQmBWfaAY~S##3Q29%;B_}CmHm_+A9ee9LTPd
zcvYD*gJGX2$Zl-}BDVIJ$yufVM8w+9GbLBNw7vb=&220z1#*%=zT`TpTIi%#e#6!K
zM%b~AV<3RcsN5&p1kIxD8q3Se;+J6ee#vj-ks59g$8RN9e|5bVDdJ>Gy}?Yc*7gi_
zCj$6yI-oteF0Qsy*vf#~GKy2PvYp;>5yqfCdz-FJswTXuI_~iNj}r-78S=gfCar=(
zZR|JB-6WMxoDfgkn^FkhudR=?b*P;_=?NQ!u5BgFnKjb~oeH^|ToYi?`!4D(e~F2Z
z^tlw99^u@tC(H1z>R;>2DtgM^NXIU<fs*BMvVGUi^laq8dIh(7b!PI<^Hx~Rwj3UU
zQJDZSA#+l*T}sjW(0sZufo7uFgwf^>E|d`$8Z3`@SXJBcgYe<B9bXOew8G+-i7z)D
zW}Yg#__!1J)c$}xl9{}IezH{jq#nX>1Mw?#$om8~V4$e}Z7GW6E+WgGB0<&n%3Tfd
zj~}I_l|_|S1L@ElxA(i_KT}qXR5{r(<Q>P*2pA_3CIPUKhw(oa-&!_=CS1BP+(L36
zChBV_K|1%a^%Qe}(YdS8NDzluh1Nm?H7%O>BEI#Zp`N~HcYjjCS>>un6Er~?is|$U
zW`lcgW{+peYOK6SU|f=+YC|PQb1pFit=7Ndw86QxZ&vcSE@qg-9HEq8tix<_B>L<Q
zK#GYCI&8JOeC3+J)DIH3lUi?_%U2u}$}^l!_x?1wzPk!5Xo{_JIv5sczizCW{dS5W
zw%jPYtj<|I|3e72gMxE8!Vz@QZsQ)U46XyDWL}FBnW*A3n{v>elWbNoidNEx@<4Z{
zo6LT+z)VI02Cv#(L48rWf8s-eYlb}Ha+46nLx|$ZvexS1vYsE(E+8Jpp0i_50DMRZ
z%yqBEk|Y^U3dX=#ac`Mmf6Vxp;1|p0U~`taU1#}OuxJZ&Z{f$DiV#VH;FH6tgB!Nn
zKAM6Lv~NPbjb_ib&22yHMI5p;*(`a%N(pbJ-#&CtBH5;f)V<Uqhw*vepfiQ%gGRtN
zP9mnG2nGkoK=ILQ??33bdEfVfL2?}A^(JeX2I06YUQzWS2~z-`l1GSC(Kq+*$j>K;
zRno_m)=NUB-EnnIxIAK}Y+s)jK174UnZvP=$**e!U-V+f`i_|o0N7~k8{U(pKfI`B
z7t9(yOE$E+_X^W5hHr<Wvz+MKAI<F)OVlUklv7__5G0bgA`u~>DG6m%9g>kUS4rr1
z(R^fW5C=$08O}t-2A4p^Vr*IJ?0gJQ?3x78nYL#APwA%zbNK{-FYi3^SQKiY(xRK5
zCXTIfrt%p|F0pv<A{xuG?gV`7xDE~uO}J*2*JcX7PB{5Z2T&>OF=I(x#BBbv)?eSV
z_Icq48?N(b9Eeqf{_NwmKZ6o=DdOJHx`Ogk=256Sz{(l2?1z5cTOUJtzBPX4d54?h
z-gQ#>f&%q7F0O1%l&|<0Vc@QrXjFuTL*AoHHWqifO?|e06y88|lfRzjnz3Lm3EmOh
zZ9Usx6FM9%GpXWn9POpdd{gi{!8*@hUmNQ2yue)wU36bi`d)5}CgS7vNob$IixN@`
zNuK1+Uylno@EaR_BOK9#6p|{uf*?Sg_Za$Kko*MdXFpYc)a-Q{66yMT`0Fj+PEVbL
zpRHB?Ywe(G#Z5mQ`i_D=zAHCCgLvw(dNbl=ZuSx`mzIE~<?%3Vd&3kUPeFWzT~84H
zKhHKB4zk+1B^TioB|HSIR~nfqRNb8^aUfF0xLZ_qQxI9k9gXJ_SjGjP-!~`iF4rg=
zY5dl^QnNIzd}q7aKj|2P10nSoA!AcGdVfq1;f7j8Zr@{|7WNU9aGt*UOt_I1@qBx|
zmkRn$hPZxadye5v_K-neb_vNtE@`IQVbu=rcIG1F_Udg@Y7~aUU!`B6j-c^`cnE<)
zE;8mWSVcs|GSaA>1*#2!HIUp-P#?-XYA4Rr;NZkLwKDEW@Y1!<g?Ai0?rGGGWHN*z
z%|MM@NH*imxacu=lP15p`Gx^iEu*~>6ZC2mTC4!h!?bMQ5<JD?1AW^k_eUzm57v_C
zGsjmz5t|ofV}5p|!(oG8_C-4v^f37&=1X%v?tR{<3(QTHWfLaJ`2&4v)$qjhm7wl#
zWmiq2su~Ay>&w6f5JG|<+h3E7Kzdv2+HOsC$G~(j#5zg60_{4&<2vb$GSz;7FGU+}
zrqNhLbRl2`N5+$7Fq+%8;r!(n{HlUGW%X&oZ0op+-g%D!zK`Ll98|fWdYmgEUu&nS
zMne5j-jTNGZ=BBcfjbmpJT!UV3qB=r#gP!Xyn63u?&*?;X+u*TGuN1ztj4>+T1aht
zizQy)fl@vV+wvh5aXm>x=W16;q|yu9*Dj+*{7R*)xqC8b7cN5}q5E?Kdcv;y5Z@O`
z%XObIGNsoQ>YO7%i(miVqD67ny^0pRdA2oi*!*o)s1u}ki9tImZ`0${To;aCA;tML
zwqJV`BqO5Uy(oN8{C&UaXV~#)4TK4qj5I@hcc9PwFwpoI$eZ@ccT`Yo34FBAwUirs
z0Qtc=>MhyVTURTVqDJd-b%Asf_Vg#&F!oZ_s1>#p66iD<C4?=JC_JJd7Jf%<ABJ*2
z($N%G^WR?9kHr$rN7Ut}4@^e~W;pZkQS4P`yTr}Y6lB+F={2P6Uw*wAD0)~qY4=vc
zS(Ee<dDt|ows-Mgg=_P2lF#GdC2B_e@)n^sq$gy-$B7&d(Fj9SsboQ?f_;<|Ufw%-
z6c0<F_{0T9Vu-uxy~_2!`kpi4KHPQDZg+9#)EoUk(v!o0I5(^EQ<~Jy;^93rxn1V0
z>0|9msoa3myr$A5&B+v9#7$;uE8$|<O+i~XUy`~TjaGQ0H>27z6l37J2M;tIs_}%x
zPT$Ej<`?QSEPHa=e3HxC(}`6S{0ce#$Y3Le35C6I=0smLd6hgVw82muHa1LZdedG}
zSGh$Fh+VT>oN1%R$^1?n0F$+y4r5rGvMSi(4e|QB&AsRDUBs>on;8Fzd7CW<rjQbt
zo|29)mUe_5rNotYH6*)8ulpjBHxoaTkin#Up6U8W(j<tcQ*lwnb9s@(mmf~%b)Lp{
z3(oZ0X|H~vE~!54x8J&3`;$;`KV#MZ)`~Q)ne(3vK?o@hB#q9aoXjrI`&-r9>*A(o
zo6$&HTV&YZlX^%tX@>yz!N&U@Di7#g53#LX^!c@;1adf`P$30SAmG0<<Ic@bN;pgS
z1fYWOj;FRsUSvk9*)pJf=da)GzmCp@kE6ekzoxNVwYO4o+mm!ZKsao~9v6r*WB21u
zpcE^r5i6R#a+a}?Zip2(a7o<8fr;O#XBo+C)x^GnEvVKYb(NG3V(*(25OK+uQCTG|
z%UJ7A`P{8+7ijQrJgJ>J@xRKB@c}{Oxfqk{cj-}?uYV%Ku=MOMCHQ{!((hdF`SbIw
zjS7p9@B9~E+heck_qP>Fwr<+d1ZCtS@It*spFR6h^FX5v=dg7qN%%rV-eHp87B5++
zMFu@s?sVMaxVZS`weZA_J$qwmwy54qA82Wf8_;4`Dy4y&N?3{L3LR1uT#_1-VCtd~
z#F4Eo)bFXc1cfOtXJYQZVFk9^GT!w0=f_aBa;;Mz**zPUbFAGEXN&j3&Gq}4ak@s(
zToE$EwT(s^gOvzI8$z(sPq;lkY?>5U?vZr=#xq(OOhe8d{d^{h;mw6b2=Q3FYO=)8
zrT6;_Oxl&L&(0YGSH$#dUZ^9+Ji_nJ&5aE~p<QW*`!poze(wuP(|B0oYa$XsdYmjI
zv_t!d8Mjq*ve9>jWs~JI_x97js%#$bg)84sWtJLNda+E%Xnwrl+c;eNO#NchcW~#3
zDiIr&-}t#M58a*g<%`beS0*4QCtt4m!TyaC4mNi)Saf&haF?NjaMAB2xTmnRa>TVc
za!`(NVLfeZd5Zle4F|g#sC^Iv+;nX5=H~5gC1psOIPNcFgTc%nMgV$%E-)b*ODa*k
z+aPu}6Y9f$`r6c)_m2MsnR*BT@$Mb9`^IY7^yr;rD#~HcId~E8H-)_gGB-E(_3T^`
z)FD0&ihEs>5!80SN)2{W{mVFU7G!Lv;*VX62bF8|-ZM==zAZVue|TicvV+9xo^;8$
zUA>nlcz=3NQ|MJ4E|_5NDP!W3&%r@dbs)wjm|k70in1Gkczn528`M6`cAO{~RDN=D
z@`dlYj{jdyf5GSq_es=#acq<c4}QKRVaQFN7yBmcy<yVTqiShnJ_v!1wHJnThP2-V
z<oST>oWlS7!_^NJSfcZ(;SSuiKMHNrono>P2N-Qz*M|>p(n9GD-^)$$WA61QYbayV
z#5G<l7L;T36~`>ZL`F96#=QDwF{?9YMbnlq;M{PcRHP{;GM^(b<LPkCD8N-Lc8}jy
zd4@C(_+`B3u8-zqe?8K6y`q)(4^04-{Vv670~J-Y;Vrx{%RE8l5Yytdan<?kqn=(A
z-1!W7!4B+@$%)c)gENT`Mj9#o`&a=9h!!ov)2uFJcw*h++08gv1mf44-!cxsOeo5t
zx(IDBB-bT~PUs`b_iWDpp$n-?3)Ojh`^&bwey^Kg#R#|D*cr({+PpME*GJu~UXCZ`
zlm2$pQQTv~)ZZLw6L07!k|r;GK3gJtkORPF1Sq@ypdRddRi>;qs2G2wec=F`=Edls
zvRhC*w!$u+SFIq<v-vLjQ&cmPipsF&ZLeE9R~mSN!j1?ch8;M%Pz~NBG!w%X>`^El
z0rd7DDeU15qa<O5%UZ_7J6Ob<paBi>xg+X9Qd>NR)_^v(R6K?T62yFZCBM>-pk49U
zUsIi3T{Fpkf29N9$}o^vu-~O?%IP|cq=ac5ITP1&#oGC59%k1q@J?(TzFmM+tFn}v
z<!fPC87b}F^()kE>83+Qo6H`TljE5F8V}nm@l2dO!+@Tt5K%<-8p*sl?xlFme>fIK
zfY3^xW^E34mdMDIgWVq~HZc;r&l<H-zIjyd`wFH-DsF^%tUP4foalCfsBIqlu+K}M
zi4}a&8CEbA8Al8c*ULTLFOv&mpALy7v%l-ooLb{&Jmh*Io)Wke;~zLFv|IEb`o?&>
zI{A4WKC2fR@fa#EVo_3^NjSrJ!`zE-S~TCk;_#*CL)CTCo(w4V_|p+_yS`1KT}evs
z8MUwi%NRnih&F_Fgd6|8HGs71C*e)ss#4z;FW)6u{bCnQ7DP~)ezWHVJ9ndTFBg+(
z#$RpIALD)&Fc=f9c43Ms<K5X*k&r_DRRUOAiQ;{|gv;HN=@XMKPinIjhPj+}!IVe{
z8)r-N&K*@@%!{HoAvIuCP<fb#;n;_)la!GQCdGaQKBVA!V4~e0L=~U8u?-3Qq{t%=
zDSdL!$0sI$lb~(DfC|kboXSl<N}HYH(my!FQ~ZxHau@F~lcTjsJzuNq??O7iy5o)W
z&ZG|h^I+_=C2{Y*H)$Yjwy<VRxsNw^gYL<QOj{tGkXm}TUnDwNT9x5()Vw0|BUKRo
zzrg^T1^=Wnqp#LX$ETmWGT{~%1$WEdQ&0>MY`!jnC7s6|rrHIW0YRbroGmIjGNG43
zX|Qht(SSRfEdAE4ud!!`{eW8{4)Hz94Sm~kb=fH@Hg*FH*I6;GIpsPSwUVnSG8$51
z>%aK`ogk4?u~EHI3Zzd`-EwmMPXP)5Qjr0y-GFcw+@6SXpE_ES<lNj^$(3gz^#D$m
zvMdTX_@E%;L&=9$q4ky!=5SjN+ZR=&X$F9*!9Vekti$1y4l@!+M;(+A-(UBwRW@!G
zZJzJMe*TwK*gxX}2{vaA+NGbfZY^!JbNWe=5EKGW-okEdkD}yVUFD0WvEeOJlL@B{
zjf3S3UX6+B)3Gr-w}AjUq0TI=nn9pbMy@l!x{D0@M%G5l+DwLXI}vEbRKK^fvJ687
zdfdR?Q-BW|f*u=JG6&EfZ;Z_W2!bIy{siN>+Ahf<jd}ZvWfwww3GYt3A>9Sz=-grS
zD0$H7XAG3^Us_7N!5yHolg68BCi34UK&+43qN9N~R<@p1Liw70ba_NwNof%@y(}e~
zl2m};V=3^k%K*|yS&r-8ie}5&io|Gx=B&vIXeF8gsB;u{Q(ih_StaA^mR37&L2$*n
zf5Y@(MeBT;c<bPMvUBOty!vQM$U><k{ZW-^oXVK5ya@K-S>(?@nT#RuShvVq`LRn&
zyMjYlIpCi3uV@6|1Hj?-zM1@MsVRGHCDqvnp<>!C!SUhGwEyHE7?N{J6Mfm~tf*b+
zqMIHmG1~yH!XoTwmYKWvV<`#zq!z^HX#G1+n+2=qm@OqsCH%)NBQ&2hN$##&lfVw|
z4<$;<+3gMVIde^LvCLX3#-=Og6uqqkQNCRDGE0eo#`*G($!8bhzDLksQ~JyC>s%ht
zHb_z_X$r}?)C)@gV?vzXWJG~O%K^FU;_@8lxs`0)HV!iN3>|zEIAA~j!n-5kN+g04
z&KYwZ9i5#3BEjyP_^8Q5_2;?ij^DrY7iJGcoDXx=tB!dOzyvzDG+{`1xT%hod7XqQ
zXf8S%M!s@z%Fqc~zBtqEn`y^M+DjSI$n4n4%-J8<mGH^p-n6G#sBB^Xm&gE$QhM~l
z%QFU&#@YF|v<qgdUA9|M&VF9sShk^!q4!IWV(Qxq(B|s%vkFtpeirO@NruFVrd7vv
z(<Y+E3GbJ=615#|ZFZ<YI-6)AyW(sRH#UM)YE;<rD%|pjjLO_w4x8bsSbZVsnfv#$
z_)867@?OSC)|dM7<~zy1b;t9kagOgz-b=`W;N*|U<9@}Uij|z2I-9kTF;mz1%hvZf
z5u1VZE-@=0VmGD)1mbLc%r3&d$1b+!jhaW-8oJA7b-2|utr$#R<Yr{B14w|?0A(>_
z)aAeh)%(PHvAbtOeLm49vF>B1b1T#%Rko@*)pA%not|3q;)Zz@a4A+WDf`|%=i=`p
z3YLrhdZ{IkvtAV0H5TL;k|6yq^iCsQ?`gEB+xNyZz>`2w5HNm|5hcirdlk5|rQqzx
z$b38pmwofY-dKJ7#5tq)@uOo;LGH*B341|GzK(M-pV|26L?cH@zF{g|BAwt%%x>S@
zI@nS8w}ZkL4}^Mqe@4nl2GQr0Bj&j@D_c5Z&r?8cM9JLDUH%4-%ZNkQj|!Ebn$Da?
zAoHL&dbi$8lI&BeoLdjJ=dPFc-40UuKBw+w!FS9N+$bcwbNDNt!zL17L|+(KCvwd2
zC#tHy&fr<g=N8H5*HtuX9;zs4=?zNio~}e<xg_bP2g{#7SzW8D66`&pInZEHyu<pz
zd|l}Zj6LoTPQ?pu_aJE0n#@w;;5sb|I6jd#14)O|*R0o{YEZ(|)k;iF9-H1O;Ub<E
zH`ZPS15L^95D{$__#Ukj4(~9kF*e@he+xQ@)uGmq8V9^QN?D(lTem{&X@q1~t(<2I
zzORA#J-;F1?~PV2R282o?v&f@bA}+=$M4VkpdtK&>qz{ePyywkfVHyKowQiql|<uM
zN6w3D_=V`b+plcq=Su!1dZLL?d6c6;;&#!KW>SCwmo614fp-IHYP^gegR0KX-0*Ae
zzqtNMJ<1tLqmwfHV+JndHt8nL*ayzAkLnj8kqfqM3=<Xi%fJ3WphrvCCs-!zQ_f-L
z#qAH353l`kYSv#fm@mAihP|Q<<rr<MqlaQbE^hIEQ~(_$tu<)oXMYxr739ft57J(y
z{tmW)RMkces9Ts@$yU2B2QW8$xN&?lx8~BvFRqMu0;x$8w(Z-h*r#GYj2?uIs>U+k
z8HSTYCqL?r>T~`{w1*U^7wT)5IYaD~FMh*M(0H)J$sgG&jXijMd#vEQ-uU40FRHi`
z^!td46V>}fk6yw;DjLf+@8TaKVl?SNqH3sPz_9R%@*D83KZJa<dh+=NVQyI7msiIv
zZ&fpCO^^Q9b3|W|NewWRBDP{4S=8(5>XrdCDYO+r3(<q1a@q=L`2hV6u>)rBJP|SR
z-OZF;A&pLd(QUHHo%VB#BG$A5T=@<xj?8}h!$pAULU}>S(pq(M`P0?mFG=B$r@Xwp
zCbb_R_8{PDgJpuHTlQIhjV=jbM;@O{s7}lz4;udlzL`fqBcq2P|NI-xzmE0A<3<UC
zgCeZ2BdWegj$Tbqy#YxB133K{ZrZL8R(=7CkTS=;sYm9Ft6L4kH<UEEHtG)9J;8s-
zjlH(33GpC&1c|M|2{>Qsa*pTIx3K>h7f;a7CnGMiqB^Tud7Pf+wnl}uLX?=m3Y0&p
zx&C_vd@pcMO0z1zXUp51{&vb}OT77PB{cgO>lAt%--&A(Jx<EX!#;8HC1Fyu!Bs=<
z3o8u}9N3i-afOp=LK8DRl55XY?*B(|1Im$l%tFDt%H|cvvHSc#K1rnD&b-I>$5Q#<
z9F#}MH@|z$S4L&<ub<X`#`{b)S%2?>TH<8Ewdii%xUK(basG!GV42vxhXd<t@aC_d
ze?uDo&$~sZAwF`ACTq;DWI>S}7rShh6~#5viDmi&LID@sf(94jA<rymV;QEN6Uztw
z|DN)Quu={0pCA7H`9J^Z72a($VPo@0xfh&Q9%F4UJggB|cjq_$zX;=Td{^FP*5qU@
z-Tvh%TOizIkL}`>lfPhEg+$n;Gb#XylKK84H2U9f2yl0IT^0EBJectBR{??UFb0~j
z?=6gg#^13tPEJwp{P%hOXSbp=O!8Y4>;b4}Z!Q=TIDyY}1m*Ytvma4Qh*ULOs-nbr
zDobZ_^3kvd-+59>lOWs%*%HnE_1K^{iPELt`sDzYcW@w&0xrGJIKz+qA|Z4^<{s=}
zET&3b`OnKmXYQE)zK>&YYl$nv>VCwZ>M&`u@F}gK6Wj-QUJ0MXBHUJ!go-i2Z6cPq
zRj=8_XMWkfx%)4&13GrMU^U7IGN{#m4wVr?z_?zlAGJ2Jzx-i-o=#-Rl7zv^3tz%>
zX0XMJ1-30%W$?x5=fJ29b$3U!u=Ob2XdxP*C9yL|kj(y<hyD^Ji4n_ekCrTf^7zXs
zqIh7C)xBH!orXHo>v<yHoYUcFKS}M>{a1-n{fIOaTs_)$AeF2f(9)t6z9esSg=5A2
zcFxTR;-Q2-UJLn){L;Uk1au!k|H<ugJWJV>{}9BTpfTdow5fmb8_m(R)xg!^jYM0Q
zC-~g8KM9;zo^ZGvo>Zk0`HzNlk=WOjwAd^Tb!_wv4IFmHIg(w_94kpc2?*dGH~%u`
zWq14c!Vz&d2!nM>Ok`Q@oF^a=ZVx9Ae@bsilIBu51+6{)@YtoGqR=MQ&w1qP#q~<+
zafMO7;JeWEcX40HFP^yxxYO{~|6rHPq-okeN3P^<?lN&YmS_}@op1~-v}X176Vi9*
z_1(H0{x2+mD(}<lqa(usqp~F|4hO*#rMcaySyDH(Y2cfwPm-BVO<VFZ8lKtwkEKF^
z7QGKmJpDIQgTJIgT6S@{4Q`P#WoS4LKw}-_pM{jd{7NPf*$fH3M&Z$K3bv|wuGM7&
z96I^|3hInCMLK0qqn~op7K3l}%2cw{l+~%Tn5{ZX)k{l^hC0D~()51XX+6-=E#$DB
zBx2tQTP_0T?D*+3&-LNFM5BpnmtKMuJz<AsMtp+)$#Z+6?qGlHih^6Pg1WuhYWr_N
z1=f8u!}vft85|+g8&&$XJtcecgJ#hyUeYb~$OW^|d8?J;wLh)8#Rs2~YksIHJl#up
zEO*p?4ZrLt+n{Y;lPSA8=jiAt@alW*^Rv^no@8k%vg?qWG)7M+XScAJpjDXl3e)DV
zx3bM9s+(|aNHfyE5#SF3Z^e3Nq07#nirdz1+#$7tIKd2fB&)*!%Xa2$n)|FCpm}wU
zxg3nCfDDbp{?Er>?L0IlsS$3gl}jm6qX`oJqX0sCj6(IT_Ow+cO2rKt{1xx!?1aL@
zgoumqo4lXsvvgHQrvD*xjJOn}n<Y=J43?H`nG1=K!>0a&dytCJuUY6t;IrIqc#HBF
z(-;q#F-7;<nD*6Em`)sbod)z1X{hz>{#Fz@Y<aP)RKhqI4JK2rW5+Jih&UEX1oiH3
zPBoY|`BALbU1i{dka*<fQ8c0ediGd{;KV8b@*GQ3U>+UL(;536c3%U`Ow`z!*IeA!
z1%Cs_r4wdlgxATGBpW5rvA1kf{N}S37M%KMKSS&Ew@mbt0cZW?1-t!KRSgvtX$A>&
z9q|s`D9BN*kvf8r=C=jqCb1(GLdvaQ>~4aoqcTd8lWV=n1pzi|MMFPJ=}SBYLJ00q
z;~>=CAQG3!Wi|O*YOhabT!@Cp;mzP$8m*XRng6JXY1z0Qgw$3=g&znJS7cR`*gYou
zQXVsN<!FI!^}tc#X-Lqd$=Vf7tC$sDT~Bn?dw=w!4aJg~hCLX?Wk?;x+t(^h_IbJD
zjf>(WBC}291<pwy<E0Ni@p-kKIXQ*wf)T{UK0Ql)sp{kg`dxRA3EXEXSR}+Gyq+)#
za_#+|XPSSMj6Bs{+4_m<NkokT&tu)RYEPxaVMq1=kT<gB2q2W!2hcw5JwEkzJG^=T
z2CGL-(j2FEMt+PuSBw_W#bo%&Et1tZbY6xbHn6j9vnBi~*NcWUt$<M_xJ3yGJ4%>P
z&JeJNN0b3JbhL0SoQN?89UyEm74Phn1?0KEb`-C^g)Y8tlXKlBqd7P|n6T3V*uOH1
zUXR~DQK$moWb+0_jJC$dS%$9Sr`v;4o01m+>Axz>hYBd)Eoi#yztzI4PwqnjO6-iH
z2(F&;1(%tJLzzWgQ7aN-!`9b)OuZZ=xI~!8Y~UraZo4)WD#kYcX9v1=+i^isd+D@>
z>Wfi}?QSP1H*4V83FK`~)_tbL_tO_N=)Kcsgf6!+@)kWFR5vSQmJE#SMp@v!8)3$!
ze`H?U?h`;Skt-eykaLsg3?xd00QLdZhoGPG?MBO<pF~y@H-Aam(<8b!e@dw~r<g$l
z@-{*w>GPz<06>D;`LJZ*>k%-tVdQn*soKJs94Wny$<*s%hUKOavemC9WXla#Fkt?*
zPDlyQaE)6{07F8YxX?(j3XVc_C7AwMW(wd2*8y@cuSW!@O}Xvb^2(t#!>wDOHhSC&
zi%;HxZ_Akd@aoD?4maiG5}A|srNnLH$w!zUyv-lgZMpKku`LGDwHDC$o^96Nu>Y3e
z@dUufbJEjHXuF@cLyB{=sfo|GSP$j2hM&?6-clHD*L%(Eac@uQ-!w-s#sFQ{{4M49
z-{BNe4{{dwQi&H|=1tU&g{vqQ<dW&j?8|PJ>;xBRteCEi`MO9})~cT>UDJKQTyL{7
z*m0ejC+@W~77c$A3vKL(lamgr2NN(rubDyVaCvOtXNNk1_M7hj`r$#@P8WQ_)bQCZ
zo7f$j2#z=Jq4X}y>(~Lc>&T4khd8$$gennQ&9_^)0kG=TBP?KjsWewvBcd9NGU~-b
z1{W_xXt|bQqH2z4oX!9iWjPkR`V>=hUP0&&5WDj#3ua>_B2P-(FoJC|=o~FL8IkXY
z=-H;Fao90+9eGIbuc9Q_>tf>{64Ci2bz9iU<DmS0<)wM$={|Z40KDruRU7oN9LSyT
z%CYc;`X6HFyvlG$_?&i_x#~bUg!4`}&d)Yvx)F^hD>Y|EWZ%RC-y&p<MK3k!C0IeC
z&JWzqhxV5GP^&IyM++U}R$X*!eYEYnJ!Kgjw{Jmq0YYb?g>M3EY3EVF4aeQZDbQN>
z;GmhtEb{OLIp>)$7*e|qwpDBZ1GAE8%N()87<SyR8x3Y!APkxNnY&*}6}V4`IPDi!
z`%r%5dfxW*&Mp>`9Hh_5xz83xhGzv`r@W|E?_ApHe9#O)JtDHqj*~h8Pptsh2r)8~
zsY-{Pj|FCfnQ!KI1Z$3Dq%%C=2wY}&w>2XzUWLeS_@JdC)9G-^+k|UT>u)ss!l;>+
z0fup<FB1NrYw>Pe_t^5wRSWKZORJ(~a<}-3HX++ydY>viHBt?oL<I<O1eiQ-yFO~*
zU<cuW7^aJV;J8OZs(tm^;zE<)!hs~^H5!3-nHb?ecw=A?V$`N|=P-?F>9~I^4EJ$#
z|Fup;2k3D;d|Q_I@}&d^J=`_Zre3C(lwW3d|NV9oRZz((!lioq_kEU6(0$0*^YTvu
zCTf2y8uc3It-3@|h;9(-`>{z4HCQrR>}CSkgiP}^39KPi!-21T<NVD1F9~bcKUyI>
z_f>gDkX*CBhIWEDe4;~_S|l=S;Lm~X!u!QLMML8}Prv;t0|}#T*Vz0t_2uig9yT62
zgPG?=54cMwan1VPaX+Lgg)l!ONB3o@a+AeyS6PReQAm_Pt8dT_Phea|8~Y17pR^I@
zi;TvIIJH-|e&YralfIiC(lMHiw$7e<&#r{@-W6c%WM+5UaGKz?_*HiIN#v_Z=9VAQ
zc)EDjr63ZRYj2EaG*A41Mq$5Kn)OJf(~_SV%FJ=TB<Hp*xU{0TL*M){2J+brVER{_
z9|oP9`)uWYfrtq^c=Gb9QwM>jS$M>P+8u5&+m=M*%S%E3alsmWYpJw!X8NPb|N6N9
zn3x8*r~~@_7n=N#!|&IQP&;qeL&zu=CbLXcHHXo8I^Ll0;j_e;<qzS6@zF9X8P7Z3
zYo3H;99g&u(F7@oL+Cg}<^|sdkYAEfX>OSkHsxL%thi)oe3T=?u`CH?4kze*Y^AwV
zKM^a#2im#qKnyW@E^Mw@&nJk$<?RRqk<J`umx3T}*h}8m-N)T`(QmQDaZk;x!IF%|
zKw6`iAQ!>J+<pZI6KzL{`Ht(B|Eri_c(*GOpsI%K1xS4*@HG)8HNQpn^oP^{=rnCz
z=DmXZpgNQ}BC1cDwVq8O6AMrKa@31Np#pv~6*T%y4rbyae~y_ruNDGB&ev=<1FA{C
z!%wY~eHRZ!-FBrBoC;;q5!DNdY#$=wv2JH&0Gn2iga7h0zfIz?!q3kP0BV{=sv-L5
z6ex&y^#Z4%xE?+;Pd{JzBePffhQ<|ke&W9lGzV4S;$mgx+cs1?Z8ZS!hN(HGKk&Z$
zGS*@K@eDQLqC~UTV`$Um9fqu+w;7nj89B9nJ{_HviL<o{wGZ4cr@EYPGF6$NZ5djH
zhD<#rwfc3Pk7vvNN5HZ%${h-@K$TAahi8Ypx#{su5(b|v?NPJwBMiJ6SUTE3P^r+b
zYcmq2dbKW)ZQ%Sk=RCjg@>qr4j+pj$^$4l)tr-+rcZVQ_;9G`jj(`Ohn9he#O?W^B
zMkDkT5qv?sw{(E5`OHg10^O7zC4!+iP<GSdYJ9Ps;W~F;t9XCviatNZCaJye4VDfZ
zT&8;@QVXI}!@#^7b30pbQ+whW{5c}+6++ATSuL1iol#Z$TEC~jCniaH5zM^b%QHa>
zkRg`*#jLpv7)S+M$)q)U?=Z@e`TB{zSSGZbyczFbDt+{)%XMCnt38+RW`Bd$2-Y07
z3T!mSYX{b03p94B-Sw3?PZv324UC&$P%B&opgLw^TxTKEmoU%WAVemR*dN4*SAop)
zFpzhl3~MU}bE>mJgDvHl^t!I|hp$7LP91}|)svSMh6r+!elor~D5*Kk+C#No>NU+Z
zl{z3@{lM|ch4hE>_J?eXk2mP;CvmtB_XRzEwTuGOma{(cn0z?2+CvGF6nxlqenJ9|
z_^PEp!&}mx_x~Ok-nc!P@<rV0pXfmXUT<Y>k=@!2J9~`gP`RX}9g--%#FvV#gj-`}
zXK%i2_oLof(f8e}z|KlZ7A^(z1~}lHVzd#{R@dT5r}kOlN4^+vTbg3TKCGOdbe%`m
zdW-s-QxleVI4^s|hg(sF1QIA%W<tL}2SeH@<HN-KJceP$dK7M?`ViVyy|(LUQnt^p
zseiumK7H!^0WJo8&yGHVk*s5_XZrxpG1GA1)v8-7zoH{m@INO%78}09%6adWz053^
z%cS6p#SAZ=v1Y?n%2_HF6nEG2t=e$5QJ9OPI^A(Iy{BqIJSgzg?de<%;#^v~rNX`1
z!0mibeNxog+{baO+NHt?vsRL&1-0`1`SC{XXKR|I6w%jrC$_ZC=Cst<Z!~J*sd+jy
z*Qpv`ORjXGCD!SKdkL4f3klkb*J@PS=Sl2SQbb!mc6F(X5IZ-Qp!H@B83fX<MHv*p
zjleW_CiC|*{Ob|}aSU->y)&8PYuDwi{_`b>S22o`o36*tm_|{VcrW~#BVq@M*eJWk
zAs4eOX$(|v`Nu1Q_p<<5o@0a;VSj`6QTIYuRUQ4?Ww|@6jlN_uwAXZ??oi5Cq#8^9
zF4}DmxEe@6!xVk}1eo%Wc|GA>ra9H|^t)B7jFTpYW#-kJHh!D`A9Y{h6;=0t{irA<
zF`$IRz#t{v9l{Vw38-{ScQ*)v3{oOU=Kz9AcXvu7(jkp>_rQC2;`{ikKj2-9#TsCS
zIrrQ<=YG!K`?EL6q-eSB_)5AMniS0V$#=V6p6_1JaZ#j8?GoB297qqmWL}aX^zl7L
zz95<itAtc^ht{{`b;GnW>_)Bc(*16u^tnQ1St7S>V~98C)`-#*t2eOETgG^%VTd90
z@<xUj4%nmez0O@26Q3~|*YZt0V!!fE<k$F&#xHb6-|s*rJQeR2+W3nhW`#{R^o>?i
z4<8GK8x;I@sScxqvi<O}hS6_8!8?4}eLgBJv17tf&-rJg#YXE`-+406SNnMiynf<Z
zPp=PgK1DvV48eqiJKb0elS-rc@*zi+^`l;uLm<!r2QTH&=KV2Grd)}53$J#_D7jAG
zaj1n&MOMEyQ#hk8K77ZN&psHQ_?4Q7=GD-0f@OY@>=2#8&{VDl7mEbRxp_x#3;u1$
zY2`QxQcoC7Y(vtm%>^!du`F!|GDmm@Bb{(EA>xY<O<CsIV6Uv^cq02U4XGZ)CcdA;
z)5bRoj+UyG%6)i7DhB!&Q|8IQ-Ct1U@lSdQHZKWGn3<c-Bn#@jG>o0*LF`mBeC@+Z
zY+_;)NhC#60vR&WHg1?~anpE41AF#tq@t%!UnbYvE&#eusujm{(QFHMBC&JiN4oA(
z)FW0(vnjm;2qt|u_U*KP+X>}h12kma|I685IL!6!*Utg-;T29yf*a(ZGaR+GKtJn1
zjQa6><%P_>eid%njzU}1icK3=NZ-k_MY>U|G^J{`u64_968DXM;r&odx2cDDU?V_h
z2&)A-UEM=$r2r2>n@+T?A9u+8@b%+!Gz^bn;3e-leZJkW?YJ9W(v8{%;a43B6ZlHL
z2N}>);UdXiH25pDC+$)@HK4v?Sz$sl{(_AK*{LT=K!q8sATgkv<ATsbUb${f8Ao;@
z$}l1jgP8>4tE@~r4qjm10o^rQc2RfoZu&&--3=8=s+|wt<}UX8D^M6eGt0%tXbV^+
z_)v{$x#F5+(C+fb>a+x8H(~`OhNUV|OKiU8{@i^0-JP=g<u(-zOZsAiZ6|N3dK6Xw
zHZOeqfe@qVW%;6d`?bC#{;KItyR_``9XkP0K@u?mjU8W5g15i%$vCw#q{r1y|BLnb
zb6v%G0!moPq0wv6#@}D>1JH)N^C!ZvMV<4iOPyP6C~T|Tluo^}?!jCmHiUo1Tw0V1
z*`HL(MMxg7qF{!sTID?;kG4hThweg#(mpdiQ!^`)p#yTr$(4A156zKz?c?eThg}#h
z!LQ)4pu%AGP`8t#$!)OfT)NUb8|uB3*3e;L+qCuBCnG#Tie|`;gW}|~`rRxsw64_4
zgY5cLC)@5PWQmB$1R}UvD;(Z^T>*D45MImUoq?}|9oR-yT*pgM@TqtL`-UDpFJmv5
z-jkNb^4vzUvxfj+Xc*2e%o1w{jGgbovJpm7#k5P}G+NjSoIfh!BqKtU<8hq#E-NAz
z-XnUpnz04FoZA*@(eBQZ51(d_B_-{h`mQ8q?f%xluNS@tTH(ov;uV~DBl~(2WsVH!
zPd&%cZ!MpKokN)?uz+C3BDormz*l<6#b-oQz$q;I>u~_T3kUA{D&XJ8!&an2Ng%ez
zKmHPz{t5d7HfOUL!-6~DzoN1CZm@lzj%M*avpyco*w>ls@`@dtn!Oj=spCsnUU9V|
z)qoPVnP;^kjgVWr+S<PCTQTx3R&SNO3opg#NcC7FJ)Yk78HEc5Xu-Iiw7fo%8K$47
zjlF0%7;<vGjwnmGi4@qb+4iY%Co!Vli){82Rm(jY_CBAS<(+%)RiPxj8*tcG37Uk|
zd`!;qUCoJ+Zln>TOTig)Bpr;Q`;E8oPGsltazzRtY@dS|f@gsz3m+tYbc4P*uJqoR
zvaW$xWWxzAbc4pY#s4<;hQK*+tDCDouG`jtv$;gokjy=3a_mbQody%vJC9*tg>%#%
z9+dY>w1d;%eJ9yFdd$0ang87FS<t1=QAz4)=eVA_qRvqy?8f91=<a|d-lYAI0vdIU
z5&Ysqq8k7XmgPu-jNnFBm&XkiiJeWDs+IAY+`0+l-yGLOFLqjpctXdzMM(^3E`gOt
zw~9DEhrC#m%vxJaBW=%%4GxjNF#JDP8#jpAhvez%10KiSH4PM4*|`~R_~`E}L_t6Q
zEne8A!bg(#XBK=Y(9sS0iUd(Vl{V2aX*xAWbbHjoKaA%}vi1?WTdRF<@;g_k@`~MB
zK9AZz!y9$npmMdUXz=ox!;1B6oke_k5Lp99nK&N_=trd31yyV~XZq%R!Pf~+mVA5H
z9{v(Gp(2~Q1N8QuP0m@tH5j&tbaomUR_EZ=YdOK>VutY(Jn>drd=`i@gij{y!BXc!
zh<=6lxyvyKlhT|;_)@F5^~7<E(9c87@lTj3+4WzKKfXc~)V3>z2R_HHU2dYi!iXR1
z=xqgCDl=Xh(WtABNrmJs&@;(U5K1OA9RW5_Y{+P?%}+)c!(%TrFpZRh5`zq|y@Mo5
zEswXRr-7h`1)a4j<QCK_`)UAvQ+8ckS2N(5n-c&+CcZ-*UyCjF1q$4r9h1>gp`+?k
zK|H0Cx)~_Yww*2+l(3Dc>7l`UN)jTFsTbbzcK275#20icY)Ich5Cx(pGqaJ{;X;KZ
zb~ip`?667U{AZENre=lLse@;K5w1F3=2aTi9YS|`Y6<=xA(SKX_3n#nUT;Tq;rOw#
za{9D-B+r%-^+(HaibtX<KFM~KnKny@5~#iM-PMd*pEA(0B#x#M2t-iN<IPXw9RO2K
z=f}77Ne35@BEyV+vIp-5>n%7mgY8~Ai@o@PbCk4)R7YXdUc!7v?RUmm`>{*iJ2JYb
zzTQgDY0SpifhDW;XeTt3iV@uZViQa<_{GxG)oS!H8!j|gxn4J*ifWmIz(^W`B+U+s
zcunF^qEdnMIFJ$9n1`$t;RK=#tlHsJCS+&XtVk+n26D-?Fc$I*DAuOrmBGa`;+n4Q
z^Ec3o##Ym{J@J6LYcLxmM7nCurdyA-hrdW+83y>J6}0H+ZFy-nnr@L#fH!#%q=SKd
z9)i`eiq1Orq-L)&@MugqM(A7u(`ZnSguawT$mPYQV{L9kDB-%Pl+_!NiFe}O`1*Bn
zKlAX09!OqK&swT@S4GkpREy?!%H|>d4VVSQ71-od*BVvbzwMK}tenuWIJ28$K>aNi
zw5II9-v7vqzJK+|QtRcw*Bn-);R{I7n1*h0@%gv<aEcPxWOumIa|UxlkE4yb+wHRW
zbW6<<J_j@*<oQ;i?7C7$feTh&=T$YJOJywUG9*kdU*nuN#~6L2$kugtdET1#rM|h+
zs(U|Ou!Cujt2{5|UlvPT7!YJ(=u(HjA^4xg8$)6{jw$RlOv{{q^>S$|Qz}<EFYp^W
zbmMC1${z7C?DNU*W7$sMjc%-isSsqHm!zVmR4CpH&VfC!J;;J$QhTMSuV(xok{c}B
z;<RYd$aDgJ!G|}4<zHjKfF5R%G<p-<M8hJ)WrOYLVx+tWT8PztstswpaDF3l7>{h4
z+zcEouM?^vvM!!V-xOuDp<t-hmY(7+sZ#16=-bq&`T?IwkluNDllL=jq{Zudm^*Wi
zOU)IKs!>>PlK>cz6a89+`}sQ=^gm@B>6i@ueCgRr?Y|v8ia;DLT<ct5IWdG?s53E+
zGm4KhPumEi;_J0qZksOO`nfD3D$?>K)l+S-=6)}yVLsaQyH&G>f6<T3JAMiDl5#k#
zdn*6J`|vd3o4S@FFVq*0^2X=h?O|&trX*`SrbdmbFu0|IqL~-Z_lj30e<rstPp3R$
zN@^<1CYR2>qSkys^tUa<4G0F>y{3Oew}00g&qQvDzB_*YIGxyC%vB><^E|0`Q@cAn
zPuoD(k7@5_!GiJ|i2zo<=aN5r5BcnASS0Hkf)in`mVYR}_?_fdi2)zv=wuH8)_)2a
zs+*?Z#Mee=)ZkVbdE(WWuxM4@O)aOcGxrD+qHU8ju&K{7V%X7o*E;>c==rVR#_4yD
z7SP60^tv{`O|39S9RB((7srT{oxzF@@5{HEM{Bo@xEI`(_VTjsThRUcw&1`pWk6lk
ztPp?qFY)-Fca?UT#(;4)qz755bFu7ib1RPaA@;RRaZIfv)8ER>f8pr=kf-2DN#Fn<
zrs`Myhlc-8$@ZTI?`yA_y6vfNT)!R7Z#?Or<9J994z7z{ed}L1<bS9S9<qULO_vbp
zW&bY&{VxNf>cRwE{2peE=ig`YKg0O#L6;nuh`qi%;os@n>tX!%CF=kR{wOd1rIdd!
z!{OV00ClKpZoaAZ?EQ8{pfd;j&0(+@NI6&v*8}Dgb43nh!-l4<WsS*#FY0m1Ryp$(
z;yn3VYZ~j2WzWZxS|@Q2f19XaX)p|AZ`{Uz^t^!ZrF(r69~n6Zgr+NR@t{l9uG=<5
zFCM<*Ev$Nh8=+5XwQ^c$K%>1q;~jDwhzl%Jr`m}1RJMwqt;kn|&Q{p^0&(GJWl8_m
zi}ase{A2Q{Gv?6obV>B<CN1;`xBF)lB4@&U4vPZI-+wuBP8C#qUwNpz@HO=nRpWVO
z;mj;ym$;(nU)#oqqJAgdOmbdCd%vA<cpC5yvj+^VqwCD+eb<Gs3b!W54>b$nY&D5C
z)osQm<;+A<kkxM?)pwDvHaL!U1z+agJ^Uv0Hh5_>+Z+FmfFh<#^yVz?nHU^-w9eNU
zFv-4*fY6}oFI|{RGoWa_Nl7!hKR48w^M^h?QvNKgMJl#oDrb=EvN=&hW^?iZq>;G*
zPA30J6kVHWfJajd$fo=T^nAS=cYU;E^e)mx&%23^I9{%@9r2%k6C#=b_Ea5;z(okN
zo#p^K5ja}pUCidftlKfNKvDpV$_*|TS60Zbz`xTHg2e+A|5xDljjZK|E_YL6DT2Jy
zx9x=Y@|;@TbFI@Aa-b96^Q|yD#vFu4vIj&TY#+#O>`k;Db?omwH6!*EF2z19q8V#0
z7bcTPd^ciaRWqQrD&|7A!Kjt}$~PD~jJXhFs=5(p+=0>2%s<D2QXT{R#*$K~_PQp3
zSww?GpIQl^>hRb8lK+G2H&~I1W{~3je_`McCI3*q-L$*cU2p)i)jA$C@^$h&+Tc~*
z8qwP3E;|0GW|B}D4OmnOJ0G7EAoD9A9V<0gWos^VqE|}crrrmn`WE2b^1aV-b;<jj
z&X2dbl%rOEj^s`9httqyXJ>0b5fbTC#k`gyJr!a<uiF`1j7?>lanDJyCs)^VOR7&y
zvfrIIqGMfNx8z_4p{}LE6%I?;TaA7wI$Y{k^F|<UIb_ptHdli!5rwD&MvX+hYubbr
zwzIl~&~E867;71@GKh#WF9%$~RDkkPh57f9reC0F+uE6voEiBfDp*-j@wF2)k$1M^
z@HR65N454QmkXH#VNhQlPG&wyuuZio*o{D6pcHcHp^kgoT)C4j@{8waJK~~kOP@(X
z1Z7Al+Fst|qub(7Fapn3Ob$D&_dc&puF67slH%=dg2<6&GEvpSFndT@{Q7O|nbJ#j
zY<Li1*99PTP6WnH9VOPV;>v7vIO+ZPT!6r`d1MfLit>Cf*@Ntin9l-f%DMD%=|?cV
zDFqzHbW3!bEyH)yDA%b<F_XXZSw`^S03Ux#p+YM__<!EL`4!<<x~yS4c4vjxdLl0G
zpd(>k-71|Tmp{C2r&V-@2B<SR8c1%{o15nbO13%T2+ahMn=;SnjfLa&FmAS-!+Q8~
z@n5$*!0dRV&_r3eCwkYCOc#Wb?Yq26#2Nc`wpe#ZZ-mA>mEV5q+%1h<cd$D1N`D<>
zHe2bc)8{HI-_kw#gFepn*U*nJ5{_>msIJMe=lDuaG2wHvpz~f*!s+S4l^nNN6Z${m
z7%B}=u_(mEM??QzMxS+{;RoU4K;Wi5Ze2h{+>4e8Y&2>B&o>h=Tv|#eO0aL`I_=DN
zX4I?Tq+Neu#An*aM0D!jg2R_6E-8j#{q?2y^4T#|ANd31r2;QU5o^N%>xyY}r0Qh(
zrb3)ngHK+fD2mp%r;4c{$zmRQM3vJUx9dMyY#frvZ~q~zw-RW9ok29JD*${m*2hb-
zBb)kueb?iL;1prq_zcv$Hl6Pc=%N*pJ@SqhZWE^6xl3Z!f!~dv4tM}kLh5XVni=nl
z-5@~bzN`dn{J8Vh)Oagxz@rJ6N!z<{I6sXbu<<`dDaca+ZF^lJyTJ#cs|)PjJ67&X
zA2sSXsiCBvMfQojn}YpT<-u;(!s>`sYhx6v)=`S*dfq9KeQ26HAob!g+D{hR73@Gr
z9t|DI5zs5I{G>Z>C5%YeA%V-FiEK#gzkw#<=Rru#eFvo$dR~SD+YILYD6@Go+lvpF
zr;#LX!*HcESfh^n5;vdOfc`oj<N#peyY=K8o(7@%9^Vxzs!dbeo8hirl4xFMzv#*5
z$vS{DnEn1zYj9L~{#(%TZpq}L2+qC8G8*I<m~-;n;5d<9!$78zny&QqE7U$5@*2q{
zeR)L(H4bN&Md6T*j6Zmbz5q-&qfE%O`89UOj3O#^>pUifsRL-90fBpJNJq;t5UcNB
zX1jZ8#w%dd_KRJW2FFknkflcncE|e81AW4a{X_vuE|a8{7iR0nS+Oauz&hVGR>$RI
zaLibx$Dyf@LJzkVDRwxqF8|22r)YyMR-K4~m3OXA&BVD^$@yxAF`(6B&Wbq6Ee`++
zbw0XX4HDLQ3HLQTnbh(NMIoBw5d&Byd^2vn-Y0XMgnFdez$NGCviF<C=5baP$o89j
zfC*V@O4(gtbIFhn<4sjZFELSY1wdQTbFwIUy=7F(mIR;Ua`%y_*h-S)^mXo>)XUZh
zm!pO`psR4cR(LDP41L#e>^*dW1rXi`h4$h0Ea}nAiti1Why<^Z)B4NB{7S<wC^m6+
z-Qq=x?JIO%wJ{FkZ%a0yHGTOzknwDO_knMVjoh`2I(Br6m=E~}n*CoC>ab^cXt1LE
zWa772Qvh<7Pcu+QVnANa_;{wzjt=j2_*|ai0umF|j{T@V0fXCZ2cPf{h)d4-`K*|}
zvTue=>I!~kiraj@=*@yeVk6J^xWG8o=T6^5&Q_uF7c@x1^gH%g_IDuLP3XSn%CA>a
z#oFO?Xi6|Ch`mXV+aPEInL*19qVyOLx!BpRCGm_QPVGB(&RA7#O#?Y%361d5ZSXlY
z_J4$;A!s<6-`8bFWnjvUMO=kORK69t?le&nIgC4BfI>NMK#K4UqCx1=L&zTftLwzb
z_|DOEN&0oN!Tld<rZsw3XDhmJRF6V}(`RB@*Xk-qz2nID9ksqn)j+1<7W181BGLm9
zbZvDSY*0|k+0wdr8+%!!bQ^eHDxhr*W@KZoyt#wJ!NCdVOHjV-U+juaWB^`(4Lp-i
zD%kCQ>a)$bRA5-aWh-Id^qhZi6OMIOOxAnL9A}G(Y)JKWSk=cn2J{=WNW1yfH%K{(
zo%}4YBH6pQAa?tu^20SowjSq_VZzWK86D$vYf*+bcgg$`7)+6m;|T+-V2T+60%p8i
z^hvVftv1uudBn>>L=i1Xn=^IYR<NZz^R$kwCm`2)r(XWha1HYq;6QQD5*KL7`$dku
zW<}r4f6^@^CUfgOGn=hX)~a?Yg6<m-o{-W<U-yhYijM`%W<@*gi4RETbSK-Jx`lT!
z)c%H$o)8EgY}Or?dx)pmd`}(OOl*%KyK3X=xp^kN37RPP{TT)#YRD7wjt2(bg)#WA
z;-Sla&YW&L&q_!Qs(@3^5oOK65Mz7Lsn^A>*toDG=bI|(u%^Kb8Q}<Yg;p7ctU@0R
zLX1A3;kY%DuasJktBcr6$5kFC*5RIE(L9J5Z+U{(YLDiLHgcUlf8}FhNg2sgYpZc9
z)u(!Dgv9?Kno%tdUr9^R>tf5bfwzdlcZXE#RIl+os!B4BUgdb&mH7O)kIgEn$cWx;
z_PhK}xZ+9eD|!R|C*sjUmPdZ*mtr-7KR?KQy4N7nON#oN*aqEMX&5sP<7KOU+bugQ
z{DE_K4jaON5pN)WMAJ^iPE851mg8oMI9wkc59>k{3xPI&ts?*KExeP}LF<tuS^WS2
zi$Tmt(IGBf1Vi^WD&)QfKZie)vXXo*;Up0U52c~~V}WMx+LVHIP?}*K7<a%wD`)hT
zEodJpzFG%nCg>#!7?~pFgvsypKn+u$+F#3FIej)&WRw^z&ppp?L?KL)#Vh_wtInfL
z>aIh)pf%(0oP!-qldam!9~3w;eEEBkA5*oUwsmEVNM(BY%2sR(3TDmw4Uim?1yF~H
zE{Qur?@#|g6K>^(^PjCOTOvG$Geif&LhIc3rJ+xRT0=Z7L;Hap2uBfd`EcO<`8B`}
z*vvC}i|lo7haTQ04n4g2%jOuQo04Hqz`}vdr^R7`RqryAn5JSr-t!8TrE8UBW%V<7
zhd4M7LIyu$H)*9Foh<J<>*@^~lBbG>NfT~@_qszkTO0fm-&C$2bFhDK3Mlzn#@hQZ
z!${DHGRH~y?b7sUuvxyi^(OpS#xoa02%1h8_2mSabxi~)SYZ~BMiG)CrgQOhJBZpZ
zP8RT(u@Y7=V&Kn9F0bqBg`ET!@{ZY-AetiZ>$v!MmRg31@gc<lzQ}rTJ4YFcz>!=x
z-3oN;ynH=TZqRWrj*%SY74_$bKuWZD-D@Y5K9H@XCp7*#0^UX`;xUXg`9&ra#|Bqf
z4#m(LB4Sq?lQB>Lr?Fi<#j(%5+=O3R6VVtrO0Tqh##7p%sQ>=ajlSF`BX=c4L?Kyy
z9LP9`T~n>)s3PGuHWpT`Y|XG@WnsHouKL!w@La}3$BEf$j0xWQ$L2G-Z?RP^q9b(k
zsFPj7JX=^MkTn)YiHylk+!=YMsA!v50ep1EiE0cazTvm8l>KLw$MzeVRr%1ybo$!`
z48wQ5iIGEHK<}@BSTzcH|E4hLk2e6Y0lml=tlBD+WYh?Q#|JR~4=ch9kKqz`k$Pw1
zL5~a57Z(>RYql@HV7@?bBlL!G0=>t?aaGEdDPVX?8lq~g)$Byp`0j22_L5?u#8%9n
zp*|q(YK=w{%GpGez6tD*56eHo1%~J)zAr>vb%E|g%(L;W{F?f;+eJl0Z5}JhdPkqh
zq$etyD)g1cq<!GbUELvUh#4T!I`emYWnGx+RVLzbP$;Vm&jptk(P#_$ndHeQ=tLut
z^1UM5$OwT9%8usV3jDsf;~a&D&-aAcvngV?WXx|R1+Qy!DkY8;+b`S+8IX?dU`6tv
z<2<l37vZ&;GBbL677F#kIv;z<OHbY*recaOFkPVMOGpZF$S6baU?{t>P6*BE=dW$w
z-a#A<8r=)-T_58iqzJy0_K`WdlOHPM4NIa4m!i9b<$|3`b8Gu*-S^g!{z+T59T=TC
z6>Q63x-DGtm9VusdJmaD7alU<Nr(8E-zDk^6K5l=*&xuj$Ci5ptojX>pP@tFx$1Yy
z*xx?pe&E~@MrQk&6)_~Goz+NJZnrldOi#&ERPK39dHE?suj~LeCap6<uq^=BK=x!@
z)DDu{k?ZZ!o;Y^VMzNHkDGw&0r3Fy$MoEy3keTz-$;Yj(@Jx@SP+ZKrb?vWyyQz3j
zAKMy|M$F>D^nCCyn-hSdyc7RrtNUar;Tli-4+w#vzY#zWy9Ml9)+#R&bDpCyJG}is
zACpuJ&xKtAMb=cvBXhdqrNx6IYb4_P+Sr@IH?r-tBN$ql=v2p#BJ1G=u*|xh<`SYT
zjc4yyIv9W5rw$q&o-4K~hi~*H@{NMkvEE-F&eSep2kU1>n&B6(W+Np$k--qBSvR9_
zC7NACuo+zA?a?rGKRY7>zAn^#kvil+DuAXsQg$Vt3us5CxUn7!ma~hx+gC*rbreDE
zu?G1OHp7ntjDQpQ7TD{&f~^|I>X<`H5I&FNGI6bg$H)ct$U|_K+w~W-Xk~VQ<2SP=
zN&US5bvL`umms`&gU9`~IoB%;M>2bw`{+h&T1WX=c>3Y^n>2oGdl+P6ct(4xU^hR5
zlm$)}L$5;hO^0D?WJPQVQD$tS&tI+@^{0r$_{Msb7fN2h7Xzp*3H;v6UB;uU@V&=<
z!@+OxxU1`zweuq~dUB(Da5=tOhl;5e>=<hgsZd$KZ0eU(o$w=jYavbFCdA$7DDDi7
z)UrZOm5w0|Zr81V<BC>=CUdfx8z4&?^?>aFQpmKic;nQuYqnb*-T=}W&URNc0tA4-
zLX7H*^wL3*zI-c_Ij64Iu0{#rAaD6kKIN*+%0@hu=v>XRW@P1VD#u8Hp6O-L(Jo&4
zN0-Iit?$_d&Os!-z5SiR-5xX#5}a7zb0wd?5lxiPAtaVj;x@((EHvst65MRtm?TB{
z{6}*^-5cK0xHe~v^<PF*R+awYtYz=rq)mMrY*@7MFJle*w%BhXc&09}4R%sI>y2a0
zqe=*GU{hmrfL1@g3!I#Mo^%E#rpW+qRuTFRn_Rm$cK4Y!?3ppx4&IC%h1pK6NF`f^
zkYBE5;MMVuj<5<etfZXF!{ND;%WZ5=t$c-j&o=|NVzg{rLA1CUogfWdDfJQ=EPR7%
zftmnv_~g|NSHJKQ-pBB<&`rLvh-cjP^R#Vz@e<D@)iZ1uHfUm3t5$UNoB5Mwy!Ls-
zW)!=LJv%7$cp=1d_tKO6MFvTf7g>MZ%Wt@(BW#0FuSW-)9w^-75RmV(74*GKq<aYp
z==Qx02UVfj7xw9T0W5GSo5I6h+nH@^1-`ckV~h_|0qf<HTcu8T7%AAqeOv}kyYsGI
zSg&iQf$q|FKZNS(BDc#2ms{yuGoB6Bj>BNbPw1gR?{{AwUmX;+<pP+E_07!^Av<t4
zIQ(u>OVazbpIbEzCIT8viBX31D8lw7hbthA=-y)|B$aEpwyo;y_uLklY_+zzDU)yu
zt`2)wMLIiHM93_K;V8!#kL~F`0flS8*RQ*G>9A-h#SVuT%In?m?1mQDF6Rq!DLPWT
zj~EHdNAq<yC#Q_aLCdMxT><4AZ0*ciV-4fkmEz2GOEE%L`EjX08J>WUo6W5Q!bPrK
zuk9I;k$(T%wi7su>Q{&@uruN!TWvrV?IbfC2NSZD9pEW*@BMNqy2Ll`!VJslo-h#(
z@M^sTqi<<-QFLgGJ-cUvl<6~YxVLaV-xgB4imJkFn}X-NZiChbPko5h5)UK2`oe`T
zDW8php7#jEv4_K}VYglD;__F@dJx^B?*iHJWP<dCZlzs)9^~x#Kjqyk*uX=f8s`HX
zy7<};Yye(3YD@7lzYu@<*Ao!veydF1i6@j;gqTk!Ui?LJ;VX>JphbURXw*zl>ovi6
zgrVi_MJZnnKO~?CQh#gb-znXvN(tY$nJ66;jp!_pLxV;-kG+$XO3^@jiT1#zQfipd
zaAvf@rvTFlLmuOuc6$Uu{xQkgNM6m-u@w2kZ?U4COHUR-UzZ`i3l+f!LH|pz>Mpkx
z0d4TFd0cC)vTsKc6DEX_5Xs$;p(@ANd7nQ^n>$4xMiGYEmkRX;?U;eP5Ixcc_kAL|
zHG-xmep>x00=iDU6|zQf-Bu3R<6S)I(jXp4!%2v2d0V#WYp%;dkl<+QIk@4*p$cD#
zq>-7#DQ-5tYN9MZKzFrqXjf<~Oq4Y^GukS|q)y7w*}x=+j0A7dV!8FF=+GgIXix@R
z${#ba^(hgLSh`8{c5ZQe$kD^%o0@mHpptb+S{<tM%s4ed>0^sJs#Xs<I>dxgEKdj?
z_^PW-;RAbln*+Y3v%KK+9!wXQ1gGBcV|H2(;wyDMgYcc;swQdVN77V=pL<yJ{FPNC
zqWhG<<?3r*9Xq8V-@fXzXR89XoHsb_wtjrA$m8=0;};UT(LA+BnWk%H5H`q`1XN=S
zqsue%gk<Tg^&GK?!wqc5UY`@&>FV(Smy4x3=>VZwLdo;7U3F-Za1-Bh=rJkGJ4ep9
z)^)D^0<@BJk4~F+d~WfXFv8ZBUEr{pLhFVADYcW>@!&b4b`a5j(tZXzixJSbj#7JY
zUYM%gdBK*hFLqHFqTSO2aoM~4iR$wVTs5{rrUE#*ZCh-O<K-8k5l90be|qbaa5GW4
zg0jYTB_nypLzs#0LFqLGt7u75LPP1@>Xe;*4SBtH0HnpIsp#&x=hThFyqLA0IVbm2
zL7Sov2HN98dFha|v>-T<8_jvuU9oq9OFZ-X4~cdj5fDHK8Rkd|AVf&nVTOqh-sIVE
zRPvsou29Gn?E``vh=p{#HEPyfePPOUyor6mmyMXt<{g(~MjP0H<>{#dt~q3rwj29v
z2MVdB>2T#Qkp%_~e4~>|FNJx}fAO)W>um5Bkv}~{z`x0{#v4M~;J>c1r>v?p?{O6k
z-<}A*CjJ;xNe$0mLSs$)>QHwIEt1&k^jY<o;Sgk;+;YT1x=-}Ww1c8zM+F@R@(41%
zrdj4K8mRf@(_MAttHJ6ycX#sf{-loZ;1iOKB{wT-tOtES-(FtCT2uejk<QotA@h*0
zds6ovf+A$)ei`=RH%q9cWUlw{63^XkCUVo-#tdf53A-eZd*K}pSeq?A@I!ka-8*=c
zCVWRN`F1^mJH8T$>?VZ~QM^g)X`-|)Q^n3L97jP$_s7kWv&Nt&0CX&R5?ce#0HY)z
zN509Ikt^`r^umm3OtdKZ(?@dcno_G?(i##{u7N)y7?*7|!*_XVv8thQ6JZJPfg&?q
z8~vCswBObf=JqS|%Mr8H+Cl;Xbu8ba$%20@@prMuVpPMqWgz2;QB7F^2aj*sN+>3V
z{@GM&0eRo3#UlR&u%|Mwp$|Y4vF*&OYxe~sI^bs^YMPyvmi9c_*gHHq$0%~k?|=wn
z@w28npJ@B{g5*#^VjWT@_`6S!wi8amI^`a^Abu7+(fSdFciloWm!o@4Q>Aeb$WGh(
zhS~GJiu#vULcE5^8b=nF%e~fa{j9s@I6b_g-o;*km=nd6=B$K4|0cN71|b9VRvC!|
zq<^`W{zhp13(`{E{6Pc8>XGzZ?*AsqfGH6L7*&|f(^v2R9mYdCKO|B@CZ+c+^NaCk
z>guceucc3;EiLHl2Srn|ggrYqHMPhV%qQay0#T;T@5*uNV)|OI2Fh7S<X6w-%a`(M
z5)RZ7k4&rS9+lwr)gJ%ZHx3S(>curB_ai=b_TORRo8FwRKC}Zok~O<M!Hv(Bqg&wS
zedNNGUA$#qD-%(o<Kpu5!KCaY@N%h2N)qL<(HaTg0b0HkZx<z7B^Uctup_tm+4%TU
z`m;vcxdaM6-uwud`yOtLf1RM~z^XP#L6+USBD^!T`nB+VV$l!lrihZhHAC_XRl-~*
zvWofuZ-+TfKCm0LENg!{Vfu1{^6HI}u<eg8AM=jgRAv5j$*4Of&8DLrQ;XvL@{iX|
zSR}am+WDD^pZq(!1h2(|;|PKuseaO)dwZAEBr=h<<EfC!ppV51r%==q1yc<)eWkcN
z->D@i;-FdOmzgMV+bg#$s2k+5oyq;SI#BHW-DfywaO)dWfx}=g64vl-1bgOXsTg_3
zOZXI-ZEaiYXNH?aon<!D?bCKGv9<UvE}t>RzMNsBUcQVly8m&^=>DPd;N^g+6_mYt
z?Th*KJv!?G!`Y~!RC0K0qD*UdqH6x#S8J9Rbd7D{#FNl|CPAWLKZ@yr^cJIp=RLH~
z-<=87QJynB2;p%A_;r;WTe80tZ@*+vxE;oMRySh@&ZKlWxiO64rW3=*L+ILbQ!=Yp
zzzBxRwU>vla%<W%`ke=k^S2{n%Uk`xHDE5kW=ncBORi%6Sb4m>R$82rXN_D;*D?0m
zK<8+4JHP%+bHBj~#ZGq)2C`Ndme=wCq#O;V>>HaXZ4|wmct+12A<{&krPu#AnGURv
zz$KJ9{vq$*OK1QCgX#nIdv5EA;c^U(bh}W0x8_T#@&G|V)CG;*U$bLAP=Jyz@F?f~
z`lal<kv#x~8IJP~4(?s1I2g5uI%-we*n_)xxl2)5AvH$DL2n$bw+t_{#$LGRR#kSd
z?wTr|*yry3pE73s9IRw`=iT9>pH)qTKqv_1{>NQB3c*#-M-?>H9!8eC-T1nmUvc*S
zM}4Jnk8}m&jb9DIsm<z<N~GDnmT_VecXUeyK+D>-TQ2a~kl+{{P#b6Q4uy&h;ymEa
zyvMX$|0JsPdwXuUSW`^#21voyF3=Uwy<1!BhQltMLtJjaqR+H22t73X{zqY|2d&XZ
zjFM6#ot{*&QH9jY4~LOa-_Jwr6YodJh_qj~$bpkS{400f=s*dysVT_iu}uWr6rwDm
ztu-OLU@Y2oimZmE9B3Fy{yKIfiMWiXA5kKSHQE3Wd9oNaXK!k$+5InxBFd;$U-W)P
zWiiOgj?W{Td;0-r!);LbzP`|lvHn}S%D&38!<g1c)SxA@$6%()kywb5D>UVAL5_Gc
zq*InZ#JKR^)deB`2E-~*6C45N(#d+Fl!w}Ou9<HdSo|nlz?K?yT)lrlEf;Rr_fKir
z_8t$GDj&?8>=J8v1OTmnC7@bbT1P-(Tawe3oBLAqwuDTDakt6wgk^z8QRk^ygXL5t
zP0(iX)^e{_<?*a<zgSE{j%4c!@Q~Gf^qNJhyb@%SwT+6XuoA;yPr6@Q7t|fSD@z3g
zPw+ErqFVFGxfYqqrZ+*=z&^eY#s~ns+F;ph?!s}o*09+Ulq3}93_#6i?LQLD7+V8i
zpG4nl5R^ruxRdpX*zwdpAQD201VM|%QGLCQQ4CQdmV((-gKvS5%SIe#U?l&?IgpG-
zfUdeSG?n=zmc&R!ve6#wxu(tz*X2)IG+Ms`uH{^IkmFBo*7xd$$t^EX^IHp7l0&r&
zYCVq?OMF33vd`@O7)m7gT-t!X=q-S%pA@m}N5-J!cg}#x{nSua$fkhfHM>vekgrwI
z?)9y^yF`HMCP6)*`HBU+QHN^1*#O3=zBVv|sU2@lE_loHc^Y2*<g!e2Tq&u=ADfU-
z<2!cg;cSR20I*ZS=G8{Y$MP5inz2~qg!W#8=P~P7-=B>)*0ZHT<h49cO3lAZ^SN$W
zg07R%RvDN`d<#f=b0gBYW}}@#h*(M)CQtWgohB=6x$?h%(y?5RcPHgA%mndX0qbC^
zYrPxB^VIJ!^GTF74#3ra6y%L>o$M~~#*(kpaq9o^i&ry2|C%Bbrf;unS^l}-@2ai?
z(}6q)cB%sl+EmSU`Qa3>>p3?Jc@Q)S^5uGnFYwked=c*hJHYB>mGTycY|FvHqb8m!
zTWgWssKVk$yYuQm)Bf1cS$fB(!ST6Jm}Rg}Af_b-)OGW0%5$K#gmk@6<XCu$0}8H8
zt*Ml%1^X^qRWFMemn}f8lUN3*&0L-M@5n`;fqp709Rd+y=e05uF8Uj8vkuL-XEic%
zMZ8|=#;{#wx+Qao3O|W*I9*aZ<@qr~A?h_&hdPqD@-+z@ZxXECZD-T?a%beWw_|g_
zG48f2a^cjs+0zV=b1cnC_64<j7FsLYbrq$<ZlRz5(MAVLh(l_FIaP~6A^MLd<3ZdX
zhPcYMnfT%X*DNL77eK?s%3Co#5?l&Q)YXkU?F@My;@!I8p?zibj~9SCp&EWp<#UQb
z<K>>%T4DuxZFtVwKzbDMU>^quLDBul`$Zp%JdS#b<SsxPk-p*XVwWoOqxYR)0W5ID
zKmbDRcwXO>ZA)kCT;v5S^@hZ2*qUvB$~4`3Y7AI7HHHV5e628O=f|v6({T<1zE*+3
zO`*=f^{R&w&DsH&I8zgZ10EW?XkXqfh1~#|bx&Mda!0d#Lxk}A9b9rNax+3L1n0&~
zT@a`bzGAA)k>q+Dt}O-j5xFpmDCc3=IxfR=A-svaEWv*S62|s8{t}xfzRBAR7`z$%
zTzuWCB%hVO<n|PwC&}WAjP*EVyv;D{SXS>2F{rse>?YKZ_%rLzx2X&5I#!NP;cGve
zB<0y#=mU5IW&xYvK4+CLH8+HN{ZT}vBy!nD3NRED-ofv{qZHQn-w1-TmRM|T13C(H
zec@eH%2CWSL{=c&PFge*L{U;9BXIW65fzyd=iY=DHckGgCcd(y64~&#oL6unn%4UL
zzDXNkZB>2;aI_{jA699j<B}U5l7y6!=K^9~kxJWjTH%QD^<k;`XyPp5b5c?q=h8P7
zR!%;Q-prJ-GRs)NHoVxa#E9s*;j*%{<RK=;Jd>|mHxUOgriTsXGdzz8(n&Z3Tqp*8
z*GH^Tn6WnHqVCgQURZjDQNwTHK}Ek^=v1=LKel)`fKD$8><+i31{0^R`S^`-uFZ$d
zIDAtZRlFtKM6ueO<K8<>=RV2(74E70y99v8LK+JP7{HB3@V22Bb2s$7=C9D`F+rN0
zjTJxU>z{p32wF`QhxGda2YumL7qKEdd3AL%7Sf{1qUREvml<QW1)v*~{=8t+_BhC`
zyV7$iS(@tWXWL<<sXimT?>P->owZr5X@#U^-(En>zFH5t5-F5+`{cFL#Oa9|l!3;*
z?(@p|yQxJSN$?EK7TK4y@td5@gYLCika}R}c`G58g8X=`dlcpeI3X+zc#z4^*}y)*
zSgEUXHTL5@PnU@0(WFD+uhvIxUt>m976Nvf4u6;Y#yc}bw8yMLdZnu@6^3o}x`;^=
z!-vXl2+Mm&OVU_b1-NVgKRmlQ&^xsIXt9gXWM!i4tNin|!HghGB%GGeIy9}?dXgyU
zeQ;%fofGPiPXi8XCgPnVli(hFgJB0}+?uMIM$6ytZ|Fp#K@tjaY9OS$H1{?-dwMwM
z_LE(o9tACg%25OqgHF~2yLV>YqG;{8xiLgPy6v$N!SC*c)WErE!fD>a3L(@_hZ*-P
z3|c%0O@n>1@Uuc>70zzhhzHpsw#fMM`3&%{OUmqo)wfh@3hXh6<NeyS5FF6<$)<V-
z0P)QnFmm_z!T!JruH5K8>hxlNlMVy)jg7)y2k!+iS_bD>BR#r`-o=Gt1R=VTT8x03
zq0Pn^Cf%OFq-kp2j-`3<IFHpBdkJl5NFJgTF%8cHy}KjWUZ=~GtAi_v+qrT9l1O)r
zbzvE9F+2SRsRSQ@2)W-V`-)j@mrcp1*h1N=KSTC-^_6y<5&eD%U}Ut8du~|!r*(Qo
z2?iWC$CNpKB%XuRYd}kbZov3ZgaQ=Hl##r=)@aTxmTPuM|0tHwHcvEVXd*-C<fIJu
z%F_L~pWifThR%QwV9asdSK?~)^D0zN!T#-XQN-GkcXVW=jkmVfF8r$AYz5>|_S02z
znJPan?c1-nD&s(qOAjnx-J*YqNHfj_(6wf!kObRy4OkIQU8>qiC&8WCR(O>#v0reV
zdG=FTM6qxC@_V0n+jc{%)-%9Vk0+R-7H$cf^m>es$cGU1qOMXz>Qh<ihyd(S6(?}6
zasIbVAND>6tvTBcIl)%*yH<29_zxKNO(y?u!Gs-ktHV9m4^Qce@k!sMIc<z76Kdh#
zh2-L&Azn&7+!)DA)VUd+M(9by2p4zQP{DsL`8Y|y=OT_+7oi@8#t7R(JT;yLZBn*I
zoOf<&t<sc6OvCI3p?E1Y2h@tk+hPN7CM)q=GA@(aaoI`0B`2td=pi!4<UPHl>?BJq
zCZcOg6;LOMR{VQmK%r&~>1NkwK9hPaQHm_2T_b@cc7KP|KYFwi$cHpVBn3SFHPi~1
zQa4Zof;0O!gg4nxgvN4Bu?mSJiTcF5A~xksxR3A8N=Hy`s`AM1%}<y>83n$>+Y}OE
zez>W?uk)25$-a^wh0hS5QAu07Y-YqBu~r+_C4QMa*%>agy5-=Mj6isX&v$v|w|s_=
z0$mWJxi{WQ@wXCD=4N%qeDHIpuxeWg4OP8FYqcN@e&YN(2caJ}fB?MW@^T7yK1PMG
zY>BuNn{s~E=+C!?=W^1aDIY0`{YstSt~+Ezxr}ITirhO7Ji)yJjcK1uMRCAU<H|5&
zEPi&!=ar~Bc2VF$Eof1FkYTI%dO$345*}_lUfk8bf_f|7oAg18*b|~0?}@cxgza)W
zb*%Y=cV>;gcI)#Q^d2rG&w3&uL8zQafb$vdrPP(D=H%7ABbn_WiK_<FES&C(eX-!P
z+EM=k;Z)8gtdfrmyLQMR>8AQZ-LVe-+Q0Eod_OqY(DMzN$RGWyb{D?|5kC<hhEKu1
z#V{zrZuSeTXopNlRbu+fvqK=+S`}NO5A4!_EaU2DTU(gTP-a(~yU1s?as@N38ICpB
zWfH%APu;<gV@yy~_gWR4(*8?r{aBD$APVuOPq|-XarsZu#v3%*Sj>M<5vgIeeRPw+
zU-@`TL_Sn<I8(%%dXM^y+Afm5^huNi8-932_f)Wi)Loyo&m9V{U~7fO-5ZAX#Hl~w
zi|ow78@W%PHIID5YUc8%a`ab!5&#>_hx-#SzS}M_?Jw*!cgP@k5e67)ByI9{6X5O`
za}{kia}9_u)5LDm_`nEY6Ev;V#ndBB8KvF_#F)P@%)q|=om69I(5jn;?<%@M)FD9t
z-%%TpF3nJr=!xWvF3h^C;{m*NjQ73>o{?RWD5NAqI4_UI;=aLs2vJkyq0}qu0$m;J
z&8P+v`?y0OrtCj=7k*V6%p4Im!(wZNCIfHXn_(Jj)fBf16j*0su}<fpw?>y>_IG3^
zUV~{45wVUv@Dx6B*YG3>c}|?EWIkD*C$duat}rAnL_Hkm<Xxj8Ty#66%raxD555$I
zef}xY#u>=LT1>RY%gFPJhWN5W%5I(S1b2M<*i8|+Un|o^7S@n1R&Gc4v_US`hUjoM
zT~eldR~`!^U}da%Xf6PQUZwKU&)trz#Z6tK&oA1;5}#>*<RMh7Z+w5)T5Uq{r;GG;
z2LKFUSc$SFv|9hJEonC}sfz7Rug(rFuWfuRBE!AU4!D#pcju*uJ`yt}Q72K2Q1v7U
z10iH-u;>S;XeC?ro&Xu`bljUN3`GUOdy=m)14j|B7u9K{8Yx`8#?g$1ZoXe|LY+D5
z9jFPyh#<iTod6zqk8G|&MW<2#Z)-PT2YIz1R$bJf_f2mXHmRGcYmn0~Q`6d-{}WHS
z43ICbquP#j!3HPti}Xm=Q{gHO;&N)DD6-fjq?XsiSNbhPb9a>?5DtWTk&hu4o)_-*
z?p3Q6`(<qRnE{Zs+J>BD`odXTn<s4>zB_6e@fAq~+=cWv(V^wd)SU~q9vgQfOEHEs
zSZZx*HWg<(rs-e~zeEMhA)fKG1L(X>7@vf%!_^-}A07CDv?J1Npd&o6ma`$cb89Wh
zb>=pmFwNMU>o1@9^H1%ePWLNjePV;h!L*f`O?FV8e>Zo8=4B08-e`&}lEo9R#@;J)
zcvH31Emkg|S7ca)xnQ7((56k@1=6Lu9kBsq5k%_O8?yJ)_8rrg@D6D?g~!}SCeZto
zT01v{7)q(n4gnrtm^ci=J08#{ad(!HA(UguJ9p|g%WD*5=>nU8SkXel(yd{DsD@6V
zde~tQ_Tj@@zk3YP#g`rRZ)qJndM9^M?GYQGmFj(RrNQP0wPV0@agNmbc8>Nath+%6
zQ=$kLp&*odyNsI-IEO^%VUEz_q1gqfokTJvIzO#>RtRm1b8bzFYN-S`oC#m#AzSTE
zXdSvi=bLC|xZ12;i$aWte^O6$#Z1EXWVD?L^e|osZlNe03P9u`@%Lg6d~$EK+Q-?y
z5wfDe=@_j)QjqI<yk&awZ@GpqdmMXq!Jr)a@!BWv2Yn;4Wj%a9OXDx|5~?apyI`)H
z51Qq!9X}P5AC(H{Be<r1ns;CI&v^gQ?yPG%<Lmbr9fM%w1+yW9F_?f>xlZfDiz!1n
z)(^&7_PjQX>&{6VvBgD%-5Lc8t>gTPNv-Qdu5#tt4>jssgONFkMTk1SgUjTVyKMX<
zcVAQcHEHW#j^4?hcG%jU@#{40t9AV@jra9lbk4ecNBHJU{1^R~`x_HwEgh9V_OaCN
z^Na5HL=ipOEGe`qL4S+|`C<L#&@x`c)8*92Idsi(4eP=EPO~99bSy*eOA}}3FxUJq
zTuKX_YYpyLF5K;3syWM86*O(-<f2^39@$M4QlGx?=q;$Ouo|C#9J{P$`n6eUGqJw-
z@?!t1@XsF}2h|dS&U}v+RsYCkm2mEy@x7|6PpZcKvH3Y%)|t#=>{g&!!UvyeAA82z
ziq&o(o6B<g7KKH><{6a~s3k{friSM&t1{3MQrPAx^?#L9*Qo;L#A&X~7Q%x7-s*17
zlf0~!5XPxX+tLZF2TH99SH?#>-+e$p=IHdjq%VXobs~!0fBKzYj4`IERq~pv6bn6H
z*tGCc*ZBHraaV3Dh;m(hjf6p7m2a0O;$h9R>pKvi4%nNdddGa0;N6T3FFH~<G@I1S
zrd%ig5G&Z>Y{h-~)v8oXQ094r{}bmi3!mf&ETJE}c^wI*`DbU6K0Y9V@~kos>&8+J
z9`xXGVENZ^=O*#MVL_jX2%s}QFCS+7x_}fMPR=tBaB33MdHBp`upGI`*!hA23(hm_
zFKAPSlkAzGCZ?%)o^8PPJVLODhqq{k>&q!naO~r2o|7ne=yu3;JZsA7YkBcC<!~YW
zaNRkuPq1EQCL&VCVHH2Qe*!N|=_|E}Q$Bn_X`Lt8(%Cu6N=HifO`mC=+KqbFq)*53
zGaYMGv7mYLSKKO!&9v@QxN~5=U~FmaNXBsp<@Q**k$0oeE>G!O3&c$J;H5=8s2?Yb
ztNFE)ZTUdF_*fBJ(b92Ey6{rw*`cR|(f%X#(S0Q`RP>MHj)<%oxrzL@_0L}CIm(=$
zehNGo^np)O%2k{l`!SbYaSm>e%SSZ~?@KJZBV!|agm%0JFXC;2j40wqx*b92pm;jQ
zy&uEF6M9)7)KxzhbCu2N!NN1&s=q=*NpSrZ_2M^X+a%+{nT1b0?j-Vkkufq<Jn+qx
zSy04HZ_Fin!H<7iqq<;A;I`~Uy+k5Iz*84<Iw(`6D&o_VtFR%5LG;M8An)OiIfoW1
zCpm}aI-1#^hC4LX?m5s|GVC6H8vThq0oB~@qGvlUnDbo`y6V3?k0aL=@0Tfq?|;d7
z{@980V&IZi=oIOVsK(DQF4JD~k=g%sYBu{}{ppDP#V&Rp_HOkK^lH}`Zy!0z-9Q%@
zG{|e5qX<{{q8f3iSsH4=zuOwsycDZ<zy9*jcMn(VHt%N}l!m!R9=)LMM7#cZCTj4^
z*^4`?Kr({oGuQsvx|o$-i0_XeuV=kLGaRKitT6p~a8I-ZmHwbCmpsEL)gr+|I|{dJ
z!dY+MQjGHl!Kut-unkXvzl61<q@tPIo!dWwB?X@d!;b+XAQ!HW(76b+y$G44ulOiD
zT9$IDongKDaz)~K2BoFgf%?ibr@M!>biH4p6nH53igLBP!xoJ%-7)RyIaO8PqCny}
zjeBj0JDU`bxfqZ6^q~EEomciaJ)7v*tf*ACc`EW)X^~juWnI^th(|-J*Fw<Md!16f
zYH0F`W<j{=LH!eNasi9`U)c6Wjp{z7nu%z-I_VWels!4m_l2&yCP{2A?tUZxM%P~>
zOSLa7QgBo|<w)<rxIRfUDRkugs*c0tI@-NGtub=DC9EmgC>F#pU*}kYZ*TR)K_KwA
z%zP146@%5FFqXnWl&Dmb(t+37!ogvd=u7tO)B{H6l;P3R8IY~sRs&YQ97TyunYAP2
z>5tRT;E&!=PL{96Lo0GR5f(2InfU{k)o2;wYTa2gO4al&GiJ$}se&(o5P!Vo{5v22
zM*kyKRD8<!^0Ue8gVRIx$BFIcFOM^;qoeeKmDFR`*F~mhl~IFv7S9>T6@GPa9NPP?
z=zY>e9%ju-@2{zwZ5TQ?Sgc}%HGJ`YA+nb9!#%Ad{?nzl>WYFMud|rS%6F90!a>Kc
zeVK?1?_f%qieLTNqKbJ&X{gnLw=>=J8)L@2PxW*s-+emR{4_$`8|5=OTQuq-Uub$X
z-0_R&peK{os%o*e%T)E4$ys#kIz}0T3g7jHpxc5^Kn|Xt(Y*n^*S~&>NDC85g6ZSL
zf>V@`>h<h(Eedj%@TlN$Qp8j5*D8z9%r*(h&K3CxtPOnkrQhfI?5Hd@j;1+2oRcr?
zOpQBwRy@9}zYphO6b{M#asO*0w}<eUp!C{dPK#>Ur#tUkypyCYe8+HaqA&-VCR6YB
zUk@Zh?=|kspzq!BTYsIq>o9HR+w=JTpIli@G&~wg7}>*Ge6on*K7TSJ2_HV4w-c)i
z;re1;8KGLLYXees|2*e@b42`m6!CMqT<h0I@b9JY+oR6Uf84NDbk`672mj{`{I_rK
zg>KxOnHn!P`QKkIPL&N3l?9fJm;U#czZTy@!*Fvn?N0b-Q2%Wleo0vPJIm3rAOD*F
z|Mu?S$0|aqpS{T}meT*n5jZ>&Z%kCxeHngz`u^w3F%}hHzvgo-&n5kDZ~V`X{~t^M
zL)Y{d4X)n~Zyejn)ip@}O6)@B2%GYIl2m$5C((gexcP0}Poo<lo^u_QNGl@MqM&XH
zXCAH1uDz1+!TS9%_jFYnfy1fb6q4o1PWMWSKIgg#)T=xxNdY!178=y$eld38vVo|9
z2E||R#VX#|9sKW<zE|_x%HMj=pb$`O|1mwc8uswpQ)X9+r!fAVEhlHEx8X760}eR?
zPTUpaJw(kEOGmXPUrTC7Eb<>!oXG_d8RBX?JnP-;%}f7bVN)@|k|Mgc`FZ)no=QR0
zuw~z-*loc{p$|Mz?v?VR46#ox>dX^3wD+^p4Ygk|<T2y5xuh&w6>qxtDzNz2IF&mG
zAm=lL@$l#eY40zk8+v8^&?R~&=b%<1p;1tkPFp&{H;L*q`a0fsRs01@jBimVsnfpK
zWO8J{il^eF%Dc30!WI?IP*8N7ikca42Y;Q8RXv>fWoCVxFxgZ6wPbxY+0kXb*zm8b
zexo3eho_8Yw}^8Dq;5CgJd?A1@#2M<xjE?^ONjt@j(#rI!>eyjnNd6HNBf<6HFxy-
z_4lO@or0>XgVVvTw6vlEDyMv^C0(O`s&N=S@r=ja3xfz*%2(#0pCwL9A7!oNmngv;
zD6vVjGh#crQlSwjFKE}+W-wKXnO>aV{w4(%TlaqMQvNdXJp&^y?MGuGpIFV#VS=@a
z?XrR4o1M)5=79#7*c%om@`VFMf=(KF6SmVHqb9g%FJha=RK99dV0~Jz*v3vKdTy%Y
zX#ON8S%dhS#TWnPm#$l@DqqcUAC;>PHc!3kC3=|Xx_|k0pm1M&wVb{G9p(Qc?kxkF
z?AtzIK@kN30|aUG5)h=M8$m2uItC)$AdF5WR0IqJq&r58j?o|uBS(#{!NzD9FycMY
zOTF*seV(uH>!)$LopGGU|LFhk=Mu-5jP%eHcYeiQR#-Yn_%LXb1obsx<!!-SwuNfX
zWoM3}218sNj**0{nw+&l*uBFS9;F!_;>6E7j!)^9?G`%SkRvdMTbDCy2}WyuJ2(+q
zlcJ%`w?FN>O-djdt)DFphlkC5xenDHuFBJ$Es}Eo;_Rj!okY#$>TBw3Xj-IjM<{e^
z{Sfz1TiYTV3Y9)G?DkIGky_;My+P$`Iu(ElUFvlar^mFH8YZ6EITCq){|eP`0lcmw
zV4H~C+Q*D9Ty3wCd7we7SMKsp46V21+a5Xu|MT;Pob~K#l&swe=!dzoIpm~nlZ&JL
zZ&rH=k#%pTAkPFDZ!(OQB4I*t7s;9OD_@ajqL-A)c=Jc!mMW8OgwyA&3i~NKj|X2j
zgH#Q_9XxheBe4tPIzOBz^W@>)5063FtRUC0Y6@K)v0|nR>@>NF52jW>GzXAXe_?2U
zG7v9C3DE`hgSAQs2Qnph84q#a`9f6M^E}ZPkg{$fg-)nsW0*B}1^4{rHl@vTbyh~T
z#LI{0?x4O-DU>H%$2b;z7n*vz2wb)N<@lS$hw+@4)}YN2*5IhOVK*&>^=R^W#Zgqa
z3w`KO=y$QH-ubt2xPPSox%CqNx}eB8r&a2u)%eIuurLGp%#%!WV3cZD(7=T0xge9}
zrI6L;lzxGZ2!A&L20m+fK&HjifEAwlAbO2P6Od^d+EML3;iZox0j3`<PNf)|Tuf&h
zNBBnpZ<r=9BiI5v7|gp>J}P&eh+@pem7G9&J{5iOKArZpRwXDYUTAg0v7laT=jcZe
zzpQo~xE?!^)ZKXTQr`o6$842x<7my6K!~bjmC&k>iPvdBPEW4#(6dnUU?Dt*_dFx!
zi-x<<oFH3UUw*6vJosETiPwldM*67KM?t4j%xbo~&z2<zW*PcnH5Ye2&{ytmPh|}v
z#Z4zHsOB!!-L(m$kn->lpaM&p84}Du?45l<I^=PsxgW)?NHP6y$!o|${#)thqYtqP
zErHe)=@fQl<gR!}`Ps#%D*brhqt$0p7v4yfF0UVF#e(4xacb1$_T}WRnDHKk9<7im
z?Rk`9IeaJ6(GfG{Yr|;O+gQ%#KsePH>COQ78=3^dD!Ob-7f)5eKgL`poJb<Oh`Z(m
zUDA;F%>8E=o}mt>dyH4_9odfSGqHAmA6OSjgy=SYse3$??5NGM@{~BEsn4A2osDSU
z!u$^oQ*^KLH8bpLhg3~~ACVz}p`o>qAhP_U;9imSny^Rdp$ol$RIb=_#JzkU#?21&
zC!1z&y3|Iv3Yl@T<Nd*OihHc1QiA$Va#|aA`}imXpP(Kd?;Q`XfXqReHx3zu9wp3>
zXwtbd?l^tfz82XzU?Ze`%-E*`)4b7URxq~I@5nT7yB{itq*&mZ*p0;+3_D&WY30nH
zBEk2i);r%BJZL)0TL9m@APe|mYDnIV-;P%%*@yt7s+8cqOFONRqRZG+I5bCTpQEl}
zVq<<KCht*wUo=?4T5(uJkugT^NkJ>KCR--qvf<Y%bgC};K4ODfZGXfj@tSWkEp7fy
z(0wH%XBCQ;9UX?c7NPXFZgiZV;M)rUb>Ky<@zIt;nI@#Cy7d>Y#UHeOdIS!2Zw3;-
zJTea#Q$g_M&+-kho%*-5)(q3Y(K0>wDq~a-p?U%xZ2`+*%fOCJ>bRl0|5SnTvn_A?
zc17xn!H}DRgR5_uyt)H_#vC$IM3>yRb9&2vhd2R*H&iRrl_f#$o%J^v(_W@~7^Q_|
ztjvCX)ApQHO<Zrh*12yWUWZ;#w|rD288)i#`HbWT2L@7mLyKBHv@4y@P#+UF!7q7V
zGfcCbCtrxs*3CliWdf9;P%fXerVJUh<3gSuGC;Do0Cf}=&6cYpQ5q{iq~oH3ujgc!
zF-vkC@st-qsnUh@MQ%mEd;u;UZ#fSh>aynW6i0q-8FtD;fsIRa5Vj`g*lcaBf=*XZ
zk2|l;a{tmv(X*8<%18GnZ@BuDN>$q`j!4xhmXdbmjbY3CK+u)@{aNZIL)?cMq_K<D
zND)N0jlK0YcTei0_4;9qAh@$!*V5e0gg+;$yj823Sw}aCTagT$yy>><X&@^RQW8rg
z6*Vf_huP<JFLhKwDL!%5U$wTkvA&$KXNVEh-AZET+&x~l#V*%M*P3@XpU+haKRo_K
zd%`Kg!&Pw(A$zLqqjN27yQ&Lzg47p#<13v$98WAM^#1I9sLl}9p0eu9(5y=RU1bGC
zl)T^m;VJ%xQDRs;tj5~RJ(r^r$jlOK$+*kN-NLTFm7JSfGKj(6c&C>_0uj$w7t?wl
za{x)Jto$Ln<D!TkudPdjuB}Ny85WD^;bWSa*2<%zpQNllz65*QybGvQB9R-k(F(EM
zYCe}c*3_Y+q!kYzStz^?+1Xfl=-DK0I#~TVO?S)HrVNacT$VFVABwMdGs=5*hcYQZ
z2z(R$*`ofB0!ds>rwI6z_2AHcc<a`>s}cpHoic^$e9Uw<YuFQX5N;|%D#c+vdi#*w
zgM24=IBhhM4wCOywbwm+Bei$iBLiEunQpOuLmL&euCSiv#T5-Dme*3x#Kn%pLsN@K
z?F}SL*b{VrrU9+*&JnEBh<;kV_(xj*6-iSj0tvz_gYzEEpN0Ehk@)}rznAHt8KZDL
z|L69SRWHD*<t)4`*g3dKQrdk5#+)ZXlPQ$~#wrZH+y~F|PF9Oy)fC$44?-2L7eRPT
z__Q3g+djiWZ^)Z7O-p^Y7pK;MCeYW3i>Z9L!B<dG!s#-m0^J^in<cPa7EhX&IPh@V
z4~!~Wms2EF9v+{>Okks`5e%s9JDKs3L1)6d$`2$>F$`BbAN~>5vQdMa0jWH-Axwha
zZR#=*vVQBG81K7YE^(r#<98a{H#R=S`D4Y;?hfw5n}3KRoOujr%@d0HzD%a}mEu+1
zXG0>~MI>K;qo0h@a4rg}V)L7M!)tGzKs<odw!4H`Gql6aQ^#`1s6<8w-yMl(WaW;Z
zMKu;g3k8+ANl<t3f>KO&OD`Muf8%UgxLYD?W%ivZ8SsBihxp+@yWX1564566-{rNR
zXzSR*)uZ5h6nazpSV*DsZrlk=SAT+8Rgyk%yyr40R76lw#QuXrVQwzxs;`-|`+P-j
zh@Adj>()_w?G^o>W`l+k2og*dpB6LyPRSZ*s8vT}*f}p-oNgkUHlw+4${_Hx)eGW<
zc;~3V@0`@ZPfkzD`}zlN#wkw~?1ig}S{aBe28T8^<tmr>JauoI0m7!HSSD#&n0Ox1
zgJ6QhYCSAl4Qj%1{K@p3pzylG73j&9m2d=-DZ!56CR&*y>v+w~cuzO9rsg`SmjcK0
zW=y?@ko}@(^k%v|e{+!EW+Jceo+-s~DA)c-2+bs$TZjjB5@q5k{CKv7NqP>H=`>DI
zJ8hjAL6J4(UPL^U9}?TtRUzS<o+kCUg<}G=KTI{-tzvkq6T*3)R~u6!sxKpH(sIOm
zI`_5tt<jP0=yvB#*(n+Z;pab<Ktv2siL~uk_J8u|0Ex@l;?678@M7*7b?<k<<%dg!
z2r>E_8F!7BR@%Hi39mQZ;L0AOA3oYp!z^^48iA>}drHGWK?*mPl*lF%glYnbK2P3M
zw265yq5^Rq?vyuf2?6k|t7StF_=Wlj#-VGuGXlzA3ES>E7~RtHUihLaTGZO4PPf;v
zDrgX5Zz8<XOoDkNeOwP>Z0-HNifWoFLrR(s&0BS$JhQ#Fh~X8^-gcuE_8~;8o3{#5
zkc!kg)INv>CtrKp%2Ro$+IowKk{C~GZ^9h>E|pnIGYs!mw_$EM>cOli4K~dFu0?Ha
zJ`^-4?WtRd>aAbLUmu~+pIdm&^;0J{Z@e4v3z$dA$^TZ7bA(P;3t6>;J~;E}EP-4}
zn3zt{(B@WRqf+#Trs8Q)&b*@qO`$8Y(LpBLd2t(;=?)u=I&F4IXi-M5U&oZXYpF8V
z`s@btb_A2NOG}hKG7P1AIZx6G$qK7@c?eN`p}F*MMWI51c6j>ujhh-pp{1eW3l!!{
zMZz^m)<+5@Ji0kiyCT?%t+z*kYs|K^3+BSsov_+WXF0LVkSiRFKS772w1^o~9VKqB
zxCP1&V?i3al<1p^6kbNt_UE_EOO_^j)5zx`9c8ob_~eW(sX|K!`&|~^Ig!1xrsFXS
z?&9s#VevGh`s1;U1?kgPY196zjL|-`!K!A^mF8$5UkW@Qx5vxq0AR<J|IE5Sod<M=
zKDqe$U!9q~`P7hprJ)tX2p@7lQkP5GOjh4Kgp|19Z1nThOPXOGU3Sg1>oU@OPu(@&
zhZ*PcX(k=CIy8q1Is|jpZ+%w1Hc#3puN|PjnWAt%Fn+Gt$kxwS&V9E$t46#$zo<oA
zc^*u_TfGqnI<mv%>NkBgs-Eo0((hv$u~!UA!7Am?9;{ETGc1eo=#dMJhfv>5$<Mh<
zKMrdPxxT!1DJ89{2cEjGNc-Bf0NgnOk6n<riho&!saYu<p;Se(5f-uQ!0mR0q;Owt
zj&XsluZBaY4-1$3mTFU+a1T$Jo4XKwWW%~Wzv8L}OG@S$hOj4Le`-eovNsAZJZ}8h
zB%Vb1W7PRDDU&EV(KaC?gYg5yXd%B#X<6GV8UnC|z4yjlIvd>Q!u2q$&@lSZdhl+l
z$>EbMqD5!8A^pu7vnp|pO3vJzOWH?C6kfOj*}Z7rJ)O~$iNn#4x)3MLk)xT}WM)01
zdg-<J8?PX7_Z4=9usIYqzB}*8m?s&Yug+PchcuaUoB{<W0yE|Galw;3HnyYg27Stt
z)o7^^`B@huhGOXP;fkub$*Y)3_e=_>!tJ0iM#DCi1w_mwW=$6>O%6%nv!%IAhTz5L
zwU|rw@Pima0gG%RcqMqG>tDlZdJiaW-K8vH`BR1YA;WB4xE&>qu`gwI+Z4?5V$RH>
zb!E5$cmRgDnWE9w@yV?P8^*`cI-`^!eKrkgmUZacpri6{4`)k*o7l_4yE_!j4_}e&
zLbAds0E13WG3l)^x;2Dhj3KLpUvpQZp3!%hZ|KxdnX-(b+=6`7U|9*QQg1dBHez~?
zz5P<{7)ZBBBaWM)HC+Op+|&3B@<}3#q}9gkDF^ZVZFgh|<}IvN<@C6#7P&v-x3Ruw
z92|BlPkE|R@m{^Ki!wk^I{%7OXT-N=4`U%)4bE(95#_cW3OI9{yq*^xw@v##j$r$C
z`_BU}ykH(H#ON=VI=am+W(D#~J7t7CBS}g;z*RT-VtB*URc{c1V5+(kS!)Fay!J~!
zcoze886`M)5hLr<mCoOY>h21`u`9++PU^DXi9UBh>l?Ur%J^KyMVdpl_iEM*dp}*{
ztH~UH$%~%&R%V};(<Ekw0#)9pA1`hbS5`L)UAon;Puj1L+u59&YiIkCGz);l(C!Tk
zj}pQxA>^^EZEz=_OUVtAT7$;J1?6y6ajzGZ8@<pn`@@bpCWnbKj=b7!(Nmc_T7v3V
zeuY?1SY#T!D0R9&{0X$KQV@V=xoVDv9QT;&x&Gn!GQS~p40Q|I#r@d6{c=;4u7-rj
z8J4Y=L)MWjqh>-Zy&sem9BhY|EJYp<WIB#fOVdzFp_?=W`O!@QVbyYKiosWDyea1S
zL-MMzx6Nn?=ab1=93w!cN^*Qdib+?My?d)t*7jG756GxJEAdBeOohrTN3K6y$8|=W
zwYYakoA3RQ+*q<_a!vQ#+E;y{7Dc}`?ykVub^L_DF`gA6eNy>sHnqNnTTwvYha+WH
zJ@IIqAw{3*g-!!N+;#Sp4VF~E;>~{&4*L_-%2F2cDki`}3-qqRkA@I?RG1e4m=b)_
zVS>u=cv0PhqOtV{i|B-RPJ;rA;XM59iKgpacf9awG0S=KpiY?ey8DoOrew!d%;>@A
zvCBc#i#JoXm1$Alw8HK<&Nv^%6}#R7QZgh(VAm-wZ0eRI=3~%oMv?@Yq2%O8d*rAE
zCt3y?C*8wiJ32PN2w@!wu9)zC8?7N!Fc7?Li8F)aSF7_*j%QPNrsk+Wc6p(SG&3jy
zTakrVsP!vzXADvfgMnD7t^SacN$ZVcMepp=<ukh+pvEfGAl^w%v-n46gYGAj`g7GS
z3D8MzThj%zT#LmC2D6<W>}|Aydhzq&S_<~7m{D4!0QXn1Tf4hpBGUv{C$@UXSE{T}
zD%4(R`-&90JaaP66lfjF>qWw(mU9JIL^($Iu7*n7ONJVJ&D1>w3nWcVSsf`uk6lV_
zm7vf(3Fi-WiyWzQeaDsqCoVe7IU`3C?;3U5Ar3$=5#lU$?7BYZ)6d;hffmQ%KI-Qh
zOA6?{wN{QqdVFRtHkn&|QvEF&nL0PuJPDgj84yF|vPNvH>X{h3>4xNG!Vc7ZE=Al9
zYs{q}-SU2p@m5u$J_!n{cFkoz+(jmls*DlQiR;;Yv;wc`VbPyhmv`mbe_60JReygs
zN=AX_f6DhHYBDS<b2jix7CvYWQdzFZqK)OgVISj()%UX>BS4?KKi_A@T3VArk6T+W
zmTd@3PrikC?0pYiy=_)<-+lGU;yi~py?U6Y9$%eUyyv_;<Ho(w$&H54l&L+oBo=k2
z+t<)s-IMskJzl#50}3~u!!Da<ShdS6>=h20oxi1Oi|f*ttp&&4#ON$|ywIszh78K?
zM(VjSN?Q~Yhi*ajdAZ_U2Q#ETK8g<Vv02wKOUTIgkQAomU@SJ~aq(q^Ja2wKl7K<A
ztZA3W9JteA+%po0FH?96UU=-~?DgPXcUlQIEQ>EXsm!TBJ;bPQzq$l&U@Ip)TG``j
zSpOQSKHG4}uxI?(H%vam(MayS!H)L&Zc!SQYz2cgIYU^!&{2!LIfQajnM%Au(BQ4u
zkmN>B8h_j``OWA6-INIVFtfiMoX1)XvNS{=Nx4Nk#4jN(+k7{S@tj-bJ&yE{EMsT4
z6YZm!sziCLk9WJ_lHU~0ugdCnO@Yga;C76x_m;_qzv~(|)93BCXBbw)h;jMITjciR
zH?E`EyGKktqG6z<)2Z{bbM-LpNc|Xb@Jc){c#IzU^dW?hH>{_6d`Zp!X7r|8bRDLf
zw*?(pC1!LyjLy~Pl~mM|=n{X0%*VLTH$#KVgKye=ha1`Ch`HeE$^~nD+nkNZs(Uy2
zB2*3=4kS$)VI@Q;pimkd?ROHGAnaO<@_5lBZZttzE?u88f_%<UY&H*Ra>2_aS0iC2
z*e085+dT8I7Nkw9#1OQ>qxAz3<CcxiWu-+S-_lm0y&H3mN_U6DydAd_3mveo;yhdX
zC*lSa!oLDd`g|bY?f<|h{mT{u2W6%%jMK)->HC!Ukx8pxL$7K!V2s*&1)85qTii-*
z`myA*JEb-;y>#PdBDkFGeD=xGtsE30r^*Bo?0AauyRKYBJ`dC<4>zcvV<^AeTkx6+
zzA=hxb!7^1OGne%igOXibyuZmyIG+hprh;@tV*1lgMYkhHr<uL^?21T$!ix}`gWu3
zAcO`a<o#CGHLRohu%7XXm(e6GokbAdN6Y{#M+JV2kr+`WJNzWy9JU}n5k_7lb;Vk8
zXox@X5zxQ2YYKMRoK=63wD51qBkk$gvSYaa{H%8SQ&&i|W*kcvO-}c1m^e$OgCF-;
zOvYh_6y@k!OStZFlJOjk$jvS$NeMaL$V5!q8`0rj-oHpJdMI{M>sNGl2p&rbv0Xlo
zm6<P)6T07ONTDXEV!#?yL2){n-(f!&5DT(n8mHCY61(!)G;>>h5^CeS@rjIXGhRG;
z1pUg4A;oy)VZG{i*r)jgdPJgU9Q(b?Jmc~+hGi+YcIqObFrRtemE-gj>T-#);c65<
zw?mnUsr-)dx;E>tyMLSpyfjM*>mh)|{?}`y%=T}(Q|~y)jAsgQ98u74w4uIjQ^99M
z9Oqs0l4ywUJLQ1YrHf$-Fo#KU==1sWHr<nz7u<6+@`uL~dMM+Zn?E4<csRI<$Oo4S
zZBAK9pK`I3Im;w0JAv0sR#BB8$6hIoeo8hYL>k-x{D?xR1$!*4Q(N<^%P0c@Y9f$}
zxZkdg;KC~|URt@BejVrDXD<m%o!-Ad?MEokR=g}~;|&#u)Mkq?f}pyQNQ)?)q<NBl
zlbyzAOcIH|N^CD_F3g<@ml=;f)A|_&{fT`3b~8W91BpP9yT%yXpG@FSwd3psvtI)K
z|BXoZ>OX&!`nQ~Zp5*`g-(S5Gu(n1+HCRo_!=>)QS0K8huJ6`fdZ!jAY!va}Tb^|_
zf9)se?ZI-o`GElr$*n?Z6>0tt;oa2HUdIXN$0I5edkmvb-lbR=gmZ#_)sGE<`Z2E6
zmf+8mCqGGM2Reblb6+0y@;g<jYrMJ~M)V8>0%^TiFU>5OwB}a&!D(8onv<O_;sSOJ
zvWJSw4;W&KV{fdjUeo9d^{BC_Yk^dy4d#1k4w&tg^Z45T$T8)7(PoH}S<h*o;BsFr
z_2CGgmd;(s#_6G}09?#mek-Qx*nAPFE?oZJx^#8!w!8`zRhGmw{^bHz%_((%qv~4y
z_*QUJ@K4ovY{2Xb0Nywe3cdUDK6t+n+9`3RltQ`*>poAQnUTdaMd>x&%^(V<!Q$Ax
zrD0Vq5MypE0->X)yY|q&f+#KLtD%j9JwIyegw|W#f~g3v6*V%{Kd>}wi4La9b1QeH
zFA#mq7V<6CWZD=d19cvTUrXR5QM~ajV-qc<)#JK~#MTbm6i1ep<Tp##J&pXfGnHh>
zzk~|#<#F%1w_blcw>&LFl2Z2*Z3RUzrATyC^te|KJS;MHJFQLY=W~$g0v)wa5mNX+
zP4<t4{;&-_3c-*^R?paT?uRO|XNnXR7mQomY=w6l-q&*O3V2Ma-X;5hGW6NLWen8~
zh}?ESa2?CqY;2beXRS&3$jQQHfGlil9MV@@U*y1Sp2t<rLp7f}H<)83nB!GZ3Tf&M
z*tx30Py?9H)rp*rH0$xqU1NE9tEZ9C`(8@xRYN(sX`Dc#H-sd&s-A`Z1&ZlC9wHau
z@|g;$H~p&no;-3AzDG{#i#+m<_Mm4)7)TWi5T2~{^$(%T+ETc!f37}uMPTJLNvy5@
z>BxLyA|Q1fdN^8B&+;)&D8=p5*Q5_MUrU>0p9H~`yvTPiQ&WlM&}pUU^bBo!K#FnZ
zRIfFaN>%%1S%WfGj6k^Lyp$H0GE#1LVbcd@<^{DgWz1PZcg!E{R|pB<F8?T{AW;yU
zc(nM#X)}Aw8{Cb|n-andMB1R!W8?OQy)3L+_R%^+c?&hIQ~F{&VtPod@pLSm8&hc?
z?0zId<HzlVZ@JdPcpi1)+P!2a6amHQZlmh7iolDA&h`l&<$q)mk>h=Z7@6hb?ZC@F
z*Gho**@%UDlHH#X3nKPp)x5?gTA#97^TR;XhR7`cM=5D<3am*t$?YfU!~}(GgP#eG
z0FCH}hKPmnW<iS>rwfTM&gn@NG|BeGIy!bGHk(|;O%}@X)f!qilV*!o^@`N`P<M>+
zGmh(3IDH38Kr#*G7}9Mu0rt<DHjF0DY0A31Mwua&Bpp%a(;n{QSxNUTe|!HER=q69
zhqjZ&fguy3%W^0{x|6?mn1IJ$I92Om5TXo*qn!BBvd_Mg@fde4nhoHmd^Mg_lOg+K
zX3yV*b`j19VZPXnf_aDFdE2;@JwB$d4kJ?rWhLmEc_R?&IDzgUJHqZ~U{0ASlbV-z
z<Q!Cm0baI=zKmc0eJ(CC1_lNbuP0;TKSOy{UENz^T&B+r>1`wZbwtv_b-*c*ZMB48
z7`qPT(e9ckeVq^bec-CHnpzR@dqH(J9si1v5HT9|Y_-vBXoNQMNQyN#j1&T`elqxU
zD38?S-phhm0dD$2W{u$EVOyem-nI_5yXUx!O@gfN4-Rd5K1nynxa0wS;W|Sjsy&B^
z#rbc0MkQc(<jAJrV+U;ad&Y&kHfy4<bBv}UmO~cHEl6G2)S?Q*2gH~t+)slOQqp=_
z{gp6*VL}iT_ym317NSeUA)`d5<c!X1(kub8MJ(IuZCAYT+Lg(}!dL#Wg7&}+;7f?J
z{ybBJWluTw%ZCS0UF2D+CvKdd>RY%lF+6(xx~mjI5xT8x<U_{{sY+@|Z5Bw^7nQG%
z6IcUd^WG0LOq(~JOtIt(Gm&DZiAi#h<KyH>gWnfDlf=HG-lL@-tT$}SZ(G0^!oj9`
zJiTYdi=f-88tUqp(^`&526O3a?34t@cPk;Ct(7*<sw*F-0DGR#a>hbZV2VPZG_&ZA
zANJoa{U8Gx&3Y(3j6`BFqiI$T0&kPvZ`0LD+mxXiF4gx>^XDP43-)nat&eEA>Azw#
zWp;BY+oWPj%uU~}`k2VQ)>^ga?t7pLlNxasY1L?04ZgVqTMD#O7sRAmkw{ZLwHbY9
zYpoTN#;p|Omw}+FtFhKfPR!+giugufT|OZv5!4OwNKO_&=z_m_?hAL|^zjfU<=W<P
z!>*QeZtN?%Ou5#(H-jsNg*~EeUbp)<zU53PF<Z*rP-*sQ*8%06u*i_x441nYAguE2
z2M!tVUs+B*|Hw1qM&!*tYaOdf!KGRcAACESx%~t#MDAR?^txJU|0*@@67zD&m&WhM
z@%izp^Yy|4^>D6J|8{BH4p7hCB~FX5JNYc!v8!42=W2~MB<hoK-%fn`5N7o_H0HAV
zwztHn1P}=D#sgLO=9~`L)pwtPc;zGc#SB2kG}qn{B2rf2pEry*YAgyp(mWqKHF(9m
zVEIZY2zE!m(jtKrw`YcL%20Zsk_c0PVFICY>rmpyV;3?c=>!h#@kxYF!Av&qh>5hu
z0@WokA`o%N7);MjV)AD7rFa+()eyZx4@nu=SSYB4WaPDIPMRhte9e}+eQT9F^c*yc
zwf5QSBh?uQDYQeMz*dFRtoLKHOPf$uEMg22ioO@W8|uR#-_!5ZKUz*zwq#2!&ROm#
zr7akm-6eI^s^pV89PO&5>Lc)V#CF!c3SnRm_vEqm9*alVJ}i*B+V64S!l%%AND#Sx
zrOG<{%a&6|ELF`?fqC_(SSkPFX=++Fy<H}|o+r+VuLXGs912Wzc>qa$@&mlU5z~1N
z8D=&>W}?Ps89*Pgk1#5IRKT5A{OXI>3}gAfWaZa@c~ve>!t~gsn0_@|c3@{NZ|XC*
z?!6UNYuEW}=8R#2c;YK^`;jb6@U#;1guWGryj3Pt%K`iOomCtw&bc#`d}>0xgb1)V
z%uIxbm*Rif=wF8Vh~x@iWw*j+R5lsQ`EK<NIntpmwNm17xl05&qT&ScCC;z7e?@?E
z?8)mzynoAre`Cd80iP`JKx*!N?Elx)+oy8`JSc+yJz8YueGW9VpR5F=+5Ye0ri{OT
zwDa%8;%_GU>k~}|Ai=bq1~sAo<Ltmtndtu#<Nmtu7iahFIm1r(C(8Tp>oCtO(*NyD
z|M#cIz$oK7yQE`e*q>nQzprz3<2CvJ5Y(SP(=>pLDUwm7^G~7Te>~VFcTwX1ap?D-
z0cyYuqWE(Pdb2+s_E(bf=j<11;?Mt&L%;uQU_UFAWe|rK|IH?TpZJ#$2o2%?hcskf
zMgp!qeBk_(vEQdVN66v=1_!OJt<|UjAA-Zf!xOQ&QE<32RG}=RZkT`YoLlOmbCC+<
ziL~P1ADJisk8jJMvUl<KrP{0fWxIBg8VR5EKxdq@)zO|GK742bw(-j;DJdDs8U|(X
zTfoT`qPe#x2j+o&HoPXS-Mqd>fxI4D3x(bX_fjfFs_S2O71q>9C?<$;MMg!9i-ibR
zCITqm2tg?xEjh`x`w@R$RA2os?|fX}%?Vg8J))fm!{d3?)2shZwj&9@efuT}N~@Ys
zC;9};-pw9j9IgP<+J+*SJm*!^s$=Ip&L$YxAuuZH=5)<5Tf6KJ)4PZ3pEHR_!zt!l
z!$^rK7%%lZ=cG7hqDl>Ryj}eIQ(IC}QwN5f`)m%Hf$^b9t&nI#z4?dM=p#MW@yCbT
z-whR#gpZxj4`9%S!^!nJZUgt(mRW!jiR}HO+Y<n<=PcI2PutSYjtpReCtvp*@oEB~
z?-*iZX?=_y<n!w}czJo9&9XPQN$uqnx?(ZL0B)gA(`-Q0h^IitTJF+_%Cl$B_J6RQ
z^fjSw8SkPs>!vJ0D_#4~_kmt^Yr6l5PcqI|UmrO;P1P~ozas9nuZ^3{0;b-$od4IU
zx8!tH*U00u`ENjf3{d*-eq#Xu2WVntC@B+N2DS<T)Y?LiZB_~rDoPjdUAaeg4-@jJ
zs1_Mtb6n75_nrhZZ8!qRe#aQYz+j=L|2(fT(QM2dPVv`xm|lJZ+>G{6@+?SAz3sg$
zCmaM!i3@rIJgwyxZ~bC)4Gb2#qN25R+9y_1f@GEL^t&jj*^WH&@07&}k%$Q-84m94
zrg`qfzj4mbsyb*FD^s+v2!X1XP5Iy)ns2BK?MrN<crJBCCD5$FFyR{w=W!kun{f{I
ztC!2lda0;1%i(=C3FF#`f@fe$x*Qg}9dFa*Hh|zzr8EhBq$x=fm3CNaD9L7l1;jd_
z-GvbZ)LvnC#O6P=Jnc-&T^M*Ef65|T+{wvmpd9Jb0~Lyp&n=9UkT@`UD2I^-9#_F^
zJ5echw7@1!qHXA*6!XCBd3J6tDbwkGR+Dhu<}R<#;m3_cTupDVNDLLgFU$n&Les)D
z`Sd4xLEY-C=}3a9E(r?=>`T?30;PjxJt}1>k1DrL>+gGe<Z*t=`}5K#ihWlv06RlW
zE4SfBNMRkZW)BqT>eN<Lm!yQx;<xB#9^cK9zR}TT7ARqFF4R|Fl^vh&aC|ldS#kC7
zn6c9rASot~HrR@CJUO8DU_S)*6*Zl~NK=3vU@K{iaOF6mNm$fKuv`e*hpF_4OxU~q
z{J1k*bh;w#sulyBq^WE&x4_d&1i$Jm8L64zHnC|_0b5R0XlkLZZ)qBfD)hmZOHJ2(
z4tk>}n&{N}y*#X7V=j~@aQbLTyKd?mXD^9^4@T1vAH}8L#8q+hk1etsfr0If<3g+k
zGd=QYrDPimd^PIxP~D>Nz1d{!G*43(PyKR=!;}gy$zS6w!V$1~@q#!+^TFRC=LVgd
zsv;0&1g`${?X1swHH(2$%Qwa=!w97-Z1IKnfjwKC03NVdo{p2J$nFr;?3hK;77G<X
zA#!W2{?w3y6Vac`Lg%~jcHOf9A3)*FJ2X6eNK>R&0W)Xv-G4|SlctQwN(AO|w5ejO
zpI#vPHoT2CE-KI3HF6!Jy7@q*VrFlDL%iNOpJLJxlP|sN39w4$Qt*6TeK}cV@<gZ9
z@;z}1Z5wV#U4`@vU<h?ne;@CP>GtWC(;$;~Y9yjY7AG)%<kok6;eNb3(ge}Wm8b+L
zr^AW!V~xHB%cv$xIL$qxP~}P@BQe%QzNMJ50M)w%hjPON;(ZTq8Skx*%_gjSyNy=6
zsq~%PqtT8olAW~tQW5+^RVV-D{^uu*<r~1z|I&90FPf7RoYDGH#pIqdh4VD74&!rw
z#;s-^WDKAX2%Wwy=Lpl5Xu%m_077f&ncd@!kW(sv2Hd!9>!O#>mvxg;(4XxB1Q#BM
zoMWg-n-@{L``dS4r6UN6fa#1(RBe;{^%ylX|AW6+4uBu{?&cb~yH~$zv6?E&Rjnv0
zYJ59^O7t3*?LN3^3oo)qU?mB%x$kG9D9t%ckNYD|y5!Ws2^=#BA*$H&vNF$4xqNPj
zqFlHZ_ypLoSmA-oB?PjF&AO@L;uoZ1U6SY4mX|LnMBU$Ip%eHgAehY^Tc+J~a*S`9
zYf<o)9FJ-m8&no=eybW(N82Rxu$Vi2Z`6bW$;VE@Q&TuD_SMf4S6wTo%~00Uqhy%$
zW)^@360EV3<7aO`oLJV~RZ!m8(4aONbS_t5433Umer4SV3w79B)W{M`QD?)}zi|fR
zrhM_xyyl8Y)VGyqYzeP09Io47%+$u_J17ioO;L#$%j?sbtRjg6&{Gz25y!eE=5gD~
zZUaT?A!SFn)iG>BXATne9}{RbKuk67<DE_Z+rhp|@RvQ)!GRF2KKG(n%IntmC-(M+
z6FsR~Ij$m()Tr$R3=5VVtgQ?CO2lo)cQPqZg?^{L6oyn$92#N64EelZNj)P0s|gTM
z2JQ8S4+{+kitX&MQ<wAL`rslVK|%a&H7=NHoa}r{sLG`qtV2ZL9s99j(Ri=5gDKIx
z-FqJaMAT}@OIqxCW>k4-UvxT3Gl_L_&lf~3#Z_{s=R<Q53!qh;w2E1{>5Z(KPLC|;
zG|Ni`+oL_x@Onv2MqIf|QvgY|N7%TE?!D3|tJjh(H*MM4HW4v3v88#fOW#x$Mu&zL
z@D*UpO{T}M0EDH$>T4nuzk`kj_UkX-1*^FfvQzyL$y<L}*|0J%0FW68V3&AU<iU&t
zbK(SIzu>-3R&<zUhRjD8EhN;yp2l(eX0i|u35uDtDpIgfMRH^h*=0T>$P!bs=#_$_
z`n~&wzT&<{ARgwbYGAaeb6dCb3kufw>+)Mi5alYOW<lVkf~^8$A~<?NbK_vOL`8pJ
ze2S+s^OJ^I#_&x$eu&_%pk%c7gdM@&#dXGE>~^m-Fiq7o))P0qGfT-`weWxmK6kXu
zv(q4?mt>D%sqsA)W3q8y?But*GN;~@bh2XPd9~K}n6B;!Ksm7l)hXD0oOZtdamr>J
ziZf<XmiEbT`^U(0WpP+ZvLB=N$!lYVfTE?$4*;aX8FNrx=l>hpf0P2YBt4ntOZ#^-
z0+2XB32B*d>0hI~`m)cdCnTTls2CNk4GNL+ePv03DI%1{5s2Bz4BEpP0Ep`fp!+8K
zo!WJj_O-hfLcZ&}vjEH7sf3I7-k8OztOapxnt*y=Ha7c?I|5>1cQmfxP4jl$@3eYq
z69U&zBKcgVMDzo8X-tkn^6J!P`1Izc%kEKr#mUeJ6L<uz6@Y;!Abl!{$##=pYNupz
z*X;q;whuKzGz6g9jx}Q(aH!Pt$$i2Q;qf{#YpM&mcwkRrvpBum#Kgudh2Kz;b_2kC
zO5ufC1&rXjaegc3Fz*%g%VAjRvxk*ppQvnYRt;)1uX^^xQrDF1SJc-^F5k9;vBz5<
zZ${KRRD^hogaDjTs{6ImcpuW-3cZ=?k!BM_I%$#B#AL7cQtyOO+Y`YI;vqG%i9h|>
zOFy)evokaI+NT-k_1V6$_&2DLEHhc6wFX8MzW<E9gXNeHv@;_ourykp3sBHo=+ER2
zR?DxR0-_XPlrz@lNj<Gwp0mt(m`vCf9DI?~jg!lOYYX4+4N(Yi+;YmFW)yR2mxYHn
zQ)|Y}5CC&m2n`Sjn@~$ewtLHZK#KZ+rW$RH5VEmuJ@DnEMD(5aoEREfHZBzN61?yR
z7AklomzhGPQQbPOIhqR-SP>2S@s&+w6NRwL^LaPSV_~PFuBlljnY8gz6VnHybhoKr
zOli<D&TTT}f`U7r8s`S9d<rek0LX4^>dpH4`j#KpUBlm@EtcKRkwT=4rOxwO4g51b
z6>y%|+Y2I(9Mb84Yy#X)Qi_2SsVTQy=miCW_LMM#l=;0(8^pk*|2=}^wZ3`^0oyRC
zE6?ku`Tg`|nO-n__mmXb+L`rwvc%wCCq<em!AFmIs>|R8WHJG7fPGtBm2z-$>JR=W
zO^+M&*`LG#!D+zfpY;b@yTU#p@Z`^Z7{vro4vo<mse9=f?pK4-`n?a=)hKBncUes>
zgL|MOX{dpb&vgu-Ld9kQ%Yg@a7KcKf(rcx$U$!5E)1mye+_eQ_FOnjnl%@?mYjdDk
z^~2L*X{a>VuE^HYe8E_i-j&^KR>@)4U09+5NXXN$S04JLOCFlRleWtTy!z1_ee36d
z?uwhi*c~8nmLa^--{A2#Z*<fk%prJ%enUc%wxQaa)hj$|!u7R|Tyn(gg}+C-f^8w#
z+Wl=~<__4>7m>m}3ha@b+VNC3Qt`{L2WLt{fgOuG2QN_1Chh%tv!E6AW-p@u(<vMg
zg&PpvIVpR=^4sD5z4EV5G9Q4_4avnbk^Z)l|M@AP{~sXrj19k8_E)?AWSu`P?L8nJ
zzeh9iC*u9@-15TXuV<Y#F}<O`!zllK3+b1xZe+f6r2gNo4jiLVI!pIgEY&#wk0<za
z8yI1F(+K)MN(nCoE&~~CW}1BdZ@(b(kqA~@ZDPQXab^P#sAk+ueUHb)fYb9v5j}6+
zf)_db{^~ixJ9j=k{YO?;SC<{A<pLyqC;Sie&4CQkU#5nLa@7^cg!lIL`i6&>aPuHO
z#80F8Q3$9p^t=AZ{_{xhKFc^cIb}m2TQ9X|gM7ur#m^^L^NBr;d~=S_gQ{=++3~Vm
zVQ1%a3Xizh*nP?GBWX>oXDVKF7m$5<IGfko-+AoE7=IYp#@bq9C?5)4UwN)h%yZ*R
zE;27<CaVwo6eg=lJgK&ZhlhiKe|`P^jlzr~YQHSb{RWyEIaX7m-_Isve3?D_T@whL
zBA;M+rAJi<Mc@^Bj&O|h5tH}5Rn5ZOLTwg@XO|_l$2cFb{k(=B@FtEsHqJ_a|LV?T
z0;22a2|IiHy|qd9%61Wcm7iL&bG>i9dw5uj!eh5Oayq5f-TmkH9j^c<X!CEq{pa^A
zq?X;2%dZ|@xDn*dTDX3R*)fmsaB^&5U@lZ!LxY!by-2p0{_Jx8q(E)u_Fu&_<pMwl
zj@e_FCwgMTZk@^MBjF+IBM*<Nh@Lp7i;2IIRAy4(P2B$!L-a?tnB7CZ7Z5_%Kw)<}
ze$El`3J`!y^Q)^lm)&w(g)L-%E`tBp6hr_arD|IN%#CVepjO|X?OZj`CKkPB>99WY
z%0~3_SuxLFW){%noA4rYmES8VfQ6KOG{eiS{bSzQSse+Em9eX<rtdDoiO+O3fCW%Y
z^7j!zf4(n!oqg--8|XFa0X_>O0O<0c3m-xcvJRe#l#l^G0JZ>b7=14CG#%slt?Dmh
zi1PYBUJg*Z+YoZ?-#t@5Wki40&gN?>qWSZx00sJ?Ei=mv`n)MAr4jtEJ~gue3g#V^
z_a8Mvpw-Nr?38L_W7Eu4F>&1<wvyR5K2G}<!v3c*+8!qJ%wDTY@Ar-Wly1P$CH9#F
zUSnAi+=O%UaK8TWZLNcx!2CaEqv~wmM=js40q&nBhNgvZEPP(?2Xjl2Sf`jh&?&jq
z45|f`cWIaP`g_$E*L(eL%I{((IDn-WZ&D=I!v3px6fk<}$F{?RqS=(Iza?=lK$aSy
z_^T)~2z_Jr<`&x`EFl4uQd=uIkCC{=LjcBwGf7M38F&N}X98etmjFVp&`I}N$o7vL
zDp#DBy2-=B!e+l)Brej2j^sQN{H32i9s><wp^!JSe=XYFKgry^K$&WzL&aA@F<yj^
z-LXp`2k*R#raq(jogWPf{Ep_@LAlU_C8YNo>GC+s|C#W_@H7G7D~#19BV%K?;9{6=
z#}=w+Jns#g;hJSoo6F|S!&}`azbbou+CU=|db#(nrZdkFwgCGyTR+}1-dgBj+~A<s
z*vR~(WP}~D)78x(azq|dDUb!1)eYVARKl$ARI2yoF)8&+sFCRz?HHgv@zqc);C_o&
zc6TZ!93`MWs*^Cyp3g?*m~iWnEj8@enismfj8SqpXhb6-_+h*Gi)dFjw+9Om<w-rS
z<-R{DD=RH^FU*Zi8!wxN%<Ak(LwpL&$|R4|mG!iGGZ@=!gDakbSdrK)`)K^X%bK?k
zP`(DKn!g5LwSkb<b+#PoO9jczJ;H3VCAg&e*%=ay05KoE>+0yNNt!*fT+(DT^C}QU
z!<!YkoHu3~8I_1YH`s>9=5LeI>C4K=nIwVPY1FBmz~C}s8vycfqYWTZ-Th<-z%(+R
z<G9aY`9T)MC2aKt_PM$l0D^7;FnsdLSKl@Tl=Jo3V6hA-<>jo3-yb0C+YahF3sO>y
z`!*fY919EV-|#?Xj{8zPD@HbN*-kGSYH8gBfIDrF9Ap6Is9SXaTFHm27yyc#v|m>X
z8Op&(j^oEEKqAU*s;DjiTUs)m(e{+;`pA$*$jV?=NM~oKs*#byMR5s%H3!}AHr+-H
zxkD=r0dIX7;R)g+aLi>Xmmi0_be>WIPZNY;P%HqU4lkGP>79H_OmV>1w|#6Utrw;L
zuV%NO?JgH*Tl!^~&g=*~FF{ZVNeZJo5YU&osBseoc182xP)vSD?>7b%csyis3WaLF
zs<C`eJnajSqPfXqXxgYJw;$rSZ>`Fn+qY3Vs1-PUJQ?R*WpuKoJ-dfo-%#cHri%oq
z>`IyemN@a0s;avZ0Iz)AMC3j78rC3hfLbh~X}rt^Z!4`AQLd@4PghX8C#i++VBE?P
z3d#jQVV>^yIN0MFoD0L@mOf9sa<NHnQ=+qW4%MyA_Cz7$Pyl$}-TefBm&NIOnYtr1
zwSz->>e}CQ(h6%9R$C34(;3bVZ?w{34#`NUKEUHe`MsC;Pw(6}aIfL11~6+kfMt3p
zmBm!D<D)PhMlk}yB|2_(u!U8EG$PQI`*WmN)GOh>d4QiHWZfI(#Td0m9cg_EJ~43a
zK}-b|93woAmg3@?RD8Dv3!Ua$Kf3BEqgI)Y`<V`l2AukwPY;r&cZ~1ACAJl%&j4-d
z>UJ`CLVWOh)pi;VF1cbnK*`E+@tgL3Aq_+wX;km)v%eYPM_X<?_QeU`zx6xrmvJSm
zt-ljB`Jnsf9-V((WaB0FPa4G8zAxSigiX^*Cf#G#cnN`yK=mu8-ZXMxq!Q@ErF|c&
z;FgQc6eQg>FCDegIqa-Vh548HfDIv`IuB8+V<nOXgXPrsW2o&bXAcv}r!Bt^=_6d{
z!-NA#xkaP_%$pz}P4;3d;uhG0yVW(fxoghEhCWM~xy*LI=o9|&I<scQ20&fvZDi3C
zy9n+{@G^*a=1B&@Y<2OFu6y)Wd$m5)B8G5#XYHO$tsf^=DX+MB*!i6tc^G$mY4Ob~
z^#yAf`Rr=K#Fr_@68ug)>?>@v2ke^y(-W+_zJWC2WnUnUfC~?bxwq-lByP<6HC<*4
zbgRWA9487xFp=s}AramS%@2o3w9Y6o9_GPo0b}V_dq)S;E0BZHW0(itM;Kg=sG8cq
zF~DuEGc!+-nz{Q(<vCaV>%|qR;Ubt@TwI(T9(gS30=#!*2py9sy%vt~;%#*<iI9JN
z*?Cga6X<3`*9OObIz3aCWEuBeGy<6QC2J{kS-H&Eey>pSWPiSvR2u}$U+hkIWUoCt
zW>*CmLT&b?Pf=a70Cr3+<1pAITMir?5(7(;y0;J~?N<j*N?d)oaEzM<Ah4j)Om!PU
zJcmIorBeX6VcT1wNv5@DvjFb7;Y>i@8(Fa3Nzb%*qrKm1+<@bGPOZFlnm!0)P#-`{
zn7Cdq=6kw+dW_nr@bhxs$2zQUnF-i7b$+wBBJ#-J8c4RdPk??w8rNyi27u<igA}B{
z)efM*5)JQqe?d;VO&`xXC*i#-56s8%cfpBnQ&plRq3FJRLM#A0-5-IhKfwswzWX3&
zICylheK=Y7W+XI!Ub~B9NE=s))^4k4WdiDiS}MY@^3P%`2FOyYuS}d|YPY2mx-8<I
zVA4?g?WE(?sEzhJ5#zA&2f^Kk=N=(PuzOhX=IHt(s_7FTDws<t3ibe64`!ki?drJD
ze+~afO@d%cn%pN*$A67gd$qqTAIRTszExPVJ675+zzvB`wHwS-syKu-#|rZ3xtXY|
zgsjNOPkW#er0SQx3s}9_-w2Ujc$m>@9>#qx3Rd%`3aIrSNRZsu*BigDDv4;Dv9q<^
znNglkv-SYHWxBFw6`*w1Y>*_>npv>#WhcZ;KoPq336sx+P2XsfL*0RSYoTW2>i%Zg
zNm?PGJxRr%_(lI|1q3<YSU~s+bOBn=J&<ir6b0C^Ph>fp#l2p5tlObZXFuk<y=J|b
zN?9IEjq1Z=S6Uujs7?E&pgy2K)odND7qMD;VstboL^uBOEyXjZ&U;zzjs@dGpxlC`
zA(O0e2!w+oqGDo^iMRbZK26yG8!Fad(H#@T7mwImgcj(7Q*1bRcuHO#m2K=oPjiX8
zAqvuvhZQ+rqY#D6H`uIeP~1%9kL1j{6D5&LTzmf7ZHDuNSzNI&+JB*B{AHqmcv@GM
zkM2JdzU_809Dz#mlUlaf1QPmURXZ3F$XUXFuo4DTF3tP=Umy{cC9ujELNO&gj!9%f
zSJxJRvZ<4vL{Weu6~D^X+Z0qmEc89|nDTk_ERupk_5%s0wzf!&LeZL|Su(1|+mg5m
z3#5wFnggDMD{bb535uf~Ve*|LS*tL6hEMWkw?_GD>h3+>Zx(*Yu&5EtYo&2eLO=Ib
zSk$dGeQewtAT?oyYBwue9xYgQQhtI=Jxcw7!J^SSFL%Et9l4jjV+c|9Q=;CWYgeA?
z$G~`}(;}qMvjyRpm+BApx%QL+rsbs&6(95s$xutCQhU3k-@$7z04E~uA~*cY@cy(4
zGWCQcR7SoBX6wZo+VjO`U7j#ya7vynk3fcuqBP06fPACH>*nM1>b=w^fgpbp?e)re
z<@(C+QJU=#)DEn*1py238i0w5f1Sr`Y3z^_wM8&lAQks9Kppg!aK4XZO*NzaV|+oM
z8bK;6R!->al1c%O$7Z!g*Gbe!A@z7vd5ZC6AUDFS)nXqQz09izGh()L9@<mF$V-6<
zjbqKeT$Z~oYBFKdxyj{eX_I@oBA5a@J039=&m^~F?c{^6NEIE_dM*nrCK3H5sT{g3
zjojU>ziaq=-{=2m-M(f|K4;Swo&fL>fTgDLxHU9&b!TUzgDv{BXLi8{jjZ6W+#uMG
zwpW@nu5<4dfS$~y955v{?j+W`v<}#IGFJYEIGtn&;LnvZvhPoo7iwMgrr;?ddzJ<^
zch03nctB>)3#@P+((>p~Ck(nuA9SefkL+vq_WGTKN==q_Eb4ntQ<C$5U_&;5BmHt$
z!F!pQ=p7KNm2MPu;d1I>rGBuPQFRqb>|{NsR{Vg47a;15d^<~e-7zbAL!#zd>|wZ1
zycOuqLA-UOx{1lxkz615jYeW@l{uYOsu<9_u=1Ui0&k%Ob+c4F4MA`c6G8b1gk=6b
zlF{Rb0CHH8Sf1d{J8QLe9&s|V6beygajd|4&G6o@vKx>^Edy&tPS}*}-(dAjS+1}r
zC)*+*h?@@*UzyA)@5<!o<n%Y|5xpE!BpENLocq9Q6V=M6WLT)wm?1lK0`sTh2Jm<h
z+{I;VKs+gG;Dz<_Ry36K1L~c4$7>`>f<kuOtOx)k|F#1y28Z)It@jW{o$+6Vir(^F
z-`L>w!M|2(TLrM@xjsouhE(nkWl7xvI!g@7lHe+$z{RQev3a$p<mS3LaXUZ*hzzjD
z781N#GI^+r#oBhS5iOIZ07v%7VN4N;5P-vYzrNn2jT~7YJ)jWLVv@iEi<$UxHx&EE
zmsCR4sM^&|WH#`wFQc`4Aka%gN@Y60-ZmM8efH|O8@+$zndbp;3f!g`$6)B1Zm38&
zRRR?2BKMt%8liQEu|^9j$fF-@Qj7rI;<AZalFPuela$u_W2ErvzCHbh$PdD=w|^x^
z@2Y?*Qa8ob#lL0cA5Uabj0Eg0J=uj+zmX6bc`TaI3A@$1@md2#?g}0MN^pa6`w*C;
zaPSClJh6UQ!w9Nm0HW}`F@BHXRz11^%br}bJFE{-e;Y8lq~v1?ydt1lMu_PuXN&#*
z2;U*pZBP!9q0<M8Yo?ICev{i^8I-n->MdEDB$Av=j*vQxA)4;RA(e8E)!m@n&jE@7
z10-%xasueY=?%9GQx@(CM-{wz47#eM1@!(Il{xaf4;HoaNZnGH6c901Vy|%9j>o%9
zPm2`D$C#^`PE=jVZejWJw=I*@?Zl=B+HOg0d3&_3>DxWo&KCDPIXW;t*!tQ8kdR;-
zOBIKn<%W;9F?vbNAFvsL$LrR8Mh@gBb_jx4iR#eiQ<YBY?m%<R6Xtc?QYyXRhDxX}
zn|F;5`oZ=yq>BfFEJLVNWF@Ac+K!>ue8P7e;{JQY_w6Oq6J$3t>E?s~u=_!*$&R?)
z5u=jA9TcN2Kq@Sbfj2MgXW+SPC+PqR$(gQv0O7rw9#6_P=tDJnk9SZTOU+}rI$I$2
zPZEIUNPy`(O!D5kM-i}#@D9otj|Nq{9#rN5*!dV?W+mvXB@?Hj##MaM>48#xUwqSJ
zU<qRIHY0VjWt`p!@9&wW)Y$Tkh|_(Q*}M|?SxQ|b!#kS-39g{Y^U}f>0JZeJGH3|U
z(cR#60^I+UW?lpT!67HGgK?KF(S2aG9A8Ly$12NTgBmq>mAYe=Ja+O~FBBkT?PVa!
zASv86IQ&PQ3kN+tbf{b3Uh3h;(=uf~B&dMX5mg;?<zi2^qU%eQkz0lg!+PsL(fQ&P
zH_gytujRg!jo#BEp4o1G?cn)vad=2bU*R>Ly8TqQQcNMvZFLYA()O<<047A#l$7jF
zr!CNaqJV)7h#_6(=>kSUP9h*N(a$}AuQjk=dwTM%Bla|ymqFKkWA}=XgNBM*c5d9V
zvC5E{a3CSEfySwwnn=#f6VRt1k$c(SO72shn31#%fCPF6GT8QciGT>OfG10J&F^%b
z$AdUuw)=$D4g<+8xU%lE4ra{u!P=b8fg)&2gvBnB_?BGm(5P-2vh<xCDJLHH^#e0t
zw;_VB2lq5WGqa-_hqIVp>~_AuL)vbV#hNYoQuT=U5-O41*#P=4_a|Hil}>QCxlGbJ
z4yAG#5gD{Q{C$zuSzt@WvCoBrzROSWc_xeusFTFrQi_$m;?O;DJtMy^`FU(+T|q@%
zs~6mS!jdbx?s$0=bKD$B*>{koY)6DT&+s+Hb46!)nwS=^Q{VO#IpCGLZklD#IfQxG
zx!qCyzgOyM_8lG&wKbCe$M{lTeM5h+C&?gX_Jm_InQuT5yG9M5?W;{T;upzoYQ8Ve
z*)*rJN7ub6Y9#DX^!jAzRZalP1SH^0^5sQEv=VP3jI1XKR<mbT_zW5OHR_wLXEOVs
zZI(;*qgNZDb7s|R0ZRZnU^v*X*FtZkXxyeMjjyxRPSPz8x$fX2@q04J2k4sOWB(tz
z-a0PI?+F`L1SLd}R2rqEk(8EDkrpHbb_prz?vfIaP?QiU5kb0h0i~r8X;@skn_Zgs
zEGT||&-1+h@PTFT`_#;wIoCBaXZ=s&<f$k$+)A;Pr(XjQz)JQuK0Gy}P@ey})R*6!
zUTL_@6P{b0w%|%`twFQc$PAAXgxS6@9-{E|H5yT~h6_2H22|W^0cl<0XRwz_1wi{%
zDq51nXs0mtuP{pUz25NeSOu&AHlB?1t*gex4}<u720va&is*=PgJ;qJ2YQHyCjS9-
zMz7{lU$xwotS1-kwo9FJgA45Ga&PA^EX^-UzOTF*Pxva^SA5yvRnYuA)d4p_FGU3!
zfX7t@W&NZ?7nlDN=kN-b<@vAA1p1LoWBqq=9dVo(?Hr?XbaZsQ=*R!yo#4r4ka4o6
zC04Xder{AGEitigY&o#lc1Mcn{DJrV-jK4;40jgt{{!B7SyS?1E>2E!+pKG8{Xyt-
zOutlY?$@m<+gfC3Xz+i7`RFV_;s$3BUhA{4Q{2`MYx{eA^8nLt>Y)(LQ$+DH8HiUK
z3O@VebbGmm$MUL2t0+C4@jmJgf5w>-mLogmNZ@6abBar*5Q2ro+sG{L{=2b%<H0r)
z?JFx2z;kV%pA@?+L56mkeqxcVF5U`VSy{R26CKfDgdT@q4tTcsi{XRwL0xo;cXD<P
z+T66Sa=k~5{t7*=y1M%A71RBiwm<o&g&;DHCY!4Le8<CL1)(%I0Q{2^UH&erT(bM3
zGl((_VoEWv-o77ydW2noQ&TX@qqP8wOY)n}dd7td=iTka$qWOC`_reS^lQDnJc3{y
ze$&3bGuE#xEq#ghot@GtCU{jl<$0@x{yB;d-o!{4-jtn~mzRgkCoeB6+kg6dhvJMB
zu<@I(e+Poe%(O0#4-5|SBCTzhXioe4e*wfQ^B7gXKQxD{GutRChC{I+<24}B1^$K%
ziz0Bf5ulTj2;6yTt|K#+%lH;)VOa|=Uj$#Ho|G=E7vmUm028M_1ST;!@g3<o;2U^5
z#aC0$43~qCGvAx!dCw0Wp}7kl02RE1H{ZbNwVtkD{`Kn*i5rxzIFK{(`aO@%KI{ss
z{D&;x#m;olM97jXKPbOxGIIwsl#+t^$%c16W+EKRX?|E6-E<>(?BVMV_~%Puq(jGF
z@d_inu%=}hU28C^Msjhjbvf2h>1>HFle5rxlFj~?=sE?l|NeLd@N*lgNL>E&H~w9w
zKVXA40Q*h+8rlDkkN^HDNd+cj%2hq{@7d(cOZwMdE4o+}9)rnWKmM#+|GqWJBKeK7
zB~424?;HQL`}a>tGW5}pjtB2tTmSb9gbxApAw)y^;@?sHU*qWCiU<K3j}fB%ugU-U
z%})qOck@Q3%Bdjz@4HXWS5bkIa%5ZF|7~9zT{O~EjEfg70fBTXKw+?}f1FvuX*n=n
z<#o$bg8-T*1QlFx9Z4Y!0O!~Jc=+;$L9^Dqs%5|gUwtZBcYCL=zkfzTT93B<Y{!TK
zN4o^h`crK^T_d2fB-1gmvB5uoJ|S=`rK5&vZ}Hs5z$S_E^@g%eTUl7(0Tst8nOi<Z
zgCz67dN^=&?Ee)kKOWYUh;cx<O^9HT;c|XbD&?taUnT>yX{&&N>#~zJkw8jHnwpct
z&L=3?*XyD1f&EnN|L>06$9nwuu@rC<nw9thZ=A&f)?jU4)Oz?Z_+&nTpufLAwXpC_
zRJkB=<mnVg+^4(uXoQEo_153T1haJ~#m<>@wXCdclYgpS6l=%=%+M!aZy(m>r>*V5
zhSH7C?a(6P2V$G$PUrvh2jGq=V(1s8M6$5rPXn=29@0^aJQ#=l2}!&P3KhDrxU&OV
z@2oA7IN#>TUy)Vapt>_y1z?+^G|9jI61;u(H=&Tm#bY-69DDY^pc?ks6M=q?J1&2A
z3lQnKIr&cS{?vyp4=1x2c62Z_NfFQ&dRi|ex(eN?pb6pn&Eu|9B>C~&j>L%2MsEri
zF}FpYUOeL~FJQEQkY<nnX(`3`rCwDB?)talcA&AmetCJ;L1wM-oNVZbX<TVQjBrQr
zdYqQvLXZAx*oDOEhWggWXAPdVdIL?p8l*j!{WrD$^V_#pT<)IkR`=q6`xm;yDJfWd
z9rBu*8ThET&wB(fg@%RQ9Ia02#&xDa|6890eP--6Lfaa&?Ed)yWDqd9(z3F~arYcd
z;<!`0Uc&Q0_-ieQY8>c+!)b^@WCoTfR&S<lG?5Ci`3_jAUWd9<TbmA?&Mx;Mcx!`A
z8^vFlyomV(lVqMnNY$1&9FeW^P-1Ze+{ebOHv^H#sw*jBC@Cu&wpw_lw+HziTLy(d
z#93jJ-lAW*Brx{%xP6Xa+JZX>f<uUzcVIq_-fLr(VxpU^(gvUk{ZSCCckM0VwesVj
zPmnszpejvp-nl<&29%`lOD8r5M<=2uRa&gBJgCY$=HclG=`=Ayii$S7XI{+Y02+If
zIqL9=+1C>zZl9+G#^@RFdqen23J2>;WfBQD>+2uRPYOhgny)SmB#=^2QXbXGyXSrR
z((F%jgv$E*_0GV>P>kegWeANp;KUj>L6r?abp$H=?EAQ4mjFQCyCKsu{BCCkx8~^6
z-P}<S!ikQ54z35+<yakD!FJ<K-O$a!a-`wXtzd!e<PPp0K%2nrb)Dku=7kaPEEOFQ
zxDRt?bb0NuO0t7)JC}A5AK?08a!u`oj(24Z4tF<@-a=+|nj^v6A~JQ+V2iG=hC5kh
z=H%d3JFi?FgdEgzTkBf6PKB3xy|`&@R@1$6G4ACIAmtJ82PNWO-04SRMY*5m(;?-^
z?0d$GJ9IO9)8n_du8BgEvDA`oL^yrUiKqsWCixwwu}<&P?`t?B=ZVCxsV@e82f()K
z?yAcP8w^#mwxx0(>U9jx)ugq1oi@Sg^2*!38KtHD);eMxuaV-5&-#t9h}?6cn0IQE
z`jq!S7w9ZmSS;0anQ7Myz~Qq?KZ`y{Jga+2aAXFtQa0EIXEJC|dCkfS{C>9N5gIUv
zW>OS}=_Yh%7?X5-$(LVJ9M2oLsrW&&{VNSe_Sf|EruuYLP~Bcaf|rN8H#!=b6R_>O
zRd+cujQR7uOTvFSE%GyAZZf89)n#Rk2)l5t=jkOTH#LQ<*W-12_<nda@BcbNMNf~q
zOHA-yWQ<&*W0!?iFtL)>EWM>-XN4`?jXbEGv$}rp>);Nt*KJ9Z8nakLecwF)_zMwt
zNcsK+`TI6HI`S1K#~uxf{n`6D%3BZGE#l2;dXIit+0&k?nBN<8^xm7dCL(_|Sn?w7
zyLaybMr}@<D)tw%#eUapb%`8i4-e{Ym90-lD+dJAxYKpSJAA~dX%}U2+nb5a@vx2!
zW(V|Gc|mc1mBt{rWTE#3U>`hCTCK%=fLCEwND>|PA0~(D_7OL-{Qd|+umP-1Y?U~U
z0B7m7ol=|JhxdDHy*vO`Z6S)C$Yb<H0#FzO1^VANAnl9&-3L|OB5Q}-;Lb+CQAGwr
zPxfOCz#WT-Z0OMo*PZ^@8h_g#Z;4^EfEWx63VHxtTOM|RiEQjnkw2TW_s7!a3W!z`
zzNe5ZE(Sx6WE%ip+FJk}NnEQ5NS$y>!2od6Vr5HuEM!ryVbg7YA){mAKJ>wk`IGsa
zqaORkMZNM>{Iv`3(rRnrV`G-o5qSQyJ}aezowGwCOP>CRe%}azNm=v~H>k%vS*L&Y
zzWyhRW50v@8ai;>r_6f%XNCx5Z4ShWtdCB>t;=_4E+@Oq4kN`s{+7N2K#0IvYA>DN
zKbUFDQNQ+W$LzN1Z<>BImzG?{-kRlDCvXNAU=<da_kj{_;Zla-STJytV|MzGKN`{%
z2`GJCYhVjdroA=lqa>9Jhhq-iLkEkb`D@#KnnAK*N(D-jN5|Fo6I;P$o8>1Ex$$zd
z<jONgkd7SK#!40A#J_8Q0fRHeS{UmSh>||R^Fg^lacTEjA4=<uyAr6JOi9#UkKqvE
z8S~sC7u$Y%<J0f0{NqI~(YV8~y4`G$j4-=C-0j^Q^R;;Im~+f&&_;~=_-E`f++Pi=
z(q+O+Q>%1Qd#N^ieccSOEC`zuWEeWO`B)2zsNI{b!-<qQcHJFn5l2W<XD;P^{`~9Z
zClO0{_Z6%x5US72felBbMsi{}jarolfkS*X0swwfH2df<YXkta{n!0zJtaI5c!I%P
zUJGmNqTU>bM-wOhK8l_rCFTfIiGvU<*@Sw)M*5(f6ahUgLJVT+pe^B)a|g%;<r5cz
z$hyOsy7CK;owAn7*gQAFpzFTc()TmBP~e!)yF_!GT(*3-_&_gvqfWc0WU%a{37xAV
zN~p%Xsad-@W7|Sqe&9UUoxElgtn`7eNhA(XA~p>mG<VAAvct1mQ3Mxj%K2xlzkDkO
zsAuw^#p26;LJVRig%Z^97x9ZW>K=UgwfHG=kwDNfC?^dJT)_oRqSIbWI{CN~`@JZu
z-QZ9VnfX0OYHX%m8Q(O?Ey8Es0i+A;!O)@7)zkdb{@#M~sDb6-mf?f!@kQ4@cv{Qw
zT1p7g8(gXoqQU|Lx6k4EMG}}MdqK3Sk^HnTA1n<-5v!8hsdN1a=AC}#OHX0{U;hn*
zyk{_}-*5lhC4vADjZTfI$Kxtn2iRA{3wE8ruP0kR$L70-b0;Grx)R93NRQUE9wvU4
z-lO?Ksg&7SCg^Iy#G!IRUB`P;LOq|OD`I0$wf32P-cqrlirV2X8d!6%X^+<*!fqqe
zXlw2qE^3x*i>;O9yFyp*e+`1Ds2qM(_PPbzY->k=bcLOsr}y(-RIb%}i1|Ln9|1=D
z^8p3#w(`j~FG6HuFXBq)vq7UsF~gms5SP9z4-_7BH(?#*_O!o9n3ERGOxOq)gkvWk
zjGf>n?{%E4Q^1drF0PLbhm0ae%0xKEz#<>(tt_bvmPq{uaU|b`i8O=qeU2;;1joOL
z4N$9k8e6okSBk1!*jU>dK;nqa>|Wj2%v*WRo!=c{GX$8M47R%~KZ~6Liz(DJ?*nWf
zK12IhX6;UAf_NR-^6Kj5HzbG~z+3Z1d5C3>KTpjS9snT~HsfXZ$F-K0mYY0Yrrk*^
zYq!08H-D)`dYI<E)OPxo-RHc&9gk=thZdla<H!*)anZ->{)=iu31imSTs7MurebeL
zL~(87p2O_3x%K-{$Wo7MjYcI`!&%)P?AM<`D!}cpon`0l6b5OJW_}&2#zu$REhsQ`
zX8`Nq(n%Haa1U=e`<L?Z$#TsVUtLqT)f4k<jc2)`#@a<QoGz5y6$VDH3%@rH>0YJB
z#7+%Xk-}vdJ76Znkb6WoogC%7);Yrz5CD0NPv4BMS*f!sYh5&bD|>Kd<UoAw-b6?I
zaQyi2c>M5i;)Gw~RzK>XcH+)}+iW5#&elHHV@S_^K}WR2SBhYMZph8gxKZ{oPQ}Q`
z=%|8vr2xyc|D^LGmTXq^y8UutOO-8aq{hz4?<*5?@B*;kr?y<IIowRvvh3vN#FYCj
zwm)yAz%V{7)kCVOi%7lAFq!kLv`v=D?RtBe=o>-Hq2DxRb~GQtME&>&-fKb@FiJ4>
zb2S}2b`im1p8hb){JP^<fQ+voj@C|myWLhsTG(Y8YY;o2+*nNz;|=p;iiazF&45~Y
zUmL&~BF#REi&JPf^?>{b|5|o_ZJSthEEhC&VTdYur_fj)!QRLmssZ;U!2T8Q+hrW6
zS*T~-S9)h{N1oHI*yrY_sH+dDonAvlK>SOwLs<#e+b(0hE1~(h+*b+2wtZ*jT&du-
zwb!d-V)kzUCL(ykVtP1#1C&KbC1<#7K~rTquS|cV<POzqQD=E8xf8gqPpO=YS<{r_
zs@e-;u~7Npl&ctoz85g*ROB(RVWpqLtgt07oPBcPA~W5Znp-xj?#p^Q7J;0}-ZuHt
z;^GD@$`FqIo29T7hL~0zWiFE^lr>RuNkzko7?EwiloK$?cb3*@ZP$duzmkV@=vCEu
z99+A$$Y`=@yJAoOCEFq|>=A{s4#|t>yf-CO(>{5HJmy)Uwx|6;xlp{N=7XbJsNmN5
zP@u#dV&gG7+S#y6P;VT2Bn0+~#QPg!Ge;Q$`(dAQ_DuvgqBshl=oQh_=s%XwOrFAs
z-_H)0DVaRh*7;1YLV!_aO|mFy_kxs5bFM&OWk${eB<k!{W;sBh5Ei7>R|~~Y`IsYs
zU~My6Z+jp*=(7B%mPFN4FWhdsw`I>MpAdg!a_4i+@$-l9^3ddJ>+!zTi=x1@FB+6D
ztD`I-XxeyBUSzn<I)DTTIx~aLIi>^`PiHQZ-0vqeY{0^?*$>R>g|iRMC@@0I;$OuQ
z*-WRquhpPNx^tBAzz%iLQM}`Se5;7xVxZ#T3W!Ns!Ft|ONw{B&s+oWWkTg9W{s~10
zv^2f1UaK9gv60wLB{&EhM_-o1bFfyPY&fyDVKK3j2PHuBNgc%~!Q6vaHQWo<<k4^U
z7$x#!;-X8FbHi>~l6b1eTIq~w?hR>dDUNg%lFM;8@W>(P8l~weCz%L-udZSVbVKdd
zARtzd!F?&+f+&|1(23qF)M%rMB<~g5>ToA_3TtVbP4hw$W-?z)^mpGFUhEe<AScw`
z5O7~;Cx#ekYUJ1UimkSMNY29=eg*w7@2*|5&lG8Ql;=`2D3uRunsR1S_s<)gRNPX{
z853Ep=)|0*saA&dVIqwBxUV<m%FprFLP}hha?4#k4Qeu1hD`^_$M7DbK9l^BQ7;VF
zb&cdZWb}XL6$tKQ!l>I>a8Fuj7K7@n1@z#ABjB6q%SNq`xKOc!y5m8Kz3#6*hf}oA
zEQgf?CXQE>D}u-IxJ2hL@?ggd$8C6JTCjKXo4Gb#eTGJPd<MIkR%Ex4#H&{t%Il73
zk+(j#EE_-fAr;?z6B#72pVnP@W#Z&8`Q(Om?H-fIy}s+#YGua7<>lR5z1f;m3(WAW
zzV3?mv^Q?p5;RU$J`#GOz5V2ud%uRx$7)y*=>P&83Ce}4>Wm<r-P$a{;R35P#Cgv^
z9-muo%T*0ggOK0g5QI!lkk8paM%B%61wAnf7K9;g5x*A*0Lgw_%gpOKo{H}G5(GBX
zg<kIxJ9155!swHc9Q*=#@MUZBHE-88m!<j_D>Jhpm~(Qu#l~gSYUIrD*T)?-b4el`
zWUEJC2@}Yz8F#_euJB1spTU(ycMxq89rlArukK*{q`<;H*yGoP7ixu!!Z_UHs>JcG
zk-^ri;_QY*cdhNnEd3M5qj}+@1!XSYRJU*WUqSB3D5nbB@{efcyq(Id8YzWGbTO^j
z7RSKB+(Pb?-ruOXQ%&~s)WBTudqEu6H$JYmn~?t^(pL;yQvVtDJnj2XXlAggz?tq`
z_M1*tAiBd`HzN{hV+t#?6Tf}z?1Dp~I+SpD*t~X!NBU)|%!ePAcx3Fh2C{I^5r)t6
z%)buS>N@OiA8%Ra%3?$=#;^}}8?~~=<VX=cB8e$r6WO=XCD9w#+NY0{47q=W%GS4&
zx576~yy)vONIKg{wzasHAXqmq^}3#FUKyigq|vp4$ZC5+J)D_xU%TA0y;=hv^ub6W
z8<H@PRtJK+GIqwr3627E93G9Js(Ny_Kgr^WIR-YrQF*_@EJ9@7&o%PPPNUkmJ*JYb
z)VQ6DJoc@d(*f0UY2^0ZJ2i2Nw|FTrDg1o%ZXQwY0FTL@M*~IVb#G(2xZ7P<FL7x`
zptL`^>*R^fRXM|q+QbvNxadjoroEwu0#7rR9{8|wy^lEJuZ219U_1<rSE<BAfJ>I)
zwNdU_%b*m4j>W){;$T&CPXCvCOdFlSyhiV7@@*;7M;qN{M<d2L%eYGOgTkLU-|+{g
zsfQht&^2M^QE}Io+bKR&x7G#54NSii`bsL|$lP~g^`Dki_2{B8Z5L!27w9rI!GRGe
zmKbAEgj^fm%=xAovik&g+EpOUmAHwabP)Pc(@wlB(xH8}*t|1c9s2&^=rHnewpWSH
zn9`n>rfA)ergL$b{P3%tEF=GKj>J8c?5Ud2MXjG*P_N3~4<dsZ9^UUG@-0+S8A%|r
zgK>thQ7F{@GuF~nXKYwix2$2M47>iBfh8rRlaa=XGQ&8ttfyNSHAZ^C1DrTjGY%TY
zQE}YF7ttJCt7(U>0$~T)UIX5CwH00h$%-w7#bu#O#e0@juGCFV+6j+i4K>CxgrK6A
z-LMs|TuiLn6iQx5$m0ssQH{G|^(;2v#hFz4O4i_X9G+wiB;1&~f4(>V-6miA%IF;x
z{`ve%wB*8X*}i+Xn}hxte{>iB*(<sWexcZO>ly(e56;x$-#Gq#i2`t9HdEBZCYa~{
zrHJu`ur^*k{k#8m3O0fJ1{LMmi}j1ZN;1nwc%Q#81qX-0CVY<nnxgBx_Fb^K-^R$z
zwL%t^At<z4*iWD01BvHw6QQ=8>wkB9Y;`|h(GG9`mC~WaupzZI!~p;CB}Qkx`}_OD
za>BPRo_>`{@q(YrPmr^D-nS27zHky+S!^64%hN7!yJ77A%mE?a^Rd@m*OiiPi=7&5
zI!sJR7slU-Lr(<Gqp10{H3EmZuBOo(!xwx3V5+!3_<G~__VyxBzj{mG{c%QEnSH<M
z++%wt^>6-f`1$!=L`{QmC8_C|*XT*+#=+p=;7Bbl?rYLJy89CUY+&4^z_C$FeF!~o
zxaTvbyN8DuO}-5LMs#fXH^GG;--_tb>(c1)x&H1v{3}#?UKwFC^k>=B=)Y0k{UQ}v
z`)__ja2`#+SE1+PJL=HlVIY-%a_a%f-48bi<by#!eq%EHUQ~uuheGoXra^??tLpZ>
zi>H(I^fnj<|GOJ6&qbp1p`--IKr+mAhj|0Tres!xK#K>AMBrjb)qZpfCzm>90%_^l
zq}qXT5Su<AI3LFazgrm6($bvUWTer7=r{UZy=Z5Xr}wuOK<$P0Z*(~Se+?^MKzyo<
zl*mT+_>bhp(O|%yTe(;8vYvnRe+lm$V#(i$ccrfW^Ai8{=S(2LTd-k$4T-A%*`@!s
z@aJ_3@fUbpGhP#3I-k)C7;nC{wmwoQI_(Y^$mBay{V23NT=2^xlKh>^s`UC?`TS-X
z=n$VuOZiJmN-$+!&x&5r;s-*W<Xd}4K|_O-NUv0mF_pzX9fZQi3m9vS@x7PM#axn(
zk?zf>;$mKKQ<KLJbTDotGgk&Sx+PIR*Zf~KcDA<M+bGl=o7`Wuegq^w^uofme-i)R
zS7yA@VeWEBm6w-SEjeD}xQW<pEkV$W2+8fCelBWZVc|phLO2|Pn&%h{wm+LB$#kHp
zY>cuZ|Cuvpx{I0^vYMK)9;x{F_@q%GQV;Ia-#q<-?S0Mqyjr>hK^q9j4!7wMdw0OZ
zeC2Fdfs*a&!hPibMwPOMT~b<F$xWX>ZfIA&XI5Z{eg`pg3OD{fI%u|qE4c#8{m-&(
zf_`kVKRTb$i`eRtl1bH<E?qh-sld?SL;J2^B(O-<h<ksn3@dmh<A1c^2X?E6rUYXQ
z_xCfq6wRFC@fA|`#TK7~L-d1k62qC^`<{f_Ui*){sLMzex-iNR#-!fT<wL6iH|NE1
z&EVkRBX}DgYfF>trPI-~NMG<Pzj`C|KVpQ7(>khP<NNS8$F$TnF!XQg*z-wQ9&CTR
z`2RA5kEWa2b8rYm<$+0l@jw!#F2(ojDpwHtt$ZLG3I0W>gPrJn8r6e+F(H5K{vX9i
zu><y6psP@y=|9r?fBecMlVT;6Yku`yK>iAR9ERVUH(p4?La+N0*ah>LwRbLa)DgyE
zs8^kuGD$U{PF9Nz-IM<rCHmQ4k>A$WZRZ!XZ(I}KjVf^6cza4`I4#Ajckn6)1Kd<;
zslAzxJfvg4PqdU-!1|~Q|G}wQ@%w?+P*D;0|JX{fxLkx3R8$?M@62x5)WkD<G&|lD
z{>YorG?(WI;t$3fGgDLP$?N%M6((au<{9YpF&R>lZ0qF^C4G>aWb9hM2P0PrHfP7n
ztmG^9W+@xM;Z_w{^~7guuhZ=)%f`YY3>vG3m2>bD#MU)@`=&p?GENyGG}&6<fm#Kq
zWSFjlTA;ko>9S_t^BahW=;|KyB)JUC!J?An$s;Qp8v=K_=V-U&g5R(rxSyrHrjuwR
zt;_<XX|WSpv`{Kyyx#w4-*yMlBTazErb$B;!!arWlr$LRGjw1hWOTcQm!2YS)9$&t
zHnAz;fYUMobhkeF10f&bK%Q4l&JBK=gvU$4L6;i<+BC2Zg4RSu_vddLw8wDpzSK!y
zO4D;7jCz>UI1XaSB^(_c;~t3+C3)}PAy=F0OrQk;DCE~bZUwnIfSd&usRrxJm4z45
z5l{1lnL&Cp4gvr~1oE+~YlB8mXtKv>=;!4ZeRY9TU+&Jd_kY!OsM`KnK791T+7%Hv
zSDygiCQI%kR?gX}o!Pf|oii?^K~?>>rnaOv7E+b*d`?epBBZQ$%WpQ0maY4a1)G0&
zsC;?I%9d4&HTh`lh-SlsJJs*dnrlV|jza?NZ%h);rBR;(`w`W+P2Ev_Z0)u&xe5d8
zqgL0|%DH;zQGaYhq6-}1=GK^%8*mMWP<1+rg`_U0!@c8y-7Q=;BGaM-OGZe;ZIj~u
z8mlzPXlge1#;ls=-rdLTd5a}G+uH#kX@kHM0&rg+*J@z<o>gDB$*yEL3i4tPPjky=
zKkm>edk!soA5pfoBtQGLRQ^yLH8vQ8g3Z-5uXHzDA{aB>8YZ9ZS}8gH(cNq$(Wxfd
zudGuvD>L@fHLFkSO@`p)B@8E~lr6{aFOzH+znbp0{&4D{p>dl|Eimhy1ciqDyuIc{
z#iw2u*Q0av_m<t*C=XW3`KTOwzQdKBh&(lOw61g39kwuOAxHP%vrv|W{a1tOBMTHg
zr3PJ!-W*L;u40SAy<aRe7LJc=ZTp`}prWp`_Q4#*%=2NG#w+~HR{KP3kcq-v&GoYl
zn=ljHVFefVGr4gpyXft!rvsCrNZ03xtKsCR?xY2_t8^8FVb&3QZwX3Jt=71NhehVQ
z_Ybck4wj3TR!m0(tA%dAnSFITq9oZN*<^keuqJi<qI=WPt52CDM}YVS<>ghTR(ss9
z0JMX{%cy{ubotmIP+o|wBYA?F#$)+9<s5`uld+b;h?)Z8xgkqyG1o;s`xM3wJDkZc
z5K8IRvh4BKb9`2_Pi9ffqwCn)WWAPGy?VEB$9oNxMtjt{@)#z5w9Q*z+%3Lz1ek^w
za38J!qlkOWmbqJ{ZO4H289%;%CHJbuz}Qq$1yOJe7t|WwnK4W;t23O2Nb*<}xVV(E
zJ~Egz=QXh&6s8bIfem<qWIXjEF4f0JkiE8I*u?EfQKHq_1Er}ULu1pb^%B!=YgEj;
z;Av`?u~n}kLv7yVu$-D>Oh*p3*}Piz-kqC*A)oh)NBwPHFkg4s+a&cql0op74f5aa
zJ^?xY#zUnR!FnF1A6$;^dDkp{^jWchu6Z%`z}=S?*Vh{eDm2$Yil9}}cS@^k!TY=A
zaQA4a{}mcn6`{G0gH^jZ9+Ay`JN<C@btUmVl7m}|+BQCjK${XmBApfS!m+x{XT`Ie
z)f#K|-!*BP9#R#y&D~z}9(V9Q-b$`|)WJ_4N#${7s`$a;KO=4yKizUqcQD_uiUa|x
zyQ<Skw&0i?2xu<}G<Y~=TYE6Rh65n0{Qa;Pa0KN#+|JMps5@-uig$s_*C!th$0{_g
z*uMlxQPuSs5=U1!t2_^<lF@Zf><VW9hUEO6*?pGA_S@Yh6giT2bxQ9l$kFiLjrG~9
z3TcNDB=0t^1(d^PH0uFMr1z_GCgzl=I3d3#vb???-|aad^Ffbkvm_u8k30|{&y(xq
zJ{zWpx})-w*(7%m*J<c_FzUl`2ogHb`1YLDYp#k%+r!<*g&zA(;DS*AIgc8E;#mlk
z_gZxA;1JP!S|3lVsJPDpBF@X)eg{TORQN&pUMp)}G(?{n)O}{ypw8EbGG-WEe=yqM
zQVQgh@3CJ6C5o;ns(a_-JlaBMsAw|jQX5FvtnqilD-mnQs}=~4i36qGZ&$=gB7_%N
zpuvV8L4BA53ZSygU7>2%G5YRHN@a*Tg_Xy|+;bMQ6jXgmvmAngbqyya$!Z|q;pH`X
zJ!ji^X@m0chmA6}JvMtU<hj$YxxeEHOx$oRPxrx&%eRYHTv=X$Fxm##E9k;xZmsXV
zrJQ0bNZ4WfZM|dw9Bf<Y8MVgLe(Z&j;7V;(q2M0%@{r9Zc>VStLRtt$N}XSOT+h};
zMW`v=8?TG%t@?Wk*kR~-(*6Ag-npwFnQ{-ObxY|b0Gw$oUM?hbHtcAjV%}%ovO~48
zov?wjS+v-ImLX^W$o%9A!<WZnN3<tXeVogzxn)F9k}OG#c@TQ)Gml|)_@h(?zSZTS
z=ei&dHJMzP2ym%8&|AI7uKK`$fU{;hS9}1F7sz$Mhvg&q^Y01j+I|oG%F<`}sZ*Ma
z0x`}xN#nK6vud}??6c`6VFpTA83V#aV$M7~pMOC)K{QNa-47M$b3Avl^75_dMXu`Q
zhh&1Na)p9%ifcmpm4R-%HS2&X<0lVO5?){+&-Vt**6xV--j4|vgl0X;syz4F$?@9B
ztTTh-$!?2;k{DjF*tCDZ>eK89T<}&O3itth!uHJ`8V~m%l;?{H{@geR@<LGKOPY`x
zOTsv73?hT#guGN@CD)LqcW^3iWO4FtEN4|&bZq8AV9@Y@+%v<x)l1}hj&iPZB0dcP
zBWfJikZH%VEq+(>wz(8Fa)f%MdFI0i$Dz}tId#>mRpWtUPD@Gll(;tw9T)DR+6MVu
z`V<F8$@x7Fk3aSDO}Kioo%BefbWZxqe0uT~y$V0^l-o>@Sy#?HsJ6B#<g%yf+|i^x
zKj35k{;tFI^Yx{3|LsGZFXm8jw|8k>jsi`tJ8w;6&wDn_DmvhTWPHf<_!tb063U9@
z;m~pR#k-Td|BJS&=aW!uFtu}q$EUW0)$dnmvB3@HH6h7X_mm~vkaCA(Ft=j7>iv)%
zKr`MXw}9^tKzVEiIk(oUS#zLu;)j#uC%^~}PFM*L;3<pkyz7>hSn>wNaXQ*}AzRyC
z+2IoijEHM`Hfs={RJ9F*U%J4=Q{YA0YVJF1k&$cLRL+=eRe1e^hLSa~ckuK+u8$em
zJlyK8E;vjj@EQtye&neKZ}9h*Ud7L}+m5ygPr!zLA9Ncsc<37U3IzLh)p*%dAcEEl
zBafVid`^tT`I`i5SITsbj8*rwD=`a)>ReZ+=~ZYkZgWnXV5#9`;x?tk#*e$rSvhxF
z+bi$*`Q4YupSdUEE)RM4rOeB#hK30N$ZFJ*`e0XAqK6pY%gGIh&rzv2ZImgjxj$B-
zN^=`Upd}un#-TiV<F29EBj^Z8Xpi0DXCOk?mLOz;I4v8;X%-470i0iFsKNz5ci`FP
z3feWF`iZAYrT9p)zD3Vve1WElNH)oRQI1?2FkT#-A9P*DOA#L|@~(xEbCuOGuF9d4
zEGk$S@-;zuTFViu(Xx0+VZ)ckn^HVDRqi3r#uz9TGJX>A&!h?p?Un?)#|h@Q*X%O<
zZjIJ5jBHl*al^2Pew9}Fm7VR?gH$<V9_ki(<eqn-ZrLvZ3;BAdkJ&Px0ANgwXrMiQ
zw7WleGCXil5a_h)MX9;*Xs#kEyXKfLqr&{y9Y@DB!;rv*GFcI+w#hhP(mKF^kb`%+
zYwK;=^LI-70A*3a5T+f>_i4^I4HSPhSAyIxnp!S~P8kbN?4-Xogtk~PirDDU3ZK~2
z?8E^7nzK&aF>&GJM3He=Fq`U_c_81t*|;hHpC&&?f0PNVFfK2KMd#|250lHc9Jq#F
z7xnSJb-BeEPQMbpl3#KRd|aG0pYK>U+uR)cn~ZQ}Ln!jhoAh%hWZ5Y-6KgiUdhYvN
z@MF3~r>y0cb393|Ino_(<4mBABjUan4{`oN{&8W(B;R}I9<p!ArAq$}m-^AzGXyF6
z6tJG>a#R%vasBEsCU^Ko{~1iK<6RW{XlVJtcLHygLy(`zaX4V()!`GG8=G1)C$?7H
zgG1|(uNfj+KJJ`=R~T|3;c!c9GJI3@*BwprQR6^pde{MLK1bQ0Hyj4CW*#q#Ap(fU
zE)9lysVTt0;bJ|)1=cs1<Mbm4DLC%vAJP}bj@dvP5b1O1!v47_VJu;9A!D%8#eqsb
z=v`MAM`0H;=AyjhT(zh*>E-(vnJ~zXaezQ#ACcJ%PX6w%@-ch=xtgN++um<d9iBmx
z=9SHHnyNUTZvoc8L+IoX?~vw}M^V0of``=$w)}A!mfGP1wrT(ROok0#VlIf6!Kbpq
zy4lPnHJaTb=EA)Y=7EuX?7S_37bhSMd!K*q(#BtB^Y%qi*Cp(P)W4@kUrAn~sJKnw
zNFD{shUyIW_P%K-Flg8Z39p`Th%gd|__@y@Y|}ZI_VD)s(>qb>+Kq4@CobKl>GzVK
zhhk%)-j#UlT(EVR$MVe8be!SZg)fvV=|(;l8}1XUT=pJ^8>I-^W5inSi8M_);Mb2T
znr6KsTMiG~G>?CJ(|A|obYu)s3GVJvSb&0-Nc&>^)tQVvwp^_QqG$${JB|J$kLFdM
zZD}M5)Wpdxz4c|VGn;BA&lyh{{K{T9YGF~?0l{?nShsC8UX|hHh08&&ibRgu5NPT-
z8KcW(vUkn1iALl%n!9nGOf!SZ?a&%u#h2xfyQuzr@1~Zg^I<Zg@&Uylhq9~Qz|!7Z
z{GvD=w<4w^WU0vnWQxZI^L7cfV?D(w8F8dupwI$j6KeD6=p@G;>9-Yw&JWdx6u+D(
z1ob?C$5sNx_8f$2un-)9Y#R4c(crqBTpL%~VNi}yhohu{n)8;#R!1MwzTRe!Txt_r
z<7j<doZQ)GGn#fEQdYZ_XtPhXlO85BzOyvAx8t*mco@`hO=K+p{*Di*j<+;u0EJ2n
z>WT_2pC02=I5B4(T~O-@xm779gxJ4geUE$Dy6L=`G@z@m0aVgqg7HHl{t0t|94FsN
zcizUz>p=jqH%j9_qI*NAx}<1lh*}*_*b2&a6ver>>Dve0V7mB}o^<;O!*Gmk7P5EB
z8c{DhVBCnMy%W1jyfkB=3HzGd#;;kb)_S>6RX8Gj{W9(Woq@*7Oz$F&YP*R2wam?4
ze`T+*rFVl`!`>gl8kvroYO@Bvc$Q?>+9^FNAIRZAs@06N5o;ITFFm$Qv|KQqC;AL(
z2QExT&&E;9Bh|^=Sh_F!Eik1xXwKytTB5eux3|=QDzxLcwZ!0d63$Vr;ZzAcw#tgM
za;#}oG%i%m>7Fg#Sxl?4tbSr%njld(Dl<Mf1ga@mH?Hx!BR<q>{fNjfGqS3(-kEu~
z`qU0$RGMs=IFLGb$*wE%=?7!_$)8q}qMQG(LoYV0)BdxzY2Wo8iEGzg6IKg~^|2*W
zzF>Yz5q^Kanb@khti^(Ij+Yk`Zg`Qg`bqjz+EEfbDk70mV=Us*evPpKyuQdGWvil<
zws6vxNP(g~%V#^oo&tJ#`E65FMJw;SW{X$ebqyHzWwDitm-fa`vn8M&1Ig>ebWB=2
z>`cnvXb&+@8VLwe&ikQ%GP_!Kpf<V3by374KdX@rRJ754qt1C9Z%7)ARZC)FV)v?C
zWcctO{7WHRl7y;VTh*&lAieRey;U(%en-u#vM|)jWNX;5<a!Hh9%a7xC}hD>eB||k
zrJg|U{*xs(YqgJ&&co9B!Z`D=k0CFud5T@VR)&j5n_lQer{}d#dQbm>kouVb$ZYj#
z=-)2+$Dn_qr%M$Ktx+sCBf~x2J@IAfXyY<dzcf8RH#mPVuYWMRq&_Gz1e?14iRPc<
zOZSkjxub(L>VLuEFYf`;S~6*Bd%j(87h^MUkxnuS@h)ZZ=zukPgTn%o_B1!V-5p(d
ziaknB0c_W5%&4K`ya$pE*Q2m`C?OHQZ1v*_!Fl@~=5~7g>Q`)-qT8-E9~vRbx(@sR
zipN*a;Y)xSNlG>T{;h9jF(p=0eDJ7P7_<h#oUUQ>(?n@Nera$mo;r8>NbqQ)SIaxn
zf6sm(jM^oX#g>78plfCU?a6@lv>!fvcmqJmbxhBM<<GEnR<!eRSEb|MgTqQG`T1NO
zi6Vj}CF{yRhP`vNX#s31g0cSzO@07$YS5aH{Y(th2!BIo6z$@)8P3m=nKXdG@S}TE
z4l2#QDR<W@1Y{52^^1YVJ><qUH8loiW|<)xT~E#|3K=GLiUwZR&?zE*x_HHLzEb=$
zk-Q-=B2Pw@`MGAs^1DrpqZ-eIGJXb?_)7+23MsQ;$`*em>^V|1xXG~ocr4t&=8IwU
zUm63DG3V|sm{hszQLStSnh>-7_(C{FeqE8&+UEy%`fyG$SZ2i(GK{s)%+f8x4<zgJ
zWb{@@9bCYc;9d98YU#Pyseo~dp#kDxk+gH*(NFt69WE&mCy8=VdMRUxiQ!fRrkWue
zi4mKn09!@jt9Zo}B95W%xwnuNS<|Z5q@<me!X347zO~ywp@*gZwb({~WLP~K@L~Ms
zhW`#<e3X9baTIVts-XSg7CkZHfr?jV+zmLdIgVp8IaK)?u5%ypV7L0m{vm->tbh>r
zGlc@y`HyIGkK(-k$^7<Zjx|r#4@=YfeYz+j7ME3KVQahG_a<S49`_>uiewxnfC1zr
z)9}uh&P*6X`+6HWR7)j}(qE|wzop<lDJDg{<jpq%N&A8Qh3a@x%U073ZDW645v~BB
z>^G6u9RBHKpB!Db*q-Pn)}DF@PK37hn734Tm`HT+H$GyPcNSiEjS_##Qdm20(&P(k
zs{ATw<gWa}@V7%|?qD>EKDZbDsp&g96}l%gynE^+rt0?#b3a{{9iAMRrUx4MTxtI8
zElX8{FO~VcYSh_pZ_V6&&x?m!d@9vI08+ZZvMpWxi1_<<UrA}=SFCE*Z{_aCPwHlS
ze#)E~8uk=?LKug@d=T2T^ZcHM(Bq6wl1yc$Z1G+Nc-kPvJG0oKIpT8z5#al+UHc!K
zNf$-<s_luAVOyBuJ()^@LIw^NR<73ByOlD_9W)rlL6V4Jt523B)_tLIJK3zUg)#;$
zx^-F~v1{U;D{G4{Q{(-Oq|pyWOBi<4>X|_Uo!8eOeD&f<mcUGro!t!X-I@5$AsSef
zW{ks;s-%<}Jq!ZI1b!cgG9M{Z_qTTaei=RVd_*DPW4R4yD&uGTUtE0xKTL4b#uXAi
zV0;t$ySn(wV6hMc*NOk>8b1>uR$6G|c!?c?GhY9Ws-UUJqF(&V<)Stc(}bv?Z;pg4
z9xqI=26WTj<On1v43291D<rTW$rh_$L{W4y7&H8Ma4CJ1!GGh7jRV^PFWT-kr*(Ze
z$NeQ42>H{VOj_r0_6c#cKXtnm+a97N_hWw3EJO^`MAWZiAradCar!YUp%3pTn>Rxu
zrVJB3P4JJC7BjuxBQnDb@n2iXXEP*m|15*w7eF?SItG8lI<-Kj(E2;cUm?w;F1ZFH
z11@`!jVgJZu`Du{Nj2t*29@^4Y=(Vyl#M~l^nfmQyIwYZLAF1s-#mfXCan8Jef?>}
z>%r=<ngK2za^e^Vogc07pM@==#yHKtGyk2rPQa6u-;5Nt_{V<#4DysGs?2E%<&Ehk
zb-UF$)8-J;_<6MT)id+0&qZ|6Ji0{!HjyNlU&1AiKPom37Bb&u4$^Lg^2>!_LIsTn
zgRW|iq{GeB4f9J?iMcjqKJ+Q+ytw5ohr9Q8by9|L06lYX^V|O4sWcPEP-TCNm8q-2
zaN4Y_O+(2y#xdRW9sYjv3E<a#eP9m{D~ji96X>MuPifM*-#+<xlQ8Z9hVkeAPlnxO
zx|gc1E{B?%7fOiK?J)Cb(%)2AQ5+d9I(#MvX`MB$B6&N6k7a>0<oc2E?rHLJ>6`$J
znzm0?^5LTdr0|u$fKe&PQr7t&lZ~%Tcbx)vI!L#f$b7_Q<F=+r2p`A&7mYIGZ@dnq
z1}9ewrZY(mejwT#U`HNOI;I{{^kr7AObUb;PZ^@Jva1C4otN>elSU~7B=#+b3Jn~F
z1cgYRjV!COJI#d0KAP-J(1r4d+lUL~-|P_FeokWBZ}NQN(L7%Qp0IEOECSinJ3=v{
zpkk6BjzKhfWo4J(Dnao0rAr1bK0Y^!Jn^K~wy8-Tpx2ID9?WUi&r9t^=SJaM0JaQ*
zrSC`BCqjex&vKjyETXI`0xgmV_lEWcgSn44$fzoWO3KO^lU~RLzm|PVXr_cg1Z70-
ztS#eHu0hFZ4i*v-mDS0%s?JK;AqAVr{&eHVE3agrcgm}f(=!%7Fy09It2i|bI49{j
zTtRLJ?5(V%`j`nV-=yjY35lO&SW=LrsU{j0QM8n3jZn^>Dc?Z`&AF^d&F5|v>I<Rm
zdU4{nkE^RRM_Yct>c<&lZWFYDfb+oG+FI?hyD?~NN52Z2;pF+-YrK0L6K<X&Q>Ecs
zH*o+$fOBb<TEOg6S49E|{lw#@Rz)_exjQ%t3$qd&5!&xZ*EbbJx0k2tf2@f}unRx;
z*_x(SlHzMr0^YtK1_o|-&(8shp#3Wi#C2N41Batr(raaUsZE&QbVVU`C5+e^dVMm_
zECbC0R~RU`pgqLb=2x%jAXjlHQOg2;E-Zte^=<F=J(fhN;H(o(R*#G{RIQBGJ0G~X
zi`BR})z0tfPt+m`+GR}Y@-v|0qzymDj&oVzhhaL5d!D0(qwiPs#3+r1Gfw$XOJ?6I
zYnBrAIRxj%SO%lgbnVGx9{=MdFY@Fej_B~x1Z)g4i@|`GQxo<<A=PtkEI|lA+{PIp
z0wkf?6O7GiYMO%etF!%X9SKT!Vr;QN33dC?1qXpvOowHkf97K9>N#=lxmUeo&VNAw
zEoy|hj5gd(5D0{)-gnv0&CnnE9BlWq9c~0|6f1Lc(E8a=8c|?W?%fhmVBVcn1uoc1
z5~V(KYEp3s-+fIbAc+3AE%q}-skwz+Wu6JCNYF5D(j)dvBVQ|UTg-DGmv3mF@bNZV
zF~d7pW<~%^NOA^qTJD}D1jeQ$F8Xn=nmo8GaO<rt{@v?!x^lJ8<Z4~z+9&(7xwN*U
zeL|`U5-LVbC-VZvwV-<nX4=XaRl$owR;AqdMD7HT3hr%3=PG7rvAOSBXU+_$q_o~u
zYt$C{PXo*_Zq6`AD~xK(ZJx*|Jm$qps(xW^^??2NocBX^m+tWx=L7A^8vSsz^if@O
z+oEx8%d(vu?Ro;ks&0PrW&j!TEaAG<Q<DTy7mwL4eEB(-;8LCP3PCTpg`hca<#10n
z1k(|={j=1x%!VL1p4leb%`wAIaFHMDESA(y`vHhUh@n<FmF2U&zm1rM$Vb$IwooXV
zi_k^S@=5xU_SIfuxU<PT+=qVB+O6l8WQrlirmw_)cs}+4wL?@>fq;!`HC(rSXQ`{B
z(d&ik<ZpVw8JN1PZiA0CI$3Gn1cggVw%BdKYYg&nYS_rwzlD`wzlQ68cK5mc(U#%2
zf6K4G*4Fo%49>Jniteq#sOP+a=68dPquf8oW^ssHYHPVQ_Znz%*&BlO{h}ag=QfAz
zz{`f5+%0||T0PQkp9OE`(w*k2Yn?2AF>1;6wB2pBd8yxmJ$hEG{b2)9&(Tw<BO;Ft
z?Tk9Je1nX(#?z%p`Hr^tyB7`J&%FR}_6seg>t<e5Q5sWhV!}ZS#4Sh8N0WgAj*uI{
zlEl}e$k#$+scEXnI#J1s)!=xgXlytV$Ij2AGHJaTeLVfl>Xv%(i?71&HU9poHny#S
z9!(}Df22|Yl;~W0p4oflT%|e~F!C;@)A)UGQ6g?*BvQWL{y_QrVRwD5Oy_c1X${A+
z&sbZ0iTy0D-_84y5ZG1>G9bx6rXs`B{%GN4hi<vEQ(0+QKtx$tLA&=r@)kVtI@|NN
zM%RaWC&<Z$+6Vq_AkmDz-$b<SxBqEJv9GT@?3mteu*~wAeg5Wt!AW^ZY0zFfJ2Eds
z6|E6F*sTu5xy53R9NL60C%GA7b?wFW`OWB`SWcL5O}!{xveS2EsZ@U&`}u)#^U?!y
zwVzs;j&ajXqvrKu|Gz;LAn@T4R!Z-)$oJE@Mz_W@Ugix}*Jpo0N)X46%q7I$l(?OQ
z^DyaN7dOT}MtW{`gXxMl2xDc`{0#M4c=7h_+gN>=ry3rw<({ILo)j<N4#IQ;y>wYp
zz*}Iw!SgSY&ji~~9kZ=dV78Qt=#~A`udNn!ID)2dtq;YLAQmn2^2O?s*&+Vf!BkG(
zllHmy{Tfu1B9+!gRzI0g+Fyh;l|LC^+h$VCs&HRNZwI_@!MeQ`wN#)uUpR#~l1hrL
zj70uKwoj*h_DTYnOUCcqP3~G1PO=PFq<bJ<h^Kff?>K`4bu+)SBJ@d1NlFeKu}9(G
z7%6=+BD$V#cF|0Bobz`I`4#OeJ$aK|CX*URBAc$2WHG$0&*-Rm`*LBuUPbwr>(s;L
z`K$s{-^~lj?MjF6Ha=guwnO0d2tS;sr7fEWC8Sh}n(Q6ur9lqs24As+D^^qnQF4`6
z#5RhsGWoNn-O|0sveO!`SS`!eH1qx$$2Be$4lbYM*xc%8NLD>%#uYxn#0>Xdz1v;+
zZ~1#JpZ3cHB#Od^okX?IVxZ7x9+q3&H;0?|Wo*9l#ZNOEWt$1}@-I;>&uCO1NFBg_
z)UCk9ct@W}tqtfIpk@<On`Amyjl&wou=EUE&0O0Y8K~A=ogId32S<9!9c+Y<^=b_x
zORG3b8WL2Ht*_;Qfmc?^k)VnaB)rrdUM*-vpbWS5nb$64pmLtwz~^`{7y)q)U)YbX
zFh8Mu6O}#bm{Hi5!#t~13HcV&?-5qC_}0=y%`_hJ>x&hXl}bMIW5*Y7tK3}i685Vf
z=7&wWu5QJCALdDHW1=jgOBgAMjT<wV>NkwG3a1yyHR{ltw9e=>P<3$`8XhEf5B^CG
z?>Bt%_pGdr_DZEx`2ML8Z<6Fq{FWM*+%B=+Urbi9t~*(`?j(G^%r{ji2hgE{)q~?5
z#P@a^eDcE|HUW&mw1h}}MFkd8sM}HQ-mDWMmCc&}zC-ZRY#4zaS=VllEJB5tAB8_F
z3x@^gGo*KXxkPWE6x{q1WGLl?H2HgYG`vqfF&Ww(DmFm09o47ii;7#iP42DNUs{q{
zD;qcHZA<^MXuO|reT^&O?ZOk0B!wo4<lwBIo+eC{&sWFp^mkd#b;K5=f-4PNT7o(e
zpzc#)SaopSq71PsF<Gy(uBmm;a9oeUE12clWL{_^e{R@d8dsgxFh|34TUQ}n*A5;8
z{zF>g+U@qGdc11q;aEHlPId3a{`_kRsAc>U$I;wWud4>dLnVzpyaf07Jhxx-9*SC)
zZrQAT(|4V33P)6<;FJQ(V+&IG`@`EuhjK9~-OttBthXG5E0@e_X?d!HxgbR19{pS$
ztG<z?w$`Q<$Pi}xddIwc#^>@eQ+vzi{M^;v*X|@*i(8wB?r8Vi6a47Vc->%SwzKv!
zPRB^-=nHF8Do@+pMM|z~KK7mch|pkK=ZGew&(ei|*6ml|w_mjyx$Pu3G0$~RQlAxb
z)Bf>`CR~`Mdf+0lA7khv&JMSDirD2SibRA66cVzNJ~`zzQ7t~UTiPy#x)@e}c;sH+
zYU{`Mw0Dw`XyV|AvVQSor<l8Els3X+${f);2x|=J<Uq7Z?4b%)V}dzKq%2fkVTELQ
zi6DdED;~NZpFpi}3kz&|L@zt(E4*7Qc7Ojhk~C;#Nif)|8+Icm+1AXpeZp%jV19;^
zrf!B-90Vkqqz8)MKpq#R_aoO96fHlX3I-TNjzl~fqHvsYakrwnjE0(DJE%;InLPNV
zwBw;DiF7Wz+$pP*o&K=HNXzMx$NpFl%&GLw^MK`S&*bolkzTS9;nDG=L7l{A^_oWW
zJ65$yYhoS}M2<KTb1Aot0~g+#%kEW4;TpH~O>!_zCV98gBid~$SlAOKCSXQ$0o@-D
zM%J^r+{}lHTq2W|1Ch;LawK|V{iG1*-+rmxFs(uB5vtkJ@?cc$<h%7jaww4oyB1+k
zZf6wE_YqKpPx_&b&SXf!2kR{-?dFlrrTO*u_&OeXdTeCd0k=`3%J02vPnv%)2P-EX
zy`W4p`lUM~$KI_IK4|Qq;{Gi_i$l+O<||drd&Zu!PIH{Cz70N!9i84{y2FjVx!}Rv
zXYVbtE6vn&LM9fooh)FL0ueunUcQf^o*Dk*jP>2WKmcDz>5BX30?=c}9jZPcX3bPd
z*c~L?%KOfsz|c>@D9#GWwIK?BqKa&;JCGCF{bf|Ym+YoFUt)_(jPF24@30n=I9utF
z&=hZlXX-Wm)^;+Xd%JM;uspkg<HS|gb$YHmxS?B|-qOp&sN!hpgfyw{<PQ1k7-|Pw
zp`9c0fSDFriq(^iPDGLo6hyooG#1Q!C9j_??G9`TrY7tvUB~k%U%}Np-Vi)eu`1`r
zmpIx!!O1^4tZwj^(54m`s}cBkA^}I#uk`yIuM})fKc%U^pH!Q_=MTjx2bB9&ycn))
zTVx#A%J6O9kRiPKuWQwGqIO4Kh<F{^Yg@6LSMv|oDI40<BAj^yXfEP(Zax@*AuWfm
zSLK}8ktb3p!M54SEeEwHs%zb>hH4F>!^&}MY!^Ks<W*!Y!FpWQ1lcEZ-St~2G4m-7
zzR_&^TlTjOk-;K$c22Hiv)p5Xgh(AHeW9ha*nsqhG+OU%$?WjMOO?6!CKejXLPCQU
zWBP7JD^v%PRCoba>PPZ1-{A};obdSYC0;}Gcy)tp3k_whBcNhEP~+skOg<&ZsD-3V
zRIkC;r>@Xml~-6lYScEZY(1DIR>Jmi=u<>AUWy5x5IJ~?h)X{R9-j?4px#<NLe^MF
zMdH+cXmQ4KNQt^a6iPc>a>sKfXsKaJr!3A)^v1rT&}uOkfw*z~>W?eb)AdV&-aDG(
z*{IsNWEZ=qpO%7^C2oJThLkE>juSzgh7gF#M3H*Hdf?cIEPO6_QJ0QD?kqKE+Q8_S
z3ku;IMX`b9Nv=<{L|v?1?Ux4DQQ0<yNRb9|D9WAOmaEi_7G|cp+mL)>Dr5-)ZN6$I
z6Gx2uoD}4i3m(pYzfxZ};Sf3Hqzu{8Ki-Lku1cYlY2Ac8k0L}qUV+1i#iGs5G8xnu
z!C6fm=O^vCIa9#%Q$M^TSf&}-$Ak>;EJ4+kd}|aT7wdC&Bd8y;b6%cdbnh<D$J6xM
zkWknji+=UGY+GhbQPhRt-cj88e)mxoPTUqV`)cTuFdQwSdoDI`8ZugUU%V3k*(Q-+
z5;v4w``8*1PLOGcnKk#^@CnMigH2Suk>&(7Qp8YJ%Xy3*v7ke9b?^hrXt_~j(}h+1
z(d1zg8opF5foifY!HdW@w%sn?3kye)kcCOL;3gc1_aq`UEt_}Q(>o03d-sUeC4)>C
zx@E1pAC1!@^|LL>#XK?9H!|0;mB+XBhYqJ54E)^g*tlCtSG2)G`D11eCetYEt(b%l
z+Pi=DNheh=SuR75cL+qiR}D;)^euxLxa#&B)*HFjKu6#=7?|pIhxTm?a2oW&sv0N~
z=3Wp-&%AM;tJ9s?ipqrlf84$GTa;VWKdcB!h%_ijNlHqq)Bu9gA>D{{cMP2(rP5u3
zAe}>lbc1vwokKI^z<UqqInVPPzyHAd3)fu3J^NmJ)n0q=wLVLrfrHO_f_eKklZ{Gp
zwG(`bYrf#Bl6%W&{#jVvT3OLLPQnmTgTZ~~GXJBv&;*tj4R?oHUu;A=*;=$I84;_q
za|e}Y!ai!9chjYyrc~{B?b_l=&b<>}nVYe-J89E$l9rh64WqPiE^t}xia4I4{bk9+
zcGz;~0cv;kYM@}vFCXisk~>Yu+YSBxW3nlBGL=h}i_>PxNE;}x$)Qa<`Tcx&+Tf+n
z^J6_3s!heOw1X-Kzguy5!(1>JDbEGLOE?%$^~Q3VCCavz39*i&0?CLUXjjrt1HhB>
zG~FtGf?zlb;m3DQl{@~czAY;U%A^DjG)h`pR#p7kneI1_?bK4`saJDe)CaZi|Ejyp
zp>r1xSD#Tb8w>EKz2*7Syw<+;<8Jf4Z6}<QaBZ;m^WzUxTBxHf)C^{`xSoP;lj{PO
zhpK)1l$bZS0@+-^Wwe>}!}EWAEDq`teyV1ZQB-&4JMo@&_w-$LnWNJtF;)4I6$-1G
zzT{KA{Gji+Ld%(qSVLTMRejCuk8RJ2=N&u`3!aU&DEi~Z4jXR0qelvAu}JFd?^#Zq
zm>t2PrjRUhKZ_1*!obSMxEBlA_SbO>2mjFCyLa_?bnepF*|B#qS>^E@mA1P=<*)EL
z(qwJ8T;;;stH%}bJcWMaZ|Badi!Q@nH!p}p``h($@C1C>-9`7fAK_a$F3h8OK}25k
z2`{+0;+u}O>;l=rFZX7mxy|G{!L#wXssZ<TB9G>nbKki$je~(1lX(&#9g_y5Cr42*
zgPhH3?!5Vv%UH4rS?7L_dta^14*W9Iqn^*<z*i6AvYvclwmPZlF@mz(?Qu-rJhU>B
zTiJ-~v5X0??yqOeb8G!cdvOUg`sxol$^CSHe>%yieSYmghm3H-wL)VpsJ*a;C$Hh4
z*!qG*7NQ^JsxG_X#cBC%33X!ZDWS8<>g&CgnD1Qsm9^SAWHiKt4w2vTo2cpg@@i#|
z*g0DVqIA#FT@Ga0d?CiDo-Zc)E-#D5%ps}|{bI<0JV=j;lHD<$*@yLp@Al<a(9WSc
z;MdMG@~`7k&msf0KYchq%`LQL9e=A*aQ_~&=ED_@jyo=ArV*dOy^ChPd}iV7LNJ}3
z>Y>#Xcbxb>vAW%@?iKiX4-Cqp%lN99sGyGavFU7O;fsq7>yC8)`Ey$Kt8D@m)!G@E
zgG&oc62~o6Mhm{6k{JHOPvFH__*Uusy_L@wXZm3dHpk?aTBP-^&6x9z$;m}$aSnQ=
z{-vKzrVMq2I}T3Gc;@g~UR<8+@(@NZV3TZC9QEVtQ~s%~eF1E1;;9U8{d0>mpo**s
zl2D{hP-T&itymc3niy<TAA4_<QCW;0L$NcQaCu2LUtQ?N`dBx)^kY<R(fzlCPF!q5
zb1zqV9dICHd^XEfQv&_3w5I}~t)}~_(6#Ln)zTVsGGD!)KO{xkFREC)#4ELons$<V
zdHGp2Fpf$%dGYO}V=WWRib2eM`R%LHD8{WwQ8NmH1S-x!aOP?6CYF|%>YSbFRt$3)
zyCjj^)+P%cR$Vx>^kpd9FwYt#mD}K1(f(|Hjh4M~-kcDg>#?Azfpc?8{TRxkS^c2}
zNdpZNf0u{471HDdoG1X;hD|d%uVQHM*B7m%*6&|v*({{7FqrkZ*DyUO3WBNwfy&{~
z`!|d!4W8i`%T+IWy8K$Scn!WzY}gJ358Ij+FfeG8IY}pMxB-bzvMC4gyR>*zS6h>2
z&1a-jP*FXr`#M!?q4Pt8VY+YI7%NI}_VeHCXhYC*tV4n-aY2xyZA{X93zjnhef_7G
z+hO&yMGiaKc-Fjm1tT$#kx9&)hPci0%XkQP(mgijy%(-q45a#tw9Nh{GHYD&YU$+*
zn-bGe9ZZVxW2tpTR^xqRB2qo@EtggQJ3WgktkF|*?{FliM^xj(xkEYH2M=B{MHjk!
z6f}EMw1Gc6uhTQ7X7_S#;m~xd60Bkjaex*N;1SdH{bW4-efvE88MqrH)#Jeba|?kD
zG_X%^Vqc^cC`Oaib(@&#XLF!)=F<cY<SxJC^(GuAy*-$g{ziF@Azc=gT4gaKc3jIp
zt6f5SdqV)c7ys^}poFO4DZaNb`If6qU?AgeSx}lQWgOoJg7z^Uhq4CohT+avOhMHs
z322H61T$Gv;U-Z;Wm4>h`j-8CM0!pFkk)1)^O7Pgv%;!&<bB`XbMC#vDCc~Kj&mnq
zdwuz&$`TJe;uMo_G1g|G=Z)5|FB~0M)~50S&4sfcx^DZU5<Ky4vu5bk{EXhbkYti{
z(4*e4^l2_4JlGeu^Ax@;j0!ggg*-R;h;eP7Zwr0eu1!Jn{RDPnd}=h+SM&XzWS3{5
zM1kRnHex5!N-E2*`o;?f>sqEP!8j8V2Y@1S^dAx>%#>IrwV#fRe<OE$b5ht&hVgm_
z(%{m=f*x);yY$Zd$pWo#K^A$8qUE#<#<z4E>g){^i`IlKli-R4ZG(Mv58u|u9upt$
zG+SM+1<r?Ik~9g{oeo-O`v(mW<};T(Z*onWT$us8g?&?d7|`8Y;}li53x&uC@@ro1
zHtSKqpU?<uZ$Yz8{s=J%5aP^d4vIfQ?3DyP0X;&=5|d+yB1NBU4T19KglndY;U!s?
zI;v8$)E}y7L*ISX7I194$C~%CGB;CPDhZ+!?oar<m*02!>BT~Gf8|*2!ia<_|HW3s
zw4HOOUbn9{pCeSqqhCiV>tW6QIR9Ga>wwn<wL=yL{#p}#AIp<tR1+*s6LKL73$9#@
zEC+64w^;ge!{05FxwhE|e5+wrF3{eGZE2bDBR6jf9$V(}3QWWEH<`3|^Xu!GWd(MU
zyIv=G+NxG>Pz2}K@YSAloLPsqu4|c+waONHJa_3#a(UQa`V1RgW3SO5w>f@i23xt_
zP04wwVH=e<Wr~>Pq6xg^Z!Kxw7jZu(t&?YKg-D&9mj>!AUK$d}@s>A@pkwn$8H02;
zLGV(qviDt^L}O&kMz5?OslZ7yd1Zcucneo_U~bDyc+y_iu0XIwjhj$-`$AohwwUA5
zVt9?pW<R+*=f%gmEh$z8USqxRpi(&5Hx)Da>Djdxx#IM5CfW_H3AOq><H19H9Q_kl
z?&})Oo(=n}^YcVHhcS6M`Q{xWFVG80GAgSl6|<^k7{P9fV#nj~lQ^Te_8qVGo{``=
z_54sidq^x%=?cTnj9}f$<Srhb<J`OSllkBnKZ6zMlzwujPQ!r=IBvT3S--g{oLDru
zrb{*;P4>(0(#A%7w2;ffRea1r(tko@5O4@dPemXuz0bVOVJ0shv>+AyD9N63_|<F#
zlcujC7g~KpSe1rPOMROAHccKj8rIce#cty=<hh(nVKU4cqxmzT%2;H&b>B|INHZ><
z37c^_6k;m+d{Kl*&Dq!ga)GCH*CHjMWp|{zV+k!+wPKR5VPKzdmeLX(lX6FAq`WLa
zCGTvid+bYZt%&s3_=I&TAt`PGl5s4EyS;k-NRz~y;m`zO4SK@e^__+R(P^;M5;S&>
zKnA>nBJ`wS#TiC7yY*zpU9h^dnKkd_apru_T=jT6U+X*AHe2|tba=sWWy9;(#=7m%
zKt3kFSEWO9o<a}HVw(8%*}y5)>$g3{r#g4|c$j!$zrK^jR3-<EukM8<%WO|R){0{N
z?EPxICx!-T$rXdE2x#ErqgsROLH_LL+o@Nr;z8-M7BlZyO=^Z*r-Jv)*R%+g7cYsl
zcU8;L-BZmZ$eP2gCbrT@Mkg=P54^Mv66<>U7k+tMU7kZljd```qXMDfQV&Nlx<B%u
z<y@K0<KWK<6<ZUaKS>|tTVl=|uLLt)7B1{n$K+4EP0&(?_15e>FiZCA1Jd~3pDdJ*
zIh*U&wLm2f7_<%Ni8(9U;EAnB0y`Z_0)3xa<1TYafF4lHSvxj_uTOr2vie=Q9<u4A
zw3zm;ikDK_oT6Ziq+aN+#N}0${7$^tkk*xPa_V36ygdvi47mqXE+%=A^&u*>&U#1?
zH-CtuWg&`Fy0?d46KY!}pi5Ul${sySbceycHRg@A19zEM-doxoQJt=r#)xvYP-Be+
zT~O^=MxZYwTV)NL%pR=Fuexj|MQ<9xh&+zm^?rP8CFF2$tpCN(UMPmPr&Q_BpWx(d
zjI>NdR+&;aY$3$5<)!^0izo&<TQ<YbQ^TC++up?WL(RsApaIhRZizu=`vclrU+}rs
zGo=I^ypg+1g}Zlgjmw{M7x<a_^AA*gh2@i4Sc)9s&L1K@M*||rC>4?<BHX}Cq6deQ
z4Rq#(Y!{E^Ur#N#;=86<t&-sdteyw|)MVnp`lXB)Nnq!^6RjnX{BGCuanKC21+!kq
z0%op^BQH@82D}DVjm>1En%ILf+@xfV(F_;a9$}<Zw{bCA%+h!5p3}rht~3oLPe~jr
zBgM*GZk^Oym}irW4mg)Kw{KHkaV?lcmAKe-kC#T*&-%WGj{%wM`%$^hP31kr?>7Vv
zS;+@(&)(@Ls-tzsr@vdN7>A2$*L1y}SDvkC)hNqw$Q2;jQHF65xomGFZb_o(mcIor
z)99LMhT`yq=A2dSUzV5oX`>C5ke+u{?C+zF62BKQnOH9?+hQnWqlU>S(vO|s)*Sh8
z2SFzsT3wXQ3X2cjiu!BkoS>6Y+TH4>YrWC&6X@)5`_yq(ypA>Uq#P(CMW5MTBg#2J
zLpTrNI(=CpjXwX}Q~~!_Kn6Rms+g2{667l#{eyf1t;i@I^J(ff2`Qa2TTfP7oBpmc
z@!_MG?=)SJ7&ZF^Q7>tywnGy-b7cc-9i*K;lXkM=itB?%B(WpfEt%d5xFY9<zjT<y
z_*LdI`?mA7rtDbywr0;v-U%z4vimAaY~k!>6L%p`!XzaA)>vs%6Z3~)xWQ@~QM<_&
z8Af}m^iiqO^btz**}(0gV#@*PciVjDBxVu1Pv^^>hX(OqQd)M!m=bMvPsrB=x;(St
zvQ*=JnNqqKi5spj7z8;BPSC+vpFZFy-yAS!p!Ve^CF^Bgsr&TXkAji_Kgw#6MAvBj
z&mQg;Qm7QD1Vf`7tz*cMiO!gaFHn*m%;HDbXBfH0AkSUesjN)RWLcQiYOuJ>vBIBo
zgdY}fMX5pCyMn=<v*2*1$#KLUPY_b7^!0zR6&Fe0a|WH}pRgRr6Q`4tsW7u;Vj@R6
zqG()J!RiY6o#Y(52PE+rT~NNi{fDUGKoEy(3E_9i{etNjG#WYb?GPmI6^c*J90}h_
z;nNLUhB5DnEg<F*UkLnTY&&W3Wms=N_<6W*WPg3l1B4DcQi47`|DK~L27BQLuqg)M
zU_2VAaqk~TQY>HbAw}iHyFFxogj83b<lY%vD4`kn#ho8JVB|EoR-(*=_I;^I{^deN
z`T#?ziF+Q(wI4A>qyoW09^C*R07-IcuXLGKtHm@8T`;qYXj4ifjlQ@`nOZc%qEC`Y
zD*RsL>pMT>euBJ$?0uImHO2*V8;S+yv49XQXO6|_xH-Pa0t5Dm#Df*Og`s5u4I1Y)
z)rxD&*q}Flh4k{>3~7?y&My#^O!$jyU)OjaKqu!Fd4NCkPp*p#npAFf;z%%4-QJ~x
z-rOe-vDw;o-zbsPNn~|(jV71_YrqVN(-O*T2(SBnuz1PvA1r|GqW<AoEjV1yMn#3)
zKYg=w@}Nl@3S>@W)*D$Gjn7VXTa?2puP54=hq!k%!(ztx_r@d&yMy6X9E|3p#-w^v
zRv?cb=_Yqz^ysLR{+H`2><&q%8R>B6*nlQ0S$oPXq73MvL4OuMSXkD`D0XU+&@79c
z)BW3LFXVF?AR}Ym{k&=0+nbuNowJYb0l&Kr!+x(G-`(rvX{ks+oUej@{+n((><^;B
zs*WlXr%Nz>g&WKlHx}~c?j`T;8eQxg330r0#U!H@zsn?W^JL1Lh5MJu>Qr59)Sh=p
z%+P$j1O5Jhqg?W0R+&R*!?83iyLFnlylGYl&cSXX-Wii(*JvHM8Myv-t+5?@qGGI{
z!ue8w6ec<$#LquJLCWjXG8<PZo$`<m&xFkgp={*{00-U*)qfM5hNM!3e^5+Gt;fpx
z&wQmnja=Ox;t_Z_I(McDq$(t=9I^2s8*+QUU}n~{cG7YF#mnP=d+J{6T<DliT;{r2
z(yHSQyG;=@lTJ}%tzi4QT-$@zq1TP!u`@bYI<?QucQ!G2nYP5b%jh%lPQF;5S+fCf
z9zbfHA_&k-q&L@v`Zt+&BeZe{MyH*|0#yPMOYGw8%)~$kph{2rywf%ZvVz;6A(KXT
zVe$Trj}Jzb_%^{;ivhb$b+Uoc+!$coy65nH#$}5X%@`oH0xoMlg{y4u6lid;8mI@}
zQ(yVmOTnZSZvramLr(v;jUyS2+&ZV#;C{{-RO6uiy!l#L0oWLd-BEnjwtw70;~^eB
z>z=A~RaY6`gaNUdLeuaz5hPHf0am&@ttE>LZ_zYB+*zX_OAVV@SYg}&?nAV68eZ~w
zjKnXUiMML`8|`8YIjxs}D=AZ@qE{5z`K7B`<6!pOS}5GbhXoC~g2`tN73<01fksJX
zQAFVHsp%lSM8<VI8k_lv6E@{}HDK8gpju-fIj%C7BlV86){X9VC=0^tY{(#D2&}8l
zLSDzaejq4XPjO(N3v4hz;CzDU<{n%z7_{F{Yr-5cx1ZDw;qaKkIhfWkU+D9yOEnrm
zPVwnY>5d3In5J@NDs}%Ng?qLWF#8L?du3d<HG-W$LtT(`OdyL{kev_r<%&}PmCjX3
z(Z&&7;I;uFp5oPzY@62muKosH?e`P|ipcge<IDO;c?B71mqN$m?kBGy>RU6bU(C9l
zE1#K-mEt#0-?efjT^G~yWVvuvATRE%9~d1ZR)#T^5fwW4LF?T0%&e@|AkXW3SC(t6
z=87N|4AY@ys=T}VgBGRwg8hConJ}vZ7bsM3aeGE@v0z51;lnQ2GHE5x?oI!_m#jd)
z8-rDYb=DR8`W1+eRQ+>l>95f2zBr$jzHxnn_=s!o17MAy){25Ugmo*h2ktya+A)6-
zp9g?y7(YhJ`aaHG|BQDu1dk+Y;!%Ue2(otP{j-MT5-97020P={_rAkhK}Zs9&S|)q
zh?KDhFORZ|E@%P+P`Zf%!%(zVGK~da82N%C@IG1dj!%)hLZE0GV*=#d)5YB89`8jS
zl0CHj$%A8wcYCbiv3Tn=HL1U*ihTq)+!8d~)@W+Q>k`n%GjDA&R$G*sF~p)EH1_(E
zEFHJv3~yj><nt$|BW}Do$T-IS-GIPvG)#Aptl;5-REQ*HL|fol*UyHJ0qi|s|C!{?
z@fgVerbfmsZb=^cR&)(Qby2a1Q5*jqt-_{F{-hWXwW(&&NFbc1CU$i8(n{D$=At)i
zMD<A#pJT6nQF#Wxy?sBXg%)X=s2<6%iiO)-vD4>|rik9}FHg{(DgZgOWJsrs#l~)h
zZ%pmR?3haHmQ>Kn&!u`u$A_#uJ6Urtg7G+_i0m^*)bDA%o}5a7seR^&7B4L)cBh7N
z((HU`nJ+KY5l(<#=p<)&xa5#dmEn9k5imb)6T)+Fptl!HEI20tvhb7c-bY|jq^=-4
zAKCQcZ~&3d?|j@?TBHKnNMa4sPyVW(#^c{SSpQZYRT=qI+ICbTs7$QkNerFU^a{OI
z1%9xKkKGl}UUF>HfW@FP{_{ua4eF83Zrd8p&xB&lTa*Ju$o7~t5eHfq9}KE>2ZL!R
zXb6D#Q@ohK&|edx#I)UZslEQiQbMHSwXe<mGv=7UY@RQnxE8OEv%VT4YZ{DMSe^OJ
z#OGr+Uk3sM&w#jq<WKSj;;VRHuU9>H6*M`cwj!C5@LSQBp>%EQkw^Oa>jb#phNU&k
zpU#ifIncb%9u#~Rr*0@ZOI;{yVKPJ=aUMdog#HGR+B}HoIh@_8Ld77{H@L*`Mt!P0
z4R4ZtP=!B-Rj9Vn5!ZIe{>lFLBv)F`v%}s}*k}A)`GV)%ZzLkSzeRTIyol~HQf$5J
z&4w0PPZU1kFL52=7z2>!wV2ibipM`(&1SwGB$(3`A->Wc;=eASl<BtGBtOWLQ!Y!>
zle{w+iO~@4$Toi5`TDz^3%M+vn5}E1Mn$+{O^M7zFLC?biFbq8+4pV>{#aDgHU#C$
zs4wAqu!Ggk=2t7+@jp~`b$_kS@!pB3)w!>|-l`pI7~vE9bhcaDGB~OV2^ZT~73o74
zCfGRkAtFBuk++uW+p74-4+F)w3M59c*6HgKAZf=(Udp)5obRVv%Al*UQ`;ZPKSw4I
z(&fsEuvh9%z2g$kySE9z`<&Z9cNis{@v@UWFdSQn#;^I3P{w!}0{__EDUv#hyimn!
zn)tOzu+&1cS9%9mzH&q<13*I9DK)6>Grx7-Q4wU)u=Z|l3H`7_faa(>%0;|q`D28F
z0HvH6lKynF89yiNnmP)KU0Ym4a?157kT)7`hfBIl(VSv@40-8(ps9(_tgC&KY2E;e
z&OvL`#s>RmsI(^YZr>3%gK`xt=py0p!#nE|S?RM>ZSr>MV}=9nNwWhVYPH=Qm^rpF
zK9Yw3VR9tPz}ZC}U%sukvH{C<);Z_SYF%(eW~-Kpn*m*2-*CP&W1^4^vkR)CFQ_WP
zmdjlK1}NyeIIzCPa~7lAT!sJy5`XrJq&W6r-Yc?n7__q+ndMe{RiL4mx72NhIpWxY
zZ$#w6oD}1b&sQ+Vt08t|ILD<w;sTz^l{%e{WQsBS`Z1k(tROp)3E5P%QFg$#&7q!f
zl;(+5Js<1tcdgH#HUaSZjrfP+(%<e>Vs8<CVFPm0*F+=U0Ey1P3P}vjnlwJhxkV|B
zuwzbaz;E4s`B3U6N(JK5l_zquj6AjjcdQ&x9;+R+uW3Gc#Ms%^UrS`AfV&8#t*_mm
zk$$CJYA{bseOCQ^>WhrZX=UZK_98Xbt~_<vDUf^{_aFs3_7SqZ_nX?#(q3xKK<Ukq
zMh%k`^os4Ig#6=u#X}{tk<-`pRzIH2@-T}Jb@mCAIuzsGASD3&F=PgaQUe>S0b2Om
z*U-~ajC>oHlz8_kD(AT}Se{{Dy^5%20Kb_He|uy?QfezInGwu#)@5!gK=-_rJtbbL
z`qoz5AbCkUP-^xhHNvx&nLux(C!syO%<8bqL1>Ib&Hu8{_54GVRY4D)cv3v$re`v2
z)I^)0BD03NnGU&)?$Zl{b}K$HjE1>zd0B#MN`?_&YH(E!+<)lGM)L+*%Erl<rhn%z
zHv_8c^g0qWnncymN}|Kk&BT&IDIa}#AWlNgsuYm%6k1MW_%@9vzvq4w=b+J6sz7E|
za!$X~6BO@t%1^wcc4)m+z3;nh(+gC-%~rA{ZI1xhb6HIm3bB#knzGQr?<D$?rtOv-
zVou-VKY)ImPQ2PQ%t0u;AqT*(2{(JS-+6aH{_;n!%>tUkg!%dTfyv32F!d2uCDjNJ
zMr&`x-OIR-wcE=EPpsV5)j8AZ%CfTW)NJFoPMBxVW9PCsD$F6#s01h)OV>(&=_63*
zjt}Dk()d}CPT#Vp>=y@@RGp5CC+6<^xl>>Dr~FEm#n1<Le^1l7vnSj!nrUFdVYR96
z>Www822{Bb-gdv8eWeUkFU6QETbr>=q-#<-t=qn*M<l@kL!#CmJ?VXZW3q@PMhuyH
z*U{cys-xPT(v!NMCXYh;T*gP?`!8BHyZmyv;A*+q0`!9moPkrM#DMPujZ~+zsqD)_
zZq@@oqX?|HP+IoZsy=1qlIm3EN2tT`jccXPRK7?WKZq7TsPFdts&wj_Qx#;H5J@8q
z=dhyf&5C|I71#9smC}^5YI5Wrnzt|l^iAlhH+G<qA6@#>^`6E1E;Ug5;C0Xc>7Qz?
zfez$!+ZRzUl$*ua>&XW1-MiO(aeClOHr;-)o_|P=2^IcChf6hKn^RP5djGRZDD^h&
zmoG1=J$@9w3K(e;%}eAbFcj6>i5~x8F)R;v6Dg7qDl$VwiaTJ72zh&ue(_o%v4XLZ
zg=Xu!GI>x_!b(0xg~}7@bFN5L#*2_6|IAa5*5##yWG|pS6N|(zgBvO*M1g!>M^ahk
zKez*p_o;r#lq~xZ>jby-x%nzUkBSPO*8=TRE{CSr_)Fh2jL33yzDH$+DB!tdKrC=0
zRNl(PZ79r-;%=lYeTnqkXx?%jvQL~ojB*lURHn9o4nfa6>}hqR(2+vlP`rS<8}5DY
zNIGC(#<r=WaH=OlZ(!io|EZnhA@I?hHt4;|ry%BWkyJ0QJ}&s6hz@F7B@_iy%z*uP
zUETrz+E0TrfciO$GO8xGKQ`{wh>W)Oqwb~<4q|Q&Tzb-=citO28c#Q6l;(G-6W|`4
ztuXHhsCCjyGb*@n(Hbw&lA*Qcb!nJuiS=9&v<*EF{Yo()hdj8Mx|LYclt=7x?z~4`
z_a)t2tu1#ff!aa5Ch@b>Ds?9vG6PL2>*eI+WK)4wjYNRaKujRs1np#fBGh!^sZq)`
z$XYKVt5hwFbMw!hS$7n7z_&&_9?{1JYd7lZLU~_aY)QK0DP1@IhuUbT+dzMG337&#
z+AitglDy3P7Ch~^GU=Bq(C=#TB;}GJ)U5_2p&O#NkxeBV`z0|yOX7#9$i;Vm4Qfi#
zVVs@l4))i={A~Xw7o%OuBFB?fEmEGD1bH9%kVe<Y=o@&u%NJ5j!n3il-$D%dAMZ{?
z{o!LC*FSoB%ljp+HHt&e9`y$7=qSMDpc(*p$>cAyz5De(0e{5mM_aV=3Mt~;ALZI3
zIZ`Yt$)kPl4*Anv@9k2emdqJ(Hksol(w{=2p2~iC0kq+z_W~{Ayy+jae>Z3p!6EoI
zS)6t(Op9)!q>`SohX4%J6lvL+#<TW*OGkrY)6=G&Y@PWB);iI^!XCA?^R8Mhv}SeO
z6fF883X}%!G?)Dmw6Qr-fsKr~hB$SqX}$v17Wf#Z9?~iUATR<A-Onin`uJ@i<t8EX
zow?%irX>Cv;oT&3mW#B)N}R^gd~rHDVkKP+Z$}3v-z&0E`=ds=XW(|EEXO@E?3-6r
zA7JTSD)9A@*!;Y{qjVZ>T=1*9(@FO2sgE020s9Twn}HF@=lAa3?P@a~%XfB#n4~lw
zvZVY(#1M+!fO99HxW=ly337)cK%ZIEpOx{I5i+YUS&5I`fuAI+7uP7JKl!YpRJCfE
zD@!n&IFRca^mevQKq0Nu=`xy&OU|M14bvOgBRxqJljE;pvZy_rNEtG}62EFJELF6{
z!K%K}*;e^*H+?P?2gr&O3qBq7_G;1c-!?Ic!*kpk=l8xM3*oO?C-Q4gCcg%3j7Qu{
za*#QU{sDypt~K5i<t3M}N9*$b40?cxIni(J6p)<kpH&xjLNe5j?@}J}1YVv>&oVUi
zHSS&7SnyEw$rAbbi>KZ1+v&Rqm1XQ(%K{tiao>n)Chdr>I(Mo?ohwi|)h*$oKw{lY
z1e68^`~hyQT^3f>kdl%jAj-)+oqDbampTk&mozESZlYIfMD*(66-)MKJuHp$BKyin
zV9sEcd(YWrTVe^it&NTUUC-LOvF*`f8ox{$y{2!+s_XJ(HfQe%%idWpmlR5#W`i-c
zMQ&b&ae*Ss(?vWaju6lfaf>(~H+gQA7|A6f4aG>H9w6?0J>FB)B{b^f8aoj%IM8L=
z66<WCFtL)PA)@=3_9ndI09dsn#b?^{=uapZKp`jHKNZAcyj8sFoYxAh*8V6Mu3MB1
zGydAk-TX^LVdMl~6>H185_J;_C2GE+)OVME{Q0<6T84*3xfcB%b5B)HZC#UuEp|4~
zZQdV?RXXzn8SzB;`0sIpMMXs?zF06MqW8x8dHKx%ZRxPOQ}MW2w=0G}G!Ae7{Lszy
zk|`D_kBkQr$gSRzITHTPi17lv-$RX}q-pcz&Kmb~ZtxEo2wEM6E$hVRfn1Bo@dTyF
ziz+RY&O2@b%UXEFX2YfKZJ_(ZX1yGpWe00oCT|~sGiv0JyiI7HZBM-T{v+F`B;BSS
zfLf9Fc2S>y<~)P?W_V<Daxy;P{Q!}xyB<(qOPKX-ko9PTdj|JTX!UuFu?Wt!&_Z4V
z3kRR@@V}LP0hFot=4*d(RM49ja+j{)+5u<e^MWJLjrdhzpwDel`^t#+0tjYxsKBMY
ze=AuwCn`!@_04xNr|#ajQ1%gnNuz}K>Jfg8J(P0$)GTVTI&Xul1osOKyAOM*50b>W
zsBXKn#lR!l3p_G^4i3K4SvU#=FjSU>*{O9FqN>)3`QSY1)+9=Dsuop0-Nm@lZi4zO
zz&dw0K}K(`H4hQ=+_}w<8h+AjxdGzp6s2*bov3QE6xY;tIRqMREo;|i5bcKSFOYV>
zn=rciNsuAg_KYvBO@BNM9qH)FGqfM&_A!H*C^{d9&7?y(7E#x_tJ2bb6gd^X%Rj#7
zZbH;L_nxi1wrX?`7Q%}!^$<{|#xevLB21+5kFEpfO~RmL`NiN?*K8Il^w8Vv=vBD4
z4u`bhor{v5E<&m7H5nQNf@=x8{B4@qK0ux3L-&~v!ty5a6^~x@Zga&na44@lN;nK}
zs2*VDeAkf_9o<q2QSiuUXB31O+u5h6a_qTtSxCFtUqfxix+4y|=hzHH{{&1xg*QKS
z43Ym)qjvT~8mtkQ&mf;dZnV4NwJ1=G^X&TJmHcVNcdS?J<>s4R<}`#Q@HZl<#b}C-
zhC~H=_OI@ie&LFgCUT_VSwzL38;K-$_hKY^c>r4=auojJCZvKcQ}1qLv8+#cOns9y
z6Dk3$hw|a~5B|lRCBTgh>Cj+8Uq!hSgp}$3VPV}lH(RB}vNe?9a5>aa%z^c7>ijrh
zfk=4#_u9$9Wuk&s7$1ZCmeRLQ^as*`%`opL|K%u*e1G`&hLt@iQJ=#FY$S#129{ly
z3GgraKhqHPXg3}?L>z=wg<{$po8PS>Gu$^k70!$vlVV~c-6!+nzW&Co<(CBE>@QOe
z9}k_Z$wY!unY=qwf(@kGJ`%@=i4<8OBjMGM6QF15_j;PwWI{t`jPibNXz;vUQPW{S
zplN_~*#RcgiG&LLc_AVwwe?xAgdOQ7s)V)esEli`v~S~)*B<CcCMYQD(!=ieNfp03
zelAvFda-AlFWK(bp%mc-YDK2Co>VfA2q^so$^k1cclXRPGH!CgoHL=)W&Pt&#)Q=t
z^{C|I7W09dni6#2%#(1R0=R_yy^E!l0%7H5`1J;96q5yYajJnM)_FWqPIh(TkZ8d+
z36CQ}yp8E0tnni9++!igh=4#G@8KpHr%lEL_}y|{drI^BEt#zTwHM)nke}}K*M-mC
z>ImckF1@Wk*8Z#;ZB5UqI<hS&Osl$%?2L}CEzI3GBUX-oDqaw=oA7R<!`|`4OIbfT
zuG+6?-_dxU(lr@FUN|t>VjC68&z4YzIKLjK1=yBwJYM=6oEF&PhIx@W;}xr74M*UJ
zweQ4`Q`KB_owbtT;gv}S-HA}sc$~zK7+#E0ZsU@>sw$M#Ihx#z-MxJ$!vP<tVNdDI
zPtm>>!hb=RKj99D>>hrIcKyYIui2i`y(XY8=Jtu)lXQ==!Fn2BRJ7)~as|+h$xtH#
zL7bc?Qs%bS+Z55-Z_yCWD4TDCkc$vnm7zCwantB)h-D*{4N(WSVxy=0kJxpQkR>oG
z^hxOFUSs`=3d&!$2;p~JpA6zVQQ>YFT$DqgUZlo0zS<USb*GCNgO`?AY*i^)(g~^?
zxTCk{=gE466f2CBag9D7M#N{v2q5ELyF9h0f4m15Rchb}&aqcg^=|C=pyH9WR#lx_
zL)SSWOunJA_1^hjdrWAh^lS!?dbU0Js)`AC5;0D!2hzm(@=58Va{-?E{6Tp84$ox|
z?O6Ju8?90B4Zq~xq-H*o{MTeax@Txh<c;6<L7Hkhp;6?8&d?J1IMSn#imoZf3R%SE
zNaGgmv#Rrj@#C4vIem=wLb!A3`D0xN1T+3~ZIwkafQr?au_|}+Nnq6b;SA4IwJmRP
z%vNiIY8zrK5C`^$<ND&A+{`y?+PpA$1$#oKh2kh=xHd~YI;H=xSMR%7s^GQg0dSG2
zj@N-V@Er&(YC+z|`f+-1QNnuZymd6{n0$t3azNXW0irbUwvNMd;^j5`zu`;oEx5(j
zxp7sLvZH5ykK_8ey@5MdL(^r{F(ZV#>-sz>6^8ubhX%MU<oEf37f`u3;JbHXV`hf=
z3Tw%K&zdns#VwX~D<#PWHt%U`7OMX~KP-wxFs9g59$|#KrpUCeh4JIY6X5l6e#Vs7
zCJ7Nx9hZjURaxe184kw-OL{(<{-3)-0M9BlaNhLeXBTi3Mj4J%y;VWWM+TzzBRW&#
zn?dh{mmTqP@y<i+;#67H5#|Tn)9uy2xSXbS++nnEddJ<CGNh=^IjEUc^56_{qHK%+
zO9^$7ioIE<0k6Q3*x1rK-bJX1S%U|`A@5+sb6u1$Wjtw<zXpf_PFy5{3-x>XXTj~J
z5rvEvo($ZyqdbBUKXV4{NM^!tuRTjFA8=OCS(@=rr9F1`9q*G*NvL^vctAO9TW4D!
zG$^Pj(?T?%^&IeOZtoTiz+Vt{^o#>Fviev_;J`U02^3zU)ukNCsr`H>=!n_GT2YVL
zJdD`y8j)RE5?CfoumEH~;717dr*b17V)HJr=9oMd;)r{@=XwMZ+<Va$cv#Hu8r-f>
zF9&*~F6DNi5PjWDKu!lRSEGm&q1r;39^um$Qa#!(ym$$+IiuxeTBdwmh#@%{fk_zh
z@8^;HUKzX}NrJF?@QB2Y8U@uOL$T%}N{Mj7DoD)QrrP(~&4@PX1p3D#u075kn$%%3
zXML+JGc9eCVSWgId(Z@_h1olJ>A{nm=xhiP5}l26++2?Vj4zD_J;~bmQRV9M-fgWf
z&=k8qXo9uub1OOdKAj<}`UgjS?eosydNsz@_2>Nyw)+UfA&vq3{!)t(U;>52`ijkB
z9$KfT%43!u$O_j^1{-iWVz@UTPk^+&KuTz9-W7yTjJUR<5yGXTJ2bpaC^#_YBkIU^
zt@p(Kpgp*i>A}b2<$YyZ9__T5&Ix+KZ>nz@YkmscoSgxOdD?w9kk^O>Q%(fQ)hoGL
zRo%lU0zyt+Es0UM_oKlTC@CN)%sf14&A;BD88aa*Z<~xH7}R3LK%Sqzz@JR6O|rFP
zEYm3<SiYuJju}wJktac<f7T`nxd1OR`&_z6(@!VQl0RhZ3Ax(p<4-bZHw~K;X)s2G
zFUEY&b$GO3du<=(RL_!*!-xyMryD2@XD?AN^7HGwaM5rf@z1$<I0Dgnj{D+z;19qe
zLIrFlf3NkR)D7fAYYj=9;(>ay?{swgrt^D3wTEs8SX*x&Wo&qTGk#X!^3iY&0i_PW
zd6XQF?`LH>_7n5B4R1xI&~e?6ZUvBjMBC^5XH?EdxA{TgemOyfQB(<M&-c6=$_8@d
z-i!KlVsu3n21O&DGbHieaxW_>Zw1>K<Ogenl3AI;K0@2wJQ63z!xxKgaOH)8f&KY9
z5MKG3U~gjV0bk4fSF<PBNks1#@4$vz#(p|VdI#wnY-Vv=j^dgiCdrWk$~k{;ko)m?
zzDqsERLONKXNnY@H#yGAMQd<9&?juruVtw}JOGr>$BQic;EB~ybfmjnVUNdCq1!(p
zuCI|L0i9XIrFXbW7&k9Ho(?)<vea^A87bA_)BaLe4j;@=xL%|F18D)k5c407b_MgW
zP(GrHkxVJgr7JKbpJv1Z2e0BDw4QJD7LT*LAZQ(-kyC%3)b(%zys5agbRL$hf7IR)
zuKci?PDAD<XxTvEstY7OLix>u+o%t3^Xra@ED>zg-XbAC%w<fE#>LpzH@%BDvGAB~
zFtFm9y@cKh$GsZ`sfTrC6^kqFdC=!0H2z$OSC#@zZFja_Cg<H0p8^3w0A1?6U+TfN
zKA%D&T5-smav2W^Lq7F>T?Y(~CPW_5)k60!PIk(#M>{+I)~13U9@CTIN|oHUH_Qa`
z4-ztk{w>?>VL-|d)n=B(S}MnL3BDcey7u~zIqMa$a>WKAOU%q|G=$Z5#FN&rtwbl`
zTuTf)8)$z!J6YWNk2}Do7Xe|-9_=oS>;e&ooMNaC2<|t_^zr#O^NCkO{+n^eR+9)1
z-+`Ci#{bkRUpvQ{oSa|VeKdl+L0~adn~vt1w%;D$N(bzOMBV8y=X5zYGqO6(@$kN(
zwGOq7?=3xV3RGcg%GqMcsh4>KqT*SP89COpo<0njQEgMlcWPc$Q2&@kP_c&E74yEE
z{V5s6EuUMcxD>Z>pP(+(-yPG8JzqQDy*g&sQ8IK?a!_(`kX1V32`cDuJDu(BkyU!2
z?*U%{I$B(JAg3t$j&z2xXX;;DUA(2!$T)Aj%(|BQ;yZ+NVB*~5wdWzQ{X(^`2f_Nc
zE=CHrQ-Y#4Rc8)XcH#h}CeST!`T=qt)tj!)UciHS6`*~h#V(ylmCcKhE8&7oRk)d2
zK6r%>cp2yzefa92>MUiQ(E$>5l>!V?Fbp36PJ<~1FpxriLH(URgF!bPdA(T(2XsEE
z*il=3{piV77_!1lE{>IyyiT&9RD|dsJX!&wd6U14ef7A|p%%UzWu^|dgIrmz;Q-A>
z*GPe`!Lu%`Rd~O9`>xsEhPS#LiHvON3?ArNEwk>sjE^+5U7Svc07JRTr;esnMS*)S
zU9_HR<>z-DCCzTC=ASQL)69d0z3Vts(^~$!4>~9ueT}tSywcTGc(x-RE(sRc3gs#*
zxS+YRM;@GD)B{??W3Op@Z>3}&?L0X*vV+GnI+WSwf4fpw-XL2C?uxP33<2^iJ&r3K
z|By%NeG;=W#HJ;})#ePKP^pfSfc5;WB6Sh1n5mJXyvpQ1Z>9VQtx$_|jWXLwG*ge`
z%~Sz?oC*foVAmYiEq49xIh;y|@}&WEd_<FGYUGz$eyO0tf0FNaTe3kY$;MMs2k?y7
z66;B^DVByi<O}L=Le$qYPS3Y`%rs5zoFRGzR|7q!AsVw!3joaW>sEfFv0j(#Gfy*I
z%zhGGHR<s0=8vc^pWaH-mJXu?BwqJK?xM8xV4LyE$Zl1~Y8A~E(X6>~1L!wiP{3n^
zVDR-Y@qj$bYV^OFm1C!#4nRyOh!NUHN+$=Px`)+th!VXjs`=oDgqRg0(Ehz<!D8Xb
z?^)?uptpEYJnCfh-9~jS-BGR$G*>H~@@wh+C=c|ORmU-IPf^KFgm6q^Z#%Y~H!2|p
z&IcO0SEP%P+`Js<`K*M3|B{;0=s0A>f^J~)f!5?xaUFzC%6sWT=$ix(I_QoBpK<Ec
zWc$Z32vHa)jV@Ui&3^iT5lV+`90<C+l4ZCO915#n2YTNC;~pVD{88gNn)pv=c-1V>
zMYj`=>_m|iQv9`HFll({I!*Z5BkaRI66mb`x{g%y{-3uDeDLy_?TW-S{poIZz-^lX
z>>3bn`UVmhSL)v*3WV}uxFZ-1nAWY^JEp;Q0)OU|%8azfx{O?BG5-~z>8XJzsE**1
z-sMpQ!-*(<E$btGc5USL<)Hhn4tP>C10z;6M8I7ZYMB}^@!nK>MDJ?*Y=Ef1dNxf&
z!}ROl4AeF*<d6*C8{*+)6~{mfo&XG9b2_s)2?)h|1<<<$o(z<K9{+)4^U8|d!Iy>e
zQZywM;ycI9f(gt5!HZIXIq8clKewmg>#^%-K#fxxJ9JLIe`x!P)Y>qtl4T`_(xfdw
zkC4eR2KI*I6}W>GK@1d|;+I9>6Zad!fG<c{vG2@X#FVsl)9!}i<{{|mBT{|5)h4*e
zdo@`lj9`y93<Hq=TqN0V6}sj9fbat)$N>GGmN_>Q#TN7zBwP|$!nmG(f^)pY!oHH~
zj{&;I0P`uT0JLvx^t^ZGx53{+$^o(AXCv3QQg}DUU|}MjIYVj{3_ehiyWrsSjJ)xK
z<-ojZDrT*=2@z_65Mef@95Yk4K$1wsou;|GyHkjn*&!W?OpmLS3#Kfxjo$D&7H4<=
z>2I%h{i{!y1PoMerBN~Hbf{jX>gGVUm^z;7Mt{f0*RcL6iKiMjzvFxYF!BSg!_CWp
zDRZ&PvASiGU4G2dt`s_{SrJscMKKVCbabg{b`h`vkDGL69e#Cfjv$~LuiJw^KfH|`
z{d7P=u2_!eLTd%(=VOH2^t_cXr#0p!)4|u=<YELSXE^6-iTLL=t<RH?lCZ;u$z0rC
z8a(GgLgjoifaV#%X`6JTz98LYKt)t$V>$j28>;=+Tesz3*E4J4|4|z+&|4(9^hg%_
zKVSUOiQm5hwF74C*rV~o|KDN$_orUKJ#(*$TKp#KUq0S^O4SFX$-9#OOZeZ}{;yBo
zE5HK@2kG4Z4-y900A7(EC|gtBaQ%P3{YIq7wY@I#2*3Y--;QAR+C#wGhq*9TV*maB
z002Djz)Ed4!rA|4bl^LCU?XeQUQ3{f`uG1+3?u>%*l7=6d#JyV@KOx$==!thEC2%G
zUr98U0Umh4YWnXg{=exUr2;gK%?gFc=l?+>CmrxWB2oDtWBWhv@eaeG_yvuH_+VVS
zw!e@Vj|bRzU-0B#8335g{~y%Adr(4Cd``k%A_es@wNV&r77yb07k(DGB3Yn0t8flz
z{p?f0isv}`07}4{FeTsNPDy|Ls|xckBJ?&z!bGVZ5zZD(;!-q`XGF(dWATo<OaxbJ
zY~mv~%pA$joBmfc-XqxAB)g;N@lF0C{FTHpeJ`-rguEB*qQo5*)1>6FkgO&DCXQZI
zCUj^050RT+P4x=IEWdSbR8?$I6pbQp+^uL0>|`_w-l)(5ApH<g-9O9E&8MQfD8h{i
zm?1tt(tTRlB~^0XX7r`C8l@w9vk+w`G_fopO>HG9TSU7%qJm2`0l)Vj_LwQ8M)n5#
zG^YD}lsppgAGC+asjvGnBag;|LIWw$tcQG;IU%*h^e6d`#c!9w&xD{X-%CgHs&xL#
zHQi7&#Vq5F0MSQ&8?E9dI!C^7qmot?X~CJY!kEa);;C_7T*nivJBJfZ=`vq@R1JRW
z%_KZH^Hw#AvWyw}zf(hynrP^)Q2xr;=1pYuiRoVP(gVeUUr(L*AaCI^B-sjel$ogZ
zHC}?xMw%vD8=iLt)JHufB`goc(%Wb%9f6W#7XY!$|20ol^;CABu}zi-eznx6R`Rk{
z)$3u(Rr{j(^q^D-O8nV{N^YXK1xEs*$eh3bc(&L83D&nB|C!mg)$RW~6k>s(mwVuR
zAoOX6=4$zkt;1lFrdoj`F>EwfF1w!v$xM_&rnzWsZ`bGH7A%v*Mu!{Swb_Gmt#|Y(
z@y6q$Frv*;MBMOyXFkA>wCn}3?Q~!M=~JBdSU8hp8Ls+c%*IboK`}>uqD#>b&%2xj
zn=C|lYomtYsUSx^4vb@@t9?kH&}X(y?4ZEGcKa_gUla9Kcp<f~`jmWd<@GP+4TEM)
zs|Y1=CtHJw#dVlMdoE`hs&@fF$5QDs_)W6+64ztd2#qMF_w7^Bcr$L}8Y~aAT3)zD
zr1BgR^?zLy|5ohB^<Ub(Kv-yBshkhyEjvQ&BkJX6M=h%(LLKzgIG>KOT2a47uPJ_M
zhU}^hN`Y&x5$`<Lh;;`It`iA=Na!0%eM%}UXu?mh8V`117qp7{#FHHU*H`qTIX5O?
zIW?2EVLz>#k@%1xR^!2!ub^#46)l=sq+{|pm?%FON~n~2%bNwe<8DD~cdvUJe?F$e
zkZ^vJ#}<XgM6))*F#+w8(p^n@^aiiafZA3w-M_F5lzNOTF>%4QB!M0_crF#TETZKv
zZFhjdy(9RNEX;5++k{E7T3jJ_+(@B~5y?!JVg<6-7s0A7DbZ}EF0@w|c65G+``LgI
ze3l}ldt}f2`zDqWlSBgUzL@6kQ00HhzL6M*-m_C3Rd*<r+cGeln>nJrXWA$9K5U9>
zHLsL}MbnDNoTQjp-*>bS`6JLGEt>fmkCo%ea0tJrZWEd7o*#d?XOp23QQne})k&|U
z;VUc0$$+g$%(GTW_AfjZC0n`acm87!fD+3Ppx(B+Z{Mu0LR|877nhxep!e*<3<-;>
z6*>4^1{@q%vl(z#@v#_o0H!t&wgMsY3qFAtW^<m~mG0}8?yypzUUooa_Pt_V3T;wG
znsx^Xs~Ef$r@lDkuhO$ZJ+zpue0s5I<qr~fj`VxO_I}WU#rfmmXUKNZ-07)Sh0XiM
zEce(n9~wd+ZhGPE;fZ?h-Wl{Lf&*5?t5aTh*-OdjqUUyac%OEvGxC96jb_&7Mrm=e
zd_rvEl8aUqBq;eWzIlj2PC{(cut}>S5gWEq;-=sC&ERBhs;^}3+`qKhU#9o0fzn9m
zmNx;>uFyf&s>P;i=j9Go5_#V-0hSBb7ar;wS2>Z?1am(X&!8c$$k*ouCsDSD&DC}M
z_dou457DFw`K;sC6EnjX%BXjfj;xQfB)KO9FHVz)+eqp)nMVzQ$Rw94bzMF{!W{;N
zB<aWOsK@XHuKVU<t0b`XV78jX6|h7X_C?tO9Qf}GMhF3cp$6fjXa4v!D)4Ne%`JH*
ze8x69pPcMjzpEN>=EaG&7Q;Nn^I+1d-Xc(TXn<T;i@)|#=WJRzOIcp+Id%cpFserF
z|5Uy|e&{e6^yVX{BjoX&Q?V4fT7ljIE%5Binw4n>y}p^*8i#FE?`_=Jy>(*CdixBm
zYW=VK7)1Pq)uBaUyq)g;``gu`1^<NW|AX>WaqmmcM-uVN`)MdOd+DLvFUR|dIJtr(
z9FUcTL3aC=#LN>KEaSiWzk2edUp=AqtK6%?+>}#b(Fxj2mHitN`f%3zWx7+1>HWm&
z*?s|4k?Bw>?n1>Nz%X74gZkG*jY9lx@$l7{bdaPhKKsJc>D+u|$j!TOR)zYv;b7<|
zDm*k-ExdX9s!Imw&XAC(Ce2zXKTRD_>|={uk;k~s!xkrBeR+8HVYc#QTw73cB77OK
zRr=2w<0{+u&3L!<Anl~TuK5iJ3NH4H!NUN;&e%rKg{ah7;)WWgWVQUPik>B14&XQb
zvjBL3c2FaQQ#X$@9%tij(^B2)3~*fyU6FBp(?~8wuDjEpr~Tz~wVp<XbKM&ncZ~Wp
z2j^vA+W*m%R27t_hgzYtq2ix>(jOkeHl$O+&Nq%<u}C>jFLavK(Uo^;@JToKO5Ab3
zL~*;L#}FPsB42EQwC9fXqu`j>N0XopIxR-O^4GENp>Se9V^R-v>)>Hvljn<9emC;P
zOB3sHLP_(tEWAZR*SPp3NYHwf=9|2o29lKc(ww+cLRa&;AfJtI$H^rC+D#p-Yd$DT
zWHwEqAruqm0p#)lHFNXOI_t!0#YIarPc)ct@-G1ks(lH_GJ58j>sX<(w>)a-%hRr!
zwMkB+4WjzGsmlZ3!iis?u-dem0pkh5dOL{wnjO~EjBKrCvoAcWB<4ZbRH54*&N-cq
zXP?A!w!o<mpS!p=_u^an1b5le^Y1Y;tlE)h=<rO^2WM3~XA_&SAVKi7$Hf9039PZg
zS>Py5QlaWBEO>JEc$o5BWqWV(bLX@}`^&r-LR33LUb80&o`p(;-7(ui#QzoREu<Ny
zUlSU*7ykEUygz$1T~(h}yxg4RqTBEbFH4HGwD_9eRIQK4L5U5&vh@6+?dComz(=1P
zr%~ko`rFor@cX0b6iVJ39^}k<yNXn91Q&g$0h8h9sJe9x3}csH!!JfI^TNXW{WgcH
z7Sc^<hA$iUo=$=72hWRbL8Mv64>vIMO3y|djDz&HQv>V2T_ih@w$mBaYVE%m;_^KD
z42NA^9@)W4Rb>6ZA6E5eV!dWFPRx9EYhAs&zCi6?pRb1(s{TjG0R4AWOpUB#MG@8$
z=Xio5#*~jnzoz*7yS0j5wvS3a7r%EshGekM*lA@1{)n5Br|J3N547``Ik(x%wXuSp
z&`;3gmYw02M0oI23Iv?|{NY*sMq(&z{pwVK<e<vdbG18sqOZ3Z#(FhN0Lvf>A2({)
z52=G<YCw+#FYeaBf4aj?d3DO>T*gpfPFJIS&z604zTa!-fL(!4;j-lDLR<b*?OS*d
zEnOZkFEb5RoagSe{JGPdd+URw*ou@I=U_N+oiolI`e4%Y<T4jVBsi@fC@V9yQY>`7
ztKm3lHDg=gepx^St*679tT^(8U7c|8)$ByVGju8k&aId)3eZNo?;UDxJUZ%c@$vL1
z%iU2NI?i9uAb^2SFROU|YnQjYOT5~{#3}HvK0{#TEe<8^W*kW9`p4ucW%p79-w7V3
z+)L)i75iaYKM8zz+~sl7^x0l!wk`9>P^-eMPIk!p8FDtd+hV$%De;G^g|v<Q7>iP!
zn)S!$Kesbr;a5`}l&Yhg=z?yS*`!AUu+KB?TaU1m9hm88ji8@n!lrTs24NQ#8Qdu=
zdBk<+R@*L}ml3jzHud*v$XyQ}fTv$iU#46gJ#E;2G*pJCKHNUCYFTtdbqA&*K(_;M
z^Z`}K)r>pqRJ4OH?0C*b`{B{~DX%svm1ALzZbZ`N>d)+X5<cwu{X|U6!0A10HI?N4
zll7cxWj(%I#D8;kvgnarw?Ewz>e^bs>Xh5ufrxE*!0GM@j}xy>^Dj}UaeX{~bY;sP
zT9SA~eYCh!-zeZVBa;9#!5~)SoK(rsYWS6*+u(e>y*p~MamT;rUfq?|d2OXp9{K)&
zeMWdXbDY?;!0xo()aqOAY3EKu@JVY1Z0j-twv>$LxE|)<Xzw<fJZ?AWcpiyGl+0!r
z;~XbOklUb-S4tT>TWr%Iu$bXCS7}#Q*V;U>TDM*1IX~rdW#wwv=W&!@vlX$^&~ka?
z<T&;1YTpFxaaHNQJ4p)54A;_lP?RzW9!z$IzKZ2I8Jl$so7uG66<A({k0kU}K+cVS
zMUb(Va?;7U$VAXN2#Gi!bxNo#uU1!C=KSs4V!!}N?_&TqVH7K0*fKLw(a*15StKVq
zv#yS)FGm!qtOO6{Qi`D@0b6)_FMXC$M$9&R46|qlnC|lOgpYp{unuy+=qD=`+{3BB
z6S&G3n=-ARdW2<U#P|HNI}jEiUySZqcr2%!20bD&fACh!Z6}TjcHwPv-kLHM6;gRr
zbhIpj2aCqw3CzLIf>WbA8}YU9zu?-;unsgYm92WV4R1K!;Am#O^(BYqqW+@R$nx<6
z@4{_nkDm!EoA40XhExhQ@6wf-k;Gbc{0IG6-mw3#xGxW8yWbvus+3Yo7qr%T)V{Y=
z?aEVHik8~9qLv`midaIm#Zzi2wJ)*P9$N$<s*0A{MMUgNt%+R_;Z5(Idw+Ls{pOwb
zuQxN9NiyGjKIfb{pR<3?`B5JE71ckK`RcZnK;xri&a2i^TY9|*AF`Tq8?(=*0FbKi
zmbi|j5^@qKKlBJw77qkhP4{tdFr^fJpqQw%?)h=0#_F7!y#dTNoSaC@Mq~+A0l64s
z2~oxEtlLh)aYxGXXytNxJ8g0%z4_@O%*qK_|9;HCM$w5D;$a1ZR@+VWZ7YCV50_6^
z7^jYkfU^hk!3EV??9*O@KUr8-A2$_!$UO%Y^8W_n<zmhU!IVPt$r(YmO#H7xH(J;u
zS<L*%Y#NZsTDBM))O__D&_-h9m*D2s!~LCgXb9Py6gM3zQ8EK7EgSr%-IXX6DaQLe
zU*MbyV$lnO7)In3qFl}jU<_DOHA<Ne7e-bId%VQ7yc|J`e$9+7`DB}>RpEN8OsjSE
z6ZQfAlT)xOHScC=$Zoi!8f38{vIG|NeEl4(-=8$Q)?cI6JpX_+0#&>Gvyn_Nip1yL
z(Z(0)A`Twna;1B}V0aW}^8Mt;JDg*&@FmY0PvyXy!LwLn)i{r48=6i|EuH-^x4yd2
z{g@?<(51uX#&q2S3+6yMa(j8)ZdUpu!UO0Hn))VH>m`s{iWc+q)-VSD9iu<4Da9oh
zGmM6mRmQrJpuu>B(<}89slvD#SLl6C!F8}{{F6v>S77dKsk79jijZ`bo%=3P?#SR&
z+}4e};}JuT-fnZN$EI;!Xcz7+c#AQi-VJ||zGlL=244cw+qv8!FSlUlhk1l$Axo^z
zV}j7}`?wVRILpt*mhE-MA}Oii38baUGURZefO|_y!>Ee%ooH>ZbeA#mDUzP*Q?Slk
zqD_m+2*$+{O|n!CB&wJKnT;gBt{FZrJGs`$qbPHAyk%$mPH^Dg(Gb~9uT+fbu<pcm
zQ3a1+T)32tl8>w6<Gq{{Z3y*d*!-}aMU=m7qsser^tbuiVCo$j)#;7D4X`=BRtxuc
zjAx@q=hDnER|n|ulP4!rdkce`5BviSYSmmVF9ws`y}SnA`2W0D>D(>zy9%Ks4~{_D
z)sFYuDm5O`AnC8FXwvsUgBJ{u_87D4GUL7S0ZlM#RC@CL*~6T96RL(z*kil$qQEC=
z+0hXXNTQf$%pB;lolA_nk%}C*l;@1@{y5U&lHnr#y|-t>d~}O@)xej)2Gb?4=+0eR
zI2u7Up3F7M*_$p6ENMe}4^diFYl<)RP&y%i8AwTGr9dVIX1O#BFILfYplauNKTX<w
zN*b|6UDpU16cNUd^5IjuNq}qhow{+cvEy4tiFU2kcb+huWwT~biyFy-|LCf@O+`N$
zF(h?k7$l}kXQ*<sSCU@W0bJ&@S8=&1P>iHvh6aH|_H)&r42zFgjM&l@wP;kgt~dIj
z>}|Icoqmo4op9w=8i=(G*_>-(F0RLXoci5%3DajUrf$v(DYOoOR9rw-On~SP$5VIV
z<F=eqxvUX#m<t<n#AM(0-<k83G1Zj2;>XyZF}6+NS1HDQth(Jz`F4=fQpK#!85<e1
zKWx<pdTSK~D92@{GoDU_qG3^2{{+t1a{lp$IMt)S?mv5_t{2vR(gC*kQoOk?<>XpF
z^Dn3DKOHr782!idQxlAVE(KD+afsLL;QJ<o>q>Mty~e3`(SSh76bpL-Cq@^&bnh%>
z>rYP!Hfr815aBptTc2e&82efm3NTf4)byYF(=<k%;+&Iw!4!=cvfVARX27dMH8BPD
zZ2Xn4`Y%T($2jbSh2=1MR7QMAjVu|EzI%}EP0BFUA0POf$JKz|8Dyel60cp~UD^!l
z=OJEhHY(DtIc^RN^=^uIQlCD(jG1d0xO5f=s8Er0-q}AXkYv9-J20~TnjA?>#8tmD
zXa0D-6UXBdct0l~tSw9x7v$c3vZD#Z1qW-j*IEVywwnm+9>KT(C&6|94eT%2mzl!4
z2dro`0e@b5lbaB!!_h_(BI4l+r=xNjQv|S4WB1gR0bg+UC!NFjjrD4FTWD3-`tGGb
zv-b0x(DB_Vhk)D$#EXW1=Rg009$^XFyfMA#6#2cwQw_-lsYi#e4bTIgwxsX5Pd2M9
z`)Yt|7l2M4Q`(nbQ!-*=B02YWC?}KOzjZUK1++2TRlY#taD<W_--q(rZ%-7tSznF&
zbnOgNJ8X(wc!iCX4e;c-g6y`GnbAbX+h!+nwk&xsKXM&={_1{@ygPzZa^iW0)&&iI
zL62oJ^F{xLBdYX>*}p?`$B9rS`_si)3_ko#qMglpfPwFxRRpg})rvkC1kd8ptxst8
z&Nwq@vvF}ZtI=;q1NsTcAyEu%;Kq<wWN1Efz{{j;kzS-KYrp+KCC{}gAQ!hVqG$W#
zo9S&WpSr3H;Fr5pDkAYeE0coCSic79ti74X7t<n<%m!EoSaw|sq~eKbe^Is?O)I@G
zyy8PMy8GqC=?+wtlbai!IG>p7u}C$h@gJ1_7r!jChDpDcpL(ysCt=}s>~T9v-n?w$
z6BT364y_=*k(_8Z0;9inBFZv4`@$06{^5n1yO5Nk4Y1^?RfVV{C2yu491_L;>9et}
za`w8={fh1{ajjoV*fmr_S9WgH>^<9yyu61E9IveF-{(eX@-E&f{dlGm%ue%#tC{0U
zv9!E-0<d?j#Pj*Eg}33AY1dn`uTKxMdEfJg7;EBI|12M>GF_Azh-oPkFG&%**wK7*
zK#3|aHuzD(sF$Vpor_?ysjy9sg(x$Q!JEllYFOqp4YO4>8e$<o%DkpC32qL)%~P%3
zMhPPPrzrR(9tL`-3gaaMSPJ4r#OafRr+uv+P)5DJ)wk;(wjd{ZCGC>RzSsiAw9|>0
zRG|{<nyiliOO+0R-3oR#>Ok|)YI9hFfHBFG!Z!E7(?>ZO%HH318K&+szTC@9(k7O+
zbhj%4xQ=3C0jIg*ld+NiQI_&QfKWn4l#u#{7<G+KcrZWpL+|AZ?Pm-+!H_{04I1Q;
zfp3^73jJZBi`bH#E^w~0JMm`egz>TfAW;`Ja*ly&Qj*0GeXMuuLDG48C%B98)IRqE
zBwrolA{M_J@GNUHKmGd^T=C6_wpp{oa9XiK`|#hz;%>RR;sebq(%~=f>cw6ADH^3$
z1Q2%bx@qdy9CBq<bYd@SJH)=IF~GP;;Hw^5i%_a(7;Z}4WO9?7x&)hMs9m&E(gVS*
z<regCx57NH>~~5T8)5S<x2y``#mXTDdtanXo_#(mS2s{gbtuBoT@pX-Nf#ljHIQ#w
z2n%^UEG@jLr<*v~3_#yAexqS07ZV1oS)!>H=e$>_8Kg;k#A<VS*&=LRTS--I%c;97
znBT*#LR(V#Y4rpK`-iD^&unGAF^;pu`rr}KH!CoW&98#@%t+uAtMJOG23<jl>^DYE
zz^Vn)-$M>|m6N+>T#IGa5|7xw7f-z~p^Xc2ptTVh)paeq@8k6}pplA`?q!_%aj_|K
z&P%)^zC0n`#19Ttr3biVTxb9U1RT-8%$WRp@Vjftb<DPI?;rxqpkD#*-<a=}x+nd|
zgvOVCzSvab4^L~<csuce_bZAlmn}E{mgf$@K~Ffn^m=nXAOYTECOZ?$lkUVDJscfr
z9PWQoYC{4kIVT11-uc-E_OF48MfiqMtr{3y?a@leG1c9@3TM-#ZhRe7GO5Ds3&+0>
z{(ngJ9CjKV2L}hf)ZPnqWWXv1)g;TvQAMQRmATcbFIE-s%f$9do8U(^(*=gbDc6>4
z9ByWcy`T-VVR`rlv+4C>Xtb*2<|uDeYFDYaNSqyTOf0hHkqUEQ%e~`bl;>N}BXpf|
z1-}}4FDcs&?RZw6by+WLXk_GB!=3O7zEZv0Sf5v%8aA-Y?PE`*CNJXn9&~e=`V^kp
z2QbRRuB@W(J(i)Gl$z;Rm$8u8SWD%3{X|G4M#24(H%&Z)kLF~sxl7vqQ+JrNKN$Ql
zZa#1A$+Y<I1gC_Mq@JW_WiXtJ_Yk12N2UBk<SKtGq@j<ZaFGxvUDv){1-nGGehqu{
z?Vv|l!RLbLURJ9opnrNi_kMbN$Rug5+UH&dn`^K~qd0ZLqm&N7jfB;-rp0~KEc05t
zzWNt2)-xE5QUs-AM{P%EFL!%j<Ef^nT-}r0Csy`D1ux~VUKe?52rm#$^G4J_Wlgvx
zs*x|G6xeLoSzp9fzf+H+6F*7~x-ZVKRs~Idi{AxL>^n<y#gGVB_V?1=7h-Aa>zcLc
z&d$M#QVBS!V;{>$G(&i{J3}>i#={pzH3gXiG$HV4fJbqB!J}NYIA4eQXLrUJfue1m
zO+EBsm27`QNrCd0R|{C@rPSv(o{Z?@s-gEnJ>2vCCPq!%*?Yb;1#chQG^U=J_sza6
zyrO^YyfH&S;w_PjfjzmE8UknoPSH*D6=LFj6rgIM?E0pOXn4f~sm8$QSi@K9&I|?6
zgH`r4g;cCKrZ>FKCY`~rJ;YG1ZZE}N*h-`yqnq7P@cvhA*?+6Cu&HZw=U^Use1m!M
zrnL5UWBV!bf`Bf0l_b3GaLK^b)xzs0D-9aBCn`mVwEF6Ydv!0E1ZbN795_$a*ze~g
zRC|MPJECd)V%M?2==TkFEqoE9{bWJynC_McgLc4~49gdmK!ttD;-O$hPh7&r&*d(F
z6`iDiU}wT*<hSeTlfP893Kv90j%eRAak!ovTm35w{bfm&WXVGNO@#q<m6+J%ttJwq
zH!pM8ab&0Dd(*Pg;Y==V5t`u#&;P9swUpO$X1&xQawFlR{8R()Q*K+4?if1{x`ZLE
z>c<jwDo{Z~?6&L`lceLhr0u=!NUUbgFm*SS+{Df%Wc*Nc<qpqyAuvI88+yC|K1#1B
zuU`qNzb8`m(WPv{q41sxzt~xXwYe;8FqrcV!1tpuo?27ps)ekk=EH;|_ng-LBN9pF
z+Wz(Lq1|=~FK#QP_1ehHtFo9Ss|VNnh`@-~yUB;?wyB820NeilAiy@YBkm(&xa?a5
zvcsXnSA6XY;QjB~=jMPnRpE8IB!^qf0mGT{R^_qI+B=ksq&Uh2KiX#U_m7wC#yn9e
zR>c{(l?Kw%YnFQ|R9hdmYK1bYbGASK=<6LH8L8`i-2V|KGirGM%6deFmvT^f;C<n<
zqxzB5w<)x>4tQJ;kMXZHy6aL$7#mAXx^ThW$*HsGXAz|$fJy0nOb@V|#xDPg#bOU-
zI<3S-@u=s~ad8d@wRxw<vtmg)vuPPOGT~cWTMGfYjWzio<GO~Wx<Ah(XEvKKZL`cx
zoxHIZQn4&t*M+f1du#3<9)0=&10Ssuj=q<@E*Uc@Pvm)rEWd2lPW4?%pY7Z--*@GE
zfrQ=g@L^RSe<!EWh=>Sxas(r2`|BfUy`3aRdAQs#o6YqW>TcO+$%xaL&R{f+4j=h@
zL6yv<s0SR6ioN`uKzEOgw(gb6Px+Sf?n8v?%L0|z*u*+~M(K9*)Cqj%!Eg4M)^zEG
z1ciVvz+XozIBTy88Hkb@vz`G>;a*z`l+FXctCD5Luou)Yja-do4&S`$!NE;OgFC~+
zv$5^$)rCZxOF_n5xI*JnShL~mOZ3{)DD@Nu*<Iyp1espX;i2%&^2d65<Hc&x>8FAA
z_J2N}jdwG-_W=~p>7%j!KSt8OKdFeYpk7E&-^acZ){BtcAmp6xc+u!=dF}J2Exjq$
z$t-Bf4MAzpR2jkzO~zJtz&hyC@NeOz>wgYxQEeTH*e(yz<hs_6FN}PQdH?=^9agww
z+toLugKgSkaXafQOtI1NgIO;v-Zqso+dKsj`pu!~_kA~9OD{-tu#^mWwEZMMZ)Gp%
zTty7FojcXI3ojlSu*vUP&paL8O$*?JW)nl$o2N&Q0K35>n$I0+q73xOwZ>&CYHGYc
ze{yqiUE=fH7K<-{y6&w(!}8D4SS>fJmUTy88a?_rzH|=%s<$_=!BVKexT=5`j;;0{
z00DVwJ{X45Ir`-!&4^@9+g?zX$li@7!t;mskKUz8?+GiwG;3eBsEhT7^Awq%4#DrA
z4z-trmuwEeM+`7)-sjKS^l1*)W+zpJgUbj;?fDLmaJT@QV2}(AQ|{V~I<#f0{3%ZQ
z_VY-C-U#VY+L_Lc*HIGb7GmG_Jb;s%udH8o{tcX#cIjWwr~+)H#v?>@MEz^kXB&rw
zrxN03B(C}IaQooT+O>zJm}9f^L{{R>>jL-GYg(An*X*Uu3;FJ_2?aK)=@cftq)&h+
zEsGbb)3;~GzGh~nW-{czfsM&Isp0N;+zH7E=5AtRqi(XkNs2daOab4kEPIwq_dCO?
zKWC)hl@IEtPwiGyl_zxIw1Y(>e|f}$Ty)&YVlTu@u^uxE>BFW%6H8>V$D@bIa<UC!
zzJ@em^>ngFT*Wp?0=VXGyQtrl5@oNdCVueRq038ra&-dG()M=D1Ui14Ljj%V(Vg$f
z35?&bB97H%A%J6d<C53E9atS`ARc5Hy;6_7D0?WgQB}6&bJnto<~fV6OuY%_84>FZ
z2D#Eoo_gUG6&GwyAa1k4l=vHNc56%EykoDaqJqMT(Su#=^0Et<w+^=bVRlwJ^6mco
zZCTkDZweE754YaEyC`<JUxkS#Uph$X13=Gm&3>KoW$Lix^EP@ZRa32h;Ah@p9sA)p
z;kQ3`Rb&)Ao!x~GUox`&Bvqh66iN20*BW9Hl)<eUJVt1kXUfRRf-{F~zNz<J>Z^jW
z5K}@{QZx?AScq-3ymdm^;4gg&OI$&xq-kd<R0EFCxWt32c8F|QQrW0(2_lY9`cDJN
zWW9d(r)#%Ge${}VMG*@&7m*n>omDTgEZ*PABLt1wd~Bq&9IOcIQ<Jki?HRp5ON+0C
zlFI=Lcs=>a7hQ3@h<*scx8AXbjkIDA>PpdxLiqE%U})TE)^@!AST-dS#&SSuGu(T!
z9CtE+I_&ktX8BJ6*sZ+6AhQfm1c`v0Mv?KJi1&J$XM#j2@5rL6V0^Im7SVsYq_CDS
zeCrv~?9}6KMwaDf2{&8%2}(A+hXSDO#sa;c|Hc%z)@r4#nv-Y9P6mERS8DHRi;_wM
zxyahLSB`I@g*dfAi9}Aj+aAwB54NK5^Sr0v)P(yO6*)Q9BL9J9oAA%r6|T}rcE__0
z6XmzhuJm<mo09YNtgB2ZN9#3N`TG%fwB0|$p6gGK)l)?my?ByZw%Ez(S!e0d*zw79
zxfbWys`9?u_)s3T#Yh?I!Hcy$?yw#E@xz@iY+f13ppyrAw^r4Dh9mut(zpRWDha*8
zfmOKJM9Wvr$y2hm622LzX-7?%4-#D8nZ`PkVhwPw1hK&RJP{7mDS3lr)g*;QPLn;9
zyyxC>-}4&yWYN%H*)SL7Ra9Y#h=3OX2a0WD#?gOUJ0e9h($cD{t7SO3#4qpGZ?)u}
zrEMv^Vut!$O4CgLSeurF=WW?3_d=gyY+LNxS5DNxq_lmkXEU3Vm5cM&vd<t&F9Og;
z3vt}@xKmrxg@lHMplu*~#z8Y-v|nCc;ywJPt>INB<uJTFwGl!@)`y;kD1p`+tV79r
zszd@iW!M0Wan{o|<NWesD`a<|g39~ZJ!pvsgtpP+cmBw^Lu~?#icl~B_fOt-PjTn1
z4uwpI1T8EY?UR@E$0+kHCZ~d@6qOt%yWhv7=_X*oi(;y`{S~Pjr;kPv%HQw^B%!HC
zbtkQV?Ay1$A*)8vnjWdv3DogosAuTWr%+d^mfZyMA@npLHI$goOD;~*5m543aJfE-
zyWz=cI@n9a!B=Uky6jsBJi|w!95M@5Gx+7^CiU><sM^j8r0(gsyNV;cD0jWC@fKm_
z;b)f+Q-NiSlm;I={c4_+1hD^@$v0AmRLCIeWDkbh$K%>}8Ks&xU-$O*hCe3`Lr>};
zE4sGy_b0?)&Gs30fi)`tsMeP^3T%{}2AmCjm8XMuDo)H-iI?YzZ>2Vdmp+^+iNc&{
zOeAKwH&>W#6qFs~P(IzNTa~r$!((mIj_umhO_M0%`b8yWRouP;SPn|qI3a9|!%mN2
zSjx6ep_{a!&nX>47|y|Ru8q3Z5eSn=&Ehih^*WJd$kEED_F~&4sB*yVk#}7g;YF%c
zG7~L}$^H@j+56L5vHpjd1O8XHx3_-tJt$n}@+ilXd=w)W+2=a4y0Ea27phg+R?n{*
zO7K&Ke<5fZF+#z8ksBVCwl%GxJ0K*1QUdhX1~E82LM>=BC&r*Z!}&9#1f?X6$w>Ke
z-;bbW3*<YE@g7O!kG^~J?^)(Vf1uf66c1vYD&5yK|C>WYP`}FbzAeuW((<-{q^;;g
z(8i=H&9@f^0vauD!&02PH&jE84-)+3T4AW0Px__LI-`_$L-{z})QbxdG-3f!L6p!b
zeoN)*-HmWkT<^idDODu}_{=%ath#!d&~Q5g<*mO`LHBpEt`O>9Jxp|D5S~DP+jwCS
zaqe`e_0|vLE{>M6r_G27pEAgjl7G@CI`jQUD`&~-=X!MII-kq<zI1zpl74dUt63vE
zWVb<1k~i)tTdm4Nqef82Gi&>%aa{ZO{fK6I&|dyv^U>2~-0>B{P1#|!GR(J!<Y$)G
zes-wCz*fMtx!mF*5@~B^d%H&p>jrCC=XVwAhMw2s_c<jK#~PQiZHc~UlFkI*SrHd8
zs<JDaeSxW@wlV}|QjSL%WNV7NpP!<Cv^=@sBbP^9nywo>X~X%CiD?(%Bc(Fy+QL?6
z0b=sScj-;0HzVYa)IRXmckzanb5+U>K{aL(s6AkPzz!R7rw@lGZ=A-f94$|SpAc8`
zLY$nP@ug*z7mYL~{HOho!B+&=j?)F_Dm+`T6eS6wh_lKYEb=~jBP*)sAQ!R&etzFf
z`yO#TK6;JbK#lw&x;1!Nm7((b8R{<w@(T^uCj?UEg!^>Jb}AXe%Ud&RDDW9Q!e|>Z
z;}^8k=&;X_0<57_L|{?Koov~36Qes5AY2gS)<%xXDdiFjX64!S-ZC#ewbFbq6MhKm
zSAcEwg%wJ>CS0~k(E7Iz{Cpo(NbA1qSm#73TO&@1Qni`(c=%LvKrL`O#EH&Zw=nlf
z(dEqcc76~=n<s19!HpaHKJAQhT;|gMtZP6w!l6=0M2%KwH+Xwcoq@yi4r&vD8RJ)Q
z$H`YJ%|V@4jVxsu+uw$^jSp@q;F|PPjMA8Lx&13HH?Uj3tfp<+;hEDPqhYstVW6`2
zwq?y4flV|}wF@GmoYpX&bonnsH{Z~@cg1Fb@Nmz4BO=xzj(lr`n@c=g>RUR|u4~o6
zjl1>a2r(v*(##jEFsjK+{%jMlxabx9;>FkVi$rW+7P6U~xIfRU#`W3;u1Dx!@8q0j
zt6cjWM&57dRdt!47t&0fhz%-Y{#~~JVtX@ADpeAGRoq`S<VW^|lHD8QpJNh-A1^WE
zRRKh`pf4AcFZD@ct%1(O+Pzhvt#=2SuNbmkt&Q&%gKg*dch&=O9vCa%3O$4Vu?}`y
zS9Tk)_w|*aVLkcC6?Terb=ZJx(7F#7^%gxvdV<?Clnb($KczvTwbn>b_)W9ZI-52;
zY5KHnzy`Mj4gKKBjE$B;Jx5F(Ne0bxN-^-iMVocOT2CSd_MO#&M(RB#T{nWJX^$VC
zpxWPo&vNU2NxfA%aj_Xa=i9}@5TA!>l|^>oG0h3rowd^SeJD5l^dzypsLC|jM$Ug@
z(CAM6>9+>F%FAv_VNlH@UOdj_TB*p@yY6EyOIiLXgWAo~)8?OT>sUM0No^j==(uV$
z#YRnq65k2&AT%SHu#}U;s07~h<9(`hxkzuU4iIgCke+XIzs>!oQtvdAGP(g`L(G_E
zsEy@Ta&mB3BRh*fZp(SvmJTB#r&};f$K(=g5O&dy+S5JgaM3hfi_rJu$2bZSq{4!d
zevHpq;W#5F^bf`i)1tA+$ZNYgs-S0@)99?yg5EdOz2xDB9!{y~c#!{+bpaLP{)JK?
z5WeT^v3<E(Kq+9RIP0DQ-uK{${ga4wrR+OBU$>a#mgT%?_xVmnP>+NfZ!E=tnbICX
zedh^S=(0Pp42N0PyTg$isGdG$-$*jPl^hK^*yK|R-2FQeew0wxK`c7-m0Km&<EE|_
zIX;mt0|?vCsL03=ApPN0#D(vPAt!pX4U+1<M@-Dj8Lu6~d&wcw>3R1dH8-oSPz7es
zIr|D6eLAz)b69A=@N=1!->Bx~3YLbGdmV8#(U-@nenarubzVhPz|UNQ#3_!np671^
zBx?#N9W0dXx2PSL8bGS1BeWxWasd^0#By4WR^3$8$zgFtEke(bTb&u}6yXMs<T=U>
zH6On-+k>$QIV_aU+mGN3k$ejaC1Y&28o~Ytvh<knyY!xW`48M^nkbW-OSqLlBdC2i
zY|IbSBJg-NXP!eYnBoG2KW(IcCxu*(l2&=!jW*#AlXEq-C4i<OL~wEQBq=bze_qL2
zHS);revUQOTO>ZAfcN)<n6pD|k)3y+--S6lv%1%TV{shyKw<S@BvVhncTBEz8-zSE
zownn*9K{VRS7n{n_pIZg$5o86OyQ00Ygxv8>y(Kbkf;c~6GuQ?;48(&9lSp2<3+VQ
zkc;DK&e=C!V+;Y(!Iary$RHvE==i{!)H{8g+A`0*QD^i?KU~_>NVd3wZ7)B^1mgOF
z;CZ^Qwi^I})n65gB@Kp4Um-3JI_wktPhXQeJ%hz5s7sj}<&@Q15L!=BUe>&%vC~!l
zh){)(y+2qsFVIn{#m`cwId);Fy)}8s>^C=oD8R5Fv#^lnH}mzUF*-cVw*FIrN~$u>
z+GL?SJsQ=4?Id~wxj^FAk#h2+6y!^N%a(fvG_41IS~h*;pmea#!?{0zn96JP*>iMG
zOuX9YN)Jv9@LSRtE1NOqcW0$%W@HTTLJrEpU;lhHz+NMgiH_5lnw|adq-a0g*Z<{9
z@wZ6DlvuZlpaF}nSY9=@K4Z}&jp;!n68+!kxG#2l{jWb8Qhj$0ls^7b16oUo_^#b4
z?dSSmOp`j<2XBP0Nr?DE2%ihAQNBNl$P9y>kg18q$mZ|QE-<L-wf|Un>@iM7V^TX@
zdv|FEE%^Z$?yu{++1D4lbTkn5?%e{zNED9VoV9^R8C*4?we(EQqOPLK%nfa<Hb4L9
z)b*23#r&1HlFBdhU>kgyLGK<XDGF%D|HLxq=Z3wj{Onmb+SCmgM!4^mKCRee3vZ0n
z?;WqD6?9)Jx{p&#Ug$XLlan)ED++CHi|=1k+TbHxwLQGQ?DBbO8qd2s*x=B<Kc^Ch
z9Za!BoP$CUA0C`@_5Pmhh%lDAP-)TS(19PbZE3<fV2`jsnwBlD>P$Z=I$3fFF=PMk
zY(UwRNxywCS4yBHC;Lcay7k;%iS-@)8oUf+ux|!JjvhK>HB_2N1wHPn)opRW24aEm
zclbHQpyttipYaaW=p`{iSD=M+oFgK-s|Fa=6@`!Tn@6p7G<kE!p)I98S+66&sJW2x
zPkz6a1B=(c^P6k3Xj!iwldN3hj`oXk`?X$^*{AUn%6cbJl=aGN#G}{T%_~Ce1K<?6
z;q`u%U{ph;vAiWJ6I2bIJB%V#XOB`4!p~K^XUtXGBkd;}V1Y5CF~GXMdbc7-y$48X
zKTSm&q+}_Nv@WwQzluSxI>tHn8&`O2f#HxncGCMb*S#pm9soN@G#l2yy9UToNuHGC
z>8UqgHLLcRFg@Mk`d<*h6@kmgD$V36VCMTda8}gf(*e+mjLBGtQ~!s_zR_L}3}x!b
zS3h_l1wvorGD~F}pe?yWb)JH?J(hwa>KBgxPc-}gxFvG>@#L63&>q<k+qGKpFSf8;
z5+ykI)O6M0u!`f7k{wMQ^XPrFV14vIsM?F*yw1UKLbjLp4)yYqer)|j>WN`UpuOu<
z?BO*=ocyKn8*8+{u_cdX;`#I0e=y%YG}=CLXg_~<gMBMKv}F99N+i&QT&%~V;%ETD
z^93DDPXT;Yqf9ZKuRpIce5Jj8GIx_eN-D^x{;OZ>k|WM9>!|QmXTSVy=h~0}>E%|s
zv_0G8<@7n$6#u!sqcD_JcsKfI)VzKZQ<<3w;L44Jos|Z*EM=VJwV$>%#ywdD#%x2;
zQq!760Kye}AuPzIh?v(f0$fVcOuR6@GM;C<d<Wz0W5No!IO*s=)MS_BAtaZGaYxs@
zQ~X}vbN3;_*SbT0uDT8)Cb*jS0pxfUW;?|s54CyQJ=_~Bv$ZB-W#90nDS3;hRMu)l
z-)|_R(lL(^g|G2zueJ(bpc?X63q>WAHeyQgLmY~*WKl%@GDl+icQ=<MZuxD6@9^lQ
zQlBpq5+r@xV;}BM7^uy&hD+R-ysSEpB*9#rO67V6?SwUBlF8$d2mJVML7UcQ>#FxD
z#>6Qf`Gg5|P5iI5txT&E>$DCs4?we5+6SBPL;EqQAE)I#je7o?WbIF>;EY`qy~UpM
zr-YwGqUb+Ck;qv7vw1$^@oiHhRE4Og#$oCzNgw+c(njqh)TRhIQ%r6WY>Z7D6&*4}
zSQ`ou)7L~n38Qq$HltDRnp_I3v2AN92!`aXn$;;wf>r{jOR=?~+`pa@L|Hd{^{Vqg
z)<O6Mb9Z)|;g3hGw}P=vvu2eVKIZ@k35foP<|Of^!UKYw|HZ8ZK+N+MN5-@lfiaV^
zLzV7x_#RxiJZu8m_hE9d9>ZAn($aV?p~9lpx;)c-sVOR}pv$!5Yd`Bnj@yIqj%a<1
z9c#~!TO7L1gS2#OzohSuF5yaDqWPQ$KQz&+4e-VXdbwo4xp7R)iL8P2nb+ZG1(diA
zxgrbJCfq8^z}t15rNO9Ut@cyIp+c=HHu`-E+~lzj6t;ZT1C^I>=c#uv|FEA~M~zPH
z1g}bCmOJt>xgl*$M=4DpSU<Sc>s_waBnZH(vh`!-#I3ij?1}$mliw^z4zX^?uP5i~
z|5;9+Bs>LN)8Q*HZm?t&l`C%?%J6ZwAI+Zf?=BJywz1@G!!1F2kJw?1A1{<I%n}SS
zMzy|7HwWs}XAR=&Ajo!Hp`>nq!OytST^{eIxB|WXBhk=;6>PNc=4gwF+;>p*Nch+J
z$stLb4cBrR^YRG^!3vwDIVGE>0<^E6F0znj-1K~6NAjfo(5jy#YQ9j{Ld6tOXK9fG
zk&`xe$Npa)PZ9&{ahM_}yDy3p0^l1J=p6~v_CJ0^7EX45mmma$>#bgBKKdd<^H;iV
z{osT9p6>~M_zLk=joFXmZiMlBug!8jZojThvH`qNrxa|A)OtJ|cgIMKV3tB(z8uld
zQe5QQSWi&7wRe~R7sxIC{g&*nBzo^VcUGnqhW2Zfu8MEhQzFqwTV9tn-LgTCA>Vqr
zFb@@AEZj8b%5pYA8UeNqWZGj$S%^NL!sH)~$DS1erc@6!+13<Uj;hg^R{b?Fp27PE
zK_}PacuQh>z0S*Y<LUQLf`d{PyUI2H&K><{l$3=g`4U*p$KTbp`xJ0M$LIOXVUnLJ
z=`yk#tRyqWy8BtZm616P+@QpRlCIF+JUhjHmu@68j}M2?V(gRx8_sZk@)(e15~q8a
zqJCu+<eJJU;RhkBPCqJnCK@*ZT<BqP2s-25;vZCQnmM_zOs^#-Cfe=hpcWpTKC|)-
zb87tq2=ww!$r7p>Sons!=ZcVe{3C}{LUxNXlW$zJ5-!&|Y=2bfh+0h%JR1Bcd^C6m
zw7u|svst3n?Vnvf{tNHj9QF2dFaiVw8r9Fd_ms!D_z&0T&vR(a8wv@RUGB~RfA(!(
zB)C#HHz|fU1&+!Z+O$5jJJT=BNme&H=ed3>!oV9UM>Q$(MCddA6{kJ@M<(#q2I@16
z@^%^vda$3tTLbQsKA!+N>YCij{@NL2^;?lbxA>=Lri81hBxswtgS4%#Q_0cTe_YG;
zaIAF#GW{1$|NJ_zLTQPRb;9Hg0kRYqG*TmhGX)I4gYn1zT>Ce_5eDZWbduuSpvig4
zBH>@7N$4pW^xzfJ!~NtCpea(T@~Np&x#<MVucITdgY1fbrmZWV`T|z_A;^eq-!g|<
zy_VuCSWz#wZw+h(qqO=8Lz0IjNg?vSC?^~%ta_YmD&}U2Oln3P@a)#SBgjlm>sXis
zwQ?%h!a-<NgN_<|B;`-4ls_qUhSZQc)}kqIQHt?__1og8?OFvQ%B=Y@#cRT&VgyXn
zC}qnKIH)vVz-@{m`92-NI(FoIB=;IJLHGuQR%I<XW=}v=I~vcSfN{<Ex&v>o@mYc+
zq6Fb?KjW_9{PG;PIQ(d1teoMXLnI7k>W=x=I41|-p5Ad9@3>nHT}O3C=~5nP{;*^0
zX1b0X52?21Uy8yM_%%cS{Y0rm$4N8^K3?4X;iMLiMkFuRyDf0|WzQX^15#Q#wZ>Wd
zS^J@QZO4v63#5IPE2#q%W0ikou8&-Ak@Z2%HO?K@l4X57djO^tr}pMsikyuIS4>?3
zJ_=*j9BD!7al;@&$er`>rXsE|0&DRxU!93I-Zgvu*WJ|2%=Ib62eGpxL9y7T+8=@L
XjlTB7<FEgqydFK!|Ep5t`Ro4!yV!2>

diff --git a/de/index.html b/de/index.html
index 34e6ee6..56a4a42 100644
--- a/de/index.html
+++ b/de/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/de/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/de.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/de.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/dist/app-boot.js b/dist/app-boot.js
index aac56f2..a05acf6 100644
--- a/dist/app-boot.js
+++ b/dist/app-boot.js
@@ -1,6 +1,6 @@
 var os=Object.create;var bi=Object.defineProperty;var cs=Object.getOwnPropertyDescriptor;var ls=Object.getOwnPropertyNames;var ds=Object.getPrototypeOf,us=Object.prototype.hasOwnProperty;var _i=(s,e)=>()=>{try{return e||s((e={exports:{}}).exports,e),e.exports}catch(t){throw e=0,t}};var hs=(s,e,t,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let i of ls(e))!us.call(s,i)&&i!==t&&bi(s,i,{get:()=>e[i],enumerable:!(r=cs(e,i))||r.enumerable});return s};var wi=(s,e,t)=>(t=s!=null?os(ds(s)):{},hs(e||!s||!s.__esModule?bi(t,"default",{value:s,enumerable:!0}):t,s));var Ln=_i((Po,Wt)=>{var wt=class{constructor(e={}){this.permission=typeof Notification<"u"&&Notification&&typeof Notification.permission=="string"?Notification.permission:"denied",this.isTabActive=this.checkTabActive(),this.unreadCount=0,this.originalTitle=document.title,this.notificationQueue=[],this.maxQueueSize=e.maxQueueSize||5,this.rateLimitMs=e.rateLimitMs||2e3,this.lastNotificationTime=0,this.trustedOrigins=e.trustedOrigins||[],this.isSecureContext=window.isSecureContext,this.hidden=this.getHiddenProperty(),this.visibilityChange=this.getVisibilityChangeEvent(),this.initVisibilityTracking(),this.initSecurityChecks()}initSecurityChecks(){}getHiddenProperty(){return typeof document.hidden<"u"?"hidden":typeof document.msHidden<"u"?"msHidden":typeof document.webkitHidden<"u"?"webkitHidden":"hidden"}getVisibilityChangeEvent(){return typeof document.hidden<"u"?"visibilitychange":typeof document.msHidden<"u"?"msvisibilitychange":typeof document.webkitHidden<"u"?"webkitvisibilitychange":"visibilitychange"}checkTabActive(){return this.hidden&&typeof document[this.hidden]<"u"?!document[this.hidden]:typeof document.hasFocus=="function"?document.hasFocus():!0}initVisibilityTracking(){typeof document.addEventListener<"u"&&typeof document[this.hidden]<"u"&&document.addEventListener(this.visibilityChange,()=>{this.isTabActive=this.checkTabActive(),this.isTabActive&&(this.resetUnreadCount(),this.clearNotificationQueue())}),window.addEventListener("focus",()=>{this.isTabActive=this.checkTabActive(),this.isTabActive&&this.resetUnreadCount()}),window.addEventListener("blur",()=>{this.isTabActive=this.checkTabActive()}),window.addEventListener("beforeunload",()=>{this.clearNotificationQueue()})}async requestPermission(){if(!this.isSecureContext||!("Notification"in window))return!1;if(this.permission==="granted")return!0;if(this.permission==="denied")return!1;try{return this.permission=await Notification.requestPermission(),this.permission==="granted"}catch{return!1}}updateTitle(){this.unreadCount>0?document.title=`(${this.unreadCount}) ${this.originalTitle}`:document.title=this.originalTitle}sanitizeText(e){if(typeof e!="string")return"";let t=document.createElement("div");return t.textContent=e,t.innerHTML.replace(/</g,"&lt;").replace(/>/g,"&gt;").replace(/"/g,"&quot;").replace(/'/g,"&#x27;").substring(0,500)}validateIconUrl(e){if(!e)return null;try{let t=new URL(e,window.location.origin);return t.protocol==="https:"||t.protocol==="data:"?this.trustedOrigins.length>0?this.trustedOrigins.some(i=>t.origin===i)?t.href:null:t.href:null}catch{return null}}checkRateLimit(){let e=Date.now();return e-this.lastNotificationTime<this.rateLimitMs?!1:(this.lastNotificationTime=e,!0)}notify(e,t,r={}){if(typeof Notification>"u"||(this.isTabActive=this.checkTabActive(),this.isTabActive)||this.permission!=="granted"||!this.checkRateLimit())return null;let i=this.sanitizeText(e||"Unknown"),n=this.sanitizeText(t||""),a=this.validateIconUrl(r.icon)||"/logo/icon-192x192.png";this.notificationQueue.length>=this.maxQueueSize&&this.clearNotificationQueue();try{let o=new Notification(`${i}`,{body:n.substring(0,200),icon:a,badge:a,tag:`chat-${r.senderId||"unknown"}`,requireInteraction:!1,silent:r.silent||!1,vibrate:navigator.vibrate?[200,100,200]:void 0,data:{senderId:this.sanitizeText(r.senderId),timestamp:Date.now()}});this.unreadCount++,this.updateTitle(),this.notificationQueue.push(o),o.onclick=d=>{if(d.preventDefault(),window.focus(),o.close(),typeof r.onClick=="function")try{r.onClick(r.senderId)}catch(u){console.error("[Notifications] Error in onClick handler:",u)}},o.onerror=d=>{console.error("[Notifications] Error showing notification:",d)};let c=Math.min(r.autoClose||5e3,1e4);return setTimeout(()=>{o.close(),this.removeFromQueue(o)},c),o}catch(o){return console.error("[Notifications] Failed to create notification:",o),null}}removeFromQueue(e){let t=this.notificationQueue.indexOf(e);t>-1&&this.notificationQueue.splice(t,1)}clearNotificationQueue(){this.notificationQueue.forEach(e=>{try{e.close()}catch{}}),this.notificationQueue=[]}resetUnreadCount(){this.unreadCount=0,this.updateTitle()}getStatus(){return{permission:this.permission,isTabActive:this.isTabActive,unreadCount:this.unreadCount,isSecureContext:this.isSecureContext,queueSize:this.notificationQueue.length}}},Yt=class{constructor(){this.notificationManager=new wt({maxQueueSize:5,rateLimitMs:2e3,trustedOrigins:[window.location.origin]}),this.dataChannel=null,this.peerConnection=null,this.remotePeerName="Peer",this.messageHistory=[],this.maxHistorySize=100}async init(){}async enableNotifications(){return await this.notificationManager.requestPermission()}setupDataChannel(e){if(!e){console.error("[Chat] Invalid DataChannel");return}this.dataChannel=e,this.dataChannel.onmessage=t=>{this.handleIncomingMessage(t.data)},this.dataChannel.onerror=t=>{}}validateMessage(e){try{let t=typeof e=="string"?JSON.parse(e):e;if(!t||typeof t!="object")throw new Error("Invalid message structure");if(!t.text||typeof t.text!="string")throw new Error("Invalid message text");if(t.text.length>1e4)throw new Error("Message too long");return{text:t.text,senderName:t.senderName||"Unknown",senderId:t.senderId||"unknown",timestamp:t.timestamp||Date.now(),senderAvatar:t.senderAvatar||null}}catch(t){return console.error("[Chat] Message validation failed:",t),null}}handleIncomingMessage(e){let t=this.validateMessage(e);t&&(this.messageHistory.push(t),this.messageHistory.length>this.maxHistorySize&&this.messageHistory.shift(),this.displayMessage(t),this.notificationManager.notify(t.senderName,t.text,{icon:t.senderAvatar,senderId:t.senderId,onClick:r=>{this.scrollToLatestMessage()}}),this.notificationManager.isTabActive||this.playNotificationSound())}displayMessage(e){let t=document.getElementById("messages");if(!t)return;let r=document.createElement("div");r.className="message";let i=document.createElement("strong");i.textContent=e.senderName+": ";let n=document.createElement("span");n.textContent=e.text,n.style.wordWrap="break-word",n.style.overflowWrap="break-word",n.style.whiteSpace="normal";let a=document.createElement("small");a.textContent=new Date(e.timestamp).toLocaleTimeString(),r.appendChild(i),r.appendChild(n),r.appendChild(document.createElement("br")),r.appendChild(a),t.appendChild(r),this.scrollToLatestMessage()}playNotificationSound(){try{let e=new Audio("/assets/audio/notification.mp3");e.volume=.3,e.play().catch(t=>{})}catch{}}scrollToLatestMessage(){let e=document.getElementById("messages");e&&(e.scrollTop=e.scrollHeight)}getStatus(){return{notifications:this.notificationManager.getStatus(),messageCount:this.messageHistory.length,connected:this.dataChannel?.readyState==="open"}}};typeof Wt<"u"&&Wt.exports&&(Wt.exports={SecureChatNotificationManager:wt,SecureP2PChat:Yt});typeof window<"u"&&(window.SecureChatNotificationManager=wt,window.SecureP2PChat=Yt)});var Pn=_i((Fo,Xt)=>{var Dn=wi(Ln());var Qt=class{constructor(e){this.webrtcManager=e,this.notificationManager=new Dn.SecureChatNotificationManager({maxQueueSize:10,rateLimitMs:1e3,trustedOrigins:[window.location.origin]}),this.isInitialized=!1,this.originalOnMessage=null,this.originalOnStatusChange=null,this.processedMessages=new Set}async init(){try{return this.isInitialized||(this.originalOnMessage=this.webrtcManager.onMessage,this.originalOnStatusChange=this.webrtcManager.onStatusChange,this.webrtcManager.onMessage=(e,t,...r)=>{this.handleIncomingMessage(e,t,r[0]),this.originalOnMessage&&this.originalOnMessage(e,t,...r)},this.webrtcManager.onStatusChange=e=>{this.handleStatusChange(e),this.originalOnStatusChange&&this.originalOnStatusChange(e)},this.webrtcManager.deliverMessageToUI&&(this.originalDeliverMessageToUI=this.webrtcManager.deliverMessageToUI.bind(this.webrtcManager),this.webrtcManager.deliverMessageToUI=(e,t,...r)=>{this.handleIncomingMessage(e,t,r[0]),this.originalDeliverMessageToUI(e,t,...r)}),this.isInitialized=!0),!0}catch{return!1}}handleIncomingMessage(e,t,r){try{let i=`${t}:${typeof e=="string"?e:JSON.stringify(e)}`;if(this.processedMessages.has(i))return;if(this.processedMessages.add(i),this.processedMessages.size>100){let d=Array.from(this.processedMessages);this.processedMessages.clear(),d.slice(-50).forEach(u=>this.processedMessages.add(u))}if(t==="system"||t==="file-transfer"||t==="heartbeat")return;let n=this.extractMessageInfo(e,t);if(!n)return;let o=!!r&&typeof r=="object"&&(r.once===!0||Number.isFinite(r.ttl)&&r.ttl>0)?"Sent you a private message":n.text,c=this.notificationManager.notify(n.senderName,o,{icon:n.senderAvatar,senderId:n.senderId,onClick:d=>{this.focusChatWindow()}})}catch{}}handleStatusChange(e){try{(e==="disconnected"||e==="failed")&&(this.notificationManager.clearNotificationQueue(),this.notificationManager.resetUnreadCount())}catch{}}extractMessageInfo(e,t){try{let r=e;if(typeof e=="string")try{r=JSON.parse(e)}catch{return{senderName:"Peer",text:e,senderId:"peer",senderAvatar:null}}return typeof r=="object"&&r!==null?{senderName:r.senderName||r.name||"Peer",text:r.text||r.message||r.content||"",senderId:r.senderId||r.id||"peer",senderAvatar:r.senderAvatar||r.avatar||null}:null}catch{return null}}focusChatWindow(){try{window.focus();let e=document.getElementById("messages");e&&(e.scrollTop=e.scrollHeight)}catch{}}async requestPermission(){try{return await this.notificationManager.requestPermission()}catch{return!1}}getStatus(){return this.notificationManager.getStatus()}clearNotifications(){this.notificationManager.clearNotificationQueue(),this.notificationManager.resetUnreadCount()}cleanup(){try{this.isInitialized&&(this.originalOnMessage&&(this.webrtcManager.onMessage=this.originalOnMessage),this.originalOnStatusChange&&(this.webrtcManager.onStatusChange=this.originalOnStatusChange),this.originalDeliverMessageToUI&&(this.webrtcManager.deliverMessageToUI=this.originalDeliverMessageToUI),this.clearNotifications(),this.isInitialized=!1)}catch{}}};typeof Xt<"u"&&Xt.exports&&(Xt.exports={NotificationIntegration:Qt});typeof window<"u"&&(window.NotificationIntegration=Qt)});function Ei(s,e){(e==null||e>s.length)&&(e=s.length);for(var t=0,r=Array(e);t<e;t++)r[t]=s[t];return r}function fs(s){if(Array.isArray(s))return s}function ps(s,e){var t=s==null?null:typeof Symbol<"u"&&s[Symbol.iterator]||s["@@iterator"];if(t!=null){var r,i,n,a,o=[],c=!0,d=!1;try{if(n=(t=t.call(s)).next,e!==0)for(;!(c=(r=n.call(t)).done)&&(o.push(r.value),o.length!==e);c=!0);}catch(u){d=!0,i=u}finally{try{if(!c&&t.return!=null&&(a=t.return(),Object(a)!==a))return}finally{if(d)throw i}}return o}}function ys(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
 In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function gs(s,e){return fs(s)||ps(s,e)||ms(s,e)||ys()}function ms(s,e){if(s){if(typeof s=="string")return Ei(s,e);var t={}.toString.call(s).slice(8,-1);return t==="Object"&&s.constructor&&(t=s.constructor.name),t==="Map"||t==="Set"?Array.from(s):t==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t)?Ei(s,e):void 0}}var Ki=Object.entries,vi=Object.setPrototypeOf,Ss=Object.isFrozen,bs=Object.getPrototypeOf,_s=Object.getOwnPropertyDescriptor,ce=Object.freeze,le=Object.seal,rt=Object.create,Ni=typeof Reflect<"u"&&Reflect,wr=Ni.apply,Er=Ni.construct;ce||(ce=function(e){return e});le||(le=function(e){return e});wr||(wr=function(e,t){for(var r=arguments.length,i=new Array(r>2?r-2:0),n=2;n<r;n++)i[n-2]=arguments[n];return e.apply(t,i)});Er||(Er=function(e){for(var t=arguments.length,r=new Array(t>1?t-1:0),i=1;i<t;i++)r[i-1]=arguments[i];return new e(...r)});var ht=se(Array.prototype.forEach),ws=se(Array.prototype.lastIndexOf),Ti=se(Array.prototype.pop),tt=se(Array.prototype.push),Es=se(Array.prototype.splice),Fe=Array.isArray,yt=se(String.prototype.toLowerCase),gr=se(String.prototype.toString),Ci=se(String.prototype.match),ft=se(String.prototype.replace),ki=se(String.prototype.indexOf),vs=se(String.prototype.trim),Ts=se(Number.prototype.toString),Cs=se(Boolean.prototype.toString),Ai=typeof BigInt>"u"?null:se(BigInt.prototype.toString),xi=typeof Symbol>"u"?null:se(Symbol.prototype.toString),ye=se(Object.prototype.hasOwnProperty),pt=se(Object.prototype.toString),oe=se(RegExp.prototype.test),$e=ks(TypeError);function se(s){return function(e){e instanceof RegExp&&(e.lastIndex=0);for(var t=arguments.length,r=new Array(t>1?t-1:0),i=1;i<t;i++)r[i-1]=arguments[i];return wr(s,e,r)}}function ks(s){return function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];return Er(s,t)}}function H(s,e){let t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:yt;if(vi&&vi(s,null),!Fe(e))return s;let r=e.length;for(;r--;){let i=e[r];if(typeof i=="string"){let n=t(i);n!==i&&(Ss(e)||(e[r]=n),i=n)}s[i]=!0}return s}function As(s){for(let e=0;e<s.length;e++)ye(s,e)||(s[e]=null);return s}function pe(s){let e=rt(null);for(let r of Ki(s)){var t=gs(r,2);let i=t[0],n=t[1];ye(s,i)&&(Fe(n)?e[i]=As(n):n&&typeof n=="object"&&n.constructor===Object?e[i]=pe(n):e[i]=n)}return e}function xs(s){switch(typeof s){case"string":return s;case"number":return Ts(s);case"boolean":return Cs(s);case"bigint":return Ai?Ai(s):"0";case"symbol":return xi?xi(s):"Symbol()";case"undefined":return pt(s);case"function":case"object":{if(s===null)return pt(s);let e=s,t=Ae(e,"toString");if(typeof t=="function"){let r=t(e);return typeof r=="string"?r:pt(r)}return pt(s)}default:return pt(s)}}function Ae(s,e){for(;s!==null;){let r=_s(s,e);if(r){if(r.get)return se(r.get);if(typeof r.value=="function")return se(r.value)}s=bs(s)}function t(){return null}return t}function Is(s){try{return oe(s,""),!0}catch{return!1}}var Ii=ce(["a","abbr","acronym","address","area","article","aside","audio","b","bdi","bdo","big","blink","blockquote","body","br","button","canvas","caption","center","cite","code","col","colgroup","content","data","datalist","dd","decorator","del","details","dfn","dialog","dir","div","dl","dt","element","em","fieldset","figcaption","figure","font","footer","form","h1","h2","h3","h4","h5","h6","head","header","hgroup","hr","html","i","img","input","ins","kbd","label","legend","li","main","map","mark","marquee","menu","menuitem","meter","nav","nobr","ol","optgroup","option","output","p","picture","pre","progress","q","rp","rt","ruby","s","samp","search","section","select","shadow","slot","small","source","spacer","span","strike","strong","style","sub","summary","sup","table","tbody","td","template","textarea","tfoot","th","thead","time","tr","track","tt","u","ul","var","video","wbr"]),mr=ce(["svg","a","altglyph","altglyphdef","altglyphitem","animatecolor","animatemotion","animatetransform","circle","clippath","defs","desc","ellipse","enterkeyhint","exportparts","filter","font","g","glyph","glyphref","hkern","image","inputmode","line","lineargradient","marker","mask","metadata","mpath","part","path","pattern","polygon","polyline","radialgradient","rect","stop","style","switch","symbol","text","textpath","title","tref","tspan","view","vkern"]),Sr=ce(["feBlend","feColorMatrix","feComponentTransfer","feComposite","feConvolveMatrix","feDiffuseLighting","feDisplacementMap","feDistantLight","feDropShadow","feFlood","feFuncA","feFuncB","feFuncG","feFuncR","feGaussianBlur","feImage","feMerge","feMergeNode","feMorphology","feOffset","fePointLight","feSpecularLighting","feSpotLight","feTile","feTurbulence"]),Rs=ce(["animate","color-profile","cursor","discard","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","foreignobject","hatch","hatchpath","mesh","meshgradient","meshpatch","meshrow","missing-glyph","script","set","solidcolor","unknown","use"]),br=ce(["math","menclose","merror","mfenced","mfrac","mglyph","mi","mlabeledtr","mmultiscripts","mn","mo","mover","mpadded","mphantom","mroot","mrow","ms","mspace","msqrt","mstyle","msub","msup","msubsup","mtable","mtd","mtext","mtr","munder","munderover","mprescripts"]),Ms=ce(["maction","maligngroup","malignmark","mlongdiv","mscarries","mscarry","msgroup","mstack","msline","msrow","semantics","annotation","annotation-xml","mprescripts","none"]),Ri=ce(["#text"]),Mi=ce(["accept","action","align","alt","autocapitalize","autocomplete","autopictureinpicture","autoplay","background","bgcolor","border","capture","cellpadding","cellspacing","checked","cite","class","clear","color","cols","colspan","command","commandfor","controls","controlslist","coords","crossorigin","datetime","decoding","default","dir","disabled","disablepictureinpicture","disableremoteplayback","download","draggable","enctype","enterkeyhint","exportparts","face","for","headers","height","hidden","high","href","hreflang","id","inert","inputmode","integrity","ismap","kind","label","lang","list","loading","loop","low","max","maxlength","media","method","min","minlength","multiple","muted","name","nonce","noshade","novalidate","nowrap","open","optimum","part","pattern","placeholder","playsinline","popover","popovertarget","popovertargetaction","poster","preload","pubdate","radiogroup","readonly","rel","required","rev","reversed","role","rows","rowspan","spellcheck","scope","selected","shape","size","sizes","slot","span","srclang","start","src","srcset","step","style","summary","tabindex","title","translate","type","usemap","valign","value","width","wrap","xmlns"]),_r=ce(["accent-height","accumulate","additive","alignment-baseline","amplitude","ascent","attributename","attributetype","azimuth","basefrequency","baseline-shift","begin","bias","by","class","clip","clippathunits","clip-path","clip-rule","color","color-interpolation","color-interpolation-filters","color-profile","color-rendering","cx","cy","d","dx","dy","diffuseconstant","direction","display","divisor","dur","edgemode","elevation","end","exponent","fill","fill-opacity","fill-rule","filter","filterunits","flood-color","flood-opacity","font-family","font-size","font-size-adjust","font-stretch","font-style","font-variant","font-weight","fx","fy","g1","g2","glyph-name","glyphref","gradientunits","gradienttransform","height","href","id","image-rendering","in","in2","intercept","k","k1","k2","k3","k4","kerning","keypoints","keysplines","keytimes","lang","lengthadjust","letter-spacing","kernelmatrix","kernelunitlength","lighting-color","local","marker-end","marker-mid","marker-start","markerheight","markerunits","markerwidth","maskcontentunits","maskunits","max","mask","mask-type","media","method","mode","min","name","numoctaves","offset","operator","opacity","order","orient","orientation","origin","overflow","paint-order","path","pathlength","patterncontentunits","patterntransform","patternunits","points","preservealpha","preserveaspectratio","primitiveunits","r","rx","ry","radius","refx","refy","repeatcount","repeatdur","restart","result","rotate","scale","seed","shape-rendering","slope","specularconstant","specularexponent","spreadmethod","startoffset","stddeviation","stitchtiles","stop-color","stop-opacity","stroke-dasharray","stroke-dashoffset","stroke-linecap","stroke-linejoin","stroke-miterlimit","stroke-opacity","stroke","stroke-width","style","surfacescale","systemlanguage","tabindex","tablevalues","targetx","targety","transform","transform-origin","text-anchor","text-decoration","text-rendering","textlength","type","u1","u2","unicode","values","viewbox","visibility","version","vert-adv-y","vert-origin-x","vert-origin-y","width","word-spacing","wrap","writing-mode","xchannelselector","ychannelselector","x","x1","x2","xmlns","y","y1","y2","z","zoomandpan"]),Li=ce(["accent","accentunder","align","bevelled","close","columnalign","columnlines","columnspacing","columnspan","denomalign","depth","dir","display","displaystyle","encoding","fence","frame","height","href","id","largeop","length","linethickness","lquote","lspace","mathbackground","mathcolor","mathsize","mathvariant","maxsize","minsize","movablelimits","notation","numalign","open","rowalign","rowlines","rowspacing","rowspan","rspace","rquote","scriptlevel","scriptminsize","scriptsizemultiplier","selection","separator","separators","stretchy","subscriptshift","supscriptshift","symmetric","voffset","width","xmlns"]),Rt=ce(["xlink:href","xml:id","xlink:title","xml:space","xmlns:xlink"]),Ls=le(/{{[\w\W]*|^[\w\W]*}}/g),Ds=le(/<%[\w\W]*|^[\w\W]*%>/g),Ps=le(/\${[\w\W]*/g),Fs=le(/^data-[\-\w.\u00B7-\uFFFF]+$/),Ks=le(/^aria-[\-\w]+$/),Di=le(/^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\-]+(?:[^a-z+.\-:]|$))/i),Ns=le(/^(?:\w+script|data):/i),Os=le(/[\u0000-\u0020\u00A0\u1680\u180E\u2000-\u2029\u205F\u3000]/g),Us=le(/^html$/i),zs=le(/^[a-z][.\w]*(-[.\w]+)+$/i),Pi=le(/<[/\w!]/g),Vs=le(/<[/\w]/g),Bs=le(/<\/no(script|embed|frames)/i),Hs=le(/\/>/i),ke={element:1,attribute:2,text:3,cdataSection:4,entityReference:5,entityNode:6,processingInstruction:7,comment:8,document:9,documentType:10,documentFragment:11,notation:12},$s=function(){return typeof window>"u"?null:window},Gs=function(e,t){if(typeof e!="object"||typeof e.createPolicy!="function")return null;let r=null,i="data-tt-policy-suffix";t&&t.hasAttribute(i)&&(r=t.getAttribute(i));let n="dompurify"+(r?"#"+r:"");try{return e.createPolicy(n,{createHTML(a){return a},createScriptURL(a){return a}})}catch{return console.warn("TrustedTypes policy "+n+" could not be created."),null}},Fi=function(){return{afterSanitizeAttributes:[],afterSanitizeElements:[],afterSanitizeShadowDOM:[],beforeSanitizeAttributes:[],beforeSanitizeElements:[],beforeSanitizeShadowDOM:[],uponSanitizeAttribute:[],uponSanitizeElement:[],uponSanitizeShadowNode:[]}},Pe=function(e,t,r,i){return ye(e,t)&&Fe(e[t])?H(i.base?pe(i.base):{},e[t],i.transform):r};function Oi(){let s=arguments.length>0&&arguments[0]!==void 0?arguments[0]:$s(),e=C=>Oi(C);if(e.version="3.4.10",e.removed=[],!s||!s.document||s.document.nodeType!==ke.document||!s.Element)return e.isSupported=!1,e;let t=s.document,r=t,i=r.currentScript;s.DocumentFragment;let n=s.HTMLTemplateElement,a=s.Node,o=s.Element,c=s.NodeFilter,d=s.NamedNodeMap;d===void 0&&(s.NamedNodeMap||s.MozNamedAttrMap),s.HTMLFormElement;let u=s.DOMParser,h=s.trustedTypes,m=o.prototype,p=Ae(m,"cloneNode"),S=Ae(m,"remove"),g=Ae(m,"nextSibling"),b=Ae(m,"childNodes"),w=Ae(m,"parentNode"),M=Ae(m,"shadowRoot"),F=Ae(m,"attributes"),k=a&&a.prototype?Ae(a.prototype,"nodeType"):null,E=a&&a.prototype?Ae(a.prototype,"nodeName"):null;if(typeof n=="function"){let C=t.createElement("template");C.content&&C.content.ownerDocument&&(t=C.content.ownerDocument)}let _,A="",x,T=!1,Y=0,B=function(){if(Y>0)throw $e('A configured TRUSTED_TYPES_POLICY callback (createHTML or createScriptURL) must not call DOMPurify.sanitize, as that causes infinite recursion. Do not pass a policy whose callbacks wrap DOMPurify as TRUSTED_TYPES_POLICY; see the "DOMPurify and Trusted Types" section of the README.')},R=function(l){B(),Y++;try{return _.createHTML(l)}finally{Y--}},ue=function(l){B(),Y++;try{return _.createScriptURL(l)}finally{Y--}},K=function(){return T||(x=Gs(h,i),T=!0),x},O=t,Q=O.implementation,J=O.createNodeIterator,ge=O.createDocumentFragment,G=O.getElementsByTagName,U=r.importNode,I=Fi();e.isSupported=typeof Ki=="function"&&typeof w=="function"&&Q&&Q.createHTMLDocument!==void 0;let D=Ls,N=Ds,z=Ps,W=Fs,Z=Ks,be=Ns,_e=Os,me=zs,Ye=Di,X=null,Zt=H({},[...Ii,...mr,...Sr,...br,...Ri]),ie=null,er=H({},[...Mi,..._r,...Li,...Rt]),te=Object.seal(rt(null,{tagNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeNameCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},allowCustomizedBuiltInElements:{writable:!0,configurable:!1,enumerable:!0,value:!1}})),ct=null,Qr=null,Me=Object.seal(rt(null,{tagCheck:{writable:!0,configurable:!1,enumerable:!0,value:null},attributeCheck:{writable:!0,configurable:!1,enumerable:!0,value:null}})),Jr=!0,tr=!0,Zr=!1,ei=!0,Le=!1,lt=!0,Be=!1,rr=!1,ir=!1,Xe=!1,vt=!1,Tt=!1,ti=!0,ri=!1,ii="user-content-",nr=!0,sr=!1,Qe={},Te=null,ar=H({},["annotation-xml","audio","colgroup","desc","foreignobject","head","iframe","math","mi","mn","mo","ms","mtext","noembed","noframes","noscript","plaintext","script","selectedcontent","style","svg","template","thead","title","video","xmp"]),ni=null,si=H({},["audio","video","img","source","image","track"]),or=null,ai=H({},["alt","class","for","id","label","name","pattern","placeholder","role","summary","title","value","style","xmlns"]),Ct="http://www.w3.org/1998/Math/MathML",kt="http://www.w3.org/2000/svg",Ce="http://www.w3.org/1999/xhtml",Je=Ce,cr=!1,lr=null,Gn=H({},[Ct,kt,Ce],gr),oi=ce(["mi","mo","mn","ms","mtext"]),dr=H({},oi),ci=ce(["annotation-xml"]),ur=H({},ci),qn=H({},["title","style","font","a","script"]),dt=null,jn=["application/xhtml+xml","text/html"],Wn="text/html",re=null,Ze=null,Yn=t.createElement("form"),li=function(l){return l instanceof RegExp||l instanceof Function},hr=function(){let l=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};if(Ze&&Ze===l)return;(!l||typeof l!="object")&&(l={}),l=pe(l),dt=jn.indexOf(l.PARSER_MEDIA_TYPE)===-1?Wn:l.PARSER_MEDIA_TYPE,re=dt==="application/xhtml+xml"?gr:yt,X=Pe(l,"ALLOWED_TAGS",Zt,{transform:re}),ie=Pe(l,"ALLOWED_ATTR",er,{transform:re}),lr=Pe(l,"ALLOWED_NAMESPACES",Gn,{transform:gr}),or=Pe(l,"ADD_URI_SAFE_ATTR",ai,{transform:re,base:ai}),ni=Pe(l,"ADD_DATA_URI_TAGS",si,{transform:re,base:si}),Te=Pe(l,"FORBID_CONTENTS",ar,{transform:re}),ct=Pe(l,"FORBID_TAGS",pe({}),{transform:re}),Qr=Pe(l,"FORBID_ATTR",pe({}),{transform:re}),Qe=ye(l,"USE_PROFILES")?l.USE_PROFILES&&typeof l.USE_PROFILES=="object"?pe(l.USE_PROFILES):l.USE_PROFILES:!1,Jr=l.ALLOW_ARIA_ATTR!==!1,tr=l.ALLOW_DATA_ATTR!==!1,Zr=l.ALLOW_UNKNOWN_PROTOCOLS||!1,ei=l.ALLOW_SELF_CLOSE_IN_ATTR!==!1,Le=l.SAFE_FOR_TEMPLATES||!1,lt=l.SAFE_FOR_XML!==!1,Be=l.WHOLE_DOCUMENT||!1,Xe=l.RETURN_DOM||!1,vt=l.RETURN_DOM_FRAGMENT||!1,Tt=l.RETURN_TRUSTED_TYPE||!1,ir=l.FORCE_BODY||!1,ti=l.SANITIZE_DOM!==!1,ri=l.SANITIZE_NAMED_PROPS||!1,nr=l.KEEP_CONTENT!==!1,sr=l.IN_PLACE||!1,Ye=Is(l.ALLOWED_URI_REGEXP)?l.ALLOWED_URI_REGEXP:Di,Je=typeof l.NAMESPACE=="string"?l.NAMESPACE:Ce,dr=ye(l,"MATHML_TEXT_INTEGRATION_POINTS")&&l.MATHML_TEXT_INTEGRATION_POINTS&&typeof l.MATHML_TEXT_INTEGRATION_POINTS=="object"?pe(l.MATHML_TEXT_INTEGRATION_POINTS):H({},oi),ur=ye(l,"HTML_INTEGRATION_POINTS")&&l.HTML_INTEGRATION_POINTS&&typeof l.HTML_INTEGRATION_POINTS=="object"?pe(l.HTML_INTEGRATION_POINTS):H({},ci);let y=ye(l,"CUSTOM_ELEMENT_HANDLING")&&l.CUSTOM_ELEMENT_HANDLING&&typeof l.CUSTOM_ELEMENT_HANDLING=="object"?pe(l.CUSTOM_ELEMENT_HANDLING):rt(null);if(te=rt(null),ye(y,"tagNameCheck")&&li(y.tagNameCheck)&&(te.tagNameCheck=y.tagNameCheck),ye(y,"attributeNameCheck")&&li(y.attributeNameCheck)&&(te.attributeNameCheck=y.attributeNameCheck),ye(y,"allowCustomizedBuiltInElements")&&typeof y.allowCustomizedBuiltInElements=="boolean"&&(te.allowCustomizedBuiltInElements=y.allowCustomizedBuiltInElements),le(te),Le&&(tr=!1),vt&&(Xe=!0),Qe&&(X=H({},Ri),ie=rt(null),Qe.html===!0&&(H(X,Ii),H(ie,Mi)),Qe.svg===!0&&(H(X,mr),H(ie,_r),H(ie,Rt)),Qe.svgFilters===!0&&(H(X,Sr),H(ie,_r),H(ie,Rt)),Qe.mathMl===!0&&(H(X,br),H(ie,Li),H(ie,Rt))),Me.tagCheck=null,Me.attributeCheck=null,ye(l,"ADD_TAGS")&&(typeof l.ADD_TAGS=="function"?Me.tagCheck=l.ADD_TAGS:Fe(l.ADD_TAGS)&&(X===Zt&&(X=pe(X)),H(X,l.ADD_TAGS,re))),ye(l,"ADD_ATTR")&&(typeof l.ADD_ATTR=="function"?Me.attributeCheck=l.ADD_ATTR:Fe(l.ADD_ATTR)&&(ie===er&&(ie=pe(ie)),H(ie,l.ADD_ATTR,re))),ye(l,"ADD_URI_SAFE_ATTR")&&Fe(l.ADD_URI_SAFE_ATTR)&&H(or,l.ADD_URI_SAFE_ATTR,re),ye(l,"FORBID_CONTENTS")&&Fe(l.FORBID_CONTENTS)&&(Te===ar&&(Te=pe(Te)),H(Te,l.FORBID_CONTENTS,re)),ye(l,"ADD_FORBID_CONTENTS")&&Fe(l.ADD_FORBID_CONTENTS)&&(Te===ar&&(Te=pe(Te)),H(Te,l.ADD_FORBID_CONTENTS,re)),nr&&(X["#text"]=!0),Be&&H(X,["html","head","body"]),X.table&&(H(X,["tbody"]),delete ct.tbody),l.TRUSTED_TYPES_POLICY){if(typeof l.TRUSTED_TYPES_POLICY.createHTML!="function")throw $e('TRUSTED_TYPES_POLICY configuration option must provide a "createHTML" hook.');if(typeof l.TRUSTED_TYPES_POLICY.createScriptURL!="function")throw $e('TRUSTED_TYPES_POLICY configuration option must provide a "createScriptURL" hook.');let v=_;_=l.TRUSTED_TYPES_POLICY;try{A=R("")}catch(L){throw _=v,L}}else l.TRUSTED_TYPES_POLICY===null?(_=void 0,A=""):(_===void 0&&(_=K()),_&&typeof A=="string"&&(A=R("")));(I.uponSanitizeElement.length>0||I.uponSanitizeAttribute.length>0)&&X===Zt&&(X=pe(X)),I.uponSanitizeAttribute.length>0&&ie===er&&(ie=pe(ie)),ce&&ce(l),Ze=l},di=H({},[...mr,...Sr,...Rs]),ui=H({},[...br,...Ms]),Xn=function(l,y,v){return y.namespaceURI===Ce?l==="svg":y.namespaceURI===Ct?l==="svg"&&(v==="annotation-xml"||dr[v]):!!di[l]},Qn=function(l,y,v){return y.namespaceURI===Ce?l==="math":y.namespaceURI===kt?l==="math"&&ur[v]:!!ui[l]},Jn=function(l,y,v){return y.namespaceURI===kt&&!ur[v]||y.namespaceURI===Ct&&!dr[v]?!1:!ui[l]&&(qn[l]||!di[l])},Zn=function(l){let y=w(l);(!y||!y.tagName)&&(y={namespaceURI:Je,tagName:"template"});let v=yt(l.tagName),L=yt(y.tagName);return lr[l.namespaceURI]?l.namespaceURI===kt?Xn(v,y,L):l.namespaceURI===Ct?Qn(v,y,L):l.namespaceURI===Ce?Jn(v,y,L):!!(dt==="application/xhtml+xml"&&lr[l.namespaceURI]):!1},De=function(l){tt(e.removed,{element:l});try{w(l).removeChild(l)}catch{if(S(l),!w(l))throw $e("a node selected for removal could not be detached from its tree and cannot be safely returned; refusing to sanitize in place")}},hi=function(l){let y=b(l);if(y){let L=[];ht(y,V=>{tt(L,V)}),ht(L,V=>{try{S(V)}catch{}})}let v=F(l);if(v)for(let L=v.length-1;L>=0;--L){let V=v[L],$=V&&V.name;if(typeof $=="string")try{l.removeAttribute($)}catch{}}},He=function(l,y){try{tt(e.removed,{attribute:y.getAttributeNode(l),from:y})}catch{tt(e.removed,{attribute:null,from:y})}if(y.removeAttribute(l),l==="is")if(Xe||vt)try{De(y)}catch{}else try{y.setAttribute(l,"")}catch{}},es=function(l){let y=F(l);if(y)for(let v=y.length-1;v>=0;--v){let L=y[v],V=L&&L.name;if(!(typeof V!="string"||ie[re(V)]))try{l.removeAttribute(V)}catch{}}},ts=function(l){let y=[l];for(;y.length>0;){let v=y.pop();(k?k(v):v.nodeType)===ke.element&&es(v);let V=b(v);if(V)for(let $=V.length-1;$>=0;--$)y.push(V[$])}},fi=function(l){let y=null,v=null;if(ir)l="<remove></remove>"+l;else{let $=Ci(l,/^[\r\n\t ]+/);v=$&&$[0]}dt==="application/xhtml+xml"&&Je===Ce&&(l='<html xmlns="http://www.w3.org/1999/xhtml"><head></head><body>'+l+"</body></html>");let L=_?R(l):l;if(Je===Ce)try{y=new u().parseFromString(L,dt)}catch{}if(!y||!y.documentElement){y=Q.createDocument(Je,"template",null);try{y.documentElement.innerHTML=cr?A:L}catch{}}let V=y.body||y.documentElement;return l&&v&&V.insertBefore(t.createTextNode(v),V.childNodes[0]||null),Je===Ce?G.call(y,Be?"html":"body")[0]:Be?y.documentElement:V},pi=function(l){return J.call(l.ownerDocument||l,l,c.SHOW_ELEMENT|c.SHOW_COMMENT|c.SHOW_TEXT|c.SHOW_PROCESSING_INSTRUCTION|c.SHOW_CDATA_SECTION,null)},At=function(l){return l=ft(l,D," "),l=ft(l,N," "),l=ft(l,z," "),l},fr=function(l){var y;l.normalize();let v=J.call(l.ownerDocument||l,l,c.SHOW_TEXT|c.SHOW_COMMENT|c.SHOW_CDATA_SECTION|c.SHOW_PROCESSING_INSTRUCTION,null),L=v.nextNode();for(;L;)L.data=At(L.data),L=v.nextNode();let V=(y=l.querySelectorAll)===null||y===void 0?void 0:y.call(l,"template");V&&ht(V,$=>{et($.content)&&fr($.content)})},xt=function(l){let y=E?E(l):null;return typeof y!="string"||re(y)!=="form"?!1:typeof l.nodeName!="string"||typeof l.textContent!="string"||typeof l.removeChild!="function"||l.attributes!==F(l)||typeof l.removeAttribute!="function"||typeof l.setAttribute!="function"||typeof l.namespaceURI!="string"||typeof l.insertBefore!="function"||typeof l.hasChildNodes!="function"||l.nodeType!==k(l)||l.childNodes!==b(l)},et=function(l){if(!k||typeof l!="object"||l===null)return!1;try{return k(l)===ke.documentFragment}catch{return!1}},ut=function(l){if(!k||typeof l!="object"||l===null)return!1;try{return typeof k(l)=="number"}catch{return!1}};function xe(C,l,y){C.length!==0&&ht(C,v=>{v.call(e,l,y,Ze)})}let rs=function(l,y){return!!(lt&&l.hasChildNodes()&&!ut(l.firstElementChild)&&oe(Pi,l.textContent)&&oe(Pi,l.innerHTML)||lt&&l.namespaceURI===Ce&&y==="style"&&ut(l.firstElementChild)||l.nodeType===ke.processingInstruction||lt&&l.nodeType===ke.comment&&oe(Vs,l.data))},is=function(l,y){if(!ct[y]&&mi(y)&&(te.tagNameCheck instanceof RegExp&&oe(te.tagNameCheck,y)||te.tagNameCheck instanceof Function&&te.tagNameCheck(y)))return!1;if(nr&&!Te[y]){let v=w(l),L=b(l);if(L&&v){let V=L.length;for(let $=V-1;$>=0;--$){let ae=sr?L[$]:p(L[$],!0);v.insertBefore(ae,g(l))}}}return De(l),!0},yi=function(l){if(xe(I.beforeSanitizeElements,l,null),xt(l))return De(l),!0;let y=re(E?E(l):l.nodeName);if(xe(I.uponSanitizeElement,l,{tagName:y,allowedTags:X}),rs(l,y))return De(l),!0;if(ct[y]||!(Me.tagCheck instanceof Function&&Me.tagCheck(y))&&!X[y])return is(l,y);if((k?k(l):l.nodeType)===ke.element&&!Zn(l)||(y==="noscript"||y==="noembed"||y==="noframes")&&oe(Bs,l.innerHTML))return De(l),!0;if(Le&&l.nodeType===ke.text){let L=At(l.textContent);l.textContent!==L&&(tt(e.removed,{element:l.cloneNode()}),l.textContent=L)}return xe(I.afterSanitizeElements,l,null),!1},gi=function(l,y,v){if(Qr[y]||ti&&(y==="id"||y==="name")&&(v in t||v in Yn))return!1;let L=ie[y]||Me.attributeCheck instanceof Function&&Me.attributeCheck(y,l);if(!(tr&&oe(W,y))){if(!(Jr&&oe(Z,y))){if(L){if(!or[y]){if(!oe(Ye,ft(v,_e,""))){if(!((y==="src"||y==="xlink:href"||y==="href")&&l!=="script"&&ki(v,"data:")===0&&ni[l])){if(!(Zr&&!oe(be,ft(v,_e,"")))){if(v)return!1}}}}}else if(!(mi(l)&&(te.tagNameCheck instanceof RegExp&&oe(te.tagNameCheck,l)||te.tagNameCheck instanceof Function&&te.tagNameCheck(l))&&(te.attributeNameCheck instanceof RegExp&&oe(te.attributeNameCheck,y)||te.attributeNameCheck instanceof Function&&te.attributeNameCheck(y,l))||y==="is"&&te.allowCustomizedBuiltInElements&&(te.tagNameCheck instanceof RegExp&&oe(te.tagNameCheck,v)||te.tagNameCheck instanceof Function&&te.tagNameCheck(v))))return!1}}return!0},ns=H({},["annotation-xml","color-profile","font-face","font-face-format","font-face-name","font-face-src","font-face-uri","missing-glyph"]),mi=function(l){return!ns[yt(l)]&&oe(me,l)},ss=function(l,y,v,L){if(_&&typeof h=="object"&&typeof h.getAttributeType=="function"&&!v)switch(h.getAttributeType(l,y)){case"TrustedHTML":return R(L);case"TrustedScriptURL":return ue(L)}return L},as=function(l,y,v,L){try{v?l.setAttributeNS(v,y,L):l.setAttribute(y,L),xt(l)?De(l):Ti(e.removed)}catch{He(y,l)}},Si=function(l){xe(I.beforeSanitizeAttributes,l,null);let y=l.attributes;if(!y||xt(l))return;let v={attrName:"",attrValue:"",keepAttr:!0,allowedAttributes:ie,forceKeepAttr:void 0},L=y.length,V=re(l.nodeName);for(;L--;){let $=y[L],ae=$.name,ne=$.namespaceURI,we=$.value,Ee=re(ae),yr=we,fe=ae==="value"?yr:vs(yr);if(v.attrName=Ee,v.attrValue=fe,v.keepAttr=!0,v.forceKeepAttr=void 0,xe(I.uponSanitizeAttribute,l,v),fe=v.attrValue,ri&&(Ee==="id"||Ee==="name")&&ki(fe,ii)!==0&&(He(ae,l),fe=ii+fe),lt&&oe(/((--!?|])>)|<\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i,fe)){He(ae,l);continue}if(Ee==="attributename"&&Ci(fe,"href")){He(ae,l);continue}if(!v.forceKeepAttr){if(!v.keepAttr){He(ae,l);continue}if(!ei&&oe(Hs,fe)){He(ae,l);continue}if(Le&&(fe=At(fe)),!gi(V,Ee,fe)){He(ae,l);continue}fe=ss(V,Ee,ne,fe),fe!==yr&&as(l,ae,ne,fe)}}xe(I.afterSanitizeAttributes,l,null)},It=function(l){let y=null,v=pi(l);for(xe(I.beforeSanitizeShadowDOM,l,null);y=v.nextNode();)if(xe(I.uponSanitizeShadowNode,y,null),yi(y),Si(y),et(y.content)&&It(y.content),(k?k(y):y.nodeType)===ke.element){let V=M(y);et(V)&&(pr(V),It(V))}xe(I.afterSanitizeShadowDOM,l,null)},pr=function(l){let y=[{node:l,shadow:null}];for(;y.length>0;){let v=y.pop();if(v.shadow){It(v.shadow);continue}let L=v.node,$=(k?k(L):L.nodeType)===ke.element,ae=b(L);if(ae)for(let ne=ae.length-1;ne>=0;--ne)y.push({node:ae[ne],shadow:null});if($){let ne=E?E(L):null;if(typeof ne=="string"&&re(ne)==="template"){let we=L.content;et(we)&&y.push({node:we,shadow:null})}}if($){let ne=M(L);et(ne)&&y.push({node:null,shadow:ne},{node:ne,shadow:null})}}};return e.sanitize=function(C){let l=arguments.length>1&&arguments[1]!==void 0?arguments[1]:{},y=null,v=null,L=null,V=null;if(cr=!C,cr&&(C="<!-->"),typeof C!="string"&&!ut(C)&&(C=xs(C),typeof C!="string"))throw $e("dirty is not a string, aborting");if(!e.isSupported)return C;rr||hr(l),e.removed=[];let $=sr&&typeof C!="string"&&ut(C);if($){let we=E?E(C):C.nodeName;if(typeof we=="string"){let Ee=re(we);if(!X[Ee]||ct[Ee])throw $e("root node is forbidden and cannot be sanitized in-place")}if(xt(C))throw $e("root node is clobbered and cannot be sanitized in-place");try{pr(C)}catch(Ee){throw hi(C),Ee}}else if(ut(C))y=fi("<!---->"),v=y.ownerDocument.importNode(C,!0),v.nodeType===ke.element&&v.nodeName==="BODY"||v.nodeName==="HTML"?y=v:y.appendChild(v),pr(v);else{if(!Xe&&!Le&&!Be&&C.indexOf("<")===-1)return _&&Tt?R(C):C;if(y=fi(C),!y)return Xe?null:Tt?A:""}y&&ir&&De(y.firstChild);let ae=pi($?C:y);try{for(;L=ae.nextNode();)yi(L),Si(L),et(L.content)&&It(L.content)}catch(we){throw $&&hi(C),we}if($)return ht(e.removed,we=>{we.element&&ts(we.element)}),Le&&fr(C),C;if(Xe){if(Le&&fr(y),vt)for(V=ge.call(y.ownerDocument);y.firstChild;)V.appendChild(y.firstChild);else V=y;return(ie.shadowroot||ie.shadowrootmode)&&(V=U.call(r,V,!0)),V}let ne=Be?y.outerHTML:y.innerHTML;return Be&&X["!doctype"]&&y.ownerDocument&&y.ownerDocument.doctype&&y.ownerDocument.doctype.name&&oe(Us,y.ownerDocument.doctype.name)&&(ne="<!DOCTYPE "+y.ownerDocument.doctype.name+`>
-`+ne),Le&&(ne=At(ne)),_&&Tt?R(ne):ne},e.setConfig=function(){let C=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};hr(C),rr=!0},e.clearConfig=function(){Ze=null,rr=!1,_=x,A=""},e.isValidAttribute=function(C,l,y){Ze||hr({});let v=re(C),L=re(l);return gi(v,L,y)},e.addHook=function(C,l){typeof l=="function"&&tt(I[C],l)},e.removeHook=function(C,l){if(l!==void 0){let y=ws(I[C],l);return y===-1?void 0:Es(I[C],y,1)[0]}return Ti(I[C])},e.removeHooks=function(C){I[C]=[]},e.removeAllHooks=function(){I=Fi()},e}var Ui=Oi();var Mt=class s{static _keyMetadata=new WeakMap;static _messageSanitizer=null;static sortObjectKeys(e){if(typeof e!="object"||e===null)return e;if(Array.isArray(e))return e.map(s.sortObjectKeys);let t={};return Object.keys(e).sort().forEach(r=>{t[r]=s.sortObjectKeys(e[r])}),t}static assertCryptoKey(e,t=null,r=[]){if(!(e instanceof CryptoKey))throw new Error("Expected CryptoKey");if(t&&e.algorithm?.name!==t)throw new Error(`Expected algorithm ${t}, got ${e.algorithm?.name}`);for(let i of r)if(!e.usages||!e.usages.includes(i))throw new Error(`Missing required key usage: ${i}`)}static arrayBufferToBase64(e){let t="",r=new Uint8Array(e),i=r.byteLength;for(let n=0;n<i;n++)t+=String.fromCharCode(r[n]);return btoa(t)}static base64ToArrayBuffer(e){try{if(typeof e!="string"||!e)throw new Error("Invalid base64 input: must be a non-empty string");let t=e.trim();if(!/^[A-Za-z0-9+/]*={0,2}$/.test(t))throw new Error("Invalid base64 format");if(t==="")return new ArrayBuffer(0);let r=atob(t),i=r.length,n=new Uint8Array(i);for(let a=0;a<i;a++)n[a]=r.charCodeAt(a);return n.buffer}catch(t){throw console.error("Base64 to ArrayBuffer conversion failed:",t.message),new Error(`Base64 conversion error: ${t.message}`)}}static hexToUint8Array(e){try{if(!e||typeof e!="string")throw new Error("Invalid hex string input: must be a non-empty string");let t=e.replace(/:/g,"").replace(/\s/g,"");if(!/^[0-9a-fA-F]*$/.test(t))throw new Error("Invalid hex format: contains non-hex characters");if(t.length%2!==0)throw new Error("Invalid hex format: odd length");let r=new Uint8Array(t.length/2);for(let i=0;i<t.length;i+=2)r[i/2]=parseInt(t.substr(i,2),16);return r}catch(t){throw console.error("Hex to Uint8Array conversion failed:",t.message),new Error(`Hex conversion error: ${t.message}`)}}static zeroizeBuffer(e){try{if(!e)return;let t=e instanceof Uint8Array?e:e instanceof ArrayBuffer?new Uint8Array(e):null;if(!t||t.length===0)return;crypto.getRandomValues(t),t.fill(0)}catch{}}static async encryptData(e,t){try{let r=typeof e=="string"?e:JSON.stringify(e),i=crypto.getRandomValues(new Uint8Array(16)),n=new TextEncoder,a=n.encode(t),o=await crypto.subtle.importKey("raw",a,{name:"PBKDF2"},!1,["deriveKey"]),c=await crypto.subtle.deriveKey({name:"PBKDF2",salt:i,iterations:31e4,hash:"SHA-256"},o,{name:"AES-GCM",length:256},!1,["encrypt"]),d=crypto.getRandomValues(new Uint8Array(12)),u=n.encode(r),h=await crypto.subtle.encrypt({name:"AES-GCM",iv:d},c,u),m={version:"1.0",salt:Array.from(i),iv:Array.from(d),data:Array.from(new Uint8Array(h)),timestamp:Date.now()},p=JSON.stringify(m);return s.arrayBufferToBase64(new TextEncoder().encode(p).buffer)}catch(r){throw console.error("Encryption failed:",r.message),new Error(`Encryption error: ${r.message}`)}}static async decryptData(e,t){try{let r=s.base64ToArrayBuffer(e),i=new TextDecoder().decode(r),n=JSON.parse(i);if(!n.version||!n.salt||!n.iv||!n.data)throw new Error("Invalid encrypted data format");let a=new Uint8Array(n.salt),o=new Uint8Array(n.iv),c=new Uint8Array(n.data),u=new TextEncoder().encode(t),h=await crypto.subtle.importKey("raw",u,{name:"PBKDF2"},!1,["deriveKey"]),m=await crypto.subtle.deriveKey({name:"PBKDF2",salt:a,iterations:31e4,hash:"SHA-256"},h,{name:"AES-GCM",length:256},!1,["decrypt"]),p=await crypto.subtle.decrypt({name:"AES-GCM",iv:o},m,c),S=new TextDecoder().decode(p);try{return JSON.parse(S)}catch{return S}}catch(r){throw console.error("Decryption failed:",r.message),new Error(`Decryption error: ${r.message}`)}}static generateSecurePassword(){let e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()_+-=[]{}|;:,.<>?",t=e.length,r=32,i="";for(let n=0;n<r;n++){let a;do a=crypto.getRandomValues(new Uint32Array(1))[0];while(a>=4294967296-4294967296%t);i+=e[a%t]}return i}static async calculateSecurityLevel(e){let t=0,r=100,i={};try{if(!e||!e.securityFeatures)return console.warn("Security manager not fully initialized, using fallback calculation"),{level:"INITIALIZING",score:0,color:"gray",verificationResults:{},timestamp:Date.now(),details:"Security system initializing...",isRealData:!1};let n="full",a=!1;try{let h=await s.verifyEncryption(e);h.passed?(t+=20,i.verifyEncryption={passed:!0,details:h.details,points:20}):i.verifyEncryption={passed:!1,details:h.details,points:0}}catch(h){i.verifyEncryption={passed:!1,details:`Encryption check failed: ${h.message}`,points:0}}try{let h=await s.verifyECDHKeyExchange(e);h.passed?(t+=15,i.verifyECDHKeyExchange={passed:!0,details:h.details,points:15}):i.verifyECDHKeyExchange={passed:!1,details:h.details,points:0}}catch(h){i.verifyECDHKeyExchange={passed:!1,details:`Key exchange check failed: ${h.message}`,points:0}}try{let h=await s.verifyMessageIntegrity(e);h.passed?(t+=10,i.verifyMessageIntegrity={passed:!0,details:h.details,points:10}):i.verifyMessageIntegrity={passed:!1,details:h.details,points:0}}catch(h){i.verifyMessageIntegrity={passed:!1,details:`Message integrity check failed: ${h.message}`,points:0}}try{let h=await s.verifyECDSASignatures(e);h.passed?(t+=15,i.verifyECDSASignatures={passed:!0,details:h.details,points:15}):i.verifyECDSASignatures={passed:!1,details:h.details,points:0}}catch(h){i.verifyECDSASignatures={passed:!1,details:`Digital signatures check failed: ${h.message}`,points:0}}try{let h=await s.verifyRateLimiting(e);h.passed?(t+=5,i.verifyRateLimiting={passed:!0,details:h.details,points:5}):i.verifyRateLimiting={passed:!1,details:h.details,points:0}}catch(h){i.verifyRateLimiting={passed:!1,details:`Rate limiting check failed: ${h.message}`,points:0}}try{let h=await s.verifyMetadataProtection(e);h.passed?(t+=10,i.verifyMetadataProtection={passed:!0,details:h.details,points:10}):i.verifyMetadataProtection={passed:!1,details:h.details,points:0}}catch(h){i.verifyMetadataProtection={passed:!1,details:`Metadata protection check failed: ${h.message}`,points:0}}try{let h=await s.verifyPerfectForwardSecrecy(e);h.passed?(t+=10,i.verifyPerfectForwardSecrecy={passed:!0,details:h.details,points:10}):i.verifyPerfectForwardSecrecy={passed:!1,details:h.details,points:0}}catch(h){i.verifyPerfectForwardSecrecy={passed:!1,details:`PFS check failed: ${h.message}`,points:0}}await s.verifyNestedEncryption(e)?(t+=5,i.nestedEncryption={passed:!0,details:"Nested encryption active",points:5}):i.nestedEncryption={passed:!1,details:"Nested encryption failed",points:0},await s.verifyPacketPadding(e)?(t+=5,i.packetPadding={passed:!0,details:"Packet padding active",points:5}):i.packetPadding={passed:!1,details:"Packet padding failed",points:0},await s.verifyAdvancedFeatures(e)?(t+=10,i.advancedFeatures={passed:!0,details:"Advanced features active",points:10}):i.advancedFeatures={passed:!1,details:"Advanced features failed",points:0};let o=Math.round(t/r*100),c=10,d=Object.values(i).filter(h=>h.passed).length;return{level:o>=85?"HIGH":o>=65?"MEDIUM":o>=35?"LOW":"CRITICAL",score:o,color:o>=85?"green":o>=65?"orange":o>=35?"yellow":"red",verificationResults:i,timestamp:Date.now(),details:`Real verification: ${t}/${r} security checks passed (${d}/${c} available)`,isRealData:!0,passedChecks:d,totalChecks:c,sessionType:n,maxPossibleScore:100}}catch(n){return console.error("Security level calculation failed:",n.message),{level:"UNKNOWN",score:0,color:"red",verificationResults:{},timestamp:Date.now(),details:`Verification failed: ${n.message}`,isRealData:!1}}}static async verifyEncryption(e){try{if(!e.encryptionKey)return{passed:!1,details:"No encryption key available"};let t=["Test encryption verification","\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438","Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?","Large data: "+"A".repeat(1e3)];for(let r of t){let n=new TextEncoder().encode(r),a=crypto.getRandomValues(new Uint8Array(12)),o=await crypto.subtle.encrypt({name:"AES-GCM",iv:a},e.encryptionKey,n),c=await crypto.subtle.decrypt({name:"AES-GCM",iv:a},e.encryptionKey,o);if(new TextDecoder().decode(c)!==r)return{passed:!1,details:`Decryption mismatch for: ${r.substring(0,20)}...`}}return{passed:!0,details:"AES-GCM encryption/decryption working correctly"}}catch(t){return console.error("Encryption verification failed:",t.message),{passed:!1,details:`Encryption test failed: ${t.message}`}}}static async verifyECDHKeyExchange(e){try{if(!e.ecdhKeyPair||!e.ecdhKeyPair.privateKey||!e.ecdhKeyPair.publicKey)return{passed:!1,details:"No ECDH key pair available"};let t=e.ecdhKeyPair.privateKey.algorithm.name,r=e.ecdhKeyPair.privateKey.algorithm.namedCurve;if(t!=="ECDH")return{passed:!1,details:`Invalid key type: ${t}, expected ECDH`};if(r!=="P-384"&&r!=="P-256")return{passed:!1,details:`Unsupported curve: ${r}, expected P-384 or P-256`};try{if(!await crypto.subtle.deriveKey({name:"ECDH",public:e.ecdhKeyPair.publicKey},e.ecdhKeyPair.privateKey,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"]))return{passed:!1,details:"Key derivation failed"}}catch(i){return{passed:!1,details:`Key derivation test failed: ${i.message}`}}return{passed:!0,details:`ECDH key exchange working with ${r} curve`}}catch(t){return console.error("ECDH verification failed:",t.message),{passed:!1,details:`ECDH test failed: ${t.message}`}}}static async verifyECDSASignatures(e){try{if(!e.ecdsaKeyPair||!e.ecdsaKeyPair.privateKey||!e.ecdsaKeyPair.publicKey)return{passed:!1,details:"No ECDSA key pair available"};let t=["Test ECDSA signature verification","\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u043E\u0434\u043F\u0438\u0441\u0438","Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?","Large data: "+"B".repeat(2e3)];for(let r of t){let n=new TextEncoder().encode(r),a=await crypto.subtle.sign({name:"ECDSA",hash:"SHA-256"},e.ecdsaKeyPair.privateKey,n);if(!await crypto.subtle.verify({name:"ECDSA",hash:"SHA-256"},e.ecdsaKeyPair.publicKey,a,n))return{passed:!1,details:`Signature verification failed for: ${r.substring(0,20)}...`}}return{passed:!0,details:"ECDSA digital signatures working correctly"}}catch(t){return console.error("ECDSA verification failed:",t.message),{passed:!1,details:`ECDSA test failed: ${t.message}`}}}static async verifyMessageIntegrity(e){try{if(!e.macKey||!(e.macKey instanceof CryptoKey))return{passed:!1,details:"MAC key not available or invalid"};let t=["Test message integrity verification","\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u0446\u0435\u043B\u043E\u0441\u0442\u043D\u043E\u0441\u0442\u0438","Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?","Large data: "+"C".repeat(3e3)];for(let r of t){let n=new TextEncoder().encode(r),a=await crypto.subtle.sign({name:"HMAC",hash:"SHA-256"},e.macKey,n);if(!await crypto.subtle.verify({name:"HMAC",hash:"SHA-256"},e.macKey,a,n))return{passed:!1,details:`HMAC verification failed for: ${r.substring(0,20)}...`}}return{passed:!0,details:"Message integrity (HMAC) working correctly"}}catch(t){return console.error("Message integrity verification failed:",t.message),{passed:!1,details:`Message integrity test failed: ${t.message}`}}}static async verifyRateLimiting(e){try{let t=s.rateLimiter;if(!t||typeof t.checkMessageRate!="function")return{passed:!1,details:"Rate limiter is not available"};let r=`selftest_${crypto.getRandomValues(new Uint32Array(1))[0]}`,i=3;for(let a=0;a<i;a++)if(!await t.checkMessageRate(r,i,6e4))return{passed:!1,details:`Rate limiter refused message ${a+1} of ${i} while under the limit`};let n=await t.checkMessageRate(r,i,6e4);return t.messages.delete(`msg_${r}`),n?{passed:!1,details:"Rate limiter did not block a message over the limit"}:{passed:!0,details:`Rate limiting verified: ${i} allowed, the next refused`}}catch(t){return{passed:!1,details:`Rate limiting test failed: ${t.message}`}}}static async verifyMetadataProtection(e){try{let t=e?.metadataKey;if(!t||!(t instanceof CryptoKey))return{passed:!1,details:"Metadata encryption key not available"};if(t.algorithm?.name!=="AES-GCM")return{passed:!1,details:`Metadata key has the wrong algorithm: ${t.algorithm?.name}`};if(t.extractable)return{passed:!1,details:"Metadata key is extractable"};if(e.encryptionKey===t)return{passed:!1,details:"Metadata key is not separated from the message key"};let r=crypto.getRandomValues(new Uint8Array(12)),i=new TextEncoder().encode("metadata-protection-selftest"),n=await crypto.subtle.encrypt({name:"AES-GCM",iv:r},t,i),a=await crypto.subtle.decrypt({name:"AES-GCM",iv:r},t,n);return new TextDecoder().decode(a)!=="metadata-protection-selftest"?{passed:!1,details:"Metadata encryption round-trip mismatch"}:{passed:!0,details:"Metadata is encrypted under a separate non-extractable key"}}catch(t){return{passed:!1,details:`Metadata protection test failed: ${t.message}`}}}static async verifyPerfectForwardSecrecy(e){try{if(!(!!e?.ecdhKeyPair?.privateKey&&e.ecdhKeyPair.privateKey.extractable===!1))return{passed:!1,details:"No non-extractable ephemeral ECDH key pair for this session"};if(e?.isRatchetActive?.()){let r=e._ratchet?.getState?.()||{};return{passed:!0,details:`Double Ratchet active: per-message keys destroyed after use, DH re-key on each reply (sent ${r.sendCount??0}, received ${r.receiveCount??0} on the current chain)`}}return{passed:!1,details:"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation"}}catch(t){return{passed:!1,details:`PFS test failed: ${t.message}`}}}static async verifyReplayProtection(e){try{return e.replayProtection?{passed:!0,details:"Replay protection is working correctly"}:{passed:!1,details:"Replay protection not enabled"}}catch(t){return{passed:!1,details:`Replay protection test failed: ${t.message}`}}}static async verifyDTLSFingerprint(e){try{return e.dtlsFingerprint?{passed:!0,details:"DTLS fingerprint is valid and available"}:{passed:!1,details:"DTLS fingerprint not available"}}catch(t){return{passed:!1,details:`DTLS fingerprint test failed: ${t.message}`}}}static async verifySASVerification(e){try{return e.sasCode?{passed:!0,details:"SAS verification code is valid and available"}:{passed:!1,details:"SAS code not available"}}catch(t){return{passed:!1,details:`SAS verification test failed: ${t.message}`}}}static async verifyTrafficObfuscation(e){try{return e.trafficObfuscation?{passed:!0,details:"Traffic obfuscation is working correctly"}:{passed:!1,details:"Traffic obfuscation not enabled"}}catch(t){return{passed:!1,details:`Traffic obfuscation test failed: ${t.message}`}}}static async verifyNestedEncryption(e){try{if(!e.nestedEncryptionKey||!(e.nestedEncryptionKey instanceof CryptoKey))return console.warn("Nested encryption key not available or invalid"),!1;let i=new TextEncoder().encode("Test nested encryption verification"),n=await crypto.subtle.encrypt({name:"AES-GCM",iv:crypto.getRandomValues(new Uint8Array(12))},e.nestedEncryptionKey,i);return n&&n.byteLength>0}catch(t){return console.error("Nested encryption verification failed:",t.message),!1}}static async verifyPacketPadding(e){try{if(!e.paddingConfig||!e.paddingConfig.enabled)return!1;let i=new TextEncoder().encode("Test packet padding verification"),n=Math.floor(Math.random()*(e.paddingConfig.maxPadding-e.paddingConfig.minPadding))+e.paddingConfig.minPadding,a=new Uint8Array(i.byteLength+n);return a.set(new Uint8Array(i),0),a.byteLength>=i.byteLength+e.paddingConfig.minPadding}catch(t){return s.secureLog.log("error","Packet padding verification failed",{error:t.message}),!1}}static async verifyAdvancedFeatures(e){try{let t=e.fakeTrafficConfig&&e.fakeTrafficConfig.enabled,r=e.decoyChannelsConfig&&e.decoyChannelsConfig.enabled,i=e.antiFingerprintingConfig&&e.antiFingerprintingConfig.enabled;return t||r||i}catch(t){return s.secureLog.log("error","Advanced features verification failed",{error:t.message}),!1}}static async verifyMutualAuth(e){try{return!e.isVerified||!e.verificationCode?!1:e.isVerified&&e.verificationCode.length>0}catch(t){return s.secureLog.log("error","Mutual auth verification failed",{error:t.message}),!1}}static async verifyNonExtractableKeys(e){let t=[["encryptionKey",e?.encryptionKey],["macKey",e?.macKey],["metadataKey",e?.metadataKey]];for(let[r,i]of t){if(!i||!(i instanceof CryptoKey))return!1;if(i.extractable!==!1)return s.secureLog.log("error","Session key is extractable",{keyName:r}),!1}return!0}static async verifyEnhancedValidation(e){try{return e.securityFeatures?e.securityFeatures.hasEnhancedValidation||e.securityFeatures.hasEnhancedReplayProtection:!1}catch(t){return s.secureLog.log("error","Enhanced validation verification failed",{error:t.message}),!1}}static async verifyPFS(e){try{return e.securityFeatures&&e.securityFeatures.hasPFS===!0&&e.keyRotationInterval&&e.currentKeyVersion!==void 0&&e.keyVersions&&e.keyVersions instanceof Map}catch(t){return s.secureLog.log("error","PFS verification failed",{error:t.message}),!1}}static rateLimiter={messages:new Map,connections:new Map,locks:new Map,async checkMessageRate(e,t=60,r=6e4){if(typeof e!="string"||e.length>256)return!1;let i=`msg_${e}`;if(this.locks.has(i))return await new Promise(n=>setTimeout(n,Math.floor(Math.random()*10)+5)),this.checkMessageRate(e,t,r);this.locks.set(i,!0);try{let n=Date.now();this.messages.has(i)||this.messages.set(i,[]);let o=this.messages.get(i).filter(c=>n-c<r);return o.length>=t?!1:(o.push(n),this.messages.set(i,o),!0)}finally{this.locks.delete(i)}},async checkConnectionRate(e,t=5,r=3e5){if(typeof e!="string"||e.length>256)return!1;let i=`conn_${e}`;if(this.locks.has(i))return await new Promise(n=>setTimeout(n,Math.floor(Math.random()*10)+5)),this.checkConnectionRate(e,t,r);this.locks.set(i,!0);try{let n=Date.now();this.connections.has(i)||this.connections.set(i,[]);let o=this.connections.get(i).filter(c=>n-c<r);return o.length>=t?!1:(o.push(n),this.connections.set(i,o),!0)}finally{this.locks.delete(i)}},cleanup(){let e=Date.now(),t=36e5;for(let[r,i]of this.messages.entries()){if(this.locks.has(r))continue;let n=i.filter(a=>e-a<t);n.length===0?this.messages.delete(r):this.messages.set(r,n)}for(let[r,i]of this.connections.entries()){if(this.locks.has(r))continue;let n=i.filter(a=>e-a<t);n.length===0?this.connections.delete(r):this.connections.set(r,n)}for(let r of this.locks.keys()){let i=parseInt(r.split("_").pop())||0;e-i>3e4&&this.locks.delete(r)}}};static validateSalt(e){if(!e||e.length!==64)throw new Error("Salt must be exactly 64 bytes");if(new Set(e).size<16)throw new Error("Salt has insufficient entropy");return!0}static secureLog={logs:[],maxLogs:100,isProductionMode:!1,init(){this.isProductionMode=this._detectProductionMode(),this.isProductionMode&&console.log("[SecureChat] Production mode detected - sensitive logging disabled")},_detectProductionMode(){return typeof process<"u"&&!0||!window.DEBUG_MODE&&!window.DEVELOPMENT_MODE||window.location.hostname&&!window.location.hostname.includes("localhost")&&!window.location.hostname.includes("127.0.0.1")&&!window.location.hostname.includes(".local")||typeof window.webpackHotUpdate>"u"&&!window.location.search.includes("debug")},log(e,t,r={}){let i=this.sanitizeContext(r),n={timestamp:Date.now(),level:e,message:t,context:i,id:crypto.getRandomValues(new Uint32Array(1))[0]};if(this.logs.push(n),this.logs.length>this.maxLogs&&(this.logs=this.logs.slice(-this.maxLogs)),this.isProductionMode)if(e==="error")console.error(`\u274C [SecureChat] ${t} [ERROR_CODE: ${this._generateErrorCode(t)}]`);else if(e==="warn")console.warn(`\u26A0\uFE0F [SecureChat] ${t}`);else return;else e==="error"?console.error(`\u274C [SecureChat] ${t}`,{errorType:i?.constructor?.name||"Unknown"}):e==="warn"?console.warn(`\u26A0\uFE0F [SecureChat] ${t}`,{details:i}):console.log(`[SecureChat] ${t}`,i)},_generateErrorCode(e){let t=e.split("").reduce((r,i)=>(r=(r<<5)-r+i.charCodeAt(0),r&r),0);return Math.abs(t).toString(36).substring(0,6).toUpperCase()},sanitizeContext(e){if(!e||typeof e!="object")return e;let t=[/key/i,/secret/i,/password/i,/token/i,/signature/i,/challenge/i,/proof/i,/salt/i,/iv/i,/nonce/i,/hash/i,/fingerprint/i,/mac/i,/private/i,/encryption/i,/decryption/i],r={};for(let[i,n]of Object.entries(e))t.some(o=>o.test(i)||typeof n=="string"&&o.test(n))?r[i]="[REDACTED]":typeof n=="string"&&n.length>100?r[i]=n.substring(0,100)+"...[TRUNCATED]":n instanceof ArrayBuffer||n instanceof Uint8Array?r[i]=`[${n.constructor.name}(${n.byteLength||n.length} bytes)]`:n&&typeof n=="object"&&!Array.isArray(n)?r[i]=this.sanitizeContext(n):r[i]=n;return r},getLogs(e=null){return e?this.logs.filter(t=>t.level===e):[...this.logs]},clearLogs(){this.logs=[]},async sendErrorToServer(e,t,r={}){if(this.isProductionMode)try{let i={errorCode:e,timestamp:Date.now(),userAgent:navigator.userAgent.substring(0,100),url:window.location.href.substring(0,100)};window.DEBUG_MODE&&console.log("[SecureChat] Error logged to server:",i)}catch{}}};static async generateECDHKeyPair(){try{try{return await crypto.subtle.generateKey({name:"ECDH",namedCurve:"P-384"},!1,["deriveKey","deriveBits"])}catch(e){return s.secureLog.log("warn","Elliptic curve P-384 generation failed, switching curve",{error:e.message}),await crypto.subtle.generateKey({name:"ECDH",namedCurve:"P-256"},!1,["deriveKey","deriveBits"])}}catch(e){throw s.secureLog.log("error","ECDH key generation failed",{error:e.message}),new Error("Failed to create keys for secure exchange")}}static async generateECDSAKeyPair(){try{try{return await crypto.subtle.generateKey({name:"ECDSA",namedCurve:"P-384"},!1,["sign","verify"])}catch(e){return s.secureLog.log("warn","Elliptic curve P-384 generation failed, switching curve",{error:e.message}),await crypto.subtle.generateKey({name:"ECDSA",namedCurve:"P-256"},!1,["sign","verify"])}}catch(e){throw s.secureLog.log("error","ECDSA key generation failed",{error:e.message}),new Error("Failed to generate keys for digital signatures")}}static async signData(e,t){try{let r=new TextEncoder,i=typeof t=="string"?r.encode(t):t;try{let n=await crypto.subtle.sign({name:"ECDSA",hash:"SHA-384"},e,i);return Array.from(new Uint8Array(n))}catch(n){s.secureLog.log("warn","SHA-384 signing failed, trying SHA-256",{error:n.message});let a=await crypto.subtle.sign({name:"ECDSA",hash:"SHA-256"},e,i);return Array.from(new Uint8Array(a))}}catch(r){throw s.secureLog.log("error","Data signing failed",{error:r.message}),new Error("Failed to sign data")}}static async verifySignature(e,t,r){try{let i=new TextEncoder,n=typeof r=="string"?i.encode(r):r,a=new Uint8Array(t);try{return await crypto.subtle.verify({name:"ECDSA",hash:"SHA-384"},e,a,n)}catch{return await crypto.subtle.verify({name:"ECDSA",hash:"SHA-256"},e,a,n)}}catch(i){throw s.secureLog.log("error","Signature verification failed",{error:i.message}),new Error("Failed to verify digital signature")}}static async validateKeyStructure(e,t="ECDH"){try{if(!Array.isArray(e)||e.length===0)throw new Error("Invalid key data format");let r=new Uint8Array(e);if(r.length<50)throw new Error("Key data too short - invalid SPKI structure");if(r.length>2e3)throw new Error("Key data too long - possible attack");let i=s.parseASN1(r);if(!i||i.tag!==48)throw new Error("Invalid SPKI structure - missing SEQUENCE tag");if(i.children.length!==2)throw new Error(`Invalid SPKI structure - expected 2 elements, got ${i.children.length}`);let n=i.children[0];if(n.tag!==48)throw new Error("Invalid AlgorithmIdentifier - not a SEQUENCE");let a=n.children[0];if(a.tag!==6)throw new Error("Invalid algorithm OID - not an OBJECT IDENTIFIER");let o=a.value,c=s.oidToString(o),u={ECDH:["1.2.840.10045.2.1"],ECDSA:["1.2.840.10045.2.1"],RSA:["1.2.840.113549.1.1.1"],"AES-GCM":["2.16.840.1.101.3.4.1.6","2.16.840.1.101.3.4.1.46"]}[t];if(!u)throw new Error(`Unknown algorithm: ${t}`);if(!u.includes(c))throw new Error(`Invalid algorithm OID: expected ${u.join(" or ")}, got ${c}`);if(t==="ECDH"||t==="ECDSA"){if(n.children.length<2)throw new Error("Missing curve parameters for EC key");let m=n.children[1];if(m.tag!==6)throw new Error("Invalid curve OID - not an OBJECT IDENTIFIER");let p=s.oidToString(m.value);if(!{"1.2.840.10045.3.1.7":"P-256","1.3.132.0.34":"P-384"}[p])throw new Error(`Invalid or unsupported curve OID: ${p}`)}let h=i.children[1];if(h.tag!==3)throw new Error("Invalid public key - not a BIT STRING");if(h.value[0]!==0)throw new Error(`Invalid BIT STRING - unexpected unused bits: ${h.value[0]}`);if(t==="ECDH"||t==="ECDSA"){let m=h.value.slice(1);if(m[0]!==4)throw new Error(`Invalid EC point format: expected uncompressed (0x04), got 0x${m[0].toString(16)}`);let p={"P-256":65,"P-384":97},g=s.oidToString(n.children[1].value)==="1.2.840.10045.3.1.7"?"P-256":"P-384",b=p[g];if(m.length!==b)throw new Error(`Invalid EC point size for ${g}: expected ${b}, got ${m.length}`)}try{let m=t==="ECDSA"||t==="ECDH"?{name:t,namedCurve:"P-384"}:{name:t},p=t==="ECDSA"?["verify"]:[];await crypto.subtle.importKey("spki",r.buffer,m,!1,p)}catch(m){if(t==="ECDSA"||t==="ECDH")try{let p={name:t,namedCurve:"P-256"},S=t==="ECDSA"?["verify"]:[];await crypto.subtle.importKey("spki",r.buffer,p,!1,S)}catch(p){throw new Error(`Key import validation failed: ${p.message}`)}else throw new Error(`Key import validation failed: ${m.message}`)}return!0}catch(r){throw s.secureLog.log("error","Key structure validation failed",{error:r.message,algorithm:t}),new Error(`Invalid key structure: ${r.message}`)}}static parseASN1(e,t=0){if(t>=e.length)return null;let r=e[t],i=t+1;if(i>=e.length)throw new Error("Truncated ASN.1 structure");let n=e[i],a=i+1;if(n&128){let d=n&127;if(d>4)throw new Error("ASN.1 length too large");n=0;for(let u=0;u<d;u++){if(a+u>=e.length)throw new Error("Truncated ASN.1 length");n=n<<8|e[a+u]}a+=d}if(a+n>e.length)throw new Error("ASN.1 structure extends beyond data");let o=e.slice(a,a+n),c={tag:r,length:n,value:o,children:[]};if(r===48||r===49){let d=0;for(;d<o.length;){let u=s.parseASN1(o,d);if(!u)break;c.children.push(u),d=d+1+u.lengthBytes+u.length}}return c.lengthBytes=a-i,c}static oidToString(e){if(!e||e.length===0)throw new Error("Empty OID");let t=[],r=Math.floor(e[0]/40),i=e[0]%40;t.push(r),t.push(i);let n=0;for(let a=1;a<e.length;a++)n=n<<7|e[a]&127,e[a]&128||(t.push(n),n=0);return t.join(".")}static validateOidString(e){if(!/^[0-9]+(\.[0-9]+)*$/.test(e))throw new Error(`Invalid OID format: ${e}`);let r=e.split(".").map(Number);if(r[0]>2)throw new Error(`Invalid OID first component: ${r[0]}`);if((r[0]===0||r[0]===1)&&r[1]>39)throw new Error(`Invalid OID second component: ${r[1]} (must be <= 39 for first component ${r[0]})`);return!0}static async exportPublicKeyWithSignature(e,t,r="ECDH"){try{if(!["ECDH","ECDSA"].includes(r))throw new Error("Invalid key type");let i=await crypto.subtle.exportKey("spki",e),n=Array.from(new Uint8Array(i));await s.validateKeyStructure(n,r);let a={keyType:r,keyData:n,timestamp:Date.now(),version:"4.0"},o=JSON.stringify(a),c=await s.signData(t,o);return{...a,signature:c}}catch(i){throw s.secureLog.log("error","Public key export failed",{error:i.message,keyType:r}),new Error(`Failed to export ${r} key: ${i.message}`)}}static async importSignedPublicKey(e,t,r="ECDH"){try{if(!e||typeof e!="object")throw new Error("Invalid signed package format");let{keyType:i,keyData:n,timestamp:a,version:o,signature:c}=e;if(!i||!n||!a||!c)throw new Error("Missing required fields in signed package");if(!s.constantTimeCompare(i,r))throw new Error(`Key type mismatch: expected ${r}, got ${i}`);if(Date.now()-a>36e5)throw new Error("Signed key package is too old");await s.validateKeyStructure(n,i);let h=JSON.stringify({keyType:i,keyData:n,timestamp:a,version:o});if(!await s.verifySignature(t,c,h))throw new Error("Invalid signature on key package - possible MITM attack");let p=new Uint8Array(n);try{let S=i==="ECDH"?{name:"ECDH",namedCurve:"P-384"}:{name:"ECDSA",namedCurve:"P-384"},g=i==="ECDH"?[]:["verify"];return await crypto.subtle.importKey("spki",p,S,!1,g)}catch(S){s.secureLog.log("warn","Elliptic curve P-384 import failed, switching curve",{error:S.message});let g=i==="ECDH"?{name:"ECDH",namedCurve:"P-256"}:{name:"ECDSA",namedCurve:"P-256"},b=i==="ECDH"?[]:["verify"];return await crypto.subtle.importKey("spki",p,g,!1,b)}}catch(i){throw s.secureLog.log("error","Signed public key import failed",{error:i.message,expectedKeyType:r}),new Error(`Failed to import the signed key: ${i.message}`)}}static async exportPublicKey(e){try{let t=await crypto.subtle.exportKey("spki",e),r=Array.from(new Uint8Array(t));return await s.validateKeyStructure(r,"ECDH"),r}catch(t){throw s.secureLog.log("error","Legacy public key export failed",{error:t.message}),new Error("Failed to export the public key")}}static async importPublicKey(e){try{await s.validateKeyStructure(e,"ECDH");let t=new Uint8Array(e);try{return await crypto.subtle.importKey("spki",t,{name:"ECDH",namedCurve:"P-384"},!1,[])}catch(r){return s.secureLog.log("warn","P-384 import failed, trying P-256",{error:r.message}),await crypto.subtle.importKey("spki",t,{name:"ECDH",namedCurve:"P-256"},!1,[])}}catch(t){throw s.secureLog.log("error","Legacy public key import failed",{error:t.message}),new Error("Failed to import the public key")}}static isKeyTrusted(e){if(e instanceof CryptoKey){let t=s._keyMetadata.get(e);return t?t.trusted===!0:!1}else if(e&&e._securityMetadata)return e._securityMetadata.trusted===!0;return!1}static async importPublicKeyFromSignedPackage(e,t=null,r={}){try{if(!e||!e.keyData||!e.signature)throw new Error("Invalid signed key package format");let n=["keyData","signature","keyType","timestamp","version"].filter(m=>!e[m]);if(n.length>0)throw s.secureLog.log("error","Missing required fields in signed package",{missingFields:n,availableFields:Object.keys(e)}),new Error(`Required fields are missing in the signed package: ${n.join(", ")}`);if(!t)throw s.secureLog.log("error","SECURITY VIOLATION: Signed package received without verifying key",{keyType:e.keyType,keySize:e.keyData.length,timestamp:e.timestamp,version:e.version,securityRisk:"HIGH - Potential MITM attack vector"}),new Error("CRITICAL SECURITY ERROR: Signed key package received without a verification key. This may indicate a possible MITM attack attempt. Import rejected for security reasons.");await s.validateKeyStructure(e.keyData,e.keyType||"ECDH");let a={...e};delete a.signature;let o=JSON.stringify(a);if(!await s.verifySignature(t,e.signature,o))throw s.secureLog.log("error","SECURITY BREACH: Invalid signature detected - MITM attack prevented",{keyType:e.keyType,keySize:e.keyData.length,timestamp:e.timestamp,version:e.version,attackPrevented:!0}),new Error("CRITICAL SECURITY ERROR: Invalid key signature detected. This indicates a possible MITM attack attempt. Key import rejected.");let d=await s.calculateKeyFingerprint(e.keyData),u=new Uint8Array(e.keyData),h=e.keyType||"ECDH";try{let m=await crypto.subtle.importKey("spki",u,{name:h,namedCurve:"P-384"},!1,h==="ECDSA"?["verify"]:[]);return s._keyMetadata.set(m,{trusted:!0,verificationStatus:"VERIFIED_SECURE",verificationTimestamp:Date.now()}),m}catch(m){s.secureLog.log("warn","P-384 import failed, trying P-256",{error:m.message});let p=await crypto.subtle.importKey("spki",u,{name:h,namedCurve:"P-256"},!1,h==="ECDSA"?["verify"]:[]);return s._keyMetadata.set(p,{trusted:!0,verificationStatus:"VERIFIED_SECURE",verificationTimestamp:Date.now()}),p}}catch(i){throw s.secureLog.log("error","Signed package key import failed",{error:i.message,securityImplications:"Potential security breach prevented"}),new Error(`Failed to import the public key from the signed package: ${i.message}`)}}static async deriveSharedKeys(e,t,r){try{if(!(e instanceof CryptoKey))throw s.secureLog.log("error","Private key is not a CryptoKey",{privateKeyType:typeof e,privateKeyAlgorithm:e?.algorithm?.name}),new Error("The private key is not a valid CryptoKey.");if(!(t instanceof CryptoKey))throw s.secureLog.log("error","Public key is not a CryptoKey",{publicKeyType:typeof t,publicKeyAlgorithm:t?.algorithm?.name}),new Error("The public key is not a valid CryptoKey.");if(!r||r.length!==64)throw new Error("Salt must be exactly 64 bytes for enhanced security");let i=new Uint8Array(r),n=new TextEncoder,a,o=null;try{o=await crypto.subtle.deriveBits({name:"ECDH",public:t},e,256),a=await crypto.subtle.importKey("raw",o,{name:"HKDF",hash:"SHA-256"},!1,["deriveKey","deriveBits"])}catch(b){throw s.secureLog.log("error","ECDH derivation failed",{error:b.message}),b}finally{o&&(s.zeroizeBuffer(o),o=null)}let c;c=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("message-encryption-v4")},a,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"]);let d;d=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("message-authentication-v4")},a,{name:"HMAC",hash:"SHA-256"},!1,["sign","verify"]);let u;u=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("perfect-forward-secrecy-v4")},a,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"]);let h;h=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("metadata-protection-v4")},a,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"]);let m=await crypto.subtle.deriveBits({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("double-ratchet-root-v1")},a,256),p=new Uint8Array(m),S=null,g;try{S=await crypto.subtle.deriveBits({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("fingerprint-generation-v4")},a,256),g=await s.generateKeyFingerprint(new Uint8Array(S))}finally{S&&(s.zeroizeBuffer(S),S=null)}if(!(c instanceof CryptoKey))throw s.secureLog.log("error","Derived message key is not a CryptoKey",{messageKeyType:typeof c,messageKeyAlgorithm:c?.algorithm?.name}),new Error("The derived message key is not a valid CryptoKey.");if(!(d instanceof CryptoKey))throw s.secureLog.log("error","Derived MAC key is not a CryptoKey",{macKeyType:typeof d,macKeyAlgorithm:d?.algorithm?.name}),new Error("The derived MAC key is not a valid CryptoKey.");if(!(u instanceof CryptoKey))throw s.secureLog.log("error","Derived PFS key is not a CryptoKey",{pfsKeyType:typeof u,pfsKeyAlgorithm:u?.algorithm?.name}),new Error("The derived PFS key is not a valid CryptoKey.");if(!(h instanceof CryptoKey))throw s.secureLog.log("error","Derived metadata key is not a CryptoKey",{metadataKeyType:typeof h,metadataKeyAlgorithm:h?.algorithm?.name}),new Error("The derived metadata key is not a valid CryptoKey.");return{messageKey:c,macKey:d,pfsKey:u,metadataKey:h,ratchetRoot:p,fingerprint:g,timestamp:Date.now(),version:"4.0"}}catch(i){throw s.secureLog.log("error","Enhanced key derivation failed",{error:i.message,errorStack:i.stack,privateKeyType:typeof e,publicKeyType:typeof t,saltLength:r?.length,privateKeyAlgorithm:e?.algorithm?.name,publicKeyAlgorithm:t?.algorithm?.name}),new Error(`Failed to create shared encryption keys: ${i.message}`)}}static async generateKeyFingerprint(e){let t=new Uint8Array(e),r=await crypto.subtle.digest("SHA-384",t);return Array.from(new Uint8Array(r)).slice(0,12).map(n=>n.toString(16).padStart(2,"0")).join(":")}static generateMutualAuthChallenge(){let e=crypto.getRandomValues(new Uint8Array(48)),t=Date.now(),r=crypto.getRandomValues(new Uint8Array(16));return{challenge:Array.from(e),timestamp:t,nonce:Array.from(r),version:"4.0"}}static async createAuthProof(e,t,r){try{if(!e||!e.challenge||!e.timestamp||!e.nonce)throw new Error("Invalid challenge structure");let i=Date.now()-e.timestamp;if(i>12e4)throw new Error("Challenge expired");let n={challenge:e.challenge,timestamp:e.timestamp,nonce:e.nonce,responseTimestamp:Date.now(),publicKeyHash:await s.hashPublicKey(r)},a=JSON.stringify(n),o=await s.signData(t,a),c={...n,signature:o,version:"4.0"};return s.secureLog.log("info","Authentication proof created",{challengeAge:Math.round(i/1e3)+"s"}),c}catch(i){throw s.secureLog.log("error","Authentication proof creation failed",{error:i.message}),new Error(`Failed to create cryptographic proof: ${i.message}`)}}static async verifyAuthProof(e,t,r){try{if(await new Promise(u=>setTimeout(u,Math.floor(Math.random()*20)+5)),s.assertCryptoKey(r,"ECDSA",["verify"]),!e||!t||!r)throw new Error("Missing required parameters for proof verification");let i=["challenge","timestamp","nonce","responseTimestamp","publicKeyHash","signature"];for(let u of i)if(!e[u])throw new Error(`Missing required field: ${u}`);if(!s.constantTimeCompareArrays(e.challenge,t.challenge)||e.timestamp!==t.timestamp||!s.constantTimeCompareArrays(e.nonce,t.nonce))throw new Error("Challenge mismatch - possible replay attack");let n=Date.now()-e.responseTimestamp;if(n>18e5)throw new Error("Proof response expired");let a=await s.hashPublicKey(r);if(!s.constantTimeCompare(e.publicKeyHash,a))throw new Error("Public key hash mismatch");let o={...e};delete o.signature;let c=JSON.stringify(o);if(!await s.verifySignature(r,e.signature,c))throw new Error("Invalid proof signature");return s.secureLog.log("info","Authentication proof verified successfully",{responseAge:Math.round(n/1e3)+"s"}),!0}catch(i){throw s.secureLog.log("error","Authentication proof verification failed",{error:i.message}),new Error(`Failed to verify cryptographic proof: ${i.message}`)}}static async hashPublicKey(e){try{let t=await crypto.subtle.exportKey("spki",e),r=await crypto.subtle.digest("SHA-384",t);return Array.from(new Uint8Array(r)).map(n=>n.toString(16).padStart(2,"0")).join("")}catch(t){throw s.secureLog.log("error","Public key hashing failed",{error:t.message}),new Error("Failed to create hash of the public key")}}static generateAuthChallenge(){let e=crypto.getRandomValues(new Uint8Array(32));return Array.from(e)}static generateVerificationCode(){let e="0123456789ABCDEF",t=e.length,r="";for(let i=0;i<6;i++){let n;do n=crypto.getRandomValues(new Uint8Array(1))[0];while(n>=256-256%t);r+=e[n%t]}return r.match(/.{1,2}/g).join("-")}static async encryptMessage(e,t,r,i,n,a=0){try{if(!e||typeof e!="string")throw new Error("Invalid message format");s.assertCryptoKey(t,"AES-GCM",["encrypt"]),s.assertCryptoKey(r,"HMAC",["sign"]),s.assertCryptoKey(i,"AES-GCM",["encrypt"]);let o=new TextEncoder,c=o.encode(e),d=crypto.getRandomValues(new Uint8Array(12)),u=crypto.getRandomValues(new Uint8Array(12)),h=Date.now(),m=16-c.length%16,p=new Uint8Array(c.length+m);p.set(c);let S=crypto.getRandomValues(new Uint8Array(m));p.set(S,c.length);let g=await crypto.subtle.encrypt({name:"AES-GCM",iv:d},t,p),b={id:n,timestamp:h,sequenceNumber:a,originalLength:c.length,version:"4.0"},w=JSON.stringify(s.sortObjectKeys(b)),M=await crypto.subtle.encrypt({name:"AES-GCM",iv:u},i,o.encode(w)),F={messageIv:Array.from(d),messageData:Array.from(new Uint8Array(g)),metadataIv:Array.from(u),metadataData:Array.from(new Uint8Array(M)),version:"4.0"},k=s.sortObjectKeys(F),E=JSON.stringify(k),_=await crypto.subtle.sign("HMAC",r,o.encode(E));return F.mac=Array.from(new Uint8Array(_)),F}catch(o){throw s.secureLog.log("error","Message encryption failed",{error:o.message,messageId:n}),new Error(`Failed to encrypt the message: ${o.message}`)}}static async decryptMessage(e,t,r,i,n=null){try{s.assertCryptoKey(t,"AES-GCM",["decrypt"]),s.assertCryptoKey(r,"HMAC",["verify"]),s.assertCryptoKey(i,"AES-GCM",["decrypt"]);let a=["messageIv","messageData","metadataIv","metadataData","mac","version"];for(let x of a)if(!e[x])throw new Error(`Missing required field: ${x}`);let o={...e};delete o.mac;let c=s.sortObjectKeys(o),d=JSON.stringify(c);if(!await crypto.subtle.verify("HMAC",r,new Uint8Array(e.mac),new TextEncoder().encode(d)))throw s.secureLog.log("error","MAC verification failed",{payloadFields:Object.keys(e),macLength:e.mac?.length}),new Error("Message authentication failed - possible tampering");let h=new Uint8Array(e.metadataIv),m=new Uint8Array(e.metadataData),p=await crypto.subtle.decrypt({name:"AES-GCM",iv:h},i,m),S=new TextDecoder().decode(p),g=JSON.parse(S);if(!g.id||!g.timestamp||g.sequenceNumber===void 0||!g.originalLength)throw new Error("Invalid metadata structure");let b=Date.now()-g.timestamp;if(b>18e5)throw new Error("Message expired (older than 30 minutes)");if(n!==null){if(g.sequenceNumber<n)throw s.secureLog.log("error","Rejected message with stale sequence number - possible replay",{expected:n,received:g.sequenceNumber,messageId:g.id}),new Error(`Stale sequence number: expected at least ${n}, got ${g.sequenceNumber}`);if(g.sequenceNumber>n+10)throw new Error(`Sequence number gap too large: expected around ${n}, got ${g.sequenceNumber}`)}let w=new Uint8Array(e.messageIv),M=new Uint8Array(e.messageData),F=await crypto.subtle.decrypt({name:"AES-GCM",iv:w},t,M),E=new Uint8Array(F).slice(0,g.originalLength),A=new TextDecoder().decode(E);return s.secureLog.log("info","Message decrypted successfully",{messageId:g.id,sequenceNumber:g.sequenceNumber,messageAge:Math.round(b/1e3)+"s"}),{message:A,messageId:g.id,timestamp:g.timestamp,sequenceNumber:g.sequenceNumber}}catch(a){throw s.secureLog.log("error","Message decryption failed",{error:a.message}),new Error(`Failed to decrypt the message: ${a.message}`)}}static _getMessageSanitizer(){if(s._messageSanitizer)return s._messageSanitizer;if(typeof window>"u"||!window?.document)throw new Error("DOMPurify requires a browser-like window for message sanitization");return s._messageSanitizer=Ui(window),s._messageSanitizer}static sanitizeMessage(e){if(typeof e!="string")throw new Error("Message must be a string");let t=s._getMessageSanitizer().sanitize(e,{ALLOWED_TAGS:[],ALLOWED_ATTR:[],ALLOW_UNKNOWN_PROTOCOLS:!1,FORBID_TAGS:["script","style","svg","math","template"],FORBID_ATTR:["style"],KEEP_CONTENT:!0,RETURN_TRUSTED_TYPE:!1,USE_PROFILES:{html:!1,svg:!1,svgFilters:!1,mathMl:!1}});return String(t).trim().substring(0,2e3)}static generateSalt(){return Array.from(crypto.getRandomValues(new Uint8Array(64)))}static async calculateKeyFingerprint(e){try{let t=new TextEncoder,r=new Uint8Array(e),i=await crypto.subtle.digest("SHA-256",r);return Array.from(new Uint8Array(i)).map(o=>o.toString(16).padStart(2,"0")).join("")}catch(t){throw s.secureLog.log("error","Key fingerprint calculation failed",{error:t.message}),new Error("Failed to compute the key fingerprint")}}static constantTimeCompare(e,t){let r=typeof e=="string"?e:JSON.stringify(e),i=typeof t=="string"?t:JSON.stringify(t);if(r.length!==i.length){let a=0;for(let o=0;o<Math.max(r.length,i.length);o++)a|=(r.charCodeAt(o%r.length)||0)^(i.charCodeAt(o%i.length)||0);return!1}let n=0;for(let a=0;a<r.length;a++)n|=r.charCodeAt(a)^i.charCodeAt(a);return n===0}static constantTimeCompareArrays(e,t){if(!Array.isArray(e)||!Array.isArray(t))return!1;if(e.length!==t.length){let i=0,n=Math.max(e.length,t.length);for(let a=0;a<n;a++)i|=(e[a%e.length]||0)^(t[a%t.length]||0);return!1}let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}static async encryptDataWithAAD(e,t,r){try{let i=typeof e=="string"?e:JSON.stringify(e),n=new TextEncoder,a=n.encode(i),o=n.encode(r),c=crypto.getRandomValues(new Uint8Array(12)),d=await crypto.subtle.encrypt({name:"AES-GCM",iv:c,additionalData:o},t,a),u={version:"1.0",iv:Array.from(c),data:Array.from(new Uint8Array(d)),aad:r,timestamp:Date.now()},h=JSON.stringify(u),m=n.encode(h);return s.arrayBufferToBase64(m)}catch(i){throw new Error(`AAD encryption failed: ${i.message}`)}}static async decryptDataWithAAD(e,t,r){try{let i=s.base64ToArrayBuffer(e),n=new TextDecoder().decode(i),a=JSON.parse(n);if(!a.version||!a.iv||!a.data||!a.aad)throw new Error("Invalid encrypted data format");if(a.aad!==r)throw new Error("AAD mismatch - possible tampering or replay attack");let o=new Uint8Array(a.iv),c=new Uint8Array(a.data),d=new TextEncoder().encode(a.aad),u=await crypto.subtle.decrypt({name:"AES-GCM",iv:o,additionalData:d},t,c),h=new TextDecoder().decode(u);try{return JSON.parse(h)}catch{return h}}catch(i){throw new Error(`AAD decryption failed: ${i.message}`)}}static{s.secureLog&&typeof s.secureLog.init=="function"&&s.secureLog.init()}};var Ke=["en","de","fr","es","uk","ru","zh","ko","hi","ar","he","fa","ur"],it={en:{htmlLang:"en",nativeName:"English",abbr:"EN",dir:"ltr",path:"/"},de:{htmlLang:"de",nativeName:"Deutsch",abbr:"DE",dir:"ltr",path:"/de/"},fr:{htmlLang:"fr",nativeName:"Fran\xE7ais",abbr:"FR",dir:"ltr",path:"/fr/"},es:{htmlLang:"es",nativeName:"Espa\xF1ol",abbr:"ES",dir:"ltr",path:"/es/"},uk:{htmlLang:"uk",nativeName:"\u0423\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u0430",abbr:"UK",dir:"ltr",path:"/uk/"},ru:{htmlLang:"ru",nativeName:"\u0420\u0443\u0441\u0441\u043A\u0438\u0439",abbr:"RU",dir:"ltr",path:"/ru/"},zh:{htmlLang:"zh-Hans",nativeName:"\u7B80\u4F53\u4E2D\u6587",abbr:"ZH",dir:"ltr",path:"/zh/"},ko:{htmlLang:"ko",nativeName:"\uD55C\uAD6D\uC5B4",abbr:"KO",dir:"ltr",path:"/ko/"},hi:{htmlLang:"hi",nativeName:"\u0939\u093F\u0928\u094D\u0926\u0940",abbr:"HI",dir:"ltr",path:"/hi/"},ar:{htmlLang:"ar",nativeName:"\u0627\u0644\u0639\u0631\u0628\u064A\u0629",abbr:"AR",dir:"rtl",path:"/ar/"},he:{htmlLang:"he",nativeName:"\u05E2\u05D1\u05E8\u05D9\u05EA",abbr:"HE",dir:"rtl",path:"/he/"},fa:{htmlLang:"fa",nativeName:"\u0641\u0627\u0631\u0633\u06CC",abbr:"FA",dir:"rtl",path:"/fa/"},ur:{htmlLang:"ur",nativeName:"\u0627\u0631\u062F\u0648",abbr:"UR",dir:"rtl",path:"/ur/"}},zi={en:{"language.suggest.text":"This page is also available in English.","language.suggest.cta":"Read in English","language.suggest.dismiss":"Dismiss"},de:{"language.suggest.text":"Diese Seite gibt es auch auf Deutsch.","language.suggest.cta":"Auf Deutsch lesen","language.suggest.dismiss":"Schlie\xDFen"},fr:{"language.suggest.text":"Cette page est aussi disponible en fran\xE7ais.","language.suggest.cta":"Lire en fran\xE7ais","language.suggest.dismiss":"Fermer"},es:{"language.suggest.text":"Esta p\xE1gina tambi\xE9n est\xE1 disponible en espa\xF1ol.","language.suggest.cta":"Leer en espa\xF1ol","language.suggest.dismiss":"Cerrar"},uk:{"language.suggest.text":"\u0426\u044F \u0441\u0442\u043E\u0440\u0456\u043D\u043A\u0430 \u0442\u0430\u043A\u043E\u0436 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E.","language.suggest.cta":"\u0427\u0438\u0442\u0430\u0442\u0438 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E","language.suggest.dismiss":"\u0417\u0430\u043A\u0440\u0438\u0442\u0438"},ru:{"language.suggest.text":"\u042D\u0442\u0430 \u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u0442\u0430\u043A\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043D\u0430 \u0440\u0443\u0441\u0441\u043A\u043E\u043C.","language.suggest.cta":"\u0427\u0438\u0442\u0430\u0442\u044C \u043F\u043E-\u0440\u0443\u0441\u0441\u043A\u0438","language.suggest.dismiss":"\u0417\u0430\u043A\u0440\u044B\u0442\u044C"},zh:{"language.suggest.text":"\u672C\u9875\u9762\u4E5F\u6709\u7B80\u4F53\u4E2D\u6587\u7248\u672C\u3002","language.suggest.cta":"\u9605\u8BFB\u7B80\u4F53\u4E2D\u6587","language.suggest.dismiss":"\u5173\u95ED"},ko:{"language.suggest.text":"\uC774 \uD398\uC774\uC9C0\uB294 \uD55C\uAD6D\uC5B4\uB85C\uB3C4 \uBCFC \uC218 \uC788\uC2B5\uB2C8\uB2E4.","language.suggest.cta":"\uD55C\uAD6D\uC5B4\uB85C \uBCF4\uAE30","language.suggest.dismiss":"\uB2EB\uAE30"},hi:{"language.suggest.text":"\u092F\u0939 \u092A\u0943\u0937\u094D\u0920 \u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092D\u0940 \u0909\u092A\u0932\u092C\u094D\u0927 \u0939\u0948\u0964","language.suggest.cta":"\u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092A\u0922\u093C\u0947\u0902","language.suggest.dismiss":"\u092C\u0902\u0926 \u0915\u0930\u0947\u0902"},ar:{"language.suggest.text":"\u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062D\u0629 \u0645\u062A\u0648\u0641\u0631\u0629 \u0623\u064A\u0636\u064B\u0627 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629.","language.suggest.cta":"\u0627\u0642\u0631\u0623 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629","language.suggest.dismiss":"\u0625\u063A\u0644\u0627\u0642"},he:{"language.suggest.text":"\u05D4\u05D3\u05E3 \u05D4\u05D6\u05D4 \u05D6\u05DE\u05D9\u05DF \u05D2\u05DD \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA.","language.suggest.cta":"\u05DC\u05E7\u05E8\u05D9\u05D0\u05D4 \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA","language.suggest.dismiss":"\u05E1\u05D2\u05D9\u05E8\u05D4"},fa:{"language.suggest.text":"\u0627\u06CC\u0646 \u0635\u0641\u062D\u0647 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC \u0647\u0645 \u062F\u0631 \u062F\u0633\u062A\u0631\u0633 \u0627\u0633\u062A.","language.suggest.cta":"\u062E\u0648\u0627\u0646\u062F\u0646 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC","language.suggest.dismiss":"\u0628\u0633\u062A\u0646"},ur:{"language.suggest.text":"\u06CC\u06C1 \u0635\u0641\u062D\u06C1 \u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u0628\u06BE\u06CC \u062F\u0633\u062A\u06CC\u0627\u0628 \u06C1\u06D2\u06D4","language.suggest.cta":"\u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u067E\u0691\u06BE\u06CC\u06BA","language.suggest.dismiss":"\u0628\u0646\u062F \u06A9\u0631\u06CC\u06BA"}};var qs={"language.label":"Language","language.suggest.text":"This page is also available in English.","language.suggest.cta":"Read in English","language.suggest.dismiss":"Dismiss","theme.label":"Theme","theme.system":"System","theme.light":"Light","theme.dark":"Dark","donate.eyebrow":"Donate in crypto","donate.title":"Keep SecureBit independent","donate.description":"Every donation goes to development and audits.","donate.copy":"Copy","donate.copied":"Copied","donate.net.usdt":"USDT \xB7 Tron (TRC-20)","donate.net.btc":"Bitcoin network","donate.net.eth":"Ethereum mainnet","donate.warn.usdt":"Send only USDT on Tron (TRC-20).","donate.warn.btc":"Send only BTC on the Bitcoin network.","donate.warn.eth":"Send only ETH on Ethereum mainnet.","donate.qrAlt":"QR code of the {coin} donation address","community.title":"Join the future of privacy","community.description":"SecureBit grows thanks to its community. Your ideas and feedback shape the future of secure communication - built in the open, with complete ASN.1 validation end-to-end.","community.github":"GitHub Repository","community.feedback":"Feedback","unique.eyebrow":"What sets us apart","unique.heading":"Why SecureBit is unique","unique.s1.titleTop":"Layered","unique.s1.titleBottom":"encryption core","unique.s1.collapsed":"Encryption core","unique.s1.desc":"ECDH P-384 key exchange, AES-256-GCM payloads, ECDSA signatures and full ASN.1 validation - composed into one hardened pipeline.","unique.s1.tags":["ECDH P-384","AES-256-GCM","ECDSA","ASN.1"],"unique.s2.titleTop":"Pure P2P","unique.s2.titleBottom":"WebRTC","unique.s2.collapsed":"Pure P2P WebRTC","unique.s2.desc":"Messages travel directly between devices over WebRTC. No relay holds your data - the server only helps two peers find each other.","unique.s2.tags":["DTLS 1.3","No relay"],"unique.s3.titleTop":"Perfect","unique.s3.titleBottom":"forward secrecy","unique.s3.collapsed":"Forward secrecy","unique.s3.desc":"Session keys rotate continuously and are discarded after use, so a single compromised key can never unlock past conversations.","unique.s3.tags":["Ephemeral keys","Auto-rotate"],"unique.s4.titleTop":"Traffic","unique.s4.titleBottom":"obfuscation","unique.s4.collapsed":"Traffic obfuscation","unique.s4.desc":"Packet sizes and timing are padded and randomized, hiding metadata patterns from anyone watching the wire.","unique.s4.tags":["Packet padding","Timing jitter"],"unique.s5.titleTop":"Zero data","unique.s5.titleBottom":"collection","unique.s5.collapsed":"Zero data collection","unique.s5.desc":"No accounts, no logs, no message storage. There is nothing on a server to leak, subpoena, or sell.","unique.s5.tags":["No accounts","No logs"],"partners.eyebrow":"Partners & ecosystem","partners.heading":"Trusted by our partners","partners.aegis.desc":"Capital partner securing confidential financial communications across its portfolio.","partners.aegis.role":"Strategic backer","partners.furilabs.desc":"Privacy-first Linux phones that ship SecureBit as a default secure channel.","partners.furilabs.role":"Technology partner","partners.inviteTitle":"Become a partner","partners.inviteDesc":"Building privacy hardware or infrastructure? Let's integrate SecureBit.","partners.inviteCta":"Start a conversation","roadmap.eyebrow":"Development Roadmap","roadmap.heading":"The evolution of SecureBit","roadmap.subheading":"From the first prototype to a quantum-resistant, decentralized network - with complete ASN.1 validation at every layer.","roadmap.progress":"{shipped} of {total} milestones shipped","roadmap.upcoming":"{upcoming} on the way","roadmap.keyFeatures":"Key features","hero.headlineTop":"A direct line","hero.headlineBottom":"only you two can read.","hero.subheading":"Keys are generated on your device and exchanged peer-to-peer. No accounts, no servers storing your messages.","hero.diagramAlt":"A direct encrypted line to one peer, with two more peers joining the mesh","intro.createTitle":"Create a new channel","intro.createDesc":"Your device generates the keys and a one-time invitation. Nothing touches a server.","intro.createCta":"Generate keys & invitation","intro.joinTitle":"Join a channel","intro.scanTitle":"Scan QR with camera","intro.scanSubtitle":"Fastest - point at your peer's screen","intro.orPasteCode":"or paste code","intro.pastePlaceholder":"Paste invitation code here\u2026","intro.connect":"Connect","intro.connecting":"Processing\u2026","roadmap.r1.title":"Start of Development","roadmap.r1.sub":"Idea, prototype, and infrastructure setup","roadmap.r1.date":"Early 2025","roadmap.r1.features":["Concept and requirements formation","Stack selection: WebRTC, P2P, cryptography","First messaging prototypes","Repository creation and CI","Basic encryption architecture","UX/UI design"],"roadmap.r2.title":"Alpha Release","roadmap.r2.sub":"First public alpha: basic chat and key exchange","roadmap.r2.date":"Spring 2025","roadmap.r2.features":["Basic P2P messaging via WebRTC","Simple E2E encryption (demo scheme)","Stable signaling and reconnection","Minimal UX for testing","Feedback collection from early testers"],"roadmap.r3.title":"Security Hardened","roadmap.r3.sub":"Security strengthening and stable branch release","roadmap.r3.date":"Summer 2025","roadmap.r3.features":["ECDH/ECDSA implementation in production","Perfect Forward Secrecy and key rotation","Improved authentication checks","File encryption and large payload transfers","Audit of basic cryptoprocesses"],"roadmap.r4.title":"Scaling & Stability","roadmap.r4.sub":"Network scaling and stability improvements","roadmap.r4.date":"Fall 2025","roadmap.r4.features":["Optimization of P2P connections and NAT traversal","Reconnection mechanisms and message queues","Reduced battery consumption on mobile","Multi-device synchronization support","Monitoring and logging tools for developers"],"roadmap.r5.title":"Privacy-first Release","roadmap.r5.sub":"Focus on privacy: minimizing metadata","roadmap.r5.date":"Winter 2025","roadmap.r5.features":["Metadata protection and fingerprint reduction","Experiments with onion routing and DHT","Options for anonymous connections","Preparation for open code audit","Improved user verification processes"],"roadmap.r6.title":"Enhanced Security Edition","roadmap.r6.sub":"18-layer military-grade cryptography with complete ASN.1 validation","roadmap.r6.date":"Late 2025","roadmap.r6.features":["ECDH + DTLS + SAS triple-layer security","ECDH P-384 + AES-GCM 256-bit encryption","DTLS fingerprint verification","SAS (Short Authentication String) verification","Perfect Forward Secrecy with key rotation","Enhanced MITM attack prevention","Complete ASN.1 DER validation","OID and EC point verification","SPKI structure validation","P2P WebRTC architecture","Metadata protection","100% open source code"],"roadmap.r7.title":"Desktop Edition","roadmap.r7.sub":"Native desktop apps for Windows, macOS, and Linux","roadmap.r7.date":"Early 2026","roadmap.r7.features":["Windows desktop app (Tauri v2)","macOS desktop app (Tauri v2)","Linux AppImage support (Tauri v2)","Real-time notifications","Automatic reconnection","Cross-device synchronization","Improved UX/UI","Support for files up to 100MB"],"roadmap.r8.title":"Secure Voice & Calls","roadmap.r8.sub":"Encrypted voice messages, audio calls, and video calls","roadmap.r8.date":"Early 2026","roadmap.r8.features":["End-to-end encrypted voice messages","1:1 encrypted audio calls (WebRTC)","1:1 encrypted video calls (WebRTC)","Perfect Forward Secrecy for live media","SRTP/DTLS-protected media streams","In-call SAS verification","Call notifications and auto-reconnection","Low-latency P2P media"],"roadmap.r9.title":"Group Communications","roadmap.r9.sub":"Group chats with preserved privacy","roadmap.r9.date":"Now","roadmap.r9.features":["P2P group chats up to 8 participants","Mesh delivery with signed relay fallback","One group safety code, compared by everyone","Commit-then-reveal ceremony against code grinding","Per-group identity keys, ephemeral by design","Signed membership with epoch ordering","Signed messages, so a split transcript is provable","No server, no shared group key, no history"],"roadmap.r10.title":"Mobile Edition","roadmap.r10.sub":"Native mobile apps for iOS and Android","roadmap.r10.date":"Q2 2027","roadmap.r10.features":["iOS native app (Swift/SwiftUI)","Android native app (Kotlin/Jetpack Compose)","PWA support for mobile browsers","Real-time push notifications","Battery optimization","Mobile-optimized UX/UI","Offline message queuing","Biometric authentication"],"roadmap.r11.title":"Quantum-Resistant Edition","roadmap.r11.sub":"Protection against quantum computers","roadmap.r11.date":"Q4 2027","roadmap.r11.features":["Post-quantum cryptography CRYSTALS-Kyber","SPHINCS+ digital signatures","Hybrid scheme: classic + PQ","Quantum-safe key exchange","Updated hashing algorithms","Migration of existing sessions","Compatibility with v5.x","Quantum-resistant protocols"],"roadmap.r12.title":"Decentralized Network","roadmap.r12.sub":"Fully decentralized network","roadmap.r12.date":"2028","roadmap.r12.features":["Node mesh network","DHT for peer discovery","Built-in onion routing","Tokenomics and node incentives","Governance via DAO","Interoperability with other networks","Cross-platform compatibility","Self-healing network"],"roadmap.r13.title":"AI Privacy Assistant","roadmap.r13.sub":"AI for privacy and security","roadmap.r13.date":"2028+","roadmap.r13.features":["Local AI threat analysis","Automatic MITM detection","Adaptive cryptography","Personalized security recommendations","Zero-knowledge machine learning","Private AI assistant","Predictive security","Autonomous attack protection"],"handshake.step1":"Generating ECDH P-384 key pair","handshake.step2":"Deriving verification code","handshake.step3":"Pinning Perfect Forward Secrecy","handshake.securingTitle":"Securing your channel","handshake.answerTitle":"Building your answer","handshake.securingDesc":"Forging keys strong enough to resist tampering.","handshake.shareTitle":"Share your invitation","handshake.sendAnswerTitle":"Send back your answer","handshake.shareDesc":"Show the QR or send the code to your peer. It is one-time and expires shortly.","handshake.sendAnswerDesc":"Give this answer to the channel creator so they can finish the handshake.","handshake.establish":"Establish connection","handshake.thenReceive":"Then receive the answer your peer sends back","handshake.pasteAnswerPlaceholder":"Paste peer's answer code\u2026","handshake.answerSentNote":"Send this answer to the creator, then wait - the chat opens once they connect.","handshake.qrHint":"Keep this open until your peer captures the code.","handshake.qrHintFrames":"The handshake is split across {frames} frames - keep this open until your peer captures all of them.","verify.title":"Security verification","verify.desc":"Compare this safety code with your peer over a separate channel (voice / in person), then type it to unlock the chat.","verify.enterLabel":"Enter the verified code","verify.placeholder":"Type code here","verify.confirm":"Confirm code","verify.confirmed":"Confirmed","verify.mismatch":"Don't match","verify.yours":"Your confirmation","verify.peer":"Peer confirmation","verify.pending":"Pending","verify.waiting":"Waiting for code\u2026","verify.verified":"Channel verified","verify.bothConfirmed":"Both parties confirmed. Opening the secure chat\u2026","pwa.bannerTitle":"Install SecureBit.chat","pwa.bannerDesc":"Get the native app experience with enhanced security","pwa.install":"Install","pwa.dismiss":"Dismiss","pwa.close":"Close","pwa.iosTitle":"Install on iOS","pwa.iosStep1":"Tap the Share button","pwa.iosStep1Hint":"Usually at the bottom of Safari","pwa.iosStep2":'Find "Add to Home Screen"',"pwa.iosStep2Hint":"Scroll down in the share menu","pwa.iosStep3":'Tap "Add"',"pwa.iosStep3Hint":"Confirm to install SecureBit.chat","pwa.genericTitle":"Install SecureBit","pwa.genericDesc":"Your browser handles installs its own way. Pick the steps that match yours.","pwa.androidChromeHint":"Tap \u22EE in the top corner, then \u201CInstall app\u201D","pwa.androidOtherHint":"Tap the menu, then \u201CAdd to Home screen\u201D","pwa.gotIt":"Got it","pwa.installedTitle":"App Installed!","pwa.installedIos":"iOS App installed! Open from home screen.","pwa.installedGeneric":"SecureBit.chat is now on your device","pwa.anytimeTitle":"Install Anytime","pwa.anytimeDesc":"You can still install SecureBit.chat from your browser's menu for the best experience.","pwa.ok":"OK","step.open":"Step 1 \xB7 open a channel","step.exchange":"Step 2 \xB7 exchange","step.verification":"Step 3 \xB7 verification","action.create":"Create","action.join":"Join","action.back":"Back","action.copy":"Copy","action.copied":"Copied","action.scan":"Scan","action.downloadDesktop":"Download desktop app","action.advancedSettings":"Advanced settings","cred.offerTag":"offer \xB7 or copy text","cred.answerTag":"answer \xB7 or copy text","cred.reveal":"Click to reveal - keep this code private","qr.title":"Scan QR code","qr.subtitle":"Point your camera at their QR","qr.scanning":"Scanning\u2026","qr.hint":"Hold steady until all parts are captured. Camera access is local - nothing is uploaded.","mesh.you":"you","mesh.peer":"peer \xB7 session 1","mesh.joined2":"mara joined \xB7 +2","mesh.joined3":"tobi joined \xB7 +3","ice.title":"Network settings","ice.subtitle":"Configured locally - never shared with your peer","ice.intro":"SecureBit uses public STUN servers by default to negotiate the peer-to-peer link. Point it at your own STUN/TURN if you self-host.","ice.publicTitle":"Public servers (default)","ice.publicDesc":"Zero-config. Good for most users.","ice.customTitle":"My own STUN/TURN servers","ice.customDesc":"Up to {max} servers.","ice.turnNote":"A TURN relay sees both peers' IP and traffic timing - but never message contents, which stay end-to-end encrypted. Prefer ","ice.turnNoteTls":" (TLS).","ice.test":"Test servers","ice.testing":"Testing\u2026","ice.relayTitle":"Relay-only mode","ice.relayBadge":"MAX PRIVACY","ice.relayDesc":"Routes all traffic through TURN so your IP is never exposed to the peer. Requires a TURN server.","ice.relayWarning":"Relay-only is enabled but no TURN server is configured. The connection will not be able to start.","ice.persist":"Save on this device","ice.persistDesc":"Stored encrypted in this browser. Leave off to use only for this session.","ice.forget":"Forget saved","ice.cancel":"Cancel","ice.apply":"Apply","ice.errUnavailable":"WebRTC is not available in this browser","ice.errInvalid":"Invalid server configuration","update.title":"Update available","update.desc":"A newer version of SecureBit has been detected.","update.currentVersion":"Current version","update.newVersion":"New version","update.now":"Update now","update.later":"Later","update.unknown":"N/A","update.stepSaving":"Saving data...","update.stepSwCaches":"Clearing Service Worker caches...","update.stepSwUnregister":"Unregistering Service Workers...","update.stepBrowserCache":"Clearing browser cache...","update.stepVersion":"Updating version...","update.stepReload":"Reloading application...","update.error":"Update error. Please refresh the page manually (Ctrl+F5 or Cmd+Shift+R)","update.confirmSkip":"New version available. Update is recommended for security and stability. Continue without update?","offline.backOnline":"Back online","offline.mode":"Offline mode","offline.dismiss":"Dismiss","offline.lostTitle":"Connection lost","offline.lostDesc":"SecureBit is now in offline mode. Some features are limited, but your data stays safe.","offline.point1":"Your session and keys are preserved","offline.point2":"No data is stored on servers","offline.point3":"Messages & files sync when you reconnect","offline.continue":"Continue offline","offline.restoredTitle":"When you reconnect","offline.restoredDesc":"A dropped connection costs you nothing. SecureBit queues everything locally and resumes the encrypted session the instant you're back online.","offline.r1Title":"Your messages get delivered","offline.r1Desc":"Everything you wrote while offline is sent to your contact automatically.","offline.r2Title":"Files finish transferring","offline.r2Desc":"Uploads resume from where they stopped - no need to resend.","offline.r3Title":"Their messages & files arrive","offline.r3Desc":"Whatever your contact sent during the outage is delivered to you in order.","offline.r4Title":"Nothing is lost","offline.r4Desc":"After reconnect there's no gap - the conversation continues exactly where it paused.","offline.gotIt":"Got it","qr.showTitle":"Show QR code","qr.showSubtitle":"Full-screen \xB7 let your peer scan","qr.showSubtitleFrames":"Full-screen \xB7 let your peer scan all {frames} frames","notify.enabledBody":"Notifications enabled! You will receive alerts for new messages.","notify.workingBody":"Notifications are working! You will receive alerts for new messages.","pw.label":"Password input","pw.placeholder":"Enter password...","pw.decrypt":"Decrypt","pw.cancel":"Cancel","file.title":"File transfers","file.drop":"Drag & drop files here","file.dropHint":"Encrypted end-to-end before transfer \xB7 up to 100 MB","file.browse":"Browse device","file.incoming":"Incoming file request","file.accept":"Accept","file.reject":"Reject","file.download":"Download","file.notReady":"Connection not ready","file.tooLarge":"File too large","file.typeNotAllowed":"File type not allowed","file.maxConcurrent":"Maximum concurrent transfers","file.gone":"This file is no longer available for download.","call.incoming":"Incoming call","call.incomingVideo":"Incoming video call","call.encrypted":"Encrypted call","call.encryptedShort":"Encrypted","call.peer":"Secure peer","call.connecting":"Connecting\u2026","call.ringing":"Ringing\u2026","call.accept":"Accept","call.decline":"Decline","call.end":"End call","call.camera":"Camera","call.cameraOff":"Camera off","call.peerCameraOff":"Peer's camera is off","call.flipCamera":"Flip camera","call.addVideo":"Add video","call.video":"Video","call.muted":"Muted","call.expand":"Expand","call.minimize":"Minimize","call.quality":"Connection quality","call.qualityExcellent":"Excellent","call.videoPrefix":"Video \xB7 ","call.voicePrefix":"Voice \xB7 ","group.new":"New group","group.create":"Create group","group.join":"Join group","group.name":"Group name","group.nameTooLong":"The group name is too long.","group.capacity":"Up to {max} people, peer to peer. Everyone will compare one safety code before the group opens.","group.invite":"Invite","group.inviteMore":"Invite more members","group.invitePeople":"Invite {count} people","group.invitation":"Group invitation","group.addMembers":"Add members","group.roomFor":"Room for {remaining} more. Everyone will compare a new group code once they join.","group.membersCount":"{count} members","group.member":"Member","group.members":"Members","group.remove":"Remove {name}","group.message":"Message {name}","group.leave":"Leave","group.leaveThis":"Leave this group","group.cancel":"Cancel group","group.close":"Close","group.cancelBtn":"Cancel","group.decline":"Decline","group.working":"Working\u2026","group.sasTitle":"Group safety code","group.sasEveryone":"Everyone sees this code","group.sasCompare":"Compare the group code with every member to open this group.","group.sasReadAloud":"Read these digits aloud to ","group.sasWarning":"If even one member reads a different code, someone is sitting between you. Cancel the group - do not confirm.","group.confirmFirst":"Confirm the group code first","group.codeSuffix":" \xB7 code {code}","group.exchangingNonces":"Exchanging nonces\u2026","group.waitingCommit":"Waiting for every member to commit\u2026","group.waitingJoin":"Waiting for the other members to join\u2026","group.emptyChat":"Nothing here yet. Messages are signed by their sender and travel over each member's own encrypted link.","group.noVerified":"No verified chats yet. Open a 1:1 chat and compare its safety code first - a group is built out of connections you have already checked.","group.noMoreToAdd":"No other verified chats to add. Open a 1:1 chat and compare its safety code first.","group.directLink":"Direct peer-to-peer link","group.noDirectLink":"No direct link yet - messages are relayed by another member while one is being built","group.relayNote":"Some members have no direct link to you yet. Their messages travel through another member, who can see that you are talking but cannot read past the signature or change what you said. The group keeps trying to connect them directly.","group.relayOnlyOff":"Relay-only mode is off, so each member connects to you directly and learns your IP address - including members somebody else invited. Turn it on in network settings if that matters here.","group.memberOffline":"{name} is offline and will not receive messages. They are still a member - removing them re-keys the group.","group.joinNote":"Other members will learn your presence in this group. There is no message history to catch up on - a group starts empty.","group.inviteSentNote":"The group keeps working until they accept. There is no history for them to catch up on - they will only see what is sent from now on.","group.errNotCreated":"Group not created","group.errNobodyAccepted":"Nobody accepted the invitation in time.","group.errNothingSent":"Nothing was sent and nothing was verified. Close this and try again once everyone is connected.","group.errNotFormed":"This group could not be formed.","group.errFull":"This group is full.","group.errInviteFailed":"The invitation could not be sent - that chat is not connected.","group.errNoMemberList":"The group owner never sent the member list.","group.errUnsignedList":"The member list was not signed by the group owner. Do not retry - tell them.","group.errNotOwner":"Someone other than the group owner tried to change the members.","hdr.tagline":"End-to-end encrypted","hdr.netSettings":"Advanced network settings","hdr.netSettingsTitle":"Advanced network settings (STUN/TURN)","hdr.disconnect":"Disconnect","status.connected":"Connected","status.connecting":"Connecting...","status.notConnected":"Not connected","status.reconnecting":"Reconnecting...","status.retrying":"Retrying...","status.verifying":"Verifying...","status.peerDisconnected":"Peer disconnected","sec.replayProtection":"Replay Protection","sec.messageIntegrity":"Message Integrity (HMAC)","sec.forwardSecrecy":"Perfect Forward Secrecy","sec.metadataProtection":"Metadata Protection","sec.trafficObfuscation":"Traffic Obfuscation","sec.realTests":"Real Cryptographic Tests","sec.simulatedData":"Simulated Data","sec.testPassed":"Test passed","sec.testFailed":"Test failed or unavailable","sec.verificationDone":"Real cryptographic verification completed","sec.verificationInProgress":"Security verification in progress...","sec.verificationWait":`Security verification in progress...
+`+ne),Le&&(ne=At(ne)),_&&Tt?R(ne):ne},e.setConfig=function(){let C=arguments.length>0&&arguments[0]!==void 0?arguments[0]:{};hr(C),rr=!0},e.clearConfig=function(){Ze=null,rr=!1,_=x,A=""},e.isValidAttribute=function(C,l,y){Ze||hr({});let v=re(C),L=re(l);return gi(v,L,y)},e.addHook=function(C,l){typeof l=="function"&&tt(I[C],l)},e.removeHook=function(C,l){if(l!==void 0){let y=ws(I[C],l);return y===-1?void 0:Es(I[C],y,1)[0]}return Ti(I[C])},e.removeHooks=function(C){I[C]=[]},e.removeAllHooks=function(){I=Fi()},e}var Ui=Oi();var Mt=class s{static _keyMetadata=new WeakMap;static _messageSanitizer=null;static sortObjectKeys(e){if(typeof e!="object"||e===null)return e;if(Array.isArray(e))return e.map(s.sortObjectKeys);let t={};return Object.keys(e).sort().forEach(r=>{t[r]=s.sortObjectKeys(e[r])}),t}static assertCryptoKey(e,t=null,r=[]){if(!(e instanceof CryptoKey))throw new Error("Expected CryptoKey");if(t&&e.algorithm?.name!==t)throw new Error(`Expected algorithm ${t}, got ${e.algorithm?.name}`);for(let i of r)if(!e.usages||!e.usages.includes(i))throw new Error(`Missing required key usage: ${i}`)}static arrayBufferToBase64(e){let t="",r=new Uint8Array(e),i=r.byteLength;for(let n=0;n<i;n++)t+=String.fromCharCode(r[n]);return btoa(t)}static base64ToArrayBuffer(e){try{if(typeof e!="string"||!e)throw new Error("Invalid base64 input: must be a non-empty string");let t=e.trim();if(!/^[A-Za-z0-9+/]*={0,2}$/.test(t))throw new Error("Invalid base64 format");if(t==="")return new ArrayBuffer(0);let r=atob(t),i=r.length,n=new Uint8Array(i);for(let a=0;a<i;a++)n[a]=r.charCodeAt(a);return n.buffer}catch(t){throw console.error("Base64 to ArrayBuffer conversion failed:",t.message),new Error(`Base64 conversion error: ${t.message}`)}}static hexToUint8Array(e){try{if(!e||typeof e!="string")throw new Error("Invalid hex string input: must be a non-empty string");let t=e.replace(/:/g,"").replace(/\s/g,"");if(!/^[0-9a-fA-F]*$/.test(t))throw new Error("Invalid hex format: contains non-hex characters");if(t.length%2!==0)throw new Error("Invalid hex format: odd length");let r=new Uint8Array(t.length/2);for(let i=0;i<t.length;i+=2)r[i/2]=parseInt(t.substr(i,2),16);return r}catch(t){throw console.error("Hex to Uint8Array conversion failed:",t.message),new Error(`Hex conversion error: ${t.message}`)}}static zeroizeBuffer(e){try{if(!e)return;let t=e instanceof Uint8Array?e:e instanceof ArrayBuffer?new Uint8Array(e):null;if(!t||t.length===0)return;crypto.getRandomValues(t),t.fill(0)}catch{}}static async encryptData(e,t){try{let r=typeof e=="string"?e:JSON.stringify(e),i=crypto.getRandomValues(new Uint8Array(16)),n=new TextEncoder,a=n.encode(t),o=await crypto.subtle.importKey("raw",a,{name:"PBKDF2"},!1,["deriveKey"]),c=await crypto.subtle.deriveKey({name:"PBKDF2",salt:i,iterations:31e4,hash:"SHA-256"},o,{name:"AES-GCM",length:256},!1,["encrypt"]),d=crypto.getRandomValues(new Uint8Array(12)),u=n.encode(r),h=await crypto.subtle.encrypt({name:"AES-GCM",iv:d},c,u),m={version:"1.0",salt:Array.from(i),iv:Array.from(d),data:Array.from(new Uint8Array(h)),timestamp:Date.now()},p=JSON.stringify(m);return s.arrayBufferToBase64(new TextEncoder().encode(p).buffer)}catch(r){throw console.error("Encryption failed:",r.message),new Error(`Encryption error: ${r.message}`)}}static async decryptData(e,t){try{let r=s.base64ToArrayBuffer(e),i=new TextDecoder().decode(r),n=JSON.parse(i);if(!n.version||!n.salt||!n.iv||!n.data)throw new Error("Invalid encrypted data format");let a=new Uint8Array(n.salt),o=new Uint8Array(n.iv),c=new Uint8Array(n.data),u=new TextEncoder().encode(t),h=await crypto.subtle.importKey("raw",u,{name:"PBKDF2"},!1,["deriveKey"]),m=await crypto.subtle.deriveKey({name:"PBKDF2",salt:a,iterations:31e4,hash:"SHA-256"},h,{name:"AES-GCM",length:256},!1,["decrypt"]),p=await crypto.subtle.decrypt({name:"AES-GCM",iv:o},m,c),S=new TextDecoder().decode(p);try{return JSON.parse(S)}catch{return S}}catch(r){throw console.error("Decryption failed:",r.message),new Error(`Decryption error: ${r.message}`)}}static generateSecurePassword(){let e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()_+-=[]{}|;:,.<>?",t=e.length,r=32,i="";for(let n=0;n<r;n++){let a;do a=crypto.getRandomValues(new Uint32Array(1))[0];while(a>=4294967296-4294967296%t);i+=e[a%t]}return i}static async calculateSecurityLevel(e){let t=0,r=100,i={};try{if(!e||!e.securityFeatures)return console.warn("Security manager not fully initialized, using fallback calculation"),{level:"INITIALIZING",score:0,color:"gray",verificationResults:{},timestamp:Date.now(),details:"Security system initializing...",isRealData:!1};let n="full",a=!1;try{let h=await s.verifyEncryption(e);h.passed?(t+=20,i.verifyEncryption={passed:!0,details:h.details,points:20}):i.verifyEncryption={passed:!1,details:h.details,points:0}}catch(h){i.verifyEncryption={passed:!1,details:`Encryption check failed: ${h.message}`,points:0}}try{let h=await s.verifyECDHKeyExchange(e);h.passed?(t+=15,i.verifyECDHKeyExchange={passed:!0,details:h.details,points:15}):i.verifyECDHKeyExchange={passed:!1,details:h.details,points:0}}catch(h){i.verifyECDHKeyExchange={passed:!1,details:`Key exchange check failed: ${h.message}`,points:0}}try{let h=await s.verifyMessageIntegrity(e);h.passed?(t+=10,i.verifyMessageIntegrity={passed:!0,details:h.details,points:10}):i.verifyMessageIntegrity={passed:!1,details:h.details,points:0}}catch(h){i.verifyMessageIntegrity={passed:!1,details:`Message integrity check failed: ${h.message}`,points:0}}try{let h=await s.verifyECDSASignatures(e);h.passed?(t+=15,i.verifyECDSASignatures={passed:!0,details:h.details,points:15}):i.verifyECDSASignatures={passed:!1,details:h.details,points:0}}catch(h){i.verifyECDSASignatures={passed:!1,details:`Digital signatures check failed: ${h.message}`,points:0}}try{let h=await s.verifyRateLimiting(e);h.passed?(t+=5,i.verifyRateLimiting={passed:!0,details:h.details,points:5}):i.verifyRateLimiting={passed:!1,details:h.details,points:0}}catch(h){i.verifyRateLimiting={passed:!1,details:`Rate limiting check failed: ${h.message}`,points:0}}try{let h=await s.verifyMetadataProtection(e);h.passed?(t+=10,i.verifyMetadataProtection={passed:!0,details:h.details,points:10}):i.verifyMetadataProtection={passed:!1,details:h.details,points:0}}catch(h){i.verifyMetadataProtection={passed:!1,details:`Metadata protection check failed: ${h.message}`,points:0}}try{let h=await s.verifyPerfectForwardSecrecy(e);h.passed?(t+=10,i.verifyPerfectForwardSecrecy={passed:!0,details:h.details,points:10}):i.verifyPerfectForwardSecrecy={passed:!1,details:h.details,points:0}}catch(h){i.verifyPerfectForwardSecrecy={passed:!1,details:`PFS check failed: ${h.message}`,points:0}}await s.verifyNestedEncryption(e)?(t+=5,i.nestedEncryption={passed:!0,details:"Nested encryption active",points:5}):i.nestedEncryption={passed:!1,details:"Nested encryption failed",points:0},await s.verifyPacketPadding(e)?(t+=5,i.packetPadding={passed:!0,details:"Packet padding active",points:5}):i.packetPadding={passed:!1,details:"Packet padding failed",points:0},await s.verifyAdvancedFeatures(e)?(t+=10,i.advancedFeatures={passed:!0,details:"Advanced features active",points:10}):i.advancedFeatures={passed:!1,details:"Advanced features failed",points:0};let o=Math.round(t/r*100),c=10,d=Object.values(i).filter(h=>h.passed).length;return{level:o>=85?"HIGH":o>=65?"MEDIUM":o>=35?"LOW":"CRITICAL",score:o,color:o>=85?"green":o>=65?"orange":o>=35?"yellow":"red",verificationResults:i,timestamp:Date.now(),details:`Real verification: ${t}/${r} security checks passed (${d}/${c} available)`,isRealData:!0,passedChecks:d,totalChecks:c,sessionType:n,maxPossibleScore:100}}catch(n){return console.error("Security level calculation failed:",n.message),{level:"UNKNOWN",score:0,color:"red",verificationResults:{},timestamp:Date.now(),details:`Verification failed: ${n.message}`,isRealData:!1}}}static async verifyEncryption(e){try{if(!e.encryptionKey)return{passed:!1,details:"No encryption key available"};let t=["Test encryption verification","\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438","Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?","Large data: "+"A".repeat(1e3)];for(let r of t){let n=new TextEncoder().encode(r),a=crypto.getRandomValues(new Uint8Array(12)),o=await crypto.subtle.encrypt({name:"AES-GCM",iv:a},e.encryptionKey,n),c=await crypto.subtle.decrypt({name:"AES-GCM",iv:a},e.encryptionKey,o);if(new TextDecoder().decode(c)!==r)return{passed:!1,details:`Decryption mismatch for: ${r.substring(0,20)}...`}}return{passed:!0,details:"AES-GCM encryption/decryption working correctly"}}catch(t){return console.error("Encryption verification failed:",t.message),{passed:!1,details:`Encryption test failed: ${t.message}`}}}static async verifyECDHKeyExchange(e){try{if(!e.ecdhKeyPair||!e.ecdhKeyPair.privateKey||!e.ecdhKeyPair.publicKey)return{passed:!1,details:"No ECDH key pair available"};let t=e.ecdhKeyPair.privateKey.algorithm.name,r=e.ecdhKeyPair.privateKey.algorithm.namedCurve;if(t!=="ECDH")return{passed:!1,details:`Invalid key type: ${t}, expected ECDH`};if(r!=="P-384"&&r!=="P-256")return{passed:!1,details:`Unsupported curve: ${r}, expected P-384 or P-256`};try{if(!await crypto.subtle.deriveKey({name:"ECDH",public:e.ecdhKeyPair.publicKey},e.ecdhKeyPair.privateKey,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"]))return{passed:!1,details:"Key derivation failed"}}catch(i){return{passed:!1,details:`Key derivation test failed: ${i.message}`}}return{passed:!0,details:`ECDH key exchange working with ${r} curve`}}catch(t){return console.error("ECDH verification failed:",t.message),{passed:!1,details:`ECDH test failed: ${t.message}`}}}static async verifyECDSASignatures(e){try{if(!e.ecdsaKeyPair||!e.ecdsaKeyPair.privateKey||!e.ecdsaKeyPair.publicKey)return{passed:!1,details:"No ECDSA key pair available"};let t=["Test ECDSA signature verification","\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u043E\u0434\u043F\u0438\u0441\u0438","Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?","Large data: "+"B".repeat(2e3)];for(let r of t){let n=new TextEncoder().encode(r),a=await crypto.subtle.sign({name:"ECDSA",hash:"SHA-256"},e.ecdsaKeyPair.privateKey,n);if(!await crypto.subtle.verify({name:"ECDSA",hash:"SHA-256"},e.ecdsaKeyPair.publicKey,a,n))return{passed:!1,details:`Signature verification failed for: ${r.substring(0,20)}...`}}return{passed:!0,details:"ECDSA digital signatures working correctly"}}catch(t){return console.error("ECDSA verification failed:",t.message),{passed:!1,details:`ECDSA test failed: ${t.message}`}}}static async verifyMessageIntegrity(e){try{if(!e.macKey||!(e.macKey instanceof CryptoKey))return{passed:!1,details:"MAC key not available or invalid"};let t=["Test message integrity verification","\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u0446\u0435\u043B\u043E\u0441\u0442\u043D\u043E\u0441\u0442\u0438","Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?","Large data: "+"C".repeat(3e3)];for(let r of t){let n=new TextEncoder().encode(r),a=await crypto.subtle.sign({name:"HMAC",hash:"SHA-256"},e.macKey,n);if(!await crypto.subtle.verify({name:"HMAC",hash:"SHA-256"},e.macKey,a,n))return{passed:!1,details:`HMAC verification failed for: ${r.substring(0,20)}...`}}return{passed:!0,details:"Message integrity (HMAC) working correctly"}}catch(t){return console.error("Message integrity verification failed:",t.message),{passed:!1,details:`Message integrity test failed: ${t.message}`}}}static async verifyRateLimiting(e){try{let t=s.rateLimiter;if(!t||typeof t.checkMessageRate!="function")return{passed:!1,details:"Rate limiter is not available"};let r=`selftest_${crypto.getRandomValues(new Uint32Array(1))[0]}`,i=3;for(let a=0;a<i;a++)if(!await t.checkMessageRate(r,i,6e4))return{passed:!1,details:`Rate limiter refused message ${a+1} of ${i} while under the limit`};let n=await t.checkMessageRate(r,i,6e4);return t.messages.delete(`msg_${r}`),n?{passed:!1,details:"Rate limiter did not block a message over the limit"}:{passed:!0,details:`Rate limiting verified: ${i} allowed, the next refused`}}catch(t){return{passed:!1,details:`Rate limiting test failed: ${t.message}`}}}static async verifyMetadataProtection(e){try{let t=e?.metadataKey;if(!t||!(t instanceof CryptoKey))return{passed:!1,details:"Metadata encryption key not available"};if(t.algorithm?.name!=="AES-GCM")return{passed:!1,details:`Metadata key has the wrong algorithm: ${t.algorithm?.name}`};if(t.extractable)return{passed:!1,details:"Metadata key is extractable"};if(e.encryptionKey===t)return{passed:!1,details:"Metadata key is not separated from the message key"};let r=crypto.getRandomValues(new Uint8Array(12)),i=new TextEncoder().encode("metadata-protection-selftest"),n=await crypto.subtle.encrypt({name:"AES-GCM",iv:r},t,i),a=await crypto.subtle.decrypt({name:"AES-GCM",iv:r},t,n);return new TextDecoder().decode(a)!=="metadata-protection-selftest"?{passed:!1,details:"Metadata encryption round-trip mismatch"}:{passed:!0,details:"Metadata is encrypted under a separate non-extractable key"}}catch(t){return{passed:!1,details:`Metadata protection test failed: ${t.message}`}}}static async verifyPerfectForwardSecrecy(e){try{if(!(!!e?.ecdhKeyPair?.privateKey&&e.ecdhKeyPair.privateKey.extractable===!1))return{passed:!1,details:"No non-extractable ephemeral ECDH key pair for this session"};if(e?.isRatchetActive?.()){let r=e._ratchet?.getState?.()||{};return{passed:!0,details:`Double Ratchet active: per-message keys destroyed after use, DH re-key on each reply (sent ${r.sendCount??0}, received ${r.receiveCount??0} on the current chain)`}}return{passed:!1,details:"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation"}}catch(t){return{passed:!1,details:`PFS test failed: ${t.message}`}}}static async verifyReplayProtection(e){try{return e.replayProtection?{passed:!0,details:"Replay protection is working correctly"}:{passed:!1,details:"Replay protection not enabled"}}catch(t){return{passed:!1,details:`Replay protection test failed: ${t.message}`}}}static async verifyDTLSFingerprint(e){try{return e.dtlsFingerprint?{passed:!0,details:"DTLS fingerprint is valid and available"}:{passed:!1,details:"DTLS fingerprint not available"}}catch(t){return{passed:!1,details:`DTLS fingerprint test failed: ${t.message}`}}}static async verifySASVerification(e){try{return e.sasCode?{passed:!0,details:"SAS verification code is valid and available"}:{passed:!1,details:"SAS code not available"}}catch(t){return{passed:!1,details:`SAS verification test failed: ${t.message}`}}}static async verifyTrafficObfuscation(e){try{return e.trafficObfuscation?{passed:!0,details:"Traffic obfuscation is working correctly"}:{passed:!1,details:"Traffic obfuscation not enabled"}}catch(t){return{passed:!1,details:`Traffic obfuscation test failed: ${t.message}`}}}static async verifyNestedEncryption(e){try{if(!e.nestedEncryptionKey||!(e.nestedEncryptionKey instanceof CryptoKey))return console.warn("Nested encryption key not available or invalid"),!1;let i=new TextEncoder().encode("Test nested encryption verification"),n=await crypto.subtle.encrypt({name:"AES-GCM",iv:crypto.getRandomValues(new Uint8Array(12))},e.nestedEncryptionKey,i);return n&&n.byteLength>0}catch(t){return console.error("Nested encryption verification failed:",t.message),!1}}static async verifyPacketPadding(e){try{if(!e.paddingConfig||!e.paddingConfig.enabled)return!1;let i=new TextEncoder().encode("Test packet padding verification"),n=Math.floor(Math.random()*(e.paddingConfig.maxPadding-e.paddingConfig.minPadding))+e.paddingConfig.minPadding,a=new Uint8Array(i.byteLength+n);return a.set(new Uint8Array(i),0),a.byteLength>=i.byteLength+e.paddingConfig.minPadding}catch(t){return s.secureLog.log("error","Packet padding verification failed",{error:t.message}),!1}}static async verifyAdvancedFeatures(e){try{let t=e.fakeTrafficConfig&&e.fakeTrafficConfig.enabled,r=e.decoyChannelsConfig&&e.decoyChannelsConfig.enabled,i=e.antiFingerprintingConfig&&e.antiFingerprintingConfig.enabled;return t||r||i}catch(t){return s.secureLog.log("error","Advanced features verification failed",{error:t.message}),!1}}static async verifyMutualAuth(e){try{return!e.isVerified||!e.verificationCode?!1:e.isVerified&&e.verificationCode.length>0}catch(t){return s.secureLog.log("error","Mutual auth verification failed",{error:t.message}),!1}}static async verifyNonExtractableKeys(e){let t=[["encryptionKey",e?.encryptionKey],["macKey",e?.macKey],["metadataKey",e?.metadataKey]];for(let[r,i]of t){if(!i||!(i instanceof CryptoKey))return!1;if(i.extractable!==!1)return s.secureLog.log("error","Session key is extractable",{keyName:r}),!1}return!0}static async verifyEnhancedValidation(e){try{return e.securityFeatures?e.securityFeatures.hasEnhancedValidation||e.securityFeatures.hasEnhancedReplayProtection:!1}catch(t){return s.secureLog.log("error","Enhanced validation verification failed",{error:t.message}),!1}}static async verifyPFS(e){try{return e.securityFeatures&&e.securityFeatures.hasPFS===!0&&e.keyRotationInterval&&e.currentKeyVersion!==void 0&&e.keyVersions&&e.keyVersions instanceof Map}catch(t){return s.secureLog.log("error","PFS verification failed",{error:t.message}),!1}}static rateLimiter={messages:new Map,connections:new Map,locks:new Map,async checkMessageRate(e,t=60,r=6e4){if(typeof e!="string"||e.length>256)return!1;let i=`msg_${e}`;if(this.locks.has(i))return await new Promise(n=>setTimeout(n,Math.floor(Math.random()*10)+5)),this.checkMessageRate(e,t,r);this.locks.set(i,!0);try{let n=Date.now();this.messages.has(i)||this.messages.set(i,[]);let o=this.messages.get(i).filter(c=>n-c<r);return o.length>=t?!1:(o.push(n),this.messages.set(i,o),!0)}finally{this.locks.delete(i)}},async checkConnectionRate(e,t=5,r=3e5){if(typeof e!="string"||e.length>256)return!1;let i=`conn_${e}`;if(this.locks.has(i))return await new Promise(n=>setTimeout(n,Math.floor(Math.random()*10)+5)),this.checkConnectionRate(e,t,r);this.locks.set(i,!0);try{let n=Date.now();this.connections.has(i)||this.connections.set(i,[]);let o=this.connections.get(i).filter(c=>n-c<r);return o.length>=t?!1:(o.push(n),this.connections.set(i,o),!0)}finally{this.locks.delete(i)}},cleanup(){let e=Date.now(),t=36e5;for(let[r,i]of this.messages.entries()){if(this.locks.has(r))continue;let n=i.filter(a=>e-a<t);n.length===0?this.messages.delete(r):this.messages.set(r,n)}for(let[r,i]of this.connections.entries()){if(this.locks.has(r))continue;let n=i.filter(a=>e-a<t);n.length===0?this.connections.delete(r):this.connections.set(r,n)}for(let r of this.locks.keys()){let i=parseInt(r.split("_").pop())||0;e-i>3e4&&this.locks.delete(r)}}};static validateSalt(e){if(!e||e.length!==64)throw new Error("Salt must be exactly 64 bytes");if(new Set(e).size<16)throw new Error("Salt has insufficient entropy");return!0}static secureLog={logs:[],maxLogs:100,isProductionMode:!1,init(){this.isProductionMode=this._detectProductionMode(),this.isProductionMode&&console.log("[SecureChat] Production mode detected - sensitive logging disabled")},_detectProductionMode(){return typeof process<"u"&&!0||!window.DEBUG_MODE&&!window.DEVELOPMENT_MODE||window.location.hostname&&!window.location.hostname.includes("localhost")&&!window.location.hostname.includes("127.0.0.1")&&!window.location.hostname.includes(".local")||typeof window.webpackHotUpdate>"u"&&!window.location.search.includes("debug")},log(e,t,r={}){let i=this.sanitizeContext(r),n={timestamp:Date.now(),level:e,message:t,context:i,id:crypto.getRandomValues(new Uint32Array(1))[0]};if(this.logs.push(n),this.logs.length>this.maxLogs&&(this.logs=this.logs.slice(-this.maxLogs)),this.isProductionMode)if(e==="error")console.error(`\u274C [SecureChat] ${t} [ERROR_CODE: ${this._generateErrorCode(t)}]`);else if(e==="warn")console.warn(`\u26A0\uFE0F [SecureChat] ${t}`);else return;else e==="error"?console.error(`\u274C [SecureChat] ${t}`,{errorType:i?.constructor?.name||"Unknown"}):e==="warn"?console.warn(`\u26A0\uFE0F [SecureChat] ${t}`,{details:i}):console.log(`[SecureChat] ${t}`,i)},_generateErrorCode(e){let t=e.split("").reduce((r,i)=>(r=(r<<5)-r+i.charCodeAt(0),r&r),0);return Math.abs(t).toString(36).substring(0,6).toUpperCase()},sanitizeContext(e){if(!e||typeof e!="object")return e;let t=[/key/i,/secret/i,/password/i,/token/i,/signature/i,/challenge/i,/proof/i,/salt/i,/iv/i,/nonce/i,/hash/i,/fingerprint/i,/mac/i,/private/i,/encryption/i,/decryption/i],r={};for(let[i,n]of Object.entries(e))t.some(o=>o.test(i)||typeof n=="string"&&o.test(n))?r[i]="[REDACTED]":typeof n=="string"&&n.length>100?r[i]=n.substring(0,100)+"...[TRUNCATED]":n instanceof ArrayBuffer||n instanceof Uint8Array?r[i]=`[${n.constructor.name}(${n.byteLength||n.length} bytes)]`:n&&typeof n=="object"&&!Array.isArray(n)?r[i]=this.sanitizeContext(n):r[i]=n;return r},getLogs(e=null){return e?this.logs.filter(t=>t.level===e):[...this.logs]},clearLogs(){this.logs=[]},async sendErrorToServer(e,t,r={}){if(this.isProductionMode)try{let i={errorCode:e,timestamp:Date.now(),userAgent:navigator.userAgent.substring(0,100),url:window.location.href.substring(0,100)};window.DEBUG_MODE&&console.log("[SecureChat] Error logged to server:",i)}catch{}}};static async generateECDHKeyPair(){try{try{return await crypto.subtle.generateKey({name:"ECDH",namedCurve:"P-384"},!1,["deriveKey","deriveBits"])}catch(e){return s.secureLog.log("warn","Elliptic curve P-384 generation failed, switching curve",{error:e.message}),await crypto.subtle.generateKey({name:"ECDH",namedCurve:"P-256"},!1,["deriveKey","deriveBits"])}}catch(e){throw s.secureLog.log("error","ECDH key generation failed",{error:e.message}),new Error("Failed to create keys for secure exchange")}}static async generateECDSAKeyPair(){try{try{return await crypto.subtle.generateKey({name:"ECDSA",namedCurve:"P-384"},!1,["sign","verify"])}catch(e){return s.secureLog.log("warn","Elliptic curve P-384 generation failed, switching curve",{error:e.message}),await crypto.subtle.generateKey({name:"ECDSA",namedCurve:"P-256"},!1,["sign","verify"])}}catch(e){throw s.secureLog.log("error","ECDSA key generation failed",{error:e.message}),new Error("Failed to generate keys for digital signatures")}}static async signData(e,t){try{let r=new TextEncoder,i=typeof t=="string"?r.encode(t):t;try{let n=await crypto.subtle.sign({name:"ECDSA",hash:"SHA-384"},e,i);return Array.from(new Uint8Array(n))}catch(n){s.secureLog.log("warn","SHA-384 signing failed, trying SHA-256",{error:n.message});let a=await crypto.subtle.sign({name:"ECDSA",hash:"SHA-256"},e,i);return Array.from(new Uint8Array(a))}}catch(r){throw s.secureLog.log("error","Data signing failed",{error:r.message}),new Error("Failed to sign data")}}static async verifySignature(e,t,r){try{let i=new TextEncoder,n=typeof r=="string"?i.encode(r):r,a=new Uint8Array(t);try{return await crypto.subtle.verify({name:"ECDSA",hash:"SHA-384"},e,a,n)}catch{return await crypto.subtle.verify({name:"ECDSA",hash:"SHA-256"},e,a,n)}}catch(i){throw s.secureLog.log("error","Signature verification failed",{error:i.message}),new Error("Failed to verify digital signature")}}static async validateKeyStructure(e,t="ECDH"){try{if(!Array.isArray(e)||e.length===0)throw new Error("Invalid key data format");let r=new Uint8Array(e);if(r.length<50)throw new Error("Key data too short - invalid SPKI structure");if(r.length>2e3)throw new Error("Key data too long - possible attack");let i=s.parseASN1(r);if(!i||i.tag!==48)throw new Error("Invalid SPKI structure - missing SEQUENCE tag");if(i.children.length!==2)throw new Error(`Invalid SPKI structure - expected 2 elements, got ${i.children.length}`);let n=i.children[0];if(n.tag!==48)throw new Error("Invalid AlgorithmIdentifier - not a SEQUENCE");let a=n.children[0];if(a.tag!==6)throw new Error("Invalid algorithm OID - not an OBJECT IDENTIFIER");let o=a.value,c=s.oidToString(o),u={ECDH:["1.2.840.10045.2.1"],ECDSA:["1.2.840.10045.2.1"],RSA:["1.2.840.113549.1.1.1"],"AES-GCM":["2.16.840.1.101.3.4.1.6","2.16.840.1.101.3.4.1.46"]}[t];if(!u)throw new Error(`Unknown algorithm: ${t}`);if(!u.includes(c))throw new Error(`Invalid algorithm OID: expected ${u.join(" or ")}, got ${c}`);if(t==="ECDH"||t==="ECDSA"){if(n.children.length<2)throw new Error("Missing curve parameters for EC key");let m=n.children[1];if(m.tag!==6)throw new Error("Invalid curve OID - not an OBJECT IDENTIFIER");let p=s.oidToString(m.value);if(!{"1.2.840.10045.3.1.7":"P-256","1.3.132.0.34":"P-384"}[p])throw new Error(`Invalid or unsupported curve OID: ${p}`)}let h=i.children[1];if(h.tag!==3)throw new Error("Invalid public key - not a BIT STRING");if(h.value[0]!==0)throw new Error(`Invalid BIT STRING - unexpected unused bits: ${h.value[0]}`);if(t==="ECDH"||t==="ECDSA"){let m=h.value.slice(1);if(m[0]!==4)throw new Error(`Invalid EC point format: expected uncompressed (0x04), got 0x${m[0].toString(16)}`);let p={"P-256":65,"P-384":97},g=s.oidToString(n.children[1].value)==="1.2.840.10045.3.1.7"?"P-256":"P-384",b=p[g];if(m.length!==b)throw new Error(`Invalid EC point size for ${g}: expected ${b}, got ${m.length}`)}try{let m=t==="ECDSA"||t==="ECDH"?{name:t,namedCurve:"P-384"}:{name:t},p=t==="ECDSA"?["verify"]:[];await crypto.subtle.importKey("spki",r.buffer,m,!1,p)}catch(m){if(t==="ECDSA"||t==="ECDH")try{let p={name:t,namedCurve:"P-256"},S=t==="ECDSA"?["verify"]:[];await crypto.subtle.importKey("spki",r.buffer,p,!1,S)}catch(p){throw new Error(`Key import validation failed: ${p.message}`)}else throw new Error(`Key import validation failed: ${m.message}`)}return!0}catch(r){throw s.secureLog.log("error","Key structure validation failed",{error:r.message,algorithm:t}),new Error(`Invalid key structure: ${r.message}`)}}static parseASN1(e,t=0){if(t>=e.length)return null;let r=e[t],i=t+1;if(i>=e.length)throw new Error("Truncated ASN.1 structure");let n=e[i],a=i+1;if(n&128){let d=n&127;if(d>4)throw new Error("ASN.1 length too large");n=0;for(let u=0;u<d;u++){if(a+u>=e.length)throw new Error("Truncated ASN.1 length");n=n<<8|e[a+u]}a+=d}if(a+n>e.length)throw new Error("ASN.1 structure extends beyond data");let o=e.slice(a,a+n),c={tag:r,length:n,value:o,children:[]};if(r===48||r===49){let d=0;for(;d<o.length;){let u=s.parseASN1(o,d);if(!u)break;c.children.push(u),d=d+1+u.lengthBytes+u.length}}return c.lengthBytes=a-i,c}static oidToString(e){if(!e||e.length===0)throw new Error("Empty OID");let t=[],r=Math.floor(e[0]/40),i=e[0]%40;t.push(r),t.push(i);let n=0;for(let a=1;a<e.length;a++)n=n<<7|e[a]&127,e[a]&128||(t.push(n),n=0);return t.join(".")}static validateOidString(e){if(!/^[0-9]+(\.[0-9]+)*$/.test(e))throw new Error(`Invalid OID format: ${e}`);let r=e.split(".").map(Number);if(r[0]>2)throw new Error(`Invalid OID first component: ${r[0]}`);if((r[0]===0||r[0]===1)&&r[1]>39)throw new Error(`Invalid OID second component: ${r[1]} (must be <= 39 for first component ${r[0]})`);return!0}static async exportPublicKeyWithSignature(e,t,r="ECDH"){try{if(!["ECDH","ECDSA"].includes(r))throw new Error("Invalid key type");let i=await crypto.subtle.exportKey("spki",e),n=Array.from(new Uint8Array(i));await s.validateKeyStructure(n,r);let a={keyType:r,keyData:n,timestamp:Date.now(),version:"4.0"},o=JSON.stringify(a),c=await s.signData(t,o);return{...a,signature:c}}catch(i){throw s.secureLog.log("error","Public key export failed",{error:i.message,keyType:r}),new Error(`Failed to export ${r} key: ${i.message}`)}}static async importSignedPublicKey(e,t,r="ECDH"){try{if(!e||typeof e!="object")throw new Error("Invalid signed package format");let{keyType:i,keyData:n,timestamp:a,version:o,signature:c}=e;if(!i||!n||!a||!c)throw new Error("Missing required fields in signed package");if(!s.constantTimeCompare(i,r))throw new Error(`Key type mismatch: expected ${r}, got ${i}`);if(Date.now()-a>36e5)throw new Error("Signed key package is too old");await s.validateKeyStructure(n,i);let h=JSON.stringify({keyType:i,keyData:n,timestamp:a,version:o});if(!await s.verifySignature(t,c,h))throw new Error("Invalid signature on key package - possible MITM attack");let p=new Uint8Array(n);try{let S=i==="ECDH"?{name:"ECDH",namedCurve:"P-384"}:{name:"ECDSA",namedCurve:"P-384"},g=i==="ECDH"?[]:["verify"];return await crypto.subtle.importKey("spki",p,S,!1,g)}catch(S){s.secureLog.log("warn","Elliptic curve P-384 import failed, switching curve",{error:S.message});let g=i==="ECDH"?{name:"ECDH",namedCurve:"P-256"}:{name:"ECDSA",namedCurve:"P-256"},b=i==="ECDH"?[]:["verify"];return await crypto.subtle.importKey("spki",p,g,!1,b)}}catch(i){throw s.secureLog.log("error","Signed public key import failed",{error:i.message,expectedKeyType:r}),new Error(`Failed to import the signed key: ${i.message}`)}}static async exportPublicKey(e){try{let t=await crypto.subtle.exportKey("spki",e),r=Array.from(new Uint8Array(t));return await s.validateKeyStructure(r,"ECDH"),r}catch(t){throw s.secureLog.log("error","Legacy public key export failed",{error:t.message}),new Error("Failed to export the public key")}}static async importPublicKey(e){try{await s.validateKeyStructure(e,"ECDH");let t=new Uint8Array(e);try{return await crypto.subtle.importKey("spki",t,{name:"ECDH",namedCurve:"P-384"},!1,[])}catch(r){return s.secureLog.log("warn","P-384 import failed, trying P-256",{error:r.message}),await crypto.subtle.importKey("spki",t,{name:"ECDH",namedCurve:"P-256"},!1,[])}}catch(t){throw s.secureLog.log("error","Legacy public key import failed",{error:t.message}),new Error("Failed to import the public key")}}static isKeyTrusted(e){if(e instanceof CryptoKey){let t=s._keyMetadata.get(e);return t?t.trusted===!0:!1}else if(e&&e._securityMetadata)return e._securityMetadata.trusted===!0;return!1}static async importPublicKeyFromSignedPackage(e,t=null,r={}){try{if(!e||!e.keyData||!e.signature)throw new Error("Invalid signed key package format");let n=["keyData","signature","keyType","timestamp","version"].filter(m=>!e[m]);if(n.length>0)throw s.secureLog.log("error","Missing required fields in signed package",{missingFields:n,availableFields:Object.keys(e)}),new Error(`Required fields are missing in the signed package: ${n.join(", ")}`);if(!t)throw s.secureLog.log("error","SECURITY VIOLATION: Signed package received without verifying key",{keyType:e.keyType,keySize:e.keyData.length,timestamp:e.timestamp,version:e.version,securityRisk:"HIGH - Potential MITM attack vector"}),new Error("CRITICAL SECURITY ERROR: Signed key package received without a verification key. This may indicate a possible MITM attack attempt. Import rejected for security reasons.");await s.validateKeyStructure(e.keyData,e.keyType||"ECDH");let a={...e};delete a.signature;let o=JSON.stringify(a);if(!await s.verifySignature(t,e.signature,o))throw s.secureLog.log("error","SECURITY BREACH: Invalid signature detected - MITM attack prevented",{keyType:e.keyType,keySize:e.keyData.length,timestamp:e.timestamp,version:e.version,attackPrevented:!0}),new Error("CRITICAL SECURITY ERROR: Invalid key signature detected. This indicates a possible MITM attack attempt. Key import rejected.");let d=await s.calculateKeyFingerprint(e.keyData),u=new Uint8Array(e.keyData),h=e.keyType||"ECDH";try{let m=await crypto.subtle.importKey("spki",u,{name:h,namedCurve:"P-384"},!1,h==="ECDSA"?["verify"]:[]);return s._keyMetadata.set(m,{trusted:!0,verificationStatus:"VERIFIED_SECURE",verificationTimestamp:Date.now()}),m}catch(m){s.secureLog.log("warn","P-384 import failed, trying P-256",{error:m.message});let p=await crypto.subtle.importKey("spki",u,{name:h,namedCurve:"P-256"},!1,h==="ECDSA"?["verify"]:[]);return s._keyMetadata.set(p,{trusted:!0,verificationStatus:"VERIFIED_SECURE",verificationTimestamp:Date.now()}),p}}catch(i){throw s.secureLog.log("error","Signed package key import failed",{error:i.message,securityImplications:"Potential security breach prevented"}),new Error(`Failed to import the public key from the signed package: ${i.message}`)}}static async deriveSharedKeys(e,t,r){try{if(!(e instanceof CryptoKey))throw s.secureLog.log("error","Private key is not a CryptoKey",{privateKeyType:typeof e,privateKeyAlgorithm:e?.algorithm?.name}),new Error("The private key is not a valid CryptoKey.");if(!(t instanceof CryptoKey))throw s.secureLog.log("error","Public key is not a CryptoKey",{publicKeyType:typeof t,publicKeyAlgorithm:t?.algorithm?.name}),new Error("The public key is not a valid CryptoKey.");if(!r||r.length!==64)throw new Error("Salt must be exactly 64 bytes for enhanced security");let i=new Uint8Array(r),n=new TextEncoder,a,o=null;try{o=await crypto.subtle.deriveBits({name:"ECDH",public:t},e,256),a=await crypto.subtle.importKey("raw",o,{name:"HKDF",hash:"SHA-256"},!1,["deriveKey","deriveBits"])}catch(b){throw s.secureLog.log("error","ECDH derivation failed",{error:b.message}),b}finally{o&&(s.zeroizeBuffer(o),o=null)}let c;c=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("message-encryption-v4")},a,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"]);let d;d=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("message-authentication-v4")},a,{name:"HMAC",hash:"SHA-256"},!1,["sign","verify"]);let u;u=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("perfect-forward-secrecy-v4")},a,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"]);let h;h=await crypto.subtle.deriveKey({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("metadata-protection-v4")},a,{name:"AES-GCM",length:256},!1,["encrypt","decrypt"]);let m=await crypto.subtle.deriveBits({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("double-ratchet-root-v1")},a,256),p=new Uint8Array(m),S=null,g;try{S=await crypto.subtle.deriveBits({name:"HKDF",hash:"SHA-256",salt:i,info:n.encode("fingerprint-generation-v4")},a,256),g=await s.generateKeyFingerprint(new Uint8Array(S))}finally{S&&(s.zeroizeBuffer(S),S=null)}if(!(c instanceof CryptoKey))throw s.secureLog.log("error","Derived message key is not a CryptoKey",{messageKeyType:typeof c,messageKeyAlgorithm:c?.algorithm?.name}),new Error("The derived message key is not a valid CryptoKey.");if(!(d instanceof CryptoKey))throw s.secureLog.log("error","Derived MAC key is not a CryptoKey",{macKeyType:typeof d,macKeyAlgorithm:d?.algorithm?.name}),new Error("The derived MAC key is not a valid CryptoKey.");if(!(u instanceof CryptoKey))throw s.secureLog.log("error","Derived PFS key is not a CryptoKey",{pfsKeyType:typeof u,pfsKeyAlgorithm:u?.algorithm?.name}),new Error("The derived PFS key is not a valid CryptoKey.");if(!(h instanceof CryptoKey))throw s.secureLog.log("error","Derived metadata key is not a CryptoKey",{metadataKeyType:typeof h,metadataKeyAlgorithm:h?.algorithm?.name}),new Error("The derived metadata key is not a valid CryptoKey.");return{messageKey:c,macKey:d,pfsKey:u,metadataKey:h,ratchetRoot:p,fingerprint:g,timestamp:Date.now(),version:"4.0"}}catch(i){throw s.secureLog.log("error","Enhanced key derivation failed",{error:i.message,errorStack:i.stack,privateKeyType:typeof e,publicKeyType:typeof t,saltLength:r?.length,privateKeyAlgorithm:e?.algorithm?.name,publicKeyAlgorithm:t?.algorithm?.name}),new Error(`Failed to create shared encryption keys: ${i.message}`)}}static async generateKeyFingerprint(e){let t=new Uint8Array(e),r=await crypto.subtle.digest("SHA-384",t);return Array.from(new Uint8Array(r)).slice(0,12).map(n=>n.toString(16).padStart(2,"0")).join(":")}static generateMutualAuthChallenge(){let e=crypto.getRandomValues(new Uint8Array(48)),t=Date.now(),r=crypto.getRandomValues(new Uint8Array(16));return{challenge:Array.from(e),timestamp:t,nonce:Array.from(r),version:"4.0"}}static async createAuthProof(e,t,r){try{if(!e||!e.challenge||!e.timestamp||!e.nonce)throw new Error("Invalid challenge structure");let i=Date.now()-e.timestamp;if(i>12e4)throw new Error("Challenge expired");let n={challenge:e.challenge,timestamp:e.timestamp,nonce:e.nonce,responseTimestamp:Date.now(),publicKeyHash:await s.hashPublicKey(r)},a=JSON.stringify(n),o=await s.signData(t,a),c={...n,signature:o,version:"4.0"};return s.secureLog.log("info","Authentication proof created",{challengeAge:Math.round(i/1e3)+"s"}),c}catch(i){throw s.secureLog.log("error","Authentication proof creation failed",{error:i.message}),new Error(`Failed to create cryptographic proof: ${i.message}`)}}static async verifyAuthProof(e,t,r){try{if(await new Promise(u=>setTimeout(u,Math.floor(Math.random()*20)+5)),s.assertCryptoKey(r,"ECDSA",["verify"]),!e||!t||!r)throw new Error("Missing required parameters for proof verification");let i=["challenge","timestamp","nonce","responseTimestamp","publicKeyHash","signature"];for(let u of i)if(!e[u])throw new Error(`Missing required field: ${u}`);if(!s.constantTimeCompareArrays(e.challenge,t.challenge)||e.timestamp!==t.timestamp||!s.constantTimeCompareArrays(e.nonce,t.nonce))throw new Error("Challenge mismatch - possible replay attack");let n=Date.now()-e.responseTimestamp;if(n>18e5)throw new Error("Proof response expired");let a=await s.hashPublicKey(r);if(!s.constantTimeCompare(e.publicKeyHash,a))throw new Error("Public key hash mismatch");let o={...e};delete o.signature;let c=JSON.stringify(o);if(!await s.verifySignature(r,e.signature,c))throw new Error("Invalid proof signature");return s.secureLog.log("info","Authentication proof verified successfully",{responseAge:Math.round(n/1e3)+"s"}),!0}catch(i){throw s.secureLog.log("error","Authentication proof verification failed",{error:i.message}),new Error(`Failed to verify cryptographic proof: ${i.message}`)}}static async hashPublicKey(e){try{let t=await crypto.subtle.exportKey("spki",e),r=await crypto.subtle.digest("SHA-384",t);return Array.from(new Uint8Array(r)).map(n=>n.toString(16).padStart(2,"0")).join("")}catch(t){throw s.secureLog.log("error","Public key hashing failed",{error:t.message}),new Error("Failed to create hash of the public key")}}static generateAuthChallenge(){let e=crypto.getRandomValues(new Uint8Array(32));return Array.from(e)}static generateVerificationCode(){let e="0123456789ABCDEF",t=e.length,r="";for(let i=0;i<6;i++){let n;do n=crypto.getRandomValues(new Uint8Array(1))[0];while(n>=256-256%t);r+=e[n%t]}return r.match(/.{1,2}/g).join("-")}static async encryptMessage(e,t,r,i,n,a=0){try{if(!e||typeof e!="string")throw new Error("Invalid message format");s.assertCryptoKey(t,"AES-GCM",["encrypt"]),s.assertCryptoKey(r,"HMAC",["sign"]),s.assertCryptoKey(i,"AES-GCM",["encrypt"]);let o=new TextEncoder,c=o.encode(e),d=crypto.getRandomValues(new Uint8Array(12)),u=crypto.getRandomValues(new Uint8Array(12)),h=Date.now(),m=16-c.length%16,p=new Uint8Array(c.length+m);p.set(c);let S=crypto.getRandomValues(new Uint8Array(m));p.set(S,c.length);let g=await crypto.subtle.encrypt({name:"AES-GCM",iv:d},t,p),b={id:n,timestamp:h,sequenceNumber:a,originalLength:c.length,version:"4.0"},w=JSON.stringify(s.sortObjectKeys(b)),M=await crypto.subtle.encrypt({name:"AES-GCM",iv:u},i,o.encode(w)),F={messageIv:Array.from(d),messageData:Array.from(new Uint8Array(g)),metadataIv:Array.from(u),metadataData:Array.from(new Uint8Array(M)),version:"4.0"},k=s.sortObjectKeys(F),E=JSON.stringify(k),_=await crypto.subtle.sign("HMAC",r,o.encode(E));return F.mac=Array.from(new Uint8Array(_)),F}catch(o){throw s.secureLog.log("error","Message encryption failed",{error:o.message,messageId:n}),new Error(`Failed to encrypt the message: ${o.message}`)}}static async decryptMessage(e,t,r,i,n=null){try{s.assertCryptoKey(t,"AES-GCM",["decrypt"]),s.assertCryptoKey(r,"HMAC",["verify"]),s.assertCryptoKey(i,"AES-GCM",["decrypt"]);let a=["messageIv","messageData","metadataIv","metadataData","mac","version"];for(let x of a)if(!e[x])throw new Error(`Missing required field: ${x}`);let o={...e};delete o.mac;let c=s.sortObjectKeys(o),d=JSON.stringify(c);if(!await crypto.subtle.verify("HMAC",r,new Uint8Array(e.mac),new TextEncoder().encode(d)))throw s.secureLog.log("error","MAC verification failed",{payloadFields:Object.keys(e),macLength:e.mac?.length}),new Error("Message authentication failed - possible tampering");let h=new Uint8Array(e.metadataIv),m=new Uint8Array(e.metadataData),p=await crypto.subtle.decrypt({name:"AES-GCM",iv:h},i,m),S=new TextDecoder().decode(p),g=JSON.parse(S);if(!g.id||!g.timestamp||g.sequenceNumber===void 0||!g.originalLength)throw new Error("Invalid metadata structure");let b=Date.now()-g.timestamp;if(b>18e5)throw new Error("Message expired (older than 30 minutes)");if(n!==null){if(g.sequenceNumber<n)throw s.secureLog.log("error","Rejected message with stale sequence number - possible replay",{expected:n,received:g.sequenceNumber,messageId:g.id}),new Error(`Stale sequence number: expected at least ${n}, got ${g.sequenceNumber}`);if(g.sequenceNumber>n+10)throw new Error(`Sequence number gap too large: expected around ${n}, got ${g.sequenceNumber}`)}let w=new Uint8Array(e.messageIv),M=new Uint8Array(e.messageData),F=await crypto.subtle.decrypt({name:"AES-GCM",iv:w},t,M),E=new Uint8Array(F).slice(0,g.originalLength),A=new TextDecoder().decode(E);return s.secureLog.log("info","Message decrypted successfully",{messageId:g.id,sequenceNumber:g.sequenceNumber,messageAge:Math.round(b/1e3)+"s"}),{message:A,messageId:g.id,timestamp:g.timestamp,sequenceNumber:g.sequenceNumber}}catch(a){throw s.secureLog.log("error","Message decryption failed",{error:a.message}),new Error(`Failed to decrypt the message: ${a.message}`)}}static _getMessageSanitizer(){if(s._messageSanitizer)return s._messageSanitizer;if(typeof window>"u"||!window?.document)throw new Error("DOMPurify requires a browser-like window for message sanitization");return s._messageSanitizer=Ui(window),s._messageSanitizer}static sanitizeMessage(e){if(typeof e!="string")throw new Error("Message must be a string");let t=s._getMessageSanitizer().sanitize(e,{ALLOWED_TAGS:[],ALLOWED_ATTR:[],ALLOW_UNKNOWN_PROTOCOLS:!1,FORBID_TAGS:["script","style","svg","math","template"],FORBID_ATTR:["style"],KEEP_CONTENT:!0,RETURN_TRUSTED_TYPE:!1,USE_PROFILES:{html:!1,svg:!1,svgFilters:!1,mathMl:!1}});return String(t).trim().substring(0,2e3)}static generateSalt(){return Array.from(crypto.getRandomValues(new Uint8Array(64)))}static async calculateKeyFingerprint(e){try{let t=new TextEncoder,r=new Uint8Array(e),i=await crypto.subtle.digest("SHA-256",r);return Array.from(new Uint8Array(i)).map(o=>o.toString(16).padStart(2,"0")).join("")}catch(t){throw s.secureLog.log("error","Key fingerprint calculation failed",{error:t.message}),new Error("Failed to compute the key fingerprint")}}static constantTimeCompare(e,t){let r=typeof e=="string"?e:JSON.stringify(e),i=typeof t=="string"?t:JSON.stringify(t);if(r.length!==i.length){let a=0;for(let o=0;o<Math.max(r.length,i.length);o++)a|=(r.charCodeAt(o%r.length)||0)^(i.charCodeAt(o%i.length)||0);return!1}let n=0;for(let a=0;a<r.length;a++)n|=r.charCodeAt(a)^i.charCodeAt(a);return n===0}static constantTimeCompareArrays(e,t){if(!Array.isArray(e)||!Array.isArray(t))return!1;if(e.length!==t.length){let i=0,n=Math.max(e.length,t.length);for(let a=0;a<n;a++)i|=(e[a%e.length]||0)^(t[a%t.length]||0);return!1}let r=0;for(let i=0;i<e.length;i++)r|=e[i]^t[i];return r===0}static async encryptDataWithAAD(e,t,r){try{let i=typeof e=="string"?e:JSON.stringify(e),n=new TextEncoder,a=n.encode(i),o=n.encode(r),c=crypto.getRandomValues(new Uint8Array(12)),d=await crypto.subtle.encrypt({name:"AES-GCM",iv:c,additionalData:o},t,a),u={version:"1.0",iv:Array.from(c),data:Array.from(new Uint8Array(d)),aad:r,timestamp:Date.now()},h=JSON.stringify(u),m=n.encode(h);return s.arrayBufferToBase64(m)}catch(i){throw new Error(`AAD encryption failed: ${i.message}`)}}static async decryptDataWithAAD(e,t,r){try{let i=s.base64ToArrayBuffer(e),n=new TextDecoder().decode(i),a=JSON.parse(n);if(!a.version||!a.iv||!a.data||!a.aad)throw new Error("Invalid encrypted data format");if(a.aad!==r)throw new Error("AAD mismatch - possible tampering or replay attack");let o=new Uint8Array(a.iv),c=new Uint8Array(a.data),d=new TextEncoder().encode(a.aad),u=await crypto.subtle.decrypt({name:"AES-GCM",iv:o,additionalData:d},t,c),h=new TextDecoder().decode(u);try{return JSON.parse(h)}catch{return h}}catch(i){throw new Error(`AAD decryption failed: ${i.message}`)}}static{s.secureLog&&typeof s.secureLog.init=="function"&&s.secureLog.init()}};var Ke=["en","de","fr","es","uk","ru","zh","ko","hi","ar","he","fa","ur"],it={en:{htmlLang:"en",nativeName:"English",abbr:"EN",dir:"ltr",path:"/"},de:{htmlLang:"de",nativeName:"Deutsch",abbr:"DE",dir:"ltr",path:"/de/"},fr:{htmlLang:"fr",nativeName:"Fran\xE7ais",abbr:"FR",dir:"ltr",path:"/fr/"},es:{htmlLang:"es",nativeName:"Espa\xF1ol",abbr:"ES",dir:"ltr",path:"/es/"},uk:{htmlLang:"uk",nativeName:"\u0423\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u0430",abbr:"UK",dir:"ltr",path:"/uk/"},ru:{htmlLang:"ru",nativeName:"\u0420\u0443\u0441\u0441\u043A\u0438\u0439",abbr:"RU",dir:"ltr",path:"/ru/"},zh:{htmlLang:"zh-Hans",nativeName:"\u7B80\u4F53\u4E2D\u6587",abbr:"ZH",dir:"ltr",path:"/zh/"},ko:{htmlLang:"ko",nativeName:"\uD55C\uAD6D\uC5B4",abbr:"KO",dir:"ltr",path:"/ko/"},hi:{htmlLang:"hi",nativeName:"\u0939\u093F\u0928\u094D\u0926\u0940",abbr:"HI",dir:"ltr",path:"/hi/"},ar:{htmlLang:"ar",nativeName:"\u0627\u0644\u0639\u0631\u0628\u064A\u0629",abbr:"AR",dir:"rtl",path:"/ar/"},he:{htmlLang:"he",nativeName:"\u05E2\u05D1\u05E8\u05D9\u05EA",abbr:"HE",dir:"rtl",path:"/he/"},fa:{htmlLang:"fa",nativeName:"\u0641\u0627\u0631\u0633\u06CC",abbr:"FA",dir:"rtl",path:"/fa/"},ur:{htmlLang:"ur",nativeName:"\u0627\u0631\u062F\u0648",abbr:"UR",dir:"rtl",path:"/ur/"}},zi={en:{"language.suggest.text":"This page is also available in English.","language.suggest.cta":"Read in English","language.suggest.dismiss":"Dismiss"},de:{"language.suggest.text":"Diese Seite gibt es auch auf Deutsch.","language.suggest.cta":"Auf Deutsch lesen","language.suggest.dismiss":"Schlie\xDFen"},fr:{"language.suggest.text":"Cette page est aussi disponible en fran\xE7ais.","language.suggest.cta":"Lire en fran\xE7ais","language.suggest.dismiss":"Fermer"},es:{"language.suggest.text":"Esta p\xE1gina tambi\xE9n est\xE1 disponible en espa\xF1ol.","language.suggest.cta":"Leer en espa\xF1ol","language.suggest.dismiss":"Cerrar"},uk:{"language.suggest.text":"\u0426\u044F \u0441\u0442\u043E\u0440\u0456\u043D\u043A\u0430 \u0442\u0430\u043A\u043E\u0436 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E.","language.suggest.cta":"\u0427\u0438\u0442\u0430\u0442\u0438 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E","language.suggest.dismiss":"\u0417\u0430\u043A\u0440\u0438\u0442\u0438"},ru:{"language.suggest.text":"\u042D\u0442\u0430 \u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u0442\u0430\u043A\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043D\u0430 \u0440\u0443\u0441\u0441\u043A\u043E\u043C.","language.suggest.cta":"\u0427\u0438\u0442\u0430\u0442\u044C \u043F\u043E-\u0440\u0443\u0441\u0441\u043A\u0438","language.suggest.dismiss":"\u0417\u0430\u043A\u0440\u044B\u0442\u044C"},zh:{"language.suggest.text":"\u672C\u9875\u9762\u4E5F\u6709\u7B80\u4F53\u4E2D\u6587\u7248\u672C\u3002","language.suggest.cta":"\u9605\u8BFB\u7B80\u4F53\u4E2D\u6587","language.suggest.dismiss":"\u5173\u95ED"},ko:{"language.suggest.text":"\uC774 \uD398\uC774\uC9C0\uB294 \uD55C\uAD6D\uC5B4\uB85C\uB3C4 \uBCFC \uC218 \uC788\uC2B5\uB2C8\uB2E4.","language.suggest.cta":"\uD55C\uAD6D\uC5B4\uB85C \uBCF4\uAE30","language.suggest.dismiss":"\uB2EB\uAE30"},hi:{"language.suggest.text":"\u092F\u0939 \u092A\u0943\u0937\u094D\u0920 \u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092D\u0940 \u0909\u092A\u0932\u092C\u094D\u0927 \u0939\u0948\u0964","language.suggest.cta":"\u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092A\u0922\u093C\u0947\u0902","language.suggest.dismiss":"\u092C\u0902\u0926 \u0915\u0930\u0947\u0902"},ar:{"language.suggest.text":"\u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062D\u0629 \u0645\u062A\u0648\u0641\u0631\u0629 \u0623\u064A\u0636\u064B\u0627 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629.","language.suggest.cta":"\u0627\u0642\u0631\u0623 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629","language.suggest.dismiss":"\u0625\u063A\u0644\u0627\u0642"},he:{"language.suggest.text":"\u05D4\u05D3\u05E3 \u05D4\u05D6\u05D4 \u05D6\u05DE\u05D9\u05DF \u05D2\u05DD \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA.","language.suggest.cta":"\u05DC\u05E7\u05E8\u05D9\u05D0\u05D4 \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA","language.suggest.dismiss":"\u05E1\u05D2\u05D9\u05E8\u05D4"},fa:{"language.suggest.text":"\u0627\u06CC\u0646 \u0635\u0641\u062D\u0647 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC \u0647\u0645 \u062F\u0631 \u062F\u0633\u062A\u0631\u0633 \u0627\u0633\u062A.","language.suggest.cta":"\u062E\u0648\u0627\u0646\u062F\u0646 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC","language.suggest.dismiss":"\u0628\u0633\u062A\u0646"},ur:{"language.suggest.text":"\u06CC\u06C1 \u0635\u0641\u062D\u06C1 \u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u0628\u06BE\u06CC \u062F\u0633\u062A\u06CC\u0627\u0628 \u06C1\u06D2\u06D4","language.suggest.cta":"\u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u067E\u0691\u06BE\u06CC\u06BA","language.suggest.dismiss":"\u0628\u0646\u062F \u06A9\u0631\u06CC\u06BA"}};var qs={"language.label":"Language","language.suggest.text":"This page is also available in English.","language.suggest.cta":"Read in English","language.suggest.dismiss":"Dismiss","theme.label":"Theme","theme.system":"System","theme.light":"Light","theme.dark":"Dark","donate.eyebrow":"Donate in crypto","donate.title":"Keep SecureBit independent","donate.description":"Every donation goes to development and audits.","donate.copy":"Copy","donate.copied":"Copied","donate.net.usdt":"USDT \xB7 Tron (TRC-20)","donate.net.btc":"Bitcoin network","donate.net.eth":"Ethereum mainnet","donate.warn.usdt":"Send only USDT on Tron (TRC-20).","donate.warn.btc":"Send only BTC on the Bitcoin network.","donate.warn.eth":"Send only ETH on Ethereum mainnet.","donate.qrAlt":"QR code of the {coin} donation address","community.title":"Join the future of privacy","community.description":"SecureBit grows thanks to its community. Your ideas and feedback shape the future of secure communication - built in the open, with complete ASN.1 validation end-to-end.","community.github":"GitHub Repository","community.feedback":"Feedback","unique.eyebrow":"What sets us apart","unique.heading":"Why SecureBit is unique","unique.s1.titleTop":"Layered","unique.s1.titleBottom":"encryption core","unique.s1.collapsed":"Encryption core","unique.s1.desc":"ECDH P-384 key exchange, AES-256-GCM payloads, ECDSA signatures and full ASN.1 validation - composed into one hardened pipeline.","unique.s1.tags":["ECDH P-384","AES-256-GCM","ECDSA","ASN.1"],"unique.s2.titleTop":"Pure P2P","unique.s2.titleBottom":"WebRTC","unique.s2.collapsed":"Pure P2P WebRTC","unique.s2.desc":"Messages travel directly between devices over WebRTC. No relay holds your data - the server only helps two peers find each other.","unique.s2.tags":["DTLS 1.3","No relay"],"unique.s3.titleTop":"Perfect","unique.s3.titleBottom":"forward secrecy","unique.s3.collapsed":"Forward secrecy","unique.s3.desc":"Session keys rotate continuously and are discarded after use, so a single compromised key can never unlock past conversations.","unique.s3.tags":["Ephemeral keys","Auto-rotate"],"unique.s4.titleTop":"Traffic","unique.s4.titleBottom":"obfuscation","unique.s4.collapsed":"Traffic obfuscation","unique.s4.desc":"Packet sizes and timing are padded and randomized, hiding metadata patterns from anyone watching the wire.","unique.s4.tags":["Packet padding","Timing jitter"],"unique.s5.titleTop":"Zero data","unique.s5.titleBottom":"collection","unique.s5.collapsed":"Zero data collection","unique.s5.desc":"No accounts, no logs, no message storage. There is nothing on a server to leak, subpoena, or sell.","unique.s5.tags":["No accounts","No logs"],"partners.eyebrow":"Partners & ecosystem","partners.heading":"Trusted by our partners","partners.aegis.desc":"Capital partner securing confidential financial communications across its portfolio.","partners.aegis.role":"Strategic backer","partners.furilabs.desc":"Privacy-first Linux phones that ship SecureBit as a default secure channel.","partners.furilabs.role":"Technology partner","partners.inviteTitle":"Become a partner","partners.inviteDesc":"Building privacy hardware or infrastructure? Let's integrate SecureBit.","partners.inviteCta":"Start a conversation","roadmap.eyebrow":"Development Roadmap","roadmap.heading":"The evolution of SecureBit","roadmap.subheading":"From the first prototype to a quantum-resistant, decentralized network - with complete ASN.1 validation at every layer.","roadmap.progress":"{shipped} of {total} milestones shipped","roadmap.upcoming":"{upcoming} on the way","roadmap.keyFeatures":"Key features","hero.headlineTop":"A direct line","hero.headlineBottom":"only you two can read.","hero.subheading":"Keys are generated on your device and exchanged peer-to-peer. No accounts, no servers storing your messages.","hero.diagramAlt":"A direct encrypted line to one peer, with two more peers joining the mesh","intro.createTitle":"Create a new channel","intro.createDesc":"Your device generates the keys and a one-time invitation. Nothing touches a server.","intro.createCta":"Generate keys & invitation","intro.joinTitle":"Join a channel","intro.joinDesc":"Scan your peer's QR with your camera, or paste their invitation code.","intro.scanTitle":"Scan QR with camera","intro.scanSubtitle":"Fastest - point at your peer's screen","intro.orPasteCode":"Or paste the code","intro.pastePlaceholder":"Paste invitation code here\u2026","intro.connect":"Connect","intro.connecting":"Processing\u2026","roadmap.r1.title":"Start of Development","roadmap.r1.sub":"Idea, prototype, and infrastructure setup","roadmap.r1.date":"Early 2025","roadmap.r1.features":["Concept and requirements formation","Stack selection: WebRTC, P2P, cryptography","First messaging prototypes","Repository creation and CI","Basic encryption architecture","UX/UI design"],"roadmap.r2.title":"Alpha Release","roadmap.r2.sub":"First public alpha: basic chat and key exchange","roadmap.r2.date":"Spring 2025","roadmap.r2.features":["Basic P2P messaging via WebRTC","Simple E2E encryption (demo scheme)","Stable signaling and reconnection","Minimal UX for testing","Feedback collection from early testers"],"roadmap.r3.title":"Security Hardened","roadmap.r3.sub":"Security strengthening and stable branch release","roadmap.r3.date":"Summer 2025","roadmap.r3.features":["ECDH/ECDSA implementation in production","Perfect Forward Secrecy and key rotation","Improved authentication checks","File encryption and large payload transfers","Audit of basic cryptoprocesses"],"roadmap.r4.title":"Scaling & Stability","roadmap.r4.sub":"Network scaling and stability improvements","roadmap.r4.date":"Fall 2025","roadmap.r4.features":["Optimization of P2P connections and NAT traversal","Reconnection mechanisms and message queues","Reduced battery consumption on mobile","Multi-device synchronization support","Monitoring and logging tools for developers"],"roadmap.r5.title":"Privacy-first Release","roadmap.r5.sub":"Focus on privacy: minimizing metadata","roadmap.r5.date":"Winter 2025","roadmap.r5.features":["Metadata protection and fingerprint reduction","Experiments with onion routing and DHT","Options for anonymous connections","Preparation for open code audit","Improved user verification processes"],"roadmap.r6.title":"Enhanced Security Edition","roadmap.r6.sub":"18-layer military-grade cryptography with complete ASN.1 validation","roadmap.r6.date":"Late 2025","roadmap.r6.features":["ECDH + DTLS + SAS triple-layer security","ECDH P-384 + AES-GCM 256-bit encryption","DTLS fingerprint verification","SAS (Short Authentication String) verification","Perfect Forward Secrecy with key rotation","Enhanced MITM attack prevention","Complete ASN.1 DER validation","OID and EC point verification","SPKI structure validation","P2P WebRTC architecture","Metadata protection","100% open source code"],"roadmap.r7.title":"Desktop Edition","roadmap.r7.sub":"Native desktop apps for Windows, macOS, and Linux","roadmap.r7.date":"Early 2026","roadmap.r7.features":["Windows desktop app (Tauri v2)","macOS desktop app (Tauri v2)","Linux AppImage support (Tauri v2)","Real-time notifications","Automatic reconnection","Cross-device synchronization","Improved UX/UI","Support for files up to 100MB"],"roadmap.r8.title":"Secure Voice & Calls","roadmap.r8.sub":"Encrypted voice messages, audio calls, and video calls","roadmap.r8.date":"Early 2026","roadmap.r8.features":["End-to-end encrypted voice messages","1:1 encrypted audio calls (WebRTC)","1:1 encrypted video calls (WebRTC)","Perfect Forward Secrecy for live media","SRTP/DTLS-protected media streams","In-call SAS verification","Call notifications and auto-reconnection","Low-latency P2P media"],"roadmap.r9.title":"Group Communications","roadmap.r9.sub":"Group chats with preserved privacy","roadmap.r9.date":"Now","roadmap.r9.features":["P2P group chats up to 8 participants","Mesh delivery with signed relay fallback","One group safety code, compared by everyone","Commit-then-reveal ceremony against code grinding","Per-group identity keys, ephemeral by design","Signed membership with epoch ordering","Signed messages, so a split transcript is provable","No server, no shared group key, no history"],"roadmap.r10.title":"Mobile Edition","roadmap.r10.sub":"Native mobile apps for iOS and Android","roadmap.r10.date":"Q2 2027","roadmap.r10.features":["iOS native app (Swift/SwiftUI)","Android native app (Kotlin/Jetpack Compose)","PWA support for mobile browsers","Real-time push notifications","Battery optimization","Mobile-optimized UX/UI","Offline message queuing","Biometric authentication"],"roadmap.r11.title":"Quantum-Resistant Edition","roadmap.r11.sub":"Protection against quantum computers","roadmap.r11.date":"Q4 2027","roadmap.r11.features":["Post-quantum cryptography CRYSTALS-Kyber","SPHINCS+ digital signatures","Hybrid scheme: classic + PQ","Quantum-safe key exchange","Updated hashing algorithms","Migration of existing sessions","Compatibility with v5.x","Quantum-resistant protocols"],"roadmap.r12.title":"Decentralized Network","roadmap.r12.sub":"Fully decentralized network","roadmap.r12.date":"2028","roadmap.r12.features":["Node mesh network","DHT for peer discovery","Built-in onion routing","Tokenomics and node incentives","Governance via DAO","Interoperability with other networks","Cross-platform compatibility","Self-healing network"],"roadmap.r13.title":"AI Privacy Assistant","roadmap.r13.sub":"AI for privacy and security","roadmap.r13.date":"2028+","roadmap.r13.features":["Local AI threat analysis","Automatic MITM detection","Adaptive cryptography","Personalized security recommendations","Zero-knowledge machine learning","Private AI assistant","Predictive security","Autonomous attack protection"],"handshake.step1":"Generating ECDH P-384 key pair","handshake.step2":"Deriving verification code","handshake.step3":"Pinning Perfect Forward Secrecy","handshake.securingTitle":"Securing your channel","handshake.answerTitle":"Building your answer","handshake.securingDesc":"Forging keys strong enough to resist tampering.","handshake.shareTitle":"Share your invitation","handshake.sendAnswerTitle":"Send back your answer","handshake.shareDesc":"Show the QR or send the code to your peer. It is one-time and expires shortly.","handshake.sendAnswerDesc":"Give this answer to the channel creator so they can finish the handshake.","handshake.establish":"Establish connection","handshake.thenReceive":"Then receive the answer your peer sends back","handshake.pasteAnswerPlaceholder":"Paste peer's answer code\u2026","handshake.answerSentNote":"Waiting for the creator to connect. The chat opens automatically.","handshake.qrHint":"Keep this open until your peer captures the code.","handshake.qrHintFrames":"The handshake is split across {frames} frames - keep this open until your peer captures all of them.","verify.placeholder":"Type code here","verify.confirm":"Confirm code","verify.confirmed":"Confirmed","verify.pending":"Pending","verify.waiting":"Waiting for code\u2026","sasv.title":"Verify your peer","sasv.titleDone":"Peer verified","sasv.desc":"Read the code aloud over a call or in person. Continue only if your peer sees the same digits.","sasv.descDone":"You both confirmed the same code. The connection is authenticated.","sasv.enter":"Enter the code","sasv.match":"Match","sasv.noMatch":"Doesn't match","sasv.you":"You","sasv.peer":"Peer","sasv.waitingPeer":"Waiting for peer\u2026","sasv.codesDiffer":"Codes don't match","sasv.opening":"Opening secure chat","pwa.bannerTitle":"Install SecureBit.chat","pwa.bannerDesc":"Get the native app experience with enhanced security","pwa.install":"Install","pwa.dismiss":"Dismiss","pwa.close":"Close","pwa.iosTitle":"Install on iOS","pwa.iosStep1":"Tap the Share button","pwa.iosStep1Hint":"Usually at the bottom of Safari","pwa.iosStep2":'Find "Add to Home Screen"',"pwa.iosStep2Hint":"Scroll down in the share menu","pwa.iosStep3":'Tap "Add"',"pwa.iosStep3Hint":"Confirm to install SecureBit.chat","pwa.genericTitle":"Install SecureBit","pwa.genericDesc":"Your browser handles installs its own way. Pick the steps that match yours.","pwa.androidChromeHint":"Tap \u22EE in the top corner, then \u201CInstall app\u201D","pwa.androidOtherHint":"Tap the menu, then \u201CAdd to Home screen\u201D","pwa.gotIt":"Got it","pwa.installedTitle":"App Installed!","pwa.installedIos":"iOS App installed! Open from home screen.","pwa.installedGeneric":"SecureBit.chat is now on your device","pwa.anytimeTitle":"Install Anytime","pwa.anytimeDesc":"You can still install SecureBit.chat from your browser's menu for the best experience.","pwa.ok":"OK","step.open":"Step 1 \xB7 open a channel","step.exchange":"Step 2 \xB7 exchange","step.verification":"Step 3 \xB7 verification","action.create":"Create","action.join":"Join","action.back":"Back","action.copy":"Copy","action.copied":"Copied","action.scan":"Scan","action.downloadDesktop":"Download desktop app","action.advancedSettings":"Advanced settings","cred.reveal":"Click to reveal - keep this code private","cred.orCopy":"Or copy the code","qr.title":"Scan QR code","qr.subtitle":"Point your camera at their QR","qr.scanning":"Scanning\u2026","qr.hint":"Hold steady until all parts are captured. Camera access is local - nothing is uploaded.","mesh.you":"you","mesh.peer":"peer \xB7 session 1","mesh.joined2":"mara joined \xB7 +2","mesh.joined3":"tobi joined \xB7 +3","ice.title":"Network settings","ice.subtitle":"Configured locally - never shared with your peer","ice.intro":"SecureBit uses public STUN servers by default to negotiate the peer-to-peer link. Point it at your own STUN/TURN if you self-host.","ice.publicTitle":"Public servers (default)","ice.publicDesc":"Zero-config. Good for most users.","ice.customTitle":"My own STUN/TURN servers","ice.customDesc":"Up to {max} servers.","ice.turnNote":"A TURN relay sees both peers' IP and traffic timing - but never message contents, which stay end-to-end encrypted. Prefer ","ice.turnNoteTls":" (TLS).","ice.test":"Test servers","ice.testing":"Testing\u2026","ice.relayTitle":"Relay-only mode","ice.relayBadge":"MAX PRIVACY","ice.relayDesc":"Routes all traffic through TURN so your IP is never exposed to the peer. Requires a TURN server.","ice.relayWarning":"Relay-only is enabled but no TURN server is configured. The connection will not be able to start.","ice.persist":"Save on this device","ice.persistDesc":"Stored encrypted in this browser. Leave off to use only for this session.","ice.forget":"Forget saved","ice.cancel":"Cancel","ice.apply":"Apply","ice.errUnavailable":"WebRTC is not available in this browser","ice.errInvalid":"Invalid server configuration","update.title":"Update available","update.desc":"A newer version of SecureBit has been detected.","update.currentVersion":"Current version","update.newVersion":"New version","update.now":"Update now","update.later":"Later","update.unknown":"N/A","update.stepSaving":"Saving data...","update.stepSwCaches":"Clearing Service Worker caches...","update.stepSwUnregister":"Unregistering Service Workers...","update.stepBrowserCache":"Clearing browser cache...","update.stepVersion":"Updating version...","update.stepReload":"Reloading application...","update.error":"Update error. Please refresh the page manually (Ctrl+F5 or Cmd+Shift+R)","update.confirmSkip":"New version available. Update is recommended for security and stability. Continue without update?","offline.backOnline":"Back online","offline.mode":"Offline mode","offline.dismiss":"Dismiss","offline.lostTitle":"Connection lost","offline.lostDesc":"SecureBit is now in offline mode. Some features are limited, but your data stays safe.","offline.point1":"Your session and keys are preserved","offline.point2":"No data is stored on servers","offline.point3":"Messages & files sync when you reconnect","offline.continue":"Continue offline","offline.restoredTitle":"When you reconnect","offline.restoredDesc":"A dropped connection costs you nothing. SecureBit queues everything locally and resumes the encrypted session the instant you're back online.","offline.r1Title":"Your messages get delivered","offline.r1Desc":"Everything you wrote while offline is sent to your contact automatically.","offline.r2Title":"Files finish transferring","offline.r2Desc":"Uploads resume from where they stopped - no need to resend.","offline.r3Title":"Their messages & files arrive","offline.r3Desc":"Whatever your contact sent during the outage is delivered to you in order.","offline.r4Title":"Nothing is lost","offline.r4Desc":"After reconnect there's no gap - the conversation continues exactly where it paused.","offline.gotIt":"Got it","qr.showTitle":"Show QR code","qr.showSubtitle":"Full-screen \xB7 let your peer scan","qr.showSubtitleFrames":"Full-screen \xB7 let your peer scan all {frames} frames","notify.enabledBody":"Notifications enabled! You will receive alerts for new messages.","notify.workingBody":"Notifications are working! You will receive alerts for new messages.","pw.label":"Password input","pw.placeholder":"Enter password...","pw.decrypt":"Decrypt","pw.cancel":"Cancel","file.title":"File transfers","file.drop":"Drag & drop files here","file.dropHint":"Encrypted end-to-end before transfer \xB7 up to 100 MB","file.browse":"Browse device","file.incoming":"Incoming file request","file.accept":"Accept","file.reject":"Reject","file.download":"Download","file.notReady":"Connection not ready","file.tooLarge":"File too large","file.typeNotAllowed":"File type not allowed","file.maxConcurrent":"Maximum concurrent transfers","file.gone":"This file is no longer available for download.","call.incoming":"Incoming call","call.incomingVideo":"Incoming video call","call.encrypted":"Encrypted call","call.encryptedShort":"Encrypted","call.peer":"Secure peer","call.connecting":"Connecting\u2026","call.ringing":"Ringing\u2026","call.accept":"Accept","call.decline":"Decline","call.end":"End call","call.camera":"Camera","call.cameraOff":"Camera off","call.peerCameraOff":"Peer's camera is off","call.flipCamera":"Flip camera","call.addVideo":"Add video","call.video":"Video","call.muted":"Muted","call.expand":"Expand","call.minimize":"Minimize","call.quality":"Connection quality","call.qualityExcellent":"Excellent","call.videoPrefix":"Video \xB7 ","call.voicePrefix":"Voice \xB7 ","group.new":"New group","group.create":"Create group","group.join":"Join group","group.name":"Group name","group.nameTooLong":"The group name is too long.","group.capacity":"Up to {max} people, peer to peer. Everyone will compare one safety code before the group opens.","group.invite":"Invite","group.inviteMore":"Invite more members","group.invitePeople":"Invite {count} people","group.invitation":"Group invitation","group.addMembers":"Add members","group.roomFor":"Room for {remaining} more. Everyone will compare a new group code once they join.","group.membersCount":"{count} members","group.member":"Member","group.members":"Members","group.remove":"Remove {name}","group.message":"Message {name}","group.leave":"Leave","group.leaveThis":"Leave this group","group.cancel":"Cancel group","group.close":"Close","group.cancelBtn":"Cancel","group.decline":"Decline","group.working":"Working\u2026","group.sasTitle":"Group safety code","group.sasEveryone":"Everyone sees this code","group.sasCompare":"Compare the group code with every member to open this group.","group.sasReadAloud":"Read these digits aloud to ","group.sasWarning":"If even one member reads a different code, someone is sitting between you. Cancel the group - do not confirm.","group.confirmFirst":"Confirm the group code first","group.codeSuffix":" \xB7 code {code}","group.exchangingNonces":"Exchanging nonces\u2026","group.waitingCommit":"Waiting for every member to commit\u2026","group.waitingJoin":"Waiting for the other members to join\u2026","group.emptyChat":"Nothing here yet. Messages are signed by their sender and travel over each member's own encrypted link.","group.noVerified":"No verified chats yet. Open a 1:1 chat and compare its safety code first - a group is built out of connections you have already checked.","group.noMoreToAdd":"No other verified chats to add. Open a 1:1 chat and compare its safety code first.","group.directLink":"Direct peer-to-peer link","group.noDirectLink":"No direct link yet - messages are relayed by another member while one is being built","group.relayNote":"Some members have no direct link to you yet. Their messages travel through another member, who can see that you are talking but cannot read past the signature or change what you said. The group keeps trying to connect them directly.","group.relayOnlyOff":"Relay-only mode is off, so each member connects to you directly and learns your IP address - including members somebody else invited. Turn it on in network settings if that matters here.","group.memberOffline":"{name} is offline and will not receive messages. They are still a member - removing them re-keys the group.","group.joinNote":"Other members will learn your presence in this group. There is no message history to catch up on - a group starts empty.","group.inviteSentNote":"The group keeps working until they accept. There is no history for them to catch up on - they will only see what is sent from now on.","group.errNotCreated":"Group not created","group.errNobodyAccepted":"Nobody accepted the invitation in time.","group.errNothingSent":"Nothing was sent and nothing was verified. Close this and try again once everyone is connected.","group.errNotFormed":"This group could not be formed.","group.errFull":"This group is full.","group.errInviteFailed":"The invitation could not be sent - that chat is not connected.","group.errNoMemberList":"The group owner never sent the member list.","group.errUnsignedList":"The member list was not signed by the group owner. Do not retry - tell them.","group.errNotOwner":"Someone other than the group owner tried to change the members.","hdr.tagline":"End-to-end encrypted","hdr.netSettings":"Advanced network settings","hdr.netSettingsTitle":"Advanced network settings (STUN/TURN)","hdr.disconnect":"Disconnect","status.connected":"Connected","status.connecting":"Connecting...","status.notConnected":"Not connected","status.reconnecting":"Reconnecting...","status.retrying":"Retrying...","status.verifying":"Verifying...","status.peerDisconnected":"Peer disconnected","sec.replayProtection":"Replay Protection","sec.messageIntegrity":"Message Integrity (HMAC)","sec.forwardSecrecy":"Perfect Forward Secrecy","sec.metadataProtection":"Metadata Protection","sec.trafficObfuscation":"Traffic Obfuscation","sec.realTests":"Real Cryptographic Tests","sec.simulatedData":"Simulated Data","sec.testPassed":"Test passed","sec.testFailed":"Test failed or unavailable","sec.verificationDone":"Real cryptographic verification completed","sec.verificationInProgress":"Security verification in progress...","sec.verificationWait":`Security verification in progress...
 Please wait for real-time cryptographic verification to complete.`,"sec.verificationUnavailable":"Security verification not available","chat.placeholder":"Type an encrypted message\u2026","chat.send":"Send message","chat.sendFiles":"Send files","chat.hideFiles":"Hide files","chat.recordVoice":"Record voice message","chat.sendVoice":"Send voice message","chat.discard":"Discard","chat.codeBlock":"Send as a code block (expands the input)","chat.codeHint":"Code snippet \xB7 formatting preserved \xB7 \u2318\u21B5 to send","chat.viewOnce":"View once","chat.viewOnceTitle":"View once - vanishes after the peer reads it","chat.viewOncePrefix":"View once \xB7 ","chat.viewOnceTap":"View once \xB7 tap to reveal","chat.viewedOnce":"Viewed once","chat.disappearing":"Disappearing message - deletes on both sides","chat.disappearAfter":"Disappear after","chat.visibleFor":"Visible for","chat.timerPrefix":"Timer \xB7 ","chat.expired":"This message has expired","chat.deleteForEveryone":"Delete for everyone","chat.sending":"Sending","chat.delivered":"Delivered","chat.notSent":"Not sent","chat.notSentReason":"Not sent - the secure channel is not ready. Reconnect to continue.","chat.encrypted":"Encrypted","chat.decrypted":"Decrypted","chat.encryptedOnDevice":"Encrypted on your device","chat.uploading":"Uploading","chat.downloading":"Downloading","chat.transferring":"Transferring\u2026","chat.copied":"Copied!","chat.collapse":"Collapse","chat.closeMenu":"Close menu","chat.newChat":"New chat","chat.newGroup":"New group","chat.createGroup":"Create a group","chat.groupChats":"Group chats","chat.secureChat":"Secure chat","chat.nameThis":"Name this chat","chat.rename":"Rename chat (local only)","chat.renameHint":"Double-click to rename","chat.localLabel":"Local label \xB7 stored only on this device","chat.setStatus":"Set your status","chat.yourStatusPrefix":"Your status - ","chat.meshHint":"Up to 8 peers \xB7 P2P mesh","chat.offline":"Offline","chat.noNetwork":"No network \xB7 reconnecting","chat.startVoiceCall":"Start encrypted voice call","chat.startVideoCall":"Start encrypted video call","chat.verifyForCalls":"Verify the session to enable calls","chat.e2eeNote":"Every message is end-to-end encrypted on your device before it leaves.","chat.peersOnly":"Sent end-to-end to connected peers only - never stored on a server.","flow.invitationCreated":"Secure invitation created","flow.invitationCreatedBang":"Secure invitation created and encrypted!","flow.responseCreated":"Secure response created","flow.responseCreatedBang":"Secure response created!","flow.sendInvitation":"Send the invitation code to your interlocutor via a secure channel (voice call, SMS, etc.).","flow.sendResponse":"Send the response code to the initiator via a secure channel or let them scan the QR code below.","flow.sendEncryptedCode":"Send the encrypted code","flow.sendTheResponse":"Send the response","flow.pasteOrWrite":"Paste or write code\u2026","flow.processingInvitation":"Processing the secure invitation...","flow.processingResponse":"Processing the secure response...","flow.finalizing":"Finalizing the secure connection...","flow.channelEstablished":"Secure channel established","flow.channelReady":"Secure channel is ready","flow.restoring":"Restoring connection\u2026","flow.invitationCaptured":"Invitation captured.","err.needInvitation":"You need to insert the invitation code from your interlocutor.","err.needResponse":"You need to insert the response code from your interlocutor.","err.responseFormat":"Invalid response format - please check the code","err.responseNoKey":"Invalid response code - missing or corrupted cryptographic key. Please check the code and try again.","err.responseNoSignKey":"Invalid response code - missing signature verification key. Please check the code and try again.","err.responseOutdated":"Response data is outdated - please use a fresh invitation","err.setupError":"Connection setup error","err.notReady":"Connection not ready","err.securityBreach":"Security breach detected - connection rejected","err.securityValidation":"Security validation failed - possible attack detected","err.retiredQr":"This QR code uses a retired format that could not transfer the invitation. Ask your peer to generate a new one, or use copy/paste.","err.compressedQrNote":"Compressed QR may omit SDP for brevity. Use copy/paste if connection fails.","err.inviteNotConnected":"The invitation could not be sent. That chat is not connected right now.","err.inviteNotConnectedRetry":"The invitation could not be sent. That chat is not connected right now - reopen it and try again.","err.nobodyAccepted":"Nobody accepted the invitation. The group is unchanged.","err.noAudio":"No audio captured - check microphone permission and try again.","err.voiceNeedsConnection":"Voice message needs an active secure connection. Reconnect and try again.","err.voiceRestoring":"Restoring the connection - try sending the voice message again in a moment.","err.fileTooLarge":"File too large","sas.safetyNumber":"Safety number","sas.incorrect":"Incorrect code. Check it with your peer and try again.","sas.noMatch":"The codes do not match","sas.makeSure":"Make sure the codes match exactly.","sas.tooManyAttempts":"Too many incorrect attempts. Session reset for safety.","sas.verificationFailed":"Verification failed","sas.verified":"Verified \xB7 Perfect Forward Secrecy","sas.runVerification":"Run security verification","sec.panelTitle":"Network & crypto details","sec.security":"Security","sec.transport":"Transport","sec.keyExchange":"Key exchange","sec.allEnabled":"All security features enabled by default","sec.realTimeNote":"Real-time verification using actual cryptographic functions - no mock data.","sec.simulatedWarning":"Warning: connection may not be fully established - values may be simulated.","dl.title":"Download SecureBit","dl.free":"Free \xB7 open source","dl.soon":"Mobile (iOS, Android) and browser extensions (Chrome, Firefox, Opera) are coming soon.","chatHdr.chat":"Chat","chatHdr.chats":"Chats","chatHdr.newChat":"+ New","chatHdr.secure":"Secure","chatHdr.p2pSub":"P2P \xB7 end-to-end encrypted","chatHdr.save":"Save","chatHdr.close":"Close","chatHdr.expand":"Expand","chatHdr.you":"You","chatHdr.qrCode":"QR code","chat.disconnected":"Disconnected","call.mute":"Mute","call.endShort":"End","group.add":"Add","group.send":"Send","sec.pfsShort":"Perfect Forward Secrecy","sec.cipher":"Cipher","chat.close":"Close","file.needConnection":"File transfer needs an open connection","presence.available":"Available","presence.away":"Away","presence.busy":"Busy","presence.offline":"Offline","presence.invisible":"Invisible","presence.availableDesc":"Online and reachable","presence.awayDesc":"Idle \xB7 stepped away","presence.busyDesc":"Do not disturb","presence.invisibleDesc":"Appear offline to peers","presence.online":"Online","conn.p2p":"P2P \xB7 connected","conn.verifying":"Verifying\u2026","conn.connecting":"Connecting\u2026","conn.reconnecting":"Reconnecting\u2026","conn.peerDisconnected":"Peer disconnected","conn.disconnected":"Disconnected","chat.defaultLabel":"Chat","groupPhase.forming":"Forming\u2026","groupPhase.commitments":"Exchanging commitments\u2026","groupPhase.revealing":"Revealing\u2026","groupPhase.compare":"Compare the group code","groupPhase.ready":"Group ready","groupPhase.failed":"Group failed","call.qualityGood":"Good","call.qualityFair":"Fair","call.qualityWeak":"Weak","msg.code":"Code","msg.timer":"Timer","msg.voice":"Voice","msg.play":"Play","msg.sent":"Sent","msg.read":"Read","report.title":"Real-time security verification","report.active":"Active","report.testsPassed":"Tests passed","report.verifiedAt":"Verified at","report.source":"Source","secTest.verifyECDHKeyExchange":"ECDH key exchange","secTest.verifyECDSASignatures":"ECDSA digital signatures","secTest.verifyEncryption":"AES-GCM encryption","secTest.verifyMessageIntegrity":"Message integrity","secTest.verifyPerfectForwardSecrecy":"Perfect forward secrecy","secTest.verifyPFS":"Perfect forward secrecy","secTest.verifyReplayProtection":"Replay protection","secTest.verifyDTLSFingerprint":"DTLS fingerprint","secTest.verifySASVerification":"SAS verification","secTest.verifyMetadataProtection":"Metadata protection","secTest.verifyTrafficObfuscation":"Traffic obfuscation","secTest.verifyPacketPadding":"Packet padding","secTest.verifyNestedEncryption":"Nested encryption","secTest.verifyNonExtractableKeys":"Non-extractable keys","secTest.verifyRateLimiting":"Rate limiting","secTest.verifyMutualAuth":"Mutual authentication","secTest.verifyAuthProof":"Authentication proof","secTest.verifyEnhancedValidation":"Enhanced validation","secTest.verifyAdvancedFeatures":"Advanced features","secTest.verifySignature":"Signature check","secDetail.Security system initializing...":"Security system initializing...","secDetail.Nested encryption active":"Nested encryption active","secDetail.Nested encryption failed":"Nested encryption failed","secDetail.Packet padding active":"Packet padding active","secDetail.Packet padding failed":"Packet padding failed","secDetail.Advanced features active":"Advanced features active","secDetail.Advanced features failed":"Advanced features failed","secDetail.No encryption key available":"No encryption key available","secDetail.AES-GCM encryption/decryption working correctly":"AES-GCM encryption/decryption working correctly","secDetail.No ECDH key pair available":"No ECDH key pair available","secDetail.Key derivation failed":"Key derivation failed","secDetail.No ECDSA key pair available":"No ECDSA key pair available","secDetail.ECDSA digital signatures working correctly":"ECDSA digital signatures working correctly","secDetail.MAC key not available or invalid":"MAC key not available or invalid","secDetail.Rate limiter did not block a message over the limit":"Rate limiter did not block a message over the limit","secDetail.Rate limiter is not available":"Rate limiter is not available","secDetail.Replay protection is working correctly":"Replay protection is working correctly","secDetail.Replay protection not enabled":"Replay protection not enabled","secDetail.SAS code not available":"SAS code not available","secDetail.SAS verification code is valid and available":"SAS verification code is valid and available","secDetail.Traffic obfuscation is working correctly":"Traffic obfuscation is working correctly","secDetail.Traffic obfuscation not enabled":"Traffic obfuscation not enabled","secDetail.No non-extractable ephemeral ECDH key pair for this session":"No non-extractable ephemeral ECDH key pair for this session","secDetail.Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation":"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation","msg.pause":"Pause","msg.failed":"Failed","groupErr.timeout":"A member stopped responding before the code was ready.","groupErr.keyMismatch":"A member's key did not match the identity claimed for it.","groupErr.revealMismatch":"A member's revealed value did not match what they committed to.","groupErr.commitChanged":"A member changed their commitment part-way through.","groupErr.missingKey":"A member was listed whose key never arrived.","groupErr.outsider":"A frame arrived from someone outside the group.","groupErr.limit":"A group is limited to eight members.","groupErr.tooLarge":"A message was too large to send to the group.","fileType.text":"Plain text","fileType.images":"Images","fileType.archives":"Archives","fileType.voice":"Voice messages","fileType.unsupported":"Unsupported","qrScan.title":"Scan QR Code","qrScan.auto":"Auto Mode","qrScan.reset":"Reset","qrScan.autoScroll":"Auto-scrolling enabled","qrScan.starting":"Starting camera...","qrScan.point":"Point camera at QR code","qrScan.tapFocus":"Tap screen to focus","qrScan.focusing":"Focusing...","iceErr.notArray":"Server list must be an array","iceErr.invalidJson":"Invalid JSON","iceErr.tooMany":"Too many servers (max {max})","iceErr.invalidEntry":"{label}: invalid entry","iceErr.urlCount":"{label}: between 1 and {max} URLs required","iceErr.turnCreds":"{label}: TURN servers usually require a username and credential","iceUrl.notString":"URL must be a string","iceUrl.empty":"URL is empty","iceUrl.tooLong":"URL is too long","iceUrl.badChars":"URL contains invalid characters","iceUrl.badScheme":"URL must start with stun:, stuns:, turn: or turns:","iceUrl.badQuery":"URL has an invalid query","iceUrl.noHost":"URL is missing a host","iceUrl.badHost":"URL has an invalid host or port","iceUrl.badTransport":"URL query must be transport=udp or transport=tcp","msg.off":"Off","file.consentUnavailable":"User consent unavailable","secLevel.MAXIMUM":"MAXIMUM","secLevel.INITIALIZING":"INITIALIZING","secLevel.ERROR":"ERROR","secLevel.UNKNOWN":"UNKNOWN","status.error":"Error","offline.disconnect":"Disconnect","offline.learnMore":"Learn more","pwa.installApp":"Install App","chat.onWeb":"You're on Web","groupCall.startVoice":"Start a group voice call","groupCall.startVideo":"Start a group video call","groupCall.join":"Join","groupCall.dismiss":"Not now","groupCall.leave":"Leave call","groupCall.you":"You","groupCall.connecting":"Connecting\u2026","groupCall.waitingLink":"Waiting for a direct link\u2026","groupCall.legFailed":"Could not connect","groupCall.startedVoice":"{name} started a voice call","groupCall.startedVideo":"{name} started a video call","groupCall.inCall":"{count} in the call","groupCall.err.permission_denied":"The call could not start - microphone and camera access is blocked. Allow it for this site, then try again.","groupCall.err.device_not_found":"The call could not start - no microphone was found on this device.","groupCall.err.device_busy":"The call could not start - your microphone is in use by another app. Close it and try again.","groupCall.err.media_failed":"The call could not start - the microphone could not be opened.","groupCall.err.call_in_progress":"A call is already running in this group. Join it instead of starting another.","groupCall.err.not_ready":"Confirm the group code before calling.","groupCall.speaking":"{name} is speaking","groupCall.pin":"Show {name} large","groupCall.unpin":"Back to everyone","groupCall.showEveryone":"Everyone","msg.after5s":"5s after reading","msg.after15s":"15s after reading","msg.after30s":"30s after reading","msg.after1m":"1m after reading","msg.sec30":"30 seconds","msg.min5":"5 minutes","msg.hour1":"1 hour","desktop.shareDesc":"Send the code to your peer. It is one-time and expires shortly.","desktop.invitationCreated":"Secure invitation created - send it to your peer.","desktop.joinDesc":"Paste your peer's invitation code to build your secure answer.","desktop.offerTag":"offer \xB7 copy text","desktop.answerTag":"answer \xB7 copy text","desktop.offerPlaceholder":"Invitation code will appear here\u2026","desktop.answerPlaceholder":"Response code will appear here\u2026","desktop.backToChats":"Back to chats","desktop.sendFeedback":"Send feedback","desktop.callsNeedVerified":"Calls require a verified secure channel.","desktop.noOpenChannel":"No open secure channel.","desktop.chatCarriesCall":"This chat is carrying a group call. Leave the group call before placing a 1:1 call.","desktop.err.permission_denied":"The call could not start - microphone and camera access is blocked. Allow it in system settings, then try again.","desktop.language":"Language","desktop.languageHint":"Applies at once. Messages already sent keep the words they were written in.","desktop.compareCode":"Compare the verification code with your peer and confirm if it matches.","desktop.verifyBeforeFiles":"Complete verification before sending files.","desktop.verifyBeforeSending":"Complete verification before sending messages.","desktop.disconnectedByBackend":"Connection securely disconnected.","desktop.restoreFailed":"Could not restore the connection. Closing this chat.","desktop.channelNotReady":"The data channel is not available yet. Wait for the connection to establish.","desktop.enterCode":"Enter the verification code to confirm.","desktop.noOffer":"No invitation found. Create one first.","desktop.notInitiator":"You did not create this connection, so there is no answer for you to apply.","desktop.decryptFailed":"A message could not be decrypted and was discarded.","desktop.badMessageFormat":"A malformed frame arrived and was discarded.","desktop.notSentNotReady":"Message not sent: the secure channel is not ready. Wait for verification to finish, or reconnect.","desktop.micDenied":"Microphone access was denied.","desktop.noChannelWait":"No open secure channel - wait for the connection to establish.","desktop.sasFailed":"Verification failed. A machine-in-the-middle may be present, so the connection was aborted.","desktop.sasOk":"Verification succeeded. This channel is authenticated end to end.","desktop.iceForgotten":"Saved servers forgotten. Using public ICE servers.","desktop.icePublic":"Using public ICE servers.","desktop.verificationInProgress":"Security verification is still running. Wait for it to finish.","desktop.fileGone":"This file is no longer available for download.","desktop.codeMismatch":"The verification codes do not match. Disconnecting for safety.","desktop.noLocalCode":"Verification failed: there is no locally derived code to compare against. Disconnecting for safety.","desktop.protocolViolation":"The peer claimed the code was confirmed before you confirmed it. Disconnecting for safety.","desktop.verificationRejected":"Verification rejected. The connection was aborted for safety.","secLevel.HIGH":"HIGH","secLevel.MEDIUM":"MEDIUM","secLevel.LOW":"LOW","desktop.rerun":"Re-run","desktop.ice.customDesc":"Up to {max} servers, one URL per line or JSON.","desktop.ice.persistDesc":"Stored locally on this device. Leave off to use only for this session.","desktop.group.leaveNote":"The other members are told you left. Nothing about this group is kept on this device afterwards - there is no server holding a copy to rejoin from, so you would need a fresh invitation.","desktop.sec.ecdsaOk":"Peer key package signature verified during the handshake (ECDSA P-384 / SHA-384)","desktop.sec.ecdsaNone":"No completed handshake","desktop.sec.ecdhOk":"Session keys derived from an ephemeral ECDH P-384 exchange via HKDF-SHA-256","desktop.sec.ecdhNone":"No session keys derived","desktop.sec.encryptionOk":"AES-GCM encryption and decryption verified inside the core","desktop.sec.encryptionNa":"The AES-GCM self-test could not be run","desktop.sec.integrityOk":"Message integrity verified (AES-GCM authentication)","desktop.sec.integrityNa":"The integrity self-test could not be run","desktop.sec.pfsOk":"Double Ratchet active - every message has a key of its own","desktop.sec.pfsNa":"Not measured","desktop.sec.replayOk":"Ratchet message keys are destroyed once used, so a captured frame cannot be replayed","desktop.sec.replayNa":"Not measured","desktop.sec.dtlsPinned":"Peer DTLS fingerprint pinned: {fp}","desktop.sec.dtlsNone":"No remote DTLS fingerprint available","desktop.sec.sasBoth":"Both peers confirmed the out-of-band safety code","desktop.sec.sasIncomplete":"The safety code has not been confirmed by both peers","desktop.sec.metadataOk":"A dedicated metadata key was derived (HKDF metadata-protection-v4)","desktop.sec.metadataNone":"No metadata key","desktop.sec.coverOn":"Cover traffic active: random fake frames (32-128 B every 15-30 s) on the ratcheted channel","desktop.sec.coverOff":"The cover traffic generator is not running","desktop.sec.coverUnsupported":"Cover traffic needs a Double Ratchet session (the peer is on an older release)","desktop.tagline":"End-to-end freedom","desktop.callsNotHere":"Calls are not available in this build yet. Messages, files and group chats work as usual."},js=globalThis.__SECUREBIT_I18N__||(globalThis.__SECUREBIT_I18N__=Object.create(null));js.en=qs;var Ws=globalThis.__SECUREBIT_I18N__||(globalThis.__SECUREBIT_I18N__=Object.create(null));function Dt(s){return Ws[s]||null}var Vi="securebit-locale";function Bi(s="/"){let e=String(s).split("/")[1];return Ke.includes(e)&&e!=="en"?e:null}function Ys(s=[]){for(let e of s){let t=String(e).toLowerCase(),r=Ke.find(a=>a.toLowerCase()===t);if(r)return r;let i=t.split("-")[0],n=Ke.find(a=>a.toLowerCase().split("-")[0]===i);if(n)return n}return null}function Xs({pathname:s="/",stored:e=null,languages:t=[]}={}){let r=Bi(s);return r||(Qs(s)?"en":e&&Ke.includes(e)?e:Ys(t)||"en")}function Qs(s){return s==="/"||s==="/index.html"}function Js(s,e="/"){let t=Bi(e),i=(t?String(e).slice(t.length+1):String(e)).replace(/^\/+/,"");return s==="en"?`/${i}`:`/${s}/${i}`}function Hi(s){try{localStorage.setItem(Vi,s)}catch{}}function Zs(){try{return localStorage.getItem(Vi)}catch{return null}}var Lt=null;function Ge(){if(Lt)return Lt;let s=typeof window>"u"?null:window;return!s||!s.location?"en":(Lt=Xs({pathname:s.location.pathname||"/",stored:Zs(),languages:s.navigator?.languages||[]}),Lt)}function ea(s=Ge()){return it[s]?.dir==="rtl"?"rtl":"ltr"}function Pt(s=Ge()){return ea(s)==="rtl"}function $i(s=Ge()){return Pt(s)?-1:1}function Oe(s,e=Ge()){let t=Dt(e)?.[s]??Dt("en")?.[s];return Array.isArray(t)?t:[]}function Gi({pathname:s="/",active:e="en"}={}){return Ke.map(t=>({code:t,href:Js(t,s),hrefLang:it[t]?.htmlLang||t,label:it[t]?.nativeName||t,abbr:it[t]?.abbr||t.toUpperCase(),dir:it[t]?.dir||"ltr",isCurrent:t===e}))}function f(s,e,t=Ge()){let r=Dt(t)?.[s]??zi[t]?.[s]??Dt("en")?.[s]??s;return e?String(r).replace(/\{(\w+)\}/g,(i,n)=>Object.prototype.hasOwnProperty.call(e,n)?String(e[n]):i):r}var Ie=class s{static#e=null;static#n=Symbol("SecureFileTransferContext");static getInstance(){return this.#e||(this.#e=new s),this.#e}#t=null;#r=!1;#i="high";setFileTransferSystem(e){if(!(e instanceof je))throw new Error("Invalid file transfer system instance");this.#t=e,this.#r=!0}getFileTransferSystem(){return this.#t}isActive(){return this.#r&&this.#t!==null}deactivate(){this.#r=!1,this.#t=null}getSecurityLevel(){return this.#i}setSecurityLevel(e){["low","medium","high"].includes(e)&&(this.#i=e)}},ee=class{static#e=new Set(["File size exceeds maximum limit","Unsupported file type","Transfer timeout","Connection lost","Invalid file data","File transfer failed","Transfer cancelled","Network error","File not found","Permission denied"]);static sanitizeError(e){let t=e.message||e;for(let r of this.#e)if(t.includes(r))return r;return console.error("\u{1F512} Internal file transfer error:",{message:e.message,stack:e.stack,timestamp:new Date().toISOString()}),"File transfer failed"}static logSecurityEvent(e,t={}){console.warn("\u{1F512} Security event:",{event:e,timestamp:new Date().toISOString(),...t})}},Ft=class{static async signFileMetadata(e,t){try{let i=new TextEncoder().encode(JSON.stringify({fileId:e.fileId,fileName:e.fileName,fileSize:e.fileSize,fileHash:e.fileHash,timestamp:e.timestamp,version:e.version||"2.0"})),n=await crypto.subtle.sign("RSASSA-PKCS1-v1_5",t,i);return Array.from(new Uint8Array(n))}catch(r){throw ee.logSecurityEvent("signature_failed",{error:r.message}),new Error("Failed to sign file metadata")}}static async verifyFileMetadata(e,t,r){try{let n=new TextEncoder().encode(JSON.stringify({fileId:e.fileId,fileName:e.fileName,fileSize:e.fileSize,fileHash:e.fileHash,timestamp:e.timestamp,version:e.version||"2.0"})),a=new Uint8Array(t),o=await crypto.subtle.verify("RSASSA-PKCS1-v1_5",r,a,n);return o||ee.logSecurityEvent("invalid_signature",{fileId:e.fileId}),o}catch(i){return ee.logSecurityEvent("verification_failed",{error:i.message}),!1}}},Kt=class{static MAX_MESSAGE_SIZE=1024*1024;static isMessageSizeValid(e){let t=JSON.stringify(e),r=new Blob([t]).size;if(r>this.MAX_MESSAGE_SIZE)throw ee.logSecurityEvent("message_too_large",{size:r,limit:this.MAX_MESSAGE_SIZE}),new Error("Message too large");return!0}},vr=class{constructor(){this.locks=new Map}async withLock(e,t){for(;this.locks.has(e);)await this.locks.get(e);let r,i=new Promise(n=>{r=n});this.locks.set(e,i);try{return await t()}finally{this.locks.delete(e),r()}}},nt=class{constructor(e,t){this.maxRequests=e,this.windowMs=t,this.requests=new Map}isAllowed(e){let t=Date.now(),r=t-this.windowMs;this.requests.has(e)||this.requests.set(e,[]);let n=this.requests.get(e).filter(a=>a>r);return this.requests.set(e,n),n.length>=this.maxRequests?(ee.logSecurityEvent("rate_limit_exceeded",{identifier:e,requestCount:n.length,limit:this.maxRequests}),!1):(n.push(t),!0)}},qe=class{static secureWipe(e){if(e instanceof ArrayBuffer){let t=new Uint8Array(e);crypto.getRandomValues(t)}else e instanceof Uint8Array&&crypto.getRandomValues(e)}static secureDelete(e,t){e[t]&&(this.secureWipe(e[t]),delete e[t])}},je=class{constructor(e,t,r,i,n,a){if(this.webrtcManager=e,this.onProgress=t,this.onComplete=r,this.onError=i,this.onFileReceived=n,this.onIncomingFileRequest=a,!e)throw new Error("webrtcManager is required for EnhancedSecureFileTransfer");Ie.getInstance().setFileTransferSystem(this),this.atomicOps=new vr,this.rateLimiter=new nt(10,6e4),this.signingKey=null,this.verificationKey=null,this.CHUNK_SIZE=16*1024,this.MAX_RECEIVE_CHUNK_SIZE=64*1024,this.MAX_FILE_SIZE=100*1024*1024,this.MAX_CONCURRENT_TRANSFERS=3,this.CHUNK_TIMEOUT=3e4,this.RETRY_ATTEMPTS=3,this.FILE_TYPE_RESTRICTIONS={pdf:{extensions:[".pdf"],mimeTypes:["application/pdf","application/x-pdf","application/acrobat"],maxSize:50*1024*1024,category:"PDF",description:"PDF"},text:{extensions:[".txt"],mimeTypes:["text/plain","application/txt"],maxSize:10*1024*1024,category:f("fileType.text"),description:"TXT"},images:{extensions:[".jpg",".jpeg",".png",".gif",".webp",".bmp",".ico"],mimeTypes:["image/jpeg","image/jpg","image/pjpeg","image/png","image/gif","image/webp","image/bmp","image/x-windows-bmp","image/x-icon","image/vnd.microsoft.icon"],maxSize:25*1024*1024,category:f("fileType.images"),description:"JPG, JPEG, PNG, GIF, WEBP, BMP, ICO"},archives:{extensions:[".zip"],mimeTypes:["application/zip","application/x-zip","application/x-zip-compressed","multipart/x-zip"],maxSize:100*1024*1024,category:f("fileType.archives"),description:"ZIP"},voice:{extensions:[".webm",".ogg",".oga",".opus",".m4a",".mp4",".mp3",".wav"],mimeTypes:["audio/webm","audio/ogg","audio/opus","audio/mp4","audio/mpeg","audio/mp3","audio/wav","audio/x-m4a","audio/aac"],maxSize:20*1024*1024,category:"Voice",description:f("fileType.voice")}},this.BLOCKED_EXTENSIONS=new Set([".exe",".bat",".cmd",".sh",".js",".msi",".dmg",".app",".jar",".scr",".ps1",".vbs",".html",".svg"]),this._genericMimeTypes=new Set(["application/octet-stream","application/binary"]),this._allowedMimeTypes=new Set;for(let o of Object.values(this.FILE_TYPE_RESTRICTIONS))for(let c of o.mimeTypes)this._allowedMimeTypes.add(c);this.activeTransfers=new Map,this.receivingTransfers=new Map,this.pendingIncomingTransfers=new Map,this.transferQueue=[],this.pendingChunks=new Map,this.incomingOfferLimiter=new nt(5,6e4),this.incomingChunkLimiter=new nt(6e4,6e4),this.incomingTransferChunkLimiters=new Map,this.MAX_INCOMING_CHUNKS_PER_TRANSFER_PER_MINUTE=3e4,this.MAX_PENDING_INCOMING_TRANSFERS=3,this.MAX_AUTO_ACCEPT_VOICE_SIZE=4*1024*1024,this.MAX_AUTO_ACCEPT_VOICE_SESSION_BYTES=64*1024*1024,this.autoAcceptedVoiceBytes=0,this.sessionKeys=new Map,this.processedChunks=new Set,this.transferNonces=new Map,this.receivedFileBuffers=new Map,this.MAX_RETAINED_RECEIVED_FILE_BUFFERS=3,this.setupFileMessageHandlers(),this.webrtcManager&&(this.webrtcManager.fileTransferSystem=this)}getFileType(e){let t=String(e?.name||"").toLowerCase(),r=t.lastIndexOf("."),i=r>=0?t.substring(r):"",n=String(e?.type||"").toLowerCase();for(let[a,o]of Object.entries(this.FILE_TYPE_RESTRICTIONS)){if(!o.extensions.includes(i))continue;if(!n||this._genericMimeTypes.has(n)||this._allowedMimeTypes.has(n))return{type:a,category:o.category,description:o.description,maxSize:o.maxSize,allowed:!0,extension:i,mimeType:n}}return{type:"blocked",category:f("fileType.unsupported"),description:"Allowed: JPG, JPEG, PNG, GIF, WEBP, BMP, ICO, PDF, TXT, ZIP",maxSize:this.MAX_FILE_SIZE,allowed:!1,extension:i,mimeType:n}}validateFile(e){let t=this.getFileType(e),r=[],n=String(e?.name||"").toLowerCase(),a=n.lastIndexOf("."),o=a>=0?n.substring(a):"";return this.BLOCKED_EXTENSIONS.has(o)&&r.push(`File rejected: ${o} files are not allowed for security reasons.`),e.size>t.maxSize&&r.push(`File size (${this.formatFileSize(e.size)}) exceeds maximum allowed for ${t.category} (${this.formatFileSize(t.maxSize)})`),!t.allowed&&!this.BLOCKED_EXTENSIONS.has(o)&&r.push(`File rejected: unsupported file type. Supported types: ${t.description}`),e.size>this.MAX_FILE_SIZE&&r.push(`File size (${this.formatFileSize(e.size)}) exceeds general limit (${this.formatFileSize(this.MAX_FILE_SIZE)})`),{isValid:r.length===0,errors:r,fileType:t,fileSize:e.size,formattedSize:this.formatFileSize(e.size)}}normalizeDisplayFileName(e){return String(e||"").normalize("NFKC").replace(/[\u0000-\u001F\u007F]/g,"").replace(/[\\/]+/g,"_").trim().slice(0,255)}validateIncomingMetadata(e){let t=[];(!e||typeof e!="object")&&t.push("Invalid file transfer metadata"),(!e?.fileId||typeof e.fileId!="string")&&t.push("Invalid file id"),(!Number.isSafeInteger(e?.fileSize)||e.fileSize<=0)&&t.push("Invalid file size"),(!Number.isSafeInteger(e?.totalChunks)||e.totalChunks<=0)&&t.push("Invalid chunk count"),(!Number.isSafeInteger(e?.chunkSize)||e.chunkSize<=0||e.chunkSize>this.MAX_RECEIVE_CHUNK_SIZE)&&t.push("Invalid chunk size"),(!Array.isArray(e?.salt)||e.salt.length!==32)&&t.push("Invalid salt");let r=typeof e?.fileName=="string"?e.fileName:"",i=this.normalizeDisplayFileName(r);if((!r||r!==r.trim()||/[\u0000-\u001F\u007F]/.test(r)||/[\\/]/.test(r)||r==="."||r===".."||i.length===0)&&t.push("Dangerous file name"),t.length===0){let c=this.validateFile({name:i,size:e.fileSize,type:e.fileType||"application/octet-stream"});c.isValid||t.push(...c.errors)}let a=!!e?.isVoice,o=a?this.rejectVoiceAutoAcceptReason(e):null;return{isValid:t.length===0,errors:t,displayName:i,isVoice:a&&!o,voiceRejection:o}}rejectVoiceAutoAcceptReason(e){let t=String(e?.fileType||"").toLowerCase(),r=e?.fileSize;return t.startsWith("audio/")?this.FILE_TYPE_RESTRICTIONS.voice.mimeTypes.includes(t)?!Number.isSafeInteger(r)||r<=0||r>this.MAX_AUTO_ACCEPT_VOICE_SIZE?`too large to auto-accept (${this.formatFileSize(r||0)} > ${this.formatFileSize(this.MAX_AUTO_ACCEPT_VOICE_SIZE)})`:this.autoAcceptedVoiceBytes+r>this.MAX_AUTO_ACCEPT_VOICE_SESSION_BYTES?"session auto-accept budget for voice notes is exhausted":null:`unsupported audio MIME type (${t})`:`not an audio MIME type (${t||"absent"})`}formatFileSize(e){if(e===0)return"0 B";let t=1024,r=["B","KB","MB","GB"],i=Math.floor(Math.log(e)/Math.log(t));return parseFloat((e/Math.pow(t,i)).toFixed(2))+" "+r[i]}getSupportedFileTypes(){let e={};for(let[t,r]of Object.entries(this.FILE_TYPE_RESTRICTIONS))e[t]={category:r.category,description:r.description,extensions:r.extensions,maxSize:this.formatFileSize(r.maxSize),maxSizeBytes:r.maxSize};return e}getFileTypeInfo(){return{supportedTypes:this.getSupportedFileTypes(),generalMaxSize:this.formatFileSize(this.MAX_FILE_SIZE),generalMaxSizeBytes:this.MAX_FILE_SIZE,restrictions:this.FILE_TYPE_RESTRICTIONS}}arrayBufferToBase64(e){let t=e instanceof Uint8Array?e:new Uint8Array(e),r="",i=t.byteLength;for(let n=0;n<i;n++)r+=String.fromCharCode(t[n]);return btoa(r)}base64ToUint8Array(e){let t=atob(e),r=t.length,i=new Uint8Array(r);for(let n=0;n<r;n++)i[n]=t.charCodeAt(n);return i}getReceivedFileMeta(e){let t=this.receivedFileBuffers.get(e);return t?{fileId:e,fileName:t.name,fileSize:t.size,mimeType:t.type}:null}async getBlob(e){let t=this.receivedFileBuffers.get(e);return t?new Blob([t.buffer],{type:t.type}):null}async getObjectURL(e){let t=await this.getBlob(e);return t?URL.createObjectURL(t):null}revokeObjectURL(e){try{URL.revokeObjectURL(e)}catch{}}setupFileMessageHandlers(){if(!this.webrtcManager.dataChannel){let e=setInterval(()=>{this.webrtcManager.dataChannel&&(clearInterval(e),this.setupMessageInterception())},100);setTimeout(()=>{clearInterval(e)},5e3);return}this.setupMessageInterception()}setupMessageInterception(){try{if(!this.webrtcManager.dataChannel)return;this.webrtcManager&&(this.webrtcManager.fileTransferSystem=this),this.webrtcManager.dataChannel.onmessage&&(this.originalOnMessage=this.webrtcManager.dataChannel.onmessage),this.webrtcManager.dataChannel.onmessage=async e=>{try{if(e.data.length>Kt.MAX_MESSAGE_SIZE){console.warn("\u{1F512} Message too large, ignoring"),ee.logSecurityEvent("oversized_message_blocked");return}if(typeof e.data=="string")try{let t=JSON.parse(e.data);if(Kt.isMessageSizeValid(t),this.isFileTransferMessage(t)){await this.handleFileMessage(t);return}}catch(t){if(t.message==="Message too large")return}if(this.originalOnMessage)return this.originalOnMessage.call(this.webrtcManager.dataChannel,e)}catch(t){if(console.error("\u274C Error in file system message interception:",t),this.originalOnMessage)return this.originalOnMessage.call(this.webrtcManager.dataChannel,e)}}}catch(e){console.error("\u274C Failed to set up message interception:",e)}}isFileTransferMessage(e){return!e||typeof e!="object"||!e.type?!1:["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_chunk_request","file_transfer_complete","file_transfer_error"].includes(e.type)}async handleFileMessage(e){try{if(!this.webrtcManager.fileTransferSystem)try{if(typeof this.webrtcManager.initializeFileTransfer=="function"){this.webrtcManager.initializeFileTransfer();let t=0,r=50;for(;!this.webrtcManager.fileTransferSystem&&t<r;)await new Promise(i=>setTimeout(i,100)),t++;if(!this.webrtcManager.fileTransferSystem)throw new Error("File transfer system initialization timeout")}else throw new Error("initializeFileTransfer method not available")}catch(t){if(console.error("\u274C Failed to initialize file transfer system:",t),e.fileId){let r={type:"file_transfer_error",fileId:e.fileId,error:"File transfer system not available",timestamp:Date.now()};await this.sendSecureMessage(r)}return}switch(e.type){case"file_transfer_start":await this.handleFileTransferStart(e);break;case"file_transfer_response":this.handleTransferResponse(e);break;case"file_chunk":await this.handleFileChunk(e);break;case"chunk_confirmation":this.handleChunkConfirmation(e);break;case"file_chunk_request":await this.handleChunkRequest(e);break;case"file_transfer_complete":this.handleTransferComplete(e);break;case"file_transfer_error":this.handleTransferError(e);break;default:console.warn("\u26A0\uFE0F Unknown file message type:",e.type)}}catch(t){if(console.error("\u274C Error handling file message:",t),e.fileId){let r={type:"file_transfer_error",fileId:e.fileId,error:t.message,timestamp:Date.now()};await this.sendSecureMessage(r)}}}async deriveFileSessionKey(e){try{if(!this.webrtcManager.keyFingerprint||!this.webrtcManager.sessionSalt)throw new Error("WebRTC session data not available");let t=crypto.getRandomValues(new Uint8Array(32)),r=new TextEncoder,i=r.encode(this.webrtcManager.keyFingerprint),n=r.encode(e),a=new Uint8Array(this.webrtcManager.sessionSalt),o=new Uint8Array(i.length+a.length+t.length+n.length),c=0;o.set(i,c),c+=i.length,o.set(a,c),c+=a.length,o.set(t,c),c+=t.length,o.set(n,c);let d=await crypto.subtle.digest("SHA-256",o),u=await crypto.subtle.importKey("raw",d,{name:"AES-GCM"},!1,["encrypt","decrypt"]);return this.sessionKeys.set(e,{key:u,salt:Array.from(t),created:Date.now()}),{key:u,salt:Array.from(t)}}catch(t){throw console.error("\u274C Failed to derive file session key:",t),t}}async deriveFileSessionKeyFromSalt(e,t){try{if(!t||!Array.isArray(t)||t.length!==32)throw new Error(`Invalid salt: ${t?.length||0} bytes`);if(!this.webrtcManager.keyFingerprint||!this.webrtcManager.sessionSalt)throw new Error("WebRTC session data not available");let r=new TextEncoder,i=r.encode(this.webrtcManager.keyFingerprint),n=r.encode(e),a=new Uint8Array(t),o=new Uint8Array(this.webrtcManager.sessionSalt),c=new Uint8Array(i.length+o.length+a.length+n.length),d=0;c.set(i,d),d+=i.length,c.set(o,d),d+=o.length,c.set(a,d),d+=a.length,c.set(n,d);let u=await crypto.subtle.digest("SHA-256",c),h=await crypto.subtle.importKey("raw",u,{name:"AES-GCM"},!1,["encrypt","decrypt"]);return this.sessionKeys.set(e,{key:h,salt:t,created:Date.now()}),h}catch(r){throw console.error("\u274C Failed to derive session key from salt:",r),r}}_emitTransferProgress(e,t){if(typeof this.onProgress!="function"||!e)return;let r=e.totalChunks||0,i=t==="up"?e.sentChunks||0:e.receivedCount||0,n=r>0?Math.min(100,Math.round(i/r*100)):0;try{this.onProgress({fileId:e.fileId,uiId:e.uiId||null,direction:t,progress:n,transferredChunks:i,totalChunks:r,isVoice:!!e.isVoice,voice:e.voice||null})}catch{}}async sendFile(e,t={}){try{if(!this.webrtcManager)throw new Error("WebRTC Manager not initialized");let r=this.getClientIdentifier();if(!this.rateLimiter.isAllowed(r))throw ee.logSecurityEvent("rate_limit_exceeded",{clientId:r}),new Error("Rate limit exceeded. Please wait before sending another file.");if(!e||!e.size)throw new Error("Invalid file object");let i=this.validateFile(e);if(!i.isValid){let m=i.errors.join(". ");throw new Error(m)}if(this.activeTransfers.size>=this.MAX_CONCURRENT_TRANSFERS)throw new Error("Maximum concurrent transfers reached");let n=`file_${Date.now()}_${Math.random().toString(36).substr(2,9)}`,a=await this.calculateFileHash(e),o=await this.deriveFileSessionKey(n),c=o.key,d=o.salt,u={fileId:n,file:e,fileHash:a,sessionKey:c,salt:d,totalChunks:Math.ceil(e.size/this.CHUNK_SIZE),sentChunks:0,confirmedChunks:0,startTime:Date.now(),status:"preparing",retryCount:0,lastChunkTime:Date.now(),isVoice:!!(t&&t.voice),voice:t&&t.voice?t.voice:null,uiId:t&&t.uiId?t.uiId:null};this.activeTransfers.set(n,u),this.transferNonces.set(n,0);let h=new Promise((m,p)=>{u.resolveConsent=m,u.rejectConsent=p,u.consentTimeout=setTimeout(()=>{u.consentTimeout=null,p(new Error("Transfer timeout"))},3e4)});return await this.sendFileMetadata(u),await h,await this.startChunkTransmission(u),n}catch(r){let i=ee.sanitizeError(r);throw console.error("\u274C File sending failed:",i),this.onError&&this.onError(i),new Error(i)}}async sendFileMetadata(e){try{let t={type:"file_transfer_start",fileId:e.fileId,fileName:e.file.name,fileSize:e.file.size,fileType:e.file.type||"application/octet-stream",fileHash:e.fileHash,totalChunks:e.totalChunks,chunkSize:this.CHUNK_SIZE,salt:e.salt,timestamp:Date.now(),version:"2.0"};if(e.isVoice&&(t.isVoice=!0,e.voice&&(t.voice=e.voice)),this.signingKey)try{t.signature=await Ft.signFileMetadata(t,this.signingKey),console.log("\u{1F512} File metadata signed successfully")}catch(r){ee.logSecurityEvent("signature_failed",{fileId:e.fileId,error:r.message})}await this.sendSecureMessage(t),e.status="metadata_sent"}catch(t){let r=ee.sanitizeError(t);throw console.error("\u274C Failed to send file metadata:",r),e.status="failed",new Error(r)}}async startChunkTransmission(e){try{e.status="transmitting";let t=e.file,r=e.totalChunks;for(let i=0;i<r;i++){let n=i*this.CHUNK_SIZE,a=Math.min(n+this.CHUNK_SIZE,t.size),o=await this.readFileChunk(t,n,a);await this.sendFileChunk(e,i,o),e.sentChunks++;let c=Math.round(e.sentChunks/r*95)+5;this._emitTransferProgress(e,"up"),await this.waitForBackpressure()}e.status="waiting_confirmation",this._armSenderIdleTimeout(e)}catch(t){let r=ee.sanitizeError(t);throw console.error("\u274C Chunk transmission failed:",r),e.status="failed",new Error(r)}}_armSenderIdleTimeout(e){e._idleTimeout&&clearTimeout(e._idleTimeout),e._idleTimeout=setTimeout(()=>{let r=this.activeTransfers.get(e.fileId);r&&r.status!=="completed"&&this.cleanupTransfer(e.fileId)},18e4)}async handleChunkRequest(e){let t=this.activeTransfers.get(e?.fileId);if(!t||!t.file)return;let r=Array.isArray(e.missing)?e.missing:[];if(r.length===0)return;this._armSenderIdleTimeout(t),t.status="transmitting";let n=r.slice(0,512);for(let a of n)if(!(!Number.isInteger(a)||a<0||a>=t.totalChunks))try{let o=a*this.CHUNK_SIZE,c=Math.min(o+this.CHUNK_SIZE,t.file.size),d=await this.readFileChunk(t.file,o,c);await this.sendFileChunk(t,a,d),await this.waitForBackpressure()}catch(o){console.warn("\u26A0\uFE0F Failed to retransmit chunk",a,ee.sanitizeError(o))}t.status==="transmitting"&&(t.status="waiting_confirmation"),this._armSenderIdleTimeout(t)}async readFileChunk(e,t,r){try{return await e.slice(t,r).arrayBuffer()}catch(i){let n=ee.sanitizeError(i);throw console.error("\u274C Failed to read file chunk:",n),new Error(n)}}async sendFileChunk(e,t,r){try{let i=e.sessionKey,n=crypto.getRandomValues(new Uint8Array(12)),a=await crypto.subtle.encrypt({name:"AES-GCM",iv:n},i,r),o=this.arrayBufferToBase64(new Uint8Array(a)),c={type:"file_chunk",fileId:e.fileId,chunkIndex:t,totalChunks:e.totalChunks,nonce:Array.from(n),encryptedDataB64:o,chunkSize:r.byteLength,timestamp:Date.now()};await this.waitForBackpressure(),await this.sendSecureMessage(c)}catch(i){let n=ee.sanitizeError(i);throw console.error("\u274C Failed to send file chunk:",n),new Error(n)}}async sendSecureMessage(e){let t=JSON.stringify(e),r=this.webrtcManager?.dataChannel,i=10,n=0,a=o=>new Promise(c=>setTimeout(c,o));for(;;)try{if(!r||r.readyState!=="open")throw new Error("Data channel not ready");await this.waitForBackpressure(),r.send(t);return}catch(o){let c=String(o?.message||""),d=c.includes("send queue is full")||c.includes("bufferedAmount"),u=o?.name==="OperationError";if((d||u)&&n<i){n++,await this.waitForBackpressure(),await a(Math.min(50*n,500));continue}throw console.error("\u274C Failed to send secure message:",o),o}}async waitForBackpressure(){try{let e=this.webrtcManager?.dataChannel;if(!e)return;if(typeof e.bufferedAmountLowThreshold=="number"){e.bufferedAmount>e.bufferedAmountLowThreshold&&await new Promise(r=>{let i=()=>{e.removeEventListener("bufferedamountlow",i),r()};e.addEventListener("bufferedamountlow",i,{once:!0})});return}let t=4*1024*1024;for(;e.bufferedAmount>t;)await new Promise(r=>setTimeout(r,20))}catch{}}async calculateFileHash(e){try{let t=await e.arrayBuffer(),r=await crypto.subtle.digest("SHA-256",t);return Array.from(new Uint8Array(r)).map(n=>n.toString(16).padStart(2,"0")).join("")}catch(t){throw console.error("\u274C File hash calculation failed:",t),t}}async handleFileTransferStart(e){try{let t=this.getClientIdentifier();if(!this.incomingOfferLimiter.isAllowed(t))throw new Error("Incoming file request rate limit exceeded");let r=this.validateIncomingMetadata(e);if(!r.isValid)throw new Error(r.errors.join(". "));if(e.signature&&this.verificationKey)try{if(!await Ft.verifyFileMetadata(e,e.signature,this.verificationKey))throw ee.logSecurityEvent("invalid_metadata_signature",{fileId:e.fileId}),new Error("Invalid file metadata signature");console.log("\u{1F512} File metadata signature verified successfully")}catch(n){throw ee.logSecurityEvent("verification_failed",{fileId:e.fileId,error:n.message}),new Error("File metadata verification failed")}if(this.receivingTransfers.has(e.fileId)||this.pendingIncomingTransfers.has(e.fileId))return;if(this.pendingIncomingTransfers.size>=this.MAX_PENDING_INCOMING_TRANSFERS)throw new Error("Too many pending incoming file requests");r.voiceRejection&&console.warn(`Voice auto-accept declined, falling back to consent: ${r.voiceRejection}`);let i={...e,isVoice:r.isVoice,fileName:r.displayName,receivedAt:Date.now()};this.pendingIncomingTransfers.set(e.fileId,i),r.isVoice&&(this.autoAcceptedVoiceBytes+=e.fileSize),typeof this.onIncomingFileRequest=="function"?this.onIncomingFileRequest({fileId:i.fileId,fileName:i.fileName,fileSize:i.fileSize,mimeType:i.fileType||"application/octet-stream",isVoice:r.isVoice,voice:i.voice||null}):await this.rejectIncomingFile(e.fileId,f("file.consentUnavailable"))}catch(t){let r=ee.sanitizeError(t);console.error("\u274C Failed to handle file transfer start:",r);let i={type:"file_transfer_response",fileId:e.fileId,accepted:!1,error:r,timestamp:Date.now()};await this.sendSecureMessage(i)}}async handleFileChunk(e){return this.atomicOps.withLock(`chunk-${e.fileId}`,async()=>{try{let t=this.receivingTransfers.get(e.fileId);if(!t||t._assembled||t.status==="completed")return;if(!this._isIncomingChunkAllowed(e.fileId)){console.warn("\u26A0\uFE0F Incoming file chunk rate limit exceeded; cleaning up transfer:",e.fileId),this.cleanupReceivingTransfer(e.fileId);return}if(t.lastChunkTime=Date.now(),t.receivedChunks.has(e.chunkIndex))return;if(e.chunkIndex<0||e.chunkIndex>=t.totalChunks)throw new Error(`Invalid chunk index: ${e.chunkIndex}`);let r=new Uint8Array(e.nonce),i;if(e.encryptedDataB64)i=this.base64ToUint8Array(e.encryptedDataB64);else if(e.encryptedData)i=new Uint8Array(e.encryptedData);else throw new Error("Missing encrypted data");let n=await crypto.subtle.decrypt({name:"AES-GCM",iv:r},t.sessionKey,i);if(n.byteLength!==e.chunkSize)throw new Error(`Chunk size mismatch: expected ${e.chunkSize}, got ${n.byteLength}`);t.receivedChunks.set(e.chunkIndex,n),t.receivedCount++,this._emitTransferProgress(t,"down");let a={type:"chunk_confirmation",fileId:e.fileId,chunkIndex:e.chunkIndex,timestamp:Date.now()};await this.sendSecureMessage(a),t.receivedCount===t.totalChunks&&await this.assembleFile(t)}catch(t){let r=ee.sanitizeError(t);console.warn("\u26A0\uFE0F Dropping unprocessable file chunk (will be re-requested):",e.chunkIndex,r)}})}_isIncomingChunkAllowed(e){let t=this.getClientIdentifier();return this.incomingChunkLimiter.isAllowed(t)?(this.incomingTransferChunkLimiters.has(e)||this.incomingTransferChunkLimiters.set(e,new nt(this.MAX_INCOMING_CHUNKS_PER_TRANSFER_PER_MINUTE,6e4)),this.incomingTransferChunkLimiters.get(e).isAllowed(e)?!0:(ee.logSecurityEvent("incoming_chunk_transfer_rate_limit_exceeded",{clientId:t,fileId:e}),!1)):(ee.logSecurityEvent("incoming_chunk_aggregate_rate_limit_exceeded",{clientId:t,fileId:e}),!1)}async assembleFile(e){if(!e._assembled){e._assembled=!0;try{e.status="assembling";for(let u=0;u<e.totalChunks;u++)if(!e.receivedChunks.has(u))throw new Error(`Missing chunk ${u}`);let t=[];for(let u=0;u<e.totalChunks;u++){let h=e.receivedChunks.get(u);t.push(new Uint8Array(h))}let r=t.reduce((u,h)=>u+h.length,0);if(r!==e.fileSize)throw new Error(`File size mismatch: expected ${e.fileSize}, got ${r}`);let i=new Uint8Array(r),n=0;for(let u of t)i.set(u,n),n+=u.length;if(await this.calculateFileHashFromData(i)!==e.fileHash)throw new Error("File integrity check failed - hash mismatch");let o=i.buffer,c=new Blob([o],{type:e.fileType});if(e.endTime=Date.now(),e.status="completed",this._storeReceivedFileBuffer(e.fileId,{buffer:o,type:e.fileType,name:e.fileName,size:e.fileSize}),this.onFileReceived){let u=async()=>{let p=await this.getBlob(e.fileId);if(!p)throw new Error("This file is no longer available for download.");return p},h=async()=>{let p=await u();return URL.createObjectURL(p)},m=p=>{try{URL.revokeObjectURL(p)}catch{}};this.onFileReceived({fileId:e.fileId,fileName:e.fileName,fileSize:e.fileSize,mimeType:e.fileType,transferTime:e.endTime-e.startTime,isVoice:!!e.isVoice,voice:e.voice||null,fileBlob:c,getBlob:u,getObjectURL:h,revokeObjectURL:m})}let d={type:"file_transfer_complete",fileId:e.fileId,success:!0,timestamp:Date.now()};await this.sendSecureMessage(d),e._stallTimer&&(clearInterval(e._stallTimer),e._stallTimer=null),e.receivedChunks&&e.receivedChunks.clear(),e.sessionKey=null}catch(t){console.error("\u274C File assembly failed:",t),e.status="failed",this.onError&&this.onError(`File assembly failed: ${t.message}`);let r={type:"file_transfer_complete",fileId:e.fileId,success:!1,error:t.message,timestamp:Date.now()};await this.sendSecureMessage(r),this.cleanupReceivingTransfer(e.fileId)}}}async calculateFileHashFromData(e){try{let t=await crypto.subtle.digest("SHA-256",e);return Array.from(new Uint8Array(t)).map(i=>i.toString(16).padStart(2,"0")).join("")}catch(t){throw console.error("\u274C Hash calculation failed:",t),t}}handleTransferResponse(e){try{let t=this.activeTransfers.get(e.fileId);if(!t)return;e.accepted?(t.status="accepted",t.consentTimeout&&clearTimeout(t.consentTimeout),t.consentTimeout=null,t.resolveConsent?.(),t.resolveConsent=null,t.rejectConsent=null):(t.status="rejected",t.consentTimeout&&clearTimeout(t.consentTimeout),t.consentTimeout=null,t.rejectConsent?.(new Error(e.error||"Transfer rejected")),t.rejectConsent=null,t.resolveConsent=null,this.onError&&this.onError(`Transfer rejected: ${e.error||"Unknown reason"}`),this.cleanupTransfer(e.fileId))}catch(t){console.error("\u274C Failed to handle transfer response:",t)}}handleChunkConfirmation(e){try{let t=this.activeTransfers.get(e.fileId);if(!t)return;t.confirmedChunks++,t.lastChunkTime=Date.now(),t.status==="waiting_confirmation"&&this._armSenderIdleTimeout(t)}catch(t){console.error("\u274C Failed to handle chunk confirmation:",t)}}handleTransferComplete(e){try{let t=this.activeTransfers.get(e.fileId);if(!t)return;e.success?(t.status="completed",t.endTime=Date.now(),this.onComplete&&this.onComplete({fileId:t.fileId,fileName:t.file.name,fileSize:t.file.size,transferTime:t.endTime-t.startTime,status:"completed"})):(t.status="failed",this.onError&&this.onError(`Transfer failed: ${e.error||"Unknown error"}`)),this.cleanupTransfer(e.fileId)}catch(t){console.error("\u274C Failed to handle transfer completion:",t)}}handleTransferError(e){try{let t=this.activeTransfers.get(e.fileId);t&&(t.status="failed",this.cleanupTransfer(e.fileId));let r=this.receivingTransfers.get(e.fileId);r&&(r.status="failed",this.cleanupReceivingTransfer(e.fileId)),this.onError&&this.onError(`Transfer error: ${e.error||"Unknown error"}`)}catch(t){console.error("\u274C Failed to handle transfer error:",t)}}getActiveTransfers(){return Array.from(this.activeTransfers.values()).map(e=>({fileId:e.fileId,fileName:e.file?.name||"Unknown",fileSize:e.file?.size||0,progress:Math.round(e.sentChunks/e.totalChunks*100),totalChunks:e.totalChunks||0,transferredChunks:e.sentChunks||0,status:e.status,startTime:e.startTime}))}getReceivingTransfers(){return Array.from(this.receivingTransfers.values()).map(e=>({fileId:e.fileId,fileName:e.fileName||"Unknown",fileSize:e.fileSize||0,progress:Math.round(e.receivedCount/e.totalChunks*100),totalChunks:e.totalChunks||0,transferredChunks:e.receivedCount||0,status:e.status,startTime:e.startTime}))}getPendingIncomingTransfers(){return Array.from(this.pendingIncomingTransfers.values()).map(e=>({fileId:e.fileId,fileName:e.fileName,fileSize:e.fileSize,mimeType:e.fileType||"application/octet-stream",receivedAt:e.receivedAt}))}async acceptIncomingFile(e){let t=this.pendingIncomingTransfers.get(e);if(!t)return!1;let r=await this.deriveFileSessionKeyFromSalt(e,t.salt);return this.receivingTransfers.set(e,{fileId:e,fileName:t.fileName,fileSize:t.fileSize,fileType:t.fileType||"application/octet-stream",fileHash:t.fileHash,totalChunks:t.totalChunks,chunkSize:t.chunkSize||this.CHUNK_SIZE,sessionKey:r,salt:t.salt,receivedChunks:new Map,receivedCount:0,startTime:Date.now(),lastChunkTime:Date.now(),status:"receiving",isVoice:!!t.isVoice,voice:t.voice||null}),this.pendingIncomingTransfers.delete(e),await this.sendSecureMessage({type:"file_transfer_response",fileId:e,accepted:!0,timestamp:Date.now()}),this._startReceiverStallDetector(e),!0}_startReceiverStallDetector(e){let n=this.receivingTransfers.get(e);n&&(n._stallTimer&&clearInterval(n._stallTimer),n._lastProgressCount=n.receivedCount||0,n._lastProgressTime=Date.now(),n._stallTimer=setInterval(async()=>{let a=this.receivingTransfers.get(e);if(!a||a._stallTimer!==n._stallTimer){clearInterval(n._stallTimer);return}if(a.status==="completed"||a._assembled){clearInterval(a._stallTimer),a._stallTimer=null;return}if(a.receivedCount!==a._lastProgressCount&&(a._lastProgressCount=a.receivedCount,a._lastProgressTime=Date.now()),!(a.receivedCount>=a.totalChunks)&&!(Date.now()-(a.lastChunkTime||0)<5e3)){if(Date.now()-a._lastProgressTime>18e4){clearInterval(a._stallTimer),a._stallTimer=null,a.status="failed",this.onError&&this.onError("File transfer stalled \u2014 no data received. Please try again."),this.cleanupReceivingTransfer(e);return}await this._requestMissingChunks(e)}},2500))}async _requestMissingChunks(e){let t=this.receivingTransfers.get(e);if(!t||!t.receivedChunks)return;let r=256,i=[];for(let n=0;n<t.totalChunks&&i.length<r;n++)t.receivedChunks.has(n)||i.push(n);if(i.length!==0){t.status="receiving";try{await this.sendSecureMessage({type:"file_chunk_request",fileId:e,missing:i,timestamp:Date.now()})}catch{}}}async rejectIncomingFile(e,t="Rejected by user"){return this.pendingIncomingTransfers.has(e)?(this.pendingIncomingTransfers.delete(e),await this.sendSecureMessage({type:"file_transfer_response",fileId:e,accepted:!1,error:t,timestamp:Date.now()}),!0):!1}cancelTransfer(e){try{return this.activeTransfers.has(e)?(this.cleanupTransfer(e),!0):this.receivingTransfers.has(e)?(this.cleanupReceivingTransfer(e),!0):!1}catch(t){return console.error("\u274C Failed to cancel transfer:",t),!1}}cleanupTransfer(e){let t=this.activeTransfers.get(e);t&&(t._idleTimeout&&(clearTimeout(t._idleTimeout),t._idleTimeout=null),t.consentTimeout&&(clearTimeout(t.consentTimeout),t.consentTimeout=null),t.rejectConsent&&(t.rejectConsent(new Error("Transfer cancelled during cleanup or disconnect")),t.rejectConsent=null,t.resolveConsent=null)),this.activeTransfers.delete(e),this.sessionKeys.delete(e),this.transferNonces.delete(e),this.incomingTransferChunkLimiters.delete(e);for(let r of this.processedChunks)r.startsWith(e)&&this.processedChunks.delete(r)}_storeReceivedFileBuffer(e,t){for(this.receivedFileBuffers.set(e,t);this.receivedFileBuffers.size>this.MAX_RETAINED_RECEIVED_FILE_BUFFERS;){let r=this.receivedFileBuffers.keys().next().value;this._discardReceivedFileBuffer(r)}}_discardReceivedFileBuffer(e){let t=this.receivedFileBuffers.get(e);if(!t)return;try{t.buffer&&(qe.secureWipe(t.buffer),new Uint8Array(t.buffer).fill(0))}catch{}this.receivedFileBuffers.delete(e);let r=this.receivingTransfers.get(e);r&&(r.status==="completed"||r._assembled)&&(r._stallTimer&&(clearInterval(r._stallTimer),r._stallTimer=null),this.receivingTransfers.delete(e))}cleanupReceivingTransfer(e){try{this.pendingChunks.delete(e);let t=this.receivingTransfers.get(e);if(t){if(t._stallTimer&&(clearInterval(t._stallTimer),t._stallTimer=null),t.receivedChunks&&t.receivedChunks.size>0){for(let[n,a]of t.receivedChunks)try{a&&(a instanceof ArrayBuffer||a instanceof Uint8Array)&&(qe.secureWipe(a),a instanceof ArrayBuffer?new Uint8Array(a).fill(0):a instanceof Uint8Array&&a.fill(0))}catch(o){console.warn("\u26A0\uFE0F Failed to securely wipe chunk:",o)}t.receivedChunks.clear()}if(t.sessionKey)try{t.sessionKey=null}catch(n){console.warn("\u26A0\uFE0F Failed to clear session key:",n)}if(t.salt)try{Array.isArray(t.salt)&&t.salt.fill(0),t.salt=null}catch(n){console.warn("\u26A0\uFE0F Failed to clear salt:",n)}for(let[n,a]of Object.entries(t))a&&typeof a=="object"&&(a instanceof ArrayBuffer||a instanceof Uint8Array?qe.secureWipe(a):Array.isArray(a)&&a.fill(0),t[n]=null)}this.receivingTransfers.delete(e),this.sessionKeys.delete(e),this.incomingTransferChunkLimiters.delete(e);let r=this.receivedFileBuffers.get(e);if(r)try{r.buffer&&(qe.secureWipe(r.buffer),new Uint8Array(r.buffer).fill(0));for(let[n,a]of Object.entries(r))a&&typeof a=="object"&&((a instanceof ArrayBuffer||a instanceof Uint8Array)&&qe.secureWipe(a),r[n]=null);this.receivedFileBuffers.delete(e)}catch(n){console.warn("\u26A0\uFE0F Failed to securely clear file buffer:",n),this.receivedFileBuffers.delete(e)}let i=[];for(let n of this.processedChunks)n.startsWith(e)&&i.push(n);for(let n of i)this.processedChunks.delete(n);if(typeof global<"u"&&global.gc)try{global.gc()}catch{}console.log(`\u{1F512} Memory safely cleaned for file transfer: ${e}`)}catch(t){throw console.error("\u274C Error during secure memory cleanup:",t),this.receivingTransfers.delete(e),this.sessionKeys.delete(e),this.receivedFileBuffers.delete(e),this.pendingChunks.delete(e),new Error(`Memory cleanup failed: ${t.message}`)}}getTransferStatus(e){if(this.activeTransfers.has(e)){let t=this.activeTransfers.get(e);return{type:"sending",fileId:t.fileId,fileName:t.file.name,progress:Math.round(t.sentChunks/t.totalChunks*100),status:t.status,startTime:t.startTime}}if(this.receivingTransfers.has(e)){let t=this.receivingTransfers.get(e);return{type:"receiving",fileId:t.fileId,fileName:t.fileName,progress:Math.round(t.receivedCount/t.totalChunks*100),status:t.status,startTime:t.startTime}}return null}getSystemStatus(){return{initialized:!0,activeTransfers:this.activeTransfers.size,receivingTransfers:this.receivingTransfers.size,totalTransfers:this.activeTransfers.size+this.receivingTransfers.size,maxConcurrentTransfers:this.MAX_CONCURRENT_TRANSFERS,maxFileSize:this.MAX_FILE_SIZE,chunkSize:this.CHUNK_SIZE,hasWebrtcManager:!!this.webrtcManager,isConnected:this.webrtcManager?.isConnected?.()||!1,hasDataChannel:!!this.webrtcManager?.dataChannel,dataChannelState:this.webrtcManager?.dataChannel?.readyState,isVerified:this.webrtcManager?.isVerified,hasEncryptionKey:!!this.webrtcManager?.encryptionKey,hasMacKey:!!this.webrtcManager?.macKey,linkedToWebRTCManager:this.webrtcManager?.fileTransferSystem===this,supportedFileTypes:this.getSupportedFileTypes(),fileTypeInfo:this.getFileTypeInfo()}}cleanup(){Ie.getInstance().deactivate(),this.webrtcManager&&this.webrtcManager.dataChannel&&this.originalOnMessage&&(this.webrtcManager.dataChannel.onmessage=this.originalOnMessage,this.originalOnMessage=null),this.webrtcManager&&this.originalProcessMessage&&(this.webrtcManager.processMessage=this.originalProcessMessage,this.originalProcessMessage=null),this.webrtcManager&&this.originalRemoveSecurityLayers&&(this.webrtcManager.removeSecurityLayers=this.originalRemoveSecurityLayers,this.originalRemoveSecurityLayers=null);for(let e of this.activeTransfers.keys())this.cleanupTransfer(e);for(let e of this.receivingTransfers.keys())this.cleanupReceivingTransfer(e);this.atomicOps&&this.atomicOps.locks.clear(),this.rateLimiter&&this.rateLimiter.requests.clear(),this.incomingChunkLimiter&&this.incomingChunkLimiter.requests.clear(),this.incomingTransferChunkLimiters.clear(),this.pendingChunks.clear(),this.pendingIncomingTransfers.clear(),this.activeTransfers.clear(),this.receivingTransfers.clear(),this.transferQueue.length=0,this.sessionKeys.clear(),this.transferNonces.clear(),this.processedChunks.clear();for(let e of Array.from(this.receivedFileBuffers.keys()))this._discardReceivedFileBuffer(e);this.clearKeys()}onSessionUpdate(e){this.sessionKeys.clear()}diagnoseFileTransferIssue(){return{timestamp:new Date().toISOString(),fileTransferSystem:{initialized:!!this,hasWebrtcManager:!!this.webrtcManager,webrtcManagerType:this.webrtcManager?.constructor?.name,linkedToWebRTCManager:this.webrtcManager?.fileTransferSystem===this},webrtcManager:{hasDataChannel:!!this.webrtcManager?.dataChannel,dataChannelState:this.webrtcManager?.dataChannel?.readyState,isConnected:this.webrtcManager?.isConnected?.()||!1,isVerified:this.webrtcManager?.isVerified,hasEncryptionKey:!!this.webrtcManager?.encryptionKey,hasMacKey:!!this.webrtcManager?.macKey,hasKeyFingerprint:!!this.webrtcManager?.keyFingerprint,hasSessionSalt:!!this.webrtcManager?.sessionSalt},securityContext:{contextActive:Ie.getInstance().isActive(),securityLevel:Ie.getInstance().getSecurityLevel(),hasAtomicOps:!!this.atomicOps,hasRateLimiter:!!this.rateLimiter},transfers:{activeTransfers:this.activeTransfers.size,receivingTransfers:this.receivingTransfers.size,pendingChunks:this.pendingChunks.size,sessionKeys:this.sessionKeys.size},fileTypeSupport:{supportedTypes:this.getSupportedFileTypes(),generalMaxSize:this.formatFileSize(this.MAX_FILE_SIZE),restrictions:Object.keys(this.FILE_TYPE_RESTRICTIONS)}}}async debugKeyDerivation(e){try{if(!this.webrtcManager.keyFingerprint||!this.webrtcManager.sessionSalt)throw new Error("Session data not available");let t=await this.deriveFileSessionKey(e),r=await this.deriveFileSessionKeyFromSalt(e,t.salt),i=new TextEncoder().encode("test data"),n=crypto.getRandomValues(new Uint8Array(12)),a=await crypto.subtle.encrypt({name:"AES-GCM",iv:n},t.key,i),o=await crypto.subtle.decrypt({name:"AES-GCM",iv:n},r,a);if(new TextDecoder().decode(o)==="test data")return{success:!0,message:"All tests passed"};throw new Error("Decryption verification failed")}catch(t){return console.error("\u274C Key derivation test failed:",t),{success:!1,error:t.message}}}registerWithWebRTCManager(){if(!this.webrtcManager)throw new Error("WebRTC manager not available");this.webrtcManager.fileTransferSystem=this,this.webrtcManager.setFileMessageHandler=e=>{this.webrtcManager._fileMessageHandler=e},this.webrtcManager.setFileMessageHandler(e=>this.handleFileMessage(e))}static createFileMessageFilter(e){return async t=>{try{if(typeof t.data=="string"){let r=JSON.parse(t.data);if(e.isFileTransferMessage(r))return await e.handleFileMessage(r),!0}}catch{}return!1}}setSigningKey(e){if(!e||!(e instanceof CryptoKey))throw new Error("Invalid private key for signing");this.signingKey=e,console.log("\u{1F512} Signing key set successfully")}setVerificationKey(e){if(!e||!(e instanceof CryptoKey))throw new Error("Invalid public key for verification");this.verificationKey=e,console.log("\u{1F512} Verification key set successfully")}async generateSigningKeyPair(){try{let e=await crypto.subtle.generateKey({name:"RSASSA-PKCS1-v1_5",modulusLength:2048,publicExponent:new Uint8Array([1,0,1]),hash:"SHA-256"},!0,["sign","verify"]);return this.signingKey=e.privateKey,this.verificationKey=e.publicKey,console.log("\u{1F512} RSA key pair generated successfully"),e}catch(e){let t=ee.sanitizeError(e);throw console.error("\u274C Failed to generate signing key pair:",t),new Error(t)}}clearKeys(){this.signingKey=null,this.verificationKey=null,console.log("\u{1F512} Security keys cleared")}getSecurityStatus(){return{signingEnabled:this.signingKey!==null,verificationEnabled:this.verificationKey!==null,contextActive:Ie.getInstance().isActive(),securityLevel:Ie.getInstance().getSecurityLevel()}}getClientIdentifier(){return this.webrtcManager?.connectionId||this.webrtcManager?.keyFingerprint?.substring(0,16)||"default-client"}destroy(){Ie.getInstance().deactivate(),this.clearKeys(),console.log("\u{1F512} File transfer system destroyed safely")}};var Ue=typeof navigator<"u"&&/AppleWebKit/.test(navigator.userAgent)&&!/Chrome|Chromium|Edg\//.test(navigator.userAgent),st={opusFmtp:{minptime:10,useinbandfec:1,usedtx:1,stereo:0,maxaveragebitrate:32e3,cbr:0},preferRed:!0,sender:{maxBitrate:4e4,priority:"high",networkPriority:"high"}},Re={codecPreferenceOrder:["VP9","AV1","H264","VP8"],vp9:{preferredScalabilityMode:"L3T3_KEY",simulcast:[{rid:"low",scaleResolutionDownBy:4,maxBitrate:15e4,scalabilityMode:"L1T3"},{rid:"mid",scaleResolutionDownBy:2,maxBitrate:5e5,scalabilityMode:"L1T3"},{rid:"high",scaleResolutionDownBy:1,maxBitrate:15e5,scalabilityMode:"L1T3"}],degradationPreference:"balanced"},av1:{scalabilityMode:"L1T3",maxBitrate:12e5,degradationPreference:"maintain-framerate"},simulcast:[{rid:"low",scaleResolutionDownBy:4,maxBitrate:15e4},{rid:"mid",scaleResolutionDownBy:2,maxBitrate:5e5},{rid:"high",scaleResolutionDownBy:1,maxBitrate:15e5}],networkPriority:"medium"},qi={twccUri:"http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01",video:{rtcpFb:["transport-cc","nack","nack pli","ccm fir","goog-remb"],twcc:!0},audio:{rtcpFb:["transport-cc","nack"],twcc:!0}},Tr={intervalMs:1e3,loss:{highPct:.1,recoverPct:.03,audioProtectPct:.25},rtt:{highMs:300,recoverMs:150},stepDownPct:.2,stepUpPct:.1,minVideoBitrate:1e5,recoverStableTicks:5,cpuScaleStep:1.5};function ta(s){return s.indexOf(`\r
 `)!==-1?`\r
 `:`
@@ -42,7 +42,7 @@ Please wait for real-time cryptographic verification to complete.`,"sec.verifica
                 `,n=new Blob([i],{type:"application/javascript"}),a=new Worker(URL.createObjectURL(n)),o=setTimeout(()=>{a.terminate(),r(new Error("Worker cleanup timeout"))},5e3);a.onmessage=c=>{clearTimeout(o),a.terminate(),URL.revokeObjectURL(n),c.data.success?t(c.data):r(new Error(c.data.error))},a.onerror=c=>{clearTimeout(o),a.terminate(),URL.revokeObjectURL(n),r(c)},a.postMessage(e)})}async _cleanupInMainThread(e){let{type:t,data:r}=e;switch(t){case"cleanup_arrays":let i=0,n=100;for(;i<r.count;){let d=Math.min(i+n,r.count);for(let u=i;u<d;u++);i=d,await this._asyncSleep(1)}return{success:!0,processed:i};case"cleanup_objects":let a=r.objects||[],o=[];for(let d=0;d<a.length;d+=50)o.push(a.slice(d,d+50));let c=0;for(let d of o)d.forEach(()=>c++),await this._asyncSleep(1);return{success:!0,cleaned:c};default:return{success:!0,message:"Unknown cleanup type"}}}_initializeMutexSystem(){this._keyOperationMutex={locked:!1,queue:[],lockId:null,lockTimeout:null,lockTime:null,operationCount:0},this._cryptoOperationMutex={locked:!1,queue:[],lockId:null,lockTimeout:null,lockTime:null,operationCount:0},this._connectionOperationMutex={locked:!1,queue:[],lockId:null,lockTimeout:null,lockTime:null,operationCount:0},this._keySystemState={isInitializing:!1,isRotating:!1,isDestroying:!1,lastOperation:null,lastOperationTime:Date.now(),operationId:null,concurrentOperations:0,maxConcurrentOperations:1},this._operationCounters={keyOperations:0,cryptoOperations:0,connectionOperations:0,totalOperations:0,failedOperations:0},this._secureLog("info","\u{1F512} Enhanced mutex system initialized with atomic protection",{mutexes:["keyOperation","cryptoOperation","connectionOperation"],timestamp:Date.now(),features:["atomic_operations","race_condition_protection","enhanced_state_tracking"]})}_hardenDebugModeReferences(){this._secureLog("info","\u{1F512} XSS Hardening: Debug mode references already replaced")}_initializeUnifiedScheduler(){this._maintenanceScheduler=setInterval(()=>{this._executeMaintenanceCycle()},3e5),this._secureLog("info","\u{1F527} Unified maintenance scheduler initialized (5-minute cycle)"),this._activeTimers=new Set([this._maintenanceScheduler])}_trackActiveTimer(e){return e&&(this._activeTimers||(this._activeTimers=new Set),this._activeTimers.add(e),e)}_untrackActiveTimer(e){e&&this._activeTimers&&this._activeTimers.delete(e)}_setSASMaterialReady(e,t){this._sasLocalFingerprint=e,this._sasRemoteFingerprint=t}_isVerificationReady(){let e=!!(this.peerConnection?.localDescription&&this.peerConnection?.remoteDescription),t=this.dataChannel?.readyState==="open",r=typeof this.verificationCode=="string"&&this.verificationCode.trim().length>0,i=typeof this._sasLocalFingerprint=="string"&&this._sasLocalFingerprint.trim().length>0&&typeof this._sasRemoteFingerprint=="string"&&this._sasRemoteFingerprint.trim().length>0;return e&&t&&r&&i}_notifyVerificationReadyIfPossible(){return this._isVerificationReady()?(this._verificationUiOpened||(this._verificationUiOpened=!0,this.onStatusChange?.("verifying"),this.onVerificationRequired?.(this.verificationCode)),!0):!1}_countIceCandidatesInSDP(e){return typeof e!="string"?0:(e.match(/^a=candidate:/gm)||[]).length}_summarizeIceCandidatesInSDP(e){let t={total:0,host:0,srflx:0,relay:0,prflx:0,unknown:0};if(typeof e!="string")return t;for(let r of e.match(/^a=candidate:.*$/gm)||[]){t.total+=1;let n=r.match(/\btyp\s+(host|srflx|relay|prflx)\b/i)?.[1]?.toLowerCase();n&&Object.prototype.hasOwnProperty.call(t,n)?t[n]+=1:t.unknown+=1}return t}_describeIceCandidatesInSDP(e){return typeof e!="string"?[]:(e.match(/^a=candidate:.*$/gm)||[]).map(t=>{let r=t.slice(12).trim().split(/\s+/),i=r.findIndex(u=>u.toLowerCase()==="typ"),n=r[4]||"",a=r[5]||"",o=i>=0&&r[i+1]||"unknown",c=(r[2]||"unknown").toLowerCase(),d="unknown";return/\.local$/i.test(n)?d="mdns":/^(10\.|192\.168\.|172\.(1[6-9]|2\d|3[0-1])\.)/.test(n)?d="private-ipv4":/^\d{1,3}(\.\d{1,3}){3}$/.test(n)?d="public-ipv4":n.includes(":")&&(d="ipv6"),{candidateType:o,protocol:c,addressKind:d,portPresent:!!a,tcpType:(()=>{let u=r.findIndex(h=>h.toLowerCase()==="tcptype");return u>=0&&r[u+1]||null})()}})}_logIceCandidateDiagnostics(e,t,r={}){let i=this._summarizeIceCandidatesInSDP(t),n=this._describeIceCandidatesInSDP(t);return console.info(`[SecureBit ICE] ${e}`,{candidateSummary:i,candidateDetails:n,candidateDetailsJson:JSON.stringify(n),...r}),{candidateSummary:i,candidateDetails:n}}_hasOnlyMdnsHostCandidates(e){let t=this._summarizeIceCandidatesInSDP(e),r=this._describeIceCandidatesInSDP(e);return t.total>0&&t.srflx===0&&t.relay===0&&t.prflx===0&&r.every(i=>i.candidateType==="host"&&i.addressKind==="mdns")}_warnIfRemoteCandidatesNeedRelay(e,t){if(!this._hasOnlyMdnsHostCandidates(t))return!1;let r=e==="answer"?"Connection warning: the response contains only browser-masked mDNS host candidates and no server-reflexive or TURN relay candidates. This network/browser combination may not connect until TURN is configured.":"Connection warning: the invitation contains only browser-masked mDNS host candidates and no server-reflexive or TURN relay candidates. This network/browser combination may not connect until TURN is configured.";return this._secureLog("warn","Remote ICE candidates require TURN or usable non-mDNS candidates",{context:e,candidateSummary:this._summarizeIceCandidatesInSDP(t),candidateDetails:this._describeIceCandidatesInSDP(t)}),this.deliverMessageToUI(r,"system"),!0}async _collectIceFailureDiagnostics(){if(!this.peerConnection?.getStats)return null;try{let e=await this.peerConnection.getStats(),t=new Map,r=[];return e.forEach(i=>{(i.type==="local-candidate"||i.type==="remote-candidate")&&t.set(i.id,{type:i.type,candidateType:i.candidateType,protocol:i.protocol,address:i.address||i.ip||null,port:i.port||null,networkType:i.networkType||null})}),e.forEach(i=>{i.type==="candidate-pair"&&r.push({state:i.state,nominated:!!i.nominated,writable:!!i.writable,bytesSent:i.bytesSent||0,bytesReceived:i.bytesReceived||0,currentRoundTripTime:i.currentRoundTripTime??null,local:t.get(i.localCandidateId)||null,remote:t.get(i.remoteCandidateId)||null})}),{pairCount:r.length,states:r.reduce((i,n)=>(i[n.state||"unknown"]=(i[n.state||"unknown"]||0)+1,i),{}),pairs:r}}catch(e){return{error:e?.message||"Failed to collect ICE diagnostics"}}}_storePendingOfferContext(){this._pendingOfferContext={sessionSalt:Array.isArray(this.sessionSalt)?[...this.sessionSalt]:null,sessionId:this.sessionId||null,connectionId:this.connectionId||null,keyFingerprint:this.keyFingerprint||null,createdAt:Date.now()}}_restorePendingOfferContextIfNeeded(){if(Array.isArray(this.sessionSalt)&&this.sessionSalt.length===64)return!0;let t=this._pendingOfferContext?.sessionSalt;return!Array.isArray(t)||t.length!==64?!1:(this.sessionSalt=[...t],!this.sessionId&&this._pendingOfferContext.sessionId&&(this.sessionId=this._pendingOfferContext.sessionId),!this.connectionId&&this._pendingOfferContext.connectionId&&(this.connectionId=this._pendingOfferContext.connectionId),!this.keyFingerprint&&this._pendingOfferContext.keyFingerprint&&(this.keyFingerprint=this._pendingOfferContext.keyFingerprint),this._secureLog("warn","Restored pending offer context before applying answer",{pendingContextAgeMs:Date.now()-(this._pendingOfferContext.createdAt||Date.now())}),!0)}_clearPendingOfferContext(){this._pendingOfferContext?.sessionSalt&&this._secureWipeMemory(this._pendingOfferContext.sessionSalt,"pendingOfferContext.sessionSalt"),this._pendingOfferContext=null}_executeMaintenanceCycle(){try{this._secureLog("info","\u{1F527} Starting maintenance cycle"),this._cleanupLogs(),this._auditLoggingSystemSecurity(),this._verifyAPIIntegrity(),this._validateCryptographicSecurity(),this._syncSecurityFeaturesWithTariff(),this._cleanupResources(),this._enforceResourceLimits(),this.isConnected&&this.isVerified&&this._monitorKeySecurity(),this._debugMode&&this._monitorGlobalExposure(),this._secureLog("info","\u{1F527} Maintenance cycle completed successfully")}catch(e){this._secureLog("error","\u274C Maintenance cycle failed",{errorType:e?.constructor?.name||"Unknown",message:e?.message||"Unknown error"}),this._emergencyCleanup().catch(t=>{this._secureLog("error","Emergency cleanup failed",{errorType:t?.constructor?.name||"Unknown"})})}}_enforceResourceLimits(){let e=[];this._logCounts.size>this._resourceLimits.maxLogEntries&&e.push("log_entries"),this.messageQueue.length>this._resourceLimits.maxMessageQueue&&e.push("message_queue"),this._ivTrackingSystem&&this._ivTrackingSystem.ivHistory.size>this._resourceLimits.maxIVHistory&&e.push("iv_history"),this.processedMessageIds.size>this._resourceLimits.maxProcessedMessageIds&&e.push("processed_message_ids"),this.decoyChannels.size>this._resourceLimits.maxDecoyChannels&&e.push("decoy_channels"),this._fakeTrafficMessages&&this._fakeTrafficMessages.length>this._resourceLimits.maxFakeTrafficMessages&&e.push("fake_traffic_messages"),this.chunkQueue.length>this._resourceLimits.maxChunkQueue&&e.push("chunk_queue"),this.packetBuffer&&this.packetBuffer.size>this._resourceLimits.maxPacketBuffer&&e.push("packet_buffer"),e.length>0&&(this._secureLog("warn","\u26A0\uFE0F Resource limit violations detected",{violations:e}),this._emergencyCleanup().catch(t=>{this._secureLog("error","Emergency cleanup failed",{errorType:t?.constructor?.name||"Unknown"})}))}async _emergencyCleanup(){this._secureLog("warn","\u{1F6A8} EMERGENCY: Resource limits exceeded, performing emergency cleanup");try{if(this._logCounts.clear(),this._secureLog("info","\u{1F9F9} Emergency: All logs cleared"),this.messageQueue.length=0,this._secureLog("info","\u{1F9F9} Emergency: Message queue cleared"),this._ivTrackingSystem&&(this._ivTrackingSystem.usedIVs.clear(),this._ivTrackingSystem.ivHistory.clear(),this._ivTrackingSystem.sessionIVs.clear(),this._ivTrackingSystem.collisionCount=0,this._ivTrackingSystem.emergencyMode=!1,this._secureLog("info","\u{1F9F9} Enhanced Emergency: IV tracking system cleared")),this.processedMessageIds.clear(),this._secureLog("info","\u{1F9F9} Emergency: Processed message IDs cleared"),this.decoyChannels){for(let[e,t]of this.decoyTimers)t&&clearTimeout(t);this.decoyChannels.clear(),this.decoyTimers.clear(),this._secureLog("info","\u{1F9F9} Enhanced Emergency: Decoy channels cleared")}this.fakeTrafficTimer&&(clearTimeout(this.fakeTrafficTimer),this.fakeTrafficTimer=null),this._fakeTrafficMessages&&(this._fakeTrafficMessages.length=0,this._secureLog("info","\u{1F9F9} Enhanced Emergency: Fake traffic messages cleared")),this.chunkQueue.length=0,this._secureLog("info","\u{1F9F9} Emergency: Chunk queue cleared"),this.packetBuffer&&(this.packetBuffer.clear(),this._secureLog("info","\u{1F9F9} Emergency: Packet buffer cleared")),this._secureMemoryManager.isCleaning=!0,this._secureMemoryManager.cleanupQueue.length=0,this._secureMemoryManager.memoryStats.lastCleanup=Date.now(),await this._scheduleAsyncCleanup(async()=>{this._secureLog("info","\u{1F9F9} Enhanced Emergency: Starting natural memory cleanup");for(let e=0;e<3;e++)this._secureLog("info",`\u{1F9F9} Enhanced Emergency: Cleanup cycle ${e+1}/3`),await this._performNaturalCleanup();this._secureLog("info","\u{1F9F9} Enhanced Emergency: Natural cleanup completed")},0),this._secureMemoryManager.isCleaning=!1,this._secureLog("info","\u2705 Enhanced emergency cleanup completed successfully")}catch(e){this._secureLog("error","\u274C Enhanced emergency cleanup failed",{errorType:e?.constructor?.name||"Unknown",message:e?.message||"Unknown error"}),this._secureMemoryManager.isCleaning=!1}}_validateEmergencyCleanup(e){let t={messageQueueSize:this.messageQueue.length,processedIdsSize:this.processedMessageIds.size,packetBufferSize:this.packetBuffer?this.packetBuffer.size:0,ivTrackingSize:this._ivTrackingSystem?this._ivTrackingSystem.usedIVs.size:0,decoyChannelsSize:this.decoyChannels?this.decoyChannels.size:0};return{messageQueueCleared:t.messageQueueSize===0,processedIdsCleared:t.processedIdsSize===0,packetBufferCleared:t.packetBufferSize===0,ivTrackingCleared:t.ivTrackingSize===0,decoyChannelsCleared:t.decoyChannelsSize===0,allCleared:t.messageQueueSize===0&&t.processedIdsSize===0&&t.packetBufferSize===0&&t.ivTrackingSize===0&&t.decoyChannelsSize===0}}_cleanupResources(){let e=Date.now();this.processedMessageIds.size>this._emergencyThresholds.processedMessageIds&&(this.processedMessageIds.clear(),this._secureLog("info","\u{1F9F9} Old processed message IDs cleared")),this._ivTrackingSystem&&this._cleanupOldIVs(),this.cleanupOldKeys(),window.EnhancedSecureCryptoUtils&&window.EnhancedSecureCryptoUtils.rateLimiter&&window.EnhancedSecureCryptoUtils.rateLimiter.cleanup(),this._secureLog("info","\u{1F9F9} Resource cleanup completed")}_monitorKeySecurity(){this._keyStorageStats.activeKeys>10&&this._secureLog("warn","\u26A0\uFE0F High number of active keys detected. Consider rotation.")}_sendHeartbeat(e=!1){try{return this.dataChannel&&this.dataChannel.readyState==="open"?(this.dataChannel.send(JSON.stringify({type:s.MESSAGE_TYPES.HEARTBEAT,ack:e,timestamp:Date.now()})),this._heartbeatConfig.lastHeartbeat=Date.now(),this._secureLog("debug",e?"\u{1F493} Heartbeat ack sent":"\u{1F493} Heartbeat sent"),!0):!1}catch(t){return this._secureLog("error","\u274C Heartbeat failed:",{errorType:t?.constructor?.name||"Unknown",message:t?.message||"Unknown error"}),!1}}_validateInputData(e,t="unknown"){let r={isValid:!1,sanitizedData:null,errors:[],warnings:[]};try{if(e==null)return r.errors.push("Data cannot be null or undefined"),r;if(typeof e=="string")return e.length>this._inputValidationLimits.maxStringLength?(r.errors.push(`String too long: ${e.length} > ${this._inputValidationLimits.maxStringLength}`),r):(r.sanitizedData=this._sanitizeInputString(e),r.isValid=!0,r);if(typeof e=="object"){let i=new WeakSet,n=(o,c="")=>{if(!(o===null||typeof o!="object")){if(i.has(o)){r.errors.push(`Circular reference detected at path: ${c}`);return}if(i.add(o),c.split(".").length>this._inputValidationLimits.maxObjectDepth){r.errors.push(`Object too deep: ${c.split(".").length} > ${this._inputValidationLimits.maxObjectDepth}`);return}if(Array.isArray(o)&&o.length>this._inputValidationLimits.maxArrayLength){r.errors.push(`Array too long: ${o.length} > ${this._inputValidationLimits.maxArrayLength}`);return}for(let d in o)o.hasOwnProperty(d)&&n(o[d],c?`${c}.${d}`:d)}};if(n(e),r.errors.length>0)return r;let a=this._calculateObjectSize(e);return a>this._inputValidationLimits.maxMessageSize?(r.errors.push(`Object too large: ${a} bytes > ${this._inputValidationLimits.maxMessageSize} bytes`),r):(r.sanitizedData=this._sanitizeInputObject(e),r.isValid=!0,r)}return e instanceof ArrayBuffer?e.byteLength>this._inputValidationLimits.maxMessageSize?(r.errors.push(`ArrayBuffer too large: ${e.byteLength} bytes > ${this._inputValidationLimits.maxMessageSize} bytes`),r):(r.sanitizedData=e,r.isValid=!0,r):(r.errors.push(`Unsupported data type: ${typeof e}`),r)}catch(i){return r.errors.push(`Validation error: ${i.message}`),this._secureLog("error","\u274C Input validation failed",{context:t,errorType:i?.constructor?.name||"Unknown",message:i?.message||"Unknown error"}),r}}_calculateObjectSize(e){try{let t=JSON.stringify(e);return new TextEncoder().encode(t).length}catch{return 1024*1024}}_sanitizeInputString(e){return typeof e!="string"||(e=e.replace(/[\u0000-\u0008\u000B\u000C\u000E-\u001F\u007F-\u009F]/g,""),e=e.replace(/\r\n?/g,`
 `),e=e.replace(/\n{3,}/g,`
 
-`),e=e.trim()),e}_sanitizeInputObject(e){if(e===null||typeof e!="object")return e;if(Array.isArray(e))return e.map(r=>this._sanitizeInputObject(r));let t={};for(let r in e)if(e.hasOwnProperty(r)){let i=e[r];typeof i=="string"?t[r]=this._sanitizeInputString(i):typeof i=="object"?t[r]=this._sanitizeInputObject(i):t[r]=i}return t}_checkRateLimit(e="message"){let t=Date.now();return this._rateLimiter||(this._rateLimiter={messageCount:0,lastReset:t,burstCount:0,lastBurstReset:t}),t-this._rateLimiter.lastReset>6e4&&(this._rateLimiter.messageCount=0,this._rateLimiter.lastReset=t),t-this._rateLimiter.lastBurstReset>1e3&&(this._rateLimiter.burstCount=0,this._rateLimiter.lastBurstReset=t),this._rateLimiter.burstCount>=this._inputValidationLimits.rateLimitBurstSize?(this._secureLog("warn","\u26A0\uFE0F Rate limit burst exceeded",{context:e}),!1):this._rateLimiter.messageCount>=this._inputValidationLimits.rateLimitMessagesPerMinute?(this._secureLog("warn","\u26A0\uFE0F Rate limit exceeded",{context:e}),!1):(this._rateLimiter.messageCount++,this._rateLimiter.burstCount++,!0)}_checkInboundRateLimit(e="incoming_message"){let t=Date.now();return this._inboundRateLimiter||(this._inboundRateLimiter={messageCount:0,lastReset:t,burstCount:0,lastBurstReset:t}),t-this._inboundRateLimiter.lastReset>6e4&&(this._inboundRateLimiter.messageCount=0,this._inboundRateLimiter.lastReset=t),t-this._inboundRateLimiter.lastBurstReset>1e3&&(this._inboundRateLimiter.burstCount=0,this._inboundRateLimiter.lastBurstReset=t),this._inboundRateLimiter.burstCount>=this._inputValidationLimits.rateLimitBurstSize?(this._secureLog("warn","\u26A0\uFE0F Inbound message burst limit exceeded; dropping message",{context:e}),!1):this._inboundRateLimiter.messageCount>=this._inputValidationLimits.rateLimitMessagesPerMinute?(this._secureLog("warn","\u26A0\uFE0F Inbound message rate limit exceeded; dropping message",{context:e}),!1):(this._inboundRateLimiter.messageCount++,this._inboundRateLimiter.burstCount++,!0)}_initializeSecureKeyStorage(){this._masterKeyManager=new jt,this._secureKeyStorage=new Gt(this._masterKeyManager),this._keyStorageStats={totalKeys:0,activeKeys:0,lastAccess:null,lastRotation:null},this._secureLog("info","\u{1F510} Enhanced secure key storage initialized")}setMasterKeyPasswordCallback(e){this._masterKeyManager&&this._masterKeyManager.setPasswordRequiredCallback(e)}setMasterKeySessionExpiredCallback(e){this._masterKeyManager&&this._masterKeyManager.setSessionExpiredCallback(e)}lockMasterKey(){this._masterKeyManager&&this._masterKeyManager.lock()}isMasterKeyUnlocked(){return this._masterKeyManager?this._masterKeyManager.isUnlocked():!1}getMasterKeySessionStatus(){return this._masterKeyManager?this._masterKeyManager.getSessionStatus():null}async _ensureFileTransferReady(){try{if(this.fileTransferSystem)return!0;if(!this.dataChannel||this.dataChannel.readyState!=="open")throw new Error("Data channel not open");if(!this.isVerified)throw new Error("Connection not verified");this.initializeFileTransfer();let e=0,t=50;for(;!this.fileTransferSystem&&e<t;)await new Promise(r=>setTimeout(r,100)),e++;if(!this.fileTransferSystem)throw new Error("File transfer system initialization timeout");return!0}catch(e){return this._secureLog("error","\u274C _ensureFileTransferReady failed",{errorType:e?.constructor?.name||"Unknown",hasMessage:!!e?.message}),!1}}_getSecureKey(e){return this._secureKeyStorage.retrieveKey(e)}async _setSecureKey(e,t){if(!(t instanceof CryptoKey))return this._secureLog("error","\u274C Attempt to store non-CryptoKey"),!1;let r=await this._secureKeyStorage.storeKey(e,t,{version:this.currentKeyVersion,type:t.algorithm.name});return r&&this._secureLog("info",`\u{1F511} Key ${e} stored securely with encryption`),r}_validateKeyValue(e){return e instanceof CryptoKey&&e.algorithm&&e.usages&&e.usages.length>0}_secureWipeKeys(){this._secureKeyStorage.secureWipeAll(),this._masterKeyManager&&this._masterKeyManager.lock(),this._secureLog("info","\u{1F9F9} All keys securely wiped and encrypted storage cleared")}_validateKeyStorage(){return this._secureKeyStorage instanceof Gt}_getKeyStorageStats(){let e=this._secureKeyStorage.getStorageStats();return{totalKeysCount:e.totalKeys,activeKeysCount:e.totalKeys,hasLastAccess:e.metadata.some(t=>t.lastAccessed),hasLastRotation:!!this._keyStorageStats.lastRotation,storageType:"SecureKeyStorage",timestamp:Date.now()}}_rotateKeys(){let e=Array.from(this._secureKeyStorage.keys());this._secureKeyStorage.clear(),this._keyStorageStats.lastRotation=Date.now(),this._keyStorageStats.activeKeys=0,this._secureLog("info",`\u{1F504} Key rotation completed. ${e.length} keys rotated`)}_emergencyKeyWipe(){this._secureWipeKeys(),this._secureLog("error","\u{1F6A8} EMERGENCY: All keys wiped due to security threat")}_startKeySecurityMonitoring(){this._secureLog("info","\u{1F527} Key security monitoring moved to unified scheduler")}_validateKeyConstantTime(e){let t=0;try{let r=e instanceof CryptoKey;t+=r?1:0}catch{t+=0}try{let r=!!(e&&e.algorithm);t+=r?1:0}catch{t+=0}try{let r=!!(e&&e.type);t+=r?1:0}catch{t+=0}try{let r=e&&e.extractable!==void 0;t+=r?1:0}catch{t+=0}return t===4}_validateKeyPairConstantTime(e){if(!e||typeof e!="object")return!1;let t=this._validateKeyConstantTime(e.privateKey),r=this._validateKeyConstantTime(e.publicKey);return t&&r}_initializeSecureLogging(){this._logLevels={error:0,warn:1,info:2,debug:3,trace:4},this._currentLogLevel=this._isProductionMode?this._logLevels.error:this._logLevels.info,this._logCounts=new Map,this._maxLogCount=this._isProductionMode?5:50,this._resourceLimits={maxLogEntries:this._isProductionMode?100:1e3,maxMessageQueue:1e3,maxIVHistory:1e4,maxProcessedMessageIds:5e3,maxDecoyChannels:100,maxFakeTrafficMessages:500,maxChunkQueue:200,maxPacketBuffer:1e3},this._emergencyThresholds={logEntries:this._resourceLimits.maxLogEntries*.8,messageQueue:this._resourceLimits.maxMessageQueue*.8,ivHistory:this._resourceLimits.maxIVHistory*.8,processedMessageIds:this._resourceLimits.maxProcessedMessageIds*.8},this._inputValidationLimits={maxStringLength:1e5,maxObjectDepth:10,maxArrayLength:1e3,maxMessageSize:1024*1024,maxConcurrentMessages:10,rateLimitMessagesPerMinute:60,rateLimitBurstSize:10},this._absoluteBlacklist=new Set(["encryptionKey","macKey","metadataKey","privateKey","publicKey","ecdhKeyPair","ecdsaKeyPair","peerPublicKey","nestedEncryptionKey","verificationCode","sessionSalt","keyFingerprint","sessionId","authChallenge","authProof","authToken","sessionToken","password","token","secret","credential","signature","apiKey","accessKey","secretKey","privateKey","hash","digest","nonce","iv","cipher","seed","entropy","random","salt","fingerprint","jwt","bearer","refreshToken","accessToken","fileHash","fileSignature","transferKey","chunkKey"]),this._safeFieldsWhitelist=new Set(["timestamp","type","status","state","level","isConnected","isVerified","isInitiator","version","count","total","active","inactive","success","failure","readyState","connectionState","iceConnectionState","activeFeaturesCount","totalFeatures","stage","errorType","errorCode","phase","attempt"]),this._initializeLogSecurityMonitoring(),this._secureLog("info",`\u{1F527} Enhanced secure logging initialized (Production: ${this._isProductionMode})`)}_initializeLogSecurityMonitoring(){this._logSecurityViolations=0,this._maxLogSecurityViolations=3}_auditLoggingSystemSecurity(){let e=0;for(let[r,i]of this._logCounts.entries())i>this._maxLogCount*2&&(e++,this._originalConsole?.error?.(`\u{1F6A8} LOG SECURITY: Excessive log count detected: ${r}`));let t=Array.from(this._logCounts.keys());for(let r of t)this._containsSensitiveContent(r)&&(e++,this._originalConsole?.error?.(`\u{1F6A8} LOG SECURITY: Sensitive content in log key: ${r}`));this._logSecurityViolations+=e,this._logSecurityViolations>=this._maxLogSecurityViolations&&(this._emergencyDisableLogging(),this._originalConsole?.error?.("\u{1F6A8} CRITICAL: Logging system disabled due to security violations"))}_secureLogShim(...e){try{if(!Array.isArray(e)||e.length===0)return;let t=e[0],r=e.slice(1);if(r.length===0){this._secureLog("info",String(t||""));return}if(r.length===1){this._secureLog("info",String(t||""),r[0]);return}this._secureLog("info",String(t||""),{additionalArgs:r,argCount:r.length})}catch{try{this._originalConsole?.log&&this._originalConsole.log(...e)}catch{}}}_setupOwnLogger(){this.logger={log:(e,t)=>this._secureLog("info",e,t),info:(e,t)=>this._secureLog("info",e,t),warn:(e,t)=>this._secureLog("warn",e,t),error:(e,t)=>this._secureLog("error",e,t),debug:(e,t)=>this._secureLog("debug",e,t)},s.DEBUG_MODE?this._secureLog("info","\u{1F512} Own logger created - development mode"):this._secureLog("info","\u{1F512} Own logger created - production mode")}_setupProductionLogging(){this._isProductionMode&&(this.logger={log:()=>{},info:()=>{},warn:(e,t)=>this._secureLog("warn",e,t),error:(e,t)=>this._secureLog("error",e,t),debug:()=>{}},this._secureLog("info","Production logging mode activated"))}_secureLog(e,t,r=null){if(r&&!this._auditLogMessage(t,r)){this._originalConsole?.error?.("SECURITY: Logging blocked due to potential data leakage");return}if(this._logLevels[e]>this._currentLogLevel)return;let i=`${e}:${t.substring(0,50)}`,n=this._logCounts.get(i)||0;if(n>=this._maxLogCount)return;this._logCounts.set(i,n+1);let a=null;if(r&&(a=this._sanitizeLogData(r),this._containsSensitiveContent(JSON.stringify(a)))){this._originalConsole?.error?.("ECURITY: Sanitized data still contains sensitive content - blocking log");return}if(this._isProductionMode){if(e==="error"){let c=this._sanitizeString(t);this._originalConsole?.error?.(c)}return}let o=this._originalConsole?.[e]||this._originalConsole?.log;a?o(t,a):o(t)}_sanitizeLogData(e){if(typeof e=="string")return this._sanitizeString(e);if(!e||typeof e!="object")return e;let t={};for(let[i,n]of Object.entries(e)){let a=i.toLowerCase(),o=["key","secret","token","password","credential","auth","fingerprint","salt","signature","private","encryption","mac","metadata","session","jwt","bearer","hash","digest","nonce","iv","cipher","seed","entropy"];if(this._absoluteBlacklist.has(i)||o.some(d=>a.includes(d))){t[i]="[SENSITIVE_DATA_BLOCKED]";continue}if(this._safeFieldsWhitelist.has(i)){typeof n=="string"?t[i]=this._sanitizeString(n):t[i]=n;continue}if(typeof n=="boolean"||typeof n=="number")t[i]=n;else if(typeof n=="string")t[i]=this._sanitizeString(n);else if(n instanceof ArrayBuffer||n instanceof Uint8Array)t[i]=`[${n.constructor.name}(<REDACTED> bytes)]`;else if(n&&typeof n=="object")try{t[i]=this._sanitizeLogData(n)}catch{t[i]="[RECURSIVE_SANITIZATION_FAILED]"}else t[i]=`[${typeof n}]`}let r=JSON.stringify(t);return this._containsSensitiveContent(r)?{error:"SANITIZATION_FAILED_SENSITIVE_CONTENT_DETECTED"}:t}_sanitizeString(e){if(typeof e!="string"||e.length===0)return e;let t=[/[a-f0-9]{16,}/i,/[a-f0-9]{8,}/i,/[A-Za-z0-9+/]{16,}={0,2}/,/[A-Za-z0-9+/]{12,}/,/[A-Za-z0-9+/=]{10,}/,/[1-9A-HJ-NP-Za-km-z]{16,}/,/[A-Z2-7]{16,}={0,6}/,/[A-Z2-7]{12,}/,/[A-Za-z0-9\-_]{16,}/,/[A-Za-z0-9\.\-_]{16,}/,/\b[A-Za-z0-9]{12,}\b/,/\b[A-Za-z0-9]{8,}\b/,/BEGIN\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\s+KEY/i,/END\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\s+KEY/i,/^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/,/(api[_-]?key|token|secret|password|credential)[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i,/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,/\b\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}\b/,/\b\d{3}-\d{2}-\d{4}\b/,/[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/,/(fingerprint|hash|digest|signature)[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i,/(encryption|mac|metadata)[\s]*key[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i,/(session|auth|jwt|bearer)[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i];for(let r of t)if(r.test(e))return"[SENSITIVE_DATA_REDACTED]";return this._hasHighEntropy(e)?"[HIGH_ENTROPY_DATA_REDACTED]":this._hasSuspiciousDistribution(e)?"[SUSPICIOUS_DATA_REDACTED]":e.length>50?e.substring(0,20)+"...[TRUNCATED]":e}_containsSensitiveContent(e){return typeof e!="string"?!1:[/[a-f0-9]{16,}/i,/[A-Za-z0-9+/]{16,}={0,2}/,/[1-9A-HJ-NP-Za-km-z]{16,}/,/[A-Z2-7]{16,}={0,6}/,/\b[A-Za-z0-9]{12,}\b/,/BEGIN\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\s+KEY/i,/^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/,/(api[_-]?key|token|secret|password|credential)[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i].some(r=>r.test(e))||this._hasHighEntropy(e)||this._hasSuspiciousDistribution(e)}_hasHighEntropy(e){if(e.length<8)return!1;let t={};for(let n of e)t[n]=(t[n]||0)+1;let r=e.length,i=0;for(let n of Object.values(t)){let a=n/r;i-=a*Math.log2(a)}return i>4.5}_hasSuspiciousDistribution(e){return e.length<8?!1:(e.match(/[a-f0-9]/gi)||[]).length>=e.length*.8||(e.match(/[A-Za-z0-9+/=]/g)||[]).length>=e.length*.9||new Set(e).size/e.length>.8&&e.length>16}_detectProductionMode(){return typeof process<"u"&&!0||!this._debugMode||window.location.hostname&&!window.location.hostname.includes("localhost")&&!window.location.hostname.includes("127.0.0.1")&&!window.location.hostname.includes(".local")||typeof window.webpackHotUpdate>"u"&&!window.location.search.includes("debug")}_setupSecureGlobalAPI(){this._secureLog("info","Starting secure global API setup");let e={};typeof this.sendMessage=="function"&&(e.sendMessage=this.sendMessage.bind(this)),e.getConnectionStatus=()=>({isConnected:this.isConnected?this.isConnected():!1,isVerified:this.isVerified||!1,connectionState:this.peerConnection?.connectionState||"disconnected"}),e.getSecurityStatus=()=>({securityLevel:"maximum",stage:"initialized",activeFeaturesCount:Object.values(this.securityFeatures||{}).filter(Boolean).length}),typeof this.sendFile=="function"&&(e.sendFile=this.sendFile.bind(this)),e.getFileTransferStatus=()=>({initialized:!!this.fileTransferSystem,status:"ready",activeTransfers:0,receivingTransfers:0}),typeof this.disconnect=="function"&&(e.disconnect=this.disconnect.bind(this));let t={...e,getConfiguration:()=>({fakeTraffic:this._config.fakeTraffic.enabled,decoyChannels:this._config.decoyChannels.enabled,packetPadding:this._config.packetPadding.enabled,antiFingerprinting:this._config.antiFingerprinting.enabled}),emergency:{}};typeof this._emergencyUnlockAllMutexes=="function"&&(t.emergency.unlockAllMutexes=this._emergencyUnlockAllMutexes.bind(this)),typeof this._emergencyRecoverMutexSystem=="function"&&(t.emergency.recoverMutexSystem=this._emergencyRecoverMutexSystem.bind(this)),typeof this._emergencyDisableLogging=="function"&&(t.emergency.disableLogging=this._emergencyDisableLogging.bind(this)),typeof this._resetLoggingSystem=="function"&&(t.emergency.resetLogging=this._resetLoggingSystem.bind(this)),t.getFileTransferSystemStatus=()=>({initialized:!!this.fileTransferSystem,status:"ready",activeTransfers:0,receivingTransfers:0}),this._secureLog("info","API methods available",{sendMessage:!!e.sendMessage,getConnectionStatus:!!e.getConnectionStatus,getSecurityStatus:!!e.getSecurityStatus,sendFile:!!e.sendFile,getFileTransferStatus:!!e.getFileTransferStatus,disconnect:!!e.disconnect,getConfiguration:!!t.getConfiguration,emergencyMethods:Object.keys(t.emergency).length}),Object.freeze(t),Object.freeze(t.emergency),this._createProtectedGlobalAPI(t),this._setupMinimalGlobalProtection(),this._secureLog("info","Secure global API setup completed successfully")}_createProtectedGlobalAPI(e){this._secureLog("info","Creating protected global API"),window.secureBitChat?this._secureLog("warn","\u26A0\uFE0F Global API already exists, skipping setup"):this._exportAPI(e)}_exportAPI(e){this._secureLog("info","Exporting API to window.secureBitChat"),!this._importantMethods||!this._importantMethods.defineProperty?(this._secureLog("error","\u274C Important methods not available for API export, using fallback"),Object.defineProperty(window,"secureBitChat",{value:e,writable:!1,configurable:!1,enumerable:!0})):this._importantMethods.defineProperty(window,"secureBitChat",{value:e,writable:!1,configurable:!1,enumerable:!0}),this._secureLog("info","\u{1F512} Secure API exported to window.secureBitChat")}_setupMinimalGlobalProtection(){this._protectGlobalAPI(),this._secureLog("info","\u{1F512} Minimal global protection activated")}_storeImportantMethods(){this._importantMethods={defineProperty:Object.defineProperty,getOwnPropertyDescriptor:Object.getOwnPropertyDescriptor,freeze:Object.freeze,consoleLog:console.log,consoleError:console.error,consoleWarn:console.warn},this._secureLog("info","\u{1F512} Important methods stored locally",{defineProperty:!!this._importantMethods.defineProperty,getOwnPropertyDescriptor:!!this._importantMethods.getOwnPropertyDescriptor,freeze:!!this._importantMethods.freeze})}_setupSimpleProtection(){this._secureLog("info","\u{1F512} Simple protection activated - no monitoring")}_preventGlobalExposure(){this._secureLog("info","\u{1F512} No global exposure prevention - using secure API export only")}_verifyAPIIntegrity(){try{if(!window.secureBitChat)return this._secureLog("error","\u274C SECURITY ALERT: Secure API has been removed!"),!1;let t=["sendMessage","getConnectionStatus","disconnect"].filter(r=>typeof window.secureBitChat[r]!="function");return t.length>0?(this._secureLog("error","\u274C SECURITY ALERT: API tampering detected, missing methods:",{errorType:t?.constructor?.name||"Unknown"}),!1):!0}catch(e){return this._secureLog("error","\u274C SECURITY ALERT: API integrity check failed:",{errorType:e?.constructor?.name||"Unknown"}),!1}}_auditGlobalExposure(){return this._secureLog("info","\u{1F512} Global exposure check completed at initialization"),[]}_startSecurityAudit(){this._secureLog("info","\u{1F512} Security audit completed at initialization - no periodic monitoring")}_protectGlobalAPI(){if(!window.secureBitChat){this._secureLog("warn","\u26A0\uFE0F Global API not found during protection setup");return}try{this._validateAPIIntegrityOnce()&&this._secureLog("info","\u{1F512} Global API protection verified")}catch(e){this._secureLog("error","\u274C Failed to verify global API protection",{errorType:e.constructor.name,errorMessage:e.message})}}_validateAPIIntegrityOnce(){try{if(!this._importantMethods||!this._importantMethods.getOwnPropertyDescriptor){let e=Object.getOwnPropertyDescriptor(window,"secureBitChat");if(!e||e.configurable)throw new Error("secureBitChat must not be reconfigurable!")}else{let e=this._importantMethods.getOwnPropertyDescriptor(window,"secureBitChat");if(!e||e.configurable)throw new Error("secureBitChat must not be reconfigurable!")}return this._secureLog("info","\u2705 API integrity validated"),!0}catch(e){return this._secureLog("error","\u274C API integrity validation failed",{errorType:e.constructor.name,errorMessage:e.message}),!1}}_secureWipeMemory(e,t="unknown"){if(e)try{e instanceof ArrayBuffer?this._secureWipeArrayBuffer(e,t):e instanceof Uint8Array?this._secureWipeUint8Array(e,t):Array.isArray(e)?this._secureWipeArray(e,t):typeof e=="string"?this._secureWipeString(e,t):e instanceof CryptoKey?this._secureWipeCryptoKey(e,t):typeof e=="object"&&this._secureWipeObject(e,t),this._secureMemoryManager.memoryStats.totalCleanups++}catch(r){this._secureMemoryManager.memoryStats.failedCleanups++,this._secureLog("error","\u274C Secure memory wipe failed",{context:t,errorType:r.constructor.name,errorMessage:r.message})}}_secureWipeArrayBuffer(e,t){if(!(!e||e.byteLength===0))try{let r=new Uint8Array(e);crypto.getRandomValues(r),r.fill(0),r.fill(255),r.fill(0),this._secureLog("debug","\u{1F512} ArrayBuffer securely wiped",{context:t,size:e.byteLength})}catch(r){this._secureLog("error","\u274C Failed to wipe ArrayBuffer",{context:t,errorType:r.constructor.name})}}_secureWipeUint8Array(e,t){if(!(!e||e.length===0))try{crypto.getRandomValues(e),e.fill(0),e.fill(255),e.fill(0),this._secureLog("debug","\u{1F512} Uint8Array securely wiped",{context:t,size:e.length})}catch(r){this._secureLog("error","\u274C Failed to wipe Uint8Array",{context:t,errorType:r.constructor.name})}}_secureWipeArray(e,t){if(!(!Array.isArray(e)||e.length===0))try{e.forEach((r,i)=>{r!=null&&this._secureWipeMemory(r,`${t}[${i}]`)}),e.fill(null),this._secureLog("debug","\u{1F512} Array securely wiped",{context:t,size:e.length})}catch(r){this._secureLog("error","\u274C Failed to wipe array",{context:t,errorType:r.constructor.name})}}_secureWipeString(e,t){return this._secureLog("debug","String secret cannot be wiped in JS (immutable) \u2014 reference dropped only",{context:t,length:e?e.length:0}),!1}_secureWipeCryptoKey(e,t){return!e||!(e instanceof CryptoKey)||(this._secureLog("debug","CryptoKey cannot be wiped from JS \u2014 handle dropped, material is non-extractable",{context:t,type:e.type,extractable:e.extractable}),e.extractable&&this._secureLog("error","Extractable key reached the wipe path \u2014 material may persist in memory",{context:t})),!1}_secureWipeObject(e,t){if(!(!e||typeof e!="object"))try{for(let[r,i]of Object.entries(e))i!=null&&this._secureWipeMemory(i,`${t}.${r}`),e[r]=null;this._secureLog("debug","\u{1F512} Object securely wiped",{context:t,properties:Object.keys(e).length})}catch(r){this._secureLog("error","\u274C Failed to wipe object",{context:t,errorType:r.constructor.name})}}_secureCleanupCryptographicMaterials(){try{if(this.ecdhKeyPair&&(this._secureWipeMemory(this.ecdhKeyPair,"ecdhKeyPair"),this.ecdhKeyPair=null),this.ecdsaKeyPair&&(this._secureWipeMemory(this.ecdsaKeyPair,"ecdsaKeyPair"),this.ecdsaKeyPair=null),this.encryptionKey&&(this._secureWipeMemory(this.encryptionKey,"encryptionKey"),this.encryptionKey=null),this.macKey&&(this._secureWipeMemory(this.macKey,"macKey"),this.macKey=null),this.metadataKey&&(this._secureWipeMemory(this.metadataKey,"metadataKey"),this.metadataKey=null),this.nestedEncryptionKey&&(this._secureWipeMemory(this.nestedEncryptionKey,"nestedEncryptionKey"),this.nestedEncryptionKey=null),this.sessionSalt&&(this._secureWipeMemory(this.sessionSalt,"sessionSalt"),this.sessionSalt=null),this.sessionId&&(this._secureWipeMemory(this.sessionId,"sessionId"),this.sessionId=null),this.verificationCode&&(this._secureWipeMemory(this.verificationCode,"verificationCode"),this.verificationCode=null),this.peerPublicKey&&(this._secureWipeMemory(this.peerPublicKey,"peerPublicKey"),this.peerPublicKey=null),this.keyFingerprint&&(this._secureWipeMemory(this.keyFingerprint,"keyFingerprint"),this.keyFingerprint=null),this.connectionId&&(this._secureWipeMemory(this.connectionId,"connectionId"),this.connectionId=null),this._clearPendingOfferContext(),this._ratchet){try{this._ratchet.destroy()}catch{}this._ratchet=null}this._peerSupportsRatchet=!1,this._secureLog("info","\u{1F512} Cryptographic materials securely cleaned up")}catch(e){this._secureLog("error","\u274C Failed to cleanup cryptographic materials",{errorType:e.constructor.name,errorMessage:e.message})}}async _forceGarbageCollection(){try{await this._performNaturalCleanup(),this._secureLog("debug","\u{1F512} Natural memory cleanup performed")}catch(e){this._secureLog("error","\u274C Failed to perform natural cleanup",{errorType:e.constructor.name})}}async _performPeriodicMemoryCleanup(){try{this._secureMemoryManager.isCleaning=!0;let e=this.sessionMode==="ratchet"&&this.isConnected&&this.dataChannel&&this.dataChannel.readyState==="open",t=this._pendingOfferContext?Date.now()-(this._pendingOfferContext.createdAt||0):1/0,r=!!this._pendingOfferContext&&Array.isArray(this._pendingOfferContext.sessionSalt)&&this._pendingOfferContext.sessionSalt.length===64&&t<s.LIMITS.OFFER_MAX_AGE;e||r?this._secureLog("debug","\u{1F9F9} Skipping crypto key wipe during periodic cleanup",{reason:e?"active ratchet connection":"offer awaiting answer"}):this._secureCleanupCryptographicMaterials(),this.messageQueue&&this.messageQueue.length>100&&this.messageQueue.splice(0,this.messageQueue.length-50).forEach((a,o)=>{this._secureWipeMemory(a,`periodicCleanup[${o}]`)}),this.processedMessageIds&&this.processedMessageIds.size>1e3&&this.processedMessageIds.clear(),await this._forceGarbageCollection(),this._secureLog("debug","\u{1F512} Periodic memory cleanup completed")}catch(e){this._secureLog("error","\u274C Error during periodic memory cleanup",{errorType:e.constructor.name,errorMessage:e.message})}finally{this._secureMemoryManager.isCleaning=!1}}_createSecureErrorMessage(e,t="unknown"){try{let r=this._categorizeError(e),i=this._getSafeErrorMessage(r,t);return this._secureLog("error","Internal error occurred",{category:r,context:t,errorType:e?.constructor?.name||"Unknown",timestamp:Date.now()}),this._trackErrorFrequency(r),i}catch(r){return this._secureLog("error","Error handling failed",{originalError:e?.message||"Unknown",handlingError:r.message}),"An unexpected error occurred"}}_categorizeError(e){if(!e||!e.message)return this._secureErrorHandler.errorCategories.UNKNOWN;let t=e.message.toLowerCase();return t.includes("crypto")||t.includes("key")||t.includes("encrypt")||t.includes("decrypt")||t.includes("sign")||t.includes("verify")||t.includes("ecdh")||t.includes("ecdsa")?this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC:t.includes("network")||t.includes("connection")||t.includes("timeout")||t.includes("webrtc")||t.includes("peer")?this._secureErrorHandler.errorCategories.NETWORK:t.includes("invalid")||t.includes("validation")||t.includes("format")||t.includes("type")?this._secureErrorHandler.errorCategories.VALIDATION:t.includes("system")||t.includes("internal")||t.includes("memory")||t.includes("resource")?this._secureErrorHandler.errorCategories.SYSTEM:this._secureErrorHandler.errorCategories.UNKNOWN}_getSafeErrorMessage(e,t){let r={[this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC]:{key_generation:"Security initialization failed",key_import:"Security verification failed",key_derivation:"Security setup failed",encryption:"Message security failed",decryption:"Message verification failed",signature:"Authentication failed",default:"Security operation failed"},[this._secureErrorHandler.errorCategories.NETWORK]:{connection:"Connection failed",timeout:"Connection timeout",peer:"Peer connection failed",webrtc:"Communication failed",default:"Network operation failed"},[this._secureErrorHandler.errorCategories.VALIDATION]:{format:"Invalid data format",type:"Invalid data type",structure:"Invalid data structure",default:"Validation failed"},[this._secureErrorHandler.errorCategories.SYSTEM]:{memory:"System resource error",resource:"System resource unavailable",internal:"Internal system error",default:"System operation failed"},[this._secureErrorHandler.errorCategories.UNKNOWN]:{default:"An unexpected error occurred"}},i=r[e]||r[this._secureErrorHandler.errorCategories.UNKNOWN],n="default";return t.includes("key")||t.includes("crypto")?n=e===this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC?"key_generation":"default":t.includes("connection")||t.includes("peer")?n=e===this._secureErrorHandler.errorCategories.NETWORK?"connection":"default":(t.includes("validation")||t.includes("format"))&&(n=e===this._secureErrorHandler.errorCategories.VALIDATION?"format":"default"),i[n]||i.default}_trackErrorFrequency(e){let t=Date.now();t-this._secureErrorHandler.lastErrorTime>6e4&&this._secureErrorHandler.errorCounts.clear();let r=this._secureErrorHandler.errorCounts.get(e)||0;this._secureErrorHandler.errorCounts.set(e,r+1),this._secureErrorHandler.lastErrorTime=t;let i=Array.from(this._secureErrorHandler.errorCounts.values()).reduce((n,a)=>n+a,0);i>this._secureErrorHandler.errorThreshold&&(this._secureErrorHandler.isInErrorMode=!0,this._secureLog("warn","\u26A0\uFE0F High error frequency detected - entering error mode",{totalErrors:i,threshold:this._secureErrorHandler.errorThreshold}))}_throwSecureError(e,t="unknown"){let r=this._createSecureErrorMessage(e,t);throw new Error(r)}_getErrorHandlingStats(){return{errorCounts:Object.fromEntries(this._secureErrorHandler.errorCounts),isInErrorMode:this._secureErrorHandler.isInErrorMode,lastErrorTime:this._secureErrorHandler.lastErrorTime,errorThreshold:this._secureErrorHandler.errorThreshold}}_resetErrorHandlingSystem(){this._secureErrorHandler.errorCounts.clear(),this._secureErrorHandler.isInErrorMode=!1,this._secureErrorHandler.lastErrorTime=0,this._secureLog("info","\u{1F504} Error handling system reset")}_getMemoryManagementStats(){return{totalCleanups:this._secureMemoryManager.memoryStats.totalCleanups,failedCleanups:this._secureMemoryManager.memoryStats.failedCleanups,lastCleanup:this._secureMemoryManager.memoryStats.lastCleanup,isCleaning:this._secureMemoryManager.isCleaning,queueLength:this._secureMemoryManager.cleanupQueue.length}}_validateAPIIntegrity(){try{if(!window.secureBitChat)return this._secureLog("error","\u274C Global API not found during integrity validation"),!1;let e=["sendMessage","getConnectionStatus","getSecurityStatus","sendFile","disconnect"],t=e.filter(a=>!window.secureBitChat[a]||typeof window.secureBitChat[a]!="function");if(t.length>0)return this._secureLog("error","\u274C Global API integrity validation failed - missing methods",{missingMethods:t}),!1;let r={test:!0},n=e.map(a=>{try{return window.secureBitChat[a].bind(r)}catch{return null}}).filter(a=>a===null);if(n.length>0)return this._secureLog("error","\u274C Global API integrity validation failed - method binding issues",{unboundMethods:n.length}),!1;try{let a="_integrity_test_"+Date.now();return Object.defineProperty(window.secureBitChat,a,{value:"test",writable:!0,configurable:!0}),this._secureLog("error","\u274C Global API integrity validation failed - API is mutable"),delete window.secureBitChat[a],!1}catch{this._secureLog("debug","\u2705 Global API immutability verified")}return this._secureLog("info","\u2705 Global API integrity validation passed"),!0}catch(e){return this._secureLog("error","\u274C Global API integrity validation failed",{errorType:e.constructor.name,errorMessage:e.message}),!1}}_validateCryptographicSecurity(){let e=["hasRateLimiting"],t=e.filter(n=>!this.securityFeatures[n]);t.length>0&&(this._secureLog("error","\u{1F6A8} CRITICAL: Missing critical rate limiting feature",{missing:t,currentFeatures:this.securityFeatures,action:"Rate limiting will be forced enabled"}),t.forEach(n=>{this.securityFeatures[n]=!0,this._secureLog("warn",`\u26A0\uFE0F Forced enable critical: ${n} = true`)}));let r=Object.keys(this.securityFeatures).filter(n=>this.securityFeatures[n]),i=["hasEncryption","hasECDH","hasECDSA"].filter(n=>this.securityFeatures[n]);return this._secureLog("info","\u2705 Cryptographic security validation passed",{criticalFeatures:e.length,availableFeatures:r.length,encryptionFeatures:i.length,totalSecurityFeatures:r.length,note:"Encryption features will be enabled after key generation",currentState:{hasEncryption:this.securityFeatures.hasEncryption,hasECDH:this.securityFeatures.hasECDH,hasECDSA:this.securityFeatures.hasECDSA,hasRateLimiting:this.securityFeatures.hasRateLimiting}}),!0}_syncSecurityFeaturesWithTariff(){this._secureLog("info","\u2705 All security features enabled by default - no payment required"),["hasEncryption","hasECDH","hasECDSA","hasMutualAuth","hasMetadataProtection","hasEnhancedReplayProtection","hasNonExtractableKeys","hasRateLimiting","hasEnhancedValidation","hasPFS","hasNestedEncryption","hasPacketPadding","hasPacketReordering","hasAntiFingerprinting","hasFakeTraffic","hasDecoyChannels","hasMessageChunking"].forEach(t=>{this.securityFeatures[t]=!0}),this._secureLog("info","\u2705 All security features enabled by default",{enabledFeatures:Object.keys(this.securityFeatures).filter(t=>this.securityFeatures[t]).length,totalFeatures:Object.keys(this.securityFeatures).length})}_emergencyShutdown(e="Security breach"){this._secureLog("error","\u274C EMERGENCY SHUTDOWN: ${reason}");try{this.encryptionKey=null,this.macKey=null,this.metadataKey=null,this.verificationCode=null,this.keyFingerprint=null,this.connectionId=null,this.dataChannel&&(this.dataChannel.close(),this.dataChannel=null),this.peerConnection&&(this.peerConnection.close(),this.peerConnection=null),this.messageQueue=[],this.processedMessageIds.clear(),this.packetBuffer.clear(),this.onStatusChange&&this.onStatusChange("security_breach"),this._secureLog("info","\u{1F512} Emergency shutdown completed")}catch(t){this._secureLog("error","\u274C Error during emergency shutdown:",{errorType:t?.constructor?.name||"Unknown"})}}_finalizeSecureInitialization(){if(this._startKeySecurityMonitoring(),!this._verifyAPIIntegrity()){this._secureLog("error","\u274C Security initialization failed");return}this._startSecurityMonitoring(),this._logCleanupInterval=this._trackActiveTimer(setInterval(()=>{this._cleanupLogs()},3e5)),this._secureLog("info","\u2705 Secure WebRTC Manager initialization completed"),this._secureLog("info","\u{1F512} Global exposure protection: Monitoring only, no automatic removal")}_startSecurityMonitoring(){this._secureLog("info","\u{1F527} Security monitoring moved to unified scheduler")}_validateConnection(e=!0){let t=this.dataChannel&&this.dataChannel.readyState==="open",r=this.isVerified,i=t&&r;if(!i&&e){if(!t)throw new Error("Data channel not ready");if(!r)throw new Error("Connection not verified")}return i}_enforceVerificationGate(e="unknown",t=!0){if(!this.isVerified){let r=`SECURITY VIOLATION: ${e} blocked - connection not cryptographically verified`;if(this._secureLog("error",r,{operation:e,isVerified:this.isVerified,hasKeys:!!(this.encryptionKey&&this.macKey),timestamp:Date.now()}),t)throw new Error(r);return!1}return!0}_setVerifiedStatus(e,t="unknown",r=null){if(e){if(!this.encryptionKey||!this.macKey)throw new Error("Cannot set verified=true without encryption keys");if(!t||t==="unknown")throw new Error("Cannot set verified=true without specifying verification method");if(t.includes("SAS")&&!this.localVerificationConfirmed)throw this._secureLog("error","Blocked verified transition without local SAS confirmation",{verificationMethod:t,localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed}),new Error("Cannot set verified=true without local SAS confirmation");this._secureLog("info","Connection verified through cryptographic verification",{verificationMethod:t,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,keyFingerprint:this.keyFingerprint,timestamp:Date.now(),verificationData:r?"provided":"none"})}this.isVerified=e,e?this.onStatusChange("connected"):this.onStatusChange("disconnected")}markGroupLinkVerified(e="group_roster_signature"){let t=this._sbq2;if(!this._isSbq2()||!t||!t.completed||!t.proofVerified||!t.keysDerived)throw new Error("Group link cannot be released: the in-band handshake has not completed");if(!this.encryptionKey||!this.macKey)throw new Error("Group link cannot be released: session keys are missing");if(this.isVerified)return!0;this.localVerificationConfirmed=!0,this.remoteVerificationConfirmed=!0,this.bothVerificationsConfirmed=!0,this._setVerifiedStatus(!0,"GROUP_ROSTER_SIGNATURE",{reason:e,timestamp:Date.now()}),this._enforceVerificationGate("group_link_release",!1),this.onStatusChange?.("verified");try{this.processMessageQueue()}catch{}return!0}_createFileMessageAAD(e,t=null){if(typeof this._createMessageAAD!="function")throw new Error("_createMessageAAD method is not available in _createFileMessageAAD. Manager may not be fully initialized.");return this._createMessageAAD(e,t,!0)}_validateFileMessageAAD(e,t=null){try{let r=JSON.parse(e);if(r.sessionId!==(this.currentSession?.sessionId||"unknown"))throw new Error("AAD sessionId mismatch - possible replay attack");if(r.keyFingerprint!==(this.keyFingerprint||"unknown"))throw new Error("AAD keyFingerprint mismatch - possible key substitution attack");if(t&&r.messageType!==t)throw new Error(`AAD messageType mismatch - expected ${t}, got ${r.messageType}`);if(Date.now()-r.timestamp>18e5)throw new Error("AAD timestamp too old - possible replay attack");return r}catch(r){throw this._secureLog("error","AAD validation failed",{error:r.message,aadLength:typeof e=="string"?e.length:0}),new Error(`AAD validation failed: ${r.message}`)}}_validateIncomingSequenceNumber(e,t="unknown"){try{if(!this.replayProtectionEnabled)return!0;if(typeof e!="number"||!Number.isFinite(e))return this._secureLog("warn","Missing or non-numeric sequence number - rejecting",{receivedType:typeof e,context:t,timestamp:Date.now()}),!1;if(e<this.expectedSequenceNumber-this.replayWindowSize)return this._secureLog("warn","Sequence number too old - possible replay attack",{received:e,expected:this.expectedSequenceNumber,context:t,timestamp:Date.now()}),!1;if(e>this.expectedSequenceNumber+this.maxSequenceGap)return this._secureLog("warn","Sequence number gap too large - possible DoS attack",{received:e,expected:this.expectedSequenceNumber,gap:e-this.expectedSequenceNumber,context:t,timestamp:Date.now()}),!1;if(this.replayWindow.has(e))return this._secureLog("warn","Duplicate sequence number detected - replay attack",{received:e,context:t,timestamp:Date.now()}),!1;if(this.replayWindow.add(e),this.replayWindow.size>this.replayWindowSize){let r=Math.min(...this.replayWindow);this.replayWindow.delete(r)}if(e===this.expectedSequenceNumber)for(this.expectedSequenceNumber++;this.replayWindow.has(this.expectedSequenceNumber-this.replayWindowSize-1);)this.replayWindow.delete(this.expectedSequenceNumber-this.replayWindowSize-1);return this._secureLog("debug","Sequence number validation successful",{received:e,expected:this.expectedSequenceNumber,context:t,timestamp:Date.now()}),!0}catch(r){return this._secureLog("error","Sequence number validation failed",{error:r.message,context:t,timestamp:Date.now()}),!1}}_validateMessageAAD(e,t=null){try{let r=JSON.parse(e);if(r.sessionId!==(this.currentSession?.sessionId||"unknown"))throw new Error("AAD sessionId mismatch - possible replay attack");if(r.keyFingerprint!==(this.keyFingerprint||"unknown"))throw new Error("AAD keyFingerprint mismatch - possible key substitution attack");if(!this._validateIncomingSequenceNumber(r.sequenceNumber,r.messageType))throw new Error("Sequence number validation failed - possible replay or DoS attack");if(t&&r.messageType!==t)throw new Error(`AAD messageType mismatch - expected ${t}, got ${r.messageType}`);return r}catch(r){throw this._secureLog("error","AAD validation failed",{error:r.message,aadLength:typeof e=="string"?e.length:0}),new Error(`AAD validation failed: ${r.message}`)}}getAntiReplayStatus(){let e={replayProtectionEnabled:this.replayProtectionEnabled,replayWindowSize:this.replayWindowSize,currentReplayWindowSize:this.replayWindow.size,sequenceNumber:this.sequenceNumber,expectedSequenceNumber:this.expectedSequenceNumber,maxSequenceGap:this.maxSequenceGap,replayWindowEntries:Array.from(this.replayWindow).sort((t,r)=>t-r)};return this._secureLog("info","Anti-replay status retrieved",e),e}configureAntiReplayProtection(e){try{if(e.windowSize!==void 0){if(e.windowSize<16||e.windowSize>1024)throw new Error("Replay window size must be between 16 and 1024");this.replayWindowSize=e.windowSize}if(e.maxGap!==void 0){if(e.maxGap<10||e.maxGap>1e3)throw new Error("Max sequence gap must be between 10 and 1000");this.maxSequenceGap=e.maxGap}return e.enabled!==void 0&&(this.replayProtectionEnabled=e.enabled),this._secureLog("info","Anti-replay protection configured",e),!0}catch(t){return this._secureLog("error","Failed to configure anti-replay protection",{error:t.message}),!1}}async getRealSecurityLevel(){try{let e={ecdhKeyExchange:!!this.ecdhKeyPair,ecdsaSignatures:!!this.ecdsaKeyPair,aesEncryption:!!this.encryptionKey,messageIntegrity:!!this.hmacKey,replayProtection:this.replayProtectionEnabled,dtlsFingerprint:!!(this.expectedDTLSFingerprint&&this._peerDTLSFingerprint),sasCode:!!this.verificationCode&&this.localVerificationConfirmed===!0,metadataProtection:!0,trafficObfuscation:!0,perfectForwardSecrecy:this.isRatchetActive?.()===!0,rateLimiter:!0,connectionId:this.connectionId,keyFingerprint:this.keyFingerprint,currentSecurityLevel:"maximum",timestamp:Date.now()},t=await this.calculateAndReportSecurityLevel();return t?{...t,...e}:{...e,level:"INITIALIZING",score:0,isRealData:!1}}catch(e){throw this._secureLog("error","Failed to calculate real security level",{error:e.message}),e}}_extractDTLSFingerprintFromSDP(e){try{if(!e||typeof e!="string")throw new Error("Invalid SDP provided");let t=/a=fingerprint:([a-zA-Z0-9-]+)\s+([A-Fa-f0-9:]+)/g,r=[],i;for(;(i=t.exec(e))!==null;)r.push({algorithm:i[1].toLowerCase(),fingerprint:i[2].trim()});if(r.length===0){let a=/fingerprint\s*=\s*([a-zA-Z0-9-]+)\s+([A-Fa-f0-9:]+)/gi;for(;(i=a.exec(e))!==null;)r.push({algorithm:i[1].toLowerCase(),fingerprint:i[2].trim()})}if(r.length===0)throw this._secureLog("warn","No DTLS fingerprints found in SDP - this may be normal for some WebRTC implementations",{sdpLength:e.length,sdpPreview:e.substring(0,200)+"..."}),new Error("No DTLS fingerprints found in SDP");return[...r].sort((a,o)=>{let c=a.algorithm==="sha-256",d=o.algorithm==="sha-256";if(c!==d)return c?-1:1;let u=a.algorithm.localeCompare(o.algorithm);return u!==0?u:a.fingerprint.localeCompare(o.fingerprint)})[0].fingerprint}catch(t){throw this._secureLog("error","Failed to extract DTLS fingerprint from SDP",{error:t.message,sdpLength:e?.length||0}),new Error(`DTLS fingerprint extraction failed: ${t.message}`)}}async _validateDTLSFingerprint(e,t,r="unknown"){try{if(!e||!t)throw new Error("Missing fingerprint for validation");let i=e.toLowerCase().replace(/:/g,""),n=t.toLowerCase().replace(/:/g,"");if(i!==n)throw this._secureLog("error","DTLS fingerprint mismatch - possible MITM attack",{context:r,timestamp:Date.now()}),new Error(`DTLS fingerprint mismatch - possible MITM attack in ${r}`);return this._secureLog("info","DTLS fingerprint validation successful",{context:r,timestamp:Date.now()}),!0}catch(i){throw this._secureLog("error","DTLS fingerprint validation failed",{error:i.message,context:r}),i}}async _computeSAS(e,t,r){try{if(!e){let b=[];throw e||b.push("keyMaterialRaw"),new Error(`Missing required parameters for SAS computation: ${b.join(", ")}`)}let i=new TextEncoder,n=(b,w)=>{if(typeof b!="string"||b.trim().length===0)throw new Error(`Security error: ${w} must be a non-empty DTLS fingerprint string for SAS computation`);return b.trim().toLowerCase()},a=n(t,"localFP"),o=n(r,"remoteFP"),c=i.encode("webrtc-sas|"+[a,o].sort().join("|")),d;if(e instanceof ArrayBuffer)d=e;else if(e instanceof Uint8Array)d=e.buffer;else if(typeof e=="string"){let b=e.replace(/:/g,"").replace(/\s/g,""),w=new Uint8Array(b.length/2);for(let M=0;M<b.length;M+=2)w[M/2]=parseInt(b.substr(M,2),16);d=w.buffer}else throw new Error("Invalid keyMaterialRaw type");let u=await crypto.subtle.importKey("raw",d,"HKDF",!1,["deriveBits"]),h=i.encode("p2p-sas-v1"),m=await crypto.subtle.deriveBits({name:"HKDF",hash:"SHA-256",salt:c,info:h},u,64),p=new DataView(m),S=(p.getUint32(0)^p.getUint32(4))>>>0,g=String(S%1e7).padStart(7,"0");return this._secureLog("info","SAS code computed successfully",{localFP:a.substring(0,16)+"...",remoteFP:o.substring(0,16)+"...",sasLength:g.length,timestamp:Date.now()}),g}catch(i){throw this._secureLog("error","SAS computation failed",{error:i.message,keyMaterialType:typeof e,hasLocalFP:!!t,hasRemoteFP:!!r,timestamp:Date.now()}),new Error(`SAS computation failed: ${i.message}`)}}_dispatchAppEvent(e){if(!this._emitGlobalEvents)return!1;try{return document.dispatchEvent(e)}catch{return!1}}_isSbq2(){return this._handshakeMode==="sbq2"}_latchHandshakeMode(e){if(this._handshakeMode&&this._handshakeMode!==e)throw new Error(`handshake format cannot change mid-session (${this._handshakeMode} -> ${e})`);this._handshakeMode=e}_sbq2State(){return this._sbq2||(this._sbq2={role:null,localDescriptor:null,remoteDescriptor:null,localBlob:null,remoteBlob:null,remoteCommitment:null,transcript:null,peerEcdhKey:null,peerEcdsaKey:null,blobSent:!1,proofSent:!1,proofVerified:!1,keysDerived:!1,pendingProof:null,completed:!1,timer:null,startedAt:0}),this._sbq2}_sbq2Abort(e,t){let r=this._sbq2;r?.timer&&(clearTimeout(r.timer),r.timer=null),this._secureLog("error","SBQ2 handshake aborted",{code:e});try{this.deliverMessageToUI(t,"system")}catch{}try{this.onStatusChange?.("failed")}catch{}try{this.disconnect()}catch{}}async _exportSpki(e){return new Uint8Array(await crypto.subtle.exportKey("spki",e))}async _sbq2BuildLocalBlob(e){if(!this.ecdhKeyPair?.publicKey||!this.ecdsaKeyPair?.publicKey)throw new Error("SBQ2: key pairs are not ready");let t=Cn({role:e,ecdhSpki:await this._exportSpki(this.ecdhKeyPair.publicKey),ecdsaSpki:await this._exportSpki(this.ecdsaKeyPair.publicKey)}),i=await Ht(async a=>new Uint8Array(await crypto.subtle.digest("SHA-256",a)),t),n=this._sbq2State();return n.role=e,n.localBlob=t,{blob:t,commitment:i}}async _sbq2BuildDescriptor(e,{bindingTag:t=null,lifetimeMs:r=600*1e3}={}){let i=this.peerConnection?.localDescription?.sdp;if(!i)throw new Error("SBQ2: no local description to encode");let n=e===de.OFFER?ve.OFFER:ve.ANSWER,{commitment:a}=await this._sbq2BuildLocalBlob(n),o=bn(i),c=_n({type:e,expiresAtMs:Date.now()+r,sdpFields:{...o,candidates:Pr(o.candidates)},commitment:a,...e===de.ANSWER?{bindingTag:t}:{}}),d=this._sbq2State();return d.localDescriptor=c,this._secureLog("info","SBQ2 descriptor built",{type:e===de.OFFER?"offer":"answer",bytes:c.length,candidates:Pr(o.candidates).length}),{bytes:c,text:vn(c)}}_sbq2AdoptRemoteDescriptor(e,t){let r=Fr(e);if(r.type!==t)throw new Error(`expected an ${t===de.OFFER?"invitation":"answer"}, got the other kind`);if(!r.commitment)throw new Error("the invitation carries no key commitment");let i=this._sbq2State();return i.remoteDescriptor=e,i.remoteCommitment=r.commitment,r}async _runSbq2KeyExchange(){let e=this._sbq2State();if(!(e.completed||e.blobSent)){if(e.startedAt=Date.now(),!e.localBlob||!e.localDescriptor||!e.remoteDescriptor||!e.remoteCommitment){this._sbq2Abort("incomplete_state","The secure handshake could not start because the connection setup is incomplete. Please start a new invitation.");return}e.timer=setTimeout(()=>{e.completed||this._sbq2Abort("timeout","The other side did not complete the secure handshake in time. Please try connecting again.")},s.SBQ2_KEY_EXCHANGE_TIMEOUT_MS);try{this.dataChannel.send(JSON.stringify({type:s.MESSAGE_TYPES.KEY_BLOB,v:2,blob:window.EnhancedSecureCryptoUtils.arrayBufferToBase64(e.localBlob.buffer.slice(e.localBlob.byteOffset,e.localBlob.byteOffset+e.localBlob.byteLength))})),e.blobSent=!0,this._secureLog("info","SBQ2 key blob sent",{bytes:e.localBlob.length})}catch{this._sbq2Abort("blob_send_failed","The secure handshake could not be sent. Please try connecting again.")}}}async _sbq2HandleHandshakeFrame(e){let t=s.MESSAGE_TYPES,r=this._sbq2State();if(!this._isSbq2()){this._secureLog("error","Rejected SBQ2 handshake frame on a non-SBQ2 session",{messageType:e?.type});return}try{if(e.type===t.KEY_BLOB){if(r.remoteBlob){this._sbq2Abort("duplicate_blob","The secure handshake was sent twice. The connection has been closed for safety.");return}let i=new Uint8Array(window.EnhancedSecureCryptoUtils.base64ToArrayBuffer(String(e.blob||"")));await Mn(crypto.subtle,i,r.remoteCommitment);let n=kn(i),a=r.role===ve.OFFER?ve.ANSWER:ve.OFFER;if(n.role!==a){this._sbq2Abort("role_mismatch","The other side sent the wrong kind of handshake. The connection has been closed for safety.");return}r.remoteBlob=i,r.peerEcdhKey=await crypto.subtle.importKey("spki",n.ecdhSpki,{name:"ECDH",namedCurve:"P-384"},!1,[]),r.peerEcdsaKey=await crypto.subtle.importKey("spki",n.ecdsaSpki,{name:"ECDSA",namedCurve:"P-384"},!1,["verify"]),await this._sbq2CompleteExchange();return}if(e.type===t.KEY_PROOF){let i=new Uint8Array(window.EnhancedSecureCryptoUtils.base64ToArrayBuffer(String(e.sig||"")));if(!r.transcript||!r.peerEcdsaKey){r.pendingProof=i;return}await this._sbq2VerifyProof(i);return}}catch(i){let n=i?.code||"handshake_failed",a=n==="commitment_mismatch"?"The key material does not match the invitation you scanned. This can mean someone tampered with the connection, so it has been closed.":"The secure handshake failed. The connection has been closed for safety.";this._sbq2Abort(n,a)}}async _sbq2CompleteExchange(){let e=this._sbq2State();if(e.keysDerived||!e.remoteBlob||!e.localBlob)return;this._peerSupportsRatchet=!0;let t=e.role===ve.OFFER;e.transcript=An({offerDescriptor:t?e.localDescriptor:e.remoteDescriptor,answerDescriptor:t?e.remoteDescriptor:e.localDescriptor,offerBlob:t?e.localBlob:e.remoteBlob,answerBlob:t?e.remoteBlob:e.localBlob}),this.sessionSalt=await xn(crypto.subtle,e.transcript),this.peerPublicKey=e.peerEcdhKey,this.peerECDHPublicKey=e.peerEcdhKey;let r=await window.EnhancedSecureCryptoUtils.deriveSharedKeys(this.ecdhKeyPair.privateKey,e.peerEcdhKey,this.sessionSalt);await this._setEncryptionKeys(r.messageKey,r.macKey,r.metadataKey,r.fingerprint),await this._initializeRatchet(r,t),e.keysDerived=!0;let i=new Uint8Array(await crypto.subtle.sign({name:"ECDSA",hash:"SHA-384"},this.ecdsaKeyPair.privateKey,Vr(e.transcript)));if(this.dataChannel.send(JSON.stringify({type:s.MESSAGE_TYPES.KEY_PROOF,sig:window.EnhancedSecureCryptoUtils.arrayBufferToBase64(i.buffer)})),e.proofSent=!0,e.pendingProof){let n=e.pendingProof;e.pendingProof=null,await this._sbq2VerifyProof(n)}}async _sbq2VerifyProof(e){let t=this._sbq2State();if(t.proofVerified)return;if(!await crypto.subtle.verify({name:"ECDSA",hash:"SHA-384"},t.peerEcdsaKey,e,Vr(t.transcript))){this._sbq2Abort("bad_proof","The other side could not prove it owns its identity key. The connection has been closed for safety.");return}t.proofVerified=!0,this.verificationCode=await Rn(crypto.subtle,{ecdhPrivateKey:this.ecdhKeyPair.privateKey,peerEcdhPublicKey:t.peerEcdhKey,transcript:t.transcript});let i=this.expectedDTLSFingerprint,n=this._peerDTLSFingerprint;i&&n&&this._setSASMaterialReady(i,n),t.completed=!0,t.timer&&(clearTimeout(t.timer),t.timer=null),this.securityFeatures.hasMutualAuth=!0,this.securityFeatures.hasMetadataProtection=!0,this.securityFeatures.hasEnhancedReplayProtection=!0,this._secureLog("info","SBQ2 in-band key exchange complete",{elapsedMs:Date.now()-t.startedAt,ratchetActive:this.isRatchetActive?.()===!0});try{this.onKeyExchange?.(this.keyFingerprint)}catch{}this._notifyVerificationReadyIfPossible(),this.initiateVerification()}_decodeKeyFingerprint(e){try{if(!e||typeof e!="string")throw new Error("Invalid hex string provided");return window.EnhancedSecureCryptoUtils.hexToUint8Array(e)}catch(t){throw this._secureLog("error","Key fingerprint decoding failed",{error:t.message,inputType:typeof e,inputLength:e?.length||0}),new Error(`Key fingerprint decoding failed: ${t.message}`)}}_emergencyWipeOnFingerprintMismatch(e="DTLS fingerprint mismatch"){try{this._secureLog("error","\u{1F6A8} EMERGENCY: Initiating security wipe due to fingerprint mismatch",{reason:e,timestamp:Date.now()}),this._secureWipeKeys(),this._secureWipeMemory(this.encryptionKey,"emergency_wipe"),this._secureWipeMemory(this.macKey,"emergency_wipe"),this._secureWipeMemory(this.metadataKey,"emergency_wipe"),this._wipeEphemeralKeys(),this._hardWipeOldKeys(),this.isVerified=null,this.verificationCode=null,this.keyFingerprint=null,this.connectionId=null,this.expectedDTLSFingerprint=null,this._peerDTLSFingerprint=null,this.disconnect(),this.deliverMessageToUI("\u{1F6A8} SECURITY BREACH: Connection terminated due to fingerprint mismatch. Possible MITM attack detected!","system")}catch(t){this._secureLog("error","Failed to perform emergency wipe",{error:t.message})}}getCurrentDTLSFingerprint(){try{if(!this.expectedDTLSFingerprint)throw new Error("No DTLS fingerprint available - connection not established");return this.expectedDTLSFingerprint}catch(e){throw this._secureLog("error","Failed to get current DTLS fingerprint",{error:e.message}),e}}disableStrictDTLSValidation(){this.strictDTLSValidation=!1,this._secureLog("warn","\u26A0\uFE0F Strict DTLS validation disabled - security reduced",{timestamp:Date.now()}),this.deliverMessageToUI("\u26A0\uFE0F DTLS validation disabled for debugging","system")}enableStrictDTLSValidation(){this.strictDTLSValidation=!0,this._secureLog("info","\u2705 Strict DTLS validation re-enabled",{timestamp:Date.now()}),this.deliverMessageToUI("\u2705 DTLS validation re-enabled","system")}async _initializeRatchet(e,t){let r=e?.ratchetRoot;if(!r)return!1;if(!this._peerSupportsRatchet)return this._secureLog("warn","Peer did not advertise Double Ratchet \u2014 falling back to static session keys",{localVersion:s.RATCHET_VERSION}),window.EnhancedSecureCryptoUtils.zeroizeBuffer(r),!1;try{let i=this.peerPublicKey||this.peerECDHPublicKey;if(!i||!this.ecdhKeyPair?.privateKey)throw new Error("handshake ECDH keys unavailable");let n=new zt;return await n.init({sharedSecret:r,sessionSalt:new Uint8Array(this.sessionSalt||[]),selfPrivateKey:this.ecdhKeyPair.privateKey,remotePublicKey:i,isInitiator:t}),this._ratchet=n,this.securityFeatures.hasPFS=!0,this._secureLog("info","\u{1F510} Double Ratchet active \u2014 per-message forward secrecy enabled",{role:t?"initiator":"responder"}),!0}catch(i){return this._ratchet=null,this.securityFeatures.hasPFS=!1,this._secureLog("error","Double Ratchet initialisation failed \u2014 continuing with static session keys",{errorType:i?.constructor?.name||"Unknown"}),!1}finally{window.EnhancedSecureCryptoUtils.zeroizeBuffer(r)}}isRatchetActive(){return!!this._ratchet?.isInitialised}async _generateEphemeralECDHKeys(){try{this._secureLog("info","\u{1F511} Generating ephemeral ECDH keys for PFS",{sessionStartTime:this.sessionStartTime,timestamp:Date.now()});let e=await window.EnhancedSecureCryptoUtils.generateECDHKeyPair();if(!e||!this._validateKeyPairConstantTime(e))throw new Error("Ephemeral ECDH key pair validation failed");let t=this.currentSession?.sessionId||`session_${Date.now()}`;return this.ephemeralKeyPairs.set(t,{keyPair:e,timestamp:Date.now(),sessionId:t}),this._secureLog("info","\u2705 Ephemeral ECDH keys generated for PFS",{timestamp:Date.now()}),e}catch(e){throw this._secureLog("error","\u274C Failed to generate ephemeral ECDH keys",{error:e.message}),new Error(`Ephemeral key generation failed: ${e.message}`)}}async _hardWipeOldKeys(){try{this._secureLog("info","\u{1F9F9} Performing hard wipe of old keys for PFS",{oldKeysCount:this.oldKeys.size,timestamp:Date.now()});for(let[e,t]of this.oldKeys.entries())t.encryptionKey&&this._secureWipeMemory(t.encryptionKey,"pfs_key_wipe"),t.macKey&&this._secureWipeMemory(t.macKey,"pfs_key_wipe"),t.metadataKey&&this._secureWipeMemory(t.metadataKey,"pfs_key_wipe"),t.encryptionKey=null,t.macKey=null,t.metadataKey=null,t.keyFingerprint=null;this.oldKeys.clear(),await this._performNaturalCleanup(),this._secureLog("info","\u2705 Hard wipe of old keys completed for PFS",{timestamp:Date.now()})}catch(e){this._secureLog("error","\u274C Failed to perform hard wipe of old keys",{error:e.message})}}async _wipeEphemeralKeys(){try{this._secureLog("info","\u{1F9F9} Wiping ephemeral keys for PFS",{ephemeralKeysCount:this.ephemeralKeyPairs.size,timestamp:Date.now()});for(let[e,t]of this.ephemeralKeyPairs.entries())t.keyPair?.privateKey&&this._secureWipeMemory(t.keyPair.privateKey,"ephemeral_key_wipe"),t.keyPair?.publicKey&&this._secureWipeMemory(t.keyPair.publicKey,"ephemeral_key_wipe"),t.keyPair=null,t.timestamp=null,t.sessionId=null;this.ephemeralKeyPairs.clear(),await this._performNaturalCleanup(),this._secureLog("info","\u2705 Ephemeral keys wiped for PFS",{timestamp:Date.now()})}catch(e){this._secureLog("error","\u274C Failed to wipe ephemeral keys",{error:e.message})}}async _encryptFileMessage(e,t){try{if(!this.encryptionKey)throw new Error("No encryption key available for file message");let r=typeof e=="string"?e:JSON.stringify(e),n={type:"encrypted_file_message",encryptedData:await window.EnhancedSecureCryptoUtils.encryptDataWithAAD(r,this.encryptionKey,t),aad:t,timestamp:Date.now(),keyFingerprint:this.keyFingerprint};return JSON.stringify(n)}catch(r){throw this._secureLog("error","Failed to encrypt file message",{error:r.message}),new Error(`File message encryption failed: ${r.message}`)}}async _decryptFileMessage(e){try{let t=JSON.parse(e);if(t.type!=="encrypted_file_message")throw new Error("Invalid encrypted file message type");if(t.keyFingerprint!==this.keyFingerprint)throw new Error("Key fingerprint mismatch in encrypted file message");let r=this._validateMessageAAD(t.aad,"file_message");if(!this.encryptionKey)throw new Error("No encryption key available for file message decryption");return{decryptedData:await window.EnhancedSecureCryptoUtils.decryptDataWithAAD(t.encryptedData,this.encryptionKey,t.aad),aad:r}}catch(t){throw this._secureLog("error","Failed to decrypt file message",{error:t.message}),new Error(`File message decryption failed: ${t.message}`)}}_validateEncryptionKeys(e=!0){let t=!!(this.encryptionKey&&this.macKey&&this.metadataKey);if(!t&&e)throw new Error("Encryption keys not initialized");return t}async _tryReinitializeEncryptionKeys(){try{if(this.encryptionKey&&this.macKey&&this.metadataKey)return!0;let e=!!(this.ecdhKeyPair?.privateKey&&(this.peerPublicKey||this.peerECDHPublicKey)),t=this.peerPublicKey||this.peerECDHPublicKey;if(!e||!t||!this.sessionSalt)return!1;let r=await window.EnhancedSecureCryptoUtils.deriveSharedKeys(this.ecdhKeyPair.privateKey,t,this.sessionSalt);return await this._setEncryptionKeys(r.messageKey,r.macKey,r.metadataKey,r.fingerprint),!!(this.encryptionKey&&this.macKey&&this.metadataKey)}catch(e){return this._secureLog("error","Failed to reinitialize encryption keys",{error:e.message}),!1}}_isFileMessage(e){if(typeof e=="string")try{let t=JSON.parse(e);return t.type&&t.type.startsWith("file_")}catch{return!1}return typeof e=="object"&&e.type?e.type.startsWith("file_"):!1}_isSystemMessage(e){let t=[s.MESSAGE_TYPES.HEARTBEAT,s.MESSAGE_TYPES.VERIFICATION,s.MESSAGE_TYPES.VERIFICATION_RESPONSE,s.MESSAGE_TYPES.VERIFICATION_CONFIRMED,s.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,s.MESSAGE_TYPES.PEER_DISCONNECT,s.MESSAGE_TYPES.SECURITY_UPGRADE,s.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,s.MESSAGE_TYPES.KEY_ROTATION_READY];if(typeof e=="string")try{let r=JSON.parse(e);return t.includes(r.type)}catch{return!1}return typeof e=="object"&&e.type?t.includes(e.type):!1}_isFakeMessage(e){if(typeof e=="string")try{let t=JSON.parse(e);return t.type===s.MESSAGE_TYPES.FAKE||t.isFakeTraffic===!0}catch{return!1}return typeof e=="object"&&e!==null?e.type===s.MESSAGE_TYPES.FAKE||e.isFakeTraffic===!0:!1}_withErrorHandling(e,t,r=null){try{return e()}catch(i){return this._debugMode&&this._secureLog("error","\u274C ${errorMessage}:",{errorType:i?.constructor?.name||"Unknown"}),r}}async _withAsyncErrorHandling(e,t,r=null){try{return await e()}catch(i){return this._debugMode&&this._secureLog("error","\u274C ${errorMessage}:",{errorType:i?.constructor?.name||"Unknown"}),r}}_getMessageType(e){if(typeof e=="string")try{return JSON.parse(e).type||null}catch{return null}return typeof e=="object"&&e!==null&&e.type||null}_resetNotificationFlags(){this.lastSecurityLevelNotification=null,this.verificationNotificationSent=!1,this.verificationInitiationSent=!1,this._verificationUiOpened=!1,this._sasLocalFingerprint=null,this._sasRemoteFingerprint=null,this.disconnectNotificationSent=!1,this.reconnectionFailedNotificationSent=!1,this.peerDisconnectNotificationSent=!1,this.connectionClosedNotificationSent=!1,this.fakeTrafficDisabledNotificationSent=!1,this.advancedFeaturesDisabledNotificationSent=!1,this.securityUpgradeNotificationSent=!1,this.lastSecurityUpgradeStage=null,this.securityCalculationNotificationSent=!1,this.lastSecurityCalculationLevel=null}_isFilteredMessage(e){return Object.values(s.FILTERED_RESULTS).includes(e)}_cleanupLogs(){this._logCounts.size>500&&(this._logCounts.clear(),this._secureLog("debug","\u{1F9F9} Log counts cleared due to size limit"));let e=Date.now(),t=3e5,r=0;for(let[i,n]of this._logCounts.entries())n>10&&r++;r>20&&(this._logCounts.clear(),this._secureLog("warn","\u{1F6A8} Emergency log cleanup due to suspicious patterns")),this._logSecurityViolations>0&&r<5&&(this._logSecurityViolations=Math.max(0,this._logSecurityViolations-1)),(!this._lastIVCleanupTime||Date.now()-this._lastIVCleanupTime>3e5)&&(this._cleanupOldIVs(),this._lastIVCleanupTime=Date.now()),(!this._secureMemoryManager.memoryStats.lastCleanup||Date.now()-this._secureMemoryManager.memoryStats.lastCleanup>6e5)&&(this._performPeriodicMemoryCleanup().catch(i=>{this._secureLog("error","Periodic cleanup failed",{errorType:i?.constructor?.name||"Unknown"})}),this._secureMemoryManager.memoryStats.lastCleanup=Date.now())}_getLoggingStats(){let e={isProductionMode:this._isProductionMode,debugMode:this._debugMode,currentLogLevel:this._currentLogLevel,logCountsSize:this._logCounts.size,maxLogCount:this._maxLogCount,securityViolations:this._logSecurityViolations||0,maxSecurityViolations:this._maxLogSecurityViolations||3,systemStatus:this._currentLogLevel===-1?"DISABLED":"ACTIVE"},t={};for(let[r,i]of Object.entries(e))typeof i=="string"&&this._containsSensitiveContent(i)?t[r]="[SENSITIVE_DATA_REDACTED]":t[r]=i;return t}async _emergencyDisableLogging(){this._currentLogLevel=-1,this._logCounts.clear(),this._logSecurityViolations&&(this._logSecurityViolations=0),this._secureLog=()=>{arguments[0]==="error"&&this._originalConsole?.error&&this._originalConsole.error("\u{1F6A8} SECURITY: Logging system disabled - potential data exposure prevented")},this._originalSanitizeString=this._sanitizeString,this._originalSanitizeLogData=this._sanitizeLogData,this._originalAuditLogMessage=this._auditLogMessage,this._originalContainsSensitiveContent=this._containsSensitiveContent,this._sanitizeString=()=>"[LOGGING_DISABLED]",this._sanitizeLogData=()=>({error:"LOGGING_DISABLED"}),this._auditLogMessage=()=>!1,this._containsSensitiveContent=()=>!0,await this._performNaturalCleanup(),this._originalConsole?.error?.("\u{1F6A8} CRITICAL: Secure logging system disabled due to potential data exposure")}_resetLoggingSystem(){this._secureLog("info","\u{1F527} Resetting logging system after emergency shutdown"),this._sanitizeString=this._originalSanitizeString||(e=>e),this._sanitizeLogData=this._originalSanitizeLogData||(e=>e),this._auditLogMessage=this._originalAuditLogMessage||(()=>!0),this._containsSensitiveContent=this._originalContainsSensitiveContent||(()=>!1),this._logSecurityViolations=0,this._secureLog("info","\u2705 Logging system reset successfully")}_auditLogMessage(e,t){if(!t||typeof t!="object")return!0;let r=JSON.stringify(t);if(this._containsSensitiveContent(e))return this._emergencyDisableLogging(),this._originalConsole?.error?.("\u{1F6A8} SECURITY BREACH: Sensitive content detected in log message"),!1;if(this._containsSensitiveContent(r))return this._emergencyDisableLogging(),this._originalConsole?.error?.("\u{1F6A8} SECURITY BREACH: Sensitive content detected in log data"),!1;let i=["secret","token","password","credential","auth","fingerprint","salt","signature","private_key","api_key","private","encryption","mac","metadata","session","jwt","bearer","key","hash","digest","nonce","iv","cipher"],n=r.toLowerCase();for(let a of i)if(n.includes(a)&&!this._safeFieldsWhitelist.has(a))return this._emergencyDisableLogging(),this._originalConsole?.error?.(`\u{1F6A8} SECURITY BREACH: Dangerous pattern detected in log: ${a}`),!1;for(let[a,o]of Object.entries(t))if(typeof o=="string"&&this._hasHighEntropy(o))return this._emergencyDisableLogging(),this._originalConsole?.error?.(`\u{1F6A8} SECURITY BREACH: High entropy value detected in log field: ${a}`),!1;return!0}initializeFileTransfer(){try{if(this._sessionAlive===!1)return;if(this._secureLog("info","\u{1F527} Initializing Enhanced Secure File Transfer system..."),this.fileTransferSystem){this._secureLog("info","\u2705 File transfer system already initialized");return}if(!!!(this.dataChannel&&this.dataChannel.readyState==="open")){if(this._secureLog("warn","\u26A0\uFE0F Data channel not open, deferring file transfer initialization"),this.dataChannel){let i=()=>{this._secureLog("info","\u{1F504} DataChannel opened, initializing file transfer..."),this.initializeFileTransfer()};this.dataChannel.addEventListener("open",i,{once:!0})}return}if(!this.isVerified){this._secureLog("warn","\u26A0\uFE0F Connection not verified yet, deferring file transfer initialization"),this._scheduleFileTransferInitRetry(500);return}if(this.fileTransferSystem&&(this._secureLog("info","\u{1F9F9} Cleaning up existing file transfer system"),this.fileTransferSystem.cleanup(),this.fileTransferSystem=null),!this.encryptionKey||!this.macKey){this._secureLog("warn","\u26A0\uFE0F Encryption keys not ready, deferring file transfer initialization"),this._scheduleFileTransferInitRetry(1e3);return}let t=i=>{try{this._secureLog("info","\u{1F3C1} Sender transfer summary",{summary:i}),this.onFileProgress&&this.onFileProgress({type:"complete",...i})}catch(n){this._secureLog("warn","\u26A0\uFE0F onComplete handler failed:",{details:n.message})}};this.fileTransferSystem=new je(this,this.onFileProgress||null,t,this.onFileError||null,this.onFileReceived||null,this.onIncomingFileRequest||null),this._fileTransferActive=!0,this._secureLog("info","\u2705 Enhanced Secure File Transfer system initialized successfully");let r=this.fileTransferSystem.getSystemStatus();this._secureLog("info","\u{1F50D} File transfer system status after init",{status:r})}catch(e){this._secureLog("error","\u274C Failed to initialize file transfer system",{errorType:e.constructor.name}),this.fileTransferSystem=null,this._fileTransferActive=!1}}_scheduleFileTransferInitRetry(e){if(this._sessionAlive===!1)return null;this._fileTransferInitRetryTimers||(this._fileTransferInitRetryTimers=new Set);let t=this._trackActiveTimer(setTimeout(()=>{this._fileTransferInitRetryTimers.delete(t),this._untrackActiveTimer(t),this._sessionAlive!==!1&&this.initializeFileTransfer()},e));return this._fileTransferInitRetryTimers.add(t),t}async initializeEnhancedSecurity(){try{await this.generateNestedEncryptionKey(),this.decoyChannelConfig.enabled&&this.initializeDecoyChannels(),this.fakeTrafficConfig.enabled&&this.startFakeTrafficGeneration()}catch(e){this._secureLog("error","\u274C Failed to initialize enhanced security",{errorType:e.constructor.name})}}getSafeRandomInt(e,t){if(!Number.isInteger(e)||!Number.isInteger(t))throw new Error("getSafeRandomInt requires integer min and max");if(e>=t)throw new Error("min must be less than max");let r=t-e+1,i=Math.ceil(Math.log2(r)),n=Math.ceil(i/8),a=(1<<i)-1,o;do{let c=crypto.getRandomValues(new Uint8Array(n));o=0;for(let d=0;d<n;d++)o=o*256+c[d];o=o&a}while(o>=r);return e+o}getSafeRandomFloat(e,t,r=1e3){if(typeof e!="number"||typeof t!="number")throw new Error("getSafeRandomFloat requires numeric min and max");if(e>=t)throw new Error("minFloat must be less than maxFloat");let i=this.getSafeRandomInt(0,r),n=(t-e)/r;return e+i*n}generateFingerprintMask(){return{timingOffset:this.getSafeRandomInt(0,1500),sizeVariation:this.getSafeRandomFloat(.75,1.25,1e3),noisePattern:Array.from(crypto.getRandomValues(new Uint8Array(64))),headerVariations:["X-Client-Version","X-Session-ID","X-Request-ID","X-Timestamp","X-Signature","X-Secure","X-Encrypted","X-Protected","X-Safe","X-Anonymous","X-Private"],noiseIntensity:this.getSafeRandomInt(50,150),sizeMultiplier:this.getSafeRandomFloat(.75,1.25,1e3),timingVariation:this.getSafeRandomInt(100,1100)}}configureSecurityForSession(){this._secureLog("info","\u{1F527} Configuring security - all features enabled by default"),this.sessionConstraints={},Object.keys(this.securityFeatures).forEach(e=>{this.sessionConstraints[e]=!0}),this.applySessionConstraints(),this._secureLog("info","\u2705 Security configured - all features enabled",{constraints:this.sessionConstraints}),this._validateCryptographicSecurity()||(this._secureLog("error","\u{1F6A8} CRITICAL: Cryptographic security validation failed after session configuration"),this.onStatusChange&&this.onStatusChange("security_breach",{type:"crypto_security_failure",message:"Cryptographic security validation failed after session configuration"})),this.notifySecurityLevel(),setTimeout(()=>{this.calculateAndReportSecurityLevel()},s.TIMEOUTS.SECURITY_CALC_DELAY)}applySessionConstraints(){this.sessionConstraints&&(Object.keys(this.sessionConstraints).forEach(e=>{switch(this.securityFeatures[e]=!0,e){case"hasFakeTraffic":this.fakeTrafficConfig.enabled=!0,this.isConnected()&&this.startFakeTrafficGeneration();break;case"hasDecoyChannels":this.decoyChannelConfig.enabled=!0,this.isConnected()&&this.initializeDecoyChannels();break;case"hasPacketReordering":this.reorderingConfig.enabled=!0;break;case"hasAntiFingerprinting":this.antiFingerprintingConfig.enabled=!0;break;case"hasMessageChunking":this.chunkingConfig.enabled=!0;break}}),this._secureLog("info","\u2705 All security features enabled by default",{constraints:this.sessionConstraints,currentFeatures:this.securityFeatures}))}_sanitizeIncomingChatMessage(e){return typeof e!="string"?e:window.EnhancedSecureCryptoUtils.sanitizeMessage(e)}deliverMessageToUI(e,t="received",r=null){try{if(this._secureLog("debug","\u{1F4E4} deliverMessageToUI called",{message:e,type:t,messageType:typeof e,hasOnMessage:!!this.onMessage}),typeof e=="object"&&e.type&&[s.MESSAGE_TYPES.FILE_TRANSFER_START,s.MESSAGE_TYPES.FILE_TRANSFER_RESPONSE,s.MESSAGE_TYPES.FILE_CHUNK,s.MESSAGE_TYPES.CHUNK_CONFIRMATION,s.MESSAGE_TYPES.FILE_TRANSFER_COMPLETE,s.MESSAGE_TYPES.FILE_TRANSFER_ERROR,s.MESSAGE_TYPES.HEARTBEAT,s.MESSAGE_TYPES.VERIFICATION,s.MESSAGE_TYPES.VERIFICATION_RESPONSE,s.MESSAGE_TYPES.VERIFICATION_CONFIRMED,s.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,s.MESSAGE_TYPES.PEER_DISCONNECT,s.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,s.MESSAGE_TYPES.KEY_ROTATION_READY,s.MESSAGE_TYPES.SECURITY_UPGRADE].includes(e.type)){this._debugMode&&this._secureLog("warn",`\u{1F6D1} Blocked system/file message from UI: ${e.type}`);return}if(typeof e=="string"&&e.trim().startsWith("{"))try{let n=JSON.parse(e);if(n.type&&[s.MESSAGE_TYPES.FILE_TRANSFER_START,s.MESSAGE_TYPES.FILE_TRANSFER_RESPONSE,s.MESSAGE_TYPES.FILE_CHUNK,s.MESSAGE_TYPES.CHUNK_CONFIRMATION,s.MESSAGE_TYPES.FILE_TRANSFER_COMPLETE,s.MESSAGE_TYPES.FILE_TRANSFER_ERROR,s.MESSAGE_TYPES.HEARTBEAT,s.MESSAGE_TYPES.VERIFICATION,s.MESSAGE_TYPES.VERIFICATION_RESPONSE,s.MESSAGE_TYPES.VERIFICATION_CONFIRMED,s.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,s.MESSAGE_TYPES.PEER_DISCONNECT,s.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,s.MESSAGE_TYPES.KEY_ROTATION_READY,s.MESSAGE_TYPES.SECURITY_UPGRADE].includes(n.type)){this._debugMode&&this._secureLog("warn",`\u{1F6D1} Blocked system/file message from UI (string): ${n.type}`);return}}catch{}let i=t==="received"?this._sanitizeIncomingChatMessage(e):e;if(this.onMessage){let n=r&&typeof this._sanitizeMessageMeta=="function"?this._sanitizeMessageMeta(r):null;this._secureLog("debug","\u{1F4E4} Calling this.onMessage callback",{message:i,type:t}),this.onMessage(i,t,n||void 0)}else this._secureLog("warn","\u26A0\uFE0F this.onMessage callback is null or undefined")}catch(i){this._secureLog("error","\u274C Failed to deliver message to UI:",{errorType:i?.constructor?.name||"Unknown"})}}notifySecurityLevel(){if(this.lastSecurityLevelNotification==="maximum")return;if(this.lastSecurityLevelNotification="maximum",this.onMessage&&this.deliverMessageToUI("\u{1F6E1}\uFE0F Maximum Security Active - All features enabled","system"),this.onMessage){let t=Object.entries(this.securityFeatures).filter(([r,i])=>i===!0).map(([r])=>r.replace("has","").replace(/([A-Z])/g," $1").trim().toLowerCase()).slice(0,5);this.deliverMessageToUI(`\u{1F527} Active: ${t.join(", ")}...`,"system")}}cleanupDecoyChannels(){for(let[e,t]of this.decoyTimers.entries())clearTimeout(t);this.decoyTimers.clear();for(let[e,t]of this.decoyChannels.entries())t.readyState==="open"&&t.close();this.decoyChannels.clear(),this._secureLog("info","\u{1F9F9} Decoy channels cleaned up")}async generateNestedEncryptionKey(){try{this.nestedEncryptionKey=await crypto.subtle.generateKey({name:"AES-GCM",length:256},!1,["encrypt","decrypt"])}catch(e){throw this._secureLog("error","\u274C Failed to generate nested encryption key:",{errorType:e?.constructor?.name||"Unknown"}),e}}async applyNestedEncryption(e){if(!this.nestedEncryptionKey||!this.securityFeatures.hasNestedEncryption)return e;try{let t=this._generateSecureIV(s.SIZES.NESTED_ENCRYPTION_IV_SIZE,"nestedEncryption"),r=await crypto.subtle.encrypt({name:"AES-GCM",iv:t},this.nestedEncryptionKey,e),i=new Uint8Array(s.SIZES.NESTED_ENCRYPTION_IV_SIZE+r.byteLength);return i.set(t,0),i.set(new Uint8Array(r),s.SIZES.NESTED_ENCRYPTION_IV_SIZE),this._secureLog("debug","\u2705 Nested encryption applied with secure IV",{ivSize:t.length,dataSize:e.byteLength,encryptedSize:r.byteLength}),i.buffer}catch(t){return this._secureLog("error","\u274C Nested encryption failed:",{errorType:t?.constructor?.name||"Unknown",errorMessage:t?.message||"Unknown error"}),t.message.includes("emergency mode")&&(this.securityFeatures.hasNestedEncryption=!1,this._secureLog("warn","\u26A0\uFE0F Nested encryption disabled due to IV emergency mode")),e}}async removeNestedEncryption(e){if(!this.nestedEncryptionKey||!this.securityFeatures.hasNestedEncryption)return e;if(!(e instanceof ArrayBuffer)||e.byteLength<s.SIZES.NESTED_ENCRYPTION_IV_SIZE+16)return this._debugMode&&this._secureLog("debug","\u{1F4DD} Data not encrypted or too short for nested decryption (need IV + minimum encrypted data)"),e;try{let t=new Uint8Array(e),r=t.slice(0,s.SIZES.NESTED_ENCRYPTION_IV_SIZE),i=t.slice(s.SIZES.NESTED_ENCRYPTION_IV_SIZE);return i.length===0?(this._debugMode&&this._secureLog("debug","\u{1F4DD} No encrypted data found"),e):await crypto.subtle.decrypt({name:"AES-GCM",iv:r},this.nestedEncryptionKey,i)}catch(t){return t.name==="OperationError"?this._debugMode&&this._secureLog("debug","\u{1F4DD} Data not encrypted with nested encryption, skipping..."):this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Nested decryption failed:",{details:t.message}),e}}applyPacketPadding(e){if(!this.securityFeatures.hasPacketPadding)return e;try{let t=e.byteLength,r;this.paddingConfig.useRandomPadding?r=Math.floor(Math.random()*(this.paddingConfig.maxPadding-this.paddingConfig.minPadding+1))+this.paddingConfig.minPadding:r=this.paddingConfig.minPadding;let i=crypto.getRandomValues(new Uint8Array(r)),n=new Uint8Array(t+r+4);return new DataView(n.buffer,0,4).setUint32(0,t,!1),n.set(new Uint8Array(e),4),n.set(i,4+t),n.buffer}catch(t){return this._secureLog("error","\u274C Packet padding failed:",{errorType:t?.constructor?.name||"Unknown"}),e}}removePacketPadding(e){if(!this.securityFeatures.hasPacketPadding)return e;try{let t=new Uint8Array(e);if(t.length<5)return this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Data too short for packet padding removal, skipping"),e;let i=new DataView(t.buffer,0,4).getUint32(0,!1);return i<=0||i>t.length-4?(this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Invalid packet padding size, skipping removal"),e):t.slice(4,4+i).buffer}catch(t){return this._debugMode&&this._secureLog("error","\u274C Packet padding removal failed:",{errorType:t?.constructor?.name||"Unknown"}),e}}startFakeTrafficGeneration(){if(!this.fakeTrafficConfig.enabled||!this.isConnected())return;if(this.fakeTrafficTimer){this._secureLog("warn","\u26A0\uFE0F Fake traffic generation already running");return}let e=async()=>{if(!this.isConnected()){this.stopFakeTrafficGeneration();return}try{let n=this.generateFakeMessage();await this.sendFakeMessage(n);let a=this.fakeTrafficConfig.randomDecoyIntervals?this.getUnbiasedRandomInRange(this.fakeTrafficConfig.minInterval,Math.min(this.fakeTrafficConfig.maxInterval,6e4)):this.fakeTrafficConfig.minInterval,o=Math.max(a,s.TIMEOUTS.FAKE_TRAFFIC_MIN_INTERVAL);this.fakeTrafficTimer=setTimeout(e,o)}catch(n){this._debugMode&&this._secureLog("error","\u274C Fake traffic generation failed:",{errorType:n?.constructor?.name||"Unknown"}),this.stopFakeTrafficGeneration()}},t=s.TIMEOUTS.DECOY_INITIAL_DELAY,r=Math.min(this.fakeTrafficConfig.maxInterval,3e4),i=this.getUnbiasedRandomInRange(t,r);this.fakeTrafficTimer=setTimeout(e,i)}stopFakeTrafficGeneration(){this.fakeTrafficTimer&&(clearTimeout(this.fakeTrafficTimer),this.fakeTrafficTimer=null)}generateFakeMessage(){let e=this.getUnbiasedRandomInRange(0,this.fakeTrafficConfig.patterns.length-1),t=this.fakeTrafficConfig.patterns[e],r=this.getUnbiasedRandomInRange(this.fakeTrafficConfig.minSize,this.fakeTrafficConfig.maxSize),i=crypto.getRandomValues(new Uint8Array(r));return{type:s.MESSAGE_TYPES.FAKE,pattern:t,data:Array.from(i).map(n=>n.toString(16).padStart(2,"0")).join(""),timestamp:Date.now(),size:r,isFakeTraffic:!0,source:"fake_traffic_generator",fakeId:crypto.getRandomValues(new Uint32Array(1))[0].toString(36)}}emergencyDisableAdvancedFeatures(){this._secureLog("error","\u{1F6A8} Emergency disabling advanced security features due to errors"),this.securityFeatures.hasNestedEncryption=!1,this.securityFeatures.hasPacketReordering=!1,this.securityFeatures.hasAntiFingerprinting=!1,this.reorderingConfig.enabled=!1,this.antiFingerprintingConfig.enabled=!1,this.packetBuffer.clear(),this.emergencyDisableFakeTraffic(),this._secureLog("info","\u2705 Advanced features disabled, keeping basic encryption"),this.advancedFeaturesDisabledNotificationSent||(this.advancedFeaturesDisabledNotificationSent=!0,this.onMessage&&this.deliverMessageToUI("\u{1F6A8} Advanced security features temporarily disabled due to compatibility issues","system"))}async sendFakeMessage(e){if(this._validateConnection(!1))try{this._secureLog("debug","\u{1F3AD} Sending fake message",{hasPattern:!!e.pattern,sizeRange:e.size>100?"large":"small"});let t=JSON.stringify({...e,type:s.MESSAGE_TYPES.FAKE,isFakeTraffic:!0,timestamp:Date.now()}),r=new TextEncoder().encode(t),i=await this.applySecurityLayers(r,!0);this.dataChannel.send(i),this._secureLog("debug","\u{1F3AD} Fake message sent successfully",{pattern:e.pattern})}catch(t){this._secureLog("error","\u274C Failed to send fake message",{error:t.message})}}checkFakeTrafficStatus(){let e={fakeTrafficEnabled:this.securityFeatures.hasFakeTraffic,fakeTrafficConfigEnabled:this.fakeTrafficConfig.enabled,timerActive:!!this.fakeTrafficTimer,patterns:this.fakeTrafficConfig.patterns,intervals:{min:this.fakeTrafficConfig.minInterval,max:this.fakeTrafficConfig.maxInterval}};return this._debugMode&&this._secureLog("info","\u{1F3AD} Fake Traffic Status",{status:e}),e}emergencyDisableFakeTraffic(){this._debugMode&&this._secureLog("error","\u{1F6A8} Emergency disabling fake traffic"),this.securityFeatures.hasFakeTraffic=!1,this.fakeTrafficConfig.enabled=!1,this.stopFakeTrafficGeneration(),this._debugMode&&this._secureLog("info","\u2705 Fake traffic disabled"),this.fakeTrafficDisabledNotificationSent||(this.fakeTrafficDisabledNotificationSent=!0,this.onMessage&&this.deliverMessageToUI("\u{1F6A8} Fake traffic emergency disabled","system"))}async _applySecurityLayersWithoutMutex(e,t=!1){try{let r=e;return t?(this.encryptionKey&&typeof r=="string"&&(r=await window.EnhancedSecureCryptoUtils.encryptData(r,this.encryptionKey)),r):(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&r instanceof ArrayBuffer&&(r=await this.applyNestedEncryption(r)),this.securityFeatures.hasPacketReordering&&this.reorderingConfig?.enabled&&r instanceof ArrayBuffer&&(r=this.applyPacketReordering(r)),this.securityFeatures.hasPacketPadding&&r instanceof ArrayBuffer&&(r=this.applyPacketPadding(r)),this.securityFeatures.hasAntiFingerprinting&&r instanceof ArrayBuffer&&(r=this.applyAntiFingerprinting(r)),this.encryptionKey&&typeof r=="string"&&(r=await window.EnhancedSecureCryptoUtils.encryptData(r,this.encryptionKey)),r)}catch(r){return this._secureLog("error","\u274C Error in applySecurityLayersWithoutMutex:",{errorType:r?.constructor?.name||"Unknown"}),e}}async processChunkedMessage(e){try{if(!this.chunkingConfig.addChunkHeaders)return this.processMessage(e);let t=new Uint8Array(e);if(t.length<16)return this.processMessage(e);let r=new DataView(t.buffer,0,16),i=r.getUint32(0,!1),n=r.getUint32(4,!1),a=r.getUint32(8,!1),o=r.getUint32(12,!1),c=t.slice(16,16+o);this.chunkQueue[i]||(this.chunkQueue[i]={chunks:new Array(a),received:0,timestamp:Date.now()});let d=this.chunkQueue[i];if(d.chunks[n]=c,d.received++,this._secureLog("debug",`\u{1F4E6} Received chunk ${n+1}/${a} for message ${i}`),d.received===a){let u=d.chunks.reduce((p,S)=>p+S.length,0),h=new Uint8Array(u),m=0;for(let p of d.chunks)h.set(p,m),m+=p.length;await this.processMessage(h.buffer),delete this.chunkQueue[i],this._secureLog("info",`\u{1F4E6} Chunked message ${i} reassembled and processed`)}}catch(t){this._secureLog("error","\u274C Chunked message processing failed:",{errorType:t?.constructor?.name||"Unknown"})}}initializeDecoyChannels(){if(!(!this.decoyChannelConfig.enabled||!this.peerConnection)){if(this.decoyChannels.size>0){this._secureLog("warn","\u26A0\uFE0F Decoy channels already initialized, skipping...");return}try{let e=Math.min(this.decoyChannelConfig.maxDecoyChannels,this.decoyChannelConfig.decoyChannelNames.length);for(let t=0;t<e;t++){let r=this.decoyChannelConfig.decoyChannelNames[t],i=this.peerConnection.createDataChannel(r,{ordered:Math.random()>.5,maxRetransmits:Math.floor(Math.random()*3)});this.setupDecoyChannel(i,r),this.decoyChannels.set(r,i)}this._debugMode&&this._secureLog("info",`\u{1F3AD} Initialized ${e} decoy channels`)}catch(e){this._debugMode&&this._secureLog("error","\u274C Failed to initialize decoy channels:",{errorType:e?.constructor?.name||"Unknown"})}}}setupDecoyChannel(e,t){e.onopen=()=>{this._debugMode&&this._secureLog("debug",`\u{1F3AD} Decoy channel "${t}" opened`),this.startDecoyTraffic(e,t)},e.onmessage=r=>{this._debugMode&&this._secureLog("debug",`\u{1F3AD} Received decoy message on "${t}": ${r.data?.length||"undefined"} bytes`)},e.onclose=()=>{this._debugMode&&this._secureLog("debug",`\u{1F3AD} Decoy channel "${t}" closed`),this.stopDecoyTraffic(t)},e.onerror=r=>{this._debugMode&&this._secureLog("error",`\u274C Decoy channel "${t}" error`,{error:r.message})}}startDecoyTraffic(e,t){let r=async()=>{if(e.readyState==="open")try{let n=this.generateDecoyData(t);e.send(n);let a=this.decoyChannelConfig.randomDecoyIntervals?Math.random()*15e3+1e4:2e4;this.decoyTimers.set(t,setTimeout(()=>r(),a))}catch(n){this._debugMode&&this._secureLog("error",`\u274C Failed to send decoy data on "${t}"`,{error:n.message})}},i=Math.random()*1e4+5e3;this.decoyTimers.set(t,setTimeout(()=>r(),i))}stopDecoyTraffic(e){let t=this.decoyTimers.get(e);t&&(clearTimeout(t),this.decoyTimers.delete(e))}generateDecoyData(e){let t={sync:()=>JSON.stringify({type:"sync",timestamp:Date.now(),sequence:Math.floor(Math.random()*1e3),data:Array.from(crypto.getRandomValues(new Uint8Array(32))).map(r=>r.toString(16).padStart(2,"0")).join("")}),status:()=>JSON.stringify({type:"status",status:["online","away","busy"][Math.floor(Math.random()*3)],uptime:Math.floor(Math.random()*3600),data:Array.from(crypto.getRandomValues(new Uint8Array(16))).map(r=>r.toString(16).padStart(2,"0")).join("")}),heartbeat:()=>JSON.stringify({type:"heartbeat",timestamp:Date.now(),data:Array.from(crypto.getRandomValues(new Uint8Array(24))).map(r=>r.toString(16).padStart(2,"0")).join("")}),metrics:()=>JSON.stringify({type:"metrics",cpu:Math.random()*100,memory:Math.random()*100,network:Math.random()*1e3,data:Array.from(crypto.getRandomValues(new Uint8Array(20))).map(r=>r.toString(16).padStart(2,"0")).join("")}),debug:()=>JSON.stringify({type:"debug",level:["info","warn","error"][Math.floor(Math.random()*3)],message:"Debug message",data:Array.from(crypto.getRandomValues(new Uint8Array(28))).map(r=>r.toString(16).padStart(2,"0")).join("")})};return t[e]?t[e]():Array.from(crypto.getRandomValues(new Uint8Array(64))).map(r=>r.toString(16).padStart(2,"0")).join("")}addReorderingHeaders(e){if(!this.reorderingConfig.enabled)return e;try{let t=new Uint8Array(e),r=this.reorderingConfig.useTimestamps?12:8,i=new ArrayBuffer(r),n=new DataView(i);this.reorderingConfig.useSequenceNumbers&&n.setUint32(0,this.sequenceNumber++,!1),this.reorderingConfig.useTimestamps&&n.setUint32(4,Date.now(),!1),n.setUint32(this.reorderingConfig.useTimestamps?8:4,t.length,!1);let a=new Uint8Array(r+t.length);return a.set(new Uint8Array(i),0),a.set(t,r),a.buffer}catch(t){return this._secureLog("error","\u274C Failed to add reordering headers:",{errorType:t?.constructor?.name||"Unknown"}),e}}async processReorderedPacket(e){if(!this.reorderingConfig.enabled)return this.processMessage(e);try{let t=new Uint8Array(e),r=this.reorderingConfig.useTimestamps?12:8;if(t.length<r)return this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Data too short for reordering headers, processing directly"),this.processMessage(e);let i=new DataView(t.buffer,0,r),n=0,a=0,o=0;if(this.reorderingConfig.useSequenceNumbers&&(n=i.getUint32(0,!1)),this.reorderingConfig.useTimestamps&&(a=i.getUint32(4,!1)),o=i.getUint32(this.reorderingConfig.useTimestamps?8:4,!1),o>t.length-r||o<=0)return this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Invalid reordered packet data size, processing directly"),this.processMessage(e);let c=t.slice(r,r+o);try{let d=new TextDecoder().decode(c),u=JSON.parse(d);if(u.type==="fake"||u.isFakeTraffic===!0){this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Reordered fake message: ${u.pattern||"unknown"}`);return}}catch{}this.packetBuffer.set(n,{data:c.buffer,timestamp:a||Date.now()}),await this.processOrderedPackets()}catch(t){return this._secureLog("error","\u274C Failed to process reordered packet:",{errorType:t?.constructor?.name||"Unknown"}),this.processMessage(e)}}async processOrderedPackets(){let e=Date.now(),t=this.reorderingConfig.reorderTimeout;for(;;){let r=this.lastProcessedSequence+1,i=this.packetBuffer.get(r);if(i){try{let n=new TextDecoder().decode(i.data),a=JSON.parse(n);if(a.type==="fake"||a.isFakeTraffic===!0){this._secureLog("warn",`\u{1F3AD} BLOCKED: Ordered fake message: ${a.pattern||"unknown"}`),this.packetBuffer.delete(r),this.lastProcessedSequence=r;continue}}catch{}await this.processMessage(i.data),this.packetBuffer.delete(r),this.lastProcessedSequence=r}else{let n=this.findOldestPacket();if(n&&e-n.timestamp>t){this._secureLog("warn","\u26A0\uFE0F Packet ${oldestPacket.sequence} timed out, processing out of order");try{let a=new TextDecoder().decode(n.data),o=JSON.parse(a);if(o.type==="fake"||o.isFakeTraffic===!0){this._secureLog("warn",`\u{1F3AD} BLOCKED: Timed out fake message: ${o.pattern||"unknown"}`),this.packetBuffer.delete(n.sequence),this.lastProcessedSequence=n.sequence;continue}}catch{}await this.processMessage(n.data),this.packetBuffer.delete(n.sequence),this.lastProcessedSequence=n.sequence}else break}}this.cleanupOldPackets(e,t)}findOldestPacket(){let e=null;for(let[t,r]of this.packetBuffer.entries())(!e||r.timestamp<e.timestamp)&&(e={sequence:t,...r});return e}cleanupOldPackets(e,t){for(let[r,i]of this.packetBuffer.entries())e-i.timestamp>t&&(this._secureLog("warn","\u26A0\uFE0F \u{1F5D1}\uFE0F Removing timed out packet ${sequence}"),this.packetBuffer.delete(r))}applyAntiFingerprinting(e){if(!this.antiFingerprintingConfig.enabled)return e;try{let t=e;return this.antiFingerprintingConfig.addNoise&&(t=this.addNoise(t)),this.antiFingerprintingConfig.randomizeSizes&&(t=this.randomizeSize(t)),this.antiFingerprintingConfig.maskPatterns&&(t=this.maskPatterns(t)),this.antiFingerprintingConfig.useRandomHeaders&&(t=this.addRandomHeaders(t)),t}catch(t){return this._secureLog("error","\u274C Anti-fingerprinting failed:",{errorType:t?.constructor?.name||"Unknown"}),e}}addNoise(e){let t=new Uint8Array(e),r=this.getUnbiasedRandomInRange(8,40),i=crypto.getRandomValues(new Uint8Array(r)),n=new Uint8Array(t.length+r);return n.set(t,0),n.set(i,t.length),n.buffer}randomizeSize(e){let t=new Uint8Array(e),r=this.fingerprintMask.sizeVariation,i=Math.floor(t.length*r);if(i>t.length){let n=crypto.getRandomValues(new Uint8Array(i-t.length)),a=new Uint8Array(i);return a.set(t,0),a.set(n,t.length),a.buffer}else if(i<t.length)return t.slice(0,i).buffer;return e}maskPatterns(e){let t=new Uint8Array(e),r=new Uint8Array(t.length);for(let i=0;i<t.length;i++){let n=this.fingerprintMask.noisePattern[i%this.fingerprintMask.noisePattern.length];r[i]=t[i]^n}return r.buffer}addRandomHeaders(e){let t=new Uint8Array(e),r=this.getUnbiasedRandomInRange(1,3),i=0;for(let o=0;o<r;o++)i+=4+this.getUnbiasedRandomInRange(0,15)+4;let n=new Uint8Array(i+t.length),a=0;for(let o=0;o<r;o++){let c;do c=crypto.getRandomValues(new Uint8Array(1))[0];while(c>=256-256%this.fingerprintMask.headerVariations.length);let d=this.fingerprintMask.headerVariations[c%this.fingerprintMask.headerVariations.length],u;do u=crypto.getRandomValues(new Uint8Array(1))[0];while(u>=256-256%16);let h=crypto.getRandomValues(new Uint8Array(u%16+4)),m=new DataView(n.buffer,a);m.setUint32(0,h.length+8,!1),m.setUint32(4,this.hashString(d),!1),n.set(h,a+8);let p=this.calculateChecksum(n.slice(a,a+8+h.length));new DataView(n.buffer,a+8+h.length).setUint32(0,p,!1),a+=8+h.length+4}return n.set(t,a),n.buffer}hashString(e){let t=0;for(let r=0;r<e.length;r++){let i=e.charCodeAt(r);t=(t<<5)-t+i,t=t&t}return Math.abs(t)}calculateChecksum(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&4294967295;return t}async removeSecurityLayers(e){try{let t=this.getSecurityStatus();if(this._debugMode&&this._secureLog("debug",`\u{1F50D} removeSecurityLayers (Stage ${t.stage})`,{dataType:typeof e,dataLength:e?.length||e?.byteLength||0,activeFeatures:t.activeFeaturesCount}),!e)return this._secureLog("warn","\u26A0\uFE0F Received empty data"),null;let r=e;if(typeof e=="string")try{let i=JSON.parse(e);if(i.type==="fake")return this._debugMode&&this._secureLog("debug",`\u{1F3AD} Fake message filtered out: ${i.pattern} (size: ${i.size})`),"FAKE_MESSAGE_FILTERED";if(i.type&&["heartbeat","verification","verification_response","peer_disconnect","key_rotation_signal","key_rotation_ready","security_upgrade","ice_restart_offer","ice_restart_answer","ice_restart_request"].includes(i.type))return"SYSTEM_MESSAGE_FILTERED";if(i.type&&["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error"].includes(i.type))return this._debugMode&&this._secureLog("debug","\u{1F4C1} File transfer message detected, blocking from chat",{type:i.type}),"FILE_MESSAGE_FILTERED";if(i.type==="message")return this._debugMode&&this._secureLog("debug","\u{1F4DD} Regular message detected, extracting text",{data:i.data}),i.data;if(i.type==="enhanced_message"&&i.data){if(this._debugMode&&this._secureLog("debug","\u{1F510} Enhanced message detected, decrypting..."),!this.encryptionKey||!this.macKey||!this.metadataKey)return this._secureLog("error","\u274C Missing encryption keys"),null;let n=await window.EnhancedSecureCryptoUtils.decryptMessage(i.data,this.encryptionKey,this.macKey,this.metadataKey);this._debugMode&&(this._secureLog("debug","\u2705 Enhanced message decrypted, extracting..."),this._secureLog("debug","\u{1F50D} decryptedResult",{type:typeof n,hasMessage:!!n?.message,messageType:typeof n?.message,messageLength:n?.message?.length||0,messageSample:n?.message?.substring(0,50)||"no message"}));try{let a=JSON.parse(n.message);if(a.type==="fake"||a.isFakeTraffic===!0)return this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Encrypted fake message: ${a.pattern||"unknown"}`),"FAKE_MESSAGE_FILTERED"}catch{this._debugMode&&this._secureLog("debug","\u{1F4DD} Decrypted content is not JSON, treating as plain text message")}return this._debugMode&&this._secureLog("debug","\u{1F4E4} Returning decrypted message",{message:n.message?.substring(0,50)}),n.message}if(i.type==="message"&&i.data)return this._debugMode&&this._secureLog("debug","\u{1F4DD} Regular message detected, extracting data"),i.data;if(i.type==="message")return this._debugMode&&this._secureLog("debug","\u{1F4DD} Regular message detected, returning for display"),e;if(!i.type||i.type!=="fake"&&!["heartbeat","verification","verification_response","peer_disconnect","key_rotation_signal","key_rotation_ready","enhanced_message","security_upgrade","ice_restart_offer","ice_restart_answer","ice_restart_request","file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error"].includes(i.type))return this._debugMode&&this._secureLog("debug","\u{1F4DD} Regular message detected, returning for display"),e}catch{return this._debugMode&&this._secureLog("debug","\u{1F4C4} Not JSON, processing as raw data"),e}if(this.encryptionKey&&typeof r=="string"&&r.length>50)try{if(/^[A-Za-z0-9+/=]+$/.test(r.trim())&&(this._debugMode&&this._secureLog("debug","\u{1F513} Applying standard decryption..."),r=await window.EnhancedSecureCryptoUtils.decryptData(r,this.encryptionKey),this._debugMode&&this._secureLog("debug","\u2705 Standard decryption successful"),typeof r=="string")){try{let n=JSON.parse(r);if(n.type==="fake"||n.isFakeTraffic===!0)return this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Legacy fake message: ${n.pattern||"unknown"}`),"FAKE_MESSAGE_FILTERED"}catch{}r=new TextEncoder().encode(r).buffer}}catch(i){return this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Standard decryption failed:",{details:i.message}),e}if(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&r instanceof ArrayBuffer&&r.byteLength>12)try{if(r=await this.removeNestedEncryption(r),r instanceof ArrayBuffer)try{let i=new TextDecoder().decode(r),n=JSON.parse(i);if(n.type==="fake"||n.isFakeTraffic===!0)return this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Nested fake message: ${n.pattern||"unknown"}`),"FAKE_MESSAGE_FILTERED"}catch{}}catch(i){this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Nested decryption failed - skipping this layer:",{details:i.message})}if(this.securityFeatures.hasPacketReordering&&this.reorderingConfig.enabled&&r instanceof ArrayBuffer)try{let i=this.reorderingConfig.useTimestamps?12:8;if(r.byteLength>i)return await this.processReorderedPacket(r)}catch(i){this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Reordering processing failed - using direct processing:",{details:i.message})}if(this.securityFeatures.hasPacketPadding&&r instanceof ArrayBuffer)try{r=this.removePacketPadding(r)}catch(i){this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Padding removal failed:",{details:i.message})}if(this.securityFeatures.hasAntiFingerprinting&&r instanceof ArrayBuffer)try{r=this.removeAntiFingerprinting(r)}catch(i){this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Anti-fingerprinting removal failed:",{details:i.message})}if(r instanceof ArrayBuffer&&(r=new TextDecoder().decode(r)),typeof r=="string")try{let i=JSON.parse(r);if(i.type==="fake"||i.isFakeTraffic===!0)return this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Final check fake message: ${i.pattern||"unknown"}`),"FAKE_MESSAGE_FILTERED"}catch{}return r}catch(t){return this._secureLog("error","\u274C Critical error in removeSecurityLayers:",{errorType:t?.constructor?.name||"Unknown"}),e}}removeAntiFingerprinting(e){return e}async applySecurityLayers(e,t=!1){try{let r=e;return t?(this.encryptionKey&&typeof r=="string"&&(r=await window.EnhancedSecureCryptoUtils.encryptData(r,this.encryptionKey)),r):(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&r instanceof ArrayBuffer&&(r=await this.applyNestedEncryption(r)),this.securityFeatures.hasPacketReordering&&this.reorderingConfig?.enabled&&r instanceof ArrayBuffer&&(r=this.applyPacketReordering(r)),this.securityFeatures.hasPacketPadding&&r instanceof ArrayBuffer&&(r=this.applyPacketPadding(r)),this.securityFeatures.hasAntiFingerprinting&&r instanceof ArrayBuffer&&(r=this.applyAntiFingerprinting(r)),this.encryptionKey&&typeof r=="string"&&(r=await window.EnhancedSecureCryptoUtils.encryptData(r,this.encryptionKey)),r)}catch(r){return this._secureLog("error","\u274C Error in applySecurityLayers:",{errorType:r?.constructor?.name||"Unknown"}),e}}_sanitizeMessageMeta(e){if(!e||typeof e!="object")return null;let t={};if(typeof e.mid=="string"&&e.mid.length>0&&e.mid.length<=64&&(t.mid=e.mid.replace(/[^A-Za-z0-9_-]/g,"").slice(0,64)),e.code===!0&&(t.code=!0),e.once===!0&&(t.once=!0),Number.isFinite(e.onceTtl)){let r=Math.floor(e.onceTtl);r>=1&&r<=3600&&(t.onceTtl=r)}if(Number.isFinite(e.ttl)){let r=Math.floor(e.ttl);r>=5&&r<=86400&&(t.ttl=r)}return Object.keys(t).length?t:null}sendMessageDelete(e){return typeof e!="string"||!e?!1:this.sendSystemMessage({type:s.MESSAGE_TYPES.MESSAGE_DELETE,messageId:e.slice(0,64)})}sendDeliveryReceipt(e){return typeof e!="string"||!e?!1:this.sendSystemMessage({type:s.MESSAGE_TYPES.MESSAGE_RECEIPT,messageId:e.slice(0,64)})}async sendMessage(e,t=null){let r=this._validateInputData(e,"sendMessage");if(!r.isValid){let i=`Input validation failed: ${r.errors.join(", ")}`;throw this._secureLog("error","\u274C Input validation failed in sendMessage",{errors:r.errors,dataType:typeof e,dataLength:e?.length||e?.byteLength||0}),new Error(i)}if(!this._checkRateLimit("sendMessage"))throw new Error("Rate limit exceeded for message sending");if(this._enforceVerificationGate("sendMessage"),!this.dataChannel||this.dataChannel.readyState!=="open")throw new Error("Data channel not ready");try{if(this.encryptionKey&&this.macKey&&this.metadataKey||await this._tryReinitializeEncryptionKeys(),this._secureLog("debug","sendMessage called",{hasDataChannel:!!this.dataChannel,dataChannelReady:this.dataChannel?.readyState==="open",isInitiator:this.isInitiator,isVerified:this.isVerified,connectionReady:this.peerConnection?.connectionState==="connected"}),this._secureLog("debug","\u{1F50D} sendMessage DEBUG",{dataType:typeof r.sanitizedData,isString:typeof r.sanitizedData=="string",isArrayBuffer:r.sanitizedData instanceof ArrayBuffer,dataLength:r.sanitizedData?.length||r.sanitizedData?.byteLength||0}),typeof r.sanitizedData=="string")try{let n=JSON.parse(r.sanitizedData);if(n.type&&n.type.startsWith("file_")){this._secureLog("debug","\u{1F4C1} File message detected - applying full encryption with AAD",{type:n.type});let a=this._createFileMessageAAD(n.type,n.data),o=await this._encryptFileMessage(r.sanitizedData,a);return this.dataChannel.send(o),!0}}catch{}if(typeof r.sanitizedData=="string"){if(typeof this._createMessageAAD!="function")throw new Error("_createMessageAAD method is not available. Manager may not be fully initialized.");let n=this._createMessageAAD("message",{content:r.sanitizedData}),a={type:"message",data:r.sanitizedData,timestamp:Date.now(),aad:n};return t&&typeof t=="object"&&(a.meta=this._sanitizeMessageMeta(t)),await this.sendSecureMessage(a)}this._secureLog("debug","\u{1F510} Applying security layers to non-string data");let i=await this._applySecurityLayersWithLimitedMutex(r.sanitizedData,!1);return this.dataChannel.send(i),!0}catch(i){throw this._secureLog("error","\u274C Failed to send message",{error:i.message,errorType:i.constructor.name}),i}}async _applySecurityLayersWithLimitedMutex(e,t=!1){return this._withMutex("cryptoOperation",async r=>{try{let i=e;return t?(this.encryptionKey&&typeof i=="string"&&(i=await window.EnhancedSecureCryptoUtils.encryptData(i,this.encryptionKey)),i):(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&i instanceof ArrayBuffer&&(i=await this.applyNestedEncryption(i)),this.securityFeatures.hasPacketReordering&&this.reorderingConfig?.enabled&&i instanceof ArrayBuffer&&(i=this.applyPacketReordering(i)),this.securityFeatures.hasPacketPadding&&i instanceof ArrayBuffer&&(i=this.applyPacketPadding(i)),this.securityFeatures.hasAntiFingerprinting&&i instanceof ArrayBuffer&&(i=this.applyAntiFingerprinting(i)),this.encryptionKey&&typeof i=="string"&&(i=await window.EnhancedSecureCryptoUtils.encryptData(i,this.encryptionKey)),i)}catch(i){return this._secureLog("error","\u274C Error in applySecurityLayers:",{errorType:i?.constructor?.name||"Unknown"}),e}},3e3)}async sendSystemMessage(e){if(e.type==="verification_request"||e.type==="verification_response"||e.type==="verification_required"||this._enforceVerificationGate("sendSystemMessage",!1),!this.dataChannel||this.dataChannel.readyState!=="open")return this._secureLog("warn","\u26A0\uFE0F Cannot send system message - data channel not ready"),!1;try{let r=JSON.stringify({type:e.type,data:e,timestamp:Date.now()});return this._secureLog("debug","\u{1F527} Sending system message",{type:e.type}),this.dataChannel.send(r),!0}catch(r){return this._secureLog("error","\u274C Failed to send system message:",{errorType:r?.constructor?.name||"Unknown"}),!1}}async processMessage(e){try{if(this._noteInboundActivity?.(),this._secureLog("debug","\uFFFD\uFFFD Processing message",{dataType:typeof e,isArrayBuffer:e instanceof ArrayBuffer,hasData:!!(e?.length||e?.byteLength)}),typeof e=="string")try{let i=JSON.parse(e),n=["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error"];if(i.type==="encrypted_file_message"){this._secureLog("debug","\u{1F4C1} Encrypted file message detected in processMessage");try{let{decryptedData:a,aad:o}=await this._decryptFileMessage(e),c=JSON.parse(a);if(this._secureLog("debug","\u{1F4C1} File message decrypted successfully",{type:c.type,aadMessageType:o.messageType}),this.fileTransferSystem&&typeof this.fileTransferSystem.handleFileMessage=="function"){await this.fileTransferSystem.handleFileMessage(c);return}}catch(a){this._secureLog("error","\u274C Failed to decrypt file message",{error:a.message});return}}if(i.type&&n.includes(i.type)){this._secureLog("warn","\u26A0\uFE0F Unencrypted file message detected - this should not happen in secure mode",{type:i.type}),this._secureLog("error","\u274C Dropping unencrypted file message for security",{type:i.type});return}if(i.type==="enhanced_message"){if(this._secureLog("debug","\u{1F510} Enhanced message detected in processMessage"),!this._checkInboundRateLimit("processMessage:enhanced_message"))return;try{let a=await window.EnhancedSecureCryptoUtils.decryptMessage(i.data,this.encryptionKey,this.macKey,this.metadataKey),o=JSON.parse(a.data);if(a.metadata&&a.metadata.sequenceNumber!==void 0&&!this._validateIncomingSequenceNumber(a.metadata.sequenceNumber,"enhanced_message")){this._secureLog("warn","\u26A0\uFE0F Enhanced message sequence number validation failed - possible replay attack",{received:a.metadata.sequenceNumber,expected:this.expectedSequenceNumber});return}o.type==="message"&&this.onMessage&&o.data&&this.deliverMessageToUI(o.data,"received",o.meta);return}catch(a){this._secureLog("error","\u274C Failed to decrypt enhanced message",{error:a.message});return}}if(i.type===s.MESSAGE_TYPES.MESSAGE){this._secureLog("error","Rejected unencrypted frame in processMessage",{messageType:"message"});return}if(i.type&&s.POST_VERIFICATION_CONTROL_TYPES.has(i.type)){if(!this._enforceVerificationGate("control_frame_receive",!1)){this._secureLog("error","Dropped control frame received before verification",{messageType:i.type});return}let a=s.MESSAGE_TYPES;if(i.type===a.MESSAGE_DELETE){let o=i?.data?.messageId??i?.messageId;if(typeof o=="string"&&o)try{this.onMessageDelete?.(o.slice(0,64))}catch{}return}if(i.type===a.MESSAGE_RECEIPT){let o=i?.data?.messageId??i?.messageId;if(typeof o=="string"&&o)try{this.onMessageDelivered?.(o.slice(0,64))}catch{}return}if([a.CALL_OFFER,a.CALL_ANSWER,a.CALL_ICE,a.CALL_DECLINE,a.CALL_END].includes(i.type)){try{await this._handleCallSignal(i.type,i.data||{})}catch(o){this._secureLog("error","\u274C Call signal handling failed",{errorType:o?.constructor?.name})}return}if([a.ICE_RESTART_OFFER,a.ICE_RESTART_ANSWER,a.ICE_RESTART_REQUEST].includes(i.type)){try{await this._handleIceRestartSignal(i.type,i.data||{})}catch(o){this._secureLog("error","\u274C ICE restart signal handling failed",{errorType:o?.constructor?.name})}return}return}if(i.type&&["heartbeat","verification","verification_response","verification_confirmed","verification_both_confirmed","peer_disconnect","security_upgrade"].includes(i.type)){this.handleSystemMessage(i);return}if(i.type==="fake"){this._secureLog("warn","\u{1F3AD} Fake message blocked in processMessage",{pattern:i.pattern});return}}catch{this._secureLog("error","Rejected malformed (non-JSON) frame in processMessage",{dataLength:typeof e=="string"?e.length:0});return}let t=await this._processEncryptedDataWithLimitedMutex(e);if(t==="FAKE_MESSAGE_FILTERED"||t==="FILE_MESSAGE_FILTERED"||t==="SYSTEM_MESSAGE_FILTERED")return;if(!t){this._secureLog("warn","\u26A0\uFE0F No data returned from removeSecurityLayers");return}let r;if(typeof t=="string")try{let i=JSON.parse(t);if(i.type&&fileMessageTypes.includes(i.type)){this._secureLog("debug","\u{1F4C1} File message detected after decryption",{type:i.type}),this.fileTransferSystem&&await this.fileTransferSystem.handleFileMessage(i);return}if(i.type&&["heartbeat","verification","verification_response","verification_confirmed","verification_both_confirmed","peer_disconnect","security_upgrade"].includes(i.type)){this.handleSystemMessage(i);return}if(i.type==="fake"){this._secureLog("warn",`\u{1F3AD} Post-decryption fake message blocked: ${i.pattern}`);return}i.type==="message"&&i.data?r=i.data:r=t}catch{r=t}else if(t instanceof ArrayBuffer)r=new TextDecoder().decode(t);else if(t&&typeof t=="object"&&t.message)r=t.message;else{this._secureLog("warn","\u26A0\uFE0F Unexpected data type after processing:",{details:typeof t});return}if(r&&r.trim().startsWith("{"))try{let i=JSON.parse(r);if(i.type==="fake"){this._secureLog("warn",`\u{1F3AD} Final fake message check blocked: ${i.pattern}`);return}let n=["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error","heartbeat","verification","verification_response","peer_disconnect","key_rotation_signal","key_rotation_ready","security_upgrade","ice_restart_offer","ice_restart_answer","ice_restart_request"];if(i.type&&n.includes(i.type)){this._secureLog("warn",`\u{1F4C1} Final system/file message check blocked: ${i.type}`);return}}catch{}r&&this._secureLog("error","Rejected unauthenticated payload at the end of processMessage",{messageLength:typeof r=="string"?r.length:0})}catch(t){this._secureLog("error","\u274C Failed to process message:",{errorType:t?.constructor?.name||"Unknown"})}}async _processEncryptedDataWithLimitedMutex(e){return this._withMutex("cryptoOperation",async t=>{this._secureLog("debug","\u{1F510} Processing encrypted data with limited mutex",{operationId:t,dataType:typeof e});try{return await this.removeSecurityLayers(e)}catch(r){return this._secureLog("error","\u274C Error processing encrypted data",{operationId:t,errorType:r.constructor.name}),e}},2e3)}notifySecurityUpdate(){try{this._secureLog("debug","\u{1F512} Notifying about security level update",{isConnected:this.isConnected(),isVerified:this.isVerified,hasKeys:!!(this.encryptionKey&&this.macKey&&this.metadataKey),hasLastCalculation:!!this.lastSecurityCalculation}),this._dispatchAppEvent?.(new CustomEvent("security-level-updated",{detail:{timestamp:Date.now(),manager:"webrtc",webrtcManager:this,isConnected:this.isConnected(),isVerified:this.isVerified,hasKeys:!!(this.encryptionKey&&this.macKey&&this.metadataKey),lastCalculation:this.lastSecurityCalculation}})),setTimeout(()=>{},100),this.lastSecurityCalculation&&this._dispatchAppEvent?.(new CustomEvent("real-security-calculated",{detail:{securityData:this.lastSecurityCalculation,webrtcManager:this,timestamp:Date.now()}}))}catch(e){this._secureLog("error","\u274C Error in notifySecurityUpdate",{error:e.message})}}handleSystemMessage(e){switch(this._secureLog("debug","\u{1F527} Handling system message:",{type:e.type}),e.type){case"heartbeat":this.handleHeartbeat(e);break;case"verification":this.handleVerificationRequest(e.data);break;case"verification_response":this.handleVerificationResponse(e.data);break;case"sas_code":this.handleSASCode(e.data);break;case"verification_confirmed":this.handleVerificationConfirmed(e.data);break;case"verification_both_confirmed":this.handleVerificationBothConfirmed(e.data);break;case"peer_disconnect":this.handlePeerDisconnectNotification(e);break;case"key_rotation_signal":this._secureLog("debug","\u{1F504} Key rotation signal received (ignored for stability)");break;case"key_rotation_ready":this._secureLog("debug","\u{1F504} Key rotation ready signal received (ignored for stability)");break;case"security_upgrade":this._secureLog("debug","\u{1F512} Security upgrade notification received:",{type:e.type});break;default:this._secureLog("debug","\u{1F527} Unknown system message type:",{type:e.type})}}enableStage2Security(){this.sessionConstraints?.hasPacketReordering&&(this.securityFeatures.hasPacketReordering=!0,this.reorderingConfig.enabled=!0),this.sessionConstraints?.hasAntiFingerprinting&&(this.securityFeatures.hasAntiFingerprinting=!0,this.antiFingerprintingConfig.enabled=!0,this.antiFingerprintingConfig.randomizeSizes=!0,this.antiFingerprintingConfig.maskPatterns=!0,this.antiFingerprintingConfig.useRandomHeaders=!0),this.notifySecurityUpgrade(2),setTimeout(()=>{this.calculateAndReportSecurityLevel()},500)}enableStage3Security(){this._secureLog("info","\u{1F512} Enabling Stage 3 features (traffic obfuscation)"),this.sessionConstraints?.hasMessageChunking&&(this.securityFeatures.hasMessageChunking=!0,this.chunkingConfig.enabled=!0),this.sessionConstraints?.hasFakeTraffic&&(this.securityFeatures.hasFakeTraffic=!0,this.fakeTrafficConfig.enabled=!0,this.startFakeTrafficGeneration()),this.notifySecurityUpgrade(3),setTimeout(()=>{this.calculateAndReportSecurityLevel()},500)}enableStage4Security(){if(this._secureLog("info","\u{1F512} Enabling Stage 4 features (maximum safety)"),this.sessionConstraints?.hasDecoyChannels&&this.isConnected()&&this.isVerified){this.securityFeatures.hasDecoyChannels=!0,this.decoyChannelConfig.enabled=!0;try{this.initializeDecoyChannels()}catch(e){this._secureLog("warn","\u26A0\uFE0F Decoy channels initialization failed:",{details:e.message}),this.securityFeatures.hasDecoyChannels=!1,this.decoyChannelConfig.enabled=!1}}this.sessionConstraints?.hasAntiFingerprinting&&(this.antiFingerprintingConfig.randomizeSizes=!0,this.antiFingerprintingConfig.maskPatterns=!0,this.antiFingerprintingConfig.useRandomHeaders=!1),this.notifySecurityUpgrade(4),setTimeout(()=>{this.calculateAndReportSecurityLevel()},500)}forceSecurityUpdate(){setTimeout(()=>{this.calculateAndReportSecurityLevel(),this.notifySecurityUpdate()},100)}getSecurityStatus(){let e=Object.entries(this.securityFeatures).filter(([r,i])=>i===!0).map(([r])=>r);return{stage:4,securityLevel:"maximum",activeFeatures:e,totalFeatures:Object.keys(this.securityFeatures).length,activeFeaturesCount:e.length,activeFeaturesNames:e,sessionConstraints:this.sessionConstraints}}notifySecurityUpgrade(e){let t={1:"Basic Enhanced",2:"Medium Security",3:"High Security",4:"Maximum Security"},r=`\u{1F512} Security upgraded to Stage ${e}: ${t[e]}`;if((!this.securityUpgradeNotificationSent||this.lastSecurityUpgradeStage!==e)&&(this.securityUpgradeNotificationSent=!0,this.lastSecurityUpgradeStage=e,this.onMessage&&this.deliverMessageToUI(r,"system")),this.dataChannel&&this.dataChannel.readyState==="open")try{let n={type:"security_upgrade",stage:e,stageName:t[e],message:r,timestamp:Date.now()};this._secureLog("debug","\u{1F512} Sending security upgrade notification to peer:",{type:n.type,stage:n.stage}),this.dataChannel.send(JSON.stringify(n))}catch(n){this._secureLog("warn","\u26A0\uFE0F Failed to send security upgrade notification to peer:",{details:n.message})}let i=this.getSecurityStatus()}async calculateAndReportSecurityLevel(){try{if(!window.EnhancedSecureCryptoUtils)return this._secureLog("warn","\u26A0\uFE0F EnhancedSecureCryptoUtils not available for security calculation"),null;if(!this.isConnected()||!this.isVerified||!this.encryptionKey||!this.macKey)return this._secureLog("debug","\u26A0\uFE0F WebRTC not ready for security calculation",{connected:this.isConnected(),verified:this.isVerified,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey}),null;this._secureLog("debug","\u{1F50D} Calculating real security level",{managerState:"ready",hasAllKeys:!!(this.encryptionKey&&this.macKey&&this.metadataKey)});let e=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(this);if(this._secureLog("info","Real security level calculated",{hasSecurityLevel:!!e.level,scoreRange:e.score>80?"high":e.score>50?"medium":"low",checksRatio:`${e.passedChecks}/${e.totalChecks}`,isRealCalculation:e.isRealData}),this.lastSecurityCalculation=e,this._dispatchAppEvent?.(new CustomEvent("real-security-calculated",{detail:{securityData:e,webrtcManager:this,timestamp:Date.now(),source:"calculateAndReportSecurityLevel"}})),e.isRealData&&this.onMessage&&(!this.securityCalculationNotificationSent||this.lastSecurityCalculationLevel!==e.level)){this.securityCalculationNotificationSent=!0,this.lastSecurityCalculationLevel=e.level;let t=`Security Level: ${e.level} (${e.score}%) - ${e.passedChecks}/${e.totalChecks} checks passed`;this.deliverMessageToUI(t,"system")}return e}catch(e){return this._secureLog("error","Failed to calculate real security level",{errorType:e.constructor.name}),null}}async autoEnableSecurityFeatures(){this._secureLog("info","Starting graduated security activation - all features enabled");let e=()=>this.isConnected()&&this.isVerified&&this.connectionAttempts===0&&this.messageQueue.length===0&&this.peerConnection?.connectionState==="connected";await this.calculateAndReportSecurityLevel(),this.notifySecurityUpgrade(1),setTimeout(async()=>{e()&&(this.enableStage2Security(),await this.calculateAndReportSecurityLevel(),setTimeout(async()=>{e()&&(this.enableStage3Security(),await this.calculateAndReportSecurityLevel(),setTimeout(async()=>{e()&&(this.enableStage4Security(),await this.calculateAndReportSecurityLevel())},2e4))},15e3))},1e4)}async establishConnection(){try{await this.initializeEnhancedSecurity(),this.fakeTrafficConfig.enabled&&this.startFakeTrafficGeneration(),this.decoyChannelConfig.enabled&&this.initializeDecoyChannels()}catch(e){throw this._secureLog("error","\u274C Failed to establish enhanced connection:",{errorType:e?.constructor?.name||"Unknown"}),this.onStatusChange("disconnected"),e}}_clearVerificationStates(){try{this.localVerificationConfirmed=!1,this.remoteVerificationConfirmed=!1,this.bothVerificationsConfirmed=!1,this.isVerified=!1,this.verificationCode=null,this.pendingSASCode=null,this.sasValidationAttempts=0,this._verificationUiOpened=!1,this._sasLocalFingerprint=null,this._sasRemoteFingerprint=null,this.keyFingerprint=null,this.expectedDTLSFingerprint=null,this._peerDTLSFingerprint=null,this.connectionId=null,this.processedMessageIds.clear(),this.verificationNotificationSent=!1,this.verificationInitiationSent=!1}catch(e){this._secureLog("error","\u274C Error clearing verification states:",{errorType:e?.constructor?.name||"Unknown"})}}startPeriodicCleanup(){this._secureLog("info","\u{1F527} Periodic cleanup moved to unified scheduler")}async calculateSecurityLevel(){return await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(this)}shouldRotateKeys(){return!this.isConnected()||!this.isVerified?!1:Date.now()-this.lastKeyRotation>this.keyRotationInterval||this.messageCounter%100===0}async rotateKeys(){return this._withMutex("keyOperation",async e=>{if(this._secureLog("info","\u{1F504} Starting key rotation with mutex",{operationId:e}),!this.isConnected()||!this.isVerified)return this._secureLog("warn"," Key rotation aborted - connection not ready",{operationId:e,isConnected:this.isConnected(),isVerified:this.isVerified}),!1;if(this._keySystemState.isRotating)return this._secureLog("warn"," Key rotation already in progress",{operationId:e}),!1;try{this._keySystemState.isRotating=!0,this._keySystemState.lastOperation="rotation",this._keySystemState.lastOperationTime=Date.now();let t={type:"key_rotation_signal",newVersion:this.currentKeyVersion+1,timestamp:Date.now(),operationId:e};if(this.dataChannel&&this.dataChannel.readyState==="open")this.dataChannel.send(JSON.stringify(t));else throw new Error("Data channel not ready for key rotation");return this._hardWipeOldKeys(),new Promise(r=>{this.pendingRotation={newVersion:this.currentKeyVersion+1,operationId:e,resolve:r,timeout:setTimeout(()=>{this._secureLog("error"," Key rotation timeout",{operationId:e}),this._keySystemState.isRotating=!1,this.pendingRotation=null,r(!1)},1e4)}})}catch(t){return this._secureLog("error"," Key rotation failed in critical section",{operationId:e,errorType:t.constructor.name}),this._keySystemState.isRotating=!1,!1}},1e4)}cleanupOldKeys(){let e=Date.now(),t=s.LIMITS.MAX_KEY_AGE,r=0;for(let[i,n]of this.oldKeys.entries())e-n.timestamp>t&&(n.encryptionKey&&this._secureWipeMemory(n.encryptionKey,"pfs_cleanup_wipe"),n.macKey&&this._secureWipeMemory(n.macKey,"pfs_cleanup_wipe"),n.metadataKey&&this._secureWipeMemory(n.metadataKey,"pfs_cleanup_wipe"),n.encryptionKey=null,n.macKey=null,n.metadataKey=null,n.keyFingerprint=null,this.oldKeys.delete(i),r++,this._secureLog("info","\u{1F9F9} Old PFS keys hard wiped and cleaned up",{version:i,age:Math.round((e-n.timestamp)/1e3)+"s",timestamp:Date.now()}));r>0&&this._secureLog("info",`PFS cleanup completed: ${r} keys hard wiped`,{timestamp:Date.now()})}getKeysForVersion(e){let t=this.oldKeys.get(e);return t&&t.encryptionKey&&t.macKey&&t.metadataKey?{encryptionKey:t.encryptionKey,macKey:t.macKey,metadataKey:t.metadataKey}:e===this.currentKeyVersion&&this.encryptionKey&&this.macKey&&this.metadataKey?{encryptionKey:this.encryptionKey,macKey:this.macKey,metadataKey:this.metadataKey}:(window.EnhancedSecureCryptoUtils.secureLog.log("error","No valid keys found for version",{requestedVersion:e,currentVersion:this.currentKeyVersion,availableVersions:Array.from(this.oldKeys.keys())}),null)}_hasTurnServer(){return(this._config.webrtc.iceServers||[]).some(e=>(Array.isArray(e.urls)?e.urls:[e.urls]).some(r=>typeof r=="string"&&r.toLowerCase().startsWith("turn:")))}_buildPeerConnectionConfig(){let e=this._isRelayOnlyMode(),t={iceServers:this._config.webrtc.iceServers,iceCandidatePoolSize:10,bundlePolicy:"balanced"};return e&&(t.iceTransportPolicy="relay"),t}_summarizeIceServerConfig(e=[]){let t={serverCount:0,stun:0,turn:0,turns:0,hasCredentials:!1};for(let r of e||[]){t.serverCount+=1,(r?.username||r?.credential)&&(t.hasCredentials=!0);let i=Array.isArray(r?.urls)?r.urls:[r?.urls];for(let n of i){let a=String(n||"").toLowerCase();a.startsWith("stun:")&&(t.stun+=1),a.startsWith("turn:")&&(t.turn+=1),a.startsWith("turns:")&&(t.turns+=1)}}return t}_isRelayOnlyMode(){return this._config.webrtc.privacyMode==="relay-only"}_setRelayOnlyMode(e){let t=e===!0;this._config.webrtc.privacyMode=t?"relay-only":"standard",this._config.webrtc.relayOnly=t}_warnIfTurnMissing(){if(this._ipLeakWarningShown)return;this._ipLeakWarningShown=!0;let e=this._isRelayOnlyMode(),t=this._hasTurnServer(),r=null;e&&!t?r="Privacy mode is relay-only, but no TURN server is configured. Relay-only mode cannot connect until TURN is configured; STUN alone does not hide IP addresses.":!e&&!t?r="Privacy warning: relay-only mode is disabled and no TURN server is configured. Direct WebRTC connections may expose host or server-reflexive IP addresses; STUN alone does not provide IP protection.":e||(r="Privacy warning: relay-only mode is disabled. Direct WebRTC connectivity may expose host or server-reflexive IP addresses even when TURN is available."),r&&this.deliverMessageToUI(r,"system")}createPeerConnection(){this._sessionAlive=!0;let e=this._buildPeerConnectionConfig();this._warnIfTurnMissing(),console.info("[SecureBit ICE] peer connection config",this._summarizeIceServerConfig(e.iceServers)),this.peerConnection=new RTCPeerConnection(e),this._callAudioSender=null,this._callVideoSender=null,this.peerConnection.onconnectionstatechange=()=>{let t=this.peerConnection.connectionState;console.info("[SecureBit ICE] connection state changed",{connectionState:t,iceConnectionState:this.peerConnection.iceConnectionState,iceGatheringState:this.peerConnection.iceGatheringState}),t==="connected"&&!this.isVerified?this._notifyVerificationReadyIfPossible():t==="connected"&&this.isVerified?this._onPathRecovered()||this.onStatusChange("connected"):t==="disconnected"?this.intentionalDisconnect?(this.onStatusChange("disconnected"),setTimeout(()=>this.disconnect(),100)):this.isVerified?this._onPathDegraded("ice_disconnected"):console.warn(`[SecureBit ICE] State is ${t} but not verified yet. Keeping session open for manual exchange.`):t==="closed"?(this._resetReconnectState(),this.onStatusChange("disconnected"),this._clearVerificationStates(),this.intentionalDisconnect&&setTimeout(()=>this.disconnect(),100)):t==="failed"?(this._collectIceFailureDiagnostics().then(r=>{console.warn("[SecureBit ICE] failure diagnostics",r),this._noteIceFailureDiagnostics(r)}),this.isVerified?this._onPathLost("ice_failed"):console.warn("[SecureBit ICE] State is failed but not verified yet. Keeping session open for manual exchange.")):this.isReconnecting()&&(t==="connecting"||t==="new")||this.onStatusChange(t)},this.peerConnection.oniceconnectionstatechange=()=>{console.info("[SecureBit ICE] ICE connection state changed",{connectionState:this.peerConnection.connectionState,iceConnectionState:this.peerConnection.iceConnectionState,iceGatheringState:this.peerConnection.iceGatheringState})},this.peerConnection.onicecandidateerror=t=>{console.warn("[SecureBit ICE] ICE candidate error",{url:t.url,errorCode:t.errorCode,errorText:t.errorText})},this.peerConnection.ontrack=t=>{try{this._refreshRemoteStream()}catch(r){this._secureLog("warn","\u26A0\uFE0F ontrack handling failed",{errorType:r?.constructor?.name})}},this.peerConnection.ondatachannel=t=>{t.channel.label==="securechat"?(this.dataChannel=t.channel,this.setupDataChannel(t.channel)):t.channel.label==="heartbeat"&&(this.heartbeatChannel=t.channel)}}setupDataChannel(e){this.dataChannel=e;let t=!1,r=async()=>{if(!t){t=!0;try{this.dataChannel&&typeof this.dataChannel.bufferedAmountLowThreshold=="number"&&(this.dataChannel.bufferedAmountLowThreshold=1024*1024)}catch{}if(this._handshakeMode==="sbq2")try{await this._runSbq2KeyExchange()}catch(i){this._secureLog("error","SBQ2 key exchange failed to start",{errorType:i?.constructor?.name||"Unknown"}),this._sbq2Abort("start_failed","The secure handshake could not be started. Please try connecting again.");return}try{await this.establishConnection(),this.initializeFileTransfer()}catch(i){this._secureLog("error","Error in establishConnection:",{errorType:i?.constructor?.name||"Unknown"})}if(this.pendingSASCode&&this.dataChannel&&this.dataChannel.readyState==="open")try{let i={type:"sas_code",data:{code:this.pendingSASCode,timestamp:Date.now(),verificationMethod:"SAS",securityLevel:"MITM_PROTECTION_REQUIRED"}};this.dataChannel.send(JSON.stringify(i)),this.pendingSASCode=null}catch{}else this.pendingSASCode;this.isVerified?(this.onStatusChange("connected"),this.processMessageQueue(),setTimeout(async()=>{await this.calculateAndReportSecurityLevel(),this.autoEnableSecurityFeatures(),this.notifySecurityUpdate()},500)):(this._notifyVerificationReadyIfPossible(),this.initiateVerification()),this.startHeartbeat()}};this.dataChannel.onopen=r,this.dataChannel.readyState==="open"&&Promise.resolve().then(()=>r()).catch(i=>{this._secureLog("error","Deferred data channel open handling failed",{errorType:i?.constructor?.name||"Unknown"})}),this.dataChannel.onclose=()=>{this._resetReconnectState?.(),this._teardownRecoveryLifecycleListeners?.(),this.intentionalDisconnect?(this.onStatusChange("disconnected"),this._clearVerificationStates(),this.connectionClosedNotificationSent||(this.connectionClosedNotificationSent=!0,this.deliverMessageToUI("\u{1F50C} Enhanced secure connection closed","system"))):(this.onStatusChange("disconnected"),this._clearVerificationStates(),this.connectionClosedNotificationSent||(this.connectionClosedNotificationSent=!0,this.deliverMessageToUI("\u{1F50C} Enhanced secure connection closed. Check connection status.","system"))),this._wipeEphemeralKeys(),this.stopHeartbeat(),this.isVerified=!1},this.dataChannel.onmessage=async i=>{try{if(this._noteInboundActivity?.(),typeof i.data=="string")try{let n=JSON.parse(i.data),a=["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error"];if(n.type&&a.includes(n.type)){if(!this._enforceVerificationGate("file_message_receive",!1)){this._secureLog("error","Dropped file message received before verification",{messageType:n.type});return}if(!this.fileTransferSystem)try{if(this.isVerified&&this.dataChannel&&this.dataChannel.readyState==="open"){this.initializeFileTransfer();let o=0,c=30;for(;!this.fileTransferSystem&&o<c;)await new Promise(d=>setTimeout(d,100)),o++}}catch(o){this._secureLog("error","Failed to initialize file transfer system for receiver:",{errorType:o?.constructor?.name||"Unknown"})}if(this.fileTransferSystem){await this.fileTransferSystem.handleFileMessage(n);return}this._secureLog("warn","\u26A0\uFE0F File transfer system not ready, attempting lazy init...");try{if(await this._ensureFileTransferReady(),this.fileTransferSystem){await this.fileTransferSystem.handleFileMessage(n);return}}catch(o){this._secureLog("error","Lazy init of file transfer failed:",{errorType:o?.message||o?.constructor?.name||"Unknown"})}this._secureLog("error","No file transfer system available for:",{errorType:n.type?.constructor?.name||"Unknown"});return}if(n.type&&s.POST_VERIFICATION_CONTROL_TYPES.has(n.type)){if(!this._enforceVerificationGate("control_frame_receive",!1)){this._secureLog("error","Dropped control frame received before verification",{messageType:n.type});return}let o=s.MESSAGE_TYPES;if(n.type===o.MESSAGE_DELETE){let c=n?.data?.messageId??n?.messageId;if(typeof c=="string"&&c)try{this.onMessageDelete?.(c.slice(0,64))}catch{}return}if(n.type===o.MESSAGE_RECEIPT){let c=n?.data?.messageId??n?.messageId;if(typeof c=="string"&&c)try{this.onMessageDelivered?.(c.slice(0,64))}catch{}return}if([o.CALL_OFFER,o.CALL_ANSWER,o.CALL_ICE,o.CALL_DECLINE,o.CALL_END].includes(n.type)){try{await this._handleCallSignal(n.type,n.data||{})}catch{}return}if([o.ICE_RESTART_OFFER,o.ICE_RESTART_ANSWER,o.ICE_RESTART_REQUEST].includes(n.type)){try{await this._handleIceRestartSignal(n.type,n.data||{})}catch(c){this._secureLog("error","\u274C ICE restart signal handling failed",{errorType:c?.constructor?.name})}return}return}if(n.type===s.MESSAGE_TYPES.KEY_BLOB||n.type===s.MESSAGE_TYPES.KEY_PROOF){await this._sbq2HandleHandshakeFrame(n);return}if(n.type&&["heartbeat","verification","verification_response","verification_confirmed","verification_both_confirmed","sas_code","peer_disconnect","security_upgrade"].includes(n.type)){this.handleSystemMessage(n);return}if(n.type===s.MESSAGE_TYPES.RATCHET_MESSAGE){await this._processRatchetMessage(n);return}if(n.type==="enhanced_message"&&n.data){await this._processEnhancedMessageWithoutMutex(n);return}this._secureLog("error","Rejected unencrypted frame on the chat channel",{messageType:typeof n.type=="string"?n.type.slice(0,32):typeof n.type});return}catch{this._secureLog("error","Rejected malformed (non-JSON) frame on the chat channel",{dataLength:typeof i.data=="string"?i.data.length:0});return}else i.data instanceof ArrayBuffer&&await this._processBinaryDataWithoutMutex(i.data)}catch(n){this._secureLog("error","Failed to process message in onmessage:",{errorType:n?.constructor?.name||"Unknown"})}}}async _processBinaryDataWithoutMutex(e){try{if(!this._checkInboundRateLimit("binary_message"))return;let t=e;if(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&t instanceof ArrayBuffer&&t.byteLength>12)try{t=await this.removeNestedEncryption(t)}catch{this._secureLog("warn","Nested decryption failed, continuing with original data")}if(this.securityFeatures.hasPacketPadding&&t instanceof ArrayBuffer)try{t=this.removePacketPadding(t)}catch{this._secureLog("warn","Packet padding removal failed, continuing with original data")}if(this.securityFeatures.hasAntiFingerprinting&&t instanceof ArrayBuffer)try{t=this.removeAntiFingerprinting(t)}catch{this._secureLog("warn","Anti-fingerprinting removal failed, continuing with original data")}if(t instanceof ArrayBuffer){let r=new TextDecoder().decode(t);try{let i=JSON.parse(r);if(i.type==="fake"||i.isFakeTraffic===!0)return}catch{}this._secureLog("error","Rejected unauthenticated binary frame on the chat channel",{byteLength:e?.byteLength||0})}}catch(t){this._secureLog("error","Error processing binary data:",{errorType:t?.constructor?.name||"Unknown"})}}async _processRatchetMessage(e){try{if(!this._checkInboundRateLimit("ratchet_message"))return;if(!this.isRatchetActive()){this._secureLog("error","Received a ratchet message but no ratchet is active");return}if(typeof e?.h!="string"||typeof e?.c!="string"){this._secureLog("error","Malformed ratchet message frame");return}let t=await this._ratchet.decrypt(e.h,e.c);try{let r=JSON.parse(t);if(r.type==="fake"||r.isFakeTraffic===!0)return;if(r&&r.type==="message"&&typeof r.data=="string"){this.deliverMessageToUI(r.data,"received",r.meta);return}}catch{}this.deliverMessageToUI(t,"received")}catch(t){this._secureLog("error","Failed to decrypt ratchet message",{errorType:t?.constructor?.name||"Unknown"})}}async _processEnhancedMessageWithoutMutex(e){try{if(!this._checkInboundRateLimit("enhanced_message"))return;if(!this.encryptionKey||!this.macKey||!this.metadataKey){this._secureLog("error","Missing encryption keys for enhanced message");return}let t=await window.EnhancedSecureCryptoUtils.decryptMessage(e.data,this.encryptionKey,this.macKey,this.metadataKey);if(!this._validateIncomingSequenceNumber(t?.sequenceNumber,"enhanced_message")){this._secureLog("error","Rejected chat message failing anti-replay validation",{messageId:t?.messageId?"present":"absent"});return}if(t&&t.message){try{let r=JSON.parse(t.message);if(r.type==="fake"||r.isFakeTraffic===!0)return;if(r&&r.type==="message"&&typeof r.data=="string"){this.onMessage&&this.deliverMessageToUI(r.data,"received",r.meta);return}}catch{}this.onMessage&&this.deliverMessageToUI(t.message,"received")}else this._secureLog("warn","No message content in decrypted result")}catch(t){this._secureLog("error","Error processing enhanced message:",{errorType:t?.constructor?.name||"Unknown"})}}_generateOperationId(){return`op_${Date.now()}_${Math.random().toString(36).substr(2,9)}`}async _acquireMutex(e,t,r=5e3){let i=`_${e}Mutex`,n=this[i];if(!n)throw this._secureLog("error",`Unknown mutex: ${e}`,{mutexPropertyName:i,availableMutexes:this._getAvailableMutexes(),operationId:t}),new Error(`Unknown mutex: ${e}. Available: ${this._getAvailableMutexes().join(", ")}`);if(!t||typeof t!="string")throw new Error("Invalid operation ID for mutex acquisition");return new Promise((a,o)=>{(()=>{if(n.lockId===t){this._secureLog("warn",`Mutex '${e}' already locked by same operation`,{operationId:t}),a();return}if(!n.locked)n.locked=!0,n.lockId=t,n.lockTime=Date.now(),this._secureLog("debug",`Mutex '${e}' acquired atomically`,{operationId:t,lockTime:n.lockTime}),n.lockTimeout=setTimeout(()=>{this._handleMutexTimeout(e,t,r)},r),a();else{let d={resolve:a,reject:o,operationId:t,timestamp:Date.now(),timeout:setTimeout(()=>{let u=n.queue.findIndex(h=>h.operationId===t);u!==-1&&(n.queue.splice(u,1),o(new Error(`Mutex acquisition timeout for '${e}'`)))},r)};n.queue.push(d),this._secureLog("debug",`Operation queued for mutex '${e}'`,{operationId:t,queueLength:n.queue.length,currentLockId:n.lockId})}})()})}_releaseMutex(e,t){if(!e||typeof e!="string")throw new Error("Invalid mutex name provided for release");if(!t||typeof t!="string")throw new Error("Invalid operation ID provided for mutex release");let r=`_${e}Mutex`,i=this[r];if(!i)throw this._secureLog("error",`Unknown mutex for release: ${e}`,{mutexPropertyName:r,availableMutexes:this._getAvailableMutexes(),operationId:t}),new Error(`Unknown mutex for release: ${e}`);if(i.lockId!==t)throw this._secureLog("error","CRITICAL: Invalid mutex release attempt - potential race condition",{mutexName:e,expectedLockId:i.lockId,providedOperationId:t,mutexState:{locked:i.locked,lockTime:i.lockTime,queueLength:i.queue.length}}),new Error(`Invalid mutex release attempt for '${e}': expected '${i.lockId}', got '${t}'`);if(!i.locked)throw this._secureLog("error","CRITICAL: Attempting to release unlocked mutex",{mutexName:e,operationId:t,mutexState:{locked:i.locked,lockId:i.lockId,lockTime:i.lockTime}}),new Error(`Attempting to release unlocked mutex: ${e}`);try{i.lockTimeout&&(clearTimeout(i.lockTimeout),i.lockTimeout=null);let n=i.lockTime?Date.now()-i.lockTime:0;i.locked=!1,i.lockId=null,i.lockTime=null,this._secureLog("debug",`Mutex released successfully: ${e}`,{operationId:t,lockDuration:n,queueLength:i.queue.length}),this._processNextInQueue(e)}catch(n){throw this._secureLog("error","Error during mutex release queue processing",{mutexName:e,operationId:t,errorType:n.constructor.name,errorMessage:n.message}),i.locked=!1,i.lockId=null,i.lockTime=null,i.lockTimeout=null,n}}_processNextInQueue(e){let t=this[`_${e}Mutex`];if(!t){this._secureLog("error",`Mutex not found for queue processing: ${e}`);return}if(t.queue.length===0)return;if(t.locked){this._secureLog("warn",`Mutex '${e}' is still locked, skipping queue processing`,{lockId:t.lockId,queueLength:t.queue.length});return}let r=t.queue.shift();if(!r){this._secureLog("warn",`Empty queue item for mutex '${e}'`);return}if(!r.operationId||!r.resolve||!r.reject){this._secureLog("error",`Invalid queue item structure for mutex '${e}'`,{hasOperationId:!!r.operationId,hasResolve:!!r.resolve,hasReject:!!r.reject});return}try{r.timeout&&clearTimeout(r.timeout),this._secureLog("debug",`Processing next operation in queue for mutex '${e}'`,{operationId:r.operationId,queueRemaining:t.queue.length,timestamp:Date.now()}),setTimeout(async()=>{try{await this._acquireMutex(e,r.operationId,5e3),this._secureLog("debug",`Queued operation acquired mutex '${e}'`,{operationId:r.operationId,acquisitionTime:Date.now()}),r.resolve()}catch(i){this._secureLog("error",`Queued operation failed to acquire mutex '${e}'`,{operationId:r.operationId,errorType:i.constructor.name,errorMessage:i.message,timestamp:Date.now()}),r.reject(new Error(`Queue processing failed for '${e}': ${i.message}`)),setTimeout(()=>{this._processNextInQueue(e)},50)}},10)}catch(i){this._secureLog("error",`Critical error during queue processing for mutex '${e}'`,{operationId:r.operationId,errorType:i.constructor.name,errorMessage:i.message});try{r.reject(new Error(`Queue processing critical error: ${i.message}`))}catch(n){this._secureLog("error","Failed to reject queue item",{originalError:i.message,rejectError:n.message})}setTimeout(()=>{this._processNextInQueue(e)},100)}}_getAvailableMutexes(){let e=[],t=Object.getOwnPropertyNames(this);for(let r of t)if(r.endsWith("Mutex")&&r.startsWith("_")){let i=r.slice(1,-5);e.push(i)}return e}async _withMutex(e,t,r=5e3){let i=this._generateOperationId();if(!this._validateMutexSystem())throw this._secureLog("error","Mutex system not properly initialized",{operationId:i,mutexName:e}),new Error("Mutex system not properly initialized. Call _initializeMutexSystem() first.");let n=this[`_${e}Mutex`];if(!n)throw new Error(`Mutex '${e}' not found`);let a=!1;try{await this._acquireMutex(e,i,r),a=!0;let o=`${e}Operations`;this._operationCounters&&this._operationCounters[o]!==void 0&&this._operationCounters[o]++;let c=await t(i);return c===void 0&&t.name!=="cleanup"&&this._secureLog("warn","Mutex operation returned undefined result",{operationId:i,mutexName:e,operationName:t.name}),c}catch(o){throw this._secureLog("error","Error in mutex operation",{operationId:i,mutexName:e,errorType:o.constructor.name,errorMessage:o.message,mutexAcquired:a,mutexState:n?{locked:n.locked,lockId:n.lockId,queueLength:n.queue.length}:"null"}),e==="keyOperation"&&this._handleKeyOperationError(o,i),(o.message.includes("timeout")||o.message.includes("race condition"))&&this._emergencyUnlockAllMutexes("errorHandler"),o}finally{if(a)try{await this._releaseMutex(e,i),n.locked&&n.lockId===i&&(this._secureLog("error","Mutex release verification failed",{operationId:i,mutexName:e}),n.locked=!1,n.lockId=null,n.lockTimeout=null)}catch(o){this._secureLog("error","Error releasing mutex in finally block",{operationId:i,mutexName:e,releaseErrorType:o.constructor.name,releaseErrorMessage:o.message}),n.locked=!1,n.lockId=null,n.lockTimeout=null}}}_validateMutexSystem(){let e=["keyOperation","cryptoOperation","connectionOperation"];for(let t of e){let r=`_${t}Mutex`,i=this[r];if(!i||typeof i!="object")return this._secureLog("error",`Missing or invalid mutex: ${t}`,{mutexPropertyName:r,mutexType:typeof i}),!1;let n=["locked","queue","lockId","lockTimeout"];for(let a of n)if(!(a in i))return this._secureLog("error",`Mutex ${t} missing property: ${a}`),!1}return!0}_emergencyRecoverMutexSystem(){this._secureLog("warn","Emergency mutex system recovery initiated");try{if(this._emergencyUnlockAllMutexes("emergencyRecovery"),this._initializeMutexSystem(),!this._validateMutexSystem())throw new Error("Mutex system validation failed after recovery");return this._secureLog("info","Mutex system recovered successfully with validation"),!0}catch(e){this._secureLog("error","Failed to recover mutex system",{errorType:e.constructor.name,errorMessage:e.message});try{return this._initializeMutexSystem(),this._secureLog("warn","Forced mutex system re-initialization completed"),!0}catch(t){return this._secureLog("error","CRITICAL: Forced re-initialization also failed",{originalError:e.message,reinitError:t.message}),!1}}}async _generateEncryptionKeys(){return this._withMutex("keyOperation",async e=>{this._secureLog("info","Generating encryption keys with atomic mutex",{operationId:e});let t=this._keySystemState;if(t.isInitializing){this._secureLog("warn","Key generation already in progress, waiting for completion",{operationId:e,lastOperation:t.lastOperation,lastOperationTime:t.lastOperationTime});let r=0,i=50;for(;t.isInitializing&&r<i;)await new Promise(n=>setTimeout(n,100)),r++;if(t.isInitializing)throw new Error("Key generation timeout - operation still in progress after 5 seconds")}try{t.isInitializing=!0,t.lastOperation="generation",t.lastOperationTime=Date.now(),t.operationId=e,this._secureLog("debug","Atomic key generation state set",{operationId:e,timestamp:t.lastOperationTime});let r=null,i=null;try{if(r=await this._generateEphemeralECDHKeys(),!r||!r.privateKey||!r.publicKey)throw new Error("Ephemeral ECDH key pair validation failed");if(!this._validateKeyPairConstantTime(r))throw new Error("Ephemeral ECDH keys are not valid CryptoKey instances");this._secureLog("debug","Ephemeral ECDH keys generated and validated for PFS",{operationId:e,privateKeyType:r.privateKey.algorithm?.name,publicKeyType:r.publicKey.algorithm?.name,isEphemeral:!0})}catch(n){this._secureLog("error","Ephemeral ECDH key generation failed",{operationId:e,errorType:n.constructor.name}),this._throwSecureError(n,"ephemeral_ecdh_key_generation")}try{if(i=await window.EnhancedSecureCryptoUtils.generateECDSAKeyPair(),!i||!i.privateKey||!i.publicKey)throw new Error("ECDSA key pair validation failed");if(!this._validateKeyPairConstantTime(i))throw new Error("ECDSA keys are not valid CryptoKey instances");this._secureLog("debug","ECDSA keys generated and validated",{operationId:e,privateKeyType:i.privateKey.algorithm?.name,publicKeyType:i.publicKey.algorithm?.name})}catch(n){this._secureLog("error","ECDSA key generation failed",{operationId:e,errorType:n.constructor.name}),this._throwSecureError(n,"ecdsa_key_generation")}if(!r||!i)throw new Error("One or both key pairs failed to generate");return this._enableSecurityFeaturesAfterKeyGeneration(r,i),this._secureLog("info","Encryption keys generated successfully with atomic protection",{operationId:e,hasECDHKeys:!!(r?.privateKey&&r?.publicKey),hasECDSAKeys:!!(i?.privateKey&&i?.publicKey),generationTime:Date.now()-t.lastOperationTime}),{ecdhKeyPair:r,ecdsaKeyPair:i}}catch(r){throw this._secureLog("error","Key generation failed, resetting state",{operationId:e,errorType:r.constructor.name}),r}finally{t.isInitializing=!1,t.operationId=null,this._secureLog("debug","Key generation state reset",{operationId:e})}})}_enableSecurityFeaturesAfterKeyGeneration(e,t){try{e&&e.privateKey&&e.publicKey&&(this.securityFeatures.hasEncryption=!0,this.securityFeatures.hasECDH=!0,this._secureLog("info","ECDH encryption features enabled")),t&&t.privateKey&&t.publicKey&&(this.securityFeatures.hasECDSA=!0,this._secureLog("info","ECDSA signature features enabled")),this.securityFeatures.hasEncryption&&(this.securityFeatures.hasMetadataProtection=!0,this.securityFeatures.hasEnhancedReplayProtection=!0,this.securityFeatures.hasNonExtractableKeys=!0,this._secureLog("info","Additional encryption-dependent features enabled")),e&&this.ephemeralKeyPairs.size>0&&(this.securityFeatures.hasPFS=!0,this._secureLog("info","Perfect Forward Secrecy enabled with ephemeral keys")),this._secureLog("info","Security features updated after key generation",{hasEncryption:this.securityFeatures.hasEncryption,hasECDH:this.securityFeatures.hasECDH,hasECDSA:this.securityFeatures.hasECDSA,hasMetadataProtection:this.securityFeatures.hasMetadataProtection,hasEnhancedReplayProtection:this.securityFeatures.hasEnhancedReplayProtection,hasNonExtractableKeys:this.securityFeatures.hasNonExtractableKeys,hasPFS:this.securityFeatures.hasPFS})}catch(r){this._secureLog("error","Failed to enable security features after key generation",{errorType:r.constructor.name,errorMessage:r.message})}}_emergencyUnlockAllMutexes(e="unknown"){let t=["keyOperation","cryptoOperation","connectionOperation","emergencyRecovery","systemShutdown","errorHandler"];if(!t.includes(e))throw this._secureLog("error","UNAUTHORIZED emergency mutex unlock attempt",{callerContext:e,authorizedCallers:t,timestamp:Date.now()}),new Error(`Unauthorized emergency mutex unlock attempt by: ${e}`);let r=["keyOperation","cryptoOperation","connectionOperation"];this._secureLog("error","EMERGENCY: Unlocking all mutexes with authorization and state cleanup",{callerContext:e,timestamp:Date.now()});let i=0,n=0;if(r.forEach(a=>{let o=this[`_${a}Mutex`];if(o)try{o.lockTimeout&&clearTimeout(o.lockTimeout);let c={locked:o.locked,lockId:o.lockId,lockTime:o.lockTime,queueLength:o.queue.length};o.locked=!1,o.lockId=null,o.lockTimeout=null,o.lockTime=null;let d=0;o.queue.forEach(u=>{try{u.reject&&typeof u.reject=="function"&&(u.reject(new Error(`Emergency mutex unlock for ${a} by ${e}`)),d++)}catch(h){this._secureLog("warn","Failed to reject queue item during emergency unlock",{mutexName:a,errorType:h.constructor.name})}}),o.queue=[],i++,this._secureLog("debug",`Emergency unlocked mutex: ${a}`,{previousState:c,queueRejectCount:d,callerContext:e})}catch(c){n++,this._secureLog("error",`Error during emergency unlock of mutex: ${a}`,{errorType:c.constructor.name,errorMessage:c.message,callerContext:e})}}),this._keySystemState)try{let a={...this._keySystemState};this._keySystemState.isInitializing=!1,this._keySystemState.isRotating=!1,this._keySystemState.isDestroying=!1,this._keySystemState.operationId=null,this._keySystemState.concurrentOperations=0,this._secureLog("debug","Emergency reset key system state",{previousState:a,callerContext:e})}catch(a){this._secureLog("error","Error resetting key system state during emergency unlock",{errorType:a.constructor.name,errorMessage:a.message,callerContext:e})}this._secureLog("info","Emergency mutex unlock completed",{callerContext:e,unlockedCount:i,errorCount:n,totalMutexes:r.length,timestamp:Date.now()}),setTimeout(()=>{this._validateMutexSystemAfterEmergencyUnlock()},100)}_handleKeyOperationError(e,t){this._secureLog("error","Key operation error detected, initiating recovery",{operationId:t,errorType:e.constructor.name,errorMessage:e.message}),this._keySystemState&&(this._keySystemState.isInitializing=!1,this._keySystemState.isRotating=!1,this._keySystemState.isDestroying=!1,this._keySystemState.operationId=null),this.ecdhKeyPair=null,this.ecdsaKeyPair=null,this.encryptionKey=null,this.macKey=null,this.metadataKey=null,(e.message.includes("timeout")||e.message.includes("race condition"))&&(this._secureLog("warn","Race condition or timeout detected, triggering emergency recovery"),this._emergencyRecoverMutexSystem())}_generateSecureIV(e=12,t="general"){if(this._ivTrackingSystem.emergencyMode)throw this._secureLog("error","CRITICAL: IV generation blocked - emergency mode active due to IV reuse"),new Error("IV generation blocked - emergency mode active");let r=0,i=100;for(;r<i;){r++;let n=crypto.getRandomValues(new Uint8Array(e)),a=Array.from(n).map(o=>o.toString(16).padStart(2,"0")).join("");if(this._ivTrackingSystem.usedIVs.has(a)){if(this._ivTrackingSystem.collisionCount++,this._secureLog("error","CRITICAL: IV reuse detected!",{context:t,attempt:r,collisionCount:this._ivTrackingSystem.collisionCount,ivString:a.substring(0,16)+"..."}),this._ivTrackingSystem.collisionCount>5)throw this._ivTrackingSystem.emergencyMode=!0,this._secureLog("error","CRITICAL: Emergency mode activated due to excessive IV reuse"),new Error("Emergency mode: Excessive IV reuse detected");continue}if(!this._validateIVEntropy(n)){if(this._ivTrackingSystem.entropyValidation.entropyFailures++,this._secureLog("warn","Low entropy IV detected",{context:t,attempt:r,entropyFailures:this._ivTrackingSystem.entropyValidation.entropyFailures}),this._ivTrackingSystem.entropyValidation.entropyFailures>10)throw this._ivTrackingSystem.emergencyMode=!0,this._secureLog("error","CRITICAL: Emergency mode activated due to low entropy IVs"),new Error("Emergency mode: Low entropy IVs detected");continue}return this._ivTrackingSystem.usedIVs.add(a),this._ivTrackingSystem.ivHistory.set(a,{timestamp:Date.now(),context:t,attempt:r}),this.sessionId&&(this._ivTrackingSystem.sessionIVs.has(this.sessionId)||this._ivTrackingSystem.sessionIVs.set(this.sessionId,new Set),this._ivTrackingSystem.sessionIVs.get(this.sessionId).add(a)),this._validateRNGQuality(),this._secureLog("debug","Secure IV generated",{context:t,attempt:r,ivSize:e,totalIVs:this._ivTrackingSystem.usedIVs.size}),n}throw this._secureLog("error",`Failed to generate unique IV after ${i} attempts`,{context:t,totalIVs:this._ivTrackingSystem.usedIVs.size}),new Error(`Failed to generate unique IV after ${i} attempts`)}_validateIVEntropy(e){this._ivTrackingSystem.entropyValidation.entropyTests++;let t=new Array(256).fill(0);for(let S=0;S<e.length;S++)t[e[S]]++;let r={shannon:0,min:0,collision:0,compression:0,quantum:0},i=0,n=e.length;for(let S=0;S<256;S++)if(t[S]>0){let g=t[S]/n;i-=g*Math.log2(g)}r.shannon=i;let o=Math.max(...t)/n;r.min=-Math.log2(o);let c=0;for(let S=0;S<256;S++)if(t[S]>0){let g=t[S]/n;c+=g*g}r.collision=-Math.log2(c);let d=Array.from(e).map(S=>String.fromCharCode(S)).join(""),u=this._estimateCompressedLength(d);r.compression=(1-u/n)*8,r.quantum=this._calculateQuantumResistantEntropy(e);let h=this._detectAdvancedSuspiciousPatterns(e),m=this._ivTrackingSystem.entropyValidation.minEntropy,p=r.shannon>=m&&r.min>=m*.8&&r.collision>=m*.9&&r.compression>=m*.7&&r.quantum>=m*.6&&!h;return p||this._secureLog("warn","Enhanced IV entropy validation failed",{shannon:r.shannon.toFixed(2),min:r.min.toFixed(2),collision:r.collision.toFixed(2),compression:r.compression.toFixed(2),quantum:r.quantum.toFixed(2),minThreshold:m,hasSuspiciousPatterns:h}),p}_estimateCompressedLength(e){let t=0,r=0;for(;r<e.length;){let i=0,n=0;for(let a=Math.max(0,r-255);a<r;a++){let o=0;for(;r+o<e.length&&e[r+o]===e[a+o]&&o<255;)o++;o>i&&(i=o,n=r-a)}i>=3?(t+=3,r+=i):(t+=1,r+=1)}return t}_calculateQuantumResistantEntropy(e){let t=0;this._detectQuantumVulnerablePatterns(e)&&(t-=2);let i=this._analyzeBitDistribution(e);t+=i.score;let n=this._detectPeriodicity(e);return t-=n*.5,Math.max(0,Math.min(8,t))}_detectQuantumVulnerablePatterns(e){let t=[[0,0,0,0,0,0,0,0],[255,255,255,255,255,255,255,255],[0,1,0,1,0,1,0,1],[1,0,1,0,1,0,1,0]];for(let r of t)for(let i=0;i<=e.length-r.length;i++){let n=!0;for(let a=0;a<r.length;a++)if(e[i+a]!==r[a]){n=!1;break}if(n)return!0}return!1}_analyzeBitDistribution(e){let t=0,r=e.length*8;for(let c of e)t+=(c>>>0).toString(2).split("1").length-1;let i=(r-t)/r,n=t/r,a=Math.abs(.5-n);return{score:Math.max(0,8-a*16),zeroRatio:i,oneRatio:n,deviation:a}}_detectPeriodicity(e){if(e.length<16)return 0;let t=0;for(let r=2;r<=e.length/2;r++){let i=0,n=0;for(let a=0;a<e.length-r;a++)e[a]===e[a+r]&&i++,n++;if(n>0){let a=i/n;t=Math.max(t,a)}}return t}_detectAdvancedSuspiciousPatterns(e){let t=[[0,1,2,3,4,5,6,7],[255,254,253,252,251,250,249,248],[0,0,0,0,0,0,0,0],[255,255,255,255,255,255,255,255],[0,255,0,255,0,255,0,255],[255,0,255,0,255,0,255,0]];for(let n of t)for(let a=0;a<=e.length-n.length;a++){let o=!0;for(let c=0;c<n.length;c++)if(e[a+c]!==n[c]){o=!1;break}if(o)return!0}return this._calculateLocalEntropy(e).filter(n=>n<3).length>e.length*.3}_calculateLocalEntropy(e){let r=[];for(let i=0;i<=e.length-8;i++){let n=e.slice(i,i+8),a={};for(let c of n)a[c]=(a[c]||0)+1;let o=0;for(let c of Object.values(a)){let d=c/8;o-=d*Math.log2(d)}r.push(o)}return r}_detectSuspiciousIVPatterns(e){let t=e.every(n=>n===0),r=e.every(n=>n===255);if(t||r)return!0;let i=0;for(let n=1;n<e.length;n++)if(e[n]===e[n-1]+1||e[n]===e[n-1]-1?i++:i=0,i>=3)return!0;for(let n=2;n<=Math.floor(e.length/2);n++)for(let a=0;a<=e.length-n*2;a++){let o=e.slice(a,a+n),c=e.slice(a+n,a+n*2);if(o.every((d,u)=>d===c[u]))return!0}return!1}async _cleanupOldIVs(){let e=Date.now(),t=18e5,r=0,i=[];if(this._ivTrackingSystem.ivHistory.size>this._ivTrackingSystem.maxIVHistorySize){let n=Array.from(this._ivTrackingSystem.ivHistory.entries()),a=n.slice(0,n.length-this._ivTrackingSystem.maxIVHistorySize);for(let[o]of a)i.push(o),r++,i.length>=100&&(this._processCleanupBatch(i),i.length=0)}for(let[n,a]of this._ivTrackingSystem.ivHistory.entries())e-a.timestamp>t&&(i.push(n),r++,i.length>=100&&(this._processCleanupBatch(i),i.length=0));i.length>0&&this._processCleanupBatch(i);for(let[n,a]of this._ivTrackingSystem.sessionIVs.entries())if(a.size>this._ivTrackingSystem.maxSessionIVs){let o=Array.from(a),c=o.slice(0,o.length-this._ivTrackingSystem.maxSessionIVs);for(let d of c)a.delete(d),this._ivTrackingSystem.usedIVs.delete(d),this._ivTrackingSystem.ivHistory.delete(d),r++}r>50&&await this._performNaturalCleanup(),r>0&&this._secureLog("debug",`Enhanced cleanup: ${r} old IVs removed`,{cleanedCount:r,remainingIVs:this._ivTrackingSystem.usedIVs.size,remainingHistory:this._ivTrackingSystem.ivHistory.size,memoryPressure:this._calculateMemoryPressure()})}_processCleanupBatch(e){for(let t of e)this._ivTrackingSystem.usedIVs.delete(t),this._ivTrackingSystem.ivHistory.delete(t)}_calculateMemoryPressure(){let e=this._ivTrackingSystem.usedIVs.size,t=this._resourceLimits.maxIVHistory;return Math.min(100,Math.floor(e/t*100))}_getIVTrackingStats(){return{totalIVs:this._ivTrackingSystem.usedIVs.size,collisionCount:this._ivTrackingSystem.collisionCount,entropyTests:this._ivTrackingSystem.entropyValidation.entropyTests,entropyFailures:this._ivTrackingSystem.entropyValidation.entropyFailures,rngTests:this._ivTrackingSystem.rngValidation.testsPerformed,weakRngDetected:this._ivTrackingSystem.rngValidation.weakRngDetected,emergencyMode:this._ivTrackingSystem.emergencyMode,sessionCount:this._ivTrackingSystem.sessionIVs.size,lastCleanup:this._lastIVCleanupTime||0}}_resetIVTrackingSystem(){this._secureLog("warn","Resetting IV tracking system"),this._ivTrackingSystem.usedIVs.clear(),this._ivTrackingSystem.ivHistory.clear(),this._ivTrackingSystem.sessionIVs.clear(),this._ivTrackingSystem.collisionCount=0,this._ivTrackingSystem.entropyValidation.entropyTests=0,this._ivTrackingSystem.entropyValidation.entropyFailures=0,this._ivTrackingSystem.rngValidation.testsPerformed=0,this._ivTrackingSystem.rngValidation.weakRngDetected=!1,this._ivTrackingSystem.emergencyMode=!1,this._secureLog("info","IV tracking system reset completed")}_validateRNGQuality(){let e=Date.now();if(this._ivTrackingSystem.rngValidation.testsPerformed%1e3===0)try{let t=[];for(let n=0;n<100;n++)t.push(crypto.getRandomValues(new Uint8Array(12)));let r=t.map(n=>Array.from(n).map(a=>a.toString(16).padStart(2,"0")).join("")),i=new Set(r);i.size<95&&(this._ivTrackingSystem.rngValidation.weakRngDetected=!0,this._secureLog("error","CRITICAL: Weak RNG detected in validation test",{uniqueIVs:i.size,totalTests:t.length})),this._ivTrackingSystem.rngValidation.lastValidation=e}catch(t){this._secureLog("error","RNG validation failed",{errorType:t.constructor.name})}this._ivTrackingSystem.rngValidation.testsPerformed++}_handleMutexTimeout(e,t,r){let i=this[`_${e}Mutex`];if(!i){this._secureLog("error",`Mutex '${e}' not found during timeout handling`);return}if(i.lockId!==t){this._secureLog("warn",`Timeout for different operation ID on mutex '${e}'`,{expectedOperationId:t,actualLockId:i.lockId,locked:i.locked});return}if(!i.locked){this._secureLog("warn",`Timeout for already unlocked mutex '${e}'`,{operationId:t});return}try{let n=i.lockTime?Date.now()-i.lockTime:0;this._secureLog("warn",`Mutex '${e}' auto-released due to timeout`,{operationId:t,lockDuration:n,timeout:r,queueLength:i.queue.length}),i.locked=!1,i.lockId=null,i.lockTimeout=null,i.lockTime=null,setTimeout(()=>{try{this._processNextInQueue(e)}catch(a){this._secureLog("error",`Error processing queue after timeout for mutex '${e}'`,{errorType:a.constructor.name,errorMessage:a.message})}},10)}catch(n){this._secureLog("error",`Critical error during mutex timeout handling for '${e}'`,{operationId:t,errorType:n.constructor.name,errorMessage:n.message});try{this._emergencyUnlockAllMutexes("timeoutHandler")}catch(a){this._secureLog("error","Emergency unlock failed during timeout handling",{originalError:n.message,emergencyError:a.message})}}}_validateMutexSystemAfterEmergencyUnlock(){let e=["keyOperation","cryptoOperation","connectionOperation"],t=0;this._secureLog("info","Validating mutex system after emergency unlock"),e.forEach(r=>{let i=this[`_${r}Mutex`];if(!i){t++,this._secureLog("error",`Mutex '${r}' not found after emergency unlock`);return}i.locked&&(t++,this._secureLog("error",`Mutex '${r}' still locked after emergency unlock`,{lockId:i.lockId,lockTime:i.lockTime})),i.lockId!==null&&(t++,this._secureLog("error",`Mutex '${r}' still has lock ID after emergency unlock`,{lockId:i.lockId})),i.lockTimeout!==null&&(t++,this._secureLog("error",`Mutex '${r}' still has timeout after emergency unlock`)),i.queue.length>0&&(t++,this._secureLog("error",`Mutex '${r}' still has queue items after emergency unlock`,{queueLength:i.queue.length}))}),this._keySystemState&&(this._keySystemState.isInitializing||this._keySystemState.isRotating||this._keySystemState.isDestroying)&&(t++,this._secureLog("error","Key system state not properly reset after emergency unlock",{isInitializing:this._keySystemState.isInitializing,isRotating:this._keySystemState.isRotating,isDestroying:this._keySystemState.isDestroying})),t===0?this._secureLog("info","Mutex system validation passed after emergency unlock"):(this._secureLog("error","Mutex system validation failed after emergency unlock",{validationErrors:t}),setTimeout(()=>{this._emergencyRecoverMutexSystem()},1e3))}_getMutexSystemDiagnostics(){let e={timestamp:Date.now(),systemValid:this._validateMutexSystem(),mutexes:{},counters:{...this._operationCounters},keySystemState:{...this._keySystemState}};return["keyOperation","cryptoOperation","connectionOperation"].forEach(r=>{let i=`_${r}Mutex`,n=this[i];n?e.mutexes[r]={locked:n.locked,lockId:n.lockId,queueLength:n.queue.length,hasTimeout:!!n.lockTimeout}:e.mutexes[r]={error:"not_found"}}),e}async createSecureOffer(){return this._withMutex("connectionOperation",async e=>{this._secureLog("info","Creating secure offer with mutex",{operationId:e,connectionAttempts:this.connectionAttempts,currentState:this.peerConnection?.connectionState||"none"});try{if(this._resetNotificationFlags(),!this._checkRateLimit())throw new Error("Connection rate limit exceeded. Please wait before trying again.");this.connectionAttempts=0,this.sessionSalt=window.EnhancedSecureCryptoUtils.generateSalt(),this._secureLog("debug","Session salt generated",{operationId:e,saltLength:this.sessionSalt.length,isValidSalt:Array.isArray(this.sessionSalt)&&this.sessionSalt.length===64});let t=await this._generateEncryptionKeys();if(this.ecdhKeyPair=t.ecdhKeyPair,this.ecdsaKeyPair=t.ecdsaKeyPair,!this.ecdhKeyPair?.privateKey||!this.ecdhKeyPair?.publicKey)throw new Error("Failed to generate valid ECDH key pair");if(!this.ecdsaKeyPair?.privateKey||!this.ecdsaKeyPair?.publicKey)throw new Error("Failed to generate valid ECDSA key pair");let r=await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(await crypto.subtle.exportKey("spki",this.ecdhKeyPair.publicKey)),i=await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(await crypto.subtle.exportKey("spki",this.ecdsaKeyPair.publicKey));if(!r||!i)throw new Error("Failed to generate key fingerprints");this._secureLog("info","Generated unique key pairs for MITM protection",{operationId:e,hasECDHFingerprint:!!r,hasECDSAFingerprint:!!i,fingerprintLength:r.length,timestamp:Date.now()});let n=await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(this.ecdhKeyPair.publicKey,this.ecdsaKeyPair.privateKey,"ECDH"),a=await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(this.ecdsaKeyPair.publicKey,this.ecdsaKeyPair.privateKey,"ECDSA");if(!n||typeof n!="object")throw this._secureLog("error","CRITICAL: ECDH key export failed - invalid object structure",{operationId:e}),new Error("CRITICAL SECURITY FAILURE: ECDH key export validation failed - hard abort required");if(!n.keyData||!n.signature)throw this._secureLog("error","CRITICAL: ECDH key export incomplete - missing keyData or signature",{operationId:e,hasKeyData:!!n.keyData,hasSignature:!!n.signature}),new Error("CRITICAL SECURITY FAILURE: ECDH key export incomplete - hard abort required");if(!a||typeof a!="object")throw this._secureLog("error","CRITICAL: ECDSA key export failed - invalid object structure",{operationId:e}),new Error("CRITICAL SECURITY FAILURE: ECDSA key export validation failed - hard abort required");if(!a.keyData||!a.signature)throw this._secureLog("error","CRITICAL: ECDSA key export incomplete - missing keyData or signature",{operationId:e,hasKeyData:!!a.keyData,hasSignature:!!a.signature}),new Error("CRITICAL SECURITY FAILURE: ECDSA key export incomplete - hard abort required");this._updateSecurityFeatures({hasEncryption:!0,hasECDH:!0,hasECDSA:!0,hasMutualAuth:!0,hasMetadataProtection:!0,hasEnhancedReplayProtection:!0,hasNonExtractableKeys:!0,hasRateLimiting:!0,hasEnhancedValidation:!0,hasPFS:!0}),this.isInitiator=!0,this.onStatusChange("connecting"),this.createPeerConnection(),this.dataChannel=this.peerConnection.createDataChannel("securechat",{ordered:!0}),this.setupDataChannel(this.dataChannel),this._secureLog("debug","Data channel created",{operationId:e,channelLabel:this.dataChannel.label,channelOrdered:this.dataChannel.ordered});let o=await this.peerConnection.createOffer({offerToReceiveAudio:!1,offerToReceiveVideo:!1});await this.peerConnection.setLocalDescription(o);try{let b=this._extractDTLSFingerprintFromSDP(o.sdp);this.expectedDTLSFingerprint=b,this._secureLog("info","Generated DTLS fingerprint for out-of-band verification",{fingerprint:b,context:"offer_creation"}),this.deliverMessageToUI(`DTLS fingerprint ready for verification: ${b}`,"system")}catch(b){this._secureLog("error","Failed to extract DTLS fingerprint from offer",{error:b.message})}let c=Date.now(),d=await this.waitForIceGathering(),u=this._summarizeIceCandidatesInSDP(this.peerConnection.localDescription?.sdp),h=u.total;if(!d&&h===0)throw this.deliverMessageToUI("No network candidates could be gathered, so the invitation would not be usable. This usually means a VPN or firewall is blocking STUN/TURN. Try turning the VPN off, switching network, or adding your own TURN server in Advanced network settings.","system"),new Error("ICE gathering produced no candidates \u2014 check VPN/firewall or configure a TURN server");if(this._secureLog(h>0?"info":"warn","ICE candidates captured for offer export",{candidateSummary:u,iceGatheringState:this.peerConnection.iceGatheringState,iceGatheringDurationMs:Date.now()-c,iceGatheringCompleted:d}),this._logIceCandidateDiagnostics("offer export",this.peerConnection.localDescription?.sdp,{iceGatheringState:this.peerConnection.iceGatheringState,iceGatheringDurationMs:Date.now()-c,iceGatheringCompleted:d}),d||this.deliverMessageToUI("ICE gathering timed out before completion, but available candidates were included in the invitation. Connectivity may still fail on restrictive networks.","system"),h===0&&this.deliverMessageToUI("No ICE candidates were gathered for the invitation yet. The peer connection may fail unless network candidates become available.","system"),this._secureLog("debug","ICE gathering completed",{operationId:e,iceGatheringState:this.peerConnection.iceGatheringState,connectionState:this.peerConnection.connectionState}),this.verificationCode=window.EnhancedSecureCryptoUtils.generateVerificationCode(),!this.verificationCode||this.verificationCode.length<s.SIZES.VERIFICATION_CODE_MIN_LENGTH)throw new Error("Failed to generate valid verification code");let m=window.EnhancedSecureCryptoUtils.generateMutualAuthChallenge();if(!m)throw new Error("Failed to generate mutual authentication challenge");if(this.sessionId=Array.from(crypto.getRandomValues(new Uint8Array(s.SIZES.SESSION_ID_LENGTH))).map(b=>b.toString(16).padStart(2,"0")).join(""),!this.sessionId||this.sessionId.length!==s.SIZES.SESSION_ID_LENGTH*2)throw new Error("Failed to generate valid session ID");this.connectionId=Array.from(crypto.getRandomValues(new Uint8Array(8))).map(b=>b.toString(16).padStart(2,"0")).join(""),this._storePendingOfferContext();let p={level:"MAXIMUM",score:100,color:"green",details:"All security features enabled by default",passedChecks:10,totalChecks:10,isRealData:!0},S=Date.now(),g={t:"offer",s:this.peerConnection.localDescription.sdp,v:s.PROTOCOL_VERSION,ts:S,e:n,d:a,sl:this.sessionSalt,si:this.sessionId,ci:this.connectionId,vc:this.verificationCode,ac:m,slv:"MAX",dr:s.RATCHET_VERSION,kf:{e:r.substring(0,12),d:i.substring(0,12)}};try{let b=this.validateEnhancedOfferData(g)}catch(b){throw new Error(`Offer package validation error: ${b.message}`)}if(this._secureLog("info","Enhanced secure offer created successfully",{operationId:e,version:g.version,hasECDSA:!0,hasMutualAuth:!0,hasSessionId:!!g.sessionId,securityLevel:p.level,timestamp:S,capabilitiesCount:10}),this._dispatchAppEvent?.(new CustomEvent("new-connection",{detail:{type:"offer",timestamp:S,securityLevel:p.level,operationId:e}})),s.SBQ2_SEND_ENABLED){this._latchHandshakeMode("sbq2");let{text:b}=await this._sbq2BuildDescriptor(de.OFFER);return{t:"offer",sbq2:b}}return this._latchHandshakeMode("sb1"),g}catch(t){throw this._secureLog("error","Enhanced secure offer creation failed in critical section",{operationId:e,errorType:t.constructor.name,errorMessage:t.message,phase:this._determineErrorPhase(t),connectionAttempts:this.connectionAttempts}),this._cleanupFailedOfferCreation(),this.onStatusChange("disconnected"),t}},6e4)}_determineErrorPhase(e){let t=e.message.toLowerCase();return t.includes("rate limit")?"rate_limiting":t.includes("key pair")||t.includes("generate")?"key_generation":t.includes("fingerprint")?"fingerprinting":t.includes("export")||t.includes("signature")?"key_export":t.includes("peer connection")?"webrtc_setup":t.includes("offer")||t.includes("sdp")?"sdp_creation":t.includes("verification")?"verification_setup":t.includes("session")?"session_setup":t.includes("validation")?"package_validation":"unknown"}_cleanupFailedOfferCreation(){try{this._secureCleanupCryptographicMaterials(),this.peerConnection&&(this.peerConnection.close(),this.peerConnection=null),this.dataChannel&&(this.dataChannel.close(),this.dataChannel=null),this.isInitiator=!1,this.isVerified=!1,this._updateSecurityFeatures({hasEncryption:!1,hasECDH:!1,hasECDSA:!1,hasMutualAuth:!1,hasMetadataProtection:!1,hasEnhancedReplayProtection:!1,hasNonExtractableKeys:!1,hasEnhancedValidation:!1,hasPFS:!1}),this._forceGarbageCollection().catch(e=>{this._secureLog("error","Cleanup failed during offer cleanup",{errorType:e?.constructor?.name||"Unknown"})}),this._secureLog("debug","Failed offer creation cleanup completed with secure memory wipe")}catch(e){this._secureLog("error","Error during offer creation cleanup",{errorType:e.constructor.name,errorMessage:e.message})}}_updateSecurityFeatures(e){let t={...this.securityFeatures};try{Object.assign(this.securityFeatures,e),this._secureLog("debug","Security features updated",{updatedCount:Object.keys(e).length,totalFeatures:Object.keys(this.securityFeatures).length})}catch(r){throw this.securityFeatures=t,this._secureLog("error","Security features update failed, rolled back",{errorType:r.constructor.name}),r}}async _createSbq2Answer(e){return this._withMutex("connectionOperation",async t=>{try{if(this._resetNotificationFlags(),!this._checkRateLimit())throw new Error("Connection rate limit exceeded. Please wait before trying again.");this._latchHandshakeMode("sbq2");let r=Ur(String(e.sbq2)),i=this._sbq2AdoptRemoteDescriptor(r,de.OFFER),{sdp:n}=Kr(i);this.isInitiator=!1,this.onStatusChange("connecting");let a=await this._generateEncryptionKeys();if(this.ecdhKeyPair=a.ecdhKeyPair,this.ecdsaKeyPair=a.ecdsaKeyPair,!this.ecdhKeyPair?.privateKey||!this.ecdsaKeyPair?.privateKey)throw new Error("Failed to generate valid key pairs");this.createPeerConnection(),this._peerDTLSFingerprint=Array.from(i.fingerprint,d=>d.toString(16).padStart(2,"0").toUpperCase()).join(":"),await this.peerConnection.setRemoteDescription({type:"offer",sdp:n}),await this.peerConnection.setLocalDescription(await this.peerConnection.createAnswer({offerToReceiveAudio:!1,offerToReceiveVideo:!1})),this.expectedDTLSFingerprint=this._extractDTLSFingerprintFromSDP(this.peerConnection.localDescription.sdp),await this.waitForIceGathering();let o=async d=>new Uint8Array(await crypto.subtle.digest("SHA-256",d)),{text:c}=await this._sbq2BuildDescriptor(de.ANSWER,{bindingTag:await Or(o,r)});return this._dispatchAppEvent?.(new CustomEvent("new-connection",{detail:{type:"answer",timestamp:Date.now(),operationId:t}})),{t:"answer",sbq2:c}}catch(r){throw this._secureLog("error","SBQ2 answer creation failed",{operationId:t,errorType:r?.constructor?.name||"Unknown"}),this.onStatusChange("disconnected"),r}},6e4)}async createSecureAnswer(e){return e&&typeof e.sbq2=="string"?this._createSbq2Answer(e):this._withMutex("connectionOperation",async t=>{this._secureLog("info","Creating secure answer with mutex",{operationId:t,hasOfferData:!!e,offerType:e?.type,offerVersion:e?.version,offerTimestamp:e?.timestamp});try{if(this._resetNotificationFlags(),this._secureLog("debug","Starting enhanced offer validation",{operationId:t,hasOfferData:!!e,offerType:e?.type,hasECDHKey:!!e?.ecdhPublicKey,hasECDSAKey:!!e?.ecdsaPublicKey,hasSalt:!!e?.salt}),!this.validateEnhancedOfferData(e))throw new Error("Invalid connection data format - failed enhanced validation");if(!window.EnhancedSecureCryptoUtils.rateLimiter.checkConnectionRate(this.rateLimiterId))throw new Error("Connection rate limit exceeded. Please wait before trying again.");let r=e.ts||e.timestamp,i=e.v||e.version;if(!r||!i)throw new Error("Missing required security fields in offer data \u2013 possible MITM attack");let n=Date.now()-r,a=18e5;if(n>a)throw this._secureLog("error","Offer data is too old - possible replay attack",{operationId:t,offerAge:Math.round(n/1e3),maxAllowedAge:Math.round(a/1e3),timestamp:e.timestamp}),this.onAnswerError&&this.onAnswerError("replay_attack","Offer data is too old \u2013 possible replay attack"),new Error("Offer data is too old \u2013 possible replay attack");let o=i;if(o!==s.PROTOCOL_VERSION)throw this._secureLog("warn","Protocol version mismatch detected",{operationId:t,expectedVersion:s.PROTOCOL_VERSION,receivedVersion:o}),new Error(`Version mismatch: expected protocol ${s.PROTOCOL_VERSION}, received ${o}`);if(this.sessionSalt=e.sl||e.salt,this._peerSupportsRatchet=e.dr===s.RATCHET_VERSION,!Array.isArray(this.sessionSalt))throw new Error("Invalid session salt format - must be array");let c=64;if(this.sessionSalt.length!==c)throw new Error(`Invalid session salt length: expected ${c}, got ${this.sessionSalt.length}`);let d=await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(this.sessionSalt);this._secureLog("info","Session salt validated successfully",{operationId:t,saltLength:this.sessionSalt.length,saltFingerprint:d.substring(0,8)});let u=await this._generateEncryptionKeys();if(this.ecdhKeyPair=u.ecdhKeyPair,this.ecdsaKeyPair=u.ecdsaKeyPair,!(this.ecdhKeyPair?.privateKey instanceof CryptoKey))throw this._secureLog("error","Local ECDH private key is not a CryptoKey",{operationId:t,hasKeyPair:!!this.ecdhKeyPair,privateKeyType:typeof this.ecdhKeyPair?.privateKey,privateKeyAlgorithm:this.ecdhKeyPair?.privateKey?.algorithm?.name}),new Error("Local ECDH private key is not a valid CryptoKey");let h;try{let R=e.d||e.ecdsaPublicKey;h=await crypto.subtle.importKey("spki",new Uint8Array(R.keyData),{name:"ECDSA",namedCurve:"P-384"},!1,["verify"])}catch(R){this._throwSecureError(R,"ecdsa_key_import")}let m;try{let R=e.e||e.ecdhPublicKey;m=await window.EnhancedSecureCryptoUtils.importSignedPublicKey(R,h,"ECDH")}catch(R){this._secureLog("error","Failed to import signed ECDH public key",{operationId:t,errorType:R.constructor.name}),this._throwSecureError(R,"ecdh_key_import")}if(!(m instanceof CryptoKey))throw this._secureLog("error","Peer ECDH public key is not a CryptoKey",{operationId:t,publicKeyType:typeof m,publicKeyAlgorithm:m?.algorithm?.name}),new Error("Peer ECDH public key is not a valid CryptoKey");this.peerPublicKey=m;let p;try{this._secureLog("debug","About to call deriveSharedKeys",{operationId:t,privateKeyType:typeof this.ecdhKeyPair.privateKey,publicKeyType:typeof m,saltLength:this.sessionSalt?.length,privateKeyAlgorithm:this.ecdhKeyPair.privateKey?.algorithm?.name,publicKeyAlgorithm:m?.algorithm?.name}),p=await window.EnhancedSecureCryptoUtils.deriveSharedKeys(this.ecdhKeyPair.privateKey,m,this.sessionSalt),this._secureLog("debug","deriveSharedKeys completed successfully",{operationId:t,hasMessageKey:!!p.messageKey,hasMacKey:!!p.macKey,hasPfsKey:!!p.pfsKey,hasMetadataKey:!!p.metadataKey,hasFingerprint:!!p.fingerprint})}catch(R){this._secureLog("error","Failed to derive shared keys",{operationId:t,errorType:R.constructor.name,errorMessage:R.message,errorStack:R.stack,privateKeyType:typeof this.ecdhKeyPair.privateKey,publicKeyType:typeof m,saltLength:this.sessionSalt?.length,privateKeyAlgorithm:this.ecdhKeyPair.privateKey?.algorithm?.name,publicKeyAlgorithm:m?.algorithm?.name}),this._throwSecureError(R,"key_derivation")}if(await this._setEncryptionKeys(p.messageKey,p.macKey,p.metadataKey,p.fingerprint),await this._initializeRatchet(p,!1),!(this.encryptionKey instanceof CryptoKey)||!(this.macKey instanceof CryptoKey)||!(this.metadataKey instanceof CryptoKey))throw this._secureLog("error","Invalid key types after derivation",{operationId:t,encryptionKeyType:typeof this.encryptionKey,macKeyType:typeof this.macKey,metadataKeyType:typeof this.metadataKey}),new Error("Invalid key types after derivation");this.verificationCode=e.vc||e.verificationCode||null,this._secureLog("info","Encryption keys derived and set successfully",{operationId:t,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,hasMetadataKey:!!this.metadataKey,hasKeyFingerprint:!!this.keyFingerprint,mitmProtection:"enabled",signatureVerified:!0}),this._updateSecurityFeatures({hasEncryption:!0,hasECDH:!0,hasECDSA:!0,hasMutualAuth:!0,hasMetadataProtection:!0,hasEnhancedReplayProtection:!0,hasNonExtractableKeys:!0,hasRateLimiting:!0,hasEnhancedValidation:!0,hasPFS:!0}),this.currentKeyVersion=0,this.lastKeyRotation=Date.now(),this.keyVersions.set(0,{salt:this.sessionSalt,timestamp:this.lastKeyRotation,messageCount:0});let S;if(e.authChallenge)try{S=await window.EnhancedSecureCryptoUtils.createAuthProof(e.authChallenge,this.ecdsaKeyPair.privateKey,this.ecdsaKeyPair.publicKey)}catch(R){this._secureLog("error","Failed to create authentication proof",{operationId:t,errorType:R.constructor.name}),this._throwSecureError(R,"authentication_proof_creation")}else this._secureLog("warn","No auth challenge in offer - mutual auth disabled",{operationId:t});if(this.isInitiator=!1,this.onStatusChange("connecting"),this.onKeyExchange(this.keyFingerprint),this.createPeerConnection(),this.strictDTLSValidation)try{this._peerDTLSFingerprint=this._extractDTLSFingerprintFromSDP(e.sdp)}catch(R){this._secureLog("warn","Could not extract peer DTLS fingerprint from offer",{error:R.message,context:"offer_validation"})}else this._secureLog("info","DTLS fingerprint validation disabled - proceeding without validation");try{this._secureLog("debug","Setting remote description from offer",{operationId:t,sdpLength:e.sdp?.length||0}),await this.peerConnection.setRemoteDescription(new RTCSessionDescription({type:"offer",sdp:e.s||e.sdp})),this._logIceCandidateDiagnostics("remote offer applied",this.peerConnection.remoteDescription?.sdp,{signalingState:this.peerConnection.signalingState}),this._warnIfRemoteCandidatesNeedRelay("offer",this.peerConnection.remoteDescription?.sdp),this._secureLog("debug","Remote description set successfully",{operationId:t,signalingState:this.peerConnection.signalingState})}catch(R){this._secureLog("error","Failed to set remote description",{error:R.message,operationId:t}),this._throwSecureError(R,"webrtc_remote_description")}this._secureLog("debug","Remote description set successfully",{operationId:t,connectionState:this.peerConnection.connectionState,signalingState:this.peerConnection.signalingState});let g;try{g=await this.peerConnection.createAnswer({offerToReceiveAudio:!1,offerToReceiveVideo:!1})}catch(R){this._throwSecureError(R,"webrtc_create_answer")}try{await this.peerConnection.setLocalDescription(g)}catch(R){this._throwSecureError(R,"webrtc_local_description")}try{let R=this._extractDTLSFingerprintFromSDP(g.sdp);this.expectedDTLSFingerprint=R,this._secureLog("info","Generated DTLS fingerprint for out-of-band verification",{fingerprint:R,context:"answer_creation"}),this.deliverMessageToUI(`DTLS fingerprint ready for verification: ${R}`,"system")}catch(R){this._secureLog("error","Failed to extract DTLS fingerprint from answer",{error:R.message})}try{let R=this._extractDTLSFingerprintFromSDP(e.s||e.sdp),ue=this.expectedDTLSFingerprint,K=this._decodeKeyFingerprint(this.keyFingerprint);this.verificationCode=await this._computeSAS(K,ue,R),this._setSASMaterialReady(ue,R)}catch(R){throw this._secureLog("error","SAS computation failed in createSecureAnswer (Answer side)",{errorType:R?.constructor?.name||"Unknown"}),new Error(`SAS computation failed: ${R.message}`)}let b=Date.now(),w=await this.waitForIceGathering(),M=this._summarizeIceCandidatesInSDP(this.peerConnection.localDescription?.sdp),F=M.total;if(!w&&F===0)throw this.deliverMessageToUI("No network candidates could be gathered, so the response would not be usable. This usually means a VPN or firewall is blocking STUN/TURN. Try turning the VPN off, switching network, or adding your own TURN server in Advanced network settings.","system"),new Error("ICE gathering produced no candidates \u2014 check VPN/firewall or configure a TURN server");this._secureLog(F>0?"info":"warn","ICE candidates captured for answer export",{candidateSummary:M,iceGatheringState:this.peerConnection.iceGatheringState,iceGatheringDurationMs:Date.now()-b,iceGatheringCompleted:w}),this._logIceCandidateDiagnostics("answer export",this.peerConnection.localDescription?.sdp,{iceGatheringState:this.peerConnection.iceGatheringState,iceGatheringDurationMs:Date.now()-b,iceGatheringCompleted:w}),w||this.deliverMessageToUI("ICE gathering timed out before completion, but available candidates were included in the response. Connectivity may still fail on restrictive networks.","system"),F===0&&this.deliverMessageToUI("No ICE candidates were gathered for the response yet. The peer connection may fail unless network candidates become available.","system"),this._secureLog("debug","ICE gathering completed for answer",{operationId:t,iceGatheringState:this.peerConnection.iceGatheringState,connectionState:this.peerConnection.connectionState});let k=await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(this.ecdhKeyPair.publicKey,this.ecdsaKeyPair.privateKey,"ECDH"),E=await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(this.ecdsaKeyPair.publicKey,this.ecdsaKeyPair.privateKey,"ECDSA");if(!k||typeof k!="object")throw this._secureLog("error","CRITICAL: ECDH key export failed - invalid object structure",{operationId:t}),new Error("CRITICAL SECURITY FAILURE: ECDH key export validation failed - hard abort required");if(!k.keyData||!k.signature)throw this._secureLog("error","CRITICAL: ECDH key export incomplete - missing keyData or signature",{operationId:t,hasKeyData:!!k.keyData,hasSignature:!!k.signature}),new Error("CRITICAL SECURITY FAILURE: ECDH key export incomplete - hard abort required");if(!E||typeof E!="object")throw this._secureLog("error","CRITICAL: ECDSA key export failed - invalid object structure",{operationId:t}),new Error("CRITICAL SECURITY FAILURE: ECDSA key export validation failed - hard abort required");if(!E.keyData||!E.signature)throw this._secureLog("error","CRITICAL: ECDSA key export incomplete - missing keyData or signature",{operationId:t,hasKeyData:!!E.keyData,hasSignature:!!E.signature}),new Error("CRITICAL SECURITY FAILURE: ECDSA key export incomplete - hard abort required");let _={level:"MAXIMUM",score:100,color:"green",details:"All security features enabled by default",passedChecks:10,totalChecks:10,isRealData:!0},A=Date.now(),x={t:"answer",s:this.peerConnection.localDescription.sdp,v:s.PROTOCOL_VERSION,ts:A,e:k,d:E,ap:S,slv:"MAX",dr:s.RATCHET_VERSION,sc:{sf:d.substring(0,12),kd:!0,ma:!0}},T=x.s||x.sdp,Y=x.e||x.ecdhPublicKey,B=x.d||x.ecdsaPublicKey;if(!T||!Y||!B)throw new Error("Generated answer package is incomplete");return this._secureLog("info","Enhanced secure answer created successfully",{operationId:t,version:x.version,hasECDSA:!0,hasMutualAuth:!!S,hasSessionConfirmation:!!x.sessionConfirmation,securityLevel:_.level,timestamp:A,processingTime:A-e.timestamp}),this._dispatchAppEvent?.(new CustomEvent("new-connection",{detail:{type:"answer",timestamp:A,securityLevel:_.level,operationId:t}})),setTimeout(async()=>{try{let R=await this.calculateAndReportSecurityLevel();R&&(this.notifySecurityUpdate(),this._secureLog("info","Post-connection security level calculated",{operationId:t,level:R.level}))}catch(R){this._secureLog("error","Error calculating post-connection security",{operationId:t,errorType:R.constructor.name})}},1e3),setTimeout(async()=>{(!this.lastSecurityCalculation||this.lastSecurityCalculation.score<50)&&(this._secureLog("info","Retrying security calculation",{operationId:t}),await this.calculateAndReportSecurityLevel(),this.notifySecurityUpdate())},3e3),this.notifySecurityUpdate(),x}catch(r){throw this._secureLog("error","Enhanced secure answer creation failed in critical section",{operationId:t,errorType:r.constructor.name,errorMessage:r.message,phase:this._determineAnswerErrorPhase(r),offerAge:e?.timestamp?Date.now()-e.timestamp:"unknown"}),this._cleanupFailedAnswerCreation(),this.onStatusChange("disconnected"),this.onAnswerError&&(r.message.includes("too old")||r.message.includes("replay")?this.onAnswerError("replay_attack",r.message):r.message.includes("MITM")||r.message.includes("signature")?this.onAnswerError("security_violation",r.message):r.message.includes("validation")||r.message.includes("format")?this.onAnswerError("invalid_format",r.message):this.onAnswerError("general_error",r.message)),r}},6e4)}_determineAnswerErrorPhase(e){let t=e.message.toLowerCase();return t.includes("validation")||t.includes("format")?"offer_validation":t.includes("rate limit")?"rate_limiting":t.includes("replay")||t.includes("too old")?"replay_protection":t.includes("salt")?"salt_validation":t.includes("key pair")||t.includes("generate")?"key_generation":t.includes("import")||t.includes("ecdsa")||t.includes("ecdh")?"key_import":t.includes("signature")||t.includes("mitm")?"signature_verification":t.includes("derive")||t.includes("shared")?"key_derivation":t.includes("auth")||t.includes("proof")?"authentication":t.includes("remote description")||t.includes("local description")?"webrtc_setup":t.includes("answer")||t.includes("sdp")?"sdp_creation":t.includes("export")?"key_export":t.includes("security level")?"security_calculation":"unknown"}_cleanupFailedAnswerCreation(){try{this._clearPendingOfferContext(),this._secureCleanupCryptographicMaterials(),this.currentKeyVersion=0,this.keyVersions.clear(),this.oldKeys.clear(),this.peerConnection&&(this.peerConnection.close(),this.peerConnection=null),this.dataChannel&&(this.dataChannel.close(),this.dataChannel=null),this.isInitiator=!1,this.isVerified=!1,this.sequenceNumber=0,this.expectedSequenceNumber=0,this.messageCounter=0,this.processedMessageIds.clear(),this.replayWindow.clear(),this._updateSecurityFeatures({hasEncryption:!1,hasECDH:!1,hasECDSA:!1,hasMutualAuth:!1,hasMetadataProtection:!1,hasEnhancedReplayProtection:!1,hasNonExtractableKeys:!1,hasEnhancedValidation:!1,hasPFS:!1}),this._forceGarbageCollection().catch(e=>{this._secureLog("error","Cleanup failed during answer cleanup",{errorType:e?.constructor?.name||"Unknown"})}),this._secureLog("debug","Failed answer creation cleanup completed with secure memory wipe")}catch(e){this._secureLog("error","Error during answer creation cleanup",{errorType:e.constructor.name,errorMessage:e.message})}}async _setEncryptionKeys(e,t,r,i){return this._withMutex("keyOperation",async n=>{if(this._secureLog("info","Setting encryption keys with mutex",{operationId:n}),!(e instanceof CryptoKey)||!(t instanceof CryptoKey)||!(r instanceof CryptoKey))throw new Error("Invalid key types provided");if(!i||typeof i!="string")throw new Error("Invalid key fingerprint provided");let a={encryptionKey:this.encryptionKey,macKey:this.macKey,metadataKey:this.metadataKey,keyFingerprint:this.keyFingerprint};try{return this.encryptionKey=e,this.macKey=t,this.metadataKey=r,this.keyFingerprint=i,this.sequenceNumber=0,this.expectedSequenceNumber=0,this.messageCounter=0,this.processedMessageIds.clear(),this.replayWindow.clear(),this._secureLog("info","Encryption keys set successfully",{operationId:n,hasAllKeys:!!(this.encryptionKey&&this.macKey&&this.metadataKey),hasFingerprint:!!this.keyFingerprint}),!0}catch(o){throw this.encryptionKey=a.encryptionKey,this.macKey=a.macKey,this.metadataKey=a.metadataKey,this.keyFingerprint=a.keyFingerprint,this._secureLog("error","Key setting failed, rolled back",{operationId:n,errorType:o.constructor.name}),o}})}async _handleSbq2Answer(e){if(!this._isSbq2())throw new Error("Received a new-format response to an old-format invitation. Please start a new invitation.");let t=this._sbq2State(),r=Ur(String(e.sbq2)),i=Fr(r);if(i.type!==de.ANSWER)throw new Error("That code is an invitation, not a response to one.");if(!i.commitment)throw new Error("The response carries no key commitment");let a=await Or(async d=>new Uint8Array(await crypto.subtle.digest("SHA-256",d)),t.localDescriptor),o=0;for(let d=0;d<a.length;d++)o|=a[d]^i.bindingTag[d];if(o!==0)throw new Error("This response belongs to a different invitation. Ask for a response to the code you are showing now.");t.remoteDescriptor=r,t.remoteCommitment=i.commitment,this._peerDTLSFingerprint=Array.from(i.fingerprint,d=>d.toString(16).padStart(2,"0").toUpperCase()).join(":");let{sdp:c}=Kr(i);await this.peerConnection.setRemoteDescription({type:"answer",sdp:c}),this._secureLog("info","SBQ2 answer accepted; awaiting in-band key exchange",{bytes:r.length})}async handleSecureAnswer(e){if(e&&typeof e.sbq2=="string")return this._handleSbq2Answer(e);try{if(!e||typeof e!="object"||Array.isArray(e))throw this._secureLog("error","CRITICAL: Invalid answer data structure",{hasAnswerData:!!e,answerDataType:typeof e,isArray:Array.isArray(e)}),new Error("CRITICAL SECURITY FAILURE: Answer data must be a non-null object");let t=e.t==="answer"&&e.s,r=e.type==="enhanced_secure_answer"&&e.sdp;if(!t&&!r)throw this._secureLog("error","CRITICAL: Invalid answer format",{type:e.type||e.t,hasSdp:!!(e.sdp||e.s)}),new Error("CRITICAL SECURITY FAILURE: Invalid answer format - hard abort required");let i=e.v||e.version;if(i!==s.PROTOCOL_VERSION)throw new Error(`Version mismatch: expected protocol ${s.PROTOCOL_VERSION}, received ${i||"unknown"}`);let n=e.ecdhPublicKey||e.e,a=e.ecdsaPublicKey||e.d;if(!n||typeof n!="object"||Array.isArray(n))throw this._secureLog("error","CRITICAL: Invalid ECDH public key structure in answer",{hasEcdhKey:!!n,ecdhKeyType:typeof n,isArray:Array.isArray(n),availableKeys:Object.keys(e)}),new Error("CRITICAL SECURITY FAILURE: Missing or invalid ECDH public key structure");if(!n.keyData||!n.signature)throw this._secureLog("error","CRITICAL: ECDH key missing keyData or signature in answer",{hasKeyData:!!n.keyData,hasSignature:!!n.signature}),new Error("CRITICAL SECURITY FAILURE: ECDH key missing keyData or signature");if(!a||typeof a!="object"||Array.isArray(a))throw this._secureLog("error","CRITICAL: Invalid ECDSA public key structure in answer",{hasEcdsaKey:!!a,ecdsaKeyType:typeof a,isArray:Array.isArray(a)}),new Error("CRITICAL SECURITY FAILURE: Missing or invalid ECDSA public key structure");if(!a.keyData||!a.signature)throw this._secureLog("error","CRITICAL: ECDSA key missing keyData or signature in answer",{hasKeyData:!!a.keyData,hasSignature:!!a.signature}),new Error("CRITICAL SECURITY FAILURE: ECDSA key missing keyData or signature");let o=e.ts||e.timestamp,c=e.v||e.version;if(!o||!c)throw new Error("Missing required fields in response data \u2013 possible MITM attack");if(e.sessionId&&this.sessionId&&e.sessionId!==this.sessionId)throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Session ID mismatch detected - possible MITM attack",{}),new Error("Session ID mismatch \u2013 possible MITM attack");let d=Date.now()-e.timestamp;if(d>36e5)throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Answer data is too old - possible replay attack",{answerAge:d,timestamp:e.timestamp}),this.onAnswerError&&this.onAnswerError("replay_attack","Response data is too old \u2013 possible replay attack"),new Error("Response data is too old \u2013 possible replay attack");i!==s.PROTOCOL_VERSION&&window.EnhancedSecureCryptoUtils.secureLog.log("warn","Incompatible protocol version in answer",{expectedVersion:s.PROTOCOL_VERSION,receivedVersion:i});let u=await crypto.subtle.importKey("spki",new Uint8Array(a.keyData),{name:"ECDSA",namedCurve:"P-384"},!1,["verify"]),h=await window.EnhancedSecureCryptoUtils.importPublicKeyFromSignedPackage(n,u);if(this._restorePendingOfferContextIfNeeded(),!this.sessionSalt||this.sessionSalt.length!==64)throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Invalid session salt detected - possible session hijacking",{saltLength:this.sessionSalt?this.sessionSalt.length:0}),new Error("Missing pending offer context. Apply the response in the original creator window that generated the invitation.");let m=await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(this.sessionSalt);if(window.EnhancedSecureCryptoUtils.secureLog.log("info","Session salt integrity verified",{saltFingerprint:m.substring(0,8)}),!(this.ecdhKeyPair?.privateKey instanceof CryptoKey))throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Local ECDH private key is not a CryptoKey in handleSecureAnswer",{hasKeyPair:!!this.ecdhKeyPair,privateKeyType:typeof this.ecdhKeyPair?.privateKey,privateKeyAlgorithm:this.ecdhKeyPair?.privateKey?.algorithm?.name}),new Error("Local ECDH private key is not a CryptoKey");if(!(h instanceof CryptoKey))throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Peer ECDH public key is not a CryptoKey in handleSecureAnswer",{publicKeyType:typeof h,publicKeyAlgorithm:h?.algorithm?.name}),new Error("Peer ECDH public key is not a CryptoKey");this.peerPublicKey=h,this._peerSupportsRatchet=e.dr===s.RATCHET_VERSION,this.connectionId||(this.connectionId=Array.from(crypto.getRandomValues(new Uint8Array(8))).map(g=>g.toString(16).padStart(2,"0")).join(""));let p=await window.EnhancedSecureCryptoUtils.deriveSharedKeys(this.ecdhKeyPair.privateKey,h,this.sessionSalt);if(this.encryptionKey=p.messageKey,this.macKey=p.macKey,this.metadataKey=p.metadataKey,this.keyFingerprint=p.fingerprint,await this._initializeRatchet(p,!0),this.sequenceNumber=0,this.expectedSequenceNumber=0,this.messageCounter=0,this.processedMessageIds.clear(),this.replayWindow.clear(),!(this.encryptionKey instanceof CryptoKey)||!(this.macKey instanceof CryptoKey)||!(this.metadataKey instanceof CryptoKey))throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Invalid key types after derivation in handleSecureAnswer",{encryptionKeyType:typeof this.encryptionKey,macKeyType:typeof this.macKey,metadataKeyType:typeof this.metadataKey,encryptionKeyAlgorithm:this.encryptionKey?.algorithm?.name,macKeyAlgorithm:this.macKey?.algorithm?.name,metadataKeyAlgorithm:this.metadataKey?.algorithm?.name}),new Error("Invalid key types after export");this._secureLog("info","Encryption keys set in handleSecureAnswer",{hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,hasMetadataKey:!!this.metadataKey,hasKeyFingerprint:!!this.keyFingerprint,mitmProtection:"enabled",signatureVerified:!0}),this.securityFeatures.hasMutualAuth=!0,this.securityFeatures.hasMetadataProtection=!0,this.securityFeatures.hasEnhancedReplayProtection=!0,this.securityFeatures.hasPFS=!0,this.currentKeyVersion=0,this.lastKeyRotation=Date.now(),this.keyVersions.set(0,{salt:this.sessionSalt,timestamp:this.lastKeyRotation,messageCount:0}),this.onKeyExchange(this.keyFingerprint);try{let g=this._extractDTLSFingerprintFromSDP(e.sdp||e.s),b=this.expectedDTLSFingerprint,w=this._decodeKeyFingerprint(this.keyFingerprint);this.verificationCode=await this._computeSAS(w,b,g),this._setSASMaterialReady(b,g),this.pendingSASCode=this.verificationCode,this._secureLog("info","SAS verification code generated for MITM protection (Offer side)",{sasCode:this.verificationCode,localFP:b.substring(0,16)+"...",remoteFP:g.substring(0,16)+"...",timestamp:Date.now()})}catch(g){this._secureLog("error","SAS computation failed in handleSecureAnswer (Offer side)",{errorType:g?.constructor?.name||"Unknown"}),this._secureLog("error","SAS computation failed in handleSecureAnswer (Offer side)",{error:g.message,stack:g.stack,timestamp:Date.now()})}if(this.strictDTLSValidation)try{this._peerDTLSFingerprint=this._extractDTLSFingerprintFromSDP(e.sdp||e.s)}catch(g){this._secureLog("warn","Could not extract peer DTLS fingerprint from answer",{error:g.message,context:"answer_validation"})}else this._secureLog("info","DTLS fingerprint validation disabled - proceeding without validation");let S=e.sdp||e.s;if(this.peerConnection?.signalingState!=="have-local-offer"){this._secureLog("warn","Ignoring answer outside have-local-offer state",{signalingState:this.peerConnection?.signalingState||"unknown"});return}this._secureLog("debug","Setting remote description from answer",{sdpLength:S?.length||0,usingCompactSDP:!e.sdp&&!!e.s}),await this.peerConnection.setRemoteDescription({type:"answer",sdp:S}),this._logIceCandidateDiagnostics("remote answer applied",this.peerConnection.remoteDescription?.sdp,{signalingState:this.peerConnection.signalingState}),this._warnIfRemoteCandidatesNeedRelay("answer",this.peerConnection.remoteDescription?.sdp),this._secureLog("debug","Remote description set successfully from answer",{signalingState:this.peerConnection.signalingState}),setTimeout(async()=>{try{await this.calculateAndReportSecurityLevel()&&this.notifySecurityUpdate()}catch(g){this._secureLog("error","Error calculating security after connection:",{errorType:g?.constructor?.name||"Unknown"})}},1e3),setTimeout(async()=>{(!this.lastSecurityCalculation||this.lastSecurityCalculation.score<50)&&(await this.calculateAndReportSecurityLevel(),this.notifySecurityUpdate())},3e3),this.notifySecurityUpdate()}catch(t){throw this._secureLog("error","Enhanced secure answer handling failed",{errorType:t.constructor.name}),this.onStatusChange("failed"),this.onAnswerError&&(t.message.includes("too old")||t.message.includes("\u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0441\u0442\u0430\u0440\u044B\u0435")?this.onAnswerError("replay_attack",t.message):t.message.includes("MITM")||t.message.includes("signature")||t.message.includes("\u043F\u043E\u0434\u043F\u0438\u0441\u044C")?this.onAnswerError("security_violation",t.message):this.onAnswerError("general_error",t.message)),t}}initiateVerification(){this.isInitiator?this.verificationInitiationSent||(this.verificationInitiationSent=!0,this.deliverMessageToUI("CRITICAL: Compare verification code with peer out-of-band (voice/video/in-person) to prevent MITM attack!","system"),this.deliverMessageToUI(`Your verification code: ${this.verificationCode}`,"system"),this.deliverMessageToUI("Ask peer to confirm this exact code before allowing traffic!","system")):this.deliverMessageToUI("Waiting for verification code from peer...","system")}_validateSASCode(e){if(!e||typeof e!="string"||!this.verificationCode||typeof this.verificationCode!="string")return!1;let t=e.replace(/[-\s]/g,"").toUpperCase(),r=this.verificationCode.replace(/[-\s]/g,"").toUpperCase();return t.length!==r.length?!1:window.EnhancedSecureCryptoUtils.constantTimeCompare(t,r)}confirmVerification(e){try{if(!this._validateSASCode(e))throw this.sasValidationAttempts=(this.sasValidationAttempts||0)+1,this._secureLog("warn","SAS validation failed: user entered incorrect code",{attempts:this.sasValidationAttempts,maxAttempts:s.MAX_SAS_ATTEMPTS}),this.sasValidationAttempts>=s.MAX_SAS_ATTEMPTS?(this.deliverMessageToUI("Verification failed 3 times. Session reset for safety.","system"),this.disconnect(),new Error("SAS_MAX_ATTEMPTS")):new Error("SAS_MISMATCH");this.localVerificationConfirmed=!0,this.sasValidationAttempts=0;let t={type:"verification_confirmed",data:{timestamp:Date.now(),verificationMethod:"MANUAL_SAS_ENTRY",securityLevel:"MITM_PROTECTION_REQUIRED"}};this.dataChannel.send(JSON.stringify(t)),this.onVerificationStateChange&&this.onVerificationStateChange({localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,bothConfirmed:this.bothVerificationsConfirmed}),this._checkBothVerificationsConfirmed(),this.deliverMessageToUI("Code verified locally. Waiting for peer confirmation...","system"),this.processMessageQueue()}catch(t){throw t.message==="SAS_MISMATCH"?this.deliverMessageToUI("Verification failed: the code you entered is incorrect.","system"):t.message!=="SAS_MAX_ATTEMPTS"&&(this._secureLog("error","SAS verification failed:",{errorType:t?.constructor?.name||"Unknown"}),this.deliverMessageToUI("SAS verification failed","system")),t}}_checkBothVerificationsConfirmed(){if(this.localVerificationConfirmed&&this.remoteVerificationConfirmed&&!this.bothVerificationsConfirmed){this.bothVerificationsConfirmed=!0;let e={type:"verification_both_confirmed",data:{timestamp:Date.now(),verificationMethod:"SAS",securityLevel:"MITM_PROTECTION_COMPLETE"}};this.dataChannel.send(JSON.stringify(e)),this.onVerificationStateChange&&this.onVerificationStateChange({localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,bothConfirmed:this.bothVerificationsConfirmed}),this.deliverMessageToUI("Both parties confirmed! Opening secure chat in 2 seconds...","system"),setTimeout(()=>{try{this._setVerifiedStatus(!0,"MUTUAL_SAS_CONFIRMED",{code:this.verificationCode,timestamp:Date.now()}),this._enforceVerificationGate("mutual_confirmed",!1),this.onStatusChange?.("verified")}catch(t){this._secureLog("error","Verified transition rejected - aborting session",{errorType:t?.constructor?.name||"Unknown"}),this.deliverMessageToUI("Verification could not be completed safely. Connection aborted.","system"),this.disconnect()}},2e3)}}handleVerificationConfirmed(e){this.remoteVerificationConfirmed=!0,this.deliverMessageToUI("Peer confirmed the verification code. Waiting for your confirmation...","system"),this.onVerificationStateChange&&this.onVerificationStateChange({localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,bothConfirmed:this.bothVerificationsConfirmed}),this._checkBothVerificationsConfirmed()}handleVerificationBothConfirmed(e){if(!this.bothVerificationsConfirmed){if(!this.localVerificationConfirmed){this._secureLog("error","Peer claimed mutual SAS confirmation before local confirmation - possible MITM attack",{localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,timestamp:Date.now()}),this.deliverMessageToUI("Verification protocol violation: peer claimed confirmation before you verified the code. Connection aborted for safety.","system"),this.disconnect();return}this.remoteVerificationConfirmed=!0,this.bothVerificationsConfirmed=!0,this.onVerificationStateChange&&this.onVerificationStateChange({localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,bothConfirmed:this.bothVerificationsConfirmed}),this.deliverMessageToUI("Both parties confirmed! Opening secure chat in 2 seconds...","system"),setTimeout(()=>{this._setVerifiedStatus(!0,"MUTUAL_SAS_CONFIRMED",{code:this.verificationCode,timestamp:Date.now()}),this._enforceVerificationGate("mutual_confirmed",!1),this.onStatusChange?.("verified")},2e3)}}handleVerificationRequest(e){if(this._validateSASCode(e?.code)){let t={type:"verification_response",data:{ok:!0,timestamp:Date.now(),verificationMethod:"SAS",securityLevel:"MITM_PROTECTED"}};this.dataChannel.send(JSON.stringify(t)),this.verificationNotificationSent||(this.verificationNotificationSent=!0,this.deliverMessageToUI("SAS verification successful! MITM protection confirmed. Channel is now secure!","system")),this.processMessageQueue()}else{let t={type:"verification_response",data:{ok:!1,timestamp:Date.now(),reason:"code_mismatch"}};this.dataChannel.send(JSON.stringify(t)),this._secureLog("error","SAS verification failed - possible MITM attack",{receivedCodeLength:typeof e?.code=="string"?e.code.length:0,timestamp:Date.now()}),this.deliverMessageToUI("SAS verification failed! Possible MITM attack detected. Connection aborted for safety!","system"),this.disconnect()}}handleSASCode(e){if(!e?.code||typeof e.code!="string"){this._secureLog("warn","Invalid SAS announcement received from peer");return}if(!this.verificationCode){this._secureLog("error","Received peer SAS announcement before local SAS was derived - refusing to adopt it",{timestamp:Date.now()}),this.deliverMessageToUI("Verification failed: no locally derived code to compare against. Connection aborted for safety.","system"),this.disconnect();return}if(!this._validateSASCode(e.code)){this._secureLog("error","Peer-announced SAS does not match locally computed SAS"),this.deliverMessageToUI("Version or SAS mismatch detected. Connection aborted for safety.","system"),this.disconnect();return}this._notifyVerificationReadyIfPossible(),this._secureLog("info","Peer SAS announcement matched locally derived code",{timestamp:Date.now()})}handleVerificationResponse(e){e.ok===!0?(this._secureLog("info","Mutual SAS verification completed - MITM protection active",{verificationMethod:e.verificationMethod||"SAS",securityLevel:e.securityLevel||"MITM_PROTECTED",timestamp:Date.now()}),this.verificationNotificationSent||(this.verificationNotificationSent=!0,this.deliverMessageToUI(" Mutual SAS verification complete! MITM protection active. Channel is now secure!","system")),this.processMessageQueue()):(this._secureLog("error","Peer SAS verification failed - connection not secure",{responseData:e,timestamp:Date.now()}),this.deliverMessageToUI("Peer verification failed! Connection not secure!","system"),this.disconnect())}validateOfferData(e){return e&&e.type==="enhanced_secure_offer"&&e.sdp&&e.publicKey&&e.salt&&e.verificationCode&&Array.isArray(e.publicKey)&&Array.isArray(e.salt)&&e.salt.length===32}validateEnhancedOfferData(e){try{if(!e||typeof e!="object"||Array.isArray(e))throw this._secureLog("error","CRITICAL: Invalid offer data structure",{hasOfferData:!!e,offerDataType:typeof e,isArray:Array.isArray(e)}),new Error("CRITICAL SECURITY FAILURE: Offer data must be a non-null object");let t=e.v===s.PROTOCOL_VERSION&&e.e&&e.d,r=e.version===s.PROTOCOL_VERSION&&e.ecdhPublicKey&&e.ecdsaPublicKey;if(!(t?["offer"].includes(e.t):["enhanced_secure_offer","secure_offer"].includes(e.type)))throw new Error("Invalid offer type");if(t){let a=["e","d","sl","vc","si","ci","ac","slv"];for(let c of a)if(!e[c])throw new Error(`Missing required v4.1 compact field: ${c}`);if(!e.e||typeof e.e!="object"||Array.isArray(e.e))throw new Error("CRITICAL SECURITY FAILURE: Invalid ECDH public key structure");if(!e.d||typeof e.d!="object"||Array.isArray(e.d))throw new Error("CRITICAL SECURITY FAILURE: Invalid ECDSA public key structure");if(!Array.isArray(e.sl)||e.sl.length!==64)throw new Error("Salt must be exactly 64 bytes for v4.1");if(typeof e.vc!="string"||e.vc.length<6)throw new Error("Invalid verification code format");if(!["MAX","HIGH","MED","LOW"].includes(e.slv))throw new Error("Invalid security level");let o=Date.now()-e.ts;if(o>36e5)throw new Error("Offer is too old (older than 1 hour)");this._secureLog("info","v4.1 compact offer validation passed",{version:e.v,hasECDH:!!e.e,hasECDSA:!!e.d,hasSalt:!!e.sl,hasVerificationCode:!!e.vc,securityLevel:e.slv,offerAge:Math.round(o/1e3)+"s"})}else if(r){let a=["ecdhPublicKey","ecdsaPublicKey","salt","verificationCode","authChallenge","timestamp","version","securityLevel"];for(let c of a)if(!e[c])throw new Error(`Missing v4.1 field: ${c}`);if(!Array.isArray(e.salt)||e.salt.length!==64)throw new Error("Salt must be exactly 64 bytes for v4.1");let o=Date.now()-e.timestamp;if(o>36e5)throw new Error("Offer is too old (older than 1 hour)");if(!e.ecdhPublicKey||typeof e.ecdhPublicKey!="object"||Array.isArray(e.ecdhPublicKey))throw this._secureLog("error","CRITICAL: Invalid ECDH public key structure",{hasEcdhKey:!!e.ecdhPublicKey,ecdhKeyType:typeof e.ecdhPublicKey,isArray:Array.isArray(e.ecdhPublicKey)}),new Error("CRITICAL SECURITY FAILURE: Invalid ECDH public key structure - hard abort required");if(!e.ecdsaPublicKey||typeof e.ecdsaPublicKey!="object"||Array.isArray(e.ecdsaPublicKey))throw this._secureLog("error","CRITICAL: Invalid ECDSA public key structure",{hasEcdsaKey:!!e.ecdsaPublicKey,ecdsaKeyType:typeof e.ecdsaPublicKey,isArray:Array.isArray(e.ecdsaPublicKey)}),new Error("CRITICAL SECURITY FAILURE: Invalid ECDSA public key structure - hard abort required");if(!e.ecdhPublicKey.keyData||!e.ecdhPublicKey.signature)throw this._secureLog("error","CRITICAL: ECDH key missing keyData or signature",{hasKeyData:!!e.ecdhPublicKey.keyData,hasSignature:!!e.ecdhPublicKey.signature}),new Error("CRITICAL SECURITY FAILURE: ECDH key missing keyData or signature");if(!e.ecdsaPublicKey.keyData||!e.ecdsaPublicKey.signature)throw this._secureLog("error","CRITICAL: ECDSA key missing keyData or signature",{hasKeyData:!!e.ecdsaPublicKey.keyData,hasSignature:!!e.ecdsaPublicKey.signature}),new Error("CRITICAL SECURITY FAILURE: ECDSA key missing keyData or signature");if(typeof e.verificationCode!="string"||e.verificationCode.length<6)throw new Error("Invalid SAS verification code format - MITM protection required");this._secureLog("info","v4.1 offer validation passed",{version:e.version,hasSecurityLevel:!!e.securityLevel?.level,offerAge:Math.round(o/1e3)+"s"})}else{let a=e.v||e.version||"unknown";throw new Error(`Version mismatch: expected protocol ${s.PROTOCOL_VERSION}, received ${a}`)}let n=t?e.s:e.sdp;if(typeof n!="string"||!n.includes("v=0"))throw new Error("Invalid SDP structure");return!0}catch(t){throw this._secureLog("error","CRITICAL: Security validation failed - hard abort required",{error:t.message,errorType:t.constructor.name,timestamp:Date.now()}),new Error(`CRITICAL SECURITY VALIDATION FAILURE: ${t.message}`)}}async sendSecureMessage(e){let t=this._validateInputData(e,"sendSecureMessage");if(!t.isValid){let r=`Input validation failed: ${t.errors.join(", ")}`;throw this._secureLog("error","Input validation failed in sendSecureMessage",{errors:t.errors,messageType:typeof e}),new Error(r)}if(!this._checkRateLimit("sendSecureMessage"))throw new Error("Rate limit exceeded for secure message sending");if(this._enforceVerificationGate("sendSecureMessage"),!this.isConnected())throw t.sanitizedData&&typeof t.sanitizedData=="object"&&t.sanitizedData.type&&t.sanitizedData.type.startsWith("file_")?new Error("Connection not ready for file transfer. Please ensure the connection is established and verified."):(this.messageQueue.push(t.sanitizedData),new Error("Connection not ready. Message queued for sending."));return this._withMutex("cryptoOperation",async r=>{if(!this.isConnected()||!this.isVerified)throw new Error("Connection lost during message preparation");if(!this.encryptionKey||!this.macKey||!this.metadataKey)throw new Error("Encryption keys not initialized");if(!window.EnhancedSecureCryptoUtils.rateLimiter.checkMessageRate(this.rateLimiterId))throw new Error("Message rate limit exceeded (60 messages per minute)");try{let i=typeof t.sanitizedData=="string"?t.sanitizedData:JSON.stringify(t.sanitizedData),n=window.EnhancedSecureCryptoUtils.sanitizeMessage(i),a=`msg_${Date.now()}_${this.messageCounter++}`;if(typeof this._createMessageAAD!="function")throw new Error("_createMessageAAD method is not available in sendSecureMessage. Manager may not be fully initialized.");let o=e.aad||this._createMessageAAD("enhanced_message",{content:n}),c;if(this._ratchet?.canEncrypt){let{header:d,ciphertext:u}=await this._ratchet.encrypt(n);c={type:s.MESSAGE_TYPES.RATCHET_MESSAGE,h:d,c:u,version:"5.0"}}else c={type:"enhanced_message",data:await window.EnhancedSecureCryptoUtils.encryptMessage(n,this.encryptionKey,this.macKey,this.metadataKey,a,JSON.parse(o).sequenceNumber),keyVersion:this.currentKeyVersion,version:"4.0"};this.dataChannel.send(JSON.stringify(c)),typeof t.sanitizedData=="string"&&this.deliverMessageToUI(t.sanitizedData,"sent"),this._secureLog("debug","Secure message sent successfully",{operationId:r,messageLength:n.length,keyVersion:this.currentKeyVersion})}catch(i){throw this._secureLog("error","Secure message sending failed",{operationId:r,errorType:i.constructor.name}),i.message.includes("Session expired")?new Error("Session expired. Please enter your password to unlock."):i.message.includes("Encryption keys not initialized")?new Error("Session expired due to inactivity. Please reconnect to the chat."):i.message.includes("Connection lost")?new Error("Connection lost. Please check your Internet connection."):i.message.includes("Rate limit exceeded")?new Error("Message rate limit exceeded. Please wait before sending another message."):i}},2e3)}processMessageQueue(){for(;this.messageQueue.length>0&&this.isConnected()&&this.isVerified;){let e=this.messageQueue.shift();this.sendSecureMessage(e).catch(console.error)}}startHeartbeat(){this._heartbeatConfig={enabled:!0,interval:s.TIMEOUTS.HEARTBEAT_INTERVAL,lastHeartbeat:0},this.stopHeartbeat(!0),this._heartbeatTimer=setInterval(()=>{this._heartbeatConfig?.enabled&&this.dataChannel?.readyState==="open"&&this._sendHeartbeat()},s.TIMEOUTS.HEARTBEAT_INTERVAL),this._trackActiveTimer(this._heartbeatTimer),this._lastInboundAt=Date.now(),this._livenessProbeAt=0,this._livenessArmed=!1,this._startLivenessWatchdog(),this._setupRecoveryLifecycleListeners(),this._secureLog("info","\u{1F504} Liveness watchdog started",{heartbeatMs:s.TIMEOUTS.HEARTBEAT_INTERVAL,probeAfterMs:s.TIMEOUTS.LIVENESS_PROBE_AFTER,probeTimeoutMs:s.TIMEOUTS.LIVENESS_PROBE_TIMEOUT})}stopHeartbeat(e=!1){!e&&this._heartbeatConfig&&(this._heartbeatConfig.enabled=!1),this._heartbeatTimer&&(clearInterval(this._heartbeatTimer),this._activeTimers?.delete(this._heartbeatTimer),this._heartbeatTimer=null),e||this._stopLivenessWatchdog()}handleHeartbeat(e){this._lastInboundAt=Date.now(),this._livenessProbeAt=0;let t=e?.ack===!0||e?.data?.ack===!0;t||this._sendHeartbeat(!0),this._secureLog("debug",t?"\u{1F493} Heartbeat ack received":"\u{1F493} Heartbeat probe received")}_noteInboundActivity(){this._lastInboundAt=Date.now(),this._livenessProbeAt=0,this._livenessArmed=!0}_startLivenessWatchdog(){this._stopLivenessWatchdog(),this._livenessTimer=setInterval(()=>{try{this._checkLiveness()}catch(e){this._secureLog("error","\u274C Liveness check failed",{errorType:e?.constructor?.name||"Unknown"})}},s.TIMEOUTS.LIVENESS_CHECK_INTERVAL),this._trackActiveTimer(this._livenessTimer)}_stopLivenessWatchdog(){this._livenessTimer&&(clearInterval(this._livenessTimer),this._activeTimers?.delete(this._livenessTimer),this._livenessTimer=null)}_checkLiveness(){if(!this.isVerified||this._reconnect.phase!=="idle"||this.dataChannel?.readyState!=="open"||!this._lastInboundAt||!this._livenessArmed)return;let e=s.TIMEOUTS,t=Date.now();if(this.peerConnection?.connectionState==="connected"){this._livenessProbeAt=0;return}if(this._livenessProbeAt){if(t-this._livenessProbeAt<e.LIVENESS_PROBE_TIMEOUT)return;this._livenessProbeAt=0,this._secureLog("warn","\u26A0\uFE0F liveness probe unanswered and ICE is not connected \u2014 path presumed dead"),this._onPathLost("liveness_probe_timeout");return}if(t-this._lastInboundAt<e.LIVENESS_PROBE_AFTER)return;this._livenessProbeAt=t;let i=this._sendHeartbeat(!1);this._secureLog("info","\u{1F504} peer silent and ICE degraded, probing",{silentForMs:t-this._lastInboundAt,connectionState:this.peerConnection?.connectionState,probeSent:i})}isReconnecting(){return this._reconnect.phase!=="idle"&&this._reconnect.phase!=="exhausted"}_setupRecoveryLifecycleListeners(){typeof window>"u"||this._recoveryLifecycleBound||(this._recoveryLifecycleBound=!0,this._onDeviceOnline=()=>{this.isVerified&&(this.isReconnecting()?(this._secureLog("info","\u{1F504} Device back online \u2014 retrying immediately"),this._attemptIceRestart()):this._checkLiveness())},this._onVisibilityRestored=()=>{typeof document>"u"||document.visibilityState!=="visible"||this.isVerified&&(this._lastInboundAt=Date.now(),this._livenessProbeAt=0,this._reconnect.phase==="idle"&&this.dataChannel?.readyState==="open"&&(this._livenessProbeAt=Date.now(),this._sendHeartbeat(!1),this._secureLog("info","\u{1F504} returned to foreground, probing peer")))},window.addEventListener("online",this._onDeviceOnline),typeof document<"u"&&document.addEventListener("visibilitychange",this._onVisibilityRestored))}_teardownRecoveryLifecycleListeners(){!this._recoveryLifecycleBound||typeof window>"u"||(this._recoveryLifecycleBound=!1,this._onDeviceOnline&&window.removeEventListener("online",this._onDeviceOnline),this._onVisibilityRestored&&typeof document<"u"&&document.removeEventListener("visibilitychange",this._onVisibilityRestored),this._onDeviceOnline=null,this._onVisibilityRestored=null)}_resetReconnectState(){let e=this._reconnect;e&&(e.graceTimer&&(clearTimeout(e.graceTimer),this._activeTimers?.delete(e.graceTimer)),e.retryTimer&&(clearTimeout(e.retryTimer),this._activeTimers?.delete(e.retryTimer)),e.restartTimer&&(clearTimeout(e.restartTimer),this._activeTimers?.delete(e.restartTimer)),e.graceTimer=null,e.retryTimer=null,e.restartTimer=null,e.phase="idle",e.attempts=0,e.startedAt=0,e.inFlightAt=0,e.barrenFailures=0,e.pendingRole=null)}_onPathDegraded(e="ice_disconnected"){this.isVerified&&this._reconnect.phase==="idle"&&(this._reconnect.phase="grace",this._reconnect.startedAt=Date.now(),this._secureLog("info","\u{1F504} path degraded, holding grace window",{reason:e}),this.onStatusChange("reconnecting"),this._reconnect.graceTimer=setTimeout(()=>{if(this._reconnect.graceTimer=null,this.peerConnection?.connectionState==="connected"){this._onPathRecovered();return}this._attemptIceRestart()},s.TIMEOUTS.ICE_DISCONNECT_GRACE),this._trackActiveTimer(this._reconnect.graceTimer))}_onPathLost(e="ice_failed"){this.isVerified&&(this._reconnect.phase==="restarting"||this._reconnect.phase==="exhausted"||(this._reconnect.phase==="idle"&&(this._reconnect.startedAt=Date.now(),this.onStatusChange("reconnecting")),this._reconnect.graceTimer&&(clearTimeout(this._reconnect.graceTimer),this._activeTimers?.delete(this._reconnect.graceTimer),this._reconnect.graceTimer=null),this._secureLog("info","\u{1F504} path lost, restarting ICE",{reason:e}),this._attemptIceRestart()))}_noteIceFailureDiagnostics(e){if(this.isReconnecting()&&e){if(e.pairCount>0){this._reconnect.barrenFailures=0;return}this._reconnect.barrenFailures=(this._reconnect.barrenFailures||0)+1,!(this._reconnect.barrenFailures<s.LIMITS.MAX_BARREN_ICE_FAILURES)&&(this._secureLog("warn","\u26A0\uFE0F ICE cannot gather any usable candidate \u2014 this connection is bound to a network that is gone",{consecutiveBarrenFailures:this._reconnect.barrenFailures}),this._giveUpAutoReconnect("ice_agent_unusable"))}}_onPathRecovered(){let e=this.isReconnecting();if(this._resetReconnectState(),this._lastInboundAt=Date.now(),this._livenessProbeAt=0,!e)return!1;this._secureLog("info","\u{1F504} connection recovered, session preserved"),this.onStatusChange("connected"),this.processMessageQueue();try{this._dispatchAppEvent?.(new CustomEvent("connection-recovered",{detail:{timestamp:Date.now()}}))}catch{}return!0}async _attemptIceRestart(){if(!this.isVerified||!this.peerConnection)return;if(this.peerConnection.connectionState==="connected"){this._onPathRecovered();return}let e=this._reconnect;if(typeof navigator<"u"&&navigator.onLine===!1){e.phase="waiting",e.startedAt=Date.now(),this._secureLog("debug","\u{1F504} Device offline \u2014 holding recovery open"),this._scheduleReconnectRetry();return}if(Date.now()-(e.startedAt||Date.now())>s.TIMEOUTS.RECONNECT_MAX_DURATION){this._giveUpAutoReconnect("timeout");return}if(e.inFlightAt&&Date.now()-e.inFlightAt<s.TIMEOUTS.ICE_RESTART_TIMEOUT){this._scheduleReconnectRetry();return}if(this.dataChannel?.readyState!=="open"){this._giveUpAutoReconnect("data_channel_closed");return}let r=Date.now()-Math.max(this._lastInboundAt||0,e.startedAt);if(e.attempts>=2&&r>s.TIMEOUTS.RECOVERY_SILENCE_LIMIT){this._secureLog("warn","\u26A0\uFE0F nothing has reached us since the drop \u2014 the channel cannot carry a renegotiation",{silentForMs:r,attempts:e.attempts}),this._giveUpAutoReconnect("no_signalling_path");return}e.phase="restarting",e.attempts+=1,e.inFlightAt=Date.now(),this._secureLog("info","\u{1F504} ICE restart attempt",{attempt:e.attempts,role:this.isInitiator?"offerer":"answerer"});try{this.isInitiator?await this._sendIceRestartOffer():await this.sendSystemMessage({type:s.MESSAGE_TYPES.ICE_RESTART_REQUEST,timestamp:Date.now()})}catch(i){this._secureLog("warn","\u26A0\uFE0F ICE restart attempt failed to send",{errorType:i?.constructor?.name||"Unknown"})}this._scheduleReconnectRetry()}_scheduleReconnectRetry(){let e=this._reconnect;e.retryTimer&&(clearTimeout(e.retryTimer),this._activeTimers?.delete(e.retryTimer));let t=s.RECONNECT_BACKOFF,r=t[Math.min(Math.max(e.attempts-1,0),t.length-1)];e.retryTimer=setTimeout(()=>{if(e.retryTimer=null,this.peerConnection?.connectionState==="connected"){this._onPathRecovered();return}this._attemptIceRestart()},r),this._trackActiveTimer(e.retryTimer)}_applyCurrentIceServers(e){try{if(!e||typeof e.getConfiguration!="function"||typeof e.setConfiguration!="function")return;let t=this._config?.webrtc?.iceServers;if(!Array.isArray(t)||t.length===0)return;e.setConfiguration({...e.getConfiguration(),iceServers:t})}catch(t){this._secureLog("warn","Could not refresh ICE servers before restart",{errorType:t?.constructor?.name||"Unknown"})}}async _sendIceRestartOffer(){let e=this.peerConnection;if(!e)return;if(this._applyCurrentIceServers(e),e.signalingState==="have-local-offer")try{await e.setLocalDescription({type:"rollback"})}catch{}let t=await e.createOffer({iceRestart:!0});await e.setLocalDescription(t),await this.waitForIceGathering(s.TIMEOUTS.ICE_RESTART_GATHERING,s.TIMEOUTS.ICE_RESTART_GATHERING),await this.sendSystemMessage({type:s.MESSAGE_TYPES.ICE_RESTART_OFFER,sdp:e.localDescription.sdp,timestamp:Date.now()}),this._secureLog("debug","\u{1F504} ICE restart offer sent")}_currentRemoteDtlsFingerprint(){let e=this.peerConnection?.currentRemoteDescription?.sdp||this.peerConnection?.remoteDescription?.sdp;if(!e)return null;try{return this._extractDTLSFingerprintFromSDP(e)}catch{return null}}async _assertSameRemoteIdentity(e,t){let r=this._currentRemoteDtlsFingerprint();if(!r)throw new Error(`Cannot verify peer identity for ${t}`);let i=this._extractDTLSFingerprintFromSDP(e);await this._validateDTLSFingerprint(i,r,t)}async _handleIceRestartSignal(e,t){let r=s.MESSAGE_TYPES,i=this.peerConnection;if(i)switch(this._noteInboundActivity(),e){case r.ICE_RESTART_REQUEST:{if(!this.isInitiator)return;this._reconnect.phase==="idle"&&(this._reconnect.startedAt=Date.now(),this._reconnect.phase="restarting",this.onStatusChange("reconnecting")),await this._sendIceRestartOffer();return}case r.ICE_RESTART_OFFER:{if(!t.sdp)return;await this._assertSameRemoteIdentity(t.sdp,"ice_restart_offer"),this._reconnect.phase==="idle"&&(this._reconnect.startedAt=Date.now(),this.onStatusChange("reconnecting")),this._reconnect.phase="restarting",this._applyCurrentIceServers(i),await i.setRemoteDescription({type:"offer",sdp:t.sdp});let n=await i.createAnswer();await i.setLocalDescription(n),await this.waitForIceGathering(s.TIMEOUTS.ICE_RESTART_GATHERING,s.TIMEOUTS.ICE_RESTART_GATHERING),await this.sendSystemMessage({type:r.ICE_RESTART_ANSWER,sdp:i.localDescription.sdp,timestamp:Date.now()}),this._secureLog("debug","\u{1F504} ICE restart answer sent");return}case r.ICE_RESTART_ANSWER:{if(!t.sdp)return;if(i.signalingState!=="have-local-offer"){this._secureLog("warn","\u26A0\uFE0F Ignoring restart answer in unexpected state",{signalingState:i.signalingState});return}await this._assertSameRemoteIdentity(t.sdp,"ice_restart_answer"),await i.setRemoteDescription({type:"answer",sdp:t.sdp}),this._reconnect.inFlightAt=0,this._secureLog("debug","\u{1F504} ICE restart answer applied");return}default:}}_giveUpAutoReconnect(e){this._resetReconnectState(),this._reconnect.phase="exhausted",this._teardownRecoveryLifecycleListeners?.(),this._secureLog("warn","\u26A0\uFE0F automatic reconnection exhausted \u2014 ending session",{reason:e}),this.reconnectionFailedNotificationSent||(this.reconnectionFailedNotificationSent=!0,this.deliverMessageToUI("Could not restore the connection. This chat is being closed and its data wiped \u2014 start a new one to continue.","system")),this.onStatusChange("recovery_failed"),this._clearVerificationStates()}_stopAllTimers(){this._secureLog("info","Stopping all timers and cleanup scheduler"),this._maintenanceScheduler&&(clearInterval(this._maintenanceScheduler),this._maintenanceScheduler=null),this.stopHeartbeat?.(),this._resetReconnectState?.(),this._activeTimers&&(this._activeTimers.forEach(e=>{e&&(clearInterval(e),clearTimeout(e))}),this._activeTimers.clear()),this._fileTransferInitRetryTimers&&this._fileTransferInitRetryTimers.clear(),this._logCleanupInterval=null,this._secureLog("info","All timers stopped successfully")}waitForIceGathering(e=s.TIMEOUTS.ICE_GATHERING_TIMEOUT,t=s.TIMEOUTS.ICE_GATHERING_HARD_TIMEOUT){return new Promise(r=>{let i=this.peerConnection;if(!i){r(!1);return}if(i.iceGatheringState==="complete"){r(!0);return}let n=!1,a=null,o=null,c=()=>{try{let h=this.peerConnection?.localDescription?.sdp;return h?this._summarizeIceCandidatesInSDP(h).total>0:!1}catch{return!1}},d=h=>{if(!n){n=!0,a&&(clearTimeout(a),this._untrackActiveTimer?.(a)),o&&(clearTimeout(o),this._untrackActiveTimer?.(o));try{i.removeEventListener("icegatheringstatechange",u)}catch{}r(h)}},u=()=>{this.peerConnection?.iceGatheringState==="complete"&&d(!0)};i.addEventListener("icegatheringstatechange",u),a=setTimeout(()=>{c()&&d(!1)},e),this._trackActiveTimer?.(a),o=setTimeout(()=>d(!1),Math.max(t,e)),this._trackActiveTimer?.(o)})}retryConnection(){this._secureLog("info","Retrying connection",{attempt:this.connectionAttempts,maxAttempts:this.maxConnectionAttempts}),this.onStatusChange("retrying")}isConnected(){let e=!!this.dataChannel,r=this.dataChannel?.readyState==="open",i=this.isVerified,n=this.peerConnection?.connectionState;return this.dataChannel&&this.dataChannel.readyState==="open"&&this.isVerified}getConnectionInfo(){return{fingerprint:this.keyFingerprint,isConnected:this.isConnected(),isVerified:this.isVerified,connectionState:this.peerConnection?.connectionState,iceConnectionState:this.peerConnection?.iceConnectionState,verificationCode:this.verificationCode}}handleUnexpectedDisconnect(){this.sendDisconnectNotification(),this.isVerified=!1,this.disconnectNotificationSent||(this.disconnectNotificationSent=!0,this.deliverMessageToUI("\u{1F50C} Connection lost. Attempting to reconnect...","system")),this.fileTransferSystem&&(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null),this._dispatchAppEvent?.(new CustomEvent("peer-disconnect",{detail:{reason:"connection_lost",timestamp:Date.now()}}))}sendDisconnectNotification(){try{if(this.dataChannel&&this.dataChannel.readyState==="open"){let e={type:"peer_disconnect",timestamp:Date.now(),reason:this.intentionalDisconnect?"user_disconnect":"connection_lost"};for(let t=0;t<3;t++)try{this.dataChannel.send(JSON.stringify(e)),window.EnhancedSecureCryptoUtils.secureLog.log("info","Disconnect notification sent",{reason:e.reason,attempt:t+1});break}catch(r){t===2&&window.EnhancedSecureCryptoUtils.secureLog.log("error","Failed to send disconnect notification",{error:r.message})}}}catch(e){window.EnhancedSecureCryptoUtils.secureLog.log("error","Could not send disconnect notification",{error:e.message})}}attemptReconnection(){return!this.isVerified||this.dataChannel?.readyState!=="open"?(this.reconnectionFailedNotificationSent||(this.reconnectionFailedNotificationSent=!0,this.deliverMessageToUI("Unable to reconnect. A new connection is required.","system")),!1):(this._resetReconnectState(),this.reconnectionFailedNotificationSent=!1,this._reconnect.startedAt=Date.now(),this.onStatusChange("reconnecting"),this._attemptIceRestart(),!0)}handlePeerDisconnectNotification(e){let t=e.reason||"unknown",r=t==="user_disconnect"?"manually disconnected.":"connection lost.";this.peerDisconnectNotificationSent||(this.peerDisconnectNotificationSent=!0,this.deliverMessageToUI(`Peer ${r}`,"system")),this.onStatusChange("peer_disconnected"),this.intentionalDisconnect=!1,this.isVerified=!1,this.stopHeartbeat(),this.onKeyExchange(""),this.onVerificationRequired(""),this._dispatchAppEvent?.(new CustomEvent("peer-disconnect",{detail:{reason:t,timestamp:Date.now()}})),this._peerDisconnectCleanupTimer||(this._peerDisconnectCleanupTimer=this._trackActiveTimer(setTimeout(()=>{let i=this._peerDisconnectCleanupTimer;this._peerDisconnectCleanupTimer=null,this._untrackActiveTimer(i),this._sessionAlive!==!1&&this.disconnect()},2e3))),window.EnhancedSecureCryptoUtils.secureLog.log("info","Peer disconnect notification processed",{reason:t})}disconnect(){try{this._sessionAlive=!1;try{this._stopAdaptation?.()}catch{}try{this._stopLocalMediaPermanently?.()}catch{}this._callAudioSender=null,this._callVideoSender=null,this._callGroupContext=null,this._externalMediaStream=null,this._callStateListeners?.clear?.(),this.intentionalDisconnect=!0,window.EnhancedSecureCryptoUtils.secureLog.log("info","Starting intentional disconnect"),this.sendDisconnectNotification(),this._teardownRecoveryLifecycleListeners?.(),this._stopAllTimers(),this._peerDisconnectCleanupTimer=null,this.stopHeartbeat(),this.stopFakeTrafficGeneration();for(let e of this.decoyTimers.entries())clearTimeout(e[1]);this.decoyTimers.clear(),this.fileTransferSystem&&(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null);for(let e of this.decoyChannels.values())e.readyState==="open"&&e.close();this.decoyChannels.clear(),this.heartbeatChannel&&(this.heartbeatChannel.close(),this.heartbeatChannel=null),this.isVerified=!1,this.processedMessageIds.clear(),this.messageCounter=0,this.packetBuffer.clear(),this.chunkQueue=[],this._wipeEphemeralKeys(),this._hardWipeOldKeys(),this._secureCleanupCryptographicMaterials(),this.keyVersions.clear(),this.oldKeys.clear(),this.currentKeyVersion=0,this.lastKeyRotation=Date.now(),this.sequenceNumber=0,this.expectedSequenceNumber=0,this.replayWindow.clear(),this._clearVerificationStates(),this.securityFeatures={hasEncryption:!0,hasECDH:!0,hasECDSA:!0,hasMutualAuth:!0,hasMetadataProtection:!0,hasEnhancedReplayProtection:!0,hasNonExtractableKeys:!0,hasRateLimiting:!0,hasEnhancedValidation:!0,hasPFS:!0},this.dataChannel&&(this.dataChannel.close(),this.dataChannel.onopen=null,this.dataChannel.onclose=null,this.dataChannel.onmessage=null,this.dataChannel.onerror=null,this.dataChannel=null),this.peerConnection&&(this.peerConnection.close(),this.peerConnection.onconnectionstatechange=null,this.peerConnection.ondatachannel=null,this.peerConnection=null),this.messageQueue&&this.messageQueue.length>0&&(this.messageQueue.forEach((e,t)=>{this._secureWipeMemory(e,`messageQueue[${t}]`)}),this.messageQueue=[]),this._forceGarbageCollection().catch(e=>{this._secureLog("error","Cleanup failed during disconnect",{errorType:e?.constructor?.name||"Unknown"})}),this._dispatchAppEvent?.(new CustomEvent("peer-disconnect",{detail:{reason:"user_disconnect",timestamp:Date.now()}})),this._dispatchAppEvent?.(new CustomEvent("connection-cleaned",{detail:{timestamp:Date.now(),reason:"user_cleanup"}})),this.onStatusChange("disconnected"),this.onKeyExchange(""),this.onVerificationRequired(""),this._secureLog("info","Connection securely cleaned up with complete memory wipe")}catch(e){this._secureLog("error","\u274C Error during enhanced disconnect:",{errorType:e?.constructor?.name||"Unknown"})}finally{this.intentionalDisconnect=!1}}async sendFile(e,t={}){if(this._enforceVerificationGate("sendFile"),!this.isConnected())throw new Error("Connection not ready for file transfer. Please ensure the connection is established.");if(!this.fileTransferSystem&&(this.initializeFileTransfer(),await new Promise(r=>setTimeout(r,500)),!this.fileTransferSystem))throw new Error("File transfer system could not be initialized. Please try reconnecting.");if(!this.encryptionKey||!this.macKey)throw new Error("Encryption keys not ready. Please wait for connection to be fully established.");try{return await this.fileTransferSystem.sendFile(e,t)}catch(r){throw this._secureLog("error","File transfer error:",{errorType:r?.constructor?.name||"Unknown"}),r.message.includes("Connection not ready")?new Error("Connection not ready for file transfer. Check connection status."):r.message.includes("Encryption keys not initialized")?new Error("Session expired due to inactivity. Please reconnect to the chat."):r.message.includes("Transfer timeout")?new Error("File transfer timeout. Check connection and try again."):r}}getFileTransfers(){if(!this.fileTransferSystem)return{sending:[],receiving:[]};try{let e=[],t=[];return typeof this.fileTransferSystem.getActiveTransfers=="function"?e=this.fileTransferSystem.getActiveTransfers():this._secureLog("warn","getActiveTransfers method not available in file transfer system"),typeof this.fileTransferSystem.getReceivingTransfers=="function"?t=this.fileTransferSystem.getReceivingTransfers():this._secureLog("warn","getReceivingTransfers method not available in file transfer system"),{sending:e||[],receiving:t||[]}}catch(e){return this._secureLog("error","Error getting file transfers:",{errorType:e?.constructor?.name||"Unknown"}),{sending:[],receiving:[]}}}getFileTransferStatus(){if(!this.fileTransferSystem)return{initialized:!1,status:"not_initialized",message:"File transfer system not initialized"};let e=this.fileTransferSystem.getActiveTransfers(),t=this.fileTransferSystem.getReceivingTransfers();return{initialized:!0,status:"ready",activeTransfers:e.length,receivingTransfers:t.length,totalTransfers:e.length+t.length}}cancelFileTransfer(e){return this.fileTransferSystem?this.fileTransferSystem.cancelTransfer(e):!1}cleanupFileTransferSystem(){return this.fileTransferSystem?(this._secureLog("info","\u{1F9F9} Force cleaning up file transfer system"),this.fileTransferSystem.cleanup(),this.fileTransferSystem=null,!0):!1}reinitializeFileTransfer(){try{return this.fileTransferSystem&&this.fileTransferSystem.cleanup(),this.initializeFileTransfer(),!0}catch(e){return this._secureLog("error","Failed to reinitialize file transfer system:",{errorType:e?.constructor?.name||"Unknown"}),!1}}setFileTransferCallbacks(e,t,r,i=null){this.onFileProgress=e,this.onFileReceived=t,this.onFileError=r,this.onIncomingFileRequest=i,this.fileTransferSystem&&(this.fileTransferSystem.onProgress=e,this.fileTransferSystem.onFileReceived=t,this.fileTransferSystem.onError=r,this.fileTransferSystem.onIncomingFileRequest=i)}getPendingIncomingFiles(){return this.fileTransferSystem?this.fileTransferSystem.getPendingIncomingTransfers():[]}async acceptIncomingFile(e){return this.fileTransferSystem?this.fileTransferSystem.acceptIncomingFile(e):!1}async rejectIncomingFile(e){return this.fileTransferSystem?this.fileTransferSystem.rejectIncomingFile(e):!1}async getReceivedFileObjectURL(e){return this.fileTransferSystem?this.fileTransferSystem.getObjectURL(e):null}revokeReceivedFileObjectURL(e){this.fileTransferSystem&&this.fileTransferSystem.revokeObjectURL(e)}async handleSessionActivation(e){try{this.currentSession=e;let t=!!(this.encryptionKey&&this.macKey);e.sessionId&&this.onStatusChange("connected"),setTimeout(()=>{try{this.initializeFileTransfer()}catch(i){this._secureLog("warn","File transfer initialization failed during session activation:",{details:i.message})}},1e3),this.fileTransferSystem&&this.isConnected()&&typeof this.fileTransferSystem.onSessionUpdate=="function"&&this.fileTransferSystem.onSessionUpdate({keyFingerprint:this.keyFingerprint,sessionSalt:this.sessionSalt,hasMacKey:!!this.macKey})}catch(t){this._secureLog("error","Failed to handle session activation:",{errorType:t?.constructor?.name||"Unknown"})}}checkFileTransferReadiness(){let e={hasFileTransferSystem:!!this.fileTransferSystem,hasDataChannel:!!this.dataChannel,dataChannelState:this.dataChannel?.readyState,isConnected:this.isConnected(),isVerified:this.isVerified,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,ready:!1};return e.ready=e.hasFileTransferSystem&&e.hasDataChannel&&e.dataChannelState==="open"&&e.isConnected&&e.isVerified,e}forceReinitializeFileTransfer(){try{return this.fileTransferSystem&&(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null),setTimeout(()=>{this.initializeFileTransfer()},500),!0}catch(e){return this._secureLog("error","Failed to force reinitialize file transfer:",{errorType:e?.constructor?.name||"Unknown"}),!1}}getFileTransferDiagnostics(){let e={timestamp:new Date().toISOString(),webrtcManager:{hasDataChannel:!!this.dataChannel,dataChannelState:this.dataChannel?.readyState,isConnected:this.isConnected(),isVerified:this.isVerified,isInitiator:this.isInitiator,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,hasMetadataKey:!!this.metadataKey,hasKeyFingerprint:!!this.keyFingerprint,hasSessionSalt:!!this.sessionSalt},fileTransferSystem:null,globalState:{fileTransferActive:this._fileTransferActive||!1,hasFileTransferSystem:!!this.fileTransferSystem,fileTransferSystemType:this.fileTransferSystem?"EnhancedSecureFileTransfer":"none"}};if(this.fileTransferSystem)try{e.fileTransferSystem=this.fileTransferSystem.getSystemStatus()}catch(t){e.fileTransferSystem={error:t.message}}return e}getSupportedFileTypes(){if(!this.fileTransferSystem)return{error:"File transfer system not initialized"};try{return this.fileTransferSystem.getSupportedFileTypes()}catch(e){return{error:e.message}}}validateFile(e){if(!this.fileTransferSystem)return{isValid:!1,errors:["File transfer system not initialized"],fileType:null,fileSize:e?.size||0,formattedSize:"0 B"};try{return this.fileTransferSystem.validateFile(e)}catch(t){return{isValid:!1,errors:[t.message],fileType:null,fileSize:e?.size||0,formattedSize:"0 B"}}}getFileTypeInfo(){if(!this.fileTransferSystem)return{error:"File transfer system not initialized"};try{return this.fileTransferSystem.getFileTypeInfo()}catch(e){return{error:e.message}}}async forceInitializeFileTransfer(e={}){let t=new AbortController,{signal:r=t.signal,timeout:i=6e3}=e;r&&r!==t.signal&&r.addEventListener("abort",()=>t.abort());try{if(!this.isVerified)throw new Error("Connection not verified");if(!this.dataChannel||this.dataChannel.readyState!=="open")throw new Error("Data channel not open");if(!this.encryptionKey||!this.macKey)throw new Error("Encryption keys not ready");this.fileTransferSystem&&(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null),this.initializeFileTransfer();let n=0,a=50,o=100,c=a*o,d=new Promise((u,h)=>{let m=()=>{if(t.signal.aborted){h(new Error("Operation cancelled"));return}if(this.fileTransferSystem){u(!0);return}if(n>=a){h(new Error(`Initialization timeout after ${c}ms`));return}n++,setTimeout(m,o)};m()});if(await Promise.race([d,new Promise((u,h)=>setTimeout(()=>h(new Error(`Global timeout after ${i}ms`)),i))]),this.fileTransferSystem)return!0;throw new Error("Force initialization timeout")}catch(n){return n.name==="AbortError"||n.message.includes("cancelled")?(this._secureLog("info","File transfer initialization cancelled by user"),{cancelled:!0}):(this._secureLog("error","Force file transfer initialization failed:",{errorType:n?.constructor?.name||"Unknown",message:n.message,attempts}),{error:n.message,attempts})}}cancelFileTransferInitialization(){try{return this.fileTransferSystem?(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null,this._fileTransferActive=!1,this._secureLog("info","File transfer initialization cancelled"),!0):!1}catch(e){return this._secureLog("error","Failed to cancel file transfer initialization:",{errorType:e?.constructor?.name||"Unknown"}),!1}}getFileTransferSystemStatus(){if(!this.fileTransferSystem)return{available:!1,status:"not_initialized"};try{let e=this.fileTransferSystem.getSystemStatus();return{available:!0,status:e.status||"unknown",activeTransfers:e.activeTransfers||0,receivingTransfers:e.receivingTransfers||0,systemType:"EnhancedSecureFileTransfer"}}catch(e){return this._secureLog("error","Failed to get file transfer system status:",{errorType:e?.constructor?.name||"Unknown"}),{available:!1,status:"error",error:e.message}}}_validateNestedEncryptionSecurity(){if(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey)try{let e=this._generateSecureIV(s.SIZES.NESTED_ENCRYPTION_IV_SIZE,"securityTest1"),t=this._generateSecureIV(s.SIZES.NESTED_ENCRYPTION_IV_SIZE,"securityTest2");return e.every((i,n)=>i===t[n])?(this._secureLog("error","CRITICAL: Nested encryption security validation failed - IVs are identical!"),!1):this._getIVTrackingStats().totalIVs<2?(this._secureLog("error","CRITICAL: IV tracking system not working properly"),!1):(this._secureLog("info","Nested encryption security validation passed - secure IV generation working"),!0)}catch(e){return this._secureLog("error","CRITICAL: Nested encryption security validation failed:",{errorType:e.constructor.name,errorMessage:e.message}),!1}return!0}getCallState(){return{...this.callState}}addCallStateListener(e){return typeof e!="function"?()=>{}:(this._callStateListeners.add(e),()=>this._callStateListeners.delete(e))}removeCallStateListener(e){this._callStateListeners.delete(e)}setCallGroupContext(e){this._callGroupContext=typeof e=="string"&&e?e:null,this._updateCallState({}),this._callGroupContext&&this._pendingCallOffer&&this.callState.phase==="incoming"&&this.acceptCall().catch(t=>{this._secureLog("warn","\u26A0\uFE0F Failed to answer a group call leg that was already ringing",{errorType:t?.constructor?.name})})}setExternalMediaStream(e){this._externalMediaStream=e||null}_usingExternalMedia(){return!!this._externalMediaStream&&this.localMediaStream===this._externalMediaStream}getRemoteMediaStream(){return this.remoteMediaStream}getLocalMediaStream(){return this.localMediaStream}_refreshRemoteStream(){let e=this.peerConnection;if(!e||typeof e.getReceivers!="function")return;let t=e.getReceivers().map(n=>n.track).filter(n=>n&&(n.kind==="audio"||n.kind==="video")&&n.readyState==="live"),r=this.remoteMediaStream?this.remoteMediaStream.getTracks():[];r.length===t.length&&r.every(n=>t.includes(n))||(this.remoteMediaStream=new MediaStream(t)),this._updateCallState({remoteHasVideo:t.some(n=>n.kind==="video")})}_scheduleRemoteRefresh(){this._refreshRemoteStream(),setTimeout(()=>{try{this._refreshRemoteStream()}catch{}},300),setTimeout(()=>{try{this._refreshRemoteStream()}catch{}},1200)}_updateCallState(e){this.callState={...this.callState,...e,groupCallId:this._callGroupContext};let t=this.getCallState();t.phase==="active"?this._startAdaptation():t.phase==="idle"&&this._stopAdaptation();try{this.onCallStateChanged?.(t)}catch{}for(let r of this._callStateListeners)try{r(t)}catch{}if(typeof document<"u")try{this._dispatchAppEvent?.(new CustomEvent("securebit-call-state",{detail:{managerId:this._managerId||null,state:t}}))}catch{}}_callCanStart(){let e=typeof this.isConnected=="function"?this.isConnected():!1,t=this.dataChannel&&this.dataChannel.readyState==="open";return!!(e&&t&&this.isVerified&&!this.isReconnecting())}async _sendCallSignal(e,t){return await this.sendSystemMessage({type:e,...t})}_audioConstraints(){return{echoCancellation:!0,noiseSuppression:!0,autoGainControl:!0}}_videoConstraints(){return{facingMode:this._callFacingMode,width:{ideal:1280},height:{ideal:720}}}async _acquireLocalMedia(e){let t=this._externalMediaStream||await navigator.mediaDevices.getUserMedia({audio:this._audioConstraints(),video:e?this._videoConstraints():!1});this.localMediaStream=t;let r=this.peerConnection,i=t.getAudioTracks()[0]||null,n=t.getVideoTracks()[0]||null;return i&&(this._callAudioSender?await this._callAudioSender.replaceTrack(i):this._callAudioSender=r.addTrack(i,t)),n&&(this._callVideoSender?await this._callVideoSender.replaceTrack(n):this._callVideoSender=r.addTrack(n,t)),this._applyCallCodecPrefs(),t}_stopLocalMediaPermanently(){try{if(this.localMediaStream&&!this._usingExternalMedia())for(let e of this.localMediaStream.getTracks())try{e.stop()}catch{}}catch{}this.localMediaStream=null}_applyCallCodecPrefs(){try{let e=this.peerConnection?.getTransceivers?.()||[],t=e.find(i=>i.sender&&i.sender===this._callAudioSender);t&&Ji(t);let r=e.find(i=>i.sender&&i.sender===this._callVideoSender);r&&sn(r)}catch{}}_mungeCallSdp(e){try{let t=Cr(e,st.opusFmtp);return t=Qi(t,qi),t}catch{return e}}async _setLocalMunged(e){let t=this.peerConnection;try{await t.setLocalDescription({type:e.type,sdp:this._mungeCallSdp(e.sdp)});return}catch{try{await t.setLocalDescription({type:e.type,sdp:Cr(e.sdp,st.opusFmtp)});return}catch{await t.setLocalDescription(e)}}}async _applyCallSenderParams(){try{this._callAudioSender&&await Zi(this._callAudioSender,{}),this._callVideoSender&&await an(this._callVideoSender,{})}catch{}}_startAdaptation(){if(!(this._adaptationController||!this.peerConnection))try{this._adaptationController=new Nt(this.peerConnection,{getVideoSender:()=>this._callVideoSender,ceilingBitrate:15e5,onQuality:e=>{e!==this.callState.quality&&this._updateCallState({quality:e})}}),this._adaptationController.start()}catch{}}_stopAdaptation(){if(this._adaptationController){try{this._adaptationController.stop()}catch{}this._adaptationController=null}}_notifyCallMediaError(e,t){let r=e?.name||"",i=t?"camera/microphone":"microphone",n,a;r==="NotAllowedError"?(a="permission_denied",n=`\u26A0\uFE0F Call not started \u2014 ${i} access is blocked. Allow it for this site in the browser, and enable your browser under System Settings \u2192 Privacy & Security \u2192 ${t?"Camera/Microphone":"Microphone"}, then try again.`):r==="NotFoundError"||r==="OverconstrainedError"?(a="device_not_found",n=`\u26A0\uFE0F Call not started \u2014 no ${i} found on this device.`):r==="NotReadableError"||r==="AbortError"?(a="device_busy",n=`\u26A0\uFE0F Call not started \u2014 your ${i} is in use by another app. Close it and try again.`):(a="media_failed",n=`\u26A0\uFE0F Call not started \u2014 could not access ${i}${r?" ("+r+")":""}.`);try{this.deliverMessageToUI(n,"system")}catch{}return a}async startCall(e=!1){if(!this._callCanStart())throw this._updateCallState({error:"not_verified"}),new Error("Calls require a connected, SAS-verified session.");if(this.callState.active){this._secureLog("warn","\u26A0\uFE0F startCall ignored \u2014 a call is already active");return}let t=crypto?.randomUUID?.()||String(Date.now())+Math.random().toString(36).slice(2);this._updateCallState({active:!0,phase:"outgoing",withVideo:e,callId:t,micEnabled:!0,cameraEnabled:e,remoteHasVideo:!1,error:null});try{await this._acquireLocalMedia(e),this._callMakingOffer=!0;let r=await this.peerConnection.createOffer();await this._setLocalMunged(r),this._callMakingOffer=!1,await this._applyCallSenderParams(),await this._sendCallSignal(s.MESSAGE_TYPES.CALL_OFFER,{callId:t,withVideo:e,sdp:this.peerConnection.localDescription.sdp})}catch(r){this._callMakingOffer=!1,this._secureLog("error","\u274C startCall failed",{errorType:r?.constructor?.name});let i=this._notifyCallMediaError(r,e);throw await this._teardownCallMedia(),this._updateCallState({active:!1,phase:"idle",error:i}),r}}async _onIncomingCallOffer(e){if(this.callState.active&&(this.callState.phase==="active"||this.callState.phase==="connecting")){await this._answerCallOffer(e,!0),e.withVideo&&this._updateCallState({withVideo:!0});return}this._pendingCallOffer=e,this._updateCallState({active:!0,phase:"incoming",withVideo:!!e.withVideo,callId:e.callId,remoteHasVideo:!!e.withVideo,error:null}),this._callGroupContext&&await this.acceptCall()}async _answerCallOffer(e,t=!1){await this.peerConnection.setRemoteDescription({type:"offer",sdp:e.sdp}),t||await this._acquireLocalMedia(!!e.withVideo);let r=await this.peerConnection.createAnswer();await this._setLocalMunged(r),await this._applyCallSenderParams(),await this._sendCallSignal(s.MESSAGE_TYPES.CALL_ANSWER,{callId:e.callId,sdp:this.peerConnection.localDescription.sdp})}async acceptCall(){let e=this._pendingCallOffer;if(e){this._pendingCallOffer=null,this._updateCallState({phase:"connecting",cameraEnabled:!!e.withVideo});try{await this._answerCallOffer(e,!1),this._updateCallState({phase:"active"}),this._scheduleRemoteRefresh()}catch(t){this._secureLog("error","\u274C acceptCall failed",{errorType:t?.constructor?.name});let r=this._notifyCallMediaError(t,!!e.withVideo);try{await this._sendCallSignal(s.MESSAGE_TYPES.CALL_END,{callId:e.callId})}catch{}await this._teardownCallMedia(),this._updateCallState({active:!1,phase:"idle",error:r})}}}async declineCall(){let e=this.callState.callId;this._pendingCallOffer=null,await this._sendCallSignal(s.MESSAGE_TYPES.CALL_DECLINE,{callId:e}),this._updateCallState({active:!1,phase:"idle",withVideo:!1,remoteHasVideo:!1})}async endCall(e=!0){let t=this.callState.callId;if(e&&t)try{await this._sendCallSignal(s.MESSAGE_TYPES.CALL_END,{callId:t})}catch{}await this._teardownCallMedia(),this._updateCallState({active:!1,phase:"idle",withVideo:!1,micEnabled:!0,cameraEnabled:!1,remoteHasVideo:!1,callId:null,quality:null})}async _teardownCallMedia(){this._stopAdaptation();let e=this.peerConnection;try{if(this.localMediaStream&&!this._usingExternalMedia())for(let t of this.localMediaStream.getTracks())try{t.stop()}catch{}if(e)for(let t of[this._callAudioSender,this._callVideoSender].filter(Boolean))try{await t.replaceTrack(null)}catch{}}catch{}this.localMediaStream=null,this.remoteMediaStream=null,this._callMakingOffer=!1;try{this.peerConnection&&(this.peerConnection.signalingState==="have-local-offer"||this.peerConnection.signalingState==="have-local-pranswer")&&await this.peerConnection.setLocalDescription({type:"rollback"})}catch{}}setMicEnabled(e){this.localMediaStream&&this.localMediaStream.getAudioTracks().forEach(t=>{t.enabled=e}),this._updateCallState({micEnabled:e})}toggleMic(){this.setMicEnabled(!this.callState.micEnabled)}async setCameraEnabled(e){if(!e){this.localMediaStream&&this.localMediaStream.getVideoTracks().forEach(r=>{r.enabled=!1}),this._updateCallState({cameraEnabled:!1});return}let t=this.localMediaStream?.getVideoTracks?.()||[];if(t.length){t.forEach(r=>{r.enabled=!0}),this._updateCallState({cameraEnabled:!0,withVideo:!0});return}await this.upgradeToVideo()}async toggleCamera(){await this.setCameraEnabled(!this.callState.cameraEnabled)}async upgradeToVideo(){if(this.localMediaStream)try{let t=(await navigator.mediaDevices.getUserMedia({video:this._videoConstraints()})).getVideoTracks()[0];if(!t)return;await this.addVideoTrack(t)}catch(e){this._secureLog("error","\u274C upgradeToVideo failed",{errorType:e?.constructor?.name}),this._updateCallState({cameraEnabled:!1,error:"camera_failed"})}}async addVideoTrack(e){!e||!this.localMediaStream||!this.peerConnection||(this.localMediaStream.getVideoTracks().includes(e)||this.localMediaStream.addTrack(e),this._callVideoSender?await this._callVideoSender.replaceTrack(e):this._callVideoSender=this.peerConnection.addTrack(e,this.localMediaStream),this._applyCallCodecPrefs(),this._updateCallState({cameraEnabled:!0,withVideo:!0}),await this._renegotiateCall())}async replaceVideoTrack(e){!e||!this._callVideoSender||await this._callVideoSender.replaceTrack(e)}async switchCamera(){if(!(!this._callVideoSender||!this.localMediaStream)){this._callFacingMode=this._callFacingMode==="user"?"environment":"user";try{let t=(await navigator.mediaDevices.getUserMedia({video:{facingMode:this._callFacingMode}})).getVideoTracks()[0],r=this.localMediaStream.getVideoTracks()[0];if(r){this.localMediaStream.removeTrack(r);try{r.stop()}catch{}}this.localMediaStream.addTrack(t),await this._callVideoSender.replaceTrack(t)}catch(e){this._secureLog("warn","\u26A0\uFE0F switchCamera failed",{errorType:e?.constructor?.name})}}}async _renegotiateCall(){if(!this._callMakingOffer)try{this._callMakingOffer=!0;let e=await this.peerConnection.createOffer();await this._setLocalMunged(e),await this._applyCallSenderParams(),await this._sendCallSignal(s.MESSAGE_TYPES.CALL_OFFER,{callId:this.callState.callId,withVideo:this.callState.withVideo,sdp:this.peerConnection.localDescription.sdp})}finally{this._callMakingOffer=!1}}async _handleCallSignal(e,t){let r=s.MESSAGE_TYPES;switch(e){case r.CALL_OFFER:{await this._onIncomingCallOffer(t);return}case r.CALL_ANSWER:{try{this.peerConnection.signalingState==="have-local-offer"&&await this.peerConnection.setRemoteDescription({type:"answer",sdp:t.sdp}),this.callState.phase==="outgoing"&&this._updateCallState({phase:"active"}),this._scheduleRemoteRefresh()}catch(i){this._secureLog("warn","\u26A0\uFE0F Failed to apply call answer",{errorType:i?.constructor?.name})}return}case r.CALL_ICE:{try{t.candidate&&await this.peerConnection.addIceCandidate(t.candidate)}catch{}return}case r.CALL_DECLINE:{await this._teardownCallMedia(),this._updateCallState({active:!1,phase:"idle",withVideo:!1,remoteHasVideo:!1,error:"declined"});return}case r.CALL_END:{await this.endCall(!1);return}default:return}}},Gt=class{constructor(e=null){this._keyStore=new WeakMap,this._keyMetadata=new Map,this._keyReferences=new Map,this._masterKeyManager=e||new jt,this._persistentStorage=new Br(this._masterKeyManager),this._setupMasterKeyCallbacks(),setTimeout(()=>{this.validateStorageIntegrity()||this._secureLog("error","CRITICAL: Key storage integrity check failed")},100)}_secureLog(e,t,r={}){try{let i=typeof window<"u"&&window.EnhancedSecureCryptoUtils?.secureLog||null;if(i&&typeof i.log=="function"){i.log(e,`[KeyStorage] ${t}`,r);return}}catch{}e==="error"?console.error(`[KeyStorage] ${t}`):e==="warn"&&console.warn(`[KeyStorage] ${t}`)}_setupMasterKeyCallbacks(){this._masterKeyManager.setPasswordRequiredCallback((e,t)=>{this._secureLog("error","Master key password requested but no password UI is installed",{isRetry:!!e}),t(null)}),this._masterKeyManager.setSessionExpiredCallback(e=>{console.warn(`Master key session expired: ${e}`)}),this._masterKeyManager.setUnlockedCallback(()=>{console.log("Master key unlocked successfully")})}setPasswordCallback(e){this._masterKeyManager.setPasswordRequiredCallback(e)}setSessionExpiredCallback(e){this._masterKeyManager.setSessionExpiredCallback(e)}async _ensureMasterKeyUnlocked(){this._masterKeyManager.isUnlocked()||await this._masterKeyManager.unlock()}async storeKey(e,t,r={}){if(!(t instanceof CryptoKey))throw new Error("Only CryptoKey objects can be stored");try{return t.extractable?(await this._persistentStorage.storeExtractableKey(e,t,r),this._keyReferences.set(e,t),this._keyMetadata.set(e,{...r,created:Date.now(),lastAccessed:Date.now(),extractable:!0,persistent:!0,encrypted:!0}),!0):(this._keyReferences.set(e,t),this._keyMetadata.set(e,{...r,created:Date.now(),lastAccessed:Date.now(),extractable:!1,persistent:!1,encrypted:!1}),!0)}catch(i){return this._secureLog("error","Failed to store key securely",{errorType:i?.constructor?.name||"Unknown"}),!1}}async retrieveKey(e){try{if(this._keyReferences.has(e)){let r=this._keyMetadata.get(e);return r&&(r.lastAccessed=Date.now()),this._keyReferences.get(e)}let t=await this._persistentStorage.retrieveKey(e);if(t){this._keyReferences.set(e,t);let r=this._keyMetadata.get(e);return this._keyMetadata.set(e,{...r,lastAccessed:Date.now(),restoredFromPersistent:!0}),t}return null}catch(t){return this._secureLog("error","Failed to retrieve key",{errorType:t?.constructor?.name||"Unknown"}),null}}async _encryptKeyData(e){let t=typeof e=="object"?JSON.stringify(e):e,i=new TextEncoder().encode(t);await this._ensureMasterKeyUnlocked();let{encryptedData:n,iv:a}=await this._masterKeyManager.encryptBytes(i),o=new Uint8Array(a.length+n.byteLength);return o.set(a,0),o.set(n,a.length),o}async _decryptKeyData(e){let t=e.slice(0,12),r=e.slice(12);await this._ensureMasterKeyUnlocked();let i=await this._masterKeyManager.decryptBytes(r,t),a=new TextDecoder().decode(i);try{return JSON.parse(a)}catch{return i}}async secureWipe(e){let t=this._keyReferences.get(e);t&&(this._keyStore.delete(t),this._keyReferences.delete(e),this._keyMetadata.delete(e)),await this._performNaturalCleanup()}async secureWipeAll(){try{await this._persistentStorage.clearAll()}catch(e){this._secureLog("error","Failed to clear persistent storage",{errorType:e?.constructor?.name||"Unknown"})}this._keyReferences.clear(),this._keyMetadata.clear(),this._keyStore=new WeakMap,await this._performNaturalCleanup()}validateStorageIntegrity(){let e=[];for(let[t,r]of this._keyMetadata.entries())r.extractable===!0&&r.encrypted!==!0&&e.push({keyId:t,type:"EXTRACTABLE_KEY_NOT_ENCRYPTED",metadata:r}),r.extractable===!1&&r.encrypted===!0&&e.push({keyId:t,type:"NON_EXTRACTABLE_KEY_ENCRYPTED",metadata:r});return e.length>0?(this._secureLog("error","Storage integrity violations detected",{violationCount:e.length}),!1):!0}async getStorageStats(){let e=await this._persistentStorage.getStorageStats();return{totalKeys:this._keyReferences.size,memoryKeys:this._keyReferences.size,persistentKeys:e.persistentKeys,metadata:Array.from(this._keyMetadata.entries()).map(([t,r])=>({id:t,created:r.created,lastAccessed:r.lastAccessed,age:Date.now()-r.created,persistent:r.persistent||!1})),persistent:e}}async listAllKeys(){try{let e=Array.from(this._keyMetadata.entries()).map(([i,n])=>({keyId:i,...n,location:"memory"})),r=(await this._persistentStorage.listStoredKeys()).map(i=>({...i,location:"persistent"}));return{memoryKeys:e,persistentKeys:r,totalCount:e.length+r.length}}catch(e){return this._secureLog("error","Failed to list keys",{errorType:e?.constructor?.name||"Unknown"}),{memoryKeys:[],persistentKeys:[],totalCount:0,error:e.message}}}async deleteKey(e){try{return this._keyReferences.delete(e),this._keyMetadata.delete(e),await this._persistentStorage.deleteKey(e),!0}catch(t){return this._secureLog("error","Failed to delete key",{errorType:t?.constructor?.name||"Unknown"}),!1}}},qt=class{constructor(e="SecureKeyStorage",t=1){this.dbName=e,this.version=t,this.db=null,this.KEYS_STORE="encrypted_keys",this.METADATA_STORE="key_metadata",this.SALT_STORE="master_salt"}async initialize(){return new Promise((e,t)=>{let r=indexedDB.open(this.dbName,this.version);r.onerror=()=>{t(new Error(`Failed to open IndexedDB: ${r.error}`))},r.onsuccess=()=>{this.db=r.result,e()},r.onupgradeneeded=i=>{let n=i.target.result;if(!n.objectStoreNames.contains(this.KEYS_STORE)){let a=n.createObjectStore(this.KEYS_STORE,{keyPath:"keyId"});a.createIndex("timestamp","timestamp",{unique:!1}),a.createIndex("algorithm","algorithm",{unique:!1})}if(!n.objectStoreNames.contains(this.METADATA_STORE)){let a=n.createObjectStore(this.METADATA_STORE,{keyPath:"keyId"});a.createIndex("created","created",{unique:!1}),a.createIndex("lastAccessed","lastAccessed",{unique:!1})}n.objectStoreNames.contains(this.SALT_STORE)||n.createObjectStore(this.SALT_STORE,{keyPath:"id"})}})}async storeEncryptedKey(e,t,r,i,n,a,o={}){if(!this.db)throw new Error("Database not initialized");let c=this.db.transaction([this.KEYS_STORE,this.METADATA_STORE],"readwrite"),d={keyId:e,encryptedData:Array.from(new Uint8Array(t)),iv:Array.from(new Uint8Array(r)),algorithm:i,usages:n,type:a},u={keyId:e,...o};return new Promise((h,m)=>{let p=c.objectStore(this.KEYS_STORE).put(d),S=c.objectStore(this.METADATA_STORE).put(u);c.oncomplete=()=>h(),c.onerror=()=>m(new Error(`Failed to store key: ${c.error}`))})}async getEncryptedKey(e){if(!this.db)throw new Error("Database not initialized");let r=this.db.transaction([this.KEYS_STORE],"readonly").objectStore(this.KEYS_STORE);return new Promise((i,n)=>{let a=r.get(e);a.onsuccess=()=>{let o=a.result;o&&(o.encryptedData=new Uint8Array(o.encryptedData),o.iv=new Uint8Array(o.iv)),i(o)},a.onerror=()=>n(new Error(`Failed to retrieve key: ${a.error}`))})}async updateKeyMetadata(e,t){if(!this.db)throw new Error("Database not initialized");let i=this.db.transaction([this.METADATA_STORE],"readwrite").objectStore(this.METADATA_STORE);return new Promise((n,a)=>{let o=i.get(e);o.onsuccess=()=>{let c=o.result;if(c){Object.assign(c,t);let d=i.put(c);d.onsuccess=()=>n(),d.onerror=()=>a(new Error(`Failed to update metadata: ${d.error}`))}else a(new Error(`Key metadata not found: ${e}`))},o.onerror=()=>a(new Error(`Failed to get metadata: ${o.error}`))})}async getKeyMetadataRecord(e){if(!this.db)throw new Error("Database not initialized");let r=this.db.transaction([this.METADATA_STORE],"readonly").objectStore(this.METADATA_STORE);return new Promise((i,n)=>{let a=r.get(e);a.onsuccess=()=>i(a.result||null),a.onerror=()=>n(new Error(`Failed to get metadata: ${a.error}`))})}async putKeyMetadataRecord(e){if(!this.db)throw new Error("Database not initialized");let r=this.db.transaction([this.METADATA_STORE],"readwrite").objectStore(this.METADATA_STORE);return new Promise((i,n)=>{let a=r.put(e);a.onsuccess=()=>i(),a.onerror=()=>n(new Error(`Failed to store metadata: ${a.error}`))})}async deleteKey(e){if(!this.db)throw new Error("Database not initialized");let t=this.db.transaction([this.KEYS_STORE,this.METADATA_STORE],"readwrite");return new Promise((r,i)=>{let n=t.objectStore(this.KEYS_STORE).delete(e),a=t.objectStore(this.METADATA_STORE).delete(e);t.oncomplete=()=>r(),t.onerror=()=>i(new Error(`Failed to delete key: ${t.error}`))})}async listKeys(){if(!this.db)throw new Error("Database not initialized");let t=this.db.transaction([this.METADATA_STORE],"readonly").objectStore(this.METADATA_STORE);return new Promise((r,i)=>{let n=t.getAll();n.onsuccess=()=>r(n.result),n.onerror=()=>i(new Error(`Failed to list keys: ${n.error}`))})}async storeMasterSalt(e){if(!this.db)throw new Error("Database not initialized");let r=this.db.transaction([this.SALT_STORE],"readwrite").objectStore(this.SALT_STORE),i={id:"master_salt",salt:Array.from(new Uint8Array(e))};return new Promise((n,a)=>{let o=r.put(i);o.onsuccess=()=>n(),o.onerror=()=>a(new Error(`Failed to store salt: ${o.error}`))})}async getMasterSalt(){if(!this.db)throw new Error("Database not initialized");let t=this.db.transaction([this.SALT_STORE],"readonly").objectStore(this.SALT_STORE);return new Promise((r,i)=>{let n=t.get("master_salt");n.onsuccess=()=>{let a=n.result;r(a?new Uint8Array(a.salt):null)},n.onerror=()=>i(new Error(`Failed to retrieve salt: ${n.error}`))})}async clearAll(){if(!this.db)throw new Error("Database not initialized");let e=this.db.transaction([this.KEYS_STORE,this.METADATA_STORE,this.SALT_STORE],"readwrite");return new Promise((t,r)=>{let i=e.objectStore(this.KEYS_STORE).clear(),n=e.objectStore(this.METADATA_STORE).clear(),a=e.objectStore(this.SALT_STORE).clear();e.oncomplete=()=>t(),e.onerror=()=>r(new Error(`Failed to clear database: ${e.error}`))})}close(){this.db&&(this.db.close(),this.db=null)}},Br=class{constructor(e,t=null){this._masterKeyManager=e,this._indexedDB=t||new qt,this._dbInitialized=!1,this._keyCache=new WeakMap,this._keyReferences=new Map}async _ensureDBInitialized(){this._dbInitialized||(await this._indexedDB.initialize(),this._dbInitialized=!0)}async _ensureMasterKeyUnlocked(){typeof this._masterKeyManager.isUnlocked=="function"&&!this._masterKeyManager.isUnlocked()&&await this._masterKeyManager.unlock()}async storeExtractableKey(e,t,r={}){if(!(t instanceof CryptoKey))throw new Error("Only CryptoKey objects can be stored");if(!t.extractable)throw new Error("Key must be extractable for persistent storage");try{await this._ensureDBInitialized();let i=await crypto.subtle.exportKey("jwk",t),{encryptedData:n,iv:a}=await this._encryptKeyData(i),o=await this._encryptMetadata({...r,created:Date.now(),lastAccessed:Date.now(),extractable:!0,persistent:!0});await this._indexedDB.storeEncryptedKey(e,n,a,t.algorithm,t.usages,t.type,o);let c=await this._importAsNonExtractable(i,t.algorithm,t.usages);return this._keyReferences.set(e,c),!0}catch(i){throw new Error(`Failed to store extractable key: ${i.message}`)}}async retrieveKey(e){try{if(this._keyReferences.has(e))return this._keyReferences.get(e);await this._ensureDBInitialized();let t=await this._indexedDB.getEncryptedKey(e);if(!t)return null;let r=await this._decryptKeyData(t.encryptedData,t.iv),i=await this._importAsNonExtractable(r,t.algorithm,t.usages);return this._keyReferences.set(e,i),await this._updateEncryptedMetadata(e,{lastAccessed:Date.now()}),i}catch(t){throw new Error(`Failed to retrieve key: ${t.message}`)}}async deleteKey(e){try{return await this._ensureDBInitialized(),await this._indexedDB.deleteKey(e),this._keyReferences.delete(e),!0}catch(t){throw new Error(`Failed to delete key: ${t.message}`)}}async listStoredKeys(){try{await this._ensureDBInitialized();let e=await this._indexedDB.listKeys(),t=[];for(let r of e){let i=await this._readMetadataWithMigration(r);i&&t.push({keyId:r.keyId,...i})}return t}catch(e){throw new Error(`Failed to list keys: ${e.message}`)}}async clearAll(){try{return await this._ensureDBInitialized(),await this._indexedDB.clearAll(),this._keyReferences.clear(),!0}catch(e){throw new Error(`Failed to clear storage: ${e.message}`)}}async _encryptKeyData(e){let t=JSON.stringify(e),r=new TextEncoder().encode(t);return await this._ensureMasterKeyUnlocked(),await this._masterKeyManager.encryptBytes(r)}async _decryptKeyData(e,t){await this._ensureMasterKeyUnlocked();let r=await this._masterKeyManager.decryptBytes(e,t),i=new TextDecoder().decode(r);return JSON.parse(i)}async _encryptMetadata(e){let t=new TextEncoder().encode(JSON.stringify(e));await this._ensureMasterKeyUnlocked();let{encryptedData:r,iv:i}=await this._masterKeyManager.encryptBytes(t);return{metadataVersion:1,encryptedMetadata:Array.from(r),metadataIv:Array.from(i)}}async _decryptMetadataRecord(e){if(!e?.encryptedMetadata||!e?.metadataIv)throw new Error("Encrypted metadata missing");await this._ensureMasterKeyUnlocked();let t=await this._masterKeyManager.decryptBytes(new Uint8Array(e.encryptedMetadata),new Uint8Array(e.metadataIv));return JSON.parse(new TextDecoder().decode(t))}async _readMetadataWithMigration(e){if(!e)return null;if(e.encryptedMetadata)try{return await this._decryptMetadataRecord(e)}catch{return null}let{keyId:t,...r}=e,i={keyId:t,...await this._encryptMetadata(r)};return await this._indexedDB.putKeyMetadataRecord(i),r}async _updateEncryptedMetadata(e,t){let r=await this._indexedDB.getKeyMetadataRecord(e);if(!r)throw new Error(`Key metadata not found: ${e}`);let i=await this._readMetadataWithMigration(r);if(!i)throw new Error(`Key metadata corrupted: ${e}`);await this._indexedDB.putKeyMetadataRecord({keyId:e,...await this._encryptMetadata({...i,...t})})}async _importAsNonExtractable(e,t,r){return await crypto.subtle.importKey("jwk",e,t,!1,r)}async getStorageStats(){try{await this._ensureDBInitialized();let e=await this._indexedDB.listKeys();return{totalKeys:e.length,memoryKeys:this._keyReferences.size,persistentKeys:e.length,lastAccessed:e.reduce((t,r)=>Math.max(t,r.lastAccessed||0),0)}}catch(e){return{totalKeys:0,memoryKeys:this._keyReferences.size,persistentKeys:0,lastAccessed:0,error:e.message}}}},jt=class{constructor(e=null){this._keyHandle=null,this._isUnlocked=!1,this._sessionTimeout=null,this._lastActivity=null,this._sessionTimeoutMs=3600*1e3,this._inactivityTimeoutMs=1800*1e3,this._pbkdf2Iterations=31e4,this._saltSize=32,this._indexedDB=e||new qt,this._dbInitialized=!1,this._onPasswordRequired=null,this._onSessionExpired=null,this._onUnlocked=null}setPasswordRequiredCallback(e){this._onPasswordRequired=e}setSessionExpiredCallback(e){this._onSessionExpired=e}setUnlockedCallback(e){this._onUnlocked=e}_setupEventListeners(){typeof document<"u"&&(document.addEventListener("visibilitychange",()=>{document.hidden?this._handleFocusOut():this._handleFocusIn()}),window.addEventListener("blur",()=>this._handleFocusOut()),window.addEventListener("focus",()=>this._handleFocusIn()),["mousedown","mousemove","keypress","scroll","touchstart"].forEach(e=>{document.addEventListener(e,()=>this._updateActivity(),{passive:!0})}))}_handleFocusOut(){this._isUnlocked&&this._startInactivityTimer(this._inactivityTimeoutMs)}_handleFocusIn(){this._isUnlocked&&this._resetSessionTimer()}_updateActivity(){this._lastActivity=Date.now(),this._isUnlocked&&this._resetSessionTimer()}_startSessionTimer(){this._clearTimers(),this._sessionTimeout=setTimeout(()=>{this._expireSession("timeout")},this._sessionTimeoutMs)}_startInactivityTimer(e){this._clearTimers(),this._sessionTimeout=setTimeout(()=>{this._expireSession("inactivity")},e)}_resetSessionTimer(){this._isUnlocked&&this._startSessionTimer()}_clearTimers(){this._sessionTimeout&&(clearTimeout(this._sessionTimeout),this._sessionTimeout=null)}_expireSession(e="unknown"){this._isUnlocked&&(this._secureWipeMasterKey(),this._isUnlocked=!1,this._onSessionExpired&&this._onSessionExpired(e))}async _ensureDBInitialized(){this._dbInitialized||(await this._indexedDB.initialize(),this._dbInitialized=!0)}_generateSalt(){return crypto.getRandomValues(new Uint8Array(this._saltSize))}async _getOrCreateSalt(){await this._ensureDBInitialized();let e=await this._indexedDB.getMasterSalt();return e||(e=this._generateSalt(),await this._indexedDB.storeMasterSalt(e)),e}async _deriveKeyFromPassword(e,t){try{let r=await crypto.subtle.importKey("raw",new TextEncoder().encode(e),"PBKDF2",!1,["deriveKey"]);return await crypto.subtle.deriveKey({name:"PBKDF2",salt:t,iterations:this._pbkdf2Iterations,hash:"SHA-256"},r,{name:"AES-GCM",length:256},!1,["encrypt","decrypt","wrapKey","unwrapKey"])}catch(r){throw new Error(`Key derivation failed: ${r.message}`)}}async _requestPassword(e=!1){if(!this._onPasswordRequired)throw new Error("Password callback not set");return new Promise((t,r)=>{this._onPasswordRequired(e,i=>{i?t(i):r(new Error("Password not provided"))})})}async unlock(e=null){try{e||(e=await this._requestPassword(!1));let t=await this._getOrCreateSalt();return this._keyHandle=await this._deriveKeyFromPassword(e,t),this._isUnlocked=!0,this._lastActivity=Date.now(),this._startSessionTimer(),e=null,this._onUnlocked&&this._onUnlocked(),{success:!0}}catch(t){throw e=null,t}}lock(){this._expireSession("manual")}async encryptBytes(e){if(!this._isUnlocked||!this._keyHandle)throw new Error("Master key is locked");this._updateActivity();let t=crypto.getRandomValues(new Uint8Array(12)),r=await crypto.subtle.encrypt({name:"AES-GCM",iv:t},this._keyHandle,e);return{encryptedData:new Uint8Array(r),iv:t}}async decryptBytes(e,t){if(!this._isUnlocked||!this._keyHandle)throw new Error("Master key is locked");this._updateActivity();let r=await crypto.subtle.decrypt({name:"AES-GCM",iv:t},this._keyHandle,e);return new Uint8Array(r)}isUnlocked(){return this._isUnlocked&&this._keyHandle!==null}getSessionStatus(){return{isUnlocked:this._isUnlocked,lastActivity:this._lastActivity,sessionTimeoutMs:this._sessionTimeoutMs,inactivityTimeoutMs:this._inactivityTimeoutMs}}_secureWipeMasterKey(){this._keyHandle&&(this._keyHandle=null),this._clearTimers()}destroy(){this._secureWipeMasterKey(),this._isUnlocked=!1,typeof document<"u"&&(document.removeEventListener("visibilitychange",this._handleFocusOut),window.removeEventListener("blur",this._handleFocusOut),window.removeEventListener("focus",this._handleFocusIn))}};var $n=wi(Pn());var Fn="6.8.8";var Hr=()=>{if(Ke.length<2)return null;let[s,e]=React.useState(!1),t=React.useRef(null),r=typeof window<"u"?window.location.pathname:"/",i=Gi({pathname:r,active:Ge()}),n=i.find(c=>c.isCurrent)||i[0];React.useEffect(()=>{if(!s)return;let c=u=>{t.current&&!t.current.contains(u.target)&&e(!1)},d=u=>{u.key==="Escape"&&e(!1)};return document.addEventListener("pointerdown",c),document.addEventListener("keydown",d),()=>{document.removeEventListener("pointerdown",c),document.removeEventListener("keydown",d)}},[s]);let a=React.createElement("button",{key:"trigger",type:"button",onClick:()=>e(c=>!c),"aria-haspopup":"menu","aria-expanded":s?"true":"false","aria-label":f("language.label"),style:{display:"flex",alignItems:"center",gap:"6px",padding:"7px 10px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:s?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.02)",color:"var(--sb-text-4)",font:"inherit",fontSize:"12.5px",fontWeight:600,cursor:"pointer",transition:"background .15s, color .15s"}},[React.createElement("span",{key:"c"},n?n.abbr:""),React.createElement("svg",{key:"v",width:11,height:11,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2.4,strokeLinecap:"round",strokeLinejoin:"round",style:{transform:s?"rotate(180deg)":"none",transition:"transform .18s"},dangerouslySetInnerHTML:{__html:'<path d="M6 9l6 6 6-6"/>'}})]),o=React.createElement("div",{key:"menu",role:"menu",className:"sb-scroll",style:{position:"absolute",top:"calc(100% + 6px)",insetInlineEnd:0,zIndex:60,display:s?"block":"none",minWidth:"170px",padding:"5px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",boxShadow:"0 14px 34px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))",maxHeight:"min(62vh, 420px)",overflowY:"auto",overscrollBehavior:"contain"}},i.map(c=>React.createElement("a",{key:c.code,href:c.href,hrefLang:c.hrefLang,lang:c.hrefLang,dir:c.dir,role:"menuitem","aria-current":c.isCurrent?"page":void 0,onClick:()=>Hi(c.code),style:{display:"flex",alignItems:"center",gap:"10px",padding:"8px 10px",borderRadius:"8px",fontSize:"13px",fontWeight:c.isCurrent?600:500,color:c.isCurrent?"var(--sb-text-2)":"var(--sb-text-6)",background:c.isCurrent?"rgba(var(--sb-ink), 0.06)":"transparent",textDecoration:"none",whiteSpace:"nowrap"}},[React.createElement("span",{key:"a",style:{fontSize:"11px",fontWeight:700,letterSpacing:"0.4px",color:"var(--sb-text-9)",width:"22px",flex:"none",textAlign:"start"}},c.abbr),React.createElement("span",{key:"n"},c.label)])));return React.createElement("nav",{ref:t,"aria-label":f("language.label"),style:{position:"relative",display:"inline-flex"}},[a,o])};window.LanguageSwitcher=Hr;var ot={system:'<rect x="2.5" y="4" width="19" height="13" rx="2"/><path d="M8 20.5h8M12 17.5v3"/>',light:'<circle cx="12" cy="12" r="4.2"/><path d="M12 2.6v2.4M12 19v2.4M2.6 12h2.4M19 12h2.4M5.3 5.3l1.7 1.7M17 17l1.7 1.7M18.7 5.3L17 7M7 17l-1.7 1.7"/>',dark:'<path d="M20.5 14.3A8.6 8.6 0 0 1 9.7 3.5a8.6 8.6 0 1 0 10.8 10.8z"/>'},$r=(s,e,t)=>React.createElement("svg",{width:e,height:e,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:t,strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",dangerouslySetInnerHTML:{__html:s}}),Gr=()=>{let s=typeof window<"u"?window.SecureBitTheme:null;if(!s)return null;let[e,t]=React.useState(!1),[r,i]=React.useState(()=>s.get()),[n,a]=React.useState(()=>s.resolved()),o=React.useRef(null);React.useEffect(()=>s.subscribe((p,S)=>{i(p),a(S)}),[]),React.useEffect(()=>{if(!e)return;let p=g=>{o.current&&!o.current.contains(g.target)&&t(!1)},S=g=>{g.key==="Escape"&&t(!1)};return document.addEventListener("pointerdown",p),document.addEventListener("keydown",S),()=>{document.removeEventListener("pointerdown",p),document.removeEventListener("keydown",S)}},[e]);let c=[{mode:"system",icon:ot.system,label:f("theme.system")},{mode:"light",icon:ot.light,label:f("theme.light")},{mode:"dark",icon:ot.dark,label:f("theme.dark")}],d=r==="system"?ot.system:n==="light"?ot.light:ot.dark,u=c.find(p=>p.mode===r)||c[0],h=React.createElement("button",{key:"trigger",type:"button",onClick:()=>t(p=>!p),"aria-haspopup":"menu","aria-expanded":e?"true":"false","aria-label":f("theme.label")+": "+u.label,title:f("theme.label"),style:{display:"flex",alignItems:"center",gap:"6px",padding:"8px 9px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:e?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.02)",color:"var(--sb-text-4)",font:"inherit",cursor:"pointer",transition:"background .15s, color .15s"}},[React.createElement("span",{key:"i",style:{display:"grid",placeItems:"center"}},$r(d,15,1.9)),React.createElement("svg",{key:"v",width:11,height:11,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2.4,strokeLinecap:"round",strokeLinejoin:"round",style:{transform:e?"rotate(180deg)":"none",transition:"transform .18s"},dangerouslySetInnerHTML:{__html:'<path d="M6 9l6 6 6-6"/>'}})]),m=React.createElement("div",{key:"menu",role:"menu",style:{position:"absolute",top:"calc(100% + 6px)",insetInlineEnd:0,zIndex:60,display:e?"block":"none",minWidth:"158px",padding:"5px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",boxShadow:"0 14px 34px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))"}},c.map(p=>{let S=p.mode===r;return React.createElement("button",{key:p.mode,type:"button",role:"menuitemradio","aria-checked":S?"true":"false",onClick:()=>{s.set(p.mode),t(!1)},style:{width:"100%",display:"flex",alignItems:"center",gap:"10px",padding:"8px 10px",borderRadius:"8px",border:"none",fontSize:"13px",fontFamily:"inherit",fontWeight:S?600:500,color:S?"var(--sb-text-2)":"var(--sb-text-6)",background:S?"rgba(var(--sb-ink), 0.06)":"transparent",cursor:"pointer",textAlign:"start",whiteSpace:"nowrap"}},[React.createElement("span",{key:"i",style:{flex:"none",display:"grid",placeItems:"center",width:"16px",color:S?"var(--sb-orange)":"var(--sb-text-9)"}},$r(p.icon,14,1.9)),React.createElement("span",{key:"l",style:{flex:1}},p.label),S&&React.createElement("span",{key:"c",style:{flex:"none",display:"grid",placeItems:"center",color:"var(--sb-orange)"}},$r('<path d="M4.5 12.5l5 5 10-11"/>',12,2.6))])}));return React.createElement("div",{ref:o,style:{position:"relative",display:"inline-flex"}},[h,m])};window.ThemeSwitcher=Gr;var Ma=`v${Fn}`,La=({status:s,fingerprint:e,verificationCode:t,onDisconnect:r,isConnected:i,securityLevel:n,webrtcManager:a})=>{let[o,c]=React.useState(null),[d,u]=React.useState(0),[h,m]=React.useState(!1),[p,S]=React.useState(0),[g,b]=React.useState("unknown");React.useEffect(()=>{let G=!1,U=0,I=async()=>{let N=Date.now();if(!(N-U<1e4)&&!G){G=!0,U=N;try{if(!a||!i)return;let z=a,W=null;if(typeof z.getRealSecurityLevel=="function"?W=await z.getRealSecurityLevel():typeof z.calculateAndReportSecurityLevel=="function"?W=await z.calculateAndReportSecurityLevel():W=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(z),W&&W.isRealData!==!1){let Z=o?.score||0,be=W.score||0;Z!==be||!o?(c(W),u(N)):window.DEBUG_MODE}}catch{}finally{G=!1}}};if(i&&(I(),!o||o.score<50)){let N=setInterval(()=>{!o||o.score<50?I():clearInterval(N)},5e3);setTimeout(()=>clearInterval(N),3e4)}let D=setInterval(I,3e4);return()=>clearInterval(D)},[a,i]),React.useEffect(()=>{let G=I=>{setTimeout(()=>{u(0)},100)},U=I=>{I.detail&&I.detail.securityData&&(c(I.detail.securityData),u(Date.now()))};return document.addEventListener("security-level-updated",G),document.addEventListener("real-security-calculated",U),window.forceHeaderSecurityUpdate=I=>{I&&window.EnhancedSecureCryptoUtils?window.EnhancedSecureCryptoUtils.calculateSecurityLevel(I).then(D=>{D&&D.isRealData!==!1&&(c(D),u(Date.now()))}).catch(D=>{}):u(0)},()=>{document.removeEventListener("security-level-updated",G),document.removeEventListener("real-security-calculated",U)}},[]),React.useEffect(()=>{m(!0),S(0),b("premium")},[]),React.useEffect(()=>{m(!0),S(0),b("premium")},[]),React.useEffect(()=>{let G=N=>{m(!0),S(0),b("premium")},U=()=>{c(null),u(0),m(!1),S(0),b("unknown")},I=()=>{c(null),u(0)},D=()=>{c(null),u(0),m(!1),S(0),b("unknown")};return document.addEventListener("force-header-update",G),document.addEventListener("peer-disconnect",I),document.addEventListener("connection-cleaned",U),document.addEventListener("disconnected",D),()=>{document.removeEventListener("force-header-update",G),document.removeEventListener("peer-disconnect",I),document.removeEventListener("connection-cleaned",U),document.removeEventListener("disconnected",D)}},[]);let w=async G=>{if(G&&(G.button===2||G.ctrlKey||G.metaKey)&&r&&typeof r=="function"){r();return}G.preventDefault(),G.stopPropagation();let U=null;if(a&&window.EnhancedSecureCryptoUtils)try{U=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(a)}catch{}if(!U&&!o){alert(f("sec.verificationWait"));return}let I=U||o;I||(I={level:"UNKNOWN",score:0,color:"gray",verificationResults:{},timestamp:Date.now(),details:f("sec.verificationUnavailable"),isRealData:!1,passedChecks:0,totalChecks:0});let D=`REAL-TIME SECURITY VERIFICATION
+`),e=e.trim()),e}_sanitizeInputObject(e){if(e===null||typeof e!="object")return e;if(Array.isArray(e))return e.map(r=>this._sanitizeInputObject(r));let t={};for(let r in e)if(e.hasOwnProperty(r)){let i=e[r];typeof i=="string"?t[r]=this._sanitizeInputString(i):typeof i=="object"?t[r]=this._sanitizeInputObject(i):t[r]=i}return t}_checkRateLimit(e="message"){let t=Date.now();return this._rateLimiter||(this._rateLimiter={messageCount:0,lastReset:t,burstCount:0,lastBurstReset:t}),t-this._rateLimiter.lastReset>6e4&&(this._rateLimiter.messageCount=0,this._rateLimiter.lastReset=t),t-this._rateLimiter.lastBurstReset>1e3&&(this._rateLimiter.burstCount=0,this._rateLimiter.lastBurstReset=t),this._rateLimiter.burstCount>=this._inputValidationLimits.rateLimitBurstSize?(this._secureLog("warn","\u26A0\uFE0F Rate limit burst exceeded",{context:e}),!1):this._rateLimiter.messageCount>=this._inputValidationLimits.rateLimitMessagesPerMinute?(this._secureLog("warn","\u26A0\uFE0F Rate limit exceeded",{context:e}),!1):(this._rateLimiter.messageCount++,this._rateLimiter.burstCount++,!0)}_checkInboundRateLimit(e="incoming_message"){let t=Date.now();return this._inboundRateLimiter||(this._inboundRateLimiter={messageCount:0,lastReset:t,burstCount:0,lastBurstReset:t}),t-this._inboundRateLimiter.lastReset>6e4&&(this._inboundRateLimiter.messageCount=0,this._inboundRateLimiter.lastReset=t),t-this._inboundRateLimiter.lastBurstReset>1e3&&(this._inboundRateLimiter.burstCount=0,this._inboundRateLimiter.lastBurstReset=t),this._inboundRateLimiter.burstCount>=this._inputValidationLimits.rateLimitBurstSize?(this._secureLog("warn","\u26A0\uFE0F Inbound message burst limit exceeded; dropping message",{context:e}),!1):this._inboundRateLimiter.messageCount>=this._inputValidationLimits.rateLimitMessagesPerMinute?(this._secureLog("warn","\u26A0\uFE0F Inbound message rate limit exceeded; dropping message",{context:e}),!1):(this._inboundRateLimiter.messageCount++,this._inboundRateLimiter.burstCount++,!0)}_initializeSecureKeyStorage(){this._masterKeyManager=new jt,this._secureKeyStorage=new Gt(this._masterKeyManager),this._keyStorageStats={totalKeys:0,activeKeys:0,lastAccess:null,lastRotation:null},this._secureLog("info","\u{1F510} Enhanced secure key storage initialized")}setMasterKeyPasswordCallback(e){this._masterKeyManager&&this._masterKeyManager.setPasswordRequiredCallback(e)}setMasterKeySessionExpiredCallback(e){this._masterKeyManager&&this._masterKeyManager.setSessionExpiredCallback(e)}lockMasterKey(){this._masterKeyManager&&this._masterKeyManager.lock()}isMasterKeyUnlocked(){return this._masterKeyManager?this._masterKeyManager.isUnlocked():!1}getMasterKeySessionStatus(){return this._masterKeyManager?this._masterKeyManager.getSessionStatus():null}async _ensureFileTransferReady(){try{if(this.fileTransferSystem)return!0;if(!this.dataChannel||this.dataChannel.readyState!=="open")throw new Error("Data channel not open");if(!this.isVerified)throw new Error("Connection not verified");this.initializeFileTransfer();let e=0,t=50;for(;!this.fileTransferSystem&&e<t;)await new Promise(r=>setTimeout(r,100)),e++;if(!this.fileTransferSystem)throw new Error("File transfer system initialization timeout");return!0}catch(e){return this._secureLog("error","\u274C _ensureFileTransferReady failed",{errorType:e?.constructor?.name||"Unknown",hasMessage:!!e?.message}),!1}}_getSecureKey(e){return this._secureKeyStorage.retrieveKey(e)}async _setSecureKey(e,t){if(!(t instanceof CryptoKey))return this._secureLog("error","\u274C Attempt to store non-CryptoKey"),!1;let r=await this._secureKeyStorage.storeKey(e,t,{version:this.currentKeyVersion,type:t.algorithm.name});return r&&this._secureLog("info",`\u{1F511} Key ${e} stored securely with encryption`),r}_validateKeyValue(e){return e instanceof CryptoKey&&e.algorithm&&e.usages&&e.usages.length>0}_secureWipeKeys(){this._secureKeyStorage.secureWipeAll(),this._masterKeyManager&&this._masterKeyManager.lock(),this._secureLog("info","\u{1F9F9} All keys securely wiped and encrypted storage cleared")}_validateKeyStorage(){return this._secureKeyStorage instanceof Gt}_getKeyStorageStats(){let e=this._secureKeyStorage.getStorageStats();return{totalKeysCount:e.totalKeys,activeKeysCount:e.totalKeys,hasLastAccess:e.metadata.some(t=>t.lastAccessed),hasLastRotation:!!this._keyStorageStats.lastRotation,storageType:"SecureKeyStorage",timestamp:Date.now()}}_rotateKeys(){let e=Array.from(this._secureKeyStorage.keys());this._secureKeyStorage.clear(),this._keyStorageStats.lastRotation=Date.now(),this._keyStorageStats.activeKeys=0,this._secureLog("info",`\u{1F504} Key rotation completed. ${e.length} keys rotated`)}_emergencyKeyWipe(){this._secureWipeKeys(),this._secureLog("error","\u{1F6A8} EMERGENCY: All keys wiped due to security threat")}_startKeySecurityMonitoring(){this._secureLog("info","\u{1F527} Key security monitoring moved to unified scheduler")}_validateKeyConstantTime(e){let t=0;try{let r=e instanceof CryptoKey;t+=r?1:0}catch{t+=0}try{let r=!!(e&&e.algorithm);t+=r?1:0}catch{t+=0}try{let r=!!(e&&e.type);t+=r?1:0}catch{t+=0}try{let r=e&&e.extractable!==void 0;t+=r?1:0}catch{t+=0}return t===4}_validateKeyPairConstantTime(e){if(!e||typeof e!="object")return!1;let t=this._validateKeyConstantTime(e.privateKey),r=this._validateKeyConstantTime(e.publicKey);return t&&r}_initializeSecureLogging(){this._logLevels={error:0,warn:1,info:2,debug:3,trace:4},this._currentLogLevel=this._isProductionMode?this._logLevels.error:this._logLevels.info,this._logCounts=new Map,this._maxLogCount=this._isProductionMode?5:50,this._resourceLimits={maxLogEntries:this._isProductionMode?100:1e3,maxMessageQueue:1e3,maxIVHistory:1e4,maxProcessedMessageIds:5e3,maxDecoyChannels:100,maxFakeTrafficMessages:500,maxChunkQueue:200,maxPacketBuffer:1e3},this._emergencyThresholds={logEntries:this._resourceLimits.maxLogEntries*.8,messageQueue:this._resourceLimits.maxMessageQueue*.8,ivHistory:this._resourceLimits.maxIVHistory*.8,processedMessageIds:this._resourceLimits.maxProcessedMessageIds*.8},this._inputValidationLimits={maxStringLength:1e5,maxObjectDepth:10,maxArrayLength:1e3,maxMessageSize:1024*1024,maxConcurrentMessages:10,rateLimitMessagesPerMinute:60,rateLimitBurstSize:10},this._absoluteBlacklist=new Set(["encryptionKey","macKey","metadataKey","privateKey","publicKey","ecdhKeyPair","ecdsaKeyPair","peerPublicKey","nestedEncryptionKey","verificationCode","sessionSalt","keyFingerprint","sessionId","authChallenge","authProof","authToken","sessionToken","password","token","secret","credential","signature","apiKey","accessKey","secretKey","privateKey","hash","digest","nonce","iv","cipher","seed","entropy","random","salt","fingerprint","jwt","bearer","refreshToken","accessToken","fileHash","fileSignature","transferKey","chunkKey"]),this._safeFieldsWhitelist=new Set(["timestamp","type","status","state","level","isConnected","isVerified","isInitiator","version","count","total","active","inactive","success","failure","readyState","connectionState","iceConnectionState","activeFeaturesCount","totalFeatures","stage","errorType","errorCode","phase","attempt"]),this._initializeLogSecurityMonitoring(),this._secureLog("info",`\u{1F527} Enhanced secure logging initialized (Production: ${this._isProductionMode})`)}_initializeLogSecurityMonitoring(){this._logSecurityViolations=0,this._maxLogSecurityViolations=3}_auditLoggingSystemSecurity(){let e=0;for(let[r,i]of this._logCounts.entries())i>this._maxLogCount*2&&(e++,this._originalConsole?.error?.(`\u{1F6A8} LOG SECURITY: Excessive log count detected: ${r}`));let t=Array.from(this._logCounts.keys());for(let r of t)this._containsSensitiveContent(r)&&(e++,this._originalConsole?.error?.(`\u{1F6A8} LOG SECURITY: Sensitive content in log key: ${r}`));this._logSecurityViolations+=e,this._logSecurityViolations>=this._maxLogSecurityViolations&&(this._emergencyDisableLogging(),this._originalConsole?.error?.("\u{1F6A8} CRITICAL: Logging system disabled due to security violations"))}_secureLogShim(...e){try{if(!Array.isArray(e)||e.length===0)return;let t=e[0],r=e.slice(1);if(r.length===0){this._secureLog("info",String(t||""));return}if(r.length===1){this._secureLog("info",String(t||""),r[0]);return}this._secureLog("info",String(t||""),{additionalArgs:r,argCount:r.length})}catch{try{this._originalConsole?.log&&this._originalConsole.log(...e)}catch{}}}_setupOwnLogger(){this.logger={log:(e,t)=>this._secureLog("info",e,t),info:(e,t)=>this._secureLog("info",e,t),warn:(e,t)=>this._secureLog("warn",e,t),error:(e,t)=>this._secureLog("error",e,t),debug:(e,t)=>this._secureLog("debug",e,t)},s.DEBUG_MODE?this._secureLog("info","\u{1F512} Own logger created - development mode"):this._secureLog("info","\u{1F512} Own logger created - production mode")}_setupProductionLogging(){this._isProductionMode&&(this.logger={log:()=>{},info:()=>{},warn:(e,t)=>this._secureLog("warn",e,t),error:(e,t)=>this._secureLog("error",e,t),debug:()=>{}},this._secureLog("info","Production logging mode activated"))}_secureLog(e,t,r=null){if(r&&!this._auditLogMessage(t,r)){this._originalConsole?.error?.("SECURITY: Logging blocked due to potential data leakage");return}if(this._logLevels[e]>this._currentLogLevel)return;let i=`${e}:${t.substring(0,50)}`,n=this._logCounts.get(i)||0;if(n>=this._maxLogCount)return;this._logCounts.set(i,n+1);let a=null;if(r&&(a=this._sanitizeLogData(r),this._containsSensitiveContent(JSON.stringify(a)))){this._originalConsole?.error?.("ECURITY: Sanitized data still contains sensitive content - blocking log");return}if(this._isProductionMode){if(e==="error"){let c=this._sanitizeString(t);this._originalConsole?.error?.(c)}return}let o=this._originalConsole?.[e]||this._originalConsole?.log;a?o(t,a):o(t)}_sanitizeLogData(e){if(typeof e=="string")return this._sanitizeString(e);if(!e||typeof e!="object")return e;let t={};for(let[i,n]of Object.entries(e)){let a=i.toLowerCase(),o=["key","secret","token","password","credential","auth","fingerprint","salt","signature","private","encryption","mac","metadata","session","jwt","bearer","hash","digest","nonce","iv","cipher","seed","entropy"];if(this._absoluteBlacklist.has(i)||o.some(d=>a.includes(d))){t[i]="[SENSITIVE_DATA_BLOCKED]";continue}if(this._safeFieldsWhitelist.has(i)){typeof n=="string"?t[i]=this._sanitizeString(n):t[i]=n;continue}if(typeof n=="boolean"||typeof n=="number")t[i]=n;else if(typeof n=="string")t[i]=this._sanitizeString(n);else if(n instanceof ArrayBuffer||n instanceof Uint8Array)t[i]=`[${n.constructor.name}(<REDACTED> bytes)]`;else if(n&&typeof n=="object")try{t[i]=this._sanitizeLogData(n)}catch{t[i]="[RECURSIVE_SANITIZATION_FAILED]"}else t[i]=`[${typeof n}]`}let r=JSON.stringify(t);return this._containsSensitiveContent(r)?{error:"SANITIZATION_FAILED_SENSITIVE_CONTENT_DETECTED"}:t}_sanitizeString(e){if(typeof e!="string"||e.length===0)return e;let t=[/[a-f0-9]{16,}/i,/[a-f0-9]{8,}/i,/[A-Za-z0-9+/]{16,}={0,2}/,/[A-Za-z0-9+/]{12,}/,/[A-Za-z0-9+/=]{10,}/,/[1-9A-HJ-NP-Za-km-z]{16,}/,/[A-Z2-7]{16,}={0,6}/,/[A-Z2-7]{12,}/,/[A-Za-z0-9\-_]{16,}/,/[A-Za-z0-9\.\-_]{16,}/,/\b[A-Za-z0-9]{12,}\b/,/\b[A-Za-z0-9]{8,}\b/,/BEGIN\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\s+KEY/i,/END\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\s+KEY/i,/^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/,/(api[_-]?key|token|secret|password|credential)[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i,/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,/\b\d{4}[\s-]?\d{4}[\s-]?\d{4}[\s-]?\d{4}\b/,/\b\d{3}-\d{2}-\d{4}\b/,/[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,}/,/(fingerprint|hash|digest|signature)[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i,/(encryption|mac|metadata)[\s]*key[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i,/(session|auth|jwt|bearer)[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i];for(let r of t)if(r.test(e))return"[SENSITIVE_DATA_REDACTED]";return this._hasHighEntropy(e)?"[HIGH_ENTROPY_DATA_REDACTED]":this._hasSuspiciousDistribution(e)?"[SUSPICIOUS_DATA_REDACTED]":e.length>50?e.substring(0,20)+"...[TRUNCATED]":e}_containsSensitiveContent(e){return typeof e!="string"?!1:[/[a-f0-9]{16,}/i,/[A-Za-z0-9+/]{16,}={0,2}/,/[1-9A-HJ-NP-Za-km-z]{16,}/,/[A-Z2-7]{16,}={0,6}/,/\b[A-Za-z0-9]{12,}\b/,/BEGIN\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\s+KEY/i,/^[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+\.[A-Za-z0-9-_]*$/,/(api[_-]?key|token|secret|password|credential)[\s]*[:=][\s]*[A-Za-z0-9\-_]{8,}/i].some(r=>r.test(e))||this._hasHighEntropy(e)||this._hasSuspiciousDistribution(e)}_hasHighEntropy(e){if(e.length<8)return!1;let t={};for(let n of e)t[n]=(t[n]||0)+1;let r=e.length,i=0;for(let n of Object.values(t)){let a=n/r;i-=a*Math.log2(a)}return i>4.5}_hasSuspiciousDistribution(e){return e.length<8?!1:(e.match(/[a-f0-9]/gi)||[]).length>=e.length*.8||(e.match(/[A-Za-z0-9+/=]/g)||[]).length>=e.length*.9||new Set(e).size/e.length>.8&&e.length>16}_detectProductionMode(){return typeof process<"u"&&!0||!this._debugMode||window.location.hostname&&!window.location.hostname.includes("localhost")&&!window.location.hostname.includes("127.0.0.1")&&!window.location.hostname.includes(".local")||typeof window.webpackHotUpdate>"u"&&!window.location.search.includes("debug")}_setupSecureGlobalAPI(){this._secureLog("info","Starting secure global API setup");let e={};typeof this.sendMessage=="function"&&(e.sendMessage=this.sendMessage.bind(this)),e.getConnectionStatus=()=>({isConnected:this.isConnected?this.isConnected():!1,isVerified:this.isVerified||!1,connectionState:this.peerConnection?.connectionState||"disconnected"}),e.getSecurityStatus=()=>({securityLevel:"maximum",stage:"initialized",activeFeaturesCount:Object.values(this.securityFeatures||{}).filter(Boolean).length}),typeof this.sendFile=="function"&&(e.sendFile=this.sendFile.bind(this)),e.getFileTransferStatus=()=>({initialized:!!this.fileTransferSystem,status:"ready",activeTransfers:0,receivingTransfers:0}),typeof this.disconnect=="function"&&(e.disconnect=this.disconnect.bind(this));let t={...e,getConfiguration:()=>({fakeTraffic:this._config.fakeTraffic.enabled,decoyChannels:this._config.decoyChannels.enabled,packetPadding:this._config.packetPadding.enabled,antiFingerprinting:this._config.antiFingerprinting.enabled}),emergency:{}};typeof this._emergencyUnlockAllMutexes=="function"&&(t.emergency.unlockAllMutexes=this._emergencyUnlockAllMutexes.bind(this)),typeof this._emergencyRecoverMutexSystem=="function"&&(t.emergency.recoverMutexSystem=this._emergencyRecoverMutexSystem.bind(this)),typeof this._emergencyDisableLogging=="function"&&(t.emergency.disableLogging=this._emergencyDisableLogging.bind(this)),typeof this._resetLoggingSystem=="function"&&(t.emergency.resetLogging=this._resetLoggingSystem.bind(this)),t.getFileTransferSystemStatus=()=>({initialized:!!this.fileTransferSystem,status:"ready",activeTransfers:0,receivingTransfers:0}),this._secureLog("info","API methods available",{sendMessage:!!e.sendMessage,getConnectionStatus:!!e.getConnectionStatus,getSecurityStatus:!!e.getSecurityStatus,sendFile:!!e.sendFile,getFileTransferStatus:!!e.getFileTransferStatus,disconnect:!!e.disconnect,getConfiguration:!!t.getConfiguration,emergencyMethods:Object.keys(t.emergency).length}),Object.freeze(t),Object.freeze(t.emergency),this._createProtectedGlobalAPI(t),this._setupMinimalGlobalProtection(),this._secureLog("info","Secure global API setup completed successfully")}_createProtectedGlobalAPI(e){this._secureLog("info","Creating protected global API"),window.secureBitChat?this._secureLog("warn","\u26A0\uFE0F Global API already exists, skipping setup"):this._exportAPI(e)}_exportAPI(e){this._secureLog("info","Exporting API to window.secureBitChat"),!this._importantMethods||!this._importantMethods.defineProperty?(this._secureLog("error","\u274C Important methods not available for API export, using fallback"),Object.defineProperty(window,"secureBitChat",{value:e,writable:!1,configurable:!1,enumerable:!0})):this._importantMethods.defineProperty(window,"secureBitChat",{value:e,writable:!1,configurable:!1,enumerable:!0}),this._secureLog("info","\u{1F512} Secure API exported to window.secureBitChat")}_setupMinimalGlobalProtection(){this._protectGlobalAPI(),this._secureLog("info","\u{1F512} Minimal global protection activated")}_storeImportantMethods(){this._importantMethods={defineProperty:Object.defineProperty,getOwnPropertyDescriptor:Object.getOwnPropertyDescriptor,freeze:Object.freeze,consoleLog:console.log,consoleError:console.error,consoleWarn:console.warn},this._secureLog("info","\u{1F512} Important methods stored locally",{defineProperty:!!this._importantMethods.defineProperty,getOwnPropertyDescriptor:!!this._importantMethods.getOwnPropertyDescriptor,freeze:!!this._importantMethods.freeze})}_setupSimpleProtection(){this._secureLog("info","\u{1F512} Simple protection activated - no monitoring")}_preventGlobalExposure(){this._secureLog("info","\u{1F512} No global exposure prevention - using secure API export only")}_verifyAPIIntegrity(){try{if(!window.secureBitChat)return this._secureLog("error","\u274C SECURITY ALERT: Secure API has been removed!"),!1;let t=["sendMessage","getConnectionStatus","disconnect"].filter(r=>typeof window.secureBitChat[r]!="function");return t.length>0?(this._secureLog("error","\u274C SECURITY ALERT: API tampering detected, missing methods:",{errorType:t?.constructor?.name||"Unknown"}),!1):!0}catch(e){return this._secureLog("error","\u274C SECURITY ALERT: API integrity check failed:",{errorType:e?.constructor?.name||"Unknown"}),!1}}_auditGlobalExposure(){return this._secureLog("info","\u{1F512} Global exposure check completed at initialization"),[]}_startSecurityAudit(){this._secureLog("info","\u{1F512} Security audit completed at initialization - no periodic monitoring")}_protectGlobalAPI(){if(!window.secureBitChat){this._secureLog("warn","\u26A0\uFE0F Global API not found during protection setup");return}try{this._validateAPIIntegrityOnce()&&this._secureLog("info","\u{1F512} Global API protection verified")}catch(e){this._secureLog("error","\u274C Failed to verify global API protection",{errorType:e.constructor.name,errorMessage:e.message})}}_validateAPIIntegrityOnce(){try{if(!this._importantMethods||!this._importantMethods.getOwnPropertyDescriptor){let e=Object.getOwnPropertyDescriptor(window,"secureBitChat");if(!e||e.configurable)throw new Error("secureBitChat must not be reconfigurable!")}else{let e=this._importantMethods.getOwnPropertyDescriptor(window,"secureBitChat");if(!e||e.configurable)throw new Error("secureBitChat must not be reconfigurable!")}return this._secureLog("info","\u2705 API integrity validated"),!0}catch(e){return this._secureLog("error","\u274C API integrity validation failed",{errorType:e.constructor.name,errorMessage:e.message}),!1}}_secureWipeMemory(e,t="unknown"){if(e)try{e instanceof ArrayBuffer?this._secureWipeArrayBuffer(e,t):e instanceof Uint8Array?this._secureWipeUint8Array(e,t):Array.isArray(e)?this._secureWipeArray(e,t):typeof e=="string"?this._secureWipeString(e,t):e instanceof CryptoKey?this._secureWipeCryptoKey(e,t):typeof e=="object"&&this._secureWipeObject(e,t),this._secureMemoryManager.memoryStats.totalCleanups++}catch(r){this._secureMemoryManager.memoryStats.failedCleanups++,this._secureLog("error","\u274C Secure memory wipe failed",{context:t,errorType:r.constructor.name,errorMessage:r.message})}}_secureWipeArrayBuffer(e,t){if(!(!e||e.byteLength===0))try{let r=new Uint8Array(e);crypto.getRandomValues(r),r.fill(0),r.fill(255),r.fill(0),this._secureLog("debug","\u{1F512} ArrayBuffer securely wiped",{context:t,size:e.byteLength})}catch(r){this._secureLog("error","\u274C Failed to wipe ArrayBuffer",{context:t,errorType:r.constructor.name})}}_secureWipeUint8Array(e,t){if(!(!e||e.length===0))try{crypto.getRandomValues(e),e.fill(0),e.fill(255),e.fill(0),this._secureLog("debug","\u{1F512} Uint8Array securely wiped",{context:t,size:e.length})}catch(r){this._secureLog("error","\u274C Failed to wipe Uint8Array",{context:t,errorType:r.constructor.name})}}_secureWipeArray(e,t){if(!(!Array.isArray(e)||e.length===0))try{e.forEach((r,i)=>{r!=null&&this._secureWipeMemory(r,`${t}[${i}]`)}),e.fill(null),this._secureLog("debug","\u{1F512} Array securely wiped",{context:t,size:e.length})}catch(r){this._secureLog("error","\u274C Failed to wipe array",{context:t,errorType:r.constructor.name})}}_secureWipeString(e,t){return this._secureLog("debug","String secret cannot be wiped in JS (immutable) \u2014 reference dropped only",{context:t,length:e?e.length:0}),!1}_secureWipeCryptoKey(e,t){return!e||!(e instanceof CryptoKey)||(this._secureLog("debug","CryptoKey cannot be wiped from JS \u2014 handle dropped, material is non-extractable",{context:t,type:e.type,extractable:e.extractable}),e.extractable&&this._secureLog("error","Extractable key reached the wipe path \u2014 material may persist in memory",{context:t})),!1}_secureWipeObject(e,t){if(!(!e||typeof e!="object"))try{for(let[r,i]of Object.entries(e))i!=null&&this._secureWipeMemory(i,`${t}.${r}`),e[r]=null;this._secureLog("debug","\u{1F512} Object securely wiped",{context:t,properties:Object.keys(e).length})}catch(r){this._secureLog("error","\u274C Failed to wipe object",{context:t,errorType:r.constructor.name})}}_secureCleanupCryptographicMaterials(){try{if(this.ecdhKeyPair&&(this._secureWipeMemory(this.ecdhKeyPair,"ecdhKeyPair"),this.ecdhKeyPair=null),this.ecdsaKeyPair&&(this._secureWipeMemory(this.ecdsaKeyPair,"ecdsaKeyPair"),this.ecdsaKeyPair=null),this.encryptionKey&&(this._secureWipeMemory(this.encryptionKey,"encryptionKey"),this.encryptionKey=null),this.macKey&&(this._secureWipeMemory(this.macKey,"macKey"),this.macKey=null),this.metadataKey&&(this._secureWipeMemory(this.metadataKey,"metadataKey"),this.metadataKey=null),this.nestedEncryptionKey&&(this._secureWipeMemory(this.nestedEncryptionKey,"nestedEncryptionKey"),this.nestedEncryptionKey=null),this.sessionSalt&&(this._secureWipeMemory(this.sessionSalt,"sessionSalt"),this.sessionSalt=null),this.sessionId&&(this._secureWipeMemory(this.sessionId,"sessionId"),this.sessionId=null),this.verificationCode&&(this._secureWipeMemory(this.verificationCode,"verificationCode"),this.verificationCode=null),this.peerPublicKey&&(this._secureWipeMemory(this.peerPublicKey,"peerPublicKey"),this.peerPublicKey=null),this.keyFingerprint&&(this._secureWipeMemory(this.keyFingerprint,"keyFingerprint"),this.keyFingerprint=null),this.connectionId&&(this._secureWipeMemory(this.connectionId,"connectionId"),this.connectionId=null),this._clearPendingOfferContext(),this._ratchet){try{this._ratchet.destroy()}catch{}this._ratchet=null}this._peerSupportsRatchet=!1,this._secureLog("info","\u{1F512} Cryptographic materials securely cleaned up")}catch(e){this._secureLog("error","\u274C Failed to cleanup cryptographic materials",{errorType:e.constructor.name,errorMessage:e.message})}}async _forceGarbageCollection(){try{await this._performNaturalCleanup(),this._secureLog("debug","\u{1F512} Natural memory cleanup performed")}catch(e){this._secureLog("error","\u274C Failed to perform natural cleanup",{errorType:e.constructor.name})}}async _performPeriodicMemoryCleanup(){try{this._secureMemoryManager.isCleaning=!0;let e=this.sessionMode==="ratchet"&&this.isConnected&&this.dataChannel&&this.dataChannel.readyState==="open",t=this._pendingOfferContext?Date.now()-(this._pendingOfferContext.createdAt||0):1/0,r=!!this._pendingOfferContext&&Array.isArray(this._pendingOfferContext.sessionSalt)&&this._pendingOfferContext.sessionSalt.length===64&&t<s.LIMITS.OFFER_MAX_AGE;e||r?this._secureLog("debug","\u{1F9F9} Skipping crypto key wipe during periodic cleanup",{reason:e?"active ratchet connection":"offer awaiting answer"}):this._secureCleanupCryptographicMaterials(),this.messageQueue&&this.messageQueue.length>100&&this.messageQueue.splice(0,this.messageQueue.length-50).forEach((a,o)=>{this._secureWipeMemory(a,`periodicCleanup[${o}]`)}),this.processedMessageIds&&this.processedMessageIds.size>1e3&&this.processedMessageIds.clear(),await this._forceGarbageCollection(),this._secureLog("debug","\u{1F512} Periodic memory cleanup completed")}catch(e){this._secureLog("error","\u274C Error during periodic memory cleanup",{errorType:e.constructor.name,errorMessage:e.message})}finally{this._secureMemoryManager.isCleaning=!1}}_createSecureErrorMessage(e,t="unknown"){try{let r=this._categorizeError(e),i=this._getSafeErrorMessage(r,t);return this._secureLog("error","Internal error occurred",{category:r,context:t,errorType:e?.constructor?.name||"Unknown",timestamp:Date.now()}),this._trackErrorFrequency(r),i}catch(r){return this._secureLog("error","Error handling failed",{originalError:e?.message||"Unknown",handlingError:r.message}),"An unexpected error occurred"}}_categorizeError(e){if(!e||!e.message)return this._secureErrorHandler.errorCategories.UNKNOWN;let t=e.message.toLowerCase();return t.includes("crypto")||t.includes("key")||t.includes("encrypt")||t.includes("decrypt")||t.includes("sign")||t.includes("verify")||t.includes("ecdh")||t.includes("ecdsa")?this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC:t.includes("network")||t.includes("connection")||t.includes("timeout")||t.includes("webrtc")||t.includes("peer")?this._secureErrorHandler.errorCategories.NETWORK:t.includes("invalid")||t.includes("validation")||t.includes("format")||t.includes("type")?this._secureErrorHandler.errorCategories.VALIDATION:t.includes("system")||t.includes("internal")||t.includes("memory")||t.includes("resource")?this._secureErrorHandler.errorCategories.SYSTEM:this._secureErrorHandler.errorCategories.UNKNOWN}_getSafeErrorMessage(e,t){let r={[this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC]:{key_generation:"Security initialization failed",key_import:"Security verification failed",key_derivation:"Security setup failed",encryption:"Message security failed",decryption:"Message verification failed",signature:"Authentication failed",default:"Security operation failed"},[this._secureErrorHandler.errorCategories.NETWORK]:{connection:"Connection failed",timeout:"Connection timeout",peer:"Peer connection failed",webrtc:"Communication failed",default:"Network operation failed"},[this._secureErrorHandler.errorCategories.VALIDATION]:{format:"Invalid data format",type:"Invalid data type",structure:"Invalid data structure",default:"Validation failed"},[this._secureErrorHandler.errorCategories.SYSTEM]:{memory:"System resource error",resource:"System resource unavailable",internal:"Internal system error",default:"System operation failed"},[this._secureErrorHandler.errorCategories.UNKNOWN]:{default:"An unexpected error occurred"}},i=r[e]||r[this._secureErrorHandler.errorCategories.UNKNOWN],n="default";return t.includes("key")||t.includes("crypto")?n=e===this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC?"key_generation":"default":t.includes("connection")||t.includes("peer")?n=e===this._secureErrorHandler.errorCategories.NETWORK?"connection":"default":(t.includes("validation")||t.includes("format"))&&(n=e===this._secureErrorHandler.errorCategories.VALIDATION?"format":"default"),i[n]||i.default}_trackErrorFrequency(e){let t=Date.now();t-this._secureErrorHandler.lastErrorTime>6e4&&this._secureErrorHandler.errorCounts.clear();let r=this._secureErrorHandler.errorCounts.get(e)||0;this._secureErrorHandler.errorCounts.set(e,r+1),this._secureErrorHandler.lastErrorTime=t;let i=Array.from(this._secureErrorHandler.errorCounts.values()).reduce((n,a)=>n+a,0);i>this._secureErrorHandler.errorThreshold&&(this._secureErrorHandler.isInErrorMode=!0,this._secureLog("warn","\u26A0\uFE0F High error frequency detected - entering error mode",{totalErrors:i,threshold:this._secureErrorHandler.errorThreshold}))}_throwSecureError(e,t="unknown"){let r=this._createSecureErrorMessage(e,t);throw new Error(r)}_getErrorHandlingStats(){return{errorCounts:Object.fromEntries(this._secureErrorHandler.errorCounts),isInErrorMode:this._secureErrorHandler.isInErrorMode,lastErrorTime:this._secureErrorHandler.lastErrorTime,errorThreshold:this._secureErrorHandler.errorThreshold}}_resetErrorHandlingSystem(){this._secureErrorHandler.errorCounts.clear(),this._secureErrorHandler.isInErrorMode=!1,this._secureErrorHandler.lastErrorTime=0,this._secureLog("info","\u{1F504} Error handling system reset")}_getMemoryManagementStats(){return{totalCleanups:this._secureMemoryManager.memoryStats.totalCleanups,failedCleanups:this._secureMemoryManager.memoryStats.failedCleanups,lastCleanup:this._secureMemoryManager.memoryStats.lastCleanup,isCleaning:this._secureMemoryManager.isCleaning,queueLength:this._secureMemoryManager.cleanupQueue.length}}_validateAPIIntegrity(){try{if(!window.secureBitChat)return this._secureLog("error","\u274C Global API not found during integrity validation"),!1;let e=["sendMessage","getConnectionStatus","getSecurityStatus","sendFile","disconnect"],t=e.filter(a=>!window.secureBitChat[a]||typeof window.secureBitChat[a]!="function");if(t.length>0)return this._secureLog("error","\u274C Global API integrity validation failed - missing methods",{missingMethods:t}),!1;let r={test:!0},n=e.map(a=>{try{return window.secureBitChat[a].bind(r)}catch{return null}}).filter(a=>a===null);if(n.length>0)return this._secureLog("error","\u274C Global API integrity validation failed - method binding issues",{unboundMethods:n.length}),!1;try{let a="_integrity_test_"+Date.now();return Object.defineProperty(window.secureBitChat,a,{value:"test",writable:!0,configurable:!0}),this._secureLog("error","\u274C Global API integrity validation failed - API is mutable"),delete window.secureBitChat[a],!1}catch{this._secureLog("debug","\u2705 Global API immutability verified")}return this._secureLog("info","\u2705 Global API integrity validation passed"),!0}catch(e){return this._secureLog("error","\u274C Global API integrity validation failed",{errorType:e.constructor.name,errorMessage:e.message}),!1}}_validateCryptographicSecurity(){let e=["hasRateLimiting"],t=e.filter(n=>!this.securityFeatures[n]);t.length>0&&(this._secureLog("error","\u{1F6A8} CRITICAL: Missing critical rate limiting feature",{missing:t,currentFeatures:this.securityFeatures,action:"Rate limiting will be forced enabled"}),t.forEach(n=>{this.securityFeatures[n]=!0,this._secureLog("warn",`\u26A0\uFE0F Forced enable critical: ${n} = true`)}));let r=Object.keys(this.securityFeatures).filter(n=>this.securityFeatures[n]),i=["hasEncryption","hasECDH","hasECDSA"].filter(n=>this.securityFeatures[n]);return this._secureLog("info","\u2705 Cryptographic security validation passed",{criticalFeatures:e.length,availableFeatures:r.length,encryptionFeatures:i.length,totalSecurityFeatures:r.length,note:"Encryption features will be enabled after key generation",currentState:{hasEncryption:this.securityFeatures.hasEncryption,hasECDH:this.securityFeatures.hasECDH,hasECDSA:this.securityFeatures.hasECDSA,hasRateLimiting:this.securityFeatures.hasRateLimiting}}),!0}_syncSecurityFeaturesWithTariff(){this._secureLog("info","\u2705 All security features enabled by default - no payment required"),["hasEncryption","hasECDH","hasECDSA","hasMutualAuth","hasMetadataProtection","hasEnhancedReplayProtection","hasNonExtractableKeys","hasRateLimiting","hasEnhancedValidation","hasPFS","hasNestedEncryption","hasPacketPadding","hasPacketReordering","hasAntiFingerprinting","hasFakeTraffic","hasDecoyChannels","hasMessageChunking"].forEach(t=>{this.securityFeatures[t]=!0}),this._secureLog("info","\u2705 All security features enabled by default",{enabledFeatures:Object.keys(this.securityFeatures).filter(t=>this.securityFeatures[t]).length,totalFeatures:Object.keys(this.securityFeatures).length})}_emergencyShutdown(e="Security breach"){this._secureLog("error","\u274C EMERGENCY SHUTDOWN: ${reason}");try{this.encryptionKey=null,this.macKey=null,this.metadataKey=null,this.verificationCode=null,this.keyFingerprint=null,this.connectionId=null,this.dataChannel&&(this.dataChannel.close(),this.dataChannel=null),this.peerConnection&&(this.peerConnection.close(),this.peerConnection=null),this.messageQueue=[],this.processedMessageIds.clear(),this.packetBuffer.clear(),this.onStatusChange&&this.onStatusChange("security_breach"),this._secureLog("info","\u{1F512} Emergency shutdown completed")}catch(t){this._secureLog("error","\u274C Error during emergency shutdown:",{errorType:t?.constructor?.name||"Unknown"})}}_finalizeSecureInitialization(){if(this._startKeySecurityMonitoring(),!this._verifyAPIIntegrity()){this._secureLog("error","\u274C Security initialization failed");return}this._startSecurityMonitoring(),this._logCleanupInterval=this._trackActiveTimer(setInterval(()=>{this._cleanupLogs()},3e5)),this._secureLog("info","\u2705 Secure WebRTC Manager initialization completed"),this._secureLog("info","\u{1F512} Global exposure protection: Monitoring only, no automatic removal")}_startSecurityMonitoring(){this._secureLog("info","\u{1F527} Security monitoring moved to unified scheduler")}_validateConnection(e=!0){let t=this.dataChannel&&this.dataChannel.readyState==="open",r=this.isVerified,i=t&&r;if(!i&&e){if(!t)throw new Error("Data channel not ready");if(!r)throw new Error("Connection not verified")}return i}_enforceVerificationGate(e="unknown",t=!0){if(!this.isVerified){let r=`SECURITY VIOLATION: ${e} blocked - connection not cryptographically verified`;if(this._secureLog("error",r,{operation:e,isVerified:this.isVerified,hasKeys:!!(this.encryptionKey&&this.macKey),timestamp:Date.now()}),t)throw new Error(r);return!1}return!0}_setVerifiedStatus(e,t="unknown",r=null){if(e){if(!this.encryptionKey||!this.macKey)throw new Error("Cannot set verified=true without encryption keys");if(!t||t==="unknown")throw new Error("Cannot set verified=true without specifying verification method");if(t.includes("SAS")&&!this.localVerificationConfirmed)throw this._secureLog("error","Blocked verified transition without local SAS confirmation",{verificationMethod:t,localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed}),new Error("Cannot set verified=true without local SAS confirmation");this._secureLog("info","Connection verified through cryptographic verification",{verificationMethod:t,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,keyFingerprint:this.keyFingerprint,timestamp:Date.now(),verificationData:r?"provided":"none"})}this.isVerified=e,e?this.onStatusChange("connected"):this.onStatusChange("disconnected")}markGroupLinkVerified(e="group_roster_signature"){let t=this._sbq2;if(!this._isSbq2()||!t||!t.completed||!t.proofVerified||!t.keysDerived)throw new Error("Group link cannot be released: the in-band handshake has not completed");if(!this.encryptionKey||!this.macKey)throw new Error("Group link cannot be released: session keys are missing");if(this.isVerified)return!0;this.localVerificationConfirmed=!0,this.remoteVerificationConfirmed=!0,this.bothVerificationsConfirmed=!0,this._setVerifiedStatus(!0,"GROUP_ROSTER_SIGNATURE",{reason:e,timestamp:Date.now()}),this._enforceVerificationGate("group_link_release",!1),this.onStatusChange?.("verified");try{this.processMessageQueue()}catch{}return!0}_createFileMessageAAD(e,t=null){if(typeof this._createMessageAAD!="function")throw new Error("_createMessageAAD method is not available in _createFileMessageAAD. Manager may not be fully initialized.");return this._createMessageAAD(e,t,!0)}_validateFileMessageAAD(e,t=null){try{let r=JSON.parse(e);if(r.sessionId!==(this.currentSession?.sessionId||"unknown"))throw new Error("AAD sessionId mismatch - possible replay attack");if(r.keyFingerprint!==(this.keyFingerprint||"unknown"))throw new Error("AAD keyFingerprint mismatch - possible key substitution attack");if(t&&r.messageType!==t)throw new Error(`AAD messageType mismatch - expected ${t}, got ${r.messageType}`);if(Date.now()-r.timestamp>18e5)throw new Error("AAD timestamp too old - possible replay attack");return r}catch(r){throw this._secureLog("error","AAD validation failed",{error:r.message,aadLength:typeof e=="string"?e.length:0}),new Error(`AAD validation failed: ${r.message}`)}}_validateIncomingSequenceNumber(e,t="unknown"){try{if(!this.replayProtectionEnabled)return!0;if(typeof e!="number"||!Number.isFinite(e))return this._secureLog("warn","Missing or non-numeric sequence number - rejecting",{receivedType:typeof e,context:t,timestamp:Date.now()}),!1;if(e<this.expectedSequenceNumber-this.replayWindowSize)return this._secureLog("warn","Sequence number too old - possible replay attack",{received:e,expected:this.expectedSequenceNumber,context:t,timestamp:Date.now()}),!1;if(e>this.expectedSequenceNumber+this.maxSequenceGap)return this._secureLog("warn","Sequence number gap too large - possible DoS attack",{received:e,expected:this.expectedSequenceNumber,gap:e-this.expectedSequenceNumber,context:t,timestamp:Date.now()}),!1;if(this.replayWindow.has(e))return this._secureLog("warn","Duplicate sequence number detected - replay attack",{received:e,context:t,timestamp:Date.now()}),!1;if(this.replayWindow.add(e),this.replayWindow.size>this.replayWindowSize){let r=Math.min(...this.replayWindow);this.replayWindow.delete(r)}if(e===this.expectedSequenceNumber)for(this.expectedSequenceNumber++;this.replayWindow.has(this.expectedSequenceNumber-this.replayWindowSize-1);)this.replayWindow.delete(this.expectedSequenceNumber-this.replayWindowSize-1);return this._secureLog("debug","Sequence number validation successful",{received:e,expected:this.expectedSequenceNumber,context:t,timestamp:Date.now()}),!0}catch(r){return this._secureLog("error","Sequence number validation failed",{error:r.message,context:t,timestamp:Date.now()}),!1}}_validateMessageAAD(e,t=null){try{let r=JSON.parse(e);if(r.sessionId!==(this.currentSession?.sessionId||"unknown"))throw new Error("AAD sessionId mismatch - possible replay attack");if(r.keyFingerprint!==(this.keyFingerprint||"unknown"))throw new Error("AAD keyFingerprint mismatch - possible key substitution attack");if(!this._validateIncomingSequenceNumber(r.sequenceNumber,r.messageType))throw new Error("Sequence number validation failed - possible replay or DoS attack");if(t&&r.messageType!==t)throw new Error(`AAD messageType mismatch - expected ${t}, got ${r.messageType}`);return r}catch(r){throw this._secureLog("error","AAD validation failed",{error:r.message,aadLength:typeof e=="string"?e.length:0}),new Error(`AAD validation failed: ${r.message}`)}}getAntiReplayStatus(){let e={replayProtectionEnabled:this.replayProtectionEnabled,replayWindowSize:this.replayWindowSize,currentReplayWindowSize:this.replayWindow.size,sequenceNumber:this.sequenceNumber,expectedSequenceNumber:this.expectedSequenceNumber,maxSequenceGap:this.maxSequenceGap,replayWindowEntries:Array.from(this.replayWindow).sort((t,r)=>t-r)};return this._secureLog("info","Anti-replay status retrieved",e),e}configureAntiReplayProtection(e){try{if(e.windowSize!==void 0){if(e.windowSize<16||e.windowSize>1024)throw new Error("Replay window size must be between 16 and 1024");this.replayWindowSize=e.windowSize}if(e.maxGap!==void 0){if(e.maxGap<10||e.maxGap>1e3)throw new Error("Max sequence gap must be between 10 and 1000");this.maxSequenceGap=e.maxGap}return e.enabled!==void 0&&(this.replayProtectionEnabled=e.enabled),this._secureLog("info","Anti-replay protection configured",e),!0}catch(t){return this._secureLog("error","Failed to configure anti-replay protection",{error:t.message}),!1}}async getRealSecurityLevel(){try{let e={ecdhKeyExchange:!!this.ecdhKeyPair,ecdsaSignatures:!!this.ecdsaKeyPair,aesEncryption:!!this.encryptionKey,messageIntegrity:!!this.hmacKey,replayProtection:this.replayProtectionEnabled,dtlsFingerprint:!!(this.expectedDTLSFingerprint&&this._peerDTLSFingerprint),sasCode:!!this.verificationCode&&this.localVerificationConfirmed===!0,metadataProtection:!0,trafficObfuscation:!0,perfectForwardSecrecy:this.isRatchetActive?.()===!0,rateLimiter:!0,connectionId:this.connectionId,keyFingerprint:this.keyFingerprint,currentSecurityLevel:"maximum",timestamp:Date.now()},t=await this.calculateAndReportSecurityLevel();return t?{...t,...e}:{...e,level:"INITIALIZING",score:0,isRealData:!1}}catch(e){throw this._secureLog("error","Failed to calculate real security level",{error:e.message}),e}}_extractDTLSFingerprintFromSDP(e){try{if(!e||typeof e!="string")throw new Error("Invalid SDP provided");let t=/a=fingerprint:([a-zA-Z0-9-]+)\s+([A-Fa-f0-9:]+)/g,r=[],i;for(;(i=t.exec(e))!==null;)r.push({algorithm:i[1].toLowerCase(),fingerprint:i[2].trim()});if(r.length===0){let a=/fingerprint\s*=\s*([a-zA-Z0-9-]+)\s+([A-Fa-f0-9:]+)/gi;for(;(i=a.exec(e))!==null;)r.push({algorithm:i[1].toLowerCase(),fingerprint:i[2].trim()})}if(r.length===0)throw this._secureLog("warn","No DTLS fingerprints found in SDP - this may be normal for some WebRTC implementations",{sdpLength:e.length,sdpPreview:e.substring(0,200)+"..."}),new Error("No DTLS fingerprints found in SDP");return[...r].sort((a,o)=>{let c=a.algorithm==="sha-256",d=o.algorithm==="sha-256";if(c!==d)return c?-1:1;let u=a.algorithm.localeCompare(o.algorithm);return u!==0?u:a.fingerprint.localeCompare(o.fingerprint)})[0].fingerprint}catch(t){throw this._secureLog("error","Failed to extract DTLS fingerprint from SDP",{error:t.message,sdpLength:e?.length||0}),new Error(`DTLS fingerprint extraction failed: ${t.message}`)}}async _validateDTLSFingerprint(e,t,r="unknown"){try{if(!e||!t)throw new Error("Missing fingerprint for validation");let i=e.toLowerCase().replace(/:/g,""),n=t.toLowerCase().replace(/:/g,"");if(i!==n)throw this._secureLog("error","DTLS fingerprint mismatch - possible MITM attack",{context:r,timestamp:Date.now()}),new Error(`DTLS fingerprint mismatch - possible MITM attack in ${r}`);return this._secureLog("info","DTLS fingerprint validation successful",{context:r,timestamp:Date.now()}),!0}catch(i){throw this._secureLog("error","DTLS fingerprint validation failed",{error:i.message,context:r}),i}}async _computeSAS(e,t,r){try{if(!e){let b=[];throw e||b.push("keyMaterialRaw"),new Error(`Missing required parameters for SAS computation: ${b.join(", ")}`)}let i=new TextEncoder,n=(b,w)=>{if(typeof b!="string"||b.trim().length===0)throw new Error(`Security error: ${w} must be a non-empty DTLS fingerprint string for SAS computation`);return b.trim().toLowerCase()},a=n(t,"localFP"),o=n(r,"remoteFP"),c=i.encode("webrtc-sas|"+[a,o].sort().join("|")),d;if(e instanceof ArrayBuffer)d=e;else if(e instanceof Uint8Array)d=e.buffer;else if(typeof e=="string"){let b=e.replace(/:/g,"").replace(/\s/g,""),w=new Uint8Array(b.length/2);for(let M=0;M<b.length;M+=2)w[M/2]=parseInt(b.substr(M,2),16);d=w.buffer}else throw new Error("Invalid keyMaterialRaw type");let u=await crypto.subtle.importKey("raw",d,"HKDF",!1,["deriveBits"]),h=i.encode("p2p-sas-v1"),m=await crypto.subtle.deriveBits({name:"HKDF",hash:"SHA-256",salt:c,info:h},u,64),p=new DataView(m),S=(p.getUint32(0)^p.getUint32(4))>>>0,g=String(S%1e7).padStart(7,"0");return this._secureLog("info","SAS code computed successfully",{localFP:a.substring(0,16)+"...",remoteFP:o.substring(0,16)+"...",sasLength:g.length,timestamp:Date.now()}),g}catch(i){throw this._secureLog("error","SAS computation failed",{error:i.message,keyMaterialType:typeof e,hasLocalFP:!!t,hasRemoteFP:!!r,timestamp:Date.now()}),new Error(`SAS computation failed: ${i.message}`)}}_dispatchAppEvent(e){if(!this._emitGlobalEvents)return!1;try{return document.dispatchEvent(e)}catch{return!1}}_isSbq2(){return this._handshakeMode==="sbq2"}_latchHandshakeMode(e){if(this._handshakeMode&&this._handshakeMode!==e)throw new Error(`handshake format cannot change mid-session (${this._handshakeMode} -> ${e})`);this._handshakeMode=e}_sbq2State(){return this._sbq2||(this._sbq2={role:null,localDescriptor:null,remoteDescriptor:null,localBlob:null,remoteBlob:null,remoteCommitment:null,transcript:null,peerEcdhKey:null,peerEcdsaKey:null,blobSent:!1,proofSent:!1,proofVerified:!1,keysDerived:!1,pendingProof:null,completed:!1,timer:null,startedAt:0}),this._sbq2}_sbq2Abort(e,t){let r=this._sbq2;r?.timer&&(clearTimeout(r.timer),r.timer=null),this._secureLog("error","SBQ2 handshake aborted",{code:e});try{this.deliverMessageToUI(t,"system")}catch{}try{this.onStatusChange?.("failed")}catch{}try{this.disconnect()}catch{}}async _exportSpki(e){return new Uint8Array(await crypto.subtle.exportKey("spki",e))}async _sbq2BuildLocalBlob(e){if(!this.ecdhKeyPair?.publicKey||!this.ecdsaKeyPair?.publicKey)throw new Error("SBQ2: key pairs are not ready");let t=Cn({role:e,ecdhSpki:await this._exportSpki(this.ecdhKeyPair.publicKey),ecdsaSpki:await this._exportSpki(this.ecdsaKeyPair.publicKey)}),i=await Ht(async a=>new Uint8Array(await crypto.subtle.digest("SHA-256",a)),t),n=this._sbq2State();return n.role=e,n.localBlob=t,{blob:t,commitment:i}}async _sbq2BuildDescriptor(e,{bindingTag:t=null,lifetimeMs:r=600*1e3}={}){let i=this.peerConnection?.localDescription?.sdp;if(!i)throw new Error("SBQ2: no local description to encode");let n=e===de.OFFER?ve.OFFER:ve.ANSWER,{commitment:a}=await this._sbq2BuildLocalBlob(n),o=bn(i),c=_n({type:e,expiresAtMs:Date.now()+r,sdpFields:{...o,candidates:Pr(o.candidates)},commitment:a,...e===de.ANSWER?{bindingTag:t}:{}}),d=this._sbq2State();return d.localDescriptor=c,this._secureLog("info","SBQ2 descriptor built",{type:e===de.OFFER?"offer":"answer",bytes:c.length,candidates:Pr(o.candidates).length}),{bytes:c,text:vn(c)}}_sbq2AdoptRemoteDescriptor(e,t){let r=Fr(e);if(r.type!==t)throw new Error(`expected an ${t===de.OFFER?"invitation":"answer"}, got the other kind`);if(!r.commitment)throw new Error("the invitation carries no key commitment");let i=this._sbq2State();return i.remoteDescriptor=e,i.remoteCommitment=r.commitment,r}async _runSbq2KeyExchange(){let e=this._sbq2State();if(!(e.completed||e.blobSent)){if(e.startedAt=Date.now(),!e.localBlob||!e.localDescriptor||!e.remoteDescriptor||!e.remoteCommitment){this._sbq2Abort("incomplete_state","The secure handshake could not start because the connection setup is incomplete. Please start a new invitation.");return}e.timer=setTimeout(()=>{e.completed||this._sbq2Abort("timeout","The other side did not complete the secure handshake in time. Please try connecting again.")},s.SBQ2_KEY_EXCHANGE_TIMEOUT_MS);try{this.dataChannel.send(JSON.stringify({type:s.MESSAGE_TYPES.KEY_BLOB,v:2,blob:window.EnhancedSecureCryptoUtils.arrayBufferToBase64(e.localBlob.buffer.slice(e.localBlob.byteOffset,e.localBlob.byteOffset+e.localBlob.byteLength))})),e.blobSent=!0,this._secureLog("info","SBQ2 key blob sent",{bytes:e.localBlob.length})}catch{this._sbq2Abort("blob_send_failed","The secure handshake could not be sent. Please try connecting again.")}}}async _sbq2HandleHandshakeFrame(e){let t=s.MESSAGE_TYPES,r=this._sbq2State();if(!this._isSbq2()){this._secureLog("error","Rejected SBQ2 handshake frame on a non-SBQ2 session",{messageType:e?.type});return}try{if(e.type===t.KEY_BLOB){if(r.remoteBlob){this._sbq2Abort("duplicate_blob","The secure handshake was sent twice. The connection has been closed for safety.");return}let i=new Uint8Array(window.EnhancedSecureCryptoUtils.base64ToArrayBuffer(String(e.blob||"")));await Mn(crypto.subtle,i,r.remoteCommitment);let n=kn(i),a=r.role===ve.OFFER?ve.ANSWER:ve.OFFER;if(n.role!==a){this._sbq2Abort("role_mismatch","The other side sent the wrong kind of handshake. The connection has been closed for safety.");return}r.remoteBlob=i,r.peerEcdhKey=await crypto.subtle.importKey("spki",n.ecdhSpki,{name:"ECDH",namedCurve:"P-384"},!1,[]),r.peerEcdsaKey=await crypto.subtle.importKey("spki",n.ecdsaSpki,{name:"ECDSA",namedCurve:"P-384"},!1,["verify"]),await this._sbq2CompleteExchange();return}if(e.type===t.KEY_PROOF){let i=new Uint8Array(window.EnhancedSecureCryptoUtils.base64ToArrayBuffer(String(e.sig||"")));if(!r.transcript||!r.peerEcdsaKey){r.pendingProof=i;return}await this._sbq2VerifyProof(i);return}}catch(i){let n=i?.code||"handshake_failed",a=n==="commitment_mismatch"?"The key material does not match the invitation you scanned. This can mean someone tampered with the connection, so it has been closed.":"The secure handshake failed. The connection has been closed for safety.";this._sbq2Abort(n,a)}}async _sbq2CompleteExchange(){let e=this._sbq2State();if(e.keysDerived||!e.remoteBlob||!e.localBlob)return;this._peerSupportsRatchet=!0;let t=e.role===ve.OFFER;e.transcript=An({offerDescriptor:t?e.localDescriptor:e.remoteDescriptor,answerDescriptor:t?e.remoteDescriptor:e.localDescriptor,offerBlob:t?e.localBlob:e.remoteBlob,answerBlob:t?e.remoteBlob:e.localBlob}),this.sessionSalt=await xn(crypto.subtle,e.transcript),this.peerPublicKey=e.peerEcdhKey,this.peerECDHPublicKey=e.peerEcdhKey;let r=await window.EnhancedSecureCryptoUtils.deriveSharedKeys(this.ecdhKeyPair.privateKey,e.peerEcdhKey,this.sessionSalt);await this._setEncryptionKeys(r.messageKey,r.macKey,r.metadataKey,r.fingerprint),await this._initializeRatchet(r,t),e.keysDerived=!0;let i=new Uint8Array(await crypto.subtle.sign({name:"ECDSA",hash:"SHA-384"},this.ecdsaKeyPair.privateKey,Vr(e.transcript)));if(this.dataChannel.send(JSON.stringify({type:s.MESSAGE_TYPES.KEY_PROOF,sig:window.EnhancedSecureCryptoUtils.arrayBufferToBase64(i.buffer)})),e.proofSent=!0,e.pendingProof){let n=e.pendingProof;e.pendingProof=null,await this._sbq2VerifyProof(n)}}async _sbq2VerifyProof(e){let t=this._sbq2State();if(t.proofVerified)return;if(!await crypto.subtle.verify({name:"ECDSA",hash:"SHA-384"},t.peerEcdsaKey,e,Vr(t.transcript))){this._sbq2Abort("bad_proof","The other side could not prove it owns its identity key. The connection has been closed for safety.");return}t.proofVerified=!0,this.verificationCode=await Rn(crypto.subtle,{ecdhPrivateKey:this.ecdhKeyPair.privateKey,peerEcdhPublicKey:t.peerEcdhKey,transcript:t.transcript});let i=this.expectedDTLSFingerprint,n=this._peerDTLSFingerprint;i&&n&&this._setSASMaterialReady(i,n),t.completed=!0,t.timer&&(clearTimeout(t.timer),t.timer=null),this.securityFeatures.hasMutualAuth=!0,this.securityFeatures.hasMetadataProtection=!0,this.securityFeatures.hasEnhancedReplayProtection=!0,this._secureLog("info","SBQ2 in-band key exchange complete",{elapsedMs:Date.now()-t.startedAt,ratchetActive:this.isRatchetActive?.()===!0});try{this.onKeyExchange?.(this.keyFingerprint)}catch{}this._notifyVerificationReadyIfPossible(),this.initiateVerification()}_decodeKeyFingerprint(e){try{if(!e||typeof e!="string")throw new Error("Invalid hex string provided");return window.EnhancedSecureCryptoUtils.hexToUint8Array(e)}catch(t){throw this._secureLog("error","Key fingerprint decoding failed",{error:t.message,inputType:typeof e,inputLength:e?.length||0}),new Error(`Key fingerprint decoding failed: ${t.message}`)}}_emergencyWipeOnFingerprintMismatch(e="DTLS fingerprint mismatch"){try{this._secureLog("error","\u{1F6A8} EMERGENCY: Initiating security wipe due to fingerprint mismatch",{reason:e,timestamp:Date.now()}),this._secureWipeKeys(),this._secureWipeMemory(this.encryptionKey,"emergency_wipe"),this._secureWipeMemory(this.macKey,"emergency_wipe"),this._secureWipeMemory(this.metadataKey,"emergency_wipe"),this._wipeEphemeralKeys(),this._hardWipeOldKeys(),this.isVerified=null,this.verificationCode=null,this.keyFingerprint=null,this.connectionId=null,this.expectedDTLSFingerprint=null,this._peerDTLSFingerprint=null,this.disconnect(),this.deliverMessageToUI("\u{1F6A8} SECURITY BREACH: Connection terminated due to fingerprint mismatch. Possible MITM attack detected!","system")}catch(t){this._secureLog("error","Failed to perform emergency wipe",{error:t.message})}}getCurrentDTLSFingerprint(){try{if(!this.expectedDTLSFingerprint)throw new Error("No DTLS fingerprint available - connection not established");return this.expectedDTLSFingerprint}catch(e){throw this._secureLog("error","Failed to get current DTLS fingerprint",{error:e.message}),e}}disableStrictDTLSValidation(){this.strictDTLSValidation=!1,this._secureLog("warn","\u26A0\uFE0F Strict DTLS validation disabled - security reduced",{timestamp:Date.now()}),this.deliverMessageToUI("\u26A0\uFE0F DTLS validation disabled for debugging","system")}enableStrictDTLSValidation(){this.strictDTLSValidation=!0,this._secureLog("info","\u2705 Strict DTLS validation re-enabled",{timestamp:Date.now()}),this.deliverMessageToUI("\u2705 DTLS validation re-enabled","system")}async _initializeRatchet(e,t){let r=e?.ratchetRoot;if(!r)return!1;if(!this._peerSupportsRatchet)return this._secureLog("warn","Peer did not advertise Double Ratchet \u2014 falling back to static session keys",{localVersion:s.RATCHET_VERSION}),window.EnhancedSecureCryptoUtils.zeroizeBuffer(r),!1;try{let i=this.peerPublicKey||this.peerECDHPublicKey;if(!i||!this.ecdhKeyPair?.privateKey)throw new Error("handshake ECDH keys unavailable");let n=new zt;return await n.init({sharedSecret:r,sessionSalt:new Uint8Array(this.sessionSalt||[]),selfPrivateKey:this.ecdhKeyPair.privateKey,remotePublicKey:i,isInitiator:t}),this._ratchet=n,this.securityFeatures.hasPFS=!0,this._secureLog("info","\u{1F510} Double Ratchet active \u2014 per-message forward secrecy enabled",{role:t?"initiator":"responder"}),!0}catch(i){return this._ratchet=null,this.securityFeatures.hasPFS=!1,this._secureLog("error","Double Ratchet initialisation failed \u2014 continuing with static session keys",{errorType:i?.constructor?.name||"Unknown"}),!1}finally{window.EnhancedSecureCryptoUtils.zeroizeBuffer(r)}}isRatchetActive(){return!!this._ratchet?.isInitialised}async _generateEphemeralECDHKeys(){try{this._secureLog("info","\u{1F511} Generating ephemeral ECDH keys for PFS",{sessionStartTime:this.sessionStartTime,timestamp:Date.now()});let e=await window.EnhancedSecureCryptoUtils.generateECDHKeyPair();if(!e||!this._validateKeyPairConstantTime(e))throw new Error("Ephemeral ECDH key pair validation failed");let t=this.currentSession?.sessionId||`session_${Date.now()}`;return this.ephemeralKeyPairs.set(t,{keyPair:e,timestamp:Date.now(),sessionId:t}),this._secureLog("info","\u2705 Ephemeral ECDH keys generated for PFS",{timestamp:Date.now()}),e}catch(e){throw this._secureLog("error","\u274C Failed to generate ephemeral ECDH keys",{error:e.message}),new Error(`Ephemeral key generation failed: ${e.message}`)}}async _hardWipeOldKeys(){try{this._secureLog("info","\u{1F9F9} Performing hard wipe of old keys for PFS",{oldKeysCount:this.oldKeys.size,timestamp:Date.now()});for(let[e,t]of this.oldKeys.entries())t.encryptionKey&&this._secureWipeMemory(t.encryptionKey,"pfs_key_wipe"),t.macKey&&this._secureWipeMemory(t.macKey,"pfs_key_wipe"),t.metadataKey&&this._secureWipeMemory(t.metadataKey,"pfs_key_wipe"),t.encryptionKey=null,t.macKey=null,t.metadataKey=null,t.keyFingerprint=null;this.oldKeys.clear(),await this._performNaturalCleanup(),this._secureLog("info","\u2705 Hard wipe of old keys completed for PFS",{timestamp:Date.now()})}catch(e){this._secureLog("error","\u274C Failed to perform hard wipe of old keys",{error:e.message})}}async _wipeEphemeralKeys(){try{this._secureLog("info","\u{1F9F9} Wiping ephemeral keys for PFS",{ephemeralKeysCount:this.ephemeralKeyPairs.size,timestamp:Date.now()});for(let[e,t]of this.ephemeralKeyPairs.entries())t.keyPair?.privateKey&&this._secureWipeMemory(t.keyPair.privateKey,"ephemeral_key_wipe"),t.keyPair?.publicKey&&this._secureWipeMemory(t.keyPair.publicKey,"ephemeral_key_wipe"),t.keyPair=null,t.timestamp=null,t.sessionId=null;this.ephemeralKeyPairs.clear(),await this._performNaturalCleanup(),this._secureLog("info","\u2705 Ephemeral keys wiped for PFS",{timestamp:Date.now()})}catch(e){this._secureLog("error","\u274C Failed to wipe ephemeral keys",{error:e.message})}}async _encryptFileMessage(e,t){try{if(!this.encryptionKey)throw new Error("No encryption key available for file message");let r=typeof e=="string"?e:JSON.stringify(e),n={type:"encrypted_file_message",encryptedData:await window.EnhancedSecureCryptoUtils.encryptDataWithAAD(r,this.encryptionKey,t),aad:t,timestamp:Date.now(),keyFingerprint:this.keyFingerprint};return JSON.stringify(n)}catch(r){throw this._secureLog("error","Failed to encrypt file message",{error:r.message}),new Error(`File message encryption failed: ${r.message}`)}}async _decryptFileMessage(e){try{let t=JSON.parse(e);if(t.type!=="encrypted_file_message")throw new Error("Invalid encrypted file message type");if(t.keyFingerprint!==this.keyFingerprint)throw new Error("Key fingerprint mismatch in encrypted file message");let r=this._validateMessageAAD(t.aad,"file_message");if(!this.encryptionKey)throw new Error("No encryption key available for file message decryption");return{decryptedData:await window.EnhancedSecureCryptoUtils.decryptDataWithAAD(t.encryptedData,this.encryptionKey,t.aad),aad:r}}catch(t){throw this._secureLog("error","Failed to decrypt file message",{error:t.message}),new Error(`File message decryption failed: ${t.message}`)}}_validateEncryptionKeys(e=!0){let t=!!(this.encryptionKey&&this.macKey&&this.metadataKey);if(!t&&e)throw new Error("Encryption keys not initialized");return t}async _tryReinitializeEncryptionKeys(){try{if(this.encryptionKey&&this.macKey&&this.metadataKey)return!0;let e=!!(this.ecdhKeyPair?.privateKey&&(this.peerPublicKey||this.peerECDHPublicKey)),t=this.peerPublicKey||this.peerECDHPublicKey;if(!e||!t||!this.sessionSalt)return!1;let r=await window.EnhancedSecureCryptoUtils.deriveSharedKeys(this.ecdhKeyPair.privateKey,t,this.sessionSalt);return await this._setEncryptionKeys(r.messageKey,r.macKey,r.metadataKey,r.fingerprint),!!(this.encryptionKey&&this.macKey&&this.metadataKey)}catch(e){return this._secureLog("error","Failed to reinitialize encryption keys",{error:e.message}),!1}}_isFileMessage(e){if(typeof e=="string")try{let t=JSON.parse(e);return t.type&&t.type.startsWith("file_")}catch{return!1}return typeof e=="object"&&e.type?e.type.startsWith("file_"):!1}_isSystemMessage(e){let t=[s.MESSAGE_TYPES.HEARTBEAT,s.MESSAGE_TYPES.VERIFICATION,s.MESSAGE_TYPES.VERIFICATION_RESPONSE,s.MESSAGE_TYPES.VERIFICATION_CONFIRMED,s.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,s.MESSAGE_TYPES.PEER_DISCONNECT,s.MESSAGE_TYPES.SECURITY_UPGRADE,s.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,s.MESSAGE_TYPES.KEY_ROTATION_READY];if(typeof e=="string")try{let r=JSON.parse(e);return t.includes(r.type)}catch{return!1}return typeof e=="object"&&e.type?t.includes(e.type):!1}_isFakeMessage(e){if(typeof e=="string")try{let t=JSON.parse(e);return t.type===s.MESSAGE_TYPES.FAKE||t.isFakeTraffic===!0}catch{return!1}return typeof e=="object"&&e!==null?e.type===s.MESSAGE_TYPES.FAKE||e.isFakeTraffic===!0:!1}_withErrorHandling(e,t,r=null){try{return e()}catch(i){return this._debugMode&&this._secureLog("error","\u274C ${errorMessage}:",{errorType:i?.constructor?.name||"Unknown"}),r}}async _withAsyncErrorHandling(e,t,r=null){try{return await e()}catch(i){return this._debugMode&&this._secureLog("error","\u274C ${errorMessage}:",{errorType:i?.constructor?.name||"Unknown"}),r}}_getMessageType(e){if(typeof e=="string")try{return JSON.parse(e).type||null}catch{return null}return typeof e=="object"&&e!==null&&e.type||null}_resetNotificationFlags(){this.lastSecurityLevelNotification=null,this.verificationNotificationSent=!1,this.verificationInitiationSent=!1,this._verificationUiOpened=!1,this._sasLocalFingerprint=null,this._sasRemoteFingerprint=null,this.disconnectNotificationSent=!1,this.reconnectionFailedNotificationSent=!1,this.peerDisconnectNotificationSent=!1,this.connectionClosedNotificationSent=!1,this.fakeTrafficDisabledNotificationSent=!1,this.advancedFeaturesDisabledNotificationSent=!1,this.securityUpgradeNotificationSent=!1,this.lastSecurityUpgradeStage=null,this.securityCalculationNotificationSent=!1,this.lastSecurityCalculationLevel=null}_isFilteredMessage(e){return Object.values(s.FILTERED_RESULTS).includes(e)}_cleanupLogs(){this._logCounts.size>500&&(this._logCounts.clear(),this._secureLog("debug","\u{1F9F9} Log counts cleared due to size limit"));let e=Date.now(),t=3e5,r=0;for(let[i,n]of this._logCounts.entries())n>10&&r++;r>20&&(this._logCounts.clear(),this._secureLog("warn","\u{1F6A8} Emergency log cleanup due to suspicious patterns")),this._logSecurityViolations>0&&r<5&&(this._logSecurityViolations=Math.max(0,this._logSecurityViolations-1)),(!this._lastIVCleanupTime||Date.now()-this._lastIVCleanupTime>3e5)&&(this._cleanupOldIVs(),this._lastIVCleanupTime=Date.now()),(!this._secureMemoryManager.memoryStats.lastCleanup||Date.now()-this._secureMemoryManager.memoryStats.lastCleanup>6e5)&&(this._performPeriodicMemoryCleanup().catch(i=>{this._secureLog("error","Periodic cleanup failed",{errorType:i?.constructor?.name||"Unknown"})}),this._secureMemoryManager.memoryStats.lastCleanup=Date.now())}_getLoggingStats(){let e={isProductionMode:this._isProductionMode,debugMode:this._debugMode,currentLogLevel:this._currentLogLevel,logCountsSize:this._logCounts.size,maxLogCount:this._maxLogCount,securityViolations:this._logSecurityViolations||0,maxSecurityViolations:this._maxLogSecurityViolations||3,systemStatus:this._currentLogLevel===-1?"DISABLED":"ACTIVE"},t={};for(let[r,i]of Object.entries(e))typeof i=="string"&&this._containsSensitiveContent(i)?t[r]="[SENSITIVE_DATA_REDACTED]":t[r]=i;return t}async _emergencyDisableLogging(){this._currentLogLevel=-1,this._logCounts.clear(),this._logSecurityViolations&&(this._logSecurityViolations=0),this._secureLog=()=>{arguments[0]==="error"&&this._originalConsole?.error&&this._originalConsole.error("\u{1F6A8} SECURITY: Logging system disabled - potential data exposure prevented")},this._originalSanitizeString=this._sanitizeString,this._originalSanitizeLogData=this._sanitizeLogData,this._originalAuditLogMessage=this._auditLogMessage,this._originalContainsSensitiveContent=this._containsSensitiveContent,this._sanitizeString=()=>"[LOGGING_DISABLED]",this._sanitizeLogData=()=>({error:"LOGGING_DISABLED"}),this._auditLogMessage=()=>!1,this._containsSensitiveContent=()=>!0,await this._performNaturalCleanup(),this._originalConsole?.error?.("\u{1F6A8} CRITICAL: Secure logging system disabled due to potential data exposure")}_resetLoggingSystem(){this._secureLog("info","\u{1F527} Resetting logging system after emergency shutdown"),this._sanitizeString=this._originalSanitizeString||(e=>e),this._sanitizeLogData=this._originalSanitizeLogData||(e=>e),this._auditLogMessage=this._originalAuditLogMessage||(()=>!0),this._containsSensitiveContent=this._originalContainsSensitiveContent||(()=>!1),this._logSecurityViolations=0,this._secureLog("info","\u2705 Logging system reset successfully")}_auditLogMessage(e,t){if(!t||typeof t!="object")return!0;let r=JSON.stringify(t);if(this._containsSensitiveContent(e))return this._emergencyDisableLogging(),this._originalConsole?.error?.("\u{1F6A8} SECURITY BREACH: Sensitive content detected in log message"),!1;if(this._containsSensitiveContent(r))return this._emergencyDisableLogging(),this._originalConsole?.error?.("\u{1F6A8} SECURITY BREACH: Sensitive content detected in log data"),!1;let i=["secret","token","password","credential","auth","fingerprint","salt","signature","private_key","api_key","private","encryption","mac","metadata","session","jwt","bearer","key","hash","digest","nonce","iv","cipher"],n=r.toLowerCase();for(let a of i)if(n.includes(a)&&!this._safeFieldsWhitelist.has(a))return this._emergencyDisableLogging(),this._originalConsole?.error?.(`\u{1F6A8} SECURITY BREACH: Dangerous pattern detected in log: ${a}`),!1;for(let[a,o]of Object.entries(t))if(typeof o=="string"&&this._hasHighEntropy(o))return this._emergencyDisableLogging(),this._originalConsole?.error?.(`\u{1F6A8} SECURITY BREACH: High entropy value detected in log field: ${a}`),!1;return!0}initializeFileTransfer(){try{if(this._sessionAlive===!1)return;if(this._secureLog("info","\u{1F527} Initializing Enhanced Secure File Transfer system..."),this.fileTransferSystem){this._secureLog("info","\u2705 File transfer system already initialized");return}if(!!!(this.dataChannel&&this.dataChannel.readyState==="open")){if(this._secureLog("warn","\u26A0\uFE0F Data channel not open, deferring file transfer initialization"),this.dataChannel){let i=()=>{this._secureLog("info","\u{1F504} DataChannel opened, initializing file transfer..."),this.initializeFileTransfer()};this.dataChannel.addEventListener("open",i,{once:!0})}return}if(!this.isVerified){this._secureLog("warn","\u26A0\uFE0F Connection not verified yet, deferring file transfer initialization"),this._scheduleFileTransferInitRetry(500);return}if(this.fileTransferSystem&&(this._secureLog("info","\u{1F9F9} Cleaning up existing file transfer system"),this.fileTransferSystem.cleanup(),this.fileTransferSystem=null),!this.encryptionKey||!this.macKey){this._secureLog("warn","\u26A0\uFE0F Encryption keys not ready, deferring file transfer initialization"),this._scheduleFileTransferInitRetry(1e3);return}let t=i=>{try{this._secureLog("info","\u{1F3C1} Sender transfer summary",{summary:i}),this.onFileProgress&&this.onFileProgress({type:"complete",...i})}catch(n){this._secureLog("warn","\u26A0\uFE0F onComplete handler failed:",{details:n.message})}};this.fileTransferSystem=new je(this,this.onFileProgress||null,t,this.onFileError||null,this.onFileReceived||null,this.onIncomingFileRequest||null),this._fileTransferActive=!0,this._secureLog("info","\u2705 Enhanced Secure File Transfer system initialized successfully");let r=this.fileTransferSystem.getSystemStatus();this._secureLog("info","\u{1F50D} File transfer system status after init",{status:r})}catch(e){this._secureLog("error","\u274C Failed to initialize file transfer system",{errorType:e.constructor.name}),this.fileTransferSystem=null,this._fileTransferActive=!1}}_scheduleFileTransferInitRetry(e){if(this._sessionAlive===!1)return null;this._fileTransferInitRetryTimers||(this._fileTransferInitRetryTimers=new Set);let t=this._trackActiveTimer(setTimeout(()=>{this._fileTransferInitRetryTimers.delete(t),this._untrackActiveTimer(t),this._sessionAlive!==!1&&this.initializeFileTransfer()},e));return this._fileTransferInitRetryTimers.add(t),t}async initializeEnhancedSecurity(){try{await this.generateNestedEncryptionKey(),this.decoyChannelConfig.enabled&&this.initializeDecoyChannels(),this.fakeTrafficConfig.enabled&&this.startFakeTrafficGeneration()}catch(e){this._secureLog("error","\u274C Failed to initialize enhanced security",{errorType:e.constructor.name})}}getSafeRandomInt(e,t){if(!Number.isInteger(e)||!Number.isInteger(t))throw new Error("getSafeRandomInt requires integer min and max");if(e>=t)throw new Error("min must be less than max");let r=t-e+1,i=Math.ceil(Math.log2(r)),n=Math.ceil(i/8),a=(1<<i)-1,o;do{let c=crypto.getRandomValues(new Uint8Array(n));o=0;for(let d=0;d<n;d++)o=o*256+c[d];o=o&a}while(o>=r);return e+o}getSafeRandomFloat(e,t,r=1e3){if(typeof e!="number"||typeof t!="number")throw new Error("getSafeRandomFloat requires numeric min and max");if(e>=t)throw new Error("minFloat must be less than maxFloat");let i=this.getSafeRandomInt(0,r),n=(t-e)/r;return e+i*n}generateFingerprintMask(){return{timingOffset:this.getSafeRandomInt(0,1500),sizeVariation:this.getSafeRandomFloat(.75,1.25,1e3),noisePattern:Array.from(crypto.getRandomValues(new Uint8Array(64))),headerVariations:["X-Client-Version","X-Session-ID","X-Request-ID","X-Timestamp","X-Signature","X-Secure","X-Encrypted","X-Protected","X-Safe","X-Anonymous","X-Private"],noiseIntensity:this.getSafeRandomInt(50,150),sizeMultiplier:this.getSafeRandomFloat(.75,1.25,1e3),timingVariation:this.getSafeRandomInt(100,1100)}}configureSecurityForSession(){this._secureLog("info","\u{1F527} Configuring security - all features enabled by default"),this.sessionConstraints={},Object.keys(this.securityFeatures).forEach(e=>{this.sessionConstraints[e]=!0}),this.applySessionConstraints(),this._secureLog("info","\u2705 Security configured - all features enabled",{constraints:this.sessionConstraints}),this._validateCryptographicSecurity()||(this._secureLog("error","\u{1F6A8} CRITICAL: Cryptographic security validation failed after session configuration"),this.onStatusChange&&this.onStatusChange("security_breach",{type:"crypto_security_failure",message:"Cryptographic security validation failed after session configuration"})),this.notifySecurityLevel(),setTimeout(()=>{this.calculateAndReportSecurityLevel()},s.TIMEOUTS.SECURITY_CALC_DELAY)}applySessionConstraints(){this.sessionConstraints&&(Object.keys(this.sessionConstraints).forEach(e=>{switch(this.securityFeatures[e]=!0,e){case"hasFakeTraffic":this.fakeTrafficConfig.enabled=!0,this.isConnected()&&this.startFakeTrafficGeneration();break;case"hasDecoyChannels":this.decoyChannelConfig.enabled=!0,this.isConnected()&&this.initializeDecoyChannels();break;case"hasPacketReordering":this.reorderingConfig.enabled=!0;break;case"hasAntiFingerprinting":this.antiFingerprintingConfig.enabled=!0;break;case"hasMessageChunking":this.chunkingConfig.enabled=!0;break}}),this._secureLog("info","\u2705 All security features enabled by default",{constraints:this.sessionConstraints,currentFeatures:this.securityFeatures}))}_sanitizeIncomingChatMessage(e){return typeof e!="string"?e:window.EnhancedSecureCryptoUtils.sanitizeMessage(e)}deliverMessageToUI(e,t="received",r=null){try{if(this._secureLog("debug","\u{1F4E4} deliverMessageToUI called",{message:e,type:t,messageType:typeof e,hasOnMessage:!!this.onMessage}),typeof e=="object"&&e.type&&[s.MESSAGE_TYPES.FILE_TRANSFER_START,s.MESSAGE_TYPES.FILE_TRANSFER_RESPONSE,s.MESSAGE_TYPES.FILE_CHUNK,s.MESSAGE_TYPES.CHUNK_CONFIRMATION,s.MESSAGE_TYPES.FILE_TRANSFER_COMPLETE,s.MESSAGE_TYPES.FILE_TRANSFER_ERROR,s.MESSAGE_TYPES.HEARTBEAT,s.MESSAGE_TYPES.VERIFICATION,s.MESSAGE_TYPES.VERIFICATION_RESPONSE,s.MESSAGE_TYPES.VERIFICATION_CONFIRMED,s.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,s.MESSAGE_TYPES.PEER_DISCONNECT,s.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,s.MESSAGE_TYPES.KEY_ROTATION_READY,s.MESSAGE_TYPES.SECURITY_UPGRADE].includes(e.type)){this._debugMode&&this._secureLog("warn",`\u{1F6D1} Blocked system/file message from UI: ${e.type}`);return}if(typeof e=="string"&&e.trim().startsWith("{"))try{let n=JSON.parse(e);if(n.type&&[s.MESSAGE_TYPES.FILE_TRANSFER_START,s.MESSAGE_TYPES.FILE_TRANSFER_RESPONSE,s.MESSAGE_TYPES.FILE_CHUNK,s.MESSAGE_TYPES.CHUNK_CONFIRMATION,s.MESSAGE_TYPES.FILE_TRANSFER_COMPLETE,s.MESSAGE_TYPES.FILE_TRANSFER_ERROR,s.MESSAGE_TYPES.HEARTBEAT,s.MESSAGE_TYPES.VERIFICATION,s.MESSAGE_TYPES.VERIFICATION_RESPONSE,s.MESSAGE_TYPES.VERIFICATION_CONFIRMED,s.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,s.MESSAGE_TYPES.PEER_DISCONNECT,s.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,s.MESSAGE_TYPES.KEY_ROTATION_READY,s.MESSAGE_TYPES.SECURITY_UPGRADE].includes(n.type)){this._debugMode&&this._secureLog("warn",`\u{1F6D1} Blocked system/file message from UI (string): ${n.type}`);return}}catch{}let i=t==="received"?this._sanitizeIncomingChatMessage(e):e;if(this.onMessage){let n=r&&typeof this._sanitizeMessageMeta=="function"?this._sanitizeMessageMeta(r):null;this._secureLog("debug","\u{1F4E4} Calling this.onMessage callback",{message:i,type:t}),this.onMessage(i,t,n||void 0)}else this._secureLog("warn","\u26A0\uFE0F this.onMessage callback is null or undefined")}catch(i){this._secureLog("error","\u274C Failed to deliver message to UI:",{errorType:i?.constructor?.name||"Unknown"})}}notifySecurityLevel(){if(this.lastSecurityLevelNotification==="maximum")return;if(this.lastSecurityLevelNotification="maximum",this.onMessage&&this.deliverMessageToUI("\u{1F6E1}\uFE0F Maximum Security Active - All features enabled","system"),this.onMessage){let t=Object.entries(this.securityFeatures).filter(([r,i])=>i===!0).map(([r])=>r.replace("has","").replace(/([A-Z])/g," $1").trim().toLowerCase()).slice(0,5);this.deliverMessageToUI(`\u{1F527} Active: ${t.join(", ")}...`,"system")}}cleanupDecoyChannels(){for(let[e,t]of this.decoyTimers.entries())clearTimeout(t);this.decoyTimers.clear();for(let[e,t]of this.decoyChannels.entries())t.readyState==="open"&&t.close();this.decoyChannels.clear(),this._secureLog("info","\u{1F9F9} Decoy channels cleaned up")}async generateNestedEncryptionKey(){try{this.nestedEncryptionKey=await crypto.subtle.generateKey({name:"AES-GCM",length:256},!1,["encrypt","decrypt"])}catch(e){throw this._secureLog("error","\u274C Failed to generate nested encryption key:",{errorType:e?.constructor?.name||"Unknown"}),e}}async applyNestedEncryption(e){if(!this.nestedEncryptionKey||!this.securityFeatures.hasNestedEncryption)return e;try{let t=this._generateSecureIV(s.SIZES.NESTED_ENCRYPTION_IV_SIZE,"nestedEncryption"),r=await crypto.subtle.encrypt({name:"AES-GCM",iv:t},this.nestedEncryptionKey,e),i=new Uint8Array(s.SIZES.NESTED_ENCRYPTION_IV_SIZE+r.byteLength);return i.set(t,0),i.set(new Uint8Array(r),s.SIZES.NESTED_ENCRYPTION_IV_SIZE),this._secureLog("debug","\u2705 Nested encryption applied with secure IV",{ivSize:t.length,dataSize:e.byteLength,encryptedSize:r.byteLength}),i.buffer}catch(t){return this._secureLog("error","\u274C Nested encryption failed:",{errorType:t?.constructor?.name||"Unknown",errorMessage:t?.message||"Unknown error"}),t.message.includes("emergency mode")&&(this.securityFeatures.hasNestedEncryption=!1,this._secureLog("warn","\u26A0\uFE0F Nested encryption disabled due to IV emergency mode")),e}}async removeNestedEncryption(e){if(!this.nestedEncryptionKey||!this.securityFeatures.hasNestedEncryption)return e;if(!(e instanceof ArrayBuffer)||e.byteLength<s.SIZES.NESTED_ENCRYPTION_IV_SIZE+16)return this._debugMode&&this._secureLog("debug","\u{1F4DD} Data not encrypted or too short for nested decryption (need IV + minimum encrypted data)"),e;try{let t=new Uint8Array(e),r=t.slice(0,s.SIZES.NESTED_ENCRYPTION_IV_SIZE),i=t.slice(s.SIZES.NESTED_ENCRYPTION_IV_SIZE);return i.length===0?(this._debugMode&&this._secureLog("debug","\u{1F4DD} No encrypted data found"),e):await crypto.subtle.decrypt({name:"AES-GCM",iv:r},this.nestedEncryptionKey,i)}catch(t){return t.name==="OperationError"?this._debugMode&&this._secureLog("debug","\u{1F4DD} Data not encrypted with nested encryption, skipping..."):this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Nested decryption failed:",{details:t.message}),e}}applyPacketPadding(e){if(!this.securityFeatures.hasPacketPadding)return e;try{let t=e.byteLength,r;this.paddingConfig.useRandomPadding?r=Math.floor(Math.random()*(this.paddingConfig.maxPadding-this.paddingConfig.minPadding+1))+this.paddingConfig.minPadding:r=this.paddingConfig.minPadding;let i=crypto.getRandomValues(new Uint8Array(r)),n=new Uint8Array(t+r+4);return new DataView(n.buffer,0,4).setUint32(0,t,!1),n.set(new Uint8Array(e),4),n.set(i,4+t),n.buffer}catch(t){return this._secureLog("error","\u274C Packet padding failed:",{errorType:t?.constructor?.name||"Unknown"}),e}}removePacketPadding(e){if(!this.securityFeatures.hasPacketPadding)return e;try{let t=new Uint8Array(e);if(t.length<5)return this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Data too short for packet padding removal, skipping"),e;let i=new DataView(t.buffer,0,4).getUint32(0,!1);return i<=0||i>t.length-4?(this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Invalid packet padding size, skipping removal"),e):t.slice(4,4+i).buffer}catch(t){return this._debugMode&&this._secureLog("error","\u274C Packet padding removal failed:",{errorType:t?.constructor?.name||"Unknown"}),e}}startFakeTrafficGeneration(){if(!this.fakeTrafficConfig.enabled||!this.isConnected())return;if(this.fakeTrafficTimer){this._secureLog("warn","\u26A0\uFE0F Fake traffic generation already running");return}let e=async()=>{if(!this.isConnected()){this.stopFakeTrafficGeneration();return}try{let n=this.generateFakeMessage();await this.sendFakeMessage(n);let a=this.fakeTrafficConfig.randomDecoyIntervals?this.getUnbiasedRandomInRange(this.fakeTrafficConfig.minInterval,Math.min(this.fakeTrafficConfig.maxInterval,6e4)):this.fakeTrafficConfig.minInterval,o=Math.max(a,s.TIMEOUTS.FAKE_TRAFFIC_MIN_INTERVAL);this.fakeTrafficTimer=setTimeout(e,o)}catch(n){this._debugMode&&this._secureLog("error","\u274C Fake traffic generation failed:",{errorType:n?.constructor?.name||"Unknown"}),this.stopFakeTrafficGeneration()}},t=s.TIMEOUTS.DECOY_INITIAL_DELAY,r=Math.min(this.fakeTrafficConfig.maxInterval,3e4),i=this.getUnbiasedRandomInRange(t,r);this.fakeTrafficTimer=setTimeout(e,i)}stopFakeTrafficGeneration(){this.fakeTrafficTimer&&(clearTimeout(this.fakeTrafficTimer),this.fakeTrafficTimer=null)}generateFakeMessage(){let e=this.getUnbiasedRandomInRange(0,this.fakeTrafficConfig.patterns.length-1),t=this.fakeTrafficConfig.patterns[e],r=this.getUnbiasedRandomInRange(this.fakeTrafficConfig.minSize,this.fakeTrafficConfig.maxSize),i=crypto.getRandomValues(new Uint8Array(r));return{type:s.MESSAGE_TYPES.FAKE,pattern:t,data:Array.from(i).map(n=>n.toString(16).padStart(2,"0")).join(""),timestamp:Date.now(),size:r,isFakeTraffic:!0,source:"fake_traffic_generator",fakeId:crypto.getRandomValues(new Uint32Array(1))[0].toString(36)}}emergencyDisableAdvancedFeatures(){this._secureLog("error","\u{1F6A8} Emergency disabling advanced security features due to errors"),this.securityFeatures.hasNestedEncryption=!1,this.securityFeatures.hasPacketReordering=!1,this.securityFeatures.hasAntiFingerprinting=!1,this.reorderingConfig.enabled=!1,this.antiFingerprintingConfig.enabled=!1,this.packetBuffer.clear(),this.emergencyDisableFakeTraffic(),this._secureLog("info","\u2705 Advanced features disabled, keeping basic encryption"),this.advancedFeaturesDisabledNotificationSent||(this.advancedFeaturesDisabledNotificationSent=!0,this.onMessage&&this.deliverMessageToUI("\u{1F6A8} Advanced security features temporarily disabled due to compatibility issues","system"))}async sendFakeMessage(e){if(this._validateConnection(!1))try{this._secureLog("debug","\u{1F3AD} Sending fake message",{hasPattern:!!e.pattern,sizeRange:e.size>100?"large":"small"});let t=JSON.stringify({...e,type:s.MESSAGE_TYPES.FAKE,isFakeTraffic:!0,timestamp:Date.now()}),r=new TextEncoder().encode(t),i=await this.applySecurityLayers(r,!0);this.dataChannel.send(i),this._secureLog("debug","\u{1F3AD} Fake message sent successfully",{pattern:e.pattern})}catch(t){this._secureLog("error","\u274C Failed to send fake message",{error:t.message})}}checkFakeTrafficStatus(){let e={fakeTrafficEnabled:this.securityFeatures.hasFakeTraffic,fakeTrafficConfigEnabled:this.fakeTrafficConfig.enabled,timerActive:!!this.fakeTrafficTimer,patterns:this.fakeTrafficConfig.patterns,intervals:{min:this.fakeTrafficConfig.minInterval,max:this.fakeTrafficConfig.maxInterval}};return this._debugMode&&this._secureLog("info","\u{1F3AD} Fake Traffic Status",{status:e}),e}emergencyDisableFakeTraffic(){this._debugMode&&this._secureLog("error","\u{1F6A8} Emergency disabling fake traffic"),this.securityFeatures.hasFakeTraffic=!1,this.fakeTrafficConfig.enabled=!1,this.stopFakeTrafficGeneration(),this._debugMode&&this._secureLog("info","\u2705 Fake traffic disabled"),this.fakeTrafficDisabledNotificationSent||(this.fakeTrafficDisabledNotificationSent=!0,this.onMessage&&this.deliverMessageToUI("\u{1F6A8} Fake traffic emergency disabled","system"))}async _applySecurityLayersWithoutMutex(e,t=!1){try{let r=e;return t?(this.encryptionKey&&typeof r=="string"&&(r=await window.EnhancedSecureCryptoUtils.encryptData(r,this.encryptionKey)),r):(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&r instanceof ArrayBuffer&&(r=await this.applyNestedEncryption(r)),this.securityFeatures.hasPacketReordering&&this.reorderingConfig?.enabled&&r instanceof ArrayBuffer&&(r=this.applyPacketReordering(r)),this.securityFeatures.hasPacketPadding&&r instanceof ArrayBuffer&&(r=this.applyPacketPadding(r)),this.securityFeatures.hasAntiFingerprinting&&r instanceof ArrayBuffer&&(r=this.applyAntiFingerprinting(r)),this.encryptionKey&&typeof r=="string"&&(r=await window.EnhancedSecureCryptoUtils.encryptData(r,this.encryptionKey)),r)}catch(r){return this._secureLog("error","\u274C Error in applySecurityLayersWithoutMutex:",{errorType:r?.constructor?.name||"Unknown"}),e}}async processChunkedMessage(e){try{if(!this.chunkingConfig.addChunkHeaders)return this.processMessage(e);let t=new Uint8Array(e);if(t.length<16)return this.processMessage(e);let r=new DataView(t.buffer,0,16),i=r.getUint32(0,!1),n=r.getUint32(4,!1),a=r.getUint32(8,!1),o=r.getUint32(12,!1),c=t.slice(16,16+o);this.chunkQueue[i]||(this.chunkQueue[i]={chunks:new Array(a),received:0,timestamp:Date.now()});let d=this.chunkQueue[i];if(d.chunks[n]=c,d.received++,this._secureLog("debug",`\u{1F4E6} Received chunk ${n+1}/${a} for message ${i}`),d.received===a){let u=d.chunks.reduce((p,S)=>p+S.length,0),h=new Uint8Array(u),m=0;for(let p of d.chunks)h.set(p,m),m+=p.length;await this.processMessage(h.buffer),delete this.chunkQueue[i],this._secureLog("info",`\u{1F4E6} Chunked message ${i} reassembled and processed`)}}catch(t){this._secureLog("error","\u274C Chunked message processing failed:",{errorType:t?.constructor?.name||"Unknown"})}}initializeDecoyChannels(){if(!(!this.decoyChannelConfig.enabled||!this.peerConnection)){if(this.decoyChannels.size>0){this._secureLog("warn","\u26A0\uFE0F Decoy channels already initialized, skipping...");return}try{let e=Math.min(this.decoyChannelConfig.maxDecoyChannels,this.decoyChannelConfig.decoyChannelNames.length);for(let t=0;t<e;t++){let r=this.decoyChannelConfig.decoyChannelNames[t],i=this.peerConnection.createDataChannel(r,{ordered:Math.random()>.5,maxRetransmits:Math.floor(Math.random()*3)});this.setupDecoyChannel(i,r),this.decoyChannels.set(r,i)}this._debugMode&&this._secureLog("info",`\u{1F3AD} Initialized ${e} decoy channels`)}catch(e){this._debugMode&&this._secureLog("error","\u274C Failed to initialize decoy channels:",{errorType:e?.constructor?.name||"Unknown"})}}}setupDecoyChannel(e,t){e.onopen=()=>{this._debugMode&&this._secureLog("debug",`\u{1F3AD} Decoy channel "${t}" opened`),this.startDecoyTraffic(e,t)},e.onmessage=r=>{this._debugMode&&this._secureLog("debug",`\u{1F3AD} Received decoy message on "${t}": ${r.data?.length||"undefined"} bytes`)},e.onclose=()=>{this._debugMode&&this._secureLog("debug",`\u{1F3AD} Decoy channel "${t}" closed`),this.stopDecoyTraffic(t)},e.onerror=r=>{this._debugMode&&this._secureLog("error",`\u274C Decoy channel "${t}" error`,{error:r.message})}}startDecoyTraffic(e,t){let r=async()=>{if(e.readyState==="open")try{let n=this.generateDecoyData(t);e.send(n);let a=this.decoyChannelConfig.randomDecoyIntervals?Math.random()*15e3+1e4:2e4;this.decoyTimers.set(t,setTimeout(()=>r(),a))}catch(n){this._debugMode&&this._secureLog("error",`\u274C Failed to send decoy data on "${t}"`,{error:n.message})}},i=Math.random()*1e4+5e3;this.decoyTimers.set(t,setTimeout(()=>r(),i))}stopDecoyTraffic(e){let t=this.decoyTimers.get(e);t&&(clearTimeout(t),this.decoyTimers.delete(e))}generateDecoyData(e){let t={sync:()=>JSON.stringify({type:"sync",timestamp:Date.now(),sequence:Math.floor(Math.random()*1e3),data:Array.from(crypto.getRandomValues(new Uint8Array(32))).map(r=>r.toString(16).padStart(2,"0")).join("")}),status:()=>JSON.stringify({type:"status",status:["online","away","busy"][Math.floor(Math.random()*3)],uptime:Math.floor(Math.random()*3600),data:Array.from(crypto.getRandomValues(new Uint8Array(16))).map(r=>r.toString(16).padStart(2,"0")).join("")}),heartbeat:()=>JSON.stringify({type:"heartbeat",timestamp:Date.now(),data:Array.from(crypto.getRandomValues(new Uint8Array(24))).map(r=>r.toString(16).padStart(2,"0")).join("")}),metrics:()=>JSON.stringify({type:"metrics",cpu:Math.random()*100,memory:Math.random()*100,network:Math.random()*1e3,data:Array.from(crypto.getRandomValues(new Uint8Array(20))).map(r=>r.toString(16).padStart(2,"0")).join("")}),debug:()=>JSON.stringify({type:"debug",level:["info","warn","error"][Math.floor(Math.random()*3)],message:"Debug message",data:Array.from(crypto.getRandomValues(new Uint8Array(28))).map(r=>r.toString(16).padStart(2,"0")).join("")})};return t[e]?t[e]():Array.from(crypto.getRandomValues(new Uint8Array(64))).map(r=>r.toString(16).padStart(2,"0")).join("")}addReorderingHeaders(e){if(!this.reorderingConfig.enabled)return e;try{let t=new Uint8Array(e),r=this.reorderingConfig.useTimestamps?12:8,i=new ArrayBuffer(r),n=new DataView(i);this.reorderingConfig.useSequenceNumbers&&n.setUint32(0,this.sequenceNumber++,!1),this.reorderingConfig.useTimestamps&&n.setUint32(4,Date.now(),!1),n.setUint32(this.reorderingConfig.useTimestamps?8:4,t.length,!1);let a=new Uint8Array(r+t.length);return a.set(new Uint8Array(i),0),a.set(t,r),a.buffer}catch(t){return this._secureLog("error","\u274C Failed to add reordering headers:",{errorType:t?.constructor?.name||"Unknown"}),e}}async processReorderedPacket(e){if(!this.reorderingConfig.enabled)return this.processMessage(e);try{let t=new Uint8Array(e),r=this.reorderingConfig.useTimestamps?12:8;if(t.length<r)return this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Data too short for reordering headers, processing directly"),this.processMessage(e);let i=new DataView(t.buffer,0,r),n=0,a=0,o=0;if(this.reorderingConfig.useSequenceNumbers&&(n=i.getUint32(0,!1)),this.reorderingConfig.useTimestamps&&(a=i.getUint32(4,!1)),o=i.getUint32(this.reorderingConfig.useTimestamps?8:4,!1),o>t.length-r||o<=0)return this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Invalid reordered packet data size, processing directly"),this.processMessage(e);let c=t.slice(r,r+o);try{let d=new TextDecoder().decode(c),u=JSON.parse(d);if(u.type==="fake"||u.isFakeTraffic===!0){this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Reordered fake message: ${u.pattern||"unknown"}`);return}}catch{}this.packetBuffer.set(n,{data:c.buffer,timestamp:a||Date.now()}),await this.processOrderedPackets()}catch(t){return this._secureLog("error","\u274C Failed to process reordered packet:",{errorType:t?.constructor?.name||"Unknown"}),this.processMessage(e)}}async processOrderedPackets(){let e=Date.now(),t=this.reorderingConfig.reorderTimeout;for(;;){let r=this.lastProcessedSequence+1,i=this.packetBuffer.get(r);if(i){try{let n=new TextDecoder().decode(i.data),a=JSON.parse(n);if(a.type==="fake"||a.isFakeTraffic===!0){this._secureLog("warn",`\u{1F3AD} BLOCKED: Ordered fake message: ${a.pattern||"unknown"}`),this.packetBuffer.delete(r),this.lastProcessedSequence=r;continue}}catch{}await this.processMessage(i.data),this.packetBuffer.delete(r),this.lastProcessedSequence=r}else{let n=this.findOldestPacket();if(n&&e-n.timestamp>t){this._secureLog("warn","\u26A0\uFE0F Packet ${oldestPacket.sequence} timed out, processing out of order");try{let a=new TextDecoder().decode(n.data),o=JSON.parse(a);if(o.type==="fake"||o.isFakeTraffic===!0){this._secureLog("warn",`\u{1F3AD} BLOCKED: Timed out fake message: ${o.pattern||"unknown"}`),this.packetBuffer.delete(n.sequence),this.lastProcessedSequence=n.sequence;continue}}catch{}await this.processMessage(n.data),this.packetBuffer.delete(n.sequence),this.lastProcessedSequence=n.sequence}else break}}this.cleanupOldPackets(e,t)}findOldestPacket(){let e=null;for(let[t,r]of this.packetBuffer.entries())(!e||r.timestamp<e.timestamp)&&(e={sequence:t,...r});return e}cleanupOldPackets(e,t){for(let[r,i]of this.packetBuffer.entries())e-i.timestamp>t&&(this._secureLog("warn","\u26A0\uFE0F \u{1F5D1}\uFE0F Removing timed out packet ${sequence}"),this.packetBuffer.delete(r))}applyAntiFingerprinting(e){if(!this.antiFingerprintingConfig.enabled)return e;try{let t=e;return this.antiFingerprintingConfig.addNoise&&(t=this.addNoise(t)),this.antiFingerprintingConfig.randomizeSizes&&(t=this.randomizeSize(t)),this.antiFingerprintingConfig.maskPatterns&&(t=this.maskPatterns(t)),this.antiFingerprintingConfig.useRandomHeaders&&(t=this.addRandomHeaders(t)),t}catch(t){return this._secureLog("error","\u274C Anti-fingerprinting failed:",{errorType:t?.constructor?.name||"Unknown"}),e}}addNoise(e){let t=new Uint8Array(e),r=this.getUnbiasedRandomInRange(8,40),i=crypto.getRandomValues(new Uint8Array(r)),n=new Uint8Array(t.length+r);return n.set(t,0),n.set(i,t.length),n.buffer}randomizeSize(e){let t=new Uint8Array(e),r=this.fingerprintMask.sizeVariation,i=Math.floor(t.length*r);if(i>t.length){let n=crypto.getRandomValues(new Uint8Array(i-t.length)),a=new Uint8Array(i);return a.set(t,0),a.set(n,t.length),a.buffer}else if(i<t.length)return t.slice(0,i).buffer;return e}maskPatterns(e){let t=new Uint8Array(e),r=new Uint8Array(t.length);for(let i=0;i<t.length;i++){let n=this.fingerprintMask.noisePattern[i%this.fingerprintMask.noisePattern.length];r[i]=t[i]^n}return r.buffer}addRandomHeaders(e){let t=new Uint8Array(e),r=this.getUnbiasedRandomInRange(1,3),i=0;for(let o=0;o<r;o++)i+=4+this.getUnbiasedRandomInRange(0,15)+4;let n=new Uint8Array(i+t.length),a=0;for(let o=0;o<r;o++){let c;do c=crypto.getRandomValues(new Uint8Array(1))[0];while(c>=256-256%this.fingerprintMask.headerVariations.length);let d=this.fingerprintMask.headerVariations[c%this.fingerprintMask.headerVariations.length],u;do u=crypto.getRandomValues(new Uint8Array(1))[0];while(u>=256-256%16);let h=crypto.getRandomValues(new Uint8Array(u%16+4)),m=new DataView(n.buffer,a);m.setUint32(0,h.length+8,!1),m.setUint32(4,this.hashString(d),!1),n.set(h,a+8);let p=this.calculateChecksum(n.slice(a,a+8+h.length));new DataView(n.buffer,a+8+h.length).setUint32(0,p,!1),a+=8+h.length+4}return n.set(t,a),n.buffer}hashString(e){let t=0;for(let r=0;r<e.length;r++){let i=e.charCodeAt(r);t=(t<<5)-t+i,t=t&t}return Math.abs(t)}calculateChecksum(e){let t=0;for(let r=0;r<e.length;r++)t=t+e[r]&4294967295;return t}async removeSecurityLayers(e){try{let t=this.getSecurityStatus();if(this._debugMode&&this._secureLog("debug",`\u{1F50D} removeSecurityLayers (Stage ${t.stage})`,{dataType:typeof e,dataLength:e?.length||e?.byteLength||0,activeFeatures:t.activeFeaturesCount}),!e)return this._secureLog("warn","\u26A0\uFE0F Received empty data"),null;let r=e;if(typeof e=="string")try{let i=JSON.parse(e);if(i.type==="fake")return this._debugMode&&this._secureLog("debug",`\u{1F3AD} Fake message filtered out: ${i.pattern} (size: ${i.size})`),"FAKE_MESSAGE_FILTERED";if(i.type&&["heartbeat","verification","verification_response","peer_disconnect","key_rotation_signal","key_rotation_ready","security_upgrade","ice_restart_offer","ice_restart_answer","ice_restart_request"].includes(i.type))return"SYSTEM_MESSAGE_FILTERED";if(i.type&&["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error"].includes(i.type))return this._debugMode&&this._secureLog("debug","\u{1F4C1} File transfer message detected, blocking from chat",{type:i.type}),"FILE_MESSAGE_FILTERED";if(i.type==="message")return this._debugMode&&this._secureLog("debug","\u{1F4DD} Regular message detected, extracting text",{data:i.data}),i.data;if(i.type==="enhanced_message"&&i.data){if(this._debugMode&&this._secureLog("debug","\u{1F510} Enhanced message detected, decrypting..."),!this.encryptionKey||!this.macKey||!this.metadataKey)return this._secureLog("error","\u274C Missing encryption keys"),null;let n=await window.EnhancedSecureCryptoUtils.decryptMessage(i.data,this.encryptionKey,this.macKey,this.metadataKey);this._debugMode&&(this._secureLog("debug","\u2705 Enhanced message decrypted, extracting..."),this._secureLog("debug","\u{1F50D} decryptedResult",{type:typeof n,hasMessage:!!n?.message,messageType:typeof n?.message,messageLength:n?.message?.length||0,messageSample:n?.message?.substring(0,50)||"no message"}));try{let a=JSON.parse(n.message);if(a.type==="fake"||a.isFakeTraffic===!0)return this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Encrypted fake message: ${a.pattern||"unknown"}`),"FAKE_MESSAGE_FILTERED"}catch{this._debugMode&&this._secureLog("debug","\u{1F4DD} Decrypted content is not JSON, treating as plain text message")}return this._debugMode&&this._secureLog("debug","\u{1F4E4} Returning decrypted message",{message:n.message?.substring(0,50)}),n.message}if(i.type==="message"&&i.data)return this._debugMode&&this._secureLog("debug","\u{1F4DD} Regular message detected, extracting data"),i.data;if(i.type==="message")return this._debugMode&&this._secureLog("debug","\u{1F4DD} Regular message detected, returning for display"),e;if(!i.type||i.type!=="fake"&&!["heartbeat","verification","verification_response","peer_disconnect","key_rotation_signal","key_rotation_ready","enhanced_message","security_upgrade","ice_restart_offer","ice_restart_answer","ice_restart_request","file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error"].includes(i.type))return this._debugMode&&this._secureLog("debug","\u{1F4DD} Regular message detected, returning for display"),e}catch{return this._debugMode&&this._secureLog("debug","\u{1F4C4} Not JSON, processing as raw data"),e}if(this.encryptionKey&&typeof r=="string"&&r.length>50)try{if(/^[A-Za-z0-9+/=]+$/.test(r.trim())&&(this._debugMode&&this._secureLog("debug","\u{1F513} Applying standard decryption..."),r=await window.EnhancedSecureCryptoUtils.decryptData(r,this.encryptionKey),this._debugMode&&this._secureLog("debug","\u2705 Standard decryption successful"),typeof r=="string")){try{let n=JSON.parse(r);if(n.type==="fake"||n.isFakeTraffic===!0)return this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Legacy fake message: ${n.pattern||"unknown"}`),"FAKE_MESSAGE_FILTERED"}catch{}r=new TextEncoder().encode(r).buffer}}catch(i){return this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Standard decryption failed:",{details:i.message}),e}if(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&r instanceof ArrayBuffer&&r.byteLength>12)try{if(r=await this.removeNestedEncryption(r),r instanceof ArrayBuffer)try{let i=new TextDecoder().decode(r),n=JSON.parse(i);if(n.type==="fake"||n.isFakeTraffic===!0)return this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Nested fake message: ${n.pattern||"unknown"}`),"FAKE_MESSAGE_FILTERED"}catch{}}catch(i){this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Nested decryption failed - skipping this layer:",{details:i.message})}if(this.securityFeatures.hasPacketReordering&&this.reorderingConfig.enabled&&r instanceof ArrayBuffer)try{let i=this.reorderingConfig.useTimestamps?12:8;if(r.byteLength>i)return await this.processReorderedPacket(r)}catch(i){this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Reordering processing failed - using direct processing:",{details:i.message})}if(this.securityFeatures.hasPacketPadding&&r instanceof ArrayBuffer)try{r=this.removePacketPadding(r)}catch(i){this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Padding removal failed:",{details:i.message})}if(this.securityFeatures.hasAntiFingerprinting&&r instanceof ArrayBuffer)try{r=this.removeAntiFingerprinting(r)}catch(i){this._debugMode&&this._secureLog("warn","\u26A0\uFE0F Anti-fingerprinting removal failed:",{details:i.message})}if(r instanceof ArrayBuffer&&(r=new TextDecoder().decode(r)),typeof r=="string")try{let i=JSON.parse(r);if(i.type==="fake"||i.isFakeTraffic===!0)return this._debugMode&&this._secureLog("warn",`\u{1F3AD} BLOCKED: Final check fake message: ${i.pattern||"unknown"}`),"FAKE_MESSAGE_FILTERED"}catch{}return r}catch(t){return this._secureLog("error","\u274C Critical error in removeSecurityLayers:",{errorType:t?.constructor?.name||"Unknown"}),e}}removeAntiFingerprinting(e){return e}async applySecurityLayers(e,t=!1){try{let r=e;return t?(this.encryptionKey&&typeof r=="string"&&(r=await window.EnhancedSecureCryptoUtils.encryptData(r,this.encryptionKey)),r):(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&r instanceof ArrayBuffer&&(r=await this.applyNestedEncryption(r)),this.securityFeatures.hasPacketReordering&&this.reorderingConfig?.enabled&&r instanceof ArrayBuffer&&(r=this.applyPacketReordering(r)),this.securityFeatures.hasPacketPadding&&r instanceof ArrayBuffer&&(r=this.applyPacketPadding(r)),this.securityFeatures.hasAntiFingerprinting&&r instanceof ArrayBuffer&&(r=this.applyAntiFingerprinting(r)),this.encryptionKey&&typeof r=="string"&&(r=await window.EnhancedSecureCryptoUtils.encryptData(r,this.encryptionKey)),r)}catch(r){return this._secureLog("error","\u274C Error in applySecurityLayers:",{errorType:r?.constructor?.name||"Unknown"}),e}}_sanitizeMessageMeta(e){if(!e||typeof e!="object")return null;let t={};if(typeof e.mid=="string"&&e.mid.length>0&&e.mid.length<=64&&(t.mid=e.mid.replace(/[^A-Za-z0-9_-]/g,"").slice(0,64)),e.code===!0&&(t.code=!0),e.once===!0&&(t.once=!0),Number.isFinite(e.onceTtl)){let r=Math.floor(e.onceTtl);r>=1&&r<=3600&&(t.onceTtl=r)}if(Number.isFinite(e.ttl)){let r=Math.floor(e.ttl);r>=5&&r<=86400&&(t.ttl=r)}return Object.keys(t).length?t:null}sendMessageDelete(e){return typeof e!="string"||!e?!1:this.sendSystemMessage({type:s.MESSAGE_TYPES.MESSAGE_DELETE,messageId:e.slice(0,64)})}sendDeliveryReceipt(e){return typeof e!="string"||!e?!1:this.sendSystemMessage({type:s.MESSAGE_TYPES.MESSAGE_RECEIPT,messageId:e.slice(0,64)})}async sendMessage(e,t=null){let r=this._validateInputData(e,"sendMessage");if(!r.isValid){let i=`Input validation failed: ${r.errors.join(", ")}`;throw this._secureLog("error","\u274C Input validation failed in sendMessage",{errors:r.errors,dataType:typeof e,dataLength:e?.length||e?.byteLength||0}),new Error(i)}if(!this._checkRateLimit("sendMessage"))throw new Error("Rate limit exceeded for message sending");if(this._enforceVerificationGate("sendMessage"),!this.dataChannel||this.dataChannel.readyState!=="open")throw new Error("Data channel not ready");try{if(this.encryptionKey&&this.macKey&&this.metadataKey||await this._tryReinitializeEncryptionKeys(),this._secureLog("debug","sendMessage called",{hasDataChannel:!!this.dataChannel,dataChannelReady:this.dataChannel?.readyState==="open",isInitiator:this.isInitiator,isVerified:this.isVerified,connectionReady:this.peerConnection?.connectionState==="connected"}),this._secureLog("debug","\u{1F50D} sendMessage DEBUG",{dataType:typeof r.sanitizedData,isString:typeof r.sanitizedData=="string",isArrayBuffer:r.sanitizedData instanceof ArrayBuffer,dataLength:r.sanitizedData?.length||r.sanitizedData?.byteLength||0}),typeof r.sanitizedData=="string")try{let n=JSON.parse(r.sanitizedData);if(n.type&&n.type.startsWith("file_")){this._secureLog("debug","\u{1F4C1} File message detected - applying full encryption with AAD",{type:n.type});let a=this._createFileMessageAAD(n.type,n.data),o=await this._encryptFileMessage(r.sanitizedData,a);return this.dataChannel.send(o),!0}}catch{}if(typeof r.sanitizedData=="string"){if(typeof this._createMessageAAD!="function")throw new Error("_createMessageAAD method is not available. Manager may not be fully initialized.");let n=this._createMessageAAD("message",{content:r.sanitizedData}),a={type:"message",data:r.sanitizedData,timestamp:Date.now(),aad:n};return t&&typeof t=="object"&&(a.meta=this._sanitizeMessageMeta(t)),await this.sendSecureMessage(a)}this._secureLog("debug","\u{1F510} Applying security layers to non-string data");let i=await this._applySecurityLayersWithLimitedMutex(r.sanitizedData,!1);return this.dataChannel.send(i),!0}catch(i){throw this._secureLog("error","\u274C Failed to send message",{error:i.message,errorType:i.constructor.name}),i}}async _applySecurityLayersWithLimitedMutex(e,t=!1){return this._withMutex("cryptoOperation",async r=>{try{let i=e;return t?(this.encryptionKey&&typeof i=="string"&&(i=await window.EnhancedSecureCryptoUtils.encryptData(i,this.encryptionKey)),i):(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&i instanceof ArrayBuffer&&(i=await this.applyNestedEncryption(i)),this.securityFeatures.hasPacketReordering&&this.reorderingConfig?.enabled&&i instanceof ArrayBuffer&&(i=this.applyPacketReordering(i)),this.securityFeatures.hasPacketPadding&&i instanceof ArrayBuffer&&(i=this.applyPacketPadding(i)),this.securityFeatures.hasAntiFingerprinting&&i instanceof ArrayBuffer&&(i=this.applyAntiFingerprinting(i)),this.encryptionKey&&typeof i=="string"&&(i=await window.EnhancedSecureCryptoUtils.encryptData(i,this.encryptionKey)),i)}catch(i){return this._secureLog("error","\u274C Error in applySecurityLayers:",{errorType:i?.constructor?.name||"Unknown"}),e}},3e3)}async sendSystemMessage(e){if(e.type==="verification_request"||e.type==="verification_response"||e.type==="verification_required"||this._enforceVerificationGate("sendSystemMessage",!1),!this.dataChannel||this.dataChannel.readyState!=="open")return this._secureLog("warn","\u26A0\uFE0F Cannot send system message - data channel not ready"),!1;try{let r=JSON.stringify({type:e.type,data:e,timestamp:Date.now()});return this._secureLog("debug","\u{1F527} Sending system message",{type:e.type}),this.dataChannel.send(r),!0}catch(r){return this._secureLog("error","\u274C Failed to send system message:",{errorType:r?.constructor?.name||"Unknown"}),!1}}async processMessage(e){try{if(this._noteInboundActivity?.(),this._secureLog("debug","\uFFFD\uFFFD Processing message",{dataType:typeof e,isArrayBuffer:e instanceof ArrayBuffer,hasData:!!(e?.length||e?.byteLength)}),typeof e=="string")try{let i=JSON.parse(e),n=["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error"];if(i.type==="encrypted_file_message"){this._secureLog("debug","\u{1F4C1} Encrypted file message detected in processMessage");try{let{decryptedData:a,aad:o}=await this._decryptFileMessage(e),c=JSON.parse(a);if(this._secureLog("debug","\u{1F4C1} File message decrypted successfully",{type:c.type,aadMessageType:o.messageType}),this.fileTransferSystem&&typeof this.fileTransferSystem.handleFileMessage=="function"){await this.fileTransferSystem.handleFileMessage(c);return}}catch(a){this._secureLog("error","\u274C Failed to decrypt file message",{error:a.message});return}}if(i.type&&n.includes(i.type)){this._secureLog("warn","\u26A0\uFE0F Unencrypted file message detected - this should not happen in secure mode",{type:i.type}),this._secureLog("error","\u274C Dropping unencrypted file message for security",{type:i.type});return}if(i.type==="enhanced_message"){if(this._secureLog("debug","\u{1F510} Enhanced message detected in processMessage"),!this._checkInboundRateLimit("processMessage:enhanced_message"))return;try{let a=await window.EnhancedSecureCryptoUtils.decryptMessage(i.data,this.encryptionKey,this.macKey,this.metadataKey),o=JSON.parse(a.data);if(a.metadata&&a.metadata.sequenceNumber!==void 0&&!this._validateIncomingSequenceNumber(a.metadata.sequenceNumber,"enhanced_message")){this._secureLog("warn","\u26A0\uFE0F Enhanced message sequence number validation failed - possible replay attack",{received:a.metadata.sequenceNumber,expected:this.expectedSequenceNumber});return}o.type==="message"&&this.onMessage&&o.data&&this.deliverMessageToUI(o.data,"received",o.meta);return}catch(a){this._secureLog("error","\u274C Failed to decrypt enhanced message",{error:a.message});return}}if(i.type===s.MESSAGE_TYPES.MESSAGE){this._secureLog("error","Rejected unencrypted frame in processMessage",{messageType:"message"});return}if(i.type&&s.POST_VERIFICATION_CONTROL_TYPES.has(i.type)){if(!this._enforceVerificationGate("control_frame_receive",!1)){this._secureLog("error","Dropped control frame received before verification",{messageType:i.type});return}let a=s.MESSAGE_TYPES;if(i.type===a.MESSAGE_DELETE){let o=i?.data?.messageId??i?.messageId;if(typeof o=="string"&&o)try{this.onMessageDelete?.(o.slice(0,64))}catch{}return}if(i.type===a.MESSAGE_RECEIPT){let o=i?.data?.messageId??i?.messageId;if(typeof o=="string"&&o)try{this.onMessageDelivered?.(o.slice(0,64))}catch{}return}if([a.CALL_OFFER,a.CALL_ANSWER,a.CALL_ICE,a.CALL_DECLINE,a.CALL_END].includes(i.type)){try{await this._handleCallSignal(i.type,i.data||{})}catch(o){this._secureLog("error","\u274C Call signal handling failed",{errorType:o?.constructor?.name})}return}if([a.ICE_RESTART_OFFER,a.ICE_RESTART_ANSWER,a.ICE_RESTART_REQUEST].includes(i.type)){try{await this._handleIceRestartSignal(i.type,i.data||{})}catch(o){this._secureLog("error","\u274C ICE restart signal handling failed",{errorType:o?.constructor?.name})}return}return}if(i.type&&["heartbeat","verification","verification_response","verification_confirmed","verification_both_confirmed","peer_disconnect","security_upgrade"].includes(i.type)){this.handleSystemMessage(i);return}if(i.type==="fake"){this._secureLog("warn","\u{1F3AD} Fake message blocked in processMessage",{pattern:i.pattern});return}}catch{this._secureLog("error","Rejected malformed (non-JSON) frame in processMessage",{dataLength:typeof e=="string"?e.length:0});return}let t=await this._processEncryptedDataWithLimitedMutex(e);if(t==="FAKE_MESSAGE_FILTERED"||t==="FILE_MESSAGE_FILTERED"||t==="SYSTEM_MESSAGE_FILTERED")return;if(!t){this._secureLog("warn","\u26A0\uFE0F No data returned from removeSecurityLayers");return}let r;if(typeof t=="string")try{let i=JSON.parse(t);if(i.type&&fileMessageTypes.includes(i.type)){this._secureLog("debug","\u{1F4C1} File message detected after decryption",{type:i.type}),this.fileTransferSystem&&await this.fileTransferSystem.handleFileMessage(i);return}if(i.type&&["heartbeat","verification","verification_response","verification_confirmed","verification_both_confirmed","peer_disconnect","security_upgrade"].includes(i.type)){this.handleSystemMessage(i);return}if(i.type==="fake"){this._secureLog("warn",`\u{1F3AD} Post-decryption fake message blocked: ${i.pattern}`);return}i.type==="message"&&i.data?r=i.data:r=t}catch{r=t}else if(t instanceof ArrayBuffer)r=new TextDecoder().decode(t);else if(t&&typeof t=="object"&&t.message)r=t.message;else{this._secureLog("warn","\u26A0\uFE0F Unexpected data type after processing:",{details:typeof t});return}if(r&&r.trim().startsWith("{"))try{let i=JSON.parse(r);if(i.type==="fake"){this._secureLog("warn",`\u{1F3AD} Final fake message check blocked: ${i.pattern}`);return}let n=["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error","heartbeat","verification","verification_response","peer_disconnect","key_rotation_signal","key_rotation_ready","security_upgrade","ice_restart_offer","ice_restart_answer","ice_restart_request"];if(i.type&&n.includes(i.type)){this._secureLog("warn",`\u{1F4C1} Final system/file message check blocked: ${i.type}`);return}}catch{}r&&this._secureLog("error","Rejected unauthenticated payload at the end of processMessage",{messageLength:typeof r=="string"?r.length:0})}catch(t){this._secureLog("error","\u274C Failed to process message:",{errorType:t?.constructor?.name||"Unknown"})}}async _processEncryptedDataWithLimitedMutex(e){return this._withMutex("cryptoOperation",async t=>{this._secureLog("debug","\u{1F510} Processing encrypted data with limited mutex",{operationId:t,dataType:typeof e});try{return await this.removeSecurityLayers(e)}catch(r){return this._secureLog("error","\u274C Error processing encrypted data",{operationId:t,errorType:r.constructor.name}),e}},2e3)}notifySecurityUpdate(){try{this._secureLog("debug","\u{1F512} Notifying about security level update",{isConnected:this.isConnected(),isVerified:this.isVerified,hasKeys:!!(this.encryptionKey&&this.macKey&&this.metadataKey),hasLastCalculation:!!this.lastSecurityCalculation}),this._dispatchAppEvent?.(new CustomEvent("security-level-updated",{detail:{timestamp:Date.now(),manager:"webrtc",webrtcManager:this,isConnected:this.isConnected(),isVerified:this.isVerified,hasKeys:!!(this.encryptionKey&&this.macKey&&this.metadataKey),lastCalculation:this.lastSecurityCalculation}})),setTimeout(()=>{},100),this.lastSecurityCalculation&&this._dispatchAppEvent?.(new CustomEvent("real-security-calculated",{detail:{securityData:this.lastSecurityCalculation,webrtcManager:this,timestamp:Date.now()}}))}catch(e){this._secureLog("error","\u274C Error in notifySecurityUpdate",{error:e.message})}}handleSystemMessage(e){switch(this._secureLog("debug","\u{1F527} Handling system message:",{type:e.type}),e.type){case"heartbeat":this.handleHeartbeat(e);break;case"verification":this.handleVerificationRequest(e.data);break;case"verification_response":this.handleVerificationResponse(e.data);break;case"sas_code":this.handleSASCode(e.data);break;case"verification_confirmed":this.handleVerificationConfirmed(e.data);break;case"verification_both_confirmed":this.handleVerificationBothConfirmed(e.data);break;case"peer_disconnect":this.handlePeerDisconnectNotification(e);break;case"key_rotation_signal":this._secureLog("debug","\u{1F504} Key rotation signal received (ignored for stability)");break;case"key_rotation_ready":this._secureLog("debug","\u{1F504} Key rotation ready signal received (ignored for stability)");break;case"security_upgrade":this._secureLog("debug","\u{1F512} Security upgrade notification received:",{type:e.type});break;default:this._secureLog("debug","\u{1F527} Unknown system message type:",{type:e.type})}}enableStage2Security(){this.sessionConstraints?.hasPacketReordering&&(this.securityFeatures.hasPacketReordering=!0,this.reorderingConfig.enabled=!0),this.sessionConstraints?.hasAntiFingerprinting&&(this.securityFeatures.hasAntiFingerprinting=!0,this.antiFingerprintingConfig.enabled=!0,this.antiFingerprintingConfig.randomizeSizes=!0,this.antiFingerprintingConfig.maskPatterns=!0,this.antiFingerprintingConfig.useRandomHeaders=!0),this.notifySecurityUpgrade(2),setTimeout(()=>{this.calculateAndReportSecurityLevel()},500)}enableStage3Security(){this._secureLog("info","\u{1F512} Enabling Stage 3 features (traffic obfuscation)"),this.sessionConstraints?.hasMessageChunking&&(this.securityFeatures.hasMessageChunking=!0,this.chunkingConfig.enabled=!0),this.sessionConstraints?.hasFakeTraffic&&(this.securityFeatures.hasFakeTraffic=!0,this.fakeTrafficConfig.enabled=!0,this.startFakeTrafficGeneration()),this.notifySecurityUpgrade(3),setTimeout(()=>{this.calculateAndReportSecurityLevel()},500)}enableStage4Security(){if(this._secureLog("info","\u{1F512} Enabling Stage 4 features (maximum safety)"),this.sessionConstraints?.hasDecoyChannels&&this.isConnected()&&this.isVerified){this.securityFeatures.hasDecoyChannels=!0,this.decoyChannelConfig.enabled=!0;try{this.initializeDecoyChannels()}catch(e){this._secureLog("warn","\u26A0\uFE0F Decoy channels initialization failed:",{details:e.message}),this.securityFeatures.hasDecoyChannels=!1,this.decoyChannelConfig.enabled=!1}}this.sessionConstraints?.hasAntiFingerprinting&&(this.antiFingerprintingConfig.randomizeSizes=!0,this.antiFingerprintingConfig.maskPatterns=!0,this.antiFingerprintingConfig.useRandomHeaders=!1),this.notifySecurityUpgrade(4),setTimeout(()=>{this.calculateAndReportSecurityLevel()},500)}forceSecurityUpdate(){setTimeout(()=>{this.calculateAndReportSecurityLevel(),this.notifySecurityUpdate()},100)}getSecurityStatus(){let e=Object.entries(this.securityFeatures).filter(([r,i])=>i===!0).map(([r])=>r);return{stage:4,securityLevel:"maximum",activeFeatures:e,totalFeatures:Object.keys(this.securityFeatures).length,activeFeaturesCount:e.length,activeFeaturesNames:e,sessionConstraints:this.sessionConstraints}}notifySecurityUpgrade(e){let t={1:"Basic Enhanced",2:"Medium Security",3:"High Security",4:"Maximum Security"},r=`\u{1F512} Security upgraded to Stage ${e}: ${t[e]}`;if((!this.securityUpgradeNotificationSent||this.lastSecurityUpgradeStage!==e)&&(this.securityUpgradeNotificationSent=!0,this.lastSecurityUpgradeStage=e,this.onMessage&&this.deliverMessageToUI(r,"system")),this.dataChannel&&this.dataChannel.readyState==="open")try{let n={type:"security_upgrade",stage:e,stageName:t[e],message:r,timestamp:Date.now()};this._secureLog("debug","\u{1F512} Sending security upgrade notification to peer:",{type:n.type,stage:n.stage}),this.dataChannel.send(JSON.stringify(n))}catch(n){this._secureLog("warn","\u26A0\uFE0F Failed to send security upgrade notification to peer:",{details:n.message})}let i=this.getSecurityStatus()}async calculateAndReportSecurityLevel(){try{if(!window.EnhancedSecureCryptoUtils)return this._secureLog("warn","\u26A0\uFE0F EnhancedSecureCryptoUtils not available for security calculation"),null;if(!this.isConnected()||!this.isVerified||!this.encryptionKey||!this.macKey)return this._secureLog("debug","\u26A0\uFE0F WebRTC not ready for security calculation",{connected:this.isConnected(),verified:this.isVerified,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey}),null;this._secureLog("debug","\u{1F50D} Calculating real security level",{managerState:"ready",hasAllKeys:!!(this.encryptionKey&&this.macKey&&this.metadataKey)});let e=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(this);if(this._secureLog("info","Real security level calculated",{hasSecurityLevel:!!e.level,scoreRange:e.score>80?"high":e.score>50?"medium":"low",checksRatio:`${e.passedChecks}/${e.totalChecks}`,isRealCalculation:e.isRealData}),this.lastSecurityCalculation=e,this._dispatchAppEvent?.(new CustomEvent("real-security-calculated",{detail:{securityData:e,webrtcManager:this,timestamp:Date.now(),source:"calculateAndReportSecurityLevel"}})),e.isRealData&&this.onMessage&&(!this.securityCalculationNotificationSent||this.lastSecurityCalculationLevel!==e.level)){this.securityCalculationNotificationSent=!0,this.lastSecurityCalculationLevel=e.level;let t=`Security Level: ${e.level} (${e.score}%) - ${e.passedChecks}/${e.totalChecks} checks passed`;this.deliverMessageToUI(t,"system")}return e}catch(e){return this._secureLog("error","Failed to calculate real security level",{errorType:e.constructor.name}),null}}async autoEnableSecurityFeatures(){this._secureLog("info","Starting graduated security activation - all features enabled");let e=()=>this.isConnected()&&this.isVerified&&this.connectionAttempts===0&&this.messageQueue.length===0&&this.peerConnection?.connectionState==="connected";await this.calculateAndReportSecurityLevel(),this.notifySecurityUpgrade(1),setTimeout(async()=>{e()&&(this.enableStage2Security(),await this.calculateAndReportSecurityLevel(),setTimeout(async()=>{e()&&(this.enableStage3Security(),await this.calculateAndReportSecurityLevel(),setTimeout(async()=>{e()&&(this.enableStage4Security(),await this.calculateAndReportSecurityLevel())},2e4))},15e3))},1e4)}async establishConnection(){try{await this.initializeEnhancedSecurity(),this.fakeTrafficConfig.enabled&&this.startFakeTrafficGeneration(),this.decoyChannelConfig.enabled&&this.initializeDecoyChannels()}catch(e){throw this._secureLog("error","\u274C Failed to establish enhanced connection:",{errorType:e?.constructor?.name||"Unknown"}),this.onStatusChange("disconnected"),e}}_clearVerificationStates(){try{this.localVerificationConfirmed=!1,this.remoteVerificationConfirmed=!1,this.bothVerificationsConfirmed=!1,this.isVerified=!1,this.verificationCode=null,this.pendingSASCode=null,this.sasValidationAttempts=0,this._verificationUiOpened=!1,this._sasLocalFingerprint=null,this._sasRemoteFingerprint=null,this.keyFingerprint=null,this.expectedDTLSFingerprint=null,this._peerDTLSFingerprint=null,this.connectionId=null,this.processedMessageIds.clear(),this.verificationNotificationSent=!1,this.verificationInitiationSent=!1}catch(e){this._secureLog("error","\u274C Error clearing verification states:",{errorType:e?.constructor?.name||"Unknown"})}}startPeriodicCleanup(){this._secureLog("info","\u{1F527} Periodic cleanup moved to unified scheduler")}async calculateSecurityLevel(){return await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(this)}shouldRotateKeys(){return!this.isConnected()||!this.isVerified?!1:Date.now()-this.lastKeyRotation>this.keyRotationInterval||this.messageCounter%100===0}async rotateKeys(){return this._withMutex("keyOperation",async e=>{if(this._secureLog("info","\u{1F504} Starting key rotation with mutex",{operationId:e}),!this.isConnected()||!this.isVerified)return this._secureLog("warn"," Key rotation aborted - connection not ready",{operationId:e,isConnected:this.isConnected(),isVerified:this.isVerified}),!1;if(this._keySystemState.isRotating)return this._secureLog("warn"," Key rotation already in progress",{operationId:e}),!1;try{this._keySystemState.isRotating=!0,this._keySystemState.lastOperation="rotation",this._keySystemState.lastOperationTime=Date.now();let t={type:"key_rotation_signal",newVersion:this.currentKeyVersion+1,timestamp:Date.now(),operationId:e};if(this.dataChannel&&this.dataChannel.readyState==="open")this.dataChannel.send(JSON.stringify(t));else throw new Error("Data channel not ready for key rotation");return this._hardWipeOldKeys(),new Promise(r=>{this.pendingRotation={newVersion:this.currentKeyVersion+1,operationId:e,resolve:r,timeout:setTimeout(()=>{this._secureLog("error"," Key rotation timeout",{operationId:e}),this._keySystemState.isRotating=!1,this.pendingRotation=null,r(!1)},1e4)}})}catch(t){return this._secureLog("error"," Key rotation failed in critical section",{operationId:e,errorType:t.constructor.name}),this._keySystemState.isRotating=!1,!1}},1e4)}cleanupOldKeys(){let e=Date.now(),t=s.LIMITS.MAX_KEY_AGE,r=0;for(let[i,n]of this.oldKeys.entries())e-n.timestamp>t&&(n.encryptionKey&&this._secureWipeMemory(n.encryptionKey,"pfs_cleanup_wipe"),n.macKey&&this._secureWipeMemory(n.macKey,"pfs_cleanup_wipe"),n.metadataKey&&this._secureWipeMemory(n.metadataKey,"pfs_cleanup_wipe"),n.encryptionKey=null,n.macKey=null,n.metadataKey=null,n.keyFingerprint=null,this.oldKeys.delete(i),r++,this._secureLog("info","\u{1F9F9} Old PFS keys hard wiped and cleaned up",{version:i,age:Math.round((e-n.timestamp)/1e3)+"s",timestamp:Date.now()}));r>0&&this._secureLog("info",`PFS cleanup completed: ${r} keys hard wiped`,{timestamp:Date.now()})}getKeysForVersion(e){let t=this.oldKeys.get(e);return t&&t.encryptionKey&&t.macKey&&t.metadataKey?{encryptionKey:t.encryptionKey,macKey:t.macKey,metadataKey:t.metadataKey}:e===this.currentKeyVersion&&this.encryptionKey&&this.macKey&&this.metadataKey?{encryptionKey:this.encryptionKey,macKey:this.macKey,metadataKey:this.metadataKey}:(window.EnhancedSecureCryptoUtils.secureLog.log("error","No valid keys found for version",{requestedVersion:e,currentVersion:this.currentKeyVersion,availableVersions:Array.from(this.oldKeys.keys())}),null)}_hasTurnServer(){return(this._config.webrtc.iceServers||[]).some(e=>(Array.isArray(e.urls)?e.urls:[e.urls]).some(r=>typeof r=="string"&&r.toLowerCase().startsWith("turn:")))}_buildPeerConnectionConfig(){let e=this._isRelayOnlyMode(),t={iceServers:this._config.webrtc.iceServers,iceCandidatePoolSize:10,bundlePolicy:"balanced"};return e&&(t.iceTransportPolicy="relay"),t}_summarizeIceServerConfig(e=[]){let t={serverCount:0,stun:0,turn:0,turns:0,hasCredentials:!1};for(let r of e||[]){t.serverCount+=1,(r?.username||r?.credential)&&(t.hasCredentials=!0);let i=Array.isArray(r?.urls)?r.urls:[r?.urls];for(let n of i){let a=String(n||"").toLowerCase();a.startsWith("stun:")&&(t.stun+=1),a.startsWith("turn:")&&(t.turn+=1),a.startsWith("turns:")&&(t.turns+=1)}}return t}_isRelayOnlyMode(){return this._config.webrtc.privacyMode==="relay-only"}_setRelayOnlyMode(e){let t=e===!0;this._config.webrtc.privacyMode=t?"relay-only":"standard",this._config.webrtc.relayOnly=t}_warnIfTurnMissing(){if(this._ipLeakWarningShown)return;this._ipLeakWarningShown=!0;let e=this._isRelayOnlyMode(),t=this._hasTurnServer(),r=null;e&&!t?r="Privacy mode is relay-only, but no TURN server is configured. Relay-only mode cannot connect until TURN is configured; STUN alone does not hide IP addresses.":!e&&!t?r="Privacy warning: relay-only mode is disabled and no TURN server is configured. Direct WebRTC connections may expose host or server-reflexive IP addresses; STUN alone does not provide IP protection.":e||(r="Privacy warning: relay-only mode is disabled. Direct WebRTC connectivity may expose host or server-reflexive IP addresses even when TURN is available."),r&&this.deliverMessageToUI(r,"system")}createPeerConnection(){this._sessionAlive=!0;let e=this._buildPeerConnectionConfig();this._warnIfTurnMissing(),console.info("[SecureBit ICE] peer connection config",this._summarizeIceServerConfig(e.iceServers)),this.peerConnection=new RTCPeerConnection(e),this._callAudioSender=null,this._callVideoSender=null,this.peerConnection.onconnectionstatechange=()=>{let t=this.peerConnection.connectionState;console.info("[SecureBit ICE] connection state changed",{connectionState:t,iceConnectionState:this.peerConnection.iceConnectionState,iceGatheringState:this.peerConnection.iceGatheringState}),t==="connected"&&!this.isVerified?this._notifyVerificationReadyIfPossible():t==="connected"&&this.isVerified?this._onPathRecovered()||this.onStatusChange("connected"):t==="disconnected"?this.intentionalDisconnect?(this.onStatusChange("disconnected"),setTimeout(()=>this.disconnect(),100)):this.isVerified?this._onPathDegraded("ice_disconnected"):console.warn(`[SecureBit ICE] State is ${t} but not verified yet. Keeping session open for manual exchange.`):t==="closed"?(this._resetReconnectState(),this.onStatusChange("disconnected"),this._clearVerificationStates(),this.intentionalDisconnect&&setTimeout(()=>this.disconnect(),100)):t==="failed"?(this._collectIceFailureDiagnostics().then(r=>{console.warn("[SecureBit ICE] failure diagnostics",r),this._noteIceFailureDiagnostics(r)}),this.isVerified?this._onPathLost("ice_failed"):console.warn("[SecureBit ICE] State is failed but not verified yet. Keeping session open for manual exchange.")):this.isReconnecting()&&(t==="connecting"||t==="new")||this.onStatusChange(t)},this.peerConnection.oniceconnectionstatechange=()=>{console.info("[SecureBit ICE] ICE connection state changed",{connectionState:this.peerConnection.connectionState,iceConnectionState:this.peerConnection.iceConnectionState,iceGatheringState:this.peerConnection.iceGatheringState})},this.peerConnection.onicecandidateerror=t=>{console.warn("[SecureBit ICE] ICE candidate error",{url:t.url,errorCode:t.errorCode,errorText:t.errorText})},this.peerConnection.ontrack=t=>{try{this._refreshRemoteStream()}catch(r){this._secureLog("warn","\u26A0\uFE0F ontrack handling failed",{errorType:r?.constructor?.name})}},this.peerConnection.ondatachannel=t=>{t.channel.label==="securechat"?(this.dataChannel=t.channel,this.setupDataChannel(t.channel)):t.channel.label==="heartbeat"&&(this.heartbeatChannel=t.channel)}}setupDataChannel(e){this.dataChannel=e;let t=!1,r=async()=>{if(!t){t=!0;try{this.dataChannel&&typeof this.dataChannel.bufferedAmountLowThreshold=="number"&&(this.dataChannel.bufferedAmountLowThreshold=1024*1024)}catch{}if(this._handshakeMode==="sbq2")try{await this._runSbq2KeyExchange()}catch(i){this._secureLog("error","SBQ2 key exchange failed to start",{errorType:i?.constructor?.name||"Unknown"}),this._sbq2Abort("start_failed","The secure handshake could not be started. Please try connecting again.");return}try{await this.establishConnection(),this.initializeFileTransfer()}catch(i){this._secureLog("error","Error in establishConnection:",{errorType:i?.constructor?.name||"Unknown"})}if(this.pendingSASCode&&this.dataChannel&&this.dataChannel.readyState==="open")try{let i={type:"sas_code",data:{code:this.pendingSASCode,timestamp:Date.now(),verificationMethod:"SAS",securityLevel:"MITM_PROTECTION_REQUIRED"}};this.dataChannel.send(JSON.stringify(i)),this.pendingSASCode=null}catch{}else this.pendingSASCode;this.isVerified?(this.onStatusChange("connected"),this.processMessageQueue(),setTimeout(async()=>{await this.calculateAndReportSecurityLevel(),this.autoEnableSecurityFeatures(),this.notifySecurityUpdate()},500)):(this._notifyVerificationReadyIfPossible(),this.initiateVerification()),this.startHeartbeat()}};this.dataChannel.onopen=r,this.dataChannel.readyState==="open"&&Promise.resolve().then(()=>r()).catch(i=>{this._secureLog("error","Deferred data channel open handling failed",{errorType:i?.constructor?.name||"Unknown"})}),this.dataChannel.onclose=()=>{this._resetReconnectState?.(),this._teardownRecoveryLifecycleListeners?.(),this.intentionalDisconnect?(this.onStatusChange("disconnected"),this._clearVerificationStates(),this.connectionClosedNotificationSent||(this.connectionClosedNotificationSent=!0,this.deliverMessageToUI("\u{1F50C} Enhanced secure connection closed","system"))):(this.onStatusChange("disconnected"),this._clearVerificationStates(),this.connectionClosedNotificationSent||(this.connectionClosedNotificationSent=!0,this.deliverMessageToUI("\u{1F50C} Enhanced secure connection closed. Check connection status.","system"))),this._wipeEphemeralKeys(),this.stopHeartbeat(),this.isVerified=!1},this.dataChannel.onmessage=async i=>{try{if(this._noteInboundActivity?.(),typeof i.data=="string")try{let n=JSON.parse(i.data),a=["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error"];if(n.type&&a.includes(n.type)){if(!this._enforceVerificationGate("file_message_receive",!1)){this._secureLog("error","Dropped file message received before verification",{messageType:n.type});return}if(!this.fileTransferSystem)try{if(this.isVerified&&this.dataChannel&&this.dataChannel.readyState==="open"){this.initializeFileTransfer();let o=0,c=30;for(;!this.fileTransferSystem&&o<c;)await new Promise(d=>setTimeout(d,100)),o++}}catch(o){this._secureLog("error","Failed to initialize file transfer system for receiver:",{errorType:o?.constructor?.name||"Unknown"})}if(this.fileTransferSystem){await this.fileTransferSystem.handleFileMessage(n);return}this._secureLog("warn","\u26A0\uFE0F File transfer system not ready, attempting lazy init...");try{if(await this._ensureFileTransferReady(),this.fileTransferSystem){await this.fileTransferSystem.handleFileMessage(n);return}}catch(o){this._secureLog("error","Lazy init of file transfer failed:",{errorType:o?.message||o?.constructor?.name||"Unknown"})}this._secureLog("error","No file transfer system available for:",{errorType:n.type?.constructor?.name||"Unknown"});return}if(n.type&&s.POST_VERIFICATION_CONTROL_TYPES.has(n.type)){if(!this._enforceVerificationGate("control_frame_receive",!1)){this._secureLog("error","Dropped control frame received before verification",{messageType:n.type});return}let o=s.MESSAGE_TYPES;if(n.type===o.MESSAGE_DELETE){let c=n?.data?.messageId??n?.messageId;if(typeof c=="string"&&c)try{this.onMessageDelete?.(c.slice(0,64))}catch{}return}if(n.type===o.MESSAGE_RECEIPT){let c=n?.data?.messageId??n?.messageId;if(typeof c=="string"&&c)try{this.onMessageDelivered?.(c.slice(0,64))}catch{}return}if([o.CALL_OFFER,o.CALL_ANSWER,o.CALL_ICE,o.CALL_DECLINE,o.CALL_END].includes(n.type)){try{await this._handleCallSignal(n.type,n.data||{})}catch{}return}if([o.ICE_RESTART_OFFER,o.ICE_RESTART_ANSWER,o.ICE_RESTART_REQUEST].includes(n.type)){try{await this._handleIceRestartSignal(n.type,n.data||{})}catch(c){this._secureLog("error","\u274C ICE restart signal handling failed",{errorType:c?.constructor?.name})}return}return}if(n.type===s.MESSAGE_TYPES.KEY_BLOB||n.type===s.MESSAGE_TYPES.KEY_PROOF){await this._sbq2HandleHandshakeFrame(n);return}if(n.type&&["heartbeat","verification","verification_response","verification_confirmed","verification_both_confirmed","sas_code","peer_disconnect","security_upgrade"].includes(n.type)){this.handleSystemMessage(n);return}if(n.type===s.MESSAGE_TYPES.RATCHET_MESSAGE){await this._processRatchetMessage(n);return}if(n.type==="enhanced_message"&&n.data){await this._processEnhancedMessageWithoutMutex(n);return}this._secureLog("error","Rejected unencrypted frame on the chat channel",{messageType:typeof n.type=="string"?n.type.slice(0,32):typeof n.type});return}catch{this._secureLog("error","Rejected malformed (non-JSON) frame on the chat channel",{dataLength:typeof i.data=="string"?i.data.length:0});return}else i.data instanceof ArrayBuffer&&await this._processBinaryDataWithoutMutex(i.data)}catch(n){this._secureLog("error","Failed to process message in onmessage:",{errorType:n?.constructor?.name||"Unknown"})}}}async _processBinaryDataWithoutMutex(e){try{if(!this._checkInboundRateLimit("binary_message"))return;let t=e;if(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey&&t instanceof ArrayBuffer&&t.byteLength>12)try{t=await this.removeNestedEncryption(t)}catch{this._secureLog("warn","Nested decryption failed, continuing with original data")}if(this.securityFeatures.hasPacketPadding&&t instanceof ArrayBuffer)try{t=this.removePacketPadding(t)}catch{this._secureLog("warn","Packet padding removal failed, continuing with original data")}if(this.securityFeatures.hasAntiFingerprinting&&t instanceof ArrayBuffer)try{t=this.removeAntiFingerprinting(t)}catch{this._secureLog("warn","Anti-fingerprinting removal failed, continuing with original data")}if(t instanceof ArrayBuffer){let r=new TextDecoder().decode(t);try{let i=JSON.parse(r);if(i.type==="fake"||i.isFakeTraffic===!0)return}catch{}this._secureLog("error","Rejected unauthenticated binary frame on the chat channel",{byteLength:e?.byteLength||0})}}catch(t){this._secureLog("error","Error processing binary data:",{errorType:t?.constructor?.name||"Unknown"})}}async _processRatchetMessage(e){try{if(!this._checkInboundRateLimit("ratchet_message"))return;if(!this.isRatchetActive()){this._secureLog("error","Received a ratchet message but no ratchet is active");return}if(typeof e?.h!="string"||typeof e?.c!="string"){this._secureLog("error","Malformed ratchet message frame");return}let t=await this._ratchet.decrypt(e.h,e.c);try{let r=JSON.parse(t);if(r.type==="fake"||r.isFakeTraffic===!0)return;if(r&&r.type==="message"&&typeof r.data=="string"){this.deliverMessageToUI(r.data,"received",r.meta);return}}catch{}this.deliverMessageToUI(t,"received")}catch(t){this._secureLog("error","Failed to decrypt ratchet message",{errorType:t?.constructor?.name||"Unknown"})}}async _processEnhancedMessageWithoutMutex(e){try{if(!this._checkInboundRateLimit("enhanced_message"))return;if(!this.encryptionKey||!this.macKey||!this.metadataKey){this._secureLog("error","Missing encryption keys for enhanced message");return}let t=await window.EnhancedSecureCryptoUtils.decryptMessage(e.data,this.encryptionKey,this.macKey,this.metadataKey);if(!this._validateIncomingSequenceNumber(t?.sequenceNumber,"enhanced_message")){this._secureLog("error","Rejected chat message failing anti-replay validation",{messageId:t?.messageId?"present":"absent"});return}if(t&&t.message){try{let r=JSON.parse(t.message);if(r.type==="fake"||r.isFakeTraffic===!0)return;if(r&&r.type==="message"&&typeof r.data=="string"){this.onMessage&&this.deliverMessageToUI(r.data,"received",r.meta);return}}catch{}this.onMessage&&this.deliverMessageToUI(t.message,"received")}else this._secureLog("warn","No message content in decrypted result")}catch(t){this._secureLog("error","Error processing enhanced message:",{errorType:t?.constructor?.name||"Unknown"})}}_generateOperationId(){return`op_${Date.now()}_${Math.random().toString(36).substr(2,9)}`}async _acquireMutex(e,t,r=5e3){let i=`_${e}Mutex`,n=this[i];if(!n)throw this._secureLog("error",`Unknown mutex: ${e}`,{mutexPropertyName:i,availableMutexes:this._getAvailableMutexes(),operationId:t}),new Error(`Unknown mutex: ${e}. Available: ${this._getAvailableMutexes().join(", ")}`);if(!t||typeof t!="string")throw new Error("Invalid operation ID for mutex acquisition");return new Promise((a,o)=>{(()=>{if(n.lockId===t){this._secureLog("warn",`Mutex '${e}' already locked by same operation`,{operationId:t}),a();return}if(!n.locked)n.locked=!0,n.lockId=t,n.lockTime=Date.now(),this._secureLog("debug",`Mutex '${e}' acquired atomically`,{operationId:t,lockTime:n.lockTime}),n.lockTimeout=setTimeout(()=>{this._handleMutexTimeout(e,t,r)},r),a();else{let d={resolve:a,reject:o,operationId:t,timestamp:Date.now(),timeout:setTimeout(()=>{let u=n.queue.findIndex(h=>h.operationId===t);u!==-1&&(n.queue.splice(u,1),o(new Error(`Mutex acquisition timeout for '${e}'`)))},r)};n.queue.push(d),this._secureLog("debug",`Operation queued for mutex '${e}'`,{operationId:t,queueLength:n.queue.length,currentLockId:n.lockId})}})()})}_releaseMutex(e,t){if(!e||typeof e!="string")throw new Error("Invalid mutex name provided for release");if(!t||typeof t!="string")throw new Error("Invalid operation ID provided for mutex release");let r=`_${e}Mutex`,i=this[r];if(!i)throw this._secureLog("error",`Unknown mutex for release: ${e}`,{mutexPropertyName:r,availableMutexes:this._getAvailableMutexes(),operationId:t}),new Error(`Unknown mutex for release: ${e}`);if(i.lockId!==t)throw this._secureLog("error","CRITICAL: Invalid mutex release attempt - potential race condition",{mutexName:e,expectedLockId:i.lockId,providedOperationId:t,mutexState:{locked:i.locked,lockTime:i.lockTime,queueLength:i.queue.length}}),new Error(`Invalid mutex release attempt for '${e}': expected '${i.lockId}', got '${t}'`);if(!i.locked)throw this._secureLog("error","CRITICAL: Attempting to release unlocked mutex",{mutexName:e,operationId:t,mutexState:{locked:i.locked,lockId:i.lockId,lockTime:i.lockTime}}),new Error(`Attempting to release unlocked mutex: ${e}`);try{i.lockTimeout&&(clearTimeout(i.lockTimeout),i.lockTimeout=null);let n=i.lockTime?Date.now()-i.lockTime:0;i.locked=!1,i.lockId=null,i.lockTime=null,this._secureLog("debug",`Mutex released successfully: ${e}`,{operationId:t,lockDuration:n,queueLength:i.queue.length}),this._processNextInQueue(e)}catch(n){throw this._secureLog("error","Error during mutex release queue processing",{mutexName:e,operationId:t,errorType:n.constructor.name,errorMessage:n.message}),i.locked=!1,i.lockId=null,i.lockTime=null,i.lockTimeout=null,n}}_processNextInQueue(e){let t=this[`_${e}Mutex`];if(!t){this._secureLog("error",`Mutex not found for queue processing: ${e}`);return}if(t.queue.length===0)return;if(t.locked){this._secureLog("warn",`Mutex '${e}' is still locked, skipping queue processing`,{lockId:t.lockId,queueLength:t.queue.length});return}let r=t.queue.shift();if(!r){this._secureLog("warn",`Empty queue item for mutex '${e}'`);return}if(!r.operationId||!r.resolve||!r.reject){this._secureLog("error",`Invalid queue item structure for mutex '${e}'`,{hasOperationId:!!r.operationId,hasResolve:!!r.resolve,hasReject:!!r.reject});return}try{r.timeout&&clearTimeout(r.timeout),this._secureLog("debug",`Processing next operation in queue for mutex '${e}'`,{operationId:r.operationId,queueRemaining:t.queue.length,timestamp:Date.now()}),setTimeout(async()=>{try{await this._acquireMutex(e,r.operationId,5e3),this._secureLog("debug",`Queued operation acquired mutex '${e}'`,{operationId:r.operationId,acquisitionTime:Date.now()}),r.resolve()}catch(i){this._secureLog("error",`Queued operation failed to acquire mutex '${e}'`,{operationId:r.operationId,errorType:i.constructor.name,errorMessage:i.message,timestamp:Date.now()}),r.reject(new Error(`Queue processing failed for '${e}': ${i.message}`)),setTimeout(()=>{this._processNextInQueue(e)},50)}},10)}catch(i){this._secureLog("error",`Critical error during queue processing for mutex '${e}'`,{operationId:r.operationId,errorType:i.constructor.name,errorMessage:i.message});try{r.reject(new Error(`Queue processing critical error: ${i.message}`))}catch(n){this._secureLog("error","Failed to reject queue item",{originalError:i.message,rejectError:n.message})}setTimeout(()=>{this._processNextInQueue(e)},100)}}_getAvailableMutexes(){let e=[],t=Object.getOwnPropertyNames(this);for(let r of t)if(r.endsWith("Mutex")&&r.startsWith("_")){let i=r.slice(1,-5);e.push(i)}return e}async _withMutex(e,t,r=5e3){let i=this._generateOperationId();if(!this._validateMutexSystem())throw this._secureLog("error","Mutex system not properly initialized",{operationId:i,mutexName:e}),new Error("Mutex system not properly initialized. Call _initializeMutexSystem() first.");let n=this[`_${e}Mutex`];if(!n)throw new Error(`Mutex '${e}' not found`);let a=!1;try{await this._acquireMutex(e,i,r),a=!0;let o=`${e}Operations`;this._operationCounters&&this._operationCounters[o]!==void 0&&this._operationCounters[o]++;let c=await t(i);return c===void 0&&t.name!=="cleanup"&&this._secureLog("warn","Mutex operation returned undefined result",{operationId:i,mutexName:e,operationName:t.name}),c}catch(o){throw this._secureLog("error","Error in mutex operation",{operationId:i,mutexName:e,errorType:o.constructor.name,errorMessage:o.message,mutexAcquired:a,mutexState:n?{locked:n.locked,lockId:n.lockId,queueLength:n.queue.length}:"null"}),e==="keyOperation"&&this._handleKeyOperationError(o,i),(o.message.includes("timeout")||o.message.includes("race condition"))&&this._emergencyUnlockAllMutexes("errorHandler"),o}finally{if(a)try{await this._releaseMutex(e,i),n.locked&&n.lockId===i&&(this._secureLog("error","Mutex release verification failed",{operationId:i,mutexName:e}),n.locked=!1,n.lockId=null,n.lockTimeout=null)}catch(o){this._secureLog("error","Error releasing mutex in finally block",{operationId:i,mutexName:e,releaseErrorType:o.constructor.name,releaseErrorMessage:o.message}),n.locked=!1,n.lockId=null,n.lockTimeout=null}}}_validateMutexSystem(){let e=["keyOperation","cryptoOperation","connectionOperation"];for(let t of e){let r=`_${t}Mutex`,i=this[r];if(!i||typeof i!="object")return this._secureLog("error",`Missing or invalid mutex: ${t}`,{mutexPropertyName:r,mutexType:typeof i}),!1;let n=["locked","queue","lockId","lockTimeout"];for(let a of n)if(!(a in i))return this._secureLog("error",`Mutex ${t} missing property: ${a}`),!1}return!0}_emergencyRecoverMutexSystem(){this._secureLog("warn","Emergency mutex system recovery initiated");try{if(this._emergencyUnlockAllMutexes("emergencyRecovery"),this._initializeMutexSystem(),!this._validateMutexSystem())throw new Error("Mutex system validation failed after recovery");return this._secureLog("info","Mutex system recovered successfully with validation"),!0}catch(e){this._secureLog("error","Failed to recover mutex system",{errorType:e.constructor.name,errorMessage:e.message});try{return this._initializeMutexSystem(),this._secureLog("warn","Forced mutex system re-initialization completed"),!0}catch(t){return this._secureLog("error","CRITICAL: Forced re-initialization also failed",{originalError:e.message,reinitError:t.message}),!1}}}async _generateEncryptionKeys(){return this._withMutex("keyOperation",async e=>{this._secureLog("info","Generating encryption keys with atomic mutex",{operationId:e});let t=this._keySystemState;if(t.isInitializing){this._secureLog("warn","Key generation already in progress, waiting for completion",{operationId:e,lastOperation:t.lastOperation,lastOperationTime:t.lastOperationTime});let r=0,i=50;for(;t.isInitializing&&r<i;)await new Promise(n=>setTimeout(n,100)),r++;if(t.isInitializing)throw new Error("Key generation timeout - operation still in progress after 5 seconds")}try{t.isInitializing=!0,t.lastOperation="generation",t.lastOperationTime=Date.now(),t.operationId=e,this._secureLog("debug","Atomic key generation state set",{operationId:e,timestamp:t.lastOperationTime});let r=null,i=null;try{if(r=await this._generateEphemeralECDHKeys(),!r||!r.privateKey||!r.publicKey)throw new Error("Ephemeral ECDH key pair validation failed");if(!this._validateKeyPairConstantTime(r))throw new Error("Ephemeral ECDH keys are not valid CryptoKey instances");this._secureLog("debug","Ephemeral ECDH keys generated and validated for PFS",{operationId:e,privateKeyType:r.privateKey.algorithm?.name,publicKeyType:r.publicKey.algorithm?.name,isEphemeral:!0})}catch(n){this._secureLog("error","Ephemeral ECDH key generation failed",{operationId:e,errorType:n.constructor.name}),this._throwSecureError(n,"ephemeral_ecdh_key_generation")}try{if(i=await window.EnhancedSecureCryptoUtils.generateECDSAKeyPair(),!i||!i.privateKey||!i.publicKey)throw new Error("ECDSA key pair validation failed");if(!this._validateKeyPairConstantTime(i))throw new Error("ECDSA keys are not valid CryptoKey instances");this._secureLog("debug","ECDSA keys generated and validated",{operationId:e,privateKeyType:i.privateKey.algorithm?.name,publicKeyType:i.publicKey.algorithm?.name})}catch(n){this._secureLog("error","ECDSA key generation failed",{operationId:e,errorType:n.constructor.name}),this._throwSecureError(n,"ecdsa_key_generation")}if(!r||!i)throw new Error("One or both key pairs failed to generate");return this._enableSecurityFeaturesAfterKeyGeneration(r,i),this._secureLog("info","Encryption keys generated successfully with atomic protection",{operationId:e,hasECDHKeys:!!(r?.privateKey&&r?.publicKey),hasECDSAKeys:!!(i?.privateKey&&i?.publicKey),generationTime:Date.now()-t.lastOperationTime}),{ecdhKeyPair:r,ecdsaKeyPair:i}}catch(r){throw this._secureLog("error","Key generation failed, resetting state",{operationId:e,errorType:r.constructor.name}),r}finally{t.isInitializing=!1,t.operationId=null,this._secureLog("debug","Key generation state reset",{operationId:e})}})}_enableSecurityFeaturesAfterKeyGeneration(e,t){try{e&&e.privateKey&&e.publicKey&&(this.securityFeatures.hasEncryption=!0,this.securityFeatures.hasECDH=!0,this._secureLog("info","ECDH encryption features enabled")),t&&t.privateKey&&t.publicKey&&(this.securityFeatures.hasECDSA=!0,this._secureLog("info","ECDSA signature features enabled")),this.securityFeatures.hasEncryption&&(this.securityFeatures.hasMetadataProtection=!0,this.securityFeatures.hasEnhancedReplayProtection=!0,this.securityFeatures.hasNonExtractableKeys=!0,this._secureLog("info","Additional encryption-dependent features enabled")),e&&this.ephemeralKeyPairs.size>0&&(this.securityFeatures.hasPFS=!0,this._secureLog("info","Perfect Forward Secrecy enabled with ephemeral keys")),this._secureLog("info","Security features updated after key generation",{hasEncryption:this.securityFeatures.hasEncryption,hasECDH:this.securityFeatures.hasECDH,hasECDSA:this.securityFeatures.hasECDSA,hasMetadataProtection:this.securityFeatures.hasMetadataProtection,hasEnhancedReplayProtection:this.securityFeatures.hasEnhancedReplayProtection,hasNonExtractableKeys:this.securityFeatures.hasNonExtractableKeys,hasPFS:this.securityFeatures.hasPFS})}catch(r){this._secureLog("error","Failed to enable security features after key generation",{errorType:r.constructor.name,errorMessage:r.message})}}_emergencyUnlockAllMutexes(e="unknown"){let t=["keyOperation","cryptoOperation","connectionOperation","emergencyRecovery","systemShutdown","errorHandler"];if(!t.includes(e))throw this._secureLog("error","UNAUTHORIZED emergency mutex unlock attempt",{callerContext:e,authorizedCallers:t,timestamp:Date.now()}),new Error(`Unauthorized emergency mutex unlock attempt by: ${e}`);let r=["keyOperation","cryptoOperation","connectionOperation"];this._secureLog("error","EMERGENCY: Unlocking all mutexes with authorization and state cleanup",{callerContext:e,timestamp:Date.now()});let i=0,n=0;if(r.forEach(a=>{let o=this[`_${a}Mutex`];if(o)try{o.lockTimeout&&clearTimeout(o.lockTimeout);let c={locked:o.locked,lockId:o.lockId,lockTime:o.lockTime,queueLength:o.queue.length};o.locked=!1,o.lockId=null,o.lockTimeout=null,o.lockTime=null;let d=0;o.queue.forEach(u=>{try{u.reject&&typeof u.reject=="function"&&(u.reject(new Error(`Emergency mutex unlock for ${a} by ${e}`)),d++)}catch(h){this._secureLog("warn","Failed to reject queue item during emergency unlock",{mutexName:a,errorType:h.constructor.name})}}),o.queue=[],i++,this._secureLog("debug",`Emergency unlocked mutex: ${a}`,{previousState:c,queueRejectCount:d,callerContext:e})}catch(c){n++,this._secureLog("error",`Error during emergency unlock of mutex: ${a}`,{errorType:c.constructor.name,errorMessage:c.message,callerContext:e})}}),this._keySystemState)try{let a={...this._keySystemState};this._keySystemState.isInitializing=!1,this._keySystemState.isRotating=!1,this._keySystemState.isDestroying=!1,this._keySystemState.operationId=null,this._keySystemState.concurrentOperations=0,this._secureLog("debug","Emergency reset key system state",{previousState:a,callerContext:e})}catch(a){this._secureLog("error","Error resetting key system state during emergency unlock",{errorType:a.constructor.name,errorMessage:a.message,callerContext:e})}this._secureLog("info","Emergency mutex unlock completed",{callerContext:e,unlockedCount:i,errorCount:n,totalMutexes:r.length,timestamp:Date.now()}),setTimeout(()=>{this._validateMutexSystemAfterEmergencyUnlock()},100)}_handleKeyOperationError(e,t){this._secureLog("error","Key operation error detected, initiating recovery",{operationId:t,errorType:e.constructor.name,errorMessage:e.message}),this._keySystemState&&(this._keySystemState.isInitializing=!1,this._keySystemState.isRotating=!1,this._keySystemState.isDestroying=!1,this._keySystemState.operationId=null),this.ecdhKeyPair=null,this.ecdsaKeyPair=null,this.encryptionKey=null,this.macKey=null,this.metadataKey=null,(e.message.includes("timeout")||e.message.includes("race condition"))&&(this._secureLog("warn","Race condition or timeout detected, triggering emergency recovery"),this._emergencyRecoverMutexSystem())}_generateSecureIV(e=12,t="general"){if(this._ivTrackingSystem.emergencyMode)throw this._secureLog("error","CRITICAL: IV generation blocked - emergency mode active due to IV reuse"),new Error("IV generation blocked - emergency mode active");let r=0,i=100;for(;r<i;){r++;let n=crypto.getRandomValues(new Uint8Array(e)),a=Array.from(n).map(o=>o.toString(16).padStart(2,"0")).join("");if(this._ivTrackingSystem.usedIVs.has(a)){if(this._ivTrackingSystem.collisionCount++,this._secureLog("error","CRITICAL: IV reuse detected!",{context:t,attempt:r,collisionCount:this._ivTrackingSystem.collisionCount,ivString:a.substring(0,16)+"..."}),this._ivTrackingSystem.collisionCount>5)throw this._ivTrackingSystem.emergencyMode=!0,this._secureLog("error","CRITICAL: Emergency mode activated due to excessive IV reuse"),new Error("Emergency mode: Excessive IV reuse detected");continue}if(!this._validateIVEntropy(n)){if(this._ivTrackingSystem.entropyValidation.entropyFailures++,this._secureLog("warn","Low entropy IV detected",{context:t,attempt:r,entropyFailures:this._ivTrackingSystem.entropyValidation.entropyFailures}),this._ivTrackingSystem.entropyValidation.entropyFailures>10)throw this._ivTrackingSystem.emergencyMode=!0,this._secureLog("error","CRITICAL: Emergency mode activated due to low entropy IVs"),new Error("Emergency mode: Low entropy IVs detected");continue}return this._ivTrackingSystem.usedIVs.add(a),this._ivTrackingSystem.ivHistory.set(a,{timestamp:Date.now(),context:t,attempt:r}),this.sessionId&&(this._ivTrackingSystem.sessionIVs.has(this.sessionId)||this._ivTrackingSystem.sessionIVs.set(this.sessionId,new Set),this._ivTrackingSystem.sessionIVs.get(this.sessionId).add(a)),this._validateRNGQuality(),this._secureLog("debug","Secure IV generated",{context:t,attempt:r,ivSize:e,totalIVs:this._ivTrackingSystem.usedIVs.size}),n}throw this._secureLog("error",`Failed to generate unique IV after ${i} attempts`,{context:t,totalIVs:this._ivTrackingSystem.usedIVs.size}),new Error(`Failed to generate unique IV after ${i} attempts`)}_validateIVEntropy(e){this._ivTrackingSystem.entropyValidation.entropyTests++;let t=new Array(256).fill(0);for(let S=0;S<e.length;S++)t[e[S]]++;let r={shannon:0,min:0,collision:0,compression:0,quantum:0},i=0,n=e.length;for(let S=0;S<256;S++)if(t[S]>0){let g=t[S]/n;i-=g*Math.log2(g)}r.shannon=i;let o=Math.max(...t)/n;r.min=-Math.log2(o);let c=0;for(let S=0;S<256;S++)if(t[S]>0){let g=t[S]/n;c+=g*g}r.collision=-Math.log2(c);let d=Array.from(e).map(S=>String.fromCharCode(S)).join(""),u=this._estimateCompressedLength(d);r.compression=(1-u/n)*8,r.quantum=this._calculateQuantumResistantEntropy(e);let h=this._detectAdvancedSuspiciousPatterns(e),m=this._ivTrackingSystem.entropyValidation.minEntropy,p=r.shannon>=m&&r.min>=m*.8&&r.collision>=m*.9&&r.compression>=m*.7&&r.quantum>=m*.6&&!h;return p||this._secureLog("warn","Enhanced IV entropy validation failed",{shannon:r.shannon.toFixed(2),min:r.min.toFixed(2),collision:r.collision.toFixed(2),compression:r.compression.toFixed(2),quantum:r.quantum.toFixed(2),minThreshold:m,hasSuspiciousPatterns:h}),p}_estimateCompressedLength(e){let t=0,r=0;for(;r<e.length;){let i=0,n=0;for(let a=Math.max(0,r-255);a<r;a++){let o=0;for(;r+o<e.length&&e[r+o]===e[a+o]&&o<255;)o++;o>i&&(i=o,n=r-a)}i>=3?(t+=3,r+=i):(t+=1,r+=1)}return t}_calculateQuantumResistantEntropy(e){let t=0;this._detectQuantumVulnerablePatterns(e)&&(t-=2);let i=this._analyzeBitDistribution(e);t+=i.score;let n=this._detectPeriodicity(e);return t-=n*.5,Math.max(0,Math.min(8,t))}_detectQuantumVulnerablePatterns(e){let t=[[0,0,0,0,0,0,0,0],[255,255,255,255,255,255,255,255],[0,1,0,1,0,1,0,1],[1,0,1,0,1,0,1,0]];for(let r of t)for(let i=0;i<=e.length-r.length;i++){let n=!0;for(let a=0;a<r.length;a++)if(e[i+a]!==r[a]){n=!1;break}if(n)return!0}return!1}_analyzeBitDistribution(e){let t=0,r=e.length*8;for(let c of e)t+=(c>>>0).toString(2).split("1").length-1;let i=(r-t)/r,n=t/r,a=Math.abs(.5-n);return{score:Math.max(0,8-a*16),zeroRatio:i,oneRatio:n,deviation:a}}_detectPeriodicity(e){if(e.length<16)return 0;let t=0;for(let r=2;r<=e.length/2;r++){let i=0,n=0;for(let a=0;a<e.length-r;a++)e[a]===e[a+r]&&i++,n++;if(n>0){let a=i/n;t=Math.max(t,a)}}return t}_detectAdvancedSuspiciousPatterns(e){let t=[[0,1,2,3,4,5,6,7],[255,254,253,252,251,250,249,248],[0,0,0,0,0,0,0,0],[255,255,255,255,255,255,255,255],[0,255,0,255,0,255,0,255],[255,0,255,0,255,0,255,0]];for(let n of t)for(let a=0;a<=e.length-n.length;a++){let o=!0;for(let c=0;c<n.length;c++)if(e[a+c]!==n[c]){o=!1;break}if(o)return!0}return this._calculateLocalEntropy(e).filter(n=>n<3).length>e.length*.3}_calculateLocalEntropy(e){let r=[];for(let i=0;i<=e.length-8;i++){let n=e.slice(i,i+8),a={};for(let c of n)a[c]=(a[c]||0)+1;let o=0;for(let c of Object.values(a)){let d=c/8;o-=d*Math.log2(d)}r.push(o)}return r}_detectSuspiciousIVPatterns(e){let t=e.every(n=>n===0),r=e.every(n=>n===255);if(t||r)return!0;let i=0;for(let n=1;n<e.length;n++)if(e[n]===e[n-1]+1||e[n]===e[n-1]-1?i++:i=0,i>=3)return!0;for(let n=2;n<=Math.floor(e.length/2);n++)for(let a=0;a<=e.length-n*2;a++){let o=e.slice(a,a+n),c=e.slice(a+n,a+n*2);if(o.every((d,u)=>d===c[u]))return!0}return!1}async _cleanupOldIVs(){let e=Date.now(),t=18e5,r=0,i=[];if(this._ivTrackingSystem.ivHistory.size>this._ivTrackingSystem.maxIVHistorySize){let n=Array.from(this._ivTrackingSystem.ivHistory.entries()),a=n.slice(0,n.length-this._ivTrackingSystem.maxIVHistorySize);for(let[o]of a)i.push(o),r++,i.length>=100&&(this._processCleanupBatch(i),i.length=0)}for(let[n,a]of this._ivTrackingSystem.ivHistory.entries())e-a.timestamp>t&&(i.push(n),r++,i.length>=100&&(this._processCleanupBatch(i),i.length=0));i.length>0&&this._processCleanupBatch(i);for(let[n,a]of this._ivTrackingSystem.sessionIVs.entries())if(a.size>this._ivTrackingSystem.maxSessionIVs){let o=Array.from(a),c=o.slice(0,o.length-this._ivTrackingSystem.maxSessionIVs);for(let d of c)a.delete(d),this._ivTrackingSystem.usedIVs.delete(d),this._ivTrackingSystem.ivHistory.delete(d),r++}r>50&&await this._performNaturalCleanup(),r>0&&this._secureLog("debug",`Enhanced cleanup: ${r} old IVs removed`,{cleanedCount:r,remainingIVs:this._ivTrackingSystem.usedIVs.size,remainingHistory:this._ivTrackingSystem.ivHistory.size,memoryPressure:this._calculateMemoryPressure()})}_processCleanupBatch(e){for(let t of e)this._ivTrackingSystem.usedIVs.delete(t),this._ivTrackingSystem.ivHistory.delete(t)}_calculateMemoryPressure(){let e=this._ivTrackingSystem.usedIVs.size,t=this._resourceLimits.maxIVHistory;return Math.min(100,Math.floor(e/t*100))}_getIVTrackingStats(){return{totalIVs:this._ivTrackingSystem.usedIVs.size,collisionCount:this._ivTrackingSystem.collisionCount,entropyTests:this._ivTrackingSystem.entropyValidation.entropyTests,entropyFailures:this._ivTrackingSystem.entropyValidation.entropyFailures,rngTests:this._ivTrackingSystem.rngValidation.testsPerformed,weakRngDetected:this._ivTrackingSystem.rngValidation.weakRngDetected,emergencyMode:this._ivTrackingSystem.emergencyMode,sessionCount:this._ivTrackingSystem.sessionIVs.size,lastCleanup:this._lastIVCleanupTime||0}}_resetIVTrackingSystem(){this._secureLog("warn","Resetting IV tracking system"),this._ivTrackingSystem.usedIVs.clear(),this._ivTrackingSystem.ivHistory.clear(),this._ivTrackingSystem.sessionIVs.clear(),this._ivTrackingSystem.collisionCount=0,this._ivTrackingSystem.entropyValidation.entropyTests=0,this._ivTrackingSystem.entropyValidation.entropyFailures=0,this._ivTrackingSystem.rngValidation.testsPerformed=0,this._ivTrackingSystem.rngValidation.weakRngDetected=!1,this._ivTrackingSystem.emergencyMode=!1,this._secureLog("info","IV tracking system reset completed")}_validateRNGQuality(){let e=Date.now();if(this._ivTrackingSystem.rngValidation.testsPerformed%1e3===0)try{let t=[];for(let n=0;n<100;n++)t.push(crypto.getRandomValues(new Uint8Array(12)));let r=t.map(n=>Array.from(n).map(a=>a.toString(16).padStart(2,"0")).join("")),i=new Set(r);i.size<95&&(this._ivTrackingSystem.rngValidation.weakRngDetected=!0,this._secureLog("error","CRITICAL: Weak RNG detected in validation test",{uniqueIVs:i.size,totalTests:t.length})),this._ivTrackingSystem.rngValidation.lastValidation=e}catch(t){this._secureLog("error","RNG validation failed",{errorType:t.constructor.name})}this._ivTrackingSystem.rngValidation.testsPerformed++}_handleMutexTimeout(e,t,r){let i=this[`_${e}Mutex`];if(!i){this._secureLog("error",`Mutex '${e}' not found during timeout handling`);return}if(i.lockId!==t){this._secureLog("warn",`Timeout for different operation ID on mutex '${e}'`,{expectedOperationId:t,actualLockId:i.lockId,locked:i.locked});return}if(!i.locked){this._secureLog("warn",`Timeout for already unlocked mutex '${e}'`,{operationId:t});return}try{let n=i.lockTime?Date.now()-i.lockTime:0;this._secureLog("warn",`Mutex '${e}' auto-released due to timeout`,{operationId:t,lockDuration:n,timeout:r,queueLength:i.queue.length}),i.locked=!1,i.lockId=null,i.lockTimeout=null,i.lockTime=null,setTimeout(()=>{try{this._processNextInQueue(e)}catch(a){this._secureLog("error",`Error processing queue after timeout for mutex '${e}'`,{errorType:a.constructor.name,errorMessage:a.message})}},10)}catch(n){this._secureLog("error",`Critical error during mutex timeout handling for '${e}'`,{operationId:t,errorType:n.constructor.name,errorMessage:n.message});try{this._emergencyUnlockAllMutexes("timeoutHandler")}catch(a){this._secureLog("error","Emergency unlock failed during timeout handling",{originalError:n.message,emergencyError:a.message})}}}_validateMutexSystemAfterEmergencyUnlock(){let e=["keyOperation","cryptoOperation","connectionOperation"],t=0;this._secureLog("info","Validating mutex system after emergency unlock"),e.forEach(r=>{let i=this[`_${r}Mutex`];if(!i){t++,this._secureLog("error",`Mutex '${r}' not found after emergency unlock`);return}i.locked&&(t++,this._secureLog("error",`Mutex '${r}' still locked after emergency unlock`,{lockId:i.lockId,lockTime:i.lockTime})),i.lockId!==null&&(t++,this._secureLog("error",`Mutex '${r}' still has lock ID after emergency unlock`,{lockId:i.lockId})),i.lockTimeout!==null&&(t++,this._secureLog("error",`Mutex '${r}' still has timeout after emergency unlock`)),i.queue.length>0&&(t++,this._secureLog("error",`Mutex '${r}' still has queue items after emergency unlock`,{queueLength:i.queue.length}))}),this._keySystemState&&(this._keySystemState.isInitializing||this._keySystemState.isRotating||this._keySystemState.isDestroying)&&(t++,this._secureLog("error","Key system state not properly reset after emergency unlock",{isInitializing:this._keySystemState.isInitializing,isRotating:this._keySystemState.isRotating,isDestroying:this._keySystemState.isDestroying})),t===0?this._secureLog("info","Mutex system validation passed after emergency unlock"):(this._secureLog("error","Mutex system validation failed after emergency unlock",{validationErrors:t}),setTimeout(()=>{this._emergencyRecoverMutexSystem()},1e3))}_getMutexSystemDiagnostics(){let e={timestamp:Date.now(),systemValid:this._validateMutexSystem(),mutexes:{},counters:{...this._operationCounters},keySystemState:{...this._keySystemState}};return["keyOperation","cryptoOperation","connectionOperation"].forEach(r=>{let i=`_${r}Mutex`,n=this[i];n?e.mutexes[r]={locked:n.locked,lockId:n.lockId,queueLength:n.queue.length,hasTimeout:!!n.lockTimeout}:e.mutexes[r]={error:"not_found"}}),e}async createSecureOffer(){return this._withMutex("connectionOperation",async e=>{this._secureLog("info","Creating secure offer with mutex",{operationId:e,connectionAttempts:this.connectionAttempts,currentState:this.peerConnection?.connectionState||"none"});try{if(this._resetNotificationFlags(),!this._checkRateLimit())throw new Error("Connection rate limit exceeded. Please wait before trying again.");this.connectionAttempts=0,this.sessionSalt=window.EnhancedSecureCryptoUtils.generateSalt(),this._secureLog("debug","Session salt generated",{operationId:e,saltLength:this.sessionSalt.length,isValidSalt:Array.isArray(this.sessionSalt)&&this.sessionSalt.length===64});let t=await this._generateEncryptionKeys();if(this.ecdhKeyPair=t.ecdhKeyPair,this.ecdsaKeyPair=t.ecdsaKeyPair,!this.ecdhKeyPair?.privateKey||!this.ecdhKeyPair?.publicKey)throw new Error("Failed to generate valid ECDH key pair");if(!this.ecdsaKeyPair?.privateKey||!this.ecdsaKeyPair?.publicKey)throw new Error("Failed to generate valid ECDSA key pair");let r=await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(await crypto.subtle.exportKey("spki",this.ecdhKeyPair.publicKey)),i=await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(await crypto.subtle.exportKey("spki",this.ecdsaKeyPair.publicKey));if(!r||!i)throw new Error("Failed to generate key fingerprints");this._secureLog("info","Generated unique key pairs for MITM protection",{operationId:e,hasECDHFingerprint:!!r,hasECDSAFingerprint:!!i,fingerprintLength:r.length,timestamp:Date.now()});let n=await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(this.ecdhKeyPair.publicKey,this.ecdsaKeyPair.privateKey,"ECDH"),a=await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(this.ecdsaKeyPair.publicKey,this.ecdsaKeyPair.privateKey,"ECDSA");if(!n||typeof n!="object")throw this._secureLog("error","CRITICAL: ECDH key export failed - invalid object structure",{operationId:e}),new Error("CRITICAL SECURITY FAILURE: ECDH key export validation failed - hard abort required");if(!n.keyData||!n.signature)throw this._secureLog("error","CRITICAL: ECDH key export incomplete - missing keyData or signature",{operationId:e,hasKeyData:!!n.keyData,hasSignature:!!n.signature}),new Error("CRITICAL SECURITY FAILURE: ECDH key export incomplete - hard abort required");if(!a||typeof a!="object")throw this._secureLog("error","CRITICAL: ECDSA key export failed - invalid object structure",{operationId:e}),new Error("CRITICAL SECURITY FAILURE: ECDSA key export validation failed - hard abort required");if(!a.keyData||!a.signature)throw this._secureLog("error","CRITICAL: ECDSA key export incomplete - missing keyData or signature",{operationId:e,hasKeyData:!!a.keyData,hasSignature:!!a.signature}),new Error("CRITICAL SECURITY FAILURE: ECDSA key export incomplete - hard abort required");this._updateSecurityFeatures({hasEncryption:!0,hasECDH:!0,hasECDSA:!0,hasMutualAuth:!0,hasMetadataProtection:!0,hasEnhancedReplayProtection:!0,hasNonExtractableKeys:!0,hasRateLimiting:!0,hasEnhancedValidation:!0,hasPFS:!0}),this.isInitiator=!0,this.onStatusChange("connecting"),this.createPeerConnection(),this.dataChannel=this.peerConnection.createDataChannel("securechat",{ordered:!0}),this.setupDataChannel(this.dataChannel),this._secureLog("debug","Data channel created",{operationId:e,channelLabel:this.dataChannel.label,channelOrdered:this.dataChannel.ordered});let o=await this.peerConnection.createOffer({offerToReceiveAudio:!1,offerToReceiveVideo:!1});await this.peerConnection.setLocalDescription(o);try{let b=this._extractDTLSFingerprintFromSDP(o.sdp);this.expectedDTLSFingerprint=b,this._secureLog("info","Generated DTLS fingerprint for out-of-band verification",{fingerprint:b,context:"offer_creation"}),this.deliverMessageToUI(`DTLS fingerprint ready for verification: ${b}`,"system")}catch(b){this._secureLog("error","Failed to extract DTLS fingerprint from offer",{error:b.message})}let c=Date.now(),d=await this.waitForIceGathering(),u=this._summarizeIceCandidatesInSDP(this.peerConnection.localDescription?.sdp),h=u.total;if(!d&&h===0)throw this.deliverMessageToUI("No network candidates could be gathered, so the invitation would not be usable. This usually means a VPN or firewall is blocking STUN/TURN. Try turning the VPN off, switching network, or adding your own TURN server in Advanced network settings.","system"),new Error("ICE gathering produced no candidates \u2014 check VPN/firewall or configure a TURN server");if(this._secureLog(h>0?"info":"warn","ICE candidates captured for offer export",{candidateSummary:u,iceGatheringState:this.peerConnection.iceGatheringState,iceGatheringDurationMs:Date.now()-c,iceGatheringCompleted:d}),this._logIceCandidateDiagnostics("offer export",this.peerConnection.localDescription?.sdp,{iceGatheringState:this.peerConnection.iceGatheringState,iceGatheringDurationMs:Date.now()-c,iceGatheringCompleted:d}),d||this.deliverMessageToUI("ICE gathering timed out before completion, but available candidates were included in the invitation. Connectivity may still fail on restrictive networks.","system"),h===0&&this.deliverMessageToUI("No ICE candidates were gathered for the invitation yet. The peer connection may fail unless network candidates become available.","system"),this._secureLog("debug","ICE gathering completed",{operationId:e,iceGatheringState:this.peerConnection.iceGatheringState,connectionState:this.peerConnection.connectionState}),this.verificationCode=window.EnhancedSecureCryptoUtils.generateVerificationCode(),!this.verificationCode||this.verificationCode.length<s.SIZES.VERIFICATION_CODE_MIN_LENGTH)throw new Error("Failed to generate valid verification code");let m=window.EnhancedSecureCryptoUtils.generateMutualAuthChallenge();if(!m)throw new Error("Failed to generate mutual authentication challenge");if(this.sessionId=Array.from(crypto.getRandomValues(new Uint8Array(s.SIZES.SESSION_ID_LENGTH))).map(b=>b.toString(16).padStart(2,"0")).join(""),!this.sessionId||this.sessionId.length!==s.SIZES.SESSION_ID_LENGTH*2)throw new Error("Failed to generate valid session ID");this.connectionId=Array.from(crypto.getRandomValues(new Uint8Array(8))).map(b=>b.toString(16).padStart(2,"0")).join(""),this._storePendingOfferContext();let p={level:"MAXIMUM",score:100,color:"green",details:"All security features enabled by default",passedChecks:10,totalChecks:10,isRealData:!0},S=Date.now(),g={t:"offer",s:this.peerConnection.localDescription.sdp,v:s.PROTOCOL_VERSION,ts:S,e:n,d:a,sl:this.sessionSalt,si:this.sessionId,ci:this.connectionId,vc:this.verificationCode,ac:m,slv:"MAX",dr:s.RATCHET_VERSION,kf:{e:r.substring(0,12),d:i.substring(0,12)}};try{let b=this.validateEnhancedOfferData(g)}catch(b){throw new Error(`Offer package validation error: ${b.message}`)}if(this._secureLog("info","Enhanced secure offer created successfully",{operationId:e,version:g.version,hasECDSA:!0,hasMutualAuth:!0,hasSessionId:!!g.sessionId,securityLevel:p.level,timestamp:S,capabilitiesCount:10}),this._dispatchAppEvent?.(new CustomEvent("new-connection",{detail:{type:"offer",timestamp:S,securityLevel:p.level,operationId:e}})),s.SBQ2_SEND_ENABLED){this._latchHandshakeMode("sbq2");let{text:b}=await this._sbq2BuildDescriptor(de.OFFER);return{t:"offer",sbq2:b}}return this._latchHandshakeMode("sb1"),g}catch(t){throw this._secureLog("error","Enhanced secure offer creation failed in critical section",{operationId:e,errorType:t.constructor.name,errorMessage:t.message,phase:this._determineErrorPhase(t),connectionAttempts:this.connectionAttempts}),this._cleanupFailedOfferCreation(),this.onStatusChange("disconnected"),t}},6e4)}_determineErrorPhase(e){let t=e.message.toLowerCase();return t.includes("rate limit")?"rate_limiting":t.includes("key pair")||t.includes("generate")?"key_generation":t.includes("fingerprint")?"fingerprinting":t.includes("export")||t.includes("signature")?"key_export":t.includes("peer connection")?"webrtc_setup":t.includes("offer")||t.includes("sdp")?"sdp_creation":t.includes("verification")?"verification_setup":t.includes("session")?"session_setup":t.includes("validation")?"package_validation":"unknown"}_cleanupFailedOfferCreation(){try{this._secureCleanupCryptographicMaterials(),this.peerConnection&&(this.peerConnection.close(),this.peerConnection=null),this.dataChannel&&(this.dataChannel.close(),this.dataChannel=null),this.isInitiator=!1,this.isVerified=!1,this._updateSecurityFeatures({hasEncryption:!1,hasECDH:!1,hasECDSA:!1,hasMutualAuth:!1,hasMetadataProtection:!1,hasEnhancedReplayProtection:!1,hasNonExtractableKeys:!1,hasEnhancedValidation:!1,hasPFS:!1}),this._forceGarbageCollection().catch(e=>{this._secureLog("error","Cleanup failed during offer cleanup",{errorType:e?.constructor?.name||"Unknown"})}),this._secureLog("debug","Failed offer creation cleanup completed with secure memory wipe")}catch(e){this._secureLog("error","Error during offer creation cleanup",{errorType:e.constructor.name,errorMessage:e.message})}}_updateSecurityFeatures(e){let t={...this.securityFeatures};try{Object.assign(this.securityFeatures,e),this._secureLog("debug","Security features updated",{updatedCount:Object.keys(e).length,totalFeatures:Object.keys(this.securityFeatures).length})}catch(r){throw this.securityFeatures=t,this._secureLog("error","Security features update failed, rolled back",{errorType:r.constructor.name}),r}}async _createSbq2Answer(e){return this._withMutex("connectionOperation",async t=>{try{if(this._resetNotificationFlags(),!this._checkRateLimit())throw new Error("Connection rate limit exceeded. Please wait before trying again.");this._latchHandshakeMode("sbq2");let r=Ur(String(e.sbq2)),i=this._sbq2AdoptRemoteDescriptor(r,de.OFFER),{sdp:n}=Kr(i);this.isInitiator=!1,this.onStatusChange("connecting");let a=await this._generateEncryptionKeys();if(this.ecdhKeyPair=a.ecdhKeyPair,this.ecdsaKeyPair=a.ecdsaKeyPair,!this.ecdhKeyPair?.privateKey||!this.ecdsaKeyPair?.privateKey)throw new Error("Failed to generate valid key pairs");this.createPeerConnection(),this._peerDTLSFingerprint=Array.from(i.fingerprint,d=>d.toString(16).padStart(2,"0").toUpperCase()).join(":"),await this.peerConnection.setRemoteDescription({type:"offer",sdp:n}),await this.peerConnection.setLocalDescription(await this.peerConnection.createAnswer({offerToReceiveAudio:!1,offerToReceiveVideo:!1})),this.expectedDTLSFingerprint=this._extractDTLSFingerprintFromSDP(this.peerConnection.localDescription.sdp),await this.waitForIceGathering();let o=async d=>new Uint8Array(await crypto.subtle.digest("SHA-256",d)),{text:c}=await this._sbq2BuildDescriptor(de.ANSWER,{bindingTag:await Or(o,r)});return this._dispatchAppEvent?.(new CustomEvent("new-connection",{detail:{type:"answer",timestamp:Date.now(),operationId:t}})),{t:"answer",sbq2:c}}catch(r){throw this._secureLog("error","SBQ2 answer creation failed",{operationId:t,errorType:r?.constructor?.name||"Unknown"}),this.onStatusChange("disconnected"),r}},6e4)}async createSecureAnswer(e){return e&&typeof e.sbq2=="string"?this._createSbq2Answer(e):this._withMutex("connectionOperation",async t=>{this._secureLog("info","Creating secure answer with mutex",{operationId:t,hasOfferData:!!e,offerType:e?.type,offerVersion:e?.version,offerTimestamp:e?.timestamp});try{if(this._resetNotificationFlags(),this._secureLog("debug","Starting enhanced offer validation",{operationId:t,hasOfferData:!!e,offerType:e?.type,hasECDHKey:!!e?.ecdhPublicKey,hasECDSAKey:!!e?.ecdsaPublicKey,hasSalt:!!e?.salt}),!this.validateEnhancedOfferData(e))throw new Error("Invalid connection data format - failed enhanced validation");if(!window.EnhancedSecureCryptoUtils.rateLimiter.checkConnectionRate(this.rateLimiterId))throw new Error("Connection rate limit exceeded. Please wait before trying again.");let r=e.ts||e.timestamp,i=e.v||e.version;if(!r||!i)throw new Error("Missing required security fields in offer data \u2013 possible MITM attack");let n=Date.now()-r,a=18e5;if(n>a)throw this._secureLog("error","Offer data is too old - possible replay attack",{operationId:t,offerAge:Math.round(n/1e3),maxAllowedAge:Math.round(a/1e3),timestamp:e.timestamp}),this.onAnswerError&&this.onAnswerError("replay_attack","Offer data is too old \u2013 possible replay attack"),new Error("Offer data is too old \u2013 possible replay attack");let o=i;if(o!==s.PROTOCOL_VERSION)throw this._secureLog("warn","Protocol version mismatch detected",{operationId:t,expectedVersion:s.PROTOCOL_VERSION,receivedVersion:o}),new Error(`Version mismatch: expected protocol ${s.PROTOCOL_VERSION}, received ${o}`);if(this.sessionSalt=e.sl||e.salt,this._peerSupportsRatchet=e.dr===s.RATCHET_VERSION,!Array.isArray(this.sessionSalt))throw new Error("Invalid session salt format - must be array");let c=64;if(this.sessionSalt.length!==c)throw new Error(`Invalid session salt length: expected ${c}, got ${this.sessionSalt.length}`);let d=await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(this.sessionSalt);this._secureLog("info","Session salt validated successfully",{operationId:t,saltLength:this.sessionSalt.length,saltFingerprint:d.substring(0,8)});let u=await this._generateEncryptionKeys();if(this.ecdhKeyPair=u.ecdhKeyPair,this.ecdsaKeyPair=u.ecdsaKeyPair,!(this.ecdhKeyPair?.privateKey instanceof CryptoKey))throw this._secureLog("error","Local ECDH private key is not a CryptoKey",{operationId:t,hasKeyPair:!!this.ecdhKeyPair,privateKeyType:typeof this.ecdhKeyPair?.privateKey,privateKeyAlgorithm:this.ecdhKeyPair?.privateKey?.algorithm?.name}),new Error("Local ECDH private key is not a valid CryptoKey");let h;try{let R=e.d||e.ecdsaPublicKey;h=await crypto.subtle.importKey("spki",new Uint8Array(R.keyData),{name:"ECDSA",namedCurve:"P-384"},!1,["verify"])}catch(R){this._throwSecureError(R,"ecdsa_key_import")}let m;try{let R=e.e||e.ecdhPublicKey;m=await window.EnhancedSecureCryptoUtils.importSignedPublicKey(R,h,"ECDH")}catch(R){this._secureLog("error","Failed to import signed ECDH public key",{operationId:t,errorType:R.constructor.name}),this._throwSecureError(R,"ecdh_key_import")}if(!(m instanceof CryptoKey))throw this._secureLog("error","Peer ECDH public key is not a CryptoKey",{operationId:t,publicKeyType:typeof m,publicKeyAlgorithm:m?.algorithm?.name}),new Error("Peer ECDH public key is not a valid CryptoKey");this.peerPublicKey=m;let p;try{this._secureLog("debug","About to call deriveSharedKeys",{operationId:t,privateKeyType:typeof this.ecdhKeyPair.privateKey,publicKeyType:typeof m,saltLength:this.sessionSalt?.length,privateKeyAlgorithm:this.ecdhKeyPair.privateKey?.algorithm?.name,publicKeyAlgorithm:m?.algorithm?.name}),p=await window.EnhancedSecureCryptoUtils.deriveSharedKeys(this.ecdhKeyPair.privateKey,m,this.sessionSalt),this._secureLog("debug","deriveSharedKeys completed successfully",{operationId:t,hasMessageKey:!!p.messageKey,hasMacKey:!!p.macKey,hasPfsKey:!!p.pfsKey,hasMetadataKey:!!p.metadataKey,hasFingerprint:!!p.fingerprint})}catch(R){this._secureLog("error","Failed to derive shared keys",{operationId:t,errorType:R.constructor.name,errorMessage:R.message,errorStack:R.stack,privateKeyType:typeof this.ecdhKeyPair.privateKey,publicKeyType:typeof m,saltLength:this.sessionSalt?.length,privateKeyAlgorithm:this.ecdhKeyPair.privateKey?.algorithm?.name,publicKeyAlgorithm:m?.algorithm?.name}),this._throwSecureError(R,"key_derivation")}if(await this._setEncryptionKeys(p.messageKey,p.macKey,p.metadataKey,p.fingerprint),await this._initializeRatchet(p,!1),!(this.encryptionKey instanceof CryptoKey)||!(this.macKey instanceof CryptoKey)||!(this.metadataKey instanceof CryptoKey))throw this._secureLog("error","Invalid key types after derivation",{operationId:t,encryptionKeyType:typeof this.encryptionKey,macKeyType:typeof this.macKey,metadataKeyType:typeof this.metadataKey}),new Error("Invalid key types after derivation");this.verificationCode=e.vc||e.verificationCode||null,this._secureLog("info","Encryption keys derived and set successfully",{operationId:t,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,hasMetadataKey:!!this.metadataKey,hasKeyFingerprint:!!this.keyFingerprint,mitmProtection:"enabled",signatureVerified:!0}),this._updateSecurityFeatures({hasEncryption:!0,hasECDH:!0,hasECDSA:!0,hasMutualAuth:!0,hasMetadataProtection:!0,hasEnhancedReplayProtection:!0,hasNonExtractableKeys:!0,hasRateLimiting:!0,hasEnhancedValidation:!0,hasPFS:!0}),this.currentKeyVersion=0,this.lastKeyRotation=Date.now(),this.keyVersions.set(0,{salt:this.sessionSalt,timestamp:this.lastKeyRotation,messageCount:0});let S;if(e.authChallenge)try{S=await window.EnhancedSecureCryptoUtils.createAuthProof(e.authChallenge,this.ecdsaKeyPair.privateKey,this.ecdsaKeyPair.publicKey)}catch(R){this._secureLog("error","Failed to create authentication proof",{operationId:t,errorType:R.constructor.name}),this._throwSecureError(R,"authentication_proof_creation")}else this._secureLog("warn","No auth challenge in offer - mutual auth disabled",{operationId:t});if(this.isInitiator=!1,this.onStatusChange("connecting"),this.onKeyExchange(this.keyFingerprint),this.createPeerConnection(),this.strictDTLSValidation)try{this._peerDTLSFingerprint=this._extractDTLSFingerprintFromSDP(e.sdp)}catch(R){this._secureLog("warn","Could not extract peer DTLS fingerprint from offer",{error:R.message,context:"offer_validation"})}else this._secureLog("info","DTLS fingerprint validation disabled - proceeding without validation");try{this._secureLog("debug","Setting remote description from offer",{operationId:t,sdpLength:e.sdp?.length||0}),await this.peerConnection.setRemoteDescription(new RTCSessionDescription({type:"offer",sdp:e.s||e.sdp})),this._logIceCandidateDiagnostics("remote offer applied",this.peerConnection.remoteDescription?.sdp,{signalingState:this.peerConnection.signalingState}),this._warnIfRemoteCandidatesNeedRelay("offer",this.peerConnection.remoteDescription?.sdp),this._secureLog("debug","Remote description set successfully",{operationId:t,signalingState:this.peerConnection.signalingState})}catch(R){this._secureLog("error","Failed to set remote description",{error:R.message,operationId:t}),this._throwSecureError(R,"webrtc_remote_description")}this._secureLog("debug","Remote description set successfully",{operationId:t,connectionState:this.peerConnection.connectionState,signalingState:this.peerConnection.signalingState});let g;try{g=await this.peerConnection.createAnswer({offerToReceiveAudio:!1,offerToReceiveVideo:!1})}catch(R){this._throwSecureError(R,"webrtc_create_answer")}try{await this.peerConnection.setLocalDescription(g)}catch(R){this._throwSecureError(R,"webrtc_local_description")}try{let R=this._extractDTLSFingerprintFromSDP(g.sdp);this.expectedDTLSFingerprint=R,this._secureLog("info","Generated DTLS fingerprint for out-of-band verification",{fingerprint:R,context:"answer_creation"}),this.deliverMessageToUI(`DTLS fingerprint ready for verification: ${R}`,"system")}catch(R){this._secureLog("error","Failed to extract DTLS fingerprint from answer",{error:R.message})}try{let R=this._extractDTLSFingerprintFromSDP(e.s||e.sdp),ue=this.expectedDTLSFingerprint,K=this._decodeKeyFingerprint(this.keyFingerprint);this.verificationCode=await this._computeSAS(K,ue,R),this._setSASMaterialReady(ue,R)}catch(R){throw this._secureLog("error","SAS computation failed in createSecureAnswer (Answer side)",{errorType:R?.constructor?.name||"Unknown"}),new Error(`SAS computation failed: ${R.message}`)}let b=Date.now(),w=await this.waitForIceGathering(),M=this._summarizeIceCandidatesInSDP(this.peerConnection.localDescription?.sdp),F=M.total;if(!w&&F===0)throw this.deliverMessageToUI("No network candidates could be gathered, so the response would not be usable. This usually means a VPN or firewall is blocking STUN/TURN. Try turning the VPN off, switching network, or adding your own TURN server in Advanced network settings.","system"),new Error("ICE gathering produced no candidates \u2014 check VPN/firewall or configure a TURN server");this._secureLog(F>0?"info":"warn","ICE candidates captured for answer export",{candidateSummary:M,iceGatheringState:this.peerConnection.iceGatheringState,iceGatheringDurationMs:Date.now()-b,iceGatheringCompleted:w}),this._logIceCandidateDiagnostics("answer export",this.peerConnection.localDescription?.sdp,{iceGatheringState:this.peerConnection.iceGatheringState,iceGatheringDurationMs:Date.now()-b,iceGatheringCompleted:w}),w||this.deliverMessageToUI("ICE gathering timed out before completion, but available candidates were included in the response. Connectivity may still fail on restrictive networks.","system"),F===0&&this.deliverMessageToUI("No ICE candidates were gathered for the response yet. The peer connection may fail unless network candidates become available.","system"),this._secureLog("debug","ICE gathering completed for answer",{operationId:t,iceGatheringState:this.peerConnection.iceGatheringState,connectionState:this.peerConnection.connectionState});let k=await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(this.ecdhKeyPair.publicKey,this.ecdsaKeyPair.privateKey,"ECDH"),E=await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(this.ecdsaKeyPair.publicKey,this.ecdsaKeyPair.privateKey,"ECDSA");if(!k||typeof k!="object")throw this._secureLog("error","CRITICAL: ECDH key export failed - invalid object structure",{operationId:t}),new Error("CRITICAL SECURITY FAILURE: ECDH key export validation failed - hard abort required");if(!k.keyData||!k.signature)throw this._secureLog("error","CRITICAL: ECDH key export incomplete - missing keyData or signature",{operationId:t,hasKeyData:!!k.keyData,hasSignature:!!k.signature}),new Error("CRITICAL SECURITY FAILURE: ECDH key export incomplete - hard abort required");if(!E||typeof E!="object")throw this._secureLog("error","CRITICAL: ECDSA key export failed - invalid object structure",{operationId:t}),new Error("CRITICAL SECURITY FAILURE: ECDSA key export validation failed - hard abort required");if(!E.keyData||!E.signature)throw this._secureLog("error","CRITICAL: ECDSA key export incomplete - missing keyData or signature",{operationId:t,hasKeyData:!!E.keyData,hasSignature:!!E.signature}),new Error("CRITICAL SECURITY FAILURE: ECDSA key export incomplete - hard abort required");let _={level:"MAXIMUM",score:100,color:"green",details:"All security features enabled by default",passedChecks:10,totalChecks:10,isRealData:!0},A=Date.now(),x={t:"answer",s:this.peerConnection.localDescription.sdp,v:s.PROTOCOL_VERSION,ts:A,e:k,d:E,ap:S,slv:"MAX",dr:s.RATCHET_VERSION,sc:{sf:d.substring(0,12),kd:!0,ma:!0}},T=x.s||x.sdp,Y=x.e||x.ecdhPublicKey,B=x.d||x.ecdsaPublicKey;if(!T||!Y||!B)throw new Error("Generated answer package is incomplete");return this._secureLog("info","Enhanced secure answer created successfully",{operationId:t,version:x.version,hasECDSA:!0,hasMutualAuth:!!S,hasSessionConfirmation:!!x.sessionConfirmation,securityLevel:_.level,timestamp:A,processingTime:A-e.timestamp}),this._dispatchAppEvent?.(new CustomEvent("new-connection",{detail:{type:"answer",timestamp:A,securityLevel:_.level,operationId:t}})),setTimeout(async()=>{try{let R=await this.calculateAndReportSecurityLevel();R&&(this.notifySecurityUpdate(),this._secureLog("info","Post-connection security level calculated",{operationId:t,level:R.level}))}catch(R){this._secureLog("error","Error calculating post-connection security",{operationId:t,errorType:R.constructor.name})}},1e3),setTimeout(async()=>{(!this.lastSecurityCalculation||this.lastSecurityCalculation.score<50)&&(this._secureLog("info","Retrying security calculation",{operationId:t}),await this.calculateAndReportSecurityLevel(),this.notifySecurityUpdate())},3e3),this.notifySecurityUpdate(),x}catch(r){throw this._secureLog("error","Enhanced secure answer creation failed in critical section",{operationId:t,errorType:r.constructor.name,errorMessage:r.message,phase:this._determineAnswerErrorPhase(r),offerAge:e?.timestamp?Date.now()-e.timestamp:"unknown"}),this._cleanupFailedAnswerCreation(),this.onStatusChange("disconnected"),this.onAnswerError&&(r.message.includes("too old")||r.message.includes("replay")?this.onAnswerError("replay_attack",r.message):r.message.includes("MITM")||r.message.includes("signature")?this.onAnswerError("security_violation",r.message):r.message.includes("validation")||r.message.includes("format")?this.onAnswerError("invalid_format",r.message):this.onAnswerError("general_error",r.message)),r}},6e4)}_determineAnswerErrorPhase(e){let t=e.message.toLowerCase();return t.includes("validation")||t.includes("format")?"offer_validation":t.includes("rate limit")?"rate_limiting":t.includes("replay")||t.includes("too old")?"replay_protection":t.includes("salt")?"salt_validation":t.includes("key pair")||t.includes("generate")?"key_generation":t.includes("import")||t.includes("ecdsa")||t.includes("ecdh")?"key_import":t.includes("signature")||t.includes("mitm")?"signature_verification":t.includes("derive")||t.includes("shared")?"key_derivation":t.includes("auth")||t.includes("proof")?"authentication":t.includes("remote description")||t.includes("local description")?"webrtc_setup":t.includes("answer")||t.includes("sdp")?"sdp_creation":t.includes("export")?"key_export":t.includes("security level")?"security_calculation":"unknown"}_cleanupFailedAnswerCreation(){try{this._clearPendingOfferContext(),this._secureCleanupCryptographicMaterials(),this.currentKeyVersion=0,this.keyVersions.clear(),this.oldKeys.clear(),this.peerConnection&&(this.peerConnection.close(),this.peerConnection=null),this.dataChannel&&(this.dataChannel.close(),this.dataChannel=null),this.isInitiator=!1,this.isVerified=!1,this.sequenceNumber=0,this.expectedSequenceNumber=0,this.messageCounter=0,this.processedMessageIds.clear(),this.replayWindow.clear(),this._updateSecurityFeatures({hasEncryption:!1,hasECDH:!1,hasECDSA:!1,hasMutualAuth:!1,hasMetadataProtection:!1,hasEnhancedReplayProtection:!1,hasNonExtractableKeys:!1,hasEnhancedValidation:!1,hasPFS:!1}),this._forceGarbageCollection().catch(e=>{this._secureLog("error","Cleanup failed during answer cleanup",{errorType:e?.constructor?.name||"Unknown"})}),this._secureLog("debug","Failed answer creation cleanup completed with secure memory wipe")}catch(e){this._secureLog("error","Error during answer creation cleanup",{errorType:e.constructor.name,errorMessage:e.message})}}async _setEncryptionKeys(e,t,r,i){return this._withMutex("keyOperation",async n=>{if(this._secureLog("info","Setting encryption keys with mutex",{operationId:n}),!(e instanceof CryptoKey)||!(t instanceof CryptoKey)||!(r instanceof CryptoKey))throw new Error("Invalid key types provided");if(!i||typeof i!="string")throw new Error("Invalid key fingerprint provided");let a={encryptionKey:this.encryptionKey,macKey:this.macKey,metadataKey:this.metadataKey,keyFingerprint:this.keyFingerprint};try{return this.encryptionKey=e,this.macKey=t,this.metadataKey=r,this.keyFingerprint=i,this.sequenceNumber=0,this.expectedSequenceNumber=0,this.messageCounter=0,this.processedMessageIds.clear(),this.replayWindow.clear(),this._secureLog("info","Encryption keys set successfully",{operationId:n,hasAllKeys:!!(this.encryptionKey&&this.macKey&&this.metadataKey),hasFingerprint:!!this.keyFingerprint}),!0}catch(o){throw this.encryptionKey=a.encryptionKey,this.macKey=a.macKey,this.metadataKey=a.metadataKey,this.keyFingerprint=a.keyFingerprint,this._secureLog("error","Key setting failed, rolled back",{operationId:n,errorType:o.constructor.name}),o}})}async _handleSbq2Answer(e){if(!this._isSbq2())throw new Error("Received a new-format response to an old-format invitation. Please start a new invitation.");let t=this._sbq2State(),r=Ur(String(e.sbq2)),i=Fr(r);if(i.type!==de.ANSWER)throw new Error("That code is an invitation, not a response to one.");if(!i.commitment)throw new Error("The response carries no key commitment");let a=await Or(async d=>new Uint8Array(await crypto.subtle.digest("SHA-256",d)),t.localDescriptor),o=0;for(let d=0;d<a.length;d++)o|=a[d]^i.bindingTag[d];if(o!==0)throw new Error("This response belongs to a different invitation. Ask for a response to the code you are showing now.");t.remoteDescriptor=r,t.remoteCommitment=i.commitment,this._peerDTLSFingerprint=Array.from(i.fingerprint,d=>d.toString(16).padStart(2,"0").toUpperCase()).join(":");let{sdp:c}=Kr(i);await this.peerConnection.setRemoteDescription({type:"answer",sdp:c}),this._secureLog("info","SBQ2 answer accepted; awaiting in-band key exchange",{bytes:r.length})}async handleSecureAnswer(e){if(e&&typeof e.sbq2=="string")return this._handleSbq2Answer(e);try{if(!e||typeof e!="object"||Array.isArray(e))throw this._secureLog("error","CRITICAL: Invalid answer data structure",{hasAnswerData:!!e,answerDataType:typeof e,isArray:Array.isArray(e)}),new Error("CRITICAL SECURITY FAILURE: Answer data must be a non-null object");let t=e.t==="answer"&&e.s,r=e.type==="enhanced_secure_answer"&&e.sdp;if(!t&&!r)throw this._secureLog("error","CRITICAL: Invalid answer format",{type:e.type||e.t,hasSdp:!!(e.sdp||e.s)}),new Error("CRITICAL SECURITY FAILURE: Invalid answer format - hard abort required");let i=e.v||e.version;if(i!==s.PROTOCOL_VERSION)throw new Error(`Version mismatch: expected protocol ${s.PROTOCOL_VERSION}, received ${i||"unknown"}`);let n=e.ecdhPublicKey||e.e,a=e.ecdsaPublicKey||e.d;if(!n||typeof n!="object"||Array.isArray(n))throw this._secureLog("error","CRITICAL: Invalid ECDH public key structure in answer",{hasEcdhKey:!!n,ecdhKeyType:typeof n,isArray:Array.isArray(n),availableKeys:Object.keys(e)}),new Error("CRITICAL SECURITY FAILURE: Missing or invalid ECDH public key structure");if(!n.keyData||!n.signature)throw this._secureLog("error","CRITICAL: ECDH key missing keyData or signature in answer",{hasKeyData:!!n.keyData,hasSignature:!!n.signature}),new Error("CRITICAL SECURITY FAILURE: ECDH key missing keyData or signature");if(!a||typeof a!="object"||Array.isArray(a))throw this._secureLog("error","CRITICAL: Invalid ECDSA public key structure in answer",{hasEcdsaKey:!!a,ecdsaKeyType:typeof a,isArray:Array.isArray(a)}),new Error("CRITICAL SECURITY FAILURE: Missing or invalid ECDSA public key structure");if(!a.keyData||!a.signature)throw this._secureLog("error","CRITICAL: ECDSA key missing keyData or signature in answer",{hasKeyData:!!a.keyData,hasSignature:!!a.signature}),new Error("CRITICAL SECURITY FAILURE: ECDSA key missing keyData or signature");let o=e.ts||e.timestamp,c=e.v||e.version;if(!o||!c)throw new Error("Missing required fields in response data \u2013 possible MITM attack");if(e.sessionId&&this.sessionId&&e.sessionId!==this.sessionId)throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Session ID mismatch detected - possible MITM attack",{}),new Error("Session ID mismatch \u2013 possible MITM attack");let d=Date.now()-e.timestamp;if(d>36e5)throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Answer data is too old - possible replay attack",{answerAge:d,timestamp:e.timestamp}),this.onAnswerError&&this.onAnswerError("replay_attack","Response data is too old \u2013 possible replay attack"),new Error("Response data is too old \u2013 possible replay attack");i!==s.PROTOCOL_VERSION&&window.EnhancedSecureCryptoUtils.secureLog.log("warn","Incompatible protocol version in answer",{expectedVersion:s.PROTOCOL_VERSION,receivedVersion:i});let u=await crypto.subtle.importKey("spki",new Uint8Array(a.keyData),{name:"ECDSA",namedCurve:"P-384"},!1,["verify"]),h=await window.EnhancedSecureCryptoUtils.importPublicKeyFromSignedPackage(n,u);if(this._restorePendingOfferContextIfNeeded(),!this.sessionSalt||this.sessionSalt.length!==64)throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Invalid session salt detected - possible session hijacking",{saltLength:this.sessionSalt?this.sessionSalt.length:0}),new Error("Missing pending offer context. Apply the response in the original creator window that generated the invitation.");let m=await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(this.sessionSalt);if(window.EnhancedSecureCryptoUtils.secureLog.log("info","Session salt integrity verified",{saltFingerprint:m.substring(0,8)}),!(this.ecdhKeyPair?.privateKey instanceof CryptoKey))throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Local ECDH private key is not a CryptoKey in handleSecureAnswer",{hasKeyPair:!!this.ecdhKeyPair,privateKeyType:typeof this.ecdhKeyPair?.privateKey,privateKeyAlgorithm:this.ecdhKeyPair?.privateKey?.algorithm?.name}),new Error("Local ECDH private key is not a CryptoKey");if(!(h instanceof CryptoKey))throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Peer ECDH public key is not a CryptoKey in handleSecureAnswer",{publicKeyType:typeof h,publicKeyAlgorithm:h?.algorithm?.name}),new Error("Peer ECDH public key is not a CryptoKey");this.peerPublicKey=h,this._peerSupportsRatchet=e.dr===s.RATCHET_VERSION,this.connectionId||(this.connectionId=Array.from(crypto.getRandomValues(new Uint8Array(8))).map(g=>g.toString(16).padStart(2,"0")).join(""));let p=await window.EnhancedSecureCryptoUtils.deriveSharedKeys(this.ecdhKeyPair.privateKey,h,this.sessionSalt);if(this.encryptionKey=p.messageKey,this.macKey=p.macKey,this.metadataKey=p.metadataKey,this.keyFingerprint=p.fingerprint,await this._initializeRatchet(p,!0),this.sequenceNumber=0,this.expectedSequenceNumber=0,this.messageCounter=0,this.processedMessageIds.clear(),this.replayWindow.clear(),!(this.encryptionKey instanceof CryptoKey)||!(this.macKey instanceof CryptoKey)||!(this.metadataKey instanceof CryptoKey))throw window.EnhancedSecureCryptoUtils.secureLog.log("error","Invalid key types after derivation in handleSecureAnswer",{encryptionKeyType:typeof this.encryptionKey,macKeyType:typeof this.macKey,metadataKeyType:typeof this.metadataKey,encryptionKeyAlgorithm:this.encryptionKey?.algorithm?.name,macKeyAlgorithm:this.macKey?.algorithm?.name,metadataKeyAlgorithm:this.metadataKey?.algorithm?.name}),new Error("Invalid key types after export");this._secureLog("info","Encryption keys set in handleSecureAnswer",{hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,hasMetadataKey:!!this.metadataKey,hasKeyFingerprint:!!this.keyFingerprint,mitmProtection:"enabled",signatureVerified:!0}),this.securityFeatures.hasMutualAuth=!0,this.securityFeatures.hasMetadataProtection=!0,this.securityFeatures.hasEnhancedReplayProtection=!0,this.securityFeatures.hasPFS=!0,this.currentKeyVersion=0,this.lastKeyRotation=Date.now(),this.keyVersions.set(0,{salt:this.sessionSalt,timestamp:this.lastKeyRotation,messageCount:0}),this.onKeyExchange(this.keyFingerprint);try{let g=this._extractDTLSFingerprintFromSDP(e.sdp||e.s),b=this.expectedDTLSFingerprint,w=this._decodeKeyFingerprint(this.keyFingerprint);this.verificationCode=await this._computeSAS(w,b,g),this._setSASMaterialReady(b,g),this.pendingSASCode=this.verificationCode,this._secureLog("info","SAS verification code generated for MITM protection (Offer side)",{sasCode:this.verificationCode,localFP:b.substring(0,16)+"...",remoteFP:g.substring(0,16)+"...",timestamp:Date.now()})}catch(g){this._secureLog("error","SAS computation failed in handleSecureAnswer (Offer side)",{errorType:g?.constructor?.name||"Unknown"}),this._secureLog("error","SAS computation failed in handleSecureAnswer (Offer side)",{error:g.message,stack:g.stack,timestamp:Date.now()})}if(this.strictDTLSValidation)try{this._peerDTLSFingerprint=this._extractDTLSFingerprintFromSDP(e.sdp||e.s)}catch(g){this._secureLog("warn","Could not extract peer DTLS fingerprint from answer",{error:g.message,context:"answer_validation"})}else this._secureLog("info","DTLS fingerprint validation disabled - proceeding without validation");let S=e.sdp||e.s;if(this.peerConnection?.signalingState!=="have-local-offer"){this._secureLog("warn","Ignoring answer outside have-local-offer state",{signalingState:this.peerConnection?.signalingState||"unknown"});return}this._secureLog("debug","Setting remote description from answer",{sdpLength:S?.length||0,usingCompactSDP:!e.sdp&&!!e.s}),await this.peerConnection.setRemoteDescription({type:"answer",sdp:S}),this._logIceCandidateDiagnostics("remote answer applied",this.peerConnection.remoteDescription?.sdp,{signalingState:this.peerConnection.signalingState}),this._warnIfRemoteCandidatesNeedRelay("answer",this.peerConnection.remoteDescription?.sdp),this._secureLog("debug","Remote description set successfully from answer",{signalingState:this.peerConnection.signalingState}),setTimeout(async()=>{try{await this.calculateAndReportSecurityLevel()&&this.notifySecurityUpdate()}catch(g){this._secureLog("error","Error calculating security after connection:",{errorType:g?.constructor?.name||"Unknown"})}},1e3),setTimeout(async()=>{(!this.lastSecurityCalculation||this.lastSecurityCalculation.score<50)&&(await this.calculateAndReportSecurityLevel(),this.notifySecurityUpdate())},3e3),this.notifySecurityUpdate()}catch(t){throw this._secureLog("error","Enhanced secure answer handling failed",{errorType:t.constructor.name}),this.onStatusChange("failed"),this.onAnswerError&&(t.message.includes("too old")||t.message.includes("\u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0441\u0442\u0430\u0440\u044B\u0435")?this.onAnswerError("replay_attack",t.message):t.message.includes("MITM")||t.message.includes("signature")||t.message.includes("\u043F\u043E\u0434\u043F\u0438\u0441\u044C")?this.onAnswerError("security_violation",t.message):this.onAnswerError("general_error",t.message)),t}}initiateVerification(){this.isInitiator?this.verificationInitiationSent||(this.verificationInitiationSent=!0,this.deliverMessageToUI("CRITICAL: Compare verification code with peer out-of-band (voice/video/in-person) to prevent MITM attack!","system"),this.deliverMessageToUI(`Your verification code: ${this.verificationCode}`,"system"),this.deliverMessageToUI("Ask peer to confirm this exact code before allowing traffic!","system")):this.deliverMessageToUI("Waiting for verification code from peer...","system")}_validateSASCode(e){if(!e||typeof e!="string"||!this.verificationCode||typeof this.verificationCode!="string")return!1;let t=e.replace(/[-\s]/g,"").toUpperCase(),r=this.verificationCode.replace(/[-\s]/g,"").toUpperCase();return t.length!==r.length?!1:window.EnhancedSecureCryptoUtils.constantTimeCompare(t,r)}confirmVerification(e){try{if(!this._validateSASCode(e))throw this.sasValidationAttempts=(this.sasValidationAttempts||0)+1,this._secureLog("warn","SAS validation failed: user entered incorrect code",{attempts:this.sasValidationAttempts,maxAttempts:s.MAX_SAS_ATTEMPTS}),this.sasValidationAttempts>=s.MAX_SAS_ATTEMPTS?(this.deliverMessageToUI("Verification failed 3 times. Session reset for safety.","system"),this.disconnect(),new Error("SAS_MAX_ATTEMPTS")):new Error("SAS_MISMATCH");this.localVerificationConfirmed=!0,this.sasValidationAttempts=0;let t={type:"verification_confirmed",data:{timestamp:Date.now(),verificationMethod:"MANUAL_SAS_ENTRY",securityLevel:"MITM_PROTECTION_REQUIRED"}};this.dataChannel.send(JSON.stringify(t)),this.onVerificationStateChange&&this.onVerificationStateChange({localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,bothConfirmed:this.bothVerificationsConfirmed}),this._checkBothVerificationsConfirmed(),this.deliverMessageToUI("Code verified locally. Waiting for peer confirmation...","system"),this.processMessageQueue()}catch(t){throw t.message==="SAS_MISMATCH"?this.deliverMessageToUI("Verification failed: the code you entered is incorrect.","system"):t.message!=="SAS_MAX_ATTEMPTS"&&(this._secureLog("error","SAS verification failed:",{errorType:t?.constructor?.name||"Unknown"}),this.deliverMessageToUI("SAS verification failed","system")),t}}_checkBothVerificationsConfirmed(){if(this.localVerificationConfirmed&&this.remoteVerificationConfirmed&&!this.bothVerificationsConfirmed){this.bothVerificationsConfirmed=!0;let e={type:"verification_both_confirmed",data:{timestamp:Date.now(),verificationMethod:"SAS",securityLevel:"MITM_PROTECTION_COMPLETE"}};this.dataChannel.send(JSON.stringify(e)),this.onVerificationStateChange&&this.onVerificationStateChange({localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,bothConfirmed:this.bothVerificationsConfirmed}),this.deliverMessageToUI("Both parties confirmed! Opening secure chat in 2 seconds...","system"),setTimeout(()=>{try{this._setVerifiedStatus(!0,"MUTUAL_SAS_CONFIRMED",{code:this.verificationCode,timestamp:Date.now()}),this._enforceVerificationGate("mutual_confirmed",!1),this.onStatusChange?.("verified")}catch(t){this._secureLog("error","Verified transition rejected - aborting session",{errorType:t?.constructor?.name||"Unknown"}),this.deliverMessageToUI("Verification could not be completed safely. Connection aborted.","system"),this.disconnect()}},2e3)}}handleVerificationConfirmed(e){this.remoteVerificationConfirmed=!0,this.deliverMessageToUI("Peer confirmed the verification code. Waiting for your confirmation...","system"),this.onVerificationStateChange&&this.onVerificationStateChange({localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,bothConfirmed:this.bothVerificationsConfirmed}),this._checkBothVerificationsConfirmed()}handleVerificationBothConfirmed(e){if(!this.bothVerificationsConfirmed){if(!this.localVerificationConfirmed){this._secureLog("error","Peer claimed mutual SAS confirmation before local confirmation - possible MITM attack",{localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,timestamp:Date.now()}),this.deliverMessageToUI("Verification protocol violation: peer claimed confirmation before you verified the code. Connection aborted for safety.","system"),this.disconnect();return}this.remoteVerificationConfirmed=!0,this.bothVerificationsConfirmed=!0,this.onVerificationStateChange&&this.onVerificationStateChange({localConfirmed:this.localVerificationConfirmed,remoteConfirmed:this.remoteVerificationConfirmed,bothConfirmed:this.bothVerificationsConfirmed}),this.deliverMessageToUI("Both parties confirmed! Opening secure chat in 2 seconds...","system"),setTimeout(()=>{this._setVerifiedStatus(!0,"MUTUAL_SAS_CONFIRMED",{code:this.verificationCode,timestamp:Date.now()}),this._enforceVerificationGate("mutual_confirmed",!1),this.onStatusChange?.("verified")},2e3)}}handleVerificationRequest(e){if(this._validateSASCode(e?.code)){let t={type:"verification_response",data:{ok:!0,timestamp:Date.now(),verificationMethod:"SAS",securityLevel:"MITM_PROTECTED"}};this.dataChannel.send(JSON.stringify(t)),this.verificationNotificationSent||(this.verificationNotificationSent=!0,this.deliverMessageToUI("SAS verification successful! MITM protection confirmed. Channel is now secure!","system")),this.processMessageQueue()}else{let t={type:"verification_response",data:{ok:!1,timestamp:Date.now(),reason:"code_mismatch"}};this.dataChannel.send(JSON.stringify(t)),this._secureLog("error","SAS verification failed - possible MITM attack",{receivedCodeLength:typeof e?.code=="string"?e.code.length:0,timestamp:Date.now()}),this.deliverMessageToUI("SAS verification failed! Possible MITM attack detected. Connection aborted for safety!","system"),this.disconnect()}}handleSASCode(e){if(!e?.code||typeof e.code!="string"){this._secureLog("warn","Invalid SAS announcement received from peer");return}if(!this.verificationCode){this._secureLog("error","Received peer SAS announcement before local SAS was derived - refusing to adopt it",{timestamp:Date.now()}),this.deliverMessageToUI("Verification failed: no locally derived code to compare against. Connection aborted for safety.","system"),this.disconnect();return}if(!this._validateSASCode(e.code)){this._secureLog("error","Peer-announced SAS does not match locally computed SAS"),this.deliverMessageToUI("Version or SAS mismatch detected. Connection aborted for safety.","system"),this.disconnect();return}this._notifyVerificationReadyIfPossible(),this._secureLog("info","Peer SAS announcement matched locally derived code",{timestamp:Date.now()})}handleVerificationResponse(e){e.ok===!0?(this._secureLog("info","Mutual SAS verification completed - MITM protection active",{verificationMethod:e.verificationMethod||"SAS",securityLevel:e.securityLevel||"MITM_PROTECTED",timestamp:Date.now()}),this.verificationNotificationSent||(this.verificationNotificationSent=!0,this.deliverMessageToUI(" Mutual SAS verification complete! MITM protection active. Channel is now secure!","system")),this.processMessageQueue()):(this._secureLog("error","Peer SAS verification failed - connection not secure",{responseData:e,timestamp:Date.now()}),this.deliverMessageToUI("Peer verification failed! Connection not secure!","system"),this.disconnect())}validateOfferData(e){return e&&e.type==="enhanced_secure_offer"&&e.sdp&&e.publicKey&&e.salt&&e.verificationCode&&Array.isArray(e.publicKey)&&Array.isArray(e.salt)&&e.salt.length===32}validateEnhancedOfferData(e){try{if(!e||typeof e!="object"||Array.isArray(e))throw this._secureLog("error","CRITICAL: Invalid offer data structure",{hasOfferData:!!e,offerDataType:typeof e,isArray:Array.isArray(e)}),new Error("CRITICAL SECURITY FAILURE: Offer data must be a non-null object");let t=e.v===s.PROTOCOL_VERSION&&e.e&&e.d,r=e.version===s.PROTOCOL_VERSION&&e.ecdhPublicKey&&e.ecdsaPublicKey;if(!(t?["offer"].includes(e.t):["enhanced_secure_offer","secure_offer"].includes(e.type)))throw new Error("Invalid offer type");if(t){let a=["e","d","sl","vc","si","ci","ac","slv"];for(let c of a)if(!e[c])throw new Error(`Missing required v4.1 compact field: ${c}`);if(!e.e||typeof e.e!="object"||Array.isArray(e.e))throw new Error("CRITICAL SECURITY FAILURE: Invalid ECDH public key structure");if(!e.d||typeof e.d!="object"||Array.isArray(e.d))throw new Error("CRITICAL SECURITY FAILURE: Invalid ECDSA public key structure");if(!Array.isArray(e.sl)||e.sl.length!==64)throw new Error("Salt must be exactly 64 bytes for v4.1");if(typeof e.vc!="string"||e.vc.length<6)throw new Error("Invalid verification code format");if(!["MAX","HIGH","MED","LOW"].includes(e.slv))throw new Error("Invalid security level");let o=Date.now()-e.ts;if(o>36e5)throw new Error("Offer is too old (older than 1 hour)");this._secureLog("info","v4.1 compact offer validation passed",{version:e.v,hasECDH:!!e.e,hasECDSA:!!e.d,hasSalt:!!e.sl,hasVerificationCode:!!e.vc,securityLevel:e.slv,offerAge:Math.round(o/1e3)+"s"})}else if(r){let a=["ecdhPublicKey","ecdsaPublicKey","salt","verificationCode","authChallenge","timestamp","version","securityLevel"];for(let c of a)if(!e[c])throw new Error(`Missing v4.1 field: ${c}`);if(!Array.isArray(e.salt)||e.salt.length!==64)throw new Error("Salt must be exactly 64 bytes for v4.1");let o=Date.now()-e.timestamp;if(o>36e5)throw new Error("Offer is too old (older than 1 hour)");if(!e.ecdhPublicKey||typeof e.ecdhPublicKey!="object"||Array.isArray(e.ecdhPublicKey))throw this._secureLog("error","CRITICAL: Invalid ECDH public key structure",{hasEcdhKey:!!e.ecdhPublicKey,ecdhKeyType:typeof e.ecdhPublicKey,isArray:Array.isArray(e.ecdhPublicKey)}),new Error("CRITICAL SECURITY FAILURE: Invalid ECDH public key structure - hard abort required");if(!e.ecdsaPublicKey||typeof e.ecdsaPublicKey!="object"||Array.isArray(e.ecdsaPublicKey))throw this._secureLog("error","CRITICAL: Invalid ECDSA public key structure",{hasEcdsaKey:!!e.ecdsaPublicKey,ecdsaKeyType:typeof e.ecdsaPublicKey,isArray:Array.isArray(e.ecdsaPublicKey)}),new Error("CRITICAL SECURITY FAILURE: Invalid ECDSA public key structure - hard abort required");if(!e.ecdhPublicKey.keyData||!e.ecdhPublicKey.signature)throw this._secureLog("error","CRITICAL: ECDH key missing keyData or signature",{hasKeyData:!!e.ecdhPublicKey.keyData,hasSignature:!!e.ecdhPublicKey.signature}),new Error("CRITICAL SECURITY FAILURE: ECDH key missing keyData or signature");if(!e.ecdsaPublicKey.keyData||!e.ecdsaPublicKey.signature)throw this._secureLog("error","CRITICAL: ECDSA key missing keyData or signature",{hasKeyData:!!e.ecdsaPublicKey.keyData,hasSignature:!!e.ecdsaPublicKey.signature}),new Error("CRITICAL SECURITY FAILURE: ECDSA key missing keyData or signature");if(typeof e.verificationCode!="string"||e.verificationCode.length<6)throw new Error("Invalid SAS verification code format - MITM protection required");this._secureLog("info","v4.1 offer validation passed",{version:e.version,hasSecurityLevel:!!e.securityLevel?.level,offerAge:Math.round(o/1e3)+"s"})}else{let a=e.v||e.version||"unknown";throw new Error(`Version mismatch: expected protocol ${s.PROTOCOL_VERSION}, received ${a}`)}let n=t?e.s:e.sdp;if(typeof n!="string"||!n.includes("v=0"))throw new Error("Invalid SDP structure");return!0}catch(t){throw this._secureLog("error","CRITICAL: Security validation failed - hard abort required",{error:t.message,errorType:t.constructor.name,timestamp:Date.now()}),new Error(`CRITICAL SECURITY VALIDATION FAILURE: ${t.message}`)}}async sendSecureMessage(e){let t=this._validateInputData(e,"sendSecureMessage");if(!t.isValid){let r=`Input validation failed: ${t.errors.join(", ")}`;throw this._secureLog("error","Input validation failed in sendSecureMessage",{errors:t.errors,messageType:typeof e}),new Error(r)}if(!this._checkRateLimit("sendSecureMessage"))throw new Error("Rate limit exceeded for secure message sending");if(this._enforceVerificationGate("sendSecureMessage"),!this.isConnected())throw t.sanitizedData&&typeof t.sanitizedData=="object"&&t.sanitizedData.type&&t.sanitizedData.type.startsWith("file_")?new Error("Connection not ready for file transfer. Please ensure the connection is established and verified."):(this.messageQueue.push(t.sanitizedData),new Error("Connection not ready. Message queued for sending."));return this._withMutex("cryptoOperation",async r=>{if(!this.isConnected()||!this.isVerified)throw new Error("Connection lost during message preparation");if(!this.encryptionKey||!this.macKey||!this.metadataKey)throw new Error("Encryption keys not initialized");if(!window.EnhancedSecureCryptoUtils.rateLimiter.checkMessageRate(this.rateLimiterId))throw new Error("Message rate limit exceeded (60 messages per minute)");try{let i=typeof t.sanitizedData=="string"?t.sanitizedData:JSON.stringify(t.sanitizedData),n=window.EnhancedSecureCryptoUtils.sanitizeMessage(i),a=`msg_${Date.now()}_${this.messageCounter++}`;if(typeof this._createMessageAAD!="function")throw new Error("_createMessageAAD method is not available in sendSecureMessage. Manager may not be fully initialized.");let o=e.aad||this._createMessageAAD("enhanced_message",{content:n}),c;if(this._ratchet?.canEncrypt){let{header:d,ciphertext:u}=await this._ratchet.encrypt(n);c={type:s.MESSAGE_TYPES.RATCHET_MESSAGE,h:d,c:u,version:"5.0"}}else c={type:"enhanced_message",data:await window.EnhancedSecureCryptoUtils.encryptMessage(n,this.encryptionKey,this.macKey,this.metadataKey,a,JSON.parse(o).sequenceNumber),keyVersion:this.currentKeyVersion,version:"4.0"};this.dataChannel.send(JSON.stringify(c)),typeof t.sanitizedData=="string"&&this.deliverMessageToUI(t.sanitizedData,"sent"),this._secureLog("debug","Secure message sent successfully",{operationId:r,messageLength:n.length,keyVersion:this.currentKeyVersion})}catch(i){throw this._secureLog("error","Secure message sending failed",{operationId:r,errorType:i.constructor.name}),i.message.includes("Session expired")?new Error("Session expired. Please enter your password to unlock."):i.message.includes("Encryption keys not initialized")?new Error("Session expired due to inactivity. Please reconnect to the chat."):i.message.includes("Connection lost")?new Error("Connection lost. Please check your Internet connection."):i.message.includes("Rate limit exceeded")?new Error("Message rate limit exceeded. Please wait before sending another message."):i}},2e3)}processMessageQueue(){for(;this.messageQueue.length>0&&this.isConnected()&&this.isVerified;){let e=this.messageQueue.shift();this.sendSecureMessage(e).catch(console.error)}}startHeartbeat(){this._heartbeatConfig={enabled:!0,interval:s.TIMEOUTS.HEARTBEAT_INTERVAL,lastHeartbeat:0},this.stopHeartbeat(!0),this._heartbeatTimer=setInterval(()=>{this._heartbeatConfig?.enabled&&this.dataChannel?.readyState==="open"&&this._sendHeartbeat()},s.TIMEOUTS.HEARTBEAT_INTERVAL),this._trackActiveTimer(this._heartbeatTimer),this._lastInboundAt=Date.now(),this._livenessProbeAt=0,this._livenessArmed=!1,this._startLivenessWatchdog(),this._setupRecoveryLifecycleListeners(),this._secureLog("info","\u{1F504} Liveness watchdog started",{heartbeatMs:s.TIMEOUTS.HEARTBEAT_INTERVAL,probeAfterMs:s.TIMEOUTS.LIVENESS_PROBE_AFTER,probeTimeoutMs:s.TIMEOUTS.LIVENESS_PROBE_TIMEOUT})}stopHeartbeat(e=!1){!e&&this._heartbeatConfig&&(this._heartbeatConfig.enabled=!1),this._heartbeatTimer&&(clearInterval(this._heartbeatTimer),this._activeTimers?.delete(this._heartbeatTimer),this._heartbeatTimer=null),e||this._stopLivenessWatchdog()}handleHeartbeat(e){this._lastInboundAt=Date.now(),this._livenessProbeAt=0;let t=e?.ack===!0||e?.data?.ack===!0;t||this._sendHeartbeat(!0),this._secureLog("debug",t?"\u{1F493} Heartbeat ack received":"\u{1F493} Heartbeat probe received")}_noteInboundActivity(){this._lastInboundAt=Date.now(),this._livenessProbeAt=0,this._livenessArmed=!0}_startLivenessWatchdog(){this._stopLivenessWatchdog(),this._livenessTimer=setInterval(()=>{try{this._checkLiveness()}catch(e){this._secureLog("error","\u274C Liveness check failed",{errorType:e?.constructor?.name||"Unknown"})}},s.TIMEOUTS.LIVENESS_CHECK_INTERVAL),this._trackActiveTimer(this._livenessTimer)}_stopLivenessWatchdog(){this._livenessTimer&&(clearInterval(this._livenessTimer),this._activeTimers?.delete(this._livenessTimer),this._livenessTimer=null)}_checkLiveness(){if(!this.isVerified||this._reconnect.phase!=="idle"||this.dataChannel?.readyState!=="open"||!this._lastInboundAt||!this._livenessArmed)return;let e=s.TIMEOUTS,t=Date.now();if(this.peerConnection?.connectionState==="connected"){this._livenessProbeAt=0;return}if(this._livenessProbeAt){if(t-this._livenessProbeAt<e.LIVENESS_PROBE_TIMEOUT)return;this._livenessProbeAt=0,this._secureLog("warn","\u26A0\uFE0F liveness probe unanswered and ICE is not connected \u2014 path presumed dead"),this._onPathLost("liveness_probe_timeout");return}if(t-this._lastInboundAt<e.LIVENESS_PROBE_AFTER)return;this._livenessProbeAt=t;let i=this._sendHeartbeat(!1);this._secureLog("info","\u{1F504} peer silent and ICE degraded, probing",{silentForMs:t-this._lastInboundAt,connectionState:this.peerConnection?.connectionState,probeSent:i})}isReconnecting(){return this._reconnect.phase!=="idle"&&this._reconnect.phase!=="exhausted"}_setupRecoveryLifecycleListeners(){typeof window>"u"||this._recoveryLifecycleBound||(this._recoveryLifecycleBound=!0,this._onDeviceOnline=()=>{this.isVerified&&(this.isReconnecting()?(this._secureLog("info","\u{1F504} Device back online \u2014 retrying immediately"),this._attemptIceRestart()):this._checkLiveness())},this._onVisibilityRestored=()=>{typeof document>"u"||document.visibilityState!=="visible"||this.isVerified&&(this._lastInboundAt=Date.now(),this._livenessProbeAt=0,this._reconnect.phase==="idle"&&this.dataChannel?.readyState==="open"&&(this._livenessProbeAt=Date.now(),this._sendHeartbeat(!1),this._secureLog("info","\u{1F504} returned to foreground, probing peer")))},window.addEventListener("online",this._onDeviceOnline),typeof document<"u"&&document.addEventListener("visibilitychange",this._onVisibilityRestored))}_teardownRecoveryLifecycleListeners(){!this._recoveryLifecycleBound||typeof window>"u"||(this._recoveryLifecycleBound=!1,this._onDeviceOnline&&window.removeEventListener("online",this._onDeviceOnline),this._onVisibilityRestored&&typeof document<"u"&&document.removeEventListener("visibilitychange",this._onVisibilityRestored),this._onDeviceOnline=null,this._onVisibilityRestored=null)}_resetReconnectState(){let e=this._reconnect;e&&(e.graceTimer&&(clearTimeout(e.graceTimer),this._activeTimers?.delete(e.graceTimer)),e.retryTimer&&(clearTimeout(e.retryTimer),this._activeTimers?.delete(e.retryTimer)),e.restartTimer&&(clearTimeout(e.restartTimer),this._activeTimers?.delete(e.restartTimer)),e.graceTimer=null,e.retryTimer=null,e.restartTimer=null,e.phase="idle",e.attempts=0,e.startedAt=0,e.inFlightAt=0,e.barrenFailures=0,e.pendingRole=null)}_onPathDegraded(e="ice_disconnected"){this.isVerified&&this._reconnect.phase==="idle"&&(this._reconnect.phase="grace",this._reconnect.startedAt=Date.now(),this._secureLog("info","\u{1F504} path degraded, holding grace window",{reason:e}),this.onStatusChange("reconnecting"),this._reconnect.graceTimer=setTimeout(()=>{if(this._reconnect.graceTimer=null,this.peerConnection?.connectionState==="connected"){this._onPathRecovered();return}this._attemptIceRestart()},s.TIMEOUTS.ICE_DISCONNECT_GRACE),this._trackActiveTimer(this._reconnect.graceTimer))}_onPathLost(e="ice_failed"){this.isVerified&&(this._reconnect.phase==="restarting"||this._reconnect.phase==="exhausted"||(this._reconnect.phase==="idle"&&(this._reconnect.startedAt=Date.now(),this.onStatusChange("reconnecting")),this._reconnect.graceTimer&&(clearTimeout(this._reconnect.graceTimer),this._activeTimers?.delete(this._reconnect.graceTimer),this._reconnect.graceTimer=null),this._secureLog("info","\u{1F504} path lost, restarting ICE",{reason:e}),this._attemptIceRestart()))}_noteIceFailureDiagnostics(e){if(this.isReconnecting()&&e){if(e.pairCount>0){this._reconnect.barrenFailures=0;return}this._reconnect.barrenFailures=(this._reconnect.barrenFailures||0)+1,!(this._reconnect.barrenFailures<s.LIMITS.MAX_BARREN_ICE_FAILURES)&&(this._secureLog("warn","\u26A0\uFE0F ICE cannot gather any usable candidate \u2014 this connection is bound to a network that is gone",{consecutiveBarrenFailures:this._reconnect.barrenFailures}),this._giveUpAutoReconnect("ice_agent_unusable"))}}_onPathRecovered(){let e=this.isReconnecting();if(this._resetReconnectState(),this._lastInboundAt=Date.now(),this._livenessProbeAt=0,!e)return!1;this._secureLog("info","\u{1F504} connection recovered, session preserved"),this.onStatusChange("connected"),this.processMessageQueue();try{this._dispatchAppEvent?.(new CustomEvent("connection-recovered",{detail:{timestamp:Date.now()}}))}catch{}return!0}async _attemptIceRestart(){if(!this.isVerified||!this.peerConnection)return;if(this.peerConnection.connectionState==="connected"){this._onPathRecovered();return}let e=this._reconnect;if(typeof navigator<"u"&&navigator.onLine===!1){e.phase="waiting",e.startedAt=Date.now(),this._secureLog("debug","\u{1F504} Device offline \u2014 holding recovery open"),this._scheduleReconnectRetry();return}if(Date.now()-(e.startedAt||Date.now())>s.TIMEOUTS.RECONNECT_MAX_DURATION){this._giveUpAutoReconnect("timeout");return}if(e.inFlightAt&&Date.now()-e.inFlightAt<s.TIMEOUTS.ICE_RESTART_TIMEOUT){this._scheduleReconnectRetry();return}if(this.dataChannel?.readyState!=="open"){this._giveUpAutoReconnect("data_channel_closed");return}let r=Date.now()-Math.max(this._lastInboundAt||0,e.startedAt);if(e.attempts>=2&&r>s.TIMEOUTS.RECOVERY_SILENCE_LIMIT){this._secureLog("warn","\u26A0\uFE0F nothing has reached us since the drop \u2014 the channel cannot carry a renegotiation",{silentForMs:r,attempts:e.attempts}),this._giveUpAutoReconnect("no_signalling_path");return}e.phase="restarting",e.attempts+=1,e.inFlightAt=Date.now(),this._secureLog("info","\u{1F504} ICE restart attempt",{attempt:e.attempts,role:this.isInitiator?"offerer":"answerer"});try{this.isInitiator?await this._sendIceRestartOffer():await this.sendSystemMessage({type:s.MESSAGE_TYPES.ICE_RESTART_REQUEST,timestamp:Date.now()})}catch(i){this._secureLog("warn","\u26A0\uFE0F ICE restart attempt failed to send",{errorType:i?.constructor?.name||"Unknown"})}this._scheduleReconnectRetry()}_scheduleReconnectRetry(){let e=this._reconnect;e.retryTimer&&(clearTimeout(e.retryTimer),this._activeTimers?.delete(e.retryTimer));let t=s.RECONNECT_BACKOFF,r=t[Math.min(Math.max(e.attempts-1,0),t.length-1)];e.retryTimer=setTimeout(()=>{if(e.retryTimer=null,this.peerConnection?.connectionState==="connected"){this._onPathRecovered();return}this._attemptIceRestart()},r),this._trackActiveTimer(e.retryTimer)}_applyCurrentIceServers(e){try{if(!e||typeof e.getConfiguration!="function"||typeof e.setConfiguration!="function")return;let t=this._config?.webrtc?.iceServers;if(!Array.isArray(t)||t.length===0)return;e.setConfiguration({...e.getConfiguration(),iceServers:t})}catch(t){this._secureLog("warn","Could not refresh ICE servers before restart",{errorType:t?.constructor?.name||"Unknown"})}}async _sendIceRestartOffer(){let e=this.peerConnection;if(!e)return;if(this._applyCurrentIceServers(e),e.signalingState==="have-local-offer")try{await e.setLocalDescription({type:"rollback"})}catch{}let t=await e.createOffer({iceRestart:!0});await e.setLocalDescription(t),await this.waitForIceGathering(s.TIMEOUTS.ICE_RESTART_GATHERING,s.TIMEOUTS.ICE_RESTART_GATHERING),await this.sendSystemMessage({type:s.MESSAGE_TYPES.ICE_RESTART_OFFER,sdp:e.localDescription.sdp,timestamp:Date.now()}),this._secureLog("debug","\u{1F504} ICE restart offer sent")}_currentRemoteDtlsFingerprint(){let e=this.peerConnection?.currentRemoteDescription?.sdp||this.peerConnection?.remoteDescription?.sdp;if(!e)return null;try{return this._extractDTLSFingerprintFromSDP(e)}catch{return null}}async _assertSameRemoteIdentity(e,t){let r=this._currentRemoteDtlsFingerprint();if(!r)throw new Error(`Cannot verify peer identity for ${t}`);let i=this._extractDTLSFingerprintFromSDP(e);await this._validateDTLSFingerprint(i,r,t)}async _handleIceRestartSignal(e,t){let r=s.MESSAGE_TYPES,i=this.peerConnection;if(i)switch(this._noteInboundActivity(),e){case r.ICE_RESTART_REQUEST:{if(!this.isInitiator)return;this._reconnect.phase==="idle"&&(this._reconnect.startedAt=Date.now(),this._reconnect.phase="restarting",this.onStatusChange("reconnecting")),await this._sendIceRestartOffer();return}case r.ICE_RESTART_OFFER:{if(!t.sdp)return;await this._assertSameRemoteIdentity(t.sdp,"ice_restart_offer"),this._reconnect.phase==="idle"&&(this._reconnect.startedAt=Date.now(),this.onStatusChange("reconnecting")),this._reconnect.phase="restarting",this._applyCurrentIceServers(i),await i.setRemoteDescription({type:"offer",sdp:t.sdp});let n=await i.createAnswer();await i.setLocalDescription(n),await this.waitForIceGathering(s.TIMEOUTS.ICE_RESTART_GATHERING,s.TIMEOUTS.ICE_RESTART_GATHERING),await this.sendSystemMessage({type:r.ICE_RESTART_ANSWER,sdp:i.localDescription.sdp,timestamp:Date.now()}),this._secureLog("debug","\u{1F504} ICE restart answer sent");return}case r.ICE_RESTART_ANSWER:{if(!t.sdp)return;if(i.signalingState!=="have-local-offer"){this._secureLog("warn","\u26A0\uFE0F Ignoring restart answer in unexpected state",{signalingState:i.signalingState});return}await this._assertSameRemoteIdentity(t.sdp,"ice_restart_answer"),await i.setRemoteDescription({type:"answer",sdp:t.sdp}),this._reconnect.inFlightAt=0,this._secureLog("debug","\u{1F504} ICE restart answer applied");return}default:}}_giveUpAutoReconnect(e){this._resetReconnectState(),this._reconnect.phase="exhausted",this._teardownRecoveryLifecycleListeners?.(),this._secureLog("warn","\u26A0\uFE0F automatic reconnection exhausted \u2014 ending session",{reason:e}),this.reconnectionFailedNotificationSent||(this.reconnectionFailedNotificationSent=!0,this.deliverMessageToUI("Could not restore the connection. This chat is being closed and its data wiped \u2014 start a new one to continue.","system")),this.onStatusChange("recovery_failed"),this._clearVerificationStates()}_stopAllTimers(){this._secureLog("info","Stopping all timers and cleanup scheduler"),this._maintenanceScheduler&&(clearInterval(this._maintenanceScheduler),this._maintenanceScheduler=null),this.stopHeartbeat?.(),this._resetReconnectState?.(),this._activeTimers&&(this._activeTimers.forEach(e=>{e&&(clearInterval(e),clearTimeout(e))}),this._activeTimers.clear()),this._fileTransferInitRetryTimers&&this._fileTransferInitRetryTimers.clear(),this._logCleanupInterval=null,this._secureLog("info","All timers stopped successfully")}waitForIceGathering(e=s.TIMEOUTS.ICE_GATHERING_TIMEOUT,t=s.TIMEOUTS.ICE_GATHERING_HARD_TIMEOUT){return new Promise(r=>{let i=this.peerConnection;if(!i){r(!1);return}if(i.iceGatheringState==="complete"){r(!0);return}let n=!1,a=null,o=null,c=()=>{try{let h=this.peerConnection?.localDescription?.sdp;return h?this._summarizeIceCandidatesInSDP(h).total>0:!1}catch{return!1}},d=h=>{if(!n){n=!0,a&&(clearTimeout(a),this._untrackActiveTimer?.(a)),o&&(clearTimeout(o),this._untrackActiveTimer?.(o));try{i.removeEventListener("icegatheringstatechange",u)}catch{}r(h)}},u=()=>{this.peerConnection?.iceGatheringState==="complete"&&d(!0)};i.addEventListener("icegatheringstatechange",u),a=setTimeout(()=>{c()&&d(!1)},e),this._trackActiveTimer?.(a),o=setTimeout(()=>d(!1),Math.max(t,e)),this._trackActiveTimer?.(o)})}retryConnection(){this._secureLog("info","Retrying connection",{attempt:this.connectionAttempts,maxAttempts:this.maxConnectionAttempts}),this.onStatusChange("retrying")}isConnected(){let e=!!this.dataChannel,r=this.dataChannel?.readyState==="open",i=this.isVerified,n=this.peerConnection?.connectionState;return this.dataChannel&&this.dataChannel.readyState==="open"&&this.isVerified}getConnectionInfo(){return{fingerprint:this.keyFingerprint,isConnected:this.isConnected(),isVerified:this.isVerified,connectionState:this.peerConnection?.connectionState,iceConnectionState:this.peerConnection?.iceConnectionState,verificationCode:this.verificationCode}}handleUnexpectedDisconnect(){this.sendDisconnectNotification(),this.isVerified=!1,this.disconnectNotificationSent||(this.disconnectNotificationSent=!0,this.deliverMessageToUI("\u{1F50C} Connection lost. Attempting to reconnect...","system")),this.fileTransferSystem&&(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null),this._dispatchAppEvent?.(new CustomEvent("peer-disconnect",{detail:{reason:"connection_lost",timestamp:Date.now()}}))}sendDisconnectNotification(){try{if(this.dataChannel&&this.dataChannel.readyState==="open"){let e={type:"peer_disconnect",timestamp:Date.now(),reason:this.intentionalDisconnect?"user_disconnect":"connection_lost"};for(let t=0;t<3;t++)try{this.dataChannel.send(JSON.stringify(e)),window.EnhancedSecureCryptoUtils.secureLog.log("info","Disconnect notification sent",{reason:e.reason,attempt:t+1});break}catch(r){t===2&&window.EnhancedSecureCryptoUtils.secureLog.log("error","Failed to send disconnect notification",{error:r.message})}}}catch(e){window.EnhancedSecureCryptoUtils.secureLog.log("error","Could not send disconnect notification",{error:e.message})}}attemptReconnection(){return!this.isVerified||this.dataChannel?.readyState!=="open"?(this.reconnectionFailedNotificationSent||(this.reconnectionFailedNotificationSent=!0,this.deliverMessageToUI("Unable to reconnect. A new connection is required.","system")),!1):(this._resetReconnectState(),this.reconnectionFailedNotificationSent=!1,this._reconnect.startedAt=Date.now(),this.onStatusChange("reconnecting"),this._attemptIceRestart(),!0)}handlePeerDisconnectNotification(e){let t=e.reason||"unknown",r=t==="user_disconnect"?"manually disconnected.":"connection lost.";this.peerDisconnectNotificationSent||(this.peerDisconnectNotificationSent=!0,this.deliverMessageToUI(`Peer ${r}`,"system")),this.onStatusChange("peer_disconnected"),this.intentionalDisconnect=!1,this.isVerified=!1,this.stopHeartbeat(),this.onKeyExchange(""),this.onVerificationRequired(""),this._dispatchAppEvent?.(new CustomEvent("peer-disconnect",{detail:{reason:t,timestamp:Date.now()}})),this._peerDisconnectCleanupTimer||(this._peerDisconnectCleanupTimer=this._trackActiveTimer(setTimeout(()=>{let i=this._peerDisconnectCleanupTimer;this._peerDisconnectCleanupTimer=null,this._untrackActiveTimer(i),this._sessionAlive!==!1&&this.disconnect()},2e3))),window.EnhancedSecureCryptoUtils.secureLog.log("info","Peer disconnect notification processed",{reason:t})}disconnect(){try{this._sessionAlive=!1;try{this._stopAdaptation?.()}catch{}try{this._stopLocalMediaPermanently?.()}catch{}this._callAudioSender=null,this._callVideoSender=null,this._callGroupContext=null,this._externalMediaStream=null,this._callStateListeners?.clear?.(),this.intentionalDisconnect=!0,window.EnhancedSecureCryptoUtils.secureLog.log("info","Starting intentional disconnect"),this.sendDisconnectNotification(),this._teardownRecoveryLifecycleListeners?.(),this._stopAllTimers(),this._peerDisconnectCleanupTimer=null,this.stopHeartbeat(),this.stopFakeTrafficGeneration();for(let e of this.decoyTimers.entries())clearTimeout(e[1]);this.decoyTimers.clear(),this.fileTransferSystem&&(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null);for(let e of this.decoyChannels.values())e.readyState==="open"&&e.close();this.decoyChannels.clear(),this.heartbeatChannel&&(this.heartbeatChannel.close(),this.heartbeatChannel=null),this.isVerified=!1,this.processedMessageIds.clear(),this.messageCounter=0,this.packetBuffer.clear(),this.chunkQueue=[],this._wipeEphemeralKeys(),this._hardWipeOldKeys(),this._secureCleanupCryptographicMaterials(),this.keyVersions.clear(),this.oldKeys.clear(),this.currentKeyVersion=0,this.lastKeyRotation=Date.now(),this.sequenceNumber=0,this.expectedSequenceNumber=0,this.replayWindow.clear(),this._clearVerificationStates(),this.securityFeatures={hasEncryption:!0,hasECDH:!0,hasECDSA:!0,hasMutualAuth:!0,hasMetadataProtection:!0,hasEnhancedReplayProtection:!0,hasNonExtractableKeys:!0,hasRateLimiting:!0,hasEnhancedValidation:!0,hasPFS:!0},this.dataChannel&&(this.dataChannel.close(),this.dataChannel.onopen=null,this.dataChannel.onclose=null,this.dataChannel.onmessage=null,this.dataChannel.onerror=null,this.dataChannel=null),this.peerConnection&&(this.peerConnection.close(),this.peerConnection.onconnectionstatechange=null,this.peerConnection.ondatachannel=null,this.peerConnection=null),this.messageQueue&&this.messageQueue.length>0&&(this.messageQueue.forEach((e,t)=>{this._secureWipeMemory(e,`messageQueue[${t}]`)}),this.messageQueue=[]),this._forceGarbageCollection().catch(e=>{this._secureLog("error","Cleanup failed during disconnect",{errorType:e?.constructor?.name||"Unknown"})}),this._dispatchAppEvent?.(new CustomEvent("peer-disconnect",{detail:{reason:"user_disconnect",timestamp:Date.now()}})),this._dispatchAppEvent?.(new CustomEvent("connection-cleaned",{detail:{timestamp:Date.now(),reason:"user_cleanup"}})),this.onStatusChange("disconnected"),this.onKeyExchange(""),this.onVerificationRequired(""),this._secureLog("info","Connection securely cleaned up with complete memory wipe")}catch(e){this._secureLog("error","\u274C Error during enhanced disconnect:",{errorType:e?.constructor?.name||"Unknown"})}finally{this.intentionalDisconnect=!1}}async sendFile(e,t={}){if(this._enforceVerificationGate("sendFile"),!this.isConnected())throw new Error("Connection not ready for file transfer. Please ensure the connection is established.");if(!this.fileTransferSystem&&(this.initializeFileTransfer(),await new Promise(r=>setTimeout(r,500)),!this.fileTransferSystem))throw new Error("File transfer system could not be initialized. Please try reconnecting.");if(!this.encryptionKey||!this.macKey)throw new Error("Encryption keys not ready. Please wait for connection to be fully established.");try{return await this.fileTransferSystem.sendFile(e,t)}catch(r){throw this._secureLog("error","File transfer error:",{errorType:r?.constructor?.name||"Unknown"}),r.message.includes("Connection not ready")?new Error("Connection not ready for file transfer. Check connection status."):r.message.includes("Encryption keys not initialized")?new Error("Session expired due to inactivity. Please reconnect to the chat."):r.message.includes("Transfer timeout")?new Error("File transfer timeout. Check connection and try again."):r}}getFileTransfers(){if(!this.fileTransferSystem)return{sending:[],receiving:[]};try{let e=[],t=[];return typeof this.fileTransferSystem.getActiveTransfers=="function"?e=this.fileTransferSystem.getActiveTransfers():this._secureLog("warn","getActiveTransfers method not available in file transfer system"),typeof this.fileTransferSystem.getReceivingTransfers=="function"?t=this.fileTransferSystem.getReceivingTransfers():this._secureLog("warn","getReceivingTransfers method not available in file transfer system"),{sending:e||[],receiving:t||[]}}catch(e){return this._secureLog("error","Error getting file transfers:",{errorType:e?.constructor?.name||"Unknown"}),{sending:[],receiving:[]}}}getFileTransferStatus(){if(!this.fileTransferSystem)return{initialized:!1,status:"not_initialized",message:"File transfer system not initialized"};let e=this.fileTransferSystem.getActiveTransfers(),t=this.fileTransferSystem.getReceivingTransfers();return{initialized:!0,status:"ready",activeTransfers:e.length,receivingTransfers:t.length,totalTransfers:e.length+t.length}}cancelFileTransfer(e){return this.fileTransferSystem?this.fileTransferSystem.cancelTransfer(e):!1}cleanupFileTransferSystem(){return this.fileTransferSystem?(this._secureLog("info","\u{1F9F9} Force cleaning up file transfer system"),this.fileTransferSystem.cleanup(),this.fileTransferSystem=null,!0):!1}reinitializeFileTransfer(){try{return this.fileTransferSystem&&this.fileTransferSystem.cleanup(),this.initializeFileTransfer(),!0}catch(e){return this._secureLog("error","Failed to reinitialize file transfer system:",{errorType:e?.constructor?.name||"Unknown"}),!1}}setFileTransferCallbacks(e,t,r,i=null){this.onFileProgress=e,this.onFileReceived=t,this.onFileError=r,this.onIncomingFileRequest=i,this.fileTransferSystem&&(this.fileTransferSystem.onProgress=e,this.fileTransferSystem.onFileReceived=t,this.fileTransferSystem.onError=r,this.fileTransferSystem.onIncomingFileRequest=i)}getPendingIncomingFiles(){return this.fileTransferSystem?this.fileTransferSystem.getPendingIncomingTransfers():[]}async acceptIncomingFile(e){return this.fileTransferSystem?this.fileTransferSystem.acceptIncomingFile(e):!1}async rejectIncomingFile(e){return this.fileTransferSystem?this.fileTransferSystem.rejectIncomingFile(e):!1}async getReceivedFileObjectURL(e){return this.fileTransferSystem?this.fileTransferSystem.getObjectURL(e):null}revokeReceivedFileObjectURL(e){this.fileTransferSystem&&this.fileTransferSystem.revokeObjectURL(e)}async handleSessionActivation(e){try{this.currentSession=e;let t=!!(this.encryptionKey&&this.macKey);e.sessionId&&this.onStatusChange("connected"),setTimeout(()=>{try{this.initializeFileTransfer()}catch(i){this._secureLog("warn","File transfer initialization failed during session activation:",{details:i.message})}},1e3),this.fileTransferSystem&&this.isConnected()&&typeof this.fileTransferSystem.onSessionUpdate=="function"&&this.fileTransferSystem.onSessionUpdate({keyFingerprint:this.keyFingerprint,sessionSalt:this.sessionSalt,hasMacKey:!!this.macKey})}catch(t){this._secureLog("error","Failed to handle session activation:",{errorType:t?.constructor?.name||"Unknown"})}}checkFileTransferReadiness(){let e={hasFileTransferSystem:!!this.fileTransferSystem,hasDataChannel:!!this.dataChannel,dataChannelState:this.dataChannel?.readyState,isConnected:this.isConnected(),isVerified:this.isVerified,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,ready:!1};return e.ready=e.hasFileTransferSystem&&e.hasDataChannel&&e.dataChannelState==="open"&&e.isConnected&&e.isVerified,e}forceReinitializeFileTransfer(){try{return this.fileTransferSystem&&(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null),setTimeout(()=>{this.initializeFileTransfer()},500),!0}catch(e){return this._secureLog("error","Failed to force reinitialize file transfer:",{errorType:e?.constructor?.name||"Unknown"}),!1}}getFileTransferDiagnostics(){let e={timestamp:new Date().toISOString(),webrtcManager:{hasDataChannel:!!this.dataChannel,dataChannelState:this.dataChannel?.readyState,isConnected:this.isConnected(),isVerified:this.isVerified,isInitiator:this.isInitiator,hasEncryptionKey:!!this.encryptionKey,hasMacKey:!!this.macKey,hasMetadataKey:!!this.metadataKey,hasKeyFingerprint:!!this.keyFingerprint,hasSessionSalt:!!this.sessionSalt},fileTransferSystem:null,globalState:{fileTransferActive:this._fileTransferActive||!1,hasFileTransferSystem:!!this.fileTransferSystem,fileTransferSystemType:this.fileTransferSystem?"EnhancedSecureFileTransfer":"none"}};if(this.fileTransferSystem)try{e.fileTransferSystem=this.fileTransferSystem.getSystemStatus()}catch(t){e.fileTransferSystem={error:t.message}}return e}getSupportedFileTypes(){if(!this.fileTransferSystem)return{error:"File transfer system not initialized"};try{return this.fileTransferSystem.getSupportedFileTypes()}catch(e){return{error:e.message}}}validateFile(e){if(!this.fileTransferSystem)return{isValid:!1,errors:["File transfer system not initialized"],fileType:null,fileSize:e?.size||0,formattedSize:"0 B"};try{return this.fileTransferSystem.validateFile(e)}catch(t){return{isValid:!1,errors:[t.message],fileType:null,fileSize:e?.size||0,formattedSize:"0 B"}}}getFileTypeInfo(){if(!this.fileTransferSystem)return{error:"File transfer system not initialized"};try{return this.fileTransferSystem.getFileTypeInfo()}catch(e){return{error:e.message}}}async forceInitializeFileTransfer(e={}){let t=new AbortController,{signal:r=t.signal,timeout:i=6e3}=e;r&&r!==t.signal&&r.addEventListener("abort",()=>t.abort());try{if(!this.isVerified)throw new Error("Connection not verified");if(!this.dataChannel||this.dataChannel.readyState!=="open")throw new Error("Data channel not open");if(!this.encryptionKey||!this.macKey)throw new Error("Encryption keys not ready");this.fileTransferSystem&&(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null),this.initializeFileTransfer();let n=0,a=50,o=100,c=a*o,d=new Promise((u,h)=>{let m=()=>{if(t.signal.aborted){h(new Error("Operation cancelled"));return}if(this.fileTransferSystem){u(!0);return}if(n>=a){h(new Error(`Initialization timeout after ${c}ms`));return}n++,setTimeout(m,o)};m()});if(await Promise.race([d,new Promise((u,h)=>setTimeout(()=>h(new Error(`Global timeout after ${i}ms`)),i))]),this.fileTransferSystem)return!0;throw new Error("Force initialization timeout")}catch(n){return n.name==="AbortError"||n.message.includes("cancelled")?(this._secureLog("info","File transfer initialization cancelled by user"),{cancelled:!0}):(this._secureLog("error","Force file transfer initialization failed:",{errorType:n?.constructor?.name||"Unknown",message:n.message,attempts}),{error:n.message,attempts})}}cancelFileTransferInitialization(){try{return this.fileTransferSystem?(this.fileTransferSystem.cleanup(),this.fileTransferSystem=null,this._fileTransferActive=!1,this._secureLog("info","File transfer initialization cancelled"),!0):!1}catch(e){return this._secureLog("error","Failed to cancel file transfer initialization:",{errorType:e?.constructor?.name||"Unknown"}),!1}}getFileTransferSystemStatus(){if(!this.fileTransferSystem)return{available:!1,status:"not_initialized"};try{let e=this.fileTransferSystem.getSystemStatus();return{available:!0,status:e.status||"unknown",activeTransfers:e.activeTransfers||0,receivingTransfers:e.receivingTransfers||0,systemType:"EnhancedSecureFileTransfer"}}catch(e){return this._secureLog("error","Failed to get file transfer system status:",{errorType:e?.constructor?.name||"Unknown"}),{available:!1,status:"error",error:e.message}}}_validateNestedEncryptionSecurity(){if(this.securityFeatures.hasNestedEncryption&&this.nestedEncryptionKey)try{let e=this._generateSecureIV(s.SIZES.NESTED_ENCRYPTION_IV_SIZE,"securityTest1"),t=this._generateSecureIV(s.SIZES.NESTED_ENCRYPTION_IV_SIZE,"securityTest2");return e.every((i,n)=>i===t[n])?(this._secureLog("error","CRITICAL: Nested encryption security validation failed - IVs are identical!"),!1):this._getIVTrackingStats().totalIVs<2?(this._secureLog("error","CRITICAL: IV tracking system not working properly"),!1):(this._secureLog("info","Nested encryption security validation passed - secure IV generation working"),!0)}catch(e){return this._secureLog("error","CRITICAL: Nested encryption security validation failed:",{errorType:e.constructor.name,errorMessage:e.message}),!1}return!0}getCallState(){return{...this.callState}}addCallStateListener(e){return typeof e!="function"?()=>{}:(this._callStateListeners.add(e),()=>this._callStateListeners.delete(e))}removeCallStateListener(e){this._callStateListeners.delete(e)}setCallGroupContext(e){this._callGroupContext=typeof e=="string"&&e?e:null,this._updateCallState({}),this._callGroupContext&&this._pendingCallOffer&&this.callState.phase==="incoming"&&this.acceptCall().catch(t=>{this._secureLog("warn","\u26A0\uFE0F Failed to answer a group call leg that was already ringing",{errorType:t?.constructor?.name})})}setExternalMediaStream(e){this._externalMediaStream=e||null}_usingExternalMedia(){return!!this._externalMediaStream&&this.localMediaStream===this._externalMediaStream}getRemoteMediaStream(){return this.remoteMediaStream}getLocalMediaStream(){return this.localMediaStream}_refreshRemoteStream(){let e=this.peerConnection;if(!e||typeof e.getReceivers!="function")return;let t=e.getReceivers().map(n=>n.track).filter(n=>n&&(n.kind==="audio"||n.kind==="video")&&n.readyState==="live"),r=this.remoteMediaStream?this.remoteMediaStream.getTracks():[];r.length===t.length&&r.every(n=>t.includes(n))||(this.remoteMediaStream=new MediaStream(t)),this._updateCallState({remoteHasVideo:t.some(n=>n.kind==="video")})}_scheduleRemoteRefresh(){this._refreshRemoteStream(),setTimeout(()=>{try{this._refreshRemoteStream()}catch{}},300),setTimeout(()=>{try{this._refreshRemoteStream()}catch{}},1200)}_updateCallState(e){this.callState={...this.callState,...e,groupCallId:this._callGroupContext};let t=this.getCallState();t.phase==="active"?this._startAdaptation():t.phase==="idle"&&this._stopAdaptation();try{this.onCallStateChanged?.(t)}catch{}for(let r of this._callStateListeners)try{r(t)}catch{}if(typeof document<"u")try{this._dispatchAppEvent?.(new CustomEvent("securebit-call-state",{detail:{managerId:this._managerId||null,state:t}}))}catch{}}_callCanStart(){let e=typeof this.isConnected=="function"?this.isConnected():!1,t=this.dataChannel&&this.dataChannel.readyState==="open";return!!(e&&t&&this.isVerified&&!this.isReconnecting())}async _sendCallSignal(e,t){return await this.sendSystemMessage({type:e,...t})}_audioConstraints(){return{echoCancellation:!0,noiseSuppression:!0,autoGainControl:!0}}_videoConstraints(){return{facingMode:this._callFacingMode,width:{ideal:1280},height:{ideal:720}}}async _acquireLocalMedia(e){let t=this._externalMediaStream||await navigator.mediaDevices.getUserMedia({audio:this._audioConstraints(),video:e?this._videoConstraints():!1});this.localMediaStream=t;let r=this.peerConnection,i=t.getAudioTracks()[0]||null,n=t.getVideoTracks()[0]||null;return i&&(this._callAudioSender?await this._callAudioSender.replaceTrack(i):this._callAudioSender=r.addTrack(i,t)),n&&(this._callVideoSender?await this._callVideoSender.replaceTrack(n):this._callVideoSender=r.addTrack(n,t)),this._applyCallCodecPrefs(),t}_stopLocalMediaPermanently(){try{if(this.localMediaStream&&!this._usingExternalMedia())for(let e of this.localMediaStream.getTracks())try{e.stop()}catch{}}catch{}this.localMediaStream=null}_applyCallCodecPrefs(){try{let e=this.peerConnection?.getTransceivers?.()||[],t=e.find(i=>i.sender&&i.sender===this._callAudioSender);t&&Ji(t);let r=e.find(i=>i.sender&&i.sender===this._callVideoSender);r&&sn(r)}catch{}}_mungeCallSdp(e){try{let t=Cr(e,st.opusFmtp);return t=Qi(t,qi),t}catch{return e}}async _setLocalMunged(e){let t=this.peerConnection;try{await t.setLocalDescription({type:e.type,sdp:this._mungeCallSdp(e.sdp)});return}catch{try{await t.setLocalDescription({type:e.type,sdp:Cr(e.sdp,st.opusFmtp)});return}catch{await t.setLocalDescription(e)}}}async _applyCallSenderParams(){try{this._callAudioSender&&await Zi(this._callAudioSender,{}),this._callVideoSender&&await an(this._callVideoSender,{})}catch{}}_startAdaptation(){if(!(this._adaptationController||!this.peerConnection))try{this._adaptationController=new Nt(this.peerConnection,{getVideoSender:()=>this._callVideoSender,ceilingBitrate:15e5,onQuality:e=>{e!==this.callState.quality&&this._updateCallState({quality:e})}}),this._adaptationController.start()}catch{}}_stopAdaptation(){if(this._adaptationController){try{this._adaptationController.stop()}catch{}this._adaptationController=null}}_notifyCallMediaError(e,t){let r=e?.name||"",i=t?"camera/microphone":"microphone",n,a;r==="NotAllowedError"?(a="permission_denied",n=`\u26A0\uFE0F Call not started \u2014 ${i} access is blocked. Allow it for this site in the browser, and enable your browser under System Settings \u2192 Privacy & Security \u2192 ${t?"Camera/Microphone":"Microphone"}, then try again.`):r==="NotFoundError"||r==="OverconstrainedError"?(a="device_not_found",n=`\u26A0\uFE0F Call not started \u2014 no ${i} found on this device.`):r==="NotReadableError"||r==="AbortError"?(a="device_busy",n=`\u26A0\uFE0F Call not started \u2014 your ${i} is in use by another app. Close it and try again.`):(a="media_failed",n=`\u26A0\uFE0F Call not started \u2014 could not access ${i}${r?" ("+r+")":""}.`);try{this.deliverMessageToUI(n,"system")}catch{}return a}async startCall(e=!1){if(!this._callCanStart())throw this._updateCallState({error:"not_verified"}),new Error("Calls require a connected, SAS-verified session.");if(this.callState.active){this._secureLog("warn","\u26A0\uFE0F startCall ignored \u2014 a call is already active");return}let t=crypto?.randomUUID?.()||String(Date.now())+Math.random().toString(36).slice(2);this._updateCallState({active:!0,phase:"outgoing",withVideo:e,callId:t,micEnabled:!0,cameraEnabled:e,remoteHasVideo:!1,error:null});try{await this._acquireLocalMedia(e),this._callMakingOffer=!0;let r=await this.peerConnection.createOffer();await this._setLocalMunged(r),this._callMakingOffer=!1,await this._applyCallSenderParams(),await this._sendCallSignal(s.MESSAGE_TYPES.CALL_OFFER,{callId:t,withVideo:e,sdp:this.peerConnection.localDescription.sdp})}catch(r){this._callMakingOffer=!1,this._secureLog("error","\u274C startCall failed",{errorType:r?.constructor?.name});let i=this._notifyCallMediaError(r,e);throw await this._teardownCallMedia(),this._updateCallState({active:!1,phase:"idle",error:i}),r}}async _onIncomingCallOffer(e){if(this.callState.active&&(this.callState.phase==="active"||this.callState.phase==="connecting")){await this._answerCallOffer(e,!0),e.withVideo&&this._updateCallState({withVideo:!0});return}this._pendingCallOffer=e,this._updateCallState({active:!0,phase:"incoming",withVideo:!!e.withVideo,callId:e.callId,remoteHasVideo:!!e.withVideo,error:null}),this._callGroupContext&&await this.acceptCall()}async _answerCallOffer(e,t=!1){await this.peerConnection.setRemoteDescription({type:"offer",sdp:e.sdp}),t||await this._acquireLocalMedia(!!e.withVideo);let r=await this.peerConnection.createAnswer();await this._setLocalMunged(r),await this._applyCallSenderParams(),await this._sendCallSignal(s.MESSAGE_TYPES.CALL_ANSWER,{callId:e.callId,sdp:this.peerConnection.localDescription.sdp})}async acceptCall(){let e=this._pendingCallOffer;if(e){this._pendingCallOffer=null,this._updateCallState({phase:"connecting",cameraEnabled:!!e.withVideo});try{await this._answerCallOffer(e,!1),this._updateCallState({phase:"active"}),this._scheduleRemoteRefresh()}catch(t){this._secureLog("error","\u274C acceptCall failed",{errorType:t?.constructor?.name});let r=this._notifyCallMediaError(t,!!e.withVideo);try{await this._sendCallSignal(s.MESSAGE_TYPES.CALL_END,{callId:e.callId})}catch{}await this._teardownCallMedia(),this._updateCallState({active:!1,phase:"idle",error:r})}}}async declineCall(){let e=this.callState.callId;this._pendingCallOffer=null,await this._sendCallSignal(s.MESSAGE_TYPES.CALL_DECLINE,{callId:e}),this._updateCallState({active:!1,phase:"idle",withVideo:!1,remoteHasVideo:!1})}async endCall(e=!0){let t=this.callState.callId;if(e&&t)try{await this._sendCallSignal(s.MESSAGE_TYPES.CALL_END,{callId:t})}catch{}await this._teardownCallMedia(),this._updateCallState({active:!1,phase:"idle",withVideo:!1,micEnabled:!0,cameraEnabled:!1,remoteHasVideo:!1,callId:null,quality:null})}async _teardownCallMedia(){this._stopAdaptation();let e=this.peerConnection;try{if(this.localMediaStream&&!this._usingExternalMedia())for(let t of this.localMediaStream.getTracks())try{t.stop()}catch{}if(e)for(let t of[this._callAudioSender,this._callVideoSender].filter(Boolean))try{await t.replaceTrack(null)}catch{}}catch{}this.localMediaStream=null,this.remoteMediaStream=null,this._callMakingOffer=!1;try{this.peerConnection&&(this.peerConnection.signalingState==="have-local-offer"||this.peerConnection.signalingState==="have-local-pranswer")&&await this.peerConnection.setLocalDescription({type:"rollback"})}catch{}}setMicEnabled(e){this.localMediaStream&&this.localMediaStream.getAudioTracks().forEach(t=>{t.enabled=e}),this._updateCallState({micEnabled:e})}toggleMic(){this.setMicEnabled(!this.callState.micEnabled)}async setCameraEnabled(e){if(!e){this.localMediaStream&&this.localMediaStream.getVideoTracks().forEach(r=>{r.enabled=!1}),this._updateCallState({cameraEnabled:!1});return}let t=this.localMediaStream?.getVideoTracks?.()||[];if(t.length){t.forEach(r=>{r.enabled=!0}),this._updateCallState({cameraEnabled:!0,withVideo:!0});return}await this.upgradeToVideo()}async toggleCamera(){await this.setCameraEnabled(!this.callState.cameraEnabled)}async upgradeToVideo(){if(this.localMediaStream)try{let t=(await navigator.mediaDevices.getUserMedia({video:this._videoConstraints()})).getVideoTracks()[0];if(!t)return;await this.addVideoTrack(t)}catch(e){this._secureLog("error","\u274C upgradeToVideo failed",{errorType:e?.constructor?.name}),this._updateCallState({cameraEnabled:!1,error:"camera_failed"})}}async addVideoTrack(e){!e||!this.localMediaStream||!this.peerConnection||(this.localMediaStream.getVideoTracks().includes(e)||this.localMediaStream.addTrack(e),this._callVideoSender?await this._callVideoSender.replaceTrack(e):this._callVideoSender=this.peerConnection.addTrack(e,this.localMediaStream),this._applyCallCodecPrefs(),this._updateCallState({cameraEnabled:!0,withVideo:!0}),await this._renegotiateCall())}async replaceVideoTrack(e){!e||!this._callVideoSender||await this._callVideoSender.replaceTrack(e)}async switchCamera(){if(!(!this._callVideoSender||!this.localMediaStream)){this._callFacingMode=this._callFacingMode==="user"?"environment":"user";try{let t=(await navigator.mediaDevices.getUserMedia({video:{facingMode:this._callFacingMode}})).getVideoTracks()[0],r=this.localMediaStream.getVideoTracks()[0];if(r){this.localMediaStream.removeTrack(r);try{r.stop()}catch{}}this.localMediaStream.addTrack(t),await this._callVideoSender.replaceTrack(t)}catch(e){this._secureLog("warn","\u26A0\uFE0F switchCamera failed",{errorType:e?.constructor?.name})}}}async _renegotiateCall(){if(!this._callMakingOffer)try{this._callMakingOffer=!0;let e=await this.peerConnection.createOffer();await this._setLocalMunged(e),await this._applyCallSenderParams(),await this._sendCallSignal(s.MESSAGE_TYPES.CALL_OFFER,{callId:this.callState.callId,withVideo:this.callState.withVideo,sdp:this.peerConnection.localDescription.sdp})}finally{this._callMakingOffer=!1}}async _handleCallSignal(e,t){let r=s.MESSAGE_TYPES;switch(e){case r.CALL_OFFER:{await this._onIncomingCallOffer(t);return}case r.CALL_ANSWER:{try{this.peerConnection.signalingState==="have-local-offer"&&await this.peerConnection.setRemoteDescription({type:"answer",sdp:t.sdp}),this.callState.phase==="outgoing"&&this._updateCallState({phase:"active"}),this._scheduleRemoteRefresh()}catch(i){this._secureLog("warn","\u26A0\uFE0F Failed to apply call answer",{errorType:i?.constructor?.name})}return}case r.CALL_ICE:{try{t.candidate&&await this.peerConnection.addIceCandidate(t.candidate)}catch{}return}case r.CALL_DECLINE:{await this._teardownCallMedia(),this._updateCallState({active:!1,phase:"idle",withVideo:!1,remoteHasVideo:!1,error:"declined"});return}case r.CALL_END:{await this.endCall(!1);return}default:return}}},Gt=class{constructor(e=null){this._keyStore=new WeakMap,this._keyMetadata=new Map,this._keyReferences=new Map,this._masterKeyManager=e||new jt,this._persistentStorage=new Br(this._masterKeyManager),this._setupMasterKeyCallbacks(),setTimeout(()=>{this.validateStorageIntegrity()||this._secureLog("error","CRITICAL: Key storage integrity check failed")},100)}_secureLog(e,t,r={}){try{let i=typeof window<"u"&&window.EnhancedSecureCryptoUtils?.secureLog||null;if(i&&typeof i.log=="function"){i.log(e,`[KeyStorage] ${t}`,r);return}}catch{}e==="error"?console.error(`[KeyStorage] ${t}`):e==="warn"&&console.warn(`[KeyStorage] ${t}`)}_setupMasterKeyCallbacks(){this._masterKeyManager.setPasswordRequiredCallback((e,t)=>{this._secureLog("error","Master key password requested but no password UI is installed",{isRetry:!!e}),t(null)}),this._masterKeyManager.setSessionExpiredCallback(e=>{console.warn(`Master key session expired: ${e}`)}),this._masterKeyManager.setUnlockedCallback(()=>{console.log("Master key unlocked successfully")})}setPasswordCallback(e){this._masterKeyManager.setPasswordRequiredCallback(e)}setSessionExpiredCallback(e){this._masterKeyManager.setSessionExpiredCallback(e)}async _ensureMasterKeyUnlocked(){this._masterKeyManager.isUnlocked()||await this._masterKeyManager.unlock()}async storeKey(e,t,r={}){if(!(t instanceof CryptoKey))throw new Error("Only CryptoKey objects can be stored");try{return t.extractable?(await this._persistentStorage.storeExtractableKey(e,t,r),this._keyReferences.set(e,t),this._keyMetadata.set(e,{...r,created:Date.now(),lastAccessed:Date.now(),extractable:!0,persistent:!0,encrypted:!0}),!0):(this._keyReferences.set(e,t),this._keyMetadata.set(e,{...r,created:Date.now(),lastAccessed:Date.now(),extractable:!1,persistent:!1,encrypted:!1}),!0)}catch(i){return this._secureLog("error","Failed to store key securely",{errorType:i?.constructor?.name||"Unknown"}),!1}}async retrieveKey(e){try{if(this._keyReferences.has(e)){let r=this._keyMetadata.get(e);return r&&(r.lastAccessed=Date.now()),this._keyReferences.get(e)}let t=await this._persistentStorage.retrieveKey(e);if(t){this._keyReferences.set(e,t);let r=this._keyMetadata.get(e);return this._keyMetadata.set(e,{...r,lastAccessed:Date.now(),restoredFromPersistent:!0}),t}return null}catch(t){return this._secureLog("error","Failed to retrieve key",{errorType:t?.constructor?.name||"Unknown"}),null}}async _encryptKeyData(e){let t=typeof e=="object"?JSON.stringify(e):e,i=new TextEncoder().encode(t);await this._ensureMasterKeyUnlocked();let{encryptedData:n,iv:a}=await this._masterKeyManager.encryptBytes(i),o=new Uint8Array(a.length+n.byteLength);return o.set(a,0),o.set(n,a.length),o}async _decryptKeyData(e){let t=e.slice(0,12),r=e.slice(12);await this._ensureMasterKeyUnlocked();let i=await this._masterKeyManager.decryptBytes(r,t),a=new TextDecoder().decode(i);try{return JSON.parse(a)}catch{return i}}async secureWipe(e){let t=this._keyReferences.get(e);t&&(this._keyStore.delete(t),this._keyReferences.delete(e),this._keyMetadata.delete(e)),await this._performNaturalCleanup()}async secureWipeAll(){try{await this._persistentStorage.clearAll()}catch(e){this._secureLog("error","Failed to clear persistent storage",{errorType:e?.constructor?.name||"Unknown"})}this._keyReferences.clear(),this._keyMetadata.clear(),this._keyStore=new WeakMap,await this._performNaturalCleanup()}validateStorageIntegrity(){let e=[];for(let[t,r]of this._keyMetadata.entries())r.extractable===!0&&r.encrypted!==!0&&e.push({keyId:t,type:"EXTRACTABLE_KEY_NOT_ENCRYPTED",metadata:r}),r.extractable===!1&&r.encrypted===!0&&e.push({keyId:t,type:"NON_EXTRACTABLE_KEY_ENCRYPTED",metadata:r});return e.length>0?(this._secureLog("error","Storage integrity violations detected",{violationCount:e.length}),!1):!0}async getStorageStats(){let e=await this._persistentStorage.getStorageStats();return{totalKeys:this._keyReferences.size,memoryKeys:this._keyReferences.size,persistentKeys:e.persistentKeys,metadata:Array.from(this._keyMetadata.entries()).map(([t,r])=>({id:t,created:r.created,lastAccessed:r.lastAccessed,age:Date.now()-r.created,persistent:r.persistent||!1})),persistent:e}}async listAllKeys(){try{let e=Array.from(this._keyMetadata.entries()).map(([i,n])=>({keyId:i,...n,location:"memory"})),r=(await this._persistentStorage.listStoredKeys()).map(i=>({...i,location:"persistent"}));return{memoryKeys:e,persistentKeys:r,totalCount:e.length+r.length}}catch(e){return this._secureLog("error","Failed to list keys",{errorType:e?.constructor?.name||"Unknown"}),{memoryKeys:[],persistentKeys:[],totalCount:0,error:e.message}}}async deleteKey(e){try{return this._keyReferences.delete(e),this._keyMetadata.delete(e),await this._persistentStorage.deleteKey(e),!0}catch(t){return this._secureLog("error","Failed to delete key",{errorType:t?.constructor?.name||"Unknown"}),!1}}},qt=class{constructor(e="SecureKeyStorage",t=1){this.dbName=e,this.version=t,this.db=null,this.KEYS_STORE="encrypted_keys",this.METADATA_STORE="key_metadata",this.SALT_STORE="master_salt"}async initialize(){return new Promise((e,t)=>{let r=indexedDB.open(this.dbName,this.version);r.onerror=()=>{t(new Error(`Failed to open IndexedDB: ${r.error}`))},r.onsuccess=()=>{this.db=r.result,e()},r.onupgradeneeded=i=>{let n=i.target.result;if(!n.objectStoreNames.contains(this.KEYS_STORE)){let a=n.createObjectStore(this.KEYS_STORE,{keyPath:"keyId"});a.createIndex("timestamp","timestamp",{unique:!1}),a.createIndex("algorithm","algorithm",{unique:!1})}if(!n.objectStoreNames.contains(this.METADATA_STORE)){let a=n.createObjectStore(this.METADATA_STORE,{keyPath:"keyId"});a.createIndex("created","created",{unique:!1}),a.createIndex("lastAccessed","lastAccessed",{unique:!1})}n.objectStoreNames.contains(this.SALT_STORE)||n.createObjectStore(this.SALT_STORE,{keyPath:"id"})}})}async storeEncryptedKey(e,t,r,i,n,a,o={}){if(!this.db)throw new Error("Database not initialized");let c=this.db.transaction([this.KEYS_STORE,this.METADATA_STORE],"readwrite"),d={keyId:e,encryptedData:Array.from(new Uint8Array(t)),iv:Array.from(new Uint8Array(r)),algorithm:i,usages:n,type:a},u={keyId:e,...o};return new Promise((h,m)=>{let p=c.objectStore(this.KEYS_STORE).put(d),S=c.objectStore(this.METADATA_STORE).put(u);c.oncomplete=()=>h(),c.onerror=()=>m(new Error(`Failed to store key: ${c.error}`))})}async getEncryptedKey(e){if(!this.db)throw new Error("Database not initialized");let r=this.db.transaction([this.KEYS_STORE],"readonly").objectStore(this.KEYS_STORE);return new Promise((i,n)=>{let a=r.get(e);a.onsuccess=()=>{let o=a.result;o&&(o.encryptedData=new Uint8Array(o.encryptedData),o.iv=new Uint8Array(o.iv)),i(o)},a.onerror=()=>n(new Error(`Failed to retrieve key: ${a.error}`))})}async updateKeyMetadata(e,t){if(!this.db)throw new Error("Database not initialized");let i=this.db.transaction([this.METADATA_STORE],"readwrite").objectStore(this.METADATA_STORE);return new Promise((n,a)=>{let o=i.get(e);o.onsuccess=()=>{let c=o.result;if(c){Object.assign(c,t);let d=i.put(c);d.onsuccess=()=>n(),d.onerror=()=>a(new Error(`Failed to update metadata: ${d.error}`))}else a(new Error(`Key metadata not found: ${e}`))},o.onerror=()=>a(new Error(`Failed to get metadata: ${o.error}`))})}async getKeyMetadataRecord(e){if(!this.db)throw new Error("Database not initialized");let r=this.db.transaction([this.METADATA_STORE],"readonly").objectStore(this.METADATA_STORE);return new Promise((i,n)=>{let a=r.get(e);a.onsuccess=()=>i(a.result||null),a.onerror=()=>n(new Error(`Failed to get metadata: ${a.error}`))})}async putKeyMetadataRecord(e){if(!this.db)throw new Error("Database not initialized");let r=this.db.transaction([this.METADATA_STORE],"readwrite").objectStore(this.METADATA_STORE);return new Promise((i,n)=>{let a=r.put(e);a.onsuccess=()=>i(),a.onerror=()=>n(new Error(`Failed to store metadata: ${a.error}`))})}async deleteKey(e){if(!this.db)throw new Error("Database not initialized");let t=this.db.transaction([this.KEYS_STORE,this.METADATA_STORE],"readwrite");return new Promise((r,i)=>{let n=t.objectStore(this.KEYS_STORE).delete(e),a=t.objectStore(this.METADATA_STORE).delete(e);t.oncomplete=()=>r(),t.onerror=()=>i(new Error(`Failed to delete key: ${t.error}`))})}async listKeys(){if(!this.db)throw new Error("Database not initialized");let t=this.db.transaction([this.METADATA_STORE],"readonly").objectStore(this.METADATA_STORE);return new Promise((r,i)=>{let n=t.getAll();n.onsuccess=()=>r(n.result),n.onerror=()=>i(new Error(`Failed to list keys: ${n.error}`))})}async storeMasterSalt(e){if(!this.db)throw new Error("Database not initialized");let r=this.db.transaction([this.SALT_STORE],"readwrite").objectStore(this.SALT_STORE),i={id:"master_salt",salt:Array.from(new Uint8Array(e))};return new Promise((n,a)=>{let o=r.put(i);o.onsuccess=()=>n(),o.onerror=()=>a(new Error(`Failed to store salt: ${o.error}`))})}async getMasterSalt(){if(!this.db)throw new Error("Database not initialized");let t=this.db.transaction([this.SALT_STORE],"readonly").objectStore(this.SALT_STORE);return new Promise((r,i)=>{let n=t.get("master_salt");n.onsuccess=()=>{let a=n.result;r(a?new Uint8Array(a.salt):null)},n.onerror=()=>i(new Error(`Failed to retrieve salt: ${n.error}`))})}async clearAll(){if(!this.db)throw new Error("Database not initialized");let e=this.db.transaction([this.KEYS_STORE,this.METADATA_STORE,this.SALT_STORE],"readwrite");return new Promise((t,r)=>{let i=e.objectStore(this.KEYS_STORE).clear(),n=e.objectStore(this.METADATA_STORE).clear(),a=e.objectStore(this.SALT_STORE).clear();e.oncomplete=()=>t(),e.onerror=()=>r(new Error(`Failed to clear database: ${e.error}`))})}close(){this.db&&(this.db.close(),this.db=null)}},Br=class{constructor(e,t=null){this._masterKeyManager=e,this._indexedDB=t||new qt,this._dbInitialized=!1,this._keyCache=new WeakMap,this._keyReferences=new Map}async _ensureDBInitialized(){this._dbInitialized||(await this._indexedDB.initialize(),this._dbInitialized=!0)}async _ensureMasterKeyUnlocked(){typeof this._masterKeyManager.isUnlocked=="function"&&!this._masterKeyManager.isUnlocked()&&await this._masterKeyManager.unlock()}async storeExtractableKey(e,t,r={}){if(!(t instanceof CryptoKey))throw new Error("Only CryptoKey objects can be stored");if(!t.extractable)throw new Error("Key must be extractable for persistent storage");try{await this._ensureDBInitialized();let i=await crypto.subtle.exportKey("jwk",t),{encryptedData:n,iv:a}=await this._encryptKeyData(i),o=await this._encryptMetadata({...r,created:Date.now(),lastAccessed:Date.now(),extractable:!0,persistent:!0});await this._indexedDB.storeEncryptedKey(e,n,a,t.algorithm,t.usages,t.type,o);let c=await this._importAsNonExtractable(i,t.algorithm,t.usages);return this._keyReferences.set(e,c),!0}catch(i){throw new Error(`Failed to store extractable key: ${i.message}`)}}async retrieveKey(e){try{if(this._keyReferences.has(e))return this._keyReferences.get(e);await this._ensureDBInitialized();let t=await this._indexedDB.getEncryptedKey(e);if(!t)return null;let r=await this._decryptKeyData(t.encryptedData,t.iv),i=await this._importAsNonExtractable(r,t.algorithm,t.usages);return this._keyReferences.set(e,i),await this._updateEncryptedMetadata(e,{lastAccessed:Date.now()}),i}catch(t){throw new Error(`Failed to retrieve key: ${t.message}`)}}async deleteKey(e){try{return await this._ensureDBInitialized(),await this._indexedDB.deleteKey(e),this._keyReferences.delete(e),!0}catch(t){throw new Error(`Failed to delete key: ${t.message}`)}}async listStoredKeys(){try{await this._ensureDBInitialized();let e=await this._indexedDB.listKeys(),t=[];for(let r of e){let i=await this._readMetadataWithMigration(r);i&&t.push({keyId:r.keyId,...i})}return t}catch(e){throw new Error(`Failed to list keys: ${e.message}`)}}async clearAll(){try{return await this._ensureDBInitialized(),await this._indexedDB.clearAll(),this._keyReferences.clear(),!0}catch(e){throw new Error(`Failed to clear storage: ${e.message}`)}}async _encryptKeyData(e){let t=JSON.stringify(e),r=new TextEncoder().encode(t);return await this._ensureMasterKeyUnlocked(),await this._masterKeyManager.encryptBytes(r)}async _decryptKeyData(e,t){await this._ensureMasterKeyUnlocked();let r=await this._masterKeyManager.decryptBytes(e,t),i=new TextDecoder().decode(r);return JSON.parse(i)}async _encryptMetadata(e){let t=new TextEncoder().encode(JSON.stringify(e));await this._ensureMasterKeyUnlocked();let{encryptedData:r,iv:i}=await this._masterKeyManager.encryptBytes(t);return{metadataVersion:1,encryptedMetadata:Array.from(r),metadataIv:Array.from(i)}}async _decryptMetadataRecord(e){if(!e?.encryptedMetadata||!e?.metadataIv)throw new Error("Encrypted metadata missing");await this._ensureMasterKeyUnlocked();let t=await this._masterKeyManager.decryptBytes(new Uint8Array(e.encryptedMetadata),new Uint8Array(e.metadataIv));return JSON.parse(new TextDecoder().decode(t))}async _readMetadataWithMigration(e){if(!e)return null;if(e.encryptedMetadata)try{return await this._decryptMetadataRecord(e)}catch{return null}let{keyId:t,...r}=e,i={keyId:t,...await this._encryptMetadata(r)};return await this._indexedDB.putKeyMetadataRecord(i),r}async _updateEncryptedMetadata(e,t){let r=await this._indexedDB.getKeyMetadataRecord(e);if(!r)throw new Error(`Key metadata not found: ${e}`);let i=await this._readMetadataWithMigration(r);if(!i)throw new Error(`Key metadata corrupted: ${e}`);await this._indexedDB.putKeyMetadataRecord({keyId:e,...await this._encryptMetadata({...i,...t})})}async _importAsNonExtractable(e,t,r){return await crypto.subtle.importKey("jwk",e,t,!1,r)}async getStorageStats(){try{await this._ensureDBInitialized();let e=await this._indexedDB.listKeys();return{totalKeys:e.length,memoryKeys:this._keyReferences.size,persistentKeys:e.length,lastAccessed:e.reduce((t,r)=>Math.max(t,r.lastAccessed||0),0)}}catch(e){return{totalKeys:0,memoryKeys:this._keyReferences.size,persistentKeys:0,lastAccessed:0,error:e.message}}}},jt=class{constructor(e=null){this._keyHandle=null,this._isUnlocked=!1,this._sessionTimeout=null,this._lastActivity=null,this._sessionTimeoutMs=3600*1e3,this._inactivityTimeoutMs=1800*1e3,this._pbkdf2Iterations=31e4,this._saltSize=32,this._indexedDB=e||new qt,this._dbInitialized=!1,this._onPasswordRequired=null,this._onSessionExpired=null,this._onUnlocked=null}setPasswordRequiredCallback(e){this._onPasswordRequired=e}setSessionExpiredCallback(e){this._onSessionExpired=e}setUnlockedCallback(e){this._onUnlocked=e}_setupEventListeners(){typeof document<"u"&&(document.addEventListener("visibilitychange",()=>{document.hidden?this._handleFocusOut():this._handleFocusIn()}),window.addEventListener("blur",()=>this._handleFocusOut()),window.addEventListener("focus",()=>this._handleFocusIn()),["mousedown","mousemove","keypress","scroll","touchstart"].forEach(e=>{document.addEventListener(e,()=>this._updateActivity(),{passive:!0})}))}_handleFocusOut(){this._isUnlocked&&this._startInactivityTimer(this._inactivityTimeoutMs)}_handleFocusIn(){this._isUnlocked&&this._resetSessionTimer()}_updateActivity(){this._lastActivity=Date.now(),this._isUnlocked&&this._resetSessionTimer()}_startSessionTimer(){this._clearTimers(),this._sessionTimeout=setTimeout(()=>{this._expireSession("timeout")},this._sessionTimeoutMs)}_startInactivityTimer(e){this._clearTimers(),this._sessionTimeout=setTimeout(()=>{this._expireSession("inactivity")},e)}_resetSessionTimer(){this._isUnlocked&&this._startSessionTimer()}_clearTimers(){this._sessionTimeout&&(clearTimeout(this._sessionTimeout),this._sessionTimeout=null)}_expireSession(e="unknown"){this._isUnlocked&&(this._secureWipeMasterKey(),this._isUnlocked=!1,this._onSessionExpired&&this._onSessionExpired(e))}async _ensureDBInitialized(){this._dbInitialized||(await this._indexedDB.initialize(),this._dbInitialized=!0)}_generateSalt(){return crypto.getRandomValues(new Uint8Array(this._saltSize))}async _getOrCreateSalt(){await this._ensureDBInitialized();let e=await this._indexedDB.getMasterSalt();return e||(e=this._generateSalt(),await this._indexedDB.storeMasterSalt(e)),e}async _deriveKeyFromPassword(e,t){try{let r=await crypto.subtle.importKey("raw",new TextEncoder().encode(e),"PBKDF2",!1,["deriveKey"]);return await crypto.subtle.deriveKey({name:"PBKDF2",salt:t,iterations:this._pbkdf2Iterations,hash:"SHA-256"},r,{name:"AES-GCM",length:256},!1,["encrypt","decrypt","wrapKey","unwrapKey"])}catch(r){throw new Error(`Key derivation failed: ${r.message}`)}}async _requestPassword(e=!1){if(!this._onPasswordRequired)throw new Error("Password callback not set");return new Promise((t,r)=>{this._onPasswordRequired(e,i=>{i?t(i):r(new Error("Password not provided"))})})}async unlock(e=null){try{e||(e=await this._requestPassword(!1));let t=await this._getOrCreateSalt();return this._keyHandle=await this._deriveKeyFromPassword(e,t),this._isUnlocked=!0,this._lastActivity=Date.now(),this._startSessionTimer(),e=null,this._onUnlocked&&this._onUnlocked(),{success:!0}}catch(t){throw e=null,t}}lock(){this._expireSession("manual")}async encryptBytes(e){if(!this._isUnlocked||!this._keyHandle)throw new Error("Master key is locked");this._updateActivity();let t=crypto.getRandomValues(new Uint8Array(12)),r=await crypto.subtle.encrypt({name:"AES-GCM",iv:t},this._keyHandle,e);return{encryptedData:new Uint8Array(r),iv:t}}async decryptBytes(e,t){if(!this._isUnlocked||!this._keyHandle)throw new Error("Master key is locked");this._updateActivity();let r=await crypto.subtle.decrypt({name:"AES-GCM",iv:t},this._keyHandle,e);return new Uint8Array(r)}isUnlocked(){return this._isUnlocked&&this._keyHandle!==null}getSessionStatus(){return{isUnlocked:this._isUnlocked,lastActivity:this._lastActivity,sessionTimeoutMs:this._sessionTimeoutMs,inactivityTimeoutMs:this._inactivityTimeoutMs}}_secureWipeMasterKey(){this._keyHandle&&(this._keyHandle=null),this._clearTimers()}destroy(){this._secureWipeMasterKey(),this._isUnlocked=!1,typeof document<"u"&&(document.removeEventListener("visibilitychange",this._handleFocusOut),window.removeEventListener("blur",this._handleFocusOut),window.removeEventListener("focus",this._handleFocusIn))}};var $n=wi(Pn());var Fn="6.8.12";var Hr=()=>{if(Ke.length<2)return null;let[s,e]=React.useState(!1),t=React.useRef(null),r=typeof window<"u"?window.location.pathname:"/",i=Gi({pathname:r,active:Ge()}),n=i.find(c=>c.isCurrent)||i[0];React.useEffect(()=>{if(!s)return;let c=u=>{t.current&&!t.current.contains(u.target)&&e(!1)},d=u=>{u.key==="Escape"&&e(!1)};return document.addEventListener("pointerdown",c),document.addEventListener("keydown",d),()=>{document.removeEventListener("pointerdown",c),document.removeEventListener("keydown",d)}},[s]);let a=React.createElement("button",{key:"trigger",type:"button",onClick:()=>e(c=>!c),"aria-haspopup":"menu","aria-expanded":s?"true":"false","aria-label":f("language.label"),style:{display:"flex",alignItems:"center",gap:"6px",padding:"7px 10px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:s?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.02)",color:"var(--sb-text-4)",font:"inherit",fontSize:"12.5px",fontWeight:600,cursor:"pointer",transition:"background .15s, color .15s"}},[React.createElement("span",{key:"c"},n?n.abbr:""),React.createElement("svg",{key:"v",width:11,height:11,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2.4,strokeLinecap:"round",strokeLinejoin:"round",style:{transform:s?"rotate(180deg)":"none",transition:"transform .18s"},dangerouslySetInnerHTML:{__html:'<path d="M6 9l6 6 6-6"/>'}})]),o=React.createElement("div",{key:"menu",role:"menu",className:"sb-scroll",style:{position:"absolute",top:"calc(100% + 6px)",insetInlineEnd:0,zIndex:60,display:s?"block":"none",minWidth:"170px",padding:"5px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",boxShadow:"0 14px 34px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))",maxHeight:"min(62vh, 420px)",overflowY:"auto",overscrollBehavior:"contain"}},i.map(c=>React.createElement("a",{key:c.code,href:c.href,hrefLang:c.hrefLang,lang:c.hrefLang,dir:c.dir,role:"menuitem","aria-current":c.isCurrent?"page":void 0,onClick:()=>Hi(c.code),style:{display:"flex",alignItems:"center",gap:"10px",padding:"8px 10px",borderRadius:"8px",fontSize:"13px",fontWeight:c.isCurrent?600:500,color:c.isCurrent?"var(--sb-text-2)":"var(--sb-text-6)",background:c.isCurrent?"rgba(var(--sb-ink), 0.06)":"transparent",textDecoration:"none",whiteSpace:"nowrap"}},[React.createElement("span",{key:"a",style:{fontSize:"11px",fontWeight:700,letterSpacing:"0.4px",color:"var(--sb-text-9)",width:"22px",flex:"none",textAlign:"start"}},c.abbr),React.createElement("span",{key:"n"},c.label)])));return React.createElement("nav",{ref:t,"aria-label":f("language.label"),style:{position:"relative",display:"inline-flex"}},[a,o])};window.LanguageSwitcher=Hr;var ot={system:'<rect x="2.5" y="4" width="19" height="13" rx="2"/><path d="M8 20.5h8M12 17.5v3"/>',light:'<circle cx="12" cy="12" r="4.2"/><path d="M12 2.6v2.4M12 19v2.4M2.6 12h2.4M19 12h2.4M5.3 5.3l1.7 1.7M17 17l1.7 1.7M18.7 5.3L17 7M7 17l-1.7 1.7"/>',dark:'<path d="M20.5 14.3A8.6 8.6 0 0 1 9.7 3.5a8.6 8.6 0 1 0 10.8 10.8z"/>'},$r=(s,e,t)=>React.createElement("svg",{width:e,height:e,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:t,strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":"true",dangerouslySetInnerHTML:{__html:s}}),Gr=()=>{let s=typeof window<"u"?window.SecureBitTheme:null;if(!s)return null;let[e,t]=React.useState(!1),[r,i]=React.useState(()=>s.get()),[n,a]=React.useState(()=>s.resolved()),o=React.useRef(null);React.useEffect(()=>s.subscribe((p,S)=>{i(p),a(S)}),[]),React.useEffect(()=>{if(!e)return;let p=g=>{o.current&&!o.current.contains(g.target)&&t(!1)},S=g=>{g.key==="Escape"&&t(!1)};return document.addEventListener("pointerdown",p),document.addEventListener("keydown",S),()=>{document.removeEventListener("pointerdown",p),document.removeEventListener("keydown",S)}},[e]);let c=[{mode:"system",icon:ot.system,label:f("theme.system")},{mode:"light",icon:ot.light,label:f("theme.light")},{mode:"dark",icon:ot.dark,label:f("theme.dark")}],d=r==="system"?ot.system:n==="light"?ot.light:ot.dark,u=c.find(p=>p.mode===r)||c[0],h=React.createElement("button",{key:"trigger",type:"button",onClick:()=>t(p=>!p),"aria-haspopup":"menu","aria-expanded":e?"true":"false","aria-label":f("theme.label")+": "+u.label,title:f("theme.label"),style:{display:"flex",alignItems:"center",gap:"6px",padding:"8px 9px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:e?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.02)",color:"var(--sb-text-4)",font:"inherit",cursor:"pointer",transition:"background .15s, color .15s"}},[React.createElement("span",{key:"i",style:{display:"grid",placeItems:"center"}},$r(d,15,1.9)),React.createElement("svg",{key:"v",width:11,height:11,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2.4,strokeLinecap:"round",strokeLinejoin:"round",style:{transform:e?"rotate(180deg)":"none",transition:"transform .18s"},dangerouslySetInnerHTML:{__html:'<path d="M6 9l6 6 6-6"/>'}})]),m=React.createElement("div",{key:"menu",role:"menu",style:{position:"absolute",top:"calc(100% + 6px)",insetInlineEnd:0,zIndex:60,display:e?"block":"none",minWidth:"158px",padding:"5px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",boxShadow:"0 14px 34px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))"}},c.map(p=>{let S=p.mode===r;return React.createElement("button",{key:p.mode,type:"button",role:"menuitemradio","aria-checked":S?"true":"false",onClick:()=>{s.set(p.mode),t(!1)},style:{width:"100%",display:"flex",alignItems:"center",gap:"10px",padding:"8px 10px",borderRadius:"8px",border:"none",fontSize:"13px",fontFamily:"inherit",fontWeight:S?600:500,color:S?"var(--sb-text-2)":"var(--sb-text-6)",background:S?"rgba(var(--sb-ink), 0.06)":"transparent",cursor:"pointer",textAlign:"start",whiteSpace:"nowrap"}},[React.createElement("span",{key:"i",style:{flex:"none",display:"grid",placeItems:"center",width:"16px",color:S?"var(--sb-orange)":"var(--sb-text-9)"}},$r(p.icon,14,1.9)),React.createElement("span",{key:"l",style:{flex:1}},p.label),S&&React.createElement("span",{key:"c",style:{flex:"none",display:"grid",placeItems:"center",color:"var(--sb-orange)"}},$r('<path d="M4.5 12.5l5 5 10-11"/>',12,2.6))])}));return React.createElement("div",{ref:o,style:{position:"relative",display:"inline-flex"}},[h,m])};window.ThemeSwitcher=Gr;var Ma=`v${Fn}`,La=({status:s,fingerprint:e,verificationCode:t,onDisconnect:r,isConnected:i,securityLevel:n,webrtcManager:a})=>{let[o,c]=React.useState(null),[d,u]=React.useState(0),[h,m]=React.useState(!1),[p,S]=React.useState(0),[g,b]=React.useState("unknown");React.useEffect(()=>{let G=!1,U=0,I=async()=>{let N=Date.now();if(!(N-U<1e4)&&!G){G=!0,U=N;try{if(!a||!i)return;let z=a,W=null;if(typeof z.getRealSecurityLevel=="function"?W=await z.getRealSecurityLevel():typeof z.calculateAndReportSecurityLevel=="function"?W=await z.calculateAndReportSecurityLevel():W=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(z),W&&W.isRealData!==!1){let Z=o?.score||0,be=W.score||0;Z!==be||!o?(c(W),u(N)):window.DEBUG_MODE}}catch{}finally{G=!1}}};if(i&&(I(),!o||o.score<50)){let N=setInterval(()=>{!o||o.score<50?I():clearInterval(N)},5e3);setTimeout(()=>clearInterval(N),3e4)}let D=setInterval(I,3e4);return()=>clearInterval(D)},[a,i]),React.useEffect(()=>{let G=I=>{setTimeout(()=>{u(0)},100)},U=I=>{I.detail&&I.detail.securityData&&(c(I.detail.securityData),u(Date.now()))};return document.addEventListener("security-level-updated",G),document.addEventListener("real-security-calculated",U),window.forceHeaderSecurityUpdate=I=>{I&&window.EnhancedSecureCryptoUtils?window.EnhancedSecureCryptoUtils.calculateSecurityLevel(I).then(D=>{D&&D.isRealData!==!1&&(c(D),u(Date.now()))}).catch(D=>{}):u(0)},()=>{document.removeEventListener("security-level-updated",G),document.removeEventListener("real-security-calculated",U)}},[]),React.useEffect(()=>{m(!0),S(0),b("premium")},[]),React.useEffect(()=>{m(!0),S(0),b("premium")},[]),React.useEffect(()=>{let G=N=>{m(!0),S(0),b("premium")},U=()=>{c(null),u(0),m(!1),S(0),b("unknown")},I=()=>{c(null),u(0)},D=()=>{c(null),u(0),m(!1),S(0),b("unknown")};return document.addEventListener("force-header-update",G),document.addEventListener("peer-disconnect",I),document.addEventListener("connection-cleaned",U),document.addEventListener("disconnected",D),()=>{document.removeEventListener("force-header-update",G),document.removeEventListener("peer-disconnect",I),document.removeEventListener("connection-cleaned",U),document.removeEventListener("disconnected",D)}},[]);let w=async G=>{if(G&&(G.button===2||G.ctrlKey||G.metaKey)&&r&&typeof r=="function"){r();return}G.preventDefault(),G.stopPropagation();let U=null;if(a&&window.EnhancedSecureCryptoUtils)try{U=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(a)}catch{}if(!U&&!o){alert(f("sec.verificationWait"));return}let I=U||o;I||(I={level:"UNKNOWN",score:0,color:"gray",verificationResults:{},timestamp:Date.now(),details:f("sec.verificationUnavailable"),isRealData:!1,passedChecks:0,totalChecks:0});let D=`REAL-TIME SECURITY VERIFICATION
 
 `;if(D+=`Security Level: ${I.level} (${I.score}%)
 `,D+=`Verification Time: ${new Date(I.timestamp).toLocaleTimeString()}
@@ -102,7 +102,7 @@ ${I.details||f("sec.verificationDone")}`,I.isRealData?D+=`
             border: 1px solid var(--sb-surface-5);
         `,z.textContent=D,N.appendChild(z),N.addEventListener("click",Z=>{Z.target===N&&document.body.removeChild(N)});let W=Z=>{Z.key==="Escape"&&(document.body.removeChild(N),document.removeEventListener("keydown",W))};document.addEventListener("keydown",W),document.body.appendChild(N)},F=(()=>{switch(s){case"connected":return{text:f("status.connected"),className:"status-connected",badgeClass:"bg-green-500/10 text-green-400 border-green-500/20"};case"verifying":return{text:f("status.verifying"),className:"status-verifying",badgeClass:"bg-purple-500/10 text-purple-400 border-purple-500/20"};case"connecting":return{text:f("status.connecting"),className:"status-connecting",badgeClass:"bg-blue-500/10 text-blue-400 border-blue-500/20"};case"retrying":return{text:f("status.retrying"),className:"status-connecting",badgeClass:"bg-yellow-500/10 text-yellow-400 border-yellow-500/20"};case"failed":return{text:f("status.error"),className:"status-failed",badgeClass:"bg-red-500/10 text-red-400 border-red-500/20"};case"reconnecting":return{text:f("status.reconnecting"),className:"status-connecting",badgeClass:"bg-yellow-500/10 text-yellow-400 border-yellow-500/20"};case"peer_disconnected":return{text:f("status.peerDisconnected"),className:"status-failed",badgeClass:"bg-orange-500/10 text-orange-400 border-orange-500/20"};default:return{text:f("status.notConnected"),className:"status-disconnected",badgeClass:"bg-gray-500/10 text-gray-400 border-gray-500/20"}}})(),k=i?o||n:null,_=(()=>{if(!k)return{tooltip:f("sec.verificationInProgress"),isVerified:!1,dataSource:"loading"};let G=k.isRealData!==!1,U=`${k.level} (${k.score}%)`;return G?{tooltip:`${U} - Real-time verification \u2705
 Right-click or Ctrl+click to disconnect`,isVerified:!0,dataSource:"real"}:{tooltip:`${U} - Estimated (connection establishing...)
-Right-click or Ctrl+click to disconnect`,isVerified:!1,dataSource:"estimated"}})();React.useEffect(()=>(window.debugHeaderSecurity=void 0,()=>{delete window.debugHeaderSecurity}),[o,d,i,a,k,_]);let A=k?k.color==="green"?"var(--sb-green)":k.color==="orange"?"var(--sb-orange)":k.color==="yellow"?"var(--sb-yellow)":"var(--sb-red)":"var(--sb-green)",x=i?"var(--sb-green-solid)":["connecting","verifying","retrying","reconnecting"].includes(s)?"var(--sb-yellow-solid)":s==="failed"?"var(--sb-red-solid)":"var(--sb-text-9)",T=x==="var(--sb-green-solid)"?"rgba(var(--sb-green-rgb), 0.16)":x==="var(--sb-yellow-solid)"?"rgba(var(--sb-yellow-rgb), 0.16)":x==="var(--sb-red-solid)"?"rgba(var(--sb-red-rgb), 0.16)":"rgba(var(--sb-text-9-rgb), 0.16)",Y="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",B=!i,[R,ue]=React.useState(!1);React.useEffect(()=>{let G=()=>ue((window.scrollY||window.pageYOffset||0)>8);return G(),window.addEventListener("scroll",G,{passive:!0}),()=>window.removeEventListener("scroll",G)},[]);let K="blur(20px) saturate(180%)",O="background .25s ease, backdrop-filter .25s ease, -webkit-backdrop-filter .25s ease, border-color .25s ease",Q={paddingTop:"var(--sb-safe-top, 0px)",paddingBottom:"var(--sb-bar-extra, 0px)"},J={position:"fixed",top:0,left:0,right:0,...Q},ge=B?R?{...J,background:"rgba(var(--sb-bg-rgb), 0.72)",backdropFilter:K,WebkitBackdropFilter:K,borderBottom:"1px solid rgba(var(--sb-ink), 0.06)",transition:O}:{...J,background:"transparent",backdropFilter:"blur(0px) saturate(100%)",WebkitBackdropFilter:"blur(0px) saturate(100%)",borderBottom:"1px solid transparent",transition:O}:{...Q,background:"rgba(var(--sb-bg-rgb), 0.72)",backdropFilter:K,WebkitBackdropFilter:K,borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"};return React.createElement("header",{className:B?"header-minimal z-50":"header-minimal sticky top-0 z-50",style:ge},[React.createElement("div",{key:"container",className:"max-w-7xl mx-auto",style:{padding:"0 20px"}},[React.createElement("div",{key:"content",className:"flex items-center justify-between",style:{height:"var(--sb-bar-h, 64px)",gap:"16px"}},[React.createElement("div",{key:"left",style:{display:"flex",alignItems:"center",gap:"12px",minWidth:0}},[React.createElement("div",{key:"logo",style:{width:"36px",height:"36px",flex:"none",display:"grid",placeItems:"center"}},React.createElement("img",{src:"/logo/securebit-mark.svg",alt:"SecureBit",style:{width:"100%",height:"100%",objectFit:"contain",display:"block"}})),React.createElement("div",{key:"txt",style:{lineHeight:1.2,minWidth:0}},[React.createElement("div",{key:"r1",style:{display:"flex",alignItems:"baseline",gap:"7px"}},[React.createElement("span",{key:"n",style:{fontSize:"16px",fontWeight:800,letterSpacing:"-0.3px",color:"var(--sb-text-2)"}},"SecureBit"),React.createElement("span",{key:"v",style:{fontFamily:Y,fontSize:"10px",fontWeight:500,color:"var(--sb-text-faint)"}},Ma)]),React.createElement("div",{key:"r2",className:"hidden sm:block",style:{fontSize:"11px",color:"var(--sb-text-9)",fontWeight:500}},f("hdr.tagline"))])]),React.createElement("div",{key:"right",style:{display:"flex",alignItems:"center",gap:"9px"}},[B&&React.createElement(Hr,{key:"lang"}),B&&React.createElement(Gr,{key:"theme"}),!B&&React.createElement("button",{key:"net",type:"button",onClick:()=>window.dispatchEvent(new CustomEvent("securebit:open-network-settings")),title:f("hdr.netSettingsTitle"),"aria-label":f("hdr.netSettings"),className:"sb-disconnect",style:{display:"grid",placeItems:"center",width:"38px",height:"38px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)",color:"var(--sb-text-6)",cursor:"pointer",transition:"all .15s"}},React.createElement("i",{className:"fas fa-network-wired",style:{fontSize:"13px"}})),!B&&k&&React.createElement("div",{key:"sec",onClick:w,onContextMenu:G=>{G.preventDefault(),typeof r=="function"&&r()},title:_.tooltip,className:"sb-secpill",style:{display:"flex",alignItems:"center",gap:"8px",padding:"7px 12px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)",cursor:"pointer"}},[React.createElement("i",{key:"i",className:"fas fa-shield-halved",style:{fontSize:"13px",color:A}}),React.createElement("span",{key:"l",className:"hidden sm:inline",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-2)"}},f(`secLevel.${k.level}`)===`secLevel.${k.level}`?String(k.level):f(`secLevel.${k.level}`)),React.createElement("span",{key:"s",style:{fontFamily:Y,fontSize:"11.5px",color:"var(--sb-text-7)"}},k.score+"%")]),!B&&React.createElement("div",{key:"status",style:{display:"flex",alignItems:"center",gap:"8px",padding:"8px 13px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)"}},[React.createElement("span",{key:"dot",style:{width:"7px",height:"7px",borderRadius:"50%",background:x,boxShadow:"0 0 0 3px "+T}}),React.createElement("span",{key:"t",className:"hidden sm:inline",style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-4)"}},F.text)]),i&&React.createElement("button",{key:"dc",onClick:r,className:"sb-disconnect",style:{display:"flex",alignItems:"center",gap:"7px",padding:"8px 14px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"transparent",color:"var(--sb-text-6)",fontFamily:"inherit",fontSize:"13px",fontWeight:600,cursor:"pointer",transition:"all .15s"}},[React.createElement("i",{key:"i",className:"fas fa-power-off",style:{fontSize:"12px"}}),React.createElement("span",{key:"t",className:"sb-hide-sm"},f("hdr.disconnect"))])])])])])};window.EnhancedMinimalHeader=La;var Jt="1.0.4",qr=`https://github.com/SecureBitChat/securebit-desktop/releases/download/v${Jt}`,Da=()=>{let s=[{id:"web",name:"Web App",subtitle:"Browser Version",icon:"fas fa-globe",platform:"Web",isActive:!0,url:"https://securebit.chat/",color:"green"},{id:"windows",name:"Windows",subtitle:"Desktop App",icon:"fab fa-windows",platform:"Desktop",isActive:!0,url:`${qr}/SecureBit.Chat_${Jt}_x64-setup.exe`,color:"blue"},{id:"macos",name:"macOS",subtitle:"Desktop App",icon:"fab fa-safari",platform:"Desktop",isActive:!0,url:`${qr}/SecureBit.Chat_${Jt}_x64.dmg`,color:"gray"},{id:"linux",name:"Linux",subtitle:"Desktop App",icon:"fab fa-linux",platform:"Desktop",isActive:!0,url:`${qr}/SecureBit.Chat_${Jt}_amd64.AppImage`,color:"orange"},{id:"ios",name:"iOS",subtitle:"iPhone & iPad",icon:"fab fa-apple",platform:"Mobile",isActive:!1,url:"https://apps.apple.com/app/securebit-chat/",color:"white"},{id:"android",name:"Android",subtitle:"Google Play",icon:"fab fa-android",platform:"Mobile",isActive:!1,url:"https://play.google.com/store/apps/details?id=com.securebit.chat",color:"green"},{id:"chrome",name:"Chrome",subtitle:"Browser Extension",icon:"fab fa-chrome",platform:"Browser",isActive:!1,url:"#",color:"yellow"},{id:"edge",name:"Edge",subtitle:"Browser Extension",icon:"fab fa-edge",platform:"Browser",isActive:!1,url:"#",color:"blue"},{id:"opera",name:"Opera",subtitle:"Browser Extension",icon:"fab fa-opera",platform:"Browser",isActive:!1,url:"#",color:"red"},{id:"firefox",name:"Firefox",subtitle:"Browser Extension",icon:"fab fa-firefox-browser",platform:"Browser",isActive:!1,url:"#",color:"orange"}],e=c=>{c.isActive&&window.open(c.url,"_blank")},t=s.filter(c=>c.platform==="Desktop"||c.platform==="Web"),r=s.filter(c=>c.platform==="Mobile"),i=s.filter(c=>c.platform==="Browser"),n="w-28 h-28",a={green:"text-green-500",blue:"text-blue-500",gray:"text-gray-500",orange:"text-orange-500",red:"text-red-500",white:"text-white",yellow:"text-yellow-400"},o=c=>React.createElement("div",{key:c.id,className:`group relative ${n} rounded-2xl overflow-hidden card-minimal cursor-pointer`},[React.createElement("i",{key:"bg-icon",className:`${c.icon} absolute text-[3rem] ${c.isActive?a[c.color]:"text-white/10"} top-1/2 left-1/2 -translate-x-1/2 -translate-y-1/2 pointer-events-none transition-all duration-500 group-hover:scale-105`}),React.createElement("div",{key:"overlay",className:"absolute inset-0 bg-black/30 backdrop-blur-md flex flex-col items-center justify-center text-center opacity-0 transition-opacity duration-300 group-hover:opacity-100"},[React.createElement("h4",{key:"name",className:"text-sm font-semibold text-primary mb-1"},c.name),React.createElement("p",{key:"subtitle",className:"text-xs text-secondary mb-2"},c.subtitle),c.isActive?React.createElement("button",{key:"btn",onClick:()=>e(c),className:"px-2 py-1 rounded-xl bg-emerald-500 text-black font-medium hover:bg-emerald-600 transition-colors text-xs"},c.id==="web"?"Launch":"Download"):React.createElement("span",{key:"coming",className:"text-gray-400 font-medium text-xs"},"Coming Soon")])]);return React.createElement("div",{className:"mt-20 px-6"},[React.createElement("div",{key:"header",className:"text-center max-w-3xl mx-auto mb-12"},[React.createElement("h3",{key:"title",className:"text-3xl font-bold text-primary mb-3"},"Download SecureBit.chat"),React.createElement("p",{key:"subtitle",className:"text-secondary text-lg mb-5"},"Stay secure on every device. Choose your platform and start chatting privately.")]),React.createElement("div",{key:"desktop-row",className:"hidden sm:flex justify-center flex-wrap gap-6 mb-6"},t.map(o)),React.createElement("div",{key:"mobile-row",className:"flex justify-center gap-6 mb-6"},r.map(o)),React.createElement("div",{key:"browser-row",className:"flex justify-center gap-6"},i.map(o))])};window.DownloadApps=Da;var Pa=()=>{let[s,e]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches);React.useEffect(()=>{let p=window.matchMedia("(max-width:767px)"),S=()=>e(p.matches);return p.addEventListener?p.addEventListener("change",S):p.addListener(S),()=>{p.removeEventListener?p.removeEventListener("change",S):p.removeListener(S)}},[]);let t="var(--sb-orange)",r="var(--sb-orange-solid)",i="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",n="'Manrope', system-ui, -apple-system, sans-serif",a="https://docs.google.com/forms/d/e/1FAIpQLSc9ijV9PCoyXkus6vEx1OWwvwAsLq8fKS6-H5BmX-c-bvia6w/viewform?usp=dialog",o=[{id:"aegis",name:"Aegis Investment",logo:"/logo/aegis.png",logoHeight:"42px",url:"https://aegis-investment.com/",desc:f("partners.aegis.desc"),role:f("partners.aegis.role"),delay:".5s"},{id:"furi",name:"FuriLabs",logo:"/logo/furi-160.png",logoHeight:"54px",url:"https://furilabs.com/",desc:f("partners.furilabs.desc"),role:f("partners.furilabs.role"),delay:".56s"}],c=(p,S,g,b,w)=>React.createElement("svg",{className:w,width:S,height:S,viewBox:"0 0 24 24",fill:"none",stroke:g,strokeWidth:b,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:p}}),d=p=>React.createElement("span",{key:"role",style:{fontFamily:i,fontSize:"10.5px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.2px",padding:"6px 11px",borderRadius:"8px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.025)",whiteSpace:"nowrap"}},p),u=p=>React.createElement("a",{key:p.id,href:p.url,target:"_blank",rel:"noopener noreferrer",style:{flex:"1 1 320px",minWidth:s?"auto":"300px",borderRadius:"18px",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.06)",padding:"30px 30px 26px",display:"flex",flexDirection:"column",textDecoration:"none",color:"inherit",transition:"transform .28s cubic-bezier(.2,.7,.3,1), border-color .28s cubic-bezier(.2,.7,.3,1)",animation:`ptUp ${p.delay} cubic-bezier(.2,.7,.3,1)`},onMouseEnter:S=>{S.currentTarget.style.transform="translateY(-4px)",S.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.13)"},onMouseLeave:S=>{S.currentTarget.style.transform="none",S.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.06)"}},[React.createElement("div",{key:"logo",style:{display:"flex",alignItems:"center",marginBottom:"30px",height:"54px"}},React.createElement("img",{src:p.logo,alt:p.name,loading:"lazy",decoding:"async",style:{height:p.logoHeight,width:"auto",maxWidth:"190px",objectFit:"contain",display:"block"}})),React.createElement("h3",{key:"name",style:{margin:"0 0 9px",fontSize:"21px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},p.name),React.createElement("p",{key:"desc",style:{margin:"0 0 22px",fontSize:"14.5px",lineHeight:1.6,color:"var(--sb-text-6)"}},p.desc),React.createElement("div",{key:"foot",style:{marginTop:"auto",paddingTop:"6px",display:"flex",alignItems:"center",gap:"12px"}},[d(p.role)])]),h=React.createElement("a",{key:"invite",href:a,target:"_blank",rel:"noopener noreferrer",style:{flex:"1 1 320px",minWidth:s?"auto":"300px",borderRadius:"18px",background:"var(--sb-bg)",border:"1px dashed rgba(var(--sb-ink), 0.12)",padding:"30px",display:"flex",flexDirection:"column",justifyContent:"space-between",textDecoration:"none",color:"inherit",transition:"border-color .28s cubic-bezier(.2,.7,.3,1)",animation:"ptUp .62s cubic-bezier(.2,.7,.3,1)"},onMouseEnter:p=>{p.currentTarget.style.borderColor="rgba(var(--sb-orange-rgb), 0.4)"},onMouseLeave:p=>{p.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.12)"}},[React.createElement("div",{key:"top"},[React.createElement("div",{key:"icon",style:{width:"48px",height:"48px",borderRadius:"13px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.28)",marginBottom:"24px"}},c('<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M19 8v6M22 11h-6"/>',23,r,1.9)),React.createElement("h3",{key:"title",style:{margin:"0 0 8px",fontSize:"21px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},f("partners.inviteTitle")),React.createElement("p",{key:"desc",style:{margin:0,fontSize:"14.5px",lineHeight:1.6,color:"var(--sb-text-7)"}},f("partners.inviteDesc"))]),React.createElement("span",{key:"btn",style:{marginTop:"26px",width:"100%",display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"10px",padding:"15px 20px",borderRadius:"12px",border:"none",background:r,color:"var(--sb-on-accent)",fontFamily:n,fontSize:"15px",fontWeight:700,cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)",boxSizing:"border-box",transition:"background .2s cubic-bezier(.2,.7,.3,1), transform .2s cubic-bezier(.2,.7,.3,1)"}},[f("partners.inviteCta"),c('<path d="M5 12h14M13 6l6 6-6 6"/>',17,"currentColor",2.2,"sb-mirror-rtl")])]),m=React.createElement("div",{key:"inner",style:{maxWidth:"1240px",margin:"0 auto",padding:s?"0 18px":"0 40px"}},[React.createElement("div",{key:"head",style:{marginBottom:"44px"}},[React.createElement("div",{key:"eyebrow",style:{fontFamily:i,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.6px",marginBottom:"14px"}},f("partners.eyebrow")),React.createElement("h2",{key:"h2",style:{margin:0,fontSize:s?"30px":"40px",fontWeight:800,letterSpacing:"-1.1px",lineHeight:1.04,color:"var(--sb-text-1)"}},f("partners.heading"))]),React.createElement("div",{key:"cards",style:{display:"flex",gap:"18px",alignItems:"stretch",flexWrap:"wrap"}},[...o.map(u),h])]);return React.createElement("section",{style:{width:"100%",color:"var(--sb-text-2)",fontFamily:n,padding:s?"48px 0":"72px 0",background:"radial-gradient(1100px 640px at 50% -6%, rgba(var(--sb-orange-rgb), 0.055), transparent 62%), var(--sb-bg)"}},[React.createElement("style",{key:"kf",dangerouslySetInnerHTML:{__html:"@keyframes ptUp{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:translateY(0)}}"}}),m])};window.BecomePartner=Pa;var Fa=()=>{let[s,e]=React.useState(0),[t,r]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches);React.useEffect(()=>{let E=window.matchMedia("(max-width:767px)"),_=()=>r(E.matches);return E.addEventListener?E.addEventListener("change",_):E.addListener(_),()=>{E.removeEventListener?E.removeEventListener("change",_):E.removeListener(_)}},[]);let i="var(--sb-orange)",n="var(--sb-orange-solid)",a="radial-gradient(130% 90% at 28% 0%, rgba(var(--sb-orange-rgb), 0.11), transparent 60%), var(--sb-surface)",o="rgba(var(--sb-orange-rgb), 0.3)",c="var(--sb-bg)",d="rgba(var(--sb-ink), 0.06)",u="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",h="'Manrope', system-ui, -apple-system, sans-serif",m=[{num:"01",title:[f("unique.s1.titleTop"),f("unique.s1.titleBottom")],collapsed:f("unique.s1.collapsed"),desc:f("unique.s1.desc"),tags:Oe("unique.s1.tags"),icon:'<path d="M12 3l8 4v5c0 4.5-3.2 7.8-8 9-4.8-1.2-8-4.5-8-9V7l8-4z"/><path d="M9.2 12.2l2 2 3.6-3.8"/>'},{num:"02",title:[f("unique.s2.titleTop"),f("unique.s2.titleBottom")],collapsed:f("unique.s2.collapsed"),desc:f("unique.s2.desc"),tags:Oe("unique.s2.tags"),icon:'<circle cx="5.5" cy="12" r="2.5"/><circle cx="18.5" cy="6" r="2.5"/><circle cx="18.5" cy="18" r="2.5"/><path d="M7.8 10.8l8.4-3.6M7.8 13.2l8.4 3.6"/>'},{num:"03",title:[f("unique.s3.titleTop"),f("unique.s3.titleBottom")],collapsed:f("unique.s3.collapsed"),desc:f("unique.s3.desc"),tags:Oe("unique.s3.tags"),icon:'<path d="M21 8a8.5 8.5 0 0 0-15.6-2.5M3 4v4h4"/><path d="M3 16a8.5 8.5 0 0 0 15.6 2.5M21 20v-4h-4"/>'},{num:"04",title:[f("unique.s4.titleTop"),f("unique.s4.titleBottom")],collapsed:f("unique.s4.collapsed"),desc:f("unique.s4.desc"),tags:Oe("unique.s4.tags"),icon:'<path d="M3 7h4l3 10h4M14 7h3l3 0"/><path d="M17 4l3 3-3 3"/><path d="M3 17h4l2-6"/>'},{num:"05",title:[f("unique.s5.titleTop"),f("unique.s5.titleBottom")],collapsed:f("unique.s5.collapsed"),desc:f("unique.s5.desc"),tags:Oe("unique.s5.tags"),icon:'<path d="M9.9 5.1A9.6 9.6 0 0 1 12 5c5.5 0 9 5 9 7a11 11 0 0 1-2.2 3M6.3 7.3C3.6 8.9 2 11.2 2 12c0 1.4 3.5 7 10 7 1.6 0 3-.3 4.2-.8"/><path d="M9.9 9.9a3 3 0 0 0 4.2 4.2M3 3l18 18"/>'}],p=(E,_,A,x)=>React.createElement("svg",{width:_,height:_,viewBox:"0 0 24 24",fill:"none",stroke:A,strokeWidth:x,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:E}}),S=E=>e(_=>(_+E+m.length)%m.length),g=(E,_,A)=>React.createElement("button",{key:E,onClick:_,"aria-label":E,className:"sb-mirror-rtl",style:{width:"46px",height:"46px",display:"grid",placeItems:"center",borderRadius:"50%",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.025)",color:"var(--sb-text-4)",cursor:"pointer",transition:"all .2s cubic-bezier(.2,.7,.3,1)"},onMouseEnter:x=>{x.currentTarget.style.borderColor=o,x.currentTarget.style.color=i},onMouseLeave:x=>{x.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.1)",x.currentTarget.style.color="var(--sb-text-4)"}},p(A,18,"currentColor",2.1)),b=E=>React.createElement("span",{key:E,style:{display:"inline-flex",alignItems:"center",gap:"7px",padding:"7px 12px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.025)",fontFamily:u,fontSize:"11.5px",fontWeight:500,color:"var(--sb-text-6)"}},[React.createElement("span",{key:"dot",style:{width:"5px",height:"5px",borderRadius:"50%",background:"var(--sb-green-solid)"}}),E]),w=E=>React.createElement("div",{key:"exp",style:{height:"100%",display:"flex",flexDirection:"column",justifyContent:t?"flex-start":"space-between",gap:t?"18px":0,padding:t?"24px 22px":"32px 34px",minWidth:t?"auto":"320px",animation:"wuUp .42s cubic-bezier(.2,.7,.3,1)"}},[React.createElement("div",{key:"top",style:{display:"flex",alignItems:"center",justifyContent:"space-between"}},[React.createElement("div",{key:"ic",style:{width:"54px",height:"54px",borderRadius:"15px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.13)",border:"1px solid rgba(var(--sb-orange-rgb), 0.3)"}},p(E.icon,26,n,1.9)),React.createElement("span",{key:"n",style:{fontFamily:u,fontSize:"13px",fontWeight:600,color:"var(--sb-text-9)"}},E.num)]),React.createElement("div",{key:"mid"},[React.createElement("h3",{key:"h",style:{margin:"0 0 12px",fontSize:t?"24px":"30px",fontWeight:800,letterSpacing:"-0.7px",lineHeight:1.08,color:"var(--sb-text-1)"}},[E.title[0],React.createElement("br",{key:"br"}),E.title[1]]),React.createElement("p",{key:"p",style:{margin:0,fontSize:"15px",lineHeight:1.6,color:"var(--sb-text-6)",maxWidth:"380px"}},E.desc)]),React.createElement("div",{key:"tags",style:{display:"flex",flexWrap:"wrap",gap:"8px"}},E.tags.map(b))]),M=E=>t?React.createElement("div",{key:"col",style:{display:"flex",alignItems:"center",gap:"16px",padding:"20px 22px"}},[React.createElement("span",{key:"n",style:{fontFamily:u,fontSize:"12px",fontWeight:600,color:"var(--sb-text-faint)"}},E.num),React.createElement("span",{key:"l",style:{fontSize:"16px",fontWeight:800,letterSpacing:"-0.2px",color:"var(--sb-text-4)"}},E.collapsed)]):React.createElement("div",{key:"col",style:{position:"absolute",inset:0,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"space-between",padding:"24px 0"}},[React.createElement("span",{key:"n",style:{fontFamily:u,fontSize:"12px",fontWeight:600,color:"var(--sb-text-faint)"}},E.num),React.createElement("span",{key:"l",style:{writingMode:"vertical-rl",transform:"rotate(180deg)",fontSize:"17px",fontWeight:800,letterSpacing:"-0.2px",color:"var(--sb-text-4)",whiteSpace:"nowrap"}},E.collapsed),p(E.icon,22,"var(--sb-text-faint)",1.8)]),F=m.map((E,_)=>{let A=s===_;return React.createElement("div",{key:_,onClick:()=>e(_),onMouseEnter:x=>{A||(x.currentTarget.style.filter="brightness(1.18)")},onMouseLeave:x=>{x.currentTarget.style.filter="none"},style:{flex:t?"none":A?6.2:1,minWidth:t?"auto":"72px",position:"relative",borderRadius:"18px",overflow:"hidden",cursor:"pointer",background:A?a:c,border:"1px solid "+(A?o:d),color:"var(--sb-text-7)",transition:"flex .46s cubic-bezier(.2,.7,.3,1), background .3s ease, border-color .3s ease, filter .2s ease"}},A?w(E):M(E))}),k=React.createElement("div",{key:"inner",style:{maxWidth:"1180px",margin:"0 auto",padding:t?"0 18px":"0 40px"}},[React.createElement("div",{key:"head",style:{display:"flex",alignItems:"flex-end",justifyContent:"space-between",gap:"24px",marginBottom:"28px"}},[React.createElement("div",{key:"titles"},[React.createElement("div",{key:"eyebrow",style:{fontFamily:u,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.4px",marginBottom:"12px"}},f("unique.eyebrow")),React.createElement("h2",{key:"h2",style:{margin:0,fontSize:t?"28px":"38px",fontWeight:800,letterSpacing:"-1.1px",lineHeight:1.05,color:"var(--sb-text-1)"}},f("unique.heading"))]),React.createElement("div",{key:"nav",style:{display:"flex",alignItems:"center",gap:"10px",flex:"none"}},[g("prev",()=>S(-1),'<path d="M15 6l-6 6 6 6"/>'),g("next",()=>S(1),'<path d="M9 6l6 6-6 6"/>')])]),React.createElement("div",{key:"accordion",style:{display:"flex",flexDirection:t?"column":"row",gap:t?"12px":"14px",height:t?"auto":"440px"}},F)]);return React.createElement("section",{style:{width:"100%",color:"var(--sb-text-2)",fontFamily:h,padding:t?"44px 0":"64px 0",background:"radial-gradient(1100px 700px at 18% 8%, rgba(var(--sb-orange-rgb), 0.05), transparent 60%), var(--sb-bg)"}},[React.createElement("style",{key:"kf",dangerouslySetInnerHTML:{__html:"@keyframes wuUp{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}"}}),k])};window.UniqueFeatureSlider=Fa;function Ka(){let[s,e]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches);React.useEffect(()=>{let w=window.matchMedia("(max-width:767px)"),M=()=>e(w.matches);return w.addEventListener?w.addEventListener("change",M):w.addListener(M),()=>{w.removeEventListener?w.removeEventListener("change",M):w.removeListener(M)}},[]);let t="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",r="'Manrope', system-ui, -apple-system, sans-serif",i=[{v:"v1.0",k:"r1",status:"released"},{v:"v1.5",k:"r2",status:"released"},{v:"v2.0",k:"r3",status:"released"},{v:"v3.0",k:"r4",status:"released"},{v:"v3.5",k:"r5",status:"released"},{v:"v4.5",k:"r6",status:"released"},{v:"v5.0",k:"r7",status:"released"},{v:"v5.5",k:"r8",status:"released"},{v:"v6.0",k:"r9",status:"current"},{v:"v6.5",k:"r10",status:"dev"},{v:"v7.0",k:"r11",status:"planned"},{v:"v7.5",k:"r12",status:"research"},{v:"v8.0",k:"r13",status:"research"}].map(w=>({...w,title:f(`roadmap.${w.k}.title`),sub:f(`roadmap.${w.k}.sub`),date:f(`roadmap.${w.k}.date`),features:Oe(`roadmap.${w.k}.features`)})),n={released:{solid:"var(--sb-green-solid)",line:"rgba(var(--sb-green-rgb), 0.32)"},current:{solid:"var(--sb-orange-solid)",line:"rgba(var(--sb-orange-rgb), 0.32)"},dev:{solid:"var(--sb-yellow-2-solid)",line:"rgba(var(--sb-ink), 0.08)"},planned:{solid:"var(--sb-text-7)",line:"rgba(var(--sb-ink), 0.08)"},research:{solid:"var(--sb-text-9)",line:"rgba(var(--sb-ink), 0.08)"}},[a,o]=React.useState({}),c=w=>a[w]===void 0?i[w].status==="current":a[w],d=w=>o(M=>({...M,[w]:!c(w)})),u=i.length,h=i.filter(w=>w.status==="released"||w.status==="current").length,m=u-h,p=(h/u*100).toFixed(1)+"%",[S,g]=f("roadmap.progress",{total:u}).split("{shipped}"),b=w=>w==="released"?React.createElement("div",{style:{position:"absolute",insetInlineStart:"13px",top:"16px",width:"28px",height:"28px",borderRadius:"50%",display:"grid",placeItems:"center",background:"linear-gradient(rgba(var(--sb-green-rgb), 0.16),rgba(var(--sb-green-rgb), 0.16)), var(--sb-bg)",border:"1px solid rgba(var(--sb-green-rgb), 0.4)",zIndex:2}},React.createElement("svg",{width:"15",height:"15",viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-green-solid)",strokeWidth:"2.4",strokeLinecap:"round",strokeLinejoin:"round"},React.createElement("path",{d:"M5 13l4 4 10-11"}))):w==="current"?React.createElement("div",{style:{position:"absolute",insetInlineStart:"13px",top:"16px",width:"28px",height:"28px",borderRadius:"50%",display:"grid",placeItems:"center",background:"linear-gradient(rgba(var(--sb-orange-rgb), 0.2),rgba(var(--sb-orange-rgb), 0.2)), var(--sb-bg)",border:"1px solid var(--sb-orange-solid)",zIndex:2,animation:"rmPulse 2.4s ease-out infinite"}},React.createElement("span",{style:{width:"9px",height:"9px",borderRadius:"50%",background:"var(--sb-orange-solid)"}})):w==="dev"?React.createElement("div",{style:{position:"absolute",insetInlineStart:"13px",top:"16px",width:"28px",height:"28px",borderRadius:"50%",display:"grid",placeItems:"center",background:"linear-gradient(rgba(var(--sb-yellow-2-rgb), 0.15),rgba(var(--sb-yellow-2-rgb), 0.15)), var(--sb-bg)",border:"1px solid rgba(var(--sb-yellow-2-rgb), 0.4)",zIndex:2}},React.createElement("svg",{width:"15",height:"15",viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-yellow-2-solid)",strokeWidth:"2.2",strokeLinecap:"round",strokeLinejoin:"round"},React.createElement("path",{d:"M12 3a9 9 0 1 0 9 9"}))):React.createElement("div",{style:{position:"absolute",insetInlineStart:"13px",top:"16px",width:"28px",height:"28px",borderRadius:"50%",display:"grid",placeItems:"center",background:"var(--sb-bg)",border:`1px ${w==="research"?"dashed":"solid"} rgba(var(--sb-ink), 0.18)`,zIndex:2}},React.createElement("span",{style:{width:"7px",height:"7px",borderRadius:"50%",background:n[w].solid}}));return React.createElement("section",{style:{width:"100%",color:"var(--sb-text-2)",fontFamily:r,padding:s?"48px 0":"64px 0",background:"radial-gradient(1200px 720px at 50% -8%, rgba(var(--sb-orange-rgb), 0.05), transparent 60%), var(--sb-bg)"}},React.createElement("style",{dangerouslySetInnerHTML:{__html:"@keyframes rmExp{from{opacity:0;transform:translateY(-4px)}to{opacity:1;transform:translateY(0)}}@keyframes rmPulse{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-orange-rgb), 0.18)}60%{box-shadow:0 0 0 9px rgba(var(--sb-orange-rgb), 0)}}"}}),React.createElement("div",{style:{maxWidth:"1040px",margin:"0 auto",padding:s?"0 18px":"0 40px"}},React.createElement("div",{style:{marginBottom:"30px"}},React.createElement("div",{style:{fontFamily:t,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.6px",marginBottom:"13px"}},f("roadmap.eyebrow")),React.createElement("h2",{style:{margin:"0 0 14px",fontSize:s?"27px":"34px",fontWeight:800,letterSpacing:"-1px",lineHeight:1.08,color:"var(--sb-text-1)"}},f("roadmap.heading")),React.createElement("p",{style:{margin:0,fontSize:"15.5px",lineHeight:1.6,color:"var(--sb-text-7)",maxWidth:"660px"}},f("roadmap.subheading"))),React.createElement("div",{style:{display:"flex",alignItems:"center",gap:"18px",flexWrap:"wrap",padding:"18px 22px",borderRadius:"14px",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.06)",marginBottom:"36px"}},React.createElement("div",{style:{fontFamily:t,fontSize:"12px",fontWeight:600,color:"var(--sb-text-2)",whiteSpace:"nowrap"}},S,React.createElement("span",{style:{color:"var(--sb-green)"}},h),g),React.createElement("div",{style:{flex:"1 1 240px",minWidth:"200px",height:"8px",borderRadius:"99px",background:"var(--sb-bg-deep)",border:"1px solid rgba(var(--sb-ink), 0.06)",overflow:"hidden"}},React.createElement("div",{style:{height:"100%",width:p,background:"linear-gradient(90deg, var(--sb-green), var(--sb-orange))"}})),React.createElement("div",{style:{fontFamily:t,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"0.8px",whiteSpace:"nowrap"}},f("roadmap.upcoming",{upcoming:m}))),i.map((w,M)=>{let F=n[w.status],k=c(M),E=M<u-1;return React.createElement("div",{key:M,style:{position:"relative",display:"grid",gridTemplateColumns:"54px 1fr",marginBottom:"16px"}},React.createElement("div",{style:{position:"relative"}},E&&React.createElement("div",{style:{position:"absolute",insetInlineStart:"26px",top:"30px",height:"calc(100% + 16px)",width:"2px",background:F.line}}),b(w.status)),React.createElement("div",{style:{borderRadius:"16px",background:"var(--sb-surface)",border:`1px solid ${w.status==="current"?"rgba(var(--sb-orange-rgb), 0.28)":"rgba(var(--sb-ink), 0.06)"}`,overflow:"hidden"}},React.createElement("div",{onClick:()=>d(M),style:{display:"flex",alignItems:"center",gap:s?"11px":"16px",padding:s?"16px 16px":"18px 22px",cursor:"pointer",transition:"background .18s ease"},onMouseEnter:_=>{_.currentTarget.style.background="rgba(var(--sb-ink), 0.018)"},onMouseLeave:_=>{_.currentTarget.style.background="transparent"}},React.createElement("div",{style:{flex:"none",minWidth:"52px",textAlign:"center",padding:"7px 10px",borderRadius:"9px",background:"var(--sb-bg-deep)",border:"1px solid rgba(var(--sb-ink), 0.07)",fontFamily:t,fontSize:"13px",fontWeight:700,color:w.status==="current"?"var(--sb-orange)":"var(--sb-text-4)"}},w.v),React.createElement("div",{style:{flex:1,minWidth:0}},React.createElement("div",{style:{fontSize:s?"15.5px":"17px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},w.title),!s&&React.createElement("div",{style:{marginTop:"3px",fontSize:"13.5px",color:"var(--sb-text-6)"}},w.sub)),React.createElement("div",{style:{flex:"none",display:"flex",alignItems:"center",gap:s?"8px":"14px"}},!s&&React.createElement("span",{style:{fontFamily:t,fontSize:"12px",fontWeight:500,color:"var(--sb-text-7)",whiteSpace:"nowrap",minWidth:"74px",textAlign:"end"}},w.date),React.createElement("span",{style:{color:"var(--sb-text-9)",display:"inline-flex",transition:"transform .22s cubic-bezier(.2,.7,.3,1)",transform:k?"rotate(180deg)":"rotate(0deg)"}},React.createElement("svg",{width:"17",height:"17",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"2.1",strokeLinecap:"round",strokeLinejoin:"round"},React.createElement("path",{d:"M6 9l6 6 6-6"}))))),k&&React.createElement("div",{style:{padding:"4px 22px 22px 22px",animation:"rmExp .24s cubic-bezier(.2,.7,.3,1)"}},React.createElement("div",{style:{fontFamily:t,fontSize:"10px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"1.2px",marginBottom:"14px",paddingTop:"14px",borderTop:"1px solid rgba(var(--sb-ink), 0.05)"}},f("roadmap.keyFeatures")),React.createElement("div",{style:{display:"grid",gridTemplateColumns:s?"1fr":"1fr 1fr",gap:"11px 28px"}},w.features.map((_,A)=>React.createElement("div",{key:A,style:{display:"flex",alignItems:"flex-start",gap:"10px"}},React.createElement("span",{style:{flex:"none",marginTop:"7px",width:"5px",height:"5px",borderRadius:"50%",background:F.solid}}),React.createElement("span",{style:{fontSize:"13.5px",lineHeight:1.5,color:"var(--sb-text-4)"}},_)))))))})))}window.Roadmap=Ka;var Et=[{id:"usdt",tab:"USDT",coin:"Tether USDT",badge:"trx",address:"TMopDoco5EwJB1QvQYsuhjUJdMvzPXNQYu"},{id:"btc",tab:"BTC",coin:"Bitcoin",badge:null,address:"bc1qnmc2xl7p0pxcy6lzf2tyf52wnslgzkgaq9kxpr"},{id:"eth",tab:"ETH",coin:"Ethereum",badge:null,address:"0xCDfDfaD4EC1fa657C3d2A7EFabc1cb751bf1dAf7"}],jr=s=>`/assets/crypto/${s}.svg`,Wr="__sbScrollToDonate",Yr="securebit:scroll-to-donate",Na=5e3,Xr=()=>{let[s,e]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches),[t,r]=React.useState(0),[i,n]=React.useState(!1),[a,o]=React.useState(0),c=React.useRef(null),d=React.useRef(null),u=React.useRef(null);React.useEffect(()=>{let K=window.matchMedia("(max-width:767px)"),O=()=>e(K.matches);return K.addEventListener?K.addEventListener("change",O):K.addListener(O),()=>{K.removeEventListener?K.removeEventListener("change",O):K.removeListener(O),clearTimeout(u.current)}},[]),React.useEffect(()=>{let K=null,O=()=>{let Q=window[Wr];window[Wr]=0,!(!Q||Date.now()-Q>Na)&&(clearTimeout(K),K=setTimeout(()=>{let J=d.current;if(!J)return;let ge=window.matchMedia("(prefers-reduced-motion: reduce)").matches;J.scrollIntoView({behavior:ge?"auto":"smooth",block:"center"})},350))};return O(),document.addEventListener(Yr,O),()=>{document.removeEventListener(Yr,O),clearTimeout(K)}},[]);let h=Et[t],m=K=>{let O=(K+Et.length)%Et.length;O!==t&&(o(K>t?1:-1),r(O),n(!1))},p=K=>{let O=K.touches[0];c.current={x:O.clientX,y:O.clientY}},S=K=>{let O=c.current;if(c.current=null,!O)return;let Q=K.changedTouches[0],J=Q.clientX-O.x,ge=Q.clientY-O.y;if(Math.abs(J)<40||Math.abs(J)<Math.abs(ge)*1.5)return;let G=Pt()?J>0:J<0;m(t+(G?1:-1))},g=async()=>{try{await navigator.clipboard.writeText(h.address)}catch{let O=document.createElement("textarea");O.value=h.address,document.body.appendChild(O),O.select();try{document.execCommand("copy")}catch{}O.remove()}n(!0),clearTimeout(u.current),u.current=setTimeout(()=>n(!1),1800)},b="'Manrope', system-ui, -apple-system, sans-serif",w="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",M={borderRadius:"14px",background:"var(--sb-bg)",border:"1px solid rgba(var(--sb-ink), 0.07)"},F=React.createElement("div",{key:"tabs",role:"tablist",style:{...M,display:"flex",gap:"6px",padding:"5px",marginBottom:"14px"}},Et.map((K,O)=>{let Q=O===t;return React.createElement("button",{key:K.id,type:"button",role:"tab","aria-selected":Q,onClick:()=>m(O),style:{flex:"1 1 0",minWidth:0,display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"9px",padding:"11px 10px",borderRadius:"10px",border:"none",cursor:"pointer",fontFamily:b,fontSize:"14px",fontWeight:700,transition:"all .18s",background:Q?"var(--sb-surface-2)":"transparent",color:Q?"var(--sb-text-1)":"var(--sb-text-7)",boxShadow:Q?"inset 0 0 0 1px rgba(var(--sb-orange-rgb), 0.45)":"none"}},[React.createElement("span",{key:"ic",style:{position:"relative",flex:"none",width:"22px",height:"22px"}},[React.createElement("img",{key:"logo",src:jr(K.id),alt:"",width:22,height:22,style:{display:"block",width:"22px",height:"22px"}}),K.badge&&React.createElement("img",{key:"badge",src:jr(K.badge),alt:"",width:11,height:11,style:{position:"absolute",right:"-3px",bottom:"-3px",width:"11px",height:"11px",borderRadius:"50%",border:"1.5px solid var(--sb-surface-2)",background:"var(--sb-surface-2)"}})]),K.tab])})),k=React.createElement("button",{key:"copy",type:"button",onClick:g,style:{flex:"none",display:"inline-flex",alignItems:"center",gap:"8px",padding:"12px 16px",borderRadius:"10px",fontFamily:b,fontSize:"13.5px",fontWeight:700,cursor:"pointer",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-2)",border:"1px solid rgba(var(--sb-ink), 0.1)",transition:"all .18s"},onMouseEnter:K=>{K.currentTarget.style.background="rgba(var(--sb-ink), 0.09)"},onMouseLeave:K=>{K.currentTarget.style.background="rgba(var(--sb-ink), 0.05)"}},[i?React.createElement("svg",{key:"ok",width:15,height:15,viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-green-solid)",strokeWidth:2.4,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:'<path d="M5 12.5l4.2 4.2L19 6.5"/>'}}):React.createElement("svg",{key:"cp",width:15,height:15,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:'<rect x="9" y="9" width="12" height="12" rx="2.5"/><path d="M5 15V5a2 2 0 0 1 2-2h8"/>'}}),React.createElement("span",{key:"l","aria-live":"polite"},i?f("donate.copied"):f("donate.copy"))]),E=React.createElement("div",{key:"addr",style:{...M,display:"flex",alignItems:"center",gap:"12px",padding:"8px 8px 8px 18px"}},[React.createElement("div",{key:"tx",style:{flex:1,minWidth:0}},[React.createElement("div",{key:"net",style:{fontSize:"11.5px",fontWeight:600,color:"var(--sb-text-9)",marginBottom:"2px"}},f(`donate.net.${h.id}`)),React.createElement("div",{key:"a",title:h.address,dir:"ltr",style:{fontFamily:w,fontSize:"14px",color:"var(--sb-text-2)",letterSpacing:"0.3px",overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},h.address.slice(0,8)+"\u2026"+h.address.slice(-8))]),k]),_=React.createElement("div",{key:"warn",style:{display:"flex",alignItems:"center",gap:"7px",marginTop:"14px",fontSize:"12px",color:"var(--sb-text-9)"}},[React.createElement("svg",{key:"i",width:13,height:13,viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-orange-solid)",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round",style:{flex:"none"},dangerouslySetInnerHTML:{__html:'<path d="M12 3l9.5 17h-19z"/><path d="M12 10v4M12 17.5v.01"/>'}}),f(`donate.warn.${h.id}`)]),A=React.createElement("div",{key:"left",style:{flex:"1 1 440px",minWidth:0,padding:s?"32px 22px 8px":"44px",display:"flex",flexDirection:"column"}},[React.createElement("div",{key:"eyebrow",style:{fontFamily:w,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.8px",marginBottom:"14px"}},f("donate.eyebrow")),React.createElement("h2",{key:"title",style:{margin:"0 0 10px",fontSize:s?"28px":"34px",fontWeight:800,letterSpacing:"-1px",lineHeight:1.08,color:"var(--sb-text-1)"}},f("donate.title")),React.createElement("p",{key:"desc",style:{margin:"0 0 30px",fontSize:"15px",lineHeight:1.6,color:"var(--sb-text-7)"}},f("donate.description")),F,E,_]),x=Pt()?-1:1,T=a===0?"none":`${a*x>0?"cdInEnd":"cdInStart"} .28s cubic-bezier(.2,.7,.3,1)`,Y=React.createElement("div",{key:"plate",onTouchStart:p,onTouchEnd:S,style:{position:"relative",width:"232px",height:"232px",padding:"14px",borderRadius:"20px",background:"#fff",boxShadow:"0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))",border:"1px solid rgba(var(--sb-ink), 0.07)",overflow:"hidden",touchAction:"pan-y",userSelect:"none"}},React.createElement("div",{key:h.id,style:{position:"relative",width:"100%",height:"100%",animation:T}},[React.createElement("img",{key:"qr",src:`/assets/crypto/qr-${h.id}.svg`,alt:f("donate.qrAlt",{coin:h.coin}),width:204,height:204,draggable:!1,style:{display:"block",width:"100%",height:"100%",imageRendering:"pixelated"}}),React.createElement("div",{key:"logo",style:{position:"absolute",left:"50%",top:"50%",transform:"translate(-50%,-50%)",width:"48px",height:"48px",borderRadius:"12px",background:"#fff",display:"grid",placeItems:"center"}},React.createElement("img",{src:jr(h.id),alt:"",width:34,height:34,draggable:!1,style:{display:"block",width:"34px",height:"34px"}}))])),B=s&&React.createElement("div",{key:"dots","aria-hidden":!0,style:{display:"flex",justifyContent:"center",gap:"7px",marginTop:"18px"}},Et.map((K,O)=>React.createElement("span",{key:K.id,style:{width:O===t?"18px":"7px",height:"7px",borderRadius:"4px",transition:"all .25s",background:O===t?"var(--sb-orange-solid)":"rgba(var(--sb-ink), 0.16)"}}))),R=React.createElement("div",{key:"right",style:{flex:"0 0 auto",minWidth:s?0:"300px",margin:"0 auto",padding:s?"24px 22px 32px":"44px",display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center"}},[Y,B]),ue=React.createElement("div",{key:"card",style:{width:"100%",maxWidth:"1000px",position:"relative",overflow:"hidden",borderRadius:"24px",background:"radial-gradient(520px 420px at 100% 50%, rgba(var(--sb-orange-rgb), 0.09), transparent 70%), var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.07)",display:"flex",flexWrap:"wrap",alignItems:"stretch",animation:"cdUp .45s cubic-bezier(.2,.7,.3,1)"}},[A,R]);return React.createElement("section",{id:"donate",ref:d,style:{width:"100%",display:"flex",alignItems:"center",justifyContent:"center",background:"var(--sb-bg)",color:"var(--sb-text-2)",fontFamily:b,padding:s?"48px 18px":"64px 32px"}},[React.createElement("style",{key:"kf",dangerouslySetInnerHTML:{__html:'@keyframes cdUp{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}@keyframes cdInEnd{from{opacity:0;transform:translateX(36px)}to{opacity:1;transform:none}}@keyframes cdInStart{from{opacity:0;transform:translateX(-36px)}to{opacity:1;transform:none}}@media (prefers-reduced-motion: reduce){#donate [style*="cdIn"]{animation:none!important}}'}}),ue])};Xr.SCROLL_FLAG=Wr;Xr.SCROLL_EVENT=Yr;window.DonateCrypto=Xr;var Oa=()=>{let[s,e]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches);React.useEffect(()=>{let u=window.matchMedia("(max-width:767px)"),h=()=>e(u.matches);return u.addEventListener?u.addEventListener("change",h):u.addListener(h),()=>{u.removeEventListener?u.removeEventListener("change",h):u.removeListener(h)}},[]);let t="var(--sb-orange)",r="var(--sb-orange-solid)",i="'Manrope', system-ui, -apple-system, sans-serif",n="https://github.com/SecureBitChat/securebit-chat/",a="mailto:lockbitchat@tutanota.com",o=React.createElement("a",{key:"gh",href:n,target:"_blank",rel:"noopener noreferrer",style:{display:"inline-flex",alignItems:"center",gap:"11px",padding:"15px 26px",borderRadius:"13px",background:r,color:"var(--sb-on-accent)",textDecoration:"none",fontSize:"15.5px",fontWeight:700,letterSpacing:"-0.2px",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)",whiteSpace:"nowrap",transition:"all .2s cubic-bezier(.2,.7,.3,1)"},onMouseEnter:u=>{u.currentTarget.style.background="var(--sb-orange-hi)",u.currentTarget.style.transform="translateY(-2px)"},onMouseLeave:u=>{u.currentTarget.style.background=r,u.currentTarget.style.transform="none"}},[React.createElement("svg",{key:"i",width:20,height:20,viewBox:"0 0 24 24",fill:"currentColor",dangerouslySetInnerHTML:{__html:'<path d="M12 2C6.48 2 2 6.58 2 12.26c0 4.5 2.87 8.32 6.84 9.67.5.09.68-.22.68-.49 0-.24-.01-.87-.01-1.71-2.78.62-3.37-1.36-3.37-1.36-.46-1.18-1.11-1.5-1.11-1.5-.91-.63.07-.62.07-.62 1 .07 1.53 1.05 1.53 1.05.89 1.56 2.34 1.11 2.91.85.09-.66.35-1.11.63-1.36-2.22-.26-4.55-1.14-4.55-5.07 0-1.12.39-2.03 1.03-2.75-.1-.26-.45-1.3.1-2.71 0 0 .84-.27 2.75 1.05a9.3 9.3 0 0 1 5 0c1.91-1.32 2.75-1.05 2.75-1.05.55 1.41.2 2.45.1 2.71.64.72 1.03 1.63 1.03 2.75 0 3.94-2.34 4.81-4.57 5.06.36.32.68.94.68 1.9 0 1.37-.01 2.47-.01 2.81 0 .27.18.59.69.49A10.02 10.02 0 0 0 22 12.26C22 6.58 17.52 2 12 2z"/>'}}),f("community.github")]),c=React.createElement("a",{key:"fb",href:a,rel:"noopener noreferrer",style:{display:"inline-flex",alignItems:"center",gap:"11px",padding:"15px 26px",borderRadius:"13px",background:"rgba(var(--sb-ink), 0.03)",color:"var(--sb-text-2)",textDecoration:"none",fontSize:"15.5px",fontWeight:700,letterSpacing:"-0.2px",border:"1px solid rgba(var(--sb-ink), 0.1)",whiteSpace:"nowrap",transition:"all .2s cubic-bezier(.2,.7,.3,1)"},onMouseEnter:u=>{u.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.24)",u.currentTarget.style.background="rgba(var(--sb-ink), 0.06)"},onMouseLeave:u=>{u.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.1)",u.currentTarget.style.background="rgba(var(--sb-ink), 0.03)"}},[React.createElement("svg",{key:"i",width:20,height:20,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.9,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:'<path d="M21 11.5a8 8 0 0 1-11.6 7.1L4 20l1.4-5.3A8 8 0 1 1 21 11.5z"/><path d="M8.5 11h7M8.5 14h4.5"/>'}}),f("community.feedback")]),d=React.createElement("div",{key:"card",style:{position:"relative",overflow:"hidden",maxWidth:"860px",width:"100%",borderRadius:"24px",background:"radial-gradient(700px 360px at 50% 0%, rgba(var(--sb-orange-rgb), 0.1), transparent 65%), var(--sb-bg)",border:"1px solid rgba(var(--sb-ink), 0.07)",padding:s?"40px 24px 36px":"56px 56px 48px",textAlign:"center",boxShadow:"0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))"}},[React.createElement("div",{key:"hairline",style:{position:"absolute",top:0,left:"50%",transform:"translateX(-50%)",width:"180px",height:"1px",background:"linear-gradient(90deg, transparent, rgba(var(--sb-orange-rgb), 0.7), transparent)"}}),React.createElement("img",{key:"icon",src:"/logo/securebit-mark.svg",alt:"SecureBit",style:{display:"inline-block",width:"64px",height:"64px",objectFit:"contain",marginBottom:"22px",animation:"ccUp .4s cubic-bezier(.2,.7,.3,1)"}}),React.createElement("h2",{key:"title",style:{margin:"0 0 16px",fontSize:s?"28px":"36px",fontWeight:800,letterSpacing:"-1px",lineHeight:1.05,color:"var(--sb-text-1)"}},f("community.title")),React.createElement("p",{key:"desc",style:{margin:"0 auto 32px",maxWidth:"560px",fontSize:"16px",lineHeight:1.65,color:"var(--sb-text-6)"}},f("community.description")),React.createElement("div",{key:"btns",style:{display:"flex",gap:"14px",justifyContent:"center",flexWrap:"wrap"}},[o,c]),React.createElement("div",{key:"snap",style:{display:"flex",justifyContent:s?"center":"flex-end",marginTop:"28px"}},React.createElement("a",{href:"https://snapcraft.io/securebit-chat",target:"_blank",rel:"noopener noreferrer","aria-label":"Get it from the Snap Store",style:{display:"inline-flex",opacity:.9,transition:"opacity .2s"},onMouseEnter:u=>{u.currentTarget.style.opacity=1},onMouseLeave:u=>{u.currentTarget.style.opacity=.9}},React.createElement("img",{src:"/assets/badges/snap-store.svg",alt:"Get it from the Snap Store",width:182,height:56,loading:"lazy",style:{display:"block"}})))]);return React.createElement("section",{style:{width:"100%",display:"flex",alignItems:"center",justifyContent:"center",background:"var(--sb-bg)",fontFamily:i,padding:s?"48px 18px":"64px 48px"}},[React.createElement("style",{key:"kf",dangerouslySetInnerHTML:{__html:"@keyframes ccUp{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:translateY(0)}}"}}),d])};window.CommunityCTA=Oa;var Ua=({webrtcManager:s,isConnected:e,pendingIncomingFiles:t=[],onIncomingDecision:r,showDropzone:i=!0})=>{let[n,a]=React.useState(!1),[o,c]=React.useState({sending:[],receiving:[]}),d=React.useRef(null);React.useEffect(()=>{if(!e||!s)return;let A=setInterval(()=>{let x=s.getFileTransfers();c(x)},500);return()=>clearInterval(A)},[e,s]),React.useEffect(()=>{e||c({sending:[],receiving:[]})},[e]);let u=async _=>{if(!e||!s){alert("\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u043D\u0435 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u043E. \u0421\u043D\u0430\u0447\u0430\u043B\u0430 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u0438\u0442\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435.");return}if(!s.isConnected()||!s.isVerified){alert("\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u043D\u0435 \u0433\u043E\u0442\u043E\u0432\u043E \u0434\u043B\u044F \u043F\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043B\u043E\u0432. \u0414\u043E\u0436\u0434\u0438\u0442\u0435\u0441\u044C \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u044F.");return}for(let A of _)try{let x=s.validateFile(A);if(!x.isValid){let T=x.errors.join(". ");alert(`\u0424\u0430\u0439\u043B ${A.name} \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u0431\u044B\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D: ${T}`);continue}await s.sendFile(A)}catch(x){x.message.includes(f("file.notReady"))?alert(`\u0424\u0430\u0439\u043B ${A.name} \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u0431\u044B\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D \u0441\u0435\u0439\u0447\u0430\u0441. \u041F\u0440\u043E\u0432\u0435\u0440\u044C\u0442\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0438 \u043F\u043E\u043F\u0440\u043E\u0431\u0443\u0439\u0442\u0435 \u0441\u043D\u043E\u0432\u0430.`):x.message.includes(f("file.tooLarge"))||x.message.includes("exceeds maximum")?alert(`\u0424\u0430\u0439\u043B ${A.name} \u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0431\u043E\u043B\u044C\u0448\u043E\u0439: ${x.message}`):x.message.includes(f("file.maxConcurrent"))?alert("\u0414\u043E\u0441\u0442\u0438\u0433\u043D\u0443\u0442 \u043B\u0438\u043C\u0438\u0442 \u043E\u0434\u043D\u043E\u0432\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0445 \u043F\u0435\u0440\u0435\u0434\u0430\u0447. \u0414\u043E\u0436\u0434\u0438\u0442\u0435\u0441\u044C \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0442\u0435\u043A\u0443\u0449\u0438\u0445 \u043F\u0435\u0440\u0435\u0434\u0430\u0447."):x.message.includes(f("file.typeNotAllowed"))?alert(`\u0422\u0438\u043F \u0444\u0430\u0439\u043B\u0430 ${A.name} \u043D\u0435 \u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044F: ${x.message}`):alert(`\u041E\u0448\u0438\u0431\u043A\u0430 \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u0438 \u0444\u0430\u0439\u043B\u0430 ${A.name}: ${x.message}`)}},h=_=>{_.preventDefault(),a(!1);let A=Array.from(_.dataTransfer.files);u(A)},m=_=>{_.preventDefault(),a(!0)},p=_=>{_.preventDefault(),a(!1)},S=_=>{let A=Array.from(_.target.files);u(A),_.target.value=""},g=_=>{if(_===0)return"0 B";let A=1024,x=["B","KB","MB","GB"],T=Math.floor(Math.log(_)/Math.log(A));return parseFloat((_/Math.pow(A,T)).toFixed(2))+" "+x[T]},b=_=>{switch(_){case"metadata_sent":case"preparing":return"fas fa-cog fa-spin";case"transmitting":case"receiving":return"fas fa-exchange-alt fa-pulse";case"assembling":return"fas fa-puzzle-piece fa-pulse";case"completed":return"fas fa-check text-green-400";case"failed":return"fas fa-times text-red-400";default:return"fas fa-circle"}},w=_=>{switch(_){case"metadata_sent":return"\u041F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043A\u0430...";case"transmitting":return"\u041E\u0442\u043F\u0440\u0430\u0432\u043A\u0430...";case"receiving":return"\u041F\u043E\u043B\u0443\u0447\u0435\u043D\u0438\u0435...";case"assembling":return"\u0421\u0431\u043E\u0440\u043A\u0430 \u0444\u0430\u0439\u043B\u0430...";case"completed":return"\u0417\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u043E";case"failed":return"\u041E\u0448\u0438\u0431\u043A\u0430";default:return _}},M=(_,A)=>{let x=_.totalChunks||0,T=_.transferredChunks||0,Y=_.status==="completed",B=x>0?Math.min(x,32):24,R;return Y?R=B:x>0?R=Math.floor(T/x*B):R=Math.floor((_.progress||0)/100*B),R=Math.max(0,Math.min(B,R)),React.createElement("div",{key:"progress"},[React.createElement("div",{key:"squares",style:{display:"flex",flexWrap:"wrap",gap:"3px",marginBottom:"7px"}},Array.from({length:B},(ue,K)=>React.createElement("div",{key:K,style:{width:"11px",height:"11px",borderRadius:"2px",background:K<R?A:"rgba(var(--sb-ink), 0.07)",border:"1px solid "+(K<R?"transparent":"rgba(var(--sb-ink), 0.05)"),boxShadow:K<R?`0 0 5px ${A}55`:"none",transition:"background .2s ease, box-shadow .2s ease"}}))),React.createElement("div",{key:"text",style:{display:"flex",alignItems:"center",justifyContent:"space-between",fontSize:"11.5px",color:"var(--sb-text-7)"}},[React.createElement("span",{key:"status",style:{display:"inline-flex",alignItems:"center",gap:"5px"}},[React.createElement("i",{key:"icon",className:b(_.status)}),w(_.status)]),React.createElement("span",{key:"count",style:{fontFamily:"'JetBrains Mono', ui-monospace, monospace",color:F(_)?A:"var(--sb-text-7)"}},x>0?`${Math.min(T,x)} / ${x} chunks`:`${(_.progress||0).toFixed(0)}%`)])])},F=_=>_.status==="completed",k=async(_,A)=>{typeof r=="function"&&await r(_,A),c(s.getFileTransfers())};return e?s&&s.isConnected()&&s.isVerified?React.createElement("div",{className:"file-transfer-component"},[i&&React.createElement("div",{key:"drop-zone",onDrop:h,onDragOver:m,onDragLeave:p,style:{position:"relative",border:"1.5px dashed "+(n?"rgba(var(--sb-orange-rgb), 0.7)":"rgba(var(--sb-ink), 0.14)"),borderRadius:"14px",background:n?"rgba(var(--sb-orange-rgb), 0.07)":"var(--sb-surface)",padding:"24px 22px",textAlign:"center",transition:"all .15s"}},[React.createElement("div",{key:"icon-box",style:{width:"42px",height:"42px",margin:"0 auto 10px",borderRadius:"12px",display:"grid",placeItems:"center",background:"rgba(var(--sb-ink), 0.04)",border:"1px solid rgba(var(--sb-ink), 0.08)"}},React.createElement("i",{className:"fas fa-arrow-up-from-bracket",style:{color:"var(--sb-text-6)",fontSize:"18px"}})),React.createElement("div",{key:"title",style:{fontSize:"14px",fontWeight:700,color:"var(--sb-text-2)"}},f("file.drop")),React.createElement("div",{key:"sub",style:{fontSize:"12px",color:"var(--sb-text-8)",marginTop:"4px"}},f("file.dropHint")),React.createElement("button",{key:"browse",type:"button",onClick:()=>d.current?.click(),className:"sb-send",style:{marginTop:"14px",display:"inline-flex",alignItems:"center",gap:"7px",padding:"9px 16px",borderRadius:"9px",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"inherit",fontSize:"13px",fontWeight:700,cursor:"pointer"}},[React.createElement("i",{key:"i",className:"fas fa-folder-open",style:{fontSize:"13px"}}),f("file.browse")])]),i&&React.createElement("input",{key:"file-input",ref:d,type:"file",multiple:!0,className:"hidden",onChange:S}),t.length>0&&React.createElement("div",{key:"incoming-consent",className:"mt-4 space-y-2"},t.map(_=>React.createElement("div",{key:_.fileId,style:{borderRadius:"12px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",padding:"12px 14px"}},[React.createElement("div",{key:"info",style:{marginBottom:"12px",display:"flex",alignItems:"center",gap:"11px"}},[React.createElement("div",{key:"ic",style:{flex:"none",width:"34px",height:"34px",borderRadius:"9px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.22)"}},React.createElement("i",{className:"fas fa-file-arrow-down",style:{color:"var(--sb-orange)",fontSize:"15px"}})),React.createElement("div",{key:"text",style:{minWidth:0}},[React.createElement("div",{key:"title",style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-2)"}},f("file.incoming")),React.createElement("div",{key:"meta",style:{fontSize:"11.5px",color:"var(--sb-text-8)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},`${_.fileName} \xB7 ${g(_.fileSize)} \xB7 ${_.mimeType}`)])]),React.createElement("div",{key:"actions",style:{display:"flex",gap:"8px"}},[React.createElement("button",{key:"accept",onClick:()=>k(_.fileId,!0),style:{display:"inline-flex",alignItems:"center",gap:"6px",borderRadius:"8px",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",padding:"8px 14px",fontSize:"13px",fontWeight:700,cursor:"pointer"}},[React.createElement("i",{key:"i",className:"fas fa-check",style:{fontSize:"12px"}}),f("file.accept")]),React.createElement("button",{key:"reject",onClick:()=>k(_.fileId,!1),style:{display:"inline-flex",alignItems:"center",gap:"6px",borderRadius:"8px",border:"1px solid rgba(var(--sb-red-rgb), 0.3)",background:"rgba(var(--sb-red-rgb), 0.08)",color:"var(--sb-red)",padding:"8px 14px",fontSize:"13px",fontWeight:600,cursor:"pointer"}},[React.createElement("i",{key:"i",className:"fas fa-xmark",style:{fontSize:"12px"}}),f("file.reject")])])]))),(o.sending.length>0||o.receiving.length>0)&&React.createElement("div",{key:"transfers",className:"active-transfers mt-4"},[React.createElement("h4",{key:"title",style:{display:"flex",alignItems:"center",gap:"8px",fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-7)",marginBottom:"10px"}},[React.createElement("i",{key:"icon",className:"fas fa-right-left",style:{fontSize:"12px"}}),f("file.title")]),...o.sending.map(_=>React.createElement("div",{key:`send-${_.fileId}`,style:{borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",padding:"12px",marginBottom:"8px"}},[React.createElement("div",{key:"header",className:"flex items-center justify-between mb-2"},[React.createElement("div",{key:"info",className:"flex items-center"},[React.createElement("i",{key:"icon",className:"fas fa-arrow-up",style:{color:"var(--sb-orange)",fontSize:"13px",marginInlineEnd:"8px"}}),React.createElement("span",{key:"name",className:"font-medium text-sm",style:{color:"var(--sb-text-2)"}},_.fileName),React.createElement("span",{key:"size",className:"text-xs ms-2",style:{color:"var(--sb-text-8)"}},g(_.fileSize))]),React.createElement("button",{key:"cancel",onClick:()=>s.cancelFileTransfer(_.fileId),className:"text-red-400 hover:text-red-300 text-xs"},[React.createElement("i",{className:"fas fa-times"})])]),M(_,"var(--sb-orange)")])),...o.receiving.map(_=>React.createElement("div",{key:`recv-${_.fileId}`,style:{borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",padding:"12px",marginBottom:"8px"}},[React.createElement("div",{key:"header",className:"flex items-center justify-between mb-2"},[React.createElement("div",{key:"info",className:"flex items-center"},[React.createElement("i",{key:"icon",className:"fas fa-arrow-down",style:{color:"var(--sb-green)",fontSize:"13px",marginInlineEnd:"8px"}}),React.createElement("span",{key:"name",className:"font-medium text-sm",style:{color:"var(--sb-text-2)"}},_.fileName),React.createElement("span",{key:"size",className:"text-xs ms-2",style:{color:"var(--sb-text-8)"}},g(_.fileSize))]),React.createElement("div",{key:"actions",className:"flex items-center space-x-2"},[_.status==="completed"?React.createElement("button",{key:"download",className:"text-green-400 hover:text-green-300 text-xs flex items-center",onClick:async()=>{try{let A=await s.getReceivedFileObjectURL(_.fileId);if(!A){alert(f("file.gone"));return}let x=document.createElement("a");x.href=A,x.download=_.fileName||"file",x.click(),setTimeout(()=>s.revokeReceivedFileObjectURL(A),1e4)}catch(A){alert(A.message||f("file.gone"))}}},[React.createElement("i",{key:"i",className:"fas fa-download me-1"}),f("file.download")]):null,React.createElement("button",{key:"cancel",onClick:()=>s.cancelFileTransfer(_.fileId),className:"text-red-400 hover:text-red-300 text-xs"},[React.createElement("i",{className:"fas fa-times"})])])]),M(_,"var(--sb-green)")]))])]):React.createElement("div",{className:"p-4 text-center text-yellow-600"},[React.createElement("i",{key:"icon",className:"fas fa-exclamation-triangle me-2"}),"\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0443\u0441\u0442\u0430\u043D\u0430\u0432\u043B\u0438\u0432\u0430\u0435\u0442\u0441\u044F... \u041F\u0435\u0440\u0435\u0434\u0430\u0447\u0430 \u0444\u0430\u0439\u043B\u043E\u0432 \u0431\u0443\u0434\u0435\u0442 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043F\u043E\u0441\u043B\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438."]):React.createElement("div",{className:"p-4 text-center text-muted"},f("file.needConnection"))};window.FileTransferComponent=Ua;var ze=Object.freeze({MAX_SERVERS:10,MAX_URLS_PER_SERVER:8,MAX_STRING_LENGTH:512}),Jo=Object.freeze(["stun","stuns","turn","turns"]),za=/^(stuns?|turns?):/i,Va=/^(\[[0-9a-f:]+\]|[a-z0-9.-]+)(:\d{1,5})?$/i,Ba=/^transport=(udp|tcp)$/i;function On(s){for(let e=0;e<s.length;e++){let t=s.charCodeAt(e);if(t<32||t===127)return!0}return!1}function Ha(s){if(typeof s!="string")return f("iceUrl.notString");let e=s.trim();if(!e)return f("iceUrl.empty");if(e.length>ze.MAX_STRING_LENGTH)return f("iceUrl.tooLong");if(On(e))return f("iceUrl.badChars");let t=e.match(za);if(!t)return f("iceUrl.badScheme");let r=e.slice(t[0].length),[i,n,...a]=r.split("?");return a.length>0?f("iceUrl.badQuery"):i?Va.test(i)?n!==void 0&&!Ba.test(n)?f("iceUrl.badTransport"):null:f("iceUrl.badHost"):f("iceUrl.noHost")}function Un(s){return typeof s=="string"&&/^turns?:/i.test(s.trim())}function Kn(s,e){return s==null||s===""?null:typeof s!="string"?`${e} must be a string`:s.length>ze.MAX_STRING_LENGTH?`${e} is too long`:On(s)?`${e} contains invalid characters`:null}function Nn(s){let e=[],t=[],r=[];return Array.isArray(s)?s.length===0?{servers:[],errors:[],warnings:[]}:s.length>ze.MAX_SERVERS?(e.push(f("iceErr.tooMany",{max:ze.MAX_SERVERS})),{servers:[],errors:e,warnings:t}):(s.forEach((i,n)=>{let a=`Server #${n+1}`;if(!i||typeof i!="object"){e.push(f("iceErr.invalidEntry",{label:a}));return}let o=Array.isArray(i.urls)?i.urls:[i.urls];if(o.length===0||o.length>ze.MAX_URLS_PER_SERVER){e.push(f("iceErr.urlCount",{label:a,max:ze.MAX_URLS_PER_SERVER}));return}let c=[],d=!1;for(let p of o){let S=Ha(p);if(S){e.push(`${a}: ${S}`);continue}let g=p.trim();c.push(g),Un(g)&&(d=!0)}if(c.length===0)return;let u=Kn(i.username,`${a} username`);u&&e.push(u);let h=Kn(i.credential,`${a} credential`);h&&e.push(h);let m={urls:c.length===1?c[0]:c};i.username&&(m.username=String(i.username)),i.credential&&(m.credential=String(i.credential)),d&&(!m.username||!m.credential)&&t.push(f("iceErr.turnCreds",{label:a})),r.push(m)}),{servers:r,errors:e,warnings:t}):{servers:[],errors:[f("iceErr.notArray")],warnings:[]}}function zn(s){if(typeof s!="string"||!s.trim())return{servers:[],errors:[],warnings:[]};let e=s.trim();if(e.startsWith("[")||e.startsWith("{")){let r;try{r=JSON.parse(e)}catch{return{servers:[],errors:[f("iceErr.invalidJson")],warnings:[]}}let i=Array.isArray(r)?r:[r];return Nn(i)}let t=e.split(`
+Right-click or Ctrl+click to disconnect`,isVerified:!1,dataSource:"estimated"}})();React.useEffect(()=>(window.debugHeaderSecurity=void 0,()=>{delete window.debugHeaderSecurity}),[o,d,i,a,k,_]);let A=k?k.color==="green"?"var(--sb-green)":k.color==="orange"?"var(--sb-orange)":k.color==="yellow"?"var(--sb-yellow)":"var(--sb-red)":"var(--sb-green)",x=i?"var(--sb-green-solid)":["connecting","verifying","retrying","reconnecting"].includes(s)?"var(--sb-yellow-solid)":s==="failed"?"var(--sb-red-solid)":"var(--sb-text-9)",T=x==="var(--sb-green-solid)"?"rgba(var(--sb-green-rgb), 0.16)":x==="var(--sb-yellow-solid)"?"rgba(var(--sb-yellow-rgb), 0.16)":x==="var(--sb-red-solid)"?"rgba(var(--sb-red-rgb), 0.16)":"rgba(var(--sb-text-9-rgb), 0.16)",Y="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",B=!i,[R,ue]=React.useState(!1);React.useEffect(()=>{let G=()=>ue((window.scrollY||window.pageYOffset||0)>8);return G(),window.addEventListener("scroll",G,{passive:!0}),()=>window.removeEventListener("scroll",G)},[]);let K="blur(20px) saturate(180%)",O="background .25s ease, backdrop-filter .25s ease, -webkit-backdrop-filter .25s ease, border-color .25s ease",Q={paddingTop:"var(--sb-safe-top, 0px)",paddingBottom:"var(--sb-bar-extra, 0px)"},J={position:"fixed",top:0,left:0,right:0,...Q},ge=B?R?{...J,background:"rgba(var(--sb-bg-rgb), 0.72)",backdropFilter:K,WebkitBackdropFilter:K,borderBottom:"1px solid rgba(var(--sb-ink), 0.06)",transition:O}:{...J,background:"transparent",backdropFilter:"blur(0px) saturate(100%)",WebkitBackdropFilter:"blur(0px) saturate(100%)",borderBottom:"1px solid transparent",transition:O}:{...Q,background:"rgba(var(--sb-bg-rgb), 0.72)",backdropFilter:K,WebkitBackdropFilter:K,borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"};return React.createElement("header",{className:B?"header-minimal z-50":"header-minimal sticky top-0 z-50",style:ge},[React.createElement("div",{key:"container",className:"max-w-7xl mx-auto",style:{padding:"0 20px"}},[React.createElement("div",{key:"content",className:"flex items-center justify-between",style:{height:"var(--sb-bar-h, 64px)",gap:"16px"}},[React.createElement("div",{key:"left",style:{display:"flex",alignItems:"center",gap:"12px",minWidth:0}},[React.createElement("div",{key:"logo",style:{width:"36px",height:"36px",flex:"none",display:"grid",placeItems:"center"}},React.createElement("img",{src:"/logo/securebit-mark.svg",alt:"SecureBit",style:{width:"100%",height:"100%",objectFit:"contain",display:"block"}})),React.createElement("div",{key:"txt",style:{lineHeight:1.2,minWidth:0}},[React.createElement("div",{key:"r1",style:{display:"flex",alignItems:"baseline",gap:"7px"}},[React.createElement("span",{key:"n",style:{fontSize:"16px",fontWeight:800,letterSpacing:"-0.3px",color:"var(--sb-text-2)"}},"SecureBit"),React.createElement("span",{key:"v",style:{fontFamily:Y,fontSize:"10px",fontWeight:500,color:"var(--sb-text-faint)"}},Ma)]),React.createElement("div",{key:"r2",className:"hidden sm:block",style:{fontSize:"11px",color:"var(--sb-text-9)",fontWeight:500}},f("hdr.tagline"))])]),React.createElement("div",{key:"right",style:{display:"flex",alignItems:"center",gap:"9px"}},[B&&React.createElement(Hr,{key:"lang"}),B&&React.createElement(Gr,{key:"theme"}),!B&&React.createElement("button",{key:"net",type:"button",onClick:()=>window.dispatchEvent(new CustomEvent("securebit:open-network-settings")),title:f("hdr.netSettingsTitle"),"aria-label":f("hdr.netSettings"),className:"sb-disconnect",style:{display:"grid",placeItems:"center",width:"38px",height:"38px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)",color:"var(--sb-text-6)",cursor:"pointer",transition:"all .15s"}},React.createElement("i",{className:"fas fa-network-wired",style:{fontSize:"13px"}})),!B&&k&&React.createElement("div",{key:"sec",onClick:w,onContextMenu:G=>{G.preventDefault(),typeof r=="function"&&r()},title:_.tooltip,className:"sb-secpill",style:{display:"flex",alignItems:"center",gap:"8px",padding:"7px 12px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)",cursor:"pointer"}},[React.createElement("i",{key:"i",className:"fas fa-shield-halved",style:{fontSize:"13px",color:A}}),React.createElement("span",{key:"l",className:"hidden sm:inline",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-2)"}},f(`secLevel.${k.level}`)===`secLevel.${k.level}`?String(k.level):f(`secLevel.${k.level}`)),React.createElement("span",{key:"s",style:{fontFamily:Y,fontSize:"11.5px",color:"var(--sb-text-7)"}},k.score+"%")]),!B&&React.createElement("div",{key:"status",style:{display:"flex",alignItems:"center",gap:"8px",padding:"8px 13px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)"}},[React.createElement("span",{key:"dot",style:{width:"7px",height:"7px",borderRadius:"50%",background:x,boxShadow:"0 0 0 3px "+T}}),React.createElement("span",{key:"t",className:"hidden sm:inline",style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-4)"}},F.text)]),i&&React.createElement("button",{key:"dc",onClick:r,className:"sb-disconnect",style:{display:"flex",alignItems:"center",gap:"7px",padding:"8px 14px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"transparent",color:"var(--sb-text-6)",fontFamily:"inherit",fontSize:"13px",fontWeight:600,cursor:"pointer",transition:"all .15s"}},[React.createElement("i",{key:"i",className:"fas fa-power-off",style:{fontSize:"12px"}}),React.createElement("span",{key:"t",className:"sb-hide-sm"},f("hdr.disconnect"))])])])])])};window.EnhancedMinimalHeader=La;var Jt="1.0.5",qr=`https://github.com/SecureBitChat/securebit-desktop/releases/download/v${Jt}`,Da=()=>{let s=[{id:"web",name:"Web App",subtitle:"Browser Version",icon:"fas fa-globe",platform:"Web",isActive:!0,url:"https://securebit.chat/",color:"green"},{id:"windows",name:"Windows",subtitle:"Desktop App",icon:"fab fa-windows",platform:"Desktop",isActive:!0,url:`${qr}/SecureBit.Chat_${Jt}_x64-setup.exe`,color:"blue"},{id:"macos",name:"macOS",subtitle:"Desktop App",icon:"fab fa-safari",platform:"Desktop",isActive:!0,url:`${qr}/SecureBit.Chat_${Jt}_x64.dmg`,color:"gray"},{id:"linux",name:"Linux",subtitle:"Desktop App",icon:"fab fa-linux",platform:"Desktop",isActive:!0,url:`${qr}/SecureBit.Chat_${Jt}_amd64.AppImage`,color:"orange"},{id:"ios",name:"iOS",subtitle:"iPhone & iPad",icon:"fab fa-apple",platform:"Mobile",isActive:!1,url:"https://apps.apple.com/app/securebit-chat/",color:"white"},{id:"android",name:"Android",subtitle:"Google Play",icon:"fab fa-android",platform:"Mobile",isActive:!1,url:"https://play.google.com/store/apps/details?id=com.securebit.chat",color:"green"},{id:"chrome",name:"Chrome",subtitle:"Browser Extension",icon:"fab fa-chrome",platform:"Browser",isActive:!1,url:"#",color:"yellow"},{id:"edge",name:"Edge",subtitle:"Browser Extension",icon:"fab fa-edge",platform:"Browser",isActive:!1,url:"#",color:"blue"},{id:"opera",name:"Opera",subtitle:"Browser Extension",icon:"fab fa-opera",platform:"Browser",isActive:!1,url:"#",color:"red"},{id:"firefox",name:"Firefox",subtitle:"Browser Extension",icon:"fab fa-firefox-browser",platform:"Browser",isActive:!1,url:"#",color:"orange"}],e=c=>{c.isActive&&window.open(c.url,"_blank")},t=s.filter(c=>c.platform==="Desktop"||c.platform==="Web"),r=s.filter(c=>c.platform==="Mobile"),i=s.filter(c=>c.platform==="Browser"),n="w-28 h-28",a={green:"text-green-500",blue:"text-blue-500",gray:"text-gray-500",orange:"text-orange-500",red:"text-red-500",white:"text-white",yellow:"text-yellow-400"},o=c=>React.createElement("div",{key:c.id,className:`group relative ${n} rounded-2xl overflow-hidden card-minimal cursor-pointer`},[React.createElement("i",{key:"bg-icon",className:`${c.icon} absolute text-[3rem] ${c.isActive?a[c.color]:"text-white/10"} top-1/2 left-1/2 -translate-x-1/2 -translate-y-1/2 pointer-events-none transition-all duration-500 group-hover:scale-105`}),React.createElement("div",{key:"overlay",className:"absolute inset-0 bg-black/30 backdrop-blur-md flex flex-col items-center justify-center text-center opacity-0 transition-opacity duration-300 group-hover:opacity-100"},[React.createElement("h4",{key:"name",className:"text-sm font-semibold text-primary mb-1"},c.name),React.createElement("p",{key:"subtitle",className:"text-xs text-secondary mb-2"},c.subtitle),c.isActive?React.createElement("button",{key:"btn",onClick:()=>e(c),className:"px-2 py-1 rounded-xl bg-emerald-500 text-black font-medium hover:bg-emerald-600 transition-colors text-xs"},c.id==="web"?"Launch":"Download"):React.createElement("span",{key:"coming",className:"text-gray-400 font-medium text-xs"},"Coming Soon")])]);return React.createElement("div",{className:"mt-20 px-6"},[React.createElement("div",{key:"header",className:"text-center max-w-3xl mx-auto mb-12"},[React.createElement("h3",{key:"title",className:"text-3xl font-bold text-primary mb-3"},"Download SecureBit.chat"),React.createElement("p",{key:"subtitle",className:"text-secondary text-lg mb-5"},"Stay secure on every device. Choose your platform and start chatting privately.")]),React.createElement("div",{key:"desktop-row",className:"hidden sm:flex justify-center flex-wrap gap-6 mb-6"},t.map(o)),React.createElement("div",{key:"mobile-row",className:"flex justify-center gap-6 mb-6"},r.map(o)),React.createElement("div",{key:"browser-row",className:"flex justify-center gap-6"},i.map(o))])};window.DownloadApps=Da;var Pa=()=>{let[s,e]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches);React.useEffect(()=>{let p=window.matchMedia("(max-width:767px)"),S=()=>e(p.matches);return p.addEventListener?p.addEventListener("change",S):p.addListener(S),()=>{p.removeEventListener?p.removeEventListener("change",S):p.removeListener(S)}},[]);let t="var(--sb-orange)",r="var(--sb-orange-solid)",i="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",n="'Manrope', system-ui, -apple-system, sans-serif",a="https://docs.google.com/forms/d/e/1FAIpQLSc9ijV9PCoyXkus6vEx1OWwvwAsLq8fKS6-H5BmX-c-bvia6w/viewform?usp=dialog",o=[{id:"aegis",name:"Aegis Investment",logo:"/logo/aegis.png",logoHeight:"42px",url:"https://aegis-investment.com/",desc:f("partners.aegis.desc"),role:f("partners.aegis.role"),delay:".5s"},{id:"furi",name:"FuriLabs",logo:"/logo/furi-160.png",logoHeight:"54px",url:"https://furilabs.com/",desc:f("partners.furilabs.desc"),role:f("partners.furilabs.role"),delay:".56s"}],c=(p,S,g,b,w)=>React.createElement("svg",{className:w,width:S,height:S,viewBox:"0 0 24 24",fill:"none",stroke:g,strokeWidth:b,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:p}}),d=p=>React.createElement("span",{key:"role",style:{fontFamily:i,fontSize:"10.5px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.2px",padding:"6px 11px",borderRadius:"8px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.025)",whiteSpace:"nowrap"}},p),u=p=>React.createElement("a",{key:p.id,href:p.url,target:"_blank",rel:"noopener noreferrer",style:{flex:"1 1 320px",minWidth:s?"auto":"300px",borderRadius:"18px",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.06)",padding:"30px 30px 26px",display:"flex",flexDirection:"column",textDecoration:"none",color:"inherit",transition:"transform .28s cubic-bezier(.2,.7,.3,1), border-color .28s cubic-bezier(.2,.7,.3,1)",animation:`ptUp ${p.delay} cubic-bezier(.2,.7,.3,1)`},onMouseEnter:S=>{S.currentTarget.style.transform="translateY(-4px)",S.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.13)"},onMouseLeave:S=>{S.currentTarget.style.transform="none",S.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.06)"}},[React.createElement("div",{key:"logo",style:{display:"flex",alignItems:"center",marginBottom:"30px",height:"54px"}},React.createElement("img",{src:p.logo,alt:p.name,loading:"lazy",decoding:"async",style:{height:p.logoHeight,width:"auto",maxWidth:"190px",objectFit:"contain",display:"block"}})),React.createElement("h3",{key:"name",style:{margin:"0 0 9px",fontSize:"21px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},p.name),React.createElement("p",{key:"desc",style:{margin:"0 0 22px",fontSize:"14.5px",lineHeight:1.6,color:"var(--sb-text-6)"}},p.desc),React.createElement("div",{key:"foot",style:{marginTop:"auto",paddingTop:"6px",display:"flex",alignItems:"center",gap:"12px"}},[d(p.role)])]),h=React.createElement("a",{key:"invite",href:a,target:"_blank",rel:"noopener noreferrer",style:{flex:"1 1 320px",minWidth:s?"auto":"300px",borderRadius:"18px",background:"var(--sb-bg)",border:"1px dashed rgba(var(--sb-ink), 0.12)",padding:"30px",display:"flex",flexDirection:"column",justifyContent:"space-between",textDecoration:"none",color:"inherit",transition:"border-color .28s cubic-bezier(.2,.7,.3,1)",animation:"ptUp .62s cubic-bezier(.2,.7,.3,1)"},onMouseEnter:p=>{p.currentTarget.style.borderColor="rgba(var(--sb-orange-rgb), 0.4)"},onMouseLeave:p=>{p.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.12)"}},[React.createElement("div",{key:"top"},[React.createElement("div",{key:"icon",style:{width:"48px",height:"48px",borderRadius:"13px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.28)",marginBottom:"24px"}},c('<path d="M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2"/><circle cx="9" cy="7" r="4"/><path d="M19 8v6M22 11h-6"/>',23,r,1.9)),React.createElement("h3",{key:"title",style:{margin:"0 0 8px",fontSize:"21px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},f("partners.inviteTitle")),React.createElement("p",{key:"desc",style:{margin:0,fontSize:"14.5px",lineHeight:1.6,color:"var(--sb-text-7)"}},f("partners.inviteDesc"))]),React.createElement("span",{key:"btn",style:{marginTop:"26px",width:"100%",display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"10px",padding:"15px 20px",borderRadius:"12px",border:"none",background:r,color:"var(--sb-on-accent)",fontFamily:n,fontSize:"15px",fontWeight:700,cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)",boxSizing:"border-box",transition:"background .2s cubic-bezier(.2,.7,.3,1), transform .2s cubic-bezier(.2,.7,.3,1)"}},[f("partners.inviteCta"),c('<path d="M5 12h14M13 6l6 6-6 6"/>',17,"currentColor",2.2,"sb-mirror-rtl")])]),m=React.createElement("div",{key:"inner",style:{maxWidth:"1240px",margin:"0 auto",padding:s?"0 18px":"0 40px"}},[React.createElement("div",{key:"head",style:{marginBottom:"44px"}},[React.createElement("div",{key:"eyebrow",style:{fontFamily:i,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.6px",marginBottom:"14px"}},f("partners.eyebrow")),React.createElement("h2",{key:"h2",style:{margin:0,fontSize:s?"30px":"40px",fontWeight:800,letterSpacing:"-1.1px",lineHeight:1.04,color:"var(--sb-text-1)"}},f("partners.heading"))]),React.createElement("div",{key:"cards",style:{display:"flex",gap:"18px",alignItems:"stretch",flexWrap:"wrap"}},[...o.map(u),h])]);return React.createElement("section",{style:{width:"100%",color:"var(--sb-text-2)",fontFamily:n,padding:s?"48px 0":"72px 0",background:"radial-gradient(1100px 640px at 50% -6%, rgba(var(--sb-orange-rgb), 0.055), transparent 62%), var(--sb-bg)"}},[React.createElement("style",{key:"kf",dangerouslySetInnerHTML:{__html:"@keyframes ptUp{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:translateY(0)}}"}}),m])};window.BecomePartner=Pa;var Fa=()=>{let[s,e]=React.useState(0),[t,r]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches);React.useEffect(()=>{let E=window.matchMedia("(max-width:767px)"),_=()=>r(E.matches);return E.addEventListener?E.addEventListener("change",_):E.addListener(_),()=>{E.removeEventListener?E.removeEventListener("change",_):E.removeListener(_)}},[]);let i="var(--sb-orange)",n="var(--sb-orange-solid)",a="radial-gradient(130% 90% at 28% 0%, rgba(var(--sb-orange-rgb), 0.11), transparent 60%), var(--sb-surface)",o="rgba(var(--sb-orange-rgb), 0.3)",c="var(--sb-bg)",d="rgba(var(--sb-ink), 0.06)",u="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",h="'Manrope', system-ui, -apple-system, sans-serif",m=[{num:"01",title:[f("unique.s1.titleTop"),f("unique.s1.titleBottom")],collapsed:f("unique.s1.collapsed"),desc:f("unique.s1.desc"),tags:Oe("unique.s1.tags"),icon:'<path d="M12 3l8 4v5c0 4.5-3.2 7.8-8 9-4.8-1.2-8-4.5-8-9V7l8-4z"/><path d="M9.2 12.2l2 2 3.6-3.8"/>'},{num:"02",title:[f("unique.s2.titleTop"),f("unique.s2.titleBottom")],collapsed:f("unique.s2.collapsed"),desc:f("unique.s2.desc"),tags:Oe("unique.s2.tags"),icon:'<circle cx="5.5" cy="12" r="2.5"/><circle cx="18.5" cy="6" r="2.5"/><circle cx="18.5" cy="18" r="2.5"/><path d="M7.8 10.8l8.4-3.6M7.8 13.2l8.4 3.6"/>'},{num:"03",title:[f("unique.s3.titleTop"),f("unique.s3.titleBottom")],collapsed:f("unique.s3.collapsed"),desc:f("unique.s3.desc"),tags:Oe("unique.s3.tags"),icon:'<path d="M21 8a8.5 8.5 0 0 0-15.6-2.5M3 4v4h4"/><path d="M3 16a8.5 8.5 0 0 0 15.6 2.5M21 20v-4h-4"/>'},{num:"04",title:[f("unique.s4.titleTop"),f("unique.s4.titleBottom")],collapsed:f("unique.s4.collapsed"),desc:f("unique.s4.desc"),tags:Oe("unique.s4.tags"),icon:'<path d="M3 7h4l3 10h4M14 7h3l3 0"/><path d="M17 4l3 3-3 3"/><path d="M3 17h4l2-6"/>'},{num:"05",title:[f("unique.s5.titleTop"),f("unique.s5.titleBottom")],collapsed:f("unique.s5.collapsed"),desc:f("unique.s5.desc"),tags:Oe("unique.s5.tags"),icon:'<path d="M9.9 5.1A9.6 9.6 0 0 1 12 5c5.5 0 9 5 9 7a11 11 0 0 1-2.2 3M6.3 7.3C3.6 8.9 2 11.2 2 12c0 1.4 3.5 7 10 7 1.6 0 3-.3 4.2-.8"/><path d="M9.9 9.9a3 3 0 0 0 4.2 4.2M3 3l18 18"/>'}],p=(E,_,A,x)=>React.createElement("svg",{width:_,height:_,viewBox:"0 0 24 24",fill:"none",stroke:A,strokeWidth:x,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:E}}),S=E=>e(_=>(_+E+m.length)%m.length),g=(E,_,A)=>React.createElement("button",{key:E,onClick:_,"aria-label":E,className:"sb-mirror-rtl",style:{width:"46px",height:"46px",display:"grid",placeItems:"center",borderRadius:"50%",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.025)",color:"var(--sb-text-4)",cursor:"pointer",transition:"all .2s cubic-bezier(.2,.7,.3,1)"},onMouseEnter:x=>{x.currentTarget.style.borderColor=o,x.currentTarget.style.color=i},onMouseLeave:x=>{x.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.1)",x.currentTarget.style.color="var(--sb-text-4)"}},p(A,18,"currentColor",2.1)),b=E=>React.createElement("span",{key:E,style:{display:"inline-flex",alignItems:"center",gap:"7px",padding:"7px 12px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.025)",fontFamily:u,fontSize:"11.5px",fontWeight:500,color:"var(--sb-text-6)"}},[React.createElement("span",{key:"dot",style:{width:"5px",height:"5px",borderRadius:"50%",background:"var(--sb-green-solid)"}}),E]),w=E=>React.createElement("div",{key:"exp",style:{height:"100%",display:"flex",flexDirection:"column",justifyContent:t?"flex-start":"space-between",gap:t?"18px":0,padding:t?"24px 22px":"32px 34px",minWidth:t?"auto":"320px",animation:"wuUp .42s cubic-bezier(.2,.7,.3,1)"}},[React.createElement("div",{key:"top",style:{display:"flex",alignItems:"center",justifyContent:"space-between"}},[React.createElement("div",{key:"ic",style:{width:"54px",height:"54px",borderRadius:"15px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.13)",border:"1px solid rgba(var(--sb-orange-rgb), 0.3)"}},p(E.icon,26,n,1.9)),React.createElement("span",{key:"n",style:{fontFamily:u,fontSize:"13px",fontWeight:600,color:"var(--sb-text-9)"}},E.num)]),React.createElement("div",{key:"mid"},[React.createElement("h3",{key:"h",style:{margin:"0 0 12px",fontSize:t?"24px":"30px",fontWeight:800,letterSpacing:"-0.7px",lineHeight:1.08,color:"var(--sb-text-1)"}},[E.title[0],React.createElement("br",{key:"br"}),E.title[1]]),React.createElement("p",{key:"p",style:{margin:0,fontSize:"15px",lineHeight:1.6,color:"var(--sb-text-6)",maxWidth:"380px"}},E.desc)]),React.createElement("div",{key:"tags",style:{display:"flex",flexWrap:"wrap",gap:"8px"}},E.tags.map(b))]),M=E=>t?React.createElement("div",{key:"col",style:{display:"flex",alignItems:"center",gap:"16px",padding:"20px 22px"}},[React.createElement("span",{key:"n",style:{fontFamily:u,fontSize:"12px",fontWeight:600,color:"var(--sb-text-faint)"}},E.num),React.createElement("span",{key:"l",style:{fontSize:"16px",fontWeight:800,letterSpacing:"-0.2px",color:"var(--sb-text-4)"}},E.collapsed)]):React.createElement("div",{key:"col",style:{position:"absolute",inset:0,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"space-between",padding:"24px 0"}},[React.createElement("span",{key:"n",style:{fontFamily:u,fontSize:"12px",fontWeight:600,color:"var(--sb-text-faint)"}},E.num),React.createElement("span",{key:"l",style:{writingMode:"vertical-rl",transform:"rotate(180deg)",fontSize:"17px",fontWeight:800,letterSpacing:"-0.2px",color:"var(--sb-text-4)",whiteSpace:"nowrap"}},E.collapsed),p(E.icon,22,"var(--sb-text-faint)",1.8)]),F=m.map((E,_)=>{let A=s===_;return React.createElement("div",{key:_,onClick:()=>e(_),onMouseEnter:x=>{A||(x.currentTarget.style.filter="brightness(1.18)")},onMouseLeave:x=>{x.currentTarget.style.filter="none"},style:{flex:t?"none":A?6.2:1,minWidth:t?"auto":"72px",position:"relative",borderRadius:"18px",overflow:"hidden",cursor:"pointer",background:A?a:c,border:"1px solid "+(A?o:d),color:"var(--sb-text-7)",transition:"flex .46s cubic-bezier(.2,.7,.3,1), background .3s ease, border-color .3s ease, filter .2s ease"}},A?w(E):M(E))}),k=React.createElement("div",{key:"inner",style:{maxWidth:"1180px",margin:"0 auto",padding:t?"0 18px":"0 40px"}},[React.createElement("div",{key:"head",style:{display:"flex",alignItems:"flex-end",justifyContent:"space-between",gap:"24px",marginBottom:"28px"}},[React.createElement("div",{key:"titles"},[React.createElement("div",{key:"eyebrow",style:{fontFamily:u,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.4px",marginBottom:"12px"}},f("unique.eyebrow")),React.createElement("h2",{key:"h2",style:{margin:0,fontSize:t?"28px":"38px",fontWeight:800,letterSpacing:"-1.1px",lineHeight:1.05,color:"var(--sb-text-1)"}},f("unique.heading"))]),React.createElement("div",{key:"nav",style:{display:"flex",alignItems:"center",gap:"10px",flex:"none"}},[g("prev",()=>S(-1),'<path d="M15 6l-6 6 6 6"/>'),g("next",()=>S(1),'<path d="M9 6l6 6-6 6"/>')])]),React.createElement("div",{key:"accordion",style:{display:"flex",flexDirection:t?"column":"row",gap:t?"12px":"14px",height:t?"auto":"440px"}},F)]);return React.createElement("section",{style:{width:"100%",color:"var(--sb-text-2)",fontFamily:h,padding:t?"44px 0":"64px 0",background:"radial-gradient(1100px 700px at 18% 8%, rgba(var(--sb-orange-rgb), 0.05), transparent 60%), var(--sb-bg)"}},[React.createElement("style",{key:"kf",dangerouslySetInnerHTML:{__html:"@keyframes wuUp{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}"}}),k])};window.UniqueFeatureSlider=Fa;function Ka(){let[s,e]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches);React.useEffect(()=>{let w=window.matchMedia("(max-width:767px)"),M=()=>e(w.matches);return w.addEventListener?w.addEventListener("change",M):w.addListener(M),()=>{w.removeEventListener?w.removeEventListener("change",M):w.removeListener(M)}},[]);let t="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",r="'Manrope', system-ui, -apple-system, sans-serif",i=[{v:"v1.0",k:"r1",status:"released"},{v:"v1.5",k:"r2",status:"released"},{v:"v2.0",k:"r3",status:"released"},{v:"v3.0",k:"r4",status:"released"},{v:"v3.5",k:"r5",status:"released"},{v:"v4.5",k:"r6",status:"released"},{v:"v5.0",k:"r7",status:"released"},{v:"v5.5",k:"r8",status:"released"},{v:"v6.0",k:"r9",status:"current"},{v:"v6.5",k:"r10",status:"dev"},{v:"v7.0",k:"r11",status:"planned"},{v:"v7.5",k:"r12",status:"research"},{v:"v8.0",k:"r13",status:"research"}].map(w=>({...w,title:f(`roadmap.${w.k}.title`),sub:f(`roadmap.${w.k}.sub`),date:f(`roadmap.${w.k}.date`),features:Oe(`roadmap.${w.k}.features`)})),n={released:{solid:"var(--sb-green-solid)",line:"rgba(var(--sb-green-rgb), 0.32)"},current:{solid:"var(--sb-orange-solid)",line:"rgba(var(--sb-orange-rgb), 0.32)"},dev:{solid:"var(--sb-yellow-2-solid)",line:"rgba(var(--sb-ink), 0.08)"},planned:{solid:"var(--sb-text-7)",line:"rgba(var(--sb-ink), 0.08)"},research:{solid:"var(--sb-text-9)",line:"rgba(var(--sb-ink), 0.08)"}},[a,o]=React.useState({}),c=w=>a[w]===void 0?i[w].status==="current":a[w],d=w=>o(M=>({...M,[w]:!c(w)})),u=i.length,h=i.filter(w=>w.status==="released"||w.status==="current").length,m=u-h,p=(h/u*100).toFixed(1)+"%",[S,g]=f("roadmap.progress",{total:u}).split("{shipped}"),b=w=>w==="released"?React.createElement("div",{style:{position:"absolute",insetInlineStart:"13px",top:"16px",width:"28px",height:"28px",borderRadius:"50%",display:"grid",placeItems:"center",background:"linear-gradient(rgba(var(--sb-green-rgb), 0.16),rgba(var(--sb-green-rgb), 0.16)), var(--sb-bg)",border:"1px solid rgba(var(--sb-green-rgb), 0.4)",zIndex:2}},React.createElement("svg",{width:"15",height:"15",viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-green-solid)",strokeWidth:"2.4",strokeLinecap:"round",strokeLinejoin:"round"},React.createElement("path",{d:"M5 13l4 4 10-11"}))):w==="current"?React.createElement("div",{style:{position:"absolute",insetInlineStart:"13px",top:"16px",width:"28px",height:"28px",borderRadius:"50%",display:"grid",placeItems:"center",background:"linear-gradient(rgba(var(--sb-orange-rgb), 0.2),rgba(var(--sb-orange-rgb), 0.2)), var(--sb-bg)",border:"1px solid var(--sb-orange-solid)",zIndex:2,animation:"rmPulse 2.4s ease-out infinite"}},React.createElement("span",{style:{width:"9px",height:"9px",borderRadius:"50%",background:"var(--sb-orange-solid)"}})):w==="dev"?React.createElement("div",{style:{position:"absolute",insetInlineStart:"13px",top:"16px",width:"28px",height:"28px",borderRadius:"50%",display:"grid",placeItems:"center",background:"linear-gradient(rgba(var(--sb-yellow-2-rgb), 0.15),rgba(var(--sb-yellow-2-rgb), 0.15)), var(--sb-bg)",border:"1px solid rgba(var(--sb-yellow-2-rgb), 0.4)",zIndex:2}},React.createElement("svg",{width:"15",height:"15",viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-yellow-2-solid)",strokeWidth:"2.2",strokeLinecap:"round",strokeLinejoin:"round"},React.createElement("path",{d:"M12 3a9 9 0 1 0 9 9"}))):React.createElement("div",{style:{position:"absolute",insetInlineStart:"13px",top:"16px",width:"28px",height:"28px",borderRadius:"50%",display:"grid",placeItems:"center",background:"var(--sb-bg)",border:`1px ${w==="research"?"dashed":"solid"} rgba(var(--sb-ink), 0.18)`,zIndex:2}},React.createElement("span",{style:{width:"7px",height:"7px",borderRadius:"50%",background:n[w].solid}}));return React.createElement("section",{style:{width:"100%",color:"var(--sb-text-2)",fontFamily:r,padding:s?"48px 0":"64px 0",background:"radial-gradient(1200px 720px at 50% -8%, rgba(var(--sb-orange-rgb), 0.05), transparent 60%), var(--sb-bg)"}},React.createElement("style",{dangerouslySetInnerHTML:{__html:"@keyframes rmExp{from{opacity:0;transform:translateY(-4px)}to{opacity:1;transform:translateY(0)}}@keyframes rmPulse{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-orange-rgb), 0.18)}60%{box-shadow:0 0 0 9px rgba(var(--sb-orange-rgb), 0)}}"}}),React.createElement("div",{style:{maxWidth:"1040px",margin:"0 auto",padding:s?"0 18px":"0 40px"}},React.createElement("div",{style:{marginBottom:"30px"}},React.createElement("div",{style:{fontFamily:t,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.6px",marginBottom:"13px"}},f("roadmap.eyebrow")),React.createElement("h2",{style:{margin:"0 0 14px",fontSize:s?"27px":"34px",fontWeight:800,letterSpacing:"-1px",lineHeight:1.08,color:"var(--sb-text-1)"}},f("roadmap.heading")),React.createElement("p",{style:{margin:0,fontSize:"15.5px",lineHeight:1.6,color:"var(--sb-text-7)",maxWidth:"660px"}},f("roadmap.subheading"))),React.createElement("div",{style:{display:"flex",alignItems:"center",gap:"18px",flexWrap:"wrap",padding:"18px 22px",borderRadius:"14px",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.06)",marginBottom:"36px"}},React.createElement("div",{style:{fontFamily:t,fontSize:"12px",fontWeight:600,color:"var(--sb-text-2)",whiteSpace:"nowrap"}},S,React.createElement("span",{style:{color:"var(--sb-green)"}},h),g),React.createElement("div",{style:{flex:"1 1 240px",minWidth:"200px",height:"8px",borderRadius:"99px",background:"var(--sb-bg-deep)",border:"1px solid rgba(var(--sb-ink), 0.06)",overflow:"hidden"}},React.createElement("div",{style:{height:"100%",width:p,background:"linear-gradient(90deg, var(--sb-green), var(--sb-orange))"}})),React.createElement("div",{style:{fontFamily:t,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"0.8px",whiteSpace:"nowrap"}},f("roadmap.upcoming",{upcoming:m}))),i.map((w,M)=>{let F=n[w.status],k=c(M),E=M<u-1;return React.createElement("div",{key:M,style:{position:"relative",display:"grid",gridTemplateColumns:"54px 1fr",marginBottom:"16px"}},React.createElement("div",{style:{position:"relative"}},E&&React.createElement("div",{style:{position:"absolute",insetInlineStart:"26px",top:"30px",height:"calc(100% + 16px)",width:"2px",background:F.line}}),b(w.status)),React.createElement("div",{style:{borderRadius:"16px",background:"var(--sb-surface)",border:`1px solid ${w.status==="current"?"rgba(var(--sb-orange-rgb), 0.28)":"rgba(var(--sb-ink), 0.06)"}`,overflow:"hidden"}},React.createElement("div",{onClick:()=>d(M),style:{display:"flex",alignItems:"center",gap:s?"11px":"16px",padding:s?"16px 16px":"18px 22px",cursor:"pointer",transition:"background .18s ease"},onMouseEnter:_=>{_.currentTarget.style.background="rgba(var(--sb-ink), 0.018)"},onMouseLeave:_=>{_.currentTarget.style.background="transparent"}},React.createElement("div",{style:{flex:"none",minWidth:"52px",textAlign:"center",padding:"7px 10px",borderRadius:"9px",background:"var(--sb-bg-deep)",border:"1px solid rgba(var(--sb-ink), 0.07)",fontFamily:t,fontSize:"13px",fontWeight:700,color:w.status==="current"?"var(--sb-orange)":"var(--sb-text-4)"}},w.v),React.createElement("div",{style:{flex:1,minWidth:0}},React.createElement("div",{style:{fontSize:s?"15.5px":"17px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},w.title),!s&&React.createElement("div",{style:{marginTop:"3px",fontSize:"13.5px",color:"var(--sb-text-6)"}},w.sub)),React.createElement("div",{style:{flex:"none",display:"flex",alignItems:"center",gap:s?"8px":"14px"}},!s&&React.createElement("span",{style:{fontFamily:t,fontSize:"12px",fontWeight:500,color:"var(--sb-text-7)",whiteSpace:"nowrap",minWidth:"74px",textAlign:"end"}},w.date),React.createElement("span",{style:{color:"var(--sb-text-9)",display:"inline-flex",transition:"transform .22s cubic-bezier(.2,.7,.3,1)",transform:k?"rotate(180deg)":"rotate(0deg)"}},React.createElement("svg",{width:"17",height:"17",viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:"2.1",strokeLinecap:"round",strokeLinejoin:"round"},React.createElement("path",{d:"M6 9l6 6 6-6"}))))),k&&React.createElement("div",{style:{padding:"4px 22px 22px 22px",animation:"rmExp .24s cubic-bezier(.2,.7,.3,1)"}},React.createElement("div",{style:{fontFamily:t,fontSize:"10px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"1.2px",marginBottom:"14px",paddingTop:"14px",borderTop:"1px solid rgba(var(--sb-ink), 0.05)"}},f("roadmap.keyFeatures")),React.createElement("div",{style:{display:"grid",gridTemplateColumns:s?"1fr":"1fr 1fr",gap:"11px 28px"}},w.features.map((_,A)=>React.createElement("div",{key:A,style:{display:"flex",alignItems:"flex-start",gap:"10px"}},React.createElement("span",{style:{flex:"none",marginTop:"7px",width:"5px",height:"5px",borderRadius:"50%",background:F.solid}}),React.createElement("span",{style:{fontSize:"13.5px",lineHeight:1.5,color:"var(--sb-text-4)"}},_)))))))})))}window.Roadmap=Ka;var Et=[{id:"usdt",tab:"USDT",coin:"Tether USDT",badge:"trx",address:"TMopDoco5EwJB1QvQYsuhjUJdMvzPXNQYu"},{id:"btc",tab:"BTC",coin:"Bitcoin",badge:null,address:"bc1qnmc2xl7p0pxcy6lzf2tyf52wnslgzkgaq9kxpr"},{id:"eth",tab:"ETH",coin:"Ethereum",badge:null,address:"0xCDfDfaD4EC1fa657C3d2A7EFabc1cb751bf1dAf7"}],jr=s=>`/assets/crypto/${s}.svg`,Wr="__sbScrollToDonate",Yr="securebit:scroll-to-donate",Na=5e3,Xr=()=>{let[s,e]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches),[t,r]=React.useState(0),[i,n]=React.useState(!1),[a,o]=React.useState(0),c=React.useRef(null),d=React.useRef(null),u=React.useRef(null);React.useEffect(()=>{let K=window.matchMedia("(max-width:767px)"),O=()=>e(K.matches);return K.addEventListener?K.addEventListener("change",O):K.addListener(O),()=>{K.removeEventListener?K.removeEventListener("change",O):K.removeListener(O),clearTimeout(u.current)}},[]),React.useEffect(()=>{let K=null,O=()=>{let Q=window[Wr];window[Wr]=0,!(!Q||Date.now()-Q>Na)&&(clearTimeout(K),K=setTimeout(()=>{let J=d.current;if(!J)return;let ge=window.matchMedia("(prefers-reduced-motion: reduce)").matches;J.scrollIntoView({behavior:ge?"auto":"smooth",block:"center"})},350))};return O(),document.addEventListener(Yr,O),()=>{document.removeEventListener(Yr,O),clearTimeout(K)}},[]);let h=Et[t],m=K=>{let O=(K+Et.length)%Et.length;O!==t&&(o(K>t?1:-1),r(O),n(!1))},p=K=>{let O=K.touches[0];c.current={x:O.clientX,y:O.clientY}},S=K=>{let O=c.current;if(c.current=null,!O)return;let Q=K.changedTouches[0],J=Q.clientX-O.x,ge=Q.clientY-O.y;if(Math.abs(J)<40||Math.abs(J)<Math.abs(ge)*1.5)return;let G=Pt()?J>0:J<0;m(t+(G?1:-1))},g=async()=>{try{await navigator.clipboard.writeText(h.address)}catch{let O=document.createElement("textarea");O.value=h.address,document.body.appendChild(O),O.select();try{document.execCommand("copy")}catch{}O.remove()}n(!0),clearTimeout(u.current),u.current=setTimeout(()=>n(!1),1800)},b="'Manrope', system-ui, -apple-system, sans-serif",w="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",M={borderRadius:"14px",background:"var(--sb-bg)",border:"1px solid rgba(var(--sb-ink), 0.07)"},F=React.createElement("div",{key:"tabs",role:"tablist",style:{...M,display:"flex",gap:"6px",padding:"5px",marginBottom:"14px"}},Et.map((K,O)=>{let Q=O===t;return React.createElement("button",{key:K.id,type:"button",role:"tab","aria-selected":Q,onClick:()=>m(O),style:{flex:"1 1 0",minWidth:0,display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"9px",padding:"11px 10px",borderRadius:"10px",border:"none",cursor:"pointer",fontFamily:b,fontSize:"14px",fontWeight:700,transition:"all .18s",background:Q?"var(--sb-surface-2)":"transparent",color:Q?"var(--sb-text-1)":"var(--sb-text-7)",boxShadow:Q?"inset 0 0 0 1px rgba(var(--sb-orange-rgb), 0.45)":"none"}},[React.createElement("span",{key:"ic",style:{position:"relative",flex:"none",width:"22px",height:"22px"}},[React.createElement("img",{key:"logo",src:jr(K.id),alt:"",width:22,height:22,style:{display:"block",width:"22px",height:"22px"}}),K.badge&&React.createElement("img",{key:"badge",src:jr(K.badge),alt:"",width:11,height:11,style:{position:"absolute",right:"-3px",bottom:"-3px",width:"11px",height:"11px",borderRadius:"50%",border:"1.5px solid var(--sb-surface-2)",background:"var(--sb-surface-2)"}})]),K.tab])})),k=React.createElement("button",{key:"copy",type:"button",onClick:g,style:{flex:"none",display:"inline-flex",alignItems:"center",gap:"8px",padding:"12px 16px",borderRadius:"10px",fontFamily:b,fontSize:"13.5px",fontWeight:700,cursor:"pointer",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-2)",border:"1px solid rgba(var(--sb-ink), 0.1)",transition:"all .18s"},onMouseEnter:K=>{K.currentTarget.style.background="rgba(var(--sb-ink), 0.09)"},onMouseLeave:K=>{K.currentTarget.style.background="rgba(var(--sb-ink), 0.05)"}},[i?React.createElement("svg",{key:"ok",width:15,height:15,viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-green-solid)",strokeWidth:2.4,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:'<path d="M5 12.5l4.2 4.2L19 6.5"/>'}}):React.createElement("svg",{key:"cp",width:15,height:15,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:'<rect x="9" y="9" width="12" height="12" rx="2.5"/><path d="M5 15V5a2 2 0 0 1 2-2h8"/>'}}),React.createElement("span",{key:"l","aria-live":"polite"},i?f("donate.copied"):f("donate.copy"))]),E=React.createElement("div",{key:"addr",style:{...M,display:"flex",alignItems:"center",gap:"12px",padding:"8px 8px 8px 18px"}},[React.createElement("div",{key:"tx",style:{flex:1,minWidth:0}},[React.createElement("div",{key:"net",style:{fontSize:"11.5px",fontWeight:600,color:"var(--sb-text-9)",marginBottom:"2px"}},f(`donate.net.${h.id}`)),React.createElement("div",{key:"a",title:h.address,dir:"ltr",style:{fontFamily:w,fontSize:"14px",color:"var(--sb-text-2)",letterSpacing:"0.3px",overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},h.address.slice(0,8)+"\u2026"+h.address.slice(-8))]),k]),_=React.createElement("div",{key:"warn",style:{display:"flex",alignItems:"center",gap:"7px",marginTop:"14px",fontSize:"12px",color:"var(--sb-text-9)"}},[React.createElement("svg",{key:"i",width:13,height:13,viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-orange-solid)",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round",style:{flex:"none"},dangerouslySetInnerHTML:{__html:'<path d="M12 3l9.5 17h-19z"/><path d="M12 10v4M12 17.5v.01"/>'}}),f(`donate.warn.${h.id}`)]),A=React.createElement("div",{key:"left",style:{flex:"1 1 440px",minWidth:0,padding:s?"32px 22px 8px":"44px",display:"flex",flexDirection:"column"}},[React.createElement("div",{key:"eyebrow",style:{fontFamily:w,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1.8px",marginBottom:"14px"}},f("donate.eyebrow")),React.createElement("h2",{key:"title",style:{margin:"0 0 10px",fontSize:s?"28px":"34px",fontWeight:800,letterSpacing:"-1px",lineHeight:1.08,color:"var(--sb-text-1)"}},f("donate.title")),React.createElement("p",{key:"desc",style:{margin:"0 0 30px",fontSize:"15px",lineHeight:1.6,color:"var(--sb-text-7)"}},f("donate.description")),F,E,_]),x=Pt()?-1:1,T=a===0?"none":`${a*x>0?"cdInEnd":"cdInStart"} .28s cubic-bezier(.2,.7,.3,1)`,Y=React.createElement("div",{key:"plate",onTouchStart:p,onTouchEnd:S,style:{position:"relative",width:"232px",height:"232px",padding:"14px",borderRadius:"20px",background:"#fff",boxShadow:"0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))",border:"1px solid rgba(var(--sb-ink), 0.07)",overflow:"hidden",touchAction:"pan-y",userSelect:"none"}},React.createElement("div",{key:h.id,style:{position:"relative",width:"100%",height:"100%",animation:T}},[React.createElement("img",{key:"qr",src:`/assets/crypto/qr-${h.id}.svg`,alt:f("donate.qrAlt",{coin:h.coin}),width:204,height:204,draggable:!1,style:{display:"block",width:"100%",height:"100%",imageRendering:"pixelated"}}),React.createElement("div",{key:"logo",style:{position:"absolute",left:"50%",top:"50%",transform:"translate(-50%,-50%)",width:"48px",height:"48px",borderRadius:"12px",background:"#fff",display:"grid",placeItems:"center"}},React.createElement("img",{src:jr(h.id),alt:"",width:34,height:34,draggable:!1,style:{display:"block",width:"34px",height:"34px"}}))])),B=s&&React.createElement("div",{key:"dots","aria-hidden":!0,style:{display:"flex",justifyContent:"center",gap:"7px",marginTop:"18px"}},Et.map((K,O)=>React.createElement("span",{key:K.id,style:{width:O===t?"18px":"7px",height:"7px",borderRadius:"4px",transition:"all .25s",background:O===t?"var(--sb-orange-solid)":"rgba(var(--sb-ink), 0.16)"}}))),R=React.createElement("div",{key:"right",style:{flex:"0 0 auto",minWidth:s?0:"300px",margin:"0 auto",padding:s?"24px 22px 32px":"44px",display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center"}},[Y,B]),ue=React.createElement("div",{key:"card",style:{width:"100%",maxWidth:"1000px",position:"relative",overflow:"hidden",borderRadius:"24px",background:"radial-gradient(520px 420px at 100% 50%, rgba(var(--sb-orange-rgb), 0.09), transparent 70%), var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.07)",display:"flex",flexWrap:"wrap",alignItems:"stretch",animation:"cdUp .45s cubic-bezier(.2,.7,.3,1)"}},[A,R]);return React.createElement("section",{id:"donate",ref:d,style:{width:"100%",display:"flex",alignItems:"center",justifyContent:"center",background:"var(--sb-bg)",color:"var(--sb-text-2)",fontFamily:b,padding:s?"48px 18px":"64px 32px"}},[React.createElement("style",{key:"kf",dangerouslySetInnerHTML:{__html:'@keyframes cdUp{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}@keyframes cdInEnd{from{opacity:0;transform:translateX(36px)}to{opacity:1;transform:none}}@keyframes cdInStart{from{opacity:0;transform:translateX(-36px)}to{opacity:1;transform:none}}@media (prefers-reduced-motion: reduce){#donate [style*="cdIn"]{animation:none!important}}'}}),ue])};Xr.SCROLL_FLAG=Wr;Xr.SCROLL_EVENT=Yr;window.DonateCrypto=Xr;var Oa=()=>{let[s,e]=React.useState(typeof window<"u"&&window.matchMedia("(max-width:767px)").matches);React.useEffect(()=>{let u=window.matchMedia("(max-width:767px)"),h=()=>e(u.matches);return u.addEventListener?u.addEventListener("change",h):u.addListener(h),()=>{u.removeEventListener?u.removeEventListener("change",h):u.removeListener(h)}},[]);let t="var(--sb-orange)",r="var(--sb-orange-solid)",i="'Manrope', system-ui, -apple-system, sans-serif",n="https://github.com/SecureBitChat/securebit-chat/",a="mailto:lockbitchat@tutanota.com",o=React.createElement("a",{key:"gh",href:n,target:"_blank",rel:"noopener noreferrer",style:{display:"inline-flex",alignItems:"center",gap:"11px",padding:"15px 26px",borderRadius:"13px",background:r,color:"var(--sb-on-accent)",textDecoration:"none",fontSize:"15.5px",fontWeight:700,letterSpacing:"-0.2px",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)",whiteSpace:"nowrap",transition:"all .2s cubic-bezier(.2,.7,.3,1)"},onMouseEnter:u=>{u.currentTarget.style.background="var(--sb-orange-hi)",u.currentTarget.style.transform="translateY(-2px)"},onMouseLeave:u=>{u.currentTarget.style.background=r,u.currentTarget.style.transform="none"}},[React.createElement("svg",{key:"i",width:20,height:20,viewBox:"0 0 24 24",fill:"currentColor",dangerouslySetInnerHTML:{__html:'<path d="M12 2C6.48 2 2 6.58 2 12.26c0 4.5 2.87 8.32 6.84 9.67.5.09.68-.22.68-.49 0-.24-.01-.87-.01-1.71-2.78.62-3.37-1.36-3.37-1.36-.46-1.18-1.11-1.5-1.11-1.5-.91-.63.07-.62.07-.62 1 .07 1.53 1.05 1.53 1.05.89 1.56 2.34 1.11 2.91.85.09-.66.35-1.11.63-1.36-2.22-.26-4.55-1.14-4.55-5.07 0-1.12.39-2.03 1.03-2.75-.1-.26-.45-1.3.1-2.71 0 0 .84-.27 2.75 1.05a9.3 9.3 0 0 1 5 0c1.91-1.32 2.75-1.05 2.75-1.05.55 1.41.2 2.45.1 2.71.64.72 1.03 1.63 1.03 2.75 0 3.94-2.34 4.81-4.57 5.06.36.32.68.94.68 1.9 0 1.37-.01 2.47-.01 2.81 0 .27.18.59.69.49A10.02 10.02 0 0 0 22 12.26C22 6.58 17.52 2 12 2z"/>'}}),f("community.github")]),c=React.createElement("a",{key:"fb",href:a,rel:"noopener noreferrer",style:{display:"inline-flex",alignItems:"center",gap:"11px",padding:"15px 26px",borderRadius:"13px",background:"rgba(var(--sb-ink), 0.03)",color:"var(--sb-text-2)",textDecoration:"none",fontSize:"15.5px",fontWeight:700,letterSpacing:"-0.2px",border:"1px solid rgba(var(--sb-ink), 0.1)",whiteSpace:"nowrap",transition:"all .2s cubic-bezier(.2,.7,.3,1)"},onMouseEnter:u=>{u.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.24)",u.currentTarget.style.background="rgba(var(--sb-ink), 0.06)"},onMouseLeave:u=>{u.currentTarget.style.borderColor="rgba(var(--sb-ink), 0.1)",u.currentTarget.style.background="rgba(var(--sb-ink), 0.03)"}},[React.createElement("svg",{key:"i",width:20,height:20,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.9,strokeLinecap:"round",strokeLinejoin:"round",dangerouslySetInnerHTML:{__html:'<path d="M21 11.5a8 8 0 0 1-11.6 7.1L4 20l1.4-5.3A8 8 0 1 1 21 11.5z"/><path d="M8.5 11h7M8.5 14h4.5"/>'}}),f("community.feedback")]),d=React.createElement("div",{key:"card",style:{position:"relative",overflow:"hidden",maxWidth:"860px",width:"100%",borderRadius:"24px",background:"radial-gradient(700px 360px at 50% 0%, rgba(var(--sb-orange-rgb), 0.1), transparent 65%), var(--sb-bg)",border:"1px solid rgba(var(--sb-ink), 0.07)",padding:s?"40px 24px 36px":"56px 56px 48px",textAlign:"center",boxShadow:"0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))"}},[React.createElement("div",{key:"hairline",style:{position:"absolute",top:0,left:"50%",transform:"translateX(-50%)",width:"180px",height:"1px",background:"linear-gradient(90deg, transparent, rgba(var(--sb-orange-rgb), 0.7), transparent)"}}),React.createElement("img",{key:"icon",src:"/logo/securebit-mark.svg",alt:"SecureBit",style:{display:"inline-block",width:"64px",height:"64px",objectFit:"contain",marginBottom:"22px",animation:"ccUp .4s cubic-bezier(.2,.7,.3,1)"}}),React.createElement("h2",{key:"title",style:{margin:"0 0 16px",fontSize:s?"28px":"36px",fontWeight:800,letterSpacing:"-1px",lineHeight:1.05,color:"var(--sb-text-1)"}},f("community.title")),React.createElement("p",{key:"desc",style:{margin:"0 auto 32px",maxWidth:"560px",fontSize:"16px",lineHeight:1.65,color:"var(--sb-text-6)"}},f("community.description")),React.createElement("div",{key:"btns",style:{display:"flex",gap:"14px",justifyContent:"center",flexWrap:"wrap"}},[o,c]),React.createElement("div",{key:"snap",style:{display:"flex",justifyContent:s?"center":"flex-end",marginTop:"28px"}},React.createElement("a",{href:"https://snapcraft.io/securebit-chat",target:"_blank",rel:"noopener noreferrer","aria-label":"Get it from the Snap Store",style:{display:"inline-flex",opacity:.9,transition:"opacity .2s"},onMouseEnter:u=>{u.currentTarget.style.opacity=1},onMouseLeave:u=>{u.currentTarget.style.opacity=.9}},React.createElement("img",{src:"/assets/badges/snap-store.svg",alt:"Get it from the Snap Store",width:182,height:56,loading:"lazy",style:{display:"block"}})))]);return React.createElement("section",{style:{width:"100%",display:"flex",alignItems:"center",justifyContent:"center",background:"var(--sb-bg)",fontFamily:i,padding:s?"48px 18px":"64px 48px"}},[React.createElement("style",{key:"kf",dangerouslySetInnerHTML:{__html:"@keyframes ccUp{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:translateY(0)}}"}}),d])};window.CommunityCTA=Oa;var Ua=({webrtcManager:s,isConnected:e,pendingIncomingFiles:t=[],onIncomingDecision:r,showDropzone:i=!0})=>{let[n,a]=React.useState(!1),[o,c]=React.useState({sending:[],receiving:[]}),d=React.useRef(null);React.useEffect(()=>{if(!e||!s)return;let A=setInterval(()=>{let x=s.getFileTransfers();c(x)},500);return()=>clearInterval(A)},[e,s]),React.useEffect(()=>{e||c({sending:[],receiving:[]})},[e]);let u=async _=>{if(!e||!s){alert("\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u043D\u0435 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u043E. \u0421\u043D\u0430\u0447\u0430\u043B\u0430 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u0438\u0442\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435.");return}if(!s.isConnected()||!s.isVerified){alert("\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u043D\u0435 \u0433\u043E\u0442\u043E\u0432\u043E \u0434\u043B\u044F \u043F\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043B\u043E\u0432. \u0414\u043E\u0436\u0434\u0438\u0442\u0435\u0441\u044C \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u044F.");return}for(let A of _)try{let x=s.validateFile(A);if(!x.isValid){let T=x.errors.join(". ");alert(`\u0424\u0430\u0439\u043B ${A.name} \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u0431\u044B\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D: ${T}`);continue}await s.sendFile(A)}catch(x){x.message.includes(f("file.notReady"))?alert(`\u0424\u0430\u0439\u043B ${A.name} \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u0431\u044B\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D \u0441\u0435\u0439\u0447\u0430\u0441. \u041F\u0440\u043E\u0432\u0435\u0440\u044C\u0442\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0438 \u043F\u043E\u043F\u0440\u043E\u0431\u0443\u0439\u0442\u0435 \u0441\u043D\u043E\u0432\u0430.`):x.message.includes(f("file.tooLarge"))||x.message.includes("exceeds maximum")?alert(`\u0424\u0430\u0439\u043B ${A.name} \u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0431\u043E\u043B\u044C\u0448\u043E\u0439: ${x.message}`):x.message.includes(f("file.maxConcurrent"))?alert("\u0414\u043E\u0441\u0442\u0438\u0433\u043D\u0443\u0442 \u043B\u0438\u043C\u0438\u0442 \u043E\u0434\u043D\u043E\u0432\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0445 \u043F\u0435\u0440\u0435\u0434\u0430\u0447. \u0414\u043E\u0436\u0434\u0438\u0442\u0435\u0441\u044C \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0442\u0435\u043A\u0443\u0449\u0438\u0445 \u043F\u0435\u0440\u0435\u0434\u0430\u0447."):x.message.includes(f("file.typeNotAllowed"))?alert(`\u0422\u0438\u043F \u0444\u0430\u0439\u043B\u0430 ${A.name} \u043D\u0435 \u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044F: ${x.message}`):alert(`\u041E\u0448\u0438\u0431\u043A\u0430 \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u0438 \u0444\u0430\u0439\u043B\u0430 ${A.name}: ${x.message}`)}},h=_=>{_.preventDefault(),a(!1);let A=Array.from(_.dataTransfer.files);u(A)},m=_=>{_.preventDefault(),a(!0)},p=_=>{_.preventDefault(),a(!1)},S=_=>{let A=Array.from(_.target.files);u(A),_.target.value=""},g=_=>{if(_===0)return"0 B";let A=1024,x=["B","KB","MB","GB"],T=Math.floor(Math.log(_)/Math.log(A));return parseFloat((_/Math.pow(A,T)).toFixed(2))+" "+x[T]},b=_=>{switch(_){case"metadata_sent":case"preparing":return"fas fa-cog fa-spin";case"transmitting":case"receiving":return"fas fa-exchange-alt fa-pulse";case"assembling":return"fas fa-puzzle-piece fa-pulse";case"completed":return"fas fa-check text-green-400";case"failed":return"fas fa-times text-red-400";default:return"fas fa-circle"}},w=_=>{switch(_){case"metadata_sent":return"\u041F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043A\u0430...";case"transmitting":return"\u041E\u0442\u043F\u0440\u0430\u0432\u043A\u0430...";case"receiving":return"\u041F\u043E\u043B\u0443\u0447\u0435\u043D\u0438\u0435...";case"assembling":return"\u0421\u0431\u043E\u0440\u043A\u0430 \u0444\u0430\u0439\u043B\u0430...";case"completed":return"\u0417\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u043E";case"failed":return"\u041E\u0448\u0438\u0431\u043A\u0430";default:return _}},M=(_,A)=>{let x=_.totalChunks||0,T=_.transferredChunks||0,Y=_.status==="completed",B=x>0?Math.min(x,32):24,R;return Y?R=B:x>0?R=Math.floor(T/x*B):R=Math.floor((_.progress||0)/100*B),R=Math.max(0,Math.min(B,R)),React.createElement("div",{key:"progress"},[React.createElement("div",{key:"squares",style:{display:"flex",flexWrap:"wrap",gap:"3px",marginBottom:"7px"}},Array.from({length:B},(ue,K)=>React.createElement("div",{key:K,style:{width:"11px",height:"11px",borderRadius:"2px",background:K<R?A:"rgba(var(--sb-ink), 0.07)",border:"1px solid "+(K<R?"transparent":"rgba(var(--sb-ink), 0.05)"),boxShadow:K<R?`0 0 5px ${A}55`:"none",transition:"background .2s ease, box-shadow .2s ease"}}))),React.createElement("div",{key:"text",style:{display:"flex",alignItems:"center",justifyContent:"space-between",fontSize:"11.5px",color:"var(--sb-text-7)"}},[React.createElement("span",{key:"status",style:{display:"inline-flex",alignItems:"center",gap:"5px"}},[React.createElement("i",{key:"icon",className:b(_.status)}),w(_.status)]),React.createElement("span",{key:"count",style:{fontFamily:"'JetBrains Mono', ui-monospace, monospace",color:F(_)?A:"var(--sb-text-7)"}},x>0?`${Math.min(T,x)} / ${x} chunks`:`${(_.progress||0).toFixed(0)}%`)])])},F=_=>_.status==="completed",k=async(_,A)=>{typeof r=="function"&&await r(_,A),c(s.getFileTransfers())};return e?s&&s.isConnected()&&s.isVerified?React.createElement("div",{className:"file-transfer-component"},[i&&React.createElement("div",{key:"drop-zone",onDrop:h,onDragOver:m,onDragLeave:p,style:{position:"relative",border:"1.5px dashed "+(n?"rgba(var(--sb-orange-rgb), 0.7)":"rgba(var(--sb-ink), 0.14)"),borderRadius:"14px",background:n?"rgba(var(--sb-orange-rgb), 0.07)":"var(--sb-surface)",padding:"24px 22px",textAlign:"center",transition:"all .15s"}},[React.createElement("div",{key:"icon-box",style:{width:"42px",height:"42px",margin:"0 auto 10px",borderRadius:"12px",display:"grid",placeItems:"center",background:"rgba(var(--sb-ink), 0.04)",border:"1px solid rgba(var(--sb-ink), 0.08)"}},React.createElement("i",{className:"fas fa-arrow-up-from-bracket",style:{color:"var(--sb-text-6)",fontSize:"18px"}})),React.createElement("div",{key:"title",style:{fontSize:"14px",fontWeight:700,color:"var(--sb-text-2)"}},f("file.drop")),React.createElement("div",{key:"sub",style:{fontSize:"12px",color:"var(--sb-text-8)",marginTop:"4px"}},f("file.dropHint")),React.createElement("button",{key:"browse",type:"button",onClick:()=>d.current?.click(),className:"sb-send",style:{marginTop:"14px",display:"inline-flex",alignItems:"center",gap:"7px",padding:"9px 16px",borderRadius:"9px",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"inherit",fontSize:"13px",fontWeight:700,cursor:"pointer"}},[React.createElement("i",{key:"i",className:"fas fa-folder-open",style:{fontSize:"13px"}}),f("file.browse")])]),i&&React.createElement("input",{key:"file-input",ref:d,type:"file",multiple:!0,className:"hidden",onChange:S}),t.length>0&&React.createElement("div",{key:"incoming-consent",className:"mt-4 space-y-2"},t.map(_=>React.createElement("div",{key:_.fileId,style:{borderRadius:"12px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",padding:"12px 14px"}},[React.createElement("div",{key:"info",style:{marginBottom:"12px",display:"flex",alignItems:"center",gap:"11px"}},[React.createElement("div",{key:"ic",style:{flex:"none",width:"34px",height:"34px",borderRadius:"9px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.22)"}},React.createElement("i",{className:"fas fa-file-arrow-down",style:{color:"var(--sb-orange)",fontSize:"15px"}})),React.createElement("div",{key:"text",style:{minWidth:0}},[React.createElement("div",{key:"title",style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-2)"}},f("file.incoming")),React.createElement("div",{key:"meta",style:{fontSize:"11.5px",color:"var(--sb-text-8)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},`${_.fileName} \xB7 ${g(_.fileSize)} \xB7 ${_.mimeType}`)])]),React.createElement("div",{key:"actions",style:{display:"flex",gap:"8px"}},[React.createElement("button",{key:"accept",onClick:()=>k(_.fileId,!0),style:{display:"inline-flex",alignItems:"center",gap:"6px",borderRadius:"8px",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",padding:"8px 14px",fontSize:"13px",fontWeight:700,cursor:"pointer"}},[React.createElement("i",{key:"i",className:"fas fa-check",style:{fontSize:"12px"}}),f("file.accept")]),React.createElement("button",{key:"reject",onClick:()=>k(_.fileId,!1),style:{display:"inline-flex",alignItems:"center",gap:"6px",borderRadius:"8px",border:"1px solid rgba(var(--sb-red-rgb), 0.3)",background:"rgba(var(--sb-red-rgb), 0.08)",color:"var(--sb-red)",padding:"8px 14px",fontSize:"13px",fontWeight:600,cursor:"pointer"}},[React.createElement("i",{key:"i",className:"fas fa-xmark",style:{fontSize:"12px"}}),f("file.reject")])])]))),(o.sending.length>0||o.receiving.length>0)&&React.createElement("div",{key:"transfers",className:"active-transfers mt-4"},[React.createElement("h4",{key:"title",style:{display:"flex",alignItems:"center",gap:"8px",fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-7)",marginBottom:"10px"}},[React.createElement("i",{key:"icon",className:"fas fa-right-left",style:{fontSize:"12px"}}),f("file.title")]),...o.sending.map(_=>React.createElement("div",{key:`send-${_.fileId}`,style:{borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",padding:"12px",marginBottom:"8px"}},[React.createElement("div",{key:"header",className:"flex items-center justify-between mb-2"},[React.createElement("div",{key:"info",className:"flex items-center"},[React.createElement("i",{key:"icon",className:"fas fa-arrow-up",style:{color:"var(--sb-orange)",fontSize:"13px",marginInlineEnd:"8px"}}),React.createElement("span",{key:"name",className:"font-medium text-sm",style:{color:"var(--sb-text-2)"}},_.fileName),React.createElement("span",{key:"size",className:"text-xs ms-2",style:{color:"var(--sb-text-8)"}},g(_.fileSize))]),React.createElement("button",{key:"cancel",onClick:()=>s.cancelFileTransfer(_.fileId),className:"text-red-400 hover:text-red-300 text-xs"},[React.createElement("i",{className:"fas fa-times"})])]),M(_,"var(--sb-orange)")])),...o.receiving.map(_=>React.createElement("div",{key:`recv-${_.fileId}`,style:{borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",padding:"12px",marginBottom:"8px"}},[React.createElement("div",{key:"header",className:"flex items-center justify-between mb-2"},[React.createElement("div",{key:"info",className:"flex items-center"},[React.createElement("i",{key:"icon",className:"fas fa-arrow-down",style:{color:"var(--sb-green)",fontSize:"13px",marginInlineEnd:"8px"}}),React.createElement("span",{key:"name",className:"font-medium text-sm",style:{color:"var(--sb-text-2)"}},_.fileName),React.createElement("span",{key:"size",className:"text-xs ms-2",style:{color:"var(--sb-text-8)"}},g(_.fileSize))]),React.createElement("div",{key:"actions",className:"flex items-center space-x-2"},[_.status==="completed"?React.createElement("button",{key:"download",className:"text-green-400 hover:text-green-300 text-xs flex items-center",onClick:async()=>{try{let A=await s.getReceivedFileObjectURL(_.fileId);if(!A){alert(f("file.gone"));return}let x=document.createElement("a");x.href=A,x.download=_.fileName||"file",x.click(),setTimeout(()=>s.revokeReceivedFileObjectURL(A),1e4)}catch(A){alert(A.message||f("file.gone"))}}},[React.createElement("i",{key:"i",className:"fas fa-download me-1"}),f("file.download")]):null,React.createElement("button",{key:"cancel",onClick:()=>s.cancelFileTransfer(_.fileId),className:"text-red-400 hover:text-red-300 text-xs"},[React.createElement("i",{className:"fas fa-times"})])])]),M(_,"var(--sb-green)")]))])]):React.createElement("div",{className:"p-4 text-center text-yellow-600"},[React.createElement("i",{key:"icon",className:"fas fa-exclamation-triangle me-2"}),"\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0443\u0441\u0442\u0430\u043D\u0430\u0432\u043B\u0438\u0432\u0430\u0435\u0442\u0441\u044F... \u041F\u0435\u0440\u0435\u0434\u0430\u0447\u0430 \u0444\u0430\u0439\u043B\u043E\u0432 \u0431\u0443\u0434\u0435\u0442 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043F\u043E\u0441\u043B\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438."]):React.createElement("div",{className:"p-4 text-center text-muted"},f("file.needConnection"))};window.FileTransferComponent=Ua;var ze=Object.freeze({MAX_SERVERS:10,MAX_URLS_PER_SERVER:8,MAX_STRING_LENGTH:512}),Jo=Object.freeze(["stun","stuns","turn","turns"]),za=/^(stuns?|turns?):/i,Va=/^(\[[0-9a-f:]+\]|[a-z0-9.-]+)(:\d{1,5})?$/i,Ba=/^transport=(udp|tcp)$/i;function On(s){for(let e=0;e<s.length;e++){let t=s.charCodeAt(e);if(t<32||t===127)return!0}return!1}function Ha(s){if(typeof s!="string")return f("iceUrl.notString");let e=s.trim();if(!e)return f("iceUrl.empty");if(e.length>ze.MAX_STRING_LENGTH)return f("iceUrl.tooLong");if(On(e))return f("iceUrl.badChars");let t=e.match(za);if(!t)return f("iceUrl.badScheme");let r=e.slice(t[0].length),[i,n,...a]=r.split("?");return a.length>0?f("iceUrl.badQuery"):i?Va.test(i)?n!==void 0&&!Ba.test(n)?f("iceUrl.badTransport"):null:f("iceUrl.badHost"):f("iceUrl.noHost")}function Un(s){return typeof s=="string"&&/^turns?:/i.test(s.trim())}function Kn(s,e){return s==null||s===""?null:typeof s!="string"?`${e} must be a string`:s.length>ze.MAX_STRING_LENGTH?`${e} is too long`:On(s)?`${e} contains invalid characters`:null}function Nn(s){let e=[],t=[],r=[];return Array.isArray(s)?s.length===0?{servers:[],errors:[],warnings:[]}:s.length>ze.MAX_SERVERS?(e.push(f("iceErr.tooMany",{max:ze.MAX_SERVERS})),{servers:[],errors:e,warnings:t}):(s.forEach((i,n)=>{let a=`Server #${n+1}`;if(!i||typeof i!="object"){e.push(f("iceErr.invalidEntry",{label:a}));return}let o=Array.isArray(i.urls)?i.urls:[i.urls];if(o.length===0||o.length>ze.MAX_URLS_PER_SERVER){e.push(f("iceErr.urlCount",{label:a,max:ze.MAX_URLS_PER_SERVER}));return}let c=[],d=!1;for(let p of o){let S=Ha(p);if(S){e.push(`${a}: ${S}`);continue}let g=p.trim();c.push(g),Un(g)&&(d=!0)}if(c.length===0)return;let u=Kn(i.username,`${a} username`);u&&e.push(u);let h=Kn(i.credential,`${a} credential`);h&&e.push(h);let m={urls:c.length===1?c[0]:c};i.username&&(m.username=String(i.username)),i.credential&&(m.credential=String(i.credential)),d&&(!m.username||!m.credential)&&t.push(f("iceErr.turnCreds",{label:a})),r.push(m)}),{servers:r,errors:e,warnings:t}):{servers:[],errors:[f("iceErr.notArray")],warnings:[]}}function zn(s){if(typeof s!="string"||!s.trim())return{servers:[],errors:[],warnings:[]};let e=s.trim();if(e.startsWith("[")||e.startsWith("{")){let r;try{r=JSON.parse(e)}catch{return{servers:[],errors:[f("iceErr.invalidJson")],warnings:[]}}let i=Array.isArray(r)?r:[r];return Nn(i)}let t=e.split(`
 `).map(r=>r.trim()).filter(Boolean).map(r=>({urls:r}));return Nn(t)}function Vn(s){return Array.isArray(s)?s.some(e=>(Array.isArray(e?.urls)?e.urls:[e?.urls]).some(Un)):!1}var Ve=window.React,$a=["# One URL per line, e.g.:","stun:stun.example.com:3478","turn:turn.example.com:3478?transport=udp","","# Or paste JSON for servers with credentials:",'[{"urls":"turns:turn.example.com:5349","username":"user","credential":"secret"}]'].join(`
 `);async function Ga(s,e=6e3){let t={host:0,srflx:0,relay:0};if(typeof RTCPeerConnection>"u")return{...t,error:f("ice.errUnavailable")};let r;try{r=new RTCPeerConnection({iceServers:s})}catch(i){return{...t,error:i.message||f("ice.errInvalid")}}return new Promise(i=>{let n=!1,a=()=>{if(!n){n=!0,clearTimeout(o);try{r.close()}catch{}i(t)}},o=setTimeout(a,e);r.onicecandidate=c=>{if(!c.candidate){a();return}let d=c.candidate.candidate||"";/ typ host/.test(d)?t.host++:/ typ srflx/.test(d)?t.srflx++:/ typ relay/.test(d)&&t.relay++};try{r.createDataChannel("securebit-ice-test"),r.createOffer().then(c=>r.setLocalDescription(c)).catch(()=>a())}catch{a()}})}var qa=({isOpen:s,onClose:e,initial:t,hasSaved:r,onApply:i,onForget:n,embedded:a})=>{if(!s)return null;let[o,c]=Ve.useState(t?.useCustom||!1),[d,u]=Ve.useState(t?.serversText||""),[h,m]=Ve.useState(t?.privacyMode==="relay-only"),[p,S]=Ve.useState(t?.persisted||!1),[g,b]=Ve.useState("idle"),[w,M]=Ve.useState(null),F=o?zn(d):{servers:[],errors:[],warnings:[]},k=Vn(F.servers),E=!o||F.servers.length>0&&F.errors.length===0,_=async()=>{b("running"),M(null);let U=await Ga(F.servers);M(U),b("done")},A=()=>{E&&i({useCustom:o,servers:o?F.servers:[],privacyMode:h?"relay-only":"standard",serversText:d},p)},x=async()=>{n&&await n(),S(!1)},T=Ve.createElement,Y="var(--sb-orange)",B="var(--sb-green)",R="var(--sb-orange-solid)",ue="var(--sb-green-solid)",K="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",O=(U,I,D,N,z)=>T("button",{type:"button",onClick:I,style:Object.assign({width:"100%",textAlign:"start",display:"flex",alignItems:"flex-start",gap:"12px",padding:"14px 15px",borderRadius:"13px",border:`1px solid ${U?"rgba(var(--sb-orange-rgb), 0.45)":"rgba(var(--sb-ink), 0.07)"}`,background:U?"rgba(var(--sb-orange-rgb), 0.06)":"var(--sb-surface)",color:"inherit",fontFamily:"inherit",cursor:"pointer",transition:"all .15s",marginBottom:"10px"},z||{})},[T("span",{key:"ring",style:{flex:"none",width:"18px",height:"18px",marginTop:"1px",borderRadius:"50%",border:`1.5px solid ${U?Y:"rgba(var(--sb-ink), 0.22)"}`,display:"grid",placeItems:"center"}},T("span",{style:{width:"8px",height:"8px",borderRadius:"50%",background:U?R:"transparent"}})),T("span",{key:"tx",style:{flex:1}},[T("span",{key:"t",style:{display:"block",fontSize:"14px",fontWeight:700,color:"var(--sb-text-1)"}},D),T("span",{key:"d",style:{display:"block",fontSize:"12.5px",color:"var(--sb-text-7)",marginTop:"2px"}},N)])]),Q=(U,I,D,N,z,W)=>T("button",{type:"button",onClick:I,style:{width:"100%",textAlign:"start",display:"flex",alignItems:"flex-start",gap:"12px",padding:"14px 15px",borderRadius:"13px",border:`1px solid ${U?"rgba(var(--sb-green-rgb), 0.3)":"rgba(var(--sb-ink), 0.07)"}`,background:U?"rgba(var(--sb-green-rgb), 0.05)":"var(--sb-surface)",color:"inherit",fontFamily:"inherit",cursor:"pointer",transition:"all .15s",marginBottom:"10px"}},[T("span",{key:"tx",style:{flex:1}},[T("span",{key:"r1",style:{display:"flex",alignItems:"center",gap:"8px"}},[T("span",{key:"t",style:{fontSize:"14px",fontWeight:700,color:"var(--sb-text-1)"}},D),W&&T("span",{key:"b",style:{fontSize:"10px",fontWeight:700,color:B,padding:"2px 7px",borderRadius:"5px",background:"rgba(var(--sb-green-rgb), 0.1)",border:"1px solid rgba(var(--sb-green-rgb), 0.22)"}},W)]),T("span",{key:"d",style:{display:"block",fontSize:"12.5px",lineHeight:1.5,color:"var(--sb-text-7)",marginTop:"3px"}},N)]),T("span",{key:"tr",style:{flex:"none",width:"42px",height:"24px",borderRadius:"99px",background:U?z||ue:"rgba(var(--sb-ink), 0.08)",border:`1px solid ${U?z||B:"rgba(var(--sb-ink), 0.12)"}`,position:"relative",transition:"all .18s",marginTop:"1px"}},T("span",{style:{position:"absolute",top:"2px",insetInlineStart:"2px",width:"18px",height:"18px",borderRadius:"50%",background:"#fff",transform:U?`translateX(${18*$i()}px)`:"translateX(0)",transition:"transform .18s"}}))]),J=[];if(J.push(T("p",{key:"intro",style:{margin:"0 0 18px",fontSize:"13.5px",lineHeight:1.6,color:"var(--sb-text-6)"}},f("ice.intro"))),J.push(O(!o,()=>c(!1),f("ice.publicTitle"),f("ice.publicDesc"))),J.push(O(o,()=>c(!0),f("ice.customTitle"),f("ice.customDesc",{max:ze.MAX_SERVERS}),o?{marginBottom:"14px"}:null)),o){let U=[];U.push(T("div",{key:"ta",style:{borderRadius:"13px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-bg-deep)",overflow:"hidden",marginBottom:"12px"}},T("textarea",{dir:"ltr",value:d,onChange:D=>u(D.target.value),rows:5,spellCheck:!1,autoComplete:"off",placeholder:$a,style:{width:"100%",resize:"vertical",border:"none",outline:"none",background:"transparent",color:"var(--sb-text-code)",fontFamily:K,fontSize:"12px",lineHeight:1.65,padding:"13px 14px",minHeight:"104px"}}))),F.errors.length>0&&U.push(T("ul",{key:"err",style:{margin:"0 0 10px",paddingInlineStart:"18px",color:"var(--sb-red)",fontSize:"12.5px"}},F.errors.slice(0,6).map((D,N)=>T("li",{key:N},D)))),F.warnings.length>0&&U.push(T("ul",{key:"warn",style:{margin:"0 0 10px",paddingInlineStart:"18px",color:"var(--sb-yellow)",fontSize:"12.5px"}},F.warnings.slice(0,6).map((D,N)=>T("li",{key:N},D)))),F.servers.length>0&&F.errors.length===0&&U.push(T("p",{key:"ok",style:{margin:"0 0 10px",fontSize:"12.5px",color:B}},`${F.servers.length} server(s) parsed${k?" (TURN present)":" (STUN only \u2014 does not hide IP)"}.`)),U.push(T("div",{key:"note",style:{display:"flex",alignItems:"flex-start",gap:"9px",padding:"12px 13px",borderRadius:"11px",border:"1px solid rgba(var(--sb-green-rgb), 0.18)",background:"rgba(var(--sb-green-rgb), 0.05)",marginBottom:"12px"}},[T("i",{key:"i",className:"fas fa-info-circle",style:{color:B,fontSize:"13px",marginTop:"2px",flex:"none"}}),T("span",{key:"t",style:{fontSize:"12px",lineHeight:1.55,color:"var(--sb-green-muted)"}},[f("ice.turnNote"),T("span",{key:"m",style:{fontFamily:K,color:B}},"turns:"),f("ice.turnNoteTls")])]));let I=g==="done"&&w&&!w.error?B:"var(--sb-text-4)";U.push(T("div",{key:"test",style:{display:"flex",alignItems:"center",gap:"12px",flexWrap:"wrap",marginBottom:"4px"}},[T("button",{key:"btn",type:"button",disabled:!E||g==="running",onClick:_,style:{display:"inline-flex",alignItems:"center",gap:"8px",padding:"10px 15px",borderRadius:"10px",border:`1px solid ${g==="done"&&w&&!w.error?"rgba(var(--sb-green-rgb), 0.4)":"rgba(var(--sb-ink), 0.1)"}`,background:g==="done"&&w&&!w.error?"rgba(var(--sb-green-rgb), 0.08)":"rgba(var(--sb-ink), 0.04)",color:I,fontFamily:"inherit",fontSize:"13px",fontWeight:600,cursor:!E||g==="running"?"not-allowed":"pointer",opacity:!E||g==="running"?.6:1}},[T("i",{key:"i",className:g==="running"?"fas fa-circle-notch":"fas fa-play-circle",style:g==="running"?{animation:"sbSpin 1s linear infinite"}:null}),g==="running"?f("ice.testing"):f("ice.test")]),g==="done"&&w?T("span",{key:"res",style:{fontSize:"12px",color:w.error?"var(--sb-red)":"var(--sb-text-7)"}},w.error?`Test failed: ${w.error}`:w.srflx>0||w.relay>0?`STUN ${w.srflx>0?"OK":"none"} \xB7 TURN ${w.relay>0?"OK":"none"} \xB7 host ${w.host}`:`host ${w.host} \xB7 this browser hides STUN/TURN candidates from the test \u2014 your servers still apply to real connections`):null])),J.push(T("div",{key:"custom",style:{marginBottom:"16px"}},U))}J.push(Q(h,()=>m(!h),f("ice.relayTitle"),f("ice.relayDesc"),B,f("ice.relayBadge"))),h&&o&&!k&&J.push(T("p",{key:"relaywarn",style:{margin:"-4px 0 10px",fontSize:"12.5px",color:"var(--sb-yellow)"}},f("ice.relayWarning"))),J.push(Q(p,()=>S(!p),f("ice.persist"),f("ice.persistDesc"),Y));let ge=[];return r&&ge.push(T("button",{key:"forget",type:"button",onClick:x,style:{marginInlineEnd:"auto",padding:"11px 18px",borderRadius:"11px",border:"1px solid rgba(var(--sb-red-rgb), 0.3)",background:"transparent",color:"var(--sb-red)",fontFamily:"inherit",fontSize:"13.5px",fontWeight:600,cursor:"pointer"}},f("ice.forget"))),ge.push(T("button",{key:"cancel",type:"button",onClick:e,style:{padding:"11px 18px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"transparent",color:"var(--sb-text-5)",fontFamily:"inherit",fontSize:"13.5px",fontWeight:600,cursor:"pointer"}},f("ice.cancel"))),ge.push(T("button",{key:"apply",type:"button",onClick:A,disabled:!E,style:{display:"inline-flex",alignItems:"center",gap:"8px",padding:"11px 20px",borderRadius:"11px",border:"none",background:R,color:"var(--sb-on-accent)",fontFamily:"inherit",fontSize:"13.5px",fontWeight:700,cursor:E?"pointer":"not-allowed",opacity:E?1:.5,boxShadow:"0 6px 18px rgba(var(--sb-orange-rgb), 0.28)"}},[T("i",{key:"i",className:"fas fa-check"}),f("ice.apply")])),T("div",{className:"sb-ice-overlay",style:a?{position:"absolute",inset:0,zIndex:60,display:"flex",flexDirection:"column",background:"var(--sb-bg)",animation:"sbSlideUp .32s cubic-bezier(.2,.7,.3,1)"}:{position:"fixed",inset:0,zIndex:60,display:"flex",flexDirection:"column",alignItems:"stretch",background:"var(--sb-bg)",animation:"sbSlideUp .32s cubic-bezier(.2,.7,.3,1)"}},[T(Ve.Fragment,{key:"panel"},[T("div",{key:"head",style:{display:"flex",alignItems:"center",gap:"12px",padding:"20px 24px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[T("div",{key:"ic",style:{width:"38px",height:"38px",flex:"none",display:"grid",placeItems:"center",borderRadius:"10px",background:"rgba(var(--sb-ink), 0.03)",border:"1px solid rgba(var(--sb-ink), 0.06)"}},T("i",{className:"fas fa-sliders-h",style:{color:"var(--sb-text-4)",fontSize:"15px"}})),T("div",{key:"tx",style:{flex:1,lineHeight:1.25}},[T("div",{key:"t",style:{fontSize:"16.5px",fontWeight:800,letterSpacing:"-0.3px",color:"var(--sb-text-1)"}},f("ice.title")),T("div",{key:"s",style:{fontSize:"12px",color:"var(--sb-text-8)"}},f("ice.subtitle"))]),T("button",{key:"x",type:"button",onClick:e,style:{width:"32px",height:"32px",flex:"none",display:"grid",placeItems:"center",borderRadius:"9px",border:"none",background:"rgba(var(--sb-ink), 0.04)",color:"var(--sb-text-7)",cursor:"pointer"}},T("i",{className:"fas fa-times"}))]),T("div",{key:"body",className:"custom-scrollbar",style:{flex:1,overflowY:"auto",padding:"20px 24px"}},J),T("div",{key:"foot",style:{display:"flex",alignItems:"center",justifyContent:"flex-end",gap:"10px",padding:"16px 24px",borderTop:"1px solid rgba(var(--sb-ink), 0.06)",background:"var(--sb-bg-deep)",borderRadius:"0"}},ge)])])};window.IceServerSettings=qa;var ja=({webrtcManager:s,peerTitle:e})=>{let t=React.createElement,r="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",i={lock:'<path d="M7 11V7a5 5 0 0 1 10 0v4"/><rect x="4.5" y="11" width="15" height="9" rx="2.2"/>',minimize:'<path d="M9 4v4a1 1 0 0 1-1 1H4M15 4v4a1 1 0 0 0 1 1h4M9 20v-4a1 1 0 0 0-1-1H4M15 20v-4a1 1 0 0 1 1-1h4"/>',expand:'<path d="M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7"/>',user:'<circle cx="12" cy="8" r="3.6"/><path d="M5 20c0-3.5 3-5.5 7-5.5s7 2 7 5.5"/>',micOn:'<rect x="9" y="3" width="6" height="11" rx="3"/><path d="M5 11a7 7 0 0 0 14 0"/><path d="M12 18v3"/>',micOff:'<path d="M9 9v-1a3 3 0 0 1 5.1-2.1M15 11v3a3 3 0 0 1-4.6 2.5"/><path d="M5 11a7 7 0 0 0 10.3 6.2M19 11a7 7 0 0 1-.4 2.3"/><path d="M12 18v3"/><path d="M3 3l18 18"/>',camOn:'<path d="M23 7l-7 5 7 5V7z"/><rect x="1" y="5" width="15" height="14" rx="2.5"/>',camOff:'<path d="M16 16H3a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h2l2-2M11 6h2l7-3v14M2 2l20 20"/>',flip:'<path d="M3 7h3l2-2h8l2 2h3v12H3z"/><path d="M9.5 13a2.5 2.5 0 0 1 5 0M14.5 13l-1.3-1.3M14.5 13l1.3-1.3"/>',phone:'<path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z"/>',phoneHangup:'<path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z" transform="rotate(135 12 12)"/>'},n=(N,z,W)=>t("span",{style:{display:"grid",placeItems:"center",width:z+"px",height:z+"px"},dangerouslySetInnerHTML:{__html:`<svg width="${z}" height="${z}" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="${W}" stroke-linecap="round" stroke-linejoin="round">${N}</svg>`}}),[a,o]=React.useState(()=>s?.getCallState?.()||{phase:"idle",active:!1}),[c,d]=React.useState(!1),[u,h]=React.useState(0),m=React.useRef(null),p=React.useRef(null),S=React.useRef(null);React.useEffect(()=>{if(!s)return;let N=W=>o(W),z=s.onCallStateChanged;return s.onCallStateChanged=N,o(s.getCallState?s.getCallState():{phase:"idle",active:!1}),()=>{s.onCallStateChanged===N&&(s.onCallStateChanged=z||null)}},[s]);let g=a.phase||"idle",b=!!a.active,w=!!a.withVideo||!!a.remoteHasVideo;if(React.useEffect(()=>{let N=s?.getRemoteMediaStream?.(),z=s?.getLocalMediaStream?.(),W=(Z,be,_e)=>{if(!Z||!be)return;Z.srcObject!==be&&(Z.muted=_e,Z.srcObject=be);let me=Z.play&&Z.play();me&&me.catch&&me.catch(()=>{})};W(p.current,N,!1,"remoteAudio"),W(m.current,N,!0,"remoteVideo"),W(S.current,z,!0,"selfVideo")}),React.useEffect(()=>{if(g!=="active"){h(0);return}let N=Date.now(),z=setInterval(()=>h(Math.floor((Date.now()-N)/1e3)),1e3);return()=>clearInterval(z)},[g]),React.useEffect(()=>{g==="idle"&&d(!1)},[g]),!b||g==="idle"||g==="ended"||a.groupCallId)return null;let M=N=>`${String(Math.floor(N/60)).padStart(2,"0")}:${String(N%60).padStart(2,"0")}`,F=g==="outgoing"||g==="connecting",k=g==="outgoing"?f("call.ringing"):g==="connecting"?f("call.connecting"):g==="active"?M(u):f("call.ringing"),E=e||f("call.peer"),_={width:"56px",height:"56px",borderRadius:"50%",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-4)",cursor:"pointer",transition:"all .15s"},A={..._,background:"var(--sb-red-strong-solid)",color:"#fff",border:"1px solid transparent"},x={width:"56px",height:"56px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"var(--sb-red-strong-solid)",color:"#fff",cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-red-strong-rgb), 0.35)",transition:"transform .15s"},T=N=>({width:"36px",height:"36px",borderRadius:"9px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), "+(N?"0.15":"0.1")+")",background:N?"rgba(0,0,0,0.35)":"rgba(var(--sb-ink), 0.04)",color:N?"#fff":"var(--sb-text-4)",cursor:"pointer",transition:"all .15s"}),Y=t("span",{key:"enc",style:{display:"inline-flex",alignItems:"center",gap:"4px",fontSize:"11px",fontWeight:600,color:"var(--sb-green)"}},[n(i.lock,11,2),f("call.encryptedShort")]),B={excellent:{bars:4,color:"var(--sb-green)",solid:"var(--sb-green-solid)",label:f("call.qualityExcellent")},good:{bars:3,color:"var(--sb-green)",solid:"var(--sb-green-solid)",label:f("call.qualityGood")},fair:{bars:2,color:"var(--sb-yellow)",solid:"var(--sb-yellow-solid)",label:f("call.qualityFair")},poor:{bars:1,color:"var(--sb-red)",solid:"var(--sb-red-solid)",label:f("call.qualityWeak")}},R=N=>{let z=B[a.quality];if(!z)return null;let W=t("span",{key:"bars",style:{display:"inline-flex",alignItems:"flex-end",gap:"2px",height:"14px"}},[0,1,2,3].map(Z=>t("span",{key:Z,style:{width:"3px",height:5+Z*3+"px",borderRadius:"1px",background:Z<z.bars?z.solid:"rgba(var(--sb-ink), 0.18)"}})));return N?W:t("span",{key:"q",title:f("call.quality"),style:{display:"inline-flex",alignItems:"center",gap:"6px",fontSize:"11.5px",fontWeight:600,color:z.color}},[W,z.label])},ue=()=>s?.acceptCall?.(),K=()=>s?.declineCall?.(),O=()=>{d(!1),s?.endCall?.()},Q=()=>s?.toggleMic?.(),J=()=>s?.toggleCamera?.(),ge=()=>s?.switchCamera?.(),G=()=>s?.upgradeToVideo?.(),U=t("audio",{key:"ra",ref:p,autoPlay:!0,playsInline:!0,style:{display:"none"}}),I=(N,z,W)=>t("div",{key:N,style:{display:"flex",flexDirection:"column",alignItems:"center",gap:"8px"}},[z,t("span",{key:"l",style:{fontFamily:r,fontSize:"10.5px",color:"var(--sb-text-7)"}},W)]),D=(N,z)=>t("div",{key:"av",style:{position:"relative",width:"120px",height:"120px",marginBottom:"28px",display:"grid",placeItems:"center"}},[z&&t("span",{key:"p1",style:{position:"absolute",inset:0,borderRadius:"50%",border:"1.5px solid rgba(var(--sb-orange-rgb), 0.5)",animation:"sbCallPulse 2s ease-out infinite"}}),z&&t("span",{key:"p2",style:{position:"absolute",inset:0,borderRadius:"50%",border:"1.5px solid rgba(var(--sb-orange-rgb), 0.4)",animation:"sbCallPulse 2s ease-out infinite",animationDelay:"1s"}}),t("div",{key:"c",style:{width:"104px",height:"104px",borderRadius:"50%",display:"grid",placeItems:"center",background:"radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))",border:"1px solid rgba(var(--sb-ink), 0.1)",boxShadow:"0 12px 30px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))",color:"var(--sb-text-7)"}},n(i.user,N,1.6))]);return g==="incoming"?t("div",{style:{position:"absolute",inset:0,zIndex:40,display:"flex",flexDirection:"column",background:"radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)",animation:"sbExpand .2s ease"}},[U,t("div",{key:"top",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"flex-start",padding:"16px 18px"}},t("span",{style:{display:"inline-flex",alignItems:"center",gap:"7px",fontSize:"12px",fontWeight:600,color:"var(--sb-green)"}},[n(i.lock,13,2),f("call.encrypted")])),t("div",{key:"mid",style:{flex:1,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center"}},[D(46,!0),t("div",{key:"nm",style:{fontSize:"24px",fontWeight:800,letterSpacing:"-0.5px",color:"var(--sb-text-1)"}},E),t("div",{key:"st",style:{fontFamily:r,fontSize:"14px",fontWeight:500,color:"var(--sb-text-6)",marginTop:"8px"}},a.withVideo?f("call.incomingVideo"):f("call.incoming"))]),t("div",{key:"ctrls",style:{flex:"none",display:"flex",alignItems:"flex-start",justifyContent:"center",gap:"48px",padding:"28px 24px 40px"}},[I("dec",t("button",{onClick:K,title:f("call.decline"),style:{...x,width:"62px",height:"62px"}},n(i.phoneHangup,24,1.9)),f("call.decline")),I("acc",t("button",{onClick:ue,title:f("call.accept"),style:{width:"62px",height:"62px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"var(--sb-green-solid)",color:"var(--sb-on-green)",cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-green-rgb), 0.35)"}},n(i.phone,24,1.9)),f("call.accept"))])]):c?t("div",{style:{position:"absolute",bottom:"18px",insetInlineEnd:"18px",zIndex:40,width:"236px",borderRadius:"14px",overflow:"hidden",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.1)",boxShadow:"0 18px 44px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))",animation:"sbExpand .18s ease"}},[U,w&&t("div",{key:"v",style:{position:"relative",height:"132px",background:"#111"}},[t("video",{key:"rv",ref:m,autoPlay:!0,muted:!0,playsInline:!0,style:{width:"100%",height:"100%",objectFit:"cover",display:"block"}}),!a.remoteHasVideo&&t("div",{key:"off",style:{position:"absolute",inset:0,display:"grid",placeItems:"center",background:"linear-gradient(120deg,var(--sb-grad-1),var(--sb-grad-2))",color:"var(--sb-text-9)"}},n(i.camOff,22,1.8)),t("span",{key:"s",style:{position:"absolute",top:"8px",insetInlineStart:"9px",fontFamily:r,fontSize:"11px",fontWeight:600,color:"#fff",padding:"3px 7px",borderRadius:"6px",background:"rgba(0,0,0,0.5)"}},k)]),t("div",{key:"bar",style:{display:"flex",alignItems:"center",gap:"11px",padding:"11px 12px"}},[t("span",{key:"ic",style:{position:"relative",flex:"none",width:"34px",height:"34px",borderRadius:"9px",display:"grid",placeItems:"center",background:"rgba(var(--sb-green-rgb), 0.1)",border:"1px solid rgba(var(--sb-green-rgb), 0.25)",color:"var(--sb-green)"}},n(i.user,16,1.9)),t("div",{key:"tx",style:{flex:1,minWidth:0}},[t("div",{key:"n",style:{fontSize:"13px",fontWeight:700,color:"var(--sb-text-1)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},E),t("div",{key:"s",style:{display:"flex",alignItems:"center",gap:"7px",fontFamily:r,fontSize:"11px",color:"var(--sb-text-6)"}},[(w?f("call.videoPrefix"):f("call.voicePrefix"))+k,g==="active"&&R(!0)])]),t("button",{key:"exp",onClick:()=>d(!1),title:f("call.expand"),style:{flex:"none",width:"32px",height:"32px",borderRadius:"8px",display:"grid",placeItems:"center",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-4)",cursor:"pointer",transition:"all .15s"}},n(i.expand,15,2)),t("button",{key:"end",onClick:O,title:f("call.end"),style:{flex:"none",width:"32px",height:"32px",borderRadius:"8px",display:"grid",placeItems:"center",border:"none",background:"var(--sb-red-strong-solid)",color:"#fff",cursor:"pointer",transition:"transform .15s"}},n(i.phoneHangup,15,2))])]):w?t("div",{style:{position:"absolute",inset:0,zIndex:40,overflow:"hidden",background:"var(--sb-bg-deepest)",animation:"sbExpand .2s ease"}},[U,a.remoteHasVideo?t("video",{key:"rv",ref:m,autoPlay:!0,muted:!0,playsInline:!0,style:{position:"absolute",inset:0,width:"100%",height:"100%",objectFit:"cover",background:"var(--sb-bg-deepest)"}}):t("div",{key:"ph",style:{position:"absolute",inset:0,background:"linear-gradient(120deg, var(--sb-grad-1), var(--sb-grad-2), var(--sb-grad-3))",backgroundSize:"200% 200%",animation:"sbLiveBg 9s ease-in-out infinite",display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",gap:"18px"}},[t("div",{key:"a",style:{width:"120px",height:"120px",borderRadius:"50%",display:"grid",placeItems:"center",background:"radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))",border:"1px solid rgba(var(--sb-ink), 0.1)",color:"var(--sb-text-6)"}},n(i.user,54,1.5)),t("div",{key:"t",style:{fontSize:"15px",fontWeight:600,color:"var(--sb-text-7)"}},f("call.peerCameraOff"))]),t("div",{key:"top",style:{position:"absolute",top:0,left:0,right:0,display:"flex",alignItems:"flex-start",justifyContent:"space-between",gap:"14px",padding:"18px 20px",background:"linear-gradient(180deg, rgba(0,0,0,0.55), transparent)"}},[t("div",{key:"l"},[t("div",{key:"n",style:{fontSize:"18px",fontWeight:800,letterSpacing:"-0.3px",color:"#fff"}},E),t("div",{key:"s",style:{display:"inline-flex",alignItems:"center",gap:"9px",marginTop:"4px"}},[t("span",{key:"st",style:{fontFamily:r,fontSize:"12.5px",fontWeight:500,color:"var(--sb-text-2)"}},k),Y,g==="active"&&R(!1)])]),t("button",{key:"min",onClick:()=>d(!0),title:f("call.minimize"),style:{flex:"none",...T(!0)}},n(i.minimize,16,2))]),t("div",{key:"self",style:{position:"absolute",bottom:"108px",insetInlineEnd:"18px",width:"132px",height:"176px",borderRadius:"14px",overflow:"hidden",border:"1px solid rgba(var(--sb-ink), 0.16)",boxShadow:"0 12px 30px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))",background:"#111"}},[t("video",{key:"sv",ref:S,autoPlay:!0,muted:!0,playsInline:!0,style:{width:"100%",height:"100%",objectFit:"cover",transform:"scaleX(-1)",display:"block"}}),!a.cameraEnabled&&t("div",{key:"off",style:{position:"absolute",inset:0,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",gap:"8px",background:"var(--sb-surface)",color:"var(--sb-text-9)"}},[n(i.camOff,24,1.8),t("span",{key:"t",style:{fontSize:"10.5px",color:"var(--sb-text-9)",fontFamily:r}},f("call.cameraOff"))])]),t("div",{key:"ctrls",style:{position:"absolute",bottom:0,left:0,right:0,display:"flex",alignItems:"center",justifyContent:"center",gap:"18px",padding:"22px 24px 28px",background:"linear-gradient(0deg, rgba(0,0,0,0.6), transparent)"}},[t("button",{key:"mute",onClick:Q,title:f("call.mute"),style:a.micEnabled?_:A},n(a.micEnabled?i.micOn:i.micOff,21,1.9)),t("button",{key:"cam",onClick:J,title:f("call.camera"),style:a.cameraEnabled?_:A},n(a.cameraEnabled?i.camOn:i.camOff,21,1.8)),t("button",{key:"flip",onClick:ge,title:f("call.flipCamera"),style:_},n(i.flip,21,1.8)),t("button",{key:"end",onClick:O,title:f("call.end"),style:x},n(i.phoneHangup,22,1.9))])]):t("div",{style:{position:"absolute",inset:0,zIndex:40,display:"flex",flexDirection:"column",background:"radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)",animation:"sbExpand .2s ease"}},[U,t("div",{key:"top",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"space-between",padding:"16px 18px"}},[t("span",{key:"enc",style:{display:"inline-flex",alignItems:"center",gap:"7px",fontSize:"12px",fontWeight:600,color:"var(--sb-green)"}},[n(i.lock,13,2),f("call.encrypted")]),t("button",{key:"min",onClick:()=>d(!0),title:f("call.minimize"),style:T(!1)},n(i.minimize,16,2))]),t("div",{key:"mid",style:{flex:1,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center"}},[D(46,F),t("div",{key:"nm",style:{fontSize:"24px",fontWeight:800,letterSpacing:"-0.5px",color:"var(--sb-text-1)"}},E),t("div",{key:"st",style:{fontFamily:r,fontSize:"14px",fontWeight:500,color:"var(--sb-text-6)",marginTop:"8px"}},k),g==="active"&&t("div",{key:"q",style:{marginTop:"12px"}},R(!1))]),t("div",{key:"ctrls",style:{flex:"none",display:"flex",alignItems:"flex-start",justifyContent:"center",gap:"26px",padding:"28px 24px 34px"}},[I("mute",t("button",{onClick:Q,title:f("call.mute"),style:a.micEnabled?_:A},n(a.micEnabled?i.micOn:i.micOff,22,1.9)),a.micEnabled?"Mute":f("call.muted")),I("video",t("button",{onClick:G,title:f("call.addVideo"),style:_},n(i.camOn,22,1.8)),f("call.video")),I("end",t("button",{onClick:O,title:f("call.end"),style:x},n(i.phoneHangup,22,1.9)),f("call.endShort"))])])};typeof window<"u"&&(window.CallUIComponent=ja);window.EnhancedSecureCryptoUtils=Mt;window.EnhancedSecureWebRTCManager=$t;window.EnhancedSecureFileTransfer=je;window.NotificationIntegration=$n.NotificationIntegration;var Wa=()=>{try{let s=[];for(let e=0;e<localStorage.length;e++){let t=localStorage.key(e);t&&t.startsWith("qr_offer_")&&s.push(t)}for(let e of s)try{localStorage.removeItem(e)}catch{}}catch{}},Bn=()=>(window.__qrReady||(window.__qrReady=import("/dist/qr-local.js").then(()=>{window.dispatchEvent(new Event("securebit:qr-ready"))}).catch(s=>{console.warn("QR bundle failed to load:",s&&s.message),window.__qrReady=null})),window.__qrReady),Ya=()=>{typeof window.requestIdleCallback=="function"?window.requestIdleCallback(Bn,{timeout:3e3}):setTimeout(Bn,1200)},Hn=()=>{Wa(),typeof window.initializeApp=="function"?window.initializeApp():window.DEBUG_MODE&&console.error("initializeApp is not defined on window"),Ya()};document.readyState==="loading"?document.addEventListener("DOMContentLoaded",Hn):Hn();
 /**
diff --git a/dist/app-boot.js.map b/dist/app-boot.js.map
index 1d2fb13..df98530 100644
--- a/dist/app-boot.js.map
+++ b/dist/app-boot.js.map
@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/notifications/SecureNotificationManager.js", "../src/notifications/NotificationIntegration.js", "../node_modules/dompurify/src/utils.ts", "../node_modules/dompurify/src/tags.ts", "../node_modules/dompurify/src/attrs.ts", "../node_modules/dompurify/src/regexp.ts", "../node_modules/dompurify/src/purify.ts", "../src/crypto/EnhancedSecureCryptoUtils.js", "../src/i18n/generated.js", "../src/i18n/dict/en.js", "../src/i18n/index.js", "../src/transfer/EnhancedSecureFileTransfer.js", "../src/network/webrtc/config.js", "../src/network/webrtc/sdp.js", "../src/network/webrtc/audio.js", "../src/network/webrtc/video.js", "../src/network/webrtc/adaptation/metrics.js", "../src/network/webrtc/adaptation/controller.js", "../src/crypto/DoubleRatchet.js", "../src/network/descriptor/sbq2.js", "../src/network/descriptor/keyexchange.js", "../src/network/EnhancedSecureWebRTCManager.js", "../src/scripts/app-boot.js", "../package.json", "../src/components/ui/LanguageSwitcher.jsx", "../src/components/ui/ThemeSwitcher.jsx", "../src/components/ui/Header.jsx", "../src/components/ui/DownloadApps.jsx", "../src/components/ui/BecomePartner.jsx", "../src/components/ui/UniqueFeatureSlider.jsx", "../src/components/ui/Roadmap.jsx", "../src/components/ui/DonateCrypto.jsx", "../src/components/ui/CommunityCTA.jsx", "../src/components/ui/FileTransfer.jsx", "../src/network/iceServers.js", "../src/components/ui/IceServerSettings.jsx", "../src/components/ui/CallUI.jsx"],
-  "sourcesContent": ["/**\n * Secure and Reliable Notification Manager for P2P WebRTC Chat\n * Follows best practices: OWASP, MDN, Chrome DevRel\n * \n * @version 1.0.0\n * @author SecureBit Team\n * @license MIT\n */\n\nclass SecureChatNotificationManager {\n  constructor(config = {}) {\n    // Safely read Notification permission (iOS Safari may not define Notification)\n    this.permission = (typeof Notification !== 'undefined' && Notification && typeof Notification.permission === 'string')\n      ? Notification.permission\n      : 'denied';\n    this.isTabActive = this.checkTabActive(); // Initialize with proper check\n    this.unreadCount = 0;\n    this.originalTitle = document.title;\n    this.notificationQueue = [];\n    this.maxQueueSize = config.maxQueueSize || 5;\n    this.rateLimitMs = config.rateLimitMs || 2000; // Spam protection\n    this.lastNotificationTime = 0;\n    this.trustedOrigins = config.trustedOrigins || [];\n    \n    // Secure context flag\n    this.isSecureContext = window.isSecureContext;\n    \n    // Cross-browser compatibility for Page Visibility API\n    this.hidden = this.getHiddenProperty();\n    this.visibilityChange = this.getVisibilityChangeEvent();\n    \n    this.initVisibilityTracking();\n    this.initSecurityChecks();\n  }\n\n  /**\n   * Initialize security checks and validation\n   * @private\n   */\n  initSecurityChecks() {\n    // Security checks are performed silently\n  }\n\n  /**\n   * Get hidden property name for cross-browser compatibility\n   * @returns {string} Hidden property name\n   * @private\n   */\n  getHiddenProperty() {\n    if (typeof document.hidden !== \"undefined\") {\n      return \"hidden\";\n    } else if (typeof document.msHidden !== \"undefined\") {\n      return \"msHidden\";\n    } else if (typeof document.webkitHidden !== \"undefined\") {\n      return \"webkitHidden\";\n    }\n    return \"hidden\"; // fallback\n  }\n\n  /**\n   * Get visibility change event name for cross-browser compatibility\n   * @returns {string} Visibility change event name\n   * @private\n   */\n  getVisibilityChangeEvent() {\n    if (typeof document.hidden !== \"undefined\") {\n      return \"visibilitychange\";\n    } else if (typeof document.msHidden !== \"undefined\") {\n      return \"msvisibilitychange\";\n    } else if (typeof document.webkitHidden !== \"undefined\") {\n      return \"webkitvisibilitychange\";\n    }\n    return \"visibilitychange\"; // fallback\n  }\n\n  /**\n   * Check if tab is currently active using multiple methods\n   * @returns {boolean} True if tab is active\n   * @private\n   */\n  checkTabActive() {\n    // Primary method: Page Visibility API\n    if (this.hidden && typeof document[this.hidden] !== \"undefined\") {\n      return !document[this.hidden];\n    }\n    \n    // Fallback method: document.hasFocus()\n    if (typeof document.hasFocus === \"function\") {\n      return document.hasFocus();\n    }\n    \n    // Ultimate fallback: assume active\n    return true;\n  }\n\n  /**\n   * Initialize page visibility tracking (Page Visibility API)\n   * @private\n   */\n  initVisibilityTracking() {\n    // Primary method: Page Visibility API with cross-browser support\n    if (typeof document.addEventListener !== \"undefined\" && typeof document[this.hidden] !== \"undefined\") {\n      document.addEventListener(this.visibilityChange, () => {\n        this.isTabActive = this.checkTabActive();\n        \n        if (this.isTabActive) {\n          this.resetUnreadCount();\n          this.clearNotificationQueue();\n        }\n      });\n    }\n\n    // Fallback method: Window focus/blur events\n    window.addEventListener('focus', () => {\n      this.isTabActive = this.checkTabActive();\n      if (this.isTabActive) {\n        this.resetUnreadCount();\n      }\n    });\n\n    window.addEventListener('blur', () => {\n      this.isTabActive = this.checkTabActive();\n    });\n\n    // Page unload cleanup\n    window.addEventListener('beforeunload', () => {\n      this.clearNotificationQueue();\n    });\n  }\n\n  /**\n   * Request notification permission (BEST PRACTICE: Only call in response to user action)\n   * Never call on page load!\n   * @returns {Promise<boolean>} Permission granted status\n   */\n  async requestPermission() {\n    // Secure context check\n    if (!this.isSecureContext || !('Notification' in window)) {\n      return false;\n    }\n\n    if (this.permission === 'granted') {\n      return true;\n    }\n\n    if (this.permission === 'denied') {\n      return false;\n    }\n\n    try {\n      this.permission = await Notification.requestPermission();\n      return this.permission === 'granted';\n    } catch (error) {\n      return false;\n    }\n  }\n\n  /**\n   * Update page title with unread count\n   * @private\n   */\n  updateTitle() {\n    if (this.unreadCount > 0) {\n      document.title = `(${this.unreadCount}) ${this.originalTitle}`;\n    } else {\n      document.title = this.originalTitle;\n    }\n  }\n\n  /**\n   * XSS Protection: Sanitize input text\n   * @param {string} text - Text to sanitize\n   * @returns {string} Sanitized text\n   * @private\n   */\n  sanitizeText(text) {\n    if (typeof text !== 'string') {\n      return '';\n    }\n    \n    // Remove HTML tags and potentially dangerous characters\n    const div = document.createElement('div');\n    div.textContent = text;\n    return div.innerHTML\n      .replace(/</g, '&lt;')\n      .replace(/>/g, '&gt;')\n      .replace(/\"/g, '&quot;')\n      .replace(/'/g, '&#x27;')\n      .substring(0, 500); // Length limit\n  }\n\n  /**\n   * Validate icon URL (XSS protection)\n   * @param {string} url - URL to validate\n   * @returns {string|null} Validated URL or null\n   * @private\n   */\n  validateIconUrl(url) {\n    if (!url) return null;\n    \n    try {\n      const parsedUrl = new URL(url, window.location.origin);\n      \n      // Only allow HTTPS and data URLs\n      if (parsedUrl.protocol === 'https:' || parsedUrl.protocol === 'data:') {\n        // Check trusted origins if specified\n        if (this.trustedOrigins.length > 0) {\n          const isTrusted = this.trustedOrigins.some(origin => \n            parsedUrl.origin === origin\n          );\n          return isTrusted ? parsedUrl.href : null;\n        }\n        return parsedUrl.href;\n      }\n      \n      return null;\n    } catch (error) {\n      return null;\n    }\n  }\n\n  /**\n   * Rate limiting for spam protection\n   * @returns {boolean} Rate limit check passed\n   * @private\n   */\n  checkRateLimit() {\n    const now = Date.now();\n    if (now - this.lastNotificationTime < this.rateLimitMs) {\n      return false;\n    }\n    this.lastNotificationTime = now;\n    return true;\n  }\n\n  /**\n   * Send secure notification\n   * @param {string} senderName - Name of message sender\n   * @param {string} message - Message content\n   * @param {Object} options - Notification options\n   * @returns {Notification|null} Created notification or null\n   */\n  notify(senderName, message, options = {}) {\n    // Abort if Notifications API is not available (e.g., iOS Safari)\n    if (typeof Notification === 'undefined') {\n      return null;\n    }\n    // Update tab active state before checking\n    this.isTabActive = this.checkTabActive();\n    \n    // Only show if tab is NOT active (user is on another tab or minimized)\n    if (this.isTabActive) {\n      return null;\n    }\n\n    // Permission check\n    if (this.permission !== 'granted') {\n      return null;\n    }\n\n    // Rate limiting\n    if (!this.checkRateLimit()) {\n      return null;\n    }\n\n    // Data sanitization (XSS Protection)\n    const safeSenderName = this.sanitizeText(senderName || 'Unknown');\n    const safeMessage = this.sanitizeText(message || '');\n    const safeIcon = this.validateIconUrl(options.icon) || '/logo/icon-192x192.png';\n\n    // Queue overflow protection\n    if (this.notificationQueue.length >= this.maxQueueSize) {\n      this.clearNotificationQueue();\n    }\n\n    try {\n      \n      const notification = new Notification(\n        `${safeSenderName}`,\n        {\n          body: safeMessage.substring(0, 200), // Length limit\n          icon: safeIcon,\n          badge: safeIcon,\n          tag: `chat-${options.senderId || 'unknown'}`, // Grouping\n          requireInteraction: false, // Don't block user\n          silent: options.silent || false,\n          // Vibrate only for mobile and if supported\n          vibrate: navigator.vibrate ? [200, 100, 200] : undefined,\n          // Safe metadata\n          data: {\n            senderId: this.sanitizeText(options.senderId),\n            timestamp: Date.now(),\n            // Don't include sensitive data!\n          }\n        }\n      );\n\n      // Increment counter\n      this.unreadCount++;\n      this.updateTitle();\n\n      // Add to queue for management\n      this.notificationQueue.push(notification);\n\n      // Safe click handler\n      notification.onclick = (event) => {\n        event.preventDefault(); // Prevent default behavior\n        window.focus();\n        notification.close();\n        \n        // Safe callback\n        if (typeof options.onClick === 'function') {\n          try {\n            options.onClick(options.senderId);\n          } catch (error) {\n            console.error('[Notifications] Error in onClick handler:', error);\n          }\n        }\n      };\n\n      // Error handler\n      notification.onerror = (event) => {\n        console.error('[Notifications] Error showing notification:', event);\n      };\n\n      // Auto-close after reasonable time\n      const autoCloseTimeout = Math.min(options.autoClose || 5000, 10000);\n      setTimeout(() => {\n        notification.close();\n        this.removeFromQueue(notification);\n      }, autoCloseTimeout);\n\n      return notification;\n      \n    } catch (error) {\n      console.error('[Notifications] Failed to create notification:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Remove notification from queue\n   * @param {Notification} notification - Notification to remove\n   * @private\n   */\n  removeFromQueue(notification) {\n    const index = this.notificationQueue.indexOf(notification);\n    if (index > -1) {\n      this.notificationQueue.splice(index, 1);\n    }\n  }\n\n  /**\n   * Clear all notifications\n   */\n  clearNotificationQueue() {\n    this.notificationQueue.forEach(notification => {\n      try {\n        notification.close();\n      } catch (error) {\n        // Ignore errors when closing\n      }\n    });\n    this.notificationQueue = [];\n  }\n\n  /**\n   * Reset unread counter\n   */\n  resetUnreadCount() {\n    this.unreadCount = 0;\n    this.updateTitle();\n  }\n\n  /**\n   * Get current status\n   * @returns {Object} Current notification status\n   */\n  getStatus() {\n    return {\n      permission: this.permission,\n      isTabActive: this.isTabActive,\n      unreadCount: this.unreadCount,\n      isSecureContext: this.isSecureContext,\n      queueSize: this.notificationQueue.length\n    };\n  }\n}\n\n/**\n * Secure integration with WebRTC\n */\nclass SecureP2PChat {\n  constructor() {\n    this.notificationManager = new SecureChatNotificationManager({\n      maxQueueSize: 5,\n      rateLimitMs: 2000,\n      trustedOrigins: [\n        window.location.origin,\n        // Add other trusted origins for CDN icons\n      ]\n    });\n    \n    this.dataChannel = null;\n    this.peerConnection = null;\n    this.remotePeerName = 'Peer';\n    this.messageHistory = [];\n    this.maxHistorySize = 100;\n  }\n\n  /**\n   * Initialize when user connects\n   */\n  async init() {\n    // Initialize notification manager silently\n  }\n\n  /**\n   * Method for manual permission request (called on click)\n   * @returns {Promise<boolean>} Permission granted status\n   */\n  async enableNotifications() {\n    const granted = await this.notificationManager.requestPermission();\n    return granted;\n  }\n\n  /**\n   * Setup DataChannel with security checks\n   * @param {RTCDataChannel} dataChannel - WebRTC data channel\n   */\n  setupDataChannel(dataChannel) {\n    if (!dataChannel) {\n      console.error('[Chat] Invalid DataChannel');\n      return;\n    }\n\n    this.dataChannel = dataChannel;\n    \n    // Setup handlers\n    this.dataChannel.onmessage = (event) => {\n      this.handleIncomingMessage(event.data);\n    };\n\n    this.dataChannel.onerror = (error) => {\n      // Handle error silently\n    };\n  }\n\n  /**\n   * XSS Protection: Validate incoming messages\n   * @param {string|Object} data - Message data\n   * @returns {Object|null} Validated message or null\n   * @private\n   */\n  validateMessage(data) {\n    try {\n      const message = typeof data === 'string' ? JSON.parse(data) : data;\n      \n      // Check message structure\n      if (!message || typeof message !== 'object') {\n        throw new Error('Invalid message structure');\n      }\n\n      // Check required fields\n      if (!message.text || typeof message.text !== 'string') {\n        throw new Error('Invalid message text');\n      }\n\n      // Message length limit (DoS protection)\n      if (message.text.length > 10000) {\n        throw new Error('Message too long');\n      }\n\n      return {\n        text: message.text,\n        senderName: message.senderName || 'Unknown',\n        senderId: message.senderId || 'unknown',\n        timestamp: message.timestamp || Date.now(),\n        senderAvatar: message.senderAvatar || null\n      };\n      \n    } catch (error) {\n      console.error('[Chat] Message validation failed:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Secure handling of incoming messages\n   * @param {string|Object} data - Message data\n   * @private\n   */\n  handleIncomingMessage(data) {\n    const message = this.validateMessage(data);\n    \n    if (!message) {\n      return;\n    }\n\n    // Save to history (with limit)\n    this.messageHistory.push(message);\n    if (this.messageHistory.length > this.maxHistorySize) {\n      this.messageHistory.shift();\n    }\n\n    // Display in UI (with sanitization)\n    this.displayMessage(message);\n\n    // Send notification only if tab is inactive\n    this.notificationManager.notify(\n      message.senderName,\n      message.text,\n      {\n        icon: message.senderAvatar,\n        senderId: message.senderId,\n        onClick: (senderId) => {\n          this.scrollToLatestMessage();\n        }\n      }\n    );\n\n    // Optional: sound (with check)\n    if (!this.notificationManager.isTabActive) {\n      this.playNotificationSound();\n    }\n  }\n\n  /**\n   * XSS Protection: Safe message display\n   * @param {Object} message - Message to display\n   * @private\n   */\n  displayMessage(message) {\n    const container = document.getElementById('messages');\n    if (!container) {\n      return;\n    }\n\n    const messageEl = document.createElement('div');\n    messageEl.className = 'message';\n    \n    // Use textContent to prevent XSS\n    const nameEl = document.createElement('strong');\n    nameEl.textContent = message.senderName + ': ';\n    \n    const textEl = document.createElement('span');\n    textEl.textContent = message.text;\n    textEl.style.wordWrap = 'break-word';\n    textEl.style.overflowWrap = 'break-word';\n    textEl.style.whiteSpace = 'normal';\n    \n    const timeEl = document.createElement('small');\n    timeEl.textContent = new Date(message.timestamp).toLocaleTimeString();\n    \n    messageEl.appendChild(nameEl);\n    messageEl.appendChild(textEl);\n    messageEl.appendChild(document.createElement('br'));\n    messageEl.appendChild(timeEl);\n    \n    container.appendChild(messageEl);\n    this.scrollToLatestMessage();\n  }\n\n  /**\n   * Safe sound playback\n   * @private\n   */\n  playNotificationSound() {\n    try {\n      // Use only local audio files\n      const audio = new Audio('/assets/audio/notification.mp3');\n      audio.volume = 0.3; // Moderate volume\n      \n      // Error handling\n      audio.play().catch(error => {\n        // Handle audio error silently\n      });\n    } catch (error) {\n      // Handle audio creation error silently\n    }\n  }\n\n  /**\n   * Scroll to latest message\n   * @private\n   */\n  scrollToLatestMessage() {\n    const container = document.getElementById('messages');\n    if (container) {\n      container.scrollTop = container.scrollHeight;\n    }\n  }\n\n  /**\n   * Get status\n   * @returns {Object} Current chat status\n   */\n  getStatus() {\n    return {\n      notifications: this.notificationManager.getStatus(),\n      messageCount: this.messageHistory.length,\n      connected: this.dataChannel?.readyState === 'open'\n    };\n  }\n}\n\n// Export for use in other modules\nif (typeof module !== 'undefined' && module.exports) {\n  module.exports = { SecureChatNotificationManager, SecureP2PChat };\n}\n\n// Global export for browser usage\nif (typeof window !== 'undefined') {\n  window.SecureChatNotificationManager = SecureChatNotificationManager;\n  window.SecureP2PChat = SecureP2PChat;\n}\n", "/**\n * Notification Integration Module for SecureBit WebRTC Chat\n * Integrates secure notifications with existing WebRTC architecture\n * \n * @version 1.0.0\n * @author SecureBit Team\n * @license MIT\n */\n\nimport { SecureChatNotificationManager } from './SecureNotificationManager.js';\n\nclass NotificationIntegration {\n  constructor(webrtcManager) {\n    this.webrtcManager = webrtcManager;\n    this.notificationManager = new SecureChatNotificationManager({\n      maxQueueSize: 10,\n      rateLimitMs: 1000, // Reduced from 2000ms to 1000ms\n      trustedOrigins: [\n        window.location.origin,\n        // Add other trusted origins for CDN icons\n      ]\n    });\n    \n    this.isInitialized = false;\n    this.originalOnMessage = null;\n    this.originalOnStatusChange = null;\n    this.processedMessages = new Set(); // Track processed messages to avoid duplicates\n  }\n\n  /**\n   * Initialize notification integration\n   * @returns {Promise<boolean>} Initialization success\n   */\n  async init() {\n    try {\n      if (this.isInitialized) {\n        return true;\n      }\n\n      // Store original callbacks\n      this.originalOnMessage = this.webrtcManager.onMessage;\n      this.originalOnStatusChange = this.webrtcManager.onStatusChange;\n\n\n      // Wrap the original onMessage callback.\n      // IMPORTANT: forward ALL arguments (incl. per-message `meta`) so the app\n      // still receives view-once / disappearing / unsend metadata.\n      this.webrtcManager.onMessage = (message, type, ...rest) => {\n        this.handleIncomingMessage(message, type, rest[0]);\n\n        // Call original callback if it exists\n        if (this.originalOnMessage) {\n          this.originalOnMessage(message, type, ...rest);\n        }\n      };\n\n      // Wrap the original onStatusChange callback\n      this.webrtcManager.onStatusChange = (status) => {\n        this.handleStatusChange(status);\n        \n        // Call original callback if it exists\n        if (this.originalOnStatusChange) {\n          this.originalOnStatusChange(status);\n        }\n      };\n\n      // Also hook into the deliverMessageToUI method if it exists.\n      // IMPORTANT: forward ALL arguments (incl. per-message `meta`) to the\n      // original, otherwise view-once / disappearing / unsend metadata is lost.\n      if (this.webrtcManager.deliverMessageToUI) {\n        this.originalDeliverMessageToUI = this.webrtcManager.deliverMessageToUI.bind(this.webrtcManager);\n        this.webrtcManager.deliverMessageToUI = (message, type, ...rest) => {\n          this.handleIncomingMessage(message, type, rest[0]);\n          this.originalDeliverMessageToUI(message, type, ...rest);\n        };\n      }\n\n      this.isInitialized = true;\n      return true;\n\n    } catch (error) {\n      return false;\n    }\n  }\n\n  /**\n   * Handle incoming messages and trigger notifications\n   * @param {*} message - Message content\n   * @param {string} type - Message type\n   * @private\n   */\n  handleIncomingMessage(message, type, meta) {\n    try {\n      // Create a unique key for this message to avoid duplicates\n      const messageKey = `${type}:${typeof message === 'string' ? message : JSON.stringify(message)}`;\n      \n      // Skip if we've already processed this message\n      if (this.processedMessages.has(messageKey)) {\n        return;\n      }\n      \n      // Mark message as processed\n      this.processedMessages.add(messageKey);\n      \n      // Clean up old processed messages (keep only last 100)\n      if (this.processedMessages.size > 100) {\n        const messagesArray = Array.from(this.processedMessages);\n        this.processedMessages.clear();\n        messagesArray.slice(-50).forEach(msg => this.processedMessages.add(msg));\n      }\n      \n      \n      // Only process chat messages, not system messages\n      if (type === 'system' || type === 'file-transfer' || type === 'heartbeat') {\n        return;\n      }\n\n      // Extract message information\n      const messageInfo = this.extractMessageInfo(message, type);\n      if (!messageInfo) {\n        return;\n      }\n\n      // PRIVACY: a view-once or disappearing message must not be copied into the\n      // OS notification. Notifications are shown only while the tab is in the\n      // background \u2014 i.e. typically on a lock screen \u2014 and once the OS has the\n      // text it lands in the notification centre, in backups and on the user's\n      // other synced devices. From there the app can no longer delete it, so the\n      // message the UI destroys after 30 seconds outlives itself indefinitely.\n      // Show that something arrived; never what it said.\n      const isEphemeral = !!meta && typeof meta === 'object' &&\n        (meta.once === true || (Number.isFinite(meta.ttl) && meta.ttl > 0));\n      const notificationText = isEphemeral ? 'Sent you a private message' : messageInfo.text;\n\n      // Send notification\n      const notificationResult = this.notificationManager.notify(\n        messageInfo.senderName,\n        notificationText,\n        {\n          icon: messageInfo.senderAvatar,\n          senderId: messageInfo.senderId,\n          onClick: (senderId) => {\n            this.focusChatWindow();\n          }\n        }\n      );\n\n    } catch (error) {\n      // Handle error silently\n    }\n  }\n\n  /**\n   * Handle status changes\n   * @param {string} status - Connection status\n   * @private\n   */\n  handleStatusChange(status) {\n    try {\n      // Clear notifications when connection is lost\n      if (status === 'disconnected' || status === 'failed') {\n        this.notificationManager.clearNotificationQueue();\n        this.notificationManager.resetUnreadCount();\n      }\n    } catch (error) {\n      // Handle error silently\n    }\n  }\n\n  /**\n   * Extract message information for notifications\n   * @param {*} message - Message content\n   * @param {string} type - Message type\n   * @returns {Object|null} Extracted message info or null\n   * @private\n   */\n  extractMessageInfo(message, type) {\n    try {\n      let messageData = message;\n\n      // Handle different message formats\n      if (typeof message === 'string') {\n        try {\n          messageData = JSON.parse(message);\n        } catch (e) {\n          // Plain text message\n          return {\n            senderName: 'Peer',\n            text: message,\n            senderId: 'peer',\n            senderAvatar: null\n          };\n        }\n      }\n\n      // Handle structured message data\n      if (typeof messageData === 'object' && messageData !== null) {\n        return {\n          senderName: messageData.senderName || messageData.name || 'Peer',\n          text: messageData.text || messageData.message || messageData.content || '',\n          senderId: messageData.senderId || messageData.id || 'peer',\n          senderAvatar: messageData.senderAvatar || messageData.avatar || null\n        };\n      }\n\n      return null;\n    } catch (error) {\n      return null;\n    }\n  }\n\n  /**\n   * Focus chat window when notification is clicked\n   * @private\n   */\n  focusChatWindow() {\n    try {\n      window.focus();\n      \n      // Scroll to bottom of messages if container exists\n      const messagesContainer = document.getElementById('messages');\n      if (messagesContainer) {\n        messagesContainer.scrollTop = messagesContainer.scrollHeight;\n      }\n    } catch (error) {\n      // Handle error silently\n    }\n  }\n\n  /**\n   * Request notification permission\n   * @returns {Promise<boolean>} Permission granted status\n   */\n  async requestPermission() {\n    try {\n      return await this.notificationManager.requestPermission();\n    } catch (error) {\n      return false;\n    }\n  }\n\n  /**\n   * Get notification status\n   * @returns {Object} Notification status\n   */\n  getStatus() {\n    return this.notificationManager.getStatus();\n  }\n\n  /**\n   * Clear all notifications\n   */\n  clearNotifications() {\n    this.notificationManager.clearNotificationQueue();\n    this.notificationManager.resetUnreadCount();\n  }\n\n  /**\n   * Cleanup integration\n   */\n  cleanup() {\n    try {\n      if (this.isInitialized) {\n        // Restore original callbacks\n        if (this.originalOnMessage) {\n          this.webrtcManager.onMessage = this.originalOnMessage;\n        }\n        if (this.originalOnStatusChange) {\n          this.webrtcManager.onStatusChange = this.originalOnStatusChange;\n        }\n        if (this.originalDeliverMessageToUI) {\n          this.webrtcManager.deliverMessageToUI = this.originalDeliverMessageToUI;\n        }\n\n        // Clear notifications\n        this.clearNotifications();\n\n        this.isInitialized = false;\n      }\n    } catch (error) {\n      // Handle error silently\n    }\n  }\n}\n\n// Export for use in other modules\nif (typeof module !== 'undefined' && module.exports) {\n  module.exports = { NotificationIntegration };\n}\n\n// Global export for browser usage\nif (typeof window !== 'undefined') {\n  window.NotificationIntegration = NotificationIntegration;\n}\n", "const {\n  entries,\n  setPrototypeOf,\n  isFrozen,\n  getPrototypeOf,\n  getOwnPropertyDescriptor,\n} = Object;\n\nlet { freeze, seal, create } = Object; // eslint-disable-line import/no-mutable-exports\nlet { apply, construct } = typeof Reflect !== 'undefined' && Reflect;\n\nif (!freeze) {\n  freeze = function <T>(x: T): T {\n    return x;\n  };\n}\n\nif (!seal) {\n  seal = function <T>(x: T): T {\n    return x;\n  };\n}\n\nif (!apply) {\n  apply = function <T>(\n    func: (thisArg: any, ...args: any[]) => T,\n    thisArg: any,\n    ...args: any[]\n  ): T {\n    return func.apply(thisArg, args);\n  };\n}\n\nif (!construct) {\n  construct = function <T>(Func: new (...args: any[]) => T, ...args: any[]): T {\n    return new Func(...args);\n  };\n}\n\nconst arrayForEach = unapply(Array.prototype.forEach);\nconst arrayIndexOf = unapply(Array.prototype.indexOf);\nconst arrayLastIndexOf = unapply(Array.prototype.lastIndexOf);\nconst arrayPop = unapply(Array.prototype.pop);\nconst arrayPush = unapply(Array.prototype.push);\nconst arraySlice = unapply(Array.prototype.slice);\nconst arraySplice = unapply(Array.prototype.splice);\nconst arrayIsArray = Array.isArray;\n\nconst stringToLowerCase = unapply(String.prototype.toLowerCase);\nconst stringToString = unapply(String.prototype.toString);\nconst stringMatch = unapply(String.prototype.match);\nconst stringReplace = unapply(String.prototype.replace);\nconst stringIndexOf = unapply(String.prototype.indexOf);\nconst stringTrim = unapply(String.prototype.trim);\n\nconst numberToString = unapply(Number.prototype.toString);\nconst booleanToString = unapply(Boolean.prototype.toString);\nconst bigintToString =\n  typeof BigInt === 'undefined' ? null : unapply(BigInt.prototype.toString);\nconst symbolToString =\n  typeof Symbol === 'undefined' ? null : unapply(Symbol.prototype.toString);\n\nconst objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);\nconst objectToString = unapply(Object.prototype.toString);\n\nconst regExpTest = unapply(RegExp.prototype.test);\n\nconst typeErrorCreate = unconstruct(TypeError);\n\n/**\n * Creates a new function that calls the given function with a specified thisArg and arguments.\n *\n * @param func - The function to be wrapped and called.\n * @returns A new function that calls the given function with a specified thisArg and arguments.\n */\nfunction unapply<T>(\n  func: (thisArg: any, ...args: any[]) => T\n): (thisArg: any, ...args: any[]) => T {\n  return (thisArg: any, ...args: any[]): T => {\n    if (thisArg instanceof RegExp) {\n      thisArg.lastIndex = 0;\n    }\n\n    return apply(func, thisArg, args);\n  };\n}\n\n/**\n * Creates a new function that constructs an instance of the given constructor function with the provided arguments.\n *\n * @param func - The constructor function to be wrapped and called.\n * @returns A new function that constructs an instance of the given constructor function with the provided arguments.\n */\nfunction unconstruct<T>(\n  Func: new (...args: any[]) => T\n): (...args: any[]) => T {\n  return (...args: any[]): T => construct(Func, args);\n}\n\n/**\n * Add properties to a lookup table\n *\n * @param set - The set to which elements will be added.\n * @param array - The array containing elements to be added to the set.\n * @param transformCaseFunc - An optional function to transform the case of each element before adding to the set.\n * @returns The modified set with added elements.\n */\nfunction addToSet(\n  set: Record<string, boolean>,\n  array: readonly unknown[],\n  transformCaseFunc: ReturnType<typeof unapply<string>> = stringToLowerCase\n): Record<string, boolean> {\n  if (setPrototypeOf) {\n    // Make 'in' and truthy checks like Boolean(set.constructor)\n    // independent of any properties defined on Object.prototype.\n    // Prevent prototype setters from intercepting set as a this value.\n    setPrototypeOf(set, null);\n  }\n\n  if (!arrayIsArray(array)) {\n    return set;\n  }\n\n  let l = array.length;\n  while (l--) {\n    let element = array[l];\n\n    if (typeof element === 'string') {\n      const lcElement = transformCaseFunc(element);\n\n      if (lcElement !== element) {\n        // Config presets (e.g. tags.js, attrs.js) are immutable.\n        if (!isFrozen(array)) {\n          (array as unknown[])[l] = lcElement;\n        }\n\n        element = lcElement;\n      }\n    }\n\n    set[element as string] = true;\n  }\n\n  return set;\n}\n\n/**\n * Clean up an array to harden against CSPP\n *\n * @param array - The array to be cleaned.\n * @returns The cleaned version of the array\n */\nfunction cleanArray<T>(array: T[]): Array<T | null> {\n  for (let index = 0; index < array.length; index++) {\n    const isPropertyExist = objectHasOwnProperty(array, index);\n\n    if (!isPropertyExist) {\n      array[index] = null;\n    }\n  }\n\n  return array;\n}\n\n/**\n * Shallow clone an object\n *\n * @param object - The object to be cloned.\n * @returns A new object that copies the original.\n */\nfunction clone<T extends Record<string, any>>(object: T): T {\n  const newObject = create(null);\n\n  for (const [property, value] of entries(object)) {\n    const isPropertyExist = objectHasOwnProperty(object, property);\n\n    if (isPropertyExist) {\n      if (arrayIsArray(value)) {\n        newObject[property] = cleanArray(value);\n      } else if (\n        value &&\n        typeof value === 'object' &&\n        value.constructor === Object\n      ) {\n        newObject[property] = clone(value);\n      } else {\n        newObject[property] = value;\n      }\n    }\n  }\n\n  return newObject;\n}\n\n/**\n * Convert non-node values into strings without depending on direct property access.\n *\n * @param value - The value to stringify.\n * @returns A string representation of the provided value.\n */\nfunction stringifyValue(value: unknown): string {\n  switch (typeof value) {\n    case 'string': {\n      return value;\n    }\n\n    case 'number': {\n      return numberToString(value);\n    }\n\n    case 'boolean': {\n      return booleanToString(value);\n    }\n\n    case 'bigint': {\n      return bigintToString ? bigintToString(value) : '0';\n    }\n\n    case 'symbol': {\n      return symbolToString ? symbolToString(value) : 'Symbol()';\n    }\n\n    case 'undefined': {\n      return objectToString(value);\n    }\n\n    case 'function':\n    case 'object': {\n      if (value === null) {\n        return objectToString(value);\n      }\n\n      const valueAsRecord = value as Record<string, any>;\n      const valueToString = lookupGetter(valueAsRecord, 'toString');\n\n      if (typeof valueToString === 'function') {\n        const stringified = valueToString(valueAsRecord);\n\n        return typeof stringified === 'string'\n          ? stringified\n          : objectToString(stringified);\n      }\n\n      return objectToString(value);\n    }\n\n    default: {\n      return objectToString(value);\n    }\n  }\n}\n\n/**\n * This method automatically checks if the prop is function or getter and behaves accordingly.\n *\n * @param object - The object to look up the getter function in its prototype chain.\n * @param prop - The property name for which to find the getter function.\n * @returns The getter function found in the prototype chain or a fallback function.\n */\nfunction lookupGetter<T extends Record<string, any>>(\n  object: T,\n  prop: string\n): ReturnType<typeof unapply<any>> | (() => null) {\n  while (object !== null) {\n    const desc = getOwnPropertyDescriptor(object, prop);\n\n    if (desc) {\n      if (desc.get) {\n        return unapply(desc.get);\n      }\n\n      if (typeof desc.value === 'function') {\n        return unapply(desc.value);\n      }\n    }\n\n    object = getPrototypeOf(object);\n  }\n\n  function fallbackValue(): null {\n    return null;\n  }\n\n  return fallbackValue;\n}\n\nfunction isRegex(value: unknown): value is RegExp {\n  try {\n    regExpTest(value as RegExp, '');\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport {\n  // Array\n  arrayForEach,\n  arrayIndexOf,\n  arrayIsArray,\n  arrayLastIndexOf,\n  arrayPop,\n  arrayPush,\n  arraySlice,\n  arraySplice,\n  // Object\n  entries,\n  freeze,\n  getPrototypeOf,\n  getOwnPropertyDescriptor,\n  isFrozen,\n  setPrototypeOf,\n  seal,\n  clone,\n  create,\n  objectHasOwnProperty,\n  objectToString,\n  // RegExp\n  regExpTest,\n  isRegex,\n  // String\n  stringIndexOf,\n  stringMatch,\n  stringReplace,\n  stringToLowerCase,\n  stringToString,\n  stringTrim,\n  // Other conversion\n  stringifyValue,\n  // Errors\n  typeErrorCreate,\n  // Other\n  lookupGetter,\n  addToSet,\n  // Reflect\n  unapply,\n  unconstruct,\n};\n", "import { freeze } from './utils.js';\n\nexport const html = freeze([\n  'a',\n  'abbr',\n  'acronym',\n  'address',\n  'area',\n  'article',\n  'aside',\n  'audio',\n  'b',\n  'bdi',\n  'bdo',\n  'big',\n  'blink',\n  'blockquote',\n  'body',\n  'br',\n  'button',\n  'canvas',\n  'caption',\n  'center',\n  'cite',\n  'code',\n  'col',\n  'colgroup',\n  'content',\n  'data',\n  'datalist',\n  'dd',\n  'decorator',\n  'del',\n  'details',\n  'dfn',\n  'dialog',\n  'dir',\n  'div',\n  'dl',\n  'dt',\n  'element',\n  'em',\n  'fieldset',\n  'figcaption',\n  'figure',\n  'font',\n  'footer',\n  'form',\n  'h1',\n  'h2',\n  'h3',\n  'h4',\n  'h5',\n  'h6',\n  'head',\n  'header',\n  'hgroup',\n  'hr',\n  'html',\n  'i',\n  'img',\n  'input',\n  'ins',\n  'kbd',\n  'label',\n  'legend',\n  'li',\n  'main',\n  'map',\n  'mark',\n  'marquee',\n  'menu',\n  'menuitem',\n  'meter',\n  'nav',\n  'nobr',\n  'ol',\n  'optgroup',\n  'option',\n  'output',\n  'p',\n  'picture',\n  'pre',\n  'progress',\n  'q',\n  'rp',\n  'rt',\n  'ruby',\n  's',\n  'samp',\n  'search',\n  'section',\n  'select',\n  'shadow',\n  'slot',\n  'small',\n  'source',\n  'spacer',\n  'span',\n  'strike',\n  'strong',\n  'style',\n  'sub',\n  'summary',\n  'sup',\n  'table',\n  'tbody',\n  'td',\n  'template',\n  'textarea',\n  'tfoot',\n  'th',\n  'thead',\n  'time',\n  'tr',\n  'track',\n  'tt',\n  'u',\n  'ul',\n  'var',\n  'video',\n  'wbr',\n] as const);\n\nexport const svg = freeze([\n  'svg',\n  'a',\n  'altglyph',\n  'altglyphdef',\n  'altglyphitem',\n  'animatecolor',\n  'animatemotion',\n  'animatetransform',\n  'circle',\n  'clippath',\n  'defs',\n  'desc',\n  'ellipse',\n  'enterkeyhint',\n  'exportparts',\n  'filter',\n  'font',\n  'g',\n  'glyph',\n  'glyphref',\n  'hkern',\n  'image',\n  'inputmode',\n  'line',\n  'lineargradient',\n  'marker',\n  'mask',\n  'metadata',\n  'mpath',\n  'part',\n  'path',\n  'pattern',\n  'polygon',\n  'polyline',\n  'radialgradient',\n  'rect',\n  'stop',\n  'style',\n  'switch',\n  'symbol',\n  'text',\n  'textpath',\n  'title',\n  'tref',\n  'tspan',\n  'view',\n  'vkern',\n] as const);\n\nexport const svgFilters = freeze([\n  'feBlend',\n  'feColorMatrix',\n  'feComponentTransfer',\n  'feComposite',\n  'feConvolveMatrix',\n  'feDiffuseLighting',\n  'feDisplacementMap',\n  'feDistantLight',\n  'feDropShadow',\n  'feFlood',\n  'feFuncA',\n  'feFuncB',\n  'feFuncG',\n  'feFuncR',\n  'feGaussianBlur',\n  'feImage',\n  'feMerge',\n  'feMergeNode',\n  'feMorphology',\n  'feOffset',\n  'fePointLight',\n  'feSpecularLighting',\n  'feSpotLight',\n  'feTile',\n  'feTurbulence',\n] as const);\n\n// List of SVG elements that are disallowed by default.\n// We still need to know them so that we can do namespace\n// checks properly in case one wants to add them to\n// allow-list.\nexport const svgDisallowed = freeze([\n  'animate',\n  'color-profile',\n  'cursor',\n  'discard',\n  'font-face',\n  'font-face-format',\n  'font-face-name',\n  'font-face-src',\n  'font-face-uri',\n  'foreignobject',\n  'hatch',\n  'hatchpath',\n  'mesh',\n  'meshgradient',\n  'meshpatch',\n  'meshrow',\n  'missing-glyph',\n  'script',\n  'set',\n  'solidcolor',\n  'unknown',\n  'use',\n] as const);\n\nexport const mathMl = freeze([\n  'math',\n  'menclose',\n  'merror',\n  'mfenced',\n  'mfrac',\n  'mglyph',\n  'mi',\n  'mlabeledtr',\n  'mmultiscripts',\n  'mn',\n  'mo',\n  'mover',\n  'mpadded',\n  'mphantom',\n  'mroot',\n  'mrow',\n  'ms',\n  'mspace',\n  'msqrt',\n  'mstyle',\n  'msub',\n  'msup',\n  'msubsup',\n  'mtable',\n  'mtd',\n  'mtext',\n  'mtr',\n  'munder',\n  'munderover',\n  'mprescripts',\n] as const);\n\n// Similarly to SVG, we want to know all MathML elements,\n// even those that we disallow by default.\nexport const mathMlDisallowed = freeze([\n  'maction',\n  'maligngroup',\n  'malignmark',\n  'mlongdiv',\n  'mscarries',\n  'mscarry',\n  'msgroup',\n  'mstack',\n  'msline',\n  'msrow',\n  'semantics',\n  'annotation',\n  'annotation-xml',\n  'mprescripts',\n  'none',\n] as const);\n\nexport const text = freeze(['#text'] as const);\n", "import { freeze } from './utils.js';\n\nexport const html = freeze([\n  'accept',\n  'action',\n  'align',\n  'alt',\n  'autocapitalize',\n  'autocomplete',\n  'autopictureinpicture',\n  'autoplay',\n  'background',\n  'bgcolor',\n  'border',\n  'capture',\n  'cellpadding',\n  'cellspacing',\n  'checked',\n  'cite',\n  'class',\n  'clear',\n  'color',\n  'cols',\n  'colspan',\n  'command',\n  'commandfor',\n  'controls',\n  'controlslist',\n  'coords',\n  'crossorigin',\n  'datetime',\n  'decoding',\n  'default',\n  'dir',\n  'disabled',\n  'disablepictureinpicture',\n  'disableremoteplayback',\n  'download',\n  'draggable',\n  'enctype',\n  'enterkeyhint',\n  'exportparts',\n  'face',\n  'for',\n  'headers',\n  'height',\n  'hidden',\n  'high',\n  'href',\n  'hreflang',\n  'id',\n  'inert',\n  'inputmode',\n  'integrity',\n  'ismap',\n  'kind',\n  'label',\n  'lang',\n  'list',\n  'loading',\n  'loop',\n  'low',\n  'max',\n  'maxlength',\n  'media',\n  'method',\n  'min',\n  'minlength',\n  'multiple',\n  'muted',\n  'name',\n  'nonce',\n  'noshade',\n  'novalidate',\n  'nowrap',\n  'open',\n  'optimum',\n  'part',\n  'pattern',\n  'placeholder',\n  'playsinline',\n  'popover',\n  'popovertarget',\n  'popovertargetaction',\n  'poster',\n  'preload',\n  'pubdate',\n  'radiogroup',\n  'readonly',\n  'rel',\n  'required',\n  'rev',\n  'reversed',\n  'role',\n  'rows',\n  'rowspan',\n  'spellcheck',\n  'scope',\n  'selected',\n  'shape',\n  'size',\n  'sizes',\n  'slot',\n  'span',\n  'srclang',\n  'start',\n  'src',\n  'srcset',\n  'step',\n  'style',\n  'summary',\n  'tabindex',\n  'title',\n  'translate',\n  'type',\n  'usemap',\n  'valign',\n  'value',\n  'width',\n  'wrap',\n  'xmlns',\n] as const);\n\nexport const svg = freeze([\n  'accent-height',\n  'accumulate',\n  'additive',\n  'alignment-baseline',\n  'amplitude',\n  'ascent',\n  'attributename',\n  'attributetype',\n  'azimuth',\n  'basefrequency',\n  'baseline-shift',\n  'begin',\n  'bias',\n  'by',\n  'class',\n  'clip',\n  'clippathunits',\n  'clip-path',\n  'clip-rule',\n  'color',\n  'color-interpolation',\n  'color-interpolation-filters',\n  'color-profile',\n  'color-rendering',\n  'cx',\n  'cy',\n  'd',\n  'dx',\n  'dy',\n  'diffuseconstant',\n  'direction',\n  'display',\n  'divisor',\n  'dur',\n  'edgemode',\n  'elevation',\n  'end',\n  'exponent',\n  'fill',\n  'fill-opacity',\n  'fill-rule',\n  'filter',\n  'filterunits',\n  'flood-color',\n  'flood-opacity',\n  'font-family',\n  'font-size',\n  'font-size-adjust',\n  'font-stretch',\n  'font-style',\n  'font-variant',\n  'font-weight',\n  'fx',\n  'fy',\n  'g1',\n  'g2',\n  'glyph-name',\n  'glyphref',\n  'gradientunits',\n  'gradienttransform',\n  'height',\n  'href',\n  'id',\n  'image-rendering',\n  'in',\n  'in2',\n  'intercept',\n  'k',\n  'k1',\n  'k2',\n  'k3',\n  'k4',\n  'kerning',\n  'keypoints',\n  'keysplines',\n  'keytimes',\n  'lang',\n  'lengthadjust',\n  'letter-spacing',\n  'kernelmatrix',\n  'kernelunitlength',\n  'lighting-color',\n  'local',\n  'marker-end',\n  'marker-mid',\n  'marker-start',\n  'markerheight',\n  'markerunits',\n  'markerwidth',\n  'maskcontentunits',\n  'maskunits',\n  'max',\n  'mask',\n  'mask-type',\n  'media',\n  'method',\n  'mode',\n  'min',\n  'name',\n  'numoctaves',\n  'offset',\n  'operator',\n  'opacity',\n  'order',\n  'orient',\n  'orientation',\n  'origin',\n  'overflow',\n  'paint-order',\n  'path',\n  'pathlength',\n  'patterncontentunits',\n  'patterntransform',\n  'patternunits',\n  'points',\n  'preservealpha',\n  'preserveaspectratio',\n  'primitiveunits',\n  'r',\n  'rx',\n  'ry',\n  'radius',\n  'refx',\n  'refy',\n  'repeatcount',\n  'repeatdur',\n  'restart',\n  'result',\n  'rotate',\n  'scale',\n  'seed',\n  'shape-rendering',\n  'slope',\n  'specularconstant',\n  'specularexponent',\n  'spreadmethod',\n  'startoffset',\n  'stddeviation',\n  'stitchtiles',\n  'stop-color',\n  'stop-opacity',\n  'stroke-dasharray',\n  'stroke-dashoffset',\n  'stroke-linecap',\n  'stroke-linejoin',\n  'stroke-miterlimit',\n  'stroke-opacity',\n  'stroke',\n  'stroke-width',\n  'style',\n  'surfacescale',\n  'systemlanguage',\n  'tabindex',\n  'tablevalues',\n  'targetx',\n  'targety',\n  'transform',\n  'transform-origin',\n  'text-anchor',\n  'text-decoration',\n  'text-rendering',\n  'textlength',\n  'type',\n  'u1',\n  'u2',\n  'unicode',\n  'values',\n  'viewbox',\n  'visibility',\n  'version',\n  'vert-adv-y',\n  'vert-origin-x',\n  'vert-origin-y',\n  'width',\n  'word-spacing',\n  'wrap',\n  'writing-mode',\n  'xchannelselector',\n  'ychannelselector',\n  'x',\n  'x1',\n  'x2',\n  'xmlns',\n  'y',\n  'y1',\n  'y2',\n  'z',\n  'zoomandpan',\n] as const);\n\nexport const mathMl = freeze([\n  'accent',\n  'accentunder',\n  'align',\n  'bevelled',\n  'close',\n  'columnalign',\n  'columnlines',\n  'columnspacing',\n  'columnspan',\n  'denomalign',\n  'depth',\n  'dir',\n  'display',\n  'displaystyle',\n  'encoding',\n  'fence',\n  'frame',\n  'height',\n  'href',\n  'id',\n  'largeop',\n  'length',\n  'linethickness',\n  'lquote',\n  'lspace',\n  'mathbackground',\n  'mathcolor',\n  'mathsize',\n  'mathvariant',\n  'maxsize',\n  'minsize',\n  'movablelimits',\n  'notation',\n  'numalign',\n  'open',\n  'rowalign',\n  'rowlines',\n  'rowspacing',\n  'rowspan',\n  'rspace',\n  'rquote',\n  'scriptlevel',\n  'scriptminsize',\n  'scriptsizemultiplier',\n  'selection',\n  'separator',\n  'separators',\n  'stretchy',\n  'subscriptshift',\n  'supscriptshift',\n  'symmetric',\n  'voffset',\n  'width',\n  'xmlns',\n]);\n\nexport const xml = freeze([\n  'xlink:href',\n  'xml:id',\n  'xlink:title',\n  'xml:space',\n  'xmlns:xlink',\n] as const);\n", "import { seal } from './utils.js';\n\nexport const MUSTACHE_EXPR = seal(/{{[\\w\\W]*|^[\\w\\W]*}}/g);\nexport const ERB_EXPR = seal(/<%[\\w\\W]*|^[\\w\\W]*%>/g);\nexport const TMPLIT_EXPR = seal(/\\${[\\w\\W]*/g);\nexport const DATA_ATTR = seal(/^data-[\\-\\w.\\u00B7-\\uFFFF]+$/); // eslint-disable-line no-useless-escape\nexport const ARIA_ATTR = seal(/^aria-[\\-\\w]+$/); // eslint-disable-line no-useless-escape\nexport const IS_ALLOWED_URI = seal(\n  /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\\-]+(?:[^a-z+.\\-:]|$))/i // eslint-disable-line no-useless-escape\n);\nexport const IS_SCRIPT_OR_DATA = seal(/^(?:\\w+script|data):/i);\nexport const ATTR_WHITESPACE = seal(\n  /[\\u0000-\\u0020\\u00A0\\u1680\\u180E\\u2000-\\u2029\\u205F\\u3000]/g // eslint-disable-line no-control-regex\n);\nexport const DOCTYPE_NAME = seal(/^html$/i);\nexport const CUSTOM_ELEMENT = seal(/^[a-z][.\\w]*(-[.\\w]+)+$/i);\n\n// Markup-significant character probes used by _sanitizeElements.\n// Shared module-level instances are safe despite the sticky /g flags:\n// unapply() resets lastIndex for RegExp receivers before every call.\nexport const ELEMENT_MARKUP_PROBE = seal(/<[/\\w!]/g);\nexport const COMMENT_MARKUP_PROBE = seal(/<[/\\w]/g);\nexport const FALLBACK_TAG_CLOSE = seal(/<\\/no(script|embed|frames)/i);\nexport const SELF_CLOSING_TAG = seal(/\\/>/i);\n", "/* eslint-disable @typescript-eslint/indent */\n\nimport type { Config, UseProfilesConfig } from './config';\nimport type { DOMPurify, HooksMap, HookFunction, WindowLike } from './types';\nimport * as TAGS from './tags.js';\nimport * as ATTRS from './attrs.js';\nimport * as EXPRESSIONS from './regexp.js';\nimport {\n  addToSet,\n  clone,\n  entries,\n  freeze,\n  seal,\n  arrayForEach,\n  arrayIsArray,\n  arrayLastIndexOf,\n  arrayPop,\n  arrayPush,\n  arraySplice,\n  stringMatch,\n  stringReplace,\n  stringToLowerCase,\n  stringToString,\n  stringIndexOf,\n  stringTrim,\n  regExpTest,\n  isRegex,\n  typeErrorCreate,\n  lookupGetter,\n  create,\n  objectHasOwnProperty,\n  stringifyValue,\n} from './utils.js';\n\nexport type { Config } from './config';\n\nexport type {\n  DOMPurify,\n  RemovedElement,\n  RemovedAttribute,\n  HookName,\n  NodeHook,\n  ElementHook,\n  DocumentFragmentHook,\n  UponSanitizeElementHook,\n  UponSanitizeAttributeHook,\n  UponSanitizeElementHookEvent,\n  UponSanitizeAttributeHookEvent,\n  WindowLike,\n} from './types';\n\ndeclare const VERSION: string;\n\n// https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType\nconst NODE_TYPE = {\n  element: 1,\n  attribute: 2,\n  text: 3,\n  cdataSection: 4,\n  entityReference: 5, // Deprecated\n  entityNode: 6, // Deprecated\n  processingInstruction: 7,\n  comment: 8,\n  document: 9,\n  documentType: 10,\n  documentFragment: 11,\n  notation: 12, // Deprecated\n};\n\nconst getGlobal = function (): WindowLike {\n  return typeof window === 'undefined' ? null : window;\n};\n\n/**\n * Creates a no-op policy for internal use only.\n * Don't export this function outside this module!\n * @param trustedTypes The policy factory.\n * @param purifyHostElement The Script element used to load DOMPurify (to determine policy name suffix).\n * @return The policy created (or null, if Trusted Types\n * are not supported or creating the policy failed).\n */\nconst _createTrustedTypesPolicy = function (\n  trustedTypes: TrustedTypePolicyFactory,\n  purifyHostElement: HTMLScriptElement\n) {\n  if (\n    typeof trustedTypes !== 'object' ||\n    typeof trustedTypes.createPolicy !== 'function'\n  ) {\n    return null;\n  }\n\n  // Allow the callers to control the unique policy name\n  // by adding a data-tt-policy-suffix to the script element with the DOMPurify.\n  // Policy creation with duplicate names throws in Trusted Types.\n  let suffix = null;\n  const ATTR_NAME = 'data-tt-policy-suffix';\n  if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {\n    suffix = purifyHostElement.getAttribute(ATTR_NAME);\n  }\n\n  const policyName = 'dompurify' + (suffix ? '#' + suffix : '');\n\n  try {\n    return trustedTypes.createPolicy(policyName, {\n      createHTML(html) {\n        return html;\n      },\n      createScriptURL(scriptUrl) {\n        return scriptUrl;\n      },\n    });\n  } catch (_) {\n    // Policy creation failed (most likely another DOMPurify script has\n    // already run). Skip creating the policy, as this will only cause errors\n    // if TT are enforced.\n    console.warn(\n      'TrustedTypes policy ' + policyName + ' could not be created.'\n    );\n    return null;\n  }\n};\n\nconst _createHooksMap = function (): HooksMap {\n  return {\n    afterSanitizeAttributes: [],\n    afterSanitizeElements: [],\n    afterSanitizeShadowDOM: [],\n    beforeSanitizeAttributes: [],\n    beforeSanitizeElements: [],\n    beforeSanitizeShadowDOM: [],\n    uponSanitizeAttribute: [],\n    uponSanitizeElement: [],\n    uponSanitizeShadowNode: [],\n  };\n};\n\n/**\n * Resolve a set-valued configuration option: a fresh set built from\n * cfg[key] when it is an own array property (seeded with a clone of\n * options.base when given, case-normalized via options.transform),\n * the fallback set otherwise.\n *\n * @param cfg the cloned, prototype-free configuration object\n * @param key the configuration property to read\n * @param fallback the set to use when the option is absent or not an array\n * @param options transform and optional base set to merge into\n * @returns the resolved set\n */\nconst _resolveSetOption = function (\n  cfg: Config,\n  key: keyof Config,\n  fallback: Record<string, boolean>,\n  options: {\n    transform: Parameters<typeof addToSet>[2];\n    base?: Record<string, boolean>;\n  }\n): Record<string, boolean> {\n  return objectHasOwnProperty(cfg, key) && arrayIsArray(cfg[key])\n    ? addToSet(\n        options.base ? clone(options.base) : {},\n        cfg[key] as readonly unknown[],\n        options.transform\n      )\n    : fallback;\n};\n\nfunction createDOMPurify(window: WindowLike = getGlobal()): DOMPurify {\n  const DOMPurify: DOMPurify = (root: WindowLike) => createDOMPurify(root);\n\n  DOMPurify.version = VERSION;\n\n  DOMPurify.removed = [];\n\n  if (\n    !window ||\n    !window.document ||\n    window.document.nodeType !== NODE_TYPE.document ||\n    !window.Element\n  ) {\n    // Not running in a browser, provide a factory function\n    // so that you can pass your own Window\n    DOMPurify.isSupported = false;\n\n    return DOMPurify;\n  }\n\n  let { document } = window;\n\n  const originalDocument = document;\n  const currentScript: HTMLScriptElement =\n    originalDocument.currentScript as HTMLScriptElement;\n  const {\n    DocumentFragment,\n    HTMLTemplateElement,\n    Node,\n    Element,\n    NodeFilter,\n    NamedNodeMap = window.NamedNodeMap || (window as any).MozNamedAttrMap,\n    HTMLFormElement,\n    DOMParser,\n    trustedTypes,\n  } = window;\n\n  const ElementPrototype = Element.prototype;\n\n  const cloneNode = lookupGetter(ElementPrototype, 'cloneNode');\n  const remove = lookupGetter(ElementPrototype, 'remove');\n  const getNextSibling = lookupGetter(ElementPrototype, 'nextSibling');\n  const getChildNodes = lookupGetter(ElementPrototype, 'childNodes');\n  const getParentNode = lookupGetter(ElementPrototype, 'parentNode');\n  const getShadowRoot = lookupGetter(ElementPrototype, 'shadowRoot');\n  const getAttributes = lookupGetter(ElementPrototype, 'attributes');\n  const getNodeType =\n    Node && Node.prototype ? lookupGetter(Node.prototype, 'nodeType') : null;\n  const getNodeName =\n    Node && Node.prototype ? lookupGetter(Node.prototype, 'nodeName') : null;\n\n  // As per issue #47, the web-components registry is inherited by a\n  // new document created via createHTMLDocument. As per the spec\n  // (http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries)\n  // a new empty registry is used when creating a template contents owner\n  // document, so we use that as our parent document to ensure nothing\n  // is inherited.\n  if (typeof HTMLTemplateElement === 'function') {\n    const template = document.createElement('template');\n    if (template.content && template.content.ownerDocument) {\n      document = template.content.ownerDocument;\n    }\n  }\n\n  let trustedTypesPolicy;\n  let emptyHTML = '';\n\n  // The instance's own internal Trusted Types policy. Unlike a caller-supplied\n  // `TRUSTED_TYPES_POLICY`, this is created at most once \u2014 Trusted Types throws\n  // on duplicate policy names \u2014 and is the only policy allowed to persist\n  // across configurations and survive `clearConfig()`.\n  let defaultTrustedTypesPolicy;\n  let defaultTrustedTypesPolicyResolved = false;\n\n  // Tracks whether we are already inside a call to the configured Trusted Types\n  // policy (`createHTML` or `createScriptURL`). If a supplied policy callback\n  // itself calls `DOMPurify.sanitize` (the cause of #1422), `sanitize` would\n  // re-enter the policy and recurse until the stack overflows. We detect that\n  // re-entry and throw a clear, actionable error instead. The guard is shared\n  // across both callbacks, because either one re-entering `sanitize` triggers\n  // the same unbounded recursion.\n  let IN_TRUSTED_TYPES_POLICY = 0;\n  const _assertNotInTrustedTypesPolicy = function (): void {\n    if (IN_TRUSTED_TYPES_POLICY > 0) {\n      throw typeErrorCreate(\n        'A configured TRUSTED_TYPES_POLICY callback (createHTML or ' +\n          'createScriptURL) must not call DOMPurify.sanitize, as that causes ' +\n          'infinite recursion. Do not pass a policy whose callbacks wrap ' +\n          'DOMPurify as TRUSTED_TYPES_POLICY; see the \"DOMPurify and Trusted ' +\n          'Types\" section of the README.'\n      );\n    }\n  };\n\n  const _createTrustedHTML = function (html: string): string {\n    _assertNotInTrustedTypesPolicy();\n\n    IN_TRUSTED_TYPES_POLICY++;\n    try {\n      return trustedTypesPolicy.createHTML(html);\n    } finally {\n      IN_TRUSTED_TYPES_POLICY--;\n    }\n  };\n\n  const _createTrustedScriptURL = function (scriptUrl: string): string {\n    _assertNotInTrustedTypesPolicy();\n\n    IN_TRUSTED_TYPES_POLICY++;\n    try {\n      return trustedTypesPolicy.createScriptURL(scriptUrl);\n    } finally {\n      IN_TRUSTED_TYPES_POLICY--;\n    }\n  };\n\n  // Lazily resolve (and cache) the instance's internal default policy.\n  // Resolution is attempted at most once: a successful `createPolicy` cannot be\n  // repeated (Trusted Types throws on duplicate names), and a failed or\n  // unsupported attempt must not be retried on every parse.\n  const _getDefaultTrustedTypesPolicy = function () {\n    if (!defaultTrustedTypesPolicyResolved) {\n      defaultTrustedTypesPolicy = _createTrustedTypesPolicy(\n        trustedTypes,\n        currentScript\n      );\n      defaultTrustedTypesPolicyResolved = true;\n    }\n\n    return defaultTrustedTypesPolicy;\n  };\n\n  const {\n    implementation,\n    createNodeIterator,\n    createDocumentFragment,\n    getElementsByTagName,\n  } = document;\n  const { importNode } = originalDocument;\n\n  let hooks = _createHooksMap();\n\n  /**\n   * Expose whether this browser supports running the full DOMPurify.\n   */\n  DOMPurify.isSupported =\n    typeof entries === 'function' &&\n    typeof getParentNode === 'function' &&\n    implementation &&\n    implementation.createHTMLDocument !== undefined;\n\n  const {\n    MUSTACHE_EXPR,\n    ERB_EXPR,\n    TMPLIT_EXPR,\n    DATA_ATTR,\n    ARIA_ATTR,\n    IS_SCRIPT_OR_DATA,\n    ATTR_WHITESPACE,\n    CUSTOM_ELEMENT,\n  } = EXPRESSIONS;\n\n  let { IS_ALLOWED_URI } = EXPRESSIONS;\n\n  /**\n   * We consider the elements and attributes below to be safe. Ideally\n   * don't add any new ones but feel free to remove unwanted ones.\n   */\n\n  /* allowed element names */\n  let ALLOWED_TAGS = null;\n  const DEFAULT_ALLOWED_TAGS = addToSet({}, [\n    ...TAGS.html,\n    ...TAGS.svg,\n    ...TAGS.svgFilters,\n    ...TAGS.mathMl,\n    ...TAGS.text,\n  ]);\n\n  /* Allowed attribute names */\n  let ALLOWED_ATTR = null;\n  const DEFAULT_ALLOWED_ATTR = addToSet({}, [\n    ...ATTRS.html,\n    ...ATTRS.svg,\n    ...ATTRS.mathMl,\n    ...ATTRS.xml,\n  ]);\n\n  /*\n   * Configure how DOMPurify should handle custom elements and their attributes as well as customized built-in elements.\n   * @property {RegExp|Function|null} tagNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any custom elements)\n   * @property {RegExp|Function|null} attributeNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any attributes not on the allow list)\n   * @property {boolean} allowCustomizedBuiltInElements allow custom elements derived from built-ins if they pass CUSTOM_ELEMENT_HANDLING.tagNameCheck. Default: `false`.\n   */\n  let CUSTOM_ELEMENT_HANDLING = Object.seal(\n    create(null, {\n      tagNameCheck: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: null,\n      },\n      attributeNameCheck: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: null,\n      },\n      allowCustomizedBuiltInElements: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: false,\n      },\n    })\n  );\n\n  /* Explicitly forbidden tags (overrides ALLOWED_TAGS/ADD_TAGS) */\n  let FORBID_TAGS = null;\n\n  /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */\n  let FORBID_ATTR = null;\n\n  /* Config object to store ADD_TAGS/ADD_ATTR functions (when used as functions) */\n  const EXTRA_ELEMENT_HANDLING = Object.seal(\n    create(null, {\n      tagCheck: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: null,\n      },\n      attributeCheck: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: null,\n      },\n    })\n  );\n\n  /* Decide if ARIA attributes are okay */\n  let ALLOW_ARIA_ATTR = true;\n\n  /* Decide if custom data attributes are okay */\n  let ALLOW_DATA_ATTR = true;\n\n  /* Decide if unknown protocols are okay */\n  let ALLOW_UNKNOWN_PROTOCOLS = false;\n\n  /* Decide if self-closing tags in attributes are allowed.\n   * Usually removed due to a mXSS issue in jQuery 3.0 */\n  let ALLOW_SELF_CLOSE_IN_ATTR = true;\n\n  /* Output should be safe for common template engines.\n   * This means, DOMPurify removes data attributes, mustaches and ERB\n   */\n  let SAFE_FOR_TEMPLATES = false;\n\n  /* Output should be safe even for XML used within HTML and alike.\n   * This means, DOMPurify removes comments when containing risky content.\n   */\n  let SAFE_FOR_XML = true;\n\n  /* Decide if document with <html>... should be returned */\n  let WHOLE_DOCUMENT = false;\n\n  /* Track whether config is already set on this instance of DOMPurify. */\n  let SET_CONFIG = false;\n\n  /* Decide if all elements (e.g. style, script) must be children of\n   * document.body. By default, browsers might move them to document.head */\n  let FORCE_BODY = false;\n\n  /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html\n   * string (or a TrustedHTML object if Trusted Types are supported).\n   * If `WHOLE_DOCUMENT` is enabled a `HTMLHtmlElement` will be returned instead\n   */\n  let RETURN_DOM = false;\n\n  /* Decide if a DOM `DocumentFragment` should be returned, instead of a html\n   * string  (or a TrustedHTML object if Trusted Types are supported) */\n  let RETURN_DOM_FRAGMENT = false;\n\n  /* Try to return a Trusted Type object instead of a string, return a string in\n   * case Trusted Types are not supported  */\n  let RETURN_TRUSTED_TYPE = false;\n\n  /* Output should be free from DOM clobbering attacks?\n   * This sanitizes markups named with colliding, clobberable built-in DOM APIs.\n   */\n  let SANITIZE_DOM = true;\n\n  /* Achieve full DOM Clobbering protection by isolating the namespace of named\n   * properties and JS variables, mitigating attacks that abuse the HTML/DOM spec rules.\n   *\n   * HTML/DOM spec rules that enable DOM Clobbering:\n   *   - Named Access on Window (\u00A77.3.3)\n   *   - DOM Tree Accessors (\u00A73.1.5)\n   *   - Form Element Parent-Child Relations (\u00A74.10.3)\n   *   - Iframe srcdoc / Nested WindowProxies (\u00A74.8.5)\n   *   - HTMLCollection (\u00A74.2.10.2)\n   *\n   * Namespace isolation is implemented by prefixing `id` and `name` attributes\n   * with a constant string, i.e., `user-content-`\n   */\n  let SANITIZE_NAMED_PROPS = false;\n  const SANITIZE_NAMED_PROPS_PREFIX = 'user-content-';\n\n  /* Keep element content when removing element? */\n  let KEEP_CONTENT = true;\n\n  /* If a `Node` is passed to sanitize(), then performs sanitization in-place instead\n   * of importing it into a new Document and returning a sanitized copy */\n  let IN_PLACE = false;\n\n  /* Allow usage of profiles like html, svg and mathMl */\n  let USE_PROFILES: UseProfilesConfig | false = {};\n\n  /* Tags to ignore content of when KEEP_CONTENT is true */\n  let FORBID_CONTENTS = null;\n  const DEFAULT_FORBID_CONTENTS = addToSet({}, [\n    'annotation-xml',\n    'audio',\n    'colgroup',\n    'desc',\n    'foreignobject',\n    'head',\n    'iframe',\n    'math',\n    'mi',\n    'mn',\n    'mo',\n    'ms',\n    'mtext',\n    'noembed',\n    'noframes',\n    'noscript',\n    'plaintext',\n    'script',\n    // <selectedcontent> mirrors the selected <option>'s subtree, cloned by\n    // the UA (customizable <select>) \u2014 including any on* handlers \u2014 and the\n    // engine re-mirrors synchronously whenever a removal changes which\n    // option/selectedcontent is current, even inside DOMPurify's inert\n    // DOMParser document. Hoisting its children on removal re-inserts a fresh\n    // mirror target ahead of the walk, which the engine refills, looping\n    // forever (DoS) and amplifying output. Dropping its content on removal\n    // (rather than hoisting) breaks that cascade; the content is a duplicate\n    // of the option, which is sanitized on its own. See campaign-3 F1/F6.\n    'selectedcontent',\n    'style',\n    'svg',\n    'template',\n    'thead',\n    'title',\n    'video',\n    'xmp',\n  ]);\n\n  /* Tags that are safe for data: URIs */\n  let DATA_URI_TAGS = null;\n  const DEFAULT_DATA_URI_TAGS = addToSet({}, [\n    'audio',\n    'video',\n    'img',\n    'source',\n    'image',\n    'track',\n  ]);\n\n  /* Attributes safe for values like \"javascript:\" */\n  let URI_SAFE_ATTRIBUTES = null;\n  const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, [\n    'alt',\n    'class',\n    'for',\n    'id',\n    'label',\n    'name',\n    'pattern',\n    'placeholder',\n    'role',\n    'summary',\n    'title',\n    'value',\n    'style',\n    'xmlns',\n  ]);\n\n  const MATHML_NAMESPACE = 'http://www.w3.org/1998/Math/MathML';\n  const SVG_NAMESPACE = 'http://www.w3.org/2000/svg';\n  const HTML_NAMESPACE = 'http://www.w3.org/1999/xhtml';\n  /* Document namespace */\n  let NAMESPACE = HTML_NAMESPACE;\n  let IS_EMPTY_INPUT = false;\n\n  /* Allowed XHTML+XML namespaces */\n  let ALLOWED_NAMESPACES = null;\n  const DEFAULT_ALLOWED_NAMESPACES = addToSet(\n    {},\n    [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE],\n    stringToString\n  );\n\n  const DEFAULT_MATHML_TEXT_INTEGRATION_POINTS = freeze([\n    'mi',\n    'mo',\n    'mn',\n    'ms',\n    'mtext',\n  ]);\n  let MATHML_TEXT_INTEGRATION_POINTS = addToSet(\n    {},\n    DEFAULT_MATHML_TEXT_INTEGRATION_POINTS\n  );\n\n  const DEFAULT_HTML_INTEGRATION_POINTS = freeze(['annotation-xml']);\n  let HTML_INTEGRATION_POINTS = addToSet({}, DEFAULT_HTML_INTEGRATION_POINTS);\n\n  // Certain elements are allowed in both SVG and HTML\n  // namespace. We need to specify them explicitly\n  // so that they don't get erroneously deleted from\n  // HTML namespace.\n  const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, [\n    'title',\n    'style',\n    'font',\n    'a',\n    'script',\n  ]);\n\n  /* Parsing of strict XHTML documents */\n  let PARSER_MEDIA_TYPE: null | DOMParserSupportedType = null;\n  const SUPPORTED_PARSER_MEDIA_TYPES = ['application/xhtml+xml', 'text/html'];\n  const DEFAULT_PARSER_MEDIA_TYPE = 'text/html';\n  let transformCaseFunc: null | Parameters<typeof addToSet>[2] = null;\n\n  /* Keep a reference to config to pass to hooks */\n  let CONFIG: Config | null = null;\n\n  /* Ideally, do not touch anything below this line */\n  /* ______________________________________________ */\n\n  const formElement = document.createElement('form');\n\n  const isRegexOrFunction = function (\n    testValue: unknown\n  ): testValue is Function | RegExp {\n    return testValue instanceof RegExp || testValue instanceof Function;\n  };\n\n  /**\n   * _parseConfig\n   *\n   * @param cfg optional config literal\n   */\n  // eslint-disable-next-line complexity\n  const _parseConfig = function (cfg: Config = {}): void {\n    if (CONFIG && CONFIG === cfg) {\n      return;\n    }\n\n    /* Shield configuration object from tampering */\n    if (!cfg || typeof cfg !== 'object') {\n      cfg = {};\n    }\n\n    /* Shield configuration object from prototype pollution */\n    cfg = clone(cfg);\n\n    PARSER_MEDIA_TYPE =\n      // eslint-disable-next-line unicorn/prefer-includes\n      SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1\n        ? DEFAULT_PARSER_MEDIA_TYPE\n        : cfg.PARSER_MEDIA_TYPE;\n\n    // HTML tags and attributes are not case-sensitive, converting to lowercase. Keeping XHTML as is.\n    transformCaseFunc =\n      PARSER_MEDIA_TYPE === 'application/xhtml+xml'\n        ? stringToString\n        : stringToLowerCase;\n\n    /* Set configuration parameters */\n    ALLOWED_TAGS = _resolveSetOption(\n      cfg,\n      'ALLOWED_TAGS',\n      DEFAULT_ALLOWED_TAGS,\n      { transform: transformCaseFunc }\n    );\n    ALLOWED_ATTR = _resolveSetOption(\n      cfg,\n      'ALLOWED_ATTR',\n      DEFAULT_ALLOWED_ATTR,\n      { transform: transformCaseFunc }\n    );\n    ALLOWED_NAMESPACES = _resolveSetOption(\n      cfg,\n      'ALLOWED_NAMESPACES',\n      DEFAULT_ALLOWED_NAMESPACES,\n      { transform: stringToString }\n    );\n    URI_SAFE_ATTRIBUTES = _resolveSetOption(\n      cfg,\n      'ADD_URI_SAFE_ATTR',\n      DEFAULT_URI_SAFE_ATTRIBUTES,\n      { transform: transformCaseFunc, base: DEFAULT_URI_SAFE_ATTRIBUTES }\n    );\n    DATA_URI_TAGS = _resolveSetOption(\n      cfg,\n      'ADD_DATA_URI_TAGS',\n      DEFAULT_DATA_URI_TAGS,\n      { transform: transformCaseFunc, base: DEFAULT_DATA_URI_TAGS }\n    );\n    FORBID_CONTENTS = _resolveSetOption(\n      cfg,\n      'FORBID_CONTENTS',\n      DEFAULT_FORBID_CONTENTS,\n      { transform: transformCaseFunc }\n    );\n    FORBID_TAGS = _resolveSetOption(cfg, 'FORBID_TAGS', clone({}), {\n      transform: transformCaseFunc,\n    });\n    FORBID_ATTR = _resolveSetOption(cfg, 'FORBID_ATTR', clone({}), {\n      transform: transformCaseFunc,\n    });\n    USE_PROFILES = objectHasOwnProperty(cfg, 'USE_PROFILES')\n      ? cfg.USE_PROFILES && typeof cfg.USE_PROFILES === 'object'\n        ? clone(cfg.USE_PROFILES)\n        : cfg.USE_PROFILES\n      : false;\n\n    ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false; // Default true\n    ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false; // Default true\n    ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false; // Default false\n    ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false; // Default true\n    SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false; // Default false\n    SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false; // Default true\n    WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false; // Default false\n    RETURN_DOM = cfg.RETURN_DOM || false; // Default false\n    RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false; // Default false\n    RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false; // Default false\n    FORCE_BODY = cfg.FORCE_BODY || false; // Default false\n    SANITIZE_DOM = cfg.SANITIZE_DOM !== false; // Default true\n    SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false; // Default false\n    KEEP_CONTENT = cfg.KEEP_CONTENT !== false; // Default true\n    IN_PLACE = cfg.IN_PLACE || false; // Default false\n    IS_ALLOWED_URI = isRegex(cfg.ALLOWED_URI_REGEXP)\n      ? cfg.ALLOWED_URI_REGEXP\n      : EXPRESSIONS.IS_ALLOWED_URI; // Default regexp\n\n    NAMESPACE =\n      typeof cfg.NAMESPACE === 'string' ? cfg.NAMESPACE : HTML_NAMESPACE; // Default HTML namespace\n\n    MATHML_TEXT_INTEGRATION_POINTS =\n      objectHasOwnProperty(cfg, 'MATHML_TEXT_INTEGRATION_POINTS') &&\n      cfg.MATHML_TEXT_INTEGRATION_POINTS &&\n      typeof cfg.MATHML_TEXT_INTEGRATION_POINTS === 'object'\n        ? clone(cfg.MATHML_TEXT_INTEGRATION_POINTS)\n        : addToSet({}, DEFAULT_MATHML_TEXT_INTEGRATION_POINTS); // Default built-in map\n\n    HTML_INTEGRATION_POINTS =\n      objectHasOwnProperty(cfg, 'HTML_INTEGRATION_POINTS') &&\n      cfg.HTML_INTEGRATION_POINTS &&\n      typeof cfg.HTML_INTEGRATION_POINTS === 'object'\n        ? clone(cfg.HTML_INTEGRATION_POINTS)\n        : addToSet({}, DEFAULT_HTML_INTEGRATION_POINTS); // Default built-in map\n\n    const customElementHandling =\n      objectHasOwnProperty(cfg, 'CUSTOM_ELEMENT_HANDLING') &&\n      cfg.CUSTOM_ELEMENT_HANDLING &&\n      typeof cfg.CUSTOM_ELEMENT_HANDLING === 'object'\n        ? clone(cfg.CUSTOM_ELEMENT_HANDLING)\n        : create(null);\n\n    CUSTOM_ELEMENT_HANDLING = create(null);\n\n    if (\n      objectHasOwnProperty(customElementHandling, 'tagNameCheck') &&\n      isRegexOrFunction(customElementHandling.tagNameCheck)\n    ) {\n      CUSTOM_ELEMENT_HANDLING.tagNameCheck = customElementHandling.tagNameCheck; // Default undefined\n    }\n\n    if (\n      objectHasOwnProperty(customElementHandling, 'attributeNameCheck') &&\n      isRegexOrFunction(customElementHandling.attributeNameCheck)\n    ) {\n      CUSTOM_ELEMENT_HANDLING.attributeNameCheck =\n        customElementHandling.attributeNameCheck; // Default undefined\n    }\n\n    if (\n      objectHasOwnProperty(\n        customElementHandling,\n        'allowCustomizedBuiltInElements'\n      ) &&\n      typeof customElementHandling.allowCustomizedBuiltInElements === 'boolean'\n    ) {\n      CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements =\n        customElementHandling.allowCustomizedBuiltInElements; // Default undefined\n    }\n\n    seal(CUSTOM_ELEMENT_HANDLING);\n\n    if (SAFE_FOR_TEMPLATES) {\n      ALLOW_DATA_ATTR = false;\n    }\n\n    if (RETURN_DOM_FRAGMENT) {\n      RETURN_DOM = true;\n    }\n\n    /* Parse profile info */\n    if (USE_PROFILES) {\n      ALLOWED_TAGS = addToSet({}, TAGS.text);\n      ALLOWED_ATTR = create(null);\n      if (USE_PROFILES.html === true) {\n        addToSet(ALLOWED_TAGS, TAGS.html);\n        addToSet(ALLOWED_ATTR, ATTRS.html);\n      }\n\n      if (USE_PROFILES.svg === true) {\n        addToSet(ALLOWED_TAGS, TAGS.svg);\n        addToSet(ALLOWED_ATTR, ATTRS.svg);\n        addToSet(ALLOWED_ATTR, ATTRS.xml);\n      }\n\n      if (USE_PROFILES.svgFilters === true) {\n        addToSet(ALLOWED_TAGS, TAGS.svgFilters);\n        addToSet(ALLOWED_ATTR, ATTRS.svg);\n        addToSet(ALLOWED_ATTR, ATTRS.xml);\n      }\n\n      if (USE_PROFILES.mathMl === true) {\n        addToSet(ALLOWED_TAGS, TAGS.mathMl);\n        addToSet(ALLOWED_ATTR, ATTRS.mathMl);\n        addToSet(ALLOWED_ATTR, ATTRS.xml);\n      }\n    }\n\n    /* Always reset function-based ADD_TAGS / ADD_ATTR checks to prevent\n     * leaking across calls when switching from function to array config */\n    EXTRA_ELEMENT_HANDLING.tagCheck = null;\n    EXTRA_ELEMENT_HANDLING.attributeCheck = null;\n\n    /* Merge configuration parameters */\n    if (objectHasOwnProperty(cfg, 'ADD_TAGS')) {\n      if (typeof cfg.ADD_TAGS === 'function') {\n        EXTRA_ELEMENT_HANDLING.tagCheck = cfg.ADD_TAGS;\n      } else if (arrayIsArray(cfg.ADD_TAGS)) {\n        if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {\n          ALLOWED_TAGS = clone(ALLOWED_TAGS);\n        }\n\n        addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);\n      }\n    }\n\n    if (objectHasOwnProperty(cfg, 'ADD_ATTR')) {\n      if (typeof cfg.ADD_ATTR === 'function') {\n        EXTRA_ELEMENT_HANDLING.attributeCheck = cfg.ADD_ATTR;\n      } else if (arrayIsArray(cfg.ADD_ATTR)) {\n        if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {\n          ALLOWED_ATTR = clone(ALLOWED_ATTR);\n        }\n\n        addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);\n      }\n    }\n\n    if (\n      objectHasOwnProperty(cfg, 'ADD_URI_SAFE_ATTR') &&\n      arrayIsArray(cfg.ADD_URI_SAFE_ATTR)\n    ) {\n      addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);\n    }\n\n    if (\n      objectHasOwnProperty(cfg, 'FORBID_CONTENTS') &&\n      arrayIsArray(cfg.FORBID_CONTENTS)\n    ) {\n      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {\n        FORBID_CONTENTS = clone(FORBID_CONTENTS);\n      }\n\n      addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);\n    }\n\n    if (\n      objectHasOwnProperty(cfg, 'ADD_FORBID_CONTENTS') &&\n      arrayIsArray(cfg.ADD_FORBID_CONTENTS)\n    ) {\n      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {\n        FORBID_CONTENTS = clone(FORBID_CONTENTS);\n      }\n\n      addToSet(FORBID_CONTENTS, cfg.ADD_FORBID_CONTENTS, transformCaseFunc);\n    }\n\n    /* Add #text in case KEEP_CONTENT is set to true */\n    if (KEEP_CONTENT) {\n      ALLOWED_TAGS['#text'] = true;\n    }\n\n    /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */\n    if (WHOLE_DOCUMENT) {\n      addToSet(ALLOWED_TAGS, ['html', 'head', 'body']);\n    }\n\n    /* Add tbody to ALLOWED_TAGS in case tables are permitted, see #286, #365 */\n    if (ALLOWED_TAGS.table) {\n      addToSet(ALLOWED_TAGS, ['tbody']);\n      delete FORBID_TAGS.tbody;\n    }\n\n    // Re-derive the active Trusted Types policy from this configuration on\n    // every parse. The active policy must never be sticky closure state that\n    // outlives the config that set it: a caller-supplied policy left in place\n    // after `clearConfig()` \u2014 or after a later call that supplied none, or\n    // `TRUSTED_TYPES_POLICY: null` \u2014 could sign a subsequent \"default\"\n    // `RETURN_TRUSTED_TYPE` result with a foreign, possibly unsafe policy.\n    // See GHSA-vxr8-fq34-vvx9.\n    if (cfg.TRUSTED_TYPES_POLICY) {\n      if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== 'function') {\n        throw typeErrorCreate(\n          'TRUSTED_TYPES_POLICY configuration option must provide a \"createHTML\" hook.'\n        );\n      }\n\n      if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== 'function') {\n        throw typeErrorCreate(\n          'TRUSTED_TYPES_POLICY configuration option must provide a \"createScriptURL\" hook.'\n        );\n      }\n\n      // A caller-supplied policy applies to this configuration only.\n      const previousTrustedTypesPolicy = trustedTypesPolicy;\n      trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;\n\n      // Sign local variables required by `sanitize`. If the supplied policy's\n      // `createHTML` is circular (i.e. it calls `DOMPurify.sanitize`), this\n      // throws via the re-entrancy guard. Restore the previous policy first so\n      // the instance is not left in a poisoned state. See #1422.\n      try {\n        emptyHTML = _createTrustedHTML('');\n      } catch (error) {\n        trustedTypesPolicy = previousTrustedTypesPolicy;\n        throw error;\n      }\n    } else if (cfg.TRUSTED_TYPES_POLICY === null) {\n      // Explicit opt-out for this call: perform no Trusted Types signing and\n      // create nothing (so a strict `trusted-types` CSP that disallows a\n      // `dompurify` policy can still call `sanitize` from inside its own\n      // policy \u2014 see #1422). Resetting to `undefined` rather than a sticky\n      // `null` also drops any previously retained caller policy, so it cannot\n      // resurface on a later call, while still allowing the next config-less\n      // call to restore the internal default policy. See GHSA-vxr8-fq34-vvx9.\n      trustedTypesPolicy = undefined;\n      emptyHTML = '';\n    } else {\n      // No policy supplied: keep the currently active policy if one is set \u2014 a\n      // previously supplied policy is intentionally sticky across config-less\n      // calls \u2014 otherwise fall back to the instance's own internal policy,\n      // created at most once. (A policy supplied for a *single* call still\n      // lingers by design; what must not linger is a policy whose configuration\n      // has been torn down via `clearConfig()`, which restores the default.)\n      if (trustedTypesPolicy === undefined) {\n        trustedTypesPolicy = _getDefaultTrustedTypesPolicy();\n      }\n\n      // Sign internal variables only when a policy is active. A falsy policy\n      // (Trusted Types unsupported, creation failed, or an explicit opt-out)\n      // leaves `emptyHTML` as a plain string, so we never call `.createHTML` on\n      // a non-policy and throw. See #1422.\n      if (trustedTypesPolicy && typeof emptyHTML === 'string') {\n        emptyHTML = _createTrustedHTML('');\n      }\n    }\n\n    /*\n     * Mirror the clone-before-mutate pattern already applied above for\n     * cfg.ADD_TAGS / cfg.ADD_ATTR: if any uponSanitize* hook is\n     * registered AND the set still points at the default constant,\n     * clone it. The hook then mutates the clone (in-call widening\n     * still works exactly as documented) and the next default-cfg\n     * call rebinds to the untouched original via the reassignment at\n     * the top of this function.\n     */\n    if (\n      (hooks.uponSanitizeElement.length > 0 ||\n        hooks.uponSanitizeAttribute.length > 0) &&\n      ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS\n    ) {\n      ALLOWED_TAGS = clone(ALLOWED_TAGS);\n    }\n\n    if (\n      hooks.uponSanitizeAttribute.length > 0 &&\n      ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR\n    ) {\n      ALLOWED_ATTR = clone(ALLOWED_ATTR);\n    }\n\n    // Prevent further manipulation of configuration.\n    // Not available in IE8, Safari 5, etc.\n    if (freeze) {\n      freeze(cfg);\n    }\n\n    CONFIG = cfg;\n  };\n\n  /* Keep track of all possible SVG and MathML tags\n   * so that we can perform the namespace checks\n   * correctly. */\n  const ALL_SVG_TAGS = addToSet({}, [\n    ...TAGS.svg,\n    ...TAGS.svgFilters,\n    ...TAGS.svgDisallowed,\n  ]);\n  const ALL_MATHML_TAGS = addToSet({}, [\n    ...TAGS.mathMl,\n    ...TAGS.mathMlDisallowed,\n  ]);\n\n  /**\n   * Namespace rules for an element in the SVG namespace.\n   *\n   * @param tagName the element's lowercase tag name\n   * @param parent the (possibly simulated) parent node\n   * @param parentTagName the parent's lowercase tag name\n   * @returns true if a spec-compliant parser could produce this element\n   */\n  const _checkSvgNamespace = function (\n    tagName: string,\n    parent: { namespaceURI?: string },\n    parentTagName: string\n  ): boolean {\n    // The only way to switch from HTML namespace to SVG\n    // is via <svg>. If it happens via any other tag, then\n    // it should be killed.\n    if (parent.namespaceURI === HTML_NAMESPACE) {\n      return tagName === 'svg';\n    }\n\n    // The only way to switch from MathML to SVG is via <svg>\n    // if the parent is either <annotation-xml> or a MathML\n    // text integration point.\n    if (parent.namespaceURI === MATHML_NAMESPACE) {\n      return (\n        tagName === 'svg' &&\n        (parentTagName === 'annotation-xml' ||\n          MATHML_TEXT_INTEGRATION_POINTS[parentTagName])\n      );\n    }\n\n    // We only allow elements that are defined in SVG\n    // spec. All others are disallowed in SVG namespace.\n    return Boolean(ALL_SVG_TAGS[tagName]);\n  };\n\n  /**\n   * Namespace rules for an element in the MathML namespace.\n   *\n   * @param tagName the element's lowercase tag name\n   * @param parent the (possibly simulated) parent node\n   * @param parentTagName the parent's lowercase tag name\n   * @returns true if a spec-compliant parser could produce this element\n   */\n  const _checkMathMlNamespace = function (\n    tagName: string,\n    parent: { namespaceURI?: string },\n    parentTagName: string\n  ): boolean {\n    // The only way to switch from HTML namespace to MathML\n    // is via <math>. If it happens via any other tag, then\n    // it should be killed.\n    if (parent.namespaceURI === HTML_NAMESPACE) {\n      return tagName === 'math';\n    }\n\n    // The only way to switch from SVG to MathML is via\n    // <math> and HTML integration points\n    if (parent.namespaceURI === SVG_NAMESPACE) {\n      return tagName === 'math' && HTML_INTEGRATION_POINTS[parentTagName];\n    }\n\n    // We only allow elements that are defined in MathML\n    // spec. All others are disallowed in MathML namespace.\n    return Boolean(ALL_MATHML_TAGS[tagName]);\n  };\n\n  /**\n   * Namespace rules for an element in the HTML namespace.\n   *\n   * @param tagName the element's lowercase tag name\n   * @param parent the (possibly simulated) parent node\n   * @param parentTagName the parent's lowercase tag name\n   * @returns true if a spec-compliant parser could produce this element\n   */\n  const _checkHtmlNamespace = function (\n    tagName: string,\n    parent: { namespaceURI?: string },\n    parentTagName: string\n  ): boolean {\n    // The only way to switch from SVG to HTML is via\n    // HTML integration points, and from MathML to HTML\n    // is via MathML text integration points\n    if (\n      parent.namespaceURI === SVG_NAMESPACE &&\n      !HTML_INTEGRATION_POINTS[parentTagName]\n    ) {\n      return false;\n    }\n\n    if (\n      parent.namespaceURI === MATHML_NAMESPACE &&\n      !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]\n    ) {\n      return false;\n    }\n\n    // We disallow tags that are specific for MathML\n    // or SVG and should never appear in HTML namespace\n    return (\n      !ALL_MATHML_TAGS[tagName] &&\n      (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName])\n    );\n  };\n\n  /**\n   * @param element a DOM element whose namespace is being checked\n   * @returns Return false if the element has a\n   *  namespace that a spec-compliant parser would never\n   *  return. Return true otherwise.\n   */\n  const _checkValidNamespace = function (element: Element): boolean {\n    let parent = getParentNode(element);\n\n    // In JSDOM, if we're inside shadow DOM, then parentNode\n    // can be null. We just simulate parent in this case.\n    if (!parent || !parent.tagName) {\n      parent = {\n        namespaceURI: NAMESPACE,\n        tagName: 'template',\n      };\n    }\n\n    const tagName = stringToLowerCase(element.tagName);\n    const parentTagName = stringToLowerCase(parent.tagName);\n\n    if (!ALLOWED_NAMESPACES[element.namespaceURI]) {\n      return false;\n    }\n\n    if (element.namespaceURI === SVG_NAMESPACE) {\n      return _checkSvgNamespace(tagName, parent, parentTagName);\n    }\n\n    if (element.namespaceURI === MATHML_NAMESPACE) {\n      return _checkMathMlNamespace(tagName, parent, parentTagName);\n    }\n\n    if (element.namespaceURI === HTML_NAMESPACE) {\n      return _checkHtmlNamespace(tagName, parent, parentTagName);\n    }\n\n    // For XHTML and XML documents that support custom namespaces\n    if (\n      PARSER_MEDIA_TYPE === 'application/xhtml+xml' &&\n      ALLOWED_NAMESPACES[element.namespaceURI]\n    ) {\n      return true;\n    }\n\n    // The code should never reach this place (this means\n    // that the element somehow got namespace that is not\n    // HTML, SVG, MathML or allowed via ALLOWED_NAMESPACES).\n    // Return false just in case.\n    return false;\n  };\n\n  /**\n   * _forceRemove\n   *\n   * @param node a DOM node\n   */\n  const _forceRemove = function (node: Node): void {\n    arrayPush(DOMPurify.removed, { element: node });\n\n    try {\n      // eslint-disable-next-line unicorn/prefer-dom-node-remove\n      getParentNode(node).removeChild(node);\n    } catch (_) {\n      /* The normal detach failed \u2014 this is reached for a parentless node\n         (getParentNode() is null, so .removeChild throws). Element.prototype\n         .remove() is itself a spec no-op on a parentless node, so a recorded\n         \"removal\" would otherwise hand the caller back an intact,\n         payload-bearing node (e.g. a detached IN_PLACE root the mXSS canary or\n         the style-with-element-child rule decided to kill). Fail closed by\n         throwing \u2014 exactly as a clobbered root does at the IN_PLACE entry \u2014\n         rather than trying to \"neutralize\" the node via its own methods.\n         Neutralizing would mean calling getAttributeNames()/removeAttribute()\n         on the node, both of which a <form> root can clobber via a named child\n         (and _isClobbered does not even probe getAttributeNames), so the\n         neutralize step could itself be silently defeated, leaving the payload\n         intact. A throw touches only the cached, clobber-safe remove() and\n         getParentNode(). Generalizes GHSA-r47g-fvhr-h676 (clobbered-form root)\n         to every root-kill reason. REPORT-3.\n\n         This lives inside the catch, so it never fires for a normally-removed\n         in-tree node: those have a parent, removeChild() succeeds, and the\n         catch is not entered. Only a kept (parentless) root reaches here. */\n      remove(node);\n\n      if (!getParentNode(node)) {\n        throw typeErrorCreate(\n          'a node selected for removal could not be detached from its tree ' +\n            'and cannot be safely returned; refusing to sanitize in place'\n        );\n      }\n    }\n  };\n\n  /**\n   * _neutralizeRoot\n   *\n   * Fail-closed teardown of an in-place root after the sanitize walk aborts\n   * (campaign-3 F2). An internal throw mid-walk \u2014 e.g. a page-registered\n   * custom element's reaction detaches a node so `_forceRemove`'s deliberate\n   * parentless guard throws, or any other re-entrant engine mutation \u2014 would\n   * otherwise leave the caller's *live* tree half-sanitized, with everything\n   * after the abort point still carrying its handlers. There is no safe way\n   * to resume the walk (the tree mutated under us), so we strip the root bare:\n   * remove every child and every attribute, then let the caller's catch see\n   * the original error. Clobber-safe (cached `remove`/`childNodes`/`attributes`\n   * getters; the root was already clobber-pre-flighted at the IN_PLACE entry).\n   *\n   * @param root the in-place root to empty\n   */\n  const _neutralizeRoot = function (root: Node): void {\n    const childNodes = getChildNodes(root);\n    if (childNodes) {\n      const snapshot: Node[] = [];\n      arrayForEach(childNodes, (child) => {\n        arrayPush(snapshot, child);\n      });\n      arrayForEach(snapshot, (child) => {\n        try {\n          remove(child);\n        } catch (_) {\n          /* Best-effort teardown; a still-attached child is handled below */\n        }\n      });\n    }\n\n    const attributes = getAttributes(root);\n    if (attributes) {\n      for (let i = attributes.length - 1; i >= 0; --i) {\n        const attribute = attributes[i];\n        const name = attribute && attribute.name;\n        if (typeof name === 'string') {\n          try {\n            (root as Element).removeAttribute(name);\n          } catch (_) {\n            /* Clobbered removeAttribute \u2014 ignore (fail-closed best effort) */\n          }\n        }\n      }\n    }\n  };\n\n  /**\n   * _removeAttribute\n   *\n   * @param name an Attribute name\n   * @param element a DOM node\n   */\n  const _removeAttribute = function (name: string, element: Element): void {\n    try {\n      arrayPush(DOMPurify.removed, {\n        attribute: element.getAttributeNode(name),\n        from: element,\n      });\n    } catch (_) {\n      arrayPush(DOMPurify.removed, {\n        attribute: null,\n        from: element,\n      });\n    }\n\n    element.removeAttribute(name);\n\n    // We void attribute values for unremovable \"is\" attributes\n    if (name === 'is') {\n      if (RETURN_DOM || RETURN_DOM_FRAGMENT) {\n        try {\n          _forceRemove(element);\n        } catch (_) {}\n      } else {\n        try {\n          element.setAttribute(name, '');\n        } catch (_) {}\n      }\n    }\n  };\n\n  /**\n   * _stripDisallowedAttributes\n   *\n   * Removes every attribute the active configuration does not allow from a\n   * single element, using the same allowlist as the main attribute pass (so\n   * `on*` handlers go, but no `/^on/` blocklist is introduced). Used only to\n   * neutralise nodes that are being discarded from an in-place tree.\n   *\n   * @param element the element to strip\n   */\n  const _stripDisallowedAttributes = function (element: Element): void {\n    const attributes = getAttributes(element);\n    if (!attributes) {\n      return;\n    }\n\n    for (let i = attributes.length - 1; i >= 0; --i) {\n      const attribute = attributes[i];\n      const name = attribute && attribute.name;\n      if (typeof name !== 'string' || ALLOWED_ATTR[transformCaseFunc(name)]) {\n        continue;\n      }\n\n      try {\n        element.removeAttribute(name);\n      } catch (_) {\n        /* Clobbered removeAttribute on a doomed node \u2014 ignore */\n      }\n    }\n  };\n\n  /**\n   * _neutralizeSubtree\n   *\n   * Completes the audit-5 F1 fix across every removal path. The KEEP_CONTENT\n   * move-hoist neutralises only disallowed-tag removals; clobber, mXSS-canary,\n   * namespace, comment, processing-instruction and KEEP_CONTENT:false removals\n   * all drop their subtree wholesale via `_forceRemove`. On the IN_PLACE path\n   * those dropped nodes are detached from the caller's LIVE tree but a\n   * handler-bearing original among them (an `<img onerror>`/`<video>` that was\n   * loading) keeps its queued resource event, which fires in page scope after\n   * sanitize returns. This walks a removed subtree and strips every attribute\n   * the active configuration does not allow \u2014 so `on*` handlers are cancelled\n   * through the SAME allowlist that governs kept nodes, not a separate `/^on/`\n   * blocklist. Run synchronously before sanitize returns, i.e. before any\n   * queued event can fire. Hook-free by design: these nodes leave the output,\n   * so firing attribute hooks for them would be surprising. Clobber-safe reads;\n   * a doomed clobbered node may shadow `removeAttribute` (its own attributes are\n   * irrelevant \u2014 it is discarded \u2014 while its non-clobbered descendants, e.g.\n   * the `<img>`, are reached and scrubbed).\n   *\n   * @param root the root of a removed subtree to neutralise\n   */\n  const _neutralizeSubtree = function (root: Node): void {\n    const stack: Node[] = [root];\n\n    while (stack.length > 0) {\n      const node = stack.pop();\n      const nodeType = getNodeType ? getNodeType(node) : (node as any).nodeType;\n\n      if (nodeType === NODE_TYPE.element) {\n        _stripDisallowedAttributes(node as Element);\n      }\n\n      const childNodes = getChildNodes(node);\n      if (childNodes) {\n        for (let i = childNodes.length - 1; i >= 0; --i) {\n          stack.push(childNodes[i]);\n        }\n      }\n    }\n  };\n\n  /**\n   * _initDocument\n   *\n   * @param dirty - a string of dirty markup\n   * @return a DOM, filled with the dirty markup\n   */\n  const _initDocument = function (dirty: string): Document {\n    /* Create a HTML document */\n    let doc = null;\n    let leadingWhitespace = null;\n\n    if (FORCE_BODY) {\n      dirty = '<remove></remove>' + dirty;\n    } else {\n      /* If FORCE_BODY isn't used, leading whitespace needs to be preserved manually */\n      const matches = stringMatch(dirty, /^[\\r\\n\\t ]+/);\n      leadingWhitespace = matches && matches[0];\n    }\n\n    if (\n      PARSER_MEDIA_TYPE === 'application/xhtml+xml' &&\n      NAMESPACE === HTML_NAMESPACE\n    ) {\n      // Root of XHTML doc must contain xmlns declaration (see https://www.w3.org/TR/xhtml1/normative.html#strict)\n      dirty =\n        '<html xmlns=\"http://www.w3.org/1999/xhtml\"><head></head><body>' +\n        dirty +\n        '</body></html>';\n    }\n\n    const dirtyPayload = trustedTypesPolicy ? _createTrustedHTML(dirty) : dirty;\n    /*\n     * Use the DOMParser API by default, fallback later if needs be\n     * DOMParser not work for svg when has multiple root element.\n     */\n    if (NAMESPACE === HTML_NAMESPACE) {\n      try {\n        doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);\n      } catch (_) {}\n    }\n\n    /* Use createHTMLDocument in case DOMParser is not available */\n    if (!doc || !doc.documentElement) {\n      doc = implementation.createDocument(NAMESPACE, 'template', null);\n      try {\n        doc.documentElement.innerHTML = IS_EMPTY_INPUT\n          ? emptyHTML\n          : dirtyPayload;\n      } catch (_) {\n        // Syntax error if dirtyPayload is invalid xml\n      }\n    }\n\n    const body = doc.body || doc.documentElement;\n\n    if (dirty && leadingWhitespace) {\n      body.insertBefore(\n        document.createTextNode(leadingWhitespace),\n        body.childNodes[0] || null\n      );\n    }\n\n    /* Work on whole document or just its body */\n    if (NAMESPACE === HTML_NAMESPACE) {\n      return getElementsByTagName.call(\n        doc,\n        WHOLE_DOCUMENT ? 'html' : 'body'\n      )[0];\n    }\n\n    return WHOLE_DOCUMENT ? doc.documentElement : body;\n  };\n\n  /**\n   * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.\n   *\n   * @param root The root element or node to start traversing on.\n   * @return The created NodeIterator\n   */\n  const _createNodeIterator = function (root: Node): NodeIterator {\n    return createNodeIterator.call(\n      root.ownerDocument || root,\n      root,\n      // eslint-disable-next-line no-bitwise\n      NodeFilter.SHOW_ELEMENT |\n        NodeFilter.SHOW_COMMENT |\n        NodeFilter.SHOW_TEXT |\n        NodeFilter.SHOW_PROCESSING_INSTRUCTION |\n        NodeFilter.SHOW_CDATA_SECTION,\n      null\n    );\n  };\n\n  /**\n   * Replace template expression syntax (mustache, ERB, template\n   * literal) with a space; shared by all SAFE_FOR_TEMPLATES scrub\n   * sites. Order matters: mustache, then ERB, then template literal.\n   *\n   * @param value the string to scrub\n   * @returns the scrubbed string\n   */\n  const _stripTemplateExpressions = function (value: string): string {\n    value = stringReplace(value, MUSTACHE_EXPR, ' ');\n    value = stringReplace(value, ERB_EXPR, ' ');\n    value = stringReplace(value, TMPLIT_EXPR, ' ');\n    return value;\n  };\n\n  /**\n   * Strip template-engine expressions ({{...}}, ${...}, <%...%>) from the\n   * character data of an element subtree. Used as the final safety net for\n   * SAFE_FOR_TEMPLATES on every DOM-returning code path so that expressions\n   * which only form after text-node normalization (e.g. fragments split across\n   * stripped elements) cannot survive into a template-evaluating framework.\n   *\n   * Walks text/comment/CDATA/processing-instruction nodes and mutates `.data`\n   * in place rather than round-tripping through innerHTML. This preserves\n   * descendant node references (important for IN_PLACE callers), avoids a\n   * serialize/reparse cycle, and reads literal character data \u2014 which means\n   * `<%...%>` in text content matches the ERB regex against its real bytes\n   * instead of the HTML-entity-escaped form innerHTML would produce.\n   *\n   * Attribute values are not visited here; SAFE_FOR_TEMPLATES handling for\n   * attributes is performed during the per-node `_sanitizeAttributes` pass.\n   *\n   * @param node The root element whose character data should be scrubbed.\n   */\n  const _scrubTemplateExpressions = function (node: Element): void {\n    node.normalize();\n    const walker = createNodeIterator.call(\n      node.ownerDocument || node,\n      node,\n      // eslint-disable-next-line no-bitwise\n      NodeFilter.SHOW_TEXT |\n        NodeFilter.SHOW_COMMENT |\n        NodeFilter.SHOW_CDATA_SECTION |\n        NodeFilter.SHOW_PROCESSING_INSTRUCTION,\n      null\n    );\n\n    let currentNode = walker.nextNode() as CharacterData | null;\n    while (currentNode) {\n      currentNode.data = _stripTemplateExpressions(currentNode.data);\n      currentNode = walker.nextNode() as CharacterData | null;\n    }\n\n    // NodeIterator does not descend into <template>.content per the DOM spec,\n    // so we must explicitly recurse into each template's content fragment,\n    // mirroring the approach used by _sanitizeShadowDOM.\n    const templates = node.querySelectorAll?.('template');\n    if (templates) {\n      arrayForEach(templates, (tmpl: HTMLTemplateElement) => {\n        if (_isDocumentFragment(tmpl.content)) {\n          _scrubTemplateExpressions(tmpl.content as unknown as Element);\n        }\n      });\n    }\n  };\n\n  /**\n   * _isClobbered\n   *\n   * Detect DOM-clobbering on HTMLFormElement nodes. Form is the only HTML\n   * interface with [LegacyOverrideBuiltIns]; a descendant element with a\n   * `name` attribute matching a prototype property shadows that property\n   * on direct reads. We use this check at the IN_PLACE entry-point and\n   * during attribute sanitization to refuse clobbered forms.\n   *\n   * @param element element to check for clobbering attacks\n   * @return true if clobbered, false if safe\n   */\n  const _isClobbered = function (element: Element): boolean {\n    // Realm-independent tag-name probe. If we can't determine the tag\n    // name at all, we can't reason about clobbering \u2014 return false\n    // (the caller's other defences still apply).\n    const realTagName = getNodeName ? getNodeName(element) : null;\n    if (typeof realTagName !== 'string') {\n      return false;\n    }\n\n    if (transformCaseFunc(realTagName) !== 'form') {\n      return false;\n    }\n\n    return (\n      typeof element.nodeName !== 'string' ||\n      typeof element.textContent !== 'string' ||\n      typeof element.removeChild !== 'function' ||\n      // Realm-safe NamedNodeMap detection: equality against the cached\n      // prototype getter. Clobbered .attributes (e.g. <input name=\"attributes\">)\n      // makes the direct read diverge from the cached read; a clean form\n      // (same-realm OR foreign-realm) has both reads pointing at the same\n      // canonical NamedNodeMap.\n      element.attributes !== getAttributes(element) ||\n      typeof element.removeAttribute !== 'function' ||\n      typeof element.setAttribute !== 'function' ||\n      typeof element.namespaceURI !== 'string' ||\n      typeof element.insertBefore !== 'function' ||\n      typeof element.hasChildNodes !== 'function' ||\n      // NodeType clobbering probe. Cached Node.prototype.nodeType getter\n      // returns the integer 1 for any Element regardless of realm; direct\n      // read on a clobbered form (e.g. <input name=\"nodeType\">) returns\n      // the named child element. Cheap addition \u2014 nodeType is read from\n      // an internal slot, no serialization cost \u2014 and removes a residual\n      // clobbering surface used by several mXSS / PI / comment branches\n      // in _sanitizeElements that compare currentNode.nodeType directly.\n      element.nodeType !== getNodeType(element) ||\n      // HTMLFormElement has [LegacyOverrideBuiltIns]: a descendant named\n      // \"childNodes\" shadows the prototype getter. Direct reads of\n      // form.childNodes from a clobbered form return the named child\n      // instead of the real NodeList, so any walk that reads it directly\n      // skips the form's real children. Compare the direct read to the\n      // cached Node.prototype getter \u2014 when the form's named-property\n      // getter intercepts the read, the two values differ and we flag\n      // the form. This catches every clobbering child type (input,\n      // select, etc.) regardless of whether the named child happens to\n      // carry a numeric .length, which a typeof-based probe would miss\n      // (e.g. HTMLSelectElement.length is a defined unsigned-long).\n      element.childNodes !== getChildNodes(element)\n    );\n  };\n\n  /**\n   * Checks whether the given value is a DocumentFragment from any realm.\n   *\n   * The realm-independent replacement reads `nodeType` through the cached\n   * Node.prototype getter and compares to the DOCUMENT_FRAGMENT_NODE\n   * constant (11). nodeType is a numeric value resolved from the node's\n   * internal slot, identical across realms for the same kind of node.\n   *\n   * @param value object to check\n   * @return true if value is a DocumentFragment-shaped node from any realm\n   */\n  const _isDocumentFragment = function (value: unknown): boolean {\n    if (!getNodeType || typeof value !== 'object' || value === null) {\n      return false;\n    }\n\n    try {\n      return getNodeType(value as Node) === NODE_TYPE.documentFragment;\n    } catch (_) {\n      return false;\n    }\n  };\n\n  /**\n   * Checks whether the given object is a DOM node, including nodes that\n   * originate from a different window/realm (e.g. an iframe's\n   * contentDocument). The previous `value instanceof Node` check was\n   * realm-bound: nodes from a different window failed it, causing\n   * sanitize() to silently stringify them and reset IN_PLACE to false,\n   * returning the original node unsanitized. See GHSA-4w3q-35jp-p934.\n   *\n   * @param value object to check whether it's a DOM node\n   * @return true if value is a DOM node from any realm\n   */\n  const _isNode = function (value: unknown): value is Node {\n    if (!getNodeType || typeof value !== 'object' || value === null) {\n      return false;\n    }\n\n    try {\n      return typeof getNodeType(value) === 'number';\n    } catch (_) {\n      return false;\n    }\n  };\n\n  function _executeHooks<T extends HookFunction>(\n    hooks: HookFunction[],\n    currentNode: Parameters<T>[0],\n    data: Parameters<T>[1]\n  ): void {\n    if (hooks.length === 0) {\n      return;\n    }\n\n    arrayForEach(hooks, (hook: T) => {\n      hook.call(DOMPurify, currentNode, data, CONFIG);\n    });\n  }\n\n  /**\n   * Structural-threat checks that condemn a node regardless of the\n   * allowlists: mXSS via namespace confusion, risky CSS construction,\n   * processing instructions, markup-bearing comments. Pure predicate;\n   * the caller removes. Check order is load-bearing.\n   *\n   * @param currentNode the node to inspect\n   * @param tagName the node's transformCaseFunc'd tag name\n   * @return true if the node must be removed\n   */\n  const _isUnsafeNode = function (currentNode: any, tagName: string): boolean {\n    /* Detect mXSS attempts abusing namespace confusion */\n    if (\n      SAFE_FOR_XML &&\n      currentNode.hasChildNodes() &&\n      !_isNode(currentNode.firstElementChild) &&\n      regExpTest(EXPRESSIONS.ELEMENT_MARKUP_PROBE, currentNode.textContent) &&\n      regExpTest(EXPRESSIONS.ELEMENT_MARKUP_PROBE, currentNode.innerHTML)\n    ) {\n      return true;\n    }\n\n    /* Remove risky CSS construction leading to mXSS */\n    if (\n      SAFE_FOR_XML &&\n      currentNode.namespaceURI === HTML_NAMESPACE &&\n      tagName === 'style' &&\n      _isNode(currentNode.firstElementChild)\n    ) {\n      return true;\n    }\n\n    /* Remove any occurrence of processing instructions */\n    if (currentNode.nodeType === NODE_TYPE.processingInstruction) {\n      return true;\n    }\n\n    /* Remove any kind of possibly harmful comments */\n    if (\n      SAFE_FOR_XML &&\n      currentNode.nodeType === NODE_TYPE.comment &&\n      regExpTest(EXPRESSIONS.COMMENT_MARKUP_PROBE, currentNode.data)\n    ) {\n      return true;\n    }\n\n    return false;\n  };\n\n  /**\n   * Handle a node whose tag is forbidden or not allowlisted: keep\n   * allowed custom elements (false return exits _sanitizeElements\n   * early - namespace/fallback checks and the afterSanitizeElements\n   * hook are intentionally skipped for kept custom elements), else\n   * hoist content per KEEP_CONTENT and remove.\n   *\n   * @param currentNode the disallowed node\n   * @param tagName the node's transformCaseFunc'd tag name\n   * @return true if the node was removed, false if kept\n   */\n  const _sanitizeDisallowedNode = function (\n    currentNode: any,\n    tagName: string\n  ): boolean {\n    /* Check if we have a custom element to handle */\n    if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {\n      if (\n        CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp &&\n        regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)\n      ) {\n        return false;\n      }\n\n      if (\n        CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function &&\n        CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)\n      ) {\n        return false;\n      }\n    }\n\n    /* Keep content except for bad-listed elements.\n         Use the cached prototype getters exclusively \u2014 the previous code\n         had `|| currentNode.parentNode` / `|| currentNode.childNodes`\n         fallbacks, but the cached getters always return the canonical\n         value (or null for a real parent-less node), so the fallback\n         path was dead in safe cases and a clobbering surface in unsafe\n         ones. Falsy cached results stay falsy; the `if (childNodes &&\n         parentNode)` check already gates correctly. */\n    if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {\n      const parentNode = getParentNode(currentNode);\n      const childNodes = getChildNodes(currentNode);\n\n      if (childNodes && parentNode) {\n        const childCount = childNodes.length;\n\n        /* In-place: hoist the *original* children so the iterator visits\n             and sanitises them through the same allowlist pass as every other\n             node. The caller built the tree in the live document, so the\n             originals carry already-queued resource events (`<img onerror>`,\n             `<video>`/`<audio>` error, lazy/`onload`, \u2026); cloning would leave\n             those originals detached but still armed, firing in page scope\n             while the returned tree looked clean. Moving is safe in-place: the\n             root is pre-validated as an allowed tag and so is never the node\n             being removed, which keeps `parentNode` inside the iterator root\n             and the relocated child inside the serialised tree.\n\n             Otherwise (string / DOM-copy paths): clone. The iterator is rooted\n             at \u2014 and the result serialised from \u2014 `body`, so a restrictive\n             ALLOWED_TAGS that removes `body` itself must leave its content in\n             place, which only cloning does; and those paths parse into an\n             inert document, so their discarded originals never had a queued\n             event to neutralise.\n\n             `childNodes` is live; a tail-to-head walk keeps `childNodes[i]`\n             valid whether we move (drops the trailing entry) or clone (leaves\n             the list intact). */\n        for (let i = childCount - 1; i >= 0; --i) {\n          const hoisted = IN_PLACE\n            ? childNodes[i]\n            : cloneNode(childNodes[i], true);\n          parentNode.insertBefore(hoisted, getNextSibling(currentNode));\n        }\n      }\n    }\n\n    _forceRemove(currentNode);\n    return true;\n  };\n\n  /**\n   * _sanitizeElements\n   *\n   * @protect nodeName\n   * @protect textContent\n   * @protect removeChild\n   * @param currentNode to check for permission to exist\n   * @return true if node was killed, false if left alive\n   */\n  const _sanitizeElements = function (currentNode: any): boolean {\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeElements, currentNode, null);\n\n    /* Check if element is clobbered or can clobber */\n    if (_isClobbered(currentNode)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n\n    /* Now let's check the element's type and name */\n    const tagName = transformCaseFunc(\n      getNodeName ? getNodeName(currentNode) : currentNode.nodeName\n    );\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.uponSanitizeElement, currentNode, {\n      tagName,\n      allowedTags: ALLOWED_TAGS,\n    });\n\n    /* Remove mXSS vectors, processing instructions and risky comments */\n    if (_isUnsafeNode(currentNode, tagName)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n\n    /* Remove element if anything forbids its presence */\n    if (\n      FORBID_TAGS[tagName] ||\n      (!(\n        EXTRA_ELEMENT_HANDLING.tagCheck instanceof Function &&\n        EXTRA_ELEMENT_HANDLING.tagCheck(tagName)\n      ) &&\n        !ALLOWED_TAGS[tagName])\n    ) {\n      return _sanitizeDisallowedNode(currentNode, tagName);\n    }\n\n    /* Check whether element has a valid namespace.\n       Realm-safe check (GHSA-hpcv-96wg-7vj8): use the cached Node.prototype\n       nodeType getter rather than `instanceof Element`, which is realm-\n       bound and short-circuits to false for any node minted in a different\n       realm \u2014 letting a foreign-realm element with a forbidden namespace\n       slip past the namespace check entirely. */\n    const nt = getNodeType ? getNodeType(currentNode) : currentNode.nodeType;\n    if (nt === NODE_TYPE.element && !_checkValidNamespace(currentNode)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n\n    /* Make sure that older browsers don't get fallback-tag mXSS */\n    if (\n      (tagName === 'noscript' ||\n        tagName === 'noembed' ||\n        tagName === 'noframes') &&\n      regExpTest(EXPRESSIONS.FALLBACK_TAG_CLOSE, currentNode.innerHTML)\n    ) {\n      _forceRemove(currentNode);\n      return true;\n    }\n\n    /* Sanitize element content to be template-safe */\n    if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {\n      /* Get the element's text content */\n      const content = _stripTemplateExpressions(currentNode.textContent);\n\n      if (currentNode.textContent !== content) {\n        arrayPush(DOMPurify.removed, { element: currentNode.cloneNode() });\n        currentNode.textContent = content;\n      }\n    }\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeElements, currentNode, null);\n\n    return false;\n  };\n\n  /**\n   * _isValidAttribute\n   *\n   * @param lcTag Lowercase tag name of containing element.\n   * @param lcName Lowercase attribute name.\n   * @param value Attribute value.\n   * @return Returns true if `value` is valid, otherwise false.\n   */\n  // eslint-disable-next-line complexity\n  const _isValidAttribute = function (\n    lcTag: string,\n    lcName: string,\n    value: string\n  ): boolean {\n    /* FORBID_ATTR must always win, even if ADD_ATTR predicate would allow it */\n    if (FORBID_ATTR[lcName]) {\n      return false;\n    }\n\n    /* Make sure attribute cannot clobber */\n    if (\n      SANITIZE_DOM &&\n      (lcName === 'id' || lcName === 'name') &&\n      (value in document || value in formElement)\n    ) {\n      return false;\n    }\n\n    const nameIsPermitted =\n      ALLOWED_ATTR[lcName] ||\n      (EXTRA_ELEMENT_HANDLING.attributeCheck instanceof Function &&\n        EXTRA_ELEMENT_HANDLING.attributeCheck(lcName, lcTag));\n\n    /* Allow valid data-* attributes: At least one character after \"-\"\n        (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)\n        XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)\n        We don't need to check the value; it's always URI safe. */\n    if (ALLOW_DATA_ATTR && regExpTest(DATA_ATTR, lcName)) {\n      // This attribute is safe\n    } else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR, lcName)) {\n      // This attribute is safe\n      /* Otherwise, check the name is permitted */\n    } else if (!nameIsPermitted) {\n      if (\n        // First condition does a very basic check if a) it's basically a valid custom element tagname AND\n        // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck\n        // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck\n        (_isBasicCustomElement(lcTag) &&\n          ((CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp &&\n            regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag)) ||\n            (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function &&\n              CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag))) &&\n          ((CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp &&\n            regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName)) ||\n            (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function &&\n              CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName, lcTag)))) ||\n        // Alternative, second condition checks if it's an `is`-attribute, AND\n        // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck\n        (lcName === 'is' &&\n          CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements &&\n          ((CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp &&\n            regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value)) ||\n            (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function &&\n              CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))))\n      ) {\n        // If user has supplied a regexp or function in CUSTOM_ELEMENT_HANDLING.tagNameCheck, we need to also allow derived custom elements using the same tagName test.\n        // Additionally, we need to allow attributes passing the CUSTOM_ELEMENT_HANDLING.attributeNameCheck user has configured, as custom elements can define these at their own discretion.\n      } else {\n        return false;\n      }\n      /* Check value is safe. First, is attr inert? If so, is safe */\n    } else if (URI_SAFE_ATTRIBUTES[lcName]) {\n      // This attribute is safe\n      /* Check no script, data or unknown possibly unsafe URI\n        unless we know URI values are safe for that attribute */\n    } else if (\n      regExpTest(IS_ALLOWED_URI, stringReplace(value, ATTR_WHITESPACE, ''))\n    ) {\n      // This attribute is safe\n      /* Keep image data URIs alive if src/xlink:href is allowed */\n      /* Further prevent gadget XSS for dynamically built script tags */\n    } else if (\n      (lcName === 'src' || lcName === 'xlink:href' || lcName === 'href') &&\n      lcTag !== 'script' &&\n      stringIndexOf(value, 'data:') === 0 &&\n      DATA_URI_TAGS[lcTag]\n    ) {\n      // This attribute is safe\n      /* Allow unknown protocols: This provides support for links that\n        are handled by protocol handlers which may be unknown ahead of\n        time, e.g. fb:, spotify: */\n    } else if (\n      ALLOW_UNKNOWN_PROTOCOLS &&\n      !regExpTest(IS_SCRIPT_OR_DATA, stringReplace(value, ATTR_WHITESPACE, ''))\n    ) {\n      // This attribute is safe\n      /* Check for binary attributes */\n    } else if (value) {\n      return false;\n    } else {\n      // Binary attributes are safe at this point\n      /* Anything else, presume unsafe, do not add it back */\n    }\n\n    return true;\n  };\n\n  /* Names the HTML spec reserves from valid-custom-element-name; these must\n   * never be treated as basic custom elements even when a permissive\n   * CUSTOM_ELEMENT_HANDLING.tagNameCheck is configured. */\n  const RESERVED_CUSTOM_ELEMENT_NAMES = addToSet({}, [\n    'annotation-xml',\n    'color-profile',\n    'font-face',\n    'font-face-format',\n    'font-face-name',\n    'font-face-src',\n    'font-face-uri',\n    'missing-glyph',\n  ]);\n\n  /**\n   * _isBasicCustomElement\n   * checks if at least one dash is included in tagName, and it's not the first char\n   * for more sophisticated checking see https://github.com/sindresorhus/validate-element-name\n   *\n   * @param tagName name of the tag of the node to sanitize\n   * @returns Returns true if the tag name meets the basic criteria for a custom element, otherwise false.\n   */\n  const _isBasicCustomElement = function (tagName: string): boolean {\n    return (\n      !RESERVED_CUSTOM_ELEMENT_NAMES[stringToLowerCase(tagName)] &&\n      regExpTest(CUSTOM_ELEMENT, tagName)\n    );\n  };\n\n  /**\n   * Wrap an attribute value in the matching Trusted Types object when\n   * the active policy requires it. Namespaced attributes pass through\n   * unchanged (no TT support yet, see\n   * https://bugs.chromium.org/p/chromium/issues/detail?id=1305293).\n   *\n   * @param lcTag lowercase tag name of the containing element\n   * @param lcName lowercase attribute name\n   * @param namespaceURI the attribute's namespace, if any\n   * @param value the attribute value to wrap\n   * @return the value, wrapped when Trusted Types demand it\n   */\n  const _applyTrustedTypesToAttribute = function (\n    lcTag: string,\n    lcName: string,\n    namespaceURI: string | null,\n    value: string\n  ): string {\n    if (\n      trustedTypesPolicy &&\n      typeof trustedTypes === 'object' &&\n      typeof trustedTypes.getAttributeType === 'function' &&\n      !namespaceURI\n    ) {\n      switch (trustedTypes.getAttributeType(lcTag, lcName)) {\n        case 'TrustedHTML': {\n          return _createTrustedHTML(value);\n        }\n\n        case 'TrustedScriptURL': {\n          return _createTrustedScriptURL(value);\n        }\n\n        default: {\n          break;\n        }\n      }\n    }\n\n    return value;\n  };\n\n  /**\n   * Write a modified attribute value back onto the element. On\n   * success, re-probe for clobbering introduced by the new value and\n   * remove the element when found; otherwise pop the removal entry\n   * recorded by the earlier _removeAttribute (long-standing pairing\n   * with the SANITIZE_NAMED_PROPS path - do not \"fix\" casually). On\n   * failure, remove the attribute instead.\n   *\n   * @param currentNode the element carrying the attribute\n   * @param name the attribute name as present on the element\n   * @param namespaceURI the attribute's namespace, if any\n   * @param value the new attribute value\n   */\n  const _setAttributeValue = function (\n    currentNode: Element,\n    name: string,\n    namespaceURI: string | null,\n    value: string\n  ): void {\n    try {\n      if (namespaceURI) {\n        currentNode.setAttributeNS(namespaceURI, name, value);\n      } else {\n        /* Fallback to setAttribute() for browser-unrecognized namespaces e.g. \"x-schema\". */\n        currentNode.setAttribute(name, value);\n      }\n\n      if (_isClobbered(currentNode)) {\n        _forceRemove(currentNode);\n      } else {\n        arrayPop(DOMPurify.removed);\n      }\n    } catch (_) {\n      _removeAttribute(name, currentNode);\n    }\n  };\n\n  /**\n   * _sanitizeAttributes\n   *\n   * @protect attributes\n   * @protect nodeName\n   * @protect removeAttribute\n   * @protect setAttribute\n   *\n   * @param currentNode to sanitize\n   */\n  const _sanitizeAttributes = function (currentNode: Element): void {\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeAttributes, currentNode, null);\n\n    const { attributes } = currentNode;\n\n    /* Check if we have attributes; if not we might have a text node */\n    if (!attributes || _isClobbered(currentNode)) {\n      return;\n    }\n\n    const hookEvent = {\n      attrName: '',\n      attrValue: '',\n      keepAttr: true,\n      allowedAttributes: ALLOWED_ATTR,\n      forceKeepAttr: undefined,\n    };\n    let l = attributes.length;\n    const lcTag = transformCaseFunc(currentNode.nodeName);\n\n    /* Go backwards over all attributes; safely remove bad ones */\n    while (l--) {\n      const attr = attributes[l];\n      const { name, namespaceURI, value: attrValue } = attr;\n      const lcName = transformCaseFunc(name);\n\n      const initValue = attrValue;\n      let value = name === 'value' ? initValue : stringTrim(initValue);\n\n      /* Execute a hook if present */\n      hookEvent.attrName = lcName;\n      hookEvent.attrValue = value;\n      hookEvent.keepAttr = true;\n      hookEvent.forceKeepAttr = undefined; // Allows developers to see this is a property they can set\n      _executeHooks(hooks.uponSanitizeAttribute, currentNode, hookEvent);\n      value = hookEvent.attrValue;\n\n      /* Full DOM Clobbering protection via namespace isolation,\n       * Prefix id and name attributes with `user-content-`\n       */\n      if (\n        SANITIZE_NAMED_PROPS &&\n        (lcName === 'id' || lcName === 'name') &&\n        stringIndexOf(value, SANITIZE_NAMED_PROPS_PREFIX) !== 0\n      ) {\n        // Remove the attribute with this value\n        _removeAttribute(name, currentNode);\n        // Prefix the value and later re-create the attribute with the sanitized value\n        value = SANITIZE_NAMED_PROPS_PREFIX + value;\n      }\n      // Else: already prefixed, leave the attribute alone \u2014 the prefix is\n      // itself the clobbering protection, and re-applying it is incorrect.\n\n      /* Work around a security issue with comments inside attributes */\n      if (\n        SAFE_FOR_XML &&\n        regExpTest(\n          /((--!?|])>)|<\\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i,\n          value\n        )\n      ) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Make sure we cannot easily use animated hrefs, even if animations are allowed */\n      if (lcName === 'attributename' && stringMatch(value, 'href')) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Did the hooks force-keep the attribute? */\n      if (hookEvent.forceKeepAttr) {\n        continue;\n      }\n\n      /* Did the hooks approve of the attribute? */\n      if (!hookEvent.keepAttr) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Work around a security issue in jQuery 3.0 */\n      if (\n        !ALLOW_SELF_CLOSE_IN_ATTR &&\n        regExpTest(EXPRESSIONS.SELF_CLOSING_TAG, value)\n      ) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Sanitize attribute content to be template-safe */\n      if (SAFE_FOR_TEMPLATES) {\n        value = _stripTemplateExpressions(value);\n      }\n\n      /* Is `value` valid for this attribute? */\n      if (!_isValidAttribute(lcTag, lcName, value)) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Handle attributes that require Trusted Types */\n      value = _applyTrustedTypesToAttribute(lcTag, lcName, namespaceURI, value);\n\n      /* Handle invalid data-* attribute set by try-catching it */\n      if (value !== initValue) {\n        _setAttributeValue(currentNode, name, namespaceURI, value);\n      }\n    }\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeAttributes, currentNode, null);\n  };\n\n  /**\n   * _sanitizeShadowDOM\n   *\n   * @param fragment to iterate over recursively\n   */\n  const _sanitizeShadowDOM = function (fragment: DocumentFragment): void {\n    let shadowNode = null;\n    const shadowIterator = _createNodeIterator(fragment);\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeShadowDOM, fragment, null);\n\n    while ((shadowNode = shadowIterator.nextNode())) {\n      /* Execute a hook if present */\n      _executeHooks(hooks.uponSanitizeShadowNode, shadowNode, null);\n\n      /* Sanitize tags and elements */\n      _sanitizeElements(shadowNode);\n\n      /* Check attributes next */\n      _sanitizeAttributes(shadowNode);\n\n      /* Deep shadow DOM detected.\n         Realm-safe check (GHSA-hpcv-96wg-7vj8): use nodeType against the\n         DOCUMENT_FRAGMENT_NODE constant rather than instanceof, so we\n         recurse into <template>.content from foreign realms too. */\n      if (_isDocumentFragment(shadowNode.content)) {\n        _sanitizeShadowDOM(shadowNode.content);\n      }\n\n      /* An element iterated here may itself host an attached\n         shadow root. The default NodeIterator does not enter shadow\n         trees, so a shadow root nested inside template.content was\n         previously reached by no walk at all (the pre-pass at\n         _sanitizeAttachedShadowRoots descends via childNodes, which\n         doesn't enter template.content; the template-content recursion\n         above iterates the content but never inspected shadowRoot).\n         Walk it explicitly. The nodeType guard avoids reading\n         shadowRoot off text / comment / CDATA / PI nodes that the\n         iterator also surfaces. */\n      const shadowNodeType = getNodeType\n        ? getNodeType(shadowNode)\n        : shadowNode.nodeType;\n      if (shadowNodeType === NODE_TYPE.element) {\n        const innerSr = getShadowRoot(shadowNode);\n        if (_isDocumentFragment(innerSr)) {\n          _sanitizeAttachedShadowRoots(innerSr);\n          _sanitizeShadowDOM(innerSr);\n        }\n      }\n    }\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeShadowDOM, fragment, null);\n  };\n\n  /**\n   * _sanitizeAttachedShadowRoots\n   *\n   * Walks `root` and feeds every attached shadow root we encounter into\n   * the existing _sanitizeShadowDOM pipeline. The default node iterator\n   * does not descend into shadow trees, so nodes inside an attached\n   * shadow root would otherwise be skipped entirely.\n   *\n   * Two real input paths put attached shadow roots in front of us:\n   *   1. IN_PLACE on a DOM node that already has shadow roots attached.\n   *   2. DOM-node input where importNode(dirty, true) deep-clones the\n   *      shadow root because it was created with `clonable: true`.\n   *\n   * This pass runs once, up front, so the main iteration loop (and the\n   * existing _sanitizeShadowDOM template-content recursion) stay\n   * untouched \u2014 string-input paths are not affected.\n   *\n   * @param root the subtree root to walk for attached shadow roots\n   */\n  const _sanitizeAttachedShadowRoots = function (root: Node): void {\n    /* Iterative (explicit stack) rather than per-child recursion. DOM APIs\n       impose no depth cap, so an attacker-shaped tree (JSON/CRDT/editor data\n       built straight into the DOM \u2014 the IN_PLACE surface) deeper than the JS\n       call-stack budget would otherwise overflow native recursion here and\n       throw at the IN_PLACE entry pre-pass, before a single node is\n       sanitized, leaving the caller's live tree untouched (fail-open). See\n       campaign-3 F4. A heap stack keeps depth off the call stack.\n\n       Each work item is either a node to descend into, or a deferred\n       `_sanitizeShadowDOM` for an already-walked shadow root. The deferred\n       form preserves the original post-order discipline: a shadow root's\n       nested shadow roots are discovered before the outer shadow is\n       sanitized (which may remove hosts). Pushes are in reverse of the\n       desired processing order (LIFO): template content, then children, then\n       the shadow-sanitize, then the shadow walk \u2014 so the order matches the\n       previous recursion exactly. */\n    const stack: Array<{ node: Node | null; shadow: DocumentFragment | null }> =\n      [{ node: root, shadow: null }];\n\n    while (stack.length > 0) {\n      const item = stack.pop();\n\n      /* Deferred shadow-DOM sanitisation: runs after its subtree was walked. */\n      if (item.shadow) {\n        _sanitizeShadowDOM(item.shadow);\n        continue;\n      }\n\n      const node = item.node;\n      const nodeType = getNodeType ? getNodeType(node) : (node as any).nodeType;\n      const isElement = nodeType === NODE_TYPE.element;\n\n      /* (pushed last \u2192 processed first) Children, snapshotted in reverse so\n         the first child is processed first. Snapshotting matters because a\n         hook may detach siblings mid-walk. */\n      const childNodes = getChildNodes(node);\n      if (childNodes) {\n        for (let i = childNodes.length - 1; i >= 0; --i) {\n          stack.push({ node: childNodes[i], shadow: null });\n        }\n      }\n\n      /* (pushed before children \u2192 processed after them, matching the old\n         \"template content last\" order) When the node is a <template>,\n         descend into its content. */\n      if (isElement) {\n        const rootName = getNodeName ? getNodeName(node) : null;\n        if (\n          typeof rootName === 'string' &&\n          transformCaseFunc(rootName) === 'template'\n        ) {\n          const content = (node as HTMLTemplateElement).content;\n          if (_isDocumentFragment(content)) {\n            stack.push({ node: content, shadow: null });\n          }\n        }\n      }\n\n      /* Shadow root (processed first): walk its subtree, then sanitise it.\n         Realm-safe check (GHSA-hpcv-96wg-7vj8): nodeType-based detection\n         rather than `instanceof DocumentFragment`, which is realm-bound and\n         silently skipped foreign-realm shadow roots (e.g.\n         iframe.contentDocument attachShadow). */\n      if (isElement) {\n        const sr = getShadowRoot(node);\n        if (_isDocumentFragment(sr)) {\n          /* Push the deferred sanitise first so it pops after the shadow\n             walk we push next, i.e. nested shadow roots are discovered\n             before this one is sanitised. */\n          stack.push({ node: null, shadow: sr }, { node: sr, shadow: null });\n        }\n      }\n    }\n  };\n\n  // eslint-disable-next-line complexity\n  DOMPurify.sanitize = function (dirty, cfg = {}) {\n    let body = null;\n    let importedNode = null;\n    let currentNode = null;\n    let returnNode = null;\n    /* Make sure we have a string to sanitize.\n      DO NOT return early, as this will return the wrong type if\n      the user has requested a DOM object rather than a string */\n    IS_EMPTY_INPUT = !dirty;\n    if (IS_EMPTY_INPUT) {\n      dirty = '<!-->';\n    }\n\n    /* Stringify, in case dirty is an object */\n    if (typeof dirty !== 'string' && !_isNode(dirty)) {\n      dirty = stringifyValue(dirty);\n\n      if (typeof dirty !== 'string') {\n        throw typeErrorCreate('dirty is not a string, aborting');\n      }\n    }\n\n    /* Return dirty HTML if DOMPurify cannot run */\n    if (!DOMPurify.isSupported) {\n      return dirty;\n    }\n\n    /* Assign config vars */\n    if (!SET_CONFIG) {\n      _parseConfig(cfg);\n    }\n\n    /* Clean up removed elements */\n    DOMPurify.removed = [];\n\n    /* Resolve IN_PLACE for this call without mutating persistent config.\n       Writing the IN_PLACE closure variable here leaks under setConfig(),\n       where _parseConfig is skipped on later calls: a single string call would\n       disable in-place mode for every subsequent node call, returning a\n       sanitized copy while leaving the caller's node \u2014 which in-place callers\n       keep using and whose return value they ignore \u2014 unsanitized. REPORT-2. */\n    const inPlace = IN_PLACE && typeof dirty !== 'string' && _isNode(dirty);\n\n    if (inPlace) {\n      /* Do some early pre-sanitization to avoid unsafe root nodes.\n         Read nodeName through the cached prototype getter \u2014 a clobbering\n         child named \"nodeName\" on the form root would otherwise shadow\n         the property and let this check skip the root-allowlist\n         validation entirely. */\n      const nn = getNodeName\n        ? getNodeName(dirty as Node)\n        : (dirty as Node).nodeName;\n      if (typeof nn === 'string') {\n        const tagName = transformCaseFunc(nn);\n        if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {\n          throw typeErrorCreate(\n            'root node is forbidden and cannot be sanitized in-place'\n          );\n        }\n      }\n\n      /* Pre-flight the root through _isClobbered. The iterator-driven\n         removal path can not detach a parent-less root: _forceRemove\n         falls through to Element.prototype.remove(), which per spec\n         is a no-op on a node with no parent. A clobbered root would\n         then survive the main loop with its attributes uninspected,\n         because _sanitizeAttributes early-returns on _isClobbered. The\n         result would be an attacker-controlled form, complete with any\n         event-handler attributes the caller passed in, handed back to\n         the application unsanitized. Refuse to sanitize such a root\n         the same way we refuse a forbidden tag. GHSA-r47g-fvhr-h676. */\n      if (_isClobbered(dirty as Element)) {\n        throw typeErrorCreate(\n          'root node is clobbered and cannot be sanitized in-place'\n        );\n      }\n\n      /* Sanitize attached shadow roots before the main iterator runs.\n         The iterator does not descend into shadow trees. Same fail-closed\n         barrier as the main walk (campaign-3 F2): a custom-element reaction\n         inside a shadow root could abort this pre-pass before the walk runs,\n         which would otherwise leave the entire live tree unsanitized. */\n      try {\n        _sanitizeAttachedShadowRoots(dirty as Node);\n      } catch (error) {\n        _neutralizeRoot(dirty as Node);\n\n        throw error;\n      }\n    } else if (_isNode(dirty)) {\n      /* If dirty is a DOM element, append to an empty document to avoid\n         elements being stripped by the parser */\n      body = _initDocument('<!---->');\n      importedNode = body.ownerDocument.importNode(dirty, true);\n      if (\n        importedNode.nodeType === NODE_TYPE.element &&\n        importedNode.nodeName === 'BODY'\n      ) {\n        /* Node is already a body, use as is */\n        body = importedNode;\n      } else if (importedNode.nodeName === 'HTML') {\n        body = importedNode;\n      } else {\n        // eslint-disable-next-line unicorn/prefer-dom-node-append\n        body.appendChild(importedNode);\n      }\n\n      /* Clonable shadow roots are deep-cloned by importNode(); sanitize\n         them before the main iterator runs, since the iterator does not\n         descend into shadow trees. The walk routes every read through a\n         cached prototype getter so clobbering descendants on a form root\n         cannot hide a shadow host from this pass. */\n      _sanitizeAttachedShadowRoots(importedNode);\n    } else {\n      /* Exit directly if we have nothing to do */\n      if (\n        !RETURN_DOM &&\n        !SAFE_FOR_TEMPLATES &&\n        !WHOLE_DOCUMENT &&\n        // eslint-disable-next-line unicorn/prefer-includes\n        dirty.indexOf('<') === -1\n      ) {\n        return trustedTypesPolicy && RETURN_TRUSTED_TYPE\n          ? _createTrustedHTML(dirty)\n          : dirty;\n      }\n\n      /* Initialize the document to work on */\n      body = _initDocument(dirty);\n\n      /* Check we have a DOM node from the data */\n      if (!body) {\n        return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : '';\n      }\n    }\n\n    /* Remove first element node (ours) if FORCE_BODY is set */\n    if (body && FORCE_BODY) {\n      _forceRemove(body.firstChild);\n    }\n\n    /* Get node iterator */\n    const nodeIterator = _createNodeIterator(inPlace ? dirty : body);\n\n    /* Now start iterating over the created document.\n       The walk runs inside an exception barrier (campaign-3 F2): a re-entrant\n       engine/custom-element mutation can detach a node mid-walk so\n       `_forceRemove`'s parentless guard throws, aborting the loop. Without the\n       barrier the caller's in-place tree would be left half-sanitized with the\n       unvisited tail still armed. On any throw we fail closed \u2014 strip the\n       in-place root bare \u2014 then rethrow so the existing throw contract is\n       preserved. (String/DOM-copy paths never return the partial body, so the\n       propagating throw is already fail-closed there.) */\n    try {\n      while ((currentNode = nodeIterator.nextNode())) {\n        /* Sanitize tags and elements */\n        _sanitizeElements(currentNode);\n\n        /* Check attributes next */\n        _sanitizeAttributes(currentNode);\n\n        /* Shadow DOM detected, sanitize it.\n           Realm-safe check (GHSA-hpcv-96wg-7vj8): nodeType-based detection\n           instead of instanceof, so foreign-realm <template>.content is\n           walked correctly. */\n        if (_isDocumentFragment(currentNode.content)) {\n          _sanitizeShadowDOM(currentNode.content);\n        }\n      }\n    } catch (error) {\n      if (inPlace) {\n        _neutralizeRoot(dirty as Node);\n      }\n\n      throw error;\n    }\n\n    /* If we sanitized `dirty` in-place, return it. */\n    if (inPlace) {\n      /* Fail-closed completion of the audit-5 F1 fix: every node removed from\n         the caller's live tree is detached but may still hold a queued\n         resource-event handler that fires in page scope after we return. The\n         move-hoist covers only disallowed-tag KEEP_CONTENT removals; strip the\n         non-allow-listed attributes off every other removed subtree (clobber,\n         mXSS, namespace, comments, KEEP_CONTENT:false, \u2026) so those handlers are\n         cancelled before any event can fire. Runs synchronously, pre-return. */\n      arrayForEach(DOMPurify.removed, (entry) => {\n        if (entry.element) {\n          _neutralizeSubtree(entry.element as Node);\n        }\n      });\n\n      if (SAFE_FOR_TEMPLATES) {\n        _scrubTemplateExpressions(dirty as Element);\n      }\n\n      return dirty;\n    }\n\n    /* Return sanitized string or DOM */\n    if (RETURN_DOM) {\n      if (SAFE_FOR_TEMPLATES) {\n        _scrubTemplateExpressions(body);\n      }\n\n      if (RETURN_DOM_FRAGMENT) {\n        returnNode = createDocumentFragment.call(body.ownerDocument);\n\n        while (body.firstChild) {\n          // eslint-disable-next-line unicorn/prefer-dom-node-append\n          returnNode.appendChild(body.firstChild);\n        }\n      } else {\n        returnNode = body;\n      }\n\n      if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {\n        /*\n          AdoptNode() is not used because internal state is not reset\n          (e.g. the past names map of a HTMLFormElement), this is safe\n          in theory but we would rather not risk another attack vector.\n          The state that is cloned by importNode() is explicitly defined\n          by the specs.\n        */\n        returnNode = importNode.call(originalDocument, returnNode, true);\n      }\n\n      return returnNode;\n    }\n\n    let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;\n\n    /* Serialize doctype if allowed */\n    if (\n      WHOLE_DOCUMENT &&\n      ALLOWED_TAGS['!doctype'] &&\n      body.ownerDocument &&\n      body.ownerDocument.doctype &&\n      body.ownerDocument.doctype.name &&\n      regExpTest(EXPRESSIONS.DOCTYPE_NAME, body.ownerDocument.doctype.name)\n    ) {\n      serializedHTML =\n        '<!DOCTYPE ' + body.ownerDocument.doctype.name + '>\\n' + serializedHTML;\n    }\n\n    /* Sanitize final string template-safe */\n    if (SAFE_FOR_TEMPLATES) {\n      serializedHTML = _stripTemplateExpressions(serializedHTML);\n    }\n\n    return trustedTypesPolicy && RETURN_TRUSTED_TYPE\n      ? _createTrustedHTML(serializedHTML)\n      : serializedHTML;\n  };\n\n  DOMPurify.setConfig = function (cfg = {}) {\n    _parseConfig(cfg);\n    SET_CONFIG = true;\n  };\n\n  DOMPurify.clearConfig = function () {\n    CONFIG = null;\n    SET_CONFIG = false;\n\n    // Drop any caller-supplied Trusted Types policy so it cannot poison later\n    // `RETURN_TRUSTED_TYPE` output. The internal default policy (cached, and\n    // never recreated \u2014 Trusted Types throws on duplicate names) is restored by\n    // the next `_parseConfig`. See GHSA-vxr8-fq34-vvx9.\n    trustedTypesPolicy = defaultTrustedTypesPolicy;\n    emptyHTML = '';\n  };\n\n  DOMPurify.isValidAttribute = function (tag, attr, value) {\n    /* Initialize shared config vars if necessary. */\n    if (!CONFIG) {\n      _parseConfig({});\n    }\n\n    const lcTag = transformCaseFunc(tag);\n    const lcName = transformCaseFunc(attr);\n    return _isValidAttribute(lcTag, lcName, value);\n  };\n\n  DOMPurify.addHook = function (\n    entryPoint: keyof HooksMap,\n    hookFunction: HookFunction\n  ) {\n    if (typeof hookFunction !== 'function') {\n      return;\n    }\n\n    arrayPush(hooks[entryPoint], hookFunction);\n  };\n\n  DOMPurify.removeHook = function (\n    entryPoint: keyof HooksMap,\n    hookFunction: HookFunction\n  ) {\n    if (hookFunction !== undefined) {\n      const index = arrayLastIndexOf(hooks[entryPoint], hookFunction);\n\n      return index === -1\n        ? undefined\n        : arraySplice(hooks[entryPoint], index, 1)[0];\n    }\n\n    return arrayPop(hooks[entryPoint]);\n  };\n\n  DOMPurify.removeHooks = function (entryPoint: keyof HooksMap) {\n    hooks[entryPoint] = [];\n  };\n\n  DOMPurify.removeAllHooks = function () {\n    hooks = _createHooksMap();\n  };\n\n  return DOMPurify;\n}\n\nexport default createDOMPurify();\n", "import createDOMPurify from 'dompurify';\n\nclass EnhancedSecureCryptoUtils {\n\n    static _keyMetadata = new WeakMap();\n    static _messageSanitizer = null;\n    \n    // Initialize secure logging system after class definition\n\n    // Utility to sort object keys for deterministic serialization\n    static sortObjectKeys(obj) {\n        if (typeof obj !== 'object' || obj === null) {\n            return obj;\n        }\n\n        if (Array.isArray(obj)) {\n            return obj.map(EnhancedSecureCryptoUtils.sortObjectKeys);\n        }\n\n        const sortedObj = {};\n        Object.keys(obj).sort().forEach(key => {\n            sortedObj[key] = EnhancedSecureCryptoUtils.sortObjectKeys(obj[key]);\n        });\n        return sortedObj;\n    }\n\n    // Utility to assert CryptoKey type and properties\n    static assertCryptoKey(key, expectedName = null, expectedUsages = []) {\n        if (!(key instanceof CryptoKey)) throw new Error('Expected CryptoKey');\n        if (expectedName && key.algorithm?.name !== expectedName) {\n            throw new Error(`Expected algorithm ${expectedName}, got ${key.algorithm?.name}`);\n        }\n        for (const u of expectedUsages) {\n            if (!key.usages || !key.usages.includes(u)) {\n                throw new Error(`Missing required key usage: ${u}`);\n            }\n        }\n    }\n    // Helper function to convert ArrayBuffer to Base64\n    static arrayBufferToBase64(buffer) {\n        let binary = '';\n        const bytes = new Uint8Array(buffer);\n        const len = bytes.byteLength;\n        for (let i = 0; i < len; i++) {\n            binary += String.fromCharCode(bytes[i]);\n        }\n        return btoa(binary);\n    }\n\n    // Helper function to convert Base64 to ArrayBuffer\n    static base64ToArrayBuffer(base64) {\n        try {\n            // Validate input\n            if (typeof base64 !== 'string' || !base64) {\n                throw new Error('Invalid base64 input: must be a non-empty string');\n            }\n\n            // Remove any whitespace and validate base64 format\n            const cleanBase64 = base64.trim();\n            if (!/^[A-Za-z0-9+/]*={0,2}$/.test(cleanBase64)) {\n                throw new Error('Invalid base64 format');\n            }\n\n            // Handle empty string case\n            if (cleanBase64 === '') {\n                return new ArrayBuffer(0);\n            }\n\n            const binaryString = atob(cleanBase64);\n            const len = binaryString.length;\n            const bytes = new Uint8Array(len);\n            for (let i = 0; i < len; i++) {\n                bytes[i] = binaryString.charCodeAt(i);\n            }\n            return bytes.buffer;\n        } catch (error) {\n            console.error('Base64 to ArrayBuffer conversion failed:', error.message);\n            throw new Error(`Base64 conversion error: ${error.message}`);\n        }\n    }\n\n    // Helper function to convert hex string to Uint8Array\n    static hexToUint8Array(hexString) {\n        try {\n            if (!hexString || typeof hexString !== 'string') {\n                throw new Error('Invalid hex string input: must be a non-empty string');\n            }\n\n            // Remove colons and spaces from hex string (e.g., \"aa:bb:cc\" -> \"aabbcc\")\n            const cleanHex = hexString.replace(/:/g, '').replace(/\\s/g, '');\n            \n            // Validate hex format\n            if (!/^[0-9a-fA-F]*$/.test(cleanHex)) {\n                throw new Error('Invalid hex format: contains non-hex characters');\n            }\n            \n            // Ensure even length\n            if (cleanHex.length % 2 !== 0) {\n                throw new Error('Invalid hex format: odd length');\n            }\n\n            // Convert hex string to bytes\n            const bytes = new Uint8Array(cleanHex.length / 2);\n            for (let i = 0; i < cleanHex.length; i += 2) {\n                bytes[i / 2] = parseInt(cleanHex.substr(i, 2), 16);\n            }\n            \n            return bytes;\n        } catch (error) {\n            console.error('Hex to Uint8Array conversion failed:', error.message);\n            throw new Error(`Hex conversion error: ${error.message}`);\n        }\n    }\n\n    /**\n     * Overwrite a buffer holding key material once it is no longer needed.\n     *\n     * This is a genuine wipe, unlike the manager's _secureWipeString /\n     * _secureWipeCryptoKey, which cannot wipe anything (JS strings are immutable\n     * and a non-extractable CryptoKey has no JS-visible bytes) and only ever\n     * dropped a reference while reporting success. Here the bytes really are\n     * ours: overwrite them so the shared secret does not linger in the heap\n     * waiting for a garbage collector that may never run before a heap snapshot\n     * or a memory-reading extension gets there first.\n     *\n     * Random first, then zeros: on the off chance a copying GC has already moved\n     * the buffer, the random pass at least destroys the plaintext value at the\n     * old address as well as the new one.\n     */\n    static zeroizeBuffer(buffer) {\n        try {\n            if (!buffer) return;\n            const view = buffer instanceof Uint8Array\n                ? buffer\n                : (buffer instanceof ArrayBuffer ? new Uint8Array(buffer) : null);\n            if (!view || view.length === 0) return;\n            crypto.getRandomValues(view);\n            view.fill(0);\n        } catch (_) {\n            // A detached buffer is already unreadable; nothing left to do.\n        }\n    }\n\n    static async encryptData(data, password) {\n        try {\n            const dataString = typeof data === 'string' ? data : JSON.stringify(data);\n            const salt = crypto.getRandomValues(new Uint8Array(16));\n            const encoder = new TextEncoder();\n            const passwordBuffer = encoder.encode(password);\n\n            const keyMaterial = await crypto.subtle.importKey(\n                'raw',\n                passwordBuffer,\n                { name: 'PBKDF2' },\n                false,\n                ['deriveKey']\n            );\n\n            const key = await crypto.subtle.deriveKey(\n                {\n                    name: 'PBKDF2',\n                    salt: salt,\n                    iterations: 310000,\n                    hash: 'SHA-256',\n                },\n                keyMaterial,\n                { name: 'AES-GCM', length: 256 },\n                false,\n                ['encrypt']\n            );\n\n            const iv = crypto.getRandomValues(new Uint8Array(12));\n            const dataBuffer = encoder.encode(dataString);\n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: iv },\n                key,\n                dataBuffer\n            );\n\n            const encryptedPackage = {\n                version: '1.0',\n                salt: Array.from(salt),\n                iv: Array.from(iv),\n                data: Array.from(new Uint8Array(encrypted)),\n                timestamp: Date.now(),\n            };\n\n            const packageString = JSON.stringify(encryptedPackage);\n            return EnhancedSecureCryptoUtils.arrayBufferToBase64(new TextEncoder().encode(packageString).buffer);\n\n        } catch (error) {\n            console.error('Encryption failed:', error.message);\n            throw new Error(`Encryption error: ${error.message}`);\n        }\n    }\n\n        static async decryptData(encryptedData, password) {\n        try {\n            const packageBuffer = EnhancedSecureCryptoUtils.base64ToArrayBuffer(encryptedData);\n            const packageString = new TextDecoder().decode(packageBuffer);\n            const encryptedPackage = JSON.parse(packageString);\n\n            if (!encryptedPackage.version || !encryptedPackage.salt || !encryptedPackage.iv || !encryptedPackage.data) {\n                throw new Error('Invalid encrypted data format');\n            }\n\n            const salt = new Uint8Array(encryptedPackage.salt);\n            const iv = new Uint8Array(encryptedPackage.iv);\n            const encrypted = new Uint8Array(encryptedPackage.data);\n\n            const encoder = new TextEncoder();\n            const passwordBuffer = encoder.encode(password);\n\n            const keyMaterial = await crypto.subtle.importKey(\n                'raw',\n                passwordBuffer,\n                { name: 'PBKDF2' },\n                false,\n                ['deriveKey']\n            );\n\n            const key = await crypto.subtle.deriveKey(\n                {\n                    name: 'PBKDF2',\n                    salt: salt,\n                    iterations: 310000,\n                    hash: 'SHA-256'\n                },\n                keyMaterial,\n                { name: 'AES-GCM', length: 256 },\n                false,\n                ['decrypt']\n            );\n\n            const decrypted = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv },\n                key,\n                encrypted\n            );\n\n            const decryptedString = new TextDecoder().decode(decrypted);\n\n            try {\n                return JSON.parse(decryptedString);\n            } catch {\n                return decryptedString;\n            }\n\n        } catch (error) {\n            console.error('Decryption failed:', error.message);\n            throw new Error(`Decryption error: ${error.message}`);\n        }\n    }\n\n    \n    // Generate secure password for data exchange\n    static generateSecurePassword() {\n        const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()_+-=[]{}|;:,.<>?';\n        const charCount = chars.length;\n        const length = 32; \n        let password = '';\n        \n        // Use rejection sampling to avoid bias\n        for (let i = 0; i < length; i++) {\n            let randomValue;\n            do {\n                randomValue = crypto.getRandomValues(new Uint32Array(1))[0];\n            } while (randomValue >= 4294967296 - (4294967296 % charCount)); // Reject biased values\n            \n            password += chars[randomValue % charCount];\n        }\n        return password;\n    }\n\n    // Real security level calculation with actual verification\n    static async calculateSecurityLevel(securityManager) {\n        let score = 0;\n        const maxScore = 100; // Fixed: Changed from 110 to 100 for cleaner percentage\n        const verificationResults = {};\n        \n        try {\n            // Fallback to basic calculation if securityManager is not fully initialized\n            if (!securityManager || !securityManager.securityFeatures) {\n                console.warn('Security manager not fully initialized, using fallback calculation');\n                return {\n                    level: 'INITIALIZING',\n                    score: 0,\n                    color: 'gray',\n                    verificationResults: {},\n                    timestamp: Date.now(),\n                    details: 'Security system initializing...',\n                    isRealData: false\n                };\n            }\n\n            // All security features are enabled by default - no session type restrictions\n            const sessionType = 'full'; // All features enabled\n            const isDemoSession = false; // All features available\n            \n            // 1. Base encryption verification (20 points) - Available in demo\n            try {\n                const encryptionResult = await EnhancedSecureCryptoUtils.verifyEncryption(securityManager);\n                if (encryptionResult.passed) {\n                    score += 20;\n                    verificationResults.verifyEncryption = { passed: true, details: encryptionResult.details, points: 20 };\n                } else {\n                    verificationResults.verifyEncryption = { passed: false, details: encryptionResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyEncryption = { passed: false, details: `Encryption check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 2. Simple key exchange verification (15 points) - Available in demo\n            try {\n                const ecdhResult = await EnhancedSecureCryptoUtils.verifyECDHKeyExchange(securityManager);\n                if (ecdhResult.passed) {\n                    score += 15;\n                    verificationResults.verifyECDHKeyExchange = { passed: true, details: ecdhResult.details, points: 15 };\n                } else {\n                    verificationResults.verifyECDHKeyExchange = { passed: false, details: ecdhResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyECDHKeyExchange = { passed: false, details: `Key exchange check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 3. Message integrity verification (10 points) - Available in demo\n            try {\n                const integrityResult = await EnhancedSecureCryptoUtils.verifyMessageIntegrity(securityManager);\n                if (integrityResult.passed) {\n                score += 10;\n                    verificationResults.verifyMessageIntegrity = { passed: true, details: integrityResult.details, points: 10 };\n            } else {\n                    verificationResults.verifyMessageIntegrity = { passed: false, details: integrityResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyMessageIntegrity = { passed: false, details: `Message integrity check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 4. ECDSA signatures verification (15 points) - All features enabled by default\n            try {\n                const ecdsaResult = await EnhancedSecureCryptoUtils.verifyECDSASignatures(securityManager);\n                if (ecdsaResult.passed) {\n                    score += 15;\n                    verificationResults.verifyECDSASignatures = { passed: true, details: ecdsaResult.details, points: 15 };\n            } else {\n                    verificationResults.verifyECDSASignatures = { passed: false, details: ecdsaResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyECDSASignatures = { passed: false, details: `Digital signatures check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 5. Rate limiting verification (5 points) - Available in demo\n            try {\n                const rateLimitResult = await EnhancedSecureCryptoUtils.verifyRateLimiting(securityManager);\n                if (rateLimitResult.passed) {\n                    score += 5;\n                    verificationResults.verifyRateLimiting = { passed: true, details: rateLimitResult.details, points: 5 };\n            } else {\n                    verificationResults.verifyRateLimiting = { passed: false, details: rateLimitResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyRateLimiting = { passed: false, details: `Rate limiting check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 6. Metadata protection verification (10 points) - All features enabled by default\n            try {\n                const metadataResult = await EnhancedSecureCryptoUtils.verifyMetadataProtection(securityManager);\n                if (metadataResult.passed) {\n                score += 10;\n                    verificationResults.verifyMetadataProtection = { passed: true, details: metadataResult.details, points: 10 };\n            } else {\n                    verificationResults.verifyMetadataProtection = { passed: false, details: metadataResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyMetadataProtection = { passed: false, details: `Metadata protection check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 7. Perfect Forward Secrecy verification (10 points) - All features enabled by default\n            try {\n                const pfsResult = await EnhancedSecureCryptoUtils.verifyPerfectForwardSecrecy(securityManager);\n                if (pfsResult.passed) {\n                score += 10;\n                    verificationResults.verifyPerfectForwardSecrecy = { passed: true, details: pfsResult.details, points: 10 };\n            } else {\n                    verificationResults.verifyPerfectForwardSecrecy = { passed: false, details: pfsResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyPerfectForwardSecrecy = { passed: false, details: `PFS check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 8. Nested encryption verification (5 points) - All features enabled by default\n            if (await EnhancedSecureCryptoUtils.verifyNestedEncryption(securityManager)) {\n                score += 5;\n                verificationResults.nestedEncryption = { passed: true, details: 'Nested encryption active', points: 5 };\n            } else {\n                verificationResults.nestedEncryption = { passed: false, details: 'Nested encryption failed', points: 0 };\n            }\n            \n            // 9. Packet padding verification (5 points) - All features enabled by default\n            if (await EnhancedSecureCryptoUtils.verifyPacketPadding(securityManager)) {\n                score += 5;\n                verificationResults.packetPadding = { passed: true, details: 'Packet padding active', points: 5 };\n            } else {\n                verificationResults.packetPadding = { passed: false, details: 'Packet padding failed', points: 0 };\n            }\n            \n            // 10. Advanced features verification (10 points) - All features enabled by default\n            if (await EnhancedSecureCryptoUtils.verifyAdvancedFeatures(securityManager)) {\n                score += 10;\n                verificationResults.advancedFeatures = { passed: true, details: 'Advanced features active', points: 10 };\n            } else {\n                verificationResults.advancedFeatures = { passed: false, details: 'Advanced features failed', points: 0 };\n            }\n            \n            const percentage = Math.round((score / maxScore) * 100);\n            \n            // All security features are available - no restrictions\n            const availableChecks = 10; // All 10 security checks available\n            const passedChecks = Object.values(verificationResults).filter(r => r.passed).length;\n            \n            const result = {\n                level: percentage >= 85 ? 'HIGH' : percentage >= 65 ? 'MEDIUM' : percentage >= 35 ? 'LOW' : 'CRITICAL',\n                score: percentage,\n                color: percentage >= 85 ? 'green' : percentage >= 65 ? 'orange' : percentage >= 35 ? 'yellow' : 'red',\n                verificationResults,\n                timestamp: Date.now(),\n                details: `Real verification: ${score}/${maxScore} security checks passed (${passedChecks}/${availableChecks} available)`,\n                isRealData: true,\n                passedChecks: passedChecks,\n                totalChecks: availableChecks,\n                sessionType: sessionType,\n                maxPossibleScore: 100 // All features enabled - max 100 points\n            };\n\n            \n            return result;\n        } catch (error) {\n            console.error('Security level calculation failed:', error.message);\n            return {\n                level: 'UNKNOWN',\n                score: 0,\n                color: 'red',\n                verificationResults: {},\n                timestamp: Date.now(),\n                details: `Verification failed: ${error.message}`,\n                isRealData: false\n            };\n        }\n    }\n\n    // Real verification functions\n    static async verifyEncryption(securityManager) {\n        try {\n            if (!securityManager.encryptionKey) {\n                return { passed: false, details: 'No encryption key available' };\n            }\n            \n            // Test actual encryption/decryption with multiple data types\n            const testCases = [\n                'Test encryption verification',\n                '\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438',\n                'Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?',\n                'Large data: ' + 'A'.repeat(1000)\n            ];\n            \n            for (const testData of testCases) {\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            const iv = crypto.getRandomValues(new Uint8Array(12));\n            \n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv },\n                securityManager.encryptionKey,\n                testBuffer\n            );\n            \n            const decrypted = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv },\n                securityManager.encryptionKey,\n                encrypted\n            );\n            \n            const decryptedText = new TextDecoder().decode(decrypted);\n                if (decryptedText !== testData) {\n                    return { passed: false, details: `Decryption mismatch for: ${testData.substring(0, 20)}...` };\n                }\n            }\n            \n            return { passed: true, details: 'AES-GCM encryption/decryption working correctly' };\n        } catch (error) {\n            console.error('Encryption verification failed:', error.message);\n            return { passed: false, details: `Encryption test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyECDHKeyExchange(securityManager) {\n        try {\n            if (!securityManager.ecdhKeyPair || !securityManager.ecdhKeyPair.privateKey || !securityManager.ecdhKeyPair.publicKey) {\n                return { passed: false, details: 'No ECDH key pair available' };\n            }\n            \n            // Test that keys are actually ECDH keys\n            const keyType = securityManager.ecdhKeyPair.privateKey.algorithm.name;\n            const curve = securityManager.ecdhKeyPair.privateKey.algorithm.namedCurve;\n            \n            if (keyType !== 'ECDH') {\n                return { passed: false, details: `Invalid key type: ${keyType}, expected ECDH` };\n            }\n            \n            if (curve !== 'P-384' && curve !== 'P-256') {\n                return { passed: false, details: `Unsupported curve: ${curve}, expected P-384 or P-256` };\n            }\n            \n            // Test key derivation\n            try {\n                const derivedKey = await crypto.subtle.deriveKey(\n                    { name: 'ECDH', public: securityManager.ecdhKeyPair.publicKey },\n                    securityManager.ecdhKeyPair.privateKey,\n                    { name: 'AES-GCM', length: 256 },\n                    false,\n                    ['encrypt', 'decrypt']\n                );\n                \n                if (!derivedKey) {\n                    return { passed: false, details: 'Key derivation failed' };\n                }\n            } catch (deriveError) {\n                return { passed: false, details: `Key derivation test failed: ${deriveError.message}` };\n            }\n            \n            return { passed: true, details: `ECDH key exchange working with ${curve} curve` };\n        } catch (error) {\n            console.error('ECDH verification failed:', error.message);\n            return { passed: false, details: `ECDH test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyECDSASignatures(securityManager) {\n        try {\n            if (!securityManager.ecdsaKeyPair || !securityManager.ecdsaKeyPair.privateKey || !securityManager.ecdsaKeyPair.publicKey) {\n                return { passed: false, details: 'No ECDSA key pair available' };\n            }\n            \n            // Test actual signing and verification with multiple test cases\n            const testCases = [\n                'Test ECDSA signature verification',\n                '\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u043E\u0434\u043F\u0438\u0441\u0438',\n                'Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?',\n                'Large data: ' + 'B'.repeat(2000)\n            ];\n            \n            for (const testData of testCases) {\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            \n            const signature = await crypto.subtle.sign(\n                { name: 'ECDSA', hash: 'SHA-256' },\n                securityManager.ecdsaKeyPair.privateKey,\n                testBuffer\n            );\n            \n            const isValid = await crypto.subtle.verify(\n                { name: 'ECDSA', hash: 'SHA-256' },\n                securityManager.ecdsaKeyPair.publicKey,\n                signature,\n                testBuffer\n            );\n            \n                if (!isValid) {\n                    return { passed: false, details: `Signature verification failed for: ${testData.substring(0, 20)}...` };\n                }\n            }\n            \n            return { passed: true, details: 'ECDSA digital signatures working correctly' };\n        } catch (error) {\n            console.error('ECDSA verification failed:', error.message);\n            return { passed: false, details: `ECDSA test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyMessageIntegrity(securityManager) {\n        try {\n            // Check if macKey exists and is a valid CryptoKey\n            if (!securityManager.macKey || !(securityManager.macKey instanceof CryptoKey)) {\n                return { passed: false, details: 'MAC key not available or invalid' };\n            }\n            \n            // Test message integrity with HMAC using multiple test cases\n            const testCases = [\n                'Test message integrity verification',\n                '\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u0446\u0435\u043B\u043E\u0441\u0442\u043D\u043E\u0441\u0442\u0438',\n                'Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?',\n                'Large data: ' + 'C'.repeat(3000)\n            ];\n            \n            for (const testData of testCases) {\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            \n            const hmac = await crypto.subtle.sign(\n                { name: 'HMAC', hash: 'SHA-256' },\n                securityManager.macKey,\n                testBuffer\n            );\n            \n            const isValid = await crypto.subtle.verify(\n                { name: 'HMAC', hash: 'SHA-256' },\n                securityManager.macKey,\n                hmac,\n                testBuffer\n            );\n            \n                if (!isValid) {\n                    return { passed: false, details: `HMAC verification failed for: ${testData.substring(0, 20)}...` };\n                }\n            }\n            \n            return { passed: true, details: 'Message integrity (HMAC) working correctly' };\n        } catch (error) {\n            console.error('Message integrity verification failed:', error.message);\n            return { passed: false, details: `Message integrity test failed: ${error.message}` };\n        }\n    }\n    \n    // Additional verification functions.\n    //\n    // These used to be three `return { passed: true }` stubs \u2014 a quarter of the\n    // reported score awarded for checks that never ran, under a UI that calls the\n    // result \"Real cryptographic tests\". A security indicator that cannot fail\n    // tells the user nothing; worse, it keeps reading green after the subsystem\n    // it claims to measure breaks. Each one below now exercises the thing it\n    // names and is expected to be able to fail.\n\n    static async verifyRateLimiting(securityManager) {\n        try {\n            const limiter = EnhancedSecureCryptoUtils.rateLimiter;\n            if (!limiter || typeof limiter.checkMessageRate !== 'function') {\n                return { passed: false, details: 'Rate limiter is not available' };\n            }\n\n            // Drive a throwaway bucket past its limit and confirm it actually\n            // refuses. A separate identifier per run keeps the live counters\n            // untouched, so running the report never costs the user quota.\n            const probeId = `selftest_${crypto.getRandomValues(new Uint32Array(1))[0]}`;\n            const limit = 3;\n            for (let i = 0; i < limit; i++) {\n                const allowed = await limiter.checkMessageRate(probeId, limit, 60000);\n                if (!allowed) {\n                    return { passed: false, details: `Rate limiter refused message ${i + 1} of ${limit} while under the limit` };\n                }\n            }\n\n            const shouldBeBlocked = await limiter.checkMessageRate(probeId, limit, 60000);\n            limiter.messages.delete(`msg_${probeId}`);\n\n            if (shouldBeBlocked) {\n                return { passed: false, details: 'Rate limiter did not block a message over the limit' };\n            }\n\n            return { passed: true, details: `Rate limiting verified: ${limit} allowed, the next refused` };\n        } catch (error) {\n            return { passed: false, details: `Rate limiting test failed: ${error.message}` };\n        }\n    }\n\n    static async verifyMetadataProtection(securityManager) {\n        try {\n            const metadataKey = securityManager?.metadataKey;\n            if (!metadataKey || !(metadataKey instanceof CryptoKey)) {\n                return { passed: false, details: 'Metadata encryption key not available' };\n            }\n            if (metadataKey.algorithm?.name !== 'AES-GCM') {\n                return { passed: false, details: `Metadata key has the wrong algorithm: ${metadataKey.algorithm?.name}` };\n            }\n            if (metadataKey.extractable) {\n                return { passed: false, details: 'Metadata key is extractable' };\n            }\n\n            // Key separation is the whole point: message metadata (ids, sequence\n            // numbers, real lengths) must not be readable with the message key.\n            if (securityManager.encryptionKey === metadataKey) {\n                return { passed: false, details: 'Metadata key is not separated from the message key' };\n            }\n\n            // Round-trip a probe so a key that exists but cannot be used is caught.\n            const iv = crypto.getRandomValues(new Uint8Array(12));\n            const probe = new TextEncoder().encode('metadata-protection-selftest');\n            const sealed = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, metadataKey, probe);\n            const opened = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, metadataKey, sealed);\n            if (new TextDecoder().decode(opened) !== 'metadata-protection-selftest') {\n                return { passed: false, details: 'Metadata encryption round-trip mismatch' };\n            }\n\n            return { passed: true, details: 'Metadata is encrypted under a separate non-extractable key' };\n        } catch (error) {\n            return { passed: false, details: `Metadata protection test failed: ${error.message}` };\n        }\n    }\n\n    static async verifyPerfectForwardSecrecy(securityManager) {\n        try {\n            // Session-level PFS is real: every session runs a fresh ephemeral ECDH\n            // and the derived keys are non-extractable and wiped when it ends.\n            const hasEphemeralKeys = !!securityManager?.ecdhKeyPair?.privateKey &&\n                securityManager.ecdhKeyPair.privateKey.extractable === false;\n            if (!hasEphemeralKeys) {\n                return { passed: false, details: 'No non-extractable ephemeral ECDH key pair for this session' };\n            }\n\n            // In-session forward secrecy comes from the Double Ratchet: a per-\n            // message key derived by a one-way KDF and destroyed after use, plus a\n            // DH step whenever the conversation changes direction. Without it a\n            // single compromised session key opens the entire transcript, which is\n            // the state this check used to report as \"configured and active\".\n            if (securityManager?.isRatchetActive?.()) {\n                const state = securityManager._ratchet?.getState?.() || {};\n                return {\n                    passed: true,\n                    details: `Double Ratchet active: per-message keys destroyed after use, DH re-key on each reply (sent ${state.sendCount ?? 0}, received ${state.receiveCount ?? 0} on the current chain)`\n                };\n            }\n\n            return {\n                passed: false,\n                details: 'Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation'\n            };\n        } catch (error) {\n            return { passed: false, details: `PFS test failed: ${error.message}` };\n        }\n    }\n\n    static async verifyReplayProtection(securityManager) {\n        try {\n            // Debug logs removed to prevent leaking runtime state\n            \n            // Check if replay protection is enabled\n            if (!securityManager.replayProtection) {\n                return { passed: false, details: 'Replay protection not enabled' };\n            }\n            \n            return { passed: true, details: 'Replay protection is working correctly' };\n        } catch (error) {\n            return { passed: false, details: `Replay protection test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyDTLSFingerprint(securityManager) {\n        try {\n            // Debug logs removed\n            \n            // Check if DTLS fingerprint is available\n            if (!securityManager.dtlsFingerprint) {\n                return { passed: false, details: 'DTLS fingerprint not available' };\n            }\n            \n            return { passed: true, details: 'DTLS fingerprint is valid and available' };\n        } catch (error) {\n            return { passed: false, details: `DTLS fingerprint test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifySASVerification(securityManager) {\n        try {\n            // Debug logs removed\n            \n            // Check if SAS code is available\n            if (!securityManager.sasCode) {\n                return { passed: false, details: 'SAS code not available' };\n            }\n            \n            return { passed: true, details: 'SAS verification code is valid and available' };\n        } catch (error) {\n            return { passed: false, details: `SAS verification test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyTrafficObfuscation(securityManager) {\n        try {\n            // Debug logs removed\n            \n            // Check if traffic obfuscation is enabled\n            if (!securityManager.trafficObfuscation) {\n                return { passed: false, details: 'Traffic obfuscation not enabled' };\n            }\n            \n            return { passed: true, details: 'Traffic obfuscation is working correctly' };\n        } catch (error) {\n            return { passed: false, details: `Traffic obfuscation test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyNestedEncryption(securityManager) {\n        try {\n            // Check if nestedEncryptionKey exists and is a valid CryptoKey\n            if (!securityManager.nestedEncryptionKey || !(securityManager.nestedEncryptionKey instanceof CryptoKey)) {\n                console.warn('Nested encryption key not available or invalid');\n                return false;\n            }\n            \n            // Test nested encryption\n            const testData = 'Test nested encryption verification';\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            \n            // Simulate nested encryption\n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: crypto.getRandomValues(new Uint8Array(12)) },\n                securityManager.nestedEncryptionKey,\n                testBuffer\n            );\n            \n            return encrypted && encrypted.byteLength > 0;\n        } catch (error) {\n            console.error('Nested encryption verification failed:', error.message);\n            return false;\n        }\n    }\n    \n    static async verifyPacketPadding(securityManager) {\n        try {\n            if (!securityManager.paddingConfig || !securityManager.paddingConfig.enabled) return false;\n            \n            // Test packet padding functionality\n            const testData = 'Test packet padding verification';\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            \n            // Simulate packet padding\n            const paddingSize = Math.floor(Math.random() * (securityManager.paddingConfig.maxPadding - securityManager.paddingConfig.minPadding)) + securityManager.paddingConfig.minPadding;\n            const paddedData = new Uint8Array(testBuffer.byteLength + paddingSize);\n            paddedData.set(new Uint8Array(testBuffer), 0);\n            \n            return paddedData.byteLength >= testBuffer.byteLength + securityManager.paddingConfig.minPadding;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Packet padding verification failed', { error: error.message });\n            return false;\n        }\n    }\n    \n    static async verifyAdvancedFeatures(securityManager) {\n        try {\n            // Test advanced features like traffic obfuscation, fake traffic, etc.\n            const hasFakeTraffic = securityManager.fakeTrafficConfig && securityManager.fakeTrafficConfig.enabled;\n            const hasDecoyChannels = securityManager.decoyChannelsConfig && securityManager.decoyChannelsConfig.enabled;\n            const hasAntiFingerprinting = securityManager.antiFingerprintingConfig && securityManager.antiFingerprintingConfig.enabled;\n            \n            return hasFakeTraffic || hasDecoyChannels || hasAntiFingerprinting;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Advanced features verification failed', { error: error.message });\n            return false;\n        }\n    }\n    \n    static async verifyMutualAuth(securityManager) {\n        try {\n            if (!securityManager.isVerified || !securityManager.verificationCode) return false;\n            \n            // Test mutual authentication\n            return securityManager.isVerified && securityManager.verificationCode.length > 0;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Mutual auth verification failed', { error: error.message });\n            return false;\n        }\n    }\n    \n    \n    static async verifyNonExtractableKeys(securityManager) {\n        // This check was inverted: it returned true when exportKey SUCCEEDED \u2014\n        // i.e. when the key was extractable, the failure case \u2014 and also true in\n        // the catch. It could not return false, so it confirmed nothing.\n        const keys = [\n            ['encryptionKey', securityManager?.encryptionKey],\n            ['macKey', securityManager?.macKey],\n            ['metadataKey', securityManager?.metadataKey]\n        ];\n\n        for (const [name, key] of keys) {\n            if (!key || !(key instanceof CryptoKey)) {\n                return false;\n            }\n            // `extractable` is the authoritative answer and needs no export\n            // attempt; exporting a key just to prove it cannot be exported would\n            // copy it into the JS heap on every implementation that allows it.\n            if (key.extractable !== false) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Session key is extractable', { keyName: name });\n                return false;\n            }\n        }\n\n        return true;\n    }\n    \n    static async verifyEnhancedValidation(securityManager) {\n        try {\n            if (!securityManager.securityFeatures) return false;\n            \n            // Test enhanced validation features\n            const hasValidation = securityManager.securityFeatures.hasEnhancedValidation || \n                                securityManager.securityFeatures.hasEnhancedReplayProtection;\n            \n            return hasValidation;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Enhanced validation verification failed', { error: error.message });\n            return false;\n        }\n    }\n    \n    \n    static async verifyPFS(securityManager) {\n        try {\n            // Check if PFS is active\n            return securityManager.securityFeatures &&\n                   securityManager.securityFeatures.hasPFS === true &&\n                   securityManager.keyRotationInterval &&\n                   securityManager.currentKeyVersion !== undefined &&\n                   securityManager.keyVersions &&\n                   securityManager.keyVersions instanceof Map;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'PFS verification failed', { error: error.message });\n            return false;\n        }\n    }\n\n    // Rate limiting implementation\n    static rateLimiter = {\n    messages: new Map(),\n    connections: new Map(),\n    locks: new Map(),\n    \n    async checkMessageRate(identifier, limit = 60, windowMs = 60000) {\n        if (typeof identifier !== 'string' || identifier.length > 256) {\n            return false;\n        }\n        \n        const key = `msg_${identifier}`;\n\n        if (this.locks.has(key)) {\n\n            await new Promise(resolve => setTimeout(resolve, Math.floor(Math.random() * 10) + 5));\n            return this.checkMessageRate(identifier, limit, windowMs);\n        }\n        \n        this.locks.set(key, true);\n        \n        try {\n            const now = Date.now();\n            \n            if (!this.messages.has(key)) {\n                this.messages.set(key, []);\n            }\n            \n            const timestamps = this.messages.get(key);\n            \n            const validTimestamps = timestamps.filter(ts => now - ts < windowMs);\n            \n            if (validTimestamps.length >= limit) {\n                return false; \n            }\n            \n            validTimestamps.push(now);\n            this.messages.set(key, validTimestamps);\n            return true;\n        } finally {\n            this.locks.delete(key);\n        }\n    },\n    \n    async checkConnectionRate(identifier, limit = 5, windowMs = 300000) {\n        if (typeof identifier !== 'string' || identifier.length > 256) {\n            return false;\n        }\n        \n        const key = `conn_${identifier}`;\n        \n        if (this.locks.has(key)) {\n            await new Promise(resolve => setTimeout(resolve, Math.floor(Math.random() * 10) + 5));\n            return this.checkConnectionRate(identifier, limit, windowMs);\n        }\n        \n        this.locks.set(key, true);\n        \n        try {\n            const now = Date.now();\n            \n            if (!this.connections.has(key)) {\n                this.connections.set(key, []);\n            }\n            \n            const timestamps = this.connections.get(key);\n            const validTimestamps = timestamps.filter(ts => now - ts < windowMs);\n            \n            if (validTimestamps.length >= limit) {\n                return false;\n            }\n            \n            validTimestamps.push(now);\n            this.connections.set(key, validTimestamps);\n            return true;\n        } finally {\n            this.locks.delete(key);\n        }\n    },\n    \n    cleanup() {\n        const now = Date.now();\n        const maxAge = 3600000; \n        \n        for (const [key, timestamps] of this.messages.entries()) {\n            if (this.locks.has(key)) continue;\n            \n            const valid = timestamps.filter(ts => now - ts < maxAge);\n            if (valid.length === 0) {\n                this.messages.delete(key);\n            } else {\n                this.messages.set(key, valid);\n            }\n        }\n        \n        for (const [key, timestamps] of this.connections.entries()) {\n            if (this.locks.has(key)) continue;\n            \n            const valid = timestamps.filter(ts => now - ts < maxAge);\n            if (valid.length === 0) {\n                this.connections.delete(key);\n            } else {\n                this.connections.set(key, valid);\n            }\n        }\n\n        for (const lockKey of this.locks.keys()) {\n            const keyTimestamp = parseInt(lockKey.split('_').pop()) || 0;\n            if (now - keyTimestamp > 30000) {\n                this.locks.delete(lockKey);\n            }\n        }\n    }\n};\n\n    static validateSalt(salt) {\n        if (!salt || salt.length !== 64) {\n            throw new Error('Salt must be exactly 64 bytes');\n        }\n        \n        const uniqueBytes = new Set(salt);\n        if (uniqueBytes.size < 16) {\n            throw new Error('Salt has insufficient entropy');\n        }\n        \n        return true;\n    }\n\n    // Secure logging without data leaks\n    static secureLog = {\n        logs: [],\n        maxLogs: 100,\n        isProductionMode: false,\n        \n        // Initialize production mode detection\n        init() {\n            this.isProductionMode = this._detectProductionMode();\n            if (this.isProductionMode) {\n                console.log('[SecureChat] Production mode detected - sensitive logging disabled');\n            }\n        },\n        \n        _detectProductionMode() {\n            return (\n                (typeof process !== 'undefined' && process.env?.NODE_ENV === 'production') ||\n                (!window.DEBUG_MODE && !window.DEVELOPMENT_MODE) ||\n                (window.location.hostname && !window.location.hostname.includes('localhost') && \n                 !window.location.hostname.includes('127.0.0.1') && \n                 !window.location.hostname.includes('.local')) ||\n                (typeof window.webpackHotUpdate === 'undefined' && !window.location.search.includes('debug'))\n            );\n        },\n        \n        log(level, message, context = {}) {\n            const sanitizedContext = this.sanitizeContext(context);\n            const logEntry = {\n                timestamp: Date.now(),\n                level,\n                message,\n                context: sanitizedContext,\n                id: crypto.getRandomValues(new Uint32Array(1))[0]\n            };\n            \n            this.logs.push(logEntry);\n            \n            // Keep only recent logs\n            if (this.logs.length > this.maxLogs) {\n                this.logs = this.logs.slice(-this.maxLogs);\n            }\n            \n            // Production-safe console output\n            if (this.isProductionMode) {\n                if (level === 'error') {\n                    // In production expose only an opaque error code, never the context.\n                    console.error(`\u274C [SecureChat] ${message} [ERROR_CODE: ${this._generateErrorCode(message)}]`);\n                } else if (level === 'warn') {\n                    // Warning text only, no context payload.\n                    console.warn(`\u26A0\uFE0F [SecureChat] ${message}`);\n                } else {\n                    // info/debug and any other level: suppressed entirely in production.\n                    return;\n                }\n            } else {\n                // Development mode - \u043F\u043E\u043A\u0430\u0437\u044B\u0432\u0430\u0435\u043C \u0432\u0441\u0435\n                if (level === 'error') {\n                    console.error(`\u274C [SecureChat] ${message}`, { errorType: sanitizedContext?.constructor?.name || 'Unknown' });\n                } else if (level === 'warn') {\n                    console.warn(`\u26A0\uFE0F [SecureChat] ${message}`, { details: sanitizedContext });\n                } else {\n                    console.log(`[SecureChat] ${message}`, sanitizedContext);\n                }\n            }\n        },\n        \n        // \u0413\u0435\u043D\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u044B\u0439 \u043A\u043E\u0434 \u043E\u0448\u0438\u0431\u043A\u0438 \u0434\u043B\u044F production\n        _generateErrorCode(message) {\n            const hash = message.split('').reduce((a, b) => {\n                a = ((a << 5) - a) + b.charCodeAt(0);\n                return a & a;\n            }, 0);\n            return Math.abs(hash).toString(36).substring(0, 6).toUpperCase();\n        },\n        \n        sanitizeContext(context) {\n            if (!context || typeof context !== 'object') {\n                return context;\n            }\n            \n            const sensitivePatterns = [\n                /key/i, /secret/i, /password/i, /token/i, /signature/i,\n                /challenge/i, /proof/i, /salt/i, /iv/i, /nonce/i, /hash/i,\n                /fingerprint/i, /mac/i, /private/i, /encryption/i, /decryption/i\n            ];\n            \n            const sanitized = {};\n            for (const [key, value] of Object.entries(context)) {\n                const isSensitive = sensitivePatterns.some(pattern => \n                    pattern.test(key) || (typeof value === 'string' && pattern.test(value))\n                );\n                \n                if (isSensitive) {\n                    sanitized[key] = '[REDACTED]';\n                } else if (typeof value === 'string' && value.length > 100) {\n                    sanitized[key] = value.substring(0, 100) + '...[TRUNCATED]';\n                } else if (value instanceof ArrayBuffer || value instanceof Uint8Array) {\n                    sanitized[key] = `[${value.constructor.name}(${value.byteLength || value.length} bytes)]`;\n                } else if (value && typeof value === 'object' && !Array.isArray(value)) {\n                    // \u0420\u0435\u043A\u0443\u0440\u0441\u0438\u0432\u043D\u0430\u044F \u0441\u0430\u043D\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044F \u0434\u043B\u044F \u043E\u0431\u044A\u0435\u043A\u0442\u043E\u0432\n                    sanitized[key] = this.sanitizeContext(value);\n                } else {\n                    sanitized[key] = value;\n                }\n            }\n            return sanitized;\n        },\n        \n        getLogs(level = null) {\n            if (level) {\n                return this.logs.filter(log => log.level === level);\n            }\n            return [...this.logs];\n        },\n        \n        clearLogs() {\n            this.logs = [];\n        },\n        \n        // \u041C\u0435\u0442\u043E\u0434 \u0434\u043B\u044F \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u0438 \u043E\u0448\u0438\u0431\u043E\u043A \u043D\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432 production\n        async sendErrorToServer(errorCode, message, context = {}) {\n            if (!this.isProductionMode) {\n                return; // \u0412 development \u043D\u0435 \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u044F\u0435\u043C\n            }\n            \n            try {\n                // \u041E\u0442\u043F\u0440\u0430\u0432\u043B\u044F\u0435\u043C \u0442\u043E\u043B\u044C\u043A\u043E \u0431\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u0443\u044E \u0438\u043D\u0444\u043E\u0440\u043C\u0430\u0446\u0438\u044E\n                const safeErrorData = {\n                    errorCode,\n                    timestamp: Date.now(),\n                    userAgent: navigator.userAgent.substring(0, 100),\n                    url: window.location.href.substring(0, 100)\n                };\n                \n                // \u0417\u0434\u0435\u0441\u044C \u043C\u043E\u0436\u043D\u043E \u0434\u043E\u0431\u0430\u0432\u0438\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u0443 \u043D\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\n                // await fetch('/api/error-log', { method: 'POST', body: JSON.stringify(safeErrorData) });\n                \n                if (window.DEBUG_MODE) {\n                    console.log('[SecureChat] Error logged to server:', safeErrorData);\n                }\n            } catch (e) {\n                // \u041D\u0435 \u043B\u043E\u0433\u0438\u0440\u0443\u0435\u043C \u043E\u0448\u0438\u0431\u043A\u0438 \u043B\u043E\u0433\u0438\u0440\u043E\u0432\u0430\u043D\u0438\u044F\n            }\n        }\n    };\n\n    // Generate ECDH key pair for secure key exchange (non-extractable) with fallback\n    static async generateECDHKeyPair() {\n        try {\n            // Try P-384 first\n            try {\n                const keyPair = await crypto.subtle.generateKey(\n                    {\n                        name: 'ECDH',\n                        namedCurve: 'P-384'\n                    },\n                    false, // Non-extractable for enhanced security\n                    // 'deriveBits' is REQUIRED: deriveSharedKeys() uses deriveBits so\n                    // the shared secret lands in a buffer we can overwrite, instead of\n                    // being exported out of an extractable key and left in the heap.\n                    // Without this usage WebCrypto rejects the derivation outright and\n                    // no session can be established. Usages are local to the CryptoKey\n                    // and are not part of the exported SPKI, so this does not change\n                    // anything on the wire.\n                    ['deriveKey', 'deriveBits']\n                );\n\n                // Removed key generation info logging to avoid exposing key-related metadata\n\n                return keyPair;\n            } catch (p384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'Elliptic curve P-384 generation failed, switching curve', { error: p384Error.message });\n\n                // Fallback to P-256\n                const keyPair = await crypto.subtle.generateKey(\n                    {\n                        name: 'ECDH',\n                        namedCurve: 'P-256'\n                    },\n                    false, // Non-extractable for enhanced security\n                    ['deriveKey', 'deriveBits']\n                );\n                \n                // Removed key generation info logging to avoid exposing key-related metadata\n                \n                return keyPair;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'ECDH key generation failed', { error: error.message });\n            throw new Error('Failed to create keys for secure exchange');\n        }\n    }\n\n    // Generate ECDSA key pair for digital signatures with fallback\n    static async generateECDSAKeyPair() {\n        try {\n            // Try P-384 first\n            try {\n                const keyPair = await crypto.subtle.generateKey(\n                    {\n                        name: 'ECDSA',\n                        namedCurve: 'P-384'\n                    },\n                    false, // Non-extractable for enhanced security\n                    ['sign', 'verify']\n                );\n                \n                // Removed key generation info logging to avoid exposing key-related metadata\n                \n                return keyPair;\n            } catch (p384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'Elliptic curve P-384 generation failed, switching curve', { error: p384Error.message });\n                \n                // Fallback to P-256\n                const keyPair = await crypto.subtle.generateKey(\n                    {\n                        name: 'ECDSA',\n                        namedCurve: 'P-256'\n                    },\n                    false, // Non-extractable for enhanced security\n                    ['sign', 'verify']\n                );\n                \n                // Removed key generation info logging to avoid exposing key-related metadata\n                \n                return keyPair;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'ECDSA key generation failed', { error: error.message });\n            throw new Error('Failed to generate keys for digital signatures');\n        }\n    }\n\n    // Sign data with ECDSA (P-384 or P-256)\n    static async signData(privateKey, data) {\n        try {\n            const encoder = new TextEncoder();\n            const dataBuffer = typeof data === 'string' ? encoder.encode(data) : data;\n            \n            // Try SHA-384 first, fallback to SHA-256\n            try {\n                const signature = await crypto.subtle.sign(\n                    {\n                        name: 'ECDSA',\n                        hash: 'SHA-384'\n                    },\n                    privateKey,\n                    dataBuffer\n                );\n                \n                return Array.from(new Uint8Array(signature));\n            } catch (sha384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'SHA-384 signing failed, trying SHA-256', { error: sha384Error.message });\n                \n                const signature = await crypto.subtle.sign(\n                    {\n                        name: 'ECDSA',\n                        hash: 'SHA-256'\n                    },\n                    privateKey,\n                    dataBuffer\n                );\n                \n                return Array.from(new Uint8Array(signature));\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Data signing failed', { error: error.message });\n            throw new Error('Failed to sign data');\n        }\n    }\n\n    // Verify ECDSA signature (P-384 or P-256)\n    static async verifySignature(publicKey, signature, data) {\n        try {\n            // Debug logs removed\n            \n            const encoder = new TextEncoder();\n            const dataBuffer = typeof data === 'string' ? encoder.encode(data) : data;\n            const signatureBuffer = new Uint8Array(signature);\n            \n            // Debug logs removed\n            \n            // Try SHA-384 first, fallback to SHA-256\n            try {\n                // Debug logs removed\n                const isValid = await crypto.subtle.verify(\n                    {\n                        name: 'ECDSA',\n                        hash: 'SHA-384'\n                    },\n                    publicKey,\n                    signatureBuffer,\n                    dataBuffer\n                );\n                \n                // Debug logs removed\n                \n            // Removed signature verification info logging\n                \n                return isValid;\n            } catch (sha384Error) {\n                // Debug logs removed\n                // Removed signature verification transition logging\n                \n                // Debug logs removed\n                const isValid = await crypto.subtle.verify(\n                    {\n                        name: 'ECDSA',\n                        hash: 'SHA-256'\n                    },\n                    publicKey,\n                    signatureBuffer,\n                    dataBuffer\n                );\n                \n                // Debug logs removed\n                \n                // Removed signature verification info logging\n                \n                return isValid;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Signature verification failed', { error: error.message });\n            throw new Error('Failed to verify digital signature');\n        }\n    }\n\n    // Enhanced DER/SPKI validation with full ASN.1 parsing\n    static async validateKeyStructure(keyData, expectedAlgorithm = 'ECDH') {\n        try {\n            if (!Array.isArray(keyData) || keyData.length === 0) {\n                throw new Error('Invalid key data format');\n            }\n\n            const keyBytes = new Uint8Array(keyData);\n\n            // Size limits to prevent DoS\n            if (keyBytes.length < 50) {\n                throw new Error('Key data too short - invalid SPKI structure');\n            }\n            if (keyBytes.length > 2000) {\n                throw new Error('Key data too long - possible attack');\n            }\n\n            // Parse ASN.1 DER structure\n            const asn1 = EnhancedSecureCryptoUtils.parseASN1(keyBytes);\n            \n            // Validate SPKI structure\n            if (!asn1 || asn1.tag !== 0x30) {\n                throw new Error('Invalid SPKI structure - missing SEQUENCE tag');\n            }\n\n            // SPKI should have exactly 2 elements: AlgorithmIdentifier and BIT STRING\n            if (asn1.children.length !== 2) {\n                throw new Error(`Invalid SPKI structure - expected 2 elements, got ${asn1.children.length}`);\n            }\n\n            // Validate AlgorithmIdentifier\n            const algIdentifier = asn1.children[0];\n            if (algIdentifier.tag !== 0x30) {\n                throw new Error('Invalid AlgorithmIdentifier - not a SEQUENCE');\n            }\n\n            // Parse algorithm OID\n            const algOid = algIdentifier.children[0];\n            if (algOid.tag !== 0x06) {\n                throw new Error('Invalid algorithm OID - not an OBJECT IDENTIFIER');\n            }\n\n            // Validate algorithm OID based on expected algorithm\n            const oidBytes = algOid.value;\n            const oidString = EnhancedSecureCryptoUtils.oidToString(oidBytes);\n            \n            // Check for expected algorithms\n            const validAlgorithms = {\n                'ECDH': ['1.2.840.10045.2.1'], // id-ecPublicKey\n                'ECDSA': ['1.2.840.10045.2.1'], // id-ecPublicKey (same as ECDH)\n                'RSA': ['1.2.840.113549.1.1.1'], // rsaEncryption\n                'AES-GCM': ['2.16.840.1.101.3.4.1.6', '2.16.840.1.101.3.4.1.46'] // AES-128-GCM, AES-256-GCM\n            };\n\n            const expectedOids = validAlgorithms[expectedAlgorithm];\n            if (!expectedOids) {\n                throw new Error(`Unknown algorithm: ${expectedAlgorithm}`);\n            }\n\n            if (!expectedOids.includes(oidString)) {\n                throw new Error(`Invalid algorithm OID: expected ${expectedOids.join(' or ')}, got ${oidString}`);\n            }\n\n            // For EC algorithms, validate curve parameters\n            if (expectedAlgorithm === 'ECDH' || expectedAlgorithm === 'ECDSA') {\n                if (algIdentifier.children.length < 2) {\n                    throw new Error('Missing curve parameters for EC key');\n                }\n\n                const curveOid = algIdentifier.children[1];\n                if (curveOid.tag !== 0x06) {\n                    throw new Error('Invalid curve OID - not an OBJECT IDENTIFIER');\n                }\n\n                const curveOidString = EnhancedSecureCryptoUtils.oidToString(curveOid.value);\n                \n                // Only allow P-256 and P-384 curves\n                const validCurves = {\n                    '1.2.840.10045.3.1.7': 'P-256', // secp256r1\n                    '1.3.132.0.34': 'P-384' // secp384r1\n                };\n\n                if (!validCurves[curveOidString]) {\n                    throw new Error(`Invalid or unsupported curve OID: ${curveOidString}`);\n                }\n\n            // Removed curve validation info logging\n            }\n\n            // Validate public key BIT STRING\n            const publicKeyBitString = asn1.children[1];\n            if (publicKeyBitString.tag !== 0x03) {\n                throw new Error('Invalid public key - not a BIT STRING');\n            }\n\n            // Check for unused bits (should be 0 for public keys)\n            if (publicKeyBitString.value[0] !== 0x00) {\n                throw new Error(`Invalid BIT STRING - unexpected unused bits: ${publicKeyBitString.value[0]}`);\n            }\n\n            // For EC keys, validate point format\n            if (expectedAlgorithm === 'ECDH' || expectedAlgorithm === 'ECDSA') {\n                const pointData = publicKeyBitString.value.slice(1); // Skip unused bits byte\n                \n                // Check for uncompressed point format (0x04)\n                if (pointData[0] !== 0x04) {\n                    throw new Error(`Invalid EC point format: expected uncompressed (0x04), got 0x${pointData[0].toString(16)}`);\n                }\n\n                // Validate point size based on curve\n                const expectedSizes = {\n                    'P-256': 65, // 1 + 32 + 32\n                    'P-384': 97  // 1 + 48 + 48\n                };\n\n                // We already validated the curve above, so we can determine expected size\n                const curveOidString = EnhancedSecureCryptoUtils.oidToString(algIdentifier.children[1].value);\n                const curveName = curveOidString === '1.2.840.10045.3.1.7' ? 'P-256' : 'P-384';\n                const expectedSize = expectedSizes[curveName];\n\n                if (pointData.length !== expectedSize) {\n                    throw new Error(`Invalid EC point size for ${curveName}: expected ${expectedSize}, got ${pointData.length}`);\n                }\n            }\n\n            // Additional validation: try to import the key\n            try {\n                const algorithm = expectedAlgorithm === 'ECDSA' || expectedAlgorithm === 'ECDH'\n                    ? { name: expectedAlgorithm, namedCurve: 'P-384' }\n                    : { name: expectedAlgorithm };\n\n                const usages = expectedAlgorithm === 'ECDSA' ? ['verify'] : [];\n                \n                await crypto.subtle.importKey('spki', keyBytes.buffer, algorithm, false, usages);\n            } catch (importError) {\n                // Try P-256 as fallback for EC keys\n                if (expectedAlgorithm === 'ECDSA' || expectedAlgorithm === 'ECDH') {\n                    try {\n                        const algorithm = { name: expectedAlgorithm, namedCurve: 'P-256' };\n                        const usages = expectedAlgorithm === 'ECDSA' ? ['verify'] : [];\n                        await crypto.subtle.importKey('spki', keyBytes.buffer, algorithm, false, usages);\n                    } catch (fallbackError) {\n                        throw new Error(`Key import validation failed: ${fallbackError.message}`);\n                    }\n                } else {\n                    throw new Error(`Key import validation failed: ${importError.message}`);\n                }\n            }\n\n            // Removed key structure validation info logging\n\n            return true;\n        } catch (err) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Key structure validation failed', {\n                error: err.message,\n                algorithm: expectedAlgorithm\n            });\n            throw new Error(`Invalid key structure: ${err.message}`);\n        }\n    }\n\n    // ASN.1 DER parser helper\n    static parseASN1(bytes, offset = 0) {\n        if (offset >= bytes.length) {\n            return null;\n        }\n\n        const tag = bytes[offset];\n        let lengthOffset = offset + 1;\n        \n        if (lengthOffset >= bytes.length) {\n            throw new Error('Truncated ASN.1 structure');\n        }\n\n        let length = bytes[lengthOffset];\n        let valueOffset = lengthOffset + 1;\n\n        // Handle long form length\n        if (length & 0x80) {\n            const numLengthBytes = length & 0x7f;\n            if (numLengthBytes > 4) {\n                throw new Error('ASN.1 length too large');\n            }\n            \n            length = 0;\n            for (let i = 0; i < numLengthBytes; i++) {\n                if (valueOffset + i >= bytes.length) {\n                    throw new Error('Truncated ASN.1 length');\n                }\n                length = (length << 8) | bytes[valueOffset + i];\n            }\n            valueOffset += numLengthBytes;\n        }\n\n        if (valueOffset + length > bytes.length) {\n            throw new Error('ASN.1 structure extends beyond data');\n        }\n\n        const value = bytes.slice(valueOffset, valueOffset + length);\n        const node = {\n            tag: tag,\n            length: length,\n            value: value,\n            children: []\n        };\n\n        // Parse children for SEQUENCE and SET\n        if (tag === 0x30 || tag === 0x31) {\n            let childOffset = 0;\n            while (childOffset < value.length) {\n                const child = EnhancedSecureCryptoUtils.parseASN1(value, childOffset);\n                if (!child) break;\n                node.children.push(child);\n                childOffset = childOffset + 1 + child.lengthBytes + child.length;\n            }\n        }\n\n        // Calculate how many bytes were used for length encoding\n        node.lengthBytes = valueOffset - lengthOffset;\n        \n        return node;\n    }\n\n    // OID decoder helper\n    static oidToString(bytes) {\n        if (!bytes || bytes.length === 0) {\n            throw new Error('Empty OID');\n        }\n\n        const parts = [];\n        \n        // First byte encodes first two components\n        const first = Math.floor(bytes[0] / 40);\n        const second = bytes[0] % 40;\n        parts.push(first);\n        parts.push(second);\n\n        // Decode remaining components\n        let value = 0;\n        for (let i = 1; i < bytes.length; i++) {\n            value = (value << 7) | (bytes[i] & 0x7f);\n            if (!(bytes[i] & 0x80)) {\n                parts.push(value);\n                value = 0;\n            }\n        }\n\n        return parts.join('.');\n    }\n\n    // Helper to validate and sanitize OID string\n    static validateOidString(oidString) {\n        // OID format: digits separated by dots\n        const oidRegex = /^[0-9]+(\\.[0-9]+)*$/;\n        if (!oidRegex.test(oidString)) {\n            throw new Error(`Invalid OID format: ${oidString}`);\n        }\n\n        const parts = oidString.split('.').map(Number);\n        \n        // First component must be 0, 1, or 2\n        if (parts[0] > 2) {\n            throw new Error(`Invalid OID first component: ${parts[0]}`);\n        }\n\n        // If first component is 0 or 1, second must be <= 39\n        if ((parts[0] === 0 || parts[0] === 1) && parts[1] > 39) {\n            throw new Error(`Invalid OID second component: ${parts[1]} (must be <= 39 for first component ${parts[0]})`);\n        }\n\n        return true;\n    }\n\n    // Export public key for transmission with signature \n    static async exportPublicKeyWithSignature(publicKey, signingKey, keyType = 'ECDH') {\n        try {\n            // Validate key type\n            if (!['ECDH', 'ECDSA'].includes(keyType)) {\n                throw new Error('Invalid key type');\n            }\n            \n            const exported = await crypto.subtle.exportKey('spki', publicKey);\n            const keyData = Array.from(new Uint8Array(exported));\n            \n            await EnhancedSecureCryptoUtils.validateKeyStructure(keyData, keyType);\n            \n            // Create signed key package\n            const keyPackage = {\n                keyType,\n                keyData,\n                timestamp: Date.now(),\n                version: '4.0'\n            };\n            \n            // Sign the key package\n            const packageString = JSON.stringify(keyPackage);\n            const signature = await EnhancedSecureCryptoUtils.signData(signingKey, packageString);\n            \n            const signedPackage = {\n                ...keyPackage,\n                signature\n            };\n            \n            // Removed public key export with signature info logging\n            \n            return signedPackage;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Public key export failed', {\n                error: error.message,\n                keyType\n            });\n            throw new Error(`Failed to export ${keyType} key: ${error.message}`);\n        }\n    }\n\n    // Import and verify signed public key\n    static async importSignedPublicKey(signedPackage, verifyingKey, expectedKeyType = 'ECDH') {\n        try {\n            // Debug logs removed\n            \n            // Validate package structure\n            if (!signedPackage || typeof signedPackage !== 'object') {\n                throw new Error('Invalid signed package format');\n            }\n            \n            const { keyType, keyData, timestamp, version, signature } = signedPackage;\n            \n            if (!keyType || !keyData || !timestamp || !signature) {\n                throw new Error('Missing required fields in signed package');\n            }\n            \n            if (!EnhancedSecureCryptoUtils.constantTimeCompare(keyType, expectedKeyType)) {\n                throw new Error(`Key type mismatch: expected ${expectedKeyType}, got ${keyType}`);\n            }\n            \n            // Check timestamp (reject keys older than 1 hour)\n            const keyAge = Date.now() - timestamp;\n            if (keyAge > 3600000) {\n                throw new Error('Signed key package is too old');\n            }\n            \n            await EnhancedSecureCryptoUtils.validateKeyStructure(keyData, keyType);\n            \n            // Verify signature\n            const packageCopy = { keyType, keyData, timestamp, version };\n            const packageString = JSON.stringify(packageCopy);\n            // Debug logs removed\n            const isValidSignature = await EnhancedSecureCryptoUtils.verifySignature(verifyingKey, signature, packageString);\n            // Debug logs removed\n            \n            if (!isValidSignature) {\n                throw new Error('Invalid signature on key package - possible MITM attack');\n            }\n            \n            // Import the key with fallback support\n            const keyBytes = new Uint8Array(keyData);\n            \n            // Try P-384 first\n            try {\n                const algorithm = keyType === 'ECDH' ?\n                    { name: 'ECDH', namedCurve: 'P-384' }\n                    : { name: 'ECDSA', namedCurve: 'P-384' };\n                \n                const keyUsages = keyType === 'ECDH' ? [] : ['verify'];\n                \n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    algorithm,\n                    false, // Non-extractable\n                    keyUsages\n                );\n                \n            // Removed public key import info logging\n                \n                return publicKey;\n            } catch (p384Error) {\n                // Fallback to P-256\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'Elliptic curve P-384 import failed, switching curve', { error: p384Error.message });\n                \n                const algorithm = keyType === 'ECDH' ?\n                    { name: 'ECDH', namedCurve: 'P-256' }\n                    : { name: 'ECDSA', namedCurve: 'P-256' };\n                \n                const keyUsages = keyType === 'ECDH' ? [] : ['verify'];\n                \n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    algorithm,\n                    false, // Non-extractable\n                    keyUsages\n                );\n                \n                // Removed public key import info logging\n                \n                return publicKey;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Signed public key import failed', {\n                error: error.message,\n                expectedKeyType\n            });\n            throw new Error(`Failed to import the signed key: ${error.message}`);\n        }\n    }\n\n    // Legacy export for backward compatibility\n    static async exportPublicKey(publicKey) {\n        try {\n            const exported = await crypto.subtle.exportKey('spki', publicKey);\n            const keyData = Array.from(new Uint8Array(exported));\n            \n            await EnhancedSecureCryptoUtils.validateKeyStructure(keyData, 'ECDH');\n            \n            // Removed legacy public key export info logging\n            return keyData;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Legacy public key export failed', { error: error.message });\n            throw new Error('Failed to export the public key');\n        }\n    }\n\n    // Legacy import for backward compatibility with fallback\n    static async importPublicKey(keyData) {\n        try {\n            await EnhancedSecureCryptoUtils.validateKeyStructure(keyData, 'ECDH');\n            \n            const keyBytes = new Uint8Array(keyData);\n            \n            // Try P-384 first\n            try {\n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    {\n                        name: 'ECDH',\n                        namedCurve: 'P-384'\n                    },\n                    false, // Non-extractable\n                    []\n                );\n                \n                // Removed legacy public key import info logging\n                return publicKey;\n            } catch (p384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'P-384 import failed, trying P-256', { error: p384Error.message });\n                \n                // Fallback to P-256\n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    {\n                        name: 'ECDH',\n                        namedCurve: 'P-256'\n                    },\n                    false, // Non-extractable\n                    []\n                );\n                \n                // Removed legacy public key import info logging\n                return publicKey;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Legacy public key import failed', { error: error.message });\n            throw new Error('Failed to import the public key');\n        }\n    }\n\n\n    // Method to check if a key is trusted\n    static isKeyTrusted(keyOrFingerprint) {\n    if (keyOrFingerprint instanceof CryptoKey) {\n        const meta = EnhancedSecureCryptoUtils._keyMetadata.get(keyOrFingerprint);\n        return meta ? meta.trusted === true : false;\n        } else if (keyOrFingerprint && keyOrFingerprint._securityMetadata) {\n            // Check by key metadata\n            return keyOrFingerprint._securityMetadata.trusted === true;\n        }\n\n        return false;\n    }\n\n    static async importPublicKeyFromSignedPackage(signedPackage, verifyingKey = null, options = {}) {\n        try {\n            if (!signedPackage || !signedPackage.keyData || !signedPackage.signature) {\n                throw new Error('Invalid signed key package format');\n            }\n\n            // Validate all required fields are present\n            const requiredFields = ['keyData', 'signature', 'keyType', 'timestamp', 'version'];\n            const missingFields = requiredFields.filter(field => !signedPackage[field]);\n\n            if (missingFields.length > 0) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Missing required fields in signed package', {\n                    missingFields: missingFields,\n                    availableFields: Object.keys(signedPackage)\n                });\n                throw new Error(`Required fields are missing in the signed package: ${missingFields.join(', ')}`);\n            }\n\n            // SECURITY ENHANCEMENT: MANDATORY signature verification for signed packages\n            if (!verifyingKey) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'SECURITY VIOLATION: Signed package received without verifying key', {\n                    keyType: signedPackage.keyType,\n                    keySize: signedPackage.keyData.length,\n                    timestamp: signedPackage.timestamp,\n                    version: signedPackage.version,\n                    securityRisk: 'HIGH - Potential MITM attack vector'\n                });\n\n                // REJECT the signed package if no verifying key provided\n                throw new Error('CRITICAL SECURITY ERROR: Signed key package received without a verification key. ' +\n                                'This may indicate a possible MITM attack attempt. Import rejected for security reasons.');\n            }\n\n            // \u041E\u0411\u041D\u041E\u0412\u041B\u0415\u041D\u041E: \u0418\u0441\u043F\u043E\u043B\u044C\u0437\u0443\u0435\u043C \u0443\u043B\u0443\u0447\u0448\u0435\u043D\u043D\u0443\u044E \u0432\u0430\u043B\u0438\u0434\u0430\u0446\u0438\u044E\n            await EnhancedSecureCryptoUtils.validateKeyStructure(signedPackage.keyData, signedPackage.keyType || 'ECDH');\n\n            // MANDATORY signature verification when verifyingKey is provided\n            const packageCopy = { ...signedPackage };\n            delete packageCopy.signature;\n            const packageString = JSON.stringify(packageCopy);\n            const isValidSignature = await EnhancedSecureCryptoUtils.verifySignature(verifyingKey, signedPackage.signature, packageString);\n\n            if (!isValidSignature) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'SECURITY BREACH: Invalid signature detected - MITM attack prevented', {\n                    keyType: signedPackage.keyType,\n                    keySize: signedPackage.keyData.length,\n                    timestamp: signedPackage.timestamp,\n                    version: signedPackage.version,\n                    attackPrevented: true\n                });\n                throw new Error('CRITICAL SECURITY ERROR: Invalid key signature detected. ' +\n                                'This indicates a possible MITM attack attempt. Key import rejected.');\n            }\n\n            // Additional MITM protection: Check for key reuse and suspicious patterns\n            const keyFingerprint = await EnhancedSecureCryptoUtils.calculateKeyFingerprint(signedPackage.keyData);\n\n            // Log successful verification with security details\n            // Removed signature verification pass details to avoid key-related logging\n\n            // Import the public key with fallback\n            const keyBytes = new Uint8Array(signedPackage.keyData);\n            const keyType = signedPackage.keyType || 'ECDH';\n\n            // Try P-384 first\n            try {\n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    {\n                        name: keyType,\n                        namedCurve: 'P-384'\n                    },\n                    false, // Non-extractable\n                    keyType === 'ECDSA' ? ['verify'] : []\n                );\n\n                // Use WeakMap to store metadata\n                EnhancedSecureCryptoUtils._keyMetadata.set(publicKey, {\n                    trusted: true,\n                    verificationStatus: 'VERIFIED_SECURE',\n                    verificationTimestamp: Date.now()\n                });\n\n                return publicKey;\n            } catch (p384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'P-384 import failed, trying P-256', { error: p384Error.message });\n\n                // Fallback to P-256\n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    {\n                        name: keyType,\n                        namedCurve: 'P-256'\n                    },\n                    false, // Non-extractable\n                    keyType === 'ECDSA' ? ['verify'] : []\n                );\n\n                // Use WeakMap to store metadata\n                EnhancedSecureCryptoUtils._keyMetadata.set(publicKey, {\n                    trusted: true,\n                    verificationStatus: 'VERIFIED_SECURE',\n                    verificationTimestamp: Date.now()\n                });\n\n                return publicKey;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Signed package key import failed', {\n                error: error.message,\n                securityImplications: 'Potential security breach prevented'\n            });\n            throw new Error(`Failed to import the public key from the signed package: ${error.message}`);\n        }\n    }\n\n    // Enhanced key derivation with metadata protection and 64-byte salt\n    static async deriveSharedKeys(privateKey, publicKey, salt) {\n        try {\n            // Removed detailed key derivation logging\n            \n            // Validate input parameters are CryptoKey instances\n            if (!(privateKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Private key is not a CryptoKey', {\n                    privateKeyType: typeof privateKey,\n                    privateKeyAlgorithm: privateKey?.algorithm?.name\n                });\n                throw new Error('The private key is not a valid CryptoKey.');\n            }\n            \n            if (!(publicKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Public key is not a CryptoKey', {\n                    publicKeyType: typeof publicKey,\n                    publicKeyAlgorithm: publicKey?.algorithm?.name\n                });\n                throw new Error('The public key is not a valid CryptoKey.');\n            }\n            \n            // Validate salt size (should be 64 bytes for enhanced security)\n            if (!salt || salt.length !== 64) {\n                throw new Error('Salt must be exactly 64 bytes for enhanced security');\n            }\n            \n            const saltBytes = new Uint8Array(salt);\n            const encoder = new TextEncoder();\n            \n            // Step 1: Derive the raw ECDH shared secret as HKDF input material.\n            //\n            // This used to derive an EXTRACTABLE AES-GCM key and then exportKey()\n            // it, which put the shared secret into an ArrayBuffer that was never\n            // cleared \u2014 it simply fell out of scope and sat in the JS heap until\n            // GC, readable by anything with access to the page (a compromised\n            // extension, a heap snapshot in a crash report). Every session key is\n            // derived from those 32 bytes with public salt and hard-coded info\n            // strings, so recovering them recovers the whole session.\n            //\n            // deriveBits gives the same bytes without the detour through an\n            // extractable CryptoKey, and hands back a buffer we own and can wipe.\n            // WIRE COMPATIBILITY: for ECDH, deriveBits(n) returns the leftmost n\n            // bits of the shared X coordinate, which is exactly what deriveKey to\n            // AES-GCM-256 used \u2014 so 256 here reproduces the previous bytes exactly\n            // and a 5.6.1 client still interoperates with 5.6.0. Do not \"improve\"\n            // this to 384 without a protocol version bump.\n            let rawSharedSecret;\n            let sharedSecretBits = null;\n            try {\n                sharedSecretBits = await crypto.subtle.deriveBits(\n                    {\n                        name: 'ECDH',\n                        public: publicKey\n                    },\n                    privateKey,\n                    256\n                );\n\n                rawSharedSecret = await crypto.subtle.importKey(\n                    'raw',\n                    sharedSecretBits,\n                    {\n                        name: 'HKDF',\n                        hash: 'SHA-256'\n                    },\n                    false,\n                    // deriveBits is required for the fingerprint material below;\n                    // without it that call fails with an InvalidAccessError.\n                    ['deriveKey', 'deriveBits']\n                );\n            } catch (error) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'ECDH derivation failed', {\n                    error: error.message\n                });\n                throw error;\n            } finally {\n                // importKey copies the material, so the source buffer is dead\n                // weight from here on \u2014 overwrite it rather than leaving the\n                // shared secret lying in the heap.\n                if (sharedSecretBits) {\n                    EnhancedSecureCryptoUtils.zeroizeBuffer(sharedSecretBits);\n                    sharedSecretBits = null;\n                }\n            }\n\n            // Step 2: Use HKDF to derive specific keys directly\n            // Removed detailed key derivation logging\n\n            // Step 3: Derive specific keys using HKDF with unique info parameters\n            // Each key uses unique info parameter for proper separation\n            \n            // Derive message encryption key (messageKey)\n            let messageKey;\n            messageKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('message-encryption-v4')\n                },\n                rawSharedSecret,\n                {\n                    name: 'AES-GCM',\n                    length: 256\n                },\n                false, // Non-extractable for enhanced security\n                ['encrypt', 'decrypt']\n            );\n\n            // Derive MAC key for message authentication\n            let macKey;\n            macKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('message-authentication-v4')\n                },\n                rawSharedSecret,\n                {\n                    name: 'HMAC',\n                    hash: 'SHA-256'\n                },\n                false, // Non-extractable\n                ['sign', 'verify']\n            );\n\n            // Derive Perfect Forward Secrecy key (pfsKey)\n            let pfsKey;\n            pfsKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('perfect-forward-secrecy-v4')\n                },\n                rawSharedSecret,\n                {\n                    name: 'AES-GCM',\n                    length: 256\n                },\n                false, // Non-extractable\n                ['encrypt', 'decrypt']\n            );\n\n            // Derive separate metadata encryption key\n            let metadataKey;\n            metadataKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('metadata-protection-v4')\n                },\n                rawSharedSecret,\n                {\n                    name: 'AES-GCM',\n                    length: 256\n                },\n                false, // Non-extractable\n                ['encrypt', 'decrypt']\n            );\n\n            // Root key for the Double Ratchet, derived here rather than handing the\n            // raw ECDH secret to the caller: the secret is wiped before this\n            // function returns (see the finally above), and only this 32-byte\n            // branch of the KDF tree ever leaves. Its own info string keeps it\n            // domain-separated from the message, MAC and metadata keys, so\n            // learning a session key tells an attacker nothing about the ratchet.\n            const ratchetRootBits = await crypto.subtle.deriveBits(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('double-ratchet-root-v1')\n                },\n                rawSharedSecret,\n                256\n            );\n            const ratchetRoot = new Uint8Array(ratchetRootBits);\n\n            // Fingerprint material. Previously this derived a second EXTRACTABLE\n            // AES key purely so it could be exported \u2014 leaving another copy of\n            // key-derived material in the heap with nothing wiping it. HKDF can\n            // hand back raw bits directly; same salt, same info, same 256 bits, so\n            // the fingerprint (and therefore the SAS built on it) is unchanged.\n            let fingerprintBits = null;\n            let fingerprint;\n            try {\n                fingerprintBits = await crypto.subtle.deriveBits(\n                    {\n                        name: 'HKDF',\n                        hash: 'SHA-256',\n                        salt: saltBytes,\n                        info: encoder.encode('fingerprint-generation-v4')\n                    },\n                    rawSharedSecret,\n                    256\n                );\n                // A Uint8Array view, not Array.from(): the array copy was a third\n                // copy of key-derived bytes in the heap that nothing cleared.\n                fingerprint = await EnhancedSecureCryptoUtils.generateKeyFingerprint(\n                    new Uint8Array(fingerprintBits)\n                );\n            } finally {\n                if (fingerprintBits) {\n                    EnhancedSecureCryptoUtils.zeroizeBuffer(fingerprintBits);\n                    fingerprintBits = null;\n                }\n            }\n\n            // Validate that all derived keys are CryptoKey instances\n            if (!(messageKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Derived message key is not a CryptoKey', {\n                    messageKeyType: typeof messageKey,\n                    messageKeyAlgorithm: messageKey?.algorithm?.name\n                });\n                throw new Error('The derived message key is not a valid CryptoKey.');\n            }\n            \n            if (!(macKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Derived MAC key is not a CryptoKey', {\n                    macKeyType: typeof macKey,\n                    macKeyAlgorithm: macKey?.algorithm?.name\n                });\n                throw new Error('The derived MAC key is not a valid CryptoKey.');\n            }\n            \n            if (!(pfsKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Derived PFS key is not a CryptoKey', {\n                    pfsKeyType: typeof pfsKey,\n                    pfsKeyAlgorithm: pfsKey?.algorithm?.name\n                });\n                throw new Error('The derived PFS key is not a valid CryptoKey.');\n            }\n            \n            if (!(metadataKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Derived metadata key is not a CryptoKey', {\n                    metadataKeyType: typeof metadataKey,\n                    metadataKeyAlgorithm: metadataKey?.algorithm?.name\n                });\n                throw new Error('The derived metadata key is not a valid CryptoKey.');\n            }\n\n            // Removed detailed key derivation success logging\n\n            return {\n                messageKey,      // Renamed from encryptionKey for clarity\n                macKey,\n                pfsKey,         // Added Perfect Forward Secrecy key\n                metadataKey,\n                // Raw bytes on purpose: a ratchet has to chain KDFs itself, which\n                // WebCrypto cannot do behind a non-extractable handle. The caller\n                // must hand this to DoubleRatchet.init() and zeroize it.\n                ratchetRoot,\n                fingerprint,\n                timestamp: Date.now(),\n                version: '4.0'\n            };\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Enhanced key derivation failed', { \n                error: error.message,\n                errorStack: error.stack,\n                privateKeyType: typeof privateKey,\n                publicKeyType: typeof publicKey,\n                saltLength: salt?.length,\n                privateKeyAlgorithm: privateKey?.algorithm?.name,\n                publicKeyAlgorithm: publicKey?.algorithm?.name\n            });\n            throw new Error(`Failed to create shared encryption keys: ${error.message}`);\n        }\n    }\n\n    static async generateKeyFingerprint(keyData) {\n        const keyBuffer = new Uint8Array(keyData);\n        const hashBuffer = await crypto.subtle.digest('SHA-384', keyBuffer);\n        const hashArray = Array.from(new Uint8Array(hashBuffer));\n        return hashArray.slice(0, 12).map(b => b.toString(16).padStart(2, '0')).join(':');\n    }\n\n    // Generate mutual authentication challenge\n    static generateMutualAuthChallenge() {\n        const challenge = crypto.getRandomValues(new Uint8Array(48)); // Increased to 48 bytes\n        const timestamp = Date.now();\n        const nonce = crypto.getRandomValues(new Uint8Array(16));\n        \n        return {\n            challenge: Array.from(challenge),\n            timestamp,\n            nonce: Array.from(nonce),\n            version: '4.0'\n        };\n    }\n\n    // Create cryptographic proof for mutual authentication\n    static async createAuthProof(challenge, privateKey, publicKey) {\n        try {\n            if (!challenge || !challenge.challenge || !challenge.timestamp || !challenge.nonce) {\n                throw new Error('Invalid challenge structure');\n            }\n            \n            // Check challenge age (max 2 minutes)\n            const challengeAge = Date.now() - challenge.timestamp;\n            if (challengeAge > 120000) {\n                throw new Error('Challenge expired');\n            }\n            \n            // Create proof data\n            const proofData = {\n                challenge: challenge.challenge,\n                timestamp: challenge.timestamp,\n                nonce: challenge.nonce,\n                responseTimestamp: Date.now(),\n                publicKeyHash: await EnhancedSecureCryptoUtils.hashPublicKey(publicKey)\n            };\n            \n            // Sign the proof\n            const proofString = JSON.stringify(proofData);\n            const signature = await EnhancedSecureCryptoUtils.signData(privateKey, proofString);\n            \n            const proof = {\n                ...proofData,\n                signature,\n                version: '4.0'\n            };\n            \n            EnhancedSecureCryptoUtils.secureLog.log('info', 'Authentication proof created', {\n                challengeAge: Math.round(challengeAge / 1000) + 's'\n            });\n            \n            return proof;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Authentication proof creation failed', { error: error.message });\n            throw new Error(`Failed to create cryptographic proof: ${error.message}`);\n        }\n    }\n\n    // Verify mutual authentication proof\n    static async verifyAuthProof(proof, challenge, publicKey) {\n        try {\n            await new Promise(resolve => setTimeout(resolve, Math.floor(Math.random() * 20) + 5));\n            // Assert the public key is valid and has the correct usage\n            EnhancedSecureCryptoUtils.assertCryptoKey(publicKey, 'ECDSA', ['verify']);\n\n            if (!proof || !challenge || !publicKey) {\n                throw new Error('Missing required parameters for proof verification');\n            }\n\n            // Validate proof structure\n            const requiredFields = ['challenge', 'timestamp', 'nonce', 'responseTimestamp', 'publicKeyHash', 'signature'];\n            for (const field of requiredFields) {\n                if (!proof[field]) {\n                    throw new Error(`Missing required field: ${field}`);\n                }\n            }\n\n            // Verify challenge matches\n            if (!EnhancedSecureCryptoUtils.constantTimeCompareArrays(proof.challenge, challenge.challenge) ||\n                proof.timestamp !== challenge.timestamp ||\n                !EnhancedSecureCryptoUtils.constantTimeCompareArrays(proof.nonce, challenge.nonce)) {\n                throw new Error('Challenge mismatch - possible replay attack');\n            }\n\n            // Check response time (max 30 minutes for better UX)\n            const responseAge = Date.now() - proof.responseTimestamp;\n            if (responseAge > 1800000) {\n                throw new Error('Proof response expired');\n            }\n\n            // Verify public key hash\n            const expectedHash = await EnhancedSecureCryptoUtils.hashPublicKey(publicKey);\n            if (!EnhancedSecureCryptoUtils.constantTimeCompare(proof.publicKeyHash, expectedHash)) {\n                throw new Error('Public key hash mismatch');\n            }\n\n            // Verify signature\n            const proofCopy = { ...proof };\n            delete proofCopy.signature;\n            const proofString = JSON.stringify(proofCopy);\n            const isValidSignature = await EnhancedSecureCryptoUtils.verifySignature(publicKey, proof.signature, proofString);\n\n            if (!isValidSignature) {\n                throw new Error('Invalid proof signature');\n            }\n\n            EnhancedSecureCryptoUtils.secureLog.log('info', 'Authentication proof verified successfully', {\n                responseAge: Math.round(responseAge / 1000) + 's'\n            });\n\n            return true;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Authentication proof verification failed', { error: error.message });\n            throw new Error(`Failed to verify cryptographic proof: ${error.message}`);\n        }\n    }\n\n    // Hash public key for verification\n    static async hashPublicKey(publicKey) {\n        try {\n            const exported = await crypto.subtle.exportKey('spki', publicKey);\n            const hash = await crypto.subtle.digest('SHA-384', exported);\n            const hashArray = Array.from(new Uint8Array(hash));\n            return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Public key hashing failed', { error: error.message });\n            throw new Error('Failed to create hash of the public key');\n        }\n    }\n\n    // Legacy authentication challenge for backward compatibility\n    static generateAuthChallenge() {\n        const challenge = crypto.getRandomValues(new Uint8Array(32));\n        return Array.from(challenge);\n    }\n\n    // Generate verification code for out-of-band authentication\n    static generateVerificationCode() {\n        const chars = '0123456789ABCDEF';\n        const charCount = chars.length;\n        let result = '';\n        \n        // Use rejection sampling to avoid bias\n        for (let i = 0; i < 6; i++) {\n            let randomByte;\n            do {\n                randomByte = crypto.getRandomValues(new Uint8Array(1))[0];\n            } while (randomByte >= 256 - (256 % charCount)); // Reject biased values\n            \n            result += chars[randomByte % charCount];\n        }\n        \n        return result.match(/.{1,2}/g).join('-');\n    }\n\n    // Enhanced message encryption with metadata protection and sequence numbers\n    static async encryptMessage(message, encryptionKey, macKey, metadataKey, messageId, sequenceNumber = 0) {\n        try {\n            if (!message || typeof message !== 'string') {\n                throw new Error('Invalid message format');\n            }\n\n            EnhancedSecureCryptoUtils.assertCryptoKey(encryptionKey, 'AES-GCM', ['encrypt']);\n            EnhancedSecureCryptoUtils.assertCryptoKey(macKey, 'HMAC', ['sign']);\n            EnhancedSecureCryptoUtils.assertCryptoKey(metadataKey, 'AES-GCM', ['encrypt']);\n\n            const encoder = new TextEncoder();\n            const messageData = encoder.encode(message);\n            const messageIv = crypto.getRandomValues(new Uint8Array(12));\n            const metadataIv = crypto.getRandomValues(new Uint8Array(12));\n            const timestamp = Date.now();\n\n            const paddingSize = 16 - (messageData.length % 16);\n            const paddedMessage = new Uint8Array(messageData.length + paddingSize);\n            paddedMessage.set(messageData);\n            const padding = crypto.getRandomValues(new Uint8Array(paddingSize));\n            paddedMessage.set(padding, messageData.length);\n\n            const encryptedMessage = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: messageIv },\n                encryptionKey,\n                paddedMessage\n            );\n\n            const metadata = {\n                id: messageId,\n                timestamp: timestamp,\n                sequenceNumber: sequenceNumber,\n                originalLength: messageData.length,\n                version: '4.0'\n            };\n\n            const metadataStr = JSON.stringify(EnhancedSecureCryptoUtils.sortObjectKeys(metadata));\n            const encryptedMetadata = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: metadataIv },\n                metadataKey,\n                encoder.encode(metadataStr)\n            );\n\n            const payload = {\n                messageIv: Array.from(messageIv),\n                messageData: Array.from(new Uint8Array(encryptedMessage)),\n                metadataIv: Array.from(metadataIv),\n                metadataData: Array.from(new Uint8Array(encryptedMetadata)),\n                version: '4.0'\n            };\n\n            const sortedPayload = EnhancedSecureCryptoUtils.sortObjectKeys(payload);\n            const payloadStr = JSON.stringify(sortedPayload);\n\n            const mac = await crypto.subtle.sign(\n                'HMAC',\n                macKey,\n                encoder.encode(payloadStr)\n            );\n\n            payload.mac = Array.from(new Uint8Array(mac));\n\n            // Logging removed to avoid noisy console output\n\n            return payload;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Message encryption failed', {\n                error: error.message,\n                messageId\n            });\n            throw new Error(`Failed to encrypt the message: ${error.message}`);\n        }\n    }\n\n    // Enhanced message decryption with metadata protection and sequence validation\n    static async decryptMessage(encryptedPayload, encryptionKey, macKey, metadataKey, expectedSequenceNumber = null) {\n        try {\n            EnhancedSecureCryptoUtils.assertCryptoKey(encryptionKey, 'AES-GCM', ['decrypt']);\n            EnhancedSecureCryptoUtils.assertCryptoKey(macKey, 'HMAC', ['verify']);\n            EnhancedSecureCryptoUtils.assertCryptoKey(metadataKey, 'AES-GCM', ['decrypt']);\n\n            const requiredFields = ['messageIv', 'messageData', 'metadataIv', 'metadataData', 'mac', 'version'];\n            for (const field of requiredFields) {\n                if (!encryptedPayload[field]) {\n                    throw new Error(`Missing required field: ${field}`);\n                }\n            }\n\n            const payloadCopy = { ...encryptedPayload };\n            delete payloadCopy.mac;\n            const sortedPayloadCopy = EnhancedSecureCryptoUtils.sortObjectKeys(payloadCopy);\n            const payloadStr = JSON.stringify(sortedPayloadCopy);\n\n            const macValid = await crypto.subtle.verify(\n                'HMAC',\n                macKey,\n                new Uint8Array(encryptedPayload.mac),\n                new TextEncoder().encode(payloadStr)\n            );\n\n            if (!macValid) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'MAC verification failed', {\n                    payloadFields: Object.keys(encryptedPayload),\n                    macLength: encryptedPayload.mac?.length\n                });\n                throw new Error('Message authentication failed - possible tampering');\n            }\n\n            const metadataIv = new Uint8Array(encryptedPayload.metadataIv);\n            const metadataData = new Uint8Array(encryptedPayload.metadataData);\n\n            const decryptedMetadataBuffer = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv: metadataIv },\n                metadataKey,\n                metadataData\n            );\n\n            const metadataStr = new TextDecoder().decode(decryptedMetadataBuffer);\n            const metadata = JSON.parse(metadataStr);\n\n            if (!metadata.id || !metadata.timestamp || metadata.sequenceNumber === undefined || !metadata.originalLength) {\n                throw new Error('Invalid metadata structure');\n            }\n\n            const messageAge = Date.now() - metadata.timestamp;\n            if (messageAge > 1800000) { // 30 minutes for better UX\n                throw new Error('Message expired (older than 30 minutes)');\n            }\n\n            if (expectedSequenceNumber !== null) {\n                // A sequence number below what we expect means the frame is a\n                // replay (or badly out of order on a channel that is ordered and\n                // reliable). Downgrading that to a warning and decrypting anyway\n                // defeats the purpose of tracking sequence numbers at all.\n                if (metadata.sequenceNumber < expectedSequenceNumber) {\n                    EnhancedSecureCryptoUtils.secureLog.log('error', 'Rejected message with stale sequence number - possible replay', {\n                        expected: expectedSequenceNumber,\n                        received: metadata.sequenceNumber,\n                        messageId: metadata.id\n                    });\n                    throw new Error(`Stale sequence number: expected at least ${expectedSequenceNumber}, got ${metadata.sequenceNumber}`);\n                } else if (metadata.sequenceNumber > expectedSequenceNumber + 10) {\n                    throw new Error(`Sequence number gap too large: expected around ${expectedSequenceNumber}, got ${metadata.sequenceNumber}`);\n                }\n            }\n\n            const messageIv = new Uint8Array(encryptedPayload.messageIv);\n            const messageData = new Uint8Array(encryptedPayload.messageData);\n\n            const decryptedMessageBuffer = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv: messageIv },\n                encryptionKey,\n                messageData\n            );\n\n            const paddedMessage = new Uint8Array(decryptedMessageBuffer);\n            const originalMessage = paddedMessage.slice(0, metadata.originalLength);\n\n            const decoder = new TextDecoder();\n            const message = decoder.decode(originalMessage);\n\n            EnhancedSecureCryptoUtils.secureLog.log('info', 'Message decrypted successfully', {\n                messageId: metadata.id,\n                sequenceNumber: metadata.sequenceNumber,\n                messageAge: Math.round(messageAge / 1000) + 's'\n            });\n\n            return {\n                message: message,\n                messageId: metadata.id,\n                timestamp: metadata.timestamp,\n                sequenceNumber: metadata.sequenceNumber\n            };\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Message decryption failed', { error: error.message });\n            throw new Error(`Failed to decrypt the message: ${error.message}`);\n        }\n    }\n\n    static _getMessageSanitizer() {\n        if (EnhancedSecureCryptoUtils._messageSanitizer) {\n            return EnhancedSecureCryptoUtils._messageSanitizer;\n        }\n\n        if (typeof window === 'undefined' || !window?.document) {\n            throw new Error('DOMPurify requires a browser-like window for message sanitization');\n        }\n\n        EnhancedSecureCryptoUtils._messageSanitizer = createDOMPurify(window);\n        return EnhancedSecureCryptoUtils._messageSanitizer;\n    }\n\n    // Centralized chat-message sanitization. Messages are rendered as plain text,\n    // so the safest compatible output is text-only content with no markup surface.\n    static sanitizeMessage(message) {\n        if (typeof message !== 'string') {\n            throw new Error('Message must be a string');\n        }\n\n        const sanitized = EnhancedSecureCryptoUtils._getMessageSanitizer().sanitize(message, {\n            ALLOWED_TAGS: [],\n            ALLOWED_ATTR: [],\n            ALLOW_UNKNOWN_PROTOCOLS: false,\n            FORBID_TAGS: ['script', 'style', 'svg', 'math', 'template'],\n            FORBID_ATTR: ['style'],\n            KEEP_CONTENT: true,\n            RETURN_TRUSTED_TYPE: false,\n            USE_PROFILES: {\n                html: false,\n                svg: false,\n                svgFilters: false,\n                mathMl: false\n            }\n        });\n\n        return String(sanitized).trim().substring(0, 2000);\n    }\n\n    // Generate cryptographically secure salt (64 bytes for enhanced security)\n    static generateSalt() {\n        return Array.from(crypto.getRandomValues(new Uint8Array(64)));\n    }\n\n    // Calculate key fingerprint for MITM protection\n    static async calculateKeyFingerprint(keyData) {\n        try {\n            const encoder = new TextEncoder();\n            const keyBytes = new Uint8Array(keyData);\n            \n            // Create a hash of the key data for fingerprinting\n            const hashBuffer = await crypto.subtle.digest('SHA-256', keyBytes);\n            const hashArray = Array.from(new Uint8Array(hashBuffer));\n            \n            // Convert to hexadecimal string\n            const fingerprint = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n            \n            // Removed key fingerprint logging\n            \n            return fingerprint;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Key fingerprint calculation failed', { error: error.message });\n            throw new Error('Failed to compute the key fingerprint');\n        }\n    }\n\n    static constantTimeCompare(a, b) {\n        const strA = typeof a === 'string' ? a : JSON.stringify(a);\n        const strB = typeof b === 'string' ? b : JSON.stringify(b);\n        \n        if (strA.length !== strB.length) {\n            let dummy = 0;\n            for (let i = 0; i < Math.max(strA.length, strB.length); i++) {\n                dummy |= (strA.charCodeAt(i % strA.length) || 0) ^ (strB.charCodeAt(i % strB.length) || 0);\n            }\n            return false;\n        }\n        \n        let result = 0;\n        for (let i = 0; i < strA.length; i++) {\n            result |= strA.charCodeAt(i) ^ strB.charCodeAt(i);\n        }\n        \n        return result === 0;\n    }\n\n    static constantTimeCompareArrays(arr1, arr2) {\n        if (!Array.isArray(arr1) || !Array.isArray(arr2)) {\n            return false;\n        }\n        \n        if (arr1.length !== arr2.length) {\n            let dummy = 0;\n            const maxLen = Math.max(arr1.length, arr2.length);\n            for (let i = 0; i < maxLen; i++) {\n                dummy |= (arr1[i % arr1.length] || 0) ^ (arr2[i % arr2.length] || 0);\n            }\n            return false;\n        }\n        \n        let result = 0;\n        for (let i = 0; i < arr1.length; i++) {\n            result |= arr1[i] ^ arr2[i];\n        }\n        \n        return result === 0;\n    }\n    \n    /**\n     * CRITICAL SECURITY: Encrypt data with AAD (Additional Authenticated Data)\n     * This method provides authenticated encryption with additional data binding\n     */\n    static async encryptDataWithAAD(data, key, aad) {\n        try {\n            const dataString = typeof data === 'string' ? data : JSON.stringify(data);\n            const encoder = new TextEncoder();\n            const dataBuffer = encoder.encode(dataString);\n            const aadBuffer = encoder.encode(aad);\n\n            // Generate random IV\n            const iv = crypto.getRandomValues(new Uint8Array(12));\n\n            // Encrypt with AAD\n            const encrypted = await crypto.subtle.encrypt(\n                { \n                    name: 'AES-GCM', \n                    iv: iv,\n                    additionalData: aadBuffer\n                },\n                key,\n                dataBuffer\n            );\n\n            // Package encrypted data\n            const encryptedPackage = {\n                version: '1.0',\n                iv: Array.from(iv),\n                data: Array.from(new Uint8Array(encrypted)),\n                aad: aad,\n                timestamp: Date.now()\n            };\n\n            const packageString = JSON.stringify(encryptedPackage);\n            const packageBuffer = encoder.encode(packageString);\n            \n            return EnhancedSecureCryptoUtils.arrayBufferToBase64(packageBuffer);\n        } catch (error) {\n            throw new Error(`AAD encryption failed: ${error.message}`);\n        }\n    }\n\n    /**\n     * CRITICAL SECURITY: Decrypt data with AAD validation\n     * This method provides authenticated decryption with additional data validation\n     */\n    static async decryptDataWithAAD(encryptedData, key, expectedAad) {\n        try {\n            const packageBuffer = EnhancedSecureCryptoUtils.base64ToArrayBuffer(encryptedData);\n            const packageString = new TextDecoder().decode(packageBuffer);\n            const encryptedPackage = JSON.parse(packageString);\n\n            if (!encryptedPackage.version || !encryptedPackage.iv || !encryptedPackage.data || !encryptedPackage.aad) {\n                throw new Error('Invalid encrypted data format');\n            }\n\n            // Validate AAD matches expected\n            if (encryptedPackage.aad !== expectedAad) {\n                throw new Error('AAD mismatch - possible tampering or replay attack');\n            }\n\n            const iv = new Uint8Array(encryptedPackage.iv);\n            const encrypted = new Uint8Array(encryptedPackage.data);\n            const aadBuffer = new TextEncoder().encode(encryptedPackage.aad);\n\n            // Decrypt with AAD validation\n            const decrypted = await crypto.subtle.decrypt(\n                { \n                    name: 'AES-GCM', \n                    iv: iv,\n                    additionalData: aadBuffer\n                },\n                key,\n                encrypted\n            );\n\n            const decryptedString = new TextDecoder().decode(decrypted);\n\n            try {\n                return JSON.parse(decryptedString);\n            } catch {\n                return decryptedString;\n            }\n        } catch (error) {\n            throw new Error(`AAD decryption failed: ${error.message}`);\n        }\n    }\n\n    // Initialize secure logging system after class definition\n    static {\n        if (EnhancedSecureCryptoUtils.secureLog && typeof EnhancedSecureCryptoUtils.secureLog.init === 'function') {\n            EnhancedSecureCryptoUtils.secureLog.init();\n        }\n    }\n}\n\nexport { EnhancedSecureCryptoUtils };\n", "// Generated by scripts/build-i18n.js from locales/*.json \u2014 do not edit by hand.\n// Add or change strings in locales/<code>.json, then run `npm run build:i18n`.\n\nexport const DEFAULT_LOCALE = \"en\";\nexport const SUPPORTED_LOCALES = [\"en\",\"de\",\"fr\",\"es\",\"uk\",\"ru\",\"zh\",\"ko\",\"hi\",\"ar\",\"he\",\"fa\",\"ur\"];\nexport const LOCALE_META = {\n    \"en\": {\n        \"htmlLang\": \"en\",\n        \"nativeName\": \"English\",\n        \"abbr\": \"EN\",\n        \"dir\": \"ltr\",\n        \"path\": \"/\"\n    },\n    \"de\": {\n        \"htmlLang\": \"de\",\n        \"nativeName\": \"Deutsch\",\n        \"abbr\": \"DE\",\n        \"dir\": \"ltr\",\n        \"path\": \"/de/\"\n    },\n    \"fr\": {\n        \"htmlLang\": \"fr\",\n        \"nativeName\": \"Fran\u00E7ais\",\n        \"abbr\": \"FR\",\n        \"dir\": \"ltr\",\n        \"path\": \"/fr/\"\n    },\n    \"es\": {\n        \"htmlLang\": \"es\",\n        \"nativeName\": \"Espa\u00F1ol\",\n        \"abbr\": \"ES\",\n        \"dir\": \"ltr\",\n        \"path\": \"/es/\"\n    },\n    \"uk\": {\n        \"htmlLang\": \"uk\",\n        \"nativeName\": \"\u0423\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u0430\",\n        \"abbr\": \"UK\",\n        \"dir\": \"ltr\",\n        \"path\": \"/uk/\"\n    },\n    \"ru\": {\n        \"htmlLang\": \"ru\",\n        \"nativeName\": \"\u0420\u0443\u0441\u0441\u043A\u0438\u0439\",\n        \"abbr\": \"RU\",\n        \"dir\": \"ltr\",\n        \"path\": \"/ru/\"\n    },\n    \"zh\": {\n        \"htmlLang\": \"zh-Hans\",\n        \"nativeName\": \"\u7B80\u4F53\u4E2D\u6587\",\n        \"abbr\": \"ZH\",\n        \"dir\": \"ltr\",\n        \"path\": \"/zh/\"\n    },\n    \"ko\": {\n        \"htmlLang\": \"ko\",\n        \"nativeName\": \"\uD55C\uAD6D\uC5B4\",\n        \"abbr\": \"KO\",\n        \"dir\": \"ltr\",\n        \"path\": \"/ko/\"\n    },\n    \"hi\": {\n        \"htmlLang\": \"hi\",\n        \"nativeName\": \"\u0939\u093F\u0928\u094D\u0926\u0940\",\n        \"abbr\": \"HI\",\n        \"dir\": \"ltr\",\n        \"path\": \"/hi/\"\n    },\n    \"ar\": {\n        \"htmlLang\": \"ar\",\n        \"nativeName\": \"\u0627\u0644\u0639\u0631\u0628\u064A\u0629\",\n        \"abbr\": \"AR\",\n        \"dir\": \"rtl\",\n        \"path\": \"/ar/\"\n    },\n    \"he\": {\n        \"htmlLang\": \"he\",\n        \"nativeName\": \"\u05E2\u05D1\u05E8\u05D9\u05EA\",\n        \"abbr\": \"HE\",\n        \"dir\": \"rtl\",\n        \"path\": \"/he/\"\n    },\n    \"fa\": {\n        \"htmlLang\": \"fa\",\n        \"nativeName\": \"\u0641\u0627\u0631\u0633\u06CC\",\n        \"abbr\": \"FA\",\n        \"dir\": \"rtl\",\n        \"path\": \"/fa/\"\n    },\n    \"ur\": {\n        \"htmlLang\": \"ur\",\n        \"nativeName\": \"\u0627\u0631\u062F\u0648\",\n        \"abbr\": \"UR\",\n        \"dir\": \"rtl\",\n        \"path\": \"/ur/\"\n    }\n};\n\n// Strings a page may need for a locale it did not load. See CROSS_LOCALE_KEYS in\n// scripts/build-i18n.js for why this list is short on purpose.\nexport const CROSS_LOCALE_STRINGS = {\n    \"en\": {\n        \"language.suggest.text\": \"This page is also available in English.\",\n        \"language.suggest.cta\": \"Read in English\",\n        \"language.suggest.dismiss\": \"Dismiss\"\n    },\n    \"de\": {\n        \"language.suggest.text\": \"Diese Seite gibt es auch auf Deutsch.\",\n        \"language.suggest.cta\": \"Auf Deutsch lesen\",\n        \"language.suggest.dismiss\": \"Schlie\u00DFen\"\n    },\n    \"fr\": {\n        \"language.suggest.text\": \"Cette page est aussi disponible en fran\u00E7ais.\",\n        \"language.suggest.cta\": \"Lire en fran\u00E7ais\",\n        \"language.suggest.dismiss\": \"Fermer\"\n    },\n    \"es\": {\n        \"language.suggest.text\": \"Esta p\u00E1gina tambi\u00E9n est\u00E1 disponible en espa\u00F1ol.\",\n        \"language.suggest.cta\": \"Leer en espa\u00F1ol\",\n        \"language.suggest.dismiss\": \"Cerrar\"\n    },\n    \"uk\": {\n        \"language.suggest.text\": \"\u0426\u044F \u0441\u0442\u043E\u0440\u0456\u043D\u043A\u0430 \u0442\u0430\u043A\u043E\u0436 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E.\",\n        \"language.suggest.cta\": \"\u0427\u0438\u0442\u0430\u0442\u0438 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E\",\n        \"language.suggest.dismiss\": \"\u0417\u0430\u043A\u0440\u0438\u0442\u0438\"\n    },\n    \"ru\": {\n        \"language.suggest.text\": \"\u042D\u0442\u0430 \u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u0442\u0430\u043A\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043D\u0430 \u0440\u0443\u0441\u0441\u043A\u043E\u043C.\",\n        \"language.suggest.cta\": \"\u0427\u0438\u0442\u0430\u0442\u044C \u043F\u043E-\u0440\u0443\u0441\u0441\u043A\u0438\",\n        \"language.suggest.dismiss\": \"\u0417\u0430\u043A\u0440\u044B\u0442\u044C\"\n    },\n    \"zh\": {\n        \"language.suggest.text\": \"\u672C\u9875\u9762\u4E5F\u6709\u7B80\u4F53\u4E2D\u6587\u7248\u672C\u3002\",\n        \"language.suggest.cta\": \"\u9605\u8BFB\u7B80\u4F53\u4E2D\u6587\",\n        \"language.suggest.dismiss\": \"\u5173\u95ED\"\n    },\n    \"ko\": {\n        \"language.suggest.text\": \"\uC774 \uD398\uC774\uC9C0\uB294 \uD55C\uAD6D\uC5B4\uB85C\uB3C4 \uBCFC \uC218 \uC788\uC2B5\uB2C8\uB2E4.\",\n        \"language.suggest.cta\": \"\uD55C\uAD6D\uC5B4\uB85C \uBCF4\uAE30\",\n        \"language.suggest.dismiss\": \"\uB2EB\uAE30\"\n    },\n    \"hi\": {\n        \"language.suggest.text\": \"\u092F\u0939 \u092A\u0943\u0937\u094D\u0920 \u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092D\u0940 \u0909\u092A\u0932\u092C\u094D\u0927 \u0939\u0948\u0964\",\n        \"language.suggest.cta\": \"\u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092A\u0922\u093C\u0947\u0902\",\n        \"language.suggest.dismiss\": \"\u092C\u0902\u0926 \u0915\u0930\u0947\u0902\"\n    },\n    \"ar\": {\n        \"language.suggest.text\": \"\u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062D\u0629 \u0645\u062A\u0648\u0641\u0631\u0629 \u0623\u064A\u0636\u064B\u0627 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629.\",\n        \"language.suggest.cta\": \"\u0627\u0642\u0631\u0623 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629\",\n        \"language.suggest.dismiss\": \"\u0625\u063A\u0644\u0627\u0642\"\n    },\n    \"he\": {\n        \"language.suggest.text\": \"\u05D4\u05D3\u05E3 \u05D4\u05D6\u05D4 \u05D6\u05DE\u05D9\u05DF \u05D2\u05DD \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA.\",\n        \"language.suggest.cta\": \"\u05DC\u05E7\u05E8\u05D9\u05D0\u05D4 \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA\",\n        \"language.suggest.dismiss\": \"\u05E1\u05D2\u05D9\u05E8\u05D4\"\n    },\n    \"fa\": {\n        \"language.suggest.text\": \"\u0627\u06CC\u0646 \u0635\u0641\u062D\u0647 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC \u0647\u0645 \u062F\u0631 \u062F\u0633\u062A\u0631\u0633 \u0627\u0633\u062A.\",\n        \"language.suggest.cta\": \"\u062E\u0648\u0627\u0646\u062F\u0646 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC\",\n        \"language.suggest.dismiss\": \"\u0628\u0633\u062A\u0646\"\n    },\n    \"ur\": {\n        \"language.suggest.text\": \"\u06CC\u06C1 \u0635\u0641\u062D\u06C1 \u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u0628\u06BE\u06CC \u062F\u0633\u062A\u06CC\u0627\u0628 \u06C1\u06D2\u06D4\",\n        \"language.suggest.cta\": \"\u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u067E\u0691\u06BE\u06CC\u06BA\",\n        \"language.suggest.dismiss\": \"\u0628\u0646\u062F \u06A9\u0631\u06CC\u06BA\"\n    }\n};\n", "// Generated by scripts/build-i18n.js from locales/*.json \u2014 do not edit by hand.\n// Add or change strings in locales/<code>.json, then run `npm run build:i18n`.\n\nexport const DICTIONARY = {\n    \"language.label\": \"Language\",\n    \"language.suggest.text\": \"This page is also available in English.\",\n    \"language.suggest.cta\": \"Read in English\",\n    \"language.suggest.dismiss\": \"Dismiss\",\n    \"theme.label\": \"Theme\",\n    \"theme.system\": \"System\",\n    \"theme.light\": \"Light\",\n    \"theme.dark\": \"Dark\",\n    \"donate.eyebrow\": \"Donate in crypto\",\n    \"donate.title\": \"Keep SecureBit independent\",\n    \"donate.description\": \"Every donation goes to development and audits.\",\n    \"donate.copy\": \"Copy\",\n    \"donate.copied\": \"Copied\",\n    \"donate.net.usdt\": \"USDT \u00B7 Tron (TRC-20)\",\n    \"donate.net.btc\": \"Bitcoin network\",\n    \"donate.net.eth\": \"Ethereum mainnet\",\n    \"donate.warn.usdt\": \"Send only USDT on Tron (TRC-20).\",\n    \"donate.warn.btc\": \"Send only BTC on the Bitcoin network.\",\n    \"donate.warn.eth\": \"Send only ETH on Ethereum mainnet.\",\n    \"donate.qrAlt\": \"QR code of the {coin} donation address\",\n    \"community.title\": \"Join the future of privacy\",\n    \"community.description\": \"SecureBit grows thanks to its community. Your ideas and feedback shape the future of secure communication - built in the open, with complete ASN.1 validation end-to-end.\",\n    \"community.github\": \"GitHub Repository\",\n    \"community.feedback\": \"Feedback\",\n    \"unique.eyebrow\": \"What sets us apart\",\n    \"unique.heading\": \"Why SecureBit is unique\",\n    \"unique.s1.titleTop\": \"Layered\",\n    \"unique.s1.titleBottom\": \"encryption core\",\n    \"unique.s1.collapsed\": \"Encryption core\",\n    \"unique.s1.desc\": \"ECDH P-384 key exchange, AES-256-GCM payloads, ECDSA signatures and full ASN.1 validation - composed into one hardened pipeline.\",\n    \"unique.s1.tags\": [\n        \"ECDH P-384\",\n        \"AES-256-GCM\",\n        \"ECDSA\",\n        \"ASN.1\"\n    ],\n    \"unique.s2.titleTop\": \"Pure P2P\",\n    \"unique.s2.titleBottom\": \"WebRTC\",\n    \"unique.s2.collapsed\": \"Pure P2P WebRTC\",\n    \"unique.s2.desc\": \"Messages travel directly between devices over WebRTC. No relay holds your data - the server only helps two peers find each other.\",\n    \"unique.s2.tags\": [\n        \"DTLS 1.3\",\n        \"No relay\"\n    ],\n    \"unique.s3.titleTop\": \"Perfect\",\n    \"unique.s3.titleBottom\": \"forward secrecy\",\n    \"unique.s3.collapsed\": \"Forward secrecy\",\n    \"unique.s3.desc\": \"Session keys rotate continuously and are discarded after use, so a single compromised key can never unlock past conversations.\",\n    \"unique.s3.tags\": [\n        \"Ephemeral keys\",\n        \"Auto-rotate\"\n    ],\n    \"unique.s4.titleTop\": \"Traffic\",\n    \"unique.s4.titleBottom\": \"obfuscation\",\n    \"unique.s4.collapsed\": \"Traffic obfuscation\",\n    \"unique.s4.desc\": \"Packet sizes and timing are padded and randomized, hiding metadata patterns from anyone watching the wire.\",\n    \"unique.s4.tags\": [\n        \"Packet padding\",\n        \"Timing jitter\"\n    ],\n    \"unique.s5.titleTop\": \"Zero data\",\n    \"unique.s5.titleBottom\": \"collection\",\n    \"unique.s5.collapsed\": \"Zero data collection\",\n    \"unique.s5.desc\": \"No accounts, no logs, no message storage. There is nothing on a server to leak, subpoena, or sell.\",\n    \"unique.s5.tags\": [\n        \"No accounts\",\n        \"No logs\"\n    ],\n    \"partners.eyebrow\": \"Partners & ecosystem\",\n    \"partners.heading\": \"Trusted by our partners\",\n    \"partners.aegis.desc\": \"Capital partner securing confidential financial communications across its portfolio.\",\n    \"partners.aegis.role\": \"Strategic backer\",\n    \"partners.furilabs.desc\": \"Privacy-first Linux phones that ship SecureBit as a default secure channel.\",\n    \"partners.furilabs.role\": \"Technology partner\",\n    \"partners.inviteTitle\": \"Become a partner\",\n    \"partners.inviteDesc\": \"Building privacy hardware or infrastructure? Let's integrate SecureBit.\",\n    \"partners.inviteCta\": \"Start a conversation\",\n    \"roadmap.eyebrow\": \"Development Roadmap\",\n    \"roadmap.heading\": \"The evolution of SecureBit\",\n    \"roadmap.subheading\": \"From the first prototype to a quantum-resistant, decentralized network - with complete ASN.1 validation at every layer.\",\n    \"roadmap.progress\": \"{shipped} of {total} milestones shipped\",\n    \"roadmap.upcoming\": \"{upcoming} on the way\",\n    \"roadmap.keyFeatures\": \"Key features\",\n    \"hero.headlineTop\": \"A direct line\",\n    \"hero.headlineBottom\": \"only you two can read.\",\n    \"hero.subheading\": \"Keys are generated on your device and exchanged peer-to-peer. No accounts, no servers storing your messages.\",\n    \"hero.diagramAlt\": \"A direct encrypted line to one peer, with two more peers joining the mesh\",\n    \"intro.createTitle\": \"Create a new channel\",\n    \"intro.createDesc\": \"Your device generates the keys and a one-time invitation. Nothing touches a server.\",\n    \"intro.createCta\": \"Generate keys & invitation\",\n    \"intro.joinTitle\": \"Join a channel\",\n    \"intro.scanTitle\": \"Scan QR with camera\",\n    \"intro.scanSubtitle\": \"Fastest - point at your peer's screen\",\n    \"intro.orPasteCode\": \"or paste code\",\n    \"intro.pastePlaceholder\": \"Paste invitation code here\u2026\",\n    \"intro.connect\": \"Connect\",\n    \"intro.connecting\": \"Processing\u2026\",\n    \"roadmap.r1.title\": \"Start of Development\",\n    \"roadmap.r1.sub\": \"Idea, prototype, and infrastructure setup\",\n    \"roadmap.r1.date\": \"Early 2025\",\n    \"roadmap.r1.features\": [\n        \"Concept and requirements formation\",\n        \"Stack selection: WebRTC, P2P, cryptography\",\n        \"First messaging prototypes\",\n        \"Repository creation and CI\",\n        \"Basic encryption architecture\",\n        \"UX/UI design\"\n    ],\n    \"roadmap.r2.title\": \"Alpha Release\",\n    \"roadmap.r2.sub\": \"First public alpha: basic chat and key exchange\",\n    \"roadmap.r2.date\": \"Spring 2025\",\n    \"roadmap.r2.features\": [\n        \"Basic P2P messaging via WebRTC\",\n        \"Simple E2E encryption (demo scheme)\",\n        \"Stable signaling and reconnection\",\n        \"Minimal UX for testing\",\n        \"Feedback collection from early testers\"\n    ],\n    \"roadmap.r3.title\": \"Security Hardened\",\n    \"roadmap.r3.sub\": \"Security strengthening and stable branch release\",\n    \"roadmap.r3.date\": \"Summer 2025\",\n    \"roadmap.r3.features\": [\n        \"ECDH/ECDSA implementation in production\",\n        \"Perfect Forward Secrecy and key rotation\",\n        \"Improved authentication checks\",\n        \"File encryption and large payload transfers\",\n        \"Audit of basic cryptoprocesses\"\n    ],\n    \"roadmap.r4.title\": \"Scaling & Stability\",\n    \"roadmap.r4.sub\": \"Network scaling and stability improvements\",\n    \"roadmap.r4.date\": \"Fall 2025\",\n    \"roadmap.r4.features\": [\n        \"Optimization of P2P connections and NAT traversal\",\n        \"Reconnection mechanisms and message queues\",\n        \"Reduced battery consumption on mobile\",\n        \"Multi-device synchronization support\",\n        \"Monitoring and logging tools for developers\"\n    ],\n    \"roadmap.r5.title\": \"Privacy-first Release\",\n    \"roadmap.r5.sub\": \"Focus on privacy: minimizing metadata\",\n    \"roadmap.r5.date\": \"Winter 2025\",\n    \"roadmap.r5.features\": [\n        \"Metadata protection and fingerprint reduction\",\n        \"Experiments with onion routing and DHT\",\n        \"Options for anonymous connections\",\n        \"Preparation for open code audit\",\n        \"Improved user verification processes\"\n    ],\n    \"roadmap.r6.title\": \"Enhanced Security Edition\",\n    \"roadmap.r6.sub\": \"18-layer military-grade cryptography with complete ASN.1 validation\",\n    \"roadmap.r6.date\": \"Late 2025\",\n    \"roadmap.r6.features\": [\n        \"ECDH + DTLS + SAS triple-layer security\",\n        \"ECDH P-384 + AES-GCM 256-bit encryption\",\n        \"DTLS fingerprint verification\",\n        \"SAS (Short Authentication String) verification\",\n        \"Perfect Forward Secrecy with key rotation\",\n        \"Enhanced MITM attack prevention\",\n        \"Complete ASN.1 DER validation\",\n        \"OID and EC point verification\",\n        \"SPKI structure validation\",\n        \"P2P WebRTC architecture\",\n        \"Metadata protection\",\n        \"100% open source code\"\n    ],\n    \"roadmap.r7.title\": \"Desktop Edition\",\n    \"roadmap.r7.sub\": \"Native desktop apps for Windows, macOS, and Linux\",\n    \"roadmap.r7.date\": \"Early 2026\",\n    \"roadmap.r7.features\": [\n        \"Windows desktop app (Tauri v2)\",\n        \"macOS desktop app (Tauri v2)\",\n        \"Linux AppImage support (Tauri v2)\",\n        \"Real-time notifications\",\n        \"Automatic reconnection\",\n        \"Cross-device synchronization\",\n        \"Improved UX/UI\",\n        \"Support for files up to 100MB\"\n    ],\n    \"roadmap.r8.title\": \"Secure Voice & Calls\",\n    \"roadmap.r8.sub\": \"Encrypted voice messages, audio calls, and video calls\",\n    \"roadmap.r8.date\": \"Early 2026\",\n    \"roadmap.r8.features\": [\n        \"End-to-end encrypted voice messages\",\n        \"1:1 encrypted audio calls (WebRTC)\",\n        \"1:1 encrypted video calls (WebRTC)\",\n        \"Perfect Forward Secrecy for live media\",\n        \"SRTP/DTLS-protected media streams\",\n        \"In-call SAS verification\",\n        \"Call notifications and auto-reconnection\",\n        \"Low-latency P2P media\"\n    ],\n    \"roadmap.r9.title\": \"Group Communications\",\n    \"roadmap.r9.sub\": \"Group chats with preserved privacy\",\n    \"roadmap.r9.date\": \"Now\",\n    \"roadmap.r9.features\": [\n        \"P2P group chats up to 8 participants\",\n        \"Mesh delivery with signed relay fallback\",\n        \"One group safety code, compared by everyone\",\n        \"Commit-then-reveal ceremony against code grinding\",\n        \"Per-group identity keys, ephemeral by design\",\n        \"Signed membership with epoch ordering\",\n        \"Signed messages, so a split transcript is provable\",\n        \"No server, no shared group key, no history\"\n    ],\n    \"roadmap.r10.title\": \"Mobile Edition\",\n    \"roadmap.r10.sub\": \"Native mobile apps for iOS and Android\",\n    \"roadmap.r10.date\": \"Q2 2027\",\n    \"roadmap.r10.features\": [\n        \"iOS native app (Swift/SwiftUI)\",\n        \"Android native app (Kotlin/Jetpack Compose)\",\n        \"PWA support for mobile browsers\",\n        \"Real-time push notifications\",\n        \"Battery optimization\",\n        \"Mobile-optimized UX/UI\",\n        \"Offline message queuing\",\n        \"Biometric authentication\"\n    ],\n    \"roadmap.r11.title\": \"Quantum-Resistant Edition\",\n    \"roadmap.r11.sub\": \"Protection against quantum computers\",\n    \"roadmap.r11.date\": \"Q4 2027\",\n    \"roadmap.r11.features\": [\n        \"Post-quantum cryptography CRYSTALS-Kyber\",\n        \"SPHINCS+ digital signatures\",\n        \"Hybrid scheme: classic + PQ\",\n        \"Quantum-safe key exchange\",\n        \"Updated hashing algorithms\",\n        \"Migration of existing sessions\",\n        \"Compatibility with v5.x\",\n        \"Quantum-resistant protocols\"\n    ],\n    \"roadmap.r12.title\": \"Decentralized Network\",\n    \"roadmap.r12.sub\": \"Fully decentralized network\",\n    \"roadmap.r12.date\": \"2028\",\n    \"roadmap.r12.features\": [\n        \"Node mesh network\",\n        \"DHT for peer discovery\",\n        \"Built-in onion routing\",\n        \"Tokenomics and node incentives\",\n        \"Governance via DAO\",\n        \"Interoperability with other networks\",\n        \"Cross-platform compatibility\",\n        \"Self-healing network\"\n    ],\n    \"roadmap.r13.title\": \"AI Privacy Assistant\",\n    \"roadmap.r13.sub\": \"AI for privacy and security\",\n    \"roadmap.r13.date\": \"2028+\",\n    \"roadmap.r13.features\": [\n        \"Local AI threat analysis\",\n        \"Automatic MITM detection\",\n        \"Adaptive cryptography\",\n        \"Personalized security recommendations\",\n        \"Zero-knowledge machine learning\",\n        \"Private AI assistant\",\n        \"Predictive security\",\n        \"Autonomous attack protection\"\n    ],\n    \"handshake.step1\": \"Generating ECDH P-384 key pair\",\n    \"handshake.step2\": \"Deriving verification code\",\n    \"handshake.step3\": \"Pinning Perfect Forward Secrecy\",\n    \"handshake.securingTitle\": \"Securing your channel\",\n    \"handshake.answerTitle\": \"Building your answer\",\n    \"handshake.securingDesc\": \"Forging keys strong enough to resist tampering.\",\n    \"handshake.shareTitle\": \"Share your invitation\",\n    \"handshake.sendAnswerTitle\": \"Send back your answer\",\n    \"handshake.shareDesc\": \"Show the QR or send the code to your peer. It is one-time and expires shortly.\",\n    \"handshake.sendAnswerDesc\": \"Give this answer to the channel creator so they can finish the handshake.\",\n    \"handshake.establish\": \"Establish connection\",\n    \"handshake.thenReceive\": \"Then receive the answer your peer sends back\",\n    \"handshake.pasteAnswerPlaceholder\": \"Paste peer's answer code\u2026\",\n    \"handshake.answerSentNote\": \"Send this answer to the creator, then wait - the chat opens once they connect.\",\n    \"handshake.qrHint\": \"Keep this open until your peer captures the code.\",\n    \"handshake.qrHintFrames\": \"The handshake is split across {frames} frames - keep this open until your peer captures all of them.\",\n    \"verify.title\": \"Security verification\",\n    \"verify.desc\": \"Compare this safety code with your peer over a separate channel (voice / in person), then type it to unlock the chat.\",\n    \"verify.enterLabel\": \"Enter the verified code\",\n    \"verify.placeholder\": \"Type code here\",\n    \"verify.confirm\": \"Confirm code\",\n    \"verify.confirmed\": \"Confirmed\",\n    \"verify.mismatch\": \"Don't match\",\n    \"verify.yours\": \"Your confirmation\",\n    \"verify.peer\": \"Peer confirmation\",\n    \"verify.pending\": \"Pending\",\n    \"verify.waiting\": \"Waiting for code\u2026\",\n    \"verify.verified\": \"Channel verified\",\n    \"verify.bothConfirmed\": \"Both parties confirmed. Opening the secure chat\u2026\",\n    \"pwa.bannerTitle\": \"Install SecureBit.chat\",\n    \"pwa.bannerDesc\": \"Get the native app experience with enhanced security\",\n    \"pwa.install\": \"Install\",\n    \"pwa.dismiss\": \"Dismiss\",\n    \"pwa.close\": \"Close\",\n    \"pwa.iosTitle\": \"Install on iOS\",\n    \"pwa.iosStep1\": \"Tap the Share button\",\n    \"pwa.iosStep1Hint\": \"Usually at the bottom of Safari\",\n    \"pwa.iosStep2\": \"Find \\\"Add to Home Screen\\\"\",\n    \"pwa.iosStep2Hint\": \"Scroll down in the share menu\",\n    \"pwa.iosStep3\": \"Tap \\\"Add\\\"\",\n    \"pwa.iosStep3Hint\": \"Confirm to install SecureBit.chat\",\n    \"pwa.genericTitle\": \"Install SecureBit\",\n    \"pwa.genericDesc\": \"Your browser handles installs its own way. Pick the steps that match yours.\",\n    \"pwa.androidChromeHint\": \"Tap \u22EE in the top corner, then \u201CInstall app\u201D\",\n    \"pwa.androidOtherHint\": \"Tap the menu, then \u201CAdd to Home screen\u201D\",\n    \"pwa.gotIt\": \"Got it\",\n    \"pwa.installedTitle\": \"App Installed!\",\n    \"pwa.installedIos\": \"iOS App installed! Open from home screen.\",\n    \"pwa.installedGeneric\": \"SecureBit.chat is now on your device\",\n    \"pwa.anytimeTitle\": \"Install Anytime\",\n    \"pwa.anytimeDesc\": \"You can still install SecureBit.chat from your browser's menu for the best experience.\",\n    \"pwa.ok\": \"OK\",\n    \"step.open\": \"Step 1 \u00B7 open a channel\",\n    \"step.exchange\": \"Step 2 \u00B7 exchange\",\n    \"step.verification\": \"Step 3 \u00B7 verification\",\n    \"action.create\": \"Create\",\n    \"action.join\": \"Join\",\n    \"action.back\": \"Back\",\n    \"action.copy\": \"Copy\",\n    \"action.copied\": \"Copied\",\n    \"action.scan\": \"Scan\",\n    \"action.downloadDesktop\": \"Download desktop app\",\n    \"action.advancedSettings\": \"Advanced settings\",\n    \"cred.offerTag\": \"offer \u00B7 or copy text\",\n    \"cred.answerTag\": \"answer \u00B7 or copy text\",\n    \"cred.reveal\": \"Click to reveal - keep this code private\",\n    \"qr.title\": \"Scan QR code\",\n    \"qr.subtitle\": \"Point your camera at their QR\",\n    \"qr.scanning\": \"Scanning\u2026\",\n    \"qr.hint\": \"Hold steady until all parts are captured. Camera access is local - nothing is uploaded.\",\n    \"mesh.you\": \"you\",\n    \"mesh.peer\": \"peer \u00B7 session 1\",\n    \"mesh.joined2\": \"mara joined \u00B7 +2\",\n    \"mesh.joined3\": \"tobi joined \u00B7 +3\",\n    \"ice.title\": \"Network settings\",\n    \"ice.subtitle\": \"Configured locally - never shared with your peer\",\n    \"ice.intro\": \"SecureBit uses public STUN servers by default to negotiate the peer-to-peer link. Point it at your own STUN/TURN if you self-host.\",\n    \"ice.publicTitle\": \"Public servers (default)\",\n    \"ice.publicDesc\": \"Zero-config. Good for most users.\",\n    \"ice.customTitle\": \"My own STUN/TURN servers\",\n    \"ice.customDesc\": \"Up to {max} servers.\",\n    \"ice.turnNote\": \"A TURN relay sees both peers' IP and traffic timing - but never message contents, which stay end-to-end encrypted. Prefer \",\n    \"ice.turnNoteTls\": \" (TLS).\",\n    \"ice.test\": \"Test servers\",\n    \"ice.testing\": \"Testing\u2026\",\n    \"ice.relayTitle\": \"Relay-only mode\",\n    \"ice.relayBadge\": \"MAX PRIVACY\",\n    \"ice.relayDesc\": \"Routes all traffic through TURN so your IP is never exposed to the peer. Requires a TURN server.\",\n    \"ice.relayWarning\": \"Relay-only is enabled but no TURN server is configured. The connection will not be able to start.\",\n    \"ice.persist\": \"Save on this device\",\n    \"ice.persistDesc\": \"Stored encrypted in this browser. Leave off to use only for this session.\",\n    \"ice.forget\": \"Forget saved\",\n    \"ice.cancel\": \"Cancel\",\n    \"ice.apply\": \"Apply\",\n    \"ice.errUnavailable\": \"WebRTC is not available in this browser\",\n    \"ice.errInvalid\": \"Invalid server configuration\",\n    \"update.title\": \"Update available\",\n    \"update.desc\": \"A newer version of SecureBit has been detected.\",\n    \"update.currentVersion\": \"Current version\",\n    \"update.newVersion\": \"New version\",\n    \"update.now\": \"Update now\",\n    \"update.later\": \"Later\",\n    \"update.unknown\": \"N/A\",\n    \"update.stepSaving\": \"Saving data...\",\n    \"update.stepSwCaches\": \"Clearing Service Worker caches...\",\n    \"update.stepSwUnregister\": \"Unregistering Service Workers...\",\n    \"update.stepBrowserCache\": \"Clearing browser cache...\",\n    \"update.stepVersion\": \"Updating version...\",\n    \"update.stepReload\": \"Reloading application...\",\n    \"update.error\": \"Update error. Please refresh the page manually (Ctrl+F5 or Cmd+Shift+R)\",\n    \"update.confirmSkip\": \"New version available. Update is recommended for security and stability. Continue without update?\",\n    \"offline.backOnline\": \"Back online\",\n    \"offline.mode\": \"Offline mode\",\n    \"offline.dismiss\": \"Dismiss\",\n    \"offline.lostTitle\": \"Connection lost\",\n    \"offline.lostDesc\": \"SecureBit is now in offline mode. Some features are limited, but your data stays safe.\",\n    \"offline.point1\": \"Your session and keys are preserved\",\n    \"offline.point2\": \"No data is stored on servers\",\n    \"offline.point3\": \"Messages & files sync when you reconnect\",\n    \"offline.continue\": \"Continue offline\",\n    \"offline.restoredTitle\": \"When you reconnect\",\n    \"offline.restoredDesc\": \"A dropped connection costs you nothing. SecureBit queues everything locally and resumes the encrypted session the instant you're back online.\",\n    \"offline.r1Title\": \"Your messages get delivered\",\n    \"offline.r1Desc\": \"Everything you wrote while offline is sent to your contact automatically.\",\n    \"offline.r2Title\": \"Files finish transferring\",\n    \"offline.r2Desc\": \"Uploads resume from where they stopped - no need to resend.\",\n    \"offline.r3Title\": \"Their messages & files arrive\",\n    \"offline.r3Desc\": \"Whatever your contact sent during the outage is delivered to you in order.\",\n    \"offline.r4Title\": \"Nothing is lost\",\n    \"offline.r4Desc\": \"After reconnect there's no gap - the conversation continues exactly where it paused.\",\n    \"offline.gotIt\": \"Got it\",\n    \"qr.showTitle\": \"Show QR code\",\n    \"qr.showSubtitle\": \"Full-screen \u00B7 let your peer scan\",\n    \"qr.showSubtitleFrames\": \"Full-screen \u00B7 let your peer scan all {frames} frames\",\n    \"notify.enabledBody\": \"Notifications enabled! You will receive alerts for new messages.\",\n    \"notify.workingBody\": \"Notifications are working! You will receive alerts for new messages.\",\n    \"pw.label\": \"Password input\",\n    \"pw.placeholder\": \"Enter password...\",\n    \"pw.decrypt\": \"Decrypt\",\n    \"pw.cancel\": \"Cancel\",\n    \"file.title\": \"File transfers\",\n    \"file.drop\": \"Drag & drop files here\",\n    \"file.dropHint\": \"Encrypted end-to-end before transfer \u00B7 up to 100 MB\",\n    \"file.browse\": \"Browse device\",\n    \"file.incoming\": \"Incoming file request\",\n    \"file.accept\": \"Accept\",\n    \"file.reject\": \"Reject\",\n    \"file.download\": \"Download\",\n    \"file.notReady\": \"Connection not ready\",\n    \"file.tooLarge\": \"File too large\",\n    \"file.typeNotAllowed\": \"File type not allowed\",\n    \"file.maxConcurrent\": \"Maximum concurrent transfers\",\n    \"file.gone\": \"This file is no longer available for download.\",\n    \"call.incoming\": \"Incoming call\",\n    \"call.incomingVideo\": \"Incoming video call\",\n    \"call.encrypted\": \"Encrypted call\",\n    \"call.encryptedShort\": \"Encrypted\",\n    \"call.peer\": \"Secure peer\",\n    \"call.connecting\": \"Connecting\u2026\",\n    \"call.ringing\": \"Ringing\u2026\",\n    \"call.accept\": \"Accept\",\n    \"call.decline\": \"Decline\",\n    \"call.end\": \"End call\",\n    \"call.camera\": \"Camera\",\n    \"call.cameraOff\": \"Camera off\",\n    \"call.peerCameraOff\": \"Peer's camera is off\",\n    \"call.flipCamera\": \"Flip camera\",\n    \"call.addVideo\": \"Add video\",\n    \"call.video\": \"Video\",\n    \"call.muted\": \"Muted\",\n    \"call.expand\": \"Expand\",\n    \"call.minimize\": \"Minimize\",\n    \"call.quality\": \"Connection quality\",\n    \"call.qualityExcellent\": \"Excellent\",\n    \"call.videoPrefix\": \"Video \u00B7 \",\n    \"call.voicePrefix\": \"Voice \u00B7 \",\n    \"group.new\": \"New group\",\n    \"group.create\": \"Create group\",\n    \"group.join\": \"Join group\",\n    \"group.name\": \"Group name\",\n    \"group.nameTooLong\": \"The group name is too long.\",\n    \"group.capacity\": \"Up to {max} people, peer to peer. Everyone will compare one safety code before the group opens.\",\n    \"group.invite\": \"Invite\",\n    \"group.inviteMore\": \"Invite more members\",\n    \"group.invitePeople\": \"Invite {count} people\",\n    \"group.invitation\": \"Group invitation\",\n    \"group.addMembers\": \"Add members\",\n    \"group.roomFor\": \"Room for {remaining} more. Everyone will compare a new group code once they join.\",\n    \"group.membersCount\": \"{count} members\",\n    \"group.member\": \"Member\",\n    \"group.members\": \"Members\",\n    \"group.remove\": \"Remove {name}\",\n    \"group.message\": \"Message {name}\",\n    \"group.leave\": \"Leave\",\n    \"group.leaveThis\": \"Leave this group\",\n    \"group.cancel\": \"Cancel group\",\n    \"group.close\": \"Close\",\n    \"group.cancelBtn\": \"Cancel\",\n    \"group.decline\": \"Decline\",\n    \"group.working\": \"Working\u2026\",\n    \"group.sasTitle\": \"Group safety code\",\n    \"group.sasEveryone\": \"Everyone sees this code\",\n    \"group.sasCompare\": \"Compare the group code with every member to open this group.\",\n    \"group.sasReadAloud\": \"Read these digits aloud to \",\n    \"group.sasWarning\": \"If even one member reads a different code, someone is sitting between you. Cancel the group - do not confirm.\",\n    \"group.confirmFirst\": \"Confirm the group code first\",\n    \"group.codeSuffix\": \" \u00B7 code {code}\",\n    \"group.exchangingNonces\": \"Exchanging nonces\u2026\",\n    \"group.waitingCommit\": \"Waiting for every member to commit\u2026\",\n    \"group.waitingJoin\": \"Waiting for the other members to join\u2026\",\n    \"group.emptyChat\": \"Nothing here yet. Messages are signed by their sender and travel over each member's own encrypted link.\",\n    \"group.noVerified\": \"No verified chats yet. Open a 1:1 chat and compare its safety code first - a group is built out of connections you have already checked.\",\n    \"group.noMoreToAdd\": \"No other verified chats to add. Open a 1:1 chat and compare its safety code first.\",\n    \"group.directLink\": \"Direct peer-to-peer link\",\n    \"group.noDirectLink\": \"No direct link yet - messages are relayed by another member while one is being built\",\n    \"group.relayNote\": \"Some members have no direct link to you yet. Their messages travel through another member, who can see that you are talking but cannot read past the signature or change what you said. The group keeps trying to connect them directly.\",\n    \"group.relayOnlyOff\": \"Relay-only mode is off, so each member connects to you directly and learns your IP address - including members somebody else invited. Turn it on in network settings if that matters here.\",\n    \"group.memberOffline\": \"{name} is offline and will not receive messages. They are still a member - removing them re-keys the group.\",\n    \"group.joinNote\": \"Other members will learn your presence in this group. There is no message history to catch up on - a group starts empty.\",\n    \"group.inviteSentNote\": \"The group keeps working until they accept. There is no history for them to catch up on - they will only see what is sent from now on.\",\n    \"group.errNotCreated\": \"Group not created\",\n    \"group.errNobodyAccepted\": \"Nobody accepted the invitation in time.\",\n    \"group.errNothingSent\": \"Nothing was sent and nothing was verified. Close this and try again once everyone is connected.\",\n    \"group.errNotFormed\": \"This group could not be formed.\",\n    \"group.errFull\": \"This group is full.\",\n    \"group.errInviteFailed\": \"The invitation could not be sent - that chat is not connected.\",\n    \"group.errNoMemberList\": \"The group owner never sent the member list.\",\n    \"group.errUnsignedList\": \"The member list was not signed by the group owner. Do not retry - tell them.\",\n    \"group.errNotOwner\": \"Someone other than the group owner tried to change the members.\",\n    \"hdr.tagline\": \"End-to-end encrypted\",\n    \"hdr.netSettings\": \"Advanced network settings\",\n    \"hdr.netSettingsTitle\": \"Advanced network settings (STUN/TURN)\",\n    \"hdr.disconnect\": \"Disconnect\",\n    \"status.connected\": \"Connected\",\n    \"status.connecting\": \"Connecting...\",\n    \"status.notConnected\": \"Not connected\",\n    \"status.reconnecting\": \"Reconnecting...\",\n    \"status.retrying\": \"Retrying...\",\n    \"status.verifying\": \"Verifying...\",\n    \"status.peerDisconnected\": \"Peer disconnected\",\n    \"sec.replayProtection\": \"Replay Protection\",\n    \"sec.messageIntegrity\": \"Message Integrity (HMAC)\",\n    \"sec.forwardSecrecy\": \"Perfect Forward Secrecy\",\n    \"sec.metadataProtection\": \"Metadata Protection\",\n    \"sec.trafficObfuscation\": \"Traffic Obfuscation\",\n    \"sec.realTests\": \"Real Cryptographic Tests\",\n    \"sec.simulatedData\": \"Simulated Data\",\n    \"sec.testPassed\": \"Test passed\",\n    \"sec.testFailed\": \"Test failed or unavailable\",\n    \"sec.verificationDone\": \"Real cryptographic verification completed\",\n    \"sec.verificationInProgress\": \"Security verification in progress...\",\n    \"sec.verificationWait\": \"Security verification in progress...\\nPlease wait for real-time cryptographic verification to complete.\",\n    \"sec.verificationUnavailable\": \"Security verification not available\",\n    \"chat.placeholder\": \"Type an encrypted message\u2026\",\n    \"chat.send\": \"Send message\",\n    \"chat.sendFiles\": \"Send files\",\n    \"chat.hideFiles\": \"Hide files\",\n    \"chat.recordVoice\": \"Record voice message\",\n    \"chat.sendVoice\": \"Send voice message\",\n    \"chat.discard\": \"Discard\",\n    \"chat.codeBlock\": \"Send as a code block (expands the input)\",\n    \"chat.codeHint\": \"Code snippet \u00B7 formatting preserved \u00B7 \u2318\u21B5 to send\",\n    \"chat.viewOnce\": \"View once\",\n    \"chat.viewOnceTitle\": \"View once - vanishes after the peer reads it\",\n    \"chat.viewOncePrefix\": \"View once \u00B7 \",\n    \"chat.viewOnceTap\": \"View once \u00B7 tap to reveal\",\n    \"chat.viewedOnce\": \"Viewed once\",\n    \"chat.disappearing\": \"Disappearing message - deletes on both sides\",\n    \"chat.disappearAfter\": \"Disappear after\",\n    \"chat.visibleFor\": \"Visible for\",\n    \"chat.timerPrefix\": \"Timer \u00B7 \",\n    \"chat.expired\": \"This message has expired\",\n    \"chat.deleteForEveryone\": \"Delete for everyone\",\n    \"chat.sending\": \"Sending\",\n    \"chat.delivered\": \"Delivered\",\n    \"chat.notSent\": \"Not sent\",\n    \"chat.notSentReason\": \"Not sent - the secure channel is not ready. Reconnect to continue.\",\n    \"chat.encrypted\": \"Encrypted\",\n    \"chat.decrypted\": \"Decrypted\",\n    \"chat.encryptedOnDevice\": \"Encrypted on your device\",\n    \"chat.uploading\": \"Uploading\",\n    \"chat.downloading\": \"Downloading\",\n    \"chat.transferring\": \"Transferring\u2026\",\n    \"chat.copied\": \"Copied!\",\n    \"chat.collapse\": \"Collapse\",\n    \"chat.closeMenu\": \"Close menu\",\n    \"chat.newChat\": \"New chat\",\n    \"chat.newGroup\": \"New group\",\n    \"chat.createGroup\": \"Create a group\",\n    \"chat.groupChats\": \"Group chats\",\n    \"chat.secureChat\": \"Secure chat\",\n    \"chat.nameThis\": \"Name this chat\",\n    \"chat.rename\": \"Rename chat (local only)\",\n    \"chat.renameHint\": \"Double-click to rename\",\n    \"chat.localLabel\": \"Local label \u00B7 stored only on this device\",\n    \"chat.setStatus\": \"Set your status\",\n    \"chat.yourStatusPrefix\": \"Your status - \",\n    \"chat.meshHint\": \"Up to 8 peers \u00B7 P2P mesh\",\n    \"chat.offline\": \"Offline\",\n    \"chat.noNetwork\": \"No network \u00B7 reconnecting\",\n    \"chat.startVoiceCall\": \"Start encrypted voice call\",\n    \"chat.startVideoCall\": \"Start encrypted video call\",\n    \"chat.verifyForCalls\": \"Verify the session to enable calls\",\n    \"chat.e2eeNote\": \"Every message is end-to-end encrypted on your device before it leaves.\",\n    \"chat.peersOnly\": \"Sent end-to-end to connected peers only - never stored on a server.\",\n    \"flow.invitationCreated\": \"Secure invitation created\",\n    \"flow.invitationCreatedBang\": \"Secure invitation created and encrypted!\",\n    \"flow.responseCreated\": \"Secure response created\",\n    \"flow.responseCreatedBang\": \"Secure response created!\",\n    \"flow.sendInvitation\": \"Send the invitation code to your interlocutor via a secure channel (voice call, SMS, etc.).\",\n    \"flow.sendResponse\": \"Send the response code to the initiator via a secure channel or let them scan the QR code below.\",\n    \"flow.sendEncryptedCode\": \"Send the encrypted code\",\n    \"flow.sendTheResponse\": \"Send the response\",\n    \"flow.pasteOrWrite\": \"Paste or write code\u2026\",\n    \"flow.processingInvitation\": \"Processing the secure invitation...\",\n    \"flow.processingResponse\": \"Processing the secure response...\",\n    \"flow.finalizing\": \"Finalizing the secure connection...\",\n    \"flow.channelEstablished\": \"Secure channel established\",\n    \"flow.channelReady\": \"Secure channel is ready\",\n    \"flow.restoring\": \"Restoring connection\u2026\",\n    \"flow.invitationCaptured\": \"Invitation captured.\",\n    \"err.needInvitation\": \"You need to insert the invitation code from your interlocutor.\",\n    \"err.needResponse\": \"You need to insert the response code from your interlocutor.\",\n    \"err.responseFormat\": \"Invalid response format - please check the code\",\n    \"err.responseNoKey\": \"Invalid response code - missing or corrupted cryptographic key. Please check the code and try again.\",\n    \"err.responseNoSignKey\": \"Invalid response code - missing signature verification key. Please check the code and try again.\",\n    \"err.responseOutdated\": \"Response data is outdated - please use a fresh invitation\",\n    \"err.setupError\": \"Connection setup error\",\n    \"err.notReady\": \"Connection not ready\",\n    \"err.securityBreach\": \"Security breach detected - connection rejected\",\n    \"err.securityValidation\": \"Security validation failed - possible attack detected\",\n    \"err.retiredQr\": \"This QR code uses a retired format that could not transfer the invitation. Ask your peer to generate a new one, or use copy/paste.\",\n    \"err.compressedQrNote\": \"Compressed QR may omit SDP for brevity. Use copy/paste if connection fails.\",\n    \"err.inviteNotConnected\": \"The invitation could not be sent. That chat is not connected right now.\",\n    \"err.inviteNotConnectedRetry\": \"The invitation could not be sent. That chat is not connected right now - reopen it and try again.\",\n    \"err.nobodyAccepted\": \"Nobody accepted the invitation. The group is unchanged.\",\n    \"err.noAudio\": \"No audio captured - check microphone permission and try again.\",\n    \"err.voiceNeedsConnection\": \"Voice message needs an active secure connection. Reconnect and try again.\",\n    \"err.voiceRestoring\": \"Restoring the connection - try sending the voice message again in a moment.\",\n    \"err.fileTooLarge\": \"File too large\",\n    \"sas.safetyNumber\": \"Safety number\",\n    \"sas.incorrect\": \"Incorrect code. Check it with your peer and try again.\",\n    \"sas.noMatch\": \"The codes do not match\",\n    \"sas.makeSure\": \"Make sure the codes match exactly.\",\n    \"sas.tooManyAttempts\": \"Too many incorrect attempts. Session reset for safety.\",\n    \"sas.verificationFailed\": \"Verification failed\",\n    \"sas.verified\": \"Verified \u00B7 Perfect Forward Secrecy\",\n    \"sas.runVerification\": \"Run security verification\",\n    \"sec.panelTitle\": \"Network & crypto details\",\n    \"sec.security\": \"Security\",\n    \"sec.transport\": \"Transport\",\n    \"sec.keyExchange\": \"Key exchange\",\n    \"sec.allEnabled\": \"All security features enabled by default\",\n    \"sec.realTimeNote\": \"Real-time verification using actual cryptographic functions - no mock data.\",\n    \"sec.simulatedWarning\": \"Warning: connection may not be fully established - values may be simulated.\",\n    \"dl.title\": \"Download SecureBit\",\n    \"dl.free\": \"Free \u00B7 open source\",\n    \"dl.soon\": \"Mobile (iOS, Android) and browser extensions (Chrome, Firefox, Opera) are coming soon.\",\n    \"chatHdr.chat\": \"Chat\",\n    \"chatHdr.chats\": \"Chats\",\n    \"chatHdr.newChat\": \"+ New\",\n    \"chatHdr.secure\": \"Secure\",\n    \"chatHdr.p2pSub\": \"P2P \u00B7 end-to-end encrypted\",\n    \"chatHdr.save\": \"Save\",\n    \"chatHdr.close\": \"Close\",\n    \"chatHdr.expand\": \"Expand\",\n    \"chatHdr.you\": \"You\",\n    \"chatHdr.qrCode\": \"QR code\",\n    \"chat.disconnected\": \"Disconnected\",\n    \"call.mute\": \"Mute\",\n    \"call.endShort\": \"End\",\n    \"group.add\": \"Add\",\n    \"group.send\": \"Send\",\n    \"sec.pfsShort\": \"Perfect Forward Secrecy\",\n    \"sec.cipher\": \"Cipher\",\n    \"chat.close\": \"Close\",\n    \"file.needConnection\": \"File transfer needs an open connection\",\n    \"presence.available\": \"Available\",\n    \"presence.away\": \"Away\",\n    \"presence.busy\": \"Busy\",\n    \"presence.offline\": \"Offline\",\n    \"presence.invisible\": \"Invisible\",\n    \"presence.availableDesc\": \"Online and reachable\",\n    \"presence.awayDesc\": \"Idle \u00B7 stepped away\",\n    \"presence.busyDesc\": \"Do not disturb\",\n    \"presence.invisibleDesc\": \"Appear offline to peers\",\n    \"presence.online\": \"Online\",\n    \"conn.p2p\": \"P2P \u00B7 connected\",\n    \"conn.verifying\": \"Verifying\u2026\",\n    \"conn.connecting\": \"Connecting\u2026\",\n    \"conn.reconnecting\": \"Reconnecting\u2026\",\n    \"conn.peerDisconnected\": \"Peer disconnected\",\n    \"conn.disconnected\": \"Disconnected\",\n    \"chat.defaultLabel\": \"Chat\",\n    \"groupPhase.forming\": \"Forming\u2026\",\n    \"groupPhase.commitments\": \"Exchanging commitments\u2026\",\n    \"groupPhase.revealing\": \"Revealing\u2026\",\n    \"groupPhase.compare\": \"Compare the group code\",\n    \"groupPhase.ready\": \"Group ready\",\n    \"groupPhase.failed\": \"Group failed\",\n    \"call.qualityGood\": \"Good\",\n    \"call.qualityFair\": \"Fair\",\n    \"call.qualityWeak\": \"Weak\",\n    \"msg.code\": \"Code\",\n    \"msg.timer\": \"Timer\",\n    \"msg.voice\": \"Voice\",\n    \"msg.play\": \"Play\",\n    \"msg.sent\": \"Sent\",\n    \"msg.read\": \"Read\",\n    \"report.title\": \"Real-time security verification\",\n    \"report.active\": \"Active\",\n    \"report.testsPassed\": \"Tests passed\",\n    \"report.verifiedAt\": \"Verified at\",\n    \"report.source\": \"Source\",\n    \"secTest.verifyECDHKeyExchange\": \"ECDH key exchange\",\n    \"secTest.verifyECDSASignatures\": \"ECDSA digital signatures\",\n    \"secTest.verifyEncryption\": \"AES-GCM encryption\",\n    \"secTest.verifyMessageIntegrity\": \"Message integrity\",\n    \"secTest.verifyPerfectForwardSecrecy\": \"Perfect forward secrecy\",\n    \"secTest.verifyPFS\": \"Perfect forward secrecy\",\n    \"secTest.verifyReplayProtection\": \"Replay protection\",\n    \"secTest.verifyDTLSFingerprint\": \"DTLS fingerprint\",\n    \"secTest.verifySASVerification\": \"SAS verification\",\n    \"secTest.verifyMetadataProtection\": \"Metadata protection\",\n    \"secTest.verifyTrafficObfuscation\": \"Traffic obfuscation\",\n    \"secTest.verifyPacketPadding\": \"Packet padding\",\n    \"secTest.verifyNestedEncryption\": \"Nested encryption\",\n    \"secTest.verifyNonExtractableKeys\": \"Non-extractable keys\",\n    \"secTest.verifyRateLimiting\": \"Rate limiting\",\n    \"secTest.verifyMutualAuth\": \"Mutual authentication\",\n    \"secTest.verifyAuthProof\": \"Authentication proof\",\n    \"secTest.verifyEnhancedValidation\": \"Enhanced validation\",\n    \"secTest.verifyAdvancedFeatures\": \"Advanced features\",\n    \"secTest.verifySignature\": \"Signature check\",\n    \"secDetail.Security system initializing...\": \"Security system initializing...\",\n    \"secDetail.Nested encryption active\": \"Nested encryption active\",\n    \"secDetail.Nested encryption failed\": \"Nested encryption failed\",\n    \"secDetail.Packet padding active\": \"Packet padding active\",\n    \"secDetail.Packet padding failed\": \"Packet padding failed\",\n    \"secDetail.Advanced features active\": \"Advanced features active\",\n    \"secDetail.Advanced features failed\": \"Advanced features failed\",\n    \"secDetail.No encryption key available\": \"No encryption key available\",\n    \"secDetail.AES-GCM encryption/decryption working correctly\": \"AES-GCM encryption/decryption working correctly\",\n    \"secDetail.No ECDH key pair available\": \"No ECDH key pair available\",\n    \"secDetail.Key derivation failed\": \"Key derivation failed\",\n    \"secDetail.No ECDSA key pair available\": \"No ECDSA key pair available\",\n    \"secDetail.ECDSA digital signatures working correctly\": \"ECDSA digital signatures working correctly\",\n    \"secDetail.MAC key not available or invalid\": \"MAC key not available or invalid\",\n    \"secDetail.Rate limiter did not block a message over the limit\": \"Rate limiter did not block a message over the limit\",\n    \"secDetail.Rate limiter is not available\": \"Rate limiter is not available\",\n    \"secDetail.Replay protection is working correctly\": \"Replay protection is working correctly\",\n    \"secDetail.Replay protection not enabled\": \"Replay protection not enabled\",\n    \"secDetail.SAS code not available\": \"SAS code not available\",\n    \"secDetail.SAS verification code is valid and available\": \"SAS verification code is valid and available\",\n    \"secDetail.Traffic obfuscation is working correctly\": \"Traffic obfuscation is working correctly\",\n    \"secDetail.Traffic obfuscation not enabled\": \"Traffic obfuscation not enabled\",\n    \"secDetail.No non-extractable ephemeral ECDH key pair for this session\": \"No non-extractable ephemeral ECDH key pair for this session\",\n    \"secDetail.Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation\": \"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation\",\n    \"msg.pause\": \"Pause\",\n    \"msg.failed\": \"Failed\",\n    \"groupErr.timeout\": \"A member stopped responding before the code was ready.\",\n    \"groupErr.keyMismatch\": \"A member's key did not match the identity claimed for it.\",\n    \"groupErr.revealMismatch\": \"A member's revealed value did not match what they committed to.\",\n    \"groupErr.commitChanged\": \"A member changed their commitment part-way through.\",\n    \"groupErr.missingKey\": \"A member was listed whose key never arrived.\",\n    \"groupErr.outsider\": \"A frame arrived from someone outside the group.\",\n    \"groupErr.limit\": \"A group is limited to eight members.\",\n    \"groupErr.tooLarge\": \"A message was too large to send to the group.\",\n    \"fileType.text\": \"Plain text\",\n    \"fileType.images\": \"Images\",\n    \"fileType.archives\": \"Archives\",\n    \"fileType.voice\": \"Voice messages\",\n    \"fileType.unsupported\": \"Unsupported\",\n    \"qrScan.title\": \"Scan QR Code\",\n    \"qrScan.auto\": \"Auto Mode\",\n    \"qrScan.reset\": \"Reset\",\n    \"qrScan.autoScroll\": \"Auto-scrolling enabled\",\n    \"qrScan.starting\": \"Starting camera...\",\n    \"qrScan.point\": \"Point camera at QR code\",\n    \"qrScan.tapFocus\": \"Tap screen to focus\",\n    \"qrScan.focusing\": \"Focusing...\",\n    \"iceErr.notArray\": \"Server list must be an array\",\n    \"iceErr.invalidJson\": \"Invalid JSON\",\n    \"iceErr.tooMany\": \"Too many servers (max {max})\",\n    \"iceErr.invalidEntry\": \"{label}: invalid entry\",\n    \"iceErr.urlCount\": \"{label}: between 1 and {max} URLs required\",\n    \"iceErr.turnCreds\": \"{label}: TURN servers usually require a username and credential\",\n    \"iceUrl.notString\": \"URL must be a string\",\n    \"iceUrl.empty\": \"URL is empty\",\n    \"iceUrl.tooLong\": \"URL is too long\",\n    \"iceUrl.badChars\": \"URL contains invalid characters\",\n    \"iceUrl.badScheme\": \"URL must start with stun:, stuns:, turn: or turns:\",\n    \"iceUrl.badQuery\": \"URL has an invalid query\",\n    \"iceUrl.noHost\": \"URL is missing a host\",\n    \"iceUrl.badHost\": \"URL has an invalid host or port\",\n    \"iceUrl.badTransport\": \"URL query must be transport=udp or transport=tcp\",\n    \"msg.off\": \"Off\",\n    \"file.consentUnavailable\": \"User consent unavailable\",\n    \"secLevel.MAXIMUM\": \"MAXIMUM\",\n    \"secLevel.INITIALIZING\": \"INITIALIZING\",\n    \"secLevel.ERROR\": \"ERROR\",\n    \"secLevel.UNKNOWN\": \"UNKNOWN\",\n    \"status.error\": \"Error\",\n    \"offline.disconnect\": \"Disconnect\",\n    \"offline.learnMore\": \"Learn more\",\n    \"pwa.installApp\": \"Install App\",\n    \"chat.onWeb\": \"You're on Web\",\n    \"groupCall.startVoice\": \"Start a group voice call\",\n    \"groupCall.startVideo\": \"Start a group video call\",\n    \"groupCall.join\": \"Join\",\n    \"groupCall.dismiss\": \"Not now\",\n    \"groupCall.leave\": \"Leave call\",\n    \"groupCall.you\": \"You\",\n    \"groupCall.connecting\": \"Connecting\u2026\",\n    \"groupCall.waitingLink\": \"Waiting for a direct link\u2026\",\n    \"groupCall.legFailed\": \"Could not connect\",\n    \"groupCall.startedVoice\": \"{name} started a voice call\",\n    \"groupCall.startedVideo\": \"{name} started a video call\",\n    \"groupCall.inCall\": \"{count} in the call\",\n    \"groupCall.err.permission_denied\": \"The call could not start - microphone and camera access is blocked. Allow it for this site, then try again.\",\n    \"groupCall.err.device_not_found\": \"The call could not start - no microphone was found on this device.\",\n    \"groupCall.err.device_busy\": \"The call could not start - your microphone is in use by another app. Close it and try again.\",\n    \"groupCall.err.media_failed\": \"The call could not start - the microphone could not be opened.\",\n    \"groupCall.err.call_in_progress\": \"A call is already running in this group. Join it instead of starting another.\",\n    \"groupCall.err.not_ready\": \"Confirm the group code before calling.\",\n    \"groupCall.speaking\": \"{name} is speaking\",\n    \"groupCall.pin\": \"Show {name} large\",\n    \"groupCall.unpin\": \"Back to everyone\",\n    \"groupCall.showEveryone\": \"Everyone\",\n    \"msg.after5s\": \"5s after reading\",\n    \"msg.after15s\": \"15s after reading\",\n    \"msg.after30s\": \"30s after reading\",\n    \"msg.after1m\": \"1m after reading\",\n    \"msg.sec30\": \"30 seconds\",\n    \"msg.min5\": \"5 minutes\",\n    \"msg.hour1\": \"1 hour\",\n    \"desktop.shareDesc\": \"Send the code to your peer. It is one-time and expires shortly.\",\n    \"desktop.invitationCreated\": \"Secure invitation created - send it to your peer.\",\n    \"desktop.joinDesc\": \"Paste your peer's invitation code to build your secure answer.\",\n    \"desktop.offerTag\": \"offer \u00B7 copy text\",\n    \"desktop.answerTag\": \"answer \u00B7 copy text\",\n    \"desktop.offerPlaceholder\": \"Invitation code will appear here\u2026\",\n    \"desktop.answerPlaceholder\": \"Response code will appear here\u2026\",\n    \"desktop.backToChats\": \"Back to chats\",\n    \"desktop.sendFeedback\": \"Send feedback\",\n    \"desktop.callsNeedVerified\": \"Calls require a verified secure channel.\",\n    \"desktop.noOpenChannel\": \"No open secure channel.\",\n    \"desktop.chatCarriesCall\": \"This chat is carrying a group call. Leave the group call before placing a 1:1 call.\",\n    \"desktop.err.permission_denied\": \"The call could not start - microphone and camera access is blocked. Allow it in system settings, then try again.\",\n    \"desktop.language\": \"Language\",\n    \"desktop.languageHint\": \"Applies at once. Messages already sent keep the words they were written in.\",\n    \"desktop.compareCode\": \"Compare the verification code with your peer and confirm if it matches.\",\n    \"desktop.verifyBeforeFiles\": \"Complete verification before sending files.\",\n    \"desktop.verifyBeforeSending\": \"Complete verification before sending messages.\",\n    \"desktop.disconnectedByBackend\": \"Connection securely disconnected.\",\n    \"desktop.restoreFailed\": \"Could not restore the connection. Closing this chat.\",\n    \"desktop.channelNotReady\": \"The data channel is not available yet. Wait for the connection to establish.\",\n    \"desktop.enterCode\": \"Enter the verification code to confirm.\",\n    \"desktop.noOffer\": \"No invitation found. Create one first.\",\n    \"desktop.notInitiator\": \"You did not create this connection, so there is no answer for you to apply.\",\n    \"desktop.decryptFailed\": \"A message could not be decrypted and was discarded.\",\n    \"desktop.badMessageFormat\": \"A malformed frame arrived and was discarded.\",\n    \"desktop.notSentNotReady\": \"Message not sent: the secure channel is not ready. Wait for verification to finish, or reconnect.\",\n    \"desktop.micDenied\": \"Microphone access was denied.\",\n    \"desktop.noChannelWait\": \"No open secure channel - wait for the connection to establish.\",\n    \"desktop.sasFailed\": \"Verification failed. A machine-in-the-middle may be present, so the connection was aborted.\",\n    \"desktop.sasOk\": \"Verification succeeded. This channel is authenticated end to end.\",\n    \"desktop.iceForgotten\": \"Saved servers forgotten. Using public ICE servers.\",\n    \"desktop.icePublic\": \"Using public ICE servers.\",\n    \"desktop.verificationInProgress\": \"Security verification is still running. Wait for it to finish.\",\n    \"desktop.fileGone\": \"This file is no longer available for download.\",\n    \"desktop.codeMismatch\": \"The verification codes do not match. Disconnecting for safety.\",\n    \"desktop.noLocalCode\": \"Verification failed: there is no locally derived code to compare against. Disconnecting for safety.\",\n    \"desktop.protocolViolation\": \"The peer claimed the code was confirmed before you confirmed it. Disconnecting for safety.\",\n    \"desktop.verificationRejected\": \"Verification rejected. The connection was aborted for safety.\",\n    \"secLevel.HIGH\": \"HIGH\",\n    \"secLevel.MEDIUM\": \"MEDIUM\",\n    \"secLevel.LOW\": \"LOW\",\n    \"desktop.rerun\": \"Re-run\",\n    \"desktop.ice.customDesc\": \"Up to {max} servers, one URL per line or JSON.\",\n    \"desktop.ice.persistDesc\": \"Stored locally on this device. Leave off to use only for this session.\",\n    \"desktop.group.leaveNote\": \"The other members are told you left. Nothing about this group is kept on this device afterwards - there is no server holding a copy to rejoin from, so you would need a fresh invitation.\",\n    \"desktop.sec.ecdsaOk\": \"Peer key package signature verified during the handshake (ECDSA P-384 / SHA-384)\",\n    \"desktop.sec.ecdsaNone\": \"No completed handshake\",\n    \"desktop.sec.ecdhOk\": \"Session keys derived from an ephemeral ECDH P-384 exchange via HKDF-SHA-256\",\n    \"desktop.sec.ecdhNone\": \"No session keys derived\",\n    \"desktop.sec.encryptionOk\": \"AES-GCM encryption and decryption verified inside the core\",\n    \"desktop.sec.encryptionNa\": \"The AES-GCM self-test could not be run\",\n    \"desktop.sec.integrityOk\": \"Message integrity verified (AES-GCM authentication)\",\n    \"desktop.sec.integrityNa\": \"The integrity self-test could not be run\",\n    \"desktop.sec.pfsOk\": \"Double Ratchet active - every message has a key of its own\",\n    \"desktop.sec.pfsNa\": \"Not measured\",\n    \"desktop.sec.replayOk\": \"Ratchet message keys are destroyed once used, so a captured frame cannot be replayed\",\n    \"desktop.sec.replayNa\": \"Not measured\",\n    \"desktop.sec.dtlsPinned\": \"Peer DTLS fingerprint pinned: {fp}\",\n    \"desktop.sec.dtlsNone\": \"No remote DTLS fingerprint available\",\n    \"desktop.sec.sasBoth\": \"Both peers confirmed the out-of-band safety code\",\n    \"desktop.sec.sasIncomplete\": \"The safety code has not been confirmed by both peers\",\n    \"desktop.sec.metadataOk\": \"A dedicated metadata key was derived (HKDF metadata-protection-v4)\",\n    \"desktop.sec.metadataNone\": \"No metadata key\",\n    \"desktop.sec.coverOn\": \"Cover traffic active: random fake frames (32-128 B every 15-30 s) on the ratcheted channel\",\n    \"desktop.sec.coverOff\": \"The cover traffic generator is not running\",\n    \"desktop.sec.coverUnsupported\": \"Cover traffic needs a Double Ratchet session (the peer is on an older release)\",\n    \"desktop.tagline\": \"End-to-end freedom\",\n    \"desktop.callsNotHere\": \"Calls are not available in this build yet. Messages, files and group chats work as usual.\"\n};\n\nconst registry = globalThis.__SECUREBIT_I18N__ || (globalThis.__SECUREBIT_I18N__ = Object.create(null));\nregistry[\"en\"] = DICTIONARY;\n", "/**\n * Language selection and string lookup.\n *\n * Every locale is a real page at a real URL (/, /de/, ...), generated at build time,\n * because the app is client-rendered: a language that exists only as a runtime string\n * swap has no URL for a crawler to index. This module is the runtime half \u2014 it decides\n * which locale the current page is, and hands components their strings.\n *\n * The rule that matters: the URL wins over everything. Someone who opens /de/ gets\n * German even if they once chose English here, or a shared link would open in whatever\n * language the recipient happened to pick last, which makes links unshareable.\n */\n\nimport { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALE_META, CROSS_LOCALE_STRINGS } from './generated.js';\n// Side-effect import: loading the default locale's dictionary registers the strings\n// t() falls back to when a translation is missing a key. It is the one dictionary that\n// has to be present on every page, so it is the one that gets bundled.\nimport './dict/default.js';\n\nexport { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALE_META };\n\n/**\n * Loaded dictionaries, by locale code.\n *\n * On a global rather than in module scope, and that is the point. index.js exists twice\n * on a page: once bundled inside dist/app.js, and once as raw source, because the PWA\n * install prompt, the PWA manager and the update checker import it directly. Two module\n * instances mean two module-scoped registries, and the /ru/ dictionary loaded by the\n * page would have been invisible to the half of the app that needed it.\n *\n * A page loads its own dictionary through a <script type=\"module\"> that runs before the\n * bundles; every locale other than the default arrives that way. See scripts/build-i18n.js.\n */\nconst REGISTRY = globalThis.__SECUREBIT_I18N__ || (globalThis.__SECUREBIT_I18N__ = Object.create(null));\n\n/** The dictionary for a locale, or an empty one if that locale was never loaded. */\nfunction dictionary(code) {\n    return REGISTRY[code] || null;\n}\n\nconst STORAGE_KEY = 'securebit-locale';\n\n/** The locale a path belongs to, or null for the default locale at the root. */\nexport function localeFromPathname(pathname = '/') {\n    const segment = String(pathname).split('/')[1];\n    return SUPPORTED_LOCALES.includes(segment) && segment !== DEFAULT_LOCALE ? segment : null;\n}\n\n/**\n * Best match for a browser's language list. \"de-AT\" should get German if German is all\n * we have, so the base tag is tried after the full one, in the order the browser gave.\n */\nexport function localeFromLanguages(languages = []) {\n    for (const tag of languages) {\n        const lower = String(tag).toLowerCase();\n        const exact = SUPPORTED_LOCALES.find((code) => code.toLowerCase() === lower);\n        if (exact) return exact;\n        const base = lower.split('-')[0];\n        const partial = SUPPORTED_LOCALES.find((code) => code.toLowerCase().split('-')[0] === base);\n        if (partial) return partial;\n    }\n    return null;\n}\n\n/**\n * Which locale to render, given everything we know. Pure, so the precedence can be\n * tested without a browser: URL, then a previous explicit choice, then the browser's\n * languages, then the default.\n */\nexport function detectLocale({ pathname = '/', stored = null, languages = [] } = {}) {\n    const fromPath = localeFromPathname(pathname);\n    if (fromPath) return fromPath;\n\n    // The root path is the default locale's own page, not an absence of information \u2014\n    // redirecting away from it would break every link to the site's canonical URL.\n    if (isLocaleRoot(pathname)) return DEFAULT_LOCALE;\n\n    if (stored && SUPPORTED_LOCALES.includes(stored)) return stored;\n    return localeFromLanguages(languages) || DEFAULT_LOCALE;\n}\n\n/** True for \"/\" and \"/index.html\" \u2014 the pages the default locale is served from. */\nfunction isLocaleRoot(pathname) {\n    return pathname === '/' || pathname === '/index.html';\n}\n\n/**\n * The URL of the current page in another locale. Switching keeps you where you are\n * rather than dumping you back on the home page.\n */\nexport function localeHref(code, pathname = '/') {\n    const current = localeFromPathname(pathname);\n    const rest = current ? String(pathname).slice(current.length + 1) : String(pathname);\n    const tail = rest.replace(/^\\/+/, '');\n    return code === DEFAULT_LOCALE ? `/${tail}` : `/${code}/${tail}`;\n}\n\n/** Remember an explicit choice. Storage can throw in private mode; a preference is not worth an exception. */\nexport function rememberLocale(code) {\n    try {\n        localStorage.setItem(STORAGE_KEY, code);\n    } catch (_) {\n        // Private mode or blocked storage: the URL still carries the choice.\n    }\n}\n\nexport function storedLocale() {\n    try {\n        return localStorage.getItem(STORAGE_KEY);\n    } catch (_) {\n        return null;\n    }\n}\n\n/**\n * The locale of the page as actually loaded. Resolved once: it cannot change without a\n * navigation, and t() is called dozens of times per render \u2014 re-reading localStorage\n * on each of those would be a synchronous storage hit per string.\n */\nlet resolvedLocale = null;\nexport function currentLocale() {\n    if (resolvedLocale) return resolvedLocale;\n    // A window may exist without the parts this needs: test harnesses and workers both\n    // provide partial shims. Reading through them blindly threw and took the caller with\n    // it, which for t() means a missing string becomes a crash.\n    const w = typeof window === 'undefined' ? null : window;\n    if (!w || !w.location) return DEFAULT_LOCALE;\n    resolvedLocale = detectLocale({\n        pathname: w.location.pathname || '/',\n        stored: storedLocale(),\n        languages: w.navigator?.languages || [],\n    });\n    return resolvedLocale;\n}\n\n/**\n * Writing direction of a locale. Arabic, Hebrew, Persian and Urdu read right to left,\n * and the whole layout \u2014 not just the text \u2014 has to follow: an avatar that sits before\n * a name in English sits after it in Arabic.\n *\n * The generated page already carries dir on <html>, so nothing here needs to apply it\n * at load. This exists for the handful of decisions CSS cannot express on its own \u2014\n * which way an arrow points, which edge a drawer slides in from.\n */\nexport function localeDir(code = currentLocale()) {\n    return LOCALE_META[code]?.dir === 'rtl' ? 'rtl' : 'ltr';\n}\n\nexport function isRTL(code = currentLocale()) {\n    return localeDir(code) === 'rtl';\n}\n\n/**\n * +1 or -1, for arithmetic on a horizontal offset: a swipe threshold, a translate, the\n * side a sheet enters from. `x * direction()` is the whole of what a mirrored gesture\n * needs, and it reads better than an `isRTL ? -x : x` at every call site.\n */\nexport function direction(code = currentLocale()) {\n    return isRTL(code) ? -1 : 1;\n}\n\n/**\n * Force a fragment to be laid out left to right inside right-to-left text.\n *\n * Bidi reordering is done by the browser on the rendered text, and it mangles exactly\n * the strings this app is made of: a key fingerprint, a base64 session descriptor, a\n * URL, a version number. In an RTL paragraph \"a1b2:c3d4\" can come out as \"c3d4:a1b2\" \u2014\n * the characters are all there, so nothing looks broken, and the reader compares the\n * wrong thing against their peer's screen. Any element showing machine text gets these\n * props.\n */\nexport const LTR_TEXT = { dir: 'ltr', style: { unicodeBidi: 'isolate', textAlign: 'start' } };\n\n/**\n * The suggestion is an offer, and an offer that keeps coming back after it was turned\n * down is an ad. One dismissal is remembered for good; storage can be unavailable, in\n * which case the bar simply comes back \u2014 a worse experience, never a broken one.\n */\nconst SUGGEST_KEY = 'securebit-locale-suggest-dismissed';\n\nexport function localeSuggestionDismissed() {\n    try {\n        return localStorage.getItem(SUGGEST_KEY) === '1';\n    } catch (_) {\n        return false;\n    }\n}\n\nexport function dismissLocaleSuggestion() {\n    try {\n        localStorage.setItem(SUGGEST_KEY, '1');\n    } catch (_) {\n        // Nothing to do: the bar reappears next visit, which is not worth an exception.\n    }\n}\n\n/**\n * A locale the visitor would probably rather read, when it is not the one they are on.\n * Used to offer a link, never to redirect: an automatic redirect sends Googlebot \u2014\n * which crawls from one place \u2014 to a single locale and leaves the rest unindexed.\n */\nexport function suggestedLocale({ pathname = '/', languages = [], stored = null } = {}) {\n    const shown = localeFromPathname(pathname) || DEFAULT_LOCALE;\n    // An explicit past choice outranks the browser's list: someone who picked a\n    // language once meant it, and it is exactly when their page does not match that\n    // choice that the offer is worth making.\n    const preferred = (SUPPORTED_LOCALES.includes(stored) && stored) || localeFromLanguages(languages);\n    return preferred && preferred !== shown ? preferred : null;\n}\n\n/**\n * A list-valued string, for the handful of places where the copy is a set of short\n * labels rather than a sentence \u2014 a language may need a different number of them, so\n * the count belongs to the translation, not to the component.\n */\nexport function tList(key, locale = currentLocale()) {\n    const value = dictionary(locale)?.[key] ?? dictionary(DEFAULT_LOCALE)?.[key];\n    return Array.isArray(value) ? value : [];\n}\n\n/**\n * The rows a language switcher renders. Built here rather than in the component so the\n * URLs can be tested without a DOM, and so the switcher stays what it must be: a list\n * of real links. A control that swaps strings in place would leave every language on\n * one URL, which is the thing this whole arrangement exists to avoid.\n */\nexport function languageLinks({ pathname = '/', active = DEFAULT_LOCALE } = {}) {\n    return SUPPORTED_LOCALES.map((code) => ({\n        code,\n        href: localeHref(code, pathname),\n        hrefLang: LOCALE_META[code]?.htmlLang || code,\n        // Listed in its own language: someone looking for German is looking for\n        // \"Deutsch\", not for the English word for it.\n        label: LOCALE_META[code]?.nativeName || code,\n        // Short code for the collapsed switcher.\n        abbr: LOCALE_META[code]?.abbr || code.toUpperCase(),\n        // The row renders a name in its own script, so it needs its own direction:\n        // \"\u0627\u0644\u0639\u0631\u0628\u064A\u0629\" laid out left-to-right is the word spelled backwards.\n        dir: LOCALE_META[code]?.dir || 'ltr',\n        isCurrent: code === active,\n    }));\n}\n\n/**\n * Look up a string. Falls back to the default locale and then to the key itself, so a\n * missing translation shows English rather than blank UI.\n */\nexport function t(key, vars, locale = currentLocale()) {\n    const template =\n        dictionary(locale)?.[key] ??\n        // Asked for a locale whose dictionary is not on this page. Only the language\n        // suggestion does that, and only for the handful of keys it needs, so those\n        // ship for every locale; anything else falls through to the default below.\n        CROSS_LOCALE_STRINGS[locale]?.[key] ??\n        dictionary(DEFAULT_LOCALE)?.[key] ??\n        key;\n    if (!vars) return template;\n    return String(template).replace(/\\{(\\w+)\\}/g, (match, name) =>\n        Object.prototype.hasOwnProperty.call(vars, name) ? String(vars[name]) : match\n    );\n}\n", "import { t } from '../i18n/index.js';\n// ============================================\n// SECURE FILE TRANSFER CONTEXT\n// ============================================\nclass SecureFileTransferContext {\n    static #instance = null;\n    static #contextKey = Symbol('SecureFileTransferContext');\n    \n    static getInstance() {\n        if (!this.#instance) {\n            this.#instance = new SecureFileTransferContext();\n        }\n        return this.#instance;\n    }\n    \n    #fileTransferSystem = null;\n    #active = false;\n    #securityLevel = 'high';\n    \n    setFileTransferSystem(system) {\n        if (!(system instanceof EnhancedSecureFileTransfer)) {\n            throw new Error('Invalid file transfer system instance');\n        }\n        this.#fileTransferSystem = system;\n        this.#active = true;\n    }\n    \n    getFileTransferSystem() {\n        return this.#fileTransferSystem;\n    }\n    \n    isActive() {\n        return this.#active && this.#fileTransferSystem !== null;\n    }\n    \n    deactivate() {\n        this.#active = false;\n        this.#fileTransferSystem = null;\n    }\n    \n    getSecurityLevel() {\n        return this.#securityLevel;\n    }\n    \n    setSecurityLevel(level) {\n        if (['low', 'medium', 'high'].includes(level)) {\n            this.#securityLevel = level;\n        }\n    }\n}\n\n// ============================================\n// SECURITY ERROR HANDLER\n// ============================================\n\nclass SecurityErrorHandler {\n    static #allowedErrors = new Set([\n        'File size exceeds maximum limit',\n        'Unsupported file type',\n        'Transfer timeout',\n        'Connection lost',\n        'Invalid file data',\n        'File transfer failed',\n        'Transfer cancelled',\n        'Network error',\n        'File not found',\n        'Permission denied'\n    ]);\n    \n    static sanitizeError(error) {\n        const message = error.message || error;\n\n        for (const allowed of this.#allowedErrors) {\n            if (message.includes(allowed)) {\n                return allowed;\n            }\n        }\n\n        console.error('\uD83D\uDD12 Internal file transfer error:', {\n            message: error.message,\n            stack: error.stack,\n            timestamp: new Date().toISOString()\n        });\n\n        return 'File transfer failed';\n    }\n    \n    static logSecurityEvent(event, details = {}) {\n        console.warn('\uD83D\uDD12 Security event:', {\n            event,\n            timestamp: new Date().toISOString(),\n            ...details\n        });\n    }\n}\n\n// ============================================\n// FILE METADATA SIGNATURE SYSTEM\n// ============================================\n\nclass FileMetadataSigner {\n    static async signFileMetadata(metadata, privateKey) {\n        try {\n            const encoder = new TextEncoder();\n            const data = encoder.encode(JSON.stringify({\n                fileId: metadata.fileId,\n                fileName: metadata.fileName,\n                fileSize: metadata.fileSize,\n                fileHash: metadata.fileHash,\n                timestamp: metadata.timestamp,\n                version: metadata.version || '2.0'\n            }));\n            \n            const signature = await crypto.subtle.sign(\n                'RSASSA-PKCS1-v1_5',\n                privateKey,\n                data\n            );\n            \n            return Array.from(new Uint8Array(signature));\n        } catch (error) {\n            SecurityErrorHandler.logSecurityEvent('signature_failed', { error: error.message });\n            throw new Error('Failed to sign file metadata');\n        }\n    }\n    \n    static async verifyFileMetadata(metadata, signature, publicKey) {\n        try {\n            const encoder = new TextEncoder();\n            const data = encoder.encode(JSON.stringify({\n                fileId: metadata.fileId,\n                fileName: metadata.fileName,\n                fileSize: metadata.fileSize,\n                fileHash: metadata.fileHash,\n                timestamp: metadata.timestamp,\n                version: metadata.version || '2.0'\n            }));\n            \n            const signatureBuffer = new Uint8Array(signature);\n            \n            const isValid = await crypto.subtle.verify(\n                'RSASSA-PKCS1-v1_5',\n                publicKey,\n                signatureBuffer,\n                data\n            );\n            \n            if (!isValid) {\n                SecurityErrorHandler.logSecurityEvent('invalid_signature', { fileId: metadata.fileId });\n            }\n            \n            return isValid;\n        } catch (error) {\n            SecurityErrorHandler.logSecurityEvent('verification_failed', { error: error.message });\n            return false;\n        }\n    }\n}\n\n// ============================================\n// \u0422\u041E\u0427\u041D\u042B\u0415 \u0418\u0421\u041F\u0420\u0410\u0412\u041B\u0415\u041D\u0418\u042F \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u041E\u0421\u0422\u0418\n// ============================================\n\nclass MessageSizeValidator {\n    static MAX_MESSAGE_SIZE = 1024 * 1024; // 1MB\n    \n    static isMessageSizeValid(message) {\n        const messageString = JSON.stringify(message);\n        const sizeInBytes = new Blob([messageString]).size;\n        \n        if (sizeInBytes > this.MAX_MESSAGE_SIZE) {\n            SecurityErrorHandler.logSecurityEvent('message_too_large', {\n                size: sizeInBytes,\n                limit: this.MAX_MESSAGE_SIZE\n            });\n            throw new Error('Message too large');\n        }\n        \n        return true;\n    }\n}\n\nclass AtomicOperations {\n    constructor() {\n        this.locks = new Map();\n    }\n    \n    async withLock(key, operation) {\n        // Serialize all operations sharing the same key. Must loop (not a single\n        // `if`): when 3+ callers queue on one key they all await the same in-flight\n        // lock, so after it resolves we have to re-check before claiming the slot \u2014\n        // otherwise multiple operations run concurrently and break atomicity.\n        while (this.locks.has(key)) {\n            await this.locks.get(key);\n        }\n\n        let releaseLock;\n        const lockPromise = new Promise(resolve => { releaseLock = resolve; });\n        this.locks.set(key, lockPromise);\n\n        try {\n            return await operation();\n        } finally {\n            this.locks.delete(key);\n            releaseLock();\n        }\n    }\n}\n\n// Rate limiting \u0434\u043B\u044F \u0437\u0430\u0449\u0438\u0442\u044B \u043E\u0442 \u0441\u043F\u0430\u043C\u0430\nclass RateLimiter {\n    constructor(maxRequests, windowMs) {\n        this.maxRequests = maxRequests;\n        this.windowMs = windowMs;\n        this.requests = new Map();\n    }\n    \n    isAllowed(identifier) {\n        const now = Date.now();\n        const windowStart = now - this.windowMs;\n        \n        if (!this.requests.has(identifier)) {\n            this.requests.set(identifier, []);\n        }\n        \n        const userRequests = this.requests.get(identifier);\n        \n        const validRequests = userRequests.filter(time => time > windowStart);\n        this.requests.set(identifier, validRequests);\n        \n        if (validRequests.length >= this.maxRequests) {\n            SecurityErrorHandler.logSecurityEvent('rate_limit_exceeded', {\n                identifier,\n                requestCount: validRequests.length,\n                limit: this.maxRequests\n            });\n            return false;\n        }\n        \n        validRequests.push(now);\n        return true;\n    }\n}\n\nclass SecureMemoryManager {\n    static secureWipe(buffer) {\n        if (buffer instanceof ArrayBuffer) {\n            const view = new Uint8Array(buffer);\n            crypto.getRandomValues(view);\n        } else if (buffer instanceof Uint8Array) {\n            crypto.getRandomValues(buffer);\n        }\n    }\n    \n    static secureDelete(obj, prop) {\n        if (obj[prop]) {\n            this.secureWipe(obj[prop]);\n            delete obj[prop];\n        }\n    }\n}\n\nclass EnhancedSecureFileTransfer {\n    constructor(webrtcManager, onProgress, onComplete, onError, onFileReceived, onIncomingFileRequest) {\n        this.webrtcManager = webrtcManager;\n        this.onProgress = onProgress;\n        this.onComplete = onComplete;\n        this.onError = onError;\n        this.onFileReceived = onFileReceived;\n        this.onIncomingFileRequest = onIncomingFileRequest;\n        \n        // Validate webrtcManager\n        if (!webrtcManager) {\n            throw new Error('webrtcManager is required for EnhancedSecureFileTransfer');\n        }\n        \n        SecureFileTransferContext.getInstance().setFileTransferSystem(this);\n        \n        this.atomicOps = new AtomicOperations();\n        this.rateLimiter = new RateLimiter(10, 60000);\n\n        this.signingKey = null;\n        this.verificationKey = null;\n        \n        // Transfer settings\n        // NOTE: chunks are AES-GCM encrypted (+16-byte tag) and Base64-encoded\n        // before being wrapped in a JSON `file_chunk` message. Base64 inflates the\n        // payload by ~4/3, so the actual bytes handed to RTCDataChannel.send() are\n        // much larger than CHUNK_SIZE. The SCTP interop floor for a single WebRTC\n        // message is 64 KB (65536 bytes) \u2014 Safari and any peer whose SDP omits\n        // `a=max-message-size` enforce exactly this limit and will throw on larger\n        // sends. A 16 KB chunk yields a ~22 KB on-wire message, safely under that\n        // floor on every browser. (64 KB chunks produced ~87 KB messages, which\n        // silently failed to send and broke transfers cross-browser.)\n        this.CHUNK_SIZE = 16 * 1024; // 16 KB raw -> ~22 KB on the wire (SCTP-safe)\n        // Inbound chunks may legitimately be larger (e.g. an older peer that still\n        // sends 64 KB chunks), so validate received metadata against this ceiling\n        // rather than our own outbound CHUNK_SIZE.\n        this.MAX_RECEIVE_CHUNK_SIZE = 64 * 1024;\n        this.MAX_FILE_SIZE = 100 * 1024 * 1024; // 100 MB limit\n        this.MAX_CONCURRENT_TRANSFERS = 3;\n        this.CHUNK_TIMEOUT = 30000; // 30 seconds per chunk\n        this.RETRY_ATTEMPTS = 3;\n\n        this.FILE_TYPE_RESTRICTIONS = {\n            pdf: {\n                extensions: ['.pdf'],\n                mimeTypes: ['application/pdf', 'application/x-pdf', 'application/acrobat'],\n                maxSize: 50 * 1024 * 1024,\n                category: 'PDF',\n                description: 'PDF'\n            },\n\n            text: {\n                extensions: ['.txt'],\n                mimeTypes: ['text/plain', 'application/txt'],\n                maxSize: 10 * 1024 * 1024,\n                category: t('fileType.text'),\n                description: 'TXT'\n            },\n\n            images: {\n                extensions: ['.jpg', '.jpeg', '.png', '.gif', '.webp', '.bmp', '.ico'],\n                mimeTypes: [\n                    'image/jpeg',\n                    'image/jpg',\n                    'image/pjpeg',\n                    'image/png',\n                    'image/gif',\n                    'image/webp',\n                    'image/bmp',\n                    'image/x-windows-bmp',\n                    'image/x-icon',\n                    'image/vnd.microsoft.icon'\n                ],\n                maxSize: 25 * 1024 * 1024, // 25 MB\n                category: t('fileType.images'),\n                description: 'JPG, JPEG, PNG, GIF, WEBP, BMP, ICO'\n            },\n\n            archives: {\n                extensions: ['.zip'],\n                mimeTypes: [\n                    'application/zip',\n                    'application/x-zip',\n                    'application/x-zip-compressed',\n                    'multipart/x-zip'\n                ],\n                maxSize: 100 * 1024 * 1024, // 100 MB\n                category: t('fileType.archives'),\n                description: 'ZIP'\n            },\n\n            // Encrypted voice messages. Recorded in-browser via MediaRecorder and\n            // sent as a normal chunked+AES-GCM transfer, so they inherit the exact\n            // same end-to-end security as files. The app normalises the mime to a\n            // bare `audio/webm` (or `audio/mp4` on Safari) before sending so the\n            // codec-suffixed MediaRecorder type still matches this allow-list.\n            voice: {\n                extensions: ['.webm', '.ogg', '.oga', '.opus', '.m4a', '.mp4', '.mp3', '.wav'],\n                mimeTypes: [\n                    'audio/webm',\n                    'audio/ogg',\n                    'audio/opus',\n                    'audio/mp4',\n                    'audio/mpeg',\n                    'audio/mp3',\n                    'audio/wav',\n                    'audio/x-m4a',\n                    'audio/aac'\n                ],\n                maxSize: 20 * 1024 * 1024, // 20 MB (well beyond any sane voice note)\n                category: 'Voice',\n                description: t('fileType.voice')\n            }\n        };\n        this.BLOCKED_EXTENSIONS = new Set([\n            '.exe', '.bat', '.cmd', '.sh', '.js', '.msi', '.dmg', '.app',\n            '.jar', '.scr', '.ps1', '.vbs', '.html', '.svg'\n        ]);\n        // Generic MIME types browsers emit when they cannot determine a real one.\n        // Treated as acceptable for any allowed extension.\n        this._genericMimeTypes = new Set(['application/octet-stream', 'application/binary']);\n        // Union of every recognised allowed MIME type (incl. cross-OS aliases),\n        // used to keep MIME advisory rather than a strict per-type gate.\n        this._allowedMimeTypes = new Set();\n        for (const typeConfig of Object.values(this.FILE_TYPE_RESTRICTIONS)) {\n            for (const mime of typeConfig.mimeTypes) this._allowedMimeTypes.add(mime);\n        }\n        \n        // Active transfers tracking\n        this.activeTransfers = new Map(); // fileId -> transfer state\n        this.receivingTransfers = new Map(); // fileId -> receiving state\n        this.pendingIncomingTransfers = new Map(); // fileId -> validated metadata awaiting consent\n        this.transferQueue = []; // Queue for pending transfers\n        this.pendingChunks = new Map();\n        this.incomingOfferLimiter = new RateLimiter(5, 60000);\n        // Chunks are 16 KB, so a 100 MB file is ~6400 chunks. The previous caps\n        // (240 aggregate / 120 per-transfer per minute) throttled to ~64 KB/s and\n        // KILLED any file larger than ~3.8 MB mid-transfer. Size the limits to the\n        // worst-case file plus retransmission headroom so legitimate transfers are\n        // never starved, while still bounding a flooding peer.\n        this.incomingChunkLimiter = new RateLimiter(60000, 60000); // aggregate ceiling (~16 MB/s)\n        this.incomingTransferChunkLimiters = new Map();\n        this.MAX_INCOMING_CHUNKS_PER_TRANSFER_PER_MINUTE = 30000; // per transfer (~8 MB/s)\n        this.MAX_PENDING_INCOMING_TRANSFERS = 3;\n\n        // Voice notes are the one transfer accepted without a consent prompt, and\n        // `isVoice` is set by the SENDER (deliberately outside the signed\n        // fileHash, since it is presentation metadata). Anything that skips the\n        // prompt therefore has to qualify on its own properties rather than on\n        // the sender's assertion \u2014 see rejectVoiceAutoAcceptReason().\n        // 4 MB is ~5 minutes of Opus at 96 kbps \u2014 well past any real voice note,\n        // and a twentieth of what the `voice` type's 20 MB ceiling used to allow.\n        this.MAX_AUTO_ACCEPT_VOICE_SIZE = 4 * 1024 * 1024;\n        // A whole session's worth of auto-accepted audio. Past this the peer can\n        // still send voice notes, they just need the ordinary consent card.\n        this.MAX_AUTO_ACCEPT_VOICE_SESSION_BYTES = 64 * 1024 * 1024;\n        this.autoAcceptedVoiceBytes = 0;\n        \n        // Session key derivation\n        this.sessionKeys = new Map(); // fileId -> derived session key\n        \n        // Security\n        this.processedChunks = new Set(); // Prevent replay attacks\n        this.transferNonces = new Map(); // fileId -> current nonce counter\n        this.receivedFileBuffers = new Map(); // fileId -> { buffer:ArrayBuffer, type:string, name:string, size:number }\n        this.MAX_RETAINED_RECEIVED_FILE_BUFFERS = 3;\n\n        this.setupFileMessageHandlers();\n\n        if (this.webrtcManager) {\n            this.webrtcManager.fileTransferSystem = this;\n        }\n    }\n\n    // ============================================\n    // FILE TYPE VALIDATION SYSTEM\n    // ============================================\n\n    getFileType(file) {\n        const fileName = String(file?.name || '').toLowerCase();\n        const extensionIndex = fileName.lastIndexOf('.');\n        const fileExtension = extensionIndex >= 0 ? fileName.substring(extensionIndex) : '';\n        const mimeType = String(file?.type || '').toLowerCase();\n\n        // The extension allow-list (plus BLOCKED_EXTENSIONS) is the security\n        // boundary. MIME is only an advisory signal: it is client-supplied,\n        // varies across browsers/OSes, and is frequently empty. We accept an\n        // allowed extension when the MIME is absent, generic, or belongs to any\n        // recognised allowed type, but still reject a blatantly foreign MIME\n        // (e.g. an executable MIME on a \".png\") as a spoofing signal.\n        for (const [typeKey, typeConfig] of Object.entries(this.FILE_TYPE_RESTRICTIONS)) {\n            const extensionAllowed = typeConfig.extensions.includes(fileExtension);\n            if (!extensionAllowed) continue;\n            const mimeAcceptable = !mimeType\n                || this._genericMimeTypes.has(mimeType)\n                || this._allowedMimeTypes.has(mimeType);\n            if (mimeAcceptable) {\n                return {\n                    type: typeKey,\n                    category: typeConfig.category,\n                    description: typeConfig.description,\n                    maxSize: typeConfig.maxSize,\n                    allowed: true,\n                    extension: fileExtension,\n                    mimeType\n                };\n            }\n        }\n\n        return {\n            type: 'blocked',\n            category: t('fileType.unsupported'),\n            description: 'Allowed: JPG, JPEG, PNG, GIF, WEBP, BMP, ICO, PDF, TXT, ZIP',\n            maxSize: this.MAX_FILE_SIZE,\n            allowed: false,\n            extension: fileExtension,\n            mimeType\n        };\n    }\n\n    validateFile(file) {\n        const fileType = this.getFileType(file);\n        const errors = [];\n        const fileName = String(file?.name || '');\n        const lowerName = fileName.toLowerCase();\n        const extensionIndex = lowerName.lastIndexOf('.');\n        const fileExtension = extensionIndex >= 0 ? lowerName.substring(extensionIndex) : '';\n\n        if (this.BLOCKED_EXTENSIONS.has(fileExtension)) {\n            errors.push(`File rejected: ${fileExtension} files are not allowed for security reasons.`);\n        }\n\n        if (file.size > fileType.maxSize) {\n            errors.push(`File size (${this.formatFileSize(file.size)}) exceeds maximum allowed for ${fileType.category} (${this.formatFileSize(fileType.maxSize)})`);\n        }\n\n        if (!fileType.allowed && !this.BLOCKED_EXTENSIONS.has(fileExtension)) {\n            errors.push(`File rejected: unsupported file type. Supported types: ${fileType.description}`);\n        }\n\n        if (file.size > this.MAX_FILE_SIZE) {\n            errors.push(`File size (${this.formatFileSize(file.size)}) exceeds general limit (${this.formatFileSize(this.MAX_FILE_SIZE)})`);\n        }\n        \n        return {\n            isValid: errors.length === 0,\n            errors: errors,\n            fileType: fileType,\n            fileSize: file.size,\n            formattedSize: this.formatFileSize(file.size)\n        };\n    }\n\n    normalizeDisplayFileName(fileName) {\n        return String(fileName || '')\n            .normalize('NFKC')\n            .replace(/[\\u0000-\\u001F\\u007F]/g, '')\n            .replace(/[\\\\/]+/g, '_')\n            .trim()\n            .slice(0, 255);\n    }\n\n    validateIncomingMetadata(metadata) {\n        const errors = [];\n        if (!metadata || typeof metadata !== 'object') errors.push('Invalid file transfer metadata');\n        if (!metadata?.fileId || typeof metadata.fileId !== 'string') errors.push('Invalid file id');\n        if (!Number.isSafeInteger(metadata?.fileSize) || metadata.fileSize <= 0) errors.push('Invalid file size');\n        if (!Number.isSafeInteger(metadata?.totalChunks) || metadata.totalChunks <= 0) errors.push('Invalid chunk count');\n        if (!Number.isSafeInteger(metadata?.chunkSize) || metadata.chunkSize <= 0 || metadata.chunkSize > this.MAX_RECEIVE_CHUNK_SIZE) errors.push('Invalid chunk size');\n        if (!Array.isArray(metadata?.salt) || metadata.salt.length !== 32) errors.push('Invalid salt');\n\n        const rawName = typeof metadata?.fileName === 'string' ? metadata.fileName : '';\n        const displayName = this.normalizeDisplayFileName(rawName);\n        const hasDangerousName =\n            !rawName ||\n            rawName !== rawName.trim() ||\n            /[\\u0000-\\u001F\\u007F]/.test(rawName) ||\n            /[\\\\/]/.test(rawName) ||\n            rawName === '.' ||\n            rawName === '..' ||\n            displayName.length === 0;\n        if (hasDangerousName) errors.push('Dangerous file name');\n\n        if (errors.length === 0) {\n            const validation = this.validateFile({\n                name: displayName,\n                size: metadata.fileSize,\n                type: metadata.fileType || 'application/octet-stream'\n            });\n            if (!validation.isValid) errors.push(...validation.errors);\n        }\n\n        // A transfer only keeps its consent-free voice status if it actually looks\n        // like a voice note. Otherwise it stays a normal file and goes through the\n        // consent card \u2014 the transfer is not rejected, it just loses the shortcut.\n        const claimsVoice = !!metadata?.isVoice;\n        const voiceRejection = claimsVoice ? this.rejectVoiceAutoAcceptReason(metadata) : null;\n\n        return {\n            isValid: errors.length === 0,\n            errors,\n            displayName,\n            isVoice: claimsVoice && !voiceRejection,\n            voiceRejection\n        };\n    }\n\n    /**\n     * Why a transfer claiming to be a voice note may not skip the consent card.\n     * Returns null when it may. The generic MIME types that validateFile accepts\n     * for ordinary uploads (application/octet-stream and friends) are explicitly\n     * NOT enough here: they are what lets an arbitrary blob wear a `.mp4` name.\n     */\n    rejectVoiceAutoAcceptReason(metadata) {\n        const mimeType = String(metadata?.fileType || '').toLowerCase();\n        const size = metadata?.fileSize;\n\n        if (!mimeType.startsWith('audio/')) {\n            return `not an audio MIME type (${mimeType || 'absent'})`;\n        }\n        if (!this.FILE_TYPE_RESTRICTIONS.voice.mimeTypes.includes(mimeType)) {\n            return `unsupported audio MIME type (${mimeType})`;\n        }\n        if (!Number.isSafeInteger(size) || size <= 0 || size > this.MAX_AUTO_ACCEPT_VOICE_SIZE) {\n            return `too large to auto-accept (${this.formatFileSize(size || 0)} > ${this.formatFileSize(this.MAX_AUTO_ACCEPT_VOICE_SIZE)})`;\n        }\n        if (this.autoAcceptedVoiceBytes + size > this.MAX_AUTO_ACCEPT_VOICE_SESSION_BYTES) {\n            return 'session auto-accept budget for voice notes is exhausted';\n        }\n        return null;\n    }\n\n    formatFileSize(bytes) {\n        if (bytes === 0) return '0 B';\n        const k = 1024;\n        const sizes = ['B', 'KB', 'MB', 'GB'];\n        const i = Math.floor(Math.log(bytes) / Math.log(k));\n        return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];\n    }\n\n    getSupportedFileTypes() {\n        const supportedTypes = {};\n        \n        for (const [typeKey, typeConfig] of Object.entries(this.FILE_TYPE_RESTRICTIONS)) {\n            supportedTypes[typeKey] = {\n                category: typeConfig.category,\n                description: typeConfig.description,\n                extensions: typeConfig.extensions,\n                maxSize: this.formatFileSize(typeConfig.maxSize),\n                maxSizeBytes: typeConfig.maxSize\n            };\n        }\n        \n        return supportedTypes;\n    }\n\n    getFileTypeInfo() {\n        return {\n            supportedTypes: this.getSupportedFileTypes(),\n            generalMaxSize: this.formatFileSize(this.MAX_FILE_SIZE),\n            generalMaxSizeBytes: this.MAX_FILE_SIZE,\n            restrictions: this.FILE_TYPE_RESTRICTIONS\n        };\n    }\n\n    // ============================================\n    // ENCODING HELPERS (Base64 for efficient transport)\n    // ============================================\n    arrayBufferToBase64(buffer) {\n        const bytes = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer);\n        let binary = '';\n        const len = bytes.byteLength;\n        for (let i = 0; i < len; i++) {\n            binary += String.fromCharCode(bytes[i]);\n        }\n        return btoa(binary);\n    }\n\n    base64ToUint8Array(base64) {\n        const binaryString = atob(base64);\n        const len = binaryString.length;\n        const bytes = new Uint8Array(len);\n        for (let i = 0; i < len; i++) {\n            bytes[i] = binaryString.charCodeAt(i);\n        }\n        return bytes;\n    }\n\n    // ============================================\n    // PUBLIC ACCESSORS FOR RECEIVED FILES\n    // ============================================\n    getReceivedFileMeta(fileId) {\n        const entry = this.receivedFileBuffers.get(fileId);\n        if (!entry) return null;\n        return { fileId, fileName: entry.name, fileSize: entry.size, mimeType: entry.type };\n    }\n\n    async getBlob(fileId) {\n        const entry = this.receivedFileBuffers.get(fileId);\n        if (!entry) return null;\n        return new Blob([entry.buffer], { type: entry.type });\n    }\n\n    async getObjectURL(fileId) {\n        const blob = await this.getBlob(fileId);\n        if (!blob) return null;\n        return URL.createObjectURL(blob);\n    }\n\n    revokeObjectURL(url) {\n        try { URL.revokeObjectURL(url); } catch (_) {}\n    }\n\n    setupFileMessageHandlers() {\n        if (!this.webrtcManager.dataChannel) {\n            const setupRetry = setInterval(() => {\n                if (this.webrtcManager.dataChannel) {\n                    clearInterval(setupRetry);\n                    this.setupMessageInterception();\n                }\n            }, 100);\n\n            setTimeout(() => {\n                clearInterval(setupRetry);\n            }, 5000);\n            \n            return;\n        }\n        \n        // \u0415\u0441\u043B\u0438 dataChannel \u0443\u0436\u0435 \u0433\u043E\u0442\u043E\u0432, \u0441\u0440\u0430\u0437\u0443 \u043D\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043C\n        this.setupMessageInterception();\n    }\n\n    setupMessageInterception() {\n        try {\n            if (!this.webrtcManager.dataChannel) {\n                return;\n            }\n\n            if (this.webrtcManager) {\n                this.webrtcManager.fileTransferSystem = this;\n            }\n\n            if (this.webrtcManager.dataChannel.onmessage) {\n                this.originalOnMessage = this.webrtcManager.dataChannel.onmessage;\n            }\n\n            this.webrtcManager.dataChannel.onmessage = async (event) => {\n                try {\n                    if (event.data.length > MessageSizeValidator.MAX_MESSAGE_SIZE) {\n                        console.warn('\uD83D\uDD12 Message too large, ignoring');\n                        SecurityErrorHandler.logSecurityEvent('oversized_message_blocked');\n                        return;\n                    }\n                    \n                    if (typeof event.data === 'string') {\n                        try {\n                            const parsed = JSON.parse(event.data);\n                            \n                            MessageSizeValidator.isMessageSizeValid(parsed);\n                            \n                            if (this.isFileTransferMessage(parsed)) {\n                                await this.handleFileMessage(parsed);\n                                return; \n                            }\n                        } catch (parseError) {\n                            if (parseError.message === 'Message too large') {\n                                return; \n                            }\n                        }\n                    }\n\n                    if (this.originalOnMessage) {\n                        return this.originalOnMessage.call(this.webrtcManager.dataChannel, event);\n                    }\n                } catch (error) {\n                    console.error('\u274C Error in file system message interception:', error);\n                    if (this.originalOnMessage) {\n                        return this.originalOnMessage.call(this.webrtcManager.dataChannel, event);\n                    }\n                }\n            };\n        } catch (error) {\n            console.error('\u274C Failed to set up message interception:', error);\n        }\n    }\n\n    isFileTransferMessage(message) {\n        if (!message || typeof message !== 'object' || !message.type) {\n            return false;\n        }\n        \n        const fileMessageTypes = [\n            'file_transfer_start',\n            'file_transfer_response',\n            'file_chunk',\n            'chunk_confirmation',\n            'file_chunk_request',\n            'file_transfer_complete',\n            'file_transfer_error'\n        ];\n        \n        return fileMessageTypes.includes(message.type);\n    }\n\n    async handleFileMessage(message) {\n        try {\n            if (!this.webrtcManager.fileTransferSystem) {\n                try {\n                    if (typeof this.webrtcManager.initializeFileTransfer === 'function') {\n                        this.webrtcManager.initializeFileTransfer();\n                        \n                        let attempts = 0;\n                        const maxAttempts = 50; \n                        while (!this.webrtcManager.fileTransferSystem && attempts < maxAttempts) {\n                            await new Promise(resolve => setTimeout(resolve, 100));\n                            attempts++;\n                        }\n                        \n                        if (!this.webrtcManager.fileTransferSystem) {\n                            throw new Error('File transfer system initialization timeout');\n                        }\n                    } else {\n                        throw new Error('initializeFileTransfer method not available');\n                    }\n                } catch (initError) {\n                    console.error('\u274C Failed to initialize file transfer system:', initError);\n                    if (message.fileId) {\n                        const errorMessage = {\n                            type: 'file_transfer_error',\n                            fileId: message.fileId,\n                            error: 'File transfer system not available',\n                            timestamp: Date.now()\n                        };\n                        await this.sendSecureMessage(errorMessage);\n                    }\n                    return;\n                }\n            }\n            \n            switch (message.type) {\n                case 'file_transfer_start':\n                    await this.handleFileTransferStart(message);\n                    break;\n                    \n                case 'file_transfer_response':\n                    this.handleTransferResponse(message);\n                    break;\n                    \n                case 'file_chunk':\n                    await this.handleFileChunk(message);\n                    break;\n                    \n                case 'chunk_confirmation':\n                    this.handleChunkConfirmation(message);\n                    break;\n\n                case 'file_chunk_request':\n                    await this.handleChunkRequest(message);\n                    break;\n\n                case 'file_transfer_complete':\n                    this.handleTransferComplete(message);\n                    break;\n                    \n                case 'file_transfer_error':\n                    this.handleTransferError(message);\n                    break;\n                    \n                default:\n                    console.warn('\u26A0\uFE0F Unknown file message type:', message.type);\n            }\n            \n        } catch (error) {\n            console.error('\u274C Error handling file message:', error);\n\n            if (message.fileId) {\n                const errorMessage = {\n                    type: 'file_transfer_error',\n                    fileId: message.fileId,\n                    error: error.message,\n                    timestamp: Date.now()\n                };\n                await this.sendSecureMessage(errorMessage);\n            }\n        }\n    }\n\n    // ============================================\n    // SIMPLIFIED KEY DERIVATION - USE SHARED DATA\n    // ============================================\n\n    async deriveFileSessionKey(fileId) {\n        try {\n            \n            if (!this.webrtcManager.keyFingerprint || !this.webrtcManager.sessionSalt) {\n                throw new Error('WebRTC session data not available');\n            }\n\n            const fileSalt = crypto.getRandomValues(new Uint8Array(32));\n\n            const encoder = new TextEncoder();\n            const fingerprintData = encoder.encode(this.webrtcManager.keyFingerprint);\n            const fileIdData = encoder.encode(fileId);\n\n            const sessionSaltArray = new Uint8Array(this.webrtcManager.sessionSalt);\n            const combinedSeed = new Uint8Array(\n                fingerprintData.length + \n                sessionSaltArray.length + \n                fileSalt.length + \n                fileIdData.length\n            );\n            \n            let offset = 0;\n            combinedSeed.set(fingerprintData, offset);\n            offset += fingerprintData.length;\n            combinedSeed.set(sessionSaltArray, offset);\n            offset += sessionSaltArray.length;\n            combinedSeed.set(fileSalt, offset);\n            offset += fileSalt.length;\n            combinedSeed.set(fileIdData, offset);\n\n            const keyMaterial = await crypto.subtle.digest('SHA-256', combinedSeed);\n\n            const fileSessionKey = await crypto.subtle.importKey(\n                'raw',\n                keyMaterial,\n                { name: 'AES-GCM' },\n                false,\n                ['encrypt', 'decrypt']\n            );\n\n            this.sessionKeys.set(fileId, {\n                key: fileSessionKey,\n                salt: Array.from(fileSalt),\n                created: Date.now()\n            });\n\n            return { key: fileSessionKey, salt: Array.from(fileSalt) };\n\n        } catch (error) {\n            console.error('\u274C Failed to derive file session key:', error);\n            throw error;\n        }\n    }\n\n    async deriveFileSessionKeyFromSalt(fileId, saltArray) {\n        try {\n            if (!saltArray || !Array.isArray(saltArray) || saltArray.length !== 32) {\n                throw new Error(`Invalid salt: ${saltArray?.length || 0} bytes`);\n            }\n            \n            if (!this.webrtcManager.keyFingerprint || !this.webrtcManager.sessionSalt) {\n                throw new Error('WebRTC session data not available');\n            }\n\n            const encoder = new TextEncoder();\n            const fingerprintData = encoder.encode(this.webrtcManager.keyFingerprint);\n            const fileIdData = encoder.encode(fileId);\n\n            const fileSalt = new Uint8Array(saltArray);\n            const sessionSaltArray = new Uint8Array(this.webrtcManager.sessionSalt);\n\n            const combinedSeed = new Uint8Array(\n                fingerprintData.length + \n                sessionSaltArray.length + \n                fileSalt.length + \n                fileIdData.length\n            );\n            \n            let offset = 0;\n            combinedSeed.set(fingerprintData, offset);\n            offset += fingerprintData.length;\n            combinedSeed.set(sessionSaltArray, offset);\n            offset += sessionSaltArray.length;\n            combinedSeed.set(fileSalt, offset);\n            offset += fileSalt.length;\n            combinedSeed.set(fileIdData, offset);\n\n            const keyMaterial = await crypto.subtle.digest('SHA-256', combinedSeed);\n\n            const fileSessionKey = await crypto.subtle.importKey(\n                'raw',\n                keyMaterial,\n                { name: 'AES-GCM' },\n                false,\n                ['encrypt', 'decrypt']\n            );\n\n            this.sessionKeys.set(fileId, {\n                key: fileSessionKey,\n                salt: saltArray,\n                created: Date.now()\n            });\n\n            return fileSessionKey;\n\n        } catch (error) {\n            console.error('\u274C Failed to derive session key from salt:', error);\n            throw error;\n        }\n    }\n\n    // ============================================\n    // FILE TRANSFER IMPLEMENTATION\n    // ============================================\n\n    // Emit a progress update to the app layer. `direction` is 'up' for the\n    // sender and 'down' for the receiver. `uiId` (sender only) lets the UI match\n    // the event to a locally-created bubble before sendFile() has resolved a\n    // fileId. Voice fields ride along so the receiver can render the waveform.\n    _emitTransferProgress(state, direction) {\n        if (typeof this.onProgress !== 'function' || !state) return;\n        const total = state.totalChunks || 0;\n        const done = direction === 'up' ? (state.sentChunks || 0) : (state.receivedCount || 0);\n        const progress = total > 0 ? Math.min(100, Math.round((done / total) * 100)) : 0;\n        try {\n            this.onProgress({\n                fileId: state.fileId,\n                uiId: state.uiId || null,\n                direction,\n                progress,\n                transferredChunks: done,\n                totalChunks: total,\n                isVoice: !!state.isVoice,\n                voice: state.voice || null\n            });\n        } catch (_) { /* progress is best-effort */ }\n    }\n\n    async sendFile(file, options = {}) {\n        try {\n            // Validate webrtcManager\n            if (!this.webrtcManager) {\n                throw new Error('WebRTC Manager not initialized');\n            }\n\n            const clientId = this.getClientIdentifier();\n            if (!this.rateLimiter.isAllowed(clientId)) {\n                SecurityErrorHandler.logSecurityEvent('rate_limit_exceeded', { clientId });\n                throw new Error('Rate limit exceeded. Please wait before sending another file.');\n            }\n\n            if (!file || !file.size) {\n                throw new Error('Invalid file object');\n            }\n\n            const validation = this.validateFile(file);\n            if (!validation.isValid) {\n                const errorMessage = validation.errors.join('. ');\n                throw new Error(errorMessage);\n            }\n\n            if (this.activeTransfers.size >= this.MAX_CONCURRENT_TRANSFERS) {\n                throw new Error('Maximum concurrent transfers reached');\n            }\n\n            // Generate unique file ID\n            const fileId = `file_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;\n            \n            // Calculate file hash for integrity verification\n            const fileHash = await this.calculateFileHash(file);\n            \n            // Derive session key for this file\n            const keyResult = await this.deriveFileSessionKey(fileId);\n            const sessionKey = keyResult.key;\n            const salt = keyResult.salt;\n            \n            // Create transfer state\n            const transferState = {\n                fileId: fileId,\n                file: file,\n                fileHash: fileHash,\n                sessionKey: sessionKey,\n                salt: salt, \n                totalChunks: Math.ceil(file.size / this.CHUNK_SIZE),\n                sentChunks: 0,\n                confirmedChunks: 0,\n                startTime: Date.now(),\n                status: 'preparing',\n                retryCount: 0,\n                lastChunkTime: Date.now(),\n                // Voice-message extras (undefined for ordinary files).\n                isVoice: !!(options && options.voice),\n                voice: (options && options.voice) ? options.voice : null,\n                uiId: (options && options.uiId) ? options.uiId : null\n            };\n\n            this.activeTransfers.set(fileId, transferState);\n            this.transferNonces.set(fileId, 0);\n\n            const consentPromise = new Promise((resolve, reject) => {\n                transferState.resolveConsent = resolve;\n                transferState.rejectConsent = reject;\n                transferState.consentTimeout = setTimeout(() => {\n                    transferState.consentTimeout = null;\n                    reject(new Error('Transfer timeout'));\n                }, 30000);\n            });\n\n            // Send file metadata first\n            await this.sendFileMetadata(transferState);\n            \n            // Wait for explicit receiver consent before any chunks are sent.\n            await consentPromise;\n            \n            await this.startChunkTransmission(transferState);\n            \n            return fileId;\n\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C File sending failed:', safeError);\n            if (this.onError) this.onError(safeError);\n            throw new Error(safeError);\n        }\n    }\n\n    async sendFileMetadata(transferState) {\n        try {\n            const metadata = {\n                type: 'file_transfer_start',\n                fileId: transferState.fileId,\n                fileName: transferState.file.name,\n                fileSize: transferState.file.size,\n                fileType: transferState.file.type || 'application/octet-stream',\n                fileHash: transferState.fileHash,\n                totalChunks: transferState.totalChunks,\n                chunkSize: this.CHUNK_SIZE,\n                salt: transferState.salt,\n                timestamp: Date.now(),\n                version: '2.0'\n            };\n\n            // Voice descriptor (duration + waveform peaks) travels as unsigned\n            // presentation metadata \u2014 the audio bytes themselves stay integrity-\n            // protected by the signed `fileHash`. `isVoice` lets the receiver\n            // auto-accept and render a voice bubble instead of a file card.\n            if (transferState.isVoice) {\n                metadata.isVoice = true;\n                if (transferState.voice) metadata.voice = transferState.voice;\n            }\n\n            if (this.signingKey) {\n                try {\n                    metadata.signature = await FileMetadataSigner.signFileMetadata(metadata, this.signingKey);\n                    console.log('\uD83D\uDD12 File metadata signed successfully');\n                } catch (signError) {\n                    SecurityErrorHandler.logSecurityEvent('signature_failed', { \n                        fileId: transferState.fileId, \n                        error: signError.message \n                    });\n                }\n            }\n\n            // Send metadata through secure channel\n            await this.sendSecureMessage(metadata);\n            \n            transferState.status = 'metadata_sent';\n\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to send file metadata:', safeError);\n            transferState.status = 'failed';\n            throw new Error(safeError);\n        }\n    }\n\n    async startChunkTransmission(transferState) {\n        try {\n            transferState.status = 'transmitting';\n            \n            const file = transferState.file;\n            const totalChunks = transferState.totalChunks;\n            \n            for (let chunkIndex = 0; chunkIndex < totalChunks; chunkIndex++) {\n                const start = chunkIndex * this.CHUNK_SIZE;\n                const end = Math.min(start + this.CHUNK_SIZE, file.size);\n                \n                // Read chunk from file\n                const chunkData = await this.readFileChunk(file, start, end);\n                \n                // Send chunk (\u0441 \u0443\u0447\u0451\u0442\u043E\u043C backpressure)\n                await this.sendFileChunk(transferState, chunkIndex, chunkData);\n                \n                // Update progress\n                transferState.sentChunks++;\n                const progress = Math.round((transferState.sentChunks / totalChunks) * 95) + 5; // 5-100%\n                this._emitTransferProgress(transferState, 'up');\n\n                await this.waitForBackpressure();\n            }\n            \n            transferState.status = 'waiting_confirmation';\n\n            // Keep the file + session key alive while the receiver may still be\n            // re-requesting missing chunks (e.g. after a connection blip). The\n            // sender is only torn down once the receiver confirms completion or\n            // after a long idle with no chunk requests/confirmations.\n            this._armSenderIdleTimeout(transferState);\n\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Chunk transmission failed:', safeError);\n            transferState.status = 'failed';\n            throw new Error(safeError);\n        }\n    }\n\n    // Resets a long idle timer; the sender stays available to retransmit missing\n    // chunks until the receiver finishes or this fires after sustained silence.\n    _armSenderIdleTimeout(transferState) {\n        const IDLE_MS = 180000; // 3 minutes with no activity from the receiver\n        if (transferState._idleTimeout) clearTimeout(transferState._idleTimeout);\n        transferState._idleTimeout = setTimeout(() => {\n            const state = this.activeTransfers.get(transferState.fileId);\n            if (state && state.status !== 'completed') {\n                this.cleanupTransfer(transferState.fileId);\n            }\n        }, IDLE_MS);\n    }\n\n    // Receiver asked us to re-send specific chunk indices (loss recovery / resume).\n    async handleChunkRequest(message) {\n        const transferState = this.activeTransfers.get(message?.fileId);\n        if (!transferState || !transferState.file) return;\n        const missing = Array.isArray(message.missing) ? message.missing : [];\n        if (missing.length === 0) return;\n\n        this._armSenderIdleTimeout(transferState);\n        transferState.status = 'transmitting';\n\n        const MAX_PER_REQUEST = 512;\n        const indices = missing.slice(0, MAX_PER_REQUEST);\n        for (const idx of indices) {\n            if (!Number.isInteger(idx) || idx < 0 || idx >= transferState.totalChunks) continue;\n            try {\n                const start = idx * this.CHUNK_SIZE;\n                const end = Math.min(start + this.CHUNK_SIZE, transferState.file.size);\n                const chunkData = await this.readFileChunk(transferState.file, start, end);\n                await this.sendFileChunk(transferState, idx, chunkData);\n                await this.waitForBackpressure();\n            } catch (error) {\n                console.warn('\u26A0\uFE0F Failed to retransmit chunk', idx, SecurityErrorHandler.sanitizeError(error));\n            }\n        }\n\n        if (transferState.status === 'transmitting') {\n            transferState.status = 'waiting_confirmation';\n        }\n        this._armSenderIdleTimeout(transferState);\n    }\n\n    async readFileChunk(file, start, end) {\n        try {\n            const blob = file.slice(start, end);\n            return await blob.arrayBuffer();\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to read file chunk:', safeError);\n            throw new Error(safeError);\n        }\n    }\n\n    async sendFileChunk(transferState, chunkIndex, chunkData) {\n        try {\n            const sessionKey = transferState.sessionKey;\n            const nonce = crypto.getRandomValues(new Uint8Array(12));\n            \n            // Encrypt chunk data\n            const encryptedChunk = await crypto.subtle.encrypt(\n                {\n                    name: 'AES-GCM',\n                    iv: nonce\n                },\n                sessionKey,\n                chunkData\n            );\n            \n            // Use Base64 to drastically reduce JSON overhead\n            const encryptedB64 = this.arrayBufferToBase64(new Uint8Array(encryptedChunk));\n            const chunkMessage = {\n                type: 'file_chunk',\n                fileId: transferState.fileId,\n                chunkIndex: chunkIndex,\n                totalChunks: transferState.totalChunks,\n                nonce: Array.from(nonce),\n                encryptedDataB64: encryptedB64,\n                chunkSize: chunkData.byteLength,\n                timestamp: Date.now()\n            };\n\n            await this.waitForBackpressure();\n            // Send chunk through secure channel\n            await this.sendSecureMessage(chunkMessage);\n            \n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to send file chunk:', safeError);\n            throw new Error(safeError);\n        }\n    }\n\n    async sendSecureMessage(message) {\n\n        const messageString = JSON.stringify(message);\n        const dc = this.webrtcManager?.dataChannel;\n        const maxRetries = 10;\n        let attempt = 0;\n        const wait = (ms) => new Promise(r => setTimeout(r, ms));\n\n        while (true) {\n            try {\n                if (!dc || dc.readyState !== 'open') {\n                    throw new Error('Data channel not ready');\n                }\n                await this.waitForBackpressure();\n                dc.send(messageString);\n                return; // success\n            } catch (error) {\n                const msg = String(error?.message || '');\n                const queueFull = msg.includes('send queue is full') || msg.includes('bufferedAmount');\n                const opErr = error?.name === 'OperationError';\n                if ((queueFull || opErr) && attempt < maxRetries) {\n                    attempt++;\n                    await this.waitForBackpressure();\n                    await wait(Math.min(50 * attempt, 500));\n                    continue;\n                }\n                console.error('\u274C Failed to send secure message:', error);\n                throw error;\n            }\n        }\n    }\n\n    async waitForBackpressure() {\n        try {\n            const dc = this.webrtcManager?.dataChannel;\n            if (!dc) return;\n\n            if (typeof dc.bufferedAmountLowThreshold === 'number') {\n                if (dc.bufferedAmount > dc.bufferedAmountLowThreshold) {\n                    await new Promise(resolve => {\n                        const handler = () => {\n                            dc.removeEventListener('bufferedamountlow', handler);\n                            resolve();\n                        };\n                        dc.addEventListener('bufferedamountlow', handler, { once: true });\n                    });\n                }\n                return;\n            }\n\n            const softLimit = 4 * 1024 * 1024;\n            while (dc.bufferedAmount > softLimit) {\n                await new Promise(r => setTimeout(r, 20));\n            }\n        } catch (_) {\n            // ignore\n        }\n    }\n\n    async calculateFileHash(file) {\n        try {\n            const arrayBuffer = await file.arrayBuffer();\n            const hashBuffer = await crypto.subtle.digest('SHA-256', arrayBuffer);\n            const hashArray = Array.from(new Uint8Array(hashBuffer));\n            return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n        } catch (error) {\n            console.error('\u274C File hash calculation failed:', error);\n            throw error;\n        }\n    }\n\n    // ============================================\n    // MESSAGE HANDLERS\n    // ============================================\n\n    async handleFileTransferStart(metadata) {\n        try {\n            const clientId = this.getClientIdentifier();\n            if (!this.incomingOfferLimiter.isAllowed(clientId)) {\n                throw new Error('Incoming file request rate limit exceeded');\n            }\n\n            const validation = this.validateIncomingMetadata(metadata);\n            if (!validation.isValid) throw new Error(validation.errors.join('. '));\n\n            if (metadata.signature && this.verificationKey) {\n                try {\n                    const isValid = await FileMetadataSigner.verifyFileMetadata(\n                        metadata, \n                        metadata.signature, \n                        this.verificationKey\n                    );\n                    \n                    if (!isValid) {\n                        SecurityErrorHandler.logSecurityEvent('invalid_metadata_signature', { \n                            fileId: metadata.fileId \n                        });\n                        throw new Error('Invalid file metadata signature');\n                    }\n                    \n                    console.log('\uD83D\uDD12 File metadata signature verified successfully');\n                } catch (verifyError) {\n                    SecurityErrorHandler.logSecurityEvent('verification_failed', { \n                        fileId: metadata.fileId, \n                        error: verifyError.message \n                    });\n                    throw new Error('File metadata verification failed');\n                }\n            }\n            \n            // Check if we already have this transfer\n            if (this.receivingTransfers.has(metadata.fileId) || this.pendingIncomingTransfers.has(metadata.fileId)) {\n                return;\n            }\n\n            if (this.pendingIncomingTransfers.size >= this.MAX_PENDING_INCOMING_TRANSFERS) {\n                throw new Error('Too many pending incoming file requests');\n            }\n\n            if (validation.voiceRejection) {\n                // Downgraded, not dropped: the peer may well be sending something\n                // legitimate that simply does not qualify for the consent-free path.\n                console.warn(`Voice auto-accept declined, falling back to consent: ${validation.voiceRejection}`);\n            }\n\n            const pendingMetadata = {\n                ...metadata,\n                // Never carry the sender's claim forward \u2014 only our own verdict.\n                isVoice: validation.isVoice,\n                fileName: validation.displayName,\n                receivedAt: Date.now()\n            };\n            this.pendingIncomingTransfers.set(metadata.fileId, pendingMetadata);\n\n            if (validation.isVoice) {\n                this.autoAcceptedVoiceBytes += metadata.fileSize;\n            }\n\n            if (typeof this.onIncomingFileRequest === 'function') {\n                this.onIncomingFileRequest({\n                    fileId: pendingMetadata.fileId,\n                    fileName: pendingMetadata.fileName,\n                    fileSize: pendingMetadata.fileSize,\n                    mimeType: pendingMetadata.fileType || 'application/octet-stream',\n                    // Voice notes auto-accept and render inline (no consent card).\n                    // This flag is the receiver's decision, not the sender's.\n                    isVoice: validation.isVoice,\n                    voice: pendingMetadata.voice || null\n                });\n            } else {\n                await this.rejectIncomingFile(metadata.fileId, t('file.consentUnavailable'));\n            }\n            \n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to handle file transfer start:', safeError);\n            \n            // Send error response\n            const errorResponse = {\n                type: 'file_transfer_response',\n                fileId: metadata.fileId,\n                accepted: false,\n                error: safeError, \n                timestamp: Date.now()\n            };\n            await this.sendSecureMessage(errorResponse);\n        }\n    }\n\n    async handleFileChunk(chunkMessage) {\n        return this.atomicOps.withLock(\n            `chunk-${chunkMessage.fileId}`, \n            async () => {\n                try {\n                    let receivingState = this.receivingTransfers.get(chunkMessage.fileId);\n\n                    // Never buffer chunks before explicit consent.\n                    if (!receivingState) {\n                        return;\n                    }\n\n                    // Already assembled \u2014 ignore late/duplicate (retransmitted) chunks.\n                    if (receivingState._assembled || receivingState.status === 'completed') {\n                        return;\n                    }\n\n                    if (!this._isIncomingChunkAllowed(chunkMessage.fileId)) {\n                        console.warn('\u26A0\uFE0F Incoming file chunk rate limit exceeded; cleaning up transfer:', chunkMessage.fileId);\n                        this.cleanupReceivingTransfer(chunkMessage.fileId);\n                        return;\n                    }\n                    \n                    // Update last chunk time\n                    receivingState.lastChunkTime = Date.now();\n                    \n                    // Check if chunk already received\n                    if (receivingState.receivedChunks.has(chunkMessage.chunkIndex)) {\n                        return;\n                    }\n                    \n                    // Validate chunk\n                    if (chunkMessage.chunkIndex < 0 || chunkMessage.chunkIndex >= receivingState.totalChunks) {\n                        throw new Error(`Invalid chunk index: ${chunkMessage.chunkIndex}`);\n                    }\n                    \n                    // Decrypt chunk\n                    const nonce = new Uint8Array(chunkMessage.nonce);\n                    // Backward compatible: prefer Base64, fallback to numeric array\n                    let encryptedData;\n                    if (chunkMessage.encryptedDataB64) {\n                        encryptedData = this.base64ToUint8Array(chunkMessage.encryptedDataB64);\n                    } else if (chunkMessage.encryptedData) {\n                        encryptedData = new Uint8Array(chunkMessage.encryptedData);\n                    } else {\n                        throw new Error('Missing encrypted data');\n                    }\n                    \n                    const decryptedChunk = await crypto.subtle.decrypt(\n                        {\n                            name: 'AES-GCM',\n                            iv: nonce\n                        },\n                        receivingState.sessionKey,\n                        encryptedData\n                    );\n                    \n                    // Verify chunk size\n                    if (decryptedChunk.byteLength !== chunkMessage.chunkSize) {\n                        throw new Error(`Chunk size mismatch: expected ${chunkMessage.chunkSize}, got ${decryptedChunk.byteLength}`);\n                    }\n                    \n                    // Store chunk\n                    receivingState.receivedChunks.set(chunkMessage.chunkIndex, decryptedChunk);\n                    receivingState.receivedCount++;\n                    this._emitTransferProgress(receivingState, 'down');\n\n                    // Send chunk confirmation\n                    const confirmation = {\n                        type: 'chunk_confirmation',\n                        fileId: chunkMessage.fileId,\n                        chunkIndex: chunkMessage.chunkIndex,\n                        timestamp: Date.now()\n                    };\n                    await this.sendSecureMessage(confirmation);\n                    \n                    // Check if all chunks received\n                    if (receivingState.receivedCount === receivingState.totalChunks) {\n                        await this.assembleFile(receivingState);\n                    }\n                    \n                } catch (error) {\n                    // A single bad/lost chunk must NOT kill the whole transfer:\n                    // drop it and let the receiver's stall detector re-request it.\n                    // (The data channel is reliable+ordered, so this path is rare \u2014\n                    // typically a transient decrypt hiccup or post-cleanup straggler.)\n                    const safeError = SecurityErrorHandler.sanitizeError(error);\n                    console.warn('\u26A0\uFE0F Dropping unprocessable file chunk (will be re-requested):', chunkMessage.chunkIndex, safeError);\n                }\n            }\n        );\n    }\n\n    _isIncomingChunkAllowed(fileId) {\n        const clientId = this.getClientIdentifier();\n        if (!this.incomingChunkLimiter.isAllowed(clientId)) {\n            SecurityErrorHandler.logSecurityEvent('incoming_chunk_aggregate_rate_limit_exceeded', {\n                clientId,\n                fileId\n            });\n            return false;\n        }\n\n        if (!this.incomingTransferChunkLimiters.has(fileId)) {\n            this.incomingTransferChunkLimiters.set(\n                fileId,\n                new RateLimiter(this.MAX_INCOMING_CHUNKS_PER_TRANSFER_PER_MINUTE, 60000)\n            );\n        }\n\n        const transferLimiter = this.incomingTransferChunkLimiters.get(fileId);\n        if (!transferLimiter.isAllowed(fileId)) {\n            SecurityErrorHandler.logSecurityEvent('incoming_chunk_transfer_rate_limit_exceeded', {\n                clientId,\n                fileId\n            });\n            return false;\n        }\n\n        return true;\n    }\n\n    async assembleFile(receivingState) {\n        // Idempotency guard: assembly must run (and onFileReceived must fire)\n        // exactly once per transfer. Guards against any duplicate/concurrent\n        // completion trigger so the receiver never sees the same file repeated.\n        if (receivingState._assembled) {\n            return;\n        }\n        receivingState._assembled = true;\n\n        try {\n            receivingState.status = 'assembling';\n            \n            // Verify we have all chunks\n            for (let i = 0; i < receivingState.totalChunks; i++) {\n                if (!receivingState.receivedChunks.has(i)) {\n                    throw new Error(`Missing chunk ${i}`);\n                }\n            }\n            \n            // Combine all chunks in order\n            const chunks = [];\n            for (let i = 0; i < receivingState.totalChunks; i++) {\n                const chunk = receivingState.receivedChunks.get(i);\n                chunks.push(new Uint8Array(chunk));\n            }\n            \n            // Calculate total size\n            const totalSize = chunks.reduce((sum, chunk) => sum + chunk.length, 0);\n            \n            // Verify total size matches expected\n            if (totalSize !== receivingState.fileSize) {\n                throw new Error(`File size mismatch: expected ${receivingState.fileSize}, got ${totalSize}`);\n            }\n            \n            // Combine into single array\n            const fileData = new Uint8Array(totalSize);\n            let offset = 0;\n            for (const chunk of chunks) {\n                fileData.set(chunk, offset);\n                offset += chunk.length;\n            }\n            \n            // Verify file integrity\n            const receivedHash = await this.calculateFileHashFromData(fileData);\n            if (receivedHash !== receivingState.fileHash) {\n                throw new Error('File integrity check failed - hash mismatch');\n            }\n\n            const fileBuffer = fileData.buffer;\n            const fileBlob = new Blob([fileBuffer], { type: receivingState.fileType });\n            \n            receivingState.endTime = Date.now();\n            receivingState.status = 'completed';\n\n            this._storeReceivedFileBuffer(receivingState.fileId, {\n                buffer: fileBuffer,\n                type: receivingState.fileType,\n                name: receivingState.fileName,\n                size: receivingState.fileSize\n            });\n\n            if (this.onFileReceived) {\n                const getBlob = async () => {\n                    const blob = await this.getBlob(receivingState.fileId);\n                    if (!blob) {\n                        throw new Error('This file is no longer available for download.');\n                    }\n                    return blob;\n                };\n                const getObjectURL = async () => {\n                    const blob = await getBlob();\n                    return URL.createObjectURL(blob);\n                };\n                const revokeObjectURL = (url) => {\n                    try { URL.revokeObjectURL(url); } catch (_) {}\n                };\n\n                this.onFileReceived({\n                    fileId: receivingState.fileId,\n                    fileName: receivingState.fileName,\n                    fileSize: receivingState.fileSize,\n                    mimeType: receivingState.fileType,\n                    transferTime: receivingState.endTime - receivingState.startTime,\n                    // Voice notes are played inline, not saved to disk.\n                    isVoice: !!receivingState.isVoice,\n                    voice: receivingState.voice || null,\n                    // backward-compatibility for existing UIs\n                    fileBlob,\n                    getBlob,\n                    getObjectURL,\n                    revokeObjectURL\n                });\n            }\n            \n            // Send completion confirmation\n            const completionMessage = {\n                type: 'file_transfer_complete',\n                fileId: receivingState.fileId,\n                success: true,\n                timestamp: Date.now()\n            };\n            await this.sendSecureMessage(completionMessage);\n\n            // Stop the stall detector and free the heavy chunk data, but KEEP the\n            // transfer entry in receivingTransfers with status 'completed' so the UI\n            // can render the Download action. The assembled file lives in\n            // receivedFileBuffers; this entry is removed on cancel/disconnect or when\n            // its buffer is evicted (see _discardReceivedFileBuffer).\n            if (receivingState._stallTimer) {\n                clearInterval(receivingState._stallTimer);\n                receivingState._stallTimer = null;\n            }\n            if (receivingState.receivedChunks) receivingState.receivedChunks.clear();\n            receivingState.sessionKey = null;\n\n        } catch (error) {\n            console.error('\u274C File assembly failed:', error);\n            receivingState.status = 'failed';\n            \n            if (this.onError) {\n                this.onError(`File assembly failed: ${error.message}`);\n            }\n            \n            // Send error notification\n            const errorMessage = {\n                type: 'file_transfer_complete',\n                fileId: receivingState.fileId,\n                success: false,\n                error: error.message,\n                timestamp: Date.now()\n            };\n            await this.sendSecureMessage(errorMessage);\n            \n            // Cleanup failed transfer\n            this.cleanupReceivingTransfer(receivingState.fileId);\n        }\n    }\n\n    async calculateFileHashFromData(data) {\n        try {\n            const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n            const hashArray = Array.from(new Uint8Array(hashBuffer));\n            return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n        } catch (error) {\n            console.error('\u274C Hash calculation failed:', error);\n            throw error;\n        }\n    }\n\n    handleTransferResponse(response) {\n        try {\n            const transferState = this.activeTransfers.get(response.fileId);\n            \n            if (!transferState) {\n                return;\n            }\n            \n            if (response.accepted) {\n                transferState.status = 'accepted';\n                if (transferState.consentTimeout) clearTimeout(transferState.consentTimeout);\n                transferState.consentTimeout = null;\n                transferState.resolveConsent?.();\n                transferState.resolveConsent = null;\n                transferState.rejectConsent = null;\n            } else {\n                transferState.status = 'rejected';\n                if (transferState.consentTimeout) clearTimeout(transferState.consentTimeout);\n                transferState.consentTimeout = null;\n                transferState.rejectConsent?.(new Error(response.error || 'Transfer rejected'));\n                transferState.rejectConsent = null;\n                transferState.resolveConsent = null;\n                \n                if (this.onError) {\n                    this.onError(`Transfer rejected: ${response.error || 'Unknown reason'}`);\n                }\n                \n                this.cleanupTransfer(response.fileId);\n            }\n        } catch (error) {\n            console.error('\u274C Failed to handle transfer response:', error);\n        }\n    }\n\n    handleChunkConfirmation(confirmation) {\n        try {\n            const transferState = this.activeTransfers.get(confirmation.fileId);\n            if (!transferState) {\n                return;\n            }\n            \n            transferState.confirmedChunks++;\n            transferState.lastChunkTime = Date.now();\n            if (transferState.status === 'waiting_confirmation') {\n                this._armSenderIdleTimeout(transferState);\n            }\n        } catch (error) {\n            console.error('\u274C Failed to handle chunk confirmation:', error);\n        }\n    }\n\n    handleTransferComplete(completion) {\n        try {\n            const transferState = this.activeTransfers.get(completion.fileId);\n            if (!transferState) {\n                return;\n            }\n            \n            if (completion.success) {\n                transferState.status = 'completed';\n                transferState.endTime = Date.now();\n                \n                if (this.onComplete) {\n                    this.onComplete({\n                        fileId: transferState.fileId,\n                        fileName: transferState.file.name,\n                        fileSize: transferState.file.size,\n                        transferTime: transferState.endTime - transferState.startTime,\n                        status: 'completed'\n                    });\n                }\n            } else {\n                transferState.status = 'failed';\n                \n                if (this.onError) {\n                    this.onError(`Transfer failed: ${completion.error || 'Unknown error'}`);\n                }\n            }\n            \n            this.cleanupTransfer(completion.fileId);\n            \n        } catch (error) {\n            console.error('\u274C Failed to handle transfer completion:', error);\n        }\n    }\n\n    handleTransferError(errorMessage) {\n        try {\n            const transferState = this.activeTransfers.get(errorMessage.fileId);\n            if (transferState) {\n                transferState.status = 'failed';\n                this.cleanupTransfer(errorMessage.fileId);\n            }\n            \n            const receivingState = this.receivingTransfers.get(errorMessage.fileId);\n            if (receivingState) {\n                receivingState.status = 'failed';\n                this.cleanupReceivingTransfer(errorMessage.fileId);\n            }\n            \n            if (this.onError) {\n                this.onError(`Transfer error: ${errorMessage.error || 'Unknown error'}`);\n            }\n            \n        } catch (error) {\n            console.error('\u274C Failed to handle transfer error:', error);\n        }\n    }\n\n    // ============================================\n    // UTILITY METHODS\n    // ============================================\n\n    getActiveTransfers() {\n        return Array.from(this.activeTransfers.values()).map(transfer => ({\n            fileId: transfer.fileId,\n            fileName: transfer.file?.name || 'Unknown',\n            fileSize: transfer.file?.size || 0,\n            progress: Math.round((transfer.sentChunks / transfer.totalChunks) * 100),\n            // Per-chunk detail for the segmented progress UI.\n            totalChunks: transfer.totalChunks || 0,\n            transferredChunks: transfer.sentChunks || 0,\n            status: transfer.status,\n            startTime: transfer.startTime\n        }));\n    }\n\n    getReceivingTransfers() {\n        return Array.from(this.receivingTransfers.values()).map(transfer => ({\n            fileId: transfer.fileId,\n            fileName: transfer.fileName || 'Unknown',\n            fileSize: transfer.fileSize || 0,\n            progress: Math.round((transfer.receivedCount / transfer.totalChunks) * 100),\n            // Per-chunk detail for the segmented progress UI.\n            totalChunks: transfer.totalChunks || 0,\n            transferredChunks: transfer.receivedCount || 0,\n            status: transfer.status,\n            startTime: transfer.startTime\n        }));\n    }\n\n    getPendingIncomingTransfers() {\n        return Array.from(this.pendingIncomingTransfers.values()).map(transfer => ({\n            fileId: transfer.fileId,\n            fileName: transfer.fileName,\n            fileSize: transfer.fileSize,\n            mimeType: transfer.fileType || 'application/octet-stream',\n            receivedAt: transfer.receivedAt\n        }));\n    }\n\n    async acceptIncomingFile(fileId) {\n        const metadata = this.pendingIncomingTransfers.get(fileId);\n        if (!metadata) return false;\n        const sessionKey = await this.deriveFileSessionKeyFromSalt(fileId, metadata.salt);\n        this.receivingTransfers.set(fileId, {\n            fileId,\n            fileName: metadata.fileName,\n            fileSize: metadata.fileSize,\n            fileType: metadata.fileType || 'application/octet-stream',\n            fileHash: metadata.fileHash,\n            totalChunks: metadata.totalChunks,\n            chunkSize: metadata.chunkSize || this.CHUNK_SIZE,\n            sessionKey,\n            salt: metadata.salt,\n            receivedChunks: new Map(),\n            receivedCount: 0,\n            startTime: Date.now(),\n            lastChunkTime: Date.now(),\n            status: 'receiving',\n            isVoice: !!metadata.isVoice,\n            voice: metadata.voice || null\n        });\n        this.pendingIncomingTransfers.delete(fileId);\n        await this.sendSecureMessage({ type: 'file_transfer_response', fileId, accepted: true, timestamp: Date.now() });\n        // Loss-recovery / resume: watch for missing chunks and re-request them.\n        this._startReceiverStallDetector(fileId);\n        return true;\n    }\n\n    // Periodically detects a stalled receive (lost chunks, connection blip,\n    // reconnect) and asks the sender to retransmit only the chunks we are still\n    // missing \u2014 so a dropped connection never loses the file.\n    _startReceiverStallDetector(fileId) {\n        const TICK_MS = 2500;        // how often we evaluate\n        const STALL_MS = 5000;       // quiet period before we re-request\n        const MAX_IDLE_MS = 180000;  // give up after 3 min of zero progress\n\n        const rs = this.receivingTransfers.get(fileId);\n        if (!rs) return;\n        if (rs._stallTimer) clearInterval(rs._stallTimer);\n        rs._lastProgressCount = rs.receivedCount || 0;\n        rs._lastProgressTime = Date.now();\n\n        rs._stallTimer = setInterval(async () => {\n            const state = this.receivingTransfers.get(fileId);\n            if (!state || state._stallTimer !== rs._stallTimer) {\n                clearInterval(rs._stallTimer);\n                return;\n            }\n            if (state.status === 'completed' || state._assembled) {\n                clearInterval(state._stallTimer);\n                state._stallTimer = null;\n                return;\n            }\n\n            // Track forward progress for the idle/give-up clock.\n            if (state.receivedCount !== state._lastProgressCount) {\n                state._lastProgressCount = state.receivedCount;\n                state._lastProgressTime = Date.now();\n            }\n            if (state.receivedCount >= state.totalChunks) return; // assembly handled elsewhere\n\n            // Still actively receiving \u2014 don't interrupt.\n            if (Date.now() - (state.lastChunkTime || 0) < STALL_MS) return;\n\n            // No progress for too long \u2192 fail cleanly rather than hang forever.\n            if (Date.now() - state._lastProgressTime > MAX_IDLE_MS) {\n                clearInterval(state._stallTimer);\n                state._stallTimer = null;\n                state.status = 'failed';\n                if (this.onError) this.onError('File transfer stalled \u2014 no data received. Please try again.');\n                this.cleanupReceivingTransfer(fileId);\n                return;\n            }\n\n            await this._requestMissingChunks(fileId);\n        }, TICK_MS);\n    }\n\n    async _requestMissingChunks(fileId) {\n        const state = this.receivingTransfers.get(fileId);\n        if (!state || !state.receivedChunks) return;\n        const MAX_PER_REQUEST = 256;\n        const missing = [];\n        for (let i = 0; i < state.totalChunks && missing.length < MAX_PER_REQUEST; i++) {\n            if (!state.receivedChunks.has(i)) missing.push(i);\n        }\n        if (missing.length === 0) return;\n        state.status = 'receiving';\n        try {\n            await this.sendSecureMessage({\n                type: 'file_chunk_request',\n                fileId,\n                missing,\n                timestamp: Date.now()\n            });\n        } catch (_) {\n            // Will retry on the next tick.\n        }\n    }\n\n    async rejectIncomingFile(fileId, error = 'Rejected by user') {\n        if (!this.pendingIncomingTransfers.has(fileId)) return false;\n        this.pendingIncomingTransfers.delete(fileId);\n        await this.sendSecureMessage({ type: 'file_transfer_response', fileId, accepted: false, error, timestamp: Date.now() });\n        return true;\n    }\n\n    cancelTransfer(fileId) {\n        try {\n            if (this.activeTransfers.has(fileId)) {\n                this.cleanupTransfer(fileId);\n                return true;\n            }\n            if (this.receivingTransfers.has(fileId)) {\n                this.cleanupReceivingTransfer(fileId);\n                return true;\n            }\n            return false;\n        } catch (error) {\n            console.error('\u274C Failed to cancel transfer:', error);\n            return false;\n        }\n    }\n\n    cleanupTransfer(fileId) {\n        const transferState = this.activeTransfers.get(fileId);\n        if (transferState) {\n            if (transferState._idleTimeout) {\n                clearTimeout(transferState._idleTimeout);\n                transferState._idleTimeout = null;\n            }\n            if (transferState.consentTimeout) {\n                clearTimeout(transferState.consentTimeout);\n                transferState.consentTimeout = null;\n            }\n            if (transferState.rejectConsent) {\n                transferState.rejectConsent(new Error('Transfer cancelled during cleanup or disconnect'));\n                transferState.rejectConsent = null;\n                transferState.resolveConsent = null;\n            }\n        }\n\n        this.activeTransfers.delete(fileId);\n        this.sessionKeys.delete(fileId);\n        this.transferNonces.delete(fileId);\n        this.incomingTransferChunkLimiters.delete(fileId);\n        \n        // Remove processed chunk IDs for this transfer\n        for (const chunkId of this.processedChunks) {\n            if (chunkId.startsWith(fileId)) {\n                this.processedChunks.delete(chunkId);\n            }\n        }\n    }\n\n    _storeReceivedFileBuffer(fileId, entry) {\n        this.receivedFileBuffers.set(fileId, entry);\n        while (this.receivedFileBuffers.size > this.MAX_RETAINED_RECEIVED_FILE_BUFFERS) {\n            const oldestFileId = this.receivedFileBuffers.keys().next().value;\n            this._discardReceivedFileBuffer(oldestFileId);\n        }\n    }\n\n    _discardReceivedFileBuffer(fileId) {\n        const fileBuffer = this.receivedFileBuffers.get(fileId);\n        if (!fileBuffer) return;\n        try {\n            if (fileBuffer.buffer) {\n                SecureMemoryManager.secureWipe(fileBuffer.buffer);\n                new Uint8Array(fileBuffer.buffer).fill(0);\n            }\n        } catch (_) {\n            // Best-effort wipe; deletion must still proceed.\n        }\n        this.receivedFileBuffers.delete(fileId);\n        // The matching 'completed' entry is kept only to drive the Download UI;\n        // once the file bytes are gone the entry is meaningless, so drop it too\n        // (keeps the receiving list bounded over a long session).\n        const rs = this.receivingTransfers.get(fileId);\n        if (rs && (rs.status === 'completed' || rs._assembled)) {\n            if (rs._stallTimer) { clearInterval(rs._stallTimer); rs._stallTimer = null; }\n            this.receivingTransfers.delete(fileId);\n        }\n    }\n\n    // \u2705 \u0423\u041B\u0423\u0427\u0428\u0415\u041D\u041D\u0410\u042F \u0431\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u043F\u0430\u043C\u044F\u0442\u0438 \u0434\u043B\u044F \u043F\u0440\u0435\u0434\u043E\u0442\u0432\u0440\u0430\u0449\u0435\u043D\u0438\u044F use-after-free\n    cleanupReceivingTransfer(fileId) {\n        try {\n            // \u0411\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u043E \u043E\u0447\u0438\u0449\u0430\u0435\u043C pending chunks\n            this.pendingChunks.delete(fileId);\n            \n            const receivingState = this.receivingTransfers.get(fileId);\n            if (receivingState) {\n                // Stop the loss-recovery stall detector for this transfer.\n                if (receivingState._stallTimer) {\n                    clearInterval(receivingState._stallTimer);\n                    receivingState._stallTimer = null;\n                }\n                // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 receivedChunks \u0441 \u0434\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u043E\u0439 \u0437\u0430\u0449\u0438\u0442\u043E\u0439\n                if (receivingState.receivedChunks && receivingState.receivedChunks.size > 0) {\n                    for (const [index, chunk] of receivingState.receivedChunks) {\n                        try {\n                            // \u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0430 \u043D\u0430 \u0432\u0430\u043B\u0438\u0434\u043D\u043E\u0441\u0442\u044C chunk\n                            if (chunk && (chunk instanceof ArrayBuffer || chunk instanceof Uint8Array)) {\n                                SecureMemoryManager.secureWipe(chunk);\n                                \n                                // \u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 - \u0437\u0430\u043F\u043E\u043B\u043D\u044F\u0435\u043C \u043D\u0443\u043B\u044F\u043C\u0438 \u043F\u0435\u0440\u0435\u0434 \u0443\u0434\u0430\u043B\u0435\u043D\u0438\u0435\u043C\n                                if (chunk instanceof ArrayBuffer) {\n                                    const view = new Uint8Array(chunk);\n                                    view.fill(0);\n                                } else if (chunk instanceof Uint8Array) {\n                                    chunk.fill(0);\n                                }\n                            }\n                        } catch (chunkError) {\n                            console.warn('\u26A0\uFE0F Failed to securely wipe chunk:', chunkError);\n                        }\n                    }\n                    receivingState.receivedChunks.clear();\n                }\n                \n                // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 session key\n                if (receivingState.sessionKey) {\n                    try {\n                        // \u0414\u043B\u044F CryptoKey \u043D\u0435\u043B\u044C\u0437\u044F \u0431\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u043E \u043E\u0447\u0438\u0441\u0442\u0438\u0442\u044C, \u043D\u043E \u043C\u043E\u0436\u0435\u043C \u0443\u0434\u0430\u043B\u0438\u0442\u044C \u0441\u0441\u044B\u043B\u043A\u0443\n                        receivingState.sessionKey = null;\n                    } catch (keyError) {\n                        console.warn('\u26A0\uFE0F Failed to clear session key:', keyError);\n                    }\n                }\n                \n                // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043B\u044C\u043D\u044B\u0445 \u0434\u0430\u043D\u043D\u044B\u0445\n                if (receivingState.salt) {\n                    try {\n                        if (Array.isArray(receivingState.salt)) {\n                            receivingState.salt.fill(0);\n                        }\n                        receivingState.salt = null;\n                    } catch (saltError) {\n                        console.warn('\u26A0\uFE0F Failed to clear salt:', saltError);\n                    }\n                }\n                \n                // \u041E\u0447\u0438\u0449\u0430\u0435\u043C \u0432\u0441\u0435 \u0441\u0432\u043E\u0439\u0441\u0442\u0432\u0430 receivingState\n                for (const [key, value] of Object.entries(receivingState)) {\n                    if (value && typeof value === 'object') {\n                        if (value instanceof ArrayBuffer || value instanceof Uint8Array) {\n                            SecureMemoryManager.secureWipe(value);\n                        } else if (Array.isArray(value)) {\n                            value.fill(0);\n                        }\n                        receivingState[key] = null;\n                    }\n                }\n            }\n            \n            // \u0423\u0434\u0430\u043B\u044F\u0435\u043C \u0438\u0437 \u043E\u0441\u043D\u043E\u0432\u043D\u044B\u0445 \u043A\u043E\u043B\u043B\u0435\u043A\u0446\u0438\u0439\n            this.receivingTransfers.delete(fileId);\n            this.sessionKeys.delete(fileId);\n            this.incomingTransferChunkLimiters.delete(fileId);\n            \n            // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u0444\u0438\u043D\u0430\u043B\u044C\u043D\u043E\u0433\u043E \u0431\u0443\u0444\u0435\u0440\u0430 \u0444\u0430\u0439\u043B\u0430\n            const fileBuffer = this.receivedFileBuffers.get(fileId);\n            if (fileBuffer) {\n                try {\n                    if (fileBuffer.buffer) {\n                        SecureMemoryManager.secureWipe(fileBuffer.buffer);\n                        \n                        // \u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 - \u0437\u0430\u043F\u043E\u043B\u043D\u044F\u0435\u043C \u043D\u0443\u043B\u044F\u043C\u0438\n                        const view = new Uint8Array(fileBuffer.buffer);\n                        view.fill(0);\n                    }\n                    \n                    // \u041E\u0447\u0438\u0449\u0430\u0435\u043C \u0432\u0441\u0435 \u0441\u0432\u043E\u0439\u0441\u0442\u0432\u0430 fileBuffer\n                    for (const [key, value] of Object.entries(fileBuffer)) {\n                        if (value && typeof value === 'object') {\n                            if (value instanceof ArrayBuffer || value instanceof Uint8Array) {\n                                SecureMemoryManager.secureWipe(value);\n                            }\n                            fileBuffer[key] = null;\n                        }\n                    }\n                    \n                    this.receivedFileBuffers.delete(fileId);\n                } catch (bufferError) {\n                    console.warn('\u26A0\uFE0F Failed to securely clear file buffer:', bufferError);\n                    // \u041F\u0440\u0438\u043D\u0443\u0434\u0438\u0442\u0435\u043B\u044C\u043D\u043E \u0443\u0434\u0430\u043B\u044F\u0435\u043C \u0434\u0430\u0436\u0435 \u043F\u0440\u0438 \u043E\u0448\u0438\u0431\u043A\u0435\n                    this.receivedFileBuffers.delete(fileId);\n                }\n            }\n            \n            // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 processed chunks\n            const chunksToRemove = [];\n            for (const chunkId of this.processedChunks) {\n                if (chunkId.startsWith(fileId)) {\n                    chunksToRemove.push(chunkId);\n                }\n            }\n            \n            // \u0423\u0434\u0430\u043B\u044F\u0435\u043C \u0432 \u043E\u0442\u0434\u0435\u043B\u044C\u043D\u043E\u043C \u0446\u0438\u043A\u043B\u0435 \u0434\u043B\u044F \u0438\u0437\u0431\u0435\u0436\u0430\u043D\u0438\u044F \u0438\u0437\u043C\u0435\u043D\u0435\u043D\u0438\u044F \u043A\u043E\u043B\u043B\u0435\u043A\u0446\u0438\u0438 \u0432\u043E \u0432\u0440\u0435\u043C\u044F \u0438\u0442\u0435\u0440\u0430\u0446\u0438\u0438\n            for (const chunkId of chunksToRemove) {\n                this.processedChunks.delete(chunkId);\n            }\n            \n            // \u041F\u0440\u0438\u043D\u0443\u0434\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u043F\u0430\u043C\u044F\u0442\u0438\n            if (typeof global !== 'undefined' && global.gc) {\n                try {\n                    global.gc();\n                } catch (gcError) {\n                    // \u0418\u0433\u043D\u043E\u0440\u0438\u0440\u0443\u0435\u043C \u043E\u0448\u0438\u0431\u043A\u0438 GC\n                }\n            }\n            \n            console.log(`\uD83D\uDD12 Memory safely cleaned for file transfer: ${fileId}`);\n            \n        } catch (error) {\n            console.error('\u274C Error during secure memory cleanup:', error);\n            \n            // \u041F\u0440\u0438\u043D\u0443\u0434\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u0434\u0430\u0436\u0435 \u043F\u0440\u0438 \u043E\u0448\u0438\u0431\u043A\u0435\n            this.receivingTransfers.delete(fileId);\n            this.sessionKeys.delete(fileId);\n            this.receivedFileBuffers.delete(fileId);\n            this.pendingChunks.delete(fileId);\n            \n            throw new Error(`Memory cleanup failed: ${error.message}`);\n        }\n    }\n\n    getTransferStatus(fileId) {\n        if (this.activeTransfers.has(fileId)) {\n            const transfer = this.activeTransfers.get(fileId);\n            return {\n                type: 'sending',\n                fileId: transfer.fileId,\n                fileName: transfer.file.name,\n                progress: Math.round((transfer.sentChunks / transfer.totalChunks) * 100),\n                status: transfer.status,\n                startTime: transfer.startTime\n            };\n        }\n        \n        if (this.receivingTransfers.has(fileId)) {\n            const transfer = this.receivingTransfers.get(fileId);\n            return {\n                type: 'receiving',\n                fileId: transfer.fileId,\n                fileName: transfer.fileName,\n                progress: Math.round((transfer.receivedCount / transfer.totalChunks) * 100),\n                status: transfer.status,\n                startTime: transfer.startTime\n            };\n        }\n        \n        return null;\n    }\n\n    getSystemStatus() {\n        return {\n            initialized: true,\n            activeTransfers: this.activeTransfers.size,\n            receivingTransfers: this.receivingTransfers.size,\n            totalTransfers: this.activeTransfers.size + this.receivingTransfers.size,\n            maxConcurrentTransfers: this.MAX_CONCURRENT_TRANSFERS,\n            maxFileSize: this.MAX_FILE_SIZE,\n            chunkSize: this.CHUNK_SIZE,\n            hasWebrtcManager: !!this.webrtcManager,\n            isConnected: this.webrtcManager?.isConnected?.() || false,\n            hasDataChannel: !!this.webrtcManager?.dataChannel,\n            dataChannelState: this.webrtcManager?.dataChannel?.readyState,\n            isVerified: this.webrtcManager?.isVerified,\n            hasEncryptionKey: !!this.webrtcManager?.encryptionKey,\n            hasMacKey: !!this.webrtcManager?.macKey,\n            linkedToWebRTCManager: this.webrtcManager?.fileTransferSystem === this,\n            supportedFileTypes: this.getSupportedFileTypes(),\n            fileTypeInfo: this.getFileTypeInfo()\n        };\n    }\n\n    cleanup() {\n        SecureFileTransferContext.getInstance().deactivate();\n\n        if (this.webrtcManager && this.webrtcManager.dataChannel && this.originalOnMessage) {\n            this.webrtcManager.dataChannel.onmessage = this.originalOnMessage;\n            this.originalOnMessage = null;\n        }\n        \n        if (this.webrtcManager && this.originalProcessMessage) {\n            this.webrtcManager.processMessage = this.originalProcessMessage;\n            this.originalProcessMessage = null;\n        }\n        \n        if (this.webrtcManager && this.originalRemoveSecurityLayers) {\n            this.webrtcManager.removeSecurityLayers = this.originalRemoveSecurityLayers;\n            this.originalRemoveSecurityLayers = null;\n        }\n        \n        // Cleanup all active transfers with secure memory wiping\n        for (const fileId of this.activeTransfers.keys()) {\n            this.cleanupTransfer(fileId);\n        }\n        \n        for (const fileId of this.receivingTransfers.keys()) {\n            this.cleanupReceivingTransfer(fileId);\n        }\n\n        if (this.atomicOps) {\n            this.atomicOps.locks.clear();\n        }\n        \n        if (this.rateLimiter) {\n            this.rateLimiter.requests.clear();\n        }\n        if (this.incomingChunkLimiter) {\n            this.incomingChunkLimiter.requests.clear();\n        }\n        this.incomingTransferChunkLimiters.clear();\n        \n        // Clear all state\n        this.pendingChunks.clear();\n        this.pendingIncomingTransfers.clear();\n        this.activeTransfers.clear();\n        this.receivingTransfers.clear();\n        this.transferQueue.length = 0;\n        this.sessionKeys.clear();\n        this.transferNonces.clear();\n        this.processedChunks.clear();\n\n        for (const fileId of Array.from(this.receivedFileBuffers.keys())) {\n            this._discardReceivedFileBuffer(fileId);\n        }\n\n        this.clearKeys();\n    }\n\n    // ============================================\n    // SESSION UPDATE HANDLER - FIXED\n    // ============================================\n    \n    onSessionUpdate(sessionData) {\n        // Clear session keys cache for resync\n        this.sessionKeys.clear();\n    }\n\n    // ============================================\n    // DEBUGGING AND DIAGNOSTICS\n    // ============================================\n\n    diagnoseFileTransferIssue() {\n        const diagnosis = {\n            timestamp: new Date().toISOString(),\n            fileTransferSystem: {\n                initialized: !!this,\n                hasWebrtcManager: !!this.webrtcManager,\n                webrtcManagerType: this.webrtcManager?.constructor?.name,\n                linkedToWebRTCManager: this.webrtcManager?.fileTransferSystem === this\n            },\n            webrtcManager: {\n                hasDataChannel: !!this.webrtcManager?.dataChannel,\n                dataChannelState: this.webrtcManager?.dataChannel?.readyState,\n                isConnected: this.webrtcManager?.isConnected?.() || false,\n                isVerified: this.webrtcManager?.isVerified,\n                hasEncryptionKey: !!this.webrtcManager?.encryptionKey,\n                hasMacKey: !!this.webrtcManager?.macKey,\n                hasKeyFingerprint: !!this.webrtcManager?.keyFingerprint,\n                hasSessionSalt: !!this.webrtcManager?.sessionSalt\n            },\n            securityContext: {\n                contextActive: SecureFileTransferContext.getInstance().isActive(),\n                securityLevel: SecureFileTransferContext.getInstance().getSecurityLevel(),\n                hasAtomicOps: !!this.atomicOps,\n                hasRateLimiter: !!this.rateLimiter\n            },\n            transfers: {\n                activeTransfers: this.activeTransfers.size,\n                receivingTransfers: this.receivingTransfers.size,\n                pendingChunks: this.pendingChunks.size,\n                sessionKeys: this.sessionKeys.size\n            },\n            fileTypeSupport: {\n                supportedTypes: this.getSupportedFileTypes(),\n                generalMaxSize: this.formatFileSize(this.MAX_FILE_SIZE),\n                restrictions: Object.keys(this.FILE_TYPE_RESTRICTIONS)\n            }\n        };\n        \n        return diagnosis;\n    }\n\n    async debugKeyDerivation(fileId) {\n        try {\n            if (!this.webrtcManager.keyFingerprint || !this.webrtcManager.sessionSalt) {\n                throw new Error('Session data not available');\n            }\n            \n            // Test sender derivation\n            const senderResult = await this.deriveFileSessionKey(fileId);\n            \n            // Test receiver derivation with same salt\n            const receiverKey = await this.deriveFileSessionKeyFromSalt(fileId, senderResult.salt);\n            \n            // Test encryption/decryption\n            const testData = new TextEncoder().encode('test data');\n            const nonce = crypto.getRandomValues(new Uint8Array(12));\n            \n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: nonce },\n                senderResult.key,\n                testData\n            );\n            \n            const decrypted = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv: nonce },\n                receiverKey,\n                encrypted\n            );\n            \n            const decryptedText = new TextDecoder().decode(decrypted);\n            \n            if (decryptedText === 'test data') {\n                return { success: true, message: 'All tests passed' };\n            } else {\n                throw new Error('Decryption verification failed');\n            }\n            \n        } catch (error) {\n            console.error('\u274C Key derivation test failed:', error);\n            return { success: false, error: error.message };\n        }\n    }\n\n    // ============================================\n    // ALTERNATIVE METHOD OF INITIALIZING HANDLERS\n    // ============================================\n\n    registerWithWebRTCManager() {\n        if (!this.webrtcManager) {\n            throw new Error('WebRTC manager not available');\n        }\n\n        this.webrtcManager.fileTransferSystem = this;\n\n        this.webrtcManager.setFileMessageHandler = (handler) => {\n            this.webrtcManager._fileMessageHandler = handler;\n        };\n\n        this.webrtcManager.setFileMessageHandler((message) => {\n            return this.handleFileMessage(message);\n        });\n    }\n\n    static createFileMessageFilter(fileTransferSystem) {\n        return async (event) => {\n            try {\n                if (typeof event.data === 'string') {\n                    const parsed = JSON.parse(event.data);\n                    \n                    if (fileTransferSystem.isFileTransferMessage(parsed)) {\n                        await fileTransferSystem.handleFileMessage(parsed);\n                        return true; \n                    }\n                }\n            } catch (error) {\n            }\n            \n            return false; \n        };\n    }\n\n    // ============================================\n    // SECURITY KEY MANAGEMENT\n    // ============================================\n\n    setSigningKey(privateKey) {\n        if (!privateKey || !(privateKey instanceof CryptoKey)) {\n            throw new Error('Invalid private key for signing');\n        }\n        this.signingKey = privateKey;\n        console.log('\uD83D\uDD12 Signing key set successfully');\n    }\n\n    setVerificationKey(publicKey) {\n        if (!publicKey || !(publicKey instanceof CryptoKey)) {\n            throw new Error('Invalid public key for verification');\n        }\n        this.verificationKey = publicKey;\n        console.log('\uD83D\uDD12 Verification key set successfully');\n    }\n\n    async generateSigningKeyPair() {\n        try {\n            const keyPair = await crypto.subtle.generateKey(\n                {\n                    name: 'RSASSA-PKCS1-v1_5',\n                    modulusLength: 2048,\n                    publicExponent: new Uint8Array([1, 0, 1]),\n                    hash: 'SHA-256'\n                },\n                true, // extractable\n                ['sign', 'verify']\n            );\n            \n            this.signingKey = keyPair.privateKey;\n            this.verificationKey = keyPair.publicKey;\n            \n            console.log('\uD83D\uDD12 RSA key pair generated successfully');\n            return keyPair;\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to generate signing key pair:', safeError);\n            throw new Error(safeError);\n        }\n    }\n\n    clearKeys() {\n        this.signingKey = null;\n        this.verificationKey = null;\n        console.log('\uD83D\uDD12 Security keys cleared');\n    }\n\n    getSecurityStatus() {\n        return {\n            signingEnabled: this.signingKey !== null,\n            verificationEnabled: this.verificationKey !== null,\n            contextActive: SecureFileTransferContext.getInstance().isActive(),\n            securityLevel: SecureFileTransferContext.getInstance().getSecurityLevel()\n        };\n    }\n\n    getClientIdentifier() {\n        return this.webrtcManager?.connectionId || \n               this.webrtcManager?.keyFingerprint?.substring(0, 16) || \n               'default-client';\n    }\n    \n    destroy() {\n        SecureFileTransferContext.getInstance().deactivate();\n        this.clearKeys();\n        console.log('\uD83D\uDD12 File transfer system destroyed safely');\n    }\n}\n\nexport { EnhancedSecureFileTransfer };\n", "// Adaptive WebRTC call parameters \u2014 single source of truth.\n//\n// Every value here is a tuning constant for the voice/video call stack, with a\n// note on where it comes from. Kept as plain data (no behaviour) so it can be\n// imported by both the browser bundle and the Node unit tests.\n//\n// Targets (from the task brief): usable voice at up to 15\u201320% loss, RTT up to\n// 400 ms, fluctuating bandwidth; voice must not break as bitrate drops; video\n// degrades gracefully by layer.\n\n// WebKit (desktop Safari + ALL iOS browsers) kills a live capture MediaStreamTrack\n// with \"capture failure\" when we manipulate the sender via setParameters /\n// setCodecPreferences (RED, priorities, SVC bitrate). So the adaptive codec/bitrate\n// tuning is applied on Chromium only; WebKit runs plain WebRTC (Opus + the\n// browser's own congestion control), which is reliable. The read-only quality\n// indicator still works everywhere. Matches Chrome/Chromium/Edge; excludes Safari\n// and iOS browsers (all WebKit \u2014 iOS Chrome is \"CriOS\", not \"Chrome\").\nexport const IS_WEBKIT = (typeof navigator !== 'undefined')\n    && /AppleWebKit/.test(navigator.userAgent)\n    && !/Chrome|Chromium|Edg\\//.test(navigator.userAgent);\n\n// \u2500\u2500 AUDIO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Opus is mandatory-to-implement in WebRTC (RFC 7874). FEC + DTX + a low target\n// bitrate keep speech intelligible under loss.\nexport const AUDIO_CONFIG = {\n    // Opus fmtp params applied via SDP munging.\n    //  - minptime=10          smaller packets \u2192 lower latency (Opus RFC 7587 \u00A77).\n    //  - useinbandfec=1       in-band Forward Error Correction \u2014 reconstructs lost\n    //                         packets from the next one (RFC 6716 \u00A72.1.7). Key for loss.\n    //  - usedtx=1             Discontinuous Transmission \u2014 stop sending in silence,\n    //                         frees the pipe for video/FEC (RFC 7587 \u00A73.1.3).\n    //  - stereo=0             mono: voice doesn't need stereo, halves the bitrate.\n    //  - maxaveragebitrate    32 kbps \u2014 brief says 32000; comfortable wideband speech.\n    //  - cbr=0                variable bitrate: lets the encoder spend bits only when\n    //                         needed, better quality per bit than CBR for speech.\n    opusFmtp: {\n        minptime: 10,\n        useinbandfec: 1,\n        usedtx: 1,\n        stereo: 0,\n        maxaveragebitrate: 32000,\n        cbr: 0,\n    },\n    // RED (RFC 2198) wraps Opus payloads with a redundant copy of the previous\n    // frame \u2014 recovers isolated losses without waiting for retransmission. Only\n    // enabled when the browser advertises audio/red (Chromium yes; Safari/FF vary).\n    preferRed: true,\n    // RTCRtpSender.setParameters \u2014 encoding-level knobs. Audio is prioritised over\n    // video on the shared transport so speech survives congestion.\n    sender: {\n        maxBitrate: 40000,        // bps \u2014 brief: 40000. Head-room over 32 kbps for RED.\n        priority: 'high',         // RTCPriorityType \u2014 bandwidth arbitration within the PC.\n        networkPriority: 'high',  // DSCP marking hint \u2014 audio ahead of video on the wire.\n    },\n};\n\n// \u2500\u2500 VIDEO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Preference order VP9 \u2192 AV1 \u2192 H.264 \u2192 VP8. VP9/AV1 give temporal/spatial\n// scalability (SVC) so a single stream degrades by layer; H.264/VP8 fall back to\n// plain simulcast. Values from the brief.\nexport const VIDEO_CONFIG = {\n    codecPreferenceOrder: ['VP9', 'AV1', 'H264', 'VP8'],\n    // Preferred single-encoding SVC mode for VP9 (3 spatial \u00D7 3 temporal, key-frame\n    // aligned). If the browser rejects it we fall back to the simulcast ladder below.\n    vp9: {\n        preferredScalabilityMode: 'L3T3_KEY',\n        simulcast: [\n            { rid: 'low',  scaleResolutionDownBy: 4, maxBitrate: 150000,  scalabilityMode: 'L1T3' },\n            { rid: 'mid',  scaleResolutionDownBy: 2, maxBitrate: 500000,  scalabilityMode: 'L1T3' },\n            { rid: 'high', scaleResolutionDownBy: 1, maxBitrate: 1500000, scalabilityMode: 'L1T3' },\n        ],\n        degradationPreference: 'balanced',\n    },\n    av1: {\n        scalabilityMode: 'L1T3',\n        maxBitrate: 1200000,\n        degradationPreference: 'maintain-framerate',\n    },\n    // H.264 / VP8: ordinary simulcast, no SVC.\n    simulcast: [\n        { rid: 'low',  scaleResolutionDownBy: 4, maxBitrate: 150000 },\n        { rid: 'mid',  scaleResolutionDownBy: 2, maxBitrate: 500000 },\n        { rid: 'high', scaleResolutionDownBy: 1, maxBitrate: 1500000 },\n    ],\n    networkPriority: 'medium',    // below audio's 'high'.\n};\n\n// \u2500\u2500 TRANSPORT (RTCP feedback / header extensions to guarantee in SDP) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// transport-wide-cc drives the bandwidth estimator; nack/pli/fir/remb handle\n// loss recovery and keyframe requests. Video gets the full set, audio a subset.\nexport const TRANSPORT_CONFIG = {\n    twccUri: 'http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01',\n    video: {\n        rtcpFb: ['transport-cc', 'nack', 'nack pli', 'ccm fir', 'goog-remb'],\n        twcc: true,\n    },\n    audio: {\n        rtcpFb: ['transport-cc', 'nack'],\n        twcc: true,\n    },\n};\n\n// \u2500\u2500 ADAPTATION (getStats loop) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Reactive bitrate control. Thresholds from the brief. Applied via setParameters\n// only \u2014 never renegotiation, never track restarts.\nexport const ADAPTATION_CONFIG = {\n    intervalMs: 1000,\n    loss: {\n        highPct: 0.10,          // >10% loss \u2192 back off video.\n        recoverPct: 0.03,       // <3% loss (sustained) \u2192 ramp up.\n        audioProtectPct: 0.25,  // don't touch audio until loss exceeds 25%.\n    },\n    rtt: {\n        highMs: 300,            // >300 ms \u2192 back off.\n        recoverMs: 150,         // <150 ms (sustained) \u2192 ramp up.\n    },\n    stepDownPct: 0.20,          // shrink video maxBitrate by 20% per bad tick.\n    stepUpPct: 0.10,            // grow by 10% per good window.\n    minVideoBitrate: 100000,    // floor for the low layer (bps).\n    recoverStableTicks: 5,      // consecutive good ticks before ramping up.\n    cpuScaleStep: 1.5,          // qualityLimitationReason 'cpu' \u2192 bump scaleResolutionDownBy \u00D71.5.\n};\n", "// Pure SDP munging utilities.\n//\n// SDP munging is inherently fragile across browsers, so every function here is:\n//   - idempotent (running twice yields the same SDP \u2014 no duplicate lines),\n//   - line-ending preserving (SDP uses CRLF; we detect and keep it),\n//   - defensive (unknown/missing sections are left untouched, never thrown on).\n//\n// No DOM/WebRTC APIs are used, so this module is unit-testable in plain Node.\n\n/** Detect the line terminator used by an SDP blob (CRLF per RFC 4566, but be safe). */\nfunction detectEol(sdp) {\n    return sdp.indexOf('\\r\\n') !== -1 ? '\\r\\n' : '\\n';\n}\n\n/**\n * Split an SDP into its session part and per-media sections.\n * @returns {{ eol:string, session:string[], media:Array<{lines:string[]}> }}\n */\nexport function splitSdp(sdp) {\n    const eol = detectEol(sdp);\n    const lines = sdp.split(/\\r\\n|\\n/);\n    const session = [];\n    const media = [];\n    let current = null;\n    for (const line of lines) {\n        if (line.startsWith('m=')) {\n            current = { lines: [line] };\n            media.push(current);\n        } else if (current) {\n            current.lines.push(line);\n        } else {\n            session.push(line);\n        }\n    }\n    return { eol, session, media };\n}\n\n/** Reassemble a split SDP, preserving the original line ending. */\nexport function joinSdp(parsed) {\n    const all = [...parsed.session];\n    for (const m of parsed.media) all.push(...m.lines);\n    return all.join(parsed.eol);\n}\n\n/** The media kind ('audio' | 'video' | 'application') of a section. */\nexport function sectionKind(section) {\n    const m = section.lines[0].match(/^m=(\\w+)/);\n    return m ? m[1] : null;\n}\n\n/**\n * All payload types in a section whose rtpmap encoding name matches `codecName`\n * (case-insensitive), e.g. 'opus', 'VP9', 'red'.\n * @returns {string[]}\n */\nexport function findPayloadTypes(section, codecName) {\n    const re = new RegExp('^a=rtpmap:(\\\\d+)\\\\s+' + codecName + '\\\\/', 'i');\n    const pts = [];\n    for (const line of section.lines) {\n        const m = line.match(re);\n        if (m) pts.push(m[1]);\n    }\n    return pts;\n}\n\n/** Parse an `a=fmtp:<pt> k=v;k2=v2;flag` value string into an ordered map. */\nfunction parseFmtpParams(value) {\n    const map = new Map();\n    for (const part of value.split(';')) {\n        const p = part.trim();\n        if (!p) continue;\n        const eq = p.indexOf('=');\n        if (eq === -1) map.set(p, undefined);           // bare flag\n        else map.set(p.slice(0, eq).trim(), p.slice(eq + 1).trim());\n    }\n    return map;\n}\n\n/** Serialise an fmtp param map back to `k=v;k2=v2` form. */\nfunction serializeFmtpParams(map) {\n    const parts = [];\n    for (const [k, v] of map) parts.push(v === undefined ? k : `${k}=${v}`);\n    return parts.join(';');\n}\n\n/**\n * Insert or update the `a=fmtp:<pt>` line for a payload type, merging `params`\n * over any existing values. Idempotent: existing keys are overwritten, not\n * duplicated; a missing fmtp line is created right after the rtpmap line.\n */\nexport function upsertFmtp(section, pt, params) {\n    const fmtpIdx = section.lines.findIndex(l => l.startsWith(`a=fmtp:${pt} `) || l === `a=fmtp:${pt}`);\n    if (fmtpIdx !== -1) {\n        const existing = section.lines[fmtpIdx].slice(`a=fmtp:${pt} `.length);\n        const map = parseFmtpParams(existing);\n        for (const [k, v] of Object.entries(params)) map.set(k, String(v));\n        section.lines[fmtpIdx] = `a=fmtp:${pt} ${serializeFmtpParams(map)}`;\n        return;\n    }\n    // No fmtp yet \u2014 build one and place it after the matching rtpmap line.\n    const map = new Map();\n    for (const [k, v] of Object.entries(params)) map.set(k, String(v));\n    const newLine = `a=fmtp:${pt} ${serializeFmtpParams(map)}`;\n    const rtpmapIdx = section.lines.findIndex(l => l.startsWith(`a=rtpmap:${pt} `));\n    if (rtpmapIdx !== -1) section.lines.splice(rtpmapIdx + 1, 0, newLine);\n    else section.lines.push(newLine);\n}\n\n/**\n * Apply Opus fmtp parameters (FEC / DTX / bitrate / etc.) to every Opus payload\n * type in the audio m-line. Returns the munged SDP; input SDP with no Opus\n * audio section is returned unchanged.\n */\nexport function applyOpusSettings(sdp, opusFmtp) {\n    if (!sdp || typeof sdp !== 'string') return sdp;\n    const parsed = splitSdp(sdp);\n    let changed = false;\n    for (const section of parsed.media) {\n        if (sectionKind(section) !== 'audio') continue;\n        for (const pt of findPayloadTypes(section, 'opus')) {\n            upsertFmtp(section, pt, opusFmtp);\n            changed = true;\n        }\n    }\n    return changed ? joinSdp(parsed) : sdp;\n}\n\n// \u2500\u2500 Transport feedback \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n// Auxiliary payloads that are not primary media codecs (no per-codec rtcp-fb).\nconst AUX_CODEC = /^(rtx|red|ulpfec|flexfec-03|telephone-event|CN)$/i;\n\n/** Primary-codec payload types in a section (excludes rtx/red/fec/DTMF/CN). */\nexport function getCodecPayloadTypes(section) {\n    const pts = [];\n    for (const line of section.lines) {\n        const m = line.match(/^a=rtpmap:(\\d+)\\s+([^/]+)\\//);\n        if (m && !AUX_CODEC.test(m[2])) pts.push(m[1]);\n    }\n    return pts;\n}\n\n/**\n * Ensure each `a=rtcp-fb:<pt> <fb>` line exists for every primary codec in the\n * section. Idempotent \u2014 never duplicates an existing line.\n */\nexport function ensureRtcpFb(section, feedbacks) {\n    for (const pt of getCodecPayloadTypes(section)) {\n        for (const fb of feedbacks) {\n            const line = `a=rtcp-fb:${pt} ${fb}`;\n            if (section.lines.includes(line)) continue;\n            // Insert after the last existing attribute line for this pt.\n            let insertAt = -1;\n            for (let i = 0; i < section.lines.length; i++) {\n                const l = section.lines[i];\n                if (l.startsWith(`a=rtpmap:${pt} `) || l.startsWith(`a=fmtp:${pt} `) || l.startsWith(`a=rtcp-fb:${pt} `)) insertAt = i;\n            }\n            if (insertAt === -1) insertAt = section.lines.length - 1;\n            section.lines.splice(insertAt + 1, 0, line);\n        }\n    }\n}\n\n/**\n * Ensure an RTP header extension (`a=extmap:<id> <uri>`) is present, allocating\n * the next free id. Idempotent \u2014 a section already carrying the uri is untouched.\n */\nexport function ensureExtmap(section, uri) {\n    if (section.lines.some(l => l.startsWith('a=extmap:') && l.includes(uri))) return;\n    let maxId = 0, insertAt = -1;\n    for (let i = 0; i < section.lines.length; i++) {\n        const m = section.lines[i].match(/^a=extmap:(\\d+)/);\n        if (m) { maxId = Math.max(maxId, Number(m[1])); insertAt = i; }\n    }\n    if (insertAt === -1) {\n        // No extmap yet \u2014 place after mid/rtpmap area, else end.\n        insertAt = section.lines.findIndex(l => l.startsWith('a=mid:'));\n        if (insertAt === -1) insertAt = section.lines.length - 1;\n    }\n    section.lines.splice(insertAt + 1, 0, `a=extmap:${maxId + 1} ${uri}`);\n}\n\n/**\n * Ensure transport-wide-cc / nack / pli / fir / remb feedback and the TWCC header\n * extension are present on the audio/video m-lines per `cfg` (TRANSPORT_CONFIG).\n * Idempotent and non-destructive; SDP with no matching sections is returned as-is.\n */\nexport function applyTransport(sdp, cfg) {\n    if (!sdp || typeof sdp !== 'string' || !cfg) return sdp;\n    const parsed = splitSdp(sdp);\n    let changed = false;\n    for (const section of parsed.media) {\n        const kind = sectionKind(section);\n        const c = kind === 'video' ? cfg.video : kind === 'audio' ? cfg.audio : null;\n        if (!c) continue;\n        if (Array.isArray(c.rtcpFb)) { ensureRtcpFb(section, c.rtcpFb); changed = true; }\n        if (c.twcc && cfg.twccUri) { ensureExtmap(section, cfg.twccUri); changed = true; }\n    }\n    return changed ? joinSdp(parsed) : sdp;\n}\n", "// Audio sender / transceiver configuration for calls.\n//\n// Splits the brief's \"configureAudioSender\" into the three WebRTC surfaces it\n// actually touches, because a single RTCRtpSender cannot do all of them:\n//   - setCodecPreferences  \u2192 on the TRANSCEIVER, before createOffer (RED ordering)\n//   - fmtp munging          \u2192 on the SDP string (see sdp.js applyOpusSettings)\n//   - setParameters         \u2192 on the SENDER, any time after it exists\n//\n// All functions feature-detect and swallow unsupported-API errors so Safari /\n// Firefox (which vary on RED and setCodecPreferences) degrade gracefully.\n\nimport { AUDIO_CONFIG, IS_WEBKIT } from './config.js';\n\n/**\n * Order codecs so RED (RFC 2198) is preferred first and Opus second, keeping any\n * other codecs (e.g. telephone-event) after them. No-op when RED isn't offered\n * or setCodecPreferences is unsupported.\n * @param {RTCRtpTransceiver} transceiver\n */\nexport function applyAudioCodecPreferences(transceiver) {\n    try {\n        if (IS_WEBKIT) return false; // codec preferences skipped on WebKit (capture-safe)\n        if (!transceiver || typeof transceiver.setCodecPreferences !== 'function') return false;\n        if (!AUDIO_CONFIG.preferRed) return false;\n        const caps = (typeof RTCRtpSender !== 'undefined' && RTCRtpSender.getCapabilities)\n            ? RTCRtpSender.getCapabilities('audio')\n            : null;\n        if (!caps || !Array.isArray(caps.codecs)) return false;\n\n        const isRed = c => /red$/i.test(c.mimeType);\n        const isOpus = c => /opus$/i.test(c.mimeType);\n        if (!caps.codecs.some(isRed)) return false; // RED not available\n\n        const red = caps.codecs.filter(isRed);\n        const opus = caps.codecs.filter(isOpus);\n        const rest = caps.codecs.filter(c => !isRed(c) && !isOpus(c));\n        transceiver.setCodecPreferences([...red, ...opus, ...rest]);\n        return true;\n    } catch (e) {\n        return false;\n    }\n}\n\n/**\n * Apply sender-level parameters: high bandwidth priority, high network priority\n * (audio ahead of video on the wire) and a maxBitrate cap. Uses read-modify-write\n * on getParameters()/setParameters() so we never clobber existing encodings.\n * @param {RTCRtpSender} sender\n * @param {object} [options] overrides for AUDIO_CONFIG.sender\n */\nexport async function configureAudioSender(sender, options = {}) {\n    try {\n        if (IS_WEBKIT) return false; // sender setParameters skipped on WebKit (capture-safe)\n        if (!sender || typeof sender.getParameters !== 'function') return false;\n        const cfg = { ...AUDIO_CONFIG.sender, ...options };\n        const params = sender.getParameters();\n        if (!params.encodings || params.encodings.length === 0) params.encodings = [{}];\n        for (const enc of params.encodings) {\n            enc.maxBitrate = cfg.maxBitrate;\n            enc.priority = cfg.priority;\n            enc.networkPriority = cfg.networkPriority;\n        }\n        await sender.setParameters(params);\n        return true;\n    } catch (e) {\n        return false;\n    }\n}\n", "// Video sender / transceiver configuration for calls.\n//\n// Strategy for 1:1 P2P (single remote peer): use a SINGLE encoding with SVC\n// (VP9 L3T3_KEY / AV1 L1T3) applied through sender.setParameters \u2014 this needs no\n// addTransceiver/rids and therefore doesn't disturb the working addTrack flow.\n// Layered SVC already gives graceful per-layer degradation for one receiver;\n// multi-rid simulcast (mainly useful for SFUs) is a documented fallback, not\n// wired here. All calls feature-detect and fall back gracefully:\n//   VP9 \u2192 AV1 \u2192 H.264 \u2192 VP8, and SVC \u2192 plain encoding if a mode is rejected.\n\nimport { VIDEO_CONFIG, IS_WEBKIT } from './config.js';\n\nconst CODEC_RANK = { VP9: 0, AV1: 1, H264: 2, VP8: 3 };\n\n/** 'video/VP9' \u2192 'VP9', 'video/H264' \u2192 'H264', 'video/rtx' \u2192 'RTX', \u2026 */\nexport function codecShortName(mimeType) {\n    const sub = String(mimeType || '').split('/')[1] || '';\n    return sub.toUpperCase();\n}\n\n/**\n * Reorder a getCapabilities().codecs array so our preferred video codecs come\n * first (VP9, AV1, H264, VP8), with everything else (rtx / red / *fec) kept in\n * its original relative order afterwards \u2014 dropping rtx/fec would break\n * retransmission, so they must stay in the list.\n */\nexport function sortVideoCodecs(codecs) {\n    const rank = c => {\n        const n = codecShortName(c.mimeType);\n        return Object.prototype.hasOwnProperty.call(CODEC_RANK, n) ? CODEC_RANK[n] : 99;\n    };\n    return codecs\n        .map((c, i) => ({ c, i }))\n        .sort((a, b) => (rank(a.c) - rank(b.c)) || (a.i - b.i))   // stable\n        .map(x => x.c);\n}\n\n/** The top available video codec by our preference order, or null. */\nexport function pickPreferredVideoCodec(caps) {\n    if (!caps || !Array.isArray(caps.codecs)) return null;\n    const present = new Set(caps.codecs.map(c => codecShortName(c.mimeType)));\n    for (const name of VIDEO_CONFIG.codecPreferenceOrder) if (present.has(name)) return name;\n    return null;\n}\n\nfunction videoCaps() {\n    return (typeof RTCRtpSender !== 'undefined' && RTCRtpSender.getCapabilities)\n        ? RTCRtpSender.getCapabilities('video') : null;\n}\n\n/**\n * Order codec preferences on the video transceiver (VP9 first \u2026). Must be called\n * before createOffer/createAnswer. Returns the chosen top codec name (or false).\n * @param {RTCRtpTransceiver} transceiver\n */\nexport function applyVideoCodecPreferences(transceiver) {\n    try {\n        if (IS_WEBKIT) return false; // codec preferences skipped on WebKit (capture-safe)\n        if (!transceiver || typeof transceiver.setCodecPreferences !== 'function') return false;\n        const caps = videoCaps();\n        if (!caps || !Array.isArray(caps.codecs)) return false;\n        transceiver.setCodecPreferences(sortVideoCodecs(caps.codecs));\n        return pickPreferredVideoCodec(caps);\n    } catch (e) {\n        return false;\n    }\n}\n\n/**\n * Whether the browser confirms the SVC scalabilityMode we want for a codec.\n * Uses the `scalabilityModes` capability field (Chromium M113+, recent Firefox).\n * When it's absent we return false so we fall back to simulcast \u2014 safer than\n * assuming SVC on a browser that can't do it (e.g. older Firefox/Safari).\n */\nexport function codecSupportsSvc(caps, name) {\n    const codec = caps?.codecs?.find(c => codecShortName(c.mimeType) === name);\n    const modes = codec && codec.scalabilityModes;\n    if (!Array.isArray(modes)) return false;\n    const want = name === 'AV1' ? VIDEO_CONFIG.av1.scalabilityMode : VIDEO_CONFIG.vp9.preferredScalabilityMode;\n    return modes.includes(want);\n}\n\n/**\n * Build the `sendEncodings` for addTransceiver('video', \u2026) per the brief:\n *   - VP9/AV1 with confirmed SVC \u2192 a SINGLE encoding with scalabilityMode\n *     (one stream that degrades by layer \u2014 ideal for 1:1),\n *   - VP9 without confirmed SVC \u2192 the 3-rid L1T3 simulcast ladder,\n *   - H.264/VP8 (or AV1 w/o SVC) \u2192 plain 3-rid simulcast.\n * @param {RTCRtpCapabilities} [caps] pass to override detection (tests)\n */\nexport function buildVideoSendEncodings(caps = videoCaps()) {\n    const preferred = pickPreferredVideoCodec(caps) || 'VP8';\n    if ((preferred === 'VP9' || preferred === 'AV1') && codecSupportsSvc(caps, preferred)) {\n        const plan = encodingPlanFor(preferred);\n        return [{ scalabilityMode: plan.scalabilityMode, maxBitrate: plan.maxBitrate }];\n    }\n    if (preferred === 'VP9') {\n        return VIDEO_CONFIG.vp9.simulcast.map(e => ({ ...e }));\n    }\n    return VIDEO_CONFIG.simulcast.map(e => ({ ...e }));\n}\n\n/** SVC mode + bitrate + degradation for a given codec (single-encoding P2P). */\nexport function encodingPlanFor(codecName) {\n    if (codecName === 'VP9') {\n        return { scalabilityMode: VIDEO_CONFIG.vp9.preferredScalabilityMode, maxBitrate: 1500000, degradationPreference: VIDEO_CONFIG.vp9.degradationPreference };\n    }\n    if (codecName === 'AV1') {\n        return { scalabilityMode: VIDEO_CONFIG.av1.scalabilityMode, maxBitrate: VIDEO_CONFIG.av1.maxBitrate, degradationPreference: VIDEO_CONFIG.av1.degradationPreference };\n    }\n    // H.264 / VP8 / unknown: plain single encoding, no SVC.\n    return { scalabilityMode: undefined, maxBitrate: 1500000, degradationPreference: 'balanced' };\n}\n\n/**\n * Apply the single-encoding SVC plan + networkPriority + degradationPreference to\n * a video sender via setParameters. Falls back to a plain encoding if the browser\n * rejects the requested scalabilityMode (Firefox/Safari SVC gaps).\n * @param {RTCRtpSender} sender\n */\nexport async function configureVideoSender(sender, options = {}) {\n    try {\n        if (IS_WEBKIT) return false; // sender setParameters skipped on WebKit (capture-safe)\n        if (!sender || typeof sender.getParameters !== 'function') return false;\n        const preferred = pickPreferredVideoCodec(videoCaps()) || 'VP8';\n        const plan = { ...encodingPlanFor(preferred), ...options };\n        const params = sender.getParameters();\n        if (!params.encodings || params.encodings.length === 0) params.encodings = [{}];\n        const simulcast = params.encodings.length > 1;\n\n        if (simulcast) {\n            // Simulcast: keep the per-rid bitrate ladder set at addTransceiver time;\n            // only stamp networkPriority so video stays below audio on the wire.\n            for (const enc of params.encodings) enc.networkPriority = VIDEO_CONFIG.networkPriority;\n        } else {\n            const enc = params.encodings[0];\n            enc.maxBitrate = plan.maxBitrate;\n            enc.networkPriority = VIDEO_CONFIG.networkPriority;\n            if (plan.scalabilityMode) enc.scalabilityMode = plan.scalabilityMode;\n        }\n        if (plan.degradationPreference) params.degradationPreference = plan.degradationPreference;\n\n        try {\n            await sender.setParameters(params);\n            return true;\n        } catch (e) {\n            // Most likely an unsupported scalabilityMode \u2192 retry without it.\n            if (!simulcast && plan.scalabilityMode) {\n                delete params.encodings[0].scalabilityMode;\n                try {\n                    await sender.setParameters(params);\n                    return true;\n                } catch (e2) {\n                    return false;\n                }\n            }\n            return false;\n        }\n    } catch (e) {\n        return false;\n    }\n}\n", "// getStats parsing + quality classification for adaptive calls.\n//\n// summarizeStats() takes a plain array of RTCStats objects (Array.from(report\n// .values())) plus the previous counter snapshot, so it is fully unit-testable\n// in Node without a live RTCPeerConnection.\n\n/**\n * Reduce a getStats() report to the few numbers the controller / UI need.\n * @param {Array<object>} stats  RTCStats objects (video preferred over audio).\n * @param {{packetsSent?:number, packetsLost?:number}} [prev] previous counters.\n * @returns {{lossPct:number, rttMs:number, jitterMs:number,\n *            availableOutgoingBitrate:(number|null), qualityLimitationReason:string,\n *            counters:{packetsSent:number, packetsLost:number}, hasData:boolean}}\n */\nexport function summarizeStats(stats, prev = {}) {\n    let outbound = null, remoteInbound = null, candidatePair = null;\n    for (const s of stats) {\n        if (!s || typeof s.type !== 'string') continue;\n        if (s.type === 'outbound-rtp' && !s.isRemote) {\n            if (!outbound || s.kind === 'video') outbound = s;         // prefer video\n        } else if (s.type === 'remote-inbound-rtp') {\n            if (!remoteInbound || s.kind === 'video') remoteInbound = s;\n        } else if (s.type === 'candidate-pair') {\n            const active = s.nominated || s.selected || s.state === 'succeeded';\n            if (active && (!candidatePair || s.nominated)) candidatePair = s;\n        }\n    }\n\n    const packetsSent = Number(outbound?.packetsSent ?? 0);\n    const packetsLost = Number(remoteInbound?.packetsLost ?? 0);\n    const dSent = packetsSent - (prev.packetsSent ?? packetsSent);\n    const dLost = packetsLost - (prev.packetsLost ?? packetsLost);\n    const denom = dSent + dLost;\n    // Interval loss ratio (guard against counter resets / first sample).\n    const lossPct = denom > 0 ? Math.min(1, Math.max(0, dLost / denom)) : 0;\n\n    const rttSec = candidatePair?.currentRoundTripTime ?? remoteInbound?.roundTripTime ?? 0;\n    const rttMs = Number(rttSec) * 1000;\n    const jitterMs = Number(remoteInbound?.jitter ?? 0) * 1000;\n    const availableOutgoingBitrate = candidatePair?.availableOutgoingBitrate != null\n        ? Number(candidatePair.availableOutgoingBitrate) : null;\n    const qualityLimitationReason = outbound?.qualityLimitationReason ?? 'none';\n\n    return {\n        lossPct, rttMs, jitterMs, availableOutgoingBitrate, qualityLimitationReason,\n        counters: { packetsSent, packetsLost },\n        hasData: !!(outbound && (remoteInbound || candidatePair)),\n    };\n}\n\n/**\n * Coarse connection-quality label for the UI, from loss + RTT.\n * @returns {'excellent'|'good'|'fair'|'poor'|null} null when there's no data yet.\n */\nexport function qualityFromMetrics(m) {\n    if (!m || !m.hasData) return null;\n    const l = m.lossPct, r = m.rttMs;\n    if (l < 0.03 && r < 150) return 'excellent';\n    if (l < 0.07 && r < 250) return 'good';\n    if (l < 0.15 && r < 400) return 'fair';\n    return 'poor';\n}\n", "// NetworkAdaptationController \u2014 reactive bitrate control for calls.\n//\n// Once a second it reads pc.getStats(), classifies the link, and nudges the VIDEO\n// sender's maxBitrate / scaleResolutionDownBy via setParameters \u2014 never\n// renegotiation, never touching the tracks, never touching AUDIO (audio stays at\n// its configured bitrate so speech survives; see ADAPTATION_CONFIG.audioProtect).\n//\n// The decision logic (decideAdaptation) is pure and unit-tested separately from\n// the live getStats/setParameters plumbing.\n\nimport { ADAPTATION_CONFIG, IS_WEBKIT } from '../config.js';\nimport { summarizeStats, qualityFromMetrics } from './metrics.js';\n\n/**\n * Pure adaptation decision.\n * @param {object} m      metrics from summarizeStats\n * @param {object} state  { targetBitrate, ceilingBitrate, scaleResolutionDownBy, goodTicks }\n * @param {object} cfg    ADAPTATION_CONFIG\n * @returns {{targetBitrate:number, scaleResolutionDownBy:number, goodTicks:number,\n *            changed:boolean, reason:string}}\n */\nexport function decideAdaptation(m, state, cfg = ADAPTATION_CONFIG) {\n    let { targetBitrate, ceilingBitrate, scaleResolutionDownBy, goodTicks } = state;\n    let changed = false, reason = 'steady';\n\n    if (m.qualityLimitationReason === 'cpu') {\n        // CPU-bound: drop resolution, leave bitrate alone (brief \u00A75).\n        const next = Math.min(4, +(scaleResolutionDownBy * cfg.cpuScaleStep).toFixed(3));\n        if (next !== scaleResolutionDownBy) { scaleResolutionDownBy = next; changed = true; }\n        goodTicks = 0; reason = 'cpu';\n    } else if (m.lossPct > cfg.loss.highPct || m.rttMs > cfg.rtt.highMs) {\n        // Congestion: step video bitrate down (never below the floor).\n        const next = Math.max(cfg.minVideoBitrate, Math.round(targetBitrate * (1 - cfg.stepDownPct)));\n        if (next !== targetBitrate) { targetBitrate = next; changed = true; }\n        goodTicks = 0; reason = 'backoff';\n    } else if (m.lossPct < cfg.loss.recoverPct && m.rttMs < cfg.rtt.recoverMs) {\n        // Sustained good link: ramp up after enough consecutive good ticks.\n        goodTicks += 1; reason = 'recovering';\n        if (goodTicks >= cfg.recoverStableTicks) {\n            const next = Math.min(ceilingBitrate, Math.round(targetBitrate * (1 + cfg.stepUpPct)));\n            if (next !== targetBitrate) { targetBitrate = next; changed = true; reason = 'rampup'; }\n            goodTicks = 0;\n        }\n    } else {\n        goodTicks = 0; // neutral zone: hold.\n    }\n\n    return { targetBitrate, scaleResolutionDownBy, goodTicks, changed, reason };\n}\n\nexport class NetworkAdaptationController {\n    /**\n     * @param {RTCPeerConnection} pc\n     * @param {object} opts { getVideoSender:()=>RTCRtpSender|null, ceilingBitrate?, onQuality?, cfg? }\n     */\n    constructor(pc, opts = {}) {\n        this.pc = pc;\n        this.getVideoSender = opts.getVideoSender || (() => null);\n        this.onQuality = opts.onQuality || (() => {});\n        this.cfg = opts.cfg || ADAPTATION_CONFIG;\n        this._timer = null;\n        this._prevCounters = {};\n        this._lastQuality = undefined;\n        this.state = {\n            targetBitrate: opts.ceilingBitrate || 1500000,\n            ceilingBitrate: opts.ceilingBitrate || 1500000,\n            scaleResolutionDownBy: 1,\n            goodTicks: 0,\n        };\n    }\n\n    start() {\n        if (this._timer) return;\n        this._timer = setInterval(() => { this._tick().catch(() => {}); }, this.cfg.intervalMs);\n    }\n\n    stop() {\n        if (this._timer) { clearInterval(this._timer); this._timer = null; }\n    }\n\n    async _tick() {\n        if (!this.pc || typeof this.pc.getStats !== 'function') return;\n        const report = await this.pc.getStats();\n        const stats = typeof report.values === 'function' ? Array.from(report.values()) : report;\n        const m = summarizeStats(stats, this._prevCounters);\n        this._prevCounters = m.counters;\n\n        // Quality \u2192 UI (only emit on change).\n        const q = qualityFromMetrics(m);\n        if (q && q !== this._lastQuality) {\n            this._lastQuality = q;\n            try { this.onQuality(q, m); } catch (_) {}\n        }\n\n        if (!m.hasData) return;\n\n        const decision = decideAdaptation(m, this.state, this.cfg);\n        this.state = {\n            targetBitrate: decision.targetBitrate,\n            ceilingBitrate: this.state.ceilingBitrate,\n            scaleResolutionDownBy: decision.scaleResolutionDownBy,\n            goodTicks: decision.goodTicks,\n        };\n        if (decision.changed) {\n            await this._applyToVideoSender();\n        }\n    }\n\n    async _applyToVideoSender() {\n        // WebKit: never write sender params (kills the capture); quality indicator\n        // still works (read-only getStats). Safari's own congestion control adapts.\n        if (IS_WEBKIT) return;\n        const sender = this.getVideoSender();\n        if (!sender || typeof sender.getParameters !== 'function') return;\n        try {\n            const params = sender.getParameters();\n            if (!params.encodings || params.encodings.length === 0) params.encodings = [{}];\n            if (params.encodings.length === 1) {\n                // Single encoding (SVC or plain): cap bitrate + scale resolution.\n                params.encodings[0].maxBitrate = this.state.targetBitrate;\n                params.encodings[0].scaleResolutionDownBy = this.state.scaleResolutionDownBy;\n            } else {\n                // Simulcast: throttle only the TOP (highest-bitrate) layer so the\n                // low/mid layers keep flowing; leave their per-rid scale ladder intact.\n                const top = params.encodings[params.encodings.length - 1];\n                top.maxBitrate = this.state.targetBitrate;\n            }\n            await sender.setParameters(params);\n        } catch (e) {\n            // WebKit/older browsers can reject setParameters; safe to skip this tick.\n        }\n    }\n}\n", "/**\n * Double Ratchet (Signal specification) for SecureBit.chat.\n *\n * WHY THIS EXISTS\n * ---------------\n * Until now the session derived one set of keys from a single ECDH at handshake\n * time and used them for the whole conversation. `rotateKeys()` was written but\n * never called and `keyRotationInterval` was null, so a key recovered at any\n * point \u2014 from a heap snapshot, a compromised extension, a seized device with\n * the tab still open \u2014 decrypted every message ever sent in that session,\n * including messages sent hours earlier. Forward secrecy existed only BETWEEN\n * sessions.\n *\n * The Double Ratchet fixes both halves of that:\n *\n *   - Symmetric ratchet: each message gets its own key, derived from a chain key\n *     by a one-way KDF. The message key is destroyed after use and the chain key\n *     is replaced by its successor, so a key captured now cannot reproduce any\n *     earlier one. That is forward secrecy per message.\n *\n *   - DH ratchet: each time the conversation changes direction, the replying\n *     side introduces a fresh ECDH key pair and both sides mix a new shared\n *     secret into the root key. An attacker who learns the entire state is\n *     locked out again as soon as one message is exchanged in each direction.\n *     That is post-compromise security, which no amount of symmetric ratcheting\n *     provides.\n *\n * INITIALISATION WITHOUT A HANDSHAKE CHANGE\n * -----------------------------------------\n * Signal bootstraps from a pre-key bundle. We do not need one: both peers\n * already hold each other's authenticated ECDH public key from the existing\n * handshake, and the SAS the user compared covers exactly those keys. So the\n * initiator starts with a fresh ratchet key against the peer's handshake key,\n * and the responder starts with its own handshake key pair as its ratchet pair.\n * The first DH ratchet then agrees on the same secret from both directions.\n * Nothing new has to be sent during setup, which keeps the change confined to\n * the message path.\n *\n * WHAT IS AUTHENTICATED\n * ---------------------\n * The header (ratchet public key, previous chain length, message number) travels\n * in the clear \u2014 the receiver needs it before it can derive a key \u2014 but it is\n * passed to AES-GCM as additional authenticated data. Tampering with any header\n * field makes decryption fail rather than silently redirecting the ratchet.\n */\n\nconst ROOT_INFO = 'SecureBit-DR-Root-v1';\nconst MESSAGE_INFO = 'SecureBit-DR-Message-v1';\nconst INIT_INFO = 'SecureBit-DR-Init-v1';\n\n// Chain-key advance constants, per the Signal spec's KDF_CK.\nconst MK_SEED = Uint8Array.of(0x01);\nconst CK_SEED = Uint8Array.of(0x02);\n\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\n\n/**\n * Bounds on out-of-order tolerance. These are a DoS control, not a tuning knob:\n * every skipped message forces us to derive and RETAIN a key, so an attacker who\n * can pick message numbers would otherwise make us allocate without limit by\n * sending n = 2^31 once.\n */\nexport const RATCHET_LIMITS = Object.freeze({\n    // How far ahead of the expected number a single message may jump.\n    MAX_SKIP_PER_CHAIN: 512,\n    // Total retained keys for messages that never arrived, across all chains.\n    MAX_SKIPPED_KEYS: 1024,\n    // Retained keys older than this are dropped: the data channel is reliable\n    // and ordered, so a gap that has not resolved in minutes never will.\n    SKIPPED_KEY_TTL_MS: 5 * 60 * 1000\n});\n\nfunction b64(bytes) {\n    let binary = '';\n    const view = new Uint8Array(bytes);\n    for (let i = 0; i < view.length; i++) binary += String.fromCharCode(view[i]);\n    return btoa(binary);\n}\n\nfunction unb64(text) {\n    const binary = atob(text);\n    const out = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n    return out;\n}\n\nfunction zeroize(bytes) {\n    try {\n        if (bytes && bytes.length) {\n            crypto.getRandomValues(bytes);\n            bytes.fill(0);\n        }\n    } catch (_) { /* detached buffer \u2014 already unreadable */ }\n}\n\nasync function hkdf(ikm, salt, info, lengthBytes) {\n    const key = await crypto.subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);\n    const bits = await crypto.subtle.deriveBits(\n        { name: 'HKDF', hash: 'SHA-256', salt, info: enc.encode(info) },\n        key,\n        lengthBytes * 8\n    );\n    return new Uint8Array(bits);\n}\n\nasync function hmac(keyBytes, data) {\n    const key = await crypto.subtle.importKey(\n        'raw', keyBytes, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']\n    );\n    return new Uint8Array(await crypto.subtle.sign('HMAC', key, data));\n}\n\n/** KDF_CK \u2014 advance a chain and emit this message's key. One-way by construction. */\nasync function advanceChain(chainKey) {\n    const messageKey = await hmac(chainKey, MK_SEED);\n    const nextChainKey = await hmac(chainKey, CK_SEED);\n    return { messageKey, nextChainKey };\n}\n\n/** KDF_RK \u2014 mix a fresh DH secret into the root key, yielding the next chain. */\nasync function advanceRoot(rootKey, dhOutput) {\n    const derived = await hkdf(dhOutput, rootKey, ROOT_INFO, 64);\n    const nextRoot = derived.slice(0, 32);\n    const chainKey = derived.slice(32, 64);\n    zeroize(derived);\n    return { nextRoot, chainKey };\n}\n\nexport class DoubleRatchet {\n    constructor() {\n        this._rootKey = null;\n        this._sendingChainKey = null;\n        this._receivingChainKey = null;\n        this._selfKeyPair = null;      // DHs\n        this._remotePublicKey = null;  // DHr\n        this._remotePublicKeyB64 = null;\n        this._sendCount = 0;           // Ns\n        this._receiveCount = 0;        // Nr\n        this._previousSendCount = 0;   // PN\n        this._skipped = new Map();     // \"<dhB64>|<n>\" -> { key, storedAt }\n        this._namedCurve = 'P-384';\n        this._initialised = false;\n    }\n\n    /**\n     * @param {object} options\n     * @param {Uint8Array} options.sharedSecret  ECDH output from the handshake.\n     * @param {Uint8Array} options.sessionSalt   The session's 64-byte salt.\n     * @param {CryptoKey}  options.selfPrivateKey    Our handshake ECDH private key.\n     * @param {CryptoKey}  options.remotePublicKey   Peer's handshake ECDH public key.\n     * @param {boolean}    options.isInitiator   True for the side that created the offer.\n     */\n    async init({ sharedSecret, sessionSalt, selfPrivateKey, remotePublicKey, isInitiator }) {\n        if (!(sharedSecret instanceof Uint8Array) || sharedSecret.length === 0) {\n            throw new Error('DoubleRatchet: a shared secret is required');\n        }\n        if (!(selfPrivateKey instanceof CryptoKey) || !(remotePublicKey instanceof CryptoKey)) {\n            throw new Error('DoubleRatchet: handshake ECDH keys are required');\n        }\n\n        this._namedCurve = selfPrivateKey.algorithm?.namedCurve || 'P-384';\n\n        // The root key is bound to the session salt, so two sessions between the\n        // same pair of long-term keys never share ratchet state.\n        this._rootKey = await hkdf(sharedSecret, sessionSalt ?? new Uint8Array(0), INIT_INFO, 32);\n\n        if (isInitiator) {\n            // Send first: adopt a fresh ratchet key immediately and step the root\n            // once, so the very first message already leaves the handshake key\n            // behind.\n            this._selfKeyPair = await this._generateKeyPair();\n\n            // Deliberately NOT exported to base64 here. The peer's handshake\n            // public key arrives via importSignedPublicKey, which imports it as\n            // NON-EXTRACTABLE \u2014 exporting it throws InvalidAccessError and would\n            // abort ratchet setup on the initiator only, silently downgrading it\n            // to static keys while the responder ran fine. The b64 form exists\n            // solely to recognise a changed ratchet key on inbound messages, and\n            // there are none yet: leaving it null makes the peer's first message\n            // (which carries their own fresh ratchet key) correctly read as a new\n            // chain and trigger the DH ratchet.\n            this._remotePublicKey = remotePublicKey;\n            this._remotePublicKeyB64 = null;\n\n            const dh = await this._dh(this._selfKeyPair.privateKey, this._remotePublicKey);\n            const { nextRoot, chainKey } = await advanceRoot(this._rootKey, dh);\n            zeroize(dh);\n            zeroize(this._rootKey);\n            this._rootKey = nextRoot;\n            this._sendingChainKey = chainKey;\n        } else {\n            // Receive first: keep the handshake key pair as the current ratchet\n            // pair so the initiator's first DH lands on a key we hold, and take\n            // no chain until that message arrives.\n            this._selfKeyPair = { privateKey: selfPrivateKey, publicKey: null };\n            this._remotePublicKey = null;\n            this._remotePublicKeyB64 = null;\n        }\n\n        this._initialised = true;\n    }\n\n    get isInitialised() { return this._initialised; }\n\n    /**\n     * False on the responder until the initiator's first message arrives.\n     *\n     * This is inherent to the Double Ratchet, not an implementation gap: the\n     * responder's sending chain is only defined once it has seen the initiator's\n     * ratchet key, because both sides must derive it from the same DH. Callers\n     * have to check this rather than assume, or the responder's first message \u2014\n     * which the app sends automatically as a presence update the moment\n     * verification completes \u2014 throws instead of going out.\n     */\n    get canEncrypt() {\n        return this._initialised && this._sendingChainKey !== null;\n    }\n\n    /** Diagnostics only \u2014 deliberately exposes no key material. */\n    getState() {\n        return {\n            initialised: this._initialised,\n            sending: this._sendingChainKey !== null,\n            receiving: this._receivingChainKey !== null,\n            sendCount: this._sendCount,\n            receiveCount: this._receiveCount,\n            previousSendCount: this._previousSendCount,\n            skippedKeys: this._skipped.size\n        };\n    }\n\n    async _generateKeyPair() {\n        return crypto.subtle.generateKey(\n            { name: 'ECDH', namedCurve: this._namedCurve },\n            false,\n            ['deriveKey', 'deriveBits']\n        );\n    }\n\n    async _dh(privateKey, publicKey) {\n        const bits = await crypto.subtle.deriveBits(\n            { name: 'ECDH', public: publicKey }, privateKey, 256\n        );\n        return new Uint8Array(bits);\n    }\n\n    async _selfPublicKeyB64() {\n        if (!this._selfKeyPair?.publicKey) return null;\n        return b64(await crypto.subtle.exportKey('spki', this._selfKeyPair.publicKey));\n    }\n\n    async _importPublic(spkiB64) {\n        return crypto.subtle.importKey(\n            'spki', unb64(spkiB64), { name: 'ECDH', namedCurve: this._namedCurve }, true, []\n        );\n    }\n\n    /** Derive the AES-GCM key and IV for one message, then forget the message key. */\n    async _messageCipher(messageKey) {\n        const material = await hkdf(messageKey, new Uint8Array(32), MESSAGE_INFO, 44);\n        const key = await crypto.subtle.importKey(\n            'raw', material.slice(0, 32), { name: 'AES-GCM' }, false, ['encrypt', 'decrypt']\n        );\n        const iv = material.slice(32, 44);\n        zeroize(material);\n        return { key, iv };\n    }\n\n    /**\n     * @param {string} plaintext\n     * @returns {Promise<{header: string, ciphertext: string}>} header is the exact\n     *   string that must be transmitted and fed back to decrypt(): it doubles as\n     *   the AAD, so re-serialising it on the far side could change a byte and\n     *   fail authentication for no reason.\n     */\n    async encrypt(plaintext) {\n        if (!this._initialised) throw new Error('DoubleRatchet: not initialised');\n        if (!this._sendingChainKey) {\n            throw new Error('DoubleRatchet: no sending chain \u2014 awaiting the peer\\'s first message');\n        }\n\n        const { messageKey, nextChainKey } = await advanceChain(this._sendingChainKey);\n        zeroize(this._sendingChainKey);\n        this._sendingChainKey = nextChainKey;\n\n        const header = JSON.stringify({\n            dh: await this._selfPublicKeyB64(),\n            pn: this._previousSendCount,\n            n: this._sendCount\n        });\n        this._sendCount += 1;\n\n        const { key, iv } = await this._messageCipher(messageKey);\n        zeroize(messageKey);\n\n        const ciphertext = await crypto.subtle.encrypt(\n            { name: 'AES-GCM', iv, additionalData: enc.encode(header) },\n            key,\n            enc.encode(plaintext)\n        );\n\n        return { header, ciphertext: b64(ciphertext) };\n    }\n\n    /**\n     * @param {string} header      Exactly the string produced by encrypt().\n     * @param {string} ciphertext  Base64 body.\n     * @returns {Promise<string>} plaintext\n     */\n    async decrypt(header, ciphertext) {\n        if (!this._initialised) throw new Error('DoubleRatchet: not initialised');\n\n        let parsed;\n        try {\n            parsed = JSON.parse(header);\n        } catch (_) {\n            throw new Error('DoubleRatchet: malformed header');\n        }\n        const { dh, pn, n } = parsed;\n        if (typeof dh !== 'string' || !Number.isSafeInteger(n) || n < 0 ||\n            !Number.isSafeInteger(pn) || pn < 0) {\n            throw new Error('DoubleRatchet: invalid header fields');\n        }\n\n        this._pruneSkipped();\n\n        // A key retained for a message that arrived late. Only drop it once the\n        // message actually opens: a forged frame quoting a real header must not\n        // consume the key that the genuine message still needs.\n        const skippedId = `${dh}|${n}`;\n        const retained = this._skipped.get(skippedId);\n        if (retained) {\n            const plaintext = await this._open(retained.key, header, ciphertext);\n            this._skipped.delete(skippedId);\n            zeroize(retained.key);\n            return plaintext;\n        }\n\n        // SECURITY / ROBUSTNESS: everything below is staged and only committed\n        // once the message authenticates. The header is attacker-reachable \u2014 it\n        // travels in the clear so the receiver can route on it \u2014 and mutating the\n        // ratchet before verifying would let one forged or corrupted frame\n        // advance our chains past the peer's, desynchronising the session\n        // permanently. AES-GCM covers the header as AAD, so a bad frame is\n        // detected; it must simply leave no trace when it is.\n        const staged = await this._stageReceive(dh, pn, n);\n\n        let plaintext;\n        try {\n            plaintext = await this._open(staged.messageKey, header, ciphertext);\n        } catch (error) {\n            staged.discard();\n            throw error;\n        }\n\n        staged.commit();\n        return plaintext;\n    }\n\n    /**\n     * Work out which key opens this message and what the resulting state would\n     * be, without touching `this`. Returns the candidate key plus commit/discard.\n     */\n    async _stageReceive(dh, pn, n) {\n        const isNewChain = dh !== this._remotePublicKeyB64;\n        const pending = [];       // skipped keys to retain on commit\n        const toZeroOnCommit = []; // superseded chain keys\n        let ratchet = null;\n\n        let chainKey;\n        let receiveCount;\n        let remoteB64;\n\n        if (isNewChain) {\n            // Messages still missing from the OLD chain, before it is replaced.\n            if (this._receivingChainKey) {\n                const carried = await this._collectSkipped(\n                    this._receivingChainKey, this._receiveCount, pn, this._remotePublicKeyB64\n                );\n                pending.push(...carried.keys);\n                toZeroOnCommit.push(carried.finalChainKey);\n            }\n            ratchet = await this._stageDhRatchet(dh);\n            chainKey = ratchet.receivingChainKey;\n            receiveCount = 0;\n            remoteB64 = dh;\n        } else {\n            chainKey = this._receivingChainKey;\n            receiveCount = this._receiveCount;\n            remoteB64 = this._remotePublicKeyB64;\n        }\n\n        if (!chainKey) {\n            throw new Error('DoubleRatchet: no receiving chain for this message');\n        }\n\n        const gap = await this._collectSkipped(chainKey, receiveCount, n, remoteB64);\n        pending.push(...gap.keys);\n\n        const { messageKey, nextChainKey } = await advanceChain(gap.finalChainKey);\n        if (gap.finalChainKey !== chainKey) toZeroOnCommit.push(gap.finalChainKey);\n\n        return {\n            messageKey,\n            commit: () => {\n                if (ratchet) ratchet.apply();\n                if (this._receivingChainKey && this._receivingChainKey !== nextChainKey) {\n                    zeroize(this._receivingChainKey);\n                }\n                for (const key of toZeroOnCommit) zeroize(key);\n                this._receivingChainKey = nextChainKey;\n                this._receiveCount = n + 1;\n                this._remotePublicKeyB64 = remoteB64;\n                for (const { id, key } of pending) this._rememberSkipped(id, key);\n                zeroize(messageKey);\n            },\n            discard: () => {\n                if (ratchet) ratchet.discard();\n                for (const { key } of pending) zeroize(key);\n                for (const key of toZeroOnCommit) zeroize(key);\n                zeroize(nextChainKey);\n                zeroize(messageKey);\n            }\n        };\n    }\n\n    /**\n     * Derive the keys for messages `from`..`until-1` without mutating state.\n     * `until` comes off the wire, so the jump is bounded here rather than trusted.\n     */\n    async _collectSkipped(chainKey, from, until, remoteB64) {\n        if (until < from) {\n            // An older number on a chain we have already advanced past: either a\n            // replay or a duplicate. Its key is gone, so it cannot be opened.\n            throw new Error('DoubleRatchet: message number is behind the current chain');\n        }\n        if (until - from > RATCHET_LIMITS.MAX_SKIP_PER_CHAIN) {\n            throw new Error(\n                `DoubleRatchet: refusing to skip ${until - from} messages ` +\n                `(limit ${RATCHET_LIMITS.MAX_SKIP_PER_CHAIN})`\n            );\n        }\n\n        const keys = [];\n        let current = chainKey;\n        for (let i = from; i < until; i++) {\n            const { messageKey, nextChainKey } = await advanceChain(current);\n            if (current !== chainKey) zeroize(current);\n            current = nextChainKey;\n            keys.push({ id: `${remoteB64}|${i}`, key: messageKey });\n        }\n        return { keys, finalChainKey: current };\n    }\n\n    async _open(messageKey, header, ciphertext) {\n        const { key, iv } = await this._messageCipher(messageKey);\n        let opened;\n        try {\n            opened = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv, additionalData: enc.encode(header) },\n                key,\n                unb64(ciphertext)\n            );\n        } catch (_) {\n            // Wrong key, tampered body, or a tampered header \u2014 AES-GCM cannot\n            // tell us which, and neither should we: the answer is the same.\n            throw new Error('DoubleRatchet: authentication failed');\n        }\n        return dec.decode(opened);\n    }\n\n    _rememberSkipped(id, key) {\n        // Oldest-first eviction keeps the cache bounded even if every gap is\n        // legitimate; losing the oldest gap is preferable to unbounded growth.\n        while (this._skipped.size >= RATCHET_LIMITS.MAX_SKIPPED_KEYS) {\n            const oldest = this._skipped.keys().next().value;\n            const evicted = this._skipped.get(oldest);\n            this._skipped.delete(oldest);\n            if (evicted) zeroize(evicted.key);\n        }\n        this._skipped.set(id, { key, storedAt: Date.now() });\n    }\n\n    _pruneSkipped() {\n        const cutoff = Date.now() - RATCHET_LIMITS.SKIPPED_KEY_TTL_MS;\n        for (const [id, entry] of this._skipped) {\n            if (entry.storedAt < cutoff) {\n                zeroize(entry.key);\n                this._skipped.delete(id);\n            }\n        }\n    }\n\n    /**\n     * Compute the DH-ratchet step without applying it. The caller applies it only\n     * after the triggering message has authenticated \u2014 see _stageReceive.\n     */\n    async _stageDhRatchet(remotePublicKeyB64) {\n        const remotePublicKey = await this._importPublic(remotePublicKeyB64);\n\n        // Receiving chain: our CURRENT key pair against their new key. For the\n        // responder's first ratchet this is still the handshake key pair, which\n        // is exactly what the initiator derived against at init.\n        const receiveDh = await this._dh(this._selfKeyPair.privateKey, remotePublicKey);\n        const received = await advanceRoot(this._rootKey, receiveDh);\n        zeroize(receiveDh);\n\n        // Sending chain: a fresh key pair, so our next message moves the ratchet\n        // on again. This is the step that locks out an attacker who captured the\n        // previous state \u2014 without it there is no post-compromise security.\n        const nextSelfKeyPair = await this._generateKeyPair();\n        const sendDh = await this._dh(nextSelfKeyPair.privateKey, remotePublicKey);\n        const sending = await advanceRoot(received.nextRoot, sendDh);\n        zeroize(sendDh);\n\n        return {\n            receivingChainKey: received.chainKey,\n            apply: () => {\n                zeroize(this._rootKey);\n                zeroize(received.nextRoot);\n                if (this._sendingChainKey) zeroize(this._sendingChainKey);\n                this._rootKey = sending.nextRoot;\n                this._sendingChainKey = sending.chainKey;\n                this._selfKeyPair = nextSelfKeyPair;\n                this._remotePublicKey = remotePublicKey;\n                this._remotePublicKeyB64 = remotePublicKeyB64;\n                this._previousSendCount = this._sendCount;\n                this._sendCount = 0;\n            },\n            discard: () => {\n                zeroize(received.nextRoot);\n                zeroize(received.chainKey);\n                zeroize(sending.nextRoot);\n                zeroize(sending.chainKey);\n            }\n        };\n    }\n\n    /** Destroy every piece of key material this object holds. */\n    destroy() {\n        zeroize(this._rootKey);\n        zeroize(this._sendingChainKey);\n        zeroize(this._receivingChainKey);\n        for (const entry of this._skipped.values()) zeroize(entry.key);\n        this._skipped.clear();\n        this._rootKey = null;\n        this._sendingChainKey = null;\n        this._receivingChainKey = null;\n        this._selfKeyPair = null;\n        this._remotePublicKey = null;\n        this._remotePublicKeyB64 = null;\n        this._initialised = false;\n    }\n}\n", "// SBQ2 \u2014 connection descriptor v2.\n//\n// The out-of-band descriptor (QR / link / paste) carries ONLY what is needed to\n// bring up the DTLS association: ICE credentials, the DTLS certificate\n// fingerprint, and the candidate list. Every byte of key material \u2014 identity\n// key, ECDH key, signatures \u2014 travels in-band over the DataChannel that the\n// fingerprint already authenticates, and is bound to the descriptor by a\n// commitment carried here.\n//\n// Why that is safe, in one paragraph: the fingerprint is transferred over the\n// out-of-band channel the user already trusts (they are looking at the QR), and\n// DTLS will only complete with the holder of the matching private key. So the\n// channel is authenticated to whoever showed the code before a single byte of\n// key material moves. The commitment makes substitution of that material fail\n// closed automatically instead of relying on the human SAS comparison, and the\n// SAS itself is computed over a transcript that covers both descriptors\n// verbatim and both in-band blobs \u2014 so nothing that travelled out of band can\n// be altered without changing the digits the users read to each other.\n//\n// NOTE: the in-band half of that protocol is not implemented yet. This module\n// is the wire format only; see doc/descriptor-sbq2.md for the migration gate.\n//\n// This module is pure: no DOM, no crypto beyond an injected digest, no network.\n// It is the parser for fully attacker-controlled input, so every length, range\n// and alphabet is checked before the value is used, and the SDP is rebuilt by a\n// strict serializer from validated primitives \u2014 never by concatenating a string\n// that came off the wire.\n\nexport const SBQ2_VERSION = 0x02;\n\n// Hard limits applied BEFORE any structural parsing.\nexport const LIMITS = Object.freeze({\n    MAX_PAYLOAD_BYTES: 512,   // ~3.5x the largest descriptor we have ever measured\n    MAX_CANDIDATES: 8,\n    MIN_UFRAG: 4,             // RFC 8839: ice-ufrag is 4..256 chars\n    MAX_UFRAG: 64,\n    MIN_PWD: 22,              // RFC 8839: ice-pwd is 22..256 chars, >=128 bits of randomness\n    MAX_PWD: 64,\n    FINGERPRINT_BYTES: 32,    // SHA-256\n    COMMITMENT_BYTES: 16,     // 128-bit second-preimage resistance\n    BINDING_BYTES: 8,\n    MAX_LIFETIME_MINUTES: 60,\n    MAX_EXT_BYTES: 255,\n\n    // Byte budget for candidates admitted BEYOND the coverage set (coverage\n    // itself is never cut \u2014 see pruneCandidates). Derived from the acceptance\n    // target rather than picked: the largest answer head we have measured is\n    // Firefox's, at 104 bytes (version+flags+expiry+tag+fingerprint+8-char\n    // ufrag+32-char pwd+count+commitment), and QR version 8 at level M holds\n    // 152 bytes in byte mode. 152 - 104 = 48.\n    SURPLUS_CANDIDATE_BYTES: 48,\n\n    // Clock-skew allowance, applied in both directions on the expiry check.\n    //\n    // Two minutes is chosen against the failure it exists for: a receiver whose\n    // clock is off. An NTP-synced device is within milliseconds, and an\n    // unsynced modern device drifts on the order of seconds per day, so two\n    // minutes swallows every ordinary case. It does NOT swallow a grossly wrong\n    // clock (manually set, or reset to the epoch by a dead battery) \u2014 that is\n    // deliberate, because such a device cannot be given a meaningful freshness\n    // guarantee and should be told so. The cost is that the replay window grows\n    // from the nominal 10 minutes to 12; keeping the tolerance well under the\n    // lifetime is what bounds that.\n    CLOCK_SKEW_MS: 120_000,\n});\n\n// Expiry is stored as minutes since 2024-01-01T00:00:00Z in 24 bits, which runs\n// out in 2055. Minute granularity is far finer than any descriptor lifetime, and\n// uint16 was tried first and rejected: 65535 minutes is only 45 days of range.\nconst EPOCH_MS = Date.UTC(2024, 0, 1);\nconst MAX_EXPIRY_UNITS = 0xffffff;\n\nexport const TYPE = Object.freeze({ OFFER: 0, ANSWER: 1 });\nconst SETUP = Object.freeze(['actpass', 'active', 'passive']);\n\n// max-message-size, packed into two flag bits. Index 3 means \"an explicit value\n// is carried in extension 0x01\"; RFC 8841 makes 64 KiB the default when the\n// attribute is absent, which is why absent and 65536 share an encoding.\nconst MMS_ENUM = Object.freeze([262144, 1073741823, 65536, null]);\nconst MMS_EXPLICIT = 3;\n\n// Extension types. Unknown types are rejected, never skipped \u2014 see decodeExt.\nexport const EXT = Object.freeze({ MAX_MESSAGE_SIZE: 0x01 });\n\n// Candidate kinds. Values are wire constants \u2014 never renumber, only append.\nconst KIND = Object.freeze({\n    HOST_V4: 0, HOST_MDNS: 1, SRFLX_V4: 2, RELAY_V4: 3,\n    HOST_V6: 4, SRFLX_V6: 5, RELAY_V6: 6,\n});\nconst KIND_ADDR_LEN = Object.freeze({ 0: 4, 1: 16, 2: 4, 3: 4, 4: 16, 5: 16, 6: 16 });\nconst KIND_TYPE = Object.freeze({ 0: 'host', 1: 'host', 2: 'srflx', 3: 'relay', 4: 'host', 5: 'srflx', 6: 'relay' });\n// Address family for the coverage rule. mDNS is its own family: it resolves\n// only on the sender's link, so it covers a case neither v4 nor v6 does.\nconst KIND_FAMILY = Object.freeze({ 0: 'v4', 1: 'mdns', 2: 'v4', 3: 'v4', 4: 'v6', 5: 'v6', 6: 'v6' });\nconst TCPTYPE = Object.freeze([null, 'passive', 'active', 'so']);\n\n// RFC 8445 \u00A75.1.2.2 type preferences. We do not reproduce the sender's original\n// priority values: ICE priority only orders connectivity checks, and both peers\n// compute their own local priorities anyway. Re-deriving them from the type and\n// the candidate's position in the list preserves the sender's ordering intent\n// while costing zero bytes on the wire.\nconst TYPE_PREF = Object.freeze({ host: 126, srflx: 100, relay: 0 });\n\n// RFC 8839 ice-char = ALPHA / DIGIT / \"+\" / \"/\"\nconst ICE_CHAR = /^[A-Za-z0-9+/]+$/;\n\nclass DescriptorError extends Error {\n    constructor(message, code = 'malformed') { super(message); this.name = 'DescriptorError'; this.code = code; }\n}\nconst fail = (msg, code) => { throw new DescriptorError(msg, code); };\n\n// ---------------------------------------------------------------------------\n// SDP -> structured fields\n// ---------------------------------------------------------------------------\n\nconst UUID_RE = /^([0-9a-f]{8})-([0-9a-f]{4})-([0-9a-f]{4})-([0-9a-f]{4})-([0-9a-f]{12})\\.local$/i;\nconst IPV4_RE = /^(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/;\n\nfunction parseIpv4(s) {\n    const m = IPV4_RE.exec(s);\n    if (!m) return null;\n    const out = new Uint8Array(4);\n    for (let i = 0; i < 4; i++) {\n        const v = Number(m[i + 1]);\n        if (!Number.isInteger(v) || v < 0 || v > 255) return null;\n        out[i] = v;\n    }\n    return out;\n}\n\nfunction parseIpv6(s) {\n    // Accept the plain hextet forms (with \"::\" compression) and the dotted-quad\n    // tail used by IPv4-mapped and NAT64 addresses (64:ff9b::203.0.113.7).\n    if (!/^[0-9a-fA-F:.]+$/.test(s) || s.length > 45) return null;\n    let text = s;\n    let tail4 = null;\n    const lastColon = text.lastIndexOf(':');\n    if (text.includes('.')) {\n        tail4 = parseIpv4(text.slice(lastColon + 1));\n        if (!tail4) return null;\n        text = text.slice(0, lastColon + 1) + '0:0';\n    }\n    const halves = text.split('::');\n    if (halves.length > 2) return null;\n    const toWords = (part) => (part === '' ? [] : part.split(':').map((h) => (\n        h.length === 0 || h.length > 4 ? NaN : parseInt(h, 16)\n    )));\n    const head = toWords(halves[0]);\n    const tail = halves.length === 2 ? toWords(halves[1]) : [];\n    if ([...head, ...tail].some((w) => !Number.isInteger(w) || w < 0 || w > 0xffff)) return null;\n    let words;\n    if (halves.length === 2) {\n        const gap = 8 - head.length - tail.length;\n        if (gap < 1) return null;\n        words = [...head, ...new Array(gap).fill(0), ...tail];\n    } else {\n        words = head;\n    }\n    if (words.length !== 8) return null;\n    const out = new Uint8Array(16);\n    words.forEach((w, i) => { out[i * 2] = w >> 8; out[i * 2 + 1] = w & 0xff; });\n    if (tail4) out.set(tail4, 12);\n    return out;\n}\n\nfunction parseMdns(s) {\n    const m = UUID_RE.exec(s);\n    if (!m) return null;\n    const hex = (m[1] + m[2] + m[3] + m[4] + m[5]).toLowerCase();\n    const out = new Uint8Array(16);\n    for (let i = 0; i < 16; i++) out[i] = parseInt(hex.substr(i * 2, 2), 16);\n    return out;\n}\n\nfunction sdpLines(sdp) {\n    if (typeof sdp !== 'string') fail('SDP must be a string');\n    if (sdp.length > 64 * 1024) fail('SDP is too large');\n    return sdp.split(/\\r\\n|\\n/).filter((l) => l.length > 0);\n}\n\nfunction attr(lines, name) {\n    const prefix = `a=${name}:`;\n    for (const l of lines) if (l.startsWith(prefix)) return l.slice(prefix.length).trim();\n    return null;\n}\n\n/**\n * Extract the fields SBQ2 carries from a browser-generated SDP.\n * Anything not represented in the template is dropped here, deliberately.\n *\n * Candidates keep their original `priority` so pruneCandidates can rank by the\n * sender's own judgement; the value is never encoded.\n */\nexport function parseSdp(sdp) {\n    const lines = sdpLines(sdp);\n\n    const ufrag = attr(lines, 'ice-ufrag');\n    const pwd = attr(lines, 'ice-pwd');\n    if (!ufrag || !pwd) fail('SDP is missing ICE credentials');\n\n    const fpLine = attr(lines, 'fingerprint');\n    if (!fpLine) fail('SDP is missing a DTLS fingerprint');\n    const [hashAlg, fpHex] = fpLine.split(/\\s+/);\n    if (!hashAlg || hashAlg.toLowerCase() !== 'sha-256') {\n        fail(`unsupported DTLS fingerprint algorithm: ${String(hashAlg).slice(0, 16)}`);\n    }\n    const fpBytes = String(fpHex).split(':');\n    if (fpBytes.length !== LIMITS.FINGERPRINT_BYTES) fail('DTLS fingerprint has the wrong length');\n    const fingerprint = new Uint8Array(LIMITS.FINGERPRINT_BYTES);\n    fpBytes.forEach((b, i) => {\n        if (!/^[0-9a-fA-F]{2}$/.test(b)) fail('DTLS fingerprint is not hex');\n        fingerprint[i] = parseInt(b, 16);\n    });\n\n    const setupStr = attr(lines, 'setup') || 'actpass';\n    const setup = SETUP.indexOf(setupStr);\n    if (setup < 0) fail(`unsupported DTLS setup role: ${setupStr.slice(0, 16)}`);\n\n    // RFC 8841: an absent a=max-message-size means 64 KiB.\n    const mmsStr = attr(lines, 'max-message-size');\n    const maxMessageSize = mmsStr === null ? 65536 : Number(mmsStr);\n    if (!Number.isInteger(maxMessageSize) || maxMessageSize < 0) fail('invalid a=max-message-size');\n\n    const candidates = [];\n    for (const line of lines) {\n        if (!line.startsWith('a=candidate:')) continue;\n        const p = line.slice('a=candidate:'.length).split(/\\s+/);\n        // foundation component transport priority addr port \"typ\" type ...\n        if (p.length < 8 || p[6] !== 'typ') continue;\n        if (p[1] !== '1') continue;                       // component 1 only (BUNDLE, no RTCP)\n        const transport = p[2].toLowerCase();\n        const priority = Number(p[3]);\n        const addr = p[4];\n        const port = Number(p[5]);\n        const ctype = p[7];\n        if (!Number.isInteger(port) || port < 1 || port > 65535) continue;\n\n        let tcptype = 0;\n        if (transport === 'tcp') {\n            const idx = p.indexOf('tcptype');\n            const t = idx >= 0 ? TCPTYPE.indexOf(p[idx + 1]) : -1;\n            if (t <= 0) continue;                          // unusable TCP candidate\n            tcptype = t;\n        } else if (transport !== 'udp') {\n            continue;\n        }\n\n        let kind = null; let bytes = null;\n        const mdns = parseMdns(addr);\n        if (mdns && ctype === 'host') { kind = KIND.HOST_MDNS; bytes = mdns; }\n        else {\n            const v4 = parseIpv4(addr);\n            const v6 = v4 ? null : parseIpv6(addr);\n            const raw = v4 || v6;\n            if (!raw) continue;\n            if (ctype === 'host') kind = v4 ? KIND.HOST_V4 : KIND.HOST_V6;\n            else if (ctype === 'srflx' || ctype === 'prflx') kind = v4 ? KIND.SRFLX_V4 : KIND.SRFLX_V6;\n            else if (ctype === 'relay') kind = v4 ? KIND.RELAY_V4 : KIND.RELAY_V6;\n            else continue;\n            bytes = raw;\n        }\n        candidates.push({\n            kind, tcptype, addr: bytes, port,\n            priority: Number.isFinite(priority) ? priority : 0,\n        });\n    }\n\n    return { ufrag, pwd, fingerprint, setup, maxMessageSize, candidates };\n}\n\n/** Bytes a candidate occupies on the wire: kind byte + address + port. */\nexport function candidateSize(c) { return 1 + KIND_ADDR_LEN[c.kind] + 2; }\n\n/**\n * True if a peer can actually connect TO this candidate.\n *\n * An ICE-TCP candidate with `tcptype active` is an outbound-only socket on the\n * discard port; it pairs solely with a remote `passive` candidate and offers the\n * peer no address to reach. Firefox advertises one on every connection. It is\n * therefore surplus, never coverage \u2014 otherwise it would claim a coverage slot\n * that buys no reachability, at 19 bytes for an mDNS address.\n */\nconst isConnectable = (c) => c.tcptype !== 2 && c.tcptype !== 3;\n\n/**\n * Trim a candidate list to what actually buys connectivity, under a byte budget.\n *\n * The rule is coverage first, count second. Every (address family, candidate\n * type, transport) combination present in the input keeps at least one\n * representative before any second candidate is admitted. That ordering is the\n * whole point: a pure count limit sorted v4-first can evict the only working\n * candidate on an IPv6-only network, which is now a normal mode on several\n * mobile carriers, and a count limit that ignores transport can evict the TCP\n * candidate that exists precisely for networks where UDP is blocked.\n *\n * Only after coverage is satisfied is the remaining budget filled by the\n * sender's own priority, with relays capped \u2014 a TURN server offering udp/tcp/tls\n * hands out one allocation per transport, and they all resolve to the same\n * relayed address, so the third one adds nothing the first does not already\n * provide. Two are kept in case one allocation's binding dies.\n *\n * If coverage alone overruns the budget, coverage wins and the descriptor grows.\n * A QR one version larger is cheaper than a connection that cannot be made.\n */\nexport function pruneCandidates(candidates, {\n    maxCandidates = LIMITS.MAX_CANDIDATES,\n    maxBytes = LIMITS.SURPLUS_CANDIDATE_BYTES,\n    keepMdns = true,\n    maxRelays = 2,\n} = {}) {\n    const pool = candidates.filter((c) => keepMdns || c.kind !== KIND.HOST_MDNS);\n\n    // Exact duplicates first \u2014 same kind, transport, address and port.\n    const uniq = [];\n    const seen = new Set();\n    for (const c of pool) {\n        const key = `${c.kind}:${c.tcptype}:${Array.from(c.addr).join('.')}:${c.port}`;\n        if (seen.has(key)) continue;\n        seen.add(key);\n        uniq.push(c);\n    }\n\n    const byPriority = (a, b) => (b.priority || 0) - (a.priority || 0);\n    const groupKey = (c) => `${KIND_FAMILY[c.kind]}/${KIND_TYPE[c.kind]}/${c.tcptype === 0 ? 'udp' : 'tcp'}`;\n\n    // Pass 1 \u2014 one representative per (family, type, transport) group, best\n    // priority first. Only candidates a peer can dial count for coverage.\n    const groups = new Map();\n    for (const c of [...uniq].sort(byPriority)) {\n        if (!isConnectable(c)) continue;\n        const g = groupKey(c);\n        if (!groups.has(g)) groups.set(g, []);\n        groups.get(g).push(c);\n    }\n    const chosen = [];\n    const taken = new Set();\n    let bytes = 0;\n    let relays = 0;\n    const admit = (c) => {\n        chosen.push(c);\n        taken.add(c);\n        bytes += candidateSize(c);\n        if (KIND_TYPE[c.kind] === 'relay') relays++;\n    };\n    for (const list of groups.values()) admit(list[0]);\n\n    // Pass 2 \u2014 fill what is left by priority, honouring both budgets.\n    for (const c of [...uniq].sort(byPriority)) {\n        if (taken.has(c)) continue;\n        if (chosen.length >= maxCandidates) break;\n        if (bytes + candidateSize(c) > maxBytes) continue;\n        if (KIND_TYPE[c.kind] === 'relay' && relays >= maxRelays) continue;\n        admit(c);\n    }\n\n    // Emit in descending priority so the sender's ordering intent survives into\n    // the localPref the serializer reconstructs.\n    return chosen.sort(byPriority);\n}\n\n// ---------------------------------------------------------------------------\n// encode\n// ---------------------------------------------------------------------------\n\nclass Writer {\n    constructor() { this.b = []; }\n    u8(v) { this.b.push(v & 0xff); }\n    u16(v) { this.b.push((v >> 8) & 0xff, v & 0xff); }\n    u24(v) { this.b.push((v >> 16) & 0xff, (v >> 8) & 0xff, v & 0xff); }\n    u32(v) { this.b.push((v >>> 24) & 0xff, (v >>> 16) & 0xff, (v >>> 8) & 0xff, v & 0xff); }\n    bytes(a) { for (const x of a) this.b.push(x & 0xff); }\n    ascii(s) { for (let i = 0; i < s.length; i++) this.b.push(s.charCodeAt(i) & 0xff); }\n    done() { return Uint8Array.from(this.b); }\n}\n\nfunction buildExtensions(maxMessageSize) {\n    // Guard before the lookup: MMS_ENUM's slot 3 is the \"explicit\" marker and\n    // holds null, so a null or undefined size would otherwise index straight\n    // onto it and promise an extension record that never gets written.\n    if (!Number.isInteger(maxMessageSize) || maxMessageSize < 1024 || maxMessageSize > 0x7fffffff) {\n        fail('max-message-size must be an integer between 1024 and 2^31-1');\n    }\n    // Records are emitted in ascending type order so a descriptor has exactly\n    // one valid spelling; the decoder enforces the same ordering.\n    const records = [];\n    let mmsIndex = MMS_ENUM.indexOf(maxMessageSize);\n    if (mmsIndex < 0) {\n        mmsIndex = MMS_EXPLICIT;\n        const w = new Writer();\n        w.u32(maxMessageSize);\n        records.push({ type: EXT.MAX_MESSAGE_SIZE, value: w.done() });\n    }\n    return { mmsIndex, records };\n}\n\n/**\n * @param {object} d\n * @param {number} d.type              TYPE.OFFER | TYPE.ANSWER\n * @param {Uint8Array} [d.bindingTag]  answers only: 8-byte tag of the offer\n * @param {number} d.expiresAtMs       absolute expiry, ms since epoch\n * @param {object} d.sdpFields         output of parseSdp (already pruned)\n * @param {Uint8Array|null} d.commitment  16-byte commitment to the in-band blob\n */\nexport function encodeDescriptor(d) {\n    const { type, bindingTag: tag = null, expiresAtMs, sdpFields, commitment = null } = d;\n    if (type !== TYPE.OFFER && type !== TYPE.ANSWER) fail('invalid descriptor type');\n    if (type === TYPE.ANSWER) {\n        if (!(tag instanceof Uint8Array) || tag.length !== LIMITS.BINDING_BYTES) fail('answer needs an 8-byte binding tag');\n    } else if (tag !== null) {\n        fail('offers do not carry a binding tag');\n    }\n    if (commitment !== null && (!(commitment instanceof Uint8Array) || commitment.length !== LIMITS.COMMITMENT_BYTES)) {\n        fail('commitment must be 16 bytes');\n    }\n\n    const { ufrag, pwd, fingerprint, setup, maxMessageSize, candidates } = sdpFields;\n    if (ufrag.length < LIMITS.MIN_UFRAG || ufrag.length > LIMITS.MAX_UFRAG || !ICE_CHAR.test(ufrag)) fail('invalid ice-ufrag');\n    if (pwd.length < LIMITS.MIN_PWD || pwd.length > LIMITS.MAX_PWD || !ICE_CHAR.test(pwd)) fail('invalid ice-pwd');\n    if (candidates.length > LIMITS.MAX_CANDIDATES) fail('too many candidates');\n\n    const minutes = Math.ceil((expiresAtMs - EPOCH_MS) / 60000);\n    if (!Number.isInteger(minutes) || minutes < 0 || minutes > MAX_EXPIRY_UNITS) fail('expiry out of range');\n\n    const { mmsIndex, records } = buildExtensions(maxMessageSize);\n\n    const ext = new Writer();\n    for (const r of records) {\n        if (r.value.length > 255) fail('extension value is too long');\n        ext.u8(r.type); ext.u8(r.value.length); ext.bytes(r.value);\n    }\n    const extBytes = ext.done();\n    if (extBytes.length > LIMITS.MAX_EXT_BYTES) fail('extension area is too long');\n\n    const flags = (type & 0x03)\n        | ((setup & 0x03) << 2)\n        | ((mmsIndex & 0x03) << 4)\n        | (commitment ? 0x40 : 0)\n        | (extBytes.length ? 0x80 : 0);\n\n    const w = new Writer();\n    w.u8(SBQ2_VERSION);\n    w.u8(flags);\n    w.u24(minutes);\n    if (type === TYPE.ANSWER) w.bytes(tag);\n    w.bytes(fingerprint);\n    w.u8(ufrag.length); w.ascii(ufrag);\n    w.u8(pwd.length); w.ascii(pwd);\n    w.u8(candidates.length);\n    for (const c of candidates) {\n        w.u8(((c.kind & 0x0f) << 4) | (c.tcptype & 0x0f));\n        w.bytes(c.addr);\n        w.u16(c.port);\n    }\n    if (commitment) w.bytes(commitment);\n    if (extBytes.length) { w.u8(extBytes.length); w.bytes(extBytes); }\n\n    const out = w.done();\n    if (out.length > LIMITS.MAX_PAYLOAD_BYTES) fail('descriptor exceeds the payload limit');\n    return out;\n}\n\n// ---------------------------------------------------------------------------\n// decode\n// ---------------------------------------------------------------------------\n\nclass Reader {\n    constructor(buf) { this.buf = buf; this.i = 0; }\n    need(n) { if (this.i + n > this.buf.length) fail('descriptor is truncated'); }\n    u8() { this.need(1); return this.buf[this.i++]; }\n    u16() { this.need(2); const v = (this.buf[this.i] << 8) | this.buf[this.i + 1]; this.i += 2; return v; }\n    u24() { this.need(3); const v = (this.buf[this.i] << 16) | (this.buf[this.i + 1] << 8) | this.buf[this.i + 2]; this.i += 3; return v; }\n    u32() { this.need(4); const v = ((this.buf[this.i] << 24) >>> 0) + (this.buf[this.i + 1] << 16) + (this.buf[this.i + 2] << 8) + this.buf[this.i + 3]; this.i += 4; return v >>> 0; }\n    bytes(n) { this.need(n); return this.buf.slice(this.i, this.i += n); }\n    ascii(n) {\n        this.need(n);\n        let s = '';\n        for (let k = 0; k < n; k++) {\n            const c = this.buf[this.i + k];\n            if (c < 0x20 || c > 0x7e) fail('non-printable byte in a text field');\n            s += String.fromCharCode(c);\n        }\n        this.i += n;\n        return s;\n    }\n    get rest() { return this.buf.length - this.i; }\n}\n\n/**\n * Parse the TLV extension area.\n *\n * An unrecognised type is a hard error, not a skip. That is deliberate: a\n * decoder that ignores what it does not understand turns the extension area\n * into a downgrade channel, because an attacker can append a record that one\n * side acts on and the other silently drops, and the two ends then disagree\n * about the session while both believe they validated it. Deny-by-default costs\n * forward compatibility, and that cost is paid on purpose \u2014 a new extension\n * type ships together with a version bump that both ends can gate on, never\n * silently to a population that will half-ignore it.\n */\nfunction decodeExt(buf) {\n    const r = new Reader(buf);\n    const out = new Map();\n    let lastType = -1;\n    while (r.rest > 0) {\n        const type = r.u8();\n        const len = r.u8();\n        const value = r.bytes(len);\n        if (type <= lastType) fail('extension records must be in ascending type order without duplicates');\n        lastType = type;\n        switch (type) {\n            case EXT.MAX_MESSAGE_SIZE: {\n                if (len !== 4) fail('extension 0x01 must be 4 bytes');\n                const v = new Reader(value).u32();\n                if (v < 1024 || v > 0x7fffffff) fail('extension 0x01 value is out of range');\n                if (MMS_ENUM.includes(v)) fail('extension 0x01 duplicates a value the flags already encode');\n                out.set(type, v);\n                break;\n            }\n            default:\n                fail(`unknown extension type 0x${type.toString(16).padStart(2, '0')}`, 'unknown_extension');\n        }\n    }\n    return out;\n}\n\n/**\n * Parse an SBQ2 descriptor. Throws DescriptorError on anything malformed \u2014\n * there is no partial or best-effort result.\n *\n * @param {Uint8Array} buf\n * @param {object} [opts]\n * @param {number} [opts.nowMs]  clock to check the expiry against\n */\nexport function decodeDescriptor(buf, { nowMs = Date.now() } = {}) {\n    if (!(buf instanceof Uint8Array)) fail('descriptor must be a Uint8Array');\n    if (buf.length === 0) fail('descriptor is empty');\n    if (buf.length > LIMITS.MAX_PAYLOAD_BYTES) fail('descriptor exceeds the payload limit');\n\n    const r = new Reader(buf);\n\n    // Version first, and a mismatch is an error \u2014 never an attempt to parse a\n    // different shape. This is what makes downgrade to the old scheme impossible\n    // rather than merely unlikely.\n    const version = r.u8();\n    if (version !== SBQ2_VERSION) fail(`unsupported descriptor version 0x${version.toString(16)}`, 'version');\n\n    const flags = r.u8();\n    const type = flags & 0x03;\n    if (type !== TYPE.OFFER && type !== TYPE.ANSWER) fail('reserved descriptor type');\n    const setup = (flags >> 2) & 0x03;\n    if (setup > 2) fail('reserved DTLS setup role');\n    const mmsIndex = (flags >> 4) & 0x03;\n    const hasCommitment = (flags & 0x40) !== 0;\n    const hasExt = (flags & 0x80) !== 0;\n\n    const minutes = r.u24();\n    const expiresAtMs = EPOCH_MS + minutes * 60000;\n    if (nowMs - LIMITS.CLOCK_SKEW_MS > expiresAtMs) {\n        const lateMin = Math.round((nowMs - expiresAtMs) / 60000);\n        fail(\n            `this code expired ${lateMin} minute(s) ago. If it was just created, ` +\n            `this device's clock or time zone is probably wrong \u2014 check the date and time settings.`,\n            'expired',\n        );\n    }\n    if (expiresAtMs - nowMs > (LIMITS.MAX_LIFETIME_MINUTES * 60000) + LIMITS.CLOCK_SKEW_MS) {\n        fail('descriptor lifetime is implausibly long', 'lifetime');\n    }\n\n    const bindingTag = type === TYPE.ANSWER ? r.bytes(LIMITS.BINDING_BYTES) : null;\n    const fingerprint = r.bytes(LIMITS.FINGERPRINT_BYTES);\n\n    const ufragLen = r.u8();\n    if (ufragLen < LIMITS.MIN_UFRAG || ufragLen > LIMITS.MAX_UFRAG) fail('ice-ufrag length out of range');\n    const ufrag = r.ascii(ufragLen);\n    if (!ICE_CHAR.test(ufrag)) fail('ice-ufrag contains characters outside the ICE alphabet');\n\n    const pwdLen = r.u8();\n    if (pwdLen < LIMITS.MIN_PWD || pwdLen > LIMITS.MAX_PWD) fail('ice-pwd length out of range');\n    const pwd = r.ascii(pwdLen);\n    if (!ICE_CHAR.test(pwd)) fail('ice-pwd contains characters outside the ICE alphabet');\n\n    const count = r.u8();\n    if (count > LIMITS.MAX_CANDIDATES) fail('too many candidates');\n    const candidates = [];\n    for (let i = 0; i < count; i++) {\n        const tagByte = r.u8();\n        const kind = (tagByte >> 4) & 0x0f;\n        const tcptype = tagByte & 0x0f;\n        const addrLen = KIND_ADDR_LEN[kind];\n        if (addrLen === undefined) fail(`reserved candidate kind ${kind}`);\n        if (tcptype >= TCPTYPE.length) fail('reserved TCP candidate type');\n        const addr = r.bytes(addrLen);\n        const port = r.u16();\n        if (port < 1) fail('candidate port must be non-zero');\n        candidates.push({ kind, tcptype, addr, port });\n    }\n\n    let commitment = null;\n    if (hasCommitment) commitment = r.bytes(LIMITS.COMMITMENT_BYTES);\n\n    let extensions = new Map();\n    if (hasExt) {\n        const extLen = r.u8();\n        if (extLen === 0) fail('extension area is flagged but empty');\n        extensions = decodeExt(r.bytes(extLen));\n    }\n\n    // Trailing bytes are a malformed descriptor, not something to ignore: a\n    // decoder that tolerates them lets an attacker smuggle a second reading of\n    // the same QR past whatever hashed the canonical form.\n    if (r.rest !== 0) fail(`${r.rest} trailing byte(s) after the descriptor`);\n\n    let maxMessageSize;\n    if (mmsIndex === MMS_EXPLICIT) {\n        if (!extensions.has(EXT.MAX_MESSAGE_SIZE)) fail('flags promise an explicit max-message-size but no extension carries it');\n        maxMessageSize = extensions.get(EXT.MAX_MESSAGE_SIZE);\n    } else {\n        if (extensions.has(EXT.MAX_MESSAGE_SIZE)) fail('extension 0x01 present but the flags do not select it');\n        maxMessageSize = MMS_ENUM[mmsIndex];\n    }\n\n    return {\n        version, type, setup, maxMessageSize, expiresAtMs,\n        bindingTag, fingerprint, ufrag, pwd, candidates, commitment, extensions,\n    };\n}\n\n// ---------------------------------------------------------------------------\n// strict SDP serializer\n// ---------------------------------------------------------------------------\n\nconst hex2 = (b) => b.toString(16).padStart(2, '0');\n\nfunction renderAddr(kind, addr) {\n    switch (kind) {\n        case KIND.HOST_MDNS: {\n            const h = Array.from(addr, hex2).join('');\n            return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}.local`;\n        }\n        case KIND.HOST_V4: case KIND.SRFLX_V4: case KIND.RELAY_V4:\n            return `${addr[0]}.${addr[1]}.${addr[2]}.${addr[3]}`;\n        default: {\n            const words = [];\n            for (let i = 0; i < 16; i += 2) words.push(((addr[i] << 8) | addr[i + 1]).toString(16));\n            return words.join(':');\n        }\n    }\n}\n\n/**\n * Rebuild an SDP from a decoded descriptor.\n *\n * Every value written here is either a template constant or a primitive that\n * decodeDescriptor already range-checked and that is re-rendered from bytes\n * (addresses from integers, the mDNS name from 16 raw bytes). The only strings\n * echoed through are ufrag and pwd, and both are constrained to the ICE\n * alphabet, so neither can carry a CRLF and inject an SDP line.\n */\nexport function serializeSdp(desc, { sessionId = '1' } = {}) {\n    const isOffer = desc.type === TYPE.OFFER;\n\n    // The m-line port and c-line carry the DEFAULT CANDIDATE, and they must be\n    // real whenever we have one.\n    //\n    // `m=application 9` with `c=IN IP4 0.0.0.0` is the trickle-ICE convention\n    // for \"no candidate yet\" (RFC 8840 \u00A74.1). A descriptor is never trickle \u2014\n    // the candidate set is complete by construction \u2014 so a null default\n    // candidate here is simply a lie, and Firefox acts on it: with a relay-only\n    // Chrome offer, rebuilding with 9/0.0.0.0 connected 0/4 while the browser's\n    // own SDP connected 4/4. Advertising the highest-priority routable candidate\n    // instead, exactly as Chrome and Firefox do, costs zero descriptor bytes\n    // because that candidate is already in the list.\n    //\n    // An mDNS candidate cannot appear here (c= needs a literal address), so if\n    // that is all we have we fall back to the null form \u2014 which is also what\n    // Chrome emits in that case.\n    // Preference order is relay > srflx > host \u2014 the most publicly reachable\n    // address, which is what the default candidate is for, and the order Chrome\n    // itself uses (its STUN-profile SDP names the srflx address and its TURN\n    // profile names the relay). That is the reverse of ICE priority, which\n    // ranks host first.\n    const DEFAULT_RANK = { relay: 0, srflx: 1, host: 2 };\n    const def = desc.candidates\n        .filter((c) => c.kind !== KIND.HOST_MDNS && c.tcptype === 0)\n        .sort((x, y) => DEFAULT_RANK[KIND_TYPE[x.kind]] - DEFAULT_RANK[KIND_TYPE[y.kind]])[0];\n    const defIsV6 = def && KIND_FAMILY[def.kind] === 'v6';\n    const mPort = def ? def.port : 9;\n    const cLine = def\n        ? `c=IN IP${defIsV6 ? '6' : '4'} ${renderAddr(def.kind, def.addr)}`\n        : 'c=IN IP4 0.0.0.0';\n\n    const lines = [\n        'v=0',\n        `o=- ${sessionId} 2 IN IP4 127.0.0.1`,\n        's=-',\n        't=0 0',\n        'a=group:BUNDLE 0',\n        'a=msid-semantic: WMS',\n        `m=application ${mPort} UDP/DTLS/SCTP webrtc-datachannel`,\n        cLine,\n        'a=ice-ufrag:' + desc.ufrag,\n        'a=ice-pwd:' + desc.pwd,\n        // Deliberately NOT `a=ice-options:trickle`. A descriptor is a complete,\n        // one-shot candidate set \u2014 there is no signalling channel to trickle\n        // over, so advertising trickle promises candidates that can never\n        // arrive and leaves the peer's ICE agent waiting for them.\n        'a=fingerprint:sha-256 ' + Array.from(desc.fingerprint, (b) => hex2(b).toUpperCase()).join(':'),\n        'a=setup:' + SETUP[desc.setup],\n        'a=mid:0',\n        'a=sctp-port:5000',\n        'a=max-message-size:' + desc.maxMessageSize,\n    ];\n\n    // Candidate lines go after the ICE credentials; order within the m-section\n    // is not significant to any implementation, but keeping them grouped\n    // matches what every browser emits.\n    const candLines = desc.candidates.map((c, i) => {\n        const ctype = KIND_TYPE[c.kind];\n        const transport = c.tcptype === 0 ? 'udp' : 'tcp';\n        // RFC 8445 \u00A75.1.2.1. localPref descends with list position so the\n        // sender's ordering survives, and component is always 1.\n        const localPref = Math.max(0, 65535 - i);\n        const priority = TYPE_PREF[ctype] * 16777216 + localPref * 256 + 255;\n        // Foundation must be equal for candidates sharing type+base+transport\n        // and different otherwise (RFC 8445 \u00A75.1.1.3); grouping by kind and\n        // transport satisfies both halves of that.\n        const foundation = String(c.kind * 4 + c.tcptype + 1);\n        let line = `a=candidate:${foundation} 1 ${transport} ${priority} ${renderAddr(c.kind, c.addr)} ${c.port} typ ${ctype}`;\n        // rel-addr/rel-port are MANDATORY for srflx, prflx and relay candidates\n        // (RFC 8839 \u00A75.1), even though ICE's own algorithm never reads them.\n        // Omitting them is not a harmless economy: Chrome accepts such a line,\n        // Firefox drops the candidate outright. That cost 0/8 relay-only\n        // connections to Firefox while the browser's own SDP made 8/8, and it\n        // stayed invisible in the STUN and TURN profiles because a host pair\n        // connected instead. The value is not transmitted \u2014 0.0.0.0/0 is what\n        // Chrome itself emits when it has no base address to disclose, and it\n        // satisfies the grammar at zero descriptor bytes.\n        if (ctype !== 'host') {\n            line += KIND_FAMILY[c.kind] === 'v6' ? ' raddr :: rport 0' : ' raddr 0.0.0.0 rport 0';\n        }\n        if (transport === 'tcp') line += ` tcptype ${TCPTYPE[c.tcptype]}`;\n        return line;\n    });\n    // `a=end-of-candidates` states explicitly that the set is complete\n    // (RFC 8838 \u00A714), so the peer stops waiting for more and can start failing\n    // pairs promptly instead of sitting in checking until a timeout.\n    candLines.push('a=end-of-candidates');\n    const at = lines.indexOf(cLine) + 1;\n    lines.splice(at, 0, ...candLines);\n\n    return { type: isOffer ? 'offer' : 'answer', sdp: lines.join('\\r\\n') + '\\r\\n' };\n}\n\n// ---------------------------------------------------------------------------\n// binding + transcript\n// ---------------------------------------------------------------------------\n\nconst enc = new TextEncoder();\n\nfunction concat(...parts) {\n    const total = parts.reduce((n, p) => n + p.length, 0);\n    const out = new Uint8Array(total);\n    let o = 0;\n    for (const p of parts) { out.set(p, o); o += p.length; }\n    return out;\n}\n\n/**\n * 8-byte tag an answer carries so the offerer can confirm it answers THIS offer.\n * This is the answer's replay defence: the offerer keeps the tag of the offer it\n * is currently showing and rejects any answer that does not match it, which also\n * makes each offer exactly one-shot.\n *\n * The offer needs no nonce of its own. It already carries ice-pwd, which RFC\n * 8839 \u00A75.4 requires to contain at least 128 bits of randomness and which every\n * browser regenerates per peer connection and per ICE restart; hashing the whole\n * descriptor therefore hashes that entropy. See doc/descriptor-sbq2.md.\n *\n * LIMITATION, on purpose: 64 bits is not a standalone integrity primitive. It is\n * a duplicate-detection tag whose security comes from the SAS transcript, which\n * covers both descriptors in full. Do not build anything on this tag alone.\n */\nexport async function bindingTag(digest, offerBytes) {\n    const h = await digest(concat(enc.encode('sbq2/bind\\0'), offerBytes));\n    return h.slice(0, LIMITS.BINDING_BYTES);\n}\n\n/** 16-byte commitment to the in-band key blob. */\nexport async function commitBlob(digest, blobBytes) {\n    const h = await digest(concat(enc.encode('sbq2/blob\\0'), blobBytes));\n    return h.slice(0, LIMITS.COMMITMENT_BYTES);\n}\n\n/**\n * The SAS transcript.\n *\n * It covers both descriptors *verbatim* \u2014 every byte that travelled out of\n * band, including the version byte, the flags and the whole extension area \u2014\n * and both in-band blobs. So there is nothing an attacker can change anywhere in\n * the handshake, in either direction, that does not change the digits the two\n * users read to each other. Lengths are prefixed so no field boundary can be\n * shifted.\n */\nexport function sasTranscript(offerBytes, answerBytes, offerBlob, answerBlob) {\n    const lp = (b) => {\n        const n = new Uint8Array(4);\n        new DataView(n.buffer).setUint32(0, b.length);\n        return concat(n, b);\n    };\n    return concat(\n        enc.encode('sbq2/sas/v1\\0'),\n        lp(offerBytes), lp(answerBytes), lp(offerBlob), lp(answerBlob),\n    );\n}\n\n// ---------------------------------------------------------------------------\n// transport encodings\n// ---------------------------------------------------------------------------\n\nconst B64URL = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';\n\nexport function toBase64Url(bytes) {\n    let out = '';\n    for (let i = 0; i < bytes.length; i += 3) {\n        const a = bytes[i], b = bytes[i + 1], c = bytes[i + 2];\n        out += B64URL[a >> 2];\n        out += B64URL[((a & 3) << 4) | ((b ?? 0) >> 4)];\n        if (b === undefined) break;\n        out += B64URL[((b & 15) << 2) | ((c ?? 0) >> 6)];\n        if (c === undefined) break;\n        out += B64URL[c & 63];\n    }\n    return out;\n}\n\nexport function fromBase64Url(text) {\n    if (typeof text !== 'string') fail('payload must be a string');\n    // Messengers wrap long lines; strip whitespace before validating, then\n    // require the alphabet exactly.\n    const s = text.replace(/\\s+/g, '');\n    if (s.length > Math.ceil(LIMITS.MAX_PAYLOAD_BYTES * 4 / 3) + 4) fail('payload is too long');\n    if (!/^[A-Za-z0-9_-]*$/.test(s)) fail('payload contains characters outside base64url');\n    if (s.length % 4 === 1) fail('payload has an impossible length');\n    const out = new Uint8Array(Math.floor(s.length * 3 / 4));\n    let o = 0, acc = 0, bits = 0;\n    for (const ch of s) {\n        acc = (acc << 6) | B64URL.indexOf(ch);\n        bits += 6;\n        if (bits >= 8) { bits -= 8; out[o++] = (acc >> bits) & 0xff; }\n    }\n    if (acc & ((1 << bits) - 1)) fail('payload has non-zero padding bits');\n    return out.subarray(0, o);\n}\n\nexport const TEXT_PREFIX = 'SB2:';\n\nexport function encodeText(bytes) { return TEXT_PREFIX + toBase64Url(bytes); }\n\nexport function decodeText(text) {\n    if (typeof text !== 'string') fail('payload must be a string');\n    const t = text.trim();\n    if (!t.startsWith(TEXT_PREFIX)) fail('not an SB2 descriptor');\n    return fromBase64Url(t.slice(TEXT_PREFIX.length));\n}\n\nexport { DescriptorError, KIND, KIND_FAMILY, KIND_TYPE };\n", "// In-band key exchange for SBQ2.\n//\n// The out-of-band descriptor carries only what brings up DTLS, plus a 16-byte\n// commitment. The key material itself \u2014 ECDH key, ECDSA identity key \u2014 travels\n// as the FIRST frame on the DataChannel, and is checked against that commitment\n// before a single byte of it is used for anything.\n//\n// Order of operations, and why it is this order:\n//\n//   1. Both sides send their key blob as soon as the channel opens.\n//   2. Each verifies commitment(peer blob) against the commitment that arrived\n//      in the peer's descriptor, over the channel the user authenticated by\n//      looking at it. A mismatch tears the connection down. This happens BEFORE\n//      the blob is parsed into keys, so a substituted blob never reaches\n//      importKey.\n//   3. Only now is the transcript defined: both descriptors verbatim and both\n//      blobs, length-prefixed. The HKDF salt is SHA-512 of it, so the session\n//      keys are bound to both DTLS fingerprints and every candidate \u2014 the salt\n//      is never transmitted and cannot be influenced independently by either\n//      side.\n//   4. Each signs the transcript with its ECDSA key and sends the signature.\n//      This replaces the old challenge/response authProof: one signature over\n//      everything, instead of seven fields echoing a nonce back.\n//   5. The SAS is HKDF over the ECDH shared secret salted with the transcript,\n//      so any change anywhere in the handshake \u2014 either descriptor, either blob\n//      \u2014 changes the digits the two people read to each other.\n//\n// This module is pure: it takes SubtleCrypto in, touches no DOM and no network.\n\nimport { sasTranscript, commitBlob, LIMITS } from './sbq2.js';\n\nexport const KEY_BLOB_VERSION = 0x02;\n\nexport const ROLE = Object.freeze({ OFFER: 0, ANSWER: 1 });\n\nexport const BLOB_LIMITS = Object.freeze({\n    // A P-384 SPKI is 120 bytes; P-521 would be 158. The ceiling is generous\n    // enough for a future curve and far below anything that could be used to\n    // wedge the parser.\n    MAX_SPKI: 256,\n    MIN_SPKI: 40,\n    // ECDSA P-384 signatures are 96 bytes raw; P-521 is 132.\n    MAX_SIG: 160,\n    MIN_SIG: 48,\n    MAX_BLOB_BYTES: 1024,\n});\n\nclass KeyExchangeError extends Error {\n    constructor(message, code = 'key_exchange') {\n        super(message);\n        this.name = 'KeyExchangeError';\n        this.code = code;\n    }\n}\nconst fail = (msg, code) => { throw new KeyExchangeError(msg, code); };\n\n// ---------------------------------------------------------------------------\n// key blob\n// ---------------------------------------------------------------------------\n\n/**\n * version u8 | role u8 | ecdhLen u16 | ecdh | ecdsaLen u16 | ecdsa\n *\n * No signature lives in here: the blob is what the commitment and the\n * transcript cover, and a signature over the transcript cannot be inside the\n * thing it signs. It travels separately, in the proof frame.\n */\nexport function encodeKeyBlob({ role, ecdhSpki, ecdsaSpki }) {\n    if (role !== ROLE.OFFER && role !== ROLE.ANSWER) fail('invalid role');\n    for (const [name, v] of [['ecdh', ecdhSpki], ['ecdsa', ecdsaSpki]]) {\n        if (!(v instanceof Uint8Array)) fail(`${name} SPKI must be a Uint8Array`);\n        if (v.length < BLOB_LIMITS.MIN_SPKI || v.length > BLOB_LIMITS.MAX_SPKI) {\n            fail(`${name} SPKI length out of range`);\n        }\n    }\n    const out = new Uint8Array(1 + 1 + 2 + ecdhSpki.length + 2 + ecdsaSpki.length);\n    const dv = new DataView(out.buffer);\n    let o = 0;\n    out[o++] = KEY_BLOB_VERSION;\n    out[o++] = role;\n    dv.setUint16(o, ecdhSpki.length); o += 2;\n    out.set(ecdhSpki, o); o += ecdhSpki.length;\n    dv.setUint16(o, ecdsaSpki.length); o += 2;\n    out.set(ecdsaSpki, o);\n    return out;\n}\n\n/** Strict parser. Anything unexpected throws; there is no partial result. */\nexport function decodeKeyBlob(buf) {\n    if (!(buf instanceof Uint8Array)) fail('key blob must be a Uint8Array');\n    if (buf.length === 0) fail('key blob is empty');\n    if (buf.length > BLOB_LIMITS.MAX_BLOB_BYTES) fail('key blob exceeds the size limit');\n\n    const dv = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);\n    let o = 0;\n    const need = (n) => { if (o + n > buf.length) fail('key blob is truncated'); };\n\n    need(1);\n    const version = buf[o++];\n    // Same rule as the descriptor: a version mismatch is an error, never an\n    // attempt to parse a different shape.\n    if (version !== KEY_BLOB_VERSION) fail(`unsupported key blob version 0x${version.toString(16)}`, 'version');\n\n    need(1);\n    const role = buf[o++];\n    if (role !== ROLE.OFFER && role !== ROLE.ANSWER) fail('reserved key blob role');\n\n    need(2);\n    const ecdhLen = dv.getUint16(o); o += 2;\n    if (ecdhLen < BLOB_LIMITS.MIN_SPKI || ecdhLen > BLOB_LIMITS.MAX_SPKI) fail('ECDH SPKI length out of range');\n    need(ecdhLen);\n    const ecdhSpki = buf.slice(o, o + ecdhLen); o += ecdhLen;\n\n    need(2);\n    const ecdsaLen = dv.getUint16(o); o += 2;\n    if (ecdsaLen < BLOB_LIMITS.MIN_SPKI || ecdsaLen > BLOB_LIMITS.MAX_SPKI) fail('ECDSA SPKI length out of range');\n    need(ecdsaLen);\n    const ecdsaSpki = buf.slice(o, o + ecdsaLen); o += ecdsaLen;\n\n    // Trailing bytes are malformed input, not padding to ignore \u2014 the same rule\n    // the descriptor decoder applies, and for the same reason: what the\n    // commitment covers must have exactly one reading.\n    if (o !== buf.length) fail(`${buf.length - o} trailing byte(s) after the key blob`);\n\n    return { version, role, ecdhSpki, ecdsaSpki };\n}\n\n// ---------------------------------------------------------------------------\n// transcript\n// ---------------------------------------------------------------------------\n\n/**\n * Canonical transcript. Argument order is by ROLE, never by who is calling, so\n * both peers hash identical bytes.\n */\nexport function buildTranscript({ offerDescriptor, answerDescriptor, offerBlob, answerBlob }) {\n    for (const [name, v] of Object.entries({ offerDescriptor, answerDescriptor, offerBlob, answerBlob })) {\n        if (!(v instanceof Uint8Array) || v.length === 0) fail(`transcript component ${name} is missing`);\n    }\n    return sasTranscript(offerDescriptor, answerDescriptor, offerBlob, answerBlob);\n}\n\n/**\n * HKDF salt, derived rather than transmitted.\n *\n * deriveSharedKeys requires exactly 64 bytes, which SHA-512 supplies directly.\n * Deriving it here means the salt is bound to both DTLS fingerprints and every\n * candidate, and neither side can steer it: it is a hash of material the other\n * side already committed to.\n */\nexport async function deriveTranscriptSalt(subtle, transcript) {\n    const h = await subtle.digest('SHA-512', transcript);\n    return Array.from(new Uint8Array(h));\n}\n\nconst enc = new TextEncoder();\n\n/** Bytes an ECDSA identity key signs to prove possession and bind the transcript. */\nexport function proofPayload(transcript) {\n    const label = enc.encode('sbq2/proof/v1\\0');\n    const out = new Uint8Array(label.length + transcript.length);\n    out.set(label, 0);\n    out.set(transcript, label.length);\n    return out;\n}\n\n/**\n * SAS digits.\n *\n * IKM is the raw ECDH shared secret, so an observer who has the whole\n * transcript still cannot predict the digits. The salt is the transcript hash,\n * so nothing in the handshake can move without moving the digits.\n */\nexport async function computeTranscriptSas(subtle, { ecdhPrivateKey, peerEcdhPublicKey, transcript, digits = 7 }) {\n    const shared = await subtle.deriveBits({ name: 'ECDH', public: peerEcdhPublicKey }, ecdhPrivateKey, 256);\n    let ikm = null;\n    try {\n        ikm = await subtle.importKey('raw', shared, 'HKDF', false, ['deriveBits']);\n        const salt = new Uint8Array(await subtle.digest('SHA-256', transcript));\n        const bits = await subtle.deriveBits(\n            { name: 'HKDF', hash: 'SHA-256', salt, info: enc.encode('sbq2-sas-v1') },\n            ikm, 64,\n        );\n        const dv = new DataView(bits);\n        const n = (dv.getUint32(0) ^ dv.getUint32(4)) >>> 0;\n        const mod = 10 ** digits;\n        return String(n % mod).padStart(digits, '0');\n    } finally {\n        // The shared secret must not linger in the heap once the digits exist.\n        try { new Uint8Array(shared).fill(0); } catch (_) { /* not a view we own */ }\n    }\n}\n\n/**\n * Verify a peer blob against the commitment that arrived out of band.\n *\n * Constant-time comparison is not required \u2014 the commitment is public \u2014 but the\n * check must happen before the blob is interpreted, which is why this takes raw\n * bytes and not a parsed structure.\n */\nexport async function verifyBlobCommitment(subtle, blobBytes, expectedCommitment) {\n    if (!(expectedCommitment instanceof Uint8Array) || expectedCommitment.length !== LIMITS.COMMITMENT_BYTES) {\n        fail('descriptor carried no usable commitment', 'commitment_missing');\n    }\n    const digest = async (b) => new Uint8Array(await subtle.digest('SHA-256', b));\n    const actual = await commitBlob(digest, blobBytes);\n    if (actual.length !== expectedCommitment.length) fail('commitment length mismatch', 'commitment_mismatch');\n    let diff = 0;\n    for (let i = 0; i < actual.length; i++) diff |= actual[i] ^ expectedCommitment[i];\n    if (diff !== 0) {\n        fail('the key material does not match the commitment in the invitation', 'commitment_mismatch');\n    }\n    return true;\n}\n\nexport { KeyExchangeError };\n", "// Import EnhancedSecureFileTransfer\nimport { EnhancedSecureFileTransfer } from '../transfer/EnhancedSecureFileTransfer.js';\n\n// Adaptive voice/video call stack: codec tuning, SDP munging, network adaptation.\nimport { AUDIO_CONFIG, TRANSPORT_CONFIG } from './webrtc/config.js';\nimport { applyOpusSettings, applyTransport } from './webrtc/sdp.js';\nimport { configureAudioSender, applyAudioCodecPreferences } from './webrtc/audio.js';\nimport { configureVideoSender, applyVideoCodecPreferences } from './webrtc/video.js';\nimport { NetworkAdaptationController } from './webrtc/adaptation/controller.js';\n\n// Per-message forward secrecy. See src/crypto/DoubleRatchet.js for why the\n// session's static keys were not enough on their own.\nimport { DoubleRatchet } from '../crypto/DoubleRatchet.js';\n\n// SBQ2: the compact out-of-band descriptor and the in-band key exchange that\n// makes it possible. See doc/DESCRIPTOR-SBQ2.md.\nimport {\n    parseSdp as sbq2ParseSdp,\n    pruneCandidates as sbq2PruneCandidates,\n    encodeDescriptor as sbq2Encode,\n    decodeDescriptor as sbq2Decode,\n    serializeSdp as sbq2SerializeSdp,\n    bindingTag as sbq2BindingTag,\n    commitBlob as sbq2CommitBlob,\n    encodeText as sbq2EncodeText,\n    decodeText as sbq2DecodeText,\n    TYPE as SBQ2_TYPE,\n    TEXT_PREFIX as SBQ2_TEXT_PREFIX,\n} from './descriptor/sbq2.js';\nimport {\n    ROLE as KX_ROLE,\n    encodeKeyBlob,\n    decodeKeyBlob,\n    buildTranscript,\n    deriveTranscriptSalt,\n    proofPayload,\n    computeTranscriptSas,\n    verifyBlobCommitment,\n} from './descriptor/keyexchange.js';\n\n// MUTEX SYSTEM FIXES - RESOLVING MESSAGE DELIVERY ISSUES\n// ============================================\n// Issue: After introducing the Mutex system, messages stopped being delivered between users\n// Fix: Simplified locking logic \u2014 mutex is used ONLY for critical operations\n// - Regular messages are processed WITHOUT mutex\n// - File messages are processed WITHOUT mutex  \n// - Mutex is used ONLY for cryptographic operations\n// ============================================\n\nclass EnhancedSecureWebRTCManager {\n    // ============================================\n    // CONSTANTS\n    // ============================================\n    \n    static TIMEOUTS = {\n        KEY_ROTATION_INTERVAL: 300000,      // 5 minutes\n        CONNECTION_TIMEOUT: 10000,          // 10 seconds  \n        // Kept below LIVENESS_PROBE_AFTER so a healthy peer's own heartbeats keep\n        // the liveness clock fresh and probing never happens on a working link.\n        HEARTBEAT_INTERVAL: 10000,          // 10 seconds\n        SECURITY_CALC_DELAY: 1000,          // 1 second\n        SECURITY_CALC_RETRY_DELAY: 3000,    // 3 seconds\n        CLEANUP_INTERVAL: 300000,           // 5 minutes (periodic cleanup)\n        CLEANUP_CHECK_INTERVAL: 60000,      // 1 minute (cleanup check)\n        ICE_GATHERING_TIMEOUT: 10000,       // 10 seconds \u2014 soft: enough on a healthy network\n        // Hard ceiling used only when the soft deadline passes with NOTHING to\n        // export. Blocked STUN/TURN keeps gathering \"in progress\" indefinitely, so\n        // giving up at 10 s turned a slow network into a failed handshake.\n        ICE_GATHERING_HARD_TIMEOUT: 25000,  // 25 seconds\n        DISCONNECT_CLEANUP_DELAY: 500,      // 500ms\n        PEER_DISCONNECT_CLEANUP: 2000,      // 2 seconds\n        STAGE2_ACTIVATION_DELAY: 10000,     // 10 seconds\n        STAGE3_ACTIVATION_DELAY: 15000,     // 15 seconds  \n        STAGE4_ACTIVATION_DELAY: 20000,     // 20 seconds\n        FILE_TRANSFER_INIT_DELAY: 1000,     // 1 second\n        FAKE_TRAFFIC_MIN_INTERVAL: 15000,   // 15 seconds\n        FAKE_TRAFFIC_MAX_INTERVAL: 30000,   // 30 seconds\n        DECOY_INITIAL_DELAY: 5000,          // 5 seconds\n        DECOY_TRAFFIC_MIN: 10000,           // 10 seconds\n        DECOY_TRAFFIC_MAX: 25000,           // 25 seconds\n        REORDER_TIMEOUT: 3000,              // 3 seconds\n        RETRY_CONNECTION_DELAY: 2000,       // 2 seconds\n\n        // --- Session recovery ---\n        // How long to let a 'disconnected' path heal itself before renegotiating.\n        //\n        // The browser enters 'disconnected' after only ~5 s without a consent\n        // binding response, which ordinary packet loss produces, and then holds\n        // that state for roughly 25 s before declaring 'failed'. That whole\n        // window exists precisely so the connection can come back on its own \u2014\n        // and it very often does, especially against a phone whose screen went\n        // off, which generates these episodes constantly.\n        //\n        // So restart LATE in the window, not at the start: early enough to still\n        // beat 'failed', late enough that self-healing has had its chance. An\n        // earlier 3 s value meant every backgrounded phone was answered with a\n        // renegotiation \u2014 tearing down a connection that was about to recover.\n        // See https://blog.mozilla.org/webrtc/ice-disconnected-not/\n        ICE_DISCONNECT_GRACE: 8000,         // 8 seconds\n        // How long one restart round-trip (offer \u2192 gather \u2192 answer) may take. No\n        // new attempt is launched while one is in flight: the round-trip is far\n        // longer than the head of the backoff, so retrying blindly cancels the\n        // attempt already running and recovery never converges.\n        ICE_RESTART_TIMEOUT: 20000,         // 20 seconds\n        // Gathering budget inside a restart. Deliberately far below the initial\n        // handshake's 10 s: host and server-reflexive candidates arrive in well\n        // under a second, and waiting out the full budget for a relay candidate\n        // that may never come would blow the round-trip deadline above.\n        ICE_RESTART_GATHERING: 4000,        // 4 seconds\n        // Give up on automatic recovery after this long. There is no manual\n        // fallback: the session is ended and its data wiped.\n        RECONNECT_MAX_DURATION: 120000,     // 2 minutes\n        // In-band recovery needs the data channel to carry the renegotiation. If\n        // nothing at all arrives from the peer for this long once recovery has\n        // started, it cannot \u2014 and no number of further attempts will change\n        // that, so the session is ended promptly instead of after a two-minute\n        // wait that was never going to succeed.\n        RECOVERY_SILENCE_LIMIT: 15000,      // 15 seconds\n        // Liveness is established by an explicit probe/ack, not by silence alone.\n        // Silence on its own is not proof of death: a browser throttles timers in a\n        // backgrounded tab (Chrome down to roughly one per minute, iOS Safari\n        // freezes them outright), so a perfectly healthy peer can stop sending for\n        // a long time. Inbound message handling is NOT throttled that way, so a\n        // live peer \u2014 even a backgrounded one \u2014 answers a probe within milliseconds\n        // while a peer whose network is gone cannot answer at all.\n        LIVENESS_PROBE_AFTER: 12000,        // silence before probing the peer\n        LIVENESS_PROBE_TIMEOUT: 5000,       // how long the ack may take\n        LIVENESS_CHECK_INTERVAL: 2000,      // 2 seconds\n\n    };\n\n\n    // Backoff between automatic ICE-restart attempts (ms). Deliberately short at\n    // the head: most real drops recover on the first or second try.\n    static RECONNECT_BACKOFF = Object.freeze([1000, 2000, 4000, 8000, 15000, 30000]);\n\n    static LIMITS = {\n        MAX_CONNECTION_ATTEMPTS: 3,\n        // Consecutive ICE failures that produced zero candidate pairs before\n        // concluding the PeerConnection itself is unusable, rather than the path\n        // merely being flaky.\n        MAX_BARREN_ICE_FAILURES: 2,\n        MAX_OLD_KEYS: 3,\n        MAX_PROCESSED_MESSAGE_IDS: 1000,\n        MAX_OUT_OF_ORDER_PACKETS: 5,\n        MAX_DECOY_CHANNELS: 1,\n        MESSAGE_RATE_LIMIT: 60,             // messages per minute\n        MAX_KEY_AGE: 900000,                // 15 minutes\n        OFFER_MAX_AGE: 3600000,             // 1 hour\n        SALT_SIZE_V3: 32,                   // bytes\n        SALT_SIZE_V4: 64                    // bytes\n    };\n\n    static SIZES = {\n        VERIFICATION_CODE_MIN_LENGTH: 6,\n        FAKE_TRAFFIC_MIN_SIZE: 32,\n        FAKE_TRAFFIC_MAX_SIZE: 128,\n        PACKET_PADDING_MIN: 64,\n        PACKET_PADDING_MAX: 512,\n        CHUNK_SIZE_MAX: 2048,\n        CHUNK_DELAY_MIN: 100,\n        CHUNK_DELAY_MAX: 500,\n        FINGERPRINT_DISPLAY_LENGTH: 8,\n        SESSION_ID_LENGTH: 16,\n        NESTED_ENCRYPTION_IV_SIZE: 12\n    };\n\n    static MESSAGE_TYPES = {\n        // Regular messages\n        MESSAGE: 'message',\n        ENHANCED_MESSAGE: 'enhanced_message',\n        // Chat content under the Double Ratchet: a per-message key that is\n        // destroyed after use. Carries its own plaintext header (ratchet public\n        // key, chain position) which AES-GCM authenticates as AAD.\n        RATCHET_MESSAGE: 'ratchet_message',\n\n        // Per-message control (unsend / disappearing sync)\n        MESSAGE_DELETE: 'message_delete',\n        // Delivery receipt: recipient acks a chat message by id (WhatsApp \u2713\u2713).\n        MESSAGE_RECEIPT: 'message_receipt',\n\n        // System messages\n        HEARTBEAT: 'heartbeat',\n        VERIFICATION: 'verification',\n        VERIFICATION_RESPONSE: 'verification_response',\n        VERIFICATION_CONFIRMED: 'verification_confirmed',\n        VERIFICATION_BOTH_CONFIRMED: 'verification_both_confirmed',\n        PEER_DISCONNECT: 'peer_disconnect',\n        SECURITY_UPGRADE: 'security_upgrade',\n        KEY_ROTATION_SIGNAL: 'key_rotation_signal',\n        KEY_ROTATION_READY: 'key_rotation_ready',\n        \n        // File transfer messages\n        FILE_TRANSFER_START: 'file_transfer_start',\n        FILE_TRANSFER_RESPONSE: 'file_transfer_response',\n        FILE_CHUNK: 'file_chunk',\n        CHUNK_CONFIRMATION: 'chunk_confirmation',\n        FILE_TRANSFER_COMPLETE: 'file_transfer_complete',\n        FILE_TRANSFER_ERROR: 'file_transfer_error',\n\n        // Encrypted voice / video calls. SDP + ICE are exchanged over the\n        // already-authenticated (ECDH + SAS-verified) data channel, so the\n        // DTLS-SRTP fingerprints negotiated for the media are themselves\n        // authenticated end-to-end \u2014 a signalling server never sees them.\n        CALL_OFFER: 'call_offer',\n        CALL_ANSWER: 'call_answer',\n        CALL_ICE: 'call_ice',\n        CALL_DECLINE: 'call_decline',\n        CALL_END: 'call_end',\n\n        // Session recovery. An ICE restart renegotiates ONLY the transport path\n        // (new candidates after a NAT rebind / IP change); the DTLS handshake and\n        // the SCTP association that carries this data channel survive it, so the\n        // session keys, the SAS verification and the message history all stay\n        // valid. The renegotiation SDP therefore rides the existing E2E channel \u2014\n        // still no signalling server. Note that holding the session keys is NOT\n        // itself proof of identity: a MITM who completed the handshake holds them\n        // too. These frames are accepted only after SAS verification (see\n        // POST_VERIFICATION_CONTROL_TYPES).\n        ICE_RESTART_OFFER: 'ice_restart_offer',\n        ICE_RESTART_ANSWER: 'ice_restart_answer',\n        // Sent by the answerer side, which must not create offers itself (glare):\n        // it asks the offerer to drive the restart.\n        ICE_RESTART_REQUEST: 'ice_restart_request',\n\n        // SBQ2 in-band key exchange. These are the only two frames that legitimately\n        // arrive before any key exists, which is exactly why they are handled in one\n        // place and nowhere else: KEY_BLOB carries the key material the descriptor's\n        // commitment covers, KEY_PROOF the signature over the transcript.\n        KEY_BLOB: 'key_blob',\n        KEY_PROOF: 'key_proof',\n\n        // Fake traffic\n        FAKE: 'fake'\n    };\n\n    static FILTERED_RESULTS = {\n        FAKE_MESSAGE: 'FAKE_MESSAGE_FILTERED',\n        FILE_MESSAGE: 'FILE_MESSAGE_FILTERED',\n        SYSTEM_MESSAGE: 'SYSTEM_MESSAGE_FILTERED'\n    };\n\n    // Control frames that may only be acted on once the session is SAS-verified.\n    // Deliberately an allowlist: an unknown type is not a control frame and is\n    // rejected by the chat channel's default-deny branch. The verification\n    // handshake itself (verification*, heartbeat) is excluded \u2014 it has to work\n    // before verification exists, which is what makes it worth reviewing closely.\n    static POST_VERIFICATION_CONTROL_TYPES = new Set([\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE_DELETE,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE_RECEIPT,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_OFFER,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_ANSWER,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_ICE,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_DECLINE,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_END,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_OFFER,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_ANSWER,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_REQUEST\n    ]);\n\n    // \u2500\u2500 SBQ2 ROLLBACK SWITCH \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    // Flip this ONE value to false and redeploy to put every new invitation back\n    // on the SB1 format. Nothing else needs touching: reception of both formats\n    // is unconditional, so a client built with this off still reads SBQ2\n    // invitations from a client built with it on.\n    //\n    // It only governs what we EMIT. It is deliberately not consulted anywhere in\n    // the receive path, and never inside an established session \u2014 see\n    // _handshakeMode, which is latched per connection so a session cannot be\n    // pushed back onto the weaker format halfway through.\n    static SBQ2_SEND_ENABLED = true;\n\n    // How long the in-band key exchange may take from channel open to verified\n    // proof. Generous next to the ~1 s a handshake actually needs, tight enough\n    // that a peer that never sends its blob does not hang the UI indefinitely.\n    static SBQ2_KEY_EXCHANGE_TIMEOUT_MS = 15000;\n\n    static PROTOCOL_VERSION = '4.1';\n    // Double Ratchet wire version. Bump only on an incompatible ratchet change;\n    // peers compare it and fall back to static keys when it is absent or unknown.\n    static RATCHET_VERSION = 1;\n    static MAX_SAS_ATTEMPTS = 3;\n    static DEFAULT_ICE_SERVERS = Object.freeze([\n        // Keep multiple independent public STUN defaults so one provider-side\n        // DNS/path failure does not strand standard-mode connectivity.\n        Object.freeze({ urls: 'stun:stun.cloudflare.com:3478' }),\n        Object.freeze({ urls: 'stun:stun.l.google.com:19302' }),\n        Object.freeze({ urls: 'stun:stun1.l.google.com:19302' }),\n        Object.freeze({ urls: 'stun:stun2.l.google.com:19302' }),\n        Object.freeze({ urls: 'stun:stun3.l.google.com:19302' }),\n        Object.freeze({ urls: 'stun:stun4.l.google.com:19302' })\n    ]);\n\n    //   Static debug flag instead of this._debugMode\n    static DEBUG_MODE = false; // Set to true during development, false in production\n\n\n    constructor(onMessage, onStatusChange, onKeyExchange, onVerificationRequired, onAnswerError = null, onVerificationStateChange = null, config = {}) {\n    // Determine runtime mode\n    this._isProductionMode = this._detectProductionMode();\n            //   Use static flag instead of this._debugMode\n        this._debugMode = !this._isProductionMode && EnhancedSecureWebRTCManager.DEBUG_MODE;\n        \n        //   Configuration from constructor parameters instead of global flags\n        this._config = {\n            fakeTraffic: {\n                enabled: config.fakeTraffic?.enabled ?? true,\n                minInterval: config.fakeTraffic?.minInterval ?? EnhancedSecureWebRTCManager.TIMEOUTS.FAKE_TRAFFIC_MIN_INTERVAL,\n                maxInterval: config.fakeTraffic?.maxInterval ?? EnhancedSecureWebRTCManager.TIMEOUTS.FAKE_TRAFFIC_MAX_INTERVAL,\n                minSize: config.fakeTraffic?.minSize ?? EnhancedSecureWebRTCManager.SIZES.FAKE_TRAFFIC_MIN_SIZE,\n                maxSize: config.fakeTraffic?.maxSize ?? EnhancedSecureWebRTCManager.SIZES.FAKE_TRAFFIC_MAX_SIZE,\n                patterns: config.fakeTraffic?.patterns ?? ['heartbeat', 'status', 'sync']\n            },\n            decoyChannels: {\n                enabled: config.decoyChannels?.enabled ?? true,\n                maxDecoyChannels: config.decoyChannels?.maxDecoyChannels ?? EnhancedSecureWebRTCManager.LIMITS.MAX_DECOY_CHANNELS,\n                decoyChannelNames: config.decoyChannels?.decoyChannelNames ?? ['heartbeat'],\n                sendDecoyData: config.decoyChannels?.sendDecoyData ?? true,\n                randomDecoyIntervals: config.decoyChannels?.randomDecoyIntervals ?? true\n            },\n            packetPadding: {\n                enabled: config.packetPadding?.enabled ?? true,\n                minPadding: config.packetPadding?.minPadding ?? EnhancedSecureWebRTCManager.SIZES.PACKET_PADDING_MIN,\n                maxPadding: config.packetPadding?.maxPadding ?? EnhancedSecureWebRTCManager.SIZES.PACKET_PADDING_MAX,\n                useRandomPadding: config.packetPadding?.useRandomPadding ?? true,\n                preserveMessageSize: config.packetPadding?.preserveMessageSize ?? false\n            },\n            antiFingerprinting: {\n                enabled: config.antiFingerprinting?.enabled ?? false,\n                randomizeTiming: config.antiFingerprinting?.randomizeTiming ?? true,\n                randomizeSizes: config.antiFingerprinting?.randomizeSizes ?? false,\n                addNoise: config.antiFingerprinting?.addNoise ?? true,\n                maskPatterns: config.antiFingerprinting?.maskPatterns ?? false,\n                useRandomHeaders: config.antiFingerprinting?.useRandomHeaders ?? false\n            },\n            webrtc: {\n                // `privacyMode` is canonical; `relayOnly` remains a\n                // backward-compatible input alias at construction time.\n                privacyMode: config.webrtc?.privacyMode\n                    ?? (config.webrtc?.relayOnly ? 'relay-only' : 'standard'),\n                relayOnly: config.webrtc?.privacyMode\n                    ? config.webrtc.privacyMode === 'relay-only'\n                    : config.webrtc?.relayOnly ?? false,\n                iceServers: config.webrtc?.iceServers\n                    ?? EnhancedSecureWebRTCManager.DEFAULT_ICE_SERVERS.map(server => ({ ...server }))\n            }\n        };\n\n        /**\n         * Whether this connection may speak to the application at large.\n         *\n         * A manager announces its lifecycle on `document` \u2014 new-connection,\n         * peer-disconnect, real-security-calculated \u2014 and the header and the\n         * chat shell listen, because for an ordinary chat those events ARE the\n         * application's state changing.\n         *\n         * A group mesh link is not an ordinary chat. It is a routing detail with\n         * no window of its own, and letting one broadcast would have it reset the\n         * security badge and the connection banner belonging to whatever chat the\n         * user happens to be looking at \u2014 a link the user never opened tearing\n         * down the display of one they did. Such a manager is muted here: its own\n         * callbacks still fire, so the group learns everything it needs.\n         */\n        this._emitGlobalEvents = config.emitGlobalEvents !== false;\n\n        this._ipLeakWarningShown = false;\n\n            //   Initialize own logging system\n        this._initializeSecureLogging();\n        this._setupOwnLogger();\n        this._setupProductionLogging();\n        \n        //   Store important methods first\n        this._storeImportantMethods();\n        \n        //   Setup global API after storing methods\n        this._setupSecureGlobalAPI();\n    if (!window.EnhancedSecureCryptoUtils) {\n        throw new Error('EnhancedSecureCryptoUtils is not loaded. Please ensure the module is loaded first.');\n    }\n    this.getSecurityData = () => {\n        // Return only public information\n        return this.lastSecurityCalculation ? {\n            level: this.lastSecurityCalculation.level,\n            score: this.lastSecurityCalculation.score,\n            timestamp: this.lastSecurityCalculation.timestamp,\n            // Do NOT return check details or sensitive data\n        } : null;\n    };\n    this._secureLog('info', '\uD83D\uDD12 Enhanced WebRTC Manager initialized with secure API');\n    this.sessionConstraints = null;\n    this.peerConnection = null;\n    this.dataChannel = null;\n\n\n    this.onMessage = onMessage;\n    this.onStatusChange = onStatusChange;\n    this.onKeyExchange = onKeyExchange;\n    this.onVerificationStateChange = onVerificationStateChange;\n\n    this.onVerificationRequired = onVerificationRequired;\n    this.onAnswerError = onAnswerError; // Callback for response processing errors\n    this.isInitiator = false;\n    this.connectionAttempts = 0;\n    this.maxConnectionAttempts = EnhancedSecureWebRTCManager.LIMITS.MAX_CONNECTION_ATTEMPTS;\n    try {\n    this._initializeMutexSystem();\n} catch (error) {\n    this._secureLog('error', '\u274C Failed to initialize mutex system', {\n        errorType: error.constructor.name\n    });\n    throw new Error('Critical: Mutex system initialization failed');\n}\n\n// Post-initialization validation of the mutex system\nif (!this._validateMutexSystem()) {\n    this._secureLog('error', '\u274C Mutex system validation failed after initialization');\n    throw new Error('Critical: Mutex system validation failed');\n}\n\nif (typeof window !== 'undefined') {\n    this._secureLog('info', '\uD83D\uDD12 Emergency mutex handlers will be available through secure API');\n}\n\nthis._secureLog('info', '\uD83D\uDD12 Enhanced Mutex system fully initialized and validated');\n    this.heartbeatInterval = null;\n    this.messageQueue = [];\n    //   Session recovery state (see _onPathDegraded / _attemptIceRestart).\n    this._reconnect = {\n        phase: 'idle',          // idle | grace | restarting | waiting | exhausted\n        attempts: 0,\n        startedAt: 0,\n        graceTimer: null,\n        retryTimer: null,\n        restartTimer: null,\n        inFlightAt: 0,          // when the current restart round-trip was launched\n        barrenFailures: 0,      // consecutive failures that produced no candidate pairs\n        pendingRole: null       // 'offerer' | 'answerer' during a restart round-trip\n    };\n    //   Liveness tracking: last time ANY authenticated frame arrived from the peer.\n    this._lastInboundAt = 0;\n    this._livenessProbeAt = 0;\n    this._livenessTimer = null;\n    this._heartbeatTimer = null;\n    this.ecdhKeyPair = null;\n    this.ecdsaKeyPair = null;\n    if (this.fileTransferSystem) {\n        this.fileTransferSystem.cleanup();\n        this.fileTransferSystem = null;\n    }\n            this.verificationCode = null;\n        this.pendingSASCode = null;\n        this.isVerified = false;\n        this.sasValidationAttempts = 0;\n        this.processedMessageIds = new Set();\n        \n        // Mutual verification states\n        this.localVerificationConfirmed = false;\n        this.remoteVerificationConfirmed = false;\n        this.bothVerificationsConfirmed = false;\n        \n        //   Store expected DTLS fingerprint for validation\n        // NAMING: `expectedDTLSFingerprint` holds OUR OWN local fingerprint once\n        // the handshake produces it \u2014 it is what _computeSAS mixes in as localFP,\n        // not an expectation about the peer. The peer's value lives separately in\n        // `_peerDTLSFingerprint`. Conflating the two is what made the old\n        // \"validation\" compare a fingerprint against itself; keep them apart.\n        this.expectedDTLSFingerprint = null;\n        this._peerDTLSFingerprint = null;\n        this.strictDTLSValidation = true; // Can be disabled for debugging\n        \n        //   Real Perfect Forward Secrecy implementation\n        this.ephemeralKeyPairs = new Map(); // Store ephemeral keys for current session only\n        this.sessionStartTime = Date.now(); // Track session lifetime for PFS\n    this.messageCounter = 0;\n    this.sequenceNumber = 0;\n    this.expectedSequenceNumber = 0;\n    this.sessionSalt = null;\n    this._pendingOfferContext = null;\n    \n    //   Anti-Replay and Message Ordering Protection\n    this.replayWindowSize = 64; // Sliding window for replay protection\n    this.replayWindow = new Set(); // Track recent sequence numbers\n    this.maxSequenceGap = 100; // Maximum allowed sequence gap\n    this.replayProtectionEnabled = true; // Enable/disable replay protection\n    this.sessionId = null; // MITM protection: Session identifier\n\n    // Handshake format latched for THIS connection: 'sb1' or 'sbq2'. Set when the\n    // first descriptor of the session is produced or parsed, and never changed\n    // afterwards. That latch is what makes downgrade impossible inside a session:\n    // an SBQ2 session that hits any trouble fails, it does not retry as SB1.\n    this._handshakeMode = null;\n    // Per-connection SBQ2 state. Null on the SB1 path.\n    this._sbq2 = null;\n    this.connectionId = Array.from(crypto.getRandomValues(new Uint8Array(8)))\n        .map(b => b.toString(16).padStart(2, '0')).join(''); // Connection identifier for AAD\n    this.peerPublicKey = null; // Store peer's public key for PFS\n\n    // Double Ratchet. `_ratchet` is null until both peers have advertised\n    // support during the handshake; until then messages take the static-key\n    // path, which is what keeps 5.6.x peers working.\n    this._ratchet = null;\n    this._peerSupportsRatchet = false;\n    this.rateLimiterId = null;\n    this.intentionalDisconnect = false;\n    this._sessionAlive = true;\n    this._fileTransferInitRetryTimers = new Set();\n    this._peerDisconnectCleanupTimer = null;\n    this._logCleanupInterval = null;\n    this.lastCleanupTime = Date.now();\n    \n    // Reset notification flags for new connection\n    this._resetNotificationFlags();\n    \n    \n\n    this.verificationInitiationSent = false;\n    this.disconnectNotificationSent = false;\n    this.reconnectionFailedNotificationSent = false;\n    this.peerDisconnectNotificationSent = false;\n    this.connectionClosedNotificationSent = false;\n    this.fakeTrafficDisabledNotificationSent = false;\n    this.advancedFeaturesDisabledNotificationSent = false;\n    this.securityUpgradeNotificationSent = false;\n    this.lastSecurityUpgradeStage = null;\n    this.securityCalculationNotificationSent = false;\n    this.lastSecurityCalculationLevel = null;\n    \n    // File transfer integration\n    this.fileTransferSystem = null;\n    this.onFileProgress = null;\n    \n    // ============================================\n    //   IV REUSE PREVENTION SYSTEM\n    // ============================================\n    //   IV REUSE PREVENTION SYSTEM WITH LIMITS\n    // ============================================\n    this._ivTrackingSystem = {\n        usedIVs: new Set(), // Track all used IVs to prevent reuse\n        ivHistory: new Map(), // Track IV usage with timestamps (max 10k entries)\n        collisionCount: 0, // Track potential collisions\n        maxIVHistorySize: 10000, // Maximum IV history size\n        maxSessionIVs: 1000, // Maximum IVs per session\n        entropyValidation: {\n            minEntropy: 3.0, // Minimum entropy threshold\n            entropyTests: 0,\n            entropyFailures: 0\n        },\n        rngValidation: {\n            testsPerformed: 0,\n            weakRngDetected: false,\n            lastValidation: 0\n        },\n        sessionIVs: new Map(), // Track IVs per session\n        emergencyMode: false // Emergency mode if IV reuse detected\n    };\n    \n    //   IV cleanup tracking\n    this._lastIVCleanupTime = null;\n    \n    // ============================================\n    //   SECURE ERROR HANDLING SYSTEM\n    // ============================================\n    this._secureErrorHandler = {\n        errorCategories: {\n            CRYPTOGRAPHIC: 'cryptographic',\n            NETWORK: 'network',\n            VALIDATION: 'validation',\n            SYSTEM: 'system',\n            UNKNOWN: 'unknown'\n        },\n        errorMappings: new Map(), // Map internal errors to safe messages\n        errorCounts: new Map(), // Track error frequencies\n        lastErrorTime: 0,\n        errorThreshold: 10, // Max errors per minute\n        isInErrorMode: false\n    };\n    \n    // ============================================\n    //   SECURE MEMORY MANAGEMENT SYSTEM\n    // ============================================\n    this._secureMemoryManager = {\n        sensitiveData: new WeakMap(), // Track sensitive data for secure cleanup\n        cleanupQueue: [], // Queue for deferred cleanup operations\n        isCleaning: false, // Prevent concurrent cleanup operations\n        cleanupInterval: null, // Periodic cleanup timer\n        memoryStats: {\n            totalCleanups: 0,\n            failedCleanups: 0,\n            lastCleanup: 0\n        }\n    };\n    this.onFileReceived = null;\n    this.onFileError = null;\n\n    // \u2500\u2500 Encrypted call subsystem \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    // Media (audio/video) rides the SAME RTCPeerConnection as the data channel\n    // (bundled over one DTLS-SRTP transport), so it inherits the connection's\n    // end-to-end encryption and needs no new ICE. Signalling is renegotiated\n    // in-band over the verified data channel. UI observes state via the\n    // onCallStateChanged callback and the 'securebit-call-state' DOM event.\n    this.onCallStateChanged = null;   // (state) => void\n    this.callState = {\n        active: false,        // a call session exists (ringing or connected)\n        phase: 'idle',        // idle | outgoing | incoming | connecting | active | ended\n        withVideo: false,     // whether video is part of this call\n        micEnabled: true,\n        cameraEnabled: false,\n        remoteHasVideo: false,\n        callId: null,\n        quality: null,        // 'excellent'|'good'|'fair'|'poor'|null \u2014 link quality for the UI\n        groupCallId: null,    // set while this call is one leg of a group call\n        error: null\n    };\n    this.localMediaStream = null;\n    this.remoteMediaStream = null;\n    this._pendingCallOffer = null;    // { sdp, callId, withVideo } awaiting accept\n    this._callMakingOffer = false;    // perfect-negotiation guard\n    this._callAudioSender = null;\n    this._callVideoSender = null;\n    this._callFacingMode = 'user';\n    this._adaptationController = null; // NetworkAdaptationController while a call is active\n\n    // \u2500\u2500 Group calls \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    // A group call is N-1 ordinary calls, one per member, each on its own\n    // already-verified pairwise session. Two things differ from a 1:1 call and\n    // both live here, because the group layer owns them and this manager only\n    // carries one leg of the result.\n    //\n    //   _callGroupContext   The group call this leg belongs to. While it is\n    //                       set, an inbound offer is answered without ringing \u2014\n    //                       the user already consented, once, by joining the\n    //                       call, and asking again per member would mean seven\n    //                       prompts for one decision. It is set ONLY by the\n    //                       group-call controller while the local user is in a\n    //                       call, and cleared the moment they leave, so it can\n    //                       never auto-answer a call the user did not ask for.\n    //\n    //   _externalMediaStream  One capture shared across every leg. Without it\n    //                       each leg would open its own getUserMedia, which is\n    //                       N microphone captures of the same microphone and N\n    //                       camera indicators for one call. The stream is owned\n    //                       by the controller: this manager attaches its tracks\n    //                       and never stops them.\n    this._callGroupContext = null;\n    this._externalMediaStream = null;\n    /** Extra call-state subscribers, so the group layer and the 1:1 UI coexist. */\n    this._callStateListeners = new Set();\n\n    // PFS (Perfect Forward Secrecy) Implementation\n    this.keyRotationInterval = null; // \u043E\u0442\u043A\u043B\u044E\u0447\u0430\u0435\u043C \u0442\u0430\u0439\u043C\u0435\u0440\u043D\u0443\u044E \u0440\u043E\u0442\u0430\u0446\u0438\u044E\n    this.lastKeyRotation = Date.now();\n    this.currentKeyVersion = 0;\n    this.keyVersions = new Map(); // Store key versions for PFS\n    this.oldKeys = new Map(); // Store old keys temporarily for decryption\n    this.maxOldKeys = EnhancedSecureWebRTCManager.LIMITS.MAX_OLD_KEYS; // Keep last 3 key versions for decryption\n    this.peerConnection = null;\n    this.dataChannel = null;\n    \n\n    this.securityFeatures = {\n        // All security features enabled by default - no payment required\n        hasEncryption: true,      \n        hasECDH: true,            \n        hasECDSA: true,          \n        hasMutualAuth: true,     \n        hasMetadataProtection: true,      \n        hasEnhancedReplayProtection: true, \n        hasNonExtractableKeys: true,      \n        hasRateLimiting: true,    \n        hasEnhancedValidation: true,      \n        hasPFS: true, //   Real Perfect Forward Secrecy enabled           \n        \n        // Advanced Features - All enabled by default\n        hasNestedEncryption: true,     \n        hasPacketPadding: true,        \n        hasPacketReordering: true,    \n        hasAntiFingerprinting: true,  \n        hasFakeTraffic: true,         \n        hasDecoyChannels: true,       \n        hasMessageChunking: true      \n        };\n        this._secureLog('info', '\uD83D\uDD12 Enhanced WebRTC Manager initialized with tiered security');\n        \n        //   Log configuration for debugging\n        this._secureLog('info', '\uD83D\uDD12 Configuration loaded from constructor parameters', {\n            fakeTraffic: this._config.fakeTraffic.enabled,\n            decoyChannels: this._config.decoyChannels.enabled,\n            packetPadding: this._config.packetPadding.enabled,\n            antiFingerprinting: this._config.antiFingerprinting.enabled\n        });\n        \n        // Session mode: 'time' | 'ratchet'. NOTE: 'ratchet' currently means only\n        // that key lifetime is bound to the session rather than to a timer \u2014 there\n        // is no Double Ratchet and no in-session rotation (rotateKeys() exists but\n        // is not wired to anything, and keyRotationInterval is null). Forward\n        // secrecy is therefore per-session, not per-message: see\n        // verifyPerfectForwardSecrecy(), which reports that gap rather than hiding\n        // it. Do not read this flag as evidence that a ratchet is running.\n        this.sessionMode = 'ratchet';\n\n        //   XSS Hardening - replace all window.DEBUG_MODE references\n        this._hardenDebugModeReferences();\n        \n        //   Initialize unified scheduler for all maintenance tasks\n        this._initializeUnifiedScheduler();\n        \n        this._syncSecurityFeaturesWithTariff();\n        \n        if (!this._validateCryptographicSecurity()) {\n            this._secureLog('error', '\uD83D\uDEA8 CRITICAL: Cryptographic security validation failed after tariff sync');\n            throw new Error('Critical cryptographic features are missing after tariff synchronization');\n        }\n    // ============================================\n    // ENHANCED SECURITY FEATURES\n    // ============================================\n        \n        // 1. Nested Encryption Layer\n            this.nestedEncryptionKey = null;\n                    //   Removed nestedEncryptionIV and nestedEncryptionCounter\n        // Each nested encryption now generates fresh random IV for maximum security\n                \n            // 2. Packet Padding\n            this.paddingConfig = {\n                enabled: this._config.packetPadding.enabled,\n                minPadding: this._config.packetPadding.minPadding,\n                maxPadding: this._config.packetPadding.maxPadding,\n                useRandomPadding: this._config.packetPadding.useRandomPadding,\n                preserveMessageSize: this._config.packetPadding.preserveMessageSize\n            };\n                \n            // 3. Fake Traffic Generation\n            this.fakeTrafficConfig = {\n                enabled: this._config.fakeTraffic?.enabled || false,\n                minInterval: this._config.fakeTraffic?.minInterval || 15000,\n                maxInterval: this._config.fakeTraffic?.maxInterval || 30000,\n                minSize: this._config.fakeTraffic?.minSize || 64,\n                maxSize: this._config.fakeTraffic?.maxSize || 1024,\n                patterns: this._config.fakeTraffic?.patterns || ['heartbeat', 'status', 'ping'],\n                randomDecoyIntervals: this._config.fakeTraffic?.randomDecoyIntervals || true\n            };\n            this.fakeTrafficTimer = null;\n            this.lastFakeTraffic = 0;\n                \n            // 4. Message Chunking\n            this.chunkingConfig = {\n                enabled: false,\n                maxChunkSize: EnhancedSecureWebRTCManager.SIZES.CHUNK_SIZE_MAX,        \n                minDelay: EnhancedSecureWebRTCManager.SIZES.CHUNK_DELAY_MIN,\n                maxDelay: EnhancedSecureWebRTCManager.SIZES.CHUNK_DELAY_MAX,\n                useRandomDelays: true,\n                addChunkHeaders: true\n            };\n            this.chunkQueue = [];\n            this.chunkingInProgress = false;\n                \n            // 5. Decoy Channels\n            this.decoyChannels = new Map();\n            this.decoyChannelConfig = {\n                enabled: this._config.decoyChannels.enabled,\n                maxDecoyChannels: this._config.decoyChannels.maxDecoyChannels,\n                decoyChannelNames: this._config.decoyChannels.decoyChannelNames,\n                sendDecoyData: this._config.decoyChannels.sendDecoyData,\n                randomDecoyIntervals: this._config.decoyChannels.randomDecoyIntervals\n            };\n            this.decoyTimers = new Map();\n                \n            // 6. Packet Reordering Protection\n            this.reorderingConfig = {\n                enabled: false,             \n                maxOutOfOrder: EnhancedSecureWebRTCManager.LIMITS.MAX_OUT_OF_ORDER_PACKETS,           \n                reorderTimeout: EnhancedSecureWebRTCManager.TIMEOUTS.REORDER_TIMEOUT,       \n                useSequenceNumbers: true,\n                useTimestamps: true\n            };\n            this.packetBuffer = new Map(); // sequence -> {data, timestamp}\n            this.lastProcessedSequence = -1;\n                \n            // 7. Anti-Fingerprinting\n            this.antiFingerprintingConfig = {\n                enabled: this._config.antiFingerprinting.enabled,\n                randomizeTiming: this._config.antiFingerprinting.randomizeTiming,\n                randomizeSizes: this._config.antiFingerprinting.randomizeSizes,\n                addNoise: this._config.antiFingerprinting.addNoise,\n                maskPatterns: this._config.antiFingerprinting.maskPatterns,\n                useRandomHeaders: this._config.antiFingerprinting.useRandomHeaders\n            };\n            this.fingerprintMask = this.generateFingerprintMask();\n                \n            // Initialize rate limiter ID\n            this.rateLimiterId = `webrtc_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;\n                \n            // Start periodic cleanup\n            this.startPeriodicCleanup();\n                \n            this.initializeEnhancedSecurity(); \n            \n            // ============================================\n            // MUTEX SYSTEM TO PREVENT RACE CONDITIONS\n            // ============================================\n\n            // Mutex for key operations\n            this._keyOperationMutex = {\n                locked: false,\n                queue: [],\n                lockId: null,\n                lockTimeout: null\n            };\n\n            // Mutex for encryption/decryption operations\n            this._cryptoOperationMutex = {\n                locked: false,\n                queue: [],\n                lockId: null,\n                lockTimeout: null\n            };\n\n            // Mutex for connection initialization\n            this._connectionOperationMutex = {\n                locked: false,\n                queue: [],\n                lockId: null,\n                lockTimeout: null\n            };\n\n            // Key system state\n            this._keySystemState = {\n                isInitializing: false,\n                isRotating: false,\n                isDestroying: false,\n                lastOperation: null,\n                lastOperationTime: Date.now()\n            };\n\n            // Operation counters\n            this._operationCounters = {\n                keyOperations: 0,\n                cryptoOperations: 0,\n                connectionOperations: 0\n            };\n\n        }\n        \n        /**\n         *   Create AAD with sequence number for anti-replay protection\n         * This binds each message to its sequence number and prevents replay attacks\n         */\n        _createMessageAAD(messageType, messageData = null, isFileMessage = false) {\n            try {\n                const aad = {\n                    sessionId: this.currentSession?.sessionId || this.sessionId || 'unknown',\n                    keyFingerprint: this.keyFingerprint || 'unknown',\n                    sequenceNumber: this._generateNextSequenceNumber(),\n                    messageType: messageType,\n                    timestamp: Date.now(),\n                    connectionId: this.connectionId || 'unknown',\n                    isFileMessage: isFileMessage\n                };\n\n                // Add message-specific data if available\n                if (messageData && typeof messageData === 'object') {\n                    if (messageData.fileId) aad.fileId = messageData.fileId;\n                    if (messageData.chunkIndex !== undefined) aad.chunkIndex = messageData.chunkIndex;\n                    if (messageData.totalChunks !== undefined) aad.totalChunks = messageData.totalChunks;\n                }\n\n                return JSON.stringify(aad);\n            } catch (error) {\n                this._secureLog('error', '\u274C Failed to create message AAD', {\n                    errorType: error.constructor.name,\n                    message: error.message,\n                    messageType: messageType\n                });\n                // Fallback to basic AAD\n                return JSON.stringify({\n                    sessionId: 'unknown',\n                    keyFingerprint: 'unknown',\n                    sequenceNumber: Date.now(),\n                    messageType: messageType,\n                    timestamp: Date.now(),\n                    connectionId: 'unknown',\n                    isFileMessage: isFileMessage\n                });\n            }\n        }\n        \n        /**\n         *   Generate next sequence number for outgoing messages\n         * This ensures unique ordering and prevents replay attacks\n         */\n        _generateNextSequenceNumber() {\n            const nextSeq = this.sequenceNumber++;\n            \n            //   Reset sequence number if it gets too large\n            if (this.sequenceNumber > Number.MAX_SAFE_INTEGER - 1000) {\n                this.sequenceNumber = 0;\n                this.expectedSequenceNumber = 0;\n                this.replayWindow.clear();\n                this._secureLog('warn', '\u26A0\uFE0F Sequence number reset due to overflow', {\n                    timestamp: Date.now()\n                });\n            }\n            \n            return nextSeq;\n        }\n\n        /**\n         * Create a safe hash for logging sensitive data\n         * Returns only the first 4 bytes (8 hex chars) of SHA-256 hash\n         * @param {any} sensitiveData - The sensitive data to hash\n         * @param {string} context - Context for error logging\n         * @returns {Promise<string>} - Short hash (8 hex chars) or 'hash_error'\n         */\n        async _createSafeLogHash(sensitiveData, context = 'unknown') {\n            try {\n                let dataToHash;\n                \n                // Convert different data types to consistent format for hashing\n                if (sensitiveData instanceof ArrayBuffer) {\n                    dataToHash = new Uint8Array(sensitiveData);\n                } else if (sensitiveData instanceof Uint8Array) {\n                    dataToHash = sensitiveData;\n                } else if (sensitiveData instanceof CryptoKey) {\n                    // For CryptoKey, use its type and algorithm info (not the key material)\n                    const keyInfo = `${sensitiveData.type}_${sensitiveData.algorithm?.name || 'unknown'}_${sensitiveData.extractable}`;\n                    dataToHash = new TextEncoder().encode(keyInfo);\n                } else if (typeof sensitiveData === 'string') {\n                    dataToHash = new TextEncoder().encode(sensitiveData);\n                } else if (typeof sensitiveData === 'object' && sensitiveData !== null) {\n                    // For objects (like JWK), stringify without sensitive fields\n                    const safeObj = { type: sensitiveData.kty || 'unknown', use: sensitiveData.use || 'unknown' };\n                    dataToHash = new TextEncoder().encode(JSON.stringify(safeObj));\n                } else {\n                    // Fallback for other types\n                    dataToHash = new TextEncoder().encode(String(sensitiveData));\n                }\n                \n                // Create SHA-256 hash\n                const hashBuffer = await crypto.subtle.digest('SHA-256', dataToHash);\n                const hashArray = new Uint8Array(hashBuffer);\n                \n                // Return only first 4 bytes as hex (8 characters)\n                return Array.from(hashArray.slice(0, 4))\n                    .map(b => b.toString(16).padStart(2, '0'))\n                    .join('');\n                    \n            } catch (error) {\n                // Never log the actual error details to avoid leaking sensitive data\n                return 'hash_error';\n            }\n        }\n\n        /**\n         * Async sleep helper - replaces busy-wait\n         */\n        async _asyncSleep(ms) {\n            return new Promise(resolve => setTimeout(resolve, ms));\n        }\n\n        /**\n         * Async cleanup helper - replaces immediate heavy operations\n         */\n        async _scheduleAsyncCleanup(cleanupFn, delay = 0) {\n            return new Promise((resolve) => {\n                setTimeout(async () => {\n                    try {\n                        await cleanupFn();\n                        resolve(true);\n                    } catch (error) {\n                        this._secureLog('error', 'Async cleanup failed', {\n                            errorType: error?.constructor?.name || 'Unknown'\n                        });\n                        resolve(false);\n                    }\n                }, delay);\n            });\n        }\n\n        /**\n         * Batch async operations to prevent UI blocking\n         */\n        async _batchAsyncOperation(items, batchSize = 10, delayBetweenBatches = 5) {\n            const results = [];\n            \n            for (let i = 0; i < items.length; i += batchSize) {\n                const batch = items.slice(i, i + batchSize);\n                const batchResults = await Promise.all(batch);\n                results.push(...batchResults);\n                \n                // Small delay between batches to prevent UI blocking\n                if (i + batchSize < items.length) {\n                    await this._asyncSleep(delayBetweenBatches);\n                }\n            }\n            \n            return results;\n        }\n\n        /**\n         * Memory cleanup without window.gc() - uses natural garbage collection\n         */\n        async _performNaturalCleanup() {\n            // Clear references and let JS engine handle GC naturally\n            // This is more reliable than forcing GC\n            \n            // Schedule cleanup in next event loop cycle\n            await this._asyncSleep(0);\n            \n            // Allow multiple event loop cycles for natural GC\n            for (let i = 0; i < 3; i++) {\n                await this._asyncSleep(10);\n            }\n        }\n\n        /**\n         * Heavy cleanup operations using WebWorker (if available)\n         */\n        async _performHeavyCleanup(cleanupData) {\n            // Try to use WebWorker for heavy operations\n            if (typeof Worker !== 'undefined') {\n                try {\n                    return await this._cleanupWithWorker(cleanupData);\n                } catch (error) {\n                    this._secureLog('warn', 'WebWorker cleanup failed, falling back to main thread', {\n                        errorType: error?.constructor?.name || 'Unknown'\n                    });\n                }\n            }\n            \n            // Fallback to main thread with async batching\n            return await this._cleanupInMainThread(cleanupData);\n        }\n\n        /**\n         * Cleanup using WebWorker\n         */\n        async _cleanupWithWorker(cleanupData) {\n            return new Promise((resolve, reject) => {\n                // Create inline worker for cleanup operations\n                const workerCode = `\n                    self.onmessage = function(e) {\n                        const { type, data } = e.data;\n                        \n                        try {\n                            switch (type) {\n                                case 'cleanup_arrays':\n                                    // Simulate heavy array cleanup\n                                    let processed = 0;\n                                    for (let i = 0; i < data.count; i++) {\n                                        // Simulate work\n                                        processed++;\n                                        if (processed % 1000 === 0) {\n                                            // Yield control periodically\n                                            setTimeout(() => {}, 0);\n                                        }\n                                    }\n                                    self.postMessage({ success: true, processed });\n                                    break;\n                                    \n                                case 'cleanup_objects':\n                                    // Simulate object cleanup\n                                    const cleaned = data.objects.map(() => null);\n                                    self.postMessage({ success: true, cleaned: cleaned.length });\n                                    break;\n                                    \n                                default:\n                                    self.postMessage({ success: true, message: 'Unknown cleanup type' });\n                            }\n                        } catch (error) {\n                            self.postMessage({ success: false, error: error.message });\n                        }\n                    };\n                `;\n                \n                const blob = new Blob([workerCode], { type: 'application/javascript' });\n                const worker = new Worker(URL.createObjectURL(blob));\n                \n                const timeout = setTimeout(() => {\n                    worker.terminate();\n                    reject(new Error('Worker cleanup timeout'));\n                }, 5000); // 5 second timeout\n                \n                worker.onmessage = (e) => {\n                    clearTimeout(timeout);\n                    worker.terminate();\n                    URL.revokeObjectURL(blob);\n                    \n                    if (e.data.success) {\n                        resolve(e.data);\n                    } else {\n                        reject(new Error(e.data.error));\n                    }\n                };\n                \n                worker.onerror = (error) => {\n                    clearTimeout(timeout);\n                    worker.terminate();\n                    URL.revokeObjectURL(blob);\n                    reject(error);\n                };\n                \n                worker.postMessage(cleanupData);\n            });\n        }\n\n        /**\n         * Cleanup in main thread with async batching\n         */\n        async _cleanupInMainThread(cleanupData) {\n            const { type, data } = cleanupData;\n            \n            switch (type) {\n                case 'cleanup_arrays':\n                    // Process in batches to avoid blocking\n                    let processed = 0;\n                    const batchSize = 100;\n                    \n                    while (processed < data.count) {\n                        const batchEnd = Math.min(processed + batchSize, data.count);\n                        \n                        // Process batch\n                        for (let i = processed; i < batchEnd; i++) {\n                            // Simulate cleanup work\n                        }\n                        \n                        processed = batchEnd;\n                        \n                        // Yield control to prevent UI blocking\n                        await this._asyncSleep(1);\n                    }\n                    \n                    return { success: true, processed };\n                    \n                case 'cleanup_objects':\n                    // Clean objects in batches\n                    const objects = data.objects || [];\n                    const batches = [];\n                    \n                    for (let i = 0; i < objects.length; i += 50) {\n                        batches.push(objects.slice(i, i + 50));\n                    }\n                    \n                    let cleaned = 0;\n                    for (const batch of batches) {\n                        batch.forEach(() => cleaned++);\n                        await this._asyncSleep(1);\n                    }\n                    \n                    return { success: true, cleaned };\n                    \n                default:\n                    return { success: true, message: 'Unknown cleanup type' };\n            }\n        }\n        \n    /**\n     *   Enhanced mutex system initialization with atomic protection\n     */\n    _initializeMutexSystem() {\n        //   Initialize standard mutexes with enhanced state tracking\n        this._keyOperationMutex = {\n            locked: false,\n            queue: [],\n            lockId: null,\n            lockTimeout: null,\n            lockTime: null,\n            operationCount: 0\n        };\n\n        this._cryptoOperationMutex = {\n            locked: false,\n            queue: [],\n            lockId: null,\n            lockTimeout: null,\n            lockTime: null,\n            operationCount: 0\n        };\n\n        this._connectionOperationMutex = {\n            locked: false,\n            queue: [],\n            lockId: null,\n            lockTimeout: null,\n            lockTime: null,\n            operationCount: 0\n        };\n\n        //   Enhanced key system state with atomic operation tracking\n        this._keySystemState = {\n            isInitializing: false,\n            isRotating: false,\n            isDestroying: false,\n            lastOperation: null,\n            lastOperationTime: Date.now(),\n            operationId: null,\n            concurrentOperations: 0,\n            maxConcurrentOperations: 1\n        };\n\n        //   Operation counters with atomic increments\n        this._operationCounters = {\n            keyOperations: 0,\n            cryptoOperations: 0,\n            connectionOperations: 0,\n            totalOperations: 0,\n            failedOperations: 0\n        };\n\n        this._secureLog('info', '\uD83D\uDD12 Enhanced mutex system initialized with atomic protection', {\n            mutexes: ['keyOperation', 'cryptoOperation', 'connectionOperation'],\n            timestamp: Date.now(),\n            features: ['atomic_operations', 'race_condition_protection', 'enhanced_state_tracking']\n        });\n    }\n\n    /**\n     *   XSS Hardening - Debug mode references validation\n     * This method is called during initialization to ensure XSS hardening\n     */\n    _hardenDebugModeReferences() {\n        //   Log that we're hardening debug mode references\n        this._secureLog('info', '\uD83D\uDD12 XSS Hardening: Debug mode references already replaced');\n    }\n\n    /**\n     *   Unified scheduler for all maintenance tasks\n     * Replaces multiple setInterval calls with a single, controlled scheduler\n     */\n    _initializeUnifiedScheduler() {\n        //   Single scheduler interval for all maintenance tasks\n        this._maintenanceScheduler = setInterval(() => {\n            this._executeMaintenanceCycle();\n        }, 300000); // Every 5 minutes\n        \n        //   Log scheduler initialization\n        this._secureLog('info', '\uD83D\uDD27 Unified maintenance scheduler initialized (5-minute cycle)');\n        \n        //   Store scheduler reference for cleanup\n        this._activeTimers = new Set([this._maintenanceScheduler]);\n    }\n\n    _trackActiveTimer(timer) {\n        if (!timer) return timer;\n        if (!this._activeTimers) this._activeTimers = new Set();\n        this._activeTimers.add(timer);\n        return timer;\n    }\n\n    _untrackActiveTimer(timer) {\n        if (timer && this._activeTimers) this._activeTimers.delete(timer);\n    }\n\n    _setSASMaterialReady(localFingerprint, remoteFingerprint) {\n        this._sasLocalFingerprint = localFingerprint;\n        this._sasRemoteFingerprint = remoteFingerprint;\n    }\n\n    _isVerificationReady() {\n        const hasDescriptions = !!(\n            this.peerConnection?.localDescription &&\n            this.peerConnection?.remoteDescription\n        );\n        const hasOpenDataChannel = this.dataChannel?.readyState === 'open';\n        const hasVerificationCode = typeof this.verificationCode === 'string' &&\n            this.verificationCode.trim().length > 0;\n        const hasFingerprintMaterial = typeof this._sasLocalFingerprint === 'string' &&\n            this._sasLocalFingerprint.trim().length > 0 &&\n            typeof this._sasRemoteFingerprint === 'string' &&\n            this._sasRemoteFingerprint.trim().length > 0;\n\n        return hasDescriptions && hasOpenDataChannel && hasVerificationCode && hasFingerprintMaterial;\n    }\n\n    _notifyVerificationReadyIfPossible() {\n        if (!this._isVerificationReady()) {\n            return false;\n        }\n\n        if (!this._verificationUiOpened) {\n            this._verificationUiOpened = true;\n            this.onStatusChange?.('verifying');\n            this.onVerificationRequired?.(this.verificationCode);\n        }\n\n        return true;\n    }\n\n    _countIceCandidatesInSDP(sdp) {\n        if (typeof sdp !== 'string') return 0;\n        return (sdp.match(/^a=candidate:/gm) || []).length;\n    }\n\n    _summarizeIceCandidatesInSDP(sdp) {\n        const summary = {\n            total: 0,\n            host: 0,\n            srflx: 0,\n            relay: 0,\n            prflx: 0,\n            unknown: 0\n        };\n\n        if (typeof sdp !== 'string') return summary;\n\n        for (const line of sdp.match(/^a=candidate:.*$/gm) || []) {\n            summary.total += 1;\n            const match = line.match(/\\btyp\\s+(host|srflx|relay|prflx)\\b/i);\n            const type = match?.[1]?.toLowerCase();\n\n            if (type && Object.prototype.hasOwnProperty.call(summary, type)) {\n                summary[type] += 1;\n            } else {\n                summary.unknown += 1;\n            }\n        }\n\n        return summary;\n    }\n\n    _describeIceCandidatesInSDP(sdp) {\n        if (typeof sdp !== 'string') return [];\n\n        return (sdp.match(/^a=candidate:.*$/gm) || []).map((line) => {\n            const parts = line.slice('a=candidate:'.length).trim().split(/\\s+/);\n            const typIndex = parts.findIndex(part => part.toLowerCase() === 'typ');\n            const address = parts[4] || '';\n            const port = parts[5] || '';\n            const candidateType = typIndex >= 0 ? parts[typIndex + 1] || 'unknown' : 'unknown';\n            const protocol = (parts[2] || 'unknown').toLowerCase();\n\n            let addressKind = 'unknown';\n            if (/\\.local$/i.test(address)) {\n                addressKind = 'mdns';\n            } else if (/^(10\\.|192\\.168\\.|172\\.(1[6-9]|2\\d|3[0-1])\\.)/.test(address)) {\n                addressKind = 'private-ipv4';\n            } else if (/^\\d{1,3}(\\.\\d{1,3}){3}$/.test(address)) {\n                addressKind = 'public-ipv4';\n            } else if (address.includes(':')) {\n                addressKind = 'ipv6';\n            }\n\n            return {\n                candidateType,\n                protocol,\n                addressKind,\n                portPresent: !!port,\n                tcpType: (() => {\n                    const tcpIndex = parts.findIndex(part => part.toLowerCase() === 'tcptype');\n                    return tcpIndex >= 0 ? parts[tcpIndex + 1] || null : null;\n                })()\n            };\n        });\n    }\n\n    _logIceCandidateDiagnostics(label, sdp, extra = {}) {\n        const candidateSummary = this._summarizeIceCandidatesInSDP(sdp);\n        const candidateDetails = this._describeIceCandidatesInSDP(sdp);\n        console.info(`[SecureBit ICE] ${label}`, {\n            candidateSummary,\n            candidateDetails,\n            candidateDetailsJson: JSON.stringify(candidateDetails),\n            ...extra\n        });\n        return { candidateSummary, candidateDetails };\n    }\n\n    _hasOnlyMdnsHostCandidates(sdp) {\n        const summary = this._summarizeIceCandidatesInSDP(sdp);\n        const details = this._describeIceCandidatesInSDP(sdp);\n\n        return summary.total > 0 &&\n            summary.srflx === 0 &&\n            summary.relay === 0 &&\n            summary.prflx === 0 &&\n            details.every(candidate =>\n                candidate.candidateType === 'host' &&\n                candidate.addressKind === 'mdns'\n            );\n    }\n\n    _warnIfRemoteCandidatesNeedRelay(context, sdp) {\n        if (!this._hasOnlyMdnsHostCandidates(sdp)) return false;\n\n        const message = context === 'answer'\n            ? 'Connection warning: the response contains only browser-masked mDNS host candidates and no server-reflexive or TURN relay candidates. This network/browser combination may not connect until TURN is configured.'\n            : 'Connection warning: the invitation contains only browser-masked mDNS host candidates and no server-reflexive or TURN relay candidates. This network/browser combination may not connect until TURN is configured.';\n\n        this._secureLog('warn', 'Remote ICE candidates require TURN or usable non-mDNS candidates', {\n            context,\n            candidateSummary: this._summarizeIceCandidatesInSDP(sdp),\n            candidateDetails: this._describeIceCandidatesInSDP(sdp)\n        });\n        this.deliverMessageToUI(message, 'system');\n        return true;\n    }\n\n    async _collectIceFailureDiagnostics() {\n        if (!this.peerConnection?.getStats) return null;\n\n        try {\n            const stats = await this.peerConnection.getStats();\n            const candidates = new Map();\n            const candidatePairs = [];\n\n            stats.forEach((report) => {\n                if (report.type === 'local-candidate' || report.type === 'remote-candidate') {\n                    candidates.set(report.id, {\n                        type: report.type,\n                        candidateType: report.candidateType,\n                        protocol: report.protocol,\n                        address: report.address || report.ip || null,\n                        port: report.port || null,\n                        networkType: report.networkType || null\n                    });\n                }\n            });\n\n            stats.forEach((report) => {\n                if (report.type !== 'candidate-pair') return;\n                candidatePairs.push({\n                    state: report.state,\n                    nominated: !!report.nominated,\n                    writable: !!report.writable,\n                    bytesSent: report.bytesSent || 0,\n                    bytesReceived: report.bytesReceived || 0,\n                    currentRoundTripTime: report.currentRoundTripTime ?? null,\n                    local: candidates.get(report.localCandidateId) || null,\n                    remote: candidates.get(report.remoteCandidateId) || null\n                });\n            });\n\n            return {\n                pairCount: candidatePairs.length,\n                states: candidatePairs.reduce((acc, pair) => {\n                    acc[pair.state || 'unknown'] = (acc[pair.state || 'unknown'] || 0) + 1;\n                    return acc;\n                }, {}),\n                pairs: candidatePairs\n            };\n        } catch (error) {\n            return {\n                error: error?.message || 'Failed to collect ICE diagnostics'\n            };\n        }\n    }\n\n    _storePendingOfferContext() {\n        this._pendingOfferContext = {\n            sessionSalt: Array.isArray(this.sessionSalt) ? [...this.sessionSalt] : null,\n            sessionId: this.sessionId || null,\n            connectionId: this.connectionId || null,\n            keyFingerprint: this.keyFingerprint || null,\n            createdAt: Date.now()\n        };\n    }\n\n    _restorePendingOfferContextIfNeeded() {\n        const saltIsValid = Array.isArray(this.sessionSalt) && this.sessionSalt.length === 64;\n        if (saltIsValid) return true;\n\n        const pendingSalt = this._pendingOfferContext?.sessionSalt;\n        if (!Array.isArray(pendingSalt) || pendingSalt.length !== 64) {\n            return false;\n        }\n\n        this.sessionSalt = [...pendingSalt];\n        if (!this.sessionId && this._pendingOfferContext.sessionId) {\n            this.sessionId = this._pendingOfferContext.sessionId;\n        }\n        if (!this.connectionId && this._pendingOfferContext.connectionId) {\n            this.connectionId = this._pendingOfferContext.connectionId;\n        }\n        if (!this.keyFingerprint && this._pendingOfferContext.keyFingerprint) {\n            this.keyFingerprint = this._pendingOfferContext.keyFingerprint;\n        }\n\n        this._secureLog('warn', 'Restored pending offer context before applying answer', {\n            pendingContextAgeMs: Date.now() - (this._pendingOfferContext.createdAt || Date.now())\n        });\n\n        return true;\n    }\n\n    _clearPendingOfferContext() {\n        if (this._pendingOfferContext?.sessionSalt) {\n            this._secureWipeMemory(this._pendingOfferContext.sessionSalt, 'pendingOfferContext.sessionSalt');\n        }\n        this._pendingOfferContext = null;\n    }\n\n    /**\n     *   Execute all maintenance tasks in a single cycle\n     */\n    _executeMaintenanceCycle() {\n        try {\n            this._secureLog('info', '\uD83D\uDD27 Starting maintenance cycle');\n            \n            // 1. Log cleanup and security audit\n            this._cleanupLogs();\n            this._auditLoggingSystemSecurity();\n            \n            // 2. Security monitoring\n            this._verifyAPIIntegrity();\n            this._validateCryptographicSecurity();\n            this._syncSecurityFeaturesWithTariff();\n            \n            // 3. Resource cleanup\n            this._cleanupResources();\n            this._enforceResourceLimits();\n            \n            // 4. Key monitoring (if connected)\n            if (this.isConnected && this.isVerified) {\n                this._monitorKeySecurity();\n            }\n            \n            // 5. Global exposure monitoring (debug mode only)\n            if (this._debugMode) {\n                this._monitorGlobalExposure();\n            }\n            \n            // 6. Heartbeat now runs on its own HEARTBEAT_INTERVAL timer\n            //    (startHeartbeat) \u2014 this 5-minute cycle is far too coarse for\n            //    liveness detection and must not double-send.\n\n            this._secureLog('info', '\uD83D\uDD27 Maintenance cycle completed successfully');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Maintenance cycle failed', {\n                errorType: error?.constructor?.name || 'Unknown',\n                message: error?.message || 'Unknown error'\n            });\n            \n            //   Emergency cleanup on failure\n            this._emergencyCleanup().catch(error => {\n                this._secureLog('error', 'Emergency cleanup failed', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n        }\n    }\n\n    /**\n     *   Enforce hard resource limits with emergency cleanup\n     */\n    _enforceResourceLimits() {\n        const violations = [];\n        \n        // Check log entries\n        if (this._logCounts.size > this._resourceLimits.maxLogEntries) {\n            violations.push('log_entries');\n        }\n        \n        // Check message queue\n        if (this.messageQueue.length > this._resourceLimits.maxMessageQueue) {\n            violations.push('message_queue');\n        }\n        \n        // Check IV history\n        if (this._ivTrackingSystem && this._ivTrackingSystem.ivHistory.size > this._resourceLimits.maxIVHistory) {\n            violations.push('iv_history');\n        }\n        \n        // Check processed message IDs\n        if (this.processedMessageIds.size > this._resourceLimits.maxProcessedMessageIds) {\n            violations.push('processed_message_ids');\n        }\n        \n        // Check decoy channels\n        if (this.decoyChannels.size > this._resourceLimits.maxDecoyChannels) {\n            violations.push('decoy_channels');\n        }\n        \n        // Check fake traffic messages\n        if (this._fakeTrafficMessages && this._fakeTrafficMessages.length > this._resourceLimits.maxFakeTrafficMessages) {\n            violations.push('fake_traffic_messages');\n        }\n        \n        // Check chunk queue\n        if (this.chunkQueue.length > this._resourceLimits.maxChunkQueue) {\n            violations.push('chunk_queue');\n        }\n        \n        // Check packet buffer\n        if (this.packetBuffer && this.packetBuffer.size > this._resourceLimits.maxPacketBuffer) {\n            violations.push('packet_buffer');\n        }\n        \n        // If violations detected, trigger emergency cleanup\n        if (violations.length > 0) {\n            this._secureLog('warn', '\u26A0\uFE0F Resource limit violations detected', { violations });\n            this._emergencyCleanup().catch(error => {\n                this._secureLog('error', 'Emergency cleanup failed', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n        }\n    }\n\n    /**\n     *   Emergency cleanup when resource limits are exceeded\n     */\n    async _emergencyCleanup() {\n        this._secureLog('warn', '\uD83D\uDEA8 EMERGENCY: Resource limits exceeded, performing emergency cleanup');\n        \n        try {\n            // 1. Clear all logs immediately\n            this._logCounts.clear();\n            this._secureLog('info', '\uD83E\uDDF9 Emergency: All logs cleared');\n            \n            // 2. Clear message queue\n            this.messageQueue.length = 0;\n            this._secureLog('info', '\uD83E\uDDF9 Emergency: Message queue cleared');\n            \n            // 3. Enhanced IV history cleanup\n            if (this._ivTrackingSystem) {\n                this._ivTrackingSystem.usedIVs.clear();\n                this._ivTrackingSystem.ivHistory.clear();\n                this._ivTrackingSystem.sessionIVs.clear();\n                this._ivTrackingSystem.collisionCount = 0;\n                this._ivTrackingSystem.emergencyMode = false;\n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: IV tracking system cleared');\n            }\n            \n            // 4. Clear processed message IDs\n            this.processedMessageIds.clear();\n            this._secureLog('info', '\uD83E\uDDF9 Emergency: Processed message IDs cleared');\n            \n            // 5. Enhanced decoy channels cleanup\n            if (this.decoyChannels) {\n                for (const [channelName, timer] of this.decoyTimers) {\n                    if (timer) clearTimeout(timer);\n                }\n                this.decoyChannels.clear();\n                this.decoyTimers.clear();\n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: Decoy channels cleared');\n            }\n            \n            // 6. Enhanced fake traffic cleanup\n            if (this.fakeTrafficTimer) {\n                clearTimeout(this.fakeTrafficTimer);\n                this.fakeTrafficTimer = null;\n            }\n            if (this._fakeTrafficMessages) {\n                this._fakeTrafficMessages.length = 0;\n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: Fake traffic messages cleared');\n            }\n            \n            // 7. Clear chunk queue\n            this.chunkQueue.length = 0;\n            this._secureLog('info', '\uD83E\uDDF9 Emergency: Chunk queue cleared');\n            \n            // 8. Clear packet buffer\n            if (this.packetBuffer) {\n                this.packetBuffer.clear();\n                this._secureLog('info', '\uD83E\uDDF9 Emergency: Packet buffer cleared');\n            }\n            \n            // 9. Enhanced memory cleanup with quantum-resistant patterns\n            this._secureMemoryManager.isCleaning = true;\n            this._secureMemoryManager.cleanupQueue.length = 0;\n            this._secureMemoryManager.memoryStats.lastCleanup = Date.now();\n            \n            //   Perform natural cleanup without forcing GC\n            await this._scheduleAsyncCleanup(async () => {\n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: Starting natural memory cleanup');\n                \n                // Natural cleanup cycles with async delays\n                for (let i = 0; i < 3; i++) {\n                    this._secureLog('info', `\uD83E\uDDF9 Enhanced Emergency: Cleanup cycle ${i + 1}/3`);\n                    \n                    // Allow natural garbage collection between cycles\n                    await this._performNaturalCleanup();\n                }\n                \n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: Natural cleanup completed');\n            }, 0);\n            \n            this._secureMemoryManager.isCleaning = false;\n            \n            this._secureLog('info', '\u2705 Enhanced emergency cleanup completed successfully');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Enhanced emergency cleanup failed', {\n                errorType: error?.constructor?.name || 'Unknown',\n                message: error?.message || 'Unknown error'\n            });\n            \n            //   Rollback mechanism (simplified)\n            this._secureMemoryManager.isCleaning = false;\n        }\n    }\n\n    /**\n     *   Validate emergency cleanup success\n     * @param {Object} originalState - Original state before cleanup\n     * @returns {Object} Validation results\n     */\n    _validateEmergencyCleanup(originalState) {\n        const currentState = {\n            messageQueueSize: this.messageQueue.length,\n            processedIdsSize: this.processedMessageIds.size,\n            packetBufferSize: this.packetBuffer ? this.packetBuffer.size : 0,\n            ivTrackingSize: this._ivTrackingSystem ? this._ivTrackingSystem.usedIVs.size : 0,\n            decoyChannelsSize: this.decoyChannels ? this.decoyChannels.size : 0\n        };\n        \n        const validation = {\n            messageQueueCleared: currentState.messageQueueSize === 0,\n            processedIdsCleared: currentState.processedIdsSize === 0,\n            packetBufferCleared: currentState.packetBufferSize === 0,\n            ivTrackingCleared: currentState.ivTrackingSize === 0,\n            decoyChannelsCleared: currentState.decoyChannelsSize === 0,\n            allCleared: (\n                currentState.messageQueueSize === 0 &&\n                currentState.processedIdsSize === 0 &&\n                currentState.packetBufferSize === 0 &&\n                currentState.ivTrackingSize === 0 &&\n                currentState.decoyChannelsSize === 0\n            )\n        };\n        \n        return validation;\n    }\n\n    /**\n     *   Cleanup resources based on age and usage\n     */\n    _cleanupResources() {\n        const now = Date.now();\n        \n        // Clean old processed message IDs (keep only last hour)\n        if (this.processedMessageIds.size > this._emergencyThresholds.processedMessageIds) {\n            this.processedMessageIds.clear();\n            this._secureLog('info', '\uD83E\uDDF9 Old processed message IDs cleared');\n        }\n        \n        // Clean old IVs\n        if (this._ivTrackingSystem) {\n            this._cleanupOldIVs();\n        }\n        \n        // Clean old keys\n        this.cleanupOldKeys();\n        \n        // Clean rate limiter\n        if (window.EnhancedSecureCryptoUtils && window.EnhancedSecureCryptoUtils.rateLimiter) {\n            window.EnhancedSecureCryptoUtils.rateLimiter.cleanup();\n        }\n        \n        this._secureLog('info', '\uD83E\uDDF9 Resource cleanup completed');\n    }\n\n    /**\n     *   Monitor key security (replaces _startKeySecurityMonitoring)\n     */\n    _monitorKeySecurity() {\n        if (this._keyStorageStats.activeKeys > 10) {\n            this._secureLog('warn', '\u26A0\uFE0F High number of active keys detected. Consider rotation.');\n        }\n        \n    }\n\n    /**\n     *   Send heartbeat message (called by unified scheduler)\n     */\n    /**\n     * @param {boolean} ack - true when replying to a peer's probe. An ack is never\n     *   itself acked, otherwise the two sides would ping-pong forever.\n     */\n    _sendHeartbeat(ack = false) {\n        try {\n            // Gated on the CHANNEL only, deliberately not on isConnected(), which\n            // also requires isVerified. The two peers finish SAS verification at\n            // different moments \u2014 a human has to read and confirm a code \u2014 so for\n            // that whole window one side is verified and probing while the other\n            // cannot answer. Silence then reads as a dead path on a perfectly\n            // healthy, freshly established session, and the restarts that follow\n            // tear it down for real. A heartbeat carries nothing: it travels as\n            // plaintext on a channel its observer is already on, and liveness is\n            // not a security property \u2014 the verification gate still guards every\n            // operation that matters.\n            if (this.dataChannel && this.dataChannel.readyState === 'open') {\n                this.dataChannel.send(JSON.stringify({\n                    type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.HEARTBEAT,\n                    ack,\n                    timestamp: Date.now()\n                }));\n\n                this._heartbeatConfig.lastHeartbeat = Date.now();\n                this._secureLog('debug', ack ? '\uD83D\uDC93 Heartbeat ack sent' : '\uD83D\uDC93 Heartbeat sent');\n                return true;\n            }\n            return false;\n        } catch (error) {\n            this._secureLog('error', '\u274C Heartbeat failed:', {\n                errorType: error?.constructor?.name || 'Unknown',\n                message: error?.message || 'Unknown error'\n            });\n            return false;\n        }\n    }\n\n    /**\n     *   Comprehensive input validation to prevent DoS and injection attacks\n     * @param {any} data - Data to validate\n     * @param {string} context - Context for validation (e.g., 'sendMessage', 'sendSecureMessage')\n     * @returns {Object} Validation result with isValid and sanitizedData\n     */\n    _validateInputData(data, context = 'unknown') {\n        const validationResult = {\n            isValid: false,\n            sanitizedData: null,\n            errors: [],\n            warnings: []\n        };\n\n        try {\n            // 1. Basic type validation\n            if (data === null || data === undefined) {\n                validationResult.errors.push('Data cannot be null or undefined');\n                return validationResult;\n            }\n\n            // 2. Size validation for strings\n            if (typeof data === 'string') {\n                if (data.length > this._inputValidationLimits.maxStringLength) {\n                    validationResult.errors.push(`String too long: ${data.length} > ${this._inputValidationLimits.maxStringLength}`);\n                    return validationResult;\n                }\n\n                // 3. No keyword/markup blocklist here.\n                // This validates OUTGOING free-text chat content. A word-level\n                // blocklist (e.g. \"constructor\", \"global\", \"document.\", \"javascript:\")\n                // silently rejected legitimate messages while providing no real\n                // protection: the rendering boundary is the receive-side DOMPurify\n                // pass in deliverMessageToUI(), and outgoing text is additionally run\n                // through EnhancedSecureCryptoUtils.sanitizeMessage() before encryption.\n                // Markup a user types is neutralised there, not by guessing keywords.\n\n                // 4. Sanitize string data\n\n                validationResult.sanitizedData = this._sanitizeInputString(data);\n                validationResult.isValid = true;\n                return validationResult;\n            }\n\n            // 5. Object validation\n            if (typeof data === 'object') {\n                // Check for circular references\n                const seen = new WeakSet();\n                const checkCircular = (obj, path = '') => {\n                    if (obj === null || typeof obj !== 'object') return;\n                    \n                    if (seen.has(obj)) {\n                        validationResult.errors.push(`Circular reference detected at path: ${path}`);\n                        return;\n                    }\n                    \n                    seen.add(obj);\n                    \n                    // Check object depth\n                    if (path.split('.').length > this._inputValidationLimits.maxObjectDepth) {\n                        validationResult.errors.push(`Object too deep: ${path.split('.').length} > ${this._inputValidationLimits.maxObjectDepth}`);\n                        return;\n                    }\n\n                    // Check array length\n                    if (Array.isArray(obj) && obj.length > this._inputValidationLimits.maxArrayLength) {\n                        validationResult.errors.push(`Array too long: ${obj.length} > ${this._inputValidationLimits.maxArrayLength}`);\n                        return;\n                    }\n\n                    // Recursively check all properties\n                    for (const key in obj) {\n                        if (obj.hasOwnProperty(key)) {\n                            checkCircular(obj[key], path ? `${path}.${key}` : key);\n                        }\n                    }\n                };\n\n                checkCircular(data);\n                \n                if (validationResult.errors.length > 0) {\n                    return validationResult;\n                }\n\n                // 6. Check total object size\n                const objectSize = this._calculateObjectSize(data);\n                if (objectSize > this._inputValidationLimits.maxMessageSize) {\n                    validationResult.errors.push(`Object too large: ${objectSize} bytes > ${this._inputValidationLimits.maxMessageSize} bytes`);\n                    return validationResult;\n                }\n\n                // 7. Sanitize object data\n                validationResult.sanitizedData = this._sanitizeInputObject(data);\n                validationResult.isValid = true;\n                return validationResult;\n            }\n\n            // 8. ArrayBuffer validation\n            if (data instanceof ArrayBuffer) {\n                if (data.byteLength > this._inputValidationLimits.maxMessageSize) {\n                    validationResult.errors.push(`ArrayBuffer too large: ${data.byteLength} bytes > ${this._inputValidationLimits.maxMessageSize} bytes`);\n                    return validationResult;\n                }\n                \n                validationResult.sanitizedData = data;\n                validationResult.isValid = true;\n                return validationResult;\n            }\n\n            // 9. Other types are not allowed\n            validationResult.errors.push(`Unsupported data type: ${typeof data}`);\n            return validationResult;\n\n        } catch (error) {\n            validationResult.errors.push(`Validation error: ${error.message}`);\n            this._secureLog('error', '\u274C Input validation failed', {\n                context: context,\n                errorType: error?.constructor?.name || 'Unknown',\n                message: error?.message || 'Unknown error'\n            });\n            return validationResult;\n        }\n    }\n\n    /**\n     *   Calculate approximate object size in bytes\n     * @param {any} obj - Object to calculate size for\n     * @returns {number} Size in bytes\n     */\n    _calculateObjectSize(obj) {\n        try {\n            const jsonString = JSON.stringify(obj);\n            return new TextEncoder().encode(jsonString).length;\n        } catch (error) {\n            // If JSON.stringify fails, estimate size\n            return 1024 * 1024; // Assume 1MB to be safe\n        }\n    }\n\n    /**\n     *   Sanitize string data for input validation\n     * @param {string} str - String to sanitize\n     * @returns {string} Sanitized string\n     */\n    _sanitizeInputString(str) {\n        if (typeof str !== 'string') return str;\n\n        // Remove null bytes and C0/C1 control characters, but preserve the\n        // whitespace users actually type: newline (\\n), carriage return (\\r)\n        // and tab (\\t). Collapsing all \\s+ here destroyed multi-line messages\n        // and code snippets (\"a\\nb\\nc\" -> \"a b c\"), corrupting chat content.\n        str = str.replace(/[\\u0000-\\u0008\\u000B\\u000C\\u000E-\\u001F\\u007F-\\u009F]/g, '');\n\n        // Normalise line endings only. Internal spaces/tabs are preserved so\n        // code indentation, pasted keys and aligned text survive intact; the\n        // maxStringLength limit (and the receive-side 2000-char cap) bound abuse.\n        str = str.replace(/\\r\\n?/g, '\\n');\n\n        // Collapse 3+ consecutive blank lines down to two.\n        str = str.replace(/\\n{3,}/g, '\\n\\n');\n\n        // Trim leading/trailing whitespace only.\n        str = str.trim();\n\n        return str;\n    }\n\n    /**\n     *   Sanitize object data for input validation\n     * @param {any} obj - Object to sanitize\n     * @returns {any} Sanitized object\n     */\n    _sanitizeInputObject(obj) {\n        if (obj === null || typeof obj !== 'object') return obj;\n        \n        if (Array.isArray(obj)) {\n            return obj.map(item => this._sanitizeInputObject(item));\n        }\n        \n        const sanitized = {};\n        for (const key in obj) {\n            if (obj.hasOwnProperty(key)) {\n                const value = obj[key];\n                if (typeof value === 'string') {\n                    sanitized[key] = this._sanitizeInputString(value);\n                } else if (typeof value === 'object') {\n                    sanitized[key] = this._sanitizeInputObject(value);\n                } else {\n                    sanitized[key] = value;\n                }\n            }\n        }\n        \n        return sanitized;\n    }\n\n    /**\n     *   Rate limiting for message sending\n     * @param {string} context - Context for rate limiting\n     * @returns {boolean} true if rate limit allows\n     */\n    _checkRateLimit(context = 'message') {\n        const now = Date.now();\n        \n        // Initialize rate limiter if not exists\n        if (!this._rateLimiter) {\n            this._rateLimiter = {\n                messageCount: 0,\n                lastReset: now,\n                burstCount: 0,\n                lastBurstReset: now\n            };\n        }\n        \n        // Reset counters if needed\n        if (now - this._rateLimiter.lastReset > 60000) { // 1 minute\n            this._rateLimiter.messageCount = 0;\n            this._rateLimiter.lastReset = now;\n        }\n        \n        if (now - this._rateLimiter.lastBurstReset > 1000) { // 1 second\n            this._rateLimiter.burstCount = 0;\n            this._rateLimiter.lastBurstReset = now;\n        }\n        \n        // Check burst limit\n        if (this._rateLimiter.burstCount >= this._inputValidationLimits.rateLimitBurstSize) {\n            this._secureLog('warn', '\u26A0\uFE0F Rate limit burst exceeded', { context });\n            return false;\n        }\n        \n        // Check overall rate limit\n        if (this._rateLimiter.messageCount >= this._inputValidationLimits.rateLimitMessagesPerMinute) {\n            this._secureLog('warn', '\u26A0\uFE0F Rate limit exceeded', { context });\n            return false;\n        }\n        \n        // Increment counters\n        this._rateLimiter.messageCount++;\n        this._rateLimiter.burstCount++;\n        \n        return true;\n    }\n\n    /**\n     * Dedicated receiver-side limiter. Keep separate from outbound quotas so a\n     * noisy peer cannot consume local send capacity or force decrypt/render work.\n     */\n    _checkInboundRateLimit(context = 'incoming_message') {\n        const now = Date.now();\n\n        if (!this._inboundRateLimiter) {\n            this._inboundRateLimiter = {\n                messageCount: 0,\n                lastReset: now,\n                burstCount: 0,\n                lastBurstReset: now\n            };\n        }\n\n        if (now - this._inboundRateLimiter.lastReset > 60000) {\n            this._inboundRateLimiter.messageCount = 0;\n            this._inboundRateLimiter.lastReset = now;\n        }\n\n        if (now - this._inboundRateLimiter.lastBurstReset > 1000) {\n            this._inboundRateLimiter.burstCount = 0;\n            this._inboundRateLimiter.lastBurstReset = now;\n        }\n\n        if (this._inboundRateLimiter.burstCount >= this._inputValidationLimits.rateLimitBurstSize) {\n            this._secureLog('warn', '\u26A0\uFE0F Inbound message burst limit exceeded; dropping message', { context });\n            return false;\n        }\n\n        if (this._inboundRateLimiter.messageCount >= this._inputValidationLimits.rateLimitMessagesPerMinute) {\n            this._secureLog('warn', '\u26A0\uFE0F Inbound message rate limit exceeded; dropping message', { context });\n            return false;\n        }\n\n        this._inboundRateLimiter.messageCount++;\n        this._inboundRateLimiter.burstCount++;\n        return true;\n    }\n\n    // ============================================\n    // SECURE KEY STORAGE MANAGEMENT\n    // ============================================\n\n    /**\n     * Initializes the secure key storage\n     */\n    _initializeSecureKeyStorage() {\n        // Initialize master key manager\n        this._masterKeyManager = new SecureMasterKeyManager();\n        \n        // Initialize with the new class and pass master key manager\n        this._secureKeyStorage = new SecureKeyStorage(this._masterKeyManager);\n        \n        // Keep the stats structure for compatibility\n        this._keyStorageStats = {\n            totalKeys: 0,\n            activeKeys: 0,\n            lastAccess: null,\n            lastRotation: null,\n        };\n        \n        this._secureLog('info', '\uD83D\uDD10 Enhanced secure key storage initialized');\n    }\n    \n    /**\n     * Set password callback for master key\n     */\n    setMasterKeyPasswordCallback(callback) {\n        if (this._masterKeyManager) {\n            this._masterKeyManager.setPasswordRequiredCallback(callback);\n        }\n    }\n    \n    /**\n     * Set session expired callback for master key\n     */\n    setMasterKeySessionExpiredCallback(callback) {\n        if (this._masterKeyManager) {\n            this._masterKeyManager.setSessionExpiredCallback(callback);\n        }\n    }\n    \n    /**\n     * Lock master key manually\n     */\n    lockMasterKey() {\n        if (this._masterKeyManager) {\n            this._masterKeyManager.lock();\n        }\n    }\n    \n    /**\n     * Check if master key is unlocked\n     */\n    isMasterKeyUnlocked() {\n        return this._masterKeyManager ? this._masterKeyManager.isUnlocked() : false;\n    }\n    \n    /**\n     * Get master key session status\n     */\n    getMasterKeySessionStatus() {\n        return this._masterKeyManager ? this._masterKeyManager.getSessionStatus() : null;\n    }\n\n    // Helper: ensure file transfer system is ready (lazy init on receiver)\n    async _ensureFileTransferReady() {\n        try {\n            // If already initialized \u2014 done\n            if (this.fileTransferSystem) {\n                return true;\n            }\n            // Requires an open data channel and a verified connection\n            if (!this.dataChannel || this.dataChannel.readyState !== 'open') {\n                throw new Error('Data channel not open');\n            }\n            if (!this.isVerified) {\n                throw new Error('Connection not verified');\n            }\n            // Initialization\n            this.initializeFileTransfer();\n            \n            // \u041A\u0420\u0418\u0422\u0418\u0427\u0415\u0421\u041A\u041E\u0415 \u0418\u0421\u041F\u0420\u0410\u0412\u041B\u0415\u041D\u0418\u0415: \u0416\u0434\u0435\u043C \u0438\u043D\u0438\u0446\u0438\u0430\u043B\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u0442\u0430\u0439\u043C\u0430\u0443\u0442\u043E\u043C\n            let attempts = 0;\n            const maxAttempts = 50; // 5 \u0441\u0435\u043A\u0443\u043D\u0434 \u043C\u0430\u043A\u0441\u0438\u043C\u0443\u043C\n            while (!this.fileTransferSystem && attempts < maxAttempts) {\n                await new Promise(r => setTimeout(r, 100));\n                attempts++;\n            }\n            \n            if (!this.fileTransferSystem) {\n                throw new Error('File transfer system initialization timeout');\n            }\n            \n            return true;\n        } catch (e) {\n            this._secureLog('error', '\u274C _ensureFileTransferReady failed', { \n                errorType: e?.constructor?.name || 'Unknown',\n                hasMessage: !!e?.message \n            });\n            return false;\n        }\n    }\n\n    _getSecureKey(keyId) {\n        return this._secureKeyStorage.retrieveKey(keyId);\n    }\n\n    async _setSecureKey(keyId, key) {\n        if (!(key instanceof CryptoKey)) {\n            this._secureLog('error', '\u274C Attempt to store non-CryptoKey');\n            return false;\n        }\n        \n        const success = await this._secureKeyStorage.storeKey(keyId, key, {\n            version: this.currentKeyVersion,\n            type: key.algorithm.name\n        });\n        \n        if (success) {\n            this._secureLog('info', `\uD83D\uDD11 Key ${keyId} stored securely with encryption`);\n        }\n        \n        return success;\n    }\n\n    /**\n     * Validates a key value\n     * @param {CryptoKey} key - Key to validate\n     * @returns {boolean} true if the key is valid\n     */\n    _validateKeyValue(key) {\n        return key instanceof CryptoKey &&\n            key.algorithm &&\n            key.usages &&\n            key.usages.length > 0;\n    }\n\n    _secureWipeKeys() {\n        this._secureKeyStorage.secureWipeAll();\n        \n        // Also lock the master key\n        if (this._masterKeyManager) {\n            this._masterKeyManager.lock();\n        }\n        \n        this._secureLog('info', '\uD83E\uDDF9 All keys securely wiped and encrypted storage cleared');\n    }\n\n    /**\n     * Validates key storage state\n     * @returns {boolean} true if the storage is ready\n     */\n    _validateKeyStorage() {\n        return this._secureKeyStorage instanceof SecureKeyStorage;\n    }\n\n    /**\n     * Returns secure key storage statistics\n     * @returns {object} Storage metrics\n     */\n    _getKeyStorageStats() {\n        const stats = this._secureKeyStorage.getStorageStats();\n        return {\n            totalKeysCount: stats.totalKeys,\n            activeKeysCount: stats.totalKeys,\n            hasLastAccess: stats.metadata.some(m => m.lastAccessed),\n            hasLastRotation: !!this._keyStorageStats.lastRotation,\n            storageType: 'SecureKeyStorage',\n            timestamp: Date.now()\n        };\n    }\n\n    /**\n     * Performs key rotation in storage\n     */\n    _rotateKeys() {\n        const oldKeys = Array.from(this._secureKeyStorage.keys());\n        this._secureKeyStorage.clear();\n        this._keyStorageStats.lastRotation = Date.now();\n        this._keyStorageStats.activeKeys = 0;\n        this._secureLog('info', `\uD83D\uDD04 Key rotation completed. ${oldKeys.length} keys rotated`);\n    }\n\n    /**\n     * Emergency key wipe (e.g., upon detecting a threat)\n     */\n    _emergencyKeyWipe() {\n        this._secureWipeKeys();\n        this._secureLog('error', '\uD83D\uDEA8 EMERGENCY: All keys wiped due to security threat');\n    }\n\n    /**\n     * Starts key security monitoring\n     * @deprecated Use unified scheduler instead\n     */\n    _startKeySecurityMonitoring() {\n        //   Functionality moved to unified scheduler\n        this._secureLog('info', '\uD83D\uDD27 Key security monitoring moved to unified scheduler');\n    }\n\n\n    // ============================================\n    // HELPER METHODS\n    // ============================================\n    /**\n     *   Constant-time key validation to prevent timing attacks\n     * @param {CryptoKey} key - Key to validate\n     * @returns {boolean} true if key is valid\n     */\n    _validateKeyConstantTime(key) {\n        //   Constant-time validation to prevent timing attacks\n        let isValid = 0;\n        \n        // Check if key is CryptoKey instance (constant-time)\n        try {\n            const isCryptoKey = key instanceof CryptoKey;\n            isValid += isCryptoKey ? 1 : 0;\n        } catch {\n            isValid += 0;\n        }\n        \n        // Check algorithm (constant-time)\n        try {\n            const hasAlgorithm = !!(key && key.algorithm);\n            isValid += hasAlgorithm ? 1 : 0;\n        } catch {\n            isValid += 0;\n        }\n        \n        // Check type (constant-time)\n        try {\n            const hasType = !!(key && key.type);\n            isValid += hasType ? 1 : 0;\n        } catch {\n            isValid += 0;\n        }\n        \n        // Check extractable property (constant-time)\n        try {\n            const hasExtractable = key && key.extractable !== undefined;\n            isValid += hasExtractable ? 1 : 0;\n        } catch {\n            isValid += 0;\n        }\n        \n        // All checks must pass\n        return isValid === 4;\n    }\n\n    /**\n     *   Constant-time key pair validation\n     * @param {Object} keyPair - Key pair to validate\n     * @returns {boolean} true if key pair is valid\n     */\n    _validateKeyPairConstantTime(keyPair) {\n        if (!keyPair || typeof keyPair !== 'object') return false;\n        \n        const privateKeyValid = this._validateKeyConstantTime(keyPair.privateKey);\n        const publicKeyValid = this._validateKeyConstantTime(keyPair.publicKey);\n        \n        // Constant-time AND operation\n        return privateKeyValid && publicKeyValid;\n    }\n\n    /**\n     *   Enhanced secure logging system initialization\n     */\n    _initializeSecureLogging() {\n        // Logging levels\n        this._logLevels = {\n            error: 0,\n            warn: 1, \n            info: 2,\n            debug: 3,\n            trace: 4\n        };\n        \n        //   Ultra-strict levels for production\n        this._currentLogLevel = this._isProductionMode ? \n            this._logLevels.error : // In production, ONLY critical errors\n            this._logLevels.info;   // In development, up to info\n        \n        //   Reduced log limits to prevent data accumulation\n        this._logCounts = new Map();\n        this._maxLogCount = this._isProductionMode ? 5 : 50; // Reduced limits\n        \n        //   Hard resource limits to prevent memory leaks\n        this._resourceLimits = {\n            maxLogEntries: this._isProductionMode ? 100 : 1000,\n            maxMessageQueue: 1000,\n            maxIVHistory: 10000,\n            maxProcessedMessageIds: 5000,\n            maxDecoyChannels: 100,\n            maxFakeTrafficMessages: 500,\n            maxChunkQueue: 200,\n            maxPacketBuffer: 1000\n        };\n        \n        //   Emergency cleanup thresholds\n        this._emergencyThresholds = {\n            logEntries: this._resourceLimits.maxLogEntries * 0.8, // 80%\n            messageQueue: this._resourceLimits.maxMessageQueue * 0.8,\n            ivHistory: this._resourceLimits.maxIVHistory * 0.8,\n            processedMessageIds: this._resourceLimits.maxProcessedMessageIds * 0.8\n        };\n        \n        //   Input validation limits to prevent DoS attacks\n        this._inputValidationLimits = {\n            maxStringLength: 100000, // 100KB for strings\n            maxObjectDepth: 10, // Maximum object nesting depth\n            maxArrayLength: 1000, // Maximum array length\n            maxMessageSize: 1024 * 1024, // 1MB total message size\n            maxConcurrentMessages: 10, // Maximum concurrent message processing\n            rateLimitMessagesPerMinute: 60, // Rate limiting\n            rateLimitBurstSize: 10 // Burst size for rate limiting\n        };\n        \n        // NOTE: A word/markup blocklist for outgoing chat text was removed.\n        // It rejected legitimate messages (plain words like \"constructor\",\n        // \"global\", \"document.\", or the literal text \"javascript:\") without\n        // adding security. XSS is prevented at the rendering boundary by the\n        // receive-side DOMPurify pass (deliverMessageToUI) and by sanitizeMessage()\n        // on the send path before encryption \u2014 not by keyword guessing.\n\n        //   Comprehensive blacklist with all sensitive patterns\n        this._absoluteBlacklist = new Set([\n            // Cryptographic keys\n            'encryptionKey', 'macKey', 'metadataKey', 'privateKey', 'publicKey',\n            'ecdhKeyPair', 'ecdsaKeyPair', 'peerPublicKey', 'nestedEncryptionKey',\n            \n            // Authentication and session data\n            'verificationCode', 'sessionSalt', 'keyFingerprint', 'sessionId',\n            'authChallenge', 'authProof', 'authToken', 'sessionToken',\n            \n            // Credentials and secrets\n            'password', 'token', 'secret', 'credential', 'signature',\n            'apiKey', 'accessKey', 'secretKey', 'privateKey',\n            \n            // Cryptographic materials\n            'hash', 'digest', 'nonce', 'iv', 'cipher', 'seed',\n            'entropy', 'random', 'salt', 'fingerprint',\n            \n            // JWT and session data\n            'jwt', 'bearer', 'refreshToken', 'accessToken',\n            \n            // File transfer sensitive data\n            'fileHash', 'fileSignature', 'transferKey', 'chunkKey'\n        ]);\n\n        //   Minimal whitelist with strict validation\n        this._safeFieldsWhitelist = new Set([\n            // Basic status fields\n            'timestamp', 'type', 'status', 'state', 'level',\n            'isConnected', 'isVerified', 'isInitiator', 'version',\n            \n            // Counters and metrics (safe)\n            'count', 'total', 'active', 'inactive', 'success', 'failure',\n            \n            // Connection states (safe)\n            'readyState', 'connectionState', 'iceConnectionState',\n            \n            // Feature counts (safe)\n            'activeFeaturesCount', 'totalFeatures', 'stage',\n            \n            // Error types (safe)\n            'errorType', 'errorCode', 'phase', 'attempt'\n        ]);\n        \n        //   Initialize security monitoring\n        this._initializeLogSecurityMonitoring();\n        \n        this._secureLog('info', `\uD83D\uDD27 Enhanced secure logging initialized (Production: ${this._isProductionMode})`);\n    }\n\n    /**\n     *   Initialize security monitoring for logging system\n     */\n    _initializeLogSecurityMonitoring() {\n        //   Security monitoring moved to unified scheduler\n        this._logSecurityViolations = 0;\n        this._maxLogSecurityViolations = 3;\n    }\n\n    /**\n     *   Audit logging system security\n     */\n    _auditLoggingSystemSecurity() {\n        let violations = 0;\n        \n        // Check for excessive log counts (potential data leakage)\n        for (const [key, count] of this._logCounts.entries()) {\n            if (count > this._maxLogCount * 2) {\n                violations++;\n                this._originalConsole?.error?.(`\uD83D\uDEA8 LOG SECURITY: Excessive log count detected: ${key}`);\n            }\n        }\n        \n        // Check for blacklisted patterns in recent logs\n        const recentLogs = Array.from(this._logCounts.keys());\n        for (const logKey of recentLogs) {\n            if (this._containsSensitiveContent(logKey)) {\n                violations++;\n                this._originalConsole?.error?.(`\uD83D\uDEA8 LOG SECURITY: Sensitive content in log key: ${logKey}`);\n            }\n        }\n        \n        // Emergency shutdown if too many violations\n        this._logSecurityViolations += violations;\n        if (this._logSecurityViolations >= this._maxLogSecurityViolations) {\n            this._emergencyDisableLogging();\n            this._originalConsole?.error?.('\uD83D\uDEA8 CRITICAL: Logging system disabled due to security violations');\n        }\n    }\n\n    _secureLogShim(...args) {\n        try {\n            // Validate arguments array\n            if (!Array.isArray(args) || args.length === 0) {\n                return;\n            }\n            \n            //   Proper destructuring with fallback\n            const message = args[0];\n            const restArgs = args.slice(1);\n            \n            // Handle different argument patterns\n            if (restArgs.length === 0) {\n                this._secureLog('info', String(message || ''));\n                return;\n            }\n            \n            if (restArgs.length === 1) {\n                this._secureLog('info', String(message || ''), restArgs[0]);\n                return;\n            }\n            \n            //   Proper object structure for multiple args\n            this._secureLog('info', String(message || ''), { \n                additionalArgs: restArgs,\n                argCount: restArgs.length \n            });\n        } catch (error) {\n            //   Better error handling - fallback to original console if available\n            try {\n                if (this._originalConsole?.log) {\n                    this._originalConsole.log(...args);\n                }\n            } catch (fallbackError) {\n                // Silent failure to prevent execution disruption\n            }\n        }\n    }\n\n    /**\n     *   Setup own logger without touching global console\n     */\n    _setupOwnLogger() {\n        //   Create own logger without touching global console\n        this.logger = {\n            log: (message, data) => this._secureLog('info', message, data),\n            info: (message, data) => this._secureLog('info', message, data),\n            warn: (message, data) => this._secureLog('warn', message, data),\n            error: (message, data) => this._secureLog('error', message, data),\n            debug: (message, data) => this._secureLog('debug', message, data)\n        };\n        \n        //   In development, log to console; in production, use secure logging only\n        if (EnhancedSecureWebRTCManager.DEBUG_MODE) {\n            this._secureLog('info', '\uD83D\uDD12 Own logger created - development mode');\n        } else {\n            this._secureLog('info', '\uD83D\uDD12 Own logger created - production mode');\n        }\n    }\n    /**\n     *   Production logging - use own logger with minimal output\n     */\n    _setupProductionLogging() {\n        //   In production, own logger becomes minimal\n        if (this._isProductionMode) {\n            this.logger = {\n                log: () => {}, // No-op in production\n                info: () => {}, // No-op in production\n                warn: (message, data) => this._secureLog('warn', message, data),\n                error: (message, data) => this._secureLog('error', message, data),\n                debug: () => {} // No-op in production\n            };\n            \n            this._secureLog('info', 'Production logging mode activated');\n        }\n    }\n    /**\n     *   Secure logging with enhanced data protection\n     * @param {string} level - Log level (error, warn, info, debug, trace)\n     * @param {string} message - Message\n     * @param {object} data - Optional payload (will be sanitized)\n     */\n    _secureLog(level, message, data = null) {\n        //   Pre-sanitization audit to prevent data leakage\n        if (data && !this._auditLogMessage(message, data)) {\n            //   Log the attempt but block the actual data\n            this._originalConsole?.error?.('SECURITY: Logging blocked due to potential data leakage');\n            return;\n        }\n        \n        // Check log level\n        if (this._logLevels[level] > this._currentLogLevel) {\n            return;\n        }\n        \n        //   Prevent log spam with better key generation\n        const logKey = `${level}:${message.substring(0, 50)}`;\n        const currentCount = this._logCounts.get(logKey) || 0;\n        \n        if (currentCount >= this._maxLogCount) {\n            return;\n        }\n        \n        this._logCounts.set(logKey, currentCount + 1);\n        \n        //   Enhanced sanitization with multiple passes\n        let sanitizedData = null;\n        if (data) {\n            // First pass: basic sanitization\n            sanitizedData = this._sanitizeLogData(data);\n            \n            // Second pass: check if sanitized data still contains sensitive content\n            if (this._containsSensitiveContent(JSON.stringify(sanitizedData))) {\n                this._originalConsole?.error?.('ECURITY: Sanitized data still contains sensitive content - blocking log');\n                return;\n            }\n        }\n        \n        //   Production mode security - only log essential errors\n        if (this._isProductionMode) {\n            if (level === 'error') {\n                //   In production, only log error messages without sensitive data\n                const safeMessage = this._sanitizeString(message);\n                this._originalConsole?.error?.(safeMessage);\n            }\n            //   Block all other log levels in production\n            return;\n        }\n        \n        // Development mode: full logging with sanitized data\n        const logMethod = this._originalConsole?.[level] || this._originalConsole?.log;\n        if (sanitizedData) {\n            logMethod(message, sanitizedData);\n        } else {\n            logMethod(message);\n        }\n    }\n    /**\n     *   Enhanced sanitization for log data with multiple security layers\n     */\n    _sanitizeLogData(data) {\n        //   Pre-check for sensitive content before processing\n        if (typeof data === 'string') {\n            return this._sanitizeString(data);\n        }\n        \n        if (!data || typeof data !== 'object') {\n            return data;\n        }\n        \n        const sanitized = {};\n        \n        for (const [key, value] of Object.entries(data)) {\n            const lowerKey = key.toLowerCase();\n            \n            //   Enhanced blacklist with more comprehensive patterns\n            const blacklistPatterns = [\n                'key', 'secret', 'token', 'password', 'credential', 'auth',\n                'fingerprint', 'salt', 'signature', 'private', 'encryption',\n                'mac', 'metadata', 'session', 'jwt', 'bearer', 'hash',\n                'digest', 'nonce', 'iv', 'cipher', 'seed', 'entropy'\n            ];\n            \n            const isBlacklisted = this._absoluteBlacklist.has(key) || \n                blacklistPatterns.some(pattern => lowerKey.includes(pattern));\n            \n            if (isBlacklisted) {\n                sanitized[key] = '[SENSITIVE_DATA_BLOCKED]';\n                continue;\n            }\n            \n            //   Enhanced whitelist with strict validation\n            if (this._safeFieldsWhitelist.has(key)) {\n                //   Even whitelisted fields get sanitized if they contain sensitive data\n                if (typeof value === 'string') {\n                    sanitized[key] = this._sanitizeString(value);\n                } else {\n                    sanitized[key] = value;\n                }\n                continue;\n            }\n            \n            //   Enhanced type handling with security checks\n            if (typeof value === 'boolean' || typeof value === 'number') {\n                sanitized[key] = value;\n            } else if (typeof value === 'string') {\n                sanitized[key] = this._sanitizeString(value);\n            } else if (value instanceof ArrayBuffer || value instanceof Uint8Array) {\n                //   Don't reveal actual byte lengths for security\n                sanitized[key] = `[${value.constructor.name}(<REDACTED> bytes)]`;\n            } else if (value && typeof value === 'object') {\n                //   Recursive sanitization with depth limit and security check\n                try {\n                    sanitized[key] = this._sanitizeLogData(value);\n                } catch (error) {\n                    sanitized[key] = '[RECURSIVE_SANITIZATION_FAILED]';\n                }\n            } else {\n                sanitized[key] = `[${typeof value}]`;\n            }\n        }\n        \n        //   Final security check on sanitized data\n        const sanitizedString = JSON.stringify(sanitized);\n        if (this._containsSensitiveContent(sanitizedString)) {\n            return { error: 'SANITIZATION_FAILED_SENSITIVE_CONTENT_DETECTED' };\n        }\n        \n        return sanitized;\n    }\n    /**\n     *   Enhanced sanitization for strings with comprehensive pattern detection\n     */\n    _sanitizeString(str) {\n        if (typeof str !== 'string' || str.length === 0) {\n            return str;\n        }\n        \n        //   Comprehensive sensitive pattern detection\n        const sensitivePatterns = [\n            // Hex patterns (various lengths)\n            /[a-f0-9]{16,}/i,                    // 16+ hex chars (covers short keys)\n            /[a-f0-9]{8,}/i,                     // 8+ hex chars (covers shorter keys)\n            \n            // Base64 patterns (comprehensive)\n            /[A-Za-z0-9+/]{16,}={0,2}/,         // Base64 with padding\n            /[A-Za-z0-9+/]{12,}/,               // Base64 without padding\n            /[A-Za-z0-9+/=]{10,}/,              // Base64-like patterns\n            \n            // Base58 patterns (Bitcoin-style)\n            /[1-9A-HJ-NP-Za-km-z]{16,}/,        // Base58 strings\n            \n            // Base32 patterns\n            /[A-Z2-7]{16,}={0,6}/,              // Base32 with padding\n            /[A-Z2-7]{12,}/,                     // Base32 without padding\n            \n            // Custom encoding patterns\n            /[A-Za-z0-9\\-_]{16,}/,              // URL-safe base64 variants\n            /[A-Za-z0-9\\.\\-_]{16,}/,             // JWT-like patterns\n            \n            // Long alphanumeric strings (potential keys)\n            /\\b[A-Za-z0-9]{12,}\\b/,              // 12+ alphanumeric chars\n            /\\b[A-Za-z0-9]{8,}\\b/,               // 8+ alphanumeric chars\n            \n            // PEM key patterns\n            /BEGIN\\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\\s+KEY/i,\n            /END\\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\\s+KEY/i,\n            \n            // JWT patterns\n            /^[A-Za-z0-9-_]+\\.[A-Za-z0-9-_]+\\.[A-Za-z0-9-_]*$/,\n            \n            // API key patterns\n            /(api[_-]?key|token|secret|password|credential)[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n            \n            // UUID patterns\n            /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,\n            \n            // Credit cards and SSN (existing patterns)\n            /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/,\n            /\\b\\d{3}-\\d{2}-\\d{4}\\b/,\n            \n            // Email patterns (more restrictive)\n            /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}/,\n            \n            // Crypto-specific patterns\n            /(fingerprint|hash|digest|signature)[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n            /(encryption|mac|metadata)[\\s]*key[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n            \n            // Session and auth patterns\n            /(session|auth|jwt|bearer)[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n        ];\n        \n        //   Check for sensitive patterns with early return\n        for (const pattern of sensitivePatterns) {\n            if (pattern.test(str)) {\n                //   Always fully hide sensitive data\n                return '[SENSITIVE_DATA_REDACTED]';\n            }\n        }\n        \n        //   Check for suspicious entropy (high randomness indicates keys)\n        if (this._hasHighEntropy(str)) {\n            return '[HIGH_ENTROPY_DATA_REDACTED]';\n        }\n        \n        //   Check for suspicious character distributions\n        if (this._hasSuspiciousDistribution(str)) {\n            return '[SUSPICIOUS_DATA_REDACTED]';\n        }\n        \n        // For regular strings \u2014 limit length more aggressively\n        if (str.length > 50) {\n            return str.substring(0, 20) + '...[TRUNCATED]';\n        }\n        \n        return str;\n    }\n    /**\n     *   Enhanced sensitive content detection\n     */\n    _containsSensitiveContent(str) {\n        if (typeof str !== 'string') return false;\n        \n        // Use the same comprehensive patterns as _sanitizeString\n        const sensitivePatterns = [\n            /[a-f0-9]{16,}/i,\n            /[A-Za-z0-9+/]{16,}={0,2}/,\n            /[1-9A-HJ-NP-Za-km-z]{16,}/,\n            /[A-Z2-7]{16,}={0,6}/,\n            /\\b[A-Za-z0-9]{12,}\\b/,\n            /BEGIN\\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\\s+KEY/i,\n            /^[A-Za-z0-9-_]+\\.[A-Za-z0-9-_]+\\.[A-Za-z0-9-_]*$/,\n            /(api[_-]?key|token|secret|password|credential)[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n        ];\n        \n        return sensitivePatterns.some(pattern => pattern.test(str)) ||\n               this._hasHighEntropy(str) ||\n               this._hasSuspiciousDistribution(str);\n    }\n\n    /**\n     *   Check for high entropy strings (likely cryptographic keys)\n     */\n    _hasHighEntropy(str) {\n        if (str.length < 8) return false;\n        \n        // Calculate character frequency\n        const charCount = {};\n        for (const char of str) {\n            charCount[char] = (charCount[char] || 0) + 1;\n        }\n        \n        // Calculate Shannon entropy\n        const length = str.length;\n        let entropy = 0;\n        \n        for (const count of Object.values(charCount)) {\n            const probability = count / length;\n            entropy -= probability * Math.log2(probability);\n        }\n        \n        // High entropy (>4.5 bits per character) suggests cryptographic data\n        return entropy > 4.5;\n    }\n\n    /**\n     *   Check for suspicious character distributions\n     */\n    _hasSuspiciousDistribution(str) {\n        if (str.length < 8) return false;\n        \n        // Check for uniform distribution of hex characters\n        const hexChars = str.match(/[a-f0-9]/gi) || [];\n        if (hexChars.length >= str.length * 0.8) {\n            // If 80%+ are hex chars, likely a key\n            return true;\n        }\n        \n        // Check for base64-like distribution\n        const base64Chars = str.match(/[A-Za-z0-9+/=]/g) || [];\n        if (base64Chars.length >= str.length * 0.9) {\n            // If 90%+ are base64 chars, likely encoded data\n            return true;\n        }\n        \n        // Check for very low character diversity (suggests random data)\n        const uniqueChars = new Set(str).size;\n        const diversityRatio = uniqueChars / str.length;\n        \n        // If diversity is too high (>0.8) for the length, likely random data\n        if (diversityRatio > 0.8 && str.length > 16) {\n            return true;\n        }\n        \n        return false;\n    }\n\n\n    // ============================================\n    // SECURE LOGGING SYSTEM\n    // ============================================\n    \n    /**\n     * Detects production mode\n     */\n    _detectProductionMode() {\n        // Check various production mode indicators\n        return (\n            // Standard env variables\n            (typeof process !== 'undefined' && process.env?.NODE_ENV === 'production') ||\n            // No debug flags\n            (!this._debugMode) ||\n            // Production domains\n            (window.location.hostname && !window.location.hostname.includes('localhost') && \n             !window.location.hostname.includes('127.0.0.1') && \n             !window.location.hostname.includes('.local')) ||\n            // Minified code (heuristic check)\n            (typeof window.webpackHotUpdate === 'undefined' && !window.location.search.includes('debug'))\n        );\n    }\n    // ============================================\n    // FIXED SECURE GLOBAL API\n    // ============================================\n    \n    /**\n     * Sets up a secure global API with limited access\n     */\n    _setupSecureGlobalAPI() {\n        //   Log that we're starting API setup\n        this._secureLog('info', 'Starting secure global API setup');\n        \n        //   Create simple public API with safety checks\n        const secureAPI = {};\n        \n        //   Only bind methods that exist\n        if (typeof this.sendMessage === 'function') {\n            secureAPI.sendMessage = this.sendMessage.bind(this);\n        }\n        \n        //   Create simple getConnectionStatus method\n        secureAPI.getConnectionStatus = () => ({\n            isConnected: this.isConnected ? this.isConnected() : false,\n            isVerified: this.isVerified || false,\n            connectionState: this.peerConnection?.connectionState || 'disconnected'\n        });\n        \n        //   Create simple getSecurityStatus method\n        secureAPI.getSecurityStatus = () => ({\n            securityLevel: 'maximum',\n            stage: 'initialized',\n            activeFeaturesCount: Object.values(this.securityFeatures || {}).filter(Boolean).length\n        });\n        \n        if (typeof this.sendFile === 'function') {\n            secureAPI.sendFile = this.sendFile.bind(this);\n        }\n        \n        //   Create simple getFileTransferStatus method\n        secureAPI.getFileTransferStatus = () => ({\n            initialized: !!this.fileTransferSystem,\n            status: 'ready',\n            activeTransfers: 0,\n            receivingTransfers: 0\n        });\n        \n        if (typeof this.disconnect === 'function') {\n            secureAPI.disconnect = this.disconnect.bind(this);\n        }\n        \n        //   Create simple API object with safety checks\n        const safeGlobalAPI = {\n            ...secureAPI, // Spread only existing methods\n            getConfiguration: () => ({\n                fakeTraffic: this._config.fakeTraffic.enabled,\n                decoyChannels: this._config.decoyChannels.enabled,\n                packetPadding: this._config.packetPadding.enabled,\n                antiFingerprinting: this._config.antiFingerprinting.enabled\n            }),\n            emergency: {}\n        };\n        \n        //   Only add emergency methods that exist\n        if (typeof this._emergencyUnlockAllMutexes === 'function') {\n            safeGlobalAPI.emergency.unlockAllMutexes = this._emergencyUnlockAllMutexes.bind(this);\n        }\n        \n        if (typeof this._emergencyRecoverMutexSystem === 'function') {\n            safeGlobalAPI.emergency.recoverMutexSystem = this._emergencyRecoverMutexSystem.bind(this);\n        }\n        \n        if (typeof this._emergencyDisableLogging === 'function') {\n            safeGlobalAPI.emergency.disableLogging = this._emergencyDisableLogging.bind(this);\n        }\n        \n        if (typeof this._resetLoggingSystem === 'function') {\n            safeGlobalAPI.emergency.resetLogging = this._resetLoggingSystem.bind(this);\n        }\n        \n        //   Add file transfer system status\n        safeGlobalAPI.getFileTransferSystemStatus = () => ({\n            initialized: !!this.fileTransferSystem,\n            status: 'ready',\n            activeTransfers: 0,\n            receivingTransfers: 0\n        });\n        \n        //   Log available methods for debugging\n        this._secureLog('info', 'API methods available', {\n            sendMessage: !!secureAPI.sendMessage,\n            getConnectionStatus: !!secureAPI.getConnectionStatus,\n            getSecurityStatus: !!secureAPI.getSecurityStatus,\n            sendFile: !!secureAPI.sendFile,\n            getFileTransferStatus: !!secureAPI.getFileTransferStatus,\n            disconnect: !!secureAPI.disconnect,\n            getConfiguration: !!safeGlobalAPI.getConfiguration,\n            emergencyMethods: Object.keys(safeGlobalAPI.emergency).length\n        });\n\n        //   Apply Object.freeze to prevent modification\n        Object.freeze(safeGlobalAPI);\n        Object.freeze(safeGlobalAPI.emergency);\n\n        //   Export API once without monitoring\n        this._createProtectedGlobalAPI(safeGlobalAPI);\n        \n        //   Setup minimal protection\n        this._setupMinimalGlobalProtection();\n        \n        //   Log that API setup is complete\n        this._secureLog('info', 'Secure global API setup completed successfully');\n    }\n    /**\n     *   Create simple global API export\n     */\n    _createProtectedGlobalAPI(safeGlobalAPI) {\n        //   Log that we're creating protected global API\n        this._secureLog('info', 'Creating protected global API');\n        \n        //   Simple API export without proxy or monitoring\n        if (!window.secureBitChat) {\n            this._exportAPI(safeGlobalAPI);\n        } else {\n            this._secureLog('warn', '\u26A0\uFE0F Global API already exists, skipping setup');\n        }\n    }\n    \n    /**\n     *   Simple API export without monitoring\n     */\n    _exportAPI(apiObject) {\n        //   Log that we're exporting API\n        this._secureLog('info', 'Exporting API to window.secureBitChat');\n        \n        //   Check if important methods are available\n        if (!this._importantMethods || !this._importantMethods.defineProperty) {\n            this._secureLog('error', '\u274C Important methods not available for API export, using fallback');\n            // Fallback to direct Object.defineProperty\n            Object.defineProperty(window, 'secureBitChat', {\n                value: apiObject,\n                writable: false,\n                configurable: false,\n                enumerable: true\n            });\n        } else {\n            //   One-time export with immutable properties\n            this._importantMethods.defineProperty(window, 'secureBitChat', {\n                value: apiObject,\n                writable: false,\n                configurable: false,\n                enumerable: true\n            });\n        }\n        \n        this._secureLog('info', '\uD83D\uDD12 Secure API exported to window.secureBitChat');\n    }\n    \n    /**\n     *   Setup minimal global protection\n     */\n    _setupMinimalGlobalProtection() {\n        //   Simple protection without monitoring (methods already stored)\n        this._protectGlobalAPI();\n        \n        this._secureLog('info', '\uD83D\uDD12 Minimal global protection activated');\n    }\n    \n    /**\n     *   Store important methods in closure for local use\n     */\n    _storeImportantMethods() {\n        //   Store references to important methods locally\n        this._importantMethods = {\n            defineProperty: Object.defineProperty,\n            getOwnPropertyDescriptor: Object.getOwnPropertyDescriptor,\n            freeze: Object.freeze,\n            consoleLog: console.log,\n            consoleError: console.error,\n            consoleWarn: console.warn\n        };\n        \n        this._secureLog('info', '\uD83D\uDD12 Important methods stored locally', {\n            defineProperty: !!this._importantMethods.defineProperty,\n            getOwnPropertyDescriptor: !!this._importantMethods.getOwnPropertyDescriptor,\n            freeze: !!this._importantMethods.freeze\n        });\n    }\n\n    /**\n     *   Simple protection without monitoring\n     */\n    _setupSimpleProtection() {\n        this._secureLog('info', '\uD83D\uDD12 Simple protection activated - no monitoring');\n    }\n\n    /**\n     *   No global exposure prevention needed\n     */\n    _preventGlobalExposure() {\n        this._secureLog('info', '\uD83D\uDD12 No global exposure prevention - using secure API export only');\n    }\n    /**\n     *   API integrity check - only at initialization\n     */\n    _verifyAPIIntegrity() {\n        try {\n            if (!window.secureBitChat) {\n                this._secureLog('error', '\u274C SECURITY ALERT: Secure API has been removed!');\n                return false;\n            }\n            \n            const requiredMethods = ['sendMessage', 'getConnectionStatus', 'disconnect'];\n            const missingMethods = requiredMethods.filter(method => \n                typeof window.secureBitChat[method] !== 'function'\n            );\n            \n            if (missingMethods.length > 0) {\n                this._secureLog('error', '\u274C SECURITY ALERT: API tampering detected, missing methods:', { errorType: missingMethods?.constructor?.name || 'Unknown' });\n                return false;\n            }\n            \n            return true;\n        } catch (error) {\n            this._secureLog('error', '\u274C SECURITY ALERT: API integrity check failed:', { errorType: error?.constructor?.name || 'Unknown' });\n            return false;\n        }\n    }\n    // ============================================\n    // ADDITIONAL SECURITY METHODS\n    // ============================================\n    \n    /**\n     *   Simple global exposure check - only at initialization\n     */\n    _auditGlobalExposure() {\n        //   Only check once at initialization, no periodic scanning\n        this._secureLog('info', '\uD83D\uDD12 Global exposure check completed at initialization');\n        return [];\n    }\n    \n    /**\n     *   No periodic security audits - only at initialization\n     */\n    _startSecurityAudit() {\n        //   Only audit once at initialization, no periodic checks\n        this._secureLog('info', '\uD83D\uDD12 Security audit completed at initialization - no periodic monitoring');\n    }\n    \n    /**\n     *   Simple global API protection\n     */\n    _protectGlobalAPI() {\n        if (!window.secureBitChat) {\n            this._secureLog('warn', '\u26A0\uFE0F Global API not found during protection setup');\n            return;\n        }\n\n        try {\n            //   Validate API integrity once\n            if (this._validateAPIIntegrityOnce()) {\n                this._secureLog('info', '\uD83D\uDD12 Global API protection verified');\n            }\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to verify global API protection', { \n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        }\n    }\n    \n    /**\n     *   Validate API integrity once at initialization\n     */\n    _validateAPIIntegrityOnce() {\n        try {\n            //   Check if API is properly configured\n            if (!this._importantMethods || !this._importantMethods.getOwnPropertyDescriptor) {\n                // Fallback to direct Object.getOwnPropertyDescriptor\n                const descriptor = Object.getOwnPropertyDescriptor(window, 'secureBitChat');\n                \n                if (!descriptor || descriptor.configurable) {\n                    throw new Error('secureBitChat must not be reconfigurable!');\n                }\n            } else {\n                const descriptor = this._importantMethods.getOwnPropertyDescriptor(window, 'secureBitChat');\n                \n                if (!descriptor || descriptor.configurable) {\n                    throw new Error('secureBitChat must not be reconfigurable!');\n                }\n            }\n            \n            this._secureLog('info', '\u2705 API integrity validated');\n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C API integrity validation failed', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            return false;\n        }\n    }\n    \n    /**\n     *   Secure memory wipe for sensitive data\n     */\n    _secureWipeMemory(data, context = 'unknown') {\n        if (!data) return;\n        \n        try {\n            //   Different handling for different data types\n            if (data instanceof ArrayBuffer) {\n                this._secureWipeArrayBuffer(data, context);\n            } else if (data instanceof Uint8Array) {\n                this._secureWipeUint8Array(data, context);\n            } else if (Array.isArray(data)) {\n                this._secureWipeArray(data, context);\n            } else if (typeof data === 'string') {\n                this._secureWipeString(data, context);\n            } else if (data instanceof CryptoKey) {\n                this._secureWipeCryptoKey(data, context);\n            } else if (typeof data === 'object') {\n                this._secureWipeObject(data, context);\n            }\n            \n            this._secureMemoryManager.memoryStats.totalCleanups++;\n            \n        } catch (error) {\n            this._secureMemoryManager.memoryStats.failedCleanups++;\n            this._secureLog('error', '\u274C Secure memory wipe failed', {\n                context: context,\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        }\n    }\n    \n    /**\n     *   Secure wipe for ArrayBuffer\n     */\n    _secureWipeArrayBuffer(buffer, context) {\n        if (!buffer || buffer.byteLength === 0) return;\n        \n        try {\n            const view = new Uint8Array(buffer);\n            \n            //   Overwrite with random data first\n            crypto.getRandomValues(view);\n            \n            //   Overwrite with zeros\n            view.fill(0);\n            \n            //   Overwrite with ones\n            view.fill(255);\n            \n            //   Final zero overwrite\n            view.fill(0);\n            \n            this._secureLog('debug', '\uD83D\uDD12 ArrayBuffer securely wiped', {\n                context: context,\n                size: buffer.byteLength\n            });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe ArrayBuffer', {\n                context: context,\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   Secure wipe for Uint8Array\n     */\n    _secureWipeUint8Array(array, context) {\n        if (!array || array.length === 0) return;\n        \n        try {\n            //   Overwrite with random data first\n            crypto.getRandomValues(array);\n            \n            //   Overwrite with zeros\n            array.fill(0);\n            \n            //   Overwrite with ones\n            array.fill(255);\n            \n            //   Final zero overwrite\n            array.fill(0);\n            \n            this._secureLog('debug', '\uD83D\uDD12 Uint8Array securely wiped', {\n                context: context,\n                size: array.length\n            });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe Uint8Array', {\n                context: context,\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   Secure wipe for arrays\n     */\n    _secureWipeArray(array, context) {\n        if (!Array.isArray(array) || array.length === 0) return;\n        \n        try {\n            //   Recursively wipe each element\n            array.forEach((item, index) => {\n                if (item !== null && item !== undefined) {\n                    this._secureWipeMemory(item, `${context}[${index}]`);\n                }\n            });\n            \n            //   Fill with nulls\n            array.fill(null);\n            \n            this._secureLog('debug', '\uD83D\uDD12 Array securely wiped', {\n                context: context,\n                size: array.length\n            });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe array', {\n                context: context,\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   No string wiping - strings are immutable in JS\n     */\n    /**\n     * NOT a wipe, and deliberately named in the log as what it is.\n     *\n     * JavaScript strings are immutable: there is no way to overwrite the\n     * characters of an existing string, so any secret that was ever held as a\n     * string stays in the heap until the GC collects it \u2014 and we cannot force\n     * that. The caller can only drop its reference.\n     *\n     * This used to report success at debug level, which made the emergency wipe\n     * path (see _emergencyWipeOnFingerprintMismatch) look like it had scrubbed\n     * key material when it had scrubbed nothing. The real fix is upstream: keep\n     * secrets in ArrayBuffers, which CAN be overwritten \u2014 see\n     * EnhancedSecureCryptoUtils.zeroizeBuffer.\n     */\n    _secureWipeString(str, context) {\n        this._secureLog('debug', 'String secret cannot be wiped in JS (immutable) \u2014 reference dropped only', {\n            context: context,\n            length: str ? str.length : 0\n        });\n        return false;\n    }\n    \n    /**\n     *   CryptoKey cleanup - store in WeakMap for proper GC\n     */\n    /**\n     * Also not a wipe. A non-extractable CryptoKey has no bytes visible to JS \u2014\n     * the material lives in the browser's crypto implementation, and dropping the\n     * handle is the only lever we have. Whether the browser then zeroes its copy\n     * is up to the browser.\n     *\n     * The previous implementation was worse than a no-op: it ADDED the key to a\n     * WeakMap (i.e. took a new reference to the thing it was asked to destroy)\n     * and logged success. Callers that believed it \u2014 notably the emergency wipe\n     * on a fingerprint mismatch \u2014 were reporting a scrub that never happened.\n     *\n     * Non-extractability is what actually protects these keys; it is verified by\n     * EnhancedSecureCryptoUtils.verifyNonExtractableKeys.\n     */\n    _secureWipeCryptoKey(key, context) {\n        if (!key || !(key instanceof CryptoKey)) return false;\n\n        this._secureLog('debug', 'CryptoKey cannot be wiped from JS \u2014 handle dropped, material is non-extractable', {\n            context: context,\n            type: key.type,\n            extractable: key.extractable\n        });\n\n        // An extractable session key is a bug in whoever derived it: its bytes\n        // can be pulled into the heap, and then nothing here can clean them up.\n        if (key.extractable) {\n            this._secureLog('error', 'Extractable key reached the wipe path \u2014 material may persist in memory', {\n                context: context\n            });\n        }\n\n        return false;\n    }\n    \n    /**\n     *   Secure wipe for objects\n     */\n    _secureWipeObject(obj, context) {\n        if (!obj || typeof obj !== 'object') return;\n        \n        try {\n            //   Recursively wipe all properties\n            for (const [key, value] of Object.entries(obj)) {\n                if (value !== null && value !== undefined) {\n                    this._secureWipeMemory(value, `${context}.${key}`);\n                }\n                //   Set property to null\n                obj[key] = null;\n            }\n            \n            this._secureLog('debug', '\uD83D\uDD12 Object securely wiped', {\n                context: context,\n                properties: Object.keys(obj).length\n            });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe object', {\n                context: context,\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   Secure cleanup of cryptographic materials\n     */\n    _secureCleanupCryptographicMaterials() {\n        try {\n            //   Secure wipe of key pairs\n            if (this.ecdhKeyPair) {\n                this._secureWipeMemory(this.ecdhKeyPair, 'ecdhKeyPair');\n                this.ecdhKeyPair = null;\n            }\n            \n            if (this.ecdsaKeyPair) {\n                this._secureWipeMemory(this.ecdsaKeyPair, 'ecdsaKeyPair');\n                this.ecdsaKeyPair = null;\n            }\n            \n            //   Secure wipe of derived keys\n            if (this.encryptionKey) {\n                this._secureWipeMemory(this.encryptionKey, 'encryptionKey');\n                this.encryptionKey = null;\n            }\n            \n            if (this.macKey) {\n                this._secureWipeMemory(this.macKey, 'macKey');\n                this.macKey = null;\n            }\n            \n            if (this.metadataKey) {\n                this._secureWipeMemory(this.metadataKey, 'metadataKey');\n                this.metadataKey = null;\n            }\n            \n            if (this.nestedEncryptionKey) {\n                this._secureWipeMemory(this.nestedEncryptionKey, 'nestedEncryptionKey');\n                this.nestedEncryptionKey = null;\n            }\n            \n            //   Secure wipe of session data\n            if (this.sessionSalt) {\n                this._secureWipeMemory(this.sessionSalt, 'sessionSalt');\n                this.sessionSalt = null;\n            }\n            \n            if (this.sessionId) {\n                this._secureWipeMemory(this.sessionId, 'sessionId');\n                this.sessionId = null;\n            }\n            \n            if (this.verificationCode) {\n                this._secureWipeMemory(this.verificationCode, 'verificationCode');\n                this.verificationCode = null;\n            }\n            \n            if (this.peerPublicKey) {\n                this._secureWipeMemory(this.peerPublicKey, 'peerPublicKey');\n                this.peerPublicKey = null;\n            }\n            \n            if (this.keyFingerprint) {\n                this._secureWipeMemory(this.keyFingerprint, 'keyFingerprint');\n                this.keyFingerprint = null;\n            }\n            \n            if (this.connectionId) {\n                this._secureWipeMemory(this.connectionId, 'connectionId');\n                this.connectionId = null;\n            }\n\n            this._clearPendingOfferContext();\n\n            // The ratchet holds the only material in this class that IS raw bytes\n            // and therefore genuinely wipeable \u2014 root key, chain keys and every\n            // retained key for a message that never arrived.\n            if (this._ratchet) {\n                try { this._ratchet.destroy(); } catch (_) {}\n                this._ratchet = null;\n            }\n            this._peerSupportsRatchet = false;\n\n            this._secureLog('info', '\uD83D\uDD12 Cryptographic materials securely cleaned up');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to cleanup cryptographic materials', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        }\n    }\n    \n    /**\n     *   Force garbage collection if available\n     */\n    async _forceGarbageCollection() {\n        try {\n            //   Use natural cleanup instead of forcing GC\n            await this._performNaturalCleanup();\n            this._secureLog('debug', '\uD83D\uDD12 Natural memory cleanup performed');\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to perform natural cleanup', {\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   Perform periodic memory cleanup\n     */\n    async _performPeriodicMemoryCleanup() {\n        try {\n            this._secureMemoryManager.isCleaning = true;\n            \n            //   Clean up sensitive data, but DO NOT wipe active crypto in ratchet session\n            const preserveActiveRatchet = (this.sessionMode === 'ratchet') && this.isConnected && this.dataChannel && this.dataChannel.readyState === 'open';\n            // DO NOT wipe an offer that is still awaiting its answer: the creator\n            // holds a pending offer context (with the session salt) until the peer's\n            // response is applied. Wiping it here drops sessionSalt + the context and\n            // makes handleSecureAnswer fail with \"Missing pending offer context\".\n            // Keep it for as long as the offer itself is valid (OFFER_MAX_AGE).\n            const pendingOfferAgeMs = this._pendingOfferContext\n                ? (Date.now() - (this._pendingOfferContext.createdAt || 0))\n                : Infinity;\n            const hasPendingOffer = !!this._pendingOfferContext\n                && Array.isArray(this._pendingOfferContext.sessionSalt)\n                && this._pendingOfferContext.sessionSalt.length === 64\n                && pendingOfferAgeMs < EnhancedSecureWebRTCManager.LIMITS.OFFER_MAX_AGE;\n            const shouldPreserveActiveKeys = preserveActiveRatchet || hasPendingOffer;\n            if (shouldPreserveActiveKeys) {\n                this._secureLog('debug', '\uD83E\uDDF9 Skipping crypto key wipe during periodic cleanup', {\n                    reason: preserveActiveRatchet ? 'active ratchet connection' : 'offer awaiting answer'\n                });\n            } else {\n                this._secureCleanupCryptographicMaterials();\n            }\n            \n            //   Clean up message queue if it's too large\n            if (this.messageQueue && this.messageQueue.length > 100) {\n                const excessMessages = this.messageQueue.splice(0, this.messageQueue.length - 50);\n                excessMessages.forEach((message, index) => {\n                    this._secureWipeMemory(message, `periodicCleanup[${index}]`);\n                });\n            }\n            \n            //   Clean up processed message IDs if too many\n            if (this.processedMessageIds && this.processedMessageIds.size > 1000) {\n                this.processedMessageIds.clear();\n            }\n            \n            //   Natural cleanup\n            await this._forceGarbageCollection();\n            \n            this._secureLog('debug', '\uD83D\uDD12 Periodic memory cleanup completed');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error during periodic memory cleanup', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        } finally {\n            this._secureMemoryManager.isCleaning = false;\n        }\n    }\n    \n    /**\n     *   Create secure error message without information disclosure\n     */\n    _createSecureErrorMessage(originalError, context = 'unknown') {\n        try {\n            //   Categorize error for appropriate handling\n            const category = this._categorizeError(originalError);\n            \n            //   Generate safe error message based on category\n            const safeMessage = this._getSafeErrorMessage(category, context);\n            \n            //   Log detailed error internally for debugging\n            this._secureLog('error', 'Internal error occurred', {\n                category: category,\n                context: context,\n                errorType: originalError?.constructor?.name || 'Unknown',\n                timestamp: Date.now()\n            });\n            \n            //   Track error frequency\n            this._trackErrorFrequency(category);\n            \n            return safeMessage;\n            \n        } catch (error) {\n            //   Fallback to generic error if error handling fails\n            this._secureLog('error', 'Error handling failed', {\n                originalError: originalError?.message || 'Unknown',\n                handlingError: error.message\n            });\n            return 'An unexpected error occurred';\n        }\n    }\n    \n    /**\n     *   Categorize error for appropriate handling\n     */\n    _categorizeError(error) {\n        if (!error || !error.message) {\n            return this._secureErrorHandler.errorCategories.UNKNOWN;\n        }\n        \n        const message = error.message.toLowerCase();\n        \n        //   Cryptographic errors\n        if (message.includes('crypto') || \n            message.includes('key') || \n            message.includes('encrypt') || \n            message.includes('decrypt') ||\n            message.includes('sign') ||\n            message.includes('verify') ||\n            message.includes('ecdh') ||\n            message.includes('ecdsa')) {\n            return this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC;\n        }\n        \n        //   Network errors\n        if (message.includes('network') || \n            message.includes('connection') || \n            message.includes('timeout') ||\n            message.includes('webrtc') ||\n            message.includes('peer')) {\n            return this._secureErrorHandler.errorCategories.NETWORK;\n        }\n        \n        //   Validation errors\n        if (message.includes('invalid') || \n            message.includes('validation') || \n            message.includes('format') ||\n            message.includes('type')) {\n            return this._secureErrorHandler.errorCategories.VALIDATION;\n        }\n        \n        //   System errors\n        if (message.includes('system') || \n            message.includes('internal') || \n            message.includes('memory') ||\n            message.includes('resource')) {\n            return this._secureErrorHandler.errorCategories.SYSTEM;\n        }\n        \n        return this._secureErrorHandler.errorCategories.UNKNOWN;\n    }\n    \n    /**\n     *   Get safe error message based on category\n     */\n    _getSafeErrorMessage(category, context) {\n        const safeMessages = {\n            [this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC]: {\n                'key_generation': 'Security initialization failed',\n                'key_import': 'Security verification failed',\n                'key_derivation': 'Security setup failed',\n                'encryption': 'Message security failed',\n                'decryption': 'Message verification failed',\n                'signature': 'Authentication failed',\n                'default': 'Security operation failed'\n            },\n            [this._secureErrorHandler.errorCategories.NETWORK]: {\n                'connection': 'Connection failed',\n                'timeout': 'Connection timeout',\n                'peer': 'Peer connection failed',\n                'webrtc': 'Communication failed',\n                'default': 'Network operation failed'\n            },\n            [this._secureErrorHandler.errorCategories.VALIDATION]: {\n                'format': 'Invalid data format',\n                'type': 'Invalid data type',\n                'structure': 'Invalid data structure',\n                'default': 'Validation failed'\n            },\n            [this._secureErrorHandler.errorCategories.SYSTEM]: {\n                'memory': 'System resource error',\n                'resource': 'System resource unavailable',\n                'internal': 'Internal system error',\n                'default': 'System operation failed'\n            },\n            [this._secureErrorHandler.errorCategories.UNKNOWN]: {\n                'default': 'An unexpected error occurred'\n            }\n        };\n        \n        const categoryMessages = safeMessages[category] || safeMessages[this._secureErrorHandler.errorCategories.UNKNOWN];\n        \n        //   Determine specific context for more precise message\n        let specificContext = 'default';\n        if (context.includes('key') || context.includes('crypto')) {\n            specificContext = category === this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC ? 'key_generation' : 'default';\n        } else if (context.includes('connection') || context.includes('peer')) {\n            specificContext = category === this._secureErrorHandler.errorCategories.NETWORK ? 'connection' : 'default';\n        } else if (context.includes('validation') || context.includes('format')) {\n            specificContext = category === this._secureErrorHandler.errorCategories.VALIDATION ? 'format' : 'default';\n        }\n        \n        return categoryMessages[specificContext] || categoryMessages.default;\n    }\n    \n    /**\n     *   Track error frequency for security monitoring\n     */\n    _trackErrorFrequency(category) {\n        const now = Date.now();\n        \n        //   Clean old error counts\n        if (now - this._secureErrorHandler.lastErrorTime > 60000) { // 1 minute\n            this._secureErrorHandler.errorCounts.clear();\n        }\n        \n        //   Increment error count\n        const currentCount = this._secureErrorHandler.errorCounts.get(category) || 0;\n        this._secureErrorHandler.errorCounts.set(category, currentCount + 1);\n        this._secureErrorHandler.lastErrorTime = now;\n        \n        //   Check if we're exceeding error threshold\n        const totalErrors = Array.from(this._secureErrorHandler.errorCounts.values()).reduce((sum, count) => sum + count, 0);\n        \n        if (totalErrors > this._secureErrorHandler.errorThreshold) {\n            this._secureErrorHandler.isInErrorMode = true;\n            this._secureLog('warn', '\u26A0\uFE0F High error frequency detected - entering error mode', {\n                totalErrors: totalErrors,\n                threshold: this._secureErrorHandler.errorThreshold\n            });\n        }\n    }\n    \n    /**\n     *   Throw secure error without information disclosure\n     */\n    _throwSecureError(originalError, context = 'unknown') {\n        const secureMessage = this._createSecureErrorMessage(originalError, context);\n        throw new Error(secureMessage);\n    }\n    \n    /**\n     *   Get error handling statistics\n     */\n    _getErrorHandlingStats() {\n        return {\n            errorCounts: Object.fromEntries(this._secureErrorHandler.errorCounts),\n            isInErrorMode: this._secureErrorHandler.isInErrorMode,\n            lastErrorTime: this._secureErrorHandler.lastErrorTime,\n            errorThreshold: this._secureErrorHandler.errorThreshold\n        };\n    }\n    \n    /**\n     *   Reset error handling system\n     */\n    _resetErrorHandlingSystem() {\n        this._secureErrorHandler.errorCounts.clear();\n        this._secureErrorHandler.isInErrorMode = false;\n        this._secureErrorHandler.lastErrorTime = 0;\n        \n        this._secureLog('info', '\uD83D\uDD04 Error handling system reset');\n    }\n    \n    /**\n     *   Get memory management statistics\n     */\n    _getMemoryManagementStats() {\n        return {\n            totalCleanups: this._secureMemoryManager.memoryStats.totalCleanups,\n            failedCleanups: this._secureMemoryManager.memoryStats.failedCleanups,\n            lastCleanup: this._secureMemoryManager.memoryStats.lastCleanup,\n            isCleaning: this._secureMemoryManager.isCleaning,\n            queueLength: this._secureMemoryManager.cleanupQueue.length\n        };\n    }\n    \n    /**\n     *   Validate API integrity and security\n     */\n    _validateAPIIntegrity() {\n        try {\n            //   Check if API exists\n            if (!window.secureBitChat) {\n                this._secureLog('error', '\u274C Global API not found during integrity validation');\n                return false;\n            }\n            \n            //   Validate required methods exist\n            const requiredMethods = ['sendMessage', 'getConnectionStatus', 'getSecurityStatus', 'sendFile', 'disconnect'];\n            const missingMethods = requiredMethods.filter(method => \n                !window.secureBitChat[method] || typeof window.secureBitChat[method] !== 'function'\n            );\n            \n            if (missingMethods.length > 0) {\n                this._secureLog('error', '\u274C Global API integrity validation failed - missing methods', {\n                    missingMethods: missingMethods\n                });\n                return false;\n            }\n            \n            //   Test method binding integrity\n            const testContext = { test: true };\n            const boundMethods = requiredMethods.map(method => {\n                try {\n                    return window.secureBitChat[method].bind(testContext);\n                } catch (error) {\n                    return null;\n                }\n            });\n            \n            const unboundMethods = boundMethods.filter(method => method === null);\n            if (unboundMethods.length > 0) {\n                this._secureLog('error', '\u274C Global API integrity validation failed - method binding issues', {\n                    unboundMethods: unboundMethods.length\n                });\n                return false;\n            }\n            \n            //   Test API immutability\n            try {\n                const testProp = '_integrity_test_' + Date.now();\n                Object.defineProperty(window.secureBitChat, testProp, {\n                    value: 'test',\n                    writable: true,\n                    configurable: true\n                });\n                \n                this._secureLog('error', '\u274C Global API integrity validation failed - API is mutable');\n                delete window.secureBitChat[testProp];\n                return false;\n                \n            } catch (immutabilityError) {\n                // This is expected - API should be immutable\n                this._secureLog('debug', '\u2705 Global API immutability verified');\n            }\n            \n            this._secureLog('info', '\u2705 Global API integrity validation passed');\n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Global API integrity validation failed', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            return false;\n        }\n    }\n\n    _validateCryptographicSecurity() {\n        //   Check if basic security features are available\n        const criticalFeatures = ['hasRateLimiting'];\n        const missingCritical = criticalFeatures.filter(feature => !this.securityFeatures[feature]);\n        \n        if (missingCritical.length > 0) {\n            this._secureLog('error', '\uD83D\uDEA8 CRITICAL: Missing critical rate limiting feature', {\n                missing: missingCritical,\n                currentFeatures: this.securityFeatures,\n                action: 'Rate limiting will be forced enabled'\n            });\n\n            missingCritical.forEach(feature => {\n                this.securityFeatures[feature] = true;\n                this._secureLog('warn', `\u26A0\uFE0F Forced enable critical: ${feature} = true`);\n            });\n        }\n\n        //   Log current security state\n        const availableFeatures = Object.keys(this.securityFeatures).filter(f => this.securityFeatures[f]);\n        const encryptionFeatures = ['hasEncryption', 'hasECDH', 'hasECDSA'].filter(f => this.securityFeatures[f]);\n        \n        this._secureLog('info', '\u2705 Cryptographic security validation passed', {\n            criticalFeatures: criticalFeatures.length,\n            availableFeatures: availableFeatures.length,\n            encryptionFeatures: encryptionFeatures.length,\n            totalSecurityFeatures: availableFeatures.length,\n            note: 'Encryption features will be enabled after key generation',\n            currentState: {\n                hasEncryption: this.securityFeatures.hasEncryption,\n                hasECDH: this.securityFeatures.hasECDH,\n                hasECDSA: this.securityFeatures.hasECDSA,\n                hasRateLimiting: this.securityFeatures.hasRateLimiting\n            }\n        });\n        \n        return true;\n    }\n\n    _syncSecurityFeaturesWithTariff() {\n        // All security features are enabled by default - no payment required\n        this._secureLog('info', '\u2705 All security features enabled by default - no payment required');\n        \n        // Ensure all features are enabled\n        const allFeatures = [\n            'hasEncryption', 'hasECDH', 'hasECDSA', 'hasMutualAuth',\n            'hasMetadataProtection', 'hasEnhancedReplayProtection',\n            'hasNonExtractableKeys', 'hasRateLimiting', 'hasEnhancedValidation', 'hasPFS',\n            'hasNestedEncryption', 'hasPacketPadding', 'hasPacketReordering',\n            'hasAntiFingerprinting', 'hasFakeTraffic', 'hasDecoyChannels', 'hasMessageChunking'\n        ];\n        \n        allFeatures.forEach(feature => {\n            this.securityFeatures[feature] = true;\n        });\n        \n        this._secureLog('info', '\u2705 All security features enabled by default', {\n            enabledFeatures: Object.keys(this.securityFeatures).filter(f => this.securityFeatures[f]).length,\n            totalFeatures: Object.keys(this.securityFeatures).length\n        });\n        \n        return;\n    }\n    \n    /**\n     * Emergency shutdown for critical issues\n     */\n    _emergencyShutdown(reason = 'Security breach') {\n        this._secureLog('error', '\u274C EMERGENCY SHUTDOWN: ${reason}');\n        \n        try {\n            // Clear critical data\n            this.encryptionKey = null;\n            this.macKey = null;\n            this.metadataKey = null;\n            this.verificationCode = null;\n            this.keyFingerprint = null;\n            this.connectionId = null;\n            \n            // Close connections\n            if (this.dataChannel) {\n                this.dataChannel.close();\n                this.dataChannel = null;\n            }\n            if (this.peerConnection) {\n                this.peerConnection.close();\n                this.peerConnection = null;\n            }\n            \n            // Clear buffers\n            this.messageQueue = [];\n            this.processedMessageIds.clear();\n            this.packetBuffer.clear();\n            \n            // Notify UI\n            if (this.onStatusChange) {\n                this.onStatusChange('security_breach');\n            }\n            \n            this._secureLog('info', '\uD83D\uDD12 Emergency shutdown completed');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error during emergency shutdown:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n    _finalizeSecureInitialization() {\n        this._startKeySecurityMonitoring();\n        \n        // Verify API integrity\n        if (!this._verifyAPIIntegrity()) {\n            this._secureLog('error', '\u274C Security initialization failed');\n            return;\n        }\n\n        this._startSecurityMonitoring();\n        \n        // Start periodic log cleanup\n        this._logCleanupInterval = this._trackActiveTimer(setInterval(() => {\n            this._cleanupLogs();\n        }, 300000));\n        \n        this._secureLog('info', '\u2705 Secure WebRTC Manager initialization completed');\n        this._secureLog('info', '\uD83D\uDD12 Global exposure protection: Monitoring only, no automatic removal');\n    }\n    /**\n     * Start security monitoring\n     * @deprecated Use unified scheduler instead\n     */\n    _startSecurityMonitoring() {\n        //   All security monitoring moved to unified scheduler\n        this._secureLog('info', '\uD83D\uDD27 Security monitoring moved to unified scheduler');\n    }\n    /**\n     * Validates connection readiness for sending data\n     * @param {boolean} throwError - whether to throw on not ready\n     * @returns {boolean} true if connection is ready\n     */\n    _validateConnection(throwError = true) {\n        const isDataChannelReady = this.dataChannel && this.dataChannel.readyState === 'open';\n        const isConnectionVerified = this.isVerified;\n        const isValid = isDataChannelReady && isConnectionVerified;\n        \n        if (!isValid && throwError) {\n            if (!isDataChannelReady) {\n                throw new Error('Data channel not ready');\n            }\n            if (!isConnectionVerified) {\n                throw new Error('Connection not verified');\n            }\n        }\n        \n        return isValid;\n    }\n\n    /**\n     *   Hard gate for traffic blocking without verification\n     * This method enforces that NO traffic (including system messages and file transfers)\n     * can pass through without proper cryptographic verification\n     */\n    _enforceVerificationGate(operation = 'unknown', throwError = true) {\n        if (!this.isVerified) {\n            const errorMessage = `SECURITY VIOLATION: ${operation} blocked - connection not cryptographically verified`;\n            this._secureLog('error', errorMessage, {\n                operation: operation,\n                isVerified: this.isVerified,\n                hasKeys: !!(this.encryptionKey && this.macKey),\n                timestamp: Date.now()\n            });\n            \n            if (throwError) {\n                throw new Error(errorMessage);\n            }\n            return false;\n        }\n        return true;\n    }\n\n    /**\n     *   Safe method to set isVerified only after cryptographic verification\n     * This is the ONLY method that should set isVerified = true\n     */\n    _setVerifiedStatus(verified, verificationMethod = 'unknown', verificationData = null) {\n        if (verified) {\n            // Validate that we have proper cryptographic verification\n            if (!this.encryptionKey || !this.macKey) {\n                throw new Error('Cannot set verified=true without encryption keys');\n            }\n            \n            if (!verificationMethod || verificationMethod === 'unknown') {\n                throw new Error('Cannot set verified=true without specifying verification method');\n            }\n\n            // SECURITY: defence in depth. Having ECDH-derived keys proves only that\n            // *someone* completed the handshake \u2014 a MITM has them too. The SAS\n            // comparison is what proves that someone is the intended peer, so any\n            // SAS-based transition must be backed by a local confirmation that the\n            // user actually entered the matching code. No caller may shortcut this.\n            if (verificationMethod.includes('SAS') && !this.localVerificationConfirmed) {\n                this._secureLog('error', 'Blocked verified transition without local SAS confirmation', {\n                    verificationMethod: verificationMethod,\n                    localConfirmed: this.localVerificationConfirmed,\n                    remoteConfirmed: this.remoteVerificationConfirmed\n                });\n                throw new Error('Cannot set verified=true without local SAS confirmation');\n            }\n\n            // Log the verification for audit trail\n            this._secureLog('info', 'Connection verified through cryptographic verification', {\n                verificationMethod: verificationMethod,\n                hasEncryptionKey: !!this.encryptionKey,\n                hasMacKey: !!this.macKey,\n                keyFingerprint: this.keyFingerprint,\n                timestamp: Date.now(),\n                verificationData: verificationData ? 'provided' : 'none'\n            });\n        }\n        \n        this.isVerified = verified;\n        \n        if (verified) {\n            this.onStatusChange('connected');\n        } else {\n            this.onStatusChange('disconnected');\n        }\n    }\n\n    /**\n     * Release a link that a GROUP authenticated, with no human in the loop.\n     *\n     * WHY THIS IS NOT A BYPASS\n     * ------------------------\n     * The SAS comparison exists to answer one question: is the peer who\n     * completed this handshake the person we meant to talk to? For a 1:1 chat\n     * only a human can answer it, which is why _setVerifiedStatus refuses every\n     * SAS-shaped transition that no human confirmed.\n     *\n     * A mesh link inside a group has already answered it, earlier and by a\n     * different route. The descriptor that opened this connection was signed\n     * with a group identity key; that key's fingerprint is named in a roster\n     * signed by the admin; and the group's safety code \u2014 which every member\n     * compared out of band before any of this was allowed to start \u2014 covers\n     * that exact set of fingerprints. Asking the two people to also read seven\n     * digits at each other for every one of up to twenty-eight pairs would not\n     * add a check, it would repeat one they already did, badly.\n     *\n     * So the guarantee is not weakened here, it is moved: the caller must have\n     * verified the group signature over the peer's descriptor BEFORE the\n     * transport was created. Everything this method can check for itself, it\n     * does \u2014 the session must be SBQ2, its in-band exchange must have completed,\n     * and the peer must have proved possession of the identity key that the\n     * commitment in that descriptor bound it to. A session that has not got that\n     * far is refused outright rather than released on the caller's word.\n     *\n     * @param {string} reason short audit label for why the group vouched\n     */\n    markGroupLinkVerified(reason = 'group_roster_signature') {\n        const st = this._sbq2;\n        if (!this._isSbq2() || !st || !st.completed || !st.proofVerified || !st.keysDerived) {\n            throw new Error('Group link cannot be released: the in-band handshake has not completed');\n        }\n        if (!this.encryptionKey || !this.macKey) {\n            throw new Error('Group link cannot be released: session keys are missing');\n        }\n        if (this.isVerified) return true;\n\n        // There is no peer confirmation to wait for and none to send: both sides\n        // reach this independently, from the same roster.\n        this.localVerificationConfirmed = true;\n        this.remoteVerificationConfirmed = true;\n        this.bothVerificationsConfirmed = true;\n\n        this._setVerifiedStatus(true, 'GROUP_ROSTER_SIGNATURE', {\n            reason,\n            timestamp: Date.now()\n        });\n        this._enforceVerificationGate('group_link_release', false);\n        this.onStatusChange?.('verified');\n        try { this.processMessageQueue(); } catch (_) {}\n        return true;\n    }\n\n    /**\n     *   Create AAD (Additional Authenticated Data) for file messages\n     * This binds file messages to the current session and prevents replay attacks\n     */\n    _createFileMessageAAD(messageType, messageData = null) {\n        // Verify that _createMessageAAD method is available\n        if (typeof this._createMessageAAD !== 'function') {\n            throw new Error('_createMessageAAD method is not available in _createFileMessageAAD. Manager may not be fully initialized.');\n        }\n        // Use the unified AAD creation method with file message flag\n        return this._createMessageAAD(messageType, messageData, true);\n    }\n\n    /**\n     *   Validate AAD for file messages\n     * This ensures file messages are bound to the correct session\n     */\n    _validateFileMessageAAD(aadString, expectedMessageType = null) {\n        try {\n            const aad = JSON.parse(aadString);\n            \n            // Validate session binding\n            if (aad.sessionId !== (this.currentSession?.sessionId || 'unknown')) {\n                throw new Error('AAD sessionId mismatch - possible replay attack');\n            }\n            \n            if (aad.keyFingerprint !== (this.keyFingerprint || 'unknown')) {\n                throw new Error('AAD keyFingerprint mismatch - possible key substitution attack');\n            }\n            \n            // Validate message type if specified\n            if (expectedMessageType && aad.messageType !== expectedMessageType) {\n                throw new Error(`AAD messageType mismatch - expected ${expectedMessageType}, got ${aad.messageType}`);\n            }\n            \n            // Validate timestamp (prevent very old messages)\n            const now = Date.now();\n            const messageAge = now - aad.timestamp;\n            if (messageAge > 1800000) { // 30 minutes for better UX\n                throw new Error('AAD timestamp too old - possible replay attack');\n            }\n            \n            return aad;\n        } catch (error) {\n            // Never log the raw AAD: it carries sessionId and keyFingerprint.\n            // Length is enough to diagnose malformed input without leaking secrets.\n            this._secureLog('error', 'AAD validation failed', {\n                error: error.message,\n                aadLength: typeof aadString === 'string' ? aadString.length : 0\n            });\n            throw new Error(`AAD validation failed: ${error.message}`);\n        }\n    }\n\n    // ============================================\n    // ANTI-REPLAY / SEQUENCE VALIDATION\n    // These belong to the connection, not to key storage: they read and mutate\n    // this.replayWindow / this.expectedSequenceNumber / this.currentSession.\n    // ============================================\n\n    // Method _generateNextSequenceNumber moved to constructor area for early availability\n\n    /**\n     *   Validate incoming message sequence number\n     * This prevents replay attacks and ensures message ordering\n     */\n    _validateIncomingSequenceNumber(receivedSeq, context = 'unknown') {\n        try {\n            if (!this.replayProtectionEnabled) {\n                return true; // Skip validation if disabled\n            }\n\n            // SECURITY: a missing or non-numeric sequence number must fail closed.\n            // Both range checks below compare with `<` / `>`, and any comparison\n            // against undefined/NaN is false \u2014 so without this guard an omitted\n            // sequence number would sail past every check and land in the replay\n            // window as a valid entry, silently disabling replay protection.\n            if (typeof receivedSeq !== 'number' || !Number.isFinite(receivedSeq)) {\n                this._secureLog('warn', 'Missing or non-numeric sequence number - rejecting', {\n                    receivedType: typeof receivedSeq,\n                    context: context,\n                    timestamp: Date.now()\n                });\n                return false;\n            }\n\n            // Check if sequence number is within acceptable range\n            if (receivedSeq < this.expectedSequenceNumber - this.replayWindowSize) {\n                this._secureLog('warn', 'Sequence number too old - possible replay attack', {\n                    received: receivedSeq,\n                    expected: this.expectedSequenceNumber,\n                    context: context,\n                    timestamp: Date.now()\n                });\n                return false;\n            }\n\n            // Check if sequence number is too far ahead (DoS protection)\n            if (receivedSeq > this.expectedSequenceNumber + this.maxSequenceGap) {\n                this._secureLog('warn', 'Sequence number gap too large - possible DoS attack', {\n                    received: receivedSeq,\n                    expected: this.expectedSequenceNumber,\n                    gap: receivedSeq - this.expectedSequenceNumber,\n                    context: context,\n                    timestamp: Date.now()\n                });\n                return false;\n            }\n\n            // Check if sequence number is already in replay window\n            if (this.replayWindow.has(receivedSeq)) {\n                this._secureLog('warn', 'Duplicate sequence number detected - replay attack', {\n                    received: receivedSeq,\n                    context: context,\n                    timestamp: Date.now()\n                });\n                return false;\n            }\n\n            // Add to replay window\n            this.replayWindow.add(receivedSeq);\n            \n            // Maintain sliding window size\n            if (this.replayWindow.size > this.replayWindowSize) {\n                const oldestSeq = Math.min(...this.replayWindow);\n                this.replayWindow.delete(oldestSeq);\n            }\n\n            // Update expected sequence number if this is the next expected\n            if (receivedSeq === this.expectedSequenceNumber) {\n                this.expectedSequenceNumber++;\n                \n                // Clean up replay window entries that are no longer needed\n                while (this.replayWindow.has(this.expectedSequenceNumber - this.replayWindowSize - 1)) {\n                    this.replayWindow.delete(this.expectedSequenceNumber - this.replayWindowSize - 1);\n                }\n            }\n\n            this._secureLog('debug', 'Sequence number validation successful', {\n                received: receivedSeq,\n                expected: this.expectedSequenceNumber,\n                context: context,\n                timestamp: Date.now()\n            });\n\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'Sequence number validation failed', {\n                error: error.message,\n                context: context,\n                timestamp: Date.now()\n            });\n            return false;\n        }\n    }\n\n    // Method _createMessageAAD moved to constructor area for early availability\n\n    /**\n     *   Validate message AAD with sequence number\n     * This ensures message integrity and prevents replay attacks\n     */\n    _validateMessageAAD(aadString, expectedMessageType = null) {\n        try {\n            const aad = JSON.parse(aadString);\n            \n            // Validate session binding\n            if (aad.sessionId !== (this.currentSession?.sessionId || 'unknown')) {\n                throw new Error('AAD sessionId mismatch - possible replay attack');\n            }\n            \n            if (aad.keyFingerprint !== (this.keyFingerprint || 'unknown')) {\n                throw new Error('AAD keyFingerprint mismatch - possible key substitution attack');\n            }\n            \n            //   Validate sequence number\n            if (!this._validateIncomingSequenceNumber(aad.sequenceNumber, aad.messageType)) {\n                throw new Error('Sequence number validation failed - possible replay or DoS attack');\n            }\n            \n            // Validate message type if specified\n            if (expectedMessageType && aad.messageType !== expectedMessageType) {\n                throw new Error(`AAD messageType mismatch - expected ${expectedMessageType}, got ${aad.messageType}`);\n            }\n            \n            return aad;\n        } catch (error) {\n            // Never log the raw AAD: it carries sessionId and keyFingerprint.\n            // Length is enough to diagnose malformed input without leaking secrets.\n            this._secureLog('error', 'AAD validation failed', {\n                error: error.message,\n                aadLength: typeof aadString === 'string' ? aadString.length : 0\n            });\n            throw new Error(`AAD validation failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Get anti-replay protection status\n     * This shows the current state of replay protection\n     */\n    getAntiReplayStatus() {\n        const status = {\n            replayProtectionEnabled: this.replayProtectionEnabled,\n            replayWindowSize: this.replayWindowSize,\n            currentReplayWindowSize: this.replayWindow.size,\n            sequenceNumber: this.sequenceNumber,\n            expectedSequenceNumber: this.expectedSequenceNumber,\n            maxSequenceGap: this.maxSequenceGap,\n            replayWindowEntries: Array.from(this.replayWindow).sort((a, b) => a - b)\n        };\n\n        this._secureLog('info', 'Anti-replay status retrieved', status);\n        return status;\n    }\n\n    /**\n     *   Configure anti-replay protection\n     * This allows fine-tuning of replay protection parameters\n     */\n    configureAntiReplayProtection(config) {\n        try {\n            if (config.windowSize !== undefined) {\n                if (config.windowSize < 16 || config.windowSize > 1024) {\n                    throw new Error('Replay window size must be between 16 and 1024');\n                }\n                this.replayWindowSize = config.windowSize;\n            }\n\n            if (config.maxGap !== undefined) {\n                if (config.maxGap < 10 || config.maxGap > 1000) {\n                    throw new Error('Max sequence gap must be between 10 and 1000');\n                }\n                this.maxSequenceGap = config.maxGap;\n            }\n\n            if (config.enabled !== undefined) {\n                this.replayProtectionEnabled = config.enabled;\n            }\n\n            this._secureLog('info', 'Anti-replay protection configured', config);\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'Failed to configure anti-replay protection', { error: error.message });\n            return false;\n        }\n    }\n\n    /**\n     * Get real security level with actual cryptographic tests\n     * This provides real-time verification of security features\n     *\n     * Returns the scored security level (level / score / passedChecks / \u2026) with\n     * the per-feature flags merged in. The header renders `level` and `score`\n     * directly, so this MUST carry them \u2014 returning only the feature flags makes\n     * the header display \"Secure undefined%\".\n     */\n    async getRealSecurityLevel() {\n        try {\n            const featureFlags = {\n                // Basic security features\n                ecdhKeyExchange: !!this.ecdhKeyPair,\n                ecdsaSignatures: !!this.ecdsaKeyPair,\n                aesEncryption: !!this.encryptionKey,\n                messageIntegrity: !!this.hmacKey,\n\n                // Advanced security features - using the exact property names expected by EnhancedSecureCryptoUtils\n                replayProtection: this.replayProtectionEnabled,\n                // Both fingerprints must be known for the SAS to bind this session\n                // to this pair of endpoints; having only our own proves nothing.\n                dtlsFingerprint: !!(this.expectedDTLSFingerprint && this._peerDTLSFingerprint),\n                // The SAS matters once the USER has compared it, not once we have\n                // computed it \u2014 an unconfirmed code is not authentication.\n                sasCode: !!this.verificationCode && this.localVerificationConfirmed === true,\n                metadataProtection: true, // Always enabled\n                trafficObfuscation: true, // Always enabled\n                // True only while the Double Ratchet is actually running. A peer on\n                // an older build negotiates it away, and the panel must show that\n                // rather than the capability we shipped.\n                // Optional-called on purpose: a status report must never throw and\n                // take down the panel it exists to populate. Unknown reads as off.\n                perfectForwardSecrecy: this.isRatchetActive?.() === true,\n\n                // Rate limiting\n                rateLimiter: true, // Always enabled\n\n                // Additional info\n                connectionId: this.connectionId,\n                keyFingerprint: this.keyFingerprint,\n                currentSecurityLevel: 'maximum',\n                timestamp: Date.now()\n            };\n\n            // Run the same verified scoring the rest of the app uses, so every\n            // consumer sees one consistent number.\n            const scored = await this.calculateAndReportSecurityLevel();\n\n            if (!scored) {\n                // Not ready yet (not connected/verified, or keys still missing).\n                // isRealData:false tells the UI to keep its previous value rather\n                // than render a placeholder as if it were a measurement.\n                return {\n                    ...featureFlags,\n                    level: 'INITIALIZING',\n                    score: 0,\n                    isRealData: false\n                };\n            }\n\n            return { ...scored, ...featureFlags };\n        } catch (error) {\n            this._secureLog('error', 'Failed to calculate real security level', { error: error.message });\n            throw error;\n        }\n    }\n\n\n\n    /**\n     *   Extract DTLS fingerprint from SDP\n     * This is essential for MITM protection\n     */\n    _extractDTLSFingerprintFromSDP(sdp) {\n        try {\n            if (!sdp || typeof sdp !== 'string') {\n                throw new Error('Invalid SDP provided');\n            }\n\n            // Look for a=fingerprint lines in SDP with more flexible regex\n            const fingerprintRegex = /a=fingerprint:([a-zA-Z0-9-]+)\\s+([A-Fa-f0-9:]+)/g;\n            const fingerprints = [];\n            let match;\n\n            while ((match = fingerprintRegex.exec(sdp)) !== null) {\n                fingerprints.push({\n                    algorithm: match[1].toLowerCase(),\n                    fingerprint: match[2].trim()\n                });\n            }\n\n            if (fingerprints.length === 0) {\n                // Try alternative fingerprint format\n                const altFingerprintRegex = /fingerprint\\s*=\\s*([a-zA-Z0-9-]+)\\s+([A-Fa-f0-9:]+)/gi;\n                while ((match = altFingerprintRegex.exec(sdp)) !== null) {\n                    fingerprints.push({\n                        algorithm: match[1].toLowerCase(),\n                        fingerprint: match[2].trim()\n                    });\n                }\n            }\n\n            if (fingerprints.length === 0) {\n                this._secureLog('warn', 'No DTLS fingerprints found in SDP - this may be normal for some WebRTC implementations', {\n                    sdpLength: sdp.length,\n                    sdpPreview: sdp.substring(0, 200) + '...'\n                });\n                throw new Error('No DTLS fingerprints found in SDP');\n            }\n\n            // Prefer SHA-256, then choose lexicographically so multiple SDP\n            // fingerprint lines resolve to the same deterministic primary value.\n            const primaryFingerprint = [...fingerprints].sort((a, b) => {\n                const aIsSha256 = a.algorithm === 'sha-256';\n                const bIsSha256 = b.algorithm === 'sha-256';\n                if (aIsSha256 !== bIsSha256) {\n                    return aIsSha256 ? -1 : 1;\n                }\n\n                const algorithmComparison = a.algorithm.localeCompare(b.algorithm);\n                if (algorithmComparison !== 0) {\n                    return algorithmComparison;\n                }\n\n                return a.fingerprint.localeCompare(b.fingerprint);\n            })[0];\n\n            return primaryFingerprint.fingerprint;\n        } catch (error) {\n            this._secureLog('error', 'Failed to extract DTLS fingerprint from SDP', { \n                error: error.message,\n                sdpLength: sdp?.length || 0\n            });\n            throw new Error(`DTLS fingerprint extraction failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Validate DTLS fingerprint against expected value\n     * This prevents MITM attacks by ensuring the remote peer has the expected certificate\n     */\n    async _validateDTLSFingerprint(receivedFingerprint, expectedFingerprint, context = 'unknown') {\n        try {\n            if (!receivedFingerprint || !expectedFingerprint) {\n                throw new Error('Missing fingerprint for validation');\n            }\n\n            // Normalize fingerprints (remove colons, convert to lowercase)\n            const normalizedReceived = receivedFingerprint.toLowerCase().replace(/:/g, '');\n            const normalizedExpected = expectedFingerprint.toLowerCase().replace(/:/g, '');\n\n            // SECURITY: this is a comparison, and nothing more \u2014 it must never\n            // change verification state. Matching fingerprints prove continuity of\n            // the DTLS identity across a renegotiation; they say nothing about\n            // whether the user compared the SAS out of band, which is the only\n            // thing that distinguishes the intended peer from anyone else who\n            // completed the handshake. Verification lives in _setVerifiedStatus(),\n            // which enforces that. Do not add a shortcut here.\n            if (normalizedReceived !== normalizedExpected) {\n                this._secureLog('error', 'DTLS fingerprint mismatch - possible MITM attack', {\n                    context: context,\n                    timestamp: Date.now()\n                });\n                \n                throw new Error(`DTLS fingerprint mismatch - possible MITM attack in ${context}`);\n            }\n\n            this._secureLog('info', 'DTLS fingerprint validation successful', {\n                context: context,\n                timestamp: Date.now()\n            });\n\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'DTLS fingerprint validation failed', { \n                error: error.message, \n                context: context \n            });\n            throw error;\n        }\n    }\n\n    /**\n     *   Compute SAS (Short Authentication String) for MITM protection\n     * Uses HKDF with DTLS fingerprints to generate a stable 7-digit verification code\n     * @param {ArrayBuffer|Uint8Array} keyMaterialRaw - Shared secret or key fingerprint data\n     * @param {string} localFP - Local DTLS fingerprint\n     * @param {string} remoteFP - Remote DTLS fingerprint\n     * @returns {Promise<string>} 7-digit SAS code\n     */\n    async _computeSAS(keyMaterialRaw, localFP, remoteFP) {\n        try {\n            \n            if (!keyMaterialRaw) {\n                const missing = [];\n                if (!keyMaterialRaw) missing.push('keyMaterialRaw');\n                throw new Error(`Missing required parameters for SAS computation: ${missing.join(', ')}`);\n            }\n\n            const enc = new TextEncoder();\n            const normalizeFingerprintForSAS = (fingerprint, label) => {\n                if (typeof fingerprint !== 'string' || fingerprint.trim().length === 0) {\n                    throw new Error(\n                        `Security error: ${label} must be a non-empty DTLS fingerprint string for SAS computation`\n                    );\n                }\n\n                return fingerprint.trim().toLowerCase();\n            };\n\n            const normalizedLocalFP = normalizeFingerprintForSAS(localFP, 'localFP');\n            const normalizedRemoteFP = normalizeFingerprintForSAS(remoteFP, 'remoteFP');\n\n            const salt = enc.encode(\n                'webrtc-sas|' + [normalizedLocalFP, normalizedRemoteFP].sort().join('|')\n            );\n\n            let keyBuffer;\n            if (keyMaterialRaw instanceof ArrayBuffer) {\n                keyBuffer = keyMaterialRaw;\n            } else if (keyMaterialRaw instanceof Uint8Array) {\n                keyBuffer = keyMaterialRaw.buffer;\n            } else if (typeof keyMaterialRaw === 'string') {\n                // \u0415\u0441\u043B\u0438 \u044D\u0442\u043E \u0441\u0442\u0440\u043E\u043A\u0430 (\u043D\u0430\u043F\u0440\u0438\u043C\u0435\u0440, keyFingerprint), \u0434\u0435\u043A\u043E\u0434\u0438\u0440\u0443\u0435\u043C \u0435\u0451\n                // \u041F\u0440\u0435\u0434\u043F\u043E\u043B\u0430\u0433\u0430\u0435\u043C, \u0447\u0442\u043E \u044D\u0442\u043E hex \u0441\u0442\u0440\u043E\u043A\u0430\n                const hexString = keyMaterialRaw.replace(/:/g, '').replace(/\\s/g, '');\n                const bytes = new Uint8Array(hexString.length / 2);\n                for (let i = 0; i < hexString.length; i += 2) {\n                    bytes[i / 2] = parseInt(hexString.substr(i, 2), 16);\n                }\n                keyBuffer = bytes.buffer;\n            } else {\n                throw new Error('Invalid keyMaterialRaw type');\n            }\n\n            // \u0418\u0441\u043F\u043E\u043B\u044C\u0437\u0443\u0435\u043C HKDF(SHA-256) \u0447\u0442\u043E\u0431\u044B \u043F\u043E\u043B\u0443\u0447\u0438\u0442\u044C \u0441\u0442\u0430\u0431\u0438\u043B\u044C\u043D\u044B\u0435 64 \u0431\u0438\u0442\u0430 \u044D\u043D\u0442\u0440\u043E\u043F\u0438\u0438 \u0434\u043B\u044F \u043A\u043E\u0434\u0430\n            const key = await crypto.subtle.importKey(\n                'raw',\n                keyBuffer,\n                'HKDF',\n                false,\n                ['deriveBits']\n            );\n\n            const info = enc.encode('p2p-sas-v1');\n            const bits = await crypto.subtle.deriveBits(\n                { name: 'HKDF', hash: 'SHA-256', salt, info },\n                key,\n                64 // 64 \u0431\u0438\u0442\u0430 \u0434\u043E\u0441\u0442\u0430\u0442\u043E\u0447\u043D\u043E \u0434\u043B\u044F 6\u20137 \u0437\u043D\u0430\u043A\u043E\u0432\n            );\n\n            const dv = new DataView(bits);\n            const n = (dv.getUint32(0) ^ dv.getUint32(4)) >>> 0;\n            \n            // Deterministic SAS: both peers derive the same display code from the\n            // same shared key material and canonicalized DTLS fingerprints.\n            const sasCode = String(n % 10_000_000).padStart(7, '0');\n\n\n            this._secureLog('info', 'SAS code computed successfully', {\n                localFP: normalizedLocalFP.substring(0, 16) + '...',\n                remoteFP: normalizedRemoteFP.substring(0, 16) + '...',\n                sasLength: sasCode.length,\n                timestamp: Date.now()\n            });\n\n            return sasCode;\n        } catch (error) {\n            this._secureLog('error', 'SAS computation failed', {\n                error: error.message,\n                keyMaterialType: typeof keyMaterialRaw,\n                hasLocalFP: !!localFP,\n                hasRemoteFP: !!remoteFP,\n                timestamp: Date.now()\n            });\n            throw new Error(`SAS computation failed: ${error.message}`);\n        }\n    }\n\n    // ========================================================================\n    // SBQ2 \u2014 compact descriptor + in-band key exchange\n    // ========================================================================\n\n    /**\n     * Announce a lifecycle change to the application, unless this connection is\n     * muted. See `_emitGlobalEvents` in the constructor for why one would be.\n     */\n    _dispatchAppEvent(event) {\n        // Called as `this._dispatchAppEvent?.(...)` everywhere, deliberately.\n        // Announcing a lifecycle change is the least important thing any of\n        // these paths does \u2014 several of them are teardown \u2014 and an announcement\n        // must never be what stops a connection from being cleaned up.\n        if (!this._emitGlobalEvents) return false;\n        try {\n            return document.dispatchEvent(event);\n        } catch (_) {\n            return false;\n        }\n    }\n\n    /** True once this connection has latched onto the SBQ2 handshake. */\n    _isSbq2() { return this._handshakeMode === 'sbq2'; }\n\n    /**\n     * Latch the handshake format for this connection.\n     *\n     * Called with the format of the first descriptor of the session. Calling it\n     * again with a different value is a bug or an attack, and is refused: this\n     * is the single point that makes \"no downgrade inside a session\" true rather\n     * than merely intended.\n     */\n    _latchHandshakeMode(mode) {\n        if (this._handshakeMode && this._handshakeMode !== mode) {\n            throw new Error(\n                `handshake format cannot change mid-session (${this._handshakeMode} -> ${mode})`\n            );\n        }\n        this._handshakeMode = mode;\n    }\n\n    _sbq2State() {\n        if (!this._sbq2) {\n            this._sbq2 = {\n                role: null,              // KX_ROLE.OFFER | KX_ROLE.ANSWER\n                localDescriptor: null,   // Uint8Array, our descriptor verbatim\n                remoteDescriptor: null,  // Uint8Array, peer's descriptor verbatim\n                localBlob: null,\n                remoteBlob: null,\n                remoteCommitment: null,  // from the peer's descriptor\n                transcript: null,\n                peerEcdhKey: null,\n                peerEcdsaKey: null,\n                blobSent: false,\n                proofSent: false,\n                proofVerified: false,\n                keysDerived: false,\n                pendingProof: null,      // proof that arrived before the transcript existed\n                completed: false,\n                timer: null,\n                startedAt: 0,\n            };\n        }\n        return this._sbq2;\n    }\n\n    /**\n     * Fail closed.\n     *\n     * Every SBQ2 failure lands here: there is no path that logs a warning and\n     * carries on with a weaker session, and no path that retries as SB1. The\n     * connection is torn down and the user is told, because a handshake that\n     * went wrong is exactly the case where continuing is worst.\n     */\n    _sbq2Abort(code, userMessage) {\n        const st = this._sbq2;\n        if (st?.timer) { clearTimeout(st.timer); st.timer = null; }\n        this._secureLog('error', 'SBQ2 handshake aborted', { code });\n        try { this.deliverMessageToUI(userMessage, 'system'); } catch (_) {}\n        try { this.onStatusChange?.('failed'); } catch (_) {}\n        try { this.disconnect(); } catch (_) {}\n    }\n\n    /** SPKI bytes for a public CryptoKey. */\n    async _exportSpki(key) {\n        return new Uint8Array(await crypto.subtle.exportKey('spki', key));\n    }\n\n    /**\n     * Build the key blob for this side and the commitment that goes in the\n     * descriptor. Called while creating our descriptor, so the commitment is\n     * fixed before anything is shown to the user.\n     */\n    async _sbq2BuildLocalBlob(role) {\n        if (!this.ecdhKeyPair?.publicKey || !this.ecdsaKeyPair?.publicKey) {\n            throw new Error('SBQ2: key pairs are not ready');\n        }\n        const blob = encodeKeyBlob({\n            role,\n            ecdhSpki: await this._exportSpki(this.ecdhKeyPair.publicKey),\n            ecdsaSpki: await this._exportSpki(this.ecdsaKeyPair.publicKey),\n        });\n        const digest = async (b) => new Uint8Array(await crypto.subtle.digest('SHA-256', b));\n        const commitment = await sbq2CommitBlob(digest, blob);\n        const st = this._sbq2State();\n        st.role = role;\n        st.localBlob = blob;\n        return { blob, commitment };\n    }\n\n    /**\n     * Turn our gathered localDescription into a compact descriptor.\n     * @returns {{bytes: Uint8Array, text: string}}\n     */\n    async _sbq2BuildDescriptor(type, { bindingTag = null, lifetimeMs = 10 * 60 * 1000 } = {}) {\n        const sdp = this.peerConnection?.localDescription?.sdp;\n        if (!sdp) throw new Error('SBQ2: no local description to encode');\n\n        const role = type === SBQ2_TYPE.OFFER ? KX_ROLE.OFFER : KX_ROLE.ANSWER;\n        const { commitment } = await this._sbq2BuildLocalBlob(role);\n\n        const raw = sbq2ParseSdp(sdp);\n        const bytes = sbq2Encode({\n            type,\n            expiresAtMs: Date.now() + lifetimeMs,\n            sdpFields: { ...raw, candidates: sbq2PruneCandidates(raw.candidates) },\n            commitment,\n            ...(type === SBQ2_TYPE.ANSWER ? { bindingTag } : {}),\n        });\n\n        const st = this._sbq2State();\n        st.localDescriptor = bytes;\n\n        this._secureLog('info', 'SBQ2 descriptor built', {\n            type: type === SBQ2_TYPE.OFFER ? 'offer' : 'answer',\n            bytes: bytes.length,\n            candidates: sbq2PruneCandidates(raw.candidates).length,\n        });\n\n        return { bytes, text: sbq2EncodeText(bytes) };\n    }\n\n    /**\n     * Parse and adopt a peer descriptor. Throws on anything the strict decoder\n     * refuses \u2014 version, reserved values, unknown TLV, trailing bytes, expiry.\n     */\n    _sbq2AdoptRemoteDescriptor(bytes, expectedType) {\n        const desc = sbq2Decode(bytes);\n        if (desc.type !== expectedType) {\n            throw new Error(\n                `expected an ${expectedType === SBQ2_TYPE.OFFER ? 'invitation' : 'answer'}, got the other kind`\n            );\n        }\n        if (!desc.commitment) {\n            // Without a commitment there is nothing binding the in-band key\n            // material to the code the user scanned, which is the entire basis\n            // for moving that material in band. Refuse rather than proceed on\n            // the DTLS fingerprint alone.\n            throw new Error('the invitation carries no key commitment');\n        }\n        const st = this._sbq2State();\n        st.remoteDescriptor = bytes;\n        st.remoteCommitment = desc.commitment;\n        return desc;\n    }\n\n    /**\n     * Run the in-band key exchange. Called once, as soon as the DataChannel\n     * opens, before anything else is allowed to use the channel.\n     */\n    async _runSbq2KeyExchange() {\n        const st = this._sbq2State();\n        if (st.completed || st.blobSent) return;\n        st.startedAt = Date.now();\n\n        if (!st.localBlob || !st.localDescriptor || !st.remoteDescriptor || !st.remoteCommitment) {\n            this._sbq2Abort('incomplete_state',\n                'The secure handshake could not start because the connection setup is incomplete. Please start a new invitation.');\n            return;\n        }\n\n        st.timer = setTimeout(() => {\n            if (!st.completed) {\n                this._sbq2Abort('timeout',\n                    'The other side did not complete the secure handshake in time. Please try connecting again.');\n            }\n        }, EnhancedSecureWebRTCManager.SBQ2_KEY_EXCHANGE_TIMEOUT_MS);\n\n        try {\n            this.dataChannel.send(JSON.stringify({\n                type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_BLOB,\n                v: 2,\n                blob: window.EnhancedSecureCryptoUtils.arrayBufferToBase64(st.localBlob.buffer.slice(\n                    st.localBlob.byteOffset, st.localBlob.byteOffset + st.localBlob.byteLength)),\n            }));\n            st.blobSent = true;\n            this._secureLog('info', 'SBQ2 key blob sent', { bytes: st.localBlob.length });\n        } catch (error) {\n            this._sbq2Abort('blob_send_failed',\n                'The secure handshake could not be sent. Please try connecting again.');\n        }\n    }\n\n    /**\n     * Handle the two in-band handshake frames. These are the only frames\n     * accepted before keys exist, so everything they touch is validated here and\n     * nothing is acted on before the commitment check passes.\n     */\n    async _sbq2HandleHandshakeFrame(parsed) {\n        const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n        const st = this._sbq2State();\n\n        if (!this._isSbq2()) {\n            // An SB1 session must never accept these: it has no commitment to\n            // check them against, which would make them unauthenticated key\n            // material.\n            this._secureLog('error', 'Rejected SBQ2 handshake frame on a non-SBQ2 session', {\n                messageType: parsed?.type,\n            });\n            return;\n        }\n\n        try {\n            if (parsed.type === T.KEY_BLOB) {\n                if (st.remoteBlob) {\n                    // A second blob would mean either a confused peer or an\n                    // attempt to replace key material after it was accepted.\n                    this._sbq2Abort('duplicate_blob',\n                        'The secure handshake was sent twice. The connection has been closed for safety.');\n                    return;\n                }\n                const bytes = new Uint8Array(window.EnhancedSecureCryptoUtils.base64ToArrayBuffer(String(parsed.blob || '')));\n\n                // COMMITMENT FIRST. Nothing below this line may run against\n                // unverified bytes: not decodeKeyBlob, not importKey.\n                await verifyBlobCommitment(crypto.subtle, bytes, st.remoteCommitment);\n\n                const blob = decodeKeyBlob(bytes);\n                const expectedRole = st.role === KX_ROLE.OFFER ? KX_ROLE.ANSWER : KX_ROLE.OFFER;\n                if (blob.role !== expectedRole) {\n                    this._sbq2Abort('role_mismatch',\n                        'The other side sent the wrong kind of handshake. The connection has been closed for safety.');\n                    return;\n                }\n\n                st.remoteBlob = bytes;\n                st.peerEcdhKey = await crypto.subtle.importKey(\n                    'spki', blob.ecdhSpki, { name: 'ECDH', namedCurve: 'P-384' }, false, []);\n                st.peerEcdsaKey = await crypto.subtle.importKey(\n                    'spki', blob.ecdsaSpki, { name: 'ECDSA', namedCurve: 'P-384' }, false, ['verify']);\n\n                await this._sbq2CompleteExchange();\n                return;\n            }\n\n            if (parsed.type === T.KEY_PROOF) {\n                const sig = new Uint8Array(window.EnhancedSecureCryptoUtils.base64ToArrayBuffer(String(parsed.sig || '')));\n                if (!st.transcript || !st.peerEcdsaKey) {\n                    // The proof can legitimately overtake our own processing;\n                    // hold it until the transcript exists, then verify.\n                    st.pendingProof = sig;\n                    return;\n                }\n                await this._sbq2VerifyProof(sig);\n                return;\n            }\n        } catch (error) {\n            const code = error?.code || 'handshake_failed';\n            const message = code === 'commitment_mismatch'\n                ? 'The key material does not match the invitation you scanned. This can mean someone tampered with the connection, so it has been closed.'\n                : 'The secure handshake failed. The connection has been closed for safety.';\n            this._sbq2Abort(code, message);\n        }\n    }\n\n    /**\n     * Both blobs are in hand and verified: define the transcript, derive\n     * everything from it, and prove possession of the identity key.\n     */\n    async _sbq2CompleteExchange() {\n        const st = this._sbq2State();\n        if (st.keysDerived || !st.remoteBlob || !st.localBlob) return;\n\n        // Ratchet capability is IMPLIED by the format, not advertised in it.\n        //\n        // The SB1 descriptor carries `dr` because a 5.6.x peer might not know\n        // about the ratchet, and there is no server to roll both ends at once.\n        // SBQ2 has no such ambiguity: it postdates RATCHET_VERSION 1 entirely, so\n        // anything that can produce this handshake can ratchet. Saying so here\n        // costs zero descriptor bytes and \u2014 more importantly \u2014 stops\n        // _initializeRatchet from taking its silent \"peer is old, fall back to\n        // static keys\" path, which is a downgrade nothing in an SBQ2 session\n        // should ever reach.\n        this._peerSupportsRatchet = true;\n\n        const isOffer = st.role === KX_ROLE.OFFER;\n        st.transcript = buildTranscript({\n            offerDescriptor: isOffer ? st.localDescriptor : st.remoteDescriptor,\n            answerDescriptor: isOffer ? st.remoteDescriptor : st.localDescriptor,\n            offerBlob: isOffer ? st.localBlob : st.remoteBlob,\n            answerBlob: isOffer ? st.remoteBlob : st.localBlob,\n        });\n\n        // The salt is derived, never sent. That binds every session key to both\n        // DTLS fingerprints and every candidate in both descriptors.\n        this.sessionSalt = await deriveTranscriptSalt(crypto.subtle, st.transcript);\n\n        this.peerPublicKey = st.peerEcdhKey;\n        this.peerECDHPublicKey = st.peerEcdhKey;\n\n        const derivedKeys = await window.EnhancedSecureCryptoUtils.deriveSharedKeys(\n            this.ecdhKeyPair.privateKey, st.peerEcdhKey, this.sessionSalt);\n\n        await this._setEncryptionKeys(\n            derivedKeys.messageKey, derivedKeys.macKey, derivedKeys.metadataKey, derivedKeys.fingerprint);\n\n        await this._initializeRatchet(derivedKeys, /* isInitiator */ isOffer);\n        st.keysDerived = true;\n\n        // Identity proof: one signature over the whole transcript, replacing the\n        // old challenge/response. Sent after our keys exist so a failure here\n        // cannot leave us half-configured.\n        const sig = new Uint8Array(await crypto.subtle.sign(\n            { name: 'ECDSA', hash: 'SHA-384' }, this.ecdsaKeyPair.privateKey, proofPayload(st.transcript)));\n        this.dataChannel.send(JSON.stringify({\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_PROOF,\n            sig: window.EnhancedSecureCryptoUtils.arrayBufferToBase64(sig.buffer),\n        }));\n        st.proofSent = true;\n\n        if (st.pendingProof) {\n            const held = st.pendingProof;\n            st.pendingProof = null;\n            await this._sbq2VerifyProof(held);\n        }\n    }\n\n    /** Verify the peer's transcript signature, then release the session. */\n    async _sbq2VerifyProof(sig) {\n        const st = this._sbq2State();\n        if (st.proofVerified) return;\n\n        const ok = await crypto.subtle.verify(\n            { name: 'ECDSA', hash: 'SHA-384' }, st.peerEcdsaKey, sig, proofPayload(st.transcript));\n        if (!ok) {\n            this._sbq2Abort('bad_proof',\n                'The other side could not prove it owns its identity key. The connection has been closed for safety.');\n            return;\n        }\n        st.proofVerified = true;\n\n        // SAS over the transcript. Everything that travelled out of band, in\n        // both directions, plus both blobs, is inside these digits.\n        this.verificationCode = await computeTranscriptSas(crypto.subtle, {\n            ecdhPrivateKey: this.ecdhKeyPair.privateKey,\n            peerEcdhPublicKey: st.peerEcdhKey,\n            transcript: st.transcript,\n        });\n\n        const localFP = this.expectedDTLSFingerprint;\n        const remoteFP = this._peerDTLSFingerprint;\n        if (localFP && remoteFP) this._setSASMaterialReady(localFP, remoteFP);\n\n        st.completed = true;\n        if (st.timer) { clearTimeout(st.timer); st.timer = null; }\n\n        this.securityFeatures.hasMutualAuth = true;\n        this.securityFeatures.hasMetadataProtection = true;\n        this.securityFeatures.hasEnhancedReplayProtection = true;\n\n        this._secureLog('info', 'SBQ2 in-band key exchange complete', {\n            elapsedMs: Date.now() - st.startedAt,\n            ratchetActive: this.isRatchetActive?.() === true,\n        });\n\n        try { this.onKeyExchange?.(this.keyFingerprint); } catch (_) {}\n        this._notifyVerificationReadyIfPossible();\n        this.initiateVerification();\n    }\n\n    /**\n     * UTILITY: Decode hex keyFingerprint to Uint8Array for SAS computation\n     * @param {string} hexString - Hex encoded keyFingerprint (e.g., \"aa:bb:cc:dd\")\n     * @returns {Uint8Array} Decoded bytes\n     */\n    _decodeKeyFingerprint(hexString) {\n        try {\n            if (!hexString || typeof hexString !== 'string') {\n                throw new Error('Invalid hex string provided');\n            }\n\n            // Use the utility from EnhancedSecureCryptoUtils\n            return window.EnhancedSecureCryptoUtils.hexToUint8Array(hexString);\n        } catch (error) {\n            this._secureLog('error', 'Key fingerprint decoding failed', {\n                error: error.message,\n                inputType: typeof hexString,\n                inputLength: hexString?.length || 0\n            });\n            throw new Error(`Key fingerprint decoding failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Emergency key wipe on fingerprint mismatch\n     * This ensures no sensitive data remains if MITM is detected\n     */\n    _emergencyWipeOnFingerprintMismatch(reason = 'DTLS fingerprint mismatch') {\n        try {\n            this._secureLog('error', '\uD83D\uDEA8 EMERGENCY: Initiating security wipe due to fingerprint mismatch', {\n                reason: reason,\n                timestamp: Date.now()\n            });\n\n            // Wipe all cryptographic materials\n            this._secureWipeKeys();\n            this._secureWipeMemory(this.encryptionKey, 'emergency_wipe');\n            this._secureWipeMemory(this.macKey, 'emergency_wipe');\n            this._secureWipeMemory(this.metadataKey, 'emergency_wipe');\n            \n            //   Wipe ephemeral keys for PFS\n            this._wipeEphemeralKeys();\n            \n            //   Hard wipe old keys for PFS\n            this._hardWipeOldKeys();\n\n            // Reset verification status\n            this.isVerified = null;\n            this.verificationCode = null;\n            this.keyFingerprint = null;\n            this.connectionId = null;\n            this.expectedDTLSFingerprint = null;\n            this._peerDTLSFingerprint = null;\n\n            // Disconnect immediately\n            this.disconnect();\n\n            // Notify UI about security breach\n            this.deliverMessageToUI('\uD83D\uDEA8 SECURITY BREACH: Connection terminated due to fingerprint mismatch. Possible MITM attack detected!', 'system');\n\n        } catch (error) {\n            this._secureLog('error', 'Failed to perform emergency wipe', { error: error.message });\n        }\n    }\n\n    // REMOVED: setExpectedDTLSFingerprint(). It overwrote `expectedDTLSFingerprint`\n    // with a caller-supplied value, and that field is our OWN local fingerprint \u2014\n    // the localFP that _computeSAS mixes into the safety code. Writing a peer's\n    // fingerprint into it would silently produce a SAS that no longer matches the\n    // session, i.e. break the very check it claimed to strengthen. It had no\n    // callers and was not part of any documented API. Out-of-band pinning, if it\n    // is ever wanted, belongs in its own field alongside _peerDTLSFingerprint.\n\n    /**\n     * Our own DTLS fingerprint, for the user to share out of band if they want to\n     * compare it manually. This is the local endpoint's value, not the peer's.\n     */\n    getCurrentDTLSFingerprint() {\n        try {\n            if (!this.expectedDTLSFingerprint) {\n                throw new Error('No DTLS fingerprint available - connection not established');\n            }\n\n            return this.expectedDTLSFingerprint;\n        } catch (error) {\n            this._secureLog('error', 'Failed to get current DTLS fingerprint', { error: error.message });\n            throw error;\n        }\n    }\n\n    /**\n     * DEBUGGING: Temporarily disable strict DTLS validation\n     * This should only be used for debugging connection issues\n     */\n    disableStrictDTLSValidation() {\n        this.strictDTLSValidation = false;\n        this._secureLog('warn', '\u26A0\uFE0F Strict DTLS validation disabled - security reduced', {\n            timestamp: Date.now()\n        });\n        this.deliverMessageToUI('\u26A0\uFE0F DTLS validation disabled for debugging', 'system');\n    }\n\n    /**\n     * SECURITY: Re-enable strict DTLS validation\n     */\n    enableStrictDTLSValidation() {\n        this.strictDTLSValidation = true;\n        this._secureLog('info', '\u2705 Strict DTLS validation re-enabled', {\n            timestamp: Date.now()\n        });\n        this.deliverMessageToUI('\u2705 DTLS validation re-enabled', 'system');\n    }\n\n    /**\n     *   Generate ephemeral ECDH keys for Perfect Forward Secrecy\n     * This ensures each session has unique, non-persistent keys\n     */\n    /**\n     * Bring up the Double Ratchet once the handshake has produced a shared\n     * secret. Both peers must have advertised support (`dr` in the offer and the\n     * answer): a session where only one side ratchets cannot decrypt anything, so\n     * a missing flag means the peer is on an older build and both sides stay on\n     * the static-key path.\n     *\n     * Failure here is deliberately not fatal. Forward secrecy is a large\n     * improvement, but a session that falls back to the previous scheme is the\n     * behaviour of every release up to 5.6.x \u2014 refusing to connect at all would\n     * be a worse outcome than connecting with the security users already had.\n     * The status is surfaced so the difference is visible rather than silent.\n     */\n    async _initializeRatchet(derivedKeys, isInitiator) {\n        const ratchetRoot = derivedKeys?.ratchetRoot;\n        if (!ratchetRoot) return false;\n\n        if (!this._peerSupportsRatchet) {\n            this._secureLog('warn', 'Peer did not advertise Double Ratchet \u2014 falling back to static session keys', {\n                localVersion: EnhancedSecureWebRTCManager.RATCHET_VERSION\n            });\n            window.EnhancedSecureCryptoUtils.zeroizeBuffer(ratchetRoot);\n            return false;\n        }\n\n        try {\n            const peerPublicKey = this.peerPublicKey || this.peerECDHPublicKey;\n            if (!peerPublicKey || !this.ecdhKeyPair?.privateKey) {\n                throw new Error('handshake ECDH keys unavailable');\n            }\n\n            const ratchet = new DoubleRatchet();\n            await ratchet.init({\n                sharedSecret: ratchetRoot,\n                sessionSalt: new Uint8Array(this.sessionSalt || []),\n                selfPrivateKey: this.ecdhKeyPair.privateKey,\n                remotePublicKey: peerPublicKey,\n                isInitiator\n            });\n\n            this._ratchet = ratchet;\n            this.securityFeatures.hasPFS = true;\n            this._secureLog('info', '\uD83D\uDD10 Double Ratchet active \u2014 per-message forward secrecy enabled', {\n                role: isInitiator ? 'initiator' : 'responder'\n            });\n            return true;\n        } catch (error) {\n            this._ratchet = null;\n            this.securityFeatures.hasPFS = false;\n            this._secureLog('error', 'Double Ratchet initialisation failed \u2014 continuing with static session keys', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return false;\n        } finally {\n            // The root has been folded into the ratchet (or abandoned); either\n            // way it must not stay in the heap.\n            window.EnhancedSecureCryptoUtils.zeroizeBuffer(ratchetRoot);\n        }\n    }\n\n    /** True when messages are protected by the ratchet rather than static keys. */\n    isRatchetActive() {\n        return !!this._ratchet?.isInitialised;\n    }\n\n    async _generateEphemeralECDHKeys() {\n        try {\n            this._secureLog('info', '\uD83D\uDD11 Generating ephemeral ECDH keys for PFS', {\n                sessionStartTime: this.sessionStartTime,\n                timestamp: Date.now()\n            });\n\n            // Generate new ephemeral ECDH key pair\n            const ephemeralKeyPair = await window.EnhancedSecureCryptoUtils.generateECDHKeyPair();\n            \n            if (!ephemeralKeyPair || !this._validateKeyPairConstantTime(ephemeralKeyPair)) {\n                throw new Error('Ephemeral ECDH key pair validation failed');\n            }\n\n            // Store ephemeral keys with session binding\n            const sessionId = this.currentSession?.sessionId || `session_${Date.now()}`;\n            this.ephemeralKeyPairs.set(sessionId, {\n                keyPair: ephemeralKeyPair,\n                timestamp: Date.now(),\n                sessionId: sessionId\n            });\n\n            this._secureLog('info', '\u2705 Ephemeral ECDH keys generated for PFS', {\n                timestamp: Date.now()\n            });\n\n            return ephemeralKeyPair;\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to generate ephemeral ECDH keys', { error: error.message });\n            throw new Error(`Ephemeral key generation failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Hard wipe old keys for real PFS\n     * This prevents retrospective decryption attacks\n     */\n    async _hardWipeOldKeys() {\n        try {\n            this._secureLog('info', '\uD83E\uDDF9 Performing hard wipe of old keys for PFS', {\n                oldKeysCount: this.oldKeys.size,\n                timestamp: Date.now()\n            });\n\n            // Hard wipe all old keys\n            for (const [version, keySet] of this.oldKeys.entries()) {\n                if (keySet.encryptionKey) {\n                    this._secureWipeMemory(keySet.encryptionKey, 'pfs_key_wipe');\n                }\n                if (keySet.macKey) {\n                    this._secureWipeMemory(keySet.macKey, 'pfs_key_wipe');\n                }\n                if (keySet.metadataKey) {\n                    this._secureWipeMemory(keySet.metadataKey, 'pfs_key_wipe');\n                }\n                \n                // Clear references\n                keySet.encryptionKey = null;\n                keySet.macKey = null;\n                keySet.metadataKey = null;\n                keySet.keyFingerprint = null;\n            }\n\n            // Clear the oldKeys map completely\n            this.oldKeys.clear();\n\n            // Schedule natural cleanup\n            await this._performNaturalCleanup();\n\n            this._secureLog('info', '\u2705 Hard wipe of old keys completed for PFS', {\n                timestamp: Date.now()\n            });\n\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to perform hard wipe of old keys', { error: error.message });\n        }\n    }\n\n    /**\n     *   Wipe ephemeral keys when session ends\n     * This ensures session-specific keys are destroyed\n     */\n    async _wipeEphemeralKeys() {\n        try {\n            this._secureLog('info', '\uD83E\uDDF9 Wiping ephemeral keys for PFS', {\n                ephemeralKeysCount: this.ephemeralKeyPairs.size,\n                timestamp: Date.now()\n            });\n\n            // Wipe all ephemeral key pairs\n            for (const [sessionId, keyData] of this.ephemeralKeyPairs.entries()) {\n                if (keyData.keyPair?.privateKey) {\n                    this._secureWipeMemory(keyData.keyPair.privateKey, 'ephemeral_key_wipe');\n                }\n                if (keyData.keyPair?.publicKey) {\n                    this._secureWipeMemory(keyData.keyPair.publicKey, 'ephemeral_key_wipe');\n                }\n                \n                // Clear references\n                keyData.keyPair = null;\n                keyData.timestamp = null;\n                keyData.sessionId = null;\n            }\n\n            // Clear the ephemeral keys map\n            this.ephemeralKeyPairs.clear();\n\n            // Schedule natural cleanup\n            await this._performNaturalCleanup();\n\n            this._secureLog('info', '\u2705 Ephemeral keys wiped for PFS', {\n                timestamp: Date.now()\n            });\n\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe ephemeral keys', { error: error.message });\n        }\n    }\n\n    /**\n     *   Encrypt file messages with AAD\n     * This ensures file messages are properly authenticated and bound to session\n     */\n    async _encryptFileMessage(messageData, aad) {\n        try {\n            if (!this.encryptionKey) {\n                throw new Error('No encryption key available for file message');\n            }\n\n            // Convert message to string if it's an object\n            const messageString = typeof messageData === 'string' ? messageData : JSON.stringify(messageData);\n            \n            // Encrypt with AAD using AES-GCM\n            const encryptedData = await window.EnhancedSecureCryptoUtils.encryptDataWithAAD(\n                messageString, \n                this.encryptionKey, \n                aad\n            );\n            \n            // Create encrypted message wrapper\n            const encryptedMessage = {\n                type: 'encrypted_file_message',\n                encryptedData: encryptedData,\n                aad: aad,\n                timestamp: Date.now(),\n                keyFingerprint: this.keyFingerprint\n            };\n            \n            return JSON.stringify(encryptedMessage);\n        } catch (error) {\n            this._secureLog('error', 'Failed to encrypt file message', { error: error.message });\n            throw new Error(`File message encryption failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Decrypt file messages with AAD validation\n     * This ensures file messages are properly authenticated and bound to session\n     */\n    async _decryptFileMessage(encryptedMessageString) {\n        try {\n            const encryptedMessage = JSON.parse(encryptedMessageString);\n            \n            if (encryptedMessage.type !== 'encrypted_file_message') {\n                throw new Error('Invalid encrypted file message type');\n            }\n            \n            // Validate key fingerprint\n            if (encryptedMessage.keyFingerprint !== this.keyFingerprint) {\n                throw new Error('Key fingerprint mismatch in encrypted file message');\n            }\n            \n            //   Validate AAD with sequence number\n            const aad = this._validateMessageAAD(encryptedMessage.aad, 'file_message');\n            \n            if (!this.encryptionKey) {\n                throw new Error('No encryption key available for file message decryption');\n            }\n            \n            // Decrypt with AAD validation\n            const decryptedData = await window.EnhancedSecureCryptoUtils.decryptDataWithAAD(\n                encryptedMessage.encryptedData,\n                this.encryptionKey,\n                encryptedMessage.aad\n            );\n            \n            return {\n                decryptedData: decryptedData,\n                aad: aad\n            };\n        } catch (error) {\n            this._secureLog('error', 'Failed to decrypt file message', { error: error.message });\n            throw new Error(`File message decryption failed: ${error.message}`);\n        }\n    }\n\n    /**\n     * Validates encryption keys readiness\n     * @param {boolean} throwError - whether to throw on not ready\n     * @returns {boolean} true if keys are ready\n     */\n    _validateEncryptionKeys(throwError = true) {\n        const hasAllKeys = !!(this.encryptionKey && this.macKey && this.metadataKey);\n        \n        if (!hasAllKeys && throwError) {\n            throw new Error('Encryption keys not initialized');\n        }\n        \n        return hasAllKeys;\n    }\n\n    /**\n     * Attempt to reinitialize encryption keys if missing\n     * Uses existing ECDH key pair, peer public key, and session salt\n     * Returns true if keys were (re)initialized successfully\n     */\n    async _tryReinitializeEncryptionKeys() {\n        try {\n            // If keys already present, nothing to do\n            if (this.encryptionKey && this.macKey && this.metadataKey) {\n                return true;\n            }\n\n            // Require ECDH materials and session salt to derive keys\n            const hasECDH = !!(this.ecdhKeyPair?.privateKey && (this.peerPublicKey || this.peerECDHPublicKey));\n            const peerPublicKey = this.peerPublicKey || this.peerECDHPublicKey;\n            if (!hasECDH || !peerPublicKey || !this.sessionSalt) {\n                return false;\n            }\n\n            // Derive fresh keys\n            const derivedKeys = await window.EnhancedSecureCryptoUtils.deriveSharedKeys(\n                this.ecdhKeyPair.privateKey,\n                peerPublicKey,\n                this.sessionSalt\n            );\n\n            await this._setEncryptionKeys(\n                derivedKeys.messageKey,\n                derivedKeys.macKey,\n                derivedKeys.metadataKey,\n                derivedKeys.fingerprint\n            );\n\n            return !!(this.encryptionKey && this.macKey && this.metadataKey);\n        } catch (error) {\n            this._secureLog('error', 'Failed to reinitialize encryption keys', { error: error.message });\n            return false;\n        }\n    }\n\n    /**\n     * Checks whether a message is a file-transfer message\n     * @param {string|object} data - message payload\n     * @returns {boolean} true if it's a file message\n     */\n    _isFileMessage(data) {\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n                return parsed.type && parsed.type.startsWith('file_');\n            } catch {\n                return false;\n            }\n        }\n        \n        if (typeof data === 'object' && data.type) {\n            return data.type.startsWith('file_');\n        }\n        \n        return false;\n    }\n\n    /**\n     * Checks whether a message is a system message\n     * @param {string|object} data - message payload  \n     * @returns {boolean} true if it's a system message\n     */\n    _isSystemMessage(data) {\n        const systemTypes = [\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.HEARTBEAT,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_RESPONSE,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_CONFIRMED,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.PEER_DISCONNECT,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.SECURITY_UPGRADE,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_READY\n        ];\n\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n                return systemTypes.includes(parsed.type);\n            } catch {\n                return false;\n            }\n        }\n        \n        if (typeof data === 'object' && data.type) {\n            return systemTypes.includes(data.type);\n        }\n        \n        return false;\n    }\n\n    /**\n     * Checks whether a message is fake traffic\n     * @param {any} data - message payload\n     * @returns {boolean} true if it's a fake message\n     */\n    _isFakeMessage(data) {\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n                return parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.FAKE || \n                       parsed.isFakeTraffic === true;\n            } catch {\n                return false;\n            }\n        }\n        \n        if (typeof data === 'object' && data !== null) {\n            return data.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.FAKE || \n                   data.isFakeTraffic === true;\n        }\n        \n        return false;\n    }\n\n    /**\n     * Safely executes an operation with error handling\n     * @param {Function} operation - operation to execute\n     * @param {string} errorMessage - error message to log\n     * @param {any} fallback - default value on error\n     * @returns {any} operation result or fallback\n     */\n    _withErrorHandling(operation, errorMessage, fallback = null) {\n        try {\n            return operation();\n        } catch (error) {\n            if (this._debugMode) {\n                this._secureLog('error', '\u274C ${errorMessage}:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n            return fallback;\n        }\n    }\n\n    /**\n     * Safely executes an async operation with error handling\n     * @param {Function} operation - async operation\n     * @param {string} errorMessage - error message to log\n     * @param {any} fallback - default value on error\n     * @returns {Promise<any>} operation result or fallback\n     */\n    async _withAsyncErrorHandling(operation, errorMessage, fallback = null) {\n        try {\n            return await operation();\n        } catch (error) {\n            if (this._debugMode) {\n                this._secureLog('error', '\u274C ${errorMessage}:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n            return fallback;\n        }\n    }\n\n\n    /**\n     * Extracts message type from data\n     * @param {string|object} data - message data\n     * @returns {string|null} message type or null\n     */\n    _getMessageType(data) {\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n                return parsed.type || null;\n            } catch {\n                return null;\n            }\n        }\n        \n        if (typeof data === 'object' && data !== null) {\n            return data.type || null;\n        }\n        \n        return null;\n    }\n\n    /**\n     * Resets notification flags for a new connection\n     */\n    _resetNotificationFlags() {\n        this.lastSecurityLevelNotification = null;\n        this.verificationNotificationSent = false;\n        this.verificationInitiationSent = false;\n        this._verificationUiOpened = false;\n        this._sasLocalFingerprint = null;\n        this._sasRemoteFingerprint = null;\n        this.disconnectNotificationSent = false;\n        this.reconnectionFailedNotificationSent = false;\n        this.peerDisconnectNotificationSent = false;\n        this.connectionClosedNotificationSent = false;\n        this.fakeTrafficDisabledNotificationSent = false;\n        this.advancedFeaturesDisabledNotificationSent = false;\n        this.securityUpgradeNotificationSent = false;\n        this.lastSecurityUpgradeStage = null;\n        this.securityCalculationNotificationSent = false;\n        this.lastSecurityCalculationLevel = null;\n    }\n\n    /**\n     * Checks whether a message was filtered out\n     * @param {any} result - processing result\n     * @returns {boolean} true if filtered\n     */\n    _isFilteredMessage(result) {\n        const filteredResults = Object.values(EnhancedSecureWebRTCManager.FILTERED_RESULTS);\n        return filteredResults.includes(result);\n    }\n    /**\n     *   Enhanced log cleanup with security checks\n     */\n    _cleanupLogs() {\n        //   More aggressive cleanup to prevent data accumulation\n        if (this._logCounts.size > 500) {\n            this._logCounts.clear();\n            this._secureLog('debug', '\uD83E\uDDF9 Log counts cleared due to size limit');\n        }\n        \n        //   Clean up old log entries to prevent memory leaks\n        const now = Date.now();\n        const maxAge = 300000; // 5 minutes\n        \n        //   Check for suspicious log patterns\n        let suspiciousCount = 0;\n        for (const [key, count] of this._logCounts.entries()) {\n            if (count > 10) {\n                suspiciousCount++;\n            }\n        }\n        \n        //   Emergency cleanup if too many suspicious patterns\n        if (suspiciousCount > 20) {\n            this._logCounts.clear();\n            this._secureLog('warn', '\uD83D\uDEA8 Emergency log cleanup due to suspicious patterns');\n        }\n        \n        //   Reset security violation counter if system is stable\n        if (this._logSecurityViolations > 0 && suspiciousCount < 5) {\n            this._logSecurityViolations = Math.max(0, this._logSecurityViolations - 1);\n        }\n        \n        //   Clean up old IVs periodically\n        if (!this._lastIVCleanupTime || Date.now() - this._lastIVCleanupTime > 300000) { // Every 5 minutes\n            this._cleanupOldIVs();\n            this._lastIVCleanupTime = Date.now();\n        }\n        \n        //   Periodic secure memory cleanup\n        if (!this._secureMemoryManager.memoryStats.lastCleanup || \n            Date.now() - this._secureMemoryManager.memoryStats.lastCleanup > 600000) { // Every 10 minutes\n            // Schedule async cleanup without blocking\n            this._performPeriodicMemoryCleanup().catch(error => {\n                this._secureLog('error', 'Periodic cleanup failed', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n            this._secureMemoryManager.memoryStats.lastCleanup = Date.now();\n        }\n    }\n    /**\n     *   Secure logging stats with sensitive data protection\n     */\n    _getLoggingStats() {\n        //   Only return safe statistics\n        const stats = {\n            isProductionMode: this._isProductionMode,\n            debugMode: this._debugMode,\n            currentLogLevel: this._currentLogLevel,\n            logCountsSize: this._logCounts.size,\n            maxLogCount: this._maxLogCount,\n            securityViolations: this._logSecurityViolations || 0,\n            maxSecurityViolations: this._maxLogSecurityViolations || 3,\n            systemStatus: this._currentLogLevel === -1 ? 'DISABLED' : 'ACTIVE'\n        };\n        \n        //   Sanitize any potentially sensitive data\n        const sanitizedStats = {};\n        for (const [key, value] of Object.entries(stats)) {\n            if (typeof value === 'string' && this._containsSensitiveContent(value)) {\n                sanitizedStats[key] = '[SENSITIVE_DATA_REDACTED]';\n            } else {\n                sanitizedStats[key] = value;\n            }\n        }\n        \n        return sanitizedStats;\n    }\n    /**\n     *   Enhanced emergency logging disable with cleanup\n     */\n    async _emergencyDisableLogging() {\n        //   Immediately disable all logging levels\n        this._currentLogLevel = -1;\n        \n        //   Clear all log data to prevent memory leaks\n        this._logCounts.clear();\n        \n        //   Clear any cached sensitive data\n        if (this._logSecurityViolations) {\n            this._logSecurityViolations = 0;\n        }\n        \n        //   Override _secureLog to a secure no-op\n        this._secureLog = () => {\n            //   Only allow emergency console errors\n            if (arguments[0] === 'error' && this._originalConsole?.error) {\n                this._originalConsole.error('\uD83D\uDEA8 SECURITY: Logging system disabled - potential data exposure prevented');\n            }\n        };\n        \n        //   Store original functions before overriding\n        this._originalSanitizeString = this._sanitizeString;\n        this._originalSanitizeLogData = this._sanitizeLogData;\n        this._originalAuditLogMessage = this._auditLogMessage;\n        this._originalContainsSensitiveContent = this._containsSensitiveContent;\n        \n        //   Override all logging methods to prevent bypass\n        this._sanitizeString = () => '[LOGGING_DISABLED]';\n        this._sanitizeLogData = () => ({ error: 'LOGGING_DISABLED' });\n        this._auditLogMessage = () => false;\n        this._containsSensitiveContent = () => true; // Block everything\n        \n        //   Schedule natural cleanup\n        await this._performNaturalCleanup();\n        \n        //   Notify about the emergency shutdown\n        this._originalConsole?.error?.('\uD83D\uDEA8 CRITICAL: Secure logging system disabled due to potential data exposure');\n    }\n\n    /**\n     *   Reset logging system after emergency shutdown\n     * Use this function to restore normal logging functionality\n     */\n    _resetLoggingSystem() {\n        this._secureLog('info', '\uD83D\uDD27 Resetting logging system after emergency shutdown');\n        \n        // Restore original sanitize functions\n        this._sanitizeString = this._originalSanitizeString || ((str) => str);\n        this._sanitizeLogData = this._originalSanitizeLogData || ((data) => data);\n        this._auditLogMessage = this._originalAuditLogMessage || (() => true);\n        this._containsSensitiveContent = this._originalContainsSensitiveContent || (() => false);\n        \n        // Reset security violation counters\n        this._logSecurityViolations = 0;\n        \n        this._secureLog('info', '\u2705 Logging system reset successfully');\n    }\n    /**\n     *   Enhanced audit function for log message security\n     */\n    _auditLogMessage(message, data) {\n        if (!data || typeof data !== 'object') return true;\n        \n        //   Convert to string and check for sensitive content\n        const dataString = JSON.stringify(data);\n        \n        //   Check message itself for sensitive content\n        if (this._containsSensitiveContent(message)) {\n            this._emergencyDisableLogging();\n            this._originalConsole?.error?.('\uD83D\uDEA8 SECURITY BREACH: Sensitive content detected in log message');\n            return false;\n        }\n        \n        //   Check data string for sensitive content\n        if (this._containsSensitiveContent(dataString)) {\n            this._emergencyDisableLogging();\n            this._originalConsole?.error?.('\uD83D\uDEA8 SECURITY BREACH: Sensitive content detected in log data');\n            return false;\n        }\n        \n        //   Enhanced dangerous pattern detection\n        const dangerousPatterns = [\n            'secret', 'token', 'password', 'credential', 'auth',\n            'fingerprint', 'salt', 'signature', 'private_key', 'api_key', 'private',\n            'encryption', 'mac', 'metadata', 'session', 'jwt', 'bearer',\n            'key', 'hash', 'digest', 'nonce', 'iv', 'cipher'\n        ];\n        \n        const dataStringLower = dataString.toLowerCase();\n        \n        for (const pattern of dangerousPatterns) {\n            if (dataStringLower.includes(pattern) && !this._safeFieldsWhitelist.has(pattern)) {\n                this._emergencyDisableLogging();\n                this._originalConsole?.error?.(`\uD83D\uDEA8 SECURITY BREACH: Dangerous pattern detected in log: ${pattern}`);\n                return false;\n            }\n        }\n        \n        //   Check for high entropy values in data\n        for (const [key, value] of Object.entries(data)) {\n            if (typeof value === 'string' && this._hasHighEntropy(value)) {\n                this._emergencyDisableLogging();\n                this._originalConsole?.error?.(`\uD83D\uDEA8 SECURITY BREACH: High entropy value detected in log field: ${key}`);\n                return false;\n            }\n        }\n        \n        return true;\n    }\n\n    initializeFileTransfer() {\n        try {\n            if (this._sessionAlive === false) {\n                return;\n            }\n\n            this._secureLog('info', '\uD83D\uDD27 Initializing Enhanced Secure File Transfer system...');\n\n            if (this.fileTransferSystem) {\n                this._secureLog('info', '\u2705 File transfer system already initialized');\n                return;\n            }\n            \n            //   Step-by-step readiness check\n            const channelReady = !!(this.dataChannel && this.dataChannel.readyState === 'open');\n            if (!channelReady) {\n                this._secureLog('warn', '\u26A0\uFE0F Data channel not open, deferring file transfer initialization');\n                if (this.dataChannel) {\n                    const initHandler = () => {\n                        this._secureLog('info', '\uD83D\uDD04 DataChannel opened, initializing file transfer...');\n                        this.initializeFileTransfer();\n                    };\n                    this.dataChannel.addEventListener('open', initHandler, { once: true });\n                }\n                return;\n            }\n\n            if (!this.isVerified) {\n                this._secureLog('warn', '\u26A0\uFE0F Connection not verified yet, deferring file transfer initialization');\n                this._scheduleFileTransferInitRetry(500);\n                return;\n            }\n            \n            // FIX: Clean up previous system if present\n            if (this.fileTransferSystem) {\n                this._secureLog('info', '\uD83E\uDDF9 Cleaning up existing file transfer system');\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n            }\n            \n            //   Ensure encryption keys are present\n            if (!this.encryptionKey || !this.macKey) {\n                this._secureLog('warn', '\u26A0\uFE0F Encryption keys not ready, deferring file transfer initialization');\n                this._scheduleFileTransferInitRetry(1000);\n                return;\n            }\n            \n            // IMPORTANT: callback order: (onProgress, onComplete, onError, onFileReceived)\n            const safeOnComplete = (summary) => {\n                // Sender: finalize transfer, no Blob handling\n                try {\n                    this._secureLog('info', '\uD83C\uDFC1 Sender transfer summary', { summary });\n                    // Optionally forward as progress/UI event\n                    if (this.onFileProgress) {\n                        this.onFileProgress({ type: 'complete', ...summary });\n                    }\n                } catch (e) {\n                    this._secureLog('warn', '\u26A0\uFE0F onComplete handler failed:', { details: e.message });\n                }\n            };\n\n            this.fileTransferSystem = new EnhancedSecureFileTransfer(\n                this,\n                this.onFileProgress || null,\n                safeOnComplete,\n                this.onFileError || null,\n                this.onFileReceived || null,\n                this.onIncomingFileRequest || null\n            );\n            \n            this._fileTransferActive = true;\n            \n            this._secureLog('info', '\u2705 Enhanced Secure File Transfer system initialized successfully');\n            \n            // Verify the system is ready\n            const status = this.fileTransferSystem.getSystemStatus();\n            this._secureLog('info', '\uD83D\uDD0D File transfer system status after init', { status });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to initialize file transfer system', { errorType: error.constructor.name });\n            this.fileTransferSystem = null;\n            this._fileTransferActive = false;\n        }\n    }\n\n    _scheduleFileTransferInitRetry(delay) {\n        if (this._sessionAlive === false) return null;\n        if (!this._fileTransferInitRetryTimers) this._fileTransferInitRetryTimers = new Set();\n\n        const timer = this._trackActiveTimer(setTimeout(() => {\n            this._fileTransferInitRetryTimers.delete(timer);\n            this._untrackActiveTimer(timer);\n            if (this._sessionAlive === false) return;\n            this.initializeFileTransfer();\n        }, delay));\n\n        this._fileTransferInitRetryTimers.add(timer);\n        return timer;\n    }\n\n    // ============================================\n    // ENHANCED SECURITY INITIALIZATION\n    // ============================================\n\n    async initializeEnhancedSecurity() {\n        try {\n            // Generate nested encryption key\n            await this.generateNestedEncryptionKey();\n            \n            // Initialize decoy channels\n            if (this.decoyChannelConfig.enabled) {\n                this.initializeDecoyChannels();\n            }\n            \n            // Start fake traffic generation\n            if (this.fakeTrafficConfig.enabled) {\n                this.startFakeTrafficGeneration();\n            }\n\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to initialize enhanced security', { errorType: error.constructor.name });\n        }\n    }\n    \n    // Helper function: unbiased integer in [min, max]\n       getSafeRandomInt(min, max) {\n            if (!Number.isInteger(min) || !Number.isInteger(max)) {\n                throw new Error('getSafeRandomInt requires integer min and max');\n            }\n            if (min >= max) {\n                throw new Error('min must be less than max');\n            }\n            \n            const range = max - min + 1;\n            const bitsNeeded = Math.ceil(Math.log2(range));\n            const bytesNeeded = Math.ceil(bitsNeeded / 8);\n            const mask = (1 << bitsNeeded) - 1;\n            \n            let randomValue;\n            do {\n                const randomBytes = crypto.getRandomValues(new Uint8Array(bytesNeeded));\n\n                randomValue = 0;\n                for (let i = 0; i < bytesNeeded; i++) {\n                    randomValue = (randomValue * 256) + randomBytes[i];\n                }\n\n                randomValue = randomValue & mask;\n                \n            } while (randomValue >= range); \n\n            return min + randomValue;\n        }\n\n        getSafeRandomFloat(minFloat, maxFloat, steps = 1000) {\n            if (typeof minFloat !== 'number' || typeof maxFloat !== 'number') {\n                throw new Error('getSafeRandomFloat requires numeric min and max');\n            }\n            if (minFloat >= maxFloat) {\n                throw new Error('minFloat must be less than maxFloat');\n            }\n            const randomIndex = this.getSafeRandomInt(0, steps);\n            \n            const step = (maxFloat - minFloat) / steps;\n\n            return minFloat + (randomIndex * step);\n        }\n\n        generateFingerprintMask() {\n            const mask = {\n                timingOffset: this.getSafeRandomInt(0, 1500),\n                sizeVariation: this.getSafeRandomFloat(0.75, 1.25, 1000),\n                noisePattern: Array.from(crypto.getRandomValues(new Uint8Array(64))),\n                headerVariations: [\n                    'X-Client-Version', 'X-Session-ID', 'X-Request-ID', 'X-Timestamp', 'X-Signature',\n                    'X-Secure', 'X-Encrypted', 'X-Protected', 'X-Safe', 'X-Anonymous', 'X-Private'\n                ],\n                noiseIntensity: this.getSafeRandomInt(50, 150),\n                sizeMultiplier: this.getSafeRandomFloat(0.75, 1.25, 1000),\n                timingVariation: this.getSafeRandomInt(100, 1100)\n            };\n            return mask;\n        }\n\n    // Security configuration - all features enabled by default\n    configureSecurityForSession() {\n        this._secureLog('info', '\uD83D\uDD27 Configuring security - all features enabled by default');\n        \n        // All security features are enabled by default - no payment required\n            this.sessionConstraints = {};\n            \n            Object.keys(this.securityFeatures).forEach(feature => {\n            this.sessionConstraints[feature] = true; // All features enabled\n            });\n            \n            this.applySessionConstraints();\n            \n        this._secureLog('info', '\u2705 Security configured - all features enabled', { constraints: this.sessionConstraints });\n\n            if (!this._validateCryptographicSecurity()) {\n                this._secureLog('error', '\uD83D\uDEA8 CRITICAL: Cryptographic security validation failed after session configuration');\n\n                if (this.onStatusChange) {\n                    this.onStatusChange('security_breach', {\n                        type: 'crypto_security_failure',\n                        message: 'Cryptographic security validation failed after session configuration'\n                    });\n                }\n            }\n            \n            this.notifySecurityLevel();\n            \n            setTimeout(() => {\n                this.calculateAndReportSecurityLevel();\n            }, EnhancedSecureWebRTCManager.TIMEOUTS.SECURITY_CALC_DELAY);\n    }\n\n    // Applying session constraints - all features enabled by default\n    applySessionConstraints() {\n        if (!this.sessionConstraints) return;\n\n        // All features are enabled by default - no restrictions\n        Object.keys(this.sessionConstraints).forEach(feature => {\n            this.securityFeatures[feature] = true; // All features enabled\n                \n                // Enable linked configurations\n                switch (feature) {\n                    case 'hasFakeTraffic':\n                        this.fakeTrafficConfig.enabled = true;\n                        if (this.isConnected()) {\n                            this.startFakeTrafficGeneration();\n                        }\n                        break;\n                    case 'hasDecoyChannels':\n                        this.decoyChannelConfig.enabled = true;\n                        if (this.isConnected()) {\n                            this.initializeDecoyChannels();\n                        }\n                        break;\n                    case 'hasPacketReordering':\n                        this.reorderingConfig.enabled = true;\n                        break;\n                    case 'hasAntiFingerprinting':\n                        this.antiFingerprintingConfig.enabled = true;\n                        break;\n                    case 'hasMessageChunking':\n                        this.chunkingConfig.enabled = true;\n                        break;\n            }\n        });\n        \n        this._secureLog('info', '\u2705 All security features enabled by default', {\n            constraints: this.sessionConstraints,\n            currentFeatures: this.securityFeatures\n        });\n    }\n    _sanitizeIncomingChatMessage(message) {\n        if (typeof message !== 'string') {\n            return message;\n        }\n\n        return window.EnhancedSecureCryptoUtils.sanitizeMessage(message);\n    }\n\n    deliverMessageToUI(message, type = 'received', meta = null) {\n        try {\n            // Add debug logs\n            this._secureLog('debug', '\uD83D\uDCE4 deliverMessageToUI called', {\n                message: message,\n                type: type,\n                messageType: typeof message,\n                hasOnMessage: !!this.onMessage\n            });\n            \n            // Filter out file-transfer and system messages\n            if (typeof message === 'object' && message.type) {\n                const blockedTypes = [\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_START,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_RESPONSE,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_CHUNK,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.CHUNK_CONFIRMATION,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_COMPLETE,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_ERROR,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.HEARTBEAT,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_RESPONSE,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_CONFIRMED,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.PEER_DISCONNECT,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_READY,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.SECURITY_UPGRADE\n                ];\n                if (blockedTypes.includes(message.type)) {\n                    if (this._debugMode) {\n                        this._secureLog('warn', `\uD83D\uDED1 Blocked system/file message from UI: ${message.type}`);\n                    }\n                    return; // do not show in chat\n                }\n            }\n\n            // Additional check for string messages containing JSON\n            if (typeof message === 'string' && message.trim().startsWith('{')) {\n                try {\n                    const parsedMessage = JSON.parse(message);\n                    if (parsedMessage.type) {\n                        const blockedTypes = [\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_START,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_RESPONSE,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_CHUNK,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.CHUNK_CONFIRMATION,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_COMPLETE,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_ERROR,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.HEARTBEAT,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_RESPONSE,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_CONFIRMED,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.PEER_DISCONNECT,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_READY,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.SECURITY_UPGRADE\n                        ];\n                        if (blockedTypes.includes(parsedMessage.type)) {\n                            if (this._debugMode) {\n                                this._secureLog('warn', `\uD83D\uDED1 Blocked system/file message from UI (string): ${parsedMessage.type}`);\n                            }\n                            return; // do not show in chat\n                        }\n                    }\n                } catch (parseError) {\n                    // Not JSON \u2014 fine for plain text messages\n                }\n            }\n\n            const uiMessage = type === 'received'\n                ? this._sanitizeIncomingChatMessage(message)\n                : message;\n\n            if (this.onMessage) {\n                // Whitelist/bound the optional per-message UI metadata centrally here,\n                // so every delivery path stays consistent and partial test doubles that\n                // override deliverMessageToUI are unaffected.\n                const safeMeta = (meta && typeof this._sanitizeMessageMeta === 'function')\n                    ? this._sanitizeMessageMeta(meta)\n                    : null;\n                this._secureLog('debug', '\uD83D\uDCE4 Calling this.onMessage callback', { message: uiMessage, type });\n                this.onMessage(uiMessage, type, safeMeta || undefined);\n            } else {\n                this._secureLog('warn', '\u26A0\uFE0F this.onMessage callback is null or undefined');\n            }\n        } catch (err) {\n            this._secureLog('error', '\u274C Failed to deliver message to UI:', { errorType: err?.constructor?.name || 'Unknown' });\n        }\n    }\n\n\n    // Security Level Notification\n    notifySecurityLevel() {\n        // Avoid duplicate notifications\n        if (this.lastSecurityLevelNotification === 'maximum') {\n            return; // prevent duplication\n        }\n        \n        this.lastSecurityLevelNotification = 'maximum';\n        \n        const message = '\uD83D\uDEE1\uFE0F Maximum Security Active - All features enabled';\n        \n        if (this.onMessage) {\n            this.deliverMessageToUI(message, 'system');\n        }\n\n        // Showing details of active features\n        if (this.onMessage) {\n            const activeFeatures = Object.entries(this.securityFeatures)\n                .filter(([key, value]) => value === true)\n                .map(([key]) => key.replace('has', '').replace(/([A-Z])/g, ' $1').trim().toLowerCase())\n                .slice(0, 5); \n\n            this.deliverMessageToUI(`\uD83D\uDD27 Active: ${activeFeatures.join(', ')}...`, 'system');\n        }\n    }\n\n    // Cleaning decoy channels\n    cleanupDecoyChannels() {\n        // Stopping decoy traffic\n        for (const [channelName, timer] of this.decoyTimers.entries()) {\n            clearTimeout(timer);\n        }\n        this.decoyTimers.clear();\n        \n        // Closing decoy channels\n        for (const [channelName, channel] of this.decoyChannels.entries()) {\n            if (channel.readyState === 'open') {\n                channel.close();\n            }\n        }\n        this.decoyChannels.clear();\n        \n        this._secureLog('info', '\uD83E\uDDF9 Decoy channels cleaned up');\n    }\n\n    // ============================================\n    // 1. NESTED ENCRYPTION LAYER\n    // ============================================\n\n    async generateNestedEncryptionKey() {\n        try {\n            // Generate additional encryption key for nested encryption\n            this.nestedEncryptionKey = await crypto.subtle.generateKey(\n                { name: 'AES-GCM', length: 256 },\n                false,\n                ['encrypt', 'decrypt']\n            );\n            \n            // Generate random IV for nested encryption\n                    //   No need for base IV or counter - each encryption gets fresh random IV\n        // This ensures maximum entropy and prevents IV reuse attacks\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to generate nested encryption key:', { errorType: error?.constructor?.name || 'Unknown' });\n            throw error;\n        }\n    }\n\n    async applyNestedEncryption(data) {\n        if (!this.nestedEncryptionKey || !this.securityFeatures.hasNestedEncryption) {\n            return data;\n        }\n\n        try {\n            //   Generate cryptographically secure IV with reuse prevention\n            const uniqueIV = this._generateSecureIV(\n                EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE, \n                'nestedEncryption'\n            );\n            \n            // Encrypt data with nested layer\n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: uniqueIV },\n                this.nestedEncryptionKey,\n                data\n            );\n            \n            // Combine IV and encrypted data\n            const result = new Uint8Array(EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE + encrypted.byteLength);\n            result.set(uniqueIV, 0);\n            result.set(new Uint8Array(encrypted), EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE);\n            \n            this._secureLog('debug', '\u2705 Nested encryption applied with secure IV', {\n                ivSize: uniqueIV.length,\n                dataSize: data.byteLength,\n                encryptedSize: encrypted.byteLength\n            });\n            \n            return result.buffer;\n        } catch (error) {\n            this._secureLog('error', '\u274C Nested encryption failed:', { \n                errorType: error?.constructor?.name || 'Unknown',\n                errorMessage: error?.message || 'Unknown error'\n            });\n            \n            //   If IV generation failed due to emergency mode, disable nested encryption\n            if (error.message.includes('emergency mode')) {\n                this.securityFeatures.hasNestedEncryption = false;\n                this._secureLog('warn', '\u26A0\uFE0F Nested encryption disabled due to IV emergency mode');\n            }\n            \n            return data; // Fallback to original data\n        }\n    }\n\n    async removeNestedEncryption(data) {\n        if (!this.nestedEncryptionKey || !this.securityFeatures.hasNestedEncryption) {\n            return data;\n        }\n\n        //   Check that the data is actually encrypted with proper IV size\n        if (!(data instanceof ArrayBuffer) || data.byteLength < EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE + 16) {\n            if (this._debugMode) {\n                this._secureLog('debug', '\uD83D\uDCDD Data not encrypted or too short for nested decryption (need IV + minimum encrypted data)');\n            }\n            return data;\n        }\n\n        try {\n            const dataArray = new Uint8Array(data);\n            const iv = dataArray.slice(0, EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE);\n            const encryptedData = dataArray.slice(EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE);\n            \n            // Check that there is data to decrypt\n            if (encryptedData.length === 0) {\n                if (this._debugMode) {\n                    this._secureLog('debug', '\uD83D\uDCDD No encrypted data found');\n                }\n                return data;\n            }\n            \n            // Decrypt nested layer\n            const decrypted = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv: iv },\n                this.nestedEncryptionKey,\n                encryptedData\n            );\n            \n            return decrypted;\n        } catch (error) {\n            // FIX: Better error handling\n            if (error.name === 'OperationError') {\n                if (this._debugMode) {\n                    this._secureLog('debug', '\uD83D\uDCDD Data not encrypted with nested encryption, skipping...');\n                }\n            } else {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Nested decryption failed:', { details: error.message });\n                }\n            }\n            return data; // Fallback to original data\n        }\n    }\n\n    // ============================================\n    // 2. PACKET PADDING\n    // ============================================\n\n    applyPacketPadding(data) {\n        if (!this.securityFeatures.hasPacketPadding) {\n            return data;\n        }\n\n        try {\n            const originalSize = data.byteLength;\n            let paddingSize;\n            \n            if (this.paddingConfig.useRandomPadding) {\n                // Generate random padding size\n                paddingSize = Math.floor(Math.random() * \n                    (this.paddingConfig.maxPadding - this.paddingConfig.minPadding + 1)) + \n                    this.paddingConfig.minPadding;\n            } else {\n                // Use fixed padding size\n                paddingSize = this.paddingConfig.minPadding;\n            }\n            \n            // Generate random padding data\n            const padding = crypto.getRandomValues(new Uint8Array(paddingSize));\n            \n            // Create padded message\n            const paddedData = new Uint8Array(originalSize + paddingSize + 4);\n            \n            // Add original size (4 bytes)\n            const sizeView = new DataView(paddedData.buffer, 0, 4);\n            sizeView.setUint32(0, originalSize, false);\n            \n            // Add original data\n            paddedData.set(new Uint8Array(data), 4);\n            \n            // Add padding\n            paddedData.set(padding, 4 + originalSize);\n            \n            return paddedData.buffer;\n        } catch (error) {\n            this._secureLog('error', '\u274C Packet padding failed:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data; // Fallback to original data\n        }\n    }\n\n    removePacketPadding(data) {\n        if (!this.securityFeatures.hasPacketPadding) {\n            return data;\n        }\n\n        try {\n            const dataArray = new Uint8Array(data);\n            \n            // Check for minimum data length (4 bytes for size + minimum 1 byte of data)\n            if (dataArray.length < 5) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Data too short for packet padding removal, skipping');\n                }\n                return data;\n            }\n            \n            // Extract original size (first 4 bytes)\n            const sizeView = new DataView(dataArray.buffer, 0, 4);\n            const originalSize = sizeView.getUint32(0, false);\n            \n            // Checking the reasonableness of the size\n            if (originalSize <= 0 || originalSize > dataArray.length - 4) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Invalid packet padding size, skipping removal');\n                }\n                return data;\n            }\n            \n            // Extract original data\n            const originalData = dataArray.slice(4, 4 + originalSize);\n            \n            return originalData.buffer;\n        } catch (error) {\n            if (this._debugMode) {\n                this._secureLog('error', '\u274C Packet padding removal failed:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n            return data; // Fallback to original data\n        }\n    }\n\n    // ============================================\n    // 3. FAKE TRAFFIC GENERATION\n    // ============================================\n\n    startFakeTrafficGeneration() {\n        if (!this.fakeTrafficConfig.enabled || !this.isConnected()) {\n            return;\n        }\n\n        // Prevent multiple fake traffic generators\n        if (this.fakeTrafficTimer) {\n            this._secureLog('warn', '\u26A0\uFE0F Fake traffic generation already running');\n            return;\n        }\n\n        const sendFakeMessage = async () => {\n            if (!this.isConnected()) {\n                this.stopFakeTrafficGeneration();\n                return;\n            }\n\n            try {\n                const fakeMessage = this.generateFakeMessage();\n                await this.sendFakeMessage(fakeMessage);\n                \n                // FIX: Increase intervals to reduce load\n                const nextInterval = this.fakeTrafficConfig.randomDecoyIntervals ? \n                    this.getUnbiasedRandomInRange(this.fakeTrafficConfig.minInterval, Math.min(this.fakeTrafficConfig.maxInterval, 60000)) : // Cap at 60 seconds\n                    this.fakeTrafficConfig.minInterval;\n                \n                // Minimum interval 15 seconds for stability\n                const safeInterval = Math.max(nextInterval, EnhancedSecureWebRTCManager.TIMEOUTS.FAKE_TRAFFIC_MIN_INTERVAL);\n                \n                this.fakeTrafficTimer = setTimeout(sendFakeMessage, safeInterval);\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('error', '\u274C Fake traffic generation failed:', { errorType: error?.constructor?.name || 'Unknown' });\n                }\n                this.stopFakeTrafficGeneration();\n            }\n        };\n\n        // Start fake traffic generation with longer initial delay\n        // Use a reasonable range for initial delay (5-30 seconds)\n        const minDelay = EnhancedSecureWebRTCManager.TIMEOUTS.DECOY_INITIAL_DELAY;\n        const maxDelay = Math.min(this.fakeTrafficConfig.maxInterval, 30000); // Cap at 30 seconds\n        const initialDelay = this.getUnbiasedRandomInRange(minDelay, maxDelay);\n        this.fakeTrafficTimer = setTimeout(sendFakeMessage, initialDelay);\n    }\n\n    stopFakeTrafficGeneration() {\n        if (this.fakeTrafficTimer) {\n            clearTimeout(this.fakeTrafficTimer);\n            this.fakeTrafficTimer = null;\n        }\n    }\n\n    generateFakeMessage() {\n        const patternIndex = this.getUnbiasedRandomInRange(0, this.fakeTrafficConfig.patterns.length - 1);\n        const pattern = this.fakeTrafficConfig.patterns[patternIndex];\n        \n        const size = this.getUnbiasedRandomInRange(this.fakeTrafficConfig.minSize, this.fakeTrafficConfig.maxSize);\n        \n        const fakeData = crypto.getRandomValues(new Uint8Array(size));\n        \n        return {\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.FAKE, \n            pattern: pattern,\n            data: Array.from(fakeData).map(b => b.toString(16).padStart(2, '0')).join(''),\n            timestamp: Date.now(),\n            size: size,\n            isFakeTraffic: true, \n            source: 'fake_traffic_generator',\n            fakeId: crypto.getRandomValues(new Uint32Array(1))[0].toString(36) \n        };\n    }\n\n    // ============================================\n    // EMERGENCY SHUT-OFF OF ADVANCED FUNCTIONS\n    // ============================================\n\n        emergencyDisableAdvancedFeatures() {\n                    this._secureLog('error', '\uD83D\uDEA8 Emergency disabling advanced security features due to errors');\n        \n        // Disable problematic functions\n        this.securityFeatures.hasNestedEncryption = false;\n        this.securityFeatures.hasPacketReordering = false;\n        this.securityFeatures.hasAntiFingerprinting = false;\n        \n        // Disable configurations\n        this.reorderingConfig.enabled = false;\n        this.antiFingerprintingConfig.enabled = false;\n        \n        // Clear the buffers\n        this.packetBuffer.clear();\n        \n        // Stopping fake traffic\n        this.emergencyDisableFakeTraffic();\n        \n                    this._secureLog('info', '\u2705 Advanced features disabled, keeping basic encryption');\n        \n        // Check that advanced-features-disabled notification wasn't already sent\n        if (!this.advancedFeaturesDisabledNotificationSent) {\n            this.advancedFeaturesDisabledNotificationSent = true;\n            if (this.onMessage) {\n                this.deliverMessageToUI('\uD83D\uDEA8 Advanced security features temporarily disabled due to compatibility issues', 'system');\n            }\n        }\n    }\n\n    async sendFakeMessage(fakeMessage) {\n        if (!this._validateConnection(false)) {\n            return;\n        }\n\n        try {\n            this._secureLog('debug', '\uD83C\uDFAD Sending fake message', {\n                hasPattern: !!fakeMessage.pattern,\n                sizeRange: fakeMessage.size > 100 ? 'large' : 'small'\n            });\n            \n            const fakeData = JSON.stringify({\n                ...fakeMessage,\n                type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.FAKE, \n                isFakeTraffic: true, \n                timestamp: Date.now()\n            });\n            \n            const fakeBuffer = new TextEncoder().encode(fakeData);\n            const encryptedFake = await this.applySecurityLayers(fakeBuffer, true);\n            this.dataChannel.send(encryptedFake);\n            \n            this._secureLog('debug', '\uD83C\uDFAD Fake message sent successfully', {\n                pattern: fakeMessage.pattern\n            });\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to send fake message', {\n                error: error.message\n            });\n        }\n    }\n\ncheckFakeTrafficStatus() {\n        const status = {\n            fakeTrafficEnabled: this.securityFeatures.hasFakeTraffic,\n            fakeTrafficConfigEnabled: this.fakeTrafficConfig.enabled,\n            timerActive: !!this.fakeTrafficTimer,\n            patterns: this.fakeTrafficConfig.patterns,\n            intervals: {\n                min: this.fakeTrafficConfig.minInterval,\n                max: this.fakeTrafficConfig.maxInterval\n            }\n        };\n        \n        if (this._debugMode) {\n            this._secureLog('info', '\uD83C\uDFAD Fake Traffic Status', { status });\n        }\n        return status;\n    }\nemergencyDisableFakeTraffic() {\n        if (this._debugMode) {\n            this._secureLog('error', '\uD83D\uDEA8 Emergency disabling fake traffic');\n        }\n        \n        this.securityFeatures.hasFakeTraffic = false;\n        this.fakeTrafficConfig.enabled = false;\n        this.stopFakeTrafficGeneration();\n        \n        if (this._debugMode) {\n            this._secureLog('info', '\u2705 Fake traffic disabled');\n        }\n        \n        // Check that fake-traffic-disabled notification wasn't already sent\n        if (!this.fakeTrafficDisabledNotificationSent) {\n            this.fakeTrafficDisabledNotificationSent = true;\n            if (this.onMessage) {\n                this.deliverMessageToUI('\uD83D\uDEA8 Fake traffic emergency disabled', 'system');\n            }\n        }\n    }\n    async _applySecurityLayersWithoutMutex(data, isFakeMessage = false) {\n    try {\n        let processedData = data;\n        \n        if (isFakeMessage) {\n            if (this.encryptionKey && typeof processedData === 'string') {\n                processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n            }\n            return processedData;\n        }\n        \n        // Nested Encryption (if enabled)\n        if (this.securityFeatures.hasNestedEncryption && this.nestedEncryptionKey && processedData instanceof ArrayBuffer) {\n            processedData = await this.applyNestedEncryption(processedData);\n        }\n        \n        // Packet Reordering (if enabled)\n        if (this.securityFeatures.hasPacketReordering && this.reorderingConfig?.enabled && processedData instanceof ArrayBuffer) {\n            processedData = this.applyPacketReordering(processedData);\n        }\n        \n        // Packet Padding (if enabled)\n        if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n            processedData = this.applyPacketPadding(processedData);\n        }\n        \n        // Anti-Fingerprinting (if enabled)\n        if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n            processedData = this.applyAntiFingerprinting(processedData);\n        }\n        \n        // Final encryption (if keys are present)\n        if (this.encryptionKey && typeof processedData === 'string') {\n            processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n        }\n        \n        return processedData;\n        \n    } catch (error) {\n        this._secureLog('error', '\u274C Error in applySecurityLayersWithoutMutex:', { errorType: error?.constructor?.name || 'Unknown' });\n        return data; // Return original data on error\n    }\n}\n    // ============================================\n    // 4. MESSAGE CHUNKING\n    // ============================================\n\n    async processChunkedMessage(chunkData) {\n        try {\n            if (!this.chunkingConfig.addChunkHeaders) {\n                // No headers, treat as regular message\n                return this.processMessage(chunkData);\n            }\n\n            const chunkArray = new Uint8Array(chunkData);\n            if (chunkArray.length < 16) {\n                // Too small to be a chunk with header\n                return this.processMessage(chunkData);\n            }\n\n            // Extract chunk header\n            const headerView = new DataView(chunkArray.buffer, 0, 16);\n            const messageId = headerView.getUint32(0, false);\n            const chunkIndex = headerView.getUint32(4, false);\n            const totalChunks = headerView.getUint32(8, false);\n            const chunkSize = headerView.getUint32(12, false);\n\n            // Extract chunk data\n            const chunk = chunkArray.slice(16, 16 + chunkSize);\n\n            // Store chunk in buffer\n            if (!this.chunkQueue[messageId]) {\n                this.chunkQueue[messageId] = {\n                    chunks: new Array(totalChunks),\n                    received: 0,\n                    timestamp: Date.now()\n                };\n            }\n\n            const messageBuffer = this.chunkQueue[messageId];\n            messageBuffer.chunks[chunkIndex] = chunk;\n            messageBuffer.received++;\n\n                            this._secureLog('debug', `\uD83D\uDCE6 Received chunk ${chunkIndex + 1}/${totalChunks} for message ${messageId}`);\n\n            // Check if all chunks received\n            if (messageBuffer.received === totalChunks) {\n                // Combine all chunks\n                const totalSize = messageBuffer.chunks.reduce((sum, chunk) => sum + chunk.length, 0);\n                const combinedData = new Uint8Array(totalSize);\n                \n                let offset = 0;\n                for (const chunk of messageBuffer.chunks) {\n                    combinedData.set(chunk, offset);\n                    offset += chunk.length;\n                }\n\n                // Process complete message\n                await this.processMessage(combinedData.buffer);\n                \n                // Clean up\n                delete this.chunkQueue[messageId];\n                \n                this._secureLog('info', `\uD83D\uDCE6 Chunked message ${messageId} reassembled and processed`);\n            }\n        } catch (error) {\n            this._secureLog('error', '\u274C Chunked message processing failed:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n\n    // ============================================\n    // 5. DECOY CHANNELS\n    // ============================================\n\n    initializeDecoyChannels() {\n        if (!this.decoyChannelConfig.enabled || !this.peerConnection) {\n            return;\n        }\n\n        // Prevent multiple initializations\n        if (this.decoyChannels.size > 0) {\n            this._secureLog('warn', '\u26A0\uFE0F Decoy channels already initialized, skipping...');\n            return;\n        }\n\n        try {\n            const numDecoyChannels = Math.min(\n                this.decoyChannelConfig.maxDecoyChannels,\n                this.decoyChannelConfig.decoyChannelNames.length\n            );\n\n            for (let i = 0; i < numDecoyChannels; i++) {\n                const channelName = this.decoyChannelConfig.decoyChannelNames[i];\n                const decoyChannel = this.peerConnection.createDataChannel(channelName, {\n                    ordered: Math.random() > 0.5,\n                    maxRetransmits: Math.floor(Math.random() * 3)\n                });\n\n                this.setupDecoyChannel(decoyChannel, channelName);\n                this.decoyChannels.set(channelName, decoyChannel);\n            }\n\n            if (this._debugMode) {\n                this._secureLog('info', `\uD83C\uDFAD Initialized ${numDecoyChannels} decoy channels`);\n            }\n        } catch (error) {\n            if (this._debugMode) {\n                this._secureLog('error', '\u274C Failed to initialize decoy channels:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n        }\n    }\n\n    setupDecoyChannel(channel, channelName) {\n        channel.onopen = () => {\n            if (this._debugMode) {\n                this._secureLog('debug', `\uD83C\uDFAD Decoy channel \"${channelName}\" opened`);\n            }\n            this.startDecoyTraffic(channel, channelName);\n        };\n\n        channel.onmessage = (event) => {\n            if (this._debugMode) {\n                this._secureLog('debug', `\uD83C\uDFAD Received decoy message on \"${channelName}\": ${event.data?.length || 'undefined'} bytes`);\n            }\n        };\n\n        channel.onclose = () => {\n            if (this._debugMode) {\n                this._secureLog('debug', `\uD83C\uDFAD Decoy channel \"${channelName}\" closed`);\n            }\n            this.stopDecoyTraffic(channelName);\n        };\n\n        channel.onerror = (error) => {\n            if (this._debugMode) {\n                this._secureLog('error', `\u274C Decoy channel \"${channelName}\" error`, { error: error.message });\n            }\n        };\n    }\n\n    startDecoyTraffic(channel, channelName) {\n        const sendDecoyData = async () => {\n            if (channel.readyState !== 'open') {\n                return;\n            }\n\n            try {\n                const decoyData = this.generateDecoyData(channelName);\n                channel.send(decoyData);\n                \n                const interval = this.decoyChannelConfig.randomDecoyIntervals ?\n                    Math.random() * 15000 + 10000 : \n                    20000; \n                \n                this.decoyTimers.set(channelName, setTimeout(() => sendDecoyData(), interval));\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('error', `\u274C Failed to send decoy data on \"${channelName}\"`, { error: error.message });\n                }\n            }\n        };\n\n        const initialDelay = Math.random() * 10000 + 5000; \n        this.decoyTimers.set(channelName, setTimeout(() => sendDecoyData(), initialDelay));\n    }\n\n    stopDecoyTraffic(channelName) {\n        const timer = this.decoyTimers.get(channelName);\n        if (timer) {\n            clearTimeout(timer);\n            this.decoyTimers.delete(channelName);\n        }\n    }\n\n    generateDecoyData(channelName) {\n        const decoyTypes = {\n            'sync': () => JSON.stringify({\n                type: 'sync',\n                timestamp: Date.now(),\n                sequence: Math.floor(Math.random() * 1000),\n                data: Array.from(crypto.getRandomValues(new Uint8Array(32)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            }),\n            'status': () => JSON.stringify({\n                type: 'status',\n                status: ['online', 'away', 'busy'][Math.floor(Math.random() * 3)],\n                uptime: Math.floor(Math.random() * 3600),\n                data: Array.from(crypto.getRandomValues(new Uint8Array(16)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            }),\n            'heartbeat': () => JSON.stringify({\n                type: 'heartbeat',\n                timestamp: Date.now(),\n                data: Array.from(crypto.getRandomValues(new Uint8Array(24)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            }),\n            'metrics': () => JSON.stringify({\n                type: 'metrics',\n                cpu: Math.random() * 100,\n                memory: Math.random() * 100,\n                network: Math.random() * 1000,\n                data: Array.from(crypto.getRandomValues(new Uint8Array(20)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            }),\n            'debug': () => JSON.stringify({\n                type: 'debug',\n                level: ['info', 'warn', 'error'][Math.floor(Math.random() * 3)],\n                message: 'Debug message',\n                data: Array.from(crypto.getRandomValues(new Uint8Array(28)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            })\n        };\n\n        return decoyTypes[channelName] ? decoyTypes[channelName]() : \n            Array.from(crypto.getRandomValues(new Uint8Array(64)))\n                .map(b => b.toString(16).padStart(2, '0')).join('');\n    }\n\n    // ============================================\n    // 6. PACKET REORDERING PROTECTION\n    // ============================================\n\n    addReorderingHeaders(data) {\n        if (!this.reorderingConfig.enabled) {\n            return data;\n        }\n\n        try {\n            const dataArray = new Uint8Array(data);\n            const headerSize = this.reorderingConfig.useTimestamps ? 12 : 8;\n            const header = new ArrayBuffer(headerSize);\n            const headerView = new DataView(header);\n\n            // Add sequence number\n            if (this.reorderingConfig.useSequenceNumbers) {\n                headerView.setUint32(0, this.sequenceNumber++, false);\n            }\n\n            // Add timestamp\n            if (this.reorderingConfig.useTimestamps) {\n                headerView.setUint32(4, Date.now(), false);\n            }\n\n            // Add data size\n            headerView.setUint32(this.reorderingConfig.useTimestamps ? 8 : 4, dataArray.length, false);\n\n            // Combine header and data\n            const result = new Uint8Array(headerSize + dataArray.length);\n            result.set(new Uint8Array(header), 0);\n            result.set(dataArray, headerSize);\n\n            return result.buffer;\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to add reordering headers:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data;\n        }\n    }\n\n    async processReorderedPacket(data) {\n    if (!this.reorderingConfig.enabled) {\n        return this.processMessage(data);\n    }\n\n    try {\n        const dataArray = new Uint8Array(data);\n        const headerSize = this.reorderingConfig.useTimestamps ? 12 : 8;\n\n        if (dataArray.length < headerSize) {\n            if (this._debugMode) {\n                this._secureLog('warn', '\u26A0\uFE0F Data too short for reordering headers, processing directly');\n            }\n            return this.processMessage(data);\n        }\n\n        const headerView = new DataView(dataArray.buffer, 0, headerSize);\n        let sequence = 0;\n        let timestamp = 0;\n        let dataSize = 0;\n\n        if (this.reorderingConfig.useSequenceNumbers) {\n            sequence = headerView.getUint32(0, false);\n        }\n\n        if (this.reorderingConfig.useTimestamps) {\n            timestamp = headerView.getUint32(4, false);\n        }\n\n        dataSize = headerView.getUint32(this.reorderingConfig.useTimestamps ? 8 : 4, false);\n\n        if (dataSize > dataArray.length - headerSize || dataSize <= 0) {\n            if (this._debugMode) {\n                this._secureLog('warn', '\u26A0\uFE0F Invalid reordered packet data size, processing directly');\n            }\n            return this.processMessage(data);\n        }\n\n        const actualData = dataArray.slice(headerSize, headerSize + dataSize);\n\n        try {\n            const textData = new TextDecoder().decode(actualData);\n            const content = JSON.parse(textData);\n            if (content.type === 'fake' || content.isFakeTraffic === true) {\n                if (this._debugMode) {\n                    this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Reordered fake message: ${content.pattern || 'unknown'}`);\n                }\n                return; \n            }\n        } catch (e) {\n\n        }\n\n        this.packetBuffer.set(sequence, {\n            data: actualData.buffer,\n            timestamp: timestamp || Date.now()\n        });\n\n        await this.processOrderedPackets();\n\n    } catch (error) {\n        this._secureLog('error', '\u274C Failed to process reordered packet:', { errorType: error?.constructor?.name || 'Unknown' });\n        return this.processMessage(data);\n    }\n}\n\n// ============================================\n// IMPROVED PROCESSORDEREDPACKETS with filtering\n// ============================================\n\nasync processOrderedPackets() {\n    const now = Date.now();\n    const timeout = this.reorderingConfig.reorderTimeout;\n\n    while (true) {\n        const nextSequence = this.lastProcessedSequence + 1;\n        const packet = this.packetBuffer.get(nextSequence);\n\n        if (!packet) {\n            const oldestPacket = this.findOldestPacket();\n            if (oldestPacket && (now - oldestPacket.timestamp) > timeout) {\n                this._secureLog('warn', '\u26A0\uFE0F Packet ${oldestPacket.sequence} timed out, processing out of order');\n                \n                try {\n                    const textData = new TextDecoder().decode(oldestPacket.data);\n                    const content = JSON.parse(textData);\n                    if (content.type === 'fake' || content.isFakeTraffic === true) {\n                        this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Timed out fake message: ${content.pattern || 'unknown'}`);\n                        this.packetBuffer.delete(oldestPacket.sequence);\n                        this.lastProcessedSequence = oldestPacket.sequence;\n                        continue; \n                    }\n                } catch (e) {\n                }\n                \n                await this.processMessage(oldestPacket.data);\n                this.packetBuffer.delete(oldestPacket.sequence);\n                this.lastProcessedSequence = oldestPacket.sequence;\n            } else {\n                break; \n            }\n        } else {\n            try {\n                const textData = new TextDecoder().decode(packet.data);\n                const content = JSON.parse(textData);\n                if (content.type === 'fake' || content.isFakeTraffic === true) {\n                    this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Ordered fake message: ${content.pattern || 'unknown'}`);\n                    this.packetBuffer.delete(nextSequence);\n                    this.lastProcessedSequence = nextSequence;\n                    continue; \n                }\n            } catch (e) {\n            }\n            \n            await this.processMessage(packet.data);\n            this.packetBuffer.delete(nextSequence);\n            this.lastProcessedSequence = nextSequence;\n        }\n    }\n\n    this.cleanupOldPackets(now, timeout);\n}\n\n\n    findOldestPacket() {\n        let oldest = null;\n        for (const [sequence, packet] of this.packetBuffer.entries()) {\n            if (!oldest || packet.timestamp < oldest.timestamp) {\n                oldest = { sequence, ...packet };\n            }\n        }\n        return oldest;\n    }\n\n    cleanupOldPackets(now, timeout) {\n        for (const [sequence, packet] of this.packetBuffer.entries()) {\n            if ((now - packet.timestamp) > timeout) {\n                this._secureLog('warn', '\u26A0\uFE0F \uD83D\uDDD1\uFE0F Removing timed out packet ${sequence}');\n                this.packetBuffer.delete(sequence);\n            }\n        }\n    }\n\n    // ============================================\n    // 7. ANTI-FINGERPRINTING\n    // ============================================\n\n    applyAntiFingerprinting(data) {\n        if (!this.antiFingerprintingConfig.enabled) {\n            return data;\n        }\n\n        try {\n            let processedData = data;\n\n            // Add random noise\n            if (this.antiFingerprintingConfig.addNoise) {\n                processedData = this.addNoise(processedData);\n            }\n\n            // Randomize sizes\n            if (this.antiFingerprintingConfig.randomizeSizes) {\n                processedData = this.randomizeSize(processedData);\n            }\n\n            // Mask patterns\n            if (this.antiFingerprintingConfig.maskPatterns) {\n                processedData = this.maskPatterns(processedData);\n            }\n\n            // Add random headers\n            if (this.antiFingerprintingConfig.useRandomHeaders) {\n                processedData = this.addRandomHeaders(processedData);\n            }\n\n            return processedData;\n        } catch (error) {\n            this._secureLog('error', '\u274C Anti-fingerprinting failed:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data;\n        }\n    }\n\n    addNoise(data) {\n        const dataArray = new Uint8Array(data);\n        const noiseSize = this.getUnbiasedRandomInRange(8, 40); // 8-40 bytes\n        const noise = crypto.getRandomValues(new Uint8Array(noiseSize));\n        \n        const result = new Uint8Array(dataArray.length + noiseSize);\n        result.set(dataArray, 0);\n        result.set(noise, dataArray.length);\n        \n        return result.buffer;\n    }\n\n    randomizeSize(data) {\n        const dataArray = new Uint8Array(data);\n        const variation = this.fingerprintMask.sizeVariation;\n        const targetSize = Math.floor(dataArray.length * variation);\n        \n        if (targetSize > dataArray.length) {\n            // Add padding to increase size\n            const padding = crypto.getRandomValues(new Uint8Array(targetSize - dataArray.length));\n            const result = new Uint8Array(targetSize);\n            result.set(dataArray, 0);\n            result.set(padding, dataArray.length);\n            return result.buffer;\n        } else if (targetSize < dataArray.length) {\n            // Truncate to decrease size\n            return dataArray.slice(0, targetSize).buffer;\n        }\n        \n        return data;\n    }\n\n    maskPatterns(data) {\n        const dataArray = new Uint8Array(data);\n        const result = new Uint8Array(dataArray.length);\n        \n        // Apply XOR with noise pattern\n        for (let i = 0; i < dataArray.length; i++) {\n            const noiseByte = this.fingerprintMask.noisePattern[i % this.fingerprintMask.noisePattern.length];\n            result[i] = dataArray[i] ^ noiseByte;\n        }\n        \n        return result.buffer;\n    }\n\n    addRandomHeaders(data) {\n        const dataArray = new Uint8Array(data);\n        const headerCount = this.getUnbiasedRandomInRange(1, 3); // 1-3 headers\n        let totalHeaderSize = 0;\n        \n        // Calculate total header size\n        for (let i = 0; i < headerCount; i++) {\n            totalHeaderSize += 4 + this.getUnbiasedRandomInRange(0, 15) + 4; // size + data + checksum\n        }\n        \n        const result = new Uint8Array(totalHeaderSize + dataArray.length);\n        let offset = 0;\n        \n        // Add random headers\n        for (let i = 0; i < headerCount; i++) {\n            // Generate unbiased random index for header selection\n            let headerIndex;\n            do {\n                headerIndex = crypto.getRandomValues(new Uint8Array(1))[0];\n            } while (headerIndex >= 256 - (256 % this.fingerprintMask.headerVariations.length));\n            \n            const headerName = this.fingerprintMask.headerVariations[headerIndex % this.fingerprintMask.headerVariations.length];\n            \n            // Generate unbiased random size for header data (4-19 bytes)\n            let headerSize;\n            do {\n                headerSize = crypto.getRandomValues(new Uint8Array(1))[0];\n            } while (headerSize >= 256 - (256 % 16));\n            \n            const headerData = crypto.getRandomValues(new Uint8Array((headerSize % 16) + 4));\n            \n            // Header structure: [size:4][name:4][data:variable][checksum:4]\n            const headerView = new DataView(result.buffer, offset);\n            headerView.setUint32(0, headerData.length + 8, false); // Total header size\n            headerView.setUint32(4, this.hashString(headerName), false); // Name hash\n            \n            result.set(headerData, offset + 8);\n            \n            // Add checksum\n            const checksum = this.calculateChecksum(result.slice(offset, offset + 8 + headerData.length));\n            const checksumView = new DataView(result.buffer, offset + 8 + headerData.length);\n            checksumView.setUint32(0, checksum, false);\n            \n            offset += 8 + headerData.length + 4;\n        }\n        \n        // Add original data\n        result.set(dataArray, offset);\n        \n        return result.buffer;\n    }\n\n    hashString(str) {\n        let hash = 0;\n        for (let i = 0; i < str.length; i++) {\n            const char = str.charCodeAt(i);\n            hash = ((hash << 5) - hash) + char;\n            hash = hash & hash;\n        }\n        return Math.abs(hash);\n    }\n\n    calculateChecksum(data) {\n        let checksum = 0;\n        for (let i = 0; i < data.length; i++) {\n            checksum = (checksum + data[i]) & 0xFFFFFFFF;\n        }\n        return checksum;\n    }\n\n    // ============================================\n    // ENHANCED MESSAGE SENDING AND RECEIVING\n    // ============================================\n\n    async removeSecurityLayers(data) {\n    try {\n        const status = this.getSecurityStatus();\n        if (this._debugMode) {\n            this._secureLog('debug', `\uD83D\uDD0D removeSecurityLayers (Stage ${status.stage})`, {\n                dataType: typeof data,\n                dataLength: data?.length || data?.byteLength || 0,\n                activeFeatures: status.activeFeaturesCount\n            });\n        }\n\n        if (!data) {\n            this._secureLog('warn', '\u26A0\uFE0F Received empty data');\n            return null;\n        }\n\n        let processedData = data;\n\n        // IMPORTANT: Early check for fake messages\n        if (typeof data === 'string') {\n            try {\n                const jsonData = JSON.parse(data);\n                \n                // PRIORITY ONE: Filtering out fake messages\n                if (jsonData.type === 'fake') {\n                    if (this._debugMode) {\n                        this._secureLog('debug', `\uD83C\uDFAD Fake message filtered out: ${jsonData.pattern} (size: ${jsonData.size})`);\n                    }\n                    return 'FAKE_MESSAGE_FILTERED'; \n                }\n                \n                // System messages \u2014 do NOT return for re-processing\n                if (jsonData.type && ['heartbeat', 'verification', 'verification_response', 'peer_disconnect', 'key_rotation_signal', 'key_rotation_ready', 'security_upgrade', 'ice_restart_offer', 'ice_restart_answer', 'ice_restart_request'].includes(jsonData.type)) {\n                    return 'SYSTEM_MESSAGE_FILTERED';\n                }\n                \n                // File transfer messages \u2014 do NOT return for display\n                if (jsonData.type && ['file_transfer_start', 'file_transfer_response', 'file_chunk', 'chunk_confirmation', 'file_transfer_complete', 'file_transfer_error'].includes(jsonData.type)) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCC1 File transfer message detected, blocking from chat', { type: jsonData.type });\n                    }\n                    return 'FILE_MESSAGE_FILTERED';\n                }\n                \n                // Regular text messages - extract the actual message text\n                if (jsonData.type === 'message') {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCDD Regular message detected, extracting text', { data: jsonData.data });\n                    }\n                    return jsonData.data; // Return the actual message text, not the JSON\n                }\n                \n                // Enhanced messages\n                if (jsonData.type === 'enhanced_message' && jsonData.data) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDD10 Enhanced message detected, decrypting...');\n                    }\n                    \n                    if (!this.encryptionKey || !this.macKey || !this.metadataKey) {\n                        this._secureLog('error', '\u274C Missing encryption keys');\n                        return null;\n                    }\n                    \n                    const decryptedResult = await window.EnhancedSecureCryptoUtils.decryptMessage(\n                        jsonData.data,\n                        this.encryptionKey,\n                        this.macKey,\n                        this.metadataKey\n                    );\n                    \n                    if (this._debugMode) {\n                        this._secureLog('debug', '\u2705 Enhanced message decrypted, extracting...');\n                        this._secureLog('debug', '\uD83D\uDD0D decryptedResult', {\n                            type: typeof decryptedResult,\n                            hasMessage: !!decryptedResult?.message,\n                            messageType: typeof decryptedResult?.message,\n                            messageLength: decryptedResult?.message?.length || 0,\n                            messageSample: decryptedResult?.message?.substring(0, 50) || 'no message'\n                        });\n                    }\n                    \n                    // CHECKING FOR FAKE MESSAGES AFTER DECRYPTION\n                    try {\n                        const decryptedContent = JSON.parse(decryptedResult.message);\n                        if (decryptedContent.type === 'fake' || decryptedContent.isFakeTraffic === true) {\n                            if (this._debugMode) {\n                                this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Encrypted fake message: ${decryptedContent.pattern || 'unknown'}`);\n                            }\n                            return 'FAKE_MESSAGE_FILTERED';\n                        }\n                    } catch (e) {\n                        if (this._debugMode) {\n                            this._secureLog('debug', '\uD83D\uDCDD Decrypted content is not JSON, treating as plain text message');\n                        }\n                    }\n                    \n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCE4 Returning decrypted message', { message: decryptedResult.message?.substring(0, 50) });\n                    }\n                    return decryptedResult.message;\n                }\n                \n                // Regular messages\n                if (jsonData.type === 'message' && jsonData.data) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCDD Regular message detected, extracting data');\n                    }\n                    return jsonData.data; // Return the actual message text\n                }\n                \n                // If it's a regular message with type 'message', let it continue processing\n                if (jsonData.type === 'message') {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCDD Regular message detected, returning for display');\n                    }\n                    return data; // Return the original JSON string for processing\n                }\n                \n                // If it's not a special type, return the original data for display\n                if (!jsonData.type || (jsonData.type !== 'fake' && !['heartbeat', 'verification', 'verification_response', 'peer_disconnect', 'key_rotation_signal', 'key_rotation_ready', 'enhanced_message', 'security_upgrade', 'ice_restart_offer', 'ice_restart_answer', 'ice_restart_request', 'file_transfer_start', 'file_transfer_response', 'file_chunk', 'chunk_confirmation', 'file_transfer_complete', 'file_transfer_error'].includes(jsonData.type))) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCDD Regular message detected, returning for display');\n                    }\n                    return data;\n                }\n            } catch (e) {\n                if (this._debugMode) {\n                    this._secureLog('debug', '\uD83D\uDCC4 Not JSON, processing as raw data');\n                }\n                // If it's not JSON, it might be a plain text message - return as-is\n                return data;\n            }\n        }\n\n        // Standard Decryption\n        if (this.encryptionKey && typeof processedData === 'string' && processedData.length > 50) {\n            try {\n                const base64Regex = /^[A-Za-z0-9+/=]+$/;\n                if (base64Regex.test(processedData.trim())) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDD13 Applying standard decryption...');\n                    }\n                    processedData = await window.EnhancedSecureCryptoUtils.decryptData(processedData, this.encryptionKey);\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\u2705 Standard decryption successful');\n                    }\n                    \n                    // CHECKING FOR FAKE MESSAGES AFTER LEGACY DECRYPTION\n                    if (typeof processedData === 'string') {\n                        try {\n                            const legacyContent = JSON.parse(processedData);\n                            if (legacyContent.type === 'fake' || legacyContent.isFakeTraffic === true) {\n                                if (this._debugMode) {\n                                    this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Legacy fake message: ${legacyContent.pattern || 'unknown'}`);\n                                }\n                                return 'FAKE_MESSAGE_FILTERED';\n                            }\n                        } catch (e) {\n                            \n                        }\n                        processedData = new TextEncoder().encode(processedData).buffer;\n                    }\n                }\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Standard decryption failed:', { details: error.message });\n                }\n                return data; \n            }\n        }\n\n        if (this.securityFeatures.hasNestedEncryption && \n            this.nestedEncryptionKey && \n            processedData instanceof ArrayBuffer &&\n            processedData.byteLength > 12) { \n            \n            try {\n                processedData = await this.removeNestedEncryption(processedData);\n                \n                if (processedData instanceof ArrayBuffer) {\n                    try {\n                        const textData = new TextDecoder().decode(processedData);\n                        const nestedContent = JSON.parse(textData);\n                        if (nestedContent.type === 'fake' || nestedContent.isFakeTraffic === true) {\n                            if (this._debugMode) {\n                                this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Nested fake message: ${nestedContent.pattern || 'unknown'}`);\n                            }\n                            return 'FAKE_MESSAGE_FILTERED';\n                        }\n                    } catch (e) {\n                        \n                    }\n                }\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Nested decryption failed - skipping this layer:', { details: error.message });\n                }\n            }\n        }\n\n        if (this.securityFeatures.hasPacketReordering && \n            this.reorderingConfig.enabled && \n            processedData instanceof ArrayBuffer) {\n            try {\n                const headerSize = this.reorderingConfig.useTimestamps ? 12 : 8;\n                if (processedData.byteLength > headerSize) {\n                    return await this.processReorderedPacket(processedData);\n                }\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Reordering processing failed - using direct processing:', { details: error.message });\n                }\n            }\n        }\n\n        // Packet Padding Removal\n        if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n            try {\n                processedData = this.removePacketPadding(processedData);\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Padding removal failed:', { details: error.message });\n                }\n            }\n        }\n\n        // Anti-Fingerprinting Removal\n        if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n            try {\n                processedData = this.removeAntiFingerprinting(processedData);\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Anti-fingerprinting removal failed:', { details: error.message });\n                }\n            }\n        }\n\n        // Final transformation\n        if (processedData instanceof ArrayBuffer) {\n            processedData = new TextDecoder().decode(processedData);\n        }\n\n        if (typeof processedData === 'string') {\n            try {\n                const finalContent = JSON.parse(processedData);\n                if (finalContent.type === 'fake' || finalContent.isFakeTraffic === true) {\n                    if (this._debugMode) {\n                        this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Final check fake message: ${finalContent.pattern || 'unknown'}`);\n                    }\n                    return 'FAKE_MESSAGE_FILTERED';\n                }\n            } catch (e) {\n            }\n        }\n\n        return processedData;\n\n    } catch (error) {\n        this._secureLog('error', '\u274C Critical error in removeSecurityLayers:', { errorType: error?.constructor?.name || 'Unknown' });\n        return data;\n    }\n}\n\n    removeAntiFingerprinting(data) {\n        // This is a simplified version - in practice, you'd need to reverse all operations\n        // For now, we'll just return the data as-is since the operations are mostly additive\n        return data;\n    }\n\n    async applySecurityLayers(data, isFakeMessage = false) {\n        try {\n            let processedData = data;\n            \n            if (isFakeMessage) {\n                if (this.encryptionKey && typeof processedData === 'string') {\n                    processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n                }\n                return processedData;\n            }\n            \n            if (this.securityFeatures.hasNestedEncryption && this.nestedEncryptionKey && processedData instanceof ArrayBuffer) {\n                processedData = await this.applyNestedEncryption(processedData);\n            }\n            \n            if (this.securityFeatures.hasPacketReordering && this.reorderingConfig?.enabled && processedData instanceof ArrayBuffer) {\n                processedData = this.applyPacketReordering(processedData);\n            }\n            \n            if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n                processedData = this.applyPacketPadding(processedData);\n            }\n            \n            if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n                processedData = this.applyAntiFingerprinting(processedData);\n            }\n            \n            if (this.encryptionKey && typeof processedData === 'string') {\n                processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n            }\n            \n            return processedData;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error in applySecurityLayers:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data;\n        }\n    }\n\n    /**\n     * Whitelist + bound the per-message UI metadata so a peer cannot smuggle\n     * arbitrary objects, huge values, or absurd timers through it.\n     * @param {object} meta\n     * @returns {object|null}\n     */\n    _sanitizeMessageMeta(meta) {\n        if (!meta || typeof meta !== 'object') return null;\n        const out = {};\n        if (typeof meta.mid === 'string' && meta.mid.length > 0 && meta.mid.length <= 64) {\n            out.mid = meta.mid.replace(/[^A-Za-z0-9_-]/g, '').slice(0, 64);\n        }\n        if (meta.code === true) out.code = true;\n        if (meta.once === true) out.once = true;\n        if (Number.isFinite(meta.onceTtl)) {\n            // View-once: seconds the message stays visible after the peer opens it.\n            const onceTtl = Math.floor(meta.onceTtl);\n            if (onceTtl >= 1 && onceTtl <= 3600) out.onceTtl = onceTtl;\n        }\n        if (Number.isFinite(meta.ttl)) {\n            // Clamp disappearing timer to [5s, 24h]; ignore anything else.\n            const ttl = Math.floor(meta.ttl);\n            if (ttl >= 5 && ttl <= 86400) out.ttl = ttl;\n        }\n        return Object.keys(out).length ? out : null;\n    }\n\n    /**\n     * Unsend: ask the peer to remove a previously delivered message by id.\n     * Sent over the authenticated DTLS control channel like other system\n     * messages. Best-effort and cooperative \u2014 a peer can ignore it, exactly\n     * like WhatsApp/Telegram \"delete for everyone\".\n     * @param {string} messageId\n     * @returns {boolean}\n     */\n    sendMessageDelete(messageId) {\n        if (typeof messageId !== 'string' || !messageId) return false;\n        return this.sendSystemMessage({\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE_DELETE,\n            messageId: messageId.slice(0, 64)\n        });\n    }\n\n    /**\n     * Delivery receipt: tell the sender we received a chat message (by id), so\n     * their bubble can flip from \"sent\" (\u2713) to \"delivered\" (\u2713\u2713). Best-effort,\n     * over the same authenticated control channel as unsend.\n     * @param {string} messageId\n     * @returns {boolean}\n     */\n    sendDeliveryReceipt(messageId) {\n        if (typeof messageId !== 'string' || !messageId) return false;\n        return this.sendSystemMessage({\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE_RECEIPT,\n            messageId: messageId.slice(0, 64)\n        });\n    }\n\n    async sendMessage(data, meta = null) {\n        //   Comprehensive input validation\n        const validation = this._validateInputData(data, 'sendMessage');\n        if (!validation.isValid) {\n            const errorMessage = `Input validation failed: ${validation.errors.join(', ')}`;\n            this._secureLog('error', '\u274C Input validation failed in sendMessage', {\n                errors: validation.errors,\n                dataType: typeof data,\n                dataLength: data?.length || data?.byteLength || 0\n            });\n            throw new Error(errorMessage);\n        }\n\n        //   Rate limiting check\n        if (!this._checkRateLimit('sendMessage')) {\n            throw new Error('Rate limit exceeded for message sending');\n        }\n\n        //   Enforce verification gate\n        this._enforceVerificationGate('sendMessage');\n\n        //   Connection validation\n        if (!this.dataChannel || this.dataChannel.readyState !== 'open') {\n            throw new Error('Data channel not ready');\n        }\n\n        try {\n            // Ensure encryption keys are available; try to reinitialize if needed\n            if (!(this.encryptionKey && this.macKey && this.metadataKey)) {\n                await this._tryReinitializeEncryptionKeys();\n            }\n\n            this._secureLog('debug', 'sendMessage called', {\n                hasDataChannel: !!this.dataChannel,\n                dataChannelReady: this.dataChannel?.readyState === 'open',\n                isInitiator: this.isInitiator,\n                isVerified: this.isVerified,\n                connectionReady: this.peerConnection?.connectionState === 'connected'\n            });\n\n            this._secureLog('debug', '\uD83D\uDD0D sendMessage DEBUG', {\n                dataType: typeof validation.sanitizedData,\n                isString: typeof validation.sanitizedData === 'string',\n                isArrayBuffer: validation.sanitizedData instanceof ArrayBuffer,\n                dataLength: validation.sanitizedData?.length || validation.sanitizedData?.byteLength || 0,\n            });\n\n            // CRITICAL SECURITY FIX: File messages MUST be encrypted\n            // No more bypassing encryption for file_* messages\n            if (typeof validation.sanitizedData === 'string') {\n                try {\n                    const parsed = JSON.parse(validation.sanitizedData);\n                    \n                    if (parsed.type && parsed.type.startsWith('file_')) {\n                        this._secureLog('debug', '\uD83D\uDCC1 File message detected - applying full encryption with AAD', { type: parsed.type });\n                        \n                        // Create AAD for file message\n                        const aad = this._createFileMessageAAD(parsed.type, parsed.data);\n                        \n                        // Encrypt file message with AAD\n                        const encryptedData = await this._encryptFileMessage(validation.sanitizedData, aad);\n                        \n                        this.dataChannel.send(encryptedData);\n                        return true;\n                    }\n                } catch (jsonError) {\n                    // Not JSON \u2014 continue normal handling\n                }\n            }\n\n            //   For regular text messages, send via secure path with AAD\n            if (typeof validation.sanitizedData === 'string') {\n                // Verify that _createMessageAAD method is available\n                if (typeof this._createMessageAAD !== 'function') {\n                    throw new Error('_createMessageAAD method is not available. Manager may not be fully initialized.');\n                }\n                \n                // Create AAD with sequence number for anti-replay protection\n                const aad = this._createMessageAAD('message', { content: validation.sanitizedData });\n\n                const envelope = {\n                    type: 'message',\n                    data: validation.sanitizedData,\n                    timestamp: Date.now(),\n                    aad: aad // Include AAD for sequence number validation\n                };\n                // Optional per-message UI metadata (code/view-once/disappearing/id).\n                // Travels inside the encrypted envelope, NOT in the sanitized text,\n                // so it cannot corrupt or be spoofed from message content.\n                if (meta && typeof meta === 'object') {\n                    envelope.meta = this._sanitizeMessageMeta(meta);\n                }\n\n                return await this.sendSecureMessage(envelope);\n            }\n\n            //   For binary data, apply security layers with a limited mutex\n            this._secureLog('debug', '\uD83D\uDD10 Applying security layers to non-string data');\n            const securedData = await this._applySecurityLayersWithLimitedMutex(validation.sanitizedData, false);\n            this.dataChannel.send(securedData);\n            \n            return true;\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to send message', { \n                error: error.message,\n                errorType: error.constructor.name\n            });\n            throw error;\n        }\n    }\n\n    // FIX: New method applying security layers with limited mutex use\n    async _applySecurityLayersWithLimitedMutex(data, isFakeMessage = false) {\n    // Use mutex ONLY for cryptographic operations\n    return this._withMutex('cryptoOperation', async (operationId) => {\n        try {\n            let processedData = data;\n            \n            if (isFakeMessage) {\n                if (this.encryptionKey && typeof processedData === 'string') {\n                    processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n                }\n                return processedData;\n            }\n            \n            if (this.securityFeatures.hasNestedEncryption && this.nestedEncryptionKey && processedData instanceof ArrayBuffer) {\n                processedData = await this.applyNestedEncryption(processedData);\n            }\n            \n            if (this.securityFeatures.hasPacketReordering && this.reorderingConfig?.enabled && processedData instanceof ArrayBuffer) {\n                processedData = this.applyPacketReordering(processedData);\n            }\n            \n            if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n                processedData = this.applyPacketPadding(processedData);\n            }\n            \n            if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n                processedData = this.applyAntiFingerprinting(processedData);\n            }\n            \n            if (this.encryptionKey && typeof processedData === 'string') {\n                processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n            }\n            \n            return processedData;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error in applySecurityLayers:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data;\n        }\n    }, 3000); // Short timeout for crypto operations\n}\n\n    async sendSystemMessage(messageData) {\n        //   Block system messages without verification\n        // Exception: Allow verification-related system messages\n        const isVerificationMessage = messageData.type === 'verification_request' || \n                                     messageData.type === 'verification_response' ||\n                                     messageData.type === 'verification_required';\n        \n        if (!isVerificationMessage) {\n            this._enforceVerificationGate('sendSystemMessage', false);\n        }\n        \n        if (!this.dataChannel || this.dataChannel.readyState !== 'open') {\n            this._secureLog('warn', '\u26A0\uFE0F Cannot send system message - data channel not ready');\n            return false;\n        }\n\n        try {\n            const systemMessage = JSON.stringify({\n                type: messageData.type,\n                data: messageData,\n                timestamp: Date.now()\n            });\n\n            this._secureLog('debug', '\uD83D\uDD27 Sending system message', { type: messageData.type });\n            this.dataChannel.send(systemMessage);\n            return true;\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to send system message:', { errorType: error?.constructor?.name || 'Unknown' });\n            return false;\n        }\n    }\n\n    // FIX 1: Simplified mutex system for message processing\nasync processMessage(data) {\n    try {\n        // Liveness: anything arriving from the peer proves the path is alive.\n        // Optional-call on purpose \u2014 see the note in dataChannel.onmessage.\n        this._noteInboundActivity?.();\n        this._secureLog('debug', '\uFFFD\uFFFD Processing message', {\n            dataType: typeof data,\n            isArrayBuffer: data instanceof ArrayBuffer,\n            hasData: !!(data?.length || data?.byteLength)\n        });\n        \n        // CRITICAL: Early check for file messages WITHOUT mutex\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n\n                // ============================================\n                // FILE MESSAGES \u2014 PRIORITY 1 (WITHOUT MUTEX)\n                // ============================================\n                \n                const fileMessageTypes = [\n                    'file_transfer_start',\n                    'file_transfer_response',\n                    'file_chunk', \n                    'chunk_confirmation',\n                    'file_transfer_complete',\n                    'file_transfer_error'\n                ];\n\n                // CRITICAL SECURITY FIX: Check for encrypted file messages first\n                if (parsed.type === 'encrypted_file_message') {\n                    this._secureLog('debug', '\uD83D\uDCC1 Encrypted file message detected in processMessage');\n                    \n                    try {\n                        // Decrypt and validate file message\n                        const { decryptedData, aad } = await this._decryptFileMessage(data);\n                        \n                        // Parse decrypted data\n                        const decryptedParsed = JSON.parse(decryptedData);\n                        \n                        this._secureLog('debug', '\uD83D\uDCC1 File message decrypted successfully', { \n                            type: decryptedParsed.type,\n                            aadMessageType: aad.messageType \n                        });\n                        \n                        // Process decrypted file message\n                        if (this.fileTransferSystem && typeof this.fileTransferSystem.handleFileMessage === 'function') {\n                            await this.fileTransferSystem.handleFileMessage(decryptedParsed);\n                            return;\n                        }\n                    } catch (error) {\n                        this._secureLog('error', '\u274C Failed to decrypt file message', { error: error.message });\n                        return; // Drop invalid file message\n                    }\n                }\n                \n                // Legacy unencrypted file messages - should not happen in secure mode\n                if (parsed.type && fileMessageTypes.includes(parsed.type)) {\n                    this._secureLog('warn', '\u26A0\uFE0F Unencrypted file message detected - this should not happen in secure mode', { type: parsed.type });\n                    \n                    // Drop unencrypted file messages for security\n                    this._secureLog('error', '\u274C Dropping unencrypted file message for security', { type: parsed.type });\n                    return;\n                }\n                \n                // ============================================\n                // ENHANCED MESSAGES WITH AAD VALIDATION (WITHOUT MUTEX)\n                // ============================================\n                \n                if (parsed.type === 'enhanced_message') {\n                    this._secureLog('debug', '\uD83D\uDD10 Enhanced message detected in processMessage');\n                    if (!this._checkInboundRateLimit('processMessage:enhanced_message')) {\n                        return;\n                    }\n                    \n                    try {\n                        // Decrypt enhanced message\n                        const decryptedData = await window.EnhancedSecureCryptoUtils.decryptMessage(\n                            parsed.data,\n                            this.encryptionKey,\n                            this.macKey,\n                            this.metadataKey\n                        );\n                        \n                        // Parse decrypted data\n                        const decryptedParsed = JSON.parse(decryptedData.data);\n                        \n                        //   Validate AAD with sequence number\n                        if (decryptedData.metadata && decryptedData.metadata.sequenceNumber !== undefined) {\n                            if (!this._validateIncomingSequenceNumber(decryptedData.metadata.sequenceNumber, 'enhanced_message')) {\n                                this._secureLog('warn', '\u26A0\uFE0F Enhanced message sequence number validation failed - possible replay attack', {\n                                    received: decryptedData.metadata.sequenceNumber,\n                                    expected: this.expectedSequenceNumber\n                                });\n                                return; // Drop message with invalid sequence number\n                            }\n                        }\n                        \n                        // Process decrypted message (with optional UI metadata)\n                        if (decryptedParsed.type === 'message' && this.onMessage && decryptedParsed.data) {\n                            this.deliverMessageToUI(decryptedParsed.data, 'received', decryptedParsed.meta);\n                        }\n\n                        return;\n                    } catch (error) {\n                        this._secureLog('error', '\u274C Failed to decrypt enhanced message', { error: error.message });\n                        return; // Drop invalid enhanced message\n                    }\n                }\n                \n                // ============================================\n                // REGULAR USER MESSAGES (WITHOUT MUTEX)\n                // ============================================\n                \n                // SECURITY: a bare `{type:'message'}` frame and the control frames\n                // below used to be acted on here with no authentication at all \u2014\n                // the same injection that was removed from dataChannel.onmessage.\n                // This whole method is currently unreachable from the live handler\n                // (nothing outside its own call cycle enters it), but leaving a\n                // second, weaker inbound pipeline in place means one future call\n                // site silently undoes that fix. Mirror the live policy exactly:\n                // chat content only via authenticated `enhanced_message`, control\n                // frames only after verification.\n                if (parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE) {\n                    this._secureLog('error', 'Rejected unencrypted frame in processMessage', {\n                        messageType: 'message'\n                    });\n                    return;\n                }\n\n                if (parsed.type &&\n                    EnhancedSecureWebRTCManager.POST_VERIFICATION_CONTROL_TYPES.has(parsed.type)) {\n                    if (!this._enforceVerificationGate('control_frame_receive', false)) {\n                        this._secureLog('error', 'Dropped control frame received before verification', {\n                            messageType: parsed.type\n                        });\n                        return;\n                    }\n\n                    const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n\n                    if (parsed.type === T.MESSAGE_DELETE) {\n                        const messageId = parsed?.data?.messageId ?? parsed?.messageId;\n                        if (typeof messageId === 'string' && messageId) {\n                            try { this.onMessageDelete?.(messageId.slice(0, 64)); } catch (_) {}\n                        }\n                        return;\n                    }\n\n                    if (parsed.type === T.MESSAGE_RECEIPT) {\n                        const messageId = parsed?.data?.messageId ?? parsed?.messageId;\n                        if (typeof messageId === 'string' && messageId) {\n                            try { this.onMessageDelivered?.(messageId.slice(0, 64)); } catch (_) {}\n                        }\n                        return;\n                    }\n\n                    if ([T.CALL_OFFER, T.CALL_ANSWER, T.CALL_ICE,\n                         T.CALL_DECLINE, T.CALL_END].includes(parsed.type)) {\n                        try { await this._handleCallSignal(parsed.type, parsed.data || {}); } catch (e) {\n                            this._secureLog('error', '\u274C Call signal handling failed', { errorType: e?.constructor?.name });\n                        }\n                        return;\n                    }\n\n                    if ([T.ICE_RESTART_OFFER, T.ICE_RESTART_ANSWER,\n                         T.ICE_RESTART_REQUEST].includes(parsed.type)) {\n                        try { await this._handleIceRestartSignal(parsed.type, parsed.data || {}); } catch (e) {\n                            this._secureLog('error', '\u274C ICE restart signal handling failed', { errorType: e?.constructor?.name });\n                        }\n                        return;\n                    }\n\n                    return;\n                }\n\n                // ============================================\n                // SYSTEM MESSAGES (WITHOUT MUTEX)\n                // ============================================\n                \n                if (parsed.type && ['heartbeat', 'verification', 'verification_response', 'verification_confirmed', 'verification_both_confirmed', 'peer_disconnect', 'security_upgrade'].includes(parsed.type)) {\n                    this.handleSystemMessage(parsed);\n                    return;\n                }\n                \n                // ============================================\n                // FAKE MESSAGES (WITHOUT MUTEX)\n                // ============================================\n                \n                if (parsed.type === 'fake') {\n                    this._secureLog('warn', '\uD83C\uDFAD Fake message blocked in processMessage', { pattern: parsed.pattern });\n                    return;\n                }\n                \n            } catch (jsonError) {\n                // SECURITY: non-JSON payloads were rendered straight into the chat\n                // as plain text \u2014 unauthenticated peer input presented as a real\n                // message. Every legitimate frame is JSON; drop the rest.\n                this._secureLog('error', 'Rejected malformed (non-JSON) frame in processMessage', {\n                    dataLength: typeof data === 'string' ? data.length : 0\n                });\n                return;\n            }\n        }\n\n        // ============================================\n        // ENCRYPTED DATA PROCESSING (WITH MUTEX ONLY FOR CRYPTO)\n        // ============================================\n        \n        // If here \u2014 apply security layers with limited mutex\n        const originalData = await this._processEncryptedDataWithLimitedMutex(data);\n\n        // Check processing result\n        if (originalData === 'FAKE_MESSAGE_FILTERED' || \n            originalData === 'FILE_MESSAGE_FILTERED' || \n            originalData === 'SYSTEM_MESSAGE_FILTERED') {\n            return;\n        }\n        \n        if (!originalData) {\n            this._secureLog('warn', '\u26A0\uFE0F No data returned from removeSecurityLayers');\n            return;\n        }\n\n        // Handle result after removeSecurityLayers\n        let messageText;\n        \n        if (typeof originalData === 'string') {\n            try {\n                const message = JSON.parse(originalData);\n                \n                // SECOND CHECK FOR FILE MESSAGES AFTER DECRYPTION\n                if (message.type && fileMessageTypes.includes(message.type)) {\n                    this._secureLog('debug', '\uD83D\uDCC1 File message detected after decryption', { type: message.type });\n                    if (this.fileTransferSystem) {\n                        await this.fileTransferSystem.handleFileMessage(message);\n                    }\n                    return;\n                }\n                \n                if (message.type && ['heartbeat', 'verification', 'verification_response', 'verification_confirmed', 'verification_both_confirmed', 'peer_disconnect', 'security_upgrade'].includes(message.type)) {\n                    this.handleSystemMessage(message);\n                    return;\n                }\n                \n                if (message.type === 'fake') {\n                    this._secureLog('warn', `\uD83C\uDFAD Post-decryption fake message blocked: ${message.pattern}`);\n                    return;\n                }\n                \n                // Regular messages\n                if (message.type === 'message' && message.data) {\n                    messageText = message.data;\n                } else {\n                    messageText = originalData;\n                }\n            } catch (e) {\n                messageText = originalData;\n            }\n        } else if (originalData instanceof ArrayBuffer) {\n            messageText = new TextDecoder().decode(originalData);\n        } else if (originalData && typeof originalData === 'object' && originalData.message) {\n            messageText = originalData.message;\n        } else {\n            this._secureLog('warn', '\u26A0\uFE0F Unexpected data type after processing:', { details: typeof originalData });\n            return;\n        }\n\n        // Final check for fake and file messages\n        if (messageText && messageText.trim().startsWith('{')) {\n            try {\n                const finalCheck = JSON.parse(messageText);\n                if (finalCheck.type === 'fake') {\n                    this._secureLog('warn', `\uD83C\uDFAD Final fake message check blocked: ${finalCheck.pattern}`);\n                    return;\n                }\n                \n                // Additional check for file and system messages\n                const blockedTypes = [\n                    'file_transfer_start', 'file_transfer_response', 'file_chunk', \n                    'chunk_confirmation', 'file_transfer_complete', 'file_transfer_error',\n                    'heartbeat', 'verification', 'verification_response',\n                    'peer_disconnect', 'key_rotation_signal', 'key_rotation_ready', 'security_upgrade',\n                    'ice_restart_offer', 'ice_restart_answer', 'ice_restart_request'\n                ];\n                \n                if (finalCheck.type && blockedTypes.includes(finalCheck.type)) {\n                    this._secureLog('warn', `\uD83D\uDCC1 Final system/file message check blocked: ${finalCheck.type}`);\n                    return;\n                }\n            } catch (e) {\n                // Not JSON \u2014 fine for plain text\n            }\n        }\n\n        // SECURITY: removeSecurityLayers() strips obfuscation (padding, reordering,\n        // nested layers) \u2014 it does NOT authenticate anything, and it returns the\n        // input untouched whenever no layer applies. Delivering its output was\n        // therefore a second door into the chat for unauthenticated peer input.\n        // Chat content has exactly one door: _processEnhancedMessageWithoutMutex,\n        // which verifies the HMAC, the AAD and the sequence number first.\n        if (messageText) {\n            this._secureLog('error', 'Rejected unauthenticated payload at the end of processMessage', {\n                messageLength: typeof messageText === 'string' ? messageText.length : 0\n            });\n        }\n\n    } catch (error) {\n        this._secureLog('error', '\u274C Failed to process message:', { errorType: error?.constructor?.name || 'Unknown' });\n    }\n}\n\n    // FIX: New method with limited mutex when processing encrypted data\n    async _processEncryptedDataWithLimitedMutex(data) {\n        // Use mutex ONLY for cryptographic operations\n        return this._withMutex('cryptoOperation', async (operationId) => {\n            this._secureLog('debug', '\uD83D\uDD10 Processing encrypted data with limited mutex', {\n                operationId: operationId,\n                dataType: typeof data\n            });\n            \n            try {\n                // Apply security layers\n                const originalData = await this.removeSecurityLayers(data);\n                return originalData;\n                \n            } catch (error) {\n                this._secureLog('error', '\u274C Error processing encrypted data', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                return data; // Return original data on error\n            }\n        }, 2000); // Short timeout for crypto operations\n    }\n\n        notifySecurityUpdate() {\n            try {\n                this._secureLog('debug', '\uD83D\uDD12 Notifying about security level update', {\n                        isConnected: this.isConnected(),\n                        isVerified: this.isVerified,\n                        hasKeys: !!(this.encryptionKey && this.macKey && this.metadataKey),\n                        hasLastCalculation: !!this.lastSecurityCalculation\n                    });\n                \n                // Send an event about security level update\n                this._dispatchAppEvent?.(new CustomEvent('security-level-updated', {\n                    detail: { \n                        timestamp: Date.now(), \n                        manager: 'webrtc',\n                        webrtcManager: this,\n                        isConnected: this.isConnected(),\n                        isVerified: this.isVerified,\n                        hasKeys: !!(this.encryptionKey && this.macKey && this.metadataKey),\n                        lastCalculation: this.lastSecurityCalculation\n                    }\n                }));\n                \n                // FIX: Force header refresh with correct manager\n                setTimeout(() => {\n                    //   Removed global callback - use event system instead\n                    // if (window.forceHeaderSecurityUpdate) {\n                    //     window.forceHeaderSecurityUpdate(this);\n                    // }\n                }, 100);\n                \n                // FIX: Direct update if there is a calculation\n                if (this.lastSecurityCalculation) {\n                    this._dispatchAppEvent?.(new CustomEvent('real-security-calculated', {\n                        detail: {\n                            securityData: this.lastSecurityCalculation,\n                            webrtcManager: this,\n                            timestamp: Date.now()\n                        }\n                    }));\n                }\n                \n            } catch (error) {\n                this._secureLog('error', '\u274C Error in notifySecurityUpdate', {\n                        error: error.message\n                    });\n            }\n        }\n\n        handleSystemMessage(message) {\n            this._secureLog('debug', '\uD83D\uDD27 Handling system message:', { type: message.type });\n            \n            switch (message.type) {\n                case 'heartbeat':\n                    this.handleHeartbeat(message);\n                    break;\n                case 'verification':\n                    this.handleVerificationRequest(message.data);\n                    break;\n                case 'verification_response':\n                    this.handleVerificationResponse(message.data);\n                    break;\n                case 'sas_code':\n                    this.handleSASCode(message.data);\n                    break;\n                case 'verification_confirmed':\n                    this.handleVerificationConfirmed(message.data);\n                    break;\n                case 'verification_both_confirmed':\n                    this.handleVerificationBothConfirmed(message.data);\n                    break;\n                case 'peer_disconnect':\n                    this.handlePeerDisconnectNotification(message);\n                    break;\n                case 'key_rotation_signal':\n                    this._secureLog('debug', '\uD83D\uDD04 Key rotation signal received (ignored for stability)');\n                    break;\n                case 'key_rotation_ready':\n                    this._secureLog('debug', '\uD83D\uDD04 Key rotation ready signal received (ignored for stability)');\n                    break;\n                case 'security_upgrade':\n                    this._secureLog('debug', '\uD83D\uDD12 Security upgrade notification received:', { type: message.type });\n                    // Security upgrade messages are handled internally, not displayed to user\n                    // to prevent duplicate system messages\n                    break;\n                default:\n                    this._secureLog('debug', '\uD83D\uDD27 Unknown system message type:', { type: message.type });\n            }\n        }\n\n        // ============================================\n        // FUNCTION MANAGEMENT METHODS\n        // ============================================\n\n        // Method to enable Stage 2 functions\n        enableStage2Security() {\n        if (this.sessionConstraints?.hasPacketReordering) {\n            this.securityFeatures.hasPacketReordering = true;\n            this.reorderingConfig.enabled = true;\n        }\n        \n        if (this.sessionConstraints?.hasAntiFingerprinting) {\n            this.securityFeatures.hasAntiFingerprinting = true;\n            this.antiFingerprintingConfig.enabled = true;\n            // Enable full anti-fingerprinting features\n            this.antiFingerprintingConfig.randomizeSizes = true;\n            this.antiFingerprintingConfig.maskPatterns = true;\n            this.antiFingerprintingConfig.useRandomHeaders = true;\n        }\n        \n        this.notifySecurityUpgrade(2);\n        setTimeout(() => {\n            this.calculateAndReportSecurityLevel();\n        }, 500);\n    }\n\n        // Method to enable Stage 3 features (traffic obfuscation)\n        enableStage3Security() {\n            this._secureLog('info', '\uD83D\uDD12 Enabling Stage 3 features (traffic obfuscation)');\n            \n            if (this.sessionConstraints?.hasMessageChunking) {\n                this.securityFeatures.hasMessageChunking = true;\n                this.chunkingConfig.enabled = true;\n            }\n            \n            if (this.sessionConstraints?.hasFakeTraffic) {\n                this.securityFeatures.hasFakeTraffic = true;\n                this.fakeTrafficConfig.enabled = true;\n                this.startFakeTrafficGeneration();\n            }\n            \n            this.notifySecurityUpgrade(3);\n            setTimeout(() => {\n                this.calculateAndReportSecurityLevel();\n            }, 500);\n        }\n\n        // Method for enabling Stage 4 functions (maximum safety)\n        enableStage4Security() {\n            this._secureLog('info', '\uD83D\uDD12 Enabling Stage 4 features (maximum safety)');\n            \n            if (this.sessionConstraints?.hasDecoyChannels && this.isConnected() && this.isVerified) {\n                this.securityFeatures.hasDecoyChannels = true;\n                this.decoyChannelConfig.enabled = true;\n                \n                try {\n                    this.initializeDecoyChannels();\n                } catch (error) {\n                    this._secureLog('warn', '\u26A0\uFE0F Decoy channels initialization failed:', { details: error.message });\n                    this.securityFeatures.hasDecoyChannels = false;\n                    this.decoyChannelConfig.enabled = false;\n                }\n            }\n            \n            // Full anti-fingerprinting for maximum sessions\n            if (this.sessionConstraints?.hasAntiFingerprinting) {\n                this.antiFingerprintingConfig.randomizeSizes = true;\n                this.antiFingerprintingConfig.maskPatterns = true;\n                this.antiFingerprintingConfig.useRandomHeaders = false; \n            }\n            \n            this.notifySecurityUpgrade(4);\n            setTimeout(() => {\n                this.calculateAndReportSecurityLevel();\n            }, 500);\n        }\n\n        forceSecurityUpdate() {\n            setTimeout(() => {\n                this.calculateAndReportSecurityLevel();\n                this.notifySecurityUpdate();\n            }, 100);\n        }\n\n        // Method for getting security status\n        getSecurityStatus() {\n            const activeFeatures = Object.entries(this.securityFeatures)\n                .filter(([key, value]) => value === true)\n                .map(([key]) => key);\n                \n            const stage = 4; // Maximum security stage\n                        \n            return {\n                stage: stage,\n                securityLevel: 'maximum',\n                activeFeatures: activeFeatures,\n                totalFeatures: Object.keys(this.securityFeatures).length,\n                activeFeaturesCount: activeFeatures.length,\n                activeFeaturesNames: activeFeatures,\n                sessionConstraints: this.sessionConstraints\n            };\n        }\n\n        // Method to notify UI about security update\n        notifySecurityUpgrade(stage) {\n            const stageNames = {\n                1: 'Basic Enhanced',\n                2: 'Medium Security', \n                3: 'High Security',\n                4: 'Maximum Security'\n            };\n            \n            const message = `\uD83D\uDD12 Security upgraded to Stage ${stage}: ${stageNames[stage]}`;\n            \n            // Avoid duplicate security-upgrade notifications\n            if (!this.securityUpgradeNotificationSent || this.lastSecurityUpgradeStage !== stage) {\n                this.securityUpgradeNotificationSent = true;\n                this.lastSecurityUpgradeStage = stage;\n                \n                // Notify local UI via onMessage\n                if (this.onMessage) {\n                    this.deliverMessageToUI(message, 'system');\n                }\n            }\n\n            // Send security upgrade notification to peer via WebRTC\n            if (this.dataChannel && this.dataChannel.readyState === 'open') {\n                try {\n                    const securityNotification = {\n                        type: 'security_upgrade',\n                        stage: stage,\n                        stageName: stageNames[stage],\n                        message: message,\n                        timestamp: Date.now()\n                    };\n                    \n                    this._secureLog('debug', '\uD83D\uDD12 Sending security upgrade notification to peer:', { type: securityNotification.type, stage: securityNotification.stage });\n                    this.dataChannel.send(JSON.stringify(securityNotification));\n                } catch (error) {\n                    this._secureLog('warn', '\u26A0\uFE0F Failed to send security upgrade notification to peer:', { details: error.message });\n                }\n            }\n\n            const status = this.getSecurityStatus();\n        }\n\n        async calculateAndReportSecurityLevel() {\n            try {\n                if (!window.EnhancedSecureCryptoUtils) {\n                    this._secureLog('warn', '\u26A0\uFE0F EnhancedSecureCryptoUtils not available for security calculation');\n                    return null;\n                }\n\n                if (!this.isConnected() || !this.isVerified || !this.encryptionKey || !this.macKey) {\n                    this._secureLog('debug', '\u26A0\uFE0F WebRTC not ready for security calculation', {\n                        connected: this.isConnected(),\n                        verified: this.isVerified,\n                        hasEncryptionKey: !!this.encryptionKey,\n                        hasMacKey: !!this.macKey\n                    });\n                    return null;\n                }\n\n                this._secureLog('debug', '\uD83D\uDD0D Calculating real security level', {\n                    managerState: 'ready',\n                    hasAllKeys: !!(this.encryptionKey && this.macKey && this.metadataKey)\n                });\n                \n                const securityData = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(this);\n                \n                this._secureLog('info', 'Real security level calculated', {\n                    hasSecurityLevel: !!securityData.level,\n                    scoreRange: securityData.score > 80 ? 'high' : securityData.score > 50 ? 'medium' : 'low',\n                    checksRatio: `${securityData.passedChecks}/${securityData.totalChecks}`,\n                    isRealCalculation: securityData.isRealData\n                });\n\n                this.lastSecurityCalculation = securityData;\n\n                this._dispatchAppEvent?.(new CustomEvent('real-security-calculated', {\n                    detail: {\n                        securityData: securityData,\n                        webrtcManager: this,\n                        timestamp: Date.now(),\n                        source: 'calculateAndReportSecurityLevel'\n                    }\n                }));\n\n                if (securityData.isRealData && this.onMessage) {\n                    if (!this.securityCalculationNotificationSent || this.lastSecurityCalculationLevel !== securityData.level) {\n                        this.securityCalculationNotificationSent = true;\n                        this.lastSecurityCalculationLevel = securityData.level;\n                        \n                        const message = `Security Level: ${securityData.level} (${securityData.score}%) - ${securityData.passedChecks}/${securityData.totalChecks} checks passed`;\n                        this.deliverMessageToUI(message, 'system');\n                    }\n                }\n                \n                return securityData;\n                \n            } catch (error) {\n                this._secureLog('error', 'Failed to calculate real security level', {\n                    errorType: error.constructor.name\n                });\n                return null;\n            }\n        }\n\n        // ============================================\n        // AUTOMATIC STEP-BY-STEP SWITCHING ON\n        // ============================================\n\n        // Method for automatic feature enablement with stability check\n        async autoEnableSecurityFeatures() {\n            this._secureLog('info', 'Starting graduated security activation - all features enabled');\n\n        const checkStability = () => {\n            const isStable = this.isConnected() && \n                            this.isVerified && \n                            this.connectionAttempts === 0 && \n                            this.messageQueue.length === 0 &&\n                            this.peerConnection?.connectionState === 'connected';\n            return isStable;\n        };\n        \n        await this.calculateAndReportSecurityLevel();\n        this.notifySecurityUpgrade(1);\n        \n            // Enable all security stages progressively\n            setTimeout(async () => {\n                if (checkStability()) {\n                    this.enableStage2Security();\n                    await this.calculateAndReportSecurityLevel(); \n                    \n                        setTimeout(async () => {\n                            if (checkStability()) {\n                                this.enableStage3Security();\n                                await this.calculateAndReportSecurityLevel();\n                                \n                                setTimeout(async () => {\n                                    if (checkStability()) {\n                                        this.enableStage4Security();\n                                        await this.calculateAndReportSecurityLevel();\n                                    }\n                                }, 20000);\n                            }\n                        }, 15000);\n                }\n            }, 10000);\n    }\n\n    // ============================================\n    // CONNECTION MANAGEMENT WITH ENHANCED SECURITY\n    // ============================================\n\n    async establishConnection() {\n        try {\n            // Initialize enhanced security features\n            await this.initializeEnhancedSecurity();\n            \n            // Start fake traffic generation\n            if (this.fakeTrafficConfig.enabled) {\n                this.startFakeTrafficGeneration();\n            }\n            \n            // Initialize decoy channels\n            if (this.decoyChannelConfig.enabled) {\n                this.initializeDecoyChannels();\n            }\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to establish enhanced connection:', { errorType: error?.constructor?.name || 'Unknown' });\n            // Do not close the connection on setup errors \u2014 just log and continue\n            this.onStatusChange('disconnected');\n            throw error;\n        }\n    }\n\n    /**\n     *   Clear all verification states and data\n     * Called when verification is rejected or connection is terminated\n     */\n    _clearVerificationStates() {\n        try {\n            \n            // Clear verification states\n            this.localVerificationConfirmed = false;\n            this.remoteVerificationConfirmed = false;\n            this.bothVerificationsConfirmed = false;\n            this.isVerified = false;\n            this.verificationCode = null;\n            this.pendingSASCode = null;\n            this.sasValidationAttempts = 0;\n            this._verificationUiOpened = false;\n            this._sasLocalFingerprint = null;\n            this._sasRemoteFingerprint = null;\n            \n            // Clear key fingerprint and connection data\n            this.keyFingerprint = null;\n            this.expectedDTLSFingerprint = null;\n            this._peerDTLSFingerprint = null;\n            this.connectionId = null;\n            \n            // Clear processed message IDs\n            this.processedMessageIds.clear();\n            \n            // Reset notification flags\n            this.verificationNotificationSent = false;\n            this.verificationInitiationSent = false;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error clearing verification states:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n\n    // Start periodic cleanup for rate limiting and security\n    startPeriodicCleanup() {\n        //   Cleanup moved to unified scheduler\n        this._secureLog('info', '\uD83D\uDD27 Periodic cleanup moved to unified scheduler');\n    }\n\n    // Calculate current security level with real verification\n    async calculateSecurityLevel() {\n        return await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(this);\n    }\n\n    // PFS: Check if key rotation is needed\n    shouldRotateKeys() {\n        if (!this.isConnected() || !this.isVerified) {\n            return false;\n        }\n        \n        const now = Date.now();\n        const timeSinceLastRotation = now - this.lastKeyRotation;\n        \n        // Rotate keys every 5 minutes or after 100 messages\n        return timeSinceLastRotation > this.keyRotationInterval || \n               this.messageCounter % 100 === 0;\n    }\n\n    // PFS: Rotate encryption keys for Perfect Forward Secrecy\n    async rotateKeys() {\n        return this._withMutex('keyOperation', async (operationId) => {\n            this._secureLog('info', '\uD83D\uDD04 Starting key rotation with mutex', {\n                operationId: operationId\n            });\n            \n            // Validate state inside the critical section\n            if (!this.isConnected() || !this.isVerified) {\n                this._secureLog('warn', ' Key rotation aborted - connection not ready', {\n                    operationId: operationId,\n                    isConnected: this.isConnected(),\n                    isVerified: this.isVerified\n                });\n                return false;\n            }\n            \n            // Ensure rotation is not already in progress\n            if (this._keySystemState.isRotating) {\n                this._secureLog('warn', ' Key rotation already in progress', {\n                    operationId: operationId\n                });\n                return false;\n            }\n            \n            try {\n                // Set rotation flag\n                this._keySystemState.isRotating = true;\n                this._keySystemState.lastOperation = 'rotation';\n                this._keySystemState.lastOperationTime = Date.now();\n                \n                // Send rotation signal to peer\n                const rotationSignal = {\n                    type: 'key_rotation_signal',\n                    newVersion: this.currentKeyVersion + 1,\n                    timestamp: Date.now(),\n                    operationId: operationId\n                };\n                \n                if (this.dataChannel && this.dataChannel.readyState === 'open') {\n                    this.dataChannel.send(JSON.stringify(rotationSignal));\n                } else {\n                    throw new Error('Data channel not ready for key rotation');\n                }\n                \n                //   Perform hard wipe of old keys for real PFS\n                this._hardWipeOldKeys();\n                \n                // Wait for peer confirmation\n                return new Promise((resolve) => {\n                    this.pendingRotation = {\n                        newVersion: this.currentKeyVersion + 1,\n                        operationId: operationId,\n                        resolve: resolve,\n                        timeout: setTimeout(() => {\n                            this._secureLog('error', ' Key rotation timeout', {\n                                operationId: operationId\n                            });\n                            this._keySystemState.isRotating = false;\n                            this.pendingRotation = null;\n                            resolve(false);\n                        }, 10000) // 10 seconds timeout\n                    };\n                });\n                \n            } catch (error) {\n                this._secureLog('error', ' Key rotation failed in critical section', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                this._keySystemState.isRotating = false;\n                return false;\n            }\n        }, 10000); // 10 seconds timeout for the entire operation\n    }\n\n    //   Real PFS - Clean up old keys with hard wipe\n    cleanupOldKeys() {\n        const now = Date.now();\n        const maxKeyAge = EnhancedSecureWebRTCManager.LIMITS.MAX_KEY_AGE; // 15 minutes - keys older than this are deleted\n        \n        let wipedKeysCount = 0;\n        \n        for (const [version, keySet] of this.oldKeys.entries()) {\n            if (now - keySet.timestamp > maxKeyAge) {\n                //   Hard wipe old keys before deletion\n                if (keySet.encryptionKey) {\n                    this._secureWipeMemory(keySet.encryptionKey, 'pfs_cleanup_wipe');\n                }\n                if (keySet.macKey) {\n                    this._secureWipeMemory(keySet.macKey, 'pfs_cleanup_wipe');\n                }\n                if (keySet.metadataKey) {\n                    this._secureWipeMemory(keySet.metadataKey, 'pfs_cleanup_wipe');\n                }\n                \n                // Clear references\n                keySet.encryptionKey = null;\n                keySet.macKey = null;\n                keySet.metadataKey = null;\n                keySet.keyFingerprint = null;\n                \n                this.oldKeys.delete(version);\n                wipedKeysCount++;\n                \n                this._secureLog('info', '\uD83E\uDDF9 Old PFS keys hard wiped and cleaned up', {\n                    version: version,\n                    age: Math.round((now - keySet.timestamp) / 1000) + 's',\n                    timestamp: Date.now()\n                });\n            }\n        }\n        \n        if (wipedKeysCount > 0) {\n            this._secureLog('info', `PFS cleanup completed: ${wipedKeysCount} keys hard wiped`, {\n                timestamp: Date.now()\n            });\n        }\n    }\n\n    // PFS: Get keys for specific version (for decryption)\n    getKeysForVersion(version) {\n        // First, we check the old keys (including version 0).\n        const oldKeySet = this.oldKeys.get(version);\n        if (oldKeySet && oldKeySet.encryptionKey && oldKeySet.macKey && oldKeySet.metadataKey) {\n            return {\n                encryptionKey: oldKeySet.encryptionKey,\n                macKey: oldKeySet.macKey,\n                metadataKey: oldKeySet.metadataKey\n            };\n        }\n        \n        // If this is the current version, return the current keys.\n        if (version === this.currentKeyVersion) {\n            if (this.encryptionKey && this.macKey && this.metadataKey) {\n                return {\n                    encryptionKey: this.encryptionKey,\n                    macKey: this.macKey,\n                    metadataKey: this.metadataKey\n                };\n            }\n        }\n        \n        window.EnhancedSecureCryptoUtils.secureLog.log('error', 'No valid keys found for version', {\n            requestedVersion: version,\n            currentVersion: this.currentKeyVersion,\n            availableVersions: Array.from(this.oldKeys.keys())\n        });\n        \n        return null;\n    }\n\n    _hasTurnServer() {\n        return (this._config.webrtc.iceServers || []).some(server => {\n            const urls = Array.isArray(server.urls) ? server.urls : [server.urls];\n            return urls.some(url => typeof url === 'string' && url.toLowerCase().startsWith('turn:'));\n        });\n    }\n\n    _buildPeerConnectionConfig() {\n        const relayOnly = this._isRelayOnlyMode();\n        const config = {\n            iceServers: this._config.webrtc.iceServers,\n            iceCandidatePoolSize: 10,\n            bundlePolicy: 'balanced'\n        };\n        if (relayOnly) {\n            config.iceTransportPolicy = 'relay';\n        }\n        return config;\n    }\n\n    _summarizeIceServerConfig(iceServers = []) {\n        const summary = {\n            serverCount: 0,\n            stun: 0,\n            turn: 0,\n            turns: 0,\n            hasCredentials: false\n        };\n\n        for (const server of iceServers || []) {\n            summary.serverCount += 1;\n            if (server?.username || server?.credential) {\n                summary.hasCredentials = true;\n            }\n\n            const urls = Array.isArray(server?.urls) ? server.urls : [server?.urls];\n            for (const rawUrl of urls) {\n                const url = String(rawUrl || '').toLowerCase();\n                if (url.startsWith('stun:')) summary.stun += 1;\n                if (url.startsWith('turn:')) summary.turn += 1;\n                if (url.startsWith('turns:')) summary.turns += 1;\n            }\n        }\n\n        return summary;\n    }\n\n    _isRelayOnlyMode() {\n        return this._config.webrtc.privacyMode === 'relay-only';\n    }\n\n    _setRelayOnlyMode(relayOnly) {\n        const enabled = relayOnly === true;\n        this._config.webrtc.privacyMode = enabled ? 'relay-only' : 'standard';\n        this._config.webrtc.relayOnly = enabled;\n    }\n\n    _warnIfTurnMissing() {\n        if (this._ipLeakWarningShown) return;\n        this._ipLeakWarningShown = true;\n\n        const relayOnly = this._isRelayOnlyMode();\n        const hasTurnServer = this._hasTurnServer();\n        let message = null;\n\n        if (relayOnly && !hasTurnServer) {\n            message = 'Privacy mode is relay-only, but no TURN server is configured. Relay-only mode cannot connect until TURN is configured; STUN alone does not hide IP addresses.';\n        } else if (!relayOnly && !hasTurnServer) {\n            message = 'Privacy warning: relay-only mode is disabled and no TURN server is configured. Direct WebRTC connections may expose host or server-reflexive IP addresses; STUN alone does not provide IP protection.';\n        } else if (!relayOnly) {\n            message = 'Privacy warning: relay-only mode is disabled. Direct WebRTC connectivity may expose host or server-reflexive IP addresses even when TURN is available.';\n        }\n\n        if (!message) return;\n        this.deliverMessageToUI(message, 'system');\n    }\n\n    createPeerConnection() {\n        this._sessionAlive = true;\n        const config = this._buildPeerConnectionConfig();\n        this._warnIfTurnMissing();\n        console.info('[SecureBit ICE] peer connection config', this._summarizeIceServerConfig(config.iceServers));\n\n        this.peerConnection = new RTCPeerConnection(config);\n\n        // A fresh PC invalidates any call senders kept from a previous PC \u2014 reset\n        // them so the next call creates new transceivers on this connection.\n        this._callAudioSender = null;\n        this._callVideoSender = null;\n\n        this.peerConnection.onconnectionstatechange = () => {\n            const state = this.peerConnection.connectionState;\n            console.info('[SecureBit ICE] connection state changed', {\n                connectionState: state,\n                iceConnectionState: this.peerConnection.iceConnectionState,\n                iceGatheringState: this.peerConnection.iceGatheringState\n            });\n            \n            if (state === 'connected' && !this.isVerified) {\n                this._notifyVerificationReadyIfPossible();\n            } else if (state === 'connected' && this.isVerified) {\n                // Covers both a first connect and the end of a successful ICE\n                // restart. When it was a recovery, _onPathRecovered emits\n                // 'connected' itself (after draining the queue), so don't repeat it.\n                if (!this._onPathRecovered()) this.onStatusChange('connected');\n            } else if (state === 'disconnected') {\n                if (this.intentionalDisconnect) {\n                    this.onStatusChange('disconnected');\n                    setTimeout(() => this.disconnect(), 100);\n                } else if (this.isVerified) {\n                    // 'disconnected' is usually a transient path glitch \u2014 do NOT\n                    // tear the session down. Recovery keeps the keys, the SAS\n                    // verification and the history intact; only the path changes.\n                    this._onPathDegraded('ice_disconnected');\n                } else {\n                    console.warn(`[SecureBit ICE] State is ${state} but not verified yet. Keeping session open for manual exchange.`);\n                }\n            } else if (state === 'closed') {\n                // 'closed' is terminal: the peer connection is gone, nothing to restart.\n                this._resetReconnectState();\n                this.onStatusChange('disconnected');\n                this._clearVerificationStates();\n                if (this.intentionalDisconnect) setTimeout(() => this.disconnect(), 100);\n            } else if (state === 'failed') {\n                this._collectIceFailureDiagnostics().then((diagnostics) => {\n                    console.warn('[SecureBit ICE] failure diagnostics', diagnostics);\n                    this._noteIceFailureDiagnostics(diagnostics);\n                });\n\n                // Do not auto-reconnect or close session during setup.\n                if (this.isVerified) {\n                    this._onPathLost('ice_failed');\n                } else {\n                    console.warn('[SecureBit ICE] State is failed but not verified yet. Keeping session open for manual exchange.');\n                }\n            } else if (this.isReconnecting() && (state === 'connecting' || state === 'new')) {\n                // Mid-restart churn: keep the UI on \"reconnecting\" instead of\n                // flapping back to \"connecting\".\n            } else {\n                this.onStatusChange(state);\n            }\n        };\n\n        this.peerConnection.oniceconnectionstatechange = () => {\n            console.info('[SecureBit ICE] ICE connection state changed', {\n                connectionState: this.peerConnection.connectionState,\n                iceConnectionState: this.peerConnection.iceConnectionState,\n                iceGatheringState: this.peerConnection.iceGatheringState\n            });\n        };\n\n        this.peerConnection.onicecandidateerror = (event) => {\n            console.warn('[SecureBit ICE] ICE candidate error', {\n                url: event.url,\n                errorCode: event.errorCode,\n                errorText: event.errorText\n            });\n        };\n\n        // Inbound call media (DTLS-SRTP encrypted, bundled on this same transport).\n        // ontrack does NOT re-fire for a REUSED transceiver on a later call, so we\n        // never rely on the event's track alone \u2014 we rebuild the remote stream from\n        // pc.getReceivers() (the source of truth for current live inbound tracks).\n        this.peerConnection.ontrack = (event) => {\n            try {\n                this._refreshRemoteStream();\n            } catch (e) {\n                this._secureLog('warn', '\u26A0\uFE0F ontrack handling failed', { errorType: e?.constructor?.name });\n            }\n        };\n\n        this.peerConnection.ondatachannel = (event) => {\n\n            // CRITICAL: Store the received data channel\n            if (event.channel.label === 'securechat') {\n                this.dataChannel = event.channel;\n                this.setupDataChannel(event.channel);\n            } else {\n                // Handle additional channels (heartbeat, etc.)\n                if (event.channel.label === 'heartbeat') {\n                    this.heartbeatChannel = event.channel;\n                }\n            }\n        };\n    }\n\n    setupDataChannel(channel) {\n\n        this.dataChannel = channel;\n        // The open handler must run exactly once, whether it is reached through\n        // the 'open' event or through the already-open path below.\n        let openHandled = false;\n\n        const handleChannelOpen = async () => {\n            if (openHandled) return;\n            openHandled = true;\n            // Configure backpressure for large transfers\n            try {\n                if (this.dataChannel && typeof this.dataChannel.bufferedAmountLowThreshold === 'number') {\n                    // 1 MB threshold for bufferedamountlow event\n                    this.dataChannel.bufferedAmountLowThreshold = 1024 * 1024;\n                }\n            } catch (e) {\n                // ignore\n            }\n            \n            // SBQ2: the key material has not moved yet. Run the in-band exchange\n            // before anything else touches the channel \u2014 establishConnection and\n            // the file-transfer subsystem both assume keys exist, and the SAS\n            // cannot be computed until the transcript is closed.\n            //\n            // Read the latched field rather than calling _isSbq2(): this handler\n            // is shared by both handshake paths and by the recovery tests, and a\n            // helper call here would make an unrelated path depend on a method\n            // that has nothing to do with opening a channel.\n            if (this._handshakeMode === 'sbq2') {\n                try {\n                    await this._runSbq2KeyExchange();\n                } catch (error) {\n                    this._secureLog('error', 'SBQ2 key exchange failed to start', {\n                        errorType: error?.constructor?.name || 'Unknown'\n                    });\n                    this._sbq2Abort('start_failed',\n                        'The secure handshake could not be started. Please try connecting again.');\n                    return;\n                }\n            }\n\n            try {\n                await this.establishConnection();\n\n        this.initializeFileTransfer();\n\n            } catch (error) {\n                this._secureLog('error', 'Error in establishConnection:', { errorType: error?.constructor?.name || 'Unknown' });\n                // Continue despite errors\n            }\n            \n            // CRITICAL: Send pending SAS code if available\n            if (this.pendingSASCode && this.dataChannel && this.dataChannel.readyState === 'open') {\n                try {\n                    const sasPayload = {\n                        type: 'sas_code',\n                        data: {\n                            code: this.pendingSASCode,\n                            timestamp: Date.now(),\n                            verificationMethod: 'SAS',\n                            securityLevel: 'MITM_PROTECTION_REQUIRED'\n                        }\n                    };\n                    this.dataChannel.send(JSON.stringify(sasPayload));\n                    this.pendingSASCode = null; // Clear after sending\n                } catch (error) {\n                }\n            } else if (this.pendingSASCode) {\n            }\n                \n            if (this.isVerified) {\n                this.onStatusChange('connected');\n                this.processMessageQueue();\n\n                setTimeout(async () => {\n                    await this.calculateAndReportSecurityLevel();\n                    this.autoEnableSecurityFeatures();\n                    this.notifySecurityUpdate();\n                }, 500);\n            } else {\n                this._notifyVerificationReadyIfPossible();\n                this.initiateVerification();\n            }\n            this.startHeartbeat();\n        };\n\n        this.dataChannel.onopen = handleChannelOpen;\n\n        // CRITICAL: on the answering side the channel arrives through\n        // `ondatachannel`, and it can ALREADY be in the 'open' state by then \u2014\n        // the 'open' event was dispatched before this handler existed, so\n        // assigning onopen above would never fire it. That silently left the\n        // answerer without heartbeats, without the liveness watchdog and without\n        // file-transfer init, which is why the peer whose network was fine kept\n        // showing \"connected\" long after the other side had vanished: nothing was\n        // running on that side to notice. Run it directly in that case.\n        if (this.dataChannel.readyState === 'open') {\n            Promise.resolve()\n                .then(() => handleChannelOpen())\n                .catch((error) => {\n                    this._secureLog('error', 'Deferred data channel open handling failed', {\n                        errorType: error?.constructor?.name || 'Unknown'\n                    });\n                });\n        }\n\n        this.dataChannel.onclose = () => {\n            // The channel closing takes SCTP with it, so there is nothing left for\n            // an ICE restart to repair \u2014 stop any recovery cycle rather than\n            // letting its timers keep firing against a dead session.\n            this._resetReconnectState?.();\n            this._teardownRecoveryLifecycleListeners?.();\n\n            if (!this.intentionalDisconnect) {\n                this.onStatusChange('disconnected');\n                // Clear verification states on data channel close\n                this._clearVerificationStates();\n                \n                if (!this.connectionClosedNotificationSent) {\n                    this.connectionClosedNotificationSent = true;\n                    this.deliverMessageToUI('\uD83D\uDD0C Enhanced secure connection closed. Check connection status.', 'system');\n                }\n            } else {\n                this.onStatusChange('disconnected');\n                // Clear verification states on intentional disconnect\n                this._clearVerificationStates();\n                \n                if (!this.connectionClosedNotificationSent) {\n                    this.connectionClosedNotificationSent = true;\n                    this.deliverMessageToUI('\uD83D\uDD0C Enhanced secure connection closed', 'system');\n                }\n            }\n            \n            //   Wipe ephemeral keys when session ends for PFS\n            this._wipeEphemeralKeys();\n            \n            this.stopHeartbeat();\n            this.isVerified = false;\n        };\n\n        // FIX 2: Remove mutex entirely from message processing path\n        this.dataChannel.onmessage = async (event) => {\n            try {\n                // Liveness: anything arriving from the peer proves the path is alive.\n                // Optional-call on purpose \u2014 liveness bookkeeping is auxiliary and must\n                // never be able to throw ahead of routing, where the surrounding catch\n                // would swallow it and silently drop every inbound message.\n                this._noteInboundActivity?.();\n\n                // IMPORTANT: Process ALL messages WITHOUT mutex\n                if (typeof event.data === 'string') {\n                    try {\n                        const parsed = JSON.parse(event.data);\n\n                        \n                        // ============================================\n                        // CRITICAL: FILE MESSAGES (WITHOUT MUTEX)\n                        // ============================================\n                        \n                        const fileMessageTypes = [\n                            'file_transfer_start',\n                            'file_transfer_response', \n                            'file_chunk',\n                            'chunk_confirmation',\n                            'file_transfer_complete',\n                            'file_transfer_error'\n                        ];\n                        \n                        if (parsed.type && fileMessageTypes.includes(parsed.type)) {\n\n                            // SECURITY: file control frames are written straight to\n                            // the data channel by the transfer system, so they never\n                            // pass through sendMessage()'s gate. The send side is\n                            // already gated (see sendFile); gate the receive side too\n                            // so an unverified peer cannot open transfers, push\n                            // chunks or drive transfer state before the SAS has been\n                            // compared. Nothing legitimate arrives here earlier: the\n                            // chat UI only opens once the session is verified.\n                            if (!this._enforceVerificationGate('file_message_receive', false)) {\n                                this._secureLog('error', 'Dropped file message received before verification', {\n                                    messageType: parsed.type\n                                });\n                                return;\n                            }\n\n                            if (!this.fileTransferSystem) {\n                                try {\n                                    if (this.isVerified && this.dataChannel && this.dataChannel.readyState === 'open') {\n                                        this.initializeFileTransfer();\n\n                                        let attempts = 0;\n                                        const maxAttempts = 30;\n                                        while (!this.fileTransferSystem && attempts < maxAttempts) {\n                                            await new Promise(resolve => setTimeout(resolve, 100));\n                                            attempts++;\n                                        }\n                                    }\n                                } catch (initError) {\n                                    this._secureLog('error', 'Failed to initialize file transfer system for receiver:', { errorType: initError?.constructor?.name || 'Unknown' });\n                                }\n                            }\n\n                            if (this.fileTransferSystem) {\n                                await this.fileTransferSystem.handleFileMessage(parsed);\n                                return;\n                            }\n                            // Attempt lazy initialization on receiver side\n                            this._secureLog('warn', '\u26A0\uFE0F File transfer system not ready, attempting lazy init...');\n                            try {\n                                await this._ensureFileTransferReady();\n                                if (this.fileTransferSystem) {\n                                    await this.fileTransferSystem.handleFileMessage(parsed);\n                                    return;\n                                }\n                            } catch (e) {\n                                this._secureLog('error', 'Lazy init of file transfer failed:', { errorType: e?.message || e?.constructor?.name || 'Unknown' });\n                            }\n                            this._secureLog('error', 'No file transfer system available for:', { errorType: parsed.type?.constructor?.name || 'Unknown' });\n                            return; // IMPORTANT: Do not process further\n                        }\n                        \n                        // SECURITY: everything below this line drives state the user can\n                        // see or that reshapes the peer connection \u2014 transcript edits,\n                        // ringing UI, media negotiation, ICE renegotiation. None of it is\n                        // needed before the SAS has been compared, and completing the\n                        // handshake alone is not evidence of who the peer is. Gate the\n                        // whole control plane once, here, rather than per-branch: deny by\n                        // default, and admit only the frames listed in\n                        // POST_VERIFICATION_CONTROL_TYPES, and only after verification.\n                        // Pre-verification traffic (verification/*, heartbeat) is handled\n                        // further down and is deliberately not in that set.\n                        if (parsed.type &&\n                            EnhancedSecureWebRTCManager.POST_VERIFICATION_CONTROL_TYPES.has(parsed.type)) {\n                            if (!this._enforceVerificationGate('control_frame_receive', false)) {\n                                this._secureLog('error', 'Dropped control frame received before verification', {\n                                    messageType: parsed.type\n                                });\n                                return;\n                            }\n\n                            const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n\n                            // Per-message delete (unsend) from the peer.\n                            if (parsed.type === T.MESSAGE_DELETE) {\n                                const messageId = parsed?.data?.messageId ?? parsed?.messageId;\n                                if (typeof messageId === 'string' && messageId) {\n                                    try { this.onMessageDelete?.(messageId.slice(0, 64)); } catch (_) {}\n                                }\n                                return;\n                            }\n\n                            // Delivery receipt from the peer \u2192 mark our message \"delivered\".\n                            if (parsed.type === T.MESSAGE_RECEIPT) {\n                                const messageId = parsed?.data?.messageId ?? parsed?.messageId;\n                                if (typeof messageId === 'string' && messageId) {\n                                    try { this.onMessageDelivered?.(messageId.slice(0, 64)); } catch (_) {}\n                                }\n                                return;\n                            }\n\n                            // Call signalling (offer / answer / ice / decline / end).\n                            if ([T.CALL_OFFER, T.CALL_ANSWER, T.CALL_ICE,\n                                 T.CALL_DECLINE, T.CALL_END].includes(parsed.type)) {\n                                try { await this._handleCallSignal(parsed.type, parsed.data || {}); }\n                                catch (_) {}\n                                return;\n                            }\n\n                            // Session recovery signalling (ICE restart over the live channel).\n                            if ([T.ICE_RESTART_OFFER, T.ICE_RESTART_ANSWER,\n                                 T.ICE_RESTART_REQUEST].includes(parsed.type)) {\n                                try { await this._handleIceRestartSignal(parsed.type, parsed.data || {}); }\n                                catch (e) {\n                                    this._secureLog('error', '\u274C ICE restart signal handling failed', { errorType: e?.constructor?.name });\n                                }\n                                return;\n                            }\n\n                            return;\n                        }\n\n                        // ============================================\n                        // SYSTEM MESSAGES (WITHOUT MUTEX)\n                        // ============================================\n\n                        // ============================================\n                        // SBQ2 IN-BAND KEY EXCHANGE\n                        // ============================================\n                        // The only frames that legitimately precede any key. They\n                        // are dispatched before the system-message branch so they\n                        // can never be confused with post-handshake traffic, and\n                        // _sbq2HandleHandshakeFrame refuses them outright on a\n                        // session that is not SBQ2.\n                        if (parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_BLOB ||\n                            parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_PROOF) {\n                            await this._sbq2HandleHandshakeFrame(parsed);\n                            return;\n                        }\n\n                        if (parsed.type && ['heartbeat', 'verification', 'verification_response', 'verification_confirmed', 'verification_both_confirmed', 'sas_code', 'peer_disconnect', 'security_upgrade'].includes(parsed.type)) {\n                            this.handleSystemMessage(parsed);\n                            return;\n                        }\n                        \n                        // ============================================\n                        // ENHANCED MESSAGES (WITHOUT MUTEX)\n                        // ============================================\n\n                        if (parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.RATCHET_MESSAGE) {\n                            await this._processRatchetMessage(parsed);\n                            return;\n                        }\n\n                        if (parsed.type === 'enhanced_message' && parsed.data) {\n                            await this._processEnhancedMessageWithoutMutex(parsed);\n                            return;\n                        }\n\n                        // SECURITY: chat content reaches the UI through exactly one\n                        // door \u2014 `enhanced_message`, which is AES-GCM encrypted,\n                        // HMAC-authenticated and AAD/sequence-checked. A bare\n                        // `{type:'message'}` frame used to be rendered as-is, which\n                        // let anyone on the channel inject unauthenticated text that\n                        // looked identical to real messages and bypassed E2EE\n                        // entirely. sendMessage() has always encrypted, so nothing\n                        // legitimate produces such a frame: drop it loudly.\n                        this._secureLog('error', 'Rejected unencrypted frame on the chat channel', {\n                            messageType: typeof parsed.type === 'string' ? parsed.type.slice(0, 32) : typeof parsed.type\n                        });\n                        return;\n\n                    } catch (jsonError) {\n                        // SECURITY: non-JSON payloads were previously rendered in the\n                        // chat as plain text \u2014 the same unauthenticated injection\n                        // vector as above. Every legitimate frame is JSON.\n                        this._secureLog('error', 'Rejected malformed (non-JSON) frame on the chat channel', {\n                            dataLength: typeof event.data === 'string' ? event.data.length : 0\n                        });\n                        return;\n                    }\n                } else if (event.data instanceof ArrayBuffer) {\n                    await this._processBinaryDataWithoutMutex(event.data);\n                } else {\n                }\n                \n            } catch (error) {\n                this._secureLog('error', 'Failed to process message in onmessage:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n        };\n    }\n        // FIX 4: New method for processing binary data WITHOUT mutex\n    async _processBinaryDataWithoutMutex(data) {\n        try {\n            if (!this._checkInboundRateLimit('binary_message')) {\n                return;\n            }\n            \n            // Apply security layers WITHOUT mutex\n            let processedData = data;\n            \n            // Nested Encryption Removal (if enabled)\n            if (this.securityFeatures.hasNestedEncryption && \n                this.nestedEncryptionKey && \n                processedData instanceof ArrayBuffer &&\n                processedData.byteLength > 12) {\n                \n                try {\n                    processedData = await this.removeNestedEncryption(processedData);\n                } catch (error) {\n                    this._secureLog('warn', 'Nested decryption failed, continuing with original data');\n                }\n            }\n            \n            // Packet Padding Removal (if enabled)\n            if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n                try {\n                    processedData = this.removePacketPadding(processedData);\n                } catch (error) {\n                    this._secureLog('warn', 'Packet padding removal failed, continuing with original data');\n                }\n            }\n            \n            // Anti-Fingerprinting Removal (if enabled)\n            if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n                try {\n                    processedData = this.removeAntiFingerprinting(processedData);\n                } catch (error) {\n                    this._secureLog('warn', 'Anti-fingerprinting removal failed, continuing with original data');\n                }\n            }\n            \n            // Convert to text\n            if (processedData instanceof ArrayBuffer) {\n                const textData = new TextDecoder().decode(processedData);\n\n                // SECURITY: the only thing legitimately sent as a binary frame is\n                // cover traffic (see sendFakeMessage), which exists purely to be\n                // discarded. Real chat content always arrives as an authenticated\n                // `enhanced_message`. Decoding a binary frame and handing it to the\n                // UI would therefore only ever surface unauthenticated peer input,\n                // so nothing on this path may reach the user.\n                try {\n                    const content = JSON.parse(textData);\n                    if (content.type === 'fake' || content.isFakeTraffic === true) {\n                        return;\n                    }\n                } catch (e) {\n                    // Not JSON \u2014 still not deliverable.\n                }\n\n                this._secureLog('error', 'Rejected unauthenticated binary frame on the chat channel', {\n                    byteLength: data?.byteLength || 0\n                });\n            }\n\n        } catch (error) {\n            this._secureLog('error', 'Error processing binary data:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n    /**\n     * Inbound chat under the Double Ratchet.\n     *\n     * No sequence-number check is needed or wanted here: replay protection is a\n     * property of the ratchet itself, since a message key is destroyed on use and\n     * a number behind the current chain has no key left to open it. Layering the\n     * old sliding window on top would reject legitimate out-of-order frames that\n     * the ratchet can still read.\n     */\n    async _processRatchetMessage(parsedMessage) {\n        try {\n            if (!this._checkInboundRateLimit('ratchet_message')) {\n                return;\n            }\n            if (!this.isRatchetActive()) {\n                this._secureLog('error', 'Received a ratchet message but no ratchet is active');\n                return;\n            }\n            if (typeof parsedMessage?.h !== 'string' || typeof parsedMessage?.c !== 'string') {\n                this._secureLog('error', 'Malformed ratchet message frame');\n                return;\n            }\n\n            const plaintext = await this._ratchet.decrypt(parsedMessage.h, parsedMessage.c);\n\n            // Same envelope as the static path, so the UI layer is unchanged.\n            try {\n                const content = JSON.parse(plaintext);\n                if (content.type === 'fake' || content.isFakeTraffic === true) return;\n                if (content && content.type === 'message' && typeof content.data === 'string') {\n                    this.deliverMessageToUI(content.data, 'received', content.meta);\n                    return;\n                }\n            } catch (_) {\n                // Not JSON \u2014 plain text is fine.\n            }\n            this.deliverMessageToUI(plaintext, 'received');\n        } catch (error) {\n            // Never surface the reason: \"authentication failed\" versus \"behind the\n            // chain\" tells a probing peer where its guess landed.\n            this._secureLog('error', 'Failed to decrypt ratchet message', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        }\n    }\n\n    // FIX 3: New method for processing enhanced messages WITHOUT mutex\n    async _processEnhancedMessageWithoutMutex(parsedMessage) {\n        try {\n            if (!this._checkInboundRateLimit('enhanced_message')) {\n                return;\n            }\n            \n            if (!this.encryptionKey || !this.macKey || !this.metadataKey) {\n                this._secureLog('error', 'Missing encryption keys for enhanced message');\n                return;\n            }\n            \n            const decryptedResult = await window.EnhancedSecureCryptoUtils.decryptMessage(\n                parsedMessage.data,\n                this.encryptionKey,\n                this.macKey,\n                this.metadataKey\n            );\n\n            // SECURITY: enforce the anti-replay window. The sequence number lives\n            // inside the AES-GCM-encrypted, HMAC-covered metadata, so it cannot be\n            // forged or rewritten in transit \u2014 but until it is actually checked\n            // against the sliding window, a captured frame could simply be played\n            // back. The main data channel is ordered+reliable, so legitimate\n            // messages always arrive in sequence.\n            if (!this._validateIncomingSequenceNumber(decryptedResult?.sequenceNumber, 'enhanced_message')) {\n                this._secureLog('error', 'Rejected chat message failing anti-replay validation', {\n                    messageId: decryptedResult?.messageId ? 'present' : 'absent'\n                });\n                return;\n            }\n\n            if (decryptedResult && decryptedResult.message) {\n\n                // Try parsing JSON and showing nested text if it's a chat message\n                try {\n                    const decryptedContent = JSON.parse(decryptedResult.message);\n                    if (decryptedContent.type === 'fake' || decryptedContent.isFakeTraffic === true) {\n                        return;\n                    }\n                    if (decryptedContent && decryptedContent.type === 'message' && typeof decryptedContent.data === 'string') {\n                        if (this.onMessage) {\n                            this.deliverMessageToUI(decryptedContent.data, 'received', decryptedContent.meta);\n                        }\n                        return;\n                    }\n                } catch (e) {\n                    // Not JSON \u2014 fine for plain text\n                }\n                \n                // Otherwise pass as-is\n                if (this.onMessage) {\n                    this.deliverMessageToUI(decryptedResult.message, 'received');\n                }\n            } else {\n                this._secureLog('warn', 'No message content in decrypted result');\n            }\n            \n        } catch (error) {\n            this._secureLog('error', 'Error processing enhanced message:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n    /**\n     * Creates a unique ID for an operation\n     */\n    _generateOperationId() {\n        return `op_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;\n    }\n\n    /**\n     *   Atomic mutex acquisition with enhanced race condition protection\n     */\n    async _acquireMutex(mutexName, operationId, timeout = 5000) {\n        //   Build correct mutex property name\n        const mutexPropertyName = `_${mutexName}Mutex`;\n        const mutex = this[mutexPropertyName];\n        \n        if (!mutex) {\n            this._secureLog('error', `Unknown mutex: ${mutexName}`, {\n                mutexPropertyName: mutexPropertyName,\n                availableMutexes: this._getAvailableMutexes(),\n                operationId: operationId\n            });\n            throw new Error(`Unknown mutex: ${mutexName}. Available: ${this._getAvailableMutexes().join(', ')}`);\n        }\n        \n        //   Validate operation ID\n        if (!operationId || typeof operationId !== 'string') {\n            throw new Error('Invalid operation ID for mutex acquisition');\n        }\n        \n        return new Promise((resolve, reject) => {\n            //   Atomic lock attempt with immediate state check\n            const attemptLock = () => {\n                //   Check if mutex is already locked by this operation\n                if (mutex.lockId === operationId) {\n                    this._secureLog('warn', `Mutex '${mutexName}' already locked by same operation`, {\n                        operationId: operationId\n                    });\n                    resolve();\n                    return;\n                }\n                \n                //   Atomic check and lock operation\n                if (!mutex.locked) {\n                    //   Set lock state atomically\n                    mutex.locked = true;\n                    mutex.lockId = operationId;\n                    mutex.lockTime = Date.now();\n                    \n                    this._secureLog('debug', `Mutex '${mutexName}' acquired atomically`, {\n                        operationId: operationId,\n                        lockTime: mutex.lockTime\n                    });\n                    \n                    //   Set timeout for automatic release with enhanced validation\n                    mutex.lockTimeout = setTimeout(() => {\n                        //   Enhanced timeout handling with state validation\n                        this._handleMutexTimeout(mutexName, operationId, timeout);\n                    }, timeout);\n                    \n                    resolve();\n                } else {\n                    //   Add to queue with timeout\n                    const queueItem = { \n                        resolve, \n                        reject, \n                        operationId,\n                        timestamp: Date.now(),\n                        timeout: setTimeout(() => {\n                            //   Remove from queue on timeout\n                            const index = mutex.queue.findIndex(item => item.operationId === operationId);\n                            if (index !== -1) {\n                                mutex.queue.splice(index, 1);\n                                reject(new Error(`Mutex acquisition timeout for '${mutexName}'`));\n                            }\n                        }, timeout)\n                    };\n                    \n                    mutex.queue.push(queueItem);\n                    \n                    this._secureLog('debug', `Operation queued for mutex '${mutexName}'`, {\n                        operationId: operationId,\n                        queueLength: mutex.queue.length,\n                        currentLockId: mutex.lockId\n                    });\n                }\n            };\n            \n            //   Execute lock attempt immediately\n            attemptLock();\n        });\n    }\n\n    /**\n     *   Enhanced mutex release with strict validation and error handling\n     */\n    _releaseMutex(mutexName, operationId) {\n        //   Validate input parameters\n        if (!mutexName || typeof mutexName !== 'string') {\n            throw new Error('Invalid mutex name provided for release');\n        }\n        \n        if (!operationId || typeof operationId !== 'string') {\n            throw new Error('Invalid operation ID provided for mutex release');\n        }\n        \n        //   Build correct mutex property name\n        const mutexPropertyName = `_${mutexName}Mutex`;\n        const mutex = this[mutexPropertyName];\n        \n        if (!mutex) {\n            this._secureLog('error', `Unknown mutex for release: ${mutexName}`, {\n                mutexPropertyName: mutexPropertyName,\n                availableMutexes: this._getAvailableMutexes(),\n                operationId: operationId\n            });\n            throw new Error(`Unknown mutex for release: ${mutexName}`);\n        }\n        \n        //   Strict validation of lock ownership\n        if (mutex.lockId !== operationId) {\n            this._secureLog('error', `CRITICAL: Invalid mutex release attempt - potential race condition`, {\n                mutexName: mutexName,\n                expectedLockId: mutex.lockId,\n                providedOperationId: operationId,\n                mutexState: {\n                    locked: mutex.locked,\n                    lockTime: mutex.lockTime,\n                    queueLength: mutex.queue.length\n                }\n            });\n            \n            //   Throw error instead of silent failure\n            throw new Error(`Invalid mutex release attempt for '${mutexName}': expected '${mutex.lockId}', got '${operationId}'`);\n        }\n        \n        //   Validate mutex is actually locked\n        if (!mutex.locked) {\n            this._secureLog('error', `CRITICAL: Attempting to release unlocked mutex`, {\n                mutexName: mutexName,\n                operationId: operationId,\n                mutexState: {\n                    locked: mutex.locked,\n                    lockId: mutex.lockId,\n                    lockTime: mutex.lockTime\n                }\n            });\n            throw new Error(`Attempting to release unlocked mutex: ${mutexName}`);\n        }\n        \n        try {\n            //   Clear timeout first\n            if (mutex.lockTimeout) {\n                clearTimeout(mutex.lockTimeout);\n                mutex.lockTimeout = null;\n            }\n            \n            //   Calculate lock duration for monitoring\n            const lockDuration = mutex.lockTime ? Date.now() - mutex.lockTime : 0;\n            \n            //   Atomic release with state validation\n            mutex.locked = false;\n            mutex.lockId = null;\n            mutex.lockTime = null;\n            \n            this._secureLog('debug', `Mutex released successfully: ${mutexName}`, {\n                operationId: operationId,\n                lockDuration: lockDuration,\n                queueLength: mutex.queue.length\n            });\n            \n            //   Process next in queue with enhanced error handling\n            this._processNextInQueue(mutexName);\n            \n        } catch (error) {\n            //   If queue processing fails, ensure mutex is still released\n            this._secureLog('error', `Error during mutex release queue processing`, {\n                mutexName: mutexName,\n                operationId: operationId,\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            \n            //   Ensure mutex is released even if queue processing fails\n            mutex.locked = false;\n            mutex.lockId = null;\n            mutex.lockTime = null;\n            mutex.lockTimeout = null;\n            \n            throw error;\n        }\n    }\n\n    /**\n     *   Enhanced queue processing with comprehensive error handling\n     */\n    _processNextInQueue(mutexName) {\n        const mutex = this[`_${mutexName}Mutex`];\n        \n        if (!mutex) {\n            this._secureLog('error', `Mutex not found for queue processing: ${mutexName}`);\n            return;\n        }\n        \n        if (mutex.queue.length === 0) {\n            return;\n        }\n        \n        //   Validate mutex state before processing queue\n        if (mutex.locked) {\n            this._secureLog('warn', `Mutex '${mutexName}' is still locked, skipping queue processing`, {\n                lockId: mutex.lockId,\n                queueLength: mutex.queue.length\n            });\n            return;\n        }\n        \n        //   Get next item from queue atomically with validation\n        const nextItem = mutex.queue.shift();\n        \n        if (!nextItem) {\n            this._secureLog('warn', `Empty queue item for mutex '${mutexName}'`);\n            return;\n        }\n        \n        //   Validate queue item structure\n        if (!nextItem.operationId || !nextItem.resolve || !nextItem.reject) {\n            this._secureLog('error', `Invalid queue item structure for mutex '${mutexName}'`, {\n                hasOperationId: !!nextItem.operationId,\n                hasResolve: !!nextItem.resolve,\n                hasReject: !!nextItem.reject\n            });\n            return;\n        }\n        \n        try {\n            //   Clear timeout for this item\n            if (nextItem.timeout) {\n                clearTimeout(nextItem.timeout);\n            }\n            \n            //   Attempt to acquire lock for next item\n            this._secureLog('debug', `Processing next operation in queue for mutex '${mutexName}'`, {\n                operationId: nextItem.operationId,\n                queueRemaining: mutex.queue.length,\n                timestamp: Date.now()\n            });\n            \n            //   Retry lock acquisition for queued operation with enhanced error handling\n            setTimeout(async () => {\n                try {\n                    await this._acquireMutex(mutexName, nextItem.operationId, 5000);\n                    \n                    this._secureLog('debug', `Queued operation acquired mutex '${mutexName}'`, {\n                        operationId: nextItem.operationId,\n                        acquisitionTime: Date.now()\n                    });\n                    \n                    nextItem.resolve();\n                    \n                } catch (error) {\n                    this._secureLog('error', `Queued operation failed to acquire mutex '${mutexName}'`, {\n                        operationId: nextItem.operationId,\n                        errorType: error.constructor.name,\n                        errorMessage: error.message,\n                        timestamp: Date.now()\n                    });\n                    \n                    //   Reject with detailed error information\n                    nextItem.reject(new Error(`Queue processing failed for '${mutexName}': ${error.message}`));\n                    \n                    //   Continue processing queue even if one item fails\n                    setTimeout(() => {\n                        this._processNextInQueue(mutexName);\n                    }, 50);\n                }\n            }, 10); // Small delay to prevent immediate re-acquisition\n            \n        } catch (error) {\n            this._secureLog('error', `Critical error during queue processing for mutex '${mutexName}'`, {\n                operationId: nextItem.operationId,\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            \n            //   Reject the operation and continue processing\n            try {\n                nextItem.reject(new Error(`Queue processing critical error: ${error.message}`));\n            } catch (rejectError) {\n                this._secureLog('error', `Failed to reject queue item`, {\n                    originalError: error.message,\n                    rejectError: rejectError.message\n                });\n            }\n            \n            //   Continue processing remaining queue items\n            setTimeout(() => {\n                this._processNextInQueue(mutexName);\n            }, 100);\n        }\n    }\n\n    _getAvailableMutexes() {\n        const mutexes = [];\n        const propertyNames = Object.getOwnPropertyNames(this);\n        \n        for (const prop of propertyNames) {\n            if (prop.endsWith('Mutex') && prop.startsWith('_')) {\n                // Extract mutex name without prefix/suffix\n                const mutexName = prop.slice(1, -5); // Remove '_' prefix and 'Mutex' suffix\n                mutexes.push(mutexName);\n            }\n        }\n        \n        return mutexes;\n    }\n\n    /**\n     *   Enhanced mutex execution with atomic operations\n     */\n    async _withMutex(mutexName, operation, timeout = 5000) {\n        const operationId = this._generateOperationId();\n        \n        //   Validate mutex system before operation\n        if (!this._validateMutexSystem()) {\n            this._secureLog('error', 'Mutex system not properly initialized', {\n                operationId: operationId,\n                mutexName: mutexName\n            });\n            throw new Error('Mutex system not properly initialized. Call _initializeMutexSystem() first.');\n        }\n        \n        //   Get mutex reference with validation\n        const mutex = this[`_${mutexName}Mutex`];\n        if (!mutex) {\n            throw new Error(`Mutex '${mutexName}' not found`);\n        }\n        \n        let mutexAcquired = false;\n        \n        try {\n            //   Atomic mutex acquisition with timeout\n            await this._acquireMutex(mutexName, operationId, timeout);\n            mutexAcquired = true;\n            \n            //   Increment operation counter atomically\n            const counterKey = `${mutexName}Operations`;\n            if (this._operationCounters && this._operationCounters[counterKey] !== undefined) {\n                this._operationCounters[counterKey]++;\n            }\n            \n            //   Execute operation with enhanced error handling\n            const result = await operation(operationId);\n            \n            //   Validate result before returning\n            if (result === undefined && operation.name !== 'cleanup') {\n                this._secureLog('warn', 'Mutex operation returned undefined result', {\n                    operationId: operationId,\n                    mutexName: mutexName,\n                    operationName: operation.name\n                });\n            }\n            \n            return result;\n            \n        } catch (error) {\n            //   Enhanced error logging with context\n            this._secureLog('error', 'Error in mutex operation', {\n                operationId: operationId,\n                mutexName: mutexName,\n                errorType: error.constructor.name,\n                errorMessage: error.message,\n                mutexAcquired: mutexAcquired,\n                mutexState: mutex ? {\n                    locked: mutex.locked,\n                    lockId: mutex.lockId,\n                    queueLength: mutex.queue.length\n                } : 'null'\n            });\n            \n                    //   If this is a key operation error, trigger emergency recovery\n        if (mutexName === 'keyOperation') {\n            this._handleKeyOperationError(error, operationId);\n        }\n        \n        //   Trigger emergency unlock for critical mutex errors\n        if (error.message.includes('timeout') || error.message.includes('race condition')) {\n            this._emergencyUnlockAllMutexes('errorHandler');\n        }\n            \n            throw error;\n        } finally {\n            //   Always release mutex in finally block with validation\n            if (mutexAcquired) {\n                try {\n                    await this._releaseMutex(mutexName, operationId);\n                    \n                    //   Verify mutex was properly released\n                    if (mutex.locked && mutex.lockId === operationId) {\n                        this._secureLog('error', 'Mutex release verification failed', {\n                            operationId: operationId,\n                            mutexName: mutexName\n                        });\n                        // Force release as fallback\n                        mutex.locked = false;\n                        mutex.lockId = null;\n                        mutex.lockTimeout = null;\n                    }\n                    \n                } catch (releaseError) {\n                    this._secureLog('error', 'Error releasing mutex in finally block', {\n                        operationId: operationId,\n                        mutexName: mutexName,\n                        releaseErrorType: releaseError.constructor.name,\n                        releaseErrorMessage: releaseError.message\n                    });\n                    \n                    //   Force release on error\n                    mutex.locked = false;\n                    mutex.lockId = null;\n                    mutex.lockTimeout = null;\n                }\n            }\n        }\n    }\n\n    _validateMutexSystem() {\n        const requiredMutexes = ['keyOperation', 'cryptoOperation', 'connectionOperation'];\n        \n        for (const mutexName of requiredMutexes) {\n            const mutexPropertyName = `_${mutexName}Mutex`;\n            const mutex = this[mutexPropertyName];\n            \n            if (!mutex || typeof mutex !== 'object') {\n                this._secureLog('error', `Missing or invalid mutex: ${mutexName}`, {\n                    mutexPropertyName: mutexPropertyName,\n                    mutexType: typeof mutex\n                });\n                return false;\n            }\n            \n            // Validate mutex structure\n            const requiredProps = ['locked', 'queue', 'lockId', 'lockTimeout'];\n            for (const prop of requiredProps) {\n                if (!(prop in mutex)) {\n                    this._secureLog('error', `Mutex ${mutexName} missing property: ${prop}`);\n                    return false;\n                }\n            }\n        }\n        \n        return true;\n    }\n\n    /**\n     *   Enhanced emergency recovery of the mutex system\n     */\n    _emergencyRecoverMutexSystem() {\n        this._secureLog('warn', 'Emergency mutex system recovery initiated');\n        \n        try {\n            //   Emergency unlock all mutexes first\n            this._emergencyUnlockAllMutexes('emergencyRecovery');\n            \n            //   Force re-initialize the system\n            this._initializeMutexSystem();\n            \n            //   Validate recovery success\n            if (!this._validateMutexSystem()) {\n                throw new Error('Mutex system validation failed after recovery');\n            }\n            \n            this._secureLog('info', 'Mutex system recovered successfully with validation');\n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to recover mutex system', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            \n            //   Last resort - force re-initialization\n            try {\n                this._initializeMutexSystem();\n                this._secureLog('warn', 'Forced mutex system re-initialization completed');\n                return true;\n            } catch (reinitError) {\n                this._secureLog('error', 'CRITICAL: Forced re-initialization also failed', {\n                    originalError: error.message,\n                    reinitError: reinitError.message\n                });\n                return false;\n            }\n        }\n    }\n\n    /**\n     *   Atomic key generation with race condition protection\n     */\n    async _generateEncryptionKeys() {\n        return this._withMutex('keyOperation', async (operationId) => {\n            this._secureLog('info', 'Generating encryption keys with atomic mutex', {\n                operationId: operationId\n            });\n            \n            //   Atomic state check and update using mutex lock\n            const currentState = this._keySystemState;\n            \n            //   Atomic check - if already initializing, wait or fail\n            if (currentState.isInitializing) {\n                this._secureLog('warn', 'Key generation already in progress, waiting for completion', {\n                    operationId: operationId,\n                    lastOperation: currentState.lastOperation,\n                    lastOperationTime: currentState.lastOperationTime\n                });\n                \n                // Wait for existing operation to complete\n                let waitAttempts = 0;\n                const maxWaitAttempts = 50; // 5 seconds max wait\n                \n                while (currentState.isInitializing && waitAttempts < maxWaitAttempts) {\n                    await new Promise(resolve => setTimeout(resolve, 100));\n                    waitAttempts++;\n                }\n                \n                if (currentState.isInitializing) {\n                    throw new Error('Key generation timeout - operation still in progress after 5 seconds');\n                }\n            }\n            \n            //   Atomic state update within mutex protection\n            try {\n                //   Set state atomically within mutex\n                currentState.isInitializing = true;\n                currentState.lastOperation = 'generation';\n                currentState.lastOperationTime = Date.now();\n                currentState.operationId = operationId;\n                \n                this._secureLog('debug', 'Atomic key generation state set', {\n                    operationId: operationId,\n                    timestamp: currentState.lastOperationTime\n                });\n                \n                //   Generate keys with individual error handling\n                let ecdhKeyPair = null;\n                let ecdsaKeyPair = null;\n                \n                //   Generate ephemeral ECDH keys for PFS\n                try {\n                    ecdhKeyPair = await this._generateEphemeralECDHKeys();\n                    \n                    //   Validate ECDH keys immediately\n                    if (!ecdhKeyPair || !ecdhKeyPair.privateKey || !ecdhKeyPair.publicKey) {\n                        throw new Error('Ephemeral ECDH key pair validation failed');\n                    }\n                    \n                    //   Constant-time validation for key types\n                    if (!this._validateKeyPairConstantTime(ecdhKeyPair)) {\n                        throw new Error('Ephemeral ECDH keys are not valid CryptoKey instances');\n                    }\n                    \n                    this._secureLog('debug', 'Ephemeral ECDH keys generated and validated for PFS', {\n                        operationId: operationId,\n                        privateKeyType: ecdhKeyPair.privateKey.algorithm?.name,\n                        publicKeyType: ecdhKeyPair.publicKey.algorithm?.name,\n                        isEphemeral: true\n                    });\n\n                } catch (ecdhError) {\n                    this._secureLog('error', 'Ephemeral ECDH key generation failed', {\n                        operationId: operationId,\n                        errorType: ecdhError.constructor.name\n                    });\n                    this._throwSecureError(ecdhError, 'ephemeral_ecdh_key_generation');\n                }\n                \n                // Generate ECDSA keys with retry mechanism\n                try {\n                    ecdsaKeyPair = await window.EnhancedSecureCryptoUtils.generateECDSAKeyPair();\n                    \n                                    //   Validate ECDSA keys immediately\n                if (!ecdsaKeyPair || !ecdsaKeyPair.privateKey || !ecdsaKeyPair.publicKey) {\n                    throw new Error('ECDSA key pair validation failed');\n                }\n                \n                //   Constant-time validation for key types\n                if (!this._validateKeyPairConstantTime(ecdsaKeyPair)) {\n                    throw new Error('ECDSA keys are not valid CryptoKey instances');\n                }\n                    \n                    this._secureLog('debug', 'ECDSA keys generated and validated', {\n                        operationId: operationId,\n                        privateKeyType: ecdsaKeyPair.privateKey.algorithm?.name,\n                        publicKeyType: ecdsaKeyPair.publicKey.algorithm?.name\n                    });\n                    \n                } catch (ecdsaError) {\n                    this._secureLog('error', 'ECDSA key generation failed', {\n                        operationId: operationId,\n                        errorType: ecdsaError.constructor.name\n                    });\n                    this._throwSecureError(ecdsaError, 'ecdsa_key_generation');\n                }\n                \n                //   Final validation of both key pairs\n                if (!ecdhKeyPair || !ecdsaKeyPair) {\n                    throw new Error('One or both key pairs failed to generate');\n                }\n                \n                //   Enable security features after successful key generation\n                this._enableSecurityFeaturesAfterKeyGeneration(ecdhKeyPair, ecdsaKeyPair);\n                \n                this._secureLog('info', 'Encryption keys generated successfully with atomic protection', {\n                    operationId: operationId,\n                    hasECDHKeys: !!(ecdhKeyPair?.privateKey && ecdhKeyPair?.publicKey),\n                    hasECDSAKeys: !!(ecdsaKeyPair?.privateKey && ecdsaKeyPair?.publicKey),\n                    generationTime: Date.now() - currentState.lastOperationTime\n                });\n                \n                return { ecdhKeyPair, ecdsaKeyPair };\n                \n            } catch (error) {\n                //   Ensure state is reset on any error\n                this._secureLog('error', 'Key generation failed, resetting state', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                throw error;\n            } finally {\n                //   Always reset state in finally block\n                currentState.isInitializing = false;\n                currentState.operationId = null;\n                \n                this._secureLog('debug', 'Key generation state reset', {\n                    operationId: operationId\n                });\n            }\n        });\n    }\n\n    /**\n     *   Enable security features after successful key generation\n     */\n    _enableSecurityFeaturesAfterKeyGeneration(ecdhKeyPair, ecdsaKeyPair) {\n        try {\n            //   Enable encryption features based on available keys\n            if (ecdhKeyPair && ecdhKeyPair.privateKey && ecdhKeyPair.publicKey) {\n                this.securityFeatures.hasEncryption = true;\n                this.securityFeatures.hasECDH = true;\n                this._secureLog('info', 'ECDH encryption features enabled');\n            }\n            \n            if (ecdsaKeyPair && ecdsaKeyPair.privateKey && ecdsaKeyPair.publicKey) {\n                this.securityFeatures.hasECDSA = true;\n                this._secureLog('info', 'ECDSA signature features enabled');\n            }\n            \n            //   Enable additional features that depend on encryption\n            if (this.securityFeatures.hasEncryption) {\n                this.securityFeatures.hasMetadataProtection = true;\n                this.securityFeatures.hasEnhancedReplayProtection = true;\n                this.securityFeatures.hasNonExtractableKeys = true;\n                this._secureLog('info', 'Additional encryption-dependent features enabled');\n            }\n            \n            //   Enable PFS after ephemeral key generation\n            if (ecdhKeyPair && this.ephemeralKeyPairs.size > 0) {\n                this.securityFeatures.hasPFS = true;\n                this._secureLog('info', 'Perfect Forward Secrecy enabled with ephemeral keys');\n            }\n            \n            this._secureLog('info', 'Security features updated after key generation', {\n                hasEncryption: this.securityFeatures.hasEncryption,\n                hasECDH: this.securityFeatures.hasECDH,\n                hasECDSA: this.securityFeatures.hasECDSA,\n                hasMetadataProtection: this.securityFeatures.hasMetadataProtection,\n                hasEnhancedReplayProtection: this.securityFeatures.hasEnhancedReplayProtection,\n                hasNonExtractableKeys: this.securityFeatures.hasNonExtractableKeys,\n                hasPFS: this.securityFeatures.hasPFS\n            });\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to enable security features after key generation', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        }\n    }\n\n    /**\n     *   Enhanced emergency mutex unlocking with authorization and validation\n     */\n    _emergencyUnlockAllMutexes(callerContext = 'unknown') {\n        //   Validate caller authorization\n        const authorizedCallers = [\n            'keyOperation', 'cryptoOperation', 'connectionOperation',\n            'emergencyRecovery', 'systemShutdown', 'errorHandler'\n        ];\n        \n        if (!authorizedCallers.includes(callerContext)) {\n            this._secureLog('error', `UNAUTHORIZED emergency mutex unlock attempt`, {\n                callerContext: callerContext,\n                authorizedCallers: authorizedCallers,\n                timestamp: Date.now()\n            });\n            throw new Error(`Unauthorized emergency mutex unlock attempt by: ${callerContext}`);\n        }\n        \n        const mutexes = ['keyOperation', 'cryptoOperation', 'connectionOperation'];\n        \n        this._secureLog('error', 'EMERGENCY: Unlocking all mutexes with authorization and state cleanup', {\n            callerContext: callerContext,\n            timestamp: Date.now()\n        });\n        \n        let unlockedCount = 0;\n        let errorCount = 0;\n        \n        mutexes.forEach(mutexName => {\n            const mutex = this[`_${mutexName}Mutex`];\n            if (mutex) {\n                try {\n                    //   Clear timeout first\n                    if (mutex.lockTimeout) {\n                        clearTimeout(mutex.lockTimeout);\n                    }\n                    \n                    //   Log mutex state before emergency unlock\n                    const previousState = {\n                        locked: mutex.locked,\n                        lockId: mutex.lockId,\n                        lockTime: mutex.lockTime,\n                        queueLength: mutex.queue.length\n                    };\n                    \n                    //   Reset mutex state atomically\n                    mutex.locked = false;\n                    mutex.lockId = null;\n                    mutex.lockTimeout = null;\n                    mutex.lockTime = null;\n                    \n                    //   Clear queue with proper error handling and logging\n                    let queueRejectCount = 0;\n                    mutex.queue.forEach(item => {\n                        try {\n                            if (item.reject && typeof item.reject === 'function') {\n                                item.reject(new Error(`Emergency mutex unlock for ${mutexName} by ${callerContext}`));\n                                queueRejectCount++;\n                            }\n                        } catch (rejectError) {\n                            this._secureLog('warn', `Failed to reject queue item during emergency unlock`, {\n                                mutexName: mutexName,\n                                errorType: rejectError.constructor.name\n                            });\n                        }\n                    });\n                    \n                    //   Clear queue array\n                    mutex.queue = [];\n                    \n                    unlockedCount++;\n                    \n                    this._secureLog('debug', `Emergency unlocked mutex: ${mutexName}`, {\n                        previousState: previousState,\n                        queueRejectCount: queueRejectCount,\n                        callerContext: callerContext\n                    });\n                    \n                } catch (error) {\n                    errorCount++;\n                    this._secureLog('error', `Error during emergency unlock of mutex: ${mutexName}`, {\n                        errorType: error.constructor.name,\n                        errorMessage: error.message,\n                        callerContext: callerContext\n                    });\n                }\n            }\n        });\n        \n        //   Reset key system state with validation\n        if (this._keySystemState) {\n            try {\n                const previousKeyState = { ...this._keySystemState };\n                \n                this._keySystemState.isInitializing = false;\n                this._keySystemState.isRotating = false;\n                this._keySystemState.isDestroying = false;\n                this._keySystemState.operationId = null;\n                this._keySystemState.concurrentOperations = 0;\n                \n                this._secureLog('debug', `Emergency reset key system state`, {\n                    previousState: previousKeyState,\n                    callerContext: callerContext\n                });\n                \n            } catch (error) {\n                this._secureLog('error', `Error resetting key system state during emergency unlock`, {\n                    errorType: error.constructor.name,\n                    errorMessage: error.message,\n                    callerContext: callerContext\n                });\n            }\n        }\n        \n        //   Log emergency unlock summary\n        this._secureLog('info', `Emergency mutex unlock completed`, {\n            callerContext: callerContext,\n            unlockedCount: unlockedCount,\n            errorCount: errorCount,\n            totalMutexes: mutexes.length,\n            timestamp: Date.now()\n        });\n        \n        //   Trigger system validation after emergency unlock\n        setTimeout(() => {\n            this._validateMutexSystemAfterEmergencyUnlock();\n        }, 100);\n    }\n\n    /**\n     *   Handle key operation errors with recovery mechanisms\n     */\n    _handleKeyOperationError(error, operationId) {\n        this._secureLog('error', 'Key operation error detected, initiating recovery', {\n            operationId: operationId,\n            errorType: error.constructor.name,\n            errorMessage: error.message\n        });\n        \n        //   Reset key system state immediately\n        if (this._keySystemState) {\n            this._keySystemState.isInitializing = false;\n            this._keySystemState.isRotating = false;\n            this._keySystemState.isDestroying = false;\n            this._keySystemState.operationId = null;\n        }\n        \n        //   Clear any partial key data\n        this.ecdhKeyPair = null;\n        this.ecdsaKeyPair = null;\n        this.encryptionKey = null;\n        this.macKey = null;\n        this.metadataKey = null;\n        \n        //   Trigger emergency recovery if needed\n        if (error.message.includes('timeout') || error.message.includes('race condition')) {\n            this._secureLog('warn', 'Race condition or timeout detected, triggering emergency recovery');\n            this._emergencyRecoverMutexSystem();\n        }\n    }\n\n    /**\n     *   Generate cryptographically secure IV with reuse prevention\n     */\n    _generateSecureIV(ivSize = 12, context = 'general') {\n        //   Check if we're in emergency mode\n        if (this._ivTrackingSystem.emergencyMode) {\n            this._secureLog('error', 'CRITICAL: IV generation blocked - emergency mode active due to IV reuse');\n            throw new Error('IV generation blocked - emergency mode active');\n        }\n        \n        let attempts = 0;\n        const maxAttempts = 100; // Prevent infinite loops\n        \n        while (attempts < maxAttempts) {\n            attempts++;\n            \n            //   Generate fresh IV with crypto.getRandomValues\n            const iv = crypto.getRandomValues(new Uint8Array(ivSize));\n            \n            //   Convert IV to string for tracking\n            const ivString = Array.from(iv).map(b => b.toString(16).padStart(2, '0')).join('');\n            \n            //   Check for IV reuse\n            if (this._ivTrackingSystem.usedIVs.has(ivString)) {\n                this._ivTrackingSystem.collisionCount++;\n                this._secureLog('error', `CRITICAL: IV reuse detected!`, {\n                    context: context,\n                    attempt: attempts,\n                    collisionCount: this._ivTrackingSystem.collisionCount,\n                    ivString: ivString.substring(0, 16) + '...' // Log partial IV for debugging\n                });\n                \n                //   If too many collisions, trigger emergency mode\n                if (this._ivTrackingSystem.collisionCount > 5) {\n                    this._ivTrackingSystem.emergencyMode = true;\n                    this._secureLog('error', 'CRITICAL: Emergency mode activated due to excessive IV reuse');\n                    throw new Error('Emergency mode: Excessive IV reuse detected');\n                }\n                \n                continue; // Try again\n            }\n            \n            //   Validate IV entropy\n            if (!this._validateIVEntropy(iv)) {\n                this._ivTrackingSystem.entropyValidation.entropyFailures++;\n                this._secureLog('warn', `Low entropy IV detected`, {\n                    context: context,\n                    attempt: attempts,\n                    entropyFailures: this._ivTrackingSystem.entropyValidation.entropyFailures\n                });\n                \n                //   If too many entropy failures, trigger emergency mode\n                if (this._ivTrackingSystem.entropyValidation.entropyFailures > 10) {\n                    this._ivTrackingSystem.emergencyMode = true;\n                    this._secureLog('error', 'CRITICAL: Emergency mode activated due to low entropy IVs');\n                    throw new Error('Emergency mode: Low entropy IVs detected');\n                }\n                \n                continue; // Try again\n            }\n            \n            //   Track IV usage\n            this._ivTrackingSystem.usedIVs.add(ivString);\n            this._ivTrackingSystem.ivHistory.set(ivString, {\n                timestamp: Date.now(),\n                context: context,\n                attempt: attempts\n            });\n            \n            //   Track per-session IVs\n            if (this.sessionId) {\n                if (!this._ivTrackingSystem.sessionIVs.has(this.sessionId)) {\n                    this._ivTrackingSystem.sessionIVs.set(this.sessionId, new Set());\n                }\n                this._ivTrackingSystem.sessionIVs.get(this.sessionId).add(ivString);\n            }\n            \n            //   Validate RNG periodically\n            this._validateRNGQuality();\n            \n            this._secureLog('debug', `Secure IV generated`, {\n                context: context,\n                attempt: attempts,\n                ivSize: ivSize,\n                totalIVs: this._ivTrackingSystem.usedIVs.size\n            });\n            \n            return iv;\n        }\n        \n        //   If we can't generate a unique IV after max attempts\n        this._secureLog('error', `Failed to generate unique IV after ${maxAttempts} attempts`, {\n            context: context,\n            totalIVs: this._ivTrackingSystem.usedIVs.size\n        });\n        throw new Error(`Failed to generate unique IV after ${maxAttempts} attempts`);\n    }\n    \n    /**\n     *   Validate IV entropy to detect weak RNG\n     */\n    _validateIVEntropy(iv) {\n        this._ivTrackingSystem.entropyValidation.entropyTests++;\n        \n        //   Calculate byte distribution\n        const byteCounts = new Array(256).fill(0);\n        for (let i = 0; i < iv.length; i++) {\n            byteCounts[iv[i]]++;\n        }\n        \n        //   Multi-dimensional entropy analysis\n        const entropyResults = {\n            shannon: 0,\n            min: 0,\n            collision: 0,\n            compression: 0,\n            quantum: 0\n        };\n        \n        // 1. Shannon entropy calculation\n        let shannonEntropy = 0;\n        const totalBytes = iv.length;\n        \n        for (let i = 0; i < 256; i++) {\n            if (byteCounts[i] > 0) {\n                const probability = byteCounts[i] / totalBytes;\n                shannonEntropy -= probability * Math.log2(probability);\n            }\n        }\n        entropyResults.shannon = shannonEntropy;\n        \n        // 2. Min-entropy calculation (worst-case scenario)\n        const maxCount = Math.max(...byteCounts);\n        const maxProbability = maxCount / totalBytes;\n        entropyResults.min = -Math.log2(maxProbability);\n        \n        // 3. Collision entropy calculation\n        let collisionSum = 0;\n        for (let i = 0; i < 256; i++) {\n            if (byteCounts[i] > 0) {\n                const probability = byteCounts[i] / totalBytes;\n                collisionSum += probability * probability;\n            }\n        }\n        entropyResults.collision = -Math.log2(collisionSum);\n        \n        // 4. Compression-based entropy estimation\n        const ivString = Array.from(iv).map(b => String.fromCharCode(b)).join('');\n        const compressedLength = this._estimateCompressedLength(ivString);\n        entropyResults.compression = (1 - compressedLength / totalBytes) * 8;\n        \n        // 5. Quantum-resistant entropy analysis\n        entropyResults.quantum = this._calculateQuantumResistantEntropy(iv);\n        \n        //   Enhanced suspicious pattern detection\n        const hasSuspiciousPatterns = this._detectAdvancedSuspiciousPatterns(iv);\n        \n        //   Multi-criteria validation\n        const minEntropyThreshold = this._ivTrackingSystem.entropyValidation.minEntropy;\n        const isValid = (\n            entropyResults.shannon >= minEntropyThreshold &&\n            entropyResults.min >= minEntropyThreshold * 0.8 &&\n            entropyResults.collision >= minEntropyThreshold * 0.9 &&\n            entropyResults.compression >= minEntropyThreshold * 0.7 &&\n            entropyResults.quantum >= minEntropyThreshold * 0.6 &&\n            !hasSuspiciousPatterns\n        );\n        \n        if (!isValid) {\n            this._secureLog('warn', `Enhanced IV entropy validation failed`, {\n                shannon: entropyResults.shannon.toFixed(2),\n                min: entropyResults.min.toFixed(2),\n                collision: entropyResults.collision.toFixed(2),\n                compression: entropyResults.compression.toFixed(2),\n                quantum: entropyResults.quantum.toFixed(2),\n                minThreshold: minEntropyThreshold,\n                hasSuspiciousPatterns: hasSuspiciousPatterns\n            });\n        }\n        \n        return isValid;\n    }\n    \n    /**\n     *   Estimate compressed length for entropy calculation\n     * @param {string} data - Data to estimate compression\n     * @returns {number} Estimated compressed length\n     */\n    _estimateCompressedLength(data) {\n        // Simple LZ77-like compression estimation\n        let compressedLength = 0;\n        let i = 0;\n        \n        while (i < data.length) {\n            let matchLength = 0;\n            let matchDistance = 0;\n            \n            // Look for repeated patterns\n            for (let j = Math.max(0, i - 255); j < i; j++) {\n                let k = 0;\n                while (i + k < data.length && data[i + k] === data[j + k] && k < 255) {\n                    k++;\n                }\n                if (k > matchLength) {\n                    matchLength = k;\n                    matchDistance = i - j;\n                }\n            }\n            \n            if (matchLength >= 3) {\n                compressedLength += 3; // Distance + length + literal\n                i += matchLength;\n            } else {\n                compressedLength += 1;\n                i += 1;\n            }\n        }\n        \n        return compressedLength;\n    }\n\n    /**\n     *   Calculate quantum-resistant entropy\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {number} Quantum-resistant entropy score\n     */\n    _calculateQuantumResistantEntropy(data) {\n        // Quantum-resistant entropy analysis\n        let quantumScore = 0;\n        \n        // 1. Check for quantum-vulnerable patterns\n        const hasQuantumVulnerablePatterns = this._detectQuantumVulnerablePatterns(data);\n        if (hasQuantumVulnerablePatterns) {\n            quantumScore -= 2;\n        }\n        \n        // 2. Analyze bit distribution\n        const bitDistribution = this._analyzeBitDistribution(data);\n        quantumScore += bitDistribution.score;\n        \n        // 3. Check for periodicity\n        const periodicity = this._detectPeriodicity(data);\n        quantumScore -= periodicity * 0.5;\n        \n        // 4. Normalize to 0-8 range\n        return Math.max(0, Math.min(8, quantumScore));\n    }\n\n    /**\n     *   Detect quantum-vulnerable patterns\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {boolean} true if quantum-vulnerable patterns found\n     */\n    _detectQuantumVulnerablePatterns(data) {\n        // Check for patterns vulnerable to quantum attacks\n        const patterns = [\n            [0, 0, 0, 0, 0, 0, 0, 0], // All zeros\n            [255, 255, 255, 255, 255, 255, 255, 255], // All ones\n            [0, 1, 0, 1, 0, 1, 0, 1], // Alternating\n            [1, 0, 1, 0, 1, 0, 1, 0]  // Alternating reverse\n        ];\n        \n        for (const pattern of patterns) {\n            for (let i = 0; i <= data.length - pattern.length; i++) {\n                let match = true;\n                for (let j = 0; j < pattern.length; j++) {\n                    if (data[i + j] !== pattern[j]) {\n                        match = false;\n                        break;\n                    }\n                }\n                if (match) return true;\n            }\n        }\n        \n        return false;\n    }\n\n    /**\n     *   Analyze bit distribution\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {Object} Bit distribution analysis\n     */\n    _analyzeBitDistribution(data) {\n        let ones = 0;\n        let totalBits = data.length * 8;\n        \n        for (const byte of data) {\n            ones += (byte >>> 0).toString(2).split('1').length - 1;\n        }\n        \n        const zeroRatio = (totalBits - ones) / totalBits;\n        const oneRatio = ones / totalBits;\n        \n        // Ideal distribution is 50/50\n        const deviation = Math.abs(0.5 - oneRatio);\n        const score = Math.max(0, 8 - deviation * 16);\n        \n        return { score, zeroRatio, oneRatio, deviation };\n    }\n\n    /**\n     *   Detect periodicity in data\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {number} Periodicity score (0-1)\n     */\n    _detectPeriodicity(data) {\n        if (data.length < 16) return 0;\n        \n        let maxPeriodicity = 0;\n        \n        // Check for periods from 2 to data.length/2\n        for (let period = 2; period <= data.length / 2; period++) {\n            let matches = 0;\n            let totalChecks = 0;\n            \n            for (let i = 0; i < data.length - period; i++) {\n                if (data[i] === data[i + period]) {\n                    matches++;\n                }\n                totalChecks++;\n            }\n            \n            if (totalChecks > 0) {\n                const periodicity = matches / totalChecks;\n                maxPeriodicity = Math.max(maxPeriodicity, periodicity);\n            }\n        }\n        \n        return maxPeriodicity;\n    }\n\n    /**\n     *   Enhanced suspicious pattern detection\n     * @param {Uint8Array} iv - IV to check\n     * @returns {boolean} true if suspicious patterns found\n     */\n    _detectAdvancedSuspiciousPatterns(iv) {\n        // Enhanced pattern detection with quantum-resistant analysis\n        const patterns = [\n            // Sequential patterns\n            [0, 1, 2, 3, 4, 5, 6, 7],\n            [255, 254, 253, 252, 251, 250, 249, 248],\n            \n            // Repeated patterns\n            [0, 0, 0, 0, 0, 0, 0, 0],\n            [255, 255, 255, 255, 255, 255, 255, 255],\n            \n            // Alternating patterns\n            [0, 255, 0, 255, 0, 255, 0, 255],\n            [255, 0, 255, 0, 255, 0, 255, 0]\n        ];\n        \n        for (const pattern of patterns) {\n            for (let i = 0; i <= iv.length - pattern.length; i++) {\n                let match = true;\n                for (let j = 0; j < pattern.length; j++) {\n                    if (iv[i + j] !== pattern[j]) {\n                        match = false;\n                        break;\n                    }\n                }\n                if (match) return true;\n            }\n        }\n        \n        // Check for low entropy regions\n        const entropyMap = this._calculateLocalEntropy(iv);\n        const lowEntropyRegions = entropyMap.filter(e => e < 3.0).length;\n        \n        return lowEntropyRegions > iv.length * 0.3; // More than 30% low entropy\n    }\n\n    /**\n     *   Calculate local entropy for pattern detection\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {Array} Array of local entropy values\n     */\n    _calculateLocalEntropy(data) {\n        const windowSize = 8;\n        const entropyMap = [];\n        \n        for (let i = 0; i <= data.length - windowSize; i++) {\n            const window = data.slice(i, i + windowSize);\n            const charCount = {};\n            \n            for (const byte of window) {\n                charCount[byte] = (charCount[byte] || 0) + 1;\n            }\n            \n            let entropy = 0;\n            for (const count of Object.values(charCount)) {\n                const probability = count / windowSize;\n                entropy -= probability * Math.log2(probability);\n            }\n            \n            entropyMap.push(entropy);\n        }\n        \n        return entropyMap;\n    }\n\n    /**\n     *   Detect suspicious patterns in IVs\n     */\n    _detectSuspiciousIVPatterns(iv) {\n        //   Check for all zeros or all ones\n        const allZeros = iv.every(byte => byte === 0);\n        const allOnes = iv.every(byte => byte === 255);\n        \n        if (allZeros || allOnes) {\n            return true;\n        }\n        \n        //   Check for sequential patterns\n        let sequentialCount = 0;\n        for (let i = 1; i < iv.length; i++) {\n            if (iv[i] === iv[i-1] + 1 || iv[i] === iv[i-1] - 1) {\n                sequentialCount++;\n            } else {\n                sequentialCount = 0;\n            }\n            \n            if (sequentialCount >= 3) {\n                return true; // Suspicious sequential pattern\n            }\n        }\n        \n        //   Check for repeated patterns\n        for (let patternLength = 2; patternLength <= Math.floor(iv.length / 2); patternLength++) {\n            for (let start = 0; start <= iv.length - patternLength * 2; start++) {\n                const pattern1 = iv.slice(start, start + patternLength);\n                const pattern2 = iv.slice(start + patternLength, start + patternLength * 2);\n                \n                if (pattern1.every((byte, index) => byte === pattern2[index])) {\n                    return true; // Repeated pattern detected\n                }\n            }\n        }\n        \n        return false;\n    }\n    \n    /**\n     *   Clean up old IVs with strict limits\n     */\n    async _cleanupOldIVs() {\n        const now = Date.now();\n        const maxAge = 1800000; // Reduced to 30 minutes for better security\n        let cleanedCount = 0;\n        const cleanupBatch = [];\n        \n        //   Aggressive cleanup with quantum-resistant patterns\n        // Enforce maximum IV history size with batch processing\n        if (this._ivTrackingSystem.ivHistory.size > this._ivTrackingSystem.maxIVHistorySize) {\n            const ivArray = Array.from(this._ivTrackingSystem.ivHistory.entries());\n            const toRemove = ivArray.slice(0, ivArray.length - this._ivTrackingSystem.maxIVHistorySize);\n            \n            for (const [ivString] of toRemove) {\n                cleanupBatch.push(ivString);\n                cleanedCount++;\n                \n                // Process in batches to prevent memory spikes\n                if (cleanupBatch.length >= 100) {\n                    this._processCleanupBatch(cleanupBatch);\n                    cleanupBatch.length = 0;\n                }\n            }\n        }\n        \n        //   Clean up old IVs from history by age with enhanced security\n        for (const [ivString, metadata] of this._ivTrackingSystem.ivHistory.entries()) {\n            if (now - metadata.timestamp > maxAge) {\n                cleanupBatch.push(ivString);\n                cleanedCount++;\n                \n                // Process in batches to prevent memory spikes\n                if (cleanupBatch.length >= 100) {\n                    this._processCleanupBatch(cleanupBatch);\n                    cleanupBatch.length = 0;\n                }\n            }\n        }\n        \n        // Process remaining batch\n        if (cleanupBatch.length > 0) {\n            this._processCleanupBatch(cleanupBatch);\n        }\n        \n        //   Enhanced session IV cleanup with entropy preservation\n        for (const [sessionId, sessionIVs] of this._ivTrackingSystem.sessionIVs.entries()) {\n            if (sessionIVs.size > this._ivTrackingSystem.maxSessionIVs) {\n                const ivArray = Array.from(sessionIVs);\n                const toRemove = ivArray.slice(0, ivArray.length - this._ivTrackingSystem.maxSessionIVs);\n                \n                for (const ivString of toRemove) {\n                    sessionIVs.delete(ivString);\n                    this._ivTrackingSystem.usedIVs.delete(ivString);\n                    this._ivTrackingSystem.ivHistory.delete(ivString);\n                    cleanedCount++;\n                }\n            }\n        }\n        \n        //   Schedule natural cleanup if significant cleanup occurred\n        if (cleanedCount > 50) {\n            await this._performNaturalCleanup();\n        }\n        \n        if (cleanedCount > 0) {\n            this._secureLog('debug', `Enhanced cleanup: ${cleanedCount} old IVs removed`, {\n                cleanedCount: cleanedCount,\n                remainingIVs: this._ivTrackingSystem.usedIVs.size,\n                remainingHistory: this._ivTrackingSystem.ivHistory.size,\n                memoryPressure: this._calculateMemoryPressure()\n            });\n        }\n    }\n    \n    /**\n     *   Process cleanup batch with constant-time operations\n     * @param {Array} batch - Batch of items to clean up\n     */\n    _processCleanupBatch(batch) {\n        //   Constant-time batch processing\n        for (const item of batch) {\n            this._ivTrackingSystem.usedIVs.delete(item);\n            this._ivTrackingSystem.ivHistory.delete(item);\n        }\n    }\n\n    /**\n     *   Calculate memory pressure for adaptive cleanup\n     * @returns {number} Memory pressure score (0-100)\n     */\n    _calculateMemoryPressure() {\n        const totalIVs = this._ivTrackingSystem.usedIVs.size;\n        const maxAllowed = this._resourceLimits.maxIVHistory;\n        \n        return Math.min(100, Math.floor((totalIVs / maxAllowed) * 100));\n    }\n\n    /**\n     *   Get IV tracking system statistics\n     */\n    _getIVTrackingStats() {\n        return {\n            totalIVs: this._ivTrackingSystem.usedIVs.size,\n            collisionCount: this._ivTrackingSystem.collisionCount,\n            entropyTests: this._ivTrackingSystem.entropyValidation.entropyTests,\n            entropyFailures: this._ivTrackingSystem.entropyValidation.entropyFailures,\n            rngTests: this._ivTrackingSystem.rngValidation.testsPerformed,\n            weakRngDetected: this._ivTrackingSystem.rngValidation.weakRngDetected,\n            emergencyMode: this._ivTrackingSystem.emergencyMode,\n            sessionCount: this._ivTrackingSystem.sessionIVs.size,\n            lastCleanup: this._lastIVCleanupTime || 0\n        };\n    }\n    \n    /**\n     *   Reset IV tracking system (for testing or emergency recovery)\n     */\n    _resetIVTrackingSystem() {\n        this._secureLog('warn', 'Resetting IV tracking system');\n        \n        this._ivTrackingSystem.usedIVs.clear();\n        this._ivTrackingSystem.ivHistory.clear();\n        this._ivTrackingSystem.sessionIVs.clear();\n        this._ivTrackingSystem.collisionCount = 0;\n        this._ivTrackingSystem.entropyValidation.entropyTests = 0;\n        this._ivTrackingSystem.entropyValidation.entropyFailures = 0;\n        this._ivTrackingSystem.rngValidation.testsPerformed = 0;\n        this._ivTrackingSystem.rngValidation.weakRngDetected = false;\n        this._ivTrackingSystem.emergencyMode = false;\n        \n        this._secureLog('info', 'IV tracking system reset completed');\n    }\n    \n    /**\n     *   Validate RNG quality\n     */\n    _validateRNGQuality() {\n        const now = Date.now();\n        \n        //   Validate RNG every 1000 IV generations\n        if (this._ivTrackingSystem.rngValidation.testsPerformed % 1000 === 0) {\n            try {\n                //   Generate test IVs and validate\n                const testIVs = [];\n                for (let i = 0; i < 100; i++) {\n                    testIVs.push(crypto.getRandomValues(new Uint8Array(12)));\n                }\n                \n                //   Check for duplicates in test set\n                const testIVStrings = testIVs.map(iv => Array.from(iv).map(b => b.toString(16).padStart(2, '0')).join(''));\n                const uniqueTestIVs = new Set(testIVStrings);\n                \n                if (uniqueTestIVs.size < 95) { // Allow some tolerance\n                    this._ivTrackingSystem.rngValidation.weakRngDetected = true;\n                    this._secureLog('error', 'CRITICAL: Weak RNG detected in validation test', {\n                        uniqueIVs: uniqueTestIVs.size,\n                        totalTests: testIVs.length\n                    });\n                }\n                \n                this._ivTrackingSystem.rngValidation.lastValidation = now;\n                \n            } catch (error) {\n                this._secureLog('error', 'RNG validation failed', {\n                    errorType: error.constructor.name\n                });\n            }\n        }\n        \n        this._ivTrackingSystem.rngValidation.testsPerformed++;\n    }\n    \n    /**\n     *   Handle mutex timeout with enhanced state validation\n     */\n    _handleMutexTimeout(mutexName, operationId, timeout) {\n        const mutex = this[`_${mutexName}Mutex`];\n        \n        if (!mutex) {\n            this._secureLog('error', `Mutex '${mutexName}' not found during timeout handling`);\n            return;\n        }\n        \n        //   Validate timeout conditions\n        if (mutex.lockId !== operationId) {\n            this._secureLog('warn', `Timeout for different operation ID on mutex '${mutexName}'`, {\n                expectedOperationId: operationId,\n                actualLockId: mutex.lockId,\n                locked: mutex.locked\n            });\n            return;\n        }\n        \n        if (!mutex.locked) {\n            this._secureLog('warn', `Timeout for already unlocked mutex '${mutexName}'`, {\n                operationId: operationId\n            });\n            return;\n        }\n        \n        try {\n            //   Calculate lock duration for monitoring\n            const lockDuration = mutex.lockTime ? Date.now() - mutex.lockTime : 0;\n            \n            this._secureLog('warn', `Mutex '${mutexName}' auto-released due to timeout`, {\n                operationId: operationId,\n                lockDuration: lockDuration,\n                timeout: timeout,\n                queueLength: mutex.queue.length\n            });\n            \n            //   Atomic release with state validation\n            mutex.locked = false;\n            mutex.lockId = null;\n            mutex.lockTimeout = null;\n            mutex.lockTime = null;\n            \n            //   Process next in queue with error handling\n            setTimeout(() => {\n                try {\n                    this._processNextInQueue(mutexName);\n                } catch (queueError) {\n                    this._secureLog('error', `Error processing queue after timeout for mutex '${mutexName}'`, {\n                        errorType: queueError.constructor.name,\n                        errorMessage: queueError.message\n                    });\n                }\n            }, 10);\n            \n        } catch (error) {\n            this._secureLog('error', `Critical error during mutex timeout handling for '${mutexName}'`, {\n                operationId: operationId,\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            \n            //   Force emergency unlock if timeout handling fails\n            try {\n                this._emergencyUnlockAllMutexes('timeoutHandler');\n            } catch (emergencyError) {\n                this._secureLog('error', `Emergency unlock failed during timeout handling`, {\n                    originalError: error.message,\n                    emergencyError: emergencyError.message\n                });\n            }\n        }\n    }\n\n    /**\n     *   Validate mutex system after emergency unlock\n     */\n    _validateMutexSystemAfterEmergencyUnlock() {\n        const mutexes = ['keyOperation', 'cryptoOperation', 'connectionOperation'];\n        let validationErrors = 0;\n        \n        this._secureLog('info', 'Validating mutex system after emergency unlock');\n        \n        mutexes.forEach(mutexName => {\n            const mutex = this[`_${mutexName}Mutex`];\n            \n            if (!mutex) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' not found after emergency unlock`);\n                return;\n            }\n            \n            //   Validate mutex state consistency\n            if (mutex.locked) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' still locked after emergency unlock`, {\n                    lockId: mutex.lockId,\n                    lockTime: mutex.lockTime\n                });\n            }\n            \n            if (mutex.lockId !== null) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' still has lock ID after emergency unlock`, {\n                    lockId: mutex.lockId\n                });\n            }\n            \n            if (mutex.lockTimeout !== null) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' still has timeout after emergency unlock`);\n            }\n            \n            if (mutex.queue.length > 0) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' still has queue items after emergency unlock`, {\n                    queueLength: mutex.queue.length\n                });\n            }\n        });\n        \n        //   Validate key system state\n        if (this._keySystemState) {\n            if (this._keySystemState.isInitializing || \n                this._keySystemState.isRotating || \n                this._keySystemState.isDestroying) {\n                validationErrors++;\n                this._secureLog('error', `Key system state not properly reset after emergency unlock`, {\n                    isInitializing: this._keySystemState.isInitializing,\n                    isRotating: this._keySystemState.isRotating,\n                    isDestroying: this._keySystemState.isDestroying\n                });\n            }\n        }\n        \n        if (validationErrors === 0) {\n            this._secureLog('info', 'Mutex system validation passed after emergency unlock');\n        } else {\n            this._secureLog('error', `Mutex system validation failed after emergency unlock`, {\n                validationErrors: validationErrors\n            });\n            \n            //   Force re-initialization if validation fails\n            setTimeout(() => {\n                this._emergencyRecoverMutexSystem();\n            }, 1000);\n        }\n    }\n    /**\n     * NEW: Diagnostics of the mutex system state\n     */\n    _getMutexSystemDiagnostics() {\n        const diagnostics = {\n            timestamp: Date.now(),\n            systemValid: this._validateMutexSystem(),\n            mutexes: {},\n            counters: { ...this._operationCounters },\n            keySystemState: { ...this._keySystemState }\n        };\n        \n        const mutexNames = ['keyOperation', 'cryptoOperation', 'connectionOperation'];\n        \n        mutexNames.forEach(mutexName => {\n            const mutexPropertyName = `_${mutexName}Mutex`;\n            const mutex = this[mutexPropertyName];\n            \n            if (mutex) {\n                diagnostics.mutexes[mutexName] = {\n                    locked: mutex.locked,\n                    lockId: mutex.lockId,\n                    queueLength: mutex.queue.length,\n                    hasTimeout: !!mutex.lockTimeout\n                };\n            } else {\n                diagnostics.mutexes[mutexName] = { error: 'not_found' };\n            }\n        });\n        \n        return diagnostics;\n    }\n\n    /**\n     * FULLY FIXED createSecureOffer()\n     * With race-condition protection and improved security\n     */\n    async createSecureOffer() {\n        return this._withMutex('connectionOperation', async (operationId) => {\n            this._secureLog('info', 'Creating secure offer with mutex', {\n                operationId: operationId,\n                connectionAttempts: this.connectionAttempts,\n                currentState: this.peerConnection?.connectionState || 'none'\n            });\n            \n            try {\n                // ============================================\n                // PHASE 1: INITIALIZATION AND VALIDATION\n                // ============================================\n                \n                // Reset notification flags for a new connection\n                this._resetNotificationFlags();\n                \n                // Rate limiting check\n                if (!this._checkRateLimit()) {\n                    throw new Error('Connection rate limit exceeded. Please wait before trying again.');\n                }\n                \n                // Reset attempt counters\n                this.connectionAttempts = 0;\n                \n                // Generate session salt (64 bytes for v4.0)\n                this.sessionSalt = window.EnhancedSecureCryptoUtils.generateSalt();\n                \n                this._secureLog('debug', 'Session salt generated', {\n                    operationId: operationId,\n                    saltLength: this.sessionSalt.length,\n                    isValidSalt: Array.isArray(this.sessionSalt) && this.sessionSalt.length === 64\n                });\n                \n                // ============================================\n                // PHASE 2: SECURE KEY GENERATION\n                // ============================================\n                \n                // Secure key generation via mutex\n                const keyPairs = await this._generateEncryptionKeys();\n                this.ecdhKeyPair = keyPairs.ecdhKeyPair;\n                this.ecdsaKeyPair = keyPairs.ecdsaKeyPair;\n                \n                // Validate generated keys\n                if (!this.ecdhKeyPair?.privateKey || !this.ecdhKeyPair?.publicKey) {\n                    throw new Error('Failed to generate valid ECDH key pair');\n                }\n                \n                if (!this.ecdsaKeyPair?.privateKey || !this.ecdsaKeyPair?.publicKey) {\n                    throw new Error('Failed to generate valid ECDSA key pair');\n                }\n                \n                // ============================================\n                // PHASE 3: MITM PROTECTION AND FINGERPRINTING\n                // ============================================\n                \n                // MITM Protection: Compute unique key fingerprints\n                const ecdhFingerprint = await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(\n                    await crypto.subtle.exportKey('spki', this.ecdhKeyPair.publicKey)\n                );\n                const ecdsaFingerprint = await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(\n                    await crypto.subtle.exportKey('spki', this.ecdsaKeyPair.publicKey)\n                );\n                \n                // Validate fingerprints\n                if (!ecdhFingerprint || !ecdsaFingerprint) {\n                    throw new Error('Failed to generate key fingerprints');\n                }\n                \n                this._secureLog('info', 'Generated unique key pairs for MITM protection', {\n                    operationId: operationId,\n                    hasECDHFingerprint: !!ecdhFingerprint,\n                    hasECDSAFingerprint: !!ecdsaFingerprint,\n                    fingerprintLength: ecdhFingerprint.length,\n                    timestamp: Date.now()\n                });\n                \n                // ============================================\n                // PHASE 4: EXPORT SIGNED KEYS\n                // ============================================\n                \n                // Export keys with digital signatures\n                const ecdhPublicKeyData = await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(\n                    this.ecdhKeyPair.publicKey,\n                    this.ecdsaKeyPair.privateKey,\n                    'ECDH'\n                );\n                \n                const ecdsaPublicKeyData = await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(\n                    this.ecdsaKeyPair.publicKey,\n                    this.ecdsaKeyPair.privateKey,\n                    'ECDSA'\n                );\n\n                \n                if (!ecdhPublicKeyData || typeof ecdhPublicKeyData !== 'object') {\n                    this._secureLog('error', 'CRITICAL: ECDH key export failed - invalid object structure', { operationId });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key export validation failed - hard abort required');\n                }\n                \n                if (!ecdhPublicKeyData.keyData || !ecdhPublicKeyData.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDH key export incomplete - missing keyData or signature', { \n                        operationId,\n                        hasKeyData: !!ecdhPublicKeyData.keyData,\n                        hasSignature: !!ecdhPublicKeyData.signature \n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key export incomplete - hard abort required');\n                }\n                \n                if (!ecdsaPublicKeyData || typeof ecdsaPublicKeyData !== 'object') {\n                    this._secureLog('error', 'CRITICAL: ECDSA key export failed - invalid object structure', { operationId });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key export validation failed - hard abort required');\n                }\n                \n                if (!ecdsaPublicKeyData.keyData || !ecdsaPublicKeyData.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDSA key export incomplete - missing keyData or signature', { \n                        operationId,\n                        hasKeyData: !!ecdsaPublicKeyData.keyData,\n                        hasSignature: !!ecdsaPublicKeyData.signature \n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key export incomplete - hard abort required');\n                }\n                \n                // ============================================\n                // PHASE 5: UPDATE SECURITY FEATURES\n                // ============================================\n                \n                // Atomic update of security features\n                this._updateSecurityFeatures({\n                    hasEncryption: true,\n                    hasECDH: true,\n                    hasECDSA: true,\n                    hasMutualAuth: true,\n                    hasMetadataProtection: true,\n                    hasEnhancedReplayProtection: true,\n                    hasNonExtractableKeys: true,\n                    hasRateLimiting: true,\n                    hasEnhancedValidation: true,\n                    hasPFS: true\n                });\n                \n                // ============================================\n                // PHASE 6: INITIALIZE PEER CONNECTION\n                // ============================================\n                \n                this.isInitiator = true;\n                this.onStatusChange('connecting');\n                \n                // Create peer connection\n                this.createPeerConnection();\n                \n                // Create main data channel\n                this.dataChannel = this.peerConnection.createDataChannel('securechat', {\n                    ordered: true\n                });\n                \n                // Setup data channel\n                this.setupDataChannel(this.dataChannel);\n                \n                this._secureLog('debug', 'Data channel created', {\n                    operationId: operationId,\n                    channelLabel: this.dataChannel.label,\n                    channelOrdered: this.dataChannel.ordered\n                });\n                \n                // ============================================\n                // PHASE 7: CREATE SDP OFFER\n                // ============================================\n                \n\n                const offer = await this.peerConnection.createOffer({\n                    offerToReceiveAudio: false,\n                    offerToReceiveVideo: false\n                });\n                \n                await this.peerConnection.setLocalDescription(offer);\n\n                try {\n                    const ourFingerprint = this._extractDTLSFingerprintFromSDP(offer.sdp);\n                    this.expectedDTLSFingerprint = ourFingerprint;\n                    \n                    this._secureLog('info', 'Generated DTLS fingerprint for out-of-band verification', {\n                        fingerprint: ourFingerprint,\n                        context: 'offer_creation'\n                    });\n                    \n                    // Notify UI that fingerprint is ready for out-of-band verification\n                    this.deliverMessageToUI(`DTLS fingerprint ready for verification: ${ourFingerprint}`, 'system');\n                } catch (error) {\n                    this._secureLog('error', 'Failed to extract DTLS fingerprint from offer', { error: error.message });\n                    // Continue without fingerprint validation (fallback mode)\n                }\n                \n                // Await ICE gathering. Manual out-of-band exchange does not use\n                // trickle ICE, so exporting an SDP before completion can strand\n                // late candidates that the remote peer will never receive.\n                const offerIceGatheringStartedAt = Date.now();\n                const offerIceGatheringCompleted = await this.waitForIceGathering();\n                const offerCandidateSummary = this._summarizeIceCandidatesInSDP(this.peerConnection.localDescription?.sdp);\n                const offerCandidateCount = offerCandidateSummary.total;\n                if (!offerIceGatheringCompleted && offerCandidateCount === 0) {\n                    this.deliverMessageToUI(\n                        'No network candidates could be gathered, so the invitation would not be usable. ' +\n                        'This usually means a VPN or firewall is blocking STUN/TURN. Try turning the VPN off, ' +\n                        'switching network, or adding your own TURN server in Advanced network settings.',\n                        'system'\n                    );\n                    throw new Error('ICE gathering produced no candidates \u2014 check VPN/firewall or configure a TURN server');\n                }\n                this._secureLog(offerCandidateCount > 0 ? 'info' : 'warn', 'ICE candidates captured for offer export', {\n                    candidateSummary: offerCandidateSummary,\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    iceGatheringDurationMs: Date.now() - offerIceGatheringStartedAt,\n                    iceGatheringCompleted: offerIceGatheringCompleted\n                });\n                this._logIceCandidateDiagnostics('offer export', this.peerConnection.localDescription?.sdp, {\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    iceGatheringDurationMs: Date.now() - offerIceGatheringStartedAt,\n                    iceGatheringCompleted: offerIceGatheringCompleted\n                });\n                if (!offerIceGatheringCompleted) {\n                    this.deliverMessageToUI('ICE gathering timed out before completion, but available candidates were included in the invitation. Connectivity may still fail on restrictive networks.', 'system');\n                }\n                if (offerCandidateCount === 0) {\n                    this.deliverMessageToUI('No ICE candidates were gathered for the invitation yet. The peer connection may fail unless network candidates become available.', 'system');\n                }\n                \n                this._secureLog('debug', 'ICE gathering completed', {\n                    operationId: operationId,\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    connectionState: this.peerConnection.connectionState\n                });\n                \n                // ============================================\n                // PHASE 8: GENERATE SAS FOR OUT-OF-BAND VERIFICATION\n                // ============================================\n\n                this.verificationCode = window.EnhancedSecureCryptoUtils.generateVerificationCode();\n                \n                // Validate verification code\n                if (!this.verificationCode || this.verificationCode.length < EnhancedSecureWebRTCManager.SIZES.VERIFICATION_CODE_MIN_LENGTH) {\n                    throw new Error('Failed to generate valid verification code');\n                }\n                \n                // ============================================\n                // PHASE 9: MUTUAL AUTHENTICATION CHALLENGE\n                // ============================================\n                \n                // Generate challenge for mutual authentication\n                const authChallenge = window.EnhancedSecureCryptoUtils.generateMutualAuthChallenge();\n                \n                if (!authChallenge) {\n                    throw new Error('Failed to generate mutual authentication challenge');\n                }\n                \n                // ============================================\n                // PHASE 10: SESSION ID FOR MITM PROTECTION\n                // ============================================\n                \n                // MITM Protection: Generate session-specific ID\n                this.sessionId = Array.from(crypto.getRandomValues(new Uint8Array(EnhancedSecureWebRTCManager.SIZES.SESSION_ID_LENGTH)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('');\n                \n                // Validate session ID\n                if (!this.sessionId || this.sessionId.length !== (EnhancedSecureWebRTCManager.SIZES.SESSION_ID_LENGTH * 2)) {\n                    throw new Error('Failed to generate valid session ID');\n                }\n                \n                // Generate connection ID for AAD\n                this.connectionId = Array.from(crypto.getRandomValues(new Uint8Array(8)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('');\n                this._storePendingOfferContext();\n                \n                // ============================================\n                // PHASE 11: SECURITY LEVEL CALCULATION\n                // ============================================\n                \n                // All security features are enabled by default\n                const securityLevel = {\n                    level: 'MAXIMUM',\n                    score: 100,\n                    color: 'green',\n                    details: 'All security features enabled by default',\n                        passedChecks: 10,\n                    totalChecks: 10,\n                    isRealData: true\n                    };\n                \n                // ============================================\n                // PHASE 12: CREATE OFFER PACKAGE\n                // ============================================\n                \n                const currentTimestamp = Date.now();\n                \n                // Create compact offer package for smaller QR codes\n                const offerPackage = {\n                    // Core information (minimal)\n                    t: 'offer', // type\n                    s: this.peerConnection.localDescription.sdp, // sdp\n                    v: EnhancedSecureWebRTCManager.PROTOCOL_VERSION, // version\n                    ts: currentTimestamp, // timestamp\n                    \n                    // Cryptographic keys (essential)\n                    e: ecdhPublicKeyData, // ecdhPublicKey\n                    d: ecdsaPublicKeyData, // ecdsaPublicKey\n                    \n                    // Session data (essential)\n                    sl: this.sessionSalt, // salt\n                    si: this.sessionId, // sessionId\n                    ci: this.connectionId, // connectionId\n                    \n                    // Authentication (essential)\n                    vc: this.verificationCode, // verificationCode\n                    ac: authChallenge, // authChallenge\n                    \n                    // Security metadata (simplified)\n                    slv: 'MAX', // securityLevel\n\n                    // Double Ratchet support. Advertised rather than assumed so a\n                    // peer still on 5.6.x keeps working on the static-key path\n                    // instead of failing to decrypt anything: with no server there\n                    // is no way to roll both ends at once. Absent = not supported.\n                    dr: EnhancedSecureWebRTCManager.RATCHET_VERSION,\n\n                    // Key fingerprints (shortened)\n                    kf: {\n                        e: ecdhFingerprint.substring(0, 12), // ecdh (12 chars)\n                        d: ecdsaFingerprint.substring(0, 12) // ecdsa (12 chars)\n                    }\n                };\n                \n                // ============================================\n                // PHASE 13: VALIDATE OFFER PACKAGE\n                // ============================================\n\n                try {\n                    const validationResult = this.validateEnhancedOfferData(offerPackage);\n\n                } catch (validationError) {\n                    throw new Error(`Offer package validation error: ${validationError.message}`);\n                }\n                \n                // ============================================\n                // PHASE 14: LOGGING AND EVENTS\n                // ============================================\n                \n                this._secureLog('info', 'Enhanced secure offer created successfully', {\n                    operationId: operationId,\n                    version: offerPackage.version,\n                    hasECDSA: true,\n                    hasMutualAuth: true,\n                    hasSessionId: !!offerPackage.sessionId,\n                    securityLevel: securityLevel.level,\n                    timestamp: currentTimestamp,\n                    capabilitiesCount: 10 // All capabilities enabled by default\n                });\n                \n                // Dispatch event about new connection\n                this._dispatchAppEvent?.(new CustomEvent('new-connection', {\n                    detail: { \n                        type: 'offer',\n                        timestamp: currentTimestamp,\n                        securityLevel: securityLevel.level,\n                        operationId: operationId\n                    }\n                }));\n\n                // ============================================\n                // PHASE 15: SBQ2 \u2014 EMIT THE COMPACT DESCRIPTOR INSTEAD\n                // ============================================\n                // Everything above still runs: the key pairs it generates are the\n                // ones the in-band exchange will publish, and the DTLS\n                // fingerprint it extracted is the anchor the descriptor carries.\n                // What changes is what leaves the device \u2014 a descriptor with a\n                // commitment, not the key material itself.\n                if (EnhancedSecureWebRTCManager.SBQ2_SEND_ENABLED) {\n                    this._latchHandshakeMode('sbq2');\n                    const { text } = await this._sbq2BuildDescriptor(SBQ2_TYPE.OFFER);\n                    return { t: 'offer', sbq2: text };\n                }\n\n                this._latchHandshakeMode('sb1');\n                return offerPackage;\n\n            } catch (error) {\n                // ============================================\n                // ERROR HANDLING\n                // ============================================\n                \n                this._secureLog('error', 'Enhanced secure offer creation failed in critical section', {\n                    operationId: operationId,\n                    errorType: error.constructor.name,\n                    errorMessage: error.message,\n                    phase: this._determineErrorPhase(error),\n                    connectionAttempts: this.connectionAttempts\n                });\n                \n                // Cleanup state on error\n                this._cleanupFailedOfferCreation();\n                \n                // Update status\n                this.onStatusChange('disconnected');\n                \n                // Re-throw for upper-level handling\n                throw error;\n            }\n        }, 60000); // 60 seconds timeout for the entire offer creation\n    }\n\n    /**\n     * HELPER: Determine the phase where the error occurred\n     */\n    _determineErrorPhase(error) {\n        const message = error.message.toLowerCase();\n        \n        if (message.includes('rate limit')) return 'rate_limiting';\n        if (message.includes('key pair') || message.includes('generate')) return 'key_generation';\n        if (message.includes('fingerprint')) return 'fingerprinting';\n        if (message.includes('export') || message.includes('signature')) return 'key_export';\n        if (message.includes('peer connection')) return 'webrtc_setup';\n        if (message.includes('offer') || message.includes('sdp')) return 'sdp_creation';\n        if (message.includes('verification')) return 'verification_setup';\n        if (message.includes('session')) return 'session_setup';\n        if (message.includes('validation')) return 'package_validation';\n        \n        return 'unknown';\n    }\n\n    /**\n     *   Secure cleanup state after failed offer creation\n     */\n    _cleanupFailedOfferCreation() {\n        try {\n            //   Secure wipe of cryptographic materials\n            this._secureCleanupCryptographicMaterials();\n            \n            //   Close peer connection if it was created\n            if (this.peerConnection) {\n                this.peerConnection.close();\n                this.peerConnection = null;\n            }\n            \n            //   Clear data channel\n            if (this.dataChannel) {\n                this.dataChannel.close();\n                this.dataChannel = null;\n            }\n            \n            //   Reset flags\n            this.isInitiator = false;\n            this.isVerified = false;\n            \n            //   Reset security features to baseline\n            this._updateSecurityFeatures({\n                hasEncryption: false,\n                hasECDH: false,\n                hasECDSA: false,\n                hasMutualAuth: false,\n                hasMetadataProtection: false,\n                hasEnhancedReplayProtection: false,\n                hasNonExtractableKeys: false,\n                hasEnhancedValidation: false,\n                hasPFS: false\n            });\n            \n            //   Schedule natural cleanup\n            this._forceGarbageCollection().catch(error => {\n                this._secureLog('error', 'Cleanup failed during offer cleanup', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n            \n            this._secureLog('debug', 'Failed offer creation cleanup completed with secure memory wipe');\n            \n        } catch (cleanupError) {\n            this._secureLog('error', 'Error during offer creation cleanup', {\n                errorType: cleanupError.constructor.name,\n                errorMessage: cleanupError.message\n            });\n        }\n    }\n\n    /**\n     * HELPER: Atomic update of security features (if not added yet)\n     */\n    _updateSecurityFeatures(updates) {\n        const oldFeatures = { ...this.securityFeatures };\n        \n        try {\n            Object.assign(this.securityFeatures, updates);\n            \n            this._secureLog('debug', 'Security features updated', {\n                updatedCount: Object.keys(updates).length,\n                totalFeatures: Object.keys(this.securityFeatures).length\n            });\n            \n        } catch (error) {\n            // Roll back on error\n            this.securityFeatures = oldFeatures;\n            this._secureLog('error', 'Security features update failed, rolled back', {\n                errorType: error.constructor.name\n            });\n            throw error;\n        }\n    }\n\n    /**\n     * FULLY FIXED METHOD createSecureAnswer()\n     * With race-condition protection and enhanced security\n     */\n    /**\n     * SBQ2 answer path.\n     *\n     * Deliberately separate from createSecureAnswer rather than folded into it:\n     * that method's job is to import the peer's keys and derive the session from\n     * the offer, and here there are no peer keys yet \u2014 only a fingerprint and a\n     * commitment. Sharing the body would mean threading \"do we have keys yet?\"\n     * through fifteen phases, and the whole point of the format is that the\n     * answer is produced before any key material has been seen.\n     */\n    async _createSbq2Answer(offerData) {\n        return this._withMutex('connectionOperation', async (operationId) => {\n            try {\n                this._resetNotificationFlags();\n                if (!this._checkRateLimit()) {\n                    throw new Error('Connection rate limit exceeded. Please wait before trying again.');\n                }\n                this._latchHandshakeMode('sbq2');\n\n                // Strict decode of untrusted input, before anything is used.\n                const offerBytes = sbq2DecodeText(String(offerData.sbq2));\n                const desc = this._sbq2AdoptRemoteDescriptor(offerBytes, SBQ2_TYPE.OFFER);\n                const { sdp: remoteSdp } = sbq2SerializeSdp(desc);\n\n                this.isInitiator = false;\n                this.onStatusChange('connecting');\n\n                const keyPairs = await this._generateEncryptionKeys();\n                this.ecdhKeyPair = keyPairs.ecdhKeyPair;\n                this.ecdsaKeyPair = keyPairs.ecdsaKeyPair;\n                if (!this.ecdhKeyPair?.privateKey || !this.ecdsaKeyPair?.privateKey) {\n                    throw new Error('Failed to generate valid key pairs');\n                }\n\n                this.createPeerConnection();\n\n                // The peer's DTLS fingerprint comes straight from the descriptor,\n                // which is the value the user carried by hand. This is the anchor\n                // the whole in-band exchange hangs from.\n                this._peerDTLSFingerprint = Array.from(desc.fingerprint,\n                    (b) => b.toString(16).padStart(2, '0').toUpperCase()).join(':');\n\n                await this.peerConnection.setRemoteDescription({ type: 'offer', sdp: remoteSdp });\n                await this.peerConnection.setLocalDescription(await this.peerConnection.createAnswer({\n                    offerToReceiveAudio: false,\n                    offerToReceiveVideo: false\n                }));\n\n                this.expectedDTLSFingerprint =\n                    this._extractDTLSFingerprintFromSDP(this.peerConnection.localDescription.sdp);\n\n                // Manual exchange has no trickle channel, so the descriptor must\n                // carry a complete candidate set.\n                await this.waitForIceGathering();\n\n                const digest = async (b) => new Uint8Array(await crypto.subtle.digest('SHA-256', b));\n                const { text } = await this._sbq2BuildDescriptor(SBQ2_TYPE.ANSWER, {\n                    bindingTag: await sbq2BindingTag(digest, offerBytes),\n                });\n\n                this._dispatchAppEvent?.(new CustomEvent('new-connection', {\n                    detail: { type: 'answer', timestamp: Date.now(), operationId }\n                }));\n\n                return { t: 'answer', sbq2: text };\n            } catch (error) {\n                this._secureLog('error', 'SBQ2 answer creation failed', {\n                    operationId,\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n                this.onStatusChange('disconnected');\n                throw error;\n            }\n        }, 60000);\n    }\n\n    async createSecureAnswer(offerData) {\n        // Format detection happens before the mutex and before any validation\n        // written for the old shape: an SBQ2 invitation has none of the fields\n        // the SB1 validator requires, so it must never reach it.\n        if (offerData && typeof offerData.sbq2 === 'string') {\n            return this._createSbq2Answer(offerData);\n        }\n        return this._withMutex('connectionOperation', async (operationId) => {\n            this._secureLog('info', 'Creating secure answer with mutex', {\n                operationId: operationId,\n                hasOfferData: !!offerData,\n                offerType: offerData?.type,\n                offerVersion: offerData?.version,\n                offerTimestamp: offerData?.timestamp\n            });\n            \n            try {\n                // ============================================\n                // PHASE 1: PRE-VALIDATION OF OFFER\n                // ============================================\n                \n                // Reset notification flags for a new connection\n                this._resetNotificationFlags();\n                \n                this._secureLog('debug', 'Starting enhanced offer validation', {\n                    operationId: operationId,\n                    hasOfferData: !!offerData,\n                    offerType: offerData?.type,\n                    hasECDHKey: !!offerData?.ecdhPublicKey,\n                    hasECDSAKey: !!offerData?.ecdsaPublicKey,\n                    hasSalt: !!offerData?.salt\n                });\n                \n                // Strict input validation\n                if (!this.validateEnhancedOfferData(offerData)) {\n                    throw new Error('Invalid connection data format - failed enhanced validation');\n                }\n                \n                // Rate limiting check\n                if (!window.EnhancedSecureCryptoUtils.rateLimiter.checkConnectionRate(this.rateLimiterId)) {\n                    throw new Error('Connection rate limit exceeded. Please wait before trying again.');\n                }\n                \n                // ============================================\n                // PHASE 2: SECURITY AND ANTI-REPLAY PROTECTION\n                // ============================================\n                \n                // MITM Protection: Validate offer data structure (support both formats)\n                const timestamp = offerData.ts || offerData.timestamp;\n                const version = offerData.v || offerData.version;\n                if (!timestamp || !version) {\n                    throw new Error('Missing required security fields in offer data \u2013 possible MITM attack');\n                }\n                \n                // Replay attack protection (extended to 30 minutes for better UX)\n                const offerAge = Date.now() - timestamp;\n                const MAX_OFFER_AGE = 1800000; // 30 minutes for better user experience\n                \n                if (offerAge > MAX_OFFER_AGE) {\n                    this._secureLog('error', 'Offer data is too old - possible replay attack', {\n                        operationId: operationId,\n                        offerAge: Math.round(offerAge / 1000),\n                        maxAllowedAge: Math.round(MAX_OFFER_AGE / 1000),\n                        timestamp: offerData.timestamp\n                    });\n                    \n                    // Notify the main code about the replay attack\n                    if (this.onAnswerError) {\n                        this.onAnswerError('replay_attack', 'Offer data is too old \u2013 possible replay attack');\n                    }\n                    \n                    throw new Error('Offer data is too old \u2013 possible replay attack');\n                }\n                \n                // Protocol version compatibility check (support both formats)\n                const protocolVersion = version; // Use the version we already extracted\n                if (protocolVersion !== EnhancedSecureWebRTCManager.PROTOCOL_VERSION) {\n                    this._secureLog('warn', 'Protocol version mismatch detected', {\n                        operationId: operationId,\n                        expectedVersion: EnhancedSecureWebRTCManager.PROTOCOL_VERSION,\n                        receivedVersion: protocolVersion\n                    });\n                    throw new Error(`Version mismatch: expected protocol ${EnhancedSecureWebRTCManager.PROTOCOL_VERSION}, received ${protocolVersion}`);\n                }\n                \n                // ============================================\n                // PHASE 3: EXTRACT AND VALIDATE SESSION SALT\n                // ============================================\n                \n                // Set session salt from offer (support both formats)\n                this.sessionSalt = offerData.sl || offerData.salt;\n\n                // Does the initiator speak our ratchet version? Absent means an\n                // older build, which is a downgrade to the previous scheme rather\n                // than a failure \u2014 see _initializeRatchet.\n                this._peerSupportsRatchet =\n                    offerData.dr === EnhancedSecureWebRTCManager.RATCHET_VERSION;\n                \n                // Validate session salt\n                if (!Array.isArray(this.sessionSalt)) {\n                    throw new Error('Invalid session salt format - must be array');\n                }\n                \n                const expectedSaltLength = 64;\n                if (this.sessionSalt.length !== expectedSaltLength) {\n                    throw new Error(`Invalid session salt length: expected ${expectedSaltLength}, got ${this.sessionSalt.length}`);\n                }\n                \n                // MITM Protection: Check salt integrity\n                const saltFingerprint = await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(this.sessionSalt);\n                \n                this._secureLog('info', 'Session salt validated successfully', {\n                    operationId: operationId,\n                    saltLength: this.sessionSalt.length,\n                    saltFingerprint: saltFingerprint.substring(0, 8)\n                });\n                \n                // ============================================\n                // PHASE 4: SECURE GENERATION OF OUR KEYS\n                // ============================================\n                \n                // Secure generation of our keys via mutex\n                const keyPairs = await this._generateEncryptionKeys();\n                this.ecdhKeyPair = keyPairs.ecdhKeyPair;\n                this.ecdsaKeyPair = keyPairs.ecdsaKeyPair;\n                \n                // Additional validation of generated keys\n                if (!(this.ecdhKeyPair?.privateKey instanceof CryptoKey)) {\n                    this._secureLog('error', 'Local ECDH private key is not a CryptoKey', {\n                        operationId: operationId,\n                        hasKeyPair: !!this.ecdhKeyPair,\n                        privateKeyType: typeof this.ecdhKeyPair?.privateKey,\n                        privateKeyAlgorithm: this.ecdhKeyPair?.privateKey?.algorithm?.name\n                    });\n                    throw new Error('Local ECDH private key is not a valid CryptoKey');\n                }\n                \n                // ============================================\n                // PHASE 5: IMPORT AND VERIFY PEER KEYS\n                // ============================================\n                \n                // Import peer ECDSA public key for signature verification (support both formats)\n                let peerECDSAPublicKey;\n                \n                try {\n                    const ecdsaKey = offerData.d || offerData.ecdsaPublicKey;\n                    peerECDSAPublicKey = await crypto.subtle.importKey(\n                        'spki',\n                        new Uint8Array(ecdsaKey.keyData),\n                        {\n                            name: 'ECDSA',\n                            namedCurve: 'P-384'\n                        },\n                        false,\n                        ['verify']\n                    );\n                } catch (error) {\n                    this._throwSecureError(error, 'ecdsa_key_import');\n                }\n                \n                // ============================================\n                // PHASE 6: IMPORT AND VERIFY ECDH KEY\n                // ============================================\n                \n                // Import and verify ECDH public key using verified ECDSA key (support both formats)\n                let peerECDHPublicKey;\n                \n                try {\n                    const ecdhKey = offerData.e || offerData.ecdhPublicKey;\n                    peerECDHPublicKey = await window.EnhancedSecureCryptoUtils.importSignedPublicKey(\n                        ecdhKey,\n                        peerECDSAPublicKey,\n                        'ECDH'\n                    );\n                } catch (error) {\n                    this._secureLog('error', 'Failed to import signed ECDH public key', {\n                        operationId: operationId,\n                        errorType: error.constructor.name\n                    });\n                    this._throwSecureError(error, 'ecdh_key_import');\n                }\n                \n                // Final validation of ECDH key\n                if (!(peerECDHPublicKey instanceof CryptoKey)) {\n                    this._secureLog('error', 'Peer ECDH public key is not a CryptoKey', {\n                        operationId: operationId,\n                        publicKeyType: typeof peerECDHPublicKey,\n                        publicKeyAlgorithm: peerECDHPublicKey?.algorithm?.name\n                    });\n                    throw new Error('Peer ECDH public key is not a valid CryptoKey');\n                }\n                \n                // Save peer key for PFS rotation\n                this.peerPublicKey = peerECDHPublicKey;\n                \n                // ============================================\n                // PHASE 7: DERIVE SHARED ENCRYPTION KEYS\n                // ============================================\n                \n                // Derive shared keys with metadata protection\n                let derivedKeys;\n                \n                try {\n                    this._secureLog('debug', 'About to call deriveSharedKeys', {\n                        operationId: operationId,\n                        privateKeyType: typeof this.ecdhKeyPair.privateKey,\n                        publicKeyType: typeof peerECDHPublicKey,\n                        saltLength: this.sessionSalt?.length,\n                        privateKeyAlgorithm: this.ecdhKeyPair.privateKey?.algorithm?.name,\n                        publicKeyAlgorithm: peerECDHPublicKey?.algorithm?.name\n                    });\n                    \n                    derivedKeys = await window.EnhancedSecureCryptoUtils.deriveSharedKeys(\n                        this.ecdhKeyPair.privateKey,\n                        peerECDHPublicKey,\n                        this.sessionSalt\n                    );\n                    \n                    this._secureLog('debug', 'deriveSharedKeys completed successfully', {\n                        operationId: operationId,\n                        hasMessageKey: !!derivedKeys.messageKey,\n                        hasMacKey: !!derivedKeys.macKey,\n                        hasPfsKey: !!derivedKeys.pfsKey,\n                        hasMetadataKey: !!derivedKeys.metadataKey,\n                        hasFingerprint: !!derivedKeys.fingerprint\n                    });\n                } catch (error) {\n                    this._secureLog('error', 'Failed to derive shared keys', {\n                        operationId: operationId,\n                        errorType: error.constructor.name,\n                        errorMessage: error.message,\n                        errorStack: error.stack,\n                        privateKeyType: typeof this.ecdhKeyPair.privateKey,\n                        publicKeyType: typeof peerECDHPublicKey,\n                        saltLength: this.sessionSalt?.length,\n                        privateKeyAlgorithm: this.ecdhKeyPair.privateKey?.algorithm?.name,\n                        publicKeyAlgorithm: peerECDHPublicKey?.algorithm?.name\n                    });\n                    this._throwSecureError(error, 'key_derivation');\n                }\n                \n                // Securely set keys via helper\n                await this._setEncryptionKeys(\n                    derivedKeys.messageKey,\n                    derivedKeys.macKey,\n                    derivedKeys.metadataKey,\n                    derivedKeys.fingerprint\n                );\n\n                // Responder: no sending chain until the initiator's first message\n                // arrives, which is what makes the first DH ratchet agree.\n                await this._initializeRatchet(derivedKeys, /* isInitiator */ false);\n\n                // Additional validation of installed keys\n                if (!(this.encryptionKey instanceof CryptoKey) || \n                    !(this.macKey instanceof CryptoKey) || \n                    !(this.metadataKey instanceof CryptoKey)) {\n                    \n                    this._secureLog('error', 'Invalid key types after derivation', {\n                        operationId: operationId,\n                        encryptionKeyType: typeof this.encryptionKey,\n                        macKeyType: typeof this.macKey,\n                        metadataKeyType: typeof this.metadataKey\n                    });\n                    throw new Error('Invalid key types after derivation');\n                }\n                \n                // Preserve the invitation code only as a temporary legacy field.\n                // The real SAS is recomputed locally after the DTLS fingerprints exist.\n                this.verificationCode = offerData.vc || offerData.verificationCode || null;\n                \n                this._secureLog('info', 'Encryption keys derived and set successfully', {\n                    operationId: operationId,\n                    hasEncryptionKey: !!this.encryptionKey,\n                    hasMacKey: !!this.macKey,\n                    hasMetadataKey: !!this.metadataKey,\n                    hasKeyFingerprint: !!this.keyFingerprint,\n                    mitmProtection: 'enabled',\n                    signatureVerified: true\n                });\n                \n                // ============================================\n                // PHASE 8: UPDATE SECURITY FEATURES\n                // ============================================\n                \n                // Atomic update of security features\n                this._updateSecurityFeatures({\n                    hasEncryption: true,\n                    hasECDH: true,\n                    hasECDSA: true,\n                    hasMutualAuth: true,\n                    hasMetadataProtection: true,\n                    hasEnhancedReplayProtection: true,\n                    hasNonExtractableKeys: true,\n                    hasRateLimiting: true,\n                    hasEnhancedValidation: true,\n                    hasPFS: true\n                });\n                \n                // PFS: Initialize key version tracking\n                this.currentKeyVersion = 0;\n                this.lastKeyRotation = Date.now();\n                this.keyVersions.set(0, {\n                    salt: this.sessionSalt,\n                    timestamp: this.lastKeyRotation,\n                    messageCount: 0\n                });\n                \n                // ============================================\n                // PHASE 9: CREATE AUTHENTICATION PROOF\n                // ============================================\n                \n                // Create proof for mutual authentication\n                let authProof;\n                \n                if (offerData.authChallenge) {\n                    try {\n                        authProof = await window.EnhancedSecureCryptoUtils.createAuthProof(\n                            offerData.authChallenge,\n                            this.ecdsaKeyPair.privateKey,\n                            this.ecdsaKeyPair.publicKey\n                        );\n                    } catch (error) {\n                        this._secureLog('error', 'Failed to create authentication proof', {\n                            operationId: operationId,\n                            errorType: error.constructor.name\n                        });\n                        this._throwSecureError(error, 'authentication_proof_creation');\n                    }\n                } else {\n                    this._secureLog('warn', 'No auth challenge in offer - mutual auth disabled', {\n                        operationId: operationId\n                    });\n                }\n                \n                // ============================================\n                // PHASE 10: INITIALIZE WEBRTC\n                // ============================================\n                \n                this.isInitiator = false;\n                this.onStatusChange('connecting');\n                \n                this.onKeyExchange(this.keyFingerprint);\n                \n                // Create peer connection first\n                this.createPeerConnection();\n                \n                // There is nothing to validate the peer's fingerprint AGAINST on a\n                // first contact: with no signalling server and no prior trust, any\n                // \"expected\" value would have arrived over the same channel as the\n                // offer itself. The code here used to look like a check but could\n                // not be one \u2014 `expectedDTLSFingerprint` doubles as storage for our\n                // OWN fingerprint (see below and :10549), so the comparison ran\n                // remote-against-local, always mismatched, and every failure was\n                // swallowed with a warning. It reported `dtlsFingerprint: true` in\n                // the security status while proving nothing.\n                //\n                // What actually binds this session to a specific peer is the SAS:\n                // _computeSAS mixes the ECDH-derived key fingerprint with BOTH DTLS\n                // fingerprints, so a substituted certificate changes the code the\n                // user reads aloud. Fingerprint comparison is meaningful only later,\n                // during recovery, where a live session provides the baseline \u2014 see\n                // _assertSameRemoteIdentity.\n                if (this.strictDTLSValidation) {\n                    try {\n                        this._peerDTLSFingerprint = this._extractDTLSFingerprintFromSDP(offerData.sdp);\n                    } catch (error) {\n                        this._secureLog('warn', 'Could not extract peer DTLS fingerprint from offer', {\n                            error: error.message,\n                            context: 'offer_validation'\n                        });\n                    }\n                } else {\n                    this._secureLog('info', 'DTLS fingerprint validation disabled - proceeding without validation');\n                }\n\n                // Set remote description from offer\n                try {\n                    this._secureLog('debug', 'Setting remote description from offer', {\n                        operationId: operationId,\n                        sdpLength: offerData.sdp?.length || 0\n                    });\n                    \n                    await this.peerConnection.setRemoteDescription(new RTCSessionDescription({\n                        type: 'offer',\n                        sdp: offerData.s || offerData.sdp\n                    }));\n                    this._logIceCandidateDiagnostics('remote offer applied', this.peerConnection.remoteDescription?.sdp, {\n                        signalingState: this.peerConnection.signalingState\n                    });\n                    this._warnIfRemoteCandidatesNeedRelay('offer', this.peerConnection.remoteDescription?.sdp);\n                    \n                    this._secureLog('debug', 'Remote description set successfully', {\n                        operationId: operationId,\n                        signalingState: this.peerConnection.signalingState\n                    });\n                } catch (error) {\n                    this._secureLog('error', 'Failed to set remote description', { \n                        error: error.message,\n                        operationId: operationId\n                    });\n                    this._throwSecureError(error, 'webrtc_remote_description');\n                }\n                \n                this._secureLog('debug', 'Remote description set successfully', {\n                    operationId: operationId,\n                    connectionState: this.peerConnection.connectionState,\n                    signalingState: this.peerConnection.signalingState\n                });\n                \n                // ============================================\n                // PHASE 11: CREATE SDP ANSWER\n                // ============================================\n                \n                // Create WebRTC answer\n                let answer;\n                \n                try {\n                    answer = await this.peerConnection.createAnswer({\n                        offerToReceiveAudio: false,\n                        offerToReceiveVideo: false\n                    });\n                } catch (error) {\n                    this._throwSecureError(error, 'webrtc_create_answer');\n                }\n                \n                // Set local description\n                try {\n                    await this.peerConnection.setLocalDescription(answer);\n                } catch (error) {\n                    this._throwSecureError(error, 'webrtc_local_description');\n                }\n                \n                //   Extract and store our DTLS fingerprint for out-of-band verification\n                try {\n                    const ourFingerprint = this._extractDTLSFingerprintFromSDP(answer.sdp);\n                    this.expectedDTLSFingerprint = ourFingerprint;\n                    \n                    this._secureLog('info', 'Generated DTLS fingerprint for out-of-band verification', {\n                        fingerprint: ourFingerprint,\n                        context: 'answer_creation'\n                    });\n                    \n                    // Notify UI that fingerprint is ready for out-of-band verification\n                    this.deliverMessageToUI(`DTLS fingerprint ready for verification: ${ourFingerprint}`, 'system');\n                } catch (error) {\n                    this._secureLog('error', 'Failed to extract DTLS fingerprint from answer', { error: error.message });\n                    // Continue without fingerprint validation (fallback mode)\n                }\n\n                // Compute the same SAS locally on the answer side. This keeps the\n                // protocol honest: the peer may announce its SAS later, but it must\n                // match what we independently derived from the session.\n                try {\n                    const remoteFP = this._extractDTLSFingerprintFromSDP(offerData.s || offerData.sdp);\n                    const localFP = this.expectedDTLSFingerprint;\n                    const keyBytes = this._decodeKeyFingerprint(this.keyFingerprint);\n                    this.verificationCode = await this._computeSAS(keyBytes, localFP, remoteFP);\n                    this._setSASMaterialReady(localFP, remoteFP);\n                } catch (sasError) {\n                    this._secureLog('error', 'SAS computation failed in createSecureAnswer (Answer side)', {\n                        errorType: sasError?.constructor?.name || 'Unknown'\n                    });\n                    throw new Error(`SAS computation failed: ${sasError.message}`);\n                }\n                \n                \n                // Await ICE gathering. Manual out-of-band exchange does not use\n                // trickle ICE, so exporting an SDP before completion can strand\n                // late candidates that the remote peer will never receive.\n                const answerIceGatheringStartedAt = Date.now();\n                const answerIceGatheringCompleted = await this.waitForIceGathering();\n                const answerCandidateSummary = this._summarizeIceCandidatesInSDP(this.peerConnection.localDescription?.sdp);\n                const answerCandidateCount = answerCandidateSummary.total;\n                if (!answerIceGatheringCompleted && answerCandidateCount === 0) {\n                    this.deliverMessageToUI(\n                        'No network candidates could be gathered, so the response would not be usable. ' +\n                        'This usually means a VPN or firewall is blocking STUN/TURN. Try turning the VPN off, ' +\n                        'switching network, or adding your own TURN server in Advanced network settings.',\n                        'system'\n                    );\n                    throw new Error('ICE gathering produced no candidates \u2014 check VPN/firewall or configure a TURN server');\n                }\n                this._secureLog(answerCandidateCount > 0 ? 'info' : 'warn', 'ICE candidates captured for answer export', {\n                    candidateSummary: answerCandidateSummary,\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    iceGatheringDurationMs: Date.now() - answerIceGatheringStartedAt,\n                    iceGatheringCompleted: answerIceGatheringCompleted\n                });\n                this._logIceCandidateDiagnostics('answer export', this.peerConnection.localDescription?.sdp, {\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    iceGatheringDurationMs: Date.now() - answerIceGatheringStartedAt,\n                    iceGatheringCompleted: answerIceGatheringCompleted\n                });\n                if (!answerIceGatheringCompleted) {\n                    this.deliverMessageToUI('ICE gathering timed out before completion, but available candidates were included in the response. Connectivity may still fail on restrictive networks.', 'system');\n                }\n                if (answerCandidateCount === 0) {\n                    this.deliverMessageToUI('No ICE candidates were gathered for the response yet. The peer connection may fail unless network candidates become available.', 'system');\n                }\n                \n                this._secureLog('debug', 'ICE gathering completed for answer', {\n                    operationId: operationId,\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    connectionState: this.peerConnection.connectionState\n                });\n                \n                // ============================================\n                // PHASE 12: EXPORT OUR KEYS\n                // ============================================\n                \n                // Export our keys with signatures\n                const ecdhPublicKeyData = await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(\n                    this.ecdhKeyPair.publicKey,\n                    this.ecdsaKeyPair.privateKey,\n                    'ECDH'\n                );\n                \n                const ecdsaPublicKeyData = await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(\n                    this.ecdsaKeyPair.publicKey,\n                    this.ecdsaKeyPair.privateKey,\n                    'ECDSA'\n                );\n                \n                if (!ecdhPublicKeyData || typeof ecdhPublicKeyData !== 'object') {\n                    this._secureLog('error', 'CRITICAL: ECDH key export failed - invalid object structure', { operationId });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key export validation failed - hard abort required');\n                }\n                \n                if (!ecdhPublicKeyData.keyData || !ecdhPublicKeyData.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDH key export incomplete - missing keyData or signature', { \n                        operationId,\n                        hasKeyData: !!ecdhPublicKeyData.keyData,\n                        hasSignature: !!ecdhPublicKeyData.signature \n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key export incomplete - hard abort required');\n                }\n                \n                if (!ecdsaPublicKeyData || typeof ecdsaPublicKeyData !== 'object') {\n                    this._secureLog('error', 'CRITICAL: ECDSA key export failed - invalid object structure', { operationId });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key export validation failed - hard abort required');\n                }\n                \n                if (!ecdsaPublicKeyData.keyData || !ecdsaPublicKeyData.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDSA key export incomplete - missing keyData or signature', { \n                        operationId,\n                        hasKeyData: !!ecdsaPublicKeyData.keyData,\n                        hasSignature: !!ecdsaPublicKeyData.signature \n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key export incomplete - hard abort required');\n                }\n                \n                // ============================================\n                // PHASE 13: SECURITY LEVEL CALCULATION\n                // ============================================\n                \n                // All security features are enabled by default\n                const securityLevel = {\n                    level: 'MAXIMUM',\n                    score: 100,\n                    color: 'green',\n                    details: 'All security features enabled by default',\n                    passedChecks: 10,\n                    totalChecks: 10,\n                    isRealData: true\n                };\n                \n                // ============================================\n                // PHASE 14: CREATE ANSWER PACKAGE\n                // ============================================\n                \n                const currentTimestamp = Date.now();\n                \n                // Create compact answer package for smaller QR codes\n                const answerPackage = {\n                    // Core information (minimal)\n                    t: 'answer', // type\n                    s: this.peerConnection.localDescription.sdp, // sdp\n                    v: EnhancedSecureWebRTCManager.PROTOCOL_VERSION, // version\n                    ts: currentTimestamp, // timestamp\n                    \n                    // Cryptographic keys (essential)\n                    e: ecdhPublicKeyData, // ecdhPublicKey\n                    d: ecdsaPublicKeyData, // ecdsaPublicKey\n                    \n                    // Authentication (essential)\n                    ap: authProof, // authProof\n                    \n                    // Security metadata (simplified)\n                    slv: 'MAX', // securityLevel\n\n                    // Double Ratchet support (see the note on the offer package).\n                    dr: EnhancedSecureWebRTCManager.RATCHET_VERSION,\n\n                    // Session confirmation (simplified)\n                    sc: {\n                        sf: saltFingerprint.substring(0, 12), // saltFingerprint (12 chars)\n                        kd: true, // keyDerivationSuccess\n                        ma: true // mutualAuthEnabled\n                    }\n                };\n                \n                // ============================================\n                // PHASE 15: VALIDATION AND LOGGING\n                // ============================================\n                \n                // Final validation of the answer package (support both formats)\n                const hasSDP = answerPackage.s || answerPackage.sdp;\n                const hasECDH = answerPackage.e || answerPackage.ecdhPublicKey;\n                const hasECDSA = answerPackage.d || answerPackage.ecdsaPublicKey;\n                \n                if (!hasSDP || !hasECDH || !hasECDSA) {\n                    throw new Error('Generated answer package is incomplete');\n                }\n                \n                this._secureLog('info', 'Enhanced secure answer created successfully', {\n                    operationId: operationId,\n                    version: answerPackage.version,\n                    hasECDSA: true,\n                    hasMutualAuth: !!authProof,\n                    hasSessionConfirmation: !!answerPackage.sessionConfirmation,\n                    securityLevel: securityLevel.level,\n                    timestamp: currentTimestamp,\n                    processingTime: currentTimestamp - offerData.timestamp\n                });\n                \n                // Dispatch event about new connection\n                this._dispatchAppEvent?.(new CustomEvent('new-connection', {\n                    detail: { \n                        type: 'answer',\n                        timestamp: currentTimestamp,\n                        securityLevel: securityLevel.level,\n                        operationId: operationId\n                    }\n                }));\n                \n                // ============================================\n                // PHASE 16: SCHEDULE SECURITY CALCULATIONS\n                // ============================================\n                \n                // Plan security calculation after connection\n                setTimeout(async () => {\n                    try {\n                        const realSecurityData = await this.calculateAndReportSecurityLevel();\n                        if (realSecurityData) {\n                            this.notifySecurityUpdate();\n                            this._secureLog('info', 'Post-connection security level calculated', {\n                                operationId: operationId,\n                                level: realSecurityData.level\n                            });\n                        }\n                    } catch (error) {\n                        this._secureLog('error', 'Error calculating post-connection security', {\n                            operationId: operationId,\n                            errorType: error.constructor.name\n                        });\n                    }\n                }, 1000);\n                \n                // Retry if the first calculation fails\n                setTimeout(async () => {\n                    if (!this.lastSecurityCalculation || this.lastSecurityCalculation.score < 50) {\n                        this._secureLog('info', 'Retrying security calculation', {\n                            operationId: operationId\n                        });\n                        await this.calculateAndReportSecurityLevel();\n                        this.notifySecurityUpdate();\n                    }\n                }, 3000);\n                \n                // Final security update\n                this.notifySecurityUpdate();\n                \n                // ============================================\n                // PHASE 17: RETURN RESULT\n                // ============================================\n                \n                return answerPackage;\n                \n            } catch (error) {\n                // ============================================\n                // ERROR HANDLING\n                // ============================================\n                \n                this._secureLog('error', 'Enhanced secure answer creation failed in critical section', {\n                    operationId: operationId,\n                    errorType: error.constructor.name,\n                    errorMessage: error.message,\n                    phase: this._determineAnswerErrorPhase(error),\n                    offerAge: offerData?.timestamp ? Date.now() - offerData.timestamp : 'unknown'\n                });\n                \n                // Cleanup state on error\n                this._cleanupFailedAnswerCreation();\n                \n                // Update status\n                this.onStatusChange('disconnected');\n                \n                // Special handling of security errors\n                if (this.onAnswerError) {\n                    if (error.message.includes('too old') || error.message.includes('replay')) {\n                        this.onAnswerError('replay_attack', error.message);\n                    } else if (error.message.includes('MITM') || error.message.includes('signature')) {\n                        this.onAnswerError('security_violation', error.message);\n                    } else if (error.message.includes('validation') || error.message.includes('format')) {\n                        this.onAnswerError('invalid_format', error.message);\n                    } else {\n                        this.onAnswerError('general_error', error.message);\n                    }\n                }\n                \n                // Re-throw for upper-level handling\n                throw error;\n            }\n        }, 60000); // 60 seconds timeout for the entire answer creation (longer than offer)\n    }\n\n    /**\n     * HELPER: Determine error phase for answer\n     */\n    _determineAnswerErrorPhase(error) {\n        const message = error.message.toLowerCase();\n        \n        if (message.includes('validation') || message.includes('format')) return 'offer_validation';\n        if (message.includes('rate limit')) return 'rate_limiting';\n        if (message.includes('replay') || message.includes('too old')) return 'replay_protection';\n        if (message.includes('salt')) return 'salt_validation';\n        if (message.includes('key pair') || message.includes('generate')) return 'key_generation';\n        if (message.includes('import') || message.includes('ecdsa') || message.includes('ecdh')) return 'key_import';\n        if (message.includes('signature') || message.includes('mitm')) return 'signature_verification';\n        if (message.includes('derive') || message.includes('shared')) return 'key_derivation';\n        if (message.includes('auth') || message.includes('proof')) return 'authentication';\n        if (message.includes('remote description') || message.includes('local description')) return 'webrtc_setup';\n        if (message.includes('answer') || message.includes('sdp')) return 'sdp_creation';\n        if (message.includes('export')) return 'key_export';\n        if (message.includes('security level')) return 'security_calculation';\n        \n        return 'unknown';\n    }\n\n    /**\n     * HELPER: Cleanup state after failed answer creation\n     */\n    /**\n     *   Secure cleanup state after failed answer creation\n     */\n    _cleanupFailedAnswerCreation() {\n        try {\n            //   Secure wipe of cryptographic materials\n            this._clearPendingOfferContext();\n            this._secureCleanupCryptographicMaterials();\n            \n            //   Secure wipe of PFS key versions\n            this.currentKeyVersion = 0;\n            this.keyVersions.clear();\n            this.oldKeys.clear();\n            \n            //   Close peer connection if created\n            if (this.peerConnection) {\n                this.peerConnection.close();\n                this.peerConnection = null;\n            }\n            \n            //   Clear data channel\n            if (this.dataChannel) {\n                this.dataChannel.close();\n                this.dataChannel = null;\n            }\n            \n            //   Reset flags and counters\n            this.isInitiator = false;\n            this.isVerified = false;\n            this.sequenceNumber = 0;\n            this.expectedSequenceNumber = 0;\n            this.messageCounter = 0;\n            this.processedMessageIds.clear();\n            this.replayWindow.clear(); //   Clear replay window\n            \n            //   Reset security features to baseline\n            this._updateSecurityFeatures({\n                hasEncryption: false,\n                hasECDH: false,\n                hasECDSA: false,\n                hasMutualAuth: false,\n                hasMetadataProtection: false,\n                hasEnhancedReplayProtection: false,\n                hasNonExtractableKeys: false,\n                hasEnhancedValidation: false,\n                hasPFS: false\n            });\n            \n            //   Schedule natural cleanup\n            this._forceGarbageCollection().catch(error => {\n                this._secureLog('error', 'Cleanup failed during answer cleanup', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n            \n            this._secureLog('debug', 'Failed answer creation cleanup completed with secure memory wipe');\n            \n        } catch (cleanupError) {\n            this._secureLog('error', 'Error during answer creation cleanup', {\n                errorType: cleanupError.constructor.name,\n                errorMessage: cleanupError.message\n            });\n        }\n    }\n\n    /**\n     * HELPER: Securely set encryption keys (if not set yet)\n     */\n    async _setEncryptionKeys(encryptionKey, macKey, metadataKey, keyFingerprint) {\n        return this._withMutex('keyOperation', async (operationId) => {\n            this._secureLog('info', 'Setting encryption keys with mutex', {\n                operationId: operationId\n            });\n            \n            // Validate all keys before setting\n            if (!(encryptionKey instanceof CryptoKey) ||\n                !(macKey instanceof CryptoKey) ||\n                !(metadataKey instanceof CryptoKey)) {\n                throw new Error('Invalid key types provided');\n            }\n            \n            if (!keyFingerprint || typeof keyFingerprint !== 'string') {\n                throw new Error('Invalid key fingerprint provided');\n            }\n            \n            // Atomically set all keys\n            const oldKeys = {\n                encryptionKey: this.encryptionKey,\n                macKey: this.macKey,\n                metadataKey: this.metadataKey,\n                keyFingerprint: this.keyFingerprint\n            };\n            \n            try {\n                this.encryptionKey = encryptionKey;\n                this.macKey = macKey;\n                this.metadataKey = metadataKey;\n                this.keyFingerprint = keyFingerprint;\n                \n                            // Reset counters\n            this.sequenceNumber = 0;\n            this.expectedSequenceNumber = 0;\n            this.messageCounter = 0;\n            this.processedMessageIds.clear();\n            this.replayWindow.clear(); //   Clear replay window\n                \n                this._secureLog('info', 'Encryption keys set successfully', {\n                    operationId: operationId,\n                    hasAllKeys: !!(this.encryptionKey && this.macKey && this.metadataKey),\n                    hasFingerprint: !!this.keyFingerprint\n                });\n                \n                return true;\n                \n            } catch (error) {\n                // Roll back on error\n                this.encryptionKey = oldKeys.encryptionKey;\n                this.macKey = oldKeys.macKey;\n                this.metadataKey = oldKeys.metadataKey;\n                this.keyFingerprint = oldKeys.keyFingerprint;\n                \n                this._secureLog('error', 'Key setting failed, rolled back', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                \n                throw error;\n            }\n        });\n    }\n\n    /**\n     * SBQ2 answer handling on the offerer side.\n     *\n     * Sets the remote description and nothing else. No key is imported and no\n     * secret derived here, because none has been sent yet \u2014 that happens in\n     * _runSbq2KeyExchange once the channel is open and the commitment has been\n     * checked.\n     */\n    async _handleSbq2Answer(answerData) {\n        if (!this._isSbq2()) {\n            // We advertised SB1 and got SBQ2 back. Refuse rather than switch:\n            // an established session's format is latched, and this is precisely\n            // the shape a downgrade/upgrade confusion attack would take.\n            throw new Error('Received a new-format response to an old-format invitation. Please start a new invitation.');\n        }\n        const st = this._sbq2State();\n        const answerBytes = sbq2DecodeText(String(answerData.sbq2));\n        const desc = sbq2Decode(answerBytes);\n        if (desc.type !== SBQ2_TYPE.ANSWER) throw new Error('That code is an invitation, not a response to one.');\n        if (!desc.commitment) throw new Error('The response carries no key commitment');\n\n        // One-shot binding: this must be the answer to the invitation we are\n        // currently showing, not to any other one.\n        const digest = async (b) => new Uint8Array(await crypto.subtle.digest('SHA-256', b));\n        const expected = await sbq2BindingTag(digest, st.localDescriptor);\n        let diff = 0;\n        for (let i = 0; i < expected.length; i++) diff |= expected[i] ^ desc.bindingTag[i];\n        if (diff !== 0) {\n            throw new Error('This response belongs to a different invitation. Ask for a response to the code you are showing now.');\n        }\n\n        st.remoteDescriptor = answerBytes;\n        st.remoteCommitment = desc.commitment;\n        this._peerDTLSFingerprint = Array.from(desc.fingerprint,\n            (b) => b.toString(16).padStart(2, '0').toUpperCase()).join(':');\n\n        const { sdp } = sbq2SerializeSdp(desc);\n        await this.peerConnection.setRemoteDescription({ type: 'answer', sdp });\n\n        this._secureLog('info', 'SBQ2 answer accepted; awaiting in-band key exchange', {\n            bytes: answerBytes.length\n        });\n    }\n\n    async handleSecureAnswer(answerData) {\n        if (answerData && typeof answerData.sbq2 === 'string') {\n            return this._handleSbq2Answer(answerData);\n        }\n        try {\n\n            if (!answerData || typeof answerData !== 'object' || Array.isArray(answerData)) {\n                this._secureLog('error', 'CRITICAL: Invalid answer data structure', { \n                    hasAnswerData: !!answerData,\n                    answerDataType: typeof answerData,\n                    isArray: Array.isArray(answerData)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Answer data must be a non-null object');\n            }\n            \n            // Support both compact and legacy answer formats\n            const isCompactAnswer = answerData.t === 'answer' && answerData.s;\n            const isLegacyAnswer = answerData.type === 'enhanced_secure_answer' && answerData.sdp;\n            \n            if (!isCompactAnswer && !isLegacyAnswer) {\n                this._secureLog('error', 'CRITICAL: Invalid answer format', { \n                    type: answerData.type || answerData.t,\n                    hasSdp: !!(answerData.sdp || answerData.s)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Invalid answer format - hard abort required');\n            }\n\n            const answerVersion = answerData.v || answerData.version;\n            if (answerVersion !== EnhancedSecureWebRTCManager.PROTOCOL_VERSION) {\n                throw new Error(`Version mismatch: expected protocol ${EnhancedSecureWebRTCManager.PROTOCOL_VERSION}, received ${answerVersion || 'unknown'}`);\n            }\n\n            // CRITICAL: Strict validation of ECDH public key structure\n            // Support both full and compact key names\n            const ecdhKey = answerData.ecdhPublicKey || answerData.e;\n            const ecdsaKey = answerData.ecdsaPublicKey || answerData.d;\n            \n            if (!ecdhKey || typeof ecdhKey !== 'object' || Array.isArray(ecdhKey)) {\n                this._secureLog('error', 'CRITICAL: Invalid ECDH public key structure in answer', { \n                    hasEcdhKey: !!ecdhKey,\n                    ecdhKeyType: typeof ecdhKey,\n                    isArray: Array.isArray(ecdhKey),\n                    availableKeys: Object.keys(answerData)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Missing or invalid ECDH public key structure');\n            }\n            \n            if (!ecdhKey.keyData || !ecdhKey.signature) {\n                this._secureLog('error', 'CRITICAL: ECDH key missing keyData or signature in answer', { \n                    hasKeyData: !!ecdhKey.keyData,\n                    hasSignature: !!ecdhKey.signature\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: ECDH key missing keyData or signature');\n            }\n\n            // CRITICAL: Strict validation of ECDSA public key structure\n            if (!ecdsaKey || typeof ecdsaKey !== 'object' || Array.isArray(ecdsaKey)) {\n                this._secureLog('error', 'CRITICAL: Invalid ECDSA public key structure in answer', { \n                    hasEcdsaKey: !!ecdsaKey,\n                    ecdsaKeyType: typeof ecdsaKey,\n                    isArray: Array.isArray(ecdsaKey)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Missing or invalid ECDSA public key structure');\n            }\n            \n            if (!ecdsaKey.keyData || !ecdsaKey.signature) {\n                this._secureLog('error', 'CRITICAL: ECDSA key missing keyData or signature in answer', { \n                    hasKeyData: !!ecdsaKey.keyData,\n                    hasSignature: !!ecdsaKey.signature\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: ECDSA key missing keyData or signature');\n            }\n\n            // Additional MITM protection: Validate answer data structure\n            // Support both compact and legacy formats\n            const timestamp = answerData.ts || answerData.timestamp;\n            const version = answerData.v || answerData.version;\n            \n            if (!timestamp || !version) {\n                throw new Error('Missing required fields in response data \u2013 possible MITM attack');\n            }\n\n            // MITM Protection: Verify session ID if present (for enhanced security)\n            if (answerData.sessionId && this.sessionId && answerData.sessionId !== this.sessionId) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Session ID mismatch detected - possible MITM attack', {});\n                throw new Error('Session ID mismatch \u2013 possible MITM attack');\n            }\n\n            // Check for replay attacks (reject answers older than 1 hour)\n            const answerAge = Date.now() - answerData.timestamp;\n            if (answerAge > 3600000) { // 1 hour in milliseconds\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Answer data is too old - possible replay attack', {\n                    answerAge: answerAge,\n                    timestamp: answerData.timestamp\n                });\n                \n                // Notify the main code about the replay attack error\n                if (this.onAnswerError) {\n                    this.onAnswerError('replay_attack', 'Response data is too old \u2013 possible replay attack');\n                }\n                \n                throw new Error('Response data is too old \u2013 possible replay attack');\n            }\n\n            // Check protocol version compatibility using the normalized field so\n            // compact and legacy answer payloads are handled consistently.\n            if (answerVersion !== EnhancedSecureWebRTCManager.PROTOCOL_VERSION) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('warn', 'Incompatible protocol version in answer', {\n                    expectedVersion: EnhancedSecureWebRTCManager.PROTOCOL_VERSION,\n                    receivedVersion: answerVersion\n                });\n            }\n\n            // Import ECDSA public key for verification (self-signed)\n            const peerECDSAPublicKey = await crypto.subtle.importKey(\n                'spki',\n                new Uint8Array(ecdsaKey.keyData),\n                {\n                    name: 'ECDSA',\n                    namedCurve: 'P-384'\n                },\n                false,\n                ['verify']\n            );\n\n\n            // Now import and verify the ECDH public key using the verified ECDSA key\n            const peerPublicKey = await window.EnhancedSecureCryptoUtils.importPublicKeyFromSignedPackage(\n                ecdhKey,\n                peerECDSAPublicKey\n            );\n            \n            // Additional MITM protection: Verify session salt integrity\n            this._restorePendingOfferContextIfNeeded();\n            if (!this.sessionSalt || this.sessionSalt.length !== 64) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Invalid session salt detected - possible session hijacking', {\n                    saltLength: this.sessionSalt ? this.sessionSalt.length : 0\n                });\n                throw new Error('Missing pending offer context. Apply the response in the original creator window that generated the invitation.');\n            }\n\n            // Verify that the session salt hasn't been tampered with\n            const expectedSaltHash = await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(this.sessionSalt);\n            window.EnhancedSecureCryptoUtils.secureLog.log('info', 'Session salt integrity verified', {\n                saltFingerprint: expectedSaltHash.substring(0, 8)\n            });\n\n            // Additional validation: Ensure all keys are CryptoKey instances before derivation\n            if (!(this.ecdhKeyPair?.privateKey instanceof CryptoKey)) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Local ECDH private key is not a CryptoKey in handleSecureAnswer', {\n                    hasKeyPair: !!this.ecdhKeyPair,\n                    privateKeyType: typeof this.ecdhKeyPair?.privateKey,\n                    privateKeyAlgorithm: this.ecdhKeyPair?.privateKey?.algorithm?.name\n                });\n                throw new Error('Local ECDH private key is not a CryptoKey');\n            }\n            \n            if (!(peerPublicKey instanceof CryptoKey)) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Peer ECDH public key is not a CryptoKey in handleSecureAnswer', {\n                    publicKeyType: typeof peerPublicKey,\n                    publicKeyAlgorithm: peerPublicKey?.algorithm?.name\n                });\n                throw new Error('Peer ECDH public key is not a CryptoKey');\n            }\n\n            // Store peer's public key for PFS key rotation\n            this.peerPublicKey = peerPublicKey;\n\n            // Does the responder speak our ratchet version? (see the offer side)\n            this._peerSupportsRatchet =\n                answerData.dr === EnhancedSecureWebRTCManager.RATCHET_VERSION;\n\n            // Initialize connection ID if not already set\n            if (!this.connectionId) {\n                this.connectionId = Array.from(crypto.getRandomValues(new Uint8Array(8)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('');\n            }\n\n            \n            const derivedKeys = await window.EnhancedSecureCryptoUtils.deriveSharedKeys(\n                this.ecdhKeyPair.privateKey,\n                peerPublicKey,\n                this.sessionSalt\n            );\n            \n            this.encryptionKey = derivedKeys.messageKey;\n            this.macKey = derivedKeys.macKey;\n            this.metadataKey = derivedKeys.metadataKey;\n            this.keyFingerprint = derivedKeys.fingerprint;\n\n            // Initiator: adopts a fresh ratchet key immediately, so even the very\n            // first message it sends has already left the handshake key behind.\n            await this._initializeRatchet(derivedKeys, /* isInitiator */ true);\n\n            this.sequenceNumber = 0;\n            this.expectedSequenceNumber = 0;\n            this.messageCounter = 0;\n            this.processedMessageIds.clear();\n            this.replayWindow.clear(); //   Clear replay window\n            // Validate that all keys are properly set\n            if (!(this.encryptionKey instanceof CryptoKey) || \n                !(this.macKey instanceof CryptoKey) || \n                !(this.metadataKey instanceof CryptoKey)) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Invalid key types after derivation in handleSecureAnswer', {\n                    encryptionKeyType: typeof this.encryptionKey,\n                    macKeyType: typeof this.macKey,\n                    metadataKeyType: typeof this.metadataKey,\n                    encryptionKeyAlgorithm: this.encryptionKey?.algorithm?.name,\n                    macKeyAlgorithm: this.macKey?.algorithm?.name,\n                    metadataKeyAlgorithm: this.metadataKey?.algorithm?.name\n                });\n                throw new Error('Invalid key types after export');\n            }\n            \n            this._secureLog('info', 'Encryption keys set in handleSecureAnswer', {\n                hasEncryptionKey: !!this.encryptionKey,\n                hasMacKey: !!this.macKey,\n                hasMetadataKey: !!this.metadataKey,\n                hasKeyFingerprint: !!this.keyFingerprint,\n                mitmProtection: 'enabled',\n                signatureVerified: true\n            });\n            \n            // Update security features for initiator after successful key exchange\n            this.securityFeatures.hasMutualAuth = true;\n            this.securityFeatures.hasMetadataProtection = true;\n            this.securityFeatures.hasEnhancedReplayProtection = true;\n            this.securityFeatures.hasPFS = true;\n            \n            // PFS: Initialize key version tracking\n            this.currentKeyVersion = 0;\n            this.lastKeyRotation = Date.now();\n            this.keyVersions.set(0, {\n                salt: this.sessionSalt,\n                timestamp: this.lastKeyRotation,\n                messageCount: 0\n            });\n            \n            this.onKeyExchange(this.keyFingerprint);\n\n            //   Compute SAS for MITM protection (Offer side - Answer handler)\n            try {\n                const remoteFP = this._extractDTLSFingerprintFromSDP(answerData.sdp || answerData.s); \n                const localFP = this.expectedDTLSFingerprint; \n                const keyBytes = this._decodeKeyFingerprint(this.keyFingerprint); \n\n                this.verificationCode = await this._computeSAS(keyBytes, localFP, remoteFP);\n                this._setSASMaterialReady(localFP, remoteFP);\n                \n                // CRITICAL: Store SAS code to send when data channel opens\n                this.pendingSASCode = this.verificationCode;\n                \n                this._secureLog('info', 'SAS verification code generated for MITM protection (Offer side)', {\n                    sasCode: this.verificationCode,\n                    localFP: localFP.substring(0, 16) + '...',\n                    remoteFP: remoteFP.substring(0, 16) + '...',\n                    timestamp: Date.now()\n                });\n            } catch (sasError) {\n                this._secureLog('error', 'SAS computation failed in handleSecureAnswer (Offer side)', {\n                    errorType: sasError?.constructor?.name || 'Unknown'\n                });\n                this._secureLog('error', 'SAS computation failed in handleSecureAnswer (Offer side)', {\n                    error: sasError.message,\n                    stack: sasError.stack,\n                    timestamp: Date.now()\n                });\n            }\n\n            // Same as on the offer side: on first contact there is no trusted\n            // baseline to compare the peer's fingerprint against, and the previous\n            // comparison ran the remote fingerprint against our own. Record the\n            // peer's value (it feeds the SAS, which is the real binding) and let\n            // the user's out-of-band code comparison do the authenticating.\n            if (this.strictDTLSValidation) {\n                try {\n                    this._peerDTLSFingerprint = this._extractDTLSFingerprintFromSDP(answerData.sdp || answerData.s);\n                } catch (error) {\n                    this._secureLog('warn', 'Could not extract peer DTLS fingerprint from answer', {\n                        error: error.message,\n                        context: 'answer_validation'\n                    });\n                }\n            } else {\n                this._secureLog('info', 'DTLS fingerprint validation disabled - proceeding without validation');\n            }\n\n            // Support both full and compact SDP field names\n            const sdpData = answerData.sdp || answerData.s;\n\n            if (this.peerConnection?.signalingState !== 'have-local-offer') {\n                this._secureLog('warn', 'Ignoring answer outside have-local-offer state', {\n                    signalingState: this.peerConnection?.signalingState || 'unknown'\n                });\n                return;\n            }\n            \n            this._secureLog('debug', 'Setting remote description from answer', {\n                sdpLength: sdpData?.length || 0,\n                usingCompactSDP: !answerData.sdp && !!answerData.s\n            });\n            \n            await this.peerConnection.setRemoteDescription({\n                type: 'answer',\n                sdp: sdpData\n            });\n            this._logIceCandidateDiagnostics('remote answer applied', this.peerConnection.remoteDescription?.sdp, {\n                signalingState: this.peerConnection.signalingState\n            });\n            this._warnIfRemoteCandidatesNeedRelay('answer', this.peerConnection.remoteDescription?.sdp);\n            \n            this._secureLog('debug', 'Remote description set successfully from answer', {\n                signalingState: this.peerConnection.signalingState\n            });\n\n            setTimeout(async () => {\n                try {\n                    const securityData = await this.calculateAndReportSecurityLevel();\n                    if (securityData) {\n                        this.notifySecurityUpdate();\n                    }\n                } catch (error) {\n                    this._secureLog('error', 'Error calculating security after connection:', { errorType: error?.constructor?.name || 'Unknown' });\n                }\n            }, 1000);\n            setTimeout(async () => {\n                if (!this.lastSecurityCalculation || this.lastSecurityCalculation.score < 50) {\n                    await this.calculateAndReportSecurityLevel();\n                    this.notifySecurityUpdate();\n                }\n            }, 3000);\n            this.notifySecurityUpdate();\n        } catch (error) {\n            this._secureLog('error', 'Enhanced secure answer handling failed', {\n                errorType: error.constructor.name\n            });\n            this.onStatusChange('failed');\n\n            if (this.onAnswerError) {\n                if (error.message.includes('too old') || error.message.includes('\u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0441\u0442\u0430\u0440\u044B\u0435')) {\n                    this.onAnswerError('replay_attack', error.message);\n                } else if (error.message.includes('MITM') || error.message.includes('signature') || error.message.includes('\u043F\u043E\u0434\u043F\u0438\u0441\u044C')) {\n                    this.onAnswerError('security_violation', error.message);\n                } else {\n                    this.onAnswerError('general_error', error.message);\n                }\n            }\n            \n            throw error;\n        }\n    }\n\n\n    initiateVerification() {\n        \n        if (this.isInitiator) {\n            // Ensure verification initiation notice wasn't already sent\n            if (!this.verificationInitiationSent) {\n                this.verificationInitiationSent = true;\n                this.deliverMessageToUI('CRITICAL: Compare verification code with peer out-of-band (voice/video/in-person) to prevent MITM attack!', 'system');\n                this.deliverMessageToUI(`Your verification code: ${this.verificationCode}`, 'system');\n                this.deliverMessageToUI('Ask peer to confirm this exact code before allowing traffic!', 'system');\n            }\n        } else {\n\n            this.deliverMessageToUI('Waiting for verification code from peer...', 'system');\n        }\n    }\n\n    /**\n     * Normalizes and validates the user-entered SAS code.\n     * Users may enter the same shared SAS with spaces or hyphens.\n     * @param {string} input\n     * @returns {boolean}\n     */\n    _validateSASCode(input) {\n        if (!input || typeof input !== 'string' || !this.verificationCode || typeof this.verificationCode !== 'string') {\n            return false;\n        }\n\n        const normalizedInput = input.replace(/[-\\s]/g, '').toUpperCase();\n        const normalizedActual = this.verificationCode.replace(/[-\\s]/g, '').toUpperCase();\n\n        if (normalizedInput.length !== normalizedActual.length) {\n            return false;\n        }\n\n        return window.EnhancedSecureCryptoUtils.constantTimeCompare(normalizedInput, normalizedActual);\n    }\n\n    confirmVerification(userCode) {\n        \n        try {\n            if (!this._validateSASCode(userCode)) {\n                this.sasValidationAttempts = (this.sasValidationAttempts || 0) + 1;\n                this._secureLog('warn', 'SAS validation failed: user entered incorrect code', {\n                    attempts: this.sasValidationAttempts,\n                    maxAttempts: EnhancedSecureWebRTCManager.MAX_SAS_ATTEMPTS\n                });\n\n                if (this.sasValidationAttempts >= EnhancedSecureWebRTCManager.MAX_SAS_ATTEMPTS) {\n                    this.deliverMessageToUI('Verification failed 3 times. Session reset for safety.', 'system');\n                    this.disconnect();\n                    throw new Error('SAS_MAX_ATTEMPTS');\n                }\n\n                throw new Error('SAS_MISMATCH');\n            }\n            \n            // Mark local verification as confirmed\n            this.localVerificationConfirmed = true;\n            this.sasValidationAttempts = 0;\n            \n            // Send confirmation to peer\n            const confirmationPayload = {\n                type: 'verification_confirmed',\n                data: {\n                    timestamp: Date.now(),\n                    verificationMethod: 'MANUAL_SAS_ENTRY',\n                    securityLevel: 'MITM_PROTECTION_REQUIRED'\n                }\n            };\n\n            this.dataChannel.send(JSON.stringify(confirmationPayload));\n            \n            // Notify UI about state change\n            if (this.onVerificationStateChange) {\n                this.onVerificationStateChange({\n                    localConfirmed: this.localVerificationConfirmed,\n                    remoteConfirmed: this.remoteVerificationConfirmed,\n                    bothConfirmed: this.bothVerificationsConfirmed\n                });\n            }\n            \n            // Check if both parties have confirmed\n            this._checkBothVerificationsConfirmed();\n            \n            // Notify UI about local confirmation\n            this.deliverMessageToUI('Code verified locally. Waiting for peer confirmation...', 'system');\n            \n            this.processMessageQueue();\n        } catch (error) {\n            if (error.message === 'SAS_MISMATCH') {\n                this.deliverMessageToUI('Verification failed: the code you entered is incorrect.', 'system');\n            } else if (error.message !== 'SAS_MAX_ATTEMPTS') {\n                this._secureLog('error', 'SAS verification failed:', { errorType: error?.constructor?.name || 'Unknown' });\n                this.deliverMessageToUI('SAS verification failed', 'system');\n            }\n            throw error;\n        }\n    }\n\n    _checkBothVerificationsConfirmed() {\n        // Check if both parties have confirmed verification\n        if (this.localVerificationConfirmed && this.remoteVerificationConfirmed && !this.bothVerificationsConfirmed) {\n            this.bothVerificationsConfirmed = true;\n            \n            // Notify both parties that verification is complete\n            const bothConfirmedPayload = {\n                type: 'verification_both_confirmed',\n                data: {\n                    timestamp: Date.now(),\n                    verificationMethod: 'SAS',\n                    securityLevel: 'MITM_PROTECTION_COMPLETE'\n                }\n            };\n\n            this.dataChannel.send(JSON.stringify(bothConfirmedPayload));\n            \n            // Notify UI about state change\n            if (this.onVerificationStateChange) {\n                this.onVerificationStateChange({\n                    localConfirmed: this.localVerificationConfirmed,\n                    remoteConfirmed: this.remoteVerificationConfirmed,\n                    bothConfirmed: this.bothVerificationsConfirmed\n                });\n            }\n            \n            // Set verified status and open chat after 2 second delay\n            this.deliverMessageToUI('Both parties confirmed! Opening secure chat in 2 seconds...', 'system');\n            \n            setTimeout(() => {\n                try {\n                    this._setVerifiedStatus(true, 'MUTUAL_SAS_CONFIRMED', {\n                        code: this.verificationCode,\n                        timestamp: Date.now()\n                    });\n                    this._enforceVerificationGate('mutual_confirmed', false);\n                    this.onStatusChange?.('verified');\n                } catch (error) {\n                    // The verified transition is guarded (see _setVerifiedStatus).\n                    // If it refuses, the session is not trustworthy \u2014 tear it down\n                    // instead of leaving the UI in a half-verified state.\n                    this._secureLog('error', 'Verified transition rejected - aborting session', {\n                        errorType: error?.constructor?.name || 'Unknown'\n                    });\n                    this.deliverMessageToUI('Verification could not be completed safely. Connection aborted.', 'system');\n                    this.disconnect();\n                }\n            }, 2000);\n        }\n    }\n\n    handleVerificationConfirmed(data) {\n        this.remoteVerificationConfirmed = true;\n        \n        // Notify UI about peer confirmation\n        this.deliverMessageToUI('Peer confirmed the verification code. Waiting for your confirmation...', 'system');\n        \n        // Notify UI about state change\n        if (this.onVerificationStateChange) {\n            this.onVerificationStateChange({\n                localConfirmed: this.localVerificationConfirmed,\n                remoteConfirmed: this.remoteVerificationConfirmed,\n                bothConfirmed: this.bothVerificationsConfirmed\n            });\n        }\n        \n        // Check if both parties have confirmed\n        this._checkBothVerificationsConfirmed();\n    }\n\n    handleVerificationBothConfirmed(data) {\n        // Both parties can reach the \"both confirmed\" state independently: this\n        // party may have already detected it locally (_checkBothVerificationsConfirmed)\n        // and now also receives the peer's notification. Without this guard the\n        // \"Both parties confirmed\" message and the verified transition fire twice.\n        if (this.bothVerificationsConfirmed) {\n            return;\n        }\n\n        // SECURITY: this frame is unauthenticated peer input on an as-yet\n        // unverified channel. It may only ACKNOWLEDGE a mutual confirmation, never\n        // create one. Without this check a MITM who completed the signalling\n        // exchange could send a single `verification_both_confirmed` right after\n        // the data channel opens and drive us to isVerified=true while the user\n        // never compared the SAS out-of-band \u2014 defeating the entire MITM defence.\n        if (!this.localVerificationConfirmed) {\n            this._secureLog('error', 'Peer claimed mutual SAS confirmation before local confirmation - possible MITM attack', {\n                localConfirmed: this.localVerificationConfirmed,\n                remoteConfirmed: this.remoteVerificationConfirmed,\n                timestamp: Date.now()\n            });\n            this.deliverMessageToUI('Verification protocol violation: peer claimed confirmation before you verified the code. Connection aborted for safety.', 'system');\n            this.disconnect();\n            return;\n        }\n\n        // The peer can only reach \"both confirmed\" after confirming on its side,\n        // so record that too \u2014 otherwise the state reported to the UI is\n        // inconsistent with the transition we are about to make.\n        this.remoteVerificationConfirmed = true;\n\n        // Handle notification that both parties have confirmed\n        this.bothVerificationsConfirmed = true;\n        \n        // Notify UI about state change\n        if (this.onVerificationStateChange) {\n            this.onVerificationStateChange({\n                localConfirmed: this.localVerificationConfirmed,\n                remoteConfirmed: this.remoteVerificationConfirmed,\n                bothConfirmed: this.bothVerificationsConfirmed\n            });\n        }\n        \n        // Set verified status and open chat after 2 second delay\n        this.deliverMessageToUI('Both parties confirmed! Opening secure chat in 2 seconds...', 'system');\n        \n        setTimeout(() => {\n            this._setVerifiedStatus(true, 'MUTUAL_SAS_CONFIRMED', { \n                code: this.verificationCode,\n                timestamp: Date.now()\n            });\n            this._enforceVerificationGate('mutual_confirmed', false);\n            this.onStatusChange?.('verified');\n        }, 2000);\n    }\n\n    handleVerificationRequest(data) {\n\n        \n        // Constant-time comparison, consistent with confirmVerification().\n        if (this._validateSASCode(data?.code)) {\n            const responsePayload = {\n                type: 'verification_response',\n                data: {\n                    ok: true,\n                    timestamp: Date.now(),\n                    verificationMethod: 'SAS', // Indicate SAS was used\n                    securityLevel: 'MITM_PROTECTED'\n                }\n            };\n            this.dataChannel.send(JSON.stringify(responsePayload));\n            \n            // Ensure verification success notice wasn't already sent\n            if (!this.verificationNotificationSent) {\n                this.verificationNotificationSent = true;\n                this.deliverMessageToUI('SAS verification successful! MITM protection confirmed. Channel is now secure!', 'system');\n            }\n            \n            this.processMessageQueue();\n        } else {\n            //  SAS verification failed - possible MITM attack\n            const responsePayload = {\n                type: 'verification_response',\n                data: {\n                    ok: false,\n                    timestamp: Date.now(),\n                    reason: 'code_mismatch'\n                }\n            };\n            this.dataChannel.send(JSON.stringify(responsePayload));\n            \n            this._secureLog('error', 'SAS verification failed - possible MITM attack', {\n                // Never log the codes themselves \u2014 the SAS is the one secret the\n                // user is asked to compare out-of-band.\n                receivedCodeLength: typeof data?.code === 'string' ? data.code.length : 0,\n                timestamp: Date.now()\n            });\n            \n            this.deliverMessageToUI('SAS verification failed! Possible MITM attack detected. Connection aborted for safety!', 'system');\n            this.disconnect();\n        }\n    }\n\n    handleSASCode(data) {\n        if (!data?.code || typeof data.code !== 'string') {\n            this._secureLog('warn', 'Invalid SAS announcement received from peer');\n            return;\n        }\n\n        // SECURITY: the peer's announcement may only CORROBORATE the SAS we\n        // derived ourselves from the shared ECDH secret and both DTLS\n        // fingerprints \u2014 never supply it. Adopting a peer-provided code would\n        // mean showing the user a number chosen by whoever is on the other end,\n        // so an attacker could simply announce the same value to both sides and\n        // the out-of-band comparison would always \"succeed\".\n        if (!this.verificationCode) {\n            this._secureLog('error', 'Received peer SAS announcement before local SAS was derived - refusing to adopt it', {\n                timestamp: Date.now()\n            });\n            this.deliverMessageToUI('Verification failed: no locally derived code to compare against. Connection aborted for safety.', 'system');\n            this.disconnect();\n            return;\n        }\n\n        if (!this._validateSASCode(data.code)) {\n            this._secureLog('error', 'Peer-announced SAS does not match locally computed SAS');\n            this.deliverMessageToUI('Version or SAS mismatch detected. Connection aborted for safety.', 'system');\n            this.disconnect();\n            return;\n        }\n\n        // Codes agree \u2014 keep our own locally derived value and continue.\n        this._notifyVerificationReadyIfPossible();\n\n        this._secureLog('info', 'Peer SAS announcement matched locally derived code', {\n            timestamp: Date.now()\n        });\n    }\n\n    handleVerificationResponse(data) {\n        \n        if (data.ok === true) {\n            \n            // Log successful mutual SAS verification\n            this._secureLog('info', 'Mutual SAS verification completed - MITM protection active', {\n                verificationMethod: data.verificationMethod || 'SAS',\n                securityLevel: data.securityLevel || 'MITM_PROTECTED',\n                timestamp: Date.now()\n            });\n            \n            // Ensure verification success notice wasn't already sent\n            if (!this.verificationNotificationSent) {\n                this.verificationNotificationSent = true;\n                this.deliverMessageToUI(' Mutual SAS verification complete! MITM protection active. Channel is now secure!', 'system');\n            }\n            \n            this.processMessageQueue();\n        } else {\n            //  Peer verification failed - connection not secure\n            this._secureLog('error', 'Peer SAS verification failed - connection not secure', {\n                responseData: data,\n                timestamp: Date.now()\n            });\n            \n            this.deliverMessageToUI('Peer verification failed! Connection not secure!', 'system');\n            this.disconnect();\n        }\n    }\n\n    validateOfferData(offerData) {\n        return offerData &&\n               offerData.type === 'enhanced_secure_offer' &&\n               offerData.sdp &&\n               offerData.publicKey &&\n               offerData.salt &&\n               offerData.verificationCode &&\n               Array.isArray(offerData.publicKey) &&\n               Array.isArray(offerData.salt) &&\n               offerData.salt.length === 32;\n    }\n\n    validateEnhancedOfferData(offerData) {\n        try {\n            // CRITICAL: Strict type checking to prevent syntax errors\n            if (!offerData || typeof offerData !== 'object' || Array.isArray(offerData)) {\n                this._secureLog('error', 'CRITICAL: Invalid offer data structure', { \n                    hasOfferData: !!offerData,\n                    offerDataType: typeof offerData,\n                    isArray: Array.isArray(offerData)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Offer data must be a non-null object');\n            }\n\n            // Basic required fields will be validated after format detection\n\n            // Check if this is v4.0 compact format or legacy format\n            const isV4CompactFormat = offerData.v === EnhancedSecureWebRTCManager.PROTOCOL_VERSION && offerData.e && offerData.d;\n            const isV4Format = offerData.version === EnhancedSecureWebRTCManager.PROTOCOL_VERSION && offerData.ecdhPublicKey && offerData.ecdsaPublicKey;\n            \n            // Validate offer type (support compact, legacy v3.0 and v4.0 formats)\n            const isValidType = isV4CompactFormat ? \n                ['offer'].includes(offerData.t) :\n                ['enhanced_secure_offer', 'secure_offer'].includes(offerData.type);\n                \n            if (!isValidType) {\n                throw new Error('Invalid offer type');\n            }\n            \n            if (isV4CompactFormat) {\n                // v4.1 compact format validation\n                const compactRequiredFields = [\n                    'e', 'd', 'sl', 'vc', 'si', 'ci', 'ac', 'slv'\n                ];\n                \n                for (const field of compactRequiredFields) {\n                if (!offerData[field]) {\n                        throw new Error(`Missing required v4.1 compact field: ${field}`);\n                    }\n                }\n                \n                // Validate key structures\n                if (!offerData.e || typeof offerData.e !== 'object' || Array.isArray(offerData.e)) {\n                    throw new Error('CRITICAL SECURITY FAILURE: Invalid ECDH public key structure');\n                }\n                \n                if (!offerData.d || typeof offerData.d !== 'object' || Array.isArray(offerData.d)) {\n                    throw new Error('CRITICAL SECURITY FAILURE: Invalid ECDSA public key structure');\n                }\n                \n                // Validate salt length\n                if (!Array.isArray(offerData.sl) || offerData.sl.length !== 64) {\n                    throw new Error('Salt must be exactly 64 bytes for v4.1');\n                }\n                \n                // Validate verification code format\n                if (typeof offerData.vc !== 'string' || offerData.vc.length < 6) {\n                    throw new Error('Invalid verification code format');\n                }\n                \n                // Validate security level\n                if (!['MAX', 'HIGH', 'MED', 'LOW'].includes(offerData.slv)) {\n                    throw new Error('Invalid security level');\n                }\n                \n                // Validate timestamp (not older than 1 hour)\n                const offerAge = Date.now() - offerData.ts;\n                if (offerAge > 3600000) {\n                    throw new Error('Offer is too old (older than 1 hour)');\n                }\n                \n                this._secureLog('info', 'v4.1 compact offer validation passed', {\n                    version: offerData.v,\n                    hasECDH: !!offerData.e,\n                    hasECDSA: !!offerData.d,\n                    hasSalt: !!offerData.sl,\n                    hasVerificationCode: !!offerData.vc,\n                    securityLevel: offerData.slv,\n                    offerAge: Math.round(offerAge / 1000) + 's'\n                });\n            } else if (isV4Format) {\n                // v4.1 enhanced validation\n                const v4RequiredFields = [\n                    'ecdhPublicKey', 'ecdsaPublicKey', 'salt', 'verificationCode',\n                    'authChallenge', 'timestamp', 'version', 'securityLevel'\n                ];\n\n                for (const field of v4RequiredFields) {\n                    if (!offerData[field]) {\n                        throw new Error(`Missing v4.1 field: ${field}`);\n                    }\n                }\n\n                // Validate salt (must be 64 bytes for v4.0)\n                if (!Array.isArray(offerData.salt) || offerData.salt.length !== 64) {\n                    throw new Error('Salt must be exactly 64 bytes for v4.1');\n                }\n\n                // Validate timestamp (not older than 1 hour)\n                const offerAge = Date.now() - offerData.timestamp;\n                if (offerAge > 3600000) {\n                    throw new Error('Offer is too old (older than 1 hour)');\n                }\n\n                // CRITICAL: Strict validation of key structures to prevent syntax errors\n                if (!offerData.ecdhPublicKey || typeof offerData.ecdhPublicKey !== 'object' || Array.isArray(offerData.ecdhPublicKey)) {\n                    this._secureLog('error', 'CRITICAL: Invalid ECDH public key structure', { \n                        hasEcdhKey: !!offerData.ecdhPublicKey,\n                        ecdhKeyType: typeof offerData.ecdhPublicKey,\n                        isArray: Array.isArray(offerData.ecdhPublicKey)\n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: Invalid ECDH public key structure - hard abort required');\n                }\n\n                if (!offerData.ecdsaPublicKey || typeof offerData.ecdsaPublicKey !== 'object' || Array.isArray(offerData.ecdsaPublicKey)) {\n                    this._secureLog('error', 'CRITICAL: Invalid ECDSA public key structure', { \n                        hasEcdsaKey: !!offerData.ecdsaPublicKey,\n                        ecdsaKeyType: typeof offerData.ecdsaPublicKey,\n                        isArray: Array.isArray(offerData.ecdsaPublicKey)\n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: Invalid ECDSA public key structure - hard abort required');\n                }\n\n                // CRITICAL: Validate key internal structure to prevent syntax errors\n                if (!offerData.ecdhPublicKey.keyData || !offerData.ecdhPublicKey.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDH key missing keyData or signature', { \n                        hasKeyData: !!offerData.ecdhPublicKey.keyData,\n                        hasSignature: !!offerData.ecdhPublicKey.signature\n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key missing keyData or signature');\n                }\n\n                if (!offerData.ecdsaPublicKey.keyData || !offerData.ecdsaPublicKey.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDSA key missing keyData or signature', { \n                        hasKeyData: !!offerData.ecdsaPublicKey.keyData,\n                        hasSignature: !!offerData.ecdsaPublicKey.signature\n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key missing keyData or signature');\n                }\n\n                if (typeof offerData.verificationCode !== 'string' || offerData.verificationCode.length < 6) {\n                    throw new Error('Invalid SAS verification code format - MITM protection required');\n                }\n\n                this._secureLog('info', 'v4.1 offer validation passed', {\n                    version: offerData.version,\n                    hasSecurityLevel: !!offerData.securityLevel?.level,\n                    offerAge: Math.round(offerAge / 1000) + 's'\n                });\n            } else {\n                const receivedVersion = offerData.v || offerData.version || 'unknown';\n                throw new Error(`Version mismatch: expected protocol ${EnhancedSecureWebRTCManager.PROTOCOL_VERSION}, received ${receivedVersion}`);\n            }\n\n            // Validate SDP structure (basic check for all versions)\n            const sdp = isV4CompactFormat ? offerData.s : offerData.sdp;\n            if (typeof sdp !== 'string' || !sdp.includes('v=0')) {\n                throw new Error('Invalid SDP structure');\n            }\n\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'CRITICAL: Security validation failed - hard abort required', {\n                error: error.message,\n                errorType: error.constructor.name,\n                timestamp: Date.now()\n            });\n\n            throw new Error(`CRITICAL SECURITY VALIDATION FAILURE: ${error.message}`);\n        }\n    }\n\n    async sendSecureMessage(message) {\n        //   Comprehensive input validation\n        const validation = this._validateInputData(message, 'sendSecureMessage');\n        if (!validation.isValid) {\n            const errorMessage = `Input validation failed: ${validation.errors.join(', ')}`;\n            this._secureLog('error', 'Input validation failed in sendSecureMessage', {\n                errors: validation.errors,\n                messageType: typeof message\n            });\n            throw new Error(errorMessage);\n        }\n\n        //   Rate limiting check\n        if (!this._checkRateLimit('sendSecureMessage')) {\n            throw new Error('Rate limit exceeded for secure message sending');\n        }\n\n        //   Enforce verification gate\n        this._enforceVerificationGate('sendSecureMessage');\n\n        //   Quick readiness check WITHOUT mutex\n        if (!this.isConnected()) {\n            if (validation.sanitizedData && typeof validation.sanitizedData === 'object' && validation.sanitizedData.type && validation.sanitizedData.type.startsWith('file_')) {\n                throw new Error('Connection not ready for file transfer. Please ensure the connection is established and verified.');\n            }\n            this.messageQueue.push(validation.sanitizedData);\n            throw new Error('Connection not ready. Message queued for sending.');\n        }\n        \n        //   Use mutex ONLY for cryptographic operations\n        return this._withMutex('cryptoOperation', async (operationId) => {\n            // Re-check inside critical section\n            if (!this.isConnected() || !this.isVerified) {\n                throw new Error('Connection lost during message preparation');\n            }\n            \n            // Note: master key session is managed by SecureMasterKeyManager\n            // Do not gate here on _isUnlocked to avoid false blocking\n            // Session timers are handled inside the master key manager on key access\n            \n            // Validate keys inside critical section\n            if (!this.encryptionKey || !this.macKey || !this.metadataKey) {\n                throw new Error('Encryption keys not initialized');\n            }\n            \n            //   Additional rate limiting check\n            if (!window.EnhancedSecureCryptoUtils.rateLimiter.checkMessageRate(this.rateLimiterId)) {\n                throw new Error('Message rate limit exceeded (60 messages per minute)');\n            }\n            \n            try {\n                //   Accept strings and objects; stringify objects\n                const textToSend = typeof validation.sanitizedData === 'string' ? validation.sanitizedData : JSON.stringify(validation.sanitizedData);\n                const sanitizedMessage = window.EnhancedSecureCryptoUtils.sanitizeMessage(textToSend);\n                const messageId = `msg_${Date.now()}_${this.messageCounter++}`;\n                \n                //   Create AAD with sequence number for anti-replay protection\n                if (typeof this._createMessageAAD !== 'function') {\n                    throw new Error('_createMessageAAD method is not available in sendSecureMessage. Manager may not be fully initialized.');\n                }\n                const aad = message.aad || this._createMessageAAD('enhanced_message', { content: sanitizedMessage });\n                \n                let payload;\n\n                // `canEncrypt` rather than `isRatchetActive`: the responder has no\n                // sending chain until the initiator's first message arrives, and\n                // the app sends a presence update from BOTH sides the instant\n                // verification completes. Without this check the responder's very\n                // first frame would throw. Those few frames fall back to the\n                // session keys \u2014 the protection every release before this one had\n                // \u2014 and everything after them is ratcheted.\n                if (this._ratchet?.canEncrypt) {\n                    // Per-message key from the ratchet: derived, used once and\n                    // destroyed, so this frame stays unreadable to anyone who\n                    // later recovers the session state.\n                    const { header, ciphertext } = await this._ratchet.encrypt(sanitizedMessage);\n                    payload = {\n                        type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.RATCHET_MESSAGE,\n                        h: header,\n                        c: ciphertext,\n                        version: '5.0'\n                    };\n                } else {\n                    //   Use enhanced encryption with AAD and sequence number\n                    const encryptedData = await window.EnhancedSecureCryptoUtils.encryptMessage(\n                        sanitizedMessage,\n                        this.encryptionKey,\n                        this.macKey,\n                        this.metadataKey,\n                        messageId,\n                        JSON.parse(aad).sequenceNumber // Use sequence number from AAD\n                    );\n\n                    payload = {\n                        type: 'enhanced_message',\n                        data: encryptedData,\n                        keyVersion: this.currentKeyVersion,\n                        version: '4.0'\n                    };\n                }\n\n                this.dataChannel.send(JSON.stringify(payload));\n                //   Locally display only plain strings to avoid UI duplication\n                if (typeof validation.sanitizedData === 'string') {\n                    this.deliverMessageToUI(validation.sanitizedData, 'sent');\n                }\n                \n                this._secureLog('debug', 'Secure message sent successfully', {\n                    operationId: operationId,\n                    messageLength: sanitizedMessage.length,\n                    keyVersion: this.currentKeyVersion\n                });\n                \n            } catch (error) {\n                this._secureLog('error', 'Secure message sending failed', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                \n                // Improved user-facing error messages (English)\n                if (error.message.includes('Session expired')) {\n                    throw new Error('Session expired. Please enter your password to unlock.');\n                } else if (error.message.includes('Encryption keys not initialized')) {\n                    throw new Error('Session expired due to inactivity. Please reconnect to the chat.');\n                } else if (error.message.includes('Connection lost')) {\n                    throw new Error('Connection lost. Please check your Internet connection.');\n                } else if (error.message.includes('Rate limit exceeded')) {\n                    throw new Error('Message rate limit exceeded. Please wait before sending another message.');\n                } else {\n                    throw error;\n                }\n            }\n        }, 2000); // Reduced timeout for crypto operations\n    }\n\n    processMessageQueue() {\n        while (this.messageQueue.length > 0 && this.isConnected() && this.isVerified) {\n            const message = this.messageQueue.shift();\n            this.sendSecureMessage(message).catch(console.error);\n        }\n    }\n\n    // Heartbeat runs on its own HEARTBEAT_INTERVAL timer. It used to be folded\n    // into the unified maintenance cycle, which ticks every 5 minutes \u2014 far too\n    // coarse to notice a dead path, and long enough that a drop looked like\n    // silence. The maintenance cycle no longer sends heartbeats.\n    startHeartbeat() {\n        this._heartbeatConfig = {\n            enabled: true,\n            interval: EnhancedSecureWebRTCManager.TIMEOUTS.HEARTBEAT_INTERVAL,\n            lastHeartbeat: 0\n        };\n\n        this.stopHeartbeat(/* keepConfig */ true);\n\n        this._heartbeatTimer = setInterval(() => {\n            if (!this._heartbeatConfig?.enabled) return;\n            if (this.dataChannel?.readyState === 'open') {\n                this._sendHeartbeat();\n            }\n        }, EnhancedSecureWebRTCManager.TIMEOUTS.HEARTBEAT_INTERVAL);\n        this._trackActiveTimer(this._heartbeatTimer);\n\n        // Treat \"connected now\" as the liveness baseline, otherwise the watchdog\n        // fires immediately on a session that has simply been quiet so far.\n        this._lastInboundAt = Date.now();\n        this._livenessProbeAt = 0;\n        this._livenessArmed = false;\n        this._startLivenessWatchdog();\n        this._setupRecoveryLifecycleListeners();\n\n        this._secureLog('info', '\uD83D\uDD04 Liveness watchdog started', {\n            heartbeatMs: EnhancedSecureWebRTCManager.TIMEOUTS.HEARTBEAT_INTERVAL,\n            probeAfterMs: EnhancedSecureWebRTCManager.TIMEOUTS.LIVENESS_PROBE_AFTER,\n            probeTimeoutMs: EnhancedSecureWebRTCManager.TIMEOUTS.LIVENESS_PROBE_TIMEOUT\n        });\n    }\n\n    stopHeartbeat(keepConfig = false) {\n        if (!keepConfig && this._heartbeatConfig) {\n            this._heartbeatConfig.enabled = false;\n        }\n        if (this._heartbeatTimer) {\n            clearInterval(this._heartbeatTimer);\n            this._activeTimers?.delete(this._heartbeatTimer);\n            this._heartbeatTimer = null;\n        }\n        if (!keepConfig) this._stopLivenessWatchdog();\n    }\n\n    /**\n     * Inbound heartbeat from the peer. This method used to be missing entirely\n     * while handleSystemMessage still dispatched to it, so every heartbeat threw\n     * a TypeError and liveness was never actually observed.\n     *\n     * A non-ack heartbeat is a probe and must be answered immediately: that reply\n     * is what proves this side is alive even when its tab is backgrounded and its\n     * own timers have been throttled to a standstill.\n     */\n    handleHeartbeat(message) {\n        this._lastInboundAt = Date.now();\n        this._livenessProbeAt = 0;\n\n        const isAck = message?.ack === true || message?.data?.ack === true;\n        if (!isAck) this._sendHeartbeat(true);\n\n        this._secureLog('debug', isAck ? '\uD83D\uDC93 Heartbeat ack received' : '\uD83D\uDC93 Heartbeat probe received');\n    }\n\n    /**\n     * Any authenticated inbound frame proves the path is alive, not just\n     * heartbeats \u2014 a busy conversation must never trip the watchdog.\n     */\n    _noteInboundActivity() {\n        this._lastInboundAt = Date.now();\n        // Any frame at all answers the question a probe was asking.\n        this._livenessProbeAt = 0;\n        // Liveness can only judge a peer it has actually heard from. Until the\n        // first frame arrives there is no baseline, and \"not started yet\" must\n        // never be mistaken for \"died\".\n        this._livenessArmed = true;\n    }\n\n    _startLivenessWatchdog() {\n        this._stopLivenessWatchdog();\n        this._livenessTimer = setInterval(() => {\n            try {\n                this._checkLiveness();\n            } catch (error) {\n                this._secureLog('error', '\u274C Liveness check failed', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            }\n        }, EnhancedSecureWebRTCManager.TIMEOUTS.LIVENESS_CHECK_INTERVAL);\n        this._trackActiveTimer(this._livenessTimer);\n    }\n\n    _stopLivenessWatchdog() {\n        if (this._livenessTimer) {\n            clearInterval(this._livenessTimer);\n            this._activeTimers?.delete(this._livenessTimer);\n            this._livenessTimer = null;\n        }\n    }\n\n    /**\n     * A data channel keeps reporting readyState === 'open' long after the\n     * underlying path has died (the classic Wi-Fi \u2192 LTE switch: nothing closes,\n     * nothing errors, packets simply stop). Nothing tells us \u2014 so we ask.\n     *\n     * Two steps, because silence alone is not evidence of death. A backgrounded\n     * tab has its timers throttled to roughly one tick per minute (frozen\n     * outright on iOS), so a healthy peer routinely goes quiet. What a healthy\n     * peer cannot do is fail to ANSWER: inbound message handling is not throttled\n     * the way timers are. So after a period of silence we send a probe, and only\n     * an unanswered probe is treated as a dead path.\n     */\n    _checkLiveness() {\n        if (!this.isVerified) return;\n        if (this._reconnect.phase !== 'idle') return;         // already recovering\n        if (this.dataChannel?.readyState !== 'open') return;   // handled by onclose\n        if (!this._lastInboundAt) return;\n        if (!this._livenessArmed) return;                      // peer never heard from yet\n\n        const T = EnhancedSecureWebRTCManager.TIMEOUTS;\n        const now = Date.now();\n\n        // The discriminator that makes silence interpretable.\n        //\n        // An unanswered probe does NOT mean the peer is gone. A browser fully\n        // freezes a backgrounded tab \u2014 iOS Safari almost immediately, Chrome after\n        // a few minutes \u2014 and a frozen tab runs no JavaScript at all, so it cannot\n        // answer anything. (An earlier version of this assumed inbound message\n        // handling always runs; that is only true for timer throttling, not for\n        // freezing, and the difference was tearing down healthy sessions whenever\n        // the peer's phone went to sleep.)\n        //\n        // ICE consent checks are the signal that survives, because the browser\n        // runs them in its network stack rather than on the page's thread. So a\n        // 'connected' ICE state means the peer's machine is still answering at the\n        // transport level, and the silence above it is a sleeping tab. Messages\n        // sent meanwhile are not lost \u2014 SCTP delivers them when it wakes.\n        const iceHealthy = this.peerConnection?.connectionState === 'connected';\n\n        // While ICE is connected the answer changes nothing \u2014 a silent peer is a\n        // sleeping tab and is left alone either way \u2014 so don't ask. Probing here\n        // was pure traffic and pure log noise, once per cycle for as long as the\n        // peer's phone stayed asleep. Liveness is therefore only an accelerator\n        // for an ICE state that already looks wrong.\n        if (iceHealthy) {\n            this._livenessProbeAt = 0;\n            return;\n        }\n\n        // A probe is outstanding \u2014 has it gone unanswered long enough?\n        if (this._livenessProbeAt) {\n            if (now - this._livenessProbeAt < T.LIVENESS_PROBE_TIMEOUT) return;\n            this._livenessProbeAt = 0;\n            this._secureLog('warn', '\u26A0\uFE0F liveness probe unanswered and ICE is not connected \u2014 path presumed dead');\n            this._onPathLost('liveness_probe_timeout');\n            return;\n        }\n\n        if (now - this._lastInboundAt < T.LIVENESS_PROBE_AFTER) return;\n\n        this._livenessProbeAt = now;\n        const delivered = this._sendHeartbeat(false);\n        this._secureLog('info', '\uD83D\uDD04 peer silent and ICE degraded, probing', {\n            silentForMs: now - this._lastInboundAt,\n            connectionState: this.peerConnection?.connectionState,\n            probeSent: delivered\n        });\n    }\n\n    // ============================================\n    // SESSION RECOVERY (serverless, in-band)\n    // ============================================\n    //\n    // What survives an ICE restart and what does not:\n    //\n    //   ICE restart replaces the candidate pair \u2014 i.e. the network path. The\n    //   DTLS handshake, the negotiated keys and the SCTP association that the\n    //   data channel rides on are all layered ABOVE ICE and survive untouched.\n    //   That is why a restart can recover a Wi-Fi \u2192 LTE switch without a new\n    //   handshake, without a new SAS, and without losing message history.\n    //\n    //   The restart SDP travels over that same still-established data channel,\n    //   so it inherits the channel's authentication: an attacker who cannot\n    //   already decrypt the session cannot inject one. No signalling server is\n    //   involved at any point.\n    //\n    //   The one thing a restart must never do is change peer identity, so the\n    //   DTLS fingerprint in the incoming SDP is checked against the fingerprint\n    //   of the live session before anything is applied. A mismatch is treated\n    //   as an attack and aborts recovery rather than re-keying to a stranger.\n    //\n    // What it cannot recover: a closed data channel (SCTP gone) or a path so\n    // dead that the restart offer itself cannot be delivered. Those fall\n    // through to _giveUpAutoReconnect and require a fresh, manually exchanged\n    // handshake \u2014 the existing offer/answer flow.\n\n    isReconnecting() {\n        return this._reconnect.phase !== 'idle' && this._reconnect.phase !== 'exhausted';\n    }\n\n\n    /**\n     * Device-level signals that a path is worth re-checking right now, instead of\n     * waiting out a backoff: this device regained network, or a mobile browser\n     * brought the tab back to the foreground (where it may have frozen the\n     * connection while backgrounded).\n     */\n    _setupRecoveryLifecycleListeners() {\n        if (typeof window === 'undefined' || this._recoveryLifecycleBound) return;\n        this._recoveryLifecycleBound = true;\n\n        this._onDeviceOnline = () => {\n            if (!this.isVerified) return;\n            if (this.isReconnecting()) {\n                // Skip the remaining backoff \u2014 the reason for it just went away.\n                this._secureLog('info', '\uD83D\uDD04 Device back online \u2014 retrying immediately');\n                this._attemptIceRestart();\n            } else {\n                // We may have missed the drop entirely while offline.\n                this._checkLiveness();\n            }\n        };\n        this._onVisibilityRestored = () => {\n            if (typeof document === 'undefined' || document.visibilityState !== 'visible') return;\n            if (!this.isVerified) return;\n\n            // A backgrounded tab gets its timers frozen, so on return the liveness\n            // clock reads as a long silence that never actually happened, and\n            // connectionState can still be catching up. Judging the connection on\n            // either of those declares a perfectly healthy session broken \u2014 which\n            // then blocks sending, while messages keep arriving, because the\n            // transport was fine all along.\n            //\n            // So re-baseline and ASK instead of concluding: a probe settles it\n            // within seconds, and a genuinely dead path still gets caught.\n            this._lastInboundAt = Date.now();\n            this._livenessProbeAt = 0;\n\n            if (this._reconnect.phase === 'idle' && this.dataChannel?.readyState === 'open') {\n                this._livenessProbeAt = Date.now();\n                this._sendHeartbeat(false);\n                this._secureLog('info', '\uD83D\uDD04 returned to foreground, probing peer');\n            }\n        };\n\n        window.addEventListener('online', this._onDeviceOnline);\n        if (typeof document !== 'undefined') {\n            document.addEventListener('visibilitychange', this._onVisibilityRestored);\n        }\n    }\n\n    _teardownRecoveryLifecycleListeners() {\n        if (!this._recoveryLifecycleBound || typeof window === 'undefined') return;\n        this._recoveryLifecycleBound = false;\n        if (this._onDeviceOnline) window.removeEventListener('online', this._onDeviceOnline);\n        if (this._onVisibilityRestored && typeof document !== 'undefined') {\n            document.removeEventListener('visibilitychange', this._onVisibilityRestored);\n        }\n        this._onDeviceOnline = null;\n        this._onVisibilityRestored = null;\n    }\n\n    _resetReconnectState() {\n        const r = this._reconnect;\n        if (!r) return;   // teardown can run before the constructor finishes\n        if (r.graceTimer) { clearTimeout(r.graceTimer); this._activeTimers?.delete(r.graceTimer); }\n        if (r.retryTimer) { clearTimeout(r.retryTimer); this._activeTimers?.delete(r.retryTimer); }\n        if (r.restartTimer) { clearTimeout(r.restartTimer); this._activeTimers?.delete(r.restartTimer); }\n        r.graceTimer = null;\n        r.retryTimer = null;\n        r.restartTimer = null;\n        r.phase = 'idle';\n        r.attempts = 0;\n        r.startedAt = 0;\n        r.inFlightAt = 0;\n        r.barrenFailures = 0;\n        r.pendingRole = null;\n    }\n\n    /**\n     * ICE reported 'disconnected'. This is usually transient \u2014 the browser's own\n     * consent freshness checks recover it within a couple of seconds \u2014 so hold a\n     * grace window before spending a restart, but tell the UI right away so the\n     * user sees \"reconnecting\" rather than a silently stalled chat.\n     */\n    _onPathDegraded(reason = 'ice_disconnected') {\n        if (!this.isVerified) return;\n        if (this._reconnect.phase !== 'idle') return;\n\n        this._reconnect.phase = 'grace';\n        this._reconnect.startedAt = Date.now();\n        this._secureLog('info', '\uD83D\uDD04 path degraded, holding grace window', { reason });\n        this.onStatusChange('reconnecting');\n\n        this._reconnect.graceTimer = setTimeout(() => {\n            this._reconnect.graceTimer = null;\n            if (this.peerConnection?.connectionState === 'connected') {\n                this._onPathRecovered();\n                return;\n            }\n            this._attemptIceRestart();\n        }, EnhancedSecureWebRTCManager.TIMEOUTS.ICE_DISCONNECT_GRACE);\n        this._trackActiveTimer(this._reconnect.graceTimer);\n    }\n\n    /** ICE failed outright, or the peer went silent \u2014 restart without waiting. */\n    _onPathLost(reason = 'ice_failed') {\n        if (!this.isVerified) return;\n        if (this._reconnect.phase === 'restarting' || this._reconnect.phase === 'exhausted') return;\n\n        if (this._reconnect.phase === 'idle') {\n            this._reconnect.startedAt = Date.now();\n            this.onStatusChange('reconnecting');\n        }\n        if (this._reconnect.graceTimer) {\n            clearTimeout(this._reconnect.graceTimer);\n            this._activeTimers?.delete(this._reconnect.graceTimer);\n            this._reconnect.graceTimer = null;\n        }\n        this._secureLog('info', '\uD83D\uDD04 path lost, restarting ICE', { reason });\n        this._attemptIceRestart();\n    }\n\n    /**\n     * A restart is only worth trying while the ICE agent can still produce\n     * candidates. After the device changes network, a PeerConnection is often\n     * left bound to interfaces that no longer exist: every STUN binding and TURN\n     * allocation times out, gathering yields nothing, and each restart fails with\n     * zero candidate pairs. restartIce() does not rebind it \u2014 only a brand-new\n     * PeerConnection will, and building one needs a whole new handshake.\n     *\n     * Recognising that early matters: retrying it for the full two-minute\n     * deadline is two minutes of the user watching nothing happen, when the way\n     * out was available immediately.\n     */\n    _noteIceFailureDiagnostics(diagnostics) {\n        if (!this.isReconnecting()) return;\n        if (!diagnostics) return;\n\n        if (diagnostics.pairCount > 0) {\n            this._reconnect.barrenFailures = 0;\n            return;\n        }\n\n        this._reconnect.barrenFailures = (this._reconnect.barrenFailures || 0) + 1;\n        if (this._reconnect.barrenFailures < EnhancedSecureWebRTCManager.LIMITS.MAX_BARREN_ICE_FAILURES) return;\n\n        this._secureLog('warn', '\u26A0\uFE0F ICE cannot gather any usable candidate \u2014 this connection is bound to a network that is gone', {\n            consecutiveBarrenFailures: this._reconnect.barrenFailures\n        });\n        this._giveUpAutoReconnect('ice_agent_unusable');\n    }\n\n    /**\n     * Path is back. Same keys, same verification, same history \u2014 carry on.\n     * Returns true if it actually handled a recovery (and therefore already\n     * emitted 'connected'), so the caller does not emit it twice.\n     */\n    _onPathRecovered() {\n        const wasRecovering = this.isReconnecting();\n        this._resetReconnectState();\n        this._lastInboundAt = Date.now();\n        this._livenessProbeAt = 0;\n\n        if (!wasRecovering) return false;\n\n        this._secureLog('info', '\uD83D\uDD04 connection recovered, session preserved');\n        this.onStatusChange('connected');\n        // Anything the user sent into the dead channel goes out now.\n        this.processMessageQueue();\n        try {\n            this._dispatchAppEvent?.(new CustomEvent('connection-recovered', {\n                detail: { timestamp: Date.now() }\n            }));\n        } catch (_) { /* non-DOM host */ }\n        return true;\n    }\n\n    /**\n     * Only the side that created the original offer drives restarts. Both sides\n     * offering at once produces glare, and with no signalling server there is no\n     * referee to break the tie \u2014 so the answerer asks instead of acting.\n     */\n    async _attemptIceRestart() {\n        if (!this.isVerified || !this.peerConnection) return;\n\n        // Never renegotiate a connection that is actually up. Recovery can be\n        // entered on a stale reading (a tab thawing out of the background is the\n        // common one), and restarting from here would break a working session and\n        // strand it in \"reconnecting\" \u2014 where sending is blocked even though\n        // messages keep arriving.\n        if (this.peerConnection.connectionState === 'connected') {\n            this._onPathRecovered();\n            return;\n        }\n\n        const r = this._reconnect;\n\n        // While THIS device has no network at all (tunnel, flight mode), a restart\n        // cannot possibly succeed and the give-up deadline must not burn down \u2014\n        // otherwise a five-minute underground ride costs the user their session.\n        // Hold the deadline open and wait; the 'online' event retries immediately.\n        if (typeof navigator !== 'undefined' && navigator.onLine === false) {\n            r.phase = 'waiting';\n            r.startedAt = Date.now();\n            this._secureLog('debug', '\uD83D\uDD04 Device offline \u2014 holding recovery open');\n            this._scheduleReconnectRetry();\n            return;\n        }\n\n        const elapsed = Date.now() - (r.startedAt || Date.now());\n        if (elapsed > EnhancedSecureWebRTCManager.TIMEOUTS.RECONNECT_MAX_DURATION) {\n            this._giveUpAutoReconnect('timeout');\n            return;\n        }\n\n        // A restart round-trip (offer \u2192 gather \u2192 answer \u2192 gather) takes seconds,\n        // far longer than the head of the backoff. Launching another one on top\n        // replaces the local description out from under the attempt already in\n        // flight, so each try cancels the last and recovery never converges. Wait\n        // the round-trip out before spending another attempt.\n        if (r.inFlightAt && Date.now() - r.inFlightAt < EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_TIMEOUT) {\n            this._scheduleReconnectRetry();\n            return;\n        }\n\n        // The restart SDP rides the data channel: if that is gone, SCTP is gone\n        // and no restart can help.\n        if (this.dataChannel?.readyState !== 'open') {\n            this._giveUpAutoReconnect('data_channel_closed');\n            return;\n        }\n\n        // The decisive check, and it holds for BOTH roles.\n        //\n        // Every route out of a broken path runs over the data channel: the\n        // offerer's restart offer, the answerer's request for one, the answer\n        // coming back. So recovery is only possible while that channel still\n        // carries something. If the peer has been completely silent since\n        // recovery began \u2014 no heartbeat, no ack, no reply to any attempt \u2014 then\n        // it does not, in either direction.\n        //\n        // This is also what the answerer needs: it cannot renegotiate on its own\n        // (only the offerer may create the offer), so without a working channel\n        // it has no move at all and would otherwise sit out the full deadline\n        // sending requests nobody can receive.\n        const silentFor = Date.now() - Math.max(this._lastInboundAt || 0, r.startedAt);\n        if (r.attempts >= 2 && silentFor > EnhancedSecureWebRTCManager.TIMEOUTS.RECOVERY_SILENCE_LIMIT) {\n            this._secureLog('warn', '\u26A0\uFE0F nothing has reached us since the drop \u2014 the channel cannot carry a renegotiation', {\n                silentForMs: silentFor,\n                attempts: r.attempts\n            });\n            this._giveUpAutoReconnect('no_signalling_path');\n            return;\n        }\n\n        r.phase = 'restarting';\n        r.attempts += 1;\n        r.inFlightAt = Date.now();\n        this._secureLog('info', '\uD83D\uDD04 ICE restart attempt', {\n            attempt: r.attempts,\n            role: this.isInitiator ? 'offerer' : 'answerer'\n        });\n\n        try {\n            if (this.isInitiator) {\n                await this._sendIceRestartOffer();\n            } else {\n                await this.sendSystemMessage({\n                    type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_REQUEST,\n                    timestamp: Date.now()\n                });\n            }\n        } catch (error) {\n            this._secureLog('warn', '\u26A0\uFE0F ICE restart attempt failed to send', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        }\n\n        // Arm the retry regardless: if the round-trip completes, the\n        // 'connected' transition clears it via _onPathRecovered.\n        this._scheduleReconnectRetry();\n    }\n\n    _scheduleReconnectRetry() {\n        const r = this._reconnect;\n        if (r.retryTimer) {\n            clearTimeout(r.retryTimer);\n            this._activeTimers?.delete(r.retryTimer);\n        }\n        const backoff = EnhancedSecureWebRTCManager.RECONNECT_BACKOFF;\n        // Clamp at both ends: a retry can be scheduled before any attempt has been\n        // counted (the device-offline hold), and a negative index would yield an\n        // undefined delay \u2014 i.e. a 0 ms timer spinning as fast as the event loop.\n        const delay = backoff[Math.min(Math.max(r.attempts - 1, 0), backoff.length - 1)];\n\n        r.retryTimer = setTimeout(() => {\n            r.retryTimer = null;\n            if (this.peerConnection?.connectionState === 'connected') {\n                this._onPathRecovered();\n                return;\n            }\n            this._attemptIceRestart();\n        }, delay);\n        this._trackActiveTimer(r.retryTimer);\n    }\n\n    /**\n     * Hand the peer connection the ICE server list as it is NOW.\n     *\n     * A connection keeps the servers it was built with, and our relay's credential\n     * expires after a day (src/network/turnCredentials.js renews it in place on the\n     * shared list). A restart gathers new relay candidates, so it must present the\n     * current credential or a long-lived session would lose its relay path exactly\n     * when it needs one. Best effort: an engine that refuses the update restarts\n     * with what it had.\n     */\n    _applyCurrentIceServers(pc) {\n        try {\n            if (!pc || typeof pc.getConfiguration !== 'function' || typeof pc.setConfiguration !== 'function') return;\n            const servers = this._config?.webrtc?.iceServers;\n            if (!Array.isArray(servers) || servers.length === 0) return;\n            pc.setConfiguration({ ...pc.getConfiguration(), iceServers: servers });\n        } catch (error) {\n            this._secureLog('warn', 'Could not refresh ICE servers before restart', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        }\n    }\n\n    async _sendIceRestartOffer() {\n        const pc = this.peerConnection;\n        if (!pc) return;\n        this._applyCurrentIceServers(pc);\n\n        // Rolling back to 'stable' first: a previous restart round-trip may have\n        // left a local offer pending that was never answered.\n        if (pc.signalingState === 'have-local-offer') {\n            try { await pc.setLocalDescription({ type: 'rollback' }); } catch (_) { /* Safari */ }\n        }\n\n        const offer = await pc.createOffer({ iceRestart: true });\n        await pc.setLocalDescription(offer);\n        await this.waitForIceGathering(\n            EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_GATHERING,\n            // Recovery keeps a hard 4 s budget: a restart round-trip has to fit\n            // inside ICE_RESTART_TIMEOUT, so the extra patience the handshake\n            // gets would push the whole cycle past its own deadline.\n            EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_GATHERING\n        );\n\n        await this.sendSystemMessage({\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_OFFER,\n            sdp: pc.localDescription.sdp,\n            timestamp: Date.now()\n        });\n        this._secureLog('debug', '\uD83D\uDD04 ICE restart offer sent');\n    }\n\n    /**\n     * The fingerprint of the live, already-SAS-verified session. Recovery must\n     * re-point the path at the SAME peer, never re-key to a new one.\n     */\n    _currentRemoteDtlsFingerprint() {\n        const sdp = this.peerConnection?.currentRemoteDescription?.sdp\n            || this.peerConnection?.remoteDescription?.sdp;\n        if (!sdp) return null;\n        try {\n            return this._extractDTLSFingerprintFromSDP(sdp);\n        } catch (_) {\n            return null;\n        }\n    }\n\n    async _assertSameRemoteIdentity(sdp, context) {\n        const expected = this._currentRemoteDtlsFingerprint();\n        if (!expected) {\n            // No baseline to compare against \u2014 refuse rather than accept blindly.\n            throw new Error(`Cannot verify peer identity for ${context}`);\n        }\n        const received = this._extractDTLSFingerprintFromSDP(sdp);\n        await this._validateDTLSFingerprint(received, expected, context);\n    }\n\n    /** Inbound recovery signalling, routed from processMessage. */\n    async _handleIceRestartSignal(type, data) {\n        const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n        const pc = this.peerConnection;\n        if (!pc) return;\n\n        this._noteInboundActivity();\n\n        switch (type) {\n            case T.ICE_RESTART_REQUEST: {\n                // Peer noticed the break first. Only the offerer may act on it.\n                if (!this.isInitiator) return;\n                if (this._reconnect.phase === 'idle') {\n                    this._reconnect.startedAt = Date.now();\n                    this._reconnect.phase = 'restarting';\n                    this.onStatusChange('reconnecting');\n                }\n                await this._sendIceRestartOffer();\n                return;\n            }\n\n            case T.ICE_RESTART_OFFER: {\n                if (!data.sdp) return;\n                // Identity check BEFORE touching the peer connection.\n                await this._assertSameRemoteIdentity(data.sdp, 'ice_restart_offer');\n\n                if (this._reconnect.phase === 'idle') {\n                    this._reconnect.startedAt = Date.now();\n                    this.onStatusChange('reconnecting');\n                }\n                this._reconnect.phase = 'restarting';\n\n                this._applyCurrentIceServers(pc);\n                await pc.setRemoteDescription({ type: 'offer', sdp: data.sdp });\n                const answer = await pc.createAnswer();\n                await pc.setLocalDescription(answer);\n                await this.waitForIceGathering(\n                    EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_GATHERING,\n                    // Recovery keeps a hard 4 s budget: a restart round-trip has to\n                    // fit inside ICE_RESTART_TIMEOUT, so the extra patience the\n                    // handshake gets would push the cycle past its own deadline.\n                    EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_GATHERING\n                );\n\n                await this.sendSystemMessage({\n                    type: T.ICE_RESTART_ANSWER,\n                    sdp: pc.localDescription.sdp,\n                    timestamp: Date.now()\n                });\n                this._secureLog('debug', '\uD83D\uDD04 ICE restart answer sent');\n                return;\n            }\n\n            case T.ICE_RESTART_ANSWER: {\n                if (!data.sdp) return;\n                if (pc.signalingState !== 'have-local-offer') {\n                    this._secureLog('warn', '\u26A0\uFE0F Ignoring restart answer in unexpected state', {\n                        signalingState: pc.signalingState\n                    });\n                    return;\n                }\n                await this._assertSameRemoteIdentity(data.sdp, 'ice_restart_answer');\n                await pc.setRemoteDescription({ type: 'answer', sdp: data.sdp });\n                // Round-trip complete: the next attempt (if the pair still fails\n                // to connect) may start without waiting out the full budget.\n                this._reconnect.inFlightAt = 0;\n                this._secureLog('debug', '\uD83D\uDD04 ICE restart answer applied');\n                return;\n            }\n\n            default:\n        }\n    }\n\n    /**\n     * Automatic recovery is out of road, and there is no fallback: with no\n     * signalling server, a path that cannot carry a renegotiation cannot be\n     * rebuilt without a fresh, manually exchanged handshake.\n     *\n     * So the session ends here rather than lingering half-alive. Everything goes\n     * with it \u2014 keys, queued messages, transcript \u2014 which is also the safer\n     * default: a conversation whose transport is gone should not leave its\n     * plaintext sitting in a tab the user has stopped watching.\n     */\n    _giveUpAutoReconnect(reason) {\n        this._resetReconnectState();\n        this._reconnect.phase = 'exhausted';\n        this._teardownRecoveryLifecycleListeners?.();\n        this._secureLog('warn', '\u26A0\uFE0F automatic reconnection exhausted \u2014 ending session', { reason });\n\n        if (!this.reconnectionFailedNotificationSent) {\n            this.reconnectionFailedNotificationSent = true;\n            this.deliverMessageToUI(\n                'Could not restore the connection. This chat is being closed and its data wiped \u2014 start a new one to continue.',\n                'system'\n            );\n        }\n\n        // 'recovery_failed' is distinct from a plain 'disconnected': the UI takes\n        // it as the instruction to tear the whole conversation down, not merely\n        // to show a dropped-connection state.\n        this.onStatusChange('recovery_failed');\n        this._clearVerificationStates();\n    }\n\n    /**\n     *   Stop all active timers and cleanup scheduler\n     */\n    _stopAllTimers() {\n        this._secureLog('info', 'Stopping all timers and cleanup scheduler');\n        \n        // Stop maintenance scheduler\n        if (this._maintenanceScheduler) {\n            clearInterval(this._maintenanceScheduler);\n            this._maintenanceScheduler = null;\n        }\n        \n        // Stop heartbeat + liveness watchdog, and abandon any in-flight session\n        // recovery. Optional-called: a throw here would skip the bulk\n        // _activeTimers sweep below and leak every remaining timer.\n        this.stopHeartbeat?.();\n        this._resetReconnectState?.();\n\n        // Clear all timer references\n        if (this._activeTimers) {\n            this._activeTimers.forEach(timer => {\n                if (timer) {\n                    clearInterval(timer);\n                    clearTimeout(timer);\n                }\n            });\n            this._activeTimers.clear();\n        }\n\n        if (this._fileTransferInitRetryTimers) {\n            this._fileTransferInitRetryTimers.clear();\n        }\n        this._logCleanupInterval = null;\n        \n        this._secureLog('info', 'All timers stopped successfully');\n    }\n\n\n    /**\n     * @param {number} [timeoutMs] - gathering budget. Recovery uses a much shorter\n     *   one than the initial handshake: a restart round-trip must finish well\n     *   inside the retry backoff, or the next attempt cancels the one in flight.\n     */\n    /**\n     * Wait for ICE gathering, but do not confuse \"finished\" with \"usable\".\n     *\n     * Gathering only reaches 'complete' once EVERY configured STUN/TURN server has\n     * answered or timed out. On a network that blocks them \u2014 a VPN, a captive\n     * portal, an interface the browser cannot route from \u2014 that never happens\n     * inside the budget, even though host candidates are available immediately and\n     * are enough to connect on a LAN. The old code waited a flat 10 s and then\n     * hard-failed the whole handshake if the SDP happened to be empty at that\n     * instant, which made success a race: the same device would fail one attempt\n     * and connect on the next with gathering still in progress.\n     *\n     * So: return as soon as gathering completes, and otherwise keep waiting past\n     * the soft deadline only while there is still nothing to export. `hardMs`\n     * bounds that extra patience so a truly dead network still fails, just later\n     * and for a real reason.\n     */\n    waitForIceGathering(\n        timeoutMs = EnhancedSecureWebRTCManager.TIMEOUTS.ICE_GATHERING_TIMEOUT,\n        hardMs = EnhancedSecureWebRTCManager.TIMEOUTS.ICE_GATHERING_HARD_TIMEOUT\n    ) {\n        return new Promise((resolve) => {\n            const pc = this.peerConnection;\n            if (!pc) {\n                resolve(false);\n                return;\n            }\n            if (pc.iceGatheringState === 'complete') {\n                resolve(true);\n                return;\n            }\n\n            let settled = false;\n            let softTimer = null;\n            let hardTimer = null;\n\n            // Runs inside a timer callback, where a throw has nowhere to go and\n            // would leave the promise pending forever \u2014 i.e. a hung handshake.\n            // \"Cannot tell\" must therefore read as \"nothing to export\", which\n            // falls through to the hard deadline rather than resolving early.\n            const hasCandidates = () => {\n                try {\n                    const sdp = this.peerConnection?.localDescription?.sdp;\n                    if (!sdp) return false;\n                    return this._summarizeIceCandidatesInSDP(sdp).total > 0;\n                } catch (_) {\n                    return false;\n                }\n            };\n\n            const finish = (completed) => {\n                if (settled) return;\n                settled = true;\n                if (softTimer) { clearTimeout(softTimer); this._untrackActiveTimer?.(softTimer); }\n                if (hardTimer) { clearTimeout(hardTimer); this._untrackActiveTimer?.(hardTimer); }\n                try { pc.removeEventListener('icegatheringstatechange', onStateChange); } catch (_) {}\n                resolve(completed);\n            };\n\n            const onStateChange = () => {\n                if (this.peerConnection?.iceGatheringState === 'complete') {\n                    finish(true);\n                }\n            };\n\n            pc.addEventListener('icegatheringstatechange', onStateChange);\n\n            // Soft deadline: gathering is still running, but if we already have\n            // something exportable there is no reason to keep the user waiting.\n            softTimer = setTimeout(() => {\n                if (hasCandidates()) {\n                    finish(false);\n                }\n                // Otherwise fall through to the hard deadline \u2014 an empty SDP is\n                // exactly the case that used to be reported as a fatal error.\n            }, timeoutMs);\n            this._trackActiveTimer?.(softTimer);\n\n            hardTimer = setTimeout(() => finish(false), Math.max(hardMs, timeoutMs));\n            this._trackActiveTimer?.(hardTimer);\n        });\n    }\n\n    retryConnection() {\n        this._secureLog('info', 'Retrying connection', {\n            attempt: this.connectionAttempts,\n            maxAttempts: this.maxConnectionAttempts\n        });\n        this.onStatusChange('retrying');\n    }\n\n    isConnected() {\n        const hasDataChannel = !!this.dataChannel;\n        const dataChannelState = this.dataChannel?.readyState;\n        const isDataChannelOpen = dataChannelState === 'open';\n        const isVerified = this.isVerified;\n        const connectionState = this.peerConnection?.connectionState;\n        \n        return this.dataChannel && this.dataChannel.readyState === 'open' && this.isVerified;\n    }\n\n    getConnectionInfo() {\n        return {\n            fingerprint: this.keyFingerprint,\n            isConnected: this.isConnected(),\n            isVerified: this.isVerified,\n            connectionState: this.peerConnection?.connectionState,\n            iceConnectionState: this.peerConnection?.iceConnectionState,\n            verificationCode: this.verificationCode\n        };\n    }\n\n    handleUnexpectedDisconnect() {\n        this.sendDisconnectNotification();\n        this.isVerified = false;\n        \n        // Ensure disconnect notification wasn't already sent\n        if (!this.disconnectNotificationSent) {\n            this.disconnectNotificationSent = true;\n            this.deliverMessageToUI('\uD83D\uDD0C Connection lost. Attempting to reconnect...', 'system');\n        }\n        \n        // Cleanup file transfer system on unexpected disconnect\n        if (this.fileTransferSystem) {\n            this.fileTransferSystem.cleanup();\n            this.fileTransferSystem = null;\n        }\n        \n        this._dispatchAppEvent?.(new CustomEvent('peer-disconnect', {\n            detail: { \n                reason: 'connection_lost',\n                timestamp: Date.now()\n            }\n        }));\n\n    }\n    \n    sendDisconnectNotification() {\n        try {\n            if (this.dataChannel && this.dataChannel.readyState === 'open') {\n                const notification = {\n                    type: 'peer_disconnect',\n                    timestamp: Date.now(),\n                    reason: this.intentionalDisconnect ? 'user_disconnect' : 'connection_lost'\n                };\n\n                for (let i = 0; i < 3; i++) {\n                    try {\n                        this.dataChannel.send(JSON.stringify(notification));\n                        window.EnhancedSecureCryptoUtils.secureLog.log('info', 'Disconnect notification sent', {\n                            reason: notification.reason,\n                            attempt: i + 1\n                        });\n                        break;\n                    } catch (sendError) {\n                        if (i === 2) { \n                            window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Failed to send disconnect notification', {\n                                error: sendError.message\n                            });\n                        }\n                    }\n                }\n            }\n        } catch (error) {\n            window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Could not send disconnect notification', {\n                error: error.message\n            });\n        }\n    }\n    \n    /**\n     * Manual \"try again\" from the UI. Restarts the automatic recovery cycle from\n     * scratch (fresh attempt counter and deadline) as long as the data channel is\n     * still there to carry the renegotiation.\n     */\n    attemptReconnection() {\n        if (!this.isVerified || this.dataChannel?.readyState !== 'open') {\n            if (!this.reconnectionFailedNotificationSent) {\n                this.reconnectionFailedNotificationSent = true;\n                this.deliverMessageToUI('Unable to reconnect. A new connection is required.', 'system');\n            }\n            return false;\n        }\n\n        this._resetReconnectState();\n        this.reconnectionFailedNotificationSent = false;\n        this._reconnect.startedAt = Date.now();\n        this.onStatusChange('reconnecting');\n        this._attemptIceRestart();\n        return true;\n    }\n    \n    handlePeerDisconnectNotification(data) {\n        const reason = data.reason || 'unknown';\n        const reasonText = reason === 'user_disconnect' ? 'manually disconnected.' : 'connection lost.';\n        \n        // Ensure peer-disconnect notification wasn't already sent\n        if (!this.peerDisconnectNotificationSent) {\n            this.peerDisconnectNotificationSent = true;\n            this.deliverMessageToUI(`Peer ${reasonText}`, 'system');\n        }\n        \n        this.onStatusChange('peer_disconnected');\n \n        this.intentionalDisconnect = false;\n        this.isVerified = false;\n        this.stopHeartbeat();\n        \n        this.onKeyExchange(''); \n        this.onVerificationRequired(''); \n\n        this._dispatchAppEvent?.(new CustomEvent('peer-disconnect', {\n            detail: { \n                reason: reason,\n                timestamp: Date.now()\n            }\n        }));\n\n        if (!this._peerDisconnectCleanupTimer) {\n            this._peerDisconnectCleanupTimer = this._trackActiveTimer(setTimeout(() => {\n                const timer = this._peerDisconnectCleanupTimer;\n                this._peerDisconnectCleanupTimer = null;\n                this._untrackActiveTimer(timer);\n                if (this._sessionAlive === false) return;\n                this.disconnect();\n            }, 2000));\n        }\n        \n        window.EnhancedSecureCryptoUtils.secureLog.log('info', 'Peer disconnect notification processed', {\n            reason: reason\n        });\n    }\n    \n    /**\n     *   Secure disconnect with complete memory cleanup\n     */\n    disconnect() {\n        try {\n            this._sessionAlive = false;\n\n            // End any active call and fully release the persistent mic/camera capture\n            // (kept alive between calls; the session is ending now).\n            try { this._stopAdaptation?.(); } catch (_) {}\n            try { this._stopLocalMediaPermanently?.(); } catch (_) {}\n            this._callAudioSender = null;\n            this._callVideoSender = null;\n            // A session that is ending is no longer a leg of anything. Clearing\n            // the group context matters most: it is what allows an inbound offer\n            // to be answered without asking, and it must not survive the session\n            // it was granted for.\n            this._callGroupContext = null;\n            this._externalMediaStream = null;\n            this._callStateListeners?.clear?.();\n\n            // Preserve the explicit-disconnect notification flow before channels are closed.\n            this.intentionalDisconnect = true;\n            window.EnhancedSecureCryptoUtils.secureLog.log('info', 'Starting intentional disconnect');\n            this.sendDisconnectNotification();\n\n            // Stop every timer-backed subsystem first.\n            this._teardownRecoveryLifecycleListeners?.();\n            this._stopAllTimers();\n            this._peerDisconnectCleanupTimer = null;\n            this.stopHeartbeat();\n            this.stopFakeTrafficGeneration();\n            for (const timer of this.decoyTimers.entries()) {\n                clearTimeout(timer[1]);\n            }\n            this.decoyTimers.clear();\n\n            // Pending file transfers must not survive a disconnect.\n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n            }\n\n            // Close auxiliary channels alongside the primary channel.\n            for (const channel of this.decoyChannels.values()) {\n                if (channel.readyState === 'open') channel.close();\n            }\n            this.decoyChannels.clear();\n            if (this.heartbeatChannel) {\n                this.heartbeatChannel.close();\n                this.heartbeatChannel = null;\n            }\n\n            // Reset transport-independent state.\n            this.isVerified = false;\n            this.processedMessageIds.clear();\n            this.messageCounter = 0;\n            this.packetBuffer.clear();\n            this.chunkQueue = [];\n\n            // Preserve all key/material cleanup from the former implementations.\n            this._wipeEphemeralKeys();\n            this._hardWipeOldKeys();\n            this._secureCleanupCryptographicMaterials();\n            this.keyVersions.clear();\n            this.oldKeys.clear();\n            this.currentKeyVersion = 0;\n            this.lastKeyRotation = Date.now();\n            this.sequenceNumber = 0;\n            this.expectedSequenceNumber = 0;\n            this.replayWindow.clear();\n            this._clearVerificationStates();\n\n            this.securityFeatures = {\n                hasEncryption: true,\n                hasECDH: true,\n                hasECDSA: true,\n                hasMutualAuth: true,\n                hasMetadataProtection: true,\n                hasEnhancedReplayProtection: true,\n                hasNonExtractableKeys: true,\n                hasRateLimiting: true,\n                hasEnhancedValidation: true,\n                hasPFS: true\n            };\n\n            // Close live transports, then release their listeners/references.\n            if (this.dataChannel) {\n                this.dataChannel.close();\n                this.dataChannel.onopen = null;\n                this.dataChannel.onclose = null;\n                this.dataChannel.onmessage = null;\n                this.dataChannel.onerror = null;\n                this.dataChannel = null;\n            }\n            if (this.peerConnection) {\n                this.peerConnection.close();\n                this.peerConnection.onconnectionstatechange = null;\n                this.peerConnection.ondatachannel = null;\n                this.peerConnection = null;\n            }\n\n            if (this.messageQueue && this.messageQueue.length > 0) {\n                this.messageQueue.forEach((message, index) => {\n                    this._secureWipeMemory(message, `messageQueue[${index}]`);\n                });\n                this.messageQueue = [];\n            }\n\n            this._forceGarbageCollection().catch(error => {\n                this._secureLog('error', 'Cleanup failed during disconnect', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n\n            this._dispatchAppEvent?.(new CustomEvent('peer-disconnect', {\n                detail: {\n                    reason: 'user_disconnect',\n                    timestamp: Date.now()\n                }\n            }));\n            this._dispatchAppEvent?.(new CustomEvent('connection-cleaned', {\n                detail: {\n                    timestamp: Date.now(),\n                    reason: 'user_cleanup'\n                }\n            }));\n\n            this.onStatusChange('disconnected');\n            this.onKeyExchange('');\n            this.onVerificationRequired('');\n            this._secureLog('info', 'Connection securely cleaned up with complete memory wipe');\n        } catch (error) {\n            this._secureLog('error', '\u274C Error during enhanced disconnect:', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        } finally {\n            this.intentionalDisconnect = false;\n        }\n    }\n    // Public method to send files\n    async sendFile(file, options = {}) {\n        //   Enforce verification gate for file transfers\n        this._enforceVerificationGate('sendFile');\n\n        if (!this.isConnected()) {\n            throw new Error('Connection not ready for file transfer. Please ensure the connection is established.');\n        }\n\n        if (!this.fileTransferSystem) {\n            this.initializeFileTransfer();\n            \n            // Allow time for initialization\n            await new Promise(resolve => setTimeout(resolve, 500));\n            \n            if (!this.fileTransferSystem) {\n                throw new Error('File transfer system could not be initialized. Please try reconnecting.');\n            }\n        }\n\n        //   Verify key readiness\n        if (!this.encryptionKey || !this.macKey) {\n            throw new Error('Encryption keys not ready. Please wait for connection to be fully established.');\n        }\n\n\n        try {\n            const fileId = await this.fileTransferSystem.sendFile(file, options);\n            return fileId;\n        } catch (error) {\n            this._secureLog('error', 'File transfer error:', { errorType: error?.constructor?.name || 'Unknown' });\n            \n            // Re-throw with a clearer message\n            if (error.message.includes('Connection not ready')) {\n                throw new Error('Connection not ready for file transfer. Check connection status.');\n            } else if (error.message.includes('Encryption keys not initialized')) {\n                throw new Error('Session expired due to inactivity. Please reconnect to the chat.');\n            } else if (error.message.includes('Transfer timeout')) {\n                throw new Error('File transfer timeout. Check connection and try again.');\n            } else {\n                throw error;\n            }\n        }\n    }\n\n    // Get active file transfers\n    getFileTransfers() {\n        if (!this.fileTransferSystem) {\n            return { sending: [], receiving: [] };\n        }\n        \n        try {\n            // Check available methods in file transfer system\n            let sending = [];\n            let receiving = [];\n            \n            if (typeof this.fileTransferSystem.getActiveTransfers === 'function') {\n                sending = this.fileTransferSystem.getActiveTransfers();\n            } else {\n                this._secureLog('warn', 'getActiveTransfers method not available in file transfer system');\n            }\n            \n            if (typeof this.fileTransferSystem.getReceivingTransfers === 'function') {\n                receiving = this.fileTransferSystem.getReceivingTransfers();\n            } else {\n                this._secureLog('warn', 'getReceivingTransfers method not available in file transfer system');\n            }\n            \n            return {\n                sending: sending || [],\n                receiving: receiving || []\n            };\n        } catch (error) {\n            this._secureLog('error', 'Error getting file transfers:', { errorType: error?.constructor?.name || 'Unknown' });\n            return { sending: [], receiving: [] };\n        }\n    }\n\n    // Get file transfer system status\n    getFileTransferStatus() {\n        if (!this.fileTransferSystem) {\n            return {\n                initialized: false,\n                status: 'not_initialized',\n                message: 'File transfer system not initialized'\n            };\n        }\n        \n        const activeTransfers = this.fileTransferSystem.getActiveTransfers();\n        const receivingTransfers = this.fileTransferSystem.getReceivingTransfers();\n        \n        return {\n            initialized: true,\n            status: 'ready',\n            activeTransfers: activeTransfers.length,\n            receivingTransfers: receivingTransfers.length,\n            totalTransfers: activeTransfers.length + receivingTransfers.length\n        };\n    }\n\n    // Cancel file transfer\n    cancelFileTransfer(fileId) {\n        if (!this.fileTransferSystem) return false;\n        return this.fileTransferSystem.cancelTransfer(fileId);\n    }\n\n    // Force cleanup of file transfer system\n    cleanupFileTransferSystem() {\n        if (this.fileTransferSystem) {\n            this._secureLog('info', '\uD83E\uDDF9 Force cleaning up file transfer system');\n            this.fileTransferSystem.cleanup();\n            this.fileTransferSystem = null;\n            return true;\n        }\n        return false;\n    }\n\n    // Reinitialize file transfer system\n    reinitializeFileTransfer() {\n        try {\n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n            }\n            this.initializeFileTransfer();\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'Failed to reinitialize file transfer system:', { errorType: error?.constructor?.name || 'Unknown' });\n            return false;\n        }\n    }\n\n    // Set file transfer callbacks\n    setFileTransferCallbacks(onProgress, onReceived, onError, onIncomingRequest = null) {\n        this.onFileProgress = onProgress;\n        this.onFileReceived = onReceived;\n        this.onFileError = onError;\n        this.onIncomingFileRequest = onIncomingRequest;\n        \n        // Propagate callback updates into the live transfer system.\n        if (this.fileTransferSystem) {\n            this.fileTransferSystem.onProgress = onProgress;\n            this.fileTransferSystem.onFileReceived = onReceived;\n            this.fileTransferSystem.onError = onError;\n            this.fileTransferSystem.onIncomingFileRequest = onIncomingRequest;\n        }\n    }\n\n    getPendingIncomingFiles() {\n        if (!this.fileTransferSystem) return [];\n        return this.fileTransferSystem.getPendingIncomingTransfers();\n    }\n\n    async acceptIncomingFile(fileId) {\n        if (!this.fileTransferSystem) return false;\n        return this.fileTransferSystem.acceptIncomingFile(fileId);\n    }\n\n    async rejectIncomingFile(fileId) {\n        if (!this.fileTransferSystem) return false;\n        return this.fileTransferSystem.rejectIncomingFile(fileId);\n    }\n\n    async getReceivedFileObjectURL(fileId) {\n        if (!this.fileTransferSystem) return null;\n        return this.fileTransferSystem.getObjectURL(fileId);\n    }\n\n    revokeReceivedFileObjectURL(url) {\n        if (!this.fileTransferSystem) return;\n        this.fileTransferSystem.revokeObjectURL(url);\n    }\n\n    // ============================================\n    // SESSION ACTIVATION HANDLING\n    // ============================================\n\n    async handleSessionActivation(sessionData) {\n        try {\n            \n            // Update session state\n            this.currentSession = sessionData;\n            \n            // FIX: More lenient checks for activation\n            const hasKeys = !!(this.encryptionKey && this.macKey);\n            const hasSession = !!(sessionData.sessionId);\n            \n            // Force connection status if there is an active session\n            if (hasSession) {\n                this.onStatusChange('connected');\n\n            }\n\n        setTimeout(() => {\n            try {\n                this.initializeFileTransfer();\n            } catch (error) {\n                this._secureLog('warn', 'File transfer initialization failed during session activation:', { details: error.message });\n            }\n        }, 1000);\n            \n            \n            if (this.fileTransferSystem && this.isConnected()) {\n                \n                if (typeof this.fileTransferSystem.onSessionUpdate === 'function') {\n                    this.fileTransferSystem.onSessionUpdate({\n                        keyFingerprint: this.keyFingerprint,\n                        sessionSalt: this.sessionSalt,\n                        hasMacKey: !!this.macKey\n                    });\n                }\n            }\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to handle session activation:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n    // Method to check readiness of file transfers\ncheckFileTransferReadiness() {\n        const status = {\n            hasFileTransferSystem: !!this.fileTransferSystem,\n            hasDataChannel: !!this.dataChannel,\n            dataChannelState: this.dataChannel?.readyState,\n            isConnected: this.isConnected(),\n            isVerified: this.isVerified,\n            hasEncryptionKey: !!this.encryptionKey,\n            hasMacKey: !!this.macKey,\n            ready: false\n        };\n        \n        status.ready = status.hasFileTransferSystem && \n                    status.hasDataChannel && \n                    status.dataChannelState === 'open' && \n                    status.isConnected && \n                    status.isVerified;\n        return status;\n    }\n\n    // Method to force re-initialize file transfer system\n    forceReinitializeFileTransfer() {\n        try {\n            \n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n            }\n            \n            // Small delay before reinitialization\n            setTimeout(() => {\n                this.initializeFileTransfer();\n            }, 500);\n            \n            return true;\n        } catch (error) {\n            this._secureLog('error', 'Failed to force reinitialize file transfer:', { errorType: error?.constructor?.name || 'Unknown' });\n            return false;\n        }\n    }\n\n    // Method to get diagnostic information\n    getFileTransferDiagnostics() {\n        const diagnostics = {\n            timestamp: new Date().toISOString(),\n            webrtcManager: {\n                hasDataChannel: !!this.dataChannel,\n                dataChannelState: this.dataChannel?.readyState,\n                isConnected: this.isConnected(),\n                isVerified: this.isVerified,\n                isInitiator: this.isInitiator,\n                hasEncryptionKey: !!this.encryptionKey,\n                hasMacKey: !!this.macKey,\n                hasMetadataKey: !!this.metadataKey,\n                hasKeyFingerprint: !!this.keyFingerprint,\n                hasSessionSalt: !!this.sessionSalt\n            },\n            fileTransferSystem: null,\n            globalState: {\n                fileTransferActive: this._fileTransferActive || false,\n            hasFileTransferSystem: !!this.fileTransferSystem,\n            fileTransferSystemType: this.fileTransferSystem ? 'EnhancedSecureFileTransfer' : 'none'\n            }\n        };\n        \n        if (this.fileTransferSystem) {\n            try {\n                diagnostics.fileTransferSystem = this.fileTransferSystem.getSystemStatus();\n            } catch (error) {\n                diagnostics.fileTransferSystem = { error: error.message };\n            }\n        }\n        \n        return diagnostics;\n    }\n\n    getSupportedFileTypes() {\n        if (!this.fileTransferSystem) {\n            return { error: 'File transfer system not initialized' };\n        }\n        \n        try {\n            return this.fileTransferSystem.getSupportedFileTypes();\n        } catch (error) {\n            return { error: error.message };\n        }\n    }\n\n    validateFile(file) {\n        if (!this.fileTransferSystem) {\n            return { \n                isValid: false, \n                errors: ['File transfer system not initialized'],\n                fileType: null,\n                fileSize: file?.size || 0,\n                formattedSize: '0 B'\n            };\n        }\n        \n        try {\n            return this.fileTransferSystem.validateFile(file);\n        } catch (error) {\n            return { \n                isValid: false, \n                errors: [error.message],\n                fileType: null,\n                fileSize: file?.size || 0,\n                formattedSize: '0 B'\n            };\n        }\n    }\n\n    getFileTypeInfo() {\n        if (!this.fileTransferSystem) {\n            return { error: 'File transfer system not initialized' };\n        }\n        \n        try {\n            return this.fileTransferSystem.getFileTypeInfo();\n        } catch (error) {\n            return { error: error.message };\n        }\n    }\n\n    async forceInitializeFileTransfer(options = {}) {\n        const abortController = new AbortController();\n        const { signal = abortController.signal, timeout = 6000 } = options;\n\n        if (signal && signal !== abortController.signal) {\n            signal.addEventListener('abort', () => abortController.abort());\n        }\n        try {\n            if (!this.isVerified) {\n                throw new Error('Connection not verified');\n            }\n            \n            if (!this.dataChannel || this.dataChannel.readyState !== 'open') {\n                throw new Error('Data channel not open');\n            }\n            \n            if (!this.encryptionKey || !this.macKey) {\n                throw new Error('Encryption keys not ready');\n            }\n\n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n            }\n\n            this.initializeFileTransfer();\n\n            let attempts = 0;\n            const maxAttempts = 50;\n            const checkInterval = 100; \n            const maxWaitTime = maxAttempts * checkInterval; \n\n            const initializationPromise = new Promise((resolve, reject) => {\n                const checkInitialization = () => {\n                    if (abortController.signal.aborted) {\n                        reject(new Error('Operation cancelled'));\n                        return;\n                    }\n                    \n                    if (this.fileTransferSystem) {\n                        resolve(true);\n                        return;\n                    }\n                    \n                    if (attempts >= maxAttempts) {\n                        reject(new Error(`Initialization timeout after ${maxWaitTime}ms`));\n                        return;\n                    }\n                    \n                    attempts++;\n                    setTimeout(checkInitialization, checkInterval);\n                };\n                \n                checkInitialization();\n            });\n\n            await Promise.race([\n                initializationPromise,\n                new Promise((_, reject) => \n                    setTimeout(() => reject(new Error(`Global timeout after ${timeout}ms`)), timeout)\n                )\n            ]);\n            \n            if (this.fileTransferSystem) {\n                return true;\n            } else {\n                throw new Error('Force initialization timeout');\n            }\n            \n        } catch (error) {\n            if (error.name === 'AbortError' || error.message.includes('cancelled')) {\n                this._secureLog('info', 'File transfer initialization cancelled by user');\n                return { cancelled: true };\n            }\n            \n            this._secureLog('error', 'Force file transfer initialization failed:', { \n                errorType: error?.constructor?.name || 'Unknown',\n                message: error.message,\n                attempts: attempts\n            });\n            return { error: error.message, attempts: attempts };\n        }\n    }\n\n    cancelFileTransferInitialization() {\n        try {\n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n                this._fileTransferActive = false;\n                this._secureLog('info', 'File transfer initialization cancelled');\n                return true;\n            }\n            return false;\n        } catch (error) {\n            this._secureLog('error', 'Failed to cancel file transfer initialization:', { \n                errorType: error?.constructor?.name || 'Unknown' \n            });\n            return false;\n        }\n    }\n    \n    getFileTransferSystemStatus() {\n        if (!this.fileTransferSystem) {\n            return { available: false, status: 'not_initialized' };\n        }\n        \n        try {\n            const status = this.fileTransferSystem.getSystemStatus();\n            return {\n                available: true,\n                status: status.status || 'unknown',\n                activeTransfers: status.activeTransfers || 0,\n                receivingTransfers: status.receivingTransfers || 0,\n                systemType: 'EnhancedSecureFileTransfer'\n            };\n        } catch (error) {\n            this._secureLog('error', 'Failed to get file transfer system status:', { \n                errorType: error?.constructor?.name || 'Unknown' \n            });\n            return { available: false, status: 'error', error: error.message };\n        }\n    }\n\n    _validateNestedEncryptionSecurity() {\n        if (this.securityFeatures.hasNestedEncryption && this.nestedEncryptionKey) {\n            //   Test secure IV generation with reuse prevention\n            try {\n                const testIV1 = this._generateSecureIV(EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE, 'securityTest1');\n                const testIV2 = this._generateSecureIV(EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE, 'securityTest2');\n                \n                //   Verify IVs are different and properly tracked\n                if (testIV1.every((byte, index) => byte === testIV2[index])) {\n                    this._secureLog('error', 'CRITICAL: Nested encryption security validation failed - IVs are identical!');\n                    return false;\n                }\n                \n                //   Verify IV tracking system is working\n                const stats = this._getIVTrackingStats();\n                if (stats.totalIVs < 2) {\n                    this._secureLog('error', 'CRITICAL: IV tracking system not working properly');\n                    return false;\n                }\n                \n                this._secureLog('info', 'Nested encryption security validation passed - secure IV generation working');\n                return true;\n            } catch (error) {\n                this._secureLog('error', 'CRITICAL: Nested encryption security validation failed:', {\n                    errorType: error.constructor.name,\n                    errorMessage: error.message\n                });\n                return false;\n            }\n        }\n        return true;\n    }\n\n    // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n    //   ENCRYPTED VOICE / VIDEO CALLS\n    //\n    //   Media is carried by the existing RTCPeerConnection: audio/video tracks\n    //   are bundled onto the same DTLS-SRTP transport already used by the data\n    //   channel, so they are end-to-end encrypted with the very connection that\n    //   in-person SAS verification authenticated. Renegotiation SDP travels over\n    //   the verified data channel (never a server), so the media's DTLS\n    //   fingerprints are authenticated end-to-end too. Calls are therefore only\n    //   permitted once the session is connected AND SAS-verified.\n    // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\n    getCallState() {\n        return { ...this.callState };\n    }\n\n    /**\n     * Subscribe to call-state changes without taking the onCallStateChanged slot.\n     * @param {(state: object) => void} listener\n     * @returns {() => void} unsubscribe\n     */\n    addCallStateListener(listener) {\n        if (typeof listener !== 'function') return () => {};\n        this._callStateListeners.add(listener);\n        return () => this._callStateListeners.delete(listener);\n    }\n\n    removeCallStateListener(listener) {\n        this._callStateListeners.delete(listener);\n    }\n\n    /**\n     * Mark this session as one leg of a group call, or clear it.\n     *\n     * While set, an inbound call offer is answered without ringing. That is safe\n     * only because of who sets it: the group-call controller, and only while the\n     * local user is in that group's call. Nothing on the wire can set it, so a\n     * peer cannot cause this session to open a microphone on its own.\n     *\n     * @param {string|null} groupCallId\n     */\n    setCallGroupContext(groupCallId) {\n        this._callGroupContext = (typeof groupCallId === 'string' && groupCallId) ? groupCallId : null;\n        // Reflect it immediately: the 1:1 call UI uses this field to stay out of\n        // the way of a group call running on the same session.\n        this._updateCallState({});\n\n        // An offer that arrived BEFORE we knew this session was a call leg is\n        // sitting here ringing, and nothing would ever pick it up: the auto-answer\n        // is checked when the offer lands, not afterwards. That window is real \u2014\n        // a peer can dial the moment they join, which can beat the announcement\n        // telling us they joined \u2014 and the visible symptom was one member stuck\n        // at \"connecting\" for the whole call while the other's phone rang for a\n        // call they had already agreed to. Answer it now.\n        if (this._callGroupContext && this._pendingCallOffer && this.callState.phase === 'incoming') {\n            this.acceptCall().catch((error) => {\n                this._secureLog('warn', '\u26A0\uFE0F Failed to answer a group call leg that was already ringing', {\n                    errorType: error?.constructor?.name\n                });\n            });\n        }\n    }\n\n    /**\n     * Use a capture owned by somebody else for the next call on this session.\n     *\n     * The group-call controller captures the microphone and camera ONCE and\n     * hands the same stream to every leg. This manager attaches its tracks and\n     * must never stop them: the other legs are still sending them.\n     *\n     * @param {MediaStream|null} stream\n     */\n    setExternalMediaStream(stream) {\n        this._externalMediaStream = stream || null;\n    }\n\n    /** True when the live capture belongs to somebody else. */\n    _usingExternalMedia() {\n        return !!this._externalMediaStream && this.localMediaStream === this._externalMediaStream;\n    }\n\n    getRemoteMediaStream() {\n        return this.remoteMediaStream;\n    }\n\n    getLocalMediaStream() {\n        return this.localMediaStream;\n    }\n\n    // Rebuild the remote MediaStream from the PC's current receivers. This is the\n    // reliable source of inbound tracks \u2014 ontrack does not re-fire for a reused\n    // transceiver on a later call, so relying on it dropped remote audio/video.\n    _refreshRemoteStream() {\n        const pc = this.peerConnection;\n        if (!pc || typeof pc.getReceivers !== 'function') return;\n        const live = pc.getReceivers()\n            .map(r => r.track)\n            .filter(t => t && (t.kind === 'audio' || t.kind === 'video') && t.readyState === 'live');\n        const prev = this.remoteMediaStream ? this.remoteMediaStream.getTracks() : [];\n        const unchanged = prev.length === live.length && prev.every(t => live.includes(t));\n        if (!unchanged) {\n            // Build a NEW MediaStream so the UI's srcObject-changed check fires and\n            // re-attaches (an element does not reliably pick up a track added to a\n            // stream that is already its srcObject).\n            this.remoteMediaStream = new MediaStream(live);\n        }\n        this._updateCallState({ remoteHasVideo: live.some(t => t.kind === 'video') });\n    }\n\n    // Remote tracks can take a beat to go 'live' after setRemoteDescription, and\n    // ontrack may not fire for reused transceivers \u2014 so refresh now and shortly\n    // after to reliably pick up the inbound audio/video.\n    _scheduleRemoteRefresh() {\n        this._refreshRemoteStream();\n        setTimeout(() => { try { this._refreshRemoteStream(); } catch (_) {} }, 300);\n        setTimeout(() => { try { this._refreshRemoteStream(); } catch (_) {} }, 1200);\n    }\n\n    _updateCallState(patch) {\n        this.callState = { ...this.callState, ...patch, groupCallId: this._callGroupContext };\n        const snapshot = this.getCallState();\n        // Adaptation controller follows the call lifecycle: run while active,\n        // stop when the call ends.\n        if (snapshot.phase === 'active') this._startAdaptation();\n        else if (snapshot.phase === 'idle') this._stopAdaptation();\n        try { this.onCallStateChanged?.(snapshot); } catch (_) {}\n        // A single callback property cannot serve two owners, and a group call\n        // has two: the group's media controller and whatever UI is bound to this\n        // session. Listeners are additive so neither has to displace the other.\n        for (const listener of this._callStateListeners) {\n            try { listener(snapshot); } catch (_) {}\n        }\n        if (typeof document !== 'undefined') {\n            try {\n                this._dispatchAppEvent?.(new CustomEvent('securebit-call-state', {\n                    detail: { managerId: this._managerId || null, state: snapshot }\n                }));\n            } catch (_) {}\n        }\n    }\n\n    _callCanStart() {\n        const connected = typeof this.isConnected === 'function' ? this.isConnected() : false;\n        const channelOpen = this.dataChannel && this.dataChannel.readyState === 'open';\n        // SAS verification is mandatory: it is what authenticates the DTLS\n        // transport the media rides on, closing the MITM window.\n        // A call must also not be placed onto a path that is mid-repair \u2014 the\n        // media renegotiation would race the ICE restart on the same connection.\n        const ok = !!(connected && channelOpen && this.isVerified && !this.isReconnecting());\n        return ok;\n    }\n\n    async _sendCallSignal(type, data) {\n        const sent = await this.sendSystemMessage({ type, ...data });\n        return sent;\n    }\n\n    _audioConstraints() {\n        return { echoCancellation: true, noiseSuppression: true, autoGainControl: true };\n    }\n    _videoConstraints() {\n        return { facingMode: this._callFacingMode, width: { ideal: 1280 }, height: { ideal: 720 } };\n    }\n\n    async _acquireLocalMedia(withVideo) {\n        // Fresh capture each call (the mic/camera is fully released on hang-up, so\n        // the OS indicator goes off). Senders are reused across calls via\n        // replaceTrack; addTrack only on first use.\n        // A group call captures once and shares the result across every leg, so\n        // there is nothing to capture here \u2014 just tracks to attach.\n        const stream = this._externalMediaStream || await navigator.mediaDevices.getUserMedia({\n            audio: this._audioConstraints(),\n            video: withVideo ? this._videoConstraints() : false\n        });\n        this.localMediaStream = stream;\n        const pc = this.peerConnection;\n        const audioTrack = stream.getAudioTracks()[0] || null;\n        const videoTrack = stream.getVideoTracks()[0] || null;\n        if (audioTrack) {\n            if (this._callAudioSender) await this._callAudioSender.replaceTrack(audioTrack);\n            else this._callAudioSender = pc.addTrack(audioTrack, stream);\n        }\n        if (videoTrack) {\n            if (this._callVideoSender) await this._callVideoSender.replaceTrack(videoTrack);\n            else this._callVideoSender = pc.addTrack(videoTrack, stream);\n        }\n        this._applyCallCodecPrefs();   // codec prefs BEFORE createOffer/createAnswer\n        return stream;\n    }\n\n    // Fully release the mic/camera \u2014 only on session disconnect, not between calls.\n    _stopLocalMediaPermanently() {\n        try {\n            if (this.localMediaStream && !this._usingExternalMedia()) {\n                for (const t of this.localMediaStream.getTracks()) { try { t.stop(); } catch (_) {} }\n            }\n        } catch (_) {}\n        this.localMediaStream = null;\n    }\n\n    // Codec preferences on the audio (RED\u2192Opus) and video (VP9\u2192AV1\u2192H264\u2192VP8)\n    // transceivers created by addTrack. Called before offer/answer creation.\n    _applyCallCodecPrefs() {\n        try {\n            const trs = this.peerConnection?.getTransceivers?.() || [];\n            const audioTr = trs.find(t => t.sender && t.sender === this._callAudioSender);\n            if (audioTr) applyAudioCodecPreferences(audioTr);\n            const videoTr = trs.find(t => t.sender && t.sender === this._callVideoSender);\n            if (videoTr) applyVideoCodecPreferences(videoTr);\n        } catch (_) {}\n    }\n\n    // Munge locally-created call SDP: Opus FEC/DTX/bitrate fmtp + transport\n    // feedback (TWCC/NACK/PLI/FIR/REMB) & the TWCC header extension. Both peers\n    // run this, so the negotiated result carries it.\n    _mungeCallSdp(sdp) {\n        try {\n            let out = applyOpusSettings(sdp, AUDIO_CONFIG.opusFmtp);\n            out = applyTransport(out, TRANSPORT_CONFIG);\n            return out;\n        } catch (e) { return sdp; }\n    }\n\n    // setLocalDescription with progressive fallback so munging can never break a\n    // call: try full munge \u2192 Opus-only munge \u2192 raw. (Some browsers reject added\n    // rtcp-fb/extmap lines in a local description; the raw path always works.)\n    async _setLocalMunged(desc) {\n        const pc = this.peerConnection;\n        try {\n            await pc.setLocalDescription({ type: desc.type, sdp: this._mungeCallSdp(desc.sdp) });\n            return;\n        } catch (e) {\n            try {\n                await pc.setLocalDescription({ type: desc.type, sdp: applyOpusSettings(desc.sdp, AUDIO_CONFIG.opusFmtp) });\n                return;\n            } catch (e2) {\n                await pc.setLocalDescription(desc);\n            }\n        }\n    }\n\n    // Apply sender-level params after setLocalDescription, when senders have live\n    // parameters: audio priority/bitrate, video SVC/bitrate/degradation.\n    async _applyCallSenderParams() {\n        try {\n            if (this._callAudioSender) await configureAudioSender(this._callAudioSender, {});\n            if (this._callVideoSender) await configureVideoSender(this._callVideoSender, {});\n        } catch (_) {}\n    }\n\n    // Start the reactive bitrate controller for the active call. Idempotent. It\n    // also feeds the connection-quality indicator shown in the call UI.\n    _startAdaptation() {\n        if (this._adaptationController || !this.peerConnection) return;\n        try {\n            this._adaptationController = new NetworkAdaptationController(this.peerConnection, {\n                getVideoSender: () => this._callVideoSender,\n                ceilingBitrate: 1500000,\n                onQuality: (q) => {\n                    if (q !== this.callState.quality) this._updateCallState({ quality: q });\n                },\n            });\n            this._adaptationController.start();\n        } catch (_) {}\n    }\n\n    _stopAdaptation() {\n        if (this._adaptationController) {\n            try { this._adaptationController.stop(); } catch (_) {}\n            this._adaptationController = null;\n        }\n    }\n\n    // Turn a getUserMedia failure into a clear, user-visible reason (shown in the\n    // chat as a system message) + a machine-readable callState.error code. These\n    // are device/permission problems, NOT connection problems \u2014 surfacing them\n    // stops the call from looking like it \"silently drops\".\n    _notifyCallMediaError(error, wantVideo) {\n        const name = error?.name || '';\n        const dev = wantVideo ? 'camera/microphone' : 'microphone';\n        let msg, code;\n        if (name === 'NotAllowedError') {\n            code = 'permission_denied';\n            msg = `\u26A0\uFE0F Call not started \u2014 ${dev} access is blocked. Allow it for this site in the browser, and enable your browser under System Settings \u2192 Privacy & Security \u2192 ${wantVideo ? 'Camera/Microphone' : 'Microphone'}, then try again.`;\n        } else if (name === 'NotFoundError' || name === 'OverconstrainedError') {\n            code = 'device_not_found';\n            msg = `\u26A0\uFE0F Call not started \u2014 no ${dev} found on this device.`;\n        } else if (name === 'NotReadableError' || name === 'AbortError') {\n            code = 'device_busy';\n            msg = `\u26A0\uFE0F Call not started \u2014 your ${dev} is in use by another app. Close it and try again.`;\n        } else {\n            code = 'media_failed';\n            msg = `\u26A0\uFE0F Call not started \u2014 could not access ${dev}${name ? ' (' + name + ')' : ''}.`;\n        }\n        try { this.deliverMessageToUI(msg, 'system'); } catch (_) {}\n        return code;\n    }\n\n    // Caller side: begin an outgoing call.\n    async startCall(withVideo = false) {\n        if (!this._callCanStart()) {\n            this._updateCallState({ error: 'not_verified' });\n            throw new Error('Calls require a connected, SAS-verified session.');\n        }\n        if (this.callState.active) {\n            this._secureLog('warn', '\u26A0\uFE0F startCall ignored \u2014 a call is already active');\n            return;\n        }\n        const callId = (crypto?.randomUUID?.() || String(Date.now()) + Math.random().toString(36).slice(2));\n        this._updateCallState({\n            active: true, phase: 'outgoing', withVideo, callId,\n            micEnabled: true, cameraEnabled: withVideo, remoteHasVideo: false, error: null\n        });\n        try {\n            await this._acquireLocalMedia(withVideo);\n            this._callMakingOffer = true;\n            const offer = await this.peerConnection.createOffer();\n            await this._setLocalMunged(offer);\n            this._callMakingOffer = false;\n            await this._applyCallSenderParams();\n            await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_OFFER, {\n                callId, withVideo, sdp: this.peerConnection.localDescription.sdp\n            });\n        } catch (error) {\n            this._callMakingOffer = false;\n            this._secureLog('error', '\u274C startCall failed', { errorType: error?.constructor?.name });\n            const code = this._notifyCallMediaError(error, withVideo);\n            await this._teardownCallMedia();\n            this._updateCallState({ active: false, phase: 'idle', error: code });\n            throw error;\n        }\n    }\n\n    // Callee side: an inbound call offer arrived \u2192 surface it to the UI.\n    async _onIncomingCallOffer(data) {\n        // A renegotiation of an ALREADY-active call (e.g. audio \u2192 video upgrade,\n        // or the peer turning their camera on) is auto-accepted transparently.\n        if (this.callState.active && (this.callState.phase === 'active' || this.callState.phase === 'connecting')) {\n            await this._answerCallOffer(data, /* renegotiation */ true);\n            if (data.withVideo) this._updateCallState({ withVideo: true });\n            return;\n        }\n        this._pendingCallOffer = data;\n        this._updateCallState({\n            active: true, phase: 'incoming', withVideo: !!data.withVideo,\n            callId: data.callId, remoteHasVideo: !!data.withVideo, error: null\n        });\n        // One leg of a group call the user has already joined: answer it rather\n        // than ring. The consent was given once, for the whole call \u2014 see\n        // setCallGroupContext for why nothing on the wire can reach this branch.\n        if (this._callGroupContext) {\n            await this.acceptCall();\n        }\n    }\n\n    async _answerCallOffer(data, renegotiation = false) {\n        await this.peerConnection.setRemoteDescription({ type: 'offer', sdp: data.sdp });\n        // Attach OUR media on every fresh accept. Crucial: _acquireLocalMedia must\n        // run even when a persistent localMediaStream already exists \u2014 teardown\n        // detached the tracks from the senders (replaceTrack(null)), and this\n        // re-attaches them. Without it the answerer sends silence/black (the \"no\n        // sound when I pick up / on the reverse call\" bug). It reuses the live\n        // capture internally, so no extra getUserMedia. Skip only on renegotiation\n        // (upgrade to video), where the senders already carry live tracks.\n        if (!renegotiation) {\n            await this._acquireLocalMedia(!!data.withVideo);\n        }\n        const answer = await this.peerConnection.createAnswer();\n        await this._setLocalMunged(answer);\n        await this._applyCallSenderParams();\n        await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_ANSWER, {\n            callId: data.callId, sdp: this.peerConnection.localDescription.sdp\n        });\n    }\n\n    // Callee accepts the ringing call.\n    async acceptCall() {\n        const data = this._pendingCallOffer;\n        if (!data) return;\n        this._pendingCallOffer = null;\n        this._updateCallState({ phase: 'connecting', cameraEnabled: !!data.withVideo });\n        try {\n            await this._answerCallOffer(data, false);\n            this._updateCallState({ phase: 'active' });\n            this._scheduleRemoteRefresh();\n        } catch (error) {\n            this._secureLog('error', '\u274C acceptCall failed', { errorType: error?.constructor?.name });\n            const code = this._notifyCallMediaError(error, !!data.withVideo);\n            // Tell the caller we couldn't pick up so their ringing UI stops.\n            try { await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_END, { callId: data.callId }); } catch (_) {}\n            await this._teardownCallMedia();\n            this._updateCallState({ active: false, phase: 'idle', error: code });\n        }\n    }\n\n    // Callee rejects the ringing call.\n    async declineCall() {\n        const callId = this.callState.callId;\n        this._pendingCallOffer = null;\n        await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_DECLINE, { callId });\n        this._updateCallState({ active: false, phase: 'idle', withVideo: false, remoteHasVideo: false });\n    }\n\n    // Either side hangs up.\n    async endCall(sendSignal = true) {\n        const callId = this.callState.callId;\n        if (sendSignal && callId) {\n            try { await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_END, { callId }); } catch (_) {}\n        }\n        await this._teardownCallMedia();\n        this._updateCallState({\n            active: false, phase: 'idle', withVideo: false, micEnabled: true,\n            cameraEnabled: false, remoteHasVideo: false, callId: null, quality: null\n        });\n    }\n\n    async _teardownCallMedia() {\n        this._stopAdaptation();\n        const pc = this.peerConnection;\n        try {\n            // 1. STOP our capture tracks \u2192 releases the mic/camera so the OS\n            //    indicator goes off after the call. A capture we borrowed from a\n            //    group call is left alone: the other legs are still sending it,\n            //    and stopping it here would mute this device for all of them.\n            if (this.localMediaStream && !this._usingExternalMedia()) {\n                for (const track of this.localMediaStream.getTracks()) { try { track.stop(); } catch (_) {} }\n            }\n            // 2. Do NOT stop the REMOTE receiver tracks: the transceivers are reused\n            //    on the next call and ontrack won't re-fire, so a stopped receiver\n            //    track would leave the next call with NO remote audio/video. They go\n            //    'muted' when the peer stops sending (idle, negligible CPU) and are\n            //    fully released in disconnect(). Just detach our senders.\n            if (pc) {\n                for (const sender of [this._callAudioSender, this._callVideoSender].filter(Boolean)) {\n                    try { await sender.replaceTrack(null); } catch (_) {}\n                }\n            }\n        } catch (_) {}\n        this.localMediaStream = null;\n        this.remoteMediaStream = null;\n        // _callAudioSender/_callVideoSender are KEPT (reused next call; reset only\n        // when the PC is rebuilt \u2014 see createPeerConnection).\n        this._callMakingOffer = false;\n        // If we created an offer that was never answered (call declined / failed\n        // mid-negotiation), the PC is stuck in 'have-local-offer'. Roll it back to\n        // 'stable' so the data channel and future calls keep working.\n        try {\n            if (this.peerConnection &&\n                (this.peerConnection.signalingState === 'have-local-offer' ||\n                 this.peerConnection.signalingState === 'have-local-pranswer')) {\n                await this.peerConnection.setLocalDescription({ type: 'rollback' });\n            }\n        } catch (_) {}\n        // No teardown renegotiation otherwise: stopping the tracks fires\n        // 'ended'/'mute' on the peer's receivers, and the next startCall\n        // renegotiates the PC from scratch anyway. Skipping it avoids offer/answer\n        // glare when both ends hang up at once; dormant transceivers are reused.\n    }\n\n    // Mute / unmute the microphone (no renegotiation \u2014 just toggles the track).\n    setMicEnabled(enabled) {\n        if (this.localMediaStream) {\n            this.localMediaStream.getAudioTracks().forEach(t => { t.enabled = enabled; });\n        }\n        this._updateCallState({ micEnabled: enabled });\n    }\n\n    toggleMic() { this.setMicEnabled(!this.callState.micEnabled); }\n\n    // Turn the camera on/off. Turning it on for an audio-only call adds a video\n    // track and renegotiates (an in-call \"upgrade to video\").\n    async setCameraEnabled(enabled) {\n        if (!enabled) {\n            if (this.localMediaStream) {\n                this.localMediaStream.getVideoTracks().forEach(t => { t.enabled = false; });\n            }\n            this._updateCallState({ cameraEnabled: false });\n            return;\n        }\n        // Enabling: reuse an existing (disabled) track, otherwise add one.\n        const existing = this.localMediaStream?.getVideoTracks?.() || [];\n        if (existing.length) {\n            existing.forEach(t => { t.enabled = true; });\n            this._updateCallState({ cameraEnabled: true, withVideo: true });\n            return;\n        }\n        await this.upgradeToVideo();\n    }\n\n    async toggleCamera() { await this.setCameraEnabled(!this.callState.cameraEnabled); }\n\n    // Add a camera to an in-progress audio call and renegotiate.\n    async upgradeToVideo() {\n        if (!this.localMediaStream) return;\n        try {\n            // Add ONLY a camera track to the in-call stream (don't re-capture audio).\n            const camStream = await navigator.mediaDevices.getUserMedia({ video: this._videoConstraints() });\n            const videoTrack = camStream.getVideoTracks()[0];\n            if (!videoTrack) return;\n            await this.addVideoTrack(videoTrack);\n        } catch (error) {\n            this._secureLog('error', '\u274C upgradeToVideo failed', { errorType: error?.constructor?.name });\n            this._updateCallState({ cameraEnabled: false, error: 'camera_failed' });\n        }\n    }\n\n    /**\n     * Put an already-captured camera track on this call and renegotiate.\n     *\n     * Split out of upgradeToVideo so a group call can capture its camera once\n     * and add the SAME track to every leg \u2014 N captures of one camera is both\n     * wasteful and, on several devices, simply not permitted.\n     *\n     * @param {MediaStreamTrack} videoTrack\n     */\n    async addVideoTrack(videoTrack) {\n        if (!videoTrack || !this.localMediaStream || !this.peerConnection) return;\n        if (!this.localMediaStream.getVideoTracks().includes(videoTrack)) {\n            this.localMediaStream.addTrack(videoTrack);\n        }\n        if (this._callVideoSender) await this._callVideoSender.replaceTrack(videoTrack);\n        else this._callVideoSender = this.peerConnection.addTrack(videoTrack, this.localMediaStream);\n        this._applyCallCodecPrefs();\n        this._updateCallState({ cameraEnabled: true, withVideo: true });\n        await this._renegotiateCall();\n    }\n\n    /**\n     * Swap the outgoing camera track without renegotiating.\n     *\n     * The group's camera flip captures one new track and hands it to every leg;\n     * replaceTrack keeps the transceiver, so no leg has to renegotiate for it.\n     *\n     * @param {MediaStreamTrack} videoTrack\n     */\n    async replaceVideoTrack(videoTrack) {\n        if (!videoTrack || !this._callVideoSender) return;\n        await this._callVideoSender.replaceTrack(videoTrack);\n    }\n\n    // Flip between front/back cameras without renegotiation (replaceTrack).\n    async switchCamera() {\n        if (!this._callVideoSender || !this.localMediaStream) return;\n        this._callFacingMode = this._callFacingMode === 'user' ? 'environment' : 'user';\n        try {\n            const camStream = await navigator.mediaDevices.getUserMedia({\n                video: { facingMode: this._callFacingMode }\n            });\n            const newTrack = camStream.getVideoTracks()[0];\n            const old = this.localMediaStream.getVideoTracks()[0];\n            if (old) { this.localMediaStream.removeTrack(old); try { old.stop(); } catch (_) {} }\n            this.localMediaStream.addTrack(newTrack);\n            await this._callVideoSender.replaceTrack(newTrack);\n        } catch (error) {\n            this._secureLog('warn', '\u26A0\uFE0F switchCamera failed', { errorType: error?.constructor?.name });\n        }\n    }\n\n    async _renegotiateCall() {\n        if (this._callMakingOffer) return;\n        try {\n            this._callMakingOffer = true;\n            const offer = await this.peerConnection.createOffer();\n            await this._setLocalMunged(offer);\n            await this._applyCallSenderParams();\n            await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_OFFER, {\n                callId: this.callState.callId, withVideo: this.callState.withVideo,\n                sdp: this.peerConnection.localDescription.sdp\n            });\n        } finally {\n            this._callMakingOffer = false;\n        }\n    }\n\n    // Central inbound call-signal router (called from processMessage).\n    async _handleCallSignal(type, data) {\n        const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n        switch (type) {\n            case T.CALL_OFFER: {\n                await this._onIncomingCallOffer(data);\n                return;\n            }\n            case T.CALL_ANSWER: {\n                try {\n                    if (this.peerConnection.signalingState === 'have-local-offer') {\n                        await this.peerConnection.setRemoteDescription({ type: 'answer', sdp: data.sdp });\n                    }\n                    if (this.callState.phase === 'outgoing') this._updateCallState({ phase: 'active' });\n                    this._scheduleRemoteRefresh();   // caller: pick up the answerer's tracks\n                } catch (e) {\n                    this._secureLog('warn', '\u26A0\uFE0F Failed to apply call answer', { errorType: e?.constructor?.name });\n                }\n                return;\n            }\n            case T.CALL_ICE: {\n                try { if (data.candidate) await this.peerConnection.addIceCandidate(data.candidate); } catch (_) {}\n                return;\n            }\n            case T.CALL_DECLINE: {\n                await this._teardownCallMedia();\n                this._updateCallState({ active: false, phase: 'idle', withVideo: false, remoteHasVideo: false, error: 'declined' });\n                return;\n            }\n            case T.CALL_END: {\n                await this.endCall(/* sendSignal */ false);\n                return;\n            }\n            default: return;\n        }\n    }\n}\n\nclass SecureKeyStorage {\n    constructor(masterKeyManager = null) {\n        // Use WeakMap for automatic garbage collection of unused keys\n        this._keyStore = new WeakMap();\n        this._keyMetadata = new Map(); // Metadata doesn't need WeakMap\n        this._keyReferences = new Map(); // Strong references for active keys\n        \n        // Use secure master key manager instead of global key\n        this._masterKeyManager = masterKeyManager || new SecureMasterKeyManager();\n        \n        // Initialize persistent storage for extractable keys\n        this._persistentStorage = new SecurePersistentKeyStorage(this._masterKeyManager);\n        \n        // Setup master key manager callbacks\n        this._setupMasterKeyCallbacks();\n\n        setTimeout(() => {\n            if (!this.validateStorageIntegrity()) {\n                this._secureLog('error', 'CRITICAL: Key storage integrity check failed');\n            }\n        }, 100);\n\n    }\n\n    /**\n     * SecureKeyStorage calls this._secureLog() in a dozen places but never\n     * defined it, so every one of those calls threw a TypeError instead of\n     * logging \u2014 including the integrity-violation and key-storage-failure paths,\n     * i.e. exactly the reports worth having. Delegate to the shared sanitising\n     * logger, which redacts key-shaped values before anything reaches the console.\n     */\n    _secureLog(level, message, context = {}) {\n        try {\n            const logger = (typeof window !== 'undefined' && window.EnhancedSecureCryptoUtils?.secureLog) || null;\n            if (logger && typeof logger.log === 'function') {\n                logger.log(level, `[KeyStorage] ${message}`, context);\n                return;\n            }\n        } catch (_) { /* fall through to console */ }\n\n        if (level === 'error') console.error(`[KeyStorage] ${message}`);\n        else if (level === 'warn') console.warn(`[KeyStorage] ${message}`);\n    }\n\n    /**\n     * Setup callbacks for master key manager\n     */\n    _setupMasterKeyCallbacks() {\n        // No password prompt by default. The previous default called window.prompt(),\n        // which shows the master password in clear text with no masking, is trivially\n        // imitated by any page content (so it trains users to type their password into\n        // an unauthenticated dialog), and leaves the password in an immutable JS string\n        // that can never be wiped. Failing closed is the safer default: the application\n        // owns the password UI (see components/ui/PasswordModal.jsx) and must install it\n        // via setMasterKeyPasswordCallback().\n        this._masterKeyManager.setPasswordRequiredCallback((isRetry, callback) => {\n            this._secureLog('error', 'Master key password requested but no password UI is installed', {\n                isRetry: !!isRetry\n            });\n            callback(null); // rejects the unlock rather than prompting insecurely\n        });\n        \n        this._masterKeyManager.setSessionExpiredCallback((reason) => {\n            console.warn(`Master key session expired: ${reason}`);\n            // Application should handle this event\n        });\n        \n        this._masterKeyManager.setUnlockedCallback(() => {\n            console.log('Master key unlocked successfully');\n        });\n    }\n    \n    /**\n     * Set custom password callback\n     */\n    setPasswordCallback(callback) {\n        this._masterKeyManager.setPasswordRequiredCallback(callback);\n    }\n    \n    /**\n     * Set custom session expired callback\n     */\n    setSessionExpiredCallback(callback) {\n        this._masterKeyManager.setSessionExpiredCallback(callback);\n    }\n    \n    /**\n     * Get master key (with automatic unlock if needed)\n     */\n    async _ensureMasterKeyUnlocked() {\n        if (!this._masterKeyManager.isUnlocked()) {\n            await this._masterKeyManager.unlock();\n        }\n    }\n\n    async storeKey(keyId, cryptoKey, metadata = {}) {\n        if (!(cryptoKey instanceof CryptoKey)) {\n            throw new Error('Only CryptoKey objects can be stored');\n        }\n\n        try {\n            // For non-extractable keys, store only in-memory reference\n            if (!cryptoKey.extractable) {\n                this._keyReferences.set(keyId, cryptoKey);\n                this._keyMetadata.set(keyId, {\n                    ...metadata,\n                    created: Date.now(),\n                    lastAccessed: Date.now(),\n                    extractable: false,\n                    persistent: false,\n                    encrypted: false\n                });\n                return true;\n            }\n\n            // For extractable keys, use persistent storage with encryption\n            await this._persistentStorage.storeExtractableKey(keyId, cryptoKey, metadata);\n            \n            // Also store in memory for immediate access\n            this._keyReferences.set(keyId, cryptoKey);\n            this._keyMetadata.set(keyId, {\n                ...metadata,\n                created: Date.now(),\n                lastAccessed: Date.now(),\n                extractable: true,\n                persistent: true,\n                encrypted: true\n            });\n\n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to store key securely', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return false;\n        }\n    }\n\n    async retrieveKey(keyId) {\n        try {\n            // Check if key is in memory first\n            if (this._keyReferences.has(keyId)) {\n                const metadata = this._keyMetadata.get(keyId);\n                if (metadata) {\n                    metadata.lastAccessed = Date.now();\n                }\n                return this._keyReferences.get(keyId);\n            }\n            \n            // Try to restore from persistent storage\n            const restoredKey = await this._persistentStorage.retrieveKey(keyId);\n            if (restoredKey) {\n                // Update memory cache\n                this._keyReferences.set(keyId, restoredKey);\n                \n                // Update or create metadata\n                const existingMetadata = this._keyMetadata.get(keyId);\n                this._keyMetadata.set(keyId, {\n                    ...existingMetadata,\n                    lastAccessed: Date.now(),\n                    restoredFromPersistent: true\n                });\n                \n                return restoredKey;\n            }\n            \n            return null;\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to retrieve key', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return null;\n        }\n    }\n\n    async _encryptKeyData(keyData) {\n        const dataToEncrypt = typeof keyData === 'object' \n            ? JSON.stringify(keyData) \n            : keyData;\n        \n        const encoder = new TextEncoder();\n        const data = encoder.encode(dataToEncrypt);\n        \n        await this._ensureMasterKeyUnlocked();\n        const { encryptedData, iv } = await this._masterKeyManager.encryptBytes(data);\n        // Return IV + encrypted data\n        const result = new Uint8Array(iv.length + encryptedData.byteLength);\n        result.set(iv, 0);\n        result.set(encryptedData, iv.length);\n        return result;\n    }\n\n    async _decryptKeyData(encryptedData) {\n        const iv = encryptedData.slice(0, 12);\n        const data = encryptedData.slice(12);\n        \n        await this._ensureMasterKeyUnlocked();\n        const decryptedData = await this._masterKeyManager.decryptBytes(data, iv);\n\n        const decoder = new TextDecoder();\n        const jsonString = decoder.decode(decryptedData);\n        \n        try {\n            return JSON.parse(jsonString);\n        } catch {\n            return decryptedData;\n        }\n    }\n\n    async secureWipe(keyId) {\n        const cryptoKey = this._keyReferences.get(keyId);\n        \n        if (cryptoKey) {\n            // Remove from WeakMap (will be GC'd)\n            this._keyStore.delete(cryptoKey);\n            // Remove strong reference\n            this._keyReferences.delete(keyId);\n            // Remove metadata\n            this._keyMetadata.delete(keyId);\n        }\n\n        // Schedule natural cleanup\n        await this._performNaturalCleanup();\n    }\n\n    async secureWipeAll() {\n        // Clear persistent storage\n        try {\n            await this._persistentStorage.clearAll();\n        } catch (error) {\n            this._secureLog('error', 'Failed to clear persistent storage', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        }\n        \n        // Clear all references\n        this._keyReferences.clear();\n        this._keyMetadata.clear();\n        \n        // WeakMap entries will be garbage collected\n        this._keyStore = new WeakMap();\n        \n        // Schedule natural cleanup\n        await this._performNaturalCleanup();\n    }\n\n    //   Validate storage integrity\n    validateStorageIntegrity() {\n        const violations = [];\n        \n        for (const [keyId, metadata] of this._keyMetadata.entries()) {\n            // Check: extractable keys must be encrypted\n            if (metadata.extractable === true && metadata.encrypted !== true) {\n                violations.push({\n                    keyId,\n                    type: 'EXTRACTABLE_KEY_NOT_ENCRYPTED',\n                    metadata\n                });\n            }\n            \n            // Check: non-extractable keys should not be encrypted\n            if (metadata.extractable === false && metadata.encrypted === true) {\n                violations.push({\n                    keyId,\n                    type: 'NON_EXTRACTABLE_KEY_ENCRYPTED',\n                    metadata\n                });\n            }\n        }\n        \n        if (violations.length > 0) {\n            this._secureLog('error', 'Storage integrity violations detected', {\n                violationCount: violations.length\n            });\n            return false;\n        }\n        \n        return true;\n    }\n\n    async getStorageStats() {\n        const persistentStats = await this._persistentStorage.getStorageStats();\n        \n        return {\n            totalKeys: this._keyReferences.size,\n            memoryKeys: this._keyReferences.size,\n            persistentKeys: persistentStats.persistentKeys,\n            metadata: Array.from(this._keyMetadata.entries()).map(([id, meta]) => ({\n                id,\n                created: meta.created,\n                lastAccessed: meta.lastAccessed,\n                age: Date.now() - meta.created,\n                persistent: meta.persistent || false\n            })),\n            persistent: persistentStats\n        };\n    }\n    \n    /**\n     * List all stored keys (memory + persistent)\n     */\n    async listAllKeys() {\n        try {\n            const memoryKeys = Array.from(this._keyMetadata.entries()).map(([keyId, metadata]) => ({\n                keyId,\n                ...metadata,\n                location: 'memory'\n            }));\n            \n            const persistentKeys = await this._persistentStorage.listStoredKeys();\n            const persistentKeysFormatted = persistentKeys.map(key => ({\n                ...key,\n                location: 'persistent'\n            }));\n            \n            return {\n                memoryKeys,\n                persistentKeys: persistentKeysFormatted,\n                totalCount: memoryKeys.length + persistentKeysFormatted.length\n            };\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to list keys', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return {\n                memoryKeys: [],\n                persistentKeys: [],\n                totalCount: 0,\n                error: error.message\n            };\n        }\n    }\n    \n    /**\n     * Delete key from both memory and persistent storage\n     */\n    async deleteKey(keyId) {\n        try {\n            // Remove from memory\n            this._keyReferences.delete(keyId);\n            this._keyMetadata.delete(keyId);\n            \n            // Remove from persistent storage\n            await this._persistentStorage.deleteKey(keyId);\n            \n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to delete key', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return false;\n        }\n    }\n\n}\n\n/**\n * Secure IndexedDB Wrapper for Encrypted Key Storage\n * Provides secure persistent storage with encryption\n */\nclass SecureIndexedDBWrapper {\n    constructor(dbName = 'SecureKeyStorage', version = 1) {\n        this.dbName = dbName;\n        this.version = version;\n        this.db = null;\n        \n        // Store names\n        this.KEYS_STORE = 'encrypted_keys';\n        this.METADATA_STORE = 'key_metadata';\n        this.SALT_STORE = 'master_salt';\n    }\n    \n    /**\n     * Initialize IndexedDB connection\n     */\n    async initialize() {\n        return new Promise((resolve, reject) => {\n            const request = indexedDB.open(this.dbName, this.version);\n            \n            request.onerror = () => {\n                reject(new Error(`Failed to open IndexedDB: ${request.error}`));\n            };\n            \n            request.onsuccess = () => {\n                this.db = request.result;\n                resolve();\n            };\n            \n            request.onupgradeneeded = (event) => {\n                const db = event.target.result;\n                \n                // Create encrypted keys store\n                if (!db.objectStoreNames.contains(this.KEYS_STORE)) {\n                    const keysStore = db.createObjectStore(this.KEYS_STORE, { keyPath: 'keyId' });\n                    keysStore.createIndex('timestamp', 'timestamp', { unique: false });\n                    keysStore.createIndex('algorithm', 'algorithm', { unique: false });\n                }\n                \n                // Create metadata store\n                if (!db.objectStoreNames.contains(this.METADATA_STORE)) {\n                    const metadataStore = db.createObjectStore(this.METADATA_STORE, { keyPath: 'keyId' });\n                    metadataStore.createIndex('created', 'created', { unique: false });\n                    metadataStore.createIndex('lastAccessed', 'lastAccessed', { unique: false });\n                }\n                \n                // Create salt store\n                if (!db.objectStoreNames.contains(this.SALT_STORE)) {\n                    db.createObjectStore(this.SALT_STORE, { keyPath: 'id' });\n                }\n            };\n        });\n    }\n    \n    /**\n     * Store encrypted key data\n     */\n    async storeEncryptedKey(keyId, encryptedData, iv, algorithm, usages, type, metadata = {}) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.KEYS_STORE, this.METADATA_STORE], 'readwrite');\n        \n        const keyRecord = {\n            keyId: keyId,\n            encryptedData: Array.from(new Uint8Array(encryptedData)), // Convert to array for storage\n            iv: Array.from(new Uint8Array(iv)),\n            algorithm: algorithm,\n            usages: usages,\n            type: type\n        };\n        \n        const metadataRecord = { keyId, ...metadata };\n        \n        return new Promise((resolve, reject) => {\n            const keysRequest = transaction.objectStore(this.KEYS_STORE).put(keyRecord);\n            const metadataRequest = transaction.objectStore(this.METADATA_STORE).put(metadataRecord);\n            \n            transaction.oncomplete = () => resolve();\n            transaction.onerror = () => reject(new Error(`Failed to store key: ${transaction.error}`));\n        });\n    }\n    \n    /**\n     * Retrieve encrypted key data\n     */\n    async getEncryptedKey(keyId) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.KEYS_STORE], 'readonly');\n        const store = transaction.objectStore(this.KEYS_STORE);\n        \n        return new Promise((resolve, reject) => {\n            const request = store.get(keyId);\n            \n            request.onsuccess = () => {\n                const result = request.result;\n                if (result) {\n                    // Convert arrays back to Uint8Array\n                    result.encryptedData = new Uint8Array(result.encryptedData);\n                    result.iv = new Uint8Array(result.iv);\n                }\n                resolve(result);\n            };\n            \n            request.onerror = () => reject(new Error(`Failed to retrieve key: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Update key metadata (e.g., last accessed time)\n     */\n    async updateKeyMetadata(keyId, updates) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.METADATA_STORE], 'readwrite');\n        const store = transaction.objectStore(this.METADATA_STORE);\n        \n        return new Promise((resolve, reject) => {\n            const getRequest = store.get(keyId);\n            \n            getRequest.onsuccess = () => {\n                const metadata = getRequest.result;\n                if (metadata) {\n                    Object.assign(metadata, updates);\n                    const putRequest = store.put(metadata);\n                    \n                    putRequest.onsuccess = () => resolve();\n                    putRequest.onerror = () => reject(new Error(`Failed to update metadata: ${putRequest.error}`));\n                } else {\n                    reject(new Error(`Key metadata not found: ${keyId}`));\n                }\n            };\n            \n            getRequest.onerror = () => reject(new Error(`Failed to get metadata: ${getRequest.error}`));\n        });\n    }\n\n    async getKeyMetadataRecord(keyId) {\n        if (!this.db) throw new Error('Database not initialized');\n        const transaction = this.db.transaction([this.METADATA_STORE], 'readonly');\n        const store = transaction.objectStore(this.METADATA_STORE);\n        return new Promise((resolve, reject) => {\n            const request = store.get(keyId);\n            request.onsuccess = () => resolve(request.result || null);\n            request.onerror = () => reject(new Error(`Failed to get metadata: ${request.error}`));\n        });\n    }\n\n    async putKeyMetadataRecord(record) {\n        if (!this.db) throw new Error('Database not initialized');\n        const transaction = this.db.transaction([this.METADATA_STORE], 'readwrite');\n        const store = transaction.objectStore(this.METADATA_STORE);\n        return new Promise((resolve, reject) => {\n            const request = store.put(record);\n            request.onsuccess = () => resolve();\n            request.onerror = () => reject(new Error(`Failed to store metadata: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Delete key and its metadata\n     */\n    async deleteKey(keyId) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.KEYS_STORE, this.METADATA_STORE], 'readwrite');\n        \n        return new Promise((resolve, reject) => {\n            const keysRequest = transaction.objectStore(this.KEYS_STORE).delete(keyId);\n            const metadataRequest = transaction.objectStore(this.METADATA_STORE).delete(keyId);\n            \n            transaction.oncomplete = () => resolve();\n            transaction.onerror = () => reject(new Error(`Failed to delete key: ${transaction.error}`));\n        });\n    }\n    \n    /**\n     * List all stored keys\n     */\n    async listKeys() {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.METADATA_STORE], 'readonly');\n        const store = transaction.objectStore(this.METADATA_STORE);\n        \n        return new Promise((resolve, reject) => {\n            const request = store.getAll();\n            \n            request.onsuccess = () => resolve(request.result);\n            request.onerror = () => reject(new Error(`Failed to list keys: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Store master key salt\n     */\n    async storeMasterSalt(salt) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.SALT_STORE], 'readwrite');\n        const store = transaction.objectStore(this.SALT_STORE);\n        \n        const saltRecord = {\n            id: 'master_salt',\n            salt: Array.from(new Uint8Array(salt))\n        };\n        \n        return new Promise((resolve, reject) => {\n            const request = store.put(saltRecord);\n            \n            request.onsuccess = () => resolve();\n            request.onerror = () => reject(new Error(`Failed to store salt: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Retrieve master key salt\n     */\n    async getMasterSalt() {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.SALT_STORE], 'readonly');\n        const store = transaction.objectStore(this.SALT_STORE);\n        \n        return new Promise((resolve, reject) => {\n            const request = store.get('master_salt');\n            \n            request.onsuccess = () => {\n                const result = request.result;\n                if (result) {\n                    resolve(new Uint8Array(result.salt));\n                } else {\n                    resolve(null);\n                }\n            };\n            \n            request.onerror = () => reject(new Error(`Failed to retrieve salt: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Clear all data (for security wipe)\n     */\n    async clearAll() {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.KEYS_STORE, this.METADATA_STORE, this.SALT_STORE], 'readwrite');\n        \n        return new Promise((resolve, reject) => {\n            const keysRequest = transaction.objectStore(this.KEYS_STORE).clear();\n            const metadataRequest = transaction.objectStore(this.METADATA_STORE).clear();\n            const saltRequest = transaction.objectStore(this.SALT_STORE).clear();\n            \n            transaction.oncomplete = () => resolve();\n            transaction.onerror = () => reject(new Error(`Failed to clear database: ${transaction.error}`));\n        });\n    }\n    \n    /**\n     * Close database connection\n     */\n    close() {\n        if (this.db) {\n            this.db.close();\n            this.db = null;\n        }\n    }\n}\n\n/**\n * Secure Persistent Key Storage with Key Wrapping\n * Implements secure storage of extractable keys using AES-GCM encryption\n */\nclass SecurePersistentKeyStorage {\n    constructor(masterKeyManager, indexedDBWrapper = null) {\n        this._masterKeyManager = masterKeyManager;\n        this._indexedDB = indexedDBWrapper || new SecureIndexedDBWrapper();\n        this._dbInitialized = false;\n        \n        // In-memory cache for restored keys (WeakMap for automatic cleanup)\n        this._keyCache = new WeakMap();\n        this._keyReferences = new Map(); // Strong references for active keys\n    }\n    \n    /**\n     * Initialize IndexedDB if not already done\n     */\n    async _ensureDBInitialized() {\n        if (!this._dbInitialized) {\n            await this._indexedDB.initialize();\n            this._dbInitialized = true;\n        }\n    }\n\n    async _ensureMasterKeyUnlocked() {\n        if (typeof this._masterKeyManager.isUnlocked === 'function' && !this._masterKeyManager.isUnlocked()) {\n            await this._masterKeyManager.unlock();\n        }\n    }\n    \n    /**\n     * Store extractable key with encryption\n     */\n    async storeExtractableKey(keyId, cryptoKey, metadata = {}) {\n        if (!(cryptoKey instanceof CryptoKey)) {\n            throw new Error('Only CryptoKey objects can be stored');\n        }\n        \n        if (!cryptoKey.extractable) {\n            throw new Error('Key must be extractable for persistent storage');\n        }\n        \n        try {\n            await this._ensureDBInitialized();\n            \n            // Export key to JWK\n            const jwkData = await crypto.subtle.exportKey('jwk', cryptoKey);\n            \n            // Encrypt JWK data\n            const { encryptedData, iv } = await this._encryptKeyData(jwkData);\n            \n            // Store encrypted data in IndexedDB\n            const encryptedMetadata = await this._encryptMetadata({\n                ...metadata,\n                created: Date.now(),\n                lastAccessed: Date.now(),\n                extractable: true,\n                persistent: true\n            });\n\n            await this._indexedDB.storeEncryptedKey(\n                keyId,\n                encryptedData,\n                iv,\n                cryptoKey.algorithm,\n                cryptoKey.usages,\n                cryptoKey.type,\n                encryptedMetadata\n            );\n            \n            // Store non-extractable reference in memory cache\n            const nonExtractableKey = await this._importAsNonExtractable(jwkData, cryptoKey.algorithm, cryptoKey.usages);\n            this._keyReferences.set(keyId, nonExtractableKey);\n            \n            return true;\n            \n        } catch (error) {\n            throw new Error(`Failed to store extractable key: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Retrieve and restore key from persistent storage\n     */\n    async retrieveKey(keyId) {\n        try {\n            // Check if key is already in memory cache\n            if (this._keyReferences.has(keyId)) {\n                return this._keyReferences.get(keyId);\n            }\n            \n            await this._ensureDBInitialized();\n            \n            // Get encrypted key data from IndexedDB\n            const keyRecord = await this._indexedDB.getEncryptedKey(keyId);\n            if (!keyRecord) {\n                return null;\n            }\n            \n            // Decrypt JWK data\n            const jwkData = await this._decryptKeyData(keyRecord.encryptedData, keyRecord.iv);\n            \n            // Import as non-extractable key\n            const restoredKey = await this._importAsNonExtractable(jwkData, keyRecord.algorithm, keyRecord.usages);\n            \n            // Cache in memory\n            this._keyReferences.set(keyId, restoredKey);\n            \n            // Update last accessed time\n            await this._updateEncryptedMetadata(keyId, { lastAccessed: Date.now() });\n            \n            return restoredKey;\n            \n        } catch (error) {\n            throw new Error(`Failed to retrieve key: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Delete key from persistent storage\n     */\n    async deleteKey(keyId) {\n        try {\n            await this._ensureDBInitialized();\n            \n            // Remove from IndexedDB\n            await this._indexedDB.deleteKey(keyId);\n            \n            // Remove from memory cache\n            this._keyReferences.delete(keyId);\n            \n            return true;\n            \n        } catch (error) {\n            throw new Error(`Failed to delete key: ${error.message}`);\n        }\n    }\n    \n    /**\n     * List all stored keys\n     */\n    async listStoredKeys() {\n        try {\n            await this._ensureDBInitialized();\n            const records = await this._indexedDB.listKeys();\n            const results = [];\n            for (const record of records) {\n                const metadata = await this._readMetadataWithMigration(record);\n                if (metadata) results.push({ keyId: record.keyId, ...metadata });\n            }\n            return results;\n        } catch (error) {\n            throw new Error(`Failed to list keys: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Clear all persistent storage\n     */\n    async clearAll() {\n        try {\n            await this._ensureDBInitialized();\n            \n            // Clear IndexedDB\n            await this._indexedDB.clearAll();\n            \n            // Clear memory cache\n            this._keyReferences.clear();\n            \n            return true;\n            \n        } catch (error) {\n            throw new Error(`Failed to clear storage: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Encrypt key data using master key\n     */\n    async _encryptKeyData(jwkData) {\n        // Convert JWK to JSON string and then to bytes\n        const jsonString = JSON.stringify(jwkData);\n        const data = new TextEncoder().encode(jsonString);\n        \n        await this._ensureMasterKeyUnlocked();\n        return await this._masterKeyManager.encryptBytes(data);\n    }\n    \n    /**\n     * Decrypt key data using master key\n     */\n    async _decryptKeyData(encryptedData, iv) {\n        await this._ensureMasterKeyUnlocked();\n        const decryptedData = await this._masterKeyManager.decryptBytes(encryptedData, iv);\n        \n        // Convert back to JWK\n        const jsonString = new TextDecoder().decode(decryptedData);\n        return JSON.parse(jsonString);\n    }\n\n    async _encryptMetadata(metadata) {\n        const data = new TextEncoder().encode(JSON.stringify(metadata));\n        await this._ensureMasterKeyUnlocked();\n        const { encryptedData, iv } = await this._masterKeyManager.encryptBytes(data);\n        return {\n            metadataVersion: 1,\n            encryptedMetadata: Array.from(encryptedData),\n            metadataIv: Array.from(iv)\n        };\n    }\n\n    async _decryptMetadataRecord(record) {\n        if (!record?.encryptedMetadata || !record?.metadataIv) {\n            throw new Error('Encrypted metadata missing');\n        }\n        await this._ensureMasterKeyUnlocked();\n        const decrypted = await this._masterKeyManager.decryptBytes(\n            new Uint8Array(record.encryptedMetadata),\n            new Uint8Array(record.metadataIv)\n        );\n        return JSON.parse(new TextDecoder().decode(decrypted));\n    }\n\n    async _readMetadataWithMigration(record) {\n        if (!record) return null;\n        if (record.encryptedMetadata) {\n            try {\n                return await this._decryptMetadataRecord(record);\n            } catch (error) {\n                // Corrupted encrypted metadata must not be exposed or trusted.\n                return null;\n            }\n        }\n\n        // Legacy plaintext record: read once, then migrate to encrypted envelope.\n        const { keyId, ...legacyMetadata } = record;\n        const encryptedRecord = { keyId, ...(await this._encryptMetadata(legacyMetadata)) };\n        await this._indexedDB.putKeyMetadataRecord(encryptedRecord);\n        return legacyMetadata;\n    }\n\n    async _updateEncryptedMetadata(keyId, updates) {\n        const record = await this._indexedDB.getKeyMetadataRecord(keyId);\n        if (!record) throw new Error(`Key metadata not found: ${keyId}`);\n        const current = await this._readMetadataWithMigration(record);\n        if (!current) throw new Error(`Key metadata corrupted: ${keyId}`);\n        await this._indexedDB.putKeyMetadataRecord({\n            keyId,\n            ...(await this._encryptMetadata({ ...current, ...updates }))\n        });\n    }\n    \n    /**\n     * Import JWK as non-extractable key\n     */\n    async _importAsNonExtractable(jwkData, algorithm, usages) {\n        return await crypto.subtle.importKey(\n            'jwk',\n            jwkData,\n            algorithm,\n            false, // non-extractable for security\n            usages\n        );\n    }\n    \n    /**\n     * Get storage statistics\n     */\n    async getStorageStats() {\n        try {\n            await this._ensureDBInitialized();\n            const keys = await this._indexedDB.listKeys();\n            \n            return {\n                totalKeys: keys.length,\n                memoryKeys: this._keyReferences.size,\n                persistentKeys: keys.length,\n                lastAccessed: keys.reduce((latest, key) => \n                    Math.max(latest, key.lastAccessed || 0), 0)\n            };\n            \n        } catch (error) {\n            return {\n                totalKeys: 0,\n                memoryKeys: this._keyReferences.size,\n                persistentKeys: 0,\n                lastAccessed: 0,\n                error: error.message\n            };\n        }\n    }\n}\n\n/**\n * Secure Master Key Manager with Password-Based Derivation\n * Implements PBKDF2-based key derivation and session management\n */\nclass SecureMasterKeyManager {\n    constructor(indexedDBWrapper = null) {\n        // Session state\n        this._keyHandle = null; // non-extractable CryptoKey\n        this._isUnlocked = false;\n        this._sessionTimeout = null;\n        this._lastActivity = null;\n        \n        // Configuration\n        this._sessionTimeoutMs = 60 * 60 * 1000; // 60 minutes (\u0443\u0432\u0435\u043B\u0438\u0447\u0435\u043D\u043E \u0441 15 \u043C\u0438\u043D\u0443\u0442)\n        this._inactivityTimeoutMs = 30 * 60 * 1000; // 30 minutes (\u0443\u0432\u0435\u043B\u0438\u0447\u0435\u043D\u043E \u0441 5 \u043C\u0438\u043D\u0443\u0442)\n        \n        // PBKDF2 parameters\n        this._pbkdf2Iterations = 310000; // OWASP 2025 recommendation for PBKDF2-SHA256\n        this._saltSize = 32; // 256 bits\n        \n        // IndexedDB wrapper for persistent salt storage\n        this._indexedDB = indexedDBWrapper || new SecureIndexedDBWrapper();\n        this._dbInitialized = false;\n        \n        // Event handlers\n        this._onPasswordRequired = null;\n        this._onSessionExpired = null;\n        this._onUnlocked = null;\n        \n        // Setup event listeners (disabled for better UX - no auto-disconnect)\n        // this._setupEventListeners();\n    }\n    \n    /**\n     * Set callback for password requests\n     */\n    setPasswordRequiredCallback(callback) {\n        this._onPasswordRequired = callback;\n    }\n    \n    /**\n     * Set callback for session expiration\n     */\n    setSessionExpiredCallback(callback) {\n        this._onSessionExpired = callback;\n    }\n    \n    /**\n     * Set callback for successful unlock\n     */\n    setUnlockedCallback(callback) {\n        this._onUnlocked = callback;\n    }\n    \n    /**\n     * Setup event listeners for session management\n     */\n    _setupEventListeners() {\n        // Handle page visibility changes\n        if (typeof document !== 'undefined') {\n            document.addEventListener('visibilitychange', () => {\n                if (document.hidden) {\n                    this._handleFocusOut();\n                } else {\n                    this._handleFocusIn();\n                }\n            });\n            \n            // Handle window focus/blur\n            window.addEventListener('blur', () => this._handleFocusOut());\n            window.addEventListener('focus', () => this._handleFocusIn());\n            \n            // Handle user activity\n            ['mousedown', 'mousemove', 'keypress', 'scroll', 'touchstart'].forEach(event => {\n                document.addEventListener(event, () => this._updateActivity(), { passive: true });\n            });\n        }\n    }\n    \n    /**\n     * Handle focus out - start inactivity timer\n     */\n    _handleFocusOut() {\n        if (this._isUnlocked) {\n            // Start shorter timeout when window loses focus\n            this._startInactivityTimer(this._inactivityTimeoutMs);\n        }\n    }\n    \n    /**\n     * Handle focus in - reset timers\n     */\n    _handleFocusIn() {\n        if (this._isUnlocked) {\n            this._resetSessionTimer();\n        }\n    }\n    \n    /**\n     * Update last activity timestamp\n     */\n    _updateActivity() {\n        this._lastActivity = Date.now();\n        if (this._isUnlocked) {\n            this._resetSessionTimer();\n        }\n    }\n    \n    /**\n     * Start session timer\n     */\n    _startSessionTimer() {\n        this._clearTimers();\n        this._sessionTimeout = setTimeout(() => {\n            this._expireSession('timeout');\n        }, this._sessionTimeoutMs);\n    }\n    \n    /**\n     * Start inactivity timer\n     */\n    _startInactivityTimer(timeout) {\n        this._clearTimers();\n        this._sessionTimeout = setTimeout(() => {\n            this._expireSession('inactivity');\n        }, timeout);\n    }\n    \n    /**\n     * Reset session timer\n     */\n    _resetSessionTimer() {\n        if (this._isUnlocked) {\n            this._startSessionTimer();\n        }\n    }\n    \n    /**\n     * Clear all timers\n     */\n    _clearTimers() {\n        if (this._sessionTimeout) {\n            clearTimeout(this._sessionTimeout);\n            this._sessionTimeout = null;\n        }\n    }\n    \n    /**\n     * Expire the current session\n     */\n    _expireSession(reason = 'unknown') {\n        if (this._isUnlocked) {\n            this._secureWipeMasterKey();\n            this._isUnlocked = false;\n            \n            if (this._onSessionExpired) {\n                this._onSessionExpired(reason);\n            }\n        }\n    }\n    \n    /**\n     * Initialize IndexedDB if not already done\n     */\n    async _ensureDBInitialized() {\n        if (!this._dbInitialized) {\n            await this._indexedDB.initialize();\n            this._dbInitialized = true;\n        }\n    }\n    \n    /**\n     * Generate salt for PBKDF2\n     */\n    _generateSalt() {\n        return crypto.getRandomValues(new Uint8Array(this._saltSize));\n    }\n    \n    /**\n     * Get or create persistent salt\n     */\n    async _getOrCreateSalt() {\n        await this._ensureDBInitialized();\n        \n        // Try to get existing salt\n        let salt = await this._indexedDB.getMasterSalt();\n        \n        if (!salt) {\n            // Generate new salt and store it\n            salt = this._generateSalt();\n            await this._indexedDB.storeMasterSalt(salt);\n        }\n        \n        return salt;\n    }\n    \n    /**\n     * Derive master key from password using PBKDF2\n     */\n    async _deriveKeyFromPassword(password, salt) {\n        try {\n            // Import password as key material\n            const passwordKey = await crypto.subtle.importKey(\n                'raw',\n                new TextEncoder().encode(password),\n                'PBKDF2',\n                false,\n                ['deriveKey']\n            );\n            \n            // Derive AES-GCM key using PBKDF2\n            const derivedKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'PBKDF2',\n                    salt: salt,\n                    iterations: this._pbkdf2Iterations,\n                    hash: 'SHA-256'\n                },\n                passwordKey,\n                {\n                    name: 'AES-GCM',\n                    length: 256\n                },\n                false, // non-extractable for security\n                ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey']\n            );\n            \n            return derivedKey;\n        } catch (error) {\n            throw new Error(`Key derivation failed: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Request password from user\n     */\n    async _requestPassword(isRetry = false) {\n        if (!this._onPasswordRequired) {\n            throw new Error('Password callback not set');\n        }\n        \n        return new Promise((resolve, reject) => {\n            this._onPasswordRequired(isRetry, (password) => {\n                if (password) {\n                    resolve(password);\n                } else {\n                    reject(new Error('Password not provided'));\n                }\n            });\n        });\n    }\n    \n    /**\n     * Unlock the master key with password\n     */\n    async unlock(password = null) {\n        try {\n            // Request password if not provided\n            if (!password) {\n                password = await this._requestPassword(false);\n            }\n            \n            // Get or create persistent salt\n            const salt = await this._getOrCreateSalt();\n            \n            // Derive non-extractable key handle\n            this._keyHandle = await this._deriveKeyFromPassword(password, salt);\n            \n            // Mark as unlocked\n            this._isUnlocked = true;\n            this._lastActivity = Date.now();\n            \n            // Start session timer\n            this._startSessionTimer();\n            \n            // Securely wipe password from memory\n            password = null;\n            \n            if (this._onUnlocked) {\n                this._onUnlocked();\n            }\n            \n            return { success: true };\n            \n        } catch (error) {\n            // Securely wipe password on error\n            password = null;\n            throw error;\n        }\n    }\n    \n    /**\n     * Lock the master key\n     */\n    lock() {\n        this._expireSession('manual');\n    }\n    \n    /**\n     * Get master key (only if unlocked)\n     */\n    // Prevent direct key access; provide operations only\n    async encryptBytes(plainBytes) {\n        if (!this._isUnlocked || !this._keyHandle) {\n            throw new Error('Master key is locked');\n        }\n        this._updateActivity();\n        const iv = crypto.getRandomValues(new Uint8Array(12));\n        const encrypted = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, this._keyHandle, plainBytes);\n        return { encryptedData: new Uint8Array(encrypted), iv };\n    }\n\n    async decryptBytes(encryptedBytes, iv) {\n        if (!this._isUnlocked || !this._keyHandle) {\n            throw new Error('Master key is locked');\n        }\n        this._updateActivity();\n        const decrypted = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, this._keyHandle, encryptedBytes);\n        return new Uint8Array(decrypted);\n    }\n    \n    /**\n     * Check if master key is unlocked\n     */\n    isUnlocked() {\n        // The derived key lives in _keyHandle (non-extractable CryptoKey). This\n        // used to test a long-renamed `_masterKey` field, which was always\n        // undefined and therefore never actually gated anything.\n        return this._isUnlocked && this._keyHandle !== null;\n    }\n    \n    /**\n     * Get session status\n     */\n    getSessionStatus() {\n        return {\n            isUnlocked: this._isUnlocked,\n            lastActivity: this._lastActivity,\n            sessionTimeoutMs: this._sessionTimeoutMs,\n            inactivityTimeoutMs: this._inactivityTimeoutMs\n        };\n    }\n    \n    /**\n     * Securely wipe master key from memory\n     */\n    _secureWipeMasterKey() {\n        if (this._keyHandle) {\n            // CryptoKey objects are automatically garbage collected\n            // but we clear the reference immediately\n            this._keyHandle = null;\n        }\n        this._clearTimers();\n    }\n    \n    /**\n     * Cleanup on destruction\n     */\n    destroy() {\n        this._secureWipeMasterKey();\n        this._isUnlocked = false;\n        \n        // Remove event listeners\n        if (typeof document !== 'undefined') {\n            document.removeEventListener('visibilitychange', this._handleFocusOut);\n            window.removeEventListener('blur', this._handleFocusOut);\n            window.removeEventListener('focus', this._handleFocusIn);\n        }\n    }\n}\n\nexport { \n    EnhancedSecureWebRTCManager, \n    SecureMasterKeyManager, \n    SecureIndexedDBWrapper, \n    SecurePersistentKeyStorage \n};\n", "import { EnhancedSecureCryptoUtils } from '../crypto/EnhancedSecureCryptoUtils.js';\nimport { EnhancedSecureWebRTCManager } from '../network/EnhancedSecureWebRTCManager.js';\nimport { EnhancedSecureFileTransfer } from '../transfer/EnhancedSecureFileTransfer.js';\nimport { NotificationIntegration } from '../notifications/NotificationIntegration.js';\n\n// Import UI components (side-effect: they attach themselves to window.*)\nimport '../components/ui/Header.jsx';\nimport '../components/ui/LanguageSwitcher.jsx';\nimport '../components/ui/DownloadApps.jsx';\nimport '../components/ui/BecomePartner.jsx';\nimport '../components/ui/UniqueFeatureSlider.jsx';\nimport '../components/ui/Roadmap.jsx';\nimport '../components/ui/DonateCrypto.jsx';\nimport '../components/ui/CommunityCTA.jsx';\nimport '../components/ui/FileTransfer.jsx';\nimport '../components/ui/IceServerSettings.jsx';\nimport '../components/ui/CallUI.jsx';\n\n// Expose to global for legacy usage inside app code\nwindow.EnhancedSecureCryptoUtils = EnhancedSecureCryptoUtils;\nwindow.EnhancedSecureWebRTCManager = EnhancedSecureWebRTCManager;\nwindow.EnhancedSecureFileTransfer = EnhancedSecureFileTransfer;\nwindow.NotificationIntegration = NotificationIntegration;\n\n// Earlier releases had an unused QR flow that persisted session invitation data\n// under `qr_offer_<id>` and never removed it. The writer is gone, but records it\n// already left on disk are not, and they outlive a disconnect and the in-app\n// \"clear data\". Purge them once on startup, so updating actually clears what was\n// stored rather than only stopping new entries.\nconst purgeLegacyOfferRecords = () => {\n    try {\n        const stale = [];\n        for (let i = 0; i < localStorage.length; i++) {\n            const key = localStorage.key(i);\n            if (key && key.startsWith('qr_offer_')) stale.push(key);\n        }\n        for (const key of stale) {\n            try { localStorage.removeItem(key); } catch (_) {}\n        }\n    } catch (_) {\n        // Private mode / disabled storage: nothing to purge.\n    }\n};\n\n/**\n * QR generation and scanning live in their own bundle \u2014 142 KB gzipped, the third\n * largest thing this site serves. It used to be a <script type=\"module\"> in <head>,\n * which meant every first visit paid for it before the app was interactive, on a\n * screen that has no QR on it: the scanner only exists behind a button, and the\n * generator only runs once a channel is being created.\n *\n * So it is fetched after the app has mounted and the browser is idle. Every call site\n * already checks `typeof window.<fn> === 'function'` before using it, so arriving late\n * is not an error condition \u2014 but the scanner effect in app.jsx keys off this event to\n * start the camera for anyone who opened the modal in the meantime.\n */\nconst loadQrBundle = () => {\n    if (window.__qrReady) return window.__qrReady;\n    window.__qrReady = import('/dist/qr-local.js')\n        .then(() => {\n            window.dispatchEvent(new Event('securebit:qr-ready'));\n        })\n        .catch((error) => {\n            console.warn('QR bundle failed to load:', error && error.message);\n            // Let a later attempt retry rather than caching the rejection forever.\n            window.__qrReady = null;\n        });\n    return window.__qrReady;\n};\n\nconst scheduleQrBundle = () => {\n    if (typeof window.requestIdleCallback === 'function') {\n        window.requestIdleCallback(loadQrBundle, { timeout: 3000 });\n    } else {\n        setTimeout(loadQrBundle, 1200);\n    }\n};\n\n// Mount application once DOM and modules are ready\nconst start = () => {\n    purgeLegacyOfferRecords();\n  if (typeof window.initializeApp === 'function') {\n    window.initializeApp();\n  } else if (window.DEBUG_MODE) {\n    console.error('initializeApp is not defined on window');\n  }\n  scheduleQrBundle();\n};\n\nif (document.readyState === 'loading') {\n  document.addEventListener('DOMContentLoaded', start);\n} else {\n  start();\n}\n", "{\n  \"name\": \"securebit-chat\",\n  \"version\": \"6.8.8\",\n  \"description\": \"Secure P2P Communication Application with End-to-End Encryption\",\n  \"main\": \"index.html\",\n  \"scripts\": {\n    \"build\": \"npm run build:i18n && npm run build:docs && npm run build:js && npm run build:css && npm run post-build\",\n    \"build:css\": \"npx tailwindcss -i src/styles/tw-input.css -o assets/tailwind.css --minify --content \\\"./index.html,./src/**/*.jsx,./src/**/*.js\\\" && node scripts/build-css.js\",\n    \"build:js\": \"npx esbuild src/app.jsx --bundle --format=esm --outfile=dist/app.js --minify --sourcemap && npx esbuild src/scripts/app-boot.js --bundle --format=esm --outfile=dist/app-boot.js --minify --sourcemap && npx esbuild src/scripts/qr-local.js --bundle --format=esm --outfile=dist/qr-local.js --minify --sourcemap\",\n    \"build:i18n\": \"node scripts/build-i18n.js\",\n    \"build:docs\": \"node scripts/build-docs.js\",\n    \"post-build\": \"node scripts/post-build.js\",\n    \"dev\": \"npm run build && python -m http.server 8000\",\n    \"watch\": \"npx tailwindcss -i src/styles/tw-input.css -o assets/tailwind.css --watch\",\n    \"serve\": \"npx http-server -p 8000\",\n    \"test\": \"node tests/sas-verification.test.mjs && node tests/verification-gate.test.mjs && node tests/inbound-frame-authentication.test.mjs && node tests/control-frame-authorization.test.mjs && node tests/security-level-shape.test.mjs && node tests/desktop-download-links.test.mjs && node tests/file-transfer-consent.test.mjs && node tests/incoming-message-sanitization.test.mjs && node tests/outgoing-message-integrity.test.mjs && node tests/secure-chat-features.test.mjs && node tests/notification-meta-forwarding.test.mjs && node tests/notification-ephemeral-privacy.test.mjs && node tests/key-derivation-compat.test.mjs && node tests/key-exchange-e2e.test.mjs && node tests/file-type-allowlist.test.mjs && node tests/voice-auto-accept.test.mjs && node tests/legacy-offer-purge.test.mjs && node tests/webrtc-privacy-mode.test.mjs && node tests/indexeddb-metadata-encryption.test.mjs && node tests/disconnect-cleanup.test.mjs && node tests/timer-lifecycle.test.mjs && node tests/file-transfer-cleanup.test.mjs && node tests/file-transfer-ui-cleanup.test.mjs && node tests/file-transfer-callback-propagation.test.mjs && node tests/debug-window-hooks.test.mjs && node tests/inbound-message-rate-limit.test.mjs && node tests/file-transfer-chunk-rate-limit.test.mjs && node tests/ice-servers-validation.test.mjs && node tests/sessions-reducer.test.mjs && node tests/webrtc-sdp.test.mjs && node tests/webrtc-video.test.mjs && node tests/webrtc-adaptation.test.mjs && node tests/session-recovery.test.mjs && node tests/qr-zip-bomb.test.mjs && node tests/ice-gathering-patience.test.mjs && node tests/version-consistency.test.mjs && node tests/i18n-build.test.mjs && node tests/docs-build.test.mjs && node tests/qr-bundle-deferred.test.mjs && node tests/icon-subset.test.mjs && node tests/i18n-runtime.test.mjs && node tests/language-switcher.test.mjs && node tests/language-suggestion.test.mjs && node tests/rtl-layout.test.mjs && node tests/asset-paths-locale-safe.test.mjs && node tests/double-ratchet.test.mjs && node tests/ratchet-integration.test.mjs && node tests/descriptor-sbq2.test.mjs && node tests/sbq2-key-exchange.test.mjs && node tests/qr-scan-single-frame.test.mjs && node tests/mobile-chat-layout.test.mjs && node tests/group-crypto.test.mjs && node tests/groups-reducer.test.mjs && node tests/group-session-e2e.test.mjs && node tests/group-app-integration.test.mjs && node tests/group-sender.test.mjs && node tests/group-mesh.test.mjs && node tests/group-call.test.mjs && node tests/group-call-autoanswer.test.mjs && node tests/apple-motion.test.mjs && node tests/pwa-install-prompt-capture.test.mjs && node tests/theme-switching.test.mjs && node tests/turn-credentials.test.mjs\"\n  },\n  \"keywords\": [\n    \"p2p\",\n    \"chat\",\n    \"encryption\",\n    \"webrtc\",\n    \"privacy\",\n    \"security\"\n  ],\n  \"author\": \"SecureBit Team\",\n  \"license\": \"MIT\",\n  \"devDependencies\": {\n    \"esbuild\": \"^0.28.1\",\n    \"jsdom\": \"^28.1.0\",\n    \"marked\": \"^18.0.11\",\n    \"tailwindcss\": \"3.4.17\"\n  },\n  \"dependencies\": {\n    \"base64-js\": \"1.5.1\",\n    \"cbor-js\": \"0.1.0\",\n    \"dompurify\": \"^3.4.4\",\n    \"html5-qrcode\": \"2.3.8\",\n    \"pako\": \"2.1.0\",\n    \"qr-scanner\": \"1.4.2\",\n    \"qrcode\": \"1.5.4\"\n  }\n}\n", "// Switching language is a navigation, not a state change: every locale is its own\n// document at its own URL, generated at build time. So the entries are ordinary links \u2014\n// they work before React has mounted, they open in a new tab, they can be copied and\n// shared, and a crawler can follow them. A <button> that re-rendered the page in another\n// language would leave every language sharing one URL, which is the one thing this\n// arrangement exists to prevent.\n//\n// The list is a dropdown showing short codes: with nine languages, a row of full native\n// names does not fit a phone header. Every link stays in the DOM whether the menu is open\n// or shut \u2014 hiding is visual only, so nothing depends on the menu having been opened.\n//\n// Because it navigates, the switcher belongs on the landing page only. Offering it during\n// a call or a chat would invite someone to reload the document and drop the peer\n// connection mid-conversation.\n\nimport { SUPPORTED_LOCALES, currentLocale, languageLinks, rememberLocale, t } from '../../i18n/index.js';\n\nconst LanguageSwitcher = () => {\n    if (SUPPORTED_LOCALES.length < 2) return null;\n\n    const [open, setOpen] = React.useState(false);\n    const rootRef = React.useRef(null);\n\n    const pathname = typeof window !== 'undefined' ? window.location.pathname : '/';\n    const links = languageLinks({ pathname, active: currentLocale() });\n    const active = links.find((l) => l.isCurrent) || links[0];\n\n    // Close on an outside press or Escape \u2014 the two ways people expect a menu to go away.\n    React.useEffect(() => {\n        if (!open) return undefined;\n        const onDown = (e) => {\n            if (rootRef.current && !rootRef.current.contains(e.target)) setOpen(false);\n        };\n        const onKey = (e) => { if (e.key === 'Escape') setOpen(false); };\n        document.addEventListener('pointerdown', onDown);\n        document.addEventListener('keydown', onKey);\n        return () => {\n            document.removeEventListener('pointerdown', onDown);\n            document.removeEventListener('keydown', onKey);\n        };\n    }, [open]);\n\n    const trigger = React.createElement('button', {\n        key: 'trigger',\n        type: 'button',\n        onClick: () => setOpen((v) => !v),\n        'aria-haspopup': 'menu',\n        'aria-expanded': open ? 'true' : 'false',\n        'aria-label': t('language.label'),\n        style: {\n            display: 'flex', alignItems: 'center', gap: '6px',\n            padding: '7px 10px', borderRadius: '9px',\n            border: '1px solid rgba(var(--sb-ink), 0.07)',\n            background: open ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.02)',\n            color: 'var(--sb-text-4)', font: 'inherit', fontSize: '12.5px', fontWeight: 600,\n            cursor: 'pointer', transition: 'background .15s, color .15s',\n        },\n    }, [\n        React.createElement('span', { key: 'c' }, active ? active.abbr : ''),\n        React.createElement('svg', {\n            key: 'v', width: 11, height: 11, viewBox: '0 0 24 24', fill: 'none',\n            stroke: 'currentColor', strokeWidth: 2.4, strokeLinecap: 'round', strokeLinejoin: 'round',\n            style: { transform: open ? 'rotate(180deg)' : 'none', transition: 'transform .18s' },\n            dangerouslySetInnerHTML: { __html: '<path d=\"M6 9l6 6 6-6\"/>' },\n        }),\n    ]);\n\n    const menu = React.createElement('div', {\n        key: 'menu',\n        role: 'menu',\n        // The same scrollbar the chat uses, rather than the browser's default slab \u2014\n        // a 170px menu is exactly where a 15px stock scrollbar looks like a mistake.\n        className: 'sb-scroll',\n        // Kept in the DOM when shut: the links stay followable and the menu costs nothing\n        // to reopen.\n        style: {\n            position: 'absolute', top: 'calc(100% + 6px)', insetInlineEnd: 0, zIndex: 60,\n            display: open ? 'block' : 'none',\n            minWidth: '170px', padding: '5px', borderRadius: '11px',\n            border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)',\n            boxShadow: '0 14px 34px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))',\n            // Thirteen languages is taller than a phone in landscape. Cap it and scroll\n            // rather than let the list run off the bottom, where the last few entries\n            // would be unreachable.\n            maxHeight: 'min(62vh, 420px)', overflowY: 'auto', overscrollBehavior: 'contain',\n        },\n    }, links.map((link) => React.createElement('a', {\n        key: link.code,\n        href: link.href,\n        hrefLang: link.hrefLang,\n        lang: link.hrefLang,\n        // Each row is a word in its own script, so it gets its own direction \u2014 the menu\n        // around it stays in the direction of the page being read.\n        dir: link.dir,\n        role: 'menuitem',\n        // aria-current names the page you are on for a screen reader; the weight and\n        // contrast below say the same thing to everyone else.\n        'aria-current': link.isCurrent ? 'page' : undefined,\n        // Remember the choice, then let the browser navigate. The click is deliberately\n        // not intercepted \u2014 the next locale is a different document.\n        onClick: () => rememberLocale(link.code),\n        style: {\n            display: 'flex', alignItems: 'center', gap: '10px',\n            padding: '8px 10px', borderRadius: '8px',\n            fontSize: '13px',\n            fontWeight: link.isCurrent ? 600 : 500,\n            color: link.isCurrent ? 'var(--sb-text-2)' : 'var(--sb-text-6)',\n            background: link.isCurrent ? 'rgba(var(--sb-ink), 0.06)' : 'transparent',\n            textDecoration: 'none', whiteSpace: 'nowrap',\n        },\n    }, [\n        React.createElement('span', {\n            key: 'a',\n            style: { fontSize: '11px', fontWeight: 700, letterSpacing: '0.4px', color: 'var(--sb-text-9)', width: '22px', flex: 'none', textAlign: 'start' },\n        }, link.abbr),\n        React.createElement('span', { key: 'n' }, link.label),\n    ])));\n\n    return React.createElement('nav', {\n        ref: rootRef,\n        'aria-label': t('language.label'),\n        style: { position: 'relative', display: 'inline-flex' },\n    }, [trigger, menu]);\n};\n\nwindow.LanguageSwitcher = LanguageSwitcher;\n\nexport { LanguageSwitcher };\n", "// The three-state theme control, modelled on the language switcher next to it.\n//\n// Three states rather than a two-way toggle, because \"follow the system\" is a real\n// preference and not the same as \"dark\": someone whose laptop turns light at sunrise\n// wants the page to follow, and a two-way switch has nowhere to say so. The stored\n// value is the *mode* ('system' | 'light' | 'dark'), never the colour it resolved to,\n// so a page opened tomorrow in system mode answers the question again rather than\n// replaying yesterday's answer.\n//\n// Nothing here owns the theme. src/scripts/theme-boot.js does \u2014 it runs blocking in\n// <head>, long before React exists, because the theme has to be right on the first\n// paint. This component is a view onto it: it reads window.SecureBitTheme, calls set(),\n// and re-renders from the subscription rather than from its own state, so the header\n// stays correct when the OS theme changes under it or another tab switches.\n//\n// Landing page only, like the language switcher, though for a different reason: there\n// is no room for it in the connected header, which already carries the security pill,\n// the connection status and the network settings, and the preference persists across\n// the transition into the chat anyway.\n\nimport { t } from '../../i18n/index.js';\n\n// 24\u00D724 line icons, drawn to match the chevron the language switcher uses.\nconst ICON = {\n    system: '<rect x=\"2.5\" y=\"4\" width=\"19\" height=\"13\" rx=\"2\"/><path d=\"M8 20.5h8M12 17.5v3\"/>',\n    light: '<circle cx=\"12\" cy=\"12\" r=\"4.2\"/><path d=\"M12 2.6v2.4M12 19v2.4M2.6 12h2.4M19 12h2.4M5.3 5.3l1.7 1.7M17 17l1.7 1.7M18.7 5.3L17 7M7 17l-1.7 1.7\"/>',\n    dark: '<path d=\"M20.5 14.3A8.6 8.6 0 0 1 9.7 3.5a8.6 8.6 0 1 0 10.8 10.8z\"/>',\n};\n\nconst svg = (path, size, width) => React.createElement('svg', {\n    width: size, height: size, viewBox: '0 0 24 24', fill: 'none',\n    stroke: 'currentColor', strokeWidth: width, strokeLinecap: 'round', strokeLinejoin: 'round',\n    'aria-hidden': 'true',\n    dangerouslySetInnerHTML: { __html: path },\n});\n\nconst ThemeSwitcher = () => {\n    const api = typeof window !== 'undefined' ? window.SecureBitTheme : null;\n    // Without the boot script there is nothing to drive, and a control that cannot\n    // change anything is worse than no control.\n    if (!api) return null;\n\n    const [open, setOpen] = React.useState(false);\n    const [mode, setMode] = React.useState(() => api.get());\n    const [resolved, setResolved] = React.useState(() => api.resolved());\n    const rootRef = React.useRef(null);\n\n    // The mode can change without this component doing it \u2014 the OS flipping while in\n    // system mode, or another tab writing the preference.\n    React.useEffect(() => api.subscribe((nextMode, nextResolved) => {\n        setMode(nextMode);\n        setResolved(nextResolved);\n    }), []);\n\n    React.useEffect(() => {\n        if (!open) return undefined;\n        const onDown = (e) => {\n            if (rootRef.current && !rootRef.current.contains(e.target)) setOpen(false);\n        };\n        const onKey = (e) => { if (e.key === 'Escape') setOpen(false); };\n        document.addEventListener('pointerdown', onDown);\n        document.addEventListener('keydown', onKey);\n        return () => {\n            document.removeEventListener('pointerdown', onDown);\n            document.removeEventListener('keydown', onKey);\n        };\n    }, [open]);\n\n    const OPTIONS = [\n        { mode: 'system', icon: ICON.system, label: t('theme.system') },\n        { mode: 'light', icon: ICON.light, label: t('theme.light') },\n        { mode: 'dark', icon: ICON.dark, label: t('theme.dark') },\n    ];\n\n    // The trigger shows what you are *getting*, not what you picked: in system mode the\n    // useful thing to see is whether the page is currently light or dark. Which mode is\n    // selected is the menu's job, and the check mark there says it.\n    const triggerIcon = mode === 'system' ? ICON.system : (resolved === 'light' ? ICON.light : ICON.dark);\n    const current = OPTIONS.find((o) => o.mode === mode) || OPTIONS[0];\n\n    const trigger = React.createElement('button', {\n        key: 'trigger',\n        type: 'button',\n        onClick: () => setOpen((v) => !v),\n        'aria-haspopup': 'menu',\n        'aria-expanded': open ? 'true' : 'false',\n        'aria-label': t('theme.label') + ': ' + current.label,\n        title: t('theme.label'),\n        style: {\n            display: 'flex', alignItems: 'center', gap: '6px',\n            padding: '8px 9px', borderRadius: '9px',\n            border: '1px solid rgba(var(--sb-ink), 0.07)',\n            background: open ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.02)',\n            color: 'var(--sb-text-4)', font: 'inherit',\n            cursor: 'pointer', transition: 'background .15s, color .15s',\n        },\n    }, [\n        React.createElement('span', { key: 'i', style: { display: 'grid', placeItems: 'center' } }, svg(triggerIcon, 15, 1.9)),\n        React.createElement('svg', {\n            key: 'v', width: 11, height: 11, viewBox: '0 0 24 24', fill: 'none',\n            stroke: 'currentColor', strokeWidth: 2.4, strokeLinecap: 'round', strokeLinejoin: 'round',\n            style: { transform: open ? 'rotate(180deg)' : 'none', transition: 'transform .18s' },\n            dangerouslySetInnerHTML: { __html: '<path d=\"M6 9l6 6 6-6\"/>' },\n        }),\n    ]);\n\n    const menu = React.createElement('div', {\n        key: 'menu',\n        role: 'menu',\n        style: {\n            position: 'absolute', top: 'calc(100% + 6px)', insetInlineEnd: 0, zIndex: 60,\n            display: open ? 'block' : 'none',\n            minWidth: '158px', padding: '5px', borderRadius: '11px',\n            border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)',\n            boxShadow: '0 14px 34px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))',\n        },\n    }, OPTIONS.map((option) => {\n        const active = option.mode === mode;\n        return React.createElement('button', {\n            key: option.mode,\n            type: 'button',\n            role: 'menuitemradio',\n            'aria-checked': active ? 'true' : 'false',\n            onClick: () => { api.set(option.mode); setOpen(false); },\n            style: {\n                width: '100%', display: 'flex', alignItems: 'center', gap: '10px',\n                padding: '8px 10px', borderRadius: '8px', border: 'none',\n                fontSize: '13px', fontFamily: 'inherit',\n                fontWeight: active ? 600 : 500,\n                color: active ? 'var(--sb-text-2)' : 'var(--sb-text-6)',\n                background: active ? 'rgba(var(--sb-ink), 0.06)' : 'transparent',\n                cursor: 'pointer', textAlign: 'start', whiteSpace: 'nowrap',\n            },\n        }, [\n            React.createElement('span', {\n                key: 'i',\n                style: { flex: 'none', display: 'grid', placeItems: 'center', width: '16px', color: active ? 'var(--sb-orange)' : 'var(--sb-text-9)' },\n            }, svg(option.icon, 14, 1.9)),\n            React.createElement('span', { key: 'l', style: { flex: 1 } }, option.label),\n            // The check is the only thing that distinguishes \"system, currently dark\"\n            // from \"dark\" \u2014 the trigger icon cannot, because both look dark.\n            active && React.createElement('span', {\n                key: 'c',\n                style: { flex: 'none', display: 'grid', placeItems: 'center', color: 'var(--sb-orange)' },\n            }, svg('<path d=\"M4.5 12.5l5 5 10-11\"/>', 12, 2.6)),\n        ]);\n    }));\n\n    return React.createElement('div', {\n        ref: rootRef,\n        style: { position: 'relative', display: 'inline-flex' },\n    }, [trigger, menu]);\n};\n\nwindow.ThemeSwitcher = ThemeSwitcher;\n\nexport { ThemeSwitcher };\n", "import { t } from '../../i18n/index.js';\n// The version shown in the header comes from package.json rather than a literal,\n// so a release cannot ship a header advertising the previous one. It was\n// hard-coded and drifted. A named import lets the bundler inline just this field\n// instead of embedding the whole manifest.\nimport { version as packageVersion } from '../../../package.json';\nimport { LanguageSwitcher } from './LanguageSwitcher.jsx';\nimport { ThemeSwitcher } from './ThemeSwitcher.jsx';\n\nconst APP_VERSION = `v${packageVersion}`;\n\nconst EnhancedMinimalHeader = ({\n    status,\n    fingerprint,\n    verificationCode,\n    onDisconnect,\n    isConnected,\n    securityLevel,\n    webrtcManager\n}) => {\n    const [realSecurityLevel, setRealSecurityLevel] = React.useState(null);\n    const [lastSecurityUpdate, setLastSecurityUpdate] = React.useState(0);\n    // Added local session state to remove references errors after session timer removal\n    const [hasActiveSession, setHasActiveSession] = React.useState(false);\n    const [currentTimeLeft, setCurrentTimeLeft] = React.useState(0);\n    const [sessionType, setSessionType] = React.useState('unknown');\n\n    // ============================================\n    // FIXED SECURITY UPDATE LOGIC\n    // ============================================\n    \n    React.useEffect(() => {\n        let isUpdating = false; \n        let lastUpdateAttempt = 0; \n        \n        const updateRealSecurityStatus = async () => {\n            const now = Date.now();\n            if (now - lastUpdateAttempt < 10000) { \n                return;\n            }\n\n            if (isUpdating) {\n                return;\n            }\n            \n            isUpdating = true;\n            lastUpdateAttempt = now;\n            \n            try {\n                if (!webrtcManager || !isConnected) {\n                    return;\n                }\n                \n                const activeWebrtcManager = webrtcManager;\n                \n                let realSecurityData = null;\n                \n                if (typeof activeWebrtcManager.getRealSecurityLevel === 'function') {\n                    realSecurityData = await activeWebrtcManager.getRealSecurityLevel();\n                } else if (typeof activeWebrtcManager.calculateAndReportSecurityLevel === 'function') {\n                    realSecurityData = await activeWebrtcManager.calculateAndReportSecurityLevel();\n                } else {\n                    realSecurityData = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(activeWebrtcManager);\n                }\n                \n                if (realSecurityData && realSecurityData.isRealData !== false) {\n                    const currentScore = realSecurityLevel?.score || 0;\n                    const newScore = realSecurityData.score || 0;\n\n                    if (currentScore !== newScore || !realSecurityLevel) {\n                        setRealSecurityLevel(realSecurityData);\n                        setLastSecurityUpdate(now);\n\n                        } else if (window.DEBUG_MODE) {\n                    }\n                } else {\n                    \n                }\n                \n            } catch (error) {\n                \n            } finally {\n                isUpdating = false;\n            }\n        };\n\n        if (isConnected) {\n            updateRealSecurityStatus();\n            \n            if (!realSecurityLevel || realSecurityLevel.score < 50) {\n                const retryInterval = setInterval(() => {\n                    if (!realSecurityLevel || realSecurityLevel.score < 50) {\n                        updateRealSecurityStatus();\n                    } else {\n                        clearInterval(retryInterval);\n                    }\n                }, 5000); \n                \n                setTimeout(() => clearInterval(retryInterval), 30000);\n            }\n        }\n\n        const interval = setInterval(updateRealSecurityStatus, 30000);\n        \n        return () => clearInterval(interval);\n    }, [webrtcManager, isConnected]);\n\n    // ============================================\n    // FIXED EVENT HANDLERS\n    // ============================================\n\n    React.useEffect(() => {\n        const handleSecurityUpdate = (event) => {\n\n            setTimeout(() => {\n                setLastSecurityUpdate(0);\n            }, 100);\n        };\n\n        const handleRealSecurityCalculated = (event) => {\n            \n            if (event.detail && event.detail.securityData) {\n                setRealSecurityLevel(event.detail.securityData);\n                setLastSecurityUpdate(Date.now());\n            }\n        };\n\n        document.addEventListener('security-level-updated', handleSecurityUpdate);\n        document.addEventListener('real-security-calculated', handleRealSecurityCalculated);\n        \n        window.forceHeaderSecurityUpdate = (webrtcManager) => {\n            \n            if (webrtcManager && window.EnhancedSecureCryptoUtils) {\n                window.EnhancedSecureCryptoUtils.calculateSecurityLevel(webrtcManager)\n                    .then(securityData => {\n                        if (securityData && securityData.isRealData !== false) {\n                            setRealSecurityLevel(securityData);\n                            setLastSecurityUpdate(Date.now());\n                            \n                        }\n                    })\n                    .catch(error => {\n                        \n                    });\n            } else {\n                setLastSecurityUpdate(0); \n            }\n        };\n\n        return () => {\n            document.removeEventListener('security-level-updated', handleSecurityUpdate);\n            document.removeEventListener('real-security-calculated', handleRealSecurityCalculated);\n        };\n    }, []);\n\n    // ============================================\n    // REST of the component logic\n    // ============================================\n\n    React.useEffect(() => {\n        // All security features are enabled by default - no session management needed\n        setHasActiveSession(true);\n        setCurrentTimeLeft(0);\n        setSessionType('premium'); // All features enabled\n    }, []);\n\n    React.useEffect(() => {\n        // All security features are enabled by default\n        setHasActiveSession(true);\n        setCurrentTimeLeft(0);\n        setSessionType('premium'); // All features enabled\n    }, []);\n\n    React.useEffect(() => {\n        const handleForceUpdate = (event) => {\n            // All security features are enabled by default\n            setHasActiveSession(true);\n            setCurrentTimeLeft(0);\n            setSessionType('premium'); // All features enabled\n        };\n\n        // Connection cleanup handler (use existing event from module)\n        const handleConnectionCleaned = () => {\n            \n\n            setRealSecurityLevel(null);\n            setLastSecurityUpdate(0);\n\n            setHasActiveSession(false);\n            setCurrentTimeLeft(0);\n            setSessionType('unknown');\n        };\n\n        const handlePeerDisconnect = () => {\n            \n\n            setRealSecurityLevel(null);\n            setLastSecurityUpdate(0);\n        };\n\n        const handleDisconnected = () => {\n\n            setRealSecurityLevel(null);\n            setLastSecurityUpdate(0);\n            setHasActiveSession(false);\n            setCurrentTimeLeft(0);\n            setSessionType('unknown');\n        };\n\n        document.addEventListener('force-header-update', handleForceUpdate);\n        document.addEventListener('peer-disconnect', handlePeerDisconnect);\n        document.addEventListener('connection-cleaned', handleConnectionCleaned);\n        document.addEventListener('disconnected', handleDisconnected);\n        \n        return () => {\n            document.removeEventListener('force-header-update', handleForceUpdate);\n            document.removeEventListener('peer-disconnect', handlePeerDisconnect);\n            document.removeEventListener('connection-cleaned', handleConnectionCleaned);\n            document.removeEventListener('disconnected', handleDisconnected);\n        };\n    }, []);\n\n    // ============================================\n    // SECURITY INDICATOR CLICK HANDLER\n    // ============================================\n\n    const handleSecurityClick = async (event) => {\n        // Check if it's a right-click or Ctrl+click to disconnect\n        if (event && (event.button === 2 || event.ctrlKey || event.metaKey)) {\n            if (onDisconnect && typeof onDisconnect === 'function') {\n                onDisconnect();\n                return;\n            }\n        }\n\n        // Prevent default behavior\n        event.preventDefault();\n        event.stopPropagation();\n\n\n        // Run real security tests if webrtcManager is available\n        let realTestResults = null;\n        if (webrtcManager && window.EnhancedSecureCryptoUtils) {\n            try {\n                realTestResults = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(webrtcManager);\n                \n            } catch (error) {\n                \n            }\n        } else {\n            \n        }\n\n        // If no real test results and no existing security level, show progress message\n        if (!realTestResults && !realSecurityLevel) {\n            alert(t('sec.verificationWait'));\n            return;\n        }\n\n        // Use real test results if available, otherwise fall back to current data\n        let securityData = realTestResults || realSecurityLevel;\n\n        // If still no security data, create a basic fallback\n        if (!securityData) {\n            securityData = {\n                level: 'UNKNOWN',\n                score: 0,\n                color: 'gray',\n                verificationResults: {},\n                timestamp: Date.now(),\n                details: t('sec.verificationUnavailable'),\n                isRealData: false,\n                passedChecks: 0,\n                totalChecks: 0\n            };\n            \n        }\n\n        // Detailed information about the REAL security check\n        let message = `REAL-TIME SECURITY VERIFICATION\\n\\n`;\n        message += `Security Level: ${securityData.level} (${securityData.score}%)\\n`;\n        message += `Verification Time: ${new Date(securityData.timestamp).toLocaleTimeString()}\\n`;\n        message += `Data Source: ${securityData.isRealData ? t('sec.realTests') : t('sec.simulatedData')}\\n\\n`;\n        \n        if (securityData.verificationResults) {\n            message += 'DETAILED CRYPTOGRAPHIC TESTS:\\n';\n            message += '=' + '='.repeat(40) + '\\n';\n            \n            const passedTests = Object.entries(securityData.verificationResults).filter(([key, result]) => result.passed);\n            const failedTests = Object.entries(securityData.verificationResults).filter(([key, result]) => !result.passed);\n            \n            if (passedTests.length > 0) {\n                message += 'PASSED TESTS:\\n';\n                passedTests.forEach(([key, result]) => {\n                    const testName = key.replace(/([A-Z])/g, ' $1').replace(/^./, str => str.toUpperCase());\n                    message += `   ${testName}: ${result.details || t('sec.testPassed')}\\n`;\n                });\n                message += '\\n';\n            }\n            \n            if (failedTests.length > 0) {\n                message += 'FAILED/UNAVAILABLE TESTS:\\n';\n                failedTests.forEach(([key, result]) => {\n                    const testName = key.replace(/([A-Z])/g, ' $1').replace(/^./, str => str.toUpperCase());\n                    message += `   ${testName}: ${result.details || t('sec.testFailed')}\\n`;\n                });\n                message += '\\n';\n            }\n            \n            message += `SUMMARY:\\n`;\n            message += `Passed: ${securityData.passedChecks}/${securityData.totalChecks} tests\\n`;\n            message += `Score: ${securityData.score}/${securityData.maxPossibleScore || 100} points\\n\\n`;\n        }\n        \n        // Real security features status\n        message += `SECURITY FEATURES STATUS:\\n`;\n        message += '=' + '='.repeat(40) + '\\n';\n        \n        if (securityData.verificationResults) {\n            const features = {\n                'ECDSA Digital Signatures': securityData.verificationResults.verifyECDSASignatures?.passed || false,\n                'ECDH Key Exchange': securityData.verificationResults.verifyECDHKeyExchange?.passed || false,\n                'AES-GCM Encryption': securityData.verificationResults.verifyEncryption?.passed || false,\n                [t('sec.messageIntegrity')]: securityData.verificationResults.verifyMessageIntegrity?.passed || false,\n                [t('sec.forwardSecrecy')]: securityData.verificationResults.verifyPerfectForwardSecrecy?.passed || false,\n                [t('sec.replayProtection')]: securityData.verificationResults.verifyReplayProtection?.passed || false,\n                'DTLS Fingerprint': securityData.verificationResults.verifyDTLSFingerprint?.passed || false,\n                'SAS Verification': securityData.verificationResults.verifySASVerification?.passed || false,\n                [t('sec.metadataProtection')]: securityData.verificationResults.verifyMetadataProtection?.passed || false,\n                [t('sec.trafficObfuscation')]: securityData.verificationResults.verifyTrafficObfuscation?.passed || false\n            };\n            \n            Object.entries(features).forEach(([feature, isEnabled]) => {\n                message += `${isEnabled ? '\u2705' : '\u274C'} ${feature}\\n`;\n            });\n        } else {\n            // Fallback if no verification results\n            message += `\u2705 ECDSA Digital Signatures\\n`;\n            message += `\u2705 ECDH Key Exchange\\n`;\n            message += `\u2705 AES-GCM Encryption\\n`;\n            message += `\u2705 Message Integrity (HMAC)\\n`;\n            message += `\u2705 Perfect Forward Secrecy\\n`;\n            message += `\u2705 Replay Protection\\n`;\n            message += `\u2705 DTLS Fingerprint\\n`;\n            message += `\u2705 SAS Verification\\n`;\n            message += `\u2705 Metadata Protection\\n`;\n            message += `\u2705 Traffic Obfuscation\\n`;\n        }\n        \n        message += `\\n${securityData.details || t('sec.verificationDone')}`;\n        \n        if (securityData.isRealData) {\n            message += '\\n\\n\u2705 This is REAL-TIME verification using actual cryptographic functions.';\n        } else {\n            message += '\\n\\n\u26A0\uFE0F Warning: This data may be simulated. Connection may not be fully established.';\n        }\n        \n        // Show in a more user-friendly way\n        const modal = document.createElement('div');\n        modal.style.cssText = `\n            position: fixed;\n            top: 0;\n            left: 0;\n            width: 100%;\n            height: 100%;\n            background: rgba(var(--sb-scrim-rgb), 0.8);\n            z-index: 10000;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-family: monospace;\n        `;\n        \n        const content = document.createElement('div');\n        content.style.cssText = `\n            background: var(--sb-legacy-panel);\n            color: var(--sb-text-1);\n            padding: 20px;\n            border-radius: 8px;\n            max-width: 80%;\n            max-height: 80%;\n            overflow-y: auto;\n            white-space: pre-line;\n            border: 1px solid var(--sb-surface-5);\n        `;\n        \n        content.textContent = message;\n        modal.appendChild(content);\n        \n        // Close on click outside\n        modal.addEventListener('click', (e) => {\n            if (e.target === modal) {\n                document.body.removeChild(modal);\n            }\n        });\n        \n        // Close on Escape key\n        const handleKeyDown = (e) => {\n            if (e.key === 'Escape') {\n                document.body.removeChild(modal);\n                document.removeEventListener('keydown', handleKeyDown);\n            }\n        };\n        document.addEventListener('keydown', handleKeyDown);\n        \n        document.body.appendChild(modal);\n    };\n\n    // ============================================\n    // DISPLAY UTILITIES\n    // ============================================\n\n    const getStatusConfig = () => {\n        switch (status) {\n            case 'connected':\n                return {\n                    text: t('status.connected'),\n                    className: 'status-connected',\n                    badgeClass: 'bg-green-500/10 text-green-400 border-green-500/20'\n                };\n            case 'verifying':\n                return {\n                    text: t('status.verifying'),\n                    className: 'status-verifying',\n                    badgeClass: 'bg-purple-500/10 text-purple-400 border-purple-500/20'\n                };\n            case 'connecting':\n                return {\n                    text: t('status.connecting'),\n                    className: 'status-connecting',\n                    badgeClass: 'bg-blue-500/10 text-blue-400 border-blue-500/20'\n                };\n            case 'retrying':\n                return {\n                    text: t('status.retrying'),\n                    className: 'status-connecting',\n                    badgeClass: 'bg-yellow-500/10 text-yellow-400 border-yellow-500/20'\n                };\n            case 'failed':\n                return {\n                    text: t('status.error'),\n                    className: 'status-failed',\n                    badgeClass: 'bg-red-500/10 text-red-400 border-red-500/20'\n                };\n            case 'reconnecting':\n                return {\n                    text: t('status.reconnecting'),\n                    className: 'status-connecting',\n                    badgeClass: 'bg-yellow-500/10 text-yellow-400 border-yellow-500/20'\n                };\n            case 'peer_disconnected':\n                return {\n                    text: t('status.peerDisconnected'),\n                    className: 'status-failed',\n                    badgeClass: 'bg-orange-500/10 text-orange-400 border-orange-500/20'\n                };\n            default:\n                return {\n                    text: t('status.notConnected'),\n                    className: 'status-disconnected',\n                    badgeClass: 'bg-gray-500/10 text-gray-400 border-gray-500/20'\n                };\n        }\n    };\n\n    const config = getStatusConfig();\n    const displaySecurityLevel = isConnected ? (realSecurityLevel || securityLevel) : null;\n    \n\n    // ============================================\n    // DATA RELIABILITY INDICATOR\n    // ============================================\n\n    const getSecurityIndicatorDetails = () => {\n        if (!displaySecurityLevel) {\n            return {\n                tooltip: t('sec.verificationInProgress'),\n                isVerified: false,\n                dataSource: 'loading'\n            };\n        }\n        \n        const isRealData = displaySecurityLevel.isRealData !== false;\n        const baseTooltip = `${displaySecurityLevel.level} (${displaySecurityLevel.score}%)`;\n        \n        if (isRealData) {\n            return {\n                tooltip: `${baseTooltip} - Real-time verification \u2705\\nRight-click or Ctrl+click to disconnect`,\n                isVerified: true,\n                dataSource: 'real'\n            };\n        } else {\n            return {\n                tooltip: `${baseTooltip} - Estimated (connection establishing...)\\nRight-click or Ctrl+click to disconnect`,\n                isVerified: false,\n                dataSource: 'estimated'\n            };\n        }\n    };\n\n    const securityDetails = getSecurityIndicatorDetails();\n\n    // ============================================\n    // ADDING global methods for debugging\n    // ============================================\n\n    React.useEffect(() => {\n        window.debugHeaderSecurity = undefined;\n        \n        return () => {\n            delete window.debugHeaderSecurity;\n        };\n    }, [realSecurityLevel, lastSecurityUpdate, isConnected, webrtcManager, displaySecurityLevel, securityDetails]);\n\n    // ============================================\n    // RENDER\n    // ============================================\n\n    const secColor = displaySecurityLevel\n        ? (displaySecurityLevel.color === 'green' ? 'var(--sb-green)' : displaySecurityLevel.color === 'orange' ? 'var(--sb-orange)' : displaySecurityLevel.color === 'yellow' ? 'var(--sb-yellow)' : 'var(--sb-red)')\n        : 'var(--sb-green)';\n    // The dot is a mark, not a label, so it takes the -solid accents: the brand colour\n    // in both themes. The text-safe accents darken on a light ground, which is right for\n    // a word and wrong for a 7px circle.\n    const dotColor = isConnected ? 'var(--sb-green-solid)'\n        : (['connecting', 'verifying', 'retrying', 'reconnecting'].includes(status) ? 'var(--sb-yellow-solid)'\n        : (status === 'failed' ? 'var(--sb-red-solid)' : 'var(--sb-text-9)'));\n    const dotGlow = dotColor === 'var(--sb-green-solid)' ? 'rgba(var(--sb-green-rgb), 0.16)' : dotColor === 'var(--sb-yellow-solid)' ? 'rgba(var(--sb-yellow-rgb), 0.16)' : dotColor === 'var(--sb-red-solid)' ? 'rgba(var(--sb-red-rgb), 0.16)' : 'rgba(var(--sb-text-9-rgb), 0.16)';\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\n    // On the landing / setup view (no verified connection) the new Start Secure\n    // screen owns the network settings and step status, so keep the header clean:\n    // brand only \u2014 no status pill, no settings. The bar is transparent at the top\n    // of the page and gains a blurred background once the user scrolls.\n    const onLanding = !isConnected;\n    const [scrolled, setScrolled] = React.useState(false);\n    React.useEffect(() => {\n        const onScroll = () => setScrolled((window.scrollY || window.pageYOffset || 0) > 8);\n        onScroll();\n        window.addEventListener('scroll', onScroll, { passive: true });\n        return () => window.removeEventListener('scroll', onScroll);\n    }, []);\n\n    // On the landing the header floats *over* the full-height hero (position\n    // fixed), transparent at the top and blurred once scrolled. When connected it\n    // falls back to the in-flow sticky bar.\n    // The bar is a material, not a coloured strip: a big surface reads as a thick\n    // one, so it gets a heavy blur, and the saturation bump is what stops a\n    // blurred dark background from going flat grey. Blur and background are\n    // animated together so the bar *materialises* on scroll rather than fading in.\n    const GLASS = 'blur(20px) saturate(180%)';\n    const MATERIALISE = 'background .25s ease, backdrop-filter .25s ease, -webkit-backdrop-filter .25s ease, border-color .25s ease';\n    // Installed on iOS the web view starts at the physical top of the screen, so a\n    // bar pinned to top:0 sits under the clock and the notch. --sb-safe-top is that\n    // strip (src/styles/pwa.css) and 0 in a browser tab, so it can be added\n    // unconditionally: the bar grows by the inset and its contents clear the status\n    // bar, while the translucent background still reaches the top edge.\n    const safeTop = { paddingTop: 'var(--sb-safe-top, 0px)', paddingBottom: 'var(--sb-bar-extra, 0px)' };\n    const overlay = { position: 'fixed', top: 0, left: 0, right: 0, ...safeTop };\n    const headerStyle = onLanding\n        ? (scrolled\n            ? { ...overlay, background: 'rgba(var(--sb-bg-rgb), 0.72)', backdropFilter: GLASS, WebkitBackdropFilter: GLASS, borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', transition: MATERIALISE }\n            : { ...overlay, background: 'transparent', backdropFilter: 'blur(0px) saturate(100%)', WebkitBackdropFilter: 'blur(0px) saturate(100%)', borderBottom: '1px solid transparent', transition: MATERIALISE })\n        : { ...safeTop, background: 'rgba(var(--sb-bg-rgb), 0.72)', backdropFilter: GLASS, WebkitBackdropFilter: GLASS, borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' };\n\n    return React.createElement('header', {\n        className: onLanding ? 'header-minimal z-50' : 'header-minimal sticky top-0 z-50',\n        style: headerStyle\n    }, [\n        React.createElement('div', {\n            key: 'container',\n            className: 'max-w-7xl mx-auto',\n            style: { padding: '0 20px' }\n        }, [\n            React.createElement('div', {\n                key: 'content',\n                className: 'flex items-center justify-between',\n                style: { height: 'var(--sb-bar-h, 64px)', gap: '16px' }\n            }, [\n                // Left: logo + wordmark\n                React.createElement('div', { key: 'left', style: { display: 'flex', alignItems: 'center', gap: '12px', minWidth: 0 } }, [\n                    React.createElement('div', { key: 'logo', style: { width: '36px', height: '36px', flex: 'none', display: 'grid', placeItems: 'center' } },\n                        React.createElement('img', { src: '/logo/securebit-mark.svg', alt: 'SecureBit', style: { width: '100%', height: '100%', objectFit: 'contain', display: 'block' } })\n                    ),\n                    React.createElement('div', { key: 'txt', style: { lineHeight: 1.2, minWidth: 0 } }, [\n                        React.createElement('div', { key: 'r1', style: { display: 'flex', alignItems: 'baseline', gap: '7px' } }, [\n                            React.createElement('span', { key: 'n', style: { fontSize: '16px', fontWeight: 800, letterSpacing: '-0.3px', color: 'var(--sb-text-2)' } }, 'SecureBit'),\n                            React.createElement('span', { key: 'v', style: { fontFamily: MONO, fontSize: '10px', fontWeight: 500, color: 'var(--sb-text-faint)' } }, APP_VERSION)\n                        ]),\n                        React.createElement('div', { key: 'r2', className: 'hidden sm:block', style: { fontSize: '11px', color: 'var(--sb-text-9)', fontWeight: 500 } }, t('hdr.tagline'))\n                    ])\n                ]),\n                // Right: controls\n                React.createElement('div', { key: 'right', style: { display: 'flex', alignItems: 'center', gap: '9px' } }, [\n                    // Landing only: switching locale reloads the document, which would\n                    // tear down an live peer connection if offered inside the chat.\n                    onLanding && React.createElement(LanguageSwitcher, { key: 'lang' }),\n\n                    // Landing only, alongside the language switcher: the connected\n                    // header has no room left, and the preference survives the move\n                    // into the chat regardless of where it was set.\n                    onLanding && React.createElement(ThemeSwitcher, { key: 'theme' }),\n\n                    !onLanding && React.createElement('button', {\n                        key: 'net', type: 'button',\n                        onClick: () => window.dispatchEvent(new CustomEvent('securebit:open-network-settings')),\n                        title: t('hdr.netSettingsTitle'), 'aria-label': t('hdr.netSettings'),\n                        className: 'sb-disconnect',\n                        style: { display: 'grid', placeItems: 'center', width: '38px', height: '38px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)', color: 'var(--sb-text-6)', cursor: 'pointer', transition: 'all .15s' }\n                    }, React.createElement('i', { className: 'fas fa-network-wired', style: { fontSize: '13px' } })),\n\n                    (!onLanding && displaySecurityLevel) && React.createElement('div', {\n                        key: 'sec', onClick: handleSecurityClick,\n                        onContextMenu: (e) => { e.preventDefault(); if (typeof onDisconnect === 'function') onDisconnect(); },\n                        title: securityDetails.tooltip, className: 'sb-secpill',\n                        style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '7px 12px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)', cursor: 'pointer' }\n                    }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-shield-halved', style: { fontSize: '13px', color: secColor } }),\n                        React.createElement('span', { key: 'l', className: 'hidden sm:inline', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-2)' } }, (t(`secLevel.${displaySecurityLevel.level}`) === `secLevel.${displaySecurityLevel.level}` ? String(displaySecurityLevel.level) : t(`secLevel.${displaySecurityLevel.level}`))),\n                        React.createElement('span', { key: 's', style: { fontFamily: MONO, fontSize: '11.5px', color: 'var(--sb-text-7)' } }, displaySecurityLevel.score + '%')\n                    ]),\n\n                    !onLanding && React.createElement('div', { key: 'status', style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '8px 13px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)' } }, [\n                        React.createElement('span', { key: 'dot', style: { width: '7px', height: '7px', borderRadius: '50%', background: dotColor, boxShadow: '0 0 0 3px ' + dotGlow } }),\n                        React.createElement('span', { key: 't', className: 'hidden sm:inline', style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-4)' } }, config.text)\n                    ]),\n\n                    isConnected && React.createElement('button', {\n                        key: 'dc', onClick: onDisconnect, className: 'sb-disconnect',\n                        style: { display: 'flex', alignItems: 'center', gap: '7px', padding: '8px 14px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'transparent', color: 'var(--sb-text-6)', fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: 'pointer', transition: 'all .15s' }\n                    }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-power-off', style: { fontSize: '12px' } }),\n                        React.createElement('span', { key: 't', className: 'sb-hide-sm' }, t('hdr.disconnect'))\n                    ])\n                ])\n            ])\n        ])\n    ]);\n};\n\nwindow.EnhancedMinimalHeader = EnhancedMinimalHeader;\n", "// Desktop release these links point at. Bump this one constant when a new\n// desktop version ships \u2014 the version used to be repeated in three URLs in two\n// different forms, which is how they ended up stuck on 0.1.0.\n//\n// The tag is pinned rather than using /releases/latest/download/: the filenames\n// carry the version, so a `latest` link 404s the moment a newer release exists,\n// whereas a pinned tag keeps serving a working (if older) installer.\nconst DESKTOP_VERSION = '1.0.4';\nconst DESKTOP_RELEASE = `https://github.com/SecureBitChat/securebit-desktop/releases/download/v${DESKTOP_VERSION}`;\n\nconst DownloadApps = () => {\n    const apps = [\n        { id: 'web', name: 'Web App', subtitle: 'Browser Version', icon: 'fas fa-globe', platform: 'Web', isActive: true, url: 'https://securebit.chat/', color: 'green' },\n        { id: 'windows', name: 'Windows', subtitle: 'Desktop App', icon: 'fab fa-windows', platform: 'Desktop', isActive: true, url: `${DESKTOP_RELEASE}/SecureBit.Chat_${DESKTOP_VERSION}_x64-setup.exe`, color: 'blue' },\n        { id: 'macos', name: 'macOS', subtitle: 'Desktop App', icon: 'fab fa-safari', platform: 'Desktop', isActive: true, url: `${DESKTOP_RELEASE}/SecureBit.Chat_${DESKTOP_VERSION}_x64.dmg`, color: 'gray' },\n        { id: 'linux', name: 'Linux', subtitle: 'Desktop App', icon: 'fab fa-linux', platform: 'Desktop', isActive: true, url: `${DESKTOP_RELEASE}/SecureBit.Chat_${DESKTOP_VERSION}_amd64.AppImage`, color: 'orange' },\n        { id: 'ios', name: 'iOS', subtitle: 'iPhone & iPad', icon: 'fab fa-apple', platform: 'Mobile', isActive: false, url: 'https://apps.apple.com/app/securebit-chat/', color: 'white' },\n        { id: 'android', name: 'Android', subtitle: 'Google Play', icon: 'fab fa-android', platform: 'Mobile', isActive: false, url: 'https://play.google.com/store/apps/details?id=com.securebit.chat', color: 'green' },\n        { id: 'chrome', name: 'Chrome', subtitle: 'Browser Extension', icon: 'fab fa-chrome', platform: 'Browser', isActive: false, url: '#', color: 'yellow' },\n        { id: 'edge', name: 'Edge', subtitle: 'Browser Extension', icon: 'fab fa-edge', platform: 'Browser', isActive: false, url: '#', color: 'blue' },\n        { id: 'opera', name: 'Opera', subtitle: 'Browser Extension', icon: 'fab fa-opera', platform: 'Browser', isActive: false, url: '#', color: 'red' },\n        { id: 'firefox', name: 'Firefox', subtitle: 'Browser Extension', icon: 'fab fa-firefox-browser', platform: 'Browser', isActive: false, url: '#', color: 'orange' },\n    ];\n\n    const handleDownload = (app) => {\n        if (app.isActive) window.open(app.url, '_blank');\n    };\n\n    const desktopApps = apps.filter(a => a.platform === 'Desktop' || a.platform === 'Web');\n    const mobileApps = apps.filter(a => a.platform === 'Mobile');\n    const browserApps = apps.filter(a => a.platform === 'Browser');\n\n    const cardSize = \"w-28 h-28\";\n\n    const colorClasses = {\n        green: 'text-green-500',\n        blue: 'text-blue-500',\n        gray: 'text-gray-500',\n        orange: 'text-orange-500',\n        red: 'text-red-500',\n        white: 'text-white',\n        yellow: 'text-yellow-400',\n    };\n\n    const renderAppCard = (app) => (\n        React.createElement('div', {\n            key: app.id,\n            className: `group relative ${cardSize} rounded-2xl overflow-hidden card-minimal cursor-pointer`\n        }, [\n            React.createElement('i', {\n                key: 'bg-icon',\n                className: `${app.icon} absolute text-[3rem] ${app.isActive ? colorClasses[app.color] : 'text-white/10'} top-1/2 left-1/2 -translate-x-1/2 -translate-y-1/2 pointer-events-none transition-all duration-500 group-hover:scale-105`\n            }),\n            React.createElement('div', {\n                key: 'overlay',\n                className: \"absolute inset-0 bg-black/30 backdrop-blur-md flex flex-col items-center justify-center text-center opacity-0 transition-opacity duration-300 group-hover:opacity-100\"\n            }, [\n                React.createElement('h4', { key: 'name', className: `text-sm font-semibold text-primary mb-1` }, app.name),\n                React.createElement('p', { key: 'subtitle', className: `text-xs text-secondary mb-2` }, app.subtitle),\n                app.isActive ?\n                    React.createElement('button', {\n                        key: 'btn',\n                        onClick: () => handleDownload(app),\n                        className: `px-2 py-1 rounded-xl bg-emerald-500 text-black font-medium hover:bg-emerald-600 transition-colors text-xs`\n                    }, app.id === \"web\" ? \"Launch\" : \"Download\")\n                    :\n                    React.createElement('span', { key: 'coming', className: \"text-gray-400 font-medium text-xs\" }, \"Coming Soon\")\n            ])\n        ])\n    );\n\n    return React.createElement('div', { className: \"mt-20 px-6\" }, [\n        // Header\n        React.createElement('div', { key: 'header', className: \"text-center max-w-3xl mx-auto mb-12\" }, [\n            React.createElement('h3', { key: 'title', className: \"text-3xl font-bold text-primary mb-3\" }, 'Download SecureBit.chat'),\n            React.createElement('p', { key: 'subtitle', className: \"text-secondary text-lg mb-5\" }, 'Stay secure on every device. Choose your platform and start chatting privately.')\n        ]),\n\n        // Desktop Apps\n        React.createElement('div', { key: 'desktop-row', className: \"hidden sm:flex justify-center flex-wrap gap-6 mb-6\" },\n            desktopApps.map(renderAppCard)\n        ),\n\n        // Mobile Apps\n        React.createElement('div', { key: 'mobile-row', className: \"flex justify-center gap-6 mb-6\" },\n            mobileApps.map(renderAppCard)\n        ),\n\n        // Browser Extensions\n        React.createElement('div', { key: 'browser-row', className: \"flex justify-center gap-6\" },\n            browserApps.map(renderAppCard)\n        )\n    ]);\n};\n\nwindow.DownloadApps = DownloadApps;\n", "import { t } from '../../i18n/index.js';\n\n// \"Trusted by our partners\" \u2014 partner ecosystem section.\n// Translated from the Claude Design component (Partners.dc.html) into the\n// project's React.createElement style: a full-bleed dark band with partner\n// cards plus a dashed \"Become a partner\" invite card.\nconst BecomePartner = () => {\n    const [isMobile, setIsMobile] = React.useState(\n        typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n    );\n\n    React.useEffect(() => {\n        const mq = window.matchMedia('(max-width:767px)');\n        const onChange = () => setIsMobile(mq.matches);\n        mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n        return () => {\n            mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n        };\n    }, []);\n\n    const ACCENT = 'var(--sb-orange)';\n    // Fill form: brand colour in both themes. See app.jsx.\n    const ACCENT_SOLID = 'var(--sb-orange-solid)';\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n    const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n\n    const formUrl = 'https://docs.google.com/forms/d/e/1FAIpQLSc9ijV9PCoyXkus6vEx1OWwvwAsLq8fKS6-H5BmX-c-bvia6w/viewform?usp=dialog';\n\n    const partners = [\n        {\n            id: 'aegis',\n            name: 'Aegis Investment',\n            logo: '/logo/aegis.png',\n            logoHeight: '42px',\n            url: 'https://aegis-investment.com/',\n            desc: t('partners.aegis.desc'),\n            role: t('partners.aegis.role'),\n            delay: '.5s'\n        },\n        {\n            id: 'furi',\n            name: 'FuriLabs',\n            // Renamed on resize rather than replaced: the file carries no ?v= stamp and is\n            // served immutable for a year, so Cloudflare and every browser that had already\n            // seen it kept handing back the old 164 KB original. A new path is the only\n            // thing that reliably busts a cache entry that has no version in its URL.\n            logo: '/logo/furi-160.png',\n            logoHeight: '54px',\n            url: 'https://furilabs.com/',\n            desc: t('partners.furilabs.desc'),\n            role: t('partners.furilabs.role'),\n            delay: '.56s'\n        }\n    ];\n\n    const svg = (inner, size, stroke, sw, className) =>\n        React.createElement('svg', {\n            className, width: size, height: size, viewBox: '0 0 24 24', fill: 'none',\n            stroke, strokeWidth: sw, strokeLinecap: 'round', strokeLinejoin: 'round',\n            dangerouslySetInnerHTML: { __html: inner }\n        });\n\n    const roleTag = (role) => React.createElement('span', {\n        key: 'role',\n        style: { fontFamily: MONO, fontSize: '10.5px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.2px', padding: '6px 11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.025)', whiteSpace: 'nowrap' }\n    }, role);\n\n    const partnerCard = (p) => React.createElement('a', {\n        key: p.id,\n        href: p.url,\n        target: '_blank',\n        rel: 'noopener noreferrer',\n        style: {\n            flex: '1 1 320px', minWidth: isMobile ? 'auto' : '300px',\n            borderRadius: '18px', background: 'var(--sb-surface)', border: '1px solid rgba(var(--sb-ink), 0.06)',\n            padding: '30px 30px 26px', display: 'flex', flexDirection: 'column',\n            textDecoration: 'none', color: 'inherit',\n            transition: 'transform .28s cubic-bezier(.2,.7,.3,1), border-color .28s cubic-bezier(.2,.7,.3,1)',\n            animation: `ptUp ${p.delay} cubic-bezier(.2,.7,.3,1)`\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.transform = 'translateY(-4px)'; e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.13)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.transform = 'none'; e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.06)'; }\n    }, [\n        React.createElement('div', { key: 'logo', style: { display: 'flex', alignItems: 'center', marginBottom: '30px', height: '54px' } },\n            React.createElement('img', {\n                src: p.logo, alt: p.name,\n                // The partner strip sits well below the fold, so these are never part of\n                // the first screen \u2014 but they were being fetched as though they were.\n                // furi.png in particular arrived at 500\u00D7500 and 164 KB to be drawn 54px\n                // tall, which Lighthouse counted as the largest single waste on the page.\n                loading: 'lazy', decoding: 'async',\n                style: { height: p.logoHeight, width: 'auto', maxWidth: '190px', objectFit: 'contain', display: 'block' }\n            })\n        ),\n        React.createElement('h3', { key: 'name', style: { margin: '0 0 9px', fontSize: '21px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, p.name),\n        React.createElement('p', { key: 'desc', style: { margin: '0 0 22px', fontSize: '14.5px', lineHeight: 1.6, color: 'var(--sb-text-6)' } }, p.desc),\n        React.createElement('div', { key: 'foot', style: { marginTop: 'auto', paddingTop: '6px', display: 'flex', alignItems: 'center', gap: '12px' } }, [\n            roleTag(p.role)\n        ])\n    ]);\n\n    const inviteCard = React.createElement('a', {\n        key: 'invite',\n        href: formUrl,\n        target: '_blank',\n        rel: 'noopener noreferrer',\n        style: {\n            flex: '1 1 320px', minWidth: isMobile ? 'auto' : '300px',\n            borderRadius: '18px', background: 'var(--sb-bg)', border: '1px dashed rgba(var(--sb-ink), 0.12)',\n            padding: '30px', display: 'flex', flexDirection: 'column', justifyContent: 'space-between',\n            textDecoration: 'none', color: 'inherit',\n            transition: 'border-color .28s cubic-bezier(.2,.7,.3,1)',\n            animation: 'ptUp .62s cubic-bezier(.2,.7,.3,1)'\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-orange-rgb), 0.4)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.12)'; }\n    }, [\n        React.createElement('div', { key: 'top' }, [\n            React.createElement('div', {\n                key: 'icon',\n                style: { width: '48px', height: '48px', borderRadius: '13px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-orange-rgb), 0.12)', border: '1px solid rgba(var(--sb-orange-rgb), 0.28)', marginBottom: '24px' }\n            }, svg('<path d=\"M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2\"/><circle cx=\"9\" cy=\"7\" r=\"4\"/><path d=\"M19 8v6M22 11h-6\"/>', 23, ACCENT_SOLID, 1.9)),\n            React.createElement('h3', { key: 'title', style: { margin: '0 0 8px', fontSize: '21px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, t('partners.inviteTitle')),\n            React.createElement('p', { key: 'desc', style: { margin: 0, fontSize: '14.5px', lineHeight: 1.6, color: 'var(--sb-text-7)' } }, t('partners.inviteDesc'))\n        ]),\n        React.createElement('span', {\n            key: 'btn',\n            style: {\n                marginTop: '26px', width: '100%', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '10px',\n                padding: '15px 20px', borderRadius: '12px', border: 'none', background: ACCENT_SOLID, color: 'var(--sb-on-accent)',\n                fontFamily: SANS, fontSize: '15px', fontWeight: 700, cursor: 'pointer',\n                boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)', boxSizing: 'border-box',\n                transition: 'background .2s cubic-bezier(.2,.7,.3,1), transform .2s cubic-bezier(.2,.7,.3,1)'\n            }\n        }, [\n            t('partners.inviteCta'),\n            svg('<path d=\"M5 12h14M13 6l6 6-6 6\"/>', 17, 'currentColor', 2.2, 'sb-mirror-rtl')\n        ])\n    ]);\n\n    const inner = React.createElement('div', {\n        key: 'inner',\n        style: { maxWidth: '1240px', margin: '0 auto', padding: isMobile ? '0 18px' : '0 40px' }\n    }, [\n        // Header\n        React.createElement('div', { key: 'head', style: { marginBottom: '44px' } }, [\n            React.createElement('div', {\n                key: 'eyebrow',\n                style: { fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.6px', marginBottom: '14px' }\n            }, t('partners.eyebrow')),\n            // The heading used to share a flex row with a strapline; with that gone the\n            // row had one child and nothing left to arrange.\n            React.createElement('h2', {\n                key: 'h2',\n                style: { margin: 0, fontSize: isMobile ? '30px' : '40px', fontWeight: 800, letterSpacing: '-1.1px', lineHeight: 1.04, color: 'var(--sb-text-1)' }\n            }, t('partners.heading'))\n        ]),\n\n        // Cards\n        React.createElement('div', {\n            key: 'cards',\n            style: { display: 'flex', gap: '18px', alignItems: 'stretch', flexWrap: 'wrap' }\n        }, [\n            ...partners.map(partnerCard),\n            inviteCard\n        ])\n    ]);\n\n    return React.createElement('section', {\n        style: {\n            width: '100%', color: 'var(--sb-text-2)', fontFamily: SANS,\n            padding: isMobile ? '48px 0' : '72px 0',\n            background: 'radial-gradient(1100px 640px at 50% -6%, rgba(var(--sb-orange-rgb), 0.055), transparent 62%), var(--sb-bg)'\n        }\n    }, [\n        React.createElement('style', { key: 'kf', dangerouslySetInnerHTML: { __html: '@keyframes ptUp{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:translateY(0)}}' } }),\n        inner\n    ]);\n};\n\nwindow.BecomePartner = BecomePartner;\n", "import { t, tList } from '../../i18n/index.js';\n\n// \"Why SecureBit is unique\" \u2014 interactive accordion section.\n// Translated from the Claude Design component (Why Unique.dc.html) into the\n// project's React.createElement style. Five horizontal panels; the active one\n// expands to reveal full content, the rest collapse to a vertical spine label.\nconst UniqueFeatureSlider = () => {\n  const [active, setActive] = React.useState(0);\n  const [isMobile, setIsMobile] = React.useState(\n    typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n  );\n\n  React.useEffect(() => {\n    const mq = window.matchMedia('(max-width:767px)');\n    const onChange = () => setIsMobile(mq.matches);\n    mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n    return () => {\n      mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n    };\n  }, []);\n\n  const ACCENT = 'var(--sb-orange)';\n  // The icons are stroked with this, and a stroke is a mark, not a label \u2014 brand\n  // colour in both themes. ACCENT above is for text and darkens on a light ground.\n  const ACCENT_SOLID = 'var(--sb-orange-solid)';\n  const ACTIVE_BG = 'radial-gradient(130% 90% at 28% 0%, rgba(var(--sb-orange-rgb), 0.11), transparent 60%), var(--sb-surface)';\n  const ACTIVE_BD = 'rgba(var(--sb-orange-rgb), 0.3)';\n  const IDLE_BG = 'var(--sb-bg)';\n  const IDLE_BD = 'rgba(var(--sb-ink), 0.06)';\n  const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n  const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n\n  const slides = [\n    {\n      num: '01',\n      title: [t('unique.s1.titleTop'), t('unique.s1.titleBottom')],\n      collapsed: t('unique.s1.collapsed'),\n      desc: t('unique.s1.desc'),\n      tags: tList('unique.s1.tags'),\n      icon: '<path d=\"M12 3l8 4v5c0 4.5-3.2 7.8-8 9-4.8-1.2-8-4.5-8-9V7l8-4z\"/><path d=\"M9.2 12.2l2 2 3.6-3.8\"/>'\n    },\n    {\n      num: '02',\n      title: [t('unique.s2.titleTop'), t('unique.s2.titleBottom')],\n      collapsed: t('unique.s2.collapsed'),\n      desc: t('unique.s2.desc'),\n      tags: tList('unique.s2.tags'),\n      icon: '<circle cx=\"5.5\" cy=\"12\" r=\"2.5\"/><circle cx=\"18.5\" cy=\"6\" r=\"2.5\"/><circle cx=\"18.5\" cy=\"18\" r=\"2.5\"/><path d=\"M7.8 10.8l8.4-3.6M7.8 13.2l8.4 3.6\"/>'\n    },\n    {\n      num: '03',\n      title: [t('unique.s3.titleTop'), t('unique.s3.titleBottom')],\n      collapsed: t('unique.s3.collapsed'),\n      desc: t('unique.s3.desc'),\n      tags: tList('unique.s3.tags'),\n      icon: '<path d=\"M21 8a8.5 8.5 0 0 0-15.6-2.5M3 4v4h4\"/><path d=\"M3 16a8.5 8.5 0 0 0 15.6 2.5M21 20v-4h-4\"/>'\n    },\n    {\n      num: '04',\n      title: [t('unique.s4.titleTop'), t('unique.s4.titleBottom')],\n      collapsed: t('unique.s4.collapsed'),\n      desc: t('unique.s4.desc'),\n      tags: tList('unique.s4.tags'),\n      icon: '<path d=\"M3 7h4l3 10h4M14 7h3l3 0\"/><path d=\"M17 4l3 3-3 3\"/><path d=\"M3 17h4l2-6\"/>'\n    },\n    {\n      num: '05',\n      title: [t('unique.s5.titleTop'), t('unique.s5.titleBottom')],\n      collapsed: t('unique.s5.collapsed'),\n      desc: t('unique.s5.desc'),\n      tags: tList('unique.s5.tags'),\n      icon: '<path d=\"M9.9 5.1A9.6 9.6 0 0 1 12 5c5.5 0 9 5 9 7a11 11 0 0 1-2.2 3M6.3 7.3C3.6 8.9 2 11.2 2 12c0 1.4 3.5 7 10 7 1.6 0 3-.3 4.2-.8\"/><path d=\"M9.9 9.9a3 3 0 0 0 4.2 4.2M3 3l18 18\"/>'\n    }\n  ];\n\n  const svg = (inner, size, stroke, sw) =>\n    React.createElement('svg', {\n      width: size, height: size, viewBox: '0 0 24 24', fill: 'none',\n      stroke, strokeWidth: sw, strokeLinecap: 'round', strokeLinejoin: 'round',\n      dangerouslySetInnerHTML: { __html: inner }\n    });\n\n  const go = (step) =>\n    setActive((a) => (a + step + slides.length) % slides.length);\n\n  const navBtn = (key, onClick, path) =>\n    React.createElement('button', {\n      key, onClick, 'aria-label': key, className: 'sb-mirror-rtl',\n      style: {\n        width: '46px', height: '46px', display: 'grid', placeItems: 'center',\n        borderRadius: '50%', border: '1px solid rgba(var(--sb-ink), 0.1)',\n        background: 'rgba(var(--sb-ink), 0.025)', color: 'var(--sb-text-4)', cursor: 'pointer',\n        transition: 'all .2s cubic-bezier(.2,.7,.3,1)'\n      },\n      onMouseEnter: (e) => { e.currentTarget.style.borderColor = ACTIVE_BD; e.currentTarget.style.color = ACCENT; },\n      onMouseLeave: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.1)'; e.currentTarget.style.color = 'var(--sb-text-4)'; }\n    }, svg(path, 18, 'currentColor', 2.1));\n\n  const tag = (label) =>\n    React.createElement('span', {\n      key: label,\n      style: {\n        display: 'inline-flex', alignItems: 'center', gap: '7px', padding: '7px 12px',\n        borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)',\n        background: 'rgba(var(--sb-ink), 0.025)', fontFamily: MONO,\n        fontSize: '11.5px', fontWeight: 500, color: 'var(--sb-text-6)'\n      }\n    }, [\n      React.createElement('span', { key: 'dot', style: { width: '5px', height: '5px', borderRadius: '50%', background: 'var(--sb-green-solid)' } }),\n      label\n    ]);\n\n  const expandedContent = (s) =>\n    React.createElement('div', {\n      key: 'exp',\n      style: {\n        height: '100%', display: 'flex', flexDirection: 'column',\n        justifyContent: isMobile ? 'flex-start' : 'space-between',\n        gap: isMobile ? '18px' : 0,\n        padding: isMobile ? '24px 22px' : '32px 34px',\n        minWidth: isMobile ? 'auto' : '320px',\n        animation: 'wuUp .42s cubic-bezier(.2,.7,.3,1)'\n      }\n    }, [\n      React.createElement('div', { key: 'top', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between' } }, [\n        React.createElement('div', {\n          key: 'ic',\n          style: {\n            width: '54px', height: '54px', borderRadius: '15px', display: 'grid', placeItems: 'center',\n            background: 'rgba(var(--sb-orange-rgb), 0.13)', border: '1px solid rgba(var(--sb-orange-rgb), 0.3)'\n          }\n        }, svg(s.icon, 26, ACCENT_SOLID, 1.9)),\n        React.createElement('span', { key: 'n', style: { fontFamily: MONO, fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-9)' } }, s.num)\n      ]),\n      React.createElement('div', { key: 'mid' }, [\n        React.createElement('h3', {\n          key: 'h', style: { margin: '0 0 12px', fontSize: isMobile ? '24px' : '30px', fontWeight: 800, letterSpacing: '-0.7px', lineHeight: 1.08, color: 'var(--sb-text-1)' }\n        }, [s.title[0], React.createElement('br', { key: 'br' }), s.title[1]]),\n        React.createElement('p', {\n          key: 'p', style: { margin: 0, fontSize: '15px', lineHeight: 1.6, color: 'var(--sb-text-6)', maxWidth: '380px' }\n        }, s.desc)\n      ]),\n      React.createElement('div', { key: 'tags', style: { display: 'flex', flexWrap: 'wrap', gap: '8px' } }, s.tags.map(tag))\n    ]);\n\n  const collapsedContent = (s) => isMobile\n    ? React.createElement('div', {\n        key: 'col',\n        style: { display: 'flex', alignItems: 'center', gap: '16px', padding: '20px 22px' }\n      }, [\n        React.createElement('span', { key: 'n', style: { fontFamily: MONO, fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-faint)' } }, s.num),\n        React.createElement('span', { key: 'l', style: { fontSize: '16px', fontWeight: 800, letterSpacing: '-0.2px', color: 'var(--sb-text-4)' } }, s.collapsed)\n      ])\n    : React.createElement('div', {\n        key: 'col',\n        style: { position: 'absolute', inset: 0, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'space-between', padding: '24px 0' }\n      }, [\n        React.createElement('span', { key: 'n', style: { fontFamily: MONO, fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-faint)' } }, s.num),\n        React.createElement('span', {\n          key: 'l',\n          style: { writingMode: 'vertical-rl', transform: 'rotate(180deg)', fontSize: '17px', fontWeight: 800, letterSpacing: '-0.2px', color: 'var(--sb-text-4)', whiteSpace: 'nowrap' }\n        }, s.collapsed),\n        svg(s.icon, 22, 'var(--sb-text-faint)', 1.8)\n      ]);\n\n  const panels = slides.map((s, i) => {\n    const isActive = active === i;\n    return React.createElement('div', {\n      key: i,\n      onClick: () => setActive(i),\n      // Selection is click-only (like the design); hover just brightens the panel\n      // a touch so the orange glow never jumps around chasing the cursor.\n      onMouseEnter: (e) => { if (!isActive) e.currentTarget.style.filter = 'brightness(1.18)'; },\n      onMouseLeave: (e) => { e.currentTarget.style.filter = 'none'; },\n      style: {\n        flex: isMobile ? 'none' : (isActive ? 6.2 : 1),\n        minWidth: isMobile ? 'auto' : '72px',\n        position: 'relative',\n        borderRadius: '18px',\n        overflow: 'hidden',\n        cursor: 'pointer',\n        background: isActive ? ACTIVE_BG : IDLE_BG,\n        border: '1px solid ' + (isActive ? ACTIVE_BD : IDLE_BD),\n        color: 'var(--sb-text-7)',\n        transition: 'flex .46s cubic-bezier(.2,.7,.3,1), background .3s ease, border-color .3s ease, filter .2s ease'\n      }\n    }, isActive ? expandedContent(s) : collapsedContent(s));\n  });\n\n  const inner = React.createElement('div', {\n    key: 'inner',\n    style: {\n      maxWidth: '1180px', margin: '0 auto',\n      padding: isMobile ? '0 18px' : '0 40px'\n    }\n  }, [\n    // Header\n    React.createElement('div', {\n      key: 'head',\n      style: { display: 'flex', alignItems: 'flex-end', justifyContent: 'space-between', gap: '24px', marginBottom: '28px' }\n    }, [\n      React.createElement('div', { key: 'titles' }, [\n        React.createElement('div', {\n          key: 'eyebrow',\n          style: { fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.4px', marginBottom: '12px' }\n        }, t('unique.eyebrow')),\n        React.createElement('h2', {\n          key: 'h2',\n          style: { margin: 0, fontSize: isMobile ? '28px' : '38px', fontWeight: 800, letterSpacing: '-1.1px', lineHeight: 1.05, color: 'var(--sb-text-1)' }\n        }, t('unique.heading'))\n      ]),\n      React.createElement('div', { key: 'nav', style: { display: 'flex', alignItems: 'center', gap: '10px', flex: 'none' } }, [\n        navBtn('prev', () => go(-1), '<path d=\"M15 6l-6 6 6 6\"/>'),\n        navBtn('next', () => go(1), '<path d=\"M9 6l6 6-6 6\"/>')\n      ])\n    ]),\n\n    // Accordion\n    React.createElement('div', {\n      key: 'accordion',\n      style: {\n        display: 'flex',\n        flexDirection: isMobile ? 'column' : 'row',\n        gap: isMobile ? '12px' : '14px',\n        height: isMobile ? 'auto' : '440px'\n      }\n    }, panels)\n  ]);\n\n  // Full-bleed dark band with the radial accent glow \u2014 matches the design mockup.\n  return React.createElement('section', {\n    style: {\n      width: '100%', color: 'var(--sb-text-2)', fontFamily: SANS,\n      padding: isMobile ? '44px 0' : '64px 0',\n      background: 'radial-gradient(1100px 700px at 18% 8%, rgba(var(--sb-orange-rgb), 0.05), transparent 60%), var(--sb-bg)'\n    }\n  }, [\n    React.createElement('style', { key: 'kf', dangerouslySetInnerHTML: { __html: '@keyframes wuUp{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}' } }),\n    inner\n  ]);\n};\n\n// Export for use in your app\nwindow.UniqueFeatureSlider = UniqueFeatureSlider;\n", "import { t, tList } from '../../i18n/index.js';\n\n// \"Development Roadmap\" \u2014 milestone timeline section.\n// Translated from the Claude Design component (Roadmap.dc.html): a full-bleed\n// dark band with a shipped-progress bar and an expandable, status-coded timeline.\nfunction Roadmap() {\n    const [isMobile, setIsMobile] = React.useState(\n        typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n    );\n\n    React.useEffect(() => {\n        const mq = window.matchMedia('(max-width:767px)');\n        const onChange = () => setIsMobile(mq.matches);\n        mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n        return () => {\n            mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n        };\n    }, []);\n\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n    const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n\n    const DATA = [\n        { v: \"v1.0\", k: 'r1', status: \"released\" },\n        { v: \"v1.5\", k: 'r2', status: \"released\" },\n        { v: \"v2.0\", k: 'r3', status: \"released\" },\n        { v: \"v3.0\", k: 'r4', status: \"released\" },\n        { v: \"v3.5\", k: 'r5', status: \"released\" },\n        { v: \"v4.5\", k: 'r6', status: \"released\" },\n        { v: \"v5.0\", k: 'r7', status: \"released\" },\n        { v: \"v5.5\", k: 'r8', status: \"released\" },\n        { v: \"v6.0\", k: 'r9', status: \"current\" },\n        { v: \"v6.5\", k: 'r10', status: \"dev\" },\n        { v: \"v7.0\", k: 'r11', status: \"planned\" },\n        { v: \"v7.5\", k: 'r12', status: \"research\" },\n        { v: \"v8.0\", k: 'r13', status: \"research\" }\n    ].map((d) => ({\n        ...d,\n        // Version tag and status are identifiers, not copy; everything a reader\n        // actually reads comes from the locale file.\n        title: t(`roadmap.${d.k}.title`),\n        sub: t(`roadmap.${d.k}.sub`),\n        date: t(`roadmap.${d.k}.date`),\n        features: tList(`roadmap.${d.k}.features`)\n    }));\n\n    // The status of a milestone is shown by its marker on the timeline and the colour of\n    // its bullets, not by a word: the labels (Released, In development, ...) were taken\n    // out. `solid` is the dot colour, `line` the spine below it.\n    const META = {\n        released: { solid: \"var(--sb-green-solid)\", line: \"rgba(var(--sb-green-rgb), 0.32)\" },\n        current: { solid: \"var(--sb-orange-solid)\", line: \"rgba(var(--sb-orange-rgb), 0.32)\" },\n        dev: { solid: \"var(--sb-yellow-2-solid)\", line: \"rgba(var(--sb-ink), 0.08)\" },\n        planned: { solid: \"var(--sb-text-7)\", line: \"rgba(var(--sb-ink), 0.08)\" },\n        research: { solid: \"var(--sb-text-9)\", line: \"rgba(var(--sb-ink), 0.08)\" }\n    };\n\n    const [open, setOpen] = React.useState({});\n    const isOpen = (i) => (open[i] === undefined ? DATA[i].status === 'current' : open[i]);\n    const toggle = (i) => setOpen((s) => ({ ...s, [i]: !isOpen(i) }));\n\n    const total = DATA.length;\n    const shipped = DATA.filter((d) => d.status === 'released' || d.status === 'current').length;\n    const upcoming = total - shipped;\n    const shippedPct = (shipped / total * 100).toFixed(1) + '%';\n\n    // The shipped count is highlighted, so the sentence is split around it rather than\n    // interpolated whole. Passing only `total` leaves the {shipped} placeholder in the\n    // string, which is where the highlighted number goes \u2014 a translation is free to put\n    // it anywhere in the sentence, and the highlight follows it there.\n    const [progressBefore, progressAfter] = t('roadmap.progress', { total }).split('{shipped}');\n\n    const renderNode = (status) => {\n        if (status === 'released') {\n            return (\n                <div style={{ position: 'absolute', insetInlineStart: '13px', top: '16px', width: '28px', height: '28px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'linear-gradient(rgba(var(--sb-green-rgb), 0.16),rgba(var(--sb-green-rgb), 0.16)), var(--sb-bg)', border: '1px solid rgba(var(--sb-green-rgb), 0.4)', zIndex: 2 }}>\n                    <svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" strokeWidth=\"2.4\" strokeLinecap=\"round\" strokeLinejoin=\"round\"><path d=\"M5 13l4 4 10-11\" /></svg>\n                </div>\n            );\n        }\n        if (status === 'current') {\n            return (\n                <div style={{ position: 'absolute', insetInlineStart: '13px', top: '16px', width: '28px', height: '28px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'linear-gradient(rgba(var(--sb-orange-rgb), 0.2),rgba(var(--sb-orange-rgb), 0.2)), var(--sb-bg)', border: '1px solid var(--sb-orange-solid)', zIndex: 2, animation: 'rmPulse 2.4s ease-out infinite' }}>\n                    <span style={{ width: '9px', height: '9px', borderRadius: '50%', background: 'var(--sb-orange-solid)' }} />\n                </div>\n            );\n        }\n        if (status === 'dev') {\n            return (\n                <div style={{ position: 'absolute', insetInlineStart: '13px', top: '16px', width: '28px', height: '28px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'linear-gradient(rgba(var(--sb-yellow-2-rgb), 0.15),rgba(var(--sb-yellow-2-rgb), 0.15)), var(--sb-bg)', border: '1px solid rgba(var(--sb-yellow-2-rgb), 0.4)', zIndex: 2 }}>\n                    <svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-yellow-2-solid)\" strokeWidth=\"2.2\" strokeLinecap=\"round\" strokeLinejoin=\"round\"><path d=\"M12 3a9 9 0 1 0 9 9\" /></svg>\n                </div>\n            );\n        }\n        // planned / research\n        return (\n            <div style={{ position: 'absolute', insetInlineStart: '13px', top: '16px', width: '28px', height: '28px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'var(--sb-bg)', border: `1px ${status === 'research' ? 'dashed' : 'solid'} rgba(var(--sb-ink), 0.18)`, zIndex: 2 }}>\n                <span style={{ width: '7px', height: '7px', borderRadius: '50%', background: META[status].solid }} />\n            </div>\n        );\n    };\n\n    return (\n        <section style={{ width: '100%', color: 'var(--sb-text-2)', fontFamily: SANS, padding: isMobile ? '48px 0' : '64px 0', background: 'radial-gradient(1200px 720px at 50% -8%, rgba(var(--sb-orange-rgb), 0.05), transparent 60%), var(--sb-bg)' }}>\n            <style dangerouslySetInnerHTML={{ __html: '@keyframes rmExp{from{opacity:0;transform:translateY(-4px)}to{opacity:1;transform:translateY(0)}}@keyframes rmPulse{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-orange-rgb), 0.18)}60%{box-shadow:0 0 0 9px rgba(var(--sb-orange-rgb), 0)}}' }} />\n\n            <div style={{ maxWidth: '1040px', margin: '0 auto', padding: isMobile ? '0 18px' : '0 40px' }}>\n\n                {/* header */}\n                <div style={{ marginBottom: '30px' }}>\n                    <div style={{ fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.6px', marginBottom: '13px' }}>{t('roadmap.eyebrow')}</div>\n                    <h2 style={{ margin: '0 0 14px', fontSize: isMobile ? '27px' : '34px', fontWeight: 800, letterSpacing: '-1px', lineHeight: 1.08, color: 'var(--sb-text-1)' }}>{t('roadmap.heading')}</h2>\n                    <p style={{ margin: 0, fontSize: '15.5px', lineHeight: 1.6, color: 'var(--sb-text-7)', maxWidth: '660px' }}>{t('roadmap.subheading')}</p>\n                </div>\n\n                {/* progress */}\n                <div style={{ display: 'flex', alignItems: 'center', gap: '18px', flexWrap: 'wrap', padding: '18px 22px', borderRadius: '14px', background: 'var(--sb-surface)', border: '1px solid rgba(var(--sb-ink), 0.06)', marginBottom: '36px' }}>\n                    <div style={{ fontFamily: MONO, fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-2)', whiteSpace: 'nowrap' }}>{progressBefore}<span style={{ color: 'var(--sb-green)' }}>{shipped}</span>{progressAfter}</div>\n                    <div style={{ flex: '1 1 240px', minWidth: '200px', height: '8px', borderRadius: '99px', background: 'var(--sb-bg-deep)', border: '1px solid rgba(var(--sb-ink), 0.06)', overflow: 'hidden' }}>\n                        <div style={{ height: '100%', width: shippedPct, background: 'linear-gradient(90deg, var(--sb-green), var(--sb-orange))' }} />\n                    </div>\n                    <div style={{ fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '0.8px', whiteSpace: 'nowrap' }}>{t('roadmap.upcoming', { upcoming })}</div>\n                </div>\n\n                {/* timeline */}\n                {DATA.map((d, i) => {\n                    const meta = META[d.status];\n                    const opened = isOpen(i);\n                    const notLast = i < total - 1;\n                    return (\n                        <div key={i} style={{ position: 'relative', display: 'grid', gridTemplateColumns: '54px 1fr', marginBottom: '16px' }}>\n\n                            {/* spine */}\n                            <div style={{ position: 'relative' }}>\n                                {notLast && <div style={{ position: 'absolute', insetInlineStart: '26px', top: '30px', height: 'calc(100% + 16px)', width: '2px', background: meta.line }} />}\n                                {renderNode(d.status)}\n                            </div>\n\n                            {/* card */}\n                            <div style={{ borderRadius: '16px', background: 'var(--sb-surface)', border: `1px solid ${d.status === 'current' ? 'rgba(var(--sb-orange-rgb), 0.28)' : 'rgba(var(--sb-ink), 0.06)'}`, overflow: 'hidden' }}>\n                                <div\n                                    onClick={() => toggle(i)}\n                                    style={{ display: 'flex', alignItems: 'center', gap: isMobile ? '11px' : '16px', padding: isMobile ? '16px 16px' : '18px 22px', cursor: 'pointer', transition: 'background .18s ease' }}\n                                    onMouseEnter={(e) => { e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.018)'; }}\n                                    onMouseLeave={(e) => { e.currentTarget.style.background = 'transparent'; }}\n                                >\n                                    <div style={{ flex: 'none', minWidth: '52px', textAlign: 'center', padding: '7px 10px', borderRadius: '9px', background: 'var(--sb-bg-deep)', border: '1px solid rgba(var(--sb-ink), 0.07)', fontFamily: MONO, fontSize: '13px', fontWeight: 700, color: d.status === 'current' ? 'var(--sb-orange)' : 'var(--sb-text-4)' }}>{d.v}</div>\n                                    <div style={{ flex: 1, minWidth: 0 }}>\n                                        <div style={{ fontSize: isMobile ? '15.5px' : '17px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' }}>{d.title}</div>\n                                        {!isMobile && <div style={{ marginTop: '3px', fontSize: '13.5px', color: 'var(--sb-text-6)' }}>{d.sub}</div>}\n                                    </div>\n                                    <div style={{ flex: 'none', display: 'flex', alignItems: 'center', gap: isMobile ? '8px' : '14px' }}>\n                                        {!isMobile && <span style={{ fontFamily: MONO, fontSize: '12px', fontWeight: 500, color: 'var(--sb-text-7)', whiteSpace: 'nowrap', minWidth: '74px', textAlign: 'end' }}>{d.date}</span>}\n                                        <span style={{ color: 'var(--sb-text-9)', display: 'inline-flex', transition: 'transform .22s cubic-bezier(.2,.7,.3,1)', transform: opened ? 'rotate(180deg)' : 'rotate(0deg)' }}>\n                                            <svg width=\"17\" height=\"17\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2.1\" strokeLinecap=\"round\" strokeLinejoin=\"round\"><path d=\"M6 9l6 6 6-6\" /></svg>\n                                        </span>\n                                    </div>\n                                </div>\n                                {opened && (\n                                    <div style={{ padding: '4px 22px 22px 22px', animation: 'rmExp .24s cubic-bezier(.2,.7,.3,1)' }}>\n                                        <div style={{ fontFamily: MONO, fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '1.2px', marginBottom: '14px', paddingTop: '14px', borderTop: '1px solid rgba(var(--sb-ink), 0.05)' }}>{t('roadmap.keyFeatures')}</div>\n                                        <div style={{ display: 'grid', gridTemplateColumns: isMobile ? '1fr' : '1fr 1fr', gap: '11px 28px' }}>\n                                            {d.features.map((f, fi) => (\n                                                <div key={fi} style={{ display: 'flex', alignItems: 'flex-start', gap: '10px' }}>\n                                                    <span style={{ flex: 'none', marginTop: '7px', width: '5px', height: '5px', borderRadius: '50%', background: meta.solid }} />\n                                                    <span style={{ fontSize: '13.5px', lineHeight: 1.5, color: 'var(--sb-text-4)' }}>{f}</span>\n                                                </div>\n                                            ))}\n                                        </div>\n                                    </div>\n                                )}\n                            </div>\n                        </div>\n                    );\n                })}\n\n            </div>\n        </section>\n    );\n}\n\nwindow.Roadmap = Roadmap;\n", "import { t, isRTL } from '../../i18n/index.js';\n\n// \"Keep SecureBit independent\" \u2014 crypto donation card.\n// Translated from the Claude Design component (Crypto Donate v3.dc.html): coin switcher,\n// address with copy, and a QR on the right.\n//\n// Everything is served from this origin. The design pulled the coin icons from jsDelivr\n// and built the QR with a CDN script; the site's CSP (`img-src 'self' data:`) would block\n// the first, and both would hand a third party the address of every visitor. The\n// addresses are fixed, so the QRs are pre-rendered SVGs in /assets/crypto/.\n\nconst WALLETS = [\n    { id: 'usdt', tab: 'USDT', coin: 'Tether USDT', badge: 'trx', address: 'TMopDoco5EwJB1QvQYsuhjUJdMvzPXNQYu' },\n    { id: 'btc', tab: 'BTC', coin: 'Bitcoin', badge: null, address: 'bc1qnmc2xl7p0pxcy6lzf2tyf52wnslgzkgaq9kxpr' },\n    { id: 'eth', tab: 'ETH', coin: 'Ethereum', badge: null, address: '0xCDfDfaD4EC1fa657C3d2A7EFabc1cb751bf1dAf7' }\n];\n\nconst icon = (id) => `/assets/crypto/${id}.svg`;\n\n// A disconnect asks for the page to be brought here (see handleDisconnect in app.jsx).\n// The request is a timestamped flag rather than just an event, because the landing \u2014 and\n// this card with it \u2014 usually mounts only after the chat has been torn down. It expires\n// so that a request made while no landing was shown cannot fire minutes later.\nconst SCROLL_FLAG = '__sbScrollToDonate';\nconst SCROLL_EVENT = 'securebit:scroll-to-donate';\nconst SCROLL_TTL_MS = 5000;\n\nconst DonateCrypto = () => {\n    const [isMobile, setIsMobile] = React.useState(\n        typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n    );\n    const [sel, setSel] = React.useState(0);\n    const [copied, setCopied] = React.useState(false);\n    // +1 when the new coin comes in from the end side, -1 from the start side; the QR\n    // slides in accordingly so a swipe feels like moving along the row of tabs.\n    const [slide, setSlide] = React.useState(0);\n    const touchStart = React.useRef(null);\n    const sectionRef = React.useRef(null);\n    const copyTimer = React.useRef(null);\n\n    React.useEffect(() => {\n        const mq = window.matchMedia('(max-width:767px)');\n        const onChange = () => setIsMobile(mq.matches);\n        mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n        return () => {\n            mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n            clearTimeout(copyTimer.current);\n        };\n    }, []);\n\n    React.useEffect(() => {\n        let timer = null;\n        const scrollHere = () => {\n            const at = window[SCROLL_FLAG];\n            window[SCROLL_FLAG] = 0;\n            if (!at || Date.now() - at > SCROLL_TTL_MS) return;\n            clearTimeout(timer);\n            // Let the landing finish laying out first, or the target moves under the scroll.\n            timer = setTimeout(() => {\n                const el = sectionRef.current;\n                if (!el) return;\n                const reduce = window.matchMedia('(prefers-reduced-motion: reduce)').matches;\n                el.scrollIntoView({ behavior: reduce ? 'auto' : 'smooth', block: 'center' });\n            }, 350);\n        };\n        scrollHere();\n        document.addEventListener(SCROLL_EVENT, scrollHere);\n        return () => {\n            document.removeEventListener(SCROLL_EVENT, scrollHere);\n            clearTimeout(timer);\n        };\n    }, []);\n\n    const cur = WALLETS[sel];\n\n    const pick = (i) => {\n        const next = (i + WALLETS.length) % WALLETS.length;\n        if (next === sel) return;\n        setSlide(i > sel ? 1 : -1);\n        setSel(next);\n        setCopied(false);\n    };\n\n    // Swipe across the QR to change coin on a phone. Horizontal only, and only past a\n    // clear threshold, so a vertical scroll that starts on the QR still scrolls the page\n    // (touch-action: pan-y hands vertical pans to the browser). In a right-to-left locale\n    // the tab row runs the other way, and so does the swipe.\n    const onTouchStart = (e) => {\n        const p = e.touches[0];\n        touchStart.current = { x: p.clientX, y: p.clientY };\n    };\n    const onTouchEnd = (e) => {\n        const start = touchStart.current;\n        touchStart.current = null;\n        if (!start) return;\n        const p = e.changedTouches[0];\n        const dx = p.clientX - start.x;\n        const dy = p.clientY - start.y;\n        if (Math.abs(dx) < 40 || Math.abs(dx) < Math.abs(dy) * 1.5) return;\n        const forward = isRTL() ? dx > 0 : dx < 0;\n        pick(sel + (forward ? 1 : -1));\n    };\n\n    const copy = async () => {\n        try {\n            await navigator.clipboard.writeText(cur.address);\n        } catch (e) {\n            const ta = document.createElement('textarea');\n            ta.value = cur.address;\n            document.body.appendChild(ta);\n            ta.select();\n            try { document.execCommand('copy'); } catch (_) {}\n            ta.remove();\n        }\n        setCopied(true);\n        clearTimeout(copyTimer.current);\n        copyTimer.current = setTimeout(() => setCopied(false), 1800);\n    };\n\n    const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n    const FIELD = {\n        borderRadius: '14px', background: 'var(--sb-bg)', border: '1px solid rgba(var(--sb-ink), 0.07)'\n    };\n\n    const tabs = React.createElement('div', {\n        key: 'tabs', role: 'tablist',\n        style: { ...FIELD, display: 'flex', gap: '6px', padding: '5px', marginBottom: '14px' }\n    }, WALLETS.map((w, i) => {\n        const on = i === sel;\n        return React.createElement('button', {\n            key: w.id, type: 'button', role: 'tab', 'aria-selected': on,\n            onClick: () => pick(i),\n            style: {\n                flex: '1 1 0', minWidth: 0, display: 'inline-flex', alignItems: 'center', justifyContent: 'center',\n                gap: '9px', padding: '11px 10px', borderRadius: '10px', border: 'none', cursor: 'pointer',\n                fontFamily: SANS, fontSize: '14px', fontWeight: 700, transition: 'all .18s',\n                background: on ? 'var(--sb-surface-2)' : 'transparent',\n                color: on ? 'var(--sb-text-1)' : 'var(--sb-text-7)',\n                boxShadow: on ? 'inset 0 0 0 1px rgba(var(--sb-orange-rgb), 0.45)' : 'none'\n            }\n        }, [\n            React.createElement('span', { key: 'ic', style: { position: 'relative', flex: 'none', width: '22px', height: '22px' } }, [\n                React.createElement('img', { key: 'logo', src: icon(w.id), alt: '', width: 22, height: 22, style: { display: 'block', width: '22px', height: '22px' } }),\n                w.badge && React.createElement('img', {\n                    key: 'badge', src: icon(w.badge), alt: '', width: 11, height: 11,\n                    style: {\n                        position: 'absolute', right: '-3px', bottom: '-3px', width: '11px', height: '11px', borderRadius: '50%',\n                        border: '1.5px solid var(--sb-surface-2)', background: 'var(--sb-surface-2)'\n                    }\n                })\n            ]),\n            w.tab\n        ]);\n    }));\n\n    const copyBtn = React.createElement('button', {\n        key: 'copy', type: 'button', onClick: copy,\n        style: {\n            flex: 'none', display: 'inline-flex', alignItems: 'center', gap: '8px', padding: '12px 16px',\n            borderRadius: '10px', fontFamily: SANS, fontSize: '13.5px', fontWeight: 700, cursor: 'pointer',\n            background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-2)',\n            border: '1px solid rgba(var(--sb-ink), 0.1)', transition: 'all .18s'\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.09)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.05)'; }\n    }, [\n        copied\n            ? React.createElement('svg', {\n                key: 'ok', width: 15, height: 15, viewBox: '0 0 24 24', fill: 'none', stroke: 'var(--sb-green-solid)',\n                strokeWidth: 2.4, strokeLinecap: 'round', strokeLinejoin: 'round',\n                dangerouslySetInnerHTML: { __html: '<path d=\"M5 12.5l4.2 4.2L19 6.5\"/>' }\n            })\n            : React.createElement('svg', {\n                key: 'cp', width: 15, height: 15, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor',\n                strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round',\n                dangerouslySetInnerHTML: { __html: '<rect x=\"9\" y=\"9\" width=\"12\" height=\"12\" rx=\"2.5\"/><path d=\"M5 15V5a2 2 0 0 1 2-2h8\"/>' }\n            }),\n        React.createElement('span', { key: 'l', 'aria-live': 'polite' }, copied ? t('donate.copied') : t('donate.copy'))\n    ]);\n\n    const addressField = React.createElement('div', {\n        key: 'addr',\n        style: { ...FIELD, display: 'flex', alignItems: 'center', gap: '12px', padding: '8px 8px 8px 18px' }\n    }, [\n        React.createElement('div', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n            React.createElement('div', { key: 'net', style: { fontSize: '11.5px', fontWeight: 600, color: 'var(--sb-text-9)', marginBottom: '2px' } }, t(`donate.net.${cur.id}`)),\n            React.createElement('div', {\n                key: 'a', title: cur.address, dir: 'ltr',\n                style: { fontFamily: MONO, fontSize: '14px', color: 'var(--sb-text-2)', letterSpacing: '0.3px', overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' }\n            }, cur.address.slice(0, 8) + '\u2026' + cur.address.slice(-8))\n        ]),\n        copyBtn\n    ]);\n\n    const warn = React.createElement('div', {\n        key: 'warn',\n        style: { display: 'flex', alignItems: 'center', gap: '7px', marginTop: '14px', fontSize: '12px', color: 'var(--sb-text-9)' }\n    }, [\n        React.createElement('svg', {\n            key: 'i', width: 13, height: 13, viewBox: '0 0 24 24', fill: 'none', stroke: 'var(--sb-orange-solid)',\n            strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round', style: { flex: 'none' },\n            dangerouslySetInnerHTML: { __html: '<path d=\"M12 3l9.5 17h-19z\"/><path d=\"M12 10v4M12 17.5v.01\"/>' }\n        }),\n        t(`donate.warn.${cur.id}`)\n    ]);\n\n    const left = React.createElement('div', {\n        key: 'left',\n        style: { flex: '1 1 440px', minWidth: 0, padding: isMobile ? '32px 22px 8px' : '44px', display: 'flex', flexDirection: 'column' }\n    }, [\n        React.createElement('div', {\n            key: 'eyebrow',\n            style: { fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.8px', marginBottom: '14px' }\n        }, t('donate.eyebrow')),\n        React.createElement('h2', {\n            key: 'title',\n            style: { margin: '0 0 10px', fontSize: isMobile ? '28px' : '34px', fontWeight: 800, letterSpacing: '-1px', lineHeight: 1.08, color: 'var(--sb-text-1)' }\n        }, t('donate.title')),\n        React.createElement('p', {\n            key: 'desc',\n            style: { margin: '0 0 30px', fontSize: '15px', lineHeight: 1.6, color: 'var(--sb-text-7)' }\n        }, t('donate.description')),\n        tabs,\n        addressField,\n        warn\n    ]);\n\n    // The QR plate is white in both themes: scanners want dark modules on a light ground.\n    const dirSign = isRTL() ? -1 : 1;\n    const slideAnim = slide === 0 ? 'none'\n        : `${slide * dirSign > 0 ? 'cdInEnd' : 'cdInStart'} .28s cubic-bezier(.2,.7,.3,1)`;\n\n    const plate = React.createElement('div', {\n        key: 'plate',\n        onTouchStart, onTouchEnd,\n        style: {\n            position: 'relative', width: '232px', height: '232px', padding: '14px', borderRadius: '20px', background: '#fff',\n            boxShadow: '0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))',\n            border: '1px solid rgba(var(--sb-ink), 0.07)', overflow: 'hidden', touchAction: 'pan-y', userSelect: 'none'\n        }\n    }, React.createElement('div', {\n        key: cur.id,\n        style: { position: 'relative', width: '100%', height: '100%', animation: slideAnim }\n    }, [\n        React.createElement('img', {\n            key: 'qr', src: `/assets/crypto/qr-${cur.id}.svg`, alt: t('donate.qrAlt', { coin: cur.coin }),\n            width: 204, height: 204, draggable: false,\n            style: { display: 'block', width: '100%', height: '100%', imageRendering: 'pixelated' }\n        }),\n        React.createElement('div', {\n            key: 'logo',\n            style: { position: 'absolute', left: '50%', top: '50%', transform: 'translate(-50%,-50%)', width: '48px', height: '48px', borderRadius: '12px', background: '#fff', display: 'grid', placeItems: 'center' }\n        }, React.createElement('img', { src: icon(cur.id), alt: '', width: 34, height: 34, draggable: false, style: { display: 'block', width: '34px', height: '34px' } }))\n    ]));\n\n    // Page dots under the QR on a phone \u2014 the hint that it can be swiped.\n    const dots = isMobile && React.createElement('div', {\n        key: 'dots', 'aria-hidden': true,\n        style: { display: 'flex', justifyContent: 'center', gap: '7px', marginTop: '18px' }\n    }, WALLETS.map((w, i) => React.createElement('span', {\n        key: w.id,\n        style: {\n            width: i === sel ? '18px' : '7px', height: '7px', borderRadius: '4px', transition: 'all .25s',\n            background: i === sel ? 'var(--sb-orange-solid)' : 'rgba(var(--sb-ink), 0.16)'\n        }\n    })));\n\n    const right = React.createElement('div', {\n        key: 'right',\n        style: { flex: '0 0 auto', minWidth: isMobile ? 0 : '300px', margin: '0 auto', padding: isMobile ? '24px 22px 32px' : '44px', display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center' }\n    }, [plate, dots]);\n\n    const card = React.createElement('div', {\n        key: 'card',\n        style: {\n            width: '100%', maxWidth: '1000px', position: 'relative', overflow: 'hidden', borderRadius: '24px',\n            background: 'radial-gradient(520px 420px at 100% 50%, rgba(var(--sb-orange-rgb), 0.09), transparent 70%), var(--sb-surface)',\n            border: '1px solid rgba(var(--sb-ink), 0.07)', display: 'flex', flexWrap: 'wrap', alignItems: 'stretch',\n            animation: 'cdUp .45s cubic-bezier(.2,.7,.3,1)'\n        }\n    }, [\n        left,\n        right\n    ]);\n\n    return React.createElement('section', {\n        id: 'donate', ref: sectionRef,\n        style: {\n            width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center',\n            background: 'var(--sb-bg)', color: 'var(--sb-text-2)', fontFamily: SANS,\n            padding: isMobile ? '48px 18px' : '64px 32px'\n        }\n    }, [\n        React.createElement('style', { key: 'kf', dangerouslySetInnerHTML: { __html: '@keyframes cdUp{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}' +\n            '@keyframes cdInEnd{from{opacity:0;transform:translateX(36px)}to{opacity:1;transform:none}}' +\n            '@keyframes cdInStart{from{opacity:0;transform:translateX(-36px)}to{opacity:1;transform:none}}' +\n            '@media (prefers-reduced-motion: reduce){#donate [style*=\"cdIn\"]{animation:none!important}}' } }),\n        card\n    ]);\n};\n\nDonateCrypto.SCROLL_FLAG = SCROLL_FLAG;\nDonateCrypto.SCROLL_EVENT = SCROLL_EVENT;\n\nwindow.DonateCrypto = DonateCrypto;\n", "import { t } from '../../i18n/index.js';\n\n// \"Join the future of privacy\" \u2014 community / open-source call-to-action.\n// Translated from the Claude Design component (Community CTA.dc.html): a centered\n// glowing card with GitHub + Feedback actions on a full-bleed dark band.\nconst CommunityCTA = () => {\n    const [isMobile, setIsMobile] = React.useState(\n        typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n    );\n\n    React.useEffect(() => {\n        const mq = window.matchMedia('(max-width:767px)');\n        const onChange = () => setIsMobile(mq.matches);\n        mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n        return () => {\n            mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n        };\n    }, []);\n\n    const ACCENT = 'var(--sb-orange)';\n    // Fill form: brand colour in both themes. See app.jsx.\n    const ACCENT_SOLID = 'var(--sb-orange-solid)';\n    const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n\n    const githubUrl = 'https://github.com/SecureBitChat/securebit-chat/';\n    const feedbackUrl = 'mailto:lockbitchat@tutanota.com';\n\n    const githubBtn = React.createElement('a', {\n        key: 'gh',\n        href: githubUrl,\n        target: '_blank',\n        rel: 'noopener noreferrer',\n        style: {\n            display: 'inline-flex', alignItems: 'center', gap: '11px', padding: '15px 26px',\n            borderRadius: '13px', background: ACCENT_SOLID, color: 'var(--sb-on-accent)', textDecoration: 'none',\n            fontSize: '15.5px', fontWeight: 700, letterSpacing: '-0.2px',\n            boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)', whiteSpace: 'nowrap',\n            transition: 'all .2s cubic-bezier(.2,.7,.3,1)'\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.background = 'var(--sb-orange-hi)'; e.currentTarget.style.transform = 'translateY(-2px)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.background = ACCENT_SOLID; e.currentTarget.style.transform = 'none'; }\n    }, [\n        React.createElement('svg', {\n            key: 'i', width: 20, height: 20, viewBox: '0 0 24 24', fill: 'currentColor',\n            dangerouslySetInnerHTML: { __html: '<path d=\"M12 2C6.48 2 2 6.58 2 12.26c0 4.5 2.87 8.32 6.84 9.67.5.09.68-.22.68-.49 0-.24-.01-.87-.01-1.71-2.78.62-3.37-1.36-3.37-1.36-.46-1.18-1.11-1.5-1.11-1.5-.91-.63.07-.62.07-.62 1 .07 1.53 1.05 1.53 1.05.89 1.56 2.34 1.11 2.91.85.09-.66.35-1.11.63-1.36-2.22-.26-4.55-1.14-4.55-5.07 0-1.12.39-2.03 1.03-2.75-.1-.26-.45-1.3.1-2.71 0 0 .84-.27 2.75 1.05a9.3 9.3 0 0 1 5 0c1.91-1.32 2.75-1.05 2.75-1.05.55 1.41.2 2.45.1 2.71.64.72 1.03 1.63 1.03 2.75 0 3.94-2.34 4.81-4.57 5.06.36.32.68.94.68 1.9 0 1.37-.01 2.47-.01 2.81 0 .27.18.59.69.49A10.02 10.02 0 0 0 22 12.26C22 6.58 17.52 2 12 2z\"/>' }\n        }),\n        t('community.github')\n    ]);\n\n    const feedbackBtn = React.createElement('a', {\n        key: 'fb',\n        href: feedbackUrl,\n        rel: 'noopener noreferrer',\n        style: {\n            display: 'inline-flex', alignItems: 'center', gap: '11px', padding: '15px 26px',\n            borderRadius: '13px', background: 'rgba(var(--sb-ink), 0.03)', color: 'var(--sb-text-2)', textDecoration: 'none',\n            fontSize: '15.5px', fontWeight: 700, letterSpacing: '-0.2px',\n            border: '1px solid rgba(var(--sb-ink), 0.1)', whiteSpace: 'nowrap',\n            transition: 'all .2s cubic-bezier(.2,.7,.3,1)'\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.24)'; e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.06)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.1)'; e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.03)'; }\n    }, [\n        React.createElement('svg', {\n            key: 'i', width: 20, height: 20, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor',\n            strokeWidth: 1.9, strokeLinecap: 'round', strokeLinejoin: 'round',\n            dangerouslySetInnerHTML: { __html: '<path d=\"M21 11.5a8 8 0 0 1-11.6 7.1L4 20l1.4-5.3A8 8 0 1 1 21 11.5z\"/><path d=\"M8.5 11h7M8.5 14h4.5\"/>' }\n        }),\n        t('community.feedback')\n    ]);\n\n    const card = React.createElement('div', {\n        key: 'card',\n        style: {\n            position: 'relative', overflow: 'hidden', maxWidth: '860px', width: '100%',\n            borderRadius: '24px',\n            background: 'radial-gradient(700px 360px at 50% 0%, rgba(var(--sb-orange-rgb), 0.1), transparent 65%), var(--sb-bg)',\n            border: '1px solid rgba(var(--sb-ink), 0.07)',\n            padding: isMobile ? '40px 24px 36px' : '56px 56px 48px',\n            textAlign: 'center', boxShadow: '0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))'\n        }\n    }, [\n        // hairline accent\n        React.createElement('div', {\n            key: 'hairline',\n            style: { position: 'absolute', top: 0, left: '50%', transform: 'translateX(-50%)', width: '180px', height: '1px', background: 'linear-gradient(90deg, transparent, rgba(var(--sb-orange-rgb), 0.7), transparent)' }\n        }),\n        // brand mark (same SVG as the header \u2014 no border or background)\n        React.createElement('img', {\n            key: 'icon',\n            src: '/logo/securebit-mark.svg',\n            alt: 'SecureBit',\n            style: { display: 'inline-block', width: '64px', height: '64px', objectFit: 'contain', marginBottom: '22px', animation: 'ccUp .4s cubic-bezier(.2,.7,.3,1)' }\n        }),\n        // title\n        React.createElement('h2', {\n            key: 'title',\n            style: { margin: '0 0 16px', fontSize: isMobile ? '28px' : '36px', fontWeight: 800, letterSpacing: '-1px', lineHeight: 1.05, color: 'var(--sb-text-1)' }\n        }, t('community.title')),\n        // description\n        React.createElement('p', {\n            key: 'desc',\n            style: { margin: '0 auto 32px', maxWidth: '560px', fontSize: '16px', lineHeight: 1.65, color: 'var(--sb-text-6)' }\n        }, t('community.description')),\n        // buttons\n        React.createElement('div', {\n            key: 'btns',\n            style: { display: 'flex', gap: '14px', justifyContent: 'center', flexWrap: 'wrap' }\n        }, [githubBtn, feedbackBtn]),\n        // Snap Store, bottom right.\n        //\n        // Served from this origin, not snapcraft.io. The site's CSP is\n        // `img-src 'self' data:` and would block a hotlink anyway, but the\n        // reason to keep it that way is the product's own claim: fetching a\n        // badge from someone else's server hands them the address of every\n        // visitor to a page that promises no servers are involved.\n        React.createElement('div', {\n            key: 'snap',\n            style: {\n                display: 'flex',\n                justifyContent: isMobile ? 'center' : 'flex-end',\n                marginTop: '28px'\n            }\n        }, React.createElement('a', {\n            href: 'https://snapcraft.io/securebit-chat',\n            target: '_blank',\n            rel: 'noopener noreferrer',\n            'aria-label': 'Get it from the Snap Store',\n            style: { display: 'inline-flex', opacity: 0.9, transition: 'opacity .2s' },\n            onMouseEnter: (e) => { e.currentTarget.style.opacity = 1; },\n            onMouseLeave: (e) => { e.currentTarget.style.opacity = 0.9; }\n        }, React.createElement('img', {\n            src: '/assets/badges/snap-store.svg',\n            alt: 'Get it from the Snap Store',\n            width: 182,\n            height: 56,\n            loading: 'lazy',\n            style: { display: 'block' }\n        })))\n    ]);\n\n    return React.createElement('section', {\n        style: {\n            width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center',\n            background: 'var(--sb-bg)', fontFamily: SANS,\n            padding: isMobile ? '48px 18px' : '64px 48px'\n        }\n    }, [\n        React.createElement('style', { key: 'kf', dangerouslySetInnerHTML: { __html: '@keyframes ccUp{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:translateY(0)}}' } }),\n        card\n    ]);\n};\n\nwindow.CommunityCTA = CommunityCTA;\n", "import { t } from '../../i18n/index.js';\n// File Transfer Component for Chat Interface - Fixed Version\nconst FileTransferComponent = ({ webrtcManager, isConnected, pendingIncomingFiles = [], onIncomingDecision, showDropzone = true }) => {\n    const [dragOver, setDragOver] = React.useState(false);\n    const [transfers, setTransfers] = React.useState({ sending: [], receiving: [] });\n    const fileInputRef = React.useRef(null);\n\n    // Update transfers periodically via polling \u2014 no callback registration needed here\n    React.useEffect(() => {\n        if (!isConnected || !webrtcManager) return;\n\n        const updateTransfers = () => {\n            const currentTransfers = webrtcManager.getFileTransfers();\n            setTransfers(currentTransfers);\n        };\n\n        const interval = setInterval(updateTransfers, 500);\n        return () => clearInterval(interval);\n    }, [isConnected, webrtcManager]);\n\n    // Clear transfers UI when connection drops\n    React.useEffect(() => {\n        if (isConnected) return;\n        setTransfers({ sending: [], receiving: [] });\n    }, [isConnected]);\n\n    const handleFileSelect = async (files) => {\n        if (!isConnected || !webrtcManager) {\n            alert('\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u043D\u0435 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u043E. \u0421\u043D\u0430\u0447\u0430\u043B\u0430 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u0438\u0442\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435.');\n            return;\n        }\n\n        // \u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0430 \u0441\u043E\u0441\u0442\u043E\u044F\u043D\u0438\u044F \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u044F\n        if (!webrtcManager.isConnected() || !webrtcManager.isVerified) {\n            alert('\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u043D\u0435 \u0433\u043E\u0442\u043E\u0432\u043E \u0434\u043B\u044F \u043F\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043B\u043E\u0432. \u0414\u043E\u0436\u0434\u0438\u0442\u0435\u0441\u044C \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u044F.');\n            return;\n        }\n\n        for (const file of files) {\n            try {\n                // \u041A\u0420\u0418\u0422\u0418\u0427\u0415\u0421\u041A\u041E\u0415 \u0418\u0421\u041F\u0420\u0410\u0412\u041B\u0415\u041D\u0418\u0415: \u0412\u0430\u043B\u0438\u0434\u0430\u0446\u0438\u044F \u0444\u0430\u0439\u043B\u0430 \u043F\u0435\u0440\u0435\u0434 \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u043E\u0439\n                const validation = webrtcManager.validateFile(file);\n                if (!validation.isValid) {\n                    const errorMessage = validation.errors.join('. ');\n                    alert(`\u0424\u0430\u0439\u043B ${file.name} \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u0431\u044B\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D: ${errorMessage}`);\n                    continue;\n                }\n\n                await webrtcManager.sendFile(file);\n            } catch (error) {\n                // \u0411\u043E\u043B\u0435\u0435 \u043C\u044F\u0433\u043A\u0430\u044F \u043E\u0431\u0440\u0430\u0431\u043E\u0442\u043A\u0430 \u043E\u0448\u0438\u0431\u043E\u043A - \u043D\u0435 \u0437\u0430\u043A\u0440\u044B\u0432\u0430\u0435\u043C \u0441\u0435\u0441\u0441\u0438\u044E\n                \n                // \u041F\u043E\u043A\u0430\u0437\u044B\u0432\u0430\u0435\u043C \u043F\u043E\u043B\u044C\u0437\u043E\u0432\u0430\u0442\u0435\u043B\u044E \u043E\u0448\u0438\u0431\u043A\u0443, \u043D\u043E \u043D\u0435 \u0437\u0430\u043A\u0440\u044B\u0432\u0430\u0435\u043C \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435\n                if (error.message.includes(t('file.notReady'))) {\n                    alert(`\u0424\u0430\u0439\u043B ${file.name} \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u0431\u044B\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D \u0441\u0435\u0439\u0447\u0430\u0441. \u041F\u0440\u043E\u0432\u0435\u0440\u044C\u0442\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0438 \u043F\u043E\u043F\u0440\u043E\u0431\u0443\u0439\u0442\u0435 \u0441\u043D\u043E\u0432\u0430.`);\n                } else if (error.message.includes(t('file.tooLarge')) || error.message.includes('exceeds maximum')) {\n                    alert(`\u0424\u0430\u0439\u043B ${file.name} \u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0431\u043E\u043B\u044C\u0448\u043E\u0439: ${error.message}`);\n                } else if (error.message.includes(t('file.maxConcurrent'))) {\n                    alert(`\u0414\u043E\u0441\u0442\u0438\u0433\u043D\u0443\u0442 \u043B\u0438\u043C\u0438\u0442 \u043E\u0434\u043D\u043E\u0432\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0445 \u043F\u0435\u0440\u0435\u0434\u0430\u0447. \u0414\u043E\u0436\u0434\u0438\u0442\u0435\u0441\u044C \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0442\u0435\u043A\u0443\u0449\u0438\u0445 \u043F\u0435\u0440\u0435\u0434\u0430\u0447.`);\n                } else if (error.message.includes(t('file.typeNotAllowed'))) {\n                    alert(`\u0422\u0438\u043F \u0444\u0430\u0439\u043B\u0430 ${file.name} \u043D\u0435 \u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044F: ${error.message}`);\n                } else {\n                    alert(`\u041E\u0448\u0438\u0431\u043A\u0430 \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u0438 \u0444\u0430\u0439\u043B\u0430 ${file.name}: ${error.message}`);\n                }\n            }\n        }\n    };\n\n    const handleDrop = (e) => {\n        e.preventDefault();\n        setDragOver(false);\n        \n        const files = Array.from(e.dataTransfer.files);\n        handleFileSelect(files);\n    };\n\n    const handleDragOver = (e) => {\n        e.preventDefault();\n        setDragOver(true);\n    };\n\n    const handleDragLeave = (e) => {\n        e.preventDefault();\n        setDragOver(false);\n    };\n\n    const handleFileInputChange = (e) => {\n        const files = Array.from(e.target.files);\n        handleFileSelect(files);\n        e.target.value = ''; // Reset input\n    };\n\n    const formatFileSize = (bytes) => {\n        if (bytes === 0) return '0 B';\n        const k = 1024;\n        const sizes = ['B', 'KB', 'MB', 'GB'];\n        const i = Math.floor(Math.log(bytes) / Math.log(k));\n        return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];\n    };\n\n    const getStatusIcon = (status) => {\n        switch (status) {\n            case 'metadata_sent':\n            case 'preparing':\n                return 'fas fa-cog fa-spin';\n            case 'transmitting':\n            case 'receiving':\n                return 'fas fa-exchange-alt fa-pulse';\n            case 'assembling':\n                return 'fas fa-puzzle-piece fa-pulse';\n            case 'completed':\n                return 'fas fa-check text-green-400';\n            case 'failed':\n                return 'fas fa-times text-red-400';\n            default:\n                return 'fas fa-circle';\n        }\n    };\n\n    const getStatusText = (status) => {\n        switch (status) {\n            case 'metadata_sent':\n                return '\u041F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043A\u0430...';\n            case 'transmitting':\n                return '\u041E\u0442\u043F\u0440\u0430\u0432\u043A\u0430...';\n            case 'receiving':\n                return '\u041F\u043E\u043B\u0443\u0447\u0435\u043D\u0438\u0435...';\n            case 'assembling':\n                return '\u0421\u0431\u043E\u0440\u043A\u0430 \u0444\u0430\u0439\u043B\u0430...';\n            case 'completed':\n                return '\u0417\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u043E';\n            case 'failed':\n                return '\u041E\u0448\u0438\u0431\u043A\u0430';\n            default:\n                return status;\n        }\n    };\n\n    // Segmented (per-chunk) progress \u2014 squares fill as chunks transfer, like a\n    // download manager. For large files chunks are grouped into a fixed grid;\n    // for small files it's literally one square per chunk.\n    const renderProgress = (transfer, color) => {\n        const total = transfer.totalChunks || 0;\n        const done = transfer.transferredChunks || 0;\n        const isDone = transfer.status === 'completed';\n        const squares = total > 0 ? Math.min(total, 32) : 24;\n        let filled;\n        if (isDone) filled = squares;\n        else if (total > 0) filled = Math.floor((done / total) * squares);\n        else filled = Math.floor(((transfer.progress || 0) / 100) * squares);\n        filled = Math.max(0, Math.min(squares, filled));\n\n        return React.createElement('div', { key: 'progress' }, [\n            React.createElement('div', {\n                key: 'squares',\n                style: { display: 'flex', flexWrap: 'wrap', gap: '3px', marginBottom: '7px' }\n            }, Array.from({ length: squares }, (_, i) => React.createElement('div', {\n                key: i,\n                style: {\n                    width: '11px', height: '11px', borderRadius: '2px',\n                    background: i < filled ? color : 'rgba(var(--sb-ink), 0.07)',\n                    border: '1px solid ' + (i < filled ? 'transparent' : 'rgba(var(--sb-ink), 0.05)'),\n                    boxShadow: i < filled ? `0 0 5px ${color}55` : 'none',\n                    transition: 'background .2s ease, box-shadow .2s ease'\n                }\n            }))),\n            React.createElement('div', {\n                key: 'text',\n                style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', fontSize: '11.5px', color: 'var(--sb-text-7)' }\n            }, [\n                React.createElement('span', { key: 'status', style: { display: 'inline-flex', alignItems: 'center', gap: '5px' } }, [\n                    React.createElement('i', { key: 'icon', className: getStatusIcon(transfer.status) }),\n                    getStatusText(transfer.status)\n                ]),\n                React.createElement('span', {\n                    key: 'count',\n                    style: { fontFamily: \"'JetBrains Mono', ui-monospace, monospace\", color: i_done(transfer) ? color : 'var(--sb-text-7)' }\n                }, total > 0 ? `${Math.min(done, total)} / ${total} chunks` : `${(transfer.progress || 0).toFixed(0)}%`)\n            ])\n        ]);\n    };\n    const i_done = (t) => t.status === 'completed';\n\n    const handleIncomingDecision = async (fileId, accepted) => {\n        if (typeof onIncomingDecision === 'function') {\n            await onIncomingDecision(fileId, accepted);\n        }\n        setTransfers(webrtcManager.getFileTransfers());\n    };\n\n    if (!isConnected) {\n        return React.createElement('div', {\n            className: \"p-4 text-center text-muted\"\n        }, t('file.needConnection'));\n    }\n\n    // \u041F\u0440\u043E\u0432\u0435\u0440\u044F\u0435\u043C \u0434\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u043E\u0435 \u0441\u043E\u0441\u0442\u043E\u044F\u043D\u0438\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u044F\n    const isConnectionReady = webrtcManager && webrtcManager.isConnected() && webrtcManager.isVerified;\n    \n    if (!isConnectionReady) {\n        return React.createElement('div', {\n            className: \"p-4 text-center text-yellow-600\"\n        }, [\n            React.createElement('i', {\n                key: 'icon',\n                className: 'fas fa-exclamation-triangle me-2'\n            }),\n            '\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0443\u0441\u0442\u0430\u043D\u0430\u0432\u043B\u0438\u0432\u0430\u0435\u0442\u0441\u044F... \u041F\u0435\u0440\u0435\u0434\u0430\u0447\u0430 \u0444\u0430\u0439\u043B\u043E\u0432 \u0431\u0443\u0434\u0435\u0442 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043F\u043E\u0441\u043B\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438.'\n        ]);\n    }\n\n    return React.createElement('div', {\n        className: \"file-transfer-component\"\n    }, [\n        // File Drop Zone (SecureBit Chat design) \u2014 only when the panel is opened to SEND,\n        // so a receiver never sees the \"send attachments\" UI.\n        showDropzone && React.createElement('div', {\n            key: 'drop-zone',\n            onDrop: handleDrop,\n            onDragOver: handleDragOver,\n            onDragLeave: handleDragLeave,\n            style: {\n                position: 'relative',\n                border: '1.5px dashed ' + (dragOver ? 'rgba(var(--sb-orange-rgb), 0.7)' : 'rgba(var(--sb-ink), 0.14)'),\n                borderRadius: '14px',\n                background: dragOver ? 'rgba(var(--sb-orange-rgb), 0.07)' : 'var(--sb-surface)',\n                padding: '24px 22px',\n                textAlign: 'center',\n                transition: 'all .15s'\n            }\n        }, [\n            React.createElement('div', {\n                key: 'icon-box',\n                style: { width: '42px', height: '42px', margin: '0 auto 10px', borderRadius: '12px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-ink), 0.04)', border: '1px solid rgba(var(--sb-ink), 0.08)' }\n            }, React.createElement('i', { className: 'fas fa-arrow-up-from-bracket', style: { color: 'var(--sb-text-6)', fontSize: '18px' } })),\n            React.createElement('div', { key: 'title', style: { fontSize: '14px', fontWeight: 700, color: 'var(--sb-text-2)' } }, t('file.drop')),\n            React.createElement('div', { key: 'sub', style: { fontSize: '12px', color: 'var(--sb-text-8)', marginTop: '4px' } }, t('file.dropHint')),\n            React.createElement('button', {\n                key: 'browse',\n                type: 'button',\n                onClick: () => fileInputRef.current?.click(),\n                className: 'sb-send',\n                style: { marginTop: '14px', display: 'inline-flex', alignItems: 'center', gap: '7px', padding: '9px 16px', borderRadius: '9px', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '13px', fontWeight: 700, cursor: 'pointer' }\n            }, [\n                React.createElement('i', { key: 'i', className: 'fas fa-folder-open', style: { fontSize: '13px' } }),\n                t('file.browse')\n            ])\n        ]),\n\n        // Hidden file input\n        showDropzone && React.createElement('input', {\n            key: 'file-input',\n            ref: fileInputRef,\n            type: 'file',\n            multiple: true,\n            className: 'hidden',\n            onChange: handleFileInputChange\n        }),\n\n        pendingIncomingFiles.length > 0 && React.createElement('div', {\n            key: 'incoming-consent',\n            className: \"mt-4 space-y-2\"\n        }, pendingIncomingFiles.map(file => React.createElement('div', {\n            key: file.fileId,\n            style: { borderRadius: '12px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)', padding: '12px 14px' }\n        }, [\n            React.createElement('div', {\n                key: 'info',\n                style: { marginBottom: '12px', display: 'flex', alignItems: 'center', gap: '11px' }\n            }, [\n                React.createElement('div', { key: 'ic', style: { flex: 'none', width: '34px', height: '34px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-orange-rgb), 0.12)', border: '1px solid rgba(var(--sb-orange-rgb), 0.22)' } },\n                    React.createElement('i', { className: 'fas fa-file-arrow-down', style: { color: 'var(--sb-orange)', fontSize: '15px' } })\n                ),\n                React.createElement('div', { key: 'text', style: { minWidth: 0 } }, [\n                    React.createElement('div', {\n                        key: 'title',\n                        style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-2)' }\n                    }, t('file.incoming')),\n                    React.createElement('div', {\n                        key: 'meta',\n                        style: { fontSize: '11.5px', color: 'var(--sb-text-8)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' }\n                    }, `${file.fileName} \u00B7 ${formatFileSize(file.fileSize)} \u00B7 ${file.mimeType}`)\n                ])\n            ]),\n            React.createElement('div', {\n                key: 'actions',\n                style: { display: 'flex', gap: '8px' }\n            }, [\n                React.createElement('button', {\n                    key: 'accept',\n                    onClick: () => handleIncomingDecision(file.fileId, true),\n                    style: { display: 'inline-flex', alignItems: 'center', gap: '6px', borderRadius: '8px', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', padding: '8px 14px', fontSize: '13px', fontWeight: 700, cursor: 'pointer' }\n                }, [React.createElement('i', { key: 'i', className: 'fas fa-check', style: { fontSize: '12px' } }), t('file.accept')]),\n                React.createElement('button', {\n                    key: 'reject',\n                    onClick: () => handleIncomingDecision(file.fileId, false),\n                    style: { display: 'inline-flex', alignItems: 'center', gap: '6px', borderRadius: '8px', border: '1px solid rgba(var(--sb-red-rgb), 0.3)', background: 'rgba(var(--sb-red-rgb), 0.08)', color: 'var(--sb-red)', padding: '8px 14px', fontSize: '13px', fontWeight: 600, cursor: 'pointer' }\n                }, [React.createElement('i', { key: 'i', className: 'fas fa-xmark', style: { fontSize: '12px' } }), t('file.reject')])\n            ])\n        ]))),\n\n        // Active Transfers\n        (transfers.sending.length > 0 || transfers.receiving.length > 0) && React.createElement('div', {\n            key: 'transfers',\n            className: \"active-transfers mt-4\"\n        }, [\n            React.createElement('h4', {\n                key: 'title',\n                style: { display: 'flex', alignItems: 'center', gap: '8px', fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-7)', marginBottom: '10px' }\n            }, [\n                React.createElement('i', {\n                    key: 'icon',\n                    className: 'fas fa-right-left',\n                    style: { fontSize: '12px' }\n                }),\n                t('file.title')\n            ]),\n\n            // Sending files\n            ...transfers.sending.map(transfer =>\n                React.createElement('div', {\n                    key: `send-${transfer.fileId}`,\n                    style: { borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', padding: '12px', marginBottom: '8px' }\n                }, [\n                    React.createElement('div', {\n                        key: 'header',\n                        className: \"flex items-center justify-between mb-2\"\n                    }, [\n                        React.createElement('div', {\n                            key: 'info',\n                            className: \"flex items-center\"\n                        }, [\n                            React.createElement('i', {\n                                key: 'icon',\n                                className: 'fas fa-arrow-up',\n                                style: { color: 'var(--sb-orange)', fontSize: '13px', marginInlineEnd: '8px' }\n                            }),\n                            React.createElement('span', {\n                                key: 'name',\n                                className: \"font-medium text-sm\",\n                                style: { color: 'var(--sb-text-2)' }\n                            }, transfer.fileName),\n                            React.createElement('span', {\n                                key: 'size',\n                                className: \"text-xs ms-2\",\n                                style: { color: 'var(--sb-text-8)' }\n                            }, formatFileSize(transfer.fileSize))\n                        ]),\n                        React.createElement('button', {\n                            key: 'cancel',\n                            onClick: () => webrtcManager.cancelFileTransfer(transfer.fileId),\n                            className: \"text-red-400 hover:text-red-300 text-xs\"\n                        }, [\n                            React.createElement('i', {\n                                className: 'fas fa-times'\n                            })\n                        ])\n                    ]),\n                    renderProgress(transfer, 'var(--sb-orange)')\n                ])\n            ),\n\n            // Receiving files\n            ...transfers.receiving.map(transfer => \n                React.createElement('div', {\n                    key: `recv-${transfer.fileId}`,\n                    style: { borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', padding: '12px', marginBottom: '8px' }\n                }, [\n                    React.createElement('div', {\n                        key: 'header',\n                        className: \"flex items-center justify-between mb-2\"\n                    }, [\n                        React.createElement('div', {\n                            key: 'info',\n                            className: \"flex items-center\"\n                        }, [\n                            React.createElement('i', {\n                                key: 'icon',\n                                className: 'fas fa-arrow-down',\n                                style: { color: 'var(--sb-green)', fontSize: '13px', marginInlineEnd: '8px' }\n                            }),\n                            React.createElement('span', {\n                                key: 'name',\n                                className: \"font-medium text-sm\",\n                                style: { color: 'var(--sb-text-2)' }\n                            }, transfer.fileName),\n                            React.createElement('span', {\n                                key: 'size',\n                                className: \"text-xs ms-2\",\n                                style: { color: 'var(--sb-text-8)' }\n                            }, formatFileSize(transfer.fileSize))\n                        ]),\n                        React.createElement('div', { key: 'actions', className: 'flex items-center space-x-2' }, [\n                            transfer.status === 'completed' ? React.createElement('button', {\n                                key: 'download',\n                                className: 'text-green-400 hover:text-green-300 text-xs flex items-center',\n                                onClick: async () => {\n                                    try {\n                                        const url = await webrtcManager.getReceivedFileObjectURL(transfer.fileId);\n                                        if (!url) { alert(t('file.gone')); return; }\n                                        const a = document.createElement('a');\n                                        a.href = url;\n                                        a.download = transfer.fileName || 'file';\n                                        a.click();\n                                        setTimeout(() => webrtcManager.revokeReceivedFileObjectURL(url), 10000);\n                                    } catch (e) {\n                                        alert(e.message || t('file.gone'));\n                                    }\n                                }\n                            }, [\n                                React.createElement('i', { key: 'i', className: 'fas fa-download me-1' }),\n                                t('file.download')\n                            ]) : null,\n                            React.createElement('button', {\n                                key: 'cancel',\n                                onClick: () => webrtcManager.cancelFileTransfer(transfer.fileId),\n                                className: \"text-red-400 hover:text-red-300 text-xs\"\n                            }, [\n                                React.createElement('i', {\n                                    className: 'fas fa-times'\n                                })\n                            ])\n                        ])\n                    ]),\n                    renderProgress(transfer, 'var(--sb-green)')\n                ])\n            )\n        ])\n    ]);\n};\n\n// Export\nwindow.FileTransferComponent = FileTransferComponent;\n", "import { t } from '../i18n/index.js';\n// Pure, dependency-free validation and normalization of user-supplied ICE\n// (STUN/TURN) servers. No DOM, no browser APIs \u2014 safe to unit-test in Node.\n//\n// Security intent: a user can paste arbitrary text here. We must never hand an\n// un-vetted value to RTCPeerConnection, and we must reject anything that is not\n// a real STUN/TURN URL (e.g. javascript:, data:, http(s):, ws(s):) so the field\n// cannot be abused as an injection surface or silently break the connection.\n// Validation is allowlist-based: only known-good schemes, host shapes, and the\n// standard transport query are accepted; everything else is rejected.\n\nexport const ICE_LIMITS = Object.freeze({\n    MAX_SERVERS: 10,\n    MAX_URLS_PER_SERVER: 8,\n    MAX_STRING_LENGTH: 512\n});\n\n// RTCIceServer only accepts these schemes. Everything else is rejected.\nexport const ALLOWED_ICE_SCHEMES = Object.freeze(['stun', 'stuns', 'turn', 'turns']);\n\nconst SCHEME_RE = /^(stuns?|turns?):/i;\n// Positive allowlist for the host portion: hostname/IPv4, or bracketed IPv6,\n// with an optional numeric port. Anything outside this shape is rejected.\nconst HOST_RE = /^(\\[[0-9a-f:]+\\]|[a-z0-9.-]+)(:\\d{1,5})?$/i;\nconst TRANSPORT_RE = /^transport=(udp|tcp)$/i;\n\n// True if the string contains any ASCII control character (0x00\u20130x1F or 0x7F).\n// Implemented via char codes to keep the source free of literal control bytes.\nfunction hasControlChars(value) {\n    for (let i = 0; i < value.length; i++) {\n        const code = value.charCodeAt(i);\n        if (code < 0x20 || code === 0x7f) return true;\n    }\n    return false;\n}\n\n/**\n * Validate a single ICE URL string.\n * @returns {string|null} error message, or null if valid.\n */\nexport function validateIceUrl(url) {\n    if (typeof url !== 'string') return t('iceUrl.notString');\n    const trimmed = url.trim();\n    if (!trimmed) return t('iceUrl.empty');\n    if (trimmed.length > ICE_LIMITS.MAX_STRING_LENGTH) return t('iceUrl.tooLong');\n    if (hasControlChars(trimmed)) return t('iceUrl.badChars');\n\n    const scheme = trimmed.match(SCHEME_RE);\n    if (!scheme) {\n        return t('iceUrl.badScheme');\n    }\n\n    // Validate the part after \"<scheme>:\" \u2014 host[:port][?transport=udp|tcp].\n    const rest = trimmed.slice(scheme[0].length);\n    const [hostPort, query, ...extra] = rest.split('?');\n    if (extra.length > 0) return t('iceUrl.badQuery');\n    if (!hostPort) return t('iceUrl.noHost');\n    if (!HOST_RE.test(hostPort)) return t('iceUrl.badHost');\n\n    if (query !== undefined && !TRANSPORT_RE.test(query)) {\n        return t('iceUrl.badTransport');\n    }\n\n    return null;\n}\n\nexport function isTurnUrl(url) {\n    return typeof url === 'string' && /^turns?:/i.test(url.trim());\n}\n\nfunction validateSecret(value, label) {\n    if (value === undefined || value === null || value === '') return null;\n    if (typeof value !== 'string') return `${label} must be a string`;\n    if (value.length > ICE_LIMITS.MAX_STRING_LENGTH) return `${label} is too long`;\n    if (hasControlChars(value)) return `${label} contains invalid characters`;\n    return null;\n}\n\n/**\n * Validate and normalize a list of ICE server entries.\n * Each entry: { urls: string | string[], username?: string, credential?: string }\n * @returns {{ servers: Array, errors: string[], warnings: string[] }}\n */\nexport function normalizeIceServers(entries) {\n    const errors = [];\n    const warnings = [];\n    const servers = [];\n\n    if (!Array.isArray(entries)) {\n        return { servers: [], errors: [t('iceErr.notArray')], warnings: [] };\n    }\n    if (entries.length === 0) {\n        return { servers: [], errors: [], warnings: [] };\n    }\n    if (entries.length > ICE_LIMITS.MAX_SERVERS) {\n        errors.push(t('iceErr.tooMany', { max: ICE_LIMITS.MAX_SERVERS }));\n        return { servers: [], errors, warnings };\n    }\n\n    entries.forEach((entry, index) => {\n        const label = `Server #${index + 1}`;\n        if (!entry || typeof entry !== 'object') {\n            errors.push(t('iceErr.invalidEntry', { label }));\n            return;\n        }\n\n        const rawUrls = Array.isArray(entry.urls) ? entry.urls : [entry.urls];\n        if (rawUrls.length === 0 || rawUrls.length > ICE_LIMITS.MAX_URLS_PER_SERVER) {\n            errors.push(t('iceErr.urlCount', { label, max: ICE_LIMITS.MAX_URLS_PER_SERVER }));\n            return;\n        }\n\n        const cleanUrls = [];\n        let entryHasTurn = false;\n        for (const rawUrl of rawUrls) {\n            const err = validateIceUrl(rawUrl);\n            if (err) {\n                errors.push(`${label}: ${err}`);\n                continue;\n            }\n            const trimmed = rawUrl.trim();\n            cleanUrls.push(trimmed);\n            if (isTurnUrl(trimmed)) entryHasTurn = true;\n        }\n        if (cleanUrls.length === 0) return;\n\n        const userErr = validateSecret(entry.username, `${label} username`);\n        if (userErr) errors.push(userErr);\n        const credErr = validateSecret(entry.credential, `${label} credential`);\n        if (credErr) errors.push(credErr);\n\n        const server = { urls: cleanUrls.length === 1 ? cleanUrls[0] : cleanUrls };\n        if (entry.username) server.username = String(entry.username);\n        if (entry.credential) server.credential = String(entry.credential);\n\n        if (entryHasTurn && (!server.username || !server.credential)) {\n            warnings.push(t('iceErr.turnCreds', { label }));\n        }\n\n        servers.push(server);\n    });\n\n    return { servers, errors, warnings };\n}\n\n/**\n * Parse free-form user input into ICE server entries.\n * Accepts either a JSON array of RTCIceServer-like objects, or one URL per line\n * (URL-only servers, e.g. public STUN). Returns normalized + validated output.\n */\nexport function parseIceServersInput(text) {\n    if (typeof text !== 'string' || !text.trim()) {\n        return { servers: [], errors: [], warnings: [] };\n    }\n\n    const trimmed = text.trim();\n    if (trimmed.startsWith('[') || trimmed.startsWith('{')) {\n        let parsed;\n        try {\n            parsed = JSON.parse(trimmed);\n        } catch {\n            return { servers: [], errors: [t('iceErr.invalidJson')], warnings: [] };\n        }\n        const arr = Array.isArray(parsed) ? parsed : [parsed];\n        return normalizeIceServers(arr);\n    }\n\n    // Line-based: each non-empty line is a single URL-only server.\n    const entries = trimmed\n        .split('\\n')\n        .map(line => line.trim())\n        .filter(Boolean)\n        .map(url => ({ urls: url }));\n    return normalizeIceServers(entries);\n}\n\n/** Does a normalized server list contain at least one TURN/TURNS server? */\nexport function listHasTurn(servers) {\n    if (!Array.isArray(servers)) return false;\n    return servers.some(server => {\n        const urls = Array.isArray(server?.urls) ? server.urls : [server?.urls];\n        return urls.some(isTurnUrl);\n    });\n}\n", "import { t, direction } from '../../i18n/index.js';\n// Advanced network settings: lets a user supply their own STUN/TURN servers\n// instead of the bundled public defaults, and toggle relay-only privacy mode.\n// Free / power-user feature, hidden behind an explicit \"Advanced\" entry point.\n//\n// All input is validated through src/network/iceServers.js before it can reach\n// RTCPeerConnection. Persistence is opt-in and encrypted at rest (see\n// src/network/iceSettingsStore.js).\nimport {\n    parseIceServersInput,\n    listHasTurn,\n    ICE_LIMITS\n} from '../../network/iceServers.js';\n\nconst React = window.React;\n\nconst PLACEHOLDER = [\n    '# One URL per line, e.g.:',\n    'stun:stun.example.com:3478',\n    'turn:turn.example.com:3478?transport=udp',\n    '',\n    '# Or paste JSON for servers with credentials:',\n    '[{\"urls\":\"turns:turn.example.com:5349\",\"username\":\"user\",\"credential\":\"secret\"}]'\n].join('\\n');\n\nasync function testIceServers(servers, timeoutMs = 6000) {\n    const found = { host: 0, srflx: 0, relay: 0 };\n    if (typeof RTCPeerConnection === 'undefined') {\n        return { ...found, error: t('ice.errUnavailable') };\n    }\n    let pc;\n    try {\n        pc = new RTCPeerConnection({ iceServers: servers });\n    } catch (error) {\n        return { ...found, error: error.message || t('ice.errInvalid') };\n    }\n\n    return new Promise((resolve) => {\n        let settled = false;\n        const finish = () => {\n            if (settled) return;\n            settled = true;\n            clearTimeout(timer);\n            try { pc.close(); } catch { /* noop */ }\n            resolve(found);\n        };\n        const timer = setTimeout(finish, timeoutMs);\n\n        pc.onicecandidate = (event) => {\n            if (!event.candidate) { finish(); return; }\n            const c = event.candidate.candidate || '';\n            if (/ typ host/.test(c)) found.host++;\n            else if (/ typ srflx/.test(c)) found.srflx++;\n            else if (/ typ relay/.test(c)) found.relay++;\n        };\n\n        try {\n            pc.createDataChannel('securebit-ice-test');\n            pc.createOffer()\n                .then((offer) => pc.setLocalDescription(offer))\n                .catch(() => finish());\n        } catch {\n            finish();\n        }\n    });\n}\n\nconst IceServerSettings = ({ isOpen, onClose, initial, hasSaved, onApply, onForget, embedded }) => {\n    if (!isOpen) return null;\n\n    const [useCustom, setUseCustom] = React.useState(initial?.useCustom || false);\n    const [serversText, setServersText] = React.useState(initial?.serversText || '');\n    const [relayOnly, setRelayOnly] = React.useState(initial?.privacyMode === 'relay-only');\n    const [persist, setPersist] = React.useState(initial?.persisted || false);\n    const [testState, setTestState] = React.useState('idle'); // idle | running | done\n    const [testResult, setTestResult] = React.useState(null);\n\n    const parsed = useCustom ? parseIceServersInput(serversText) : { servers: [], errors: [], warnings: [] };\n    const hasTurn = listHasTurn(parsed.servers);\n    const canApply = !useCustom || (parsed.servers.length > 0 && parsed.errors.length === 0);\n\n    const handleTest = async () => {\n        setTestState('running');\n        setTestResult(null);\n        const result = await testIceServers(parsed.servers);\n        setTestResult(result);\n        setTestState('done');\n    };\n\n    const handleApply = () => {\n        if (!canApply) return;\n        onApply(\n            {\n                useCustom,\n                servers: useCustom ? parsed.servers : [],\n                privacyMode: relayOnly ? 'relay-only' : 'standard',\n                serversText\n            },\n            persist\n        );\n    };\n\n    const handleForget = async () => {\n        if (onForget) await onForget();\n        setPersist(false);\n    };\n\n    // \u2500\u2500 Design import: dark slide-up overlay (orange/green accents) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    const h = React.createElement;\n    const C_ORANGE = 'var(--sb-orange)';\n    const C_GREEN = 'var(--sb-green)';\n    // Fill forms of the two: brand colour in both themes. See app.jsx.\n    const C_ORANGE_SOLID = 'var(--sb-orange-solid)';\n    const C_GREEN_SOLID = 'var(--sb-green-solid)';\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\n    // radio card (public / own servers)\n    const radioCard = (selected, onClick, title, desc, extraStyle) => h('button', {\n        type: 'button', onClick,\n        style: Object.assign({\n            width: '100%', textAlign: 'start', display: 'flex', alignItems: 'flex-start', gap: '12px',\n            padding: '14px 15px', borderRadius: '13px',\n            border: `1px solid ${selected ? 'rgba(var(--sb-orange-rgb), 0.45)' : 'rgba(var(--sb-ink), 0.07)'}`,\n            background: selected ? 'rgba(var(--sb-orange-rgb), 0.06)' : 'var(--sb-surface)',\n            color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', transition: 'all .15s', marginBottom: '10px'\n        }, extraStyle || {})\n    }, [\n        h('span', { key: 'ring', style: { flex: 'none', width: '18px', height: '18px', marginTop: '1px', borderRadius: '50%', border: `1.5px solid ${selected ? C_ORANGE : 'rgba(var(--sb-ink), 0.22)'}`, display: 'grid', placeItems: 'center' } },\n            h('span', { style: { width: '8px', height: '8px', borderRadius: '50%', background: selected ? C_ORANGE_SOLID : 'transparent' } })),\n        h('span', { key: 'tx', style: { flex: 1 } }, [\n            h('span', { key: 't', style: { display: 'block', fontSize: '14px', fontWeight: 700, color: 'var(--sb-text-1)' } }, title),\n            h('span', { key: 'd', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '2px' } }, desc)\n        ])\n    ]);\n\n    // pill toggle row (relay / save)\n    const toggleRow = (on, onClick, title, desc, accent, badge) => h('button', {\n        type: 'button', onClick,\n        style: {\n            width: '100%', textAlign: 'start', display: 'flex', alignItems: 'flex-start', gap: '12px',\n            padding: '14px 15px', borderRadius: '13px',\n            border: `1px solid ${on ? 'rgba(var(--sb-green-rgb), 0.3)' : 'rgba(var(--sb-ink), 0.07)'}`,\n            background: on ? 'rgba(var(--sb-green-rgb), 0.05)' : 'var(--sb-surface)',\n            color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', transition: 'all .15s', marginBottom: '10px'\n        }\n    }, [\n        h('span', { key: 'tx', style: { flex: 1 } }, [\n            h('span', { key: 'r1', style: { display: 'flex', alignItems: 'center', gap: '8px' } }, [\n                h('span', { key: 't', style: { fontSize: '14px', fontWeight: 700, color: 'var(--sb-text-1)' } }, title),\n                badge && h('span', { key: 'b', style: { fontSize: '10px', fontWeight: 700, color: C_GREEN, padding: '2px 7px', borderRadius: '5px', background: 'rgba(var(--sb-green-rgb), 0.1)', border: '1px solid rgba(var(--sb-green-rgb), 0.22)' } }, badge)\n            ]),\n            h('span', { key: 'd', style: { display: 'block', fontSize: '12.5px', lineHeight: 1.5, color: 'var(--sb-text-7)', marginTop: '3px' } }, desc)\n        ]),\n        h('span', { key: 'tr', style: { flex: 'none', width: '42px', height: '24px', borderRadius: '99px', background: on ? (accent || C_GREEN_SOLID) : 'rgba(var(--sb-ink), 0.08)', border: `1px solid ${on ? (accent || C_GREEN) : 'rgba(var(--sb-ink), 0.12)'}`, position: 'relative', transition: 'all .18s', marginTop: '1px' } },\n            h('span', { style: { position: 'absolute', top: '2px', insetInlineStart: '2px', width: '18px', height: '18px', borderRadius: '50%', background: '#fff', transform: on ? `translateX(${18 * direction()}px)` : 'translateX(0)', transition: 'transform .18s' } }))\n    ]);\n\n    // \u2500\u2500 scrollable body \u2500\u2500\n    const body = [];\n    body.push(h('p', { key: 'intro', style: { margin: '0 0 18px', fontSize: '13.5px', lineHeight: 1.6, color: 'var(--sb-text-6)' } },\n        t('ice.intro')));\n    body.push(radioCard(!useCustom, () => setUseCustom(false), t('ice.publicTitle'), t('ice.publicDesc')));\n    body.push(radioCard(useCustom, () => setUseCustom(true), t('ice.customTitle'), t('ice.customDesc', { max: ICE_LIMITS.MAX_SERVERS }), useCustom ? { marginBottom: '14px' } : null));\n\n    if (useCustom) {\n        const custom = [];\n        custom.push(h('div', { key: 'ta', style: { borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-bg-deep)', overflow: 'hidden', marginBottom: '12px' } },\n            h('textarea', {\n                dir: 'ltr',\n                value: serversText, onChange: (e) => setServersText(e.target.value), rows: 5, spellCheck: false, autoComplete: 'off',\n                placeholder: PLACEHOLDER,\n                style: { width: '100%', resize: 'vertical', border: 'none', outline: 'none', background: 'transparent', color: 'var(--sb-text-code)', fontFamily: MONO, fontSize: '12px', lineHeight: 1.65, padding: '13px 14px', minHeight: '104px' }\n            })));\n        if (parsed.errors.length > 0) {\n            custom.push(h('ul', { key: 'err', style: { margin: '0 0 10px', paddingInlineStart: '18px', color: 'var(--sb-red)', fontSize: '12.5px' } },\n                parsed.errors.slice(0, 6).map((err, i) => h('li', { key: i }, err))));\n        }\n        if (parsed.warnings.length > 0) {\n            custom.push(h('ul', { key: 'warn', style: { margin: '0 0 10px', paddingInlineStart: '18px', color: 'var(--sb-yellow)', fontSize: '12.5px' } },\n                parsed.warnings.slice(0, 6).map((w, i) => h('li', { key: i }, w))));\n        }\n        if (parsed.servers.length > 0 && parsed.errors.length === 0) {\n            custom.push(h('p', { key: 'ok', style: { margin: '0 0 10px', fontSize: '12.5px', color: C_GREEN } },\n                `${parsed.servers.length} server(s) parsed${hasTurn ? ' (TURN present)' : ' (STUN only \u2014 does not hide IP)'}.`));\n        }\n        custom.push(h('div', { key: 'note', style: { display: 'flex', alignItems: 'flex-start', gap: '9px', padding: '12px 13px', borderRadius: '11px', border: '1px solid rgba(var(--sb-green-rgb), 0.18)', background: 'rgba(var(--sb-green-rgb), 0.05)', marginBottom: '12px' } }, [\n            h('i', { key: 'i', className: 'fas fa-info-circle', style: { color: C_GREEN, fontSize: '13px', marginTop: '2px', flex: 'none' } }),\n            h('span', { key: 't', style: { fontSize: '12px', lineHeight: 1.55, color: 'var(--sb-green-muted)' } }, [\n                t('ice.turnNote'),\n                h('span', { key: 'm', style: { fontFamily: MONO, color: C_GREEN } }, 'turns:'), t('ice.turnNoteTls')\n            ])\n        ]));\n        const testColor = testState === 'done' && testResult && !testResult.error ? C_GREEN : 'var(--sb-text-4)';\n        custom.push(h('div', { key: 'test', style: { display: 'flex', alignItems: 'center', gap: '12px', flexWrap: 'wrap', marginBottom: '4px' } }, [\n            h('button', {\n                key: 'btn', type: 'button', disabled: !canApply || testState === 'running', onClick: handleTest,\n                style: { display: 'inline-flex', alignItems: 'center', gap: '8px', padding: '10px 15px', borderRadius: '10px', border: `1px solid ${testState === 'done' && testResult && !testResult.error ? 'rgba(var(--sb-green-rgb), 0.4)' : 'rgba(var(--sb-ink), 0.1)'}`, background: testState === 'done' && testResult && !testResult.error ? 'rgba(var(--sb-green-rgb), 0.08)' : 'rgba(var(--sb-ink), 0.04)', color: testColor, fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: (!canApply || testState === 'running') ? 'not-allowed' : 'pointer', opacity: (!canApply || testState === 'running') ? 0.6 : 1 }\n            }, [\n                h('i', { key: 'i', className: testState === 'running' ? 'fas fa-circle-notch' : 'fas fa-play-circle', style: testState === 'running' ? { animation: 'sbSpin 1s linear infinite' } : null }),\n                testState === 'running' ? t('ice.testing') : t('ice.test')\n            ]),\n            (testState === 'done' && testResult) ? h('span', { key: 'res', style: { fontSize: '12px', color: testResult.error ? 'var(--sb-red)' : 'var(--sb-text-7)' } },\n                testResult.error\n                    ? `Test failed: ${testResult.error}`\n                    : (testResult.srflx > 0 || testResult.relay > 0)\n                        ? `STUN ${testResult.srflx > 0 ? 'OK' : 'none'} \u00B7 TURN ${testResult.relay > 0 ? 'OK' : 'none'} \u00B7 host ${testResult.host}`\n                        : `host ${testResult.host} \u00B7 this browser hides STUN/TURN candidates from the test \u2014 your servers still apply to real connections`\n            ) : null\n        ]));\n        body.push(h('div', { key: 'custom', style: { marginBottom: '16px' } }, custom));\n    }\n\n    body.push(toggleRow(relayOnly, () => setRelayOnly(!relayOnly), t('ice.relayTitle'),\n        t('ice.relayDesc'), C_GREEN, t('ice.relayBadge')));\n    if (relayOnly && useCustom && !hasTurn) {\n        body.push(h('p', { key: 'relaywarn', style: { margin: '-4px 0 10px', fontSize: '12.5px', color: 'var(--sb-yellow)' } },\n            t('ice.relayWarning')));\n    }\n    body.push(toggleRow(persist, () => setPersist(!persist), t('ice.persist'),\n        t('ice.persistDesc'), C_ORANGE));\n\n    // \u2500\u2500 footer actions \u2500\u2500\n    const footerBtns = [];\n    if (hasSaved) {\n        footerBtns.push(h('button', { key: 'forget', type: 'button', onClick: handleForget,\n            style: { marginInlineEnd: 'auto', padding: '11px 18px', borderRadius: '11px', border: '1px solid rgba(var(--sb-red-rgb), 0.3)', background: 'transparent', color: 'var(--sb-red)', fontFamily: 'inherit', fontSize: '13.5px', fontWeight: 600, cursor: 'pointer' } }, t('ice.forget')));\n    }\n    footerBtns.push(h('button', { key: 'cancel', type: 'button', onClick: onClose,\n        style: { padding: '11px 18px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'transparent', color: 'var(--sb-text-5)', fontFamily: 'inherit', fontSize: '13.5px', fontWeight: 600, cursor: 'pointer' } }, t('ice.cancel')));\n    footerBtns.push(h('button', { key: 'apply', type: 'button', onClick: handleApply, disabled: !canApply,\n        style: { display: 'inline-flex', alignItems: 'center', gap: '8px', padding: '11px 20px', borderRadius: '11px', border: 'none', background: C_ORANGE_SOLID, color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '13.5px', fontWeight: 700, cursor: canApply ? 'pointer' : 'not-allowed', opacity: canApply ? 1 : 0.5, boxShadow: '0 6px 18px rgba(var(--sb-orange-rgb), 0.28)' } }, [\n        h('i', { key: 'i', className: 'fas fa-check' }), t('ice.apply')\n    ]));\n\n    // Embedded mode (default for the new design): fill the connection screen's\n    // right column and slide up over it. Fallback: a fixed right-side drawer.\n    const wrapperStyle = embedded\n        ? { position: 'absolute', inset: 0, zIndex: 60, display: 'flex', flexDirection: 'column', background: 'var(--sb-bg)', animation: 'sbSlideUp .32s cubic-bezier(.2,.7,.3,1)' }\n        : { position: 'fixed', inset: 0, zIndex: 60, display: 'flex', flexDirection: 'column', alignItems: 'stretch', background: 'var(--sb-bg)', animation: 'sbSlideUp .32s cubic-bezier(.2,.7,.3,1)' };\n\n    return h('div', { className: 'sb-ice-overlay', style: wrapperStyle }, [\n        h(React.Fragment, { key: 'panel' }, [\n            // header\n            h('div', { key: 'head', style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '20px 24px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                h('div', { key: 'ic', style: { width: '38px', height: '38px', flex: 'none', display: 'grid', placeItems: 'center', borderRadius: '10px', background: 'rgba(var(--sb-ink), 0.03)', border: '1px solid rgba(var(--sb-ink), 0.06)' } },\n                    h('i', { className: 'fas fa-sliders-h', style: { color: 'var(--sb-text-4)', fontSize: '15px' } })),\n                h('div', { key: 'tx', style: { flex: 1, lineHeight: 1.25 } }, [\n                    h('div', { key: 't', style: { fontSize: '16.5px', fontWeight: 800, letterSpacing: '-0.3px', color: 'var(--sb-text-1)' } }, t('ice.title')),\n                    h('div', { key: 's', style: { fontSize: '12px', color: 'var(--sb-text-8)' } }, t('ice.subtitle'))\n                ]),\n                h('button', { key: 'x', type: 'button', onClick: onClose, style: { width: '32px', height: '32px', flex: 'none', display: 'grid', placeItems: 'center', borderRadius: '9px', border: 'none', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-7)', cursor: 'pointer' } },\n                    h('i', { className: 'fas fa-times' }))\n            ]),\n            // scroll body\n            h('div', { key: 'body', className: 'custom-scrollbar', style: { flex: 1, overflowY: 'auto', padding: '20px 24px' } }, body),\n            // footer\n            h('div', { key: 'foot', style: { display: 'flex', alignItems: 'center', justifyContent: 'flex-end', gap: '10px', padding: '16px 24px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', background: 'var(--sb-bg-deep)', borderRadius: '0' } }, footerBtns)\n        ])\n    ]);\n};\n\nwindow.IceServerSettings = IceServerSettings;\n\nexport { IceServerSettings, testIceServers };\n", "import { t } from '../../i18n/index.js';\n// Encrypted voice / video call UI for SecureBit.chat.\n//\n// Faithful implementation of the \"SecureBit Chat.dc.html\" design: the voice-call\n// (expanded), video-call (expanded) and minimized-widget states use the exact\n// icons, sizes, colours and layout from that mockup. This component is a thin\n// presentational shell over the call subsystem in EnhancedSecureWebRTCManager \u2014\n// all media and crypto live there. Media is DTLS-SRTP encrypted on the same\n// SAS-verified transport as the chat (see the manager's call section).\n//\n// Loaded as a native ES module (no JSX compilation), so this file uses\n// React.createElement directly, mirroring the other components/ui modules.\n\nconst CallUIComponent = ({ webrtcManager, peerTitle }) => {\n    const h = React.createElement;\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\n    // Exact SVG icons lifted from the design. Rendered via innerHTML (CSP-safe \u2014\n    // markup, not script); `stroke=\"currentColor\"` inherits the button's colour.\n    const ICON = {\n        lock: '<path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/><rect x=\"4.5\" y=\"11\" width=\"15\" height=\"9\" rx=\"2.2\"/>',\n        minimize: '<path d=\"M9 4v4a1 1 0 0 1-1 1H4M15 4v4a1 1 0 0 0 1 1h4M9 20v-4a1 1 0 0 0-1-1H4M15 20v-4a1 1 0 0 1 1-1h4\"/>',\n        expand: '<path d=\"M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7\"/>',\n        user: '<circle cx=\"12\" cy=\"8\" r=\"3.6\"/><path d=\"M5 20c0-3.5 3-5.5 7-5.5s7 2 7 5.5\"/>',\n        micOn: '<rect x=\"9\" y=\"3\" width=\"6\" height=\"11\" rx=\"3\"/><path d=\"M5 11a7 7 0 0 0 14 0\"/><path d=\"M12 18v3\"/>',\n        micOff: '<path d=\"M9 9v-1a3 3 0 0 1 5.1-2.1M15 11v3a3 3 0 0 1-4.6 2.5\"/><path d=\"M5 11a7 7 0 0 0 10.3 6.2M19 11a7 7 0 0 1-.4 2.3\"/><path d=\"M12 18v3\"/><path d=\"M3 3l18 18\"/>',\n        camOn: '<path d=\"M23 7l-7 5 7 5V7z\"/><rect x=\"1\" y=\"5\" width=\"15\" height=\"14\" rx=\"2.5\"/>',\n        camOff: '<path d=\"M16 16H3a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h2l2-2M11 6h2l7-3v14M2 2l20 20\"/>',\n        flip: '<path d=\"M3 7h3l2-2h8l2 2h3v12H3z\"/><path d=\"M9.5 13a2.5 2.5 0 0 1 5 0M14.5 13l-1.3-1.3M14.5 13l1.3-1.3\"/>',\n        phone: '<path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\"/>',\n        phoneHangup: '<path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\" transform=\"rotate(135 12 12)\"/>'\n    };\n    const svg = (inner, size, sw) => h('span', {\n        style: { display: 'grid', placeItems: 'center', width: size + 'px', height: size + 'px' },\n        dangerouslySetInnerHTML: { __html: `<svg width=\"${size}\" height=\"${size}\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"${sw}\" stroke-linecap=\"round\" stroke-linejoin=\"round\">${inner}</svg>` }\n    });\n\n    const [call, setCall] = React.useState(() => (webrtcManager?.getCallState?.() || { phase: 'idle', active: false }));\n    const [minimized, setMinimized] = React.useState(false);\n    const [seconds, setSeconds] = React.useState(0);\n\n    const remoteVideoRef = React.useRef(null);\n    const remoteAudioRef = React.useRef(null);\n    const selfVideoRef = React.useRef(null);\n\n    // Subscribe to call-state changes from the active session's manager.\n    React.useEffect(() => {\n        if (!webrtcManager) return;\n        const onState = (state) => setCall(state);\n        const prev = webrtcManager.onCallStateChanged;\n        webrtcManager.onCallStateChanged = onState;\n        setCall(webrtcManager.getCallState ? webrtcManager.getCallState() : { phase: 'idle', active: false });\n        return () => { if (webrtcManager.onCallStateChanged === onState) webrtcManager.onCallStateChanged = prev || null; };\n    }, [webrtcManager]);\n\n    const phase = call.phase || 'idle';\n    const active = !!call.active;\n    const isVideo = !!call.withVideo || !!call.remoteHasVideo;\n\n    // Attach media streams to the <video>/<audio> elements AND explicitly play():\n    // just setting srcObject does not reliably start playback (esp. when the\n    // element mounts before the stream exists), so the peer's audio stayed silent.\n    React.useEffect(() => {\n        const remoteStream = webrtcManager?.getRemoteMediaStream?.();\n        const localStream = webrtcManager?.getLocalMediaStream?.();\n        const attach = (el, stream, muted) => {\n            if (!el || !stream) return;\n            if (el.srcObject !== stream) { el.muted = muted; el.srcObject = stream; }\n            const p = el.play && el.play();\n            if (p && p.catch) p.catch(() => {});\n        };\n        // Remote audio via the dedicated <audio>; remote <video> stays muted so the\n        // peer's audio isn't played twice.\n        attach(remoteAudioRef.current, remoteStream, false, 'remoteAudio');\n        attach(remoteVideoRef.current, remoteStream, true, 'remoteVideo');\n        attach(selfVideoRef.current, localStream, true, 'selfVideo');\n    });\n\n    // Call duration timer (starts when the call goes active).\n    React.useEffect(() => {\n        if (phase !== 'active') { setSeconds(0); return; }\n        const started = Date.now();\n        const iv = setInterval(() => setSeconds(Math.floor((Date.now() - started) / 1000)), 1000);\n        return () => clearInterval(iv);\n    }, [phase]);\n\n    React.useEffect(() => { if (phase === 'idle') setMinimized(false); }, [phase]);\n\n    if (!active || phase === 'idle' || phase === 'ended') return null;\n    // One leg of a group call runs on this same session. The group's own surface\n    // renders it as a tile alongside the others; a second full-screen 1:1 overlay\n    // on top of that would be the same audio shown twice, with two hang-up\n    // buttons that mean different things.\n    if (call.groupCallId) return null;\n\n    const fmt = (s) => `${String(Math.floor(s / 60)).padStart(2, '0')}:${String(s % 60).padStart(2, '0')}`;\n    const ringing = phase === 'outgoing' || phase === 'connecting';\n    const callStatus = phase === 'outgoing' ? t('call.ringing')\n        : phase === 'connecting' ? t('call.connecting')\n            : phase === 'active' ? fmt(seconds) : t('call.ringing');\n    const name = peerTitle || t('call.peer');\n\n    // \u2500\u2500 shared styles (from the design) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    const ctrlBase = {\n        width: '56px', height: '56px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n        border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.05)',\n        color: 'var(--sb-text-4)', cursor: 'pointer', transition: 'all .15s'\n    };\n    const dangerCtrl = { ...ctrlBase, background: 'var(--sb-red-strong-solid)', color: '#fff', border: '1px solid transparent' };\n    const endBtn = {\n        width: '56px', height: '56px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n        border: 'none', background: 'var(--sb-red-strong-solid)', color: '#fff', cursor: 'pointer',\n        boxShadow: '0 8px 24px rgba(var(--sb-red-strong-rgb), 0.35)', transition: 'transform .15s'\n    };\n    const minimizeBtn = (light) => ({\n        width: '36px', height: '36px', borderRadius: '9px', display: 'grid', placeItems: 'center',\n        border: '1px solid rgba(var(--sb-ink), ' + (light ? '0.15' : '0.1') + ')',\n        background: light ? 'rgba(0,0,0,0.35)' : 'rgba(var(--sb-ink), 0.04)',\n        color: light ? '#fff' : 'var(--sb-text-4)', cursor: 'pointer', transition: 'all .15s'\n    });\n\n    const encBadge = h('span', { key: 'enc', style: { display: 'inline-flex', alignItems: 'center', gap: '4px', fontSize: '11px', fontWeight: 600, color: 'var(--sb-green)' } },\n        [svg(ICON.lock, 11, 2), t('call.encryptedShort')]);\n\n    // Connection-quality indicator \u2014 driven by the adaptation controller's\n    // getStats (loss + RTT). Signal bars + label; hidden until there's data.\n    // `color` labels the quality in words; `solid` fills the signal bars. A bar is a\n    // mark, so it keeps the brand colour in both themes \u2014 see src/styles/theme.css.\n    const QUALITY = {\n        excellent: { bars: 4, color: 'var(--sb-green)', solid: 'var(--sb-green-solid)', label: t('call.qualityExcellent') },\n        good: { bars: 3, color: 'var(--sb-green)', solid: 'var(--sb-green-solid)', label: t('call.qualityGood') },\n        fair: { bars: 2, color: 'var(--sb-yellow)', solid: 'var(--sb-yellow-solid)', label: t('call.qualityFair') },\n        poor: { bars: 1, color: 'var(--sb-red)', solid: 'var(--sb-red-solid)', label: t('call.qualityWeak') },\n    };\n    const qualityIndicator = (compact) => {\n        const q = QUALITY[call.quality];\n        if (!q) return null;\n        const bars = h('span', { key: 'bars', style: { display: 'inline-flex', alignItems: 'flex-end', gap: '2px', height: '14px' } },\n            [0, 1, 2, 3].map(i => h('span', {\n                key: i, style: { width: '3px', height: (5 + i * 3) + 'px', borderRadius: '1px', background: i < q.bars ? q.solid : 'rgba(var(--sb-ink), 0.18)' }\n            })));\n        if (compact) return bars;\n        return h('span', { key: 'q', title: t('call.quality'), style: { display: 'inline-flex', alignItems: 'center', gap: '6px', fontSize: '11.5px', fontWeight: 600, color: q.color } }, [bars, q.label]);\n    };\n\n    // \u2500\u2500 actions \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    const doAccept = () => webrtcManager?.acceptCall?.();\n    const doDecline = () => webrtcManager?.declineCall?.();\n    const doEnd = () => { setMinimized(false); webrtcManager?.endCall?.(); };\n    const doMute = () => webrtcManager?.toggleMic?.();\n    const doCamera = () => webrtcManager?.toggleCamera?.();\n    const doFlip = () => webrtcManager?.switchCamera?.();\n    const doUpgrade = () => webrtcManager?.upgradeToVideo?.();\n\n    const hiddenAudio = h('audio', { key: 'ra', ref: remoteAudioRef, autoPlay: true, playsInline: true, style: { display: 'none' } });\n\n    const labeled = (key, btn, label) => h('div', { key, style: { display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '8px' } },\n        [btn, h('span', { key: 'l', style: { fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-7)' } }, label)]);\n\n    // Avatar disc with optional ringing pulse (voice + incoming).\n    const avatarDisc = (size, ring) => h('div', { key: 'av', style: { position: 'relative', width: '120px', height: '120px', marginBottom: '28px', display: 'grid', placeItems: 'center' } }, [\n        ring && h('span', { key: 'p1', style: { position: 'absolute', inset: 0, borderRadius: '50%', border: '1.5px solid rgba(var(--sb-orange-rgb), 0.5)', animation: 'sbCallPulse 2s ease-out infinite' } }),\n        ring && h('span', { key: 'p2', style: { position: 'absolute', inset: 0, borderRadius: '50%', border: '1.5px solid rgba(var(--sb-orange-rgb), 0.4)', animation: 'sbCallPulse 2s ease-out infinite', animationDelay: '1s' } }),\n        h('div', { key: 'c', style: { width: '104px', height: '104px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))', border: '1px solid rgba(var(--sb-ink), 0.1)', boxShadow: '0 12px 30px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))', color: 'var(--sb-text-7)' } }, svg(ICON.user, size, 1.6))\n    ]);\n\n    // \u2500\u2500 INCOMING (ringing) prompt \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (phase === 'incoming') {\n        return h('div', { style: { position: 'absolute', inset: 0, zIndex: 40, display: 'flex', flexDirection: 'column', background: 'radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)', animation: 'sbExpand .2s ease' } }, [\n            hiddenAudio,\n            h('div', { key: 'top', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'flex-start', padding: '16px 18px' } },\n                h('span', { style: { display: 'inline-flex', alignItems: 'center', gap: '7px', fontSize: '12px', fontWeight: 600, color: 'var(--sb-green)' } }, [svg(ICON.lock, 13, 2), t('call.encrypted')])),\n            h('div', { key: 'mid', style: { flex: 1, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center' } }, [\n                avatarDisc(46, true),\n                h('div', { key: 'nm', style: { fontSize: '24px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, name),\n                h('div', { key: 'st', style: { fontFamily: MONO, fontSize: '14px', fontWeight: 500, color: 'var(--sb-text-6)', marginTop: '8px' } }, call.withVideo ? t('call.incomingVideo') : t('call.incoming'))\n            ]),\n            h('div', { key: 'ctrls', style: { flex: 'none', display: 'flex', alignItems: 'flex-start', justifyContent: 'center', gap: '48px', padding: '28px 24px 40px' } }, [\n                labeled('dec', h('button', { onClick: doDecline, title: t('call.decline'), style: { ...endBtn, width: '62px', height: '62px' } }, svg(ICON.phoneHangup, 24, 1.9)), t('call.decline')),\n                labeled('acc', h('button', { onClick: doAccept, title: t('call.accept'), style: { width: '62px', height: '62px', borderRadius: '50%', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-green-solid)', color: 'var(--sb-on-green)', cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-green-rgb), 0.35)' } }, svg(ICON.phone, 24, 1.9)), t('call.accept'))\n            ])\n        ]);\n    }\n\n    // \u2500\u2500 MINIMIZED widget \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (minimized) {\n        return h('div', { style: { position: 'absolute', bottom: '18px', insetInlineEnd: '18px', zIndex: 40, width: '236px', borderRadius: '14px', overflow: 'hidden', background: 'var(--sb-surface)', border: '1px solid rgba(var(--sb-ink), 0.1)', boxShadow: '0 18px 44px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))', animation: 'sbExpand .18s ease' } }, [\n            hiddenAudio,\n            isVideo && h('div', { key: 'v', style: { position: 'relative', height: '132px', background: '#111' } }, [\n                h('video', { key: 'rv', ref: remoteVideoRef, autoPlay: true, muted: true, playsInline: true, style: { width: '100%', height: '100%', objectFit: 'cover', display: 'block' } }),\n                !call.remoteHasVideo && h('div', { key: 'off', style: { position: 'absolute', inset: 0, display: 'grid', placeItems: 'center', background: 'linear-gradient(120deg,var(--sb-grad-1),var(--sb-grad-2))', color: 'var(--sb-text-9)' } }, svg(ICON.camOff, 22, 1.8)),\n                h('span', { key: 's', style: { position: 'absolute', top: '8px', insetInlineStart: '9px', fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: '#fff', padding: '3px 7px', borderRadius: '6px', background: 'rgba(0,0,0,0.5)' } }, callStatus)\n            ]),\n            h('div', { key: 'bar', style: { display: 'flex', alignItems: 'center', gap: '11px', padding: '11px 12px' } }, [\n                h('span', { key: 'ic', style: { position: 'relative', flex: 'none', width: '34px', height: '34px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.1)', border: '1px solid rgba(var(--sb-green-rgb), 0.25)', color: 'var(--sb-green)' } }, svg(ICON.user, 16, 1.9)),\n                h('div', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                    h('div', { key: 'n', style: { fontSize: '13px', fontWeight: 700, color: 'var(--sb-text-1)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, name),\n                    h('div', { key: 's', style: { display: 'flex', alignItems: 'center', gap: '7px', fontFamily: MONO, fontSize: '11px', color: 'var(--sb-text-6)' } }, [\n                        (isVideo ? t('call.videoPrefix') : t('call.voicePrefix')) + callStatus,\n                        phase === 'active' && qualityIndicator(true)\n                    ])\n                ]),\n                h('button', { key: 'exp', onClick: () => setMinimized(false), title: t('call.expand'), style: { flex: 'none', width: '32px', height: '32px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-4)', cursor: 'pointer', transition: 'all .15s' } }, svg(ICON.expand, 15, 2)),\n                h('button', { key: 'end', onClick: doEnd, title: t('call.end'), style: { flex: 'none', width: '32px', height: '32px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-red-strong-solid)', color: '#fff', cursor: 'pointer', transition: 'transform .15s' } }, svg(ICON.phoneHangup, 15, 2))\n            ])\n        ]);\n    }\n\n    // \u2500\u2500 VIDEO call (expanded) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (isVideo) {\n        return h('div', { style: { position: 'absolute', inset: 0, zIndex: 40, overflow: 'hidden', background: 'var(--sb-bg-deepest)', animation: 'sbExpand .2s ease' } }, [\n            hiddenAudio,\n            call.remoteHasVideo\n                ? h('video', { key: 'rv', ref: remoteVideoRef, autoPlay: true, muted: true, playsInline: true, style: { position: 'absolute', inset: 0, width: '100%', height: '100%', objectFit: 'cover', background: 'var(--sb-bg-deepest)' } })\n                : h('div', { key: 'ph', style: { position: 'absolute', inset: 0, background: 'linear-gradient(120deg, var(--sb-grad-1), var(--sb-grad-2), var(--sb-grad-3))', backgroundSize: '200% 200%', animation: 'sbLiveBg 9s ease-in-out infinite', display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center', gap: '18px' } }, [\n                    h('div', { key: 'a', style: { width: '120px', height: '120px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))', border: '1px solid rgba(var(--sb-ink), 0.1)', color: 'var(--sb-text-6)' } }, svg(ICON.user, 54, 1.5)),\n                    h('div', { key: 't', style: { fontSize: '15px', fontWeight: 600, color: 'var(--sb-text-7)' } }, t('call.peerCameraOff'))\n                ]),\n            // Top bar\n            h('div', { key: 'top', style: { position: 'absolute', top: 0, left: 0, right: 0, display: 'flex', alignItems: 'flex-start', justifyContent: 'space-between', gap: '14px', padding: '18px 20px', background: 'linear-gradient(180deg, rgba(0,0,0,0.55), transparent)' } }, [\n                h('div', { key: 'l' }, [\n                    h('div', { key: 'n', style: { fontSize: '18px', fontWeight: 800, letterSpacing: '-0.3px', color: '#fff' } }, name),\n                    h('div', { key: 's', style: { display: 'inline-flex', alignItems: 'center', gap: '9px', marginTop: '4px' } }, [\n                        h('span', { key: 'st', style: { fontFamily: MONO, fontSize: '12.5px', fontWeight: 500, color: 'var(--sb-text-2)' } }, callStatus),\n                        encBadge,\n                        phase === 'active' && qualityIndicator(false)\n                    ])\n                ]),\n                h('button', { key: 'min', onClick: () => setMinimized(true), title: t('call.minimize'), style: { flex: 'none', ...minimizeBtn(true) } }, svg(ICON.minimize, 16, 2))\n            ]),\n            // Self-cam PiP\n            h('div', { key: 'self', style: { position: 'absolute', bottom: '108px', insetInlineEnd: '18px', width: '132px', height: '176px', borderRadius: '14px', overflow: 'hidden', border: '1px solid rgba(var(--sb-ink), 0.16)', boxShadow: '0 12px 30px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))', background: '#111' } }, [\n                h('video', { key: 'sv', ref: selfVideoRef, autoPlay: true, muted: true, playsInline: true, style: { width: '100%', height: '100%', objectFit: 'cover', transform: 'scaleX(-1)', display: 'block' } }),\n                !call.cameraEnabled && h('div', { key: 'off', style: { position: 'absolute', inset: 0, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center', gap: '8px', background: 'var(--sb-surface)', color: 'var(--sb-text-9)' } }, [\n                    svg(ICON.camOff, 24, 1.8),\n                    h('span', { key: 't', style: { fontSize: '10.5px', color: 'var(--sb-text-9)', fontFamily: MONO } }, t('call.cameraOff'))\n                ])\n            ]),\n            // Control bar\n            h('div', { key: 'ctrls', style: { position: 'absolute', bottom: 0, left: 0, right: 0, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '18px', padding: '22px 24px 28px', background: 'linear-gradient(0deg, rgba(0,0,0,0.6), transparent)' } }, [\n                h('button', { key: 'mute', onClick: doMute, title: t('call.mute'), style: call.micEnabled ? ctrlBase : dangerCtrl }, svg(call.micEnabled ? ICON.micOn : ICON.micOff, 21, 1.9)),\n                h('button', { key: 'cam', onClick: doCamera, title: t('call.camera'), style: call.cameraEnabled ? ctrlBase : dangerCtrl }, svg(call.cameraEnabled ? ICON.camOn : ICON.camOff, 21, 1.8)),\n                h('button', { key: 'flip', onClick: doFlip, title: t('call.flipCamera'), style: ctrlBase }, svg(ICON.flip, 21, 1.8)),\n                h('button', { key: 'end', onClick: doEnd, title: t('call.end'), style: endBtn }, svg(ICON.phoneHangup, 22, 1.9))\n            ])\n        ]);\n    }\n\n    // \u2500\u2500 VOICE call (expanded) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    return h('div', { style: { position: 'absolute', inset: 0, zIndex: 40, display: 'flex', flexDirection: 'column', background: 'radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)', animation: 'sbExpand .2s ease' } }, [\n        hiddenAudio,\n        h('div', { key: 'top', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'space-between', padding: '16px 18px' } }, [\n            h('span', { key: 'enc', style: { display: 'inline-flex', alignItems: 'center', gap: '7px', fontSize: '12px', fontWeight: 600, color: 'var(--sb-green)' } }, [svg(ICON.lock, 13, 2), t('call.encrypted')]),\n            h('button', { key: 'min', onClick: () => setMinimized(true), title: t('call.minimize'), style: minimizeBtn(false) }, svg(ICON.minimize, 16, 2))\n        ]),\n        h('div', { key: 'mid', style: { flex: 1, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center' } }, [\n            avatarDisc(46, ringing),\n            h('div', { key: 'nm', style: { fontSize: '24px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, name),\n            h('div', { key: 'st', style: { fontFamily: MONO, fontSize: '14px', fontWeight: 500, color: 'var(--sb-text-6)', marginTop: '8px' } }, callStatus),\n            phase === 'active' && h('div', { key: 'q', style: { marginTop: '12px' } }, qualityIndicator(false))\n        ]),\n        h('div', { key: 'ctrls', style: { flex: 'none', display: 'flex', alignItems: 'flex-start', justifyContent: 'center', gap: '26px', padding: '28px 24px 34px' } }, [\n            labeled('mute', h('button', { onClick: doMute, title: t('call.mute'), style: call.micEnabled ? ctrlBase : dangerCtrl }, svg(call.micEnabled ? ICON.micOn : ICON.micOff, 22, 1.9)), call.micEnabled ? 'Mute' : t('call.muted')),\n            labeled('video', h('button', { onClick: doUpgrade, title: t('call.addVideo'), style: ctrlBase }, svg(ICON.camOn, 22, 1.8)), t('call.video')),\n            labeled('end', h('button', { onClick: doEnd, title: t('call.end'), style: endBtn }, svg(ICON.phoneHangup, 22, 1.9)), t('call.endShort'))\n        ])\n    ]);\n};\n\nif (typeof window !== 'undefined') {\n    window.CallUIComponent = CallUIComponent;\n}\n\nexport { CallUIComponent };\n"],
-  "mappings": "2jBAAA,IAAAA,GAAAC,GAAA,CAAAC,GAAAC,KAAA,CASA,IAAMC,GAAN,KAAoC,CAClC,YAAYC,EAAS,CAAC,EAAG,CAEvB,KAAK,WAAc,OAAO,aAAiB,KAAe,cAAgB,OAAO,aAAa,YAAe,SACzG,aAAa,WACb,SACJ,KAAK,YAAc,KAAK,eAAe,EACvC,KAAK,YAAc,EACnB,KAAK,cAAgB,SAAS,MAC9B,KAAK,kBAAoB,CAAC,EAC1B,KAAK,aAAeA,EAAO,cAAgB,EAC3C,KAAK,YAAcA,EAAO,aAAe,IACzC,KAAK,qBAAuB,EAC5B,KAAK,eAAiBA,EAAO,gBAAkB,CAAC,EAGhD,KAAK,gBAAkB,OAAO,gBAG9B,KAAK,OAAS,KAAK,kBAAkB,EACrC,KAAK,iBAAmB,KAAK,yBAAyB,EAEtD,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,CAC1B,CAMA,oBAAqB,CAErB,CAOA,mBAAoB,CAClB,OAAI,OAAO,SAAS,OAAW,IACtB,SACE,OAAO,SAAS,SAAa,IAC/B,WACE,OAAO,SAAS,aAAiB,IACnC,eAEF,QACT,CAOA,0BAA2B,CACzB,OAAI,OAAO,SAAS,OAAW,IACtB,mBACE,OAAO,SAAS,SAAa,IAC/B,qBACE,OAAO,SAAS,aAAiB,IACnC,yBAEF,kBACT,CAOA,gBAAiB,CAEf,OAAI,KAAK,QAAU,OAAO,SAAS,KAAK,MAAM,EAAM,IAC3C,CAAC,SAAS,KAAK,MAAM,EAI1B,OAAO,SAAS,UAAa,WACxB,SAAS,SAAS,EAIpB,EACT,CAMA,wBAAyB,CAEnB,OAAO,SAAS,iBAAqB,KAAe,OAAO,SAAS,KAAK,MAAM,EAAM,KACvF,SAAS,iBAAiB,KAAK,iBAAkB,IAAM,CACrD,KAAK,YAAc,KAAK,eAAe,EAEnC,KAAK,cACP,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAEhC,CAAC,EAIH,OAAO,iBAAiB,QAAS,IAAM,CACrC,KAAK,YAAc,KAAK,eAAe,EACnC,KAAK,aACP,KAAK,iBAAiB,CAE1B,CAAC,EAED,OAAO,iBAAiB,OAAQ,IAAM,CACpC,KAAK,YAAc,KAAK,eAAe,CACzC,CAAC,EAGD,OAAO,iBAAiB,eAAgB,IAAM,CAC5C,KAAK,uBAAuB,CAC9B,CAAC,CACH,CAOA,MAAM,mBAAoB,CAExB,GAAI,CAAC,KAAK,iBAAmB,EAAE,iBAAkB,QAC/C,MAAO,GAGT,GAAI,KAAK,aAAe,UACtB,MAAO,GAGT,GAAI,KAAK,aAAe,SACtB,MAAO,GAGT,GAAI,CACF,YAAK,WAAa,MAAM,aAAa,kBAAkB,EAChD,KAAK,aAAe,SAC7B,MAAgB,CACd,MAAO,EACT,CACF,CAMA,aAAc,CACR,KAAK,YAAc,EACrB,SAAS,MAAQ,IAAI,KAAK,WAAW,KAAK,KAAK,aAAa,GAE5D,SAAS,MAAQ,KAAK,aAE1B,CAQA,aAAaC,EAAM,CACjB,GAAI,OAAOA,GAAS,SAClB,MAAO,GAIT,IAAMC,EAAM,SAAS,cAAc,KAAK,EACxC,OAAAA,EAAI,YAAcD,EACXC,EAAI,UACR,QAAQ,KAAM,MAAM,EACpB,QAAQ,KAAM,MAAM,EACpB,QAAQ,KAAM,QAAQ,EACtB,QAAQ,KAAM,QAAQ,EACtB,UAAU,EAAG,GAAG,CACrB,CAQA,gBAAgBC,EAAK,CACnB,GAAI,CAACA,EAAK,OAAO,KAEjB,GAAI,CACF,IAAMC,EAAY,IAAI,IAAID,EAAK,OAAO,SAAS,MAAM,EAGrD,OAAIC,EAAU,WAAa,UAAYA,EAAU,WAAa,QAExD,KAAK,eAAe,OAAS,EACb,KAAK,eAAe,KAAKC,GACzCD,EAAU,SAAWC,CACvB,EACmBD,EAAU,KAAO,KAE/BA,EAAU,KAGZ,IACT,MAAgB,CACd,OAAO,IACT,CACF,CAOA,gBAAiB,CACf,IAAME,EAAM,KAAK,IAAI,EACrB,OAAIA,EAAM,KAAK,qBAAuB,KAAK,YAClC,IAET,KAAK,qBAAuBA,EACrB,GACT,CASA,OAAOC,EAAYC,EAASC,EAAU,CAAC,EAAG,CAmBxC,GAjBI,OAAO,aAAiB,MAI5B,KAAK,YAAc,KAAK,eAAe,EAGnC,KAAK,cAKL,KAAK,aAAe,WAKpB,CAAC,KAAK,eAAe,EACvB,OAAO,KAIT,IAAMC,EAAiB,KAAK,aAAaH,GAAc,SAAS,EAC1DI,EAAc,KAAK,aAAaH,GAAW,EAAE,EAC7CI,EAAW,KAAK,gBAAgBH,EAAQ,IAAI,GAAK,yBAGnD,KAAK,kBAAkB,QAAU,KAAK,cACxC,KAAK,uBAAuB,EAG9B,GAAI,CAEF,IAAMI,EAAe,IAAI,aACvB,GAAGH,CAAc,GACjB,CACE,KAAMC,EAAY,UAAU,EAAG,GAAG,EAClC,KAAMC,EACN,MAAOA,EACP,IAAK,QAAQH,EAAQ,UAAY,SAAS,GAC1C,mBAAoB,GACpB,OAAQA,EAAQ,QAAU,GAE1B,QAAS,UAAU,QAAU,CAAC,IAAK,IAAK,GAAG,EAAI,OAE/C,KAAM,CACJ,SAAU,KAAK,aAAaA,EAAQ,QAAQ,EAC5C,UAAW,KAAK,IAAI,CAEtB,CACF,CACF,EAGA,KAAK,cACL,KAAK,YAAY,EAGjB,KAAK,kBAAkB,KAAKI,CAAY,EAGxCA,EAAa,QAAWC,GAAU,CAMhC,GALAA,EAAM,eAAe,EACrB,OAAO,MAAM,EACbD,EAAa,MAAM,EAGf,OAAOJ,EAAQ,SAAY,WAC7B,GAAI,CACFA,EAAQ,QAAQA,EAAQ,QAAQ,CAClC,OAASM,EAAO,CACd,QAAQ,MAAM,4CAA6CA,CAAK,CAClE,CAEJ,EAGAF,EAAa,QAAWC,GAAU,CAChC,QAAQ,MAAM,8CAA+CA,CAAK,CACpE,EAGA,IAAME,EAAmB,KAAK,IAAIP,EAAQ,WAAa,IAAM,GAAK,EAClE,kBAAW,IAAM,CACfI,EAAa,MAAM,EACnB,KAAK,gBAAgBA,CAAY,CACnC,EAAGG,CAAgB,EAEZH,CAET,OAASE,EAAO,CACd,eAAQ,MAAM,iDAAkDA,CAAK,EAC9D,IACT,CACF,CAOA,gBAAgBF,EAAc,CAC5B,IAAMI,EAAQ,KAAK,kBAAkB,QAAQJ,CAAY,EACrDI,EAAQ,IACV,KAAK,kBAAkB,OAAOA,EAAO,CAAC,CAE1C,CAKA,wBAAyB,CACvB,KAAK,kBAAkB,QAAQJ,GAAgB,CAC7C,GAAI,CACFA,EAAa,MAAM,CACrB,MAAgB,CAEhB,CACF,CAAC,EACD,KAAK,kBAAoB,CAAC,CAC5B,CAKA,kBAAmB,CACjB,KAAK,YAAc,EACnB,KAAK,YAAY,CACnB,CAMA,WAAY,CACV,MAAO,CACL,WAAY,KAAK,WACjB,YAAa,KAAK,YAClB,YAAa,KAAK,YAClB,gBAAiB,KAAK,gBACtB,UAAW,KAAK,kBAAkB,MACpC,CACF,CACF,EAKMK,GAAN,KAAoB,CAClB,aAAc,CACZ,KAAK,oBAAsB,IAAInB,GAA8B,CAC3D,aAAc,EACd,YAAa,IACb,eAAgB,CACd,OAAO,SAAS,MAElB,CACF,CAAC,EAED,KAAK,YAAc,KACnB,KAAK,eAAiB,KACtB,KAAK,eAAiB,OACtB,KAAK,eAAiB,CAAC,EACvB,KAAK,eAAiB,GACxB,CAKA,MAAM,MAAO,CAEb,CAMA,MAAM,qBAAsB,CAE1B,OADgB,MAAM,KAAK,oBAAoB,kBAAkB,CAEnE,CAMA,iBAAiBoB,EAAa,CAC5B,GAAI,CAACA,EAAa,CAChB,QAAQ,MAAM,4BAA4B,EAC1C,MACF,CAEA,KAAK,YAAcA,EAGnB,KAAK,YAAY,UAAaL,GAAU,CACtC,KAAK,sBAAsBA,EAAM,IAAI,CACvC,EAEA,KAAK,YAAY,QAAWC,GAAU,CAEtC,CACF,CAQA,gBAAgBK,EAAM,CACpB,GAAI,CACF,IAAMZ,EAAU,OAAOY,GAAS,SAAW,KAAK,MAAMA,CAAI,EAAIA,EAG9D,GAAI,CAACZ,GAAW,OAAOA,GAAY,SACjC,MAAM,IAAI,MAAM,2BAA2B,EAI7C,GAAI,CAACA,EAAQ,MAAQ,OAAOA,EAAQ,MAAS,SAC3C,MAAM,IAAI,MAAM,sBAAsB,EAIxC,GAAIA,EAAQ,KAAK,OAAS,IACxB,MAAM,IAAI,MAAM,kBAAkB,EAGpC,MAAO,CACL,KAAMA,EAAQ,KACd,WAAYA,EAAQ,YAAc,UAClC,SAAUA,EAAQ,UAAY,UAC9B,UAAWA,EAAQ,WAAa,KAAK,IAAI,EACzC,aAAcA,EAAQ,cAAgB,IACxC,CAEF,OAASO,EAAO,CACd,eAAQ,MAAM,oCAAqCA,CAAK,EACjD,IACT,CACF,CAOA,sBAAsBK,EAAM,CAC1B,IAAMZ,EAAU,KAAK,gBAAgBY,CAAI,EAEpCZ,IAKL,KAAK,eAAe,KAAKA,CAAO,EAC5B,KAAK,eAAe,OAAS,KAAK,gBACpC,KAAK,eAAe,MAAM,EAI5B,KAAK,eAAeA,CAAO,EAG3B,KAAK,oBAAoB,OACvBA,EAAQ,WACRA,EAAQ,KACR,CACE,KAAMA,EAAQ,aACd,SAAUA,EAAQ,SAClB,QAAUa,GAAa,CACrB,KAAK,sBAAsB,CAC7B,CACF,CACF,EAGK,KAAK,oBAAoB,aAC5B,KAAK,sBAAsB,EAE/B,CAOA,eAAeb,EAAS,CACtB,IAAMc,EAAY,SAAS,eAAe,UAAU,EACpD,GAAI,CAACA,EACH,OAGF,IAAMC,EAAY,SAAS,cAAc,KAAK,EAC9CA,EAAU,UAAY,UAGtB,IAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9CA,EAAO,YAAchB,EAAQ,WAAa,KAE1C,IAAMiB,EAAS,SAAS,cAAc,MAAM,EAC5CA,EAAO,YAAcjB,EAAQ,KAC7BiB,EAAO,MAAM,SAAW,aACxBA,EAAO,MAAM,aAAe,aAC5BA,EAAO,MAAM,WAAa,SAE1B,IAAMC,EAAS,SAAS,cAAc,OAAO,EAC7CA,EAAO,YAAc,IAAI,KAAKlB,EAAQ,SAAS,EAAE,mBAAmB,EAEpEe,EAAU,YAAYC,CAAM,EAC5BD,EAAU,YAAYE,CAAM,EAC5BF,EAAU,YAAY,SAAS,cAAc,IAAI,CAAC,EAClDA,EAAU,YAAYG,CAAM,EAE5BJ,EAAU,YAAYC,CAAS,EAC/B,KAAK,sBAAsB,CAC7B,CAMA,uBAAwB,CACtB,GAAI,CAEF,IAAMI,EAAQ,IAAI,MAAM,gCAAgC,EACxDA,EAAM,OAAS,GAGfA,EAAM,KAAK,EAAE,MAAMZ,GAAS,CAE5B,CAAC,CACH,MAAgB,CAEhB,CACF,CAMA,uBAAwB,CACtB,IAAMO,EAAY,SAAS,eAAe,UAAU,EAChDA,IACFA,EAAU,UAAYA,EAAU,aAEpC,CAMA,WAAY,CACV,MAAO,CACL,cAAe,KAAK,oBAAoB,UAAU,EAClD,aAAc,KAAK,eAAe,OAClC,UAAW,KAAK,aAAa,aAAe,MAC9C,CACF,CACF,EAGI,OAAOxB,GAAW,KAAeA,GAAO,UAC1CA,GAAO,QAAU,CAAE,8BAAAC,GAA+B,cAAAmB,EAAc,GAI9D,OAAO,OAAW,MACpB,OAAO,8BAAgCnB,GACvC,OAAO,cAAgBmB,MCtmBzB,IAAAU,GAAAC,GAAA,CAAAC,GAAAC,KAAA,CASA,IAAAC,GAA8C,SAE9C,IAAMC,GAAN,KAA8B,CAC5B,YAAYC,EAAe,CACzB,KAAK,cAAgBA,EACrB,KAAK,oBAAsB,IAAI,iCAA8B,CAC3D,aAAc,GACd,YAAa,IACb,eAAgB,CACd,OAAO,SAAS,MAElB,CACF,CAAC,EAED,KAAK,cAAgB,GACrB,KAAK,kBAAoB,KACzB,KAAK,uBAAyB,KAC9B,KAAK,kBAAoB,IAAI,GAC/B,CAMA,MAAM,MAAO,CACX,GAAI,CACF,OAAI,KAAK,gBAKT,KAAK,kBAAoB,KAAK,cAAc,UAC5C,KAAK,uBAAyB,KAAK,cAAc,eAMjD,KAAK,cAAc,UAAY,CAACC,EAASC,KAASC,IAAS,CACzD,KAAK,sBAAsBF,EAASC,EAAMC,EAAK,CAAC,CAAC,EAG7C,KAAK,mBACP,KAAK,kBAAkBF,EAASC,EAAM,GAAGC,CAAI,CAEjD,EAGA,KAAK,cAAc,eAAkBC,GAAW,CAC9C,KAAK,mBAAmBA,CAAM,EAG1B,KAAK,wBACP,KAAK,uBAAuBA,CAAM,CAEtC,EAKI,KAAK,cAAc,qBACrB,KAAK,2BAA6B,KAAK,cAAc,mBAAmB,KAAK,KAAK,aAAa,EAC/F,KAAK,cAAc,mBAAqB,CAACH,EAASC,KAASC,IAAS,CAClE,KAAK,sBAAsBF,EAASC,EAAMC,EAAK,CAAC,CAAC,EACjD,KAAK,2BAA2BF,EAASC,EAAM,GAAGC,CAAI,CACxD,GAGF,KAAK,cAAgB,IACd,EAET,MAAgB,CACd,MAAO,EACT,CACF,CAQA,sBAAsBF,EAASC,EAAMG,EAAM,CACzC,GAAI,CAEF,IAAMC,EAAa,GAAGJ,CAAI,IAAI,OAAOD,GAAY,SAAWA,EAAU,KAAK,UAAUA,CAAO,CAAC,GAG7F,GAAI,KAAK,kBAAkB,IAAIK,CAAU,EACvC,OAOF,GAHA,KAAK,kBAAkB,IAAIA,CAAU,EAGjC,KAAK,kBAAkB,KAAO,IAAK,CACrC,IAAMC,EAAgB,MAAM,KAAK,KAAK,iBAAiB,EACvD,KAAK,kBAAkB,MAAM,EAC7BA,EAAc,MAAM,GAAG,EAAE,QAAQC,GAAO,KAAK,kBAAkB,IAAIA,CAAG,CAAC,CACzE,CAIA,GAAIN,IAAS,UAAYA,IAAS,iBAAmBA,IAAS,YAC5D,OAIF,IAAMO,EAAc,KAAK,mBAAmBR,EAASC,CAAI,EACzD,GAAI,CAACO,EACH,OAYF,IAAMC,EAFc,CAAC,CAACL,GAAQ,OAAOA,GAAS,WAC3CA,EAAK,OAAS,IAAS,OAAO,SAASA,EAAK,GAAG,GAAKA,EAAK,IAAM,GAC3B,6BAA+BI,EAAY,KAG5EE,EAAqB,KAAK,oBAAoB,OAClDF,EAAY,WACZC,EACA,CACE,KAAMD,EAAY,aAClB,SAAUA,EAAY,SACtB,QAAUG,GAAa,CACrB,KAAK,gBAAgB,CACvB,CACF,CACF,CAEF,MAAgB,CAEhB,CACF,CAOA,mBAAmBR,EAAQ,CACzB,GAAI,EAEEA,IAAW,gBAAkBA,IAAW,YAC1C,KAAK,oBAAoB,uBAAuB,EAChD,KAAK,oBAAoB,iBAAiB,EAE9C,MAAgB,CAEhB,CACF,CASA,mBAAmBH,EAASC,EAAM,CAChC,GAAI,CACF,IAAIW,EAAcZ,EAGlB,GAAI,OAAOA,GAAY,SACrB,GAAI,CACFY,EAAc,KAAK,MAAMZ,CAAO,CAClC,MAAY,CAEV,MAAO,CACL,WAAY,OACZ,KAAMA,EACN,SAAU,OACV,aAAc,IAChB,CACF,CAIF,OAAI,OAAOY,GAAgB,UAAYA,IAAgB,KAC9C,CACL,WAAYA,EAAY,YAAcA,EAAY,MAAQ,OAC1D,KAAMA,EAAY,MAAQA,EAAY,SAAWA,EAAY,SAAW,GACxE,SAAUA,EAAY,UAAYA,EAAY,IAAM,OACpD,aAAcA,EAAY,cAAgBA,EAAY,QAAU,IAClE,EAGK,IACT,MAAgB,CACd,OAAO,IACT,CACF,CAMA,iBAAkB,CAChB,GAAI,CACF,OAAO,MAAM,EAGb,IAAMC,EAAoB,SAAS,eAAe,UAAU,EACxDA,IACFA,EAAkB,UAAYA,EAAkB,aAEpD,MAAgB,CAEhB,CACF,CAMA,MAAM,mBAAoB,CACxB,GAAI,CACF,OAAO,MAAM,KAAK,oBAAoB,kBAAkB,CAC1D,MAAgB,CACd,MAAO,EACT,CACF,CAMA,WAAY,CACV,OAAO,KAAK,oBAAoB,UAAU,CAC5C,CAKA,oBAAqB,CACnB,KAAK,oBAAoB,uBAAuB,EAChD,KAAK,oBAAoB,iBAAiB,CAC5C,CAKA,SAAU,CACR,GAAI,CACE,KAAK,gBAEH,KAAK,oBACP,KAAK,cAAc,UAAY,KAAK,mBAElC,KAAK,yBACP,KAAK,cAAc,eAAiB,KAAK,wBAEvC,KAAK,6BACP,KAAK,cAAc,mBAAqB,KAAK,4BAI/C,KAAK,mBAAmB,EAExB,KAAK,cAAgB,GAEzB,MAAgB,CAEhB,CACF,CACF,EAGI,OAAOjB,GAAW,KAAeA,GAAO,UAC1CA,GAAO,QAAU,CAAE,wBAAAE,EAAwB,GAIzC,OAAO,OAAW,MACpB,OAAO,wBAA0BA;+ZCpSnC,IACEgB,GAKEC,OALFD,QACAE,GAIED,OAJFC,eACAC,GAGEF,OAHFE,SACAC,GAEEH,OAFFG,eACAC,GACEJ,OADFI,yBAGIC,GAAyBL,OAAzBK,OAAQC,GAAiBN,OAAjBM,KAAMC,GAAWP,OAAXO,OACpBC,GAA2B,OAAOC,QAAY,KAAeA,QAAvDC,GAAKF,GAALE,MAAOC,GAASH,GAATG,UAERN,KACHA,GAAS,SAAaO,EAAI,CACxB,OAAOA,CACT,GAGGN,KACHA,GAAO,SAAaM,EAAI,CACtB,OAAOA,CACT,GAGGF,KACHA,GAAQ,SACNG,EACAC,EACc,CAAA,QAAAC,EAAAC,UAAAC,OAAXC,EAAW,IAAAC,MAAAJ,EAAA,EAAAA,EAAA,EAAA,CAAA,EAAAK,EAAA,EAAAA,EAAAL,EAAAK,IAAXF,EAAWE,EAAA,CAAA,EAAAJ,UAAAI,CAAA,EAEd,OAAOP,EAAKH,MAAMI,EAASI,CAAI,CACjC,GAGGP,KACHA,GAAY,SAAaU,EAA+C,CAAA,QAAAC,EAAAN,UAAAC,OAAXC,EAAW,IAAAC,MAAAG,EAAA,EAAAA,EAAA,EAAA,CAAA,EAAAC,EAAA,EAAAA,EAAAD,EAAAC,IAAXL,EAAWK,EAAA,CAAA,EAAAP,UAAAO,CAAA,EACtE,OAAO,IAAIF,EAAK,GAAGH,CAAI,CACzB,GAGF,IAAMM,GAAeC,GAAQN,MAAMO,UAAUC,OAAO,EAE9CC,GAAmBH,GAAQN,MAAMO,UAAUG,WAAW,EACtDC,GAAWL,GAAQN,MAAMO,UAAUK,GAAG,EACtCC,GAAYP,GAAQN,MAAMO,UAAUO,IAAI,EAExCC,GAAcT,GAAQN,MAAMO,UAAUS,MAAM,EAC5CC,GAAejB,MAAMkB,QAErBC,GAAoBb,GAAQc,OAAOb,UAAUc,WAAW,EACxDC,GAAiBhB,GAAQc,OAAOb,UAAUgB,QAAQ,EAClDC,GAAclB,GAAQc,OAAOb,UAAUkB,KAAK,EAC5CC,GAAgBpB,GAAQc,OAAOb,UAAUoB,OAAO,EAChDC,GAAgBtB,GAAQc,OAAOb,UAAUsB,OAAO,EAChDC,GAAaxB,GAAQc,OAAOb,UAAUwB,IAAI,EAE1CC,GAAiB1B,GAAQ2B,OAAO1B,UAAUgB,QAAQ,EAClDW,GAAkB5B,GAAQ6B,QAAQ5B,UAAUgB,QAAQ,EACpDa,GACJ,OAAOC,OAAW,IAAc,KAAO/B,GAAQ+B,OAAO9B,UAAUgB,QAAQ,EACpEe,GACJ,OAAOC,OAAW,IAAc,KAAOjC,GAAQiC,OAAOhC,UAAUgB,QAAQ,EAEpEiB,GAAuBlC,GAAQzB,OAAO0B,UAAUkC,cAAc,EAC9DC,GAAiBpC,GAAQzB,OAAO0B,UAAUgB,QAAQ,EAElDoB,GAAarC,GAAQsC,OAAOrC,UAAUsC,IAAI,EAE1CC,GAAkBC,GAAYC,SAAS,EAQ7C,SAAS1C,GACPZ,EAAyC,CAEzC,OAAO,SAACC,EAAmC,CACrCA,aAAmBiD,SACrBjD,EAAQsD,UAAY,GACrB,QAAAC,EAAArD,UAAAC,OAHsBC,EAAW,IAAAC,MAAAkD,EAAA,EAAAA,EAAA,EAAA,CAAA,EAAAC,EAAA,EAAAA,EAAAD,EAAAC,IAAXpD,EAAWoD,EAAA,CAAA,EAAAtD,UAAAsD,CAAA,EAKlC,OAAO5D,GAAMG,EAAMC,EAASI,CAAI,CAClC,CACF,CAQA,SAASgD,GACP7C,EAA+B,CAE/B,OAAO,UAAA,CAAA,QAAAkD,EAAAvD,UAAAC,OAAIC,EAAW,IAAAC,MAAAoD,CAAA,EAAAC,EAAA,EAAAA,EAAAD,EAAAC,IAAXtD,EAAWsD,CAAA,EAAAxD,UAAAwD,CAAA,EAAA,OAAQ7D,GAAUU,EAAMH,CAAI,CAAC,CACrD,CAUA,SAASuD,EACPC,EACAC,EACyE,CAAA,IAAzEC,EAAAA,UAAAA,OAAAA,GAAAA,UAAAA,CAAAA,IAAAA,OAAAA,UAAAA,CAAAA,EAAwDtC,GASxD,GAPIrC,IAIFA,GAAeyE,EAAK,IAAI,EAGtB,CAACtC,GAAauC,CAAK,EACrB,OAAOD,EAGT,IAAIG,EAAIF,EAAM1D,OACd,KAAO4D,KAAK,CACV,IAAIC,EAAUH,EAAME,CAAC,EAErB,GAAI,OAAOC,GAAY,SAAU,CAC/B,IAAMC,EAAYH,EAAkBE,CAAO,EAEvCC,IAAcD,IAEX5E,GAASyE,CAAK,IAChBA,EAAoBE,CAAC,EAAIE,GAG5BD,EAAUC,EAEd,CAEAL,EAAII,CAAiB,EAAI,EAC3B,CAEA,OAAOJ,CACT,CAQA,SAASM,GAAcL,EAAU,CAC/B,QAASM,EAAQ,EAAGA,EAAQN,EAAM1D,OAAQgE,IAChBtB,GAAqBgB,EAAOM,CAAK,IAGvDN,EAAMM,CAAK,EAAI,MAInB,OAAON,CACT,CAQA,SAASO,GAAqCC,EAAS,CACrD,IAAMC,EAAY7E,GAAO,IAAI,EAE7B,QAAA8E,KAAgCtF,GAAQoF,CAAM,EAAG,CAAA,IAAAG,EAAAC,GAAAF,EAAA,CAAA,EAAA,IAArCG,EAAQF,EAAA,CAAA,EAAEG,EAAKH,EAAA,CAAA,EACD3B,GAAqBwB,EAAQK,CAAQ,IAGvDpD,GAAaqD,CAAK,EACpBL,EAAUI,CAAQ,EAAIR,GAAWS,CAAK,EAEtCA,GACA,OAAOA,GAAU,UACjBA,EAAMC,cAAgB1F,OAEtBoF,EAAUI,CAAQ,EAAIN,GAAMO,CAAK,EAEjCL,EAAUI,CAAQ,EAAIC,EAG5B,CAEA,OAAOL,CACT,CAQA,SAASO,GAAeF,EAAc,CACpC,OAAQ,OAAOA,EAAK,CAClB,IAAK,SACH,OAAOA,EAGT,IAAK,SACH,OAAOtC,GAAesC,CAAK,EAG7B,IAAK,UACH,OAAOpC,GAAgBoC,CAAK,EAG9B,IAAK,SACH,OAAOlC,GAAiBA,GAAekC,CAAK,EAAI,IAGlD,IAAK,SACH,OAAOhC,GAAiBA,GAAegC,CAAK,EAAI,WAGlD,IAAK,YACH,OAAO5B,GAAe4B,CAAK,EAG7B,IAAK,WACL,IAAK,SAAU,CACb,GAAIA,IAAU,KACZ,OAAO5B,GAAe4B,CAAK,EAG7B,IAAMG,EAAgBH,EAChBI,EAAgBC,GAAaF,EAAe,UAAU,EAE5D,GAAI,OAAOC,GAAkB,WAAY,CACvC,IAAME,EAAcF,EAAcD,CAAa,EAE/C,OAAO,OAAOG,GAAgB,SAC1BA,EACAlC,GAAekC,CAAW,CAChC,CAEA,OAAOlC,GAAe4B,CAAK,CAC7B,CAEA,QACE,OAAO5B,GAAe4B,CAAK,CAE/B,CACF,CASA,SAASK,GACPX,EACAa,EAAY,CAEZ,KAAOb,IAAW,MAAM,CACtB,IAAMc,EAAO7F,GAAyB+E,EAAQa,CAAI,EAElD,GAAIC,EAAM,CACR,GAAIA,EAAKC,IACP,OAAOzE,GAAQwE,EAAKC,GAAG,EAGzB,GAAI,OAAOD,EAAKR,OAAU,WACxB,OAAOhE,GAAQwE,EAAKR,KAAK,CAE7B,CAEAN,EAAShF,GAAegF,CAAM,CAChC,CAEA,SAASgB,GAAa,CACpB,OAAO,IACT,CAEA,OAAOA,CACT,CAEA,SAASC,GAAQX,EAAc,CAC7B,GAAI,CACF3B,OAAAA,GAAW2B,EAAiB,EAAE,EACvB,EACT,MAAQ,CACN,MAAO,EACT,CACF,CCnSO,IAAMY,GAAOhG,GAAO,CACzB,IACA,OACA,UACA,UACA,OACA,UACA,QACA,QACA,IACA,MACA,MACA,MACA,QACA,aACA,OACA,KACA,SACA,SACA,UACA,SACA,OACA,OACA,MACA,WACA,UACA,OACA,WACA,KACA,YACA,MACA,UACA,MACA,SACA,MACA,MACA,KACA,KACA,UACA,KACA,WACA,aACA,SACA,OACA,SACA,OACA,KACA,KACA,KACA,KACA,KACA,KACA,OACA,SACA,SACA,KACA,OACA,IACA,MACA,QACA,MACA,MACA,QACA,SACA,KACA,OACA,MACA,OACA,UACA,OACA,WACA,QACA,MACA,OACA,KACA,WACA,SACA,SACA,IACA,UACA,MACA,WACA,IACA,KACA,KACA,OACA,IACA,OACA,SACA,UACA,SACA,SACA,OACA,QACA,SACA,SACA,OACA,SACA,SACA,QACA,MACA,UACA,MACA,QACA,QACA,KACA,WACA,WACA,QACA,KACA,QACA,OACA,KACA,QACA,KACA,IACA,KACA,MACA,QACA,KAAK,CACG,EAEGiG,GAAMjG,GAAO,CACxB,MACA,IACA,WACA,cACA,eACA,eACA,gBACA,mBACA,SACA,WACA,OACA,OACA,UACA,eACA,cACA,SACA,OACA,IACA,QACA,WACA,QACA,QACA,YACA,OACA,iBACA,SACA,OACA,WACA,QACA,OACA,OACA,UACA,UACA,WACA,iBACA,OACA,OACA,QACA,SACA,SACA,OACA,WACA,QACA,OACA,QACA,OACA,OAAO,CACC,EAEGkG,GAAalG,GAAO,CAC/B,UACA,gBACA,sBACA,cACA,mBACA,oBACA,oBACA,iBACA,eACA,UACA,UACA,UACA,UACA,UACA,iBACA,UACA,UACA,cACA,eACA,WACA,eACA,qBACA,cACA,SACA,cAAc,CACN,EAMGmG,GAAgBnG,GAAO,CAClC,UACA,gBACA,SACA,UACA,YACA,mBACA,iBACA,gBACA,gBACA,gBACA,QACA,YACA,OACA,eACA,YACA,UACA,gBACA,SACA,MACA,aACA,UACA,KAAK,CACG,EAEGoG,GAASpG,GAAO,CAC3B,OACA,WACA,SACA,UACA,QACA,SACA,KACA,aACA,gBACA,KACA,KACA,QACA,UACA,WACA,QACA,OACA,KACA,SACA,QACA,SACA,OACA,OACA,UACA,SACA,MACA,QACA,MACA,SACA,aACA,aAAa,CACL,EAIGqG,GAAmBrG,GAAO,CACrC,UACA,cACA,aACA,WACA,YACA,UACA,UACA,SACA,SACA,QACA,YACA,aACA,iBACA,cACA,MAAM,CACE,EAEGsG,GAAOtG,GAAO,CAAC,OAAO,CAAU,EC1RhCgG,GAAOhG,GAAO,CACzB,SACA,SACA,QACA,MACA,iBACA,eACA,uBACA,WACA,aACA,UACA,SACA,UACA,cACA,cACA,UACA,OACA,QACA,QACA,QACA,OACA,UACA,UACA,aACA,WACA,eACA,SACA,cACA,WACA,WACA,UACA,MACA,WACA,0BACA,wBACA,WACA,YACA,UACA,eACA,cACA,OACA,MACA,UACA,SACA,SACA,OACA,OACA,WACA,KACA,QACA,YACA,YACA,QACA,OACA,QACA,OACA,OACA,UACA,OACA,MACA,MACA,YACA,QACA,SACA,MACA,YACA,WACA,QACA,OACA,QACA,UACA,aACA,SACA,OACA,UACA,OACA,UACA,cACA,cACA,UACA,gBACA,sBACA,SACA,UACA,UACA,aACA,WACA,MACA,WACA,MACA,WACA,OACA,OACA,UACA,aACA,QACA,WACA,QACA,OACA,QACA,OACA,OACA,UACA,QACA,MACA,SACA,OACA,QACA,UACA,WACA,QACA,YACA,OACA,SACA,SACA,QACA,QACA,OACA,OAAO,CACC,EAEGiG,GAAMjG,GAAO,CACxB,gBACA,aACA,WACA,qBACA,YACA,SACA,gBACA,gBACA,UACA,gBACA,iBACA,QACA,OACA,KACA,QACA,OACA,gBACA,YACA,YACA,QACA,sBACA,8BACA,gBACA,kBACA,KACA,KACA,IACA,KACA,KACA,kBACA,YACA,UACA,UACA,MACA,WACA,YACA,MACA,WACA,OACA,eACA,YACA,SACA,cACA,cACA,gBACA,cACA,YACA,mBACA,eACA,aACA,eACA,cACA,KACA,KACA,KACA,KACA,aACA,WACA,gBACA,oBACA,SACA,OACA,KACA,kBACA,KACA,MACA,YACA,IACA,KACA,KACA,KACA,KACA,UACA,YACA,aACA,WACA,OACA,eACA,iBACA,eACA,mBACA,iBACA,QACA,aACA,aACA,eACA,eACA,cACA,cACA,mBACA,YACA,MACA,OACA,YACA,QACA,SACA,OACA,MACA,OACA,aACA,SACA,WACA,UACA,QACA,SACA,cACA,SACA,WACA,cACA,OACA,aACA,sBACA,mBACA,eACA,SACA,gBACA,sBACA,iBACA,IACA,KACA,KACA,SACA,OACA,OACA,cACA,YACA,UACA,SACA,SACA,QACA,OACA,kBACA,QACA,mBACA,mBACA,eACA,cACA,eACA,cACA,aACA,eACA,mBACA,oBACA,iBACA,kBACA,oBACA,iBACA,SACA,eACA,QACA,eACA,iBACA,WACA,cACA,UACA,UACA,YACA,mBACA,cACA,kBACA,iBACA,aACA,OACA,KACA,KACA,UACA,SACA,UACA,aACA,UACA,aACA,gBACA,gBACA,QACA,eACA,OACA,eACA,mBACA,mBACA,IACA,KACA,KACA,QACA,IACA,KACA,KACA,IACA,YAAY,CACJ,EAEGoG,GAASpG,GAAO,CAC3B,SACA,cACA,QACA,WACA,QACA,cACA,cACA,gBACA,aACA,aACA,QACA,MACA,UACA,eACA,WACA,QACA,QACA,SACA,OACA,KACA,UACA,SACA,gBACA,SACA,SACA,iBACA,YACA,WACA,cACA,UACA,UACA,gBACA,WACA,WACA,OACA,WACA,WACA,aACA,UACA,SACA,SACA,cACA,gBACA,uBACA,YACA,YACA,aACA,WACA,iBACA,iBACA,YACA,UACA,QACA,OAAO,CACR,EAEYuG,GAAMvG,GAAO,CACxB,aACA,SACA,cACA,YACA,aAAa,CACL,ECvXGwG,GAAgBvG,GAAK,uBAAuB,EAC5CwG,GAAWxG,GAAK,uBAAuB,EACvCyG,GAAczG,GAAK,aAAa,EAChC0G,GAAY1G,GAAK,8BAA8B,EAC/C2G,GAAY3G,GAAK,gBAAgB,EACjC4G,GAAiB5G,GAC5B,oGAEW6G,GAAoB7G,GAAK,uBAAuB,EAChD8G,GAAkB9G,GAC7B,+DAEW+G,GAAe/G,GAAK,SAAS,EAC7BgH,GAAiBhH,GAAK,0BAA0B,EAKhDiH,GAAuBjH,GAAK,UAAU,EACtCkH,GAAuBlH,GAAK,SAAS,EACrCmH,GAAqBnH,GAAK,6BAA6B,EACvDoH,GAAmBpH,GAAK,MAAM,EC+BrCqH,GAAY,CAChB7C,QAAS,EACT8C,UAAW,EACXjB,KAAM,EACNkB,aAAc,EACdC,gBAAiB,EACjBC,WAAY,EACZC,sBAAuB,EACvBC,QAAS,EACTC,SAAU,EACVC,aAAc,GACdC,iBAAkB,GAClBC,SAAU,IAGNC,GAAY,UAAA,CAChB,OAAO,OAAOC,OAAW,IAAc,KAAOA,MAChD,EAUMC,GAA4B,SAChCC,EACAC,EAAoC,CAEpC,GACE,OAAOD,GAAiB,UACxB,OAAOA,EAAaE,cAAiB,WAErC,OAAO,KAMT,IAAIC,EAAS,KACPC,EAAY,wBACdH,GAAqBA,EAAkBI,aAAaD,CAAS,IAC/DD,EAASF,EAAkBK,aAAaF,CAAS,GAGnD,IAAMG,EAAa,aAAeJ,EAAS,IAAMA,EAAS,IAE1D,GAAI,CACF,OAAOH,EAAaE,aAAaK,EAAY,CAC3CC,WAAW5C,EAAI,CACb,OAAOA,CACT,EACA6C,gBAAgBC,EAAS,CACvB,OAAOA,CACT,CACD,CAAA,CACH,MAAY,CAIVC,eAAQC,KACN,uBAAyBL,EAAa,wBAAwB,EAEzD,IACT,CACF,EAEMM,GAAkB,UAAA,CACtB,MAAO,CACLC,wBAAyB,CAAA,EACzBC,sBAAuB,CAAA,EACvBC,uBAAwB,CAAA,EACxBC,yBAA0B,CAAA,EAC1BC,uBAAwB,CAAA,EACxBC,wBAAyB,CAAA,EACzBC,sBAAuB,CAAA,EACvBC,oBAAqB,CAAA,EACrBC,uBAAwB,CAAA,EAE5B,EAcMC,GAAoB,SACxBC,EACAC,EACAC,EACAC,EAGC,CAED,OAAOzG,GAAqBsG,EAAKC,CAAG,GAAK9H,GAAa6H,EAAIC,CAAG,CAAC,EAC1DzF,EACE2F,EAAQC,KAAOnF,GAAMkF,EAAQC,IAAI,EAAI,CAAA,EACrCJ,EAAIC,CAAG,EACPE,EAAQE,SAAS,EAEnBH,CACN,EAEA,SAASI,IAAgD,CAAA,IAAhChC,EAAAvH,UAAAC,OAAA,GAAAD,UAAA,CAAA,IAAAwJ,OAAAxJ,UAAA,CAAA,EAAqBsH,GAAS,EAC/CmC,EAAwBC,GAAqBH,GAAgBG,CAAI,EAMvE,GAJAD,EAAUE,QAAUC,SAEpBH,EAAUI,QAAU,CAAA,EAGlB,CAACtC,GACD,CAACA,EAAOL,UACRK,EAAOL,SAAS4C,WAAanD,GAAUO,UACvC,CAACK,EAAOwC,QAIRN,OAAAA,EAAUO,YAAc,GAEjBP,EAGT,IAAMvC,EAAaK,EAAbL,SAEA+C,EAAmB/C,EACnBgD,EACJD,EAAiBC,cAWf3C,EATF4C,qBACAC,EAQE7C,EARF6C,oBACAC,EAOE9C,EAPF8C,KACAN,EAMExC,EANFwC,QACAO,EAKE/C,EALF+C,WAAUC,EAKRhD,EAJFiD,aAAYD,IAAA,SAAGhD,EAAOiD,cAAiBjD,EAAekD,iBAIpDlD,EAHFmD,oBACAC,EAEEpD,EAFFoD,UACAlD,EACEF,EADFE,aAGImD,EAAmBb,EAAQrJ,UAE3BmK,EAAY/F,GAAa8F,EAAkB,WAAW,EACtDE,EAAShG,GAAa8F,EAAkB,QAAQ,EAChDG,EAAiBjG,GAAa8F,EAAkB,aAAa,EAC7DI,EAAgBlG,GAAa8F,EAAkB,YAAY,EAC3DK,EAAgBnG,GAAa8F,EAAkB,YAAY,EAC3DM,EAAgBpG,GAAa8F,EAAkB,YAAY,EAC3DO,EAAgBrG,GAAa8F,EAAkB,YAAY,EAC3DQ,EACJf,GAAQA,EAAK3J,UAAYoE,GAAauF,EAAK3J,UAAW,UAAU,EAAI,KAChE2K,EACJhB,GAAQA,EAAK3J,UAAYoE,GAAauF,EAAK3J,UAAW,UAAU,EAAI,KAQtE,GAAI,OAAO0J,GAAwB,WAAY,CAC7C,IAAMkB,EAAWpE,EAASqE,cAAc,UAAU,EAC9CD,EAASE,SAAWF,EAASE,QAAQC,gBACvCvE,EAAWoE,EAASE,QAAQC,cAEhC,CAEA,IAAIC,EACAC,EAAY,GAMZC,EACAC,EAAoC,GASpCC,EAA0B,EACxBC,EAAiC,UAAA,CACrC,GAAID,EAA0B,EAC5B,MAAM7I,GACJ,2RAIiC,CAGvC,EAEM+I,EAAqB,SAAU3G,EAAY,CAC/C0G,EAA8B,EAE9BD,IACA,GAAI,CACF,OAAOJ,EAAmBzD,WAAW5C,CAAI,CAC3C,QAAC,CACCyG,GACF,CACF,EAEMG,GAA0B,SAAU9D,EAAiB,CACzD4D,EAA8B,EAE9BD,IACA,GAAI,CACF,OAAOJ,EAAmBxD,gBAAgBC,CAAS,CACrD,QAAC,CACC2D,GACF,CACF,EAMMI,EAAgC,UAAA,CACpC,OAAKL,IACHD,EAA4BpE,GAC1BC,EACAyC,CAAa,EAEf2B,EAAoC,IAG/BD,CACT,EAEAO,EAKIjF,EAJFkF,EAAcD,EAAdC,eACAC,EAAkBF,EAAlBE,mBACAC,GAAsBH,EAAtBG,uBACAC,EAAoBJ,EAApBI,qBAEMC,EAAevC,EAAfuC,WAEJC,EAAQnE,GAAe,EAK3BmB,EAAUO,YACR,OAAOjL,IAAY,YACnB,OAAOkM,GAAkB,YACzBmB,GACAA,EAAeM,qBAAuBlD,OAExC,IACE3D,EAQE8G,GAPF7G,EAOE6G,GANF5G,EAME4G,GALF3G,EAKE2G,GAJF1G,EAIE0G,GAHFxG,GAGEwG,GAFFvG,GAEEuG,GADFrG,GACEqG,GAEEzG,GAAmByG,GAQrBC,EAAe,KACbC,GAAuBpJ,EAAS,CAAA,EAAI,CACxC,GAAGqJ,GACH,GAAGA,GACH,GAAGA,GACH,GAAGA,GACH,GAAGA,EAAS,CACb,EAGGC,GAAe,KACbC,GAAuBvJ,EAAS,CAAA,EAAI,CACxC,GAAGwJ,GACH,GAAGA,GACH,GAAGA,GACH,GAAGA,EAAS,CACb,EAQGC,GAA0BlO,OAAOM,KACnCC,GAAO,KAAM,CACX4N,aAAc,CACZC,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,MAET8I,mBAAoB,CAClBH,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,MAET+I,+BAAgC,CAC9BJ,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,EACR,CACF,CAAA,CAAC,EAIAgJ,GAAc,KAGdC,GAAc,KAGZC,GAAyB3O,OAAOM,KACpCC,GAAO,KAAM,CACXqO,SAAU,CACRR,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,MAEToJ,eAAgB,CACdT,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,IACR,CACF,CAAA,CAAC,EAIAqJ,GAAkB,GAGlBC,GAAkB,GAGlBC,GAA0B,GAI1BC,GAA2B,GAK3BC,GAAqB,GAKrBC,GAAe,GAGfC,GAAiB,GAGjBC,GAAa,GAIbC,GAAa,GAMbC,GAAa,GAIbC,GAAsB,GAItBC,GAAsB,GAKtBC,GAAe,GAefC,GAAuB,GACrBC,GAA8B,gBAGhCC,GAAe,GAIfC,GAAW,GAGXC,GAA0C,CAAA,EAG1CC,GAAkB,KAChBC,GAA0BxL,EAAS,CAAA,EAAI,CAC3C,iBACA,QACA,WACA,OACA,gBACA,OACA,SACA,OACA,KACA,KACA,KACA,KACA,QACA,UACA,WACA,WACA,YACA,SAUA,kBACA,QACA,MACA,WACA,QACA,QACA,QACA,KAAK,CACN,EAGGyL,GAAgB,KACdC,GAAwB1L,EAAS,CAAA,EAAI,CACzC,QACA,QACA,MACA,SACA,QACA,OAAO,CACR,EAGG2L,GAAsB,KACpBC,GAA8B5L,EAAS,CAAA,EAAI,CAC/C,MACA,QACA,MACA,KACA,QACA,OACA,UACA,cACA,OACA,UACA,QACA,QACA,QACA,OAAO,CACR,EAEK6L,GAAmB,qCACnBC,GAAgB,6BAChBC,GAAiB,+BAEnBC,GAAYD,GACZE,GAAiB,GAGjBC,GAAqB,KACnBC,GAA6BnM,EACjC,CAAA,EACA,CAAC6L,GAAkBC,GAAeC,EAAc,EAChD/N,EAAc,EAGVoO,GAAyCxQ,GAAO,CACpD,KACA,KACA,KACA,KACA,OAAO,CACR,EACGyQ,GAAiCrM,EACnC,CAAA,EACAoM,EAAsC,EAGlCE,GAAkC1Q,GAAO,CAAC,gBAAgB,CAAC,EAC7D2Q,GAA0BvM,EAAS,CAAA,EAAIsM,EAA+B,EAMpEE,GAA+BxM,EAAS,CAAA,EAAI,CAChD,QACA,QACA,OACA,IACA,QAAQ,CACT,EAGGyM,GAAmD,KACjDC,GAA+B,CAAC,wBAAyB,WAAW,EACpEC,GAA4B,YAC9BxM,GAA2D,KAG3DyM,GAAwB,KAKtBC,GAAcpJ,EAASqE,cAAc,MAAM,EAE3CgF,GAAoB,SACxBC,EAAkB,CAElB,OAAOA,aAAqBzN,QAAUyN,aAAqBC,QAC7D,EAQMC,GAAe,UAA0B,CAAA,IAAhBzH,EAAAjJ,UAAAC,OAAA,GAAAD,UAAA,CAAA,IAAAwJ,OAAAxJ,UAAA,CAAA,EAAc,CAAA,EAC3C,GAAIqQ,IAAUA,KAAWpH,EACvB,QAIE,CAACA,GAAO,OAAOA,GAAQ,YACzBA,EAAM,CAAA,GAIRA,EAAM/E,GAAM+E,CAAG,EAEfiH,GAEEC,GAA6BnO,QAAQiH,EAAIiH,iBAAiB,IAAM,GAC5DE,GACAnH,EAAIiH,kBAGVtM,GACEsM,KAAsB,wBAClBzO,GACAH,GAGNsL,EAAe5D,GACbC,EACA,eACA4D,GACA,CAAEvD,UAAW1F,EAAiB,CAAE,EAElCmJ,GAAe/D,GACbC,EACA,eACA+D,GACA,CAAE1D,UAAW1F,EAAiB,CAAE,EAElC+L,GAAqB3G,GACnBC,EACA,qBACA2G,GACA,CAAEtG,UAAW7H,EAAc,CAAE,EAE/B2N,GAAsBpG,GACpBC,EACA,oBACAoG,GACA,CAAE/F,UAAW1F,GAAmByF,KAAMgG,EAA2B,CAAE,EAErEH,GAAgBlG,GACdC,EACA,oBACAkG,GACA,CAAE7F,UAAW1F,GAAmByF,KAAM8F,EAAqB,CAAE,EAE/DH,GAAkBhG,GAChBC,EACA,kBACAgG,GACA,CAAE3F,UAAW1F,EAAiB,CAAE,EAElC6J,GAAczE,GAAkBC,EAAK,cAAe/E,GAAM,CAAA,CAAE,EAAG,CAC7DoF,UAAW1F,EACZ,CAAA,EACD8J,GAAc1E,GAAkBC,EAAK,cAAe/E,GAAM,CAAA,CAAE,EAAG,CAC7DoF,UAAW1F,EACZ,CAAA,EACDmL,GAAepM,GAAqBsG,EAAK,cAAc,EACnDA,EAAI8F,cAAgB,OAAO9F,EAAI8F,cAAiB,SAC9C7K,GAAM+E,EAAI8F,YAAY,EACtB9F,EAAI8F,aACN,GAEJjB,GAAkB7E,EAAI6E,kBAAoB,GAC1CC,GAAkB9E,EAAI8E,kBAAoB,GAC1CC,GAA0B/E,EAAI+E,yBAA2B,GACzDC,GAA2BhF,EAAIgF,2BAA6B,GAC5DC,GAAqBjF,EAAIiF,oBAAsB,GAC/CC,GAAelF,EAAIkF,eAAiB,GACpCC,GAAiBnF,EAAImF,gBAAkB,GACvCG,GAAatF,EAAIsF,YAAc,GAC/BC,GAAsBvF,EAAIuF,qBAAuB,GACjDC,GAAsBxF,EAAIwF,qBAAuB,GACjDH,GAAarF,EAAIqF,YAAc,GAC/BI,GAAezF,EAAIyF,eAAiB,GACpCC,GAAuB1F,EAAI0F,sBAAwB,GACnDE,GAAe5F,EAAI4F,eAAiB,GACpCC,GAAW7F,EAAI6F,UAAY,GAC3B5I,GAAiBd,GAAQ6D,EAAI0H,kBAAkB,EAC3C1H,EAAI0H,mBACJhE,GAEJ8C,GACE,OAAOxG,EAAIwG,WAAc,SAAWxG,EAAIwG,UAAYD,GAEtDM,GACEnN,GAAqBsG,EAAK,gCAAgC,GAC1DA,EAAI6G,gCACJ,OAAO7G,EAAI6G,gCAAmC,SAC1C5L,GAAM+E,EAAI6G,8BAA8B,EACxCrM,EAAS,CAAA,EAAIoM,EAAsC,EAEzDG,GACErN,GAAqBsG,EAAK,yBAAyB,GACnDA,EAAI+G,yBACJ,OAAO/G,EAAI+G,yBAA4B,SACnC9L,GAAM+E,EAAI+G,uBAAuB,EACjCvM,EAAS,CAAA,EAAIsM,EAA+B,EAElD,IAAMa,EACJjO,GAAqBsG,EAAK,yBAAyB,GACnDA,EAAIiE,yBACJ,OAAOjE,EAAIiE,yBAA4B,SACnChJ,GAAM+E,EAAIiE,uBAAuB,EACjC3N,GAAO,IAAI,EAsJjB,GApJA2N,GAA0B3N,GAAO,IAAI,EAGnCoD,GAAqBiO,EAAuB,cAAc,GAC1DL,GAAkBK,EAAsBzD,YAAY,IAEpDD,GAAwBC,aAAeyD,EAAsBzD,cAI7DxK,GAAqBiO,EAAuB,oBAAoB,GAChEL,GAAkBK,EAAsBrD,kBAAkB,IAE1DL,GAAwBK,mBACtBqD,EAAsBrD,oBAIxB5K,GACEiO,EACA,gCAAgC,GAElC,OAAOA,EAAsBpD,gCAAmC,YAEhEN,GAAwBM,+BACtBoD,EAAsBpD,gCAG1BlO,GAAK4N,EAAuB,EAExBgB,KACFH,GAAkB,IAGhBS,KACFD,GAAa,IAIXQ,KACFnC,EAAenJ,EAAS,CAAA,EAAIqJ,EAAS,EACrCC,GAAexN,GAAO,IAAI,EACtBwP,GAAa1J,OAAS,KACxB5B,EAASmJ,EAAcE,EAAS,EAChCrJ,EAASsJ,GAAcE,EAAU,GAG/B8B,GAAazJ,MAAQ,KACvB7B,EAASmJ,EAAcE,EAAQ,EAC/BrJ,EAASsJ,GAAcE,EAAS,EAChCxJ,EAASsJ,GAAcE,EAAS,GAG9B8B,GAAaxJ,aAAe,KAC9B9B,EAASmJ,EAAcE,EAAe,EACtCrJ,EAASsJ,GAAcE,EAAS,EAChCxJ,EAASsJ,GAAcE,EAAS,GAG9B8B,GAAatJ,SAAW,KAC1BhC,EAASmJ,EAAcE,EAAW,EAClCrJ,EAASsJ,GAAcE,EAAY,EACnCxJ,EAASsJ,GAAcE,EAAS,IAMpCU,GAAuBC,SAAW,KAClCD,GAAuBE,eAAiB,KAGpClL,GAAqBsG,EAAK,UAAU,IAClC,OAAOA,EAAI4H,UAAa,WAC1BlD,GAAuBC,SAAW3E,EAAI4H,SAC7BzP,GAAa6H,EAAI4H,QAAQ,IAC9BjE,IAAiBC,KACnBD,EAAe1I,GAAM0I,CAAY,GAGnCnJ,EAASmJ,EAAc3D,EAAI4H,SAAUjN,EAAiB,IAItDjB,GAAqBsG,EAAK,UAAU,IAClC,OAAOA,EAAI6H,UAAa,WAC1BnD,GAAuBE,eAAiB5E,EAAI6H,SACnC1P,GAAa6H,EAAI6H,QAAQ,IAC9B/D,KAAiBC,KACnBD,GAAe7I,GAAM6I,EAAY,GAGnCtJ,EAASsJ,GAAc9D,EAAI6H,SAAUlN,EAAiB,IAKxDjB,GAAqBsG,EAAK,mBAAmB,GAC7C7H,GAAa6H,EAAI8H,iBAAiB,GAElCtN,EAAS2L,GAAqBnG,EAAI8H,kBAAmBnN,EAAiB,EAItEjB,GAAqBsG,EAAK,iBAAiB,GAC3C7H,GAAa6H,EAAI+F,eAAe,IAE5BA,KAAoBC,KACtBD,GAAkB9K,GAAM8K,EAAe,GAGzCvL,EAASuL,GAAiB/F,EAAI+F,gBAAiBpL,EAAiB,GAIhEjB,GAAqBsG,EAAK,qBAAqB,GAC/C7H,GAAa6H,EAAI+H,mBAAmB,IAEhChC,KAAoBC,KACtBD,GAAkB9K,GAAM8K,EAAe,GAGzCvL,EAASuL,GAAiB/F,EAAI+H,oBAAqBpN,EAAiB,GAIlEiL,KACFjC,EAAa,OAAO,EAAI,IAItBwB,IACF3K,EAASmJ,EAAc,CAAC,OAAQ,OAAQ,MAAM,CAAC,EAI7CA,EAAaqE,QACfxN,EAASmJ,EAAc,CAAC,OAAO,CAAC,EAChC,OAAOa,GAAYyD,OAUjBjI,EAAIkI,qBAAsB,CAC5B,GAAI,OAAOlI,EAAIkI,qBAAqBlJ,YAAe,WACjD,MAAMhF,GACJ,6EAA6E,EAIjF,GAAI,OAAOgG,EAAIkI,qBAAqBjJ,iBAAoB,WACtD,MAAMjF,GACJ,kFAAkF,EAKtF,IAAMmO,EAA6B1F,EACnCA,EAAqBzC,EAAIkI,qBAMzB,GAAI,CACFxF,EAAYK,EAAmB,EAAE,CACnC,OAASqF,EAAO,CACd3F,MAAAA,EAAqB0F,EACfC,CACR,CACF,MAAWpI,EAAIkI,uBAAyB,MAQtCzF,EAAqBlC,OACrBmC,EAAY,KAQRD,IAAuBlC,SACzBkC,EAAqBQ,EAA6B,GAOhDR,GAAsB,OAAOC,GAAc,WAC7CA,EAAYK,EAAmB,EAAE,KAclCS,EAAM3D,oBAAoB7I,OAAS,GAClCwM,EAAM5D,sBAAsB5I,OAAS,IACvC2M,IAAiBC,KAEjBD,EAAe1I,GAAM0I,CAAY,GAIjCH,EAAM5D,sBAAsB5I,OAAS,GACrC8M,KAAiBC,KAEjBD,GAAe7I,GAAM6I,EAAY,GAK/B1N,IACFA,GAAO4J,CAAG,EAGZoH,GAASpH,CACX,EAKMqI,GAAe7N,EAAS,CAAA,EAAI,CAChC,GAAGqJ,GACH,GAAGA,GACH,GAAGA,EAAkB,CACtB,EACKyE,GAAkB9N,EAAS,CAAA,EAAI,CACnC,GAAGqJ,GACH,GAAGA,EAAqB,CACzB,EAUK0E,GAAqB,SACzBC,EACAC,EACAC,EAAqB,CAKrB,OAAID,EAAOE,eAAiBpC,GACnBiC,IAAY,MAMjBC,EAAOE,eAAiBtC,GAExBmC,IAAY,QACXE,IAAkB,kBACjB7B,GAA+B6B,CAAa,GAM3CrP,EAAQgP,GAAaG,CAAO,CACrC,EAUMI,GAAwB,SAC5BJ,EACAC,EACAC,EAAqB,CAKrB,OAAID,EAAOE,eAAiBpC,GACnBiC,IAAY,OAKjBC,EAAOE,eAAiBrC,GACnBkC,IAAY,QAAUzB,GAAwB2B,CAAa,EAK7DrP,EAAQiP,GAAgBE,CAAO,CACxC,EAUMK,GAAsB,SAC1BL,EACAC,EACAC,EAAqB,CAYrB,OANED,EAAOE,eAAiBrC,IACxB,CAACS,GAAwB2B,CAAa,GAMtCD,EAAOE,eAAiBtC,IACxB,CAACQ,GAA+B6B,CAAa,EAEtC,GAMP,CAACJ,GAAgBE,CAAO,IACvBxB,GAA6BwB,CAAO,GAAK,CAACH,GAAaG,CAAO,EAEnE,EAQMM,GAAuB,SAAUjO,EAAgB,CACrD,IAAI4N,EAASzG,EAAcnH,CAAO,GAI9B,CAAC4N,GAAU,CAACA,EAAOD,WACrBC,EAAS,CACPE,aAAcnC,GACdgC,QAAS,aAIb,IAAMA,EAAUnQ,GAAkBwC,EAAQ2N,OAAO,EAC3CE,EAAgBrQ,GAAkBoQ,EAAOD,OAAO,EAEtD,OAAK9B,GAAmB7L,EAAQ8N,YAAY,EAIxC9N,EAAQ8N,eAAiBrC,GACpBiC,GAAmBC,EAASC,EAAQC,CAAa,EAGtD7N,EAAQ8N,eAAiBtC,GACpBuC,GAAsBJ,EAASC,EAAQC,CAAa,EAGzD7N,EAAQ8N,eAAiBpC,GACpBsC,GAAoBL,EAASC,EAAQC,CAAa,EAKzDzB,GAAAA,KAAsB,yBACtBP,GAAmB7L,EAAQ8N,YAAY,GAlBhC,EA4BX,EAOMI,GAAe,SAAUC,EAAU,CACvCjR,GAAUyI,EAAUI,QAAS,CAAE/F,QAASmO,CAAI,CAAE,EAE9C,GAAI,CAEFhH,EAAcgH,CAAI,EAAEC,YAAYD,CAAI,CACtC,MAAY,CAsBV,GAFAnH,EAAOmH,CAAI,EAEP,CAAChH,EAAcgH,CAAI,EACrB,MAAMhP,GACJ,8HACgE,CAGtE,CACF,EAkBMkP,GAAkB,SAAUzI,EAAU,CAC1C,IAAM0I,EAAapH,EAActB,CAAI,EACrC,GAAI0I,EAAY,CACd,IAAMC,EAAmB,CAAA,EACzB7R,GAAa4R,EAAaE,GAAS,CACjCtR,GAAUqR,EAAUC,CAAK,CAC3B,CAAC,EACD9R,GAAa6R,EAAWC,GAAS,CAC/B,GAAI,CACFxH,EAAOwH,CAAK,CACd,MAAY,CACV,CAEJ,CAAC,CACH,CAEA,IAAMC,EAAapH,EAAczB,CAAI,EACrC,GAAI6I,EACF,QAASC,EAAID,EAAWtS,OAAS,EAAGuS,GAAK,EAAG,EAAEA,EAAG,CAC/C,IAAM5L,EAAY2L,EAAWC,CAAC,EACxBC,EAAO7L,GAAaA,EAAU6L,KACpC,GAAI,OAAOA,GAAS,SAClB,GAAI,CACD/I,EAAiBgJ,gBAAgBD,CAAI,CACxC,MAAY,CACV,CAGN,CAEJ,EAQME,GAAmB,SAAUF,EAAc3O,EAAgB,CAC/D,GAAI,CACF9C,GAAUyI,EAAUI,QAAS,CAC3BjD,UAAW9C,EAAQ8O,iBAAiBH,CAAI,EACxCI,KAAM/O,CACP,CAAA,CACH,MAAY,CACV9C,GAAUyI,EAAUI,QAAS,CAC3BjD,UAAW,KACXiM,KAAM/O,CACP,CAAA,CACH,CAKA,GAHAA,EAAQ4O,gBAAgBD,CAAI,EAGxBA,IAAS,KACX,GAAIlE,IAAcC,GAChB,GAAI,CACFwD,GAAalO,CAAO,CACtB,MAAY,CAAC,KAEb,IAAI,CACFA,EAAQgP,aAAaL,EAAM,EAAE,CAC/B,MAAY,CAAC,CAGnB,EAYMM,GAA6B,SAAUjP,EAAgB,CAC3D,IAAMyO,EAAapH,EAAcrH,CAAO,EACxC,GAAKyO,EAIL,QAASC,EAAID,EAAWtS,OAAS,EAAGuS,GAAK,EAAG,EAAEA,EAAG,CAC/C,IAAM5L,EAAY2L,EAAWC,CAAC,EACxBC,EAAO7L,GAAaA,EAAU6L,KACpC,GAAI,SAAOA,GAAS,UAAY1F,GAAanJ,GAAkB6O,CAAI,CAAC,GAIpE,GAAI,CACF3O,EAAQ4O,gBAAgBD,CAAI,CAC9B,MAAY,CACV,CAEJ,CACF,EAwBMO,GAAqB,SAAUtJ,EAAU,CAC7C,IAAMuJ,EAAgB,CAACvJ,CAAI,EAE3B,KAAOuJ,EAAMhT,OAAS,GAAG,CACvB,IAAMgS,EAAOgB,EAAMlS,IAAG,GACLqK,EAAcA,EAAY6G,CAAI,EAAKA,EAAanI,YAEhDnD,GAAU7C,SACzBiP,GAA2Bd,CAAe,EAG5C,IAAMG,EAAapH,EAAciH,CAAI,EACrC,GAAIG,EACF,QAASI,EAAIJ,EAAWnS,OAAS,EAAGuS,GAAK,EAAG,EAAEA,EAC5CS,EAAMhS,KAAKmR,EAAWI,CAAC,CAAC,CAG9B,CACF,EAQMU,GAAgB,SAAUC,EAAa,CAE3C,IAAIC,EAAM,KACNC,EAAoB,KAExB,GAAI/E,GACF6E,EAAQ,oBAAsBA,MACzB,CAEL,IAAMG,EAAU3R,GAAYwR,EAAO,aAAa,EAChDE,EAAoBC,GAAWA,EAAQ,CAAC,CAC1C,CAGEpD,KAAsB,yBACtBT,KAAcD,KAGd2D,EACE,iEACAA,EACA,kBAGJ,IAAMI,EAAe7H,EAAqBM,EAAmBmH,CAAK,EAAIA,EAKtE,GAAI1D,KAAcD,GAChB,GAAI,CACF4D,EAAM,IAAIzI,EAAS,EAAG6I,gBAAgBD,EAAcrD,EAAiB,CACvE,MAAY,CAAC,CAIf,GAAI,CAACkD,GAAO,CAACA,EAAIK,gBAAiB,CAChCL,EAAMhH,EAAesH,eAAejE,GAAW,WAAY,IAAI,EAC/D,GAAI,CACF2D,EAAIK,gBAAgBE,UAAYjE,GAC5B/D,EACA4H,CACN,MAAY,CACV,CAEJ,CAEA,IAAMK,EAAOR,EAAIQ,MAAQR,EAAIK,gBAU7B,OARIN,GAASE,GACXO,EAAKC,aACH3M,EAAS4M,eAAeT,CAAiB,EACzCO,EAAKxB,WAAW,CAAC,GAAK,IAAI,EAK1B3C,KAAcD,GACTjD,EAAqBwH,KAC1BX,EACAhF,GAAiB,OAAS,MAAM,EAChC,CAAC,EAGEA,GAAiBgF,EAAIK,gBAAkBG,CAChD,EAQMI,GAAsB,SAAUtK,EAAU,CAC9C,OAAO2C,EAAmB0H,KACxBrK,EAAK+B,eAAiB/B,EACtBA,EAEAY,EAAW2J,aACT3J,EAAW4J,aACX5J,EAAW6J,UACX7J,EAAW8J,4BACX9J,EAAW+J,mBACb,IAAI,CAER,EAUMC,GAA4B,SAAU7P,EAAa,CACvDA,OAAAA,EAAQ5C,GAAc4C,EAAOoB,EAAe,GAAG,EAC/CpB,EAAQ5C,GAAc4C,EAAOqB,EAAU,GAAG,EAC1CrB,EAAQ5C,GAAc4C,EAAOsB,EAAa,GAAG,EACtCtB,CACT,EAqBM8P,GAA4B,SAAUtC,EAAa,CAAA,IAAAuC,EACvDvC,EAAKwC,UAAS,EACd,IAAMC,EAASrI,EAAmB0H,KAChC9B,EAAKxG,eAAiBwG,EACtBA,EAEA3H,EAAW6J,UACT7J,EAAW4J,aACX5J,EAAW+J,mBACX/J,EAAW8J,4BACb,IAAI,EAGFO,EAAcD,EAAOE,SAAQ,EACjC,KAAOD,GACLA,EAAYE,KAAOP,GAA0BK,EAAYE,IAAI,EAC7DF,EAAcD,EAAOE,SAAQ,EAM/B,IAAME,GAASN,EAAGvC,EAAK8C,oBAAgB,MAAAP,IAAA,OAAA,OAArBA,EAAAT,KAAA9B,EAAwB,UAAU,EAChD6C,GACFtU,GAAasU,EAAYE,GAA6B,CAChDC,GAAoBD,EAAKxJ,OAAO,GAClC+I,GAA0BS,EAAKxJ,OAA6B,CAEhE,CAAC,CAEL,EAcM0J,GAAe,SAAUpR,EAAgB,CAI7C,IAAMqR,EAAc9J,EAAcA,EAAYvH,CAAO,EAAI,KAKzD,OAJI,OAAOqR,GAAgB,UAIvBvR,GAAkBuR,CAAW,IAAM,OAC9B,GAIP,OAAOrR,EAAQsR,UAAa,UAC5B,OAAOtR,EAAQuR,aAAgB,UAC/B,OAAOvR,EAAQoO,aAAgB,YAM/BpO,EAAQyO,aAAepH,EAAcrH,CAAO,GAC5C,OAAOA,EAAQ4O,iBAAoB,YACnC,OAAO5O,EAAQgP,cAAiB,YAChC,OAAOhP,EAAQ8N,cAAiB,UAChC,OAAO9N,EAAQ+P,cAAiB,YAChC,OAAO/P,EAAQwR,eAAkB,YAQjCxR,EAAQgG,WAAasB,EAAYtH,CAAO,GAYxCA,EAAQsO,aAAepH,EAAclH,CAAO,CAEhD,EAaMmR,GAAsB,SAAUxQ,EAAc,CAClD,GAAI,CAAC2G,GAAe,OAAO3G,GAAU,UAAYA,IAAU,KACzD,MAAO,GAGT,GAAI,CACF,OAAO2G,EAAY3G,CAAa,IAAMkC,GAAUS,gBAClD,MAAY,CACV,MAAO,EACT,CACF,EAaMmO,GAAU,SAAU9Q,EAAc,CACtC,GAAI,CAAC2G,GAAe,OAAO3G,GAAU,UAAYA,IAAU,KACzD,MAAO,GAGT,GAAI,CACF,OAAO,OAAO2G,EAAY3G,CAAK,GAAM,QACvC,MAAY,CACV,MAAO,EACT,CACF,EAEA,SAAS+Q,GACP/I,EACAkI,EACAE,EAAsB,CAElBpI,EAAMxM,SAAW,GAIrBO,GAAaiM,EAAQgJ,GAAW,CAC9BA,EAAK1B,KAAKtK,EAAWkL,EAAaE,EAAMxE,EAAM,CAChD,CAAC,CACH,CAYA,IAAMqF,GAAgB,SAAUf,EAAkBlD,EAAe,CA4B/D,MAzBEtD,GAAAA,IACAwG,EAAYW,cAAa,GACzB,CAACC,GAAQZ,EAAYgB,iBAAiB,GACtC7S,GAAW6J,GAAkCgI,EAAYU,WAAW,GACpEvS,GAAW6J,GAAkCgI,EAAYhB,SAAS,GAOlExF,IACAwG,EAAY/C,eAAiBpC,IAC7BiC,IAAY,SACZ8D,GAAQZ,EAAYgB,iBAAiB,GAMnChB,EAAY7K,WAAanD,GAAUK,uBAMrCmH,IACAwG,EAAY7K,WAAanD,GAAUM,SACnCnE,GAAW6J,GAAkCgI,EAAYE,IAAI,EAMjE,EAaMe,GAA0B,SAC9BjB,EACAlD,EAAe,CAGf,GAAI,CAAChE,GAAYgE,CAAO,GAAKoE,GAAsBpE,CAAO,IAEtDvE,GAAwBC,wBAAwBpK,QAChDD,GAAWoK,GAAwBC,aAAcsE,CAAO,GAMxDvE,GAAwBC,wBAAwBsD,UAChDvD,GAAwBC,aAAasE,CAAO,GAE5C,MAAO,GAYX,GAAI5C,IAAgB,CAACG,GAAgByC,CAAO,EAAG,CAC7C,IAAMqE,EAAa7K,EAAc0J,CAAW,EACtCvC,EAAapH,EAAc2J,CAAW,EAE5C,GAAIvC,GAAc0D,EAAY,CAC5B,IAAMC,EAAa3D,EAAWnS,OAuB9B,QAASuS,EAAIuD,EAAa,EAAGvD,GAAK,EAAG,EAAEA,EAAG,CACxC,IAAMwD,GAAUlH,GACZsD,EAAWI,CAAC,EACZ3H,EAAUuH,EAAWI,CAAC,EAAG,EAAI,EACjCsD,EAAWjC,aAAamC,GAASjL,EAAe4J,CAAW,CAAC,CAC9D,CACF,CACF,CAEA3C,OAAAA,GAAa2C,CAAW,EACjB,EACT,EAWMsB,GAAoB,SAAUtB,EAAgB,CAKlD,GAHAa,GAAc/I,EAAM9D,uBAAwBgM,EAAa,IAAI,EAGzDO,GAAaP,CAAW,EAC1B3C,OAAAA,GAAa2C,CAAW,EACjB,GAIT,IAAMlD,EAAU7N,GACdyH,EAAcA,EAAYsJ,CAAW,EAAIA,EAAYS,QAAQ,EAU/D,GANAI,GAAc/I,EAAM3D,oBAAqB6L,EAAa,CACpDlD,QAAAA,EACAyE,YAAatJ,CACd,CAAA,EAGG8I,GAAcf,EAAalD,CAAO,EACpCO,OAAAA,GAAa2C,CAAW,EACjB,GAIT,GACElH,GAAYgE,CAAO,GAClB,EACC9D,GAAuBC,oBAAoB6C,UAC3C9C,GAAuBC,SAAS6D,CAAO,IAEvC,CAAC7E,EAAa6E,CAAO,EAEvB,OAAOmE,GAAwBjB,EAAalD,CAAO,EAgBrD,IAPWrG,EAAcA,EAAYuJ,CAAW,EAAIA,EAAY7K,YACrDnD,GAAU7C,SAAW,CAACiO,GAAqB4C,CAAW,IAO9DlD,IAAY,YACXA,IAAY,WACZA,IAAY,aACd3O,GAAW6J,GAAgCgI,EAAYhB,SAAS,EAEhE3B,OAAAA,GAAa2C,CAAW,EACjB,GAIT,GAAIzG,IAAsByG,EAAY7K,WAAanD,GAAUhB,KAAM,CAEjE,IAAM6F,EAAU8I,GAA0BK,EAAYU,WAAW,EAE7DV,EAAYU,cAAgB7J,IAC9BxK,GAAUyI,EAAUI,QAAS,CAAE/F,QAAS6Q,EAAY9J,UAAS,CAAE,CAAE,EACjE8J,EAAYU,YAAc7J,EAE9B,CAGAgK,OAAAA,GAAc/I,EAAMjE,sBAAuBmM,EAAa,IAAI,EAErD,EACT,EAWMwB,GAAoB,SACxBC,EACAC,EACA5R,EAAa,CAQb,GALIiJ,GAAY2I,CAAM,GAMpB3H,KACC2H,IAAW,MAAQA,IAAW,UAC9B5R,KAASyC,GAAYzC,KAAS6L,IAE/B,MAAO,GAGT,IAAMgG,EACJvJ,GAAasJ,CAAM,GAClB1I,GAAuBE,0BAA0B4C,UAChD9C,GAAuBE,eAAewI,EAAQD,CAAK,EAMvD,GAAIrI,EAAAA,IAAmBjL,GAAWkD,EAAWqQ,CAAM,IAE5C,GAAIvI,EAAAA,IAAmBhL,GAAWmD,EAAWoQ,CAAM,IAGnD,GAAKC,GA6BL,GAAIlH,CAAAA,GAAoBiH,CAAM,GAI9B,GACLvT,CAAAA,GAAWoD,GAAgBrE,GAAc4C,EAAO2B,GAAiB,EAAE,CAAC,GAK/D,GACJiQ,GAAAA,IAAW,OAASA,IAAW,cAAgBA,IAAW,SAC3DD,IAAU,UACVrU,GAAc0C,EAAO,OAAO,IAAM,GAClCyK,GAAckH,CAAK,IAMd,GACLpI,EAAAA,IACA,CAAClL,GAAWqD,GAAmBtE,GAAc4C,EAAO2B,GAAiB,EAAE,CAAC,IAInE,GAAI3B,EACT,MAAO,eAnDJoR,EAAAA,GAAsBO,CAAK,IACxBlJ,GAAwBC,wBAAwBpK,QAChDD,GAAWoK,GAAwBC,aAAciJ,CAAK,GACrDlJ,GAAwBC,wBAAwBsD,UAC/CvD,GAAwBC,aAAaiJ,CAAK,KAC5ClJ,GAAwBK,8BAA8BxK,QACtDD,GAAWoK,GAAwBK,mBAAoB8I,CAAM,GAC5DnJ,GAAwBK,8BAA8BkD,UACrDvD,GAAwBK,mBAAmB8I,EAAQD,CAAK,IAG7DC,IAAW,MACVnJ,GAAwBM,iCACtBN,GAAwBC,wBAAwBpK,QAChDD,GAAWoK,GAAwBC,aAAc1I,CAAK,GACrDyI,GAAwBC,wBAAwBsD,UAC/CvD,GAAwBC,aAAa1I,CAAK,IAKhD,MAAO,IAoCX,MAAO,EACT,EAKM8R,GAAgC9S,EAAS,CAAA,EAAI,CACjD,iBACA,gBACA,YACA,mBACA,iBACA,gBACA,gBACA,eAAe,CAChB,EAUKoS,GAAwB,SAAUpE,EAAe,CACrD,MACE,CAAC8E,GAA8BjV,GAAkBmQ,CAAO,CAAC,GACzD3O,GAAWwD,GAAgBmL,CAAO,CAEtC,EAcM+E,GAAgC,SACpCJ,EACAC,EACAzE,EACAnN,EAAa,CAEb,GACEiH,GACA,OAAOjE,GAAiB,UACxB,OAAOA,EAAagP,kBAAqB,YACzC,CAAC7E,EAED,OAAQnK,EAAagP,iBAAiBL,EAAOC,CAAM,EAAC,CAClD,IAAK,cACH,OAAOrK,EAAmBvH,CAAK,EAGjC,IAAK,mBACH,OAAOwH,GAAwBxH,CAAK,CAMxC,CAGF,OAAOA,CACT,EAeMiS,GAAqB,SACzB/B,EACAlC,EACAb,EACAnN,EAAa,CAEb,GAAI,CACEmN,EACF+C,EAAYgC,eAAe/E,EAAca,EAAMhO,CAAK,EAGpDkQ,EAAY7B,aAAaL,EAAMhO,CAAK,EAGlCyQ,GAAaP,CAAW,EAC1B3C,GAAa2C,CAAW,EAExB7T,GAAS2I,EAAUI,OAAO,CAE9B,MAAY,CACV8I,GAAiBF,EAAMkC,CAAW,CACpC,CACF,EAYMiC,GAAsB,SAAUjC,EAAoB,CAExDa,GAAc/I,EAAM/D,yBAA0BiM,EAAa,IAAI,EAE/D,IAAQpC,EAAeoC,EAAfpC,WAGR,GAAI,CAACA,GAAc2C,GAAaP,CAAW,EACzC,OAGF,IAAMkC,EAAY,CAChBC,SAAU,GACVC,UAAW,GACXC,SAAU,GACVC,kBAAmBlK,GACnBmK,cAAe1N,QAEb3F,EAAI0O,EAAWtS,OACbmW,EAAQxS,GAAkB+Q,EAAYS,QAAQ,EAGpD,KAAOvR,KAAK,CACV,IAAMsT,EAAO5E,EAAW1O,CAAC,EACjB4O,GAAyC0E,EAAzC1E,KAAMb,GAAmCuF,EAAnCvF,aAAqBmF,GAAcI,EAArB1S,MACtB4R,GAASzS,GAAkB6O,EAAI,EAE/B2E,GAAYL,GACdtS,GAAQgO,KAAS,QAAU2E,GAAYnV,GAAWmV,EAAS,EA2B/D,GAxBAP,EAAUC,SAAWT,GACrBQ,EAAUE,UAAYtS,GACtBoS,EAAUG,SAAW,GACrBH,EAAUK,cAAgB1N,OAC1BgM,GAAc/I,EAAM5D,sBAAuB8L,EAAakC,CAAS,EACjEpS,GAAQoS,EAAUE,UAMhBpI,KACC0H,KAAW,MAAQA,KAAW,SAC/BtU,GAAc0C,GAAOmK,EAA2B,IAAM,IAGtD+D,GAAiBF,GAAMkC,CAAW,EAElClQ,GAAQmK,GAA8BnK,IAOtC0J,IACArL,GACE,qFACA2B,EAAK,EAEP,CACAkO,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAGA,GAAI0B,KAAW,iBAAmB1U,GAAY8C,GAAO,MAAM,EAAG,CAC5DkO,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAGA,GAAIkC,CAAAA,EAAUK,cAKd,IAAI,CAACL,EAAUG,SAAU,CACvBrE,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAGA,GACE,CAAC1G,IACDnL,GAAW6J,GAA8BlI,EAAK,EAC9C,CACAkO,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAQA,GALIzG,KACFzJ,GAAQ6P,GAA0B7P,EAAK,GAIrC,CAAC0R,GAAkBC,EAAOC,GAAQ5R,EAAK,EAAG,CAC5CkO,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAGAlQ,GAAQ+R,GAA8BJ,EAAOC,GAAQzE,GAAcnN,EAAK,EAGpEA,KAAU2S,IACZV,GAAmB/B,EAAalC,GAAMb,GAAcnN,EAAK,EAE7D,CAGA+Q,GAAc/I,EAAMlE,wBAAyBoM,EAAa,IAAI,CAChE,EAOM0C,GAAqB,SAAUC,EAA0B,CAC7D,IAAIC,EAAa,KACXC,EAAiBxD,GAAoBsD,CAAQ,EAKnD,IAFA9B,GAAc/I,EAAM7D,wBAAyB0O,EAAU,IAAI,EAEnDC,EAAaC,EAAe5C,SAAQ,GA+B1C,GA7BAY,GAAc/I,EAAM1D,uBAAwBwO,EAAY,IAAI,EAG5DtB,GAAkBsB,CAAU,EAG5BX,GAAoBW,CAAU,EAM1BtC,GAAoBsC,EAAW/L,OAAO,GACxC6L,GAAmBE,EAAW/L,OAAO,GAahBJ,EACnBA,EAAYmM,CAAU,EACtBA,EAAWzN,YACQnD,GAAU7C,QAAS,CACxC,IAAM2T,EAAUvM,EAAcqM,CAAU,EACpCtC,GAAoBwC,CAAO,IAC7BC,GAA6BD,CAAO,EACpCJ,GAAmBI,CAAO,EAE9B,CAIFjC,GAAc/I,EAAMhE,uBAAwB6O,EAAU,IAAI,CAC5D,EAqBMI,GAA+B,SAAUhO,EAAU,CAiBvD,IAAMuJ,EACJ,CAAC,CAAEhB,KAAMvI,EAAMiO,OAAQ,IAAI,CAAE,EAE/B,KAAO1E,EAAMhT,OAAS,GAAG,CACvB,IAAM2X,EAAO3E,EAAMlS,IAAG,EAGtB,GAAI6W,EAAKD,OAAQ,CACfN,GAAmBO,EAAKD,MAAM,EAC9B,QACF,CAEA,IAAM1F,EAAO2F,EAAK3F,KAEZ4F,GADWzM,EAAcA,EAAY6G,CAAI,EAAKA,EAAanI,YAClCnD,GAAU7C,QAKnCsO,GAAapH,EAAciH,CAAI,EACrC,GAAIG,GACF,QAASI,GAAIJ,GAAWnS,OAAS,EAAGuS,IAAK,EAAG,EAAEA,GAC5CS,EAAMhS,KAAK,CAAEgR,KAAMG,GAAWI,EAAC,EAAGmF,OAAQ,IAAI,CAAE,EAOpD,GAAIE,EAAW,CACb,IAAMC,GAAWzM,EAAcA,EAAY4G,CAAI,EAAI,KACnD,GACE,OAAO6F,IAAa,UACpBlU,GAAkBkU,EAAQ,IAAM,WAChC,CACA,IAAMtM,GAAWyG,EAA6BzG,QAC1CyJ,GAAoBzJ,EAAO,GAC7ByH,EAAMhS,KAAK,CAAEgR,KAAMzG,GAASmM,OAAQ,IAAI,CAAE,CAE9C,CACF,CAOA,GAAIE,EAAW,CACb,IAAME,GAAK7M,EAAc+G,CAAI,EACzBgD,GAAoB8C,EAAE,GAIxB9E,EAAMhS,KAAK,CAAEgR,KAAM,KAAM0F,OAAQI,IAAM,CAAE9F,KAAM8F,GAAIJ,OAAQ,IAAI,CAAE,CAErE,CACF,CACF,EAGAlO,OAAAA,EAAUuO,SAAW,SAAU7E,EAAe,CAAA,IAARlK,EAAGjJ,UAAAC,OAAA,GAAAD,UAAA,CAAA,IAAAwJ,OAAAxJ,UAAA,CAAA,EAAG,CAAA,EACtC4T,EAAO,KACPqE,EAAe,KACftD,EAAc,KACduD,EAAa,KAUjB,GANAxI,GAAiB,CAACyD,EACdzD,KACFyD,EAAQ,SAIN,OAAOA,GAAU,UAAY,CAACoC,GAAQpC,CAAK,IAC7CA,EAAQxO,GAAewO,CAAK,EAExB,OAAOA,GAAU,UACnB,MAAMlQ,GAAgB,iCAAiC,EAK3D,GAAI,CAACwG,EAAUO,YACb,OAAOmJ,EAIJ9E,IACHqC,GAAazH,CAAG,EAIlBQ,EAAUI,QAAU,CAAA,EAQpB,IAAMsO,EAAUrJ,IAAY,OAAOqE,GAAU,UAAYoC,GAAQpC,CAAK,EAEtE,GAAIgF,EAAS,CAMX,IAAMC,GAAK/M,EACPA,EAAY8H,CAAa,EACxBA,EAAeiC,SACpB,GAAI,OAAOgD,IAAO,SAAU,CAC1B,IAAM3G,GAAU7N,GAAkBwU,EAAE,EACpC,GAAI,CAACxL,EAAa6E,EAAO,GAAKhE,GAAYgE,EAAO,EAC/C,MAAMxO,GACJ,yDAAyD,CAG/D,CAYA,GAAIiS,GAAa/B,CAAgB,EAC/B,MAAMlQ,GACJ,yDAAyD,EAS7D,GAAI,CACFyU,GAA6BvE,CAAa,CAC5C,OAAS9B,GAAO,CACdc,MAAAA,GAAgBgB,CAAa,EAEvB9B,EACR,CACF,SAAWkE,GAAQpC,CAAK,EAGtBS,EAAOV,GAAc,SAAS,EAC9B+E,EAAerE,EAAKnI,cAAce,WAAW2G,EAAO,EAAI,EAEtD8E,EAAanO,WAAanD,GAAU7C,SACpCmU,EAAa7C,WAAa,QAIjB6C,EAAa7C,WAAa,OADnCxB,EAAOqE,EAKPrE,EAAKyE,YAAYJ,CAAY,EAQ/BP,GAA6BO,CAAY,MACpC,CAEL,GACE,CAAC1J,IACD,CAACL,IACD,CAACE,IAED+E,EAAMnR,QAAQ,GAAG,IAAM,GAEvB,OAAO0J,GAAsB+C,GACzBzC,EAAmBmH,CAAK,EACxBA,EAON,GAHAS,EAAOV,GAAcC,CAAK,EAGtB,CAACS,EACH,OAAOrF,GAAa,KAAOE,GAAsB9C,EAAY,EAEjE,CAGIiI,GAAQtF,IACV0D,GAAa4B,EAAK0E,UAAU,EAI9B,IAAMC,GAAevE,GAAoBmE,EAAUhF,EAAQS,CAAI,EAW/D,GAAI,CACF,KAAQe,EAAc4D,GAAa3D,SAAQ,GAEzCqB,GAAkBtB,CAAW,EAG7BiC,GAAoBjC,CAAW,EAM3BM,GAAoBN,EAAYnJ,OAAO,GACzC6L,GAAmB1C,EAAYnJ,OAAO,CAG5C,OAAS6F,GAAO,CACd,MAAI8G,GACFhG,GAAgBgB,CAAa,EAGzB9B,EACR,CAGA,GAAI8G,EAQF3X,OAAAA,GAAaiJ,EAAUI,QAAU2O,IAAS,CACpCA,GAAM1U,SACRkP,GAAmBwF,GAAM1U,OAAe,CAE5C,CAAC,EAEGoK,IACFqG,GAA0BpB,CAAgB,EAGrCA,EAIT,GAAI5E,GAAY,CAKd,GAJIL,IACFqG,GAA0BX,CAAI,EAG5BpF,GAGF,IAFA0J,EAAa5L,GAAuByH,KAAKH,EAAKnI,aAAa,EAEpDmI,EAAK0E,YAEVJ,EAAWG,YAAYzE,EAAK0E,UAAU,OAGxCJ,EAAatE,EAGf,OAAI7G,GAAa0L,YAAc1L,GAAa2L,kBAQ1CR,EAAa1L,EAAWuH,KAAK9J,EAAkBiO,EAAY,EAAI,GAG1DA,CACT,CAEA,IAAIS,GAAiBvK,GAAiBwF,EAAKgF,UAAYhF,EAAKD,UAG5D,OACEvF,IACAxB,EAAa,UAAU,GACvBgH,EAAKnI,eACLmI,EAAKnI,cAAcoN,SACnBjF,EAAKnI,cAAcoN,QAAQpG,MAC3B3P,GAAW6J,GAA0BiH,EAAKnI,cAAcoN,QAAQpG,IAAI,IAEpEkG,GACE,aAAe/E,EAAKnI,cAAcoN,QAAQpG,KAAO;EAAQkG,IAIzDzK,KACFyK,GAAiBrE,GAA0BqE,EAAc,GAGpDjN,GAAsB+C,GACzBzC,EAAmB2M,EAAc,EACjCA,EACN,EAEAlP,EAAUqP,UAAY,UAAkB,CAAA,IAAR7P,EAAGjJ,UAAAC,OAAA,GAAAD,UAAA,CAAA,IAAAwJ,OAAAxJ,UAAA,CAAA,EAAG,CAAA,EACpC0Q,GAAazH,CAAG,EAChBoF,GAAa,EACf,EAEA5E,EAAUsP,YAAc,UAAA,CACtB1I,GAAS,KACThC,GAAa,GAMb3C,EAAqBE,EACrBD,EAAY,EACd,EAEAlC,EAAUuP,iBAAmB,SAAUC,EAAK9B,EAAM1S,EAAK,CAEhD4L,IACHK,GAAa,CAAA,CAAE,EAGjB,IAAM0F,EAAQxS,GAAkBqV,CAAG,EAC7B5C,EAASzS,GAAkBuT,CAAI,EACrC,OAAOhB,GAAkBC,EAAOC,EAAQ5R,CAAK,CAC/C,EAEAgF,EAAUyP,QAAU,SAClBC,EACAC,EAA0B,CAEtB,OAAOA,GAAiB,YAI5BpY,GAAUyL,EAAM0M,CAAU,EAAGC,CAAY,CAC3C,EAEA3P,EAAU4P,WAAa,SACrBF,EACAC,EAA0B,CAE1B,GAAIA,IAAiB5P,OAAW,CAC9B,IAAMvF,EAAQrD,GAAiB6L,EAAM0M,CAAU,EAAGC,CAAY,EAE9D,OAAOnV,IAAU,GACbuF,OACAtI,GAAYuL,EAAM0M,CAAU,EAAGlV,EAAO,CAAC,EAAE,CAAC,CAChD,CAEA,OAAOnD,GAAS2L,EAAM0M,CAAU,CAAC,CACnC,EAEA1P,EAAU6P,YAAc,SAAUH,EAA0B,CAC1D1M,EAAM0M,CAAU,EAAI,CAAA,CACtB,EAEA1P,EAAU8P,eAAiB,UAAA,CACzB9M,EAAQnE,GAAe,CACzB,EAEOmB,CACT,CAEA,IAAA+P,GAAejQ,GAAe,EClmF9B,IAAMkQ,GAAN,MAAMC,CAA0B,CAE5B,OAAO,aAAe,IAAI,QAC1B,OAAO,kBAAoB,KAK3B,OAAO,eAAeC,EAAK,CACvB,GAAI,OAAOA,GAAQ,UAAYA,IAAQ,KACnC,OAAOA,EAGX,GAAI,MAAM,QAAQA,CAAG,EACjB,OAAOA,EAAI,IAAID,EAA0B,cAAc,EAG3D,IAAME,EAAY,CAAC,EACnB,cAAO,KAAKD,CAAG,EAAE,KAAK,EAAE,QAAQE,GAAO,CACnCD,EAAUC,CAAG,EAAIH,EAA0B,eAAeC,EAAIE,CAAG,CAAC,CACtE,CAAC,EACMD,CACX,CAGA,OAAO,gBAAgBC,EAAKC,EAAe,KAAMC,EAAiB,CAAC,EAAG,CAClE,GAAI,EAAEF,aAAe,WAAY,MAAM,IAAI,MAAM,oBAAoB,EACrE,GAAIC,GAAgBD,EAAI,WAAW,OAASC,EACxC,MAAM,IAAI,MAAM,sBAAsBA,CAAY,SAASD,EAAI,WAAW,IAAI,EAAE,EAEpF,QAAWG,KAAKD,EACZ,GAAI,CAACF,EAAI,QAAU,CAACA,EAAI,OAAO,SAASG,CAAC,EACrC,MAAM,IAAI,MAAM,+BAA+BA,CAAC,EAAE,CAG9D,CAEA,OAAO,oBAAoBC,EAAQ,CAC/B,IAAIC,EAAS,GACPC,EAAQ,IAAI,WAAWF,CAAM,EAC7BG,EAAMD,EAAM,WAClB,QAASE,EAAI,EAAGA,EAAID,EAAKC,IACrBH,GAAU,OAAO,aAAaC,EAAME,CAAC,CAAC,EAE1C,OAAO,KAAKH,CAAM,CACtB,CAGA,OAAO,oBAAoBI,EAAQ,CAC/B,GAAI,CAEA,GAAI,OAAOA,GAAW,UAAY,CAACA,EAC/B,MAAM,IAAI,MAAM,kDAAkD,EAItE,IAAMC,EAAcD,EAAO,KAAK,EAChC,GAAI,CAAC,yBAAyB,KAAKC,CAAW,EAC1C,MAAM,IAAI,MAAM,uBAAuB,EAI3C,GAAIA,IAAgB,GAChB,OAAO,IAAI,YAAY,CAAC,EAG5B,IAAMC,EAAe,KAAKD,CAAW,EAC/BH,EAAMI,EAAa,OACnBL,EAAQ,IAAI,WAAWC,CAAG,EAChC,QAASC,EAAI,EAAGA,EAAID,EAAKC,IACrBF,EAAME,CAAC,EAAIG,EAAa,WAAWH,CAAC,EAExC,OAAOF,EAAM,MACjB,OAASM,EAAO,CACZ,cAAQ,MAAM,2CAA4CA,EAAM,OAAO,EACjE,IAAI,MAAM,4BAA4BA,EAAM,OAAO,EAAE,CAC/D,CACJ,CAGA,OAAO,gBAAgBC,EAAW,CAC9B,GAAI,CACA,GAAI,CAACA,GAAa,OAAOA,GAAc,SACnC,MAAM,IAAI,MAAM,sDAAsD,EAI1E,IAAMC,EAAWD,EAAU,QAAQ,KAAM,EAAE,EAAE,QAAQ,MAAO,EAAE,EAG9D,GAAI,CAAC,iBAAiB,KAAKC,CAAQ,EAC/B,MAAM,IAAI,MAAM,iDAAiD,EAIrE,GAAIA,EAAS,OAAS,IAAM,EACxB,MAAM,IAAI,MAAM,gCAAgC,EAIpD,IAAMR,EAAQ,IAAI,WAAWQ,EAAS,OAAS,CAAC,EAChD,QAAS,EAAI,EAAG,EAAIA,EAAS,OAAQ,GAAK,EACtCR,EAAM,EAAI,CAAC,EAAI,SAASQ,EAAS,OAAO,EAAG,CAAC,EAAG,EAAE,EAGrD,OAAOR,CACX,OAASM,EAAO,CACZ,cAAQ,MAAM,uCAAwCA,EAAM,OAAO,EAC7D,IAAI,MAAM,yBAAyBA,EAAM,OAAO,EAAE,CAC5D,CACJ,CAiBA,OAAO,cAAcR,EAAQ,CACzB,GAAI,CACA,GAAI,CAACA,EAAQ,OACb,IAAMW,EAAOX,aAAkB,WACzBA,EACCA,aAAkB,YAAc,IAAI,WAAWA,CAAM,EAAI,KAChE,GAAI,CAACW,GAAQA,EAAK,SAAW,EAAG,OAChC,OAAO,gBAAgBA,CAAI,EAC3BA,EAAK,KAAK,CAAC,CACf,MAAY,CAEZ,CACJ,CAEA,aAAa,YAAYC,EAAMC,EAAU,CACrC,GAAI,CACA,IAAMC,EAAa,OAAOF,GAAS,SAAWA,EAAO,KAAK,UAAUA,CAAI,EAClEG,EAAO,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAChDC,EAAU,IAAI,YACdC,EAAiBD,EAAQ,OAAOH,CAAQ,EAExCK,EAAc,MAAM,OAAO,OAAO,UACpC,MACAD,EACA,CAAE,KAAM,QAAS,EACjB,GACA,CAAC,WAAW,CAChB,EAEMrB,EAAM,MAAM,OAAO,OAAO,UAC5B,CACI,KAAM,SACN,KAAMmB,EACN,WAAY,KACZ,KAAM,SACV,EACAG,EACA,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,SAAS,CACd,EAEMC,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC9CC,EAAaJ,EAAQ,OAAOF,CAAU,EACtCO,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAIF,CAAG,EAC1BvB,EACAwB,CACJ,EAEME,EAAmB,CACrB,QAAS,MACT,KAAM,MAAM,KAAKP,CAAI,EACrB,GAAI,MAAM,KAAKI,CAAE,EACjB,KAAM,MAAM,KAAK,IAAI,WAAWE,CAAS,CAAC,EAC1C,UAAW,KAAK,IAAI,CACxB,EAEME,EAAgB,KAAK,UAAUD,CAAgB,EACrD,OAAO7B,EAA0B,oBAAoB,IAAI,YAAY,EAAE,OAAO8B,CAAa,EAAE,MAAM,CAEvG,OAASf,EAAO,CACZ,cAAQ,MAAM,qBAAsBA,EAAM,OAAO,EAC3C,IAAI,MAAM,qBAAqBA,EAAM,OAAO,EAAE,CACxD,CACJ,CAEI,aAAa,YAAYgB,EAAeX,EAAU,CAClD,GAAI,CACA,IAAMY,EAAgBhC,EAA0B,oBAAoB+B,CAAa,EAC3ED,EAAgB,IAAI,YAAY,EAAE,OAAOE,CAAa,EACtDH,EAAmB,KAAK,MAAMC,CAAa,EAEjD,GAAI,CAACD,EAAiB,SAAW,CAACA,EAAiB,MAAQ,CAACA,EAAiB,IAAM,CAACA,EAAiB,KACjG,MAAM,IAAI,MAAM,+BAA+B,EAGnD,IAAMP,EAAO,IAAI,WAAWO,EAAiB,IAAI,EAC3CH,EAAK,IAAI,WAAWG,EAAiB,EAAE,EACvCD,EAAY,IAAI,WAAWC,EAAiB,IAAI,EAGhDL,EADU,IAAI,YAAY,EACD,OAAOJ,CAAQ,EAExCK,EAAc,MAAM,OAAO,OAAO,UACpC,MACAD,EACA,CAAE,KAAM,QAAS,EACjB,GACA,CAAC,WAAW,CAChB,EAEMrB,EAAM,MAAM,OAAO,OAAO,UAC5B,CACI,KAAM,SACN,KAAMmB,EACN,WAAY,KACZ,KAAM,SACV,EACAG,EACA,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,SAAS,CACd,EAEMQ,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAAP,CAAG,EACtBvB,EACAyB,CACJ,EAEMM,EAAkB,IAAI,YAAY,EAAE,OAAOD,CAAS,EAE1D,GAAI,CACA,OAAO,KAAK,MAAMC,CAAe,CACrC,MAAQ,CACJ,OAAOA,CACX,CAEJ,OAASnB,EAAO,CACZ,cAAQ,MAAM,qBAAsBA,EAAM,OAAO,EAC3C,IAAI,MAAM,qBAAqBA,EAAM,OAAO,EAAE,CACxD,CACJ,CAIA,OAAO,wBAAyB,CAC5B,IAAMoB,EAAQ,2FACRC,EAAYD,EAAM,OAClBE,EAAS,GACXjB,EAAW,GAGf,QAAST,EAAI,EAAGA,EAAI0B,EAAQ1B,IAAK,CAC7B,IAAI2B,EACJ,GACIA,EAAc,OAAO,gBAAgB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,QACrDA,GAAe,WAAc,WAAaF,GAEnDhB,GAAYe,EAAMG,EAAcF,CAAS,CAC7C,CACA,OAAOhB,CACX,CAGA,aAAa,uBAAuBmB,EAAiB,CACjD,IAAIC,EAAQ,EACNC,EAAW,IACXC,EAAsB,CAAC,EAE7B,GAAI,CAEA,GAAI,CAACH,GAAmB,CAACA,EAAgB,iBACrC,eAAQ,KAAK,oEAAoE,EAC1E,CACH,MAAO,eACP,MAAO,EACP,MAAO,OACP,oBAAqB,CAAC,EACtB,UAAW,KAAK,IAAI,EACpB,QAAS,kCACT,WAAY,EAChB,EAIJ,IAAMI,EAAc,OACdC,EAAgB,GAGtB,GAAI,CACA,IAAMC,EAAmB,MAAM7C,EAA0B,iBAAiBuC,CAAe,EACrFM,EAAiB,QACjBL,GAAS,GACTE,EAAoB,iBAAmB,CAAE,OAAQ,GAAM,QAASG,EAAiB,QAAS,OAAQ,EAAG,GAErGH,EAAoB,iBAAmB,CAAE,OAAQ,GAAO,QAASG,EAAiB,QAAS,OAAQ,CAAE,CAE7G,OAAS9B,EAAO,CACZ2B,EAAoB,iBAAmB,CAAE,OAAQ,GAAO,QAAS,4BAA4B3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CAC5H,CAGA,GAAI,CACA,IAAM+B,EAAa,MAAM9C,EAA0B,sBAAsBuC,CAAe,EACpFO,EAAW,QACXN,GAAS,GACTE,EAAoB,sBAAwB,CAAE,OAAQ,GAAM,QAASI,EAAW,QAAS,OAAQ,EAAG,GAEpGJ,EAAoB,sBAAwB,CAAE,OAAQ,GAAO,QAASI,EAAW,QAAS,OAAQ,CAAE,CAE5G,OAAS/B,EAAO,CACZ2B,EAAoB,sBAAwB,CAAE,OAAQ,GAAO,QAAS,8BAA8B3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CACnI,CAGA,GAAI,CACA,IAAMgC,EAAkB,MAAM/C,EAA0B,uBAAuBuC,CAAe,EAC1FQ,EAAgB,QACpBP,GAAS,GACLE,EAAoB,uBAAyB,CAAE,OAAQ,GAAM,QAASK,EAAgB,QAAS,OAAQ,EAAG,GAE1GL,EAAoB,uBAAyB,CAAE,OAAQ,GAAO,QAASK,EAAgB,QAAS,OAAQ,CAAE,CAElH,OAAShC,EAAO,CACZ2B,EAAoB,uBAAyB,CAAE,OAAQ,GAAO,QAAS,mCAAmC3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CACzI,CAGA,GAAI,CACA,IAAMiC,EAAc,MAAMhD,EAA0B,sBAAsBuC,CAAe,EACrFS,EAAY,QACZR,GAAS,GACTE,EAAoB,sBAAwB,CAAE,OAAQ,GAAM,QAASM,EAAY,QAAS,OAAQ,EAAG,GAErGN,EAAoB,sBAAwB,CAAE,OAAQ,GAAO,QAASM,EAAY,QAAS,OAAQ,CAAE,CAE7G,OAASjC,EAAO,CACZ2B,EAAoB,sBAAwB,CAAE,OAAQ,GAAO,QAAS,oCAAoC3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CACzI,CAGA,GAAI,CACA,IAAMkC,EAAkB,MAAMjD,EAA0B,mBAAmBuC,CAAe,EACtFU,EAAgB,QAChBT,GAAS,EACTE,EAAoB,mBAAqB,CAAE,OAAQ,GAAM,QAASO,EAAgB,QAAS,OAAQ,CAAE,GAErGP,EAAoB,mBAAqB,CAAE,OAAQ,GAAO,QAASO,EAAgB,QAAS,OAAQ,CAAE,CAE9G,OAASlC,EAAO,CACZ2B,EAAoB,mBAAqB,CAAE,OAAQ,GAAO,QAAS,+BAA+B3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CACjI,CAGA,GAAI,CACA,IAAMmC,EAAiB,MAAMlD,EAA0B,yBAAyBuC,CAAe,EAC3FW,EAAe,QACnBV,GAAS,GACLE,EAAoB,yBAA2B,CAAE,OAAQ,GAAM,QAASQ,EAAe,QAAS,OAAQ,EAAG,GAE3GR,EAAoB,yBAA2B,CAAE,OAAQ,GAAO,QAASQ,EAAe,QAAS,OAAQ,CAAE,CAEnH,OAASnC,EAAO,CACZ2B,EAAoB,yBAA2B,CAAE,OAAQ,GAAO,QAAS,qCAAqC3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CAC7I,CAGA,GAAI,CACA,IAAMoC,EAAY,MAAMnD,EAA0B,4BAA4BuC,CAAe,EACzFY,EAAU,QACdX,GAAS,GACLE,EAAoB,4BAA8B,CAAE,OAAQ,GAAM,QAASS,EAAU,QAAS,OAAQ,EAAG,GAEzGT,EAAoB,4BAA8B,CAAE,OAAQ,GAAO,QAASS,EAAU,QAAS,OAAQ,CAAE,CAEjH,OAASpC,EAAO,CACZ2B,EAAoB,4BAA8B,CAAE,OAAQ,GAAO,QAAS,qBAAqB3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CAChI,CAGI,MAAMf,EAA0B,uBAAuBuC,CAAe,GACtEC,GAAS,EACTE,EAAoB,iBAAmB,CAAE,OAAQ,GAAM,QAAS,2BAA4B,OAAQ,CAAE,GAEtGA,EAAoB,iBAAmB,CAAE,OAAQ,GAAO,QAAS,2BAA4B,OAAQ,CAAE,EAIvG,MAAM1C,EAA0B,oBAAoBuC,CAAe,GACnEC,GAAS,EACTE,EAAoB,cAAgB,CAAE,OAAQ,GAAM,QAAS,wBAAyB,OAAQ,CAAE,GAEhGA,EAAoB,cAAgB,CAAE,OAAQ,GAAO,QAAS,wBAAyB,OAAQ,CAAE,EAIjG,MAAM1C,EAA0B,uBAAuBuC,CAAe,GACtEC,GAAS,GACTE,EAAoB,iBAAmB,CAAE,OAAQ,GAAM,QAAS,2BAA4B,OAAQ,EAAG,GAEvGA,EAAoB,iBAAmB,CAAE,OAAQ,GAAO,QAAS,2BAA4B,OAAQ,CAAE,EAG3G,IAAMU,EAAa,KAAK,MAAOZ,EAAQC,EAAY,GAAG,EAGhDY,EAAkB,GAClBC,EAAe,OAAO,OAAOZ,CAAmB,EAAE,OAAOa,GAAKA,EAAE,MAAM,EAAE,OAiB9E,MAfe,CACX,MAAOH,GAAc,GAAK,OAASA,GAAc,GAAK,SAAWA,GAAc,GAAK,MAAQ,WAC5F,MAAOA,EACP,MAAOA,GAAc,GAAK,QAAUA,GAAc,GAAK,SAAWA,GAAc,GAAK,SAAW,MAChG,oBAAAV,EACA,UAAW,KAAK,IAAI,EACpB,QAAS,sBAAsBF,CAAK,IAAIC,CAAQ,4BAA4Ba,CAAY,IAAID,CAAe,cAC3G,WAAY,GACZ,aAAcC,EACd,YAAaD,EACb,YAAaV,EACb,iBAAkB,GACtB,CAIJ,OAAS5B,EAAO,CACZ,eAAQ,MAAM,qCAAsCA,EAAM,OAAO,EAC1D,CACH,MAAO,UACP,MAAO,EACP,MAAO,MACP,oBAAqB,CAAC,EACtB,UAAW,KAAK,IAAI,EACpB,QAAS,wBAAwBA,EAAM,OAAO,GAC9C,WAAY,EAChB,CACJ,CACJ,CAGA,aAAa,iBAAiBwB,EAAiB,CAC3C,GAAI,CACA,GAAI,CAACA,EAAgB,cACjB,MAAO,CAAE,OAAQ,GAAO,QAAS,6BAA8B,EAInE,IAAMiB,EAAY,CACd,+BACA,gJACA,4CACA,eAAiB,IAAI,OAAO,GAAI,CACpC,EAEA,QAAWC,KAAYD,EAAW,CAElC,IAAME,EADU,IAAI,YAAY,EACL,OAAOD,CAAQ,EACpC/B,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAE9CE,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAAF,CAAG,EACtBa,EAAgB,cAChBmB,CACJ,EAEMzB,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAAP,CAAG,EACtBa,EAAgB,cAChBX,CACJ,EAGI,GADkB,IAAI,YAAY,EAAE,OAAOK,CAAS,IAC9BwB,EAClB,MAAO,CAAE,OAAQ,GAAO,QAAS,4BAA4BA,EAAS,UAAU,EAAG,EAAE,CAAC,KAAM,CAEpG,CAEA,MAAO,CAAE,OAAQ,GAAM,QAAS,iDAAkD,CACtF,OAAS1C,EAAO,CACZ,eAAQ,MAAM,kCAAmCA,EAAM,OAAO,EACvD,CAAE,OAAQ,GAAO,QAAS,2BAA2BA,EAAM,OAAO,EAAG,CAChF,CACJ,CAEA,aAAa,sBAAsBwB,EAAiB,CAChD,GAAI,CACA,GAAI,CAACA,EAAgB,aAAe,CAACA,EAAgB,YAAY,YAAc,CAACA,EAAgB,YAAY,UACxG,MAAO,CAAE,OAAQ,GAAO,QAAS,4BAA6B,EAIlE,IAAMoB,EAAUpB,EAAgB,YAAY,WAAW,UAAU,KAC3DqB,EAAQrB,EAAgB,YAAY,WAAW,UAAU,WAE/D,GAAIoB,IAAY,OACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,qBAAqBA,CAAO,iBAAkB,EAGnF,GAAIC,IAAU,SAAWA,IAAU,QAC/B,MAAO,CAAE,OAAQ,GAAO,QAAS,sBAAsBA,CAAK,2BAA4B,EAI5F,GAAI,CASA,GAAI,CARe,MAAM,OAAO,OAAO,UACnC,CAAE,KAAM,OAAQ,OAAQrB,EAAgB,YAAY,SAAU,EAC9DA,EAAgB,YAAY,WAC5B,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,UAAW,SAAS,CACzB,EAGI,MAAO,CAAE,OAAQ,GAAO,QAAS,uBAAwB,CAEjE,OAASsB,EAAa,CAClB,MAAO,CAAE,OAAQ,GAAO,QAAS,+BAA+BA,EAAY,OAAO,EAAG,CAC1F,CAEA,MAAO,CAAE,OAAQ,GAAM,QAAS,kCAAkCD,CAAK,QAAS,CACpF,OAAS7C,EAAO,CACZ,eAAQ,MAAM,4BAA6BA,EAAM,OAAO,EACjD,CAAE,OAAQ,GAAO,QAAS,qBAAqBA,EAAM,OAAO,EAAG,CAC1E,CACJ,CAEA,aAAa,sBAAsBwB,EAAiB,CAChD,GAAI,CACA,GAAI,CAACA,EAAgB,cAAgB,CAACA,EAAgB,aAAa,YAAc,CAACA,EAAgB,aAAa,UAC3G,MAAO,CAAE,OAAQ,GAAO,QAAS,6BAA8B,EAInE,IAAMiB,EAAY,CACd,oCACA,0IACA,4CACA,eAAiB,IAAI,OAAO,GAAI,CACpC,EAEA,QAAWC,KAAYD,EAAW,CAElC,IAAME,EADU,IAAI,YAAY,EACL,OAAOD,CAAQ,EAEpCK,EAAY,MAAM,OAAO,OAAO,KAClC,CAAE,KAAM,QAAS,KAAM,SAAU,EACjCvB,EAAgB,aAAa,WAC7BmB,CACJ,EASI,GAAI,CAPQ,MAAM,OAAO,OAAO,OAChC,CAAE,KAAM,QAAS,KAAM,SAAU,EACjCnB,EAAgB,aAAa,UAC7BuB,EACAJ,CACJ,EAGQ,MAAO,CAAE,OAAQ,GAAO,QAAS,sCAAsCD,EAAS,UAAU,EAAG,EAAE,CAAC,KAAM,CAE9G,CAEA,MAAO,CAAE,OAAQ,GAAM,QAAS,4CAA6C,CACjF,OAAS1C,EAAO,CACZ,eAAQ,MAAM,6BAA8BA,EAAM,OAAO,EAClD,CAAE,OAAQ,GAAO,QAAS,sBAAsBA,EAAM,OAAO,EAAG,CAC3E,CACJ,CAEA,aAAa,uBAAuBwB,EAAiB,CACjD,GAAI,CAEA,GAAI,CAACA,EAAgB,QAAU,EAAEA,EAAgB,kBAAkB,WAC/D,MAAO,CAAE,OAAQ,GAAO,QAAS,kCAAmC,EAIxE,IAAMiB,EAAY,CACd,sCACA,mNACA,4CACA,eAAiB,IAAI,OAAO,GAAI,CACpC,EAEA,QAAWC,KAAYD,EAAW,CAElC,IAAME,EADU,IAAI,YAAY,EACL,OAAOD,CAAQ,EAEpCM,EAAO,MAAM,OAAO,OAAO,KAC7B,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChCxB,EAAgB,OAChBmB,CACJ,EASI,GAAI,CAPQ,MAAM,OAAO,OAAO,OAChC,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChCnB,EAAgB,OAChBwB,EACAL,CACJ,EAGQ,MAAO,CAAE,OAAQ,GAAO,QAAS,iCAAiCD,EAAS,UAAU,EAAG,EAAE,CAAC,KAAM,CAEzG,CAEA,MAAO,CAAE,OAAQ,GAAM,QAAS,4CAA6C,CACjF,OAAS1C,EAAO,CACZ,eAAQ,MAAM,yCAA0CA,EAAM,OAAO,EAC9D,CAAE,OAAQ,GAAO,QAAS,kCAAkCA,EAAM,OAAO,EAAG,CACvF,CACJ,CAWA,aAAa,mBAAmBwB,EAAiB,CAC7C,GAAI,CACA,IAAMyB,EAAUhE,EAA0B,YAC1C,GAAI,CAACgE,GAAW,OAAOA,EAAQ,kBAAqB,WAChD,MAAO,CAAE,OAAQ,GAAO,QAAS,+BAAgC,EAMrE,IAAMC,EAAU,YAAY,OAAO,gBAAgB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,GACnEC,EAAQ,EACd,QAASvD,EAAI,EAAGA,EAAIuD,EAAOvD,IAEvB,GAAI,CADY,MAAMqD,EAAQ,iBAAiBC,EAASC,EAAO,GAAK,EAEhE,MAAO,CAAE,OAAQ,GAAO,QAAS,gCAAgCvD,EAAI,CAAC,OAAOuD,CAAK,wBAAyB,EAInH,IAAMC,EAAkB,MAAMH,EAAQ,iBAAiBC,EAASC,EAAO,GAAK,EAG5E,OAFAF,EAAQ,SAAS,OAAO,OAAOC,CAAO,EAAE,EAEpCE,EACO,CAAE,OAAQ,GAAO,QAAS,qDAAsD,EAGpF,CAAE,OAAQ,GAAM,QAAS,2BAA2BD,CAAK,4BAA6B,CACjG,OAASnD,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,8BAA8BA,EAAM,OAAO,EAAG,CACnF,CACJ,CAEA,aAAa,yBAAyBwB,EAAiB,CACnD,GAAI,CACA,IAAM6B,EAAc7B,GAAiB,YACrC,GAAI,CAAC6B,GAAe,EAAEA,aAAuB,WACzC,MAAO,CAAE,OAAQ,GAAO,QAAS,uCAAwC,EAE7E,GAAIA,EAAY,WAAW,OAAS,UAChC,MAAO,CAAE,OAAQ,GAAO,QAAS,yCAAyCA,EAAY,WAAW,IAAI,EAAG,EAE5G,GAAIA,EAAY,YACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,6BAA8B,EAKnE,GAAI7B,EAAgB,gBAAkB6B,EAClC,MAAO,CAAE,OAAQ,GAAO,QAAS,oDAAqD,EAI1F,IAAM1C,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC9C2C,EAAQ,IAAI,YAAY,EAAE,OAAO,8BAA8B,EAC/DC,EAAS,MAAM,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,GAAA5C,CAAG,EAAG0C,EAAaC,CAAK,EAChFE,EAAS,MAAM,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,GAAA7C,CAAG,EAAG0C,EAAaE,CAAM,EACvF,OAAI,IAAI,YAAY,EAAE,OAAOC,CAAM,IAAM,+BAC9B,CAAE,OAAQ,GAAO,QAAS,yCAA0C,EAGxE,CAAE,OAAQ,GAAM,QAAS,4DAA6D,CACjG,OAASxD,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,oCAAoCA,EAAM,OAAO,EAAG,CACzF,CACJ,CAEA,aAAa,4BAA4BwB,EAAiB,CACtD,GAAI,CAKA,GAAI,EAFqB,CAAC,CAACA,GAAiB,aAAa,YACrDA,EAAgB,YAAY,WAAW,cAAgB,IAEvD,MAAO,CAAE,OAAQ,GAAO,QAAS,6DAA8D,EAQnG,GAAIA,GAAiB,kBAAkB,EAAG,CACtC,IAAMiC,EAAQjC,EAAgB,UAAU,WAAW,GAAK,CAAC,EACzD,MAAO,CACH,OAAQ,GACR,QAAS,8FAA8FiC,EAAM,WAAa,CAAC,cAAcA,EAAM,cAAgB,CAAC,wBACpK,CACJ,CAEA,MAAO,CACH,OAAQ,GACR,QAAS,0MACb,CACJ,OAASzD,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,oBAAoBA,EAAM,OAAO,EAAG,CACzE,CACJ,CAEA,aAAa,uBAAuBwB,EAAiB,CACjD,GAAI,CAIA,OAAKA,EAAgB,iBAId,CAAE,OAAQ,GAAM,QAAS,wCAAyC,EAH9D,CAAE,OAAQ,GAAO,QAAS,+BAAgC,CAIzE,OAASxB,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,kCAAkCA,EAAM,OAAO,EAAG,CACvF,CACJ,CAEA,aAAa,sBAAsBwB,EAAiB,CAChD,GAAI,CAIA,OAAKA,EAAgB,gBAId,CAAE,OAAQ,GAAM,QAAS,yCAA0C,EAH/D,CAAE,OAAQ,GAAO,QAAS,gCAAiC,CAI1E,OAASxB,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,iCAAiCA,EAAM,OAAO,EAAG,CACtF,CACJ,CAEA,aAAa,sBAAsBwB,EAAiB,CAChD,GAAI,CAIA,OAAKA,EAAgB,QAId,CAAE,OAAQ,GAAM,QAAS,8CAA+C,EAHpE,CAAE,OAAQ,GAAO,QAAS,wBAAyB,CAIlE,OAASxB,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,iCAAiCA,EAAM,OAAO,EAAG,CACtF,CACJ,CAEA,aAAa,yBAAyBwB,EAAiB,CACnD,GAAI,CAIA,OAAKA,EAAgB,mBAId,CAAE,OAAQ,GAAM,QAAS,0CAA2C,EAHhE,CAAE,OAAQ,GAAO,QAAS,iCAAkC,CAI3E,OAASxB,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,oCAAoCA,EAAM,OAAO,EAAG,CACzF,CACJ,CAEA,aAAa,uBAAuBwB,EAAiB,CACjD,GAAI,CAEA,GAAI,CAACA,EAAgB,qBAAuB,EAAEA,EAAgB,+BAA+B,WACzF,eAAQ,KAAK,gDAAgD,EACtD,GAMX,IAAMmB,EADU,IAAI,YAAY,EACL,OAFV,qCAEyB,EAGpC9B,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAI,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAE,EAClEW,EAAgB,oBAChBmB,CACJ,EAEA,OAAO9B,GAAaA,EAAU,WAAa,CAC/C,OAASb,EAAO,CACZ,eAAQ,MAAM,yCAA0CA,EAAM,OAAO,EAC9D,EACX,CACJ,CAEA,aAAa,oBAAoBwB,EAAiB,CAC9C,GAAI,CACA,GAAI,CAACA,EAAgB,eAAiB,CAACA,EAAgB,cAAc,QAAS,MAAO,GAKrF,IAAMmB,EADU,IAAI,YAAY,EACL,OAFV,kCAEyB,EAGpCe,EAAc,KAAK,MAAM,KAAK,OAAO,GAAKlC,EAAgB,cAAc,WAAaA,EAAgB,cAAc,WAAW,EAAIA,EAAgB,cAAc,WAChKmC,EAAa,IAAI,WAAWhB,EAAW,WAAae,CAAW,EACrE,OAAAC,EAAW,IAAI,IAAI,WAAWhB,CAAU,EAAG,CAAC,EAErCgB,EAAW,YAAchB,EAAW,WAAanB,EAAgB,cAAc,UAC1F,OAASxB,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,qCAAsC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACxG,EACX,CACJ,CAEA,aAAa,uBAAuBwB,EAAiB,CACjD,GAAI,CAEA,IAAMoC,EAAiBpC,EAAgB,mBAAqBA,EAAgB,kBAAkB,QACxFqC,EAAmBrC,EAAgB,qBAAuBA,EAAgB,oBAAoB,QAC9FsC,EAAwBtC,EAAgB,0BAA4BA,EAAgB,yBAAyB,QAEnH,OAAOoC,GAAkBC,GAAoBC,CACjD,OAAS9D,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,wCAAyC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC3G,EACX,CACJ,CAEA,aAAa,iBAAiBwB,EAAiB,CAC3C,GAAI,CACA,MAAI,CAACA,EAAgB,YAAc,CAACA,EAAgB,iBAAyB,GAGtEA,EAAgB,YAAcA,EAAgB,iBAAiB,OAAS,CACnF,OAASxB,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACrG,EACX,CACJ,CAGA,aAAa,yBAAyBwB,EAAiB,CAInD,IAAMuC,EAAO,CACT,CAAC,gBAAiBvC,GAAiB,aAAa,EAChD,CAAC,SAAUA,GAAiB,MAAM,EAClC,CAAC,cAAeA,GAAiB,WAAW,CAChD,EAEA,OAAW,CAACwC,EAAM5E,CAAG,IAAK2E,EAAM,CAC5B,GAAI,CAAC3E,GAAO,EAAEA,aAAe,WACzB,MAAO,GAKX,GAAIA,EAAI,cAAgB,GACpB,OAAAH,EAA0B,UAAU,IAAI,QAAS,6BAA8B,CAAE,QAAS+E,CAAK,CAAC,EACzF,EAEf,CAEA,MAAO,EACX,CAEA,aAAa,yBAAyBxC,EAAiB,CACnD,GAAI,CACA,OAAKA,EAAgB,iBAGCA,EAAgB,iBAAiB,uBACnCA,EAAgB,iBAAiB,4BAJP,EAOlD,OAASxB,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,0CAA2C,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC7G,EACX,CACJ,CAGA,aAAa,UAAUwB,EAAiB,CACpC,GAAI,CAEA,OAAOA,EAAgB,kBAChBA,EAAgB,iBAAiB,SAAW,IAC5CA,EAAgB,qBAChBA,EAAgB,oBAAsB,QACtCA,EAAgB,aAChBA,EAAgB,uBAAuB,GAClD,OAASxB,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,0BAA2B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC7F,EACX,CACJ,CAGA,OAAO,YAAc,CACrB,SAAU,IAAI,IACd,YAAa,IAAI,IACjB,MAAO,IAAI,IAEX,MAAM,iBAAiBiE,EAAYd,EAAQ,GAAIe,EAAW,IAAO,CAC7D,GAAI,OAAOD,GAAe,UAAYA,EAAW,OAAS,IACtD,MAAO,GAGX,IAAM7E,EAAM,OAAO6E,CAAU,GAE7B,GAAI,KAAK,MAAM,IAAI7E,CAAG,EAElB,aAAM,IAAI,QAAQ+E,GAAW,WAAWA,EAAS,KAAK,MAAM,KAAK,OAAO,EAAI,EAAE,EAAI,CAAC,CAAC,EAC7E,KAAK,iBAAiBF,EAAYd,EAAOe,CAAQ,EAG5D,KAAK,MAAM,IAAI9E,EAAK,EAAI,EAExB,GAAI,CACA,IAAMgF,EAAM,KAAK,IAAI,EAEhB,KAAK,SAAS,IAAIhF,CAAG,GACtB,KAAK,SAAS,IAAIA,EAAK,CAAC,CAAC,EAK7B,IAAMiF,EAFa,KAAK,SAAS,IAAIjF,CAAG,EAEL,OAAOkF,GAAMF,EAAME,EAAKJ,CAAQ,EAEnE,OAAIG,EAAgB,QAAUlB,EACnB,IAGXkB,EAAgB,KAAKD,CAAG,EACxB,KAAK,SAAS,IAAIhF,EAAKiF,CAAe,EAC/B,GACX,QAAE,CACE,KAAK,MAAM,OAAOjF,CAAG,CACzB,CACJ,EAEA,MAAM,oBAAoB6E,EAAYd,EAAQ,EAAGe,EAAW,IAAQ,CAChE,GAAI,OAAOD,GAAe,UAAYA,EAAW,OAAS,IACtD,MAAO,GAGX,IAAM7E,EAAM,QAAQ6E,CAAU,GAE9B,GAAI,KAAK,MAAM,IAAI7E,CAAG,EAClB,aAAM,IAAI,QAAQ+E,GAAW,WAAWA,EAAS,KAAK,MAAM,KAAK,OAAO,EAAI,EAAE,EAAI,CAAC,CAAC,EAC7E,KAAK,oBAAoBF,EAAYd,EAAOe,CAAQ,EAG/D,KAAK,MAAM,IAAI9E,EAAK,EAAI,EAExB,GAAI,CACA,IAAMgF,EAAM,KAAK,IAAI,EAEhB,KAAK,YAAY,IAAIhF,CAAG,GACzB,KAAK,YAAY,IAAIA,EAAK,CAAC,CAAC,EAIhC,IAAMiF,EADa,KAAK,YAAY,IAAIjF,CAAG,EACR,OAAOkF,GAAMF,EAAME,EAAKJ,CAAQ,EAEnE,OAAIG,EAAgB,QAAUlB,EACnB,IAGXkB,EAAgB,KAAKD,CAAG,EACxB,KAAK,YAAY,IAAIhF,EAAKiF,CAAe,EAClC,GACX,QAAE,CACE,KAAK,MAAM,OAAOjF,CAAG,CACzB,CACJ,EAEA,SAAU,CACN,IAAMgF,EAAM,KAAK,IAAI,EACfG,EAAS,KAEf,OAAW,CAACnF,EAAKoF,CAAU,IAAK,KAAK,SAAS,QAAQ,EAAG,CACrD,GAAI,KAAK,MAAM,IAAIpF,CAAG,EAAG,SAEzB,IAAMqF,EAAQD,EAAW,OAAOF,GAAMF,EAAME,EAAKC,CAAM,EACnDE,EAAM,SAAW,EACjB,KAAK,SAAS,OAAOrF,CAAG,EAExB,KAAK,SAAS,IAAIA,EAAKqF,CAAK,CAEpC,CAEA,OAAW,CAACrF,EAAKoF,CAAU,IAAK,KAAK,YAAY,QAAQ,EAAG,CACxD,GAAI,KAAK,MAAM,IAAIpF,CAAG,EAAG,SAEzB,IAAMqF,EAAQD,EAAW,OAAOF,GAAMF,EAAME,EAAKC,CAAM,EACnDE,EAAM,SAAW,EACjB,KAAK,YAAY,OAAOrF,CAAG,EAE3B,KAAK,YAAY,IAAIA,EAAKqF,CAAK,CAEvC,CAEA,QAAWC,KAAW,KAAK,MAAM,KAAK,EAAG,CACrC,IAAMC,EAAe,SAASD,EAAQ,MAAM,GAAG,EAAE,IAAI,CAAC,GAAK,EACvDN,EAAMO,EAAe,KACrB,KAAK,MAAM,OAAOD,CAAO,CAEjC,CACJ,CACJ,EAEI,OAAO,aAAanE,EAAM,CACtB,GAAI,CAACA,GAAQA,EAAK,SAAW,GACzB,MAAM,IAAI,MAAM,+BAA+B,EAInD,GADoB,IAAI,IAAIA,CAAI,EAChB,KAAO,GACnB,MAAM,IAAI,MAAM,+BAA+B,EAGnD,MAAO,EACX,CAGA,OAAO,UAAY,CACf,KAAM,CAAC,EACP,QAAS,IACT,iBAAkB,GAGlB,MAAO,CACH,KAAK,iBAAmB,KAAK,sBAAsB,EAC/C,KAAK,kBACL,QAAQ,IAAI,oEAAoE,CAExF,EAEA,uBAAwB,CACpB,OACK,OAAO,QAAY,KAAe,IAClC,CAAC,OAAO,YAAc,CAAC,OAAO,kBAC9B,OAAO,SAAS,UAAY,CAAC,OAAO,SAAS,SAAS,SAAS,WAAW,GAC1E,CAAC,OAAO,SAAS,SAAS,SAAS,WAAW,GAC9C,CAAC,OAAO,SAAS,SAAS,SAAS,QAAQ,GAC3C,OAAO,OAAO,iBAAqB,KAAe,CAAC,OAAO,SAAS,OAAO,SAAS,OAAO,CAEnG,EAEA,IAAIqE,EAAOC,EAASC,EAAU,CAAC,EAAG,CAC9B,IAAMC,EAAmB,KAAK,gBAAgBD,CAAO,EAC/CE,EAAW,CACb,UAAW,KAAK,IAAI,EACpB,MAAAJ,EACA,QAAAC,EACA,QAASE,EACT,GAAI,OAAO,gBAAgB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CACpD,EAUA,GARA,KAAK,KAAK,KAAKC,CAAQ,EAGnB,KAAK,KAAK,OAAS,KAAK,UACxB,KAAK,KAAO,KAAK,KAAK,MAAM,CAAC,KAAK,OAAO,GAIzC,KAAK,iBACL,GAAIJ,IAAU,QAEV,QAAQ,MAAM,uBAAkBC,CAAO,iBAAiB,KAAK,mBAAmBA,CAAO,CAAC,GAAG,UACpFD,IAAU,OAEjB,QAAQ,KAAK,6BAAmBC,CAAO,EAAE,MAGzC,aAIAD,IAAU,QACV,QAAQ,MAAM,uBAAkBC,CAAO,GAAI,CAAE,UAAWE,GAAkB,aAAa,MAAQ,SAAU,CAAC,EACnGH,IAAU,OACjB,QAAQ,KAAK,6BAAmBC,CAAO,GAAI,CAAE,QAASE,CAAiB,CAAC,EAExE,QAAQ,IAAI,gBAAgBF,CAAO,GAAIE,CAAgB,CAGnE,EAGA,mBAAmBF,EAAS,CACxB,IAAMI,EAAOJ,EAAQ,MAAM,EAAE,EAAE,OAAO,CAACK,EAAGC,KACtCD,GAAMA,GAAK,GAAKA,EAAKC,EAAE,WAAW,CAAC,EAC5BD,EAAIA,GACZ,CAAC,EACJ,OAAO,KAAK,IAAID,CAAI,EAAE,SAAS,EAAE,EAAE,UAAU,EAAG,CAAC,EAAE,YAAY,CACnE,EAEA,gBAAgBH,EAAS,CACrB,GAAI,CAACA,GAAW,OAAOA,GAAY,SAC/B,OAAOA,EAGX,IAAMM,EAAoB,CACtB,OAAQ,UAAW,YAAa,SAAU,aAC1C,aAAc,SAAU,QAAS,MAAO,SAAU,QAClD,eAAgB,OAAQ,WAAY,cAAe,aACvD,EAEMC,EAAY,CAAC,EACnB,OAAW,CAACjG,EAAKkG,CAAK,IAAK,OAAO,QAAQR,CAAO,EACzBM,EAAkB,KAAKG,GACvCA,EAAQ,KAAKnG,CAAG,GAAM,OAAOkG,GAAU,UAAYC,EAAQ,KAAKD,CAAK,CACzE,EAGID,EAAUjG,CAAG,EAAI,aACV,OAAOkG,GAAU,UAAYA,EAAM,OAAS,IACnDD,EAAUjG,CAAG,EAAIkG,EAAM,UAAU,EAAG,GAAG,EAAI,iBACpCA,aAAiB,aAAeA,aAAiB,WACxDD,EAAUjG,CAAG,EAAI,IAAIkG,EAAM,YAAY,IAAI,IAAIA,EAAM,YAAcA,EAAM,MAAM,WACxEA,GAAS,OAAOA,GAAU,UAAY,CAAC,MAAM,QAAQA,CAAK,EAEjED,EAAUjG,CAAG,EAAI,KAAK,gBAAgBkG,CAAK,EAE3CD,EAAUjG,CAAG,EAAIkG,EAGzB,OAAOD,CACX,EAEA,QAAQT,EAAQ,KAAM,CAClB,OAAIA,EACO,KAAK,KAAK,OAAOY,GAAOA,EAAI,QAAUZ,CAAK,EAE/C,CAAC,GAAG,KAAK,IAAI,CACxB,EAEA,WAAY,CACR,KAAK,KAAO,CAAC,CACjB,EAGA,MAAM,kBAAkBa,EAAWZ,EAASC,EAAU,CAAC,EAAG,CACtD,GAAK,KAAK,iBAIV,GAAI,CAEA,IAAMY,EAAgB,CAClB,UAAAD,EACA,UAAW,KAAK,IAAI,EACpB,UAAW,UAAU,UAAU,UAAU,EAAG,GAAG,EAC/C,IAAK,OAAO,SAAS,KAAK,UAAU,EAAG,GAAG,CAC9C,EAKI,OAAO,YACP,QAAQ,IAAI,uCAAwCC,CAAa,CAEzE,MAAY,CAEZ,CACJ,CACJ,EAGA,aAAa,qBAAsB,CAC/B,GAAI,CAEA,GAAI,CAmBA,OAlBgB,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,OACN,WAAY,OAChB,EACA,GAQA,CAAC,YAAa,YAAY,CAC9B,CAKJ,OAASC,EAAW,CAChB,OAAA1G,EAA0B,UAAU,IAAI,OAAQ,0DAA2D,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAGvH,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,OACN,WAAY,OAChB,EACA,GACA,CAAC,YAAa,YAAY,CAC9B,CAKJ,CACJ,OAAS3F,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,6BAA8B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACjG,IAAI,MAAM,2CAA2C,CAC/D,CACJ,CAGA,aAAa,sBAAuB,CAChC,GAAI,CAEA,GAAI,CAYA,OAXgB,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,QACN,WAAY,OAChB,EACA,GACA,CAAC,OAAQ,QAAQ,CACrB,CAKJ,OAAS2F,EAAW,CAChB,OAAA1G,EAA0B,UAAU,IAAI,OAAQ,0DAA2D,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAGvH,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,QACN,WAAY,OAChB,EACA,GACA,CAAC,OAAQ,QAAQ,CACrB,CAKJ,CACJ,OAAS3F,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,8BAA+B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAClG,IAAI,MAAM,gDAAgD,CACpE,CACJ,CAGA,aAAa,SAAS4F,EAAYxF,EAAM,CACpC,GAAI,CACA,IAAMI,EAAU,IAAI,YACdI,EAAa,OAAOR,GAAS,SAAWI,EAAQ,OAAOJ,CAAI,EAAIA,EAGrE,GAAI,CACA,IAAM2C,EAAY,MAAM,OAAO,OAAO,KAClC,CACI,KAAM,QACN,KAAM,SACV,EACA6C,EACAhF,CACJ,EAEA,OAAO,MAAM,KAAK,IAAI,WAAWmC,CAAS,CAAC,CAC/C,OAAS8C,EAAa,CAClB5G,EAA0B,UAAU,IAAI,OAAQ,yCAA0C,CAAE,MAAO4G,EAAY,OAAQ,CAAC,EAExH,IAAM9C,EAAY,MAAM,OAAO,OAAO,KAClC,CACI,KAAM,QACN,KAAM,SACV,EACA6C,EACAhF,CACJ,EAEA,OAAO,MAAM,KAAK,IAAI,WAAWmC,CAAS,CAAC,CAC/C,CACJ,OAAS/C,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,sBAAuB,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC1F,IAAI,MAAM,qBAAqB,CACzC,CACJ,CAGA,aAAa,gBAAgB8F,EAAW/C,EAAW3C,EAAM,CACrD,GAAI,CAGA,IAAMI,EAAU,IAAI,YACdI,EAAa,OAAOR,GAAS,SAAWI,EAAQ,OAAOJ,CAAI,EAAIA,EAC/D2F,EAAkB,IAAI,WAAWhD,CAAS,EAKhD,GAAI,CAgBA,OAdgB,MAAM,OAAO,OAAO,OAChC,CACI,KAAM,QACN,KAAM,SACV,EACA+C,EACAC,EACAnF,CACJ,CAOJ,MAAsB,CAmBlB,OAdgB,MAAM,OAAO,OAAO,OAChC,CACI,KAAM,QACN,KAAM,SACV,EACAkF,EACAC,EACAnF,CACJ,CAOJ,CACJ,OAASZ,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,gCAAiC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACpG,IAAI,MAAM,oCAAoC,CACxD,CACJ,CAGA,aAAa,qBAAqBgG,EAASC,EAAoB,OAAQ,CACnE,GAAI,CACA,GAAI,CAAC,MAAM,QAAQD,CAAO,GAAKA,EAAQ,SAAW,EAC9C,MAAM,IAAI,MAAM,yBAAyB,EAG7C,IAAME,EAAW,IAAI,WAAWF,CAAO,EAGvC,GAAIE,EAAS,OAAS,GAClB,MAAM,IAAI,MAAM,6CAA6C,EAEjE,GAAIA,EAAS,OAAS,IAClB,MAAM,IAAI,MAAM,qCAAqC,EAIzD,IAAMC,EAAOlH,EAA0B,UAAUiH,CAAQ,EAGzD,GAAI,CAACC,GAAQA,EAAK,MAAQ,GACtB,MAAM,IAAI,MAAM,+CAA+C,EAInE,GAAIA,EAAK,SAAS,SAAW,EACzB,MAAM,IAAI,MAAM,qDAAqDA,EAAK,SAAS,MAAM,EAAE,EAI/F,IAAMC,EAAgBD,EAAK,SAAS,CAAC,EACrC,GAAIC,EAAc,MAAQ,GACtB,MAAM,IAAI,MAAM,8CAA8C,EAIlE,IAAMC,EAASD,EAAc,SAAS,CAAC,EACvC,GAAIC,EAAO,MAAQ,EACf,MAAM,IAAI,MAAM,kDAAkD,EAItE,IAAMC,EAAWD,EAAO,MAClBE,EAAYtH,EAA0B,YAAYqH,CAAQ,EAU1DE,EAPkB,CACpB,KAAQ,CAAC,mBAAmB,EAC5B,MAAS,CAAC,mBAAmB,EAC7B,IAAO,CAAC,sBAAsB,EAC9B,UAAW,CAAC,yBAA0B,yBAAyB,CACnE,EAEqCP,CAAiB,EACtD,GAAI,CAACO,EACD,MAAM,IAAI,MAAM,sBAAsBP,CAAiB,EAAE,EAG7D,GAAI,CAACO,EAAa,SAASD,CAAS,EAChC,MAAM,IAAI,MAAM,mCAAmCC,EAAa,KAAK,MAAM,CAAC,SAASD,CAAS,EAAE,EAIpG,GAAIN,IAAsB,QAAUA,IAAsB,QAAS,CAC/D,GAAIG,EAAc,SAAS,OAAS,EAChC,MAAM,IAAI,MAAM,qCAAqC,EAGzD,IAAMK,EAAWL,EAAc,SAAS,CAAC,EACzC,GAAIK,EAAS,MAAQ,EACjB,MAAM,IAAI,MAAM,8CAA8C,EAGlE,IAAMC,EAAiBzH,EAA0B,YAAYwH,EAAS,KAAK,EAQ3E,GAAI,CALgB,CAChB,sBAAuB,QACvB,eAAgB,OACpB,EAEiBC,CAAc,EAC3B,MAAM,IAAI,MAAM,qCAAqCA,CAAc,EAAE,CAI7E,CAGA,IAAMC,EAAqBR,EAAK,SAAS,CAAC,EAC1C,GAAIQ,EAAmB,MAAQ,EAC3B,MAAM,IAAI,MAAM,uCAAuC,EAI3D,GAAIA,EAAmB,MAAM,CAAC,IAAM,EAChC,MAAM,IAAI,MAAM,gDAAgDA,EAAmB,MAAM,CAAC,CAAC,EAAE,EAIjG,GAAIV,IAAsB,QAAUA,IAAsB,QAAS,CAC/D,IAAMW,EAAYD,EAAmB,MAAM,MAAM,CAAC,EAGlD,GAAIC,EAAU,CAAC,IAAM,EACjB,MAAM,IAAI,MAAM,gEAAgEA,EAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAI/G,IAAMC,EAAgB,CAClB,QAAS,GACT,QAAS,EACb,EAIMC,EADiB7H,EAA0B,YAAYmH,EAAc,SAAS,CAAC,EAAE,KAAK,IACvD,sBAAwB,QAAU,QACjEW,EAAeF,EAAcC,CAAS,EAE5C,GAAIF,EAAU,SAAWG,EACrB,MAAM,IAAI,MAAM,6BAA6BD,CAAS,cAAcC,CAAY,SAASH,EAAU,MAAM,EAAE,CAEnH,CAGA,GAAI,CACA,IAAMI,EAAYf,IAAsB,SAAWA,IAAsB,OACnE,CAAE,KAAMA,EAAmB,WAAY,OAAQ,EAC/C,CAAE,KAAMA,CAAkB,EAE1BgB,EAAShB,IAAsB,QAAU,CAAC,QAAQ,EAAI,CAAC,EAE7D,MAAM,OAAO,OAAO,UAAU,OAAQC,EAAS,OAAQc,EAAW,GAAOC,CAAM,CACnF,OAASC,EAAa,CAElB,GAAIjB,IAAsB,SAAWA,IAAsB,OACvD,GAAI,CACA,IAAMe,EAAY,CAAE,KAAMf,EAAmB,WAAY,OAAQ,EAC3DgB,EAAShB,IAAsB,QAAU,CAAC,QAAQ,EAAI,CAAC,EAC7D,MAAM,OAAO,OAAO,UAAU,OAAQC,EAAS,OAAQc,EAAW,GAAOC,CAAM,CACnF,OAASE,EAAe,CACpB,MAAM,IAAI,MAAM,iCAAiCA,EAAc,OAAO,EAAE,CAC5E,KAEA,OAAM,IAAI,MAAM,iCAAiCD,EAAY,OAAO,EAAE,CAE9E,CAIA,MAAO,EACX,OAASE,EAAK,CACV,MAAAnI,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAChF,MAAOmI,EAAI,QACX,UAAWnB,CACf,CAAC,EACK,IAAI,MAAM,0BAA0BmB,EAAI,OAAO,EAAE,CAC3D,CACJ,CAGA,OAAO,UAAU1H,EAAO2H,EAAS,EAAG,CAChC,GAAIA,GAAU3H,EAAM,OAChB,OAAO,KAGX,IAAM4H,EAAM5H,EAAM2H,CAAM,EACpBE,EAAeF,EAAS,EAE5B,GAAIE,GAAgB7H,EAAM,OACtB,MAAM,IAAI,MAAM,2BAA2B,EAG/C,IAAI4B,EAAS5B,EAAM6H,CAAY,EAC3BC,EAAcD,EAAe,EAGjC,GAAIjG,EAAS,IAAM,CACf,IAAMmG,EAAiBnG,EAAS,IAChC,GAAImG,EAAiB,EACjB,MAAM,IAAI,MAAM,wBAAwB,EAG5CnG,EAAS,EACT,QAAS1B,EAAI,EAAGA,EAAI6H,EAAgB7H,IAAK,CACrC,GAAI4H,EAAc5H,GAAKF,EAAM,OACzB,MAAM,IAAI,MAAM,wBAAwB,EAE5C4B,EAAUA,GAAU,EAAK5B,EAAM8H,EAAc5H,CAAC,CAClD,CACA4H,GAAeC,CACnB,CAEA,GAAID,EAAclG,EAAS5B,EAAM,OAC7B,MAAM,IAAI,MAAM,qCAAqC,EAGzD,IAAM4F,EAAQ5F,EAAM,MAAM8H,EAAaA,EAAclG,CAAM,EACrDoG,EAAO,CACT,IAAKJ,EACL,OAAQhG,EACR,MAAOgE,EACP,SAAU,CAAC,CACf,EAGA,GAAIgC,IAAQ,IAAQA,IAAQ,GAAM,CAC9B,IAAIK,EAAc,EAClB,KAAOA,EAAcrC,EAAM,QAAQ,CAC/B,IAAMsC,EAAQ3I,EAA0B,UAAUqG,EAAOqC,CAAW,EACpE,GAAI,CAACC,EAAO,MACZF,EAAK,SAAS,KAAKE,CAAK,EACxBD,EAAcA,EAAc,EAAIC,EAAM,YAAcA,EAAM,MAC9D,CACJ,CAGA,OAAAF,EAAK,YAAcF,EAAcD,EAE1BG,CACX,CAGA,OAAO,YAAYhI,EAAO,CACtB,GAAI,CAACA,GAASA,EAAM,SAAW,EAC3B,MAAM,IAAI,MAAM,WAAW,EAG/B,IAAMmI,EAAQ,CAAC,EAGTC,EAAQ,KAAK,MAAMpI,EAAM,CAAC,EAAI,EAAE,EAChCqI,EAASrI,EAAM,CAAC,EAAI,GAC1BmI,EAAM,KAAKC,CAAK,EAChBD,EAAM,KAAKE,CAAM,EAGjB,IAAIzC,EAAQ,EACZ,QAAS1F,EAAI,EAAGA,EAAIF,EAAM,OAAQE,IAC9B0F,EAASA,GAAS,EAAM5F,EAAME,CAAC,EAAI,IAC7BF,EAAME,CAAC,EAAI,MACbiI,EAAM,KAAKvC,CAAK,EAChBA,EAAQ,GAIhB,OAAOuC,EAAM,KAAK,GAAG,CACzB,CAGA,OAAO,kBAAkBtB,EAAW,CAGhC,GAAI,CADa,sBACH,KAAKA,CAAS,EACxB,MAAM,IAAI,MAAM,uBAAuBA,CAAS,EAAE,EAGtD,IAAMsB,EAAQtB,EAAU,MAAM,GAAG,EAAE,IAAI,MAAM,EAG7C,GAAIsB,EAAM,CAAC,EAAI,EACX,MAAM,IAAI,MAAM,gCAAgCA,EAAM,CAAC,CAAC,EAAE,EAI9D,IAAKA,EAAM,CAAC,IAAM,GAAKA,EAAM,CAAC,IAAM,IAAMA,EAAM,CAAC,EAAI,GACjD,MAAM,IAAI,MAAM,iCAAiCA,EAAM,CAAC,CAAC,uCAAuCA,EAAM,CAAC,CAAC,GAAG,EAG/G,MAAO,EACX,CAGA,aAAa,6BAA6B/B,EAAWkC,EAAYpF,EAAU,OAAQ,CAC/E,GAAI,CAEA,GAAI,CAAC,CAAC,OAAQ,OAAO,EAAE,SAASA,CAAO,EACnC,MAAM,IAAI,MAAM,kBAAkB,EAGtC,IAAMqF,EAAW,MAAM,OAAO,OAAO,UAAU,OAAQnC,CAAS,EAC1DE,EAAU,MAAM,KAAK,IAAI,WAAWiC,CAAQ,CAAC,EAEnD,MAAMhJ,EAA0B,qBAAqB+G,EAASpD,CAAO,EAGrE,IAAMsF,EAAa,CACf,QAAAtF,EACA,QAAAoD,EACA,UAAW,KAAK,IAAI,EACpB,QAAS,KACb,EAGMjF,EAAgB,KAAK,UAAUmH,CAAU,EACzCnF,EAAY,MAAM9D,EAA0B,SAAS+I,EAAYjH,CAAa,EASpF,MAPsB,CAClB,GAAGmH,EACH,UAAAnF,CACJ,CAKJ,OAAS/C,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,2BAA4B,CACzE,MAAOe,EAAM,QACb,QAAA4C,CACJ,CAAC,EACK,IAAI,MAAM,oBAAoBA,CAAO,SAAS5C,EAAM,OAAO,EAAE,CACvE,CACJ,CAGA,aAAa,sBAAsBmI,EAAeC,EAAcC,EAAkB,OAAQ,CACtF,GAAI,CAIA,GAAI,CAACF,GAAiB,OAAOA,GAAkB,SAC3C,MAAM,IAAI,MAAM,+BAA+B,EAGnD,GAAM,CAAE,QAAAvF,EAAS,QAAAoD,EAAS,UAAAsC,EAAW,QAAAC,EAAS,UAAAxF,CAAU,EAAIoF,EAE5D,GAAI,CAACvF,GAAW,CAACoD,GAAW,CAACsC,GAAa,CAACvF,EACvC,MAAM,IAAI,MAAM,2CAA2C,EAG/D,GAAI,CAAC9D,EAA0B,oBAAoB2D,EAASyF,CAAe,EACvE,MAAM,IAAI,MAAM,+BAA+BA,CAAe,SAASzF,CAAO,EAAE,EAKpF,GADe,KAAK,IAAI,EAAI0F,EACf,KACT,MAAM,IAAI,MAAM,+BAA+B,EAGnD,MAAMrJ,EAA0B,qBAAqB+G,EAASpD,CAAO,EAIrE,IAAM7B,EAAgB,KAAK,UADP,CAAE,QAAA6B,EAAS,QAAAoD,EAAS,UAAAsC,EAAW,QAAAC,CAAQ,CACX,EAKhD,GAAI,CAHqB,MAAMtJ,EAA0B,gBAAgBmJ,EAAcrF,EAAWhC,CAAa,EAI3G,MAAM,IAAI,MAAM,yDAAyD,EAI7E,IAAMmF,EAAW,IAAI,WAAWF,CAAO,EAGvC,GAAI,CACA,IAAMgB,EAAYpE,IAAY,OAC1B,CAAE,KAAM,OAAQ,WAAY,OAAQ,EAClC,CAAE,KAAM,QAAS,WAAY,OAAQ,EAErC4F,EAAY5F,IAAY,OAAS,CAAC,EAAI,CAAC,QAAQ,EAYrD,OAVkB,MAAM,OAAO,OAAO,UAClC,OACAsD,EACAc,EACA,GACAwB,CACJ,CAKJ,OAAS7C,EAAW,CAEhB1G,EAA0B,UAAU,IAAI,OAAQ,sDAAuD,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAEnI,IAAMqB,EAAYpE,IAAY,OAC1B,CAAE,KAAM,OAAQ,WAAY,OAAQ,EAClC,CAAE,KAAM,QAAS,WAAY,OAAQ,EAErC4F,EAAY5F,IAAY,OAAS,CAAC,EAAI,CAAC,QAAQ,EAYrD,OAVkB,MAAM,OAAO,OAAO,UAClC,OACAsD,EACAc,EACA,GACAwB,CACJ,CAKJ,CACJ,OAASxI,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAChF,MAAOe,EAAM,QACb,gBAAAqI,CACJ,CAAC,EACK,IAAI,MAAM,oCAAoCrI,EAAM,OAAO,EAAE,CACvE,CACJ,CAGA,aAAa,gBAAgB8F,EAAW,CACpC,GAAI,CACA,IAAMmC,EAAW,MAAM,OAAO,OAAO,UAAU,OAAQnC,CAAS,EAC1DE,EAAU,MAAM,KAAK,IAAI,WAAWiC,CAAQ,CAAC,EAEnD,aAAMhJ,EAA0B,qBAAqB+G,EAAS,MAAM,EAG7DA,CACX,OAAShG,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACtG,IAAI,MAAM,iCAAiC,CACrD,CACJ,CAGA,aAAa,gBAAgBgG,EAAS,CAClC,GAAI,CACA,MAAM/G,EAA0B,qBAAqB+G,EAAS,MAAM,EAEpE,IAAME,EAAW,IAAI,WAAWF,CAAO,EAGvC,GAAI,CAaA,OAZkB,MAAM,OAAO,OAAO,UAClC,OACAE,EACA,CACI,KAAM,OACN,WAAY,OAChB,EACA,GACA,CAAC,CACL,CAIJ,OAASP,EAAW,CAChB,OAAA1G,EAA0B,UAAU,IAAI,OAAQ,oCAAqC,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAG/F,MAAM,OAAO,OAAO,UAClC,OACAO,EACA,CACI,KAAM,OACN,WAAY,OAChB,EACA,GACA,CAAC,CACL,CAIJ,CACJ,OAASlG,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACtG,IAAI,MAAM,iCAAiC,CACrD,CACJ,CAIA,OAAO,aAAayI,EAAkB,CACtC,GAAIA,aAA4B,UAAW,CACvC,IAAMC,EAAOzJ,EAA0B,aAAa,IAAIwJ,CAAgB,EACxE,OAAOC,EAAOA,EAAK,UAAY,GAAO,EACtC,SAAWD,GAAoBA,EAAiB,kBAE5C,OAAOA,EAAiB,kBAAkB,UAAY,GAG1D,MAAO,EACX,CAEA,aAAa,iCAAiCN,EAAeC,EAAe,KAAMO,EAAU,CAAC,EAAG,CAC5F,GAAI,CACA,GAAI,CAACR,GAAiB,CAACA,EAAc,SAAW,CAACA,EAAc,UAC3D,MAAM,IAAI,MAAM,mCAAmC,EAKvD,IAAMS,EADiB,CAAC,UAAW,YAAa,UAAW,YAAa,SAAS,EAC5C,OAAOC,GAAS,CAACV,EAAcU,CAAK,CAAC,EAE1E,GAAID,EAAc,OAAS,EACvB,MAAA3J,EAA0B,UAAU,IAAI,QAAS,4CAA6C,CAC1F,cAAe2J,EACf,gBAAiB,OAAO,KAAKT,CAAa,CAC9C,CAAC,EACK,IAAI,MAAM,sDAAsDS,EAAc,KAAK,IAAI,CAAC,EAAE,EAIpG,GAAI,CAACR,EACD,MAAAnJ,EAA0B,UAAU,IAAI,QAAS,oEAAqE,CAClH,QAASkJ,EAAc,QACvB,QAASA,EAAc,QAAQ,OAC/B,UAAWA,EAAc,UACzB,QAASA,EAAc,QACvB,aAAc,qCAClB,CAAC,EAGK,IAAI,MAAM,0KACyF,EAI7G,MAAMlJ,EAA0B,qBAAqBkJ,EAAc,QAASA,EAAc,SAAW,MAAM,EAG3G,IAAMW,EAAc,CAAE,GAAGX,CAAc,EACvC,OAAOW,EAAY,UACnB,IAAM/H,EAAgB,KAAK,UAAU+H,CAAW,EAGhD,GAAI,CAFqB,MAAM7J,EAA0B,gBAAgBmJ,EAAcD,EAAc,UAAWpH,CAAa,EAGzH,MAAA9B,EAA0B,UAAU,IAAI,QAAS,sEAAuE,CACpH,QAASkJ,EAAc,QACvB,QAASA,EAAc,QAAQ,OAC/B,UAAWA,EAAc,UACzB,QAASA,EAAc,QACvB,gBAAiB,EACrB,CAAC,EACK,IAAI,MAAM,8HACqE,EAIzF,IAAMY,EAAiB,MAAM9J,EAA0B,wBAAwBkJ,EAAc,OAAO,EAM9FjC,EAAW,IAAI,WAAWiC,EAAc,OAAO,EAC/CvF,EAAUuF,EAAc,SAAW,OAGzC,GAAI,CACA,IAAMrC,EAAY,MAAM,OAAO,OAAO,UAClC,OACAI,EACA,CACI,KAAMtD,EACN,WAAY,OAChB,EACA,GACAA,IAAY,QAAU,CAAC,QAAQ,EAAI,CAAC,CACxC,EAGA,OAAA3D,EAA0B,aAAa,IAAI6G,EAAW,CAClD,QAAS,GACT,mBAAoB,kBACpB,sBAAuB,KAAK,IAAI,CACpC,CAAC,EAEMA,CACX,OAASH,EAAW,CAChB1G,EAA0B,UAAU,IAAI,OAAQ,oCAAqC,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAGjH,IAAMG,EAAY,MAAM,OAAO,OAAO,UAClC,OACAI,EACA,CACI,KAAMtD,EACN,WAAY,OAChB,EACA,GACAA,IAAY,QAAU,CAAC,QAAQ,EAAI,CAAC,CACxC,EAGA,OAAA3D,EAA0B,aAAa,IAAI6G,EAAW,CAClD,QAAS,GACT,mBAAoB,kBACpB,sBAAuB,KAAK,IAAI,CACpC,CAAC,EAEMA,CACX,CACJ,OAAS9F,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,mCAAoC,CACjF,MAAOe,EAAM,QACb,qBAAsB,qCAC1B,CAAC,EACK,IAAI,MAAM,4DAA4DA,EAAM,OAAO,EAAE,CAC/F,CACJ,CAGA,aAAa,iBAAiB4F,EAAYE,EAAWvF,EAAM,CACvD,GAAI,CAIA,GAAI,EAAEqF,aAAsB,WACxB,MAAA3G,EAA0B,UAAU,IAAI,QAAS,iCAAkC,CAC/E,eAAgB,OAAO2G,EACvB,oBAAqBA,GAAY,WAAW,IAChD,CAAC,EACK,IAAI,MAAM,2CAA2C,EAG/D,GAAI,EAAEE,aAAqB,WACvB,MAAA7G,EAA0B,UAAU,IAAI,QAAS,gCAAiC,CAC9E,cAAe,OAAO6G,EACtB,mBAAoBA,GAAW,WAAW,IAC9C,CAAC,EACK,IAAI,MAAM,0CAA0C,EAI9D,GAAI,CAACvF,GAAQA,EAAK,SAAW,GACzB,MAAM,IAAI,MAAM,qDAAqD,EAGzE,IAAMyI,EAAY,IAAI,WAAWzI,CAAI,EAC/BC,EAAU,IAAI,YAmBhByI,EACAC,EAAmB,KACvB,GAAI,CACAA,EAAmB,MAAM,OAAO,OAAO,WACnC,CACI,KAAM,OACN,OAAQpD,CACZ,EACAF,EACA,GACJ,EAEAqD,EAAkB,MAAM,OAAO,OAAO,UAClC,MACAC,EACA,CACI,KAAM,OACN,KAAM,SACV,EACA,GAGA,CAAC,YAAa,YAAY,CAC9B,CACJ,OAASlJ,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,yBAA0B,CACvE,MAAOe,EAAM,OACjB,CAAC,EACKA,CACV,QAAE,CAIMkJ,IACAjK,EAA0B,cAAciK,CAAgB,EACxDA,EAAmB,KAE3B,CASA,IAAIC,EACJA,EAAa,MAAM,OAAO,OAAO,UAC7B,CACI,KAAM,OACN,KAAM,UACN,KAAMH,EACN,KAAMxI,EAAQ,OAAO,uBAAuB,CAChD,EACAyI,EACA,CACI,KAAM,UACN,OAAQ,GACZ,EACA,GACA,CAAC,UAAW,SAAS,CACzB,EAGA,IAAIG,EACJA,EAAS,MAAM,OAAO,OAAO,UACzB,CACI,KAAM,OACN,KAAM,UACN,KAAMJ,EACN,KAAMxI,EAAQ,OAAO,2BAA2B,CACpD,EACAyI,EACA,CACI,KAAM,OACN,KAAM,SACV,EACA,GACA,CAAC,OAAQ,QAAQ,CACrB,EAGA,IAAII,EACJA,EAAS,MAAM,OAAO,OAAO,UACzB,CACI,KAAM,OACN,KAAM,UACN,KAAML,EACN,KAAMxI,EAAQ,OAAO,4BAA4B,CACrD,EACAyI,EACA,CACI,KAAM,UACN,OAAQ,GACZ,EACA,GACA,CAAC,UAAW,SAAS,CACzB,EAGA,IAAI5F,EACJA,EAAc,MAAM,OAAO,OAAO,UAC9B,CACI,KAAM,OACN,KAAM,UACN,KAAM2F,EACN,KAAMxI,EAAQ,OAAO,wBAAwB,CACjD,EACAyI,EACA,CACI,KAAM,UACN,OAAQ,GACZ,EACA,GACA,CAAC,UAAW,SAAS,CACzB,EAQA,IAAMK,EAAkB,MAAM,OAAO,OAAO,WACxC,CACI,KAAM,OACN,KAAM,UACN,KAAMN,EACN,KAAMxI,EAAQ,OAAO,wBAAwB,CACjD,EACAyI,EACA,GACJ,EACMM,EAAc,IAAI,WAAWD,CAAe,EAO9CE,EAAkB,KAClBC,EACJ,GAAI,CACAD,EAAkB,MAAM,OAAO,OAAO,WAClC,CACI,KAAM,OACN,KAAM,UACN,KAAMR,EACN,KAAMxI,EAAQ,OAAO,2BAA2B,CACpD,EACAyI,EACA,GACJ,EAGAQ,EAAc,MAAMxK,EAA0B,uBAC1C,IAAI,WAAWuK,CAAe,CAClC,CACJ,QAAE,CACMA,IACAvK,EAA0B,cAAcuK,CAAe,EACvDA,EAAkB,KAE1B,CAGA,GAAI,EAAEL,aAAsB,WACxB,MAAAlK,EAA0B,UAAU,IAAI,QAAS,yCAA0C,CACvF,eAAgB,OAAOkK,EACvB,oBAAqBA,GAAY,WAAW,IAChD,CAAC,EACK,IAAI,MAAM,mDAAmD,EAGvE,GAAI,EAAEC,aAAkB,WACpB,MAAAnK,EAA0B,UAAU,IAAI,QAAS,qCAAsC,CACnF,WAAY,OAAOmK,EACnB,gBAAiBA,GAAQ,WAAW,IACxC,CAAC,EACK,IAAI,MAAM,+CAA+C,EAGnE,GAAI,EAAEC,aAAkB,WACpB,MAAApK,EAA0B,UAAU,IAAI,QAAS,qCAAsC,CACnF,WAAY,OAAOoK,EACnB,gBAAiBA,GAAQ,WAAW,IACxC,CAAC,EACK,IAAI,MAAM,+CAA+C,EAGnE,GAAI,EAAEhG,aAAuB,WACzB,MAAApE,EAA0B,UAAU,IAAI,QAAS,0CAA2C,CACxF,gBAAiB,OAAOoE,EACxB,qBAAsBA,GAAa,WAAW,IAClD,CAAC,EACK,IAAI,MAAM,oDAAoD,EAKxE,MAAO,CACH,WAAA8F,EACA,OAAAC,EACA,OAAAC,EACA,YAAAhG,EAIA,YAAAkG,EACA,YAAAE,EACA,UAAW,KAAK,IAAI,EACpB,QAAS,KACb,CACJ,OAASzJ,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,iCAAkC,CAC/E,MAAOe,EAAM,QACb,WAAYA,EAAM,MAClB,eAAgB,OAAO4F,EACvB,cAAe,OAAOE,EACtB,WAAYvF,GAAM,OAClB,oBAAqBqF,GAAY,WAAW,KAC5C,mBAAoBE,GAAW,WAAW,IAC9C,CAAC,EACK,IAAI,MAAM,4CAA4C9F,EAAM,OAAO,EAAE,CAC/E,CACJ,CAEA,aAAa,uBAAuBgG,EAAS,CACzC,IAAM0D,EAAY,IAAI,WAAW1D,CAAO,EAClC2D,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWD,CAAS,EAElE,OADkB,MAAM,KAAK,IAAI,WAAWC,CAAU,CAAC,EACtC,MAAM,EAAG,EAAE,EAAE,IAAIxE,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,GAAG,CACpF,CAGA,OAAO,6BAA8B,CACjC,IAAMyE,EAAY,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EACrDtB,EAAY,KAAK,IAAI,EACrBuB,EAAQ,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAEvD,MAAO,CACH,UAAW,MAAM,KAAKD,CAAS,EAC/B,UAAAtB,EACA,MAAO,MAAM,KAAKuB,CAAK,EACvB,QAAS,KACb,CACJ,CAGA,aAAa,gBAAgBD,EAAWhE,EAAYE,EAAW,CAC3D,GAAI,CACA,GAAI,CAAC8D,GAAa,CAACA,EAAU,WAAa,CAACA,EAAU,WAAa,CAACA,EAAU,MACzE,MAAM,IAAI,MAAM,6BAA6B,EAIjD,IAAME,EAAe,KAAK,IAAI,EAAIF,EAAU,UAC5C,GAAIE,EAAe,KACf,MAAM,IAAI,MAAM,mBAAmB,EAIvC,IAAMC,EAAY,CACd,UAAWH,EAAU,UACrB,UAAWA,EAAU,UACrB,MAAOA,EAAU,MACjB,kBAAmB,KAAK,IAAI,EAC5B,cAAe,MAAM3K,EAA0B,cAAc6G,CAAS,CAC1E,EAGMkE,EAAc,KAAK,UAAUD,CAAS,EACtChH,EAAY,MAAM9D,EAA0B,SAAS2G,EAAYoE,CAAW,EAE5EC,EAAQ,CACV,GAAGF,EACH,UAAAhH,EACA,QAAS,KACb,EAEA,OAAA9D,EAA0B,UAAU,IAAI,OAAQ,+BAAgC,CAC5E,aAAc,KAAK,MAAM6K,EAAe,GAAI,EAAI,GACpD,CAAC,EAEMG,CACX,OAASjK,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,uCAAwC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC3G,IAAI,MAAM,yCAAyCA,EAAM,OAAO,EAAE,CAC5E,CACJ,CAGA,aAAa,gBAAgBiK,EAAOL,EAAW9D,EAAW,CACtD,GAAI,CAKA,GAJA,MAAM,IAAI,QAAQ3B,GAAW,WAAWA,EAAS,KAAK,MAAM,KAAK,OAAO,EAAI,EAAE,EAAI,CAAC,CAAC,EAEpFlF,EAA0B,gBAAgB6G,EAAW,QAAS,CAAC,QAAQ,CAAC,EAEpE,CAACmE,GAAS,CAACL,GAAa,CAAC9D,EACzB,MAAM,IAAI,MAAM,oDAAoD,EAIxE,IAAMoE,EAAiB,CAAC,YAAa,YAAa,QAAS,oBAAqB,gBAAiB,WAAW,EAC5G,QAAWrB,KAASqB,EAChB,GAAI,CAACD,EAAMpB,CAAK,EACZ,MAAM,IAAI,MAAM,2BAA2BA,CAAK,EAAE,EAK1D,GAAI,CAAC5J,EAA0B,0BAA0BgL,EAAM,UAAWL,EAAU,SAAS,GACzFK,EAAM,YAAcL,EAAU,WAC9B,CAAC3K,EAA0B,0BAA0BgL,EAAM,MAAOL,EAAU,KAAK,EACjF,MAAM,IAAI,MAAM,6CAA6C,EAIjE,IAAMO,EAAc,KAAK,IAAI,EAAIF,EAAM,kBACvC,GAAIE,EAAc,KACd,MAAM,IAAI,MAAM,wBAAwB,EAI5C,IAAMC,EAAe,MAAMnL,EAA0B,cAAc6G,CAAS,EAC5E,GAAI,CAAC7G,EAA0B,oBAAoBgL,EAAM,cAAeG,CAAY,EAChF,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMC,EAAY,CAAE,GAAGJ,CAAM,EAC7B,OAAOI,EAAU,UACjB,IAAML,EAAc,KAAK,UAAUK,CAAS,EAG5C,GAAI,CAFqB,MAAMpL,EAA0B,gBAAgB6G,EAAWmE,EAAM,UAAWD,CAAW,EAG5G,MAAM,IAAI,MAAM,yBAAyB,EAG7C,OAAA/K,EAA0B,UAAU,IAAI,OAAQ,6CAA8C,CAC1F,YAAa,KAAK,MAAMkL,EAAc,GAAI,EAAI,GAClD,CAAC,EAEM,EACX,OAASnK,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,2CAA4C,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC/G,IAAI,MAAM,yCAAyCA,EAAM,OAAO,EAAE,CAC5E,CACJ,CAGA,aAAa,cAAc8F,EAAW,CAClC,GAAI,CACA,IAAMmC,EAAW,MAAM,OAAO,OAAO,UAAU,OAAQnC,CAAS,EAC1Db,EAAO,MAAM,OAAO,OAAO,OAAO,UAAWgD,CAAQ,EAE3D,OADkB,MAAM,KAAK,IAAI,WAAWhD,CAAI,CAAC,EAChC,IAAIE,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CACtE,OAASnF,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,4BAA6B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAChG,IAAI,MAAM,yCAAyC,CAC7D,CACJ,CAGA,OAAO,uBAAwB,CAC3B,IAAM4J,EAAY,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC3D,OAAO,MAAM,KAAKA,CAAS,CAC/B,CAGA,OAAO,0BAA2B,CAC9B,IAAMxI,EAAQ,mBACRC,EAAYD,EAAM,OACpBkJ,EAAS,GAGb,QAAS,EAAI,EAAG,EAAI,EAAG,IAAK,CACxB,IAAIC,EACJ,GACIA,EAAa,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,QACnDA,GAAc,IAAO,IAAMlJ,GAEpCiJ,GAAUlJ,EAAMmJ,EAAalJ,CAAS,CAC1C,CAEA,OAAOiJ,EAAO,MAAM,SAAS,EAAE,KAAK,GAAG,CAC3C,CAGA,aAAa,eAAezF,EAAS2F,EAAepB,EAAQ/F,EAAaoH,EAAWC,EAAiB,EAAG,CACpG,GAAI,CACA,GAAI,CAAC7F,GAAW,OAAOA,GAAY,SAC/B,MAAM,IAAI,MAAM,wBAAwB,EAG5C5F,EAA0B,gBAAgBuL,EAAe,UAAW,CAAC,SAAS,CAAC,EAC/EvL,EAA0B,gBAAgBmK,EAAQ,OAAQ,CAAC,MAAM,CAAC,EAClEnK,EAA0B,gBAAgBoE,EAAa,UAAW,CAAC,SAAS,CAAC,EAE7E,IAAM7C,EAAU,IAAI,YACdmK,EAAcnK,EAAQ,OAAOqE,CAAO,EACpC+F,EAAY,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EACrDC,EAAa,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EACtDvC,EAAY,KAAK,IAAI,EAErB5E,EAAc,GAAMiH,EAAY,OAAS,GACzCG,EAAgB,IAAI,WAAWH,EAAY,OAASjH,CAAW,EACrEoH,EAAc,IAAIH,CAAW,EAC7B,IAAMI,EAAU,OAAO,gBAAgB,IAAI,WAAWrH,CAAW,CAAC,EAClEoH,EAAc,IAAIC,EAASJ,EAAY,MAAM,EAE7C,IAAMK,EAAmB,MAAM,OAAO,OAAO,QACzC,CAAE,KAAM,UAAW,GAAIJ,CAAU,EACjCJ,EACAM,CACJ,EAEMG,EAAW,CACb,GAAIR,EACJ,UAAWnC,EACX,eAAgBoC,EAChB,eAAgBC,EAAY,OAC5B,QAAS,KACb,EAEMO,EAAc,KAAK,UAAUjM,EAA0B,eAAegM,CAAQ,CAAC,EAC/EE,EAAoB,MAAM,OAAO,OAAO,QAC1C,CAAE,KAAM,UAAW,GAAIN,CAAW,EAClCxH,EACA7C,EAAQ,OAAO0K,CAAW,CAC9B,EAEME,EAAU,CACZ,UAAW,MAAM,KAAKR,CAAS,EAC/B,YAAa,MAAM,KAAK,IAAI,WAAWI,CAAgB,CAAC,EACxD,WAAY,MAAM,KAAKH,CAAU,EACjC,aAAc,MAAM,KAAK,IAAI,WAAWM,CAAiB,CAAC,EAC1D,QAAS,KACb,EAEME,EAAgBpM,EAA0B,eAAemM,CAAO,EAChEE,EAAa,KAAK,UAAUD,CAAa,EAEzCE,EAAM,MAAM,OAAO,OAAO,KAC5B,OACAnC,EACA5I,EAAQ,OAAO8K,CAAU,CAC7B,EAEA,OAAAF,EAAQ,IAAM,MAAM,KAAK,IAAI,WAAWG,CAAG,CAAC,EAIrCH,CACX,OAASpL,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,4BAA6B,CAC1E,MAAOe,EAAM,QACb,UAAAyK,CACJ,CAAC,EACK,IAAI,MAAM,kCAAkCzK,EAAM,OAAO,EAAE,CACrE,CACJ,CAGA,aAAa,eAAewL,EAAkBhB,EAAepB,EAAQ/F,EAAaoI,EAAyB,KAAM,CAC7G,GAAI,CACAxM,EAA0B,gBAAgBuL,EAAe,UAAW,CAAC,SAAS,CAAC,EAC/EvL,EAA0B,gBAAgBmK,EAAQ,OAAQ,CAAC,QAAQ,CAAC,EACpEnK,EAA0B,gBAAgBoE,EAAa,UAAW,CAAC,SAAS,CAAC,EAE7E,IAAM6G,EAAiB,CAAC,YAAa,cAAe,aAAc,eAAgB,MAAO,SAAS,EAClG,QAAWrB,KAASqB,EAChB,GAAI,CAACsB,EAAiB3C,CAAK,EACvB,MAAM,IAAI,MAAM,2BAA2BA,CAAK,EAAE,EAI1D,IAAM6C,EAAc,CAAE,GAAGF,CAAiB,EAC1C,OAAOE,EAAY,IACnB,IAAMC,EAAoB1M,EAA0B,eAAeyM,CAAW,EACxEJ,EAAa,KAAK,UAAUK,CAAiB,EASnD,GAAI,CAPa,MAAM,OAAO,OAAO,OACjC,OACAvC,EACA,IAAI,WAAWoC,EAAiB,GAAG,EACnC,IAAI,YAAY,EAAE,OAAOF,CAAU,CACvC,EAGI,MAAArM,EAA0B,UAAU,IAAI,QAAS,0BAA2B,CACxE,cAAe,OAAO,KAAKuM,CAAgB,EAC3C,UAAWA,EAAiB,KAAK,MACrC,CAAC,EACK,IAAI,MAAM,oDAAoD,EAGxE,IAAMX,EAAa,IAAI,WAAWW,EAAiB,UAAU,EACvDI,EAAe,IAAI,WAAWJ,EAAiB,YAAY,EAE3DK,EAA0B,MAAM,OAAO,OAAO,QAChD,CAAE,KAAM,UAAW,GAAIhB,CAAW,EAClCxH,EACAuI,CACJ,EAEMV,EAAc,IAAI,YAAY,EAAE,OAAOW,CAAuB,EAC9DZ,EAAW,KAAK,MAAMC,CAAW,EAEvC,GAAI,CAACD,EAAS,IAAM,CAACA,EAAS,WAAaA,EAAS,iBAAmB,QAAa,CAACA,EAAS,eAC1F,MAAM,IAAI,MAAM,4BAA4B,EAGhD,IAAMa,EAAa,KAAK,IAAI,EAAIb,EAAS,UACzC,GAAIa,EAAa,KACb,MAAM,IAAI,MAAM,yCAAyC,EAG7D,GAAIL,IAA2B,KAAM,CAKjC,GAAIR,EAAS,eAAiBQ,EAC1B,MAAAxM,EAA0B,UAAU,IAAI,QAAS,gEAAiE,CAC9G,SAAUwM,EACV,SAAUR,EAAS,eACnB,UAAWA,EAAS,EACxB,CAAC,EACK,IAAI,MAAM,4CAA4CQ,CAAsB,SAASR,EAAS,cAAc,EAAE,EACjH,GAAIA,EAAS,eAAiBQ,EAAyB,GAC1D,MAAM,IAAI,MAAM,kDAAkDA,CAAsB,SAASR,EAAS,cAAc,EAAE,CAElI,CAEA,IAAML,EAAY,IAAI,WAAWY,EAAiB,SAAS,EACrDb,EAAc,IAAI,WAAWa,EAAiB,WAAW,EAEzDO,EAAyB,MAAM,OAAO,OAAO,QAC/C,CAAE,KAAM,UAAW,GAAInB,CAAU,EACjCJ,EACAG,CACJ,EAGMqB,EADgB,IAAI,WAAWD,CAAsB,EACrB,MAAM,EAAGd,EAAS,cAAc,EAGhEpG,EADU,IAAI,YAAY,EACR,OAAOmH,CAAe,EAE9C,OAAA/M,EAA0B,UAAU,IAAI,OAAQ,iCAAkC,CAC9E,UAAWgM,EAAS,GACpB,eAAgBA,EAAS,eACzB,WAAY,KAAK,MAAMa,EAAa,GAAI,EAAI,GAChD,CAAC,EAEM,CACH,QAASjH,EACT,UAAWoG,EAAS,GACpB,UAAWA,EAAS,UACpB,eAAgBA,EAAS,cAC7B,CACJ,OAASjL,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,4BAA6B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAChG,IAAI,MAAM,kCAAkCA,EAAM,OAAO,EAAE,CACrE,CACJ,CAEA,OAAO,sBAAuB,CAC1B,GAAIf,EAA0B,kBAC1B,OAAOA,EAA0B,kBAGrC,GAAI,OAAO,OAAW,KAAe,CAAC,QAAQ,SAC1C,MAAM,IAAI,MAAM,mEAAmE,EAGvF,OAAAA,EAA0B,kBAAoBgN,GAAgB,MAAM,EAC7DhN,EAA0B,iBACrC,CAIA,OAAO,gBAAgB4F,EAAS,CAC5B,GAAI,OAAOA,GAAY,SACnB,MAAM,IAAI,MAAM,0BAA0B,EAG9C,IAAMQ,EAAYpG,EAA0B,qBAAqB,EAAE,SAAS4F,EAAS,CACjF,aAAc,CAAC,EACf,aAAc,CAAC,EACf,wBAAyB,GACzB,YAAa,CAAC,SAAU,QAAS,MAAO,OAAQ,UAAU,EAC1D,YAAa,CAAC,OAAO,EACrB,aAAc,GACd,oBAAqB,GACrB,aAAc,CACV,KAAM,GACN,IAAK,GACL,WAAY,GACZ,OAAQ,EACZ,CACJ,CAAC,EAED,OAAO,OAAOQ,CAAS,EAAE,KAAK,EAAE,UAAU,EAAG,GAAI,CACrD,CAGA,OAAO,cAAe,CAClB,OAAO,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,CAChE,CAGA,aAAa,wBAAwBW,EAAS,CAC1C,GAAI,CACA,IAAMxF,EAAU,IAAI,YACd0F,EAAW,IAAI,WAAWF,CAAO,EAGjC2D,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWzD,CAAQ,EAQjE,OAPkB,MAAM,KAAK,IAAI,WAAWyD,CAAU,CAAC,EAGzB,IAAIxE,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAKnF,OAASnF,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,qCAAsC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACzG,IAAI,MAAM,uCAAuC,CAC3D,CACJ,CAEA,OAAO,oBAAoBkF,EAAGC,EAAG,CAC7B,IAAM+G,EAAO,OAAOhH,GAAM,SAAWA,EAAI,KAAK,UAAUA,CAAC,EACnDiH,EAAO,OAAOhH,GAAM,SAAWA,EAAI,KAAK,UAAUA,CAAC,EAEzD,GAAI+G,EAAK,SAAWC,EAAK,OAAQ,CAC7B,IAAIC,EAAQ,EACZ,QAASxM,EAAI,EAAGA,EAAI,KAAK,IAAIsM,EAAK,OAAQC,EAAK,MAAM,EAAGvM,IACpDwM,IAAUF,EAAK,WAAWtM,EAAIsM,EAAK,MAAM,GAAK,IAAMC,EAAK,WAAWvM,EAAIuM,EAAK,MAAM,GAAK,GAE5F,MAAO,EACX,CAEA,IAAI7B,EAAS,EACb,QAAS1K,EAAI,EAAGA,EAAIsM,EAAK,OAAQtM,IAC7B0K,GAAU4B,EAAK,WAAWtM,CAAC,EAAIuM,EAAK,WAAWvM,CAAC,EAGpD,OAAO0K,IAAW,CACtB,CAEA,OAAO,0BAA0B+B,EAAMC,EAAM,CACzC,GAAI,CAAC,MAAM,QAAQD,CAAI,GAAK,CAAC,MAAM,QAAQC,CAAI,EAC3C,MAAO,GAGX,GAAID,EAAK,SAAWC,EAAK,OAAQ,CAC7B,IAAIF,EAAQ,EACNG,EAAS,KAAK,IAAIF,EAAK,OAAQC,EAAK,MAAM,EAChD,QAAS1M,EAAI,EAAGA,EAAI2M,EAAQ3M,IACxBwM,IAAUC,EAAKzM,EAAIyM,EAAK,MAAM,GAAK,IAAMC,EAAK1M,EAAI0M,EAAK,MAAM,GAAK,GAEtE,MAAO,EACX,CAEA,IAAIhC,EAAS,EACb,QAAS,EAAI,EAAG,EAAI+B,EAAK,OAAQ,IAC7B/B,GAAU+B,EAAK,CAAC,EAAIC,EAAK,CAAC,EAG9B,OAAOhC,IAAW,CACtB,CAMA,aAAa,mBAAmBlK,EAAMhB,EAAKoN,EAAK,CAC5C,GAAI,CACA,IAAMlM,EAAa,OAAOF,GAAS,SAAWA,EAAO,KAAK,UAAUA,CAAI,EAClEI,EAAU,IAAI,YACdI,EAAaJ,EAAQ,OAAOF,CAAU,EACtCmM,EAAYjM,EAAQ,OAAOgM,CAAG,EAG9B7L,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAG9CE,EAAY,MAAM,OAAO,OAAO,QAClC,CACI,KAAM,UACN,GAAIF,EACJ,eAAgB8L,CACpB,EACArN,EACAwB,CACJ,EAGME,EAAmB,CACrB,QAAS,MACT,GAAI,MAAM,KAAKH,CAAE,EACjB,KAAM,MAAM,KAAK,IAAI,WAAWE,CAAS,CAAC,EAC1C,IAAK2L,EACL,UAAW,KAAK,IAAI,CACxB,EAEMzL,EAAgB,KAAK,UAAUD,CAAgB,EAC/CG,EAAgBT,EAAQ,OAAOO,CAAa,EAElD,OAAO9B,EAA0B,oBAAoBgC,CAAa,CACtE,OAASjB,EAAO,CACZ,MAAM,IAAI,MAAM,0BAA0BA,EAAM,OAAO,EAAE,CAC7D,CACJ,CAMA,aAAa,mBAAmBgB,EAAe5B,EAAKsN,EAAa,CAC7D,GAAI,CACA,IAAMzL,EAAgBhC,EAA0B,oBAAoB+B,CAAa,EAC3ED,EAAgB,IAAI,YAAY,EAAE,OAAOE,CAAa,EACtDH,EAAmB,KAAK,MAAMC,CAAa,EAEjD,GAAI,CAACD,EAAiB,SAAW,CAACA,EAAiB,IAAM,CAACA,EAAiB,MAAQ,CAACA,EAAiB,IACjG,MAAM,IAAI,MAAM,+BAA+B,EAInD,GAAIA,EAAiB,MAAQ4L,EACzB,MAAM,IAAI,MAAM,oDAAoD,EAGxE,IAAM/L,EAAK,IAAI,WAAWG,EAAiB,EAAE,EACvCD,EAAY,IAAI,WAAWC,EAAiB,IAAI,EAChD2L,EAAY,IAAI,YAAY,EAAE,OAAO3L,EAAiB,GAAG,EAGzDI,EAAY,MAAM,OAAO,OAAO,QAClC,CACI,KAAM,UACN,GAAIP,EACJ,eAAgB8L,CACpB,EACArN,EACAyB,CACJ,EAEMM,EAAkB,IAAI,YAAY,EAAE,OAAOD,CAAS,EAE1D,GAAI,CACA,OAAO,KAAK,MAAMC,CAAe,CACrC,MAAQ,CACJ,OAAOA,CACX,CACJ,OAASnB,EAAO,CACZ,MAAM,IAAI,MAAM,0BAA0BA,EAAM,OAAO,EAAE,CAC7D,CACJ,CAGA,MAAO,CACCf,EAA0B,WAAa,OAAOA,EAA0B,UAAU,MAAS,YAC3FA,EAA0B,UAAU,KAAK,CAEjD,CACJ,ECzuFO,IAAM0N,GAAoB,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,EACrFC,GAAc,CACvB,GAAM,CACF,SAAY,KACZ,WAAc,UACd,KAAQ,KACR,IAAO,MACP,KAAQ,GACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,UACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,cACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,aACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,+DACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,6CACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,UACZ,WAAc,2BACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,qBACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,uCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,6CACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,iCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,iCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,2BACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,CACJ,EAIaC,GAAuB,CAChC,GAAM,CACF,wBAAyB,0CACzB,uBAAwB,kBACxB,2BAA4B,SAChC,EACA,GAAM,CACF,wBAAyB,wCACzB,uBAAwB,oBACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,kDACzB,uBAAwB,sBACxB,2BAA4B,QAChC,EACA,GAAM,CACF,wBAAyB,8DACzB,uBAAwB,qBACxB,2BAA4B,QAChC,EACA,GAAM,CACF,wBAAyB,oNACzB,uBAAwB,0GACxB,2BAA4B,4CAChC,EACA,GAAM,CACF,wBAAyB,+MACzB,uBAAwB,yFACxB,2BAA4B,4CAChC,EACA,GAAM,CACF,wBAAyB,2EACzB,uBAAwB,uCACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,yGACzB,uBAAwB,wCACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,2KACzB,uBAAwB,yFACxB,2BAA4B,6CAChC,EACA,GAAM,CACF,wBAAyB,gLACzB,uBAAwB,4EACxB,2BAA4B,gCAChC,EACA,GAAM,CACF,wBAAyB,oHACzB,uBAAwB,4EACxB,2BAA4B,gCAChC,EACA,GAAM,CACF,wBAAyB,uKACzB,uBAAwB,mFACxB,2BAA4B,0BAChC,EACA,GAAM,CACF,wBAAyB,+JACzB,uBAAwB,6EACxB,2BAA4B,6CAChC,CACJ,ECpKO,IAAMC,GAAa,CACtB,iBAAkB,WAClB,wBAAyB,0CACzB,uBAAwB,kBACxB,2BAA4B,UAC5B,cAAe,QACf,eAAgB,SAChB,cAAe,QACf,aAAc,OACd,iBAAkB,mBAClB,eAAgB,6BAChB,qBAAsB,iDACtB,cAAe,OACf,gBAAiB,SACjB,kBAAmB,0BACnB,iBAAkB,kBAClB,iBAAkB,mBAClB,mBAAoB,mCACpB,kBAAmB,wCACnB,kBAAmB,qCACnB,eAAgB,yCAChB,kBAAmB,6BACnB,wBAAyB,4KACzB,mBAAoB,oBACpB,qBAAsB,WACtB,iBAAkB,qBAClB,iBAAkB,0BAClB,qBAAsB,UACtB,wBAAyB,kBACzB,sBAAuB,kBACvB,iBAAkB,mIAClB,iBAAkB,CACd,aACA,cACA,QACA,OACJ,EACA,qBAAsB,WACtB,wBAAyB,SACzB,sBAAuB,kBACvB,iBAAkB,oIAClB,iBAAkB,CACd,WACA,UACJ,EACA,qBAAsB,UACtB,wBAAyB,kBACzB,sBAAuB,kBACvB,iBAAkB,iIAClB,iBAAkB,CACd,iBACA,aACJ,EACA,qBAAsB,UACtB,wBAAyB,cACzB,sBAAuB,sBACvB,iBAAkB,6GAClB,iBAAkB,CACd,iBACA,eACJ,EACA,qBAAsB,YACtB,wBAAyB,aACzB,sBAAuB,uBACvB,iBAAkB,qGAClB,iBAAkB,CACd,cACA,SACJ,EACA,mBAAoB,uBACpB,mBAAoB,0BACpB,sBAAuB,uFACvB,sBAAuB,mBACvB,yBAA0B,8EAC1B,yBAA0B,qBAC1B,uBAAwB,mBACxB,sBAAuB,0EACvB,qBAAsB,uBACtB,kBAAmB,sBACnB,kBAAmB,6BACnB,qBAAsB,0HACtB,mBAAoB,0CACpB,mBAAoB,wBACpB,sBAAuB,eACvB,mBAAoB,gBACpB,sBAAuB,yBACvB,kBAAmB,+GACnB,kBAAmB,4EACnB,oBAAqB,uBACrB,mBAAoB,sFACpB,kBAAmB,6BACnB,kBAAmB,iBACnB,kBAAmB,sBACnB,qBAAsB,wCACtB,oBAAqB,gBACrB,yBAA0B,mCAC1B,gBAAiB,UACjB,mBAAoB,mBACpB,mBAAoB,uBACpB,iBAAkB,4CAClB,kBAAmB,aACnB,sBAAuB,CACnB,qCACA,6CACA,6BACA,6BACA,gCACA,cACJ,EACA,mBAAoB,gBACpB,iBAAkB,kDAClB,kBAAmB,cACnB,sBAAuB,CACnB,iCACA,sCACA,oCACA,yBACA,wCACJ,EACA,mBAAoB,oBACpB,iBAAkB,mDAClB,kBAAmB,cACnB,sBAAuB,CACnB,0CACA,2CACA,iCACA,8CACA,gCACJ,EACA,mBAAoB,sBACpB,iBAAkB,6CAClB,kBAAmB,YACnB,sBAAuB,CACnB,oDACA,6CACA,wCACA,uCACA,6CACJ,EACA,mBAAoB,wBACpB,iBAAkB,wCAClB,kBAAmB,cACnB,sBAAuB,CACnB,gDACA,yCACA,oCACA,kCACA,sCACJ,EACA,mBAAoB,4BACpB,iBAAkB,sEAClB,kBAAmB,YACnB,sBAAuB,CACnB,0CACA,0CACA,gCACA,iDACA,4CACA,kCACA,gCACA,gCACA,4BACA,0BACA,sBACA,uBACJ,EACA,mBAAoB,kBACpB,iBAAkB,oDAClB,kBAAmB,aACnB,sBAAuB,CACnB,iCACA,+BACA,oCACA,0BACA,yBACA,+BACA,iBACA,+BACJ,EACA,mBAAoB,uBACpB,iBAAkB,yDAClB,kBAAmB,aACnB,sBAAuB,CACnB,sCACA,qCACA,qCACA,yCACA,oCACA,2BACA,2CACA,uBACJ,EACA,mBAAoB,uBACpB,iBAAkB,qCAClB,kBAAmB,MACnB,sBAAuB,CACnB,uCACA,2CACA,8CACA,oDACA,+CACA,wCACA,qDACA,4CACJ,EACA,oBAAqB,iBACrB,kBAAmB,yCACnB,mBAAoB,UACpB,uBAAwB,CACpB,iCACA,8CACA,kCACA,+BACA,uBACA,yBACA,0BACA,0BACJ,EACA,oBAAqB,4BACrB,kBAAmB,uCACnB,mBAAoB,UACpB,uBAAwB,CACpB,2CACA,8BACA,8BACA,4BACA,6BACA,iCACA,0BACA,6BACJ,EACA,oBAAqB,wBACrB,kBAAmB,8BACnB,mBAAoB,OACpB,uBAAwB,CACpB,oBACA,yBACA,yBACA,iCACA,qBACA,uCACA,+BACA,sBACJ,EACA,oBAAqB,uBACrB,kBAAmB,8BACnB,mBAAoB,QACpB,uBAAwB,CACpB,2BACA,2BACA,wBACA,wCACA,kCACA,uBACA,sBACA,8BACJ,EACA,kBAAmB,iCACnB,kBAAmB,6BACnB,kBAAmB,kCACnB,0BAA2B,wBAC3B,wBAAyB,uBACzB,yBAA0B,kDAC1B,uBAAwB,wBACxB,4BAA6B,wBAC7B,sBAAuB,iFACvB,2BAA4B,4EAC5B,sBAAuB,uBACvB,wBAAyB,+CACzB,mCAAoC,iCACpC,2BAA4B,iFAC5B,mBAAoB,oDACpB,yBAA0B,uGAC1B,eAAgB,wBAChB,cAAe,wHACf,oBAAqB,0BACrB,qBAAsB,iBACtB,iBAAkB,eAClB,mBAAoB,YACpB,kBAAmB,cACnB,eAAgB,oBAChB,cAAe,oBACf,iBAAkB,UAClB,iBAAkB,yBAClB,kBAAmB,mBACnB,uBAAwB,wDACxB,kBAAmB,yBACnB,iBAAkB,uDAClB,cAAe,UACf,cAAe,UACf,YAAa,QACb,eAAgB,iBAChB,eAAgB,uBAChB,mBAAoB,kCACpB,eAAgB,4BAChB,mBAAoB,gCACpB,eAAgB,YAChB,mBAAoB,oCACpB,mBAAoB,oBACpB,kBAAmB,8EACnB,wBAAyB,6DACzB,uBAAwB,oDACxB,YAAa,SACb,qBAAsB,iBACtB,mBAAoB,4CACpB,uBAAwB,uCACxB,mBAAoB,kBACpB,kBAAmB,yFACnB,SAAU,KACV,YAAa,6BACb,gBAAiB,uBACjB,oBAAqB,2BACrB,gBAAiB,SACjB,cAAe,OACf,cAAe,OACf,cAAe,OACf,gBAAiB,SACjB,cAAe,OACf,yBAA0B,uBAC1B,0BAA2B,oBAC3B,gBAAiB,0BACjB,iBAAkB,2BAClB,cAAe,2CACf,WAAY,eACZ,cAAe,gCACf,cAAe,iBACf,UAAW,0FACX,WAAY,MACZ,YAAa,sBACb,eAAgB,sBAChB,eAAgB,sBAChB,YAAa,mBACb,eAAgB,mDAChB,YAAa,qIACb,kBAAmB,2BACnB,iBAAkB,oCAClB,kBAAmB,2BACnB,iBAAkB,uBAClB,eAAgB,6HAChB,kBAAmB,UACnB,WAAY,eACZ,cAAe,gBACf,iBAAkB,kBAClB,iBAAkB,cAClB,gBAAiB,mGACjB,mBAAoB,oGACpB,cAAe,sBACf,kBAAmB,4EACnB,aAAc,eACd,aAAc,SACd,YAAa,QACb,qBAAsB,0CACtB,iBAAkB,+BAClB,eAAgB,mBAChB,cAAe,kDACf,wBAAyB,kBACzB,oBAAqB,cACrB,aAAc,aACd,eAAgB,QAChB,iBAAkB,MAClB,oBAAqB,iBACrB,sBAAuB,oCACvB,0BAA2B,mCAC3B,0BAA2B,4BAC3B,qBAAsB,sBACtB,oBAAqB,2BACrB,eAAgB,0EAChB,qBAAsB,oGACtB,qBAAsB,cACtB,eAAgB,eAChB,kBAAmB,UACnB,oBAAqB,kBACrB,mBAAoB,yFACpB,iBAAkB,sCAClB,iBAAkB,+BAClB,iBAAkB,2CAClB,mBAAoB,mBACpB,wBAAyB,qBACzB,uBAAwB,gJACxB,kBAAmB,8BACnB,iBAAkB,4EAClB,kBAAmB,4BACnB,iBAAkB,8DAClB,kBAAmB,gCACnB,iBAAkB,6EAClB,kBAAmB,kBACnB,iBAAkB,uFAClB,gBAAiB,SACjB,eAAgB,eAChB,kBAAmB,sCACnB,wBAAyB,0DACzB,qBAAsB,mEACtB,qBAAsB,uEACtB,WAAY,iBACZ,iBAAkB,oBAClB,aAAc,UACd,YAAa,SACb,aAAc,iBACd,YAAa,yBACb,gBAAiB,yDACjB,cAAe,gBACf,gBAAiB,wBACjB,cAAe,SACf,cAAe,SACf,gBAAiB,WACjB,gBAAiB,uBACjB,gBAAiB,iBACjB,sBAAuB,wBACvB,qBAAsB,+BACtB,YAAa,iDACb,gBAAiB,gBACjB,qBAAsB,sBACtB,iBAAkB,iBAClB,sBAAuB,YACvB,YAAa,cACb,kBAAmB,mBACnB,eAAgB,gBAChB,cAAe,SACf,eAAgB,UAChB,WAAY,WACZ,cAAe,SACf,iBAAkB,aAClB,qBAAsB,uBACtB,kBAAmB,cACnB,gBAAiB,YACjB,aAAc,QACd,aAAc,QACd,cAAe,SACf,gBAAiB,WACjB,eAAgB,qBAChB,wBAAyB,YACzB,mBAAoB,cACpB,mBAAoB,cACpB,YAAa,YACb,eAAgB,eAChB,aAAc,aACd,aAAc,aACd,oBAAqB,8BACrB,iBAAkB,kGAClB,eAAgB,SAChB,mBAAoB,sBACpB,qBAAsB,wBACtB,mBAAoB,mBACpB,mBAAoB,cACpB,gBAAiB,oFACjB,qBAAsB,kBACtB,eAAgB,SAChB,gBAAiB,UACjB,eAAgB,gBAChB,gBAAiB,iBACjB,cAAe,QACf,kBAAmB,mBACnB,eAAgB,eAChB,cAAe,QACf,kBAAmB,SACnB,gBAAiB,UACjB,gBAAiB,gBACjB,iBAAkB,oBAClB,oBAAqB,0BACrB,mBAAoB,+DACpB,qBAAsB,8BACtB,mBAAoB,gHACpB,qBAAsB,+BACtB,mBAAoB,oBACpB,yBAA0B,0BAC1B,sBAAuB,2CACvB,oBAAqB,8CACrB,kBAAmB,0GACnB,mBAAoB,2IACpB,oBAAqB,qFACrB,mBAAoB,2BACpB,qBAAsB,uFACtB,kBAAmB,2OACnB,qBAAsB,6LACtB,sBAAuB,8GACvB,iBAAkB,2HAClB,uBAAwB,wIACxB,sBAAuB,oBACvB,0BAA2B,0CAC3B,uBAAwB,kGACxB,qBAAsB,kCACtB,gBAAiB,sBACjB,wBAAyB,iEACzB,wBAAyB,8CACzB,wBAAyB,+EACzB,oBAAqB,kEACrB,cAAe,uBACf,kBAAmB,4BACnB,uBAAwB,wCACxB,iBAAkB,aAClB,mBAAoB,YACpB,oBAAqB,gBACrB,sBAAuB,gBACvB,sBAAuB,kBACvB,kBAAmB,cACnB,mBAAoB,eACpB,0BAA2B,oBAC3B,uBAAwB,oBACxB,uBAAwB,2BACxB,qBAAsB,0BACtB,yBAA0B,sBAC1B,yBAA0B,sBAC1B,gBAAiB,2BACjB,oBAAqB,iBACrB,iBAAkB,cAClB,iBAAkB,6BAClB,uBAAwB,4CACxB,6BAA8B,uCAC9B,uBAAwB;AAAA,mEACxB,8BAA+B,sCAC/B,mBAAoB,kCACpB,YAAa,eACb,iBAAkB,aAClB,iBAAkB,aAClB,mBAAoB,uBACpB,iBAAkB,qBAClB,eAAgB,UAChB,iBAAkB,2CAClB,gBAAiB,mEACjB,gBAAiB,YACjB,qBAAsB,+CACtB,sBAAuB,kBACvB,mBAAoB,+BACpB,kBAAmB,cACnB,oBAAqB,+CACrB,sBAAuB,kBACvB,kBAAmB,cACnB,mBAAoB,cACpB,eAAgB,2BAChB,yBAA0B,sBAC1B,eAAgB,UAChB,iBAAkB,YAClB,eAAgB,WAChB,qBAAsB,qEACtB,iBAAkB,YAClB,iBAAkB,YAClB,yBAA0B,2BAC1B,iBAAkB,YAClB,mBAAoB,cACpB,oBAAqB,qBACrB,cAAe,UACf,gBAAiB,WACjB,iBAAkB,aAClB,eAAgB,WAChB,gBAAiB,YACjB,mBAAoB,iBACpB,kBAAmB,cACnB,kBAAmB,cACnB,gBAAiB,iBACjB,cAAe,2BACf,kBAAmB,yBACnB,kBAAmB,8CACnB,iBAAkB,kBAClB,wBAAyB,iBACzB,gBAAiB,8BACjB,eAAgB,UAChB,iBAAkB,+BAClB,sBAAuB,6BACvB,sBAAuB,6BACvB,sBAAuB,qCACvB,gBAAiB,yEACjB,iBAAkB,sEAClB,yBAA0B,4BAC1B,6BAA8B,2CAC9B,uBAAwB,0BACxB,2BAA4B,2BAC5B,sBAAuB,8FACvB,oBAAqB,mGACrB,yBAA0B,0BAC1B,uBAAwB,oBACxB,oBAAqB,4BACrB,4BAA6B,sCAC7B,0BAA2B,oCAC3B,kBAAmB,sCACnB,0BAA2B,6BAC3B,oBAAqB,0BACrB,iBAAkB,6BAClB,0BAA2B,uBAC3B,qBAAsB,iEACtB,mBAAoB,+DACpB,qBAAsB,kDACtB,oBAAqB,uGACrB,wBAAyB,mGACzB,uBAAwB,4DACxB,iBAAkB,yBAClB,eAAgB,uBAChB,qBAAsB,iDACtB,yBAA0B,wDAC1B,gBAAiB,qIACjB,uBAAwB,8EACxB,yBAA0B,0EAC1B,8BAA+B,oGAC/B,qBAAsB,0DACtB,cAAe,iEACf,2BAA4B,4EAC5B,qBAAsB,8EACtB,mBAAoB,iBACpB,mBAAoB,gBACpB,gBAAiB,yDACjB,cAAe,yBACf,eAAgB,qCAChB,sBAAuB,yDACvB,yBAA0B,sBAC1B,eAAgB,wCAChB,sBAAuB,4BACvB,iBAAkB,2BAClB,eAAgB,WAChB,gBAAiB,YACjB,kBAAmB,eACnB,iBAAkB,2CAClB,mBAAoB,8EACpB,uBAAwB,8EACxB,WAAY,qBACZ,UAAW,wBACX,UAAW,yFACX,eAAgB,OAChB,gBAAiB,QACjB,kBAAmB,QACnB,iBAAkB,SAClB,iBAAkB,gCAClB,eAAgB,OAChB,gBAAiB,QACjB,iBAAkB,SAClB,cAAe,MACf,iBAAkB,UAClB,oBAAqB,eACrB,YAAa,OACb,gBAAiB,MACjB,YAAa,MACb,aAAc,OACd,eAAgB,0BAChB,aAAc,SACd,aAAc,QACd,sBAAuB,yCACvB,qBAAsB,YACtB,gBAAiB,OACjB,gBAAiB,OACjB,mBAAoB,UACpB,qBAAsB,YACtB,yBAA0B,uBAC1B,oBAAqB,yBACrB,oBAAqB,iBACrB,yBAA0B,0BAC1B,kBAAmB,SACnB,WAAY,qBACZ,iBAAkB,kBAClB,kBAAmB,mBACnB,oBAAqB,qBACrB,wBAAyB,oBACzB,oBAAqB,eACrB,oBAAqB,OACrB,qBAAsB,gBACtB,yBAA0B,+BAC1B,uBAAwB,kBACxB,qBAAsB,yBACtB,mBAAoB,cACpB,oBAAqB,eACrB,mBAAoB,OACpB,mBAAoB,OACpB,mBAAoB,OACpB,WAAY,OACZ,YAAa,QACb,YAAa,QACb,WAAY,OACZ,WAAY,OACZ,WAAY,OACZ,eAAgB,kCAChB,gBAAiB,SACjB,qBAAsB,eACtB,oBAAqB,cACrB,gBAAiB,SACjB,gCAAiC,oBACjC,gCAAiC,2BACjC,2BAA4B,qBAC5B,iCAAkC,oBAClC,sCAAuC,0BACvC,oBAAqB,0BACrB,iCAAkC,oBAClC,gCAAiC,mBACjC,gCAAiC,mBACjC,mCAAoC,sBACpC,mCAAoC,sBACpC,8BAA+B,iBAC/B,iCAAkC,oBAClC,mCAAoC,uBACpC,6BAA8B,gBAC9B,2BAA4B,wBAC5B,0BAA2B,uBAC3B,mCAAoC,sBACpC,iCAAkC,oBAClC,0BAA2B,kBAC3B,4CAA6C,kCAC7C,qCAAsC,2BACtC,qCAAsC,2BACtC,kCAAmC,wBACnC,kCAAmC,wBACnC,qCAAsC,2BACtC,qCAAsC,2BACtC,wCAAyC,8BACzC,4DAA6D,kDAC7D,uCAAwC,6BACxC,kCAAmC,wBACnC,wCAAyC,8BACzC,uDAAwD,6CACxD,6CAA8C,mCAC9C,gEAAiE,sDACjE,0CAA2C,gCAC3C,mDAAoD,yCACpD,0CAA2C,gCAC3C,mCAAoC,yBACpC,yDAA0D,+CAC1D,qDAAsD,2CACtD,4CAA6C,kCAC7C,wEAAyE,8DACzE,qNAAsN,2MACtN,YAAa,QACb,aAAc,SACd,mBAAoB,yDACpB,uBAAwB,4DACxB,0BAA2B,kEAC3B,yBAA0B,sDAC1B,sBAAuB,+CACvB,oBAAqB,kDACrB,iBAAkB,uCAClB,oBAAqB,gDACrB,gBAAiB,aACjB,kBAAmB,SACnB,oBAAqB,WACrB,iBAAkB,iBAClB,uBAAwB,cACxB,eAAgB,eAChB,cAAe,YACf,eAAgB,QAChB,oBAAqB,yBACrB,kBAAmB,qBACnB,eAAgB,0BAChB,kBAAmB,sBACnB,kBAAmB,cACnB,kBAAmB,+BACnB,qBAAsB,eACtB,iBAAkB,+BAClB,sBAAuB,yBACvB,kBAAmB,6CACnB,mBAAoB,kEACpB,mBAAoB,uBACpB,eAAgB,eAChB,iBAAkB,kBAClB,kBAAmB,kCACnB,mBAAoB,qDACpB,kBAAmB,2BACnB,gBAAiB,wBACjB,iBAAkB,kCAClB,sBAAuB,mDACvB,UAAW,MACX,0BAA2B,2BAC3B,mBAAoB,UACpB,wBAAyB,eACzB,iBAAkB,QAClB,mBAAoB,UACpB,eAAgB,QAChB,qBAAsB,aACtB,oBAAqB,aACrB,iBAAkB,cAClB,aAAc,gBACd,uBAAwB,2BACxB,uBAAwB,2BACxB,iBAAkB,OAClB,oBAAqB,UACrB,kBAAmB,aACnB,gBAAiB,MACjB,uBAAwB,mBACxB,wBAAyB,kCACzB,sBAAuB,oBACvB,yBAA0B,8BAC1B,yBAA0B,8BAC1B,mBAAoB,sBACpB,kCAAmC,8GACnC,iCAAkC,qEAClC,4BAA6B,+FAC7B,6BAA8B,iEAC9B,iCAAkC,gFAClC,0BAA2B,yCAC3B,qBAAsB,qBACtB,gBAAiB,oBACjB,kBAAmB,mBACnB,yBAA0B,WAC1B,cAAe,mBACf,eAAgB,oBAChB,eAAgB,oBAChB,cAAe,mBACf,YAAa,aACb,WAAY,YACZ,YAAa,SACb,oBAAqB,kEACrB,4BAA6B,oDAC7B,mBAAoB,iEACpB,mBAAoB,uBACpB,oBAAqB,wBACrB,2BAA4B,yCAC5B,4BAA6B,uCAC7B,sBAAuB,gBACvB,uBAAwB,gBACxB,4BAA6B,2CAC7B,wBAAyB,0BACzB,0BAA2B,sFAC3B,gCAAiC,mHACjC,mBAAoB,WACpB,uBAAwB,8EACxB,sBAAuB,0EACvB,4BAA6B,8CAC7B,8BAA+B,iDAC/B,gCAAiC,oCACjC,wBAAyB,uDACzB,0BAA2B,+EAC3B,oBAAqB,0CACrB,kBAAmB,yCACnB,uBAAwB,8EACxB,wBAAyB,sDACzB,2BAA4B,+CAC5B,0BAA2B,oGAC3B,oBAAqB,gCACrB,wBAAyB,iEACzB,oBAAqB,8FACrB,gBAAiB,oEACjB,uBAAwB,qDACxB,oBAAqB,4BACrB,iCAAkC,iEAClC,mBAAoB,iDACpB,uBAAwB,iEACxB,sBAAuB,sGACvB,4BAA6B,6FAC7B,+BAAgC,gEAChC,gBAAiB,OACjB,kBAAmB,SACnB,eAAgB,MAChB,gBAAiB,SACjB,yBAA0B,iDAC1B,0BAA2B,yEAC3B,0BAA2B,4LAC3B,sBAAuB,mFACvB,wBAAyB,yBACzB,qBAAsB,8EACtB,uBAAwB,0BACxB,2BAA4B,6DAC5B,2BAA4B,yCAC5B,0BAA2B,sDAC3B,0BAA2B,2CAC3B,oBAAqB,6DACrB,oBAAqB,eACrB,uBAAwB,uFACxB,uBAAwB,eACxB,yBAA0B,qCAC1B,uBAAwB,uCACxB,sBAAuB,mDACvB,4BAA6B,uDAC7B,yBAA0B,qEAC1B,2BAA4B,kBAC5B,sBAAuB,6FACvB,uBAAwB,6CACxB,+BAAgC,iFAChC,kBAAmB,qBACnB,uBAAwB,2FAC5B,EAEMC,GAAW,WAAW,qBAAuB,WAAW,mBAAqB,OAAO,OAAO,IAAI,GACrGA,GAAS,GAAQD,GCn0BjB,IAAME,GAAW,WAAW,qBAAuB,WAAW,mBAAqB,OAAO,OAAO,IAAI,GAGrG,SAASC,GAAWC,EAAM,CACtB,OAAOF,GAASE,CAAI,GAAK,IAC7B,CAEA,IAAMC,GAAc,mBAGb,SAASC,GAAmBC,EAAW,IAAK,CAC/C,IAAMC,EAAU,OAAOD,CAAQ,EAAE,MAAM,GAAG,EAAE,CAAC,EAC7C,OAAOE,GAAkB,SAASD,CAAO,GAAKA,IAAY,KAAiBA,EAAU,IACzF,CAMO,SAASE,GAAoBC,EAAY,CAAC,EAAG,CAChD,QAAWC,KAAOD,EAAW,CACzB,IAAME,EAAQ,OAAOD,CAAG,EAAE,YAAY,EAChCE,EAAQL,GAAkB,KAAML,GAASA,EAAK,YAAY,IAAMS,CAAK,EAC3E,GAAIC,EAAO,OAAOA,EAClB,IAAMC,EAAOF,EAAM,MAAM,GAAG,EAAE,CAAC,EACzBG,EAAUP,GAAkB,KAAML,GAASA,EAAK,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC,IAAMW,CAAI,EAC1F,GAAIC,EAAS,OAAOA,CACxB,CACA,OAAO,IACX,CAOO,SAASC,GAAa,CAAE,SAAAV,EAAW,IAAK,OAAAW,EAAS,KAAM,UAAAP,EAAY,CAAC,CAAE,EAAI,CAAC,EAAG,CACjF,IAAMQ,EAAWb,GAAmBC,CAAQ,EAC5C,OAAIY,IAIAC,GAAab,CAAQ,EAAU,KAE/BW,GAAUT,GAAkB,SAASS,CAAM,EAAUA,EAClDR,GAAoBC,CAAS,GAAK,KAC7C,CAGA,SAASS,GAAab,EAAU,CAC5B,OAAOA,IAAa,KAAOA,IAAa,aAC5C,CAMO,SAASc,GAAWjB,EAAMG,EAAW,IAAK,CAC7C,IAAMe,EAAUhB,GAAmBC,CAAQ,EAErCgB,GADOD,EAAU,OAAOf,CAAQ,EAAE,MAAMe,EAAQ,OAAS,CAAC,EAAI,OAAOf,CAAQ,GACjE,QAAQ,OAAQ,EAAE,EACpC,OAAOH,IAAS,KAAiB,IAAImB,CAAI,GAAK,IAAInB,CAAI,IAAImB,CAAI,EAClE,CAGO,SAASC,GAAepB,EAAM,CACjC,GAAI,CACA,aAAa,QAAQC,GAAaD,CAAI,CAC1C,MAAY,CAEZ,CACJ,CAEO,SAASqB,IAAe,CAC3B,GAAI,CACA,OAAO,aAAa,QAAQpB,EAAW,CAC3C,MAAY,CACR,OAAO,IACX,CACJ,CAOA,IAAIqB,GAAiB,KACd,SAASC,IAAgB,CAC5B,GAAID,GAAgB,OAAOA,GAI3B,IAAME,EAAI,OAAO,OAAW,IAAc,KAAO,OACjD,MAAI,CAACA,GAAK,CAACA,EAAE,SAAiB,MAC9BF,GAAiBT,GAAa,CAC1B,SAAUW,EAAE,SAAS,UAAY,IACjC,OAAQH,GAAa,EACrB,UAAWG,EAAE,WAAW,WAAa,CAAC,CAC1C,CAAC,EACMF,GACX,CAWO,SAASG,GAAUzB,EAAOuB,GAAc,EAAG,CAC9C,OAAOG,GAAY1B,CAAI,GAAG,MAAQ,MAAQ,MAAQ,KACtD,CAEO,SAAS2B,GAAM3B,EAAOuB,GAAc,EAAG,CAC1C,OAAOE,GAAUzB,CAAI,IAAM,KAC/B,CAOO,SAAS4B,GAAU5B,EAAOuB,GAAc,EAAG,CAC9C,OAAOI,GAAM3B,CAAI,EAAI,GAAK,CAC9B,CAwDO,SAAS6B,GAAMC,EAAKC,EAASC,GAAc,EAAG,CACjD,IAAMC,EAAQC,GAAWH,CAAM,IAAID,CAAG,GAAKI,GAAW,IAAc,IAAIJ,CAAG,EAC3E,OAAO,MAAM,QAAQG,CAAK,EAAIA,EAAQ,CAAC,CAC3C,CAQO,SAASE,GAAc,CAAE,SAAAC,EAAW,IAAK,OAAAC,EAAS,IAAe,EAAI,CAAC,EAAG,CAC5E,OAAOC,GAAkB,IAAKC,IAAU,CACpC,KAAAA,EACA,KAAMC,GAAWD,EAAMH,CAAQ,EAC/B,SAAUK,GAAYF,CAAI,GAAG,UAAYA,EAGzC,MAAOE,GAAYF,CAAI,GAAG,YAAcA,EAExC,KAAME,GAAYF,CAAI,GAAG,MAAQA,EAAK,YAAY,EAGlD,IAAKE,GAAYF,CAAI,GAAG,KAAO,MAC/B,UAAWA,IAASF,CACxB,EAAE,CACN,CAMO,SAASK,EAAEZ,EAAKa,EAAMZ,EAASC,GAAc,EAAG,CACnD,IAAMY,EACFV,GAAWH,CAAM,IAAID,CAAG,GAIxBe,GAAqBd,CAAM,IAAID,CAAG,GAClCI,GAAW,IAAc,IAAIJ,CAAG,GAChCA,EACJ,OAAKa,EACE,OAAOC,CAAQ,EAAE,QAAQ,aAAc,CAACE,EAAOC,IAClD,OAAO,UAAU,eAAe,KAAKJ,EAAMI,CAAI,EAAI,OAAOJ,EAAKI,CAAI,CAAC,EAAID,CAC5E,EAHkBF,CAItB,CChQA,IAAMI,GAAN,MAAMC,CAA0B,CAC5B,MAAOC,GAAY,KACnB,MAAOC,GAAc,OAAO,2BAA2B,EAEvD,OAAO,aAAc,CACjB,OAAK,KAAKD,KACN,KAAKA,GAAY,IAAID,GAElB,KAAKC,EAChB,CAEAE,GAAsB,KACtBC,GAAU,GACVC,GAAiB,OAEjB,sBAAsBC,EAAQ,CAC1B,GAAI,EAAEA,aAAkBC,IACpB,MAAM,IAAI,MAAM,uCAAuC,EAE3D,KAAKJ,GAAsBG,EAC3B,KAAKF,GAAU,EACnB,CAEA,uBAAwB,CACpB,OAAO,KAAKD,EAChB,CAEA,UAAW,CACP,OAAO,KAAKC,IAAW,KAAKD,KAAwB,IACxD,CAEA,YAAa,CACT,KAAKC,GAAU,GACf,KAAKD,GAAsB,IAC/B,CAEA,kBAAmB,CACf,OAAO,KAAKE,EAChB,CAEA,iBAAiBG,EAAO,CAChB,CAAC,MAAO,SAAU,MAAM,EAAE,SAASA,CAAK,IACxC,KAAKH,GAAiBG,EAE9B,CACJ,EAMMC,GAAN,KAA2B,CACvB,MAAOC,GAAiB,IAAI,IAAI,CAC5B,kCACA,wBACA,mBACA,kBACA,oBACA,uBACA,qBACA,gBACA,iBACA,mBACJ,CAAC,EAED,OAAO,cAAcC,EAAO,CACxB,IAAMC,EAAUD,EAAM,SAAWA,EAEjC,QAAWE,KAAW,KAAKH,GACvB,GAAIE,EAAQ,SAASC,CAAO,EACxB,OAAOA,EAIf,eAAQ,MAAM,0CAAoC,CAC9C,QAASF,EAAM,QACf,MAAOA,EAAM,MACb,UAAW,IAAI,KAAK,EAAE,YAAY,CACtC,CAAC,EAEM,sBACX,CAEA,OAAO,iBAAiBG,EAAOC,EAAU,CAAC,EAAG,CACzC,QAAQ,KAAK,4BAAsB,CAC/B,MAAAD,EACA,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,GAAGC,CACP,CAAC,CACL,CACJ,EAMMC,GAAN,KAAyB,CACrB,aAAa,iBAAiBC,EAAUC,EAAY,CAChD,GAAI,CAEA,IAAMC,EADU,IAAI,YAAY,EACX,OAAO,KAAK,UAAU,CACvC,OAAQF,EAAS,OACjB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,UAAWA,EAAS,UACpB,QAASA,EAAS,SAAW,KACjC,CAAC,CAAC,EAEIG,EAAY,MAAM,OAAO,OAAO,KAClC,oBACAF,EACAC,CACJ,EAEA,OAAO,MAAM,KAAK,IAAI,WAAWC,CAAS,CAAC,CAC/C,OAAST,EAAO,CACZ,MAAAF,GAAqB,iBAAiB,mBAAoB,CAAE,MAAOE,EAAM,OAAQ,CAAC,EAC5E,IAAI,MAAM,8BAA8B,CAClD,CACJ,CAEA,aAAa,mBAAmBM,EAAUG,EAAWC,EAAW,CAC5D,GAAI,CAEA,IAAMF,EADU,IAAI,YAAY,EACX,OAAO,KAAK,UAAU,CACvC,OAAQF,EAAS,OACjB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,UAAWA,EAAS,UACpB,QAASA,EAAS,SAAW,KACjC,CAAC,CAAC,EAEIK,EAAkB,IAAI,WAAWF,CAAS,EAE1CG,EAAU,MAAM,OAAO,OAAO,OAChC,oBACAF,EACAC,EACAH,CACJ,EAEA,OAAKI,GACDd,GAAqB,iBAAiB,oBAAqB,CAAE,OAAQQ,EAAS,MAAO,CAAC,EAGnFM,CACX,OAASZ,EAAO,CACZ,OAAAF,GAAqB,iBAAiB,sBAAuB,CAAE,MAAOE,EAAM,OAAQ,CAAC,EAC9E,EACX,CACJ,CACJ,EAMMa,GAAN,KAA2B,CACvB,OAAO,iBAAmB,KAAO,KAEjC,OAAO,mBAAmBZ,EAAS,CAC/B,IAAMa,EAAgB,KAAK,UAAUb,CAAO,EACtCc,EAAc,IAAI,KAAK,CAACD,CAAa,CAAC,EAAE,KAE9C,GAAIC,EAAc,KAAK,iBACnB,MAAAjB,GAAqB,iBAAiB,oBAAqB,CACvD,KAAMiB,EACN,MAAO,KAAK,gBAChB,CAAC,EACK,IAAI,MAAM,mBAAmB,EAGvC,MAAO,EACX,CACJ,EAEMC,GAAN,KAAuB,CACnB,aAAc,CACV,KAAK,MAAQ,IAAI,GACrB,CAEA,MAAM,SAASC,EAAKC,EAAW,CAK3B,KAAO,KAAK,MAAM,IAAID,CAAG,GACrB,MAAM,KAAK,MAAM,IAAIA,CAAG,EAG5B,IAAIE,EACEC,EAAc,IAAI,QAAQC,GAAW,CAAEF,EAAcE,CAAS,CAAC,EACrE,KAAK,MAAM,IAAIJ,EAAKG,CAAW,EAE/B,GAAI,CACA,OAAO,MAAMF,EAAU,CAC3B,QAAE,CACE,KAAK,MAAM,OAAOD,CAAG,EACrBE,EAAY,CAChB,CACJ,CACJ,EAGMG,GAAN,KAAkB,CACd,YAAYC,EAAaC,EAAU,CAC/B,KAAK,YAAcD,EACnB,KAAK,SAAWC,EAChB,KAAK,SAAW,IAAI,GACxB,CAEA,UAAUC,EAAY,CAClB,IAAMC,EAAM,KAAK,IAAI,EACfC,EAAcD,EAAM,KAAK,SAE1B,KAAK,SAAS,IAAID,CAAU,GAC7B,KAAK,SAAS,IAAIA,EAAY,CAAC,CAAC,EAKpC,IAAMG,EAFe,KAAK,SAAS,IAAIH,CAAU,EAEd,OAAOI,GAAQA,EAAOF,CAAW,EAGpE,OAFA,KAAK,SAAS,IAAIF,EAAYG,CAAa,EAEvCA,EAAc,QAAU,KAAK,aAC7B9B,GAAqB,iBAAiB,sBAAuB,CACzD,WAAA2B,EACA,aAAcG,EAAc,OAC5B,MAAO,KAAK,WAChB,CAAC,EACM,KAGXA,EAAc,KAAKF,CAAG,EACf,GACX,CACJ,EAEMI,GAAN,KAA0B,CACtB,OAAO,WAAWC,EAAQ,CACtB,GAAIA,aAAkB,YAAa,CAC/B,IAAMC,EAAO,IAAI,WAAWD,CAAM,EAClC,OAAO,gBAAgBC,CAAI,CAC/B,MAAWD,aAAkB,YACzB,OAAO,gBAAgBA,CAAM,CAErC,CAEA,OAAO,aAAaE,EAAKC,EAAM,CACvBD,EAAIC,CAAI,IACR,KAAK,WAAWD,EAAIC,CAAI,CAAC,EACzB,OAAOD,EAAIC,CAAI,EAEvB,CACJ,EAEMtC,GAAN,KAAiC,CAC7B,YAAYuC,EAAeC,EAAYC,EAAYC,EAASC,EAAgBC,EAAuB,CAS/F,GARA,KAAK,cAAgBL,EACrB,KAAK,WAAaC,EAClB,KAAK,WAAaC,EAClB,KAAK,QAAUC,EACf,KAAK,eAAiBC,EACtB,KAAK,sBAAwBC,EAGzB,CAACL,EACD,MAAM,IAAI,MAAM,0DAA0D,EAG9E/C,GAA0B,YAAY,EAAE,sBAAsB,IAAI,EAElE,KAAK,UAAY,IAAI4B,GACrB,KAAK,YAAc,IAAIM,GAAY,GAAI,GAAK,EAE5C,KAAK,WAAa,KAClB,KAAK,gBAAkB,KAYvB,KAAK,WAAa,GAAK,KAIvB,KAAK,uBAAyB,GAAK,KACnC,KAAK,cAAgB,IAAM,KAAO,KAClC,KAAK,yBAA2B,EAChC,KAAK,cAAgB,IACrB,KAAK,eAAiB,EAEtB,KAAK,uBAAyB,CAC1B,IAAK,CACD,WAAY,CAAC,MAAM,EACnB,UAAW,CAAC,kBAAmB,oBAAqB,qBAAqB,EACzE,QAAS,GAAK,KAAO,KACrB,SAAU,MACV,YAAa,KACjB,EAEA,KAAM,CACF,WAAY,CAAC,MAAM,EACnB,UAAW,CAAC,aAAc,iBAAiB,EAC3C,QAAS,GAAK,KAAO,KACrB,SAAUmB,EAAE,eAAe,EAC3B,YAAa,KACjB,EAEA,OAAQ,CACJ,WAAY,CAAC,OAAQ,QAAS,OAAQ,OAAQ,QAAS,OAAQ,MAAM,EACrE,UAAW,CACP,aACA,YACA,cACA,YACA,YACA,aACA,YACA,sBACA,eACA,0BACJ,EACA,QAAS,GAAK,KAAO,KACrB,SAAUA,EAAE,iBAAiB,EAC7B,YAAa,qCACjB,EAEA,SAAU,CACN,WAAY,CAAC,MAAM,EACnB,UAAW,CACP,kBACA,oBACA,+BACA,iBACJ,EACA,QAAS,IAAM,KAAO,KACtB,SAAUA,EAAE,mBAAmB,EAC/B,YAAa,KACjB,EAOA,MAAO,CACH,WAAY,CAAC,QAAS,OAAQ,OAAQ,QAAS,OAAQ,OAAQ,OAAQ,MAAM,EAC7E,UAAW,CACP,aACA,YACA,aACA,YACA,aACA,YACA,YACA,cACA,WACJ,EACA,QAAS,GAAK,KAAO,KACrB,SAAU,QACV,YAAaA,EAAE,gBAAgB,CACnC,CACJ,EACA,KAAK,mBAAqB,IAAI,IAAI,CAC9B,OAAQ,OAAQ,OAAQ,MAAO,MAAO,OAAQ,OAAQ,OACtD,OAAQ,OAAQ,OAAQ,OAAQ,QAAS,MAC7C,CAAC,EAGD,KAAK,kBAAoB,IAAI,IAAI,CAAC,2BAA4B,oBAAoB,CAAC,EAGnF,KAAK,kBAAoB,IAAI,IAC7B,QAAWC,KAAc,OAAO,OAAO,KAAK,sBAAsB,EAC9D,QAAWC,KAAQD,EAAW,UAAW,KAAK,kBAAkB,IAAIC,CAAI,EAI5E,KAAK,gBAAkB,IAAI,IAC3B,KAAK,mBAAqB,IAAI,IAC9B,KAAK,yBAA2B,IAAI,IACpC,KAAK,cAAgB,CAAC,EACtB,KAAK,cAAgB,IAAI,IACzB,KAAK,qBAAuB,IAAIrB,GAAY,EAAG,GAAK,EAMpD,KAAK,qBAAuB,IAAIA,GAAY,IAAO,GAAK,EACxD,KAAK,8BAAgC,IAAI,IACzC,KAAK,4CAA8C,IACnD,KAAK,+BAAiC,EAStC,KAAK,2BAA6B,EAAI,KAAO,KAG7C,KAAK,oCAAsC,GAAK,KAAO,KACvD,KAAK,uBAAyB,EAG9B,KAAK,YAAc,IAAI,IAGvB,KAAK,gBAAkB,IAAI,IAC3B,KAAK,eAAiB,IAAI,IAC1B,KAAK,oBAAsB,IAAI,IAC/B,KAAK,mCAAqC,EAE1C,KAAK,yBAAyB,EAE1B,KAAK,gBACL,KAAK,cAAc,mBAAqB,KAEhD,CAMA,YAAYsB,EAAM,CACd,IAAMC,EAAW,OAAOD,GAAM,MAAQ,EAAE,EAAE,YAAY,EAChDE,EAAiBD,EAAS,YAAY,GAAG,EACzCE,EAAgBD,GAAkB,EAAID,EAAS,UAAUC,CAAc,EAAI,GAC3EE,EAAW,OAAOJ,GAAM,MAAQ,EAAE,EAAE,YAAY,EAQtD,OAAW,CAACK,EAASP,CAAU,IAAK,OAAO,QAAQ,KAAK,sBAAsB,EAAG,CAE7E,GAAI,CADqBA,EAAW,WAAW,SAASK,CAAa,EAC9C,SAIvB,GAHuB,CAACC,GACjB,KAAK,kBAAkB,IAAIA,CAAQ,GACnC,KAAK,kBAAkB,IAAIA,CAAQ,EAEtC,MAAO,CACH,KAAMC,EACN,SAAUP,EAAW,SACrB,YAAaA,EAAW,YACxB,QAASA,EAAW,QACpB,QAAS,GACT,UAAWK,EACX,SAAAC,CACJ,CAER,CAEA,MAAO,CACH,KAAM,UACN,SAAUP,EAAE,sBAAsB,EAClC,YAAa,8DACb,QAAS,KAAK,cACd,QAAS,GACT,UAAWM,EACX,SAAAC,CACJ,CACJ,CAEA,aAAaJ,EAAM,CACf,IAAMM,EAAW,KAAK,YAAYN,CAAI,EAChCO,EAAS,CAAC,EAEVC,EADW,OAAOR,GAAM,MAAQ,EAAE,EACb,YAAY,EACjCE,EAAiBM,EAAU,YAAY,GAAG,EAC1CL,EAAgBD,GAAkB,EAAIM,EAAU,UAAUN,CAAc,EAAI,GAElF,OAAI,KAAK,mBAAmB,IAAIC,CAAa,GACzCI,EAAO,KAAK,kBAAkBJ,CAAa,8CAA8C,EAGzFH,EAAK,KAAOM,EAAS,SACrBC,EAAO,KAAK,cAAc,KAAK,eAAeP,EAAK,IAAI,CAAC,iCAAiCM,EAAS,QAAQ,KAAK,KAAK,eAAeA,EAAS,OAAO,CAAC,GAAG,EAGvJ,CAACA,EAAS,SAAW,CAAC,KAAK,mBAAmB,IAAIH,CAAa,GAC/DI,EAAO,KAAK,0DAA0DD,EAAS,WAAW,EAAE,EAG5FN,EAAK,KAAO,KAAK,eACjBO,EAAO,KAAK,cAAc,KAAK,eAAeP,EAAK,IAAI,CAAC,4BAA4B,KAAK,eAAe,KAAK,aAAa,CAAC,GAAG,EAG3H,CACH,QAASO,EAAO,SAAW,EAC3B,OAAQA,EACR,SAAUD,EACV,SAAUN,EAAK,KACf,cAAe,KAAK,eAAeA,EAAK,IAAI,CAChD,CACJ,CAEA,yBAAyBC,EAAU,CAC/B,OAAO,OAAOA,GAAY,EAAE,EACvB,UAAU,MAAM,EAChB,QAAQ,yBAA0B,EAAE,EACpC,QAAQ,UAAW,GAAG,EACtB,KAAK,EACL,MAAM,EAAG,GAAG,CACrB,CAEA,yBAAyBvC,EAAU,CAC/B,IAAM6C,EAAS,CAAC,GACZ,CAAC7C,GAAY,OAAOA,GAAa,WAAU6C,EAAO,KAAK,gCAAgC,GACvF,CAAC7C,GAAU,QAAU,OAAOA,EAAS,QAAW,WAAU6C,EAAO,KAAK,iBAAiB,GACvF,CAAC,OAAO,cAAc7C,GAAU,QAAQ,GAAKA,EAAS,UAAY,IAAG6C,EAAO,KAAK,mBAAmB,GACpG,CAAC,OAAO,cAAc7C,GAAU,WAAW,GAAKA,EAAS,aAAe,IAAG6C,EAAO,KAAK,qBAAqB,GAC5G,CAAC,OAAO,cAAc7C,GAAU,SAAS,GAAKA,EAAS,WAAa,GAAKA,EAAS,UAAY,KAAK,yBAAwB6C,EAAO,KAAK,oBAAoB,GAC3J,CAAC,MAAM,QAAQ7C,GAAU,IAAI,GAAKA,EAAS,KAAK,SAAW,KAAI6C,EAAO,KAAK,cAAc,EAE7F,IAAME,EAAU,OAAO/C,GAAU,UAAa,SAAWA,EAAS,SAAW,GACvEgD,EAAc,KAAK,yBAAyBD,CAAO,EAWzD,IATI,CAACA,GACDA,IAAYA,EAAQ,KAAK,GACzB,wBAAwB,KAAKA,CAAO,GACpC,QAAQ,KAAKA,CAAO,GACpBA,IAAY,KACZA,IAAY,MACZC,EAAY,SAAW,IACLH,EAAO,KAAK,qBAAqB,EAEnDA,EAAO,SAAW,EAAG,CACrB,IAAMI,EAAa,KAAK,aAAa,CACjC,KAAMD,EACN,KAAMhD,EAAS,SACf,KAAMA,EAAS,UAAY,0BAC/B,CAAC,EACIiD,EAAW,SAASJ,EAAO,KAAK,GAAGI,EAAW,MAAM,CAC7D,CAKA,IAAMC,EAAc,CAAC,CAAClD,GAAU,QAC1BmD,EAAiBD,EAAc,KAAK,4BAA4BlD,CAAQ,EAAI,KAElF,MAAO,CACH,QAAS6C,EAAO,SAAW,EAC3B,OAAAA,EACA,YAAAG,EACA,QAASE,GAAe,CAACC,EACzB,eAAAA,CACJ,CACJ,CAQA,4BAA4BnD,EAAU,CAClC,IAAM0C,EAAW,OAAO1C,GAAU,UAAY,EAAE,EAAE,YAAY,EACxDoD,EAAOpD,GAAU,SAEvB,OAAK0C,EAAS,WAAW,QAAQ,EAG5B,KAAK,uBAAuB,MAAM,UAAU,SAASA,CAAQ,EAG9D,CAAC,OAAO,cAAcU,CAAI,GAAKA,GAAQ,GAAKA,EAAO,KAAK,2BACjD,6BAA6B,KAAK,eAAeA,GAAQ,CAAC,CAAC,MAAM,KAAK,eAAe,KAAK,0BAA0B,CAAC,IAE5H,KAAK,uBAAyBA,EAAO,KAAK,oCACnC,0DAEJ,KARI,gCAAgCV,CAAQ,IAHxC,2BAA2BA,GAAY,QAAQ,GAY9D,CAEA,eAAeW,EAAO,CAClB,GAAIA,IAAU,EAAG,MAAO,MACxB,IAAMC,EAAI,KACJC,EAAQ,CAAC,IAAK,KAAM,KAAM,IAAI,EAC9B,EAAI,KAAK,MAAM,KAAK,IAAIF,CAAK,EAAI,KAAK,IAAIC,CAAC,CAAC,EAClD,OAAO,YAAYD,EAAQ,KAAK,IAAIC,EAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAI,IAAMC,EAAM,CAAC,CAC1E,CAEA,uBAAwB,CACpB,IAAMC,EAAiB,CAAC,EAExB,OAAW,CAACb,EAASP,CAAU,IAAK,OAAO,QAAQ,KAAK,sBAAsB,EAC1EoB,EAAeb,CAAO,EAAI,CACtB,SAAUP,EAAW,SACrB,YAAaA,EAAW,YACxB,WAAYA,EAAW,WACvB,QAAS,KAAK,eAAeA,EAAW,OAAO,EAC/C,aAAcA,EAAW,OAC7B,EAGJ,OAAOoB,CACX,CAEA,iBAAkB,CACd,MAAO,CACH,eAAgB,KAAK,sBAAsB,EAC3C,eAAgB,KAAK,eAAe,KAAK,aAAa,EACtD,oBAAqB,KAAK,cAC1B,aAAc,KAAK,sBACvB,CACJ,CAKA,oBAAoB/B,EAAQ,CACxB,IAAM4B,EAAQ5B,aAAkB,WAAaA,EAAS,IAAI,WAAWA,CAAM,EACvEgC,EAAS,GACPC,EAAML,EAAM,WAClB,QAASM,EAAI,EAAGA,EAAID,EAAKC,IACrBF,GAAU,OAAO,aAAaJ,EAAMM,CAAC,CAAC,EAE1C,OAAO,KAAKF,CAAM,CACtB,CAEA,mBAAmBG,EAAQ,CACvB,IAAMC,EAAe,KAAKD,CAAM,EAC1BF,EAAMG,EAAa,OACnBR,EAAQ,IAAI,WAAWK,CAAG,EAChC,QAASC,EAAI,EAAGA,EAAID,EAAKC,IACrBN,EAAMM,CAAC,EAAIE,EAAa,WAAWF,CAAC,EAExC,OAAON,CACX,CAKA,oBAAoBS,EAAQ,CACxB,IAAMC,EAAQ,KAAK,oBAAoB,IAAID,CAAM,EACjD,OAAKC,EACE,CAAE,OAAAD,EAAQ,SAAUC,EAAM,KAAM,SAAUA,EAAM,KAAM,SAAUA,EAAM,IAAK,EAD/D,IAEvB,CAEA,MAAM,QAAQD,EAAQ,CAClB,IAAMC,EAAQ,KAAK,oBAAoB,IAAID,CAAM,EACjD,OAAKC,EACE,IAAI,KAAK,CAACA,EAAM,MAAM,EAAG,CAAE,KAAMA,EAAM,IAAK,CAAC,EADjC,IAEvB,CAEA,MAAM,aAAaD,EAAQ,CACvB,IAAME,EAAO,MAAM,KAAK,QAAQF,CAAM,EACtC,OAAKE,EACE,IAAI,gBAAgBA,CAAI,EADb,IAEtB,CAEA,gBAAgBC,EAAK,CACjB,GAAI,CAAE,IAAI,gBAAgBA,CAAG,CAAG,MAAY,CAAC,CACjD,CAEA,0BAA2B,CACvB,GAAI,CAAC,KAAK,cAAc,YAAa,CACjC,IAAMC,EAAa,YAAY,IAAM,CAC7B,KAAK,cAAc,cACnB,cAAcA,CAAU,EACxB,KAAK,yBAAyB,EAEtC,EAAG,GAAG,EAEN,WAAW,IAAM,CACb,cAAcA,CAAU,CAC5B,EAAG,GAAI,EAEP,MACJ,CAGA,KAAK,yBAAyB,CAClC,CAEA,0BAA2B,CACvB,GAAI,CACA,GAAI,CAAC,KAAK,cAAc,YACpB,OAGA,KAAK,gBACL,KAAK,cAAc,mBAAqB,MAGxC,KAAK,cAAc,YAAY,YAC/B,KAAK,kBAAoB,KAAK,cAAc,YAAY,WAG5D,KAAK,cAAc,YAAY,UAAY,MAAOrE,GAAU,CACxD,GAAI,CACA,GAAIA,EAAM,KAAK,OAASU,GAAqB,iBAAkB,CAC3D,QAAQ,KAAK,uCAAgC,EAC7Cf,GAAqB,iBAAiB,2BAA2B,EACjE,MACJ,CAEA,GAAI,OAAOK,EAAM,MAAS,SACtB,GAAI,CACA,IAAMsE,EAAS,KAAK,MAAMtE,EAAM,IAAI,EAIpC,GAFAU,GAAqB,mBAAmB4D,CAAM,EAE1C,KAAK,sBAAsBA,CAAM,EAAG,CACpC,MAAM,KAAK,kBAAkBA,CAAM,EACnC,MACJ,CACJ,OAASC,EAAY,CACjB,GAAIA,EAAW,UAAY,oBACvB,MAER,CAGJ,GAAI,KAAK,kBACL,OAAO,KAAK,kBAAkB,KAAK,KAAK,cAAc,YAAavE,CAAK,CAEhF,OAASH,EAAO,CAEZ,GADA,QAAQ,MAAM,oDAAgDA,CAAK,EAC/D,KAAK,kBACL,OAAO,KAAK,kBAAkB,KAAK,KAAK,cAAc,YAAaG,CAAK,CAEhF,CACJ,CACJ,OAASH,EAAO,CACZ,QAAQ,MAAM,gDAA4CA,CAAK,CACnE,CACJ,CAEA,sBAAsBC,EAAS,CAC3B,MAAI,CAACA,GAAW,OAAOA,GAAY,UAAY,CAACA,EAAQ,KAC7C,GAGc,CACrB,sBACA,yBACA,aACA,qBACA,qBACA,yBACA,qBACJ,EAEwB,SAASA,EAAQ,IAAI,CACjD,CAEA,MAAM,kBAAkBA,EAAS,CAC7B,GAAI,CACA,GAAI,CAAC,KAAK,cAAc,mBACpB,GAAI,CACA,GAAI,OAAO,KAAK,cAAc,wBAA2B,WAAY,CACjE,KAAK,cAAc,uBAAuB,EAE1C,IAAI0E,EAAW,EACTC,EAAc,GACpB,KAAO,CAAC,KAAK,cAAc,oBAAsBD,EAAWC,GACxD,MAAM,IAAI,QAAQvD,GAAW,WAAWA,EAAS,GAAG,CAAC,EACrDsD,IAGJ,GAAI,CAAC,KAAK,cAAc,mBACpB,MAAM,IAAI,MAAM,6CAA6C,CAErE,KACI,OAAM,IAAI,MAAM,6CAA6C,CAErE,OAASE,EAAW,CAEhB,GADA,QAAQ,MAAM,oDAAgDA,CAAS,EACnE5E,EAAQ,OAAQ,CAChB,IAAM6E,EAAe,CACjB,KAAM,sBACN,OAAQ7E,EAAQ,OAChB,MAAO,qCACP,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkB6E,CAAY,CAC7C,CACA,MACJ,CAGJ,OAAQ7E,EAAQ,KAAM,CAClB,IAAK,sBACD,MAAM,KAAK,wBAAwBA,CAAO,EAC1C,MAEJ,IAAK,yBACD,KAAK,uBAAuBA,CAAO,EACnC,MAEJ,IAAK,aACD,MAAM,KAAK,gBAAgBA,CAAO,EAClC,MAEJ,IAAK,qBACD,KAAK,wBAAwBA,CAAO,EACpC,MAEJ,IAAK,qBACD,MAAM,KAAK,mBAAmBA,CAAO,EACrC,MAEJ,IAAK,yBACD,KAAK,uBAAuBA,CAAO,EACnC,MAEJ,IAAK,sBACD,KAAK,oBAAoBA,CAAO,EAChC,MAEJ,QACI,QAAQ,KAAK,0CAAiCA,EAAQ,IAAI,CAClE,CAEJ,OAASD,EAAO,CAGZ,GAFA,QAAQ,MAAM,sCAAkCA,CAAK,EAEjDC,EAAQ,OAAQ,CAChB,IAAM6E,EAAe,CACjB,KAAM,sBACN,OAAQ7E,EAAQ,OAChB,MAAOD,EAAM,QACb,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkB8E,CAAY,CAC7C,CACJ,CACJ,CAMA,MAAM,qBAAqBV,EAAQ,CAC/B,GAAI,CAEA,GAAI,CAAC,KAAK,cAAc,gBAAkB,CAAC,KAAK,cAAc,YAC1D,MAAM,IAAI,MAAM,mCAAmC,EAGvD,IAAMW,EAAW,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAEpDC,EAAU,IAAI,YACdC,EAAkBD,EAAQ,OAAO,KAAK,cAAc,cAAc,EAClEE,EAAaF,EAAQ,OAAOZ,CAAM,EAElCe,EAAmB,IAAI,WAAW,KAAK,cAAc,WAAW,EAChEC,EAAe,IAAI,WACrBH,EAAgB,OAChBE,EAAiB,OACjBJ,EAAS,OACTG,EAAW,MACf,EAEIG,EAAS,EACbD,EAAa,IAAIH,EAAiBI,CAAM,EACxCA,GAAUJ,EAAgB,OAC1BG,EAAa,IAAID,EAAkBE,CAAM,EACzCA,GAAUF,EAAiB,OAC3BC,EAAa,IAAIL,EAAUM,CAAM,EACjCA,GAAUN,EAAS,OACnBK,EAAa,IAAIF,EAAYG,CAAM,EAEnC,IAAMC,EAAc,MAAM,OAAO,OAAO,OAAO,UAAWF,CAAY,EAEhEG,EAAiB,MAAM,OAAO,OAAO,UACvC,MACAD,EACA,CAAE,KAAM,SAAU,EAClB,GACA,CAAC,UAAW,SAAS,CACzB,EAEA,YAAK,YAAY,IAAIlB,EAAQ,CACzB,IAAKmB,EACL,KAAM,MAAM,KAAKR,CAAQ,EACzB,QAAS,KAAK,IAAI,CACtB,CAAC,EAEM,CAAE,IAAKQ,EAAgB,KAAM,MAAM,KAAKR,CAAQ,CAAE,CAE7D,OAAS/E,EAAO,CACZ,cAAQ,MAAM,4CAAwCA,CAAK,EACrDA,CACV,CACJ,CAEA,MAAM,6BAA6BoE,EAAQoB,EAAW,CAClD,GAAI,CACA,GAAI,CAACA,GAAa,CAAC,MAAM,QAAQA,CAAS,GAAKA,EAAU,SAAW,GAChE,MAAM,IAAI,MAAM,iBAAiBA,GAAW,QAAU,CAAC,QAAQ,EAGnE,GAAI,CAAC,KAAK,cAAc,gBAAkB,CAAC,KAAK,cAAc,YAC1D,MAAM,IAAI,MAAM,mCAAmC,EAGvD,IAAMR,EAAU,IAAI,YACdC,EAAkBD,EAAQ,OAAO,KAAK,cAAc,cAAc,EAClEE,EAAaF,EAAQ,OAAOZ,CAAM,EAElCW,EAAW,IAAI,WAAWS,CAAS,EACnCL,EAAmB,IAAI,WAAW,KAAK,cAAc,WAAW,EAEhEC,EAAe,IAAI,WACrBH,EAAgB,OAChBE,EAAiB,OACjBJ,EAAS,OACTG,EAAW,MACf,EAEIG,EAAS,EACbD,EAAa,IAAIH,EAAiBI,CAAM,EACxCA,GAAUJ,EAAgB,OAC1BG,EAAa,IAAID,EAAkBE,CAAM,EACzCA,GAAUF,EAAiB,OAC3BC,EAAa,IAAIL,EAAUM,CAAM,EACjCA,GAAUN,EAAS,OACnBK,EAAa,IAAIF,EAAYG,CAAM,EAEnC,IAAMC,EAAc,MAAM,OAAO,OAAO,OAAO,UAAWF,CAAY,EAEhEG,EAAiB,MAAM,OAAO,OAAO,UACvC,MACAD,EACA,CAAE,KAAM,SAAU,EAClB,GACA,CAAC,UAAW,SAAS,CACzB,EAEA,YAAK,YAAY,IAAIlB,EAAQ,CACzB,IAAKmB,EACL,KAAMC,EACN,QAAS,KAAK,IAAI,CACtB,CAAC,EAEMD,CAEX,OAASvF,EAAO,CACZ,cAAQ,MAAM,iDAA6CA,CAAK,EAC1DA,CACV,CACJ,CAUA,sBAAsByF,EAAOC,EAAW,CACpC,GAAI,OAAO,KAAK,YAAe,YAAc,CAACD,EAAO,OACrD,IAAME,EAAQF,EAAM,aAAe,EAC7BG,EAAOF,IAAc,KAAQD,EAAM,YAAc,EAAMA,EAAM,eAAiB,EAC9EI,EAAWF,EAAQ,EAAI,KAAK,IAAI,IAAK,KAAK,MAAOC,EAAOD,EAAS,GAAG,CAAC,EAAI,EAC/E,GAAI,CACA,KAAK,WAAW,CACZ,OAAQF,EAAM,OACd,KAAMA,EAAM,MAAQ,KACpB,UAAAC,EACA,SAAAG,EACA,kBAAmBD,EACnB,YAAaD,EACb,QAAS,CAAC,CAACF,EAAM,QACjB,MAAOA,EAAM,OAAS,IAC1B,CAAC,CACL,MAAY,CAAgC,CAChD,CAEA,MAAM,SAAS7C,EAAMkD,EAAU,CAAC,EAAG,CAC/B,GAAI,CAEA,GAAI,CAAC,KAAK,cACN,MAAM,IAAI,MAAM,gCAAgC,EAGpD,IAAMC,EAAW,KAAK,oBAAoB,EAC1C,GAAI,CAAC,KAAK,YAAY,UAAUA,CAAQ,EACpC,MAAAjG,GAAqB,iBAAiB,sBAAuB,CAAE,SAAAiG,CAAS,CAAC,EACnE,IAAI,MAAM,+DAA+D,EAGnF,GAAI,CAACnD,GAAQ,CAACA,EAAK,KACf,MAAM,IAAI,MAAM,qBAAqB,EAGzC,IAAMW,EAAa,KAAK,aAAaX,CAAI,EACzC,GAAI,CAACW,EAAW,QAAS,CACrB,IAAMuB,EAAevB,EAAW,OAAO,KAAK,IAAI,EAChD,MAAM,IAAI,MAAMuB,CAAY,CAChC,CAEA,GAAI,KAAK,gBAAgB,MAAQ,KAAK,yBAClC,MAAM,IAAI,MAAM,sCAAsC,EAI1D,IAAMV,EAAS,QAAQ,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAG,CAAC,CAAC,GAGtE4B,EAAW,MAAM,KAAK,kBAAkBpD,CAAI,EAG5CqD,EAAY,MAAM,KAAK,qBAAqB7B,CAAM,EAClD8B,EAAaD,EAAU,IACvBE,EAAOF,EAAU,KAGjBG,EAAgB,CAClB,OAAQhC,EACR,KAAMxB,EACN,SAAUoD,EACV,WAAYE,EACZ,KAAMC,EACN,YAAa,KAAK,KAAKvD,EAAK,KAAO,KAAK,UAAU,EAClD,WAAY,EACZ,gBAAiB,EACjB,UAAW,KAAK,IAAI,EACpB,OAAQ,YACR,WAAY,EACZ,cAAe,KAAK,IAAI,EAExB,QAAS,CAAC,EAAEkD,GAAWA,EAAQ,OAC/B,MAAQA,GAAWA,EAAQ,MAASA,EAAQ,MAAQ,KACpD,KAAOA,GAAWA,EAAQ,KAAQA,EAAQ,KAAO,IACrD,EAEA,KAAK,gBAAgB,IAAI1B,EAAQgC,CAAa,EAC9C,KAAK,eAAe,IAAIhC,EAAQ,CAAC,EAEjC,IAAMiC,EAAiB,IAAI,QAAQ,CAAChF,EAASiF,IAAW,CACpDF,EAAc,eAAiB/E,EAC/B+E,EAAc,cAAgBE,EAC9BF,EAAc,eAAiB,WAAW,IAAM,CAC5CA,EAAc,eAAiB,KAC/BE,EAAO,IAAI,MAAM,kBAAkB,CAAC,CACxC,EAAG,GAAK,CACZ,CAAC,EAGD,aAAM,KAAK,iBAAiBF,CAAa,EAGzC,MAAMC,EAEN,MAAM,KAAK,uBAAuBD,CAAa,EAExChC,CAEX,OAASpE,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,8BAA0BuG,CAAS,EAC7C,KAAK,SAAS,KAAK,QAAQA,CAAS,EAClC,IAAI,MAAMA,CAAS,CAC7B,CACJ,CAEA,MAAM,iBAAiBH,EAAe,CAClC,GAAI,CACA,IAAM9F,EAAW,CACb,KAAM,sBACN,OAAQ8F,EAAc,OACtB,SAAUA,EAAc,KAAK,KAC7B,SAAUA,EAAc,KAAK,KAC7B,SAAUA,EAAc,KAAK,MAAQ,2BACrC,SAAUA,EAAc,SACxB,YAAaA,EAAc,YAC3B,UAAW,KAAK,WAChB,KAAMA,EAAc,KACpB,UAAW,KAAK,IAAI,EACpB,QAAS,KACb,EAWA,GALIA,EAAc,UACd9F,EAAS,QAAU,GACf8F,EAAc,QAAO9F,EAAS,MAAQ8F,EAAc,QAGxD,KAAK,WACL,GAAI,CACA9F,EAAS,UAAY,MAAMD,GAAmB,iBAAiBC,EAAU,KAAK,UAAU,EACxF,QAAQ,IAAI,6CAAsC,CACtD,OAASkG,EAAW,CAChB1G,GAAqB,iBAAiB,mBAAoB,CACtD,OAAQsG,EAAc,OACtB,MAAOI,EAAU,OACrB,CAAC,CACL,CAIJ,MAAM,KAAK,kBAAkBlG,CAAQ,EAErC8F,EAAc,OAAS,eAE3B,OAASpG,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,uCAAmCuG,CAAS,EAC1DH,EAAc,OAAS,SACjB,IAAI,MAAMG,CAAS,CAC7B,CACJ,CAEA,MAAM,uBAAuBH,EAAe,CACxC,GAAI,CACAA,EAAc,OAAS,eAEvB,IAAMxD,EAAOwD,EAAc,KACrBK,EAAcL,EAAc,YAElC,QAASM,EAAa,EAAGA,EAAaD,EAAaC,IAAc,CAC7D,IAAMC,EAAQD,EAAa,KAAK,WAC1BE,EAAM,KAAK,IAAID,EAAQ,KAAK,WAAY/D,EAAK,IAAI,EAGjDiE,EAAY,MAAM,KAAK,cAAcjE,EAAM+D,EAAOC,CAAG,EAG3D,MAAM,KAAK,cAAcR,EAAeM,EAAYG,CAAS,EAG7DT,EAAc,aACd,IAAMP,EAAW,KAAK,MAAOO,EAAc,WAAaK,EAAe,EAAE,EAAI,EAC7E,KAAK,sBAAsBL,EAAe,IAAI,EAE9C,MAAM,KAAK,oBAAoB,CACnC,CAEAA,EAAc,OAAS,uBAMvB,KAAK,sBAAsBA,CAAa,CAE5C,OAASpG,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,oCAAgCuG,CAAS,EACvDH,EAAc,OAAS,SACjB,IAAI,MAAMG,CAAS,CAC7B,CACJ,CAIA,sBAAsBH,EAAe,CAE7BA,EAAc,cAAc,aAAaA,EAAc,YAAY,EACvEA,EAAc,aAAe,WAAW,IAAM,CAC1C,IAAMX,EAAQ,KAAK,gBAAgB,IAAIW,EAAc,MAAM,EACvDX,GAASA,EAAM,SAAW,aAC1B,KAAK,gBAAgBW,EAAc,MAAM,CAEjD,EAAG,IAAO,CACd,CAGA,MAAM,mBAAmBnG,EAAS,CAC9B,IAAMmG,EAAgB,KAAK,gBAAgB,IAAInG,GAAS,MAAM,EAC9D,GAAI,CAACmG,GAAiB,CAACA,EAAc,KAAM,OAC3C,IAAMU,EAAU,MAAM,QAAQ7G,EAAQ,OAAO,EAAIA,EAAQ,QAAU,CAAC,EACpE,GAAI6G,EAAQ,SAAW,EAAG,OAE1B,KAAK,sBAAsBV,CAAa,EACxCA,EAAc,OAAS,eAGvB,IAAMW,EAAUD,EAAQ,MAAM,EADN,GACwB,EAChD,QAAWE,KAAOD,EACd,GAAI,GAAC,OAAO,UAAUC,CAAG,GAAKA,EAAM,GAAKA,GAAOZ,EAAc,aAC9D,GAAI,CACA,IAAMO,EAAQK,EAAM,KAAK,WACnBJ,EAAM,KAAK,IAAID,EAAQ,KAAK,WAAYP,EAAc,KAAK,IAAI,EAC/DS,EAAY,MAAM,KAAK,cAAcT,EAAc,KAAMO,EAAOC,CAAG,EACzE,MAAM,KAAK,cAAcR,EAAeY,EAAKH,CAAS,EACtD,MAAM,KAAK,oBAAoB,CACnC,OAAS7G,EAAO,CACZ,QAAQ,KAAK,0CAAiCgH,EAAKlH,GAAqB,cAAcE,CAAK,CAAC,CAChG,CAGAoG,EAAc,SAAW,iBACzBA,EAAc,OAAS,wBAE3B,KAAK,sBAAsBA,CAAa,CAC5C,CAEA,MAAM,cAAcxD,EAAM+D,EAAOC,EAAK,CAClC,GAAI,CAEA,OAAO,MADMhE,EAAK,MAAM+D,EAAOC,CAAG,EAChB,YAAY,CAClC,OAAS5G,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,oCAAgCuG,CAAS,EACjD,IAAI,MAAMA,CAAS,CAC7B,CACJ,CAEA,MAAM,cAAcH,EAAeM,EAAYG,EAAW,CACtD,GAAI,CACA,IAAMX,EAAaE,EAAc,WAC3Ba,EAAQ,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAGjDC,EAAiB,MAAM,OAAO,OAAO,QACvC,CACI,KAAM,UACN,GAAID,CACR,EACAf,EACAW,CACJ,EAGMM,EAAe,KAAK,oBAAoB,IAAI,WAAWD,CAAc,CAAC,EACtEE,EAAe,CACjB,KAAM,aACN,OAAQhB,EAAc,OACtB,WAAYM,EACZ,YAAaN,EAAc,YAC3B,MAAO,MAAM,KAAKa,CAAK,EACvB,iBAAkBE,EAClB,UAAWN,EAAU,WACrB,UAAW,KAAK,IAAI,CACxB,EAEA,MAAM,KAAK,oBAAoB,EAE/B,MAAM,KAAK,kBAAkBO,CAAY,CAE7C,OAASpH,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,oCAAgCuG,CAAS,EACjD,IAAI,MAAMA,CAAS,CAC7B,CACJ,CAEA,MAAM,kBAAkBtG,EAAS,CAE7B,IAAMa,EAAgB,KAAK,UAAUb,CAAO,EACtCoH,EAAK,KAAK,eAAe,YACzBC,EAAa,GACfC,EAAU,EACRC,EAAQC,GAAO,IAAI,QAAQC,GAAK,WAAWA,EAAGD,CAAE,CAAC,EAEvD,OACI,GAAI,CACA,GAAI,CAACJ,GAAMA,EAAG,aAAe,OACzB,MAAM,IAAI,MAAM,wBAAwB,EAE5C,MAAM,KAAK,oBAAoB,EAC/BA,EAAG,KAAKvG,CAAa,EACrB,MACJ,OAASd,EAAO,CACZ,IAAM2H,EAAM,OAAO3H,GAAO,SAAW,EAAE,EACjC4H,EAAYD,EAAI,SAAS,oBAAoB,GAAKA,EAAI,SAAS,gBAAgB,EAC/EE,EAAQ7H,GAAO,OAAS,iBAC9B,IAAK4H,GAAaC,IAAUN,EAAUD,EAAY,CAC9CC,IACA,MAAM,KAAK,oBAAoB,EAC/B,MAAMC,EAAK,KAAK,IAAI,GAAKD,EAAS,GAAG,CAAC,EACtC,QACJ,CACA,cAAQ,MAAM,wCAAoCvH,CAAK,EACjDA,CACV,CAER,CAEA,MAAM,qBAAsB,CACxB,GAAI,CACA,IAAMqH,EAAK,KAAK,eAAe,YAC/B,GAAI,CAACA,EAAI,OAET,GAAI,OAAOA,EAAG,4BAA+B,SAAU,CAC/CA,EAAG,eAAiBA,EAAG,4BACvB,MAAM,IAAI,QAAQhG,GAAW,CACzB,IAAMyG,EAAU,IAAM,CAClBT,EAAG,oBAAoB,oBAAqBS,CAAO,EACnDzG,EAAQ,CACZ,EACAgG,EAAG,iBAAiB,oBAAqBS,EAAS,CAAE,KAAM,EAAK,CAAC,CACpE,CAAC,EAEL,MACJ,CAEA,IAAMC,EAAY,EAAI,KAAO,KAC7B,KAAOV,EAAG,eAAiBU,GACvB,MAAM,IAAI,QAAQ,GAAK,WAAW,EAAG,EAAE,CAAC,CAEhD,MAAY,CAEZ,CACJ,CAEA,MAAM,kBAAkBnF,EAAM,CAC1B,GAAI,CACA,IAAMoF,EAAc,MAAMpF,EAAK,YAAY,EACrCqF,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWD,CAAW,EAEpE,OADkB,MAAM,KAAK,IAAI,WAAWC,CAAU,CAAC,EACtC,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CACtE,OAASlI,EAAO,CACZ,cAAQ,MAAM,uCAAmCA,CAAK,EAChDA,CACV,CACJ,CAMA,MAAM,wBAAwBM,EAAU,CACpC,GAAI,CACA,IAAMyF,EAAW,KAAK,oBAAoB,EAC1C,GAAI,CAAC,KAAK,qBAAqB,UAAUA,CAAQ,EAC7C,MAAM,IAAI,MAAM,2CAA2C,EAG/D,IAAMxC,EAAa,KAAK,yBAAyBjD,CAAQ,EACzD,GAAI,CAACiD,EAAW,QAAS,MAAM,IAAI,MAAMA,EAAW,OAAO,KAAK,IAAI,CAAC,EAErE,GAAIjD,EAAS,WAAa,KAAK,gBAC3B,GAAI,CAOA,GAAI,CANY,MAAMD,GAAmB,mBACrCC,EACAA,EAAS,UACT,KAAK,eACT,EAGI,MAAAR,GAAqB,iBAAiB,6BAA8B,CAChE,OAAQQ,EAAS,MACrB,CAAC,EACK,IAAI,MAAM,iCAAiC,EAGrD,QAAQ,IAAI,yDAAkD,CAClE,OAAS6H,EAAa,CAClB,MAAArI,GAAqB,iBAAiB,sBAAuB,CACzD,OAAQQ,EAAS,OACjB,MAAO6H,EAAY,OACvB,CAAC,EACK,IAAI,MAAM,mCAAmC,CACvD,CAIJ,GAAI,KAAK,mBAAmB,IAAI7H,EAAS,MAAM,GAAK,KAAK,yBAAyB,IAAIA,EAAS,MAAM,EACjG,OAGJ,GAAI,KAAK,yBAAyB,MAAQ,KAAK,+BAC3C,MAAM,IAAI,MAAM,yCAAyC,EAGzDiD,EAAW,gBAGX,QAAQ,KAAK,wDAAwDA,EAAW,cAAc,EAAE,EAGpG,IAAM6E,EAAkB,CACpB,GAAG9H,EAEH,QAASiD,EAAW,QACpB,SAAUA,EAAW,YACrB,WAAY,KAAK,IAAI,CACzB,EACA,KAAK,yBAAyB,IAAIjD,EAAS,OAAQ8H,CAAe,EAE9D7E,EAAW,UACX,KAAK,wBAA0BjD,EAAS,UAGxC,OAAO,KAAK,uBAA0B,WACtC,KAAK,sBAAsB,CACvB,OAAQ8H,EAAgB,OACxB,SAAUA,EAAgB,SAC1B,SAAUA,EAAgB,SAC1B,SAAUA,EAAgB,UAAY,2BAGtC,QAAS7E,EAAW,QACpB,MAAO6E,EAAgB,OAAS,IACpC,CAAC,EAED,MAAM,KAAK,mBAAmB9H,EAAS,OAAQmC,EAAE,yBAAyB,CAAC,CAGnF,OAASzC,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,QAAQ,MAAM,+CAA2CuG,CAAS,EAGlE,IAAM8B,EAAgB,CAClB,KAAM,yBACN,OAAQ/H,EAAS,OACjB,SAAU,GACV,MAAOiG,EACP,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkB8B,CAAa,CAC9C,CACJ,CAEA,MAAM,gBAAgBjB,EAAc,CAChC,OAAO,KAAK,UAAU,SAClB,SAASA,EAAa,MAAM,GAC5B,SAAY,CACR,GAAI,CACA,IAAIkB,EAAiB,KAAK,mBAAmB,IAAIlB,EAAa,MAAM,EAQpE,GALI,CAACkB,GAKDA,EAAe,YAAcA,EAAe,SAAW,YACvD,OAGJ,GAAI,CAAC,KAAK,wBAAwBlB,EAAa,MAAM,EAAG,CACpD,QAAQ,KAAK,8EAAqEA,EAAa,MAAM,EACrG,KAAK,yBAAyBA,EAAa,MAAM,EACjD,MACJ,CAMA,GAHAkB,EAAe,cAAgB,KAAK,IAAI,EAGpCA,EAAe,eAAe,IAAIlB,EAAa,UAAU,EACzD,OAIJ,GAAIA,EAAa,WAAa,GAAKA,EAAa,YAAckB,EAAe,YACzE,MAAM,IAAI,MAAM,wBAAwBlB,EAAa,UAAU,EAAE,EAIrE,IAAMH,EAAQ,IAAI,WAAWG,EAAa,KAAK,EAE3CmB,EACJ,GAAInB,EAAa,iBACbmB,EAAgB,KAAK,mBAAmBnB,EAAa,gBAAgB,UAC9DA,EAAa,cACpBmB,EAAgB,IAAI,WAAWnB,EAAa,aAAa,MAEzD,OAAM,IAAI,MAAM,wBAAwB,EAG5C,IAAMoB,EAAiB,MAAM,OAAO,OAAO,QACvC,CACI,KAAM,UACN,GAAIvB,CACR,EACAqB,EAAe,WACfC,CACJ,EAGA,GAAIC,EAAe,aAAepB,EAAa,UAC3C,MAAM,IAAI,MAAM,iCAAiCA,EAAa,SAAS,SAASoB,EAAe,UAAU,EAAE,EAI/GF,EAAe,eAAe,IAAIlB,EAAa,WAAYoB,CAAc,EACzEF,EAAe,gBACf,KAAK,sBAAsBA,EAAgB,MAAM,EAGjD,IAAMG,EAAe,CACjB,KAAM,qBACN,OAAQrB,EAAa,OACrB,WAAYA,EAAa,WACzB,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkBqB,CAAY,EAGrCH,EAAe,gBAAkBA,EAAe,aAChD,MAAM,KAAK,aAAaA,CAAc,CAG9C,OAAStI,EAAO,CAKZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,QAAQ,KAAK,yEAAgEoH,EAAa,WAAYb,CAAS,CACnH,CACJ,CACJ,CACJ,CAEA,wBAAwBnC,EAAQ,CAC5B,IAAM2B,EAAW,KAAK,oBAAoB,EAC1C,OAAK,KAAK,qBAAqB,UAAUA,CAAQ,GAQ5C,KAAK,8BAA8B,IAAI3B,CAAM,GAC9C,KAAK,8BAA8B,IAC/BA,EACA,IAAI9C,GAAY,KAAK,4CAA6C,GAAK,CAC3E,EAGoB,KAAK,8BAA8B,IAAI8C,CAAM,EAChD,UAAUA,CAAM,EAQ9B,IAPHtE,GAAqB,iBAAiB,8CAA+C,CACjF,SAAAiG,EACA,OAAA3B,CACJ,CAAC,EACM,MApBPtE,GAAqB,iBAAiB,+CAAgD,CAClF,SAAAiG,EACA,OAAA3B,CACJ,CAAC,EACM,GAoBf,CAEA,MAAM,aAAakE,EAAgB,CAI/B,GAAI,CAAAA,EAAe,WAGnB,CAAAA,EAAe,WAAa,GAE5B,GAAI,CACAA,EAAe,OAAS,aAGxB,QAASrE,EAAI,EAAGA,EAAIqE,EAAe,YAAarE,IAC5C,GAAI,CAACqE,EAAe,eAAe,IAAIrE,CAAC,EACpC,MAAM,IAAI,MAAM,iBAAiBA,CAAC,EAAE,EAK5C,IAAMyE,EAAS,CAAC,EAChB,QAASzE,EAAI,EAAGA,EAAIqE,EAAe,YAAarE,IAAK,CACjD,IAAM0E,EAAQL,EAAe,eAAe,IAAIrE,CAAC,EACjDyE,EAAO,KAAK,IAAI,WAAWC,CAAK,CAAC,CACrC,CAGA,IAAMC,EAAYF,EAAO,OAAO,CAACG,EAAKF,IAAUE,EAAMF,EAAM,OAAQ,CAAC,EAGrE,GAAIC,IAAcN,EAAe,SAC7B,MAAM,IAAI,MAAM,gCAAgCA,EAAe,QAAQ,SAASM,CAAS,EAAE,EAI/F,IAAME,EAAW,IAAI,WAAWF,CAAS,EACrCvD,EAAS,EACb,QAAWsD,KAASD,EAChBI,EAAS,IAAIH,EAAOtD,CAAM,EAC1BA,GAAUsD,EAAM,OAKpB,GADqB,MAAM,KAAK,0BAA0BG,CAAQ,IAC7CR,EAAe,SAChC,MAAM,IAAI,MAAM,6CAA6C,EAGjE,IAAMS,EAAaD,EAAS,OACtBE,EAAW,IAAI,KAAK,CAACD,CAAU,EAAG,CAAE,KAAMT,EAAe,QAAS,CAAC,EAYzE,GAVAA,EAAe,QAAU,KAAK,IAAI,EAClCA,EAAe,OAAS,YAExB,KAAK,yBAAyBA,EAAe,OAAQ,CACjD,OAAQS,EACR,KAAMT,EAAe,SACrB,KAAMA,EAAe,SACrB,KAAMA,EAAe,QACzB,CAAC,EAEG,KAAK,eAAgB,CACrB,IAAMW,EAAU,SAAY,CACxB,IAAM3E,EAAO,MAAM,KAAK,QAAQgE,EAAe,MAAM,EACrD,GAAI,CAAChE,EACD,MAAM,IAAI,MAAM,gDAAgD,EAEpE,OAAOA,CACX,EACM4E,EAAe,SAAY,CAC7B,IAAM5E,EAAO,MAAM2E,EAAQ,EAC3B,OAAO,IAAI,gBAAgB3E,CAAI,CACnC,EACM6E,EAAmB5E,GAAQ,CAC7B,GAAI,CAAE,IAAI,gBAAgBA,CAAG,CAAG,MAAY,CAAC,CACjD,EAEA,KAAK,eAAe,CAChB,OAAQ+D,EAAe,OACvB,SAAUA,EAAe,SACzB,SAAUA,EAAe,SACzB,SAAUA,EAAe,SACzB,aAAcA,EAAe,QAAUA,EAAe,UAEtD,QAAS,CAAC,CAACA,EAAe,QAC1B,MAAOA,EAAe,OAAS,KAE/B,SAAAU,EACA,QAAAC,EACA,aAAAC,EACA,gBAAAC,CACJ,CAAC,CACL,CAGA,IAAMC,EAAoB,CACtB,KAAM,yBACN,OAAQd,EAAe,OACvB,QAAS,GACT,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkBc,CAAiB,EAO1Cd,EAAe,cACf,cAAcA,EAAe,WAAW,EACxCA,EAAe,YAAc,MAE7BA,EAAe,gBAAgBA,EAAe,eAAe,MAAM,EACvEA,EAAe,WAAa,IAEhC,OAAStI,EAAO,CACZ,QAAQ,MAAM,+BAA2BA,CAAK,EAC9CsI,EAAe,OAAS,SAEpB,KAAK,SACL,KAAK,QAAQ,yBAAyBtI,EAAM,OAAO,EAAE,EAIzD,IAAM8E,EAAe,CACjB,KAAM,yBACN,OAAQwD,EAAe,OACvB,QAAS,GACT,MAAOtI,EAAM,QACb,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkB8E,CAAY,EAGzC,KAAK,yBAAyBwD,EAAe,MAAM,CACvD,EACJ,CAEA,MAAM,0BAA0B9H,EAAM,CAClC,GAAI,CACA,IAAMyH,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWzH,CAAI,EAE7D,OADkB,MAAM,KAAK,IAAI,WAAWyH,CAAU,CAAC,EACtC,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CACtE,OAASlI,EAAO,CACZ,cAAQ,MAAM,kCAA8BA,CAAK,EAC3CA,CACV,CACJ,CAEA,uBAAuBqJ,EAAU,CAC7B,GAAI,CACA,IAAMjD,EAAgB,KAAK,gBAAgB,IAAIiD,EAAS,MAAM,EAE9D,GAAI,CAACjD,EACD,OAGAiD,EAAS,UACTjD,EAAc,OAAS,WACnBA,EAAc,gBAAgB,aAAaA,EAAc,cAAc,EAC3EA,EAAc,eAAiB,KAC/BA,EAAc,iBAAiB,EAC/BA,EAAc,eAAiB,KAC/BA,EAAc,cAAgB,OAE9BA,EAAc,OAAS,WACnBA,EAAc,gBAAgB,aAAaA,EAAc,cAAc,EAC3EA,EAAc,eAAiB,KAC/BA,EAAc,gBAAgB,IAAI,MAAMiD,EAAS,OAAS,mBAAmB,CAAC,EAC9EjD,EAAc,cAAgB,KAC9BA,EAAc,eAAiB,KAE3B,KAAK,SACL,KAAK,QAAQ,sBAAsBiD,EAAS,OAAS,gBAAgB,EAAE,EAG3E,KAAK,gBAAgBA,EAAS,MAAM,EAE5C,OAASrJ,EAAO,CACZ,QAAQ,MAAM,6CAAyCA,CAAK,CAChE,CACJ,CAEA,wBAAwByI,EAAc,CAClC,GAAI,CACA,IAAMrC,EAAgB,KAAK,gBAAgB,IAAIqC,EAAa,MAAM,EAClE,GAAI,CAACrC,EACD,OAGJA,EAAc,kBACdA,EAAc,cAAgB,KAAK,IAAI,EACnCA,EAAc,SAAW,wBACzB,KAAK,sBAAsBA,CAAa,CAEhD,OAASpG,EAAO,CACZ,QAAQ,MAAM,8CAA0CA,CAAK,CACjE,CACJ,CAEA,uBAAuBsJ,EAAY,CAC/B,GAAI,CACA,IAAMlD,EAAgB,KAAK,gBAAgB,IAAIkD,EAAW,MAAM,EAChE,GAAI,CAAClD,EACD,OAGAkD,EAAW,SACXlD,EAAc,OAAS,YACvBA,EAAc,QAAU,KAAK,IAAI,EAE7B,KAAK,YACL,KAAK,WAAW,CACZ,OAAQA,EAAc,OACtB,SAAUA,EAAc,KAAK,KAC7B,SAAUA,EAAc,KAAK,KAC7B,aAAcA,EAAc,QAAUA,EAAc,UACpD,OAAQ,WACZ,CAAC,IAGLA,EAAc,OAAS,SAEnB,KAAK,SACL,KAAK,QAAQ,oBAAoBkD,EAAW,OAAS,eAAe,EAAE,GAI9E,KAAK,gBAAgBA,EAAW,MAAM,CAE1C,OAAStJ,EAAO,CACZ,QAAQ,MAAM,+CAA2CA,CAAK,CAClE,CACJ,CAEA,oBAAoB8E,EAAc,CAC9B,GAAI,CACA,IAAMsB,EAAgB,KAAK,gBAAgB,IAAItB,EAAa,MAAM,EAC9DsB,IACAA,EAAc,OAAS,SACvB,KAAK,gBAAgBtB,EAAa,MAAM,GAG5C,IAAMwD,EAAiB,KAAK,mBAAmB,IAAIxD,EAAa,MAAM,EAClEwD,IACAA,EAAe,OAAS,SACxB,KAAK,yBAAyBxD,EAAa,MAAM,GAGjD,KAAK,SACL,KAAK,QAAQ,mBAAmBA,EAAa,OAAS,eAAe,EAAE,CAG/E,OAAS9E,EAAO,CACZ,QAAQ,MAAM,0CAAsCA,CAAK,CAC7D,CACJ,CAMA,oBAAqB,CACjB,OAAO,MAAM,KAAK,KAAK,gBAAgB,OAAO,CAAC,EAAE,IAAIuJ,IAAa,CAC9D,OAAQA,EAAS,OACjB,SAAUA,EAAS,MAAM,MAAQ,UACjC,SAAUA,EAAS,MAAM,MAAQ,EACjC,SAAU,KAAK,MAAOA,EAAS,WAAaA,EAAS,YAAe,GAAG,EAEvE,YAAaA,EAAS,aAAe,EACrC,kBAAmBA,EAAS,YAAc,EAC1C,OAAQA,EAAS,OACjB,UAAWA,EAAS,SACxB,EAAE,CACN,CAEA,uBAAwB,CACpB,OAAO,MAAM,KAAK,KAAK,mBAAmB,OAAO,CAAC,EAAE,IAAIA,IAAa,CACjE,OAAQA,EAAS,OACjB,SAAUA,EAAS,UAAY,UAC/B,SAAUA,EAAS,UAAY,EAC/B,SAAU,KAAK,MAAOA,EAAS,cAAgBA,EAAS,YAAe,GAAG,EAE1E,YAAaA,EAAS,aAAe,EACrC,kBAAmBA,EAAS,eAAiB,EAC7C,OAAQA,EAAS,OACjB,UAAWA,EAAS,SACxB,EAAE,CACN,CAEA,6BAA8B,CAC1B,OAAO,MAAM,KAAK,KAAK,yBAAyB,OAAO,CAAC,EAAE,IAAIA,IAAa,CACvE,OAAQA,EAAS,OACjB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,SAAUA,EAAS,UAAY,2BAC/B,WAAYA,EAAS,UACzB,EAAE,CACN,CAEA,MAAM,mBAAmBnF,EAAQ,CAC7B,IAAM9D,EAAW,KAAK,yBAAyB,IAAI8D,CAAM,EACzD,GAAI,CAAC9D,EAAU,MAAO,GACtB,IAAM4F,EAAa,MAAM,KAAK,6BAA6B9B,EAAQ9D,EAAS,IAAI,EAChF,YAAK,mBAAmB,IAAI8D,EAAQ,CAChC,OAAAA,EACA,SAAU9D,EAAS,SACnB,SAAUA,EAAS,SACnB,SAAUA,EAAS,UAAY,2BAC/B,SAAUA,EAAS,SACnB,YAAaA,EAAS,YACtB,UAAWA,EAAS,WAAa,KAAK,WACtC,WAAA4F,EACA,KAAM5F,EAAS,KACf,eAAgB,IAAI,IACpB,cAAe,EACf,UAAW,KAAK,IAAI,EACpB,cAAe,KAAK,IAAI,EACxB,OAAQ,YACR,QAAS,CAAC,CAACA,EAAS,QACpB,MAAOA,EAAS,OAAS,IAC7B,CAAC,EACD,KAAK,yBAAyB,OAAO8D,CAAM,EAC3C,MAAM,KAAK,kBAAkB,CAAE,KAAM,yBAA0B,OAAAA,EAAQ,SAAU,GAAM,UAAW,KAAK,IAAI,CAAE,CAAC,EAE9G,KAAK,4BAA4BA,CAAM,EAChC,EACX,CAKA,4BAA4BA,EAAQ,CAKhC,IAAMoF,EAAK,KAAK,mBAAmB,IAAIpF,CAAM,EACxCoF,IACDA,EAAG,aAAa,cAAcA,EAAG,WAAW,EAChDA,EAAG,mBAAqBA,EAAG,eAAiB,EAC5CA,EAAG,kBAAoB,KAAK,IAAI,EAEhCA,EAAG,YAAc,YAAY,SAAY,CACrC,IAAM/D,EAAQ,KAAK,mBAAmB,IAAIrB,CAAM,EAChD,GAAI,CAACqB,GAASA,EAAM,cAAgB+D,EAAG,YAAa,CAChD,cAAcA,EAAG,WAAW,EAC5B,MACJ,CACA,GAAI/D,EAAM,SAAW,aAAeA,EAAM,WAAY,CAClD,cAAcA,EAAM,WAAW,EAC/BA,EAAM,YAAc,KACpB,MACJ,CAOA,GAJIA,EAAM,gBAAkBA,EAAM,qBAC9BA,EAAM,mBAAqBA,EAAM,cACjCA,EAAM,kBAAoB,KAAK,IAAI,GAEnC,EAAAA,EAAM,eAAiBA,EAAM,cAG7B,OAAK,IAAI,GAAKA,EAAM,eAAiB,GAAK,KAG9C,IAAI,KAAK,IAAI,EAAIA,EAAM,kBAAoB,KAAa,CACpD,cAAcA,EAAM,WAAW,EAC/BA,EAAM,YAAc,KACpBA,EAAM,OAAS,SACX,KAAK,SAAS,KAAK,QAAQ,kEAA6D,EAC5F,KAAK,yBAAyBrB,CAAM,EACpC,MACJ,CAEA,MAAM,KAAK,sBAAsBA,CAAM,EAC3C,EAAG,IAAO,EACd,CAEA,MAAM,sBAAsBA,EAAQ,CAChC,IAAMqB,EAAQ,KAAK,mBAAmB,IAAIrB,CAAM,EAChD,GAAI,CAACqB,GAAS,CAACA,EAAM,eAAgB,OACrC,IAAMgE,EAAkB,IAClB3C,EAAU,CAAC,EACjB,QAAS7C,EAAI,EAAGA,EAAIwB,EAAM,aAAeqB,EAAQ,OAAS2C,EAAiBxF,IAClEwB,EAAM,eAAe,IAAIxB,CAAC,GAAG6C,EAAQ,KAAK7C,CAAC,EAEpD,GAAI6C,EAAQ,SAAW,EACvB,CAAArB,EAAM,OAAS,YACf,GAAI,CACA,MAAM,KAAK,kBAAkB,CACzB,KAAM,qBACN,OAAArB,EACA,QAAA0C,EACA,UAAW,KAAK,IAAI,CACxB,CAAC,CACL,MAAY,CAEZ,EACJ,CAEA,MAAM,mBAAmB1C,EAAQpE,EAAQ,mBAAoB,CACzD,OAAK,KAAK,yBAAyB,IAAIoE,CAAM,GAC7C,KAAK,yBAAyB,OAAOA,CAAM,EAC3C,MAAM,KAAK,kBAAkB,CAAE,KAAM,yBAA0B,OAAAA,EAAQ,SAAU,GAAO,MAAApE,EAAO,UAAW,KAAK,IAAI,CAAE,CAAC,EAC/G,IAHgD,EAI3D,CAEA,eAAeoE,EAAQ,CACnB,GAAI,CACA,OAAI,KAAK,gBAAgB,IAAIA,CAAM,GAC/B,KAAK,gBAAgBA,CAAM,EACpB,IAEP,KAAK,mBAAmB,IAAIA,CAAM,GAClC,KAAK,yBAAyBA,CAAM,EAC7B,IAEJ,EACX,OAASpE,EAAO,CACZ,eAAQ,MAAM,oCAAgCA,CAAK,EAC5C,EACX,CACJ,CAEA,gBAAgBoE,EAAQ,CACpB,IAAMgC,EAAgB,KAAK,gBAAgB,IAAIhC,CAAM,EACjDgC,IACIA,EAAc,eACd,aAAaA,EAAc,YAAY,EACvCA,EAAc,aAAe,MAE7BA,EAAc,iBACd,aAAaA,EAAc,cAAc,EACzCA,EAAc,eAAiB,MAE/BA,EAAc,gBACdA,EAAc,cAAc,IAAI,MAAM,iDAAiD,CAAC,EACxFA,EAAc,cAAgB,KAC9BA,EAAc,eAAiB,OAIvC,KAAK,gBAAgB,OAAOhC,CAAM,EAClC,KAAK,YAAY,OAAOA,CAAM,EAC9B,KAAK,eAAe,OAAOA,CAAM,EACjC,KAAK,8BAA8B,OAAOA,CAAM,EAGhD,QAAWsF,KAAW,KAAK,gBACnBA,EAAQ,WAAWtF,CAAM,GACzB,KAAK,gBAAgB,OAAOsF,CAAO,CAG/C,CAEA,yBAAyBtF,EAAQC,EAAO,CAEpC,IADA,KAAK,oBAAoB,IAAID,EAAQC,CAAK,EACnC,KAAK,oBAAoB,KAAO,KAAK,oCAAoC,CAC5E,IAAMsF,EAAe,KAAK,oBAAoB,KAAK,EAAE,KAAK,EAAE,MAC5D,KAAK,2BAA2BA,CAAY,CAChD,CACJ,CAEA,2BAA2BvF,EAAQ,CAC/B,IAAM2E,EAAa,KAAK,oBAAoB,IAAI3E,CAAM,EACtD,GAAI,CAAC2E,EAAY,OACjB,GAAI,CACIA,EAAW,SACXjH,GAAoB,WAAWiH,EAAW,MAAM,EAChD,IAAI,WAAWA,EAAW,MAAM,EAAE,KAAK,CAAC,EAEhD,MAAY,CAEZ,CACA,KAAK,oBAAoB,OAAO3E,CAAM,EAItC,IAAMoF,EAAK,KAAK,mBAAmB,IAAIpF,CAAM,EACzCoF,IAAOA,EAAG,SAAW,aAAeA,EAAG,cACnCA,EAAG,cAAe,cAAcA,EAAG,WAAW,EAAGA,EAAG,YAAc,MACtE,KAAK,mBAAmB,OAAOpF,CAAM,EAE7C,CAGA,yBAAyBA,EAAQ,CAC7B,GAAI,CAEA,KAAK,cAAc,OAAOA,CAAM,EAEhC,IAAMkE,EAAiB,KAAK,mBAAmB,IAAIlE,CAAM,EACzD,GAAIkE,EAAgB,CAOhB,GALIA,EAAe,cACf,cAAcA,EAAe,WAAW,EACxCA,EAAe,YAAc,MAG7BA,EAAe,gBAAkBA,EAAe,eAAe,KAAO,EAAG,CACzE,OAAW,CAACsB,EAAOjB,CAAK,IAAKL,EAAe,eACxC,GAAI,CAEIK,IAAUA,aAAiB,aAAeA,aAAiB,cAC3D7G,GAAoB,WAAW6G,CAAK,EAGhCA,aAAiB,YACJ,IAAI,WAAWA,CAAK,EAC5B,KAAK,CAAC,EACJA,aAAiB,YACxBA,EAAM,KAAK,CAAC,EAGxB,OAASkB,EAAY,CACjB,QAAQ,KAAK,8CAAqCA,CAAU,CAChE,CAEJvB,EAAe,eAAe,MAAM,CACxC,CAGA,GAAIA,EAAe,WACf,GAAI,CAEAA,EAAe,WAAa,IAChC,OAASwB,EAAU,CACf,QAAQ,KAAK,4CAAmCA,CAAQ,CAC5D,CAIJ,GAAIxB,EAAe,KACf,GAAI,CACI,MAAM,QAAQA,EAAe,IAAI,GACjCA,EAAe,KAAK,KAAK,CAAC,EAE9BA,EAAe,KAAO,IAC1B,OAASyB,EAAW,CAChB,QAAQ,KAAK,qCAA4BA,CAAS,CACtD,CAIJ,OAAW,CAAC9I,EAAK+I,CAAK,IAAK,OAAO,QAAQ1B,CAAc,EAChD0B,GAAS,OAAOA,GAAU,WACtBA,aAAiB,aAAeA,aAAiB,WACjDlI,GAAoB,WAAWkI,CAAK,EAC7B,MAAM,QAAQA,CAAK,GAC1BA,EAAM,KAAK,CAAC,EAEhB1B,EAAerH,CAAG,EAAI,KAGlC,CAGA,KAAK,mBAAmB,OAAOmD,CAAM,EACrC,KAAK,YAAY,OAAOA,CAAM,EAC9B,KAAK,8BAA8B,OAAOA,CAAM,EAGhD,IAAM2E,EAAa,KAAK,oBAAoB,IAAI3E,CAAM,EACtD,GAAI2E,EACA,GAAI,CACIA,EAAW,SACXjH,GAAoB,WAAWiH,EAAW,MAAM,EAGnC,IAAI,WAAWA,EAAW,MAAM,EACxC,KAAK,CAAC,GAIf,OAAW,CAAC9H,EAAK+I,CAAK,IAAK,OAAO,QAAQjB,CAAU,EAC5CiB,GAAS,OAAOA,GAAU,YACtBA,aAAiB,aAAeA,aAAiB,aACjDlI,GAAoB,WAAWkI,CAAK,EAExCjB,EAAW9H,CAAG,EAAI,MAI1B,KAAK,oBAAoB,OAAOmD,CAAM,CAC1C,OAAS6F,EAAa,CAClB,QAAQ,KAAK,qDAA4CA,CAAW,EAEpE,KAAK,oBAAoB,OAAO7F,CAAM,CAC1C,CAIJ,IAAM8F,EAAiB,CAAC,EACxB,QAAWR,KAAW,KAAK,gBACnBA,EAAQ,WAAWtF,CAAM,GACzB8F,EAAe,KAAKR,CAAO,EAKnC,QAAWA,KAAWQ,EAClB,KAAK,gBAAgB,OAAOR,CAAO,EAIvC,GAAI,OAAO,OAAW,KAAe,OAAO,GACxC,GAAI,CACA,OAAO,GAAG,CACd,MAAkB,CAElB,CAGJ,QAAQ,IAAI,sDAA+CtF,CAAM,EAAE,CAEvE,OAASpE,EAAO,CACZ,cAAQ,MAAM,6CAAyCA,CAAK,EAG5D,KAAK,mBAAmB,OAAOoE,CAAM,EACrC,KAAK,YAAY,OAAOA,CAAM,EAC9B,KAAK,oBAAoB,OAAOA,CAAM,EACtC,KAAK,cAAc,OAAOA,CAAM,EAE1B,IAAI,MAAM,0BAA0BpE,EAAM,OAAO,EAAE,CAC7D,CACJ,CAEA,kBAAkBoE,EAAQ,CACtB,GAAI,KAAK,gBAAgB,IAAIA,CAAM,EAAG,CAClC,IAAMmF,EAAW,KAAK,gBAAgB,IAAInF,CAAM,EAChD,MAAO,CACH,KAAM,UACN,OAAQmF,EAAS,OACjB,SAAUA,EAAS,KAAK,KACxB,SAAU,KAAK,MAAOA,EAAS,WAAaA,EAAS,YAAe,GAAG,EACvE,OAAQA,EAAS,OACjB,UAAWA,EAAS,SACxB,CACJ,CAEA,GAAI,KAAK,mBAAmB,IAAInF,CAAM,EAAG,CACrC,IAAMmF,EAAW,KAAK,mBAAmB,IAAInF,CAAM,EACnD,MAAO,CACH,KAAM,YACN,OAAQmF,EAAS,OACjB,SAAUA,EAAS,SACnB,SAAU,KAAK,MAAOA,EAAS,cAAgBA,EAAS,YAAe,GAAG,EAC1E,OAAQA,EAAS,OACjB,UAAWA,EAAS,SACxB,CACJ,CAEA,OAAO,IACX,CAEA,iBAAkB,CACd,MAAO,CACH,YAAa,GACb,gBAAiB,KAAK,gBAAgB,KACtC,mBAAoB,KAAK,mBAAmB,KAC5C,eAAgB,KAAK,gBAAgB,KAAO,KAAK,mBAAmB,KACpE,uBAAwB,KAAK,yBAC7B,YAAa,KAAK,cAClB,UAAW,KAAK,WAChB,iBAAkB,CAAC,CAAC,KAAK,cACzB,YAAa,KAAK,eAAe,cAAc,GAAK,GACpD,eAAgB,CAAC,CAAC,KAAK,eAAe,YACtC,iBAAkB,KAAK,eAAe,aAAa,WACnD,WAAY,KAAK,eAAe,WAChC,iBAAkB,CAAC,CAAC,KAAK,eAAe,cACxC,UAAW,CAAC,CAAC,KAAK,eAAe,OACjC,sBAAuB,KAAK,eAAe,qBAAuB,KAClE,mBAAoB,KAAK,sBAAsB,EAC/C,aAAc,KAAK,gBAAgB,CACvC,CACJ,CAEA,SAAU,CACNnK,GAA0B,YAAY,EAAE,WAAW,EAE/C,KAAK,eAAiB,KAAK,cAAc,aAAe,KAAK,oBAC7D,KAAK,cAAc,YAAY,UAAY,KAAK,kBAChD,KAAK,kBAAoB,MAGzB,KAAK,eAAiB,KAAK,yBAC3B,KAAK,cAAc,eAAiB,KAAK,uBACzC,KAAK,uBAAyB,MAG9B,KAAK,eAAiB,KAAK,+BAC3B,KAAK,cAAc,qBAAuB,KAAK,6BAC/C,KAAK,6BAA+B,MAIxC,QAAWgF,KAAU,KAAK,gBAAgB,KAAK,EAC3C,KAAK,gBAAgBA,CAAM,EAG/B,QAAWA,KAAU,KAAK,mBAAmB,KAAK,EAC9C,KAAK,yBAAyBA,CAAM,EAGpC,KAAK,WACL,KAAK,UAAU,MAAM,MAAM,EAG3B,KAAK,aACL,KAAK,YAAY,SAAS,MAAM,EAEhC,KAAK,sBACL,KAAK,qBAAqB,SAAS,MAAM,EAE7C,KAAK,8BAA8B,MAAM,EAGzC,KAAK,cAAc,MAAM,EACzB,KAAK,yBAAyB,MAAM,EACpC,KAAK,gBAAgB,MAAM,EAC3B,KAAK,mBAAmB,MAAM,EAC9B,KAAK,cAAc,OAAS,EAC5B,KAAK,YAAY,MAAM,EACvB,KAAK,eAAe,MAAM,EAC1B,KAAK,gBAAgB,MAAM,EAE3B,QAAWA,KAAU,MAAM,KAAK,KAAK,oBAAoB,KAAK,CAAC,EAC3D,KAAK,2BAA2BA,CAAM,EAG1C,KAAK,UAAU,CACnB,CAMA,gBAAgB+F,EAAa,CAEzB,KAAK,YAAY,MAAM,CAC3B,CAMA,2BAA4B,CAsCxB,MArCkB,CACd,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,mBAAoB,CAChB,YAAa,CAAC,CAAC,KACf,iBAAkB,CAAC,CAAC,KAAK,cACzB,kBAAmB,KAAK,eAAe,aAAa,KACpD,sBAAuB,KAAK,eAAe,qBAAuB,IACtE,EACA,cAAe,CACX,eAAgB,CAAC,CAAC,KAAK,eAAe,YACtC,iBAAkB,KAAK,eAAe,aAAa,WACnD,YAAa,KAAK,eAAe,cAAc,GAAK,GACpD,WAAY,KAAK,eAAe,WAChC,iBAAkB,CAAC,CAAC,KAAK,eAAe,cACxC,UAAW,CAAC,CAAC,KAAK,eAAe,OACjC,kBAAmB,CAAC,CAAC,KAAK,eAAe,eACzC,eAAgB,CAAC,CAAC,KAAK,eAAe,WAC1C,EACA,gBAAiB,CACb,cAAe/K,GAA0B,YAAY,EAAE,SAAS,EAChE,cAAeA,GAA0B,YAAY,EAAE,iBAAiB,EACxE,aAAc,CAAC,CAAC,KAAK,UACrB,eAAgB,CAAC,CAAC,KAAK,WAC3B,EACA,UAAW,CACP,gBAAiB,KAAK,gBAAgB,KACtC,mBAAoB,KAAK,mBAAmB,KAC5C,cAAe,KAAK,cAAc,KAClC,YAAa,KAAK,YAAY,IAClC,EACA,gBAAiB,CACb,eAAgB,KAAK,sBAAsB,EAC3C,eAAgB,KAAK,eAAe,KAAK,aAAa,EACtD,aAAc,OAAO,KAAK,KAAK,sBAAsB,CACzD,CACJ,CAGJ,CAEA,MAAM,mBAAmBgF,EAAQ,CAC7B,GAAI,CACA,GAAI,CAAC,KAAK,cAAc,gBAAkB,CAAC,KAAK,cAAc,YAC1D,MAAM,IAAI,MAAM,4BAA4B,EAIhD,IAAMgG,EAAe,MAAM,KAAK,qBAAqBhG,CAAM,EAGrDiG,EAAc,MAAM,KAAK,6BAA6BjG,EAAQgG,EAAa,IAAI,EAG/EE,EAAW,IAAI,YAAY,EAAE,OAAO,WAAW,EAC/CrD,EAAQ,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAEjDsD,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAItD,CAAM,EAC7BmD,EAAa,IACbE,CACJ,EAEME,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAIvD,CAAM,EAC7BoD,EACAE,CACJ,EAIA,GAFsB,IAAI,YAAY,EAAE,OAAOC,CAAS,IAElC,YAClB,MAAO,CAAE,QAAS,GAAM,QAAS,kBAAmB,EAEpD,MAAM,IAAI,MAAM,gCAAgC,CAGxD,OAASxK,EAAO,CACZ,eAAQ,MAAM,qCAAiCA,CAAK,EAC7C,CAAE,QAAS,GAAO,MAAOA,EAAM,OAAQ,CAClD,CACJ,CAMA,2BAA4B,CACxB,GAAI,CAAC,KAAK,cACN,MAAM,IAAI,MAAM,8BAA8B,EAGlD,KAAK,cAAc,mBAAqB,KAExC,KAAK,cAAc,sBAAyB8H,GAAY,CACpD,KAAK,cAAc,oBAAsBA,CAC7C,EAEA,KAAK,cAAc,sBAAuB7H,GAC/B,KAAK,kBAAkBA,CAAO,CACxC,CACL,CAEA,OAAO,wBAAwBwK,EAAoB,CAC/C,MAAO,OAAOtK,GAAU,CACpB,GAAI,CACA,GAAI,OAAOA,EAAM,MAAS,SAAU,CAChC,IAAMsE,EAAS,KAAK,MAAMtE,EAAM,IAAI,EAEpC,GAAIsK,EAAmB,sBAAsBhG,CAAM,EAC/C,aAAMgG,EAAmB,kBAAkBhG,CAAM,EAC1C,EAEf,CACJ,MAAgB,CAChB,CAEA,MAAO,EACX,CACJ,CAMA,cAAclE,EAAY,CACtB,GAAI,CAACA,GAAc,EAAEA,aAAsB,WACvC,MAAM,IAAI,MAAM,iCAAiC,EAErD,KAAK,WAAaA,EAClB,QAAQ,IAAI,wCAAiC,CACjD,CAEA,mBAAmBG,EAAW,CAC1B,GAAI,CAACA,GAAa,EAAEA,aAAqB,WACrC,MAAM,IAAI,MAAM,qCAAqC,EAEzD,KAAK,gBAAkBA,EACvB,QAAQ,IAAI,6CAAsC,CACtD,CAEA,MAAM,wBAAyB,CAC3B,GAAI,CACA,IAAMgK,EAAU,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,oBACN,cAAe,KACf,eAAgB,IAAI,WAAW,CAAC,EAAG,EAAG,CAAC,CAAC,EACxC,KAAM,SACV,EACA,GACA,CAAC,OAAQ,QAAQ,CACrB,EAEA,YAAK,WAAaA,EAAQ,WAC1B,KAAK,gBAAkBA,EAAQ,UAE/B,QAAQ,IAAI,+CAAwC,EAC7CA,CACX,OAAS1K,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,8CAA0CuG,CAAS,EAC3D,IAAI,MAAMA,CAAS,CAC7B,CACJ,CAEA,WAAY,CACR,KAAK,WAAa,KAClB,KAAK,gBAAkB,KACvB,QAAQ,IAAI,iCAA0B,CAC1C,CAEA,mBAAoB,CAChB,MAAO,CACH,eAAgB,KAAK,aAAe,KACpC,oBAAqB,KAAK,kBAAoB,KAC9C,cAAenH,GAA0B,YAAY,EAAE,SAAS,EAChE,cAAeA,GAA0B,YAAY,EAAE,iBAAiB,CAC5E,CACJ,CAEA,qBAAsB,CAClB,OAAO,KAAK,eAAe,cACpB,KAAK,eAAe,gBAAgB,UAAU,EAAG,EAAE,GACnD,gBACX,CAEA,SAAU,CACNA,GAA0B,YAAY,EAAE,WAAW,EACnD,KAAK,UAAU,EACf,QAAQ,IAAI,iDAA0C,CAC1D,CACJ,EC/6EO,IAAMuL,GAAa,OAAO,UAAc,KACxC,cAAc,KAAK,UAAU,SAAS,GACtC,CAAC,wBAAwB,KAAK,UAAU,SAAS,EAK3CC,GAAe,CAWxB,SAAU,CACN,SAAU,GACV,aAAc,EACd,OAAQ,EACR,OAAQ,EACR,kBAAmB,KACnB,IAAK,CACT,EAIA,UAAW,GAGX,OAAQ,CACJ,WAAY,IACZ,SAAU,OACV,gBAAiB,MACrB,CACJ,EAMaC,GAAe,CACxB,qBAAsB,CAAC,MAAO,MAAO,OAAQ,KAAK,EAGlD,IAAK,CACD,yBAA0B,WAC1B,UAAW,CACP,CAAE,IAAK,MAAQ,sBAAuB,EAAG,WAAY,KAAS,gBAAiB,MAAO,EACtF,CAAE,IAAK,MAAQ,sBAAuB,EAAG,WAAY,IAAS,gBAAiB,MAAO,EACtF,CAAE,IAAK,OAAQ,sBAAuB,EAAG,WAAY,KAAS,gBAAiB,MAAO,CAC1F,EACA,sBAAuB,UAC3B,EACA,IAAK,CACD,gBAAiB,OACjB,WAAY,KACZ,sBAAuB,oBAC3B,EAEA,UAAW,CACP,CAAE,IAAK,MAAQ,sBAAuB,EAAG,WAAY,IAAO,EAC5D,CAAE,IAAK,MAAQ,sBAAuB,EAAG,WAAY,GAAO,EAC5D,CAAE,IAAK,OAAQ,sBAAuB,EAAG,WAAY,IAAQ,CACjE,EACA,gBAAiB,QACrB,EAKaC,GAAmB,CAC5B,QAAS,4EACT,MAAO,CACH,OAAQ,CAAC,eAAgB,OAAQ,WAAY,UAAW,WAAW,EACnE,KAAM,EACV,EACA,MAAO,CACH,OAAQ,CAAC,eAAgB,MAAM,EAC/B,KAAM,EACV,CACJ,EAKaC,GAAoB,CAC7B,WAAY,IACZ,KAAM,CACF,QAAS,GACT,WAAY,IACZ,gBAAiB,GACrB,EACA,IAAK,CACD,OAAQ,IACR,UAAW,GACf,EACA,YAAa,GACb,UAAW,GACX,gBAAiB,IACjB,mBAAoB,EACpB,aAAc,GAClB,EC/GA,SAASC,GAAUC,EAAK,CACpB,OAAOA,EAAI,QAAQ;AAAA,CAAM,IAAM,GAAK;AAAA,EAAS;AAAA,CACjD,CAMO,SAASC,GAASD,EAAK,CAC1B,IAAME,EAAMH,GAAUC,CAAG,EACnBG,EAAQH,EAAI,MAAM,SAAS,EAC3BI,EAAU,CAAC,EACXC,EAAQ,CAAC,EACXC,EAAU,KACd,QAAWC,KAAQJ,EACXI,EAAK,WAAW,IAAI,GACpBD,EAAU,CAAE,MAAO,CAACC,CAAI,CAAE,EAC1BF,EAAM,KAAKC,CAAO,GACXA,EACPA,EAAQ,MAAM,KAAKC,CAAI,EAEvBH,EAAQ,KAAKG,CAAI,EAGzB,MAAO,CAAE,IAAAL,EAAK,QAAAE,EAAS,MAAAC,CAAM,CACjC,CAGO,SAASG,GAAQC,EAAQ,CAC5B,IAAMC,EAAM,CAAC,GAAGD,EAAO,OAAO,EAC9B,QAAWE,KAAKF,EAAO,MAAOC,EAAI,KAAK,GAAGC,EAAE,KAAK,EACjD,OAAOD,EAAI,KAAKD,EAAO,GAAG,CAC9B,CAGO,SAASG,GAAYC,EAAS,CACjC,IAAMF,EAAIE,EAAQ,MAAM,CAAC,EAAE,MAAM,UAAU,EAC3C,OAAOF,EAAIA,EAAE,CAAC,EAAI,IACtB,CAOO,SAASG,GAAiBD,EAASE,EAAW,CACjD,IAAMC,EAAK,IAAI,OAAO,uBAAyBD,EAAY,MAAO,GAAG,EAC/DE,EAAM,CAAC,EACb,QAAWV,KAAQM,EAAQ,MAAO,CAC9B,IAAMF,EAAIJ,EAAK,MAAMS,CAAE,EACnBL,GAAGM,EAAI,KAAKN,EAAE,CAAC,CAAC,CACxB,CACA,OAAOM,CACX,CAGA,SAASC,GAAgBC,EAAO,CAC5B,IAAMC,EAAM,IAAI,IAChB,QAAWC,KAAQF,EAAM,MAAM,GAAG,EAAG,CACjC,IAAMG,EAAID,EAAK,KAAK,EACpB,GAAI,CAACC,EAAG,SACR,IAAMC,EAAKD,EAAE,QAAQ,GAAG,EACpBC,IAAO,GAAIH,EAAI,IAAIE,EAAG,MAAS,EAC9BF,EAAI,IAAIE,EAAE,MAAM,EAAGC,CAAE,EAAE,KAAK,EAAGD,EAAE,MAAMC,EAAK,CAAC,EAAE,KAAK,CAAC,CAC9D,CACA,OAAOH,CACX,CAGA,SAASI,GAAoBJ,EAAK,CAC9B,IAAMK,EAAQ,CAAC,EACf,OAAW,CAACC,EAAGC,CAAC,IAAKP,EAAKK,EAAM,KAAKE,IAAM,OAAYD,EAAI,GAAGA,CAAC,IAAIC,CAAC,EAAE,EACtE,OAAOF,EAAM,KAAK,GAAG,CACzB,CAOO,SAASG,GAAWf,EAASgB,EAAIC,EAAQ,CAC5C,IAAMC,EAAUlB,EAAQ,MAAM,UAAUmB,GAAKA,EAAE,WAAW,UAAUH,CAAE,GAAG,GAAKG,IAAM,UAAUH,CAAE,EAAE,EAClG,GAAIE,IAAY,GAAI,CAChB,IAAME,EAAWpB,EAAQ,MAAMkB,CAAO,EAAE,MAAM,UAAUF,CAAE,IAAI,MAAM,EAC9DT,EAAMF,GAAgBe,CAAQ,EACpC,OAAW,CAACP,EAAGC,CAAC,IAAK,OAAO,QAAQG,CAAM,EAAGV,EAAI,IAAIM,EAAG,OAAOC,CAAC,CAAC,EACjEd,EAAQ,MAAMkB,CAAO,EAAI,UAAUF,CAAE,IAAIL,GAAoBJ,CAAG,CAAC,GACjE,MACJ,CAEA,IAAMA,EAAM,IAAI,IAChB,OAAW,CAACM,EAAGC,CAAC,IAAK,OAAO,QAAQG,CAAM,EAAGV,EAAI,IAAIM,EAAG,OAAOC,CAAC,CAAC,EACjE,IAAMO,EAAU,UAAUL,CAAE,IAAIL,GAAoBJ,CAAG,CAAC,GAClDe,EAAYtB,EAAQ,MAAM,UAAUmB,GAAKA,EAAE,WAAW,YAAYH,CAAE,GAAG,CAAC,EAC1EM,IAAc,GAAItB,EAAQ,MAAM,OAAOsB,EAAY,EAAG,EAAGD,CAAO,EAC/DrB,EAAQ,MAAM,KAAKqB,CAAO,CACnC,CAOO,SAASE,GAAkBpC,EAAKqC,EAAU,CAC7C,GAAI,CAACrC,GAAO,OAAOA,GAAQ,SAAU,OAAOA,EAC5C,IAAMS,EAASR,GAASD,CAAG,EACvBsC,EAAU,GACd,QAAWzB,KAAWJ,EAAO,MACzB,GAAIG,GAAYC,CAAO,IAAM,QAC7B,QAAWgB,KAAMf,GAAiBD,EAAS,MAAM,EAC7Ce,GAAWf,EAASgB,EAAIQ,CAAQ,EAChCC,EAAU,GAGlB,OAAOA,EAAU9B,GAAQC,CAAM,EAAIT,CACvC,CAKA,IAAMuC,GAAY,oDAGX,SAASC,GAAqB3B,EAAS,CAC1C,IAAMI,EAAM,CAAC,EACb,QAAWV,KAAQM,EAAQ,MAAO,CAC9B,IAAMF,EAAIJ,EAAK,MAAM,6BAA6B,EAC9CI,GAAK,CAAC4B,GAAU,KAAK5B,EAAE,CAAC,CAAC,GAAGM,EAAI,KAAKN,EAAE,CAAC,CAAC,CACjD,CACA,OAAOM,CACX,CAMO,SAASwB,GAAa5B,EAAS6B,EAAW,CAC7C,QAAWb,KAAMW,GAAqB3B,CAAO,EACzC,QAAW8B,KAAMD,EAAW,CACxB,IAAMnC,EAAO,aAAasB,CAAE,IAAIc,CAAE,GAClC,GAAI9B,EAAQ,MAAM,SAASN,CAAI,EAAG,SAElC,IAAIqC,EAAW,GACf,QAASC,EAAI,EAAGA,EAAIhC,EAAQ,MAAM,OAAQgC,IAAK,CAC3C,IAAMb,EAAInB,EAAQ,MAAMgC,CAAC,GACrBb,EAAE,WAAW,YAAYH,CAAE,GAAG,GAAKG,EAAE,WAAW,UAAUH,CAAE,GAAG,GAAKG,EAAE,WAAW,aAAaH,CAAE,GAAG,KAAGe,EAAWC,EACzH,CACID,IAAa,KAAIA,EAAW/B,EAAQ,MAAM,OAAS,GACvDA,EAAQ,MAAM,OAAO+B,EAAW,EAAG,EAAGrC,CAAI,CAC9C,CAER,CAMO,SAASuC,GAAajC,EAASkC,EAAK,CACvC,GAAIlC,EAAQ,MAAM,KAAKmB,GAAKA,EAAE,WAAW,WAAW,GAAKA,EAAE,SAASe,CAAG,CAAC,EAAG,OAC3E,IAAIC,EAAQ,EAAGJ,EAAW,GAC1B,QAAS,EAAI,EAAG,EAAI/B,EAAQ,MAAM,OAAQ,IAAK,CAC3C,IAAMF,EAAIE,EAAQ,MAAM,CAAC,EAAE,MAAM,iBAAiB,EAC9CF,IAAKqC,EAAQ,KAAK,IAAIA,EAAO,OAAOrC,EAAE,CAAC,CAAC,CAAC,EAAGiC,EAAW,EAC/D,CACIA,IAAa,KAEbA,EAAW/B,EAAQ,MAAM,UAAUmB,GAAKA,EAAE,WAAW,QAAQ,CAAC,EAC1DY,IAAa,KAAIA,EAAW/B,EAAQ,MAAM,OAAS,IAE3DA,EAAQ,MAAM,OAAO+B,EAAW,EAAG,EAAG,YAAYI,EAAQ,CAAC,IAAID,CAAG,EAAE,CACxE,CAOO,SAASE,GAAejD,EAAKkD,EAAK,CACrC,GAAI,CAAClD,GAAO,OAAOA,GAAQ,UAAY,CAACkD,EAAK,OAAOlD,EACpD,IAAMS,EAASR,GAASD,CAAG,EACvBsC,EAAU,GACd,QAAWzB,KAAWJ,EAAO,MAAO,CAChC,IAAM0C,EAAOvC,GAAYC,CAAO,EAC1BuC,EAAID,IAAS,QAAUD,EAAI,MAAQC,IAAS,QAAUD,EAAI,MAAQ,KACnEE,IACD,MAAM,QAAQA,EAAE,MAAM,IAAKX,GAAa5B,EAASuC,EAAE,MAAM,EAAGd,EAAU,IACtEc,EAAE,MAAQF,EAAI,UAAWJ,GAAajC,EAASqC,EAAI,OAAO,EAAGZ,EAAU,IAC/E,CACA,OAAOA,EAAU9B,GAAQC,CAAM,EAAIT,CACvC,CCpLO,SAASqD,GAA2BC,EAAa,CACpD,GAAI,CAGA,GAFIC,IACA,CAACD,GAAe,OAAOA,EAAY,qBAAwB,YAC3D,CAACE,GAAa,UAAW,MAAO,GACpC,IAAMC,EAAQ,OAAO,aAAiB,KAAe,aAAa,gBAC5D,aAAa,gBAAgB,OAAO,EACpC,KACN,GAAI,CAACA,GAAQ,CAAC,MAAM,QAAQA,EAAK,MAAM,EAAG,MAAO,GAEjD,IAAMC,EAAQC,GAAK,QAAQ,KAAKA,EAAE,QAAQ,EACpCC,EAASD,GAAK,SAAS,KAAKA,EAAE,QAAQ,EAC5C,GAAI,CAACF,EAAK,OAAO,KAAKC,CAAK,EAAG,MAAO,GAErC,IAAMG,EAAMJ,EAAK,OAAO,OAAOC,CAAK,EAC9BI,EAAOL,EAAK,OAAO,OAAOG,CAAM,EAChCG,EAAON,EAAK,OAAO,OAAOE,GAAK,CAACD,EAAMC,CAAC,GAAK,CAACC,EAAOD,CAAC,CAAC,EAC5D,OAAAL,EAAY,oBAAoB,CAAC,GAAGO,EAAK,GAAGC,EAAM,GAAGC,CAAI,CAAC,EACnD,EACX,MAAY,CACR,MAAO,EACX,CACJ,CASA,eAAsBC,GAAqBC,EAAQC,EAAU,CAAC,EAAG,CAC7D,GAAI,CAEA,GADIX,IACA,CAACU,GAAU,OAAOA,EAAO,eAAkB,WAAY,MAAO,GAClE,IAAME,EAAM,CAAE,GAAGX,GAAa,OAAQ,GAAGU,CAAQ,EAC3CE,EAASH,EAAO,cAAc,GAChC,CAACG,EAAO,WAAaA,EAAO,UAAU,SAAW,KAAGA,EAAO,UAAY,CAAC,CAAC,CAAC,GAC9E,QAAWC,KAAOD,EAAO,UACrBC,EAAI,WAAaF,EAAI,WACrBE,EAAI,SAAWF,EAAI,SACnBE,EAAI,gBAAkBF,EAAI,gBAE9B,aAAMF,EAAO,cAAcG,CAAM,EAC1B,EACX,MAAY,CACR,MAAO,EACX,CACJ,CCvDA,IAAME,GAAa,CAAE,IAAK,EAAG,IAAK,EAAG,KAAM,EAAG,IAAK,CAAE,EAG9C,SAASC,GAAeC,EAAU,CAErC,OADY,OAAOA,GAAY,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,GAAK,IACzC,YAAY,CAC3B,CAQO,SAASC,GAAgBC,EAAQ,CACpC,IAAMC,EAAOC,GAAK,CACd,IAAMC,EAAIN,GAAeK,EAAE,QAAQ,EACnC,OAAO,OAAO,UAAU,eAAe,KAAKN,GAAYO,CAAC,EAAIP,GAAWO,CAAC,EAAI,EACjF,EACA,OAAOH,EACF,IAAI,CAACE,EAAGE,KAAO,CAAE,EAAAF,EAAG,EAAAE,CAAE,EAAE,EACxB,KAAK,CAACC,EAAGC,IAAOL,EAAKI,EAAE,CAAC,EAAIJ,EAAKK,EAAE,CAAC,GAAOD,EAAE,EAAIC,EAAE,CAAE,EACrD,IAAIC,GAAKA,EAAE,CAAC,CACrB,CAGO,SAASC,GAAwBC,EAAM,CAC1C,GAAI,CAACA,GAAQ,CAAC,MAAM,QAAQA,EAAK,MAAM,EAAG,OAAO,KACjD,IAAMC,EAAU,IAAI,IAAID,EAAK,OAAO,IAAIP,GAAKL,GAAeK,EAAE,QAAQ,CAAC,CAAC,EACxE,QAAWS,KAAQC,GAAa,qBAAsB,GAAIF,EAAQ,IAAIC,CAAI,EAAG,OAAOA,EACpF,OAAO,IACX,CAEA,SAASE,IAAY,CACjB,OAAQ,OAAO,aAAiB,KAAe,aAAa,gBACtD,aAAa,gBAAgB,OAAO,EAAI,IAClD,CAOO,SAASC,GAA2BC,EAAa,CACpD,GAAI,CAEA,GADIC,IACA,CAACD,GAAe,OAAOA,EAAY,qBAAwB,WAAY,MAAO,GAClF,IAAMN,EAAOI,GAAU,EACvB,MAAI,CAACJ,GAAQ,CAAC,MAAM,QAAQA,EAAK,MAAM,EAAU,IACjDM,EAAY,oBAAoBhB,GAAgBU,EAAK,MAAM,CAAC,EACrDD,GAAwBC,CAAI,EACvC,MAAY,CACR,MAAO,EACX,CACJ,CAqCO,SAASQ,GAAgBC,EAAW,CACvC,OAAIA,IAAc,MACP,CAAE,gBAAiBC,GAAa,IAAI,yBAA0B,WAAY,KAAS,sBAAuBA,GAAa,IAAI,qBAAsB,EAExJD,IAAc,MACP,CAAE,gBAAiBC,GAAa,IAAI,gBAAiB,WAAYA,GAAa,IAAI,WAAY,sBAAuBA,GAAa,IAAI,qBAAsB,EAGhK,CAAE,gBAAiB,OAAW,WAAY,KAAS,sBAAuB,UAAW,CAChG,CAQA,eAAsBC,GAAqBC,EAAQC,EAAU,CAAC,EAAG,CAC7D,GAAI,CAEA,GADIC,IACA,CAACF,GAAU,OAAOA,EAAO,eAAkB,WAAY,MAAO,GAClE,IAAMG,EAAYC,GAAwBC,GAAU,CAAC,GAAK,MACpDC,EAAO,CAAE,GAAGV,GAAgBO,CAAS,EAAG,GAAGF,CAAQ,EACnDM,EAASP,EAAO,cAAc,GAChC,CAACO,EAAO,WAAaA,EAAO,UAAU,SAAW,KAAGA,EAAO,UAAY,CAAC,CAAC,CAAC,GAC9E,IAAMC,EAAYD,EAAO,UAAU,OAAS,EAE5C,GAAIC,EAGA,QAAWC,KAAOF,EAAO,UAAWE,EAAI,gBAAkBX,GAAa,oBACpE,CACH,IAAMW,EAAMF,EAAO,UAAU,CAAC,EAC9BE,EAAI,WAAaH,EAAK,WACtBG,EAAI,gBAAkBX,GAAa,gBAC/BQ,EAAK,kBAAiBG,EAAI,gBAAkBH,EAAK,gBACzD,CACIA,EAAK,wBAAuBC,EAAO,sBAAwBD,EAAK,uBAEpE,GAAI,CACA,aAAMN,EAAO,cAAcO,CAAM,EAC1B,EACX,MAAY,CAER,GAAI,CAACC,GAAaF,EAAK,gBAAiB,CACpC,OAAOC,EAAO,UAAU,CAAC,EAAE,gBAC3B,GAAI,CACA,aAAMP,EAAO,cAAcO,CAAM,EAC1B,EACX,MAAa,CACT,MAAO,EACX,CACJ,CACA,MAAO,EACX,CACJ,MAAY,CACR,MAAO,EACX,CACJ,CCnJO,SAASG,GAAeC,EAAOC,EAAO,CAAC,EAAG,CAC7C,IAAIC,EAAW,KAAMC,EAAgB,KAAMC,EAAgB,KAC3D,QAAWC,KAAKL,EACR,CAACK,GAAK,OAAOA,EAAE,MAAS,WACxBA,EAAE,OAAS,gBAAkB,CAACA,EAAE,UAC5B,CAACH,GAAYG,EAAE,OAAS,WAASH,EAAWG,GACzCA,EAAE,OAAS,sBACd,CAACF,GAAiBE,EAAE,OAAS,WAASF,EAAgBE,GACnDA,EAAE,OAAS,mBACHA,EAAE,WAAaA,EAAE,UAAYA,EAAE,QAAU,eACzC,CAACD,GAAiBC,EAAE,aAAYD,EAAgBC,IAIvE,IAAMC,EAAc,OAAOJ,GAAU,aAAe,CAAC,EAC/CK,EAAc,OAAOJ,GAAe,aAAe,CAAC,EACpDK,EAAQF,GAAeL,EAAK,aAAeK,GAC3CG,EAAQF,GAAeN,EAAK,aAAeM,GAC3CG,EAAQF,EAAQC,EAEhBE,EAAUD,EAAQ,EAAI,KAAK,IAAI,EAAG,KAAK,IAAI,EAAGD,EAAQC,CAAK,CAAC,EAAI,EAEhEE,EAASR,GAAe,sBAAwBD,GAAe,eAAiB,EAChFU,EAAQ,OAAOD,CAAM,EAAI,IACzBE,EAAW,OAAOX,GAAe,QAAU,CAAC,EAAI,IAChDY,EAA2BX,GAAe,0BAA4B,KACtE,OAAOA,EAAc,wBAAwB,EAAI,KACjDY,EAA0Bd,GAAU,yBAA2B,OAErE,MAAO,CACH,QAAAS,EAAS,MAAAE,EAAO,SAAAC,EAAU,yBAAAC,EAA0B,wBAAAC,EACpD,SAAU,CAAE,YAAAV,EAAa,YAAAC,CAAY,EACrC,QAAS,CAAC,EAAEL,IAAaC,GAAiBC,GAC9C,CACJ,CAMO,SAASa,GAAmBC,EAAG,CAClC,GAAI,CAACA,GAAK,CAACA,EAAE,QAAS,OAAO,KAC7B,IAAMC,EAAID,EAAE,QAASE,EAAIF,EAAE,MAC3B,OAAIC,EAAI,KAAQC,EAAI,IAAY,YAC5BD,EAAI,KAAQC,EAAI,IAAY,OAC5BD,EAAI,KAAQC,EAAI,IAAY,OACzB,MACX,CCxCO,SAASC,GAAiBC,EAAGC,EAAOC,EAAMC,GAAmB,CAChE,GAAI,CAAE,cAAAC,EAAe,eAAAC,EAAgB,sBAAAC,EAAuB,UAAAC,CAAU,EAAIN,EACtEO,EAAU,GAAOC,EAAS,SAE9B,GAAIT,EAAE,0BAA4B,MAAO,CAErC,IAAMU,EAAO,KAAK,IAAI,EAAG,EAAEJ,EAAwBJ,EAAI,cAAc,QAAQ,CAAC,CAAC,EAC3EQ,IAASJ,IAAyBA,EAAwBI,EAAMF,EAAU,IAC9ED,EAAY,EAAGE,EAAS,KAC5B,SAAWT,EAAE,QAAUE,EAAI,KAAK,SAAWF,EAAE,MAAQE,EAAI,IAAI,OAAQ,CAEjE,IAAMQ,EAAO,KAAK,IAAIR,EAAI,gBAAiB,KAAK,MAAME,GAAiB,EAAIF,EAAI,YAAY,CAAC,EACxFQ,IAASN,IAAiBA,EAAgBM,EAAMF,EAAU,IAC9DD,EAAY,EAAGE,EAAS,SAC5B,SAAWT,EAAE,QAAUE,EAAI,KAAK,YAAcF,EAAE,MAAQE,EAAI,IAAI,WAG5D,GADAK,GAAa,EAAGE,EAAS,aACrBF,GAAaL,EAAI,mBAAoB,CACrC,IAAMQ,EAAO,KAAK,IAAIL,EAAgB,KAAK,MAAMD,GAAiB,EAAIF,EAAI,UAAU,CAAC,EACjFQ,IAASN,IAAiBA,EAAgBM,EAAMF,EAAU,GAAMC,EAAS,UAC7EF,EAAY,CAChB,OAEAA,EAAY,EAGhB,MAAO,CAAE,cAAAH,EAAe,sBAAAE,EAAuB,UAAAC,EAAW,QAAAC,EAAS,OAAAC,CAAO,CAC9E,CAEO,IAAME,GAAN,KAAkC,CAKrC,YAAYC,EAAIC,EAAO,CAAC,EAAG,CACvB,KAAK,GAAKD,EACV,KAAK,eAAiBC,EAAK,iBAAmB,IAAM,MACpD,KAAK,UAAYA,EAAK,YAAc,IAAM,CAAC,GAC3C,KAAK,IAAMA,EAAK,KAAOV,GACvB,KAAK,OAAS,KACd,KAAK,cAAgB,CAAC,EACtB,KAAK,aAAe,OACpB,KAAK,MAAQ,CACT,cAAeU,EAAK,gBAAkB,KACtC,eAAgBA,EAAK,gBAAkB,KACvC,sBAAuB,EACvB,UAAW,CACf,CACJ,CAEA,OAAQ,CACA,KAAK,SACT,KAAK,OAAS,YAAY,IAAM,CAAE,KAAK,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,CAAG,EAAG,KAAK,IAAI,UAAU,EAC1F,CAEA,MAAO,CACC,KAAK,SAAU,cAAc,KAAK,MAAM,EAAG,KAAK,OAAS,KACjE,CAEA,MAAM,OAAQ,CACV,GAAI,CAAC,KAAK,IAAM,OAAO,KAAK,GAAG,UAAa,WAAY,OACxD,IAAMC,EAAS,MAAM,KAAK,GAAG,SAAS,EAChCC,EAAQ,OAAOD,EAAO,QAAW,WAAa,MAAM,KAAKA,EAAO,OAAO,CAAC,EAAIA,EAC5Ed,EAAIgB,GAAeD,EAAO,KAAK,aAAa,EAClD,KAAK,cAAgBf,EAAE,SAGvB,IAAMiB,EAAIC,GAAmBlB,CAAC,EAC9B,GAAIiB,GAAKA,IAAM,KAAK,aAAc,CAC9B,KAAK,aAAeA,EACpB,GAAI,CAAE,KAAK,UAAUA,EAAGjB,CAAC,CAAG,MAAY,CAAC,CAC7C,CAEA,GAAI,CAACA,EAAE,QAAS,OAEhB,IAAMmB,EAAWpB,GAAiBC,EAAG,KAAK,MAAO,KAAK,GAAG,EACzD,KAAK,MAAQ,CACT,cAAemB,EAAS,cACxB,eAAgB,KAAK,MAAM,eAC3B,sBAAuBA,EAAS,sBAChC,UAAWA,EAAS,SACxB,EACIA,EAAS,SACT,MAAM,KAAK,oBAAoB,CAEvC,CAEA,MAAM,qBAAsB,CAGxB,GAAIC,GAAW,OACf,IAAMC,EAAS,KAAK,eAAe,EACnC,GAAI,GAACA,GAAU,OAAOA,EAAO,eAAkB,YAC/C,GAAI,CACA,IAAMC,EAASD,EAAO,cAAc,EAEpC,IADI,CAACC,EAAO,WAAaA,EAAO,UAAU,SAAW,KAAGA,EAAO,UAAY,CAAC,CAAC,CAAC,GAC1EA,EAAO,UAAU,SAAW,EAE5BA,EAAO,UAAU,CAAC,EAAE,WAAa,KAAK,MAAM,cAC5CA,EAAO,UAAU,CAAC,EAAE,sBAAwB,KAAK,MAAM,0BACpD,CAGH,IAAMC,EAAMD,EAAO,UAAUA,EAAO,UAAU,OAAS,CAAC,EACxDC,EAAI,WAAa,KAAK,MAAM,aAChC,CACA,MAAMF,EAAO,cAAcC,CAAM,CACrC,MAAY,CAEZ,CACJ,CACJ,ECtFA,IAAME,GAAY,uBACZC,GAAe,0BACfC,GAAY,uBAGZC,GAAU,WAAW,GAAG,CAAI,EAC5BC,GAAU,WAAW,GAAG,CAAI,EAE5BC,GAAM,IAAI,YACVC,GAAM,IAAI,YAQHC,GAAiB,OAAO,OAAO,CAExC,mBAAoB,IAEpB,iBAAkB,KAGlB,mBAAoB,IAAS,GACjC,CAAC,EAED,SAASC,GAAIC,EAAO,CAChB,IAAIC,EAAS,GACPC,EAAO,IAAI,WAAWF,CAAK,EACjC,QAASG,EAAI,EAAGA,EAAID,EAAK,OAAQC,IAAKF,GAAU,OAAO,aAAaC,EAAKC,CAAC,CAAC,EAC3E,OAAO,KAAKF,CAAM,CACtB,CAEA,SAASG,GAAMC,EAAM,CACjB,IAAMJ,EAAS,KAAKI,CAAI,EAClBC,EAAM,IAAI,WAAWL,EAAO,MAAM,EACxC,QAASE,EAAI,EAAGA,EAAIF,EAAO,OAAQE,IAAKG,EAAIH,CAAC,EAAIF,EAAO,WAAWE,CAAC,EACpE,OAAOG,CACX,CAEA,SAASC,EAAQP,EAAO,CACpB,GAAI,CACIA,GAASA,EAAM,SACf,OAAO,gBAAgBA,CAAK,EAC5BA,EAAM,KAAK,CAAC,EAEpB,MAAY,CAA6C,CAC7D,CAEA,eAAeQ,GAAKC,EAAKC,EAAMC,EAAMC,EAAa,CAC9C,IAAMC,EAAM,MAAM,OAAO,OAAO,UAAU,MAAOJ,EAAK,OAAQ,GAAO,CAAC,YAAY,CAAC,EAC7EK,EAAO,MAAM,OAAO,OAAO,WAC7B,CAAE,KAAM,OAAQ,KAAM,UAAW,KAAAJ,EAAM,KAAMd,GAAI,OAAOe,CAAI,CAAE,EAC9DE,EACAD,EAAc,CAClB,EACA,OAAO,IAAI,WAAWE,CAAI,CAC9B,CAEA,eAAeC,GAAKC,EAAUC,EAAM,CAChC,IAAMJ,EAAM,MAAM,OAAO,OAAO,UAC5B,MAAOG,EAAU,CAAE,KAAM,OAAQ,KAAM,SAAU,EAAG,GAAO,CAAC,MAAM,CACtE,EACA,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,KAAK,OAAQH,EAAKI,CAAI,CAAC,CACrE,CAGA,eAAeC,GAAaC,EAAU,CAClC,IAAMC,EAAa,MAAML,GAAKI,EAAUzB,EAAO,EACzC2B,EAAe,MAAMN,GAAKI,EAAUxB,EAAO,EACjD,MAAO,CAAE,WAAAyB,EAAY,aAAAC,CAAa,CACtC,CAGA,eAAeC,GAAYC,EAASC,EAAU,CAC1C,IAAMC,EAAU,MAAMjB,GAAKgB,EAAUD,EAAShC,GAAW,EAAE,EACrDmC,EAAWD,EAAQ,MAAM,EAAG,EAAE,EAC9BN,EAAWM,EAAQ,MAAM,GAAI,EAAE,EACrC,OAAAlB,EAAQkB,CAAO,EACR,CAAE,SAAAC,EAAU,SAAAP,CAAS,CAChC,CAEO,IAAMQ,GAAN,KAAoB,CACvB,aAAc,CACV,KAAK,SAAW,KAChB,KAAK,iBAAmB,KACxB,KAAK,mBAAqB,KAC1B,KAAK,aAAe,KACpB,KAAK,iBAAmB,KACxB,KAAK,oBAAsB,KAC3B,KAAK,WAAa,EAClB,KAAK,cAAgB,EACrB,KAAK,mBAAqB,EAC1B,KAAK,SAAW,IAAI,IACpB,KAAK,YAAc,QACnB,KAAK,aAAe,EACxB,CAUA,MAAM,KAAK,CAAE,aAAAC,EAAc,YAAAC,EAAa,eAAAC,EAAgB,gBAAAC,EAAiB,YAAAC,CAAY,EAAG,CACpF,GAAI,EAAEJ,aAAwB,aAAeA,EAAa,SAAW,EACjE,MAAM,IAAI,MAAM,4CAA4C,EAEhE,GAAI,EAAEE,aAA0B,YAAc,EAAEC,aAA2B,WACvE,MAAM,IAAI,MAAM,iDAAiD,EASrE,GANA,KAAK,YAAcD,EAAe,WAAW,YAAc,QAI3D,KAAK,SAAW,MAAMtB,GAAKoB,EAAcC,GAAe,IAAI,WAAW,CAAC,EAAGpC,GAAW,EAAE,EAEpFuC,EAAa,CAIb,KAAK,aAAe,MAAM,KAAK,iBAAiB,EAWhD,KAAK,iBAAmBD,EACxB,KAAK,oBAAsB,KAE3B,IAAME,EAAK,MAAM,KAAK,IAAI,KAAK,aAAa,WAAY,KAAK,gBAAgB,EACvE,CAAE,SAAAP,EAAU,SAAAP,CAAS,EAAI,MAAMG,GAAY,KAAK,SAAUW,CAAE,EAClE1B,EAAQ0B,CAAE,EACV1B,EAAQ,KAAK,QAAQ,EACrB,KAAK,SAAWmB,EAChB,KAAK,iBAAmBP,CAC5B,MAII,KAAK,aAAe,CAAE,WAAYW,EAAgB,UAAW,IAAK,EAClE,KAAK,iBAAmB,KACxB,KAAK,oBAAsB,KAG/B,KAAK,aAAe,EACxB,CAEA,IAAI,eAAgB,CAAE,OAAO,KAAK,YAAc,CAYhD,IAAI,YAAa,CACb,OAAO,KAAK,cAAgB,KAAK,mBAAqB,IAC1D,CAGA,UAAW,CACP,MAAO,CACH,YAAa,KAAK,aAClB,QAAS,KAAK,mBAAqB,KACnC,UAAW,KAAK,qBAAuB,KACvC,UAAW,KAAK,WAChB,aAAc,KAAK,cACnB,kBAAmB,KAAK,mBACxB,YAAa,KAAK,SAAS,IAC/B,CACJ,CAEA,MAAM,kBAAmB,CACrB,OAAO,OAAO,OAAO,YACjB,CAAE,KAAM,OAAQ,WAAY,KAAK,WAAY,EAC7C,GACA,CAAC,YAAa,YAAY,CAC9B,CACJ,CAEA,MAAM,IAAII,EAAYC,EAAW,CAC7B,IAAMrB,EAAO,MAAM,OAAO,OAAO,WAC7B,CAAE,KAAM,OAAQ,OAAQqB,CAAU,EAAGD,EAAY,GACrD,EACA,OAAO,IAAI,WAAWpB,CAAI,CAC9B,CAEA,MAAM,mBAAoB,CACtB,OAAK,KAAK,cAAc,UACjBf,GAAI,MAAM,OAAO,OAAO,UAAU,OAAQ,KAAK,aAAa,SAAS,CAAC,EADnC,IAE9C,CAEA,MAAM,cAAcqC,EAAS,CACzB,OAAO,OAAO,OAAO,UACjB,OAAQhC,GAAMgC,CAAO,EAAG,CAAE,KAAM,OAAQ,WAAY,KAAK,WAAY,EAAG,GAAM,CAAC,CACnF,CACJ,CAGA,MAAM,eAAehB,EAAY,CAC7B,IAAMiB,EAAW,MAAM7B,GAAKY,EAAY,IAAI,WAAW,EAAE,EAAG5B,GAAc,EAAE,EACtEqB,EAAM,MAAM,OAAO,OAAO,UAC5B,MAAOwB,EAAS,MAAM,EAAG,EAAE,EAAG,CAAE,KAAM,SAAU,EAAG,GAAO,CAAC,UAAW,SAAS,CACnF,EACMC,EAAKD,EAAS,MAAM,GAAI,EAAE,EAChC,OAAA9B,EAAQ8B,CAAQ,EACT,CAAE,IAAAxB,EAAK,GAAAyB,CAAG,CACrB,CASA,MAAM,QAAQC,EAAW,CACrB,GAAI,CAAC,KAAK,aAAc,MAAM,IAAI,MAAM,gCAAgC,EACxE,GAAI,CAAC,KAAK,iBACN,MAAM,IAAI,MAAM,0EAAsE,EAG1F,GAAM,CAAE,WAAAnB,EAAY,aAAAC,CAAa,EAAI,MAAMH,GAAa,KAAK,gBAAgB,EAC7EX,EAAQ,KAAK,gBAAgB,EAC7B,KAAK,iBAAmBc,EAExB,IAAMmB,EAAS,KAAK,UAAU,CAC1B,GAAI,MAAM,KAAK,kBAAkB,EACjC,GAAI,KAAK,mBACT,EAAG,KAAK,UACZ,CAAC,EACD,KAAK,YAAc,EAEnB,GAAM,CAAE,IAAA3B,EAAK,GAAAyB,CAAG,EAAI,MAAM,KAAK,eAAelB,CAAU,EACxDb,EAAQa,CAAU,EAElB,IAAMqB,EAAa,MAAM,OAAO,OAAO,QACnC,CAAE,KAAM,UAAW,GAAAH,EAAI,eAAgB1C,GAAI,OAAO4C,CAAM,CAAE,EAC1D3B,EACAjB,GAAI,OAAO2C,CAAS,CACxB,EAEA,MAAO,CAAE,OAAAC,EAAQ,WAAYzC,GAAI0C,CAAU,CAAE,CACjD,CAOA,MAAM,QAAQD,EAAQC,EAAY,CAC9B,GAAI,CAAC,KAAK,aAAc,MAAM,IAAI,MAAM,gCAAgC,EAExE,IAAIC,EACJ,GAAI,CACAA,EAAS,KAAK,MAAMF,CAAM,CAC9B,MAAY,CACR,MAAM,IAAI,MAAM,iCAAiC,CACrD,CACA,GAAM,CAAE,GAAAP,EAAI,GAAAU,EAAI,EAAAC,CAAE,EAAIF,EACtB,GAAI,OAAOT,GAAO,UAAY,CAAC,OAAO,cAAcW,CAAC,GAAKA,EAAI,GAC1D,CAAC,OAAO,cAAcD,CAAE,GAAKA,EAAK,EAClC,MAAM,IAAI,MAAM,sCAAsC,EAG1D,KAAK,cAAc,EAKnB,IAAME,EAAY,GAAGZ,CAAE,IAAIW,CAAC,GACtBE,EAAW,KAAK,SAAS,IAAID,CAAS,EAC5C,GAAIC,EAAU,CACV,IAAMP,EAAY,MAAM,KAAK,MAAMO,EAAS,IAAKN,EAAQC,CAAU,EACnE,YAAK,SAAS,OAAOI,CAAS,EAC9BtC,EAAQuC,EAAS,GAAG,EACbP,CACX,CASA,IAAMQ,EAAS,MAAM,KAAK,cAAcd,EAAIU,EAAIC,CAAC,EAE7CL,EACJ,GAAI,CACAA,EAAY,MAAM,KAAK,MAAMQ,EAAO,WAAYP,EAAQC,CAAU,CACtE,OAASO,EAAO,CACZ,MAAAD,EAAO,QAAQ,EACTC,CACV,CAEA,OAAAD,EAAO,OAAO,EACPR,CACX,CAMA,MAAM,cAAcN,EAAIU,EAAIC,EAAG,CAC3B,IAAMK,EAAahB,IAAO,KAAK,oBACzBiB,EAAU,CAAC,EACXC,EAAiB,CAAC,EACpBC,EAAU,KAEVjC,EACAkC,EACAC,EAEJ,GAAIL,EAAY,CAEZ,GAAI,KAAK,mBAAoB,CACzB,IAAMM,EAAU,MAAM,KAAK,gBACvB,KAAK,mBAAoB,KAAK,cAAeZ,EAAI,KAAK,mBAC1D,EACAO,EAAQ,KAAK,GAAGK,EAAQ,IAAI,EAC5BJ,EAAe,KAAKI,EAAQ,aAAa,CAC7C,CACAH,EAAU,MAAM,KAAK,gBAAgBnB,CAAE,EACvCd,EAAWiC,EAAQ,kBACnBC,EAAe,EACfC,EAAYrB,CAChB,MACId,EAAW,KAAK,mBAChBkC,EAAe,KAAK,cACpBC,EAAY,KAAK,oBAGrB,GAAI,CAACnC,EACD,MAAM,IAAI,MAAM,oDAAoD,EAGxE,IAAMqC,EAAM,MAAM,KAAK,gBAAgBrC,EAAUkC,EAAcT,EAAGU,CAAS,EAC3EJ,EAAQ,KAAK,GAAGM,EAAI,IAAI,EAExB,GAAM,CAAE,WAAApC,EAAY,aAAAC,CAAa,EAAI,MAAMH,GAAasC,EAAI,aAAa,EACzE,OAAIA,EAAI,gBAAkBrC,GAAUgC,EAAe,KAAKK,EAAI,aAAa,EAElE,CACH,WAAApC,EACA,OAAQ,IAAM,CACNgC,GAASA,EAAQ,MAAM,EACvB,KAAK,oBAAsB,KAAK,qBAAuB/B,GACvDd,EAAQ,KAAK,kBAAkB,EAEnC,QAAWM,KAAOsC,EAAgB5C,EAAQM,CAAG,EAC7C,KAAK,mBAAqBQ,EAC1B,KAAK,cAAgBuB,EAAI,EACzB,KAAK,oBAAsBU,EAC3B,OAAW,CAAE,GAAAG,EAAI,IAAA5C,CAAI,IAAKqC,EAAS,KAAK,iBAAiBO,EAAI5C,CAAG,EAChEN,EAAQa,CAAU,CACtB,EACA,QAAS,IAAM,CACPgC,GAASA,EAAQ,QAAQ,EAC7B,OAAW,CAAE,IAAAvC,CAAI,IAAKqC,EAAS3C,EAAQM,CAAG,EAC1C,QAAWA,KAAOsC,EAAgB5C,EAAQM,CAAG,EAC7CN,EAAQc,CAAY,EACpBd,EAAQa,CAAU,CACtB,CACJ,CACJ,CAMA,MAAM,gBAAgBD,EAAUuC,EAAMC,EAAOL,EAAW,CACpD,GAAIK,EAAQD,EAGR,MAAM,IAAI,MAAM,2DAA2D,EAE/E,GAAIC,EAAQD,EAAO5D,GAAe,mBAC9B,MAAM,IAAI,MACN,mCAAmC6D,EAAQD,CAAI,oBACrC5D,GAAe,kBAAkB,GAC/C,EAGJ,IAAM8D,EAAO,CAAC,EACVC,EAAU1C,EACd,QAAShB,EAAIuD,EAAMvD,EAAIwD,EAAOxD,IAAK,CAC/B,GAAM,CAAE,WAAAiB,EAAY,aAAAC,CAAa,EAAI,MAAMH,GAAa2C,CAAO,EAC3DA,IAAY1C,GAAUZ,EAAQsD,CAAO,EACzCA,EAAUxC,EACVuC,EAAK,KAAK,CAAE,GAAI,GAAGN,CAAS,IAAInD,CAAC,GAAI,IAAKiB,CAAW,CAAC,CAC1D,CACA,MAAO,CAAE,KAAAwC,EAAM,cAAeC,CAAQ,CAC1C,CAEA,MAAM,MAAMzC,EAAYoB,EAAQC,EAAY,CACxC,GAAM,CAAE,IAAA5B,EAAK,GAAAyB,CAAG,EAAI,MAAM,KAAK,eAAelB,CAAU,EACpD0C,EACJ,GAAI,CACAA,EAAS,MAAM,OAAO,OAAO,QACzB,CAAE,KAAM,UAAW,GAAAxB,EAAI,eAAgB1C,GAAI,OAAO4C,CAAM,CAAE,EAC1D3B,EACAT,GAAMqC,CAAU,CACpB,CACJ,MAAY,CAGR,MAAM,IAAI,MAAM,sCAAsC,CAC1D,CACA,OAAO5C,GAAI,OAAOiE,CAAM,CAC5B,CAEA,iBAAiBL,EAAI5C,EAAK,CAGtB,KAAO,KAAK,SAAS,MAAQf,GAAe,kBAAkB,CAC1D,IAAMiE,EAAS,KAAK,SAAS,KAAK,EAAE,KAAK,EAAE,MACrCC,EAAU,KAAK,SAAS,IAAID,CAAM,EACxC,KAAK,SAAS,OAAOA,CAAM,EACvBC,GAASzD,EAAQyD,EAAQ,GAAG,CACpC,CACA,KAAK,SAAS,IAAIP,EAAI,CAAE,IAAA5C,EAAK,SAAU,KAAK,IAAI,CAAE,CAAC,CACvD,CAEA,eAAgB,CACZ,IAAMoD,EAAS,KAAK,IAAI,EAAInE,GAAe,mBAC3C,OAAW,CAAC2D,EAAIS,CAAK,IAAK,KAAK,SACvBA,EAAM,SAAWD,IACjB1D,EAAQ2D,EAAM,GAAG,EACjB,KAAK,SAAS,OAAOT,CAAE,EAGnC,CAMA,MAAM,gBAAgBU,EAAoB,CACtC,IAAMpC,EAAkB,MAAM,KAAK,cAAcoC,CAAkB,EAK7DC,EAAY,MAAM,KAAK,IAAI,KAAK,aAAa,WAAYrC,CAAe,EACxEsC,EAAW,MAAM/C,GAAY,KAAK,SAAU8C,CAAS,EAC3D7D,EAAQ6D,CAAS,EAKjB,IAAME,EAAkB,MAAM,KAAK,iBAAiB,EAC9CC,EAAS,MAAM,KAAK,IAAID,EAAgB,WAAYvC,CAAe,EACnEyC,EAAU,MAAMlD,GAAY+C,EAAS,SAAUE,CAAM,EAC3D,OAAAhE,EAAQgE,CAAM,EAEP,CACH,kBAAmBF,EAAS,SAC5B,MAAO,IAAM,CACT9D,EAAQ,KAAK,QAAQ,EACrBA,EAAQ8D,EAAS,QAAQ,EACrB,KAAK,kBAAkB9D,EAAQ,KAAK,gBAAgB,EACxD,KAAK,SAAWiE,EAAQ,SACxB,KAAK,iBAAmBA,EAAQ,SAChC,KAAK,aAAeF,EACpB,KAAK,iBAAmBvC,EACxB,KAAK,oBAAsBoC,EAC3B,KAAK,mBAAqB,KAAK,WAC/B,KAAK,WAAa,CACtB,EACA,QAAS,IAAM,CACX5D,EAAQ8D,EAAS,QAAQ,EACzB9D,EAAQ8D,EAAS,QAAQ,EACzB9D,EAAQiE,EAAQ,QAAQ,EACxBjE,EAAQiE,EAAQ,QAAQ,CAC5B,CACJ,CACJ,CAGA,SAAU,CACNjE,EAAQ,KAAK,QAAQ,EACrBA,EAAQ,KAAK,gBAAgB,EAC7BA,EAAQ,KAAK,kBAAkB,EAC/B,QAAW2D,KAAS,KAAK,SAAS,OAAO,EAAG3D,EAAQ2D,EAAM,GAAG,EAC7D,KAAK,SAAS,MAAM,EACpB,KAAK,SAAW,KAChB,KAAK,iBAAmB,KACxB,KAAK,mBAAqB,KAC1B,KAAK,aAAe,KACpB,KAAK,iBAAmB,KACxB,KAAK,oBAAsB,KAC3B,KAAK,aAAe,EACxB,CACJ,EC3gBO,IAAMO,EAAS,OAAO,OAAO,CAChC,kBAAmB,IACnB,eAAgB,EAChB,UAAW,EACX,UAAW,GACX,QAAS,GACT,QAAS,GACT,kBAAmB,GACnB,iBAAkB,GAClB,cAAe,EACf,qBAAsB,GACtB,cAAe,IAQf,wBAAyB,GAazB,cAAe,IACnB,CAAC,EAKKC,GAAW,KAAK,IAAI,KAAM,EAAG,CAAC,EAC9BC,GAAmB,SAEZC,GAAO,OAAO,OAAO,CAAE,MAAO,EAAG,OAAQ,CAAE,CAAC,EACnDC,GAAQ,OAAO,OAAO,CAAC,UAAW,SAAU,SAAS,CAAC,EAKtDC,GAAW,OAAO,OAAO,CAAC,OAAQ,WAAY,MAAO,IAAI,CAAC,EAC1DC,GAAe,EAGRC,GAAM,OAAO,OAAO,CAAE,iBAAkB,CAAK,CAAC,EAGrDC,GAAO,OAAO,OAAO,CACvB,QAAS,EAAG,UAAW,EAAG,SAAU,EAAG,SAAU,EACjD,QAAS,EAAG,SAAU,EAAG,SAAU,CACvC,CAAC,EACKC,GAAgB,OAAO,OAAO,CAAE,EAAG,EAAG,EAAG,GAAI,EAAG,EAAG,EAAG,EAAG,EAAG,GAAI,EAAG,GAAI,EAAG,EAAG,CAAC,EAC9EC,GAAY,OAAO,OAAO,CAAE,EAAG,OAAQ,EAAG,OAAQ,EAAG,QAAS,EAAG,QAAS,EAAG,OAAQ,EAAG,QAAS,EAAG,OAAQ,CAAC,EAG7GC,GAAc,OAAO,OAAO,CAAE,EAAG,KAAM,EAAG,OAAQ,EAAG,KAAM,EAAG,KAAM,EAAG,KAAM,EAAG,KAAM,EAAG,IAAK,CAAC,EAC/FC,GAAU,OAAO,OAAO,CAAC,KAAM,UAAW,SAAU,IAAI,CAAC,EAOzDC,GAAY,OAAO,OAAO,CAAE,KAAM,IAAK,MAAO,IAAK,MAAO,CAAE,CAAC,EAG7DC,GAAW,mBAEXC,GAAN,cAA8B,KAAM,CAChC,YAAYC,EAASC,EAAO,YAAa,CAAE,MAAMD,CAAO,EAAG,KAAK,KAAO,kBAAmB,KAAK,KAAOC,CAAM,CAChH,EACMC,EAAO,CAACC,EAAKF,IAAS,CAAE,MAAM,IAAIF,GAAgBI,EAAKF,CAAI,CAAG,EAM9DG,GAAU,mFACVC,GAAU,+CAEhB,SAASC,GAAU,EAAG,CAClB,IAAMC,EAAIF,GAAQ,KAAK,CAAC,EACxB,GAAI,CAACE,EAAG,OAAO,KACf,IAAMC,EAAM,IAAI,WAAW,CAAC,EAC5B,QAASC,EAAI,EAAGA,EAAI,EAAGA,IAAK,CACxB,IAAMC,EAAI,OAAOH,EAAEE,EAAI,CAAC,CAAC,EACzB,GAAI,CAAC,OAAO,UAAUC,CAAC,GAAKA,EAAI,GAAKA,EAAI,IAAK,OAAO,KACrDF,EAAIC,CAAC,EAAIC,CACb,CACA,OAAOF,CACX,CAEA,SAASG,GAAU,EAAG,CAGlB,GAAI,CAAC,mBAAmB,KAAK,CAAC,GAAK,EAAE,OAAS,GAAI,OAAO,KACzD,IAAIC,EAAO,EACPC,EAAQ,KACNC,EAAYF,EAAK,YAAY,GAAG,EACtC,GAAIA,EAAK,SAAS,GAAG,EAAG,CAEpB,GADAC,EAAQP,GAAUM,EAAK,MAAME,EAAY,CAAC,CAAC,EACvC,CAACD,EAAO,OAAO,KACnBD,EAAOA,EAAK,MAAM,EAAGE,EAAY,CAAC,EAAI,KAC1C,CACA,IAAMC,EAASH,EAAK,MAAM,IAAI,EAC9B,GAAIG,EAAO,OAAS,EAAG,OAAO,KAC9B,IAAMC,EAAWC,GAAUA,IAAS,GAAK,CAAC,EAAIA,EAAK,MAAM,GAAG,EAAE,IAAK,GAC/D,EAAE,SAAW,GAAK,EAAE,OAAS,EAAI,IAAM,SAAS,EAAG,EAAE,CACxD,EACKC,EAAOF,EAAQD,EAAO,CAAC,CAAC,EACxBI,EAAOJ,EAAO,SAAW,EAAIC,EAAQD,EAAO,CAAC,CAAC,EAAI,CAAC,EACzD,GAAI,CAAC,GAAGG,EAAM,GAAGC,CAAI,EAAE,KAAMC,GAAM,CAAC,OAAO,UAAUA,CAAC,GAAKA,EAAI,GAAKA,EAAI,KAAM,EAAG,OAAO,KACxF,IAAIC,EACJ,GAAIN,EAAO,SAAW,EAAG,CACrB,IAAMO,EAAM,EAAIJ,EAAK,OAASC,EAAK,OACnC,GAAIG,EAAM,EAAG,OAAO,KACpBD,EAAQ,CAAC,GAAGH,EAAM,GAAG,IAAI,MAAMI,CAAG,EAAE,KAAK,CAAC,EAAG,GAAGH,CAAI,CACxD,MACIE,EAAQH,EAEZ,GAAIG,EAAM,SAAW,EAAG,OAAO,KAC/B,IAAMb,EAAM,IAAI,WAAW,EAAE,EAC7B,OAAAa,EAAM,QAAQ,CAACD,EAAGX,IAAM,CAAED,EAAIC,EAAI,CAAC,EAAIW,GAAK,EAAGZ,EAAIC,EAAI,EAAI,CAAC,EAAIW,EAAI,GAAM,CAAC,EACvEP,GAAOL,EAAI,IAAIK,EAAO,EAAE,EACrBL,CACX,CAEA,SAASe,GAAU,EAAG,CAClB,IAAMhB,EAAIH,GAAQ,KAAK,CAAC,EACxB,GAAI,CAACG,EAAG,OAAO,KACf,IAAMiB,GAAOjB,EAAE,CAAC,EAAIA,EAAE,CAAC,EAAIA,EAAE,CAAC,EAAIA,EAAE,CAAC,EAAIA,EAAE,CAAC,GAAG,YAAY,EACrDC,EAAM,IAAI,WAAW,EAAE,EAC7B,QAAS,EAAI,EAAG,EAAI,GAAI,IAAKA,EAAI,CAAC,EAAI,SAASgB,EAAI,OAAO,EAAI,EAAG,CAAC,EAAG,EAAE,EACvE,OAAOhB,CACX,CAEA,SAASiB,GAASC,EAAK,CACnB,OAAI,OAAOA,GAAQ,UAAUxB,EAAK,sBAAsB,EACpDwB,EAAI,OAAS,GAAK,MAAMxB,EAAK,kBAAkB,EAC5CwB,EAAI,MAAM,SAAS,EAAE,OAAQC,GAAMA,EAAE,OAAS,CAAC,CAC1D,CAEA,SAASC,GAAKC,EAAOC,EAAM,CACvB,IAAMC,EAAS,KAAKD,CAAI,IACxB,QAAWH,KAAKE,EAAO,GAAIF,EAAE,WAAWI,CAAM,EAAG,OAAOJ,EAAE,MAAMI,EAAO,MAAM,EAAE,KAAK,EACpF,OAAO,IACX,CASO,SAASC,GAASN,EAAK,CAC1B,IAAMG,EAAQJ,GAASC,CAAG,EAEpBO,EAAQL,GAAKC,EAAO,WAAW,EAC/BK,EAAMN,GAAKC,EAAO,SAAS,GAC7B,CAACI,GAAS,CAACC,IAAKhC,EAAK,gCAAgC,EAEzD,IAAMiC,EAASP,GAAKC,EAAO,aAAa,EACnCM,GAAQjC,EAAK,mCAAmC,EACrD,GAAM,CAACkC,EAASC,CAAK,EAAIF,EAAO,MAAM,KAAK,GACvC,CAACC,GAAWA,EAAQ,YAAY,IAAM,YACtClC,EAAK,2CAA2C,OAAOkC,CAAO,EAAE,MAAM,EAAG,EAAE,CAAC,EAAE,EAElF,IAAME,EAAU,OAAOD,CAAK,EAAE,MAAM,GAAG,EACnCC,EAAQ,SAAWtD,EAAO,mBAAmBkB,EAAK,uCAAuC,EAC7F,IAAMqC,EAAc,IAAI,WAAWvD,EAAO,iBAAiB,EAC3DsD,EAAQ,QAAQ,CAACE,EAAG/B,IAAM,CACjB,mBAAmB,KAAK+B,CAAC,GAAGtC,EAAK,6BAA6B,EACnEqC,EAAY9B,CAAC,EAAI,SAAS+B,EAAG,EAAE,CACnC,CAAC,EAED,IAAMC,EAAWb,GAAKC,EAAO,OAAO,GAAK,UACnCa,EAAQtD,GAAM,QAAQqD,CAAQ,EAChCC,EAAQ,GAAGxC,EAAK,gCAAgCuC,EAAS,MAAM,EAAG,EAAE,CAAC,EAAE,EAG3E,IAAME,EAASf,GAAKC,EAAO,kBAAkB,EACvCe,EAAiBD,IAAW,KAAO,MAAQ,OAAOA,CAAM,GAC1D,CAAC,OAAO,UAAUC,CAAc,GAAKA,EAAiB,IAAG1C,EAAK,4BAA4B,EAE9F,IAAM2C,EAAa,CAAC,EACpB,QAAWC,KAAQjB,EAAO,CACtB,GAAI,CAACiB,EAAK,WAAW,cAAc,EAAG,SACtC,IAAMC,EAAID,EAAK,MAAM,EAAqB,EAAE,MAAM,KAAK,EAGvD,GADIC,EAAE,OAAS,GAAKA,EAAE,CAAC,IAAM,OACzBA,EAAE,CAAC,IAAM,IAAK,SAClB,IAAMC,EAAYD,EAAE,CAAC,EAAE,YAAY,EAC7BE,EAAW,OAAOF,EAAE,CAAC,CAAC,EACtBG,EAAOH,EAAE,CAAC,EACVI,EAAO,OAAOJ,EAAE,CAAC,CAAC,EAClBK,EAAQL,EAAE,CAAC,EACjB,GAAI,CAAC,OAAO,UAAUI,CAAI,GAAKA,EAAO,GAAKA,EAAO,MAAO,SAEzD,IAAIE,EAAU,EACd,GAAIL,IAAc,MAAO,CACrB,IAAMM,EAAMP,EAAE,QAAQ,SAAS,EACzBQ,EAAID,GAAO,EAAI1D,GAAQ,QAAQmD,EAAEO,EAAM,CAAC,CAAC,EAAI,GACnD,GAAIC,GAAK,EAAG,SACZF,EAAUE,CACd,SAAWP,IAAc,MACrB,SAGJ,IAAIQ,EAAO,KAAUC,EAAQ,KACvBC,EAAOnC,GAAU2B,CAAI,EAC3B,GAAIQ,GAAQN,IAAU,OAAUI,EAAOhE,GAAK,UAAWiE,EAAQC,MAC1D,CACD,IAAMC,EAAKrD,GAAU4C,CAAI,EACnBU,EAAKD,EAAK,KAAOhD,GAAUuC,CAAI,EAC/BW,EAAMF,GAAMC,EAClB,GAAI,CAACC,EAAK,SACV,GAAIT,IAAU,OAAQI,EAAOG,EAAKnE,GAAK,QAAUA,GAAK,gBAC7C4D,IAAU,SAAWA,IAAU,QAASI,EAAOG,EAAKnE,GAAK,SAAWA,GAAK,iBACzE4D,IAAU,QAASI,EAAOG,EAAKnE,GAAK,SAAWA,GAAK,aACxD,UACLiE,EAAQI,CACZ,CACAhB,EAAW,KAAK,CACZ,KAAAW,EAAM,QAAAH,EAAS,KAAMI,EAAO,KAAAN,EAC5B,SAAU,OAAO,SAASF,CAAQ,EAAIA,EAAW,CACrD,CAAC,CACL,CAEA,MAAO,CAAE,MAAAhB,EAAO,IAAAC,EAAK,YAAAK,EAAa,MAAAG,EAAO,eAAAE,EAAgB,WAAAC,CAAW,CACxE,CAGO,SAASiB,GAAcC,EAAG,CAAE,MAAO,GAAItE,GAAcsE,EAAE,IAAI,EAAI,CAAG,CAWzE,IAAMC,GAAiBD,GAAMA,EAAE,UAAY,GAAKA,EAAE,UAAY,EAsBvD,SAASE,GAAgBpB,EAAY,CACxC,cAAAqB,EAAgBlF,EAAO,eACvB,SAAAmF,EAAWnF,EAAO,wBAClB,SAAAoF,EAAW,GACX,UAAAC,EAAY,CAChB,EAAI,CAAC,EAAG,CACJ,IAAMC,EAAOzB,EAAW,OAAQkB,GAAMK,GAAYL,EAAE,OAASvE,GAAK,SAAS,EAGrE+E,EAAO,CAAC,EACRC,EAAO,IAAI,IACjB,QAAWT,KAAKO,EAAM,CAClB,IAAMG,EAAM,GAAGV,EAAE,IAAI,IAAIA,EAAE,OAAO,IAAI,MAAM,KAAKA,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,IAAIA,EAAE,IAAI,GACxES,EAAK,IAAIC,CAAG,IAChBD,EAAK,IAAIC,CAAG,EACZF,EAAK,KAAKR,CAAC,EACf,CAEA,IAAMW,EAAa,CAACC,EAAGnC,KAAOA,EAAE,UAAY,IAAMmC,EAAE,UAAY,GAC1DC,EAAYb,GAAM,GAAGpE,GAAYoE,EAAE,IAAI,CAAC,IAAIrE,GAAUqE,EAAE,IAAI,CAAC,IAAIA,EAAE,UAAY,EAAI,MAAQ,KAAK,GAIhGc,EAAS,IAAI,IACnB,QAAWd,IAAK,CAAC,GAAGQ,CAAI,EAAE,KAAKG,CAAU,EAAG,CACxC,GAAI,CAACV,GAAcD,CAAC,EAAG,SACvB,IAAMe,EAAIF,EAASb,CAAC,EACfc,EAAO,IAAIC,CAAC,GAAGD,EAAO,IAAIC,EAAG,CAAC,CAAC,EACpCD,EAAO,IAAIC,CAAC,EAAE,KAAKf,CAAC,CACxB,CACA,IAAMgB,EAAS,CAAC,EACVC,EAAQ,IAAI,IACdvB,EAAQ,EACRwB,EAAS,EACPC,EAASnB,GAAM,CACjBgB,EAAO,KAAKhB,CAAC,EACbiB,EAAM,IAAIjB,CAAC,EACXN,GAASK,GAAcC,CAAC,EACpBrE,GAAUqE,EAAE,IAAI,IAAM,SAASkB,GACvC,EACA,QAAWE,KAAQN,EAAO,OAAO,EAAGK,EAAMC,EAAK,CAAC,CAAC,EAGjD,QAAWpB,IAAK,CAAC,GAAGQ,CAAI,EAAE,KAAKG,CAAU,EACrC,GAAI,CAAAM,EAAM,IAAIjB,CAAC,EACf,IAAIgB,EAAO,QAAUb,EAAe,MAChCT,EAAQK,GAAcC,CAAC,EAAII,GAC3BzE,GAAUqE,EAAE,IAAI,IAAM,SAAWkB,GAAUZ,GAC/Ca,EAAMnB,CAAC,EAKX,OAAOgB,EAAO,KAAKL,CAAU,CACjC,CAMA,IAAMU,GAAN,KAAa,CACT,aAAc,CAAE,KAAK,EAAI,CAAC,CAAG,CAC7B,GAAG1E,EAAG,CAAE,KAAK,EAAE,KAAKA,EAAI,GAAI,CAAG,CAC/B,IAAIA,EAAG,CAAE,KAAK,EAAE,KAAMA,GAAK,EAAK,IAAMA,EAAI,GAAI,CAAG,CACjD,IAAIA,EAAG,CAAE,KAAK,EAAE,KAAMA,GAAK,GAAM,IAAOA,GAAK,EAAK,IAAMA,EAAI,GAAI,CAAG,CACnE,IAAIA,EAAG,CAAE,KAAK,EAAE,KAAMA,IAAM,GAAM,IAAOA,IAAM,GAAM,IAAOA,IAAM,EAAK,IAAMA,EAAI,GAAI,CAAG,CACxF,MAAMiE,EAAG,CAAE,QAAWU,KAAKV,EAAG,KAAK,EAAE,KAAKU,EAAI,GAAI,CAAG,CACrD,MAAMC,EAAG,CAAE,QAAS7E,EAAI,EAAGA,EAAI6E,EAAE,OAAQ7E,IAAK,KAAK,EAAE,KAAK6E,EAAE,WAAW7E,CAAC,EAAI,GAAI,CAAG,CACnF,MAAO,CAAE,OAAO,WAAW,KAAK,KAAK,CAAC,CAAG,CAC7C,EAEA,SAAS8E,GAAgB3C,EAAgB,EAIjC,CAAC,OAAO,UAAUA,CAAc,GAAKA,EAAiB,MAAQA,EAAiB,aAC/E1C,EAAK,6DAA6D,EAItE,IAAMsF,EAAU,CAAC,EACbC,EAAWpG,GAAS,QAAQuD,CAAc,EAC9C,GAAI6C,EAAW,EAAG,CACdA,EAAWnG,GACX,IAAM8B,EAAI,IAAIgE,GACdhE,EAAE,IAAIwB,CAAc,EACpB4C,EAAQ,KAAK,CAAE,KAAMjG,GAAI,iBAAkB,MAAO6B,EAAE,KAAK,CAAE,CAAC,CAChE,CACA,MAAO,CAAE,SAAAqE,EAAU,QAAAD,CAAQ,CAC/B,CAUO,SAASE,GAAiBC,EAAG,CAChC,GAAM,CAAE,KAAAC,EAAM,WAAYC,EAAM,KAAM,YAAAC,EAAa,UAAAC,EAAW,WAAAC,EAAa,IAAK,EAAIL,EAChFC,IAASzG,GAAK,OAASyG,IAASzG,GAAK,QAAQe,EAAK,yBAAyB,EAC3E0F,IAASzG,GAAK,QACV,EAAE0G,aAAe,aAAeA,EAAI,SAAW7G,EAAO,gBAAekB,EAAK,oCAAoC,EAC3G2F,IAAQ,MACf3F,EAAK,mCAAmC,EAExC8F,IAAe,OAAS,EAAEA,aAAsB,aAAeA,EAAW,SAAWhH,EAAO,mBAC5FkB,EAAK,6BAA6B,EAGtC,GAAM,CAAE,MAAA+B,EAAO,IAAAC,EAAK,YAAAK,EAAa,MAAAG,EAAO,eAAAE,EAAgB,WAAAC,CAAW,EAAIkD,GACnE9D,EAAM,OAASjD,EAAO,WAAaiD,EAAM,OAASjD,EAAO,WAAa,CAACc,GAAS,KAAKmC,CAAK,IAAG/B,EAAK,mBAAmB,GACrHgC,EAAI,OAASlD,EAAO,SAAWkD,EAAI,OAASlD,EAAO,SAAW,CAACc,GAAS,KAAKoC,CAAG,IAAGhC,EAAK,iBAAiB,EACzG2C,EAAW,OAAS7D,EAAO,gBAAgBkB,EAAK,qBAAqB,EAEzE,IAAM+F,EAAU,KAAK,MAAMH,EAAc7G,IAAY,GAAK,GACtD,CAAC,OAAO,UAAUgH,CAAO,GAAKA,EAAU,GAAKA,EAAU/G,KAAkBgB,EAAK,qBAAqB,EAEvG,GAAM,CAAE,SAAAuF,EAAU,QAAAD,CAAQ,EAAID,GAAgB3C,CAAc,EAEtDsD,EAAM,IAAId,GAChB,QAAWe,KAAKX,EACRW,EAAE,MAAM,OAAS,KAAKjG,EAAK,6BAA6B,EAC5DgG,EAAI,GAAGC,EAAE,IAAI,EAAGD,EAAI,GAAGC,EAAE,MAAM,MAAM,EAAGD,EAAI,MAAMC,EAAE,KAAK,EAE7D,IAAMC,EAAWF,EAAI,KAAK,EACtBE,EAAS,OAASpH,EAAO,eAAekB,EAAK,4BAA4B,EAE7E,IAAMmG,EAAST,EAAO,GACdlD,EAAQ,IAAS,GACjB+C,EAAW,IAAS,GACrBO,EAAa,GAAO,IACpBI,EAAS,OAAS,IAAO,GAE1BhF,EAAI,IAAIgE,GACdhE,EAAE,GAAG,CAAY,EACjBA,EAAE,GAAGiF,CAAK,EACVjF,EAAE,IAAI6E,CAAO,EACTL,IAASzG,GAAK,QAAQiC,EAAE,MAAMyE,CAAG,EACrCzE,EAAE,MAAMmB,CAAW,EACnBnB,EAAE,GAAGa,EAAM,MAAM,EAAGb,EAAE,MAAMa,CAAK,EACjCb,EAAE,GAAGc,EAAI,MAAM,EAAGd,EAAE,MAAMc,CAAG,EAC7Bd,EAAE,GAAGyB,EAAW,MAAM,EACtB,QAAWkB,KAAKlB,EACZzB,EAAE,IAAK2C,EAAE,KAAO,KAAS,EAAMA,EAAE,QAAU,EAAK,EAChD3C,EAAE,MAAM2C,EAAE,IAAI,EACd3C,EAAE,IAAI2C,EAAE,IAAI,EAEZiC,GAAY5E,EAAE,MAAM4E,CAAU,EAC9BI,EAAS,SAAUhF,EAAE,GAAGgF,EAAS,MAAM,EAAGhF,EAAE,MAAMgF,CAAQ,GAE9D,IAAM5F,EAAMY,EAAE,KAAK,EACnB,OAAIZ,EAAI,OAASxB,EAAO,mBAAmBkB,EAAK,sCAAsC,EAC/EM,CACX,CAMA,IAAM8F,GAAN,KAAa,CACT,YAAYC,EAAK,CAAE,KAAK,IAAMA,EAAK,KAAK,EAAI,CAAG,CAC/C,KAAKC,EAAG,CAAM,KAAK,EAAIA,EAAI,KAAK,IAAI,QAAQtG,EAAK,yBAAyB,CAAG,CAC7E,IAAK,CAAE,YAAK,KAAK,CAAC,EAAU,KAAK,IAAI,KAAK,GAAG,CAAG,CAChD,KAAM,CAAE,KAAK,KAAK,CAAC,EAAG,IAAMQ,EAAK,KAAK,IAAI,KAAK,CAAC,GAAK,EAAK,KAAK,IAAI,KAAK,EAAI,CAAC,EAAG,YAAK,GAAK,EAAUA,CAAG,CACvG,KAAM,CAAE,KAAK,KAAK,CAAC,EAAG,IAAMA,EAAK,KAAK,IAAI,KAAK,CAAC,GAAK,GAAO,KAAK,IAAI,KAAK,EAAI,CAAC,GAAK,EAAK,KAAK,IAAI,KAAK,EAAI,CAAC,EAAG,YAAK,GAAK,EAAUA,CAAG,CACtI,KAAM,CAAE,KAAK,KAAK,CAAC,EAAG,IAAMA,GAAM,KAAK,IAAI,KAAK,CAAC,GAAK,KAAQ,IAAM,KAAK,IAAI,KAAK,EAAI,CAAC,GAAK,KAAO,KAAK,IAAI,KAAK,EAAI,CAAC,GAAK,GAAK,KAAK,IAAI,KAAK,EAAI,CAAC,EAAG,YAAK,GAAK,EAAUA,IAAM,CAAG,CACnL,MAAM8F,EAAG,CAAE,YAAK,KAAKA,CAAC,EAAU,KAAK,IAAI,MAAM,KAAK,EAAG,KAAK,GAAKA,CAAC,CAAG,CACrE,MAAMA,EAAG,CACL,KAAK,KAAKA,CAAC,EACX,IAAIlB,EAAI,GACR,QAASmB,EAAI,EAAGA,EAAID,EAAGC,IAAK,CACxB,IAAM1C,EAAI,KAAK,IAAI,KAAK,EAAI0C,CAAC,GACzB1C,EAAI,IAAQA,EAAI,MAAM7D,EAAK,oCAAoC,EACnEoF,GAAK,OAAO,aAAavB,CAAC,CAC9B,CACA,YAAK,GAAKyC,EACHlB,CACX,CACA,IAAI,MAAO,CAAE,OAAO,KAAK,IAAI,OAAS,KAAK,CAAG,CAClD,EAcA,SAASoB,GAAUH,EAAK,CACpB,IAAMJ,EAAI,IAAIG,GAAOC,CAAG,EAClB/F,EAAM,IAAI,IACZmG,EAAW,GACf,KAAOR,EAAE,KAAO,GAAG,CACf,IAAMP,EAAOO,EAAE,GAAG,EACZS,EAAMT,EAAE,GAAG,EACXU,EAAQV,EAAE,MAAMS,CAAG,EAGzB,GAFIhB,GAAQe,GAAUzG,EAAK,sEAAsE,EACjGyG,EAAWf,EACHA,IACCrG,GAAI,iBAAkB,CACnBqH,IAAQ,GAAG1G,EAAK,gCAAgC,EACpD,IAAMQ,EAAI,IAAI4F,GAAOO,CAAK,EAAE,IAAI,GAC5BnG,EAAI,MAAQA,EAAI,aAAYR,EAAK,sCAAsC,EACvEb,GAAS,SAASqB,CAAC,GAAGR,EAAK,4DAA4D,EAC3FM,EAAI,IAAIoF,EAAMlF,CAAC,CAEnB,MAEIR,EAAK,4BAA4B0F,EAAK,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,GAAI,mBAAmB,CAEtG,CACA,OAAOpF,CACX,CAUO,SAASsG,GAAiBP,EAAK,CAAE,MAAAQ,EAAQ,KAAK,IAAI,CAAE,EAAI,CAAC,EAAG,CACzDR,aAAe,YAAarG,EAAK,iCAAiC,EACpEqG,EAAI,SAAW,GAAGrG,EAAK,qBAAqB,EAC5CqG,EAAI,OAASvH,EAAO,mBAAmBkB,EAAK,sCAAsC,EAEtF,IAAMiG,EAAI,IAAIG,GAAOC,CAAG,EAKlBS,EAAUb,EAAE,GAAG,EACjBa,IAAY,GAAc9G,EAAK,oCAAoC8G,EAAQ,SAAS,EAAE,CAAC,GAAI,SAAS,EAExG,IAAMX,EAAQF,EAAE,GAAG,EACbP,EAAOS,EAAQ,EACjBT,IAASzG,GAAK,OAASyG,IAASzG,GAAK,QAAQe,EAAK,0BAA0B,EAChF,IAAMwC,EAAS2D,GAAS,EAAK,EACzB3D,EAAQ,GAAGxC,EAAK,0BAA0B,EAC9C,IAAMuF,EAAYY,GAAS,EAAK,EAC1BY,GAAiBZ,EAAQ,MAAU,EACnCa,GAAUb,EAAQ,OAAU,EAE5BJ,EAAUE,EAAE,IAAI,EAChBL,EAAc7G,GAAWgH,EAAU,IACzC,GAAIc,EAAQ/H,EAAO,cAAgB8G,EAAa,CAC5C,IAAMqB,EAAU,KAAK,OAAOJ,EAAQjB,GAAe,GAAK,EACxD5F,EACI,qBAAqBiH,CAAO,sIAE5B,SACJ,CACJ,CACIrB,EAAciB,EAAS/H,EAAO,qBAAuB,IAASA,EAAO,eACrEkB,EAAK,0CAA2C,UAAU,EAG9D,IAAMkH,EAAaxB,IAASzG,GAAK,OAASgH,EAAE,MAAMnH,EAAO,aAAa,EAAI,KACpEuD,EAAc4D,EAAE,MAAMnH,EAAO,iBAAiB,EAE9CqI,EAAWlB,EAAE,GAAG,GAClBkB,EAAWrI,EAAO,WAAaqI,EAAWrI,EAAO,YAAWkB,EAAK,+BAA+B,EACpG,IAAM+B,EAAQkE,EAAE,MAAMkB,CAAQ,EACzBvH,GAAS,KAAKmC,CAAK,GAAG/B,EAAK,wDAAwD,EAExF,IAAMoH,EAASnB,EAAE,GAAG,GAChBmB,EAAStI,EAAO,SAAWsI,EAAStI,EAAO,UAASkB,EAAK,6BAA6B,EAC1F,IAAMgC,EAAMiE,EAAE,MAAMmB,CAAM,EACrBxH,GAAS,KAAKoC,CAAG,GAAGhC,EAAK,sDAAsD,EAEpF,IAAMqH,EAAQpB,EAAE,GAAG,EACfoB,EAAQvI,EAAO,gBAAgBkB,EAAK,qBAAqB,EAC7D,IAAM2C,EAAa,CAAC,EACpB,QAASpC,EAAI,EAAGA,EAAI8G,EAAO9G,IAAK,CAC5B,IAAM+G,EAAUrB,EAAE,GAAG,EACf3C,EAAQgE,GAAW,EAAK,GACxBnE,EAAUmE,EAAU,GACpBC,EAAUhI,GAAc+D,CAAI,EAC9BiE,IAAY,QAAWvH,EAAK,2BAA2BsD,CAAI,EAAE,EAC7DH,GAAWzD,GAAQ,QAAQM,EAAK,6BAA6B,EACjE,IAAMgD,EAAOiD,EAAE,MAAMsB,CAAO,EACtBtE,GAAOgD,EAAE,IAAI,EACfhD,GAAO,GAAGjD,EAAK,iCAAiC,EACpD2C,EAAW,KAAK,CAAE,KAAAW,EAAM,QAAAH,EAAS,KAAAH,EAAM,KAAAC,EAAK,CAAC,CACjD,CAEA,IAAI6C,EAAa,KACbiB,IAAejB,EAAaG,EAAE,MAAMnH,EAAO,gBAAgB,GAE/D,IAAI0I,EAAa,IAAI,IACrB,GAAIR,EAAQ,CACR,IAAMS,EAASxB,EAAE,GAAG,EAChBwB,IAAW,GAAGzH,EAAK,qCAAqC,EAC5DwH,EAAahB,GAAUP,EAAE,MAAMwB,CAAM,CAAC,CAC1C,CAKIxB,EAAE,OAAS,GAAGjG,EAAK,GAAGiG,EAAE,IAAI,wCAAwC,EAExE,IAAIvD,EACJ,OAAI6C,IAAanG,IACRoI,EAAW,IAAInI,GAAI,gBAAgB,GAAGW,EAAK,wEAAwE,EACxH0C,EAAiB8E,EAAW,IAAInI,GAAI,gBAAgB,IAEhDmI,EAAW,IAAInI,GAAI,gBAAgB,GAAGW,EAAK,uDAAuD,EACtG0C,EAAiBvD,GAASoG,CAAQ,GAG/B,CACH,QAAAuB,EAAS,KAAApB,EAAM,MAAAlD,EAAO,eAAAE,EAAgB,YAAAkD,EACtC,WAAAsB,EAAY,YAAA7E,EAAa,MAAAN,EAAO,IAAAC,EAAK,WAAAW,EAAY,WAAAmD,EAAY,WAAA0B,CACjE,CACJ,CAMA,IAAME,GAAQpF,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EAElD,SAASqF,GAAWrE,EAAMN,EAAM,CAC5B,OAAQM,EAAM,CACV,KAAKhE,GAAK,UAAW,CACjB,IAAMsI,EAAI,MAAM,KAAK5E,EAAM0E,EAAI,EAAE,KAAK,EAAE,EACxC,MAAO,GAAGE,EAAE,MAAM,EAAG,CAAC,CAAC,IAAIA,EAAE,MAAM,EAAG,EAAE,CAAC,IAAIA,EAAE,MAAM,GAAI,EAAE,CAAC,IAAIA,EAAE,MAAM,GAAI,EAAE,CAAC,IAAIA,EAAE,MAAM,EAAE,CAAC,QAClG,CACA,KAAKtI,GAAK,QAAS,KAAKA,GAAK,SAAU,KAAKA,GAAK,SAC7C,MAAO,GAAG0D,EAAK,CAAC,CAAC,IAAIA,EAAK,CAAC,CAAC,IAAIA,EAAK,CAAC,CAAC,IAAIA,EAAK,CAAC,CAAC,GACtD,QAAS,CACL,IAAM7B,EAAQ,CAAC,EACf,QAASZ,EAAI,EAAGA,EAAI,GAAIA,GAAK,EAAGY,EAAM,MAAO6B,EAAKzC,CAAC,GAAK,EAAKyC,EAAKzC,EAAI,CAAC,GAAG,SAAS,EAAE,CAAC,EACtF,OAAOY,EAAM,KAAK,GAAG,CACzB,CACJ,CACJ,CAWO,SAAS0G,GAAaC,EAAM,CAAE,UAAAC,EAAY,GAAI,EAAI,CAAC,EAAG,CACzD,IAAMC,EAAUF,EAAK,OAAS7I,GAAK,MAsB7BgJ,EAAe,CAAE,MAAO,EAAG,MAAO,EAAG,KAAM,CAAE,EAC7CC,EAAMJ,EAAK,WACZ,OAAQjE,GAAMA,EAAE,OAASvE,GAAK,WAAauE,EAAE,UAAY,CAAC,EAC1D,KAAK,CAACsB,EAAGgD,IAAMF,EAAazI,GAAU2F,EAAE,IAAI,CAAC,EAAI8C,EAAazI,GAAU2I,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAClFC,EAAUF,GAAOzI,GAAYyI,EAAI,IAAI,IAAM,KAC3CG,EAAQH,EAAMA,EAAI,KAAO,EACzBI,EAAQJ,EACR,UAAUE,EAAU,IAAM,GAAG,IAAIT,GAAWO,EAAI,KAAMA,EAAI,IAAI,CAAC,GAC/D,mBAEAvG,EAAQ,CACV,MACA,OAAOoG,CAAS,sBAChB,MACA,QACA,mBACA,uBACA,iBAAiBM,CAAK,oCACtBC,EACA,eAAiBR,EAAK,MACtB,aAAeA,EAAK,IAKpB,yBAA2B,MAAM,KAAKA,EAAK,YAAcxF,GAAMoF,GAAKpF,CAAC,EAAE,YAAY,CAAC,EAAE,KAAK,GAAG,EAC9F,WAAapD,GAAM4I,EAAK,KAAK,EAC7B,UACA,mBACA,sBAAwBA,EAAK,cACjC,EAKMS,EAAYT,EAAK,WAAW,IAAI,CAACjE,EAAGtD,IAAM,CAC5C,IAAM2C,EAAQ1D,GAAUqE,EAAE,IAAI,EACxBf,EAAYe,EAAE,UAAY,EAAI,MAAQ,MAGtC2E,EAAY,KAAK,IAAI,EAAG,MAAQjI,CAAC,EACjCwC,EAAWpD,GAAUuD,CAAK,EAAI,SAAWsF,EAAY,IAAM,IAK7D5F,EAAO,eADQ,OAAOiB,EAAE,KAAO,EAAIA,EAAE,QAAU,CAAC,CAChB,MAAMf,CAAS,IAAIC,CAAQ,IAAI4E,GAAW9D,EAAE,KAAMA,EAAE,IAAI,CAAC,IAAIA,EAAE,IAAI,QAAQX,CAAK,GAUpH,OAAIA,IAAU,SACVN,GAAQnD,GAAYoE,EAAE,IAAI,IAAM,KAAO,oBAAsB,0BAE7Df,IAAc,QAAOF,GAAQ,YAAYlD,GAAQmE,EAAE,OAAO,CAAC,IACxDjB,CACX,CAAC,EAID2F,EAAU,KAAK,qBAAqB,EACpC,IAAME,EAAK9G,EAAM,QAAQ2G,CAAK,EAAI,EAClC,OAAA3G,EAAM,OAAO8G,EAAI,EAAG,GAAGF,CAAS,EAEzB,CAAE,KAAMP,EAAU,QAAU,SAAU,IAAKrG,EAAM,KAAK;AAAA,CAAM,EAAI;AAAA,CAAO,CAClF,CAMA,IAAM+G,GAAM,IAAI,YAEhB,SAASC,MAAUC,EAAO,CACtB,IAAMC,EAAQD,EAAM,OAAO,CAACtC,EAAGzD,IAAMyD,EAAIzD,EAAE,OAAQ,CAAC,EAC9CvC,EAAM,IAAI,WAAWuI,CAAK,EAC5BC,EAAI,EACR,QAAWjG,KAAK+F,EAAStI,EAAI,IAAIuC,EAAGiG,CAAC,EAAGA,GAAKjG,EAAE,OAC/C,OAAOvC,CACX,CAiBA,eAAsB4G,GAAW6B,EAAQC,EAAY,CAEjD,OADU,MAAMD,EAAOJ,GAAOD,GAAI,OAAO,aAAa,EAAGM,CAAU,CAAC,GAC3D,MAAM,EAAGlK,EAAO,aAAa,CAC1C,CAGA,eAAsBmK,GAAWF,EAAQG,EAAW,CAEhD,OADU,MAAMH,EAAOJ,GAAOD,GAAI,OAAO,aAAa,EAAGQ,CAAS,CAAC,GAC1D,MAAM,EAAGpK,EAAO,gBAAgB,CAC7C,CAYO,SAASqK,GAAcH,EAAYI,EAAaC,EAAWC,EAAY,CAC1E,IAAMC,EAAMjH,GAAM,CACd,IAAMgE,EAAI,IAAI,WAAW,CAAC,EAC1B,WAAI,SAASA,EAAE,MAAM,EAAE,UAAU,EAAGhE,EAAE,MAAM,EACrCqG,GAAOrC,EAAGhE,CAAC,CACtB,EACA,OAAOqG,GACHD,GAAI,OAAO,eAAe,EAC1Ba,EAAGP,CAAU,EAAGO,EAAGH,CAAW,EAAGG,EAAGF,CAAS,EAAGE,EAAGD,CAAU,CACjE,CACJ,CAMA,IAAME,GAAS,mEAER,SAASC,GAAYlG,EAAO,CAC/B,IAAIjD,EAAM,GACV,QAASC,EAAI,EAAGA,EAAIgD,EAAM,OAAQhD,GAAK,EAAG,CACtC,IAAMkE,EAAIlB,EAAMhD,CAAC,EAAG+B,EAAIiB,EAAMhD,EAAI,CAAC,EAAGsD,EAAIN,EAAMhD,EAAI,CAAC,EAKrD,GAJAD,GAAOkJ,GAAO/E,GAAK,CAAC,EACpBnE,GAAOkJ,IAAS/E,EAAI,IAAM,GAAOnC,GAAK,IAAM,CAAE,EAC1CA,IAAM,SACVhC,GAAOkJ,IAASlH,EAAI,KAAO,GAAOuB,GAAK,IAAM,CAAE,EAC3CA,IAAM,QAAW,MACrBvD,GAAOkJ,GAAO3F,EAAI,EAAE,CACxB,CACA,OAAOvD,CACX,CAEO,SAASoJ,GAAchJ,EAAM,CAC5B,OAAOA,GAAS,UAAUV,EAAK,0BAA0B,EAG7D,IAAMoF,EAAI1E,EAAK,QAAQ,OAAQ,EAAE,EAC7B0E,EAAE,OAAS,KAAK,KAAKtG,EAAO,kBAAoB,EAAI,CAAC,EAAI,GAAGkB,EAAK,qBAAqB,EACrF,mBAAmB,KAAKoF,CAAC,GAAGpF,EAAK,+CAA+C,EACjFoF,EAAE,OAAS,IAAM,GAAGpF,EAAK,kCAAkC,EAC/D,IAAMM,EAAM,IAAI,WAAW,KAAK,MAAM8E,EAAE,OAAS,EAAI,CAAC,CAAC,EACnD0D,EAAI,EAAGa,EAAM,EAAGC,EAAO,EAC3B,QAAWC,KAAMzE,EACbuE,EAAOA,GAAO,EAAKH,GAAO,QAAQK,CAAE,EACpCD,GAAQ,EACJA,GAAQ,IAAKA,GAAQ,EAAGtJ,EAAIwI,GAAG,EAAKa,GAAOC,EAAQ,KAE3D,OAAID,GAAQ,GAAKC,GAAQ,GAAI5J,EAAK,mCAAmC,EAC9DM,EAAI,SAAS,EAAGwI,CAAC,CAC5B,CAEO,IAAMgB,GAAc,OAEpB,SAASC,GAAWxG,EAAO,CAAE,OAAOuG,GAAcL,GAAYlG,CAAK,CAAG,CAEtE,SAASyG,GAAWtJ,EAAM,CACzB,OAAOA,GAAS,UAAUV,EAAK,0BAA0B,EAC7D,IAAMqD,EAAI3C,EAAK,KAAK,EACpB,OAAK2C,EAAE,WAAWyG,EAAW,GAAG9J,EAAK,uBAAuB,EACrD0J,GAAcrG,EAAE,MAAMyG,GAAY,MAAM,CAAC,CACpD,CCj0BO,IAAMG,GAAmB,EAEnBC,GAAO,OAAO,OAAO,CAAE,MAAO,EAAG,OAAQ,CAAE,CAAC,EAE5CC,GAAc,OAAO,OAAO,CAIrC,SAAU,IACV,SAAU,GAEV,QAAS,IACT,QAAS,GACT,eAAgB,IACpB,CAAC,EAEKC,GAAN,cAA+B,KAAM,CACjC,YAAYC,EAASC,EAAO,eAAgB,CACxC,MAAMD,CAAO,EACb,KAAK,KAAO,mBACZ,KAAK,KAAOC,CAChB,CACJ,EACMC,GAAO,CAACC,EAAKF,IAAS,CAAE,MAAM,IAAIF,GAAiBI,EAAKF,CAAI,CAAG,EAa9D,SAASG,GAAc,CAAE,KAAAC,EAAM,SAAAC,EAAU,UAAAC,CAAU,EAAG,CACrDF,IAASR,GAAK,OAASQ,IAASR,GAAK,QAAQK,GAAK,cAAc,EACpE,OAAW,CAACM,EAAMC,CAAC,GAAK,CAAC,CAAC,OAAQH,CAAQ,EAAG,CAAC,QAASC,CAAS,CAAC,EACvDE,aAAa,YAAaP,GAAK,GAAGM,CAAI,4BAA4B,GACpEC,EAAE,OAASX,GAAY,UAAYW,EAAE,OAASX,GAAY,WAC1DI,GAAK,GAAGM,CAAI,2BAA2B,EAG/C,IAAME,EAAM,IAAI,WAAW,EAAYJ,EAAS,OAAS,EAAIC,EAAU,MAAM,EACvEI,EAAK,IAAI,SAASD,EAAI,MAAM,EAC9BE,EAAI,EACR,OAAAF,EAAIE,GAAG,EAAIhB,GACXc,EAAIE,GAAG,EAAIP,EACXM,EAAG,UAAUC,EAAGN,EAAS,MAAM,EAAGM,GAAK,EACvCF,EAAI,IAAIJ,EAAUM,CAAC,EAAGA,GAAKN,EAAS,OACpCK,EAAG,UAAUC,EAAGL,EAAU,MAAM,EAAGK,GAAK,EACxCF,EAAI,IAAIH,EAAWK,CAAC,EACbF,CACX,CAGO,SAASG,GAAcC,EAAK,CACzBA,aAAe,YAAaZ,GAAK,+BAA+B,EAClEY,EAAI,SAAW,GAAGZ,GAAK,mBAAmB,EAC1CY,EAAI,OAAShB,GAAY,gBAAgBI,GAAK,iCAAiC,EAEnF,IAAMS,EAAK,IAAI,SAASG,EAAI,OAAQA,EAAI,WAAYA,EAAI,UAAU,EAC9DF,EAAI,EACFG,EAAQC,GAAM,CAAMJ,EAAII,EAAIF,EAAI,QAAQZ,GAAK,uBAAuB,CAAG,EAE7Ea,EAAK,CAAC,EACN,IAAME,EAAUH,EAAIF,GAAG,EAGnBK,IAAYrB,IAAkBM,GAAK,kCAAkCe,EAAQ,SAAS,EAAE,CAAC,GAAI,SAAS,EAE1GF,EAAK,CAAC,EACN,IAAMV,EAAOS,EAAIF,GAAG,EAChBP,IAASR,GAAK,OAASQ,IAASR,GAAK,QAAQK,GAAK,wBAAwB,EAE9Ea,EAAK,CAAC,EACN,IAAMG,EAAUP,EAAG,UAAUC,CAAC,EAAGA,GAAK,GAClCM,EAAUpB,GAAY,UAAYoB,EAAUpB,GAAY,WAAUI,GAAK,+BAA+B,EAC1Ga,EAAKG,CAAO,EACZ,IAAMZ,EAAWQ,EAAI,MAAMF,EAAGA,EAAIM,CAAO,EAAGN,GAAKM,EAEjDH,EAAK,CAAC,EACN,IAAMI,EAAWR,EAAG,UAAUC,CAAC,EAAGA,GAAK,GACnCO,EAAWrB,GAAY,UAAYqB,EAAWrB,GAAY,WAAUI,GAAK,gCAAgC,EAC7Ga,EAAKI,CAAQ,EACb,IAAMZ,EAAYO,EAAI,MAAMF,EAAGA,EAAIO,CAAQ,EAAG,OAAAP,GAAKO,EAK/CP,IAAME,EAAI,QAAQZ,GAAK,GAAGY,EAAI,OAASF,CAAC,sCAAsC,EAE3E,CAAE,QAAAK,EAAS,KAAAZ,EAAM,SAAAC,EAAU,UAAAC,CAAU,CAChD,CAUO,SAASa,GAAgB,CAAE,gBAAAC,EAAiB,iBAAAC,EAAkB,UAAAC,EAAW,WAAAC,CAAW,EAAG,CAC1F,OAAW,CAAChB,EAAMC,CAAC,IAAK,OAAO,QAAQ,CAAE,gBAAAY,EAAiB,iBAAAC,EAAkB,UAAAC,EAAW,WAAAC,CAAW,CAAC,GAC3F,EAAEf,aAAa,aAAeA,EAAE,SAAW,IAAGP,GAAK,wBAAwBM,CAAI,aAAa,EAEpG,OAAOiB,GAAcJ,EAAiBC,EAAkBC,EAAWC,CAAU,CACjF,CAUA,eAAsBE,GAAqBC,EAAQC,EAAY,CAC3D,IAAMC,EAAI,MAAMF,EAAO,OAAO,UAAWC,CAAU,EACnD,OAAO,MAAM,KAAK,IAAI,WAAWC,CAAC,CAAC,CACvC,CAEA,IAAMC,GAAM,IAAI,YAGT,SAASC,GAAaH,EAAY,CACrC,IAAMI,EAAQF,GAAI,OAAO,iBAAiB,EACpCpB,EAAM,IAAI,WAAWsB,EAAM,OAASJ,EAAW,MAAM,EAC3D,OAAAlB,EAAI,IAAIsB,EAAO,CAAC,EAChBtB,EAAI,IAAIkB,EAAYI,EAAM,MAAM,EACzBtB,CACX,CASA,eAAsBuB,GAAqBN,EAAQ,CAAE,eAAAO,EAAgB,kBAAAC,EAAmB,WAAAP,EAAY,OAAAQ,EAAS,CAAE,EAAG,CAC9G,IAAMC,EAAS,MAAMV,EAAO,WAAW,CAAE,KAAM,OAAQ,OAAQQ,CAAkB,EAAGD,EAAgB,GAAG,EACnGI,EAAM,KACV,GAAI,CACAA,EAAM,MAAMX,EAAO,UAAU,MAAOU,EAAQ,OAAQ,GAAO,CAAC,YAAY,CAAC,EACzE,IAAME,EAAO,IAAI,WAAW,MAAMZ,EAAO,OAAO,UAAWC,CAAU,CAAC,EAChEY,EAAO,MAAMb,EAAO,WACtB,CAAE,KAAM,OAAQ,KAAM,UAAW,KAAAY,EAAM,KAAMT,GAAI,OAAO,aAAa,CAAE,EACvEQ,EAAK,EACT,EACM3B,EAAK,IAAI,SAAS6B,CAAI,EACtBxB,GAAKL,EAAG,UAAU,CAAC,EAAIA,EAAG,UAAU,CAAC,KAAO,EAC5C8B,EAAM,IAAML,EAClB,OAAO,OAAOpB,EAAIyB,CAAG,EAAE,SAASL,EAAQ,GAAG,CAC/C,QAAE,CAEE,GAAI,CAAE,IAAI,WAAWC,CAAM,EAAE,KAAK,CAAC,CAAG,MAAY,CAA0B,CAChF,CACJ,CASA,eAAsBK,GAAqBf,EAAQgB,EAAWC,EAAoB,EAC1E,EAAEA,aAA8B,aAAeA,EAAmB,SAAWC,EAAO,mBACpF3C,GAAK,0CAA2C,oBAAoB,EAGxE,IAAM4C,EAAS,MAAMC,GADN,MAAOC,GAAM,IAAI,WAAW,MAAMrB,EAAO,OAAO,UAAWqB,CAAC,CAAC,EACpCL,CAAS,EAC7CG,EAAO,SAAWF,EAAmB,QAAQ1C,GAAK,6BAA8B,qBAAqB,EACzG,IAAI+C,EAAO,EACX,QAASC,EAAI,EAAGA,EAAIJ,EAAO,OAAQI,IAAKD,GAAQH,EAAOI,CAAC,EAAIN,EAAmBM,CAAC,EAChF,OAAID,IAAS,GACT/C,GAAK,mEAAoE,qBAAqB,EAE3F,EACX,CCpKA,IAAMiD,GAAN,MAAMC,CAA4B,CAK9B,OAAO,SAAW,CACd,sBAAuB,IACvB,mBAAoB,IAGpB,mBAAoB,IACpB,oBAAqB,IACrB,0BAA2B,IAC3B,iBAAkB,IAClB,uBAAwB,IACxB,sBAAuB,IAIvB,2BAA4B,KAC5B,yBAA0B,IAC1B,wBAAyB,IACzB,wBAAyB,IACzB,wBAAyB,KACzB,wBAAyB,IACzB,yBAA0B,IAC1B,0BAA2B,KAC3B,0BAA2B,IAC3B,oBAAqB,IACrB,kBAAmB,IACnB,kBAAmB,KACnB,gBAAiB,IACjB,uBAAwB,IAiBxB,qBAAsB,IAKtB,oBAAqB,IAKrB,sBAAuB,IAGvB,uBAAwB,KAMxB,uBAAwB,KAQxB,qBAAsB,KACtB,uBAAwB,IACxB,wBAAyB,GAE7B,EAKA,OAAO,kBAAoB,OAAO,OAAO,CAAC,IAAM,IAAM,IAAM,IAAM,KAAO,GAAK,CAAC,EAE/E,OAAO,OAAS,CACZ,wBAAyB,EAIzB,wBAAyB,EACzB,aAAc,EACd,0BAA2B,IAC3B,yBAA0B,EAC1B,mBAAoB,EACpB,mBAAoB,GACpB,YAAa,IACb,cAAe,KACf,aAAc,GACd,aAAc,EAClB,EAEA,OAAO,MAAQ,CACX,6BAA8B,EAC9B,sBAAuB,GACvB,sBAAuB,IACvB,mBAAoB,GACpB,mBAAoB,IACpB,eAAgB,KAChB,gBAAiB,IACjB,gBAAiB,IACjB,2BAA4B,EAC5B,kBAAmB,GACnB,0BAA2B,EAC/B,EAEA,OAAO,cAAgB,CAEnB,QAAS,UACT,iBAAkB,mBAIlB,gBAAiB,kBAGjB,eAAgB,iBAEhB,gBAAiB,kBAGjB,UAAW,YACX,aAAc,eACd,sBAAuB,wBACvB,uBAAwB,yBACxB,4BAA6B,8BAC7B,gBAAiB,kBACjB,iBAAkB,mBAClB,oBAAqB,sBACrB,mBAAoB,qBAGpB,oBAAqB,sBACrB,uBAAwB,yBACxB,WAAY,aACZ,mBAAoB,qBACpB,uBAAwB,yBACxB,oBAAqB,sBAMrB,WAAY,aACZ,YAAa,cACb,SAAU,WACV,aAAc,eACd,SAAU,WAWV,kBAAmB,oBACnB,mBAAoB,qBAGpB,oBAAqB,sBAMrB,SAAU,WACV,UAAW,YAGX,KAAM,MACV,EAEA,OAAO,iBAAmB,CACtB,aAAc,wBACd,aAAc,wBACd,eAAgB,yBACpB,EAOA,OAAO,gCAAkC,IAAI,IAAI,CAC7CA,EAA4B,cAAc,eAC1CA,EAA4B,cAAc,gBAC1CA,EAA4B,cAAc,WAC1CA,EAA4B,cAAc,YAC1CA,EAA4B,cAAc,SAC1CA,EAA4B,cAAc,aAC1CA,EAA4B,cAAc,SAC1CA,EAA4B,cAAc,kBAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,mBAC9C,CAAC,EAYD,OAAO,kBAAoB,GAK3B,OAAO,6BAA+B,KAEtC,OAAO,iBAAmB,MAG1B,OAAO,gBAAkB,EACzB,OAAO,iBAAmB,EAC1B,OAAO,oBAAsB,OAAO,OAAO,CAGvC,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,EACvD,OAAO,OAAO,CAAE,KAAM,8BAA+B,CAAC,EACtD,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,EACvD,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,EACvD,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,EACvD,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,CAC3D,CAAC,EAGD,OAAO,WAAa,GAGpB,YAAYC,EAAWC,EAAgBC,EAAeC,EAAwBC,EAAgB,KAAMC,EAA4B,KAAMC,EAAS,CAAC,EAAG,CAgFnJ,GA9EA,KAAK,kBAAoB,KAAK,sBAAsB,EAEhD,KAAK,WAAa,CAAC,KAAK,mBAAqBP,EAA4B,WAGzE,KAAK,QAAU,CACX,YAAa,CACT,QAASO,EAAO,aAAa,SAAW,GACxC,YAAaA,EAAO,aAAa,aAAeP,EAA4B,SAAS,0BACrF,YAAaO,EAAO,aAAa,aAAeP,EAA4B,SAAS,0BACrF,QAASO,EAAO,aAAa,SAAWP,EAA4B,MAAM,sBAC1E,QAASO,EAAO,aAAa,SAAWP,EAA4B,MAAM,sBAC1E,SAAUO,EAAO,aAAa,UAAY,CAAC,YAAa,SAAU,MAAM,CAC5E,EACA,cAAe,CACX,QAASA,EAAO,eAAe,SAAW,GAC1C,iBAAkBA,EAAO,eAAe,kBAAoBP,EAA4B,OAAO,mBAC/F,kBAAmBO,EAAO,eAAe,mBAAqB,CAAC,WAAW,EAC1E,cAAeA,EAAO,eAAe,eAAiB,GACtD,qBAAsBA,EAAO,eAAe,sBAAwB,EACxE,EACA,cAAe,CACX,QAASA,EAAO,eAAe,SAAW,GAC1C,WAAYA,EAAO,eAAe,YAAcP,EAA4B,MAAM,mBAClF,WAAYO,EAAO,eAAe,YAAcP,EAA4B,MAAM,mBAClF,iBAAkBO,EAAO,eAAe,kBAAoB,GAC5D,oBAAqBA,EAAO,eAAe,qBAAuB,EACtE,EACA,mBAAoB,CAChB,QAASA,EAAO,oBAAoB,SAAW,GAC/C,gBAAiBA,EAAO,oBAAoB,iBAAmB,GAC/D,eAAgBA,EAAO,oBAAoB,gBAAkB,GAC7D,SAAUA,EAAO,oBAAoB,UAAY,GACjD,aAAcA,EAAO,oBAAoB,cAAgB,GACzD,iBAAkBA,EAAO,oBAAoB,kBAAoB,EACrE,EACA,OAAQ,CAGJ,YAAaA,EAAO,QAAQ,cACpBA,EAAO,QAAQ,UAAY,aAAe,YAClD,UAAWA,EAAO,QAAQ,YACpBA,EAAO,OAAO,cAAgB,aAC9BA,EAAO,QAAQ,WAAa,GAClC,WAAYA,EAAO,QAAQ,YACpBP,EAA4B,oBAAoB,IAAIQ,IAAW,CAAE,GAAGA,CAAO,EAAE,CACxF,CACJ,EAiBA,KAAK,kBAAoBD,EAAO,mBAAqB,GAErD,KAAK,oBAAsB,GAG3B,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAG7B,KAAK,uBAAuB,EAG5B,KAAK,sBAAsB,EAC3B,CAAC,OAAO,0BACR,MAAM,IAAI,MAAM,oFAAoF,EAExG,KAAK,gBAAkB,IAEZ,KAAK,wBAA0B,CAClC,MAAO,KAAK,wBAAwB,MACpC,MAAO,KAAK,wBAAwB,MACpC,UAAW,KAAK,wBAAwB,SAE5C,EAAI,KAER,KAAK,WAAW,OAAQ,+DAAwD,EAChF,KAAK,mBAAqB,KAC1B,KAAK,eAAiB,KACtB,KAAK,YAAc,KAGnB,KAAK,UAAYN,EACjB,KAAK,eAAiBC,EACtB,KAAK,cAAgBC,EACrB,KAAK,0BAA4BG,EAEjC,KAAK,uBAAyBF,EAC9B,KAAK,cAAgBC,EACrB,KAAK,YAAc,GACnB,KAAK,mBAAqB,EAC1B,KAAK,sBAAwBL,EAA4B,OAAO,wBAChE,GAAI,CACJ,KAAK,uBAAuB,CAChC,OAASS,EAAO,CACZ,WAAK,WAAW,QAAS,2CAAuC,CAC5D,UAAWA,EAAM,YAAY,IACjC,CAAC,EACK,IAAI,MAAM,8CAA8C,CAClE,CAGA,GAAI,CAAC,KAAK,qBAAqB,EAC3B,WAAK,WAAW,QAAS,4DAAuD,EAC1E,IAAI,MAAM,0CAA0C,EAoStD,GAjSJ,OAAO,OAAW,KAClB,KAAK,WAAW,OAAQ,yEAAkE,EAG9F,KAAK,WAAW,OAAQ,iEAA0D,EAC9E,KAAK,kBAAoB,KACzB,KAAK,aAAe,CAAC,EAErB,KAAK,WAAa,CACd,MAAO,OACP,SAAU,EACV,UAAW,EACX,WAAY,KACZ,WAAY,KACZ,aAAc,KACd,WAAY,EACZ,eAAgB,EAChB,YAAa,IACjB,EAEA,KAAK,eAAiB,EACtB,KAAK,iBAAmB,EACxB,KAAK,eAAiB,KACtB,KAAK,gBAAkB,KACvB,KAAK,YAAc,KACnB,KAAK,aAAe,KAChB,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAEtB,KAAK,iBAAmB,KAC5B,KAAK,eAAiB,KACtB,KAAK,WAAa,GAClB,KAAK,sBAAwB,EAC7B,KAAK,oBAAsB,IAAI,IAG/B,KAAK,2BAA6B,GAClC,KAAK,4BAA8B,GACnC,KAAK,2BAA6B,GAQlC,KAAK,wBAA0B,KAC/B,KAAK,qBAAuB,KAC5B,KAAK,qBAAuB,GAG5B,KAAK,kBAAoB,IAAI,IAC7B,KAAK,iBAAmB,KAAK,IAAI,EACrC,KAAK,eAAiB,EACtB,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,YAAc,KACnB,KAAK,qBAAuB,KAG5B,KAAK,iBAAmB,GACxB,KAAK,aAAe,IAAI,IACxB,KAAK,eAAiB,IACtB,KAAK,wBAA0B,GAC/B,KAAK,UAAY,KAMjB,KAAK,eAAiB,KAEtB,KAAK,MAAQ,KACb,KAAK,aAAe,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EACnE,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EACtD,KAAK,cAAgB,KAKrB,KAAK,SAAW,KAChB,KAAK,qBAAuB,GAC5B,KAAK,cAAgB,KACrB,KAAK,sBAAwB,GAC7B,KAAK,cAAgB,GACrB,KAAK,6BAA+B,IAAI,IACxC,KAAK,4BAA8B,KACnC,KAAK,oBAAsB,KAC3B,KAAK,gBAAkB,KAAK,IAAI,EAGhC,KAAK,wBAAwB,EAI7B,KAAK,2BAA6B,GAClC,KAAK,2BAA6B,GAClC,KAAK,mCAAqC,GAC1C,KAAK,+BAAiC,GACtC,KAAK,iCAAmC,GACxC,KAAK,oCAAsC,GAC3C,KAAK,yCAA2C,GAChD,KAAK,gCAAkC,GACvC,KAAK,yBAA2B,KAChC,KAAK,oCAAsC,GAC3C,KAAK,6BAA+B,KAGpC,KAAK,mBAAqB,KAC1B,KAAK,eAAiB,KAOtB,KAAK,kBAAoB,CACrB,QAAS,IAAI,IACb,UAAW,IAAI,IACf,eAAgB,EAChB,iBAAkB,IAClB,cAAe,IACf,kBAAmB,CACf,WAAY,EACZ,aAAc,EACd,gBAAiB,CACrB,EACA,cAAe,CACX,eAAgB,EAChB,gBAAiB,GACjB,eAAgB,CACpB,EACA,WAAY,IAAI,IAChB,cAAe,EACnB,EAGA,KAAK,mBAAqB,KAK1B,KAAK,oBAAsB,CACvB,gBAAiB,CACb,cAAe,gBACf,QAAS,UACT,WAAY,aACZ,OAAQ,SACR,QAAS,SACb,EACA,cAAe,IAAI,IACnB,YAAa,IAAI,IACjB,cAAe,EACf,eAAgB,GAChB,cAAe,EACnB,EAKA,KAAK,qBAAuB,CACxB,cAAe,IAAI,QACnB,aAAc,CAAC,EACf,WAAY,GACZ,gBAAiB,KACjB,YAAa,CACT,cAAe,EACf,eAAgB,EAChB,YAAa,CACjB,CACJ,EACA,KAAK,eAAiB,KACtB,KAAK,YAAc,KAQnB,KAAK,mBAAqB,KAC1B,KAAK,UAAY,CACb,OAAQ,GACR,MAAO,OACP,UAAW,GACX,WAAY,GACZ,cAAe,GACf,eAAgB,GAChB,OAAQ,KACR,QAAS,KACT,YAAa,KACb,MAAO,IACX,EACA,KAAK,iBAAmB,KACxB,KAAK,kBAAoB,KACzB,KAAK,kBAAoB,KACzB,KAAK,iBAAmB,GACxB,KAAK,iBAAmB,KACxB,KAAK,iBAAmB,KACxB,KAAK,gBAAkB,OACvB,KAAK,sBAAwB,KAuB7B,KAAK,kBAAoB,KACzB,KAAK,qBAAuB,KAE5B,KAAK,oBAAsB,IAAI,IAG/B,KAAK,oBAAsB,KAC3B,KAAK,gBAAkB,KAAK,IAAI,EAChC,KAAK,kBAAoB,EACzB,KAAK,YAAc,IAAI,IACvB,KAAK,QAAU,IAAI,IACnB,KAAK,WAAaV,EAA4B,OAAO,aACrD,KAAK,eAAiB,KACtB,KAAK,YAAc,KAGnB,KAAK,iBAAmB,CAEpB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,gBAAiB,GACjB,sBAAuB,GACvB,OAAQ,GAGR,oBAAqB,GACrB,iBAAkB,GAClB,oBAAqB,GACrB,sBAAuB,GACvB,eAAgB,GAChB,iBAAkB,GAClB,mBAAoB,EACpB,EACA,KAAK,WAAW,OAAQ,oEAA6D,EAGrF,KAAK,WAAW,OAAQ,6DAAuD,CAC3E,YAAa,KAAK,QAAQ,YAAY,QACtC,cAAe,KAAK,QAAQ,cAAc,QAC1C,cAAe,KAAK,QAAQ,cAAc,QAC1C,mBAAoB,KAAK,QAAQ,mBAAmB,OACxD,CAAC,EASD,KAAK,YAAc,UAGnB,KAAK,2BAA2B,EAGhC,KAAK,4BAA4B,EAEjC,KAAK,gCAAgC,EAEjC,CAAC,KAAK,+BAA+B,EACrC,WAAK,WAAW,QAAS,gFAAyE,EAC5F,IAAI,MAAM,0EAA0E,EAO1F,KAAK,oBAAsB,KAK3B,KAAK,cAAgB,CACjB,QAAS,KAAK,QAAQ,cAAc,QACpC,WAAY,KAAK,QAAQ,cAAc,WACvC,WAAY,KAAK,QAAQ,cAAc,WACvC,iBAAkB,KAAK,QAAQ,cAAc,iBAC7C,oBAAqB,KAAK,QAAQ,cAAc,mBACpD,EAGA,KAAK,kBAAoB,CACrB,QAAS,KAAK,QAAQ,aAAa,SAAW,GAC9C,YAAa,KAAK,QAAQ,aAAa,aAAe,KACtD,YAAa,KAAK,QAAQ,aAAa,aAAe,IACtD,QAAS,KAAK,QAAQ,aAAa,SAAW,GAC9C,QAAS,KAAK,QAAQ,aAAa,SAAW,KAC9C,SAAU,KAAK,QAAQ,aAAa,UAAY,CAAC,YAAa,SAAU,MAAM,EAC9E,qBAAsB,KAAK,QAAQ,aAAa,sBAAwB,EAC5E,EACA,KAAK,iBAAmB,KACxB,KAAK,gBAAkB,EAGvB,KAAK,eAAiB,CAClB,QAAS,GACT,aAAcA,EAA4B,MAAM,eAChD,SAAUA,EAA4B,MAAM,gBAC5C,SAAUA,EAA4B,MAAM,gBAC5C,gBAAiB,GACjB,gBAAiB,EACrB,EACA,KAAK,WAAa,CAAC,EACnB,KAAK,mBAAqB,GAG1B,KAAK,cAAgB,IAAI,IACzB,KAAK,mBAAqB,CACtB,QAAS,KAAK,QAAQ,cAAc,QACpC,iBAAkB,KAAK,QAAQ,cAAc,iBAC7C,kBAAmB,KAAK,QAAQ,cAAc,kBAC9C,cAAe,KAAK,QAAQ,cAAc,cAC1C,qBAAsB,KAAK,QAAQ,cAAc,oBACrD,EACA,KAAK,YAAc,IAAI,IAGvB,KAAK,iBAAmB,CACpB,QAAS,GACT,cAAeA,EAA4B,OAAO,yBAClD,eAAgBA,EAA4B,SAAS,gBACrD,mBAAoB,GACpB,cAAe,EACnB,EACA,KAAK,aAAe,IAAI,IACxB,KAAK,sBAAwB,GAG7B,KAAK,yBAA2B,CAC5B,QAAS,KAAK,QAAQ,mBAAmB,QACzC,gBAAiB,KAAK,QAAQ,mBAAmB,gBACjD,eAAgB,KAAK,QAAQ,mBAAmB,eAChD,SAAU,KAAK,QAAQ,mBAAmB,SAC1C,aAAc,KAAK,QAAQ,mBAAmB,aAC9C,iBAAkB,KAAK,QAAQ,mBAAmB,gBACtD,EACA,KAAK,gBAAkB,KAAK,wBAAwB,EAGpD,KAAK,cAAgB,UAAU,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAG,CAAC,CAAC,GAGpF,KAAK,qBAAqB,EAE1B,KAAK,2BAA2B,EAOhC,KAAK,mBAAqB,CACtB,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,IACjB,EAGA,KAAK,sBAAwB,CACzB,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,IACjB,EAGA,KAAK,0BAA4B,CAC7B,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,IACjB,EAGA,KAAK,gBAAkB,CACnB,eAAgB,GAChB,WAAY,GACZ,aAAc,GACd,cAAe,KACf,kBAAmB,KAAK,IAAI,CAChC,EAGA,KAAK,mBAAqB,CACtB,cAAe,EACf,iBAAkB,EAClB,qBAAsB,CAC1B,CAEJ,CAMA,kBAAkBW,EAAaC,EAAc,KAAMC,EAAgB,GAAO,CACtE,GAAI,CACA,IAAMC,EAAM,CACR,UAAW,KAAK,gBAAgB,WAAa,KAAK,WAAa,UAC/D,eAAgB,KAAK,gBAAkB,UACvC,eAAgB,KAAK,4BAA4B,EACjD,YAAaH,EACb,UAAW,KAAK,IAAI,EACpB,aAAc,KAAK,cAAgB,UACnC,cAAeE,CACnB,EAGA,OAAID,GAAe,OAAOA,GAAgB,WAClCA,EAAY,SAAQE,EAAI,OAASF,EAAY,QAC7CA,EAAY,aAAe,SAAWE,EAAI,WAAaF,EAAY,YACnEA,EAAY,cAAgB,SAAWE,EAAI,YAAcF,EAAY,cAGtE,KAAK,UAAUE,CAAG,CAC7B,OAASL,EAAO,CACZ,YAAK,WAAW,QAAS,sCAAkC,CACvD,UAAWA,EAAM,YAAY,KAC7B,QAASA,EAAM,QACf,YAAaE,CACjB,CAAC,EAEM,KAAK,UAAU,CAClB,UAAW,UACX,eAAgB,UAChB,eAAgB,KAAK,IAAI,EACzB,YAAaA,EACb,UAAW,KAAK,IAAI,EACpB,aAAc,UACd,cAAeE,CACnB,CAAC,CACL,CACJ,CAMA,6BAA8B,CAC1B,IAAME,EAAU,KAAK,iBAGrB,OAAI,KAAK,eAAiB,OAAO,iBAAmB,MAChD,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,aAAa,MAAM,EACxB,KAAK,WAAW,OAAQ,qDAA4C,CAChE,UAAW,KAAK,IAAI,CACxB,CAAC,GAGEA,CACX,CASA,MAAM,mBAAmBC,EAAeC,EAAU,UAAW,CACzD,GAAI,CACA,IAAIC,EAGJ,GAAIF,aAAyB,YACzBE,EAAa,IAAI,WAAWF,CAAa,UAClCA,aAAyB,WAChCE,EAAaF,UACNA,aAAyB,UAAW,CAE3C,IAAMG,EAAU,GAAGH,EAAc,IAAI,IAAIA,EAAc,WAAW,MAAQ,SAAS,IAAIA,EAAc,WAAW,GAChHE,EAAa,IAAI,YAAY,EAAE,OAAOC,CAAO,CACjD,SAAW,OAAOH,GAAkB,SAChCE,EAAa,IAAI,YAAY,EAAE,OAAOF,CAAa,UAC5C,OAAOA,GAAkB,UAAYA,IAAkB,KAAM,CAEpE,IAAMI,EAAU,CAAE,KAAMJ,EAAc,KAAO,UAAW,IAAKA,EAAc,KAAO,SAAU,EAC5FE,EAAa,IAAI,YAAY,EAAE,OAAO,KAAK,UAAUE,CAAO,CAAC,CACjE,MAEIF,EAAa,IAAI,YAAY,EAAE,OAAO,OAAOF,CAAa,CAAC,EAI/D,IAAMK,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWH,CAAU,EAC7DI,EAAY,IAAI,WAAWD,CAAU,EAG3C,OAAO,MAAM,KAAKC,EAAU,MAAM,EAAG,CAAC,CAAC,EAClC,IAAIZ,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EACxC,KAAK,EAAE,CAEhB,MAAgB,CAEZ,MAAO,YACX,CACJ,CAKA,MAAM,YAAYa,EAAI,CAClB,OAAO,IAAI,QAAQC,GAAW,WAAWA,EAASD,CAAE,CAAC,CACzD,CAKA,MAAM,sBAAsBE,EAAWC,EAAQ,EAAG,CAC9C,OAAO,IAAI,QAASF,GAAY,CAC5B,WAAW,SAAY,CACnB,GAAI,CACA,MAAMC,EAAU,EAChBD,EAAQ,EAAI,CAChB,OAASf,EAAO,CACZ,KAAK,WAAW,QAAS,uBAAwB,CAC7C,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACDe,EAAQ,EAAK,CACjB,CACJ,EAAGE,CAAK,CACZ,CAAC,CACL,CAKA,MAAM,qBAAqBC,EAAOC,EAAY,GAAIC,EAAsB,EAAG,CACvE,IAAMC,EAAU,CAAC,EAEjB,QAASC,EAAI,EAAGA,EAAIJ,EAAM,OAAQI,GAAKH,EAAW,CAC9C,IAAMI,EAAQL,EAAM,MAAMI,EAAGA,EAAIH,CAAS,EACpCK,EAAe,MAAM,QAAQ,IAAID,CAAK,EAC5CF,EAAQ,KAAK,GAAGG,CAAY,EAGxBF,EAAIH,EAAYD,EAAM,QACtB,MAAM,KAAK,YAAYE,CAAmB,CAElD,CAEA,OAAOC,CACX,CAKA,MAAM,wBAAyB,CAK3B,MAAM,KAAK,YAAY,CAAC,EAGxB,QAASC,EAAI,EAAGA,EAAI,EAAGA,IACnB,MAAM,KAAK,YAAY,EAAE,CAEjC,CAKA,MAAM,qBAAqBG,EAAa,CAEpC,GAAI,OAAO,OAAW,IAClB,GAAI,CACA,OAAO,MAAM,KAAK,mBAAmBA,CAAW,CACpD,OAASzB,EAAO,CACZ,KAAK,WAAW,OAAQ,wDAAyD,CAC7E,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAIJ,OAAO,MAAM,KAAK,qBAAqByB,CAAW,CACtD,CAKA,MAAM,mBAAmBA,EAAa,CAClC,OAAO,IAAI,QAAQ,CAACV,EAASW,IAAW,CAEpC,IAAMC,EAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAmCbC,EAAO,IAAI,KAAK,CAACD,CAAU,EAAG,CAAE,KAAM,wBAAyB,CAAC,EAChEE,EAAS,IAAI,OAAO,IAAI,gBAAgBD,CAAI,CAAC,EAE7CE,EAAU,WAAW,IAAM,CAC7BD,EAAO,UAAU,EACjBH,EAAO,IAAI,MAAM,wBAAwB,CAAC,CAC9C,EAAG,GAAI,EAEPG,EAAO,UAAaE,GAAM,CACtB,aAAaD,CAAO,EACpBD,EAAO,UAAU,EACjB,IAAI,gBAAgBD,CAAI,EAEpBG,EAAE,KAAK,QACPhB,EAAQgB,EAAE,IAAI,EAEdL,EAAO,IAAI,MAAMK,EAAE,KAAK,KAAK,CAAC,CAEtC,EAEAF,EAAO,QAAW7B,GAAU,CACxB,aAAa8B,CAAO,EACpBD,EAAO,UAAU,EACjB,IAAI,gBAAgBD,CAAI,EACxBF,EAAO1B,CAAK,CAChB,EAEA6B,EAAO,YAAYJ,CAAW,CAClC,CAAC,CACL,CAKA,MAAM,qBAAqBA,EAAa,CACpC,GAAM,CAAE,KAAAO,EAAM,KAAAC,CAAK,EAAIR,EAEvB,OAAQO,EAAM,CACV,IAAK,iBAED,IAAIE,EAAY,EACVf,EAAY,IAElB,KAAOe,EAAYD,EAAK,OAAO,CAC3B,IAAME,EAAW,KAAK,IAAID,EAAYf,EAAWc,EAAK,KAAK,EAG3D,QAASX,EAAIY,EAAWZ,EAAIa,EAAUb,IAAK,CAI3CY,EAAYC,EAGZ,MAAM,KAAK,YAAY,CAAC,CAC5B,CAEA,MAAO,CAAE,QAAS,GAAM,UAAAD,CAAU,EAEtC,IAAK,kBAED,IAAME,EAAUH,EAAK,SAAW,CAAC,EAC3BI,EAAU,CAAC,EAEjB,QAASf,EAAI,EAAGA,EAAIc,EAAQ,OAAQd,GAAK,GACrCe,EAAQ,KAAKD,EAAQ,MAAMd,EAAGA,EAAI,EAAE,CAAC,EAGzC,IAAIgB,EAAU,EACd,QAAWf,KAASc,EAChBd,EAAM,QAAQ,IAAMe,GAAS,EAC7B,MAAM,KAAK,YAAY,CAAC,EAG5B,MAAO,CAAE,QAAS,GAAM,QAAAA,CAAQ,EAEpC,QACI,MAAO,CAAE,QAAS,GAAM,QAAS,sBAAuB,CAChE,CACJ,CAKJ,wBAAyB,CAErB,KAAK,mBAAqB,CACtB,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,KACb,SAAU,KACV,eAAgB,CACpB,EAEA,KAAK,sBAAwB,CACzB,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,KACb,SAAU,KACV,eAAgB,CACpB,EAEA,KAAK,0BAA4B,CAC7B,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,KACb,SAAU,KACV,eAAgB,CACpB,EAGA,KAAK,gBAAkB,CACnB,eAAgB,GAChB,WAAY,GACZ,aAAc,GACd,cAAe,KACf,kBAAmB,KAAK,IAAI,EAC5B,YAAa,KACb,qBAAsB,EACtB,wBAAyB,CAC7B,EAGA,KAAK,mBAAqB,CACtB,cAAe,EACf,iBAAkB,EAClB,qBAAsB,EACtB,gBAAiB,EACjB,iBAAkB,CACtB,EAEA,KAAK,WAAW,OAAQ,qEAA+D,CACnF,QAAS,CAAC,eAAgB,kBAAmB,qBAAqB,EAClE,UAAW,KAAK,IAAI,EACpB,SAAU,CAAC,oBAAqB,4BAA6B,yBAAyB,CAC1F,CAAC,CACL,CAMA,4BAA6B,CAEzB,KAAK,WAAW,OAAQ,iEAA0D,CACtF,CAMA,6BAA8B,CAE1B,KAAK,sBAAwB,YAAY,IAAM,CAC3C,KAAK,yBAAyB,CAClC,EAAG,GAAM,EAGT,KAAK,WAAW,OAAQ,sEAA+D,EAGvF,KAAK,cAAgB,IAAI,IAAI,CAAC,KAAK,qBAAqB,CAAC,CAC7D,CAEA,kBAAkBC,EAAO,CACrB,OAAKA,IACA,KAAK,gBAAe,KAAK,cAAgB,IAAI,KAClD,KAAK,cAAc,IAAIA,CAAK,EACrBA,EACX,CAEA,oBAAoBA,EAAO,CACnBA,GAAS,KAAK,eAAe,KAAK,cAAc,OAAOA,CAAK,CACpE,CAEA,qBAAqBC,EAAkBC,EAAmB,CACtD,KAAK,qBAAuBD,EAC5B,KAAK,sBAAwBC,CACjC,CAEA,sBAAuB,CACnB,IAAMC,EAAkB,CAAC,EACrB,KAAK,gBAAgB,kBACrB,KAAK,gBAAgB,mBAEnBC,EAAqB,KAAK,aAAa,aAAe,OACtDC,EAAsB,OAAO,KAAK,kBAAqB,UACzD,KAAK,iBAAiB,KAAK,EAAE,OAAS,EACpCC,EAAyB,OAAO,KAAK,sBAAyB,UAChE,KAAK,qBAAqB,KAAK,EAAE,OAAS,GAC1C,OAAO,KAAK,uBAA0B,UACtC,KAAK,sBAAsB,KAAK,EAAE,OAAS,EAE/C,OAAOH,GAAmBC,GAAsBC,GAAuBC,CAC3E,CAEA,oCAAqC,CACjC,OAAK,KAAK,qBAAqB,GAI1B,KAAK,wBACN,KAAK,sBAAwB,GAC7B,KAAK,iBAAiB,WAAW,EACjC,KAAK,yBAAyB,KAAK,gBAAgB,GAGhD,IATI,EAUf,CAEA,yBAAyBC,EAAK,CAC1B,OAAI,OAAOA,GAAQ,SAAiB,GAC5BA,EAAI,MAAM,iBAAiB,GAAK,CAAC,GAAG,MAChD,CAEA,6BAA6BA,EAAK,CAC9B,IAAMC,EAAU,CACZ,MAAO,EACP,KAAM,EACN,MAAO,EACP,MAAO,EACP,MAAO,EACP,QAAS,CACb,EAEA,GAAI,OAAOD,GAAQ,SAAU,OAAOC,EAEpC,QAAWC,KAAQF,EAAI,MAAM,oBAAoB,GAAK,CAAC,EAAG,CACtDC,EAAQ,OAAS,EAEjB,IAAMf,EADQgB,EAAK,MAAM,qCAAqC,IACzC,CAAC,GAAG,YAAY,EAEjChB,GAAQ,OAAO,UAAU,eAAe,KAAKe,EAASf,CAAI,EAC1De,EAAQf,CAAI,GAAK,EAEjBe,EAAQ,SAAW,CAE3B,CAEA,OAAOA,CACX,CAEA,4BAA4BD,EAAK,CAC7B,OAAI,OAAOA,GAAQ,SAAiB,CAAC,GAE7BA,EAAI,MAAM,oBAAoB,GAAK,CAAC,GAAG,IAAKE,GAAS,CACzD,IAAMC,EAAQD,EAAK,MAAM,EAAqB,EAAE,KAAK,EAAE,MAAM,KAAK,EAC5DE,EAAWD,EAAM,UAAUE,GAAQA,EAAK,YAAY,IAAM,KAAK,EAC/DC,EAAUH,EAAM,CAAC,GAAK,GACtBI,EAAOJ,EAAM,CAAC,GAAK,GACnBK,EAAgBJ,GAAY,GAAID,EAAMC,EAAW,CAAC,GAAK,UACvDK,GAAYN,EAAM,CAAC,GAAK,WAAW,YAAY,EAEjDO,EAAc,UAClB,MAAI,YAAY,KAAKJ,CAAO,EACxBI,EAAc,OACP,gDAAgD,KAAKJ,CAAO,EACnEI,EAAc,eACP,0BAA0B,KAAKJ,CAAO,EAC7CI,EAAc,cACPJ,EAAQ,SAAS,GAAG,IAC3BI,EAAc,QAGX,CACH,cAAAF,EACA,SAAAC,EACA,YAAAC,EACA,YAAa,CAAC,CAACH,EACf,SAAU,IAAM,CACZ,IAAMI,EAAWR,EAAM,UAAUE,GAAQA,EAAK,YAAY,IAAM,SAAS,EACzE,OAAOM,GAAY,GAAIR,EAAMQ,EAAW,CAAC,GAAK,IAClD,GAAG,CACP,CACJ,CAAC,CACL,CAEA,4BAA4BC,EAAOZ,EAAKa,EAAQ,CAAC,EAAG,CAChD,IAAMC,EAAmB,KAAK,6BAA6Bd,CAAG,EACxDe,EAAmB,KAAK,4BAA4Bf,CAAG,EAC7D,eAAQ,KAAK,mBAAmBY,CAAK,GAAI,CACrC,iBAAAE,EACA,iBAAAC,EACA,qBAAsB,KAAK,UAAUA,CAAgB,EACrD,GAAGF,CACP,CAAC,EACM,CAAE,iBAAAC,EAAkB,iBAAAC,CAAiB,CAChD,CAEA,2BAA2Bf,EAAK,CAC5B,IAAMC,EAAU,KAAK,6BAA6BD,CAAG,EAC/CgB,EAAU,KAAK,4BAA4BhB,CAAG,EAEpD,OAAOC,EAAQ,MAAQ,GACnBA,EAAQ,QAAU,GAClBA,EAAQ,QAAU,GAClBA,EAAQ,QAAU,GAClBe,EAAQ,MAAMC,GACVA,EAAU,gBAAkB,QAC5BA,EAAU,cAAgB,MAC9B,CACR,CAEA,iCAAiCvD,EAASsC,EAAK,CAC3C,GAAI,CAAC,KAAK,2BAA2BA,CAAG,EAAG,MAAO,GAElD,IAAMkB,EAAUxD,IAAY,SACtB,kNACA,oNAEN,YAAK,WAAW,OAAQ,mEAAoE,CACxF,QAAAA,EACA,iBAAkB,KAAK,6BAA6BsC,CAAG,EACvD,iBAAkB,KAAK,4BAA4BA,CAAG,CAC1D,CAAC,EACD,KAAK,mBAAmBkB,EAAS,QAAQ,EAClC,EACX,CAEA,MAAM,+BAAgC,CAClC,GAAI,CAAC,KAAK,gBAAgB,SAAU,OAAO,KAE3C,GAAI,CACA,IAAMC,EAAQ,MAAM,KAAK,eAAe,SAAS,EAC3CC,EAAa,IAAI,IACjBC,EAAiB,CAAC,EAExB,OAAAF,EAAM,QAASG,GAAW,EAClBA,EAAO,OAAS,mBAAqBA,EAAO,OAAS,qBACrDF,EAAW,IAAIE,EAAO,GAAI,CACtB,KAAMA,EAAO,KACb,cAAeA,EAAO,cACtB,SAAUA,EAAO,SACjB,QAASA,EAAO,SAAWA,EAAO,IAAM,KACxC,KAAMA,EAAO,MAAQ,KACrB,YAAaA,EAAO,aAAe,IACvC,CAAC,CAET,CAAC,EAEDH,EAAM,QAASG,GAAW,CAClBA,EAAO,OAAS,kBACpBD,EAAe,KAAK,CAChB,MAAOC,EAAO,MACd,UAAW,CAAC,CAACA,EAAO,UACpB,SAAU,CAAC,CAACA,EAAO,SACnB,UAAWA,EAAO,WAAa,EAC/B,cAAeA,EAAO,eAAiB,EACvC,qBAAsBA,EAAO,sBAAwB,KACrD,MAAOF,EAAW,IAAIE,EAAO,gBAAgB,GAAK,KAClD,OAAQF,EAAW,IAAIE,EAAO,iBAAiB,GAAK,IACxD,CAAC,CACL,CAAC,EAEM,CACH,UAAWD,EAAe,OAC1B,OAAQA,EAAe,OAAO,CAACE,EAAKC,KAChCD,EAAIC,EAAK,OAAS,SAAS,GAAKD,EAAIC,EAAK,OAAS,SAAS,GAAK,GAAK,EAC9DD,GACR,CAAC,CAAC,EACL,MAAOF,CACX,CACJ,OAASnE,EAAO,CACZ,MAAO,CACH,MAAOA,GAAO,SAAW,mCAC7B,CACJ,CACJ,CAEA,2BAA4B,CACxB,KAAK,qBAAuB,CACxB,YAAa,MAAM,QAAQ,KAAK,WAAW,EAAI,CAAC,GAAG,KAAK,WAAW,EAAI,KACvE,UAAW,KAAK,WAAa,KAC7B,aAAc,KAAK,cAAgB,KACnC,eAAgB,KAAK,gBAAkB,KACvC,UAAW,KAAK,IAAI,CACxB,CACJ,CAEA,qCAAsC,CAElC,GADoB,MAAM,QAAQ,KAAK,WAAW,GAAK,KAAK,YAAY,SAAW,GAClE,MAAO,GAExB,IAAMuE,EAAc,KAAK,sBAAsB,YAC/C,MAAI,CAAC,MAAM,QAAQA,CAAW,GAAKA,EAAY,SAAW,GAC/C,IAGX,KAAK,YAAc,CAAC,GAAGA,CAAW,EAC9B,CAAC,KAAK,WAAa,KAAK,qBAAqB,YAC7C,KAAK,UAAY,KAAK,qBAAqB,WAE3C,CAAC,KAAK,cAAgB,KAAK,qBAAqB,eAChD,KAAK,aAAe,KAAK,qBAAqB,cAE9C,CAAC,KAAK,gBAAkB,KAAK,qBAAqB,iBAClD,KAAK,eAAiB,KAAK,qBAAqB,gBAGpD,KAAK,WAAW,OAAQ,wDAAyD,CAC7E,oBAAqB,KAAK,IAAI,GAAK,KAAK,qBAAqB,WAAa,KAAK,IAAI,EACvF,CAAC,EAEM,GACX,CAEA,2BAA4B,CACpB,KAAK,sBAAsB,aAC3B,KAAK,kBAAkB,KAAK,qBAAqB,YAAa,iCAAiC,EAEnG,KAAK,qBAAuB,IAChC,CAKA,0BAA2B,CACvB,GAAI,CACA,KAAK,WAAW,OAAQ,sCAA+B,EAGvD,KAAK,aAAa,EAClB,KAAK,4BAA4B,EAGjC,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EAGrC,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAGxB,KAAK,aAAe,KAAK,YACzB,KAAK,oBAAoB,EAIzB,KAAK,YACL,KAAK,uBAAuB,EAOhC,KAAK,WAAW,OAAQ,oDAA6C,CAEzE,OAASvE,EAAO,CACZ,KAAK,WAAW,QAAS,kCAA8B,CACnD,UAAWA,GAAO,aAAa,MAAQ,UACvC,QAASA,GAAO,SAAW,eAC/B,CAAC,EAGD,KAAK,kBAAkB,EAAE,MAAMA,GAAS,CACpC,KAAK,WAAW,QAAS,2BAA4B,CACjD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,CACL,CACJ,CAKA,wBAAyB,CACrB,IAAMwE,EAAa,CAAC,EAGhB,KAAK,WAAW,KAAO,KAAK,gBAAgB,eAC5CA,EAAW,KAAK,aAAa,EAI7B,KAAK,aAAa,OAAS,KAAK,gBAAgB,iBAChDA,EAAW,KAAK,eAAe,EAI/B,KAAK,mBAAqB,KAAK,kBAAkB,UAAU,KAAO,KAAK,gBAAgB,cACvFA,EAAW,KAAK,YAAY,EAI5B,KAAK,oBAAoB,KAAO,KAAK,gBAAgB,wBACrDA,EAAW,KAAK,uBAAuB,EAIvC,KAAK,cAAc,KAAO,KAAK,gBAAgB,kBAC/CA,EAAW,KAAK,gBAAgB,EAIhC,KAAK,sBAAwB,KAAK,qBAAqB,OAAS,KAAK,gBAAgB,wBACrFA,EAAW,KAAK,uBAAuB,EAIvC,KAAK,WAAW,OAAS,KAAK,gBAAgB,eAC9CA,EAAW,KAAK,aAAa,EAI7B,KAAK,cAAgB,KAAK,aAAa,KAAO,KAAK,gBAAgB,iBACnEA,EAAW,KAAK,eAAe,EAI/BA,EAAW,OAAS,IACpB,KAAK,WAAW,OAAQ,kDAAyC,CAAE,WAAAA,CAAW,CAAC,EAC/E,KAAK,kBAAkB,EAAE,MAAMxE,GAAS,CACpC,KAAK,WAAW,QAAS,2BAA4B,CACjD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAET,CAKA,MAAM,mBAAoB,CACtB,KAAK,WAAW,OAAQ,6EAAsE,EAE9F,GAAI,CAwBA,GAtBA,KAAK,WAAW,MAAM,EACtB,KAAK,WAAW,OAAQ,uCAAgC,EAGxD,KAAK,aAAa,OAAS,EAC3B,KAAK,WAAW,OAAQ,4CAAqC,EAGzD,KAAK,oBACL,KAAK,kBAAkB,QAAQ,MAAM,EACrC,KAAK,kBAAkB,UAAU,MAAM,EACvC,KAAK,kBAAkB,WAAW,MAAM,EACxC,KAAK,kBAAkB,eAAiB,EACxC,KAAK,kBAAkB,cAAgB,GACvC,KAAK,WAAW,OAAQ,0DAAmD,GAI/E,KAAK,oBAAoB,MAAM,EAC/B,KAAK,WAAW,OAAQ,oDAA6C,EAGjE,KAAK,cAAe,CACpB,OAAW,CAACyE,EAAalC,CAAK,IAAK,KAAK,YAChCA,GAAO,aAAaA,CAAK,EAEjC,KAAK,cAAc,MAAM,EACzB,KAAK,YAAY,MAAM,EACvB,KAAK,WAAW,OAAQ,sDAA+C,CAC3E,CAGI,KAAK,mBACL,aAAa,KAAK,gBAAgB,EAClC,KAAK,iBAAmB,MAExB,KAAK,uBACL,KAAK,qBAAqB,OAAS,EACnC,KAAK,WAAW,OAAQ,6DAAsD,GAIlF,KAAK,WAAW,OAAS,EACzB,KAAK,WAAW,OAAQ,0CAAmC,EAGvD,KAAK,eACL,KAAK,aAAa,MAAM,EACxB,KAAK,WAAW,OAAQ,4CAAqC,GAIjE,KAAK,qBAAqB,WAAa,GACvC,KAAK,qBAAqB,aAAa,OAAS,EAChD,KAAK,qBAAqB,YAAY,YAAc,KAAK,IAAI,EAG7D,MAAM,KAAK,sBAAsB,SAAY,CACzC,KAAK,WAAW,OAAQ,+DAAwD,EAGhF,QAASjB,EAAI,EAAGA,EAAI,EAAGA,IACnB,KAAK,WAAW,OAAQ,+CAAwCA,EAAI,CAAC,IAAI,EAGzE,MAAM,KAAK,uBAAuB,EAGtC,KAAK,WAAW,OAAQ,yDAAkD,CAC9E,EAAG,CAAC,EAEJ,KAAK,qBAAqB,WAAa,GAEvC,KAAK,WAAW,OAAQ,0DAAqD,CAEjF,OAAStB,EAAO,CACZ,KAAK,WAAW,QAAS,2CAAuC,CAC5D,UAAWA,GAAO,aAAa,MAAQ,UACvC,QAASA,GAAO,SAAW,eAC/B,CAAC,EAGD,KAAK,qBAAqB,WAAa,EAC3C,CACJ,CAOA,0BAA0B0E,EAAe,CACrC,IAAMC,EAAe,CACjB,iBAAkB,KAAK,aAAa,OACpC,iBAAkB,KAAK,oBAAoB,KAC3C,iBAAkB,KAAK,aAAe,KAAK,aAAa,KAAO,EAC/D,eAAgB,KAAK,kBAAoB,KAAK,kBAAkB,QAAQ,KAAO,EAC/E,kBAAmB,KAAK,cAAgB,KAAK,cAAc,KAAO,CACtE,EAiBA,MAfmB,CACf,oBAAqBA,EAAa,mBAAqB,EACvD,oBAAqBA,EAAa,mBAAqB,EACvD,oBAAqBA,EAAa,mBAAqB,EACvD,kBAAmBA,EAAa,iBAAmB,EACnD,qBAAsBA,EAAa,oBAAsB,EACzD,WACIA,EAAa,mBAAqB,GAClCA,EAAa,mBAAqB,GAClCA,EAAa,mBAAqB,GAClCA,EAAa,iBAAmB,GAChCA,EAAa,oBAAsB,CAE3C,CAGJ,CAKA,mBAAoB,CAChB,IAAMC,EAAM,KAAK,IAAI,EAGjB,KAAK,oBAAoB,KAAO,KAAK,qBAAqB,sBAC1D,KAAK,oBAAoB,MAAM,EAC/B,KAAK,WAAW,OAAQ,6CAAsC,GAI9D,KAAK,mBACL,KAAK,eAAe,EAIxB,KAAK,eAAe,EAGhB,OAAO,2BAA6B,OAAO,0BAA0B,aACrE,OAAO,0BAA0B,YAAY,QAAQ,EAGzD,KAAK,WAAW,OAAQ,sCAA+B,CAC3D,CAKA,qBAAsB,CACd,KAAK,iBAAiB,WAAa,IACnC,KAAK,WAAW,OAAQ,sEAA4D,CAG5F,CASA,eAAeC,EAAM,GAAO,CACxB,GAAI,CAWA,OAAI,KAAK,aAAe,KAAK,YAAY,aAAe,QACpD,KAAK,YAAY,KAAK,KAAK,UAAU,CACjC,KAAMtF,EAA4B,cAAc,UAChD,IAAAsF,EACA,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF,KAAK,iBAAiB,cAAgB,KAAK,IAAI,EAC/C,KAAK,WAAW,QAASA,EAAM,+BAA0B,0BAAmB,EACrE,IAEJ,EACX,OAAS7E,EAAO,CACZ,YAAK,WAAW,QAAS,2BAAuB,CAC5C,UAAWA,GAAO,aAAa,MAAQ,UACvC,QAASA,GAAO,SAAW,eAC/B,CAAC,EACM,EACX,CACJ,CAQA,mBAAmBiC,EAAMzB,EAAU,UAAW,CAC1C,IAAMsE,EAAmB,CACrB,QAAS,GACT,cAAe,KACf,OAAQ,CAAC,EACT,SAAU,CAAC,CACf,EAEA,GAAI,CAEA,GAAI7C,GAAS,KACT,OAAA6C,EAAiB,OAAO,KAAK,kCAAkC,EACxDA,EAIX,GAAI,OAAO7C,GAAS,SAChB,OAAIA,EAAK,OAAS,KAAK,uBAAuB,iBAC1C6C,EAAiB,OAAO,KAAK,oBAAoB7C,EAAK,MAAM,MAAM,KAAK,uBAAuB,eAAe,EAAE,EACxG6C,IAcXA,EAAiB,cAAgB,KAAK,qBAAqB7C,CAAI,EAC/D6C,EAAiB,QAAU,GACpBA,GAIX,GAAI,OAAO7C,GAAS,SAAU,CAE1B,IAAM8C,EAAO,IAAI,QACXC,EAAgB,CAACC,EAAKC,EAAO,KAAO,CACtC,GAAI,EAAAD,IAAQ,MAAQ,OAAOA,GAAQ,UAEnC,IAAIF,EAAK,IAAIE,CAAG,EAAG,CACfH,EAAiB,OAAO,KAAK,wCAAwCI,CAAI,EAAE,EAC3E,MACJ,CAKA,GAHAH,EAAK,IAAIE,CAAG,EAGRC,EAAK,MAAM,GAAG,EAAE,OAAS,KAAK,uBAAuB,eAAgB,CACrEJ,EAAiB,OAAO,KAAK,oBAAoBI,EAAK,MAAM,GAAG,EAAE,MAAM,MAAM,KAAK,uBAAuB,cAAc,EAAE,EACzH,MACJ,CAGA,GAAI,MAAM,QAAQD,CAAG,GAAKA,EAAI,OAAS,KAAK,uBAAuB,eAAgB,CAC/EH,EAAiB,OAAO,KAAK,mBAAmBG,EAAI,MAAM,MAAM,KAAK,uBAAuB,cAAc,EAAE,EAC5G,MACJ,CAGA,QAAWE,KAAOF,EACVA,EAAI,eAAeE,CAAG,GACtBH,EAAcC,EAAIE,CAAG,EAAGD,EAAO,GAAGA,CAAI,IAAIC,CAAG,GAAKA,CAAG,EAGjE,EAIA,GAFAH,EAAc/C,CAAI,EAEd6C,EAAiB,OAAO,OAAS,EACjC,OAAOA,EAIX,IAAMM,EAAa,KAAK,qBAAqBnD,CAAI,EACjD,OAAImD,EAAa,KAAK,uBAAuB,gBACzCN,EAAiB,OAAO,KAAK,qBAAqBM,CAAU,YAAY,KAAK,uBAAuB,cAAc,QAAQ,EACnHN,IAIXA,EAAiB,cAAgB,KAAK,qBAAqB7C,CAAI,EAC/D6C,EAAiB,QAAU,GACpBA,EACX,CAGA,OAAI7C,aAAgB,YACZA,EAAK,WAAa,KAAK,uBAAuB,gBAC9C6C,EAAiB,OAAO,KAAK,0BAA0B7C,EAAK,UAAU,YAAY,KAAK,uBAAuB,cAAc,QAAQ,EAC7H6C,IAGXA,EAAiB,cAAgB7C,EACjC6C,EAAiB,QAAU,GACpBA,IAIXA,EAAiB,OAAO,KAAK,0BAA0B,OAAO7C,CAAI,EAAE,EAC7D6C,EAEX,OAAS9E,EAAO,CACZ,OAAA8E,EAAiB,OAAO,KAAK,qBAAqB9E,EAAM,OAAO,EAAE,EACjE,KAAK,WAAW,QAAS,iCAA6B,CAClD,QAASQ,EACT,UAAWR,GAAO,aAAa,MAAQ,UACvC,QAASA,GAAO,SAAW,eAC/B,CAAC,EACM8E,CACX,CACJ,CAOA,qBAAqBG,EAAK,CACtB,GAAI,CACA,IAAMI,EAAa,KAAK,UAAUJ,CAAG,EACrC,OAAO,IAAI,YAAY,EAAE,OAAOI,CAAU,EAAE,MAChD,MAAgB,CAEZ,MAAO,MAAO,IAClB,CACJ,CAOA,qBAAqBC,EAAK,CACtB,OAAI,OAAOA,GAAQ,WAMnBA,EAAMA,EAAI,QAAQ,yDAA0D,EAAE,EAK9EA,EAAMA,EAAI,QAAQ,SAAU;AAAA,CAAI,EAGhCA,EAAMA,EAAI,QAAQ,UAAW;AAAA;AAAA,CAAM,EAGnCA,EAAMA,EAAI,KAAK,GAERA,CACX,CAOA,qBAAqBL,EAAK,CACtB,GAAIA,IAAQ,MAAQ,OAAOA,GAAQ,SAAU,OAAOA,EAEpD,GAAI,MAAM,QAAQA,CAAG,EACjB,OAAOA,EAAI,IAAIM,GAAQ,KAAK,qBAAqBA,CAAI,CAAC,EAG1D,IAAMC,EAAY,CAAC,EACnB,QAAWL,KAAOF,EACd,GAAIA,EAAI,eAAeE,CAAG,EAAG,CACzB,IAAMM,EAAQR,EAAIE,CAAG,EACjB,OAAOM,GAAU,SACjBD,EAAUL,CAAG,EAAI,KAAK,qBAAqBM,CAAK,EACzC,OAAOA,GAAU,SACxBD,EAAUL,CAAG,EAAI,KAAK,qBAAqBM,CAAK,EAEhDD,EAAUL,CAAG,EAAIM,CAEzB,CAGJ,OAAOD,CACX,CAOA,gBAAgBhF,EAAU,UAAW,CACjC,IAAMoE,EAAM,KAAK,IAAI,EAwBrB,OArBK,KAAK,eACN,KAAK,aAAe,CAChB,aAAc,EACd,UAAWA,EACX,WAAY,EACZ,eAAgBA,CACpB,GAIAA,EAAM,KAAK,aAAa,UAAY,MACpC,KAAK,aAAa,aAAe,EACjC,KAAK,aAAa,UAAYA,GAG9BA,EAAM,KAAK,aAAa,eAAiB,MACzC,KAAK,aAAa,WAAa,EAC/B,KAAK,aAAa,eAAiBA,GAInC,KAAK,aAAa,YAAc,KAAK,uBAAuB,oBAC5D,KAAK,WAAW,OAAQ,yCAAgC,CAAE,QAAApE,CAAQ,CAAC,EAC5D,IAIP,KAAK,aAAa,cAAgB,KAAK,uBAAuB,4BAC9D,KAAK,WAAW,OAAQ,mCAA0B,CAAE,QAAAA,CAAQ,CAAC,EACtD,KAIX,KAAK,aAAa,eAClB,KAAK,aAAa,aAEX,GACX,CAMA,uBAAuBA,EAAU,mBAAoB,CACjD,IAAMoE,EAAM,KAAK,IAAI,EAqBrB,OAnBK,KAAK,sBACN,KAAK,oBAAsB,CACvB,aAAc,EACd,UAAWA,EACX,WAAY,EACZ,eAAgBA,CACpB,GAGAA,EAAM,KAAK,oBAAoB,UAAY,MAC3C,KAAK,oBAAoB,aAAe,EACxC,KAAK,oBAAoB,UAAYA,GAGrCA,EAAM,KAAK,oBAAoB,eAAiB,MAChD,KAAK,oBAAoB,WAAa,EACtC,KAAK,oBAAoB,eAAiBA,GAG1C,KAAK,oBAAoB,YAAc,KAAK,uBAAuB,oBACnE,KAAK,WAAW,OAAQ,sEAA6D,CAAE,QAAApE,CAAQ,CAAC,EACzF,IAGP,KAAK,oBAAoB,cAAgB,KAAK,uBAAuB,4BACrE,KAAK,WAAW,OAAQ,qEAA4D,CAAE,QAAAA,CAAQ,CAAC,EACxF,KAGX,KAAK,oBAAoB,eACzB,KAAK,oBAAoB,aAClB,GACX,CASA,6BAA8B,CAE1B,KAAK,kBAAoB,IAAIkF,GAG7B,KAAK,kBAAoB,IAAIC,GAAiB,KAAK,iBAAiB,EAGpE,KAAK,iBAAmB,CACpB,UAAW,EACX,WAAY,EACZ,WAAY,KACZ,aAAc,IAClB,EAEA,KAAK,WAAW,OAAQ,mDAA4C,CACxE,CAKA,6BAA6BC,EAAU,CAC/B,KAAK,mBACL,KAAK,kBAAkB,4BAA4BA,CAAQ,CAEnE,CAKA,mCAAmCA,EAAU,CACrC,KAAK,mBACL,KAAK,kBAAkB,0BAA0BA,CAAQ,CAEjE,CAKA,eAAgB,CACR,KAAK,mBACL,KAAK,kBAAkB,KAAK,CAEpC,CAKA,qBAAsB,CAClB,OAAO,KAAK,kBAAoB,KAAK,kBAAkB,WAAW,EAAI,EAC1E,CAKA,2BAA4B,CACxB,OAAO,KAAK,kBAAoB,KAAK,kBAAkB,iBAAiB,EAAI,IAChF,CAGA,MAAM,0BAA2B,CAC7B,GAAI,CAEA,GAAI,KAAK,mBACL,MAAO,GAGX,GAAI,CAAC,KAAK,aAAe,KAAK,YAAY,aAAe,OACrD,MAAM,IAAI,MAAM,uBAAuB,EAE3C,GAAI,CAAC,KAAK,WACN,MAAM,IAAI,MAAM,yBAAyB,EAG7C,KAAK,uBAAuB,EAG5B,IAAIC,EAAW,EACTC,EAAc,GACpB,KAAO,CAAC,KAAK,oBAAsBD,EAAWC,GAC1C,MAAM,IAAI,QAAQ,GAAK,WAAW,EAAG,GAAG,CAAC,EACzCD,IAGJ,GAAI,CAAC,KAAK,mBACN,MAAM,IAAI,MAAM,6CAA6C,EAGjE,MAAO,EACX,OAAS,EAAG,CACR,YAAK,WAAW,QAAS,yCAAqC,CAC1D,UAAW,GAAG,aAAa,MAAQ,UACnC,WAAY,CAAC,CAAC,GAAG,OACrB,CAAC,EACM,EACX,CACJ,CAEA,cAAcE,EAAO,CACjB,OAAO,KAAK,kBAAkB,YAAYA,CAAK,CACnD,CAEA,MAAM,cAAcA,EAAOZ,EAAK,CAC5B,GAAI,EAAEA,aAAe,WACjB,YAAK,WAAW,QAAS,uCAAkC,EACpD,GAGX,IAAMa,EAAU,MAAM,KAAK,kBAAkB,SAASD,EAAOZ,EAAK,CAC9D,QAAS,KAAK,kBACd,KAAMA,EAAI,UAAU,IACxB,CAAC,EAED,OAAIa,GACA,KAAK,WAAW,OAAQ,iBAAUD,CAAK,kCAAkC,EAGtEC,CACX,CAOA,kBAAkBb,EAAK,CACnB,OAAOA,aAAe,WAClBA,EAAI,WACJA,EAAI,QACJA,EAAI,OAAO,OAAS,CAC5B,CAEA,iBAAkB,CACd,KAAK,kBAAkB,cAAc,EAGjC,KAAK,mBACL,KAAK,kBAAkB,KAAK,EAGhC,KAAK,WAAW,OAAQ,iEAA0D,CACtF,CAMA,qBAAsB,CAClB,OAAO,KAAK,6BAA6BQ,EAC7C,CAMA,qBAAsB,CAClB,IAAM1B,EAAQ,KAAK,kBAAkB,gBAAgB,EACrD,MAAO,CACH,eAAgBA,EAAM,UACtB,gBAAiBA,EAAM,UACvB,cAAeA,EAAM,SAAS,KAAKgC,GAAKA,EAAE,YAAY,EACtD,gBAAiB,CAAC,CAAC,KAAK,iBAAiB,aACzC,YAAa,mBACb,UAAW,KAAK,IAAI,CACxB,CACJ,CAKA,aAAc,CACV,IAAMC,EAAU,MAAM,KAAK,KAAK,kBAAkB,KAAK,CAAC,EACxD,KAAK,kBAAkB,MAAM,EAC7B,KAAK,iBAAiB,aAAe,KAAK,IAAI,EAC9C,KAAK,iBAAiB,WAAa,EACnC,KAAK,WAAW,OAAQ,qCAA8BA,EAAQ,MAAM,eAAe,CACvF,CAKA,mBAAoB,CAChB,KAAK,gBAAgB,EACrB,KAAK,WAAW,QAAS,4DAAqD,CAClF,CAMA,6BAA8B,CAE1B,KAAK,WAAW,OAAQ,8DAAuD,CACnF,CAWA,yBAAyBf,EAAK,CAE1B,IAAIgB,EAAU,EAGd,GAAI,CACA,IAAMC,EAAcjB,aAAe,UACnCgB,GAAWC,EAAc,EAAI,CACjC,MAAQ,CACJD,GAAW,CACf,CAGA,GAAI,CACA,IAAME,EAAe,CAAC,EAAElB,GAAOA,EAAI,WACnCgB,GAAWE,EAAe,EAAI,CAClC,MAAQ,CACJF,GAAW,CACf,CAGA,GAAI,CACA,IAAMG,EAAU,CAAC,EAAEnB,GAAOA,EAAI,MAC9BgB,GAAWG,EAAU,EAAI,CAC7B,MAAQ,CACJH,GAAW,CACf,CAGA,GAAI,CACA,IAAMI,EAAiBpB,GAAOA,EAAI,cAAgB,OAClDgB,GAAWI,EAAiB,EAAI,CACpC,MAAQ,CACJJ,GAAW,CACf,CAGA,OAAOA,IAAY,CACvB,CAOA,6BAA6BK,EAAS,CAClC,GAAI,CAACA,GAAW,OAAOA,GAAY,SAAU,MAAO,GAEpD,IAAMC,EAAkB,KAAK,yBAAyBD,EAAQ,UAAU,EAClEE,EAAiB,KAAK,yBAAyBF,EAAQ,SAAS,EAGtE,OAAOC,GAAmBC,CAC9B,CAKA,0BAA2B,CAEvB,KAAK,WAAa,CACd,MAAO,EACP,KAAM,EACN,KAAM,EACN,MAAO,EACP,MAAO,CACX,EAGA,KAAK,iBAAmB,KAAK,kBACzB,KAAK,WAAW,MAChB,KAAK,WAAW,KAGpB,KAAK,WAAa,IAAI,IACtB,KAAK,aAAe,KAAK,kBAAoB,EAAI,GAGjD,KAAK,gBAAkB,CACnB,cAAe,KAAK,kBAAoB,IAAM,IAC9C,gBAAiB,IACjB,aAAc,IACd,uBAAwB,IACxB,iBAAkB,IAClB,uBAAwB,IACxB,cAAe,IACf,gBAAiB,GACrB,EAGA,KAAK,qBAAuB,CACxB,WAAY,KAAK,gBAAgB,cAAgB,GACjD,aAAc,KAAK,gBAAgB,gBAAkB,GACrD,UAAW,KAAK,gBAAgB,aAAe,GAC/C,oBAAqB,KAAK,gBAAgB,uBAAyB,EACvE,EAGA,KAAK,uBAAyB,CAC1B,gBAAiB,IACjB,eAAgB,GAChB,eAAgB,IAChB,eAAgB,KAAO,KACvB,sBAAuB,GACvB,2BAA4B,GAC5B,mBAAoB,EACxB,EAUA,KAAK,mBAAqB,IAAI,IAAI,CAE9B,gBAAiB,SAAU,cAAe,aAAc,YACxD,cAAe,eAAgB,gBAAiB,sBAGhD,mBAAoB,cAAe,iBAAkB,YACrD,gBAAiB,YAAa,YAAa,eAG3C,WAAY,QAAS,SAAU,aAAc,YAC7C,SAAU,YAAa,YAAa,aAGpC,OAAQ,SAAU,QAAS,KAAM,SAAU,OAC3C,UAAW,SAAU,OAAQ,cAG7B,MAAO,SAAU,eAAgB,cAGjC,WAAY,gBAAiB,cAAe,UAChD,CAAC,EAGD,KAAK,qBAAuB,IAAI,IAAI,CAEhC,YAAa,OAAQ,SAAU,QAAS,QACxC,cAAe,aAAc,cAAe,UAG5C,QAAS,QAAS,SAAU,WAAY,UAAW,UAGnD,aAAc,kBAAmB,qBAGjC,sBAAuB,gBAAiB,QAGxC,YAAa,YAAa,QAAS,SACvC,CAAC,EAGD,KAAK,iCAAiC,EAEtC,KAAK,WAAW,OAAQ,8DAAuD,KAAK,iBAAiB,GAAG,CAC5G,CAKA,kCAAmC,CAE/B,KAAK,uBAAyB,EAC9B,KAAK,0BAA4B,CACrC,CAKA,6BAA8B,CAC1B,IAAIlC,EAAa,EAGjB,OAAW,CAACW,EAAKwB,CAAK,IAAK,KAAK,WAAW,QAAQ,EAC3CA,EAAQ,KAAK,aAAe,IAC5BnC,IACA,KAAK,kBAAkB,QAAQ,yDAAkDW,CAAG,EAAE,GAK9F,IAAMyB,EAAa,MAAM,KAAK,KAAK,WAAW,KAAK,CAAC,EACpD,QAAWC,KAAUD,EACb,KAAK,0BAA0BC,CAAM,IACrCrC,IACA,KAAK,kBAAkB,QAAQ,yDAAkDqC,CAAM,EAAE,GAKjG,KAAK,wBAA0BrC,EAC3B,KAAK,wBAA0B,KAAK,4BACpC,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,wEAAiE,EAExG,CAEA,kBAAkBsC,EAAM,CACpB,GAAI,CAEA,GAAI,CAAC,MAAM,QAAQA,CAAI,GAAKA,EAAK,SAAW,EACxC,OAIJ,IAAM9C,EAAU8C,EAAK,CAAC,EAChBC,EAAWD,EAAK,MAAM,CAAC,EAG7B,GAAIC,EAAS,SAAW,EAAG,CACvB,KAAK,WAAW,OAAQ,OAAO/C,GAAW,EAAE,CAAC,EAC7C,MACJ,CAEA,GAAI+C,EAAS,SAAW,EAAG,CACvB,KAAK,WAAW,OAAQ,OAAO/C,GAAW,EAAE,EAAG+C,EAAS,CAAC,CAAC,EAC1D,MACJ,CAGA,KAAK,WAAW,OAAQ,OAAO/C,GAAW,EAAE,EAAG,CAC3C,eAAgB+C,EAChB,SAAUA,EAAS,MACvB,CAAC,CACL,MAAgB,CAEZ,GAAI,CACI,KAAK,kBAAkB,KACvB,KAAK,iBAAiB,IAAI,GAAGD,CAAI,CAEzC,MAAwB,CAExB,CACJ,CACJ,CAKA,iBAAkB,CAEd,KAAK,OAAS,CACV,IAAK,CAAC9C,EAAS/B,IAAS,KAAK,WAAW,OAAQ+B,EAAS/B,CAAI,EAC7D,KAAM,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,OAAQ+B,EAAS/B,CAAI,EAC9D,KAAM,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,OAAQ+B,EAAS/B,CAAI,EAC9D,MAAO,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,QAAS+B,EAAS/B,CAAI,EAChE,MAAO,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,QAAS+B,EAAS/B,CAAI,CACpE,EAGI1C,EAA4B,WAC5B,KAAK,WAAW,OAAQ,iDAA0C,EAElE,KAAK,WAAW,OAAQ,gDAAyC,CAEzE,CAIA,yBAA0B,CAElB,KAAK,oBACL,KAAK,OAAS,CACV,IAAK,IAAM,CAAC,EACZ,KAAM,IAAM,CAAC,EACb,KAAM,CAACyE,EAAS/B,IAAS,KAAK,WAAW,OAAQ+B,EAAS/B,CAAI,EAC9D,MAAO,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,QAAS+B,EAAS/B,CAAI,EAChE,MAAO,IAAM,CAAC,CAClB,EAEA,KAAK,WAAW,OAAQ,mCAAmC,EAEnE,CAOA,WAAW+E,EAAOhD,EAAS/B,EAAO,KAAM,CAEpC,GAAIA,GAAQ,CAAC,KAAK,iBAAiB+B,EAAS/B,CAAI,EAAG,CAE/C,KAAK,kBAAkB,QAAQ,yDAAyD,EACxF,MACJ,CAGA,GAAI,KAAK,WAAW+E,CAAK,EAAI,KAAK,iBAC9B,OAIJ,IAAMH,EAAS,GAAGG,CAAK,IAAIhD,EAAQ,UAAU,EAAG,EAAE,CAAC,GAC7CiD,EAAe,KAAK,WAAW,IAAIJ,CAAM,GAAK,EAEpD,GAAII,GAAgB,KAAK,aACrB,OAGJ,KAAK,WAAW,IAAIJ,EAAQI,EAAe,CAAC,EAG5C,IAAIC,EAAgB,KACpB,GAAIjF,IAEAiF,EAAgB,KAAK,iBAAiBjF,CAAI,EAGtC,KAAK,0BAA0B,KAAK,UAAUiF,CAAa,CAAC,GAAG,CAC/D,KAAK,kBAAkB,QAAQ,yEAAyE,EACxG,MACJ,CAIJ,GAAI,KAAK,kBAAmB,CACxB,GAAIF,IAAU,QAAS,CAEnB,IAAMG,EAAc,KAAK,gBAAgBnD,CAAO,EAChD,KAAK,kBAAkB,QAAQmD,CAAW,CAC9C,CAEA,MACJ,CAGA,IAAMC,EAAY,KAAK,mBAAmBJ,CAAK,GAAK,KAAK,kBAAkB,IACvEE,EACAE,EAAUpD,EAASkD,CAAa,EAEhCE,EAAUpD,CAAO,CAEzB,CAIA,iBAAiB/B,EAAM,CAEnB,GAAI,OAAOA,GAAS,SAChB,OAAO,KAAK,gBAAgBA,CAAI,EAGpC,GAAI,CAACA,GAAQ,OAAOA,GAAS,SACzB,OAAOA,EAGX,IAAMuD,EAAY,CAAC,EAEnB,OAAW,CAACL,EAAKM,CAAK,IAAK,OAAO,QAAQxD,CAAI,EAAG,CAC7C,IAAMoF,EAAWlC,EAAI,YAAY,EAG3BmC,EAAoB,CACtB,MAAO,SAAU,QAAS,WAAY,aAAc,OACpD,cAAe,OAAQ,YAAa,UAAW,aAC/C,MAAO,WAAY,UAAW,MAAO,SAAU,OAC/C,SAAU,QAAS,KAAM,SAAU,OAAQ,SAC/C,EAKA,GAHsB,KAAK,mBAAmB,IAAInC,CAAG,GACjDmC,EAAkB,KAAKC,GAAWF,EAAS,SAASE,CAAO,CAAC,EAE7C,CACf/B,EAAUL,CAAG,EAAI,2BACjB,QACJ,CAGA,GAAI,KAAK,qBAAqB,IAAIA,CAAG,EAAG,CAEhC,OAAOM,GAAU,SACjBD,EAAUL,CAAG,EAAI,KAAK,gBAAgBM,CAAK,EAE3CD,EAAUL,CAAG,EAAIM,EAErB,QACJ,CAGA,GAAI,OAAOA,GAAU,WAAa,OAAOA,GAAU,SAC/CD,EAAUL,CAAG,EAAIM,UACV,OAAOA,GAAU,SACxBD,EAAUL,CAAG,EAAI,KAAK,gBAAgBM,CAAK,UACpCA,aAAiB,aAAeA,aAAiB,WAExDD,EAAUL,CAAG,EAAI,IAAIM,EAAM,YAAY,IAAI,8BACpCA,GAAS,OAAOA,GAAU,SAEjC,GAAI,CACAD,EAAUL,CAAG,EAAI,KAAK,iBAAiBM,CAAK,CAChD,MAAgB,CACZD,EAAUL,CAAG,EAAI,iCACrB,MAEAK,EAAUL,CAAG,EAAI,IAAI,OAAOM,CAAK,GAEzC,CAGA,IAAM+B,EAAkB,KAAK,UAAUhC,CAAS,EAChD,OAAI,KAAK,0BAA0BgC,CAAe,EACvC,CAAE,MAAO,gDAAiD,EAG9DhC,CACX,CAIA,gBAAgBF,EAAK,CACjB,GAAI,OAAOA,GAAQ,UAAYA,EAAI,SAAW,EAC1C,OAAOA,EAIX,IAAMmC,EAAoB,CAEtB,iBACA,gBAGA,2BACA,qBACA,sBAGA,4BAGA,sBACA,gBAGA,sBACA,wBAGA,uBACA,sBAGA,6CACA,2CAGA,mDAGA,kFAGA,gEAGA,6CACA,wBAGA,iDAGA,uEACA,qEAGA,4DACJ,EAGA,QAAWF,KAAWE,EAClB,GAAIF,EAAQ,KAAKjC,CAAG,EAEhB,MAAO,4BAKf,OAAI,KAAK,gBAAgBA,CAAG,EACjB,+BAIP,KAAK,2BAA2BA,CAAG,EAC5B,6BAIPA,EAAI,OAAS,GACNA,EAAI,UAAU,EAAG,EAAE,EAAI,iBAG3BA,CACX,CAIA,0BAA0BA,EAAK,CAC3B,OAAI,OAAOA,GAAQ,SAAiB,GAGV,CACtB,iBACA,2BACA,4BACA,sBACA,uBACA,6CACA,mDACA,iFACJ,EAEyB,KAAKiC,GAAWA,EAAQ,KAAKjC,CAAG,CAAC,GACnD,KAAK,gBAAgBA,CAAG,GACxB,KAAK,2BAA2BA,CAAG,CAC9C,CAKA,gBAAgBA,EAAK,CACjB,GAAIA,EAAI,OAAS,EAAG,MAAO,GAG3B,IAAMoC,EAAY,CAAC,EACnB,QAAWC,KAAQrC,EACfoC,EAAUC,CAAI,GAAKD,EAAUC,CAAI,GAAK,GAAK,EAI/C,IAAMC,EAAStC,EAAI,OACfuC,EAAU,EAEd,QAAWlB,KAAS,OAAO,OAAOe,CAAS,EAAG,CAC1C,IAAMI,EAAcnB,EAAQiB,EAC5BC,GAAWC,EAAc,KAAK,KAAKA,CAAW,CAClD,CAGA,OAAOD,EAAU,GACrB,CAKA,2BAA2BvC,EAAK,CAC5B,OAAIA,EAAI,OAAS,EAAU,IAGVA,EAAI,MAAM,YAAY,GAAK,CAAC,GAChC,QAAUA,EAAI,OAAS,KAMhBA,EAAI,MAAM,iBAAiB,GAAK,CAAC,GACrC,QAAUA,EAAI,OAAS,IAMnB,IAAI,IAAIA,CAAG,EAAE,KACIA,EAAI,OAGpB,IAAOA,EAAI,OAAS,EAK7C,CAUA,uBAAwB,CAEpB,OAEK,OAAO,QAAY,KAAe,IAElC,CAAC,KAAK,YAEN,OAAO,SAAS,UAAY,CAAC,OAAO,SAAS,SAAS,SAAS,WAAW,GAC1E,CAAC,OAAO,SAAS,SAAS,SAAS,WAAW,GAC9C,CAAC,OAAO,SAAS,SAAS,SAAS,QAAQ,GAE3C,OAAO,OAAO,iBAAqB,KAAe,CAAC,OAAO,SAAS,OAAO,SAAS,OAAO,CAEnG,CAQA,uBAAwB,CAEpB,KAAK,WAAW,OAAQ,kCAAkC,EAG1D,IAAMyC,EAAY,CAAC,EAGf,OAAO,KAAK,aAAgB,aAC5BA,EAAU,YAAc,KAAK,YAAY,KAAK,IAAI,GAItDA,EAAU,oBAAsB,KAAO,CACnC,YAAa,KAAK,YAAc,KAAK,YAAY,EAAI,GACrD,WAAY,KAAK,YAAc,GAC/B,gBAAiB,KAAK,gBAAgB,iBAAmB,cAC7D,GAGAA,EAAU,kBAAoB,KAAO,CACjC,cAAe,UACf,MAAO,cACP,oBAAqB,OAAO,OAAO,KAAK,kBAAoB,CAAC,CAAC,EAAE,OAAO,OAAO,EAAE,MACpF,GAEI,OAAO,KAAK,UAAa,aACzBA,EAAU,SAAW,KAAK,SAAS,KAAK,IAAI,GAIhDA,EAAU,sBAAwB,KAAO,CACrC,YAAa,CAAC,CAAC,KAAK,mBACpB,OAAQ,QACR,gBAAiB,EACjB,mBAAoB,CACxB,GAEI,OAAO,KAAK,YAAe,aAC3BA,EAAU,WAAa,KAAK,WAAW,KAAK,IAAI,GAIpD,IAAMC,EAAgB,CAClB,GAAGD,EACH,iBAAkB,KAAO,CACrB,YAAa,KAAK,QAAQ,YAAY,QACtC,cAAe,KAAK,QAAQ,cAAc,QAC1C,cAAe,KAAK,QAAQ,cAAc,QAC1C,mBAAoB,KAAK,QAAQ,mBAAmB,OACxD,GACA,UAAW,CAAC,CAChB,EAGI,OAAO,KAAK,4BAA+B,aAC3CC,EAAc,UAAU,iBAAmB,KAAK,2BAA2B,KAAK,IAAI,GAGpF,OAAO,KAAK,8BAAiC,aAC7CA,EAAc,UAAU,mBAAqB,KAAK,6BAA6B,KAAK,IAAI,GAGxF,OAAO,KAAK,0BAA6B,aACzCA,EAAc,UAAU,eAAiB,KAAK,yBAAyB,KAAK,IAAI,GAGhF,OAAO,KAAK,qBAAwB,aACpCA,EAAc,UAAU,aAAe,KAAK,oBAAoB,KAAK,IAAI,GAI7EA,EAAc,4BAA8B,KAAO,CAC/C,YAAa,CAAC,CAAC,KAAK,mBACpB,OAAQ,QACR,gBAAiB,EACjB,mBAAoB,CACxB,GAGA,KAAK,WAAW,OAAQ,wBAAyB,CAC7C,YAAa,CAAC,CAACD,EAAU,YACzB,oBAAqB,CAAC,CAACA,EAAU,oBACjC,kBAAmB,CAAC,CAACA,EAAU,kBAC/B,SAAU,CAAC,CAACA,EAAU,SACtB,sBAAuB,CAAC,CAACA,EAAU,sBACnC,WAAY,CAAC,CAACA,EAAU,WACxB,iBAAkB,CAAC,CAACC,EAAc,iBAClC,iBAAkB,OAAO,KAAKA,EAAc,SAAS,EAAE,MAC3D,CAAC,EAGD,OAAO,OAAOA,CAAa,EAC3B,OAAO,OAAOA,EAAc,SAAS,EAGrC,KAAK,0BAA0BA,CAAa,EAG5C,KAAK,8BAA8B,EAGnC,KAAK,WAAW,OAAQ,gDAAgD,CAC5E,CAIA,0BAA0BA,EAAe,CAErC,KAAK,WAAW,OAAQ,+BAA+B,EAGlD,OAAO,cAGR,KAAK,WAAW,OAAQ,wDAA8C,EAFtE,KAAK,WAAWA,CAAa,CAIrC,CAKA,WAAWC,EAAW,CAElB,KAAK,WAAW,OAAQ,uCAAuC,EAG3D,CAAC,KAAK,mBAAqB,CAAC,KAAK,kBAAkB,gBACnD,KAAK,WAAW,QAAS,uEAAkE,EAE3F,OAAO,eAAe,OAAQ,gBAAiB,CAC3C,MAAOA,EACP,SAAU,GACV,aAAc,GACd,WAAY,EAChB,CAAC,GAGD,KAAK,kBAAkB,eAAe,OAAQ,gBAAiB,CAC3D,MAAOA,EACP,SAAU,GACV,aAAc,GACd,WAAY,EAChB,CAAC,EAGL,KAAK,WAAW,OAAQ,uDAAgD,CAC5E,CAKA,+BAAgC,CAE5B,KAAK,kBAAkB,EAEvB,KAAK,WAAW,OAAQ,+CAAwC,CACpE,CAKA,wBAAyB,CAErB,KAAK,kBAAoB,CACrB,eAAgB,OAAO,eACvB,yBAA0B,OAAO,yBACjC,OAAQ,OAAO,OACf,WAAY,QAAQ,IACpB,aAAc,QAAQ,MACtB,YAAa,QAAQ,IACzB,EAEA,KAAK,WAAW,OAAQ,6CAAuC,CAC3D,eAAgB,CAAC,CAAC,KAAK,kBAAkB,eACzC,yBAA0B,CAAC,CAAC,KAAK,kBAAkB,yBACnD,OAAQ,CAAC,CAAC,KAAK,kBAAkB,MACrC,CAAC,CACL,CAKA,wBAAyB,CACrB,KAAK,WAAW,OAAQ,uDAAgD,CAC5E,CAKA,wBAAyB,CACrB,KAAK,WAAW,OAAQ,wEAAiE,CAC7F,CAIA,qBAAsB,CAClB,GAAI,CACA,GAAI,CAAC,OAAO,cACR,YAAK,WAAW,QAAS,qDAAgD,EAClE,GAIX,IAAMC,EADkB,CAAC,cAAe,sBAAuB,YAAY,EACpC,OAAOC,GAC1C,OAAO,OAAO,cAAcA,CAAM,GAAM,UAC5C,EAEA,OAAID,EAAe,OAAS,GACxB,KAAK,WAAW,QAAS,kEAA8D,CAAE,UAAWA,GAAgB,aAAa,MAAQ,SAAU,CAAC,EAC7I,IAGJ,EACX,OAASlI,EAAO,CACZ,YAAK,WAAW,QAAS,qDAAiD,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACvH,EACX,CACJ,CAQA,sBAAuB,CAEnB,YAAK,WAAW,OAAQ,6DAAsD,EACvE,CAAC,CACZ,CAKA,qBAAsB,CAElB,KAAK,WAAW,OAAQ,+EAAwE,CACpG,CAKA,mBAAoB,CAChB,GAAI,CAAC,OAAO,cAAe,CACvB,KAAK,WAAW,OAAQ,2DAAiD,EACzE,MACJ,CAEA,GAAI,CAEI,KAAK,0BAA0B,GAC/B,KAAK,WAAW,OAAQ,0CAAmC,CAGnE,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,gDAA4C,CACjE,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,CACJ,CAKA,2BAA4B,CACxB,GAAI,CAEA,GAAI,CAAC,KAAK,mBAAqB,CAAC,KAAK,kBAAkB,yBAA0B,CAE7E,IAAMoI,EAAa,OAAO,yBAAyB,OAAQ,eAAe,EAE1E,GAAI,CAACA,GAAcA,EAAW,aAC1B,MAAM,IAAI,MAAM,2CAA2C,CAEnE,KAAO,CACH,IAAMA,EAAa,KAAK,kBAAkB,yBAAyB,OAAQ,eAAe,EAE1F,GAAI,CAACA,GAAcA,EAAW,aAC1B,MAAM,IAAI,MAAM,2CAA2C,CAEnE,CAEA,YAAK,WAAW,OAAQ,gCAA2B,EAC5C,EAEX,OAASpI,EAAO,CACZ,YAAK,WAAW,QAAS,yCAAqC,CAC1D,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EACM,EACX,CACJ,CAKA,kBAAkBiC,EAAMzB,EAAU,UAAW,CACzC,GAAKyB,EAEL,GAAI,CAEIA,aAAgB,YAChB,KAAK,uBAAuBA,EAAMzB,CAAO,EAClCyB,aAAgB,WACvB,KAAK,sBAAsBA,EAAMzB,CAAO,EACjC,MAAM,QAAQyB,CAAI,EACzB,KAAK,iBAAiBA,EAAMzB,CAAO,EAC5B,OAAOyB,GAAS,SACvB,KAAK,kBAAkBA,EAAMzB,CAAO,EAC7ByB,aAAgB,UACvB,KAAK,qBAAqBA,EAAMzB,CAAO,EAChC,OAAOyB,GAAS,UACvB,KAAK,kBAAkBA,EAAMzB,CAAO,EAGxC,KAAK,qBAAqB,YAAY,eAE1C,OAASR,EAAO,CACZ,KAAK,qBAAqB,YAAY,iBACtC,KAAK,WAAW,QAAS,mCAA+B,CACpD,QAASQ,EACT,UAAWR,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,CACJ,CAKA,uBAAuBqI,EAAQ7H,EAAS,CACpC,GAAI,GAAC6H,GAAUA,EAAO,aAAe,GAErC,GAAI,CACA,IAAMC,EAAO,IAAI,WAAWD,CAAM,EAGlC,OAAO,gBAAgBC,CAAI,EAG3BA,EAAK,KAAK,CAAC,EAGXA,EAAK,KAAK,GAAG,EAGbA,EAAK,KAAK,CAAC,EAEX,KAAK,WAAW,QAAS,uCAAiC,CACtD,QAAS9H,EACT,KAAM6H,EAAO,UACjB,CAAC,CAEL,OAASrI,EAAO,CACZ,KAAK,WAAW,QAAS,oCAAgC,CACrD,QAASQ,EACT,UAAWR,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAKA,sBAAsBuI,EAAO/H,EAAS,CAClC,GAAI,GAAC+H,GAASA,EAAM,SAAW,GAE/B,GAAI,CAEA,OAAO,gBAAgBA,CAAK,EAG5BA,EAAM,KAAK,CAAC,EAGZA,EAAM,KAAK,GAAG,EAGdA,EAAM,KAAK,CAAC,EAEZ,KAAK,WAAW,QAAS,sCAAgC,CACrD,QAAS/H,EACT,KAAM+H,EAAM,MAChB,CAAC,CAEL,OAASvI,EAAO,CACZ,KAAK,WAAW,QAAS,mCAA+B,CACpD,QAASQ,EACT,UAAWR,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAKA,iBAAiBuI,EAAO/H,EAAS,CAC7B,GAAI,GAAC,MAAM,QAAQ+H,CAAK,GAAKA,EAAM,SAAW,GAE9C,GAAI,CAEAA,EAAM,QAAQ,CAAChD,EAAMiD,IAAU,CACvBjD,GAAS,MACT,KAAK,kBAAkBA,EAAM,GAAG/E,CAAO,IAAIgI,CAAK,GAAG,CAE3D,CAAC,EAGDD,EAAM,KAAK,IAAI,EAEf,KAAK,WAAW,QAAS,iCAA2B,CAChD,QAAS/H,EACT,KAAM+H,EAAM,MAChB,CAAC,CAEL,OAASvI,EAAO,CACZ,KAAK,WAAW,QAAS,8BAA0B,CAC/C,QAASQ,EACT,UAAWR,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAmBA,kBAAkBsF,EAAK9E,EAAS,CAC5B,YAAK,WAAW,QAAS,gFAA4E,CACjG,QAASA,EACT,OAAQ8E,EAAMA,EAAI,OAAS,CAC/B,CAAC,EACM,EACX,CAmBA,qBAAqBH,EAAK3E,EAAS,CAC/B,MAAI,CAAC2E,GAAO,EAAEA,aAAe,aAE7B,KAAK,WAAW,QAAS,uFAAmF,CACxG,QAAS3E,EACT,KAAM2E,EAAI,KACV,YAAaA,EAAI,WACrB,CAAC,EAIGA,EAAI,aACJ,KAAK,WAAW,QAAS,8EAA0E,CAC/F,QAAS3E,CACb,CAAC,GAGE,EACX,CAKA,kBAAkByE,EAAKzE,EAAS,CAC5B,GAAI,GAACyE,GAAO,OAAOA,GAAQ,UAE3B,GAAI,CAEA,OAAW,CAACE,EAAKM,CAAK,IAAK,OAAO,QAAQR,CAAG,EACrCQ,GAAU,MACV,KAAK,kBAAkBA,EAAO,GAAGjF,CAAO,IAAI2E,CAAG,EAAE,EAGrDF,EAAIE,CAAG,EAAI,KAGf,KAAK,WAAW,QAAS,kCAA4B,CACjD,QAAS3E,EACT,WAAY,OAAO,KAAKyE,CAAG,EAAE,MACjC,CAAC,CAEL,OAASjF,EAAO,CACZ,KAAK,WAAW,QAAS,+BAA2B,CAChD,QAASQ,EACT,UAAWR,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAKA,sCAAuC,CACnC,GAAI,CAqEA,GAnEI,KAAK,cACL,KAAK,kBAAkB,KAAK,YAAa,aAAa,EACtD,KAAK,YAAc,MAGnB,KAAK,eACL,KAAK,kBAAkB,KAAK,aAAc,cAAc,EACxD,KAAK,aAAe,MAIpB,KAAK,gBACL,KAAK,kBAAkB,KAAK,cAAe,eAAe,EAC1D,KAAK,cAAgB,MAGrB,KAAK,SACL,KAAK,kBAAkB,KAAK,OAAQ,QAAQ,EAC5C,KAAK,OAAS,MAGd,KAAK,cACL,KAAK,kBAAkB,KAAK,YAAa,aAAa,EACtD,KAAK,YAAc,MAGnB,KAAK,sBACL,KAAK,kBAAkB,KAAK,oBAAqB,qBAAqB,EACtE,KAAK,oBAAsB,MAI3B,KAAK,cACL,KAAK,kBAAkB,KAAK,YAAa,aAAa,EACtD,KAAK,YAAc,MAGnB,KAAK,YACL,KAAK,kBAAkB,KAAK,UAAW,WAAW,EAClD,KAAK,UAAY,MAGjB,KAAK,mBACL,KAAK,kBAAkB,KAAK,iBAAkB,kBAAkB,EAChE,KAAK,iBAAmB,MAGxB,KAAK,gBACL,KAAK,kBAAkB,KAAK,cAAe,eAAe,EAC1D,KAAK,cAAgB,MAGrB,KAAK,iBACL,KAAK,kBAAkB,KAAK,eAAgB,gBAAgB,EAC5D,KAAK,eAAiB,MAGtB,KAAK,eACL,KAAK,kBAAkB,KAAK,aAAc,cAAc,EACxD,KAAK,aAAe,MAGxB,KAAK,0BAA0B,EAK3B,KAAK,SAAU,CACf,GAAI,CAAE,KAAK,SAAS,QAAQ,CAAG,MAAY,CAAC,CAC5C,KAAK,SAAW,IACpB,CACA,KAAK,qBAAuB,GAE5B,KAAK,WAAW,OAAQ,uDAAgD,CAE5E,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,mDAA+C,CACpE,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,CACJ,CAKA,MAAM,yBAA0B,CAC5B,GAAI,CAEA,MAAM,KAAK,uBAAuB,EAClC,KAAK,WAAW,QAAS,4CAAqC,CAClE,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,2CAAuC,CAC5D,UAAWA,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAKA,MAAM,+BAAgC,CAClC,GAAI,CACA,KAAK,qBAAqB,WAAa,GAGvC,IAAMyI,EAAyB,KAAK,cAAgB,WAAc,KAAK,aAAe,KAAK,aAAe,KAAK,YAAY,aAAe,OAMpIC,EAAoB,KAAK,qBACxB,KAAK,IAAI,GAAK,KAAK,qBAAqB,WAAa,GACtD,IACAC,EAAkB,CAAC,CAAC,KAAK,sBACxB,MAAM,QAAQ,KAAK,qBAAqB,WAAW,GACnD,KAAK,qBAAqB,YAAY,SAAW,IACjDD,EAAoBnJ,EAA4B,OAAO,cAC7BkJ,GAAyBE,EAEtD,KAAK,WAAW,QAAS,6DAAuD,CAC5E,OAAQF,EAAwB,4BAA8B,uBAClE,CAAC,EAED,KAAK,qCAAqC,EAI1C,KAAK,cAAgB,KAAK,aAAa,OAAS,KACzB,KAAK,aAAa,OAAO,EAAG,KAAK,aAAa,OAAS,EAAE,EACjE,QAAQ,CAACzE,EAASwE,IAAU,CACvC,KAAK,kBAAkBxE,EAAS,mBAAmBwE,CAAK,GAAG,CAC/D,CAAC,EAID,KAAK,qBAAuB,KAAK,oBAAoB,KAAO,KAC5D,KAAK,oBAAoB,MAAM,EAInC,MAAM,KAAK,wBAAwB,EAEnC,KAAK,WAAW,QAAS,6CAAsC,CAEnE,OAASxI,EAAO,CACZ,KAAK,WAAW,QAAS,8CAA0C,CAC/D,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,QAAE,CACE,KAAK,qBAAqB,WAAa,EAC3C,CACJ,CAKA,0BAA0B4I,EAAepI,EAAU,UAAW,CAC1D,GAAI,CAEA,IAAMqI,EAAW,KAAK,iBAAiBD,CAAa,EAG9CzB,EAAc,KAAK,qBAAqB0B,EAAUrI,CAAO,EAG/D,YAAK,WAAW,QAAS,0BAA2B,CAChD,SAAUqI,EACV,QAASrI,EACT,UAAWoI,GAAe,aAAa,MAAQ,UAC/C,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,KAAK,qBAAqBC,CAAQ,EAE3B1B,CAEX,OAASnH,EAAO,CAEZ,YAAK,WAAW,QAAS,wBAAyB,CAC9C,cAAe4I,GAAe,SAAW,UACzC,cAAe5I,EAAM,OACzB,CAAC,EACM,8BACX,CACJ,CAKA,iBAAiBA,EAAO,CACpB,GAAI,CAACA,GAAS,CAACA,EAAM,QACjB,OAAO,KAAK,oBAAoB,gBAAgB,QAGpD,IAAMgE,EAAUhE,EAAM,QAAQ,YAAY,EAG1C,OAAIgE,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,KAAK,GACtBA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,MAAM,GACvBA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,MAAM,GACvBA,EAAQ,SAAS,OAAO,EACjB,KAAK,oBAAoB,gBAAgB,cAIhDA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,YAAY,GAC7BA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,MAAM,EAChB,KAAK,oBAAoB,gBAAgB,QAIhDA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,YAAY,GAC7BA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,MAAM,EAChB,KAAK,oBAAoB,gBAAgB,WAIhDA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,UAAU,GAC3BA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,UAAU,EACpB,KAAK,oBAAoB,gBAAgB,OAG7C,KAAK,oBAAoB,gBAAgB,OACpD,CAKA,qBAAqB6E,EAAUrI,EAAS,CACpC,IAAMsI,EAAe,CACjB,CAAC,KAAK,oBAAoB,gBAAgB,aAAa,EAAG,CACtD,eAAkB,iCAClB,WAAc,+BACd,eAAkB,wBAClB,WAAc,0BACd,WAAc,8BACd,UAAa,wBACb,QAAW,2BACf,EACA,CAAC,KAAK,oBAAoB,gBAAgB,OAAO,EAAG,CAChD,WAAc,oBACd,QAAW,qBACX,KAAQ,yBACR,OAAU,uBACV,QAAW,0BACf,EACA,CAAC,KAAK,oBAAoB,gBAAgB,UAAU,EAAG,CACnD,OAAU,sBACV,KAAQ,oBACR,UAAa,yBACb,QAAW,mBACf,EACA,CAAC,KAAK,oBAAoB,gBAAgB,MAAM,EAAG,CAC/C,OAAU,wBACV,SAAY,8BACZ,SAAY,wBACZ,QAAW,yBACf,EACA,CAAC,KAAK,oBAAoB,gBAAgB,OAAO,EAAG,CAChD,QAAW,8BACf,CACJ,EAEMC,EAAmBD,EAAaD,CAAQ,GAAKC,EAAa,KAAK,oBAAoB,gBAAgB,OAAO,EAG5GE,EAAkB,UACtB,OAAIxI,EAAQ,SAAS,KAAK,GAAKA,EAAQ,SAAS,QAAQ,EACpDwI,EAAkBH,IAAa,KAAK,oBAAoB,gBAAgB,cAAgB,iBAAmB,UACpGrI,EAAQ,SAAS,YAAY,GAAKA,EAAQ,SAAS,MAAM,EAChEwI,EAAkBH,IAAa,KAAK,oBAAoB,gBAAgB,QAAU,aAAe,WAC1FrI,EAAQ,SAAS,YAAY,GAAKA,EAAQ,SAAS,QAAQ,KAClEwI,EAAkBH,IAAa,KAAK,oBAAoB,gBAAgB,WAAa,SAAW,WAG7FE,EAAiBC,CAAe,GAAKD,EAAiB,OACjE,CAKA,qBAAqBF,EAAU,CAC3B,IAAMjE,EAAM,KAAK,IAAI,EAGjBA,EAAM,KAAK,oBAAoB,cAAgB,KAC/C,KAAK,oBAAoB,YAAY,MAAM,EAI/C,IAAMqC,EAAe,KAAK,oBAAoB,YAAY,IAAI4B,CAAQ,GAAK,EAC3E,KAAK,oBAAoB,YAAY,IAAIA,EAAU5B,EAAe,CAAC,EACnE,KAAK,oBAAoB,cAAgBrC,EAGzC,IAAMqE,EAAc,MAAM,KAAK,KAAK,oBAAoB,YAAY,OAAO,CAAC,EAAE,OAAO,CAACC,EAAKvC,IAAUuC,EAAMvC,EAAO,CAAC,EAE/GsC,EAAc,KAAK,oBAAoB,iBACvC,KAAK,oBAAoB,cAAgB,GACzC,KAAK,WAAW,OAAQ,mEAA0D,CAC9E,YAAaA,EACb,UAAW,KAAK,oBAAoB,cACxC,CAAC,EAET,CAKA,kBAAkBL,EAAepI,EAAU,UAAW,CAClD,IAAM2I,EAAgB,KAAK,0BAA0BP,EAAepI,CAAO,EAC3E,MAAM,IAAI,MAAM2I,CAAa,CACjC,CAKA,wBAAyB,CACrB,MAAO,CACH,YAAa,OAAO,YAAY,KAAK,oBAAoB,WAAW,EACpE,cAAe,KAAK,oBAAoB,cACxC,cAAe,KAAK,oBAAoB,cACxC,eAAgB,KAAK,oBAAoB,cAC7C,CACJ,CAKA,2BAA4B,CACxB,KAAK,oBAAoB,YAAY,MAAM,EAC3C,KAAK,oBAAoB,cAAgB,GACzC,KAAK,oBAAoB,cAAgB,EAEzC,KAAK,WAAW,OAAQ,uCAAgC,CAC5D,CAKA,2BAA4B,CACxB,MAAO,CACH,cAAe,KAAK,qBAAqB,YAAY,cACrD,eAAgB,KAAK,qBAAqB,YAAY,eACtD,YAAa,KAAK,qBAAqB,YAAY,YACnD,WAAY,KAAK,qBAAqB,WACtC,YAAa,KAAK,qBAAqB,aAAa,MACxD,CACJ,CAKA,uBAAwB,CACpB,GAAI,CAEA,GAAI,CAAC,OAAO,cACR,YAAK,WAAW,QAAS,yDAAoD,EACtE,GAIX,IAAMC,EAAkB,CAAC,cAAe,sBAAuB,oBAAqB,WAAY,YAAY,EACtGlB,EAAiBkB,EAAgB,OAAOjB,GAC1C,CAAC,OAAO,cAAcA,CAAM,GAAK,OAAO,OAAO,cAAcA,CAAM,GAAM,UAC7E,EAEA,GAAID,EAAe,OAAS,EACxB,YAAK,WAAW,QAAS,kEAA8D,CACnF,eAAgBA,CACpB,CAAC,EACM,GAIX,IAAMmB,EAAc,CAAE,KAAM,EAAK,EAS3BC,EAReF,EAAgB,IAAIjB,GAAU,CAC/C,GAAI,CACA,OAAO,OAAO,cAAcA,CAAM,EAAE,KAAKkB,CAAW,CACxD,MAAgB,CACZ,OAAO,IACX,CACJ,CAAC,EAEmC,OAAOlB,GAAUA,IAAW,IAAI,EACpE,GAAImB,EAAe,OAAS,EACxB,YAAK,WAAW,QAAS,wEAAoE,CACzF,eAAgBA,EAAe,MACnC,CAAC,EACM,GAIX,GAAI,CACA,IAAMC,EAAW,mBAAqB,KAAK,IAAI,EAC/C,cAAO,eAAe,OAAO,cAAeA,EAAU,CAClD,MAAO,OACP,SAAU,GACV,aAAc,EAClB,CAAC,EAED,KAAK,WAAW,QAAS,gEAA2D,EACpF,OAAO,OAAO,cAAcA,CAAQ,EAC7B,EAEX,MAA4B,CAExB,KAAK,WAAW,QAAS,yCAAoC,CACjE,CAEA,YAAK,WAAW,OAAQ,+CAA0C,EAC3D,EAEX,OAASvJ,EAAO,CACZ,YAAK,WAAW,QAAS,gDAA4C,CACjE,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EACM,EACX,CACJ,CAEA,gCAAiC,CAE7B,IAAMwJ,EAAmB,CAAC,iBAAiB,EACrCC,EAAkBD,EAAiB,OAAOE,GAAW,CAAC,KAAK,iBAAiBA,CAAO,CAAC,EAEtFD,EAAgB,OAAS,IACzB,KAAK,WAAW,QAAS,6DAAuD,CAC5E,QAASA,EACT,gBAAiB,KAAK,iBACtB,OAAQ,sCACZ,CAAC,EAEDA,EAAgB,QAAQC,GAAW,CAC/B,KAAK,iBAAiBA,CAAO,EAAI,GACjC,KAAK,WAAW,OAAQ,wCAA8BA,CAAO,SAAS,CAC1E,CAAC,GAIL,IAAMC,EAAoB,OAAO,KAAK,KAAK,gBAAgB,EAAE,OAAOC,GAAK,KAAK,iBAAiBA,CAAC,CAAC,EAC3FC,EAAqB,CAAC,gBAAiB,UAAW,UAAU,EAAE,OAAOD,GAAK,KAAK,iBAAiBA,CAAC,CAAC,EAExG,YAAK,WAAW,OAAQ,kDAA8C,CAClE,iBAAkBJ,EAAiB,OACnC,kBAAmBG,EAAkB,OACrC,mBAAoBE,EAAmB,OACvC,sBAAuBF,EAAkB,OACzC,KAAM,2DACN,aAAc,CACV,cAAe,KAAK,iBAAiB,cACrC,QAAS,KAAK,iBAAiB,QAC/B,SAAU,KAAK,iBAAiB,SAChC,gBAAiB,KAAK,iBAAiB,eAC3C,CACJ,CAAC,EAEM,EACX,CAEA,iCAAkC,CAE9B,KAAK,WAAW,OAAQ,uEAAkE,EAGtE,CAChB,gBAAiB,UAAW,WAAY,gBACxC,wBAAyB,8BACzB,wBAAyB,kBAAmB,wBAAyB,SACrE,sBAAuB,mBAAoB,sBAC3C,wBAAyB,iBAAkB,mBAAoB,oBACnE,EAEY,QAAQD,GAAW,CAC3B,KAAK,iBAAiBA,CAAO,EAAI,EACrC,CAAC,EAED,KAAK,WAAW,OAAQ,kDAA8C,CAClE,gBAAiB,OAAO,KAAK,KAAK,gBAAgB,EAAE,OAAOE,GAAK,KAAK,iBAAiBA,CAAC,CAAC,EAAE,OAC1F,cAAe,OAAO,KAAK,KAAK,gBAAgB,EAAE,MACtD,CAAC,CAGL,CAKA,mBAAmBE,EAAS,kBAAmB,CAC3C,KAAK,WAAW,QAAS,sCAAiC,EAE1D,GAAI,CAEA,KAAK,cAAgB,KACrB,KAAK,OAAS,KACd,KAAK,YAAc,KACnB,KAAK,iBAAmB,KACxB,KAAK,eAAiB,KACtB,KAAK,aAAe,KAGhB,KAAK,cACL,KAAK,YAAY,MAAM,EACvB,KAAK,YAAc,MAEnB,KAAK,iBACL,KAAK,eAAe,MAAM,EAC1B,KAAK,eAAiB,MAI1B,KAAK,aAAe,CAAC,EACrB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,aAAa,MAAM,EAGpB,KAAK,gBACL,KAAK,eAAe,iBAAiB,EAGzC,KAAK,WAAW,OAAQ,wCAAiC,CAE7D,OAAS9J,EAAO,CACZ,KAAK,WAAW,QAAS,0CAAsC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACvH,CACJ,CACA,+BAAgC,CAI5B,GAHA,KAAK,4BAA4B,EAG7B,CAAC,KAAK,oBAAoB,EAAG,CAC7B,KAAK,WAAW,QAAS,uCAAkC,EAC3D,MACJ,CAEA,KAAK,yBAAyB,EAG9B,KAAK,oBAAsB,KAAK,kBAAkB,YAAY,IAAM,CAChE,KAAK,aAAa,CACtB,EAAG,GAAM,CAAC,EAEV,KAAK,WAAW,OAAQ,uDAAkD,EAC1E,KAAK,WAAW,OAAQ,6EAAsE,CAClG,CAKA,0BAA2B,CAEvB,KAAK,WAAW,OAAQ,0DAAmD,CAC/E,CAMA,oBAAoB+J,EAAa,GAAM,CACnC,IAAMC,EAAqB,KAAK,aAAe,KAAK,YAAY,aAAe,OACzEC,EAAuB,KAAK,WAC5B9D,EAAU6D,GAAsBC,EAEtC,GAAI,CAAC9D,GAAW4D,EAAY,CACxB,GAAI,CAACC,EACD,MAAM,IAAI,MAAM,wBAAwB,EAE5C,GAAI,CAACC,EACD,MAAM,IAAI,MAAM,yBAAyB,CAEjD,CAEA,OAAO9D,CACX,CAOA,yBAAyB+D,EAAY,UAAWH,EAAa,GAAM,CAC/D,GAAI,CAAC,KAAK,WAAY,CAClB,IAAMI,EAAe,uBAAuBD,CAAS,uDAQrD,GAPA,KAAK,WAAW,QAASC,EAAc,CACnC,UAAWD,EACX,WAAY,KAAK,WACjB,QAAS,CAAC,EAAE,KAAK,eAAiB,KAAK,QACvC,UAAW,KAAK,IAAI,CACxB,CAAC,EAEGH,EACA,MAAM,IAAI,MAAMI,CAAY,EAEhC,MAAO,EACX,CACA,MAAO,EACX,CAMA,mBAAmBC,EAAUC,EAAqB,UAAWC,EAAmB,KAAM,CAClF,GAAIF,EAAU,CAEV,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,OAC7B,MAAM,IAAI,MAAM,kDAAkD,EAGtE,GAAI,CAACC,GAAsBA,IAAuB,UAC9C,MAAM,IAAI,MAAM,iEAAiE,EAQrF,GAAIA,EAAmB,SAAS,KAAK,GAAK,CAAC,KAAK,2BAC5C,WAAK,WAAW,QAAS,6DAA8D,CACnF,mBAAoBA,EACpB,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,2BAC1B,CAAC,EACK,IAAI,MAAM,yDAAyD,EAI7E,KAAK,WAAW,OAAQ,yDAA0D,CAC9E,mBAAoBA,EACpB,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,eAAgB,KAAK,eACrB,UAAW,KAAK,IAAI,EACpB,iBAAkBC,EAAmB,WAAa,MACtD,CAAC,CACL,CAEA,KAAK,WAAaF,EAEdA,EACA,KAAK,eAAe,WAAW,EAE/B,KAAK,eAAe,cAAc,CAE1C,CA+BA,sBAAsBN,EAAS,yBAA0B,CACrD,IAAMS,EAAK,KAAK,MAChB,GAAI,CAAC,KAAK,QAAQ,GAAK,CAACA,GAAM,CAACA,EAAG,WAAa,CAACA,EAAG,eAAiB,CAACA,EAAG,YACpE,MAAM,IAAI,MAAM,wEAAwE,EAE5F,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,OAC7B,MAAM,IAAI,MAAM,yDAAyD,EAE7E,GAAI,KAAK,WAAY,MAAO,GAI5B,KAAK,2BAA6B,GAClC,KAAK,4BAA8B,GACnC,KAAK,2BAA6B,GAElC,KAAK,mBAAmB,GAAM,yBAA0B,CACpD,OAAAT,EACA,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,yBAAyB,qBAAsB,EAAK,EACzD,KAAK,iBAAiB,UAAU,EAChC,GAAI,CAAE,KAAK,oBAAoB,CAAG,MAAY,CAAC,CAC/C,MAAO,EACX,CAMA,sBAAsB5J,EAAaC,EAAc,KAAM,CAEnD,GAAI,OAAO,KAAK,mBAAsB,WAClC,MAAM,IAAI,MAAM,2GAA2G,EAG/H,OAAO,KAAK,kBAAkBD,EAAaC,EAAa,EAAI,CAChE,CAMA,wBAAwBqK,EAAWC,EAAsB,KAAM,CAC3D,GAAI,CACA,IAAMpK,EAAM,KAAK,MAAMmK,CAAS,EAGhC,GAAInK,EAAI,aAAe,KAAK,gBAAgB,WAAa,WACrD,MAAM,IAAI,MAAM,iDAAiD,EAGrE,GAAIA,EAAI,kBAAoB,KAAK,gBAAkB,WAC/C,MAAM,IAAI,MAAM,gEAAgE,EAIpF,GAAIoK,GAAuBpK,EAAI,cAAgBoK,EAC3C,MAAM,IAAI,MAAM,uCAAuCA,CAAmB,SAASpK,EAAI,WAAW,EAAE,EAMxG,GAFY,KAAK,IAAI,EACIA,EAAI,UACZ,KACb,MAAM,IAAI,MAAM,gDAAgD,EAGpE,OAAOA,CACX,OAASL,EAAO,CAGZ,WAAK,WAAW,QAAS,wBAAyB,CAC9C,MAAOA,EAAM,QACb,UAAW,OAAOwK,GAAc,SAAWA,EAAU,OAAS,CAClE,CAAC,EACK,IAAI,MAAM,0BAA0BxK,EAAM,OAAO,EAAE,CAC7D,CACJ,CAcA,gCAAgC0K,EAAalK,EAAU,UAAW,CAC9D,GAAI,CACA,GAAI,CAAC,KAAK,wBACN,MAAO,GAQX,GAAI,OAAOkK,GAAgB,UAAY,CAAC,OAAO,SAASA,CAAW,EAC/D,YAAK,WAAW,OAAQ,qDAAsD,CAC1E,aAAc,OAAOA,EACrB,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,GAIX,GAAIkK,EAAc,KAAK,uBAAyB,KAAK,iBACjD,YAAK,WAAW,OAAQ,mDAAoD,CACxE,SAAUA,EACV,SAAU,KAAK,uBACf,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,GAIX,GAAIkK,EAAc,KAAK,uBAAyB,KAAK,eACjD,YAAK,WAAW,OAAQ,sDAAuD,CAC3E,SAAUA,EACV,SAAU,KAAK,uBACf,IAAKA,EAAc,KAAK,uBACxB,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,GAIX,GAAI,KAAK,aAAa,IAAIkK,CAAW,EACjC,YAAK,WAAW,OAAQ,qDAAsD,CAC1E,SAAUA,EACV,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,GAOX,GAHA,KAAK,aAAa,IAAIkK,CAAW,EAG7B,KAAK,aAAa,KAAO,KAAK,iBAAkB,CAChD,IAAMC,EAAY,KAAK,IAAI,GAAG,KAAK,YAAY,EAC/C,KAAK,aAAa,OAAOA,CAAS,CACtC,CAGA,GAAID,IAAgB,KAAK,uBAIrB,IAHA,KAAK,yBAGE,KAAK,aAAa,IAAI,KAAK,uBAAyB,KAAK,iBAAmB,CAAC,GAChF,KAAK,aAAa,OAAO,KAAK,uBAAyB,KAAK,iBAAmB,CAAC,EAIxF,YAAK,WAAW,QAAS,wCAAyC,CAC9D,SAAUA,EACV,SAAU,KAAK,uBACf,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EAEM,EACX,OAASR,EAAO,CACZ,YAAK,WAAW,QAAS,oCAAqC,CAC1D,MAAOA,EAAM,QACb,QAASQ,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,EACX,CACJ,CAQA,oBAAoBgK,EAAWC,EAAsB,KAAM,CACvD,GAAI,CACA,IAAMpK,EAAM,KAAK,MAAMmK,CAAS,EAGhC,GAAInK,EAAI,aAAe,KAAK,gBAAgB,WAAa,WACrD,MAAM,IAAI,MAAM,iDAAiD,EAGrE,GAAIA,EAAI,kBAAoB,KAAK,gBAAkB,WAC/C,MAAM,IAAI,MAAM,gEAAgE,EAIpF,GAAI,CAAC,KAAK,gCAAgCA,EAAI,eAAgBA,EAAI,WAAW,EACzE,MAAM,IAAI,MAAM,mEAAmE,EAIvF,GAAIoK,GAAuBpK,EAAI,cAAgBoK,EAC3C,MAAM,IAAI,MAAM,uCAAuCA,CAAmB,SAASpK,EAAI,WAAW,EAAE,EAGxG,OAAOA,CACX,OAASL,EAAO,CAGZ,WAAK,WAAW,QAAS,wBAAyB,CAC9C,MAAOA,EAAM,QACb,UAAW,OAAOwK,GAAc,SAAWA,EAAU,OAAS,CAClE,CAAC,EACK,IAAI,MAAM,0BAA0BxK,EAAM,OAAO,EAAE,CAC7D,CACJ,CAMA,qBAAsB,CAClB,IAAM4K,EAAS,CACX,wBAAyB,KAAK,wBAC9B,iBAAkB,KAAK,iBACvB,wBAAyB,KAAK,aAAa,KAC3C,eAAgB,KAAK,eACrB,uBAAwB,KAAK,uBAC7B,eAAgB,KAAK,eACrB,oBAAqB,MAAM,KAAK,KAAK,YAAY,EAAE,KAAK,CAACC,EAAG5K,IAAM4K,EAAI5K,CAAC,CAC3E,EAEA,YAAK,WAAW,OAAQ,+BAAgC2K,CAAM,EACvDA,CACX,CAMA,8BAA8B9K,EAAQ,CAClC,GAAI,CACA,GAAIA,EAAO,aAAe,OAAW,CACjC,GAAIA,EAAO,WAAa,IAAMA,EAAO,WAAa,KAC9C,MAAM,IAAI,MAAM,gDAAgD,EAEpE,KAAK,iBAAmBA,EAAO,UACnC,CAEA,GAAIA,EAAO,SAAW,OAAW,CAC7B,GAAIA,EAAO,OAAS,IAAMA,EAAO,OAAS,IACtC,MAAM,IAAI,MAAM,8CAA8C,EAElE,KAAK,eAAiBA,EAAO,MACjC,CAEA,OAAIA,EAAO,UAAY,SACnB,KAAK,wBAA0BA,EAAO,SAG1C,KAAK,WAAW,OAAQ,oCAAqCA,CAAM,EAC5D,EACX,OAASE,EAAO,CACZ,YAAK,WAAW,QAAS,6CAA8C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACxF,EACX,CACJ,CAWA,MAAM,sBAAuB,CACzB,GAAI,CACA,IAAM8K,EAAe,CAEjB,gBAAiB,CAAC,CAAC,KAAK,YACxB,gBAAiB,CAAC,CAAC,KAAK,aACxB,cAAe,CAAC,CAAC,KAAK,cACtB,iBAAkB,CAAC,CAAC,KAAK,QAGzB,iBAAkB,KAAK,wBAGvB,gBAAiB,CAAC,EAAE,KAAK,yBAA2B,KAAK,sBAGzD,QAAS,CAAC,CAAC,KAAK,kBAAoB,KAAK,6BAA+B,GACxE,mBAAoB,GACpB,mBAAoB,GAMpB,sBAAuB,KAAK,kBAAkB,IAAM,GAGpD,YAAa,GAGb,aAAc,KAAK,aACnB,eAAgB,KAAK,eACrB,qBAAsB,UACtB,UAAW,KAAK,IAAI,CACxB,EAIMC,EAAS,MAAM,KAAK,gCAAgC,EAE1D,OAAKA,EAYE,CAAE,GAAGA,EAAQ,GAAGD,CAAa,EARzB,CACH,GAAGA,EACH,MAAO,eACP,MAAO,EACP,WAAY,EAChB,CAIR,OAAS9K,EAAO,CACZ,WAAK,WAAW,QAAS,0CAA2C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACtFA,CACV,CACJ,CAQA,+BAA+B8C,EAAK,CAChC,GAAI,CACA,GAAI,CAACA,GAAO,OAAOA,GAAQ,SACvB,MAAM,IAAI,MAAM,sBAAsB,EAI1C,IAAMkI,EAAmB,mDACnBC,EAAe,CAAC,EAClBC,EAEJ,MAAQA,EAAQF,EAAiB,KAAKlI,CAAG,KAAO,MAC5CmI,EAAa,KAAK,CACd,UAAWC,EAAM,CAAC,EAAE,YAAY,EAChC,YAAaA,EAAM,CAAC,EAAE,KAAK,CAC/B,CAAC,EAGL,GAAID,EAAa,SAAW,EAAG,CAE3B,IAAME,EAAsB,wDAC5B,MAAQD,EAAQC,EAAoB,KAAKrI,CAAG,KAAO,MAC/CmI,EAAa,KAAK,CACd,UAAWC,EAAM,CAAC,EAAE,YAAY,EAChC,YAAaA,EAAM,CAAC,EAAE,KAAK,CAC/B,CAAC,CAET,CAEA,GAAID,EAAa,SAAW,EACxB,WAAK,WAAW,OAAQ,yFAA0F,CAC9G,UAAWnI,EAAI,OACf,WAAYA,EAAI,UAAU,EAAG,GAAG,EAAI,KACxC,CAAC,EACK,IAAI,MAAM,mCAAmC,EAoBvD,MAf2B,CAAC,GAAGmI,CAAY,EAAE,KAAK,CAAC,EAAGhL,IAAM,CACxD,IAAMmL,EAAY,EAAE,YAAc,UAC5BC,EAAYpL,EAAE,YAAc,UAClC,GAAImL,IAAcC,EACd,OAAOD,EAAY,GAAK,EAG5B,IAAME,EAAsB,EAAE,UAAU,cAAcrL,EAAE,SAAS,EACjE,OAAIqL,IAAwB,EACjBA,EAGJ,EAAE,YAAY,cAAcrL,EAAE,WAAW,CACpD,CAAC,EAAE,CAAC,EAEsB,WAC9B,OAASD,EAAO,CACZ,WAAK,WAAW,QAAS,8CAA+C,CACpE,MAAOA,EAAM,QACb,UAAW8C,GAAK,QAAU,CAC9B,CAAC,EACK,IAAI,MAAM,uCAAuC9C,EAAM,OAAO,EAAE,CAC1E,CACJ,CAMA,MAAM,yBAAyBuL,EAAqBC,EAAqBhL,EAAU,UAAW,CAC1F,GAAI,CACA,GAAI,CAAC+K,GAAuB,CAACC,EACzB,MAAM,IAAI,MAAM,oCAAoC,EAIxD,IAAMC,EAAqBF,EAAoB,YAAY,EAAE,QAAQ,KAAM,EAAE,EACvEG,EAAqBF,EAAoB,YAAY,EAAE,QAAQ,KAAM,EAAE,EAS7E,GAAIC,IAAuBC,EACvB,WAAK,WAAW,QAAS,mDAAoD,CACzE,QAASlL,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EAEK,IAAI,MAAM,uDAAuDA,CAAO,EAAE,EAGpF,YAAK,WAAW,OAAQ,yCAA0C,CAC9D,QAASA,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EAEM,EACX,OAASR,EAAO,CACZ,WAAK,WAAW,QAAS,qCAAsC,CAC3D,MAAOA,EAAM,QACb,QAASQ,CACb,CAAC,EACKR,CACV,CACJ,CAUA,MAAM,YAAY2L,EAAgBC,EAASC,EAAU,CACjD,GAAI,CAEA,GAAI,CAACF,EAAgB,CACjB,IAAMG,EAAU,CAAC,EACjB,MAAKH,GAAgBG,EAAQ,KAAK,gBAAgB,EAC5C,IAAI,MAAM,oDAAoDA,EAAQ,KAAK,IAAI,CAAC,EAAE,CAC5F,CAEA,IAAMC,EAAM,IAAI,YACVC,EAA6B,CAACC,EAAavI,IAAU,CACvD,GAAI,OAAOuI,GAAgB,UAAYA,EAAY,KAAK,EAAE,SAAW,EACjE,MAAM,IAAI,MACN,mBAAmBvI,CAAK,kEAC5B,EAGJ,OAAOuI,EAAY,KAAK,EAAE,YAAY,CAC1C,EAEMC,EAAoBF,EAA2BJ,EAAS,SAAS,EACjEO,EAAqBH,EAA2BH,EAAU,UAAU,EAEpEO,EAAOL,EAAI,OACb,cAAgB,CAACG,EAAmBC,CAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,CAC3E,EAEIE,EACJ,GAAIV,aAA0B,YAC1BU,EAAYV,UACLA,aAA0B,WACjCU,EAAYV,EAAe,eACpB,OAAOA,GAAmB,SAAU,CAG3C,IAAMW,EAAYX,EAAe,QAAQ,KAAM,EAAE,EAAE,QAAQ,MAAO,EAAE,EAC9DY,EAAQ,IAAI,WAAWD,EAAU,OAAS,CAAC,EACjD,QAAShL,EAAI,EAAGA,EAAIgL,EAAU,OAAQhL,GAAK,EACvCiL,EAAMjL,EAAI,CAAC,EAAI,SAASgL,EAAU,OAAOhL,EAAG,CAAC,EAAG,EAAE,EAEtD+K,EAAYE,EAAM,MACtB,KACI,OAAM,IAAI,MAAM,6BAA6B,EAIjD,IAAMpH,EAAM,MAAM,OAAO,OAAO,UAC5B,MACAkH,EACA,OACA,GACA,CAAC,YAAY,CACjB,EAEMG,EAAOT,EAAI,OAAO,YAAY,EAC9BU,EAAO,MAAM,OAAO,OAAO,WAC7B,CAAE,KAAM,OAAQ,KAAM,UAAW,KAAAL,EAAM,KAAAI,CAAK,EAC5CrH,EACA,EACJ,EAEMuH,EAAK,IAAI,SAASD,CAAI,EACtBE,GAAKD,EAAG,UAAU,CAAC,EAAIA,EAAG,UAAU,CAAC,KAAO,EAI5CE,EAAU,OAAOD,EAAI,GAAU,EAAE,SAAS,EAAG,GAAG,EAGtD,YAAK,WAAW,OAAQ,iCAAkC,CACtD,QAAST,EAAkB,UAAU,EAAG,EAAE,EAAI,MAC9C,SAAUC,EAAmB,UAAU,EAAG,EAAE,EAAI,MAChD,UAAWS,EAAQ,OACnB,UAAW,KAAK,IAAI,CACxB,CAAC,EAEMA,CACX,OAAS5M,EAAO,CACZ,WAAK,WAAW,QAAS,yBAA0B,CAC/C,MAAOA,EAAM,QACb,gBAAiB,OAAO2L,EACxB,WAAY,CAAC,CAACC,EACd,YAAa,CAAC,CAACC,EACf,UAAW,KAAK,IAAI,CACxB,CAAC,EACK,IAAI,MAAM,2BAA2B7L,EAAM,OAAO,EAAE,CAC9D,CACJ,CAUA,kBAAkB6M,EAAO,CAKrB,GAAI,CAAC,KAAK,kBAAmB,MAAO,GACpC,GAAI,CACA,OAAO,SAAS,cAAcA,CAAK,CACvC,MAAY,CACR,MAAO,EACX,CACJ,CAGA,SAAU,CAAE,OAAO,KAAK,iBAAmB,MAAQ,CAUnD,oBAAoBC,EAAM,CACtB,GAAI,KAAK,gBAAkB,KAAK,iBAAmBA,EAC/C,MAAM,IAAI,MACN,+CAA+C,KAAK,cAAc,OAAOA,CAAI,GACjF,EAEJ,KAAK,eAAiBA,CAC1B,CAEA,YAAa,CACT,OAAK,KAAK,QACN,KAAK,MAAQ,CACT,KAAM,KACN,gBAAiB,KACjB,iBAAkB,KAClB,UAAW,KACX,WAAY,KACZ,iBAAkB,KAClB,WAAY,KACZ,YAAa,KACb,aAAc,KACd,SAAU,GACV,UAAW,GACX,cAAe,GACf,YAAa,GACb,aAAc,KACd,UAAW,GACX,MAAO,KACP,UAAW,CACf,GAEG,KAAK,KAChB,CAUA,WAAWC,EAAMC,EAAa,CAC1B,IAAMzC,EAAK,KAAK,MACZA,GAAI,QAAS,aAAaA,EAAG,KAAK,EAAGA,EAAG,MAAQ,MACpD,KAAK,WAAW,QAAS,yBAA0B,CAAE,KAAAwC,CAAK,CAAC,EAC3D,GAAI,CAAE,KAAK,mBAAmBC,EAAa,QAAQ,CAAG,MAAY,CAAC,CACnE,GAAI,CAAE,KAAK,iBAAiB,QAAQ,CAAG,MAAY,CAAC,CACpD,GAAI,CAAE,KAAK,WAAW,CAAG,MAAY,CAAC,CAC1C,CAGA,MAAM,YAAY7H,EAAK,CACnB,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,UAAU,OAAQA,CAAG,CAAC,CACpE,CAOA,MAAM,oBAAoB8H,EAAM,CAC5B,GAAI,CAAC,KAAK,aAAa,WAAa,CAAC,KAAK,cAAc,UACpD,MAAM,IAAI,MAAM,+BAA+B,EAEnD,IAAMrL,EAAOsL,GAAc,CACvB,KAAAD,EACA,SAAU,MAAM,KAAK,YAAY,KAAK,YAAY,SAAS,EAC3D,UAAW,MAAM,KAAK,YAAY,KAAK,aAAa,SAAS,CACjE,CAAC,EAEKE,EAAa,MAAMC,GADV,MAAOnN,GAAM,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,UAAWA,CAAC,CAAC,EACnC2B,CAAI,EAC9C2I,EAAK,KAAK,WAAW,EAC3B,OAAAA,EAAG,KAAO0C,EACV1C,EAAG,UAAY3I,EACR,CAAE,KAAAA,EAAM,WAAAuL,CAAW,CAC9B,CAMA,MAAM,qBAAqBnL,EAAM,CAAE,WAAAqL,EAAa,KAAM,WAAAC,EAAa,IAAU,GAAK,EAAI,CAAC,EAAG,CACtF,IAAMxK,EAAM,KAAK,gBAAgB,kBAAkB,IACnD,GAAI,CAACA,EAAK,MAAM,IAAI,MAAM,sCAAsC,EAEhE,IAAMmK,EAAOjL,IAASuL,GAAU,MAAQC,GAAQ,MAAQA,GAAQ,OAC1D,CAAE,WAAAL,CAAW,EAAI,MAAM,KAAK,oBAAoBF,CAAI,EAEpDQ,EAAMC,GAAa5K,CAAG,EACtByJ,EAAQoB,GAAW,CACrB,KAAA3L,EACA,YAAa,KAAK,IAAI,EAAIsL,EAC1B,UAAW,CAAE,GAAGG,EAAK,WAAYG,GAAoBH,EAAI,UAAU,CAAE,EACrE,WAAAN,EACA,GAAInL,IAASuL,GAAU,OAAS,CAAE,WAAAF,CAAW,EAAI,CAAC,CACtD,CAAC,EAEK9C,EAAK,KAAK,WAAW,EAC3B,OAAAA,EAAG,gBAAkBgC,EAErB,KAAK,WAAW,OAAQ,wBAAyB,CAC7C,KAAMvK,IAASuL,GAAU,MAAQ,QAAU,SAC3C,MAAOhB,EAAM,OACb,WAAYqB,GAAoBH,EAAI,UAAU,EAAE,MACpD,CAAC,EAEM,CAAE,MAAAlB,EAAO,KAAMsB,GAAetB,CAAK,CAAE,CAChD,CAMA,2BAA2BA,EAAOuB,EAAc,CAC5C,IAAMC,EAAOC,GAAWzB,CAAK,EAC7B,GAAIwB,EAAK,OAASD,EACd,MAAM,IAAI,MACN,eAAeA,IAAiBP,GAAU,MAAQ,aAAe,QAAQ,sBAC7E,EAEJ,GAAI,CAACQ,EAAK,WAKN,MAAM,IAAI,MAAM,0CAA0C,EAE9D,IAAMxD,EAAK,KAAK,WAAW,EAC3B,OAAAA,EAAG,iBAAmBgC,EACtBhC,EAAG,iBAAmBwD,EAAK,WACpBA,CACX,CAMA,MAAM,qBAAsB,CACxB,IAAMxD,EAAK,KAAK,WAAW,EAC3B,GAAI,EAAAA,EAAG,WAAaA,EAAG,UAGvB,IAFAA,EAAG,UAAY,KAAK,IAAI,EAEpB,CAACA,EAAG,WAAa,CAACA,EAAG,iBAAmB,CAACA,EAAG,kBAAoB,CAACA,EAAG,iBAAkB,CACtF,KAAK,WAAW,mBACZ,iHAAiH,EACrH,MACJ,CAEAA,EAAG,MAAQ,WAAW,IAAM,CACnBA,EAAG,WACJ,KAAK,WAAW,UACZ,4FAA4F,CAExG,EAAGhL,EAA4B,4BAA4B,EAE3D,GAAI,CACA,KAAK,YAAY,KAAK,KAAK,UAAU,CACjC,KAAMA,EAA4B,cAAc,SAChD,EAAG,EACH,KAAM,OAAO,0BAA0B,oBAAoBgL,EAAG,UAAU,OAAO,MAC3EA,EAAG,UAAU,WAAYA,EAAG,UAAU,WAAaA,EAAG,UAAU,UAAU,CAAC,CACnF,CAAC,CAAC,EACFA,EAAG,SAAW,GACd,KAAK,WAAW,OAAQ,qBAAsB,CAAE,MAAOA,EAAG,UAAU,MAAO,CAAC,CAChF,MAAgB,CACZ,KAAK,WAAW,mBACZ,sEAAsE,CAC9E,EACJ,CAOA,MAAM,0BAA0B0D,EAAQ,CACpC,IAAMC,EAAI3O,EAA4B,cAChCgL,EAAK,KAAK,WAAW,EAE3B,GAAI,CAAC,KAAK,QAAQ,EAAG,CAIjB,KAAK,WAAW,QAAS,sDAAuD,CAC5E,YAAa0D,GAAQ,IACzB,CAAC,EACD,MACJ,CAEA,GAAI,CACA,GAAIA,EAAO,OAASC,EAAE,SAAU,CAC5B,GAAI3D,EAAG,WAAY,CAGf,KAAK,WAAW,iBACZ,iFAAiF,EACrF,MACJ,CACA,IAAMgC,EAAQ,IAAI,WAAW,OAAO,0BAA0B,oBAAoB,OAAO0B,EAAO,MAAQ,EAAE,CAAC,CAAC,EAI5G,MAAME,GAAqB,OAAO,OAAQ5B,EAAOhC,EAAG,gBAAgB,EAEpE,IAAM3I,EAAOwM,GAAc7B,CAAK,EAC1B8B,EAAe9D,EAAG,OAASiD,GAAQ,MAAQA,GAAQ,OAASA,GAAQ,MAC1E,GAAI5L,EAAK,OAASyM,EAAc,CAC5B,KAAK,WAAW,gBACZ,6FAA6F,EACjG,MACJ,CAEA9D,EAAG,WAAagC,EAChBhC,EAAG,YAAc,MAAM,OAAO,OAAO,UACjC,OAAQ3I,EAAK,SAAU,CAAE,KAAM,OAAQ,WAAY,OAAQ,EAAG,GAAO,CAAC,CAAC,EAC3E2I,EAAG,aAAe,MAAM,OAAO,OAAO,UAClC,OAAQ3I,EAAK,UAAW,CAAE,KAAM,QAAS,WAAY,OAAQ,EAAG,GAAO,CAAC,QAAQ,CAAC,EAErF,MAAM,KAAK,sBAAsB,EACjC,MACJ,CAEA,GAAIqM,EAAO,OAASC,EAAE,UAAW,CAC7B,IAAMI,EAAM,IAAI,WAAW,OAAO,0BAA0B,oBAAoB,OAAOL,EAAO,KAAO,EAAE,CAAC,CAAC,EACzG,GAAI,CAAC1D,EAAG,YAAc,CAACA,EAAG,aAAc,CAGpCA,EAAG,aAAe+D,EAClB,MACJ,CACA,MAAM,KAAK,iBAAiBA,CAAG,EAC/B,MACJ,CACJ,OAAStO,EAAO,CACZ,IAAM+M,EAAO/M,GAAO,MAAQ,mBACtBgE,EAAU+I,IAAS,sBACnB,yIACA,0EACN,KAAK,WAAWA,EAAM/I,CAAO,CACjC,CACJ,CAMA,MAAM,uBAAwB,CAC1B,IAAMuG,EAAK,KAAK,WAAW,EAC3B,GAAIA,EAAG,aAAe,CAACA,EAAG,YAAc,CAACA,EAAG,UAAW,OAYvD,KAAK,qBAAuB,GAE5B,IAAMgE,EAAUhE,EAAG,OAASiD,GAAQ,MACpCjD,EAAG,WAAaiE,GAAgB,CAC5B,gBAAiBD,EAAUhE,EAAG,gBAAkBA,EAAG,iBACnD,iBAAkBgE,EAAUhE,EAAG,iBAAmBA,EAAG,gBACrD,UAAWgE,EAAUhE,EAAG,UAAYA,EAAG,WACvC,WAAYgE,EAAUhE,EAAG,WAAaA,EAAG,SAC7C,CAAC,EAID,KAAK,YAAc,MAAMkE,GAAqB,OAAO,OAAQlE,EAAG,UAAU,EAE1E,KAAK,cAAgBA,EAAG,YACxB,KAAK,kBAAoBA,EAAG,YAE5B,IAAMmE,EAAc,MAAM,OAAO,0BAA0B,iBACvD,KAAK,YAAY,WAAYnE,EAAG,YAAa,KAAK,WAAW,EAEjE,MAAM,KAAK,mBACPmE,EAAY,WAAYA,EAAY,OAAQA,EAAY,YAAaA,EAAY,WAAW,EAEhG,MAAM,KAAK,mBAAmBA,EAA+BH,CAAO,EACpEhE,EAAG,YAAc,GAKjB,IAAM+D,EAAM,IAAI,WAAW,MAAM,OAAO,OAAO,KAC3C,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG,KAAK,aAAa,WAAYK,GAAapE,EAAG,UAAU,CAAC,CAAC,EAOlG,GANA,KAAK,YAAY,KAAK,KAAK,UAAU,CACjC,KAAMhL,EAA4B,cAAc,UAChD,IAAK,OAAO,0BAA0B,oBAAoB+O,EAAI,MAAM,CACxE,CAAC,CAAC,EACF/D,EAAG,UAAY,GAEXA,EAAG,aAAc,CACjB,IAAMqE,EAAOrE,EAAG,aAChBA,EAAG,aAAe,KAClB,MAAM,KAAK,iBAAiBqE,CAAI,CACpC,CACJ,CAGA,MAAM,iBAAiBN,EAAK,CACxB,IAAM/D,EAAK,KAAK,WAAW,EAC3B,GAAIA,EAAG,cAAe,OAItB,GAAI,CAFO,MAAM,OAAO,OAAO,OAC3B,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGA,EAAG,aAAc+D,EAAKK,GAAapE,EAAG,UAAU,CAAC,EAChF,CACL,KAAK,WAAW,YACZ,qGAAqG,EACzG,MACJ,CACAA,EAAG,cAAgB,GAInB,KAAK,iBAAmB,MAAMsE,GAAqB,OAAO,OAAQ,CAC9D,eAAgB,KAAK,YAAY,WACjC,kBAAmBtE,EAAG,YACtB,WAAYA,EAAG,UACnB,CAAC,EAED,IAAMqB,EAAU,KAAK,wBACfC,EAAW,KAAK,qBAClBD,GAAWC,GAAU,KAAK,qBAAqBD,EAASC,CAAQ,EAEpEtB,EAAG,UAAY,GACXA,EAAG,QAAS,aAAaA,EAAG,KAAK,EAAGA,EAAG,MAAQ,MAEnD,KAAK,iBAAiB,cAAgB,GACtC,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,iBAAiB,4BAA8B,GAEpD,KAAK,WAAW,OAAQ,qCAAsC,CAC1D,UAAW,KAAK,IAAI,EAAIA,EAAG,UAC3B,cAAe,KAAK,kBAAkB,IAAM,EAChD,CAAC,EAED,GAAI,CAAE,KAAK,gBAAgB,KAAK,cAAc,CAAG,MAAY,CAAC,CAC9D,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,CAC9B,CAOA,sBAAsB+B,EAAW,CAC7B,GAAI,CACA,GAAI,CAACA,GAAa,OAAOA,GAAc,SACnC,MAAM,IAAI,MAAM,6BAA6B,EAIjD,OAAO,OAAO,0BAA0B,gBAAgBA,CAAS,CACrE,OAAStM,EAAO,CACZ,WAAK,WAAW,QAAS,kCAAmC,CACxD,MAAOA,EAAM,QACb,UAAW,OAAOsM,EAClB,YAAaA,GAAW,QAAU,CACtC,CAAC,EACK,IAAI,MAAM,oCAAoCtM,EAAM,OAAO,EAAE,CACvE,CACJ,CAMA,oCAAoC8J,EAAS,4BAA6B,CACtE,GAAI,CACA,KAAK,WAAW,QAAS,4EAAsE,CAC3F,OAAQA,EACR,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,KAAK,cAAe,gBAAgB,EAC3D,KAAK,kBAAkB,KAAK,OAAQ,gBAAgB,EACpD,KAAK,kBAAkB,KAAK,YAAa,gBAAgB,EAGzD,KAAK,mBAAmB,EAGxB,KAAK,iBAAiB,EAGtB,KAAK,WAAa,KAClB,KAAK,iBAAmB,KACxB,KAAK,eAAiB,KACtB,KAAK,aAAe,KACpB,KAAK,wBAA0B,KAC/B,KAAK,qBAAuB,KAG5B,KAAK,WAAW,EAGhB,KAAK,mBAAmB,+GAAyG,QAAQ,CAE7I,OAAS9J,EAAO,CACZ,KAAK,WAAW,QAAS,mCAAoC,CAAE,MAAOA,EAAM,OAAQ,CAAC,CACzF,CACJ,CAcA,2BAA4B,CACxB,GAAI,CACA,GAAI,CAAC,KAAK,wBACN,MAAM,IAAI,MAAM,4DAA4D,EAGhF,OAAO,KAAK,uBAChB,OAASA,EAAO,CACZ,WAAK,WAAW,QAAS,yCAA0C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACrFA,CACV,CACJ,CAMA,6BAA8B,CAC1B,KAAK,qBAAuB,GAC5B,KAAK,WAAW,OAAQ,kEAAyD,CAC7E,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,mBAAmB,sDAA6C,QAAQ,CACjF,CAKA,4BAA6B,CACzB,KAAK,qBAAuB,GAC5B,KAAK,WAAW,OAAQ,2CAAuC,CAC3D,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,mBAAmB,oCAAgC,QAAQ,CACpE,CAmBA,MAAM,mBAAmB0O,EAAaI,EAAa,CAC/C,IAAMC,EAAcL,GAAa,YACjC,GAAI,CAACK,EAAa,MAAO,GAEzB,GAAI,CAAC,KAAK,qBACN,YAAK,WAAW,OAAQ,mFAA+E,CACnG,aAAcxP,EAA4B,eAC9C,CAAC,EACD,OAAO,0BAA0B,cAAcwP,CAAW,EACnD,GAGX,GAAI,CACA,IAAMC,EAAgB,KAAK,eAAiB,KAAK,kBACjD,GAAI,CAACA,GAAiB,CAAC,KAAK,aAAa,WACrC,MAAM,IAAI,MAAM,iCAAiC,EAGrD,IAAMC,EAAU,IAAIC,GACpB,aAAMD,EAAQ,KAAK,CACf,aAAcF,EACd,YAAa,IAAI,WAAW,KAAK,aAAe,CAAC,CAAC,EAClD,eAAgB,KAAK,YAAY,WACjC,gBAAiBC,EACjB,YAAAF,CACJ,CAAC,EAED,KAAK,SAAWG,EAChB,KAAK,iBAAiB,OAAS,GAC/B,KAAK,WAAW,OAAQ,6EAAkE,CACtF,KAAMH,EAAc,YAAc,WACtC,CAAC,EACM,EACX,OAAS9O,EAAO,CACZ,YAAK,SAAW,KAChB,KAAK,iBAAiB,OAAS,GAC/B,KAAK,WAAW,QAAS,kFAA8E,CACnG,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,EACX,QAAE,CAGE,OAAO,0BAA0B,cAAc+O,CAAW,CAC9D,CACJ,CAGA,iBAAkB,CACd,MAAO,CAAC,CAAC,KAAK,UAAU,aAC5B,CAEA,MAAM,4BAA6B,CAC/B,GAAI,CACA,KAAK,WAAW,OAAQ,mDAA6C,CACjE,iBAAkB,KAAK,iBACvB,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,IAAMI,EAAmB,MAAM,OAAO,0BAA0B,oBAAoB,EAEpF,GAAI,CAACA,GAAoB,CAAC,KAAK,6BAA6BA,CAAgB,EACxE,MAAM,IAAI,MAAM,2CAA2C,EAI/D,IAAMC,EAAY,KAAK,gBAAgB,WAAa,WAAW,KAAK,IAAI,CAAC,GACzE,YAAK,kBAAkB,IAAIA,EAAW,CAClC,QAASD,EACT,UAAW,KAAK,IAAI,EACpB,UAAWC,CACf,CAAC,EAED,KAAK,WAAW,OAAQ,+CAA2C,CAC/D,UAAW,KAAK,IAAI,CACxB,CAAC,EAEMD,CACX,OAASnP,EAAO,CACZ,WAAK,WAAW,QAAS,gDAA4C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACvF,IAAI,MAAM,oCAAoCA,EAAM,OAAO,EAAE,CACvE,CACJ,CAMA,MAAM,kBAAmB,CACrB,GAAI,CACA,KAAK,WAAW,OAAQ,qDAA+C,CACnE,aAAc,KAAK,QAAQ,KAC3B,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,OAAW,CAACqP,EAASC,CAAM,IAAK,KAAK,QAAQ,QAAQ,EAC7CA,EAAO,eACP,KAAK,kBAAkBA,EAAO,cAAe,cAAc,EAE3DA,EAAO,QACP,KAAK,kBAAkBA,EAAO,OAAQ,cAAc,EAEpDA,EAAO,aACP,KAAK,kBAAkBA,EAAO,YAAa,cAAc,EAI7DA,EAAO,cAAgB,KACvBA,EAAO,OAAS,KAChBA,EAAO,YAAc,KACrBA,EAAO,eAAiB,KAI5B,KAAK,QAAQ,MAAM,EAGnB,MAAM,KAAK,uBAAuB,EAElC,KAAK,WAAW,OAAQ,iDAA6C,CACjE,UAAW,KAAK,IAAI,CACxB,CAAC,CAEL,OAAStP,EAAO,CACZ,KAAK,WAAW,QAAS,iDAA6C,CAAE,MAAOA,EAAM,OAAQ,CAAC,CAClG,CACJ,CAMA,MAAM,oBAAqB,CACvB,GAAI,CACA,KAAK,WAAW,OAAQ,0CAAoC,CACxD,mBAAoB,KAAK,kBAAkB,KAC3C,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,OAAW,CAACoP,EAAWG,CAAO,IAAK,KAAK,kBAAkB,QAAQ,EAC1DA,EAAQ,SAAS,YACjB,KAAK,kBAAkBA,EAAQ,QAAQ,WAAY,oBAAoB,EAEvEA,EAAQ,SAAS,WACjB,KAAK,kBAAkBA,EAAQ,QAAQ,UAAW,oBAAoB,EAI1EA,EAAQ,QAAU,KAClBA,EAAQ,UAAY,KACpBA,EAAQ,UAAY,KAIxB,KAAK,kBAAkB,MAAM,EAG7B,MAAM,KAAK,uBAAuB,EAElC,KAAK,WAAW,OAAQ,sCAAkC,CACtD,UAAW,KAAK,IAAI,CACxB,CAAC,CAEL,OAASvP,EAAO,CACZ,KAAK,WAAW,QAAS,uCAAmC,CAAE,MAAOA,EAAM,OAAQ,CAAC,CACxF,CACJ,CAMA,MAAM,oBAAoBG,EAAaE,EAAK,CACxC,GAAI,CACA,GAAI,CAAC,KAAK,cACN,MAAM,IAAI,MAAM,8CAA8C,EAIlE,IAAMmP,EAAgB,OAAOrP,GAAgB,SAAWA,EAAc,KAAK,UAAUA,CAAW,EAU1FsP,EAAmB,CACrB,KAAM,yBACN,cATkB,MAAM,OAAO,0BAA0B,mBACzDD,EACA,KAAK,cACLnP,CACJ,EAMI,IAAKA,EACL,UAAW,KAAK,IAAI,EACpB,eAAgB,KAAK,cACzB,EAEA,OAAO,KAAK,UAAUoP,CAAgB,CAC1C,OAASzP,EAAO,CACZ,WAAK,WAAW,QAAS,iCAAkC,CAAE,MAAOA,EAAM,OAAQ,CAAC,EAC7E,IAAI,MAAM,mCAAmCA,EAAM,OAAO,EAAE,CACtE,CACJ,CAMA,MAAM,oBAAoB0P,EAAwB,CAC9C,GAAI,CACA,IAAMD,EAAmB,KAAK,MAAMC,CAAsB,EAE1D,GAAID,EAAiB,OAAS,yBAC1B,MAAM,IAAI,MAAM,qCAAqC,EAIzD,GAAIA,EAAiB,iBAAmB,KAAK,eACzC,MAAM,IAAI,MAAM,oDAAoD,EAIxE,IAAMpP,EAAM,KAAK,oBAAoBoP,EAAiB,IAAK,cAAc,EAEzE,GAAI,CAAC,KAAK,cACN,MAAM,IAAI,MAAM,yDAAyD,EAU7E,MAAO,CACH,cAPkB,MAAM,OAAO,0BAA0B,mBACzDA,EAAiB,cACjB,KAAK,cACLA,EAAiB,GACrB,EAII,IAAKpP,CACT,CACJ,OAASL,EAAO,CACZ,WAAK,WAAW,QAAS,iCAAkC,CAAE,MAAOA,EAAM,OAAQ,CAAC,EAC7E,IAAI,MAAM,mCAAmCA,EAAM,OAAO,EAAE,CACtE,CACJ,CAOA,wBAAwB+J,EAAa,GAAM,CACvC,IAAM4F,EAAa,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,aAEhE,GAAI,CAACA,GAAc5F,EACf,MAAM,IAAI,MAAM,iCAAiC,EAGrD,OAAO4F,CACX,CAOA,MAAM,gCAAiC,CACnC,GAAI,CAEA,GAAI,KAAK,eAAiB,KAAK,QAAU,KAAK,YAC1C,MAAO,GAIX,IAAMC,EAAU,CAAC,EAAE,KAAK,aAAa,aAAe,KAAK,eAAiB,KAAK,oBACzEZ,EAAgB,KAAK,eAAiB,KAAK,kBACjD,GAAI,CAACY,GAAW,CAACZ,GAAiB,CAAC,KAAK,YACpC,MAAO,GAIX,IAAMN,EAAc,MAAM,OAAO,0BAA0B,iBACvD,KAAK,YAAY,WACjBM,EACA,KAAK,WACT,EAEA,aAAM,KAAK,mBACPN,EAAY,WACZA,EAAY,OACZA,EAAY,YACZA,EAAY,WAChB,EAEO,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,YACxD,OAAS1O,EAAO,CACZ,YAAK,WAAW,QAAS,yCAA0C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACpF,EACX,CACJ,CAOA,eAAeiC,EAAM,CACjB,GAAI,OAAOA,GAAS,SAChB,GAAI,CACA,IAAMgM,EAAS,KAAK,MAAMhM,CAAI,EAC9B,OAAOgM,EAAO,MAAQA,EAAO,KAAK,WAAW,OAAO,CACxD,MAAQ,CACJ,MAAO,EACX,CAGJ,OAAI,OAAOhM,GAAS,UAAYA,EAAK,KAC1BA,EAAK,KAAK,WAAW,OAAO,EAGhC,EACX,CAOA,iBAAiBA,EAAM,CACnB,IAAM4N,EAAc,CAChBtQ,EAA4B,cAAc,UAC1CA,EAA4B,cAAc,aAC1CA,EAA4B,cAAc,sBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,4BAC1CA,EAA4B,cAAc,gBAC1CA,EAA4B,cAAc,iBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,kBAC9C,EAEA,GAAI,OAAO0C,GAAS,SAChB,GAAI,CACA,IAAMgM,EAAS,KAAK,MAAMhM,CAAI,EAC9B,OAAO4N,EAAY,SAAS5B,EAAO,IAAI,CAC3C,MAAQ,CACJ,MAAO,EACX,CAGJ,OAAI,OAAOhM,GAAS,UAAYA,EAAK,KAC1B4N,EAAY,SAAS5N,EAAK,IAAI,EAGlC,EACX,CAOA,eAAeA,EAAM,CACjB,GAAI,OAAOA,GAAS,SAChB,GAAI,CACA,IAAMgM,EAAS,KAAK,MAAMhM,CAAI,EAC9B,OAAOgM,EAAO,OAAS1O,EAA4B,cAAc,MAC1D0O,EAAO,gBAAkB,EACpC,MAAQ,CACJ,MAAO,EACX,CAGJ,OAAI,OAAOhM,GAAS,UAAYA,IAAS,KAC9BA,EAAK,OAAS1C,EAA4B,cAAc,MACxD0C,EAAK,gBAAkB,GAG3B,EACX,CASA,mBAAmBiI,EAAWC,EAAc2F,EAAW,KAAM,CACzD,GAAI,CACA,OAAO5F,EAAU,CACrB,OAASlK,EAAO,CACZ,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,0BAAsB,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAEhG8P,CACX,CACJ,CASA,MAAM,wBAAwB5F,EAAWC,EAAc2F,EAAW,KAAM,CACpE,GAAI,CACA,OAAO,MAAM5F,EAAU,CAC3B,OAASlK,EAAO,CACZ,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,0BAAsB,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAEhG8P,CACX,CACJ,CAQA,gBAAgB7N,EAAM,CAClB,GAAI,OAAOA,GAAS,SAChB,GAAI,CAEA,OADe,KAAK,MAAMA,CAAI,EAChB,MAAQ,IAC1B,MAAQ,CACJ,OAAO,IACX,CAGJ,OAAI,OAAOA,GAAS,UAAYA,IAAS,MAC9BA,EAAK,MAAQ,IAI5B,CAKA,yBAA0B,CACtB,KAAK,8BAAgC,KACrC,KAAK,6BAA+B,GACpC,KAAK,2BAA6B,GAClC,KAAK,sBAAwB,GAC7B,KAAK,qBAAuB,KAC5B,KAAK,sBAAwB,KAC7B,KAAK,2BAA6B,GAClC,KAAK,mCAAqC,GAC1C,KAAK,+BAAiC,GACtC,KAAK,iCAAmC,GACxC,KAAK,oCAAsC,GAC3C,KAAK,yCAA2C,GAChD,KAAK,gCAAkC,GACvC,KAAK,yBAA2B,KAChC,KAAK,oCAAsC,GAC3C,KAAK,6BAA+B,IACxC,CAOA,mBAAmB8N,EAAQ,CAEvB,OADwB,OAAO,OAAOxQ,EAA4B,gBAAgB,EAC3D,SAASwQ,CAAM,CAC1C,CAIA,cAAe,CAEP,KAAK,WAAW,KAAO,MACvB,KAAK,WAAW,MAAM,EACtB,KAAK,WAAW,QAAS,gDAAyC,GAItE,IAAMnL,EAAM,KAAK,IAAI,EACfoL,EAAS,IAGXC,EAAkB,EACtB,OAAW,CAAC9K,EAAKwB,CAAK,IAAK,KAAK,WAAW,QAAQ,EAC3CA,EAAQ,IACRsJ,IAKJA,EAAkB,KAClB,KAAK,WAAW,MAAM,EACtB,KAAK,WAAW,OAAQ,4DAAqD,GAI7E,KAAK,uBAAyB,GAAKA,EAAkB,IACrD,KAAK,uBAAyB,KAAK,IAAI,EAAG,KAAK,uBAAyB,CAAC,IAIzE,CAAC,KAAK,oBAAsB,KAAK,IAAI,EAAI,KAAK,mBAAqB,OACnE,KAAK,eAAe,EACpB,KAAK,mBAAqB,KAAK,IAAI,IAInC,CAAC,KAAK,qBAAqB,YAAY,aACvC,KAAK,IAAI,EAAI,KAAK,qBAAqB,YAAY,YAAc,OAEjE,KAAK,8BAA8B,EAAE,MAAMjQ,GAAS,CAChD,KAAK,WAAW,QAAS,0BAA2B,CAChD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EACD,KAAK,qBAAqB,YAAY,YAAc,KAAK,IAAI,EAErE,CAIA,kBAAmB,CAEf,IAAMiE,EAAQ,CACV,iBAAkB,KAAK,kBACvB,UAAW,KAAK,WAChB,gBAAiB,KAAK,iBACtB,cAAe,KAAK,WAAW,KAC/B,YAAa,KAAK,aAClB,mBAAoB,KAAK,wBAA0B,EACnD,sBAAuB,KAAK,2BAA6B,EACzD,aAAc,KAAK,mBAAqB,GAAK,WAAa,QAC9D,EAGMiM,EAAiB,CAAC,EACxB,OAAW,CAAC/K,EAAKM,CAAK,IAAK,OAAO,QAAQxB,CAAK,EACvC,OAAOwB,GAAU,UAAY,KAAK,0BAA0BA,CAAK,EACjEyK,EAAe/K,CAAG,EAAI,4BAEtB+K,EAAe/K,CAAG,EAAIM,EAI9B,OAAOyK,CACX,CAIA,MAAM,0BAA2B,CAE7B,KAAK,iBAAmB,GAGxB,KAAK,WAAW,MAAM,EAGlB,KAAK,yBACL,KAAK,uBAAyB,GAIlC,KAAK,WAAa,IAAM,CAEhB,UAAU,CAAC,IAAM,SAAW,KAAK,kBAAkB,OACnD,KAAK,iBAAiB,MAAM,iFAA0E,CAE9G,EAGA,KAAK,wBAA0B,KAAK,gBACpC,KAAK,yBAA2B,KAAK,iBACrC,KAAK,yBAA2B,KAAK,iBACrC,KAAK,kCAAoC,KAAK,0BAG9C,KAAK,gBAAkB,IAAM,qBAC7B,KAAK,iBAAmB,KAAO,CAAE,MAAO,kBAAmB,GAC3D,KAAK,iBAAmB,IAAM,GAC9B,KAAK,0BAA4B,IAAM,GAGvC,MAAM,KAAK,uBAAuB,EAGlC,KAAK,kBAAkB,QAAQ,mFAA4E,CAC/G,CAMA,qBAAsB,CAClB,KAAK,WAAW,OAAQ,6DAAsD,EAG9E,KAAK,gBAAkB,KAAK,0BAA6B5K,GAAQA,GACjE,KAAK,iBAAmB,KAAK,2BAA8BrD,GAASA,GACpE,KAAK,iBAAmB,KAAK,2BAA6B,IAAM,IAChE,KAAK,0BAA4B,KAAK,oCAAsC,IAAM,IAGlF,KAAK,uBAAyB,EAE9B,KAAK,WAAW,OAAQ,0CAAqC,CACjE,CAIA,iBAAiB+B,EAAS/B,EAAM,CAC5B,GAAI,CAACA,GAAQ,OAAOA,GAAS,SAAU,MAAO,GAG9C,IAAMkO,EAAa,KAAK,UAAUlO,CAAI,EAGtC,GAAI,KAAK,0BAA0B+B,CAAO,EACtC,YAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,sEAA+D,EACvF,GAIX,GAAI,KAAK,0BAA0BmM,CAAU,EACzC,YAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,mEAA4D,EACpF,GAIX,IAAMC,EAAoB,CACtB,SAAU,QAAS,WAAY,aAAc,OAC7C,cAAe,OAAQ,YAAa,cAAe,UAAW,UAC9D,aAAc,MAAO,WAAY,UAAW,MAAO,SACnD,MAAO,OAAQ,SAAU,QAAS,KAAM,QAC5C,EAEMC,EAAkBF,EAAW,YAAY,EAE/C,QAAW5I,KAAW6I,EAClB,GAAIC,EAAgB,SAAS9I,CAAO,GAAK,CAAC,KAAK,qBAAqB,IAAIA,CAAO,EAC3E,YAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,iEAA0DA,CAAO,EAAE,EAC3F,GAKf,OAAW,CAACpC,EAAKM,CAAK,IAAK,OAAO,QAAQxD,CAAI,EAC1C,GAAI,OAAOwD,GAAU,UAAY,KAAK,gBAAgBA,CAAK,EACvD,YAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,wEAAiEN,CAAG,EAAE,EAC9F,GAIf,MAAO,EACX,CAEA,wBAAyB,CACrB,GAAI,CACA,GAAI,KAAK,gBAAkB,GACvB,OAKJ,GAFA,KAAK,WAAW,OAAQ,gEAAyD,EAE7E,KAAK,mBAAoB,CACzB,KAAK,WAAW,OAAQ,iDAA4C,EACpE,MACJ,CAIA,GAAI,CADiB,CAAC,EAAE,KAAK,aAAe,KAAK,YAAY,aAAe,QACzD,CAEf,GADA,KAAK,WAAW,OAAQ,4EAAkE,EACtF,KAAK,YAAa,CAClB,IAAMmL,EAAc,IAAM,CACtB,KAAK,WAAW,OAAQ,6DAAsD,EAC9E,KAAK,uBAAuB,CAChC,EACA,KAAK,YAAY,iBAAiB,OAAQA,EAAa,CAAE,KAAM,EAAK,CAAC,CACzE,CACA,MACJ,CAEA,GAAI,CAAC,KAAK,WAAY,CAClB,KAAK,WAAW,OAAQ,kFAAwE,EAChG,KAAK,+BAA+B,GAAG,EACvC,MACJ,CAUA,GAPI,KAAK,qBACL,KAAK,WAAW,OAAQ,qDAA8C,EACtE,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAI1B,CAAC,KAAK,eAAiB,CAAC,KAAK,OAAQ,CACrC,KAAK,WAAW,OAAQ,gFAAsE,EAC9F,KAAK,+BAA+B,GAAI,EACxC,MACJ,CAGA,IAAMC,EAAkBxN,GAAY,CAEhC,GAAI,CACA,KAAK,WAAW,OAAQ,oCAA8B,CAAE,QAAAA,CAAQ,CAAC,EAE7D,KAAK,gBACL,KAAK,eAAe,CAAE,KAAM,WAAY,GAAGA,CAAQ,CAAC,CAE5D,OAAShB,EAAG,CACR,KAAK,WAAW,OAAQ,0CAAiC,CAAE,QAASA,EAAE,OAAQ,CAAC,CACnF,CACJ,EAEA,KAAK,mBAAqB,IAAIyO,GAC1B,KACA,KAAK,gBAAkB,KACvBD,EACA,KAAK,aAAe,KACpB,KAAK,gBAAkB,KACvB,KAAK,uBAAyB,IAClC,EAEA,KAAK,oBAAsB,GAE3B,KAAK,WAAW,OAAQ,sEAAiE,EAGzF,IAAM3F,EAAS,KAAK,mBAAmB,gBAAgB,EACvD,KAAK,WAAW,OAAQ,mDAA6C,CAAE,OAAAA,CAAO,CAAC,CAEnF,OAAS5K,EAAO,CACZ,KAAK,WAAW,QAAS,mDAA+C,CAAE,UAAWA,EAAM,YAAY,IAAK,CAAC,EAC7G,KAAK,mBAAqB,KAC1B,KAAK,oBAAsB,EAC/B,CACJ,CAEA,+BAA+BiB,EAAO,CAClC,GAAI,KAAK,gBAAkB,GAAO,OAAO,KACpC,KAAK,+BAA8B,KAAK,6BAA+B,IAAI,KAEhF,IAAMsB,EAAQ,KAAK,kBAAkB,WAAW,IAAM,CAClD,KAAK,6BAA6B,OAAOA,CAAK,EAC9C,KAAK,oBAAoBA,CAAK,EAC1B,KAAK,gBAAkB,IAC3B,KAAK,uBAAuB,CAChC,EAAGtB,CAAK,CAAC,EAET,YAAK,6BAA6B,IAAIsB,CAAK,EACpCA,CACX,CAMA,MAAM,4BAA6B,CAC/B,GAAI,CAEA,MAAM,KAAK,4BAA4B,EAGnC,KAAK,mBAAmB,SACxB,KAAK,wBAAwB,EAI7B,KAAK,kBAAkB,SACvB,KAAK,2BAA2B,CAGxC,OAASvC,EAAO,CACZ,KAAK,WAAW,QAAS,gDAA4C,CAAE,UAAWA,EAAM,YAAY,IAAK,CAAC,CAC9G,CACJ,CAGG,iBAAiByQ,EAAKC,EAAK,CACtB,GAAI,CAAC,OAAO,UAAUD,CAAG,GAAK,CAAC,OAAO,UAAUC,CAAG,EAC/C,MAAM,IAAI,MAAM,+CAA+C,EAEnE,GAAID,GAAOC,EACP,MAAM,IAAI,MAAM,2BAA2B,EAG/C,IAAMC,EAAQD,EAAMD,EAAM,EACpBG,EAAa,KAAK,KAAK,KAAK,KAAKD,CAAK,CAAC,EACvCE,EAAc,KAAK,KAAKD,EAAa,CAAC,EACtCE,GAAQ,GAAKF,GAAc,EAE7BG,EACJ,EAAG,CACC,IAAMC,EAAc,OAAO,gBAAgB,IAAI,WAAWH,CAAW,CAAC,EAEtEE,EAAc,EACd,QAASzP,EAAI,EAAGA,EAAIuP,EAAavP,IAC7ByP,EAAeA,EAAc,IAAOC,EAAY1P,CAAC,EAGrDyP,EAAcA,EAAcD,CAEhC,OAASC,GAAeJ,GAExB,OAAOF,EAAMM,CACjB,CAEA,mBAAmBE,EAAUC,EAAUC,EAAQ,IAAM,CACjD,GAAI,OAAOF,GAAa,UAAY,OAAOC,GAAa,SACpD,MAAM,IAAI,MAAM,iDAAiD,EAErE,GAAID,GAAYC,EACZ,MAAM,IAAI,MAAM,qCAAqC,EAEzD,IAAME,EAAc,KAAK,iBAAiB,EAAGD,CAAK,EAE5CE,GAAQH,EAAWD,GAAYE,EAErC,OAAOF,EAAYG,EAAcC,CACrC,CAEA,yBAA0B,CAatB,MAZa,CACT,aAAc,KAAK,iBAAiB,EAAG,IAAI,EAC3C,cAAe,KAAK,mBAAmB,IAAM,KAAM,GAAI,EACvD,aAAc,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACnE,iBAAkB,CACd,mBAAoB,eAAgB,eAAgB,cAAe,cACnE,WAAY,cAAe,cAAe,SAAU,cAAe,WACvE,EACA,eAAgB,KAAK,iBAAiB,GAAI,GAAG,EAC7C,eAAgB,KAAK,mBAAmB,IAAM,KAAM,GAAI,EACxD,gBAAiB,KAAK,iBAAiB,IAAK,IAAI,CACpD,CAEJ,CAGJ,6BAA8B,CAC1B,KAAK,WAAW,OAAQ,kEAA2D,EAG/E,KAAK,mBAAqB,CAAC,EAE3B,OAAO,KAAK,KAAK,gBAAgB,EAAE,QAAQ3H,GAAW,CACtD,KAAK,mBAAmBA,CAAO,EAAI,EACnC,CAAC,EAED,KAAK,wBAAwB,EAEjC,KAAK,WAAW,OAAQ,oDAAgD,CAAE,YAAa,KAAK,kBAAmB,CAAC,EAEvG,KAAK,+BAA+B,IACrC,KAAK,WAAW,QAAS,0FAAmF,EAExG,KAAK,gBACL,KAAK,eAAe,kBAAmB,CACnC,KAAM,0BACN,QAAS,sEACb,CAAC,GAIT,KAAK,oBAAoB,EAEzB,WAAW,IAAM,CACb,KAAK,gCAAgC,CACzC,EAAGnK,EAA4B,SAAS,mBAAmB,CACnE,CAGA,yBAA0B,CACjB,KAAK,qBAGV,OAAO,KAAK,KAAK,kBAAkB,EAAE,QAAQmK,GAAW,CAIhD,OAHJ,KAAK,iBAAiBA,CAAO,EAAI,GAGrBA,EAAS,CACb,IAAK,iBACD,KAAK,kBAAkB,QAAU,GAC7B,KAAK,YAAY,GACjB,KAAK,2BAA2B,EAEpC,MACJ,IAAK,mBACD,KAAK,mBAAmB,QAAU,GAC9B,KAAK,YAAY,GACjB,KAAK,wBAAwB,EAEjC,MACJ,IAAK,sBACD,KAAK,iBAAiB,QAAU,GAChC,MACJ,IAAK,wBACD,KAAK,yBAAyB,QAAU,GACxC,MACJ,IAAK,qBACD,KAAK,eAAe,QAAU,GAC9B,KACZ,CACJ,CAAC,EAED,KAAK,WAAW,OAAQ,kDAA8C,CAClE,YAAa,KAAK,mBAClB,gBAAiB,KAAK,gBAC1B,CAAC,EACL,CACA,6BAA6B1F,EAAS,CAClC,OAAI,OAAOA,GAAY,SACZA,EAGJ,OAAO,0BAA0B,gBAAgBA,CAAO,CACnE,CAEA,mBAAmBA,EAAShC,EAAO,WAAYsP,EAAO,KAAM,CACxD,GAAI,CAUA,GARA,KAAK,WAAW,QAAS,sCAAgC,CACrD,QAAStN,EACT,KAAMhC,EACN,YAAa,OAAOgC,EACpB,aAAc,CAAC,CAAC,KAAK,SACzB,CAAC,EAGG,OAAOA,GAAY,UAAYA,EAAQ,MAClB,CACjBzE,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,WAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,UAC1CA,EAA4B,cAAc,aAC1CA,EAA4B,cAAc,sBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,4BAC1CA,EAA4B,cAAc,gBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,gBAC9C,EACiB,SAASyE,EAAQ,IAAI,EAAG,CACjC,KAAK,YACL,KAAK,WAAW,OAAQ,kDAA2CA,EAAQ,IAAI,EAAE,EAErF,MACJ,CAIJ,GAAI,OAAOA,GAAY,UAAYA,EAAQ,KAAK,EAAE,WAAW,GAAG,EAC5D,GAAI,CACA,IAAMuN,EAAgB,KAAK,MAAMvN,CAAO,EACxC,GAAIuN,EAAc,MACO,CACjBhS,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,WAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,UAC1CA,EAA4B,cAAc,aAC1CA,EAA4B,cAAc,sBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,4BAC1CA,EAA4B,cAAc,gBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,gBAC9C,EACiB,SAASgS,EAAc,IAAI,EAAG,CACvC,KAAK,YACL,KAAK,WAAW,OAAQ,2DAAoDA,EAAc,IAAI,EAAE,EAEpG,MACJ,CAER,MAAqB,CAErB,CAGJ,IAAMC,EAAYxP,IAAS,WACrB,KAAK,6BAA6BgC,CAAO,EACzCA,EAEN,GAAI,KAAK,UAAW,CAIhB,IAAMyN,EAAYH,GAAQ,OAAO,KAAK,sBAAyB,WACzD,KAAK,qBAAqBA,CAAI,EAC9B,KACN,KAAK,WAAW,QAAS,4CAAsC,CAAE,QAASE,EAAW,KAAAxP,CAAK,CAAC,EAC3F,KAAK,UAAUwP,EAAWxP,EAAMyP,GAAY,MAAS,CACzD,MACI,KAAK,WAAW,OAAQ,2DAAiD,CAEjF,OAASC,EAAK,CACV,KAAK,WAAW,QAAS,0CAAsC,CAAE,UAAWA,GAAK,aAAa,MAAQ,SAAU,CAAC,CACrH,CACJ,CAIA,qBAAsB,CAElB,GAAI,KAAK,gCAAkC,UACvC,OAYJ,GATA,KAAK,8BAAgC,UAIjC,KAAK,WACL,KAAK,mBAHO,iEAGqB,QAAQ,EAIzC,KAAK,UAAW,CAChB,IAAMC,EAAiB,OAAO,QAAQ,KAAK,gBAAgB,EACtD,OAAO,CAAC,CAACxM,EAAKM,CAAK,IAAMA,IAAU,EAAI,EACvC,IAAI,CAAC,CAACN,CAAG,IAAMA,EAAI,QAAQ,MAAO,EAAE,EAAE,QAAQ,WAAY,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,EACrF,MAAM,EAAG,CAAC,EAEf,KAAK,mBAAmB,qBAAcwM,EAAe,KAAK,IAAI,CAAC,MAAO,QAAQ,CAClF,CACJ,CAGA,sBAAuB,CAEnB,OAAW,CAAClN,EAAalC,CAAK,IAAK,KAAK,YAAY,QAAQ,EACxD,aAAaA,CAAK,EAEtB,KAAK,YAAY,MAAM,EAGvB,OAAW,CAACkC,EAAamN,CAAO,IAAK,KAAK,cAAc,QAAQ,EACxDA,EAAQ,aAAe,QACvBA,EAAQ,MAAM,EAGtB,KAAK,cAAc,MAAM,EAEzB,KAAK,WAAW,OAAQ,qCAA8B,CAC1D,CAMA,MAAM,6BAA8B,CAChC,GAAI,CAEA,KAAK,oBAAsB,MAAM,OAAO,OAAO,YAC3C,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,UAAW,SAAS,CACzB,CAMJ,OAAS5R,EAAO,CACZ,WAAK,WAAW,QAAS,mDAA+C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACtHA,CACV,CACJ,CAEA,MAAM,sBAAsBiC,EAAM,CAC9B,GAAI,CAAC,KAAK,qBAAuB,CAAC,KAAK,iBAAiB,oBACpD,OAAOA,EAGX,GAAI,CAEA,IAAM4P,EAAW,KAAK,kBAClBtS,EAA4B,MAAM,0BAClC,kBACJ,EAGMuS,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAID,CAAS,EAChC,KAAK,oBACL5P,CACJ,EAGM8N,EAAS,IAAI,WAAWxQ,EAA4B,MAAM,0BAA4BuS,EAAU,UAAU,EAChH,OAAA/B,EAAO,IAAI8B,EAAU,CAAC,EACtB9B,EAAO,IAAI,IAAI,WAAW+B,CAAS,EAAGvS,EAA4B,MAAM,yBAAyB,EAEjG,KAAK,WAAW,QAAS,kDAA8C,CACnE,OAAQsS,EAAS,OACjB,SAAU5P,EAAK,WACf,cAAe6P,EAAU,UAC7B,CAAC,EAEM/B,EAAO,MAClB,OAAS/P,EAAO,CACZ,YAAK,WAAW,QAAS,mCAA+B,CACpD,UAAWA,GAAO,aAAa,MAAQ,UACvC,aAAcA,GAAO,SAAW,eACpC,CAAC,EAGGA,EAAM,QAAQ,SAAS,gBAAgB,IACvC,KAAK,iBAAiB,oBAAsB,GAC5C,KAAK,WAAW,OAAQ,kEAAwD,GAG7EiC,CACX,CACJ,CAEA,MAAM,uBAAuBA,EAAM,CAC/B,GAAI,CAAC,KAAK,qBAAuB,CAAC,KAAK,iBAAiB,oBACpD,OAAOA,EAIX,GAAI,EAAEA,aAAgB,cAAgBA,EAAK,WAAa1C,EAA4B,MAAM,0BAA4B,GAClH,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,oGAA6F,EAEnH0C,EAGX,GAAI,CACA,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/B+P,EAAKD,EAAU,MAAM,EAAGxS,EAA4B,MAAM,yBAAyB,EACnF0S,EAAgBF,EAAU,MAAMxS,EAA4B,MAAM,yBAAyB,EAGjG,OAAI0S,EAAc,SAAW,GACrB,KAAK,YACL,KAAK,WAAW,QAAS,mCAA4B,EAElDhQ,GAIO,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAI+P,CAAG,EAC1B,KAAK,oBACLC,CACJ,CAGJ,OAASjS,EAAO,CAEZ,OAAIA,EAAM,OAAS,iBACX,KAAK,YACL,KAAK,WAAW,QAAS,kEAA2D,EAGpF,KAAK,YACL,KAAK,WAAW,OAAQ,yCAAgC,CAAE,QAASA,EAAM,OAAQ,CAAC,EAGnFiC,CACX,CACJ,CAMA,mBAAmBA,EAAM,CACrB,GAAI,CAAC,KAAK,iBAAiB,iBACvB,OAAOA,EAGX,GAAI,CACA,IAAMiQ,EAAejQ,EAAK,WACtBkQ,EAEA,KAAK,cAAc,iBAEnBA,EAAc,KAAK,MAAM,KAAK,OAAO,GAChC,KAAK,cAAc,WAAa,KAAK,cAAc,WAAa,EAAE,EACnE,KAAK,cAAc,WAGvBA,EAAc,KAAK,cAAc,WAIrC,IAAMC,EAAU,OAAO,gBAAgB,IAAI,WAAWD,CAAW,CAAC,EAG5DE,EAAa,IAAI,WAAWH,EAAeC,EAAc,CAAC,EAIhE,OADiB,IAAI,SAASE,EAAW,OAAQ,EAAG,CAAC,EAC5C,UAAU,EAAGH,EAAc,EAAK,EAGzCG,EAAW,IAAI,IAAI,WAAWpQ,CAAI,EAAG,CAAC,EAGtCoQ,EAAW,IAAID,EAAS,EAAIF,CAAY,EAEjCG,EAAW,MACtB,OAASrS,EAAO,CACZ,YAAK,WAAW,QAAS,gCAA4B,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAClGiC,CACX,CACJ,CAEA,oBAAoBA,EAAM,CACtB,GAAI,CAAC,KAAK,iBAAiB,iBACvB,OAAOA,EAGX,GAAI,CACA,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAGrC,GAAI8P,EAAU,OAAS,EACnB,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,kEAAwD,EAE7E9P,EAKX,IAAMiQ,EADW,IAAI,SAASH,EAAU,OAAQ,EAAG,CAAC,EACtB,UAAU,EAAG,EAAK,EAGhD,OAAIG,GAAgB,GAAKA,EAAeH,EAAU,OAAS,GACnD,KAAK,YACL,KAAK,WAAW,OAAQ,4DAAkD,EAEvE9P,GAIU8P,EAAU,MAAM,EAAG,EAAIG,CAAY,EAEpC,MACxB,OAASlS,EAAO,CACZ,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,wCAAoC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAE9GiC,CACX,CACJ,CAMA,4BAA6B,CACzB,GAAI,CAAC,KAAK,kBAAkB,SAAW,CAAC,KAAK,YAAY,EACrD,OAIJ,GAAI,KAAK,iBAAkB,CACvB,KAAK,WAAW,OAAQ,sDAA4C,EACpE,MACJ,CAEA,IAAMqQ,EAAkB,SAAY,CAChC,GAAI,CAAC,KAAK,YAAY,EAAG,CACrB,KAAK,0BAA0B,EAC/B,MACJ,CAEA,GAAI,CACA,IAAMC,EAAc,KAAK,oBAAoB,EAC7C,MAAM,KAAK,gBAAgBA,CAAW,EAGtC,IAAMC,EAAe,KAAK,kBAAkB,qBACxC,KAAK,yBAAyB,KAAK,kBAAkB,YAAa,KAAK,IAAI,KAAK,kBAAkB,YAAa,GAAK,CAAC,EACrH,KAAK,kBAAkB,YAGrBC,EAAe,KAAK,IAAID,EAAcjT,EAA4B,SAAS,yBAAyB,EAE1G,KAAK,iBAAmB,WAAW+S,EAAiBG,CAAY,CACpE,OAASzS,EAAO,CACR,KAAK,YACL,KAAK,WAAW,QAAS,yCAAqC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAEtH,KAAK,0BAA0B,CACnC,CACJ,EAIM0S,EAAWnT,EAA4B,SAAS,oBAChDoT,EAAW,KAAK,IAAI,KAAK,kBAAkB,YAAa,GAAK,EAC7DC,EAAe,KAAK,yBAAyBF,EAAUC,CAAQ,EACrE,KAAK,iBAAmB,WAAWL,EAAiBM,CAAY,CACpE,CAEA,2BAA4B,CACpB,KAAK,mBACL,aAAa,KAAK,gBAAgB,EAClC,KAAK,iBAAmB,KAEhC,CAEA,qBAAsB,CAClB,IAAMC,EAAe,KAAK,yBAAyB,EAAG,KAAK,kBAAkB,SAAS,OAAS,CAAC,EAC1FtL,EAAU,KAAK,kBAAkB,SAASsL,CAAY,EAEtDC,EAAO,KAAK,yBAAyB,KAAK,kBAAkB,QAAS,KAAK,kBAAkB,OAAO,EAEnGC,EAAW,OAAO,gBAAgB,IAAI,WAAWD,CAAI,CAAC,EAE5D,MAAO,CACH,KAAMvT,EAA4B,cAAc,KAChD,QAASgI,EACT,KAAM,MAAM,KAAKwL,CAAQ,EAAE,IAAI9S,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAC5E,UAAW,KAAK,IAAI,EACpB,KAAM6S,EACN,cAAe,GACf,OAAQ,yBACR,OAAQ,OAAO,gBAAgB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CACrE,CACJ,CAMI,kCAAmC,CACvB,KAAK,WAAW,QAAS,wEAAiE,EAGtG,KAAK,iBAAiB,oBAAsB,GAC5C,KAAK,iBAAiB,oBAAsB,GAC5C,KAAK,iBAAiB,sBAAwB,GAG9C,KAAK,iBAAiB,QAAU,GAChC,KAAK,yBAAyB,QAAU,GAGxC,KAAK,aAAa,MAAM,EAGxB,KAAK,4BAA4B,EAErB,KAAK,WAAW,OAAQ,6DAAwD,EAGvF,KAAK,2CACN,KAAK,yCAA2C,GAC5C,KAAK,WACL,KAAK,mBAAmB,wFAAkF,QAAQ,EAG9H,CAEA,MAAM,gBAAgBP,EAAa,CAC/B,GAAK,KAAK,oBAAoB,EAAK,EAInC,GAAI,CACA,KAAK,WAAW,QAAS,iCAA2B,CAChD,WAAY,CAAC,CAACA,EAAY,QAC1B,UAAWA,EAAY,KAAO,IAAM,QAAU,OAClD,CAAC,EAED,IAAMQ,EAAW,KAAK,UAAU,CAC5B,GAAGR,EACH,KAAMhT,EAA4B,cAAc,KAChD,cAAe,GACf,UAAW,KAAK,IAAI,CACxB,CAAC,EAEKyT,EAAa,IAAI,YAAY,EAAE,OAAOD,CAAQ,EAC9CE,EAAgB,MAAM,KAAK,oBAAoBD,EAAY,EAAI,EACrE,KAAK,YAAY,KAAKC,CAAa,EAEnC,KAAK,WAAW,QAAS,2CAAqC,CAC1D,QAASV,EAAY,OACzB,CAAC,CACL,OAASvS,EAAO,CACZ,KAAK,WAAW,QAAS,qCAAiC,CACtD,MAAOA,EAAM,OACjB,CAAC,CACL,CACJ,CAEJ,wBAAyB,CACjB,IAAM4K,EAAS,CACX,mBAAoB,KAAK,iBAAiB,eAC1C,yBAA0B,KAAK,kBAAkB,QACjD,YAAa,CAAC,CAAC,KAAK,iBACpB,SAAU,KAAK,kBAAkB,SACjC,UAAW,CACP,IAAK,KAAK,kBAAkB,YAC5B,IAAK,KAAK,kBAAkB,WAChC,CACJ,EAEA,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,gCAA0B,CAAE,OAAAA,CAAO,CAAC,EAEzDA,CACX,CACJ,6BAA8B,CAClB,KAAK,YACL,KAAK,WAAW,QAAS,4CAAqC,EAGlE,KAAK,iBAAiB,eAAiB,GACvC,KAAK,kBAAkB,QAAU,GACjC,KAAK,0BAA0B,EAE3B,KAAK,YACL,KAAK,WAAW,OAAQ,8BAAyB,EAIhD,KAAK,sCACN,KAAK,oCAAsC,GACvC,KAAK,WACL,KAAK,mBAAmB,4CAAsC,QAAQ,EAGlF,CACA,MAAM,iCAAiC3I,EAAMiR,EAAgB,GAAO,CACpE,GAAI,CACA,IAAIC,EAAgBlR,EAEpB,OAAIiR,GACI,KAAK,eAAiB,OAAOC,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAEjGA,IAIP,KAAK,iBAAiB,qBAAuB,KAAK,qBAAuBA,aAAyB,cAClGA,EAAgB,MAAM,KAAK,sBAAsBA,CAAa,GAI9D,KAAK,iBAAiB,qBAAuB,KAAK,kBAAkB,SAAWA,aAAyB,cACxGA,EAAgB,KAAK,sBAAsBA,CAAa,GAIxD,KAAK,iBAAiB,kBAAoBA,aAAyB,cACnEA,EAAgB,KAAK,mBAAmBA,CAAa,GAIrD,KAAK,iBAAiB,uBAAyBA,aAAyB,cACxEA,EAAgB,KAAK,wBAAwBA,CAAa,GAI1D,KAAK,eAAiB,OAAOA,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAGjGA,EAEX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,mDAA+C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACrHiC,CACX,CACJ,CAKI,MAAM,sBAAsBmR,EAAW,CACnC,GAAI,CACA,GAAI,CAAC,KAAK,eAAe,gBAErB,OAAO,KAAK,eAAeA,CAAS,EAGxC,IAAMC,EAAa,IAAI,WAAWD,CAAS,EAC3C,GAAIC,EAAW,OAAS,GAEpB,OAAO,KAAK,eAAeD,CAAS,EAIxC,IAAME,EAAa,IAAI,SAASD,EAAW,OAAQ,EAAG,EAAE,EAClDE,EAAYD,EAAW,UAAU,EAAG,EAAK,EACzCE,EAAaF,EAAW,UAAU,EAAG,EAAK,EAC1CG,EAAcH,EAAW,UAAU,EAAG,EAAK,EAC3CI,EAAYJ,EAAW,UAAU,GAAI,EAAK,EAG1CK,EAAQN,EAAW,MAAM,GAAI,GAAKK,CAAS,EAG5C,KAAK,WAAWH,CAAS,IAC1B,KAAK,WAAWA,CAAS,EAAI,CACzB,OAAQ,IAAI,MAAME,CAAW,EAC7B,SAAU,EACV,UAAW,KAAK,IAAI,CACxB,GAGJ,IAAMG,EAAgB,KAAK,WAAWL,CAAS,EAO/C,GANAK,EAAc,OAAOJ,CAAU,EAAIG,EACnCC,EAAc,WAEE,KAAK,WAAW,QAAS,4BAAqBJ,EAAa,CAAC,IAAIC,CAAW,gBAAgBF,CAAS,EAAE,EAGlHK,EAAc,WAAaH,EAAa,CAExC,IAAMI,EAAYD,EAAc,OAAO,OAAO,CAAC1K,EAAKyK,IAAUzK,EAAMyK,EAAM,OAAQ,CAAC,EAC7EG,EAAe,IAAI,WAAWD,CAAS,EAEzCE,EAAS,EACb,QAAWJ,KAASC,EAAc,OAC9BE,EAAa,IAAIH,EAAOI,CAAM,EAC9BA,GAAUJ,EAAM,OAIpB,MAAM,KAAK,eAAeG,EAAa,MAAM,EAG7C,OAAO,KAAK,WAAWP,CAAS,EAEhC,KAAK,WAAW,OAAQ,6BAAsBA,CAAS,4BAA4B,CACvF,CACJ,OAASvT,EAAO,CACZ,KAAK,WAAW,QAAS,4CAAwC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACzH,CACJ,CAMA,yBAA0B,CACtB,GAAI,GAAC,KAAK,mBAAmB,SAAW,CAAC,KAAK,gBAK9C,IAAI,KAAK,cAAc,KAAO,EAAG,CAC7B,KAAK,WAAW,OAAQ,8DAAoD,EAC5E,MACJ,CAEA,GAAI,CACA,IAAMgU,EAAmB,KAAK,IAC1B,KAAK,mBAAmB,iBACxB,KAAK,mBAAmB,kBAAkB,MAC9C,EAEA,QAAS1S,EAAI,EAAGA,EAAI0S,EAAkB1S,IAAK,CACvC,IAAMmD,EAAc,KAAK,mBAAmB,kBAAkBnD,CAAC,EACzD2S,EAAe,KAAK,eAAe,kBAAkBxP,EAAa,CACpE,QAAS,KAAK,OAAO,EAAI,GACzB,eAAgB,KAAK,MAAM,KAAK,OAAO,EAAI,CAAC,CAChD,CAAC,EAED,KAAK,kBAAkBwP,EAAcxP,CAAW,EAChD,KAAK,cAAc,IAAIA,EAAawP,CAAY,CACpD,CAEI,KAAK,YACL,KAAK,WAAW,OAAQ,yBAAkBD,CAAgB,iBAAiB,CAEnF,OAAShU,EAAO,CACR,KAAK,YACL,KAAK,WAAW,QAAS,8CAA0C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAE/H,EACJ,CAEA,kBAAkB4R,EAASnN,EAAa,CACpCmN,EAAQ,OAAS,IAAM,CACf,KAAK,YACL,KAAK,WAAW,QAAS,4BAAqBnN,CAAW,UAAU,EAEvE,KAAK,kBAAkBmN,EAASnN,CAAW,CAC/C,EAEAmN,EAAQ,UAAa/E,GAAU,CACvB,KAAK,YACL,KAAK,WAAW,QAAS,wCAAiCpI,CAAW,MAAMoI,EAAM,MAAM,QAAU,WAAW,QAAQ,CAE5H,EAEA+E,EAAQ,QAAU,IAAM,CAChB,KAAK,YACL,KAAK,WAAW,QAAS,4BAAqBnN,CAAW,UAAU,EAEvE,KAAK,iBAAiBA,CAAW,CACrC,EAEAmN,EAAQ,QAAW5R,GAAU,CACrB,KAAK,YACL,KAAK,WAAW,QAAS,yBAAoByE,CAAW,UAAW,CAAE,MAAOzE,EAAM,OAAQ,CAAC,CAEnG,CACJ,CAEA,kBAAkB4R,EAASnN,EAAa,CACpC,IAAMyP,EAAgB,SAAY,CAC9B,GAAItC,EAAQ,aAAe,OAI3B,GAAI,CACA,IAAMuC,EAAY,KAAK,kBAAkB1P,CAAW,EACpDmN,EAAQ,KAAKuC,CAAS,EAEtB,IAAMC,EAAW,KAAK,mBAAmB,qBACrC,KAAK,OAAO,EAAI,KAAQ,IACxB,IAEJ,KAAK,YAAY,IAAI3P,EAAa,WAAW,IAAMyP,EAAc,EAAGE,CAAQ,CAAC,CACjF,OAASpU,EAAO,CACR,KAAK,YACL,KAAK,WAAW,QAAS,wCAAmCyE,CAAW,IAAK,CAAE,MAAOzE,EAAM,OAAQ,CAAC,CAE5G,CACJ,EAEM4S,EAAe,KAAK,OAAO,EAAI,IAAQ,IAC7C,KAAK,YAAY,IAAInO,EAAa,WAAW,IAAMyP,EAAc,EAAGtB,CAAY,CAAC,CACrF,CAEA,iBAAiBnO,EAAa,CAC1B,IAAMlC,EAAQ,KAAK,YAAY,IAAIkC,CAAW,EAC1ClC,IACA,aAAaA,CAAK,EAClB,KAAK,YAAY,OAAOkC,CAAW,EAE3C,CAEA,kBAAkBA,EAAa,CAC3B,IAAM4P,EAAa,CACf,KAAQ,IAAM,KAAK,UAAU,CACzB,KAAM,OACN,UAAW,KAAK,IAAI,EACpB,SAAU,KAAK,MAAM,KAAK,OAAO,EAAI,GAAI,EACzC,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIpU,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,EACD,OAAU,IAAM,KAAK,UAAU,CAC3B,KAAM,SACN,OAAQ,CAAC,SAAU,OAAQ,MAAM,EAAE,KAAK,MAAM,KAAK,OAAO,EAAI,CAAC,CAAC,EAChE,OAAQ,KAAK,MAAM,KAAK,OAAO,EAAI,IAAI,EACvC,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIA,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,EACD,UAAa,IAAM,KAAK,UAAU,CAC9B,KAAM,YACN,UAAW,KAAK,IAAI,EACpB,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIA,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,EACD,QAAW,IAAM,KAAK,UAAU,CAC5B,KAAM,UACN,IAAK,KAAK,OAAO,EAAI,IACrB,OAAQ,KAAK,OAAO,EAAI,IACxB,QAAS,KAAK,OAAO,EAAI,IACzB,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIA,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,EACD,MAAS,IAAM,KAAK,UAAU,CAC1B,KAAM,QACN,MAAO,CAAC,OAAQ,OAAQ,OAAO,EAAE,KAAK,MAAM,KAAK,OAAO,EAAI,CAAC,CAAC,EAC9D,QAAS,gBACT,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIA,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,CACL,EAEA,OAAOoU,EAAW5P,CAAW,EAAI4P,EAAW5P,CAAW,EAAE,EACrD,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EAChD,IAAIxE,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC9D,CAMA,qBAAqBgC,EAAM,CACvB,GAAI,CAAC,KAAK,iBAAiB,QACvB,OAAOA,EAGX,GAAI,CACA,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BqS,EAAa,KAAK,iBAAiB,cAAgB,GAAK,EACxDC,EAAS,IAAI,YAAYD,CAAU,EACnChB,EAAa,IAAI,SAASiB,CAAM,EAGlC,KAAK,iBAAiB,oBACtBjB,EAAW,UAAU,EAAG,KAAK,iBAAkB,EAAK,EAIpD,KAAK,iBAAiB,eACtBA,EAAW,UAAU,EAAG,KAAK,IAAI,EAAG,EAAK,EAI7CA,EAAW,UAAU,KAAK,iBAAiB,cAAgB,EAAI,EAAGvB,EAAU,OAAQ,EAAK,EAGzF,IAAMhC,EAAS,IAAI,WAAWuE,EAAavC,EAAU,MAAM,EAC3D,OAAAhC,EAAO,IAAI,IAAI,WAAWwE,CAAM,EAAG,CAAC,EACpCxE,EAAO,IAAIgC,EAAWuC,CAAU,EAEzBvE,EAAO,MAClB,OAAS/P,EAAO,CACZ,YAAK,WAAW,QAAS,2CAAuC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAC7GiC,CACX,CACJ,CAEA,MAAM,uBAAuBA,EAAM,CACnC,GAAI,CAAC,KAAK,iBAAiB,QACvB,OAAO,KAAK,eAAeA,CAAI,EAGnC,GAAI,CACA,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BqS,EAAa,KAAK,iBAAiB,cAAgB,GAAK,EAE9D,GAAIvC,EAAU,OAASuC,EACnB,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,yEAA+D,EAEpF,KAAK,eAAerS,CAAI,EAGnC,IAAMqR,EAAa,IAAI,SAASvB,EAAU,OAAQ,EAAGuC,CAAU,EAC3DE,EAAW,EACXC,EAAY,EACZC,EAAW,EAYf,GAVI,KAAK,iBAAiB,qBACtBF,EAAWlB,EAAW,UAAU,EAAG,EAAK,GAGxC,KAAK,iBAAiB,gBACtBmB,EAAYnB,EAAW,UAAU,EAAG,EAAK,GAG7CoB,EAAWpB,EAAW,UAAU,KAAK,iBAAiB,cAAgB,EAAI,EAAG,EAAK,EAE9EoB,EAAW3C,EAAU,OAASuC,GAAcI,GAAY,EACxD,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,sEAA4D,EAEjF,KAAK,eAAezS,CAAI,EAGnC,IAAM0S,EAAa5C,EAAU,MAAMuC,EAAYA,EAAaI,CAAQ,EAEpE,GAAI,CACA,IAAME,EAAW,IAAI,YAAY,EAAE,OAAOD,CAAU,EAC9CE,EAAU,KAAK,MAAMD,CAAQ,EACnC,GAAIC,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GAAM,CACvD,KAAK,YACL,KAAK,WAAW,OAAQ,8CAAuCA,EAAQ,SAAW,SAAS,EAAE,EAEjG,MACJ,CACJ,MAAY,CAEZ,CAEA,KAAK,aAAa,IAAIL,EAAU,CAC5B,KAAMG,EAAW,OACjB,UAAWF,GAAa,KAAK,IAAI,CACrC,CAAC,EAED,MAAM,KAAK,sBAAsB,CAErC,OAASzU,EAAO,CACZ,YAAK,WAAW,QAAS,6CAAyC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAC/G,KAAK,eAAeiC,CAAI,CACnC,CACJ,CAMA,MAAM,uBAAwB,CAC1B,IAAM2C,EAAM,KAAK,IAAI,EACf9C,EAAU,KAAK,iBAAiB,eAEtC,OAAa,CACT,IAAMgT,EAAe,KAAK,sBAAwB,EAC5CC,EAAS,KAAK,aAAa,IAAID,CAAY,EAEjD,GAAKC,EAuBE,CACH,GAAI,CACA,IAAMH,EAAW,IAAI,YAAY,EAAE,OAAOG,EAAO,IAAI,EAC/CF,EAAU,KAAK,MAAMD,CAAQ,EACnC,GAAIC,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GAAM,CAC3D,KAAK,WAAW,OAAQ,4CAAqCA,EAAQ,SAAW,SAAS,EAAE,EAC3F,KAAK,aAAa,OAAOC,CAAY,EACrC,KAAK,sBAAwBA,EAC7B,QACJ,CACJ,MAAY,CACZ,CAEA,MAAM,KAAK,eAAeC,EAAO,IAAI,EACrC,KAAK,aAAa,OAAOD,CAAY,EACrC,KAAK,sBAAwBA,CACjC,KAvCa,CACT,IAAME,EAAe,KAAK,iBAAiB,EAC3C,GAAIA,GAAiBpQ,EAAMoQ,EAAa,UAAalT,EAAS,CAC1D,KAAK,WAAW,OAAQ,iFAAuE,EAE/F,GAAI,CACA,IAAM8S,EAAW,IAAI,YAAY,EAAE,OAAOI,EAAa,IAAI,EACrDH,EAAU,KAAK,MAAMD,CAAQ,EACnC,GAAIC,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GAAM,CAC3D,KAAK,WAAW,OAAQ,8CAAuCA,EAAQ,SAAW,SAAS,EAAE,EAC7F,KAAK,aAAa,OAAOG,EAAa,QAAQ,EAC9C,KAAK,sBAAwBA,EAAa,SAC1C,QACJ,CACJ,MAAY,CACZ,CAEA,MAAM,KAAK,eAAeA,EAAa,IAAI,EAC3C,KAAK,aAAa,OAAOA,EAAa,QAAQ,EAC9C,KAAK,sBAAwBA,EAAa,QAC9C,KACI,MAER,CAiBJ,CAEA,KAAK,kBAAkBpQ,EAAK9C,CAAO,CACvC,CAGI,kBAAmB,CACf,IAAImT,EAAS,KACb,OAAW,CAACT,EAAUO,CAAM,IAAK,KAAK,aAAa,QAAQ,GACnD,CAACE,GAAUF,EAAO,UAAYE,EAAO,aACrCA,EAAS,CAAE,SAAAT,EAAU,GAAGO,CAAO,GAGvC,OAAOE,CACX,CAEA,kBAAkBrQ,EAAK9C,EAAS,CAC5B,OAAW,CAAC0S,EAAUO,CAAM,IAAK,KAAK,aAAa,QAAQ,EAClDnQ,EAAMmQ,EAAO,UAAajT,IAC3B,KAAK,WAAW,OAAQ,oEAA8C,EACtE,KAAK,aAAa,OAAO0S,CAAQ,EAG7C,CAMA,wBAAwBvS,EAAM,CAC1B,GAAI,CAAC,KAAK,yBAAyB,QAC/B,OAAOA,EAGX,GAAI,CACA,IAAIkR,EAAgBlR,EAGpB,OAAI,KAAK,yBAAyB,WAC9BkR,EAAgB,KAAK,SAASA,CAAa,GAI3C,KAAK,yBAAyB,iBAC9BA,EAAgB,KAAK,cAAcA,CAAa,GAIhD,KAAK,yBAAyB,eAC9BA,EAAgB,KAAK,aAAaA,CAAa,GAI/C,KAAK,yBAAyB,mBAC9BA,EAAgB,KAAK,iBAAiBA,CAAa,GAGhDA,CACX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,qCAAiC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACvGiC,CACX,CACJ,CAEA,SAASA,EAAM,CACX,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BiT,EAAY,KAAK,yBAAyB,EAAG,EAAE,EAC/CC,EAAQ,OAAO,gBAAgB,IAAI,WAAWD,CAAS,CAAC,EAExDnF,EAAS,IAAI,WAAWgC,EAAU,OAASmD,CAAS,EAC1D,OAAAnF,EAAO,IAAIgC,EAAW,CAAC,EACvBhC,EAAO,IAAIoF,EAAOpD,EAAU,MAAM,EAE3BhC,EAAO,MAClB,CAEA,cAAc9N,EAAM,CAChB,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BmT,EAAY,KAAK,gBAAgB,cACjCC,EAAa,KAAK,MAAMtD,EAAU,OAASqD,CAAS,EAE1D,GAAIC,EAAatD,EAAU,OAAQ,CAE/B,IAAMK,EAAU,OAAO,gBAAgB,IAAI,WAAWiD,EAAatD,EAAU,MAAM,CAAC,EAC9EhC,EAAS,IAAI,WAAWsF,CAAU,EACxC,OAAAtF,EAAO,IAAIgC,EAAW,CAAC,EACvBhC,EAAO,IAAIqC,EAASL,EAAU,MAAM,EAC7BhC,EAAO,MAClB,SAAWsF,EAAatD,EAAU,OAE9B,OAAOA,EAAU,MAAM,EAAGsD,CAAU,EAAE,OAG1C,OAAOpT,CACX,CAEA,aAAaA,EAAM,CACf,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/B8N,EAAS,IAAI,WAAWgC,EAAU,MAAM,EAG9C,QAAS,EAAI,EAAG,EAAIA,EAAU,OAAQ,IAAK,CACvC,IAAMuD,EAAY,KAAK,gBAAgB,aAAa,EAAI,KAAK,gBAAgB,aAAa,MAAM,EAChGvF,EAAO,CAAC,EAAIgC,EAAU,CAAC,EAAIuD,CAC/B,CAEA,OAAOvF,EAAO,MAClB,CAEA,iBAAiB9N,EAAM,CACnB,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BsT,EAAc,KAAK,yBAAyB,EAAG,CAAC,EAClDC,EAAkB,EAGtB,QAASlU,EAAI,EAAGA,EAAIiU,EAAajU,IAC7BkU,GAAmB,EAAI,KAAK,yBAAyB,EAAG,EAAE,EAAI,EAGlE,IAAMzF,EAAS,IAAI,WAAWyF,EAAkBzD,EAAU,MAAM,EAC5DgC,EAAS,EAGb,QAASzS,EAAI,EAAGA,EAAIiU,EAAajU,IAAK,CAElC,IAAImU,EACJ,GACIA,EAAc,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,QACpDA,GAAe,IAAO,IAAM,KAAK,gBAAgB,iBAAiB,QAE3E,IAAMC,EAAa,KAAK,gBAAgB,iBAAiBD,EAAc,KAAK,gBAAgB,iBAAiB,MAAM,EAG/GnB,EACJ,GACIA,EAAa,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,QACnDA,GAAc,IAAO,IAAM,IAEpC,IAAMqB,EAAa,OAAO,gBAAgB,IAAI,WAAYrB,EAAa,GAAM,CAAC,CAAC,EAGzEhB,EAAa,IAAI,SAASvD,EAAO,OAAQgE,CAAM,EACrDT,EAAW,UAAU,EAAGqC,EAAW,OAAS,EAAG,EAAK,EACpDrC,EAAW,UAAU,EAAG,KAAK,WAAWoC,CAAU,EAAG,EAAK,EAE1D3F,EAAO,IAAI4F,EAAY5B,EAAS,CAAC,EAGjC,IAAM6B,EAAW,KAAK,kBAAkB7F,EAAO,MAAMgE,EAAQA,EAAS,EAAI4B,EAAW,MAAM,CAAC,EACvE,IAAI,SAAS5F,EAAO,OAAQgE,EAAS,EAAI4B,EAAW,MAAM,EAClE,UAAU,EAAGC,EAAU,EAAK,EAEzC7B,GAAU,EAAI4B,EAAW,OAAS,CACtC,CAGA,OAAA5F,EAAO,IAAIgC,EAAWgC,CAAM,EAErBhE,EAAO,MAClB,CAEA,WAAWzK,EAAK,CACZ,IAAIuQ,EAAO,EACX,QAASvU,EAAI,EAAGA,EAAIgE,EAAI,OAAQhE,IAAK,CACjC,IAAMqG,EAAOrC,EAAI,WAAWhE,CAAC,EAC7BuU,GAASA,GAAQ,GAAKA,EAAQlO,EAC9BkO,EAAOA,EAAOA,CAClB,CACA,OAAO,KAAK,IAAIA,CAAI,CACxB,CAEA,kBAAkB5T,EAAM,CACpB,IAAI2T,EAAW,EACf,QAAStU,EAAI,EAAGA,EAAIW,EAAK,OAAQX,IAC7BsU,EAAYA,EAAW3T,EAAKX,CAAC,EAAK,WAEtC,OAAOsU,CACX,CAMA,MAAM,qBAAqB3T,EAAM,CACjC,GAAI,CACA,IAAM2I,EAAS,KAAK,kBAAkB,EAStC,GARI,KAAK,YACL,KAAK,WAAW,QAAS,yCAAkCA,EAAO,KAAK,IAAK,CACxE,SAAU,OAAO3I,EACjB,WAAYA,GAAM,QAAUA,GAAM,YAAc,EAChD,eAAgB2I,EAAO,mBAC3B,CAAC,EAGD,CAAC3I,EACD,YAAK,WAAW,OAAQ,kCAAwB,EACzC,KAGX,IAAIkR,EAAgBlR,EAGpB,GAAI,OAAOA,GAAS,SAChB,GAAI,CACA,IAAM6T,EAAW,KAAK,MAAM7T,CAAI,EAGhC,GAAI6T,EAAS,OAAS,OAClB,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,wCAAiCA,EAAS,OAAO,WAAWA,EAAS,IAAI,GAAG,EAElG,wBAIX,GAAIA,EAAS,MAAQ,CAAC,YAAa,eAAgB,wBAAyB,kBAAmB,sBAAuB,qBAAsB,mBAAoB,oBAAqB,qBAAsB,qBAAqB,EAAE,SAASA,EAAS,IAAI,EACpP,MAAO,0BAIX,GAAIA,EAAS,MAAQ,CAAC,sBAAuB,yBAA0B,aAAc,qBAAsB,yBAA0B,qBAAqB,EAAE,SAASA,EAAS,IAAI,EAC9K,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,+DAAyD,CAAE,KAAMA,EAAS,IAAK,CAAC,EAEtG,wBAIX,GAAIA,EAAS,OAAS,UAClB,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,sDAAgD,CAAE,KAAMA,EAAS,IAAK,CAAC,EAE7FA,EAAS,KAIpB,GAAIA,EAAS,OAAS,oBAAsBA,EAAS,KAAM,CAKvD,GAJI,KAAK,YACL,KAAK,WAAW,QAAS,oDAA6C,EAGtE,CAAC,KAAK,eAAiB,CAAC,KAAK,QAAU,CAAC,KAAK,YAC7C,YAAK,WAAW,QAAS,gCAA2B,EAC7C,KAGX,IAAMC,EAAkB,MAAM,OAAO,0BAA0B,eAC3DD,EAAS,KACT,KAAK,cACL,KAAK,OACL,KAAK,WACT,EAEI,KAAK,aACL,KAAK,WAAW,QAAS,kDAA6C,EACtE,KAAK,WAAW,QAAS,4BAAsB,CAC3C,KAAM,OAAOC,EACb,WAAY,CAAC,CAACA,GAAiB,QAC/B,YAAa,OAAOA,GAAiB,QACrC,cAAeA,GAAiB,SAAS,QAAU,EACnD,cAAeA,GAAiB,SAAS,UAAU,EAAG,EAAE,GAAK,YACjE,CAAC,GAIL,GAAI,CACA,IAAMC,EAAmB,KAAK,MAAMD,EAAgB,OAAO,EAC3D,GAAIC,EAAiB,OAAS,QAAUA,EAAiB,gBAAkB,GACvE,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,8CAAuCA,EAAiB,SAAW,SAAS,EAAE,EAEnG,uBAEf,MAAY,CACJ,KAAK,YACL,KAAK,WAAW,QAAS,yEAAkE,CAEnG,CAEA,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,wCAAkC,CAAE,QAASD,EAAgB,SAAS,UAAU,EAAG,EAAE,CAAE,CAAC,EAE9GA,EAAgB,OAC3B,CAGA,GAAID,EAAS,OAAS,WAAaA,EAAS,KACxC,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,qDAA8C,EAEpEA,EAAS,KAIpB,GAAIA,EAAS,OAAS,UAClB,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,2DAAoD,EAE1E7T,EAIX,GAAI,CAAC6T,EAAS,MAASA,EAAS,OAAS,QAAU,CAAC,CAAC,YAAa,eAAgB,wBAAyB,kBAAmB,sBAAuB,qBAAsB,mBAAoB,mBAAoB,oBAAqB,qBAAsB,sBAAuB,sBAAuB,yBAA0B,aAAc,qBAAsB,yBAA0B,qBAAqB,EAAE,SAASA,EAAS,IAAI,EAC7a,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,2DAAoD,EAE1E7T,CAEf,MAAY,CACR,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,4CAAqC,EAG3DA,CACX,CAIJ,GAAI,KAAK,eAAiB,OAAOkR,GAAkB,UAAYA,EAAc,OAAS,GAClF,GAAI,CAEA,GADoB,oBACJ,KAAKA,EAAc,KAAK,CAAC,IACjC,KAAK,YACL,KAAK,WAAW,QAAS,2CAAoC,EAEjEA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,EAChG,KAAK,YACL,KAAK,WAAW,QAAS,uCAAkC,EAI3D,OAAOA,GAAkB,UAAU,CACnC,GAAI,CACA,IAAM8C,EAAgB,KAAK,MAAM9C,CAAa,EAC9C,GAAI8C,EAAc,OAAS,QAAUA,EAAc,gBAAkB,GACjE,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,2CAAoCA,EAAc,SAAW,SAAS,EAAE,EAE7F,uBAEf,MAAY,CAEZ,CACA9C,EAAgB,IAAI,YAAY,EAAE,OAAOA,CAAa,EAAE,MAC5D,CAER,OAASnT,EAAO,CACZ,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,2CAAkC,CAAE,QAASA,EAAM,OAAQ,CAAC,EAEjFiC,CACX,CAGJ,GAAI,KAAK,iBAAiB,qBACtB,KAAK,qBACLkR,aAAyB,aACzBA,EAAc,WAAa,GAE3B,GAAI,CAGA,GAFAA,EAAgB,MAAM,KAAK,uBAAuBA,CAAa,EAE3DA,aAAyB,YACzB,GAAI,CACA,IAAMyB,EAAW,IAAI,YAAY,EAAE,OAAOzB,CAAa,EACjD+C,EAAgB,KAAK,MAAMtB,CAAQ,EACzC,GAAIsB,EAAc,OAAS,QAAUA,EAAc,gBAAkB,GACjE,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,2CAAoCA,EAAc,SAAW,SAAS,EAAE,EAE7F,uBAEf,MAAY,CAEZ,CAER,OAASlW,EAAO,CACR,KAAK,YACL,KAAK,WAAW,OAAQ,+DAAsD,CAAE,QAASA,EAAM,OAAQ,CAAC,CAEhH,CAGJ,GAAI,KAAK,iBAAiB,qBACtB,KAAK,iBAAiB,SACtBmT,aAAyB,YACzB,GAAI,CACA,IAAMmB,EAAa,KAAK,iBAAiB,cAAgB,GAAK,EAC9D,GAAInB,EAAc,WAAamB,EAC3B,OAAO,MAAM,KAAK,uBAAuBnB,CAAa,CAE9D,OAASnT,EAAO,CACR,KAAK,YACL,KAAK,WAAW,OAAQ,uEAA8D,CAAE,QAASA,EAAM,OAAQ,CAAC,CAExH,CAIJ,GAAI,KAAK,iBAAiB,kBAAoBmT,aAAyB,YACnE,GAAI,CACAA,EAAgB,KAAK,oBAAoBA,CAAa,CAC1D,OAASnT,EAAO,CACR,KAAK,YACL,KAAK,WAAW,OAAQ,uCAA8B,CAAE,QAASA,EAAM,OAAQ,CAAC,CAExF,CAIJ,GAAI,KAAK,iBAAiB,uBAAyBmT,aAAyB,YACxE,GAAI,CACAA,EAAgB,KAAK,yBAAyBA,CAAa,CAC/D,OAASnT,EAAO,CACR,KAAK,YACL,KAAK,WAAW,OAAQ,mDAA0C,CAAE,QAASA,EAAM,OAAQ,CAAC,CAEpG,CAQJ,GAJImT,aAAyB,cACzBA,EAAgB,IAAI,YAAY,EAAE,OAAOA,CAAa,GAGtD,OAAOA,GAAkB,SACzB,GAAI,CACA,IAAMgD,EAAe,KAAK,MAAMhD,CAAa,EAC7C,GAAIgD,EAAa,OAAS,QAAUA,EAAa,gBAAkB,GAC/D,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,gDAAyCA,EAAa,SAAW,SAAS,EAAE,EAEjG,uBAEf,MAAY,CACZ,CAGJ,OAAOhD,CAEX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,iDAA6C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACnHiC,CACX,CACJ,CAEI,yBAAyBA,EAAM,CAG3B,OAAOA,CACX,CAEA,MAAM,oBAAoBA,EAAMiR,EAAgB,GAAO,CACnD,GAAI,CACA,IAAIC,EAAgBlR,EAEpB,OAAIiR,GACI,KAAK,eAAiB,OAAOC,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAEjGA,IAGP,KAAK,iBAAiB,qBAAuB,KAAK,qBAAuBA,aAAyB,cAClGA,EAAgB,MAAM,KAAK,sBAAsBA,CAAa,GAG9D,KAAK,iBAAiB,qBAAuB,KAAK,kBAAkB,SAAWA,aAAyB,cACxGA,EAAgB,KAAK,sBAAsBA,CAAa,GAGxD,KAAK,iBAAiB,kBAAoBA,aAAyB,cACnEA,EAAgB,KAAK,mBAAmBA,CAAa,GAGrD,KAAK,iBAAiB,uBAAyBA,aAAyB,cACxEA,EAAgB,KAAK,wBAAwBA,CAAa,GAG1D,KAAK,eAAiB,OAAOA,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAGjGA,EAEX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,uCAAmC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACzGiC,CACX,CACJ,CAQA,qBAAqBqP,EAAM,CACvB,GAAI,CAACA,GAAQ,OAAOA,GAAS,SAAU,OAAO,KAC9C,IAAM8E,EAAM,CAAC,EAMb,GALI,OAAO9E,EAAK,KAAQ,UAAYA,EAAK,IAAI,OAAS,GAAKA,EAAK,IAAI,QAAU,KAC1E8E,EAAI,IAAM9E,EAAK,IAAI,QAAQ,kBAAmB,EAAE,EAAE,MAAM,EAAG,EAAE,GAE7DA,EAAK,OAAS,KAAM8E,EAAI,KAAO,IAC/B9E,EAAK,OAAS,KAAM8E,EAAI,KAAO,IAC/B,OAAO,SAAS9E,EAAK,OAAO,EAAG,CAE/B,IAAM+E,EAAU,KAAK,MAAM/E,EAAK,OAAO,EACnC+E,GAAW,GAAKA,GAAW,OAAMD,EAAI,QAAUC,EACvD,CACA,GAAI,OAAO,SAAS/E,EAAK,GAAG,EAAG,CAE3B,IAAMgF,EAAM,KAAK,MAAMhF,EAAK,GAAG,EAC3BgF,GAAO,GAAKA,GAAO,QAAOF,EAAI,IAAME,EAC5C,CACA,OAAO,OAAO,KAAKF,CAAG,EAAE,OAASA,EAAM,IAC3C,CAUA,kBAAkB7C,EAAW,CACzB,OAAI,OAAOA,GAAc,UAAY,CAACA,EAAkB,GACjD,KAAK,kBAAkB,CAC1B,KAAMhU,EAA4B,cAAc,eAChD,UAAWgU,EAAU,MAAM,EAAG,EAAE,CACpC,CAAC,CACL,CASA,oBAAoBA,EAAW,CAC3B,OAAI,OAAOA,GAAc,UAAY,CAACA,EAAkB,GACjD,KAAK,kBAAkB,CAC1B,KAAMhU,EAA4B,cAAc,gBAChD,UAAWgU,EAAU,MAAM,EAAG,EAAE,CACpC,CAAC,CACL,CAEA,MAAM,YAAYtR,EAAMqP,EAAO,KAAM,CAEjC,IAAMiF,EAAa,KAAK,mBAAmBtU,EAAM,aAAa,EAC9D,GAAI,CAACsU,EAAW,QAAS,CACrB,IAAMpM,EAAe,4BAA4BoM,EAAW,OAAO,KAAK,IAAI,CAAC,GAC7E,WAAK,WAAW,QAAS,gDAA4C,CACjE,OAAQA,EAAW,OACnB,SAAU,OAAOtU,EACjB,WAAYA,GAAM,QAAUA,GAAM,YAAc,CACpD,CAAC,EACK,IAAI,MAAMkI,CAAY,CAChC,CAGA,GAAI,CAAC,KAAK,gBAAgB,aAAa,EACnC,MAAM,IAAI,MAAM,yCAAyC,EAO7D,GAHA,KAAK,yBAAyB,aAAa,EAGvC,CAAC,KAAK,aAAe,KAAK,YAAY,aAAe,OACrD,MAAM,IAAI,MAAM,wBAAwB,EAG5C,GAAI,CAuBA,GArBM,KAAK,eAAiB,KAAK,QAAU,KAAK,aAC5C,MAAM,KAAK,+BAA+B,EAG9C,KAAK,WAAW,QAAS,qBAAsB,CAC3C,eAAgB,CAAC,CAAC,KAAK,YACvB,iBAAkB,KAAK,aAAa,aAAe,OACnD,YAAa,KAAK,YAClB,WAAY,KAAK,WACjB,gBAAiB,KAAK,gBAAgB,kBAAoB,WAC9D,CAAC,EAED,KAAK,WAAW,QAAS,8BAAwB,CAC7C,SAAU,OAAOoM,EAAW,cAC5B,SAAU,OAAOA,EAAW,eAAkB,SAC9C,cAAeA,EAAW,yBAAyB,YACnD,WAAYA,EAAW,eAAe,QAAUA,EAAW,eAAe,YAAc,CAC5F,CAAC,EAIG,OAAOA,EAAW,eAAkB,SACpC,GAAI,CACA,IAAMtI,EAAS,KAAK,MAAMsI,EAAW,aAAa,EAElD,GAAItI,EAAO,MAAQA,EAAO,KAAK,WAAW,OAAO,EAAG,CAChD,KAAK,WAAW,QAAS,sEAAgE,CAAE,KAAMA,EAAO,IAAK,CAAC,EAG9G,IAAM5N,EAAM,KAAK,sBAAsB4N,EAAO,KAAMA,EAAO,IAAI,EAGzDgE,EAAgB,MAAM,KAAK,oBAAoBsE,EAAW,cAAelW,CAAG,EAElF,YAAK,YAAY,KAAK4R,CAAa,EAC5B,EACX,CACJ,MAAoB,CAEpB,CAIJ,GAAI,OAAOsE,EAAW,eAAkB,SAAU,CAE9C,GAAI,OAAO,KAAK,mBAAsB,WAClC,MAAM,IAAI,MAAM,kFAAkF,EAItG,IAAMlW,EAAM,KAAK,kBAAkB,UAAW,CAAE,QAASkW,EAAW,aAAc,CAAC,EAE7EC,EAAW,CACb,KAAM,UACN,KAAMD,EAAW,cACjB,UAAW,KAAK,IAAI,EACpB,IAAKlW,CACT,EAIA,OAAIiR,GAAQ,OAAOA,GAAS,WACxBkF,EAAS,KAAO,KAAK,qBAAqBlF,CAAI,GAG3C,MAAM,KAAK,kBAAkBkF,CAAQ,CAChD,CAGA,KAAK,WAAW,QAAS,uDAAgD,EACzE,IAAMC,EAAc,MAAM,KAAK,qCAAqCF,EAAW,cAAe,EAAK,EACnG,YAAK,YAAY,KAAKE,CAAW,EAE1B,EACX,OAASzW,EAAO,CACZ,WAAK,WAAW,QAAS,gCAA4B,CACjD,MAAOA,EAAM,QACb,UAAWA,EAAM,YAAY,IACjC,CAAC,EACKA,CACV,CACJ,CAGA,MAAM,qCAAqCiC,EAAMiR,EAAgB,GAAO,CAExE,OAAO,KAAK,WAAW,kBAAmB,MAAOwD,GAAgB,CAC7D,GAAI,CACA,IAAIvD,EAAgBlR,EAEpB,OAAIiR,GACI,KAAK,eAAiB,OAAOC,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAEjGA,IAGP,KAAK,iBAAiB,qBAAuB,KAAK,qBAAuBA,aAAyB,cAClGA,EAAgB,MAAM,KAAK,sBAAsBA,CAAa,GAG9D,KAAK,iBAAiB,qBAAuB,KAAK,kBAAkB,SAAWA,aAAyB,cACxGA,EAAgB,KAAK,sBAAsBA,CAAa,GAGxD,KAAK,iBAAiB,kBAAoBA,aAAyB,cACnEA,EAAgB,KAAK,mBAAmBA,CAAa,GAGrD,KAAK,iBAAiB,uBAAyBA,aAAyB,cACxEA,EAAgB,KAAK,wBAAwBA,CAAa,GAG1D,KAAK,eAAiB,OAAOA,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAGjGA,EAEX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,uCAAmC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACzGiC,CACX,CACJ,EAAG,GAAI,CACX,CAEI,MAAM,kBAAkB9B,EAAa,CAWjC,GAR8BA,EAAY,OAAS,wBACtBA,EAAY,OAAS,yBACrBA,EAAY,OAAS,yBAG9C,KAAK,yBAAyB,oBAAqB,EAAK,EAGxD,CAAC,KAAK,aAAe,KAAK,YAAY,aAAe,OACrD,YAAK,WAAW,OAAQ,kEAAwD,EACzE,GAGX,GAAI,CACA,IAAMwW,EAAgB,KAAK,UAAU,CACjC,KAAMxW,EAAY,KAClB,KAAMA,EACN,UAAW,KAAK,IAAI,CACxB,CAAC,EAED,YAAK,WAAW,QAAS,mCAA6B,CAAE,KAAMA,EAAY,IAAK,CAAC,EAChF,KAAK,YAAY,KAAKwW,CAAa,EAC5B,EACX,OAAS3W,EAAO,CACZ,YAAK,WAAW,QAAS,wCAAoC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAC1G,EACX,CACJ,CAGJ,MAAM,eAAeiC,EAAM,CACvB,GAAI,CAWA,GARA,KAAK,uBAAuB,EAC5B,KAAK,WAAW,QAAS,kCAAyB,CAC9C,SAAU,OAAOA,EACjB,cAAeA,aAAgB,YAC/B,QAAS,CAAC,EAAEA,GAAM,QAAUA,GAAM,WACtC,CAAC,EAGG,OAAOA,GAAS,SAChB,GAAI,CACA,IAAMgM,EAAS,KAAK,MAAMhM,CAAI,EAMxB2U,EAAmB,CACrB,sBACA,yBACA,aACA,qBACA,yBACA,qBACJ,EAGA,GAAI3I,EAAO,OAAS,yBAA0B,CAC1C,KAAK,WAAW,QAAS,6DAAsD,EAE/E,GAAI,CAEA,GAAM,CAAE,cAAA4I,EAAe,IAAAxW,CAAI,EAAI,MAAM,KAAK,oBAAoB4B,CAAI,EAG5D6U,EAAkB,KAAK,MAAMD,CAAa,EAQhD,GANA,KAAK,WAAW,QAAS,gDAA0C,CAC/D,KAAMC,EAAgB,KACtB,eAAgBzW,EAAI,WACxB,CAAC,EAGG,KAAK,oBAAsB,OAAO,KAAK,mBAAmB,mBAAsB,WAAY,CAC5F,MAAM,KAAK,mBAAmB,kBAAkByW,CAAe,EAC/D,MACJ,CACJ,OAAS9W,EAAO,CACZ,KAAK,WAAW,QAAS,wCAAoC,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACrF,MACJ,CACJ,CAGA,GAAIiO,EAAO,MAAQ2I,EAAiB,SAAS3I,EAAO,IAAI,EAAG,CACvD,KAAK,WAAW,OAAQ,yFAAgF,CAAE,KAAMA,EAAO,IAAK,CAAC,EAG7H,KAAK,WAAW,QAAS,wDAAoD,CAAE,KAAMA,EAAO,IAAK,CAAC,EAClG,MACJ,CAMA,GAAIA,EAAO,OAAS,mBAAoB,CAEpC,GADA,KAAK,WAAW,QAAS,uDAAgD,EACrE,CAAC,KAAK,uBAAuB,iCAAiC,EAC9D,OAGJ,GAAI,CAEA,IAAM4I,EAAgB,MAAM,OAAO,0BAA0B,eACzD5I,EAAO,KACP,KAAK,cACL,KAAK,OACL,KAAK,WACT,EAGM6I,EAAkB,KAAK,MAAMD,EAAc,IAAI,EAGrD,GAAIA,EAAc,UAAYA,EAAc,SAAS,iBAAmB,QAChE,CAAC,KAAK,gCAAgCA,EAAc,SAAS,eAAgB,kBAAkB,EAAG,CAClG,KAAK,WAAW,OAAQ,2FAAkF,CACtG,SAAUA,EAAc,SAAS,eACjC,SAAU,KAAK,sBACnB,CAAC,EACD,MACJ,CAIAC,EAAgB,OAAS,WAAa,KAAK,WAAaA,EAAgB,MACxE,KAAK,mBAAmBA,EAAgB,KAAM,WAAYA,EAAgB,IAAI,EAGlF,MACJ,OAAS9W,EAAO,CACZ,KAAK,WAAW,QAAS,4CAAwC,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACzF,MACJ,CACJ,CAeA,GAAIiO,EAAO,OAAS1O,EAA4B,cAAc,QAAS,CACnE,KAAK,WAAW,QAAS,+CAAgD,CACrE,YAAa,SACjB,CAAC,EACD,MACJ,CAEA,GAAI0O,EAAO,MACP1O,EAA4B,gCAAgC,IAAI0O,EAAO,IAAI,EAAG,CAC9E,GAAI,CAAC,KAAK,yBAAyB,wBAAyB,EAAK,EAAG,CAChE,KAAK,WAAW,QAAS,qDAAsD,CAC3E,YAAaA,EAAO,IACxB,CAAC,EACD,MACJ,CAEA,IAAMC,EAAI3O,EAA4B,cAEtC,GAAI0O,EAAO,OAASC,EAAE,eAAgB,CAClC,IAAMqF,EAAYtF,GAAQ,MAAM,WAAaA,GAAQ,UACrD,GAAI,OAAOsF,GAAc,UAAYA,EACjC,GAAI,CAAE,KAAK,kBAAkBA,EAAU,MAAM,EAAG,EAAE,CAAC,CAAG,MAAY,CAAC,CAEvE,MACJ,CAEA,GAAItF,EAAO,OAASC,EAAE,gBAAiB,CACnC,IAAMqF,EAAYtF,GAAQ,MAAM,WAAaA,GAAQ,UACrD,GAAI,OAAOsF,GAAc,UAAYA,EACjC,GAAI,CAAE,KAAK,qBAAqBA,EAAU,MAAM,EAAG,EAAE,CAAC,CAAG,MAAY,CAAC,CAE1E,MACJ,CAEA,GAAI,CAACrF,EAAE,WAAYA,EAAE,YAAaA,EAAE,SAC/BA,EAAE,aAAcA,EAAE,QAAQ,EAAE,SAASD,EAAO,IAAI,EAAG,CACpD,GAAI,CAAE,MAAM,KAAK,kBAAkBA,EAAO,KAAMA,EAAO,MAAQ,CAAC,CAAC,CAAG,OAASlM,EAAG,CAC5E,KAAK,WAAW,QAAS,qCAAiC,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CACjG,CACA,MACJ,CAEA,GAAI,CAACmM,EAAE,kBAAmBA,EAAE,mBACvBA,EAAE,mBAAmB,EAAE,SAASD,EAAO,IAAI,EAAG,CAC/C,GAAI,CAAE,MAAM,KAAK,wBAAwBA,EAAO,KAAMA,EAAO,MAAQ,CAAC,CAAC,CAAG,OAASlM,EAAG,CAClF,KAAK,WAAW,QAAS,4CAAwC,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CACxG,CACA,MACJ,CAEA,MACJ,CAMA,GAAIkM,EAAO,MAAQ,CAAC,YAAa,eAAgB,wBAAyB,yBAA0B,8BAA+B,kBAAmB,kBAAkB,EAAE,SAASA,EAAO,IAAI,EAAG,CAC7L,KAAK,oBAAoBA,CAAM,EAC/B,MACJ,CAMA,GAAIA,EAAO,OAAS,OAAQ,CACxB,KAAK,WAAW,OAAQ,mDAA6C,CAAE,QAASA,EAAO,OAAQ,CAAC,EAChG,MACJ,CAEJ,MAAoB,CAIhB,KAAK,WAAW,QAAS,wDAAyD,CAC9E,WAAY,OAAOhM,GAAS,SAAWA,EAAK,OAAS,CACzD,CAAC,EACD,MACJ,CAQJ,IAAM8U,EAAe,MAAM,KAAK,sCAAsC9U,CAAI,EAG1E,GAAI8U,IAAiB,yBACjBA,IAAiB,yBACjBA,IAAiB,0BACjB,OAGJ,GAAI,CAACA,EAAc,CACf,KAAK,WAAW,OAAQ,yDAA+C,EACvE,MACJ,CAGA,IAAIC,EAEJ,GAAI,OAAOD,GAAiB,SACxB,GAAI,CACA,IAAM/S,EAAU,KAAK,MAAM+S,CAAY,EAGvC,GAAI/S,EAAQ,MAAQ,iBAAiB,SAASA,EAAQ,IAAI,EAAG,CACzD,KAAK,WAAW,QAAS,mDAA6C,CAAE,KAAMA,EAAQ,IAAK,CAAC,EACxF,KAAK,oBACL,MAAM,KAAK,mBAAmB,kBAAkBA,CAAO,EAE3D,MACJ,CAEA,GAAIA,EAAQ,MAAQ,CAAC,YAAa,eAAgB,wBAAyB,yBAA0B,8BAA+B,kBAAmB,kBAAkB,EAAE,SAASA,EAAQ,IAAI,EAAG,CAC/L,KAAK,oBAAoBA,CAAO,EAChC,MACJ,CAEA,GAAIA,EAAQ,OAAS,OAAQ,CACzB,KAAK,WAAW,OAAQ,mDAA4CA,EAAQ,OAAO,EAAE,EACrF,MACJ,CAGIA,EAAQ,OAAS,WAAaA,EAAQ,KACtCgT,EAAchT,EAAQ,KAEtBgT,EAAcD,CAEtB,MAAY,CACRC,EAAcD,CAClB,SACOA,aAAwB,YAC/BC,EAAc,IAAI,YAAY,EAAE,OAAOD,CAAY,UAC5CA,GAAgB,OAAOA,GAAiB,UAAYA,EAAa,QACxEC,EAAcD,EAAa,YACxB,CACH,KAAK,WAAW,OAAQ,sDAA6C,CAAE,QAAS,OAAOA,CAAa,CAAC,EACrG,MACJ,CAGA,GAAIC,GAAeA,EAAY,KAAK,EAAE,WAAW,GAAG,EAChD,GAAI,CACA,IAAMC,EAAa,KAAK,MAAMD,CAAW,EACzC,GAAIC,EAAW,OAAS,OAAQ,CAC5B,KAAK,WAAW,OAAQ,+CAAwCA,EAAW,OAAO,EAAE,EACpF,MACJ,CAGA,IAAMC,EAAe,CACjB,sBAAuB,yBAA0B,aACjD,qBAAsB,yBAA0B,sBAChD,YAAa,eAAgB,wBAC7B,kBAAmB,sBAAuB,qBAAsB,mBAChE,oBAAqB,qBAAsB,qBAC/C,EAEA,GAAID,EAAW,MAAQC,EAAa,SAASD,EAAW,IAAI,EAAG,CAC3D,KAAK,WAAW,OAAQ,sDAA+CA,EAAW,IAAI,EAAE,EACxF,MACJ,CACJ,MAAY,CAEZ,CASAD,GACA,KAAK,WAAW,QAAS,gEAAiE,CACtF,cAAe,OAAOA,GAAgB,SAAWA,EAAY,OAAS,CAC1E,CAAC,CAGT,OAAShX,EAAO,CACZ,KAAK,WAAW,QAAS,oCAAgC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACjH,CACJ,CAGI,MAAM,sCAAsCiC,EAAM,CAE9C,OAAO,KAAK,WAAW,kBAAmB,MAAOyU,GAAgB,CAC7D,KAAK,WAAW,QAAS,yDAAmD,CACxE,YAAaA,EACb,SAAU,OAAOzU,CACrB,CAAC,EAED,GAAI,CAGA,OADqB,MAAM,KAAK,qBAAqBA,CAAI,CAG7D,OAASjC,EAAO,CACZ,YAAK,WAAW,QAAS,yCAAqC,CAC1D,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACMiC,CACX,CACJ,EAAG,GAAI,CACX,CAEI,sBAAuB,CACnB,GAAI,CACA,KAAK,WAAW,QAAS,kDAA4C,CAC7D,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,QAAS,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,aACtD,mBAAoB,CAAC,CAAC,KAAK,uBAC/B,CAAC,EAGL,KAAK,oBAAoB,IAAI,YAAY,yBAA0B,CAC/D,OAAQ,CACJ,UAAW,KAAK,IAAI,EACpB,QAAS,SACT,cAAe,KACf,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,QAAS,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,aACtD,gBAAiB,KAAK,uBAC1B,CACJ,CAAC,CAAC,EAGF,WAAW,IAAM,CAKjB,EAAG,GAAG,EAGF,KAAK,yBACL,KAAK,oBAAoB,IAAI,YAAY,2BAA4B,CACjE,OAAQ,CACJ,aAAc,KAAK,wBACnB,cAAe,KACf,UAAW,KAAK,IAAI,CACxB,CACJ,CAAC,CAAC,CAGV,OAASjC,EAAO,CACZ,KAAK,WAAW,QAAS,uCAAmC,CACpD,MAAOA,EAAM,OACjB,CAAC,CACT,CACJ,CAEA,oBAAoBgE,EAAS,CAGzB,OAFA,KAAK,WAAW,QAAS,qCAA+B,CAAE,KAAMA,EAAQ,IAAK,CAAC,EAEtEA,EAAQ,KAAM,CAClB,IAAK,YACD,KAAK,gBAAgBA,CAAO,EAC5B,MACJ,IAAK,eACD,KAAK,0BAA0BA,EAAQ,IAAI,EAC3C,MACJ,IAAK,wBACD,KAAK,2BAA2BA,EAAQ,IAAI,EAC5C,MACJ,IAAK,WACD,KAAK,cAAcA,EAAQ,IAAI,EAC/B,MACJ,IAAK,yBACD,KAAK,4BAA4BA,EAAQ,IAAI,EAC7C,MACJ,IAAK,8BACD,KAAK,gCAAgCA,EAAQ,IAAI,EACjD,MACJ,IAAK,kBACD,KAAK,iCAAiCA,CAAO,EAC7C,MACJ,IAAK,sBACD,KAAK,WAAW,QAAS,gEAAyD,EAClF,MACJ,IAAK,qBACD,KAAK,WAAW,QAAS,sEAA+D,EACxF,MACJ,IAAK,mBACD,KAAK,WAAW,QAAS,oDAA8C,CAAE,KAAMA,EAAQ,IAAK,CAAC,EAG7F,MACJ,QACI,KAAK,WAAW,QAAS,yCAAmC,CAAE,KAAMA,EAAQ,IAAK,CAAC,CAC1F,CACJ,CAOA,sBAAuB,CACnB,KAAK,oBAAoB,sBACzB,KAAK,iBAAiB,oBAAsB,GAC5C,KAAK,iBAAiB,QAAU,IAGhC,KAAK,oBAAoB,wBACzB,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,yBAAyB,QAAU,GAExC,KAAK,yBAAyB,eAAiB,GAC/C,KAAK,yBAAyB,aAAe,GAC7C,KAAK,yBAAyB,iBAAmB,IAGrD,KAAK,sBAAsB,CAAC,EAC5B,WAAW,IAAM,CACb,KAAK,gCAAgC,CACzC,EAAG,GAAG,CACV,CAGI,sBAAuB,CACnB,KAAK,WAAW,OAAQ,2DAAoD,EAExE,KAAK,oBAAoB,qBACzB,KAAK,iBAAiB,mBAAqB,GAC3C,KAAK,eAAe,QAAU,IAG9B,KAAK,oBAAoB,iBACzB,KAAK,iBAAiB,eAAiB,GACvC,KAAK,kBAAkB,QAAU,GACjC,KAAK,2BAA2B,GAGpC,KAAK,sBAAsB,CAAC,EAC5B,WAAW,IAAM,CACb,KAAK,gCAAgC,CACzC,EAAG,GAAG,CACV,CAGA,sBAAuB,CAGnB,GAFA,KAAK,WAAW,OAAQ,sDAA+C,EAEnE,KAAK,oBAAoB,kBAAoB,KAAK,YAAY,GAAK,KAAK,WAAY,CACpF,KAAK,iBAAiB,iBAAmB,GACzC,KAAK,mBAAmB,QAAU,GAElC,GAAI,CACA,KAAK,wBAAwB,CACjC,OAAShE,EAAO,CACZ,KAAK,WAAW,OAAQ,qDAA4C,CAAE,QAASA,EAAM,OAAQ,CAAC,EAC9F,KAAK,iBAAiB,iBAAmB,GACzC,KAAK,mBAAmB,QAAU,EACtC,CACJ,CAGI,KAAK,oBAAoB,wBACzB,KAAK,yBAAyB,eAAiB,GAC/C,KAAK,yBAAyB,aAAe,GAC7C,KAAK,yBAAyB,iBAAmB,IAGrD,KAAK,sBAAsB,CAAC,EAC5B,WAAW,IAAM,CACb,KAAK,gCAAgC,CACzC,EAAG,GAAG,CACV,CAEA,qBAAsB,CAClB,WAAW,IAAM,CACb,KAAK,gCAAgC,EACrC,KAAK,qBAAqB,CAC9B,EAAG,GAAG,CACV,CAGA,mBAAoB,CAChB,IAAM2R,EAAiB,OAAO,QAAQ,KAAK,gBAAgB,EACtD,OAAO,CAAC,CAACxM,EAAKM,CAAK,IAAMA,IAAU,EAAI,EACvC,IAAI,CAAC,CAACN,CAAG,IAAMA,CAAG,EAIvB,MAAO,CACH,MAHU,EAIV,cAAe,UACf,eAAgBwM,EAChB,cAAe,OAAO,KAAK,KAAK,gBAAgB,EAAE,OAClD,oBAAqBA,EAAe,OACpC,oBAAqBA,EACrB,mBAAoB,KAAK,kBAC7B,CACJ,CAGA,sBAAsBwF,EAAO,CACzB,IAAMC,EAAa,CACf,EAAG,iBACH,EAAG,kBACH,EAAG,gBACH,EAAG,kBACP,EAEMpT,EAAU,wCAAiCmT,CAAK,KAAKC,EAAWD,CAAK,CAAC,GAc5E,IAXI,CAAC,KAAK,iCAAmC,KAAK,2BAA6BA,KAC3E,KAAK,gCAAkC,GACvC,KAAK,yBAA2BA,EAG5B,KAAK,WACL,KAAK,mBAAmBnT,EAAS,QAAQ,GAK7C,KAAK,aAAe,KAAK,YAAY,aAAe,OACpD,GAAI,CACA,IAAMqT,EAAuB,CACzB,KAAM,mBACN,MAAOF,EACP,UAAWC,EAAWD,CAAK,EAC3B,QAASnT,EACT,UAAW,KAAK,IAAI,CACxB,EAEA,KAAK,WAAW,QAAS,2DAAqD,CAAE,KAAMqT,EAAqB,KAAM,MAAOA,EAAqB,KAAM,CAAC,EACpJ,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAoB,CAAC,CAC9D,OAASrX,EAAO,CACZ,KAAK,WAAW,OAAQ,qEAA4D,CAAE,QAASA,EAAM,OAAQ,CAAC,CAClH,CAGJ,IAAM4K,EAAS,KAAK,kBAAkB,CAC1C,CAEA,MAAM,iCAAkC,CACpC,GAAI,CACA,GAAI,CAAC,OAAO,0BACR,YAAK,WAAW,OAAQ,+EAAqE,EACtF,KAGX,GAAI,CAAC,KAAK,YAAY,GAAK,CAAC,KAAK,YAAc,CAAC,KAAK,eAAiB,CAAC,KAAK,OACxE,YAAK,WAAW,QAAS,yDAAgD,CACrE,UAAW,KAAK,YAAY,EAC5B,SAAU,KAAK,WACf,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,MACtB,CAAC,EACM,KAGX,KAAK,WAAW,QAAS,4CAAsC,CAC3D,aAAc,QACd,WAAY,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,YAC7D,CAAC,EAED,IAAM0M,EAAe,MAAM,OAAO,0BAA0B,uBAAuB,IAAI,EAoBvF,GAlBA,KAAK,WAAW,OAAQ,iCAAkC,CACtD,iBAAkB,CAAC,CAACA,EAAa,MACjC,WAAYA,EAAa,MAAQ,GAAK,OAASA,EAAa,MAAQ,GAAK,SAAW,MACpF,YAAa,GAAGA,EAAa,YAAY,IAAIA,EAAa,WAAW,GACrE,kBAAmBA,EAAa,UACpC,CAAC,EAED,KAAK,wBAA0BA,EAE/B,KAAK,oBAAoB,IAAI,YAAY,2BAA4B,CACjE,OAAQ,CACJ,aAAcA,EACd,cAAe,KACf,UAAW,KAAK,IAAI,EACpB,OAAQ,iCACZ,CACJ,CAAC,CAAC,EAEEA,EAAa,YAAc,KAAK,YAC5B,CAAC,KAAK,qCAAuC,KAAK,+BAAiCA,EAAa,OAAO,CACvG,KAAK,oCAAsC,GAC3C,KAAK,6BAA+BA,EAAa,MAEjD,IAAMtT,EAAU,mBAAmBsT,EAAa,KAAK,KAAKA,EAAa,KAAK,QAAQA,EAAa,YAAY,IAAIA,EAAa,WAAW,iBACzI,KAAK,mBAAmBtT,EAAS,QAAQ,CAC7C,CAGJ,OAAOsT,CAEX,OAAStX,EAAO,CACZ,YAAK,WAAW,QAAS,0CAA2C,CAChE,UAAWA,EAAM,YAAY,IACjC,CAAC,EACM,IACX,CACJ,CAOA,MAAM,4BAA6B,CAC/B,KAAK,WAAW,OAAQ,+DAA+D,EAE3F,IAAMuX,EAAiB,IACF,KAAK,YAAY,GAClB,KAAK,YACL,KAAK,qBAAuB,GAC5B,KAAK,aAAa,SAAW,GAC7B,KAAK,gBAAgB,kBAAoB,YAI7D,MAAM,KAAK,gCAAgC,EAC3C,KAAK,sBAAsB,CAAC,EAGxB,WAAW,SAAY,CACfA,EAAe,IACf,KAAK,qBAAqB,EAC1B,MAAM,KAAK,gCAAgC,EAEvC,WAAW,SAAY,CACfA,EAAe,IACf,KAAK,qBAAqB,EAC1B,MAAM,KAAK,gCAAgC,EAE3C,WAAW,SAAY,CACfA,EAAe,IACf,KAAK,qBAAqB,EAC1B,MAAM,KAAK,gCAAgC,EAEnD,EAAG,GAAK,EAEhB,EAAG,IAAK,EAEpB,EAAG,GAAK,CAChB,CAMA,MAAM,qBAAsB,CACxB,GAAI,CAEA,MAAM,KAAK,2BAA2B,EAGlC,KAAK,kBAAkB,SACvB,KAAK,2BAA2B,EAIhC,KAAK,mBAAmB,SACxB,KAAK,wBAAwB,CAGrC,OAASvX,EAAO,CACZ,WAAK,WAAW,QAAS,kDAA8C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAE3H,KAAK,eAAe,cAAc,EAC5BA,CACV,CACJ,CAMA,0BAA2B,CACvB,GAAI,CAGA,KAAK,2BAA6B,GAClC,KAAK,4BAA8B,GACnC,KAAK,2BAA6B,GAClC,KAAK,WAAa,GAClB,KAAK,iBAAmB,KACxB,KAAK,eAAiB,KACtB,KAAK,sBAAwB,EAC7B,KAAK,sBAAwB,GAC7B,KAAK,qBAAuB,KAC5B,KAAK,sBAAwB,KAG7B,KAAK,eAAiB,KACtB,KAAK,wBAA0B,KAC/B,KAAK,qBAAuB,KAC5B,KAAK,aAAe,KAGpB,KAAK,oBAAoB,MAAM,EAG/B,KAAK,6BAA+B,GACpC,KAAK,2BAA6B,EAEtC,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,6CAAyC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAC1H,CACJ,CAGA,sBAAuB,CAEnB,KAAK,WAAW,OAAQ,uDAAgD,CAC5E,CAGA,MAAM,wBAAyB,CAC3B,OAAO,MAAM,OAAO,0BAA0B,uBAAuB,IAAI,CAC7E,CAGA,kBAAmB,CACf,MAAI,CAAC,KAAK,YAAY,GAAK,CAAC,KAAK,WACtB,GAGC,KAAK,IAAI,EACe,KAAK,gBAGV,KAAK,qBAC7B,KAAK,eAAiB,MAAQ,CACzC,CAGA,MAAM,YAAa,CACf,OAAO,KAAK,WAAW,eAAgB,MAAO0W,GAAgB,CAM1D,GALA,KAAK,WAAW,OAAQ,6CAAuC,CAC3D,YAAaA,CACjB,CAAC,EAGG,CAAC,KAAK,YAAY,GAAK,CAAC,KAAK,WAC7B,YAAK,WAAW,OAAQ,+CAAgD,CACpE,YAAaA,EACb,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,UACrB,CAAC,EACM,GAIX,GAAI,KAAK,gBAAgB,WACrB,YAAK,WAAW,OAAQ,oCAAqC,CACzD,YAAaA,CACjB,CAAC,EACM,GAGX,GAAI,CAEA,KAAK,gBAAgB,WAAa,GAClC,KAAK,gBAAgB,cAAgB,WACrC,KAAK,gBAAgB,kBAAoB,KAAK,IAAI,EAGlD,IAAMc,EAAiB,CACnB,KAAM,sBACN,WAAY,KAAK,kBAAoB,EACrC,UAAW,KAAK,IAAI,EACpB,YAAad,CACjB,EAEA,GAAI,KAAK,aAAe,KAAK,YAAY,aAAe,OACpD,KAAK,YAAY,KAAK,KAAK,UAAUc,CAAc,CAAC,MAEpD,OAAM,IAAI,MAAM,yCAAyC,EAI7D,YAAK,iBAAiB,EAGf,IAAI,QAASzW,GAAY,CAC5B,KAAK,gBAAkB,CACnB,WAAY,KAAK,kBAAoB,EACrC,YAAa2V,EACb,QAAS3V,EACT,QAAS,WAAW,IAAM,CACtB,KAAK,WAAW,QAAS,wBAAyB,CAC9C,YAAa2V,CACjB,CAAC,EACD,KAAK,gBAAgB,WAAa,GAClC,KAAK,gBAAkB,KACvB3V,EAAQ,EAAK,CACjB,EAAG,GAAK,CACZ,CACJ,CAAC,CAEL,OAASf,EAAO,CACZ,YAAK,WAAW,QAAS,2CAA4C,CACjE,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACD,KAAK,gBAAgB,WAAa,GAC3B,EACX,CACJ,EAAG,GAAK,CACZ,CAGA,gBAAiB,CACb,IAAM4E,EAAM,KAAK,IAAI,EACf6S,EAAYlY,EAA4B,OAAO,YAEjDmY,EAAiB,EAErB,OAAW,CAACrI,EAASC,CAAM,IAAK,KAAK,QAAQ,QAAQ,EAC7C1K,EAAM0K,EAAO,UAAYmI,IAErBnI,EAAO,eACP,KAAK,kBAAkBA,EAAO,cAAe,kBAAkB,EAE/DA,EAAO,QACP,KAAK,kBAAkBA,EAAO,OAAQ,kBAAkB,EAExDA,EAAO,aACP,KAAK,kBAAkBA,EAAO,YAAa,kBAAkB,EAIjEA,EAAO,cAAgB,KACvBA,EAAO,OAAS,KAChBA,EAAO,YAAc,KACrBA,EAAO,eAAiB,KAExB,KAAK,QAAQ,OAAOD,CAAO,EAC3BqI,IAEA,KAAK,WAAW,OAAQ,mDAA6C,CACjE,QAASrI,EACT,IAAK,KAAK,OAAOzK,EAAM0K,EAAO,WAAa,GAAI,EAAI,IACnD,UAAW,KAAK,IAAI,CACxB,CAAC,GAILoI,EAAiB,GACjB,KAAK,WAAW,OAAQ,0BAA0BA,CAAc,mBAAoB,CAChF,UAAW,KAAK,IAAI,CACxB,CAAC,CAET,CAGA,kBAAkBrI,EAAS,CAEvB,IAAMsI,EAAY,KAAK,QAAQ,IAAItI,CAAO,EAC1C,OAAIsI,GAAaA,EAAU,eAAiBA,EAAU,QAAUA,EAAU,YAC/D,CACH,cAAeA,EAAU,cACzB,OAAQA,EAAU,OAClB,YAAaA,EAAU,WAC3B,EAIAtI,IAAY,KAAK,mBACb,KAAK,eAAiB,KAAK,QAAU,KAAK,YACnC,CACH,cAAe,KAAK,cACpB,OAAQ,KAAK,OACb,YAAa,KAAK,WACtB,GAIR,OAAO,0BAA0B,UAAU,IAAI,QAAS,kCAAmC,CACvF,iBAAkBA,EAClB,eAAgB,KAAK,kBACrB,kBAAmB,MAAM,KAAK,KAAK,QAAQ,KAAK,CAAC,CACrD,CAAC,EAEM,KACX,CAEA,gBAAiB,CACb,OAAQ,KAAK,QAAQ,OAAO,YAAc,CAAC,GAAG,KAAKtP,IAClC,MAAM,QAAQA,EAAO,IAAI,EAAIA,EAAO,KAAO,CAACA,EAAO,IAAI,GACxD,KAAK6X,GAAO,OAAOA,GAAQ,UAAYA,EAAI,YAAY,EAAE,WAAW,OAAO,CAAC,CAC3F,CACL,CAEA,4BAA6B,CACzB,IAAMC,EAAY,KAAK,iBAAiB,EAClC/X,EAAS,CACX,WAAY,KAAK,QAAQ,OAAO,WAChC,qBAAsB,GACtB,aAAc,UAClB,EACA,OAAI+X,IACA/X,EAAO,mBAAqB,SAEzBA,CACX,CAEA,0BAA0BgY,EAAa,CAAC,EAAG,CACvC,IAAM/U,EAAU,CACZ,YAAa,EACb,KAAM,EACN,KAAM,EACN,MAAO,EACP,eAAgB,EACpB,EAEA,QAAWhD,KAAU+X,GAAc,CAAC,EAAG,CACnC/U,EAAQ,aAAe,GACnBhD,GAAQ,UAAYA,GAAQ,cAC5BgD,EAAQ,eAAiB,IAG7B,IAAMgV,EAAO,MAAM,QAAQhY,GAAQ,IAAI,EAAIA,EAAO,KAAO,CAACA,GAAQ,IAAI,EACtE,QAAWiY,KAAUD,EAAM,CACvB,IAAMH,EAAM,OAAOI,GAAU,EAAE,EAAE,YAAY,EACzCJ,EAAI,WAAW,OAAO,IAAG7U,EAAQ,MAAQ,GACzC6U,EAAI,WAAW,OAAO,IAAG7U,EAAQ,MAAQ,GACzC6U,EAAI,WAAW,QAAQ,IAAG7U,EAAQ,OAAS,EACnD,CACJ,CAEA,OAAOA,CACX,CAEA,kBAAmB,CACf,OAAO,KAAK,QAAQ,OAAO,cAAgB,YAC/C,CAEA,kBAAkB8U,EAAW,CACzB,IAAMI,EAAUJ,IAAc,GAC9B,KAAK,QAAQ,OAAO,YAAcI,EAAU,aAAe,WAC3D,KAAK,QAAQ,OAAO,UAAYA,CACpC,CAEA,oBAAqB,CACjB,GAAI,KAAK,oBAAqB,OAC9B,KAAK,oBAAsB,GAE3B,IAAMJ,EAAY,KAAK,iBAAiB,EAClCK,EAAgB,KAAK,eAAe,EACtClU,EAAU,KAEV6T,GAAa,CAACK,EACdlU,EAAU,gKACH,CAAC6T,GAAa,CAACK,EACtBlU,EAAU,wMACF6T,IACR7T,EAAU,0JAGTA,GACL,KAAK,mBAAmBA,EAAS,QAAQ,CAC7C,CAEA,sBAAuB,CACnB,KAAK,cAAgB,GACrB,IAAMlE,EAAS,KAAK,2BAA2B,EAC/C,KAAK,mBAAmB,EACxB,QAAQ,KAAK,yCAA0C,KAAK,0BAA0BA,EAAO,UAAU,CAAC,EAExG,KAAK,eAAiB,IAAI,kBAAkBA,CAAM,EAIlD,KAAK,iBAAmB,KACxB,KAAK,iBAAmB,KAExB,KAAK,eAAe,wBAA0B,IAAM,CAChD,IAAMqY,EAAQ,KAAK,eAAe,gBAClC,QAAQ,KAAK,2CAA4C,CACrD,gBAAiBA,EACjB,mBAAoB,KAAK,eAAe,mBACxC,kBAAmB,KAAK,eAAe,iBAC3C,CAAC,EAEGA,IAAU,aAAe,CAAC,KAAK,WAC/B,KAAK,mCAAmC,EACjCA,IAAU,aAAe,KAAK,WAIhC,KAAK,iBAAiB,GAAG,KAAK,eAAe,WAAW,EACtDA,IAAU,eACb,KAAK,uBACL,KAAK,eAAe,cAAc,EAClC,WAAW,IAAM,KAAK,WAAW,EAAG,GAAG,GAChC,KAAK,WAIZ,KAAK,gBAAgB,kBAAkB,EAEvC,QAAQ,KAAK,4BAA4BA,CAAK,kEAAkE,EAE7GA,IAAU,UAEjB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,cAAc,EAClC,KAAK,yBAAyB,EAC1B,KAAK,uBAAuB,WAAW,IAAM,KAAK,WAAW,EAAG,GAAG,GAChEA,IAAU,UACjB,KAAK,8BAA8B,EAAE,KAAMC,GAAgB,CACvD,QAAQ,KAAK,sCAAuCA,CAAW,EAC/D,KAAK,2BAA2BA,CAAW,CAC/C,CAAC,EAGG,KAAK,WACL,KAAK,YAAY,YAAY,EAE7B,QAAQ,KAAK,iGAAiG,GAE3G,KAAK,eAAe,IAAMD,IAAU,cAAgBA,IAAU,QAIrE,KAAK,eAAeA,CAAK,CAEjC,EAEA,KAAK,eAAe,2BAA6B,IAAM,CACnD,QAAQ,KAAK,+CAAgD,CACzD,gBAAiB,KAAK,eAAe,gBACrC,mBAAoB,KAAK,eAAe,mBACxC,kBAAmB,KAAK,eAAe,iBAC3C,CAAC,CACL,EAEA,KAAK,eAAe,oBAAuBtL,GAAU,CACjD,QAAQ,KAAK,sCAAuC,CAChD,IAAKA,EAAM,IACX,UAAWA,EAAM,UACjB,UAAWA,EAAM,SACrB,CAAC,CACL,EAMA,KAAK,eAAe,QAAWA,GAAU,CACrC,GAAI,CACA,KAAK,qBAAqB,CAC9B,OAAS9K,EAAG,CACR,KAAK,WAAW,OAAQ,uCAA8B,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CAC7F,CACJ,EAEA,KAAK,eAAe,cAAiB8K,GAAU,CAGvCA,EAAM,QAAQ,QAAU,cACxB,KAAK,YAAcA,EAAM,QACzB,KAAK,iBAAiBA,EAAM,OAAO,GAG/BA,EAAM,QAAQ,QAAU,cACxB,KAAK,iBAAmBA,EAAM,QAG1C,CACJ,CAEA,iBAAiB+E,EAAS,CAEtB,KAAK,YAAcA,EAGnB,IAAIyG,EAAc,GAEZC,EAAoB,SAAY,CAClC,GAAI,CAAAD,EACJ,CAAAA,EAAc,GAEd,GAAI,CACI,KAAK,aAAe,OAAO,KAAK,YAAY,4BAA+B,WAE3E,KAAK,YAAY,2BAA6B,KAAO,KAE7D,MAAY,CAEZ,CAWA,GAAI,KAAK,iBAAmB,OACxB,GAAI,CACA,MAAM,KAAK,oBAAoB,CACnC,OAASrY,EAAO,CACZ,KAAK,WAAW,QAAS,oCAAqC,CAC1D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACD,KAAK,WAAW,eACZ,yEAAyE,EAC7E,MACJ,CAGJ,GAAI,CACA,MAAM,KAAK,oBAAoB,EAEvC,KAAK,uBAAuB,CAExB,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,gCAAiC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAElH,CAGA,GAAI,KAAK,gBAAkB,KAAK,aAAe,KAAK,YAAY,aAAe,OAC3E,GAAI,CACA,IAAMuY,EAAa,CACf,KAAM,WACN,KAAM,CACF,KAAM,KAAK,eACX,UAAW,KAAK,IAAI,EACpB,mBAAoB,MACpB,cAAe,0BACnB,CACJ,EACA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAU,CAAC,EAChD,KAAK,eAAiB,IAC1B,MAAgB,CAChB,MACO,KAAK,eAGZ,KAAK,YACL,KAAK,eAAe,WAAW,EAC/B,KAAK,oBAAoB,EAEzB,WAAW,SAAY,CACnB,MAAM,KAAK,gCAAgC,EAC3C,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,CAC9B,EAAG,GAAG,IAEN,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,GAE9B,KAAK,eAAe,EACxB,EAEA,KAAK,YAAY,OAASD,EAUtB,KAAK,YAAY,aAAe,QAChC,QAAQ,QAAQ,EACX,KAAK,IAAMA,EAAkB,CAAC,EAC9B,MAAOtY,GAAU,CACd,KAAK,WAAW,QAAS,6CAA8C,CACnE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAGT,KAAK,YAAY,QAAU,IAAM,CAI7B,KAAK,uBAAuB,EAC5B,KAAK,sCAAsC,EAEtC,KAAK,uBAUN,KAAK,eAAe,cAAc,EAElC,KAAK,yBAAyB,EAEzB,KAAK,mCACN,KAAK,iCAAmC,GACxC,KAAK,mBAAmB,8CAAwC,QAAQ,KAf5E,KAAK,eAAe,cAAc,EAElC,KAAK,yBAAyB,EAEzB,KAAK,mCACN,KAAK,iCAAmC,GACxC,KAAK,mBAAmB,wEAAkE,QAAQ,IAc1G,KAAK,mBAAmB,EAExB,KAAK,cAAc,EACnB,KAAK,WAAa,EACtB,EAGA,KAAK,YAAY,UAAY,MAAO6M,GAAU,CAC1C,GAAI,CAQA,GAHA,KAAK,uBAAuB,EAGxB,OAAOA,EAAM,MAAS,SACtB,GAAI,CACA,IAAMoB,EAAS,KAAK,MAAMpB,EAAM,IAAI,EAO9B+J,EAAmB,CACrB,sBACA,yBACA,aACA,qBACA,yBACA,qBACJ,EAEA,GAAI3I,EAAO,MAAQ2I,EAAiB,SAAS3I,EAAO,IAAI,EAAG,CAUvD,GAAI,CAAC,KAAK,yBAAyB,uBAAwB,EAAK,EAAG,CAC/D,KAAK,WAAW,QAAS,oDAAqD,CAC1E,YAAaA,EAAO,IACxB,CAAC,EACD,MACJ,CAEA,GAAI,CAAC,KAAK,mBACN,GAAI,CACA,GAAI,KAAK,YAAc,KAAK,aAAe,KAAK,YAAY,aAAe,OAAQ,CAC/E,KAAK,uBAAuB,EAE5B,IAAIpI,EAAW,EACTC,EAAc,GACpB,KAAO,CAAC,KAAK,oBAAsBD,EAAWC,GAC1C,MAAM,IAAI,QAAQ/E,GAAW,WAAWA,EAAS,GAAG,CAAC,EACrD8E,GAER,CACJ,OAAS2S,EAAW,CAChB,KAAK,WAAW,QAAS,0DAA2D,CAAE,UAAWA,GAAW,aAAa,MAAQ,SAAU,CAAC,CAChJ,CAGJ,GAAI,KAAK,mBAAoB,CACzB,MAAM,KAAK,mBAAmB,kBAAkBvK,CAAM,EACtD,MACJ,CAEA,KAAK,WAAW,OAAQ,sEAA4D,EACpF,GAAI,CAEA,GADA,MAAM,KAAK,yBAAyB,EAChC,KAAK,mBAAoB,CACzB,MAAM,KAAK,mBAAmB,kBAAkBA,CAAM,EACtD,MACJ,CACJ,OAASlM,EAAG,CACR,KAAK,WAAW,QAAS,qCAAsC,CAAE,UAAWA,GAAG,SAAWA,GAAG,aAAa,MAAQ,SAAU,CAAC,CACjI,CACA,KAAK,WAAW,QAAS,yCAA0C,CAAE,UAAWkM,EAAO,MAAM,aAAa,MAAQ,SAAU,CAAC,EAC7H,MACJ,CAYA,GAAIA,EAAO,MACP1O,EAA4B,gCAAgC,IAAI0O,EAAO,IAAI,EAAG,CAC9E,GAAI,CAAC,KAAK,yBAAyB,wBAAyB,EAAK,EAAG,CAChE,KAAK,WAAW,QAAS,qDAAsD,CAC3E,YAAaA,EAAO,IACxB,CAAC,EACD,MACJ,CAEA,IAAMC,EAAI3O,EAA4B,cAGtC,GAAI0O,EAAO,OAASC,EAAE,eAAgB,CAClC,IAAMqF,EAAYtF,GAAQ,MAAM,WAAaA,GAAQ,UACrD,GAAI,OAAOsF,GAAc,UAAYA,EACjC,GAAI,CAAE,KAAK,kBAAkBA,EAAU,MAAM,EAAG,EAAE,CAAC,CAAG,MAAY,CAAC,CAEvE,MACJ,CAGA,GAAItF,EAAO,OAASC,EAAE,gBAAiB,CACnC,IAAMqF,EAAYtF,GAAQ,MAAM,WAAaA,GAAQ,UACrD,GAAI,OAAOsF,GAAc,UAAYA,EACjC,GAAI,CAAE,KAAK,qBAAqBA,EAAU,MAAM,EAAG,EAAE,CAAC,CAAG,MAAY,CAAC,CAE1E,MACJ,CAGA,GAAI,CAACrF,EAAE,WAAYA,EAAE,YAAaA,EAAE,SAC/BA,EAAE,aAAcA,EAAE,QAAQ,EAAE,SAASD,EAAO,IAAI,EAAG,CACpD,GAAI,CAAE,MAAM,KAAK,kBAAkBA,EAAO,KAAMA,EAAO,MAAQ,CAAC,CAAC,CAAG,MAC1D,CAAC,CACX,MACJ,CAGA,GAAI,CAACC,EAAE,kBAAmBA,EAAE,mBACvBA,EAAE,mBAAmB,EAAE,SAASD,EAAO,IAAI,EAAG,CAC/C,GAAI,CAAE,MAAM,KAAK,wBAAwBA,EAAO,KAAMA,EAAO,MAAQ,CAAC,CAAC,CAAG,OACnElM,EAAG,CACN,KAAK,WAAW,QAAS,4CAAwC,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CACxG,CACA,MACJ,CAEA,MACJ,CAcA,GAAIkM,EAAO,OAAS1O,EAA4B,cAAc,UAC1D0O,EAAO,OAAS1O,EAA4B,cAAc,UAAW,CACrE,MAAM,KAAK,0BAA0B0O,CAAM,EAC3C,MACJ,CAEA,GAAIA,EAAO,MAAQ,CAAC,YAAa,eAAgB,wBAAyB,yBAA0B,8BAA+B,WAAY,kBAAmB,kBAAkB,EAAE,SAASA,EAAO,IAAI,EAAG,CACzM,KAAK,oBAAoBA,CAAM,EAC/B,MACJ,CAMA,GAAIA,EAAO,OAAS1O,EAA4B,cAAc,gBAAiB,CAC3E,MAAM,KAAK,uBAAuB0O,CAAM,EACxC,MACJ,CAEA,GAAIA,EAAO,OAAS,oBAAsBA,EAAO,KAAM,CACnD,MAAM,KAAK,oCAAoCA,CAAM,EACrD,MACJ,CAUA,KAAK,WAAW,QAAS,iDAAkD,CACvE,YAAa,OAAOA,EAAO,MAAS,SAAWA,EAAO,KAAK,MAAM,EAAG,EAAE,EAAI,OAAOA,EAAO,IAC5F,CAAC,EACD,MAEJ,MAAoB,CAIhB,KAAK,WAAW,QAAS,0DAA2D,CAChF,WAAY,OAAOpB,EAAM,MAAS,SAAWA,EAAM,KAAK,OAAS,CACrE,CAAC,EACD,MACJ,MACOA,EAAM,gBAAgB,aAC7B,MAAM,KAAK,+BAA+BA,EAAM,IAAI,CAI5D,OAAS7M,EAAO,CACZ,KAAK,WAAW,QAAS,0CAA2C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAC5H,CACJ,CACJ,CAEA,MAAM,+BAA+BiC,EAAM,CACvC,GAAI,CACA,GAAI,CAAC,KAAK,uBAAuB,gBAAgB,EAC7C,OAIJ,IAAIkR,EAAgBlR,EAGpB,GAAI,KAAK,iBAAiB,qBACtB,KAAK,qBACLkR,aAAyB,aACzBA,EAAc,WAAa,GAE3B,GAAI,CACAA,EAAgB,MAAM,KAAK,uBAAuBA,CAAa,CACnE,MAAgB,CACZ,KAAK,WAAW,OAAQ,yDAAyD,CACrF,CAIJ,GAAI,KAAK,iBAAiB,kBAAoBA,aAAyB,YACnE,GAAI,CACAA,EAAgB,KAAK,oBAAoBA,CAAa,CAC1D,MAAgB,CACZ,KAAK,WAAW,OAAQ,8DAA8D,CAC1F,CAIJ,GAAI,KAAK,iBAAiB,uBAAyBA,aAAyB,YACxE,GAAI,CACAA,EAAgB,KAAK,yBAAyBA,CAAa,CAC/D,MAAgB,CACZ,KAAK,WAAW,OAAQ,mEAAmE,CAC/F,CAIJ,GAAIA,aAAyB,YAAa,CACtC,IAAMyB,EAAW,IAAI,YAAY,EAAE,OAAOzB,CAAa,EAQvD,GAAI,CACA,IAAM0B,EAAU,KAAK,MAAMD,CAAQ,EACnC,GAAIC,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GACrD,MAER,MAAY,CAEZ,CAEA,KAAK,WAAW,QAAS,4DAA6D,CAClF,WAAY5S,GAAM,YAAc,CACpC,CAAC,CACL,CAEJ,OAASjC,EAAO,CACZ,KAAK,WAAW,QAAS,gCAAiC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAClH,CACJ,CAUA,MAAM,uBAAuBuR,EAAe,CACxC,GAAI,CACA,GAAI,CAAC,KAAK,uBAAuB,iBAAiB,EAC9C,OAEJ,GAAI,CAAC,KAAK,gBAAgB,EAAG,CACzB,KAAK,WAAW,QAAS,qDAAqD,EAC9E,MACJ,CACA,GAAI,OAAOA,GAAe,GAAM,UAAY,OAAOA,GAAe,GAAM,SAAU,CAC9E,KAAK,WAAW,QAAS,iCAAiC,EAC1D,MACJ,CAEA,IAAMkH,EAAY,MAAM,KAAK,SAAS,QAAQlH,EAAc,EAAGA,EAAc,CAAC,EAG9E,GAAI,CACA,IAAMsD,EAAU,KAAK,MAAM4D,CAAS,EACpC,GAAI5D,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GAAM,OAC/D,GAAIA,GAAWA,EAAQ,OAAS,WAAa,OAAOA,EAAQ,MAAS,SAAU,CAC3E,KAAK,mBAAmBA,EAAQ,KAAM,WAAYA,EAAQ,IAAI,EAC9D,MACJ,CACJ,MAAY,CAEZ,CACA,KAAK,mBAAmB4D,EAAW,UAAU,CACjD,OAASzY,EAAO,CAGZ,KAAK,WAAW,QAAS,oCAAqC,CAC1D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CACJ,CAGA,MAAM,oCAAoCuR,EAAe,CACrD,GAAI,CACA,GAAI,CAAC,KAAK,uBAAuB,kBAAkB,EAC/C,OAGJ,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,QAAU,CAAC,KAAK,YAAa,CAC1D,KAAK,WAAW,QAAS,8CAA8C,EACvE,MACJ,CAEA,IAAMwE,EAAkB,MAAM,OAAO,0BAA0B,eAC3DxE,EAAc,KACd,KAAK,cACL,KAAK,OACL,KAAK,WACT,EAQA,GAAI,CAAC,KAAK,gCAAgCwE,GAAiB,eAAgB,kBAAkB,EAAG,CAC5F,KAAK,WAAW,QAAS,uDAAwD,CAC7E,UAAWA,GAAiB,UAAY,UAAY,QACxD,CAAC,EACD,MACJ,CAEA,GAAIA,GAAmBA,EAAgB,QAAS,CAG5C,GAAI,CACA,IAAMC,EAAmB,KAAK,MAAMD,EAAgB,OAAO,EAC3D,GAAIC,EAAiB,OAAS,QAAUA,EAAiB,gBAAkB,GACvE,OAEJ,GAAIA,GAAoBA,EAAiB,OAAS,WAAa,OAAOA,EAAiB,MAAS,SAAU,CAClG,KAAK,WACL,KAAK,mBAAmBA,EAAiB,KAAM,WAAYA,EAAiB,IAAI,EAEpF,MACJ,CACJ,MAAY,CAEZ,CAGI,KAAK,WACL,KAAK,mBAAmBD,EAAgB,QAAS,UAAU,CAEnE,MACI,KAAK,WAAW,OAAQ,wCAAwC,CAGxE,OAAS/V,EAAO,CACZ,KAAK,WAAW,QAAS,qCAAsC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACvH,CACJ,CAIA,sBAAuB,CACnB,MAAO,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAG,CAAC,CAAC,EACtE,CAKA,MAAM,cAAc0Y,EAAWhC,EAAa5U,EAAU,IAAM,CAExD,IAAM6W,EAAoB,IAAID,CAAS,QACjCE,EAAQ,KAAKD,CAAiB,EAEpC,GAAI,CAACC,EACD,WAAK,WAAW,QAAS,kBAAkBF,CAAS,GAAI,CACpD,kBAAmBC,EACnB,iBAAkB,KAAK,qBAAqB,EAC5C,YAAajC,CACjB,CAAC,EACK,IAAI,MAAM,kBAAkBgC,CAAS,gBAAgB,KAAK,qBAAqB,EAAE,KAAK,IAAI,CAAC,EAAE,EAIvG,GAAI,CAAChC,GAAe,OAAOA,GAAgB,SACvC,MAAM,IAAI,MAAM,4CAA4C,EAGhE,OAAO,IAAI,QAAQ,CAAC3V,EAASW,IAAW,EAEhB,IAAM,CAEtB,GAAIkX,EAAM,SAAWlC,EAAa,CAC9B,KAAK,WAAW,OAAQ,UAAUgC,CAAS,qCAAsC,CAC7E,YAAahC,CACjB,CAAC,EACD3V,EAAQ,EACR,MACJ,CAGA,GAAI,CAAC6X,EAAM,OAEPA,EAAM,OAAS,GACfA,EAAM,OAASlC,EACfkC,EAAM,SAAW,KAAK,IAAI,EAE1B,KAAK,WAAW,QAAS,UAAUF,CAAS,wBAAyB,CACjE,YAAahC,EACb,SAAUkC,EAAM,QACpB,CAAC,EAGDA,EAAM,YAAc,WAAW,IAAM,CAEjC,KAAK,oBAAoBF,EAAWhC,EAAa5U,CAAO,CAC5D,EAAGA,CAAO,EAEVf,EAAQ,MACL,CAEH,IAAM8X,EAAY,CACd,QAAA9X,EACA,OAAAW,EACA,YAAAgV,EACA,UAAW,KAAK,IAAI,EACpB,QAAS,WAAW,IAAM,CAEtB,IAAMlO,EAAQoQ,EAAM,MAAM,UAAUrT,GAAQA,EAAK,cAAgBmR,CAAW,EACxElO,IAAU,KACVoQ,EAAM,MAAM,OAAOpQ,EAAO,CAAC,EAC3B9G,EAAO,IAAI,MAAM,kCAAkCgX,CAAS,GAAG,CAAC,EAExE,EAAG5W,CAAO,CACd,EAEA8W,EAAM,MAAM,KAAKC,CAAS,EAE1B,KAAK,WAAW,QAAS,+BAA+BH,CAAS,IAAK,CAClE,YAAahC,EACb,YAAakC,EAAM,MAAM,OACzB,cAAeA,EAAM,MACzB,CAAC,CACL,CACJ,GAGY,CAChB,CAAC,CACL,CAKA,cAAcF,EAAWhC,EAAa,CAElC,GAAI,CAACgC,GAAa,OAAOA,GAAc,SACnC,MAAM,IAAI,MAAM,yCAAyC,EAG7D,GAAI,CAAChC,GAAe,OAAOA,GAAgB,SACvC,MAAM,IAAI,MAAM,iDAAiD,EAIrE,IAAMiC,EAAoB,IAAID,CAAS,QACjCE,EAAQ,KAAKD,CAAiB,EAEpC,GAAI,CAACC,EACD,WAAK,WAAW,QAAS,8BAA8BF,CAAS,GAAI,CAChE,kBAAmBC,EACnB,iBAAkB,KAAK,qBAAqB,EAC5C,YAAajC,CACjB,CAAC,EACK,IAAI,MAAM,8BAA8BgC,CAAS,EAAE,EAI7D,GAAIE,EAAM,SAAWlC,EACjB,WAAK,WAAW,QAAS,qEAAsE,CAC3F,UAAWgC,EACX,eAAgBE,EAAM,OACtB,oBAAqBlC,EACrB,WAAY,CACR,OAAQkC,EAAM,OACd,SAAUA,EAAM,SAChB,YAAaA,EAAM,MAAM,MAC7B,CACJ,CAAC,EAGK,IAAI,MAAM,sCAAsCF,CAAS,gBAAgBE,EAAM,MAAM,WAAWlC,CAAW,GAAG,EAIxH,GAAI,CAACkC,EAAM,OACP,WAAK,WAAW,QAAS,iDAAkD,CACvE,UAAWF,EACX,YAAahC,EACb,WAAY,CACR,OAAQkC,EAAM,OACd,OAAQA,EAAM,OACd,SAAUA,EAAM,QACpB,CACJ,CAAC,EACK,IAAI,MAAM,yCAAyCF,CAAS,EAAE,EAGxE,GAAI,CAEIE,EAAM,cACN,aAAaA,EAAM,WAAW,EAC9BA,EAAM,YAAc,MAIxB,IAAME,EAAeF,EAAM,SAAW,KAAK,IAAI,EAAIA,EAAM,SAAW,EAGpEA,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,SAAW,KAEjB,KAAK,WAAW,QAAS,gCAAgCF,CAAS,GAAI,CAClE,YAAahC,EACb,aAAcoC,EACd,YAAaF,EAAM,MAAM,MAC7B,CAAC,EAGD,KAAK,oBAAoBF,CAAS,CAEtC,OAAS1Y,EAAO,CAEZ,WAAK,WAAW,QAAS,8CAA+C,CACpE,UAAW0Y,EACX,YAAahC,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGD4Y,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,SAAW,KACjBA,EAAM,YAAc,KAEd5Y,CACV,CACJ,CAKA,oBAAoB0Y,EAAW,CAC3B,IAAME,EAAQ,KAAK,IAAIF,CAAS,OAAO,EAEvC,GAAI,CAACE,EAAO,CACR,KAAK,WAAW,QAAS,yCAAyCF,CAAS,EAAE,EAC7E,MACJ,CAEA,GAAIE,EAAM,MAAM,SAAW,EACvB,OAIJ,GAAIA,EAAM,OAAQ,CACd,KAAK,WAAW,OAAQ,UAAUF,CAAS,+CAAgD,CACvF,OAAQE,EAAM,OACd,YAAaA,EAAM,MAAM,MAC7B,CAAC,EACD,MACJ,CAGA,IAAMG,EAAWH,EAAM,MAAM,MAAM,EAEnC,GAAI,CAACG,EAAU,CACX,KAAK,WAAW,OAAQ,+BAA+BL,CAAS,GAAG,EACnE,MACJ,CAGA,GAAI,CAACK,EAAS,aAAe,CAACA,EAAS,SAAW,CAACA,EAAS,OAAQ,CAChE,KAAK,WAAW,QAAS,2CAA2CL,CAAS,IAAK,CAC9E,eAAgB,CAAC,CAACK,EAAS,YAC3B,WAAY,CAAC,CAACA,EAAS,QACvB,UAAW,CAAC,CAACA,EAAS,MAC1B,CAAC,EACD,MACJ,CAEA,GAAI,CAEIA,EAAS,SACT,aAAaA,EAAS,OAAO,EAIjC,KAAK,WAAW,QAAS,iDAAiDL,CAAS,IAAK,CACpF,YAAaK,EAAS,YACtB,eAAgBH,EAAM,MAAM,OAC5B,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,WAAW,SAAY,CACnB,GAAI,CACA,MAAM,KAAK,cAAcF,EAAWK,EAAS,YAAa,GAAI,EAE9D,KAAK,WAAW,QAAS,oCAAoCL,CAAS,IAAK,CACvE,YAAaK,EAAS,YACtB,gBAAiB,KAAK,IAAI,CAC9B,CAAC,EAEDA,EAAS,QAAQ,CAErB,OAAS/Y,EAAO,CACZ,KAAK,WAAW,QAAS,6CAA6C0Y,CAAS,IAAK,CAChF,YAAaK,EAAS,YACtB,UAAW/Y,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD+Y,EAAS,OAAO,IAAI,MAAM,gCAAgCL,CAAS,MAAM1Y,EAAM,OAAO,EAAE,CAAC,EAGzF,WAAW,IAAM,CACb,KAAK,oBAAoB0Y,CAAS,CACtC,EAAG,EAAE,CACT,CACJ,EAAG,EAAE,CAET,OAAS1Y,EAAO,CACZ,KAAK,WAAW,QAAS,qDAAqD0Y,CAAS,IAAK,CACxF,YAAaK,EAAS,YACtB,UAAW/Y,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGD,GAAI,CACA+Y,EAAS,OAAO,IAAI,MAAM,oCAAoC/Y,EAAM,OAAO,EAAE,CAAC,CAClF,OAASgZ,EAAa,CAClB,KAAK,WAAW,QAAS,8BAA+B,CACpD,cAAehZ,EAAM,QACrB,YAAagZ,EAAY,OAC7B,CAAC,CACL,CAGA,WAAW,IAAM,CACb,KAAK,oBAAoBN,CAAS,CACtC,EAAG,GAAG,CACV,CACJ,CAEA,sBAAuB,CACnB,IAAMO,EAAU,CAAC,EACXC,EAAgB,OAAO,oBAAoB,IAAI,EAErD,QAAWC,KAAQD,EACf,GAAIC,EAAK,SAAS,OAAO,GAAKA,EAAK,WAAW,GAAG,EAAG,CAEhD,IAAMT,EAAYS,EAAK,MAAM,EAAG,EAAE,EAClCF,EAAQ,KAAKP,CAAS,CAC1B,CAGJ,OAAOO,CACX,CAKA,MAAM,WAAWP,EAAWxO,EAAWpI,EAAU,IAAM,CACnD,IAAM4U,EAAc,KAAK,qBAAqB,EAG9C,GAAI,CAAC,KAAK,qBAAqB,EAC3B,WAAK,WAAW,QAAS,wCAAyC,CAC9D,YAAaA,EACb,UAAWgC,CACf,CAAC,EACK,IAAI,MAAM,6EAA6E,EAIjG,IAAME,EAAQ,KAAK,IAAIF,CAAS,OAAO,EACvC,GAAI,CAACE,EACD,MAAM,IAAI,MAAM,UAAUF,CAAS,aAAa,EAGpD,IAAIU,EAAgB,GAEpB,GAAI,CAEA,MAAM,KAAK,cAAcV,EAAWhC,EAAa5U,CAAO,EACxDsX,EAAgB,GAGhB,IAAMC,EAAa,GAAGX,CAAS,aAC3B,KAAK,oBAAsB,KAAK,mBAAmBW,CAAU,IAAM,QACnE,KAAK,mBAAmBA,CAAU,IAItC,IAAMtJ,EAAS,MAAM7F,EAAUwM,CAAW,EAG1C,OAAI3G,IAAW,QAAa7F,EAAU,OAAS,WAC3C,KAAK,WAAW,OAAQ,4CAA6C,CACjE,YAAawM,EACb,UAAWgC,EACX,cAAexO,EAAU,IAC7B,CAAC,EAGE6F,CAEX,OAAS/P,EAAO,CAEZ,WAAK,WAAW,QAAS,2BAA4B,CACjD,YAAa0W,EACb,UAAWgC,EACX,UAAW1Y,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,cAAeoZ,EACf,WAAYR,EAAQ,CAChB,OAAQA,EAAM,OACd,OAAQA,EAAM,OACd,YAAaA,EAAM,MAAM,MAC7B,EAAI,MACR,CAAC,EAGDF,IAAc,gBACd,KAAK,yBAAyB1Y,EAAO0W,CAAW,GAIhD1W,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,gBAAgB,IAC5E,KAAK,2BAA2B,cAAc,EAGxCA,CACV,QAAE,CAEE,GAAIoZ,EACA,GAAI,CACA,MAAM,KAAK,cAAcV,EAAWhC,CAAW,EAG3CkC,EAAM,QAAUA,EAAM,SAAWlC,IACjC,KAAK,WAAW,QAAS,oCAAqC,CAC1D,YAAaA,EACb,UAAWgC,CACf,CAAC,EAEDE,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,YAAc,KAG5B,OAASU,EAAc,CACnB,KAAK,WAAW,QAAS,yCAA0C,CAC/D,YAAa5C,EACb,UAAWgC,EACX,iBAAkBY,EAAa,YAAY,KAC3C,oBAAqBA,EAAa,OACtC,CAAC,EAGDV,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,YAAc,IACxB,CAER,CACJ,CAEA,sBAAuB,CACnB,IAAMW,EAAkB,CAAC,eAAgB,kBAAmB,qBAAqB,EAEjF,QAAWb,KAAaa,EAAiB,CACrC,IAAMZ,EAAoB,IAAID,CAAS,QACjCE,EAAQ,KAAKD,CAAiB,EAEpC,GAAI,CAACC,GAAS,OAAOA,GAAU,SAC3B,YAAK,WAAW,QAAS,6BAA6BF,CAAS,GAAI,CAC/D,kBAAmBC,EACnB,UAAW,OAAOC,CACtB,CAAC,EACM,GAIX,IAAMY,EAAgB,CAAC,SAAU,QAAS,SAAU,aAAa,EACjE,QAAWL,KAAQK,EACf,GAAI,EAAEL,KAAQP,GACV,YAAK,WAAW,QAAS,SAASF,CAAS,sBAAsBS,CAAI,EAAE,EAChE,EAGnB,CAEA,MAAO,EACX,CAKA,8BAA+B,CAC3B,KAAK,WAAW,OAAQ,2CAA2C,EAEnE,GAAI,CAQA,GANA,KAAK,2BAA2B,mBAAmB,EAGnD,KAAK,uBAAuB,EAGxB,CAAC,KAAK,qBAAqB,EAC3B,MAAM,IAAI,MAAM,+CAA+C,EAGnE,YAAK,WAAW,OAAQ,qDAAqD,EACtE,EAEX,OAASnZ,EAAO,CACZ,KAAK,WAAW,QAAS,iCAAkC,CACvD,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGD,GAAI,CACA,YAAK,uBAAuB,EAC5B,KAAK,WAAW,OAAQ,iDAAiD,EAClE,EACX,OAASyZ,EAAa,CAClB,YAAK,WAAW,QAAS,iDAAkD,CACvE,cAAezZ,EAAM,QACrB,YAAayZ,EAAY,OAC7B,CAAC,EACM,EACX,CACJ,CACJ,CAKA,MAAM,yBAA0B,CAC5B,OAAO,KAAK,WAAW,eAAgB,MAAO/C,GAAgB,CAC1D,KAAK,WAAW,OAAQ,+CAAgD,CACpE,YAAaA,CACjB,CAAC,EAGD,IAAM/R,EAAe,KAAK,gBAG1B,GAAIA,EAAa,eAAgB,CAC7B,KAAK,WAAW,OAAQ,6DAA8D,CAClF,YAAa+R,EACb,cAAe/R,EAAa,cAC5B,kBAAmBA,EAAa,iBACpC,CAAC,EAGD,IAAI+U,EAAe,EACbC,EAAkB,GAExB,KAAOhV,EAAa,gBAAkB+U,EAAeC,GACjD,MAAM,IAAI,QAAQ5Y,GAAW,WAAWA,EAAS,GAAG,CAAC,EACrD2Y,IAGJ,GAAI/U,EAAa,eACb,MAAM,IAAI,MAAM,sEAAsE,CAE9F,CAGA,GAAI,CAEAA,EAAa,eAAiB,GAC9BA,EAAa,cAAgB,aAC7BA,EAAa,kBAAoB,KAAK,IAAI,EAC1CA,EAAa,YAAc+R,EAE3B,KAAK,WAAW,QAAS,kCAAmC,CACxD,YAAaA,EACb,UAAW/R,EAAa,iBAC5B,CAAC,EAGD,IAAIiV,EAAc,KACdC,EAAe,KAGnB,GAAI,CAIA,GAHAD,EAAc,MAAM,KAAK,2BAA2B,EAGhD,CAACA,GAAe,CAACA,EAAY,YAAc,CAACA,EAAY,UACxD,MAAM,IAAI,MAAM,2CAA2C,EAI/D,GAAI,CAAC,KAAK,6BAA6BA,CAAW,EAC9C,MAAM,IAAI,MAAM,uDAAuD,EAG3E,KAAK,WAAW,QAAS,sDAAuD,CAC5E,YAAalD,EACb,eAAgBkD,EAAY,WAAW,WAAW,KAClD,cAAeA,EAAY,UAAU,WAAW,KAChD,YAAa,EACjB,CAAC,CAEL,OAASE,EAAW,CAChB,KAAK,WAAW,QAAS,uCAAwC,CAC7D,YAAapD,EACb,UAAWoD,EAAU,YAAY,IACrC,CAAC,EACD,KAAK,kBAAkBA,EAAW,+BAA+B,CACrE,CAGA,GAAI,CAIJ,GAHID,EAAe,MAAM,OAAO,0BAA0B,qBAAqB,EAG3E,CAACA,GAAgB,CAACA,EAAa,YAAc,CAACA,EAAa,UAC3D,MAAM,IAAI,MAAM,kCAAkC,EAItD,GAAI,CAAC,KAAK,6BAA6BA,CAAY,EAC/C,MAAM,IAAI,MAAM,8CAA8C,EAG9D,KAAK,WAAW,QAAS,qCAAsC,CAC3D,YAAanD,EACb,eAAgBmD,EAAa,WAAW,WAAW,KACnD,cAAeA,EAAa,UAAU,WAAW,IACrD,CAAC,CAEL,OAASE,EAAY,CACjB,KAAK,WAAW,QAAS,8BAA+B,CACpD,YAAarD,EACb,UAAWqD,EAAW,YAAY,IACtC,CAAC,EACD,KAAK,kBAAkBA,EAAY,sBAAsB,CAC7D,CAGA,GAAI,CAACH,GAAe,CAACC,EACjB,MAAM,IAAI,MAAM,0CAA0C,EAI9D,YAAK,0CAA0CD,EAAaC,CAAY,EAExE,KAAK,WAAW,OAAQ,gEAAiE,CACrF,YAAanD,EACb,YAAa,CAAC,EAAEkD,GAAa,YAAcA,GAAa,WACxD,aAAc,CAAC,EAAEC,GAAc,YAAcA,GAAc,WAC3D,eAAgB,KAAK,IAAI,EAAIlV,EAAa,iBAC9C,CAAC,EAEM,CAAE,YAAAiV,EAAa,aAAAC,CAAa,CAEvC,OAAS7Z,EAAO,CAEZ,WAAK,WAAW,QAAS,yCAA0C,CAC/D,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACKA,CACV,QAAE,CAEE2E,EAAa,eAAiB,GAC9BA,EAAa,YAAc,KAE3B,KAAK,WAAW,QAAS,6BAA8B,CACnD,YAAa+R,CACjB,CAAC,CACL,CACJ,CAAC,CACL,CAKA,0CAA0CkD,EAAaC,EAAc,CACjE,GAAI,CAEID,GAAeA,EAAY,YAAcA,EAAY,YACrD,KAAK,iBAAiB,cAAgB,GACtC,KAAK,iBAAiB,QAAU,GAChC,KAAK,WAAW,OAAQ,kCAAkC,GAG1DC,GAAgBA,EAAa,YAAcA,EAAa,YACxD,KAAK,iBAAiB,SAAW,GACjC,KAAK,WAAW,OAAQ,kCAAkC,GAI1D,KAAK,iBAAiB,gBACtB,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,iBAAiB,4BAA8B,GACpD,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,WAAW,OAAQ,kDAAkD,GAI1ED,GAAe,KAAK,kBAAkB,KAAO,IAC7C,KAAK,iBAAiB,OAAS,GAC/B,KAAK,WAAW,OAAQ,qDAAqD,GAGjF,KAAK,WAAW,OAAQ,iDAAkD,CACtE,cAAe,KAAK,iBAAiB,cACrC,QAAS,KAAK,iBAAiB,QAC/B,SAAU,KAAK,iBAAiB,SAChC,sBAAuB,KAAK,iBAAiB,sBAC7C,4BAA6B,KAAK,iBAAiB,4BACnD,sBAAuB,KAAK,iBAAiB,sBAC7C,OAAQ,KAAK,iBAAiB,MAClC,CAAC,CAEL,OAAS5Z,EAAO,CACZ,KAAK,WAAW,QAAS,0DAA2D,CAChF,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,CACJ,CAKA,2BAA2Bga,EAAgB,UAAW,CAElD,IAAMC,EAAoB,CACtB,eAAgB,kBAAmB,sBACnC,oBAAqB,iBAAkB,cAC3C,EAEA,GAAI,CAACA,EAAkB,SAASD,CAAa,EACzC,WAAK,WAAW,QAAS,8CAA+C,CACpE,cAAeA,EACf,kBAAmBC,EACnB,UAAW,KAAK,IAAI,CACxB,CAAC,EACK,IAAI,MAAM,mDAAmDD,CAAa,EAAE,EAGtF,IAAMf,EAAU,CAAC,eAAgB,kBAAmB,qBAAqB,EAEzE,KAAK,WAAW,QAAS,wEAAyE,CAC9F,cAAee,EACf,UAAW,KAAK,IAAI,CACxB,CAAC,EAED,IAAIE,EAAgB,EAChBC,EAAa,EAgEjB,GA9DAlB,EAAQ,QAAQP,GAAa,CACzB,IAAME,EAAQ,KAAK,IAAIF,CAAS,OAAO,EACvC,GAAIE,EACA,GAAI,CAEIA,EAAM,aACN,aAAaA,EAAM,WAAW,EAIlC,IAAMwB,EAAgB,CAClB,OAAQxB,EAAM,OACd,OAAQA,EAAM,OACd,SAAUA,EAAM,SAChB,YAAaA,EAAM,MAAM,MAC7B,EAGAA,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,YAAc,KACpBA,EAAM,SAAW,KAGjB,IAAIyB,EAAmB,EACvBzB,EAAM,MAAM,QAAQrT,GAAQ,CACxB,GAAI,CACIA,EAAK,QAAU,OAAOA,EAAK,QAAW,aACtCA,EAAK,OAAO,IAAI,MAAM,8BAA8BmT,CAAS,OAAOsB,CAAa,EAAE,CAAC,EACpFK,IAER,OAASrB,EAAa,CAClB,KAAK,WAAW,OAAQ,sDAAuD,CAC3E,UAAWN,EACX,UAAWM,EAAY,YAAY,IACvC,CAAC,CACL,CACJ,CAAC,EAGDJ,EAAM,MAAQ,CAAC,EAEfsB,IAEA,KAAK,WAAW,QAAS,6BAA6BxB,CAAS,GAAI,CAC/D,cAAe0B,EACf,iBAAkBC,EAClB,cAAeL,CACnB,CAAC,CAEL,OAASha,EAAO,CACZma,IACA,KAAK,WAAW,QAAS,2CAA2CzB,CAAS,GAAI,CAC7E,UAAW1Y,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,cAAega,CACnB,CAAC,CACL,CAER,CAAC,EAGG,KAAK,gBACL,GAAI,CACA,IAAMM,EAAmB,CAAE,GAAG,KAAK,eAAgB,EAEnD,KAAK,gBAAgB,eAAiB,GACtC,KAAK,gBAAgB,WAAa,GAClC,KAAK,gBAAgB,aAAe,GACpC,KAAK,gBAAgB,YAAc,KACnC,KAAK,gBAAgB,qBAAuB,EAE5C,KAAK,WAAW,QAAS,mCAAoC,CACzD,cAAeA,EACf,cAAeN,CACnB,CAAC,CAEL,OAASha,EAAO,CACZ,KAAK,WAAW,QAAS,2DAA4D,CACjF,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,cAAega,CACnB,CAAC,CACL,CAIJ,KAAK,WAAW,OAAQ,mCAAoC,CACxD,cAAeA,EACf,cAAeE,EACf,WAAYC,EACZ,aAAclB,EAAQ,OACtB,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,WAAW,IAAM,CACb,KAAK,yCAAyC,CAClD,EAAG,GAAG,CACV,CAKA,yBAAyBjZ,EAAO0W,EAAa,CACzC,KAAK,WAAW,QAAS,oDAAqD,CAC1E,YAAaA,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGG,KAAK,kBACL,KAAK,gBAAgB,eAAiB,GACtC,KAAK,gBAAgB,WAAa,GAClC,KAAK,gBAAgB,aAAe,GACpC,KAAK,gBAAgB,YAAc,MAIvC,KAAK,YAAc,KACnB,KAAK,aAAe,KACpB,KAAK,cAAgB,KACrB,KAAK,OAAS,KACd,KAAK,YAAc,MAGfA,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,gBAAgB,KAC5E,KAAK,WAAW,OAAQ,mEAAmE,EAC3F,KAAK,6BAA6B,EAE1C,CAKA,kBAAkBua,EAAS,GAAI/Z,EAAU,UAAW,CAEhD,GAAI,KAAK,kBAAkB,cACvB,WAAK,WAAW,QAAS,yEAAyE,EAC5F,IAAI,MAAM,+CAA+C,EAGnE,IAAIqF,EAAW,EACTC,EAAc,IAEpB,KAAOD,EAAWC,GAAa,CAC3BD,IAGA,IAAMmM,EAAK,OAAO,gBAAgB,IAAI,WAAWuI,CAAM,CAAC,EAGlDC,EAAW,MAAM,KAAKxI,CAAE,EAAE,IAAI/R,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAGjF,GAAI,KAAK,kBAAkB,QAAQ,IAAIua,CAAQ,EAAG,CAU9C,GATA,KAAK,kBAAkB,iBACvB,KAAK,WAAW,QAAS,+BAAgC,CACrD,QAASha,EACT,QAASqF,EACT,eAAgB,KAAK,kBAAkB,eACvC,SAAU2U,EAAS,UAAU,EAAG,EAAE,EAAI,KAC1C,CAAC,EAGG,KAAK,kBAAkB,eAAiB,EACxC,WAAK,kBAAkB,cAAgB,GACvC,KAAK,WAAW,QAAS,8DAA8D,EACjF,IAAI,MAAM,6CAA6C,EAGjE,QACJ,CAGA,GAAI,CAAC,KAAK,mBAAmBxI,CAAE,EAAG,CAS9B,GARA,KAAK,kBAAkB,kBAAkB,kBACzC,KAAK,WAAW,OAAQ,0BAA2B,CAC/C,QAASxR,EACT,QAASqF,EACT,gBAAiB,KAAK,kBAAkB,kBAAkB,eAC9D,CAAC,EAGG,KAAK,kBAAkB,kBAAkB,gBAAkB,GAC3D,WAAK,kBAAkB,cAAgB,GACvC,KAAK,WAAW,QAAS,2DAA2D,EAC9E,IAAI,MAAM,0CAA0C,EAG9D,QACJ,CAGA,YAAK,kBAAkB,QAAQ,IAAI2U,CAAQ,EAC3C,KAAK,kBAAkB,UAAU,IAAIA,EAAU,CAC3C,UAAW,KAAK,IAAI,EACpB,QAASha,EACT,QAASqF,CACb,CAAC,EAGG,KAAK,YACA,KAAK,kBAAkB,WAAW,IAAI,KAAK,SAAS,GACrD,KAAK,kBAAkB,WAAW,IAAI,KAAK,UAAW,IAAI,GAAK,EAEnE,KAAK,kBAAkB,WAAW,IAAI,KAAK,SAAS,EAAE,IAAI2U,CAAQ,GAItE,KAAK,oBAAoB,EAEzB,KAAK,WAAW,QAAS,sBAAuB,CAC5C,QAASha,EACT,QAASqF,EACT,OAAQ0U,EACR,SAAU,KAAK,kBAAkB,QAAQ,IAC7C,CAAC,EAEMvI,CACX,CAGA,WAAK,WAAW,QAAS,sCAAsClM,CAAW,YAAa,CACnF,QAAStF,EACT,SAAU,KAAK,kBAAkB,QAAQ,IAC7C,CAAC,EACK,IAAI,MAAM,sCAAsCsF,CAAW,WAAW,CAChF,CAKA,mBAAmBkM,EAAI,CACnB,KAAK,kBAAkB,kBAAkB,eAGzC,IAAMyI,EAAa,IAAI,MAAM,GAAG,EAAE,KAAK,CAAC,EACxC,QAASnZ,EAAI,EAAGA,EAAI0Q,EAAG,OAAQ1Q,IAC3BmZ,EAAWzI,EAAG1Q,CAAC,CAAC,IAIpB,IAAMoZ,EAAiB,CACnB,QAAS,EACT,IAAK,EACL,UAAW,EACX,YAAa,EACb,QAAS,CACb,EAGIC,EAAiB,EACfC,EAAa5I,EAAG,OAEtB,QAAS1Q,EAAI,EAAGA,EAAI,IAAKA,IACrB,GAAImZ,EAAWnZ,CAAC,EAAI,EAAG,CACnB,IAAMwG,EAAc2S,EAAWnZ,CAAC,EAAIsZ,EACpCD,GAAkB7S,EAAc,KAAK,KAAKA,CAAW,CACzD,CAEJ4S,EAAe,QAAUC,EAIzB,IAAME,EADW,KAAK,IAAI,GAAGJ,CAAU,EACLG,EAClCF,EAAe,IAAM,CAAC,KAAK,KAAKG,CAAc,EAG9C,IAAIC,EAAe,EACnB,QAASxZ,EAAI,EAAGA,EAAI,IAAKA,IACrB,GAAImZ,EAAWnZ,CAAC,EAAI,EAAG,CACnB,IAAMwG,EAAc2S,EAAWnZ,CAAC,EAAIsZ,EACpCE,GAAgBhT,EAAcA,CAClC,CAEJ4S,EAAe,UAAY,CAAC,KAAK,KAAKI,CAAY,EAGlD,IAAMN,EAAW,MAAM,KAAKxI,CAAE,EAAE,IAAI/R,GAAK,OAAO,aAAaA,CAAC,CAAC,EAAE,KAAK,EAAE,EAClE8a,EAAmB,KAAK,0BAA0BP,CAAQ,EAChEE,EAAe,aAAe,EAAIK,EAAmBH,GAAc,EAGnEF,EAAe,QAAU,KAAK,kCAAkC1I,CAAE,EAGlE,IAAMgJ,EAAwB,KAAK,kCAAkChJ,CAAE,EAGjEiJ,EAAsB,KAAK,kBAAkB,kBAAkB,WAC/D9U,EACFuU,EAAe,SAAWO,GAC1BP,EAAe,KAAOO,EAAsB,IAC5CP,EAAe,WAAaO,EAAsB,IAClDP,EAAe,aAAeO,EAAsB,IACpDP,EAAe,SAAWO,EAAsB,IAChD,CAACD,EAGL,OAAK7U,GACD,KAAK,WAAW,OAAQ,wCAAyC,CAC7D,QAASuU,EAAe,QAAQ,QAAQ,CAAC,EACzC,IAAKA,EAAe,IAAI,QAAQ,CAAC,EACjC,UAAWA,EAAe,UAAU,QAAQ,CAAC,EAC7C,YAAaA,EAAe,YAAY,QAAQ,CAAC,EACjD,QAASA,EAAe,QAAQ,QAAQ,CAAC,EACzC,aAAcO,EACd,sBAAuBD,CAC3B,CAAC,EAGE7U,CACX,CAOA,0BAA0BlE,EAAM,CAE5B,IAAI8Y,EAAmB,EACnBzZ,EAAI,EAER,KAAOA,EAAIW,EAAK,QAAQ,CACpB,IAAIiZ,EAAc,EACdC,EAAgB,EAGpB,QAASC,EAAI,KAAK,IAAI,EAAG9Z,EAAI,GAAG,EAAG8Z,EAAI9Z,EAAG8Z,IAAK,CAC3C,IAAIC,EAAI,EACR,KAAO/Z,EAAI+Z,EAAIpZ,EAAK,QAAUA,EAAKX,EAAI+Z,CAAC,IAAMpZ,EAAKmZ,EAAIC,CAAC,GAAKA,EAAI,KAC7DA,IAEAA,EAAIH,IACJA,EAAcG,EACdF,EAAgB7Z,EAAI8Z,EAE5B,CAEIF,GAAe,GACfH,GAAoB,EACpBzZ,GAAK4Z,IAELH,GAAoB,EACpBzZ,GAAK,EAEb,CAEA,OAAOyZ,CACX,CAOA,kCAAkC9Y,EAAM,CAEpC,IAAIqZ,EAAe,EAGkB,KAAK,iCAAiCrZ,CAAI,IAE3EqZ,GAAgB,GAIpB,IAAMC,EAAkB,KAAK,wBAAwBtZ,CAAI,EACzDqZ,GAAgBC,EAAgB,MAGhC,IAAMC,EAAc,KAAK,mBAAmBvZ,CAAI,EAChD,OAAAqZ,GAAgBE,EAAc,GAGvB,KAAK,IAAI,EAAG,KAAK,IAAI,EAAGF,CAAY,CAAC,CAChD,CAOA,iCAAiCrZ,EAAM,CAEnC,IAAMwZ,EAAW,CACb,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,EACvB,CAAC,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,GAAG,EACvC,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,EACvB,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,CAC3B,EAEA,QAAWlU,KAAWkU,EAClB,QAAS,EAAI,EAAG,GAAKxZ,EAAK,OAASsF,EAAQ,OAAQ,IAAK,CACpD,IAAI2D,EAAQ,GACZ,QAASkQ,EAAI,EAAGA,EAAI7T,EAAQ,OAAQ6T,IAChC,GAAInZ,EAAK,EAAImZ,CAAC,IAAM7T,EAAQ6T,CAAC,EAAG,CAC5BlQ,EAAQ,GACR,KACJ,CAEJ,GAAIA,EAAO,MAAO,EACtB,CAGJ,MAAO,EACX,CAOA,wBAAwBjJ,EAAM,CAC1B,IAAIyZ,EAAO,EACPC,EAAY1Z,EAAK,OAAS,EAE9B,QAAW2Z,KAAQ3Z,EACfyZ,IAASE,IAAS,GAAG,SAAS,CAAC,EAAE,MAAM,GAAG,EAAE,OAAS,EAGzD,IAAMC,GAAaF,EAAYD,GAAQC,EACjCG,EAAWJ,EAAOC,EAGlBI,EAAY,KAAK,IAAI,GAAMD,CAAQ,EAGzC,MAAO,CAAE,MAFK,KAAK,IAAI,EAAG,EAAIC,EAAY,EAAE,EAE5B,UAAAF,EAAW,SAAAC,EAAU,UAAAC,CAAU,CACnD,CAOA,mBAAmB9Z,EAAM,CACrB,GAAIA,EAAK,OAAS,GAAI,MAAO,GAE7B,IAAI+Z,EAAiB,EAGrB,QAASC,EAAS,EAAGA,GAAUha,EAAK,OAAS,EAAGga,IAAU,CACtD,IAAIC,EAAU,EACVC,EAAc,EAElB,QAAS7a,EAAI,EAAGA,EAAIW,EAAK,OAASga,EAAQ3a,IAClCW,EAAKX,CAAC,IAAMW,EAAKX,EAAI2a,CAAM,GAC3BC,IAEJC,IAGJ,GAAIA,EAAc,EAAG,CACjB,IAAMX,EAAcU,EAAUC,EAC9BH,EAAiB,KAAK,IAAIA,EAAgBR,CAAW,CACzD,CACJ,CAEA,OAAOQ,CACX,CAOA,kCAAkChK,EAAI,CAElC,IAAMyJ,EAAW,CAEb,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,EACvB,CAAC,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,GAAG,EAGvC,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,EACvB,CAAC,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,GAAG,EAGvC,CAAC,EAAG,IAAK,EAAG,IAAK,EAAG,IAAK,EAAG,GAAG,EAC/B,CAAC,IAAK,EAAG,IAAK,EAAG,IAAK,EAAG,IAAK,CAAC,CACnC,EAEA,QAAWlU,KAAWkU,EAClB,QAASna,EAAI,EAAGA,GAAK0Q,EAAG,OAASzK,EAAQ,OAAQjG,IAAK,CAClD,IAAI4J,EAAQ,GACZ,QAASkQ,EAAI,EAAGA,EAAI7T,EAAQ,OAAQ6T,IAChC,GAAIpJ,EAAG1Q,EAAI8Z,CAAC,IAAM7T,EAAQ6T,CAAC,EAAG,CAC1BlQ,EAAQ,GACR,KACJ,CAEJ,GAAIA,EAAO,MAAO,EACtB,CAOJ,OAHmB,KAAK,uBAAuB8G,CAAE,EACZ,OAAOjQ,GAAKA,EAAI,CAAG,EAAE,OAE/BiQ,EAAG,OAAS,EAC3C,CAOA,uBAAuB/P,EAAM,CAEzB,IAAMma,EAAa,CAAC,EAEpB,QAAS,EAAI,EAAG,GAAKna,EAAK,OAAS,EAAY,IAAK,CAChD,IAAMoa,EAASpa,EAAK,MAAM,EAAG,EAAI,CAAU,EACrCyF,EAAY,CAAC,EAEnB,QAAWkU,KAAQS,EACf3U,EAAUkU,CAAI,GAAKlU,EAAUkU,CAAI,GAAK,GAAK,EAG/C,IAAI/T,EAAU,EACd,QAAWlB,KAAS,OAAO,OAAOe,CAAS,EAAG,CAC1C,IAAMI,EAAcnB,EAAQ,EAC5BkB,GAAWC,EAAc,KAAK,KAAKA,CAAW,CAClD,CAEAsU,EAAW,KAAKvU,CAAO,CAC3B,CAEA,OAAOuU,CACX,CAKA,4BAA4BpK,EAAI,CAE5B,IAAMsK,EAAWtK,EAAG,MAAM4J,GAAQA,IAAS,CAAC,EACtCW,EAAUvK,EAAG,MAAM4J,GAAQA,IAAS,GAAG,EAE7C,GAAIU,GAAYC,EACZ,MAAO,GAIX,IAAIC,EAAkB,EACtB,QAASlb,EAAI,EAAGA,EAAI0Q,EAAG,OAAQ1Q,IAO3B,GANI0Q,EAAG1Q,CAAC,IAAM0Q,EAAG1Q,EAAE,CAAC,EAAI,GAAK0Q,EAAG1Q,CAAC,IAAM0Q,EAAG1Q,EAAE,CAAC,EAAI,EAC7Ckb,IAEAA,EAAkB,EAGlBA,GAAmB,EACnB,MAAO,GAKf,QAASC,EAAgB,EAAGA,GAAiB,KAAK,MAAMzK,EAAG,OAAS,CAAC,EAAGyK,IACpE,QAASC,EAAQ,EAAGA,GAAS1K,EAAG,OAASyK,EAAgB,EAAGC,IAAS,CACjE,IAAMC,EAAW3K,EAAG,MAAM0K,EAAOA,EAAQD,CAAa,EAChDG,EAAW5K,EAAG,MAAM0K,EAAQD,EAAeC,EAAQD,EAAgB,CAAC,EAE1E,GAAIE,EAAS,MAAM,CAACf,EAAMpT,IAAUoT,IAASgB,EAASpU,CAAK,CAAC,EACxD,MAAO,EAEf,CAGJ,MAAO,EACX,CAKA,MAAM,gBAAiB,CACnB,IAAM5D,EAAM,KAAK,IAAI,EACfoL,EAAS,KACX6M,EAAe,EACbC,EAAe,CAAC,EAItB,GAAI,KAAK,kBAAkB,UAAU,KAAO,KAAK,kBAAkB,iBAAkB,CACjF,IAAMC,EAAU,MAAM,KAAK,KAAK,kBAAkB,UAAU,QAAQ,CAAC,EAC/DC,EAAWD,EAAQ,MAAM,EAAGA,EAAQ,OAAS,KAAK,kBAAkB,gBAAgB,EAE1F,OAAW,CAACvC,CAAQ,IAAKwC,EACrBF,EAAa,KAAKtC,CAAQ,EAC1BqC,IAGIC,EAAa,QAAU,MACvB,KAAK,qBAAqBA,CAAY,EACtCA,EAAa,OAAS,EAGlC,CAGA,OAAW,CAACtC,EAAUyC,CAAQ,IAAK,KAAK,kBAAkB,UAAU,QAAQ,EACpErY,EAAMqY,EAAS,UAAYjN,IAC3B8M,EAAa,KAAKtC,CAAQ,EAC1BqC,IAGIC,EAAa,QAAU,MACvB,KAAK,qBAAqBA,CAAY,EACtCA,EAAa,OAAS,IAM9BA,EAAa,OAAS,GACtB,KAAK,qBAAqBA,CAAY,EAI1C,OAAW,CAAC1N,EAAW8N,CAAU,IAAK,KAAK,kBAAkB,WAAW,QAAQ,EAC5E,GAAIA,EAAW,KAAO,KAAK,kBAAkB,cAAe,CACxD,IAAMH,EAAU,MAAM,KAAKG,CAAU,EAC/BF,EAAWD,EAAQ,MAAM,EAAGA,EAAQ,OAAS,KAAK,kBAAkB,aAAa,EAEvF,QAAWvC,KAAYwC,EACnBE,EAAW,OAAO1C,CAAQ,EAC1B,KAAK,kBAAkB,QAAQ,OAAOA,CAAQ,EAC9C,KAAK,kBAAkB,UAAU,OAAOA,CAAQ,EAChDqC,GAER,CAIAA,EAAe,IACf,MAAM,KAAK,uBAAuB,EAGlCA,EAAe,GACf,KAAK,WAAW,QAAS,qBAAqBA,CAAY,mBAAoB,CAC1E,aAAcA,EACd,aAAc,KAAK,kBAAkB,QAAQ,KAC7C,iBAAkB,KAAK,kBAAkB,UAAU,KACnD,eAAgB,KAAK,yBAAyB,CAClD,CAAC,CAET,CAMA,qBAAqBtb,EAAO,CAExB,QAAWgE,KAAQhE,EACf,KAAK,kBAAkB,QAAQ,OAAOgE,CAAI,EAC1C,KAAK,kBAAkB,UAAU,OAAOA,CAAI,CAEpD,CAMA,0BAA2B,CACvB,IAAM4X,EAAW,KAAK,kBAAkB,QAAQ,KAC1CC,EAAa,KAAK,gBAAgB,aAExC,OAAO,KAAK,IAAI,IAAK,KAAK,MAAOD,EAAWC,EAAc,GAAG,CAAC,CAClE,CAKA,qBAAsB,CAClB,MAAO,CACH,SAAU,KAAK,kBAAkB,QAAQ,KACzC,eAAgB,KAAK,kBAAkB,eACvC,aAAc,KAAK,kBAAkB,kBAAkB,aACvD,gBAAiB,KAAK,kBAAkB,kBAAkB,gBAC1D,SAAU,KAAK,kBAAkB,cAAc,eAC/C,gBAAiB,KAAK,kBAAkB,cAAc,gBACtD,cAAe,KAAK,kBAAkB,cACtC,aAAc,KAAK,kBAAkB,WAAW,KAChD,YAAa,KAAK,oBAAsB,CAC5C,CACJ,CAKA,wBAAyB,CACrB,KAAK,WAAW,OAAQ,8BAA8B,EAEtD,KAAK,kBAAkB,QAAQ,MAAM,EACrC,KAAK,kBAAkB,UAAU,MAAM,EACvC,KAAK,kBAAkB,WAAW,MAAM,EACxC,KAAK,kBAAkB,eAAiB,EACxC,KAAK,kBAAkB,kBAAkB,aAAe,EACxD,KAAK,kBAAkB,kBAAkB,gBAAkB,EAC3D,KAAK,kBAAkB,cAAc,eAAiB,EACtD,KAAK,kBAAkB,cAAc,gBAAkB,GACvD,KAAK,kBAAkB,cAAgB,GAEvC,KAAK,WAAW,OAAQ,oCAAoC,CAChE,CAKA,qBAAsB,CAClB,IAAMxY,EAAM,KAAK,IAAI,EAGrB,GAAI,KAAK,kBAAkB,cAAc,eAAiB,MAAS,EAC/D,GAAI,CAEA,IAAMyY,EAAU,CAAC,EACjB,QAAS/b,EAAI,EAAGA,EAAI,IAAKA,IACrB+b,EAAQ,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EAI3D,IAAMC,EAAgBD,EAAQ,IAAIrL,GAAM,MAAM,KAAKA,CAAE,EAAE,IAAI/R,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EACnGsd,EAAgB,IAAI,IAAID,CAAa,EAEvCC,EAAc,KAAO,KACrB,KAAK,kBAAkB,cAAc,gBAAkB,GACvD,KAAK,WAAW,QAAS,iDAAkD,CACvE,UAAWA,EAAc,KACzB,WAAYF,EAAQ,MACxB,CAAC,GAGL,KAAK,kBAAkB,cAAc,eAAiBzY,CAE1D,OAAS5E,EAAO,CACZ,KAAK,WAAW,QAAS,wBAAyB,CAC9C,UAAWA,EAAM,YAAY,IACjC,CAAC,CACL,CAGJ,KAAK,kBAAkB,cAAc,gBACzC,CAKA,oBAAoB0Y,EAAWhC,EAAa5U,EAAS,CACjD,IAAM8W,EAAQ,KAAK,IAAIF,CAAS,OAAO,EAEvC,GAAI,CAACE,EAAO,CACR,KAAK,WAAW,QAAS,UAAUF,CAAS,qCAAqC,EACjF,MACJ,CAGA,GAAIE,EAAM,SAAWlC,EAAa,CAC9B,KAAK,WAAW,OAAQ,gDAAgDgC,CAAS,IAAK,CAClF,oBAAqBhC,EACrB,aAAckC,EAAM,OACpB,OAAQA,EAAM,MAClB,CAAC,EACD,MACJ,CAEA,GAAI,CAACA,EAAM,OAAQ,CACf,KAAK,WAAW,OAAQ,uCAAuCF,CAAS,IAAK,CACzE,YAAahC,CACjB,CAAC,EACD,MACJ,CAEA,GAAI,CAEA,IAAMoC,EAAeF,EAAM,SAAW,KAAK,IAAI,EAAIA,EAAM,SAAW,EAEpE,KAAK,WAAW,OAAQ,UAAUF,CAAS,iCAAkC,CACzE,YAAahC,EACb,aAAcoC,EACd,QAAShX,EACT,YAAa8W,EAAM,MAAM,MAC7B,CAAC,EAGDA,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,YAAc,KACpBA,EAAM,SAAW,KAGjB,WAAW,IAAM,CACb,GAAI,CACA,KAAK,oBAAoBF,CAAS,CACtC,OAAS8E,EAAY,CACjB,KAAK,WAAW,QAAS,mDAAmD9E,CAAS,IAAK,CACtF,UAAW8E,EAAW,YAAY,KAClC,aAAcA,EAAW,OAC7B,CAAC,CACL,CACJ,EAAG,EAAE,CAET,OAASxd,EAAO,CACZ,KAAK,WAAW,QAAS,qDAAqD0Y,CAAS,IAAK,CACxF,YAAahC,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGD,GAAI,CACA,KAAK,2BAA2B,gBAAgB,CACpD,OAASyd,EAAgB,CACrB,KAAK,WAAW,QAAS,kDAAmD,CACxE,cAAezd,EAAM,QACrB,eAAgByd,EAAe,OACnC,CAAC,CACL,CACJ,CACJ,CAKA,0CAA2C,CACvC,IAAMxE,EAAU,CAAC,eAAgB,kBAAmB,qBAAqB,EACrEyE,EAAmB,EAEvB,KAAK,WAAW,OAAQ,gDAAgD,EAExEzE,EAAQ,QAAQP,GAAa,CACzB,IAAME,EAAQ,KAAK,IAAIF,CAAS,OAAO,EAEvC,GAAI,CAACE,EAAO,CACR8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,oCAAoC,EAChF,MACJ,CAGIE,EAAM,SACN8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,wCAAyC,CACjF,OAAQE,EAAM,OACd,SAAUA,EAAM,QACpB,CAAC,GAGDA,EAAM,SAAW,OACjB8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,6CAA8C,CACtF,OAAQE,EAAM,MAClB,CAAC,GAGDA,EAAM,cAAgB,OACtB8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,4CAA4C,GAGxFE,EAAM,MAAM,OAAS,IACrB8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,iDAAkD,CAC1F,YAAaE,EAAM,MAAM,MAC7B,CAAC,EAET,CAAC,EAGG,KAAK,kBACD,KAAK,gBAAgB,gBACrB,KAAK,gBAAgB,YACrB,KAAK,gBAAgB,gBACrB8E,IACA,KAAK,WAAW,QAAS,6DAA8D,CACnF,eAAgB,KAAK,gBAAgB,eACrC,WAAY,KAAK,gBAAgB,WACjC,aAAc,KAAK,gBAAgB,YACvC,CAAC,GAILA,IAAqB,EACrB,KAAK,WAAW,OAAQ,uDAAuD,GAE/E,KAAK,WAAW,QAAS,wDAAyD,CAC9E,iBAAkBA,CACtB,CAAC,EAGD,WAAW,IAAM,CACb,KAAK,6BAA6B,CACtC,EAAG,GAAI,EAEf,CAIA,4BAA6B,CACzB,IAAMtF,EAAc,CAChB,UAAW,KAAK,IAAI,EACpB,YAAa,KAAK,qBAAqB,EACvC,QAAS,CAAC,EACV,SAAU,CAAE,GAAG,KAAK,kBAAmB,EACvC,eAAgB,CAAE,GAAG,KAAK,eAAgB,CAC9C,EAIA,MAFmB,CAAC,eAAgB,kBAAmB,qBAAqB,EAEjE,QAAQM,GAAa,CAC5B,IAAMC,EAAoB,IAAID,CAAS,QACjCE,EAAQ,KAAKD,CAAiB,EAEhCC,EACAR,EAAY,QAAQM,CAAS,EAAI,CAC7B,OAAQE,EAAM,OACd,OAAQA,EAAM,OACd,YAAaA,EAAM,MAAM,OACzB,WAAY,CAAC,CAACA,EAAM,WACxB,EAEAR,EAAY,QAAQM,CAAS,EAAI,CAAE,MAAO,WAAY,CAE9D,CAAC,EAEMN,CACX,CAMA,MAAM,mBAAoB,CACtB,OAAO,KAAK,WAAW,sBAAuB,MAAO1B,GAAgB,CACjE,KAAK,WAAW,OAAQ,mCAAoC,CACxD,YAAaA,EACb,mBAAoB,KAAK,mBACzB,aAAc,KAAK,gBAAgB,iBAAmB,MAC1D,CAAC,EAED,GAAI,CASA,GAHA,KAAK,wBAAwB,EAGzB,CAAC,KAAK,gBAAgB,EACtB,MAAM,IAAI,MAAM,kEAAkE,EAItF,KAAK,mBAAqB,EAG1B,KAAK,YAAc,OAAO,0BAA0B,aAAa,EAEjE,KAAK,WAAW,QAAS,yBAA0B,CAC/C,YAAaA,EACb,WAAY,KAAK,YAAY,OAC7B,YAAa,MAAM,QAAQ,KAAK,WAAW,GAAK,KAAK,YAAY,SAAW,EAChF,CAAC,EAOD,IAAMiH,EAAW,MAAM,KAAK,wBAAwB,EAKpD,GAJA,KAAK,YAAcA,EAAS,YAC5B,KAAK,aAAeA,EAAS,aAGzB,CAAC,KAAK,aAAa,YAAc,CAAC,KAAK,aAAa,UACpD,MAAM,IAAI,MAAM,wCAAwC,EAG5D,GAAI,CAAC,KAAK,cAAc,YAAc,CAAC,KAAK,cAAc,UACtD,MAAM,IAAI,MAAM,yCAAyC,EAQ7D,IAAMC,EAAkB,MAAM,OAAO,0BAA0B,wBAC3D,MAAM,OAAO,OAAO,UAAU,OAAQ,KAAK,YAAY,SAAS,CACpE,EACMC,EAAmB,MAAM,OAAO,0BAA0B,wBAC5D,MAAM,OAAO,OAAO,UAAU,OAAQ,KAAK,aAAa,SAAS,CACrE,EAGA,GAAI,CAACD,GAAmB,CAACC,EACrB,MAAM,IAAI,MAAM,qCAAqC,EAGzD,KAAK,WAAW,OAAQ,iDAAkD,CACtE,YAAanH,EACb,mBAAoB,CAAC,CAACkH,EACtB,oBAAqB,CAAC,CAACC,EACvB,kBAAmBD,EAAgB,OACnC,UAAW,KAAK,IAAI,CACxB,CAAC,EAOD,IAAME,EAAoB,MAAM,OAAO,0BAA0B,6BAC7D,KAAK,YAAY,UACjB,KAAK,aAAa,WAClB,MACJ,EAEMC,EAAqB,MAAM,OAAO,0BAA0B,6BAC9D,KAAK,aAAa,UAClB,KAAK,aAAa,WAClB,OACJ,EAGA,GAAI,CAACD,GAAqB,OAAOA,GAAsB,SACnD,WAAK,WAAW,QAAS,8DAA+D,CAAE,YAAApH,CAAY,CAAC,EACjG,IAAI,MAAM,oFAAoF,EAGxG,GAAI,CAACoH,EAAkB,SAAW,CAACA,EAAkB,UACjD,WAAK,WAAW,QAAS,sEAAuE,CAC5F,YAAApH,EACA,WAAY,CAAC,CAACoH,EAAkB,QAChC,aAAc,CAAC,CAACA,EAAkB,SACtC,CAAC,EACK,IAAI,MAAM,6EAA6E,EAGjG,GAAI,CAACC,GAAsB,OAAOA,GAAuB,SACrD,WAAK,WAAW,QAAS,+DAAgE,CAAE,YAAArH,CAAY,CAAC,EAClG,IAAI,MAAM,qFAAqF,EAGzG,GAAI,CAACqH,EAAmB,SAAW,CAACA,EAAmB,UACnD,WAAK,WAAW,QAAS,uEAAwE,CAC7F,YAAArH,EACA,WAAY,CAAC,CAACqH,EAAmB,QACjC,aAAc,CAAC,CAACA,EAAmB,SACvC,CAAC,EACK,IAAI,MAAM,8EAA8E,EAQlG,KAAK,wBAAwB,CACzB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,gBAAiB,GACjB,sBAAuB,GACvB,OAAQ,EACZ,CAAC,EAMD,KAAK,YAAc,GACnB,KAAK,eAAe,YAAY,EAGhC,KAAK,qBAAqB,EAG1B,KAAK,YAAc,KAAK,eAAe,kBAAkB,aAAc,CACnE,QAAS,EACb,CAAC,EAGD,KAAK,iBAAiB,KAAK,WAAW,EAEtC,KAAK,WAAW,QAAS,uBAAwB,CAC7C,YAAarH,EACb,aAAc,KAAK,YAAY,MAC/B,eAAgB,KAAK,YAAY,OACrC,CAAC,EAOD,IAAMsH,EAAQ,MAAM,KAAK,eAAe,YAAY,CAChD,oBAAqB,GACrB,oBAAqB,EACzB,CAAC,EAED,MAAM,KAAK,eAAe,oBAAoBA,CAAK,EAEnD,GAAI,CACA,IAAMC,EAAiB,KAAK,+BAA+BD,EAAM,GAAG,EACpE,KAAK,wBAA0BC,EAE/B,KAAK,WAAW,OAAQ,0DAA2D,CAC/E,YAAaA,EACb,QAAS,gBACb,CAAC,EAGD,KAAK,mBAAmB,4CAA4CA,CAAc,GAAI,QAAQ,CAClG,OAASje,EAAO,CACZ,KAAK,WAAW,QAAS,gDAAiD,CAAE,MAAOA,EAAM,OAAQ,CAAC,CAEtG,CAKA,IAAMke,EAA6B,KAAK,IAAI,EACtCC,EAA6B,MAAM,KAAK,oBAAoB,EAC5DC,EAAwB,KAAK,6BAA6B,KAAK,eAAe,kBAAkB,GAAG,EACnGC,EAAsBD,EAAsB,MAClD,GAAI,CAACD,GAA8BE,IAAwB,EACvD,WAAK,mBACD,uPAGA,QACJ,EACM,IAAI,MAAM,2FAAsF,EAiC1G,GA/BA,KAAK,WAAWA,EAAsB,EAAI,OAAS,OAAQ,2CAA4C,CACnG,iBAAkBD,EAClB,kBAAmB,KAAK,eAAe,kBACvC,uBAAwB,KAAK,IAAI,EAAIF,EACrC,sBAAuBC,CAC3B,CAAC,EACD,KAAK,4BAA4B,eAAgB,KAAK,eAAe,kBAAkB,IAAK,CACxF,kBAAmB,KAAK,eAAe,kBACvC,uBAAwB,KAAK,IAAI,EAAID,EACrC,sBAAuBC,CAC3B,CAAC,EACIA,GACD,KAAK,mBAAmB,4JAA6J,QAAQ,EAE7LE,IAAwB,GACxB,KAAK,mBAAmB,mIAAoI,QAAQ,EAGxK,KAAK,WAAW,QAAS,0BAA2B,CAChD,YAAa3H,EACb,kBAAmB,KAAK,eAAe,kBACvC,gBAAiB,KAAK,eAAe,eACzC,CAAC,EAMD,KAAK,iBAAmB,OAAO,0BAA0B,yBAAyB,EAG9E,CAAC,KAAK,kBAAoB,KAAK,iBAAiB,OAASnX,EAA4B,MAAM,6BAC3F,MAAM,IAAI,MAAM,4CAA4C,EAQhE,IAAM+e,EAAgB,OAAO,0BAA0B,4BAA4B,EAEnF,GAAI,CAACA,EACD,MAAM,IAAI,MAAM,oDAAoD,EAYxE,GAJA,KAAK,UAAY,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW/e,EAA4B,MAAM,iBAAiB,CAAC,CAAC,EAClH,IAAI,GAAK,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAGlD,CAAC,KAAK,WAAa,KAAK,UAAU,SAAYA,EAA4B,MAAM,kBAAoB,EACpG,MAAM,IAAI,MAAM,qCAAqC,EAIzD,KAAK,aAAe,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EACnE,IAAI,GAAK,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EACtD,KAAK,0BAA0B,EAO/B,IAAMgf,EAAgB,CAClB,MAAO,UACP,MAAO,IACP,MAAO,QACP,QAAS,2CACL,aAAc,GAClB,YAAa,GACb,WAAY,EACZ,EAMEC,EAAmB,KAAK,IAAI,EAG5BC,EAAe,CAEjB,EAAG,QACH,EAAG,KAAK,eAAe,iBAAiB,IACxC,EAAGlf,EAA4B,iBAC/B,GAAIif,EAGJ,EAAGV,EACH,EAAGC,EAGH,GAAI,KAAK,YACT,GAAI,KAAK,UACT,GAAI,KAAK,aAGT,GAAI,KAAK,iBACT,GAAIO,EAGJ,IAAK,MAML,GAAI/e,EAA4B,gBAGhC,GAAI,CACA,EAAGqe,EAAgB,UAAU,EAAG,EAAE,EAClC,EAAGC,EAAiB,UAAU,EAAG,EAAE,CACvC,CACJ,EAMA,GAAI,CACA,IAAM/Y,EAAmB,KAAK,0BAA0B2Z,CAAY,CAExE,OAASC,EAAiB,CACtB,MAAM,IAAI,MAAM,mCAAmCA,EAAgB,OAAO,EAAE,CAChF,CAmCA,GA7BA,KAAK,WAAW,OAAQ,6CAA8C,CAClE,YAAahI,EACb,QAAS+H,EAAa,QACtB,SAAU,GACV,cAAe,GACf,aAAc,CAAC,CAACA,EAAa,UAC7B,cAAeF,EAAc,MAC7B,UAAWC,EACX,kBAAmB,EACvB,CAAC,EAGD,KAAK,oBAAoB,IAAI,YAAY,iBAAkB,CACvD,OAAQ,CACJ,KAAM,QACN,UAAWA,EACX,cAAeD,EAAc,MAC7B,YAAa7H,CACjB,CACJ,CAAC,CAAC,EAUEnX,EAA4B,kBAAmB,CAC/C,KAAK,oBAAoB,MAAM,EAC/B,GAAM,CAAE,KAAAof,CAAK,EAAI,MAAM,KAAK,qBAAqBpR,GAAU,KAAK,EAChE,MAAO,CAAE,EAAG,QAAS,KAAMoR,CAAK,CACpC,CAEA,YAAK,oBAAoB,KAAK,EACvBF,CAEX,OAASze,EAAO,CAKZ,WAAK,WAAW,QAAS,4DAA6D,CAClF,YAAa0W,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,MAAO,KAAK,qBAAqBA,CAAK,EACtC,mBAAoB,KAAK,kBAC7B,CAAC,EAGD,KAAK,4BAA4B,EAGjC,KAAK,eAAe,cAAc,EAG5BA,CACV,CACJ,EAAG,GAAK,CACZ,CAKA,qBAAqBA,EAAO,CACxB,IAAMgE,EAAUhE,EAAM,QAAQ,YAAY,EAE1C,OAAIgE,EAAQ,SAAS,YAAY,EAAU,gBACvCA,EAAQ,SAAS,UAAU,GAAKA,EAAQ,SAAS,UAAU,EAAU,iBACrEA,EAAQ,SAAS,aAAa,EAAU,iBACxCA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,WAAW,EAAU,aACpEA,EAAQ,SAAS,iBAAiB,EAAU,eAC5CA,EAAQ,SAAS,OAAO,GAAKA,EAAQ,SAAS,KAAK,EAAU,eAC7DA,EAAQ,SAAS,cAAc,EAAU,qBACzCA,EAAQ,SAAS,SAAS,EAAU,gBACpCA,EAAQ,SAAS,YAAY,EAAU,qBAEpC,SACX,CAKA,6BAA8B,CAC1B,GAAI,CAEA,KAAK,qCAAqC,EAGtC,KAAK,iBACL,KAAK,eAAe,MAAM,EAC1B,KAAK,eAAiB,MAItB,KAAK,cACL,KAAK,YAAY,MAAM,EACvB,KAAK,YAAc,MAIvB,KAAK,YAAc,GACnB,KAAK,WAAa,GAGlB,KAAK,wBAAwB,CACzB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,sBAAuB,GACvB,OAAQ,EACZ,CAAC,EAGD,KAAK,wBAAwB,EAAE,MAAMhE,GAAS,CAC1C,KAAK,WAAW,QAAS,sCAAuC,CAC5D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAED,KAAK,WAAW,QAAS,iEAAiE,CAE9F,OAAS4e,EAAc,CACnB,KAAK,WAAW,QAAS,sCAAuC,CAC5D,UAAWA,EAAa,YAAY,KACpC,aAAcA,EAAa,OAC/B,CAAC,CACL,CACJ,CAKA,wBAAwBC,EAAS,CAC7B,IAAMC,EAAc,CAAE,GAAG,KAAK,gBAAiB,EAE/C,GAAI,CACA,OAAO,OAAO,KAAK,iBAAkBD,CAAO,EAE5C,KAAK,WAAW,QAAS,4BAA6B,CAClD,aAAc,OAAO,KAAKA,CAAO,EAAE,OACnC,cAAe,OAAO,KAAK,KAAK,gBAAgB,EAAE,MACtD,CAAC,CAEL,OAAS7e,EAAO,CAEZ,WAAK,iBAAmB8e,EACxB,KAAK,WAAW,QAAS,+CAAgD,CACrE,UAAW9e,EAAM,YAAY,IACjC,CAAC,EACKA,CACV,CACJ,CAgBA,MAAM,kBAAkB+e,EAAW,CAC/B,OAAO,KAAK,WAAW,sBAAuB,MAAOrI,GAAgB,CACjE,GAAI,CAEA,GADA,KAAK,wBAAwB,EACzB,CAAC,KAAK,gBAAgB,EACtB,MAAM,IAAI,MAAM,kEAAkE,EAEtF,KAAK,oBAAoB,MAAM,EAG/B,IAAMsI,EAAaC,GAAe,OAAOF,EAAU,IAAI,CAAC,EAClDhR,EAAO,KAAK,2BAA2BiR,EAAYzR,GAAU,KAAK,EAClE,CAAE,IAAK2R,CAAU,EAAIC,GAAiBpR,CAAI,EAEhD,KAAK,YAAc,GACnB,KAAK,eAAe,YAAY,EAEhC,IAAM4P,EAAW,MAAM,KAAK,wBAAwB,EAGpD,GAFA,KAAK,YAAcA,EAAS,YAC5B,KAAK,aAAeA,EAAS,aACzB,CAAC,KAAK,aAAa,YAAc,CAAC,KAAK,cAAc,WACrD,MAAM,IAAI,MAAM,oCAAoC,EAGxD,KAAK,qBAAqB,EAK1B,KAAK,qBAAuB,MAAM,KAAK5P,EAAK,YACvC9N,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EAAE,YAAY,CAAC,EAAE,KAAK,GAAG,EAElE,MAAM,KAAK,eAAe,qBAAqB,CAAE,KAAM,QAAS,IAAKif,CAAU,CAAC,EAChF,MAAM,KAAK,eAAe,oBAAoB,MAAM,KAAK,eAAe,aAAa,CACjF,oBAAqB,GACrB,oBAAqB,EACzB,CAAC,CAAC,EAEF,KAAK,wBACD,KAAK,+BAA+B,KAAK,eAAe,iBAAiB,GAAG,EAIhF,MAAM,KAAK,oBAAoB,EAE/B,IAAME,EAAS,MAAOnf,GAAM,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,UAAWA,CAAC,CAAC,EAC7E,CAAE,KAAA0e,CAAK,EAAI,MAAM,KAAK,qBAAqBpR,GAAU,OAAQ,CAC/D,WAAY,MAAMF,GAAe+R,EAAQJ,CAAU,CACvD,CAAC,EAED,YAAK,oBAAoB,IAAI,YAAY,iBAAkB,CACvD,OAAQ,CAAE,KAAM,SAAU,UAAW,KAAK,IAAI,EAAG,YAAAtI,CAAY,CACjE,CAAC,CAAC,EAEK,CAAE,EAAG,SAAU,KAAMiI,CAAK,CACrC,OAAS3e,EAAO,CACZ,WAAK,WAAW,QAAS,8BAA+B,CACpD,YAAA0W,EACA,UAAW1W,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACD,KAAK,eAAe,cAAc,EAC5BA,CACV,CACJ,EAAG,GAAK,CACZ,CAEA,MAAM,mBAAmB+e,EAAW,CAIhC,OAAIA,GAAa,OAAOA,EAAU,MAAS,SAChC,KAAK,kBAAkBA,CAAS,EAEpC,KAAK,WAAW,sBAAuB,MAAOrI,GAAgB,CACjE,KAAK,WAAW,OAAQ,oCAAqC,CACzD,YAAaA,EACb,aAAc,CAAC,CAACqI,EAChB,UAAWA,GAAW,KACtB,aAAcA,GAAW,QACzB,eAAgBA,GAAW,SAC/B,CAAC,EAED,GAAI,CAkBA,GAZA,KAAK,wBAAwB,EAE7B,KAAK,WAAW,QAAS,qCAAsC,CAC3D,YAAarI,EACb,aAAc,CAAC,CAACqI,EAChB,UAAWA,GAAW,KACtB,WAAY,CAAC,CAACA,GAAW,cACzB,YAAa,CAAC,CAACA,GAAW,eAC1B,QAAS,CAAC,CAACA,GAAW,IAC1B,CAAC,EAGG,CAAC,KAAK,0BAA0BA,CAAS,EACzC,MAAM,IAAI,MAAM,6DAA6D,EAIjF,GAAI,CAAC,OAAO,0BAA0B,YAAY,oBAAoB,KAAK,aAAa,EACpF,MAAM,IAAI,MAAM,kEAAkE,EAQtF,IAAMtK,EAAYsK,EAAU,IAAMA,EAAU,UACtC1P,EAAU0P,EAAU,GAAKA,EAAU,QACzC,GAAI,CAACtK,GAAa,CAACpF,EACf,MAAM,IAAI,MAAM,4EAAuE,EAI3F,IAAMgQ,EAAW,KAAK,IAAI,EAAI5K,EACxB6K,EAAgB,KAEtB,GAAID,EAAWC,EACX,WAAK,WAAW,QAAS,iDAAkD,CACvE,YAAa5I,EACb,SAAU,KAAK,MAAM2I,EAAW,GAAI,EACpC,cAAe,KAAK,MAAMC,EAAgB,GAAI,EAC9C,UAAWP,EAAU,SACzB,CAAC,EAGG,KAAK,eACL,KAAK,cAAc,gBAAiB,qDAAgD,EAGlF,IAAI,MAAM,qDAAgD,EAIpE,IAAMQ,EAAkBlQ,EACxB,GAAIkQ,IAAoBhgB,EAA4B,iBAChD,WAAK,WAAW,OAAQ,qCAAsC,CAC1D,YAAamX,EACb,gBAAiBnX,EAA4B,iBAC7C,gBAAiBggB,CACrB,CAAC,EACK,IAAI,MAAM,uCAAuChgB,EAA4B,gBAAgB,cAAcggB,CAAe,EAAE,EAiBtI,GATA,KAAK,YAAcR,EAAU,IAAMA,EAAU,KAK7C,KAAK,qBACDA,EAAU,KAAOxf,EAA4B,gBAG7C,CAAC,MAAM,QAAQ,KAAK,WAAW,EAC/B,MAAM,IAAI,MAAM,6CAA6C,EAGjE,IAAMigB,EAAqB,GAC3B,GAAI,KAAK,YAAY,SAAWA,EAC5B,MAAM,IAAI,MAAM,yCAAyCA,CAAkB,SAAS,KAAK,YAAY,MAAM,EAAE,EAIjH,IAAMC,EAAkB,MAAM,OAAO,0BAA0B,wBAAwB,KAAK,WAAW,EAEvG,KAAK,WAAW,OAAQ,sCAAuC,CAC3D,YAAa/I,EACb,WAAY,KAAK,YAAY,OAC7B,gBAAiB+I,EAAgB,UAAU,EAAG,CAAC,CACnD,CAAC,EAOD,IAAM9B,EAAW,MAAM,KAAK,wBAAwB,EAKpD,GAJA,KAAK,YAAcA,EAAS,YAC5B,KAAK,aAAeA,EAAS,aAGzB,EAAE,KAAK,aAAa,sBAAsB,WAC1C,WAAK,WAAW,QAAS,4CAA6C,CAClE,YAAajH,EACb,WAAY,CAAC,CAAC,KAAK,YACnB,eAAgB,OAAO,KAAK,aAAa,WACzC,oBAAqB,KAAK,aAAa,YAAY,WAAW,IAClE,CAAC,EACK,IAAI,MAAM,iDAAiD,EAQrE,IAAIgJ,EAEJ,GAAI,CACA,IAAMC,EAAWZ,EAAU,GAAKA,EAAU,eAC1CW,EAAqB,MAAM,OAAO,OAAO,UACrC,OACA,IAAI,WAAWC,EAAS,OAAO,EAC/B,CACI,KAAM,QACN,WAAY,OAChB,EACA,GACA,CAAC,QAAQ,CACb,CACJ,OAAS3f,EAAO,CACZ,KAAK,kBAAkBA,EAAO,kBAAkB,CACpD,CAOA,IAAI4f,EAEJ,GAAI,CACA,IAAMC,EAAUd,EAAU,GAAKA,EAAU,cACzCa,EAAoB,MAAM,OAAO,0BAA0B,sBACvDC,EACAH,EACA,MACJ,CACJ,OAAS1f,EAAO,CACZ,KAAK,WAAW,QAAS,0CAA2C,CAChE,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACD,KAAK,kBAAkBA,EAAO,iBAAiB,CACnD,CAGA,GAAI,EAAE4f,aAA6B,WAC/B,WAAK,WAAW,QAAS,0CAA2C,CAChE,YAAalJ,EACb,cAAe,OAAOkJ,EACtB,mBAAoBA,GAAmB,WAAW,IACtD,CAAC,EACK,IAAI,MAAM,+CAA+C,EAInE,KAAK,cAAgBA,EAOrB,IAAIlR,EAEJ,GAAI,CACA,KAAK,WAAW,QAAS,iCAAkC,CACvD,YAAagI,EACb,eAAgB,OAAO,KAAK,YAAY,WACxC,cAAe,OAAOkJ,EACtB,WAAY,KAAK,aAAa,OAC9B,oBAAqB,KAAK,YAAY,YAAY,WAAW,KAC7D,mBAAoBA,GAAmB,WAAW,IACtD,CAAC,EAEDlR,EAAc,MAAM,OAAO,0BAA0B,iBACjD,KAAK,YAAY,WACjBkR,EACA,KAAK,WACT,EAEA,KAAK,WAAW,QAAS,0CAA2C,CAChE,YAAalJ,EACb,cAAe,CAAC,CAAChI,EAAY,WAC7B,UAAW,CAAC,CAACA,EAAY,OACzB,UAAW,CAAC,CAACA,EAAY,OACzB,eAAgB,CAAC,CAACA,EAAY,YAC9B,eAAgB,CAAC,CAACA,EAAY,WAClC,CAAC,CACL,OAAS1O,EAAO,CACZ,KAAK,WAAW,QAAS,+BAAgC,CACrD,YAAa0W,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,WAAYA,EAAM,MAClB,eAAgB,OAAO,KAAK,YAAY,WACxC,cAAe,OAAO4f,EACtB,WAAY,KAAK,aAAa,OAC9B,oBAAqB,KAAK,YAAY,YAAY,WAAW,KAC7D,mBAAoBA,GAAmB,WAAW,IACtD,CAAC,EACD,KAAK,kBAAkB5f,EAAO,gBAAgB,CAClD,CAeA,GAZA,MAAM,KAAK,mBACP0O,EAAY,WACZA,EAAY,OACZA,EAAY,YACZA,EAAY,WAChB,EAIA,MAAM,KAAK,mBAAmBA,EAA+B,EAAK,EAG9D,EAAE,KAAK,yBAAyB,YAChC,EAAE,KAAK,kBAAkB,YACzB,EAAE,KAAK,uBAAuB,WAE9B,WAAK,WAAW,QAAS,qCAAsC,CAC3D,YAAagI,EACb,kBAAmB,OAAO,KAAK,cAC/B,WAAY,OAAO,KAAK,OACxB,gBAAiB,OAAO,KAAK,WACjC,CAAC,EACK,IAAI,MAAM,oCAAoC,EAKxD,KAAK,iBAAmBqI,EAAU,IAAMA,EAAU,kBAAoB,KAEtE,KAAK,WAAW,OAAQ,+CAAgD,CACpE,YAAarI,EACb,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,eAAgB,CAAC,CAAC,KAAK,YACvB,kBAAmB,CAAC,CAAC,KAAK,eAC1B,eAAgB,UAChB,kBAAmB,EACvB,CAAC,EAOD,KAAK,wBAAwB,CACzB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,gBAAiB,GACjB,sBAAuB,GACvB,OAAQ,EACZ,CAAC,EAGD,KAAK,kBAAoB,EACzB,KAAK,gBAAkB,KAAK,IAAI,EAChC,KAAK,YAAY,IAAI,EAAG,CACpB,KAAM,KAAK,YACX,UAAW,KAAK,gBAChB,aAAc,CAClB,CAAC,EAOD,IAAIoJ,EAEJ,GAAIf,EAAU,cACV,GAAI,CACAe,EAAY,MAAM,OAAO,0BAA0B,gBAC/Cf,EAAU,cACV,KAAK,aAAa,WAClB,KAAK,aAAa,SACtB,CACJ,OAAS/e,EAAO,CACZ,KAAK,WAAW,QAAS,wCAAyC,CAC9D,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACD,KAAK,kBAAkBA,EAAO,+BAA+B,CACjE,MAEA,KAAK,WAAW,OAAQ,oDAAqD,CACzE,YAAa0W,CACjB,CAAC,EA+BL,GAxBA,KAAK,YAAc,GACnB,KAAK,eAAe,YAAY,EAEhC,KAAK,cAAc,KAAK,cAAc,EAGtC,KAAK,qBAAqB,EAkBtB,KAAK,qBACL,GAAI,CACA,KAAK,qBAAuB,KAAK,+BAA+BqI,EAAU,GAAG,CACjF,OAAS/e,EAAO,CACZ,KAAK,WAAW,OAAQ,qDAAsD,CAC1E,MAAOA,EAAM,QACb,QAAS,kBACb,CAAC,CACL,MAEA,KAAK,WAAW,OAAQ,sEAAsE,EAIlG,GAAI,CACA,KAAK,WAAW,QAAS,wCAAyC,CAC9D,YAAa0W,EACb,UAAWqI,EAAU,KAAK,QAAU,CACxC,CAAC,EAED,MAAM,KAAK,eAAe,qBAAqB,IAAI,sBAAsB,CACrE,KAAM,QACN,IAAKA,EAAU,GAAKA,EAAU,GAClC,CAAC,CAAC,EACF,KAAK,4BAA4B,uBAAwB,KAAK,eAAe,mBAAmB,IAAK,CACjG,eAAgB,KAAK,eAAe,cACxC,CAAC,EACD,KAAK,iCAAiC,QAAS,KAAK,eAAe,mBAAmB,GAAG,EAEzF,KAAK,WAAW,QAAS,sCAAuC,CAC5D,YAAarI,EACb,eAAgB,KAAK,eAAe,cACxC,CAAC,CACL,OAAS1W,EAAO,CACZ,KAAK,WAAW,QAAS,mCAAoC,CACzD,MAAOA,EAAM,QACb,YAAa0W,CACjB,CAAC,EACD,KAAK,kBAAkB1W,EAAO,2BAA2B,CAC7D,CAEA,KAAK,WAAW,QAAS,sCAAuC,CAC5D,YAAa0W,EACb,gBAAiB,KAAK,eAAe,gBACrC,eAAgB,KAAK,eAAe,cACxC,CAAC,EAOD,IAAIqJ,EAEJ,GAAI,CACAA,EAAS,MAAM,KAAK,eAAe,aAAa,CAC5C,oBAAqB,GACrB,oBAAqB,EACzB,CAAC,CACL,OAAS/f,EAAO,CACZ,KAAK,kBAAkBA,EAAO,sBAAsB,CACxD,CAGA,GAAI,CACA,MAAM,KAAK,eAAe,oBAAoB+f,CAAM,CACxD,OAAS/f,EAAO,CACZ,KAAK,kBAAkBA,EAAO,0BAA0B,CAC5D,CAGA,GAAI,CACA,IAAMie,EAAiB,KAAK,+BAA+B8B,EAAO,GAAG,EACrE,KAAK,wBAA0B9B,EAE/B,KAAK,WAAW,OAAQ,0DAA2D,CAC/E,YAAaA,EACb,QAAS,iBACb,CAAC,EAGD,KAAK,mBAAmB,4CAA4CA,CAAc,GAAI,QAAQ,CAClG,OAASje,EAAO,CACZ,KAAK,WAAW,QAAS,iDAAkD,CAAE,MAAOA,EAAM,OAAQ,CAAC,CAEvG,CAKA,GAAI,CACA,IAAM6L,EAAW,KAAK,+BAA+BkT,EAAU,GAAKA,EAAU,GAAG,EAC3EnT,GAAU,KAAK,wBACfoU,EAAW,KAAK,sBAAsB,KAAK,cAAc,EAC/D,KAAK,iBAAmB,MAAM,KAAK,YAAYA,EAAUpU,GAASC,CAAQ,EAC1E,KAAK,qBAAqBD,GAASC,CAAQ,CAC/C,OAASoU,EAAU,CACf,WAAK,WAAW,QAAS,6DAA8D,CACnF,UAAWA,GAAU,aAAa,MAAQ,SAC9C,CAAC,EACK,IAAI,MAAM,2BAA2BA,EAAS,OAAO,EAAE,CACjE,CAMA,IAAMC,EAA8B,KAAK,IAAI,EACvCC,EAA8B,MAAM,KAAK,oBAAoB,EAC7DC,EAAyB,KAAK,6BAA6B,KAAK,eAAe,kBAAkB,GAAG,EACpGC,EAAuBD,EAAuB,MACpD,GAAI,CAACD,GAA+BE,IAAyB,EACzD,WAAK,mBACD,qPAGA,QACJ,EACM,IAAI,MAAM,2FAAsF,EAE1G,KAAK,WAAWA,EAAuB,EAAI,OAAS,OAAQ,4CAA6C,CACrG,iBAAkBD,EAClB,kBAAmB,KAAK,eAAe,kBACvC,uBAAwB,KAAK,IAAI,EAAIF,EACrC,sBAAuBC,CAC3B,CAAC,EACD,KAAK,4BAA4B,gBAAiB,KAAK,eAAe,kBAAkB,IAAK,CACzF,kBAAmB,KAAK,eAAe,kBACvC,uBAAwB,KAAK,IAAI,EAAID,EACrC,sBAAuBC,CAC3B,CAAC,EACIA,GACD,KAAK,mBAAmB,0JAA2J,QAAQ,EAE3LE,IAAyB,GACzB,KAAK,mBAAmB,iIAAkI,QAAQ,EAGtK,KAAK,WAAW,QAAS,qCAAsC,CAC3D,YAAa3J,EACb,kBAAmB,KAAK,eAAe,kBACvC,gBAAiB,KAAK,eAAe,eACzC,CAAC,EAOD,IAAMoH,EAAoB,MAAM,OAAO,0BAA0B,6BAC7D,KAAK,YAAY,UACjB,KAAK,aAAa,WAClB,MACJ,EAEMC,EAAqB,MAAM,OAAO,0BAA0B,6BAC9D,KAAK,aAAa,UAClB,KAAK,aAAa,WAClB,OACJ,EAEA,GAAI,CAACD,GAAqB,OAAOA,GAAsB,SACnD,WAAK,WAAW,QAAS,8DAA+D,CAAE,YAAApH,CAAY,CAAC,EACjG,IAAI,MAAM,oFAAoF,EAGxG,GAAI,CAACoH,EAAkB,SAAW,CAACA,EAAkB,UACjD,WAAK,WAAW,QAAS,sEAAuE,CAC5F,YAAApH,EACA,WAAY,CAAC,CAACoH,EAAkB,QAChC,aAAc,CAAC,CAACA,EAAkB,SACtC,CAAC,EACK,IAAI,MAAM,6EAA6E,EAGjG,GAAI,CAACC,GAAsB,OAAOA,GAAuB,SACrD,WAAK,WAAW,QAAS,+DAAgE,CAAE,YAAArH,CAAY,CAAC,EAClG,IAAI,MAAM,qFAAqF,EAGzG,GAAI,CAACqH,EAAmB,SAAW,CAACA,EAAmB,UACnD,WAAK,WAAW,QAAS,uEAAwE,CAC7F,YAAArH,EACA,WAAY,CAAC,CAACqH,EAAmB,QACjC,aAAc,CAAC,CAACA,EAAmB,SACvC,CAAC,EACK,IAAI,MAAM,8EAA8E,EAQlG,IAAMQ,EAAgB,CAClB,MAAO,UACP,MAAO,IACP,MAAO,QACP,QAAS,2CACT,aAAc,GACd,YAAa,GACb,WAAY,EAChB,EAMMC,EAAmB,KAAK,IAAI,EAG5B8B,EAAgB,CAElB,EAAG,SACH,EAAG,KAAK,eAAe,iBAAiB,IACxC,EAAG/gB,EAA4B,iBAC/B,GAAIif,EAGJ,EAAGV,EACH,EAAGC,EAGH,GAAI+B,EAGJ,IAAK,MAGL,GAAIvgB,EAA4B,gBAGhC,GAAI,CACA,GAAIkgB,EAAgB,UAAU,EAAG,EAAE,EACnC,GAAI,GACJ,GAAI,EACR,CACJ,EAOMc,EAASD,EAAc,GAAKA,EAAc,IAC1C1Q,EAAU0Q,EAAc,GAAKA,EAAc,cAC3CE,EAAWF,EAAc,GAAKA,EAAc,eAElD,GAAI,CAACC,GAAU,CAAC3Q,GAAW,CAAC4Q,EACxB,MAAM,IAAI,MAAM,wCAAwC,EAG5D,YAAK,WAAW,OAAQ,8CAA+C,CACnE,YAAa9J,EACb,QAAS4J,EAAc,QACvB,SAAU,GACV,cAAe,CAAC,CAACR,EACjB,uBAAwB,CAAC,CAACQ,EAAc,oBACxC,cAAe/B,EAAc,MAC7B,UAAWC,EACX,eAAgBA,EAAmBO,EAAU,SACjD,CAAC,EAGD,KAAK,oBAAoB,IAAI,YAAY,iBAAkB,CACvD,OAAQ,CACJ,KAAM,SACN,UAAWP,EACX,cAAeD,EAAc,MAC7B,YAAa7H,CACjB,CACJ,CAAC,CAAC,EAOF,WAAW,SAAY,CACnB,GAAI,CACA,IAAM+J,EAAmB,MAAM,KAAK,gCAAgC,EAChEA,IACA,KAAK,qBAAqB,EAC1B,KAAK,WAAW,OAAQ,4CAA6C,CACjE,YAAa/J,EACb,MAAO+J,EAAiB,KAC5B,CAAC,EAET,OAASzgB,EAAO,CACZ,KAAK,WAAW,QAAS,6CAA8C,CACnE,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,EAAG,GAAI,EAGP,WAAW,SAAY,EACf,CAAC,KAAK,yBAA2B,KAAK,wBAAwB,MAAQ,MACtE,KAAK,WAAW,OAAQ,gCAAiC,CACrD,YAAa0W,CACjB,CAAC,EACD,MAAM,KAAK,gCAAgC,EAC3C,KAAK,qBAAqB,EAElC,EAAG,GAAI,EAGP,KAAK,qBAAqB,EAMnB4J,CAEX,OAAStgB,EAAO,CAKZ,WAAK,WAAW,QAAS,6DAA8D,CACnF,YAAa0W,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,MAAO,KAAK,2BAA2BA,CAAK,EAC5C,SAAU+e,GAAW,UAAY,KAAK,IAAI,EAAIA,EAAU,UAAY,SACxE,CAAC,EAGD,KAAK,6BAA6B,EAGlC,KAAK,eAAe,cAAc,EAG9B,KAAK,gBACD/e,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EACpE,KAAK,cAAc,gBAAiBA,EAAM,OAAO,EAC1CA,EAAM,QAAQ,SAAS,MAAM,GAAKA,EAAM,QAAQ,SAAS,WAAW,EAC3E,KAAK,cAAc,qBAAsBA,EAAM,OAAO,EAC/CA,EAAM,QAAQ,SAAS,YAAY,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC9E,KAAK,cAAc,iBAAkBA,EAAM,OAAO,EAElD,KAAK,cAAc,gBAAiBA,EAAM,OAAO,GAKnDA,CACV,CACJ,EAAG,GAAK,CACZ,CAKA,2BAA2BA,EAAO,CAC9B,IAAMgE,EAAUhE,EAAM,QAAQ,YAAY,EAE1C,OAAIgE,EAAQ,SAAS,YAAY,GAAKA,EAAQ,SAAS,QAAQ,EAAU,mBACrEA,EAAQ,SAAS,YAAY,EAAU,gBACvCA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,SAAS,EAAU,oBAClEA,EAAQ,SAAS,MAAM,EAAU,kBACjCA,EAAQ,SAAS,UAAU,GAAKA,EAAQ,SAAS,UAAU,EAAU,iBACrEA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,OAAO,GAAKA,EAAQ,SAAS,MAAM,EAAU,aAC5FA,EAAQ,SAAS,WAAW,GAAKA,EAAQ,SAAS,MAAM,EAAU,yBAClEA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,QAAQ,EAAU,iBACjEA,EAAQ,SAAS,MAAM,GAAKA,EAAQ,SAAS,OAAO,EAAU,iBAC9DA,EAAQ,SAAS,oBAAoB,GAAKA,EAAQ,SAAS,mBAAmB,EAAU,eACxFA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,KAAK,EAAU,eAC9DA,EAAQ,SAAS,QAAQ,EAAU,aACnCA,EAAQ,SAAS,gBAAgB,EAAU,uBAExC,SACX,CAQA,8BAA+B,CAC3B,GAAI,CAEA,KAAK,0BAA0B,EAC/B,KAAK,qCAAqC,EAG1C,KAAK,kBAAoB,EACzB,KAAK,YAAY,MAAM,EACvB,KAAK,QAAQ,MAAM,EAGf,KAAK,iBACL,KAAK,eAAe,MAAM,EAC1B,KAAK,eAAiB,MAItB,KAAK,cACL,KAAK,YAAY,MAAM,EACvB,KAAK,YAAc,MAIvB,KAAK,YAAc,GACnB,KAAK,WAAa,GAClB,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,eAAiB,EACtB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,aAAa,MAAM,EAGxB,KAAK,wBAAwB,CACzB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,sBAAuB,GACvB,OAAQ,EACZ,CAAC,EAGD,KAAK,wBAAwB,EAAE,MAAMhE,GAAS,CAC1C,KAAK,WAAW,QAAS,uCAAwC,CAC7D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAED,KAAK,WAAW,QAAS,kEAAkE,CAE/F,OAAS4e,EAAc,CACnB,KAAK,WAAW,QAAS,uCAAwC,CAC7D,UAAWA,EAAa,YAAY,KACpC,aAAcA,EAAa,OAC/B,CAAC,CACL,CACJ,CAKA,MAAM,mBAAmB8B,EAAeC,EAAQC,EAAaC,EAAgB,CACzE,OAAO,KAAK,WAAW,eAAgB,MAAOnK,GAAgB,CAM1D,GALA,KAAK,WAAW,OAAQ,qCAAsC,CAC1D,YAAaA,CACjB,CAAC,EAGG,EAAEgK,aAAyB,YAC3B,EAAEC,aAAkB,YACpB,EAAEC,aAAuB,WACzB,MAAM,IAAI,MAAM,4BAA4B,EAGhD,GAAI,CAACC,GAAkB,OAAOA,GAAmB,SAC7C,MAAM,IAAI,MAAM,kCAAkC,EAItD,IAAM3a,EAAU,CACZ,cAAe,KAAK,cACpB,OAAQ,KAAK,OACb,YAAa,KAAK,YAClB,eAAgB,KAAK,cACzB,EAEA,GAAI,CACA,YAAK,cAAgBwa,EACrB,KAAK,OAASC,EACd,KAAK,YAAcC,EACnB,KAAK,eAAiBC,EAG1B,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,eAAiB,EACtB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,aAAa,MAAM,EAEpB,KAAK,WAAW,OAAQ,mCAAoC,CACxD,YAAanK,EACb,WAAY,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,aACzD,eAAgB,CAAC,CAAC,KAAK,cAC3B,CAAC,EAEM,EAEX,OAAS1W,EAAO,CAEZ,WAAK,cAAgBkG,EAAQ,cAC7B,KAAK,OAASA,EAAQ,OACtB,KAAK,YAAcA,EAAQ,YAC3B,KAAK,eAAiBA,EAAQ,eAE9B,KAAK,WAAW,QAAS,kCAAmC,CACxD,YAAawQ,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EAEKA,CACV,CACJ,CAAC,CACL,CAUA,MAAM,kBAAkB8gB,EAAY,CAChC,GAAI,CAAC,KAAK,QAAQ,EAId,MAAM,IAAI,MAAM,4FAA4F,EAEhH,IAAMvW,EAAK,KAAK,WAAW,EACrBwW,EAAc9B,GAAe,OAAO6B,EAAW,IAAI,CAAC,EACpD/S,EAAOC,GAAW+S,CAAW,EACnC,GAAIhT,EAAK,OAASR,GAAU,OAAQ,MAAM,IAAI,MAAM,oDAAoD,EACxG,GAAI,CAACQ,EAAK,WAAY,MAAM,IAAI,MAAM,wCAAwC,EAK9E,IAAMiT,EAAW,MAAM3T,GADR,MAAOpN,GAAM,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,UAAWA,CAAC,CAAC,EACrCsK,EAAG,eAAe,EAC5D0W,EAAO,EACX,QAAS3f,EAAI,EAAGA,EAAI0f,EAAS,OAAQ1f,IAAK2f,GAAQD,EAAS1f,CAAC,EAAIyM,EAAK,WAAWzM,CAAC,EACjF,GAAI2f,IAAS,EACT,MAAM,IAAI,MAAM,sGAAsG,EAG1H1W,EAAG,iBAAmBwW,EACtBxW,EAAG,iBAAmBwD,EAAK,WAC3B,KAAK,qBAAuB,MAAM,KAAKA,EAAK,YACvC9N,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EAAE,YAAY,CAAC,EAAE,KAAK,GAAG,EAElE,GAAM,CAAE,IAAA6C,CAAI,EAAIqc,GAAiBpR,CAAI,EACrC,MAAM,KAAK,eAAe,qBAAqB,CAAE,KAAM,SAAU,IAAAjL,CAAI,CAAC,EAEtE,KAAK,WAAW,OAAQ,sDAAuD,CAC3E,MAAOie,EAAY,MACvB,CAAC,CACL,CAEA,MAAM,mBAAmBD,EAAY,CACjC,GAAIA,GAAc,OAAOA,EAAW,MAAS,SACzC,OAAO,KAAK,kBAAkBA,CAAU,EAE5C,GAAI,CAEA,GAAI,CAACA,GAAc,OAAOA,GAAe,UAAY,MAAM,QAAQA,CAAU,EACzE,WAAK,WAAW,QAAS,0CAA2C,CAChE,cAAe,CAAC,CAACA,EACjB,eAAgB,OAAOA,EACvB,QAAS,MAAM,QAAQA,CAAU,CACrC,CAAC,EACK,IAAI,MAAM,kEAAkE,EAItF,IAAMI,EAAkBJ,EAAW,IAAM,UAAYA,EAAW,EAC1DK,EAAiBL,EAAW,OAAS,0BAA4BA,EAAW,IAElF,GAAI,CAACI,GAAmB,CAACC,EACrB,WAAK,WAAW,QAAS,kCAAmC,CACxD,KAAML,EAAW,MAAQA,EAAW,EACpC,OAAQ,CAAC,EAAEA,EAAW,KAAOA,EAAW,EAC5C,CAAC,EACK,IAAI,MAAM,wEAAwE,EAG5F,IAAMM,EAAgBN,EAAW,GAAKA,EAAW,QACjD,GAAIM,IAAkB7hB,EAA4B,iBAC9C,MAAM,IAAI,MAAM,uCAAuCA,EAA4B,gBAAgB,cAAc6hB,GAAiB,SAAS,EAAE,EAKjJ,IAAMvB,EAAUiB,EAAW,eAAiBA,EAAW,EACjDnB,EAAWmB,EAAW,gBAAkBA,EAAW,EAEzD,GAAI,CAACjB,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,EAChE,WAAK,WAAW,QAAS,wDAAyD,CAC9E,WAAY,CAAC,CAACA,EACd,YAAa,OAAOA,EACpB,QAAS,MAAM,QAAQA,CAAO,EAC9B,cAAe,OAAO,KAAKiB,CAAU,CACzC,CAAC,EACK,IAAI,MAAM,yEAAyE,EAG7F,GAAI,CAACjB,EAAQ,SAAW,CAACA,EAAQ,UAC7B,WAAK,WAAW,QAAS,4DAA6D,CAClF,WAAY,CAAC,CAACA,EAAQ,QACtB,aAAc,CAAC,CAACA,EAAQ,SAC5B,CAAC,EACK,IAAI,MAAM,kEAAkE,EAItF,GAAI,CAACF,GAAY,OAAOA,GAAa,UAAY,MAAM,QAAQA,CAAQ,EACnE,WAAK,WAAW,QAAS,yDAA0D,CAC/E,YAAa,CAAC,CAACA,EACf,aAAc,OAAOA,EACrB,QAAS,MAAM,QAAQA,CAAQ,CACnC,CAAC,EACK,IAAI,MAAM,0EAA0E,EAG9F,GAAI,CAACA,EAAS,SAAW,CAACA,EAAS,UAC/B,WAAK,WAAW,QAAS,6DAA8D,CACnF,WAAY,CAAC,CAACA,EAAS,QACvB,aAAc,CAAC,CAACA,EAAS,SAC7B,CAAC,EACK,IAAI,MAAM,mEAAmE,EAKvF,IAAMlL,EAAYqM,EAAW,IAAMA,EAAW,UACxCzR,EAAUyR,EAAW,GAAKA,EAAW,QAE3C,GAAI,CAACrM,GAAa,CAACpF,EACf,MAAM,IAAI,MAAM,sEAAiE,EAIrF,GAAIyR,EAAW,WAAa,KAAK,WAAaA,EAAW,YAAc,KAAK,UACxE,aAAO,0BAA0B,UAAU,IAAI,QAAS,sDAAuD,CAAC,CAAC,EAC3G,IAAI,MAAM,iDAA4C,EAIhE,IAAMO,EAAY,KAAK,IAAI,EAAIP,EAAW,UAC1C,GAAIO,EAAY,KACZ,aAAO,0BAA0B,UAAU,IAAI,QAAS,kDAAmD,CACvG,UAAWA,EACX,UAAWP,EAAW,SAC1B,CAAC,EAGG,KAAK,eACL,KAAK,cAAc,gBAAiB,wDAAmD,EAGrF,IAAI,MAAM,wDAAmD,EAKnEM,IAAkB7hB,EAA4B,kBAC9C,OAAO,0BAA0B,UAAU,IAAI,OAAQ,0CAA2C,CAC9F,gBAAiBA,EAA4B,iBAC7C,gBAAiB6hB,CACrB,CAAC,EAIL,IAAM1B,EAAqB,MAAM,OAAO,OAAO,UAC3C,OACA,IAAI,WAAWC,EAAS,OAAO,EAC/B,CACI,KAAM,QACN,WAAY,OAChB,EACA,GACA,CAAC,QAAQ,CACb,EAIM3Q,EAAgB,MAAM,OAAO,0BAA0B,iCACzD6Q,EACAH,CACJ,EAIA,GADA,KAAK,oCAAoC,EACrC,CAAC,KAAK,aAAe,KAAK,YAAY,SAAW,GACjD,aAAO,0BAA0B,UAAU,IAAI,QAAS,6DAA8D,CAClH,WAAY,KAAK,YAAc,KAAK,YAAY,OAAS,CAC7D,CAAC,EACK,IAAI,MAAM,iHAAiH,EAIrI,IAAM4B,EAAmB,MAAM,OAAO,0BAA0B,wBAAwB,KAAK,WAAW,EAMxG,GALA,OAAO,0BAA0B,UAAU,IAAI,OAAQ,kCAAmC,CACtF,gBAAiBA,EAAiB,UAAU,EAAG,CAAC,CACpD,CAAC,EAGG,EAAE,KAAK,aAAa,sBAAsB,WAC1C,aAAO,0BAA0B,UAAU,IAAI,QAAS,kEAAmE,CACvH,WAAY,CAAC,CAAC,KAAK,YACnB,eAAgB,OAAO,KAAK,aAAa,WACzC,oBAAqB,KAAK,aAAa,YAAY,WAAW,IAClE,CAAC,EACK,IAAI,MAAM,2CAA2C,EAG/D,GAAI,EAAEtS,aAAyB,WAC3B,aAAO,0BAA0B,UAAU,IAAI,QAAS,gEAAiE,CACrH,cAAe,OAAOA,EACtB,mBAAoBA,GAAe,WAAW,IAClD,CAAC,EACK,IAAI,MAAM,yCAAyC,EAI7D,KAAK,cAAgBA,EAGrB,KAAK,qBACD8R,EAAW,KAAOvhB,EAA4B,gBAG7C,KAAK,eACN,KAAK,aAAe,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EACnE,IAAIU,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,GAI1D,IAAMyO,EAAc,MAAM,OAAO,0BAA0B,iBACvD,KAAK,YAAY,WACjBM,EACA,KAAK,WACT,EAiBA,GAfA,KAAK,cAAgBN,EAAY,WACjC,KAAK,OAASA,EAAY,OAC1B,KAAK,YAAcA,EAAY,YAC/B,KAAK,eAAiBA,EAAY,YAIlC,MAAM,KAAK,mBAAmBA,EAA+B,EAAI,EAEjE,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,eAAiB,EACtB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,aAAa,MAAM,EAEpB,EAAE,KAAK,yBAAyB,YAChC,EAAE,KAAK,kBAAkB,YACzB,EAAE,KAAK,uBAAuB,WAC9B,aAAO,0BAA0B,UAAU,IAAI,QAAS,2DAA4D,CAChH,kBAAmB,OAAO,KAAK,cAC/B,WAAY,OAAO,KAAK,OACxB,gBAAiB,OAAO,KAAK,YAC7B,uBAAwB,KAAK,eAAe,WAAW,KACvD,gBAAiB,KAAK,QAAQ,WAAW,KACzC,qBAAsB,KAAK,aAAa,WAAW,IACvD,CAAC,EACK,IAAI,MAAM,gCAAgC,EAGpD,KAAK,WAAW,OAAQ,4CAA6C,CACjE,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,eAAgB,CAAC,CAAC,KAAK,YACvB,kBAAmB,CAAC,CAAC,KAAK,eAC1B,eAAgB,UAChB,kBAAmB,EACvB,CAAC,EAGD,KAAK,iBAAiB,cAAgB,GACtC,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,iBAAiB,4BAA8B,GACpD,KAAK,iBAAiB,OAAS,GAG/B,KAAK,kBAAoB,EACzB,KAAK,gBAAkB,KAAK,IAAI,EAChC,KAAK,YAAY,IAAI,EAAG,CACpB,KAAM,KAAK,YACX,UAAW,KAAK,gBAChB,aAAc,CAClB,CAAC,EAED,KAAK,cAAc,KAAK,cAAc,EAGtC,GAAI,CACA,IAAM7C,EAAW,KAAK,+BAA+BiV,EAAW,KAAOA,EAAW,CAAC,EAC7ElV,EAAU,KAAK,wBACfoU,EAAW,KAAK,sBAAsB,KAAK,cAAc,EAE/D,KAAK,iBAAmB,MAAM,KAAK,YAAYA,EAAUpU,EAASC,CAAQ,EAC1E,KAAK,qBAAqBD,EAASC,CAAQ,EAG3C,KAAK,eAAiB,KAAK,iBAE3B,KAAK,WAAW,OAAQ,mEAAoE,CACxF,QAAS,KAAK,iBACd,QAASD,EAAQ,UAAU,EAAG,EAAE,EAAI,MACpC,SAAUC,EAAS,UAAU,EAAG,EAAE,EAAI,MACtC,UAAW,KAAK,IAAI,CACxB,CAAC,CACL,OAASoU,EAAU,CACf,KAAK,WAAW,QAAS,4DAA6D,CAClF,UAAWA,GAAU,aAAa,MAAQ,SAC9C,CAAC,EACD,KAAK,WAAW,QAAS,4DAA6D,CAClF,MAAOA,EAAS,QAChB,MAAOA,EAAS,MAChB,UAAW,KAAK,IAAI,CACxB,CAAC,CACL,CAOA,GAAI,KAAK,qBACL,GAAI,CACA,KAAK,qBAAuB,KAAK,+BAA+Ba,EAAW,KAAOA,EAAW,CAAC,CAClG,OAAS9gB,EAAO,CACZ,KAAK,WAAW,OAAQ,sDAAuD,CAC3E,MAAOA,EAAM,QACb,QAAS,mBACb,CAAC,CACL,MAEA,KAAK,WAAW,OAAQ,sEAAsE,EAIlG,IAAMuhB,EAAUT,EAAW,KAAOA,EAAW,EAE7C,GAAI,KAAK,gBAAgB,iBAAmB,mBAAoB,CAC5D,KAAK,WAAW,OAAQ,iDAAkD,CACtE,eAAgB,KAAK,gBAAgB,gBAAkB,SAC3D,CAAC,EACD,MACJ,CAEA,KAAK,WAAW,QAAS,yCAA0C,CAC/D,UAAWS,GAAS,QAAU,EAC9B,gBAAiB,CAACT,EAAW,KAAO,CAAC,CAACA,EAAW,CACrD,CAAC,EAED,MAAM,KAAK,eAAe,qBAAqB,CAC3C,KAAM,SACN,IAAKS,CACT,CAAC,EACD,KAAK,4BAA4B,wBAAyB,KAAK,eAAe,mBAAmB,IAAK,CAClG,eAAgB,KAAK,eAAe,cACxC,CAAC,EACD,KAAK,iCAAiC,SAAU,KAAK,eAAe,mBAAmB,GAAG,EAE1F,KAAK,WAAW,QAAS,kDAAmD,CACxE,eAAgB,KAAK,eAAe,cACxC,CAAC,EAED,WAAW,SAAY,CACnB,GAAI,CACqB,MAAM,KAAK,gCAAgC,GAE5D,KAAK,qBAAqB,CAElC,OAASvhB,EAAO,CACZ,KAAK,WAAW,QAAS,+CAAgD,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACjI,CACJ,EAAG,GAAI,EACP,WAAW,SAAY,EACf,CAAC,KAAK,yBAA2B,KAAK,wBAAwB,MAAQ,MACtE,MAAM,KAAK,gCAAgC,EAC3C,KAAK,qBAAqB,EAElC,EAAG,GAAI,EACP,KAAK,qBAAqB,CAC9B,OAASA,EAAO,CACZ,WAAK,WAAW,QAAS,yCAA0C,CAC/D,UAAWA,EAAM,YAAY,IACjC,CAAC,EACD,KAAK,eAAe,QAAQ,EAExB,KAAK,gBACDA,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,iFAAgB,EAC5E,KAAK,cAAc,gBAAiBA,EAAM,OAAO,EAC1CA,EAAM,QAAQ,SAAS,MAAM,GAAKA,EAAM,QAAQ,SAAS,WAAW,GAAKA,EAAM,QAAQ,SAAS,4CAAS,EAChH,KAAK,cAAc,qBAAsBA,EAAM,OAAO,EAEtD,KAAK,cAAc,gBAAiBA,EAAM,OAAO,GAInDA,CACV,CACJ,CAGA,sBAAuB,CAEf,KAAK,YAEA,KAAK,6BACN,KAAK,2BAA6B,GAClC,KAAK,mBAAmB,4GAA6G,QAAQ,EAC7I,KAAK,mBAAmB,2BAA2B,KAAK,gBAAgB,GAAI,QAAQ,EACpF,KAAK,mBAAmB,+DAAgE,QAAQ,GAIpG,KAAK,mBAAmB,6CAA8C,QAAQ,CAEtF,CAQA,iBAAiBwhB,EAAO,CACpB,GAAI,CAACA,GAAS,OAAOA,GAAU,UAAY,CAAC,KAAK,kBAAoB,OAAO,KAAK,kBAAqB,SAClG,MAAO,GAGX,IAAMC,EAAkBD,EAAM,QAAQ,SAAU,EAAE,EAAE,YAAY,EAC1DE,EAAmB,KAAK,iBAAiB,QAAQ,SAAU,EAAE,EAAE,YAAY,EAEjF,OAAID,EAAgB,SAAWC,EAAiB,OACrC,GAGJ,OAAO,0BAA0B,oBAAoBD,EAAiBC,CAAgB,CACjG,CAEA,oBAAoBC,EAAU,CAE1B,GAAI,CACA,GAAI,CAAC,KAAK,iBAAiBA,CAAQ,EAO/B,MANA,KAAK,uBAAyB,KAAK,uBAAyB,GAAK,EACjE,KAAK,WAAW,OAAQ,qDAAsD,CAC1E,SAAU,KAAK,sBACf,YAAapiB,EAA4B,gBAC7C,CAAC,EAEG,KAAK,uBAAyBA,EAA4B,kBAC1D,KAAK,mBAAmB,yDAA0D,QAAQ,EAC1F,KAAK,WAAW,EACV,IAAI,MAAM,kBAAkB,GAGhC,IAAI,MAAM,cAAc,EAIlC,KAAK,2BAA6B,GAClC,KAAK,sBAAwB,EAG7B,IAAMqiB,EAAsB,CACxB,KAAM,yBACN,KAAM,CACF,UAAW,KAAK,IAAI,EACpB,mBAAoB,mBACpB,cAAe,0BACnB,CACJ,EAEA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAmB,CAAC,EAGrD,KAAK,2BACL,KAAK,0BAA0B,CAC3B,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,cAAe,KAAK,0BACxB,CAAC,EAIL,KAAK,iCAAiC,EAGtC,KAAK,mBAAmB,0DAA2D,QAAQ,EAE3F,KAAK,oBAAoB,CAC7B,OAAS5hB,EAAO,CACZ,MAAIA,EAAM,UAAY,eAClB,KAAK,mBAAmB,0DAA2D,QAAQ,EACpFA,EAAM,UAAY,qBACzB,KAAK,WAAW,QAAS,2BAA4B,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACzG,KAAK,mBAAmB,0BAA2B,QAAQ,GAEzDA,CACV,CACJ,CAEA,kCAAmC,CAE/B,GAAI,KAAK,4BAA8B,KAAK,6BAA+B,CAAC,KAAK,2BAA4B,CACzG,KAAK,2BAA6B,GAGlC,IAAM6hB,EAAuB,CACzB,KAAM,8BACN,KAAM,CACF,UAAW,KAAK,IAAI,EACpB,mBAAoB,MACpB,cAAe,0BACnB,CACJ,EAEA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAoB,CAAC,EAGtD,KAAK,2BACL,KAAK,0BAA0B,CAC3B,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,cAAe,KAAK,0BACxB,CAAC,EAIL,KAAK,mBAAmB,8DAA+D,QAAQ,EAE/F,WAAW,IAAM,CACb,GAAI,CACA,KAAK,mBAAmB,GAAM,uBAAwB,CAClD,KAAM,KAAK,iBACX,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,yBAAyB,mBAAoB,EAAK,EACvD,KAAK,iBAAiB,UAAU,CACpC,OAAS7hB,EAAO,CAIZ,KAAK,WAAW,QAAS,kDAAmD,CACxE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACD,KAAK,mBAAmB,kEAAmE,QAAQ,EACnG,KAAK,WAAW,CACpB,CACJ,EAAG,GAAI,CACX,CACJ,CAEA,4BAA4BiC,EAAM,CAC9B,KAAK,4BAA8B,GAGnC,KAAK,mBAAmB,yEAA0E,QAAQ,EAGtG,KAAK,2BACL,KAAK,0BAA0B,CAC3B,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,cAAe,KAAK,0BACxB,CAAC,EAIL,KAAK,iCAAiC,CAC1C,CAEA,gCAAgCA,EAAM,CAKlC,GAAI,MAAK,2BAUT,IAAI,CAAC,KAAK,2BAA4B,CAClC,KAAK,WAAW,QAAS,wFAAyF,CAC9G,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,mBAAmB,0HAA2H,QAAQ,EAC3J,KAAK,WAAW,EAChB,MACJ,CAKA,KAAK,4BAA8B,GAGnC,KAAK,2BAA6B,GAG9B,KAAK,2BACL,KAAK,0BAA0B,CAC3B,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,cAAe,KAAK,0BACxB,CAAC,EAIL,KAAK,mBAAmB,8DAA+D,QAAQ,EAE/F,WAAW,IAAM,CACb,KAAK,mBAAmB,GAAM,uBAAwB,CAClD,KAAM,KAAK,iBACX,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,yBAAyB,mBAAoB,EAAK,EACvD,KAAK,iBAAiB,UAAU,CACpC,EAAG,GAAI,EACX,CAEA,0BAA0BA,EAAM,CAI5B,GAAI,KAAK,iBAAiBA,GAAM,IAAI,EAAG,CACnC,IAAM6f,EAAkB,CACpB,KAAM,wBACN,KAAM,CACF,GAAI,GACJ,UAAW,KAAK,IAAI,EACpB,mBAAoB,MACpB,cAAe,gBACnB,CACJ,EACA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAe,CAAC,EAGhD,KAAK,+BACN,KAAK,6BAA+B,GACpC,KAAK,mBAAmB,iFAAkF,QAAQ,GAGtH,KAAK,oBAAoB,CAC7B,KAAO,CAEH,IAAMA,EAAkB,CACpB,KAAM,wBACN,KAAM,CACF,GAAI,GACJ,UAAW,KAAK,IAAI,EACpB,OAAQ,eACZ,CACJ,EACA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAe,CAAC,EAErD,KAAK,WAAW,QAAS,iDAAkD,CAGvE,mBAAoB,OAAO7f,GAAM,MAAS,SAAWA,EAAK,KAAK,OAAS,EACxE,UAAW,KAAK,IAAI,CACxB,CAAC,EAED,KAAK,mBAAmB,yFAA0F,QAAQ,EAC1H,KAAK,WAAW,CACpB,CACJ,CAEA,cAAcA,EAAM,CAChB,GAAI,CAACA,GAAM,MAAQ,OAAOA,EAAK,MAAS,SAAU,CAC9C,KAAK,WAAW,OAAQ,6CAA6C,EACrE,MACJ,CAQA,GAAI,CAAC,KAAK,iBAAkB,CACxB,KAAK,WAAW,QAAS,qFAAsF,CAC3G,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,mBAAmB,kGAAmG,QAAQ,EACnI,KAAK,WAAW,EAChB,MACJ,CAEA,GAAI,CAAC,KAAK,iBAAiBA,EAAK,IAAI,EAAG,CACnC,KAAK,WAAW,QAAS,wDAAwD,EACjF,KAAK,mBAAmB,mEAAoE,QAAQ,EACpG,KAAK,WAAW,EAChB,MACJ,CAGA,KAAK,mCAAmC,EAExC,KAAK,WAAW,OAAQ,qDAAsD,CAC1E,UAAW,KAAK,IAAI,CACxB,CAAC,CACL,CAEA,2BAA2BA,EAAM,CAEzBA,EAAK,KAAO,IAGZ,KAAK,WAAW,OAAQ,6DAA8D,CAClF,mBAAoBA,EAAK,oBAAsB,MAC/C,cAAeA,EAAK,eAAiB,iBACrC,UAAW,KAAK,IAAI,CACxB,CAAC,EAGI,KAAK,+BACN,KAAK,6BAA+B,GACpC,KAAK,mBAAmB,oFAAqF,QAAQ,GAGzH,KAAK,oBAAoB,IAGzB,KAAK,WAAW,QAAS,uDAAwD,CAC7E,aAAcA,EACd,UAAW,KAAK,IAAI,CACxB,CAAC,EAED,KAAK,mBAAmB,mDAAoD,QAAQ,EACpF,KAAK,WAAW,EAExB,CAEA,kBAAkB8c,EAAW,CACzB,OAAOA,GACAA,EAAU,OAAS,yBACnBA,EAAU,KACVA,EAAU,WACVA,EAAU,MACVA,EAAU,kBACV,MAAM,QAAQA,EAAU,SAAS,GACjC,MAAM,QAAQA,EAAU,IAAI,GAC5BA,EAAU,KAAK,SAAW,EACrC,CAEA,0BAA0BA,EAAW,CACjC,GAAI,CAEA,GAAI,CAACA,GAAa,OAAOA,GAAc,UAAY,MAAM,QAAQA,CAAS,EACtE,WAAK,WAAW,QAAS,yCAA0C,CAC/D,aAAc,CAAC,CAACA,EAChB,cAAe,OAAOA,EACtB,QAAS,MAAM,QAAQA,CAAS,CACpC,CAAC,EACK,IAAI,MAAM,iEAAiE,EAMrF,IAAMgD,EAAoBhD,EAAU,IAAMxf,EAA4B,kBAAoBwf,EAAU,GAAKA,EAAU,EAC7GiD,EAAajD,EAAU,UAAYxf,EAA4B,kBAAoBwf,EAAU,eAAiBA,EAAU,eAO9H,GAAI,EAJgBgD,EAChB,CAAC,OAAO,EAAE,SAAShD,EAAU,CAAC,EAC9B,CAAC,wBAAyB,cAAc,EAAE,SAASA,EAAU,IAAI,GAGjE,MAAM,IAAI,MAAM,oBAAoB,EAGxC,GAAIgD,EAAmB,CAEnB,IAAME,EAAwB,CAC1B,IAAK,IAAK,KAAM,KAAM,KAAM,KAAM,KAAM,KAC5C,EAEA,QAAWC,KAASD,EACpB,GAAI,CAAClD,EAAUmD,CAAK,EACZ,MAAM,IAAI,MAAM,wCAAwCA,CAAK,EAAE,EAKvE,GAAI,CAACnD,EAAU,GAAK,OAAOA,EAAU,GAAM,UAAY,MAAM,QAAQA,EAAU,CAAC,EAC5E,MAAM,IAAI,MAAM,8DAA8D,EAGlF,GAAI,CAACA,EAAU,GAAK,OAAOA,EAAU,GAAM,UAAY,MAAM,QAAQA,EAAU,CAAC,EAC5E,MAAM,IAAI,MAAM,+DAA+D,EAInF,GAAI,CAAC,MAAM,QAAQA,EAAU,EAAE,GAAKA,EAAU,GAAG,SAAW,GACxD,MAAM,IAAI,MAAM,wCAAwC,EAI5D,GAAI,OAAOA,EAAU,IAAO,UAAYA,EAAU,GAAG,OAAS,EAC1D,MAAM,IAAI,MAAM,kCAAkC,EAItD,GAAI,CAAC,CAAC,MAAO,OAAQ,MAAO,KAAK,EAAE,SAASA,EAAU,GAAG,EACrD,MAAM,IAAI,MAAM,wBAAwB,EAI5C,IAAMM,EAAW,KAAK,IAAI,EAAIN,EAAU,GACxC,GAAIM,EAAW,KACX,MAAM,IAAI,MAAM,sCAAsC,EAG1D,KAAK,WAAW,OAAQ,uCAAwC,CAC5D,QAASN,EAAU,EACnB,QAAS,CAAC,CAACA,EAAU,EACrB,SAAU,CAAC,CAACA,EAAU,EACtB,QAAS,CAAC,CAACA,EAAU,GACrB,oBAAqB,CAAC,CAACA,EAAU,GACjC,cAAeA,EAAU,IACzB,SAAU,KAAK,MAAMM,EAAW,GAAI,EAAI,GAC5C,CAAC,CACL,SAAW2C,EAAY,CAEnB,IAAMG,EAAmB,CACrB,gBAAiB,iBAAkB,OAAQ,mBAC3C,gBAAiB,YAAa,UAAW,eAC7C,EAEA,QAAWD,KAASC,EAChB,GAAI,CAACpD,EAAUmD,CAAK,EAChB,MAAM,IAAI,MAAM,uBAAuBA,CAAK,EAAE,EAKtD,GAAI,CAAC,MAAM,QAAQnD,EAAU,IAAI,GAAKA,EAAU,KAAK,SAAW,GAC5D,MAAM,IAAI,MAAM,wCAAwC,EAI5D,IAAMM,EAAW,KAAK,IAAI,EAAIN,EAAU,UACxC,GAAIM,EAAW,KACX,MAAM,IAAI,MAAM,sCAAsC,EAI1D,GAAI,CAACN,EAAU,eAAiB,OAAOA,EAAU,eAAkB,UAAY,MAAM,QAAQA,EAAU,aAAa,EAChH,WAAK,WAAW,QAAS,8CAA+C,CACpE,WAAY,CAAC,CAACA,EAAU,cACxB,YAAa,OAAOA,EAAU,cAC9B,QAAS,MAAM,QAAQA,EAAU,aAAa,CAClD,CAAC,EACK,IAAI,MAAM,oFAAoF,EAGxG,GAAI,CAACA,EAAU,gBAAkB,OAAOA,EAAU,gBAAmB,UAAY,MAAM,QAAQA,EAAU,cAAc,EACnH,WAAK,WAAW,QAAS,+CAAgD,CACrE,YAAa,CAAC,CAACA,EAAU,eACzB,aAAc,OAAOA,EAAU,eAC/B,QAAS,MAAM,QAAQA,EAAU,cAAc,CACnD,CAAC,EACK,IAAI,MAAM,qFAAqF,EAIzG,GAAI,CAACA,EAAU,cAAc,SAAW,CAACA,EAAU,cAAc,UAC7D,WAAK,WAAW,QAAS,kDAAmD,CACxE,WAAY,CAAC,CAACA,EAAU,cAAc,QACtC,aAAc,CAAC,CAACA,EAAU,cAAc,SAC5C,CAAC,EACK,IAAI,MAAM,kEAAkE,EAGtF,GAAI,CAACA,EAAU,eAAe,SAAW,CAACA,EAAU,eAAe,UAC/D,WAAK,WAAW,QAAS,mDAAoD,CACzE,WAAY,CAAC,CAACA,EAAU,eAAe,QACvC,aAAc,CAAC,CAACA,EAAU,eAAe,SAC7C,CAAC,EACK,IAAI,MAAM,mEAAmE,EAGvF,GAAI,OAAOA,EAAU,kBAAqB,UAAYA,EAAU,iBAAiB,OAAS,EACtF,MAAM,IAAI,MAAM,iEAAiE,EAGrF,KAAK,WAAW,OAAQ,+BAAgC,CACpD,QAASA,EAAU,QACnB,iBAAkB,CAAC,CAACA,EAAU,eAAe,MAC7C,SAAU,KAAK,MAAMM,EAAW,GAAI,EAAI,GAC5C,CAAC,CACL,KAAO,CACH,IAAM+C,EAAkBrD,EAAU,GAAKA,EAAU,SAAW,UAC5D,MAAM,IAAI,MAAM,uCAAuCxf,EAA4B,gBAAgB,cAAc6iB,CAAe,EAAE,CACtI,CAGA,IAAMtf,EAAMif,EAAoBhD,EAAU,EAAIA,EAAU,IACxD,GAAI,OAAOjc,GAAQ,UAAY,CAACA,EAAI,SAAS,KAAK,EAC9C,MAAM,IAAI,MAAM,uBAAuB,EAG3C,MAAO,EACX,OAAS9C,EAAO,CACZ,WAAK,WAAW,QAAS,6DAA8D,CACnF,MAAOA,EAAM,QACb,UAAWA,EAAM,YAAY,KAC7B,UAAW,KAAK,IAAI,CACxB,CAAC,EAEK,IAAI,MAAM,yCAAyCA,EAAM,OAAO,EAAE,CAC5E,CACJ,CAEA,MAAM,kBAAkBgE,EAAS,CAE7B,IAAMuS,EAAa,KAAK,mBAAmBvS,EAAS,mBAAmB,EACvE,GAAI,CAACuS,EAAW,QAAS,CACrB,IAAMpM,EAAe,4BAA4BoM,EAAW,OAAO,KAAK,IAAI,CAAC,GAC7E,WAAK,WAAW,QAAS,+CAAgD,CACrE,OAAQA,EAAW,OACnB,YAAa,OAAOvS,CACxB,CAAC,EACK,IAAI,MAAMmG,CAAY,CAChC,CAGA,GAAI,CAAC,KAAK,gBAAgB,mBAAmB,EACzC,MAAM,IAAI,MAAM,gDAAgD,EAOpE,GAHA,KAAK,yBAAyB,mBAAmB,EAG7C,CAAC,KAAK,YAAY,EAClB,MAAIoM,EAAW,eAAiB,OAAOA,EAAW,eAAkB,UAAYA,EAAW,cAAc,MAAQA,EAAW,cAAc,KAAK,WAAW,OAAO,EACvJ,IAAI,MAAM,mGAAmG,GAEvH,KAAK,aAAa,KAAKA,EAAW,aAAa,EACzC,IAAI,MAAM,mDAAmD,GAIvE,OAAO,KAAK,WAAW,kBAAmB,MAAOG,GAAgB,CAE7D,GAAI,CAAC,KAAK,YAAY,GAAK,CAAC,KAAK,WAC7B,MAAM,IAAI,MAAM,4CAA4C,EAQhE,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,QAAU,CAAC,KAAK,YAC7C,MAAM,IAAI,MAAM,iCAAiC,EAIrD,GAAI,CAAC,OAAO,0BAA0B,YAAY,iBAAiB,KAAK,aAAa,EACjF,MAAM,IAAI,MAAM,sDAAsD,EAG1E,GAAI,CAEA,IAAM2L,EAAa,OAAO9L,EAAW,eAAkB,SAAWA,EAAW,cAAgB,KAAK,UAAUA,EAAW,aAAa,EAC9H+L,EAAmB,OAAO,0BAA0B,gBAAgBD,CAAU,EAC9E9O,EAAY,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,gBAAgB,GAG5D,GAAI,OAAO,KAAK,mBAAsB,WAClC,MAAM,IAAI,MAAM,uGAAuG,EAE3H,IAAMlT,EAAM2D,EAAQ,KAAO,KAAK,kBAAkB,mBAAoB,CAAE,QAASse,CAAiB,CAAC,EAE/FC,EASJ,GAAI,KAAK,UAAU,WAAY,CAI3B,GAAM,CAAE,OAAAhO,EAAQ,WAAAiO,CAAW,EAAI,MAAM,KAAK,SAAS,QAAQF,CAAgB,EAC3EC,EAAU,CACN,KAAMhjB,EAA4B,cAAc,gBAChD,EAAGgV,EACH,EAAGiO,EACH,QAAS,KACb,CACJ,MAWID,EAAU,CACN,KAAM,mBACN,KAXkB,MAAM,OAAO,0BAA0B,eACzDD,EACA,KAAK,cACL,KAAK,OACL,KAAK,YACL/O,EACA,KAAK,MAAMlT,CAAG,EAAE,cACpB,EAKI,WAAY,KAAK,kBACjB,QAAS,KACb,EAGJ,KAAK,YAAY,KAAK,KAAK,UAAUkiB,CAAO,CAAC,EAEzC,OAAOhM,EAAW,eAAkB,UACpC,KAAK,mBAAmBA,EAAW,cAAe,MAAM,EAG5D,KAAK,WAAW,QAAS,mCAAoC,CACzD,YAAaG,EACb,cAAe4L,EAAiB,OAChC,WAAY,KAAK,iBACrB,CAAC,CAEL,OAAStiB,EAAO,CAOZ,MANA,KAAK,WAAW,QAAS,gCAAiC,CACtD,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EAGGA,EAAM,QAAQ,SAAS,iBAAiB,EAClC,IAAI,MAAM,wDAAwD,EACjEA,EAAM,QAAQ,SAAS,iCAAiC,EACzD,IAAI,MAAM,kEAAkE,EAC3EA,EAAM,QAAQ,SAAS,iBAAiB,EACzC,IAAI,MAAM,yDAAyD,EAClEA,EAAM,QAAQ,SAAS,qBAAqB,EAC7C,IAAI,MAAM,0EAA0E,EAEpFA,CAEd,CACJ,EAAG,GAAI,CACX,CAEA,qBAAsB,CAClB,KAAO,KAAK,aAAa,OAAS,GAAK,KAAK,YAAY,GAAK,KAAK,YAAY,CAC1E,IAAMgE,EAAU,KAAK,aAAa,MAAM,EACxC,KAAK,kBAAkBA,CAAO,EAAE,MAAM,QAAQ,KAAK,CACvD,CACJ,CAMA,gBAAiB,CACb,KAAK,iBAAmB,CACpB,QAAS,GACT,SAAUzE,EAA4B,SAAS,mBAC/C,cAAe,CACnB,EAEA,KAAK,cAA+B,EAAI,EAExC,KAAK,gBAAkB,YAAY,IAAM,CAChC,KAAK,kBAAkB,SACxB,KAAK,aAAa,aAAe,QACjC,KAAK,eAAe,CAE5B,EAAGA,EAA4B,SAAS,kBAAkB,EAC1D,KAAK,kBAAkB,KAAK,eAAe,EAI3C,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,iBAAmB,EACxB,KAAK,eAAiB,GACtB,KAAK,uBAAuB,EAC5B,KAAK,iCAAiC,EAEtC,KAAK,WAAW,OAAQ,sCAAgC,CACpD,YAAaA,EAA4B,SAAS,mBAClD,aAAcA,EAA4B,SAAS,qBACnD,eAAgBA,EAA4B,SAAS,sBACzD,CAAC,CACL,CAEA,cAAckjB,EAAa,GAAO,CAC1B,CAACA,GAAc,KAAK,mBACpB,KAAK,iBAAiB,QAAU,IAEhC,KAAK,kBACL,cAAc,KAAK,eAAe,EAClC,KAAK,eAAe,OAAO,KAAK,eAAe,EAC/C,KAAK,gBAAkB,MAEtBA,GAAY,KAAK,sBAAsB,CAChD,CAWA,gBAAgBze,EAAS,CACrB,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,iBAAmB,EAExB,IAAM0e,EAAQ1e,GAAS,MAAQ,IAAQA,GAAS,MAAM,MAAQ,GACzD0e,GAAO,KAAK,eAAe,EAAI,EAEpC,KAAK,WAAW,QAASA,EAAQ,mCAA8B,oCAA6B,CAChG,CAMA,sBAAuB,CACnB,KAAK,eAAiB,KAAK,IAAI,EAE/B,KAAK,iBAAmB,EAIxB,KAAK,eAAiB,EAC1B,CAEA,wBAAyB,CACrB,KAAK,sBAAsB,EAC3B,KAAK,eAAiB,YAAY,IAAM,CACpC,GAAI,CACA,KAAK,eAAe,CACxB,OAAS1iB,EAAO,CACZ,KAAK,WAAW,QAAS,+BAA2B,CAChD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CACJ,EAAGT,EAA4B,SAAS,uBAAuB,EAC/D,KAAK,kBAAkB,KAAK,cAAc,CAC9C,CAEA,uBAAwB,CAChB,KAAK,iBACL,cAAc,KAAK,cAAc,EACjC,KAAK,eAAe,OAAO,KAAK,cAAc,EAC9C,KAAK,eAAiB,KAE9B,CAcA,gBAAiB,CAKb,GAJI,CAAC,KAAK,YACN,KAAK,WAAW,QAAU,QAC1B,KAAK,aAAa,aAAe,QACjC,CAAC,KAAK,gBACN,CAAC,KAAK,eAAgB,OAE1B,IAAM2O,EAAI3O,EAA4B,SAChCqF,EAAM,KAAK,IAAI,EAwBrB,GAPmB,KAAK,gBAAgB,kBAAoB,YAO5C,CACZ,KAAK,iBAAmB,EACxB,MACJ,CAGA,GAAI,KAAK,iBAAkB,CACvB,GAAIA,EAAM,KAAK,iBAAmBsJ,EAAE,uBAAwB,OAC5D,KAAK,iBAAmB,EACxB,KAAK,WAAW,OAAQ,2FAA4E,EACpG,KAAK,YAAY,wBAAwB,EACzC,MACJ,CAEA,GAAItJ,EAAM,KAAK,eAAiBsJ,EAAE,qBAAsB,OAExD,KAAK,iBAAmBtJ,EACxB,IAAM+d,EAAY,KAAK,eAAe,EAAK,EAC3C,KAAK,WAAW,OAAQ,kDAA4C,CAChE,YAAa/d,EAAM,KAAK,eACxB,gBAAiB,KAAK,gBAAgB,gBACtC,UAAW+d,CACf,CAAC,CACL,CA6BA,gBAAiB,CACb,OAAO,KAAK,WAAW,QAAU,QAAU,KAAK,WAAW,QAAU,WACzE,CASA,kCAAmC,CAC3B,OAAO,OAAW,KAAe,KAAK,0BAC1C,KAAK,wBAA0B,GAE/B,KAAK,gBAAkB,IAAM,CACpB,KAAK,aACN,KAAK,eAAe,GAEpB,KAAK,WAAW,OAAQ,0DAA8C,EACtE,KAAK,mBAAmB,GAGxB,KAAK,eAAe,EAE5B,EACA,KAAK,sBAAwB,IAAM,CAC3B,OAAO,SAAa,KAAe,SAAS,kBAAoB,WAC/D,KAAK,aAWV,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,iBAAmB,EAEpB,KAAK,WAAW,QAAU,QAAU,KAAK,aAAa,aAAe,SACrE,KAAK,iBAAmB,KAAK,IAAI,EACjC,KAAK,eAAe,EAAK,EACzB,KAAK,WAAW,OAAQ,gDAAyC,GAEzE,EAEA,OAAO,iBAAiB,SAAU,KAAK,eAAe,EAClD,OAAO,SAAa,KACpB,SAAS,iBAAiB,mBAAoB,KAAK,qBAAqB,EAEhF,CAEA,qCAAsC,CAC9B,CAAC,KAAK,yBAA2B,OAAO,OAAW,MACvD,KAAK,wBAA0B,GAC3B,KAAK,iBAAiB,OAAO,oBAAoB,SAAU,KAAK,eAAe,EAC/E,KAAK,uBAAyB,OAAO,SAAa,KAClD,SAAS,oBAAoB,mBAAoB,KAAK,qBAAqB,EAE/E,KAAK,gBAAkB,KACvB,KAAK,sBAAwB,KACjC,CAEA,sBAAuB,CACnB,IAAMC,EAAI,KAAK,WACVA,IACDA,EAAE,aAAc,aAAaA,EAAE,UAAU,EAAG,KAAK,eAAe,OAAOA,EAAE,UAAU,GACnFA,EAAE,aAAc,aAAaA,EAAE,UAAU,EAAG,KAAK,eAAe,OAAOA,EAAE,UAAU,GACnFA,EAAE,eAAgB,aAAaA,EAAE,YAAY,EAAG,KAAK,eAAe,OAAOA,EAAE,YAAY,GAC7FA,EAAE,WAAa,KACfA,EAAE,WAAa,KACfA,EAAE,aAAe,KACjBA,EAAE,MAAQ,OACVA,EAAE,SAAW,EACbA,EAAE,UAAY,EACdA,EAAE,WAAa,EACfA,EAAE,eAAiB,EACnBA,EAAE,YAAc,KACpB,CAQA,gBAAgB9Y,EAAS,mBAAoB,CACpC,KAAK,YACN,KAAK,WAAW,QAAU,SAE9B,KAAK,WAAW,MAAQ,QACxB,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,WAAW,OAAQ,gDAA0C,CAAE,OAAAA,CAAO,CAAC,EAC5E,KAAK,eAAe,cAAc,EAElC,KAAK,WAAW,WAAa,WAAW,IAAM,CAE1C,GADA,KAAK,WAAW,WAAa,KACzB,KAAK,gBAAgB,kBAAoB,YAAa,CACtD,KAAK,iBAAiB,EACtB,MACJ,CACA,KAAK,mBAAmB,CAC5B,EAAGvK,EAA4B,SAAS,oBAAoB,EAC5D,KAAK,kBAAkB,KAAK,WAAW,UAAU,EACrD,CAGA,YAAYuK,EAAS,aAAc,CAC1B,KAAK,aACN,KAAK,WAAW,QAAU,cAAgB,KAAK,WAAW,QAAU,cAEpE,KAAK,WAAW,QAAU,SAC1B,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,eAAe,cAAc,GAElC,KAAK,WAAW,aAChB,aAAa,KAAK,WAAW,UAAU,EACvC,KAAK,eAAe,OAAO,KAAK,WAAW,UAAU,EACrD,KAAK,WAAW,WAAa,MAEjC,KAAK,WAAW,OAAQ,sCAAgC,CAAE,OAAAA,CAAO,CAAC,EAClE,KAAK,mBAAmB,GAC5B,CAcA,2BAA2BsO,EAAa,CACpC,GAAK,KAAK,eAAe,GACpBA,EAEL,IAAIA,EAAY,UAAY,EAAG,CAC3B,KAAK,WAAW,eAAiB,EACjC,MACJ,CAEA,KAAK,WAAW,gBAAkB,KAAK,WAAW,gBAAkB,GAAK,EACrE,OAAK,WAAW,eAAiB7Y,EAA4B,OAAO,2BAExE,KAAK,WAAW,OAAQ,gHAAkG,CACtH,0BAA2B,KAAK,WAAW,cAC/C,CAAC,EACD,KAAK,qBAAqB,oBAAoB,GAClD,CAOA,kBAAmB,CACf,IAAMsjB,EAAgB,KAAK,eAAe,EAK1C,GAJA,KAAK,qBAAqB,EAC1B,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,iBAAmB,EAEpB,CAACA,EAAe,MAAO,GAE3B,KAAK,WAAW,OAAQ,mDAA4C,EACpE,KAAK,eAAe,WAAW,EAE/B,KAAK,oBAAoB,EACzB,GAAI,CACA,KAAK,oBAAoB,IAAI,YAAY,uBAAwB,CAC7D,OAAQ,CAAE,UAAW,KAAK,IAAI,CAAE,CACpC,CAAC,CAAC,CACN,MAAY,CAAqB,CACjC,MAAO,EACX,CAOA,MAAM,oBAAqB,CACvB,GAAI,CAAC,KAAK,YAAc,CAAC,KAAK,eAAgB,OAO9C,GAAI,KAAK,eAAe,kBAAoB,YAAa,CACrD,KAAK,iBAAiB,EACtB,MACJ,CAEA,IAAMD,EAAI,KAAK,WAMf,GAAI,OAAO,UAAc,KAAe,UAAU,SAAW,GAAO,CAChEA,EAAE,MAAQ,UACVA,EAAE,UAAY,KAAK,IAAI,EACvB,KAAK,WAAW,QAAS,uDAA2C,EACpE,KAAK,wBAAwB,EAC7B,MACJ,CAGA,GADgB,KAAK,IAAI,GAAKA,EAAE,WAAa,KAAK,IAAI,GACxCrjB,EAA4B,SAAS,uBAAwB,CACvE,KAAK,qBAAqB,SAAS,EACnC,MACJ,CAOA,GAAIqjB,EAAE,YAAc,KAAK,IAAI,EAAIA,EAAE,WAAarjB,EAA4B,SAAS,oBAAqB,CACtG,KAAK,wBAAwB,EAC7B,MACJ,CAIA,GAAI,KAAK,aAAa,aAAe,OAAQ,CACzC,KAAK,qBAAqB,qBAAqB,EAC/C,MACJ,CAeA,IAAMujB,EAAY,KAAK,IAAI,EAAI,KAAK,IAAI,KAAK,gBAAkB,EAAGF,EAAE,SAAS,EAC7E,GAAIA,EAAE,UAAY,GAAKE,EAAYvjB,EAA4B,SAAS,uBAAwB,CAC5F,KAAK,WAAW,OAAQ,qGAAuF,CAC3G,YAAaujB,EACb,SAAUF,EAAE,QAChB,CAAC,EACD,KAAK,qBAAqB,oBAAoB,EAC9C,MACJ,CAEAA,EAAE,MAAQ,aACVA,EAAE,UAAY,EACdA,EAAE,WAAa,KAAK,IAAI,EACxB,KAAK,WAAW,OAAQ,gCAA0B,CAC9C,QAASA,EAAE,SACX,KAAM,KAAK,YAAc,UAAY,UACzC,CAAC,EAED,GAAI,CACI,KAAK,YACL,MAAM,KAAK,qBAAqB,EAEhC,MAAM,KAAK,kBAAkB,CACzB,KAAMrjB,EAA4B,cAAc,oBAChD,UAAW,KAAK,IAAI,CACxB,CAAC,CAET,OAASS,EAAO,CACZ,KAAK,WAAW,OAAQ,kDAAyC,CAC7D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAIA,KAAK,wBAAwB,CACjC,CAEA,yBAA0B,CACtB,IAAM4iB,EAAI,KAAK,WACXA,EAAE,aACF,aAAaA,EAAE,UAAU,EACzB,KAAK,eAAe,OAAOA,EAAE,UAAU,GAE3C,IAAMG,EAAUxjB,EAA4B,kBAItC0B,EAAQ8hB,EAAQ,KAAK,IAAI,KAAK,IAAIH,EAAE,SAAW,EAAG,CAAC,EAAGG,EAAQ,OAAS,CAAC,CAAC,EAE/EH,EAAE,WAAa,WAAW,IAAM,CAE5B,GADAA,EAAE,WAAa,KACX,KAAK,gBAAgB,kBAAoB,YAAa,CACtD,KAAK,iBAAiB,EACtB,MACJ,CACA,KAAK,mBAAmB,CAC5B,EAAG3hB,CAAK,EACR,KAAK,kBAAkB2hB,EAAE,UAAU,CACvC,CAYA,wBAAwBI,EAAI,CACxB,GAAI,CACA,GAAI,CAACA,GAAM,OAAOA,EAAG,kBAAqB,YAAc,OAAOA,EAAG,kBAAqB,WAAY,OACnG,IAAMC,EAAU,KAAK,SAAS,QAAQ,WACtC,GAAI,CAAC,MAAM,QAAQA,CAAO,GAAKA,EAAQ,SAAW,EAAG,OACrDD,EAAG,iBAAiB,CAAE,GAAGA,EAAG,iBAAiB,EAAG,WAAYC,CAAQ,CAAC,CACzE,OAASjjB,EAAO,CACZ,KAAK,WAAW,OAAQ,+CAAgD,CACpE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CACJ,CAEA,MAAM,sBAAuB,CACzB,IAAMgjB,EAAK,KAAK,eAChB,GAAI,CAACA,EAAI,OAKT,GAJA,KAAK,wBAAwBA,CAAE,EAI3BA,EAAG,iBAAmB,mBACtB,GAAI,CAAE,MAAMA,EAAG,oBAAoB,CAAE,KAAM,UAAW,CAAC,CAAG,MAAY,CAAe,CAGzF,IAAMhF,EAAQ,MAAMgF,EAAG,YAAY,CAAE,WAAY,EAAK,CAAC,EACvD,MAAMA,EAAG,oBAAoBhF,CAAK,EAClC,MAAM,KAAK,oBACPze,EAA4B,SAAS,sBAIrCA,EAA4B,SAAS,qBACzC,EAEA,MAAM,KAAK,kBAAkB,CACzB,KAAMA,EAA4B,cAAc,kBAChD,IAAKyjB,EAAG,iBAAiB,IACzB,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,WAAW,QAAS,kCAA2B,CACxD,CAMA,+BAAgC,CAC5B,IAAMlgB,EAAM,KAAK,gBAAgB,0BAA0B,KACpD,KAAK,gBAAgB,mBAAmB,IAC/C,GAAI,CAACA,EAAK,OAAO,KACjB,GAAI,CACA,OAAO,KAAK,+BAA+BA,CAAG,CAClD,MAAY,CACR,OAAO,IACX,CACJ,CAEA,MAAM,0BAA0BA,EAAKtC,EAAS,CAC1C,IAAMwgB,EAAW,KAAK,8BAA8B,EACpD,GAAI,CAACA,EAED,MAAM,IAAI,MAAM,mCAAmCxgB,CAAO,EAAE,EAEhE,IAAM0iB,EAAW,KAAK,+BAA+BpgB,CAAG,EACxD,MAAM,KAAK,yBAAyBogB,EAAUlC,EAAUxgB,CAAO,CACnE,CAGA,MAAM,wBAAwBwB,EAAMC,EAAM,CACtC,IAAMiM,EAAI3O,EAA4B,cAChCyjB,EAAK,KAAK,eAChB,GAAKA,EAIL,OAFA,KAAK,qBAAqB,EAElBhhB,EAAM,CACV,KAAKkM,EAAE,oBAAqB,CAExB,GAAI,CAAC,KAAK,YAAa,OACnB,KAAK,WAAW,QAAU,SAC1B,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,WAAW,MAAQ,aACxB,KAAK,eAAe,cAAc,GAEtC,MAAM,KAAK,qBAAqB,EAChC,MACJ,CAEA,KAAKA,EAAE,kBAAmB,CACtB,GAAI,CAACjM,EAAK,IAAK,OAEf,MAAM,KAAK,0BAA0BA,EAAK,IAAK,mBAAmB,EAE9D,KAAK,WAAW,QAAU,SAC1B,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,eAAe,cAAc,GAEtC,KAAK,WAAW,MAAQ,aAExB,KAAK,wBAAwB+gB,CAAE,EAC/B,MAAMA,EAAG,qBAAqB,CAAE,KAAM,QAAS,IAAK/gB,EAAK,GAAI,CAAC,EAC9D,IAAM8d,EAAS,MAAMiD,EAAG,aAAa,EACrC,MAAMA,EAAG,oBAAoBjD,CAAM,EACnC,MAAM,KAAK,oBACPxgB,EAA4B,SAAS,sBAIrCA,EAA4B,SAAS,qBACzC,EAEA,MAAM,KAAK,kBAAkB,CACzB,KAAM2O,EAAE,mBACR,IAAK8U,EAAG,iBAAiB,IACzB,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,WAAW,QAAS,mCAA4B,EACrD,MACJ,CAEA,KAAK9U,EAAE,mBAAoB,CACvB,GAAI,CAACjM,EAAK,IAAK,OACf,GAAI+gB,EAAG,iBAAmB,mBAAoB,CAC1C,KAAK,WAAW,OAAQ,2DAAkD,CACtE,eAAgBA,EAAG,cACvB,CAAC,EACD,MACJ,CACA,MAAM,KAAK,0BAA0B/gB,EAAK,IAAK,oBAAoB,EACnE,MAAM+gB,EAAG,qBAAqB,CAAE,KAAM,SAAU,IAAK/gB,EAAK,GAAI,CAAC,EAG/D,KAAK,WAAW,WAAa,EAC7B,KAAK,WAAW,QAAS,sCAA+B,EACxD,MACJ,CAEA,QACJ,CACJ,CAYA,qBAAqB6H,EAAQ,CACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,MAAQ,YACxB,KAAK,sCAAsC,EAC3C,KAAK,WAAW,OAAQ,sEAAwD,CAAE,OAAAA,CAAO,CAAC,EAErF,KAAK,qCACN,KAAK,mCAAqC,GAC1C,KAAK,mBACD,qHACA,QACJ,GAMJ,KAAK,eAAe,iBAAiB,EACrC,KAAK,yBAAyB,CAClC,CAKA,gBAAiB,CACb,KAAK,WAAW,OAAQ,2CAA2C,EAG/D,KAAK,wBACL,cAAc,KAAK,qBAAqB,EACxC,KAAK,sBAAwB,MAMjC,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAGxB,KAAK,gBACL,KAAK,cAAc,QAAQvH,GAAS,CAC5BA,IACA,cAAcA,CAAK,EACnB,aAAaA,CAAK,EAE1B,CAAC,EACD,KAAK,cAAc,MAAM,GAGzB,KAAK,8BACL,KAAK,6BAA6B,MAAM,EAE5C,KAAK,oBAAsB,KAE3B,KAAK,WAAW,OAAQ,iCAAiC,CAC7D,CAyBA,oBACI4gB,EAAY5jB,EAA4B,SAAS,sBACjD6jB,EAAS7jB,EAA4B,SAAS,2BAChD,CACE,OAAO,IAAI,QAASwB,GAAY,CAC5B,IAAMiiB,EAAK,KAAK,eAChB,GAAI,CAACA,EAAI,CACLjiB,EAAQ,EAAK,EACb,MACJ,CACA,GAAIiiB,EAAG,oBAAsB,WAAY,CACrCjiB,EAAQ,EAAI,EACZ,MACJ,CAEA,IAAIsiB,EAAU,GACVC,EAAY,KACZC,EAAY,KAMVC,EAAgB,IAAM,CACxB,GAAI,CACA,IAAM1gB,EAAM,KAAK,gBAAgB,kBAAkB,IACnD,OAAKA,EACE,KAAK,6BAA6BA,CAAG,EAAE,MAAQ,EADrC,EAErB,MAAY,CACR,MAAO,EACX,CACJ,EAEM2gB,EAAUC,GAAc,CAC1B,GAAI,CAAAL,EACJ,CAAAA,EAAU,GACNC,IAAa,aAAaA,CAAS,EAAG,KAAK,sBAAsBA,CAAS,GAC1EC,IAAa,aAAaA,CAAS,EAAG,KAAK,sBAAsBA,CAAS,GAC9E,GAAI,CAAEP,EAAG,oBAAoB,0BAA2BW,CAAa,CAAG,MAAY,CAAC,CACrF5iB,EAAQ2iB,CAAS,EACrB,EAEMC,EAAgB,IAAM,CACpB,KAAK,gBAAgB,oBAAsB,YAC3CF,EAAO,EAAI,CAEnB,EAEAT,EAAG,iBAAiB,0BAA2BW,CAAa,EAI5DL,EAAY,WAAW,IAAM,CACrBE,EAAc,GACdC,EAAO,EAAK,CAIpB,EAAGN,CAAS,EACZ,KAAK,oBAAoBG,CAAS,EAElCC,EAAY,WAAW,IAAME,EAAO,EAAK,EAAG,KAAK,IAAIL,EAAQD,CAAS,CAAC,EACvE,KAAK,oBAAoBI,CAAS,CACtC,CAAC,CACL,CAEA,iBAAkB,CACd,KAAK,WAAW,OAAQ,sBAAuB,CAC3C,QAAS,KAAK,mBACd,YAAa,KAAK,qBACtB,CAAC,EACD,KAAK,eAAe,UAAU,CAClC,CAEA,aAAc,CACV,IAAMK,EAAiB,CAAC,CAAC,KAAK,YAExBC,EADmB,KAAK,aAAa,aACI,OACzCC,EAAa,KAAK,WAClBC,EAAkB,KAAK,gBAAgB,gBAE7C,OAAO,KAAK,aAAe,KAAK,YAAY,aAAe,QAAU,KAAK,UAC9E,CAEA,mBAAoB,CAChB,MAAO,CACH,YAAa,KAAK,eAClB,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,gBAAiB,KAAK,gBAAgB,gBACtC,mBAAoB,KAAK,gBAAgB,mBACzC,iBAAkB,KAAK,gBAC3B,CACJ,CAEA,4BAA6B,CACzB,KAAK,2BAA2B,EAChC,KAAK,WAAa,GAGb,KAAK,6BACN,KAAK,2BAA6B,GAClC,KAAK,mBAAmB,wDAAkD,QAAQ,GAIlF,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAG9B,KAAK,oBAAoB,IAAI,YAAY,kBAAmB,CACxD,OAAQ,CACJ,OAAQ,kBACR,UAAW,KAAK,IAAI,CACxB,CACJ,CAAC,CAAC,CAEN,CAEA,4BAA6B,CACzB,GAAI,CACA,GAAI,KAAK,aAAe,KAAK,YAAY,aAAe,OAAQ,CAC5D,IAAMC,EAAe,CACjB,KAAM,kBACN,UAAW,KAAK,IAAI,EACpB,OAAQ,KAAK,sBAAwB,kBAAoB,iBAC7D,EAEA,QAAS1iB,EAAI,EAAGA,EAAI,EAAGA,IACnB,GAAI,CACA,KAAK,YAAY,KAAK,KAAK,UAAU0iB,CAAY,CAAC,EAClD,OAAO,0BAA0B,UAAU,IAAI,OAAQ,+BAAgC,CACnF,OAAQA,EAAa,OACrB,QAAS1iB,EAAI,CACjB,CAAC,EACD,KACJ,OAAS2iB,EAAW,CACZ3iB,IAAM,GACN,OAAO,0BAA0B,UAAU,IAAI,QAAS,yCAA0C,CAC9F,MAAO2iB,EAAU,OACrB,CAAC,CAET,CAER,CACJ,OAASjkB,EAAO,CACZ,OAAO,0BAA0B,UAAU,IAAI,QAAS,yCAA0C,CAC9F,MAAOA,EAAM,OACjB,CAAC,CACL,CACJ,CAOA,qBAAsB,CAClB,MAAI,CAAC,KAAK,YAAc,KAAK,aAAa,aAAe,QAChD,KAAK,qCACN,KAAK,mCAAqC,GAC1C,KAAK,mBAAmB,qDAAsD,QAAQ,GAEnF,KAGX,KAAK,qBAAqB,EAC1B,KAAK,mCAAqC,GAC1C,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,eAAe,cAAc,EAClC,KAAK,mBAAmB,EACjB,GACX,CAEA,iCAAiCiC,EAAM,CACnC,IAAM6H,EAAS7H,EAAK,QAAU,UACxBiiB,EAAapa,IAAW,kBAAoB,yBAA2B,mBAGxE,KAAK,iCACN,KAAK,+BAAiC,GACtC,KAAK,mBAAmB,QAAQoa,CAAU,GAAI,QAAQ,GAG1D,KAAK,eAAe,mBAAmB,EAEvC,KAAK,sBAAwB,GAC7B,KAAK,WAAa,GAClB,KAAK,cAAc,EAEnB,KAAK,cAAc,EAAE,EACrB,KAAK,uBAAuB,EAAE,EAE9B,KAAK,oBAAoB,IAAI,YAAY,kBAAmB,CACxD,OAAQ,CACJ,OAAQpa,EACR,UAAW,KAAK,IAAI,CACxB,CACJ,CAAC,CAAC,EAEG,KAAK,8BACN,KAAK,4BAA8B,KAAK,kBAAkB,WAAW,IAAM,CACvE,IAAMvH,EAAQ,KAAK,4BACnB,KAAK,4BAA8B,KACnC,KAAK,oBAAoBA,CAAK,EAC1B,KAAK,gBAAkB,IAC3B,KAAK,WAAW,CACpB,EAAG,GAAI,CAAC,GAGZ,OAAO,0BAA0B,UAAU,IAAI,OAAQ,yCAA0C,CAC7F,OAAQuH,CACZ,CAAC,CACL,CAKA,YAAa,CACT,GAAI,CACA,KAAK,cAAgB,GAIrB,GAAI,CAAE,KAAK,kBAAkB,CAAG,MAAY,CAAC,CAC7C,GAAI,CAAE,KAAK,6BAA6B,CAAG,MAAY,CAAC,CACxD,KAAK,iBAAmB,KACxB,KAAK,iBAAmB,KAKxB,KAAK,kBAAoB,KACzB,KAAK,qBAAuB,KAC5B,KAAK,qBAAqB,QAAQ,EAGlC,KAAK,sBAAwB,GAC7B,OAAO,0BAA0B,UAAU,IAAI,OAAQ,iCAAiC,EACxF,KAAK,2BAA2B,EAGhC,KAAK,sCAAsC,EAC3C,KAAK,eAAe,EACpB,KAAK,4BAA8B,KACnC,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,QAAWvH,KAAS,KAAK,YAAY,QAAQ,EACzC,aAAaA,EAAM,CAAC,CAAC,EAEzB,KAAK,YAAY,MAAM,EAGnB,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAI9B,QAAWqP,KAAW,KAAK,cAAc,OAAO,EACxCA,EAAQ,aAAe,QAAQA,EAAQ,MAAM,EAErD,KAAK,cAAc,MAAM,EACrB,KAAK,mBACL,KAAK,iBAAiB,MAAM,EAC5B,KAAK,iBAAmB,MAI5B,KAAK,WAAa,GAClB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,eAAiB,EACtB,KAAK,aAAa,MAAM,EACxB,KAAK,WAAa,CAAC,EAGnB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qCAAqC,EAC1C,KAAK,YAAY,MAAM,EACvB,KAAK,QAAQ,MAAM,EACnB,KAAK,kBAAoB,EACzB,KAAK,gBAAkB,KAAK,IAAI,EAChC,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,aAAa,MAAM,EACxB,KAAK,yBAAyB,EAE9B,KAAK,iBAAmB,CACpB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,gBAAiB,GACjB,sBAAuB,GACvB,OAAQ,EACZ,EAGI,KAAK,cACL,KAAK,YAAY,MAAM,EACvB,KAAK,YAAY,OAAS,KAC1B,KAAK,YAAY,QAAU,KAC3B,KAAK,YAAY,UAAY,KAC7B,KAAK,YAAY,QAAU,KAC3B,KAAK,YAAc,MAEnB,KAAK,iBACL,KAAK,eAAe,MAAM,EAC1B,KAAK,eAAe,wBAA0B,KAC9C,KAAK,eAAe,cAAgB,KACpC,KAAK,eAAiB,MAGtB,KAAK,cAAgB,KAAK,aAAa,OAAS,IAChD,KAAK,aAAa,QAAQ,CAAC5N,EAASwE,IAAU,CAC1C,KAAK,kBAAkBxE,EAAS,gBAAgBwE,CAAK,GAAG,CAC5D,CAAC,EACD,KAAK,aAAe,CAAC,GAGzB,KAAK,wBAAwB,EAAE,MAAMxI,GAAS,CAC1C,KAAK,WAAW,QAAS,mCAAoC,CACzD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAED,KAAK,oBAAoB,IAAI,YAAY,kBAAmB,CACxD,OAAQ,CACJ,OAAQ,kBACR,UAAW,KAAK,IAAI,CACxB,CACJ,CAAC,CAAC,EACF,KAAK,oBAAoB,IAAI,YAAY,qBAAsB,CAC3D,OAAQ,CACJ,UAAW,KAAK,IAAI,EACpB,OAAQ,cACZ,CACJ,CAAC,CAAC,EAEF,KAAK,eAAe,cAAc,EAClC,KAAK,cAAc,EAAE,EACrB,KAAK,uBAAuB,EAAE,EAC9B,KAAK,WAAW,OAAQ,0DAA0D,CACtF,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,2CAAuC,CAC5D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,QAAE,CACE,KAAK,sBAAwB,EACjC,CACJ,CAEA,MAAM,SAASmkB,EAAMC,EAAU,CAAC,EAAG,CAI/B,GAFA,KAAK,yBAAyB,UAAU,EAEpC,CAAC,KAAK,YAAY,EAClB,MAAM,IAAI,MAAM,sFAAsF,EAG1G,GAAI,CAAC,KAAK,qBACN,KAAK,uBAAuB,EAG5B,MAAM,IAAI,QAAQrjB,GAAW,WAAWA,EAAS,GAAG,CAAC,EAEjD,CAAC,KAAK,oBACN,MAAM,IAAI,MAAM,yEAAyE,EAKjG,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,OAC7B,MAAM,IAAI,MAAM,gFAAgF,EAIpG,GAAI,CAEA,OADe,MAAM,KAAK,mBAAmB,SAASojB,EAAMC,CAAO,CAEvE,OAASpkB,EAAO,CAIZ,MAHA,KAAK,WAAW,QAAS,uBAAwB,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAGjGA,EAAM,QAAQ,SAAS,sBAAsB,EACvC,IAAI,MAAM,kEAAkE,EAC3EA,EAAM,QAAQ,SAAS,iCAAiC,EACzD,IAAI,MAAM,kEAAkE,EAC3EA,EAAM,QAAQ,SAAS,kBAAkB,EAC1C,IAAI,MAAM,wDAAwD,EAElEA,CAEd,CACJ,CAGA,kBAAmB,CACf,GAAI,CAAC,KAAK,mBACN,MAAO,CAAE,QAAS,CAAC,EAAG,UAAW,CAAC,CAAE,EAGxC,GAAI,CAEA,IAAIqkB,EAAU,CAAC,EACXC,EAAY,CAAC,EAEjB,OAAI,OAAO,KAAK,mBAAmB,oBAAuB,WACtDD,EAAU,KAAK,mBAAmB,mBAAmB,EAErD,KAAK,WAAW,OAAQ,iEAAiE,EAGzF,OAAO,KAAK,mBAAmB,uBAA0B,WACzDC,EAAY,KAAK,mBAAmB,sBAAsB,EAE1D,KAAK,WAAW,OAAQ,oEAAoE,EAGzF,CACH,QAASD,GAAW,CAAC,EACrB,UAAWC,GAAa,CAAC,CAC7B,CACJ,OAAStkB,EAAO,CACZ,YAAK,WAAW,QAAS,gCAAiC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACvG,CAAE,QAAS,CAAC,EAAG,UAAW,CAAC,CAAE,CACxC,CACJ,CAGA,uBAAwB,CACpB,GAAI,CAAC,KAAK,mBACN,MAAO,CACH,YAAa,GACb,OAAQ,kBACR,QAAS,sCACb,EAGJ,IAAMukB,EAAkB,KAAK,mBAAmB,mBAAmB,EAC7DC,EAAqB,KAAK,mBAAmB,sBAAsB,EAEzE,MAAO,CACH,YAAa,GACb,OAAQ,QACR,gBAAiBD,EAAgB,OACjC,mBAAoBC,EAAmB,OACvC,eAAgBD,EAAgB,OAASC,EAAmB,MAChE,CACJ,CAGA,mBAAmBC,EAAQ,CACvB,OAAK,KAAK,mBACH,KAAK,mBAAmB,eAAeA,CAAM,EADf,EAEzC,CAGA,2BAA4B,CACxB,OAAI,KAAK,oBACL,KAAK,WAAW,OAAQ,kDAA2C,EACnE,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,KACnB,IAEJ,EACX,CAGA,0BAA2B,CACvB,GAAI,CACA,OAAI,KAAK,oBACL,KAAK,mBAAmB,QAAQ,EAEpC,KAAK,uBAAuB,EACrB,EACX,OAASzkB,EAAO,CACZ,YAAK,WAAW,QAAS,+CAAgD,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACtH,EACX,CACJ,CAGA,yBAAyB0kB,EAAYC,EAAYC,EAASC,EAAoB,KAAM,CAChF,KAAK,eAAiBH,EACtB,KAAK,eAAiBC,EACtB,KAAK,YAAcC,EACnB,KAAK,sBAAwBC,EAGzB,KAAK,qBACL,KAAK,mBAAmB,WAAaH,EACrC,KAAK,mBAAmB,eAAiBC,EACzC,KAAK,mBAAmB,QAAUC,EAClC,KAAK,mBAAmB,sBAAwBC,EAExD,CAEA,yBAA0B,CACtB,OAAK,KAAK,mBACH,KAAK,mBAAmB,4BAA4B,EADtB,CAAC,CAE1C,CAEA,MAAM,mBAAmBJ,EAAQ,CAC7B,OAAK,KAAK,mBACH,KAAK,mBAAmB,mBAAmBA,CAAM,EADnB,EAEzC,CAEA,MAAM,mBAAmBA,EAAQ,CAC7B,OAAK,KAAK,mBACH,KAAK,mBAAmB,mBAAmBA,CAAM,EADnB,EAEzC,CAEA,MAAM,yBAAyBA,EAAQ,CACnC,OAAK,KAAK,mBACH,KAAK,mBAAmB,aAAaA,CAAM,EADb,IAEzC,CAEA,4BAA4B7M,EAAK,CACxB,KAAK,oBACV,KAAK,mBAAmB,gBAAgBA,CAAG,CAC/C,CAMA,MAAM,wBAAwBkN,EAAa,CACvC,GAAI,CAGA,KAAK,eAAiBA,EAGtB,IAAMC,EAAU,CAAC,EAAE,KAAK,eAAiB,KAAK,QACxBD,EAAY,WAI9B,KAAK,eAAe,WAAW,EAIvC,WAAW,IAAM,CACb,GAAI,CACA,KAAK,uBAAuB,CAChC,OAAS9kB,EAAO,CACZ,KAAK,WAAW,OAAQ,iEAAkE,CAAE,QAASA,EAAM,OAAQ,CAAC,CACxH,CACJ,EAAG,GAAI,EAGC,KAAK,oBAAsB,KAAK,YAAY,GAExC,OAAO,KAAK,mBAAmB,iBAAoB,YACnD,KAAK,mBAAmB,gBAAgB,CACpC,eAAgB,KAAK,eACrB,YAAa,KAAK,YAClB,UAAW,CAAC,CAAC,KAAK,MACtB,CAAC,CAIb,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,uCAAwC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACzH,CACJ,CAEJ,4BAA6B,CACrB,IAAM4K,EAAS,CACX,sBAAuB,CAAC,CAAC,KAAK,mBAC9B,eAAgB,CAAC,CAAC,KAAK,YACvB,iBAAkB,KAAK,aAAa,WACpC,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,MAAO,EACX,EAEA,OAAAA,EAAO,MAAQA,EAAO,uBACVA,EAAO,gBACPA,EAAO,mBAAqB,QAC5BA,EAAO,aACPA,EAAO,WACZA,CACX,CAGA,+BAAgC,CAC5B,GAAI,CAEA,OAAI,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAI9B,WAAW,IAAM,CACb,KAAK,uBAAuB,CAChC,EAAG,GAAG,EAEC,EACX,OAAS5K,EAAO,CACZ,YAAK,WAAW,QAAS,8CAA+C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACrH,EACX,CACJ,CAGA,4BAA6B,CACzB,IAAMoY,EAAc,CAChB,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,cAAe,CACX,eAAgB,CAAC,CAAC,KAAK,YACvB,iBAAkB,KAAK,aAAa,WACpC,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,YAAa,KAAK,YAClB,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,eAAgB,CAAC,CAAC,KAAK,YACvB,kBAAmB,CAAC,CAAC,KAAK,eAC1B,eAAgB,CAAC,CAAC,KAAK,WAC3B,EACA,mBAAoB,KACpB,YAAa,CACT,mBAAoB,KAAK,qBAAuB,GACpD,sBAAuB,CAAC,CAAC,KAAK,mBAC9B,uBAAwB,KAAK,mBAAqB,6BAA+B,MACjF,CACJ,EAEA,GAAI,KAAK,mBACL,GAAI,CACAA,EAAY,mBAAqB,KAAK,mBAAmB,gBAAgB,CAC7E,OAASpY,EAAO,CACZoY,EAAY,mBAAqB,CAAE,MAAOpY,EAAM,OAAQ,CAC5D,CAGJ,OAAOoY,CACX,CAEA,uBAAwB,CACpB,GAAI,CAAC,KAAK,mBACN,MAAO,CAAE,MAAO,sCAAuC,EAG3D,GAAI,CACA,OAAO,KAAK,mBAAmB,sBAAsB,CACzD,OAASpY,EAAO,CACZ,MAAO,CAAE,MAAOA,EAAM,OAAQ,CAClC,CACJ,CAEA,aAAamkB,EAAM,CACf,GAAI,CAAC,KAAK,mBACN,MAAO,CACH,QAAS,GACT,OAAQ,CAAC,sCAAsC,EAC/C,SAAU,KACV,SAAUA,GAAM,MAAQ,EACxB,cAAe,KACnB,EAGJ,GAAI,CACA,OAAO,KAAK,mBAAmB,aAAaA,CAAI,CACpD,OAASnkB,EAAO,CACZ,MAAO,CACH,QAAS,GACT,OAAQ,CAACA,EAAM,OAAO,EACtB,SAAU,KACV,SAAUmkB,GAAM,MAAQ,EACxB,cAAe,KACnB,CACJ,CACJ,CAEA,iBAAkB,CACd,GAAI,CAAC,KAAK,mBACN,MAAO,CAAE,MAAO,sCAAuC,EAG3D,GAAI,CACA,OAAO,KAAK,mBAAmB,gBAAgB,CACnD,OAASnkB,EAAO,CACZ,MAAO,CAAE,MAAOA,EAAM,OAAQ,CAClC,CACJ,CAEA,MAAM,4BAA4BokB,EAAU,CAAC,EAAG,CAC5C,IAAMY,EAAkB,IAAI,gBACtB,CAAE,OAAAC,EAASD,EAAgB,OAAQ,QAAAljB,EAAU,GAAK,EAAIsiB,EAExDa,GAAUA,IAAWD,EAAgB,QACrCC,EAAO,iBAAiB,QAAS,IAAMD,EAAgB,MAAM,CAAC,EAElE,GAAI,CACA,GAAI,CAAC,KAAK,WACN,MAAM,IAAI,MAAM,yBAAyB,EAG7C,GAAI,CAAC,KAAK,aAAe,KAAK,YAAY,aAAe,OACrD,MAAM,IAAI,MAAM,uBAAuB,EAG3C,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,OAC7B,MAAM,IAAI,MAAM,2BAA2B,EAG3C,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAG9B,KAAK,uBAAuB,EAE5B,IAAInf,EAAW,EACTC,EAAc,GACdof,EAAgB,IAChBC,EAAcrf,EAAcof,EAE5BE,EAAwB,IAAI,QAAQ,CAACrkB,EAASW,IAAW,CAC3D,IAAM2jB,EAAsB,IAAM,CAC9B,GAAIL,EAAgB,OAAO,QAAS,CAChCtjB,EAAO,IAAI,MAAM,qBAAqB,CAAC,EACvC,MACJ,CAEA,GAAI,KAAK,mBAAoB,CACzBX,EAAQ,EAAI,EACZ,MACJ,CAEA,GAAI8E,GAAYC,EAAa,CACzBpE,EAAO,IAAI,MAAM,gCAAgCyjB,CAAW,IAAI,CAAC,EACjE,MACJ,CAEAtf,IACA,WAAWwf,EAAqBH,CAAa,CACjD,EAEAG,EAAoB,CACxB,CAAC,EASD,GAPA,MAAM,QAAQ,KAAK,CACfD,EACA,IAAI,QAAQ,CAACE,EAAG5jB,IACZ,WAAW,IAAMA,EAAO,IAAI,MAAM,wBAAwBI,CAAO,IAAI,CAAC,EAAGA,CAAO,CACpF,CACJ,CAAC,EAEG,KAAK,mBACL,MAAO,GAEP,MAAM,IAAI,MAAM,8BAA8B,CAGtD,OAAS9B,EAAO,CACZ,OAAIA,EAAM,OAAS,cAAgBA,EAAM,QAAQ,SAAS,WAAW,GACjE,KAAK,WAAW,OAAQ,gDAAgD,EACjE,CAAE,UAAW,EAAK,IAG7B,KAAK,WAAW,QAAS,6CAA8C,CACnE,UAAWA,GAAO,aAAa,MAAQ,UACvC,QAASA,EAAM,QACf,QACJ,CAAC,EACM,CAAE,MAAOA,EAAM,QAAS,QAAmB,EACtD,CACJ,CAEA,kCAAmC,CAC/B,GAAI,CACA,OAAI,KAAK,oBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,KAC1B,KAAK,oBAAsB,GAC3B,KAAK,WAAW,OAAQ,wCAAwC,EACzD,IAEJ,EACX,OAASA,EAAO,CACZ,YAAK,WAAW,QAAS,iDAAkD,CACvE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,EACX,CACJ,CAEA,6BAA8B,CAC1B,GAAI,CAAC,KAAK,mBACN,MAAO,CAAE,UAAW,GAAO,OAAQ,iBAAkB,EAGzD,GAAI,CACA,IAAM4K,EAAS,KAAK,mBAAmB,gBAAgB,EACvD,MAAO,CACH,UAAW,GACX,OAAQA,EAAO,QAAU,UACzB,gBAAiBA,EAAO,iBAAmB,EAC3C,mBAAoBA,EAAO,oBAAsB,EACjD,WAAY,4BAChB,CACJ,OAAS5K,EAAO,CACZ,YAAK,WAAW,QAAS,6CAA8C,CACnE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,CAAE,UAAW,GAAO,OAAQ,QAAS,MAAOA,EAAM,OAAQ,CACrE,CACJ,CAEA,mCAAoC,CAChC,GAAI,KAAK,iBAAiB,qBAAuB,KAAK,oBAElD,GAAI,CACA,IAAMulB,EAAU,KAAK,kBAAkBhmB,EAA4B,MAAM,0BAA2B,eAAe,EAC7GimB,EAAU,KAAK,kBAAkBjmB,EAA4B,MAAM,0BAA2B,eAAe,EAGnH,OAAIgmB,EAAQ,MAAM,CAAC3J,EAAMpT,IAAUoT,IAAS4J,EAAQhd,CAAK,CAAC,GACtD,KAAK,WAAW,QAAS,6EAA6E,EAC/F,IAIG,KAAK,oBAAoB,EAC7B,SAAW,GACjB,KAAK,WAAW,QAAS,mDAAmD,EACrE,KAGX,KAAK,WAAW,OAAQ,6EAA6E,EAC9F,GACX,OAASxI,EAAO,CACZ,YAAK,WAAW,QAAS,0DAA2D,CAChF,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EACM,EACX,CAEJ,MAAO,EACX,CAcA,cAAe,CACX,MAAO,CAAE,GAAG,KAAK,SAAU,CAC/B,CAOA,qBAAqBylB,EAAU,CAC3B,OAAI,OAAOA,GAAa,WAAmB,IAAM,CAAC,GAClD,KAAK,oBAAoB,IAAIA,CAAQ,EAC9B,IAAM,KAAK,oBAAoB,OAAOA,CAAQ,EACzD,CAEA,wBAAwBA,EAAU,CAC9B,KAAK,oBAAoB,OAAOA,CAAQ,CAC5C,CAYA,oBAAoBC,EAAa,CAC7B,KAAK,kBAAqB,OAAOA,GAAgB,UAAYA,EAAeA,EAAc,KAG1F,KAAK,iBAAiB,CAAC,CAAC,EASpB,KAAK,mBAAqB,KAAK,mBAAqB,KAAK,UAAU,QAAU,YAC7E,KAAK,WAAW,EAAE,MAAO1lB,GAAU,CAC/B,KAAK,WAAW,OAAQ,0EAAiE,CACrF,UAAWA,GAAO,aAAa,IACnC,CAAC,CACL,CAAC,CAET,CAWA,uBAAuB2lB,EAAQ,CAC3B,KAAK,qBAAuBA,GAAU,IAC1C,CAGA,qBAAsB,CAClB,MAAO,CAAC,CAAC,KAAK,sBAAwB,KAAK,mBAAqB,KAAK,oBACzE,CAEA,sBAAuB,CACnB,OAAO,KAAK,iBAChB,CAEA,qBAAsB,CAClB,OAAO,KAAK,gBAChB,CAKA,sBAAuB,CACnB,IAAM3C,EAAK,KAAK,eAChB,GAAI,CAACA,GAAM,OAAOA,EAAG,cAAiB,WAAY,OAClD,IAAM4C,EAAO5C,EAAG,aAAa,EACxB,IAAIJ,GAAKA,EAAE,KAAK,EAChB,OAAOiD,GAAKA,IAAMA,EAAE,OAAS,SAAWA,EAAE,OAAS,UAAYA,EAAE,aAAe,MAAM,EACrFC,EAAO,KAAK,kBAAoB,KAAK,kBAAkB,UAAU,EAAI,CAAC,EAC1DA,EAAK,SAAWF,EAAK,QAAUE,EAAK,MAAMD,GAAKD,EAAK,SAASC,CAAC,CAAC,IAK7E,KAAK,kBAAoB,IAAI,YAAYD,CAAI,GAEjD,KAAK,iBAAiB,CAAE,eAAgBA,EAAK,KAAKC,GAAKA,EAAE,OAAS,OAAO,CAAE,CAAC,CAChF,CAKA,wBAAyB,CACrB,KAAK,qBAAqB,EAC1B,WAAW,IAAM,CAAE,GAAI,CAAE,KAAK,qBAAqB,CAAG,MAAY,CAAC,CAAE,EAAG,GAAG,EAC3E,WAAW,IAAM,CAAE,GAAI,CAAE,KAAK,qBAAqB,CAAG,MAAY,CAAC,CAAE,EAAG,IAAI,CAChF,CAEA,iBAAiBE,EAAO,CACpB,KAAK,UAAY,CAAE,GAAG,KAAK,UAAW,GAAGA,EAAO,YAAa,KAAK,iBAAkB,EACpF,IAAMC,EAAW,KAAK,aAAa,EAG/BA,EAAS,QAAU,SAAU,KAAK,iBAAiB,EAC9CA,EAAS,QAAU,QAAQ,KAAK,gBAAgB,EACzD,GAAI,CAAE,KAAK,qBAAqBA,CAAQ,CAAG,MAAY,CAAC,CAIxD,QAAWP,KAAY,KAAK,oBACxB,GAAI,CAAEA,EAASO,CAAQ,CAAG,MAAY,CAAC,CAE3C,GAAI,OAAO,SAAa,IACpB,GAAI,CACA,KAAK,oBAAoB,IAAI,YAAY,uBAAwB,CAC7D,OAAQ,CAAE,UAAW,KAAK,YAAc,KAAM,MAAOA,CAAS,CAClE,CAAC,CAAC,CACN,MAAY,CAAC,CAErB,CAEA,eAAgB,CACZ,IAAMC,EAAY,OAAO,KAAK,aAAgB,WAAa,KAAK,YAAY,EAAI,GAC1EC,EAAc,KAAK,aAAe,KAAK,YAAY,aAAe,OAMxE,MADW,CAAC,EAAED,GAAaC,GAAe,KAAK,YAAc,CAAC,KAAK,eAAe,EAEtF,CAEA,MAAM,gBAAgBlkB,EAAMC,EAAM,CAE9B,OADa,MAAM,KAAK,kBAAkB,CAAE,KAAAD,EAAM,GAAGC,CAAK,CAAC,CAE/D,CAEA,mBAAoB,CAChB,MAAO,CAAE,iBAAkB,GAAM,iBAAkB,GAAM,gBAAiB,EAAK,CACnF,CACA,mBAAoB,CAChB,MAAO,CAAE,WAAY,KAAK,gBAAiB,MAAO,CAAE,MAAO,IAAK,EAAG,OAAQ,CAAE,MAAO,GAAI,CAAE,CAC9F,CAEA,MAAM,mBAAmBkkB,EAAW,CAMhC,IAAMR,EAAS,KAAK,sBAAwB,MAAM,UAAU,aAAa,aAAa,CAClF,MAAO,KAAK,kBAAkB,EAC9B,MAAOQ,EAAY,KAAK,kBAAkB,EAAI,EAClD,CAAC,EACD,KAAK,iBAAmBR,EACxB,IAAM3C,EAAK,KAAK,eACVoD,EAAaT,EAAO,eAAe,EAAE,CAAC,GAAK,KAC3CU,EAAaV,EAAO,eAAe,EAAE,CAAC,GAAK,KACjD,OAAIS,IACI,KAAK,iBAAkB,MAAM,KAAK,iBAAiB,aAAaA,CAAU,EACzE,KAAK,iBAAmBpD,EAAG,SAASoD,EAAYT,CAAM,GAE3DU,IACI,KAAK,iBAAkB,MAAM,KAAK,iBAAiB,aAAaA,CAAU,EACzE,KAAK,iBAAmBrD,EAAG,SAASqD,EAAYV,CAAM,GAE/D,KAAK,qBAAqB,EACnBA,CACX,CAGA,4BAA6B,CACzB,GAAI,CACA,GAAI,KAAK,kBAAoB,CAAC,KAAK,oBAAoB,EACnD,QAAWE,KAAK,KAAK,iBAAiB,UAAU,EAAK,GAAI,CAAEA,EAAE,KAAK,CAAG,MAAY,CAAC,CAE1F,MAAY,CAAC,CACb,KAAK,iBAAmB,IAC5B,CAIA,sBAAuB,CACnB,GAAI,CACA,IAAMS,EAAM,KAAK,gBAAgB,kBAAkB,GAAK,CAAC,EACnDC,EAAUD,EAAI,KAAKT,GAAKA,EAAE,QAAUA,EAAE,SAAW,KAAK,gBAAgB,EACxEU,GAASC,GAA2BD,CAAO,EAC/C,IAAME,EAAUH,EAAI,KAAKT,GAAKA,EAAE,QAAUA,EAAE,SAAW,KAAK,gBAAgB,EACxEY,GAASC,GAA2BD,CAAO,CACnD,MAAY,CAAC,CACjB,CAKA,cAAc3jB,EAAK,CACf,GAAI,CACA,IAAIsT,EAAMuQ,GAAkB7jB,EAAK8jB,GAAa,QAAQ,EACtD,OAAAxQ,EAAMyQ,GAAezQ,EAAK0Q,EAAgB,EACnC1Q,CACX,MAAY,CAAE,OAAOtT,CAAK,CAC9B,CAKA,MAAM,gBAAgBiL,EAAM,CACxB,IAAMiV,EAAK,KAAK,eAChB,GAAI,CACA,MAAMA,EAAG,oBAAoB,CAAE,KAAMjV,EAAK,KAAM,IAAK,KAAK,cAAcA,EAAK,GAAG,CAAE,CAAC,EACnF,MACJ,MAAY,CACR,GAAI,CACA,MAAMiV,EAAG,oBAAoB,CAAE,KAAMjV,EAAK,KAAM,IAAK4Y,GAAkB5Y,EAAK,IAAK6Y,GAAa,QAAQ,CAAE,CAAC,EACzG,MACJ,MAAa,CACT,MAAM5D,EAAG,oBAAoBjV,CAAI,CACrC,CACJ,CACJ,CAIA,MAAM,wBAAyB,CAC3B,GAAI,CACI,KAAK,kBAAkB,MAAMgZ,GAAqB,KAAK,iBAAkB,CAAC,CAAC,EAC3E,KAAK,kBAAkB,MAAMC,GAAqB,KAAK,iBAAkB,CAAC,CAAC,CACnF,MAAY,CAAC,CACjB,CAIA,kBAAmB,CACf,GAAI,OAAK,uBAAyB,CAAC,KAAK,gBACxC,GAAI,CACA,KAAK,sBAAwB,IAAIC,GAA4B,KAAK,eAAgB,CAC9E,eAAgB,IAAM,KAAK,iBAC3B,eAAgB,KAChB,UAAYC,GAAM,CACVA,IAAM,KAAK,UAAU,SAAS,KAAK,iBAAiB,CAAE,QAASA,CAAE,CAAC,CAC1E,CACJ,CAAC,EACD,KAAK,sBAAsB,MAAM,CACrC,MAAY,CAAC,CACjB,CAEA,iBAAkB,CACd,GAAI,KAAK,sBAAuB,CAC5B,GAAI,CAAE,KAAK,sBAAsB,KAAK,CAAG,MAAY,CAAC,CACtD,KAAK,sBAAwB,IACjC,CACJ,CAMA,sBAAsBlnB,EAAOmnB,EAAW,CACpC,IAAMC,EAAOpnB,GAAO,MAAQ,GACtBqnB,EAAMF,EAAY,oBAAsB,aAC1CG,EAAKva,EACLqa,IAAS,mBACTra,EAAO,oBACPua,EAAM,wCAAyBD,CAAG,6IAAmIF,EAAY,oBAAsB,YAAY,qBAC5MC,IAAS,iBAAmBA,IAAS,wBAC5Cra,EAAO,mBACPua,EAAM,2CAA4BD,CAAG,0BAC9BD,IAAS,oBAAsBA,IAAS,cAC/Cra,EAAO,cACPua,EAAM,6CAA8BD,CAAG,uDAEvCta,EAAO,eACPua,EAAM,yDAA0CD,CAAG,GAAGD,EAAO,KAAOA,EAAO,IAAM,EAAE,KAEvF,GAAI,CAAE,KAAK,mBAAmBE,EAAK,QAAQ,CAAG,MAAY,CAAC,CAC3D,OAAOva,CACX,CAGA,MAAM,UAAUoZ,EAAY,GAAO,CAC/B,GAAI,CAAC,KAAK,cAAc,EACpB,WAAK,iBAAiB,CAAE,MAAO,cAAe,CAAC,EACzC,IAAI,MAAM,kDAAkD,EAEtE,GAAI,KAAK,UAAU,OAAQ,CACvB,KAAK,WAAW,OAAQ,gEAAiD,EACzE,MACJ,CACA,IAAMoB,EAAU,QAAQ,aAAa,GAAK,OAAO,KAAK,IAAI,CAAC,EAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,EACjG,KAAK,iBAAiB,CAClB,OAAQ,GAAM,MAAO,WAAY,UAAApB,EAAW,OAAAoB,EAC5C,WAAY,GAAM,cAAepB,EAAW,eAAgB,GAAO,MAAO,IAC9E,CAAC,EACD,GAAI,CACA,MAAM,KAAK,mBAAmBA,CAAS,EACvC,KAAK,iBAAmB,GACxB,IAAMnI,EAAQ,MAAM,KAAK,eAAe,YAAY,EACpD,MAAM,KAAK,gBAAgBA,CAAK,EAChC,KAAK,iBAAmB,GACxB,MAAM,KAAK,uBAAuB,EAClC,MAAM,KAAK,gBAAgBze,EAA4B,cAAc,WAAY,CAC7E,OAAAgoB,EAAQ,UAAApB,EAAW,IAAK,KAAK,eAAe,iBAAiB,GACjE,CAAC,CACL,OAASnmB,EAAO,CACZ,KAAK,iBAAmB,GACxB,KAAK,WAAW,QAAS,0BAAsB,CAAE,UAAWA,GAAO,aAAa,IAAK,CAAC,EACtF,IAAM+M,EAAO,KAAK,sBAAsB/M,EAAOmmB,CAAS,EACxD,YAAM,KAAK,mBAAmB,EAC9B,KAAK,iBAAiB,CAAE,OAAQ,GAAO,MAAO,OAAQ,MAAOpZ,CAAK,CAAC,EAC7D/M,CACV,CACJ,CAGA,MAAM,qBAAqBiC,EAAM,CAG7B,GAAI,KAAK,UAAU,SAAW,KAAK,UAAU,QAAU,UAAY,KAAK,UAAU,QAAU,cAAe,CACvG,MAAM,KAAK,iBAAiBA,EAA0B,EAAI,EACtDA,EAAK,WAAW,KAAK,iBAAiB,CAAE,UAAW,EAAK,CAAC,EAC7D,MACJ,CACA,KAAK,kBAAoBA,EACzB,KAAK,iBAAiB,CAClB,OAAQ,GAAM,MAAO,WAAY,UAAW,CAAC,CAACA,EAAK,UACnD,OAAQA,EAAK,OAAQ,eAAgB,CAAC,CAACA,EAAK,UAAW,MAAO,IAClE,CAAC,EAIG,KAAK,mBACL,MAAM,KAAK,WAAW,CAE9B,CAEA,MAAM,iBAAiBA,EAAMulB,EAAgB,GAAO,CAChD,MAAM,KAAK,eAAe,qBAAqB,CAAE,KAAM,QAAS,IAAKvlB,EAAK,GAAI,CAAC,EAQ1EulB,GACD,MAAM,KAAK,mBAAmB,CAAC,CAACvlB,EAAK,SAAS,EAElD,IAAM8d,EAAS,MAAM,KAAK,eAAe,aAAa,EACtD,MAAM,KAAK,gBAAgBA,CAAM,EACjC,MAAM,KAAK,uBAAuB,EAClC,MAAM,KAAK,gBAAgBxgB,EAA4B,cAAc,YAAa,CAC9E,OAAQ0C,EAAK,OAAQ,IAAK,KAAK,eAAe,iBAAiB,GACnE,CAAC,CACL,CAGA,MAAM,YAAa,CACf,IAAMA,EAAO,KAAK,kBAClB,GAAKA,EACL,MAAK,kBAAoB,KACzB,KAAK,iBAAiB,CAAE,MAAO,aAAc,cAAe,CAAC,CAACA,EAAK,SAAU,CAAC,EAC9E,GAAI,CACA,MAAM,KAAK,iBAAiBA,EAAM,EAAK,EACvC,KAAK,iBAAiB,CAAE,MAAO,QAAS,CAAC,EACzC,KAAK,uBAAuB,CAChC,OAASjC,EAAO,CACZ,KAAK,WAAW,QAAS,2BAAuB,CAAE,UAAWA,GAAO,aAAa,IAAK,CAAC,EACvF,IAAM+M,EAAO,KAAK,sBAAsB/M,EAAO,CAAC,CAACiC,EAAK,SAAS,EAE/D,GAAI,CAAE,MAAM,KAAK,gBAAgB1C,EAA4B,cAAc,SAAU,CAAE,OAAQ0C,EAAK,MAAO,CAAC,CAAG,MAAY,CAAC,CAC5H,MAAM,KAAK,mBAAmB,EAC9B,KAAK,iBAAiB,CAAE,OAAQ,GAAO,MAAO,OAAQ,MAAO8K,CAAK,CAAC,CACvE,EACJ,CAGA,MAAM,aAAc,CAChB,IAAMwa,EAAS,KAAK,UAAU,OAC9B,KAAK,kBAAoB,KACzB,MAAM,KAAK,gBAAgBhoB,EAA4B,cAAc,aAAc,CAAE,OAAAgoB,CAAO,CAAC,EAC7F,KAAK,iBAAiB,CAAE,OAAQ,GAAO,MAAO,OAAQ,UAAW,GAAO,eAAgB,EAAM,CAAC,CACnG,CAGA,MAAM,QAAQE,EAAa,GAAM,CAC7B,IAAMF,EAAS,KAAK,UAAU,OAC9B,GAAIE,GAAcF,EACd,GAAI,CAAE,MAAM,KAAK,gBAAgBhoB,EAA4B,cAAc,SAAU,CAAE,OAAAgoB,CAAO,CAAC,CAAG,MAAY,CAAC,CAEnH,MAAM,KAAK,mBAAmB,EAC9B,KAAK,iBAAiB,CAClB,OAAQ,GAAO,MAAO,OAAQ,UAAW,GAAO,WAAY,GAC5D,cAAe,GAAO,eAAgB,GAAO,OAAQ,KAAM,QAAS,IACxE,CAAC,CACL,CAEA,MAAM,oBAAqB,CACvB,KAAK,gBAAgB,EACrB,IAAMvE,EAAK,KAAK,eAChB,GAAI,CAKA,GAAI,KAAK,kBAAoB,CAAC,KAAK,oBAAoB,EACnD,QAAW0E,KAAS,KAAK,iBAAiB,UAAU,EAAK,GAAI,CAAEA,EAAM,KAAK,CAAG,MAAY,CAAC,CAO9F,GAAI1E,EACA,QAAW2E,IAAU,CAAC,KAAK,iBAAkB,KAAK,gBAAgB,EAAE,OAAO,OAAO,EAC9E,GAAI,CAAE,MAAMA,EAAO,aAAa,IAAI,CAAG,MAAY,CAAC,CAGhE,MAAY,CAAC,CACb,KAAK,iBAAmB,KACxB,KAAK,kBAAoB,KAGzB,KAAK,iBAAmB,GAIxB,GAAI,CACI,KAAK,iBACJ,KAAK,eAAe,iBAAmB,oBACvC,KAAK,eAAe,iBAAmB,wBACxC,MAAM,KAAK,eAAe,oBAAoB,CAAE,KAAM,UAAW,CAAC,CAE1E,MAAY,CAAC,CAKjB,CAGA,cAAc1P,EAAS,CACf,KAAK,kBACL,KAAK,iBAAiB,eAAe,EAAE,QAAQ,GAAK,CAAE,EAAE,QAAUA,CAAS,CAAC,EAEhF,KAAK,iBAAiB,CAAE,WAAYA,CAAQ,CAAC,CACjD,CAEA,WAAY,CAAE,KAAK,cAAc,CAAC,KAAK,UAAU,UAAU,CAAG,CAI9D,MAAM,iBAAiBA,EAAS,CAC5B,GAAI,CAACA,EAAS,CACN,KAAK,kBACL,KAAK,iBAAiB,eAAe,EAAE,QAAQ4N,GAAK,CAAEA,EAAE,QAAU,EAAO,CAAC,EAE9E,KAAK,iBAAiB,CAAE,cAAe,EAAM,CAAC,EAC9C,MACJ,CAEA,IAAM+B,EAAW,KAAK,kBAAkB,iBAAiB,GAAK,CAAC,EAC/D,GAAIA,EAAS,OAAQ,CACjBA,EAAS,QAAQ/B,GAAK,CAAEA,EAAE,QAAU,EAAM,CAAC,EAC3C,KAAK,iBAAiB,CAAE,cAAe,GAAM,UAAW,EAAK,CAAC,EAC9D,MACJ,CACA,MAAM,KAAK,eAAe,CAC9B,CAEA,MAAM,cAAe,CAAE,MAAM,KAAK,iBAAiB,CAAC,KAAK,UAAU,aAAa,CAAG,CAGnF,MAAM,gBAAiB,CACnB,GAAK,KAAK,iBACV,GAAI,CAGA,IAAMQ,GADY,MAAM,UAAU,aAAa,aAAa,CAAE,MAAO,KAAK,kBAAkB,CAAE,CAAC,GAClE,eAAe,EAAE,CAAC,EAC/C,GAAI,CAACA,EAAY,OACjB,MAAM,KAAK,cAAcA,CAAU,CACvC,OAASrmB,EAAO,CACZ,KAAK,WAAW,QAAS,+BAA2B,CAAE,UAAWA,GAAO,aAAa,IAAK,CAAC,EAC3F,KAAK,iBAAiB,CAAE,cAAe,GAAO,MAAO,eAAgB,CAAC,CAC1E,CACJ,CAWA,MAAM,cAAcqmB,EAAY,CACxB,CAACA,GAAc,CAAC,KAAK,kBAAoB,CAAC,KAAK,iBAC9C,KAAK,iBAAiB,eAAe,EAAE,SAASA,CAAU,GAC3D,KAAK,iBAAiB,SAASA,CAAU,EAEzC,KAAK,iBAAkB,MAAM,KAAK,iBAAiB,aAAaA,CAAU,EACzE,KAAK,iBAAmB,KAAK,eAAe,SAASA,EAAY,KAAK,gBAAgB,EAC3F,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,CAAE,cAAe,GAAM,UAAW,EAAK,CAAC,EAC9D,MAAM,KAAK,iBAAiB,EAChC,CAUA,MAAM,kBAAkBA,EAAY,CAC5B,CAACA,GAAc,CAAC,KAAK,kBACzB,MAAM,KAAK,iBAAiB,aAAaA,CAAU,CACvD,CAGA,MAAM,cAAe,CACjB,GAAI,GAAC,KAAK,kBAAoB,CAAC,KAAK,kBACpC,MAAK,gBAAkB,KAAK,kBAAoB,OAAS,cAAgB,OACzE,GAAI,CAIA,IAAMwB,GAHY,MAAM,UAAU,aAAa,aAAa,CACxD,MAAO,CAAE,WAAY,KAAK,eAAgB,CAC9C,CAAC,GAC0B,eAAe,EAAE,CAAC,EACvCC,EAAM,KAAK,iBAAiB,eAAe,EAAE,CAAC,EACpD,GAAIA,EAAK,CAAE,KAAK,iBAAiB,YAAYA,CAAG,EAAG,GAAI,CAAEA,EAAI,KAAK,CAAG,MAAY,CAAC,CAAE,CACpF,KAAK,iBAAiB,SAASD,CAAQ,EACvC,MAAM,KAAK,iBAAiB,aAAaA,CAAQ,CACrD,OAAS7nB,EAAO,CACZ,KAAK,WAAW,OAAQ,mCAA0B,CAAE,UAAWA,GAAO,aAAa,IAAK,CAAC,CAC7F,EACJ,CAEA,MAAM,kBAAmB,CACrB,GAAI,MAAK,iBACT,GAAI,CACA,KAAK,iBAAmB,GACxB,IAAMge,EAAQ,MAAM,KAAK,eAAe,YAAY,EACpD,MAAM,KAAK,gBAAgBA,CAAK,EAChC,MAAM,KAAK,uBAAuB,EAClC,MAAM,KAAK,gBAAgBze,EAA4B,cAAc,WAAY,CAC7E,OAAQ,KAAK,UAAU,OAAQ,UAAW,KAAK,UAAU,UACzD,IAAK,KAAK,eAAe,iBAAiB,GAC9C,CAAC,CACL,QAAE,CACE,KAAK,iBAAmB,EAC5B,CACJ,CAGA,MAAM,kBAAkByC,EAAMC,EAAM,CAChC,IAAMiM,EAAI3O,EAA4B,cACtC,OAAQyC,EAAM,CACV,KAAKkM,EAAE,WAAY,CACf,MAAM,KAAK,qBAAqBjM,CAAI,EACpC,MACJ,CACA,KAAKiM,EAAE,YAAa,CAChB,GAAI,CACI,KAAK,eAAe,iBAAmB,oBACvC,MAAM,KAAK,eAAe,qBAAqB,CAAE,KAAM,SAAU,IAAKjM,EAAK,GAAI,CAAC,EAEhF,KAAK,UAAU,QAAU,YAAY,KAAK,iBAAiB,CAAE,MAAO,QAAS,CAAC,EAClF,KAAK,uBAAuB,CAChC,OAASF,EAAG,CACR,KAAK,WAAW,OAAQ,2CAAkC,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CACjG,CACA,MACJ,CACA,KAAKmM,EAAE,SAAU,CACb,GAAI,CAAMjM,EAAK,WAAW,MAAM,KAAK,eAAe,gBAAgBA,EAAK,SAAS,CAAG,MAAY,CAAC,CAClG,MACJ,CACA,KAAKiM,EAAE,aAAc,CACjB,MAAM,KAAK,mBAAmB,EAC9B,KAAK,iBAAiB,CAAE,OAAQ,GAAO,MAAO,OAAQ,UAAW,GAAO,eAAgB,GAAO,MAAO,UAAW,CAAC,EAClH,MACJ,CACA,KAAKA,EAAE,SAAU,CACb,MAAM,KAAK,QAAyB,EAAK,EACzC,MACJ,CACA,QAAS,MACb,CACJ,CACJ,EAEMvI,GAAN,KAAuB,CACnB,YAAYoiB,EAAmB,KAAM,CAEjC,KAAK,UAAY,IAAI,QACrB,KAAK,aAAe,IAAI,IACxB,KAAK,eAAiB,IAAI,IAG1B,KAAK,kBAAoBA,GAAoB,IAAIriB,GAGjD,KAAK,mBAAqB,IAAIsiB,GAA2B,KAAK,iBAAiB,EAG/E,KAAK,yBAAyB,EAE9B,WAAW,IAAM,CACR,KAAK,yBAAyB,GAC/B,KAAK,WAAW,QAAS,8CAA8C,CAE/E,EAAG,GAAG,CAEV,CASA,WAAWhhB,EAAOhD,EAASxD,EAAU,CAAC,EAAG,CACrC,GAAI,CACA,IAAMynB,EAAU,OAAO,OAAW,KAAe,OAAO,2BAA2B,WAAc,KACjG,GAAIA,GAAU,OAAOA,EAAO,KAAQ,WAAY,CAC5CA,EAAO,IAAIjhB,EAAO,gBAAgBhD,CAAO,GAAIxD,CAAO,EACpD,MACJ,CACJ,MAAY,CAAgC,CAExCwG,IAAU,QAAS,QAAQ,MAAM,gBAAgBhD,CAAO,EAAE,EACrDgD,IAAU,QAAQ,QAAQ,KAAK,gBAAgBhD,CAAO,EAAE,CACrE,CAKA,0BAA2B,CAQvB,KAAK,kBAAkB,4BAA4B,CAACkkB,EAAStiB,IAAa,CACtE,KAAK,WAAW,QAAS,gEAAiE,CACtF,QAAS,CAAC,CAACsiB,CACf,CAAC,EACDtiB,EAAS,IAAI,CACjB,CAAC,EAED,KAAK,kBAAkB,0BAA2BkE,GAAW,CACzD,QAAQ,KAAK,+BAA+BA,CAAM,EAAE,CAExD,CAAC,EAED,KAAK,kBAAkB,oBAAoB,IAAM,CAC7C,QAAQ,IAAI,kCAAkC,CAClD,CAAC,CACL,CAKA,oBAAoBlE,EAAU,CAC1B,KAAK,kBAAkB,4BAA4BA,CAAQ,CAC/D,CAKA,0BAA0BA,EAAU,CAChC,KAAK,kBAAkB,0BAA0BA,CAAQ,CAC7D,CAKA,MAAM,0BAA2B,CACxB,KAAK,kBAAkB,WAAW,GACnC,MAAM,KAAK,kBAAkB,OAAO,CAE5C,CAEA,MAAM,SAASG,EAAOoiB,EAAWlL,EAAW,CAAC,EAAG,CAC5C,GAAI,EAAEkL,aAAqB,WACvB,MAAM,IAAI,MAAM,sCAAsC,EAG1D,GAAI,CAEA,OAAKA,EAAU,aAcf,MAAM,KAAK,mBAAmB,oBAAoBpiB,EAAOoiB,EAAWlL,CAAQ,EAG5E,KAAK,eAAe,IAAIlX,EAAOoiB,CAAS,EACxC,KAAK,aAAa,IAAIpiB,EAAO,CACzB,GAAGkX,EACH,QAAS,KAAK,IAAI,EAClB,aAAc,KAAK,IAAI,EACvB,YAAa,GACb,WAAY,GACZ,UAAW,EACf,CAAC,EAEM,KA1BH,KAAK,eAAe,IAAIlX,EAAOoiB,CAAS,EACxC,KAAK,aAAa,IAAIpiB,EAAO,CACzB,GAAGkX,EACH,QAAS,KAAK,IAAI,EAClB,aAAc,KAAK,IAAI,EACvB,YAAa,GACb,WAAY,GACZ,UAAW,EACf,CAAC,EACM,GAmBf,OAASjd,EAAO,CACZ,YAAK,WAAW,QAAS,+BAAgC,CACrD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,EACX,CACJ,CAEA,MAAM,YAAY+F,EAAO,CACrB,GAAI,CAEA,GAAI,KAAK,eAAe,IAAIA,CAAK,EAAG,CAChC,IAAMkX,EAAW,KAAK,aAAa,IAAIlX,CAAK,EAC5C,OAAIkX,IACAA,EAAS,aAAe,KAAK,IAAI,GAE9B,KAAK,eAAe,IAAIlX,CAAK,CACxC,CAGA,IAAMqiB,EAAc,MAAM,KAAK,mBAAmB,YAAYriB,CAAK,EACnE,GAAIqiB,EAAa,CAEb,KAAK,eAAe,IAAIriB,EAAOqiB,CAAW,EAG1C,IAAMC,EAAmB,KAAK,aAAa,IAAItiB,CAAK,EACpD,YAAK,aAAa,IAAIA,EAAO,CACzB,GAAGsiB,EACH,aAAc,KAAK,IAAI,EACvB,uBAAwB,EAC5B,CAAC,EAEMD,CACX,CAEA,OAAO,IAEX,OAASpoB,EAAO,CACZ,YAAK,WAAW,QAAS,yBAA0B,CAC/C,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,IACX,CACJ,CAEA,MAAM,gBAAgBuP,EAAS,CAC3B,IAAM+Y,EAAgB,OAAO/Y,GAAY,SACnC,KAAK,UAAUA,CAAO,EACtBA,EAGAtN,EADU,IAAI,YAAY,EACX,OAAOqmB,CAAa,EAEzC,MAAM,KAAK,yBAAyB,EACpC,GAAM,CAAE,cAAArW,EAAe,GAAAD,CAAG,EAAI,MAAM,KAAK,kBAAkB,aAAa/P,CAAI,EAEtE8N,EAAS,IAAI,WAAWiC,EAAG,OAASC,EAAc,UAAU,EAClE,OAAAlC,EAAO,IAAIiC,EAAI,CAAC,EAChBjC,EAAO,IAAIkC,EAAeD,EAAG,MAAM,EAC5BjC,CACX,CAEA,MAAM,gBAAgBkC,EAAe,CACjC,IAAMD,EAAKC,EAAc,MAAM,EAAG,EAAE,EAC9BhQ,EAAOgQ,EAAc,MAAM,EAAE,EAEnC,MAAM,KAAK,yBAAyB,EACpC,IAAM4E,EAAgB,MAAM,KAAK,kBAAkB,aAAa5U,EAAM+P,CAAE,EAGlE3M,EADU,IAAI,YAAY,EACL,OAAOwR,CAAa,EAE/C,GAAI,CACA,OAAO,KAAK,MAAMxR,CAAU,CAChC,MAAQ,CACJ,OAAOwR,CACX,CACJ,CAEA,MAAM,WAAW9Q,EAAO,CACpB,IAAMoiB,EAAY,KAAK,eAAe,IAAIpiB,CAAK,EAE3CoiB,IAEA,KAAK,UAAU,OAAOA,CAAS,EAE/B,KAAK,eAAe,OAAOpiB,CAAK,EAEhC,KAAK,aAAa,OAAOA,CAAK,GAIlC,MAAM,KAAK,uBAAuB,CACtC,CAEA,MAAM,eAAgB,CAElB,GAAI,CACA,MAAM,KAAK,mBAAmB,SAAS,CAC3C,OAAS/F,EAAO,CACZ,KAAK,WAAW,QAAS,qCAAsC,CAC3D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAGA,KAAK,eAAe,MAAM,EAC1B,KAAK,aAAa,MAAM,EAGxB,KAAK,UAAY,IAAI,QAGrB,MAAM,KAAK,uBAAuB,CACtC,CAGA,0BAA2B,CACvB,IAAMwE,EAAa,CAAC,EAEpB,OAAW,CAACuB,EAAOkX,CAAQ,IAAK,KAAK,aAAa,QAAQ,EAElDA,EAAS,cAAgB,IAAQA,EAAS,YAAc,IACxDzY,EAAW,KAAK,CACZ,MAAAuB,EACA,KAAM,gCACN,SAAAkX,CACJ,CAAC,EAIDA,EAAS,cAAgB,IAASA,EAAS,YAAc,IACzDzY,EAAW,KAAK,CACZ,MAAAuB,EACA,KAAM,gCACN,SAAAkX,CACJ,CAAC,EAIT,OAAIzY,EAAW,OAAS,GACpB,KAAK,WAAW,QAAS,wCAAyC,CAC9D,eAAgBA,EAAW,MAC/B,CAAC,EACM,IAGJ,EACX,CAEA,MAAM,iBAAkB,CACpB,IAAM+jB,EAAkB,MAAM,KAAK,mBAAmB,gBAAgB,EAEtE,MAAO,CACH,UAAW,KAAK,eAAe,KAC/B,WAAY,KAAK,eAAe,KAChC,eAAgBA,EAAgB,eAChC,SAAU,MAAM,KAAK,KAAK,aAAa,QAAQ,CAAC,EAAE,IAAI,CAAC,CAACC,EAAIlX,CAAI,KAAO,CACnE,GAAAkX,EACA,QAASlX,EAAK,QACd,aAAcA,EAAK,aACnB,IAAK,KAAK,IAAI,EAAIA,EAAK,QACvB,WAAYA,EAAK,YAAc,EACnC,EAAE,EACF,WAAYiX,CAChB,CACJ,CAKA,MAAM,aAAc,CAChB,GAAI,CACA,IAAME,EAAa,MAAM,KAAK,KAAK,aAAa,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC1iB,EAAOkX,CAAQ,KAAO,CACnF,MAAAlX,EACA,GAAGkX,EACH,SAAU,QACd,EAAE,EAGIyL,GADiB,MAAM,KAAK,mBAAmB,eAAe,GACrB,IAAIvjB,IAAQ,CACvD,GAAGA,EACH,SAAU,YACd,EAAE,EAEF,MAAO,CACH,WAAAsjB,EACA,eAAgBC,EAChB,WAAYD,EAAW,OAASC,EAAwB,MAC5D,CAEJ,OAAS1oB,EAAO,CACZ,YAAK,WAAW,QAAS,sBAAuB,CAC5C,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,CACH,WAAY,CAAC,EACb,eAAgB,CAAC,EACjB,WAAY,EACZ,MAAOA,EAAM,OACjB,CACJ,CACJ,CAKA,MAAM,UAAU+F,EAAO,CACnB,GAAI,CAEA,YAAK,eAAe,OAAOA,CAAK,EAChC,KAAK,aAAa,OAAOA,CAAK,EAG9B,MAAM,KAAK,mBAAmB,UAAUA,CAAK,EAEtC,EAEX,OAAS/F,EAAO,CACZ,YAAK,WAAW,QAAS,uBAAwB,CAC7C,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,EACX,CACJ,CAEJ,EAMM2oB,GAAN,KAA6B,CACzB,YAAYC,EAAS,mBAAoBvZ,EAAU,EAAG,CAClD,KAAK,OAASuZ,EACd,KAAK,QAAUvZ,EACf,KAAK,GAAK,KAGV,KAAK,WAAa,iBAClB,KAAK,eAAiB,eACtB,KAAK,WAAa,aACtB,CAKA,MAAM,YAAa,CACf,OAAO,IAAI,QAAQ,CAACtO,EAASW,IAAW,CACpC,IAAMmnB,EAAU,UAAU,KAAK,KAAK,OAAQ,KAAK,OAAO,EAExDA,EAAQ,QAAU,IAAM,CACpBnnB,EAAO,IAAI,MAAM,6BAA6BmnB,EAAQ,KAAK,EAAE,CAAC,CAClE,EAEAA,EAAQ,UAAY,IAAM,CACtB,KAAK,GAAKA,EAAQ,OAClB9nB,EAAQ,CACZ,EAEA8nB,EAAQ,gBAAmBhc,GAAU,CACjC,IAAMic,EAAKjc,EAAM,OAAO,OAGxB,GAAI,CAACic,EAAG,iBAAiB,SAAS,KAAK,UAAU,EAAG,CAChD,IAAMC,EAAYD,EAAG,kBAAkB,KAAK,WAAY,CAAE,QAAS,OAAQ,CAAC,EAC5EC,EAAU,YAAY,YAAa,YAAa,CAAE,OAAQ,EAAM,CAAC,EACjEA,EAAU,YAAY,YAAa,YAAa,CAAE,OAAQ,EAAM,CAAC,CACrE,CAGA,GAAI,CAACD,EAAG,iBAAiB,SAAS,KAAK,cAAc,EAAG,CACpD,IAAME,EAAgBF,EAAG,kBAAkB,KAAK,eAAgB,CAAE,QAAS,OAAQ,CAAC,EACpFE,EAAc,YAAY,UAAW,UAAW,CAAE,OAAQ,EAAM,CAAC,EACjEA,EAAc,YAAY,eAAgB,eAAgB,CAAE,OAAQ,EAAM,CAAC,CAC/E,CAGKF,EAAG,iBAAiB,SAAS,KAAK,UAAU,GAC7CA,EAAG,kBAAkB,KAAK,WAAY,CAAE,QAAS,IAAK,CAAC,CAE/D,CACJ,CAAC,CACL,CAKA,MAAM,kBAAkB/iB,EAAOkM,EAAeD,EAAIiX,EAAWC,EAAQlnB,EAAMib,EAAW,CAAC,EAAG,CACtF,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAG9C,IAAMkM,EAAc,KAAK,GAAG,YAAY,CAAC,KAAK,WAAY,KAAK,cAAc,EAAG,WAAW,EAErFC,EAAY,CACd,MAAOrjB,EACP,cAAe,MAAM,KAAK,IAAI,WAAWkM,CAAa,CAAC,EACvD,GAAI,MAAM,KAAK,IAAI,WAAWD,CAAE,CAAC,EACjC,UAAWiX,EACX,OAAQC,EACR,KAAMlnB,CACV,EAEMqnB,EAAiB,CAAE,MAAAtjB,EAAO,GAAGkX,CAAS,EAE5C,OAAO,IAAI,QAAQ,CAAClc,EAASW,IAAW,CACpC,IAAM4nB,EAAcH,EAAY,YAAY,KAAK,UAAU,EAAE,IAAIC,CAAS,EACpEG,EAAkBJ,EAAY,YAAY,KAAK,cAAc,EAAE,IAAIE,CAAc,EAEvFF,EAAY,WAAa,IAAMpoB,EAAQ,EACvCooB,EAAY,QAAU,IAAMznB,EAAO,IAAI,MAAM,wBAAwBynB,EAAY,KAAK,EAAE,CAAC,CAC7F,CAAC,CACL,CAKA,MAAM,gBAAgBpjB,EAAO,CACzB,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMyjB,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,UAAU,EAAG,UAAU,EAC3C,YAAY,KAAK,UAAU,EAErD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAIzjB,CAAK,EAE/B8iB,EAAQ,UAAY,IAAM,CACtB,IAAM9Y,EAAS8Y,EAAQ,OACnB9Y,IAEAA,EAAO,cAAgB,IAAI,WAAWA,EAAO,aAAa,EAC1DA,EAAO,GAAK,IAAI,WAAWA,EAAO,EAAE,GAExChP,EAAQgP,CAAM,CAClB,EAEA8Y,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,2BAA2BmnB,EAAQ,KAAK,EAAE,CAAC,CACxF,CAAC,CACL,CAKA,MAAM,kBAAkB9iB,EAAO8Y,EAAS,CACpC,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAM2K,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,cAAc,EAAG,WAAW,EAChD,YAAY,KAAK,cAAc,EAEzD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAM+nB,EAAaD,EAAM,IAAIzjB,CAAK,EAElC0jB,EAAW,UAAY,IAAM,CACzB,IAAMxM,EAAWwM,EAAW,OAC5B,GAAIxM,EAAU,CACV,OAAO,OAAOA,EAAU4B,CAAO,EAC/B,IAAM6K,EAAaF,EAAM,IAAIvM,CAAQ,EAErCyM,EAAW,UAAY,IAAM3oB,EAAQ,EACrC2oB,EAAW,QAAU,IAAMhoB,EAAO,IAAI,MAAM,8BAA8BgoB,EAAW,KAAK,EAAE,CAAC,CACjG,MACIhoB,EAAO,IAAI,MAAM,2BAA2BqE,CAAK,EAAE,CAAC,CAE5D,EAEA0jB,EAAW,QAAU,IAAM/nB,EAAO,IAAI,MAAM,2BAA2B+nB,EAAW,KAAK,EAAE,CAAC,CAC9F,CAAC,CACL,CAEA,MAAM,qBAAqB1jB,EAAO,CAC9B,GAAI,CAAC,KAAK,GAAI,MAAM,IAAI,MAAM,0BAA0B,EAExD,IAAMyjB,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,cAAc,EAAG,UAAU,EAC/C,YAAY,KAAK,cAAc,EACzD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAIzjB,CAAK,EAC/B8iB,EAAQ,UAAY,IAAM9nB,EAAQ8nB,EAAQ,QAAU,IAAI,EACxDA,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,2BAA2BmnB,EAAQ,KAAK,EAAE,CAAC,CACxF,CAAC,CACL,CAEA,MAAM,qBAAqBc,EAAQ,CAC/B,GAAI,CAAC,KAAK,GAAI,MAAM,IAAI,MAAM,0BAA0B,EAExD,IAAMH,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,cAAc,EAAG,WAAW,EAChD,YAAY,KAAK,cAAc,EACzD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAIG,CAAM,EAChCd,EAAQ,UAAY,IAAM9nB,EAAQ,EAClC8nB,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,6BAA6BmnB,EAAQ,KAAK,EAAE,CAAC,CAC1F,CAAC,CACL,CAKA,MAAM,UAAU9iB,EAAO,CACnB,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAG9C,IAAMojB,EAAc,KAAK,GAAG,YAAY,CAAC,KAAK,WAAY,KAAK,cAAc,EAAG,WAAW,EAE3F,OAAO,IAAI,QAAQ,CAACpoB,EAASW,IAAW,CACpC,IAAM4nB,EAAcH,EAAY,YAAY,KAAK,UAAU,EAAE,OAAOpjB,CAAK,EACnEwjB,EAAkBJ,EAAY,YAAY,KAAK,cAAc,EAAE,OAAOpjB,CAAK,EAEjFojB,EAAY,WAAa,IAAMpoB,EAAQ,EACvCooB,EAAY,QAAU,IAAMznB,EAAO,IAAI,MAAM,yBAAyBynB,EAAY,KAAK,EAAE,CAAC,CAC9F,CAAC,CACL,CAKA,MAAM,UAAW,CACb,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMK,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,cAAc,EAAG,UAAU,EAC/C,YAAY,KAAK,cAAc,EAEzD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,OAAO,EAE7BX,EAAQ,UAAY,IAAM9nB,EAAQ8nB,EAAQ,MAAM,EAChDA,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,wBAAwBmnB,EAAQ,KAAK,EAAE,CAAC,CACrF,CAAC,CACL,CAKA,MAAM,gBAAgBzc,EAAM,CACxB,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMod,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,UAAU,EAAG,WAAW,EAC5C,YAAY,KAAK,UAAU,EAE/CI,EAAa,CACf,GAAI,cACJ,KAAM,MAAM,KAAK,IAAI,WAAWxd,CAAI,CAAC,CACzC,EAEA,OAAO,IAAI,QAAQ,CAACrL,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAII,CAAU,EAEpCf,EAAQ,UAAY,IAAM9nB,EAAQ,EAClC8nB,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,yBAAyBmnB,EAAQ,KAAK,EAAE,CAAC,CACtF,CAAC,CACL,CAKA,MAAM,eAAgB,CAClB,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMW,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,UAAU,EAAG,UAAU,EAC3C,YAAY,KAAK,UAAU,EAErD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAI,aAAa,EAEvCX,EAAQ,UAAY,IAAM,CACtB,IAAM9Y,EAAS8Y,EAAQ,OAEnB9nB,EADAgP,EACQ,IAAI,WAAWA,EAAO,IAAI,EAE1B,IAF2B,CAI3C,EAEA8Y,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,4BAA4BmnB,EAAQ,KAAK,EAAE,CAAC,CACzF,CAAC,CACL,CAKA,MAAM,UAAW,CACb,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAG9C,IAAMM,EAAc,KAAK,GAAG,YAAY,CAAC,KAAK,WAAY,KAAK,eAAgB,KAAK,UAAU,EAAG,WAAW,EAE5G,OAAO,IAAI,QAAQ,CAACpoB,EAASW,IAAW,CACpC,IAAM4nB,EAAcH,EAAY,YAAY,KAAK,UAAU,EAAE,MAAM,EAC7DI,EAAkBJ,EAAY,YAAY,KAAK,cAAc,EAAE,MAAM,EACrEU,EAAcV,EAAY,YAAY,KAAK,UAAU,EAAE,MAAM,EAEnEA,EAAY,WAAa,IAAMpoB,EAAQ,EACvCooB,EAAY,QAAU,IAAMznB,EAAO,IAAI,MAAM,6BAA6BynB,EAAY,KAAK,EAAE,CAAC,CAClG,CAAC,CACL,CAKA,OAAQ,CACA,KAAK,KACL,KAAK,GAAG,MAAM,EACd,KAAK,GAAK,KAElB,CACJ,EAMMnB,GAAN,KAAiC,CAC7B,YAAYD,EAAkB+B,EAAmB,KAAM,CACnD,KAAK,kBAAoB/B,EACzB,KAAK,WAAa+B,GAAoB,IAAInB,GAC1C,KAAK,eAAiB,GAGtB,KAAK,UAAY,IAAI,QACrB,KAAK,eAAiB,IAAI,GAC9B,CAKA,MAAM,sBAAuB,CACpB,KAAK,iBACN,MAAM,KAAK,WAAW,WAAW,EACjC,KAAK,eAAiB,GAE9B,CAEA,MAAM,0BAA2B,CACzB,OAAO,KAAK,kBAAkB,YAAe,YAAc,CAAC,KAAK,kBAAkB,WAAW,GAC9F,MAAM,KAAK,kBAAkB,OAAO,CAE5C,CAKA,MAAM,oBAAoB5iB,EAAOoiB,EAAWlL,EAAW,CAAC,EAAG,CACvD,GAAI,EAAEkL,aAAqB,WACvB,MAAM,IAAI,MAAM,sCAAsC,EAG1D,GAAI,CAACA,EAAU,YACX,MAAM,IAAI,MAAM,gDAAgD,EAGpE,GAAI,CACA,MAAM,KAAK,qBAAqB,EAGhC,IAAM4B,EAAU,MAAM,OAAO,OAAO,UAAU,MAAO5B,CAAS,EAGxD,CAAE,cAAAlW,EAAe,GAAAD,CAAG,EAAI,MAAM,KAAK,gBAAgB+X,CAAO,EAG1DC,EAAoB,MAAM,KAAK,iBAAiB,CAClD,GAAG/M,EACH,QAAS,KAAK,IAAI,EAClB,aAAc,KAAK,IAAI,EACvB,YAAa,GACb,WAAY,EAChB,CAAC,EAED,MAAM,KAAK,WAAW,kBAClBlX,EACAkM,EACAD,EACAmW,EAAU,UACVA,EAAU,OACVA,EAAU,KACV6B,CACJ,EAGA,IAAMC,EAAoB,MAAM,KAAK,wBAAwBF,EAAS5B,EAAU,UAAWA,EAAU,MAAM,EAC3G,YAAK,eAAe,IAAIpiB,EAAOkkB,CAAiB,EAEzC,EAEX,OAASjqB,EAAO,CACZ,MAAM,IAAI,MAAM,oCAAoCA,EAAM,OAAO,EAAE,CACvE,CACJ,CAKA,MAAM,YAAY+F,EAAO,CACrB,GAAI,CAEA,GAAI,KAAK,eAAe,IAAIA,CAAK,EAC7B,OAAO,KAAK,eAAe,IAAIA,CAAK,EAGxC,MAAM,KAAK,qBAAqB,EAGhC,IAAMqjB,EAAY,MAAM,KAAK,WAAW,gBAAgBrjB,CAAK,EAC7D,GAAI,CAACqjB,EACD,OAAO,KAIX,IAAMW,EAAU,MAAM,KAAK,gBAAgBX,EAAU,cAAeA,EAAU,EAAE,EAG1EhB,EAAc,MAAM,KAAK,wBAAwB2B,EAASX,EAAU,UAAWA,EAAU,MAAM,EAGrG,YAAK,eAAe,IAAIrjB,EAAOqiB,CAAW,EAG1C,MAAM,KAAK,yBAAyBriB,EAAO,CAAE,aAAc,KAAK,IAAI,CAAE,CAAC,EAEhEqiB,CAEX,OAASpoB,EAAO,CACZ,MAAM,IAAI,MAAM,2BAA2BA,EAAM,OAAO,EAAE,CAC9D,CACJ,CAKA,MAAM,UAAU+F,EAAO,CACnB,GAAI,CACA,aAAM,KAAK,qBAAqB,EAGhC,MAAM,KAAK,WAAW,UAAUA,CAAK,EAGrC,KAAK,eAAe,OAAOA,CAAK,EAEzB,EAEX,OAAS/F,EAAO,CACZ,MAAM,IAAI,MAAM,yBAAyBA,EAAM,OAAO,EAAE,CAC5D,CACJ,CAKA,MAAM,gBAAiB,CACnB,GAAI,CACA,MAAM,KAAK,qBAAqB,EAChC,IAAMkqB,EAAU,MAAM,KAAK,WAAW,SAAS,EACzC7oB,EAAU,CAAC,EACjB,QAAWsoB,KAAUO,EAAS,CAC1B,IAAMjN,EAAW,MAAM,KAAK,2BAA2B0M,CAAM,EACzD1M,GAAU5b,EAAQ,KAAK,CAAE,MAAOsoB,EAAO,MAAO,GAAG1M,CAAS,CAAC,CACnE,CACA,OAAO5b,CACX,OAASrB,EAAO,CACZ,MAAM,IAAI,MAAM,wBAAwBA,EAAM,OAAO,EAAE,CAC3D,CACJ,CAKA,MAAM,UAAW,CACb,GAAI,CACA,aAAM,KAAK,qBAAqB,EAGhC,MAAM,KAAK,WAAW,SAAS,EAG/B,KAAK,eAAe,MAAM,EAEnB,EAEX,OAASA,EAAO,CACZ,MAAM,IAAI,MAAM,4BAA4BA,EAAM,OAAO,EAAE,CAC/D,CACJ,CAKA,MAAM,gBAAgB+pB,EAAS,CAE3B,IAAM1kB,EAAa,KAAK,UAAU0kB,CAAO,EACnC9nB,EAAO,IAAI,YAAY,EAAE,OAAOoD,CAAU,EAEhD,aAAM,KAAK,yBAAyB,EAC7B,MAAM,KAAK,kBAAkB,aAAapD,CAAI,CACzD,CAKA,MAAM,gBAAgBgQ,EAAeD,EAAI,CACrC,MAAM,KAAK,yBAAyB,EACpC,IAAM6E,EAAgB,MAAM,KAAK,kBAAkB,aAAa5E,EAAeD,CAAE,EAG3E3M,EAAa,IAAI,YAAY,EAAE,OAAOwR,CAAa,EACzD,OAAO,KAAK,MAAMxR,CAAU,CAChC,CAEA,MAAM,iBAAiB4X,EAAU,CAC7B,IAAMhb,EAAO,IAAI,YAAY,EAAE,OAAO,KAAK,UAAUgb,CAAQ,CAAC,EAC9D,MAAM,KAAK,yBAAyB,EACpC,GAAM,CAAE,cAAAhL,EAAe,GAAAD,CAAG,EAAI,MAAM,KAAK,kBAAkB,aAAa/P,CAAI,EAC5E,MAAO,CACH,gBAAiB,EACjB,kBAAmB,MAAM,KAAKgQ,CAAa,EAC3C,WAAY,MAAM,KAAKD,CAAE,CAC7B,CACJ,CAEA,MAAM,uBAAuB2X,EAAQ,CACjC,GAAI,CAACA,GAAQ,mBAAqB,CAACA,GAAQ,WACvC,MAAM,IAAI,MAAM,4BAA4B,EAEhD,MAAM,KAAK,yBAAyB,EACpC,IAAMQ,EAAY,MAAM,KAAK,kBAAkB,aAC3C,IAAI,WAAWR,EAAO,iBAAiB,EACvC,IAAI,WAAWA,EAAO,UAAU,CACpC,EACA,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAOQ,CAAS,CAAC,CACzD,CAEA,MAAM,2BAA2BR,EAAQ,CACrC,GAAI,CAACA,EAAQ,OAAO,KACpB,GAAIA,EAAO,kBACP,GAAI,CACA,OAAO,MAAM,KAAK,uBAAuBA,CAAM,CACnD,MAAgB,CAEZ,OAAO,IACX,CAIJ,GAAM,CAAE,MAAA5jB,EAAO,GAAGqkB,CAAe,EAAIT,EAC/BU,EAAkB,CAAE,MAAAtkB,EAAO,GAAI,MAAM,KAAK,iBAAiBqkB,CAAc,CAAG,EAClF,aAAM,KAAK,WAAW,qBAAqBC,CAAe,EACnDD,CACX,CAEA,MAAM,yBAAyBrkB,EAAO8Y,EAAS,CAC3C,IAAM8K,EAAS,MAAM,KAAK,WAAW,qBAAqB5jB,CAAK,EAC/D,GAAI,CAAC4jB,EAAQ,MAAM,IAAI,MAAM,2BAA2B5jB,CAAK,EAAE,EAC/D,IAAMukB,EAAU,MAAM,KAAK,2BAA2BX,CAAM,EAC5D,GAAI,CAACW,EAAS,MAAM,IAAI,MAAM,2BAA2BvkB,CAAK,EAAE,EAChE,MAAM,KAAK,WAAW,qBAAqB,CACvC,MAAAA,EACA,GAAI,MAAM,KAAK,iBAAiB,CAAE,GAAGukB,EAAS,GAAGzL,CAAQ,CAAC,CAC9D,CAAC,CACL,CAKA,MAAM,wBAAwBkL,EAASd,EAAWC,EAAQ,CACtD,OAAO,MAAM,OAAO,OAAO,UACvB,MACAa,EACAd,EACA,GACAC,CACJ,CACJ,CAKA,MAAM,iBAAkB,CACpB,GAAI,CACA,MAAM,KAAK,qBAAqB,EAChC,IAAMqB,EAAO,MAAM,KAAK,WAAW,SAAS,EAE5C,MAAO,CACH,UAAWA,EAAK,OAChB,WAAY,KAAK,eAAe,KAChC,eAAgBA,EAAK,OACrB,aAAcA,EAAK,OAAO,CAACC,EAAQrlB,IAC/B,KAAK,IAAIqlB,EAAQrlB,EAAI,cAAgB,CAAC,EAAG,CAAC,CAClD,CAEJ,OAASnF,EAAO,CACZ,MAAO,CACH,UAAW,EACX,WAAY,KAAK,eAAe,KAChC,eAAgB,EAChB,aAAc,EACd,MAAOA,EAAM,OACjB,CACJ,CACJ,CACJ,EAMM0F,GAAN,KAA6B,CACzB,YAAYokB,EAAmB,KAAM,CAEjC,KAAK,WAAa,KAClB,KAAK,YAAc,GACnB,KAAK,gBAAkB,KACvB,KAAK,cAAgB,KAGrB,KAAK,kBAAoB,KAAU,IACnC,KAAK,qBAAuB,KAAU,IAGtC,KAAK,kBAAoB,KACzB,KAAK,UAAY,GAGjB,KAAK,WAAaA,GAAoB,IAAInB,GAC1C,KAAK,eAAiB,GAGtB,KAAK,oBAAsB,KAC3B,KAAK,kBAAoB,KACzB,KAAK,YAAc,IAIvB,CAKA,4BAA4B/iB,EAAU,CAClC,KAAK,oBAAsBA,CAC/B,CAKA,0BAA0BA,EAAU,CAChC,KAAK,kBAAoBA,CAC7B,CAKA,oBAAoBA,EAAU,CAC1B,KAAK,YAAcA,CACvB,CAKA,sBAAuB,CAEf,OAAO,SAAa,MACpB,SAAS,iBAAiB,mBAAoB,IAAM,CAC5C,SAAS,OACT,KAAK,gBAAgB,EAErB,KAAK,eAAe,CAE5B,CAAC,EAGD,OAAO,iBAAiB,OAAQ,IAAM,KAAK,gBAAgB,CAAC,EAC5D,OAAO,iBAAiB,QAAS,IAAM,KAAK,eAAe,CAAC,EAG5D,CAAC,YAAa,YAAa,WAAY,SAAU,YAAY,EAAE,QAAQiH,GAAS,CAC5E,SAAS,iBAAiBA,EAAO,IAAM,KAAK,gBAAgB,EAAG,CAAE,QAAS,EAAK,CAAC,CACpF,CAAC,EAET,CAKA,iBAAkB,CACV,KAAK,aAEL,KAAK,sBAAsB,KAAK,oBAAoB,CAE5D,CAKA,gBAAiB,CACT,KAAK,aACL,KAAK,mBAAmB,CAEhC,CAKA,iBAAkB,CACd,KAAK,cAAgB,KAAK,IAAI,EAC1B,KAAK,aACL,KAAK,mBAAmB,CAEhC,CAKA,oBAAqB,CACjB,KAAK,aAAa,EAClB,KAAK,gBAAkB,WAAW,IAAM,CACpC,KAAK,eAAe,SAAS,CACjC,EAAG,KAAK,iBAAiB,CAC7B,CAKA,sBAAsB/K,EAAS,CAC3B,KAAK,aAAa,EAClB,KAAK,gBAAkB,WAAW,IAAM,CACpC,KAAK,eAAe,YAAY,CACpC,EAAGA,CAAO,CACd,CAKA,oBAAqB,CACb,KAAK,aACL,KAAK,mBAAmB,CAEhC,CAKA,cAAe,CACP,KAAK,kBACL,aAAa,KAAK,eAAe,EACjC,KAAK,gBAAkB,KAE/B,CAKA,eAAegI,EAAS,UAAW,CAC3B,KAAK,cACL,KAAK,qBAAqB,EAC1B,KAAK,YAAc,GAEf,KAAK,mBACL,KAAK,kBAAkBA,CAAM,EAGzC,CAKA,MAAM,sBAAuB,CACpB,KAAK,iBACN,MAAM,KAAK,WAAW,WAAW,EACjC,KAAK,eAAiB,GAE9B,CAKA,eAAgB,CACZ,OAAO,OAAO,gBAAgB,IAAI,WAAW,KAAK,SAAS,CAAC,CAChE,CAKA,MAAM,kBAAmB,CACrB,MAAM,KAAK,qBAAqB,EAGhC,IAAIsC,EAAO,MAAM,KAAK,WAAW,cAAc,EAE/C,OAAKA,IAEDA,EAAO,KAAK,cAAc,EAC1B,MAAM,KAAK,WAAW,gBAAgBA,CAAI,GAGvCA,CACX,CAKA,MAAM,uBAAuBqe,EAAUre,EAAM,CACzC,GAAI,CAEA,IAAMse,EAAc,MAAM,OAAO,OAAO,UACpC,MACA,IAAI,YAAY,EAAE,OAAOD,CAAQ,EACjC,SACA,GACA,CAAC,WAAW,CAChB,EAmBA,OAhBmB,MAAM,OAAO,OAAO,UACnC,CACI,KAAM,SACN,KAAMre,EACN,WAAY,KAAK,kBACjB,KAAM,SACV,EACAse,EACA,CACI,KAAM,UACN,OAAQ,GACZ,EACA,GACA,CAAC,UAAW,UAAW,UAAW,WAAW,CACjD,CAGJ,OAAS1qB,EAAO,CACZ,MAAM,IAAI,MAAM,0BAA0BA,EAAM,OAAO,EAAE,CAC7D,CACJ,CAKA,MAAM,iBAAiBkoB,EAAU,GAAO,CACpC,GAAI,CAAC,KAAK,oBACN,MAAM,IAAI,MAAM,2BAA2B,EAG/C,OAAO,IAAI,QAAQ,CAACnnB,EAASW,IAAW,CACpC,KAAK,oBAAoBwmB,EAAUuC,GAAa,CACxCA,EACA1pB,EAAQ0pB,CAAQ,EAEhB/oB,EAAO,IAAI,MAAM,uBAAuB,CAAC,CAEjD,CAAC,CACL,CAAC,CACL,CAKA,MAAM,OAAO+oB,EAAW,KAAM,CAC1B,GAAI,CAEKA,IACDA,EAAW,MAAM,KAAK,iBAAiB,EAAK,GAIhD,IAAMre,EAAO,MAAM,KAAK,iBAAiB,EAGzC,YAAK,WAAa,MAAM,KAAK,uBAAuBqe,EAAUre,CAAI,EAGlE,KAAK,YAAc,GACnB,KAAK,cAAgB,KAAK,IAAI,EAG9B,KAAK,mBAAmB,EAGxBqe,EAAW,KAEP,KAAK,aACL,KAAK,YAAY,EAGd,CAAE,QAAS,EAAK,CAE3B,OAASzqB,EAAO,CAEZ,MAAAyqB,EAAW,KACLzqB,CACV,CACJ,CAKA,MAAO,CACH,KAAK,eAAe,QAAQ,CAChC,CAMA,MAAM,aAAa2qB,EAAY,CAC3B,GAAI,CAAC,KAAK,aAAe,CAAC,KAAK,WAC3B,MAAM,IAAI,MAAM,sBAAsB,EAE1C,KAAK,gBAAgB,EACrB,IAAM3Y,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC9CF,EAAY,MAAM,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,GAAAE,CAAG,EAAG,KAAK,WAAY2Y,CAAU,EAClG,MAAO,CAAE,cAAe,IAAI,WAAW7Y,CAAS,EAAG,GAAAE,CAAG,CAC1D,CAEA,MAAM,aAAa4Y,EAAgB5Y,EAAI,CACnC,GAAI,CAAC,KAAK,aAAe,CAAC,KAAK,WAC3B,MAAM,IAAI,MAAM,sBAAsB,EAE1C,KAAK,gBAAgB,EACrB,IAAMmY,EAAY,MAAM,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,GAAAnY,CAAG,EAAG,KAAK,WAAY4Y,CAAc,EACtG,OAAO,IAAI,WAAWT,CAAS,CACnC,CAKA,YAAa,CAIT,OAAO,KAAK,aAAe,KAAK,aAAe,IACnD,CAKA,kBAAmB,CACf,MAAO,CACH,WAAY,KAAK,YACjB,aAAc,KAAK,cACnB,iBAAkB,KAAK,kBACvB,oBAAqB,KAAK,oBAC9B,CACJ,CAKA,sBAAuB,CACf,KAAK,aAGL,KAAK,WAAa,MAEtB,KAAK,aAAa,CACtB,CAKA,SAAU,CACN,KAAK,qBAAqB,EAC1B,KAAK,YAAc,GAGf,OAAO,SAAa,MACpB,SAAS,oBAAoB,mBAAoB,KAAK,eAAe,EACrE,OAAO,oBAAoB,OAAQ,KAAK,eAAe,EACvD,OAAO,oBAAoB,QAAS,KAAK,cAAc,EAE/D,CACJ,ECluhBA,IAAAU,GAAwC,SCDtC,IAAAC,GAAW,QCeb,IAAMC,GAAmB,IAAM,CAC3B,GAAIC,GAAkB,OAAS,EAAG,OAAO,KAEzC,GAAM,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,EAAK,EACtCC,EAAU,MAAM,OAAO,IAAI,EAE3BC,EAAW,OAAO,OAAW,IAAc,OAAO,SAAS,SAAW,IACtEC,EAAQC,GAAc,CAAE,SAAAF,EAAU,OAAQG,GAAc,CAAE,CAAC,EAC3DC,EAASH,EAAM,KAAMI,GAAMA,EAAE,SAAS,GAAKJ,EAAM,CAAC,EAGxD,MAAM,UAAU,IAAM,CAClB,GAAI,CAACJ,EAAM,OACX,IAAMS,EAAUC,GAAM,CACdR,EAAQ,SAAW,CAACA,EAAQ,QAAQ,SAASQ,EAAE,MAAM,GAAGT,EAAQ,EAAK,CAC7E,EACMU,EAASD,GAAM,CAAMA,EAAE,MAAQ,UAAUT,EAAQ,EAAK,CAAG,EAC/D,gBAAS,iBAAiB,cAAeQ,CAAM,EAC/C,SAAS,iBAAiB,UAAWE,CAAK,EACnC,IAAM,CACT,SAAS,oBAAoB,cAAeF,CAAM,EAClD,SAAS,oBAAoB,UAAWE,CAAK,CACjD,CACJ,EAAG,CAACX,CAAI,CAAC,EAET,IAAMY,EAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,UACL,KAAM,SACN,QAAS,IAAMX,EAASY,GAAM,CAACA,CAAC,EAChC,gBAAiB,OACjB,gBAAiBb,EAAO,OAAS,QACjC,aAAcc,EAAE,gBAAgB,EAChC,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,MAC5C,QAAS,WAAY,aAAc,MACnC,OAAQ,sCACR,WAAYd,EAAO,4BAA8B,4BACjD,MAAO,mBAAoB,KAAM,UAAW,SAAU,SAAU,WAAY,IAC5E,OAAQ,UAAW,WAAY,6BACnC,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CAAE,IAAK,GAAI,EAAGO,EAASA,EAAO,KAAO,EAAE,EACnE,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAC7D,OAAQ,eAAgB,YAAa,IAAK,cAAe,QAAS,eAAgB,QAClF,MAAO,CAAE,UAAWP,EAAO,iBAAmB,OAAQ,WAAY,gBAAiB,EACnF,wBAAyB,CAAE,OAAQ,0BAA2B,CAClE,CAAC,CACL,CAAC,EAEKe,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,KAAM,OAGN,UAAW,YAGX,MAAO,CACH,SAAU,WAAY,IAAK,mBAAoB,eAAgB,EAAG,OAAQ,GAC1E,QAASf,EAAO,QAAU,OAC1B,SAAU,QAAS,QAAS,MAAO,aAAc,OACjD,OAAQ,sCAAuC,WAAY,oBAC3D,UAAW,0EAIX,UAAW,mBAAoB,UAAW,OAAQ,mBAAoB,SAC1E,CACJ,EAAGI,EAAM,IAAKY,GAAS,MAAM,cAAc,IAAK,CAC5C,IAAKA,EAAK,KACV,KAAMA,EAAK,KACX,SAAUA,EAAK,SACf,KAAMA,EAAK,SAGX,IAAKA,EAAK,IACV,KAAM,WAGN,eAAgBA,EAAK,UAAY,OAAS,OAG1C,QAAS,IAAMC,GAAeD,EAAK,IAAI,EACvC,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,OAC5C,QAAS,WAAY,aAAc,MACnC,SAAU,OACV,WAAYA,EAAK,UAAY,IAAM,IACnC,MAAOA,EAAK,UAAY,mBAAqB,mBAC7C,WAAYA,EAAK,UAAY,4BAA8B,cAC3D,eAAgB,OAAQ,WAAY,QACxC,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,IACL,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,QAAS,MAAO,mBAAoB,MAAO,OAAQ,KAAM,OAAQ,UAAW,OAAQ,CACnJ,EAAGA,EAAK,IAAI,EACZ,MAAM,cAAc,OAAQ,CAAE,IAAK,GAAI,EAAGA,EAAK,KAAK,CACxD,CAAC,CAAC,CAAC,EAEH,OAAO,MAAM,cAAc,MAAO,CAC9B,IAAKd,EACL,aAAcY,EAAE,gBAAgB,EAChC,MAAO,CAAE,SAAU,WAAY,QAAS,aAAc,CAC1D,EAAG,CAACF,EAASG,CAAI,CAAC,CACtB,EAEA,OAAO,iBAAmBjB,GCtG1B,IAAMoB,GAAO,CACT,OAAQ,qFACR,MAAO,oJACP,KAAM,uEACV,EAEMC,GAAM,CAACC,EAAMC,EAAMC,IAAU,MAAM,cAAc,MAAO,CAC1D,MAAOD,EAAM,OAAQA,EAAM,QAAS,YAAa,KAAM,OACvD,OAAQ,eAAgB,YAAaC,EAAO,cAAe,QAAS,eAAgB,QACpF,cAAe,OACf,wBAAyB,CAAE,OAAQF,CAAK,CAC5C,CAAC,EAEKG,GAAgB,IAAM,CACxB,IAAMC,EAAM,OAAO,OAAW,IAAc,OAAO,eAAiB,KAGpE,GAAI,CAACA,EAAK,OAAO,KAEjB,GAAM,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,EAAK,EACtC,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,IAAMJ,EAAI,IAAI,CAAC,EAChD,CAACK,EAAUC,CAAW,EAAI,MAAM,SAAS,IAAMN,EAAI,SAAS,CAAC,EAC7DO,EAAU,MAAM,OAAO,IAAI,EAIjC,MAAM,UAAU,IAAMP,EAAI,UAAU,CAACQ,EAAUC,IAAiB,CAC5DL,EAAQI,CAAQ,EAChBF,EAAYG,CAAY,CAC5B,CAAC,EAAG,CAAC,CAAC,EAEN,MAAM,UAAU,IAAM,CAClB,GAAI,CAACR,EAAM,OACX,IAAMS,EAAUC,GAAM,CACdJ,EAAQ,SAAW,CAACA,EAAQ,QAAQ,SAASI,EAAE,MAAM,GAAGT,EAAQ,EAAK,CAC7E,EACMU,EAASD,GAAM,CAAMA,EAAE,MAAQ,UAAUT,EAAQ,EAAK,CAAG,EAC/D,gBAAS,iBAAiB,cAAeQ,CAAM,EAC/C,SAAS,iBAAiB,UAAWE,CAAK,EACnC,IAAM,CACT,SAAS,oBAAoB,cAAeF,CAAM,EAClD,SAAS,oBAAoB,UAAWE,CAAK,CACjD,CACJ,EAAG,CAACX,CAAI,CAAC,EAET,IAAMY,EAAU,CACZ,CAAE,KAAM,SAAU,KAAMnB,GAAK,OAAQ,MAAOoB,EAAE,cAAc,CAAE,EAC9D,CAAE,KAAM,QAAS,KAAMpB,GAAK,MAAO,MAAOoB,EAAE,aAAa,CAAE,EAC3D,CAAE,KAAM,OAAQ,KAAMpB,GAAK,KAAM,MAAOoB,EAAE,YAAY,CAAE,CAC5D,EAKMC,EAAcZ,IAAS,SAAWT,GAAK,OAAUW,IAAa,QAAUX,GAAK,MAAQA,GAAK,KAC1FsB,EAAUH,EAAQ,KAAMI,GAAMA,EAAE,OAASd,CAAI,GAAKU,EAAQ,CAAC,EAE3DK,EAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,UACL,KAAM,SACN,QAAS,IAAMhB,EAASiB,GAAM,CAACA,CAAC,EAChC,gBAAiB,OACjB,gBAAiBlB,EAAO,OAAS,QACjC,aAAca,EAAE,aAAa,EAAI,KAAOE,EAAQ,MAChD,MAAOF,EAAE,aAAa,EACtB,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,MAC5C,QAAS,UAAW,aAAc,MAClC,OAAQ,sCACR,WAAYb,EAAO,4BAA8B,4BACjD,MAAO,mBAAoB,KAAM,UACjC,OAAQ,UAAW,WAAY,6BACnC,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,QAAS,CAAE,EAAGN,GAAIoB,EAAa,GAAI,GAAG,CAAC,EACrH,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAC7D,OAAQ,eAAgB,YAAa,IAAK,cAAe,QAAS,eAAgB,QAClF,MAAO,CAAE,UAAWd,EAAO,iBAAmB,OAAQ,WAAY,gBAAiB,EACnF,wBAAyB,CAAE,OAAQ,0BAA2B,CAClE,CAAC,CACL,CAAC,EAEKmB,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,KAAM,OACN,MAAO,CACH,SAAU,WAAY,IAAK,mBAAoB,eAAgB,EAAG,OAAQ,GAC1E,QAASnB,EAAO,QAAU,OAC1B,SAAU,QAAS,QAAS,MAAO,aAAc,OACjD,OAAQ,sCAAuC,WAAY,oBAC3D,UAAW,yEACf,CACJ,EAAGY,EAAQ,IAAKQ,GAAW,CACvB,IAAMC,EAASD,EAAO,OAASlB,EAC/B,OAAO,MAAM,cAAc,SAAU,CACjC,IAAKkB,EAAO,KACZ,KAAM,SACN,KAAM,gBACN,eAAgBC,EAAS,OAAS,QAClC,QAAS,IAAM,CAAEtB,EAAI,IAAIqB,EAAO,IAAI,EAAGnB,EAAQ,EAAK,CAAG,EACvD,MAAO,CACH,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAC3D,QAAS,WAAY,aAAc,MAAO,OAAQ,OAClD,SAAU,OAAQ,WAAY,UAC9B,WAAYoB,EAAS,IAAM,IAC3B,MAAOA,EAAS,mBAAqB,mBACrC,WAAYA,EAAS,4BAA8B,cACnD,OAAQ,UAAW,UAAW,QAAS,WAAY,QACvD,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,IACL,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,MAAO,OAAQ,MAAOA,EAAS,mBAAqB,kBAAmB,CACzI,EAAG3B,GAAI0B,EAAO,KAAM,GAAI,GAAG,CAAC,EAC5B,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,CAAE,CAAE,EAAGA,EAAO,KAAK,EAG1EC,GAAU,MAAM,cAAc,OAAQ,CAClC,IAAK,IACL,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,MAAO,kBAAmB,CAC5F,EAAG3B,GAAI,kCAAmC,GAAI,GAAG,CAAC,CACtD,CAAC,CACL,CAAC,CAAC,EAEF,OAAO,MAAM,cAAc,MAAO,CAC9B,IAAKY,EACL,MAAO,CAAE,SAAU,WAAY,QAAS,aAAc,CAC1D,EAAG,CAACW,EAASE,CAAI,CAAC,CACtB,EAEA,OAAO,cAAgBrB,GCjJvB,IAAMwB,GAAc,IAAIC,EAAc,GAEhCC,GAAwB,CAAC,CAC3B,OAAAC,EACA,YAAAC,EACA,iBAAAC,EACA,aAAAC,EACA,YAAAC,EACA,cAAAC,EACA,cAAAC,CACJ,IAAM,CACF,GAAM,CAACC,EAAmBC,CAAoB,EAAI,MAAM,SAAS,IAAI,EAC/D,CAACC,EAAoBC,CAAqB,EAAI,MAAM,SAAS,CAAC,EAE9D,CAACC,EAAkBC,CAAmB,EAAI,MAAM,SAAS,EAAK,EAC9D,CAACC,EAAiBC,CAAkB,EAAI,MAAM,SAAS,CAAC,EACxD,CAACC,EAAaC,CAAc,EAAI,MAAM,SAAS,SAAS,EAM9D,MAAM,UAAU,IAAM,CAClB,IAAIC,EAAa,GACbC,EAAoB,EAElBC,EAA2B,SAAY,CACzC,IAAMC,EAAM,KAAK,IAAI,EACrB,GAAI,EAAAA,EAAMF,EAAoB,MAI1B,CAAAD,EAIJ,CAAAA,EAAa,GACbC,EAAoBE,EAEpB,GAAI,CACA,GAAI,CAACd,GAAiB,CAACF,EACnB,OAGJ,IAAMiB,EAAsBf,EAExBgB,EAAmB,KAUvB,GARI,OAAOD,EAAoB,sBAAyB,WACpDC,EAAmB,MAAMD,EAAoB,qBAAqB,EAC3D,OAAOA,EAAoB,iCAAoC,WACtEC,EAAmB,MAAMD,EAAoB,gCAAgC,EAE7EC,EAAmB,MAAM,OAAO,0BAA0B,uBAAuBD,CAAmB,EAGpGC,GAAoBA,EAAiB,aAAe,GAAO,CAC3D,IAAMC,EAAehB,GAAmB,OAAS,EAC3CiB,GAAWF,EAAiB,OAAS,EAEvCC,IAAiBC,IAAY,CAACjB,GAC9BC,EAAqBc,CAAgB,EACrCZ,EAAsBU,CAAG,GAEd,OAAO,UAE1B,CAIJ,MAAgB,CAEhB,QAAE,CACEH,EAAa,EACjB,EACJ,EAEA,GAAIb,IACAe,EAAyB,EAErB,CAACZ,GAAqBA,EAAkB,MAAQ,IAAI,CACpD,IAAMkB,EAAgB,YAAY,IAAM,CAChC,CAAClB,GAAqBA,EAAkB,MAAQ,GAChDY,EAAyB,EAEzB,cAAcM,CAAa,CAEnC,EAAG,GAAI,EAEP,WAAW,IAAM,cAAcA,CAAa,EAAG,GAAK,CACxD,CAGJ,IAAMC,EAAW,YAAYP,EAA0B,GAAK,EAE5D,MAAO,IAAM,cAAcO,CAAQ,CACvC,EAAG,CAACpB,EAAeF,CAAW,CAAC,EAM/B,MAAM,UAAU,IAAM,CAClB,IAAMuB,EAAwBC,GAAU,CAEpC,WAAW,IAAM,CACblB,EAAsB,CAAC,CAC3B,EAAG,GAAG,CACV,EAEMmB,EAAgCD,GAAU,CAExCA,EAAM,QAAUA,EAAM,OAAO,eAC7BpB,EAAqBoB,EAAM,OAAO,YAAY,EAC9ClB,EAAsB,KAAK,IAAI,CAAC,EAExC,EAEA,gBAAS,iBAAiB,yBAA0BiB,CAAoB,EACxE,SAAS,iBAAiB,2BAA4BE,CAA4B,EAElF,OAAO,0BAA6BvB,GAAkB,CAE9CA,GAAiB,OAAO,0BACxB,OAAO,0BAA0B,uBAAuBA,CAAa,EAChE,KAAKwB,GAAgB,CACdA,GAAgBA,EAAa,aAAe,KAC5CtB,EAAqBsB,CAAY,EACjCpB,EAAsB,KAAK,IAAI,CAAC,EAGxC,CAAC,EACA,MAAMqB,GAAS,CAEhB,CAAC,EAELrB,EAAsB,CAAC,CAE/B,EAEO,IAAM,CACT,SAAS,oBAAoB,yBAA0BiB,CAAoB,EAC3E,SAAS,oBAAoB,2BAA4BE,CAA4B,CACzF,CACJ,EAAG,CAAC,CAAC,EAML,MAAM,UAAU,IAAM,CAElBjB,EAAoB,EAAI,EACxBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CAElBJ,EAAoB,EAAI,EACxBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CAClB,IAAMgB,EAAqBJ,GAAU,CAEjChB,EAAoB,EAAI,EACxBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAGMiB,EAA0B,IAAM,CAGlCzB,EAAqB,IAAI,EACzBE,EAAsB,CAAC,EAEvBE,EAAoB,EAAK,EACzBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAEMkB,EAAuB,IAAM,CAG/B1B,EAAqB,IAAI,EACzBE,EAAsB,CAAC,CAC3B,EAEMyB,EAAqB,IAAM,CAE7B3B,EAAqB,IAAI,EACzBE,EAAsB,CAAC,EACvBE,EAAoB,EAAK,EACzBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAEA,gBAAS,iBAAiB,sBAAuBgB,CAAiB,EAClE,SAAS,iBAAiB,kBAAmBE,CAAoB,EACjE,SAAS,iBAAiB,qBAAsBD,CAAuB,EACvE,SAAS,iBAAiB,eAAgBE,CAAkB,EAErD,IAAM,CACT,SAAS,oBAAoB,sBAAuBH,CAAiB,EACrE,SAAS,oBAAoB,kBAAmBE,CAAoB,EACpE,SAAS,oBAAoB,qBAAsBD,CAAuB,EAC1E,SAAS,oBAAoB,eAAgBE,CAAkB,CACnE,CACJ,EAAG,CAAC,CAAC,EAML,IAAMC,EAAsB,MAAOR,GAAU,CAEzC,GAAIA,IAAUA,EAAM,SAAW,GAAKA,EAAM,SAAWA,EAAM,UACnDzB,GAAgB,OAAOA,GAAiB,WAAY,CACpDA,EAAa,EACb,MACJ,CAIJyB,EAAM,eAAe,EACrBA,EAAM,gBAAgB,EAItB,IAAIS,EAAkB,KACtB,GAAI/B,GAAiB,OAAO,0BACxB,GAAI,CACA+B,EAAkB,MAAM,OAAO,0BAA0B,uBAAuB/B,CAAa,CAEjG,MAAgB,CAEhB,CAMJ,GAAI,CAAC+B,GAAmB,CAAC9B,EAAmB,CACxC,MAAM+B,EAAE,sBAAsB,CAAC,EAC/B,MACJ,CAGA,IAAIR,EAAeO,GAAmB9B,EAGjCuB,IACDA,EAAe,CACX,MAAO,UACP,MAAO,EACP,MAAO,OACP,oBAAqB,CAAC,EACtB,UAAW,KAAK,IAAI,EACpB,QAASQ,EAAE,6BAA6B,EACxC,WAAY,GACZ,aAAc,EACd,YAAa,CACjB,GAKJ,IAAIC,EAAU;AAAA;AAAA,EAKd,GAJAA,GAAW,mBAAmBT,EAAa,KAAK,KAAKA,EAAa,KAAK;AAAA,EACvES,GAAW,sBAAsB,IAAI,KAAKT,EAAa,SAAS,EAAE,mBAAmB,CAAC;AAAA,EACtFS,GAAW,gBAAgBT,EAAa,WAAaQ,EAAE,eAAe,EAAIA,EAAE,mBAAmB,CAAC;AAAA;AAAA,EAE5FR,EAAa,oBAAqB,CAClCS,GAAW;AAAA,EACXA,GAAW,IAAM,IAAI,OAAO,EAAE,EAAI;AAAA,EAElC,IAAMC,EAAc,OAAO,QAAQV,EAAa,mBAAmB,EAAE,OAAO,CAAC,CAACW,GAAKC,EAAM,IAAMA,GAAO,MAAM,EACtGC,GAAc,OAAO,QAAQb,EAAa,mBAAmB,EAAE,OAAO,CAAC,CAACW,GAAKC,EAAM,IAAM,CAACA,GAAO,MAAM,EAEzGF,EAAY,OAAS,IACrBD,GAAW;AAAA,EACXC,EAAY,QAAQ,CAAC,CAACC,GAAKC,EAAM,IAAM,CACnC,IAAME,GAAWH,GAAI,QAAQ,WAAY,KAAK,EAAE,QAAQ,KAAMI,GAAOA,EAAI,YAAY,CAAC,EACtFN,GAAW,MAAMK,EAAQ,KAAKF,GAAO,SAAWJ,EAAE,gBAAgB,CAAC;AAAA,CACvE,CAAC,EACDC,GAAW;AAAA,GAGXI,GAAY,OAAS,IACrBJ,GAAW;AAAA,EACXI,GAAY,QAAQ,CAAC,CAACF,GAAKC,EAAM,IAAM,CACnC,IAAME,GAAWH,GAAI,QAAQ,WAAY,KAAK,EAAE,QAAQ,KAAMI,GAAOA,EAAI,YAAY,CAAC,EACtFN,GAAW,MAAMK,EAAQ,KAAKF,GAAO,SAAWJ,EAAE,gBAAgB,CAAC;AAAA,CACvE,CAAC,EACDC,GAAW;AAAA,GAGfA,GAAW;AAAA,EACXA,GAAW,WAAWT,EAAa,YAAY,IAAIA,EAAa,WAAW;AAAA,EAC3ES,GAAW,UAAUT,EAAa,KAAK,IAAIA,EAAa,kBAAoB,GAAG;AAAA;AAAA,CACnF,CAMA,GAHAS,GAAW;AAAA,EACXA,GAAW,IAAM,IAAI,OAAO,EAAE,EAAI;AAAA,EAE9BT,EAAa,oBAAqB,CAClC,IAAMgB,EAAW,CACb,2BAA4BhB,EAAa,oBAAoB,uBAAuB,QAAU,GAC9F,oBAAqBA,EAAa,oBAAoB,uBAAuB,QAAU,GACvF,qBAAsBA,EAAa,oBAAoB,kBAAkB,QAAU,GACnF,CAACQ,EAAE,sBAAsB,CAAC,EAAGR,EAAa,oBAAoB,wBAAwB,QAAU,GAChG,CAACQ,EAAE,oBAAoB,CAAC,EAAGR,EAAa,oBAAoB,6BAA6B,QAAU,GACnG,CAACQ,EAAE,sBAAsB,CAAC,EAAGR,EAAa,oBAAoB,wBAAwB,QAAU,GAChG,mBAAoBA,EAAa,oBAAoB,uBAAuB,QAAU,GACtF,mBAAoBA,EAAa,oBAAoB,uBAAuB,QAAU,GACtF,CAACQ,EAAE,wBAAwB,CAAC,EAAGR,EAAa,oBAAoB,0BAA0B,QAAU,GACpG,CAACQ,EAAE,wBAAwB,CAAC,EAAGR,EAAa,oBAAoB,0BAA0B,QAAU,EACxG,EAEA,OAAO,QAAQgB,CAAQ,EAAE,QAAQ,CAAC,CAACC,GAASC,EAAS,IAAM,CACvDT,GAAW,GAAGS,GAAY,SAAM,QAAG,IAAID,EAAO;AAAA,CAClD,CAAC,CACL,MAEIR,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EAGfA,GAAW;AAAA,EAAKT,EAAa,SAAWQ,EAAE,sBAAsB,CAAC,GAE7DR,EAAa,WACbS,GAAW;AAAA;AAAA,6EAEXA,GAAW;AAAA;AAAA,4FAIf,IAAMU,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,MAAM,QAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UActB,IAAMC,EAAU,SAAS,cAAc,KAAK,EAC5CA,EAAQ,MAAM,QAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAYxBA,EAAQ,YAAcX,EACtBU,EAAM,YAAYC,CAAO,EAGzBD,EAAM,iBAAiB,QAAUE,GAAM,CAC/BA,EAAE,SAAWF,GACb,SAAS,KAAK,YAAYA,CAAK,CAEvC,CAAC,EAGD,IAAMG,EAAiBD,GAAM,CACrBA,EAAE,MAAQ,WACV,SAAS,KAAK,YAAYF,CAAK,EAC/B,SAAS,oBAAoB,UAAWG,CAAa,EAE7D,EACA,SAAS,iBAAiB,UAAWA,CAAa,EAElD,SAAS,KAAK,YAAYH,CAAK,CACnC,EA2DMI,GArDkB,IAAM,CAC1B,OAAQrD,EAAQ,CACZ,IAAK,YACD,MAAO,CACH,KAAMsC,EAAE,kBAAkB,EAC1B,UAAW,mBACX,WAAY,oDAChB,EACJ,IAAK,YACD,MAAO,CACH,KAAMA,EAAE,kBAAkB,EAC1B,UAAW,mBACX,WAAY,uDAChB,EACJ,IAAK,aACD,MAAO,CACH,KAAMA,EAAE,mBAAmB,EAC3B,UAAW,oBACX,WAAY,iDAChB,EACJ,IAAK,WACD,MAAO,CACH,KAAMA,EAAE,iBAAiB,EACzB,UAAW,oBACX,WAAY,uDAChB,EACJ,IAAK,SACD,MAAO,CACH,KAAMA,EAAE,cAAc,EACtB,UAAW,gBACX,WAAY,8CAChB,EACJ,IAAK,eACD,MAAO,CACH,KAAMA,EAAE,qBAAqB,EAC7B,UAAW,oBACX,WAAY,uDAChB,EACJ,IAAK,oBACD,MAAO,CACH,KAAMA,EAAE,yBAAyB,EACjC,UAAW,gBACX,WAAY,uDAChB,EACJ,QACI,MAAO,CACH,KAAMA,EAAE,qBAAqB,EAC7B,UAAW,sBACX,WAAY,iDAChB,CACR,CACJ,GAE+B,EACzBgB,EAAuBlD,EAAeG,GAAqBF,EAAiB,KAkC5EkD,GA3B8B,IAAM,CACtC,GAAI,CAACD,EACD,MAAO,CACH,QAAShB,EAAE,4BAA4B,EACvC,WAAY,GACZ,WAAY,SAChB,EAGJ,IAAMkB,EAAaF,EAAqB,aAAe,GACjDG,EAAc,GAAGH,EAAqB,KAAK,KAAKA,EAAqB,KAAK,KAEhF,OAAIE,EACO,CACH,QAAS,GAAGC,CAAW;AAAA,yCACvB,WAAY,GACZ,WAAY,MAChB,EAEO,CACH,QAAS,GAAGA,CAAW;AAAA,yCACvB,WAAY,GACZ,WAAY,WAChB,CAER,GAEoD,EAMpD,MAAM,UAAU,KACZ,OAAO,oBAAsB,OAEtB,IAAM,CACT,OAAO,OAAO,mBAClB,GACD,CAAClD,EAAmBE,EAAoBL,EAAaE,EAAegD,EAAsBC,CAAe,CAAC,EAM7G,IAAMG,EAAWJ,EACVA,EAAqB,QAAU,QAAU,kBAAoBA,EAAqB,QAAU,SAAW,mBAAqBA,EAAqB,QAAU,SAAW,mBAAqB,gBAC5L,kBAIAK,EAAWvD,EAAc,wBACxB,CAAC,aAAc,YAAa,WAAY,cAAc,EAAE,SAASJ,CAAM,EAAI,yBAC3EA,IAAW,SAAW,sBAAwB,mBAC/C4D,EAAUD,IAAa,wBAA0B,kCAAoCA,IAAa,yBAA2B,mCAAqCA,IAAa,sBAAwB,gCAAkC,mCACzOE,EAAO,mEAMPC,EAAY,CAAC1D,EACb,CAAC2D,EAAUC,EAAW,EAAI,MAAM,SAAS,EAAK,EACpD,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAW,IAAMD,IAAa,OAAO,SAAW,OAAO,aAAe,GAAK,CAAC,EAClF,OAAAC,EAAS,EACT,OAAO,iBAAiB,SAAUA,EAAU,CAAE,QAAS,EAAK,CAAC,EACtD,IAAM,OAAO,oBAAoB,SAAUA,CAAQ,CAC9D,EAAG,CAAC,CAAC,EASL,IAAMC,EAAQ,4BACRC,EAAc,6GAMdC,EAAU,CAAE,WAAY,0BAA2B,cAAe,0BAA2B,EAC7FC,EAAU,CAAE,SAAU,QAAS,IAAK,EAAG,KAAM,EAAG,MAAO,EAAG,GAAGD,CAAQ,EACrEE,GAAcR,EACbC,EACG,CAAE,GAAGM,EAAS,WAAY,+BAAgC,eAAgBH,EAAO,qBAAsBA,EAAO,aAAc,sCAAuC,WAAYC,CAAY,EAC3L,CAAE,GAAGE,EAAS,WAAY,cAAe,eAAgB,2BAA4B,qBAAsB,2BAA4B,aAAc,wBAAyB,WAAYF,CAAY,EAC1M,CAAE,GAAGC,EAAS,WAAY,+BAAgC,eAAgBF,EAAO,qBAAsBA,EAAO,aAAc,qCAAsC,EAExK,OAAO,MAAM,cAAc,SAAU,CACjC,UAAWJ,EAAY,sBAAwB,mCAC/C,MAAOQ,EACX,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,YACL,UAAW,oBACX,MAAO,CAAE,QAAS,QAAS,CAC/B,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,UAAW,oCACX,MAAO,CAAE,OAAQ,wBAAyB,IAAK,MAAO,CAC1D,EAAG,CAEC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,CAAE,CAAE,EAAG,CACpH,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EACpI,MAAM,cAAc,MAAO,CAAE,IAAK,2BAA4B,IAAK,YAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,OAAQ,CAAE,CAAC,CACtK,EACA,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,WAAY,IAAK,SAAU,CAAE,CAAE,EAAG,CAChF,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,WAAY,IAAK,KAAM,CAAE,EAAG,CACtG,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG,WAAW,EACvJ,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYT,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,sBAAuB,CAAE,EAAGhE,EAAW,CACxJ,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,UAAW,kBAAmB,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,GAAI,CAAE,EAAGyC,EAAE,aAAa,CAAC,CACrK,CAAC,CACL,CAAC,EAED,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAGvGwB,GAAa,MAAM,cAAcS,GAAkB,CAAE,IAAK,MAAO,CAAC,EAKlET,GAAa,MAAM,cAAcU,GAAe,CAAE,IAAK,OAAQ,CAAC,EAEhE,CAACV,GAAa,MAAM,cAAc,SAAU,CACxC,IAAK,MAAO,KAAM,SAClB,QAAS,IAAM,OAAO,cAAc,IAAI,YAAY,iCAAiC,CAAC,EACtF,MAAOxB,EAAE,sBAAsB,EAAG,aAAcA,EAAE,iBAAiB,EACnE,UAAW,gBACX,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,OAAQ,sCAAuC,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,UAAW,WAAY,UAAW,CACrQ,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,uBAAwB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EAE9F,CAACwB,GAAaR,GAAyB,MAAM,cAAc,MAAO,CAC/D,IAAK,MAAO,QAASlB,EACrB,cAAgBe,GAAM,CAAEA,EAAE,eAAe,EAAO,OAAOhD,GAAiB,YAAYA,EAAa,CAAG,EACpG,MAAOoD,EAAgB,QAAS,UAAW,aAC3C,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,4BAA6B,OAAQ,SAAU,CACpN,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,uBAAwB,MAAO,CAAE,SAAU,OAAQ,MAAOG,CAAS,CAAE,CAAC,EACtH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAIpB,EAAE,YAAYgB,EAAqB,KAAK,EAAE,IAAM,YAAYA,EAAqB,KAAK,GAAK,OAAOA,EAAqB,KAAK,EAAIhB,EAAE,YAAYgB,EAAqB,KAAK,EAAE,CAAE,EACjU,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYO,EAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGP,EAAqB,MAAQ,GAAG,CAC1J,CAAC,EAED,CAACQ,GAAa,MAAM,cAAc,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,2BAA4B,CAAE,EAAG,CACxP,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYH,EAAU,UAAW,aAAeC,CAAQ,CAAE,CAAC,EAChK,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGP,EAAO,IAAI,CACjK,CAAC,EAEDjD,GAAe,MAAM,cAAc,SAAU,CACzC,IAAK,KAAM,QAASD,EAAc,UAAW,gBAC7C,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,WAAY,UAAW,CACnT,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACjG,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,YAAa,EAAGmC,EAAE,gBAAgB,CAAC,CAC1F,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAAC,CACL,EAEA,OAAO,sBAAwBvC,GCznB/B,IAAM0E,GAAkB,QAClBC,GAAkB,yEAAyED,EAAe,GAE1GE,GAAe,IAAM,CACvB,IAAMC,EAAO,CACT,CAAE,GAAI,MAAO,KAAM,UAAW,SAAU,kBAAmB,KAAM,eAAgB,SAAU,MAAO,SAAU,GAAM,IAAK,0BAA2B,MAAO,OAAQ,EACjK,CAAE,GAAI,UAAW,KAAM,UAAW,SAAU,cAAe,KAAM,iBAAkB,SAAU,UAAW,SAAU,GAAM,IAAK,GAAGF,EAAe,mBAAmBD,EAAe,iBAAkB,MAAO,MAAO,EACjN,CAAE,GAAI,QAAS,KAAM,QAAS,SAAU,cAAe,KAAM,gBAAiB,SAAU,UAAW,SAAU,GAAM,IAAK,GAAGC,EAAe,mBAAmBD,EAAe,WAAY,MAAO,MAAO,EACtM,CAAE,GAAI,QAAS,KAAM,QAAS,SAAU,cAAe,KAAM,eAAgB,SAAU,UAAW,SAAU,GAAM,IAAK,GAAGC,EAAe,mBAAmBD,EAAe,kBAAmB,MAAO,QAAS,EAC9M,CAAE,GAAI,MAAO,KAAM,MAAO,SAAU,gBAAiB,KAAM,eAAgB,SAAU,SAAU,SAAU,GAAO,IAAK,6CAA8C,MAAO,OAAQ,EAClL,CAAE,GAAI,UAAW,KAAM,UAAW,SAAU,cAAe,KAAM,iBAAkB,SAAU,SAAU,SAAU,GAAO,IAAK,mEAAoE,MAAO,OAAQ,EAChN,CAAE,GAAI,SAAU,KAAM,SAAU,SAAU,oBAAqB,KAAM,gBAAiB,SAAU,UAAW,SAAU,GAAO,IAAK,IAAK,MAAO,QAAS,EACtJ,CAAE,GAAI,OAAQ,KAAM,OAAQ,SAAU,oBAAqB,KAAM,cAAe,SAAU,UAAW,SAAU,GAAO,IAAK,IAAK,MAAO,MAAO,EAC9I,CAAE,GAAI,QAAS,KAAM,QAAS,SAAU,oBAAqB,KAAM,eAAgB,SAAU,UAAW,SAAU,GAAO,IAAK,IAAK,MAAO,KAAM,EAChJ,CAAE,GAAI,UAAW,KAAM,UAAW,SAAU,oBAAqB,KAAM,yBAA0B,SAAU,UAAW,SAAU,GAAO,IAAK,IAAK,MAAO,QAAS,CACrK,EAEMI,EAAkBC,GAAQ,CACxBA,EAAI,UAAU,OAAO,KAAKA,EAAI,IAAK,QAAQ,CACnD,EAEMC,EAAcH,EAAK,OAAOI,GAAKA,EAAE,WAAa,WAAaA,EAAE,WAAa,KAAK,EAC/EC,EAAaL,EAAK,OAAOI,GAAKA,EAAE,WAAa,QAAQ,EACrDE,EAAcN,EAAK,OAAOI,GAAKA,EAAE,WAAa,SAAS,EAEvDG,EAAW,YAEXC,EAAe,CACjB,MAAO,iBACP,KAAM,gBACN,KAAM,gBACN,OAAQ,kBACR,IAAK,eACL,MAAO,aACP,OAAQ,iBACZ,EAEMC,EAAiBP,GACnB,MAAM,cAAc,MAAO,CACvB,IAAKA,EAAI,GACT,UAAW,kBAAkBK,CAAQ,0DACzC,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,UACL,UAAW,GAAGL,EAAI,IAAI,yBAAyBA,EAAI,SAAWM,EAAaN,EAAI,KAAK,EAAI,eAAe,2HAC3G,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,UAAW,uKACf,EAAG,CACC,MAAM,cAAc,KAAM,CAAE,IAAK,OAAQ,UAAW,yCAA0C,EAAGA,EAAI,IAAI,EACzG,MAAM,cAAc,IAAK,CAAE,IAAK,WAAY,UAAW,6BAA8B,EAAGA,EAAI,QAAQ,EACpGA,EAAI,SACA,MAAM,cAAc,SAAU,CAC1B,IAAK,MACL,QAAS,IAAMD,EAAeC,CAAG,EACjC,UAAW,2GACf,EAAGA,EAAI,KAAO,MAAQ,SAAW,UAAU,EAE3C,MAAM,cAAc,OAAQ,CAAE,IAAK,SAAU,UAAW,mCAAoC,EAAG,aAAa,CACpH,CAAC,CACL,CAAC,EAGL,OAAO,MAAM,cAAc,MAAO,CAAE,UAAW,YAAa,EAAG,CAE3D,MAAM,cAAc,MAAO,CAAE,IAAK,SAAU,UAAW,qCAAsC,EAAG,CAC5F,MAAM,cAAc,KAAM,CAAE,IAAK,QAAS,UAAW,sCAAuC,EAAG,yBAAyB,EACxH,MAAM,cAAc,IAAK,CAAE,IAAK,WAAY,UAAW,6BAA8B,EAAG,iFAAiF,CAC7K,CAAC,EAGD,MAAM,cAAc,MAAO,CAAE,IAAK,cAAe,UAAW,oDAAqD,EAC7GC,EAAY,IAAIM,CAAa,CACjC,EAGA,MAAM,cAAc,MAAO,CAAE,IAAK,aAAc,UAAW,gCAAiC,EACxFJ,EAAW,IAAII,CAAa,CAChC,EAGA,MAAM,cAAc,MAAO,CAAE,IAAK,cAAe,UAAW,2BAA4B,EACpFH,EAAY,IAAIG,CAAa,CACjC,CACJ,CAAC,CACL,EAEA,OAAO,aAAeV,GCzFtB,IAAMW,GAAgB,IAAM,CACxB,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAClC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC5E,EAEA,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMF,EAAYC,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACTD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,CACpG,CACJ,EAAG,CAAC,CAAC,EAEL,IAAMC,EAAS,mBAETC,EAAe,yBACfC,EAAO,mEACPC,EAAO,kDAEPC,EAAU,iHAEVC,EAAW,CACb,CACI,GAAI,QACJ,KAAM,mBACN,KAAM,kBACN,WAAY,OACZ,IAAK,gCACL,KAAMC,EAAE,qBAAqB,EAC7B,KAAMA,EAAE,qBAAqB,EAC7B,MAAO,KACX,EACA,CACI,GAAI,OACJ,KAAM,WAKN,KAAM,qBACN,WAAY,OACZ,IAAK,wBACL,KAAMA,EAAE,wBAAwB,EAChC,KAAMA,EAAE,wBAAwB,EAChC,MAAO,MACX,CACJ,EAEMC,EAAM,CAACC,EAAOC,EAAMC,EAAQC,EAAIC,IAClC,MAAM,cAAc,MAAO,CACvB,UAAAA,EAAW,MAAOH,EAAM,OAAQA,EAAM,QAAS,YAAa,KAAM,OAClE,OAAAC,EAAQ,YAAaC,EAAI,cAAe,QAAS,eAAgB,QACjE,wBAAyB,CAAE,OAAQH,CAAM,CAC7C,CAAC,EAECK,EAAWC,GAAS,MAAM,cAAc,OAAQ,CAClD,IAAK,OACL,MAAO,CAAE,WAAYZ,EAAM,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,6BAA8B,WAAY,QAAS,CAC3S,EAAGY,CAAI,EAEDC,EAAe,GAAM,MAAM,cAAc,IAAK,CAChD,IAAK,EAAE,GACP,KAAM,EAAE,IACR,OAAQ,SACR,IAAK,sBACL,MAAO,CACH,KAAM,YAAa,SAAUnB,EAAW,OAAS,QACjD,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,sCAC/D,QAAS,iBAAkB,QAAS,OAAQ,cAAe,SAC3D,eAAgB,OAAQ,MAAO,UAC/B,WAAY,sFACZ,UAAW,QAAQ,EAAE,KAAK,2BAC9B,EACA,aAAeoB,GAAM,CAAEA,EAAE,cAAc,MAAM,UAAY,mBAAoBA,EAAE,cAAc,MAAM,YAAc,2BAA6B,EAC9I,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,UAAY,OAAQA,EAAE,cAAc,MAAM,YAAc,2BAA6B,CACtI,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,OAAQ,MAAO,CAAE,EAC7H,MAAM,cAAc,MAAO,CACvB,IAAK,EAAE,KAAM,IAAK,EAAE,KAKpB,QAAS,OAAQ,SAAU,QAC3B,MAAO,CAAE,OAAQ,EAAE,WAAY,MAAO,OAAQ,SAAU,QAAS,UAAW,UAAW,QAAS,OAAQ,CAC5G,CAAC,CACL,EACA,MAAM,cAAc,KAAM,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG,EAAE,IAAI,EACtK,MAAM,cAAc,IAAK,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,EAAE,IAAI,EAC/I,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,UAAW,OAAQ,WAAY,MAAO,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CAC7IH,EAAQ,EAAE,IAAI,CAClB,CAAC,CACL,CAAC,EAEKI,EAAa,MAAM,cAAc,IAAK,CACxC,IAAK,SACL,KAAMb,EACN,OAAQ,SACR,IAAK,sBACL,MAAO,CACH,KAAM,YAAa,SAAUR,EAAW,OAAS,QACjD,aAAc,OAAQ,WAAY,eAAgB,OAAQ,uCAC1D,QAAS,OAAQ,QAAS,OAAQ,cAAe,SAAU,eAAgB,gBAC3E,eAAgB,OAAQ,MAAO,UAC/B,WAAY,6CACZ,UAAW,oCACf,EACA,aAAeoB,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,iCAAmC,EAC9F,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,2BAA6B,CAC5F,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,EAAG,CACvC,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,mCAAoC,OAAQ,6CAA8C,aAAc,MAAO,CACpO,EAAGT,EAAI,iHAAkH,GAAIN,EAAc,GAAG,CAAC,EAC/I,MAAM,cAAc,KAAM,CAAE,IAAK,QAAS,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGK,EAAE,sBAAsB,CAAC,EAC1L,MAAM,cAAc,IAAK,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGA,EAAE,qBAAqB,CAAC,CAC5J,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,MACL,MAAO,CACH,UAAW,OAAQ,MAAO,OAAQ,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,OAC/G,QAAS,YAAa,aAAc,OAAQ,OAAQ,OAAQ,WAAYL,EAAc,MAAO,sBAC7F,WAAYE,EAAM,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAC7D,UAAW,8CAA+C,UAAW,aACrE,WAAY,iFAChB,CACJ,EAAG,CACCG,EAAE,oBAAoB,EACtBC,EAAI,oCAAqC,GAAI,eAAgB,IAAK,eAAe,CACrF,CAAC,CACL,CAAC,EAEKC,EAAQ,MAAM,cAAc,MAAO,CACrC,IAAK,QACL,MAAO,CAAE,SAAU,SAAU,OAAQ,SAAU,QAASZ,EAAW,SAAW,QAAS,CAC3F,EAAG,CAEC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,aAAc,MAAO,CAAE,EAAG,CACzE,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,WAAYM,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,MAAO,CACtK,EAAGI,EAAE,kBAAkB,CAAC,EAGxB,MAAM,cAAc,KAAM,CACtB,IAAK,KACL,MAAO,CAAE,OAAQ,EAAG,SAAUV,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,SAAU,WAAY,KAAM,MAAO,kBAAmB,CACpJ,EAAGU,EAAE,kBAAkB,CAAC,CAC5B,CAAC,EAGD,MAAM,cAAc,MAAO,CACvB,IAAK,QACL,MAAO,CAAE,QAAS,OAAQ,IAAK,OAAQ,WAAY,UAAW,SAAU,MAAO,CACnF,EAAG,CACC,GAAGD,EAAS,IAAIU,CAAW,EAC3BE,CACJ,CAAC,CACL,CAAC,EAED,OAAO,MAAM,cAAc,UAAW,CAClC,MAAO,CACH,MAAO,OAAQ,MAAO,mBAAoB,WAAYd,EACtD,QAASP,EAAW,SAAW,SAC/B,WAAY,4GAChB,CACJ,EAAG,CACC,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OAAQ,kGAAmG,CAAE,CAAC,EACnLY,CACJ,CAAC,CACL,EAEA,OAAO,cAAgBb,GC9KvB,IAAMuB,GAAsB,IAAM,CAChC,GAAM,CAACC,EAAQC,CAAS,EAAI,MAAM,SAAS,CAAC,EACtC,CAACC,EAAUC,CAAW,EAAI,MAAM,SACpC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC1E,EAEA,MAAM,UAAU,IAAM,CACpB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMF,EAAYC,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACXD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,CAClG,CACF,EAAG,CAAC,CAAC,EAEL,IAAMC,EAAS,mBAGTC,EAAe,yBACfC,EAAY,4GACZC,EAAY,kCACZC,EAAU,eACVC,EAAU,4BACVC,EAAO,mEACPC,EAAO,kDAEPC,EAAS,CACb,CACE,IAAK,KACL,MAAO,CAACC,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,qGACR,EACA,CACE,IAAK,KACL,MAAO,CAACD,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,uJACR,EACA,CACE,IAAK,KACL,MAAO,CAACD,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,sGACR,EACA,CACE,IAAK,KACL,MAAO,CAACD,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,sFACR,EACA,CACE,IAAK,KACL,MAAO,CAACD,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,wLACR,CACF,EAEMC,EAAM,CAACC,EAAOC,EAAMC,EAAQC,IAChC,MAAM,cAAc,MAAO,CACzB,MAAOF,EAAM,OAAQA,EAAM,QAAS,YAAa,KAAM,OACvD,OAAAC,EAAQ,YAAaC,EAAI,cAAe,QAAS,eAAgB,QACjE,wBAAyB,CAAE,OAAQH,CAAM,CAC3C,CAAC,EAEGI,EAAMC,GACVtB,EAAWuB,IAAOA,EAAID,EAAOT,EAAO,QAAUA,EAAO,MAAM,EAEvDW,EAAS,CAACC,EAAKC,EAASC,IAC5B,MAAM,cAAc,SAAU,CAC5B,IAAAF,EAAK,QAAAC,EAAS,aAAcD,EAAK,UAAW,gBAC5C,MAAO,CACL,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAC5D,aAAc,MAAO,OAAQ,qCAC7B,WAAY,6BAA8B,MAAO,mBAAoB,OAAQ,UAC7E,WAAY,kCACd,EACA,aAAeG,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAcpB,EAAWoB,EAAE,cAAc,MAAM,MAAQvB,CAAQ,EAC5G,aAAeuB,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,2BAA4BA,EAAE,cAAc,MAAM,MAAQ,kBAAoB,CAC3I,EAAGZ,EAAIW,EAAM,GAAI,eAAgB,GAAG,CAAC,EAEjCE,EAAOC,GACX,MAAM,cAAc,OAAQ,CAC1B,IAAKA,EACL,MAAO,CACL,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WACnE,aAAc,MAAO,OAAQ,sCAC7B,WAAY,6BAA8B,WAAYnB,EACtD,SAAU,SAAU,WAAY,IAAK,MAAO,kBAC9C,CACF,EAAG,CACD,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,uBAAwB,CAAE,CAAC,EAC5ImB,CACF,CAAC,EAEGC,EAAmBC,GACvB,MAAM,cAAc,MAAO,CACzB,IAAK,MACL,MAAO,CACL,OAAQ,OAAQ,QAAS,OAAQ,cAAe,SAChD,eAAgB/B,EAAW,aAAe,gBAC1C,IAAKA,EAAW,OAAS,EACzB,QAASA,EAAW,YAAc,YAClC,SAAUA,EAAW,OAAS,QAC9B,UAAW,oCACb,CACF,EAAG,CACD,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,eAAgB,CAAE,EAAG,CAC5H,MAAM,cAAc,MAAO,CACzB,IAAK,KACL,MAAO,CACL,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAClF,WAAY,mCAAoC,OAAQ,2CAC1D,CACF,EAAGe,EAAIgB,EAAE,KAAM,GAAI1B,EAAc,GAAG,CAAC,EACrC,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYK,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGqB,EAAE,GAAG,CAC5I,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,EAAG,CACzC,MAAM,cAAc,KAAM,CACxB,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU/B,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,SAAU,WAAY,KAAM,MAAO,kBAAmB,CACrK,EAAG,CAAC+B,EAAE,MAAM,CAAC,EAAG,MAAM,cAAc,KAAM,CAAE,IAAK,IAAK,CAAC,EAAGA,EAAE,MAAM,CAAC,CAAC,CAAC,EACrE,MAAM,cAAc,IAAK,CACvB,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,SAAU,OAAQ,CAChH,EAAGA,EAAE,IAAI,CACX,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,IAAK,KAAM,CAAE,EAAGA,EAAE,KAAK,IAAIH,CAAG,CAAC,CACvH,CAAC,EAEGI,EAAoBD,GAAM/B,EAC5B,MAAM,cAAc,MAAO,CACzB,IAAK,MACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,WAAY,CACpF,EAAG,CACD,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYU,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,sBAAuB,CAAE,EAAGqB,EAAE,GAAG,EAC9I,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGA,EAAE,SAAS,CACzJ,CAAC,EACD,MAAM,cAAc,MAAO,CACzB,IAAK,MACL,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,gBAAiB,QAAS,QAAS,CAC9J,EAAG,CACD,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYrB,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,sBAAuB,CAAE,EAAGqB,EAAE,GAAG,EAC9I,MAAM,cAAc,OAAQ,CAC1B,IAAK,IACL,MAAO,CAAE,YAAa,cAAe,UAAW,iBAAkB,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,mBAAoB,WAAY,QAAS,CAChL,EAAGA,EAAE,SAAS,EACdhB,EAAIgB,EAAE,KAAM,GAAI,uBAAwB,GAAG,CAC7C,CAAC,EAECE,EAASrB,EAAO,IAAI,CAACmB,EAAGG,IAAM,CAClC,IAAMC,EAAWrC,IAAWoC,EAC5B,OAAO,MAAM,cAAc,MAAO,CAChC,IAAKA,EACL,QAAS,IAAMnC,EAAUmC,CAAC,EAG1B,aAAeP,GAAM,CAAOQ,IAAUR,EAAE,cAAc,MAAM,OAAS,mBAAoB,EACzF,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,OAAS,MAAQ,EAC9D,MAAO,CACL,KAAM3B,EAAW,OAAUmC,EAAW,IAAM,EAC5C,SAAUnC,EAAW,OAAS,OAC9B,SAAU,WACV,aAAc,OACd,SAAU,SACV,OAAQ,UACR,WAAYmC,EAAW7B,EAAYE,EACnC,OAAQ,cAAgB2B,EAAW5B,EAAYE,GAC/C,MAAO,mBACP,WAAY,iGACd,CACF,EAAG0B,EAAWL,EAAgBC,CAAC,EAAIC,EAAiBD,CAAC,CAAC,CACxD,CAAC,EAEKf,EAAQ,MAAM,cAAc,MAAO,CACvC,IAAK,QACL,MAAO,CACL,SAAU,SAAU,OAAQ,SAC5B,QAAShB,EAAW,SAAW,QACjC,CACF,EAAG,CAED,MAAM,cAAc,MAAO,CACzB,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,WAAY,WAAY,eAAgB,gBAAiB,IAAK,OAAQ,aAAc,MAAO,CACvH,EAAG,CACD,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,EAAG,CAC5C,MAAM,cAAc,MAAO,CACzB,IAAK,UACL,MAAO,CAAE,WAAYU,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,MAAO,CACpK,EAAGG,EAAE,gBAAgB,CAAC,EACtB,MAAM,cAAc,KAAM,CACxB,IAAK,KACL,MAAO,CAAE,OAAQ,EAAG,SAAUb,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,SAAU,WAAY,KAAM,MAAO,kBAAmB,CAClJ,EAAGa,EAAE,gBAAgB,CAAC,CACxB,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,KAAM,MAAO,CAAE,EAAG,CACtHU,EAAO,OAAQ,IAAMH,EAAG,EAAE,EAAG,4BAA4B,EACzDG,EAAO,OAAQ,IAAMH,EAAG,CAAC,EAAG,0BAA0B,CACxD,CAAC,CACH,CAAC,EAGD,MAAM,cAAc,MAAO,CACzB,IAAK,YACL,MAAO,CACL,QAAS,OACT,cAAepB,EAAW,SAAW,MACrC,IAAKA,EAAW,OAAS,OACzB,OAAQA,EAAW,OAAS,OAC9B,CACF,EAAGiC,CAAM,CACX,CAAC,EAGD,OAAO,MAAM,cAAc,UAAW,CACpC,MAAO,CACL,MAAO,OAAQ,MAAO,mBAAoB,WAAYtB,EACtD,QAASX,EAAW,SAAW,SAC/B,WAAY,0GACd,CACF,EAAG,CACD,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OAAQ,kGAAmG,CAAE,CAAC,EACnLgB,CACF,CAAC,CACH,EAGA,OAAO,oBAAsBnB,GC9O7B,SAASuC,IAAU,CACf,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAClC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC5E,EAEA,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMF,EAAYC,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACTD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,CACpG,CACJ,EAAG,CAAC,CAAC,EAEL,IAAMC,EAAO,mEACPC,EAAO,kDAEPC,EAAO,CACT,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,SAAU,EACxC,CAAE,EAAG,OAAQ,EAAG,MAAO,OAAQ,KAAM,EACrC,CAAE,EAAG,OAAQ,EAAG,MAAO,OAAQ,SAAU,EACzC,CAAE,EAAG,OAAQ,EAAG,MAAO,OAAQ,UAAW,EAC1C,CAAE,EAAG,OAAQ,EAAG,MAAO,OAAQ,UAAW,CAC9C,EAAE,IAAKC,IAAO,CACV,GAAGA,EAGH,MAAOC,EAAE,WAAWD,EAAE,CAAC,QAAQ,EAC/B,IAAKC,EAAE,WAAWD,EAAE,CAAC,MAAM,EAC3B,KAAMC,EAAE,WAAWD,EAAE,CAAC,OAAO,EAC7B,SAAUE,GAAM,WAAWF,EAAE,CAAC,WAAW,CAC7C,EAAE,EAKIG,EAAO,CACT,SAAU,CAAE,MAAO,wBAAyB,KAAM,iCAAkC,EACpF,QAAS,CAAE,MAAO,yBAA0B,KAAM,kCAAmC,EACrF,IAAK,CAAE,MAAO,2BAA4B,KAAM,2BAA4B,EAC5E,QAAS,CAAE,MAAO,mBAAoB,KAAM,2BAA4B,EACxE,SAAU,CAAE,MAAO,mBAAoB,KAAM,2BAA4B,CAC7E,EAEM,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,CAAC,CAAC,EACnCC,EAAUC,GAAOH,EAAKG,CAAC,IAAM,OAAYR,EAAKQ,CAAC,EAAE,SAAW,UAAYH,EAAKG,CAAC,EAC9EC,EAAUD,GAAMF,EAASI,IAAO,CAAE,GAAGA,EAAG,CAACF,CAAC,EAAG,CAACD,EAAOC,CAAC,CAAE,EAAE,EAE1DG,EAAQX,EAAK,OACbY,EAAUZ,EAAK,OAAQC,GAAMA,EAAE,SAAW,YAAcA,EAAE,SAAW,SAAS,EAAE,OAChFY,EAAWF,EAAQC,EACnBE,GAAcF,EAAUD,EAAQ,KAAK,QAAQ,CAAC,EAAI,IAMlD,CAACI,EAAgBC,CAAa,EAAId,EAAE,mBAAoB,CAAE,MAAAS,CAAM,CAAC,EAAE,MAAM,WAAW,EAEpFM,EAAcC,GACZA,IAAW,WAEP,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,iGAAkG,OAAQ,2CAA4C,OAAQ,CAAE,GAC9U,oBAAC,OAAI,MAAM,KAAK,OAAO,KAAK,QAAQ,YAAY,KAAK,OAAO,OAAO,wBAAwB,YAAY,MAAM,cAAc,QAAQ,eAAe,SAAQ,oBAAC,QAAK,EAAE,kBAAkB,CAAE,CAC1L,EAGJA,IAAW,UAEP,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,iGAAkG,OAAQ,mCAAoC,OAAQ,EAAG,UAAW,gCAAiC,GACnX,oBAAC,QAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,wBAAyB,EAAG,CAC7G,EAGJA,IAAW,MAEP,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,uGAAwG,OAAQ,8CAA+C,OAAQ,CAAE,GACvV,oBAAC,OAAI,MAAM,KAAK,OAAO,KAAK,QAAQ,YAAY,KAAK,OAAO,OAAO,2BAA2B,YAAY,MAAM,cAAc,QAAQ,eAAe,SAAQ,oBAAC,QAAK,EAAE,sBAAsB,CAAE,CACjM,EAKJ,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,eAAgB,OAAQ,OAAOA,IAAW,WAAa,SAAW,OAAO,6BAA8B,OAAQ,CAAE,GAC/R,oBAAC,QAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYd,EAAKc,CAAM,EAAE,KAAM,EAAG,CACvG,EAIR,OACI,oBAAC,WAAQ,MAAO,CAAE,MAAO,OAAQ,MAAO,mBAAoB,WAAYnB,EAAM,QAASL,EAAW,SAAW,SAAU,WAAY,2GAA4G,GAC3O,oBAAC,SAAM,wBAAyB,CAAE,OAAQ,0OAA2O,EAAG,EAExR,oBAAC,OAAI,MAAO,CAAE,SAAU,SAAU,OAAQ,SAAU,QAASA,EAAW,SAAW,QAAS,GAGxF,oBAAC,OAAI,MAAO,CAAE,aAAc,MAAO,GAC/B,oBAAC,OAAI,MAAO,CAAE,WAAYI,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,MAAO,GAAII,EAAE,iBAAiB,CAAE,EAChM,oBAAC,MAAG,MAAO,CAAE,OAAQ,WAAY,SAAUR,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,OAAQ,WAAY,KAAM,MAAO,kBAAmB,GAAIQ,EAAE,iBAAiB,CAAE,EACpL,oBAAC,KAAE,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,SAAU,OAAQ,GAAIA,EAAE,oBAAoB,CAAE,CACzI,EAGA,oBAAC,OAAI,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,OAAQ,QAAS,YAAa,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,sCAAuC,aAAc,MAAO,GACjO,oBAAC,OAAI,MAAO,CAAE,WAAYJ,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,QAAS,GAAIiB,EAAe,oBAAC,QAAK,MAAO,CAAE,MAAO,iBAAkB,GAAIH,CAAQ,EAAQI,CAAc,EAChN,oBAAC,OAAI,MAAO,CAAE,KAAM,YAAa,SAAU,QAAS,OAAQ,MAAO,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,sCAAuC,SAAU,QAAS,GACxL,oBAAC,OAAI,MAAO,CAAE,OAAQ,OAAQ,MAAOF,EAAY,WAAY,2DAA4D,EAAG,CAChI,EACA,oBAAC,OAAI,MAAO,CAAE,WAAYhB,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,WAAY,QAAS,GAAII,EAAE,mBAAoB,CAAE,SAAAW,CAAS,CAAC,CAAE,CACnN,EAGCb,EAAK,IAAI,CAACC,EAAGO,IAAM,CAChB,IAAMW,EAAOf,EAAKH,EAAE,MAAM,EACpBmB,EAASb,EAAOC,CAAC,EACjBa,EAAUb,EAAIG,EAAQ,EAC5B,OACI,oBAAC,OAAI,IAAKH,EAAG,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,oBAAqB,WAAY,aAAc,MAAO,GAG/G,oBAAC,OAAI,MAAO,CAAE,SAAU,UAAW,GAC9Ba,GAAW,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,OAAQ,oBAAqB,MAAO,MAAO,WAAYF,EAAK,IAAK,EAAG,EAC1JF,EAAWhB,EAAE,MAAM,CACxB,EAGA,oBAAC,OAAI,MAAO,CAAE,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,aAAaA,EAAE,SAAW,UAAY,mCAAqC,2BAA2B,GAAI,SAAU,QAAS,GACtM,oBAAC,OACG,QAAS,IAAMQ,EAAOD,CAAC,EACvB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAKd,EAAW,OAAS,OAAQ,QAASA,EAAW,YAAc,YAAa,OAAQ,UAAW,WAAY,sBAAuB,EACtL,aAAe4B,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,4BAA8B,EACxF,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,aAAe,GAEzE,oBAAC,OAAI,MAAO,CAAE,KAAM,OAAQ,SAAU,OAAQ,UAAW,SAAU,QAAS,WAAY,aAAc,MAAO,WAAY,oBAAqB,OAAQ,sCAAuC,WAAYxB,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAOG,EAAE,SAAW,UAAY,mBAAqB,kBAAmB,GAAIA,EAAE,CAAE,EAClU,oBAAC,OAAI,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,GAC/B,oBAAC,OAAI,MAAO,CAAE,SAAUP,EAAW,SAAW,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,GAAIO,EAAE,KAAM,EACrI,CAACP,GAAY,oBAAC,OAAI,MAAO,CAAE,UAAW,MAAO,SAAU,SAAU,MAAO,kBAAmB,GAAIO,EAAE,GAAI,CAC1G,EACA,oBAAC,OAAI,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAKP,EAAW,MAAQ,MAAO,GAC7F,CAACA,GAAY,oBAAC,QAAK,MAAO,CAAE,WAAYI,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,SAAU,SAAU,OAAQ,UAAW,KAAM,GAAIG,EAAE,IAAK,EACjL,oBAAC,QAAK,MAAO,CAAE,MAAO,mBAAoB,QAAS,cAAe,WAAY,0CAA2C,UAAWmB,EAAS,iBAAmB,cAAe,GAC3K,oBAAC,OAAI,MAAM,KAAK,OAAO,KAAK,QAAQ,YAAY,KAAK,OAAO,OAAO,eAAe,YAAY,MAAM,cAAc,QAAQ,eAAe,SAAQ,oBAAC,QAAK,EAAE,eAAe,CAAE,CAC9K,CACJ,CACJ,EACCA,GACG,oBAAC,OAAI,MAAO,CAAE,QAAS,qBAAsB,UAAW,qCAAsC,GAC1F,oBAAC,OAAI,MAAO,CAAE,WAAYtB,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,QAAS,aAAc,OAAQ,WAAY,OAAQ,UAAW,qCAAsC,GAAII,EAAE,qBAAqB,CAAE,EAC9Q,oBAAC,OAAI,MAAO,CAAE,QAAS,OAAQ,oBAAqBR,EAAW,MAAQ,UAAW,IAAK,WAAY,GAC9FO,EAAE,SAAS,IAAI,CAACsB,EAAGC,IAChB,oBAAC,OAAI,IAAKA,EAAI,MAAO,CAAE,QAAS,OAAQ,WAAY,aAAc,IAAK,MAAO,GAC1E,oBAAC,QAAK,MAAO,CAAE,KAAM,OAAQ,UAAW,MAAO,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYL,EAAK,KAAM,EAAG,EAC3H,oBAAC,QAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,GAAII,CAAE,CACxF,CACH,CACL,CACJ,CAER,CACJ,CAER,CAAC,CAEL,CACJ,CAER,CAEA,OAAO,QAAU9B,GC1KjB,IAAMgC,GAAU,CACZ,CAAE,GAAI,OAAQ,IAAK,OAAQ,KAAM,cAAe,MAAO,MAAO,QAAS,oCAAqC,EAC5G,CAAE,GAAI,MAAO,IAAK,MAAO,KAAM,UAAW,MAAO,KAAM,QAAS,4CAA6C,EAC7G,CAAE,GAAI,MAAO,IAAK,MAAO,KAAM,WAAY,MAAO,KAAM,QAAS,4CAA6C,CAClH,EAEMC,GAAQC,GAAO,kBAAkBA,CAAE,OAMnCC,GAAc,qBACdC,GAAe,6BACfC,GAAgB,IAEhBC,GAAe,IAAM,CACvB,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAClC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC5E,EACM,CAACC,EAAKC,CAAM,EAAI,MAAM,SAAS,CAAC,EAChC,CAACC,EAAQC,CAAS,EAAI,MAAM,SAAS,EAAK,EAG1C,CAACC,EAAOC,CAAQ,EAAI,MAAM,SAAS,CAAC,EACpCC,EAAa,MAAM,OAAO,IAAI,EAC9BC,EAAa,MAAM,OAAO,IAAI,EAC9BC,EAAY,MAAM,OAAO,IAAI,EAEnC,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMX,EAAYU,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACTD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,EAChG,aAAaF,EAAU,OAAO,CAClC,CACJ,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CAClB,IAAIG,EAAQ,KACNC,EAAa,IAAM,CACrB,IAAMC,EAAK,OAAOnB,EAAW,EAC7B,OAAOA,EAAW,EAAI,EAClB,GAACmB,GAAM,KAAK,IAAI,EAAIA,EAAKjB,MAC7B,aAAae,CAAK,EAElBA,EAAQ,WAAW,IAAM,CACrB,IAAMG,EAAKP,EAAW,QACtB,GAAI,CAACO,EAAI,OACT,IAAMC,GAAS,OAAO,WAAW,kCAAkC,EAAE,QACrED,EAAG,eAAe,CAAE,SAAUC,GAAS,OAAS,SAAU,MAAO,QAAS,CAAC,CAC/E,EAAG,GAAG,EACV,EACA,OAAAH,EAAW,EACX,SAAS,iBAAiBjB,GAAciB,CAAU,EAC3C,IAAM,CACT,SAAS,oBAAoBjB,GAAciB,CAAU,EACrD,aAAaD,CAAK,CACtB,CACJ,EAAG,CAAC,CAAC,EAEL,IAAMK,EAAMzB,GAAQS,CAAG,EAEjBiB,EAAQC,GAAM,CAChB,IAAMC,GAAQD,EAAI3B,GAAQ,QAAUA,GAAQ,OACxC4B,IAASnB,IACbK,EAASa,EAAIlB,EAAM,EAAI,EAAE,EACzBC,EAAOkB,CAAI,EACXhB,EAAU,EAAK,EACnB,EAMMiB,EAAgBC,GAAM,CACxB,IAAMC,EAAID,EAAE,QAAQ,CAAC,EACrBf,EAAW,QAAU,CAAE,EAAGgB,EAAE,QAAS,EAAGA,EAAE,OAAQ,CACtD,EACMC,EAAcF,GAAM,CACtB,IAAMG,EAAQlB,EAAW,QAEzB,GADAA,EAAW,QAAU,KACjB,CAACkB,EAAO,OACZ,IAAMF,EAAID,EAAE,eAAe,CAAC,EACtBI,EAAKH,EAAE,QAAUE,EAAM,EACvBE,GAAKJ,EAAE,QAAUE,EAAM,EAC7B,GAAI,KAAK,IAAIC,CAAE,EAAI,IAAM,KAAK,IAAIA,CAAE,EAAI,KAAK,IAAIC,EAAE,EAAI,IAAK,OAC5D,IAAMC,EAAUC,GAAM,EAAIH,EAAK,EAAIA,EAAK,EACxCR,EAAKjB,GAAO2B,EAAU,EAAI,GAAG,CACjC,EAEME,EAAO,SAAY,CACrB,GAAI,CACA,MAAM,UAAU,UAAU,UAAUb,EAAI,OAAO,CACnD,MAAY,CACR,IAAMc,EAAK,SAAS,cAAc,UAAU,EAC5CA,EAAG,MAAQd,EAAI,QACf,SAAS,KAAK,YAAYc,CAAE,EAC5BA,EAAG,OAAO,EACV,GAAI,CAAE,SAAS,YAAY,MAAM,CAAG,MAAY,CAAC,CACjDA,EAAG,OAAO,CACd,CACA3B,EAAU,EAAI,EACd,aAAaK,EAAU,OAAO,EAC9BA,EAAU,QAAU,WAAW,IAAML,EAAU,EAAK,EAAG,IAAI,CAC/D,EAEM4B,EAAO,kDACPC,EAAO,mEACPC,EAAQ,CACV,aAAc,OAAQ,WAAY,eAAgB,OAAQ,qCAC9D,EAEMC,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OAAQ,KAAM,UACnB,MAAO,CAAE,GAAGD,EAAO,QAAS,OAAQ,IAAK,MAAO,QAAS,MAAO,aAAc,MAAO,CACzF,EAAG1C,GAAQ,IAAI,CAAC4C,EAAGjB,IAAM,CACrB,IAAMkB,EAAKlB,IAAMlB,EACjB,OAAO,MAAM,cAAc,SAAU,CACjC,IAAKmC,EAAE,GAAI,KAAM,SAAU,KAAM,MAAO,gBAAiBC,EACzD,QAAS,IAAMnB,EAAKC,CAAC,EACrB,MAAO,CACH,KAAM,QAAS,SAAU,EAAG,QAAS,cAAe,WAAY,SAAU,eAAgB,SAC1F,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,OAAQ,OAAQ,UAChF,WAAYa,EAAM,SAAU,OAAQ,WAAY,IAAK,WAAY,WACjE,WAAYK,EAAK,sBAAwB,cACzC,MAAOA,EAAK,mBAAqB,mBACjC,UAAWA,EAAK,mDAAqD,MACzE,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,MAAO,CAAE,EAAG,CACrH,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,IAAK5C,GAAK2C,EAAE,EAAE,EAAG,IAAK,GAAI,MAAO,GAAI,OAAQ,GAAI,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,OAAQ,MAAO,CAAE,CAAC,EACvJA,EAAE,OAAS,MAAM,cAAc,MAAO,CAClC,IAAK,QAAS,IAAK3C,GAAK2C,EAAE,KAAK,EAAG,IAAK,GAAI,MAAO,GAAI,OAAQ,GAC9D,MAAO,CACH,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAClG,OAAQ,kCAAmC,WAAY,qBAC3D,CACJ,CAAC,CACL,CAAC,EACDA,EAAE,GACN,CAAC,CACL,CAAC,CAAC,EAEIE,EAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,OAAQ,KAAM,SAAU,QAASR,EACtC,MAAO,CACH,KAAM,OAAQ,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,YACjF,aAAc,OAAQ,WAAYE,EAAM,SAAU,SAAU,WAAY,IAAK,OAAQ,UACrF,WAAY,4BAA6B,MAAO,mBAChD,OAAQ,qCAAsC,WAAY,UAC9D,EACA,aAAeV,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,2BAA6B,EACvF,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,2BAA6B,CAC3F,EAAG,CACCnB,EACM,MAAM,cAAc,MAAO,CACzB,IAAK,KAAM,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,wBAC9E,YAAa,IAAK,cAAe,QAAS,eAAgB,QAC1D,wBAAyB,CAAE,OAAQ,oCAAqC,CAC5E,CAAC,EACC,MAAM,cAAc,MAAO,CACzB,IAAK,KAAM,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAC9E,YAAa,EAAG,cAAe,QAAS,eAAgB,QACxD,wBAAyB,CAAE,OAAQ,wFAAyF,CAChI,CAAC,EACL,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,YAAa,QAAS,EAAGA,EAASoC,EAAE,eAAe,EAAIA,EAAE,aAAa,CAAC,CACnH,CAAC,EAEKC,EAAe,MAAM,cAAc,MAAO,CAC5C,IAAK,OACL,MAAO,CAAE,GAAGN,EAAO,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,kBAAmB,CACvG,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvE,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,aAAc,KAAM,CAAE,EAAGK,EAAE,cAActB,EAAI,EAAE,EAAE,CAAC,EACpK,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAOA,EAAI,QAAS,IAAK,MACnC,MAAO,CAAE,WAAYgB,EAAM,SAAU,OAAQ,MAAO,mBAAoB,cAAe,QAAS,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CACvK,EAAGhB,EAAI,QAAQ,MAAM,EAAG,CAAC,EAAI,SAAMA,EAAI,QAAQ,MAAM,EAAE,CAAC,CAC5D,CAAC,EACDqB,CACJ,CAAC,EAEKG,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,UAAW,OAAQ,SAAU,OAAQ,MAAO,kBAAmB,CAC/H,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,yBAC7E,YAAa,EAAG,cAAe,QAAS,eAAgB,QAAS,MAAO,CAAE,KAAM,MAAO,EACvF,wBAAyB,CAAE,OAAQ,+DAAgE,CACvG,CAAC,EACDF,EAAE,eAAetB,EAAI,EAAE,EAAE,CAC7B,CAAC,EAEKyB,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CAAE,KAAM,YAAa,SAAU,EAAG,QAAS3C,EAAW,gBAAkB,OAAQ,QAAS,OAAQ,cAAe,QAAS,CACpI,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,WAAYkC,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,MAAO,CACtK,EAAGM,EAAE,gBAAgB,CAAC,EACtB,MAAM,cAAc,KAAM,CACtB,IAAK,QACL,MAAO,CAAE,OAAQ,WAAY,SAAUxC,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAC3J,EAAGwC,EAAE,cAAc,CAAC,EACpB,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAC9F,EAAGA,EAAE,oBAAoB,CAAC,EAC1BJ,EACAK,EACAC,CACJ,CAAC,EAGKE,EAAUd,GAAM,EAAI,GAAK,EACzBe,EAAYvC,IAAU,EAAI,OAC1B,GAAGA,EAAQsC,EAAU,EAAI,UAAY,WAAW,iCAEhDE,EAAQ,MAAM,cAAc,MAAO,CACrC,IAAK,QACL,aAAAxB,EAAc,WAAAG,EACd,MAAO,CACH,SAAU,WAAY,MAAO,QAAS,OAAQ,QAAS,QAAS,OAAQ,aAAc,OAAQ,WAAY,OAC1G,UAAW,0EACX,OAAQ,sCAAuC,SAAU,SAAU,YAAa,QAAS,WAAY,MACzG,CACJ,EAAG,MAAM,cAAc,MAAO,CAC1B,IAAKP,EAAI,GACT,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,UAAW2B,CAAU,CACvF,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,KAAM,IAAK,qBAAqB3B,EAAI,EAAE,OAAQ,IAAKsB,EAAE,eAAgB,CAAE,KAAMtB,EAAI,IAAK,CAAC,EAC5F,MAAO,IAAK,OAAQ,IAAK,UAAW,GACpC,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,OAAQ,OAAQ,eAAgB,WAAY,CAC1F,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,SAAU,WAAY,KAAM,MAAO,IAAK,MAAO,UAAW,uBAAwB,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAC9M,EAAG,MAAM,cAAc,MAAO,CAAE,IAAKxB,GAAKwB,EAAI,EAAE,EAAG,IAAK,GAAI,MAAO,GAAI,OAAQ,GAAI,UAAW,GAAO,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,OAAQ,MAAO,CAAE,CAAC,CAAC,CACtK,CAAC,CAAC,EAGI6B,EAAO/C,GAAY,MAAM,cAAc,MAAO,CAChD,IAAK,OAAQ,cAAe,GAC5B,MAAO,CAAE,QAAS,OAAQ,eAAgB,SAAU,IAAK,MAAO,UAAW,MAAO,CACtF,EAAGP,GAAQ,IAAI,CAAC4C,EAAGjB,IAAM,MAAM,cAAc,OAAQ,CACjD,IAAKiB,EAAE,GACP,MAAO,CACH,MAAOjB,IAAMlB,EAAM,OAAS,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,WACnF,WAAYkB,IAAMlB,EAAM,yBAA2B,2BACvD,CACJ,CAAC,CAAC,CAAC,EAEG8C,EAAQ,MAAM,cAAc,MAAO,CACrC,IAAK,QACL,MAAO,CAAE,KAAM,WAAY,SAAUhD,EAAW,EAAI,QAAS,OAAQ,SAAU,QAASA,EAAW,iBAAmB,OAAQ,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,QAAS,CAC3N,EAAG,CAAC8C,EAAOC,CAAI,CAAC,EAEVE,GAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CACH,MAAO,OAAQ,SAAU,SAAU,SAAU,WAAY,SAAU,SAAU,aAAc,OAC3F,WAAY,iHACZ,OAAQ,sCAAuC,QAAS,OAAQ,SAAU,OAAQ,WAAY,UAC9F,UAAW,oCACf,CACJ,EAAG,CACCN,EACAK,CACJ,CAAC,EAED,OAAO,MAAM,cAAc,UAAW,CAClC,GAAI,SAAU,IAAKvC,EACnB,MAAO,CACH,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SACtE,WAAY,eAAgB,MAAO,mBAAoB,WAAYwB,EACnE,QAASjC,EAAW,YAAc,WACtC,CACJ,EAAG,CACC,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OAAQ,mXAGoB,CAAE,CAAC,EACpGiD,EACJ,CAAC,CACL,EAEAlD,GAAa,YAAcH,GAC3BG,GAAa,aAAeF,GAE5B,OAAO,aAAeE,GC5StB,IAAMmD,GAAe,IAAM,CACvB,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAClC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC5E,EAEA,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMF,EAAYC,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACTD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,CACpG,CACJ,EAAG,CAAC,CAAC,EAEL,IAAMC,EAAS,mBAETC,EAAe,yBACfC,EAAO,kDAEPC,EAAY,mDACZC,EAAc,kCAEdC,EAAY,MAAM,cAAc,IAAK,CACvC,IAAK,KACL,KAAMF,EACN,OAAQ,SACR,IAAK,sBACL,MAAO,CACH,QAAS,cAAe,WAAY,SAAU,IAAK,OAAQ,QAAS,YACpE,aAAc,OAAQ,WAAYF,EAAc,MAAO,sBAAuB,eAAgB,OAC9F,SAAU,SAAU,WAAY,IAAK,cAAe,SACpD,UAAW,8CAA+C,WAAY,SACtE,WAAY,kCAChB,EACA,aAAeK,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,sBAAuBA,EAAE,cAAc,MAAM,UAAY,kBAAoB,EACvI,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAaL,EAAcK,EAAE,cAAc,MAAM,UAAY,MAAQ,CACtH,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,eAC7D,wBAAyB,CAAE,OAAQ,ilBAAklB,CACznB,CAAC,EACDC,EAAE,kBAAkB,CACxB,CAAC,EAEKC,EAAc,MAAM,cAAc,IAAK,CACzC,IAAK,KACL,KAAMJ,EACN,IAAK,sBACL,MAAO,CACH,QAAS,cAAe,WAAY,SAAU,IAAK,OAAQ,QAAS,YACpE,aAAc,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,eAAgB,OAC1G,SAAU,SAAU,WAAY,IAAK,cAAe,SACpD,OAAQ,qCAAsC,WAAY,SAC1D,WAAY,kCAChB,EACA,aAAeE,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,4BAA6BA,EAAE,cAAc,MAAM,WAAa,2BAA6B,EACxJ,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,2BAA4BA,EAAE,cAAc,MAAM,WAAa,2BAA6B,CAC3J,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAC7E,YAAa,IAAK,cAAe,QAAS,eAAgB,QAC1D,wBAAyB,CAAE,OAAQ,yGAA0G,CACjJ,CAAC,EACDC,EAAE,oBAAoB,CAC1B,CAAC,EAEKE,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CACH,SAAU,WAAY,SAAU,SAAU,SAAU,QAAS,MAAO,OACpE,aAAc,OACd,WAAY,yGACZ,OAAQ,sCACR,QAASb,EAAW,iBAAmB,iBACvC,UAAW,SAAU,UAAW,wEACpC,CACJ,EAAG,CAEC,MAAM,cAAc,MAAO,CACvB,IAAK,WACL,MAAO,CAAE,SAAU,WAAY,IAAK,EAAG,KAAM,MAAO,UAAW,mBAAoB,MAAO,QAAS,OAAQ,MAAO,WAAY,mFAAoF,CACtN,CAAC,EAED,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,IAAK,2BACL,IAAK,YACL,MAAO,CAAE,QAAS,eAAgB,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,aAAc,OAAQ,UAAW,mCAAoC,CAChK,CAAC,EAED,MAAM,cAAc,KAAM,CACtB,IAAK,QACL,MAAO,CAAE,OAAQ,WAAY,SAAUA,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAC3J,EAAGW,EAAE,iBAAiB,CAAC,EAEvB,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,MAAO,CAAE,OAAQ,cAAe,SAAU,QAAS,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CACrH,EAAGA,EAAE,uBAAuB,CAAC,EAE7B,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,IAAK,OAAQ,eAAgB,SAAU,SAAU,MAAO,CACtF,EAAG,CAACF,EAAWG,CAAW,CAAC,EAQ3B,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CACH,QAAS,OACT,eAAgBZ,EAAW,SAAW,WACtC,UAAW,MACf,CACJ,EAAG,MAAM,cAAc,IAAK,CACxB,KAAM,sCACN,OAAQ,SACR,IAAK,sBACL,aAAc,6BACd,MAAO,CAAE,QAAS,cAAe,QAAS,GAAK,WAAY,aAAc,EACzE,aAAeU,GAAM,CAAEA,EAAE,cAAc,MAAM,QAAU,CAAG,EAC1D,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,QAAU,EAAK,CAChE,EAAG,MAAM,cAAc,MAAO,CAC1B,IAAK,gCACL,IAAK,6BACL,MAAO,IACP,OAAQ,GACR,QAAS,OACT,MAAO,CAAE,QAAS,OAAQ,CAC9B,CAAC,CAAC,CAAC,CACP,CAAC,EAED,OAAO,MAAM,cAAc,UAAW,CAClC,MAAO,CACH,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SACtE,WAAY,eAAgB,WAAYJ,EACxC,QAASN,EAAW,YAAc,WACtC,CACJ,EAAG,CACC,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OAAQ,kGAAmG,CAAE,CAAC,EACnLa,CACJ,CAAC,CACL,EAEA,OAAO,aAAed,GCvJtB,IAAMe,GAAwB,CAAC,CAAE,cAAAC,EAAe,YAAAC,EAAa,qBAAAC,EAAuB,CAAC,EAAG,mBAAAC,EAAoB,aAAAC,EAAe,EAAK,IAAM,CAClI,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAAS,EAAK,EAC9C,CAACC,EAAWC,CAAY,EAAI,MAAM,SAAS,CAAE,QAAS,CAAC,EAAG,UAAW,CAAC,CAAE,CAAC,EACzEC,EAAe,MAAM,OAAO,IAAI,EAGtC,MAAM,UAAU,IAAM,CAClB,GAAI,CAACR,GAAe,CAACD,EAAe,OAOpC,IAAMU,EAAW,YALO,IAAM,CAC1B,IAAMC,EAAmBX,EAAc,iBAAiB,EACxDQ,EAAaG,CAAgB,CACjC,EAE8C,GAAG,EACjD,MAAO,IAAM,cAAcD,CAAQ,CACvC,EAAG,CAACT,EAAaD,CAAa,CAAC,EAG/B,MAAM,UAAU,IAAM,CACdC,GACJO,EAAa,CAAE,QAAS,CAAC,EAAG,UAAW,CAAC,CAAE,CAAC,CAC/C,EAAG,CAACP,CAAW,CAAC,EAEhB,IAAMW,EAAmB,MAAOC,GAAU,CACtC,GAAI,CAACZ,GAAe,CAACD,EAAe,CAChC,MAAM,qTAA2D,EACjE,MACJ,CAGA,GAAI,CAACA,EAAc,YAAY,GAAK,CAACA,EAAc,WAAY,CAC3D,MAAM,mcAAsF,EAC5F,MACJ,CAEA,QAAWc,KAAQD,EACf,GAAI,CAEA,IAAME,EAAaf,EAAc,aAAac,CAAI,EAClD,GAAI,CAACC,EAAW,QAAS,CACrB,IAAMC,EAAeD,EAAW,OAAO,KAAK,IAAI,EAChD,MAAM,4BAAQD,EAAK,IAAI,iIAA6BE,CAAY,EAAE,EAClE,QACJ,CAEA,MAAMhB,EAAc,SAASc,CAAI,CACrC,OAASG,EAAO,CAIRA,EAAM,QAAQ,SAASC,EAAE,eAAe,CAAC,EACzC,MAAM,4BAAQJ,EAAK,IAAI,4XAA2E,EAC3FG,EAAM,QAAQ,SAASC,EAAE,eAAe,CAAC,GAAKD,EAAM,QAAQ,SAAS,iBAAiB,EAC7F,MAAM,4BAAQH,EAAK,IAAI,2FAAqBG,EAAM,OAAO,EAAE,EACpDA,EAAM,QAAQ,SAASC,EAAE,oBAAoB,CAAC,EACrD,MAAM,6ZAA8E,EAC7ED,EAAM,QAAQ,SAASC,EAAE,qBAAqB,CAAC,EACtD,MAAM,qDAAaJ,EAAK,IAAI,uGAAuBG,EAAM,OAAO,EAAE,EAElE,MAAM,wHAAyBH,EAAK,IAAI,KAAKG,EAAM,OAAO,EAAE,CAEpE,CAER,EAEME,EAAcC,GAAM,CACtBA,EAAE,eAAe,EACjBd,EAAY,EAAK,EAEjB,IAAMO,EAAQ,MAAM,KAAKO,EAAE,aAAa,KAAK,EAC7CR,EAAiBC,CAAK,CAC1B,EAEMQ,EAAkBD,GAAM,CAC1BA,EAAE,eAAe,EACjBd,EAAY,EAAI,CACpB,EAEMgB,EAAmBF,GAAM,CAC3BA,EAAE,eAAe,EACjBd,EAAY,EAAK,CACrB,EAEMiB,EAAyBH,GAAM,CACjC,IAAMP,EAAQ,MAAM,KAAKO,EAAE,OAAO,KAAK,EACvCR,EAAiBC,CAAK,EACtBO,EAAE,OAAO,MAAQ,EACrB,EAEMI,EAAkBC,GAAU,CAC9B,GAAIA,IAAU,EAAG,MAAO,MACxB,IAAMC,EAAI,KACJC,EAAQ,CAAC,IAAK,KAAM,KAAM,IAAI,EAC9BC,EAAI,KAAK,MAAM,KAAK,IAAIH,CAAK,EAAI,KAAK,IAAIC,CAAC,CAAC,EAClD,OAAO,YAAYD,EAAQ,KAAK,IAAIC,EAAGE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAI,IAAMD,EAAMC,CAAC,CAC1E,EAEMC,EAAiBC,GAAW,CAC9B,OAAQA,EAAQ,CACZ,IAAK,gBACL,IAAK,YACD,MAAO,qBACX,IAAK,eACL,IAAK,YACD,MAAO,+BACX,IAAK,aACD,MAAO,+BACX,IAAK,YACD,MAAO,8BACX,IAAK,SACD,MAAO,4BACX,QACI,MAAO,eACf,CACJ,EAEMC,EAAiBD,GAAW,CAC9B,OAAQA,EAAQ,CACZ,IAAK,gBACD,MAAO,kEACX,IAAK,eACD,MAAO,sDACX,IAAK,YACD,MAAO,4DACX,IAAK,aACD,MAAO,yEACX,IAAK,YACD,MAAO,yDACX,IAAK,SACD,MAAO,uCACX,QACI,OAAOA,CACf,CACJ,EAKME,EAAiB,CAACC,EAAUC,IAAU,CACxC,IAAMC,EAAQF,EAAS,aAAe,EAChCG,EAAOH,EAAS,mBAAqB,EACrCI,EAASJ,EAAS,SAAW,YAC7BK,EAAUH,EAAQ,EAAI,KAAK,IAAIA,EAAO,EAAE,EAAI,GAC9CI,EACJ,OAAIF,EAAQE,EAASD,EACZH,EAAQ,EAAGI,EAAS,KAAK,MAAOH,EAAOD,EAASG,CAAO,EAC3DC,EAAS,KAAK,OAAQN,EAAS,UAAY,GAAK,IAAOK,CAAO,EACnEC,EAAS,KAAK,IAAI,EAAG,KAAK,IAAID,EAASC,CAAM,CAAC,EAEvC,MAAM,cAAc,MAAO,CAAE,IAAK,UAAW,EAAG,CACnD,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,IAAK,MAAO,aAAc,KAAM,CAChF,EAAG,MAAM,KAAK,CAAE,OAAQD,CAAQ,EAAG,CAACE,GAAGZ,IAAM,MAAM,cAAc,MAAO,CACpE,IAAKA,EACL,MAAO,CACH,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAC7C,WAAYA,EAAIW,EAASL,EAAQ,4BACjC,OAAQ,cAAgBN,EAAIW,EAAS,cAAgB,6BACrD,UAAWX,EAAIW,EAAS,WAAWL,CAAK,KAAO,OAC/C,WAAY,0CAChB,CACJ,CAAC,CAAC,CAAC,EACH,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,SAAU,SAAU,MAAO,kBAAmB,CACnI,EAAG,CACC,MAAM,cAAc,OAAQ,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAChH,MAAM,cAAc,IAAK,CAAE,IAAK,OAAQ,UAAWL,EAAcI,EAAS,MAAM,CAAE,CAAC,EACnFF,EAAcE,EAAS,MAAM,CACjC,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,QACL,MAAO,CAAE,WAAY,4CAA6C,MAAOQ,EAAOR,CAAQ,EAAIC,EAAQ,kBAAmB,CAC3H,EAAGC,EAAQ,EAAI,GAAG,KAAK,IAAIC,EAAMD,CAAK,CAAC,MAAMA,CAAK,UAAY,IAAIF,EAAS,UAAY,GAAG,QAAQ,CAAC,CAAC,GAAG,CAC3G,CAAC,CACL,CAAC,CACL,EACMQ,EAAUvB,GAAMA,EAAE,SAAW,YAE7BwB,EAAyB,MAAOC,EAAQC,IAAa,CACnD,OAAOzC,GAAuB,YAC9B,MAAMA,EAAmBwC,EAAQC,CAAQ,EAE7CpC,EAAaR,EAAc,iBAAiB,CAAC,CACjD,EAEA,OAAKC,EAOqBD,GAAiBA,EAAc,YAAY,GAAKA,EAAc,WAcjF,MAAM,cAAc,MAAO,CAC9B,UAAW,yBACf,EAAG,CAGCI,GAAgB,MAAM,cAAc,MAAO,CACvC,IAAK,YACL,OAAQe,EACR,WAAYE,EACZ,YAAaC,EACb,MAAO,CACH,SAAU,WACV,OAAQ,iBAAmBjB,EAAW,kCAAoC,6BAC1E,aAAc,OACd,WAAYA,EAAW,mCAAqC,oBAC5D,QAAS,YACT,UAAW,SACX,WAAY,UAChB,CACJ,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,WACL,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,OAAQ,cAAe,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,4BAA6B,OAAQ,qCAAsC,CACvN,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,+BAAgC,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,CAAC,EAClI,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGa,EAAE,WAAW,CAAC,EACpI,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGA,EAAE,eAAe,CAAC,EACvI,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,KAAM,SACN,QAAS,IAAMT,EAAa,SAAS,MAAM,EAC3C,UAAW,UACX,MAAO,CAAE,UAAW,OAAQ,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CACpS,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,qBAAsB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACnGS,EAAE,aAAa,CACnB,CAAC,CACL,CAAC,EAGDd,GAAgB,MAAM,cAAc,QAAS,CACzC,IAAK,aACL,IAAKK,EACL,KAAM,OACN,SAAU,GACV,UAAW,SACX,SAAUc,CACd,CAAC,EAEDrB,EAAqB,OAAS,GAAK,MAAM,cAAc,MAAO,CAC1D,IAAK,mBACL,UAAW,gBACf,EAAGA,EAAqB,IAAIY,GAAQ,MAAM,cAAc,MAAO,CAC3D,IAAKA,EAAK,OACV,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,QAAS,WAAY,CACxI,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CACtF,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,mCAAoC,OAAQ,4CAA6C,CAAE,EAC7P,MAAM,cAAc,IAAK,CAAE,UAAW,yBAA0B,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,CAC5H,EACA,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,CAAE,CAAE,EAAG,CAChE,MAAM,cAAc,MAAO,CACvB,IAAK,QACL,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAC1E,EAAGI,EAAE,eAAe,CAAC,EACrB,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,SAAU,SAAU,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAC/H,EAAG,GAAGJ,EAAK,QAAQ,SAAMU,EAAeV,EAAK,QAAQ,CAAC,SAAMA,EAAK,QAAQ,EAAE,CAC/E,CAAC,CACL,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,QAAS,OAAQ,IAAK,KAAM,CACzC,EAAG,CACC,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,QAAS,IAAM4B,EAAuB5B,EAAK,OAAQ,EAAI,EACvD,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,aAAc,MAAO,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,QAAS,WAAY,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAC1P,EAAG,CAAC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAAGI,EAAE,aAAa,CAAC,CAAC,EACrH,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,QAAS,IAAMwB,EAAuB5B,EAAK,OAAQ,EAAK,EACxD,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,aAAc,MAAO,OAAQ,yCAA0C,WAAY,gCAAiC,MAAO,gBAAiB,QAAS,WAAY,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAC7R,EAAG,CAAC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAAGI,EAAE,aAAa,CAAC,CAAC,CACzH,CAAC,CACL,CAAC,CAAC,CAAC,GAGFX,EAAU,QAAQ,OAAS,GAAKA,EAAU,UAAU,OAAS,IAAM,MAAM,cAAc,MAAO,CAC3F,IAAK,YACL,UAAW,uBACf,EAAG,CACC,MAAM,cAAc,KAAM,CACtB,IAAK,QACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,aAAc,MAAO,CACrJ,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,UAAW,oBACX,MAAO,CAAE,SAAU,MAAO,CAC9B,CAAC,EACDW,EAAE,YAAY,CAClB,CAAC,EAGD,GAAGX,EAAU,QAAQ,IAAI0B,GACrB,MAAM,cAAc,MAAO,CACvB,IAAK,QAAQA,EAAS,MAAM,GAC5B,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,QAAS,OAAQ,aAAc,KAAM,CACxJ,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,SACL,UAAW,wCACf,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,UAAW,mBACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,UAAW,kBACX,MAAO,CAAE,MAAO,mBAAoB,SAAU,OAAQ,gBAAiB,KAAM,CACjF,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,sBACX,MAAO,CAAE,MAAO,kBAAmB,CACvC,EAAGA,EAAS,QAAQ,EACpB,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,eACX,MAAO,CAAE,MAAO,kBAAmB,CACvC,EAAGT,EAAeS,EAAS,QAAQ,CAAC,CACxC,CAAC,EACD,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,QAAS,IAAMjC,EAAc,mBAAmBiC,EAAS,MAAM,EAC/D,UAAW,yCACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,UAAW,cACf,CAAC,CACL,CAAC,CACL,CAAC,EACDD,EAAeC,EAAU,kBAAkB,CAC/C,CAAC,CACL,EAGA,GAAG1B,EAAU,UAAU,IAAI0B,GACvB,MAAM,cAAc,MAAO,CACvB,IAAK,QAAQA,EAAS,MAAM,GAC5B,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,QAAS,OAAQ,aAAc,KAAM,CACxJ,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,SACL,UAAW,wCACf,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,UAAW,mBACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,UAAW,oBACX,MAAO,CAAE,MAAO,kBAAmB,SAAU,OAAQ,gBAAiB,KAAM,CAChF,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,sBACX,MAAO,CAAE,MAAO,kBAAmB,CACvC,EAAGA,EAAS,QAAQ,EACpB,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,eACX,MAAO,CAAE,MAAO,kBAAmB,CACvC,EAAGT,EAAeS,EAAS,QAAQ,CAAC,CACxC,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,UAAW,UAAW,6BAA8B,EAAG,CACrFA,EAAS,SAAW,YAAc,MAAM,cAAc,SAAU,CAC5D,IAAK,WACL,UAAW,gEACX,QAAS,SAAY,CACjB,GAAI,CACA,IAAMY,EAAM,MAAM7C,EAAc,yBAAyBiC,EAAS,MAAM,EACxE,GAAI,CAACY,EAAK,CAAE,MAAM3B,EAAE,WAAW,CAAC,EAAG,MAAQ,CAC3C,IAAM4B,EAAI,SAAS,cAAc,GAAG,EACpCA,EAAE,KAAOD,EACTC,EAAE,SAAWb,EAAS,UAAY,OAClCa,EAAE,MAAM,EACR,WAAW,IAAM9C,EAAc,4BAA4B6C,CAAG,EAAG,GAAK,CAC1E,OAASzB,EAAG,CACR,MAAMA,EAAE,SAAWF,EAAE,WAAW,CAAC,CACrC,CACJ,CACJ,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,sBAAuB,CAAC,EACxEA,EAAE,eAAe,CACrB,CAAC,EAAI,KACL,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,QAAS,IAAMlB,EAAc,mBAAmBiC,EAAS,MAAM,EAC/D,UAAW,yCACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,UAAW,cACf,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAAC,EACDD,EAAeC,EAAU,iBAAiB,CAC9C,CAAC,CACL,CACJ,CAAC,CACL,CAAC,EApOU,MAAM,cAAc,MAAO,CAC9B,UAAW,iCACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,UAAW,kCACf,CAAC,EACD,sdACJ,CAAC,EAjBM,MAAM,cAAc,MAAO,CAC9B,UAAW,4BACf,EAAGf,EAAE,qBAAqB,CAAC,CA4OnC,EAGA,OAAO,sBAAwBnB,GCraxB,IAAMgD,GAAa,OAAO,OAAO,CACpC,YAAa,GACb,oBAAqB,EACrB,kBAAmB,GACvB,CAAC,EAGYC,GAAsB,OAAO,OAAO,CAAC,OAAQ,QAAS,OAAQ,OAAO,CAAC,EAE7EC,GAAY,qBAGZC,GAAU,6CACVC,GAAe,yBAIrB,SAASC,GAAgBC,EAAO,CAC5B,QAASC,EAAI,EAAGA,EAAID,EAAM,OAAQC,IAAK,CACnC,IAAMC,EAAOF,EAAM,WAAWC,CAAC,EAC/B,GAAIC,EAAO,IAAQA,IAAS,IAAM,MAAO,EAC7C,CACA,MAAO,EACX,CAMO,SAASC,GAAeC,EAAK,CAChC,GAAI,OAAOA,GAAQ,SAAU,OAAOC,EAAE,kBAAkB,EACxD,IAAMC,EAAUF,EAAI,KAAK,EACzB,GAAI,CAACE,EAAS,OAAOD,EAAE,cAAc,EACrC,GAAIC,EAAQ,OAASZ,GAAW,kBAAmB,OAAOW,EAAE,gBAAgB,EAC5E,GAAIN,GAAgBO,CAAO,EAAG,OAAOD,EAAE,iBAAiB,EAExD,IAAME,EAASD,EAAQ,MAAMV,EAAS,EACtC,GAAI,CAACW,EACD,OAAOF,EAAE,kBAAkB,EAI/B,IAAMG,EAAOF,EAAQ,MAAMC,EAAO,CAAC,EAAE,MAAM,EACrC,CAACE,EAAUC,EAAO,GAAGC,CAAK,EAAIH,EAAK,MAAM,GAAG,EAClD,OAAIG,EAAM,OAAS,EAAUN,EAAE,iBAAiB,EAC3CI,EACAZ,GAAQ,KAAKY,CAAQ,EAEtBC,IAAU,QAAa,CAACZ,GAAa,KAAKY,CAAK,EACxCL,EAAE,qBAAqB,EAG3B,KAN6BA,EAAE,gBAAgB,EADhCA,EAAE,eAAe,CAQ3C,CAEO,SAASO,GAAUR,EAAK,CAC3B,OAAO,OAAOA,GAAQ,UAAY,YAAY,KAAKA,EAAI,KAAK,CAAC,CACjE,CAEA,SAASS,GAAeb,EAAOc,EAAO,CAClC,OAA2Bd,GAAU,MAAQA,IAAU,GAAW,KAC9D,OAAOA,GAAU,SAAiB,GAAGc,CAAK,oBAC1Cd,EAAM,OAASN,GAAW,kBAA0B,GAAGoB,CAAK,eAC5Df,GAAgBC,CAAK,EAAU,GAAGc,CAAK,+BACpC,IACX,CAOO,SAASC,GAAoBC,EAAS,CACzC,IAAMC,EAAS,CAAC,EACVC,EAAW,CAAC,EACZC,EAAU,CAAC,EAEjB,OAAK,MAAM,QAAQH,CAAO,EAGtBA,EAAQ,SAAW,EACZ,CAAE,QAAS,CAAC,EAAG,OAAQ,CAAC,EAAG,SAAU,CAAC,CAAE,EAE/CA,EAAQ,OAAStB,GAAW,aAC5BuB,EAAO,KAAKZ,EAAE,iBAAkB,CAAE,IAAKX,GAAW,WAAY,CAAC,CAAC,EACzD,CAAE,QAAS,CAAC,EAAG,OAAAuB,EAAQ,SAAAC,CAAS,IAG3CF,EAAQ,QAAQ,CAACI,EAAOC,IAAU,CAC9B,IAAMP,EAAQ,WAAWO,EAAQ,CAAC,GAClC,GAAI,CAACD,GAAS,OAAOA,GAAU,SAAU,CACrCH,EAAO,KAAKZ,EAAE,sBAAuB,CAAE,MAAAS,CAAM,CAAC,CAAC,EAC/C,MACJ,CAEA,IAAMQ,EAAU,MAAM,QAAQF,EAAM,IAAI,EAAIA,EAAM,KAAO,CAACA,EAAM,IAAI,EACpE,GAAIE,EAAQ,SAAW,GAAKA,EAAQ,OAAS5B,GAAW,oBAAqB,CACzEuB,EAAO,KAAKZ,EAAE,kBAAmB,CAAE,MAAAS,EAAO,IAAKpB,GAAW,mBAAoB,CAAC,CAAC,EAChF,MACJ,CAEA,IAAM6B,EAAY,CAAC,EACfC,EAAe,GACnB,QAAWC,KAAUH,EAAS,CAC1B,IAAMI,EAAMvB,GAAesB,CAAM,EACjC,GAAIC,EAAK,CACLT,EAAO,KAAK,GAAGH,CAAK,KAAKY,CAAG,EAAE,EAC9B,QACJ,CACA,IAAMpB,EAAUmB,EAAO,KAAK,EAC5BF,EAAU,KAAKjB,CAAO,EAClBM,GAAUN,CAAO,IAAGkB,EAAe,GAC3C,CACA,GAAID,EAAU,SAAW,EAAG,OAE5B,IAAMI,EAAUd,GAAeO,EAAM,SAAU,GAAGN,CAAK,WAAW,EAC9Da,GAASV,EAAO,KAAKU,CAAO,EAChC,IAAMC,EAAUf,GAAeO,EAAM,WAAY,GAAGN,CAAK,aAAa,EAClEc,GAASX,EAAO,KAAKW,CAAO,EAEhC,IAAMC,EAAS,CAAE,KAAMN,EAAU,SAAW,EAAIA,EAAU,CAAC,EAAIA,CAAU,EACrEH,EAAM,WAAUS,EAAO,SAAW,OAAOT,EAAM,QAAQ,GACvDA,EAAM,aAAYS,EAAO,WAAa,OAAOT,EAAM,UAAU,GAE7DI,IAAiB,CAACK,EAAO,UAAY,CAACA,EAAO,aAC7CX,EAAS,KAAKb,EAAE,mBAAoB,CAAE,MAAAS,CAAM,CAAC,CAAC,EAGlDK,EAAQ,KAAKU,CAAM,CACvB,CAAC,EAEM,CAAE,QAAAV,EAAS,OAAAF,EAAQ,SAAAC,CAAS,GArDxB,CAAE,QAAS,CAAC,EAAG,OAAQ,CAACb,EAAE,iBAAiB,CAAC,EAAG,SAAU,CAAC,CAAE,CAsD3E,CAOO,SAASyB,GAAqBC,EAAM,CACvC,GAAI,OAAOA,GAAS,UAAY,CAACA,EAAK,KAAK,EACvC,MAAO,CAAE,QAAS,CAAC,EAAG,OAAQ,CAAC,EAAG,SAAU,CAAC,CAAE,EAGnD,IAAMzB,EAAUyB,EAAK,KAAK,EAC1B,GAAIzB,EAAQ,WAAW,GAAG,GAAKA,EAAQ,WAAW,GAAG,EAAG,CACpD,IAAI0B,EACJ,GAAI,CACAA,EAAS,KAAK,MAAM1B,CAAO,CAC/B,MAAQ,CACJ,MAAO,CAAE,QAAS,CAAC,EAAG,OAAQ,CAACD,EAAE,oBAAoB,CAAC,EAAG,SAAU,CAAC,CAAE,CAC1E,CACA,IAAM4B,EAAM,MAAM,QAAQD,CAAM,EAAIA,EAAS,CAACA,CAAM,EACpD,OAAOjB,GAAoBkB,CAAG,CAClC,CAGA,IAAMjB,EAAUV,EACX,MAAM;AAAA,CAAI,EACV,IAAI4B,GAAQA,EAAK,KAAK,CAAC,EACvB,OAAO,OAAO,EACd,IAAI9B,IAAQ,CAAE,KAAMA,CAAI,EAAE,EAC/B,OAAOW,GAAoBC,CAAO,CACtC,CAGO,SAASmB,GAAYhB,EAAS,CACjC,OAAK,MAAM,QAAQA,CAAO,EACnBA,EAAQ,KAAKU,IACH,MAAM,QAAQA,GAAQ,IAAI,EAAIA,EAAO,KAAO,CAACA,GAAQ,IAAI,GAC1D,KAAKjB,EAAS,CAC7B,EAJmC,EAKxC,CCzKA,IAAMwB,GAAQ,OAAO,MAEfC,GAAc,CAChB,4BACA,6BACA,2CACA,GACA,gDACA,kFACJ,EAAE,KAAK;AAAA,CAAI,EAEX,eAAeC,GAAeC,EAASC,EAAY,IAAM,CACrD,IAAMC,EAAQ,CAAE,KAAM,EAAG,MAAO,EAAG,MAAO,CAAE,EAC5C,GAAI,OAAO,kBAAsB,IAC7B,MAAO,CAAE,GAAGA,EAAO,MAAOC,EAAE,oBAAoB,CAAE,EAEtD,IAAIC,EACJ,GAAI,CACAA,EAAK,IAAI,kBAAkB,CAAE,WAAYJ,CAAQ,CAAC,CACtD,OAASK,EAAO,CACZ,MAAO,CAAE,GAAGH,EAAO,MAAOG,EAAM,SAAWF,EAAE,gBAAgB,CAAE,CACnE,CAEA,OAAO,IAAI,QAASG,GAAY,CAC5B,IAAIC,EAAU,GACRC,EAAS,IAAM,CACjB,GAAI,CAAAD,EACJ,CAAAA,EAAU,GACV,aAAaE,CAAK,EAClB,GAAI,CAAEL,EAAG,MAAM,CAAG,MAAQ,CAAa,CACvCE,EAAQJ,CAAK,EACjB,EACMO,EAAQ,WAAWD,EAAQP,CAAS,EAE1CG,EAAG,eAAkBM,GAAU,CAC3B,GAAI,CAACA,EAAM,UAAW,CAAEF,EAAO,EAAG,MAAQ,CAC1C,IAAMG,EAAID,EAAM,UAAU,WAAa,GACnC,YAAY,KAAKC,CAAC,EAAGT,EAAM,OACtB,aAAa,KAAKS,CAAC,EAAGT,EAAM,QAC5B,aAAa,KAAKS,CAAC,GAAGT,EAAM,OACzC,EAEA,GAAI,CACAE,EAAG,kBAAkB,oBAAoB,EACzCA,EAAG,YAAY,EACV,KAAMQ,GAAUR,EAAG,oBAAoBQ,CAAK,CAAC,EAC7C,MAAM,IAAMJ,EAAO,CAAC,CAC7B,MAAQ,CACJA,EAAO,CACX,CACJ,CAAC,CACL,CAEA,IAAMK,GAAoB,CAAC,CAAE,OAAAC,EAAQ,QAAAC,EAAS,QAAAC,EAAS,SAAAC,EAAU,QAAAC,EAAS,SAAAC,EAAU,SAAAC,CAAS,IAAM,CAC/F,GAAI,CAACN,EAAQ,OAAO,KAEpB,GAAM,CAACO,EAAWC,CAAY,EAAIzB,GAAM,SAASmB,GAAS,WAAa,EAAK,EACtE,CAACO,EAAaC,CAAc,EAAI3B,GAAM,SAASmB,GAAS,aAAe,EAAE,EACzE,CAACS,EAAWC,CAAY,EAAI7B,GAAM,SAASmB,GAAS,cAAgB,YAAY,EAChF,CAACW,EAASC,CAAU,EAAI/B,GAAM,SAASmB,GAAS,WAAa,EAAK,EAClE,CAACa,EAAWC,CAAY,EAAIjC,GAAM,SAAS,MAAM,EACjD,CAACkC,EAAYC,CAAa,EAAInC,GAAM,SAAS,IAAI,EAEjDoC,EAASZ,EAAYa,GAAqBX,CAAW,EAAI,CAAE,QAAS,CAAC,EAAG,OAAQ,CAAC,EAAG,SAAU,CAAC,CAAE,EACjGY,EAAUC,GAAYH,EAAO,OAAO,EACpCI,EAAW,CAAChB,GAAcY,EAAO,QAAQ,OAAS,GAAKA,EAAO,OAAO,SAAW,EAEhFK,EAAa,SAAY,CAC3BR,EAAa,SAAS,EACtBE,EAAc,IAAI,EAClB,IAAMO,EAAS,MAAMxC,GAAekC,EAAO,OAAO,EAClDD,EAAcO,CAAM,EACpBT,EAAa,MAAM,CACvB,EAEMU,EAAc,IAAM,CACjBH,GACLnB,EACI,CACI,UAAAG,EACA,QAASA,EAAYY,EAAO,QAAU,CAAC,EACvC,YAAaR,EAAY,aAAe,WACxC,YAAAF,CACJ,EACAI,CACJ,CACJ,EAEMc,EAAe,SAAY,CACzBtB,GAAU,MAAMA,EAAS,EAC7BS,EAAW,EAAK,CACpB,EAGMc,EAAI7C,GAAM,cACV8C,EAAW,mBACXC,EAAU,kBAEVC,EAAiB,yBACjBC,GAAgB,wBAChBC,EAAO,mEAGPC,EAAY,CAACC,EAAUC,EAASC,EAAOC,EAAMC,IAAeX,EAAE,SAAU,CAC1E,KAAM,SAAU,QAAAQ,EAChB,MAAO,OAAO,OAAO,CACjB,MAAO,OAAQ,UAAW,QAAS,QAAS,OAAQ,WAAY,aAAc,IAAK,OACnF,QAAS,YAAa,aAAc,OACpC,OAAQ,aAAaD,EAAW,mCAAqC,2BAA2B,GAChG,WAAYA,EAAW,mCAAqC,oBAC5D,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,WAAY,WAAY,aAAc,MACtG,EAAGI,GAAc,CAAC,CAAC,CACvB,EAAG,CACCX,EAAE,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,UAAW,MAAO,aAAc,MAAO,OAAQ,eAAeO,EAAWN,EAAW,2BAA2B,GAAI,QAAS,OAAQ,WAAY,QAAS,CAAE,EACtOD,EAAE,OAAQ,CAAE,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYO,EAAWJ,EAAiB,aAAc,CAAE,CAAC,CAAC,EACrIH,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,CAAE,CAAE,EAAG,CACzCA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGS,CAAK,EACxHT,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGU,CAAI,CAC9H,CAAC,CACL,CAAC,EAGKE,EAAY,CAACC,EAAIL,EAASC,EAAOC,EAAMI,EAAQC,IAAUf,EAAE,SAAU,CACvE,KAAM,SAAU,QAAAQ,EAChB,MAAO,CACH,MAAO,OAAQ,UAAW,QAAS,QAAS,OAAQ,WAAY,aAAc,IAAK,OACnF,QAAS,YAAa,aAAc,OACpC,OAAQ,aAAaK,EAAK,iCAAmC,2BAA2B,GACxF,WAAYA,EAAK,kCAAoC,oBACrD,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,WAAY,WAAY,aAAc,MACtG,CACJ,EAAG,CACCb,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,CAAE,CAAE,EAAG,CACzCA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACnFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGS,CAAK,EACtGM,GAASf,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAS,QAAS,UAAW,aAAc,MAAO,WAAY,iCAAkC,OAAQ,2CAA4C,CAAE,EAAGa,CAAK,CACpP,CAAC,EACDf,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGU,CAAI,CAC/I,CAAC,EACDV,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAYa,EAAMC,GAAUV,GAAiB,4BAA6B,OAAQ,aAAaS,EAAMC,GAAUZ,EAAW,2BAA2B,GAAI,SAAU,WAAY,WAAY,WAAY,UAAW,KAAM,CAAE,EACzTF,EAAE,OAAQ,CAAE,MAAO,CAAE,SAAU,WAAY,IAAK,MAAO,iBAAkB,MAAO,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY,OAAQ,UAAWa,EAAK,cAAc,GAAKG,GAAU,CAAC,MAAQ,gBAAiB,WAAY,gBAAiB,CAAE,CAAC,CAAC,CACxQ,CAAC,EAGKC,EAAO,CAAC,EAMd,GALAA,EAAK,KAAKjB,EAAE,IAAK,CAAE,IAAK,QAAS,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAC3HvC,EAAE,WAAW,CAAC,CAAC,EACnBwD,EAAK,KAAKX,EAAU,CAAC3B,EAAW,IAAMC,EAAa,EAAK,EAAGnB,EAAE,iBAAiB,EAAGA,EAAE,gBAAgB,CAAC,CAAC,EACrGwD,EAAK,KAAKX,EAAU3B,EAAW,IAAMC,EAAa,EAAI,EAAGnB,EAAE,iBAAiB,EAAGA,EAAE,iBAAkB,CAAE,IAAKyD,GAAW,WAAY,CAAC,EAAGvC,EAAY,CAAE,aAAc,MAAO,EAAI,IAAI,CAAC,EAE7KA,EAAW,CACX,IAAMwC,EAAS,CAAC,EAChBA,EAAO,KAAKnB,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,SAAU,SAAU,aAAc,MAAO,CAAE,EACxLA,EAAE,WAAY,CACV,IAAK,MACL,MAAOnB,EAAa,SAAWuC,GAAMtC,EAAesC,EAAE,OAAO,KAAK,EAAG,KAAM,EAAG,WAAY,GAAO,aAAc,MAC/G,YAAahE,GACb,MAAO,CAAE,MAAO,OAAQ,OAAQ,WAAY,OAAQ,OAAQ,QAAS,OAAQ,WAAY,cAAe,MAAO,sBAAuB,WAAYiD,EAAM,SAAU,OAAQ,WAAY,KAAM,QAAS,YAAa,UAAW,OAAQ,CACzO,CAAC,CAAC,CAAC,EACHd,EAAO,OAAO,OAAS,GACvB4B,EAAO,KAAKnB,EAAE,KAAM,CAAE,IAAK,MAAO,MAAO,CAAE,OAAQ,WAAY,mBAAoB,OAAQ,MAAO,gBAAiB,SAAU,QAAS,CAAE,EACpIT,EAAO,OAAO,MAAM,EAAG,CAAC,EAAE,IAAI,CAAC8B,EAAKC,IAAMtB,EAAE,KAAM,CAAE,IAAKsB,CAAE,EAAGD,CAAG,CAAC,CAAC,CAAC,EAExE9B,EAAO,SAAS,OAAS,GACzB4B,EAAO,KAAKnB,EAAE,KAAM,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,WAAY,mBAAoB,OAAQ,MAAO,mBAAoB,SAAU,QAAS,CAAE,EACxIT,EAAO,SAAS,MAAM,EAAG,CAAC,EAAE,IAAI,CAACgC,EAAGD,IAAMtB,EAAE,KAAM,CAAE,IAAKsB,CAAE,EAAGC,CAAC,CAAC,CAAC,CAAC,EAEtEhC,EAAO,QAAQ,OAAS,GAAKA,EAAO,OAAO,SAAW,GACtD4B,EAAO,KAAKnB,EAAE,IAAK,CAAE,IAAK,KAAM,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,MAAOE,CAAQ,CAAE,EAC9F,GAAGX,EAAO,QAAQ,MAAM,oBAAoBE,EAAU,kBAAoB,sCAAiC,GAAG,CAAC,EAEvH0B,EAAO,KAAKnB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,aAAc,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,4CAA6C,WAAY,kCAAmC,aAAc,MAAO,CAAE,EAAG,CAC1QA,EAAE,IAAK,CAAE,IAAK,IAAK,UAAW,qBAAsB,MAAO,CAAE,MAAOE,EAAS,SAAU,OAAQ,UAAW,MAAO,KAAM,MAAO,CAAE,CAAC,EACjIF,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,KAAM,MAAO,uBAAwB,CAAE,EAAG,CACnGvC,EAAE,cAAc,EAChBuC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYK,EAAM,MAAOH,CAAQ,CAAE,EAAG,QAAQ,EAAGzC,EAAE,iBAAiB,CACvG,CAAC,CACL,CAAC,CAAC,EACF,IAAM+D,EAAYrC,IAAc,QAAUE,GAAc,CAACA,EAAW,MAAQa,EAAU,mBACtFiB,EAAO,KAAKnB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,OAAQ,aAAc,KAAM,CAAE,EAAG,CACxIA,EAAE,SAAU,CACR,IAAK,MAAO,KAAM,SAAU,SAAU,CAACL,GAAYR,IAAc,UAAW,QAASS,EACrF,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,aAAaT,IAAc,QAAUE,GAAc,CAACA,EAAW,MAAQ,iCAAmC,0BAA0B,GAAI,WAAYF,IAAc,QAAUE,GAAc,CAACA,EAAW,MAAQ,kCAAoC,4BAA6B,MAAOmC,EAAW,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAS,CAAC7B,GAAYR,IAAc,UAAa,cAAgB,UAAW,QAAU,CAACQ,GAAYR,IAAc,UAAa,GAAM,CAAE,CAC5lB,EAAG,CACCa,EAAE,IAAK,CAAE,IAAK,IAAK,UAAWb,IAAc,UAAY,sBAAwB,qBAAsB,MAAOA,IAAc,UAAY,CAAE,UAAW,2BAA4B,EAAI,IAAK,CAAC,EAC1LA,IAAc,UAAY1B,EAAE,aAAa,EAAIA,EAAE,UAAU,CAC7D,CAAC,EACA0B,IAAc,QAAUE,EAAcW,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,OAAQ,MAAOX,EAAW,MAAQ,gBAAkB,kBAAmB,CAAE,EACvJA,EAAW,MACL,gBAAgBA,EAAW,KAAK,GAC/BA,EAAW,MAAQ,GAAKA,EAAW,MAAQ,EACxC,QAAQA,EAAW,MAAQ,EAAI,KAAO,MAAM,cAAWA,EAAW,MAAQ,EAAI,KAAO,MAAM,cAAWA,EAAW,IAAI,GACrH,QAAQA,EAAW,IAAI,iHACrC,EAAI,IACR,CAAC,CAAC,EACF4B,EAAK,KAAKjB,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,aAAc,MAAO,CAAE,EAAGmB,CAAM,CAAC,CAClF,CAEAF,EAAK,KAAKL,EAAU7B,EAAW,IAAMC,EAAa,CAACD,CAAS,EAAGtB,EAAE,gBAAgB,EAC7EA,EAAE,eAAe,EAAGyC,EAASzC,EAAE,gBAAgB,CAAC,CAAC,EACjDsB,GAAaJ,GAAa,CAACc,GAC3BwB,EAAK,KAAKjB,EAAE,IAAK,CAAE,IAAK,YAAa,MAAO,CAAE,OAAQ,cAAe,SAAU,SAAU,MAAO,kBAAmB,CAAE,EACjHvC,EAAE,kBAAkB,CAAC,CAAC,EAE9BwD,EAAK,KAAKL,EAAU3B,EAAS,IAAMC,EAAW,CAACD,CAAO,EAAGxB,EAAE,aAAa,EACpEA,EAAE,iBAAiB,EAAGwC,CAAQ,CAAC,EAGnC,IAAMwB,GAAa,CAAC,EACpB,OAAIlD,GACAkD,GAAW,KAAKzB,EAAE,SAAU,CAAE,IAAK,SAAU,KAAM,SAAU,QAASD,EAClE,MAAO,CAAE,gBAAiB,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,yCAA0C,WAAY,cAAe,MAAO,gBAAiB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAGtC,EAAE,YAAY,CAAC,CAAC,EAE9RgE,GAAW,KAAKzB,EAAE,SAAU,CAAE,IAAK,SAAU,KAAM,SAAU,QAAS3B,EAClE,MAAO,CAAE,QAAS,YAAa,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAGZ,EAAE,YAAY,CAAC,CAAC,EAChQgE,GAAW,KAAKzB,EAAE,SAAU,CAAE,IAAK,QAAS,KAAM,SAAU,QAASF,EAAa,SAAU,CAACH,EACzF,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,OAAQ,WAAYQ,EAAgB,MAAO,sBAAuB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQR,EAAW,UAAY,cAAe,QAASA,EAAW,EAAI,GAAK,UAAW,6CAA8C,CAAE,EAAG,CAC9XK,EAAE,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,CAAC,EAAGvC,EAAE,WAAW,CAClE,CAAC,CAAC,EAQKuC,EAAE,MAAO,CAAE,UAAW,iBAAkB,MAJ1BtB,EACf,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAAU,WAAY,eAAgB,UAAW,yCAA0C,EACzK,CAAE,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAAU,WAAY,UAAW,WAAY,eAAgB,UAAW,yCAA0C,CAEhI,EAAG,CAClEsB,EAAE7C,GAAM,SAAU,CAAE,IAAK,OAAQ,EAAG,CAEhC6C,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,qCAAsC,CAAE,EAAG,CAChKA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,WAAY,4BAA6B,OAAQ,qCAAsC,CAAE,EAC9NA,EAAE,IAAK,CAAE,UAAW,mBAAoB,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,CAAC,EACrGA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,WAAY,IAAK,CAAE,EAAG,CAC1DA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGvC,EAAE,WAAW,CAAC,EACzIuC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAGvC,EAAE,cAAc,CAAC,CACpG,CAAC,EACDuC,EAAE,SAAU,CAAE,IAAK,IAAK,KAAM,SAAU,QAAS3B,EAAS,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,MAAO,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAChR2B,EAAE,IAAK,CAAE,UAAW,cAAe,CAAC,CAAC,CAC7C,CAAC,EAEDA,EAAE,MAAO,CAAE,IAAK,OAAQ,UAAW,mBAAoB,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,WAAY,CAAE,EAAGiB,CAAI,EAE1HjB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,WAAY,IAAK,OAAQ,QAAS,YAAa,UAAW,sCAAuC,WAAY,oBAAqB,aAAc,GAAI,CAAE,EAAGyB,EAAU,CAC/P,CAAC,CACL,CAAC,CACL,EAEA,OAAO,kBAAoBtD,GCxP3B,IAAMuD,GAAkB,CAAC,CAAE,cAAAC,EAAe,UAAAC,CAAU,IAAM,CACtD,IAAMC,EAAI,MAAM,cACVC,EAAO,mEAIPC,EAAO,CACT,KAAM,4FACN,SAAU,6GACV,OAAQ,qDACR,KAAM,gFACN,MAAO,uGACP,OAAQ,uKACR,MAAO,mFACP,OAAQ,mFACR,KAAM,6GACN,MAAO,gSACP,YAAa,6TACjB,EACMC,EAAM,CAACC,EAAOC,EAAMC,IAAON,EAAE,OAAQ,CACvC,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,MAAOK,EAAO,KAAM,OAAQA,EAAO,IAAK,EACxF,wBAAyB,CAAE,OAAQ,eAAeA,CAAI,aAAaA,CAAI,yEAAyEC,CAAE,oDAAoDF,CAAK,QAAS,CACxN,CAAC,EAEK,CAACG,EAAMC,CAAO,EAAI,MAAM,SAAS,IAAOV,GAAe,eAAe,GAAK,CAAE,MAAO,OAAQ,OAAQ,EAAM,CAAE,EAC5G,CAACW,EAAWC,CAAY,EAAI,MAAM,SAAS,EAAK,EAChD,CAACC,EAASC,CAAU,EAAI,MAAM,SAAS,CAAC,EAExCC,EAAiB,MAAM,OAAO,IAAI,EAClCC,EAAiB,MAAM,OAAO,IAAI,EAClCC,EAAe,MAAM,OAAO,IAAI,EAGtC,MAAM,UAAU,IAAM,CAClB,GAAI,CAACjB,EAAe,OACpB,IAAMkB,EAAWC,GAAUT,EAAQS,CAAK,EAClCC,EAAOpB,EAAc,mBAC3B,OAAAA,EAAc,mBAAqBkB,EACnCR,EAAQV,EAAc,aAAeA,EAAc,aAAa,EAAI,CAAE,MAAO,OAAQ,OAAQ,EAAM,CAAC,EAC7F,IAAM,CAAMA,EAAc,qBAAuBkB,IAASlB,EAAc,mBAAqBoB,GAAQ,KAAM,CACtH,EAAG,CAACpB,CAAa,CAAC,EAElB,IAAMqB,EAAQZ,EAAK,OAAS,OACtBa,EAAS,CAAC,CAACb,EAAK,OAChBc,EAAU,CAAC,CAACd,EAAK,WAAa,CAAC,CAACA,EAAK,eAoC3C,GA/BA,MAAM,UAAU,IAAM,CAClB,IAAMe,EAAexB,GAAe,uBAAuB,EACrDyB,EAAczB,GAAe,sBAAsB,EACnD0B,EAAS,CAACC,EAAIC,GAAQC,KAAU,CAClC,GAAI,CAACF,GAAM,CAACC,GAAQ,OAChBD,EAAG,YAAcC,KAAUD,EAAG,MAAQE,GAAOF,EAAG,UAAYC,IAChE,IAAME,GAAIH,EAAG,MAAQA,EAAG,KAAK,EACzBG,IAAKA,GAAE,OAAOA,GAAE,MAAM,IAAM,CAAC,CAAC,CACtC,EAGAJ,EAAOV,EAAe,QAASQ,EAAc,GAAO,aAAa,EACjEE,EAAOX,EAAe,QAASS,EAAc,GAAM,aAAa,EAChEE,EAAOT,EAAa,QAASQ,EAAa,GAAM,WAAW,CAC/D,CAAC,EAGD,MAAM,UAAU,IAAM,CAClB,GAAIJ,IAAU,SAAU,CAAEP,EAAW,CAAC,EAAG,MAAQ,CACjD,IAAMiB,EAAU,KAAK,IAAI,EACnBC,EAAK,YAAY,IAAMlB,EAAW,KAAK,OAAO,KAAK,IAAI,EAAIiB,GAAW,GAAI,CAAC,EAAG,GAAI,EACxF,MAAO,IAAM,cAAcC,CAAE,CACjC,EAAG,CAACX,CAAK,CAAC,EAEV,MAAM,UAAU,IAAM,CAAMA,IAAU,QAAQT,EAAa,EAAK,CAAG,EAAG,CAACS,CAAK,CAAC,EAEzE,CAACC,GAAUD,IAAU,QAAUA,IAAU,SAKzCZ,EAAK,YAAa,OAAO,KAE7B,IAAMwB,EAAOC,GAAM,GAAG,OAAO,KAAK,MAAMA,EAAI,EAAE,CAAC,EAAE,SAAS,EAAG,GAAG,CAAC,IAAI,OAAOA,EAAI,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,GAC9FC,EAAUd,IAAU,YAAcA,IAAU,aAC5Ce,EAAaf,IAAU,WAAagB,EAAE,cAAc,EACpDhB,IAAU,aAAegB,EAAE,iBAAiB,EACxChB,IAAU,SAAWY,EAAIpB,CAAO,EAAIwB,EAAE,cAAc,EACxDC,EAAOrC,GAAaoC,EAAE,WAAW,EAGjCE,EAAW,CACb,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,qCAAsC,WAAY,4BAC1D,MAAO,mBAAoB,OAAQ,UAAW,WAAY,UAC9D,EACMC,EAAa,CAAE,GAAGD,EAAU,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,uBAAwB,EACrHE,EAAS,CACX,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,OAAQ,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,UACjF,UAAW,kDAAmD,WAAY,gBAC9E,EACMC,EAAeC,IAAW,CAC5B,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,kCAAoCA,EAAQ,OAAS,OAAS,IACtE,WAAYA,EAAQ,mBAAqB,4BACzC,MAAOA,EAAQ,OAAS,mBAAoB,OAAQ,UAAW,WAAY,UAC/E,GAEMC,EAAW1C,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,iBAAkB,CAAE,EACtK,CAACG,EAAID,EAAK,KAAM,GAAI,CAAC,EAAGiC,EAAE,qBAAqB,CAAC,CAAC,EAM/CQ,EAAU,CACZ,UAAW,CAAE,KAAM,EAAG,MAAO,kBAAmB,MAAO,wBAAyB,MAAOR,EAAE,uBAAuB,CAAE,EAClH,KAAM,CAAE,KAAM,EAAG,MAAO,kBAAmB,MAAO,wBAAyB,MAAOA,EAAE,kBAAkB,CAAE,EACxG,KAAM,CAAE,KAAM,EAAG,MAAO,mBAAoB,MAAO,yBAA0B,MAAOA,EAAE,kBAAkB,CAAE,EAC1G,KAAM,CAAE,KAAM,EAAG,MAAO,gBAAiB,MAAO,sBAAuB,MAAOA,EAAE,kBAAkB,CAAE,CACxG,EACMS,EAAoBC,GAAY,CAClC,IAAMC,EAAIH,EAAQpC,EAAK,OAAO,EAC9B,GAAI,CAACuC,EAAG,OAAO,KACf,IAAMC,EAAO/C,EAAE,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,cAAe,WAAY,WAAY,IAAK,MAAO,OAAQ,MAAO,CAAE,EACxH,CAAC,EAAG,EAAG,EAAG,CAAC,EAAE,IAAIgD,GAAKhD,EAAE,OAAQ,CAC5B,IAAKgD,EAAG,MAAO,CAAE,MAAO,MAAO,OAAS,EAAIA,EAAI,EAAK,KAAM,aAAc,MAAO,WAAYA,EAAIF,EAAE,KAAOA,EAAE,MAAQ,2BAA4B,CACnJ,CAAC,CAAC,CAAC,EACP,OAAID,EAAgBE,EACb/C,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOmC,EAAE,cAAc,EAAG,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAOW,EAAE,KAAM,CAAE,EAAG,CAACC,EAAMD,EAAE,KAAK,CAAC,CACtM,EAGMG,GAAW,IAAMnD,GAAe,aAAa,EAC7CoD,EAAY,IAAMpD,GAAe,cAAc,EAC/CqD,EAAQ,IAAM,CAAEzC,EAAa,EAAK,EAAGZ,GAAe,UAAU,CAAG,EACjEsD,EAAS,IAAMtD,GAAe,YAAY,EAC1CuD,EAAW,IAAMvD,GAAe,eAAe,EAC/CwD,GAAS,IAAMxD,GAAe,eAAe,EAC7CyD,EAAY,IAAMzD,GAAe,iBAAiB,EAElD0D,EAAcxD,EAAE,QAAS,CAAE,IAAK,KAAM,IAAKc,EAAgB,SAAU,GAAM,YAAa,GAAM,MAAO,CAAE,QAAS,MAAO,CAAE,CAAC,EAE1H2C,EAAU,CAACC,EAAKC,EAAKC,IAAU5D,EAAE,MAAO,CAAE,IAAA0D,EAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,KAAM,CAAE,EACvI,CAACC,EAAK3D,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYC,EAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG2D,CAAK,CAAC,CAAC,EAG/GC,EAAa,CAACxD,EAAMyD,IAAS9D,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,QAAS,OAAQ,QAAS,aAAc,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAAG,CACtL8D,GAAQ9D,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,OAAQ,8CAA+C,UAAW,kCAAmC,CAAE,CAAC,EACrM8D,GAAQ9D,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,OAAQ,8CAA+C,UAAW,mCAAoC,eAAgB,IAAK,CAAE,CAAC,EAC3NA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,QAAS,OAAQ,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,6EAA8E,OAAQ,qCAAsC,UAAW,yEAA0E,MAAO,kBAAmB,CAAE,EAAGG,EAAID,EAAK,KAAMG,EAAM,GAAG,CAAC,CACpZ,CAAC,EAGD,OAAIc,IAAU,WACHnB,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAAU,WAAY,gHAAiH,UAAW,mBAAoB,CAAE,EAAG,CAC9QwD,EACAxD,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,aAAc,QAAS,WAAY,CAAE,EACtIA,EAAE,OAAQ,CAAE,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,iBAAkB,CAAE,EAAG,CAACG,EAAID,EAAK,KAAM,GAAI,CAAC,EAAGiC,EAAE,gBAAgB,CAAC,CAAC,CAAC,EACjMnC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,QAAS,CAAE,EAAG,CACnI6D,EAAW,GAAI,EAAI,EACnB7D,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGoC,CAAI,EAC9HpC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,WAAYC,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGM,EAAK,UAAY4B,EAAE,oBAAoB,EAAIA,EAAE,eAAe,CAAC,CACtM,CAAC,EACDnC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,aAAc,eAAgB,SAAU,IAAK,OAAQ,QAAS,gBAAiB,CAAE,EAAG,CAC7JyD,EAAQ,MAAOzD,EAAE,SAAU,CAAE,QAASkD,EAAW,MAAOf,EAAE,cAAc,EAAG,MAAO,CAAE,GAAGI,EAAQ,MAAO,OAAQ,OAAQ,MAAO,CAAE,EAAGpC,EAAID,EAAK,YAAa,GAAI,GAAG,CAAC,EAAGiC,EAAE,cAAc,CAAC,EACpLsB,EAAQ,MAAOzD,EAAE,SAAU,CAAE,QAASiD,GAAU,MAAOd,EAAE,aAAa,EAAG,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,wBAAyB,MAAO,qBAAsB,OAAQ,UAAW,UAAW,4CAA6C,CAAE,EAAGhC,EAAID,EAAK,MAAO,GAAI,GAAG,CAAC,EAAGiC,EAAE,aAAa,CAAC,CAC9X,CAAC,CACL,CAAC,EAID1B,EACOT,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,WAAY,OAAQ,OAAQ,eAAgB,OAAQ,OAAQ,GAAI,MAAO,QAAS,aAAc,OAAQ,SAAU,SAAU,WAAY,oBAAqB,OAAQ,qCAAsC,UAAW,0EAA2E,UAAW,oBAAqB,CAAE,EAAG,CACrWwD,EACAnC,GAAWrB,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,WAAY,OAAQ,QAAS,WAAY,MAAO,CAAE,EAAG,CACpGA,EAAE,QAAS,CAAE,IAAK,KAAM,IAAKa,EAAgB,SAAU,GAAM,MAAO,GAAM,YAAa,GAAM,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,QAAS,QAAS,OAAQ,CAAE,CAAC,EAC7K,CAACN,EAAK,gBAAkBP,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,WAAY,SAAU,WAAY,4DAA6D,MAAO,kBAAmB,CAAE,EAAGG,EAAID,EAAK,OAAQ,GAAI,GAAG,CAAC,EAChQF,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,WAAY,IAAK,MAAO,iBAAkB,MAAO,WAAYC,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,OAAQ,QAAS,UAAW,aAAc,MAAO,WAAY,iBAAkB,CAAE,EAAGiC,CAAU,CACxP,CAAC,EACDlC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,WAAY,CAAE,EAAG,CAC1GA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,iCAAkC,OAAQ,4CAA6C,MAAO,iBAAkB,CAAE,EAAGG,EAAID,EAAK,KAAM,GAAI,GAAG,CAAC,EACvTF,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACrDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGoC,CAAI,EACxKpC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,WAAYC,EAAM,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAG,EAC/IoB,EAAUc,EAAE,kBAAkB,EAAIA,EAAE,kBAAkB,GAAKD,EAC5Df,IAAU,UAAYyB,EAAiB,EAAI,CAC/C,CAAC,CACL,CAAC,EACD5C,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAMU,EAAa,EAAK,EAAG,MAAOyB,EAAE,aAAa,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,UAAW,WAAY,UAAW,CAAE,EAAGhC,EAAID,EAAK,OAAQ,GAAI,CAAC,CAAC,EACnWF,EAAE,SAAU,CAAE,IAAK,MAAO,QAASmD,EAAO,MAAOhB,EAAE,UAAU,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,UAAW,WAAY,gBAAiB,CAAE,EAAGhC,EAAID,EAAK,YAAa,GAAI,CAAC,CAAC,CAChV,CAAC,CACL,CAAC,EAIDmB,EACOrB,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,SAAU,SAAU,WAAY,uBAAwB,UAAW,mBAAoB,CAAE,EAAG,CAC/JwD,EACAjD,EAAK,eACCP,EAAE,QAAS,CAAE,IAAK,KAAM,IAAKa,EAAgB,SAAU,GAAM,MAAO,GAAM,YAAa,GAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,MAAO,OAAQ,OAAQ,OAAQ,UAAW,QAAS,WAAY,sBAAuB,CAAE,CAAC,EAC/Nb,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,WAAY,gFAAiF,eAAgB,YAAa,UAAW,mCAAoC,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,CAAE,EAAG,CACjVA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,QAAS,OAAQ,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,6EAA8E,OAAQ,qCAAsC,MAAO,kBAAmB,CAAE,EAAGG,EAAID,EAAK,KAAM,GAAI,GAAG,CAAC,EACzTF,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGmC,EAAE,oBAAoB,CAAC,CAC3H,CAAC,EAELnC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,IAAK,EAAG,KAAM,EAAG,MAAO,EAAG,QAAS,OAAQ,WAAY,aAAc,eAAgB,gBAAiB,IAAK,OAAQ,QAAS,YAAa,WAAY,wDAAyD,CAAE,EAAG,CACtQA,EAAE,MAAO,CAAE,IAAK,GAAI,EAAG,CACnBA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,MAAO,CAAE,EAAGoC,CAAI,EACjHpC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,UAAW,KAAM,CAAE,EAAG,CAC1GA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,WAAYC,EAAM,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGiC,CAAU,EAChIQ,EACAvB,IAAU,UAAYyB,EAAiB,EAAK,CAChD,CAAC,CACL,CAAC,EACD5C,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAMU,EAAa,EAAI,EAAG,MAAOyB,EAAE,eAAe,EAAG,MAAO,CAAE,KAAM,OAAQ,GAAGK,EAAY,EAAI,CAAE,CAAE,EAAGrC,EAAID,EAAK,SAAU,GAAI,CAAC,CAAC,CACtK,CAAC,EAEDF,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,WAAY,OAAQ,QAAS,eAAgB,OAAQ,MAAO,QAAS,OAAQ,QAAS,aAAc,OAAQ,SAAU,SAAU,OAAQ,sCAAuC,UAAW,yEAA0E,WAAY,MAAO,CAAE,EAAG,CACnUA,EAAE,QAAS,CAAE,IAAK,KAAM,IAAKe,EAAc,SAAU,GAAM,MAAO,GAAM,YAAa,GAAM,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,QAAS,UAAW,aAAc,QAAS,OAAQ,CAAE,CAAC,EACpM,CAACR,EAAK,eAAiBP,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,WAAY,oBAAqB,MAAO,kBAAmB,CAAE,EAAG,CACzPG,EAAID,EAAK,OAAQ,GAAI,GAAG,EACxBF,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,mBAAoB,WAAYC,CAAK,CAAE,EAAGkC,EAAE,gBAAgB,CAAC,CAC3H,CAAC,CACL,CAAC,EAEDnC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,KAAM,EAAG,MAAO,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,OAAQ,QAAS,iBAAkB,WAAY,qDAAsD,CAAE,EAAG,CAClQA,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASoD,EAAQ,MAAOjB,EAAE,WAAW,EAAG,MAAO5B,EAAK,WAAa8B,EAAWC,CAAW,EAAGnC,EAAII,EAAK,WAAaL,EAAK,MAAQA,EAAK,OAAQ,GAAI,GAAG,CAAC,EAC7KF,EAAE,SAAU,CAAE,IAAK,MAAO,QAASqD,EAAU,MAAOlB,EAAE,aAAa,EAAG,MAAO5B,EAAK,cAAgB8B,EAAWC,CAAW,EAAGnC,EAAII,EAAK,cAAgBL,EAAK,MAAQA,EAAK,OAAQ,GAAI,GAAG,CAAC,EACtLF,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASsD,GAAQ,MAAOnB,EAAE,iBAAiB,EAAG,MAAOE,CAAS,EAAGlC,EAAID,EAAK,KAAM,GAAI,GAAG,CAAC,EACnHF,EAAE,SAAU,CAAE,IAAK,MAAO,QAASmD,EAAO,MAAOhB,EAAE,UAAU,EAAG,MAAOI,CAAO,EAAGpC,EAAID,EAAK,YAAa,GAAI,GAAG,CAAC,CACnH,CAAC,CACL,CAAC,EAIEF,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAAU,WAAY,gHAAiH,UAAW,mBAAoB,CAAE,EAAG,CAC9QwD,EACAxD,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,QAAS,WAAY,CAAE,EAAG,CAC5IA,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,iBAAkB,CAAE,EAAG,CAACG,EAAID,EAAK,KAAM,GAAI,CAAC,EAAGiC,EAAE,gBAAgB,CAAC,CAAC,EACxMnC,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAMU,EAAa,EAAI,EAAG,MAAOyB,EAAE,eAAe,EAAG,MAAOK,EAAY,EAAK,CAAE,EAAGrC,EAAID,EAAK,SAAU,GAAI,CAAC,CAAC,CAClJ,CAAC,EACDF,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,QAAS,CAAE,EAAG,CACnI6D,EAAW,GAAI5B,CAAO,EACtBjC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGoC,CAAI,EAC9HpC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,WAAYC,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGiC,CAAU,EAC/If,IAAU,UAAYnB,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,UAAW,MAAO,CAAE,EAAG4C,EAAiB,EAAK,CAAC,CACtG,CAAC,EACD5C,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,aAAc,eAAgB,SAAU,IAAK,OAAQ,QAAS,gBAAiB,CAAE,EAAG,CAC7JyD,EAAQ,OAAQzD,EAAE,SAAU,CAAE,QAASoD,EAAQ,MAAOjB,EAAE,WAAW,EAAG,MAAO5B,EAAK,WAAa8B,EAAWC,CAAW,EAAGnC,EAAII,EAAK,WAAaL,EAAK,MAAQA,EAAK,OAAQ,GAAI,GAAG,CAAC,EAAGK,EAAK,WAAa,OAAS4B,EAAE,YAAY,CAAC,EAC7NsB,EAAQ,QAASzD,EAAE,SAAU,CAAE,QAASuD,EAAW,MAAOpB,EAAE,eAAe,EAAG,MAAOE,CAAS,EAAGlC,EAAID,EAAK,MAAO,GAAI,GAAG,CAAC,EAAGiC,EAAE,YAAY,CAAC,EAC3IsB,EAAQ,MAAOzD,EAAE,SAAU,CAAE,QAASmD,EAAO,MAAOhB,EAAE,UAAU,EAAG,MAAOI,CAAO,EAAGpC,EAAID,EAAK,YAAa,GAAI,GAAG,CAAC,EAAGiC,EAAE,eAAe,CAAC,CAC3I,CAAC,CACL,CAAC,CACL,EAEI,OAAO,OAAW,MAClB,OAAO,gBAAkBtC,Id3P7B,OAAO,0BAA4BkE,GACnC,OAAO,4BAA8BC,GACrC,OAAO,2BAA6BC,GACpC,OAAO,wBAA0B,2BAOjC,IAAMC,GAA0B,IAAM,CAClC,GAAI,CACA,IAAMC,EAAQ,CAAC,EACf,QAASC,EAAI,EAAGA,EAAI,aAAa,OAAQA,IAAK,CAC1C,IAAMC,EAAM,aAAa,IAAID,CAAC,EAC1BC,GAAOA,EAAI,WAAW,WAAW,GAAGF,EAAM,KAAKE,CAAG,CAC1D,CACA,QAAWA,KAAOF,EACd,GAAI,CAAE,aAAa,WAAWE,CAAG,CAAG,MAAY,CAAC,CAEzD,MAAY,CAEZ,CACJ,EAcMC,GAAe,KACb,OAAO,YACX,OAAO,UAAY,OAAO,mBAAmB,EACxC,KAAK,IAAM,CACR,OAAO,cAAc,IAAI,MAAM,oBAAoB,CAAC,CACxD,CAAC,EACA,MAAOC,GAAU,CACd,QAAQ,KAAK,4BAA6BA,GAASA,EAAM,OAAO,EAEhE,OAAO,UAAY,IACvB,CAAC,GACE,OAAO,WAGZC,GAAmB,IAAM,CACvB,OAAO,OAAO,qBAAwB,WACtC,OAAO,oBAAoBF,GAAc,CAAE,QAAS,GAAK,CAAC,EAE1D,WAAWA,GAAc,IAAI,CAErC,EAGMG,GAAQ,IAAM,CAChBP,GAAwB,EACtB,OAAO,OAAO,eAAkB,WAClC,OAAO,cAAc,EACZ,OAAO,YAChB,QAAQ,MAAM,wCAAwC,EAExDM,GAAiB,CACnB,EAEI,SAAS,aAAe,UAC1B,SAAS,iBAAiB,mBAAoBC,EAAK,EAEnDA,GAAM",
+  "sourcesContent": ["/**\n * Secure and Reliable Notification Manager for P2P WebRTC Chat\n * Follows best practices: OWASP, MDN, Chrome DevRel\n * \n * @version 1.0.0\n * @author SecureBit Team\n * @license MIT\n */\n\nclass SecureChatNotificationManager {\n  constructor(config = {}) {\n    // Safely read Notification permission (iOS Safari may not define Notification)\n    this.permission = (typeof Notification !== 'undefined' && Notification && typeof Notification.permission === 'string')\n      ? Notification.permission\n      : 'denied';\n    this.isTabActive = this.checkTabActive(); // Initialize with proper check\n    this.unreadCount = 0;\n    this.originalTitle = document.title;\n    this.notificationQueue = [];\n    this.maxQueueSize = config.maxQueueSize || 5;\n    this.rateLimitMs = config.rateLimitMs || 2000; // Spam protection\n    this.lastNotificationTime = 0;\n    this.trustedOrigins = config.trustedOrigins || [];\n    \n    // Secure context flag\n    this.isSecureContext = window.isSecureContext;\n    \n    // Cross-browser compatibility for Page Visibility API\n    this.hidden = this.getHiddenProperty();\n    this.visibilityChange = this.getVisibilityChangeEvent();\n    \n    this.initVisibilityTracking();\n    this.initSecurityChecks();\n  }\n\n  /**\n   * Initialize security checks and validation\n   * @private\n   */\n  initSecurityChecks() {\n    // Security checks are performed silently\n  }\n\n  /**\n   * Get hidden property name for cross-browser compatibility\n   * @returns {string} Hidden property name\n   * @private\n   */\n  getHiddenProperty() {\n    if (typeof document.hidden !== \"undefined\") {\n      return \"hidden\";\n    } else if (typeof document.msHidden !== \"undefined\") {\n      return \"msHidden\";\n    } else if (typeof document.webkitHidden !== \"undefined\") {\n      return \"webkitHidden\";\n    }\n    return \"hidden\"; // fallback\n  }\n\n  /**\n   * Get visibility change event name for cross-browser compatibility\n   * @returns {string} Visibility change event name\n   * @private\n   */\n  getVisibilityChangeEvent() {\n    if (typeof document.hidden !== \"undefined\") {\n      return \"visibilitychange\";\n    } else if (typeof document.msHidden !== \"undefined\") {\n      return \"msvisibilitychange\";\n    } else if (typeof document.webkitHidden !== \"undefined\") {\n      return \"webkitvisibilitychange\";\n    }\n    return \"visibilitychange\"; // fallback\n  }\n\n  /**\n   * Check if tab is currently active using multiple methods\n   * @returns {boolean} True if tab is active\n   * @private\n   */\n  checkTabActive() {\n    // Primary method: Page Visibility API\n    if (this.hidden && typeof document[this.hidden] !== \"undefined\") {\n      return !document[this.hidden];\n    }\n    \n    // Fallback method: document.hasFocus()\n    if (typeof document.hasFocus === \"function\") {\n      return document.hasFocus();\n    }\n    \n    // Ultimate fallback: assume active\n    return true;\n  }\n\n  /**\n   * Initialize page visibility tracking (Page Visibility API)\n   * @private\n   */\n  initVisibilityTracking() {\n    // Primary method: Page Visibility API with cross-browser support\n    if (typeof document.addEventListener !== \"undefined\" && typeof document[this.hidden] !== \"undefined\") {\n      document.addEventListener(this.visibilityChange, () => {\n        this.isTabActive = this.checkTabActive();\n        \n        if (this.isTabActive) {\n          this.resetUnreadCount();\n          this.clearNotificationQueue();\n        }\n      });\n    }\n\n    // Fallback method: Window focus/blur events\n    window.addEventListener('focus', () => {\n      this.isTabActive = this.checkTabActive();\n      if (this.isTabActive) {\n        this.resetUnreadCount();\n      }\n    });\n\n    window.addEventListener('blur', () => {\n      this.isTabActive = this.checkTabActive();\n    });\n\n    // Page unload cleanup\n    window.addEventListener('beforeunload', () => {\n      this.clearNotificationQueue();\n    });\n  }\n\n  /**\n   * Request notification permission (BEST PRACTICE: Only call in response to user action)\n   * Never call on page load!\n   * @returns {Promise<boolean>} Permission granted status\n   */\n  async requestPermission() {\n    // Secure context check\n    if (!this.isSecureContext || !('Notification' in window)) {\n      return false;\n    }\n\n    if (this.permission === 'granted') {\n      return true;\n    }\n\n    if (this.permission === 'denied') {\n      return false;\n    }\n\n    try {\n      this.permission = await Notification.requestPermission();\n      return this.permission === 'granted';\n    } catch (error) {\n      return false;\n    }\n  }\n\n  /**\n   * Update page title with unread count\n   * @private\n   */\n  updateTitle() {\n    if (this.unreadCount > 0) {\n      document.title = `(${this.unreadCount}) ${this.originalTitle}`;\n    } else {\n      document.title = this.originalTitle;\n    }\n  }\n\n  /**\n   * XSS Protection: Sanitize input text\n   * @param {string} text - Text to sanitize\n   * @returns {string} Sanitized text\n   * @private\n   */\n  sanitizeText(text) {\n    if (typeof text !== 'string') {\n      return '';\n    }\n    \n    // Remove HTML tags and potentially dangerous characters\n    const div = document.createElement('div');\n    div.textContent = text;\n    return div.innerHTML\n      .replace(/</g, '&lt;')\n      .replace(/>/g, '&gt;')\n      .replace(/\"/g, '&quot;')\n      .replace(/'/g, '&#x27;')\n      .substring(0, 500); // Length limit\n  }\n\n  /**\n   * Validate icon URL (XSS protection)\n   * @param {string} url - URL to validate\n   * @returns {string|null} Validated URL or null\n   * @private\n   */\n  validateIconUrl(url) {\n    if (!url) return null;\n    \n    try {\n      const parsedUrl = new URL(url, window.location.origin);\n      \n      // Only allow HTTPS and data URLs\n      if (parsedUrl.protocol === 'https:' || parsedUrl.protocol === 'data:') {\n        // Check trusted origins if specified\n        if (this.trustedOrigins.length > 0) {\n          const isTrusted = this.trustedOrigins.some(origin => \n            parsedUrl.origin === origin\n          );\n          return isTrusted ? parsedUrl.href : null;\n        }\n        return parsedUrl.href;\n      }\n      \n      return null;\n    } catch (error) {\n      return null;\n    }\n  }\n\n  /**\n   * Rate limiting for spam protection\n   * @returns {boolean} Rate limit check passed\n   * @private\n   */\n  checkRateLimit() {\n    const now = Date.now();\n    if (now - this.lastNotificationTime < this.rateLimitMs) {\n      return false;\n    }\n    this.lastNotificationTime = now;\n    return true;\n  }\n\n  /**\n   * Send secure notification\n   * @param {string} senderName - Name of message sender\n   * @param {string} message - Message content\n   * @param {Object} options - Notification options\n   * @returns {Notification|null} Created notification or null\n   */\n  notify(senderName, message, options = {}) {\n    // Abort if Notifications API is not available (e.g., iOS Safari)\n    if (typeof Notification === 'undefined') {\n      return null;\n    }\n    // Update tab active state before checking\n    this.isTabActive = this.checkTabActive();\n    \n    // Only show if tab is NOT active (user is on another tab or minimized)\n    if (this.isTabActive) {\n      return null;\n    }\n\n    // Permission check\n    if (this.permission !== 'granted') {\n      return null;\n    }\n\n    // Rate limiting\n    if (!this.checkRateLimit()) {\n      return null;\n    }\n\n    // Data sanitization (XSS Protection)\n    const safeSenderName = this.sanitizeText(senderName || 'Unknown');\n    const safeMessage = this.sanitizeText(message || '');\n    const safeIcon = this.validateIconUrl(options.icon) || '/logo/icon-192x192.png';\n\n    // Queue overflow protection\n    if (this.notificationQueue.length >= this.maxQueueSize) {\n      this.clearNotificationQueue();\n    }\n\n    try {\n      \n      const notification = new Notification(\n        `${safeSenderName}`,\n        {\n          body: safeMessage.substring(0, 200), // Length limit\n          icon: safeIcon,\n          badge: safeIcon,\n          tag: `chat-${options.senderId || 'unknown'}`, // Grouping\n          requireInteraction: false, // Don't block user\n          silent: options.silent || false,\n          // Vibrate only for mobile and if supported\n          vibrate: navigator.vibrate ? [200, 100, 200] : undefined,\n          // Safe metadata\n          data: {\n            senderId: this.sanitizeText(options.senderId),\n            timestamp: Date.now(),\n            // Don't include sensitive data!\n          }\n        }\n      );\n\n      // Increment counter\n      this.unreadCount++;\n      this.updateTitle();\n\n      // Add to queue for management\n      this.notificationQueue.push(notification);\n\n      // Safe click handler\n      notification.onclick = (event) => {\n        event.preventDefault(); // Prevent default behavior\n        window.focus();\n        notification.close();\n        \n        // Safe callback\n        if (typeof options.onClick === 'function') {\n          try {\n            options.onClick(options.senderId);\n          } catch (error) {\n            console.error('[Notifications] Error in onClick handler:', error);\n          }\n        }\n      };\n\n      // Error handler\n      notification.onerror = (event) => {\n        console.error('[Notifications] Error showing notification:', event);\n      };\n\n      // Auto-close after reasonable time\n      const autoCloseTimeout = Math.min(options.autoClose || 5000, 10000);\n      setTimeout(() => {\n        notification.close();\n        this.removeFromQueue(notification);\n      }, autoCloseTimeout);\n\n      return notification;\n      \n    } catch (error) {\n      console.error('[Notifications] Failed to create notification:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Remove notification from queue\n   * @param {Notification} notification - Notification to remove\n   * @private\n   */\n  removeFromQueue(notification) {\n    const index = this.notificationQueue.indexOf(notification);\n    if (index > -1) {\n      this.notificationQueue.splice(index, 1);\n    }\n  }\n\n  /**\n   * Clear all notifications\n   */\n  clearNotificationQueue() {\n    this.notificationQueue.forEach(notification => {\n      try {\n        notification.close();\n      } catch (error) {\n        // Ignore errors when closing\n      }\n    });\n    this.notificationQueue = [];\n  }\n\n  /**\n   * Reset unread counter\n   */\n  resetUnreadCount() {\n    this.unreadCount = 0;\n    this.updateTitle();\n  }\n\n  /**\n   * Get current status\n   * @returns {Object} Current notification status\n   */\n  getStatus() {\n    return {\n      permission: this.permission,\n      isTabActive: this.isTabActive,\n      unreadCount: this.unreadCount,\n      isSecureContext: this.isSecureContext,\n      queueSize: this.notificationQueue.length\n    };\n  }\n}\n\n/**\n * Secure integration with WebRTC\n */\nclass SecureP2PChat {\n  constructor() {\n    this.notificationManager = new SecureChatNotificationManager({\n      maxQueueSize: 5,\n      rateLimitMs: 2000,\n      trustedOrigins: [\n        window.location.origin,\n        // Add other trusted origins for CDN icons\n      ]\n    });\n    \n    this.dataChannel = null;\n    this.peerConnection = null;\n    this.remotePeerName = 'Peer';\n    this.messageHistory = [];\n    this.maxHistorySize = 100;\n  }\n\n  /**\n   * Initialize when user connects\n   */\n  async init() {\n    // Initialize notification manager silently\n  }\n\n  /**\n   * Method for manual permission request (called on click)\n   * @returns {Promise<boolean>} Permission granted status\n   */\n  async enableNotifications() {\n    const granted = await this.notificationManager.requestPermission();\n    return granted;\n  }\n\n  /**\n   * Setup DataChannel with security checks\n   * @param {RTCDataChannel} dataChannel - WebRTC data channel\n   */\n  setupDataChannel(dataChannel) {\n    if (!dataChannel) {\n      console.error('[Chat] Invalid DataChannel');\n      return;\n    }\n\n    this.dataChannel = dataChannel;\n    \n    // Setup handlers\n    this.dataChannel.onmessage = (event) => {\n      this.handleIncomingMessage(event.data);\n    };\n\n    this.dataChannel.onerror = (error) => {\n      // Handle error silently\n    };\n  }\n\n  /**\n   * XSS Protection: Validate incoming messages\n   * @param {string|Object} data - Message data\n   * @returns {Object|null} Validated message or null\n   * @private\n   */\n  validateMessage(data) {\n    try {\n      const message = typeof data === 'string' ? JSON.parse(data) : data;\n      \n      // Check message structure\n      if (!message || typeof message !== 'object') {\n        throw new Error('Invalid message structure');\n      }\n\n      // Check required fields\n      if (!message.text || typeof message.text !== 'string') {\n        throw new Error('Invalid message text');\n      }\n\n      // Message length limit (DoS protection)\n      if (message.text.length > 10000) {\n        throw new Error('Message too long');\n      }\n\n      return {\n        text: message.text,\n        senderName: message.senderName || 'Unknown',\n        senderId: message.senderId || 'unknown',\n        timestamp: message.timestamp || Date.now(),\n        senderAvatar: message.senderAvatar || null\n      };\n      \n    } catch (error) {\n      console.error('[Chat] Message validation failed:', error);\n      return null;\n    }\n  }\n\n  /**\n   * Secure handling of incoming messages\n   * @param {string|Object} data - Message data\n   * @private\n   */\n  handleIncomingMessage(data) {\n    const message = this.validateMessage(data);\n    \n    if (!message) {\n      return;\n    }\n\n    // Save to history (with limit)\n    this.messageHistory.push(message);\n    if (this.messageHistory.length > this.maxHistorySize) {\n      this.messageHistory.shift();\n    }\n\n    // Display in UI (with sanitization)\n    this.displayMessage(message);\n\n    // Send notification only if tab is inactive\n    this.notificationManager.notify(\n      message.senderName,\n      message.text,\n      {\n        icon: message.senderAvatar,\n        senderId: message.senderId,\n        onClick: (senderId) => {\n          this.scrollToLatestMessage();\n        }\n      }\n    );\n\n    // Optional: sound (with check)\n    if (!this.notificationManager.isTabActive) {\n      this.playNotificationSound();\n    }\n  }\n\n  /**\n   * XSS Protection: Safe message display\n   * @param {Object} message - Message to display\n   * @private\n   */\n  displayMessage(message) {\n    const container = document.getElementById('messages');\n    if (!container) {\n      return;\n    }\n\n    const messageEl = document.createElement('div');\n    messageEl.className = 'message';\n    \n    // Use textContent to prevent XSS\n    const nameEl = document.createElement('strong');\n    nameEl.textContent = message.senderName + ': ';\n    \n    const textEl = document.createElement('span');\n    textEl.textContent = message.text;\n    textEl.style.wordWrap = 'break-word';\n    textEl.style.overflowWrap = 'break-word';\n    textEl.style.whiteSpace = 'normal';\n    \n    const timeEl = document.createElement('small');\n    timeEl.textContent = new Date(message.timestamp).toLocaleTimeString();\n    \n    messageEl.appendChild(nameEl);\n    messageEl.appendChild(textEl);\n    messageEl.appendChild(document.createElement('br'));\n    messageEl.appendChild(timeEl);\n    \n    container.appendChild(messageEl);\n    this.scrollToLatestMessage();\n  }\n\n  /**\n   * Safe sound playback\n   * @private\n   */\n  playNotificationSound() {\n    try {\n      // Use only local audio files\n      const audio = new Audio('/assets/audio/notification.mp3');\n      audio.volume = 0.3; // Moderate volume\n      \n      // Error handling\n      audio.play().catch(error => {\n        // Handle audio error silently\n      });\n    } catch (error) {\n      // Handle audio creation error silently\n    }\n  }\n\n  /**\n   * Scroll to latest message\n   * @private\n   */\n  scrollToLatestMessage() {\n    const container = document.getElementById('messages');\n    if (container) {\n      container.scrollTop = container.scrollHeight;\n    }\n  }\n\n  /**\n   * Get status\n   * @returns {Object} Current chat status\n   */\n  getStatus() {\n    return {\n      notifications: this.notificationManager.getStatus(),\n      messageCount: this.messageHistory.length,\n      connected: this.dataChannel?.readyState === 'open'\n    };\n  }\n}\n\n// Export for use in other modules\nif (typeof module !== 'undefined' && module.exports) {\n  module.exports = { SecureChatNotificationManager, SecureP2PChat };\n}\n\n// Global export for browser usage\nif (typeof window !== 'undefined') {\n  window.SecureChatNotificationManager = SecureChatNotificationManager;\n  window.SecureP2PChat = SecureP2PChat;\n}\n", "/**\n * Notification Integration Module for SecureBit WebRTC Chat\n * Integrates secure notifications with existing WebRTC architecture\n * \n * @version 1.0.0\n * @author SecureBit Team\n * @license MIT\n */\n\nimport { SecureChatNotificationManager } from './SecureNotificationManager.js';\n\nclass NotificationIntegration {\n  constructor(webrtcManager) {\n    this.webrtcManager = webrtcManager;\n    this.notificationManager = new SecureChatNotificationManager({\n      maxQueueSize: 10,\n      rateLimitMs: 1000, // Reduced from 2000ms to 1000ms\n      trustedOrigins: [\n        window.location.origin,\n        // Add other trusted origins for CDN icons\n      ]\n    });\n    \n    this.isInitialized = false;\n    this.originalOnMessage = null;\n    this.originalOnStatusChange = null;\n    this.processedMessages = new Set(); // Track processed messages to avoid duplicates\n  }\n\n  /**\n   * Initialize notification integration\n   * @returns {Promise<boolean>} Initialization success\n   */\n  async init() {\n    try {\n      if (this.isInitialized) {\n        return true;\n      }\n\n      // Store original callbacks\n      this.originalOnMessage = this.webrtcManager.onMessage;\n      this.originalOnStatusChange = this.webrtcManager.onStatusChange;\n\n\n      // Wrap the original onMessage callback.\n      // IMPORTANT: forward ALL arguments (incl. per-message `meta`) so the app\n      // still receives view-once / disappearing / unsend metadata.\n      this.webrtcManager.onMessage = (message, type, ...rest) => {\n        this.handleIncomingMessage(message, type, rest[0]);\n\n        // Call original callback if it exists\n        if (this.originalOnMessage) {\n          this.originalOnMessage(message, type, ...rest);\n        }\n      };\n\n      // Wrap the original onStatusChange callback\n      this.webrtcManager.onStatusChange = (status) => {\n        this.handleStatusChange(status);\n        \n        // Call original callback if it exists\n        if (this.originalOnStatusChange) {\n          this.originalOnStatusChange(status);\n        }\n      };\n\n      // Also hook into the deliverMessageToUI method if it exists.\n      // IMPORTANT: forward ALL arguments (incl. per-message `meta`) to the\n      // original, otherwise view-once / disappearing / unsend metadata is lost.\n      if (this.webrtcManager.deliverMessageToUI) {\n        this.originalDeliverMessageToUI = this.webrtcManager.deliverMessageToUI.bind(this.webrtcManager);\n        this.webrtcManager.deliverMessageToUI = (message, type, ...rest) => {\n          this.handleIncomingMessage(message, type, rest[0]);\n          this.originalDeliverMessageToUI(message, type, ...rest);\n        };\n      }\n\n      this.isInitialized = true;\n      return true;\n\n    } catch (error) {\n      return false;\n    }\n  }\n\n  /**\n   * Handle incoming messages and trigger notifications\n   * @param {*} message - Message content\n   * @param {string} type - Message type\n   * @private\n   */\n  handleIncomingMessage(message, type, meta) {\n    try {\n      // Create a unique key for this message to avoid duplicates\n      const messageKey = `${type}:${typeof message === 'string' ? message : JSON.stringify(message)}`;\n      \n      // Skip if we've already processed this message\n      if (this.processedMessages.has(messageKey)) {\n        return;\n      }\n      \n      // Mark message as processed\n      this.processedMessages.add(messageKey);\n      \n      // Clean up old processed messages (keep only last 100)\n      if (this.processedMessages.size > 100) {\n        const messagesArray = Array.from(this.processedMessages);\n        this.processedMessages.clear();\n        messagesArray.slice(-50).forEach(msg => this.processedMessages.add(msg));\n      }\n      \n      \n      // Only process chat messages, not system messages\n      if (type === 'system' || type === 'file-transfer' || type === 'heartbeat') {\n        return;\n      }\n\n      // Extract message information\n      const messageInfo = this.extractMessageInfo(message, type);\n      if (!messageInfo) {\n        return;\n      }\n\n      // PRIVACY: a view-once or disappearing message must not be copied into the\n      // OS notification. Notifications are shown only while the tab is in the\n      // background \u2014 i.e. typically on a lock screen \u2014 and once the OS has the\n      // text it lands in the notification centre, in backups and on the user's\n      // other synced devices. From there the app can no longer delete it, so the\n      // message the UI destroys after 30 seconds outlives itself indefinitely.\n      // Show that something arrived; never what it said.\n      const isEphemeral = !!meta && typeof meta === 'object' &&\n        (meta.once === true || (Number.isFinite(meta.ttl) && meta.ttl > 0));\n      const notificationText = isEphemeral ? 'Sent you a private message' : messageInfo.text;\n\n      // Send notification\n      const notificationResult = this.notificationManager.notify(\n        messageInfo.senderName,\n        notificationText,\n        {\n          icon: messageInfo.senderAvatar,\n          senderId: messageInfo.senderId,\n          onClick: (senderId) => {\n            this.focusChatWindow();\n          }\n        }\n      );\n\n    } catch (error) {\n      // Handle error silently\n    }\n  }\n\n  /**\n   * Handle status changes\n   * @param {string} status - Connection status\n   * @private\n   */\n  handleStatusChange(status) {\n    try {\n      // Clear notifications when connection is lost\n      if (status === 'disconnected' || status === 'failed') {\n        this.notificationManager.clearNotificationQueue();\n        this.notificationManager.resetUnreadCount();\n      }\n    } catch (error) {\n      // Handle error silently\n    }\n  }\n\n  /**\n   * Extract message information for notifications\n   * @param {*} message - Message content\n   * @param {string} type - Message type\n   * @returns {Object|null} Extracted message info or null\n   * @private\n   */\n  extractMessageInfo(message, type) {\n    try {\n      let messageData = message;\n\n      // Handle different message formats\n      if (typeof message === 'string') {\n        try {\n          messageData = JSON.parse(message);\n        } catch (e) {\n          // Plain text message\n          return {\n            senderName: 'Peer',\n            text: message,\n            senderId: 'peer',\n            senderAvatar: null\n          };\n        }\n      }\n\n      // Handle structured message data\n      if (typeof messageData === 'object' && messageData !== null) {\n        return {\n          senderName: messageData.senderName || messageData.name || 'Peer',\n          text: messageData.text || messageData.message || messageData.content || '',\n          senderId: messageData.senderId || messageData.id || 'peer',\n          senderAvatar: messageData.senderAvatar || messageData.avatar || null\n        };\n      }\n\n      return null;\n    } catch (error) {\n      return null;\n    }\n  }\n\n  /**\n   * Focus chat window when notification is clicked\n   * @private\n   */\n  focusChatWindow() {\n    try {\n      window.focus();\n      \n      // Scroll to bottom of messages if container exists\n      const messagesContainer = document.getElementById('messages');\n      if (messagesContainer) {\n        messagesContainer.scrollTop = messagesContainer.scrollHeight;\n      }\n    } catch (error) {\n      // Handle error silently\n    }\n  }\n\n  /**\n   * Request notification permission\n   * @returns {Promise<boolean>} Permission granted status\n   */\n  async requestPermission() {\n    try {\n      return await this.notificationManager.requestPermission();\n    } catch (error) {\n      return false;\n    }\n  }\n\n  /**\n   * Get notification status\n   * @returns {Object} Notification status\n   */\n  getStatus() {\n    return this.notificationManager.getStatus();\n  }\n\n  /**\n   * Clear all notifications\n   */\n  clearNotifications() {\n    this.notificationManager.clearNotificationQueue();\n    this.notificationManager.resetUnreadCount();\n  }\n\n  /**\n   * Cleanup integration\n   */\n  cleanup() {\n    try {\n      if (this.isInitialized) {\n        // Restore original callbacks\n        if (this.originalOnMessage) {\n          this.webrtcManager.onMessage = this.originalOnMessage;\n        }\n        if (this.originalOnStatusChange) {\n          this.webrtcManager.onStatusChange = this.originalOnStatusChange;\n        }\n        if (this.originalDeliverMessageToUI) {\n          this.webrtcManager.deliverMessageToUI = this.originalDeliverMessageToUI;\n        }\n\n        // Clear notifications\n        this.clearNotifications();\n\n        this.isInitialized = false;\n      }\n    } catch (error) {\n      // Handle error silently\n    }\n  }\n}\n\n// Export for use in other modules\nif (typeof module !== 'undefined' && module.exports) {\n  module.exports = { NotificationIntegration };\n}\n\n// Global export for browser usage\nif (typeof window !== 'undefined') {\n  window.NotificationIntegration = NotificationIntegration;\n}\n", "const {\n  entries,\n  setPrototypeOf,\n  isFrozen,\n  getPrototypeOf,\n  getOwnPropertyDescriptor,\n} = Object;\n\nlet { freeze, seal, create } = Object; // eslint-disable-line import/no-mutable-exports\nlet { apply, construct } = typeof Reflect !== 'undefined' && Reflect;\n\nif (!freeze) {\n  freeze = function <T>(x: T): T {\n    return x;\n  };\n}\n\nif (!seal) {\n  seal = function <T>(x: T): T {\n    return x;\n  };\n}\n\nif (!apply) {\n  apply = function <T>(\n    func: (thisArg: any, ...args: any[]) => T,\n    thisArg: any,\n    ...args: any[]\n  ): T {\n    return func.apply(thisArg, args);\n  };\n}\n\nif (!construct) {\n  construct = function <T>(Func: new (...args: any[]) => T, ...args: any[]): T {\n    return new Func(...args);\n  };\n}\n\nconst arrayForEach = unapply(Array.prototype.forEach);\nconst arrayIndexOf = unapply(Array.prototype.indexOf);\nconst arrayLastIndexOf = unapply(Array.prototype.lastIndexOf);\nconst arrayPop = unapply(Array.prototype.pop);\nconst arrayPush = unapply(Array.prototype.push);\nconst arraySlice = unapply(Array.prototype.slice);\nconst arraySplice = unapply(Array.prototype.splice);\nconst arrayIsArray = Array.isArray;\n\nconst stringToLowerCase = unapply(String.prototype.toLowerCase);\nconst stringToString = unapply(String.prototype.toString);\nconst stringMatch = unapply(String.prototype.match);\nconst stringReplace = unapply(String.prototype.replace);\nconst stringIndexOf = unapply(String.prototype.indexOf);\nconst stringTrim = unapply(String.prototype.trim);\n\nconst numberToString = unapply(Number.prototype.toString);\nconst booleanToString = unapply(Boolean.prototype.toString);\nconst bigintToString =\n  typeof BigInt === 'undefined' ? null : unapply(BigInt.prototype.toString);\nconst symbolToString =\n  typeof Symbol === 'undefined' ? null : unapply(Symbol.prototype.toString);\n\nconst objectHasOwnProperty = unapply(Object.prototype.hasOwnProperty);\nconst objectToString = unapply(Object.prototype.toString);\n\nconst regExpTest = unapply(RegExp.prototype.test);\n\nconst typeErrorCreate = unconstruct(TypeError);\n\n/**\n * Creates a new function that calls the given function with a specified thisArg and arguments.\n *\n * @param func - The function to be wrapped and called.\n * @returns A new function that calls the given function with a specified thisArg and arguments.\n */\nfunction unapply<T>(\n  func: (thisArg: any, ...args: any[]) => T\n): (thisArg: any, ...args: any[]) => T {\n  return (thisArg: any, ...args: any[]): T => {\n    if (thisArg instanceof RegExp) {\n      thisArg.lastIndex = 0;\n    }\n\n    return apply(func, thisArg, args);\n  };\n}\n\n/**\n * Creates a new function that constructs an instance of the given constructor function with the provided arguments.\n *\n * @param func - The constructor function to be wrapped and called.\n * @returns A new function that constructs an instance of the given constructor function with the provided arguments.\n */\nfunction unconstruct<T>(\n  Func: new (...args: any[]) => T\n): (...args: any[]) => T {\n  return (...args: any[]): T => construct(Func, args);\n}\n\n/**\n * Add properties to a lookup table\n *\n * @param set - The set to which elements will be added.\n * @param array - The array containing elements to be added to the set.\n * @param transformCaseFunc - An optional function to transform the case of each element before adding to the set.\n * @returns The modified set with added elements.\n */\nfunction addToSet(\n  set: Record<string, boolean>,\n  array: readonly unknown[],\n  transformCaseFunc: ReturnType<typeof unapply<string>> = stringToLowerCase\n): Record<string, boolean> {\n  if (setPrototypeOf) {\n    // Make 'in' and truthy checks like Boolean(set.constructor)\n    // independent of any properties defined on Object.prototype.\n    // Prevent prototype setters from intercepting set as a this value.\n    setPrototypeOf(set, null);\n  }\n\n  if (!arrayIsArray(array)) {\n    return set;\n  }\n\n  let l = array.length;\n  while (l--) {\n    let element = array[l];\n\n    if (typeof element === 'string') {\n      const lcElement = transformCaseFunc(element);\n\n      if (lcElement !== element) {\n        // Config presets (e.g. tags.js, attrs.js) are immutable.\n        if (!isFrozen(array)) {\n          (array as unknown[])[l] = lcElement;\n        }\n\n        element = lcElement;\n      }\n    }\n\n    set[element as string] = true;\n  }\n\n  return set;\n}\n\n/**\n * Clean up an array to harden against CSPP\n *\n * @param array - The array to be cleaned.\n * @returns The cleaned version of the array\n */\nfunction cleanArray<T>(array: T[]): Array<T | null> {\n  for (let index = 0; index < array.length; index++) {\n    const isPropertyExist = objectHasOwnProperty(array, index);\n\n    if (!isPropertyExist) {\n      array[index] = null;\n    }\n  }\n\n  return array;\n}\n\n/**\n * Shallow clone an object\n *\n * @param object - The object to be cloned.\n * @returns A new object that copies the original.\n */\nfunction clone<T extends Record<string, any>>(object: T): T {\n  const newObject = create(null);\n\n  for (const [property, value] of entries(object)) {\n    const isPropertyExist = objectHasOwnProperty(object, property);\n\n    if (isPropertyExist) {\n      if (arrayIsArray(value)) {\n        newObject[property] = cleanArray(value);\n      } else if (\n        value &&\n        typeof value === 'object' &&\n        value.constructor === Object\n      ) {\n        newObject[property] = clone(value);\n      } else {\n        newObject[property] = value;\n      }\n    }\n  }\n\n  return newObject;\n}\n\n/**\n * Convert non-node values into strings without depending on direct property access.\n *\n * @param value - The value to stringify.\n * @returns A string representation of the provided value.\n */\nfunction stringifyValue(value: unknown): string {\n  switch (typeof value) {\n    case 'string': {\n      return value;\n    }\n\n    case 'number': {\n      return numberToString(value);\n    }\n\n    case 'boolean': {\n      return booleanToString(value);\n    }\n\n    case 'bigint': {\n      return bigintToString ? bigintToString(value) : '0';\n    }\n\n    case 'symbol': {\n      return symbolToString ? symbolToString(value) : 'Symbol()';\n    }\n\n    case 'undefined': {\n      return objectToString(value);\n    }\n\n    case 'function':\n    case 'object': {\n      if (value === null) {\n        return objectToString(value);\n      }\n\n      const valueAsRecord = value as Record<string, any>;\n      const valueToString = lookupGetter(valueAsRecord, 'toString');\n\n      if (typeof valueToString === 'function') {\n        const stringified = valueToString(valueAsRecord);\n\n        return typeof stringified === 'string'\n          ? stringified\n          : objectToString(stringified);\n      }\n\n      return objectToString(value);\n    }\n\n    default: {\n      return objectToString(value);\n    }\n  }\n}\n\n/**\n * This method automatically checks if the prop is function or getter and behaves accordingly.\n *\n * @param object - The object to look up the getter function in its prototype chain.\n * @param prop - The property name for which to find the getter function.\n * @returns The getter function found in the prototype chain or a fallback function.\n */\nfunction lookupGetter<T extends Record<string, any>>(\n  object: T,\n  prop: string\n): ReturnType<typeof unapply<any>> | (() => null) {\n  while (object !== null) {\n    const desc = getOwnPropertyDescriptor(object, prop);\n\n    if (desc) {\n      if (desc.get) {\n        return unapply(desc.get);\n      }\n\n      if (typeof desc.value === 'function') {\n        return unapply(desc.value);\n      }\n    }\n\n    object = getPrototypeOf(object);\n  }\n\n  function fallbackValue(): null {\n    return null;\n  }\n\n  return fallbackValue;\n}\n\nfunction isRegex(value: unknown): value is RegExp {\n  try {\n    regExpTest(value as RegExp, '');\n    return true;\n  } catch {\n    return false;\n  }\n}\n\nexport {\n  // Array\n  arrayForEach,\n  arrayIndexOf,\n  arrayIsArray,\n  arrayLastIndexOf,\n  arrayPop,\n  arrayPush,\n  arraySlice,\n  arraySplice,\n  // Object\n  entries,\n  freeze,\n  getPrototypeOf,\n  getOwnPropertyDescriptor,\n  isFrozen,\n  setPrototypeOf,\n  seal,\n  clone,\n  create,\n  objectHasOwnProperty,\n  objectToString,\n  // RegExp\n  regExpTest,\n  isRegex,\n  // String\n  stringIndexOf,\n  stringMatch,\n  stringReplace,\n  stringToLowerCase,\n  stringToString,\n  stringTrim,\n  // Other conversion\n  stringifyValue,\n  // Errors\n  typeErrorCreate,\n  // Other\n  lookupGetter,\n  addToSet,\n  // Reflect\n  unapply,\n  unconstruct,\n};\n", "import { freeze } from './utils.js';\n\nexport const html = freeze([\n  'a',\n  'abbr',\n  'acronym',\n  'address',\n  'area',\n  'article',\n  'aside',\n  'audio',\n  'b',\n  'bdi',\n  'bdo',\n  'big',\n  'blink',\n  'blockquote',\n  'body',\n  'br',\n  'button',\n  'canvas',\n  'caption',\n  'center',\n  'cite',\n  'code',\n  'col',\n  'colgroup',\n  'content',\n  'data',\n  'datalist',\n  'dd',\n  'decorator',\n  'del',\n  'details',\n  'dfn',\n  'dialog',\n  'dir',\n  'div',\n  'dl',\n  'dt',\n  'element',\n  'em',\n  'fieldset',\n  'figcaption',\n  'figure',\n  'font',\n  'footer',\n  'form',\n  'h1',\n  'h2',\n  'h3',\n  'h4',\n  'h5',\n  'h6',\n  'head',\n  'header',\n  'hgroup',\n  'hr',\n  'html',\n  'i',\n  'img',\n  'input',\n  'ins',\n  'kbd',\n  'label',\n  'legend',\n  'li',\n  'main',\n  'map',\n  'mark',\n  'marquee',\n  'menu',\n  'menuitem',\n  'meter',\n  'nav',\n  'nobr',\n  'ol',\n  'optgroup',\n  'option',\n  'output',\n  'p',\n  'picture',\n  'pre',\n  'progress',\n  'q',\n  'rp',\n  'rt',\n  'ruby',\n  's',\n  'samp',\n  'search',\n  'section',\n  'select',\n  'shadow',\n  'slot',\n  'small',\n  'source',\n  'spacer',\n  'span',\n  'strike',\n  'strong',\n  'style',\n  'sub',\n  'summary',\n  'sup',\n  'table',\n  'tbody',\n  'td',\n  'template',\n  'textarea',\n  'tfoot',\n  'th',\n  'thead',\n  'time',\n  'tr',\n  'track',\n  'tt',\n  'u',\n  'ul',\n  'var',\n  'video',\n  'wbr',\n] as const);\n\nexport const svg = freeze([\n  'svg',\n  'a',\n  'altglyph',\n  'altglyphdef',\n  'altglyphitem',\n  'animatecolor',\n  'animatemotion',\n  'animatetransform',\n  'circle',\n  'clippath',\n  'defs',\n  'desc',\n  'ellipse',\n  'enterkeyhint',\n  'exportparts',\n  'filter',\n  'font',\n  'g',\n  'glyph',\n  'glyphref',\n  'hkern',\n  'image',\n  'inputmode',\n  'line',\n  'lineargradient',\n  'marker',\n  'mask',\n  'metadata',\n  'mpath',\n  'part',\n  'path',\n  'pattern',\n  'polygon',\n  'polyline',\n  'radialgradient',\n  'rect',\n  'stop',\n  'style',\n  'switch',\n  'symbol',\n  'text',\n  'textpath',\n  'title',\n  'tref',\n  'tspan',\n  'view',\n  'vkern',\n] as const);\n\nexport const svgFilters = freeze([\n  'feBlend',\n  'feColorMatrix',\n  'feComponentTransfer',\n  'feComposite',\n  'feConvolveMatrix',\n  'feDiffuseLighting',\n  'feDisplacementMap',\n  'feDistantLight',\n  'feDropShadow',\n  'feFlood',\n  'feFuncA',\n  'feFuncB',\n  'feFuncG',\n  'feFuncR',\n  'feGaussianBlur',\n  'feImage',\n  'feMerge',\n  'feMergeNode',\n  'feMorphology',\n  'feOffset',\n  'fePointLight',\n  'feSpecularLighting',\n  'feSpotLight',\n  'feTile',\n  'feTurbulence',\n] as const);\n\n// List of SVG elements that are disallowed by default.\n// We still need to know them so that we can do namespace\n// checks properly in case one wants to add them to\n// allow-list.\nexport const svgDisallowed = freeze([\n  'animate',\n  'color-profile',\n  'cursor',\n  'discard',\n  'font-face',\n  'font-face-format',\n  'font-face-name',\n  'font-face-src',\n  'font-face-uri',\n  'foreignobject',\n  'hatch',\n  'hatchpath',\n  'mesh',\n  'meshgradient',\n  'meshpatch',\n  'meshrow',\n  'missing-glyph',\n  'script',\n  'set',\n  'solidcolor',\n  'unknown',\n  'use',\n] as const);\n\nexport const mathMl = freeze([\n  'math',\n  'menclose',\n  'merror',\n  'mfenced',\n  'mfrac',\n  'mglyph',\n  'mi',\n  'mlabeledtr',\n  'mmultiscripts',\n  'mn',\n  'mo',\n  'mover',\n  'mpadded',\n  'mphantom',\n  'mroot',\n  'mrow',\n  'ms',\n  'mspace',\n  'msqrt',\n  'mstyle',\n  'msub',\n  'msup',\n  'msubsup',\n  'mtable',\n  'mtd',\n  'mtext',\n  'mtr',\n  'munder',\n  'munderover',\n  'mprescripts',\n] as const);\n\n// Similarly to SVG, we want to know all MathML elements,\n// even those that we disallow by default.\nexport const mathMlDisallowed = freeze([\n  'maction',\n  'maligngroup',\n  'malignmark',\n  'mlongdiv',\n  'mscarries',\n  'mscarry',\n  'msgroup',\n  'mstack',\n  'msline',\n  'msrow',\n  'semantics',\n  'annotation',\n  'annotation-xml',\n  'mprescripts',\n  'none',\n] as const);\n\nexport const text = freeze(['#text'] as const);\n", "import { freeze } from './utils.js';\n\nexport const html = freeze([\n  'accept',\n  'action',\n  'align',\n  'alt',\n  'autocapitalize',\n  'autocomplete',\n  'autopictureinpicture',\n  'autoplay',\n  'background',\n  'bgcolor',\n  'border',\n  'capture',\n  'cellpadding',\n  'cellspacing',\n  'checked',\n  'cite',\n  'class',\n  'clear',\n  'color',\n  'cols',\n  'colspan',\n  'command',\n  'commandfor',\n  'controls',\n  'controlslist',\n  'coords',\n  'crossorigin',\n  'datetime',\n  'decoding',\n  'default',\n  'dir',\n  'disabled',\n  'disablepictureinpicture',\n  'disableremoteplayback',\n  'download',\n  'draggable',\n  'enctype',\n  'enterkeyhint',\n  'exportparts',\n  'face',\n  'for',\n  'headers',\n  'height',\n  'hidden',\n  'high',\n  'href',\n  'hreflang',\n  'id',\n  'inert',\n  'inputmode',\n  'integrity',\n  'ismap',\n  'kind',\n  'label',\n  'lang',\n  'list',\n  'loading',\n  'loop',\n  'low',\n  'max',\n  'maxlength',\n  'media',\n  'method',\n  'min',\n  'minlength',\n  'multiple',\n  'muted',\n  'name',\n  'nonce',\n  'noshade',\n  'novalidate',\n  'nowrap',\n  'open',\n  'optimum',\n  'part',\n  'pattern',\n  'placeholder',\n  'playsinline',\n  'popover',\n  'popovertarget',\n  'popovertargetaction',\n  'poster',\n  'preload',\n  'pubdate',\n  'radiogroup',\n  'readonly',\n  'rel',\n  'required',\n  'rev',\n  'reversed',\n  'role',\n  'rows',\n  'rowspan',\n  'spellcheck',\n  'scope',\n  'selected',\n  'shape',\n  'size',\n  'sizes',\n  'slot',\n  'span',\n  'srclang',\n  'start',\n  'src',\n  'srcset',\n  'step',\n  'style',\n  'summary',\n  'tabindex',\n  'title',\n  'translate',\n  'type',\n  'usemap',\n  'valign',\n  'value',\n  'width',\n  'wrap',\n  'xmlns',\n] as const);\n\nexport const svg = freeze([\n  'accent-height',\n  'accumulate',\n  'additive',\n  'alignment-baseline',\n  'amplitude',\n  'ascent',\n  'attributename',\n  'attributetype',\n  'azimuth',\n  'basefrequency',\n  'baseline-shift',\n  'begin',\n  'bias',\n  'by',\n  'class',\n  'clip',\n  'clippathunits',\n  'clip-path',\n  'clip-rule',\n  'color',\n  'color-interpolation',\n  'color-interpolation-filters',\n  'color-profile',\n  'color-rendering',\n  'cx',\n  'cy',\n  'd',\n  'dx',\n  'dy',\n  'diffuseconstant',\n  'direction',\n  'display',\n  'divisor',\n  'dur',\n  'edgemode',\n  'elevation',\n  'end',\n  'exponent',\n  'fill',\n  'fill-opacity',\n  'fill-rule',\n  'filter',\n  'filterunits',\n  'flood-color',\n  'flood-opacity',\n  'font-family',\n  'font-size',\n  'font-size-adjust',\n  'font-stretch',\n  'font-style',\n  'font-variant',\n  'font-weight',\n  'fx',\n  'fy',\n  'g1',\n  'g2',\n  'glyph-name',\n  'glyphref',\n  'gradientunits',\n  'gradienttransform',\n  'height',\n  'href',\n  'id',\n  'image-rendering',\n  'in',\n  'in2',\n  'intercept',\n  'k',\n  'k1',\n  'k2',\n  'k3',\n  'k4',\n  'kerning',\n  'keypoints',\n  'keysplines',\n  'keytimes',\n  'lang',\n  'lengthadjust',\n  'letter-spacing',\n  'kernelmatrix',\n  'kernelunitlength',\n  'lighting-color',\n  'local',\n  'marker-end',\n  'marker-mid',\n  'marker-start',\n  'markerheight',\n  'markerunits',\n  'markerwidth',\n  'maskcontentunits',\n  'maskunits',\n  'max',\n  'mask',\n  'mask-type',\n  'media',\n  'method',\n  'mode',\n  'min',\n  'name',\n  'numoctaves',\n  'offset',\n  'operator',\n  'opacity',\n  'order',\n  'orient',\n  'orientation',\n  'origin',\n  'overflow',\n  'paint-order',\n  'path',\n  'pathlength',\n  'patterncontentunits',\n  'patterntransform',\n  'patternunits',\n  'points',\n  'preservealpha',\n  'preserveaspectratio',\n  'primitiveunits',\n  'r',\n  'rx',\n  'ry',\n  'radius',\n  'refx',\n  'refy',\n  'repeatcount',\n  'repeatdur',\n  'restart',\n  'result',\n  'rotate',\n  'scale',\n  'seed',\n  'shape-rendering',\n  'slope',\n  'specularconstant',\n  'specularexponent',\n  'spreadmethod',\n  'startoffset',\n  'stddeviation',\n  'stitchtiles',\n  'stop-color',\n  'stop-opacity',\n  'stroke-dasharray',\n  'stroke-dashoffset',\n  'stroke-linecap',\n  'stroke-linejoin',\n  'stroke-miterlimit',\n  'stroke-opacity',\n  'stroke',\n  'stroke-width',\n  'style',\n  'surfacescale',\n  'systemlanguage',\n  'tabindex',\n  'tablevalues',\n  'targetx',\n  'targety',\n  'transform',\n  'transform-origin',\n  'text-anchor',\n  'text-decoration',\n  'text-rendering',\n  'textlength',\n  'type',\n  'u1',\n  'u2',\n  'unicode',\n  'values',\n  'viewbox',\n  'visibility',\n  'version',\n  'vert-adv-y',\n  'vert-origin-x',\n  'vert-origin-y',\n  'width',\n  'word-spacing',\n  'wrap',\n  'writing-mode',\n  'xchannelselector',\n  'ychannelselector',\n  'x',\n  'x1',\n  'x2',\n  'xmlns',\n  'y',\n  'y1',\n  'y2',\n  'z',\n  'zoomandpan',\n] as const);\n\nexport const mathMl = freeze([\n  'accent',\n  'accentunder',\n  'align',\n  'bevelled',\n  'close',\n  'columnalign',\n  'columnlines',\n  'columnspacing',\n  'columnspan',\n  'denomalign',\n  'depth',\n  'dir',\n  'display',\n  'displaystyle',\n  'encoding',\n  'fence',\n  'frame',\n  'height',\n  'href',\n  'id',\n  'largeop',\n  'length',\n  'linethickness',\n  'lquote',\n  'lspace',\n  'mathbackground',\n  'mathcolor',\n  'mathsize',\n  'mathvariant',\n  'maxsize',\n  'minsize',\n  'movablelimits',\n  'notation',\n  'numalign',\n  'open',\n  'rowalign',\n  'rowlines',\n  'rowspacing',\n  'rowspan',\n  'rspace',\n  'rquote',\n  'scriptlevel',\n  'scriptminsize',\n  'scriptsizemultiplier',\n  'selection',\n  'separator',\n  'separators',\n  'stretchy',\n  'subscriptshift',\n  'supscriptshift',\n  'symmetric',\n  'voffset',\n  'width',\n  'xmlns',\n]);\n\nexport const xml = freeze([\n  'xlink:href',\n  'xml:id',\n  'xlink:title',\n  'xml:space',\n  'xmlns:xlink',\n] as const);\n", "import { seal } from './utils.js';\n\nexport const MUSTACHE_EXPR = seal(/{{[\\w\\W]*|^[\\w\\W]*}}/g);\nexport const ERB_EXPR = seal(/<%[\\w\\W]*|^[\\w\\W]*%>/g);\nexport const TMPLIT_EXPR = seal(/\\${[\\w\\W]*/g);\nexport const DATA_ATTR = seal(/^data-[\\-\\w.\\u00B7-\\uFFFF]+$/); // eslint-disable-line no-useless-escape\nexport const ARIA_ATTR = seal(/^aria-[\\-\\w]+$/); // eslint-disable-line no-useless-escape\nexport const IS_ALLOWED_URI = seal(\n  /^(?:(?:(?:f|ht)tps?|mailto|tel|callto|sms|cid|xmpp|matrix):|[^a-z]|[a-z+.\\-]+(?:[^a-z+.\\-:]|$))/i // eslint-disable-line no-useless-escape\n);\nexport const IS_SCRIPT_OR_DATA = seal(/^(?:\\w+script|data):/i);\nexport const ATTR_WHITESPACE = seal(\n  /[\\u0000-\\u0020\\u00A0\\u1680\\u180E\\u2000-\\u2029\\u205F\\u3000]/g // eslint-disable-line no-control-regex\n);\nexport const DOCTYPE_NAME = seal(/^html$/i);\nexport const CUSTOM_ELEMENT = seal(/^[a-z][.\\w]*(-[.\\w]+)+$/i);\n\n// Markup-significant character probes used by _sanitizeElements.\n// Shared module-level instances are safe despite the sticky /g flags:\n// unapply() resets lastIndex for RegExp receivers before every call.\nexport const ELEMENT_MARKUP_PROBE = seal(/<[/\\w!]/g);\nexport const COMMENT_MARKUP_PROBE = seal(/<[/\\w]/g);\nexport const FALLBACK_TAG_CLOSE = seal(/<\\/no(script|embed|frames)/i);\nexport const SELF_CLOSING_TAG = seal(/\\/>/i);\n", "/* eslint-disable @typescript-eslint/indent */\n\nimport type { Config, UseProfilesConfig } from './config';\nimport type { DOMPurify, HooksMap, HookFunction, WindowLike } from './types';\nimport * as TAGS from './tags.js';\nimport * as ATTRS from './attrs.js';\nimport * as EXPRESSIONS from './regexp.js';\nimport {\n  addToSet,\n  clone,\n  entries,\n  freeze,\n  seal,\n  arrayForEach,\n  arrayIsArray,\n  arrayLastIndexOf,\n  arrayPop,\n  arrayPush,\n  arraySplice,\n  stringMatch,\n  stringReplace,\n  stringToLowerCase,\n  stringToString,\n  stringIndexOf,\n  stringTrim,\n  regExpTest,\n  isRegex,\n  typeErrorCreate,\n  lookupGetter,\n  create,\n  objectHasOwnProperty,\n  stringifyValue,\n} from './utils.js';\n\nexport type { Config } from './config';\n\nexport type {\n  DOMPurify,\n  RemovedElement,\n  RemovedAttribute,\n  HookName,\n  NodeHook,\n  ElementHook,\n  DocumentFragmentHook,\n  UponSanitizeElementHook,\n  UponSanitizeAttributeHook,\n  UponSanitizeElementHookEvent,\n  UponSanitizeAttributeHookEvent,\n  WindowLike,\n} from './types';\n\ndeclare const VERSION: string;\n\n// https://developer.mozilla.org/en-US/docs/Web/API/Node/nodeType\nconst NODE_TYPE = {\n  element: 1,\n  attribute: 2,\n  text: 3,\n  cdataSection: 4,\n  entityReference: 5, // Deprecated\n  entityNode: 6, // Deprecated\n  processingInstruction: 7,\n  comment: 8,\n  document: 9,\n  documentType: 10,\n  documentFragment: 11,\n  notation: 12, // Deprecated\n};\n\nconst getGlobal = function (): WindowLike {\n  return typeof window === 'undefined' ? null : window;\n};\n\n/**\n * Creates a no-op policy for internal use only.\n * Don't export this function outside this module!\n * @param trustedTypes The policy factory.\n * @param purifyHostElement The Script element used to load DOMPurify (to determine policy name suffix).\n * @return The policy created (or null, if Trusted Types\n * are not supported or creating the policy failed).\n */\nconst _createTrustedTypesPolicy = function (\n  trustedTypes: TrustedTypePolicyFactory,\n  purifyHostElement: HTMLScriptElement\n) {\n  if (\n    typeof trustedTypes !== 'object' ||\n    typeof trustedTypes.createPolicy !== 'function'\n  ) {\n    return null;\n  }\n\n  // Allow the callers to control the unique policy name\n  // by adding a data-tt-policy-suffix to the script element with the DOMPurify.\n  // Policy creation with duplicate names throws in Trusted Types.\n  let suffix = null;\n  const ATTR_NAME = 'data-tt-policy-suffix';\n  if (purifyHostElement && purifyHostElement.hasAttribute(ATTR_NAME)) {\n    suffix = purifyHostElement.getAttribute(ATTR_NAME);\n  }\n\n  const policyName = 'dompurify' + (suffix ? '#' + suffix : '');\n\n  try {\n    return trustedTypes.createPolicy(policyName, {\n      createHTML(html) {\n        return html;\n      },\n      createScriptURL(scriptUrl) {\n        return scriptUrl;\n      },\n    });\n  } catch (_) {\n    // Policy creation failed (most likely another DOMPurify script has\n    // already run). Skip creating the policy, as this will only cause errors\n    // if TT are enforced.\n    console.warn(\n      'TrustedTypes policy ' + policyName + ' could not be created.'\n    );\n    return null;\n  }\n};\n\nconst _createHooksMap = function (): HooksMap {\n  return {\n    afterSanitizeAttributes: [],\n    afterSanitizeElements: [],\n    afterSanitizeShadowDOM: [],\n    beforeSanitizeAttributes: [],\n    beforeSanitizeElements: [],\n    beforeSanitizeShadowDOM: [],\n    uponSanitizeAttribute: [],\n    uponSanitizeElement: [],\n    uponSanitizeShadowNode: [],\n  };\n};\n\n/**\n * Resolve a set-valued configuration option: a fresh set built from\n * cfg[key] when it is an own array property (seeded with a clone of\n * options.base when given, case-normalized via options.transform),\n * the fallback set otherwise.\n *\n * @param cfg the cloned, prototype-free configuration object\n * @param key the configuration property to read\n * @param fallback the set to use when the option is absent or not an array\n * @param options transform and optional base set to merge into\n * @returns the resolved set\n */\nconst _resolveSetOption = function (\n  cfg: Config,\n  key: keyof Config,\n  fallback: Record<string, boolean>,\n  options: {\n    transform: Parameters<typeof addToSet>[2];\n    base?: Record<string, boolean>;\n  }\n): Record<string, boolean> {\n  return objectHasOwnProperty(cfg, key) && arrayIsArray(cfg[key])\n    ? addToSet(\n        options.base ? clone(options.base) : {},\n        cfg[key] as readonly unknown[],\n        options.transform\n      )\n    : fallback;\n};\n\nfunction createDOMPurify(window: WindowLike = getGlobal()): DOMPurify {\n  const DOMPurify: DOMPurify = (root: WindowLike) => createDOMPurify(root);\n\n  DOMPurify.version = VERSION;\n\n  DOMPurify.removed = [];\n\n  if (\n    !window ||\n    !window.document ||\n    window.document.nodeType !== NODE_TYPE.document ||\n    !window.Element\n  ) {\n    // Not running in a browser, provide a factory function\n    // so that you can pass your own Window\n    DOMPurify.isSupported = false;\n\n    return DOMPurify;\n  }\n\n  let { document } = window;\n\n  const originalDocument = document;\n  const currentScript: HTMLScriptElement =\n    originalDocument.currentScript as HTMLScriptElement;\n  const {\n    DocumentFragment,\n    HTMLTemplateElement,\n    Node,\n    Element,\n    NodeFilter,\n    NamedNodeMap = window.NamedNodeMap || (window as any).MozNamedAttrMap,\n    HTMLFormElement,\n    DOMParser,\n    trustedTypes,\n  } = window;\n\n  const ElementPrototype = Element.prototype;\n\n  const cloneNode = lookupGetter(ElementPrototype, 'cloneNode');\n  const remove = lookupGetter(ElementPrototype, 'remove');\n  const getNextSibling = lookupGetter(ElementPrototype, 'nextSibling');\n  const getChildNodes = lookupGetter(ElementPrototype, 'childNodes');\n  const getParentNode = lookupGetter(ElementPrototype, 'parentNode');\n  const getShadowRoot = lookupGetter(ElementPrototype, 'shadowRoot');\n  const getAttributes = lookupGetter(ElementPrototype, 'attributes');\n  const getNodeType =\n    Node && Node.prototype ? lookupGetter(Node.prototype, 'nodeType') : null;\n  const getNodeName =\n    Node && Node.prototype ? lookupGetter(Node.prototype, 'nodeName') : null;\n\n  // As per issue #47, the web-components registry is inherited by a\n  // new document created via createHTMLDocument. As per the spec\n  // (http://w3c.github.io/webcomponents/spec/custom/#creating-and-passing-registries)\n  // a new empty registry is used when creating a template contents owner\n  // document, so we use that as our parent document to ensure nothing\n  // is inherited.\n  if (typeof HTMLTemplateElement === 'function') {\n    const template = document.createElement('template');\n    if (template.content && template.content.ownerDocument) {\n      document = template.content.ownerDocument;\n    }\n  }\n\n  let trustedTypesPolicy;\n  let emptyHTML = '';\n\n  // The instance's own internal Trusted Types policy. Unlike a caller-supplied\n  // `TRUSTED_TYPES_POLICY`, this is created at most once \u2014 Trusted Types throws\n  // on duplicate policy names \u2014 and is the only policy allowed to persist\n  // across configurations and survive `clearConfig()`.\n  let defaultTrustedTypesPolicy;\n  let defaultTrustedTypesPolicyResolved = false;\n\n  // Tracks whether we are already inside a call to the configured Trusted Types\n  // policy (`createHTML` or `createScriptURL`). If a supplied policy callback\n  // itself calls `DOMPurify.sanitize` (the cause of #1422), `sanitize` would\n  // re-enter the policy and recurse until the stack overflows. We detect that\n  // re-entry and throw a clear, actionable error instead. The guard is shared\n  // across both callbacks, because either one re-entering `sanitize` triggers\n  // the same unbounded recursion.\n  let IN_TRUSTED_TYPES_POLICY = 0;\n  const _assertNotInTrustedTypesPolicy = function (): void {\n    if (IN_TRUSTED_TYPES_POLICY > 0) {\n      throw typeErrorCreate(\n        'A configured TRUSTED_TYPES_POLICY callback (createHTML or ' +\n          'createScriptURL) must not call DOMPurify.sanitize, as that causes ' +\n          'infinite recursion. Do not pass a policy whose callbacks wrap ' +\n          'DOMPurify as TRUSTED_TYPES_POLICY; see the \"DOMPurify and Trusted ' +\n          'Types\" section of the README.'\n      );\n    }\n  };\n\n  const _createTrustedHTML = function (html: string): string {\n    _assertNotInTrustedTypesPolicy();\n\n    IN_TRUSTED_TYPES_POLICY++;\n    try {\n      return trustedTypesPolicy.createHTML(html);\n    } finally {\n      IN_TRUSTED_TYPES_POLICY--;\n    }\n  };\n\n  const _createTrustedScriptURL = function (scriptUrl: string): string {\n    _assertNotInTrustedTypesPolicy();\n\n    IN_TRUSTED_TYPES_POLICY++;\n    try {\n      return trustedTypesPolicy.createScriptURL(scriptUrl);\n    } finally {\n      IN_TRUSTED_TYPES_POLICY--;\n    }\n  };\n\n  // Lazily resolve (and cache) the instance's internal default policy.\n  // Resolution is attempted at most once: a successful `createPolicy` cannot be\n  // repeated (Trusted Types throws on duplicate names), and a failed or\n  // unsupported attempt must not be retried on every parse.\n  const _getDefaultTrustedTypesPolicy = function () {\n    if (!defaultTrustedTypesPolicyResolved) {\n      defaultTrustedTypesPolicy = _createTrustedTypesPolicy(\n        trustedTypes,\n        currentScript\n      );\n      defaultTrustedTypesPolicyResolved = true;\n    }\n\n    return defaultTrustedTypesPolicy;\n  };\n\n  const {\n    implementation,\n    createNodeIterator,\n    createDocumentFragment,\n    getElementsByTagName,\n  } = document;\n  const { importNode } = originalDocument;\n\n  let hooks = _createHooksMap();\n\n  /**\n   * Expose whether this browser supports running the full DOMPurify.\n   */\n  DOMPurify.isSupported =\n    typeof entries === 'function' &&\n    typeof getParentNode === 'function' &&\n    implementation &&\n    implementation.createHTMLDocument !== undefined;\n\n  const {\n    MUSTACHE_EXPR,\n    ERB_EXPR,\n    TMPLIT_EXPR,\n    DATA_ATTR,\n    ARIA_ATTR,\n    IS_SCRIPT_OR_DATA,\n    ATTR_WHITESPACE,\n    CUSTOM_ELEMENT,\n  } = EXPRESSIONS;\n\n  let { IS_ALLOWED_URI } = EXPRESSIONS;\n\n  /**\n   * We consider the elements and attributes below to be safe. Ideally\n   * don't add any new ones but feel free to remove unwanted ones.\n   */\n\n  /* allowed element names */\n  let ALLOWED_TAGS = null;\n  const DEFAULT_ALLOWED_TAGS = addToSet({}, [\n    ...TAGS.html,\n    ...TAGS.svg,\n    ...TAGS.svgFilters,\n    ...TAGS.mathMl,\n    ...TAGS.text,\n  ]);\n\n  /* Allowed attribute names */\n  let ALLOWED_ATTR = null;\n  const DEFAULT_ALLOWED_ATTR = addToSet({}, [\n    ...ATTRS.html,\n    ...ATTRS.svg,\n    ...ATTRS.mathMl,\n    ...ATTRS.xml,\n  ]);\n\n  /*\n   * Configure how DOMPurify should handle custom elements and their attributes as well as customized built-in elements.\n   * @property {RegExp|Function|null} tagNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any custom elements)\n   * @property {RegExp|Function|null} attributeNameCheck one of [null, regexPattern, predicate]. Default: `null` (disallow any attributes not on the allow list)\n   * @property {boolean} allowCustomizedBuiltInElements allow custom elements derived from built-ins if they pass CUSTOM_ELEMENT_HANDLING.tagNameCheck. Default: `false`.\n   */\n  let CUSTOM_ELEMENT_HANDLING = Object.seal(\n    create(null, {\n      tagNameCheck: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: null,\n      },\n      attributeNameCheck: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: null,\n      },\n      allowCustomizedBuiltInElements: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: false,\n      },\n    })\n  );\n\n  /* Explicitly forbidden tags (overrides ALLOWED_TAGS/ADD_TAGS) */\n  let FORBID_TAGS = null;\n\n  /* Explicitly forbidden attributes (overrides ALLOWED_ATTR/ADD_ATTR) */\n  let FORBID_ATTR = null;\n\n  /* Config object to store ADD_TAGS/ADD_ATTR functions (when used as functions) */\n  const EXTRA_ELEMENT_HANDLING = Object.seal(\n    create(null, {\n      tagCheck: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: null,\n      },\n      attributeCheck: {\n        writable: true,\n        configurable: false,\n        enumerable: true,\n        value: null,\n      },\n    })\n  );\n\n  /* Decide if ARIA attributes are okay */\n  let ALLOW_ARIA_ATTR = true;\n\n  /* Decide if custom data attributes are okay */\n  let ALLOW_DATA_ATTR = true;\n\n  /* Decide if unknown protocols are okay */\n  let ALLOW_UNKNOWN_PROTOCOLS = false;\n\n  /* Decide if self-closing tags in attributes are allowed.\n   * Usually removed due to a mXSS issue in jQuery 3.0 */\n  let ALLOW_SELF_CLOSE_IN_ATTR = true;\n\n  /* Output should be safe for common template engines.\n   * This means, DOMPurify removes data attributes, mustaches and ERB\n   */\n  let SAFE_FOR_TEMPLATES = false;\n\n  /* Output should be safe even for XML used within HTML and alike.\n   * This means, DOMPurify removes comments when containing risky content.\n   */\n  let SAFE_FOR_XML = true;\n\n  /* Decide if document with <html>... should be returned */\n  let WHOLE_DOCUMENT = false;\n\n  /* Track whether config is already set on this instance of DOMPurify. */\n  let SET_CONFIG = false;\n\n  /* Decide if all elements (e.g. style, script) must be children of\n   * document.body. By default, browsers might move them to document.head */\n  let FORCE_BODY = false;\n\n  /* Decide if a DOM `HTMLBodyElement` should be returned, instead of a html\n   * string (or a TrustedHTML object if Trusted Types are supported).\n   * If `WHOLE_DOCUMENT` is enabled a `HTMLHtmlElement` will be returned instead\n   */\n  let RETURN_DOM = false;\n\n  /* Decide if a DOM `DocumentFragment` should be returned, instead of a html\n   * string  (or a TrustedHTML object if Trusted Types are supported) */\n  let RETURN_DOM_FRAGMENT = false;\n\n  /* Try to return a Trusted Type object instead of a string, return a string in\n   * case Trusted Types are not supported  */\n  let RETURN_TRUSTED_TYPE = false;\n\n  /* Output should be free from DOM clobbering attacks?\n   * This sanitizes markups named with colliding, clobberable built-in DOM APIs.\n   */\n  let SANITIZE_DOM = true;\n\n  /* Achieve full DOM Clobbering protection by isolating the namespace of named\n   * properties and JS variables, mitigating attacks that abuse the HTML/DOM spec rules.\n   *\n   * HTML/DOM spec rules that enable DOM Clobbering:\n   *   - Named Access on Window (\u00A77.3.3)\n   *   - DOM Tree Accessors (\u00A73.1.5)\n   *   - Form Element Parent-Child Relations (\u00A74.10.3)\n   *   - Iframe srcdoc / Nested WindowProxies (\u00A74.8.5)\n   *   - HTMLCollection (\u00A74.2.10.2)\n   *\n   * Namespace isolation is implemented by prefixing `id` and `name` attributes\n   * with a constant string, i.e., `user-content-`\n   */\n  let SANITIZE_NAMED_PROPS = false;\n  const SANITIZE_NAMED_PROPS_PREFIX = 'user-content-';\n\n  /* Keep element content when removing element? */\n  let KEEP_CONTENT = true;\n\n  /* If a `Node` is passed to sanitize(), then performs sanitization in-place instead\n   * of importing it into a new Document and returning a sanitized copy */\n  let IN_PLACE = false;\n\n  /* Allow usage of profiles like html, svg and mathMl */\n  let USE_PROFILES: UseProfilesConfig | false = {};\n\n  /* Tags to ignore content of when KEEP_CONTENT is true */\n  let FORBID_CONTENTS = null;\n  const DEFAULT_FORBID_CONTENTS = addToSet({}, [\n    'annotation-xml',\n    'audio',\n    'colgroup',\n    'desc',\n    'foreignobject',\n    'head',\n    'iframe',\n    'math',\n    'mi',\n    'mn',\n    'mo',\n    'ms',\n    'mtext',\n    'noembed',\n    'noframes',\n    'noscript',\n    'plaintext',\n    'script',\n    // <selectedcontent> mirrors the selected <option>'s subtree, cloned by\n    // the UA (customizable <select>) \u2014 including any on* handlers \u2014 and the\n    // engine re-mirrors synchronously whenever a removal changes which\n    // option/selectedcontent is current, even inside DOMPurify's inert\n    // DOMParser document. Hoisting its children on removal re-inserts a fresh\n    // mirror target ahead of the walk, which the engine refills, looping\n    // forever (DoS) and amplifying output. Dropping its content on removal\n    // (rather than hoisting) breaks that cascade; the content is a duplicate\n    // of the option, which is sanitized on its own. See campaign-3 F1/F6.\n    'selectedcontent',\n    'style',\n    'svg',\n    'template',\n    'thead',\n    'title',\n    'video',\n    'xmp',\n  ]);\n\n  /* Tags that are safe for data: URIs */\n  let DATA_URI_TAGS = null;\n  const DEFAULT_DATA_URI_TAGS = addToSet({}, [\n    'audio',\n    'video',\n    'img',\n    'source',\n    'image',\n    'track',\n  ]);\n\n  /* Attributes safe for values like \"javascript:\" */\n  let URI_SAFE_ATTRIBUTES = null;\n  const DEFAULT_URI_SAFE_ATTRIBUTES = addToSet({}, [\n    'alt',\n    'class',\n    'for',\n    'id',\n    'label',\n    'name',\n    'pattern',\n    'placeholder',\n    'role',\n    'summary',\n    'title',\n    'value',\n    'style',\n    'xmlns',\n  ]);\n\n  const MATHML_NAMESPACE = 'http://www.w3.org/1998/Math/MathML';\n  const SVG_NAMESPACE = 'http://www.w3.org/2000/svg';\n  const HTML_NAMESPACE = 'http://www.w3.org/1999/xhtml';\n  /* Document namespace */\n  let NAMESPACE = HTML_NAMESPACE;\n  let IS_EMPTY_INPUT = false;\n\n  /* Allowed XHTML+XML namespaces */\n  let ALLOWED_NAMESPACES = null;\n  const DEFAULT_ALLOWED_NAMESPACES = addToSet(\n    {},\n    [MATHML_NAMESPACE, SVG_NAMESPACE, HTML_NAMESPACE],\n    stringToString\n  );\n\n  const DEFAULT_MATHML_TEXT_INTEGRATION_POINTS = freeze([\n    'mi',\n    'mo',\n    'mn',\n    'ms',\n    'mtext',\n  ]);\n  let MATHML_TEXT_INTEGRATION_POINTS = addToSet(\n    {},\n    DEFAULT_MATHML_TEXT_INTEGRATION_POINTS\n  );\n\n  const DEFAULT_HTML_INTEGRATION_POINTS = freeze(['annotation-xml']);\n  let HTML_INTEGRATION_POINTS = addToSet({}, DEFAULT_HTML_INTEGRATION_POINTS);\n\n  // Certain elements are allowed in both SVG and HTML\n  // namespace. We need to specify them explicitly\n  // so that they don't get erroneously deleted from\n  // HTML namespace.\n  const COMMON_SVG_AND_HTML_ELEMENTS = addToSet({}, [\n    'title',\n    'style',\n    'font',\n    'a',\n    'script',\n  ]);\n\n  /* Parsing of strict XHTML documents */\n  let PARSER_MEDIA_TYPE: null | DOMParserSupportedType = null;\n  const SUPPORTED_PARSER_MEDIA_TYPES = ['application/xhtml+xml', 'text/html'];\n  const DEFAULT_PARSER_MEDIA_TYPE = 'text/html';\n  let transformCaseFunc: null | Parameters<typeof addToSet>[2] = null;\n\n  /* Keep a reference to config to pass to hooks */\n  let CONFIG: Config | null = null;\n\n  /* Ideally, do not touch anything below this line */\n  /* ______________________________________________ */\n\n  const formElement = document.createElement('form');\n\n  const isRegexOrFunction = function (\n    testValue: unknown\n  ): testValue is Function | RegExp {\n    return testValue instanceof RegExp || testValue instanceof Function;\n  };\n\n  /**\n   * _parseConfig\n   *\n   * @param cfg optional config literal\n   */\n  // eslint-disable-next-line complexity\n  const _parseConfig = function (cfg: Config = {}): void {\n    if (CONFIG && CONFIG === cfg) {\n      return;\n    }\n\n    /* Shield configuration object from tampering */\n    if (!cfg || typeof cfg !== 'object') {\n      cfg = {};\n    }\n\n    /* Shield configuration object from prototype pollution */\n    cfg = clone(cfg);\n\n    PARSER_MEDIA_TYPE =\n      // eslint-disable-next-line unicorn/prefer-includes\n      SUPPORTED_PARSER_MEDIA_TYPES.indexOf(cfg.PARSER_MEDIA_TYPE) === -1\n        ? DEFAULT_PARSER_MEDIA_TYPE\n        : cfg.PARSER_MEDIA_TYPE;\n\n    // HTML tags and attributes are not case-sensitive, converting to lowercase. Keeping XHTML as is.\n    transformCaseFunc =\n      PARSER_MEDIA_TYPE === 'application/xhtml+xml'\n        ? stringToString\n        : stringToLowerCase;\n\n    /* Set configuration parameters */\n    ALLOWED_TAGS = _resolveSetOption(\n      cfg,\n      'ALLOWED_TAGS',\n      DEFAULT_ALLOWED_TAGS,\n      { transform: transformCaseFunc }\n    );\n    ALLOWED_ATTR = _resolveSetOption(\n      cfg,\n      'ALLOWED_ATTR',\n      DEFAULT_ALLOWED_ATTR,\n      { transform: transformCaseFunc }\n    );\n    ALLOWED_NAMESPACES = _resolveSetOption(\n      cfg,\n      'ALLOWED_NAMESPACES',\n      DEFAULT_ALLOWED_NAMESPACES,\n      { transform: stringToString }\n    );\n    URI_SAFE_ATTRIBUTES = _resolveSetOption(\n      cfg,\n      'ADD_URI_SAFE_ATTR',\n      DEFAULT_URI_SAFE_ATTRIBUTES,\n      { transform: transformCaseFunc, base: DEFAULT_URI_SAFE_ATTRIBUTES }\n    );\n    DATA_URI_TAGS = _resolveSetOption(\n      cfg,\n      'ADD_DATA_URI_TAGS',\n      DEFAULT_DATA_URI_TAGS,\n      { transform: transformCaseFunc, base: DEFAULT_DATA_URI_TAGS }\n    );\n    FORBID_CONTENTS = _resolveSetOption(\n      cfg,\n      'FORBID_CONTENTS',\n      DEFAULT_FORBID_CONTENTS,\n      { transform: transformCaseFunc }\n    );\n    FORBID_TAGS = _resolveSetOption(cfg, 'FORBID_TAGS', clone({}), {\n      transform: transformCaseFunc,\n    });\n    FORBID_ATTR = _resolveSetOption(cfg, 'FORBID_ATTR', clone({}), {\n      transform: transformCaseFunc,\n    });\n    USE_PROFILES = objectHasOwnProperty(cfg, 'USE_PROFILES')\n      ? cfg.USE_PROFILES && typeof cfg.USE_PROFILES === 'object'\n        ? clone(cfg.USE_PROFILES)\n        : cfg.USE_PROFILES\n      : false;\n\n    ALLOW_ARIA_ATTR = cfg.ALLOW_ARIA_ATTR !== false; // Default true\n    ALLOW_DATA_ATTR = cfg.ALLOW_DATA_ATTR !== false; // Default true\n    ALLOW_UNKNOWN_PROTOCOLS = cfg.ALLOW_UNKNOWN_PROTOCOLS || false; // Default false\n    ALLOW_SELF_CLOSE_IN_ATTR = cfg.ALLOW_SELF_CLOSE_IN_ATTR !== false; // Default true\n    SAFE_FOR_TEMPLATES = cfg.SAFE_FOR_TEMPLATES || false; // Default false\n    SAFE_FOR_XML = cfg.SAFE_FOR_XML !== false; // Default true\n    WHOLE_DOCUMENT = cfg.WHOLE_DOCUMENT || false; // Default false\n    RETURN_DOM = cfg.RETURN_DOM || false; // Default false\n    RETURN_DOM_FRAGMENT = cfg.RETURN_DOM_FRAGMENT || false; // Default false\n    RETURN_TRUSTED_TYPE = cfg.RETURN_TRUSTED_TYPE || false; // Default false\n    FORCE_BODY = cfg.FORCE_BODY || false; // Default false\n    SANITIZE_DOM = cfg.SANITIZE_DOM !== false; // Default true\n    SANITIZE_NAMED_PROPS = cfg.SANITIZE_NAMED_PROPS || false; // Default false\n    KEEP_CONTENT = cfg.KEEP_CONTENT !== false; // Default true\n    IN_PLACE = cfg.IN_PLACE || false; // Default false\n    IS_ALLOWED_URI = isRegex(cfg.ALLOWED_URI_REGEXP)\n      ? cfg.ALLOWED_URI_REGEXP\n      : EXPRESSIONS.IS_ALLOWED_URI; // Default regexp\n\n    NAMESPACE =\n      typeof cfg.NAMESPACE === 'string' ? cfg.NAMESPACE : HTML_NAMESPACE; // Default HTML namespace\n\n    MATHML_TEXT_INTEGRATION_POINTS =\n      objectHasOwnProperty(cfg, 'MATHML_TEXT_INTEGRATION_POINTS') &&\n      cfg.MATHML_TEXT_INTEGRATION_POINTS &&\n      typeof cfg.MATHML_TEXT_INTEGRATION_POINTS === 'object'\n        ? clone(cfg.MATHML_TEXT_INTEGRATION_POINTS)\n        : addToSet({}, DEFAULT_MATHML_TEXT_INTEGRATION_POINTS); // Default built-in map\n\n    HTML_INTEGRATION_POINTS =\n      objectHasOwnProperty(cfg, 'HTML_INTEGRATION_POINTS') &&\n      cfg.HTML_INTEGRATION_POINTS &&\n      typeof cfg.HTML_INTEGRATION_POINTS === 'object'\n        ? clone(cfg.HTML_INTEGRATION_POINTS)\n        : addToSet({}, DEFAULT_HTML_INTEGRATION_POINTS); // Default built-in map\n\n    const customElementHandling =\n      objectHasOwnProperty(cfg, 'CUSTOM_ELEMENT_HANDLING') &&\n      cfg.CUSTOM_ELEMENT_HANDLING &&\n      typeof cfg.CUSTOM_ELEMENT_HANDLING === 'object'\n        ? clone(cfg.CUSTOM_ELEMENT_HANDLING)\n        : create(null);\n\n    CUSTOM_ELEMENT_HANDLING = create(null);\n\n    if (\n      objectHasOwnProperty(customElementHandling, 'tagNameCheck') &&\n      isRegexOrFunction(customElementHandling.tagNameCheck)\n    ) {\n      CUSTOM_ELEMENT_HANDLING.tagNameCheck = customElementHandling.tagNameCheck; // Default undefined\n    }\n\n    if (\n      objectHasOwnProperty(customElementHandling, 'attributeNameCheck') &&\n      isRegexOrFunction(customElementHandling.attributeNameCheck)\n    ) {\n      CUSTOM_ELEMENT_HANDLING.attributeNameCheck =\n        customElementHandling.attributeNameCheck; // Default undefined\n    }\n\n    if (\n      objectHasOwnProperty(\n        customElementHandling,\n        'allowCustomizedBuiltInElements'\n      ) &&\n      typeof customElementHandling.allowCustomizedBuiltInElements === 'boolean'\n    ) {\n      CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements =\n        customElementHandling.allowCustomizedBuiltInElements; // Default undefined\n    }\n\n    seal(CUSTOM_ELEMENT_HANDLING);\n\n    if (SAFE_FOR_TEMPLATES) {\n      ALLOW_DATA_ATTR = false;\n    }\n\n    if (RETURN_DOM_FRAGMENT) {\n      RETURN_DOM = true;\n    }\n\n    /* Parse profile info */\n    if (USE_PROFILES) {\n      ALLOWED_TAGS = addToSet({}, TAGS.text);\n      ALLOWED_ATTR = create(null);\n      if (USE_PROFILES.html === true) {\n        addToSet(ALLOWED_TAGS, TAGS.html);\n        addToSet(ALLOWED_ATTR, ATTRS.html);\n      }\n\n      if (USE_PROFILES.svg === true) {\n        addToSet(ALLOWED_TAGS, TAGS.svg);\n        addToSet(ALLOWED_ATTR, ATTRS.svg);\n        addToSet(ALLOWED_ATTR, ATTRS.xml);\n      }\n\n      if (USE_PROFILES.svgFilters === true) {\n        addToSet(ALLOWED_TAGS, TAGS.svgFilters);\n        addToSet(ALLOWED_ATTR, ATTRS.svg);\n        addToSet(ALLOWED_ATTR, ATTRS.xml);\n      }\n\n      if (USE_PROFILES.mathMl === true) {\n        addToSet(ALLOWED_TAGS, TAGS.mathMl);\n        addToSet(ALLOWED_ATTR, ATTRS.mathMl);\n        addToSet(ALLOWED_ATTR, ATTRS.xml);\n      }\n    }\n\n    /* Always reset function-based ADD_TAGS / ADD_ATTR checks to prevent\n     * leaking across calls when switching from function to array config */\n    EXTRA_ELEMENT_HANDLING.tagCheck = null;\n    EXTRA_ELEMENT_HANDLING.attributeCheck = null;\n\n    /* Merge configuration parameters */\n    if (objectHasOwnProperty(cfg, 'ADD_TAGS')) {\n      if (typeof cfg.ADD_TAGS === 'function') {\n        EXTRA_ELEMENT_HANDLING.tagCheck = cfg.ADD_TAGS;\n      } else if (arrayIsArray(cfg.ADD_TAGS)) {\n        if (ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS) {\n          ALLOWED_TAGS = clone(ALLOWED_TAGS);\n        }\n\n        addToSet(ALLOWED_TAGS, cfg.ADD_TAGS, transformCaseFunc);\n      }\n    }\n\n    if (objectHasOwnProperty(cfg, 'ADD_ATTR')) {\n      if (typeof cfg.ADD_ATTR === 'function') {\n        EXTRA_ELEMENT_HANDLING.attributeCheck = cfg.ADD_ATTR;\n      } else if (arrayIsArray(cfg.ADD_ATTR)) {\n        if (ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR) {\n          ALLOWED_ATTR = clone(ALLOWED_ATTR);\n        }\n\n        addToSet(ALLOWED_ATTR, cfg.ADD_ATTR, transformCaseFunc);\n      }\n    }\n\n    if (\n      objectHasOwnProperty(cfg, 'ADD_URI_SAFE_ATTR') &&\n      arrayIsArray(cfg.ADD_URI_SAFE_ATTR)\n    ) {\n      addToSet(URI_SAFE_ATTRIBUTES, cfg.ADD_URI_SAFE_ATTR, transformCaseFunc);\n    }\n\n    if (\n      objectHasOwnProperty(cfg, 'FORBID_CONTENTS') &&\n      arrayIsArray(cfg.FORBID_CONTENTS)\n    ) {\n      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {\n        FORBID_CONTENTS = clone(FORBID_CONTENTS);\n      }\n\n      addToSet(FORBID_CONTENTS, cfg.FORBID_CONTENTS, transformCaseFunc);\n    }\n\n    if (\n      objectHasOwnProperty(cfg, 'ADD_FORBID_CONTENTS') &&\n      arrayIsArray(cfg.ADD_FORBID_CONTENTS)\n    ) {\n      if (FORBID_CONTENTS === DEFAULT_FORBID_CONTENTS) {\n        FORBID_CONTENTS = clone(FORBID_CONTENTS);\n      }\n\n      addToSet(FORBID_CONTENTS, cfg.ADD_FORBID_CONTENTS, transformCaseFunc);\n    }\n\n    /* Add #text in case KEEP_CONTENT is set to true */\n    if (KEEP_CONTENT) {\n      ALLOWED_TAGS['#text'] = true;\n    }\n\n    /* Add html, head and body to ALLOWED_TAGS in case WHOLE_DOCUMENT is true */\n    if (WHOLE_DOCUMENT) {\n      addToSet(ALLOWED_TAGS, ['html', 'head', 'body']);\n    }\n\n    /* Add tbody to ALLOWED_TAGS in case tables are permitted, see #286, #365 */\n    if (ALLOWED_TAGS.table) {\n      addToSet(ALLOWED_TAGS, ['tbody']);\n      delete FORBID_TAGS.tbody;\n    }\n\n    // Re-derive the active Trusted Types policy from this configuration on\n    // every parse. The active policy must never be sticky closure state that\n    // outlives the config that set it: a caller-supplied policy left in place\n    // after `clearConfig()` \u2014 or after a later call that supplied none, or\n    // `TRUSTED_TYPES_POLICY: null` \u2014 could sign a subsequent \"default\"\n    // `RETURN_TRUSTED_TYPE` result with a foreign, possibly unsafe policy.\n    // See GHSA-vxr8-fq34-vvx9.\n    if (cfg.TRUSTED_TYPES_POLICY) {\n      if (typeof cfg.TRUSTED_TYPES_POLICY.createHTML !== 'function') {\n        throw typeErrorCreate(\n          'TRUSTED_TYPES_POLICY configuration option must provide a \"createHTML\" hook.'\n        );\n      }\n\n      if (typeof cfg.TRUSTED_TYPES_POLICY.createScriptURL !== 'function') {\n        throw typeErrorCreate(\n          'TRUSTED_TYPES_POLICY configuration option must provide a \"createScriptURL\" hook.'\n        );\n      }\n\n      // A caller-supplied policy applies to this configuration only.\n      const previousTrustedTypesPolicy = trustedTypesPolicy;\n      trustedTypesPolicy = cfg.TRUSTED_TYPES_POLICY;\n\n      // Sign local variables required by `sanitize`. If the supplied policy's\n      // `createHTML` is circular (i.e. it calls `DOMPurify.sanitize`), this\n      // throws via the re-entrancy guard. Restore the previous policy first so\n      // the instance is not left in a poisoned state. See #1422.\n      try {\n        emptyHTML = _createTrustedHTML('');\n      } catch (error) {\n        trustedTypesPolicy = previousTrustedTypesPolicy;\n        throw error;\n      }\n    } else if (cfg.TRUSTED_TYPES_POLICY === null) {\n      // Explicit opt-out for this call: perform no Trusted Types signing and\n      // create nothing (so a strict `trusted-types` CSP that disallows a\n      // `dompurify` policy can still call `sanitize` from inside its own\n      // policy \u2014 see #1422). Resetting to `undefined` rather than a sticky\n      // `null` also drops any previously retained caller policy, so it cannot\n      // resurface on a later call, while still allowing the next config-less\n      // call to restore the internal default policy. See GHSA-vxr8-fq34-vvx9.\n      trustedTypesPolicy = undefined;\n      emptyHTML = '';\n    } else {\n      // No policy supplied: keep the currently active policy if one is set \u2014 a\n      // previously supplied policy is intentionally sticky across config-less\n      // calls \u2014 otherwise fall back to the instance's own internal policy,\n      // created at most once. (A policy supplied for a *single* call still\n      // lingers by design; what must not linger is a policy whose configuration\n      // has been torn down via `clearConfig()`, which restores the default.)\n      if (trustedTypesPolicy === undefined) {\n        trustedTypesPolicy = _getDefaultTrustedTypesPolicy();\n      }\n\n      // Sign internal variables only when a policy is active. A falsy policy\n      // (Trusted Types unsupported, creation failed, or an explicit opt-out)\n      // leaves `emptyHTML` as a plain string, so we never call `.createHTML` on\n      // a non-policy and throw. See #1422.\n      if (trustedTypesPolicy && typeof emptyHTML === 'string') {\n        emptyHTML = _createTrustedHTML('');\n      }\n    }\n\n    /*\n     * Mirror the clone-before-mutate pattern already applied above for\n     * cfg.ADD_TAGS / cfg.ADD_ATTR: if any uponSanitize* hook is\n     * registered AND the set still points at the default constant,\n     * clone it. The hook then mutates the clone (in-call widening\n     * still works exactly as documented) and the next default-cfg\n     * call rebinds to the untouched original via the reassignment at\n     * the top of this function.\n     */\n    if (\n      (hooks.uponSanitizeElement.length > 0 ||\n        hooks.uponSanitizeAttribute.length > 0) &&\n      ALLOWED_TAGS === DEFAULT_ALLOWED_TAGS\n    ) {\n      ALLOWED_TAGS = clone(ALLOWED_TAGS);\n    }\n\n    if (\n      hooks.uponSanitizeAttribute.length > 0 &&\n      ALLOWED_ATTR === DEFAULT_ALLOWED_ATTR\n    ) {\n      ALLOWED_ATTR = clone(ALLOWED_ATTR);\n    }\n\n    // Prevent further manipulation of configuration.\n    // Not available in IE8, Safari 5, etc.\n    if (freeze) {\n      freeze(cfg);\n    }\n\n    CONFIG = cfg;\n  };\n\n  /* Keep track of all possible SVG and MathML tags\n   * so that we can perform the namespace checks\n   * correctly. */\n  const ALL_SVG_TAGS = addToSet({}, [\n    ...TAGS.svg,\n    ...TAGS.svgFilters,\n    ...TAGS.svgDisallowed,\n  ]);\n  const ALL_MATHML_TAGS = addToSet({}, [\n    ...TAGS.mathMl,\n    ...TAGS.mathMlDisallowed,\n  ]);\n\n  /**\n   * Namespace rules for an element in the SVG namespace.\n   *\n   * @param tagName the element's lowercase tag name\n   * @param parent the (possibly simulated) parent node\n   * @param parentTagName the parent's lowercase tag name\n   * @returns true if a spec-compliant parser could produce this element\n   */\n  const _checkSvgNamespace = function (\n    tagName: string,\n    parent: { namespaceURI?: string },\n    parentTagName: string\n  ): boolean {\n    // The only way to switch from HTML namespace to SVG\n    // is via <svg>. If it happens via any other tag, then\n    // it should be killed.\n    if (parent.namespaceURI === HTML_NAMESPACE) {\n      return tagName === 'svg';\n    }\n\n    // The only way to switch from MathML to SVG is via <svg>\n    // if the parent is either <annotation-xml> or a MathML\n    // text integration point.\n    if (parent.namespaceURI === MATHML_NAMESPACE) {\n      return (\n        tagName === 'svg' &&\n        (parentTagName === 'annotation-xml' ||\n          MATHML_TEXT_INTEGRATION_POINTS[parentTagName])\n      );\n    }\n\n    // We only allow elements that are defined in SVG\n    // spec. All others are disallowed in SVG namespace.\n    return Boolean(ALL_SVG_TAGS[tagName]);\n  };\n\n  /**\n   * Namespace rules for an element in the MathML namespace.\n   *\n   * @param tagName the element's lowercase tag name\n   * @param parent the (possibly simulated) parent node\n   * @param parentTagName the parent's lowercase tag name\n   * @returns true if a spec-compliant parser could produce this element\n   */\n  const _checkMathMlNamespace = function (\n    tagName: string,\n    parent: { namespaceURI?: string },\n    parentTagName: string\n  ): boolean {\n    // The only way to switch from HTML namespace to MathML\n    // is via <math>. If it happens via any other tag, then\n    // it should be killed.\n    if (parent.namespaceURI === HTML_NAMESPACE) {\n      return tagName === 'math';\n    }\n\n    // The only way to switch from SVG to MathML is via\n    // <math> and HTML integration points\n    if (parent.namespaceURI === SVG_NAMESPACE) {\n      return tagName === 'math' && HTML_INTEGRATION_POINTS[parentTagName];\n    }\n\n    // We only allow elements that are defined in MathML\n    // spec. All others are disallowed in MathML namespace.\n    return Boolean(ALL_MATHML_TAGS[tagName]);\n  };\n\n  /**\n   * Namespace rules for an element in the HTML namespace.\n   *\n   * @param tagName the element's lowercase tag name\n   * @param parent the (possibly simulated) parent node\n   * @param parentTagName the parent's lowercase tag name\n   * @returns true if a spec-compliant parser could produce this element\n   */\n  const _checkHtmlNamespace = function (\n    tagName: string,\n    parent: { namespaceURI?: string },\n    parentTagName: string\n  ): boolean {\n    // The only way to switch from SVG to HTML is via\n    // HTML integration points, and from MathML to HTML\n    // is via MathML text integration points\n    if (\n      parent.namespaceURI === SVG_NAMESPACE &&\n      !HTML_INTEGRATION_POINTS[parentTagName]\n    ) {\n      return false;\n    }\n\n    if (\n      parent.namespaceURI === MATHML_NAMESPACE &&\n      !MATHML_TEXT_INTEGRATION_POINTS[parentTagName]\n    ) {\n      return false;\n    }\n\n    // We disallow tags that are specific for MathML\n    // or SVG and should never appear in HTML namespace\n    return (\n      !ALL_MATHML_TAGS[tagName] &&\n      (COMMON_SVG_AND_HTML_ELEMENTS[tagName] || !ALL_SVG_TAGS[tagName])\n    );\n  };\n\n  /**\n   * @param element a DOM element whose namespace is being checked\n   * @returns Return false if the element has a\n   *  namespace that a spec-compliant parser would never\n   *  return. Return true otherwise.\n   */\n  const _checkValidNamespace = function (element: Element): boolean {\n    let parent = getParentNode(element);\n\n    // In JSDOM, if we're inside shadow DOM, then parentNode\n    // can be null. We just simulate parent in this case.\n    if (!parent || !parent.tagName) {\n      parent = {\n        namespaceURI: NAMESPACE,\n        tagName: 'template',\n      };\n    }\n\n    const tagName = stringToLowerCase(element.tagName);\n    const parentTagName = stringToLowerCase(parent.tagName);\n\n    if (!ALLOWED_NAMESPACES[element.namespaceURI]) {\n      return false;\n    }\n\n    if (element.namespaceURI === SVG_NAMESPACE) {\n      return _checkSvgNamespace(tagName, parent, parentTagName);\n    }\n\n    if (element.namespaceURI === MATHML_NAMESPACE) {\n      return _checkMathMlNamespace(tagName, parent, parentTagName);\n    }\n\n    if (element.namespaceURI === HTML_NAMESPACE) {\n      return _checkHtmlNamespace(tagName, parent, parentTagName);\n    }\n\n    // For XHTML and XML documents that support custom namespaces\n    if (\n      PARSER_MEDIA_TYPE === 'application/xhtml+xml' &&\n      ALLOWED_NAMESPACES[element.namespaceURI]\n    ) {\n      return true;\n    }\n\n    // The code should never reach this place (this means\n    // that the element somehow got namespace that is not\n    // HTML, SVG, MathML or allowed via ALLOWED_NAMESPACES).\n    // Return false just in case.\n    return false;\n  };\n\n  /**\n   * _forceRemove\n   *\n   * @param node a DOM node\n   */\n  const _forceRemove = function (node: Node): void {\n    arrayPush(DOMPurify.removed, { element: node });\n\n    try {\n      // eslint-disable-next-line unicorn/prefer-dom-node-remove\n      getParentNode(node).removeChild(node);\n    } catch (_) {\n      /* The normal detach failed \u2014 this is reached for a parentless node\n         (getParentNode() is null, so .removeChild throws). Element.prototype\n         .remove() is itself a spec no-op on a parentless node, so a recorded\n         \"removal\" would otherwise hand the caller back an intact,\n         payload-bearing node (e.g. a detached IN_PLACE root the mXSS canary or\n         the style-with-element-child rule decided to kill). Fail closed by\n         throwing \u2014 exactly as a clobbered root does at the IN_PLACE entry \u2014\n         rather than trying to \"neutralize\" the node via its own methods.\n         Neutralizing would mean calling getAttributeNames()/removeAttribute()\n         on the node, both of which a <form> root can clobber via a named child\n         (and _isClobbered does not even probe getAttributeNames), so the\n         neutralize step could itself be silently defeated, leaving the payload\n         intact. A throw touches only the cached, clobber-safe remove() and\n         getParentNode(). Generalizes GHSA-r47g-fvhr-h676 (clobbered-form root)\n         to every root-kill reason. REPORT-3.\n\n         This lives inside the catch, so it never fires for a normally-removed\n         in-tree node: those have a parent, removeChild() succeeds, and the\n         catch is not entered. Only a kept (parentless) root reaches here. */\n      remove(node);\n\n      if (!getParentNode(node)) {\n        throw typeErrorCreate(\n          'a node selected for removal could not be detached from its tree ' +\n            'and cannot be safely returned; refusing to sanitize in place'\n        );\n      }\n    }\n  };\n\n  /**\n   * _neutralizeRoot\n   *\n   * Fail-closed teardown of an in-place root after the sanitize walk aborts\n   * (campaign-3 F2). An internal throw mid-walk \u2014 e.g. a page-registered\n   * custom element's reaction detaches a node so `_forceRemove`'s deliberate\n   * parentless guard throws, or any other re-entrant engine mutation \u2014 would\n   * otherwise leave the caller's *live* tree half-sanitized, with everything\n   * after the abort point still carrying its handlers. There is no safe way\n   * to resume the walk (the tree mutated under us), so we strip the root bare:\n   * remove every child and every attribute, then let the caller's catch see\n   * the original error. Clobber-safe (cached `remove`/`childNodes`/`attributes`\n   * getters; the root was already clobber-pre-flighted at the IN_PLACE entry).\n   *\n   * @param root the in-place root to empty\n   */\n  const _neutralizeRoot = function (root: Node): void {\n    const childNodes = getChildNodes(root);\n    if (childNodes) {\n      const snapshot: Node[] = [];\n      arrayForEach(childNodes, (child) => {\n        arrayPush(snapshot, child);\n      });\n      arrayForEach(snapshot, (child) => {\n        try {\n          remove(child);\n        } catch (_) {\n          /* Best-effort teardown; a still-attached child is handled below */\n        }\n      });\n    }\n\n    const attributes = getAttributes(root);\n    if (attributes) {\n      for (let i = attributes.length - 1; i >= 0; --i) {\n        const attribute = attributes[i];\n        const name = attribute && attribute.name;\n        if (typeof name === 'string') {\n          try {\n            (root as Element).removeAttribute(name);\n          } catch (_) {\n            /* Clobbered removeAttribute \u2014 ignore (fail-closed best effort) */\n          }\n        }\n      }\n    }\n  };\n\n  /**\n   * _removeAttribute\n   *\n   * @param name an Attribute name\n   * @param element a DOM node\n   */\n  const _removeAttribute = function (name: string, element: Element): void {\n    try {\n      arrayPush(DOMPurify.removed, {\n        attribute: element.getAttributeNode(name),\n        from: element,\n      });\n    } catch (_) {\n      arrayPush(DOMPurify.removed, {\n        attribute: null,\n        from: element,\n      });\n    }\n\n    element.removeAttribute(name);\n\n    // We void attribute values for unremovable \"is\" attributes\n    if (name === 'is') {\n      if (RETURN_DOM || RETURN_DOM_FRAGMENT) {\n        try {\n          _forceRemove(element);\n        } catch (_) {}\n      } else {\n        try {\n          element.setAttribute(name, '');\n        } catch (_) {}\n      }\n    }\n  };\n\n  /**\n   * _stripDisallowedAttributes\n   *\n   * Removes every attribute the active configuration does not allow from a\n   * single element, using the same allowlist as the main attribute pass (so\n   * `on*` handlers go, but no `/^on/` blocklist is introduced). Used only to\n   * neutralise nodes that are being discarded from an in-place tree.\n   *\n   * @param element the element to strip\n   */\n  const _stripDisallowedAttributes = function (element: Element): void {\n    const attributes = getAttributes(element);\n    if (!attributes) {\n      return;\n    }\n\n    for (let i = attributes.length - 1; i >= 0; --i) {\n      const attribute = attributes[i];\n      const name = attribute && attribute.name;\n      if (typeof name !== 'string' || ALLOWED_ATTR[transformCaseFunc(name)]) {\n        continue;\n      }\n\n      try {\n        element.removeAttribute(name);\n      } catch (_) {\n        /* Clobbered removeAttribute on a doomed node \u2014 ignore */\n      }\n    }\n  };\n\n  /**\n   * _neutralizeSubtree\n   *\n   * Completes the audit-5 F1 fix across every removal path. The KEEP_CONTENT\n   * move-hoist neutralises only disallowed-tag removals; clobber, mXSS-canary,\n   * namespace, comment, processing-instruction and KEEP_CONTENT:false removals\n   * all drop their subtree wholesale via `_forceRemove`. On the IN_PLACE path\n   * those dropped nodes are detached from the caller's LIVE tree but a\n   * handler-bearing original among them (an `<img onerror>`/`<video>` that was\n   * loading) keeps its queued resource event, which fires in page scope after\n   * sanitize returns. This walks a removed subtree and strips every attribute\n   * the active configuration does not allow \u2014 so `on*` handlers are cancelled\n   * through the SAME allowlist that governs kept nodes, not a separate `/^on/`\n   * blocklist. Run synchronously before sanitize returns, i.e. before any\n   * queued event can fire. Hook-free by design: these nodes leave the output,\n   * so firing attribute hooks for them would be surprising. Clobber-safe reads;\n   * a doomed clobbered node may shadow `removeAttribute` (its own attributes are\n   * irrelevant \u2014 it is discarded \u2014 while its non-clobbered descendants, e.g.\n   * the `<img>`, are reached and scrubbed).\n   *\n   * @param root the root of a removed subtree to neutralise\n   */\n  const _neutralizeSubtree = function (root: Node): void {\n    const stack: Node[] = [root];\n\n    while (stack.length > 0) {\n      const node = stack.pop();\n      const nodeType = getNodeType ? getNodeType(node) : (node as any).nodeType;\n\n      if (nodeType === NODE_TYPE.element) {\n        _stripDisallowedAttributes(node as Element);\n      }\n\n      const childNodes = getChildNodes(node);\n      if (childNodes) {\n        for (let i = childNodes.length - 1; i >= 0; --i) {\n          stack.push(childNodes[i]);\n        }\n      }\n    }\n  };\n\n  /**\n   * _initDocument\n   *\n   * @param dirty - a string of dirty markup\n   * @return a DOM, filled with the dirty markup\n   */\n  const _initDocument = function (dirty: string): Document {\n    /* Create a HTML document */\n    let doc = null;\n    let leadingWhitespace = null;\n\n    if (FORCE_BODY) {\n      dirty = '<remove></remove>' + dirty;\n    } else {\n      /* If FORCE_BODY isn't used, leading whitespace needs to be preserved manually */\n      const matches = stringMatch(dirty, /^[\\r\\n\\t ]+/);\n      leadingWhitespace = matches && matches[0];\n    }\n\n    if (\n      PARSER_MEDIA_TYPE === 'application/xhtml+xml' &&\n      NAMESPACE === HTML_NAMESPACE\n    ) {\n      // Root of XHTML doc must contain xmlns declaration (see https://www.w3.org/TR/xhtml1/normative.html#strict)\n      dirty =\n        '<html xmlns=\"http://www.w3.org/1999/xhtml\"><head></head><body>' +\n        dirty +\n        '</body></html>';\n    }\n\n    const dirtyPayload = trustedTypesPolicy ? _createTrustedHTML(dirty) : dirty;\n    /*\n     * Use the DOMParser API by default, fallback later if needs be\n     * DOMParser not work for svg when has multiple root element.\n     */\n    if (NAMESPACE === HTML_NAMESPACE) {\n      try {\n        doc = new DOMParser().parseFromString(dirtyPayload, PARSER_MEDIA_TYPE);\n      } catch (_) {}\n    }\n\n    /* Use createHTMLDocument in case DOMParser is not available */\n    if (!doc || !doc.documentElement) {\n      doc = implementation.createDocument(NAMESPACE, 'template', null);\n      try {\n        doc.documentElement.innerHTML = IS_EMPTY_INPUT\n          ? emptyHTML\n          : dirtyPayload;\n      } catch (_) {\n        // Syntax error if dirtyPayload is invalid xml\n      }\n    }\n\n    const body = doc.body || doc.documentElement;\n\n    if (dirty && leadingWhitespace) {\n      body.insertBefore(\n        document.createTextNode(leadingWhitespace),\n        body.childNodes[0] || null\n      );\n    }\n\n    /* Work on whole document or just its body */\n    if (NAMESPACE === HTML_NAMESPACE) {\n      return getElementsByTagName.call(\n        doc,\n        WHOLE_DOCUMENT ? 'html' : 'body'\n      )[0];\n    }\n\n    return WHOLE_DOCUMENT ? doc.documentElement : body;\n  };\n\n  /**\n   * Creates a NodeIterator object that you can use to traverse filtered lists of nodes or elements in a document.\n   *\n   * @param root The root element or node to start traversing on.\n   * @return The created NodeIterator\n   */\n  const _createNodeIterator = function (root: Node): NodeIterator {\n    return createNodeIterator.call(\n      root.ownerDocument || root,\n      root,\n      // eslint-disable-next-line no-bitwise\n      NodeFilter.SHOW_ELEMENT |\n        NodeFilter.SHOW_COMMENT |\n        NodeFilter.SHOW_TEXT |\n        NodeFilter.SHOW_PROCESSING_INSTRUCTION |\n        NodeFilter.SHOW_CDATA_SECTION,\n      null\n    );\n  };\n\n  /**\n   * Replace template expression syntax (mustache, ERB, template\n   * literal) with a space; shared by all SAFE_FOR_TEMPLATES scrub\n   * sites. Order matters: mustache, then ERB, then template literal.\n   *\n   * @param value the string to scrub\n   * @returns the scrubbed string\n   */\n  const _stripTemplateExpressions = function (value: string): string {\n    value = stringReplace(value, MUSTACHE_EXPR, ' ');\n    value = stringReplace(value, ERB_EXPR, ' ');\n    value = stringReplace(value, TMPLIT_EXPR, ' ');\n    return value;\n  };\n\n  /**\n   * Strip template-engine expressions ({{...}}, ${...}, <%...%>) from the\n   * character data of an element subtree. Used as the final safety net for\n   * SAFE_FOR_TEMPLATES on every DOM-returning code path so that expressions\n   * which only form after text-node normalization (e.g. fragments split across\n   * stripped elements) cannot survive into a template-evaluating framework.\n   *\n   * Walks text/comment/CDATA/processing-instruction nodes and mutates `.data`\n   * in place rather than round-tripping through innerHTML. This preserves\n   * descendant node references (important for IN_PLACE callers), avoids a\n   * serialize/reparse cycle, and reads literal character data \u2014 which means\n   * `<%...%>` in text content matches the ERB regex against its real bytes\n   * instead of the HTML-entity-escaped form innerHTML would produce.\n   *\n   * Attribute values are not visited here; SAFE_FOR_TEMPLATES handling for\n   * attributes is performed during the per-node `_sanitizeAttributes` pass.\n   *\n   * @param node The root element whose character data should be scrubbed.\n   */\n  const _scrubTemplateExpressions = function (node: Element): void {\n    node.normalize();\n    const walker = createNodeIterator.call(\n      node.ownerDocument || node,\n      node,\n      // eslint-disable-next-line no-bitwise\n      NodeFilter.SHOW_TEXT |\n        NodeFilter.SHOW_COMMENT |\n        NodeFilter.SHOW_CDATA_SECTION |\n        NodeFilter.SHOW_PROCESSING_INSTRUCTION,\n      null\n    );\n\n    let currentNode = walker.nextNode() as CharacterData | null;\n    while (currentNode) {\n      currentNode.data = _stripTemplateExpressions(currentNode.data);\n      currentNode = walker.nextNode() as CharacterData | null;\n    }\n\n    // NodeIterator does not descend into <template>.content per the DOM spec,\n    // so we must explicitly recurse into each template's content fragment,\n    // mirroring the approach used by _sanitizeShadowDOM.\n    const templates = node.querySelectorAll?.('template');\n    if (templates) {\n      arrayForEach(templates, (tmpl: HTMLTemplateElement) => {\n        if (_isDocumentFragment(tmpl.content)) {\n          _scrubTemplateExpressions(tmpl.content as unknown as Element);\n        }\n      });\n    }\n  };\n\n  /**\n   * _isClobbered\n   *\n   * Detect DOM-clobbering on HTMLFormElement nodes. Form is the only HTML\n   * interface with [LegacyOverrideBuiltIns]; a descendant element with a\n   * `name` attribute matching a prototype property shadows that property\n   * on direct reads. We use this check at the IN_PLACE entry-point and\n   * during attribute sanitization to refuse clobbered forms.\n   *\n   * @param element element to check for clobbering attacks\n   * @return true if clobbered, false if safe\n   */\n  const _isClobbered = function (element: Element): boolean {\n    // Realm-independent tag-name probe. If we can't determine the tag\n    // name at all, we can't reason about clobbering \u2014 return false\n    // (the caller's other defences still apply).\n    const realTagName = getNodeName ? getNodeName(element) : null;\n    if (typeof realTagName !== 'string') {\n      return false;\n    }\n\n    if (transformCaseFunc(realTagName) !== 'form') {\n      return false;\n    }\n\n    return (\n      typeof element.nodeName !== 'string' ||\n      typeof element.textContent !== 'string' ||\n      typeof element.removeChild !== 'function' ||\n      // Realm-safe NamedNodeMap detection: equality against the cached\n      // prototype getter. Clobbered .attributes (e.g. <input name=\"attributes\">)\n      // makes the direct read diverge from the cached read; a clean form\n      // (same-realm OR foreign-realm) has both reads pointing at the same\n      // canonical NamedNodeMap.\n      element.attributes !== getAttributes(element) ||\n      typeof element.removeAttribute !== 'function' ||\n      typeof element.setAttribute !== 'function' ||\n      typeof element.namespaceURI !== 'string' ||\n      typeof element.insertBefore !== 'function' ||\n      typeof element.hasChildNodes !== 'function' ||\n      // NodeType clobbering probe. Cached Node.prototype.nodeType getter\n      // returns the integer 1 for any Element regardless of realm; direct\n      // read on a clobbered form (e.g. <input name=\"nodeType\">) returns\n      // the named child element. Cheap addition \u2014 nodeType is read from\n      // an internal slot, no serialization cost \u2014 and removes a residual\n      // clobbering surface used by several mXSS / PI / comment branches\n      // in _sanitizeElements that compare currentNode.nodeType directly.\n      element.nodeType !== getNodeType(element) ||\n      // HTMLFormElement has [LegacyOverrideBuiltIns]: a descendant named\n      // \"childNodes\" shadows the prototype getter. Direct reads of\n      // form.childNodes from a clobbered form return the named child\n      // instead of the real NodeList, so any walk that reads it directly\n      // skips the form's real children. Compare the direct read to the\n      // cached Node.prototype getter \u2014 when the form's named-property\n      // getter intercepts the read, the two values differ and we flag\n      // the form. This catches every clobbering child type (input,\n      // select, etc.) regardless of whether the named child happens to\n      // carry a numeric .length, which a typeof-based probe would miss\n      // (e.g. HTMLSelectElement.length is a defined unsigned-long).\n      element.childNodes !== getChildNodes(element)\n    );\n  };\n\n  /**\n   * Checks whether the given value is a DocumentFragment from any realm.\n   *\n   * The realm-independent replacement reads `nodeType` through the cached\n   * Node.prototype getter and compares to the DOCUMENT_FRAGMENT_NODE\n   * constant (11). nodeType is a numeric value resolved from the node's\n   * internal slot, identical across realms for the same kind of node.\n   *\n   * @param value object to check\n   * @return true if value is a DocumentFragment-shaped node from any realm\n   */\n  const _isDocumentFragment = function (value: unknown): boolean {\n    if (!getNodeType || typeof value !== 'object' || value === null) {\n      return false;\n    }\n\n    try {\n      return getNodeType(value as Node) === NODE_TYPE.documentFragment;\n    } catch (_) {\n      return false;\n    }\n  };\n\n  /**\n   * Checks whether the given object is a DOM node, including nodes that\n   * originate from a different window/realm (e.g. an iframe's\n   * contentDocument). The previous `value instanceof Node` check was\n   * realm-bound: nodes from a different window failed it, causing\n   * sanitize() to silently stringify them and reset IN_PLACE to false,\n   * returning the original node unsanitized. See GHSA-4w3q-35jp-p934.\n   *\n   * @param value object to check whether it's a DOM node\n   * @return true if value is a DOM node from any realm\n   */\n  const _isNode = function (value: unknown): value is Node {\n    if (!getNodeType || typeof value !== 'object' || value === null) {\n      return false;\n    }\n\n    try {\n      return typeof getNodeType(value) === 'number';\n    } catch (_) {\n      return false;\n    }\n  };\n\n  function _executeHooks<T extends HookFunction>(\n    hooks: HookFunction[],\n    currentNode: Parameters<T>[0],\n    data: Parameters<T>[1]\n  ): void {\n    if (hooks.length === 0) {\n      return;\n    }\n\n    arrayForEach(hooks, (hook: T) => {\n      hook.call(DOMPurify, currentNode, data, CONFIG);\n    });\n  }\n\n  /**\n   * Structural-threat checks that condemn a node regardless of the\n   * allowlists: mXSS via namespace confusion, risky CSS construction,\n   * processing instructions, markup-bearing comments. Pure predicate;\n   * the caller removes. Check order is load-bearing.\n   *\n   * @param currentNode the node to inspect\n   * @param tagName the node's transformCaseFunc'd tag name\n   * @return true if the node must be removed\n   */\n  const _isUnsafeNode = function (currentNode: any, tagName: string): boolean {\n    /* Detect mXSS attempts abusing namespace confusion */\n    if (\n      SAFE_FOR_XML &&\n      currentNode.hasChildNodes() &&\n      !_isNode(currentNode.firstElementChild) &&\n      regExpTest(EXPRESSIONS.ELEMENT_MARKUP_PROBE, currentNode.textContent) &&\n      regExpTest(EXPRESSIONS.ELEMENT_MARKUP_PROBE, currentNode.innerHTML)\n    ) {\n      return true;\n    }\n\n    /* Remove risky CSS construction leading to mXSS */\n    if (\n      SAFE_FOR_XML &&\n      currentNode.namespaceURI === HTML_NAMESPACE &&\n      tagName === 'style' &&\n      _isNode(currentNode.firstElementChild)\n    ) {\n      return true;\n    }\n\n    /* Remove any occurrence of processing instructions */\n    if (currentNode.nodeType === NODE_TYPE.processingInstruction) {\n      return true;\n    }\n\n    /* Remove any kind of possibly harmful comments */\n    if (\n      SAFE_FOR_XML &&\n      currentNode.nodeType === NODE_TYPE.comment &&\n      regExpTest(EXPRESSIONS.COMMENT_MARKUP_PROBE, currentNode.data)\n    ) {\n      return true;\n    }\n\n    return false;\n  };\n\n  /**\n   * Handle a node whose tag is forbidden or not allowlisted: keep\n   * allowed custom elements (false return exits _sanitizeElements\n   * early - namespace/fallback checks and the afterSanitizeElements\n   * hook are intentionally skipped for kept custom elements), else\n   * hoist content per KEEP_CONTENT and remove.\n   *\n   * @param currentNode the disallowed node\n   * @param tagName the node's transformCaseFunc'd tag name\n   * @return true if the node was removed, false if kept\n   */\n  const _sanitizeDisallowedNode = function (\n    currentNode: any,\n    tagName: string\n  ): boolean {\n    /* Check if we have a custom element to handle */\n    if (!FORBID_TAGS[tagName] && _isBasicCustomElement(tagName)) {\n      if (\n        CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp &&\n        regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, tagName)\n      ) {\n        return false;\n      }\n\n      if (\n        CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function &&\n        CUSTOM_ELEMENT_HANDLING.tagNameCheck(tagName)\n      ) {\n        return false;\n      }\n    }\n\n    /* Keep content except for bad-listed elements.\n         Use the cached prototype getters exclusively \u2014 the previous code\n         had `|| currentNode.parentNode` / `|| currentNode.childNodes`\n         fallbacks, but the cached getters always return the canonical\n         value (or null for a real parent-less node), so the fallback\n         path was dead in safe cases and a clobbering surface in unsafe\n         ones. Falsy cached results stay falsy; the `if (childNodes &&\n         parentNode)` check already gates correctly. */\n    if (KEEP_CONTENT && !FORBID_CONTENTS[tagName]) {\n      const parentNode = getParentNode(currentNode);\n      const childNodes = getChildNodes(currentNode);\n\n      if (childNodes && parentNode) {\n        const childCount = childNodes.length;\n\n        /* In-place: hoist the *original* children so the iterator visits\n             and sanitises them through the same allowlist pass as every other\n             node. The caller built the tree in the live document, so the\n             originals carry already-queued resource events (`<img onerror>`,\n             `<video>`/`<audio>` error, lazy/`onload`, \u2026); cloning would leave\n             those originals detached but still armed, firing in page scope\n             while the returned tree looked clean. Moving is safe in-place: the\n             root is pre-validated as an allowed tag and so is never the node\n             being removed, which keeps `parentNode` inside the iterator root\n             and the relocated child inside the serialised tree.\n\n             Otherwise (string / DOM-copy paths): clone. The iterator is rooted\n             at \u2014 and the result serialised from \u2014 `body`, so a restrictive\n             ALLOWED_TAGS that removes `body` itself must leave its content in\n             place, which only cloning does; and those paths parse into an\n             inert document, so their discarded originals never had a queued\n             event to neutralise.\n\n             `childNodes` is live; a tail-to-head walk keeps `childNodes[i]`\n             valid whether we move (drops the trailing entry) or clone (leaves\n             the list intact). */\n        for (let i = childCount - 1; i >= 0; --i) {\n          const hoisted = IN_PLACE\n            ? childNodes[i]\n            : cloneNode(childNodes[i], true);\n          parentNode.insertBefore(hoisted, getNextSibling(currentNode));\n        }\n      }\n    }\n\n    _forceRemove(currentNode);\n    return true;\n  };\n\n  /**\n   * _sanitizeElements\n   *\n   * @protect nodeName\n   * @protect textContent\n   * @protect removeChild\n   * @param currentNode to check for permission to exist\n   * @return true if node was killed, false if left alive\n   */\n  const _sanitizeElements = function (currentNode: any): boolean {\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeElements, currentNode, null);\n\n    /* Check if element is clobbered or can clobber */\n    if (_isClobbered(currentNode)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n\n    /* Now let's check the element's type and name */\n    const tagName = transformCaseFunc(\n      getNodeName ? getNodeName(currentNode) : currentNode.nodeName\n    );\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.uponSanitizeElement, currentNode, {\n      tagName,\n      allowedTags: ALLOWED_TAGS,\n    });\n\n    /* Remove mXSS vectors, processing instructions and risky comments */\n    if (_isUnsafeNode(currentNode, tagName)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n\n    /* Remove element if anything forbids its presence */\n    if (\n      FORBID_TAGS[tagName] ||\n      (!(\n        EXTRA_ELEMENT_HANDLING.tagCheck instanceof Function &&\n        EXTRA_ELEMENT_HANDLING.tagCheck(tagName)\n      ) &&\n        !ALLOWED_TAGS[tagName])\n    ) {\n      return _sanitizeDisallowedNode(currentNode, tagName);\n    }\n\n    /* Check whether element has a valid namespace.\n       Realm-safe check (GHSA-hpcv-96wg-7vj8): use the cached Node.prototype\n       nodeType getter rather than `instanceof Element`, which is realm-\n       bound and short-circuits to false for any node minted in a different\n       realm \u2014 letting a foreign-realm element with a forbidden namespace\n       slip past the namespace check entirely. */\n    const nt = getNodeType ? getNodeType(currentNode) : currentNode.nodeType;\n    if (nt === NODE_TYPE.element && !_checkValidNamespace(currentNode)) {\n      _forceRemove(currentNode);\n      return true;\n    }\n\n    /* Make sure that older browsers don't get fallback-tag mXSS */\n    if (\n      (tagName === 'noscript' ||\n        tagName === 'noembed' ||\n        tagName === 'noframes') &&\n      regExpTest(EXPRESSIONS.FALLBACK_TAG_CLOSE, currentNode.innerHTML)\n    ) {\n      _forceRemove(currentNode);\n      return true;\n    }\n\n    /* Sanitize element content to be template-safe */\n    if (SAFE_FOR_TEMPLATES && currentNode.nodeType === NODE_TYPE.text) {\n      /* Get the element's text content */\n      const content = _stripTemplateExpressions(currentNode.textContent);\n\n      if (currentNode.textContent !== content) {\n        arrayPush(DOMPurify.removed, { element: currentNode.cloneNode() });\n        currentNode.textContent = content;\n      }\n    }\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeElements, currentNode, null);\n\n    return false;\n  };\n\n  /**\n   * _isValidAttribute\n   *\n   * @param lcTag Lowercase tag name of containing element.\n   * @param lcName Lowercase attribute name.\n   * @param value Attribute value.\n   * @return Returns true if `value` is valid, otherwise false.\n   */\n  // eslint-disable-next-line complexity\n  const _isValidAttribute = function (\n    lcTag: string,\n    lcName: string,\n    value: string\n  ): boolean {\n    /* FORBID_ATTR must always win, even if ADD_ATTR predicate would allow it */\n    if (FORBID_ATTR[lcName]) {\n      return false;\n    }\n\n    /* Make sure attribute cannot clobber */\n    if (\n      SANITIZE_DOM &&\n      (lcName === 'id' || lcName === 'name') &&\n      (value in document || value in formElement)\n    ) {\n      return false;\n    }\n\n    const nameIsPermitted =\n      ALLOWED_ATTR[lcName] ||\n      (EXTRA_ELEMENT_HANDLING.attributeCheck instanceof Function &&\n        EXTRA_ELEMENT_HANDLING.attributeCheck(lcName, lcTag));\n\n    /* Allow valid data-* attributes: At least one character after \"-\"\n        (https://html.spec.whatwg.org/multipage/dom.html#embedding-custom-non-visible-data-with-the-data-*-attributes)\n        XML-compatible (https://html.spec.whatwg.org/multipage/infrastructure.html#xml-compatible and http://www.w3.org/TR/xml/#d0e804)\n        We don't need to check the value; it's always URI safe. */\n    if (ALLOW_DATA_ATTR && regExpTest(DATA_ATTR, lcName)) {\n      // This attribute is safe\n    } else if (ALLOW_ARIA_ATTR && regExpTest(ARIA_ATTR, lcName)) {\n      // This attribute is safe\n      /* Otherwise, check the name is permitted */\n    } else if (!nameIsPermitted) {\n      if (\n        // First condition does a very basic check if a) it's basically a valid custom element tagname AND\n        // b) if the tagName passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck\n        // and c) if the attribute name passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.attributeNameCheck\n        (_isBasicCustomElement(lcTag) &&\n          ((CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp &&\n            regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, lcTag)) ||\n            (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function &&\n              CUSTOM_ELEMENT_HANDLING.tagNameCheck(lcTag))) &&\n          ((CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof RegExp &&\n            regExpTest(CUSTOM_ELEMENT_HANDLING.attributeNameCheck, lcName)) ||\n            (CUSTOM_ELEMENT_HANDLING.attributeNameCheck instanceof Function &&\n              CUSTOM_ELEMENT_HANDLING.attributeNameCheck(lcName, lcTag)))) ||\n        // Alternative, second condition checks if it's an `is`-attribute, AND\n        // the value passes whatever the user has configured for CUSTOM_ELEMENT_HANDLING.tagNameCheck\n        (lcName === 'is' &&\n          CUSTOM_ELEMENT_HANDLING.allowCustomizedBuiltInElements &&\n          ((CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof RegExp &&\n            regExpTest(CUSTOM_ELEMENT_HANDLING.tagNameCheck, value)) ||\n            (CUSTOM_ELEMENT_HANDLING.tagNameCheck instanceof Function &&\n              CUSTOM_ELEMENT_HANDLING.tagNameCheck(value))))\n      ) {\n        // If user has supplied a regexp or function in CUSTOM_ELEMENT_HANDLING.tagNameCheck, we need to also allow derived custom elements using the same tagName test.\n        // Additionally, we need to allow attributes passing the CUSTOM_ELEMENT_HANDLING.attributeNameCheck user has configured, as custom elements can define these at their own discretion.\n      } else {\n        return false;\n      }\n      /* Check value is safe. First, is attr inert? If so, is safe */\n    } else if (URI_SAFE_ATTRIBUTES[lcName]) {\n      // This attribute is safe\n      /* Check no script, data or unknown possibly unsafe URI\n        unless we know URI values are safe for that attribute */\n    } else if (\n      regExpTest(IS_ALLOWED_URI, stringReplace(value, ATTR_WHITESPACE, ''))\n    ) {\n      // This attribute is safe\n      /* Keep image data URIs alive if src/xlink:href is allowed */\n      /* Further prevent gadget XSS for dynamically built script tags */\n    } else if (\n      (lcName === 'src' || lcName === 'xlink:href' || lcName === 'href') &&\n      lcTag !== 'script' &&\n      stringIndexOf(value, 'data:') === 0 &&\n      DATA_URI_TAGS[lcTag]\n    ) {\n      // This attribute is safe\n      /* Allow unknown protocols: This provides support for links that\n        are handled by protocol handlers which may be unknown ahead of\n        time, e.g. fb:, spotify: */\n    } else if (\n      ALLOW_UNKNOWN_PROTOCOLS &&\n      !regExpTest(IS_SCRIPT_OR_DATA, stringReplace(value, ATTR_WHITESPACE, ''))\n    ) {\n      // This attribute is safe\n      /* Check for binary attributes */\n    } else if (value) {\n      return false;\n    } else {\n      // Binary attributes are safe at this point\n      /* Anything else, presume unsafe, do not add it back */\n    }\n\n    return true;\n  };\n\n  /* Names the HTML spec reserves from valid-custom-element-name; these must\n   * never be treated as basic custom elements even when a permissive\n   * CUSTOM_ELEMENT_HANDLING.tagNameCheck is configured. */\n  const RESERVED_CUSTOM_ELEMENT_NAMES = addToSet({}, [\n    'annotation-xml',\n    'color-profile',\n    'font-face',\n    'font-face-format',\n    'font-face-name',\n    'font-face-src',\n    'font-face-uri',\n    'missing-glyph',\n  ]);\n\n  /**\n   * _isBasicCustomElement\n   * checks if at least one dash is included in tagName, and it's not the first char\n   * for more sophisticated checking see https://github.com/sindresorhus/validate-element-name\n   *\n   * @param tagName name of the tag of the node to sanitize\n   * @returns Returns true if the tag name meets the basic criteria for a custom element, otherwise false.\n   */\n  const _isBasicCustomElement = function (tagName: string): boolean {\n    return (\n      !RESERVED_CUSTOM_ELEMENT_NAMES[stringToLowerCase(tagName)] &&\n      regExpTest(CUSTOM_ELEMENT, tagName)\n    );\n  };\n\n  /**\n   * Wrap an attribute value in the matching Trusted Types object when\n   * the active policy requires it. Namespaced attributes pass through\n   * unchanged (no TT support yet, see\n   * https://bugs.chromium.org/p/chromium/issues/detail?id=1305293).\n   *\n   * @param lcTag lowercase tag name of the containing element\n   * @param lcName lowercase attribute name\n   * @param namespaceURI the attribute's namespace, if any\n   * @param value the attribute value to wrap\n   * @return the value, wrapped when Trusted Types demand it\n   */\n  const _applyTrustedTypesToAttribute = function (\n    lcTag: string,\n    lcName: string,\n    namespaceURI: string | null,\n    value: string\n  ): string {\n    if (\n      trustedTypesPolicy &&\n      typeof trustedTypes === 'object' &&\n      typeof trustedTypes.getAttributeType === 'function' &&\n      !namespaceURI\n    ) {\n      switch (trustedTypes.getAttributeType(lcTag, lcName)) {\n        case 'TrustedHTML': {\n          return _createTrustedHTML(value);\n        }\n\n        case 'TrustedScriptURL': {\n          return _createTrustedScriptURL(value);\n        }\n\n        default: {\n          break;\n        }\n      }\n    }\n\n    return value;\n  };\n\n  /**\n   * Write a modified attribute value back onto the element. On\n   * success, re-probe for clobbering introduced by the new value and\n   * remove the element when found; otherwise pop the removal entry\n   * recorded by the earlier _removeAttribute (long-standing pairing\n   * with the SANITIZE_NAMED_PROPS path - do not \"fix\" casually). On\n   * failure, remove the attribute instead.\n   *\n   * @param currentNode the element carrying the attribute\n   * @param name the attribute name as present on the element\n   * @param namespaceURI the attribute's namespace, if any\n   * @param value the new attribute value\n   */\n  const _setAttributeValue = function (\n    currentNode: Element,\n    name: string,\n    namespaceURI: string | null,\n    value: string\n  ): void {\n    try {\n      if (namespaceURI) {\n        currentNode.setAttributeNS(namespaceURI, name, value);\n      } else {\n        /* Fallback to setAttribute() for browser-unrecognized namespaces e.g. \"x-schema\". */\n        currentNode.setAttribute(name, value);\n      }\n\n      if (_isClobbered(currentNode)) {\n        _forceRemove(currentNode);\n      } else {\n        arrayPop(DOMPurify.removed);\n      }\n    } catch (_) {\n      _removeAttribute(name, currentNode);\n    }\n  };\n\n  /**\n   * _sanitizeAttributes\n   *\n   * @protect attributes\n   * @protect nodeName\n   * @protect removeAttribute\n   * @protect setAttribute\n   *\n   * @param currentNode to sanitize\n   */\n  const _sanitizeAttributes = function (currentNode: Element): void {\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeAttributes, currentNode, null);\n\n    const { attributes } = currentNode;\n\n    /* Check if we have attributes; if not we might have a text node */\n    if (!attributes || _isClobbered(currentNode)) {\n      return;\n    }\n\n    const hookEvent = {\n      attrName: '',\n      attrValue: '',\n      keepAttr: true,\n      allowedAttributes: ALLOWED_ATTR,\n      forceKeepAttr: undefined,\n    };\n    let l = attributes.length;\n    const lcTag = transformCaseFunc(currentNode.nodeName);\n\n    /* Go backwards over all attributes; safely remove bad ones */\n    while (l--) {\n      const attr = attributes[l];\n      const { name, namespaceURI, value: attrValue } = attr;\n      const lcName = transformCaseFunc(name);\n\n      const initValue = attrValue;\n      let value = name === 'value' ? initValue : stringTrim(initValue);\n\n      /* Execute a hook if present */\n      hookEvent.attrName = lcName;\n      hookEvent.attrValue = value;\n      hookEvent.keepAttr = true;\n      hookEvent.forceKeepAttr = undefined; // Allows developers to see this is a property they can set\n      _executeHooks(hooks.uponSanitizeAttribute, currentNode, hookEvent);\n      value = hookEvent.attrValue;\n\n      /* Full DOM Clobbering protection via namespace isolation,\n       * Prefix id and name attributes with `user-content-`\n       */\n      if (\n        SANITIZE_NAMED_PROPS &&\n        (lcName === 'id' || lcName === 'name') &&\n        stringIndexOf(value, SANITIZE_NAMED_PROPS_PREFIX) !== 0\n      ) {\n        // Remove the attribute with this value\n        _removeAttribute(name, currentNode);\n        // Prefix the value and later re-create the attribute with the sanitized value\n        value = SANITIZE_NAMED_PROPS_PREFIX + value;\n      }\n      // Else: already prefixed, leave the attribute alone \u2014 the prefix is\n      // itself the clobbering protection, and re-applying it is incorrect.\n\n      /* Work around a security issue with comments inside attributes */\n      if (\n        SAFE_FOR_XML &&\n        regExpTest(\n          /((--!?|])>)|<\\/(style|script|title|xmp|textarea|noscript|iframe|noembed|noframes)/i,\n          value\n        )\n      ) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Make sure we cannot easily use animated hrefs, even if animations are allowed */\n      if (lcName === 'attributename' && stringMatch(value, 'href')) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Did the hooks force-keep the attribute? */\n      if (hookEvent.forceKeepAttr) {\n        continue;\n      }\n\n      /* Did the hooks approve of the attribute? */\n      if (!hookEvent.keepAttr) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Work around a security issue in jQuery 3.0 */\n      if (\n        !ALLOW_SELF_CLOSE_IN_ATTR &&\n        regExpTest(EXPRESSIONS.SELF_CLOSING_TAG, value)\n      ) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Sanitize attribute content to be template-safe */\n      if (SAFE_FOR_TEMPLATES) {\n        value = _stripTemplateExpressions(value);\n      }\n\n      /* Is `value` valid for this attribute? */\n      if (!_isValidAttribute(lcTag, lcName, value)) {\n        _removeAttribute(name, currentNode);\n        continue;\n      }\n\n      /* Handle attributes that require Trusted Types */\n      value = _applyTrustedTypesToAttribute(lcTag, lcName, namespaceURI, value);\n\n      /* Handle invalid data-* attribute set by try-catching it */\n      if (value !== initValue) {\n        _setAttributeValue(currentNode, name, namespaceURI, value);\n      }\n    }\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeAttributes, currentNode, null);\n  };\n\n  /**\n   * _sanitizeShadowDOM\n   *\n   * @param fragment to iterate over recursively\n   */\n  const _sanitizeShadowDOM = function (fragment: DocumentFragment): void {\n    let shadowNode = null;\n    const shadowIterator = _createNodeIterator(fragment);\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.beforeSanitizeShadowDOM, fragment, null);\n\n    while ((shadowNode = shadowIterator.nextNode())) {\n      /* Execute a hook if present */\n      _executeHooks(hooks.uponSanitizeShadowNode, shadowNode, null);\n\n      /* Sanitize tags and elements */\n      _sanitizeElements(shadowNode);\n\n      /* Check attributes next */\n      _sanitizeAttributes(shadowNode);\n\n      /* Deep shadow DOM detected.\n         Realm-safe check (GHSA-hpcv-96wg-7vj8): use nodeType against the\n         DOCUMENT_FRAGMENT_NODE constant rather than instanceof, so we\n         recurse into <template>.content from foreign realms too. */\n      if (_isDocumentFragment(shadowNode.content)) {\n        _sanitizeShadowDOM(shadowNode.content);\n      }\n\n      /* An element iterated here may itself host an attached\n         shadow root. The default NodeIterator does not enter shadow\n         trees, so a shadow root nested inside template.content was\n         previously reached by no walk at all (the pre-pass at\n         _sanitizeAttachedShadowRoots descends via childNodes, which\n         doesn't enter template.content; the template-content recursion\n         above iterates the content but never inspected shadowRoot).\n         Walk it explicitly. The nodeType guard avoids reading\n         shadowRoot off text / comment / CDATA / PI nodes that the\n         iterator also surfaces. */\n      const shadowNodeType = getNodeType\n        ? getNodeType(shadowNode)\n        : shadowNode.nodeType;\n      if (shadowNodeType === NODE_TYPE.element) {\n        const innerSr = getShadowRoot(shadowNode);\n        if (_isDocumentFragment(innerSr)) {\n          _sanitizeAttachedShadowRoots(innerSr);\n          _sanitizeShadowDOM(innerSr);\n        }\n      }\n    }\n\n    /* Execute a hook if present */\n    _executeHooks(hooks.afterSanitizeShadowDOM, fragment, null);\n  };\n\n  /**\n   * _sanitizeAttachedShadowRoots\n   *\n   * Walks `root` and feeds every attached shadow root we encounter into\n   * the existing _sanitizeShadowDOM pipeline. The default node iterator\n   * does not descend into shadow trees, so nodes inside an attached\n   * shadow root would otherwise be skipped entirely.\n   *\n   * Two real input paths put attached shadow roots in front of us:\n   *   1. IN_PLACE on a DOM node that already has shadow roots attached.\n   *   2. DOM-node input where importNode(dirty, true) deep-clones the\n   *      shadow root because it was created with `clonable: true`.\n   *\n   * This pass runs once, up front, so the main iteration loop (and the\n   * existing _sanitizeShadowDOM template-content recursion) stay\n   * untouched \u2014 string-input paths are not affected.\n   *\n   * @param root the subtree root to walk for attached shadow roots\n   */\n  const _sanitizeAttachedShadowRoots = function (root: Node): void {\n    /* Iterative (explicit stack) rather than per-child recursion. DOM APIs\n       impose no depth cap, so an attacker-shaped tree (JSON/CRDT/editor data\n       built straight into the DOM \u2014 the IN_PLACE surface) deeper than the JS\n       call-stack budget would otherwise overflow native recursion here and\n       throw at the IN_PLACE entry pre-pass, before a single node is\n       sanitized, leaving the caller's live tree untouched (fail-open). See\n       campaign-3 F4. A heap stack keeps depth off the call stack.\n\n       Each work item is either a node to descend into, or a deferred\n       `_sanitizeShadowDOM` for an already-walked shadow root. The deferred\n       form preserves the original post-order discipline: a shadow root's\n       nested shadow roots are discovered before the outer shadow is\n       sanitized (which may remove hosts). Pushes are in reverse of the\n       desired processing order (LIFO): template content, then children, then\n       the shadow-sanitize, then the shadow walk \u2014 so the order matches the\n       previous recursion exactly. */\n    const stack: Array<{ node: Node | null; shadow: DocumentFragment | null }> =\n      [{ node: root, shadow: null }];\n\n    while (stack.length > 0) {\n      const item = stack.pop();\n\n      /* Deferred shadow-DOM sanitisation: runs after its subtree was walked. */\n      if (item.shadow) {\n        _sanitizeShadowDOM(item.shadow);\n        continue;\n      }\n\n      const node = item.node;\n      const nodeType = getNodeType ? getNodeType(node) : (node as any).nodeType;\n      const isElement = nodeType === NODE_TYPE.element;\n\n      /* (pushed last \u2192 processed first) Children, snapshotted in reverse so\n         the first child is processed first. Snapshotting matters because a\n         hook may detach siblings mid-walk. */\n      const childNodes = getChildNodes(node);\n      if (childNodes) {\n        for (let i = childNodes.length - 1; i >= 0; --i) {\n          stack.push({ node: childNodes[i], shadow: null });\n        }\n      }\n\n      /* (pushed before children \u2192 processed after them, matching the old\n         \"template content last\" order) When the node is a <template>,\n         descend into its content. */\n      if (isElement) {\n        const rootName = getNodeName ? getNodeName(node) : null;\n        if (\n          typeof rootName === 'string' &&\n          transformCaseFunc(rootName) === 'template'\n        ) {\n          const content = (node as HTMLTemplateElement).content;\n          if (_isDocumentFragment(content)) {\n            stack.push({ node: content, shadow: null });\n          }\n        }\n      }\n\n      /* Shadow root (processed first): walk its subtree, then sanitise it.\n         Realm-safe check (GHSA-hpcv-96wg-7vj8): nodeType-based detection\n         rather than `instanceof DocumentFragment`, which is realm-bound and\n         silently skipped foreign-realm shadow roots (e.g.\n         iframe.contentDocument attachShadow). */\n      if (isElement) {\n        const sr = getShadowRoot(node);\n        if (_isDocumentFragment(sr)) {\n          /* Push the deferred sanitise first so it pops after the shadow\n             walk we push next, i.e. nested shadow roots are discovered\n             before this one is sanitised. */\n          stack.push({ node: null, shadow: sr }, { node: sr, shadow: null });\n        }\n      }\n    }\n  };\n\n  // eslint-disable-next-line complexity\n  DOMPurify.sanitize = function (dirty, cfg = {}) {\n    let body = null;\n    let importedNode = null;\n    let currentNode = null;\n    let returnNode = null;\n    /* Make sure we have a string to sanitize.\n      DO NOT return early, as this will return the wrong type if\n      the user has requested a DOM object rather than a string */\n    IS_EMPTY_INPUT = !dirty;\n    if (IS_EMPTY_INPUT) {\n      dirty = '<!-->';\n    }\n\n    /* Stringify, in case dirty is an object */\n    if (typeof dirty !== 'string' && !_isNode(dirty)) {\n      dirty = stringifyValue(dirty);\n\n      if (typeof dirty !== 'string') {\n        throw typeErrorCreate('dirty is not a string, aborting');\n      }\n    }\n\n    /* Return dirty HTML if DOMPurify cannot run */\n    if (!DOMPurify.isSupported) {\n      return dirty;\n    }\n\n    /* Assign config vars */\n    if (!SET_CONFIG) {\n      _parseConfig(cfg);\n    }\n\n    /* Clean up removed elements */\n    DOMPurify.removed = [];\n\n    /* Resolve IN_PLACE for this call without mutating persistent config.\n       Writing the IN_PLACE closure variable here leaks under setConfig(),\n       where _parseConfig is skipped on later calls: a single string call would\n       disable in-place mode for every subsequent node call, returning a\n       sanitized copy while leaving the caller's node \u2014 which in-place callers\n       keep using and whose return value they ignore \u2014 unsanitized. REPORT-2. */\n    const inPlace = IN_PLACE && typeof dirty !== 'string' && _isNode(dirty);\n\n    if (inPlace) {\n      /* Do some early pre-sanitization to avoid unsafe root nodes.\n         Read nodeName through the cached prototype getter \u2014 a clobbering\n         child named \"nodeName\" on the form root would otherwise shadow\n         the property and let this check skip the root-allowlist\n         validation entirely. */\n      const nn = getNodeName\n        ? getNodeName(dirty as Node)\n        : (dirty as Node).nodeName;\n      if (typeof nn === 'string') {\n        const tagName = transformCaseFunc(nn);\n        if (!ALLOWED_TAGS[tagName] || FORBID_TAGS[tagName]) {\n          throw typeErrorCreate(\n            'root node is forbidden and cannot be sanitized in-place'\n          );\n        }\n      }\n\n      /* Pre-flight the root through _isClobbered. The iterator-driven\n         removal path can not detach a parent-less root: _forceRemove\n         falls through to Element.prototype.remove(), which per spec\n         is a no-op on a node with no parent. A clobbered root would\n         then survive the main loop with its attributes uninspected,\n         because _sanitizeAttributes early-returns on _isClobbered. The\n         result would be an attacker-controlled form, complete with any\n         event-handler attributes the caller passed in, handed back to\n         the application unsanitized. Refuse to sanitize such a root\n         the same way we refuse a forbidden tag. GHSA-r47g-fvhr-h676. */\n      if (_isClobbered(dirty as Element)) {\n        throw typeErrorCreate(\n          'root node is clobbered and cannot be sanitized in-place'\n        );\n      }\n\n      /* Sanitize attached shadow roots before the main iterator runs.\n         The iterator does not descend into shadow trees. Same fail-closed\n         barrier as the main walk (campaign-3 F2): a custom-element reaction\n         inside a shadow root could abort this pre-pass before the walk runs,\n         which would otherwise leave the entire live tree unsanitized. */\n      try {\n        _sanitizeAttachedShadowRoots(dirty as Node);\n      } catch (error) {\n        _neutralizeRoot(dirty as Node);\n\n        throw error;\n      }\n    } else if (_isNode(dirty)) {\n      /* If dirty is a DOM element, append to an empty document to avoid\n         elements being stripped by the parser */\n      body = _initDocument('<!---->');\n      importedNode = body.ownerDocument.importNode(dirty, true);\n      if (\n        importedNode.nodeType === NODE_TYPE.element &&\n        importedNode.nodeName === 'BODY'\n      ) {\n        /* Node is already a body, use as is */\n        body = importedNode;\n      } else if (importedNode.nodeName === 'HTML') {\n        body = importedNode;\n      } else {\n        // eslint-disable-next-line unicorn/prefer-dom-node-append\n        body.appendChild(importedNode);\n      }\n\n      /* Clonable shadow roots are deep-cloned by importNode(); sanitize\n         them before the main iterator runs, since the iterator does not\n         descend into shadow trees. The walk routes every read through a\n         cached prototype getter so clobbering descendants on a form root\n         cannot hide a shadow host from this pass. */\n      _sanitizeAttachedShadowRoots(importedNode);\n    } else {\n      /* Exit directly if we have nothing to do */\n      if (\n        !RETURN_DOM &&\n        !SAFE_FOR_TEMPLATES &&\n        !WHOLE_DOCUMENT &&\n        // eslint-disable-next-line unicorn/prefer-includes\n        dirty.indexOf('<') === -1\n      ) {\n        return trustedTypesPolicy && RETURN_TRUSTED_TYPE\n          ? _createTrustedHTML(dirty)\n          : dirty;\n      }\n\n      /* Initialize the document to work on */\n      body = _initDocument(dirty);\n\n      /* Check we have a DOM node from the data */\n      if (!body) {\n        return RETURN_DOM ? null : RETURN_TRUSTED_TYPE ? emptyHTML : '';\n      }\n    }\n\n    /* Remove first element node (ours) if FORCE_BODY is set */\n    if (body && FORCE_BODY) {\n      _forceRemove(body.firstChild);\n    }\n\n    /* Get node iterator */\n    const nodeIterator = _createNodeIterator(inPlace ? dirty : body);\n\n    /* Now start iterating over the created document.\n       The walk runs inside an exception barrier (campaign-3 F2): a re-entrant\n       engine/custom-element mutation can detach a node mid-walk so\n       `_forceRemove`'s parentless guard throws, aborting the loop. Without the\n       barrier the caller's in-place tree would be left half-sanitized with the\n       unvisited tail still armed. On any throw we fail closed \u2014 strip the\n       in-place root bare \u2014 then rethrow so the existing throw contract is\n       preserved. (String/DOM-copy paths never return the partial body, so the\n       propagating throw is already fail-closed there.) */\n    try {\n      while ((currentNode = nodeIterator.nextNode())) {\n        /* Sanitize tags and elements */\n        _sanitizeElements(currentNode);\n\n        /* Check attributes next */\n        _sanitizeAttributes(currentNode);\n\n        /* Shadow DOM detected, sanitize it.\n           Realm-safe check (GHSA-hpcv-96wg-7vj8): nodeType-based detection\n           instead of instanceof, so foreign-realm <template>.content is\n           walked correctly. */\n        if (_isDocumentFragment(currentNode.content)) {\n          _sanitizeShadowDOM(currentNode.content);\n        }\n      }\n    } catch (error) {\n      if (inPlace) {\n        _neutralizeRoot(dirty as Node);\n      }\n\n      throw error;\n    }\n\n    /* If we sanitized `dirty` in-place, return it. */\n    if (inPlace) {\n      /* Fail-closed completion of the audit-5 F1 fix: every node removed from\n         the caller's live tree is detached but may still hold a queued\n         resource-event handler that fires in page scope after we return. The\n         move-hoist covers only disallowed-tag KEEP_CONTENT removals; strip the\n         non-allow-listed attributes off every other removed subtree (clobber,\n         mXSS, namespace, comments, KEEP_CONTENT:false, \u2026) so those handlers are\n         cancelled before any event can fire. Runs synchronously, pre-return. */\n      arrayForEach(DOMPurify.removed, (entry) => {\n        if (entry.element) {\n          _neutralizeSubtree(entry.element as Node);\n        }\n      });\n\n      if (SAFE_FOR_TEMPLATES) {\n        _scrubTemplateExpressions(dirty as Element);\n      }\n\n      return dirty;\n    }\n\n    /* Return sanitized string or DOM */\n    if (RETURN_DOM) {\n      if (SAFE_FOR_TEMPLATES) {\n        _scrubTemplateExpressions(body);\n      }\n\n      if (RETURN_DOM_FRAGMENT) {\n        returnNode = createDocumentFragment.call(body.ownerDocument);\n\n        while (body.firstChild) {\n          // eslint-disable-next-line unicorn/prefer-dom-node-append\n          returnNode.appendChild(body.firstChild);\n        }\n      } else {\n        returnNode = body;\n      }\n\n      if (ALLOWED_ATTR.shadowroot || ALLOWED_ATTR.shadowrootmode) {\n        /*\n          AdoptNode() is not used because internal state is not reset\n          (e.g. the past names map of a HTMLFormElement), this is safe\n          in theory but we would rather not risk another attack vector.\n          The state that is cloned by importNode() is explicitly defined\n          by the specs.\n        */\n        returnNode = importNode.call(originalDocument, returnNode, true);\n      }\n\n      return returnNode;\n    }\n\n    let serializedHTML = WHOLE_DOCUMENT ? body.outerHTML : body.innerHTML;\n\n    /* Serialize doctype if allowed */\n    if (\n      WHOLE_DOCUMENT &&\n      ALLOWED_TAGS['!doctype'] &&\n      body.ownerDocument &&\n      body.ownerDocument.doctype &&\n      body.ownerDocument.doctype.name &&\n      regExpTest(EXPRESSIONS.DOCTYPE_NAME, body.ownerDocument.doctype.name)\n    ) {\n      serializedHTML =\n        '<!DOCTYPE ' + body.ownerDocument.doctype.name + '>\\n' + serializedHTML;\n    }\n\n    /* Sanitize final string template-safe */\n    if (SAFE_FOR_TEMPLATES) {\n      serializedHTML = _stripTemplateExpressions(serializedHTML);\n    }\n\n    return trustedTypesPolicy && RETURN_TRUSTED_TYPE\n      ? _createTrustedHTML(serializedHTML)\n      : serializedHTML;\n  };\n\n  DOMPurify.setConfig = function (cfg = {}) {\n    _parseConfig(cfg);\n    SET_CONFIG = true;\n  };\n\n  DOMPurify.clearConfig = function () {\n    CONFIG = null;\n    SET_CONFIG = false;\n\n    // Drop any caller-supplied Trusted Types policy so it cannot poison later\n    // `RETURN_TRUSTED_TYPE` output. The internal default policy (cached, and\n    // never recreated \u2014 Trusted Types throws on duplicate names) is restored by\n    // the next `_parseConfig`. See GHSA-vxr8-fq34-vvx9.\n    trustedTypesPolicy = defaultTrustedTypesPolicy;\n    emptyHTML = '';\n  };\n\n  DOMPurify.isValidAttribute = function (tag, attr, value) {\n    /* Initialize shared config vars if necessary. */\n    if (!CONFIG) {\n      _parseConfig({});\n    }\n\n    const lcTag = transformCaseFunc(tag);\n    const lcName = transformCaseFunc(attr);\n    return _isValidAttribute(lcTag, lcName, value);\n  };\n\n  DOMPurify.addHook = function (\n    entryPoint: keyof HooksMap,\n    hookFunction: HookFunction\n  ) {\n    if (typeof hookFunction !== 'function') {\n      return;\n    }\n\n    arrayPush(hooks[entryPoint], hookFunction);\n  };\n\n  DOMPurify.removeHook = function (\n    entryPoint: keyof HooksMap,\n    hookFunction: HookFunction\n  ) {\n    if (hookFunction !== undefined) {\n      const index = arrayLastIndexOf(hooks[entryPoint], hookFunction);\n\n      return index === -1\n        ? undefined\n        : arraySplice(hooks[entryPoint], index, 1)[0];\n    }\n\n    return arrayPop(hooks[entryPoint]);\n  };\n\n  DOMPurify.removeHooks = function (entryPoint: keyof HooksMap) {\n    hooks[entryPoint] = [];\n  };\n\n  DOMPurify.removeAllHooks = function () {\n    hooks = _createHooksMap();\n  };\n\n  return DOMPurify;\n}\n\nexport default createDOMPurify();\n", "import createDOMPurify from 'dompurify';\n\nclass EnhancedSecureCryptoUtils {\n\n    static _keyMetadata = new WeakMap();\n    static _messageSanitizer = null;\n    \n    // Initialize secure logging system after class definition\n\n    // Utility to sort object keys for deterministic serialization\n    static sortObjectKeys(obj) {\n        if (typeof obj !== 'object' || obj === null) {\n            return obj;\n        }\n\n        if (Array.isArray(obj)) {\n            return obj.map(EnhancedSecureCryptoUtils.sortObjectKeys);\n        }\n\n        const sortedObj = {};\n        Object.keys(obj).sort().forEach(key => {\n            sortedObj[key] = EnhancedSecureCryptoUtils.sortObjectKeys(obj[key]);\n        });\n        return sortedObj;\n    }\n\n    // Utility to assert CryptoKey type and properties\n    static assertCryptoKey(key, expectedName = null, expectedUsages = []) {\n        if (!(key instanceof CryptoKey)) throw new Error('Expected CryptoKey');\n        if (expectedName && key.algorithm?.name !== expectedName) {\n            throw new Error(`Expected algorithm ${expectedName}, got ${key.algorithm?.name}`);\n        }\n        for (const u of expectedUsages) {\n            if (!key.usages || !key.usages.includes(u)) {\n                throw new Error(`Missing required key usage: ${u}`);\n            }\n        }\n    }\n    // Helper function to convert ArrayBuffer to Base64\n    static arrayBufferToBase64(buffer) {\n        let binary = '';\n        const bytes = new Uint8Array(buffer);\n        const len = bytes.byteLength;\n        for (let i = 0; i < len; i++) {\n            binary += String.fromCharCode(bytes[i]);\n        }\n        return btoa(binary);\n    }\n\n    // Helper function to convert Base64 to ArrayBuffer\n    static base64ToArrayBuffer(base64) {\n        try {\n            // Validate input\n            if (typeof base64 !== 'string' || !base64) {\n                throw new Error('Invalid base64 input: must be a non-empty string');\n            }\n\n            // Remove any whitespace and validate base64 format\n            const cleanBase64 = base64.trim();\n            if (!/^[A-Za-z0-9+/]*={0,2}$/.test(cleanBase64)) {\n                throw new Error('Invalid base64 format');\n            }\n\n            // Handle empty string case\n            if (cleanBase64 === '') {\n                return new ArrayBuffer(0);\n            }\n\n            const binaryString = atob(cleanBase64);\n            const len = binaryString.length;\n            const bytes = new Uint8Array(len);\n            for (let i = 0; i < len; i++) {\n                bytes[i] = binaryString.charCodeAt(i);\n            }\n            return bytes.buffer;\n        } catch (error) {\n            console.error('Base64 to ArrayBuffer conversion failed:', error.message);\n            throw new Error(`Base64 conversion error: ${error.message}`);\n        }\n    }\n\n    // Helper function to convert hex string to Uint8Array\n    static hexToUint8Array(hexString) {\n        try {\n            if (!hexString || typeof hexString !== 'string') {\n                throw new Error('Invalid hex string input: must be a non-empty string');\n            }\n\n            // Remove colons and spaces from hex string (e.g., \"aa:bb:cc\" -> \"aabbcc\")\n            const cleanHex = hexString.replace(/:/g, '').replace(/\\s/g, '');\n            \n            // Validate hex format\n            if (!/^[0-9a-fA-F]*$/.test(cleanHex)) {\n                throw new Error('Invalid hex format: contains non-hex characters');\n            }\n            \n            // Ensure even length\n            if (cleanHex.length % 2 !== 0) {\n                throw new Error('Invalid hex format: odd length');\n            }\n\n            // Convert hex string to bytes\n            const bytes = new Uint8Array(cleanHex.length / 2);\n            for (let i = 0; i < cleanHex.length; i += 2) {\n                bytes[i / 2] = parseInt(cleanHex.substr(i, 2), 16);\n            }\n            \n            return bytes;\n        } catch (error) {\n            console.error('Hex to Uint8Array conversion failed:', error.message);\n            throw new Error(`Hex conversion error: ${error.message}`);\n        }\n    }\n\n    /**\n     * Overwrite a buffer holding key material once it is no longer needed.\n     *\n     * This is a genuine wipe, unlike the manager's _secureWipeString /\n     * _secureWipeCryptoKey, which cannot wipe anything (JS strings are immutable\n     * and a non-extractable CryptoKey has no JS-visible bytes) and only ever\n     * dropped a reference while reporting success. Here the bytes really are\n     * ours: overwrite them so the shared secret does not linger in the heap\n     * waiting for a garbage collector that may never run before a heap snapshot\n     * or a memory-reading extension gets there first.\n     *\n     * Random first, then zeros: on the off chance a copying GC has already moved\n     * the buffer, the random pass at least destroys the plaintext value at the\n     * old address as well as the new one.\n     */\n    static zeroizeBuffer(buffer) {\n        try {\n            if (!buffer) return;\n            const view = buffer instanceof Uint8Array\n                ? buffer\n                : (buffer instanceof ArrayBuffer ? new Uint8Array(buffer) : null);\n            if (!view || view.length === 0) return;\n            crypto.getRandomValues(view);\n            view.fill(0);\n        } catch (_) {\n            // A detached buffer is already unreadable; nothing left to do.\n        }\n    }\n\n    static async encryptData(data, password) {\n        try {\n            const dataString = typeof data === 'string' ? data : JSON.stringify(data);\n            const salt = crypto.getRandomValues(new Uint8Array(16));\n            const encoder = new TextEncoder();\n            const passwordBuffer = encoder.encode(password);\n\n            const keyMaterial = await crypto.subtle.importKey(\n                'raw',\n                passwordBuffer,\n                { name: 'PBKDF2' },\n                false,\n                ['deriveKey']\n            );\n\n            const key = await crypto.subtle.deriveKey(\n                {\n                    name: 'PBKDF2',\n                    salt: salt,\n                    iterations: 310000,\n                    hash: 'SHA-256',\n                },\n                keyMaterial,\n                { name: 'AES-GCM', length: 256 },\n                false,\n                ['encrypt']\n            );\n\n            const iv = crypto.getRandomValues(new Uint8Array(12));\n            const dataBuffer = encoder.encode(dataString);\n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: iv },\n                key,\n                dataBuffer\n            );\n\n            const encryptedPackage = {\n                version: '1.0',\n                salt: Array.from(salt),\n                iv: Array.from(iv),\n                data: Array.from(new Uint8Array(encrypted)),\n                timestamp: Date.now(),\n            };\n\n            const packageString = JSON.stringify(encryptedPackage);\n            return EnhancedSecureCryptoUtils.arrayBufferToBase64(new TextEncoder().encode(packageString).buffer);\n\n        } catch (error) {\n            console.error('Encryption failed:', error.message);\n            throw new Error(`Encryption error: ${error.message}`);\n        }\n    }\n\n        static async decryptData(encryptedData, password) {\n        try {\n            const packageBuffer = EnhancedSecureCryptoUtils.base64ToArrayBuffer(encryptedData);\n            const packageString = new TextDecoder().decode(packageBuffer);\n            const encryptedPackage = JSON.parse(packageString);\n\n            if (!encryptedPackage.version || !encryptedPackage.salt || !encryptedPackage.iv || !encryptedPackage.data) {\n                throw new Error('Invalid encrypted data format');\n            }\n\n            const salt = new Uint8Array(encryptedPackage.salt);\n            const iv = new Uint8Array(encryptedPackage.iv);\n            const encrypted = new Uint8Array(encryptedPackage.data);\n\n            const encoder = new TextEncoder();\n            const passwordBuffer = encoder.encode(password);\n\n            const keyMaterial = await crypto.subtle.importKey(\n                'raw',\n                passwordBuffer,\n                { name: 'PBKDF2' },\n                false,\n                ['deriveKey']\n            );\n\n            const key = await crypto.subtle.deriveKey(\n                {\n                    name: 'PBKDF2',\n                    salt: salt,\n                    iterations: 310000,\n                    hash: 'SHA-256'\n                },\n                keyMaterial,\n                { name: 'AES-GCM', length: 256 },\n                false,\n                ['decrypt']\n            );\n\n            const decrypted = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv },\n                key,\n                encrypted\n            );\n\n            const decryptedString = new TextDecoder().decode(decrypted);\n\n            try {\n                return JSON.parse(decryptedString);\n            } catch {\n                return decryptedString;\n            }\n\n        } catch (error) {\n            console.error('Decryption failed:', error.message);\n            throw new Error(`Decryption error: ${error.message}`);\n        }\n    }\n\n    \n    // Generate secure password for data exchange\n    static generateSecurePassword() {\n        const chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789!@#$%^&*()_+-=[]{}|;:,.<>?';\n        const charCount = chars.length;\n        const length = 32; \n        let password = '';\n        \n        // Use rejection sampling to avoid bias\n        for (let i = 0; i < length; i++) {\n            let randomValue;\n            do {\n                randomValue = crypto.getRandomValues(new Uint32Array(1))[0];\n            } while (randomValue >= 4294967296 - (4294967296 % charCount)); // Reject biased values\n            \n            password += chars[randomValue % charCount];\n        }\n        return password;\n    }\n\n    // Real security level calculation with actual verification\n    static async calculateSecurityLevel(securityManager) {\n        let score = 0;\n        const maxScore = 100; // Fixed: Changed from 110 to 100 for cleaner percentage\n        const verificationResults = {};\n        \n        try {\n            // Fallback to basic calculation if securityManager is not fully initialized\n            if (!securityManager || !securityManager.securityFeatures) {\n                console.warn('Security manager not fully initialized, using fallback calculation');\n                return {\n                    level: 'INITIALIZING',\n                    score: 0,\n                    color: 'gray',\n                    verificationResults: {},\n                    timestamp: Date.now(),\n                    details: 'Security system initializing...',\n                    isRealData: false\n                };\n            }\n\n            // All security features are enabled by default - no session type restrictions\n            const sessionType = 'full'; // All features enabled\n            const isDemoSession = false; // All features available\n            \n            // 1. Base encryption verification (20 points) - Available in demo\n            try {\n                const encryptionResult = await EnhancedSecureCryptoUtils.verifyEncryption(securityManager);\n                if (encryptionResult.passed) {\n                    score += 20;\n                    verificationResults.verifyEncryption = { passed: true, details: encryptionResult.details, points: 20 };\n                } else {\n                    verificationResults.verifyEncryption = { passed: false, details: encryptionResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyEncryption = { passed: false, details: `Encryption check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 2. Simple key exchange verification (15 points) - Available in demo\n            try {\n                const ecdhResult = await EnhancedSecureCryptoUtils.verifyECDHKeyExchange(securityManager);\n                if (ecdhResult.passed) {\n                    score += 15;\n                    verificationResults.verifyECDHKeyExchange = { passed: true, details: ecdhResult.details, points: 15 };\n                } else {\n                    verificationResults.verifyECDHKeyExchange = { passed: false, details: ecdhResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyECDHKeyExchange = { passed: false, details: `Key exchange check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 3. Message integrity verification (10 points) - Available in demo\n            try {\n                const integrityResult = await EnhancedSecureCryptoUtils.verifyMessageIntegrity(securityManager);\n                if (integrityResult.passed) {\n                score += 10;\n                    verificationResults.verifyMessageIntegrity = { passed: true, details: integrityResult.details, points: 10 };\n            } else {\n                    verificationResults.verifyMessageIntegrity = { passed: false, details: integrityResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyMessageIntegrity = { passed: false, details: `Message integrity check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 4. ECDSA signatures verification (15 points) - All features enabled by default\n            try {\n                const ecdsaResult = await EnhancedSecureCryptoUtils.verifyECDSASignatures(securityManager);\n                if (ecdsaResult.passed) {\n                    score += 15;\n                    verificationResults.verifyECDSASignatures = { passed: true, details: ecdsaResult.details, points: 15 };\n            } else {\n                    verificationResults.verifyECDSASignatures = { passed: false, details: ecdsaResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyECDSASignatures = { passed: false, details: `Digital signatures check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 5. Rate limiting verification (5 points) - Available in demo\n            try {\n                const rateLimitResult = await EnhancedSecureCryptoUtils.verifyRateLimiting(securityManager);\n                if (rateLimitResult.passed) {\n                    score += 5;\n                    verificationResults.verifyRateLimiting = { passed: true, details: rateLimitResult.details, points: 5 };\n            } else {\n                    verificationResults.verifyRateLimiting = { passed: false, details: rateLimitResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyRateLimiting = { passed: false, details: `Rate limiting check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 6. Metadata protection verification (10 points) - All features enabled by default\n            try {\n                const metadataResult = await EnhancedSecureCryptoUtils.verifyMetadataProtection(securityManager);\n                if (metadataResult.passed) {\n                score += 10;\n                    verificationResults.verifyMetadataProtection = { passed: true, details: metadataResult.details, points: 10 };\n            } else {\n                    verificationResults.verifyMetadataProtection = { passed: false, details: metadataResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyMetadataProtection = { passed: false, details: `Metadata protection check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 7. Perfect Forward Secrecy verification (10 points) - All features enabled by default\n            try {\n                const pfsResult = await EnhancedSecureCryptoUtils.verifyPerfectForwardSecrecy(securityManager);\n                if (pfsResult.passed) {\n                score += 10;\n                    verificationResults.verifyPerfectForwardSecrecy = { passed: true, details: pfsResult.details, points: 10 };\n            } else {\n                    verificationResults.verifyPerfectForwardSecrecy = { passed: false, details: pfsResult.details, points: 0 };\n                }\n            } catch (error) {\n                verificationResults.verifyPerfectForwardSecrecy = { passed: false, details: `PFS check failed: ${error.message}`, points: 0 };\n            }\n            \n            // 8. Nested encryption verification (5 points) - All features enabled by default\n            if (await EnhancedSecureCryptoUtils.verifyNestedEncryption(securityManager)) {\n                score += 5;\n                verificationResults.nestedEncryption = { passed: true, details: 'Nested encryption active', points: 5 };\n            } else {\n                verificationResults.nestedEncryption = { passed: false, details: 'Nested encryption failed', points: 0 };\n            }\n            \n            // 9. Packet padding verification (5 points) - All features enabled by default\n            if (await EnhancedSecureCryptoUtils.verifyPacketPadding(securityManager)) {\n                score += 5;\n                verificationResults.packetPadding = { passed: true, details: 'Packet padding active', points: 5 };\n            } else {\n                verificationResults.packetPadding = { passed: false, details: 'Packet padding failed', points: 0 };\n            }\n            \n            // 10. Advanced features verification (10 points) - All features enabled by default\n            if (await EnhancedSecureCryptoUtils.verifyAdvancedFeatures(securityManager)) {\n                score += 10;\n                verificationResults.advancedFeatures = { passed: true, details: 'Advanced features active', points: 10 };\n            } else {\n                verificationResults.advancedFeatures = { passed: false, details: 'Advanced features failed', points: 0 };\n            }\n            \n            const percentage = Math.round((score / maxScore) * 100);\n            \n            // All security features are available - no restrictions\n            const availableChecks = 10; // All 10 security checks available\n            const passedChecks = Object.values(verificationResults).filter(r => r.passed).length;\n            \n            const result = {\n                level: percentage >= 85 ? 'HIGH' : percentage >= 65 ? 'MEDIUM' : percentage >= 35 ? 'LOW' : 'CRITICAL',\n                score: percentage,\n                color: percentage >= 85 ? 'green' : percentage >= 65 ? 'orange' : percentage >= 35 ? 'yellow' : 'red',\n                verificationResults,\n                timestamp: Date.now(),\n                details: `Real verification: ${score}/${maxScore} security checks passed (${passedChecks}/${availableChecks} available)`,\n                isRealData: true,\n                passedChecks: passedChecks,\n                totalChecks: availableChecks,\n                sessionType: sessionType,\n                maxPossibleScore: 100 // All features enabled - max 100 points\n            };\n\n            \n            return result;\n        } catch (error) {\n            console.error('Security level calculation failed:', error.message);\n            return {\n                level: 'UNKNOWN',\n                score: 0,\n                color: 'red',\n                verificationResults: {},\n                timestamp: Date.now(),\n                details: `Verification failed: ${error.message}`,\n                isRealData: false\n            };\n        }\n    }\n\n    // Real verification functions\n    static async verifyEncryption(securityManager) {\n        try {\n            if (!securityManager.encryptionKey) {\n                return { passed: false, details: 'No encryption key available' };\n            }\n            \n            // Test actual encryption/decryption with multiple data types\n            const testCases = [\n                'Test encryption verification',\n                '\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438',\n                'Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?',\n                'Large data: ' + 'A'.repeat(1000)\n            ];\n            \n            for (const testData of testCases) {\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            const iv = crypto.getRandomValues(new Uint8Array(12));\n            \n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv },\n                securityManager.encryptionKey,\n                testBuffer\n            );\n            \n            const decrypted = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv },\n                securityManager.encryptionKey,\n                encrypted\n            );\n            \n            const decryptedText = new TextDecoder().decode(decrypted);\n                if (decryptedText !== testData) {\n                    return { passed: false, details: `Decryption mismatch for: ${testData.substring(0, 20)}...` };\n                }\n            }\n            \n            return { passed: true, details: 'AES-GCM encryption/decryption working correctly' };\n        } catch (error) {\n            console.error('Encryption verification failed:', error.message);\n            return { passed: false, details: `Encryption test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyECDHKeyExchange(securityManager) {\n        try {\n            if (!securityManager.ecdhKeyPair || !securityManager.ecdhKeyPair.privateKey || !securityManager.ecdhKeyPair.publicKey) {\n                return { passed: false, details: 'No ECDH key pair available' };\n            }\n            \n            // Test that keys are actually ECDH keys\n            const keyType = securityManager.ecdhKeyPair.privateKey.algorithm.name;\n            const curve = securityManager.ecdhKeyPair.privateKey.algorithm.namedCurve;\n            \n            if (keyType !== 'ECDH') {\n                return { passed: false, details: `Invalid key type: ${keyType}, expected ECDH` };\n            }\n            \n            if (curve !== 'P-384' && curve !== 'P-256') {\n                return { passed: false, details: `Unsupported curve: ${curve}, expected P-384 or P-256` };\n            }\n            \n            // Test key derivation\n            try {\n                const derivedKey = await crypto.subtle.deriveKey(\n                    { name: 'ECDH', public: securityManager.ecdhKeyPair.publicKey },\n                    securityManager.ecdhKeyPair.privateKey,\n                    { name: 'AES-GCM', length: 256 },\n                    false,\n                    ['encrypt', 'decrypt']\n                );\n                \n                if (!derivedKey) {\n                    return { passed: false, details: 'Key derivation failed' };\n                }\n            } catch (deriveError) {\n                return { passed: false, details: `Key derivation test failed: ${deriveError.message}` };\n            }\n            \n            return { passed: true, details: `ECDH key exchange working with ${curve} curve` };\n        } catch (error) {\n            console.error('ECDH verification failed:', error.message);\n            return { passed: false, details: `ECDH test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyECDSASignatures(securityManager) {\n        try {\n            if (!securityManager.ecdsaKeyPair || !securityManager.ecdsaKeyPair.privateKey || !securityManager.ecdsaKeyPair.publicKey) {\n                return { passed: false, details: 'No ECDSA key pair available' };\n            }\n            \n            // Test actual signing and verification with multiple test cases\n            const testCases = [\n                'Test ECDSA signature verification',\n                '\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u043E\u0434\u043F\u0438\u0441\u0438',\n                'Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?',\n                'Large data: ' + 'B'.repeat(2000)\n            ];\n            \n            for (const testData of testCases) {\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            \n            const signature = await crypto.subtle.sign(\n                { name: 'ECDSA', hash: 'SHA-256' },\n                securityManager.ecdsaKeyPair.privateKey,\n                testBuffer\n            );\n            \n            const isValid = await crypto.subtle.verify(\n                { name: 'ECDSA', hash: 'SHA-256' },\n                securityManager.ecdsaKeyPair.publicKey,\n                signature,\n                testBuffer\n            );\n            \n                if (!isValid) {\n                    return { passed: false, details: `Signature verification failed for: ${testData.substring(0, 20)}...` };\n                }\n            }\n            \n            return { passed: true, details: 'ECDSA digital signatures working correctly' };\n        } catch (error) {\n            console.error('ECDSA verification failed:', error.message);\n            return { passed: false, details: `ECDSA test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyMessageIntegrity(securityManager) {\n        try {\n            // Check if macKey exists and is a valid CryptoKey\n            if (!securityManager.macKey || !(securityManager.macKey instanceof CryptoKey)) {\n                return { passed: false, details: 'MAC key not available or invalid' };\n            }\n            \n            // Test message integrity with HMAC using multiple test cases\n            const testCases = [\n                'Test message integrity verification',\n                '\u0420\u0443\u0441\u0441\u043A\u0438\u0439 \u0442\u0435\u043A\u0441\u0442 \u0434\u043B\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u0446\u0435\u043B\u043E\u0441\u0442\u043D\u043E\u0441\u0442\u0438',\n                'Special chars: !@#$%^&*()_+-=[]{}|;:,.<>?',\n                'Large data: ' + 'C'.repeat(3000)\n            ];\n            \n            for (const testData of testCases) {\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            \n            const hmac = await crypto.subtle.sign(\n                { name: 'HMAC', hash: 'SHA-256' },\n                securityManager.macKey,\n                testBuffer\n            );\n            \n            const isValid = await crypto.subtle.verify(\n                { name: 'HMAC', hash: 'SHA-256' },\n                securityManager.macKey,\n                hmac,\n                testBuffer\n            );\n            \n                if (!isValid) {\n                    return { passed: false, details: `HMAC verification failed for: ${testData.substring(0, 20)}...` };\n                }\n            }\n            \n            return { passed: true, details: 'Message integrity (HMAC) working correctly' };\n        } catch (error) {\n            console.error('Message integrity verification failed:', error.message);\n            return { passed: false, details: `Message integrity test failed: ${error.message}` };\n        }\n    }\n    \n    // Additional verification functions.\n    //\n    // These used to be three `return { passed: true }` stubs \u2014 a quarter of the\n    // reported score awarded for checks that never ran, under a UI that calls the\n    // result \"Real cryptographic tests\". A security indicator that cannot fail\n    // tells the user nothing; worse, it keeps reading green after the subsystem\n    // it claims to measure breaks. Each one below now exercises the thing it\n    // names and is expected to be able to fail.\n\n    static async verifyRateLimiting(securityManager) {\n        try {\n            const limiter = EnhancedSecureCryptoUtils.rateLimiter;\n            if (!limiter || typeof limiter.checkMessageRate !== 'function') {\n                return { passed: false, details: 'Rate limiter is not available' };\n            }\n\n            // Drive a throwaway bucket past its limit and confirm it actually\n            // refuses. A separate identifier per run keeps the live counters\n            // untouched, so running the report never costs the user quota.\n            const probeId = `selftest_${crypto.getRandomValues(new Uint32Array(1))[0]}`;\n            const limit = 3;\n            for (let i = 0; i < limit; i++) {\n                const allowed = await limiter.checkMessageRate(probeId, limit, 60000);\n                if (!allowed) {\n                    return { passed: false, details: `Rate limiter refused message ${i + 1} of ${limit} while under the limit` };\n                }\n            }\n\n            const shouldBeBlocked = await limiter.checkMessageRate(probeId, limit, 60000);\n            limiter.messages.delete(`msg_${probeId}`);\n\n            if (shouldBeBlocked) {\n                return { passed: false, details: 'Rate limiter did not block a message over the limit' };\n            }\n\n            return { passed: true, details: `Rate limiting verified: ${limit} allowed, the next refused` };\n        } catch (error) {\n            return { passed: false, details: `Rate limiting test failed: ${error.message}` };\n        }\n    }\n\n    static async verifyMetadataProtection(securityManager) {\n        try {\n            const metadataKey = securityManager?.metadataKey;\n            if (!metadataKey || !(metadataKey instanceof CryptoKey)) {\n                return { passed: false, details: 'Metadata encryption key not available' };\n            }\n            if (metadataKey.algorithm?.name !== 'AES-GCM') {\n                return { passed: false, details: `Metadata key has the wrong algorithm: ${metadataKey.algorithm?.name}` };\n            }\n            if (metadataKey.extractable) {\n                return { passed: false, details: 'Metadata key is extractable' };\n            }\n\n            // Key separation is the whole point: message metadata (ids, sequence\n            // numbers, real lengths) must not be readable with the message key.\n            if (securityManager.encryptionKey === metadataKey) {\n                return { passed: false, details: 'Metadata key is not separated from the message key' };\n            }\n\n            // Round-trip a probe so a key that exists but cannot be used is caught.\n            const iv = crypto.getRandomValues(new Uint8Array(12));\n            const probe = new TextEncoder().encode('metadata-protection-selftest');\n            const sealed = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, metadataKey, probe);\n            const opened = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, metadataKey, sealed);\n            if (new TextDecoder().decode(opened) !== 'metadata-protection-selftest') {\n                return { passed: false, details: 'Metadata encryption round-trip mismatch' };\n            }\n\n            return { passed: true, details: 'Metadata is encrypted under a separate non-extractable key' };\n        } catch (error) {\n            return { passed: false, details: `Metadata protection test failed: ${error.message}` };\n        }\n    }\n\n    static async verifyPerfectForwardSecrecy(securityManager) {\n        try {\n            // Session-level PFS is real: every session runs a fresh ephemeral ECDH\n            // and the derived keys are non-extractable and wiped when it ends.\n            const hasEphemeralKeys = !!securityManager?.ecdhKeyPair?.privateKey &&\n                securityManager.ecdhKeyPair.privateKey.extractable === false;\n            if (!hasEphemeralKeys) {\n                return { passed: false, details: 'No non-extractable ephemeral ECDH key pair for this session' };\n            }\n\n            // In-session forward secrecy comes from the Double Ratchet: a per-\n            // message key derived by a one-way KDF and destroyed after use, plus a\n            // DH step whenever the conversation changes direction. Without it a\n            // single compromised session key opens the entire transcript, which is\n            // the state this check used to report as \"configured and active\".\n            if (securityManager?.isRatchetActive?.()) {\n                const state = securityManager._ratchet?.getState?.() || {};\n                return {\n                    passed: true,\n                    details: `Double Ratchet active: per-message keys destroyed after use, DH re-key on each reply (sent ${state.sendCount ?? 0}, received ${state.receiveCount ?? 0} on the current chain)`\n                };\n            }\n\n            return {\n                passed: false,\n                details: 'Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation'\n            };\n        } catch (error) {\n            return { passed: false, details: `PFS test failed: ${error.message}` };\n        }\n    }\n\n    static async verifyReplayProtection(securityManager) {\n        try {\n            // Debug logs removed to prevent leaking runtime state\n            \n            // Check if replay protection is enabled\n            if (!securityManager.replayProtection) {\n                return { passed: false, details: 'Replay protection not enabled' };\n            }\n            \n            return { passed: true, details: 'Replay protection is working correctly' };\n        } catch (error) {\n            return { passed: false, details: `Replay protection test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyDTLSFingerprint(securityManager) {\n        try {\n            // Debug logs removed\n            \n            // Check if DTLS fingerprint is available\n            if (!securityManager.dtlsFingerprint) {\n                return { passed: false, details: 'DTLS fingerprint not available' };\n            }\n            \n            return { passed: true, details: 'DTLS fingerprint is valid and available' };\n        } catch (error) {\n            return { passed: false, details: `DTLS fingerprint test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifySASVerification(securityManager) {\n        try {\n            // Debug logs removed\n            \n            // Check if SAS code is available\n            if (!securityManager.sasCode) {\n                return { passed: false, details: 'SAS code not available' };\n            }\n            \n            return { passed: true, details: 'SAS verification code is valid and available' };\n        } catch (error) {\n            return { passed: false, details: `SAS verification test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyTrafficObfuscation(securityManager) {\n        try {\n            // Debug logs removed\n            \n            // Check if traffic obfuscation is enabled\n            if (!securityManager.trafficObfuscation) {\n                return { passed: false, details: 'Traffic obfuscation not enabled' };\n            }\n            \n            return { passed: true, details: 'Traffic obfuscation is working correctly' };\n        } catch (error) {\n            return { passed: false, details: `Traffic obfuscation test failed: ${error.message}` };\n        }\n    }\n    \n    static async verifyNestedEncryption(securityManager) {\n        try {\n            // Check if nestedEncryptionKey exists and is a valid CryptoKey\n            if (!securityManager.nestedEncryptionKey || !(securityManager.nestedEncryptionKey instanceof CryptoKey)) {\n                console.warn('Nested encryption key not available or invalid');\n                return false;\n            }\n            \n            // Test nested encryption\n            const testData = 'Test nested encryption verification';\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            \n            // Simulate nested encryption\n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: crypto.getRandomValues(new Uint8Array(12)) },\n                securityManager.nestedEncryptionKey,\n                testBuffer\n            );\n            \n            return encrypted && encrypted.byteLength > 0;\n        } catch (error) {\n            console.error('Nested encryption verification failed:', error.message);\n            return false;\n        }\n    }\n    \n    static async verifyPacketPadding(securityManager) {\n        try {\n            if (!securityManager.paddingConfig || !securityManager.paddingConfig.enabled) return false;\n            \n            // Test packet padding functionality\n            const testData = 'Test packet padding verification';\n            const encoder = new TextEncoder();\n            const testBuffer = encoder.encode(testData);\n            \n            // Simulate packet padding\n            const paddingSize = Math.floor(Math.random() * (securityManager.paddingConfig.maxPadding - securityManager.paddingConfig.minPadding)) + securityManager.paddingConfig.minPadding;\n            const paddedData = new Uint8Array(testBuffer.byteLength + paddingSize);\n            paddedData.set(new Uint8Array(testBuffer), 0);\n            \n            return paddedData.byteLength >= testBuffer.byteLength + securityManager.paddingConfig.minPadding;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Packet padding verification failed', { error: error.message });\n            return false;\n        }\n    }\n    \n    static async verifyAdvancedFeatures(securityManager) {\n        try {\n            // Test advanced features like traffic obfuscation, fake traffic, etc.\n            const hasFakeTraffic = securityManager.fakeTrafficConfig && securityManager.fakeTrafficConfig.enabled;\n            const hasDecoyChannels = securityManager.decoyChannelsConfig && securityManager.decoyChannelsConfig.enabled;\n            const hasAntiFingerprinting = securityManager.antiFingerprintingConfig && securityManager.antiFingerprintingConfig.enabled;\n            \n            return hasFakeTraffic || hasDecoyChannels || hasAntiFingerprinting;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Advanced features verification failed', { error: error.message });\n            return false;\n        }\n    }\n    \n    static async verifyMutualAuth(securityManager) {\n        try {\n            if (!securityManager.isVerified || !securityManager.verificationCode) return false;\n            \n            // Test mutual authentication\n            return securityManager.isVerified && securityManager.verificationCode.length > 0;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Mutual auth verification failed', { error: error.message });\n            return false;\n        }\n    }\n    \n    \n    static async verifyNonExtractableKeys(securityManager) {\n        // This check was inverted: it returned true when exportKey SUCCEEDED \u2014\n        // i.e. when the key was extractable, the failure case \u2014 and also true in\n        // the catch. It could not return false, so it confirmed nothing.\n        const keys = [\n            ['encryptionKey', securityManager?.encryptionKey],\n            ['macKey', securityManager?.macKey],\n            ['metadataKey', securityManager?.metadataKey]\n        ];\n\n        for (const [name, key] of keys) {\n            if (!key || !(key instanceof CryptoKey)) {\n                return false;\n            }\n            // `extractable` is the authoritative answer and needs no export\n            // attempt; exporting a key just to prove it cannot be exported would\n            // copy it into the JS heap on every implementation that allows it.\n            if (key.extractable !== false) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Session key is extractable', { keyName: name });\n                return false;\n            }\n        }\n\n        return true;\n    }\n    \n    static async verifyEnhancedValidation(securityManager) {\n        try {\n            if (!securityManager.securityFeatures) return false;\n            \n            // Test enhanced validation features\n            const hasValidation = securityManager.securityFeatures.hasEnhancedValidation || \n                                securityManager.securityFeatures.hasEnhancedReplayProtection;\n            \n            return hasValidation;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Enhanced validation verification failed', { error: error.message });\n            return false;\n        }\n    }\n    \n    \n    static async verifyPFS(securityManager) {\n        try {\n            // Check if PFS is active\n            return securityManager.securityFeatures &&\n                   securityManager.securityFeatures.hasPFS === true &&\n                   securityManager.keyRotationInterval &&\n                   securityManager.currentKeyVersion !== undefined &&\n                   securityManager.keyVersions &&\n                   securityManager.keyVersions instanceof Map;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'PFS verification failed', { error: error.message });\n            return false;\n        }\n    }\n\n    // Rate limiting implementation\n    static rateLimiter = {\n    messages: new Map(),\n    connections: new Map(),\n    locks: new Map(),\n    \n    async checkMessageRate(identifier, limit = 60, windowMs = 60000) {\n        if (typeof identifier !== 'string' || identifier.length > 256) {\n            return false;\n        }\n        \n        const key = `msg_${identifier}`;\n\n        if (this.locks.has(key)) {\n\n            await new Promise(resolve => setTimeout(resolve, Math.floor(Math.random() * 10) + 5));\n            return this.checkMessageRate(identifier, limit, windowMs);\n        }\n        \n        this.locks.set(key, true);\n        \n        try {\n            const now = Date.now();\n            \n            if (!this.messages.has(key)) {\n                this.messages.set(key, []);\n            }\n            \n            const timestamps = this.messages.get(key);\n            \n            const validTimestamps = timestamps.filter(ts => now - ts < windowMs);\n            \n            if (validTimestamps.length >= limit) {\n                return false; \n            }\n            \n            validTimestamps.push(now);\n            this.messages.set(key, validTimestamps);\n            return true;\n        } finally {\n            this.locks.delete(key);\n        }\n    },\n    \n    async checkConnectionRate(identifier, limit = 5, windowMs = 300000) {\n        if (typeof identifier !== 'string' || identifier.length > 256) {\n            return false;\n        }\n        \n        const key = `conn_${identifier}`;\n        \n        if (this.locks.has(key)) {\n            await new Promise(resolve => setTimeout(resolve, Math.floor(Math.random() * 10) + 5));\n            return this.checkConnectionRate(identifier, limit, windowMs);\n        }\n        \n        this.locks.set(key, true);\n        \n        try {\n            const now = Date.now();\n            \n            if (!this.connections.has(key)) {\n                this.connections.set(key, []);\n            }\n            \n            const timestamps = this.connections.get(key);\n            const validTimestamps = timestamps.filter(ts => now - ts < windowMs);\n            \n            if (validTimestamps.length >= limit) {\n                return false;\n            }\n            \n            validTimestamps.push(now);\n            this.connections.set(key, validTimestamps);\n            return true;\n        } finally {\n            this.locks.delete(key);\n        }\n    },\n    \n    cleanup() {\n        const now = Date.now();\n        const maxAge = 3600000; \n        \n        for (const [key, timestamps] of this.messages.entries()) {\n            if (this.locks.has(key)) continue;\n            \n            const valid = timestamps.filter(ts => now - ts < maxAge);\n            if (valid.length === 0) {\n                this.messages.delete(key);\n            } else {\n                this.messages.set(key, valid);\n            }\n        }\n        \n        for (const [key, timestamps] of this.connections.entries()) {\n            if (this.locks.has(key)) continue;\n            \n            const valid = timestamps.filter(ts => now - ts < maxAge);\n            if (valid.length === 0) {\n                this.connections.delete(key);\n            } else {\n                this.connections.set(key, valid);\n            }\n        }\n\n        for (const lockKey of this.locks.keys()) {\n            const keyTimestamp = parseInt(lockKey.split('_').pop()) || 0;\n            if (now - keyTimestamp > 30000) {\n                this.locks.delete(lockKey);\n            }\n        }\n    }\n};\n\n    static validateSalt(salt) {\n        if (!salt || salt.length !== 64) {\n            throw new Error('Salt must be exactly 64 bytes');\n        }\n        \n        const uniqueBytes = new Set(salt);\n        if (uniqueBytes.size < 16) {\n            throw new Error('Salt has insufficient entropy');\n        }\n        \n        return true;\n    }\n\n    // Secure logging without data leaks\n    static secureLog = {\n        logs: [],\n        maxLogs: 100,\n        isProductionMode: false,\n        \n        // Initialize production mode detection\n        init() {\n            this.isProductionMode = this._detectProductionMode();\n            if (this.isProductionMode) {\n                console.log('[SecureChat] Production mode detected - sensitive logging disabled');\n            }\n        },\n        \n        _detectProductionMode() {\n            return (\n                (typeof process !== 'undefined' && process.env?.NODE_ENV === 'production') ||\n                (!window.DEBUG_MODE && !window.DEVELOPMENT_MODE) ||\n                (window.location.hostname && !window.location.hostname.includes('localhost') && \n                 !window.location.hostname.includes('127.0.0.1') && \n                 !window.location.hostname.includes('.local')) ||\n                (typeof window.webpackHotUpdate === 'undefined' && !window.location.search.includes('debug'))\n            );\n        },\n        \n        log(level, message, context = {}) {\n            const sanitizedContext = this.sanitizeContext(context);\n            const logEntry = {\n                timestamp: Date.now(),\n                level,\n                message,\n                context: sanitizedContext,\n                id: crypto.getRandomValues(new Uint32Array(1))[0]\n            };\n            \n            this.logs.push(logEntry);\n            \n            // Keep only recent logs\n            if (this.logs.length > this.maxLogs) {\n                this.logs = this.logs.slice(-this.maxLogs);\n            }\n            \n            // Production-safe console output\n            if (this.isProductionMode) {\n                if (level === 'error') {\n                    // In production expose only an opaque error code, never the context.\n                    console.error(`\u274C [SecureChat] ${message} [ERROR_CODE: ${this._generateErrorCode(message)}]`);\n                } else if (level === 'warn') {\n                    // Warning text only, no context payload.\n                    console.warn(`\u26A0\uFE0F [SecureChat] ${message}`);\n                } else {\n                    // info/debug and any other level: suppressed entirely in production.\n                    return;\n                }\n            } else {\n                // Development mode - \u043F\u043E\u043A\u0430\u0437\u044B\u0432\u0430\u0435\u043C \u0432\u0441\u0435\n                if (level === 'error') {\n                    console.error(`\u274C [SecureChat] ${message}`, { errorType: sanitizedContext?.constructor?.name || 'Unknown' });\n                } else if (level === 'warn') {\n                    console.warn(`\u26A0\uFE0F [SecureChat] ${message}`, { details: sanitizedContext });\n                } else {\n                    console.log(`[SecureChat] ${message}`, sanitizedContext);\n                }\n            }\n        },\n        \n        // \u0413\u0435\u043D\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0431\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u044B\u0439 \u043A\u043E\u0434 \u043E\u0448\u0438\u0431\u043A\u0438 \u0434\u043B\u044F production\n        _generateErrorCode(message) {\n            const hash = message.split('').reduce((a, b) => {\n                a = ((a << 5) - a) + b.charCodeAt(0);\n                return a & a;\n            }, 0);\n            return Math.abs(hash).toString(36).substring(0, 6).toUpperCase();\n        },\n        \n        sanitizeContext(context) {\n            if (!context || typeof context !== 'object') {\n                return context;\n            }\n            \n            const sensitivePatterns = [\n                /key/i, /secret/i, /password/i, /token/i, /signature/i,\n                /challenge/i, /proof/i, /salt/i, /iv/i, /nonce/i, /hash/i,\n                /fingerprint/i, /mac/i, /private/i, /encryption/i, /decryption/i\n            ];\n            \n            const sanitized = {};\n            for (const [key, value] of Object.entries(context)) {\n                const isSensitive = sensitivePatterns.some(pattern => \n                    pattern.test(key) || (typeof value === 'string' && pattern.test(value))\n                );\n                \n                if (isSensitive) {\n                    sanitized[key] = '[REDACTED]';\n                } else if (typeof value === 'string' && value.length > 100) {\n                    sanitized[key] = value.substring(0, 100) + '...[TRUNCATED]';\n                } else if (value instanceof ArrayBuffer || value instanceof Uint8Array) {\n                    sanitized[key] = `[${value.constructor.name}(${value.byteLength || value.length} bytes)]`;\n                } else if (value && typeof value === 'object' && !Array.isArray(value)) {\n                    // \u0420\u0435\u043A\u0443\u0440\u0441\u0438\u0432\u043D\u0430\u044F \u0441\u0430\u043D\u0438\u0442\u0438\u0437\u0430\u0446\u0438\u044F \u0434\u043B\u044F \u043E\u0431\u044A\u0435\u043A\u0442\u043E\u0432\n                    sanitized[key] = this.sanitizeContext(value);\n                } else {\n                    sanitized[key] = value;\n                }\n            }\n            return sanitized;\n        },\n        \n        getLogs(level = null) {\n            if (level) {\n                return this.logs.filter(log => log.level === level);\n            }\n            return [...this.logs];\n        },\n        \n        clearLogs() {\n            this.logs = [];\n        },\n        \n        // \u041C\u0435\u0442\u043E\u0434 \u0434\u043B\u044F \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u0438 \u043E\u0448\u0438\u0431\u043E\u043A \u043D\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 \u0432 production\n        async sendErrorToServer(errorCode, message, context = {}) {\n            if (!this.isProductionMode) {\n                return; // \u0412 development \u043D\u0435 \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u044F\u0435\u043C\n            }\n            \n            try {\n                // \u041E\u0442\u043F\u0440\u0430\u0432\u043B\u044F\u0435\u043C \u0442\u043E\u043B\u044C\u043A\u043E \u0431\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u0443\u044E \u0438\u043D\u0444\u043E\u0440\u043C\u0430\u0446\u0438\u044E\n                const safeErrorData = {\n                    errorCode,\n                    timestamp: Date.now(),\n                    userAgent: navigator.userAgent.substring(0, 100),\n                    url: window.location.href.substring(0, 100)\n                };\n                \n                // \u0417\u0434\u0435\u0441\u044C \u043C\u043E\u0436\u043D\u043E \u0434\u043E\u0431\u0430\u0432\u0438\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u0443 \u043D\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\n                // await fetch('/api/error-log', { method: 'POST', body: JSON.stringify(safeErrorData) });\n                \n                if (window.DEBUG_MODE) {\n                    console.log('[SecureChat] Error logged to server:', safeErrorData);\n                }\n            } catch (e) {\n                // \u041D\u0435 \u043B\u043E\u0433\u0438\u0440\u0443\u0435\u043C \u043E\u0448\u0438\u0431\u043A\u0438 \u043B\u043E\u0433\u0438\u0440\u043E\u0432\u0430\u043D\u0438\u044F\n            }\n        }\n    };\n\n    // Generate ECDH key pair for secure key exchange (non-extractable) with fallback\n    static async generateECDHKeyPair() {\n        try {\n            // Try P-384 first\n            try {\n                const keyPair = await crypto.subtle.generateKey(\n                    {\n                        name: 'ECDH',\n                        namedCurve: 'P-384'\n                    },\n                    false, // Non-extractable for enhanced security\n                    // 'deriveBits' is REQUIRED: deriveSharedKeys() uses deriveBits so\n                    // the shared secret lands in a buffer we can overwrite, instead of\n                    // being exported out of an extractable key and left in the heap.\n                    // Without this usage WebCrypto rejects the derivation outright and\n                    // no session can be established. Usages are local to the CryptoKey\n                    // and are not part of the exported SPKI, so this does not change\n                    // anything on the wire.\n                    ['deriveKey', 'deriveBits']\n                );\n\n                // Removed key generation info logging to avoid exposing key-related metadata\n\n                return keyPair;\n            } catch (p384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'Elliptic curve P-384 generation failed, switching curve', { error: p384Error.message });\n\n                // Fallback to P-256\n                const keyPair = await crypto.subtle.generateKey(\n                    {\n                        name: 'ECDH',\n                        namedCurve: 'P-256'\n                    },\n                    false, // Non-extractable for enhanced security\n                    ['deriveKey', 'deriveBits']\n                );\n                \n                // Removed key generation info logging to avoid exposing key-related metadata\n                \n                return keyPair;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'ECDH key generation failed', { error: error.message });\n            throw new Error('Failed to create keys for secure exchange');\n        }\n    }\n\n    // Generate ECDSA key pair for digital signatures with fallback\n    static async generateECDSAKeyPair() {\n        try {\n            // Try P-384 first\n            try {\n                const keyPair = await crypto.subtle.generateKey(\n                    {\n                        name: 'ECDSA',\n                        namedCurve: 'P-384'\n                    },\n                    false, // Non-extractable for enhanced security\n                    ['sign', 'verify']\n                );\n                \n                // Removed key generation info logging to avoid exposing key-related metadata\n                \n                return keyPair;\n            } catch (p384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'Elliptic curve P-384 generation failed, switching curve', { error: p384Error.message });\n                \n                // Fallback to P-256\n                const keyPair = await crypto.subtle.generateKey(\n                    {\n                        name: 'ECDSA',\n                        namedCurve: 'P-256'\n                    },\n                    false, // Non-extractable for enhanced security\n                    ['sign', 'verify']\n                );\n                \n                // Removed key generation info logging to avoid exposing key-related metadata\n                \n                return keyPair;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'ECDSA key generation failed', { error: error.message });\n            throw new Error('Failed to generate keys for digital signatures');\n        }\n    }\n\n    // Sign data with ECDSA (P-384 or P-256)\n    static async signData(privateKey, data) {\n        try {\n            const encoder = new TextEncoder();\n            const dataBuffer = typeof data === 'string' ? encoder.encode(data) : data;\n            \n            // Try SHA-384 first, fallback to SHA-256\n            try {\n                const signature = await crypto.subtle.sign(\n                    {\n                        name: 'ECDSA',\n                        hash: 'SHA-384'\n                    },\n                    privateKey,\n                    dataBuffer\n                );\n                \n                return Array.from(new Uint8Array(signature));\n            } catch (sha384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'SHA-384 signing failed, trying SHA-256', { error: sha384Error.message });\n                \n                const signature = await crypto.subtle.sign(\n                    {\n                        name: 'ECDSA',\n                        hash: 'SHA-256'\n                    },\n                    privateKey,\n                    dataBuffer\n                );\n                \n                return Array.from(new Uint8Array(signature));\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Data signing failed', { error: error.message });\n            throw new Error('Failed to sign data');\n        }\n    }\n\n    // Verify ECDSA signature (P-384 or P-256)\n    static async verifySignature(publicKey, signature, data) {\n        try {\n            // Debug logs removed\n            \n            const encoder = new TextEncoder();\n            const dataBuffer = typeof data === 'string' ? encoder.encode(data) : data;\n            const signatureBuffer = new Uint8Array(signature);\n            \n            // Debug logs removed\n            \n            // Try SHA-384 first, fallback to SHA-256\n            try {\n                // Debug logs removed\n                const isValid = await crypto.subtle.verify(\n                    {\n                        name: 'ECDSA',\n                        hash: 'SHA-384'\n                    },\n                    publicKey,\n                    signatureBuffer,\n                    dataBuffer\n                );\n                \n                // Debug logs removed\n                \n            // Removed signature verification info logging\n                \n                return isValid;\n            } catch (sha384Error) {\n                // Debug logs removed\n                // Removed signature verification transition logging\n                \n                // Debug logs removed\n                const isValid = await crypto.subtle.verify(\n                    {\n                        name: 'ECDSA',\n                        hash: 'SHA-256'\n                    },\n                    publicKey,\n                    signatureBuffer,\n                    dataBuffer\n                );\n                \n                // Debug logs removed\n                \n                // Removed signature verification info logging\n                \n                return isValid;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Signature verification failed', { error: error.message });\n            throw new Error('Failed to verify digital signature');\n        }\n    }\n\n    // Enhanced DER/SPKI validation with full ASN.1 parsing\n    static async validateKeyStructure(keyData, expectedAlgorithm = 'ECDH') {\n        try {\n            if (!Array.isArray(keyData) || keyData.length === 0) {\n                throw new Error('Invalid key data format');\n            }\n\n            const keyBytes = new Uint8Array(keyData);\n\n            // Size limits to prevent DoS\n            if (keyBytes.length < 50) {\n                throw new Error('Key data too short - invalid SPKI structure');\n            }\n            if (keyBytes.length > 2000) {\n                throw new Error('Key data too long - possible attack');\n            }\n\n            // Parse ASN.1 DER structure\n            const asn1 = EnhancedSecureCryptoUtils.parseASN1(keyBytes);\n            \n            // Validate SPKI structure\n            if (!asn1 || asn1.tag !== 0x30) {\n                throw new Error('Invalid SPKI structure - missing SEQUENCE tag');\n            }\n\n            // SPKI should have exactly 2 elements: AlgorithmIdentifier and BIT STRING\n            if (asn1.children.length !== 2) {\n                throw new Error(`Invalid SPKI structure - expected 2 elements, got ${asn1.children.length}`);\n            }\n\n            // Validate AlgorithmIdentifier\n            const algIdentifier = asn1.children[0];\n            if (algIdentifier.tag !== 0x30) {\n                throw new Error('Invalid AlgorithmIdentifier - not a SEQUENCE');\n            }\n\n            // Parse algorithm OID\n            const algOid = algIdentifier.children[0];\n            if (algOid.tag !== 0x06) {\n                throw new Error('Invalid algorithm OID - not an OBJECT IDENTIFIER');\n            }\n\n            // Validate algorithm OID based on expected algorithm\n            const oidBytes = algOid.value;\n            const oidString = EnhancedSecureCryptoUtils.oidToString(oidBytes);\n            \n            // Check for expected algorithms\n            const validAlgorithms = {\n                'ECDH': ['1.2.840.10045.2.1'], // id-ecPublicKey\n                'ECDSA': ['1.2.840.10045.2.1'], // id-ecPublicKey (same as ECDH)\n                'RSA': ['1.2.840.113549.1.1.1'], // rsaEncryption\n                'AES-GCM': ['2.16.840.1.101.3.4.1.6', '2.16.840.1.101.3.4.1.46'] // AES-128-GCM, AES-256-GCM\n            };\n\n            const expectedOids = validAlgorithms[expectedAlgorithm];\n            if (!expectedOids) {\n                throw new Error(`Unknown algorithm: ${expectedAlgorithm}`);\n            }\n\n            if (!expectedOids.includes(oidString)) {\n                throw new Error(`Invalid algorithm OID: expected ${expectedOids.join(' or ')}, got ${oidString}`);\n            }\n\n            // For EC algorithms, validate curve parameters\n            if (expectedAlgorithm === 'ECDH' || expectedAlgorithm === 'ECDSA') {\n                if (algIdentifier.children.length < 2) {\n                    throw new Error('Missing curve parameters for EC key');\n                }\n\n                const curveOid = algIdentifier.children[1];\n                if (curveOid.tag !== 0x06) {\n                    throw new Error('Invalid curve OID - not an OBJECT IDENTIFIER');\n                }\n\n                const curveOidString = EnhancedSecureCryptoUtils.oidToString(curveOid.value);\n                \n                // Only allow P-256 and P-384 curves\n                const validCurves = {\n                    '1.2.840.10045.3.1.7': 'P-256', // secp256r1\n                    '1.3.132.0.34': 'P-384' // secp384r1\n                };\n\n                if (!validCurves[curveOidString]) {\n                    throw new Error(`Invalid or unsupported curve OID: ${curveOidString}`);\n                }\n\n            // Removed curve validation info logging\n            }\n\n            // Validate public key BIT STRING\n            const publicKeyBitString = asn1.children[1];\n            if (publicKeyBitString.tag !== 0x03) {\n                throw new Error('Invalid public key - not a BIT STRING');\n            }\n\n            // Check for unused bits (should be 0 for public keys)\n            if (publicKeyBitString.value[0] !== 0x00) {\n                throw new Error(`Invalid BIT STRING - unexpected unused bits: ${publicKeyBitString.value[0]}`);\n            }\n\n            // For EC keys, validate point format\n            if (expectedAlgorithm === 'ECDH' || expectedAlgorithm === 'ECDSA') {\n                const pointData = publicKeyBitString.value.slice(1); // Skip unused bits byte\n                \n                // Check for uncompressed point format (0x04)\n                if (pointData[0] !== 0x04) {\n                    throw new Error(`Invalid EC point format: expected uncompressed (0x04), got 0x${pointData[0].toString(16)}`);\n                }\n\n                // Validate point size based on curve\n                const expectedSizes = {\n                    'P-256': 65, // 1 + 32 + 32\n                    'P-384': 97  // 1 + 48 + 48\n                };\n\n                // We already validated the curve above, so we can determine expected size\n                const curveOidString = EnhancedSecureCryptoUtils.oidToString(algIdentifier.children[1].value);\n                const curveName = curveOidString === '1.2.840.10045.3.1.7' ? 'P-256' : 'P-384';\n                const expectedSize = expectedSizes[curveName];\n\n                if (pointData.length !== expectedSize) {\n                    throw new Error(`Invalid EC point size for ${curveName}: expected ${expectedSize}, got ${pointData.length}`);\n                }\n            }\n\n            // Additional validation: try to import the key\n            try {\n                const algorithm = expectedAlgorithm === 'ECDSA' || expectedAlgorithm === 'ECDH'\n                    ? { name: expectedAlgorithm, namedCurve: 'P-384' }\n                    : { name: expectedAlgorithm };\n\n                const usages = expectedAlgorithm === 'ECDSA' ? ['verify'] : [];\n                \n                await crypto.subtle.importKey('spki', keyBytes.buffer, algorithm, false, usages);\n            } catch (importError) {\n                // Try P-256 as fallback for EC keys\n                if (expectedAlgorithm === 'ECDSA' || expectedAlgorithm === 'ECDH') {\n                    try {\n                        const algorithm = { name: expectedAlgorithm, namedCurve: 'P-256' };\n                        const usages = expectedAlgorithm === 'ECDSA' ? ['verify'] : [];\n                        await crypto.subtle.importKey('spki', keyBytes.buffer, algorithm, false, usages);\n                    } catch (fallbackError) {\n                        throw new Error(`Key import validation failed: ${fallbackError.message}`);\n                    }\n                } else {\n                    throw new Error(`Key import validation failed: ${importError.message}`);\n                }\n            }\n\n            // Removed key structure validation info logging\n\n            return true;\n        } catch (err) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Key structure validation failed', {\n                error: err.message,\n                algorithm: expectedAlgorithm\n            });\n            throw new Error(`Invalid key structure: ${err.message}`);\n        }\n    }\n\n    // ASN.1 DER parser helper\n    static parseASN1(bytes, offset = 0) {\n        if (offset >= bytes.length) {\n            return null;\n        }\n\n        const tag = bytes[offset];\n        let lengthOffset = offset + 1;\n        \n        if (lengthOffset >= bytes.length) {\n            throw new Error('Truncated ASN.1 structure');\n        }\n\n        let length = bytes[lengthOffset];\n        let valueOffset = lengthOffset + 1;\n\n        // Handle long form length\n        if (length & 0x80) {\n            const numLengthBytes = length & 0x7f;\n            if (numLengthBytes > 4) {\n                throw new Error('ASN.1 length too large');\n            }\n            \n            length = 0;\n            for (let i = 0; i < numLengthBytes; i++) {\n                if (valueOffset + i >= bytes.length) {\n                    throw new Error('Truncated ASN.1 length');\n                }\n                length = (length << 8) | bytes[valueOffset + i];\n            }\n            valueOffset += numLengthBytes;\n        }\n\n        if (valueOffset + length > bytes.length) {\n            throw new Error('ASN.1 structure extends beyond data');\n        }\n\n        const value = bytes.slice(valueOffset, valueOffset + length);\n        const node = {\n            tag: tag,\n            length: length,\n            value: value,\n            children: []\n        };\n\n        // Parse children for SEQUENCE and SET\n        if (tag === 0x30 || tag === 0x31) {\n            let childOffset = 0;\n            while (childOffset < value.length) {\n                const child = EnhancedSecureCryptoUtils.parseASN1(value, childOffset);\n                if (!child) break;\n                node.children.push(child);\n                childOffset = childOffset + 1 + child.lengthBytes + child.length;\n            }\n        }\n\n        // Calculate how many bytes were used for length encoding\n        node.lengthBytes = valueOffset - lengthOffset;\n        \n        return node;\n    }\n\n    // OID decoder helper\n    static oidToString(bytes) {\n        if (!bytes || bytes.length === 0) {\n            throw new Error('Empty OID');\n        }\n\n        const parts = [];\n        \n        // First byte encodes first two components\n        const first = Math.floor(bytes[0] / 40);\n        const second = bytes[0] % 40;\n        parts.push(first);\n        parts.push(second);\n\n        // Decode remaining components\n        let value = 0;\n        for (let i = 1; i < bytes.length; i++) {\n            value = (value << 7) | (bytes[i] & 0x7f);\n            if (!(bytes[i] & 0x80)) {\n                parts.push(value);\n                value = 0;\n            }\n        }\n\n        return parts.join('.');\n    }\n\n    // Helper to validate and sanitize OID string\n    static validateOidString(oidString) {\n        // OID format: digits separated by dots\n        const oidRegex = /^[0-9]+(\\.[0-9]+)*$/;\n        if (!oidRegex.test(oidString)) {\n            throw new Error(`Invalid OID format: ${oidString}`);\n        }\n\n        const parts = oidString.split('.').map(Number);\n        \n        // First component must be 0, 1, or 2\n        if (parts[0] > 2) {\n            throw new Error(`Invalid OID first component: ${parts[0]}`);\n        }\n\n        // If first component is 0 or 1, second must be <= 39\n        if ((parts[0] === 0 || parts[0] === 1) && parts[1] > 39) {\n            throw new Error(`Invalid OID second component: ${parts[1]} (must be <= 39 for first component ${parts[0]})`);\n        }\n\n        return true;\n    }\n\n    // Export public key for transmission with signature \n    static async exportPublicKeyWithSignature(publicKey, signingKey, keyType = 'ECDH') {\n        try {\n            // Validate key type\n            if (!['ECDH', 'ECDSA'].includes(keyType)) {\n                throw new Error('Invalid key type');\n            }\n            \n            const exported = await crypto.subtle.exportKey('spki', publicKey);\n            const keyData = Array.from(new Uint8Array(exported));\n            \n            await EnhancedSecureCryptoUtils.validateKeyStructure(keyData, keyType);\n            \n            // Create signed key package\n            const keyPackage = {\n                keyType,\n                keyData,\n                timestamp: Date.now(),\n                version: '4.0'\n            };\n            \n            // Sign the key package\n            const packageString = JSON.stringify(keyPackage);\n            const signature = await EnhancedSecureCryptoUtils.signData(signingKey, packageString);\n            \n            const signedPackage = {\n                ...keyPackage,\n                signature\n            };\n            \n            // Removed public key export with signature info logging\n            \n            return signedPackage;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Public key export failed', {\n                error: error.message,\n                keyType\n            });\n            throw new Error(`Failed to export ${keyType} key: ${error.message}`);\n        }\n    }\n\n    // Import and verify signed public key\n    static async importSignedPublicKey(signedPackage, verifyingKey, expectedKeyType = 'ECDH') {\n        try {\n            // Debug logs removed\n            \n            // Validate package structure\n            if (!signedPackage || typeof signedPackage !== 'object') {\n                throw new Error('Invalid signed package format');\n            }\n            \n            const { keyType, keyData, timestamp, version, signature } = signedPackage;\n            \n            if (!keyType || !keyData || !timestamp || !signature) {\n                throw new Error('Missing required fields in signed package');\n            }\n            \n            if (!EnhancedSecureCryptoUtils.constantTimeCompare(keyType, expectedKeyType)) {\n                throw new Error(`Key type mismatch: expected ${expectedKeyType}, got ${keyType}`);\n            }\n            \n            // Check timestamp (reject keys older than 1 hour)\n            const keyAge = Date.now() - timestamp;\n            if (keyAge > 3600000) {\n                throw new Error('Signed key package is too old');\n            }\n            \n            await EnhancedSecureCryptoUtils.validateKeyStructure(keyData, keyType);\n            \n            // Verify signature\n            const packageCopy = { keyType, keyData, timestamp, version };\n            const packageString = JSON.stringify(packageCopy);\n            // Debug logs removed\n            const isValidSignature = await EnhancedSecureCryptoUtils.verifySignature(verifyingKey, signature, packageString);\n            // Debug logs removed\n            \n            if (!isValidSignature) {\n                throw new Error('Invalid signature on key package - possible MITM attack');\n            }\n            \n            // Import the key with fallback support\n            const keyBytes = new Uint8Array(keyData);\n            \n            // Try P-384 first\n            try {\n                const algorithm = keyType === 'ECDH' ?\n                    { name: 'ECDH', namedCurve: 'P-384' }\n                    : { name: 'ECDSA', namedCurve: 'P-384' };\n                \n                const keyUsages = keyType === 'ECDH' ? [] : ['verify'];\n                \n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    algorithm,\n                    false, // Non-extractable\n                    keyUsages\n                );\n                \n            // Removed public key import info logging\n                \n                return publicKey;\n            } catch (p384Error) {\n                // Fallback to P-256\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'Elliptic curve P-384 import failed, switching curve', { error: p384Error.message });\n                \n                const algorithm = keyType === 'ECDH' ?\n                    { name: 'ECDH', namedCurve: 'P-256' }\n                    : { name: 'ECDSA', namedCurve: 'P-256' };\n                \n                const keyUsages = keyType === 'ECDH' ? [] : ['verify'];\n                \n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    algorithm,\n                    false, // Non-extractable\n                    keyUsages\n                );\n                \n                // Removed public key import info logging\n                \n                return publicKey;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Signed public key import failed', {\n                error: error.message,\n                expectedKeyType\n            });\n            throw new Error(`Failed to import the signed key: ${error.message}`);\n        }\n    }\n\n    // Legacy export for backward compatibility\n    static async exportPublicKey(publicKey) {\n        try {\n            const exported = await crypto.subtle.exportKey('spki', publicKey);\n            const keyData = Array.from(new Uint8Array(exported));\n            \n            await EnhancedSecureCryptoUtils.validateKeyStructure(keyData, 'ECDH');\n            \n            // Removed legacy public key export info logging\n            return keyData;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Legacy public key export failed', { error: error.message });\n            throw new Error('Failed to export the public key');\n        }\n    }\n\n    // Legacy import for backward compatibility with fallback\n    static async importPublicKey(keyData) {\n        try {\n            await EnhancedSecureCryptoUtils.validateKeyStructure(keyData, 'ECDH');\n            \n            const keyBytes = new Uint8Array(keyData);\n            \n            // Try P-384 first\n            try {\n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    {\n                        name: 'ECDH',\n                        namedCurve: 'P-384'\n                    },\n                    false, // Non-extractable\n                    []\n                );\n                \n                // Removed legacy public key import info logging\n                return publicKey;\n            } catch (p384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'P-384 import failed, trying P-256', { error: p384Error.message });\n                \n                // Fallback to P-256\n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    {\n                        name: 'ECDH',\n                        namedCurve: 'P-256'\n                    },\n                    false, // Non-extractable\n                    []\n                );\n                \n                // Removed legacy public key import info logging\n                return publicKey;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Legacy public key import failed', { error: error.message });\n            throw new Error('Failed to import the public key');\n        }\n    }\n\n\n    // Method to check if a key is trusted\n    static isKeyTrusted(keyOrFingerprint) {\n    if (keyOrFingerprint instanceof CryptoKey) {\n        const meta = EnhancedSecureCryptoUtils._keyMetadata.get(keyOrFingerprint);\n        return meta ? meta.trusted === true : false;\n        } else if (keyOrFingerprint && keyOrFingerprint._securityMetadata) {\n            // Check by key metadata\n            return keyOrFingerprint._securityMetadata.trusted === true;\n        }\n\n        return false;\n    }\n\n    static async importPublicKeyFromSignedPackage(signedPackage, verifyingKey = null, options = {}) {\n        try {\n            if (!signedPackage || !signedPackage.keyData || !signedPackage.signature) {\n                throw new Error('Invalid signed key package format');\n            }\n\n            // Validate all required fields are present\n            const requiredFields = ['keyData', 'signature', 'keyType', 'timestamp', 'version'];\n            const missingFields = requiredFields.filter(field => !signedPackage[field]);\n\n            if (missingFields.length > 0) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Missing required fields in signed package', {\n                    missingFields: missingFields,\n                    availableFields: Object.keys(signedPackage)\n                });\n                throw new Error(`Required fields are missing in the signed package: ${missingFields.join(', ')}`);\n            }\n\n            // SECURITY ENHANCEMENT: MANDATORY signature verification for signed packages\n            if (!verifyingKey) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'SECURITY VIOLATION: Signed package received without verifying key', {\n                    keyType: signedPackage.keyType,\n                    keySize: signedPackage.keyData.length,\n                    timestamp: signedPackage.timestamp,\n                    version: signedPackage.version,\n                    securityRisk: 'HIGH - Potential MITM attack vector'\n                });\n\n                // REJECT the signed package if no verifying key provided\n                throw new Error('CRITICAL SECURITY ERROR: Signed key package received without a verification key. ' +\n                                'This may indicate a possible MITM attack attempt. Import rejected for security reasons.');\n            }\n\n            // \u041E\u0411\u041D\u041E\u0412\u041B\u0415\u041D\u041E: \u0418\u0441\u043F\u043E\u043B\u044C\u0437\u0443\u0435\u043C \u0443\u043B\u0443\u0447\u0448\u0435\u043D\u043D\u0443\u044E \u0432\u0430\u043B\u0438\u0434\u0430\u0446\u0438\u044E\n            await EnhancedSecureCryptoUtils.validateKeyStructure(signedPackage.keyData, signedPackage.keyType || 'ECDH');\n\n            // MANDATORY signature verification when verifyingKey is provided\n            const packageCopy = { ...signedPackage };\n            delete packageCopy.signature;\n            const packageString = JSON.stringify(packageCopy);\n            const isValidSignature = await EnhancedSecureCryptoUtils.verifySignature(verifyingKey, signedPackage.signature, packageString);\n\n            if (!isValidSignature) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'SECURITY BREACH: Invalid signature detected - MITM attack prevented', {\n                    keyType: signedPackage.keyType,\n                    keySize: signedPackage.keyData.length,\n                    timestamp: signedPackage.timestamp,\n                    version: signedPackage.version,\n                    attackPrevented: true\n                });\n                throw new Error('CRITICAL SECURITY ERROR: Invalid key signature detected. ' +\n                                'This indicates a possible MITM attack attempt. Key import rejected.');\n            }\n\n            // Additional MITM protection: Check for key reuse and suspicious patterns\n            const keyFingerprint = await EnhancedSecureCryptoUtils.calculateKeyFingerprint(signedPackage.keyData);\n\n            // Log successful verification with security details\n            // Removed signature verification pass details to avoid key-related logging\n\n            // Import the public key with fallback\n            const keyBytes = new Uint8Array(signedPackage.keyData);\n            const keyType = signedPackage.keyType || 'ECDH';\n\n            // Try P-384 first\n            try {\n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    {\n                        name: keyType,\n                        namedCurve: 'P-384'\n                    },\n                    false, // Non-extractable\n                    keyType === 'ECDSA' ? ['verify'] : []\n                );\n\n                // Use WeakMap to store metadata\n                EnhancedSecureCryptoUtils._keyMetadata.set(publicKey, {\n                    trusted: true,\n                    verificationStatus: 'VERIFIED_SECURE',\n                    verificationTimestamp: Date.now()\n                });\n\n                return publicKey;\n            } catch (p384Error) {\n                EnhancedSecureCryptoUtils.secureLog.log('warn', 'P-384 import failed, trying P-256', { error: p384Error.message });\n\n                // Fallback to P-256\n                const publicKey = await crypto.subtle.importKey(\n                    'spki',\n                    keyBytes,\n                    {\n                        name: keyType,\n                        namedCurve: 'P-256'\n                    },\n                    false, // Non-extractable\n                    keyType === 'ECDSA' ? ['verify'] : []\n                );\n\n                // Use WeakMap to store metadata\n                EnhancedSecureCryptoUtils._keyMetadata.set(publicKey, {\n                    trusted: true,\n                    verificationStatus: 'VERIFIED_SECURE',\n                    verificationTimestamp: Date.now()\n                });\n\n                return publicKey;\n            }\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Signed package key import failed', {\n                error: error.message,\n                securityImplications: 'Potential security breach prevented'\n            });\n            throw new Error(`Failed to import the public key from the signed package: ${error.message}`);\n        }\n    }\n\n    // Enhanced key derivation with metadata protection and 64-byte salt\n    static async deriveSharedKeys(privateKey, publicKey, salt) {\n        try {\n            // Removed detailed key derivation logging\n            \n            // Validate input parameters are CryptoKey instances\n            if (!(privateKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Private key is not a CryptoKey', {\n                    privateKeyType: typeof privateKey,\n                    privateKeyAlgorithm: privateKey?.algorithm?.name\n                });\n                throw new Error('The private key is not a valid CryptoKey.');\n            }\n            \n            if (!(publicKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Public key is not a CryptoKey', {\n                    publicKeyType: typeof publicKey,\n                    publicKeyAlgorithm: publicKey?.algorithm?.name\n                });\n                throw new Error('The public key is not a valid CryptoKey.');\n            }\n            \n            // Validate salt size (should be 64 bytes for enhanced security)\n            if (!salt || salt.length !== 64) {\n                throw new Error('Salt must be exactly 64 bytes for enhanced security');\n            }\n            \n            const saltBytes = new Uint8Array(salt);\n            const encoder = new TextEncoder();\n            \n            // Step 1: Derive the raw ECDH shared secret as HKDF input material.\n            //\n            // This used to derive an EXTRACTABLE AES-GCM key and then exportKey()\n            // it, which put the shared secret into an ArrayBuffer that was never\n            // cleared \u2014 it simply fell out of scope and sat in the JS heap until\n            // GC, readable by anything with access to the page (a compromised\n            // extension, a heap snapshot in a crash report). Every session key is\n            // derived from those 32 bytes with public salt and hard-coded info\n            // strings, so recovering them recovers the whole session.\n            //\n            // deriveBits gives the same bytes without the detour through an\n            // extractable CryptoKey, and hands back a buffer we own and can wipe.\n            // WIRE COMPATIBILITY: for ECDH, deriveBits(n) returns the leftmost n\n            // bits of the shared X coordinate, which is exactly what deriveKey to\n            // AES-GCM-256 used \u2014 so 256 here reproduces the previous bytes exactly\n            // and a 5.6.1 client still interoperates with 5.6.0. Do not \"improve\"\n            // this to 384 without a protocol version bump.\n            let rawSharedSecret;\n            let sharedSecretBits = null;\n            try {\n                sharedSecretBits = await crypto.subtle.deriveBits(\n                    {\n                        name: 'ECDH',\n                        public: publicKey\n                    },\n                    privateKey,\n                    256\n                );\n\n                rawSharedSecret = await crypto.subtle.importKey(\n                    'raw',\n                    sharedSecretBits,\n                    {\n                        name: 'HKDF',\n                        hash: 'SHA-256'\n                    },\n                    false,\n                    // deriveBits is required for the fingerprint material below;\n                    // without it that call fails with an InvalidAccessError.\n                    ['deriveKey', 'deriveBits']\n                );\n            } catch (error) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'ECDH derivation failed', {\n                    error: error.message\n                });\n                throw error;\n            } finally {\n                // importKey copies the material, so the source buffer is dead\n                // weight from here on \u2014 overwrite it rather than leaving the\n                // shared secret lying in the heap.\n                if (sharedSecretBits) {\n                    EnhancedSecureCryptoUtils.zeroizeBuffer(sharedSecretBits);\n                    sharedSecretBits = null;\n                }\n            }\n\n            // Step 2: Use HKDF to derive specific keys directly\n            // Removed detailed key derivation logging\n\n            // Step 3: Derive specific keys using HKDF with unique info parameters\n            // Each key uses unique info parameter for proper separation\n            \n            // Derive message encryption key (messageKey)\n            let messageKey;\n            messageKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('message-encryption-v4')\n                },\n                rawSharedSecret,\n                {\n                    name: 'AES-GCM',\n                    length: 256\n                },\n                false, // Non-extractable for enhanced security\n                ['encrypt', 'decrypt']\n            );\n\n            // Derive MAC key for message authentication\n            let macKey;\n            macKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('message-authentication-v4')\n                },\n                rawSharedSecret,\n                {\n                    name: 'HMAC',\n                    hash: 'SHA-256'\n                },\n                false, // Non-extractable\n                ['sign', 'verify']\n            );\n\n            // Derive Perfect Forward Secrecy key (pfsKey)\n            let pfsKey;\n            pfsKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('perfect-forward-secrecy-v4')\n                },\n                rawSharedSecret,\n                {\n                    name: 'AES-GCM',\n                    length: 256\n                },\n                false, // Non-extractable\n                ['encrypt', 'decrypt']\n            );\n\n            // Derive separate metadata encryption key\n            let metadataKey;\n            metadataKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('metadata-protection-v4')\n                },\n                rawSharedSecret,\n                {\n                    name: 'AES-GCM',\n                    length: 256\n                },\n                false, // Non-extractable\n                ['encrypt', 'decrypt']\n            );\n\n            // Root key for the Double Ratchet, derived here rather than handing the\n            // raw ECDH secret to the caller: the secret is wiped before this\n            // function returns (see the finally above), and only this 32-byte\n            // branch of the KDF tree ever leaves. Its own info string keeps it\n            // domain-separated from the message, MAC and metadata keys, so\n            // learning a session key tells an attacker nothing about the ratchet.\n            const ratchetRootBits = await crypto.subtle.deriveBits(\n                {\n                    name: 'HKDF',\n                    hash: 'SHA-256',\n                    salt: saltBytes,\n                    info: encoder.encode('double-ratchet-root-v1')\n                },\n                rawSharedSecret,\n                256\n            );\n            const ratchetRoot = new Uint8Array(ratchetRootBits);\n\n            // Fingerprint material. Previously this derived a second EXTRACTABLE\n            // AES key purely so it could be exported \u2014 leaving another copy of\n            // key-derived material in the heap with nothing wiping it. HKDF can\n            // hand back raw bits directly; same salt, same info, same 256 bits, so\n            // the fingerprint (and therefore the SAS built on it) is unchanged.\n            let fingerprintBits = null;\n            let fingerprint;\n            try {\n                fingerprintBits = await crypto.subtle.deriveBits(\n                    {\n                        name: 'HKDF',\n                        hash: 'SHA-256',\n                        salt: saltBytes,\n                        info: encoder.encode('fingerprint-generation-v4')\n                    },\n                    rawSharedSecret,\n                    256\n                );\n                // A Uint8Array view, not Array.from(): the array copy was a third\n                // copy of key-derived bytes in the heap that nothing cleared.\n                fingerprint = await EnhancedSecureCryptoUtils.generateKeyFingerprint(\n                    new Uint8Array(fingerprintBits)\n                );\n            } finally {\n                if (fingerprintBits) {\n                    EnhancedSecureCryptoUtils.zeroizeBuffer(fingerprintBits);\n                    fingerprintBits = null;\n                }\n            }\n\n            // Validate that all derived keys are CryptoKey instances\n            if (!(messageKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Derived message key is not a CryptoKey', {\n                    messageKeyType: typeof messageKey,\n                    messageKeyAlgorithm: messageKey?.algorithm?.name\n                });\n                throw new Error('The derived message key is not a valid CryptoKey.');\n            }\n            \n            if (!(macKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Derived MAC key is not a CryptoKey', {\n                    macKeyType: typeof macKey,\n                    macKeyAlgorithm: macKey?.algorithm?.name\n                });\n                throw new Error('The derived MAC key is not a valid CryptoKey.');\n            }\n            \n            if (!(pfsKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Derived PFS key is not a CryptoKey', {\n                    pfsKeyType: typeof pfsKey,\n                    pfsKeyAlgorithm: pfsKey?.algorithm?.name\n                });\n                throw new Error('The derived PFS key is not a valid CryptoKey.');\n            }\n            \n            if (!(metadataKey instanceof CryptoKey)) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'Derived metadata key is not a CryptoKey', {\n                    metadataKeyType: typeof metadataKey,\n                    metadataKeyAlgorithm: metadataKey?.algorithm?.name\n                });\n                throw new Error('The derived metadata key is not a valid CryptoKey.');\n            }\n\n            // Removed detailed key derivation success logging\n\n            return {\n                messageKey,      // Renamed from encryptionKey for clarity\n                macKey,\n                pfsKey,         // Added Perfect Forward Secrecy key\n                metadataKey,\n                // Raw bytes on purpose: a ratchet has to chain KDFs itself, which\n                // WebCrypto cannot do behind a non-extractable handle. The caller\n                // must hand this to DoubleRatchet.init() and zeroize it.\n                ratchetRoot,\n                fingerprint,\n                timestamp: Date.now(),\n                version: '4.0'\n            };\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Enhanced key derivation failed', { \n                error: error.message,\n                errorStack: error.stack,\n                privateKeyType: typeof privateKey,\n                publicKeyType: typeof publicKey,\n                saltLength: salt?.length,\n                privateKeyAlgorithm: privateKey?.algorithm?.name,\n                publicKeyAlgorithm: publicKey?.algorithm?.name\n            });\n            throw new Error(`Failed to create shared encryption keys: ${error.message}`);\n        }\n    }\n\n    static async generateKeyFingerprint(keyData) {\n        const keyBuffer = new Uint8Array(keyData);\n        const hashBuffer = await crypto.subtle.digest('SHA-384', keyBuffer);\n        const hashArray = Array.from(new Uint8Array(hashBuffer));\n        return hashArray.slice(0, 12).map(b => b.toString(16).padStart(2, '0')).join(':');\n    }\n\n    // Generate mutual authentication challenge\n    static generateMutualAuthChallenge() {\n        const challenge = crypto.getRandomValues(new Uint8Array(48)); // Increased to 48 bytes\n        const timestamp = Date.now();\n        const nonce = crypto.getRandomValues(new Uint8Array(16));\n        \n        return {\n            challenge: Array.from(challenge),\n            timestamp,\n            nonce: Array.from(nonce),\n            version: '4.0'\n        };\n    }\n\n    // Create cryptographic proof for mutual authentication\n    static async createAuthProof(challenge, privateKey, publicKey) {\n        try {\n            if (!challenge || !challenge.challenge || !challenge.timestamp || !challenge.nonce) {\n                throw new Error('Invalid challenge structure');\n            }\n            \n            // Check challenge age (max 2 minutes)\n            const challengeAge = Date.now() - challenge.timestamp;\n            if (challengeAge > 120000) {\n                throw new Error('Challenge expired');\n            }\n            \n            // Create proof data\n            const proofData = {\n                challenge: challenge.challenge,\n                timestamp: challenge.timestamp,\n                nonce: challenge.nonce,\n                responseTimestamp: Date.now(),\n                publicKeyHash: await EnhancedSecureCryptoUtils.hashPublicKey(publicKey)\n            };\n            \n            // Sign the proof\n            const proofString = JSON.stringify(proofData);\n            const signature = await EnhancedSecureCryptoUtils.signData(privateKey, proofString);\n            \n            const proof = {\n                ...proofData,\n                signature,\n                version: '4.0'\n            };\n            \n            EnhancedSecureCryptoUtils.secureLog.log('info', 'Authentication proof created', {\n                challengeAge: Math.round(challengeAge / 1000) + 's'\n            });\n            \n            return proof;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Authentication proof creation failed', { error: error.message });\n            throw new Error(`Failed to create cryptographic proof: ${error.message}`);\n        }\n    }\n\n    // Verify mutual authentication proof\n    static async verifyAuthProof(proof, challenge, publicKey) {\n        try {\n            await new Promise(resolve => setTimeout(resolve, Math.floor(Math.random() * 20) + 5));\n            // Assert the public key is valid and has the correct usage\n            EnhancedSecureCryptoUtils.assertCryptoKey(publicKey, 'ECDSA', ['verify']);\n\n            if (!proof || !challenge || !publicKey) {\n                throw new Error('Missing required parameters for proof verification');\n            }\n\n            // Validate proof structure\n            const requiredFields = ['challenge', 'timestamp', 'nonce', 'responseTimestamp', 'publicKeyHash', 'signature'];\n            for (const field of requiredFields) {\n                if (!proof[field]) {\n                    throw new Error(`Missing required field: ${field}`);\n                }\n            }\n\n            // Verify challenge matches\n            if (!EnhancedSecureCryptoUtils.constantTimeCompareArrays(proof.challenge, challenge.challenge) ||\n                proof.timestamp !== challenge.timestamp ||\n                !EnhancedSecureCryptoUtils.constantTimeCompareArrays(proof.nonce, challenge.nonce)) {\n                throw new Error('Challenge mismatch - possible replay attack');\n            }\n\n            // Check response time (max 30 minutes for better UX)\n            const responseAge = Date.now() - proof.responseTimestamp;\n            if (responseAge > 1800000) {\n                throw new Error('Proof response expired');\n            }\n\n            // Verify public key hash\n            const expectedHash = await EnhancedSecureCryptoUtils.hashPublicKey(publicKey);\n            if (!EnhancedSecureCryptoUtils.constantTimeCompare(proof.publicKeyHash, expectedHash)) {\n                throw new Error('Public key hash mismatch');\n            }\n\n            // Verify signature\n            const proofCopy = { ...proof };\n            delete proofCopy.signature;\n            const proofString = JSON.stringify(proofCopy);\n            const isValidSignature = await EnhancedSecureCryptoUtils.verifySignature(publicKey, proof.signature, proofString);\n\n            if (!isValidSignature) {\n                throw new Error('Invalid proof signature');\n            }\n\n            EnhancedSecureCryptoUtils.secureLog.log('info', 'Authentication proof verified successfully', {\n                responseAge: Math.round(responseAge / 1000) + 's'\n            });\n\n            return true;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Authentication proof verification failed', { error: error.message });\n            throw new Error(`Failed to verify cryptographic proof: ${error.message}`);\n        }\n    }\n\n    // Hash public key for verification\n    static async hashPublicKey(publicKey) {\n        try {\n            const exported = await crypto.subtle.exportKey('spki', publicKey);\n            const hash = await crypto.subtle.digest('SHA-384', exported);\n            const hashArray = Array.from(new Uint8Array(hash));\n            return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Public key hashing failed', { error: error.message });\n            throw new Error('Failed to create hash of the public key');\n        }\n    }\n\n    // Legacy authentication challenge for backward compatibility\n    static generateAuthChallenge() {\n        const challenge = crypto.getRandomValues(new Uint8Array(32));\n        return Array.from(challenge);\n    }\n\n    // Generate verification code for out-of-band authentication\n    static generateVerificationCode() {\n        const chars = '0123456789ABCDEF';\n        const charCount = chars.length;\n        let result = '';\n        \n        // Use rejection sampling to avoid bias\n        for (let i = 0; i < 6; i++) {\n            let randomByte;\n            do {\n                randomByte = crypto.getRandomValues(new Uint8Array(1))[0];\n            } while (randomByte >= 256 - (256 % charCount)); // Reject biased values\n            \n            result += chars[randomByte % charCount];\n        }\n        \n        return result.match(/.{1,2}/g).join('-');\n    }\n\n    // Enhanced message encryption with metadata protection and sequence numbers\n    static async encryptMessage(message, encryptionKey, macKey, metadataKey, messageId, sequenceNumber = 0) {\n        try {\n            if (!message || typeof message !== 'string') {\n                throw new Error('Invalid message format');\n            }\n\n            EnhancedSecureCryptoUtils.assertCryptoKey(encryptionKey, 'AES-GCM', ['encrypt']);\n            EnhancedSecureCryptoUtils.assertCryptoKey(macKey, 'HMAC', ['sign']);\n            EnhancedSecureCryptoUtils.assertCryptoKey(metadataKey, 'AES-GCM', ['encrypt']);\n\n            const encoder = new TextEncoder();\n            const messageData = encoder.encode(message);\n            const messageIv = crypto.getRandomValues(new Uint8Array(12));\n            const metadataIv = crypto.getRandomValues(new Uint8Array(12));\n            const timestamp = Date.now();\n\n            const paddingSize = 16 - (messageData.length % 16);\n            const paddedMessage = new Uint8Array(messageData.length + paddingSize);\n            paddedMessage.set(messageData);\n            const padding = crypto.getRandomValues(new Uint8Array(paddingSize));\n            paddedMessage.set(padding, messageData.length);\n\n            const encryptedMessage = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: messageIv },\n                encryptionKey,\n                paddedMessage\n            );\n\n            const metadata = {\n                id: messageId,\n                timestamp: timestamp,\n                sequenceNumber: sequenceNumber,\n                originalLength: messageData.length,\n                version: '4.0'\n            };\n\n            const metadataStr = JSON.stringify(EnhancedSecureCryptoUtils.sortObjectKeys(metadata));\n            const encryptedMetadata = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: metadataIv },\n                metadataKey,\n                encoder.encode(metadataStr)\n            );\n\n            const payload = {\n                messageIv: Array.from(messageIv),\n                messageData: Array.from(new Uint8Array(encryptedMessage)),\n                metadataIv: Array.from(metadataIv),\n                metadataData: Array.from(new Uint8Array(encryptedMetadata)),\n                version: '4.0'\n            };\n\n            const sortedPayload = EnhancedSecureCryptoUtils.sortObjectKeys(payload);\n            const payloadStr = JSON.stringify(sortedPayload);\n\n            const mac = await crypto.subtle.sign(\n                'HMAC',\n                macKey,\n                encoder.encode(payloadStr)\n            );\n\n            payload.mac = Array.from(new Uint8Array(mac));\n\n            // Logging removed to avoid noisy console output\n\n            return payload;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Message encryption failed', {\n                error: error.message,\n                messageId\n            });\n            throw new Error(`Failed to encrypt the message: ${error.message}`);\n        }\n    }\n\n    // Enhanced message decryption with metadata protection and sequence validation\n    static async decryptMessage(encryptedPayload, encryptionKey, macKey, metadataKey, expectedSequenceNumber = null) {\n        try {\n            EnhancedSecureCryptoUtils.assertCryptoKey(encryptionKey, 'AES-GCM', ['decrypt']);\n            EnhancedSecureCryptoUtils.assertCryptoKey(macKey, 'HMAC', ['verify']);\n            EnhancedSecureCryptoUtils.assertCryptoKey(metadataKey, 'AES-GCM', ['decrypt']);\n\n            const requiredFields = ['messageIv', 'messageData', 'metadataIv', 'metadataData', 'mac', 'version'];\n            for (const field of requiredFields) {\n                if (!encryptedPayload[field]) {\n                    throw new Error(`Missing required field: ${field}`);\n                }\n            }\n\n            const payloadCopy = { ...encryptedPayload };\n            delete payloadCopy.mac;\n            const sortedPayloadCopy = EnhancedSecureCryptoUtils.sortObjectKeys(payloadCopy);\n            const payloadStr = JSON.stringify(sortedPayloadCopy);\n\n            const macValid = await crypto.subtle.verify(\n                'HMAC',\n                macKey,\n                new Uint8Array(encryptedPayload.mac),\n                new TextEncoder().encode(payloadStr)\n            );\n\n            if (!macValid) {\n                EnhancedSecureCryptoUtils.secureLog.log('error', 'MAC verification failed', {\n                    payloadFields: Object.keys(encryptedPayload),\n                    macLength: encryptedPayload.mac?.length\n                });\n                throw new Error('Message authentication failed - possible tampering');\n            }\n\n            const metadataIv = new Uint8Array(encryptedPayload.metadataIv);\n            const metadataData = new Uint8Array(encryptedPayload.metadataData);\n\n            const decryptedMetadataBuffer = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv: metadataIv },\n                metadataKey,\n                metadataData\n            );\n\n            const metadataStr = new TextDecoder().decode(decryptedMetadataBuffer);\n            const metadata = JSON.parse(metadataStr);\n\n            if (!metadata.id || !metadata.timestamp || metadata.sequenceNumber === undefined || !metadata.originalLength) {\n                throw new Error('Invalid metadata structure');\n            }\n\n            const messageAge = Date.now() - metadata.timestamp;\n            if (messageAge > 1800000) { // 30 minutes for better UX\n                throw new Error('Message expired (older than 30 minutes)');\n            }\n\n            if (expectedSequenceNumber !== null) {\n                // A sequence number below what we expect means the frame is a\n                // replay (or badly out of order on a channel that is ordered and\n                // reliable). Downgrading that to a warning and decrypting anyway\n                // defeats the purpose of tracking sequence numbers at all.\n                if (metadata.sequenceNumber < expectedSequenceNumber) {\n                    EnhancedSecureCryptoUtils.secureLog.log('error', 'Rejected message with stale sequence number - possible replay', {\n                        expected: expectedSequenceNumber,\n                        received: metadata.sequenceNumber,\n                        messageId: metadata.id\n                    });\n                    throw new Error(`Stale sequence number: expected at least ${expectedSequenceNumber}, got ${metadata.sequenceNumber}`);\n                } else if (metadata.sequenceNumber > expectedSequenceNumber + 10) {\n                    throw new Error(`Sequence number gap too large: expected around ${expectedSequenceNumber}, got ${metadata.sequenceNumber}`);\n                }\n            }\n\n            const messageIv = new Uint8Array(encryptedPayload.messageIv);\n            const messageData = new Uint8Array(encryptedPayload.messageData);\n\n            const decryptedMessageBuffer = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv: messageIv },\n                encryptionKey,\n                messageData\n            );\n\n            const paddedMessage = new Uint8Array(decryptedMessageBuffer);\n            const originalMessage = paddedMessage.slice(0, metadata.originalLength);\n\n            const decoder = new TextDecoder();\n            const message = decoder.decode(originalMessage);\n\n            EnhancedSecureCryptoUtils.secureLog.log('info', 'Message decrypted successfully', {\n                messageId: metadata.id,\n                sequenceNumber: metadata.sequenceNumber,\n                messageAge: Math.round(messageAge / 1000) + 's'\n            });\n\n            return {\n                message: message,\n                messageId: metadata.id,\n                timestamp: metadata.timestamp,\n                sequenceNumber: metadata.sequenceNumber\n            };\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Message decryption failed', { error: error.message });\n            throw new Error(`Failed to decrypt the message: ${error.message}`);\n        }\n    }\n\n    static _getMessageSanitizer() {\n        if (EnhancedSecureCryptoUtils._messageSanitizer) {\n            return EnhancedSecureCryptoUtils._messageSanitizer;\n        }\n\n        if (typeof window === 'undefined' || !window?.document) {\n            throw new Error('DOMPurify requires a browser-like window for message sanitization');\n        }\n\n        EnhancedSecureCryptoUtils._messageSanitizer = createDOMPurify(window);\n        return EnhancedSecureCryptoUtils._messageSanitizer;\n    }\n\n    // Centralized chat-message sanitization. Messages are rendered as plain text,\n    // so the safest compatible output is text-only content with no markup surface.\n    static sanitizeMessage(message) {\n        if (typeof message !== 'string') {\n            throw new Error('Message must be a string');\n        }\n\n        const sanitized = EnhancedSecureCryptoUtils._getMessageSanitizer().sanitize(message, {\n            ALLOWED_TAGS: [],\n            ALLOWED_ATTR: [],\n            ALLOW_UNKNOWN_PROTOCOLS: false,\n            FORBID_TAGS: ['script', 'style', 'svg', 'math', 'template'],\n            FORBID_ATTR: ['style'],\n            KEEP_CONTENT: true,\n            RETURN_TRUSTED_TYPE: false,\n            USE_PROFILES: {\n                html: false,\n                svg: false,\n                svgFilters: false,\n                mathMl: false\n            }\n        });\n\n        return String(sanitized).trim().substring(0, 2000);\n    }\n\n    // Generate cryptographically secure salt (64 bytes for enhanced security)\n    static generateSalt() {\n        return Array.from(crypto.getRandomValues(new Uint8Array(64)));\n    }\n\n    // Calculate key fingerprint for MITM protection\n    static async calculateKeyFingerprint(keyData) {\n        try {\n            const encoder = new TextEncoder();\n            const keyBytes = new Uint8Array(keyData);\n            \n            // Create a hash of the key data for fingerprinting\n            const hashBuffer = await crypto.subtle.digest('SHA-256', keyBytes);\n            const hashArray = Array.from(new Uint8Array(hashBuffer));\n            \n            // Convert to hexadecimal string\n            const fingerprint = hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n            \n            // Removed key fingerprint logging\n            \n            return fingerprint;\n        } catch (error) {\n            EnhancedSecureCryptoUtils.secureLog.log('error', 'Key fingerprint calculation failed', { error: error.message });\n            throw new Error('Failed to compute the key fingerprint');\n        }\n    }\n\n    static constantTimeCompare(a, b) {\n        const strA = typeof a === 'string' ? a : JSON.stringify(a);\n        const strB = typeof b === 'string' ? b : JSON.stringify(b);\n        \n        if (strA.length !== strB.length) {\n            let dummy = 0;\n            for (let i = 0; i < Math.max(strA.length, strB.length); i++) {\n                dummy |= (strA.charCodeAt(i % strA.length) || 0) ^ (strB.charCodeAt(i % strB.length) || 0);\n            }\n            return false;\n        }\n        \n        let result = 0;\n        for (let i = 0; i < strA.length; i++) {\n            result |= strA.charCodeAt(i) ^ strB.charCodeAt(i);\n        }\n        \n        return result === 0;\n    }\n\n    static constantTimeCompareArrays(arr1, arr2) {\n        if (!Array.isArray(arr1) || !Array.isArray(arr2)) {\n            return false;\n        }\n        \n        if (arr1.length !== arr2.length) {\n            let dummy = 0;\n            const maxLen = Math.max(arr1.length, arr2.length);\n            for (let i = 0; i < maxLen; i++) {\n                dummy |= (arr1[i % arr1.length] || 0) ^ (arr2[i % arr2.length] || 0);\n            }\n            return false;\n        }\n        \n        let result = 0;\n        for (let i = 0; i < arr1.length; i++) {\n            result |= arr1[i] ^ arr2[i];\n        }\n        \n        return result === 0;\n    }\n    \n    /**\n     * CRITICAL SECURITY: Encrypt data with AAD (Additional Authenticated Data)\n     * This method provides authenticated encryption with additional data binding\n     */\n    static async encryptDataWithAAD(data, key, aad) {\n        try {\n            const dataString = typeof data === 'string' ? data : JSON.stringify(data);\n            const encoder = new TextEncoder();\n            const dataBuffer = encoder.encode(dataString);\n            const aadBuffer = encoder.encode(aad);\n\n            // Generate random IV\n            const iv = crypto.getRandomValues(new Uint8Array(12));\n\n            // Encrypt with AAD\n            const encrypted = await crypto.subtle.encrypt(\n                { \n                    name: 'AES-GCM', \n                    iv: iv,\n                    additionalData: aadBuffer\n                },\n                key,\n                dataBuffer\n            );\n\n            // Package encrypted data\n            const encryptedPackage = {\n                version: '1.0',\n                iv: Array.from(iv),\n                data: Array.from(new Uint8Array(encrypted)),\n                aad: aad,\n                timestamp: Date.now()\n            };\n\n            const packageString = JSON.stringify(encryptedPackage);\n            const packageBuffer = encoder.encode(packageString);\n            \n            return EnhancedSecureCryptoUtils.arrayBufferToBase64(packageBuffer);\n        } catch (error) {\n            throw new Error(`AAD encryption failed: ${error.message}`);\n        }\n    }\n\n    /**\n     * CRITICAL SECURITY: Decrypt data with AAD validation\n     * This method provides authenticated decryption with additional data validation\n     */\n    static async decryptDataWithAAD(encryptedData, key, expectedAad) {\n        try {\n            const packageBuffer = EnhancedSecureCryptoUtils.base64ToArrayBuffer(encryptedData);\n            const packageString = new TextDecoder().decode(packageBuffer);\n            const encryptedPackage = JSON.parse(packageString);\n\n            if (!encryptedPackage.version || !encryptedPackage.iv || !encryptedPackage.data || !encryptedPackage.aad) {\n                throw new Error('Invalid encrypted data format');\n            }\n\n            // Validate AAD matches expected\n            if (encryptedPackage.aad !== expectedAad) {\n                throw new Error('AAD mismatch - possible tampering or replay attack');\n            }\n\n            const iv = new Uint8Array(encryptedPackage.iv);\n            const encrypted = new Uint8Array(encryptedPackage.data);\n            const aadBuffer = new TextEncoder().encode(encryptedPackage.aad);\n\n            // Decrypt with AAD validation\n            const decrypted = await crypto.subtle.decrypt(\n                { \n                    name: 'AES-GCM', \n                    iv: iv,\n                    additionalData: aadBuffer\n                },\n                key,\n                encrypted\n            );\n\n            const decryptedString = new TextDecoder().decode(decrypted);\n\n            try {\n                return JSON.parse(decryptedString);\n            } catch {\n                return decryptedString;\n            }\n        } catch (error) {\n            throw new Error(`AAD decryption failed: ${error.message}`);\n        }\n    }\n\n    // Initialize secure logging system after class definition\n    static {\n        if (EnhancedSecureCryptoUtils.secureLog && typeof EnhancedSecureCryptoUtils.secureLog.init === 'function') {\n            EnhancedSecureCryptoUtils.secureLog.init();\n        }\n    }\n}\n\nexport { EnhancedSecureCryptoUtils };\n", "// Generated by scripts/build-i18n.js from locales/*.json \u2014 do not edit by hand.\n// Add or change strings in locales/<code>.json, then run `npm run build:i18n`.\n\nexport const DEFAULT_LOCALE = \"en\";\nexport const SUPPORTED_LOCALES = [\"en\",\"de\",\"fr\",\"es\",\"uk\",\"ru\",\"zh\",\"ko\",\"hi\",\"ar\",\"he\",\"fa\",\"ur\"];\nexport const LOCALE_META = {\n    \"en\": {\n        \"htmlLang\": \"en\",\n        \"nativeName\": \"English\",\n        \"abbr\": \"EN\",\n        \"dir\": \"ltr\",\n        \"path\": \"/\"\n    },\n    \"de\": {\n        \"htmlLang\": \"de\",\n        \"nativeName\": \"Deutsch\",\n        \"abbr\": \"DE\",\n        \"dir\": \"ltr\",\n        \"path\": \"/de/\"\n    },\n    \"fr\": {\n        \"htmlLang\": \"fr\",\n        \"nativeName\": \"Fran\u00E7ais\",\n        \"abbr\": \"FR\",\n        \"dir\": \"ltr\",\n        \"path\": \"/fr/\"\n    },\n    \"es\": {\n        \"htmlLang\": \"es\",\n        \"nativeName\": \"Espa\u00F1ol\",\n        \"abbr\": \"ES\",\n        \"dir\": \"ltr\",\n        \"path\": \"/es/\"\n    },\n    \"uk\": {\n        \"htmlLang\": \"uk\",\n        \"nativeName\": \"\u0423\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u0430\",\n        \"abbr\": \"UK\",\n        \"dir\": \"ltr\",\n        \"path\": \"/uk/\"\n    },\n    \"ru\": {\n        \"htmlLang\": \"ru\",\n        \"nativeName\": \"\u0420\u0443\u0441\u0441\u043A\u0438\u0439\",\n        \"abbr\": \"RU\",\n        \"dir\": \"ltr\",\n        \"path\": \"/ru/\"\n    },\n    \"zh\": {\n        \"htmlLang\": \"zh-Hans\",\n        \"nativeName\": \"\u7B80\u4F53\u4E2D\u6587\",\n        \"abbr\": \"ZH\",\n        \"dir\": \"ltr\",\n        \"path\": \"/zh/\"\n    },\n    \"ko\": {\n        \"htmlLang\": \"ko\",\n        \"nativeName\": \"\uD55C\uAD6D\uC5B4\",\n        \"abbr\": \"KO\",\n        \"dir\": \"ltr\",\n        \"path\": \"/ko/\"\n    },\n    \"hi\": {\n        \"htmlLang\": \"hi\",\n        \"nativeName\": \"\u0939\u093F\u0928\u094D\u0926\u0940\",\n        \"abbr\": \"HI\",\n        \"dir\": \"ltr\",\n        \"path\": \"/hi/\"\n    },\n    \"ar\": {\n        \"htmlLang\": \"ar\",\n        \"nativeName\": \"\u0627\u0644\u0639\u0631\u0628\u064A\u0629\",\n        \"abbr\": \"AR\",\n        \"dir\": \"rtl\",\n        \"path\": \"/ar/\"\n    },\n    \"he\": {\n        \"htmlLang\": \"he\",\n        \"nativeName\": \"\u05E2\u05D1\u05E8\u05D9\u05EA\",\n        \"abbr\": \"HE\",\n        \"dir\": \"rtl\",\n        \"path\": \"/he/\"\n    },\n    \"fa\": {\n        \"htmlLang\": \"fa\",\n        \"nativeName\": \"\u0641\u0627\u0631\u0633\u06CC\",\n        \"abbr\": \"FA\",\n        \"dir\": \"rtl\",\n        \"path\": \"/fa/\"\n    },\n    \"ur\": {\n        \"htmlLang\": \"ur\",\n        \"nativeName\": \"\u0627\u0631\u062F\u0648\",\n        \"abbr\": \"UR\",\n        \"dir\": \"rtl\",\n        \"path\": \"/ur/\"\n    }\n};\n\n// Strings a page may need for a locale it did not load. See CROSS_LOCALE_KEYS in\n// scripts/build-i18n.js for why this list is short on purpose.\nexport const CROSS_LOCALE_STRINGS = {\n    \"en\": {\n        \"language.suggest.text\": \"This page is also available in English.\",\n        \"language.suggest.cta\": \"Read in English\",\n        \"language.suggest.dismiss\": \"Dismiss\"\n    },\n    \"de\": {\n        \"language.suggest.text\": \"Diese Seite gibt es auch auf Deutsch.\",\n        \"language.suggest.cta\": \"Auf Deutsch lesen\",\n        \"language.suggest.dismiss\": \"Schlie\u00DFen\"\n    },\n    \"fr\": {\n        \"language.suggest.text\": \"Cette page est aussi disponible en fran\u00E7ais.\",\n        \"language.suggest.cta\": \"Lire en fran\u00E7ais\",\n        \"language.suggest.dismiss\": \"Fermer\"\n    },\n    \"es\": {\n        \"language.suggest.text\": \"Esta p\u00E1gina tambi\u00E9n est\u00E1 disponible en espa\u00F1ol.\",\n        \"language.suggest.cta\": \"Leer en espa\u00F1ol\",\n        \"language.suggest.dismiss\": \"Cerrar\"\n    },\n    \"uk\": {\n        \"language.suggest.text\": \"\u0426\u044F \u0441\u0442\u043E\u0440\u0456\u043D\u043A\u0430 \u0442\u0430\u043A\u043E\u0436 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E.\",\n        \"language.suggest.cta\": \"\u0427\u0438\u0442\u0430\u0442\u0438 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E\",\n        \"language.suggest.dismiss\": \"\u0417\u0430\u043A\u0440\u0438\u0442\u0438\"\n    },\n    \"ru\": {\n        \"language.suggest.text\": \"\u042D\u0442\u0430 \u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u0442\u0430\u043A\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043D\u0430 \u0440\u0443\u0441\u0441\u043A\u043E\u043C.\",\n        \"language.suggest.cta\": \"\u0427\u0438\u0442\u0430\u0442\u044C \u043F\u043E-\u0440\u0443\u0441\u0441\u043A\u0438\",\n        \"language.suggest.dismiss\": \"\u0417\u0430\u043A\u0440\u044B\u0442\u044C\"\n    },\n    \"zh\": {\n        \"language.suggest.text\": \"\u672C\u9875\u9762\u4E5F\u6709\u7B80\u4F53\u4E2D\u6587\u7248\u672C\u3002\",\n        \"language.suggest.cta\": \"\u9605\u8BFB\u7B80\u4F53\u4E2D\u6587\",\n        \"language.suggest.dismiss\": \"\u5173\u95ED\"\n    },\n    \"ko\": {\n        \"language.suggest.text\": \"\uC774 \uD398\uC774\uC9C0\uB294 \uD55C\uAD6D\uC5B4\uB85C\uB3C4 \uBCFC \uC218 \uC788\uC2B5\uB2C8\uB2E4.\",\n        \"language.suggest.cta\": \"\uD55C\uAD6D\uC5B4\uB85C \uBCF4\uAE30\",\n        \"language.suggest.dismiss\": \"\uB2EB\uAE30\"\n    },\n    \"hi\": {\n        \"language.suggest.text\": \"\u092F\u0939 \u092A\u0943\u0937\u094D\u0920 \u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092D\u0940 \u0909\u092A\u0932\u092C\u094D\u0927 \u0939\u0948\u0964\",\n        \"language.suggest.cta\": \"\u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092A\u0922\u093C\u0947\u0902\",\n        \"language.suggest.dismiss\": \"\u092C\u0902\u0926 \u0915\u0930\u0947\u0902\"\n    },\n    \"ar\": {\n        \"language.suggest.text\": \"\u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062D\u0629 \u0645\u062A\u0648\u0641\u0631\u0629 \u0623\u064A\u0636\u064B\u0627 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629.\",\n        \"language.suggest.cta\": \"\u0627\u0642\u0631\u0623 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629\",\n        \"language.suggest.dismiss\": \"\u0625\u063A\u0644\u0627\u0642\"\n    },\n    \"he\": {\n        \"language.suggest.text\": \"\u05D4\u05D3\u05E3 \u05D4\u05D6\u05D4 \u05D6\u05DE\u05D9\u05DF \u05D2\u05DD \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA.\",\n        \"language.suggest.cta\": \"\u05DC\u05E7\u05E8\u05D9\u05D0\u05D4 \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA\",\n        \"language.suggest.dismiss\": \"\u05E1\u05D2\u05D9\u05E8\u05D4\"\n    },\n    \"fa\": {\n        \"language.suggest.text\": \"\u0627\u06CC\u0646 \u0635\u0641\u062D\u0647 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC \u0647\u0645 \u062F\u0631 \u062F\u0633\u062A\u0631\u0633 \u0627\u0633\u062A.\",\n        \"language.suggest.cta\": \"\u062E\u0648\u0627\u0646\u062F\u0646 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC\",\n        \"language.suggest.dismiss\": \"\u0628\u0633\u062A\u0646\"\n    },\n    \"ur\": {\n        \"language.suggest.text\": \"\u06CC\u06C1 \u0635\u0641\u062D\u06C1 \u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u0628\u06BE\u06CC \u062F\u0633\u062A\u06CC\u0627\u0628 \u06C1\u06D2\u06D4\",\n        \"language.suggest.cta\": \"\u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u067E\u0691\u06BE\u06CC\u06BA\",\n        \"language.suggest.dismiss\": \"\u0628\u0646\u062F \u06A9\u0631\u06CC\u06BA\"\n    }\n};\n", "// Generated by scripts/build-i18n.js from locales/*.json \u2014 do not edit by hand.\n// Add or change strings in locales/<code>.json, then run `npm run build:i18n`.\n\nexport const DICTIONARY = {\n    \"language.label\": \"Language\",\n    \"language.suggest.text\": \"This page is also available in English.\",\n    \"language.suggest.cta\": \"Read in English\",\n    \"language.suggest.dismiss\": \"Dismiss\",\n    \"theme.label\": \"Theme\",\n    \"theme.system\": \"System\",\n    \"theme.light\": \"Light\",\n    \"theme.dark\": \"Dark\",\n    \"donate.eyebrow\": \"Donate in crypto\",\n    \"donate.title\": \"Keep SecureBit independent\",\n    \"donate.description\": \"Every donation goes to development and audits.\",\n    \"donate.copy\": \"Copy\",\n    \"donate.copied\": \"Copied\",\n    \"donate.net.usdt\": \"USDT \u00B7 Tron (TRC-20)\",\n    \"donate.net.btc\": \"Bitcoin network\",\n    \"donate.net.eth\": \"Ethereum mainnet\",\n    \"donate.warn.usdt\": \"Send only USDT on Tron (TRC-20).\",\n    \"donate.warn.btc\": \"Send only BTC on the Bitcoin network.\",\n    \"donate.warn.eth\": \"Send only ETH on Ethereum mainnet.\",\n    \"donate.qrAlt\": \"QR code of the {coin} donation address\",\n    \"community.title\": \"Join the future of privacy\",\n    \"community.description\": \"SecureBit grows thanks to its community. Your ideas and feedback shape the future of secure communication - built in the open, with complete ASN.1 validation end-to-end.\",\n    \"community.github\": \"GitHub Repository\",\n    \"community.feedback\": \"Feedback\",\n    \"unique.eyebrow\": \"What sets us apart\",\n    \"unique.heading\": \"Why SecureBit is unique\",\n    \"unique.s1.titleTop\": \"Layered\",\n    \"unique.s1.titleBottom\": \"encryption core\",\n    \"unique.s1.collapsed\": \"Encryption core\",\n    \"unique.s1.desc\": \"ECDH P-384 key exchange, AES-256-GCM payloads, ECDSA signatures and full ASN.1 validation - composed into one hardened pipeline.\",\n    \"unique.s1.tags\": [\n        \"ECDH P-384\",\n        \"AES-256-GCM\",\n        \"ECDSA\",\n        \"ASN.1\"\n    ],\n    \"unique.s2.titleTop\": \"Pure P2P\",\n    \"unique.s2.titleBottom\": \"WebRTC\",\n    \"unique.s2.collapsed\": \"Pure P2P WebRTC\",\n    \"unique.s2.desc\": \"Messages travel directly between devices over WebRTC. No relay holds your data - the server only helps two peers find each other.\",\n    \"unique.s2.tags\": [\n        \"DTLS 1.3\",\n        \"No relay\"\n    ],\n    \"unique.s3.titleTop\": \"Perfect\",\n    \"unique.s3.titleBottom\": \"forward secrecy\",\n    \"unique.s3.collapsed\": \"Forward secrecy\",\n    \"unique.s3.desc\": \"Session keys rotate continuously and are discarded after use, so a single compromised key can never unlock past conversations.\",\n    \"unique.s3.tags\": [\n        \"Ephemeral keys\",\n        \"Auto-rotate\"\n    ],\n    \"unique.s4.titleTop\": \"Traffic\",\n    \"unique.s4.titleBottom\": \"obfuscation\",\n    \"unique.s4.collapsed\": \"Traffic obfuscation\",\n    \"unique.s4.desc\": \"Packet sizes and timing are padded and randomized, hiding metadata patterns from anyone watching the wire.\",\n    \"unique.s4.tags\": [\n        \"Packet padding\",\n        \"Timing jitter\"\n    ],\n    \"unique.s5.titleTop\": \"Zero data\",\n    \"unique.s5.titleBottom\": \"collection\",\n    \"unique.s5.collapsed\": \"Zero data collection\",\n    \"unique.s5.desc\": \"No accounts, no logs, no message storage. There is nothing on a server to leak, subpoena, or sell.\",\n    \"unique.s5.tags\": [\n        \"No accounts\",\n        \"No logs\"\n    ],\n    \"partners.eyebrow\": \"Partners & ecosystem\",\n    \"partners.heading\": \"Trusted by our partners\",\n    \"partners.aegis.desc\": \"Capital partner securing confidential financial communications across its portfolio.\",\n    \"partners.aegis.role\": \"Strategic backer\",\n    \"partners.furilabs.desc\": \"Privacy-first Linux phones that ship SecureBit as a default secure channel.\",\n    \"partners.furilabs.role\": \"Technology partner\",\n    \"partners.inviteTitle\": \"Become a partner\",\n    \"partners.inviteDesc\": \"Building privacy hardware or infrastructure? Let's integrate SecureBit.\",\n    \"partners.inviteCta\": \"Start a conversation\",\n    \"roadmap.eyebrow\": \"Development Roadmap\",\n    \"roadmap.heading\": \"The evolution of SecureBit\",\n    \"roadmap.subheading\": \"From the first prototype to a quantum-resistant, decentralized network - with complete ASN.1 validation at every layer.\",\n    \"roadmap.progress\": \"{shipped} of {total} milestones shipped\",\n    \"roadmap.upcoming\": \"{upcoming} on the way\",\n    \"roadmap.keyFeatures\": \"Key features\",\n    \"hero.headlineTop\": \"A direct line\",\n    \"hero.headlineBottom\": \"only you two can read.\",\n    \"hero.subheading\": \"Keys are generated on your device and exchanged peer-to-peer. No accounts, no servers storing your messages.\",\n    \"hero.diagramAlt\": \"A direct encrypted line to one peer, with two more peers joining the mesh\",\n    \"intro.createTitle\": \"Create a new channel\",\n    \"intro.createDesc\": \"Your device generates the keys and a one-time invitation. Nothing touches a server.\",\n    \"intro.createCta\": \"Generate keys & invitation\",\n    \"intro.joinTitle\": \"Join a channel\",\n    \"intro.joinDesc\": \"Scan your peer's QR with your camera, or paste their invitation code.\",\n    \"intro.scanTitle\": \"Scan QR with camera\",\n    \"intro.scanSubtitle\": \"Fastest - point at your peer's screen\",\n    \"intro.orPasteCode\": \"Or paste the code\",\n    \"intro.pastePlaceholder\": \"Paste invitation code here\u2026\",\n    \"intro.connect\": \"Connect\",\n    \"intro.connecting\": \"Processing\u2026\",\n    \"roadmap.r1.title\": \"Start of Development\",\n    \"roadmap.r1.sub\": \"Idea, prototype, and infrastructure setup\",\n    \"roadmap.r1.date\": \"Early 2025\",\n    \"roadmap.r1.features\": [\n        \"Concept and requirements formation\",\n        \"Stack selection: WebRTC, P2P, cryptography\",\n        \"First messaging prototypes\",\n        \"Repository creation and CI\",\n        \"Basic encryption architecture\",\n        \"UX/UI design\"\n    ],\n    \"roadmap.r2.title\": \"Alpha Release\",\n    \"roadmap.r2.sub\": \"First public alpha: basic chat and key exchange\",\n    \"roadmap.r2.date\": \"Spring 2025\",\n    \"roadmap.r2.features\": [\n        \"Basic P2P messaging via WebRTC\",\n        \"Simple E2E encryption (demo scheme)\",\n        \"Stable signaling and reconnection\",\n        \"Minimal UX for testing\",\n        \"Feedback collection from early testers\"\n    ],\n    \"roadmap.r3.title\": \"Security Hardened\",\n    \"roadmap.r3.sub\": \"Security strengthening and stable branch release\",\n    \"roadmap.r3.date\": \"Summer 2025\",\n    \"roadmap.r3.features\": [\n        \"ECDH/ECDSA implementation in production\",\n        \"Perfect Forward Secrecy and key rotation\",\n        \"Improved authentication checks\",\n        \"File encryption and large payload transfers\",\n        \"Audit of basic cryptoprocesses\"\n    ],\n    \"roadmap.r4.title\": \"Scaling & Stability\",\n    \"roadmap.r4.sub\": \"Network scaling and stability improvements\",\n    \"roadmap.r4.date\": \"Fall 2025\",\n    \"roadmap.r4.features\": [\n        \"Optimization of P2P connections and NAT traversal\",\n        \"Reconnection mechanisms and message queues\",\n        \"Reduced battery consumption on mobile\",\n        \"Multi-device synchronization support\",\n        \"Monitoring and logging tools for developers\"\n    ],\n    \"roadmap.r5.title\": \"Privacy-first Release\",\n    \"roadmap.r5.sub\": \"Focus on privacy: minimizing metadata\",\n    \"roadmap.r5.date\": \"Winter 2025\",\n    \"roadmap.r5.features\": [\n        \"Metadata protection and fingerprint reduction\",\n        \"Experiments with onion routing and DHT\",\n        \"Options for anonymous connections\",\n        \"Preparation for open code audit\",\n        \"Improved user verification processes\"\n    ],\n    \"roadmap.r6.title\": \"Enhanced Security Edition\",\n    \"roadmap.r6.sub\": \"18-layer military-grade cryptography with complete ASN.1 validation\",\n    \"roadmap.r6.date\": \"Late 2025\",\n    \"roadmap.r6.features\": [\n        \"ECDH + DTLS + SAS triple-layer security\",\n        \"ECDH P-384 + AES-GCM 256-bit encryption\",\n        \"DTLS fingerprint verification\",\n        \"SAS (Short Authentication String) verification\",\n        \"Perfect Forward Secrecy with key rotation\",\n        \"Enhanced MITM attack prevention\",\n        \"Complete ASN.1 DER validation\",\n        \"OID and EC point verification\",\n        \"SPKI structure validation\",\n        \"P2P WebRTC architecture\",\n        \"Metadata protection\",\n        \"100% open source code\"\n    ],\n    \"roadmap.r7.title\": \"Desktop Edition\",\n    \"roadmap.r7.sub\": \"Native desktop apps for Windows, macOS, and Linux\",\n    \"roadmap.r7.date\": \"Early 2026\",\n    \"roadmap.r7.features\": [\n        \"Windows desktop app (Tauri v2)\",\n        \"macOS desktop app (Tauri v2)\",\n        \"Linux AppImage support (Tauri v2)\",\n        \"Real-time notifications\",\n        \"Automatic reconnection\",\n        \"Cross-device synchronization\",\n        \"Improved UX/UI\",\n        \"Support for files up to 100MB\"\n    ],\n    \"roadmap.r8.title\": \"Secure Voice & Calls\",\n    \"roadmap.r8.sub\": \"Encrypted voice messages, audio calls, and video calls\",\n    \"roadmap.r8.date\": \"Early 2026\",\n    \"roadmap.r8.features\": [\n        \"End-to-end encrypted voice messages\",\n        \"1:1 encrypted audio calls (WebRTC)\",\n        \"1:1 encrypted video calls (WebRTC)\",\n        \"Perfect Forward Secrecy for live media\",\n        \"SRTP/DTLS-protected media streams\",\n        \"In-call SAS verification\",\n        \"Call notifications and auto-reconnection\",\n        \"Low-latency P2P media\"\n    ],\n    \"roadmap.r9.title\": \"Group Communications\",\n    \"roadmap.r9.sub\": \"Group chats with preserved privacy\",\n    \"roadmap.r9.date\": \"Now\",\n    \"roadmap.r9.features\": [\n        \"P2P group chats up to 8 participants\",\n        \"Mesh delivery with signed relay fallback\",\n        \"One group safety code, compared by everyone\",\n        \"Commit-then-reveal ceremony against code grinding\",\n        \"Per-group identity keys, ephemeral by design\",\n        \"Signed membership with epoch ordering\",\n        \"Signed messages, so a split transcript is provable\",\n        \"No server, no shared group key, no history\"\n    ],\n    \"roadmap.r10.title\": \"Mobile Edition\",\n    \"roadmap.r10.sub\": \"Native mobile apps for iOS and Android\",\n    \"roadmap.r10.date\": \"Q2 2027\",\n    \"roadmap.r10.features\": [\n        \"iOS native app (Swift/SwiftUI)\",\n        \"Android native app (Kotlin/Jetpack Compose)\",\n        \"PWA support for mobile browsers\",\n        \"Real-time push notifications\",\n        \"Battery optimization\",\n        \"Mobile-optimized UX/UI\",\n        \"Offline message queuing\",\n        \"Biometric authentication\"\n    ],\n    \"roadmap.r11.title\": \"Quantum-Resistant Edition\",\n    \"roadmap.r11.sub\": \"Protection against quantum computers\",\n    \"roadmap.r11.date\": \"Q4 2027\",\n    \"roadmap.r11.features\": [\n        \"Post-quantum cryptography CRYSTALS-Kyber\",\n        \"SPHINCS+ digital signatures\",\n        \"Hybrid scheme: classic + PQ\",\n        \"Quantum-safe key exchange\",\n        \"Updated hashing algorithms\",\n        \"Migration of existing sessions\",\n        \"Compatibility with v5.x\",\n        \"Quantum-resistant protocols\"\n    ],\n    \"roadmap.r12.title\": \"Decentralized Network\",\n    \"roadmap.r12.sub\": \"Fully decentralized network\",\n    \"roadmap.r12.date\": \"2028\",\n    \"roadmap.r12.features\": [\n        \"Node mesh network\",\n        \"DHT for peer discovery\",\n        \"Built-in onion routing\",\n        \"Tokenomics and node incentives\",\n        \"Governance via DAO\",\n        \"Interoperability with other networks\",\n        \"Cross-platform compatibility\",\n        \"Self-healing network\"\n    ],\n    \"roadmap.r13.title\": \"AI Privacy Assistant\",\n    \"roadmap.r13.sub\": \"AI for privacy and security\",\n    \"roadmap.r13.date\": \"2028+\",\n    \"roadmap.r13.features\": [\n        \"Local AI threat analysis\",\n        \"Automatic MITM detection\",\n        \"Adaptive cryptography\",\n        \"Personalized security recommendations\",\n        \"Zero-knowledge machine learning\",\n        \"Private AI assistant\",\n        \"Predictive security\",\n        \"Autonomous attack protection\"\n    ],\n    \"handshake.step1\": \"Generating ECDH P-384 key pair\",\n    \"handshake.step2\": \"Deriving verification code\",\n    \"handshake.step3\": \"Pinning Perfect Forward Secrecy\",\n    \"handshake.securingTitle\": \"Securing your channel\",\n    \"handshake.answerTitle\": \"Building your answer\",\n    \"handshake.securingDesc\": \"Forging keys strong enough to resist tampering.\",\n    \"handshake.shareTitle\": \"Share your invitation\",\n    \"handshake.sendAnswerTitle\": \"Send back your answer\",\n    \"handshake.shareDesc\": \"Show the QR or send the code to your peer. It is one-time and expires shortly.\",\n    \"handshake.sendAnswerDesc\": \"Give this answer to the channel creator so they can finish the handshake.\",\n    \"handshake.establish\": \"Establish connection\",\n    \"handshake.thenReceive\": \"Then receive the answer your peer sends back\",\n    \"handshake.pasteAnswerPlaceholder\": \"Paste peer's answer code\u2026\",\n    \"handshake.answerSentNote\": \"Waiting for the creator to connect. The chat opens automatically.\",\n    \"handshake.qrHint\": \"Keep this open until your peer captures the code.\",\n    \"handshake.qrHintFrames\": \"The handshake is split across {frames} frames - keep this open until your peer captures all of them.\",\n    \"verify.placeholder\": \"Type code here\",\n    \"verify.confirm\": \"Confirm code\",\n    \"verify.confirmed\": \"Confirmed\",\n    \"verify.pending\": \"Pending\",\n    \"verify.waiting\": \"Waiting for code\u2026\",\n    \"sasv.title\": \"Verify your peer\",\n    \"sasv.titleDone\": \"Peer verified\",\n    \"sasv.desc\": \"Read the code aloud over a call or in person. Continue only if your peer sees the same digits.\",\n    \"sasv.descDone\": \"You both confirmed the same code. The connection is authenticated.\",\n    \"sasv.enter\": \"Enter the code\",\n    \"sasv.match\": \"Match\",\n    \"sasv.noMatch\": \"Doesn't match\",\n    \"sasv.you\": \"You\",\n    \"sasv.peer\": \"Peer\",\n    \"sasv.waitingPeer\": \"Waiting for peer\u2026\",\n    \"sasv.codesDiffer\": \"Codes don't match\",\n    \"sasv.opening\": \"Opening secure chat\",\n    \"pwa.bannerTitle\": \"Install SecureBit.chat\",\n    \"pwa.bannerDesc\": \"Get the native app experience with enhanced security\",\n    \"pwa.install\": \"Install\",\n    \"pwa.dismiss\": \"Dismiss\",\n    \"pwa.close\": \"Close\",\n    \"pwa.iosTitle\": \"Install on iOS\",\n    \"pwa.iosStep1\": \"Tap the Share button\",\n    \"pwa.iosStep1Hint\": \"Usually at the bottom of Safari\",\n    \"pwa.iosStep2\": \"Find \\\"Add to Home Screen\\\"\",\n    \"pwa.iosStep2Hint\": \"Scroll down in the share menu\",\n    \"pwa.iosStep3\": \"Tap \\\"Add\\\"\",\n    \"pwa.iosStep3Hint\": \"Confirm to install SecureBit.chat\",\n    \"pwa.genericTitle\": \"Install SecureBit\",\n    \"pwa.genericDesc\": \"Your browser handles installs its own way. Pick the steps that match yours.\",\n    \"pwa.androidChromeHint\": \"Tap \u22EE in the top corner, then \u201CInstall app\u201D\",\n    \"pwa.androidOtherHint\": \"Tap the menu, then \u201CAdd to Home screen\u201D\",\n    \"pwa.gotIt\": \"Got it\",\n    \"pwa.installedTitle\": \"App Installed!\",\n    \"pwa.installedIos\": \"iOS App installed! Open from home screen.\",\n    \"pwa.installedGeneric\": \"SecureBit.chat is now on your device\",\n    \"pwa.anytimeTitle\": \"Install Anytime\",\n    \"pwa.anytimeDesc\": \"You can still install SecureBit.chat from your browser's menu for the best experience.\",\n    \"pwa.ok\": \"OK\",\n    \"step.open\": \"Step 1 \u00B7 open a channel\",\n    \"step.exchange\": \"Step 2 \u00B7 exchange\",\n    \"step.verification\": \"Step 3 \u00B7 verification\",\n    \"action.create\": \"Create\",\n    \"action.join\": \"Join\",\n    \"action.back\": \"Back\",\n    \"action.copy\": \"Copy\",\n    \"action.copied\": \"Copied\",\n    \"action.scan\": \"Scan\",\n    \"action.downloadDesktop\": \"Download desktop app\",\n    \"action.advancedSettings\": \"Advanced settings\",\n    \"cred.reveal\": \"Click to reveal - keep this code private\",\n    \"cred.orCopy\": \"Or copy the code\",\n    \"qr.title\": \"Scan QR code\",\n    \"qr.subtitle\": \"Point your camera at their QR\",\n    \"qr.scanning\": \"Scanning\u2026\",\n    \"qr.hint\": \"Hold steady until all parts are captured. Camera access is local - nothing is uploaded.\",\n    \"mesh.you\": \"you\",\n    \"mesh.peer\": \"peer \u00B7 session 1\",\n    \"mesh.joined2\": \"mara joined \u00B7 +2\",\n    \"mesh.joined3\": \"tobi joined \u00B7 +3\",\n    \"ice.title\": \"Network settings\",\n    \"ice.subtitle\": \"Configured locally - never shared with your peer\",\n    \"ice.intro\": \"SecureBit uses public STUN servers by default to negotiate the peer-to-peer link. Point it at your own STUN/TURN if you self-host.\",\n    \"ice.publicTitle\": \"Public servers (default)\",\n    \"ice.publicDesc\": \"Zero-config. Good for most users.\",\n    \"ice.customTitle\": \"My own STUN/TURN servers\",\n    \"ice.customDesc\": \"Up to {max} servers.\",\n    \"ice.turnNote\": \"A TURN relay sees both peers' IP and traffic timing - but never message contents, which stay end-to-end encrypted. Prefer \",\n    \"ice.turnNoteTls\": \" (TLS).\",\n    \"ice.test\": \"Test servers\",\n    \"ice.testing\": \"Testing\u2026\",\n    \"ice.relayTitle\": \"Relay-only mode\",\n    \"ice.relayBadge\": \"MAX PRIVACY\",\n    \"ice.relayDesc\": \"Routes all traffic through TURN so your IP is never exposed to the peer. Requires a TURN server.\",\n    \"ice.relayWarning\": \"Relay-only is enabled but no TURN server is configured. The connection will not be able to start.\",\n    \"ice.persist\": \"Save on this device\",\n    \"ice.persistDesc\": \"Stored encrypted in this browser. Leave off to use only for this session.\",\n    \"ice.forget\": \"Forget saved\",\n    \"ice.cancel\": \"Cancel\",\n    \"ice.apply\": \"Apply\",\n    \"ice.errUnavailable\": \"WebRTC is not available in this browser\",\n    \"ice.errInvalid\": \"Invalid server configuration\",\n    \"update.title\": \"Update available\",\n    \"update.desc\": \"A newer version of SecureBit has been detected.\",\n    \"update.currentVersion\": \"Current version\",\n    \"update.newVersion\": \"New version\",\n    \"update.now\": \"Update now\",\n    \"update.later\": \"Later\",\n    \"update.unknown\": \"N/A\",\n    \"update.stepSaving\": \"Saving data...\",\n    \"update.stepSwCaches\": \"Clearing Service Worker caches...\",\n    \"update.stepSwUnregister\": \"Unregistering Service Workers...\",\n    \"update.stepBrowserCache\": \"Clearing browser cache...\",\n    \"update.stepVersion\": \"Updating version...\",\n    \"update.stepReload\": \"Reloading application...\",\n    \"update.error\": \"Update error. Please refresh the page manually (Ctrl+F5 or Cmd+Shift+R)\",\n    \"update.confirmSkip\": \"New version available. Update is recommended for security and stability. Continue without update?\",\n    \"offline.backOnline\": \"Back online\",\n    \"offline.mode\": \"Offline mode\",\n    \"offline.dismiss\": \"Dismiss\",\n    \"offline.lostTitle\": \"Connection lost\",\n    \"offline.lostDesc\": \"SecureBit is now in offline mode. Some features are limited, but your data stays safe.\",\n    \"offline.point1\": \"Your session and keys are preserved\",\n    \"offline.point2\": \"No data is stored on servers\",\n    \"offline.point3\": \"Messages & files sync when you reconnect\",\n    \"offline.continue\": \"Continue offline\",\n    \"offline.restoredTitle\": \"When you reconnect\",\n    \"offline.restoredDesc\": \"A dropped connection costs you nothing. SecureBit queues everything locally and resumes the encrypted session the instant you're back online.\",\n    \"offline.r1Title\": \"Your messages get delivered\",\n    \"offline.r1Desc\": \"Everything you wrote while offline is sent to your contact automatically.\",\n    \"offline.r2Title\": \"Files finish transferring\",\n    \"offline.r2Desc\": \"Uploads resume from where they stopped - no need to resend.\",\n    \"offline.r3Title\": \"Their messages & files arrive\",\n    \"offline.r3Desc\": \"Whatever your contact sent during the outage is delivered to you in order.\",\n    \"offline.r4Title\": \"Nothing is lost\",\n    \"offline.r4Desc\": \"After reconnect there's no gap - the conversation continues exactly where it paused.\",\n    \"offline.gotIt\": \"Got it\",\n    \"qr.showTitle\": \"Show QR code\",\n    \"qr.showSubtitle\": \"Full-screen \u00B7 let your peer scan\",\n    \"qr.showSubtitleFrames\": \"Full-screen \u00B7 let your peer scan all {frames} frames\",\n    \"notify.enabledBody\": \"Notifications enabled! You will receive alerts for new messages.\",\n    \"notify.workingBody\": \"Notifications are working! You will receive alerts for new messages.\",\n    \"pw.label\": \"Password input\",\n    \"pw.placeholder\": \"Enter password...\",\n    \"pw.decrypt\": \"Decrypt\",\n    \"pw.cancel\": \"Cancel\",\n    \"file.title\": \"File transfers\",\n    \"file.drop\": \"Drag & drop files here\",\n    \"file.dropHint\": \"Encrypted end-to-end before transfer \u00B7 up to 100 MB\",\n    \"file.browse\": \"Browse device\",\n    \"file.incoming\": \"Incoming file request\",\n    \"file.accept\": \"Accept\",\n    \"file.reject\": \"Reject\",\n    \"file.download\": \"Download\",\n    \"file.notReady\": \"Connection not ready\",\n    \"file.tooLarge\": \"File too large\",\n    \"file.typeNotAllowed\": \"File type not allowed\",\n    \"file.maxConcurrent\": \"Maximum concurrent transfers\",\n    \"file.gone\": \"This file is no longer available for download.\",\n    \"call.incoming\": \"Incoming call\",\n    \"call.incomingVideo\": \"Incoming video call\",\n    \"call.encrypted\": \"Encrypted call\",\n    \"call.encryptedShort\": \"Encrypted\",\n    \"call.peer\": \"Secure peer\",\n    \"call.connecting\": \"Connecting\u2026\",\n    \"call.ringing\": \"Ringing\u2026\",\n    \"call.accept\": \"Accept\",\n    \"call.decline\": \"Decline\",\n    \"call.end\": \"End call\",\n    \"call.camera\": \"Camera\",\n    \"call.cameraOff\": \"Camera off\",\n    \"call.peerCameraOff\": \"Peer's camera is off\",\n    \"call.flipCamera\": \"Flip camera\",\n    \"call.addVideo\": \"Add video\",\n    \"call.video\": \"Video\",\n    \"call.muted\": \"Muted\",\n    \"call.expand\": \"Expand\",\n    \"call.minimize\": \"Minimize\",\n    \"call.quality\": \"Connection quality\",\n    \"call.qualityExcellent\": \"Excellent\",\n    \"call.videoPrefix\": \"Video \u00B7 \",\n    \"call.voicePrefix\": \"Voice \u00B7 \",\n    \"group.new\": \"New group\",\n    \"group.create\": \"Create group\",\n    \"group.join\": \"Join group\",\n    \"group.name\": \"Group name\",\n    \"group.nameTooLong\": \"The group name is too long.\",\n    \"group.capacity\": \"Up to {max} people, peer to peer. Everyone will compare one safety code before the group opens.\",\n    \"group.invite\": \"Invite\",\n    \"group.inviteMore\": \"Invite more members\",\n    \"group.invitePeople\": \"Invite {count} people\",\n    \"group.invitation\": \"Group invitation\",\n    \"group.addMembers\": \"Add members\",\n    \"group.roomFor\": \"Room for {remaining} more. Everyone will compare a new group code once they join.\",\n    \"group.membersCount\": \"{count} members\",\n    \"group.member\": \"Member\",\n    \"group.members\": \"Members\",\n    \"group.remove\": \"Remove {name}\",\n    \"group.message\": \"Message {name}\",\n    \"group.leave\": \"Leave\",\n    \"group.leaveThis\": \"Leave this group\",\n    \"group.cancel\": \"Cancel group\",\n    \"group.close\": \"Close\",\n    \"group.cancelBtn\": \"Cancel\",\n    \"group.decline\": \"Decline\",\n    \"group.working\": \"Working\u2026\",\n    \"group.sasTitle\": \"Group safety code\",\n    \"group.sasEveryone\": \"Everyone sees this code\",\n    \"group.sasCompare\": \"Compare the group code with every member to open this group.\",\n    \"group.sasReadAloud\": \"Read these digits aloud to \",\n    \"group.sasWarning\": \"If even one member reads a different code, someone is sitting between you. Cancel the group - do not confirm.\",\n    \"group.confirmFirst\": \"Confirm the group code first\",\n    \"group.codeSuffix\": \" \u00B7 code {code}\",\n    \"group.exchangingNonces\": \"Exchanging nonces\u2026\",\n    \"group.waitingCommit\": \"Waiting for every member to commit\u2026\",\n    \"group.waitingJoin\": \"Waiting for the other members to join\u2026\",\n    \"group.emptyChat\": \"Nothing here yet. Messages are signed by their sender and travel over each member's own encrypted link.\",\n    \"group.noVerified\": \"No verified chats yet. Open a 1:1 chat and compare its safety code first - a group is built out of connections you have already checked.\",\n    \"group.noMoreToAdd\": \"No other verified chats to add. Open a 1:1 chat and compare its safety code first.\",\n    \"group.directLink\": \"Direct peer-to-peer link\",\n    \"group.noDirectLink\": \"No direct link yet - messages are relayed by another member while one is being built\",\n    \"group.relayNote\": \"Some members have no direct link to you yet. Their messages travel through another member, who can see that you are talking but cannot read past the signature or change what you said. The group keeps trying to connect them directly.\",\n    \"group.relayOnlyOff\": \"Relay-only mode is off, so each member connects to you directly and learns your IP address - including members somebody else invited. Turn it on in network settings if that matters here.\",\n    \"group.memberOffline\": \"{name} is offline and will not receive messages. They are still a member - removing them re-keys the group.\",\n    \"group.joinNote\": \"Other members will learn your presence in this group. There is no message history to catch up on - a group starts empty.\",\n    \"group.inviteSentNote\": \"The group keeps working until they accept. There is no history for them to catch up on - they will only see what is sent from now on.\",\n    \"group.errNotCreated\": \"Group not created\",\n    \"group.errNobodyAccepted\": \"Nobody accepted the invitation in time.\",\n    \"group.errNothingSent\": \"Nothing was sent and nothing was verified. Close this and try again once everyone is connected.\",\n    \"group.errNotFormed\": \"This group could not be formed.\",\n    \"group.errFull\": \"This group is full.\",\n    \"group.errInviteFailed\": \"The invitation could not be sent - that chat is not connected.\",\n    \"group.errNoMemberList\": \"The group owner never sent the member list.\",\n    \"group.errUnsignedList\": \"The member list was not signed by the group owner. Do not retry - tell them.\",\n    \"group.errNotOwner\": \"Someone other than the group owner tried to change the members.\",\n    \"hdr.tagline\": \"End-to-end encrypted\",\n    \"hdr.netSettings\": \"Advanced network settings\",\n    \"hdr.netSettingsTitle\": \"Advanced network settings (STUN/TURN)\",\n    \"hdr.disconnect\": \"Disconnect\",\n    \"status.connected\": \"Connected\",\n    \"status.connecting\": \"Connecting...\",\n    \"status.notConnected\": \"Not connected\",\n    \"status.reconnecting\": \"Reconnecting...\",\n    \"status.retrying\": \"Retrying...\",\n    \"status.verifying\": \"Verifying...\",\n    \"status.peerDisconnected\": \"Peer disconnected\",\n    \"sec.replayProtection\": \"Replay Protection\",\n    \"sec.messageIntegrity\": \"Message Integrity (HMAC)\",\n    \"sec.forwardSecrecy\": \"Perfect Forward Secrecy\",\n    \"sec.metadataProtection\": \"Metadata Protection\",\n    \"sec.trafficObfuscation\": \"Traffic Obfuscation\",\n    \"sec.realTests\": \"Real Cryptographic Tests\",\n    \"sec.simulatedData\": \"Simulated Data\",\n    \"sec.testPassed\": \"Test passed\",\n    \"sec.testFailed\": \"Test failed or unavailable\",\n    \"sec.verificationDone\": \"Real cryptographic verification completed\",\n    \"sec.verificationInProgress\": \"Security verification in progress...\",\n    \"sec.verificationWait\": \"Security verification in progress...\\nPlease wait for real-time cryptographic verification to complete.\",\n    \"sec.verificationUnavailable\": \"Security verification not available\",\n    \"chat.placeholder\": \"Type an encrypted message\u2026\",\n    \"chat.send\": \"Send message\",\n    \"chat.sendFiles\": \"Send files\",\n    \"chat.hideFiles\": \"Hide files\",\n    \"chat.recordVoice\": \"Record voice message\",\n    \"chat.sendVoice\": \"Send voice message\",\n    \"chat.discard\": \"Discard\",\n    \"chat.codeBlock\": \"Send as a code block (expands the input)\",\n    \"chat.codeHint\": \"Code snippet \u00B7 formatting preserved \u00B7 \u2318\u21B5 to send\",\n    \"chat.viewOnce\": \"View once\",\n    \"chat.viewOnceTitle\": \"View once - vanishes after the peer reads it\",\n    \"chat.viewOncePrefix\": \"View once \u00B7 \",\n    \"chat.viewOnceTap\": \"View once \u00B7 tap to reveal\",\n    \"chat.viewedOnce\": \"Viewed once\",\n    \"chat.disappearing\": \"Disappearing message - deletes on both sides\",\n    \"chat.disappearAfter\": \"Disappear after\",\n    \"chat.visibleFor\": \"Visible for\",\n    \"chat.timerPrefix\": \"Timer \u00B7 \",\n    \"chat.expired\": \"This message has expired\",\n    \"chat.deleteForEveryone\": \"Delete for everyone\",\n    \"chat.sending\": \"Sending\",\n    \"chat.delivered\": \"Delivered\",\n    \"chat.notSent\": \"Not sent\",\n    \"chat.notSentReason\": \"Not sent - the secure channel is not ready. Reconnect to continue.\",\n    \"chat.encrypted\": \"Encrypted\",\n    \"chat.decrypted\": \"Decrypted\",\n    \"chat.encryptedOnDevice\": \"Encrypted on your device\",\n    \"chat.uploading\": \"Uploading\",\n    \"chat.downloading\": \"Downloading\",\n    \"chat.transferring\": \"Transferring\u2026\",\n    \"chat.copied\": \"Copied!\",\n    \"chat.collapse\": \"Collapse\",\n    \"chat.closeMenu\": \"Close menu\",\n    \"chat.newChat\": \"New chat\",\n    \"chat.newGroup\": \"New group\",\n    \"chat.createGroup\": \"Create a group\",\n    \"chat.groupChats\": \"Group chats\",\n    \"chat.secureChat\": \"Secure chat\",\n    \"chat.nameThis\": \"Name this chat\",\n    \"chat.rename\": \"Rename chat (local only)\",\n    \"chat.renameHint\": \"Double-click to rename\",\n    \"chat.localLabel\": \"Local label \u00B7 stored only on this device\",\n    \"chat.setStatus\": \"Set your status\",\n    \"chat.yourStatusPrefix\": \"Your status - \",\n    \"chat.meshHint\": \"Up to 8 peers \u00B7 P2P mesh\",\n    \"chat.offline\": \"Offline\",\n    \"chat.noNetwork\": \"No network \u00B7 reconnecting\",\n    \"chat.startVoiceCall\": \"Start encrypted voice call\",\n    \"chat.startVideoCall\": \"Start encrypted video call\",\n    \"chat.verifyForCalls\": \"Verify the session to enable calls\",\n    \"chat.e2eeNote\": \"Every message is end-to-end encrypted on your device before it leaves.\",\n    \"chat.peersOnly\": \"Sent end-to-end to connected peers only - never stored on a server.\",\n    \"flow.invitationCreated\": \"Secure invitation created\",\n    \"flow.invitationCreatedBang\": \"Secure invitation created and encrypted!\",\n    \"flow.responseCreated\": \"Secure response created\",\n    \"flow.responseCreatedBang\": \"Secure response created!\",\n    \"flow.sendInvitation\": \"Send the invitation code to your interlocutor via a secure channel (voice call, SMS, etc.).\",\n    \"flow.sendResponse\": \"Send the response code to the initiator via a secure channel or let them scan the QR code below.\",\n    \"flow.sendEncryptedCode\": \"Send the encrypted code\",\n    \"flow.sendTheResponse\": \"Send the response\",\n    \"flow.pasteOrWrite\": \"Paste or write code\u2026\",\n    \"flow.processingInvitation\": \"Processing the secure invitation...\",\n    \"flow.processingResponse\": \"Processing the secure response...\",\n    \"flow.finalizing\": \"Finalizing the secure connection...\",\n    \"flow.channelEstablished\": \"Secure channel established\",\n    \"flow.channelReady\": \"Secure channel is ready\",\n    \"flow.restoring\": \"Restoring connection\u2026\",\n    \"flow.invitationCaptured\": \"Invitation captured.\",\n    \"err.needInvitation\": \"You need to insert the invitation code from your interlocutor.\",\n    \"err.needResponse\": \"You need to insert the response code from your interlocutor.\",\n    \"err.responseFormat\": \"Invalid response format - please check the code\",\n    \"err.responseNoKey\": \"Invalid response code - missing or corrupted cryptographic key. Please check the code and try again.\",\n    \"err.responseNoSignKey\": \"Invalid response code - missing signature verification key. Please check the code and try again.\",\n    \"err.responseOutdated\": \"Response data is outdated - please use a fresh invitation\",\n    \"err.setupError\": \"Connection setup error\",\n    \"err.notReady\": \"Connection not ready\",\n    \"err.securityBreach\": \"Security breach detected - connection rejected\",\n    \"err.securityValidation\": \"Security validation failed - possible attack detected\",\n    \"err.retiredQr\": \"This QR code uses a retired format that could not transfer the invitation. Ask your peer to generate a new one, or use copy/paste.\",\n    \"err.compressedQrNote\": \"Compressed QR may omit SDP for brevity. Use copy/paste if connection fails.\",\n    \"err.inviteNotConnected\": \"The invitation could not be sent. That chat is not connected right now.\",\n    \"err.inviteNotConnectedRetry\": \"The invitation could not be sent. That chat is not connected right now - reopen it and try again.\",\n    \"err.nobodyAccepted\": \"Nobody accepted the invitation. The group is unchanged.\",\n    \"err.noAudio\": \"No audio captured - check microphone permission and try again.\",\n    \"err.voiceNeedsConnection\": \"Voice message needs an active secure connection. Reconnect and try again.\",\n    \"err.voiceRestoring\": \"Restoring the connection - try sending the voice message again in a moment.\",\n    \"err.fileTooLarge\": \"File too large\",\n    \"sas.safetyNumber\": \"Safety number\",\n    \"sas.incorrect\": \"Incorrect code. Check it with your peer and try again.\",\n    \"sas.noMatch\": \"The codes do not match\",\n    \"sas.makeSure\": \"Make sure the codes match exactly.\",\n    \"sas.tooManyAttempts\": \"Too many incorrect attempts. Session reset for safety.\",\n    \"sas.verificationFailed\": \"Verification failed\",\n    \"sas.verified\": \"Verified \u00B7 Perfect Forward Secrecy\",\n    \"sas.runVerification\": \"Run security verification\",\n    \"sec.panelTitle\": \"Network & crypto details\",\n    \"sec.security\": \"Security\",\n    \"sec.transport\": \"Transport\",\n    \"sec.keyExchange\": \"Key exchange\",\n    \"sec.allEnabled\": \"All security features enabled by default\",\n    \"sec.realTimeNote\": \"Real-time verification using actual cryptographic functions - no mock data.\",\n    \"sec.simulatedWarning\": \"Warning: connection may not be fully established - values may be simulated.\",\n    \"dl.title\": \"Download SecureBit\",\n    \"dl.free\": \"Free \u00B7 open source\",\n    \"dl.soon\": \"Mobile (iOS, Android) and browser extensions (Chrome, Firefox, Opera) are coming soon.\",\n    \"chatHdr.chat\": \"Chat\",\n    \"chatHdr.chats\": \"Chats\",\n    \"chatHdr.newChat\": \"+ New\",\n    \"chatHdr.secure\": \"Secure\",\n    \"chatHdr.p2pSub\": \"P2P \u00B7 end-to-end encrypted\",\n    \"chatHdr.save\": \"Save\",\n    \"chatHdr.close\": \"Close\",\n    \"chatHdr.expand\": \"Expand\",\n    \"chatHdr.you\": \"You\",\n    \"chatHdr.qrCode\": \"QR code\",\n    \"chat.disconnected\": \"Disconnected\",\n    \"call.mute\": \"Mute\",\n    \"call.endShort\": \"End\",\n    \"group.add\": \"Add\",\n    \"group.send\": \"Send\",\n    \"sec.pfsShort\": \"Perfect Forward Secrecy\",\n    \"sec.cipher\": \"Cipher\",\n    \"chat.close\": \"Close\",\n    \"file.needConnection\": \"File transfer needs an open connection\",\n    \"presence.available\": \"Available\",\n    \"presence.away\": \"Away\",\n    \"presence.busy\": \"Busy\",\n    \"presence.offline\": \"Offline\",\n    \"presence.invisible\": \"Invisible\",\n    \"presence.availableDesc\": \"Online and reachable\",\n    \"presence.awayDesc\": \"Idle \u00B7 stepped away\",\n    \"presence.busyDesc\": \"Do not disturb\",\n    \"presence.invisibleDesc\": \"Appear offline to peers\",\n    \"presence.online\": \"Online\",\n    \"conn.p2p\": \"P2P \u00B7 connected\",\n    \"conn.verifying\": \"Verifying\u2026\",\n    \"conn.connecting\": \"Connecting\u2026\",\n    \"conn.reconnecting\": \"Reconnecting\u2026\",\n    \"conn.peerDisconnected\": \"Peer disconnected\",\n    \"conn.disconnected\": \"Disconnected\",\n    \"chat.defaultLabel\": \"Chat\",\n    \"groupPhase.forming\": \"Forming\u2026\",\n    \"groupPhase.commitments\": \"Exchanging commitments\u2026\",\n    \"groupPhase.revealing\": \"Revealing\u2026\",\n    \"groupPhase.compare\": \"Compare the group code\",\n    \"groupPhase.ready\": \"Group ready\",\n    \"groupPhase.failed\": \"Group failed\",\n    \"call.qualityGood\": \"Good\",\n    \"call.qualityFair\": \"Fair\",\n    \"call.qualityWeak\": \"Weak\",\n    \"msg.code\": \"Code\",\n    \"msg.timer\": \"Timer\",\n    \"msg.voice\": \"Voice\",\n    \"msg.play\": \"Play\",\n    \"msg.sent\": \"Sent\",\n    \"msg.read\": \"Read\",\n    \"report.title\": \"Real-time security verification\",\n    \"report.active\": \"Active\",\n    \"report.testsPassed\": \"Tests passed\",\n    \"report.verifiedAt\": \"Verified at\",\n    \"report.source\": \"Source\",\n    \"secTest.verifyECDHKeyExchange\": \"ECDH key exchange\",\n    \"secTest.verifyECDSASignatures\": \"ECDSA digital signatures\",\n    \"secTest.verifyEncryption\": \"AES-GCM encryption\",\n    \"secTest.verifyMessageIntegrity\": \"Message integrity\",\n    \"secTest.verifyPerfectForwardSecrecy\": \"Perfect forward secrecy\",\n    \"secTest.verifyPFS\": \"Perfect forward secrecy\",\n    \"secTest.verifyReplayProtection\": \"Replay protection\",\n    \"secTest.verifyDTLSFingerprint\": \"DTLS fingerprint\",\n    \"secTest.verifySASVerification\": \"SAS verification\",\n    \"secTest.verifyMetadataProtection\": \"Metadata protection\",\n    \"secTest.verifyTrafficObfuscation\": \"Traffic obfuscation\",\n    \"secTest.verifyPacketPadding\": \"Packet padding\",\n    \"secTest.verifyNestedEncryption\": \"Nested encryption\",\n    \"secTest.verifyNonExtractableKeys\": \"Non-extractable keys\",\n    \"secTest.verifyRateLimiting\": \"Rate limiting\",\n    \"secTest.verifyMutualAuth\": \"Mutual authentication\",\n    \"secTest.verifyAuthProof\": \"Authentication proof\",\n    \"secTest.verifyEnhancedValidation\": \"Enhanced validation\",\n    \"secTest.verifyAdvancedFeatures\": \"Advanced features\",\n    \"secTest.verifySignature\": \"Signature check\",\n    \"secDetail.Security system initializing...\": \"Security system initializing...\",\n    \"secDetail.Nested encryption active\": \"Nested encryption active\",\n    \"secDetail.Nested encryption failed\": \"Nested encryption failed\",\n    \"secDetail.Packet padding active\": \"Packet padding active\",\n    \"secDetail.Packet padding failed\": \"Packet padding failed\",\n    \"secDetail.Advanced features active\": \"Advanced features active\",\n    \"secDetail.Advanced features failed\": \"Advanced features failed\",\n    \"secDetail.No encryption key available\": \"No encryption key available\",\n    \"secDetail.AES-GCM encryption/decryption working correctly\": \"AES-GCM encryption/decryption working correctly\",\n    \"secDetail.No ECDH key pair available\": \"No ECDH key pair available\",\n    \"secDetail.Key derivation failed\": \"Key derivation failed\",\n    \"secDetail.No ECDSA key pair available\": \"No ECDSA key pair available\",\n    \"secDetail.ECDSA digital signatures working correctly\": \"ECDSA digital signatures working correctly\",\n    \"secDetail.MAC key not available or invalid\": \"MAC key not available or invalid\",\n    \"secDetail.Rate limiter did not block a message over the limit\": \"Rate limiter did not block a message over the limit\",\n    \"secDetail.Rate limiter is not available\": \"Rate limiter is not available\",\n    \"secDetail.Replay protection is working correctly\": \"Replay protection is working correctly\",\n    \"secDetail.Replay protection not enabled\": \"Replay protection not enabled\",\n    \"secDetail.SAS code not available\": \"SAS code not available\",\n    \"secDetail.SAS verification code is valid and available\": \"SAS verification code is valid and available\",\n    \"secDetail.Traffic obfuscation is working correctly\": \"Traffic obfuscation is working correctly\",\n    \"secDetail.Traffic obfuscation not enabled\": \"Traffic obfuscation not enabled\",\n    \"secDetail.No non-extractable ephemeral ECDH key pair for this session\": \"No non-extractable ephemeral ECDH key pair for this session\",\n    \"secDetail.Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation\": \"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation\",\n    \"msg.pause\": \"Pause\",\n    \"msg.failed\": \"Failed\",\n    \"groupErr.timeout\": \"A member stopped responding before the code was ready.\",\n    \"groupErr.keyMismatch\": \"A member's key did not match the identity claimed for it.\",\n    \"groupErr.revealMismatch\": \"A member's revealed value did not match what they committed to.\",\n    \"groupErr.commitChanged\": \"A member changed their commitment part-way through.\",\n    \"groupErr.missingKey\": \"A member was listed whose key never arrived.\",\n    \"groupErr.outsider\": \"A frame arrived from someone outside the group.\",\n    \"groupErr.limit\": \"A group is limited to eight members.\",\n    \"groupErr.tooLarge\": \"A message was too large to send to the group.\",\n    \"fileType.text\": \"Plain text\",\n    \"fileType.images\": \"Images\",\n    \"fileType.archives\": \"Archives\",\n    \"fileType.voice\": \"Voice messages\",\n    \"fileType.unsupported\": \"Unsupported\",\n    \"qrScan.title\": \"Scan QR Code\",\n    \"qrScan.auto\": \"Auto Mode\",\n    \"qrScan.reset\": \"Reset\",\n    \"qrScan.autoScroll\": \"Auto-scrolling enabled\",\n    \"qrScan.starting\": \"Starting camera...\",\n    \"qrScan.point\": \"Point camera at QR code\",\n    \"qrScan.tapFocus\": \"Tap screen to focus\",\n    \"qrScan.focusing\": \"Focusing...\",\n    \"iceErr.notArray\": \"Server list must be an array\",\n    \"iceErr.invalidJson\": \"Invalid JSON\",\n    \"iceErr.tooMany\": \"Too many servers (max {max})\",\n    \"iceErr.invalidEntry\": \"{label}: invalid entry\",\n    \"iceErr.urlCount\": \"{label}: between 1 and {max} URLs required\",\n    \"iceErr.turnCreds\": \"{label}: TURN servers usually require a username and credential\",\n    \"iceUrl.notString\": \"URL must be a string\",\n    \"iceUrl.empty\": \"URL is empty\",\n    \"iceUrl.tooLong\": \"URL is too long\",\n    \"iceUrl.badChars\": \"URL contains invalid characters\",\n    \"iceUrl.badScheme\": \"URL must start with stun:, stuns:, turn: or turns:\",\n    \"iceUrl.badQuery\": \"URL has an invalid query\",\n    \"iceUrl.noHost\": \"URL is missing a host\",\n    \"iceUrl.badHost\": \"URL has an invalid host or port\",\n    \"iceUrl.badTransport\": \"URL query must be transport=udp or transport=tcp\",\n    \"msg.off\": \"Off\",\n    \"file.consentUnavailable\": \"User consent unavailable\",\n    \"secLevel.MAXIMUM\": \"MAXIMUM\",\n    \"secLevel.INITIALIZING\": \"INITIALIZING\",\n    \"secLevel.ERROR\": \"ERROR\",\n    \"secLevel.UNKNOWN\": \"UNKNOWN\",\n    \"status.error\": \"Error\",\n    \"offline.disconnect\": \"Disconnect\",\n    \"offline.learnMore\": \"Learn more\",\n    \"pwa.installApp\": \"Install App\",\n    \"chat.onWeb\": \"You're on Web\",\n    \"groupCall.startVoice\": \"Start a group voice call\",\n    \"groupCall.startVideo\": \"Start a group video call\",\n    \"groupCall.join\": \"Join\",\n    \"groupCall.dismiss\": \"Not now\",\n    \"groupCall.leave\": \"Leave call\",\n    \"groupCall.you\": \"You\",\n    \"groupCall.connecting\": \"Connecting\u2026\",\n    \"groupCall.waitingLink\": \"Waiting for a direct link\u2026\",\n    \"groupCall.legFailed\": \"Could not connect\",\n    \"groupCall.startedVoice\": \"{name} started a voice call\",\n    \"groupCall.startedVideo\": \"{name} started a video call\",\n    \"groupCall.inCall\": \"{count} in the call\",\n    \"groupCall.err.permission_denied\": \"The call could not start - microphone and camera access is blocked. Allow it for this site, then try again.\",\n    \"groupCall.err.device_not_found\": \"The call could not start - no microphone was found on this device.\",\n    \"groupCall.err.device_busy\": \"The call could not start - your microphone is in use by another app. Close it and try again.\",\n    \"groupCall.err.media_failed\": \"The call could not start - the microphone could not be opened.\",\n    \"groupCall.err.call_in_progress\": \"A call is already running in this group. Join it instead of starting another.\",\n    \"groupCall.err.not_ready\": \"Confirm the group code before calling.\",\n    \"groupCall.speaking\": \"{name} is speaking\",\n    \"groupCall.pin\": \"Show {name} large\",\n    \"groupCall.unpin\": \"Back to everyone\",\n    \"groupCall.showEveryone\": \"Everyone\",\n    \"msg.after5s\": \"5s after reading\",\n    \"msg.after15s\": \"15s after reading\",\n    \"msg.after30s\": \"30s after reading\",\n    \"msg.after1m\": \"1m after reading\",\n    \"msg.sec30\": \"30 seconds\",\n    \"msg.min5\": \"5 minutes\",\n    \"msg.hour1\": \"1 hour\",\n    \"desktop.shareDesc\": \"Send the code to your peer. It is one-time and expires shortly.\",\n    \"desktop.invitationCreated\": \"Secure invitation created - send it to your peer.\",\n    \"desktop.joinDesc\": \"Paste your peer's invitation code to build your secure answer.\",\n    \"desktop.offerTag\": \"offer \u00B7 copy text\",\n    \"desktop.answerTag\": \"answer \u00B7 copy text\",\n    \"desktop.offerPlaceholder\": \"Invitation code will appear here\u2026\",\n    \"desktop.answerPlaceholder\": \"Response code will appear here\u2026\",\n    \"desktop.backToChats\": \"Back to chats\",\n    \"desktop.sendFeedback\": \"Send feedback\",\n    \"desktop.callsNeedVerified\": \"Calls require a verified secure channel.\",\n    \"desktop.noOpenChannel\": \"No open secure channel.\",\n    \"desktop.chatCarriesCall\": \"This chat is carrying a group call. Leave the group call before placing a 1:1 call.\",\n    \"desktop.err.permission_denied\": \"The call could not start - microphone and camera access is blocked. Allow it in system settings, then try again.\",\n    \"desktop.language\": \"Language\",\n    \"desktop.languageHint\": \"Applies at once. Messages already sent keep the words they were written in.\",\n    \"desktop.compareCode\": \"Compare the verification code with your peer and confirm if it matches.\",\n    \"desktop.verifyBeforeFiles\": \"Complete verification before sending files.\",\n    \"desktop.verifyBeforeSending\": \"Complete verification before sending messages.\",\n    \"desktop.disconnectedByBackend\": \"Connection securely disconnected.\",\n    \"desktop.restoreFailed\": \"Could not restore the connection. Closing this chat.\",\n    \"desktop.channelNotReady\": \"The data channel is not available yet. Wait for the connection to establish.\",\n    \"desktop.enterCode\": \"Enter the verification code to confirm.\",\n    \"desktop.noOffer\": \"No invitation found. Create one first.\",\n    \"desktop.notInitiator\": \"You did not create this connection, so there is no answer for you to apply.\",\n    \"desktop.decryptFailed\": \"A message could not be decrypted and was discarded.\",\n    \"desktop.badMessageFormat\": \"A malformed frame arrived and was discarded.\",\n    \"desktop.notSentNotReady\": \"Message not sent: the secure channel is not ready. Wait for verification to finish, or reconnect.\",\n    \"desktop.micDenied\": \"Microphone access was denied.\",\n    \"desktop.noChannelWait\": \"No open secure channel - wait for the connection to establish.\",\n    \"desktop.sasFailed\": \"Verification failed. A machine-in-the-middle may be present, so the connection was aborted.\",\n    \"desktop.sasOk\": \"Verification succeeded. This channel is authenticated end to end.\",\n    \"desktop.iceForgotten\": \"Saved servers forgotten. Using public ICE servers.\",\n    \"desktop.icePublic\": \"Using public ICE servers.\",\n    \"desktop.verificationInProgress\": \"Security verification is still running. Wait for it to finish.\",\n    \"desktop.fileGone\": \"This file is no longer available for download.\",\n    \"desktop.codeMismatch\": \"The verification codes do not match. Disconnecting for safety.\",\n    \"desktop.noLocalCode\": \"Verification failed: there is no locally derived code to compare against. Disconnecting for safety.\",\n    \"desktop.protocolViolation\": \"The peer claimed the code was confirmed before you confirmed it. Disconnecting for safety.\",\n    \"desktop.verificationRejected\": \"Verification rejected. The connection was aborted for safety.\",\n    \"secLevel.HIGH\": \"HIGH\",\n    \"secLevel.MEDIUM\": \"MEDIUM\",\n    \"secLevel.LOW\": \"LOW\",\n    \"desktop.rerun\": \"Re-run\",\n    \"desktop.ice.customDesc\": \"Up to {max} servers, one URL per line or JSON.\",\n    \"desktop.ice.persistDesc\": \"Stored locally on this device. Leave off to use only for this session.\",\n    \"desktop.group.leaveNote\": \"The other members are told you left. Nothing about this group is kept on this device afterwards - there is no server holding a copy to rejoin from, so you would need a fresh invitation.\",\n    \"desktop.sec.ecdsaOk\": \"Peer key package signature verified during the handshake (ECDSA P-384 / SHA-384)\",\n    \"desktop.sec.ecdsaNone\": \"No completed handshake\",\n    \"desktop.sec.ecdhOk\": \"Session keys derived from an ephemeral ECDH P-384 exchange via HKDF-SHA-256\",\n    \"desktop.sec.ecdhNone\": \"No session keys derived\",\n    \"desktop.sec.encryptionOk\": \"AES-GCM encryption and decryption verified inside the core\",\n    \"desktop.sec.encryptionNa\": \"The AES-GCM self-test could not be run\",\n    \"desktop.sec.integrityOk\": \"Message integrity verified (AES-GCM authentication)\",\n    \"desktop.sec.integrityNa\": \"The integrity self-test could not be run\",\n    \"desktop.sec.pfsOk\": \"Double Ratchet active - every message has a key of its own\",\n    \"desktop.sec.pfsNa\": \"Not measured\",\n    \"desktop.sec.replayOk\": \"Ratchet message keys are destroyed once used, so a captured frame cannot be replayed\",\n    \"desktop.sec.replayNa\": \"Not measured\",\n    \"desktop.sec.dtlsPinned\": \"Peer DTLS fingerprint pinned: {fp}\",\n    \"desktop.sec.dtlsNone\": \"No remote DTLS fingerprint available\",\n    \"desktop.sec.sasBoth\": \"Both peers confirmed the out-of-band safety code\",\n    \"desktop.sec.sasIncomplete\": \"The safety code has not been confirmed by both peers\",\n    \"desktop.sec.metadataOk\": \"A dedicated metadata key was derived (HKDF metadata-protection-v4)\",\n    \"desktop.sec.metadataNone\": \"No metadata key\",\n    \"desktop.sec.coverOn\": \"Cover traffic active: random fake frames (32-128 B every 15-30 s) on the ratcheted channel\",\n    \"desktop.sec.coverOff\": \"The cover traffic generator is not running\",\n    \"desktop.sec.coverUnsupported\": \"Cover traffic needs a Double Ratchet session (the peer is on an older release)\",\n    \"desktop.tagline\": \"End-to-end freedom\",\n    \"desktop.callsNotHere\": \"Calls are not available in this build yet. Messages, files and group chats work as usual.\"\n};\n\nconst registry = globalThis.__SECUREBIT_I18N__ || (globalThis.__SECUREBIT_I18N__ = Object.create(null));\nregistry[\"en\"] = DICTIONARY;\n", "/**\n * Language selection and string lookup.\n *\n * Every locale is a real page at a real URL (/, /de/, ...), generated at build time,\n * because the app is client-rendered: a language that exists only as a runtime string\n * swap has no URL for a crawler to index. This module is the runtime half \u2014 it decides\n * which locale the current page is, and hands components their strings.\n *\n * The rule that matters: the URL wins over everything. Someone who opens /de/ gets\n * German even if they once chose English here, or a shared link would open in whatever\n * language the recipient happened to pick last, which makes links unshareable.\n */\n\nimport { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALE_META, CROSS_LOCALE_STRINGS } from './generated.js';\n// Side-effect import: loading the default locale's dictionary registers the strings\n// t() falls back to when a translation is missing a key. It is the one dictionary that\n// has to be present on every page, so it is the one that gets bundled.\nimport './dict/default.js';\n\nexport { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALE_META };\n\n/**\n * Loaded dictionaries, by locale code.\n *\n * On a global rather than in module scope, and that is the point. index.js exists twice\n * on a page: once bundled inside dist/app.js, and once as raw source, because the PWA\n * install prompt, the PWA manager and the update checker import it directly. Two module\n * instances mean two module-scoped registries, and the /ru/ dictionary loaded by the\n * page would have been invisible to the half of the app that needed it.\n *\n * A page loads its own dictionary through a <script type=\"module\"> that runs before the\n * bundles; every locale other than the default arrives that way. See scripts/build-i18n.js.\n */\nconst REGISTRY = globalThis.__SECUREBIT_I18N__ || (globalThis.__SECUREBIT_I18N__ = Object.create(null));\n\n/** The dictionary for a locale, or an empty one if that locale was never loaded. */\nfunction dictionary(code) {\n    return REGISTRY[code] || null;\n}\n\nconst STORAGE_KEY = 'securebit-locale';\n\n/** The locale a path belongs to, or null for the default locale at the root. */\nexport function localeFromPathname(pathname = '/') {\n    const segment = String(pathname).split('/')[1];\n    return SUPPORTED_LOCALES.includes(segment) && segment !== DEFAULT_LOCALE ? segment : null;\n}\n\n/**\n * Best match for a browser's language list. \"de-AT\" should get German if German is all\n * we have, so the base tag is tried after the full one, in the order the browser gave.\n */\nexport function localeFromLanguages(languages = []) {\n    for (const tag of languages) {\n        const lower = String(tag).toLowerCase();\n        const exact = SUPPORTED_LOCALES.find((code) => code.toLowerCase() === lower);\n        if (exact) return exact;\n        const base = lower.split('-')[0];\n        const partial = SUPPORTED_LOCALES.find((code) => code.toLowerCase().split('-')[0] === base);\n        if (partial) return partial;\n    }\n    return null;\n}\n\n/**\n * Which locale to render, given everything we know. Pure, so the precedence can be\n * tested without a browser: URL, then a previous explicit choice, then the browser's\n * languages, then the default.\n */\nexport function detectLocale({ pathname = '/', stored = null, languages = [] } = {}) {\n    const fromPath = localeFromPathname(pathname);\n    if (fromPath) return fromPath;\n\n    // The root path is the default locale's own page, not an absence of information \u2014\n    // redirecting away from it would break every link to the site's canonical URL.\n    if (isLocaleRoot(pathname)) return DEFAULT_LOCALE;\n\n    if (stored && SUPPORTED_LOCALES.includes(stored)) return stored;\n    return localeFromLanguages(languages) || DEFAULT_LOCALE;\n}\n\n/** True for \"/\" and \"/index.html\" \u2014 the pages the default locale is served from. */\nfunction isLocaleRoot(pathname) {\n    return pathname === '/' || pathname === '/index.html';\n}\n\n/**\n * The URL of the current page in another locale. Switching keeps you where you are\n * rather than dumping you back on the home page.\n */\nexport function localeHref(code, pathname = '/') {\n    const current = localeFromPathname(pathname);\n    const rest = current ? String(pathname).slice(current.length + 1) : String(pathname);\n    const tail = rest.replace(/^\\/+/, '');\n    return code === DEFAULT_LOCALE ? `/${tail}` : `/${code}/${tail}`;\n}\n\n/** Remember an explicit choice. Storage can throw in private mode; a preference is not worth an exception. */\nexport function rememberLocale(code) {\n    try {\n        localStorage.setItem(STORAGE_KEY, code);\n    } catch (_) {\n        // Private mode or blocked storage: the URL still carries the choice.\n    }\n}\n\nexport function storedLocale() {\n    try {\n        return localStorage.getItem(STORAGE_KEY);\n    } catch (_) {\n        return null;\n    }\n}\n\n/**\n * The locale of the page as actually loaded. Resolved once: it cannot change without a\n * navigation, and t() is called dozens of times per render \u2014 re-reading localStorage\n * on each of those would be a synchronous storage hit per string.\n */\nlet resolvedLocale = null;\nexport function currentLocale() {\n    if (resolvedLocale) return resolvedLocale;\n    // A window may exist without the parts this needs: test harnesses and workers both\n    // provide partial shims. Reading through them blindly threw and took the caller with\n    // it, which for t() means a missing string becomes a crash.\n    const w = typeof window === 'undefined' ? null : window;\n    if (!w || !w.location) return DEFAULT_LOCALE;\n    resolvedLocale = detectLocale({\n        pathname: w.location.pathname || '/',\n        stored: storedLocale(),\n        languages: w.navigator?.languages || [],\n    });\n    return resolvedLocale;\n}\n\n/**\n * Writing direction of a locale. Arabic, Hebrew, Persian and Urdu read right to left,\n * and the whole layout \u2014 not just the text \u2014 has to follow: an avatar that sits before\n * a name in English sits after it in Arabic.\n *\n * The generated page already carries dir on <html>, so nothing here needs to apply it\n * at load. This exists for the handful of decisions CSS cannot express on its own \u2014\n * which way an arrow points, which edge a drawer slides in from.\n */\nexport function localeDir(code = currentLocale()) {\n    return LOCALE_META[code]?.dir === 'rtl' ? 'rtl' : 'ltr';\n}\n\nexport function isRTL(code = currentLocale()) {\n    return localeDir(code) === 'rtl';\n}\n\n/**\n * +1 or -1, for arithmetic on a horizontal offset: a swipe threshold, a translate, the\n * side a sheet enters from. `x * direction()` is the whole of what a mirrored gesture\n * needs, and it reads better than an `isRTL ? -x : x` at every call site.\n */\nexport function direction(code = currentLocale()) {\n    return isRTL(code) ? -1 : 1;\n}\n\n/**\n * Force a fragment to be laid out left to right inside right-to-left text.\n *\n * Bidi reordering is done by the browser on the rendered text, and it mangles exactly\n * the strings this app is made of: a key fingerprint, a base64 session descriptor, a\n * URL, a version number. In an RTL paragraph \"a1b2:c3d4\" can come out as \"c3d4:a1b2\" \u2014\n * the characters are all there, so nothing looks broken, and the reader compares the\n * wrong thing against their peer's screen. Any element showing machine text gets these\n * props.\n */\nexport const LTR_TEXT = { dir: 'ltr', style: { unicodeBidi: 'isolate', textAlign: 'start' } };\n\n/**\n * The suggestion is an offer, and an offer that keeps coming back after it was turned\n * down is an ad. One dismissal is remembered for good; storage can be unavailable, in\n * which case the bar simply comes back \u2014 a worse experience, never a broken one.\n */\nconst SUGGEST_KEY = 'securebit-locale-suggest-dismissed';\n\nexport function localeSuggestionDismissed() {\n    try {\n        return localStorage.getItem(SUGGEST_KEY) === '1';\n    } catch (_) {\n        return false;\n    }\n}\n\nexport function dismissLocaleSuggestion() {\n    try {\n        localStorage.setItem(SUGGEST_KEY, '1');\n    } catch (_) {\n        // Nothing to do: the bar reappears next visit, which is not worth an exception.\n    }\n}\n\n/**\n * A locale the visitor would probably rather read, when it is not the one they are on.\n * Used to offer a link, never to redirect: an automatic redirect sends Googlebot \u2014\n * which crawls from one place \u2014 to a single locale and leaves the rest unindexed.\n */\nexport function suggestedLocale({ pathname = '/', languages = [], stored = null } = {}) {\n    const shown = localeFromPathname(pathname) || DEFAULT_LOCALE;\n    // An explicit past choice outranks the browser's list: someone who picked a\n    // language once meant it, and it is exactly when their page does not match that\n    // choice that the offer is worth making.\n    const preferred = (SUPPORTED_LOCALES.includes(stored) && stored) || localeFromLanguages(languages);\n    return preferred && preferred !== shown ? preferred : null;\n}\n\n/**\n * A list-valued string, for the handful of places where the copy is a set of short\n * labels rather than a sentence \u2014 a language may need a different number of them, so\n * the count belongs to the translation, not to the component.\n */\nexport function tList(key, locale = currentLocale()) {\n    const value = dictionary(locale)?.[key] ?? dictionary(DEFAULT_LOCALE)?.[key];\n    return Array.isArray(value) ? value : [];\n}\n\n/**\n * The rows a language switcher renders. Built here rather than in the component so the\n * URLs can be tested without a DOM, and so the switcher stays what it must be: a list\n * of real links. A control that swaps strings in place would leave every language on\n * one URL, which is the thing this whole arrangement exists to avoid.\n */\nexport function languageLinks({ pathname = '/', active = DEFAULT_LOCALE } = {}) {\n    return SUPPORTED_LOCALES.map((code) => ({\n        code,\n        href: localeHref(code, pathname),\n        hrefLang: LOCALE_META[code]?.htmlLang || code,\n        // Listed in its own language: someone looking for German is looking for\n        // \"Deutsch\", not for the English word for it.\n        label: LOCALE_META[code]?.nativeName || code,\n        // Short code for the collapsed switcher.\n        abbr: LOCALE_META[code]?.abbr || code.toUpperCase(),\n        // The row renders a name in its own script, so it needs its own direction:\n        // \"\u0627\u0644\u0639\u0631\u0628\u064A\u0629\" laid out left-to-right is the word spelled backwards.\n        dir: LOCALE_META[code]?.dir || 'ltr',\n        isCurrent: code === active,\n    }));\n}\n\n/**\n * Look up a string. Falls back to the default locale and then to the key itself, so a\n * missing translation shows English rather than blank UI.\n */\nexport function t(key, vars, locale = currentLocale()) {\n    const template =\n        dictionary(locale)?.[key] ??\n        // Asked for a locale whose dictionary is not on this page. Only the language\n        // suggestion does that, and only for the handful of keys it needs, so those\n        // ship for every locale; anything else falls through to the default below.\n        CROSS_LOCALE_STRINGS[locale]?.[key] ??\n        dictionary(DEFAULT_LOCALE)?.[key] ??\n        key;\n    if (!vars) return template;\n    return String(template).replace(/\\{(\\w+)\\}/g, (match, name) =>\n        Object.prototype.hasOwnProperty.call(vars, name) ? String(vars[name]) : match\n    );\n}\n", "import { t } from '../i18n/index.js';\n// ============================================\n// SECURE FILE TRANSFER CONTEXT\n// ============================================\nclass SecureFileTransferContext {\n    static #instance = null;\n    static #contextKey = Symbol('SecureFileTransferContext');\n    \n    static getInstance() {\n        if (!this.#instance) {\n            this.#instance = new SecureFileTransferContext();\n        }\n        return this.#instance;\n    }\n    \n    #fileTransferSystem = null;\n    #active = false;\n    #securityLevel = 'high';\n    \n    setFileTransferSystem(system) {\n        if (!(system instanceof EnhancedSecureFileTransfer)) {\n            throw new Error('Invalid file transfer system instance');\n        }\n        this.#fileTransferSystem = system;\n        this.#active = true;\n    }\n    \n    getFileTransferSystem() {\n        return this.#fileTransferSystem;\n    }\n    \n    isActive() {\n        return this.#active && this.#fileTransferSystem !== null;\n    }\n    \n    deactivate() {\n        this.#active = false;\n        this.#fileTransferSystem = null;\n    }\n    \n    getSecurityLevel() {\n        return this.#securityLevel;\n    }\n    \n    setSecurityLevel(level) {\n        if (['low', 'medium', 'high'].includes(level)) {\n            this.#securityLevel = level;\n        }\n    }\n}\n\n// ============================================\n// SECURITY ERROR HANDLER\n// ============================================\n\nclass SecurityErrorHandler {\n    static #allowedErrors = new Set([\n        'File size exceeds maximum limit',\n        'Unsupported file type',\n        'Transfer timeout',\n        'Connection lost',\n        'Invalid file data',\n        'File transfer failed',\n        'Transfer cancelled',\n        'Network error',\n        'File not found',\n        'Permission denied'\n    ]);\n    \n    static sanitizeError(error) {\n        const message = error.message || error;\n\n        for (const allowed of this.#allowedErrors) {\n            if (message.includes(allowed)) {\n                return allowed;\n            }\n        }\n\n        console.error('\uD83D\uDD12 Internal file transfer error:', {\n            message: error.message,\n            stack: error.stack,\n            timestamp: new Date().toISOString()\n        });\n\n        return 'File transfer failed';\n    }\n    \n    static logSecurityEvent(event, details = {}) {\n        console.warn('\uD83D\uDD12 Security event:', {\n            event,\n            timestamp: new Date().toISOString(),\n            ...details\n        });\n    }\n}\n\n// ============================================\n// FILE METADATA SIGNATURE SYSTEM\n// ============================================\n\nclass FileMetadataSigner {\n    static async signFileMetadata(metadata, privateKey) {\n        try {\n            const encoder = new TextEncoder();\n            const data = encoder.encode(JSON.stringify({\n                fileId: metadata.fileId,\n                fileName: metadata.fileName,\n                fileSize: metadata.fileSize,\n                fileHash: metadata.fileHash,\n                timestamp: metadata.timestamp,\n                version: metadata.version || '2.0'\n            }));\n            \n            const signature = await crypto.subtle.sign(\n                'RSASSA-PKCS1-v1_5',\n                privateKey,\n                data\n            );\n            \n            return Array.from(new Uint8Array(signature));\n        } catch (error) {\n            SecurityErrorHandler.logSecurityEvent('signature_failed', { error: error.message });\n            throw new Error('Failed to sign file metadata');\n        }\n    }\n    \n    static async verifyFileMetadata(metadata, signature, publicKey) {\n        try {\n            const encoder = new TextEncoder();\n            const data = encoder.encode(JSON.stringify({\n                fileId: metadata.fileId,\n                fileName: metadata.fileName,\n                fileSize: metadata.fileSize,\n                fileHash: metadata.fileHash,\n                timestamp: metadata.timestamp,\n                version: metadata.version || '2.0'\n            }));\n            \n            const signatureBuffer = new Uint8Array(signature);\n            \n            const isValid = await crypto.subtle.verify(\n                'RSASSA-PKCS1-v1_5',\n                publicKey,\n                signatureBuffer,\n                data\n            );\n            \n            if (!isValid) {\n                SecurityErrorHandler.logSecurityEvent('invalid_signature', { fileId: metadata.fileId });\n            }\n            \n            return isValid;\n        } catch (error) {\n            SecurityErrorHandler.logSecurityEvent('verification_failed', { error: error.message });\n            return false;\n        }\n    }\n}\n\n// ============================================\n// \u0422\u041E\u0427\u041D\u042B\u0415 \u0418\u0421\u041F\u0420\u0410\u0412\u041B\u0415\u041D\u0418\u042F \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u041E\u0421\u0422\u0418\n// ============================================\n\nclass MessageSizeValidator {\n    static MAX_MESSAGE_SIZE = 1024 * 1024; // 1MB\n    \n    static isMessageSizeValid(message) {\n        const messageString = JSON.stringify(message);\n        const sizeInBytes = new Blob([messageString]).size;\n        \n        if (sizeInBytes > this.MAX_MESSAGE_SIZE) {\n            SecurityErrorHandler.logSecurityEvent('message_too_large', {\n                size: sizeInBytes,\n                limit: this.MAX_MESSAGE_SIZE\n            });\n            throw new Error('Message too large');\n        }\n        \n        return true;\n    }\n}\n\nclass AtomicOperations {\n    constructor() {\n        this.locks = new Map();\n    }\n    \n    async withLock(key, operation) {\n        // Serialize all operations sharing the same key. Must loop (not a single\n        // `if`): when 3+ callers queue on one key they all await the same in-flight\n        // lock, so after it resolves we have to re-check before claiming the slot \u2014\n        // otherwise multiple operations run concurrently and break atomicity.\n        while (this.locks.has(key)) {\n            await this.locks.get(key);\n        }\n\n        let releaseLock;\n        const lockPromise = new Promise(resolve => { releaseLock = resolve; });\n        this.locks.set(key, lockPromise);\n\n        try {\n            return await operation();\n        } finally {\n            this.locks.delete(key);\n            releaseLock();\n        }\n    }\n}\n\n// Rate limiting \u0434\u043B\u044F \u0437\u0430\u0449\u0438\u0442\u044B \u043E\u0442 \u0441\u043F\u0430\u043C\u0430\nclass RateLimiter {\n    constructor(maxRequests, windowMs) {\n        this.maxRequests = maxRequests;\n        this.windowMs = windowMs;\n        this.requests = new Map();\n    }\n    \n    isAllowed(identifier) {\n        const now = Date.now();\n        const windowStart = now - this.windowMs;\n        \n        if (!this.requests.has(identifier)) {\n            this.requests.set(identifier, []);\n        }\n        \n        const userRequests = this.requests.get(identifier);\n        \n        const validRequests = userRequests.filter(time => time > windowStart);\n        this.requests.set(identifier, validRequests);\n        \n        if (validRequests.length >= this.maxRequests) {\n            SecurityErrorHandler.logSecurityEvent('rate_limit_exceeded', {\n                identifier,\n                requestCount: validRequests.length,\n                limit: this.maxRequests\n            });\n            return false;\n        }\n        \n        validRequests.push(now);\n        return true;\n    }\n}\n\nclass SecureMemoryManager {\n    static secureWipe(buffer) {\n        if (buffer instanceof ArrayBuffer) {\n            const view = new Uint8Array(buffer);\n            crypto.getRandomValues(view);\n        } else if (buffer instanceof Uint8Array) {\n            crypto.getRandomValues(buffer);\n        }\n    }\n    \n    static secureDelete(obj, prop) {\n        if (obj[prop]) {\n            this.secureWipe(obj[prop]);\n            delete obj[prop];\n        }\n    }\n}\n\nclass EnhancedSecureFileTransfer {\n    constructor(webrtcManager, onProgress, onComplete, onError, onFileReceived, onIncomingFileRequest) {\n        this.webrtcManager = webrtcManager;\n        this.onProgress = onProgress;\n        this.onComplete = onComplete;\n        this.onError = onError;\n        this.onFileReceived = onFileReceived;\n        this.onIncomingFileRequest = onIncomingFileRequest;\n        \n        // Validate webrtcManager\n        if (!webrtcManager) {\n            throw new Error('webrtcManager is required for EnhancedSecureFileTransfer');\n        }\n        \n        SecureFileTransferContext.getInstance().setFileTransferSystem(this);\n        \n        this.atomicOps = new AtomicOperations();\n        this.rateLimiter = new RateLimiter(10, 60000);\n\n        this.signingKey = null;\n        this.verificationKey = null;\n        \n        // Transfer settings\n        // NOTE: chunks are AES-GCM encrypted (+16-byte tag) and Base64-encoded\n        // before being wrapped in a JSON `file_chunk` message. Base64 inflates the\n        // payload by ~4/3, so the actual bytes handed to RTCDataChannel.send() are\n        // much larger than CHUNK_SIZE. The SCTP interop floor for a single WebRTC\n        // message is 64 KB (65536 bytes) \u2014 Safari and any peer whose SDP omits\n        // `a=max-message-size` enforce exactly this limit and will throw on larger\n        // sends. A 16 KB chunk yields a ~22 KB on-wire message, safely under that\n        // floor on every browser. (64 KB chunks produced ~87 KB messages, which\n        // silently failed to send and broke transfers cross-browser.)\n        this.CHUNK_SIZE = 16 * 1024; // 16 KB raw -> ~22 KB on the wire (SCTP-safe)\n        // Inbound chunks may legitimately be larger (e.g. an older peer that still\n        // sends 64 KB chunks), so validate received metadata against this ceiling\n        // rather than our own outbound CHUNK_SIZE.\n        this.MAX_RECEIVE_CHUNK_SIZE = 64 * 1024;\n        this.MAX_FILE_SIZE = 100 * 1024 * 1024; // 100 MB limit\n        this.MAX_CONCURRENT_TRANSFERS = 3;\n        this.CHUNK_TIMEOUT = 30000; // 30 seconds per chunk\n        this.RETRY_ATTEMPTS = 3;\n\n        this.FILE_TYPE_RESTRICTIONS = {\n            pdf: {\n                extensions: ['.pdf'],\n                mimeTypes: ['application/pdf', 'application/x-pdf', 'application/acrobat'],\n                maxSize: 50 * 1024 * 1024,\n                category: 'PDF',\n                description: 'PDF'\n            },\n\n            text: {\n                extensions: ['.txt'],\n                mimeTypes: ['text/plain', 'application/txt'],\n                maxSize: 10 * 1024 * 1024,\n                category: t('fileType.text'),\n                description: 'TXT'\n            },\n\n            images: {\n                extensions: ['.jpg', '.jpeg', '.png', '.gif', '.webp', '.bmp', '.ico'],\n                mimeTypes: [\n                    'image/jpeg',\n                    'image/jpg',\n                    'image/pjpeg',\n                    'image/png',\n                    'image/gif',\n                    'image/webp',\n                    'image/bmp',\n                    'image/x-windows-bmp',\n                    'image/x-icon',\n                    'image/vnd.microsoft.icon'\n                ],\n                maxSize: 25 * 1024 * 1024, // 25 MB\n                category: t('fileType.images'),\n                description: 'JPG, JPEG, PNG, GIF, WEBP, BMP, ICO'\n            },\n\n            archives: {\n                extensions: ['.zip'],\n                mimeTypes: [\n                    'application/zip',\n                    'application/x-zip',\n                    'application/x-zip-compressed',\n                    'multipart/x-zip'\n                ],\n                maxSize: 100 * 1024 * 1024, // 100 MB\n                category: t('fileType.archives'),\n                description: 'ZIP'\n            },\n\n            // Encrypted voice messages. Recorded in-browser via MediaRecorder and\n            // sent as a normal chunked+AES-GCM transfer, so they inherit the exact\n            // same end-to-end security as files. The app normalises the mime to a\n            // bare `audio/webm` (or `audio/mp4` on Safari) before sending so the\n            // codec-suffixed MediaRecorder type still matches this allow-list.\n            voice: {\n                extensions: ['.webm', '.ogg', '.oga', '.opus', '.m4a', '.mp4', '.mp3', '.wav'],\n                mimeTypes: [\n                    'audio/webm',\n                    'audio/ogg',\n                    'audio/opus',\n                    'audio/mp4',\n                    'audio/mpeg',\n                    'audio/mp3',\n                    'audio/wav',\n                    'audio/x-m4a',\n                    'audio/aac'\n                ],\n                maxSize: 20 * 1024 * 1024, // 20 MB (well beyond any sane voice note)\n                category: 'Voice',\n                description: t('fileType.voice')\n            }\n        };\n        this.BLOCKED_EXTENSIONS = new Set([\n            '.exe', '.bat', '.cmd', '.sh', '.js', '.msi', '.dmg', '.app',\n            '.jar', '.scr', '.ps1', '.vbs', '.html', '.svg'\n        ]);\n        // Generic MIME types browsers emit when they cannot determine a real one.\n        // Treated as acceptable for any allowed extension.\n        this._genericMimeTypes = new Set(['application/octet-stream', 'application/binary']);\n        // Union of every recognised allowed MIME type (incl. cross-OS aliases),\n        // used to keep MIME advisory rather than a strict per-type gate.\n        this._allowedMimeTypes = new Set();\n        for (const typeConfig of Object.values(this.FILE_TYPE_RESTRICTIONS)) {\n            for (const mime of typeConfig.mimeTypes) this._allowedMimeTypes.add(mime);\n        }\n        \n        // Active transfers tracking\n        this.activeTransfers = new Map(); // fileId -> transfer state\n        this.receivingTransfers = new Map(); // fileId -> receiving state\n        this.pendingIncomingTransfers = new Map(); // fileId -> validated metadata awaiting consent\n        this.transferQueue = []; // Queue for pending transfers\n        this.pendingChunks = new Map();\n        this.incomingOfferLimiter = new RateLimiter(5, 60000);\n        // Chunks are 16 KB, so a 100 MB file is ~6400 chunks. The previous caps\n        // (240 aggregate / 120 per-transfer per minute) throttled to ~64 KB/s and\n        // KILLED any file larger than ~3.8 MB mid-transfer. Size the limits to the\n        // worst-case file plus retransmission headroom so legitimate transfers are\n        // never starved, while still bounding a flooding peer.\n        this.incomingChunkLimiter = new RateLimiter(60000, 60000); // aggregate ceiling (~16 MB/s)\n        this.incomingTransferChunkLimiters = new Map();\n        this.MAX_INCOMING_CHUNKS_PER_TRANSFER_PER_MINUTE = 30000; // per transfer (~8 MB/s)\n        this.MAX_PENDING_INCOMING_TRANSFERS = 3;\n\n        // Voice notes are the one transfer accepted without a consent prompt, and\n        // `isVoice` is set by the SENDER (deliberately outside the signed\n        // fileHash, since it is presentation metadata). Anything that skips the\n        // prompt therefore has to qualify on its own properties rather than on\n        // the sender's assertion \u2014 see rejectVoiceAutoAcceptReason().\n        // 4 MB is ~5 minutes of Opus at 96 kbps \u2014 well past any real voice note,\n        // and a twentieth of what the `voice` type's 20 MB ceiling used to allow.\n        this.MAX_AUTO_ACCEPT_VOICE_SIZE = 4 * 1024 * 1024;\n        // A whole session's worth of auto-accepted audio. Past this the peer can\n        // still send voice notes, they just need the ordinary consent card.\n        this.MAX_AUTO_ACCEPT_VOICE_SESSION_BYTES = 64 * 1024 * 1024;\n        this.autoAcceptedVoiceBytes = 0;\n        \n        // Session key derivation\n        this.sessionKeys = new Map(); // fileId -> derived session key\n        \n        // Security\n        this.processedChunks = new Set(); // Prevent replay attacks\n        this.transferNonces = new Map(); // fileId -> current nonce counter\n        this.receivedFileBuffers = new Map(); // fileId -> { buffer:ArrayBuffer, type:string, name:string, size:number }\n        this.MAX_RETAINED_RECEIVED_FILE_BUFFERS = 3;\n\n        this.setupFileMessageHandlers();\n\n        if (this.webrtcManager) {\n            this.webrtcManager.fileTransferSystem = this;\n        }\n    }\n\n    // ============================================\n    // FILE TYPE VALIDATION SYSTEM\n    // ============================================\n\n    getFileType(file) {\n        const fileName = String(file?.name || '').toLowerCase();\n        const extensionIndex = fileName.lastIndexOf('.');\n        const fileExtension = extensionIndex >= 0 ? fileName.substring(extensionIndex) : '';\n        const mimeType = String(file?.type || '').toLowerCase();\n\n        // The extension allow-list (plus BLOCKED_EXTENSIONS) is the security\n        // boundary. MIME is only an advisory signal: it is client-supplied,\n        // varies across browsers/OSes, and is frequently empty. We accept an\n        // allowed extension when the MIME is absent, generic, or belongs to any\n        // recognised allowed type, but still reject a blatantly foreign MIME\n        // (e.g. an executable MIME on a \".png\") as a spoofing signal.\n        for (const [typeKey, typeConfig] of Object.entries(this.FILE_TYPE_RESTRICTIONS)) {\n            const extensionAllowed = typeConfig.extensions.includes(fileExtension);\n            if (!extensionAllowed) continue;\n            const mimeAcceptable = !mimeType\n                || this._genericMimeTypes.has(mimeType)\n                || this._allowedMimeTypes.has(mimeType);\n            if (mimeAcceptable) {\n                return {\n                    type: typeKey,\n                    category: typeConfig.category,\n                    description: typeConfig.description,\n                    maxSize: typeConfig.maxSize,\n                    allowed: true,\n                    extension: fileExtension,\n                    mimeType\n                };\n            }\n        }\n\n        return {\n            type: 'blocked',\n            category: t('fileType.unsupported'),\n            description: 'Allowed: JPG, JPEG, PNG, GIF, WEBP, BMP, ICO, PDF, TXT, ZIP',\n            maxSize: this.MAX_FILE_SIZE,\n            allowed: false,\n            extension: fileExtension,\n            mimeType\n        };\n    }\n\n    validateFile(file) {\n        const fileType = this.getFileType(file);\n        const errors = [];\n        const fileName = String(file?.name || '');\n        const lowerName = fileName.toLowerCase();\n        const extensionIndex = lowerName.lastIndexOf('.');\n        const fileExtension = extensionIndex >= 0 ? lowerName.substring(extensionIndex) : '';\n\n        if (this.BLOCKED_EXTENSIONS.has(fileExtension)) {\n            errors.push(`File rejected: ${fileExtension} files are not allowed for security reasons.`);\n        }\n\n        if (file.size > fileType.maxSize) {\n            errors.push(`File size (${this.formatFileSize(file.size)}) exceeds maximum allowed for ${fileType.category} (${this.formatFileSize(fileType.maxSize)})`);\n        }\n\n        if (!fileType.allowed && !this.BLOCKED_EXTENSIONS.has(fileExtension)) {\n            errors.push(`File rejected: unsupported file type. Supported types: ${fileType.description}`);\n        }\n\n        if (file.size > this.MAX_FILE_SIZE) {\n            errors.push(`File size (${this.formatFileSize(file.size)}) exceeds general limit (${this.formatFileSize(this.MAX_FILE_SIZE)})`);\n        }\n        \n        return {\n            isValid: errors.length === 0,\n            errors: errors,\n            fileType: fileType,\n            fileSize: file.size,\n            formattedSize: this.formatFileSize(file.size)\n        };\n    }\n\n    normalizeDisplayFileName(fileName) {\n        return String(fileName || '')\n            .normalize('NFKC')\n            .replace(/[\\u0000-\\u001F\\u007F]/g, '')\n            .replace(/[\\\\/]+/g, '_')\n            .trim()\n            .slice(0, 255);\n    }\n\n    validateIncomingMetadata(metadata) {\n        const errors = [];\n        if (!metadata || typeof metadata !== 'object') errors.push('Invalid file transfer metadata');\n        if (!metadata?.fileId || typeof metadata.fileId !== 'string') errors.push('Invalid file id');\n        if (!Number.isSafeInteger(metadata?.fileSize) || metadata.fileSize <= 0) errors.push('Invalid file size');\n        if (!Number.isSafeInteger(metadata?.totalChunks) || metadata.totalChunks <= 0) errors.push('Invalid chunk count');\n        if (!Number.isSafeInteger(metadata?.chunkSize) || metadata.chunkSize <= 0 || metadata.chunkSize > this.MAX_RECEIVE_CHUNK_SIZE) errors.push('Invalid chunk size');\n        if (!Array.isArray(metadata?.salt) || metadata.salt.length !== 32) errors.push('Invalid salt');\n\n        const rawName = typeof metadata?.fileName === 'string' ? metadata.fileName : '';\n        const displayName = this.normalizeDisplayFileName(rawName);\n        const hasDangerousName =\n            !rawName ||\n            rawName !== rawName.trim() ||\n            /[\\u0000-\\u001F\\u007F]/.test(rawName) ||\n            /[\\\\/]/.test(rawName) ||\n            rawName === '.' ||\n            rawName === '..' ||\n            displayName.length === 0;\n        if (hasDangerousName) errors.push('Dangerous file name');\n\n        if (errors.length === 0) {\n            const validation = this.validateFile({\n                name: displayName,\n                size: metadata.fileSize,\n                type: metadata.fileType || 'application/octet-stream'\n            });\n            if (!validation.isValid) errors.push(...validation.errors);\n        }\n\n        // A transfer only keeps its consent-free voice status if it actually looks\n        // like a voice note. Otherwise it stays a normal file and goes through the\n        // consent card \u2014 the transfer is not rejected, it just loses the shortcut.\n        const claimsVoice = !!metadata?.isVoice;\n        const voiceRejection = claimsVoice ? this.rejectVoiceAutoAcceptReason(metadata) : null;\n\n        return {\n            isValid: errors.length === 0,\n            errors,\n            displayName,\n            isVoice: claimsVoice && !voiceRejection,\n            voiceRejection\n        };\n    }\n\n    /**\n     * Why a transfer claiming to be a voice note may not skip the consent card.\n     * Returns null when it may. The generic MIME types that validateFile accepts\n     * for ordinary uploads (application/octet-stream and friends) are explicitly\n     * NOT enough here: they are what lets an arbitrary blob wear a `.mp4` name.\n     */\n    rejectVoiceAutoAcceptReason(metadata) {\n        const mimeType = String(metadata?.fileType || '').toLowerCase();\n        const size = metadata?.fileSize;\n\n        if (!mimeType.startsWith('audio/')) {\n            return `not an audio MIME type (${mimeType || 'absent'})`;\n        }\n        if (!this.FILE_TYPE_RESTRICTIONS.voice.mimeTypes.includes(mimeType)) {\n            return `unsupported audio MIME type (${mimeType})`;\n        }\n        if (!Number.isSafeInteger(size) || size <= 0 || size > this.MAX_AUTO_ACCEPT_VOICE_SIZE) {\n            return `too large to auto-accept (${this.formatFileSize(size || 0)} > ${this.formatFileSize(this.MAX_AUTO_ACCEPT_VOICE_SIZE)})`;\n        }\n        if (this.autoAcceptedVoiceBytes + size > this.MAX_AUTO_ACCEPT_VOICE_SESSION_BYTES) {\n            return 'session auto-accept budget for voice notes is exhausted';\n        }\n        return null;\n    }\n\n    formatFileSize(bytes) {\n        if (bytes === 0) return '0 B';\n        const k = 1024;\n        const sizes = ['B', 'KB', 'MB', 'GB'];\n        const i = Math.floor(Math.log(bytes) / Math.log(k));\n        return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];\n    }\n\n    getSupportedFileTypes() {\n        const supportedTypes = {};\n        \n        for (const [typeKey, typeConfig] of Object.entries(this.FILE_TYPE_RESTRICTIONS)) {\n            supportedTypes[typeKey] = {\n                category: typeConfig.category,\n                description: typeConfig.description,\n                extensions: typeConfig.extensions,\n                maxSize: this.formatFileSize(typeConfig.maxSize),\n                maxSizeBytes: typeConfig.maxSize\n            };\n        }\n        \n        return supportedTypes;\n    }\n\n    getFileTypeInfo() {\n        return {\n            supportedTypes: this.getSupportedFileTypes(),\n            generalMaxSize: this.formatFileSize(this.MAX_FILE_SIZE),\n            generalMaxSizeBytes: this.MAX_FILE_SIZE,\n            restrictions: this.FILE_TYPE_RESTRICTIONS\n        };\n    }\n\n    // ============================================\n    // ENCODING HELPERS (Base64 for efficient transport)\n    // ============================================\n    arrayBufferToBase64(buffer) {\n        const bytes = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer);\n        let binary = '';\n        const len = bytes.byteLength;\n        for (let i = 0; i < len; i++) {\n            binary += String.fromCharCode(bytes[i]);\n        }\n        return btoa(binary);\n    }\n\n    base64ToUint8Array(base64) {\n        const binaryString = atob(base64);\n        const len = binaryString.length;\n        const bytes = new Uint8Array(len);\n        for (let i = 0; i < len; i++) {\n            bytes[i] = binaryString.charCodeAt(i);\n        }\n        return bytes;\n    }\n\n    // ============================================\n    // PUBLIC ACCESSORS FOR RECEIVED FILES\n    // ============================================\n    getReceivedFileMeta(fileId) {\n        const entry = this.receivedFileBuffers.get(fileId);\n        if (!entry) return null;\n        return { fileId, fileName: entry.name, fileSize: entry.size, mimeType: entry.type };\n    }\n\n    async getBlob(fileId) {\n        const entry = this.receivedFileBuffers.get(fileId);\n        if (!entry) return null;\n        return new Blob([entry.buffer], { type: entry.type });\n    }\n\n    async getObjectURL(fileId) {\n        const blob = await this.getBlob(fileId);\n        if (!blob) return null;\n        return URL.createObjectURL(blob);\n    }\n\n    revokeObjectURL(url) {\n        try { URL.revokeObjectURL(url); } catch (_) {}\n    }\n\n    setupFileMessageHandlers() {\n        if (!this.webrtcManager.dataChannel) {\n            const setupRetry = setInterval(() => {\n                if (this.webrtcManager.dataChannel) {\n                    clearInterval(setupRetry);\n                    this.setupMessageInterception();\n                }\n            }, 100);\n\n            setTimeout(() => {\n                clearInterval(setupRetry);\n            }, 5000);\n            \n            return;\n        }\n        \n        // \u0415\u0441\u043B\u0438 dataChannel \u0443\u0436\u0435 \u0433\u043E\u0442\u043E\u0432, \u0441\u0440\u0430\u0437\u0443 \u043D\u0430\u0441\u0442\u0440\u0430\u0438\u0432\u0430\u0435\u043C\n        this.setupMessageInterception();\n    }\n\n    setupMessageInterception() {\n        try {\n            if (!this.webrtcManager.dataChannel) {\n                return;\n            }\n\n            if (this.webrtcManager) {\n                this.webrtcManager.fileTransferSystem = this;\n            }\n\n            if (this.webrtcManager.dataChannel.onmessage) {\n                this.originalOnMessage = this.webrtcManager.dataChannel.onmessage;\n            }\n\n            this.webrtcManager.dataChannel.onmessage = async (event) => {\n                try {\n                    if (event.data.length > MessageSizeValidator.MAX_MESSAGE_SIZE) {\n                        console.warn('\uD83D\uDD12 Message too large, ignoring');\n                        SecurityErrorHandler.logSecurityEvent('oversized_message_blocked');\n                        return;\n                    }\n                    \n                    if (typeof event.data === 'string') {\n                        try {\n                            const parsed = JSON.parse(event.data);\n                            \n                            MessageSizeValidator.isMessageSizeValid(parsed);\n                            \n                            if (this.isFileTransferMessage(parsed)) {\n                                await this.handleFileMessage(parsed);\n                                return; \n                            }\n                        } catch (parseError) {\n                            if (parseError.message === 'Message too large') {\n                                return; \n                            }\n                        }\n                    }\n\n                    if (this.originalOnMessage) {\n                        return this.originalOnMessage.call(this.webrtcManager.dataChannel, event);\n                    }\n                } catch (error) {\n                    console.error('\u274C Error in file system message interception:', error);\n                    if (this.originalOnMessage) {\n                        return this.originalOnMessage.call(this.webrtcManager.dataChannel, event);\n                    }\n                }\n            };\n        } catch (error) {\n            console.error('\u274C Failed to set up message interception:', error);\n        }\n    }\n\n    isFileTransferMessage(message) {\n        if (!message || typeof message !== 'object' || !message.type) {\n            return false;\n        }\n        \n        const fileMessageTypes = [\n            'file_transfer_start',\n            'file_transfer_response',\n            'file_chunk',\n            'chunk_confirmation',\n            'file_chunk_request',\n            'file_transfer_complete',\n            'file_transfer_error'\n        ];\n        \n        return fileMessageTypes.includes(message.type);\n    }\n\n    async handleFileMessage(message) {\n        try {\n            if (!this.webrtcManager.fileTransferSystem) {\n                try {\n                    if (typeof this.webrtcManager.initializeFileTransfer === 'function') {\n                        this.webrtcManager.initializeFileTransfer();\n                        \n                        let attempts = 0;\n                        const maxAttempts = 50; \n                        while (!this.webrtcManager.fileTransferSystem && attempts < maxAttempts) {\n                            await new Promise(resolve => setTimeout(resolve, 100));\n                            attempts++;\n                        }\n                        \n                        if (!this.webrtcManager.fileTransferSystem) {\n                            throw new Error('File transfer system initialization timeout');\n                        }\n                    } else {\n                        throw new Error('initializeFileTransfer method not available');\n                    }\n                } catch (initError) {\n                    console.error('\u274C Failed to initialize file transfer system:', initError);\n                    if (message.fileId) {\n                        const errorMessage = {\n                            type: 'file_transfer_error',\n                            fileId: message.fileId,\n                            error: 'File transfer system not available',\n                            timestamp: Date.now()\n                        };\n                        await this.sendSecureMessage(errorMessage);\n                    }\n                    return;\n                }\n            }\n            \n            switch (message.type) {\n                case 'file_transfer_start':\n                    await this.handleFileTransferStart(message);\n                    break;\n                    \n                case 'file_transfer_response':\n                    this.handleTransferResponse(message);\n                    break;\n                    \n                case 'file_chunk':\n                    await this.handleFileChunk(message);\n                    break;\n                    \n                case 'chunk_confirmation':\n                    this.handleChunkConfirmation(message);\n                    break;\n\n                case 'file_chunk_request':\n                    await this.handleChunkRequest(message);\n                    break;\n\n                case 'file_transfer_complete':\n                    this.handleTransferComplete(message);\n                    break;\n                    \n                case 'file_transfer_error':\n                    this.handleTransferError(message);\n                    break;\n                    \n                default:\n                    console.warn('\u26A0\uFE0F Unknown file message type:', message.type);\n            }\n            \n        } catch (error) {\n            console.error('\u274C Error handling file message:', error);\n\n            if (message.fileId) {\n                const errorMessage = {\n                    type: 'file_transfer_error',\n                    fileId: message.fileId,\n                    error: error.message,\n                    timestamp: Date.now()\n                };\n                await this.sendSecureMessage(errorMessage);\n            }\n        }\n    }\n\n    // ============================================\n    // SIMPLIFIED KEY DERIVATION - USE SHARED DATA\n    // ============================================\n\n    async deriveFileSessionKey(fileId) {\n        try {\n            \n            if (!this.webrtcManager.keyFingerprint || !this.webrtcManager.sessionSalt) {\n                throw new Error('WebRTC session data not available');\n            }\n\n            const fileSalt = crypto.getRandomValues(new Uint8Array(32));\n\n            const encoder = new TextEncoder();\n            const fingerprintData = encoder.encode(this.webrtcManager.keyFingerprint);\n            const fileIdData = encoder.encode(fileId);\n\n            const sessionSaltArray = new Uint8Array(this.webrtcManager.sessionSalt);\n            const combinedSeed = new Uint8Array(\n                fingerprintData.length + \n                sessionSaltArray.length + \n                fileSalt.length + \n                fileIdData.length\n            );\n            \n            let offset = 0;\n            combinedSeed.set(fingerprintData, offset);\n            offset += fingerprintData.length;\n            combinedSeed.set(sessionSaltArray, offset);\n            offset += sessionSaltArray.length;\n            combinedSeed.set(fileSalt, offset);\n            offset += fileSalt.length;\n            combinedSeed.set(fileIdData, offset);\n\n            const keyMaterial = await crypto.subtle.digest('SHA-256', combinedSeed);\n\n            const fileSessionKey = await crypto.subtle.importKey(\n                'raw',\n                keyMaterial,\n                { name: 'AES-GCM' },\n                false,\n                ['encrypt', 'decrypt']\n            );\n\n            this.sessionKeys.set(fileId, {\n                key: fileSessionKey,\n                salt: Array.from(fileSalt),\n                created: Date.now()\n            });\n\n            return { key: fileSessionKey, salt: Array.from(fileSalt) };\n\n        } catch (error) {\n            console.error('\u274C Failed to derive file session key:', error);\n            throw error;\n        }\n    }\n\n    async deriveFileSessionKeyFromSalt(fileId, saltArray) {\n        try {\n            if (!saltArray || !Array.isArray(saltArray) || saltArray.length !== 32) {\n                throw new Error(`Invalid salt: ${saltArray?.length || 0} bytes`);\n            }\n            \n            if (!this.webrtcManager.keyFingerprint || !this.webrtcManager.sessionSalt) {\n                throw new Error('WebRTC session data not available');\n            }\n\n            const encoder = new TextEncoder();\n            const fingerprintData = encoder.encode(this.webrtcManager.keyFingerprint);\n            const fileIdData = encoder.encode(fileId);\n\n            const fileSalt = new Uint8Array(saltArray);\n            const sessionSaltArray = new Uint8Array(this.webrtcManager.sessionSalt);\n\n            const combinedSeed = new Uint8Array(\n                fingerprintData.length + \n                sessionSaltArray.length + \n                fileSalt.length + \n                fileIdData.length\n            );\n            \n            let offset = 0;\n            combinedSeed.set(fingerprintData, offset);\n            offset += fingerprintData.length;\n            combinedSeed.set(sessionSaltArray, offset);\n            offset += sessionSaltArray.length;\n            combinedSeed.set(fileSalt, offset);\n            offset += fileSalt.length;\n            combinedSeed.set(fileIdData, offset);\n\n            const keyMaterial = await crypto.subtle.digest('SHA-256', combinedSeed);\n\n            const fileSessionKey = await crypto.subtle.importKey(\n                'raw',\n                keyMaterial,\n                { name: 'AES-GCM' },\n                false,\n                ['encrypt', 'decrypt']\n            );\n\n            this.sessionKeys.set(fileId, {\n                key: fileSessionKey,\n                salt: saltArray,\n                created: Date.now()\n            });\n\n            return fileSessionKey;\n\n        } catch (error) {\n            console.error('\u274C Failed to derive session key from salt:', error);\n            throw error;\n        }\n    }\n\n    // ============================================\n    // FILE TRANSFER IMPLEMENTATION\n    // ============================================\n\n    // Emit a progress update to the app layer. `direction` is 'up' for the\n    // sender and 'down' for the receiver. `uiId` (sender only) lets the UI match\n    // the event to a locally-created bubble before sendFile() has resolved a\n    // fileId. Voice fields ride along so the receiver can render the waveform.\n    _emitTransferProgress(state, direction) {\n        if (typeof this.onProgress !== 'function' || !state) return;\n        const total = state.totalChunks || 0;\n        const done = direction === 'up' ? (state.sentChunks || 0) : (state.receivedCount || 0);\n        const progress = total > 0 ? Math.min(100, Math.round((done / total) * 100)) : 0;\n        try {\n            this.onProgress({\n                fileId: state.fileId,\n                uiId: state.uiId || null,\n                direction,\n                progress,\n                transferredChunks: done,\n                totalChunks: total,\n                isVoice: !!state.isVoice,\n                voice: state.voice || null\n            });\n        } catch (_) { /* progress is best-effort */ }\n    }\n\n    async sendFile(file, options = {}) {\n        try {\n            // Validate webrtcManager\n            if (!this.webrtcManager) {\n                throw new Error('WebRTC Manager not initialized');\n            }\n\n            const clientId = this.getClientIdentifier();\n            if (!this.rateLimiter.isAllowed(clientId)) {\n                SecurityErrorHandler.logSecurityEvent('rate_limit_exceeded', { clientId });\n                throw new Error('Rate limit exceeded. Please wait before sending another file.');\n            }\n\n            if (!file || !file.size) {\n                throw new Error('Invalid file object');\n            }\n\n            const validation = this.validateFile(file);\n            if (!validation.isValid) {\n                const errorMessage = validation.errors.join('. ');\n                throw new Error(errorMessage);\n            }\n\n            if (this.activeTransfers.size >= this.MAX_CONCURRENT_TRANSFERS) {\n                throw new Error('Maximum concurrent transfers reached');\n            }\n\n            // Generate unique file ID\n            const fileId = `file_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;\n            \n            // Calculate file hash for integrity verification\n            const fileHash = await this.calculateFileHash(file);\n            \n            // Derive session key for this file\n            const keyResult = await this.deriveFileSessionKey(fileId);\n            const sessionKey = keyResult.key;\n            const salt = keyResult.salt;\n            \n            // Create transfer state\n            const transferState = {\n                fileId: fileId,\n                file: file,\n                fileHash: fileHash,\n                sessionKey: sessionKey,\n                salt: salt, \n                totalChunks: Math.ceil(file.size / this.CHUNK_SIZE),\n                sentChunks: 0,\n                confirmedChunks: 0,\n                startTime: Date.now(),\n                status: 'preparing',\n                retryCount: 0,\n                lastChunkTime: Date.now(),\n                // Voice-message extras (undefined for ordinary files).\n                isVoice: !!(options && options.voice),\n                voice: (options && options.voice) ? options.voice : null,\n                uiId: (options && options.uiId) ? options.uiId : null\n            };\n\n            this.activeTransfers.set(fileId, transferState);\n            this.transferNonces.set(fileId, 0);\n\n            const consentPromise = new Promise((resolve, reject) => {\n                transferState.resolveConsent = resolve;\n                transferState.rejectConsent = reject;\n                transferState.consentTimeout = setTimeout(() => {\n                    transferState.consentTimeout = null;\n                    reject(new Error('Transfer timeout'));\n                }, 30000);\n            });\n\n            // Send file metadata first\n            await this.sendFileMetadata(transferState);\n            \n            // Wait for explicit receiver consent before any chunks are sent.\n            await consentPromise;\n            \n            await this.startChunkTransmission(transferState);\n            \n            return fileId;\n\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C File sending failed:', safeError);\n            if (this.onError) this.onError(safeError);\n            throw new Error(safeError);\n        }\n    }\n\n    async sendFileMetadata(transferState) {\n        try {\n            const metadata = {\n                type: 'file_transfer_start',\n                fileId: transferState.fileId,\n                fileName: transferState.file.name,\n                fileSize: transferState.file.size,\n                fileType: transferState.file.type || 'application/octet-stream',\n                fileHash: transferState.fileHash,\n                totalChunks: transferState.totalChunks,\n                chunkSize: this.CHUNK_SIZE,\n                salt: transferState.salt,\n                timestamp: Date.now(),\n                version: '2.0'\n            };\n\n            // Voice descriptor (duration + waveform peaks) travels as unsigned\n            // presentation metadata \u2014 the audio bytes themselves stay integrity-\n            // protected by the signed `fileHash`. `isVoice` lets the receiver\n            // auto-accept and render a voice bubble instead of a file card.\n            if (transferState.isVoice) {\n                metadata.isVoice = true;\n                if (transferState.voice) metadata.voice = transferState.voice;\n            }\n\n            if (this.signingKey) {\n                try {\n                    metadata.signature = await FileMetadataSigner.signFileMetadata(metadata, this.signingKey);\n                    console.log('\uD83D\uDD12 File metadata signed successfully');\n                } catch (signError) {\n                    SecurityErrorHandler.logSecurityEvent('signature_failed', { \n                        fileId: transferState.fileId, \n                        error: signError.message \n                    });\n                }\n            }\n\n            // Send metadata through secure channel\n            await this.sendSecureMessage(metadata);\n            \n            transferState.status = 'metadata_sent';\n\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to send file metadata:', safeError);\n            transferState.status = 'failed';\n            throw new Error(safeError);\n        }\n    }\n\n    async startChunkTransmission(transferState) {\n        try {\n            transferState.status = 'transmitting';\n            \n            const file = transferState.file;\n            const totalChunks = transferState.totalChunks;\n            \n            for (let chunkIndex = 0; chunkIndex < totalChunks; chunkIndex++) {\n                const start = chunkIndex * this.CHUNK_SIZE;\n                const end = Math.min(start + this.CHUNK_SIZE, file.size);\n                \n                // Read chunk from file\n                const chunkData = await this.readFileChunk(file, start, end);\n                \n                // Send chunk (\u0441 \u0443\u0447\u0451\u0442\u043E\u043C backpressure)\n                await this.sendFileChunk(transferState, chunkIndex, chunkData);\n                \n                // Update progress\n                transferState.sentChunks++;\n                const progress = Math.round((transferState.sentChunks / totalChunks) * 95) + 5; // 5-100%\n                this._emitTransferProgress(transferState, 'up');\n\n                await this.waitForBackpressure();\n            }\n            \n            transferState.status = 'waiting_confirmation';\n\n            // Keep the file + session key alive while the receiver may still be\n            // re-requesting missing chunks (e.g. after a connection blip). The\n            // sender is only torn down once the receiver confirms completion or\n            // after a long idle with no chunk requests/confirmations.\n            this._armSenderIdleTimeout(transferState);\n\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Chunk transmission failed:', safeError);\n            transferState.status = 'failed';\n            throw new Error(safeError);\n        }\n    }\n\n    // Resets a long idle timer; the sender stays available to retransmit missing\n    // chunks until the receiver finishes or this fires after sustained silence.\n    _armSenderIdleTimeout(transferState) {\n        const IDLE_MS = 180000; // 3 minutes with no activity from the receiver\n        if (transferState._idleTimeout) clearTimeout(transferState._idleTimeout);\n        transferState._idleTimeout = setTimeout(() => {\n            const state = this.activeTransfers.get(transferState.fileId);\n            if (state && state.status !== 'completed') {\n                this.cleanupTransfer(transferState.fileId);\n            }\n        }, IDLE_MS);\n    }\n\n    // Receiver asked us to re-send specific chunk indices (loss recovery / resume).\n    async handleChunkRequest(message) {\n        const transferState = this.activeTransfers.get(message?.fileId);\n        if (!transferState || !transferState.file) return;\n        const missing = Array.isArray(message.missing) ? message.missing : [];\n        if (missing.length === 0) return;\n\n        this._armSenderIdleTimeout(transferState);\n        transferState.status = 'transmitting';\n\n        const MAX_PER_REQUEST = 512;\n        const indices = missing.slice(0, MAX_PER_REQUEST);\n        for (const idx of indices) {\n            if (!Number.isInteger(idx) || idx < 0 || idx >= transferState.totalChunks) continue;\n            try {\n                const start = idx * this.CHUNK_SIZE;\n                const end = Math.min(start + this.CHUNK_SIZE, transferState.file.size);\n                const chunkData = await this.readFileChunk(transferState.file, start, end);\n                await this.sendFileChunk(transferState, idx, chunkData);\n                await this.waitForBackpressure();\n            } catch (error) {\n                console.warn('\u26A0\uFE0F Failed to retransmit chunk', idx, SecurityErrorHandler.sanitizeError(error));\n            }\n        }\n\n        if (transferState.status === 'transmitting') {\n            transferState.status = 'waiting_confirmation';\n        }\n        this._armSenderIdleTimeout(transferState);\n    }\n\n    async readFileChunk(file, start, end) {\n        try {\n            const blob = file.slice(start, end);\n            return await blob.arrayBuffer();\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to read file chunk:', safeError);\n            throw new Error(safeError);\n        }\n    }\n\n    async sendFileChunk(transferState, chunkIndex, chunkData) {\n        try {\n            const sessionKey = transferState.sessionKey;\n            const nonce = crypto.getRandomValues(new Uint8Array(12));\n            \n            // Encrypt chunk data\n            const encryptedChunk = await crypto.subtle.encrypt(\n                {\n                    name: 'AES-GCM',\n                    iv: nonce\n                },\n                sessionKey,\n                chunkData\n            );\n            \n            // Use Base64 to drastically reduce JSON overhead\n            const encryptedB64 = this.arrayBufferToBase64(new Uint8Array(encryptedChunk));\n            const chunkMessage = {\n                type: 'file_chunk',\n                fileId: transferState.fileId,\n                chunkIndex: chunkIndex,\n                totalChunks: transferState.totalChunks,\n                nonce: Array.from(nonce),\n                encryptedDataB64: encryptedB64,\n                chunkSize: chunkData.byteLength,\n                timestamp: Date.now()\n            };\n\n            await this.waitForBackpressure();\n            // Send chunk through secure channel\n            await this.sendSecureMessage(chunkMessage);\n            \n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to send file chunk:', safeError);\n            throw new Error(safeError);\n        }\n    }\n\n    async sendSecureMessage(message) {\n\n        const messageString = JSON.stringify(message);\n        const dc = this.webrtcManager?.dataChannel;\n        const maxRetries = 10;\n        let attempt = 0;\n        const wait = (ms) => new Promise(r => setTimeout(r, ms));\n\n        while (true) {\n            try {\n                if (!dc || dc.readyState !== 'open') {\n                    throw new Error('Data channel not ready');\n                }\n                await this.waitForBackpressure();\n                dc.send(messageString);\n                return; // success\n            } catch (error) {\n                const msg = String(error?.message || '');\n                const queueFull = msg.includes('send queue is full') || msg.includes('bufferedAmount');\n                const opErr = error?.name === 'OperationError';\n                if ((queueFull || opErr) && attempt < maxRetries) {\n                    attempt++;\n                    await this.waitForBackpressure();\n                    await wait(Math.min(50 * attempt, 500));\n                    continue;\n                }\n                console.error('\u274C Failed to send secure message:', error);\n                throw error;\n            }\n        }\n    }\n\n    async waitForBackpressure() {\n        try {\n            const dc = this.webrtcManager?.dataChannel;\n            if (!dc) return;\n\n            if (typeof dc.bufferedAmountLowThreshold === 'number') {\n                if (dc.bufferedAmount > dc.bufferedAmountLowThreshold) {\n                    await new Promise(resolve => {\n                        const handler = () => {\n                            dc.removeEventListener('bufferedamountlow', handler);\n                            resolve();\n                        };\n                        dc.addEventListener('bufferedamountlow', handler, { once: true });\n                    });\n                }\n                return;\n            }\n\n            const softLimit = 4 * 1024 * 1024;\n            while (dc.bufferedAmount > softLimit) {\n                await new Promise(r => setTimeout(r, 20));\n            }\n        } catch (_) {\n            // ignore\n        }\n    }\n\n    async calculateFileHash(file) {\n        try {\n            const arrayBuffer = await file.arrayBuffer();\n            const hashBuffer = await crypto.subtle.digest('SHA-256', arrayBuffer);\n            const hashArray = Array.from(new Uint8Array(hashBuffer));\n            return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n        } catch (error) {\n            console.error('\u274C File hash calculation failed:', error);\n            throw error;\n        }\n    }\n\n    // ============================================\n    // MESSAGE HANDLERS\n    // ============================================\n\n    async handleFileTransferStart(metadata) {\n        try {\n            const clientId = this.getClientIdentifier();\n            if (!this.incomingOfferLimiter.isAllowed(clientId)) {\n                throw new Error('Incoming file request rate limit exceeded');\n            }\n\n            const validation = this.validateIncomingMetadata(metadata);\n            if (!validation.isValid) throw new Error(validation.errors.join('. '));\n\n            if (metadata.signature && this.verificationKey) {\n                try {\n                    const isValid = await FileMetadataSigner.verifyFileMetadata(\n                        metadata, \n                        metadata.signature, \n                        this.verificationKey\n                    );\n                    \n                    if (!isValid) {\n                        SecurityErrorHandler.logSecurityEvent('invalid_metadata_signature', { \n                            fileId: metadata.fileId \n                        });\n                        throw new Error('Invalid file metadata signature');\n                    }\n                    \n                    console.log('\uD83D\uDD12 File metadata signature verified successfully');\n                } catch (verifyError) {\n                    SecurityErrorHandler.logSecurityEvent('verification_failed', { \n                        fileId: metadata.fileId, \n                        error: verifyError.message \n                    });\n                    throw new Error('File metadata verification failed');\n                }\n            }\n            \n            // Check if we already have this transfer\n            if (this.receivingTransfers.has(metadata.fileId) || this.pendingIncomingTransfers.has(metadata.fileId)) {\n                return;\n            }\n\n            if (this.pendingIncomingTransfers.size >= this.MAX_PENDING_INCOMING_TRANSFERS) {\n                throw new Error('Too many pending incoming file requests');\n            }\n\n            if (validation.voiceRejection) {\n                // Downgraded, not dropped: the peer may well be sending something\n                // legitimate that simply does not qualify for the consent-free path.\n                console.warn(`Voice auto-accept declined, falling back to consent: ${validation.voiceRejection}`);\n            }\n\n            const pendingMetadata = {\n                ...metadata,\n                // Never carry the sender's claim forward \u2014 only our own verdict.\n                isVoice: validation.isVoice,\n                fileName: validation.displayName,\n                receivedAt: Date.now()\n            };\n            this.pendingIncomingTransfers.set(metadata.fileId, pendingMetadata);\n\n            if (validation.isVoice) {\n                this.autoAcceptedVoiceBytes += metadata.fileSize;\n            }\n\n            if (typeof this.onIncomingFileRequest === 'function') {\n                this.onIncomingFileRequest({\n                    fileId: pendingMetadata.fileId,\n                    fileName: pendingMetadata.fileName,\n                    fileSize: pendingMetadata.fileSize,\n                    mimeType: pendingMetadata.fileType || 'application/octet-stream',\n                    // Voice notes auto-accept and render inline (no consent card).\n                    // This flag is the receiver's decision, not the sender's.\n                    isVoice: validation.isVoice,\n                    voice: pendingMetadata.voice || null\n                });\n            } else {\n                await this.rejectIncomingFile(metadata.fileId, t('file.consentUnavailable'));\n            }\n            \n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to handle file transfer start:', safeError);\n            \n            // Send error response\n            const errorResponse = {\n                type: 'file_transfer_response',\n                fileId: metadata.fileId,\n                accepted: false,\n                error: safeError, \n                timestamp: Date.now()\n            };\n            await this.sendSecureMessage(errorResponse);\n        }\n    }\n\n    async handleFileChunk(chunkMessage) {\n        return this.atomicOps.withLock(\n            `chunk-${chunkMessage.fileId}`, \n            async () => {\n                try {\n                    let receivingState = this.receivingTransfers.get(chunkMessage.fileId);\n\n                    // Never buffer chunks before explicit consent.\n                    if (!receivingState) {\n                        return;\n                    }\n\n                    // Already assembled \u2014 ignore late/duplicate (retransmitted) chunks.\n                    if (receivingState._assembled || receivingState.status === 'completed') {\n                        return;\n                    }\n\n                    if (!this._isIncomingChunkAllowed(chunkMessage.fileId)) {\n                        console.warn('\u26A0\uFE0F Incoming file chunk rate limit exceeded; cleaning up transfer:', chunkMessage.fileId);\n                        this.cleanupReceivingTransfer(chunkMessage.fileId);\n                        return;\n                    }\n                    \n                    // Update last chunk time\n                    receivingState.lastChunkTime = Date.now();\n                    \n                    // Check if chunk already received\n                    if (receivingState.receivedChunks.has(chunkMessage.chunkIndex)) {\n                        return;\n                    }\n                    \n                    // Validate chunk\n                    if (chunkMessage.chunkIndex < 0 || chunkMessage.chunkIndex >= receivingState.totalChunks) {\n                        throw new Error(`Invalid chunk index: ${chunkMessage.chunkIndex}`);\n                    }\n                    \n                    // Decrypt chunk\n                    const nonce = new Uint8Array(chunkMessage.nonce);\n                    // Backward compatible: prefer Base64, fallback to numeric array\n                    let encryptedData;\n                    if (chunkMessage.encryptedDataB64) {\n                        encryptedData = this.base64ToUint8Array(chunkMessage.encryptedDataB64);\n                    } else if (chunkMessage.encryptedData) {\n                        encryptedData = new Uint8Array(chunkMessage.encryptedData);\n                    } else {\n                        throw new Error('Missing encrypted data');\n                    }\n                    \n                    const decryptedChunk = await crypto.subtle.decrypt(\n                        {\n                            name: 'AES-GCM',\n                            iv: nonce\n                        },\n                        receivingState.sessionKey,\n                        encryptedData\n                    );\n                    \n                    // Verify chunk size\n                    if (decryptedChunk.byteLength !== chunkMessage.chunkSize) {\n                        throw new Error(`Chunk size mismatch: expected ${chunkMessage.chunkSize}, got ${decryptedChunk.byteLength}`);\n                    }\n                    \n                    // Store chunk\n                    receivingState.receivedChunks.set(chunkMessage.chunkIndex, decryptedChunk);\n                    receivingState.receivedCount++;\n                    this._emitTransferProgress(receivingState, 'down');\n\n                    // Send chunk confirmation\n                    const confirmation = {\n                        type: 'chunk_confirmation',\n                        fileId: chunkMessage.fileId,\n                        chunkIndex: chunkMessage.chunkIndex,\n                        timestamp: Date.now()\n                    };\n                    await this.sendSecureMessage(confirmation);\n                    \n                    // Check if all chunks received\n                    if (receivingState.receivedCount === receivingState.totalChunks) {\n                        await this.assembleFile(receivingState);\n                    }\n                    \n                } catch (error) {\n                    // A single bad/lost chunk must NOT kill the whole transfer:\n                    // drop it and let the receiver's stall detector re-request it.\n                    // (The data channel is reliable+ordered, so this path is rare \u2014\n                    // typically a transient decrypt hiccup or post-cleanup straggler.)\n                    const safeError = SecurityErrorHandler.sanitizeError(error);\n                    console.warn('\u26A0\uFE0F Dropping unprocessable file chunk (will be re-requested):', chunkMessage.chunkIndex, safeError);\n                }\n            }\n        );\n    }\n\n    _isIncomingChunkAllowed(fileId) {\n        const clientId = this.getClientIdentifier();\n        if (!this.incomingChunkLimiter.isAllowed(clientId)) {\n            SecurityErrorHandler.logSecurityEvent('incoming_chunk_aggregate_rate_limit_exceeded', {\n                clientId,\n                fileId\n            });\n            return false;\n        }\n\n        if (!this.incomingTransferChunkLimiters.has(fileId)) {\n            this.incomingTransferChunkLimiters.set(\n                fileId,\n                new RateLimiter(this.MAX_INCOMING_CHUNKS_PER_TRANSFER_PER_MINUTE, 60000)\n            );\n        }\n\n        const transferLimiter = this.incomingTransferChunkLimiters.get(fileId);\n        if (!transferLimiter.isAllowed(fileId)) {\n            SecurityErrorHandler.logSecurityEvent('incoming_chunk_transfer_rate_limit_exceeded', {\n                clientId,\n                fileId\n            });\n            return false;\n        }\n\n        return true;\n    }\n\n    async assembleFile(receivingState) {\n        // Idempotency guard: assembly must run (and onFileReceived must fire)\n        // exactly once per transfer. Guards against any duplicate/concurrent\n        // completion trigger so the receiver never sees the same file repeated.\n        if (receivingState._assembled) {\n            return;\n        }\n        receivingState._assembled = true;\n\n        try {\n            receivingState.status = 'assembling';\n            \n            // Verify we have all chunks\n            for (let i = 0; i < receivingState.totalChunks; i++) {\n                if (!receivingState.receivedChunks.has(i)) {\n                    throw new Error(`Missing chunk ${i}`);\n                }\n            }\n            \n            // Combine all chunks in order\n            const chunks = [];\n            for (let i = 0; i < receivingState.totalChunks; i++) {\n                const chunk = receivingState.receivedChunks.get(i);\n                chunks.push(new Uint8Array(chunk));\n            }\n            \n            // Calculate total size\n            const totalSize = chunks.reduce((sum, chunk) => sum + chunk.length, 0);\n            \n            // Verify total size matches expected\n            if (totalSize !== receivingState.fileSize) {\n                throw new Error(`File size mismatch: expected ${receivingState.fileSize}, got ${totalSize}`);\n            }\n            \n            // Combine into single array\n            const fileData = new Uint8Array(totalSize);\n            let offset = 0;\n            for (const chunk of chunks) {\n                fileData.set(chunk, offset);\n                offset += chunk.length;\n            }\n            \n            // Verify file integrity\n            const receivedHash = await this.calculateFileHashFromData(fileData);\n            if (receivedHash !== receivingState.fileHash) {\n                throw new Error('File integrity check failed - hash mismatch');\n            }\n\n            const fileBuffer = fileData.buffer;\n            const fileBlob = new Blob([fileBuffer], { type: receivingState.fileType });\n            \n            receivingState.endTime = Date.now();\n            receivingState.status = 'completed';\n\n            this._storeReceivedFileBuffer(receivingState.fileId, {\n                buffer: fileBuffer,\n                type: receivingState.fileType,\n                name: receivingState.fileName,\n                size: receivingState.fileSize\n            });\n\n            if (this.onFileReceived) {\n                const getBlob = async () => {\n                    const blob = await this.getBlob(receivingState.fileId);\n                    if (!blob) {\n                        throw new Error('This file is no longer available for download.');\n                    }\n                    return blob;\n                };\n                const getObjectURL = async () => {\n                    const blob = await getBlob();\n                    return URL.createObjectURL(blob);\n                };\n                const revokeObjectURL = (url) => {\n                    try { URL.revokeObjectURL(url); } catch (_) {}\n                };\n\n                this.onFileReceived({\n                    fileId: receivingState.fileId,\n                    fileName: receivingState.fileName,\n                    fileSize: receivingState.fileSize,\n                    mimeType: receivingState.fileType,\n                    transferTime: receivingState.endTime - receivingState.startTime,\n                    // Voice notes are played inline, not saved to disk.\n                    isVoice: !!receivingState.isVoice,\n                    voice: receivingState.voice || null,\n                    // backward-compatibility for existing UIs\n                    fileBlob,\n                    getBlob,\n                    getObjectURL,\n                    revokeObjectURL\n                });\n            }\n            \n            // Send completion confirmation\n            const completionMessage = {\n                type: 'file_transfer_complete',\n                fileId: receivingState.fileId,\n                success: true,\n                timestamp: Date.now()\n            };\n            await this.sendSecureMessage(completionMessage);\n\n            // Stop the stall detector and free the heavy chunk data, but KEEP the\n            // transfer entry in receivingTransfers with status 'completed' so the UI\n            // can render the Download action. The assembled file lives in\n            // receivedFileBuffers; this entry is removed on cancel/disconnect or when\n            // its buffer is evicted (see _discardReceivedFileBuffer).\n            if (receivingState._stallTimer) {\n                clearInterval(receivingState._stallTimer);\n                receivingState._stallTimer = null;\n            }\n            if (receivingState.receivedChunks) receivingState.receivedChunks.clear();\n            receivingState.sessionKey = null;\n\n        } catch (error) {\n            console.error('\u274C File assembly failed:', error);\n            receivingState.status = 'failed';\n            \n            if (this.onError) {\n                this.onError(`File assembly failed: ${error.message}`);\n            }\n            \n            // Send error notification\n            const errorMessage = {\n                type: 'file_transfer_complete',\n                fileId: receivingState.fileId,\n                success: false,\n                error: error.message,\n                timestamp: Date.now()\n            };\n            await this.sendSecureMessage(errorMessage);\n            \n            // Cleanup failed transfer\n            this.cleanupReceivingTransfer(receivingState.fileId);\n        }\n    }\n\n    async calculateFileHashFromData(data) {\n        try {\n            const hashBuffer = await crypto.subtle.digest('SHA-256', data);\n            const hashArray = Array.from(new Uint8Array(hashBuffer));\n            return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');\n        } catch (error) {\n            console.error('\u274C Hash calculation failed:', error);\n            throw error;\n        }\n    }\n\n    handleTransferResponse(response) {\n        try {\n            const transferState = this.activeTransfers.get(response.fileId);\n            \n            if (!transferState) {\n                return;\n            }\n            \n            if (response.accepted) {\n                transferState.status = 'accepted';\n                if (transferState.consentTimeout) clearTimeout(transferState.consentTimeout);\n                transferState.consentTimeout = null;\n                transferState.resolveConsent?.();\n                transferState.resolveConsent = null;\n                transferState.rejectConsent = null;\n            } else {\n                transferState.status = 'rejected';\n                if (transferState.consentTimeout) clearTimeout(transferState.consentTimeout);\n                transferState.consentTimeout = null;\n                transferState.rejectConsent?.(new Error(response.error || 'Transfer rejected'));\n                transferState.rejectConsent = null;\n                transferState.resolveConsent = null;\n                \n                if (this.onError) {\n                    this.onError(`Transfer rejected: ${response.error || 'Unknown reason'}`);\n                }\n                \n                this.cleanupTransfer(response.fileId);\n            }\n        } catch (error) {\n            console.error('\u274C Failed to handle transfer response:', error);\n        }\n    }\n\n    handleChunkConfirmation(confirmation) {\n        try {\n            const transferState = this.activeTransfers.get(confirmation.fileId);\n            if (!transferState) {\n                return;\n            }\n            \n            transferState.confirmedChunks++;\n            transferState.lastChunkTime = Date.now();\n            if (transferState.status === 'waiting_confirmation') {\n                this._armSenderIdleTimeout(transferState);\n            }\n        } catch (error) {\n            console.error('\u274C Failed to handle chunk confirmation:', error);\n        }\n    }\n\n    handleTransferComplete(completion) {\n        try {\n            const transferState = this.activeTransfers.get(completion.fileId);\n            if (!transferState) {\n                return;\n            }\n            \n            if (completion.success) {\n                transferState.status = 'completed';\n                transferState.endTime = Date.now();\n                \n                if (this.onComplete) {\n                    this.onComplete({\n                        fileId: transferState.fileId,\n                        fileName: transferState.file.name,\n                        fileSize: transferState.file.size,\n                        transferTime: transferState.endTime - transferState.startTime,\n                        status: 'completed'\n                    });\n                }\n            } else {\n                transferState.status = 'failed';\n                \n                if (this.onError) {\n                    this.onError(`Transfer failed: ${completion.error || 'Unknown error'}`);\n                }\n            }\n            \n            this.cleanupTransfer(completion.fileId);\n            \n        } catch (error) {\n            console.error('\u274C Failed to handle transfer completion:', error);\n        }\n    }\n\n    handleTransferError(errorMessage) {\n        try {\n            const transferState = this.activeTransfers.get(errorMessage.fileId);\n            if (transferState) {\n                transferState.status = 'failed';\n                this.cleanupTransfer(errorMessage.fileId);\n            }\n            \n            const receivingState = this.receivingTransfers.get(errorMessage.fileId);\n            if (receivingState) {\n                receivingState.status = 'failed';\n                this.cleanupReceivingTransfer(errorMessage.fileId);\n            }\n            \n            if (this.onError) {\n                this.onError(`Transfer error: ${errorMessage.error || 'Unknown error'}`);\n            }\n            \n        } catch (error) {\n            console.error('\u274C Failed to handle transfer error:', error);\n        }\n    }\n\n    // ============================================\n    // UTILITY METHODS\n    // ============================================\n\n    getActiveTransfers() {\n        return Array.from(this.activeTransfers.values()).map(transfer => ({\n            fileId: transfer.fileId,\n            fileName: transfer.file?.name || 'Unknown',\n            fileSize: transfer.file?.size || 0,\n            progress: Math.round((transfer.sentChunks / transfer.totalChunks) * 100),\n            // Per-chunk detail for the segmented progress UI.\n            totalChunks: transfer.totalChunks || 0,\n            transferredChunks: transfer.sentChunks || 0,\n            status: transfer.status,\n            startTime: transfer.startTime\n        }));\n    }\n\n    getReceivingTransfers() {\n        return Array.from(this.receivingTransfers.values()).map(transfer => ({\n            fileId: transfer.fileId,\n            fileName: transfer.fileName || 'Unknown',\n            fileSize: transfer.fileSize || 0,\n            progress: Math.round((transfer.receivedCount / transfer.totalChunks) * 100),\n            // Per-chunk detail for the segmented progress UI.\n            totalChunks: transfer.totalChunks || 0,\n            transferredChunks: transfer.receivedCount || 0,\n            status: transfer.status,\n            startTime: transfer.startTime\n        }));\n    }\n\n    getPendingIncomingTransfers() {\n        return Array.from(this.pendingIncomingTransfers.values()).map(transfer => ({\n            fileId: transfer.fileId,\n            fileName: transfer.fileName,\n            fileSize: transfer.fileSize,\n            mimeType: transfer.fileType || 'application/octet-stream',\n            receivedAt: transfer.receivedAt\n        }));\n    }\n\n    async acceptIncomingFile(fileId) {\n        const metadata = this.pendingIncomingTransfers.get(fileId);\n        if (!metadata) return false;\n        const sessionKey = await this.deriveFileSessionKeyFromSalt(fileId, metadata.salt);\n        this.receivingTransfers.set(fileId, {\n            fileId,\n            fileName: metadata.fileName,\n            fileSize: metadata.fileSize,\n            fileType: metadata.fileType || 'application/octet-stream',\n            fileHash: metadata.fileHash,\n            totalChunks: metadata.totalChunks,\n            chunkSize: metadata.chunkSize || this.CHUNK_SIZE,\n            sessionKey,\n            salt: metadata.salt,\n            receivedChunks: new Map(),\n            receivedCount: 0,\n            startTime: Date.now(),\n            lastChunkTime: Date.now(),\n            status: 'receiving',\n            isVoice: !!metadata.isVoice,\n            voice: metadata.voice || null\n        });\n        this.pendingIncomingTransfers.delete(fileId);\n        await this.sendSecureMessage({ type: 'file_transfer_response', fileId, accepted: true, timestamp: Date.now() });\n        // Loss-recovery / resume: watch for missing chunks and re-request them.\n        this._startReceiverStallDetector(fileId);\n        return true;\n    }\n\n    // Periodically detects a stalled receive (lost chunks, connection blip,\n    // reconnect) and asks the sender to retransmit only the chunks we are still\n    // missing \u2014 so a dropped connection never loses the file.\n    _startReceiverStallDetector(fileId) {\n        const TICK_MS = 2500;        // how often we evaluate\n        const STALL_MS = 5000;       // quiet period before we re-request\n        const MAX_IDLE_MS = 180000;  // give up after 3 min of zero progress\n\n        const rs = this.receivingTransfers.get(fileId);\n        if (!rs) return;\n        if (rs._stallTimer) clearInterval(rs._stallTimer);\n        rs._lastProgressCount = rs.receivedCount || 0;\n        rs._lastProgressTime = Date.now();\n\n        rs._stallTimer = setInterval(async () => {\n            const state = this.receivingTransfers.get(fileId);\n            if (!state || state._stallTimer !== rs._stallTimer) {\n                clearInterval(rs._stallTimer);\n                return;\n            }\n            if (state.status === 'completed' || state._assembled) {\n                clearInterval(state._stallTimer);\n                state._stallTimer = null;\n                return;\n            }\n\n            // Track forward progress for the idle/give-up clock.\n            if (state.receivedCount !== state._lastProgressCount) {\n                state._lastProgressCount = state.receivedCount;\n                state._lastProgressTime = Date.now();\n            }\n            if (state.receivedCount >= state.totalChunks) return; // assembly handled elsewhere\n\n            // Still actively receiving \u2014 don't interrupt.\n            if (Date.now() - (state.lastChunkTime || 0) < STALL_MS) return;\n\n            // No progress for too long \u2192 fail cleanly rather than hang forever.\n            if (Date.now() - state._lastProgressTime > MAX_IDLE_MS) {\n                clearInterval(state._stallTimer);\n                state._stallTimer = null;\n                state.status = 'failed';\n                if (this.onError) this.onError('File transfer stalled \u2014 no data received. Please try again.');\n                this.cleanupReceivingTransfer(fileId);\n                return;\n            }\n\n            await this._requestMissingChunks(fileId);\n        }, TICK_MS);\n    }\n\n    async _requestMissingChunks(fileId) {\n        const state = this.receivingTransfers.get(fileId);\n        if (!state || !state.receivedChunks) return;\n        const MAX_PER_REQUEST = 256;\n        const missing = [];\n        for (let i = 0; i < state.totalChunks && missing.length < MAX_PER_REQUEST; i++) {\n            if (!state.receivedChunks.has(i)) missing.push(i);\n        }\n        if (missing.length === 0) return;\n        state.status = 'receiving';\n        try {\n            await this.sendSecureMessage({\n                type: 'file_chunk_request',\n                fileId,\n                missing,\n                timestamp: Date.now()\n            });\n        } catch (_) {\n            // Will retry on the next tick.\n        }\n    }\n\n    async rejectIncomingFile(fileId, error = 'Rejected by user') {\n        if (!this.pendingIncomingTransfers.has(fileId)) return false;\n        this.pendingIncomingTransfers.delete(fileId);\n        await this.sendSecureMessage({ type: 'file_transfer_response', fileId, accepted: false, error, timestamp: Date.now() });\n        return true;\n    }\n\n    cancelTransfer(fileId) {\n        try {\n            if (this.activeTransfers.has(fileId)) {\n                this.cleanupTransfer(fileId);\n                return true;\n            }\n            if (this.receivingTransfers.has(fileId)) {\n                this.cleanupReceivingTransfer(fileId);\n                return true;\n            }\n            return false;\n        } catch (error) {\n            console.error('\u274C Failed to cancel transfer:', error);\n            return false;\n        }\n    }\n\n    cleanupTransfer(fileId) {\n        const transferState = this.activeTransfers.get(fileId);\n        if (transferState) {\n            if (transferState._idleTimeout) {\n                clearTimeout(transferState._idleTimeout);\n                transferState._idleTimeout = null;\n            }\n            if (transferState.consentTimeout) {\n                clearTimeout(transferState.consentTimeout);\n                transferState.consentTimeout = null;\n            }\n            if (transferState.rejectConsent) {\n                transferState.rejectConsent(new Error('Transfer cancelled during cleanup or disconnect'));\n                transferState.rejectConsent = null;\n                transferState.resolveConsent = null;\n            }\n        }\n\n        this.activeTransfers.delete(fileId);\n        this.sessionKeys.delete(fileId);\n        this.transferNonces.delete(fileId);\n        this.incomingTransferChunkLimiters.delete(fileId);\n        \n        // Remove processed chunk IDs for this transfer\n        for (const chunkId of this.processedChunks) {\n            if (chunkId.startsWith(fileId)) {\n                this.processedChunks.delete(chunkId);\n            }\n        }\n    }\n\n    _storeReceivedFileBuffer(fileId, entry) {\n        this.receivedFileBuffers.set(fileId, entry);\n        while (this.receivedFileBuffers.size > this.MAX_RETAINED_RECEIVED_FILE_BUFFERS) {\n            const oldestFileId = this.receivedFileBuffers.keys().next().value;\n            this._discardReceivedFileBuffer(oldestFileId);\n        }\n    }\n\n    _discardReceivedFileBuffer(fileId) {\n        const fileBuffer = this.receivedFileBuffers.get(fileId);\n        if (!fileBuffer) return;\n        try {\n            if (fileBuffer.buffer) {\n                SecureMemoryManager.secureWipe(fileBuffer.buffer);\n                new Uint8Array(fileBuffer.buffer).fill(0);\n            }\n        } catch (_) {\n            // Best-effort wipe; deletion must still proceed.\n        }\n        this.receivedFileBuffers.delete(fileId);\n        // The matching 'completed' entry is kept only to drive the Download UI;\n        // once the file bytes are gone the entry is meaningless, so drop it too\n        // (keeps the receiving list bounded over a long session).\n        const rs = this.receivingTransfers.get(fileId);\n        if (rs && (rs.status === 'completed' || rs._assembled)) {\n            if (rs._stallTimer) { clearInterval(rs._stallTimer); rs._stallTimer = null; }\n            this.receivingTransfers.delete(fileId);\n        }\n    }\n\n    // \u2705 \u0423\u041B\u0423\u0427\u0428\u0415\u041D\u041D\u0410\u042F \u0431\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u043F\u0430\u043C\u044F\u0442\u0438 \u0434\u043B\u044F \u043F\u0440\u0435\u0434\u043E\u0442\u0432\u0440\u0430\u0449\u0435\u043D\u0438\u044F use-after-free\n    cleanupReceivingTransfer(fileId) {\n        try {\n            // \u0411\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u043E \u043E\u0447\u0438\u0449\u0430\u0435\u043C pending chunks\n            this.pendingChunks.delete(fileId);\n            \n            const receivingState = this.receivingTransfers.get(fileId);\n            if (receivingState) {\n                // Stop the loss-recovery stall detector for this transfer.\n                if (receivingState._stallTimer) {\n                    clearInterval(receivingState._stallTimer);\n                    receivingState._stallTimer = null;\n                }\n                // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 receivedChunks \u0441 \u0434\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u043E\u0439 \u0437\u0430\u0449\u0438\u0442\u043E\u0439\n                if (receivingState.receivedChunks && receivingState.receivedChunks.size > 0) {\n                    for (const [index, chunk] of receivingState.receivedChunks) {\n                        try {\n                            // \u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0430 \u043D\u0430 \u0432\u0430\u043B\u0438\u0434\u043D\u043E\u0441\u0442\u044C chunk\n                            if (chunk && (chunk instanceof ArrayBuffer || chunk instanceof Uint8Array)) {\n                                SecureMemoryManager.secureWipe(chunk);\n                                \n                                // \u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 - \u0437\u0430\u043F\u043E\u043B\u043D\u044F\u0435\u043C \u043D\u0443\u043B\u044F\u043C\u0438 \u043F\u0435\u0440\u0435\u0434 \u0443\u0434\u0430\u043B\u0435\u043D\u0438\u0435\u043C\n                                if (chunk instanceof ArrayBuffer) {\n                                    const view = new Uint8Array(chunk);\n                                    view.fill(0);\n                                } else if (chunk instanceof Uint8Array) {\n                                    chunk.fill(0);\n                                }\n                            }\n                        } catch (chunkError) {\n                            console.warn('\u26A0\uFE0F Failed to securely wipe chunk:', chunkError);\n                        }\n                    }\n                    receivingState.receivedChunks.clear();\n                }\n                \n                // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 session key\n                if (receivingState.sessionKey) {\n                    try {\n                        // \u0414\u043B\u044F CryptoKey \u043D\u0435\u043B\u044C\u0437\u044F \u0431\u0435\u0437\u043E\u043F\u0430\u0441\u043D\u043E \u043E\u0447\u0438\u0441\u0442\u0438\u0442\u044C, \u043D\u043E \u043C\u043E\u0436\u0435\u043C \u0443\u0434\u0430\u043B\u0438\u0442\u044C \u0441\u0441\u044B\u043B\u043A\u0443\n                        receivingState.sessionKey = null;\n                    } catch (keyError) {\n                        console.warn('\u26A0\uFE0F Failed to clear session key:', keyError);\n                    }\n                }\n                \n                // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u0447\u0443\u0432\u0441\u0442\u0432\u0438\u0442\u0435\u043B\u044C\u043D\u044B\u0445 \u0434\u0430\u043D\u043D\u044B\u0445\n                if (receivingState.salt) {\n                    try {\n                        if (Array.isArray(receivingState.salt)) {\n                            receivingState.salt.fill(0);\n                        }\n                        receivingState.salt = null;\n                    } catch (saltError) {\n                        console.warn('\u26A0\uFE0F Failed to clear salt:', saltError);\n                    }\n                }\n                \n                // \u041E\u0447\u0438\u0449\u0430\u0435\u043C \u0432\u0441\u0435 \u0441\u0432\u043E\u0439\u0441\u0442\u0432\u0430 receivingState\n                for (const [key, value] of Object.entries(receivingState)) {\n                    if (value && typeof value === 'object') {\n                        if (value instanceof ArrayBuffer || value instanceof Uint8Array) {\n                            SecureMemoryManager.secureWipe(value);\n                        } else if (Array.isArray(value)) {\n                            value.fill(0);\n                        }\n                        receivingState[key] = null;\n                    }\n                }\n            }\n            \n            // \u0423\u0434\u0430\u043B\u044F\u0435\u043C \u0438\u0437 \u043E\u0441\u043D\u043E\u0432\u043D\u044B\u0445 \u043A\u043E\u043B\u043B\u0435\u043A\u0446\u0438\u0439\n            this.receivingTransfers.delete(fileId);\n            this.sessionKeys.delete(fileId);\n            this.incomingTransferChunkLimiters.delete(fileId);\n            \n            // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u0444\u0438\u043D\u0430\u043B\u044C\u043D\u043E\u0433\u043E \u0431\u0443\u0444\u0435\u0440\u0430 \u0444\u0430\u0439\u043B\u0430\n            const fileBuffer = this.receivedFileBuffers.get(fileId);\n            if (fileBuffer) {\n                try {\n                    if (fileBuffer.buffer) {\n                        SecureMemoryManager.secureWipe(fileBuffer.buffer);\n                        \n                        // \u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 - \u0437\u0430\u043F\u043E\u043B\u043D\u044F\u0435\u043C \u043D\u0443\u043B\u044F\u043C\u0438\n                        const view = new Uint8Array(fileBuffer.buffer);\n                        view.fill(0);\n                    }\n                    \n                    // \u041E\u0447\u0438\u0449\u0430\u0435\u043C \u0432\u0441\u0435 \u0441\u0432\u043E\u0439\u0441\u0442\u0432\u0430 fileBuffer\n                    for (const [key, value] of Object.entries(fileBuffer)) {\n                        if (value && typeof value === 'object') {\n                            if (value instanceof ArrayBuffer || value instanceof Uint8Array) {\n                                SecureMemoryManager.secureWipe(value);\n                            }\n                            fileBuffer[key] = null;\n                        }\n                    }\n                    \n                    this.receivedFileBuffers.delete(fileId);\n                } catch (bufferError) {\n                    console.warn('\u26A0\uFE0F Failed to securely clear file buffer:', bufferError);\n                    // \u041F\u0440\u0438\u043D\u0443\u0434\u0438\u0442\u0435\u043B\u044C\u043D\u043E \u0443\u0434\u0430\u043B\u044F\u0435\u043C \u0434\u0430\u0436\u0435 \u043F\u0440\u0438 \u043E\u0448\u0438\u0431\u043A\u0435\n                    this.receivedFileBuffers.delete(fileId);\n                }\n            }\n            \n            // \u2705 \u0411\u0415\u0417\u041E\u041F\u0410\u0421\u041D\u0410\u042F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 processed chunks\n            const chunksToRemove = [];\n            for (const chunkId of this.processedChunks) {\n                if (chunkId.startsWith(fileId)) {\n                    chunksToRemove.push(chunkId);\n                }\n            }\n            \n            // \u0423\u0434\u0430\u043B\u044F\u0435\u043C \u0432 \u043E\u0442\u0434\u0435\u043B\u044C\u043D\u043E\u043C \u0446\u0438\u043A\u043B\u0435 \u0434\u043B\u044F \u0438\u0437\u0431\u0435\u0436\u0430\u043D\u0438\u044F \u0438\u0437\u043C\u0435\u043D\u0435\u043D\u0438\u044F \u043A\u043E\u043B\u043B\u0435\u043A\u0446\u0438\u0438 \u0432\u043E \u0432\u0440\u0435\u043C\u044F \u0438\u0442\u0435\u0440\u0430\u0446\u0438\u0438\n            for (const chunkId of chunksToRemove) {\n                this.processedChunks.delete(chunkId);\n            }\n            \n            // \u041F\u0440\u0438\u043D\u0443\u0434\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u043F\u0430\u043C\u044F\u0442\u0438\n            if (typeof global !== 'undefined' && global.gc) {\n                try {\n                    global.gc();\n                } catch (gcError) {\n                    // \u0418\u0433\u043D\u043E\u0440\u0438\u0440\u0443\u0435\u043C \u043E\u0448\u0438\u0431\u043A\u0438 GC\n                }\n            }\n            \n            console.log(`\uD83D\uDD12 Memory safely cleaned for file transfer: ${fileId}`);\n            \n        } catch (error) {\n            console.error('\u274C Error during secure memory cleanup:', error);\n            \n            // \u041F\u0440\u0438\u043D\u0443\u0434\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043E\u0447\u0438\u0441\u0442\u043A\u0430 \u0434\u0430\u0436\u0435 \u043F\u0440\u0438 \u043E\u0448\u0438\u0431\u043A\u0435\n            this.receivingTransfers.delete(fileId);\n            this.sessionKeys.delete(fileId);\n            this.receivedFileBuffers.delete(fileId);\n            this.pendingChunks.delete(fileId);\n            \n            throw new Error(`Memory cleanup failed: ${error.message}`);\n        }\n    }\n\n    getTransferStatus(fileId) {\n        if (this.activeTransfers.has(fileId)) {\n            const transfer = this.activeTransfers.get(fileId);\n            return {\n                type: 'sending',\n                fileId: transfer.fileId,\n                fileName: transfer.file.name,\n                progress: Math.round((transfer.sentChunks / transfer.totalChunks) * 100),\n                status: transfer.status,\n                startTime: transfer.startTime\n            };\n        }\n        \n        if (this.receivingTransfers.has(fileId)) {\n            const transfer = this.receivingTransfers.get(fileId);\n            return {\n                type: 'receiving',\n                fileId: transfer.fileId,\n                fileName: transfer.fileName,\n                progress: Math.round((transfer.receivedCount / transfer.totalChunks) * 100),\n                status: transfer.status,\n                startTime: transfer.startTime\n            };\n        }\n        \n        return null;\n    }\n\n    getSystemStatus() {\n        return {\n            initialized: true,\n            activeTransfers: this.activeTransfers.size,\n            receivingTransfers: this.receivingTransfers.size,\n            totalTransfers: this.activeTransfers.size + this.receivingTransfers.size,\n            maxConcurrentTransfers: this.MAX_CONCURRENT_TRANSFERS,\n            maxFileSize: this.MAX_FILE_SIZE,\n            chunkSize: this.CHUNK_SIZE,\n            hasWebrtcManager: !!this.webrtcManager,\n            isConnected: this.webrtcManager?.isConnected?.() || false,\n            hasDataChannel: !!this.webrtcManager?.dataChannel,\n            dataChannelState: this.webrtcManager?.dataChannel?.readyState,\n            isVerified: this.webrtcManager?.isVerified,\n            hasEncryptionKey: !!this.webrtcManager?.encryptionKey,\n            hasMacKey: !!this.webrtcManager?.macKey,\n            linkedToWebRTCManager: this.webrtcManager?.fileTransferSystem === this,\n            supportedFileTypes: this.getSupportedFileTypes(),\n            fileTypeInfo: this.getFileTypeInfo()\n        };\n    }\n\n    cleanup() {\n        SecureFileTransferContext.getInstance().deactivate();\n\n        if (this.webrtcManager && this.webrtcManager.dataChannel && this.originalOnMessage) {\n            this.webrtcManager.dataChannel.onmessage = this.originalOnMessage;\n            this.originalOnMessage = null;\n        }\n        \n        if (this.webrtcManager && this.originalProcessMessage) {\n            this.webrtcManager.processMessage = this.originalProcessMessage;\n            this.originalProcessMessage = null;\n        }\n        \n        if (this.webrtcManager && this.originalRemoveSecurityLayers) {\n            this.webrtcManager.removeSecurityLayers = this.originalRemoveSecurityLayers;\n            this.originalRemoveSecurityLayers = null;\n        }\n        \n        // Cleanup all active transfers with secure memory wiping\n        for (const fileId of this.activeTransfers.keys()) {\n            this.cleanupTransfer(fileId);\n        }\n        \n        for (const fileId of this.receivingTransfers.keys()) {\n            this.cleanupReceivingTransfer(fileId);\n        }\n\n        if (this.atomicOps) {\n            this.atomicOps.locks.clear();\n        }\n        \n        if (this.rateLimiter) {\n            this.rateLimiter.requests.clear();\n        }\n        if (this.incomingChunkLimiter) {\n            this.incomingChunkLimiter.requests.clear();\n        }\n        this.incomingTransferChunkLimiters.clear();\n        \n        // Clear all state\n        this.pendingChunks.clear();\n        this.pendingIncomingTransfers.clear();\n        this.activeTransfers.clear();\n        this.receivingTransfers.clear();\n        this.transferQueue.length = 0;\n        this.sessionKeys.clear();\n        this.transferNonces.clear();\n        this.processedChunks.clear();\n\n        for (const fileId of Array.from(this.receivedFileBuffers.keys())) {\n            this._discardReceivedFileBuffer(fileId);\n        }\n\n        this.clearKeys();\n    }\n\n    // ============================================\n    // SESSION UPDATE HANDLER - FIXED\n    // ============================================\n    \n    onSessionUpdate(sessionData) {\n        // Clear session keys cache for resync\n        this.sessionKeys.clear();\n    }\n\n    // ============================================\n    // DEBUGGING AND DIAGNOSTICS\n    // ============================================\n\n    diagnoseFileTransferIssue() {\n        const diagnosis = {\n            timestamp: new Date().toISOString(),\n            fileTransferSystem: {\n                initialized: !!this,\n                hasWebrtcManager: !!this.webrtcManager,\n                webrtcManagerType: this.webrtcManager?.constructor?.name,\n                linkedToWebRTCManager: this.webrtcManager?.fileTransferSystem === this\n            },\n            webrtcManager: {\n                hasDataChannel: !!this.webrtcManager?.dataChannel,\n                dataChannelState: this.webrtcManager?.dataChannel?.readyState,\n                isConnected: this.webrtcManager?.isConnected?.() || false,\n                isVerified: this.webrtcManager?.isVerified,\n                hasEncryptionKey: !!this.webrtcManager?.encryptionKey,\n                hasMacKey: !!this.webrtcManager?.macKey,\n                hasKeyFingerprint: !!this.webrtcManager?.keyFingerprint,\n                hasSessionSalt: !!this.webrtcManager?.sessionSalt\n            },\n            securityContext: {\n                contextActive: SecureFileTransferContext.getInstance().isActive(),\n                securityLevel: SecureFileTransferContext.getInstance().getSecurityLevel(),\n                hasAtomicOps: !!this.atomicOps,\n                hasRateLimiter: !!this.rateLimiter\n            },\n            transfers: {\n                activeTransfers: this.activeTransfers.size,\n                receivingTransfers: this.receivingTransfers.size,\n                pendingChunks: this.pendingChunks.size,\n                sessionKeys: this.sessionKeys.size\n            },\n            fileTypeSupport: {\n                supportedTypes: this.getSupportedFileTypes(),\n                generalMaxSize: this.formatFileSize(this.MAX_FILE_SIZE),\n                restrictions: Object.keys(this.FILE_TYPE_RESTRICTIONS)\n            }\n        };\n        \n        return diagnosis;\n    }\n\n    async debugKeyDerivation(fileId) {\n        try {\n            if (!this.webrtcManager.keyFingerprint || !this.webrtcManager.sessionSalt) {\n                throw new Error('Session data not available');\n            }\n            \n            // Test sender derivation\n            const senderResult = await this.deriveFileSessionKey(fileId);\n            \n            // Test receiver derivation with same salt\n            const receiverKey = await this.deriveFileSessionKeyFromSalt(fileId, senderResult.salt);\n            \n            // Test encryption/decryption\n            const testData = new TextEncoder().encode('test data');\n            const nonce = crypto.getRandomValues(new Uint8Array(12));\n            \n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: nonce },\n                senderResult.key,\n                testData\n            );\n            \n            const decrypted = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv: nonce },\n                receiverKey,\n                encrypted\n            );\n            \n            const decryptedText = new TextDecoder().decode(decrypted);\n            \n            if (decryptedText === 'test data') {\n                return { success: true, message: 'All tests passed' };\n            } else {\n                throw new Error('Decryption verification failed');\n            }\n            \n        } catch (error) {\n            console.error('\u274C Key derivation test failed:', error);\n            return { success: false, error: error.message };\n        }\n    }\n\n    // ============================================\n    // ALTERNATIVE METHOD OF INITIALIZING HANDLERS\n    // ============================================\n\n    registerWithWebRTCManager() {\n        if (!this.webrtcManager) {\n            throw new Error('WebRTC manager not available');\n        }\n\n        this.webrtcManager.fileTransferSystem = this;\n\n        this.webrtcManager.setFileMessageHandler = (handler) => {\n            this.webrtcManager._fileMessageHandler = handler;\n        };\n\n        this.webrtcManager.setFileMessageHandler((message) => {\n            return this.handleFileMessage(message);\n        });\n    }\n\n    static createFileMessageFilter(fileTransferSystem) {\n        return async (event) => {\n            try {\n                if (typeof event.data === 'string') {\n                    const parsed = JSON.parse(event.data);\n                    \n                    if (fileTransferSystem.isFileTransferMessage(parsed)) {\n                        await fileTransferSystem.handleFileMessage(parsed);\n                        return true; \n                    }\n                }\n            } catch (error) {\n            }\n            \n            return false; \n        };\n    }\n\n    // ============================================\n    // SECURITY KEY MANAGEMENT\n    // ============================================\n\n    setSigningKey(privateKey) {\n        if (!privateKey || !(privateKey instanceof CryptoKey)) {\n            throw new Error('Invalid private key for signing');\n        }\n        this.signingKey = privateKey;\n        console.log('\uD83D\uDD12 Signing key set successfully');\n    }\n\n    setVerificationKey(publicKey) {\n        if (!publicKey || !(publicKey instanceof CryptoKey)) {\n            throw new Error('Invalid public key for verification');\n        }\n        this.verificationKey = publicKey;\n        console.log('\uD83D\uDD12 Verification key set successfully');\n    }\n\n    async generateSigningKeyPair() {\n        try {\n            const keyPair = await crypto.subtle.generateKey(\n                {\n                    name: 'RSASSA-PKCS1-v1_5',\n                    modulusLength: 2048,\n                    publicExponent: new Uint8Array([1, 0, 1]),\n                    hash: 'SHA-256'\n                },\n                true, // extractable\n                ['sign', 'verify']\n            );\n            \n            this.signingKey = keyPair.privateKey;\n            this.verificationKey = keyPair.publicKey;\n            \n            console.log('\uD83D\uDD12 RSA key pair generated successfully');\n            return keyPair;\n        } catch (error) {\n            const safeError = SecurityErrorHandler.sanitizeError(error);\n            console.error('\u274C Failed to generate signing key pair:', safeError);\n            throw new Error(safeError);\n        }\n    }\n\n    clearKeys() {\n        this.signingKey = null;\n        this.verificationKey = null;\n        console.log('\uD83D\uDD12 Security keys cleared');\n    }\n\n    getSecurityStatus() {\n        return {\n            signingEnabled: this.signingKey !== null,\n            verificationEnabled: this.verificationKey !== null,\n            contextActive: SecureFileTransferContext.getInstance().isActive(),\n            securityLevel: SecureFileTransferContext.getInstance().getSecurityLevel()\n        };\n    }\n\n    getClientIdentifier() {\n        return this.webrtcManager?.connectionId || \n               this.webrtcManager?.keyFingerprint?.substring(0, 16) || \n               'default-client';\n    }\n    \n    destroy() {\n        SecureFileTransferContext.getInstance().deactivate();\n        this.clearKeys();\n        console.log('\uD83D\uDD12 File transfer system destroyed safely');\n    }\n}\n\nexport { EnhancedSecureFileTransfer };\n", "// Adaptive WebRTC call parameters \u2014 single source of truth.\n//\n// Every value here is a tuning constant for the voice/video call stack, with a\n// note on where it comes from. Kept as plain data (no behaviour) so it can be\n// imported by both the browser bundle and the Node unit tests.\n//\n// Targets (from the task brief): usable voice at up to 15\u201320% loss, RTT up to\n// 400 ms, fluctuating bandwidth; voice must not break as bitrate drops; video\n// degrades gracefully by layer.\n\n// WebKit (desktop Safari + ALL iOS browsers) kills a live capture MediaStreamTrack\n// with \"capture failure\" when we manipulate the sender via setParameters /\n// setCodecPreferences (RED, priorities, SVC bitrate). So the adaptive codec/bitrate\n// tuning is applied on Chromium only; WebKit runs plain WebRTC (Opus + the\n// browser's own congestion control), which is reliable. The read-only quality\n// indicator still works everywhere. Matches Chrome/Chromium/Edge; excludes Safari\n// and iOS browsers (all WebKit \u2014 iOS Chrome is \"CriOS\", not \"Chrome\").\nexport const IS_WEBKIT = (typeof navigator !== 'undefined')\n    && /AppleWebKit/.test(navigator.userAgent)\n    && !/Chrome|Chromium|Edg\\//.test(navigator.userAgent);\n\n// \u2500\u2500 AUDIO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Opus is mandatory-to-implement in WebRTC (RFC 7874). FEC + DTX + a low target\n// bitrate keep speech intelligible under loss.\nexport const AUDIO_CONFIG = {\n    // Opus fmtp params applied via SDP munging.\n    //  - minptime=10          smaller packets \u2192 lower latency (Opus RFC 7587 \u00A77).\n    //  - useinbandfec=1       in-band Forward Error Correction \u2014 reconstructs lost\n    //                         packets from the next one (RFC 6716 \u00A72.1.7). Key for loss.\n    //  - usedtx=1             Discontinuous Transmission \u2014 stop sending in silence,\n    //                         frees the pipe for video/FEC (RFC 7587 \u00A73.1.3).\n    //  - stereo=0             mono: voice doesn't need stereo, halves the bitrate.\n    //  - maxaveragebitrate    32 kbps \u2014 brief says 32000; comfortable wideband speech.\n    //  - cbr=0                variable bitrate: lets the encoder spend bits only when\n    //                         needed, better quality per bit than CBR for speech.\n    opusFmtp: {\n        minptime: 10,\n        useinbandfec: 1,\n        usedtx: 1,\n        stereo: 0,\n        maxaveragebitrate: 32000,\n        cbr: 0,\n    },\n    // RED (RFC 2198) wraps Opus payloads with a redundant copy of the previous\n    // frame \u2014 recovers isolated losses without waiting for retransmission. Only\n    // enabled when the browser advertises audio/red (Chromium yes; Safari/FF vary).\n    preferRed: true,\n    // RTCRtpSender.setParameters \u2014 encoding-level knobs. Audio is prioritised over\n    // video on the shared transport so speech survives congestion.\n    sender: {\n        maxBitrate: 40000,        // bps \u2014 brief: 40000. Head-room over 32 kbps for RED.\n        priority: 'high',         // RTCPriorityType \u2014 bandwidth arbitration within the PC.\n        networkPriority: 'high',  // DSCP marking hint \u2014 audio ahead of video on the wire.\n    },\n};\n\n// \u2500\u2500 VIDEO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Preference order VP9 \u2192 AV1 \u2192 H.264 \u2192 VP8. VP9/AV1 give temporal/spatial\n// scalability (SVC) so a single stream degrades by layer; H.264/VP8 fall back to\n// plain simulcast. Values from the brief.\nexport const VIDEO_CONFIG = {\n    codecPreferenceOrder: ['VP9', 'AV1', 'H264', 'VP8'],\n    // Preferred single-encoding SVC mode for VP9 (3 spatial \u00D7 3 temporal, key-frame\n    // aligned). If the browser rejects it we fall back to the simulcast ladder below.\n    vp9: {\n        preferredScalabilityMode: 'L3T3_KEY',\n        simulcast: [\n            { rid: 'low',  scaleResolutionDownBy: 4, maxBitrate: 150000,  scalabilityMode: 'L1T3' },\n            { rid: 'mid',  scaleResolutionDownBy: 2, maxBitrate: 500000,  scalabilityMode: 'L1T3' },\n            { rid: 'high', scaleResolutionDownBy: 1, maxBitrate: 1500000, scalabilityMode: 'L1T3' },\n        ],\n        degradationPreference: 'balanced',\n    },\n    av1: {\n        scalabilityMode: 'L1T3',\n        maxBitrate: 1200000,\n        degradationPreference: 'maintain-framerate',\n    },\n    // H.264 / VP8: ordinary simulcast, no SVC.\n    simulcast: [\n        { rid: 'low',  scaleResolutionDownBy: 4, maxBitrate: 150000 },\n        { rid: 'mid',  scaleResolutionDownBy: 2, maxBitrate: 500000 },\n        { rid: 'high', scaleResolutionDownBy: 1, maxBitrate: 1500000 },\n    ],\n    networkPriority: 'medium',    // below audio's 'high'.\n};\n\n// \u2500\u2500 TRANSPORT (RTCP feedback / header extensions to guarantee in SDP) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// transport-wide-cc drives the bandwidth estimator; nack/pli/fir/remb handle\n// loss recovery and keyframe requests. Video gets the full set, audio a subset.\nexport const TRANSPORT_CONFIG = {\n    twccUri: 'http://www.ietf.org/id/draft-holmer-rmcat-transport-wide-cc-extensions-01',\n    video: {\n        rtcpFb: ['transport-cc', 'nack', 'nack pli', 'ccm fir', 'goog-remb'],\n        twcc: true,\n    },\n    audio: {\n        rtcpFb: ['transport-cc', 'nack'],\n        twcc: true,\n    },\n};\n\n// \u2500\u2500 ADAPTATION (getStats loop) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n// Reactive bitrate control. Thresholds from the brief. Applied via setParameters\n// only \u2014 never renegotiation, never track restarts.\nexport const ADAPTATION_CONFIG = {\n    intervalMs: 1000,\n    loss: {\n        highPct: 0.10,          // >10% loss \u2192 back off video.\n        recoverPct: 0.03,       // <3% loss (sustained) \u2192 ramp up.\n        audioProtectPct: 0.25,  // don't touch audio until loss exceeds 25%.\n    },\n    rtt: {\n        highMs: 300,            // >300 ms \u2192 back off.\n        recoverMs: 150,         // <150 ms (sustained) \u2192 ramp up.\n    },\n    stepDownPct: 0.20,          // shrink video maxBitrate by 20% per bad tick.\n    stepUpPct: 0.10,            // grow by 10% per good window.\n    minVideoBitrate: 100000,    // floor for the low layer (bps).\n    recoverStableTicks: 5,      // consecutive good ticks before ramping up.\n    cpuScaleStep: 1.5,          // qualityLimitationReason 'cpu' \u2192 bump scaleResolutionDownBy \u00D71.5.\n};\n", "// Pure SDP munging utilities.\n//\n// SDP munging is inherently fragile across browsers, so every function here is:\n//   - idempotent (running twice yields the same SDP \u2014 no duplicate lines),\n//   - line-ending preserving (SDP uses CRLF; we detect and keep it),\n//   - defensive (unknown/missing sections are left untouched, never thrown on).\n//\n// No DOM/WebRTC APIs are used, so this module is unit-testable in plain Node.\n\n/** Detect the line terminator used by an SDP blob (CRLF per RFC 4566, but be safe). */\nfunction detectEol(sdp) {\n    return sdp.indexOf('\\r\\n') !== -1 ? '\\r\\n' : '\\n';\n}\n\n/**\n * Split an SDP into its session part and per-media sections.\n * @returns {{ eol:string, session:string[], media:Array<{lines:string[]}> }}\n */\nexport function splitSdp(sdp) {\n    const eol = detectEol(sdp);\n    const lines = sdp.split(/\\r\\n|\\n/);\n    const session = [];\n    const media = [];\n    let current = null;\n    for (const line of lines) {\n        if (line.startsWith('m=')) {\n            current = { lines: [line] };\n            media.push(current);\n        } else if (current) {\n            current.lines.push(line);\n        } else {\n            session.push(line);\n        }\n    }\n    return { eol, session, media };\n}\n\n/** Reassemble a split SDP, preserving the original line ending. */\nexport function joinSdp(parsed) {\n    const all = [...parsed.session];\n    for (const m of parsed.media) all.push(...m.lines);\n    return all.join(parsed.eol);\n}\n\n/** The media kind ('audio' | 'video' | 'application') of a section. */\nexport function sectionKind(section) {\n    const m = section.lines[0].match(/^m=(\\w+)/);\n    return m ? m[1] : null;\n}\n\n/**\n * All payload types in a section whose rtpmap encoding name matches `codecName`\n * (case-insensitive), e.g. 'opus', 'VP9', 'red'.\n * @returns {string[]}\n */\nexport function findPayloadTypes(section, codecName) {\n    const re = new RegExp('^a=rtpmap:(\\\\d+)\\\\s+' + codecName + '\\\\/', 'i');\n    const pts = [];\n    for (const line of section.lines) {\n        const m = line.match(re);\n        if (m) pts.push(m[1]);\n    }\n    return pts;\n}\n\n/** Parse an `a=fmtp:<pt> k=v;k2=v2;flag` value string into an ordered map. */\nfunction parseFmtpParams(value) {\n    const map = new Map();\n    for (const part of value.split(';')) {\n        const p = part.trim();\n        if (!p) continue;\n        const eq = p.indexOf('=');\n        if (eq === -1) map.set(p, undefined);           // bare flag\n        else map.set(p.slice(0, eq).trim(), p.slice(eq + 1).trim());\n    }\n    return map;\n}\n\n/** Serialise an fmtp param map back to `k=v;k2=v2` form. */\nfunction serializeFmtpParams(map) {\n    const parts = [];\n    for (const [k, v] of map) parts.push(v === undefined ? k : `${k}=${v}`);\n    return parts.join(';');\n}\n\n/**\n * Insert or update the `a=fmtp:<pt>` line for a payload type, merging `params`\n * over any existing values. Idempotent: existing keys are overwritten, not\n * duplicated; a missing fmtp line is created right after the rtpmap line.\n */\nexport function upsertFmtp(section, pt, params) {\n    const fmtpIdx = section.lines.findIndex(l => l.startsWith(`a=fmtp:${pt} `) || l === `a=fmtp:${pt}`);\n    if (fmtpIdx !== -1) {\n        const existing = section.lines[fmtpIdx].slice(`a=fmtp:${pt} `.length);\n        const map = parseFmtpParams(existing);\n        for (const [k, v] of Object.entries(params)) map.set(k, String(v));\n        section.lines[fmtpIdx] = `a=fmtp:${pt} ${serializeFmtpParams(map)}`;\n        return;\n    }\n    // No fmtp yet \u2014 build one and place it after the matching rtpmap line.\n    const map = new Map();\n    for (const [k, v] of Object.entries(params)) map.set(k, String(v));\n    const newLine = `a=fmtp:${pt} ${serializeFmtpParams(map)}`;\n    const rtpmapIdx = section.lines.findIndex(l => l.startsWith(`a=rtpmap:${pt} `));\n    if (rtpmapIdx !== -1) section.lines.splice(rtpmapIdx + 1, 0, newLine);\n    else section.lines.push(newLine);\n}\n\n/**\n * Apply Opus fmtp parameters (FEC / DTX / bitrate / etc.) to every Opus payload\n * type in the audio m-line. Returns the munged SDP; input SDP with no Opus\n * audio section is returned unchanged.\n */\nexport function applyOpusSettings(sdp, opusFmtp) {\n    if (!sdp || typeof sdp !== 'string') return sdp;\n    const parsed = splitSdp(sdp);\n    let changed = false;\n    for (const section of parsed.media) {\n        if (sectionKind(section) !== 'audio') continue;\n        for (const pt of findPayloadTypes(section, 'opus')) {\n            upsertFmtp(section, pt, opusFmtp);\n            changed = true;\n        }\n    }\n    return changed ? joinSdp(parsed) : sdp;\n}\n\n// \u2500\u2500 Transport feedback \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n// Auxiliary payloads that are not primary media codecs (no per-codec rtcp-fb).\nconst AUX_CODEC = /^(rtx|red|ulpfec|flexfec-03|telephone-event|CN)$/i;\n\n/** Primary-codec payload types in a section (excludes rtx/red/fec/DTMF/CN). */\nexport function getCodecPayloadTypes(section) {\n    const pts = [];\n    for (const line of section.lines) {\n        const m = line.match(/^a=rtpmap:(\\d+)\\s+([^/]+)\\//);\n        if (m && !AUX_CODEC.test(m[2])) pts.push(m[1]);\n    }\n    return pts;\n}\n\n/**\n * Ensure each `a=rtcp-fb:<pt> <fb>` line exists for every primary codec in the\n * section. Idempotent \u2014 never duplicates an existing line.\n */\nexport function ensureRtcpFb(section, feedbacks) {\n    for (const pt of getCodecPayloadTypes(section)) {\n        for (const fb of feedbacks) {\n            const line = `a=rtcp-fb:${pt} ${fb}`;\n            if (section.lines.includes(line)) continue;\n            // Insert after the last existing attribute line for this pt.\n            let insertAt = -1;\n            for (let i = 0; i < section.lines.length; i++) {\n                const l = section.lines[i];\n                if (l.startsWith(`a=rtpmap:${pt} `) || l.startsWith(`a=fmtp:${pt} `) || l.startsWith(`a=rtcp-fb:${pt} `)) insertAt = i;\n            }\n            if (insertAt === -1) insertAt = section.lines.length - 1;\n            section.lines.splice(insertAt + 1, 0, line);\n        }\n    }\n}\n\n/**\n * Ensure an RTP header extension (`a=extmap:<id> <uri>`) is present, allocating\n * the next free id. Idempotent \u2014 a section already carrying the uri is untouched.\n */\nexport function ensureExtmap(section, uri) {\n    if (section.lines.some(l => l.startsWith('a=extmap:') && l.includes(uri))) return;\n    let maxId = 0, insertAt = -1;\n    for (let i = 0; i < section.lines.length; i++) {\n        const m = section.lines[i].match(/^a=extmap:(\\d+)/);\n        if (m) { maxId = Math.max(maxId, Number(m[1])); insertAt = i; }\n    }\n    if (insertAt === -1) {\n        // No extmap yet \u2014 place after mid/rtpmap area, else end.\n        insertAt = section.lines.findIndex(l => l.startsWith('a=mid:'));\n        if (insertAt === -1) insertAt = section.lines.length - 1;\n    }\n    section.lines.splice(insertAt + 1, 0, `a=extmap:${maxId + 1} ${uri}`);\n}\n\n/**\n * Ensure transport-wide-cc / nack / pli / fir / remb feedback and the TWCC header\n * extension are present on the audio/video m-lines per `cfg` (TRANSPORT_CONFIG).\n * Idempotent and non-destructive; SDP with no matching sections is returned as-is.\n */\nexport function applyTransport(sdp, cfg) {\n    if (!sdp || typeof sdp !== 'string' || !cfg) return sdp;\n    const parsed = splitSdp(sdp);\n    let changed = false;\n    for (const section of parsed.media) {\n        const kind = sectionKind(section);\n        const c = kind === 'video' ? cfg.video : kind === 'audio' ? cfg.audio : null;\n        if (!c) continue;\n        if (Array.isArray(c.rtcpFb)) { ensureRtcpFb(section, c.rtcpFb); changed = true; }\n        if (c.twcc && cfg.twccUri) { ensureExtmap(section, cfg.twccUri); changed = true; }\n    }\n    return changed ? joinSdp(parsed) : sdp;\n}\n", "// Audio sender / transceiver configuration for calls.\n//\n// Splits the brief's \"configureAudioSender\" into the three WebRTC surfaces it\n// actually touches, because a single RTCRtpSender cannot do all of them:\n//   - setCodecPreferences  \u2192 on the TRANSCEIVER, before createOffer (RED ordering)\n//   - fmtp munging          \u2192 on the SDP string (see sdp.js applyOpusSettings)\n//   - setParameters         \u2192 on the SENDER, any time after it exists\n//\n// All functions feature-detect and swallow unsupported-API errors so Safari /\n// Firefox (which vary on RED and setCodecPreferences) degrade gracefully.\n\nimport { AUDIO_CONFIG, IS_WEBKIT } from './config.js';\n\n/**\n * Order codecs so RED (RFC 2198) is preferred first and Opus second, keeping any\n * other codecs (e.g. telephone-event) after them. No-op when RED isn't offered\n * or setCodecPreferences is unsupported.\n * @param {RTCRtpTransceiver} transceiver\n */\nexport function applyAudioCodecPreferences(transceiver) {\n    try {\n        if (IS_WEBKIT) return false; // codec preferences skipped on WebKit (capture-safe)\n        if (!transceiver || typeof transceiver.setCodecPreferences !== 'function') return false;\n        if (!AUDIO_CONFIG.preferRed) return false;\n        const caps = (typeof RTCRtpSender !== 'undefined' && RTCRtpSender.getCapabilities)\n            ? RTCRtpSender.getCapabilities('audio')\n            : null;\n        if (!caps || !Array.isArray(caps.codecs)) return false;\n\n        const isRed = c => /red$/i.test(c.mimeType);\n        const isOpus = c => /opus$/i.test(c.mimeType);\n        if (!caps.codecs.some(isRed)) return false; // RED not available\n\n        const red = caps.codecs.filter(isRed);\n        const opus = caps.codecs.filter(isOpus);\n        const rest = caps.codecs.filter(c => !isRed(c) && !isOpus(c));\n        transceiver.setCodecPreferences([...red, ...opus, ...rest]);\n        return true;\n    } catch (e) {\n        return false;\n    }\n}\n\n/**\n * Apply sender-level parameters: high bandwidth priority, high network priority\n * (audio ahead of video on the wire) and a maxBitrate cap. Uses read-modify-write\n * on getParameters()/setParameters() so we never clobber existing encodings.\n * @param {RTCRtpSender} sender\n * @param {object} [options] overrides for AUDIO_CONFIG.sender\n */\nexport async function configureAudioSender(sender, options = {}) {\n    try {\n        if (IS_WEBKIT) return false; // sender setParameters skipped on WebKit (capture-safe)\n        if (!sender || typeof sender.getParameters !== 'function') return false;\n        const cfg = { ...AUDIO_CONFIG.sender, ...options };\n        const params = sender.getParameters();\n        if (!params.encodings || params.encodings.length === 0) params.encodings = [{}];\n        for (const enc of params.encodings) {\n            enc.maxBitrate = cfg.maxBitrate;\n            enc.priority = cfg.priority;\n            enc.networkPriority = cfg.networkPriority;\n        }\n        await sender.setParameters(params);\n        return true;\n    } catch (e) {\n        return false;\n    }\n}\n", "// Video sender / transceiver configuration for calls.\n//\n// Strategy for 1:1 P2P (single remote peer): use a SINGLE encoding with SVC\n// (VP9 L3T3_KEY / AV1 L1T3) applied through sender.setParameters \u2014 this needs no\n// addTransceiver/rids and therefore doesn't disturb the working addTrack flow.\n// Layered SVC already gives graceful per-layer degradation for one receiver;\n// multi-rid simulcast (mainly useful for SFUs) is a documented fallback, not\n// wired here. All calls feature-detect and fall back gracefully:\n//   VP9 \u2192 AV1 \u2192 H.264 \u2192 VP8, and SVC \u2192 plain encoding if a mode is rejected.\n\nimport { VIDEO_CONFIG, IS_WEBKIT } from './config.js';\n\nconst CODEC_RANK = { VP9: 0, AV1: 1, H264: 2, VP8: 3 };\n\n/** 'video/VP9' \u2192 'VP9', 'video/H264' \u2192 'H264', 'video/rtx' \u2192 'RTX', \u2026 */\nexport function codecShortName(mimeType) {\n    const sub = String(mimeType || '').split('/')[1] || '';\n    return sub.toUpperCase();\n}\n\n/**\n * Reorder a getCapabilities().codecs array so our preferred video codecs come\n * first (VP9, AV1, H264, VP8), with everything else (rtx / red / *fec) kept in\n * its original relative order afterwards \u2014 dropping rtx/fec would break\n * retransmission, so they must stay in the list.\n */\nexport function sortVideoCodecs(codecs) {\n    const rank = c => {\n        const n = codecShortName(c.mimeType);\n        return Object.prototype.hasOwnProperty.call(CODEC_RANK, n) ? CODEC_RANK[n] : 99;\n    };\n    return codecs\n        .map((c, i) => ({ c, i }))\n        .sort((a, b) => (rank(a.c) - rank(b.c)) || (a.i - b.i))   // stable\n        .map(x => x.c);\n}\n\n/** The top available video codec by our preference order, or null. */\nexport function pickPreferredVideoCodec(caps) {\n    if (!caps || !Array.isArray(caps.codecs)) return null;\n    const present = new Set(caps.codecs.map(c => codecShortName(c.mimeType)));\n    for (const name of VIDEO_CONFIG.codecPreferenceOrder) if (present.has(name)) return name;\n    return null;\n}\n\nfunction videoCaps() {\n    return (typeof RTCRtpSender !== 'undefined' && RTCRtpSender.getCapabilities)\n        ? RTCRtpSender.getCapabilities('video') : null;\n}\n\n/**\n * Order codec preferences on the video transceiver (VP9 first \u2026). Must be called\n * before createOffer/createAnswer. Returns the chosen top codec name (or false).\n * @param {RTCRtpTransceiver} transceiver\n */\nexport function applyVideoCodecPreferences(transceiver) {\n    try {\n        if (IS_WEBKIT) return false; // codec preferences skipped on WebKit (capture-safe)\n        if (!transceiver || typeof transceiver.setCodecPreferences !== 'function') return false;\n        const caps = videoCaps();\n        if (!caps || !Array.isArray(caps.codecs)) return false;\n        transceiver.setCodecPreferences(sortVideoCodecs(caps.codecs));\n        return pickPreferredVideoCodec(caps);\n    } catch (e) {\n        return false;\n    }\n}\n\n/**\n * Whether the browser confirms the SVC scalabilityMode we want for a codec.\n * Uses the `scalabilityModes` capability field (Chromium M113+, recent Firefox).\n * When it's absent we return false so we fall back to simulcast \u2014 safer than\n * assuming SVC on a browser that can't do it (e.g. older Firefox/Safari).\n */\nexport function codecSupportsSvc(caps, name) {\n    const codec = caps?.codecs?.find(c => codecShortName(c.mimeType) === name);\n    const modes = codec && codec.scalabilityModes;\n    if (!Array.isArray(modes)) return false;\n    const want = name === 'AV1' ? VIDEO_CONFIG.av1.scalabilityMode : VIDEO_CONFIG.vp9.preferredScalabilityMode;\n    return modes.includes(want);\n}\n\n/**\n * Build the `sendEncodings` for addTransceiver('video', \u2026) per the brief:\n *   - VP9/AV1 with confirmed SVC \u2192 a SINGLE encoding with scalabilityMode\n *     (one stream that degrades by layer \u2014 ideal for 1:1),\n *   - VP9 without confirmed SVC \u2192 the 3-rid L1T3 simulcast ladder,\n *   - H.264/VP8 (or AV1 w/o SVC) \u2192 plain 3-rid simulcast.\n * @param {RTCRtpCapabilities} [caps] pass to override detection (tests)\n */\nexport function buildVideoSendEncodings(caps = videoCaps()) {\n    const preferred = pickPreferredVideoCodec(caps) || 'VP8';\n    if ((preferred === 'VP9' || preferred === 'AV1') && codecSupportsSvc(caps, preferred)) {\n        const plan = encodingPlanFor(preferred);\n        return [{ scalabilityMode: plan.scalabilityMode, maxBitrate: plan.maxBitrate }];\n    }\n    if (preferred === 'VP9') {\n        return VIDEO_CONFIG.vp9.simulcast.map(e => ({ ...e }));\n    }\n    return VIDEO_CONFIG.simulcast.map(e => ({ ...e }));\n}\n\n/** SVC mode + bitrate + degradation for a given codec (single-encoding P2P). */\nexport function encodingPlanFor(codecName) {\n    if (codecName === 'VP9') {\n        return { scalabilityMode: VIDEO_CONFIG.vp9.preferredScalabilityMode, maxBitrate: 1500000, degradationPreference: VIDEO_CONFIG.vp9.degradationPreference };\n    }\n    if (codecName === 'AV1') {\n        return { scalabilityMode: VIDEO_CONFIG.av1.scalabilityMode, maxBitrate: VIDEO_CONFIG.av1.maxBitrate, degradationPreference: VIDEO_CONFIG.av1.degradationPreference };\n    }\n    // H.264 / VP8 / unknown: plain single encoding, no SVC.\n    return { scalabilityMode: undefined, maxBitrate: 1500000, degradationPreference: 'balanced' };\n}\n\n/**\n * Apply the single-encoding SVC plan + networkPriority + degradationPreference to\n * a video sender via setParameters. Falls back to a plain encoding if the browser\n * rejects the requested scalabilityMode (Firefox/Safari SVC gaps).\n * @param {RTCRtpSender} sender\n */\nexport async function configureVideoSender(sender, options = {}) {\n    try {\n        if (IS_WEBKIT) return false; // sender setParameters skipped on WebKit (capture-safe)\n        if (!sender || typeof sender.getParameters !== 'function') return false;\n        const preferred = pickPreferredVideoCodec(videoCaps()) || 'VP8';\n        const plan = { ...encodingPlanFor(preferred), ...options };\n        const params = sender.getParameters();\n        if (!params.encodings || params.encodings.length === 0) params.encodings = [{}];\n        const simulcast = params.encodings.length > 1;\n\n        if (simulcast) {\n            // Simulcast: keep the per-rid bitrate ladder set at addTransceiver time;\n            // only stamp networkPriority so video stays below audio on the wire.\n            for (const enc of params.encodings) enc.networkPriority = VIDEO_CONFIG.networkPriority;\n        } else {\n            const enc = params.encodings[0];\n            enc.maxBitrate = plan.maxBitrate;\n            enc.networkPriority = VIDEO_CONFIG.networkPriority;\n            if (plan.scalabilityMode) enc.scalabilityMode = plan.scalabilityMode;\n        }\n        if (plan.degradationPreference) params.degradationPreference = plan.degradationPreference;\n\n        try {\n            await sender.setParameters(params);\n            return true;\n        } catch (e) {\n            // Most likely an unsupported scalabilityMode \u2192 retry without it.\n            if (!simulcast && plan.scalabilityMode) {\n                delete params.encodings[0].scalabilityMode;\n                try {\n                    await sender.setParameters(params);\n                    return true;\n                } catch (e2) {\n                    return false;\n                }\n            }\n            return false;\n        }\n    } catch (e) {\n        return false;\n    }\n}\n", "// getStats parsing + quality classification for adaptive calls.\n//\n// summarizeStats() takes a plain array of RTCStats objects (Array.from(report\n// .values())) plus the previous counter snapshot, so it is fully unit-testable\n// in Node without a live RTCPeerConnection.\n\n/**\n * Reduce a getStats() report to the few numbers the controller / UI need.\n * @param {Array<object>} stats  RTCStats objects (video preferred over audio).\n * @param {{packetsSent?:number, packetsLost?:number}} [prev] previous counters.\n * @returns {{lossPct:number, rttMs:number, jitterMs:number,\n *            availableOutgoingBitrate:(number|null), qualityLimitationReason:string,\n *            counters:{packetsSent:number, packetsLost:number}, hasData:boolean}}\n */\nexport function summarizeStats(stats, prev = {}) {\n    let outbound = null, remoteInbound = null, candidatePair = null;\n    for (const s of stats) {\n        if (!s || typeof s.type !== 'string') continue;\n        if (s.type === 'outbound-rtp' && !s.isRemote) {\n            if (!outbound || s.kind === 'video') outbound = s;         // prefer video\n        } else if (s.type === 'remote-inbound-rtp') {\n            if (!remoteInbound || s.kind === 'video') remoteInbound = s;\n        } else if (s.type === 'candidate-pair') {\n            const active = s.nominated || s.selected || s.state === 'succeeded';\n            if (active && (!candidatePair || s.nominated)) candidatePair = s;\n        }\n    }\n\n    const packetsSent = Number(outbound?.packetsSent ?? 0);\n    const packetsLost = Number(remoteInbound?.packetsLost ?? 0);\n    const dSent = packetsSent - (prev.packetsSent ?? packetsSent);\n    const dLost = packetsLost - (prev.packetsLost ?? packetsLost);\n    const denom = dSent + dLost;\n    // Interval loss ratio (guard against counter resets / first sample).\n    const lossPct = denom > 0 ? Math.min(1, Math.max(0, dLost / denom)) : 0;\n\n    const rttSec = candidatePair?.currentRoundTripTime ?? remoteInbound?.roundTripTime ?? 0;\n    const rttMs = Number(rttSec) * 1000;\n    const jitterMs = Number(remoteInbound?.jitter ?? 0) * 1000;\n    const availableOutgoingBitrate = candidatePair?.availableOutgoingBitrate != null\n        ? Number(candidatePair.availableOutgoingBitrate) : null;\n    const qualityLimitationReason = outbound?.qualityLimitationReason ?? 'none';\n\n    return {\n        lossPct, rttMs, jitterMs, availableOutgoingBitrate, qualityLimitationReason,\n        counters: { packetsSent, packetsLost },\n        hasData: !!(outbound && (remoteInbound || candidatePair)),\n    };\n}\n\n/**\n * Coarse connection-quality label for the UI, from loss + RTT.\n * @returns {'excellent'|'good'|'fair'|'poor'|null} null when there's no data yet.\n */\nexport function qualityFromMetrics(m) {\n    if (!m || !m.hasData) return null;\n    const l = m.lossPct, r = m.rttMs;\n    if (l < 0.03 && r < 150) return 'excellent';\n    if (l < 0.07 && r < 250) return 'good';\n    if (l < 0.15 && r < 400) return 'fair';\n    return 'poor';\n}\n", "// NetworkAdaptationController \u2014 reactive bitrate control for calls.\n//\n// Once a second it reads pc.getStats(), classifies the link, and nudges the VIDEO\n// sender's maxBitrate / scaleResolutionDownBy via setParameters \u2014 never\n// renegotiation, never touching the tracks, never touching AUDIO (audio stays at\n// its configured bitrate so speech survives; see ADAPTATION_CONFIG.audioProtect).\n//\n// The decision logic (decideAdaptation) is pure and unit-tested separately from\n// the live getStats/setParameters plumbing.\n\nimport { ADAPTATION_CONFIG, IS_WEBKIT } from '../config.js';\nimport { summarizeStats, qualityFromMetrics } from './metrics.js';\n\n/**\n * Pure adaptation decision.\n * @param {object} m      metrics from summarizeStats\n * @param {object} state  { targetBitrate, ceilingBitrate, scaleResolutionDownBy, goodTicks }\n * @param {object} cfg    ADAPTATION_CONFIG\n * @returns {{targetBitrate:number, scaleResolutionDownBy:number, goodTicks:number,\n *            changed:boolean, reason:string}}\n */\nexport function decideAdaptation(m, state, cfg = ADAPTATION_CONFIG) {\n    let { targetBitrate, ceilingBitrate, scaleResolutionDownBy, goodTicks } = state;\n    let changed = false, reason = 'steady';\n\n    if (m.qualityLimitationReason === 'cpu') {\n        // CPU-bound: drop resolution, leave bitrate alone (brief \u00A75).\n        const next = Math.min(4, +(scaleResolutionDownBy * cfg.cpuScaleStep).toFixed(3));\n        if (next !== scaleResolutionDownBy) { scaleResolutionDownBy = next; changed = true; }\n        goodTicks = 0; reason = 'cpu';\n    } else if (m.lossPct > cfg.loss.highPct || m.rttMs > cfg.rtt.highMs) {\n        // Congestion: step video bitrate down (never below the floor).\n        const next = Math.max(cfg.minVideoBitrate, Math.round(targetBitrate * (1 - cfg.stepDownPct)));\n        if (next !== targetBitrate) { targetBitrate = next; changed = true; }\n        goodTicks = 0; reason = 'backoff';\n    } else if (m.lossPct < cfg.loss.recoverPct && m.rttMs < cfg.rtt.recoverMs) {\n        // Sustained good link: ramp up after enough consecutive good ticks.\n        goodTicks += 1; reason = 'recovering';\n        if (goodTicks >= cfg.recoverStableTicks) {\n            const next = Math.min(ceilingBitrate, Math.round(targetBitrate * (1 + cfg.stepUpPct)));\n            if (next !== targetBitrate) { targetBitrate = next; changed = true; reason = 'rampup'; }\n            goodTicks = 0;\n        }\n    } else {\n        goodTicks = 0; // neutral zone: hold.\n    }\n\n    return { targetBitrate, scaleResolutionDownBy, goodTicks, changed, reason };\n}\n\nexport class NetworkAdaptationController {\n    /**\n     * @param {RTCPeerConnection} pc\n     * @param {object} opts { getVideoSender:()=>RTCRtpSender|null, ceilingBitrate?, onQuality?, cfg? }\n     */\n    constructor(pc, opts = {}) {\n        this.pc = pc;\n        this.getVideoSender = opts.getVideoSender || (() => null);\n        this.onQuality = opts.onQuality || (() => {});\n        this.cfg = opts.cfg || ADAPTATION_CONFIG;\n        this._timer = null;\n        this._prevCounters = {};\n        this._lastQuality = undefined;\n        this.state = {\n            targetBitrate: opts.ceilingBitrate || 1500000,\n            ceilingBitrate: opts.ceilingBitrate || 1500000,\n            scaleResolutionDownBy: 1,\n            goodTicks: 0,\n        };\n    }\n\n    start() {\n        if (this._timer) return;\n        this._timer = setInterval(() => { this._tick().catch(() => {}); }, this.cfg.intervalMs);\n    }\n\n    stop() {\n        if (this._timer) { clearInterval(this._timer); this._timer = null; }\n    }\n\n    async _tick() {\n        if (!this.pc || typeof this.pc.getStats !== 'function') return;\n        const report = await this.pc.getStats();\n        const stats = typeof report.values === 'function' ? Array.from(report.values()) : report;\n        const m = summarizeStats(stats, this._prevCounters);\n        this._prevCounters = m.counters;\n\n        // Quality \u2192 UI (only emit on change).\n        const q = qualityFromMetrics(m);\n        if (q && q !== this._lastQuality) {\n            this._lastQuality = q;\n            try { this.onQuality(q, m); } catch (_) {}\n        }\n\n        if (!m.hasData) return;\n\n        const decision = decideAdaptation(m, this.state, this.cfg);\n        this.state = {\n            targetBitrate: decision.targetBitrate,\n            ceilingBitrate: this.state.ceilingBitrate,\n            scaleResolutionDownBy: decision.scaleResolutionDownBy,\n            goodTicks: decision.goodTicks,\n        };\n        if (decision.changed) {\n            await this._applyToVideoSender();\n        }\n    }\n\n    async _applyToVideoSender() {\n        // WebKit: never write sender params (kills the capture); quality indicator\n        // still works (read-only getStats). Safari's own congestion control adapts.\n        if (IS_WEBKIT) return;\n        const sender = this.getVideoSender();\n        if (!sender || typeof sender.getParameters !== 'function') return;\n        try {\n            const params = sender.getParameters();\n            if (!params.encodings || params.encodings.length === 0) params.encodings = [{}];\n            if (params.encodings.length === 1) {\n                // Single encoding (SVC or plain): cap bitrate + scale resolution.\n                params.encodings[0].maxBitrate = this.state.targetBitrate;\n                params.encodings[0].scaleResolutionDownBy = this.state.scaleResolutionDownBy;\n            } else {\n                // Simulcast: throttle only the TOP (highest-bitrate) layer so the\n                // low/mid layers keep flowing; leave their per-rid scale ladder intact.\n                const top = params.encodings[params.encodings.length - 1];\n                top.maxBitrate = this.state.targetBitrate;\n            }\n            await sender.setParameters(params);\n        } catch (e) {\n            // WebKit/older browsers can reject setParameters; safe to skip this tick.\n        }\n    }\n}\n", "/**\n * Double Ratchet (Signal specification) for SecureBit.chat.\n *\n * WHY THIS EXISTS\n * ---------------\n * Until now the session derived one set of keys from a single ECDH at handshake\n * time and used them for the whole conversation. `rotateKeys()` was written but\n * never called and `keyRotationInterval` was null, so a key recovered at any\n * point \u2014 from a heap snapshot, a compromised extension, a seized device with\n * the tab still open \u2014 decrypted every message ever sent in that session,\n * including messages sent hours earlier. Forward secrecy existed only BETWEEN\n * sessions.\n *\n * The Double Ratchet fixes both halves of that:\n *\n *   - Symmetric ratchet: each message gets its own key, derived from a chain key\n *     by a one-way KDF. The message key is destroyed after use and the chain key\n *     is replaced by its successor, so a key captured now cannot reproduce any\n *     earlier one. That is forward secrecy per message.\n *\n *   - DH ratchet: each time the conversation changes direction, the replying\n *     side introduces a fresh ECDH key pair and both sides mix a new shared\n *     secret into the root key. An attacker who learns the entire state is\n *     locked out again as soon as one message is exchanged in each direction.\n *     That is post-compromise security, which no amount of symmetric ratcheting\n *     provides.\n *\n * INITIALISATION WITHOUT A HANDSHAKE CHANGE\n * -----------------------------------------\n * Signal bootstraps from a pre-key bundle. We do not need one: both peers\n * already hold each other's authenticated ECDH public key from the existing\n * handshake, and the SAS the user compared covers exactly those keys. So the\n * initiator starts with a fresh ratchet key against the peer's handshake key,\n * and the responder starts with its own handshake key pair as its ratchet pair.\n * The first DH ratchet then agrees on the same secret from both directions.\n * Nothing new has to be sent during setup, which keeps the change confined to\n * the message path.\n *\n * WHAT IS AUTHENTICATED\n * ---------------------\n * The header (ratchet public key, previous chain length, message number) travels\n * in the clear \u2014 the receiver needs it before it can derive a key \u2014 but it is\n * passed to AES-GCM as additional authenticated data. Tampering with any header\n * field makes decryption fail rather than silently redirecting the ratchet.\n */\n\nconst ROOT_INFO = 'SecureBit-DR-Root-v1';\nconst MESSAGE_INFO = 'SecureBit-DR-Message-v1';\nconst INIT_INFO = 'SecureBit-DR-Init-v1';\n\n// Chain-key advance constants, per the Signal spec's KDF_CK.\nconst MK_SEED = Uint8Array.of(0x01);\nconst CK_SEED = Uint8Array.of(0x02);\n\nconst enc = new TextEncoder();\nconst dec = new TextDecoder();\n\n/**\n * Bounds on out-of-order tolerance. These are a DoS control, not a tuning knob:\n * every skipped message forces us to derive and RETAIN a key, so an attacker who\n * can pick message numbers would otherwise make us allocate without limit by\n * sending n = 2^31 once.\n */\nexport const RATCHET_LIMITS = Object.freeze({\n    // How far ahead of the expected number a single message may jump.\n    MAX_SKIP_PER_CHAIN: 512,\n    // Total retained keys for messages that never arrived, across all chains.\n    MAX_SKIPPED_KEYS: 1024,\n    // Retained keys older than this are dropped: the data channel is reliable\n    // and ordered, so a gap that has not resolved in minutes never will.\n    SKIPPED_KEY_TTL_MS: 5 * 60 * 1000\n});\n\nfunction b64(bytes) {\n    let binary = '';\n    const view = new Uint8Array(bytes);\n    for (let i = 0; i < view.length; i++) binary += String.fromCharCode(view[i]);\n    return btoa(binary);\n}\n\nfunction unb64(text) {\n    const binary = atob(text);\n    const out = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n    return out;\n}\n\nfunction zeroize(bytes) {\n    try {\n        if (bytes && bytes.length) {\n            crypto.getRandomValues(bytes);\n            bytes.fill(0);\n        }\n    } catch (_) { /* detached buffer \u2014 already unreadable */ }\n}\n\nasync function hkdf(ikm, salt, info, lengthBytes) {\n    const key = await crypto.subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);\n    const bits = await crypto.subtle.deriveBits(\n        { name: 'HKDF', hash: 'SHA-256', salt, info: enc.encode(info) },\n        key,\n        lengthBytes * 8\n    );\n    return new Uint8Array(bits);\n}\n\nasync function hmac(keyBytes, data) {\n    const key = await crypto.subtle.importKey(\n        'raw', keyBytes, { name: 'HMAC', hash: 'SHA-256' }, false, ['sign']\n    );\n    return new Uint8Array(await crypto.subtle.sign('HMAC', key, data));\n}\n\n/** KDF_CK \u2014 advance a chain and emit this message's key. One-way by construction. */\nasync function advanceChain(chainKey) {\n    const messageKey = await hmac(chainKey, MK_SEED);\n    const nextChainKey = await hmac(chainKey, CK_SEED);\n    return { messageKey, nextChainKey };\n}\n\n/** KDF_RK \u2014 mix a fresh DH secret into the root key, yielding the next chain. */\nasync function advanceRoot(rootKey, dhOutput) {\n    const derived = await hkdf(dhOutput, rootKey, ROOT_INFO, 64);\n    const nextRoot = derived.slice(0, 32);\n    const chainKey = derived.slice(32, 64);\n    zeroize(derived);\n    return { nextRoot, chainKey };\n}\n\nexport class DoubleRatchet {\n    constructor() {\n        this._rootKey = null;\n        this._sendingChainKey = null;\n        this._receivingChainKey = null;\n        this._selfKeyPair = null;      // DHs\n        this._remotePublicKey = null;  // DHr\n        this._remotePublicKeyB64 = null;\n        this._sendCount = 0;           // Ns\n        this._receiveCount = 0;        // Nr\n        this._previousSendCount = 0;   // PN\n        this._skipped = new Map();     // \"<dhB64>|<n>\" -> { key, storedAt }\n        this._namedCurve = 'P-384';\n        this._initialised = false;\n    }\n\n    /**\n     * @param {object} options\n     * @param {Uint8Array} options.sharedSecret  ECDH output from the handshake.\n     * @param {Uint8Array} options.sessionSalt   The session's 64-byte salt.\n     * @param {CryptoKey}  options.selfPrivateKey    Our handshake ECDH private key.\n     * @param {CryptoKey}  options.remotePublicKey   Peer's handshake ECDH public key.\n     * @param {boolean}    options.isInitiator   True for the side that created the offer.\n     */\n    async init({ sharedSecret, sessionSalt, selfPrivateKey, remotePublicKey, isInitiator }) {\n        if (!(sharedSecret instanceof Uint8Array) || sharedSecret.length === 0) {\n            throw new Error('DoubleRatchet: a shared secret is required');\n        }\n        if (!(selfPrivateKey instanceof CryptoKey) || !(remotePublicKey instanceof CryptoKey)) {\n            throw new Error('DoubleRatchet: handshake ECDH keys are required');\n        }\n\n        this._namedCurve = selfPrivateKey.algorithm?.namedCurve || 'P-384';\n\n        // The root key is bound to the session salt, so two sessions between the\n        // same pair of long-term keys never share ratchet state.\n        this._rootKey = await hkdf(sharedSecret, sessionSalt ?? new Uint8Array(0), INIT_INFO, 32);\n\n        if (isInitiator) {\n            // Send first: adopt a fresh ratchet key immediately and step the root\n            // once, so the very first message already leaves the handshake key\n            // behind.\n            this._selfKeyPair = await this._generateKeyPair();\n\n            // Deliberately NOT exported to base64 here. The peer's handshake\n            // public key arrives via importSignedPublicKey, which imports it as\n            // NON-EXTRACTABLE \u2014 exporting it throws InvalidAccessError and would\n            // abort ratchet setup on the initiator only, silently downgrading it\n            // to static keys while the responder ran fine. The b64 form exists\n            // solely to recognise a changed ratchet key on inbound messages, and\n            // there are none yet: leaving it null makes the peer's first message\n            // (which carries their own fresh ratchet key) correctly read as a new\n            // chain and trigger the DH ratchet.\n            this._remotePublicKey = remotePublicKey;\n            this._remotePublicKeyB64 = null;\n\n            const dh = await this._dh(this._selfKeyPair.privateKey, this._remotePublicKey);\n            const { nextRoot, chainKey } = await advanceRoot(this._rootKey, dh);\n            zeroize(dh);\n            zeroize(this._rootKey);\n            this._rootKey = nextRoot;\n            this._sendingChainKey = chainKey;\n        } else {\n            // Receive first: keep the handshake key pair as the current ratchet\n            // pair so the initiator's first DH lands on a key we hold, and take\n            // no chain until that message arrives.\n            this._selfKeyPair = { privateKey: selfPrivateKey, publicKey: null };\n            this._remotePublicKey = null;\n            this._remotePublicKeyB64 = null;\n        }\n\n        this._initialised = true;\n    }\n\n    get isInitialised() { return this._initialised; }\n\n    /**\n     * False on the responder until the initiator's first message arrives.\n     *\n     * This is inherent to the Double Ratchet, not an implementation gap: the\n     * responder's sending chain is only defined once it has seen the initiator's\n     * ratchet key, because both sides must derive it from the same DH. Callers\n     * have to check this rather than assume, or the responder's first message \u2014\n     * which the app sends automatically as a presence update the moment\n     * verification completes \u2014 throws instead of going out.\n     */\n    get canEncrypt() {\n        return this._initialised && this._sendingChainKey !== null;\n    }\n\n    /** Diagnostics only \u2014 deliberately exposes no key material. */\n    getState() {\n        return {\n            initialised: this._initialised,\n            sending: this._sendingChainKey !== null,\n            receiving: this._receivingChainKey !== null,\n            sendCount: this._sendCount,\n            receiveCount: this._receiveCount,\n            previousSendCount: this._previousSendCount,\n            skippedKeys: this._skipped.size\n        };\n    }\n\n    async _generateKeyPair() {\n        return crypto.subtle.generateKey(\n            { name: 'ECDH', namedCurve: this._namedCurve },\n            false,\n            ['deriveKey', 'deriveBits']\n        );\n    }\n\n    async _dh(privateKey, publicKey) {\n        const bits = await crypto.subtle.deriveBits(\n            { name: 'ECDH', public: publicKey }, privateKey, 256\n        );\n        return new Uint8Array(bits);\n    }\n\n    async _selfPublicKeyB64() {\n        if (!this._selfKeyPair?.publicKey) return null;\n        return b64(await crypto.subtle.exportKey('spki', this._selfKeyPair.publicKey));\n    }\n\n    async _importPublic(spkiB64) {\n        return crypto.subtle.importKey(\n            'spki', unb64(spkiB64), { name: 'ECDH', namedCurve: this._namedCurve }, true, []\n        );\n    }\n\n    /** Derive the AES-GCM key and IV for one message, then forget the message key. */\n    async _messageCipher(messageKey) {\n        const material = await hkdf(messageKey, new Uint8Array(32), MESSAGE_INFO, 44);\n        const key = await crypto.subtle.importKey(\n            'raw', material.slice(0, 32), { name: 'AES-GCM' }, false, ['encrypt', 'decrypt']\n        );\n        const iv = material.slice(32, 44);\n        zeroize(material);\n        return { key, iv };\n    }\n\n    /**\n     * @param {string} plaintext\n     * @returns {Promise<{header: string, ciphertext: string}>} header is the exact\n     *   string that must be transmitted and fed back to decrypt(): it doubles as\n     *   the AAD, so re-serialising it on the far side could change a byte and\n     *   fail authentication for no reason.\n     */\n    async encrypt(plaintext) {\n        if (!this._initialised) throw new Error('DoubleRatchet: not initialised');\n        if (!this._sendingChainKey) {\n            throw new Error('DoubleRatchet: no sending chain \u2014 awaiting the peer\\'s first message');\n        }\n\n        const { messageKey, nextChainKey } = await advanceChain(this._sendingChainKey);\n        zeroize(this._sendingChainKey);\n        this._sendingChainKey = nextChainKey;\n\n        const header = JSON.stringify({\n            dh: await this._selfPublicKeyB64(),\n            pn: this._previousSendCount,\n            n: this._sendCount\n        });\n        this._sendCount += 1;\n\n        const { key, iv } = await this._messageCipher(messageKey);\n        zeroize(messageKey);\n\n        const ciphertext = await crypto.subtle.encrypt(\n            { name: 'AES-GCM', iv, additionalData: enc.encode(header) },\n            key,\n            enc.encode(plaintext)\n        );\n\n        return { header, ciphertext: b64(ciphertext) };\n    }\n\n    /**\n     * @param {string} header      Exactly the string produced by encrypt().\n     * @param {string} ciphertext  Base64 body.\n     * @returns {Promise<string>} plaintext\n     */\n    async decrypt(header, ciphertext) {\n        if (!this._initialised) throw new Error('DoubleRatchet: not initialised');\n\n        let parsed;\n        try {\n            parsed = JSON.parse(header);\n        } catch (_) {\n            throw new Error('DoubleRatchet: malformed header');\n        }\n        const { dh, pn, n } = parsed;\n        if (typeof dh !== 'string' || !Number.isSafeInteger(n) || n < 0 ||\n            !Number.isSafeInteger(pn) || pn < 0) {\n            throw new Error('DoubleRatchet: invalid header fields');\n        }\n\n        this._pruneSkipped();\n\n        // A key retained for a message that arrived late. Only drop it once the\n        // message actually opens: a forged frame quoting a real header must not\n        // consume the key that the genuine message still needs.\n        const skippedId = `${dh}|${n}`;\n        const retained = this._skipped.get(skippedId);\n        if (retained) {\n            const plaintext = await this._open(retained.key, header, ciphertext);\n            this._skipped.delete(skippedId);\n            zeroize(retained.key);\n            return plaintext;\n        }\n\n        // SECURITY / ROBUSTNESS: everything below is staged and only committed\n        // once the message authenticates. The header is attacker-reachable \u2014 it\n        // travels in the clear so the receiver can route on it \u2014 and mutating the\n        // ratchet before verifying would let one forged or corrupted frame\n        // advance our chains past the peer's, desynchronising the session\n        // permanently. AES-GCM covers the header as AAD, so a bad frame is\n        // detected; it must simply leave no trace when it is.\n        const staged = await this._stageReceive(dh, pn, n);\n\n        let plaintext;\n        try {\n            plaintext = await this._open(staged.messageKey, header, ciphertext);\n        } catch (error) {\n            staged.discard();\n            throw error;\n        }\n\n        staged.commit();\n        return plaintext;\n    }\n\n    /**\n     * Work out which key opens this message and what the resulting state would\n     * be, without touching `this`. Returns the candidate key plus commit/discard.\n     */\n    async _stageReceive(dh, pn, n) {\n        const isNewChain = dh !== this._remotePublicKeyB64;\n        const pending = [];       // skipped keys to retain on commit\n        const toZeroOnCommit = []; // superseded chain keys\n        let ratchet = null;\n\n        let chainKey;\n        let receiveCount;\n        let remoteB64;\n\n        if (isNewChain) {\n            // Messages still missing from the OLD chain, before it is replaced.\n            if (this._receivingChainKey) {\n                const carried = await this._collectSkipped(\n                    this._receivingChainKey, this._receiveCount, pn, this._remotePublicKeyB64\n                );\n                pending.push(...carried.keys);\n                toZeroOnCommit.push(carried.finalChainKey);\n            }\n            ratchet = await this._stageDhRatchet(dh);\n            chainKey = ratchet.receivingChainKey;\n            receiveCount = 0;\n            remoteB64 = dh;\n        } else {\n            chainKey = this._receivingChainKey;\n            receiveCount = this._receiveCount;\n            remoteB64 = this._remotePublicKeyB64;\n        }\n\n        if (!chainKey) {\n            throw new Error('DoubleRatchet: no receiving chain for this message');\n        }\n\n        const gap = await this._collectSkipped(chainKey, receiveCount, n, remoteB64);\n        pending.push(...gap.keys);\n\n        const { messageKey, nextChainKey } = await advanceChain(gap.finalChainKey);\n        if (gap.finalChainKey !== chainKey) toZeroOnCommit.push(gap.finalChainKey);\n\n        return {\n            messageKey,\n            commit: () => {\n                if (ratchet) ratchet.apply();\n                if (this._receivingChainKey && this._receivingChainKey !== nextChainKey) {\n                    zeroize(this._receivingChainKey);\n                }\n                for (const key of toZeroOnCommit) zeroize(key);\n                this._receivingChainKey = nextChainKey;\n                this._receiveCount = n + 1;\n                this._remotePublicKeyB64 = remoteB64;\n                for (const { id, key } of pending) this._rememberSkipped(id, key);\n                zeroize(messageKey);\n            },\n            discard: () => {\n                if (ratchet) ratchet.discard();\n                for (const { key } of pending) zeroize(key);\n                for (const key of toZeroOnCommit) zeroize(key);\n                zeroize(nextChainKey);\n                zeroize(messageKey);\n            }\n        };\n    }\n\n    /**\n     * Derive the keys for messages `from`..`until-1` without mutating state.\n     * `until` comes off the wire, so the jump is bounded here rather than trusted.\n     */\n    async _collectSkipped(chainKey, from, until, remoteB64) {\n        if (until < from) {\n            // An older number on a chain we have already advanced past: either a\n            // replay or a duplicate. Its key is gone, so it cannot be opened.\n            throw new Error('DoubleRatchet: message number is behind the current chain');\n        }\n        if (until - from > RATCHET_LIMITS.MAX_SKIP_PER_CHAIN) {\n            throw new Error(\n                `DoubleRatchet: refusing to skip ${until - from} messages ` +\n                `(limit ${RATCHET_LIMITS.MAX_SKIP_PER_CHAIN})`\n            );\n        }\n\n        const keys = [];\n        let current = chainKey;\n        for (let i = from; i < until; i++) {\n            const { messageKey, nextChainKey } = await advanceChain(current);\n            if (current !== chainKey) zeroize(current);\n            current = nextChainKey;\n            keys.push({ id: `${remoteB64}|${i}`, key: messageKey });\n        }\n        return { keys, finalChainKey: current };\n    }\n\n    async _open(messageKey, header, ciphertext) {\n        const { key, iv } = await this._messageCipher(messageKey);\n        let opened;\n        try {\n            opened = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv, additionalData: enc.encode(header) },\n                key,\n                unb64(ciphertext)\n            );\n        } catch (_) {\n            // Wrong key, tampered body, or a tampered header \u2014 AES-GCM cannot\n            // tell us which, and neither should we: the answer is the same.\n            throw new Error('DoubleRatchet: authentication failed');\n        }\n        return dec.decode(opened);\n    }\n\n    _rememberSkipped(id, key) {\n        // Oldest-first eviction keeps the cache bounded even if every gap is\n        // legitimate; losing the oldest gap is preferable to unbounded growth.\n        while (this._skipped.size >= RATCHET_LIMITS.MAX_SKIPPED_KEYS) {\n            const oldest = this._skipped.keys().next().value;\n            const evicted = this._skipped.get(oldest);\n            this._skipped.delete(oldest);\n            if (evicted) zeroize(evicted.key);\n        }\n        this._skipped.set(id, { key, storedAt: Date.now() });\n    }\n\n    _pruneSkipped() {\n        const cutoff = Date.now() - RATCHET_LIMITS.SKIPPED_KEY_TTL_MS;\n        for (const [id, entry] of this._skipped) {\n            if (entry.storedAt < cutoff) {\n                zeroize(entry.key);\n                this._skipped.delete(id);\n            }\n        }\n    }\n\n    /**\n     * Compute the DH-ratchet step without applying it. The caller applies it only\n     * after the triggering message has authenticated \u2014 see _stageReceive.\n     */\n    async _stageDhRatchet(remotePublicKeyB64) {\n        const remotePublicKey = await this._importPublic(remotePublicKeyB64);\n\n        // Receiving chain: our CURRENT key pair against their new key. For the\n        // responder's first ratchet this is still the handshake key pair, which\n        // is exactly what the initiator derived against at init.\n        const receiveDh = await this._dh(this._selfKeyPair.privateKey, remotePublicKey);\n        const received = await advanceRoot(this._rootKey, receiveDh);\n        zeroize(receiveDh);\n\n        // Sending chain: a fresh key pair, so our next message moves the ratchet\n        // on again. This is the step that locks out an attacker who captured the\n        // previous state \u2014 without it there is no post-compromise security.\n        const nextSelfKeyPair = await this._generateKeyPair();\n        const sendDh = await this._dh(nextSelfKeyPair.privateKey, remotePublicKey);\n        const sending = await advanceRoot(received.nextRoot, sendDh);\n        zeroize(sendDh);\n\n        return {\n            receivingChainKey: received.chainKey,\n            apply: () => {\n                zeroize(this._rootKey);\n                zeroize(received.nextRoot);\n                if (this._sendingChainKey) zeroize(this._sendingChainKey);\n                this._rootKey = sending.nextRoot;\n                this._sendingChainKey = sending.chainKey;\n                this._selfKeyPair = nextSelfKeyPair;\n                this._remotePublicKey = remotePublicKey;\n                this._remotePublicKeyB64 = remotePublicKeyB64;\n                this._previousSendCount = this._sendCount;\n                this._sendCount = 0;\n            },\n            discard: () => {\n                zeroize(received.nextRoot);\n                zeroize(received.chainKey);\n                zeroize(sending.nextRoot);\n                zeroize(sending.chainKey);\n            }\n        };\n    }\n\n    /** Destroy every piece of key material this object holds. */\n    destroy() {\n        zeroize(this._rootKey);\n        zeroize(this._sendingChainKey);\n        zeroize(this._receivingChainKey);\n        for (const entry of this._skipped.values()) zeroize(entry.key);\n        this._skipped.clear();\n        this._rootKey = null;\n        this._sendingChainKey = null;\n        this._receivingChainKey = null;\n        this._selfKeyPair = null;\n        this._remotePublicKey = null;\n        this._remotePublicKeyB64 = null;\n        this._initialised = false;\n    }\n}\n", "// SBQ2 \u2014 connection descriptor v2.\n//\n// The out-of-band descriptor (QR / link / paste) carries ONLY what is needed to\n// bring up the DTLS association: ICE credentials, the DTLS certificate\n// fingerprint, and the candidate list. Every byte of key material \u2014 identity\n// key, ECDH key, signatures \u2014 travels in-band over the DataChannel that the\n// fingerprint already authenticates, and is bound to the descriptor by a\n// commitment carried here.\n//\n// Why that is safe, in one paragraph: the fingerprint is transferred over the\n// out-of-band channel the user already trusts (they are looking at the QR), and\n// DTLS will only complete with the holder of the matching private key. So the\n// channel is authenticated to whoever showed the code before a single byte of\n// key material moves. The commitment makes substitution of that material fail\n// closed automatically instead of relying on the human SAS comparison, and the\n// SAS itself is computed over a transcript that covers both descriptors\n// verbatim and both in-band blobs \u2014 so nothing that travelled out of band can\n// be altered without changing the digits the users read to each other.\n//\n// NOTE: the in-band half of that protocol is not implemented yet. This module\n// is the wire format only; see doc/descriptor-sbq2.md for the migration gate.\n//\n// This module is pure: no DOM, no crypto beyond an injected digest, no network.\n// It is the parser for fully attacker-controlled input, so every length, range\n// and alphabet is checked before the value is used, and the SDP is rebuilt by a\n// strict serializer from validated primitives \u2014 never by concatenating a string\n// that came off the wire.\n\nexport const SBQ2_VERSION = 0x02;\n\n// Hard limits applied BEFORE any structural parsing.\nexport const LIMITS = Object.freeze({\n    MAX_PAYLOAD_BYTES: 512,   // ~3.5x the largest descriptor we have ever measured\n    MAX_CANDIDATES: 8,\n    MIN_UFRAG: 4,             // RFC 8839: ice-ufrag is 4..256 chars\n    MAX_UFRAG: 64,\n    MIN_PWD: 22,              // RFC 8839: ice-pwd is 22..256 chars, >=128 bits of randomness\n    MAX_PWD: 64,\n    FINGERPRINT_BYTES: 32,    // SHA-256\n    COMMITMENT_BYTES: 16,     // 128-bit second-preimage resistance\n    BINDING_BYTES: 8,\n    MAX_LIFETIME_MINUTES: 60,\n    MAX_EXT_BYTES: 255,\n\n    // Byte budget for candidates admitted BEYOND the coverage set (coverage\n    // itself is never cut \u2014 see pruneCandidates). Derived from the acceptance\n    // target rather than picked: the largest answer head we have measured is\n    // Firefox's, at 104 bytes (version+flags+expiry+tag+fingerprint+8-char\n    // ufrag+32-char pwd+count+commitment), and QR version 8 at level M holds\n    // 152 bytes in byte mode. 152 - 104 = 48.\n    SURPLUS_CANDIDATE_BYTES: 48,\n\n    // Clock-skew allowance, applied in both directions on the expiry check.\n    //\n    // Two minutes is chosen against the failure it exists for: a receiver whose\n    // clock is off. An NTP-synced device is within milliseconds, and an\n    // unsynced modern device drifts on the order of seconds per day, so two\n    // minutes swallows every ordinary case. It does NOT swallow a grossly wrong\n    // clock (manually set, or reset to the epoch by a dead battery) \u2014 that is\n    // deliberate, because such a device cannot be given a meaningful freshness\n    // guarantee and should be told so. The cost is that the replay window grows\n    // from the nominal 10 minutes to 12; keeping the tolerance well under the\n    // lifetime is what bounds that.\n    CLOCK_SKEW_MS: 120_000,\n});\n\n// Expiry is stored as minutes since 2024-01-01T00:00:00Z in 24 bits, which runs\n// out in 2055. Minute granularity is far finer than any descriptor lifetime, and\n// uint16 was tried first and rejected: 65535 minutes is only 45 days of range.\nconst EPOCH_MS = Date.UTC(2024, 0, 1);\nconst MAX_EXPIRY_UNITS = 0xffffff;\n\nexport const TYPE = Object.freeze({ OFFER: 0, ANSWER: 1 });\nconst SETUP = Object.freeze(['actpass', 'active', 'passive']);\n\n// max-message-size, packed into two flag bits. Index 3 means \"an explicit value\n// is carried in extension 0x01\"; RFC 8841 makes 64 KiB the default when the\n// attribute is absent, which is why absent and 65536 share an encoding.\nconst MMS_ENUM = Object.freeze([262144, 1073741823, 65536, null]);\nconst MMS_EXPLICIT = 3;\n\n// Extension types. Unknown types are rejected, never skipped \u2014 see decodeExt.\nexport const EXT = Object.freeze({ MAX_MESSAGE_SIZE: 0x01 });\n\n// Candidate kinds. Values are wire constants \u2014 never renumber, only append.\nconst KIND = Object.freeze({\n    HOST_V4: 0, HOST_MDNS: 1, SRFLX_V4: 2, RELAY_V4: 3,\n    HOST_V6: 4, SRFLX_V6: 5, RELAY_V6: 6,\n});\nconst KIND_ADDR_LEN = Object.freeze({ 0: 4, 1: 16, 2: 4, 3: 4, 4: 16, 5: 16, 6: 16 });\nconst KIND_TYPE = Object.freeze({ 0: 'host', 1: 'host', 2: 'srflx', 3: 'relay', 4: 'host', 5: 'srflx', 6: 'relay' });\n// Address family for the coverage rule. mDNS is its own family: it resolves\n// only on the sender's link, so it covers a case neither v4 nor v6 does.\nconst KIND_FAMILY = Object.freeze({ 0: 'v4', 1: 'mdns', 2: 'v4', 3: 'v4', 4: 'v6', 5: 'v6', 6: 'v6' });\nconst TCPTYPE = Object.freeze([null, 'passive', 'active', 'so']);\n\n// RFC 8445 \u00A75.1.2.2 type preferences. We do not reproduce the sender's original\n// priority values: ICE priority only orders connectivity checks, and both peers\n// compute their own local priorities anyway. Re-deriving them from the type and\n// the candidate's position in the list preserves the sender's ordering intent\n// while costing zero bytes on the wire.\nconst TYPE_PREF = Object.freeze({ host: 126, srflx: 100, relay: 0 });\n\n// RFC 8839 ice-char = ALPHA / DIGIT / \"+\" / \"/\"\nconst ICE_CHAR = /^[A-Za-z0-9+/]+$/;\n\nclass DescriptorError extends Error {\n    constructor(message, code = 'malformed') { super(message); this.name = 'DescriptorError'; this.code = code; }\n}\nconst fail = (msg, code) => { throw new DescriptorError(msg, code); };\n\n// ---------------------------------------------------------------------------\n// SDP -> structured fields\n// ---------------------------------------------------------------------------\n\nconst UUID_RE = /^([0-9a-f]{8})-([0-9a-f]{4})-([0-9a-f]{4})-([0-9a-f]{4})-([0-9a-f]{12})\\.local$/i;\nconst IPV4_RE = /^(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})\\.(\\d{1,3})$/;\n\nfunction parseIpv4(s) {\n    const m = IPV4_RE.exec(s);\n    if (!m) return null;\n    const out = new Uint8Array(4);\n    for (let i = 0; i < 4; i++) {\n        const v = Number(m[i + 1]);\n        if (!Number.isInteger(v) || v < 0 || v > 255) return null;\n        out[i] = v;\n    }\n    return out;\n}\n\nfunction parseIpv6(s) {\n    // Accept the plain hextet forms (with \"::\" compression) and the dotted-quad\n    // tail used by IPv4-mapped and NAT64 addresses (64:ff9b::203.0.113.7).\n    if (!/^[0-9a-fA-F:.]+$/.test(s) || s.length > 45) return null;\n    let text = s;\n    let tail4 = null;\n    const lastColon = text.lastIndexOf(':');\n    if (text.includes('.')) {\n        tail4 = parseIpv4(text.slice(lastColon + 1));\n        if (!tail4) return null;\n        text = text.slice(0, lastColon + 1) + '0:0';\n    }\n    const halves = text.split('::');\n    if (halves.length > 2) return null;\n    const toWords = (part) => (part === '' ? [] : part.split(':').map((h) => (\n        h.length === 0 || h.length > 4 ? NaN : parseInt(h, 16)\n    )));\n    const head = toWords(halves[0]);\n    const tail = halves.length === 2 ? toWords(halves[1]) : [];\n    if ([...head, ...tail].some((w) => !Number.isInteger(w) || w < 0 || w > 0xffff)) return null;\n    let words;\n    if (halves.length === 2) {\n        const gap = 8 - head.length - tail.length;\n        if (gap < 1) return null;\n        words = [...head, ...new Array(gap).fill(0), ...tail];\n    } else {\n        words = head;\n    }\n    if (words.length !== 8) return null;\n    const out = new Uint8Array(16);\n    words.forEach((w, i) => { out[i * 2] = w >> 8; out[i * 2 + 1] = w & 0xff; });\n    if (tail4) out.set(tail4, 12);\n    return out;\n}\n\nfunction parseMdns(s) {\n    const m = UUID_RE.exec(s);\n    if (!m) return null;\n    const hex = (m[1] + m[2] + m[3] + m[4] + m[5]).toLowerCase();\n    const out = new Uint8Array(16);\n    for (let i = 0; i < 16; i++) out[i] = parseInt(hex.substr(i * 2, 2), 16);\n    return out;\n}\n\nfunction sdpLines(sdp) {\n    if (typeof sdp !== 'string') fail('SDP must be a string');\n    if (sdp.length > 64 * 1024) fail('SDP is too large');\n    return sdp.split(/\\r\\n|\\n/).filter((l) => l.length > 0);\n}\n\nfunction attr(lines, name) {\n    const prefix = `a=${name}:`;\n    for (const l of lines) if (l.startsWith(prefix)) return l.slice(prefix.length).trim();\n    return null;\n}\n\n/**\n * Extract the fields SBQ2 carries from a browser-generated SDP.\n * Anything not represented in the template is dropped here, deliberately.\n *\n * Candidates keep their original `priority` so pruneCandidates can rank by the\n * sender's own judgement; the value is never encoded.\n */\nexport function parseSdp(sdp) {\n    const lines = sdpLines(sdp);\n\n    const ufrag = attr(lines, 'ice-ufrag');\n    const pwd = attr(lines, 'ice-pwd');\n    if (!ufrag || !pwd) fail('SDP is missing ICE credentials');\n\n    const fpLine = attr(lines, 'fingerprint');\n    if (!fpLine) fail('SDP is missing a DTLS fingerprint');\n    const [hashAlg, fpHex] = fpLine.split(/\\s+/);\n    if (!hashAlg || hashAlg.toLowerCase() !== 'sha-256') {\n        fail(`unsupported DTLS fingerprint algorithm: ${String(hashAlg).slice(0, 16)}`);\n    }\n    const fpBytes = String(fpHex).split(':');\n    if (fpBytes.length !== LIMITS.FINGERPRINT_BYTES) fail('DTLS fingerprint has the wrong length');\n    const fingerprint = new Uint8Array(LIMITS.FINGERPRINT_BYTES);\n    fpBytes.forEach((b, i) => {\n        if (!/^[0-9a-fA-F]{2}$/.test(b)) fail('DTLS fingerprint is not hex');\n        fingerprint[i] = parseInt(b, 16);\n    });\n\n    const setupStr = attr(lines, 'setup') || 'actpass';\n    const setup = SETUP.indexOf(setupStr);\n    if (setup < 0) fail(`unsupported DTLS setup role: ${setupStr.slice(0, 16)}`);\n\n    // RFC 8841: an absent a=max-message-size means 64 KiB.\n    const mmsStr = attr(lines, 'max-message-size');\n    const maxMessageSize = mmsStr === null ? 65536 : Number(mmsStr);\n    if (!Number.isInteger(maxMessageSize) || maxMessageSize < 0) fail('invalid a=max-message-size');\n\n    const candidates = [];\n    for (const line of lines) {\n        if (!line.startsWith('a=candidate:')) continue;\n        const p = line.slice('a=candidate:'.length).split(/\\s+/);\n        // foundation component transport priority addr port \"typ\" type ...\n        if (p.length < 8 || p[6] !== 'typ') continue;\n        if (p[1] !== '1') continue;                       // component 1 only (BUNDLE, no RTCP)\n        const transport = p[2].toLowerCase();\n        const priority = Number(p[3]);\n        const addr = p[4];\n        const port = Number(p[5]);\n        const ctype = p[7];\n        if (!Number.isInteger(port) || port < 1 || port > 65535) continue;\n\n        let tcptype = 0;\n        if (transport === 'tcp') {\n            const idx = p.indexOf('tcptype');\n            const t = idx >= 0 ? TCPTYPE.indexOf(p[idx + 1]) : -1;\n            if (t <= 0) continue;                          // unusable TCP candidate\n            tcptype = t;\n        } else if (transport !== 'udp') {\n            continue;\n        }\n\n        let kind = null; let bytes = null;\n        const mdns = parseMdns(addr);\n        if (mdns && ctype === 'host') { kind = KIND.HOST_MDNS; bytes = mdns; }\n        else {\n            const v4 = parseIpv4(addr);\n            const v6 = v4 ? null : parseIpv6(addr);\n            const raw = v4 || v6;\n            if (!raw) continue;\n            if (ctype === 'host') kind = v4 ? KIND.HOST_V4 : KIND.HOST_V6;\n            else if (ctype === 'srflx' || ctype === 'prflx') kind = v4 ? KIND.SRFLX_V4 : KIND.SRFLX_V6;\n            else if (ctype === 'relay') kind = v4 ? KIND.RELAY_V4 : KIND.RELAY_V6;\n            else continue;\n            bytes = raw;\n        }\n        candidates.push({\n            kind, tcptype, addr: bytes, port,\n            priority: Number.isFinite(priority) ? priority : 0,\n        });\n    }\n\n    return { ufrag, pwd, fingerprint, setup, maxMessageSize, candidates };\n}\n\n/** Bytes a candidate occupies on the wire: kind byte + address + port. */\nexport function candidateSize(c) { return 1 + KIND_ADDR_LEN[c.kind] + 2; }\n\n/**\n * True if a peer can actually connect TO this candidate.\n *\n * An ICE-TCP candidate with `tcptype active` is an outbound-only socket on the\n * discard port; it pairs solely with a remote `passive` candidate and offers the\n * peer no address to reach. Firefox advertises one on every connection. It is\n * therefore surplus, never coverage \u2014 otherwise it would claim a coverage slot\n * that buys no reachability, at 19 bytes for an mDNS address.\n */\nconst isConnectable = (c) => c.tcptype !== 2 && c.tcptype !== 3;\n\n/**\n * Trim a candidate list to what actually buys connectivity, under a byte budget.\n *\n * The rule is coverage first, count second. Every (address family, candidate\n * type, transport) combination present in the input keeps at least one\n * representative before any second candidate is admitted. That ordering is the\n * whole point: a pure count limit sorted v4-first can evict the only working\n * candidate on an IPv6-only network, which is now a normal mode on several\n * mobile carriers, and a count limit that ignores transport can evict the TCP\n * candidate that exists precisely for networks where UDP is blocked.\n *\n * Only after coverage is satisfied is the remaining budget filled by the\n * sender's own priority, with relays capped \u2014 a TURN server offering udp/tcp/tls\n * hands out one allocation per transport, and they all resolve to the same\n * relayed address, so the third one adds nothing the first does not already\n * provide. Two are kept in case one allocation's binding dies.\n *\n * If coverage alone overruns the budget, coverage wins and the descriptor grows.\n * A QR one version larger is cheaper than a connection that cannot be made.\n */\nexport function pruneCandidates(candidates, {\n    maxCandidates = LIMITS.MAX_CANDIDATES,\n    maxBytes = LIMITS.SURPLUS_CANDIDATE_BYTES,\n    keepMdns = true,\n    maxRelays = 2,\n} = {}) {\n    const pool = candidates.filter((c) => keepMdns || c.kind !== KIND.HOST_MDNS);\n\n    // Exact duplicates first \u2014 same kind, transport, address and port.\n    const uniq = [];\n    const seen = new Set();\n    for (const c of pool) {\n        const key = `${c.kind}:${c.tcptype}:${Array.from(c.addr).join('.')}:${c.port}`;\n        if (seen.has(key)) continue;\n        seen.add(key);\n        uniq.push(c);\n    }\n\n    const byPriority = (a, b) => (b.priority || 0) - (a.priority || 0);\n    const groupKey = (c) => `${KIND_FAMILY[c.kind]}/${KIND_TYPE[c.kind]}/${c.tcptype === 0 ? 'udp' : 'tcp'}`;\n\n    // Pass 1 \u2014 one representative per (family, type, transport) group, best\n    // priority first. Only candidates a peer can dial count for coverage.\n    const groups = new Map();\n    for (const c of [...uniq].sort(byPriority)) {\n        if (!isConnectable(c)) continue;\n        const g = groupKey(c);\n        if (!groups.has(g)) groups.set(g, []);\n        groups.get(g).push(c);\n    }\n    const chosen = [];\n    const taken = new Set();\n    let bytes = 0;\n    let relays = 0;\n    const admit = (c) => {\n        chosen.push(c);\n        taken.add(c);\n        bytes += candidateSize(c);\n        if (KIND_TYPE[c.kind] === 'relay') relays++;\n    };\n    for (const list of groups.values()) admit(list[0]);\n\n    // Pass 2 \u2014 fill what is left by priority, honouring both budgets.\n    for (const c of [...uniq].sort(byPriority)) {\n        if (taken.has(c)) continue;\n        if (chosen.length >= maxCandidates) break;\n        if (bytes + candidateSize(c) > maxBytes) continue;\n        if (KIND_TYPE[c.kind] === 'relay' && relays >= maxRelays) continue;\n        admit(c);\n    }\n\n    // Emit in descending priority so the sender's ordering intent survives into\n    // the localPref the serializer reconstructs.\n    return chosen.sort(byPriority);\n}\n\n// ---------------------------------------------------------------------------\n// encode\n// ---------------------------------------------------------------------------\n\nclass Writer {\n    constructor() { this.b = []; }\n    u8(v) { this.b.push(v & 0xff); }\n    u16(v) { this.b.push((v >> 8) & 0xff, v & 0xff); }\n    u24(v) { this.b.push((v >> 16) & 0xff, (v >> 8) & 0xff, v & 0xff); }\n    u32(v) { this.b.push((v >>> 24) & 0xff, (v >>> 16) & 0xff, (v >>> 8) & 0xff, v & 0xff); }\n    bytes(a) { for (const x of a) this.b.push(x & 0xff); }\n    ascii(s) { for (let i = 0; i < s.length; i++) this.b.push(s.charCodeAt(i) & 0xff); }\n    done() { return Uint8Array.from(this.b); }\n}\n\nfunction buildExtensions(maxMessageSize) {\n    // Guard before the lookup: MMS_ENUM's slot 3 is the \"explicit\" marker and\n    // holds null, so a null or undefined size would otherwise index straight\n    // onto it and promise an extension record that never gets written.\n    if (!Number.isInteger(maxMessageSize) || maxMessageSize < 1024 || maxMessageSize > 0x7fffffff) {\n        fail('max-message-size must be an integer between 1024 and 2^31-1');\n    }\n    // Records are emitted in ascending type order so a descriptor has exactly\n    // one valid spelling; the decoder enforces the same ordering.\n    const records = [];\n    let mmsIndex = MMS_ENUM.indexOf(maxMessageSize);\n    if (mmsIndex < 0) {\n        mmsIndex = MMS_EXPLICIT;\n        const w = new Writer();\n        w.u32(maxMessageSize);\n        records.push({ type: EXT.MAX_MESSAGE_SIZE, value: w.done() });\n    }\n    return { mmsIndex, records };\n}\n\n/**\n * @param {object} d\n * @param {number} d.type              TYPE.OFFER | TYPE.ANSWER\n * @param {Uint8Array} [d.bindingTag]  answers only: 8-byte tag of the offer\n * @param {number} d.expiresAtMs       absolute expiry, ms since epoch\n * @param {object} d.sdpFields         output of parseSdp (already pruned)\n * @param {Uint8Array|null} d.commitment  16-byte commitment to the in-band blob\n */\nexport function encodeDescriptor(d) {\n    const { type, bindingTag: tag = null, expiresAtMs, sdpFields, commitment = null } = d;\n    if (type !== TYPE.OFFER && type !== TYPE.ANSWER) fail('invalid descriptor type');\n    if (type === TYPE.ANSWER) {\n        if (!(tag instanceof Uint8Array) || tag.length !== LIMITS.BINDING_BYTES) fail('answer needs an 8-byte binding tag');\n    } else if (tag !== null) {\n        fail('offers do not carry a binding tag');\n    }\n    if (commitment !== null && (!(commitment instanceof Uint8Array) || commitment.length !== LIMITS.COMMITMENT_BYTES)) {\n        fail('commitment must be 16 bytes');\n    }\n\n    const { ufrag, pwd, fingerprint, setup, maxMessageSize, candidates } = sdpFields;\n    if (ufrag.length < LIMITS.MIN_UFRAG || ufrag.length > LIMITS.MAX_UFRAG || !ICE_CHAR.test(ufrag)) fail('invalid ice-ufrag');\n    if (pwd.length < LIMITS.MIN_PWD || pwd.length > LIMITS.MAX_PWD || !ICE_CHAR.test(pwd)) fail('invalid ice-pwd');\n    if (candidates.length > LIMITS.MAX_CANDIDATES) fail('too many candidates');\n\n    const minutes = Math.ceil((expiresAtMs - EPOCH_MS) / 60000);\n    if (!Number.isInteger(minutes) || minutes < 0 || minutes > MAX_EXPIRY_UNITS) fail('expiry out of range');\n\n    const { mmsIndex, records } = buildExtensions(maxMessageSize);\n\n    const ext = new Writer();\n    for (const r of records) {\n        if (r.value.length > 255) fail('extension value is too long');\n        ext.u8(r.type); ext.u8(r.value.length); ext.bytes(r.value);\n    }\n    const extBytes = ext.done();\n    if (extBytes.length > LIMITS.MAX_EXT_BYTES) fail('extension area is too long');\n\n    const flags = (type & 0x03)\n        | ((setup & 0x03) << 2)\n        | ((mmsIndex & 0x03) << 4)\n        | (commitment ? 0x40 : 0)\n        | (extBytes.length ? 0x80 : 0);\n\n    const w = new Writer();\n    w.u8(SBQ2_VERSION);\n    w.u8(flags);\n    w.u24(minutes);\n    if (type === TYPE.ANSWER) w.bytes(tag);\n    w.bytes(fingerprint);\n    w.u8(ufrag.length); w.ascii(ufrag);\n    w.u8(pwd.length); w.ascii(pwd);\n    w.u8(candidates.length);\n    for (const c of candidates) {\n        w.u8(((c.kind & 0x0f) << 4) | (c.tcptype & 0x0f));\n        w.bytes(c.addr);\n        w.u16(c.port);\n    }\n    if (commitment) w.bytes(commitment);\n    if (extBytes.length) { w.u8(extBytes.length); w.bytes(extBytes); }\n\n    const out = w.done();\n    if (out.length > LIMITS.MAX_PAYLOAD_BYTES) fail('descriptor exceeds the payload limit');\n    return out;\n}\n\n// ---------------------------------------------------------------------------\n// decode\n// ---------------------------------------------------------------------------\n\nclass Reader {\n    constructor(buf) { this.buf = buf; this.i = 0; }\n    need(n) { if (this.i + n > this.buf.length) fail('descriptor is truncated'); }\n    u8() { this.need(1); return this.buf[this.i++]; }\n    u16() { this.need(2); const v = (this.buf[this.i] << 8) | this.buf[this.i + 1]; this.i += 2; return v; }\n    u24() { this.need(3); const v = (this.buf[this.i] << 16) | (this.buf[this.i + 1] << 8) | this.buf[this.i + 2]; this.i += 3; return v; }\n    u32() { this.need(4); const v = ((this.buf[this.i] << 24) >>> 0) + (this.buf[this.i + 1] << 16) + (this.buf[this.i + 2] << 8) + this.buf[this.i + 3]; this.i += 4; return v >>> 0; }\n    bytes(n) { this.need(n); return this.buf.slice(this.i, this.i += n); }\n    ascii(n) {\n        this.need(n);\n        let s = '';\n        for (let k = 0; k < n; k++) {\n            const c = this.buf[this.i + k];\n            if (c < 0x20 || c > 0x7e) fail('non-printable byte in a text field');\n            s += String.fromCharCode(c);\n        }\n        this.i += n;\n        return s;\n    }\n    get rest() { return this.buf.length - this.i; }\n}\n\n/**\n * Parse the TLV extension area.\n *\n * An unrecognised type is a hard error, not a skip. That is deliberate: a\n * decoder that ignores what it does not understand turns the extension area\n * into a downgrade channel, because an attacker can append a record that one\n * side acts on and the other silently drops, and the two ends then disagree\n * about the session while both believe they validated it. Deny-by-default costs\n * forward compatibility, and that cost is paid on purpose \u2014 a new extension\n * type ships together with a version bump that both ends can gate on, never\n * silently to a population that will half-ignore it.\n */\nfunction decodeExt(buf) {\n    const r = new Reader(buf);\n    const out = new Map();\n    let lastType = -1;\n    while (r.rest > 0) {\n        const type = r.u8();\n        const len = r.u8();\n        const value = r.bytes(len);\n        if (type <= lastType) fail('extension records must be in ascending type order without duplicates');\n        lastType = type;\n        switch (type) {\n            case EXT.MAX_MESSAGE_SIZE: {\n                if (len !== 4) fail('extension 0x01 must be 4 bytes');\n                const v = new Reader(value).u32();\n                if (v < 1024 || v > 0x7fffffff) fail('extension 0x01 value is out of range');\n                if (MMS_ENUM.includes(v)) fail('extension 0x01 duplicates a value the flags already encode');\n                out.set(type, v);\n                break;\n            }\n            default:\n                fail(`unknown extension type 0x${type.toString(16).padStart(2, '0')}`, 'unknown_extension');\n        }\n    }\n    return out;\n}\n\n/**\n * Parse an SBQ2 descriptor. Throws DescriptorError on anything malformed \u2014\n * there is no partial or best-effort result.\n *\n * @param {Uint8Array} buf\n * @param {object} [opts]\n * @param {number} [opts.nowMs]  clock to check the expiry against\n */\nexport function decodeDescriptor(buf, { nowMs = Date.now() } = {}) {\n    if (!(buf instanceof Uint8Array)) fail('descriptor must be a Uint8Array');\n    if (buf.length === 0) fail('descriptor is empty');\n    if (buf.length > LIMITS.MAX_PAYLOAD_BYTES) fail('descriptor exceeds the payload limit');\n\n    const r = new Reader(buf);\n\n    // Version first, and a mismatch is an error \u2014 never an attempt to parse a\n    // different shape. This is what makes downgrade to the old scheme impossible\n    // rather than merely unlikely.\n    const version = r.u8();\n    if (version !== SBQ2_VERSION) fail(`unsupported descriptor version 0x${version.toString(16)}`, 'version');\n\n    const flags = r.u8();\n    const type = flags & 0x03;\n    if (type !== TYPE.OFFER && type !== TYPE.ANSWER) fail('reserved descriptor type');\n    const setup = (flags >> 2) & 0x03;\n    if (setup > 2) fail('reserved DTLS setup role');\n    const mmsIndex = (flags >> 4) & 0x03;\n    const hasCommitment = (flags & 0x40) !== 0;\n    const hasExt = (flags & 0x80) !== 0;\n\n    const minutes = r.u24();\n    const expiresAtMs = EPOCH_MS + minutes * 60000;\n    if (nowMs - LIMITS.CLOCK_SKEW_MS > expiresAtMs) {\n        const lateMin = Math.round((nowMs - expiresAtMs) / 60000);\n        fail(\n            `this code expired ${lateMin} minute(s) ago. If it was just created, ` +\n            `this device's clock or time zone is probably wrong \u2014 check the date and time settings.`,\n            'expired',\n        );\n    }\n    if (expiresAtMs - nowMs > (LIMITS.MAX_LIFETIME_MINUTES * 60000) + LIMITS.CLOCK_SKEW_MS) {\n        fail('descriptor lifetime is implausibly long', 'lifetime');\n    }\n\n    const bindingTag = type === TYPE.ANSWER ? r.bytes(LIMITS.BINDING_BYTES) : null;\n    const fingerprint = r.bytes(LIMITS.FINGERPRINT_BYTES);\n\n    const ufragLen = r.u8();\n    if (ufragLen < LIMITS.MIN_UFRAG || ufragLen > LIMITS.MAX_UFRAG) fail('ice-ufrag length out of range');\n    const ufrag = r.ascii(ufragLen);\n    if (!ICE_CHAR.test(ufrag)) fail('ice-ufrag contains characters outside the ICE alphabet');\n\n    const pwdLen = r.u8();\n    if (pwdLen < LIMITS.MIN_PWD || pwdLen > LIMITS.MAX_PWD) fail('ice-pwd length out of range');\n    const pwd = r.ascii(pwdLen);\n    if (!ICE_CHAR.test(pwd)) fail('ice-pwd contains characters outside the ICE alphabet');\n\n    const count = r.u8();\n    if (count > LIMITS.MAX_CANDIDATES) fail('too many candidates');\n    const candidates = [];\n    for (let i = 0; i < count; i++) {\n        const tagByte = r.u8();\n        const kind = (tagByte >> 4) & 0x0f;\n        const tcptype = tagByte & 0x0f;\n        const addrLen = KIND_ADDR_LEN[kind];\n        if (addrLen === undefined) fail(`reserved candidate kind ${kind}`);\n        if (tcptype >= TCPTYPE.length) fail('reserved TCP candidate type');\n        const addr = r.bytes(addrLen);\n        const port = r.u16();\n        if (port < 1) fail('candidate port must be non-zero');\n        candidates.push({ kind, tcptype, addr, port });\n    }\n\n    let commitment = null;\n    if (hasCommitment) commitment = r.bytes(LIMITS.COMMITMENT_BYTES);\n\n    let extensions = new Map();\n    if (hasExt) {\n        const extLen = r.u8();\n        if (extLen === 0) fail('extension area is flagged but empty');\n        extensions = decodeExt(r.bytes(extLen));\n    }\n\n    // Trailing bytes are a malformed descriptor, not something to ignore: a\n    // decoder that tolerates them lets an attacker smuggle a second reading of\n    // the same QR past whatever hashed the canonical form.\n    if (r.rest !== 0) fail(`${r.rest} trailing byte(s) after the descriptor`);\n\n    let maxMessageSize;\n    if (mmsIndex === MMS_EXPLICIT) {\n        if (!extensions.has(EXT.MAX_MESSAGE_SIZE)) fail('flags promise an explicit max-message-size but no extension carries it');\n        maxMessageSize = extensions.get(EXT.MAX_MESSAGE_SIZE);\n    } else {\n        if (extensions.has(EXT.MAX_MESSAGE_SIZE)) fail('extension 0x01 present but the flags do not select it');\n        maxMessageSize = MMS_ENUM[mmsIndex];\n    }\n\n    return {\n        version, type, setup, maxMessageSize, expiresAtMs,\n        bindingTag, fingerprint, ufrag, pwd, candidates, commitment, extensions,\n    };\n}\n\n// ---------------------------------------------------------------------------\n// strict SDP serializer\n// ---------------------------------------------------------------------------\n\nconst hex2 = (b) => b.toString(16).padStart(2, '0');\n\nfunction renderAddr(kind, addr) {\n    switch (kind) {\n        case KIND.HOST_MDNS: {\n            const h = Array.from(addr, hex2).join('');\n            return `${h.slice(0, 8)}-${h.slice(8, 12)}-${h.slice(12, 16)}-${h.slice(16, 20)}-${h.slice(20)}.local`;\n        }\n        case KIND.HOST_V4: case KIND.SRFLX_V4: case KIND.RELAY_V4:\n            return `${addr[0]}.${addr[1]}.${addr[2]}.${addr[3]}`;\n        default: {\n            const words = [];\n            for (let i = 0; i < 16; i += 2) words.push(((addr[i] << 8) | addr[i + 1]).toString(16));\n            return words.join(':');\n        }\n    }\n}\n\n/**\n * Rebuild an SDP from a decoded descriptor.\n *\n * Every value written here is either a template constant or a primitive that\n * decodeDescriptor already range-checked and that is re-rendered from bytes\n * (addresses from integers, the mDNS name from 16 raw bytes). The only strings\n * echoed through are ufrag and pwd, and both are constrained to the ICE\n * alphabet, so neither can carry a CRLF and inject an SDP line.\n */\nexport function serializeSdp(desc, { sessionId = '1' } = {}) {\n    const isOffer = desc.type === TYPE.OFFER;\n\n    // The m-line port and c-line carry the DEFAULT CANDIDATE, and they must be\n    // real whenever we have one.\n    //\n    // `m=application 9` with `c=IN IP4 0.0.0.0` is the trickle-ICE convention\n    // for \"no candidate yet\" (RFC 8840 \u00A74.1). A descriptor is never trickle \u2014\n    // the candidate set is complete by construction \u2014 so a null default\n    // candidate here is simply a lie, and Firefox acts on it: with a relay-only\n    // Chrome offer, rebuilding with 9/0.0.0.0 connected 0/4 while the browser's\n    // own SDP connected 4/4. Advertising the highest-priority routable candidate\n    // instead, exactly as Chrome and Firefox do, costs zero descriptor bytes\n    // because that candidate is already in the list.\n    //\n    // An mDNS candidate cannot appear here (c= needs a literal address), so if\n    // that is all we have we fall back to the null form \u2014 which is also what\n    // Chrome emits in that case.\n    // Preference order is relay > srflx > host \u2014 the most publicly reachable\n    // address, which is what the default candidate is for, and the order Chrome\n    // itself uses (its STUN-profile SDP names the srflx address and its TURN\n    // profile names the relay). That is the reverse of ICE priority, which\n    // ranks host first.\n    const DEFAULT_RANK = { relay: 0, srflx: 1, host: 2 };\n    const def = desc.candidates\n        .filter((c) => c.kind !== KIND.HOST_MDNS && c.tcptype === 0)\n        .sort((x, y) => DEFAULT_RANK[KIND_TYPE[x.kind]] - DEFAULT_RANK[KIND_TYPE[y.kind]])[0];\n    const defIsV6 = def && KIND_FAMILY[def.kind] === 'v6';\n    const mPort = def ? def.port : 9;\n    const cLine = def\n        ? `c=IN IP${defIsV6 ? '6' : '4'} ${renderAddr(def.kind, def.addr)}`\n        : 'c=IN IP4 0.0.0.0';\n\n    const lines = [\n        'v=0',\n        `o=- ${sessionId} 2 IN IP4 127.0.0.1`,\n        's=-',\n        't=0 0',\n        'a=group:BUNDLE 0',\n        'a=msid-semantic: WMS',\n        `m=application ${mPort} UDP/DTLS/SCTP webrtc-datachannel`,\n        cLine,\n        'a=ice-ufrag:' + desc.ufrag,\n        'a=ice-pwd:' + desc.pwd,\n        // Deliberately NOT `a=ice-options:trickle`. A descriptor is a complete,\n        // one-shot candidate set \u2014 there is no signalling channel to trickle\n        // over, so advertising trickle promises candidates that can never\n        // arrive and leaves the peer's ICE agent waiting for them.\n        'a=fingerprint:sha-256 ' + Array.from(desc.fingerprint, (b) => hex2(b).toUpperCase()).join(':'),\n        'a=setup:' + SETUP[desc.setup],\n        'a=mid:0',\n        'a=sctp-port:5000',\n        'a=max-message-size:' + desc.maxMessageSize,\n    ];\n\n    // Candidate lines go after the ICE credentials; order within the m-section\n    // is not significant to any implementation, but keeping them grouped\n    // matches what every browser emits.\n    const candLines = desc.candidates.map((c, i) => {\n        const ctype = KIND_TYPE[c.kind];\n        const transport = c.tcptype === 0 ? 'udp' : 'tcp';\n        // RFC 8445 \u00A75.1.2.1. localPref descends with list position so the\n        // sender's ordering survives, and component is always 1.\n        const localPref = Math.max(0, 65535 - i);\n        const priority = TYPE_PREF[ctype] * 16777216 + localPref * 256 + 255;\n        // Foundation must be equal for candidates sharing type+base+transport\n        // and different otherwise (RFC 8445 \u00A75.1.1.3); grouping by kind and\n        // transport satisfies both halves of that.\n        const foundation = String(c.kind * 4 + c.tcptype + 1);\n        let line = `a=candidate:${foundation} 1 ${transport} ${priority} ${renderAddr(c.kind, c.addr)} ${c.port} typ ${ctype}`;\n        // rel-addr/rel-port are MANDATORY for srflx, prflx and relay candidates\n        // (RFC 8839 \u00A75.1), even though ICE's own algorithm never reads them.\n        // Omitting them is not a harmless economy: Chrome accepts such a line,\n        // Firefox drops the candidate outright. That cost 0/8 relay-only\n        // connections to Firefox while the browser's own SDP made 8/8, and it\n        // stayed invisible in the STUN and TURN profiles because a host pair\n        // connected instead. The value is not transmitted \u2014 0.0.0.0/0 is what\n        // Chrome itself emits when it has no base address to disclose, and it\n        // satisfies the grammar at zero descriptor bytes.\n        if (ctype !== 'host') {\n            line += KIND_FAMILY[c.kind] === 'v6' ? ' raddr :: rport 0' : ' raddr 0.0.0.0 rport 0';\n        }\n        if (transport === 'tcp') line += ` tcptype ${TCPTYPE[c.tcptype]}`;\n        return line;\n    });\n    // `a=end-of-candidates` states explicitly that the set is complete\n    // (RFC 8838 \u00A714), so the peer stops waiting for more and can start failing\n    // pairs promptly instead of sitting in checking until a timeout.\n    candLines.push('a=end-of-candidates');\n    const at = lines.indexOf(cLine) + 1;\n    lines.splice(at, 0, ...candLines);\n\n    return { type: isOffer ? 'offer' : 'answer', sdp: lines.join('\\r\\n') + '\\r\\n' };\n}\n\n// ---------------------------------------------------------------------------\n// binding + transcript\n// ---------------------------------------------------------------------------\n\nconst enc = new TextEncoder();\n\nfunction concat(...parts) {\n    const total = parts.reduce((n, p) => n + p.length, 0);\n    const out = new Uint8Array(total);\n    let o = 0;\n    for (const p of parts) { out.set(p, o); o += p.length; }\n    return out;\n}\n\n/**\n * 8-byte tag an answer carries so the offerer can confirm it answers THIS offer.\n * This is the answer's replay defence: the offerer keeps the tag of the offer it\n * is currently showing and rejects any answer that does not match it, which also\n * makes each offer exactly one-shot.\n *\n * The offer needs no nonce of its own. It already carries ice-pwd, which RFC\n * 8839 \u00A75.4 requires to contain at least 128 bits of randomness and which every\n * browser regenerates per peer connection and per ICE restart; hashing the whole\n * descriptor therefore hashes that entropy. See doc/descriptor-sbq2.md.\n *\n * LIMITATION, on purpose: 64 bits is not a standalone integrity primitive. It is\n * a duplicate-detection tag whose security comes from the SAS transcript, which\n * covers both descriptors in full. Do not build anything on this tag alone.\n */\nexport async function bindingTag(digest, offerBytes) {\n    const h = await digest(concat(enc.encode('sbq2/bind\\0'), offerBytes));\n    return h.slice(0, LIMITS.BINDING_BYTES);\n}\n\n/** 16-byte commitment to the in-band key blob. */\nexport async function commitBlob(digest, blobBytes) {\n    const h = await digest(concat(enc.encode('sbq2/blob\\0'), blobBytes));\n    return h.slice(0, LIMITS.COMMITMENT_BYTES);\n}\n\n/**\n * The SAS transcript.\n *\n * It covers both descriptors *verbatim* \u2014 every byte that travelled out of\n * band, including the version byte, the flags and the whole extension area \u2014\n * and both in-band blobs. So there is nothing an attacker can change anywhere in\n * the handshake, in either direction, that does not change the digits the two\n * users read to each other. Lengths are prefixed so no field boundary can be\n * shifted.\n */\nexport function sasTranscript(offerBytes, answerBytes, offerBlob, answerBlob) {\n    const lp = (b) => {\n        const n = new Uint8Array(4);\n        new DataView(n.buffer).setUint32(0, b.length);\n        return concat(n, b);\n    };\n    return concat(\n        enc.encode('sbq2/sas/v1\\0'),\n        lp(offerBytes), lp(answerBytes), lp(offerBlob), lp(answerBlob),\n    );\n}\n\n// ---------------------------------------------------------------------------\n// transport encodings\n// ---------------------------------------------------------------------------\n\nconst B64URL = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';\n\nexport function toBase64Url(bytes) {\n    let out = '';\n    for (let i = 0; i < bytes.length; i += 3) {\n        const a = bytes[i], b = bytes[i + 1], c = bytes[i + 2];\n        out += B64URL[a >> 2];\n        out += B64URL[((a & 3) << 4) | ((b ?? 0) >> 4)];\n        if (b === undefined) break;\n        out += B64URL[((b & 15) << 2) | ((c ?? 0) >> 6)];\n        if (c === undefined) break;\n        out += B64URL[c & 63];\n    }\n    return out;\n}\n\nexport function fromBase64Url(text) {\n    if (typeof text !== 'string') fail('payload must be a string');\n    // Messengers wrap long lines; strip whitespace before validating, then\n    // require the alphabet exactly.\n    const s = text.replace(/\\s+/g, '');\n    if (s.length > Math.ceil(LIMITS.MAX_PAYLOAD_BYTES * 4 / 3) + 4) fail('payload is too long');\n    if (!/^[A-Za-z0-9_-]*$/.test(s)) fail('payload contains characters outside base64url');\n    if (s.length % 4 === 1) fail('payload has an impossible length');\n    const out = new Uint8Array(Math.floor(s.length * 3 / 4));\n    let o = 0, acc = 0, bits = 0;\n    for (const ch of s) {\n        acc = (acc << 6) | B64URL.indexOf(ch);\n        bits += 6;\n        if (bits >= 8) { bits -= 8; out[o++] = (acc >> bits) & 0xff; }\n    }\n    if (acc & ((1 << bits) - 1)) fail('payload has non-zero padding bits');\n    return out.subarray(0, o);\n}\n\nexport const TEXT_PREFIX = 'SB2:';\n\nexport function encodeText(bytes) { return TEXT_PREFIX + toBase64Url(bytes); }\n\nexport function decodeText(text) {\n    if (typeof text !== 'string') fail('payload must be a string');\n    const t = text.trim();\n    if (!t.startsWith(TEXT_PREFIX)) fail('not an SB2 descriptor');\n    return fromBase64Url(t.slice(TEXT_PREFIX.length));\n}\n\nexport { DescriptorError, KIND, KIND_FAMILY, KIND_TYPE };\n", "// In-band key exchange for SBQ2.\n//\n// The out-of-band descriptor carries only what brings up DTLS, plus a 16-byte\n// commitment. The key material itself \u2014 ECDH key, ECDSA identity key \u2014 travels\n// as the FIRST frame on the DataChannel, and is checked against that commitment\n// before a single byte of it is used for anything.\n//\n// Order of operations, and why it is this order:\n//\n//   1. Both sides send their key blob as soon as the channel opens.\n//   2. Each verifies commitment(peer blob) against the commitment that arrived\n//      in the peer's descriptor, over the channel the user authenticated by\n//      looking at it. A mismatch tears the connection down. This happens BEFORE\n//      the blob is parsed into keys, so a substituted blob never reaches\n//      importKey.\n//   3. Only now is the transcript defined: both descriptors verbatim and both\n//      blobs, length-prefixed. The HKDF salt is SHA-512 of it, so the session\n//      keys are bound to both DTLS fingerprints and every candidate \u2014 the salt\n//      is never transmitted and cannot be influenced independently by either\n//      side.\n//   4. Each signs the transcript with its ECDSA key and sends the signature.\n//      This replaces the old challenge/response authProof: one signature over\n//      everything, instead of seven fields echoing a nonce back.\n//   5. The SAS is HKDF over the ECDH shared secret salted with the transcript,\n//      so any change anywhere in the handshake \u2014 either descriptor, either blob\n//      \u2014 changes the digits the two people read to each other.\n//\n// This module is pure: it takes SubtleCrypto in, touches no DOM and no network.\n\nimport { sasTranscript, commitBlob, LIMITS } from './sbq2.js';\n\nexport const KEY_BLOB_VERSION = 0x02;\n\nexport const ROLE = Object.freeze({ OFFER: 0, ANSWER: 1 });\n\nexport const BLOB_LIMITS = Object.freeze({\n    // A P-384 SPKI is 120 bytes; P-521 would be 158. The ceiling is generous\n    // enough for a future curve and far below anything that could be used to\n    // wedge the parser.\n    MAX_SPKI: 256,\n    MIN_SPKI: 40,\n    // ECDSA P-384 signatures are 96 bytes raw; P-521 is 132.\n    MAX_SIG: 160,\n    MIN_SIG: 48,\n    MAX_BLOB_BYTES: 1024,\n});\n\nclass KeyExchangeError extends Error {\n    constructor(message, code = 'key_exchange') {\n        super(message);\n        this.name = 'KeyExchangeError';\n        this.code = code;\n    }\n}\nconst fail = (msg, code) => { throw new KeyExchangeError(msg, code); };\n\n// ---------------------------------------------------------------------------\n// key blob\n// ---------------------------------------------------------------------------\n\n/**\n * version u8 | role u8 | ecdhLen u16 | ecdh | ecdsaLen u16 | ecdsa\n *\n * No signature lives in here: the blob is what the commitment and the\n * transcript cover, and a signature over the transcript cannot be inside the\n * thing it signs. It travels separately, in the proof frame.\n */\nexport function encodeKeyBlob({ role, ecdhSpki, ecdsaSpki }) {\n    if (role !== ROLE.OFFER && role !== ROLE.ANSWER) fail('invalid role');\n    for (const [name, v] of [['ecdh', ecdhSpki], ['ecdsa', ecdsaSpki]]) {\n        if (!(v instanceof Uint8Array)) fail(`${name} SPKI must be a Uint8Array`);\n        if (v.length < BLOB_LIMITS.MIN_SPKI || v.length > BLOB_LIMITS.MAX_SPKI) {\n            fail(`${name} SPKI length out of range`);\n        }\n    }\n    const out = new Uint8Array(1 + 1 + 2 + ecdhSpki.length + 2 + ecdsaSpki.length);\n    const dv = new DataView(out.buffer);\n    let o = 0;\n    out[o++] = KEY_BLOB_VERSION;\n    out[o++] = role;\n    dv.setUint16(o, ecdhSpki.length); o += 2;\n    out.set(ecdhSpki, o); o += ecdhSpki.length;\n    dv.setUint16(o, ecdsaSpki.length); o += 2;\n    out.set(ecdsaSpki, o);\n    return out;\n}\n\n/** Strict parser. Anything unexpected throws; there is no partial result. */\nexport function decodeKeyBlob(buf) {\n    if (!(buf instanceof Uint8Array)) fail('key blob must be a Uint8Array');\n    if (buf.length === 0) fail('key blob is empty');\n    if (buf.length > BLOB_LIMITS.MAX_BLOB_BYTES) fail('key blob exceeds the size limit');\n\n    const dv = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);\n    let o = 0;\n    const need = (n) => { if (o + n > buf.length) fail('key blob is truncated'); };\n\n    need(1);\n    const version = buf[o++];\n    // Same rule as the descriptor: a version mismatch is an error, never an\n    // attempt to parse a different shape.\n    if (version !== KEY_BLOB_VERSION) fail(`unsupported key blob version 0x${version.toString(16)}`, 'version');\n\n    need(1);\n    const role = buf[o++];\n    if (role !== ROLE.OFFER && role !== ROLE.ANSWER) fail('reserved key blob role');\n\n    need(2);\n    const ecdhLen = dv.getUint16(o); o += 2;\n    if (ecdhLen < BLOB_LIMITS.MIN_SPKI || ecdhLen > BLOB_LIMITS.MAX_SPKI) fail('ECDH SPKI length out of range');\n    need(ecdhLen);\n    const ecdhSpki = buf.slice(o, o + ecdhLen); o += ecdhLen;\n\n    need(2);\n    const ecdsaLen = dv.getUint16(o); o += 2;\n    if (ecdsaLen < BLOB_LIMITS.MIN_SPKI || ecdsaLen > BLOB_LIMITS.MAX_SPKI) fail('ECDSA SPKI length out of range');\n    need(ecdsaLen);\n    const ecdsaSpki = buf.slice(o, o + ecdsaLen); o += ecdsaLen;\n\n    // Trailing bytes are malformed input, not padding to ignore \u2014 the same rule\n    // the descriptor decoder applies, and for the same reason: what the\n    // commitment covers must have exactly one reading.\n    if (o !== buf.length) fail(`${buf.length - o} trailing byte(s) after the key blob`);\n\n    return { version, role, ecdhSpki, ecdsaSpki };\n}\n\n// ---------------------------------------------------------------------------\n// transcript\n// ---------------------------------------------------------------------------\n\n/**\n * Canonical transcript. Argument order is by ROLE, never by who is calling, so\n * both peers hash identical bytes.\n */\nexport function buildTranscript({ offerDescriptor, answerDescriptor, offerBlob, answerBlob }) {\n    for (const [name, v] of Object.entries({ offerDescriptor, answerDescriptor, offerBlob, answerBlob })) {\n        if (!(v instanceof Uint8Array) || v.length === 0) fail(`transcript component ${name} is missing`);\n    }\n    return sasTranscript(offerDescriptor, answerDescriptor, offerBlob, answerBlob);\n}\n\n/**\n * HKDF salt, derived rather than transmitted.\n *\n * deriveSharedKeys requires exactly 64 bytes, which SHA-512 supplies directly.\n * Deriving it here means the salt is bound to both DTLS fingerprints and every\n * candidate, and neither side can steer it: it is a hash of material the other\n * side already committed to.\n */\nexport async function deriveTranscriptSalt(subtle, transcript) {\n    const h = await subtle.digest('SHA-512', transcript);\n    return Array.from(new Uint8Array(h));\n}\n\nconst enc = new TextEncoder();\n\n/** Bytes an ECDSA identity key signs to prove possession and bind the transcript. */\nexport function proofPayload(transcript) {\n    const label = enc.encode('sbq2/proof/v1\\0');\n    const out = new Uint8Array(label.length + transcript.length);\n    out.set(label, 0);\n    out.set(transcript, label.length);\n    return out;\n}\n\n/**\n * SAS digits.\n *\n * IKM is the raw ECDH shared secret, so an observer who has the whole\n * transcript still cannot predict the digits. The salt is the transcript hash,\n * so nothing in the handshake can move without moving the digits.\n */\nexport async function computeTranscriptSas(subtle, { ecdhPrivateKey, peerEcdhPublicKey, transcript, digits = 7 }) {\n    const shared = await subtle.deriveBits({ name: 'ECDH', public: peerEcdhPublicKey }, ecdhPrivateKey, 256);\n    let ikm = null;\n    try {\n        ikm = await subtle.importKey('raw', shared, 'HKDF', false, ['deriveBits']);\n        const salt = new Uint8Array(await subtle.digest('SHA-256', transcript));\n        const bits = await subtle.deriveBits(\n            { name: 'HKDF', hash: 'SHA-256', salt, info: enc.encode('sbq2-sas-v1') },\n            ikm, 64,\n        );\n        const dv = new DataView(bits);\n        const n = (dv.getUint32(0) ^ dv.getUint32(4)) >>> 0;\n        const mod = 10 ** digits;\n        return String(n % mod).padStart(digits, '0');\n    } finally {\n        // The shared secret must not linger in the heap once the digits exist.\n        try { new Uint8Array(shared).fill(0); } catch (_) { /* not a view we own */ }\n    }\n}\n\n/**\n * Verify a peer blob against the commitment that arrived out of band.\n *\n * Constant-time comparison is not required \u2014 the commitment is public \u2014 but the\n * check must happen before the blob is interpreted, which is why this takes raw\n * bytes and not a parsed structure.\n */\nexport async function verifyBlobCommitment(subtle, blobBytes, expectedCommitment) {\n    if (!(expectedCommitment instanceof Uint8Array) || expectedCommitment.length !== LIMITS.COMMITMENT_BYTES) {\n        fail('descriptor carried no usable commitment', 'commitment_missing');\n    }\n    const digest = async (b) => new Uint8Array(await subtle.digest('SHA-256', b));\n    const actual = await commitBlob(digest, blobBytes);\n    if (actual.length !== expectedCommitment.length) fail('commitment length mismatch', 'commitment_mismatch');\n    let diff = 0;\n    for (let i = 0; i < actual.length; i++) diff |= actual[i] ^ expectedCommitment[i];\n    if (diff !== 0) {\n        fail('the key material does not match the commitment in the invitation', 'commitment_mismatch');\n    }\n    return true;\n}\n\nexport { KeyExchangeError };\n", "// Import EnhancedSecureFileTransfer\nimport { EnhancedSecureFileTransfer } from '../transfer/EnhancedSecureFileTransfer.js';\n\n// Adaptive voice/video call stack: codec tuning, SDP munging, network adaptation.\nimport { AUDIO_CONFIG, TRANSPORT_CONFIG } from './webrtc/config.js';\nimport { applyOpusSettings, applyTransport } from './webrtc/sdp.js';\nimport { configureAudioSender, applyAudioCodecPreferences } from './webrtc/audio.js';\nimport { configureVideoSender, applyVideoCodecPreferences } from './webrtc/video.js';\nimport { NetworkAdaptationController } from './webrtc/adaptation/controller.js';\n\n// Per-message forward secrecy. See src/crypto/DoubleRatchet.js for why the\n// session's static keys were not enough on their own.\nimport { DoubleRatchet } from '../crypto/DoubleRatchet.js';\n\n// SBQ2: the compact out-of-band descriptor and the in-band key exchange that\n// makes it possible. See doc/DESCRIPTOR-SBQ2.md.\nimport {\n    parseSdp as sbq2ParseSdp,\n    pruneCandidates as sbq2PruneCandidates,\n    encodeDescriptor as sbq2Encode,\n    decodeDescriptor as sbq2Decode,\n    serializeSdp as sbq2SerializeSdp,\n    bindingTag as sbq2BindingTag,\n    commitBlob as sbq2CommitBlob,\n    encodeText as sbq2EncodeText,\n    decodeText as sbq2DecodeText,\n    TYPE as SBQ2_TYPE,\n    TEXT_PREFIX as SBQ2_TEXT_PREFIX,\n} from './descriptor/sbq2.js';\nimport {\n    ROLE as KX_ROLE,\n    encodeKeyBlob,\n    decodeKeyBlob,\n    buildTranscript,\n    deriveTranscriptSalt,\n    proofPayload,\n    computeTranscriptSas,\n    verifyBlobCommitment,\n} from './descriptor/keyexchange.js';\n\n// MUTEX SYSTEM FIXES - RESOLVING MESSAGE DELIVERY ISSUES\n// ============================================\n// Issue: After introducing the Mutex system, messages stopped being delivered between users\n// Fix: Simplified locking logic \u2014 mutex is used ONLY for critical operations\n// - Regular messages are processed WITHOUT mutex\n// - File messages are processed WITHOUT mutex  \n// - Mutex is used ONLY for cryptographic operations\n// ============================================\n\nclass EnhancedSecureWebRTCManager {\n    // ============================================\n    // CONSTANTS\n    // ============================================\n    \n    static TIMEOUTS = {\n        KEY_ROTATION_INTERVAL: 300000,      // 5 minutes\n        CONNECTION_TIMEOUT: 10000,          // 10 seconds  \n        // Kept below LIVENESS_PROBE_AFTER so a healthy peer's own heartbeats keep\n        // the liveness clock fresh and probing never happens on a working link.\n        HEARTBEAT_INTERVAL: 10000,          // 10 seconds\n        SECURITY_CALC_DELAY: 1000,          // 1 second\n        SECURITY_CALC_RETRY_DELAY: 3000,    // 3 seconds\n        CLEANUP_INTERVAL: 300000,           // 5 minutes (periodic cleanup)\n        CLEANUP_CHECK_INTERVAL: 60000,      // 1 minute (cleanup check)\n        ICE_GATHERING_TIMEOUT: 10000,       // 10 seconds \u2014 soft: enough on a healthy network\n        // Hard ceiling used only when the soft deadline passes with NOTHING to\n        // export. Blocked STUN/TURN keeps gathering \"in progress\" indefinitely, so\n        // giving up at 10 s turned a slow network into a failed handshake.\n        ICE_GATHERING_HARD_TIMEOUT: 25000,  // 25 seconds\n        DISCONNECT_CLEANUP_DELAY: 500,      // 500ms\n        PEER_DISCONNECT_CLEANUP: 2000,      // 2 seconds\n        STAGE2_ACTIVATION_DELAY: 10000,     // 10 seconds\n        STAGE3_ACTIVATION_DELAY: 15000,     // 15 seconds  \n        STAGE4_ACTIVATION_DELAY: 20000,     // 20 seconds\n        FILE_TRANSFER_INIT_DELAY: 1000,     // 1 second\n        FAKE_TRAFFIC_MIN_INTERVAL: 15000,   // 15 seconds\n        FAKE_TRAFFIC_MAX_INTERVAL: 30000,   // 30 seconds\n        DECOY_INITIAL_DELAY: 5000,          // 5 seconds\n        DECOY_TRAFFIC_MIN: 10000,           // 10 seconds\n        DECOY_TRAFFIC_MAX: 25000,           // 25 seconds\n        REORDER_TIMEOUT: 3000,              // 3 seconds\n        RETRY_CONNECTION_DELAY: 2000,       // 2 seconds\n\n        // --- Session recovery ---\n        // How long to let a 'disconnected' path heal itself before renegotiating.\n        //\n        // The browser enters 'disconnected' after only ~5 s without a consent\n        // binding response, which ordinary packet loss produces, and then holds\n        // that state for roughly 25 s before declaring 'failed'. That whole\n        // window exists precisely so the connection can come back on its own \u2014\n        // and it very often does, especially against a phone whose screen went\n        // off, which generates these episodes constantly.\n        //\n        // So restart LATE in the window, not at the start: early enough to still\n        // beat 'failed', late enough that self-healing has had its chance. An\n        // earlier 3 s value meant every backgrounded phone was answered with a\n        // renegotiation \u2014 tearing down a connection that was about to recover.\n        // See https://blog.mozilla.org/webrtc/ice-disconnected-not/\n        ICE_DISCONNECT_GRACE: 8000,         // 8 seconds\n        // How long one restart round-trip (offer \u2192 gather \u2192 answer) may take. No\n        // new attempt is launched while one is in flight: the round-trip is far\n        // longer than the head of the backoff, so retrying blindly cancels the\n        // attempt already running and recovery never converges.\n        ICE_RESTART_TIMEOUT: 20000,         // 20 seconds\n        // Gathering budget inside a restart. Deliberately far below the initial\n        // handshake's 10 s: host and server-reflexive candidates arrive in well\n        // under a second, and waiting out the full budget for a relay candidate\n        // that may never come would blow the round-trip deadline above.\n        ICE_RESTART_GATHERING: 4000,        // 4 seconds\n        // Give up on automatic recovery after this long. There is no manual\n        // fallback: the session is ended and its data wiped.\n        RECONNECT_MAX_DURATION: 120000,     // 2 minutes\n        // In-band recovery needs the data channel to carry the renegotiation. If\n        // nothing at all arrives from the peer for this long once recovery has\n        // started, it cannot \u2014 and no number of further attempts will change\n        // that, so the session is ended promptly instead of after a two-minute\n        // wait that was never going to succeed.\n        RECOVERY_SILENCE_LIMIT: 15000,      // 15 seconds\n        // Liveness is established by an explicit probe/ack, not by silence alone.\n        // Silence on its own is not proof of death: a browser throttles timers in a\n        // backgrounded tab (Chrome down to roughly one per minute, iOS Safari\n        // freezes them outright), so a perfectly healthy peer can stop sending for\n        // a long time. Inbound message handling is NOT throttled that way, so a\n        // live peer \u2014 even a backgrounded one \u2014 answers a probe within milliseconds\n        // while a peer whose network is gone cannot answer at all.\n        LIVENESS_PROBE_AFTER: 12000,        // silence before probing the peer\n        LIVENESS_PROBE_TIMEOUT: 5000,       // how long the ack may take\n        LIVENESS_CHECK_INTERVAL: 2000,      // 2 seconds\n\n    };\n\n\n    // Backoff between automatic ICE-restart attempts (ms). Deliberately short at\n    // the head: most real drops recover on the first or second try.\n    static RECONNECT_BACKOFF = Object.freeze([1000, 2000, 4000, 8000, 15000, 30000]);\n\n    static LIMITS = {\n        MAX_CONNECTION_ATTEMPTS: 3,\n        // Consecutive ICE failures that produced zero candidate pairs before\n        // concluding the PeerConnection itself is unusable, rather than the path\n        // merely being flaky.\n        MAX_BARREN_ICE_FAILURES: 2,\n        MAX_OLD_KEYS: 3,\n        MAX_PROCESSED_MESSAGE_IDS: 1000,\n        MAX_OUT_OF_ORDER_PACKETS: 5,\n        MAX_DECOY_CHANNELS: 1,\n        MESSAGE_RATE_LIMIT: 60,             // messages per minute\n        MAX_KEY_AGE: 900000,                // 15 minutes\n        OFFER_MAX_AGE: 3600000,             // 1 hour\n        SALT_SIZE_V3: 32,                   // bytes\n        SALT_SIZE_V4: 64                    // bytes\n    };\n\n    static SIZES = {\n        VERIFICATION_CODE_MIN_LENGTH: 6,\n        FAKE_TRAFFIC_MIN_SIZE: 32,\n        FAKE_TRAFFIC_MAX_SIZE: 128,\n        PACKET_PADDING_MIN: 64,\n        PACKET_PADDING_MAX: 512,\n        CHUNK_SIZE_MAX: 2048,\n        CHUNK_DELAY_MIN: 100,\n        CHUNK_DELAY_MAX: 500,\n        FINGERPRINT_DISPLAY_LENGTH: 8,\n        SESSION_ID_LENGTH: 16,\n        NESTED_ENCRYPTION_IV_SIZE: 12\n    };\n\n    static MESSAGE_TYPES = {\n        // Regular messages\n        MESSAGE: 'message',\n        ENHANCED_MESSAGE: 'enhanced_message',\n        // Chat content under the Double Ratchet: a per-message key that is\n        // destroyed after use. Carries its own plaintext header (ratchet public\n        // key, chain position) which AES-GCM authenticates as AAD.\n        RATCHET_MESSAGE: 'ratchet_message',\n\n        // Per-message control (unsend / disappearing sync)\n        MESSAGE_DELETE: 'message_delete',\n        // Delivery receipt: recipient acks a chat message by id (WhatsApp \u2713\u2713).\n        MESSAGE_RECEIPT: 'message_receipt',\n\n        // System messages\n        HEARTBEAT: 'heartbeat',\n        VERIFICATION: 'verification',\n        VERIFICATION_RESPONSE: 'verification_response',\n        VERIFICATION_CONFIRMED: 'verification_confirmed',\n        VERIFICATION_BOTH_CONFIRMED: 'verification_both_confirmed',\n        PEER_DISCONNECT: 'peer_disconnect',\n        SECURITY_UPGRADE: 'security_upgrade',\n        KEY_ROTATION_SIGNAL: 'key_rotation_signal',\n        KEY_ROTATION_READY: 'key_rotation_ready',\n        \n        // File transfer messages\n        FILE_TRANSFER_START: 'file_transfer_start',\n        FILE_TRANSFER_RESPONSE: 'file_transfer_response',\n        FILE_CHUNK: 'file_chunk',\n        CHUNK_CONFIRMATION: 'chunk_confirmation',\n        FILE_TRANSFER_COMPLETE: 'file_transfer_complete',\n        FILE_TRANSFER_ERROR: 'file_transfer_error',\n\n        // Encrypted voice / video calls. SDP + ICE are exchanged over the\n        // already-authenticated (ECDH + SAS-verified) data channel, so the\n        // DTLS-SRTP fingerprints negotiated for the media are themselves\n        // authenticated end-to-end \u2014 a signalling server never sees them.\n        CALL_OFFER: 'call_offer',\n        CALL_ANSWER: 'call_answer',\n        CALL_ICE: 'call_ice',\n        CALL_DECLINE: 'call_decline',\n        CALL_END: 'call_end',\n\n        // Session recovery. An ICE restart renegotiates ONLY the transport path\n        // (new candidates after a NAT rebind / IP change); the DTLS handshake and\n        // the SCTP association that carries this data channel survive it, so the\n        // session keys, the SAS verification and the message history all stay\n        // valid. The renegotiation SDP therefore rides the existing E2E channel \u2014\n        // still no signalling server. Note that holding the session keys is NOT\n        // itself proof of identity: a MITM who completed the handshake holds them\n        // too. These frames are accepted only after SAS verification (see\n        // POST_VERIFICATION_CONTROL_TYPES).\n        ICE_RESTART_OFFER: 'ice_restart_offer',\n        ICE_RESTART_ANSWER: 'ice_restart_answer',\n        // Sent by the answerer side, which must not create offers itself (glare):\n        // it asks the offerer to drive the restart.\n        ICE_RESTART_REQUEST: 'ice_restart_request',\n\n        // SBQ2 in-band key exchange. These are the only two frames that legitimately\n        // arrive before any key exists, which is exactly why they are handled in one\n        // place and nowhere else: KEY_BLOB carries the key material the descriptor's\n        // commitment covers, KEY_PROOF the signature over the transcript.\n        KEY_BLOB: 'key_blob',\n        KEY_PROOF: 'key_proof',\n\n        // Fake traffic\n        FAKE: 'fake'\n    };\n\n    static FILTERED_RESULTS = {\n        FAKE_MESSAGE: 'FAKE_MESSAGE_FILTERED',\n        FILE_MESSAGE: 'FILE_MESSAGE_FILTERED',\n        SYSTEM_MESSAGE: 'SYSTEM_MESSAGE_FILTERED'\n    };\n\n    // Control frames that may only be acted on once the session is SAS-verified.\n    // Deliberately an allowlist: an unknown type is not a control frame and is\n    // rejected by the chat channel's default-deny branch. The verification\n    // handshake itself (verification*, heartbeat) is excluded \u2014 it has to work\n    // before verification exists, which is what makes it worth reviewing closely.\n    static POST_VERIFICATION_CONTROL_TYPES = new Set([\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE_DELETE,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE_RECEIPT,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_OFFER,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_ANSWER,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_ICE,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_DECLINE,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_END,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_OFFER,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_ANSWER,\n        EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_REQUEST\n    ]);\n\n    // \u2500\u2500 SBQ2 ROLLBACK SWITCH \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    // Flip this ONE value to false and redeploy to put every new invitation back\n    // on the SB1 format. Nothing else needs touching: reception of both formats\n    // is unconditional, so a client built with this off still reads SBQ2\n    // invitations from a client built with it on.\n    //\n    // It only governs what we EMIT. It is deliberately not consulted anywhere in\n    // the receive path, and never inside an established session \u2014 see\n    // _handshakeMode, which is latched per connection so a session cannot be\n    // pushed back onto the weaker format halfway through.\n    static SBQ2_SEND_ENABLED = true;\n\n    // How long the in-band key exchange may take from channel open to verified\n    // proof. Generous next to the ~1 s a handshake actually needs, tight enough\n    // that a peer that never sends its blob does not hang the UI indefinitely.\n    static SBQ2_KEY_EXCHANGE_TIMEOUT_MS = 15000;\n\n    static PROTOCOL_VERSION = '4.1';\n    // Double Ratchet wire version. Bump only on an incompatible ratchet change;\n    // peers compare it and fall back to static keys when it is absent or unknown.\n    static RATCHET_VERSION = 1;\n    static MAX_SAS_ATTEMPTS = 3;\n    static DEFAULT_ICE_SERVERS = Object.freeze([\n        // Keep multiple independent public STUN defaults so one provider-side\n        // DNS/path failure does not strand standard-mode connectivity.\n        Object.freeze({ urls: 'stun:stun.cloudflare.com:3478' }),\n        Object.freeze({ urls: 'stun:stun.l.google.com:19302' }),\n        Object.freeze({ urls: 'stun:stun1.l.google.com:19302' }),\n        Object.freeze({ urls: 'stun:stun2.l.google.com:19302' }),\n        Object.freeze({ urls: 'stun:stun3.l.google.com:19302' }),\n        Object.freeze({ urls: 'stun:stun4.l.google.com:19302' })\n    ]);\n\n    //   Static debug flag instead of this._debugMode\n    static DEBUG_MODE = false; // Set to true during development, false in production\n\n\n    constructor(onMessage, onStatusChange, onKeyExchange, onVerificationRequired, onAnswerError = null, onVerificationStateChange = null, config = {}) {\n    // Determine runtime mode\n    this._isProductionMode = this._detectProductionMode();\n            //   Use static flag instead of this._debugMode\n        this._debugMode = !this._isProductionMode && EnhancedSecureWebRTCManager.DEBUG_MODE;\n        \n        //   Configuration from constructor parameters instead of global flags\n        this._config = {\n            fakeTraffic: {\n                enabled: config.fakeTraffic?.enabled ?? true,\n                minInterval: config.fakeTraffic?.minInterval ?? EnhancedSecureWebRTCManager.TIMEOUTS.FAKE_TRAFFIC_MIN_INTERVAL,\n                maxInterval: config.fakeTraffic?.maxInterval ?? EnhancedSecureWebRTCManager.TIMEOUTS.FAKE_TRAFFIC_MAX_INTERVAL,\n                minSize: config.fakeTraffic?.minSize ?? EnhancedSecureWebRTCManager.SIZES.FAKE_TRAFFIC_MIN_SIZE,\n                maxSize: config.fakeTraffic?.maxSize ?? EnhancedSecureWebRTCManager.SIZES.FAKE_TRAFFIC_MAX_SIZE,\n                patterns: config.fakeTraffic?.patterns ?? ['heartbeat', 'status', 'sync']\n            },\n            decoyChannels: {\n                enabled: config.decoyChannels?.enabled ?? true,\n                maxDecoyChannels: config.decoyChannels?.maxDecoyChannels ?? EnhancedSecureWebRTCManager.LIMITS.MAX_DECOY_CHANNELS,\n                decoyChannelNames: config.decoyChannels?.decoyChannelNames ?? ['heartbeat'],\n                sendDecoyData: config.decoyChannels?.sendDecoyData ?? true,\n                randomDecoyIntervals: config.decoyChannels?.randomDecoyIntervals ?? true\n            },\n            packetPadding: {\n                enabled: config.packetPadding?.enabled ?? true,\n                minPadding: config.packetPadding?.minPadding ?? EnhancedSecureWebRTCManager.SIZES.PACKET_PADDING_MIN,\n                maxPadding: config.packetPadding?.maxPadding ?? EnhancedSecureWebRTCManager.SIZES.PACKET_PADDING_MAX,\n                useRandomPadding: config.packetPadding?.useRandomPadding ?? true,\n                preserveMessageSize: config.packetPadding?.preserveMessageSize ?? false\n            },\n            antiFingerprinting: {\n                enabled: config.antiFingerprinting?.enabled ?? false,\n                randomizeTiming: config.antiFingerprinting?.randomizeTiming ?? true,\n                randomizeSizes: config.antiFingerprinting?.randomizeSizes ?? false,\n                addNoise: config.antiFingerprinting?.addNoise ?? true,\n                maskPatterns: config.antiFingerprinting?.maskPatterns ?? false,\n                useRandomHeaders: config.antiFingerprinting?.useRandomHeaders ?? false\n            },\n            webrtc: {\n                // `privacyMode` is canonical; `relayOnly` remains a\n                // backward-compatible input alias at construction time.\n                privacyMode: config.webrtc?.privacyMode\n                    ?? (config.webrtc?.relayOnly ? 'relay-only' : 'standard'),\n                relayOnly: config.webrtc?.privacyMode\n                    ? config.webrtc.privacyMode === 'relay-only'\n                    : config.webrtc?.relayOnly ?? false,\n                iceServers: config.webrtc?.iceServers\n                    ?? EnhancedSecureWebRTCManager.DEFAULT_ICE_SERVERS.map(server => ({ ...server }))\n            }\n        };\n\n        /**\n         * Whether this connection may speak to the application at large.\n         *\n         * A manager announces its lifecycle on `document` \u2014 new-connection,\n         * peer-disconnect, real-security-calculated \u2014 and the header and the\n         * chat shell listen, because for an ordinary chat those events ARE the\n         * application's state changing.\n         *\n         * A group mesh link is not an ordinary chat. It is a routing detail with\n         * no window of its own, and letting one broadcast would have it reset the\n         * security badge and the connection banner belonging to whatever chat the\n         * user happens to be looking at \u2014 a link the user never opened tearing\n         * down the display of one they did. Such a manager is muted here: its own\n         * callbacks still fire, so the group learns everything it needs.\n         */\n        this._emitGlobalEvents = config.emitGlobalEvents !== false;\n\n        this._ipLeakWarningShown = false;\n\n            //   Initialize own logging system\n        this._initializeSecureLogging();\n        this._setupOwnLogger();\n        this._setupProductionLogging();\n        \n        //   Store important methods first\n        this._storeImportantMethods();\n        \n        //   Setup global API after storing methods\n        this._setupSecureGlobalAPI();\n    if (!window.EnhancedSecureCryptoUtils) {\n        throw new Error('EnhancedSecureCryptoUtils is not loaded. Please ensure the module is loaded first.');\n    }\n    this.getSecurityData = () => {\n        // Return only public information\n        return this.lastSecurityCalculation ? {\n            level: this.lastSecurityCalculation.level,\n            score: this.lastSecurityCalculation.score,\n            timestamp: this.lastSecurityCalculation.timestamp,\n            // Do NOT return check details or sensitive data\n        } : null;\n    };\n    this._secureLog('info', '\uD83D\uDD12 Enhanced WebRTC Manager initialized with secure API');\n    this.sessionConstraints = null;\n    this.peerConnection = null;\n    this.dataChannel = null;\n\n\n    this.onMessage = onMessage;\n    this.onStatusChange = onStatusChange;\n    this.onKeyExchange = onKeyExchange;\n    this.onVerificationStateChange = onVerificationStateChange;\n\n    this.onVerificationRequired = onVerificationRequired;\n    this.onAnswerError = onAnswerError; // Callback for response processing errors\n    this.isInitiator = false;\n    this.connectionAttempts = 0;\n    this.maxConnectionAttempts = EnhancedSecureWebRTCManager.LIMITS.MAX_CONNECTION_ATTEMPTS;\n    try {\n    this._initializeMutexSystem();\n} catch (error) {\n    this._secureLog('error', '\u274C Failed to initialize mutex system', {\n        errorType: error.constructor.name\n    });\n    throw new Error('Critical: Mutex system initialization failed');\n}\n\n// Post-initialization validation of the mutex system\nif (!this._validateMutexSystem()) {\n    this._secureLog('error', '\u274C Mutex system validation failed after initialization');\n    throw new Error('Critical: Mutex system validation failed');\n}\n\nif (typeof window !== 'undefined') {\n    this._secureLog('info', '\uD83D\uDD12 Emergency mutex handlers will be available through secure API');\n}\n\nthis._secureLog('info', '\uD83D\uDD12 Enhanced Mutex system fully initialized and validated');\n    this.heartbeatInterval = null;\n    this.messageQueue = [];\n    //   Session recovery state (see _onPathDegraded / _attemptIceRestart).\n    this._reconnect = {\n        phase: 'idle',          // idle | grace | restarting | waiting | exhausted\n        attempts: 0,\n        startedAt: 0,\n        graceTimer: null,\n        retryTimer: null,\n        restartTimer: null,\n        inFlightAt: 0,          // when the current restart round-trip was launched\n        barrenFailures: 0,      // consecutive failures that produced no candidate pairs\n        pendingRole: null       // 'offerer' | 'answerer' during a restart round-trip\n    };\n    //   Liveness tracking: last time ANY authenticated frame arrived from the peer.\n    this._lastInboundAt = 0;\n    this._livenessProbeAt = 0;\n    this._livenessTimer = null;\n    this._heartbeatTimer = null;\n    this.ecdhKeyPair = null;\n    this.ecdsaKeyPair = null;\n    if (this.fileTransferSystem) {\n        this.fileTransferSystem.cleanup();\n        this.fileTransferSystem = null;\n    }\n            this.verificationCode = null;\n        this.pendingSASCode = null;\n        this.isVerified = false;\n        this.sasValidationAttempts = 0;\n        this.processedMessageIds = new Set();\n        \n        // Mutual verification states\n        this.localVerificationConfirmed = false;\n        this.remoteVerificationConfirmed = false;\n        this.bothVerificationsConfirmed = false;\n        \n        //   Store expected DTLS fingerprint for validation\n        // NAMING: `expectedDTLSFingerprint` holds OUR OWN local fingerprint once\n        // the handshake produces it \u2014 it is what _computeSAS mixes in as localFP,\n        // not an expectation about the peer. The peer's value lives separately in\n        // `_peerDTLSFingerprint`. Conflating the two is what made the old\n        // \"validation\" compare a fingerprint against itself; keep them apart.\n        this.expectedDTLSFingerprint = null;\n        this._peerDTLSFingerprint = null;\n        this.strictDTLSValidation = true; // Can be disabled for debugging\n        \n        //   Real Perfect Forward Secrecy implementation\n        this.ephemeralKeyPairs = new Map(); // Store ephemeral keys for current session only\n        this.sessionStartTime = Date.now(); // Track session lifetime for PFS\n    this.messageCounter = 0;\n    this.sequenceNumber = 0;\n    this.expectedSequenceNumber = 0;\n    this.sessionSalt = null;\n    this._pendingOfferContext = null;\n    \n    //   Anti-Replay and Message Ordering Protection\n    this.replayWindowSize = 64; // Sliding window for replay protection\n    this.replayWindow = new Set(); // Track recent sequence numbers\n    this.maxSequenceGap = 100; // Maximum allowed sequence gap\n    this.replayProtectionEnabled = true; // Enable/disable replay protection\n    this.sessionId = null; // MITM protection: Session identifier\n\n    // Handshake format latched for THIS connection: 'sb1' or 'sbq2'. Set when the\n    // first descriptor of the session is produced or parsed, and never changed\n    // afterwards. That latch is what makes downgrade impossible inside a session:\n    // an SBQ2 session that hits any trouble fails, it does not retry as SB1.\n    this._handshakeMode = null;\n    // Per-connection SBQ2 state. Null on the SB1 path.\n    this._sbq2 = null;\n    this.connectionId = Array.from(crypto.getRandomValues(new Uint8Array(8)))\n        .map(b => b.toString(16).padStart(2, '0')).join(''); // Connection identifier for AAD\n    this.peerPublicKey = null; // Store peer's public key for PFS\n\n    // Double Ratchet. `_ratchet` is null until both peers have advertised\n    // support during the handshake; until then messages take the static-key\n    // path, which is what keeps 5.6.x peers working.\n    this._ratchet = null;\n    this._peerSupportsRatchet = false;\n    this.rateLimiterId = null;\n    this.intentionalDisconnect = false;\n    this._sessionAlive = true;\n    this._fileTransferInitRetryTimers = new Set();\n    this._peerDisconnectCleanupTimer = null;\n    this._logCleanupInterval = null;\n    this.lastCleanupTime = Date.now();\n    \n    // Reset notification flags for new connection\n    this._resetNotificationFlags();\n    \n    \n\n    this.verificationInitiationSent = false;\n    this.disconnectNotificationSent = false;\n    this.reconnectionFailedNotificationSent = false;\n    this.peerDisconnectNotificationSent = false;\n    this.connectionClosedNotificationSent = false;\n    this.fakeTrafficDisabledNotificationSent = false;\n    this.advancedFeaturesDisabledNotificationSent = false;\n    this.securityUpgradeNotificationSent = false;\n    this.lastSecurityUpgradeStage = null;\n    this.securityCalculationNotificationSent = false;\n    this.lastSecurityCalculationLevel = null;\n    \n    // File transfer integration\n    this.fileTransferSystem = null;\n    this.onFileProgress = null;\n    \n    // ============================================\n    //   IV REUSE PREVENTION SYSTEM\n    // ============================================\n    //   IV REUSE PREVENTION SYSTEM WITH LIMITS\n    // ============================================\n    this._ivTrackingSystem = {\n        usedIVs: new Set(), // Track all used IVs to prevent reuse\n        ivHistory: new Map(), // Track IV usage with timestamps (max 10k entries)\n        collisionCount: 0, // Track potential collisions\n        maxIVHistorySize: 10000, // Maximum IV history size\n        maxSessionIVs: 1000, // Maximum IVs per session\n        entropyValidation: {\n            minEntropy: 3.0, // Minimum entropy threshold\n            entropyTests: 0,\n            entropyFailures: 0\n        },\n        rngValidation: {\n            testsPerformed: 0,\n            weakRngDetected: false,\n            lastValidation: 0\n        },\n        sessionIVs: new Map(), // Track IVs per session\n        emergencyMode: false // Emergency mode if IV reuse detected\n    };\n    \n    //   IV cleanup tracking\n    this._lastIVCleanupTime = null;\n    \n    // ============================================\n    //   SECURE ERROR HANDLING SYSTEM\n    // ============================================\n    this._secureErrorHandler = {\n        errorCategories: {\n            CRYPTOGRAPHIC: 'cryptographic',\n            NETWORK: 'network',\n            VALIDATION: 'validation',\n            SYSTEM: 'system',\n            UNKNOWN: 'unknown'\n        },\n        errorMappings: new Map(), // Map internal errors to safe messages\n        errorCounts: new Map(), // Track error frequencies\n        lastErrorTime: 0,\n        errorThreshold: 10, // Max errors per minute\n        isInErrorMode: false\n    };\n    \n    // ============================================\n    //   SECURE MEMORY MANAGEMENT SYSTEM\n    // ============================================\n    this._secureMemoryManager = {\n        sensitiveData: new WeakMap(), // Track sensitive data for secure cleanup\n        cleanupQueue: [], // Queue for deferred cleanup operations\n        isCleaning: false, // Prevent concurrent cleanup operations\n        cleanupInterval: null, // Periodic cleanup timer\n        memoryStats: {\n            totalCleanups: 0,\n            failedCleanups: 0,\n            lastCleanup: 0\n        }\n    };\n    this.onFileReceived = null;\n    this.onFileError = null;\n\n    // \u2500\u2500 Encrypted call subsystem \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    // Media (audio/video) rides the SAME RTCPeerConnection as the data channel\n    // (bundled over one DTLS-SRTP transport), so it inherits the connection's\n    // end-to-end encryption and needs no new ICE. Signalling is renegotiated\n    // in-band over the verified data channel. UI observes state via the\n    // onCallStateChanged callback and the 'securebit-call-state' DOM event.\n    this.onCallStateChanged = null;   // (state) => void\n    this.callState = {\n        active: false,        // a call session exists (ringing or connected)\n        phase: 'idle',        // idle | outgoing | incoming | connecting | active | ended\n        withVideo: false,     // whether video is part of this call\n        micEnabled: true,\n        cameraEnabled: false,\n        remoteHasVideo: false,\n        callId: null,\n        quality: null,        // 'excellent'|'good'|'fair'|'poor'|null \u2014 link quality for the UI\n        groupCallId: null,    // set while this call is one leg of a group call\n        error: null\n    };\n    this.localMediaStream = null;\n    this.remoteMediaStream = null;\n    this._pendingCallOffer = null;    // { sdp, callId, withVideo } awaiting accept\n    this._callMakingOffer = false;    // perfect-negotiation guard\n    this._callAudioSender = null;\n    this._callVideoSender = null;\n    this._callFacingMode = 'user';\n    this._adaptationController = null; // NetworkAdaptationController while a call is active\n\n    // \u2500\u2500 Group calls \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    // A group call is N-1 ordinary calls, one per member, each on its own\n    // already-verified pairwise session. Two things differ from a 1:1 call and\n    // both live here, because the group layer owns them and this manager only\n    // carries one leg of the result.\n    //\n    //   _callGroupContext   The group call this leg belongs to. While it is\n    //                       set, an inbound offer is answered without ringing \u2014\n    //                       the user already consented, once, by joining the\n    //                       call, and asking again per member would mean seven\n    //                       prompts for one decision. It is set ONLY by the\n    //                       group-call controller while the local user is in a\n    //                       call, and cleared the moment they leave, so it can\n    //                       never auto-answer a call the user did not ask for.\n    //\n    //   _externalMediaStream  One capture shared across every leg. Without it\n    //                       each leg would open its own getUserMedia, which is\n    //                       N microphone captures of the same microphone and N\n    //                       camera indicators for one call. The stream is owned\n    //                       by the controller: this manager attaches its tracks\n    //                       and never stops them.\n    this._callGroupContext = null;\n    this._externalMediaStream = null;\n    /** Extra call-state subscribers, so the group layer and the 1:1 UI coexist. */\n    this._callStateListeners = new Set();\n\n    // PFS (Perfect Forward Secrecy) Implementation\n    this.keyRotationInterval = null; // \u043E\u0442\u043A\u043B\u044E\u0447\u0430\u0435\u043C \u0442\u0430\u0439\u043C\u0435\u0440\u043D\u0443\u044E \u0440\u043E\u0442\u0430\u0446\u0438\u044E\n    this.lastKeyRotation = Date.now();\n    this.currentKeyVersion = 0;\n    this.keyVersions = new Map(); // Store key versions for PFS\n    this.oldKeys = new Map(); // Store old keys temporarily for decryption\n    this.maxOldKeys = EnhancedSecureWebRTCManager.LIMITS.MAX_OLD_KEYS; // Keep last 3 key versions for decryption\n    this.peerConnection = null;\n    this.dataChannel = null;\n    \n\n    this.securityFeatures = {\n        // All security features enabled by default - no payment required\n        hasEncryption: true,      \n        hasECDH: true,            \n        hasECDSA: true,          \n        hasMutualAuth: true,     \n        hasMetadataProtection: true,      \n        hasEnhancedReplayProtection: true, \n        hasNonExtractableKeys: true,      \n        hasRateLimiting: true,    \n        hasEnhancedValidation: true,      \n        hasPFS: true, //   Real Perfect Forward Secrecy enabled           \n        \n        // Advanced Features - All enabled by default\n        hasNestedEncryption: true,     \n        hasPacketPadding: true,        \n        hasPacketReordering: true,    \n        hasAntiFingerprinting: true,  \n        hasFakeTraffic: true,         \n        hasDecoyChannels: true,       \n        hasMessageChunking: true      \n        };\n        this._secureLog('info', '\uD83D\uDD12 Enhanced WebRTC Manager initialized with tiered security');\n        \n        //   Log configuration for debugging\n        this._secureLog('info', '\uD83D\uDD12 Configuration loaded from constructor parameters', {\n            fakeTraffic: this._config.fakeTraffic.enabled,\n            decoyChannels: this._config.decoyChannels.enabled,\n            packetPadding: this._config.packetPadding.enabled,\n            antiFingerprinting: this._config.antiFingerprinting.enabled\n        });\n        \n        // Session mode: 'time' | 'ratchet'. NOTE: 'ratchet' currently means only\n        // that key lifetime is bound to the session rather than to a timer \u2014 there\n        // is no Double Ratchet and no in-session rotation (rotateKeys() exists but\n        // is not wired to anything, and keyRotationInterval is null). Forward\n        // secrecy is therefore per-session, not per-message: see\n        // verifyPerfectForwardSecrecy(), which reports that gap rather than hiding\n        // it. Do not read this flag as evidence that a ratchet is running.\n        this.sessionMode = 'ratchet';\n\n        //   XSS Hardening - replace all window.DEBUG_MODE references\n        this._hardenDebugModeReferences();\n        \n        //   Initialize unified scheduler for all maintenance tasks\n        this._initializeUnifiedScheduler();\n        \n        this._syncSecurityFeaturesWithTariff();\n        \n        if (!this._validateCryptographicSecurity()) {\n            this._secureLog('error', '\uD83D\uDEA8 CRITICAL: Cryptographic security validation failed after tariff sync');\n            throw new Error('Critical cryptographic features are missing after tariff synchronization');\n        }\n    // ============================================\n    // ENHANCED SECURITY FEATURES\n    // ============================================\n        \n        // 1. Nested Encryption Layer\n            this.nestedEncryptionKey = null;\n                    //   Removed nestedEncryptionIV and nestedEncryptionCounter\n        // Each nested encryption now generates fresh random IV for maximum security\n                \n            // 2. Packet Padding\n            this.paddingConfig = {\n                enabled: this._config.packetPadding.enabled,\n                minPadding: this._config.packetPadding.minPadding,\n                maxPadding: this._config.packetPadding.maxPadding,\n                useRandomPadding: this._config.packetPadding.useRandomPadding,\n                preserveMessageSize: this._config.packetPadding.preserveMessageSize\n            };\n                \n            // 3. Fake Traffic Generation\n            this.fakeTrafficConfig = {\n                enabled: this._config.fakeTraffic?.enabled || false,\n                minInterval: this._config.fakeTraffic?.minInterval || 15000,\n                maxInterval: this._config.fakeTraffic?.maxInterval || 30000,\n                minSize: this._config.fakeTraffic?.minSize || 64,\n                maxSize: this._config.fakeTraffic?.maxSize || 1024,\n                patterns: this._config.fakeTraffic?.patterns || ['heartbeat', 'status', 'ping'],\n                randomDecoyIntervals: this._config.fakeTraffic?.randomDecoyIntervals || true\n            };\n            this.fakeTrafficTimer = null;\n            this.lastFakeTraffic = 0;\n                \n            // 4. Message Chunking\n            this.chunkingConfig = {\n                enabled: false,\n                maxChunkSize: EnhancedSecureWebRTCManager.SIZES.CHUNK_SIZE_MAX,        \n                minDelay: EnhancedSecureWebRTCManager.SIZES.CHUNK_DELAY_MIN,\n                maxDelay: EnhancedSecureWebRTCManager.SIZES.CHUNK_DELAY_MAX,\n                useRandomDelays: true,\n                addChunkHeaders: true\n            };\n            this.chunkQueue = [];\n            this.chunkingInProgress = false;\n                \n            // 5. Decoy Channels\n            this.decoyChannels = new Map();\n            this.decoyChannelConfig = {\n                enabled: this._config.decoyChannels.enabled,\n                maxDecoyChannels: this._config.decoyChannels.maxDecoyChannels,\n                decoyChannelNames: this._config.decoyChannels.decoyChannelNames,\n                sendDecoyData: this._config.decoyChannels.sendDecoyData,\n                randomDecoyIntervals: this._config.decoyChannels.randomDecoyIntervals\n            };\n            this.decoyTimers = new Map();\n                \n            // 6. Packet Reordering Protection\n            this.reorderingConfig = {\n                enabled: false,             \n                maxOutOfOrder: EnhancedSecureWebRTCManager.LIMITS.MAX_OUT_OF_ORDER_PACKETS,           \n                reorderTimeout: EnhancedSecureWebRTCManager.TIMEOUTS.REORDER_TIMEOUT,       \n                useSequenceNumbers: true,\n                useTimestamps: true\n            };\n            this.packetBuffer = new Map(); // sequence -> {data, timestamp}\n            this.lastProcessedSequence = -1;\n                \n            // 7. Anti-Fingerprinting\n            this.antiFingerprintingConfig = {\n                enabled: this._config.antiFingerprinting.enabled,\n                randomizeTiming: this._config.antiFingerprinting.randomizeTiming,\n                randomizeSizes: this._config.antiFingerprinting.randomizeSizes,\n                addNoise: this._config.antiFingerprinting.addNoise,\n                maskPatterns: this._config.antiFingerprinting.maskPatterns,\n                useRandomHeaders: this._config.antiFingerprinting.useRandomHeaders\n            };\n            this.fingerprintMask = this.generateFingerprintMask();\n                \n            // Initialize rate limiter ID\n            this.rateLimiterId = `webrtc_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;\n                \n            // Start periodic cleanup\n            this.startPeriodicCleanup();\n                \n            this.initializeEnhancedSecurity(); \n            \n            // ============================================\n            // MUTEX SYSTEM TO PREVENT RACE CONDITIONS\n            // ============================================\n\n            // Mutex for key operations\n            this._keyOperationMutex = {\n                locked: false,\n                queue: [],\n                lockId: null,\n                lockTimeout: null\n            };\n\n            // Mutex for encryption/decryption operations\n            this._cryptoOperationMutex = {\n                locked: false,\n                queue: [],\n                lockId: null,\n                lockTimeout: null\n            };\n\n            // Mutex for connection initialization\n            this._connectionOperationMutex = {\n                locked: false,\n                queue: [],\n                lockId: null,\n                lockTimeout: null\n            };\n\n            // Key system state\n            this._keySystemState = {\n                isInitializing: false,\n                isRotating: false,\n                isDestroying: false,\n                lastOperation: null,\n                lastOperationTime: Date.now()\n            };\n\n            // Operation counters\n            this._operationCounters = {\n                keyOperations: 0,\n                cryptoOperations: 0,\n                connectionOperations: 0\n            };\n\n        }\n        \n        /**\n         *   Create AAD with sequence number for anti-replay protection\n         * This binds each message to its sequence number and prevents replay attacks\n         */\n        _createMessageAAD(messageType, messageData = null, isFileMessage = false) {\n            try {\n                const aad = {\n                    sessionId: this.currentSession?.sessionId || this.sessionId || 'unknown',\n                    keyFingerprint: this.keyFingerprint || 'unknown',\n                    sequenceNumber: this._generateNextSequenceNumber(),\n                    messageType: messageType,\n                    timestamp: Date.now(),\n                    connectionId: this.connectionId || 'unknown',\n                    isFileMessage: isFileMessage\n                };\n\n                // Add message-specific data if available\n                if (messageData && typeof messageData === 'object') {\n                    if (messageData.fileId) aad.fileId = messageData.fileId;\n                    if (messageData.chunkIndex !== undefined) aad.chunkIndex = messageData.chunkIndex;\n                    if (messageData.totalChunks !== undefined) aad.totalChunks = messageData.totalChunks;\n                }\n\n                return JSON.stringify(aad);\n            } catch (error) {\n                this._secureLog('error', '\u274C Failed to create message AAD', {\n                    errorType: error.constructor.name,\n                    message: error.message,\n                    messageType: messageType\n                });\n                // Fallback to basic AAD\n                return JSON.stringify({\n                    sessionId: 'unknown',\n                    keyFingerprint: 'unknown',\n                    sequenceNumber: Date.now(),\n                    messageType: messageType,\n                    timestamp: Date.now(),\n                    connectionId: 'unknown',\n                    isFileMessage: isFileMessage\n                });\n            }\n        }\n        \n        /**\n         *   Generate next sequence number for outgoing messages\n         * This ensures unique ordering and prevents replay attacks\n         */\n        _generateNextSequenceNumber() {\n            const nextSeq = this.sequenceNumber++;\n            \n            //   Reset sequence number if it gets too large\n            if (this.sequenceNumber > Number.MAX_SAFE_INTEGER - 1000) {\n                this.sequenceNumber = 0;\n                this.expectedSequenceNumber = 0;\n                this.replayWindow.clear();\n                this._secureLog('warn', '\u26A0\uFE0F Sequence number reset due to overflow', {\n                    timestamp: Date.now()\n                });\n            }\n            \n            return nextSeq;\n        }\n\n        /**\n         * Create a safe hash for logging sensitive data\n         * Returns only the first 4 bytes (8 hex chars) of SHA-256 hash\n         * @param {any} sensitiveData - The sensitive data to hash\n         * @param {string} context - Context for error logging\n         * @returns {Promise<string>} - Short hash (8 hex chars) or 'hash_error'\n         */\n        async _createSafeLogHash(sensitiveData, context = 'unknown') {\n            try {\n                let dataToHash;\n                \n                // Convert different data types to consistent format for hashing\n                if (sensitiveData instanceof ArrayBuffer) {\n                    dataToHash = new Uint8Array(sensitiveData);\n                } else if (sensitiveData instanceof Uint8Array) {\n                    dataToHash = sensitiveData;\n                } else if (sensitiveData instanceof CryptoKey) {\n                    // For CryptoKey, use its type and algorithm info (not the key material)\n                    const keyInfo = `${sensitiveData.type}_${sensitiveData.algorithm?.name || 'unknown'}_${sensitiveData.extractable}`;\n                    dataToHash = new TextEncoder().encode(keyInfo);\n                } else if (typeof sensitiveData === 'string') {\n                    dataToHash = new TextEncoder().encode(sensitiveData);\n                } else if (typeof sensitiveData === 'object' && sensitiveData !== null) {\n                    // For objects (like JWK), stringify without sensitive fields\n                    const safeObj = { type: sensitiveData.kty || 'unknown', use: sensitiveData.use || 'unknown' };\n                    dataToHash = new TextEncoder().encode(JSON.stringify(safeObj));\n                } else {\n                    // Fallback for other types\n                    dataToHash = new TextEncoder().encode(String(sensitiveData));\n                }\n                \n                // Create SHA-256 hash\n                const hashBuffer = await crypto.subtle.digest('SHA-256', dataToHash);\n                const hashArray = new Uint8Array(hashBuffer);\n                \n                // Return only first 4 bytes as hex (8 characters)\n                return Array.from(hashArray.slice(0, 4))\n                    .map(b => b.toString(16).padStart(2, '0'))\n                    .join('');\n                    \n            } catch (error) {\n                // Never log the actual error details to avoid leaking sensitive data\n                return 'hash_error';\n            }\n        }\n\n        /**\n         * Async sleep helper - replaces busy-wait\n         */\n        async _asyncSleep(ms) {\n            return new Promise(resolve => setTimeout(resolve, ms));\n        }\n\n        /**\n         * Async cleanup helper - replaces immediate heavy operations\n         */\n        async _scheduleAsyncCleanup(cleanupFn, delay = 0) {\n            return new Promise((resolve) => {\n                setTimeout(async () => {\n                    try {\n                        await cleanupFn();\n                        resolve(true);\n                    } catch (error) {\n                        this._secureLog('error', 'Async cleanup failed', {\n                            errorType: error?.constructor?.name || 'Unknown'\n                        });\n                        resolve(false);\n                    }\n                }, delay);\n            });\n        }\n\n        /**\n         * Batch async operations to prevent UI blocking\n         */\n        async _batchAsyncOperation(items, batchSize = 10, delayBetweenBatches = 5) {\n            const results = [];\n            \n            for (let i = 0; i < items.length; i += batchSize) {\n                const batch = items.slice(i, i + batchSize);\n                const batchResults = await Promise.all(batch);\n                results.push(...batchResults);\n                \n                // Small delay between batches to prevent UI blocking\n                if (i + batchSize < items.length) {\n                    await this._asyncSleep(delayBetweenBatches);\n                }\n            }\n            \n            return results;\n        }\n\n        /**\n         * Memory cleanup without window.gc() - uses natural garbage collection\n         */\n        async _performNaturalCleanup() {\n            // Clear references and let JS engine handle GC naturally\n            // This is more reliable than forcing GC\n            \n            // Schedule cleanup in next event loop cycle\n            await this._asyncSleep(0);\n            \n            // Allow multiple event loop cycles for natural GC\n            for (let i = 0; i < 3; i++) {\n                await this._asyncSleep(10);\n            }\n        }\n\n        /**\n         * Heavy cleanup operations using WebWorker (if available)\n         */\n        async _performHeavyCleanup(cleanupData) {\n            // Try to use WebWorker for heavy operations\n            if (typeof Worker !== 'undefined') {\n                try {\n                    return await this._cleanupWithWorker(cleanupData);\n                } catch (error) {\n                    this._secureLog('warn', 'WebWorker cleanup failed, falling back to main thread', {\n                        errorType: error?.constructor?.name || 'Unknown'\n                    });\n                }\n            }\n            \n            // Fallback to main thread with async batching\n            return await this._cleanupInMainThread(cleanupData);\n        }\n\n        /**\n         * Cleanup using WebWorker\n         */\n        async _cleanupWithWorker(cleanupData) {\n            return new Promise((resolve, reject) => {\n                // Create inline worker for cleanup operations\n                const workerCode = `\n                    self.onmessage = function(e) {\n                        const { type, data } = e.data;\n                        \n                        try {\n                            switch (type) {\n                                case 'cleanup_arrays':\n                                    // Simulate heavy array cleanup\n                                    let processed = 0;\n                                    for (let i = 0; i < data.count; i++) {\n                                        // Simulate work\n                                        processed++;\n                                        if (processed % 1000 === 0) {\n                                            // Yield control periodically\n                                            setTimeout(() => {}, 0);\n                                        }\n                                    }\n                                    self.postMessage({ success: true, processed });\n                                    break;\n                                    \n                                case 'cleanup_objects':\n                                    // Simulate object cleanup\n                                    const cleaned = data.objects.map(() => null);\n                                    self.postMessage({ success: true, cleaned: cleaned.length });\n                                    break;\n                                    \n                                default:\n                                    self.postMessage({ success: true, message: 'Unknown cleanup type' });\n                            }\n                        } catch (error) {\n                            self.postMessage({ success: false, error: error.message });\n                        }\n                    };\n                `;\n                \n                const blob = new Blob([workerCode], { type: 'application/javascript' });\n                const worker = new Worker(URL.createObjectURL(blob));\n                \n                const timeout = setTimeout(() => {\n                    worker.terminate();\n                    reject(new Error('Worker cleanup timeout'));\n                }, 5000); // 5 second timeout\n                \n                worker.onmessage = (e) => {\n                    clearTimeout(timeout);\n                    worker.terminate();\n                    URL.revokeObjectURL(blob);\n                    \n                    if (e.data.success) {\n                        resolve(e.data);\n                    } else {\n                        reject(new Error(e.data.error));\n                    }\n                };\n                \n                worker.onerror = (error) => {\n                    clearTimeout(timeout);\n                    worker.terminate();\n                    URL.revokeObjectURL(blob);\n                    reject(error);\n                };\n                \n                worker.postMessage(cleanupData);\n            });\n        }\n\n        /**\n         * Cleanup in main thread with async batching\n         */\n        async _cleanupInMainThread(cleanupData) {\n            const { type, data } = cleanupData;\n            \n            switch (type) {\n                case 'cleanup_arrays':\n                    // Process in batches to avoid blocking\n                    let processed = 0;\n                    const batchSize = 100;\n                    \n                    while (processed < data.count) {\n                        const batchEnd = Math.min(processed + batchSize, data.count);\n                        \n                        // Process batch\n                        for (let i = processed; i < batchEnd; i++) {\n                            // Simulate cleanup work\n                        }\n                        \n                        processed = batchEnd;\n                        \n                        // Yield control to prevent UI blocking\n                        await this._asyncSleep(1);\n                    }\n                    \n                    return { success: true, processed };\n                    \n                case 'cleanup_objects':\n                    // Clean objects in batches\n                    const objects = data.objects || [];\n                    const batches = [];\n                    \n                    for (let i = 0; i < objects.length; i += 50) {\n                        batches.push(objects.slice(i, i + 50));\n                    }\n                    \n                    let cleaned = 0;\n                    for (const batch of batches) {\n                        batch.forEach(() => cleaned++);\n                        await this._asyncSleep(1);\n                    }\n                    \n                    return { success: true, cleaned };\n                    \n                default:\n                    return { success: true, message: 'Unknown cleanup type' };\n            }\n        }\n        \n    /**\n     *   Enhanced mutex system initialization with atomic protection\n     */\n    _initializeMutexSystem() {\n        //   Initialize standard mutexes with enhanced state tracking\n        this._keyOperationMutex = {\n            locked: false,\n            queue: [],\n            lockId: null,\n            lockTimeout: null,\n            lockTime: null,\n            operationCount: 0\n        };\n\n        this._cryptoOperationMutex = {\n            locked: false,\n            queue: [],\n            lockId: null,\n            lockTimeout: null,\n            lockTime: null,\n            operationCount: 0\n        };\n\n        this._connectionOperationMutex = {\n            locked: false,\n            queue: [],\n            lockId: null,\n            lockTimeout: null,\n            lockTime: null,\n            operationCount: 0\n        };\n\n        //   Enhanced key system state with atomic operation tracking\n        this._keySystemState = {\n            isInitializing: false,\n            isRotating: false,\n            isDestroying: false,\n            lastOperation: null,\n            lastOperationTime: Date.now(),\n            operationId: null,\n            concurrentOperations: 0,\n            maxConcurrentOperations: 1\n        };\n\n        //   Operation counters with atomic increments\n        this._operationCounters = {\n            keyOperations: 0,\n            cryptoOperations: 0,\n            connectionOperations: 0,\n            totalOperations: 0,\n            failedOperations: 0\n        };\n\n        this._secureLog('info', '\uD83D\uDD12 Enhanced mutex system initialized with atomic protection', {\n            mutexes: ['keyOperation', 'cryptoOperation', 'connectionOperation'],\n            timestamp: Date.now(),\n            features: ['atomic_operations', 'race_condition_protection', 'enhanced_state_tracking']\n        });\n    }\n\n    /**\n     *   XSS Hardening - Debug mode references validation\n     * This method is called during initialization to ensure XSS hardening\n     */\n    _hardenDebugModeReferences() {\n        //   Log that we're hardening debug mode references\n        this._secureLog('info', '\uD83D\uDD12 XSS Hardening: Debug mode references already replaced');\n    }\n\n    /**\n     *   Unified scheduler for all maintenance tasks\n     * Replaces multiple setInterval calls with a single, controlled scheduler\n     */\n    _initializeUnifiedScheduler() {\n        //   Single scheduler interval for all maintenance tasks\n        this._maintenanceScheduler = setInterval(() => {\n            this._executeMaintenanceCycle();\n        }, 300000); // Every 5 minutes\n        \n        //   Log scheduler initialization\n        this._secureLog('info', '\uD83D\uDD27 Unified maintenance scheduler initialized (5-minute cycle)');\n        \n        //   Store scheduler reference for cleanup\n        this._activeTimers = new Set([this._maintenanceScheduler]);\n    }\n\n    _trackActiveTimer(timer) {\n        if (!timer) return timer;\n        if (!this._activeTimers) this._activeTimers = new Set();\n        this._activeTimers.add(timer);\n        return timer;\n    }\n\n    _untrackActiveTimer(timer) {\n        if (timer && this._activeTimers) this._activeTimers.delete(timer);\n    }\n\n    _setSASMaterialReady(localFingerprint, remoteFingerprint) {\n        this._sasLocalFingerprint = localFingerprint;\n        this._sasRemoteFingerprint = remoteFingerprint;\n    }\n\n    _isVerificationReady() {\n        const hasDescriptions = !!(\n            this.peerConnection?.localDescription &&\n            this.peerConnection?.remoteDescription\n        );\n        const hasOpenDataChannel = this.dataChannel?.readyState === 'open';\n        const hasVerificationCode = typeof this.verificationCode === 'string' &&\n            this.verificationCode.trim().length > 0;\n        const hasFingerprintMaterial = typeof this._sasLocalFingerprint === 'string' &&\n            this._sasLocalFingerprint.trim().length > 0 &&\n            typeof this._sasRemoteFingerprint === 'string' &&\n            this._sasRemoteFingerprint.trim().length > 0;\n\n        return hasDescriptions && hasOpenDataChannel && hasVerificationCode && hasFingerprintMaterial;\n    }\n\n    _notifyVerificationReadyIfPossible() {\n        if (!this._isVerificationReady()) {\n            return false;\n        }\n\n        if (!this._verificationUiOpened) {\n            this._verificationUiOpened = true;\n            this.onStatusChange?.('verifying');\n            this.onVerificationRequired?.(this.verificationCode);\n        }\n\n        return true;\n    }\n\n    _countIceCandidatesInSDP(sdp) {\n        if (typeof sdp !== 'string') return 0;\n        return (sdp.match(/^a=candidate:/gm) || []).length;\n    }\n\n    _summarizeIceCandidatesInSDP(sdp) {\n        const summary = {\n            total: 0,\n            host: 0,\n            srflx: 0,\n            relay: 0,\n            prflx: 0,\n            unknown: 0\n        };\n\n        if (typeof sdp !== 'string') return summary;\n\n        for (const line of sdp.match(/^a=candidate:.*$/gm) || []) {\n            summary.total += 1;\n            const match = line.match(/\\btyp\\s+(host|srflx|relay|prflx)\\b/i);\n            const type = match?.[1]?.toLowerCase();\n\n            if (type && Object.prototype.hasOwnProperty.call(summary, type)) {\n                summary[type] += 1;\n            } else {\n                summary.unknown += 1;\n            }\n        }\n\n        return summary;\n    }\n\n    _describeIceCandidatesInSDP(sdp) {\n        if (typeof sdp !== 'string') return [];\n\n        return (sdp.match(/^a=candidate:.*$/gm) || []).map((line) => {\n            const parts = line.slice('a=candidate:'.length).trim().split(/\\s+/);\n            const typIndex = parts.findIndex(part => part.toLowerCase() === 'typ');\n            const address = parts[4] || '';\n            const port = parts[5] || '';\n            const candidateType = typIndex >= 0 ? parts[typIndex + 1] || 'unknown' : 'unknown';\n            const protocol = (parts[2] || 'unknown').toLowerCase();\n\n            let addressKind = 'unknown';\n            if (/\\.local$/i.test(address)) {\n                addressKind = 'mdns';\n            } else if (/^(10\\.|192\\.168\\.|172\\.(1[6-9]|2\\d|3[0-1])\\.)/.test(address)) {\n                addressKind = 'private-ipv4';\n            } else if (/^\\d{1,3}(\\.\\d{1,3}){3}$/.test(address)) {\n                addressKind = 'public-ipv4';\n            } else if (address.includes(':')) {\n                addressKind = 'ipv6';\n            }\n\n            return {\n                candidateType,\n                protocol,\n                addressKind,\n                portPresent: !!port,\n                tcpType: (() => {\n                    const tcpIndex = parts.findIndex(part => part.toLowerCase() === 'tcptype');\n                    return tcpIndex >= 0 ? parts[tcpIndex + 1] || null : null;\n                })()\n            };\n        });\n    }\n\n    _logIceCandidateDiagnostics(label, sdp, extra = {}) {\n        const candidateSummary = this._summarizeIceCandidatesInSDP(sdp);\n        const candidateDetails = this._describeIceCandidatesInSDP(sdp);\n        console.info(`[SecureBit ICE] ${label}`, {\n            candidateSummary,\n            candidateDetails,\n            candidateDetailsJson: JSON.stringify(candidateDetails),\n            ...extra\n        });\n        return { candidateSummary, candidateDetails };\n    }\n\n    _hasOnlyMdnsHostCandidates(sdp) {\n        const summary = this._summarizeIceCandidatesInSDP(sdp);\n        const details = this._describeIceCandidatesInSDP(sdp);\n\n        return summary.total > 0 &&\n            summary.srflx === 0 &&\n            summary.relay === 0 &&\n            summary.prflx === 0 &&\n            details.every(candidate =>\n                candidate.candidateType === 'host' &&\n                candidate.addressKind === 'mdns'\n            );\n    }\n\n    _warnIfRemoteCandidatesNeedRelay(context, sdp) {\n        if (!this._hasOnlyMdnsHostCandidates(sdp)) return false;\n\n        const message = context === 'answer'\n            ? 'Connection warning: the response contains only browser-masked mDNS host candidates and no server-reflexive or TURN relay candidates. This network/browser combination may not connect until TURN is configured.'\n            : 'Connection warning: the invitation contains only browser-masked mDNS host candidates and no server-reflexive or TURN relay candidates. This network/browser combination may not connect until TURN is configured.';\n\n        this._secureLog('warn', 'Remote ICE candidates require TURN or usable non-mDNS candidates', {\n            context,\n            candidateSummary: this._summarizeIceCandidatesInSDP(sdp),\n            candidateDetails: this._describeIceCandidatesInSDP(sdp)\n        });\n        this.deliverMessageToUI(message, 'system');\n        return true;\n    }\n\n    async _collectIceFailureDiagnostics() {\n        if (!this.peerConnection?.getStats) return null;\n\n        try {\n            const stats = await this.peerConnection.getStats();\n            const candidates = new Map();\n            const candidatePairs = [];\n\n            stats.forEach((report) => {\n                if (report.type === 'local-candidate' || report.type === 'remote-candidate') {\n                    candidates.set(report.id, {\n                        type: report.type,\n                        candidateType: report.candidateType,\n                        protocol: report.protocol,\n                        address: report.address || report.ip || null,\n                        port: report.port || null,\n                        networkType: report.networkType || null\n                    });\n                }\n            });\n\n            stats.forEach((report) => {\n                if (report.type !== 'candidate-pair') return;\n                candidatePairs.push({\n                    state: report.state,\n                    nominated: !!report.nominated,\n                    writable: !!report.writable,\n                    bytesSent: report.bytesSent || 0,\n                    bytesReceived: report.bytesReceived || 0,\n                    currentRoundTripTime: report.currentRoundTripTime ?? null,\n                    local: candidates.get(report.localCandidateId) || null,\n                    remote: candidates.get(report.remoteCandidateId) || null\n                });\n            });\n\n            return {\n                pairCount: candidatePairs.length,\n                states: candidatePairs.reduce((acc, pair) => {\n                    acc[pair.state || 'unknown'] = (acc[pair.state || 'unknown'] || 0) + 1;\n                    return acc;\n                }, {}),\n                pairs: candidatePairs\n            };\n        } catch (error) {\n            return {\n                error: error?.message || 'Failed to collect ICE diagnostics'\n            };\n        }\n    }\n\n    _storePendingOfferContext() {\n        this._pendingOfferContext = {\n            sessionSalt: Array.isArray(this.sessionSalt) ? [...this.sessionSalt] : null,\n            sessionId: this.sessionId || null,\n            connectionId: this.connectionId || null,\n            keyFingerprint: this.keyFingerprint || null,\n            createdAt: Date.now()\n        };\n    }\n\n    _restorePendingOfferContextIfNeeded() {\n        const saltIsValid = Array.isArray(this.sessionSalt) && this.sessionSalt.length === 64;\n        if (saltIsValid) return true;\n\n        const pendingSalt = this._pendingOfferContext?.sessionSalt;\n        if (!Array.isArray(pendingSalt) || pendingSalt.length !== 64) {\n            return false;\n        }\n\n        this.sessionSalt = [...pendingSalt];\n        if (!this.sessionId && this._pendingOfferContext.sessionId) {\n            this.sessionId = this._pendingOfferContext.sessionId;\n        }\n        if (!this.connectionId && this._pendingOfferContext.connectionId) {\n            this.connectionId = this._pendingOfferContext.connectionId;\n        }\n        if (!this.keyFingerprint && this._pendingOfferContext.keyFingerprint) {\n            this.keyFingerprint = this._pendingOfferContext.keyFingerprint;\n        }\n\n        this._secureLog('warn', 'Restored pending offer context before applying answer', {\n            pendingContextAgeMs: Date.now() - (this._pendingOfferContext.createdAt || Date.now())\n        });\n\n        return true;\n    }\n\n    _clearPendingOfferContext() {\n        if (this._pendingOfferContext?.sessionSalt) {\n            this._secureWipeMemory(this._pendingOfferContext.sessionSalt, 'pendingOfferContext.sessionSalt');\n        }\n        this._pendingOfferContext = null;\n    }\n\n    /**\n     *   Execute all maintenance tasks in a single cycle\n     */\n    _executeMaintenanceCycle() {\n        try {\n            this._secureLog('info', '\uD83D\uDD27 Starting maintenance cycle');\n            \n            // 1. Log cleanup and security audit\n            this._cleanupLogs();\n            this._auditLoggingSystemSecurity();\n            \n            // 2. Security monitoring\n            this._verifyAPIIntegrity();\n            this._validateCryptographicSecurity();\n            this._syncSecurityFeaturesWithTariff();\n            \n            // 3. Resource cleanup\n            this._cleanupResources();\n            this._enforceResourceLimits();\n            \n            // 4. Key monitoring (if connected)\n            if (this.isConnected && this.isVerified) {\n                this._monitorKeySecurity();\n            }\n            \n            // 5. Global exposure monitoring (debug mode only)\n            if (this._debugMode) {\n                this._monitorGlobalExposure();\n            }\n            \n            // 6. Heartbeat now runs on its own HEARTBEAT_INTERVAL timer\n            //    (startHeartbeat) \u2014 this 5-minute cycle is far too coarse for\n            //    liveness detection and must not double-send.\n\n            this._secureLog('info', '\uD83D\uDD27 Maintenance cycle completed successfully');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Maintenance cycle failed', {\n                errorType: error?.constructor?.name || 'Unknown',\n                message: error?.message || 'Unknown error'\n            });\n            \n            //   Emergency cleanup on failure\n            this._emergencyCleanup().catch(error => {\n                this._secureLog('error', 'Emergency cleanup failed', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n        }\n    }\n\n    /**\n     *   Enforce hard resource limits with emergency cleanup\n     */\n    _enforceResourceLimits() {\n        const violations = [];\n        \n        // Check log entries\n        if (this._logCounts.size > this._resourceLimits.maxLogEntries) {\n            violations.push('log_entries');\n        }\n        \n        // Check message queue\n        if (this.messageQueue.length > this._resourceLimits.maxMessageQueue) {\n            violations.push('message_queue');\n        }\n        \n        // Check IV history\n        if (this._ivTrackingSystem && this._ivTrackingSystem.ivHistory.size > this._resourceLimits.maxIVHistory) {\n            violations.push('iv_history');\n        }\n        \n        // Check processed message IDs\n        if (this.processedMessageIds.size > this._resourceLimits.maxProcessedMessageIds) {\n            violations.push('processed_message_ids');\n        }\n        \n        // Check decoy channels\n        if (this.decoyChannels.size > this._resourceLimits.maxDecoyChannels) {\n            violations.push('decoy_channels');\n        }\n        \n        // Check fake traffic messages\n        if (this._fakeTrafficMessages && this._fakeTrafficMessages.length > this._resourceLimits.maxFakeTrafficMessages) {\n            violations.push('fake_traffic_messages');\n        }\n        \n        // Check chunk queue\n        if (this.chunkQueue.length > this._resourceLimits.maxChunkQueue) {\n            violations.push('chunk_queue');\n        }\n        \n        // Check packet buffer\n        if (this.packetBuffer && this.packetBuffer.size > this._resourceLimits.maxPacketBuffer) {\n            violations.push('packet_buffer');\n        }\n        \n        // If violations detected, trigger emergency cleanup\n        if (violations.length > 0) {\n            this._secureLog('warn', '\u26A0\uFE0F Resource limit violations detected', { violations });\n            this._emergencyCleanup().catch(error => {\n                this._secureLog('error', 'Emergency cleanup failed', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n        }\n    }\n\n    /**\n     *   Emergency cleanup when resource limits are exceeded\n     */\n    async _emergencyCleanup() {\n        this._secureLog('warn', '\uD83D\uDEA8 EMERGENCY: Resource limits exceeded, performing emergency cleanup');\n        \n        try {\n            // 1. Clear all logs immediately\n            this._logCounts.clear();\n            this._secureLog('info', '\uD83E\uDDF9 Emergency: All logs cleared');\n            \n            // 2. Clear message queue\n            this.messageQueue.length = 0;\n            this._secureLog('info', '\uD83E\uDDF9 Emergency: Message queue cleared');\n            \n            // 3. Enhanced IV history cleanup\n            if (this._ivTrackingSystem) {\n                this._ivTrackingSystem.usedIVs.clear();\n                this._ivTrackingSystem.ivHistory.clear();\n                this._ivTrackingSystem.sessionIVs.clear();\n                this._ivTrackingSystem.collisionCount = 0;\n                this._ivTrackingSystem.emergencyMode = false;\n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: IV tracking system cleared');\n            }\n            \n            // 4. Clear processed message IDs\n            this.processedMessageIds.clear();\n            this._secureLog('info', '\uD83E\uDDF9 Emergency: Processed message IDs cleared');\n            \n            // 5. Enhanced decoy channels cleanup\n            if (this.decoyChannels) {\n                for (const [channelName, timer] of this.decoyTimers) {\n                    if (timer) clearTimeout(timer);\n                }\n                this.decoyChannels.clear();\n                this.decoyTimers.clear();\n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: Decoy channels cleared');\n            }\n            \n            // 6. Enhanced fake traffic cleanup\n            if (this.fakeTrafficTimer) {\n                clearTimeout(this.fakeTrafficTimer);\n                this.fakeTrafficTimer = null;\n            }\n            if (this._fakeTrafficMessages) {\n                this._fakeTrafficMessages.length = 0;\n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: Fake traffic messages cleared');\n            }\n            \n            // 7. Clear chunk queue\n            this.chunkQueue.length = 0;\n            this._secureLog('info', '\uD83E\uDDF9 Emergency: Chunk queue cleared');\n            \n            // 8. Clear packet buffer\n            if (this.packetBuffer) {\n                this.packetBuffer.clear();\n                this._secureLog('info', '\uD83E\uDDF9 Emergency: Packet buffer cleared');\n            }\n            \n            // 9. Enhanced memory cleanup with quantum-resistant patterns\n            this._secureMemoryManager.isCleaning = true;\n            this._secureMemoryManager.cleanupQueue.length = 0;\n            this._secureMemoryManager.memoryStats.lastCleanup = Date.now();\n            \n            //   Perform natural cleanup without forcing GC\n            await this._scheduleAsyncCleanup(async () => {\n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: Starting natural memory cleanup');\n                \n                // Natural cleanup cycles with async delays\n                for (let i = 0; i < 3; i++) {\n                    this._secureLog('info', `\uD83E\uDDF9 Enhanced Emergency: Cleanup cycle ${i + 1}/3`);\n                    \n                    // Allow natural garbage collection between cycles\n                    await this._performNaturalCleanup();\n                }\n                \n                this._secureLog('info', '\uD83E\uDDF9 Enhanced Emergency: Natural cleanup completed');\n            }, 0);\n            \n            this._secureMemoryManager.isCleaning = false;\n            \n            this._secureLog('info', '\u2705 Enhanced emergency cleanup completed successfully');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Enhanced emergency cleanup failed', {\n                errorType: error?.constructor?.name || 'Unknown',\n                message: error?.message || 'Unknown error'\n            });\n            \n            //   Rollback mechanism (simplified)\n            this._secureMemoryManager.isCleaning = false;\n        }\n    }\n\n    /**\n     *   Validate emergency cleanup success\n     * @param {Object} originalState - Original state before cleanup\n     * @returns {Object} Validation results\n     */\n    _validateEmergencyCleanup(originalState) {\n        const currentState = {\n            messageQueueSize: this.messageQueue.length,\n            processedIdsSize: this.processedMessageIds.size,\n            packetBufferSize: this.packetBuffer ? this.packetBuffer.size : 0,\n            ivTrackingSize: this._ivTrackingSystem ? this._ivTrackingSystem.usedIVs.size : 0,\n            decoyChannelsSize: this.decoyChannels ? this.decoyChannels.size : 0\n        };\n        \n        const validation = {\n            messageQueueCleared: currentState.messageQueueSize === 0,\n            processedIdsCleared: currentState.processedIdsSize === 0,\n            packetBufferCleared: currentState.packetBufferSize === 0,\n            ivTrackingCleared: currentState.ivTrackingSize === 0,\n            decoyChannelsCleared: currentState.decoyChannelsSize === 0,\n            allCleared: (\n                currentState.messageQueueSize === 0 &&\n                currentState.processedIdsSize === 0 &&\n                currentState.packetBufferSize === 0 &&\n                currentState.ivTrackingSize === 0 &&\n                currentState.decoyChannelsSize === 0\n            )\n        };\n        \n        return validation;\n    }\n\n    /**\n     *   Cleanup resources based on age and usage\n     */\n    _cleanupResources() {\n        const now = Date.now();\n        \n        // Clean old processed message IDs (keep only last hour)\n        if (this.processedMessageIds.size > this._emergencyThresholds.processedMessageIds) {\n            this.processedMessageIds.clear();\n            this._secureLog('info', '\uD83E\uDDF9 Old processed message IDs cleared');\n        }\n        \n        // Clean old IVs\n        if (this._ivTrackingSystem) {\n            this._cleanupOldIVs();\n        }\n        \n        // Clean old keys\n        this.cleanupOldKeys();\n        \n        // Clean rate limiter\n        if (window.EnhancedSecureCryptoUtils && window.EnhancedSecureCryptoUtils.rateLimiter) {\n            window.EnhancedSecureCryptoUtils.rateLimiter.cleanup();\n        }\n        \n        this._secureLog('info', '\uD83E\uDDF9 Resource cleanup completed');\n    }\n\n    /**\n     *   Monitor key security (replaces _startKeySecurityMonitoring)\n     */\n    _monitorKeySecurity() {\n        if (this._keyStorageStats.activeKeys > 10) {\n            this._secureLog('warn', '\u26A0\uFE0F High number of active keys detected. Consider rotation.');\n        }\n        \n    }\n\n    /**\n     *   Send heartbeat message (called by unified scheduler)\n     */\n    /**\n     * @param {boolean} ack - true when replying to a peer's probe. An ack is never\n     *   itself acked, otherwise the two sides would ping-pong forever.\n     */\n    _sendHeartbeat(ack = false) {\n        try {\n            // Gated on the CHANNEL only, deliberately not on isConnected(), which\n            // also requires isVerified. The two peers finish SAS verification at\n            // different moments \u2014 a human has to read and confirm a code \u2014 so for\n            // that whole window one side is verified and probing while the other\n            // cannot answer. Silence then reads as a dead path on a perfectly\n            // healthy, freshly established session, and the restarts that follow\n            // tear it down for real. A heartbeat carries nothing: it travels as\n            // plaintext on a channel its observer is already on, and liveness is\n            // not a security property \u2014 the verification gate still guards every\n            // operation that matters.\n            if (this.dataChannel && this.dataChannel.readyState === 'open') {\n                this.dataChannel.send(JSON.stringify({\n                    type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.HEARTBEAT,\n                    ack,\n                    timestamp: Date.now()\n                }));\n\n                this._heartbeatConfig.lastHeartbeat = Date.now();\n                this._secureLog('debug', ack ? '\uD83D\uDC93 Heartbeat ack sent' : '\uD83D\uDC93 Heartbeat sent');\n                return true;\n            }\n            return false;\n        } catch (error) {\n            this._secureLog('error', '\u274C Heartbeat failed:', {\n                errorType: error?.constructor?.name || 'Unknown',\n                message: error?.message || 'Unknown error'\n            });\n            return false;\n        }\n    }\n\n    /**\n     *   Comprehensive input validation to prevent DoS and injection attacks\n     * @param {any} data - Data to validate\n     * @param {string} context - Context for validation (e.g., 'sendMessage', 'sendSecureMessage')\n     * @returns {Object} Validation result with isValid and sanitizedData\n     */\n    _validateInputData(data, context = 'unknown') {\n        const validationResult = {\n            isValid: false,\n            sanitizedData: null,\n            errors: [],\n            warnings: []\n        };\n\n        try {\n            // 1. Basic type validation\n            if (data === null || data === undefined) {\n                validationResult.errors.push('Data cannot be null or undefined');\n                return validationResult;\n            }\n\n            // 2. Size validation for strings\n            if (typeof data === 'string') {\n                if (data.length > this._inputValidationLimits.maxStringLength) {\n                    validationResult.errors.push(`String too long: ${data.length} > ${this._inputValidationLimits.maxStringLength}`);\n                    return validationResult;\n                }\n\n                // 3. No keyword/markup blocklist here.\n                // This validates OUTGOING free-text chat content. A word-level\n                // blocklist (e.g. \"constructor\", \"global\", \"document.\", \"javascript:\")\n                // silently rejected legitimate messages while providing no real\n                // protection: the rendering boundary is the receive-side DOMPurify\n                // pass in deliverMessageToUI(), and outgoing text is additionally run\n                // through EnhancedSecureCryptoUtils.sanitizeMessage() before encryption.\n                // Markup a user types is neutralised there, not by guessing keywords.\n\n                // 4. Sanitize string data\n\n                validationResult.sanitizedData = this._sanitizeInputString(data);\n                validationResult.isValid = true;\n                return validationResult;\n            }\n\n            // 5. Object validation\n            if (typeof data === 'object') {\n                // Check for circular references\n                const seen = new WeakSet();\n                const checkCircular = (obj, path = '') => {\n                    if (obj === null || typeof obj !== 'object') return;\n                    \n                    if (seen.has(obj)) {\n                        validationResult.errors.push(`Circular reference detected at path: ${path}`);\n                        return;\n                    }\n                    \n                    seen.add(obj);\n                    \n                    // Check object depth\n                    if (path.split('.').length > this._inputValidationLimits.maxObjectDepth) {\n                        validationResult.errors.push(`Object too deep: ${path.split('.').length} > ${this._inputValidationLimits.maxObjectDepth}`);\n                        return;\n                    }\n\n                    // Check array length\n                    if (Array.isArray(obj) && obj.length > this._inputValidationLimits.maxArrayLength) {\n                        validationResult.errors.push(`Array too long: ${obj.length} > ${this._inputValidationLimits.maxArrayLength}`);\n                        return;\n                    }\n\n                    // Recursively check all properties\n                    for (const key in obj) {\n                        if (obj.hasOwnProperty(key)) {\n                            checkCircular(obj[key], path ? `${path}.${key}` : key);\n                        }\n                    }\n                };\n\n                checkCircular(data);\n                \n                if (validationResult.errors.length > 0) {\n                    return validationResult;\n                }\n\n                // 6. Check total object size\n                const objectSize = this._calculateObjectSize(data);\n                if (objectSize > this._inputValidationLimits.maxMessageSize) {\n                    validationResult.errors.push(`Object too large: ${objectSize} bytes > ${this._inputValidationLimits.maxMessageSize} bytes`);\n                    return validationResult;\n                }\n\n                // 7. Sanitize object data\n                validationResult.sanitizedData = this._sanitizeInputObject(data);\n                validationResult.isValid = true;\n                return validationResult;\n            }\n\n            // 8. ArrayBuffer validation\n            if (data instanceof ArrayBuffer) {\n                if (data.byteLength > this._inputValidationLimits.maxMessageSize) {\n                    validationResult.errors.push(`ArrayBuffer too large: ${data.byteLength} bytes > ${this._inputValidationLimits.maxMessageSize} bytes`);\n                    return validationResult;\n                }\n                \n                validationResult.sanitizedData = data;\n                validationResult.isValid = true;\n                return validationResult;\n            }\n\n            // 9. Other types are not allowed\n            validationResult.errors.push(`Unsupported data type: ${typeof data}`);\n            return validationResult;\n\n        } catch (error) {\n            validationResult.errors.push(`Validation error: ${error.message}`);\n            this._secureLog('error', '\u274C Input validation failed', {\n                context: context,\n                errorType: error?.constructor?.name || 'Unknown',\n                message: error?.message || 'Unknown error'\n            });\n            return validationResult;\n        }\n    }\n\n    /**\n     *   Calculate approximate object size in bytes\n     * @param {any} obj - Object to calculate size for\n     * @returns {number} Size in bytes\n     */\n    _calculateObjectSize(obj) {\n        try {\n            const jsonString = JSON.stringify(obj);\n            return new TextEncoder().encode(jsonString).length;\n        } catch (error) {\n            // If JSON.stringify fails, estimate size\n            return 1024 * 1024; // Assume 1MB to be safe\n        }\n    }\n\n    /**\n     *   Sanitize string data for input validation\n     * @param {string} str - String to sanitize\n     * @returns {string} Sanitized string\n     */\n    _sanitizeInputString(str) {\n        if (typeof str !== 'string') return str;\n\n        // Remove null bytes and C0/C1 control characters, but preserve the\n        // whitespace users actually type: newline (\\n), carriage return (\\r)\n        // and tab (\\t). Collapsing all \\s+ here destroyed multi-line messages\n        // and code snippets (\"a\\nb\\nc\" -> \"a b c\"), corrupting chat content.\n        str = str.replace(/[\\u0000-\\u0008\\u000B\\u000C\\u000E-\\u001F\\u007F-\\u009F]/g, '');\n\n        // Normalise line endings only. Internal spaces/tabs are preserved so\n        // code indentation, pasted keys and aligned text survive intact; the\n        // maxStringLength limit (and the receive-side 2000-char cap) bound abuse.\n        str = str.replace(/\\r\\n?/g, '\\n');\n\n        // Collapse 3+ consecutive blank lines down to two.\n        str = str.replace(/\\n{3,}/g, '\\n\\n');\n\n        // Trim leading/trailing whitespace only.\n        str = str.trim();\n\n        return str;\n    }\n\n    /**\n     *   Sanitize object data for input validation\n     * @param {any} obj - Object to sanitize\n     * @returns {any} Sanitized object\n     */\n    _sanitizeInputObject(obj) {\n        if (obj === null || typeof obj !== 'object') return obj;\n        \n        if (Array.isArray(obj)) {\n            return obj.map(item => this._sanitizeInputObject(item));\n        }\n        \n        const sanitized = {};\n        for (const key in obj) {\n            if (obj.hasOwnProperty(key)) {\n                const value = obj[key];\n                if (typeof value === 'string') {\n                    sanitized[key] = this._sanitizeInputString(value);\n                } else if (typeof value === 'object') {\n                    sanitized[key] = this._sanitizeInputObject(value);\n                } else {\n                    sanitized[key] = value;\n                }\n            }\n        }\n        \n        return sanitized;\n    }\n\n    /**\n     *   Rate limiting for message sending\n     * @param {string} context - Context for rate limiting\n     * @returns {boolean} true if rate limit allows\n     */\n    _checkRateLimit(context = 'message') {\n        const now = Date.now();\n        \n        // Initialize rate limiter if not exists\n        if (!this._rateLimiter) {\n            this._rateLimiter = {\n                messageCount: 0,\n                lastReset: now,\n                burstCount: 0,\n                lastBurstReset: now\n            };\n        }\n        \n        // Reset counters if needed\n        if (now - this._rateLimiter.lastReset > 60000) { // 1 minute\n            this._rateLimiter.messageCount = 0;\n            this._rateLimiter.lastReset = now;\n        }\n        \n        if (now - this._rateLimiter.lastBurstReset > 1000) { // 1 second\n            this._rateLimiter.burstCount = 0;\n            this._rateLimiter.lastBurstReset = now;\n        }\n        \n        // Check burst limit\n        if (this._rateLimiter.burstCount >= this._inputValidationLimits.rateLimitBurstSize) {\n            this._secureLog('warn', '\u26A0\uFE0F Rate limit burst exceeded', { context });\n            return false;\n        }\n        \n        // Check overall rate limit\n        if (this._rateLimiter.messageCount >= this._inputValidationLimits.rateLimitMessagesPerMinute) {\n            this._secureLog('warn', '\u26A0\uFE0F Rate limit exceeded', { context });\n            return false;\n        }\n        \n        // Increment counters\n        this._rateLimiter.messageCount++;\n        this._rateLimiter.burstCount++;\n        \n        return true;\n    }\n\n    /**\n     * Dedicated receiver-side limiter. Keep separate from outbound quotas so a\n     * noisy peer cannot consume local send capacity or force decrypt/render work.\n     */\n    _checkInboundRateLimit(context = 'incoming_message') {\n        const now = Date.now();\n\n        if (!this._inboundRateLimiter) {\n            this._inboundRateLimiter = {\n                messageCount: 0,\n                lastReset: now,\n                burstCount: 0,\n                lastBurstReset: now\n            };\n        }\n\n        if (now - this._inboundRateLimiter.lastReset > 60000) {\n            this._inboundRateLimiter.messageCount = 0;\n            this._inboundRateLimiter.lastReset = now;\n        }\n\n        if (now - this._inboundRateLimiter.lastBurstReset > 1000) {\n            this._inboundRateLimiter.burstCount = 0;\n            this._inboundRateLimiter.lastBurstReset = now;\n        }\n\n        if (this._inboundRateLimiter.burstCount >= this._inputValidationLimits.rateLimitBurstSize) {\n            this._secureLog('warn', '\u26A0\uFE0F Inbound message burst limit exceeded; dropping message', { context });\n            return false;\n        }\n\n        if (this._inboundRateLimiter.messageCount >= this._inputValidationLimits.rateLimitMessagesPerMinute) {\n            this._secureLog('warn', '\u26A0\uFE0F Inbound message rate limit exceeded; dropping message', { context });\n            return false;\n        }\n\n        this._inboundRateLimiter.messageCount++;\n        this._inboundRateLimiter.burstCount++;\n        return true;\n    }\n\n    // ============================================\n    // SECURE KEY STORAGE MANAGEMENT\n    // ============================================\n\n    /**\n     * Initializes the secure key storage\n     */\n    _initializeSecureKeyStorage() {\n        // Initialize master key manager\n        this._masterKeyManager = new SecureMasterKeyManager();\n        \n        // Initialize with the new class and pass master key manager\n        this._secureKeyStorage = new SecureKeyStorage(this._masterKeyManager);\n        \n        // Keep the stats structure for compatibility\n        this._keyStorageStats = {\n            totalKeys: 0,\n            activeKeys: 0,\n            lastAccess: null,\n            lastRotation: null,\n        };\n        \n        this._secureLog('info', '\uD83D\uDD10 Enhanced secure key storage initialized');\n    }\n    \n    /**\n     * Set password callback for master key\n     */\n    setMasterKeyPasswordCallback(callback) {\n        if (this._masterKeyManager) {\n            this._masterKeyManager.setPasswordRequiredCallback(callback);\n        }\n    }\n    \n    /**\n     * Set session expired callback for master key\n     */\n    setMasterKeySessionExpiredCallback(callback) {\n        if (this._masterKeyManager) {\n            this._masterKeyManager.setSessionExpiredCallback(callback);\n        }\n    }\n    \n    /**\n     * Lock master key manually\n     */\n    lockMasterKey() {\n        if (this._masterKeyManager) {\n            this._masterKeyManager.lock();\n        }\n    }\n    \n    /**\n     * Check if master key is unlocked\n     */\n    isMasterKeyUnlocked() {\n        return this._masterKeyManager ? this._masterKeyManager.isUnlocked() : false;\n    }\n    \n    /**\n     * Get master key session status\n     */\n    getMasterKeySessionStatus() {\n        return this._masterKeyManager ? this._masterKeyManager.getSessionStatus() : null;\n    }\n\n    // Helper: ensure file transfer system is ready (lazy init on receiver)\n    async _ensureFileTransferReady() {\n        try {\n            // If already initialized \u2014 done\n            if (this.fileTransferSystem) {\n                return true;\n            }\n            // Requires an open data channel and a verified connection\n            if (!this.dataChannel || this.dataChannel.readyState !== 'open') {\n                throw new Error('Data channel not open');\n            }\n            if (!this.isVerified) {\n                throw new Error('Connection not verified');\n            }\n            // Initialization\n            this.initializeFileTransfer();\n            \n            // \u041A\u0420\u0418\u0422\u0418\u0427\u0415\u0421\u041A\u041E\u0415 \u0418\u0421\u041F\u0420\u0410\u0412\u041B\u0415\u041D\u0418\u0415: \u0416\u0434\u0435\u043C \u0438\u043D\u0438\u0446\u0438\u0430\u043B\u0438\u0437\u0430\u0446\u0438\u0438 \u0441 \u0442\u0430\u0439\u043C\u0430\u0443\u0442\u043E\u043C\n            let attempts = 0;\n            const maxAttempts = 50; // 5 \u0441\u0435\u043A\u0443\u043D\u0434 \u043C\u0430\u043A\u0441\u0438\u043C\u0443\u043C\n            while (!this.fileTransferSystem && attempts < maxAttempts) {\n                await new Promise(r => setTimeout(r, 100));\n                attempts++;\n            }\n            \n            if (!this.fileTransferSystem) {\n                throw new Error('File transfer system initialization timeout');\n            }\n            \n            return true;\n        } catch (e) {\n            this._secureLog('error', '\u274C _ensureFileTransferReady failed', { \n                errorType: e?.constructor?.name || 'Unknown',\n                hasMessage: !!e?.message \n            });\n            return false;\n        }\n    }\n\n    _getSecureKey(keyId) {\n        return this._secureKeyStorage.retrieveKey(keyId);\n    }\n\n    async _setSecureKey(keyId, key) {\n        if (!(key instanceof CryptoKey)) {\n            this._secureLog('error', '\u274C Attempt to store non-CryptoKey');\n            return false;\n        }\n        \n        const success = await this._secureKeyStorage.storeKey(keyId, key, {\n            version: this.currentKeyVersion,\n            type: key.algorithm.name\n        });\n        \n        if (success) {\n            this._secureLog('info', `\uD83D\uDD11 Key ${keyId} stored securely with encryption`);\n        }\n        \n        return success;\n    }\n\n    /**\n     * Validates a key value\n     * @param {CryptoKey} key - Key to validate\n     * @returns {boolean} true if the key is valid\n     */\n    _validateKeyValue(key) {\n        return key instanceof CryptoKey &&\n            key.algorithm &&\n            key.usages &&\n            key.usages.length > 0;\n    }\n\n    _secureWipeKeys() {\n        this._secureKeyStorage.secureWipeAll();\n        \n        // Also lock the master key\n        if (this._masterKeyManager) {\n            this._masterKeyManager.lock();\n        }\n        \n        this._secureLog('info', '\uD83E\uDDF9 All keys securely wiped and encrypted storage cleared');\n    }\n\n    /**\n     * Validates key storage state\n     * @returns {boolean} true if the storage is ready\n     */\n    _validateKeyStorage() {\n        return this._secureKeyStorage instanceof SecureKeyStorage;\n    }\n\n    /**\n     * Returns secure key storage statistics\n     * @returns {object} Storage metrics\n     */\n    _getKeyStorageStats() {\n        const stats = this._secureKeyStorage.getStorageStats();\n        return {\n            totalKeysCount: stats.totalKeys,\n            activeKeysCount: stats.totalKeys,\n            hasLastAccess: stats.metadata.some(m => m.lastAccessed),\n            hasLastRotation: !!this._keyStorageStats.lastRotation,\n            storageType: 'SecureKeyStorage',\n            timestamp: Date.now()\n        };\n    }\n\n    /**\n     * Performs key rotation in storage\n     */\n    _rotateKeys() {\n        const oldKeys = Array.from(this._secureKeyStorage.keys());\n        this._secureKeyStorage.clear();\n        this._keyStorageStats.lastRotation = Date.now();\n        this._keyStorageStats.activeKeys = 0;\n        this._secureLog('info', `\uD83D\uDD04 Key rotation completed. ${oldKeys.length} keys rotated`);\n    }\n\n    /**\n     * Emergency key wipe (e.g., upon detecting a threat)\n     */\n    _emergencyKeyWipe() {\n        this._secureWipeKeys();\n        this._secureLog('error', '\uD83D\uDEA8 EMERGENCY: All keys wiped due to security threat');\n    }\n\n    /**\n     * Starts key security monitoring\n     * @deprecated Use unified scheduler instead\n     */\n    _startKeySecurityMonitoring() {\n        //   Functionality moved to unified scheduler\n        this._secureLog('info', '\uD83D\uDD27 Key security monitoring moved to unified scheduler');\n    }\n\n\n    // ============================================\n    // HELPER METHODS\n    // ============================================\n    /**\n     *   Constant-time key validation to prevent timing attacks\n     * @param {CryptoKey} key - Key to validate\n     * @returns {boolean} true if key is valid\n     */\n    _validateKeyConstantTime(key) {\n        //   Constant-time validation to prevent timing attacks\n        let isValid = 0;\n        \n        // Check if key is CryptoKey instance (constant-time)\n        try {\n            const isCryptoKey = key instanceof CryptoKey;\n            isValid += isCryptoKey ? 1 : 0;\n        } catch {\n            isValid += 0;\n        }\n        \n        // Check algorithm (constant-time)\n        try {\n            const hasAlgorithm = !!(key && key.algorithm);\n            isValid += hasAlgorithm ? 1 : 0;\n        } catch {\n            isValid += 0;\n        }\n        \n        // Check type (constant-time)\n        try {\n            const hasType = !!(key && key.type);\n            isValid += hasType ? 1 : 0;\n        } catch {\n            isValid += 0;\n        }\n        \n        // Check extractable property (constant-time)\n        try {\n            const hasExtractable = key && key.extractable !== undefined;\n            isValid += hasExtractable ? 1 : 0;\n        } catch {\n            isValid += 0;\n        }\n        \n        // All checks must pass\n        return isValid === 4;\n    }\n\n    /**\n     *   Constant-time key pair validation\n     * @param {Object} keyPair - Key pair to validate\n     * @returns {boolean} true if key pair is valid\n     */\n    _validateKeyPairConstantTime(keyPair) {\n        if (!keyPair || typeof keyPair !== 'object') return false;\n        \n        const privateKeyValid = this._validateKeyConstantTime(keyPair.privateKey);\n        const publicKeyValid = this._validateKeyConstantTime(keyPair.publicKey);\n        \n        // Constant-time AND operation\n        return privateKeyValid && publicKeyValid;\n    }\n\n    /**\n     *   Enhanced secure logging system initialization\n     */\n    _initializeSecureLogging() {\n        // Logging levels\n        this._logLevels = {\n            error: 0,\n            warn: 1, \n            info: 2,\n            debug: 3,\n            trace: 4\n        };\n        \n        //   Ultra-strict levels for production\n        this._currentLogLevel = this._isProductionMode ? \n            this._logLevels.error : // In production, ONLY critical errors\n            this._logLevels.info;   // In development, up to info\n        \n        //   Reduced log limits to prevent data accumulation\n        this._logCounts = new Map();\n        this._maxLogCount = this._isProductionMode ? 5 : 50; // Reduced limits\n        \n        //   Hard resource limits to prevent memory leaks\n        this._resourceLimits = {\n            maxLogEntries: this._isProductionMode ? 100 : 1000,\n            maxMessageQueue: 1000,\n            maxIVHistory: 10000,\n            maxProcessedMessageIds: 5000,\n            maxDecoyChannels: 100,\n            maxFakeTrafficMessages: 500,\n            maxChunkQueue: 200,\n            maxPacketBuffer: 1000\n        };\n        \n        //   Emergency cleanup thresholds\n        this._emergencyThresholds = {\n            logEntries: this._resourceLimits.maxLogEntries * 0.8, // 80%\n            messageQueue: this._resourceLimits.maxMessageQueue * 0.8,\n            ivHistory: this._resourceLimits.maxIVHistory * 0.8,\n            processedMessageIds: this._resourceLimits.maxProcessedMessageIds * 0.8\n        };\n        \n        //   Input validation limits to prevent DoS attacks\n        this._inputValidationLimits = {\n            maxStringLength: 100000, // 100KB for strings\n            maxObjectDepth: 10, // Maximum object nesting depth\n            maxArrayLength: 1000, // Maximum array length\n            maxMessageSize: 1024 * 1024, // 1MB total message size\n            maxConcurrentMessages: 10, // Maximum concurrent message processing\n            rateLimitMessagesPerMinute: 60, // Rate limiting\n            rateLimitBurstSize: 10 // Burst size for rate limiting\n        };\n        \n        // NOTE: A word/markup blocklist for outgoing chat text was removed.\n        // It rejected legitimate messages (plain words like \"constructor\",\n        // \"global\", \"document.\", or the literal text \"javascript:\") without\n        // adding security. XSS is prevented at the rendering boundary by the\n        // receive-side DOMPurify pass (deliverMessageToUI) and by sanitizeMessage()\n        // on the send path before encryption \u2014 not by keyword guessing.\n\n        //   Comprehensive blacklist with all sensitive patterns\n        this._absoluteBlacklist = new Set([\n            // Cryptographic keys\n            'encryptionKey', 'macKey', 'metadataKey', 'privateKey', 'publicKey',\n            'ecdhKeyPair', 'ecdsaKeyPair', 'peerPublicKey', 'nestedEncryptionKey',\n            \n            // Authentication and session data\n            'verificationCode', 'sessionSalt', 'keyFingerprint', 'sessionId',\n            'authChallenge', 'authProof', 'authToken', 'sessionToken',\n            \n            // Credentials and secrets\n            'password', 'token', 'secret', 'credential', 'signature',\n            'apiKey', 'accessKey', 'secretKey', 'privateKey',\n            \n            // Cryptographic materials\n            'hash', 'digest', 'nonce', 'iv', 'cipher', 'seed',\n            'entropy', 'random', 'salt', 'fingerprint',\n            \n            // JWT and session data\n            'jwt', 'bearer', 'refreshToken', 'accessToken',\n            \n            // File transfer sensitive data\n            'fileHash', 'fileSignature', 'transferKey', 'chunkKey'\n        ]);\n\n        //   Minimal whitelist with strict validation\n        this._safeFieldsWhitelist = new Set([\n            // Basic status fields\n            'timestamp', 'type', 'status', 'state', 'level',\n            'isConnected', 'isVerified', 'isInitiator', 'version',\n            \n            // Counters and metrics (safe)\n            'count', 'total', 'active', 'inactive', 'success', 'failure',\n            \n            // Connection states (safe)\n            'readyState', 'connectionState', 'iceConnectionState',\n            \n            // Feature counts (safe)\n            'activeFeaturesCount', 'totalFeatures', 'stage',\n            \n            // Error types (safe)\n            'errorType', 'errorCode', 'phase', 'attempt'\n        ]);\n        \n        //   Initialize security monitoring\n        this._initializeLogSecurityMonitoring();\n        \n        this._secureLog('info', `\uD83D\uDD27 Enhanced secure logging initialized (Production: ${this._isProductionMode})`);\n    }\n\n    /**\n     *   Initialize security monitoring for logging system\n     */\n    _initializeLogSecurityMonitoring() {\n        //   Security monitoring moved to unified scheduler\n        this._logSecurityViolations = 0;\n        this._maxLogSecurityViolations = 3;\n    }\n\n    /**\n     *   Audit logging system security\n     */\n    _auditLoggingSystemSecurity() {\n        let violations = 0;\n        \n        // Check for excessive log counts (potential data leakage)\n        for (const [key, count] of this._logCounts.entries()) {\n            if (count > this._maxLogCount * 2) {\n                violations++;\n                this._originalConsole?.error?.(`\uD83D\uDEA8 LOG SECURITY: Excessive log count detected: ${key}`);\n            }\n        }\n        \n        // Check for blacklisted patterns in recent logs\n        const recentLogs = Array.from(this._logCounts.keys());\n        for (const logKey of recentLogs) {\n            if (this._containsSensitiveContent(logKey)) {\n                violations++;\n                this._originalConsole?.error?.(`\uD83D\uDEA8 LOG SECURITY: Sensitive content in log key: ${logKey}`);\n            }\n        }\n        \n        // Emergency shutdown if too many violations\n        this._logSecurityViolations += violations;\n        if (this._logSecurityViolations >= this._maxLogSecurityViolations) {\n            this._emergencyDisableLogging();\n            this._originalConsole?.error?.('\uD83D\uDEA8 CRITICAL: Logging system disabled due to security violations');\n        }\n    }\n\n    _secureLogShim(...args) {\n        try {\n            // Validate arguments array\n            if (!Array.isArray(args) || args.length === 0) {\n                return;\n            }\n            \n            //   Proper destructuring with fallback\n            const message = args[0];\n            const restArgs = args.slice(1);\n            \n            // Handle different argument patterns\n            if (restArgs.length === 0) {\n                this._secureLog('info', String(message || ''));\n                return;\n            }\n            \n            if (restArgs.length === 1) {\n                this._secureLog('info', String(message || ''), restArgs[0]);\n                return;\n            }\n            \n            //   Proper object structure for multiple args\n            this._secureLog('info', String(message || ''), { \n                additionalArgs: restArgs,\n                argCount: restArgs.length \n            });\n        } catch (error) {\n            //   Better error handling - fallback to original console if available\n            try {\n                if (this._originalConsole?.log) {\n                    this._originalConsole.log(...args);\n                }\n            } catch (fallbackError) {\n                // Silent failure to prevent execution disruption\n            }\n        }\n    }\n\n    /**\n     *   Setup own logger without touching global console\n     */\n    _setupOwnLogger() {\n        //   Create own logger without touching global console\n        this.logger = {\n            log: (message, data) => this._secureLog('info', message, data),\n            info: (message, data) => this._secureLog('info', message, data),\n            warn: (message, data) => this._secureLog('warn', message, data),\n            error: (message, data) => this._secureLog('error', message, data),\n            debug: (message, data) => this._secureLog('debug', message, data)\n        };\n        \n        //   In development, log to console; in production, use secure logging only\n        if (EnhancedSecureWebRTCManager.DEBUG_MODE) {\n            this._secureLog('info', '\uD83D\uDD12 Own logger created - development mode');\n        } else {\n            this._secureLog('info', '\uD83D\uDD12 Own logger created - production mode');\n        }\n    }\n    /**\n     *   Production logging - use own logger with minimal output\n     */\n    _setupProductionLogging() {\n        //   In production, own logger becomes minimal\n        if (this._isProductionMode) {\n            this.logger = {\n                log: () => {}, // No-op in production\n                info: () => {}, // No-op in production\n                warn: (message, data) => this._secureLog('warn', message, data),\n                error: (message, data) => this._secureLog('error', message, data),\n                debug: () => {} // No-op in production\n            };\n            \n            this._secureLog('info', 'Production logging mode activated');\n        }\n    }\n    /**\n     *   Secure logging with enhanced data protection\n     * @param {string} level - Log level (error, warn, info, debug, trace)\n     * @param {string} message - Message\n     * @param {object} data - Optional payload (will be sanitized)\n     */\n    _secureLog(level, message, data = null) {\n        //   Pre-sanitization audit to prevent data leakage\n        if (data && !this._auditLogMessage(message, data)) {\n            //   Log the attempt but block the actual data\n            this._originalConsole?.error?.('SECURITY: Logging blocked due to potential data leakage');\n            return;\n        }\n        \n        // Check log level\n        if (this._logLevels[level] > this._currentLogLevel) {\n            return;\n        }\n        \n        //   Prevent log spam with better key generation\n        const logKey = `${level}:${message.substring(0, 50)}`;\n        const currentCount = this._logCounts.get(logKey) || 0;\n        \n        if (currentCount >= this._maxLogCount) {\n            return;\n        }\n        \n        this._logCounts.set(logKey, currentCount + 1);\n        \n        //   Enhanced sanitization with multiple passes\n        let sanitizedData = null;\n        if (data) {\n            // First pass: basic sanitization\n            sanitizedData = this._sanitizeLogData(data);\n            \n            // Second pass: check if sanitized data still contains sensitive content\n            if (this._containsSensitiveContent(JSON.stringify(sanitizedData))) {\n                this._originalConsole?.error?.('ECURITY: Sanitized data still contains sensitive content - blocking log');\n                return;\n            }\n        }\n        \n        //   Production mode security - only log essential errors\n        if (this._isProductionMode) {\n            if (level === 'error') {\n                //   In production, only log error messages without sensitive data\n                const safeMessage = this._sanitizeString(message);\n                this._originalConsole?.error?.(safeMessage);\n            }\n            //   Block all other log levels in production\n            return;\n        }\n        \n        // Development mode: full logging with sanitized data\n        const logMethod = this._originalConsole?.[level] || this._originalConsole?.log;\n        if (sanitizedData) {\n            logMethod(message, sanitizedData);\n        } else {\n            logMethod(message);\n        }\n    }\n    /**\n     *   Enhanced sanitization for log data with multiple security layers\n     */\n    _sanitizeLogData(data) {\n        //   Pre-check for sensitive content before processing\n        if (typeof data === 'string') {\n            return this._sanitizeString(data);\n        }\n        \n        if (!data || typeof data !== 'object') {\n            return data;\n        }\n        \n        const sanitized = {};\n        \n        for (const [key, value] of Object.entries(data)) {\n            const lowerKey = key.toLowerCase();\n            \n            //   Enhanced blacklist with more comprehensive patterns\n            const blacklistPatterns = [\n                'key', 'secret', 'token', 'password', 'credential', 'auth',\n                'fingerprint', 'salt', 'signature', 'private', 'encryption',\n                'mac', 'metadata', 'session', 'jwt', 'bearer', 'hash',\n                'digest', 'nonce', 'iv', 'cipher', 'seed', 'entropy'\n            ];\n            \n            const isBlacklisted = this._absoluteBlacklist.has(key) || \n                blacklistPatterns.some(pattern => lowerKey.includes(pattern));\n            \n            if (isBlacklisted) {\n                sanitized[key] = '[SENSITIVE_DATA_BLOCKED]';\n                continue;\n            }\n            \n            //   Enhanced whitelist with strict validation\n            if (this._safeFieldsWhitelist.has(key)) {\n                //   Even whitelisted fields get sanitized if they contain sensitive data\n                if (typeof value === 'string') {\n                    sanitized[key] = this._sanitizeString(value);\n                } else {\n                    sanitized[key] = value;\n                }\n                continue;\n            }\n            \n            //   Enhanced type handling with security checks\n            if (typeof value === 'boolean' || typeof value === 'number') {\n                sanitized[key] = value;\n            } else if (typeof value === 'string') {\n                sanitized[key] = this._sanitizeString(value);\n            } else if (value instanceof ArrayBuffer || value instanceof Uint8Array) {\n                //   Don't reveal actual byte lengths for security\n                sanitized[key] = `[${value.constructor.name}(<REDACTED> bytes)]`;\n            } else if (value && typeof value === 'object') {\n                //   Recursive sanitization with depth limit and security check\n                try {\n                    sanitized[key] = this._sanitizeLogData(value);\n                } catch (error) {\n                    sanitized[key] = '[RECURSIVE_SANITIZATION_FAILED]';\n                }\n            } else {\n                sanitized[key] = `[${typeof value}]`;\n            }\n        }\n        \n        //   Final security check on sanitized data\n        const sanitizedString = JSON.stringify(sanitized);\n        if (this._containsSensitiveContent(sanitizedString)) {\n            return { error: 'SANITIZATION_FAILED_SENSITIVE_CONTENT_DETECTED' };\n        }\n        \n        return sanitized;\n    }\n    /**\n     *   Enhanced sanitization for strings with comprehensive pattern detection\n     */\n    _sanitizeString(str) {\n        if (typeof str !== 'string' || str.length === 0) {\n            return str;\n        }\n        \n        //   Comprehensive sensitive pattern detection\n        const sensitivePatterns = [\n            // Hex patterns (various lengths)\n            /[a-f0-9]{16,}/i,                    // 16+ hex chars (covers short keys)\n            /[a-f0-9]{8,}/i,                     // 8+ hex chars (covers shorter keys)\n            \n            // Base64 patterns (comprehensive)\n            /[A-Za-z0-9+/]{16,}={0,2}/,         // Base64 with padding\n            /[A-Za-z0-9+/]{12,}/,               // Base64 without padding\n            /[A-Za-z0-9+/=]{10,}/,              // Base64-like patterns\n            \n            // Base58 patterns (Bitcoin-style)\n            /[1-9A-HJ-NP-Za-km-z]{16,}/,        // Base58 strings\n            \n            // Base32 patterns\n            /[A-Z2-7]{16,}={0,6}/,              // Base32 with padding\n            /[A-Z2-7]{12,}/,                     // Base32 without padding\n            \n            // Custom encoding patterns\n            /[A-Za-z0-9\\-_]{16,}/,              // URL-safe base64 variants\n            /[A-Za-z0-9\\.\\-_]{16,}/,             // JWT-like patterns\n            \n            // Long alphanumeric strings (potential keys)\n            /\\b[A-Za-z0-9]{12,}\\b/,              // 12+ alphanumeric chars\n            /\\b[A-Za-z0-9]{8,}\\b/,               // 8+ alphanumeric chars\n            \n            // PEM key patterns\n            /BEGIN\\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\\s+KEY/i,\n            /END\\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\\s+KEY/i,\n            \n            // JWT patterns\n            /^[A-Za-z0-9-_]+\\.[A-Za-z0-9-_]+\\.[A-Za-z0-9-_]*$/,\n            \n            // API key patterns\n            /(api[_-]?key|token|secret|password|credential)[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n            \n            // UUID patterns\n            /[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/i,\n            \n            // Credit cards and SSN (existing patterns)\n            /\\b\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}[\\s-]?\\d{4}\\b/,\n            /\\b\\d{3}-\\d{2}-\\d{4}\\b/,\n            \n            // Email patterns (more restrictive)\n            /[a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\\.[a-zA-Z]{2,}/,\n            \n            // Crypto-specific patterns\n            /(fingerprint|hash|digest|signature)[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n            /(encryption|mac|metadata)[\\s]*key[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n            \n            // Session and auth patterns\n            /(session|auth|jwt|bearer)[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n        ];\n        \n        //   Check for sensitive patterns with early return\n        for (const pattern of sensitivePatterns) {\n            if (pattern.test(str)) {\n                //   Always fully hide sensitive data\n                return '[SENSITIVE_DATA_REDACTED]';\n            }\n        }\n        \n        //   Check for suspicious entropy (high randomness indicates keys)\n        if (this._hasHighEntropy(str)) {\n            return '[HIGH_ENTROPY_DATA_REDACTED]';\n        }\n        \n        //   Check for suspicious character distributions\n        if (this._hasSuspiciousDistribution(str)) {\n            return '[SUSPICIOUS_DATA_REDACTED]';\n        }\n        \n        // For regular strings \u2014 limit length more aggressively\n        if (str.length > 50) {\n            return str.substring(0, 20) + '...[TRUNCATED]';\n        }\n        \n        return str;\n    }\n    /**\n     *   Enhanced sensitive content detection\n     */\n    _containsSensitiveContent(str) {\n        if (typeof str !== 'string') return false;\n        \n        // Use the same comprehensive patterns as _sanitizeString\n        const sensitivePatterns = [\n            /[a-f0-9]{16,}/i,\n            /[A-Za-z0-9+/]{16,}={0,2}/,\n            /[1-9A-HJ-NP-Za-km-z]{16,}/,\n            /[A-Z2-7]{16,}={0,6}/,\n            /\\b[A-Za-z0-9]{12,}\\b/,\n            /BEGIN\\s+(PRIVATE|PUBLIC|RSA|DSA|EC)\\s+KEY/i,\n            /^[A-Za-z0-9-_]+\\.[A-Za-z0-9-_]+\\.[A-Za-z0-9-_]*$/,\n            /(api[_-]?key|token|secret|password|credential)[\\s]*[:=][\\s]*[A-Za-z0-9\\-_]{8,}/i,\n        ];\n        \n        return sensitivePatterns.some(pattern => pattern.test(str)) ||\n               this._hasHighEntropy(str) ||\n               this._hasSuspiciousDistribution(str);\n    }\n\n    /**\n     *   Check for high entropy strings (likely cryptographic keys)\n     */\n    _hasHighEntropy(str) {\n        if (str.length < 8) return false;\n        \n        // Calculate character frequency\n        const charCount = {};\n        for (const char of str) {\n            charCount[char] = (charCount[char] || 0) + 1;\n        }\n        \n        // Calculate Shannon entropy\n        const length = str.length;\n        let entropy = 0;\n        \n        for (const count of Object.values(charCount)) {\n            const probability = count / length;\n            entropy -= probability * Math.log2(probability);\n        }\n        \n        // High entropy (>4.5 bits per character) suggests cryptographic data\n        return entropy > 4.5;\n    }\n\n    /**\n     *   Check for suspicious character distributions\n     */\n    _hasSuspiciousDistribution(str) {\n        if (str.length < 8) return false;\n        \n        // Check for uniform distribution of hex characters\n        const hexChars = str.match(/[a-f0-9]/gi) || [];\n        if (hexChars.length >= str.length * 0.8) {\n            // If 80%+ are hex chars, likely a key\n            return true;\n        }\n        \n        // Check for base64-like distribution\n        const base64Chars = str.match(/[A-Za-z0-9+/=]/g) || [];\n        if (base64Chars.length >= str.length * 0.9) {\n            // If 90%+ are base64 chars, likely encoded data\n            return true;\n        }\n        \n        // Check for very low character diversity (suggests random data)\n        const uniqueChars = new Set(str).size;\n        const diversityRatio = uniqueChars / str.length;\n        \n        // If diversity is too high (>0.8) for the length, likely random data\n        if (diversityRatio > 0.8 && str.length > 16) {\n            return true;\n        }\n        \n        return false;\n    }\n\n\n    // ============================================\n    // SECURE LOGGING SYSTEM\n    // ============================================\n    \n    /**\n     * Detects production mode\n     */\n    _detectProductionMode() {\n        // Check various production mode indicators\n        return (\n            // Standard env variables\n            (typeof process !== 'undefined' && process.env?.NODE_ENV === 'production') ||\n            // No debug flags\n            (!this._debugMode) ||\n            // Production domains\n            (window.location.hostname && !window.location.hostname.includes('localhost') && \n             !window.location.hostname.includes('127.0.0.1') && \n             !window.location.hostname.includes('.local')) ||\n            // Minified code (heuristic check)\n            (typeof window.webpackHotUpdate === 'undefined' && !window.location.search.includes('debug'))\n        );\n    }\n    // ============================================\n    // FIXED SECURE GLOBAL API\n    // ============================================\n    \n    /**\n     * Sets up a secure global API with limited access\n     */\n    _setupSecureGlobalAPI() {\n        //   Log that we're starting API setup\n        this._secureLog('info', 'Starting secure global API setup');\n        \n        //   Create simple public API with safety checks\n        const secureAPI = {};\n        \n        //   Only bind methods that exist\n        if (typeof this.sendMessage === 'function') {\n            secureAPI.sendMessage = this.sendMessage.bind(this);\n        }\n        \n        //   Create simple getConnectionStatus method\n        secureAPI.getConnectionStatus = () => ({\n            isConnected: this.isConnected ? this.isConnected() : false,\n            isVerified: this.isVerified || false,\n            connectionState: this.peerConnection?.connectionState || 'disconnected'\n        });\n        \n        //   Create simple getSecurityStatus method\n        secureAPI.getSecurityStatus = () => ({\n            securityLevel: 'maximum',\n            stage: 'initialized',\n            activeFeaturesCount: Object.values(this.securityFeatures || {}).filter(Boolean).length\n        });\n        \n        if (typeof this.sendFile === 'function') {\n            secureAPI.sendFile = this.sendFile.bind(this);\n        }\n        \n        //   Create simple getFileTransferStatus method\n        secureAPI.getFileTransferStatus = () => ({\n            initialized: !!this.fileTransferSystem,\n            status: 'ready',\n            activeTransfers: 0,\n            receivingTransfers: 0\n        });\n        \n        if (typeof this.disconnect === 'function') {\n            secureAPI.disconnect = this.disconnect.bind(this);\n        }\n        \n        //   Create simple API object with safety checks\n        const safeGlobalAPI = {\n            ...secureAPI, // Spread only existing methods\n            getConfiguration: () => ({\n                fakeTraffic: this._config.fakeTraffic.enabled,\n                decoyChannels: this._config.decoyChannels.enabled,\n                packetPadding: this._config.packetPadding.enabled,\n                antiFingerprinting: this._config.antiFingerprinting.enabled\n            }),\n            emergency: {}\n        };\n        \n        //   Only add emergency methods that exist\n        if (typeof this._emergencyUnlockAllMutexes === 'function') {\n            safeGlobalAPI.emergency.unlockAllMutexes = this._emergencyUnlockAllMutexes.bind(this);\n        }\n        \n        if (typeof this._emergencyRecoverMutexSystem === 'function') {\n            safeGlobalAPI.emergency.recoverMutexSystem = this._emergencyRecoverMutexSystem.bind(this);\n        }\n        \n        if (typeof this._emergencyDisableLogging === 'function') {\n            safeGlobalAPI.emergency.disableLogging = this._emergencyDisableLogging.bind(this);\n        }\n        \n        if (typeof this._resetLoggingSystem === 'function') {\n            safeGlobalAPI.emergency.resetLogging = this._resetLoggingSystem.bind(this);\n        }\n        \n        //   Add file transfer system status\n        safeGlobalAPI.getFileTransferSystemStatus = () => ({\n            initialized: !!this.fileTransferSystem,\n            status: 'ready',\n            activeTransfers: 0,\n            receivingTransfers: 0\n        });\n        \n        //   Log available methods for debugging\n        this._secureLog('info', 'API methods available', {\n            sendMessage: !!secureAPI.sendMessage,\n            getConnectionStatus: !!secureAPI.getConnectionStatus,\n            getSecurityStatus: !!secureAPI.getSecurityStatus,\n            sendFile: !!secureAPI.sendFile,\n            getFileTransferStatus: !!secureAPI.getFileTransferStatus,\n            disconnect: !!secureAPI.disconnect,\n            getConfiguration: !!safeGlobalAPI.getConfiguration,\n            emergencyMethods: Object.keys(safeGlobalAPI.emergency).length\n        });\n\n        //   Apply Object.freeze to prevent modification\n        Object.freeze(safeGlobalAPI);\n        Object.freeze(safeGlobalAPI.emergency);\n\n        //   Export API once without monitoring\n        this._createProtectedGlobalAPI(safeGlobalAPI);\n        \n        //   Setup minimal protection\n        this._setupMinimalGlobalProtection();\n        \n        //   Log that API setup is complete\n        this._secureLog('info', 'Secure global API setup completed successfully');\n    }\n    /**\n     *   Create simple global API export\n     */\n    _createProtectedGlobalAPI(safeGlobalAPI) {\n        //   Log that we're creating protected global API\n        this._secureLog('info', 'Creating protected global API');\n        \n        //   Simple API export without proxy or monitoring\n        if (!window.secureBitChat) {\n            this._exportAPI(safeGlobalAPI);\n        } else {\n            this._secureLog('warn', '\u26A0\uFE0F Global API already exists, skipping setup');\n        }\n    }\n    \n    /**\n     *   Simple API export without monitoring\n     */\n    _exportAPI(apiObject) {\n        //   Log that we're exporting API\n        this._secureLog('info', 'Exporting API to window.secureBitChat');\n        \n        //   Check if important methods are available\n        if (!this._importantMethods || !this._importantMethods.defineProperty) {\n            this._secureLog('error', '\u274C Important methods not available for API export, using fallback');\n            // Fallback to direct Object.defineProperty\n            Object.defineProperty(window, 'secureBitChat', {\n                value: apiObject,\n                writable: false,\n                configurable: false,\n                enumerable: true\n            });\n        } else {\n            //   One-time export with immutable properties\n            this._importantMethods.defineProperty(window, 'secureBitChat', {\n                value: apiObject,\n                writable: false,\n                configurable: false,\n                enumerable: true\n            });\n        }\n        \n        this._secureLog('info', '\uD83D\uDD12 Secure API exported to window.secureBitChat');\n    }\n    \n    /**\n     *   Setup minimal global protection\n     */\n    _setupMinimalGlobalProtection() {\n        //   Simple protection without monitoring (methods already stored)\n        this._protectGlobalAPI();\n        \n        this._secureLog('info', '\uD83D\uDD12 Minimal global protection activated');\n    }\n    \n    /**\n     *   Store important methods in closure for local use\n     */\n    _storeImportantMethods() {\n        //   Store references to important methods locally\n        this._importantMethods = {\n            defineProperty: Object.defineProperty,\n            getOwnPropertyDescriptor: Object.getOwnPropertyDescriptor,\n            freeze: Object.freeze,\n            consoleLog: console.log,\n            consoleError: console.error,\n            consoleWarn: console.warn\n        };\n        \n        this._secureLog('info', '\uD83D\uDD12 Important methods stored locally', {\n            defineProperty: !!this._importantMethods.defineProperty,\n            getOwnPropertyDescriptor: !!this._importantMethods.getOwnPropertyDescriptor,\n            freeze: !!this._importantMethods.freeze\n        });\n    }\n\n    /**\n     *   Simple protection without monitoring\n     */\n    _setupSimpleProtection() {\n        this._secureLog('info', '\uD83D\uDD12 Simple protection activated - no monitoring');\n    }\n\n    /**\n     *   No global exposure prevention needed\n     */\n    _preventGlobalExposure() {\n        this._secureLog('info', '\uD83D\uDD12 No global exposure prevention - using secure API export only');\n    }\n    /**\n     *   API integrity check - only at initialization\n     */\n    _verifyAPIIntegrity() {\n        try {\n            if (!window.secureBitChat) {\n                this._secureLog('error', '\u274C SECURITY ALERT: Secure API has been removed!');\n                return false;\n            }\n            \n            const requiredMethods = ['sendMessage', 'getConnectionStatus', 'disconnect'];\n            const missingMethods = requiredMethods.filter(method => \n                typeof window.secureBitChat[method] !== 'function'\n            );\n            \n            if (missingMethods.length > 0) {\n                this._secureLog('error', '\u274C SECURITY ALERT: API tampering detected, missing methods:', { errorType: missingMethods?.constructor?.name || 'Unknown' });\n                return false;\n            }\n            \n            return true;\n        } catch (error) {\n            this._secureLog('error', '\u274C SECURITY ALERT: API integrity check failed:', { errorType: error?.constructor?.name || 'Unknown' });\n            return false;\n        }\n    }\n    // ============================================\n    // ADDITIONAL SECURITY METHODS\n    // ============================================\n    \n    /**\n     *   Simple global exposure check - only at initialization\n     */\n    _auditGlobalExposure() {\n        //   Only check once at initialization, no periodic scanning\n        this._secureLog('info', '\uD83D\uDD12 Global exposure check completed at initialization');\n        return [];\n    }\n    \n    /**\n     *   No periodic security audits - only at initialization\n     */\n    _startSecurityAudit() {\n        //   Only audit once at initialization, no periodic checks\n        this._secureLog('info', '\uD83D\uDD12 Security audit completed at initialization - no periodic monitoring');\n    }\n    \n    /**\n     *   Simple global API protection\n     */\n    _protectGlobalAPI() {\n        if (!window.secureBitChat) {\n            this._secureLog('warn', '\u26A0\uFE0F Global API not found during protection setup');\n            return;\n        }\n\n        try {\n            //   Validate API integrity once\n            if (this._validateAPIIntegrityOnce()) {\n                this._secureLog('info', '\uD83D\uDD12 Global API protection verified');\n            }\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to verify global API protection', { \n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        }\n    }\n    \n    /**\n     *   Validate API integrity once at initialization\n     */\n    _validateAPIIntegrityOnce() {\n        try {\n            //   Check if API is properly configured\n            if (!this._importantMethods || !this._importantMethods.getOwnPropertyDescriptor) {\n                // Fallback to direct Object.getOwnPropertyDescriptor\n                const descriptor = Object.getOwnPropertyDescriptor(window, 'secureBitChat');\n                \n                if (!descriptor || descriptor.configurable) {\n                    throw new Error('secureBitChat must not be reconfigurable!');\n                }\n            } else {\n                const descriptor = this._importantMethods.getOwnPropertyDescriptor(window, 'secureBitChat');\n                \n                if (!descriptor || descriptor.configurable) {\n                    throw new Error('secureBitChat must not be reconfigurable!');\n                }\n            }\n            \n            this._secureLog('info', '\u2705 API integrity validated');\n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C API integrity validation failed', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            return false;\n        }\n    }\n    \n    /**\n     *   Secure memory wipe for sensitive data\n     */\n    _secureWipeMemory(data, context = 'unknown') {\n        if (!data) return;\n        \n        try {\n            //   Different handling for different data types\n            if (data instanceof ArrayBuffer) {\n                this._secureWipeArrayBuffer(data, context);\n            } else if (data instanceof Uint8Array) {\n                this._secureWipeUint8Array(data, context);\n            } else if (Array.isArray(data)) {\n                this._secureWipeArray(data, context);\n            } else if (typeof data === 'string') {\n                this._secureWipeString(data, context);\n            } else if (data instanceof CryptoKey) {\n                this._secureWipeCryptoKey(data, context);\n            } else if (typeof data === 'object') {\n                this._secureWipeObject(data, context);\n            }\n            \n            this._secureMemoryManager.memoryStats.totalCleanups++;\n            \n        } catch (error) {\n            this._secureMemoryManager.memoryStats.failedCleanups++;\n            this._secureLog('error', '\u274C Secure memory wipe failed', {\n                context: context,\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        }\n    }\n    \n    /**\n     *   Secure wipe for ArrayBuffer\n     */\n    _secureWipeArrayBuffer(buffer, context) {\n        if (!buffer || buffer.byteLength === 0) return;\n        \n        try {\n            const view = new Uint8Array(buffer);\n            \n            //   Overwrite with random data first\n            crypto.getRandomValues(view);\n            \n            //   Overwrite with zeros\n            view.fill(0);\n            \n            //   Overwrite with ones\n            view.fill(255);\n            \n            //   Final zero overwrite\n            view.fill(0);\n            \n            this._secureLog('debug', '\uD83D\uDD12 ArrayBuffer securely wiped', {\n                context: context,\n                size: buffer.byteLength\n            });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe ArrayBuffer', {\n                context: context,\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   Secure wipe for Uint8Array\n     */\n    _secureWipeUint8Array(array, context) {\n        if (!array || array.length === 0) return;\n        \n        try {\n            //   Overwrite with random data first\n            crypto.getRandomValues(array);\n            \n            //   Overwrite with zeros\n            array.fill(0);\n            \n            //   Overwrite with ones\n            array.fill(255);\n            \n            //   Final zero overwrite\n            array.fill(0);\n            \n            this._secureLog('debug', '\uD83D\uDD12 Uint8Array securely wiped', {\n                context: context,\n                size: array.length\n            });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe Uint8Array', {\n                context: context,\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   Secure wipe for arrays\n     */\n    _secureWipeArray(array, context) {\n        if (!Array.isArray(array) || array.length === 0) return;\n        \n        try {\n            //   Recursively wipe each element\n            array.forEach((item, index) => {\n                if (item !== null && item !== undefined) {\n                    this._secureWipeMemory(item, `${context}[${index}]`);\n                }\n            });\n            \n            //   Fill with nulls\n            array.fill(null);\n            \n            this._secureLog('debug', '\uD83D\uDD12 Array securely wiped', {\n                context: context,\n                size: array.length\n            });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe array', {\n                context: context,\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   No string wiping - strings are immutable in JS\n     */\n    /**\n     * NOT a wipe, and deliberately named in the log as what it is.\n     *\n     * JavaScript strings are immutable: there is no way to overwrite the\n     * characters of an existing string, so any secret that was ever held as a\n     * string stays in the heap until the GC collects it \u2014 and we cannot force\n     * that. The caller can only drop its reference.\n     *\n     * This used to report success at debug level, which made the emergency wipe\n     * path (see _emergencyWipeOnFingerprintMismatch) look like it had scrubbed\n     * key material when it had scrubbed nothing. The real fix is upstream: keep\n     * secrets in ArrayBuffers, which CAN be overwritten \u2014 see\n     * EnhancedSecureCryptoUtils.zeroizeBuffer.\n     */\n    _secureWipeString(str, context) {\n        this._secureLog('debug', 'String secret cannot be wiped in JS (immutable) \u2014 reference dropped only', {\n            context: context,\n            length: str ? str.length : 0\n        });\n        return false;\n    }\n    \n    /**\n     *   CryptoKey cleanup - store in WeakMap for proper GC\n     */\n    /**\n     * Also not a wipe. A non-extractable CryptoKey has no bytes visible to JS \u2014\n     * the material lives in the browser's crypto implementation, and dropping the\n     * handle is the only lever we have. Whether the browser then zeroes its copy\n     * is up to the browser.\n     *\n     * The previous implementation was worse than a no-op: it ADDED the key to a\n     * WeakMap (i.e. took a new reference to the thing it was asked to destroy)\n     * and logged success. Callers that believed it \u2014 notably the emergency wipe\n     * on a fingerprint mismatch \u2014 were reporting a scrub that never happened.\n     *\n     * Non-extractability is what actually protects these keys; it is verified by\n     * EnhancedSecureCryptoUtils.verifyNonExtractableKeys.\n     */\n    _secureWipeCryptoKey(key, context) {\n        if (!key || !(key instanceof CryptoKey)) return false;\n\n        this._secureLog('debug', 'CryptoKey cannot be wiped from JS \u2014 handle dropped, material is non-extractable', {\n            context: context,\n            type: key.type,\n            extractable: key.extractable\n        });\n\n        // An extractable session key is a bug in whoever derived it: its bytes\n        // can be pulled into the heap, and then nothing here can clean them up.\n        if (key.extractable) {\n            this._secureLog('error', 'Extractable key reached the wipe path \u2014 material may persist in memory', {\n                context: context\n            });\n        }\n\n        return false;\n    }\n    \n    /**\n     *   Secure wipe for objects\n     */\n    _secureWipeObject(obj, context) {\n        if (!obj || typeof obj !== 'object') return;\n        \n        try {\n            //   Recursively wipe all properties\n            for (const [key, value] of Object.entries(obj)) {\n                if (value !== null && value !== undefined) {\n                    this._secureWipeMemory(value, `${context}.${key}`);\n                }\n                //   Set property to null\n                obj[key] = null;\n            }\n            \n            this._secureLog('debug', '\uD83D\uDD12 Object securely wiped', {\n                context: context,\n                properties: Object.keys(obj).length\n            });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe object', {\n                context: context,\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   Secure cleanup of cryptographic materials\n     */\n    _secureCleanupCryptographicMaterials() {\n        try {\n            //   Secure wipe of key pairs\n            if (this.ecdhKeyPair) {\n                this._secureWipeMemory(this.ecdhKeyPair, 'ecdhKeyPair');\n                this.ecdhKeyPair = null;\n            }\n            \n            if (this.ecdsaKeyPair) {\n                this._secureWipeMemory(this.ecdsaKeyPair, 'ecdsaKeyPair');\n                this.ecdsaKeyPair = null;\n            }\n            \n            //   Secure wipe of derived keys\n            if (this.encryptionKey) {\n                this._secureWipeMemory(this.encryptionKey, 'encryptionKey');\n                this.encryptionKey = null;\n            }\n            \n            if (this.macKey) {\n                this._secureWipeMemory(this.macKey, 'macKey');\n                this.macKey = null;\n            }\n            \n            if (this.metadataKey) {\n                this._secureWipeMemory(this.metadataKey, 'metadataKey');\n                this.metadataKey = null;\n            }\n            \n            if (this.nestedEncryptionKey) {\n                this._secureWipeMemory(this.nestedEncryptionKey, 'nestedEncryptionKey');\n                this.nestedEncryptionKey = null;\n            }\n            \n            //   Secure wipe of session data\n            if (this.sessionSalt) {\n                this._secureWipeMemory(this.sessionSalt, 'sessionSalt');\n                this.sessionSalt = null;\n            }\n            \n            if (this.sessionId) {\n                this._secureWipeMemory(this.sessionId, 'sessionId');\n                this.sessionId = null;\n            }\n            \n            if (this.verificationCode) {\n                this._secureWipeMemory(this.verificationCode, 'verificationCode');\n                this.verificationCode = null;\n            }\n            \n            if (this.peerPublicKey) {\n                this._secureWipeMemory(this.peerPublicKey, 'peerPublicKey');\n                this.peerPublicKey = null;\n            }\n            \n            if (this.keyFingerprint) {\n                this._secureWipeMemory(this.keyFingerprint, 'keyFingerprint');\n                this.keyFingerprint = null;\n            }\n            \n            if (this.connectionId) {\n                this._secureWipeMemory(this.connectionId, 'connectionId');\n                this.connectionId = null;\n            }\n\n            this._clearPendingOfferContext();\n\n            // The ratchet holds the only material in this class that IS raw bytes\n            // and therefore genuinely wipeable \u2014 root key, chain keys and every\n            // retained key for a message that never arrived.\n            if (this._ratchet) {\n                try { this._ratchet.destroy(); } catch (_) {}\n                this._ratchet = null;\n            }\n            this._peerSupportsRatchet = false;\n\n            this._secureLog('info', '\uD83D\uDD12 Cryptographic materials securely cleaned up');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to cleanup cryptographic materials', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        }\n    }\n    \n    /**\n     *   Force garbage collection if available\n     */\n    async _forceGarbageCollection() {\n        try {\n            //   Use natural cleanup instead of forcing GC\n            await this._performNaturalCleanup();\n            this._secureLog('debug', '\uD83D\uDD12 Natural memory cleanup performed');\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to perform natural cleanup', {\n                errorType: error.constructor.name\n            });\n        }\n    }\n    \n    /**\n     *   Perform periodic memory cleanup\n     */\n    async _performPeriodicMemoryCleanup() {\n        try {\n            this._secureMemoryManager.isCleaning = true;\n            \n            //   Clean up sensitive data, but DO NOT wipe active crypto in ratchet session\n            const preserveActiveRatchet = (this.sessionMode === 'ratchet') && this.isConnected && this.dataChannel && this.dataChannel.readyState === 'open';\n            // DO NOT wipe an offer that is still awaiting its answer: the creator\n            // holds a pending offer context (with the session salt) until the peer's\n            // response is applied. Wiping it here drops sessionSalt + the context and\n            // makes handleSecureAnswer fail with \"Missing pending offer context\".\n            // Keep it for as long as the offer itself is valid (OFFER_MAX_AGE).\n            const pendingOfferAgeMs = this._pendingOfferContext\n                ? (Date.now() - (this._pendingOfferContext.createdAt || 0))\n                : Infinity;\n            const hasPendingOffer = !!this._pendingOfferContext\n                && Array.isArray(this._pendingOfferContext.sessionSalt)\n                && this._pendingOfferContext.sessionSalt.length === 64\n                && pendingOfferAgeMs < EnhancedSecureWebRTCManager.LIMITS.OFFER_MAX_AGE;\n            const shouldPreserveActiveKeys = preserveActiveRatchet || hasPendingOffer;\n            if (shouldPreserveActiveKeys) {\n                this._secureLog('debug', '\uD83E\uDDF9 Skipping crypto key wipe during periodic cleanup', {\n                    reason: preserveActiveRatchet ? 'active ratchet connection' : 'offer awaiting answer'\n                });\n            } else {\n                this._secureCleanupCryptographicMaterials();\n            }\n            \n            //   Clean up message queue if it's too large\n            if (this.messageQueue && this.messageQueue.length > 100) {\n                const excessMessages = this.messageQueue.splice(0, this.messageQueue.length - 50);\n                excessMessages.forEach((message, index) => {\n                    this._secureWipeMemory(message, `periodicCleanup[${index}]`);\n                });\n            }\n            \n            //   Clean up processed message IDs if too many\n            if (this.processedMessageIds && this.processedMessageIds.size > 1000) {\n                this.processedMessageIds.clear();\n            }\n            \n            //   Natural cleanup\n            await this._forceGarbageCollection();\n            \n            this._secureLog('debug', '\uD83D\uDD12 Periodic memory cleanup completed');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error during periodic memory cleanup', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        } finally {\n            this._secureMemoryManager.isCleaning = false;\n        }\n    }\n    \n    /**\n     *   Create secure error message without information disclosure\n     */\n    _createSecureErrorMessage(originalError, context = 'unknown') {\n        try {\n            //   Categorize error for appropriate handling\n            const category = this._categorizeError(originalError);\n            \n            //   Generate safe error message based on category\n            const safeMessage = this._getSafeErrorMessage(category, context);\n            \n            //   Log detailed error internally for debugging\n            this._secureLog('error', 'Internal error occurred', {\n                category: category,\n                context: context,\n                errorType: originalError?.constructor?.name || 'Unknown',\n                timestamp: Date.now()\n            });\n            \n            //   Track error frequency\n            this._trackErrorFrequency(category);\n            \n            return safeMessage;\n            \n        } catch (error) {\n            //   Fallback to generic error if error handling fails\n            this._secureLog('error', 'Error handling failed', {\n                originalError: originalError?.message || 'Unknown',\n                handlingError: error.message\n            });\n            return 'An unexpected error occurred';\n        }\n    }\n    \n    /**\n     *   Categorize error for appropriate handling\n     */\n    _categorizeError(error) {\n        if (!error || !error.message) {\n            return this._secureErrorHandler.errorCategories.UNKNOWN;\n        }\n        \n        const message = error.message.toLowerCase();\n        \n        //   Cryptographic errors\n        if (message.includes('crypto') || \n            message.includes('key') || \n            message.includes('encrypt') || \n            message.includes('decrypt') ||\n            message.includes('sign') ||\n            message.includes('verify') ||\n            message.includes('ecdh') ||\n            message.includes('ecdsa')) {\n            return this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC;\n        }\n        \n        //   Network errors\n        if (message.includes('network') || \n            message.includes('connection') || \n            message.includes('timeout') ||\n            message.includes('webrtc') ||\n            message.includes('peer')) {\n            return this._secureErrorHandler.errorCategories.NETWORK;\n        }\n        \n        //   Validation errors\n        if (message.includes('invalid') || \n            message.includes('validation') || \n            message.includes('format') ||\n            message.includes('type')) {\n            return this._secureErrorHandler.errorCategories.VALIDATION;\n        }\n        \n        //   System errors\n        if (message.includes('system') || \n            message.includes('internal') || \n            message.includes('memory') ||\n            message.includes('resource')) {\n            return this._secureErrorHandler.errorCategories.SYSTEM;\n        }\n        \n        return this._secureErrorHandler.errorCategories.UNKNOWN;\n    }\n    \n    /**\n     *   Get safe error message based on category\n     */\n    _getSafeErrorMessage(category, context) {\n        const safeMessages = {\n            [this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC]: {\n                'key_generation': 'Security initialization failed',\n                'key_import': 'Security verification failed',\n                'key_derivation': 'Security setup failed',\n                'encryption': 'Message security failed',\n                'decryption': 'Message verification failed',\n                'signature': 'Authentication failed',\n                'default': 'Security operation failed'\n            },\n            [this._secureErrorHandler.errorCategories.NETWORK]: {\n                'connection': 'Connection failed',\n                'timeout': 'Connection timeout',\n                'peer': 'Peer connection failed',\n                'webrtc': 'Communication failed',\n                'default': 'Network operation failed'\n            },\n            [this._secureErrorHandler.errorCategories.VALIDATION]: {\n                'format': 'Invalid data format',\n                'type': 'Invalid data type',\n                'structure': 'Invalid data structure',\n                'default': 'Validation failed'\n            },\n            [this._secureErrorHandler.errorCategories.SYSTEM]: {\n                'memory': 'System resource error',\n                'resource': 'System resource unavailable',\n                'internal': 'Internal system error',\n                'default': 'System operation failed'\n            },\n            [this._secureErrorHandler.errorCategories.UNKNOWN]: {\n                'default': 'An unexpected error occurred'\n            }\n        };\n        \n        const categoryMessages = safeMessages[category] || safeMessages[this._secureErrorHandler.errorCategories.UNKNOWN];\n        \n        //   Determine specific context for more precise message\n        let specificContext = 'default';\n        if (context.includes('key') || context.includes('crypto')) {\n            specificContext = category === this._secureErrorHandler.errorCategories.CRYPTOGRAPHIC ? 'key_generation' : 'default';\n        } else if (context.includes('connection') || context.includes('peer')) {\n            specificContext = category === this._secureErrorHandler.errorCategories.NETWORK ? 'connection' : 'default';\n        } else if (context.includes('validation') || context.includes('format')) {\n            specificContext = category === this._secureErrorHandler.errorCategories.VALIDATION ? 'format' : 'default';\n        }\n        \n        return categoryMessages[specificContext] || categoryMessages.default;\n    }\n    \n    /**\n     *   Track error frequency for security monitoring\n     */\n    _trackErrorFrequency(category) {\n        const now = Date.now();\n        \n        //   Clean old error counts\n        if (now - this._secureErrorHandler.lastErrorTime > 60000) { // 1 minute\n            this._secureErrorHandler.errorCounts.clear();\n        }\n        \n        //   Increment error count\n        const currentCount = this._secureErrorHandler.errorCounts.get(category) || 0;\n        this._secureErrorHandler.errorCounts.set(category, currentCount + 1);\n        this._secureErrorHandler.lastErrorTime = now;\n        \n        //   Check if we're exceeding error threshold\n        const totalErrors = Array.from(this._secureErrorHandler.errorCounts.values()).reduce((sum, count) => sum + count, 0);\n        \n        if (totalErrors > this._secureErrorHandler.errorThreshold) {\n            this._secureErrorHandler.isInErrorMode = true;\n            this._secureLog('warn', '\u26A0\uFE0F High error frequency detected - entering error mode', {\n                totalErrors: totalErrors,\n                threshold: this._secureErrorHandler.errorThreshold\n            });\n        }\n    }\n    \n    /**\n     *   Throw secure error without information disclosure\n     */\n    _throwSecureError(originalError, context = 'unknown') {\n        const secureMessage = this._createSecureErrorMessage(originalError, context);\n        throw new Error(secureMessage);\n    }\n    \n    /**\n     *   Get error handling statistics\n     */\n    _getErrorHandlingStats() {\n        return {\n            errorCounts: Object.fromEntries(this._secureErrorHandler.errorCounts),\n            isInErrorMode: this._secureErrorHandler.isInErrorMode,\n            lastErrorTime: this._secureErrorHandler.lastErrorTime,\n            errorThreshold: this._secureErrorHandler.errorThreshold\n        };\n    }\n    \n    /**\n     *   Reset error handling system\n     */\n    _resetErrorHandlingSystem() {\n        this._secureErrorHandler.errorCounts.clear();\n        this._secureErrorHandler.isInErrorMode = false;\n        this._secureErrorHandler.lastErrorTime = 0;\n        \n        this._secureLog('info', '\uD83D\uDD04 Error handling system reset');\n    }\n    \n    /**\n     *   Get memory management statistics\n     */\n    _getMemoryManagementStats() {\n        return {\n            totalCleanups: this._secureMemoryManager.memoryStats.totalCleanups,\n            failedCleanups: this._secureMemoryManager.memoryStats.failedCleanups,\n            lastCleanup: this._secureMemoryManager.memoryStats.lastCleanup,\n            isCleaning: this._secureMemoryManager.isCleaning,\n            queueLength: this._secureMemoryManager.cleanupQueue.length\n        };\n    }\n    \n    /**\n     *   Validate API integrity and security\n     */\n    _validateAPIIntegrity() {\n        try {\n            //   Check if API exists\n            if (!window.secureBitChat) {\n                this._secureLog('error', '\u274C Global API not found during integrity validation');\n                return false;\n            }\n            \n            //   Validate required methods exist\n            const requiredMethods = ['sendMessage', 'getConnectionStatus', 'getSecurityStatus', 'sendFile', 'disconnect'];\n            const missingMethods = requiredMethods.filter(method => \n                !window.secureBitChat[method] || typeof window.secureBitChat[method] !== 'function'\n            );\n            \n            if (missingMethods.length > 0) {\n                this._secureLog('error', '\u274C Global API integrity validation failed - missing methods', {\n                    missingMethods: missingMethods\n                });\n                return false;\n            }\n            \n            //   Test method binding integrity\n            const testContext = { test: true };\n            const boundMethods = requiredMethods.map(method => {\n                try {\n                    return window.secureBitChat[method].bind(testContext);\n                } catch (error) {\n                    return null;\n                }\n            });\n            \n            const unboundMethods = boundMethods.filter(method => method === null);\n            if (unboundMethods.length > 0) {\n                this._secureLog('error', '\u274C Global API integrity validation failed - method binding issues', {\n                    unboundMethods: unboundMethods.length\n                });\n                return false;\n            }\n            \n            //   Test API immutability\n            try {\n                const testProp = '_integrity_test_' + Date.now();\n                Object.defineProperty(window.secureBitChat, testProp, {\n                    value: 'test',\n                    writable: true,\n                    configurable: true\n                });\n                \n                this._secureLog('error', '\u274C Global API integrity validation failed - API is mutable');\n                delete window.secureBitChat[testProp];\n                return false;\n                \n            } catch (immutabilityError) {\n                // This is expected - API should be immutable\n                this._secureLog('debug', '\u2705 Global API immutability verified');\n            }\n            \n            this._secureLog('info', '\u2705 Global API integrity validation passed');\n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Global API integrity validation failed', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            return false;\n        }\n    }\n\n    _validateCryptographicSecurity() {\n        //   Check if basic security features are available\n        const criticalFeatures = ['hasRateLimiting'];\n        const missingCritical = criticalFeatures.filter(feature => !this.securityFeatures[feature]);\n        \n        if (missingCritical.length > 0) {\n            this._secureLog('error', '\uD83D\uDEA8 CRITICAL: Missing critical rate limiting feature', {\n                missing: missingCritical,\n                currentFeatures: this.securityFeatures,\n                action: 'Rate limiting will be forced enabled'\n            });\n\n            missingCritical.forEach(feature => {\n                this.securityFeatures[feature] = true;\n                this._secureLog('warn', `\u26A0\uFE0F Forced enable critical: ${feature} = true`);\n            });\n        }\n\n        //   Log current security state\n        const availableFeatures = Object.keys(this.securityFeatures).filter(f => this.securityFeatures[f]);\n        const encryptionFeatures = ['hasEncryption', 'hasECDH', 'hasECDSA'].filter(f => this.securityFeatures[f]);\n        \n        this._secureLog('info', '\u2705 Cryptographic security validation passed', {\n            criticalFeatures: criticalFeatures.length,\n            availableFeatures: availableFeatures.length,\n            encryptionFeatures: encryptionFeatures.length,\n            totalSecurityFeatures: availableFeatures.length,\n            note: 'Encryption features will be enabled after key generation',\n            currentState: {\n                hasEncryption: this.securityFeatures.hasEncryption,\n                hasECDH: this.securityFeatures.hasECDH,\n                hasECDSA: this.securityFeatures.hasECDSA,\n                hasRateLimiting: this.securityFeatures.hasRateLimiting\n            }\n        });\n        \n        return true;\n    }\n\n    _syncSecurityFeaturesWithTariff() {\n        // All security features are enabled by default - no payment required\n        this._secureLog('info', '\u2705 All security features enabled by default - no payment required');\n        \n        // Ensure all features are enabled\n        const allFeatures = [\n            'hasEncryption', 'hasECDH', 'hasECDSA', 'hasMutualAuth',\n            'hasMetadataProtection', 'hasEnhancedReplayProtection',\n            'hasNonExtractableKeys', 'hasRateLimiting', 'hasEnhancedValidation', 'hasPFS',\n            'hasNestedEncryption', 'hasPacketPadding', 'hasPacketReordering',\n            'hasAntiFingerprinting', 'hasFakeTraffic', 'hasDecoyChannels', 'hasMessageChunking'\n        ];\n        \n        allFeatures.forEach(feature => {\n            this.securityFeatures[feature] = true;\n        });\n        \n        this._secureLog('info', '\u2705 All security features enabled by default', {\n            enabledFeatures: Object.keys(this.securityFeatures).filter(f => this.securityFeatures[f]).length,\n            totalFeatures: Object.keys(this.securityFeatures).length\n        });\n        \n        return;\n    }\n    \n    /**\n     * Emergency shutdown for critical issues\n     */\n    _emergencyShutdown(reason = 'Security breach') {\n        this._secureLog('error', '\u274C EMERGENCY SHUTDOWN: ${reason}');\n        \n        try {\n            // Clear critical data\n            this.encryptionKey = null;\n            this.macKey = null;\n            this.metadataKey = null;\n            this.verificationCode = null;\n            this.keyFingerprint = null;\n            this.connectionId = null;\n            \n            // Close connections\n            if (this.dataChannel) {\n                this.dataChannel.close();\n                this.dataChannel = null;\n            }\n            if (this.peerConnection) {\n                this.peerConnection.close();\n                this.peerConnection = null;\n            }\n            \n            // Clear buffers\n            this.messageQueue = [];\n            this.processedMessageIds.clear();\n            this.packetBuffer.clear();\n            \n            // Notify UI\n            if (this.onStatusChange) {\n                this.onStatusChange('security_breach');\n            }\n            \n            this._secureLog('info', '\uD83D\uDD12 Emergency shutdown completed');\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error during emergency shutdown:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n    _finalizeSecureInitialization() {\n        this._startKeySecurityMonitoring();\n        \n        // Verify API integrity\n        if (!this._verifyAPIIntegrity()) {\n            this._secureLog('error', '\u274C Security initialization failed');\n            return;\n        }\n\n        this._startSecurityMonitoring();\n        \n        // Start periodic log cleanup\n        this._logCleanupInterval = this._trackActiveTimer(setInterval(() => {\n            this._cleanupLogs();\n        }, 300000));\n        \n        this._secureLog('info', '\u2705 Secure WebRTC Manager initialization completed');\n        this._secureLog('info', '\uD83D\uDD12 Global exposure protection: Monitoring only, no automatic removal');\n    }\n    /**\n     * Start security monitoring\n     * @deprecated Use unified scheduler instead\n     */\n    _startSecurityMonitoring() {\n        //   All security monitoring moved to unified scheduler\n        this._secureLog('info', '\uD83D\uDD27 Security monitoring moved to unified scheduler');\n    }\n    /**\n     * Validates connection readiness for sending data\n     * @param {boolean} throwError - whether to throw on not ready\n     * @returns {boolean} true if connection is ready\n     */\n    _validateConnection(throwError = true) {\n        const isDataChannelReady = this.dataChannel && this.dataChannel.readyState === 'open';\n        const isConnectionVerified = this.isVerified;\n        const isValid = isDataChannelReady && isConnectionVerified;\n        \n        if (!isValid && throwError) {\n            if (!isDataChannelReady) {\n                throw new Error('Data channel not ready');\n            }\n            if (!isConnectionVerified) {\n                throw new Error('Connection not verified');\n            }\n        }\n        \n        return isValid;\n    }\n\n    /**\n     *   Hard gate for traffic blocking without verification\n     * This method enforces that NO traffic (including system messages and file transfers)\n     * can pass through without proper cryptographic verification\n     */\n    _enforceVerificationGate(operation = 'unknown', throwError = true) {\n        if (!this.isVerified) {\n            const errorMessage = `SECURITY VIOLATION: ${operation} blocked - connection not cryptographically verified`;\n            this._secureLog('error', errorMessage, {\n                operation: operation,\n                isVerified: this.isVerified,\n                hasKeys: !!(this.encryptionKey && this.macKey),\n                timestamp: Date.now()\n            });\n            \n            if (throwError) {\n                throw new Error(errorMessage);\n            }\n            return false;\n        }\n        return true;\n    }\n\n    /**\n     *   Safe method to set isVerified only after cryptographic verification\n     * This is the ONLY method that should set isVerified = true\n     */\n    _setVerifiedStatus(verified, verificationMethod = 'unknown', verificationData = null) {\n        if (verified) {\n            // Validate that we have proper cryptographic verification\n            if (!this.encryptionKey || !this.macKey) {\n                throw new Error('Cannot set verified=true without encryption keys');\n            }\n            \n            if (!verificationMethod || verificationMethod === 'unknown') {\n                throw new Error('Cannot set verified=true without specifying verification method');\n            }\n\n            // SECURITY: defence in depth. Having ECDH-derived keys proves only that\n            // *someone* completed the handshake \u2014 a MITM has them too. The SAS\n            // comparison is what proves that someone is the intended peer, so any\n            // SAS-based transition must be backed by a local confirmation that the\n            // user actually entered the matching code. No caller may shortcut this.\n            if (verificationMethod.includes('SAS') && !this.localVerificationConfirmed) {\n                this._secureLog('error', 'Blocked verified transition without local SAS confirmation', {\n                    verificationMethod: verificationMethod,\n                    localConfirmed: this.localVerificationConfirmed,\n                    remoteConfirmed: this.remoteVerificationConfirmed\n                });\n                throw new Error('Cannot set verified=true without local SAS confirmation');\n            }\n\n            // Log the verification for audit trail\n            this._secureLog('info', 'Connection verified through cryptographic verification', {\n                verificationMethod: verificationMethod,\n                hasEncryptionKey: !!this.encryptionKey,\n                hasMacKey: !!this.macKey,\n                keyFingerprint: this.keyFingerprint,\n                timestamp: Date.now(),\n                verificationData: verificationData ? 'provided' : 'none'\n            });\n        }\n        \n        this.isVerified = verified;\n        \n        if (verified) {\n            this.onStatusChange('connected');\n        } else {\n            this.onStatusChange('disconnected');\n        }\n    }\n\n    /**\n     * Release a link that a GROUP authenticated, with no human in the loop.\n     *\n     * WHY THIS IS NOT A BYPASS\n     * ------------------------\n     * The SAS comparison exists to answer one question: is the peer who\n     * completed this handshake the person we meant to talk to? For a 1:1 chat\n     * only a human can answer it, which is why _setVerifiedStatus refuses every\n     * SAS-shaped transition that no human confirmed.\n     *\n     * A mesh link inside a group has already answered it, earlier and by a\n     * different route. The descriptor that opened this connection was signed\n     * with a group identity key; that key's fingerprint is named in a roster\n     * signed by the admin; and the group's safety code \u2014 which every member\n     * compared out of band before any of this was allowed to start \u2014 covers\n     * that exact set of fingerprints. Asking the two people to also read seven\n     * digits at each other for every one of up to twenty-eight pairs would not\n     * add a check, it would repeat one they already did, badly.\n     *\n     * So the guarantee is not weakened here, it is moved: the caller must have\n     * verified the group signature over the peer's descriptor BEFORE the\n     * transport was created. Everything this method can check for itself, it\n     * does \u2014 the session must be SBQ2, its in-band exchange must have completed,\n     * and the peer must have proved possession of the identity key that the\n     * commitment in that descriptor bound it to. A session that has not got that\n     * far is refused outright rather than released on the caller's word.\n     *\n     * @param {string} reason short audit label for why the group vouched\n     */\n    markGroupLinkVerified(reason = 'group_roster_signature') {\n        const st = this._sbq2;\n        if (!this._isSbq2() || !st || !st.completed || !st.proofVerified || !st.keysDerived) {\n            throw new Error('Group link cannot be released: the in-band handshake has not completed');\n        }\n        if (!this.encryptionKey || !this.macKey) {\n            throw new Error('Group link cannot be released: session keys are missing');\n        }\n        if (this.isVerified) return true;\n\n        // There is no peer confirmation to wait for and none to send: both sides\n        // reach this independently, from the same roster.\n        this.localVerificationConfirmed = true;\n        this.remoteVerificationConfirmed = true;\n        this.bothVerificationsConfirmed = true;\n\n        this._setVerifiedStatus(true, 'GROUP_ROSTER_SIGNATURE', {\n            reason,\n            timestamp: Date.now()\n        });\n        this._enforceVerificationGate('group_link_release', false);\n        this.onStatusChange?.('verified');\n        try { this.processMessageQueue(); } catch (_) {}\n        return true;\n    }\n\n    /**\n     *   Create AAD (Additional Authenticated Data) for file messages\n     * This binds file messages to the current session and prevents replay attacks\n     */\n    _createFileMessageAAD(messageType, messageData = null) {\n        // Verify that _createMessageAAD method is available\n        if (typeof this._createMessageAAD !== 'function') {\n            throw new Error('_createMessageAAD method is not available in _createFileMessageAAD. Manager may not be fully initialized.');\n        }\n        // Use the unified AAD creation method with file message flag\n        return this._createMessageAAD(messageType, messageData, true);\n    }\n\n    /**\n     *   Validate AAD for file messages\n     * This ensures file messages are bound to the correct session\n     */\n    _validateFileMessageAAD(aadString, expectedMessageType = null) {\n        try {\n            const aad = JSON.parse(aadString);\n            \n            // Validate session binding\n            if (aad.sessionId !== (this.currentSession?.sessionId || 'unknown')) {\n                throw new Error('AAD sessionId mismatch - possible replay attack');\n            }\n            \n            if (aad.keyFingerprint !== (this.keyFingerprint || 'unknown')) {\n                throw new Error('AAD keyFingerprint mismatch - possible key substitution attack');\n            }\n            \n            // Validate message type if specified\n            if (expectedMessageType && aad.messageType !== expectedMessageType) {\n                throw new Error(`AAD messageType mismatch - expected ${expectedMessageType}, got ${aad.messageType}`);\n            }\n            \n            // Validate timestamp (prevent very old messages)\n            const now = Date.now();\n            const messageAge = now - aad.timestamp;\n            if (messageAge > 1800000) { // 30 minutes for better UX\n                throw new Error('AAD timestamp too old - possible replay attack');\n            }\n            \n            return aad;\n        } catch (error) {\n            // Never log the raw AAD: it carries sessionId and keyFingerprint.\n            // Length is enough to diagnose malformed input without leaking secrets.\n            this._secureLog('error', 'AAD validation failed', {\n                error: error.message,\n                aadLength: typeof aadString === 'string' ? aadString.length : 0\n            });\n            throw new Error(`AAD validation failed: ${error.message}`);\n        }\n    }\n\n    // ============================================\n    // ANTI-REPLAY / SEQUENCE VALIDATION\n    // These belong to the connection, not to key storage: they read and mutate\n    // this.replayWindow / this.expectedSequenceNumber / this.currentSession.\n    // ============================================\n\n    // Method _generateNextSequenceNumber moved to constructor area for early availability\n\n    /**\n     *   Validate incoming message sequence number\n     * This prevents replay attacks and ensures message ordering\n     */\n    _validateIncomingSequenceNumber(receivedSeq, context = 'unknown') {\n        try {\n            if (!this.replayProtectionEnabled) {\n                return true; // Skip validation if disabled\n            }\n\n            // SECURITY: a missing or non-numeric sequence number must fail closed.\n            // Both range checks below compare with `<` / `>`, and any comparison\n            // against undefined/NaN is false \u2014 so without this guard an omitted\n            // sequence number would sail past every check and land in the replay\n            // window as a valid entry, silently disabling replay protection.\n            if (typeof receivedSeq !== 'number' || !Number.isFinite(receivedSeq)) {\n                this._secureLog('warn', 'Missing or non-numeric sequence number - rejecting', {\n                    receivedType: typeof receivedSeq,\n                    context: context,\n                    timestamp: Date.now()\n                });\n                return false;\n            }\n\n            // Check if sequence number is within acceptable range\n            if (receivedSeq < this.expectedSequenceNumber - this.replayWindowSize) {\n                this._secureLog('warn', 'Sequence number too old - possible replay attack', {\n                    received: receivedSeq,\n                    expected: this.expectedSequenceNumber,\n                    context: context,\n                    timestamp: Date.now()\n                });\n                return false;\n            }\n\n            // Check if sequence number is too far ahead (DoS protection)\n            if (receivedSeq > this.expectedSequenceNumber + this.maxSequenceGap) {\n                this._secureLog('warn', 'Sequence number gap too large - possible DoS attack', {\n                    received: receivedSeq,\n                    expected: this.expectedSequenceNumber,\n                    gap: receivedSeq - this.expectedSequenceNumber,\n                    context: context,\n                    timestamp: Date.now()\n                });\n                return false;\n            }\n\n            // Check if sequence number is already in replay window\n            if (this.replayWindow.has(receivedSeq)) {\n                this._secureLog('warn', 'Duplicate sequence number detected - replay attack', {\n                    received: receivedSeq,\n                    context: context,\n                    timestamp: Date.now()\n                });\n                return false;\n            }\n\n            // Add to replay window\n            this.replayWindow.add(receivedSeq);\n            \n            // Maintain sliding window size\n            if (this.replayWindow.size > this.replayWindowSize) {\n                const oldestSeq = Math.min(...this.replayWindow);\n                this.replayWindow.delete(oldestSeq);\n            }\n\n            // Update expected sequence number if this is the next expected\n            if (receivedSeq === this.expectedSequenceNumber) {\n                this.expectedSequenceNumber++;\n                \n                // Clean up replay window entries that are no longer needed\n                while (this.replayWindow.has(this.expectedSequenceNumber - this.replayWindowSize - 1)) {\n                    this.replayWindow.delete(this.expectedSequenceNumber - this.replayWindowSize - 1);\n                }\n            }\n\n            this._secureLog('debug', 'Sequence number validation successful', {\n                received: receivedSeq,\n                expected: this.expectedSequenceNumber,\n                context: context,\n                timestamp: Date.now()\n            });\n\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'Sequence number validation failed', {\n                error: error.message,\n                context: context,\n                timestamp: Date.now()\n            });\n            return false;\n        }\n    }\n\n    // Method _createMessageAAD moved to constructor area for early availability\n\n    /**\n     *   Validate message AAD with sequence number\n     * This ensures message integrity and prevents replay attacks\n     */\n    _validateMessageAAD(aadString, expectedMessageType = null) {\n        try {\n            const aad = JSON.parse(aadString);\n            \n            // Validate session binding\n            if (aad.sessionId !== (this.currentSession?.sessionId || 'unknown')) {\n                throw new Error('AAD sessionId mismatch - possible replay attack');\n            }\n            \n            if (aad.keyFingerprint !== (this.keyFingerprint || 'unknown')) {\n                throw new Error('AAD keyFingerprint mismatch - possible key substitution attack');\n            }\n            \n            //   Validate sequence number\n            if (!this._validateIncomingSequenceNumber(aad.sequenceNumber, aad.messageType)) {\n                throw new Error('Sequence number validation failed - possible replay or DoS attack');\n            }\n            \n            // Validate message type if specified\n            if (expectedMessageType && aad.messageType !== expectedMessageType) {\n                throw new Error(`AAD messageType mismatch - expected ${expectedMessageType}, got ${aad.messageType}`);\n            }\n            \n            return aad;\n        } catch (error) {\n            // Never log the raw AAD: it carries sessionId and keyFingerprint.\n            // Length is enough to diagnose malformed input without leaking secrets.\n            this._secureLog('error', 'AAD validation failed', {\n                error: error.message,\n                aadLength: typeof aadString === 'string' ? aadString.length : 0\n            });\n            throw new Error(`AAD validation failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Get anti-replay protection status\n     * This shows the current state of replay protection\n     */\n    getAntiReplayStatus() {\n        const status = {\n            replayProtectionEnabled: this.replayProtectionEnabled,\n            replayWindowSize: this.replayWindowSize,\n            currentReplayWindowSize: this.replayWindow.size,\n            sequenceNumber: this.sequenceNumber,\n            expectedSequenceNumber: this.expectedSequenceNumber,\n            maxSequenceGap: this.maxSequenceGap,\n            replayWindowEntries: Array.from(this.replayWindow).sort((a, b) => a - b)\n        };\n\n        this._secureLog('info', 'Anti-replay status retrieved', status);\n        return status;\n    }\n\n    /**\n     *   Configure anti-replay protection\n     * This allows fine-tuning of replay protection parameters\n     */\n    configureAntiReplayProtection(config) {\n        try {\n            if (config.windowSize !== undefined) {\n                if (config.windowSize < 16 || config.windowSize > 1024) {\n                    throw new Error('Replay window size must be between 16 and 1024');\n                }\n                this.replayWindowSize = config.windowSize;\n            }\n\n            if (config.maxGap !== undefined) {\n                if (config.maxGap < 10 || config.maxGap > 1000) {\n                    throw new Error('Max sequence gap must be between 10 and 1000');\n                }\n                this.maxSequenceGap = config.maxGap;\n            }\n\n            if (config.enabled !== undefined) {\n                this.replayProtectionEnabled = config.enabled;\n            }\n\n            this._secureLog('info', 'Anti-replay protection configured', config);\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'Failed to configure anti-replay protection', { error: error.message });\n            return false;\n        }\n    }\n\n    /**\n     * Get real security level with actual cryptographic tests\n     * This provides real-time verification of security features\n     *\n     * Returns the scored security level (level / score / passedChecks / \u2026) with\n     * the per-feature flags merged in. The header renders `level` and `score`\n     * directly, so this MUST carry them \u2014 returning only the feature flags makes\n     * the header display \"Secure undefined%\".\n     */\n    async getRealSecurityLevel() {\n        try {\n            const featureFlags = {\n                // Basic security features\n                ecdhKeyExchange: !!this.ecdhKeyPair,\n                ecdsaSignatures: !!this.ecdsaKeyPair,\n                aesEncryption: !!this.encryptionKey,\n                messageIntegrity: !!this.hmacKey,\n\n                // Advanced security features - using the exact property names expected by EnhancedSecureCryptoUtils\n                replayProtection: this.replayProtectionEnabled,\n                // Both fingerprints must be known for the SAS to bind this session\n                // to this pair of endpoints; having only our own proves nothing.\n                dtlsFingerprint: !!(this.expectedDTLSFingerprint && this._peerDTLSFingerprint),\n                // The SAS matters once the USER has compared it, not once we have\n                // computed it \u2014 an unconfirmed code is not authentication.\n                sasCode: !!this.verificationCode && this.localVerificationConfirmed === true,\n                metadataProtection: true, // Always enabled\n                trafficObfuscation: true, // Always enabled\n                // True only while the Double Ratchet is actually running. A peer on\n                // an older build negotiates it away, and the panel must show that\n                // rather than the capability we shipped.\n                // Optional-called on purpose: a status report must never throw and\n                // take down the panel it exists to populate. Unknown reads as off.\n                perfectForwardSecrecy: this.isRatchetActive?.() === true,\n\n                // Rate limiting\n                rateLimiter: true, // Always enabled\n\n                // Additional info\n                connectionId: this.connectionId,\n                keyFingerprint: this.keyFingerprint,\n                currentSecurityLevel: 'maximum',\n                timestamp: Date.now()\n            };\n\n            // Run the same verified scoring the rest of the app uses, so every\n            // consumer sees one consistent number.\n            const scored = await this.calculateAndReportSecurityLevel();\n\n            if (!scored) {\n                // Not ready yet (not connected/verified, or keys still missing).\n                // isRealData:false tells the UI to keep its previous value rather\n                // than render a placeholder as if it were a measurement.\n                return {\n                    ...featureFlags,\n                    level: 'INITIALIZING',\n                    score: 0,\n                    isRealData: false\n                };\n            }\n\n            return { ...scored, ...featureFlags };\n        } catch (error) {\n            this._secureLog('error', 'Failed to calculate real security level', { error: error.message });\n            throw error;\n        }\n    }\n\n\n\n    /**\n     *   Extract DTLS fingerprint from SDP\n     * This is essential for MITM protection\n     */\n    _extractDTLSFingerprintFromSDP(sdp) {\n        try {\n            if (!sdp || typeof sdp !== 'string') {\n                throw new Error('Invalid SDP provided');\n            }\n\n            // Look for a=fingerprint lines in SDP with more flexible regex\n            const fingerprintRegex = /a=fingerprint:([a-zA-Z0-9-]+)\\s+([A-Fa-f0-9:]+)/g;\n            const fingerprints = [];\n            let match;\n\n            while ((match = fingerprintRegex.exec(sdp)) !== null) {\n                fingerprints.push({\n                    algorithm: match[1].toLowerCase(),\n                    fingerprint: match[2].trim()\n                });\n            }\n\n            if (fingerprints.length === 0) {\n                // Try alternative fingerprint format\n                const altFingerprintRegex = /fingerprint\\s*=\\s*([a-zA-Z0-9-]+)\\s+([A-Fa-f0-9:]+)/gi;\n                while ((match = altFingerprintRegex.exec(sdp)) !== null) {\n                    fingerprints.push({\n                        algorithm: match[1].toLowerCase(),\n                        fingerprint: match[2].trim()\n                    });\n                }\n            }\n\n            if (fingerprints.length === 0) {\n                this._secureLog('warn', 'No DTLS fingerprints found in SDP - this may be normal for some WebRTC implementations', {\n                    sdpLength: sdp.length,\n                    sdpPreview: sdp.substring(0, 200) + '...'\n                });\n                throw new Error('No DTLS fingerprints found in SDP');\n            }\n\n            // Prefer SHA-256, then choose lexicographically so multiple SDP\n            // fingerprint lines resolve to the same deterministic primary value.\n            const primaryFingerprint = [...fingerprints].sort((a, b) => {\n                const aIsSha256 = a.algorithm === 'sha-256';\n                const bIsSha256 = b.algorithm === 'sha-256';\n                if (aIsSha256 !== bIsSha256) {\n                    return aIsSha256 ? -1 : 1;\n                }\n\n                const algorithmComparison = a.algorithm.localeCompare(b.algorithm);\n                if (algorithmComparison !== 0) {\n                    return algorithmComparison;\n                }\n\n                return a.fingerprint.localeCompare(b.fingerprint);\n            })[0];\n\n            return primaryFingerprint.fingerprint;\n        } catch (error) {\n            this._secureLog('error', 'Failed to extract DTLS fingerprint from SDP', { \n                error: error.message,\n                sdpLength: sdp?.length || 0\n            });\n            throw new Error(`DTLS fingerprint extraction failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Validate DTLS fingerprint against expected value\n     * This prevents MITM attacks by ensuring the remote peer has the expected certificate\n     */\n    async _validateDTLSFingerprint(receivedFingerprint, expectedFingerprint, context = 'unknown') {\n        try {\n            if (!receivedFingerprint || !expectedFingerprint) {\n                throw new Error('Missing fingerprint for validation');\n            }\n\n            // Normalize fingerprints (remove colons, convert to lowercase)\n            const normalizedReceived = receivedFingerprint.toLowerCase().replace(/:/g, '');\n            const normalizedExpected = expectedFingerprint.toLowerCase().replace(/:/g, '');\n\n            // SECURITY: this is a comparison, and nothing more \u2014 it must never\n            // change verification state. Matching fingerprints prove continuity of\n            // the DTLS identity across a renegotiation; they say nothing about\n            // whether the user compared the SAS out of band, which is the only\n            // thing that distinguishes the intended peer from anyone else who\n            // completed the handshake. Verification lives in _setVerifiedStatus(),\n            // which enforces that. Do not add a shortcut here.\n            if (normalizedReceived !== normalizedExpected) {\n                this._secureLog('error', 'DTLS fingerprint mismatch - possible MITM attack', {\n                    context: context,\n                    timestamp: Date.now()\n                });\n                \n                throw new Error(`DTLS fingerprint mismatch - possible MITM attack in ${context}`);\n            }\n\n            this._secureLog('info', 'DTLS fingerprint validation successful', {\n                context: context,\n                timestamp: Date.now()\n            });\n\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'DTLS fingerprint validation failed', { \n                error: error.message, \n                context: context \n            });\n            throw error;\n        }\n    }\n\n    /**\n     *   Compute SAS (Short Authentication String) for MITM protection\n     * Uses HKDF with DTLS fingerprints to generate a stable 7-digit verification code\n     * @param {ArrayBuffer|Uint8Array} keyMaterialRaw - Shared secret or key fingerprint data\n     * @param {string} localFP - Local DTLS fingerprint\n     * @param {string} remoteFP - Remote DTLS fingerprint\n     * @returns {Promise<string>} 7-digit SAS code\n     */\n    async _computeSAS(keyMaterialRaw, localFP, remoteFP) {\n        try {\n            \n            if (!keyMaterialRaw) {\n                const missing = [];\n                if (!keyMaterialRaw) missing.push('keyMaterialRaw');\n                throw new Error(`Missing required parameters for SAS computation: ${missing.join(', ')}`);\n            }\n\n            const enc = new TextEncoder();\n            const normalizeFingerprintForSAS = (fingerprint, label) => {\n                if (typeof fingerprint !== 'string' || fingerprint.trim().length === 0) {\n                    throw new Error(\n                        `Security error: ${label} must be a non-empty DTLS fingerprint string for SAS computation`\n                    );\n                }\n\n                return fingerprint.trim().toLowerCase();\n            };\n\n            const normalizedLocalFP = normalizeFingerprintForSAS(localFP, 'localFP');\n            const normalizedRemoteFP = normalizeFingerprintForSAS(remoteFP, 'remoteFP');\n\n            const salt = enc.encode(\n                'webrtc-sas|' + [normalizedLocalFP, normalizedRemoteFP].sort().join('|')\n            );\n\n            let keyBuffer;\n            if (keyMaterialRaw instanceof ArrayBuffer) {\n                keyBuffer = keyMaterialRaw;\n            } else if (keyMaterialRaw instanceof Uint8Array) {\n                keyBuffer = keyMaterialRaw.buffer;\n            } else if (typeof keyMaterialRaw === 'string') {\n                // \u0415\u0441\u043B\u0438 \u044D\u0442\u043E \u0441\u0442\u0440\u043E\u043A\u0430 (\u043D\u0430\u043F\u0440\u0438\u043C\u0435\u0440, keyFingerprint), \u0434\u0435\u043A\u043E\u0434\u0438\u0440\u0443\u0435\u043C \u0435\u0451\n                // \u041F\u0440\u0435\u0434\u043F\u043E\u043B\u0430\u0433\u0430\u0435\u043C, \u0447\u0442\u043E \u044D\u0442\u043E hex \u0441\u0442\u0440\u043E\u043A\u0430\n                const hexString = keyMaterialRaw.replace(/:/g, '').replace(/\\s/g, '');\n                const bytes = new Uint8Array(hexString.length / 2);\n                for (let i = 0; i < hexString.length; i += 2) {\n                    bytes[i / 2] = parseInt(hexString.substr(i, 2), 16);\n                }\n                keyBuffer = bytes.buffer;\n            } else {\n                throw new Error('Invalid keyMaterialRaw type');\n            }\n\n            // \u0418\u0441\u043F\u043E\u043B\u044C\u0437\u0443\u0435\u043C HKDF(SHA-256) \u0447\u0442\u043E\u0431\u044B \u043F\u043E\u043B\u0443\u0447\u0438\u0442\u044C \u0441\u0442\u0430\u0431\u0438\u043B\u044C\u043D\u044B\u0435 64 \u0431\u0438\u0442\u0430 \u044D\u043D\u0442\u0440\u043E\u043F\u0438\u0438 \u0434\u043B\u044F \u043A\u043E\u0434\u0430\n            const key = await crypto.subtle.importKey(\n                'raw',\n                keyBuffer,\n                'HKDF',\n                false,\n                ['deriveBits']\n            );\n\n            const info = enc.encode('p2p-sas-v1');\n            const bits = await crypto.subtle.deriveBits(\n                { name: 'HKDF', hash: 'SHA-256', salt, info },\n                key,\n                64 // 64 \u0431\u0438\u0442\u0430 \u0434\u043E\u0441\u0442\u0430\u0442\u043E\u0447\u043D\u043E \u0434\u043B\u044F 6\u20137 \u0437\u043D\u0430\u043A\u043E\u0432\n            );\n\n            const dv = new DataView(bits);\n            const n = (dv.getUint32(0) ^ dv.getUint32(4)) >>> 0;\n            \n            // Deterministic SAS: both peers derive the same display code from the\n            // same shared key material and canonicalized DTLS fingerprints.\n            const sasCode = String(n % 10_000_000).padStart(7, '0');\n\n\n            this._secureLog('info', 'SAS code computed successfully', {\n                localFP: normalizedLocalFP.substring(0, 16) + '...',\n                remoteFP: normalizedRemoteFP.substring(0, 16) + '...',\n                sasLength: sasCode.length,\n                timestamp: Date.now()\n            });\n\n            return sasCode;\n        } catch (error) {\n            this._secureLog('error', 'SAS computation failed', {\n                error: error.message,\n                keyMaterialType: typeof keyMaterialRaw,\n                hasLocalFP: !!localFP,\n                hasRemoteFP: !!remoteFP,\n                timestamp: Date.now()\n            });\n            throw new Error(`SAS computation failed: ${error.message}`);\n        }\n    }\n\n    // ========================================================================\n    // SBQ2 \u2014 compact descriptor + in-band key exchange\n    // ========================================================================\n\n    /**\n     * Announce a lifecycle change to the application, unless this connection is\n     * muted. See `_emitGlobalEvents` in the constructor for why one would be.\n     */\n    _dispatchAppEvent(event) {\n        // Called as `this._dispatchAppEvent?.(...)` everywhere, deliberately.\n        // Announcing a lifecycle change is the least important thing any of\n        // these paths does \u2014 several of them are teardown \u2014 and an announcement\n        // must never be what stops a connection from being cleaned up.\n        if (!this._emitGlobalEvents) return false;\n        try {\n            return document.dispatchEvent(event);\n        } catch (_) {\n            return false;\n        }\n    }\n\n    /** True once this connection has latched onto the SBQ2 handshake. */\n    _isSbq2() { return this._handshakeMode === 'sbq2'; }\n\n    /**\n     * Latch the handshake format for this connection.\n     *\n     * Called with the format of the first descriptor of the session. Calling it\n     * again with a different value is a bug or an attack, and is refused: this\n     * is the single point that makes \"no downgrade inside a session\" true rather\n     * than merely intended.\n     */\n    _latchHandshakeMode(mode) {\n        if (this._handshakeMode && this._handshakeMode !== mode) {\n            throw new Error(\n                `handshake format cannot change mid-session (${this._handshakeMode} -> ${mode})`\n            );\n        }\n        this._handshakeMode = mode;\n    }\n\n    _sbq2State() {\n        if (!this._sbq2) {\n            this._sbq2 = {\n                role: null,              // KX_ROLE.OFFER | KX_ROLE.ANSWER\n                localDescriptor: null,   // Uint8Array, our descriptor verbatim\n                remoteDescriptor: null,  // Uint8Array, peer's descriptor verbatim\n                localBlob: null,\n                remoteBlob: null,\n                remoteCommitment: null,  // from the peer's descriptor\n                transcript: null,\n                peerEcdhKey: null,\n                peerEcdsaKey: null,\n                blobSent: false,\n                proofSent: false,\n                proofVerified: false,\n                keysDerived: false,\n                pendingProof: null,      // proof that arrived before the transcript existed\n                completed: false,\n                timer: null,\n                startedAt: 0,\n            };\n        }\n        return this._sbq2;\n    }\n\n    /**\n     * Fail closed.\n     *\n     * Every SBQ2 failure lands here: there is no path that logs a warning and\n     * carries on with a weaker session, and no path that retries as SB1. The\n     * connection is torn down and the user is told, because a handshake that\n     * went wrong is exactly the case where continuing is worst.\n     */\n    _sbq2Abort(code, userMessage) {\n        const st = this._sbq2;\n        if (st?.timer) { clearTimeout(st.timer); st.timer = null; }\n        this._secureLog('error', 'SBQ2 handshake aborted', { code });\n        try { this.deliverMessageToUI(userMessage, 'system'); } catch (_) {}\n        try { this.onStatusChange?.('failed'); } catch (_) {}\n        try { this.disconnect(); } catch (_) {}\n    }\n\n    /** SPKI bytes for a public CryptoKey. */\n    async _exportSpki(key) {\n        return new Uint8Array(await crypto.subtle.exportKey('spki', key));\n    }\n\n    /**\n     * Build the key blob for this side and the commitment that goes in the\n     * descriptor. Called while creating our descriptor, so the commitment is\n     * fixed before anything is shown to the user.\n     */\n    async _sbq2BuildLocalBlob(role) {\n        if (!this.ecdhKeyPair?.publicKey || !this.ecdsaKeyPair?.publicKey) {\n            throw new Error('SBQ2: key pairs are not ready');\n        }\n        const blob = encodeKeyBlob({\n            role,\n            ecdhSpki: await this._exportSpki(this.ecdhKeyPair.publicKey),\n            ecdsaSpki: await this._exportSpki(this.ecdsaKeyPair.publicKey),\n        });\n        const digest = async (b) => new Uint8Array(await crypto.subtle.digest('SHA-256', b));\n        const commitment = await sbq2CommitBlob(digest, blob);\n        const st = this._sbq2State();\n        st.role = role;\n        st.localBlob = blob;\n        return { blob, commitment };\n    }\n\n    /**\n     * Turn our gathered localDescription into a compact descriptor.\n     * @returns {{bytes: Uint8Array, text: string}}\n     */\n    async _sbq2BuildDescriptor(type, { bindingTag = null, lifetimeMs = 10 * 60 * 1000 } = {}) {\n        const sdp = this.peerConnection?.localDescription?.sdp;\n        if (!sdp) throw new Error('SBQ2: no local description to encode');\n\n        const role = type === SBQ2_TYPE.OFFER ? KX_ROLE.OFFER : KX_ROLE.ANSWER;\n        const { commitment } = await this._sbq2BuildLocalBlob(role);\n\n        const raw = sbq2ParseSdp(sdp);\n        const bytes = sbq2Encode({\n            type,\n            expiresAtMs: Date.now() + lifetimeMs,\n            sdpFields: { ...raw, candidates: sbq2PruneCandidates(raw.candidates) },\n            commitment,\n            ...(type === SBQ2_TYPE.ANSWER ? { bindingTag } : {}),\n        });\n\n        const st = this._sbq2State();\n        st.localDescriptor = bytes;\n\n        this._secureLog('info', 'SBQ2 descriptor built', {\n            type: type === SBQ2_TYPE.OFFER ? 'offer' : 'answer',\n            bytes: bytes.length,\n            candidates: sbq2PruneCandidates(raw.candidates).length,\n        });\n\n        return { bytes, text: sbq2EncodeText(bytes) };\n    }\n\n    /**\n     * Parse and adopt a peer descriptor. Throws on anything the strict decoder\n     * refuses \u2014 version, reserved values, unknown TLV, trailing bytes, expiry.\n     */\n    _sbq2AdoptRemoteDescriptor(bytes, expectedType) {\n        const desc = sbq2Decode(bytes);\n        if (desc.type !== expectedType) {\n            throw new Error(\n                `expected an ${expectedType === SBQ2_TYPE.OFFER ? 'invitation' : 'answer'}, got the other kind`\n            );\n        }\n        if (!desc.commitment) {\n            // Without a commitment there is nothing binding the in-band key\n            // material to the code the user scanned, which is the entire basis\n            // for moving that material in band. Refuse rather than proceed on\n            // the DTLS fingerprint alone.\n            throw new Error('the invitation carries no key commitment');\n        }\n        const st = this._sbq2State();\n        st.remoteDescriptor = bytes;\n        st.remoteCommitment = desc.commitment;\n        return desc;\n    }\n\n    /**\n     * Run the in-band key exchange. Called once, as soon as the DataChannel\n     * opens, before anything else is allowed to use the channel.\n     */\n    async _runSbq2KeyExchange() {\n        const st = this._sbq2State();\n        if (st.completed || st.blobSent) return;\n        st.startedAt = Date.now();\n\n        if (!st.localBlob || !st.localDescriptor || !st.remoteDescriptor || !st.remoteCommitment) {\n            this._sbq2Abort('incomplete_state',\n                'The secure handshake could not start because the connection setup is incomplete. Please start a new invitation.');\n            return;\n        }\n\n        st.timer = setTimeout(() => {\n            if (!st.completed) {\n                this._sbq2Abort('timeout',\n                    'The other side did not complete the secure handshake in time. Please try connecting again.');\n            }\n        }, EnhancedSecureWebRTCManager.SBQ2_KEY_EXCHANGE_TIMEOUT_MS);\n\n        try {\n            this.dataChannel.send(JSON.stringify({\n                type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_BLOB,\n                v: 2,\n                blob: window.EnhancedSecureCryptoUtils.arrayBufferToBase64(st.localBlob.buffer.slice(\n                    st.localBlob.byteOffset, st.localBlob.byteOffset + st.localBlob.byteLength)),\n            }));\n            st.blobSent = true;\n            this._secureLog('info', 'SBQ2 key blob sent', { bytes: st.localBlob.length });\n        } catch (error) {\n            this._sbq2Abort('blob_send_failed',\n                'The secure handshake could not be sent. Please try connecting again.');\n        }\n    }\n\n    /**\n     * Handle the two in-band handshake frames. These are the only frames\n     * accepted before keys exist, so everything they touch is validated here and\n     * nothing is acted on before the commitment check passes.\n     */\n    async _sbq2HandleHandshakeFrame(parsed) {\n        const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n        const st = this._sbq2State();\n\n        if (!this._isSbq2()) {\n            // An SB1 session must never accept these: it has no commitment to\n            // check them against, which would make them unauthenticated key\n            // material.\n            this._secureLog('error', 'Rejected SBQ2 handshake frame on a non-SBQ2 session', {\n                messageType: parsed?.type,\n            });\n            return;\n        }\n\n        try {\n            if (parsed.type === T.KEY_BLOB) {\n                if (st.remoteBlob) {\n                    // A second blob would mean either a confused peer or an\n                    // attempt to replace key material after it was accepted.\n                    this._sbq2Abort('duplicate_blob',\n                        'The secure handshake was sent twice. The connection has been closed for safety.');\n                    return;\n                }\n                const bytes = new Uint8Array(window.EnhancedSecureCryptoUtils.base64ToArrayBuffer(String(parsed.blob || '')));\n\n                // COMMITMENT FIRST. Nothing below this line may run against\n                // unverified bytes: not decodeKeyBlob, not importKey.\n                await verifyBlobCommitment(crypto.subtle, bytes, st.remoteCommitment);\n\n                const blob = decodeKeyBlob(bytes);\n                const expectedRole = st.role === KX_ROLE.OFFER ? KX_ROLE.ANSWER : KX_ROLE.OFFER;\n                if (blob.role !== expectedRole) {\n                    this._sbq2Abort('role_mismatch',\n                        'The other side sent the wrong kind of handshake. The connection has been closed for safety.');\n                    return;\n                }\n\n                st.remoteBlob = bytes;\n                st.peerEcdhKey = await crypto.subtle.importKey(\n                    'spki', blob.ecdhSpki, { name: 'ECDH', namedCurve: 'P-384' }, false, []);\n                st.peerEcdsaKey = await crypto.subtle.importKey(\n                    'spki', blob.ecdsaSpki, { name: 'ECDSA', namedCurve: 'P-384' }, false, ['verify']);\n\n                await this._sbq2CompleteExchange();\n                return;\n            }\n\n            if (parsed.type === T.KEY_PROOF) {\n                const sig = new Uint8Array(window.EnhancedSecureCryptoUtils.base64ToArrayBuffer(String(parsed.sig || '')));\n                if (!st.transcript || !st.peerEcdsaKey) {\n                    // The proof can legitimately overtake our own processing;\n                    // hold it until the transcript exists, then verify.\n                    st.pendingProof = sig;\n                    return;\n                }\n                await this._sbq2VerifyProof(sig);\n                return;\n            }\n        } catch (error) {\n            const code = error?.code || 'handshake_failed';\n            const message = code === 'commitment_mismatch'\n                ? 'The key material does not match the invitation you scanned. This can mean someone tampered with the connection, so it has been closed.'\n                : 'The secure handshake failed. The connection has been closed for safety.';\n            this._sbq2Abort(code, message);\n        }\n    }\n\n    /**\n     * Both blobs are in hand and verified: define the transcript, derive\n     * everything from it, and prove possession of the identity key.\n     */\n    async _sbq2CompleteExchange() {\n        const st = this._sbq2State();\n        if (st.keysDerived || !st.remoteBlob || !st.localBlob) return;\n\n        // Ratchet capability is IMPLIED by the format, not advertised in it.\n        //\n        // The SB1 descriptor carries `dr` because a 5.6.x peer might not know\n        // about the ratchet, and there is no server to roll both ends at once.\n        // SBQ2 has no such ambiguity: it postdates RATCHET_VERSION 1 entirely, so\n        // anything that can produce this handshake can ratchet. Saying so here\n        // costs zero descriptor bytes and \u2014 more importantly \u2014 stops\n        // _initializeRatchet from taking its silent \"peer is old, fall back to\n        // static keys\" path, which is a downgrade nothing in an SBQ2 session\n        // should ever reach.\n        this._peerSupportsRatchet = true;\n\n        const isOffer = st.role === KX_ROLE.OFFER;\n        st.transcript = buildTranscript({\n            offerDescriptor: isOffer ? st.localDescriptor : st.remoteDescriptor,\n            answerDescriptor: isOffer ? st.remoteDescriptor : st.localDescriptor,\n            offerBlob: isOffer ? st.localBlob : st.remoteBlob,\n            answerBlob: isOffer ? st.remoteBlob : st.localBlob,\n        });\n\n        // The salt is derived, never sent. That binds every session key to both\n        // DTLS fingerprints and every candidate in both descriptors.\n        this.sessionSalt = await deriveTranscriptSalt(crypto.subtle, st.transcript);\n\n        this.peerPublicKey = st.peerEcdhKey;\n        this.peerECDHPublicKey = st.peerEcdhKey;\n\n        const derivedKeys = await window.EnhancedSecureCryptoUtils.deriveSharedKeys(\n            this.ecdhKeyPair.privateKey, st.peerEcdhKey, this.sessionSalt);\n\n        await this._setEncryptionKeys(\n            derivedKeys.messageKey, derivedKeys.macKey, derivedKeys.metadataKey, derivedKeys.fingerprint);\n\n        await this._initializeRatchet(derivedKeys, /* isInitiator */ isOffer);\n        st.keysDerived = true;\n\n        // Identity proof: one signature over the whole transcript, replacing the\n        // old challenge/response. Sent after our keys exist so a failure here\n        // cannot leave us half-configured.\n        const sig = new Uint8Array(await crypto.subtle.sign(\n            { name: 'ECDSA', hash: 'SHA-384' }, this.ecdsaKeyPair.privateKey, proofPayload(st.transcript)));\n        this.dataChannel.send(JSON.stringify({\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_PROOF,\n            sig: window.EnhancedSecureCryptoUtils.arrayBufferToBase64(sig.buffer),\n        }));\n        st.proofSent = true;\n\n        if (st.pendingProof) {\n            const held = st.pendingProof;\n            st.pendingProof = null;\n            await this._sbq2VerifyProof(held);\n        }\n    }\n\n    /** Verify the peer's transcript signature, then release the session. */\n    async _sbq2VerifyProof(sig) {\n        const st = this._sbq2State();\n        if (st.proofVerified) return;\n\n        const ok = await crypto.subtle.verify(\n            { name: 'ECDSA', hash: 'SHA-384' }, st.peerEcdsaKey, sig, proofPayload(st.transcript));\n        if (!ok) {\n            this._sbq2Abort('bad_proof',\n                'The other side could not prove it owns its identity key. The connection has been closed for safety.');\n            return;\n        }\n        st.proofVerified = true;\n\n        // SAS over the transcript. Everything that travelled out of band, in\n        // both directions, plus both blobs, is inside these digits.\n        this.verificationCode = await computeTranscriptSas(crypto.subtle, {\n            ecdhPrivateKey: this.ecdhKeyPair.privateKey,\n            peerEcdhPublicKey: st.peerEcdhKey,\n            transcript: st.transcript,\n        });\n\n        const localFP = this.expectedDTLSFingerprint;\n        const remoteFP = this._peerDTLSFingerprint;\n        if (localFP && remoteFP) this._setSASMaterialReady(localFP, remoteFP);\n\n        st.completed = true;\n        if (st.timer) { clearTimeout(st.timer); st.timer = null; }\n\n        this.securityFeatures.hasMutualAuth = true;\n        this.securityFeatures.hasMetadataProtection = true;\n        this.securityFeatures.hasEnhancedReplayProtection = true;\n\n        this._secureLog('info', 'SBQ2 in-band key exchange complete', {\n            elapsedMs: Date.now() - st.startedAt,\n            ratchetActive: this.isRatchetActive?.() === true,\n        });\n\n        try { this.onKeyExchange?.(this.keyFingerprint); } catch (_) {}\n        this._notifyVerificationReadyIfPossible();\n        this.initiateVerification();\n    }\n\n    /**\n     * UTILITY: Decode hex keyFingerprint to Uint8Array for SAS computation\n     * @param {string} hexString - Hex encoded keyFingerprint (e.g., \"aa:bb:cc:dd\")\n     * @returns {Uint8Array} Decoded bytes\n     */\n    _decodeKeyFingerprint(hexString) {\n        try {\n            if (!hexString || typeof hexString !== 'string') {\n                throw new Error('Invalid hex string provided');\n            }\n\n            // Use the utility from EnhancedSecureCryptoUtils\n            return window.EnhancedSecureCryptoUtils.hexToUint8Array(hexString);\n        } catch (error) {\n            this._secureLog('error', 'Key fingerprint decoding failed', {\n                error: error.message,\n                inputType: typeof hexString,\n                inputLength: hexString?.length || 0\n            });\n            throw new Error(`Key fingerprint decoding failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Emergency key wipe on fingerprint mismatch\n     * This ensures no sensitive data remains if MITM is detected\n     */\n    _emergencyWipeOnFingerprintMismatch(reason = 'DTLS fingerprint mismatch') {\n        try {\n            this._secureLog('error', '\uD83D\uDEA8 EMERGENCY: Initiating security wipe due to fingerprint mismatch', {\n                reason: reason,\n                timestamp: Date.now()\n            });\n\n            // Wipe all cryptographic materials\n            this._secureWipeKeys();\n            this._secureWipeMemory(this.encryptionKey, 'emergency_wipe');\n            this._secureWipeMemory(this.macKey, 'emergency_wipe');\n            this._secureWipeMemory(this.metadataKey, 'emergency_wipe');\n            \n            //   Wipe ephemeral keys for PFS\n            this._wipeEphemeralKeys();\n            \n            //   Hard wipe old keys for PFS\n            this._hardWipeOldKeys();\n\n            // Reset verification status\n            this.isVerified = null;\n            this.verificationCode = null;\n            this.keyFingerprint = null;\n            this.connectionId = null;\n            this.expectedDTLSFingerprint = null;\n            this._peerDTLSFingerprint = null;\n\n            // Disconnect immediately\n            this.disconnect();\n\n            // Notify UI about security breach\n            this.deliverMessageToUI('\uD83D\uDEA8 SECURITY BREACH: Connection terminated due to fingerprint mismatch. Possible MITM attack detected!', 'system');\n\n        } catch (error) {\n            this._secureLog('error', 'Failed to perform emergency wipe', { error: error.message });\n        }\n    }\n\n    // REMOVED: setExpectedDTLSFingerprint(). It overwrote `expectedDTLSFingerprint`\n    // with a caller-supplied value, and that field is our OWN local fingerprint \u2014\n    // the localFP that _computeSAS mixes into the safety code. Writing a peer's\n    // fingerprint into it would silently produce a SAS that no longer matches the\n    // session, i.e. break the very check it claimed to strengthen. It had no\n    // callers and was not part of any documented API. Out-of-band pinning, if it\n    // is ever wanted, belongs in its own field alongside _peerDTLSFingerprint.\n\n    /**\n     * Our own DTLS fingerprint, for the user to share out of band if they want to\n     * compare it manually. This is the local endpoint's value, not the peer's.\n     */\n    getCurrentDTLSFingerprint() {\n        try {\n            if (!this.expectedDTLSFingerprint) {\n                throw new Error('No DTLS fingerprint available - connection not established');\n            }\n\n            return this.expectedDTLSFingerprint;\n        } catch (error) {\n            this._secureLog('error', 'Failed to get current DTLS fingerprint', { error: error.message });\n            throw error;\n        }\n    }\n\n    /**\n     * DEBUGGING: Temporarily disable strict DTLS validation\n     * This should only be used for debugging connection issues\n     */\n    disableStrictDTLSValidation() {\n        this.strictDTLSValidation = false;\n        this._secureLog('warn', '\u26A0\uFE0F Strict DTLS validation disabled - security reduced', {\n            timestamp: Date.now()\n        });\n        this.deliverMessageToUI('\u26A0\uFE0F DTLS validation disabled for debugging', 'system');\n    }\n\n    /**\n     * SECURITY: Re-enable strict DTLS validation\n     */\n    enableStrictDTLSValidation() {\n        this.strictDTLSValidation = true;\n        this._secureLog('info', '\u2705 Strict DTLS validation re-enabled', {\n            timestamp: Date.now()\n        });\n        this.deliverMessageToUI('\u2705 DTLS validation re-enabled', 'system');\n    }\n\n    /**\n     *   Generate ephemeral ECDH keys for Perfect Forward Secrecy\n     * This ensures each session has unique, non-persistent keys\n     */\n    /**\n     * Bring up the Double Ratchet once the handshake has produced a shared\n     * secret. Both peers must have advertised support (`dr` in the offer and the\n     * answer): a session where only one side ratchets cannot decrypt anything, so\n     * a missing flag means the peer is on an older build and both sides stay on\n     * the static-key path.\n     *\n     * Failure here is deliberately not fatal. Forward secrecy is a large\n     * improvement, but a session that falls back to the previous scheme is the\n     * behaviour of every release up to 5.6.x \u2014 refusing to connect at all would\n     * be a worse outcome than connecting with the security users already had.\n     * The status is surfaced so the difference is visible rather than silent.\n     */\n    async _initializeRatchet(derivedKeys, isInitiator) {\n        const ratchetRoot = derivedKeys?.ratchetRoot;\n        if (!ratchetRoot) return false;\n\n        if (!this._peerSupportsRatchet) {\n            this._secureLog('warn', 'Peer did not advertise Double Ratchet \u2014 falling back to static session keys', {\n                localVersion: EnhancedSecureWebRTCManager.RATCHET_VERSION\n            });\n            window.EnhancedSecureCryptoUtils.zeroizeBuffer(ratchetRoot);\n            return false;\n        }\n\n        try {\n            const peerPublicKey = this.peerPublicKey || this.peerECDHPublicKey;\n            if (!peerPublicKey || !this.ecdhKeyPair?.privateKey) {\n                throw new Error('handshake ECDH keys unavailable');\n            }\n\n            const ratchet = new DoubleRatchet();\n            await ratchet.init({\n                sharedSecret: ratchetRoot,\n                sessionSalt: new Uint8Array(this.sessionSalt || []),\n                selfPrivateKey: this.ecdhKeyPair.privateKey,\n                remotePublicKey: peerPublicKey,\n                isInitiator\n            });\n\n            this._ratchet = ratchet;\n            this.securityFeatures.hasPFS = true;\n            this._secureLog('info', '\uD83D\uDD10 Double Ratchet active \u2014 per-message forward secrecy enabled', {\n                role: isInitiator ? 'initiator' : 'responder'\n            });\n            return true;\n        } catch (error) {\n            this._ratchet = null;\n            this.securityFeatures.hasPFS = false;\n            this._secureLog('error', 'Double Ratchet initialisation failed \u2014 continuing with static session keys', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return false;\n        } finally {\n            // The root has been folded into the ratchet (or abandoned); either\n            // way it must not stay in the heap.\n            window.EnhancedSecureCryptoUtils.zeroizeBuffer(ratchetRoot);\n        }\n    }\n\n    /** True when messages are protected by the ratchet rather than static keys. */\n    isRatchetActive() {\n        return !!this._ratchet?.isInitialised;\n    }\n\n    async _generateEphemeralECDHKeys() {\n        try {\n            this._secureLog('info', '\uD83D\uDD11 Generating ephemeral ECDH keys for PFS', {\n                sessionStartTime: this.sessionStartTime,\n                timestamp: Date.now()\n            });\n\n            // Generate new ephemeral ECDH key pair\n            const ephemeralKeyPair = await window.EnhancedSecureCryptoUtils.generateECDHKeyPair();\n            \n            if (!ephemeralKeyPair || !this._validateKeyPairConstantTime(ephemeralKeyPair)) {\n                throw new Error('Ephemeral ECDH key pair validation failed');\n            }\n\n            // Store ephemeral keys with session binding\n            const sessionId = this.currentSession?.sessionId || `session_${Date.now()}`;\n            this.ephemeralKeyPairs.set(sessionId, {\n                keyPair: ephemeralKeyPair,\n                timestamp: Date.now(),\n                sessionId: sessionId\n            });\n\n            this._secureLog('info', '\u2705 Ephemeral ECDH keys generated for PFS', {\n                timestamp: Date.now()\n            });\n\n            return ephemeralKeyPair;\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to generate ephemeral ECDH keys', { error: error.message });\n            throw new Error(`Ephemeral key generation failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Hard wipe old keys for real PFS\n     * This prevents retrospective decryption attacks\n     */\n    async _hardWipeOldKeys() {\n        try {\n            this._secureLog('info', '\uD83E\uDDF9 Performing hard wipe of old keys for PFS', {\n                oldKeysCount: this.oldKeys.size,\n                timestamp: Date.now()\n            });\n\n            // Hard wipe all old keys\n            for (const [version, keySet] of this.oldKeys.entries()) {\n                if (keySet.encryptionKey) {\n                    this._secureWipeMemory(keySet.encryptionKey, 'pfs_key_wipe');\n                }\n                if (keySet.macKey) {\n                    this._secureWipeMemory(keySet.macKey, 'pfs_key_wipe');\n                }\n                if (keySet.metadataKey) {\n                    this._secureWipeMemory(keySet.metadataKey, 'pfs_key_wipe');\n                }\n                \n                // Clear references\n                keySet.encryptionKey = null;\n                keySet.macKey = null;\n                keySet.metadataKey = null;\n                keySet.keyFingerprint = null;\n            }\n\n            // Clear the oldKeys map completely\n            this.oldKeys.clear();\n\n            // Schedule natural cleanup\n            await this._performNaturalCleanup();\n\n            this._secureLog('info', '\u2705 Hard wipe of old keys completed for PFS', {\n                timestamp: Date.now()\n            });\n\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to perform hard wipe of old keys', { error: error.message });\n        }\n    }\n\n    /**\n     *   Wipe ephemeral keys when session ends\n     * This ensures session-specific keys are destroyed\n     */\n    async _wipeEphemeralKeys() {\n        try {\n            this._secureLog('info', '\uD83E\uDDF9 Wiping ephemeral keys for PFS', {\n                ephemeralKeysCount: this.ephemeralKeyPairs.size,\n                timestamp: Date.now()\n            });\n\n            // Wipe all ephemeral key pairs\n            for (const [sessionId, keyData] of this.ephemeralKeyPairs.entries()) {\n                if (keyData.keyPair?.privateKey) {\n                    this._secureWipeMemory(keyData.keyPair.privateKey, 'ephemeral_key_wipe');\n                }\n                if (keyData.keyPair?.publicKey) {\n                    this._secureWipeMemory(keyData.keyPair.publicKey, 'ephemeral_key_wipe');\n                }\n                \n                // Clear references\n                keyData.keyPair = null;\n                keyData.timestamp = null;\n                keyData.sessionId = null;\n            }\n\n            // Clear the ephemeral keys map\n            this.ephemeralKeyPairs.clear();\n\n            // Schedule natural cleanup\n            await this._performNaturalCleanup();\n\n            this._secureLog('info', '\u2705 Ephemeral keys wiped for PFS', {\n                timestamp: Date.now()\n            });\n\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to wipe ephemeral keys', { error: error.message });\n        }\n    }\n\n    /**\n     *   Encrypt file messages with AAD\n     * This ensures file messages are properly authenticated and bound to session\n     */\n    async _encryptFileMessage(messageData, aad) {\n        try {\n            if (!this.encryptionKey) {\n                throw new Error('No encryption key available for file message');\n            }\n\n            // Convert message to string if it's an object\n            const messageString = typeof messageData === 'string' ? messageData : JSON.stringify(messageData);\n            \n            // Encrypt with AAD using AES-GCM\n            const encryptedData = await window.EnhancedSecureCryptoUtils.encryptDataWithAAD(\n                messageString, \n                this.encryptionKey, \n                aad\n            );\n            \n            // Create encrypted message wrapper\n            const encryptedMessage = {\n                type: 'encrypted_file_message',\n                encryptedData: encryptedData,\n                aad: aad,\n                timestamp: Date.now(),\n                keyFingerprint: this.keyFingerprint\n            };\n            \n            return JSON.stringify(encryptedMessage);\n        } catch (error) {\n            this._secureLog('error', 'Failed to encrypt file message', { error: error.message });\n            throw new Error(`File message encryption failed: ${error.message}`);\n        }\n    }\n\n    /**\n     *   Decrypt file messages with AAD validation\n     * This ensures file messages are properly authenticated and bound to session\n     */\n    async _decryptFileMessage(encryptedMessageString) {\n        try {\n            const encryptedMessage = JSON.parse(encryptedMessageString);\n            \n            if (encryptedMessage.type !== 'encrypted_file_message') {\n                throw new Error('Invalid encrypted file message type');\n            }\n            \n            // Validate key fingerprint\n            if (encryptedMessage.keyFingerprint !== this.keyFingerprint) {\n                throw new Error('Key fingerprint mismatch in encrypted file message');\n            }\n            \n            //   Validate AAD with sequence number\n            const aad = this._validateMessageAAD(encryptedMessage.aad, 'file_message');\n            \n            if (!this.encryptionKey) {\n                throw new Error('No encryption key available for file message decryption');\n            }\n            \n            // Decrypt with AAD validation\n            const decryptedData = await window.EnhancedSecureCryptoUtils.decryptDataWithAAD(\n                encryptedMessage.encryptedData,\n                this.encryptionKey,\n                encryptedMessage.aad\n            );\n            \n            return {\n                decryptedData: decryptedData,\n                aad: aad\n            };\n        } catch (error) {\n            this._secureLog('error', 'Failed to decrypt file message', { error: error.message });\n            throw new Error(`File message decryption failed: ${error.message}`);\n        }\n    }\n\n    /**\n     * Validates encryption keys readiness\n     * @param {boolean} throwError - whether to throw on not ready\n     * @returns {boolean} true if keys are ready\n     */\n    _validateEncryptionKeys(throwError = true) {\n        const hasAllKeys = !!(this.encryptionKey && this.macKey && this.metadataKey);\n        \n        if (!hasAllKeys && throwError) {\n            throw new Error('Encryption keys not initialized');\n        }\n        \n        return hasAllKeys;\n    }\n\n    /**\n     * Attempt to reinitialize encryption keys if missing\n     * Uses existing ECDH key pair, peer public key, and session salt\n     * Returns true if keys were (re)initialized successfully\n     */\n    async _tryReinitializeEncryptionKeys() {\n        try {\n            // If keys already present, nothing to do\n            if (this.encryptionKey && this.macKey && this.metadataKey) {\n                return true;\n            }\n\n            // Require ECDH materials and session salt to derive keys\n            const hasECDH = !!(this.ecdhKeyPair?.privateKey && (this.peerPublicKey || this.peerECDHPublicKey));\n            const peerPublicKey = this.peerPublicKey || this.peerECDHPublicKey;\n            if (!hasECDH || !peerPublicKey || !this.sessionSalt) {\n                return false;\n            }\n\n            // Derive fresh keys\n            const derivedKeys = await window.EnhancedSecureCryptoUtils.deriveSharedKeys(\n                this.ecdhKeyPair.privateKey,\n                peerPublicKey,\n                this.sessionSalt\n            );\n\n            await this._setEncryptionKeys(\n                derivedKeys.messageKey,\n                derivedKeys.macKey,\n                derivedKeys.metadataKey,\n                derivedKeys.fingerprint\n            );\n\n            return !!(this.encryptionKey && this.macKey && this.metadataKey);\n        } catch (error) {\n            this._secureLog('error', 'Failed to reinitialize encryption keys', { error: error.message });\n            return false;\n        }\n    }\n\n    /**\n     * Checks whether a message is a file-transfer message\n     * @param {string|object} data - message payload\n     * @returns {boolean} true if it's a file message\n     */\n    _isFileMessage(data) {\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n                return parsed.type && parsed.type.startsWith('file_');\n            } catch {\n                return false;\n            }\n        }\n        \n        if (typeof data === 'object' && data.type) {\n            return data.type.startsWith('file_');\n        }\n        \n        return false;\n    }\n\n    /**\n     * Checks whether a message is a system message\n     * @param {string|object} data - message payload  \n     * @returns {boolean} true if it's a system message\n     */\n    _isSystemMessage(data) {\n        const systemTypes = [\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.HEARTBEAT,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_RESPONSE,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_CONFIRMED,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.PEER_DISCONNECT,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.SECURITY_UPGRADE,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,\n            EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_READY\n        ];\n\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n                return systemTypes.includes(parsed.type);\n            } catch {\n                return false;\n            }\n        }\n        \n        if (typeof data === 'object' && data.type) {\n            return systemTypes.includes(data.type);\n        }\n        \n        return false;\n    }\n\n    /**\n     * Checks whether a message is fake traffic\n     * @param {any} data - message payload\n     * @returns {boolean} true if it's a fake message\n     */\n    _isFakeMessage(data) {\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n                return parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.FAKE || \n                       parsed.isFakeTraffic === true;\n            } catch {\n                return false;\n            }\n        }\n        \n        if (typeof data === 'object' && data !== null) {\n            return data.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.FAKE || \n                   data.isFakeTraffic === true;\n        }\n        \n        return false;\n    }\n\n    /**\n     * Safely executes an operation with error handling\n     * @param {Function} operation - operation to execute\n     * @param {string} errorMessage - error message to log\n     * @param {any} fallback - default value on error\n     * @returns {any} operation result or fallback\n     */\n    _withErrorHandling(operation, errorMessage, fallback = null) {\n        try {\n            return operation();\n        } catch (error) {\n            if (this._debugMode) {\n                this._secureLog('error', '\u274C ${errorMessage}:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n            return fallback;\n        }\n    }\n\n    /**\n     * Safely executes an async operation with error handling\n     * @param {Function} operation - async operation\n     * @param {string} errorMessage - error message to log\n     * @param {any} fallback - default value on error\n     * @returns {Promise<any>} operation result or fallback\n     */\n    async _withAsyncErrorHandling(operation, errorMessage, fallback = null) {\n        try {\n            return await operation();\n        } catch (error) {\n            if (this._debugMode) {\n                this._secureLog('error', '\u274C ${errorMessage}:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n            return fallback;\n        }\n    }\n\n\n    /**\n     * Extracts message type from data\n     * @param {string|object} data - message data\n     * @returns {string|null} message type or null\n     */\n    _getMessageType(data) {\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n                return parsed.type || null;\n            } catch {\n                return null;\n            }\n        }\n        \n        if (typeof data === 'object' && data !== null) {\n            return data.type || null;\n        }\n        \n        return null;\n    }\n\n    /**\n     * Resets notification flags for a new connection\n     */\n    _resetNotificationFlags() {\n        this.lastSecurityLevelNotification = null;\n        this.verificationNotificationSent = false;\n        this.verificationInitiationSent = false;\n        this._verificationUiOpened = false;\n        this._sasLocalFingerprint = null;\n        this._sasRemoteFingerprint = null;\n        this.disconnectNotificationSent = false;\n        this.reconnectionFailedNotificationSent = false;\n        this.peerDisconnectNotificationSent = false;\n        this.connectionClosedNotificationSent = false;\n        this.fakeTrafficDisabledNotificationSent = false;\n        this.advancedFeaturesDisabledNotificationSent = false;\n        this.securityUpgradeNotificationSent = false;\n        this.lastSecurityUpgradeStage = null;\n        this.securityCalculationNotificationSent = false;\n        this.lastSecurityCalculationLevel = null;\n    }\n\n    /**\n     * Checks whether a message was filtered out\n     * @param {any} result - processing result\n     * @returns {boolean} true if filtered\n     */\n    _isFilteredMessage(result) {\n        const filteredResults = Object.values(EnhancedSecureWebRTCManager.FILTERED_RESULTS);\n        return filteredResults.includes(result);\n    }\n    /**\n     *   Enhanced log cleanup with security checks\n     */\n    _cleanupLogs() {\n        //   More aggressive cleanup to prevent data accumulation\n        if (this._logCounts.size > 500) {\n            this._logCounts.clear();\n            this._secureLog('debug', '\uD83E\uDDF9 Log counts cleared due to size limit');\n        }\n        \n        //   Clean up old log entries to prevent memory leaks\n        const now = Date.now();\n        const maxAge = 300000; // 5 minutes\n        \n        //   Check for suspicious log patterns\n        let suspiciousCount = 0;\n        for (const [key, count] of this._logCounts.entries()) {\n            if (count > 10) {\n                suspiciousCount++;\n            }\n        }\n        \n        //   Emergency cleanup if too many suspicious patterns\n        if (suspiciousCount > 20) {\n            this._logCounts.clear();\n            this._secureLog('warn', '\uD83D\uDEA8 Emergency log cleanup due to suspicious patterns');\n        }\n        \n        //   Reset security violation counter if system is stable\n        if (this._logSecurityViolations > 0 && suspiciousCount < 5) {\n            this._logSecurityViolations = Math.max(0, this._logSecurityViolations - 1);\n        }\n        \n        //   Clean up old IVs periodically\n        if (!this._lastIVCleanupTime || Date.now() - this._lastIVCleanupTime > 300000) { // Every 5 minutes\n            this._cleanupOldIVs();\n            this._lastIVCleanupTime = Date.now();\n        }\n        \n        //   Periodic secure memory cleanup\n        if (!this._secureMemoryManager.memoryStats.lastCleanup || \n            Date.now() - this._secureMemoryManager.memoryStats.lastCleanup > 600000) { // Every 10 minutes\n            // Schedule async cleanup without blocking\n            this._performPeriodicMemoryCleanup().catch(error => {\n                this._secureLog('error', 'Periodic cleanup failed', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n            this._secureMemoryManager.memoryStats.lastCleanup = Date.now();\n        }\n    }\n    /**\n     *   Secure logging stats with sensitive data protection\n     */\n    _getLoggingStats() {\n        //   Only return safe statistics\n        const stats = {\n            isProductionMode: this._isProductionMode,\n            debugMode: this._debugMode,\n            currentLogLevel: this._currentLogLevel,\n            logCountsSize: this._logCounts.size,\n            maxLogCount: this._maxLogCount,\n            securityViolations: this._logSecurityViolations || 0,\n            maxSecurityViolations: this._maxLogSecurityViolations || 3,\n            systemStatus: this._currentLogLevel === -1 ? 'DISABLED' : 'ACTIVE'\n        };\n        \n        //   Sanitize any potentially sensitive data\n        const sanitizedStats = {};\n        for (const [key, value] of Object.entries(stats)) {\n            if (typeof value === 'string' && this._containsSensitiveContent(value)) {\n                sanitizedStats[key] = '[SENSITIVE_DATA_REDACTED]';\n            } else {\n                sanitizedStats[key] = value;\n            }\n        }\n        \n        return sanitizedStats;\n    }\n    /**\n     *   Enhanced emergency logging disable with cleanup\n     */\n    async _emergencyDisableLogging() {\n        //   Immediately disable all logging levels\n        this._currentLogLevel = -1;\n        \n        //   Clear all log data to prevent memory leaks\n        this._logCounts.clear();\n        \n        //   Clear any cached sensitive data\n        if (this._logSecurityViolations) {\n            this._logSecurityViolations = 0;\n        }\n        \n        //   Override _secureLog to a secure no-op\n        this._secureLog = () => {\n            //   Only allow emergency console errors\n            if (arguments[0] === 'error' && this._originalConsole?.error) {\n                this._originalConsole.error('\uD83D\uDEA8 SECURITY: Logging system disabled - potential data exposure prevented');\n            }\n        };\n        \n        //   Store original functions before overriding\n        this._originalSanitizeString = this._sanitizeString;\n        this._originalSanitizeLogData = this._sanitizeLogData;\n        this._originalAuditLogMessage = this._auditLogMessage;\n        this._originalContainsSensitiveContent = this._containsSensitiveContent;\n        \n        //   Override all logging methods to prevent bypass\n        this._sanitizeString = () => '[LOGGING_DISABLED]';\n        this._sanitizeLogData = () => ({ error: 'LOGGING_DISABLED' });\n        this._auditLogMessage = () => false;\n        this._containsSensitiveContent = () => true; // Block everything\n        \n        //   Schedule natural cleanup\n        await this._performNaturalCleanup();\n        \n        //   Notify about the emergency shutdown\n        this._originalConsole?.error?.('\uD83D\uDEA8 CRITICAL: Secure logging system disabled due to potential data exposure');\n    }\n\n    /**\n     *   Reset logging system after emergency shutdown\n     * Use this function to restore normal logging functionality\n     */\n    _resetLoggingSystem() {\n        this._secureLog('info', '\uD83D\uDD27 Resetting logging system after emergency shutdown');\n        \n        // Restore original sanitize functions\n        this._sanitizeString = this._originalSanitizeString || ((str) => str);\n        this._sanitizeLogData = this._originalSanitizeLogData || ((data) => data);\n        this._auditLogMessage = this._originalAuditLogMessage || (() => true);\n        this._containsSensitiveContent = this._originalContainsSensitiveContent || (() => false);\n        \n        // Reset security violation counters\n        this._logSecurityViolations = 0;\n        \n        this._secureLog('info', '\u2705 Logging system reset successfully');\n    }\n    /**\n     *   Enhanced audit function for log message security\n     */\n    _auditLogMessage(message, data) {\n        if (!data || typeof data !== 'object') return true;\n        \n        //   Convert to string and check for sensitive content\n        const dataString = JSON.stringify(data);\n        \n        //   Check message itself for sensitive content\n        if (this._containsSensitiveContent(message)) {\n            this._emergencyDisableLogging();\n            this._originalConsole?.error?.('\uD83D\uDEA8 SECURITY BREACH: Sensitive content detected in log message');\n            return false;\n        }\n        \n        //   Check data string for sensitive content\n        if (this._containsSensitiveContent(dataString)) {\n            this._emergencyDisableLogging();\n            this._originalConsole?.error?.('\uD83D\uDEA8 SECURITY BREACH: Sensitive content detected in log data');\n            return false;\n        }\n        \n        //   Enhanced dangerous pattern detection\n        const dangerousPatterns = [\n            'secret', 'token', 'password', 'credential', 'auth',\n            'fingerprint', 'salt', 'signature', 'private_key', 'api_key', 'private',\n            'encryption', 'mac', 'metadata', 'session', 'jwt', 'bearer',\n            'key', 'hash', 'digest', 'nonce', 'iv', 'cipher'\n        ];\n        \n        const dataStringLower = dataString.toLowerCase();\n        \n        for (const pattern of dangerousPatterns) {\n            if (dataStringLower.includes(pattern) && !this._safeFieldsWhitelist.has(pattern)) {\n                this._emergencyDisableLogging();\n                this._originalConsole?.error?.(`\uD83D\uDEA8 SECURITY BREACH: Dangerous pattern detected in log: ${pattern}`);\n                return false;\n            }\n        }\n        \n        //   Check for high entropy values in data\n        for (const [key, value] of Object.entries(data)) {\n            if (typeof value === 'string' && this._hasHighEntropy(value)) {\n                this._emergencyDisableLogging();\n                this._originalConsole?.error?.(`\uD83D\uDEA8 SECURITY BREACH: High entropy value detected in log field: ${key}`);\n                return false;\n            }\n        }\n        \n        return true;\n    }\n\n    initializeFileTransfer() {\n        try {\n            if (this._sessionAlive === false) {\n                return;\n            }\n\n            this._secureLog('info', '\uD83D\uDD27 Initializing Enhanced Secure File Transfer system...');\n\n            if (this.fileTransferSystem) {\n                this._secureLog('info', '\u2705 File transfer system already initialized');\n                return;\n            }\n            \n            //   Step-by-step readiness check\n            const channelReady = !!(this.dataChannel && this.dataChannel.readyState === 'open');\n            if (!channelReady) {\n                this._secureLog('warn', '\u26A0\uFE0F Data channel not open, deferring file transfer initialization');\n                if (this.dataChannel) {\n                    const initHandler = () => {\n                        this._secureLog('info', '\uD83D\uDD04 DataChannel opened, initializing file transfer...');\n                        this.initializeFileTransfer();\n                    };\n                    this.dataChannel.addEventListener('open', initHandler, { once: true });\n                }\n                return;\n            }\n\n            if (!this.isVerified) {\n                this._secureLog('warn', '\u26A0\uFE0F Connection not verified yet, deferring file transfer initialization');\n                this._scheduleFileTransferInitRetry(500);\n                return;\n            }\n            \n            // FIX: Clean up previous system if present\n            if (this.fileTransferSystem) {\n                this._secureLog('info', '\uD83E\uDDF9 Cleaning up existing file transfer system');\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n            }\n            \n            //   Ensure encryption keys are present\n            if (!this.encryptionKey || !this.macKey) {\n                this._secureLog('warn', '\u26A0\uFE0F Encryption keys not ready, deferring file transfer initialization');\n                this._scheduleFileTransferInitRetry(1000);\n                return;\n            }\n            \n            // IMPORTANT: callback order: (onProgress, onComplete, onError, onFileReceived)\n            const safeOnComplete = (summary) => {\n                // Sender: finalize transfer, no Blob handling\n                try {\n                    this._secureLog('info', '\uD83C\uDFC1 Sender transfer summary', { summary });\n                    // Optionally forward as progress/UI event\n                    if (this.onFileProgress) {\n                        this.onFileProgress({ type: 'complete', ...summary });\n                    }\n                } catch (e) {\n                    this._secureLog('warn', '\u26A0\uFE0F onComplete handler failed:', { details: e.message });\n                }\n            };\n\n            this.fileTransferSystem = new EnhancedSecureFileTransfer(\n                this,\n                this.onFileProgress || null,\n                safeOnComplete,\n                this.onFileError || null,\n                this.onFileReceived || null,\n                this.onIncomingFileRequest || null\n            );\n            \n            this._fileTransferActive = true;\n            \n            this._secureLog('info', '\u2705 Enhanced Secure File Transfer system initialized successfully');\n            \n            // Verify the system is ready\n            const status = this.fileTransferSystem.getSystemStatus();\n            this._secureLog('info', '\uD83D\uDD0D File transfer system status after init', { status });\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to initialize file transfer system', { errorType: error.constructor.name });\n            this.fileTransferSystem = null;\n            this._fileTransferActive = false;\n        }\n    }\n\n    _scheduleFileTransferInitRetry(delay) {\n        if (this._sessionAlive === false) return null;\n        if (!this._fileTransferInitRetryTimers) this._fileTransferInitRetryTimers = new Set();\n\n        const timer = this._trackActiveTimer(setTimeout(() => {\n            this._fileTransferInitRetryTimers.delete(timer);\n            this._untrackActiveTimer(timer);\n            if (this._sessionAlive === false) return;\n            this.initializeFileTransfer();\n        }, delay));\n\n        this._fileTransferInitRetryTimers.add(timer);\n        return timer;\n    }\n\n    // ============================================\n    // ENHANCED SECURITY INITIALIZATION\n    // ============================================\n\n    async initializeEnhancedSecurity() {\n        try {\n            // Generate nested encryption key\n            await this.generateNestedEncryptionKey();\n            \n            // Initialize decoy channels\n            if (this.decoyChannelConfig.enabled) {\n                this.initializeDecoyChannels();\n            }\n            \n            // Start fake traffic generation\n            if (this.fakeTrafficConfig.enabled) {\n                this.startFakeTrafficGeneration();\n            }\n\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to initialize enhanced security', { errorType: error.constructor.name });\n        }\n    }\n    \n    // Helper function: unbiased integer in [min, max]\n       getSafeRandomInt(min, max) {\n            if (!Number.isInteger(min) || !Number.isInteger(max)) {\n                throw new Error('getSafeRandomInt requires integer min and max');\n            }\n            if (min >= max) {\n                throw new Error('min must be less than max');\n            }\n            \n            const range = max - min + 1;\n            const bitsNeeded = Math.ceil(Math.log2(range));\n            const bytesNeeded = Math.ceil(bitsNeeded / 8);\n            const mask = (1 << bitsNeeded) - 1;\n            \n            let randomValue;\n            do {\n                const randomBytes = crypto.getRandomValues(new Uint8Array(bytesNeeded));\n\n                randomValue = 0;\n                for (let i = 0; i < bytesNeeded; i++) {\n                    randomValue = (randomValue * 256) + randomBytes[i];\n                }\n\n                randomValue = randomValue & mask;\n                \n            } while (randomValue >= range); \n\n            return min + randomValue;\n        }\n\n        getSafeRandomFloat(minFloat, maxFloat, steps = 1000) {\n            if (typeof minFloat !== 'number' || typeof maxFloat !== 'number') {\n                throw new Error('getSafeRandomFloat requires numeric min and max');\n            }\n            if (minFloat >= maxFloat) {\n                throw new Error('minFloat must be less than maxFloat');\n            }\n            const randomIndex = this.getSafeRandomInt(0, steps);\n            \n            const step = (maxFloat - minFloat) / steps;\n\n            return minFloat + (randomIndex * step);\n        }\n\n        generateFingerprintMask() {\n            const mask = {\n                timingOffset: this.getSafeRandomInt(0, 1500),\n                sizeVariation: this.getSafeRandomFloat(0.75, 1.25, 1000),\n                noisePattern: Array.from(crypto.getRandomValues(new Uint8Array(64))),\n                headerVariations: [\n                    'X-Client-Version', 'X-Session-ID', 'X-Request-ID', 'X-Timestamp', 'X-Signature',\n                    'X-Secure', 'X-Encrypted', 'X-Protected', 'X-Safe', 'X-Anonymous', 'X-Private'\n                ],\n                noiseIntensity: this.getSafeRandomInt(50, 150),\n                sizeMultiplier: this.getSafeRandomFloat(0.75, 1.25, 1000),\n                timingVariation: this.getSafeRandomInt(100, 1100)\n            };\n            return mask;\n        }\n\n    // Security configuration - all features enabled by default\n    configureSecurityForSession() {\n        this._secureLog('info', '\uD83D\uDD27 Configuring security - all features enabled by default');\n        \n        // All security features are enabled by default - no payment required\n            this.sessionConstraints = {};\n            \n            Object.keys(this.securityFeatures).forEach(feature => {\n            this.sessionConstraints[feature] = true; // All features enabled\n            });\n            \n            this.applySessionConstraints();\n            \n        this._secureLog('info', '\u2705 Security configured - all features enabled', { constraints: this.sessionConstraints });\n\n            if (!this._validateCryptographicSecurity()) {\n                this._secureLog('error', '\uD83D\uDEA8 CRITICAL: Cryptographic security validation failed after session configuration');\n\n                if (this.onStatusChange) {\n                    this.onStatusChange('security_breach', {\n                        type: 'crypto_security_failure',\n                        message: 'Cryptographic security validation failed after session configuration'\n                    });\n                }\n            }\n            \n            this.notifySecurityLevel();\n            \n            setTimeout(() => {\n                this.calculateAndReportSecurityLevel();\n            }, EnhancedSecureWebRTCManager.TIMEOUTS.SECURITY_CALC_DELAY);\n    }\n\n    // Applying session constraints - all features enabled by default\n    applySessionConstraints() {\n        if (!this.sessionConstraints) return;\n\n        // All features are enabled by default - no restrictions\n        Object.keys(this.sessionConstraints).forEach(feature => {\n            this.securityFeatures[feature] = true; // All features enabled\n                \n                // Enable linked configurations\n                switch (feature) {\n                    case 'hasFakeTraffic':\n                        this.fakeTrafficConfig.enabled = true;\n                        if (this.isConnected()) {\n                            this.startFakeTrafficGeneration();\n                        }\n                        break;\n                    case 'hasDecoyChannels':\n                        this.decoyChannelConfig.enabled = true;\n                        if (this.isConnected()) {\n                            this.initializeDecoyChannels();\n                        }\n                        break;\n                    case 'hasPacketReordering':\n                        this.reorderingConfig.enabled = true;\n                        break;\n                    case 'hasAntiFingerprinting':\n                        this.antiFingerprintingConfig.enabled = true;\n                        break;\n                    case 'hasMessageChunking':\n                        this.chunkingConfig.enabled = true;\n                        break;\n            }\n        });\n        \n        this._secureLog('info', '\u2705 All security features enabled by default', {\n            constraints: this.sessionConstraints,\n            currentFeatures: this.securityFeatures\n        });\n    }\n    _sanitizeIncomingChatMessage(message) {\n        if (typeof message !== 'string') {\n            return message;\n        }\n\n        return window.EnhancedSecureCryptoUtils.sanitizeMessage(message);\n    }\n\n    deliverMessageToUI(message, type = 'received', meta = null) {\n        try {\n            // Add debug logs\n            this._secureLog('debug', '\uD83D\uDCE4 deliverMessageToUI called', {\n                message: message,\n                type: type,\n                messageType: typeof message,\n                hasOnMessage: !!this.onMessage\n            });\n            \n            // Filter out file-transfer and system messages\n            if (typeof message === 'object' && message.type) {\n                const blockedTypes = [\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_START,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_RESPONSE,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_CHUNK,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.CHUNK_CONFIRMATION,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_COMPLETE,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_ERROR,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.HEARTBEAT,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_RESPONSE,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_CONFIRMED,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.PEER_DISCONNECT,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_READY,\n                    EnhancedSecureWebRTCManager.MESSAGE_TYPES.SECURITY_UPGRADE\n                ];\n                if (blockedTypes.includes(message.type)) {\n                    if (this._debugMode) {\n                        this._secureLog('warn', `\uD83D\uDED1 Blocked system/file message from UI: ${message.type}`);\n                    }\n                    return; // do not show in chat\n                }\n            }\n\n            // Additional check for string messages containing JSON\n            if (typeof message === 'string' && message.trim().startsWith('{')) {\n                try {\n                    const parsedMessage = JSON.parse(message);\n                    if (parsedMessage.type) {\n                        const blockedTypes = [\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_START,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_RESPONSE,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_CHUNK,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.CHUNK_CONFIRMATION,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_COMPLETE,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.FILE_TRANSFER_ERROR,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.HEARTBEAT,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_RESPONSE,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_CONFIRMED,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.VERIFICATION_BOTH_CONFIRMED,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.PEER_DISCONNECT,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_SIGNAL,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_ROTATION_READY,\n                            EnhancedSecureWebRTCManager.MESSAGE_TYPES.SECURITY_UPGRADE\n                        ];\n                        if (blockedTypes.includes(parsedMessage.type)) {\n                            if (this._debugMode) {\n                                this._secureLog('warn', `\uD83D\uDED1 Blocked system/file message from UI (string): ${parsedMessage.type}`);\n                            }\n                            return; // do not show in chat\n                        }\n                    }\n                } catch (parseError) {\n                    // Not JSON \u2014 fine for plain text messages\n                }\n            }\n\n            const uiMessage = type === 'received'\n                ? this._sanitizeIncomingChatMessage(message)\n                : message;\n\n            if (this.onMessage) {\n                // Whitelist/bound the optional per-message UI metadata centrally here,\n                // so every delivery path stays consistent and partial test doubles that\n                // override deliverMessageToUI are unaffected.\n                const safeMeta = (meta && typeof this._sanitizeMessageMeta === 'function')\n                    ? this._sanitizeMessageMeta(meta)\n                    : null;\n                this._secureLog('debug', '\uD83D\uDCE4 Calling this.onMessage callback', { message: uiMessage, type });\n                this.onMessage(uiMessage, type, safeMeta || undefined);\n            } else {\n                this._secureLog('warn', '\u26A0\uFE0F this.onMessage callback is null or undefined');\n            }\n        } catch (err) {\n            this._secureLog('error', '\u274C Failed to deliver message to UI:', { errorType: err?.constructor?.name || 'Unknown' });\n        }\n    }\n\n\n    // Security Level Notification\n    notifySecurityLevel() {\n        // Avoid duplicate notifications\n        if (this.lastSecurityLevelNotification === 'maximum') {\n            return; // prevent duplication\n        }\n        \n        this.lastSecurityLevelNotification = 'maximum';\n        \n        const message = '\uD83D\uDEE1\uFE0F Maximum Security Active - All features enabled';\n        \n        if (this.onMessage) {\n            this.deliverMessageToUI(message, 'system');\n        }\n\n        // Showing details of active features\n        if (this.onMessage) {\n            const activeFeatures = Object.entries(this.securityFeatures)\n                .filter(([key, value]) => value === true)\n                .map(([key]) => key.replace('has', '').replace(/([A-Z])/g, ' $1').trim().toLowerCase())\n                .slice(0, 5); \n\n            this.deliverMessageToUI(`\uD83D\uDD27 Active: ${activeFeatures.join(', ')}...`, 'system');\n        }\n    }\n\n    // Cleaning decoy channels\n    cleanupDecoyChannels() {\n        // Stopping decoy traffic\n        for (const [channelName, timer] of this.decoyTimers.entries()) {\n            clearTimeout(timer);\n        }\n        this.decoyTimers.clear();\n        \n        // Closing decoy channels\n        for (const [channelName, channel] of this.decoyChannels.entries()) {\n            if (channel.readyState === 'open') {\n                channel.close();\n            }\n        }\n        this.decoyChannels.clear();\n        \n        this._secureLog('info', '\uD83E\uDDF9 Decoy channels cleaned up');\n    }\n\n    // ============================================\n    // 1. NESTED ENCRYPTION LAYER\n    // ============================================\n\n    async generateNestedEncryptionKey() {\n        try {\n            // Generate additional encryption key for nested encryption\n            this.nestedEncryptionKey = await crypto.subtle.generateKey(\n                { name: 'AES-GCM', length: 256 },\n                false,\n                ['encrypt', 'decrypt']\n            );\n            \n            // Generate random IV for nested encryption\n                    //   No need for base IV or counter - each encryption gets fresh random IV\n        // This ensures maximum entropy and prevents IV reuse attacks\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to generate nested encryption key:', { errorType: error?.constructor?.name || 'Unknown' });\n            throw error;\n        }\n    }\n\n    async applyNestedEncryption(data) {\n        if (!this.nestedEncryptionKey || !this.securityFeatures.hasNestedEncryption) {\n            return data;\n        }\n\n        try {\n            //   Generate cryptographically secure IV with reuse prevention\n            const uniqueIV = this._generateSecureIV(\n                EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE, \n                'nestedEncryption'\n            );\n            \n            // Encrypt data with nested layer\n            const encrypted = await crypto.subtle.encrypt(\n                { name: 'AES-GCM', iv: uniqueIV },\n                this.nestedEncryptionKey,\n                data\n            );\n            \n            // Combine IV and encrypted data\n            const result = new Uint8Array(EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE + encrypted.byteLength);\n            result.set(uniqueIV, 0);\n            result.set(new Uint8Array(encrypted), EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE);\n            \n            this._secureLog('debug', '\u2705 Nested encryption applied with secure IV', {\n                ivSize: uniqueIV.length,\n                dataSize: data.byteLength,\n                encryptedSize: encrypted.byteLength\n            });\n            \n            return result.buffer;\n        } catch (error) {\n            this._secureLog('error', '\u274C Nested encryption failed:', { \n                errorType: error?.constructor?.name || 'Unknown',\n                errorMessage: error?.message || 'Unknown error'\n            });\n            \n            //   If IV generation failed due to emergency mode, disable nested encryption\n            if (error.message.includes('emergency mode')) {\n                this.securityFeatures.hasNestedEncryption = false;\n                this._secureLog('warn', '\u26A0\uFE0F Nested encryption disabled due to IV emergency mode');\n            }\n            \n            return data; // Fallback to original data\n        }\n    }\n\n    async removeNestedEncryption(data) {\n        if (!this.nestedEncryptionKey || !this.securityFeatures.hasNestedEncryption) {\n            return data;\n        }\n\n        //   Check that the data is actually encrypted with proper IV size\n        if (!(data instanceof ArrayBuffer) || data.byteLength < EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE + 16) {\n            if (this._debugMode) {\n                this._secureLog('debug', '\uD83D\uDCDD Data not encrypted or too short for nested decryption (need IV + minimum encrypted data)');\n            }\n            return data;\n        }\n\n        try {\n            const dataArray = new Uint8Array(data);\n            const iv = dataArray.slice(0, EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE);\n            const encryptedData = dataArray.slice(EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE);\n            \n            // Check that there is data to decrypt\n            if (encryptedData.length === 0) {\n                if (this._debugMode) {\n                    this._secureLog('debug', '\uD83D\uDCDD No encrypted data found');\n                }\n                return data;\n            }\n            \n            // Decrypt nested layer\n            const decrypted = await crypto.subtle.decrypt(\n                { name: 'AES-GCM', iv: iv },\n                this.nestedEncryptionKey,\n                encryptedData\n            );\n            \n            return decrypted;\n        } catch (error) {\n            // FIX: Better error handling\n            if (error.name === 'OperationError') {\n                if (this._debugMode) {\n                    this._secureLog('debug', '\uD83D\uDCDD Data not encrypted with nested encryption, skipping...');\n                }\n            } else {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Nested decryption failed:', { details: error.message });\n                }\n            }\n            return data; // Fallback to original data\n        }\n    }\n\n    // ============================================\n    // 2. PACKET PADDING\n    // ============================================\n\n    applyPacketPadding(data) {\n        if (!this.securityFeatures.hasPacketPadding) {\n            return data;\n        }\n\n        try {\n            const originalSize = data.byteLength;\n            let paddingSize;\n            \n            if (this.paddingConfig.useRandomPadding) {\n                // Generate random padding size\n                paddingSize = Math.floor(Math.random() * \n                    (this.paddingConfig.maxPadding - this.paddingConfig.minPadding + 1)) + \n                    this.paddingConfig.minPadding;\n            } else {\n                // Use fixed padding size\n                paddingSize = this.paddingConfig.minPadding;\n            }\n            \n            // Generate random padding data\n            const padding = crypto.getRandomValues(new Uint8Array(paddingSize));\n            \n            // Create padded message\n            const paddedData = new Uint8Array(originalSize + paddingSize + 4);\n            \n            // Add original size (4 bytes)\n            const sizeView = new DataView(paddedData.buffer, 0, 4);\n            sizeView.setUint32(0, originalSize, false);\n            \n            // Add original data\n            paddedData.set(new Uint8Array(data), 4);\n            \n            // Add padding\n            paddedData.set(padding, 4 + originalSize);\n            \n            return paddedData.buffer;\n        } catch (error) {\n            this._secureLog('error', '\u274C Packet padding failed:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data; // Fallback to original data\n        }\n    }\n\n    removePacketPadding(data) {\n        if (!this.securityFeatures.hasPacketPadding) {\n            return data;\n        }\n\n        try {\n            const dataArray = new Uint8Array(data);\n            \n            // Check for minimum data length (4 bytes for size + minimum 1 byte of data)\n            if (dataArray.length < 5) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Data too short for packet padding removal, skipping');\n                }\n                return data;\n            }\n            \n            // Extract original size (first 4 bytes)\n            const sizeView = new DataView(dataArray.buffer, 0, 4);\n            const originalSize = sizeView.getUint32(0, false);\n            \n            // Checking the reasonableness of the size\n            if (originalSize <= 0 || originalSize > dataArray.length - 4) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Invalid packet padding size, skipping removal');\n                }\n                return data;\n            }\n            \n            // Extract original data\n            const originalData = dataArray.slice(4, 4 + originalSize);\n            \n            return originalData.buffer;\n        } catch (error) {\n            if (this._debugMode) {\n                this._secureLog('error', '\u274C Packet padding removal failed:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n            return data; // Fallback to original data\n        }\n    }\n\n    // ============================================\n    // 3. FAKE TRAFFIC GENERATION\n    // ============================================\n\n    startFakeTrafficGeneration() {\n        if (!this.fakeTrafficConfig.enabled || !this.isConnected()) {\n            return;\n        }\n\n        // Prevent multiple fake traffic generators\n        if (this.fakeTrafficTimer) {\n            this._secureLog('warn', '\u26A0\uFE0F Fake traffic generation already running');\n            return;\n        }\n\n        const sendFakeMessage = async () => {\n            if (!this.isConnected()) {\n                this.stopFakeTrafficGeneration();\n                return;\n            }\n\n            try {\n                const fakeMessage = this.generateFakeMessage();\n                await this.sendFakeMessage(fakeMessage);\n                \n                // FIX: Increase intervals to reduce load\n                const nextInterval = this.fakeTrafficConfig.randomDecoyIntervals ? \n                    this.getUnbiasedRandomInRange(this.fakeTrafficConfig.minInterval, Math.min(this.fakeTrafficConfig.maxInterval, 60000)) : // Cap at 60 seconds\n                    this.fakeTrafficConfig.minInterval;\n                \n                // Minimum interval 15 seconds for stability\n                const safeInterval = Math.max(nextInterval, EnhancedSecureWebRTCManager.TIMEOUTS.FAKE_TRAFFIC_MIN_INTERVAL);\n                \n                this.fakeTrafficTimer = setTimeout(sendFakeMessage, safeInterval);\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('error', '\u274C Fake traffic generation failed:', { errorType: error?.constructor?.name || 'Unknown' });\n                }\n                this.stopFakeTrafficGeneration();\n            }\n        };\n\n        // Start fake traffic generation with longer initial delay\n        // Use a reasonable range for initial delay (5-30 seconds)\n        const minDelay = EnhancedSecureWebRTCManager.TIMEOUTS.DECOY_INITIAL_DELAY;\n        const maxDelay = Math.min(this.fakeTrafficConfig.maxInterval, 30000); // Cap at 30 seconds\n        const initialDelay = this.getUnbiasedRandomInRange(minDelay, maxDelay);\n        this.fakeTrafficTimer = setTimeout(sendFakeMessage, initialDelay);\n    }\n\n    stopFakeTrafficGeneration() {\n        if (this.fakeTrafficTimer) {\n            clearTimeout(this.fakeTrafficTimer);\n            this.fakeTrafficTimer = null;\n        }\n    }\n\n    generateFakeMessage() {\n        const patternIndex = this.getUnbiasedRandomInRange(0, this.fakeTrafficConfig.patterns.length - 1);\n        const pattern = this.fakeTrafficConfig.patterns[patternIndex];\n        \n        const size = this.getUnbiasedRandomInRange(this.fakeTrafficConfig.minSize, this.fakeTrafficConfig.maxSize);\n        \n        const fakeData = crypto.getRandomValues(new Uint8Array(size));\n        \n        return {\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.FAKE, \n            pattern: pattern,\n            data: Array.from(fakeData).map(b => b.toString(16).padStart(2, '0')).join(''),\n            timestamp: Date.now(),\n            size: size,\n            isFakeTraffic: true, \n            source: 'fake_traffic_generator',\n            fakeId: crypto.getRandomValues(new Uint32Array(1))[0].toString(36) \n        };\n    }\n\n    // ============================================\n    // EMERGENCY SHUT-OFF OF ADVANCED FUNCTIONS\n    // ============================================\n\n        emergencyDisableAdvancedFeatures() {\n                    this._secureLog('error', '\uD83D\uDEA8 Emergency disabling advanced security features due to errors');\n        \n        // Disable problematic functions\n        this.securityFeatures.hasNestedEncryption = false;\n        this.securityFeatures.hasPacketReordering = false;\n        this.securityFeatures.hasAntiFingerprinting = false;\n        \n        // Disable configurations\n        this.reorderingConfig.enabled = false;\n        this.antiFingerprintingConfig.enabled = false;\n        \n        // Clear the buffers\n        this.packetBuffer.clear();\n        \n        // Stopping fake traffic\n        this.emergencyDisableFakeTraffic();\n        \n                    this._secureLog('info', '\u2705 Advanced features disabled, keeping basic encryption');\n        \n        // Check that advanced-features-disabled notification wasn't already sent\n        if (!this.advancedFeaturesDisabledNotificationSent) {\n            this.advancedFeaturesDisabledNotificationSent = true;\n            if (this.onMessage) {\n                this.deliverMessageToUI('\uD83D\uDEA8 Advanced security features temporarily disabled due to compatibility issues', 'system');\n            }\n        }\n    }\n\n    async sendFakeMessage(fakeMessage) {\n        if (!this._validateConnection(false)) {\n            return;\n        }\n\n        try {\n            this._secureLog('debug', '\uD83C\uDFAD Sending fake message', {\n                hasPattern: !!fakeMessage.pattern,\n                sizeRange: fakeMessage.size > 100 ? 'large' : 'small'\n            });\n            \n            const fakeData = JSON.stringify({\n                ...fakeMessage,\n                type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.FAKE, \n                isFakeTraffic: true, \n                timestamp: Date.now()\n            });\n            \n            const fakeBuffer = new TextEncoder().encode(fakeData);\n            const encryptedFake = await this.applySecurityLayers(fakeBuffer, true);\n            this.dataChannel.send(encryptedFake);\n            \n            this._secureLog('debug', '\uD83C\uDFAD Fake message sent successfully', {\n                pattern: fakeMessage.pattern\n            });\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to send fake message', {\n                error: error.message\n            });\n        }\n    }\n\ncheckFakeTrafficStatus() {\n        const status = {\n            fakeTrafficEnabled: this.securityFeatures.hasFakeTraffic,\n            fakeTrafficConfigEnabled: this.fakeTrafficConfig.enabled,\n            timerActive: !!this.fakeTrafficTimer,\n            patterns: this.fakeTrafficConfig.patterns,\n            intervals: {\n                min: this.fakeTrafficConfig.minInterval,\n                max: this.fakeTrafficConfig.maxInterval\n            }\n        };\n        \n        if (this._debugMode) {\n            this._secureLog('info', '\uD83C\uDFAD Fake Traffic Status', { status });\n        }\n        return status;\n    }\nemergencyDisableFakeTraffic() {\n        if (this._debugMode) {\n            this._secureLog('error', '\uD83D\uDEA8 Emergency disabling fake traffic');\n        }\n        \n        this.securityFeatures.hasFakeTraffic = false;\n        this.fakeTrafficConfig.enabled = false;\n        this.stopFakeTrafficGeneration();\n        \n        if (this._debugMode) {\n            this._secureLog('info', '\u2705 Fake traffic disabled');\n        }\n        \n        // Check that fake-traffic-disabled notification wasn't already sent\n        if (!this.fakeTrafficDisabledNotificationSent) {\n            this.fakeTrafficDisabledNotificationSent = true;\n            if (this.onMessage) {\n                this.deliverMessageToUI('\uD83D\uDEA8 Fake traffic emergency disabled', 'system');\n            }\n        }\n    }\n    async _applySecurityLayersWithoutMutex(data, isFakeMessage = false) {\n    try {\n        let processedData = data;\n        \n        if (isFakeMessage) {\n            if (this.encryptionKey && typeof processedData === 'string') {\n                processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n            }\n            return processedData;\n        }\n        \n        // Nested Encryption (if enabled)\n        if (this.securityFeatures.hasNestedEncryption && this.nestedEncryptionKey && processedData instanceof ArrayBuffer) {\n            processedData = await this.applyNestedEncryption(processedData);\n        }\n        \n        // Packet Reordering (if enabled)\n        if (this.securityFeatures.hasPacketReordering && this.reorderingConfig?.enabled && processedData instanceof ArrayBuffer) {\n            processedData = this.applyPacketReordering(processedData);\n        }\n        \n        // Packet Padding (if enabled)\n        if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n            processedData = this.applyPacketPadding(processedData);\n        }\n        \n        // Anti-Fingerprinting (if enabled)\n        if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n            processedData = this.applyAntiFingerprinting(processedData);\n        }\n        \n        // Final encryption (if keys are present)\n        if (this.encryptionKey && typeof processedData === 'string') {\n            processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n        }\n        \n        return processedData;\n        \n    } catch (error) {\n        this._secureLog('error', '\u274C Error in applySecurityLayersWithoutMutex:', { errorType: error?.constructor?.name || 'Unknown' });\n        return data; // Return original data on error\n    }\n}\n    // ============================================\n    // 4. MESSAGE CHUNKING\n    // ============================================\n\n    async processChunkedMessage(chunkData) {\n        try {\n            if (!this.chunkingConfig.addChunkHeaders) {\n                // No headers, treat as regular message\n                return this.processMessage(chunkData);\n            }\n\n            const chunkArray = new Uint8Array(chunkData);\n            if (chunkArray.length < 16) {\n                // Too small to be a chunk with header\n                return this.processMessage(chunkData);\n            }\n\n            // Extract chunk header\n            const headerView = new DataView(chunkArray.buffer, 0, 16);\n            const messageId = headerView.getUint32(0, false);\n            const chunkIndex = headerView.getUint32(4, false);\n            const totalChunks = headerView.getUint32(8, false);\n            const chunkSize = headerView.getUint32(12, false);\n\n            // Extract chunk data\n            const chunk = chunkArray.slice(16, 16 + chunkSize);\n\n            // Store chunk in buffer\n            if (!this.chunkQueue[messageId]) {\n                this.chunkQueue[messageId] = {\n                    chunks: new Array(totalChunks),\n                    received: 0,\n                    timestamp: Date.now()\n                };\n            }\n\n            const messageBuffer = this.chunkQueue[messageId];\n            messageBuffer.chunks[chunkIndex] = chunk;\n            messageBuffer.received++;\n\n                            this._secureLog('debug', `\uD83D\uDCE6 Received chunk ${chunkIndex + 1}/${totalChunks} for message ${messageId}`);\n\n            // Check if all chunks received\n            if (messageBuffer.received === totalChunks) {\n                // Combine all chunks\n                const totalSize = messageBuffer.chunks.reduce((sum, chunk) => sum + chunk.length, 0);\n                const combinedData = new Uint8Array(totalSize);\n                \n                let offset = 0;\n                for (const chunk of messageBuffer.chunks) {\n                    combinedData.set(chunk, offset);\n                    offset += chunk.length;\n                }\n\n                // Process complete message\n                await this.processMessage(combinedData.buffer);\n                \n                // Clean up\n                delete this.chunkQueue[messageId];\n                \n                this._secureLog('info', `\uD83D\uDCE6 Chunked message ${messageId} reassembled and processed`);\n            }\n        } catch (error) {\n            this._secureLog('error', '\u274C Chunked message processing failed:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n\n    // ============================================\n    // 5. DECOY CHANNELS\n    // ============================================\n\n    initializeDecoyChannels() {\n        if (!this.decoyChannelConfig.enabled || !this.peerConnection) {\n            return;\n        }\n\n        // Prevent multiple initializations\n        if (this.decoyChannels.size > 0) {\n            this._secureLog('warn', '\u26A0\uFE0F Decoy channels already initialized, skipping...');\n            return;\n        }\n\n        try {\n            const numDecoyChannels = Math.min(\n                this.decoyChannelConfig.maxDecoyChannels,\n                this.decoyChannelConfig.decoyChannelNames.length\n            );\n\n            for (let i = 0; i < numDecoyChannels; i++) {\n                const channelName = this.decoyChannelConfig.decoyChannelNames[i];\n                const decoyChannel = this.peerConnection.createDataChannel(channelName, {\n                    ordered: Math.random() > 0.5,\n                    maxRetransmits: Math.floor(Math.random() * 3)\n                });\n\n                this.setupDecoyChannel(decoyChannel, channelName);\n                this.decoyChannels.set(channelName, decoyChannel);\n            }\n\n            if (this._debugMode) {\n                this._secureLog('info', `\uD83C\uDFAD Initialized ${numDecoyChannels} decoy channels`);\n            }\n        } catch (error) {\n            if (this._debugMode) {\n                this._secureLog('error', '\u274C Failed to initialize decoy channels:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n        }\n    }\n\n    setupDecoyChannel(channel, channelName) {\n        channel.onopen = () => {\n            if (this._debugMode) {\n                this._secureLog('debug', `\uD83C\uDFAD Decoy channel \"${channelName}\" opened`);\n            }\n            this.startDecoyTraffic(channel, channelName);\n        };\n\n        channel.onmessage = (event) => {\n            if (this._debugMode) {\n                this._secureLog('debug', `\uD83C\uDFAD Received decoy message on \"${channelName}\": ${event.data?.length || 'undefined'} bytes`);\n            }\n        };\n\n        channel.onclose = () => {\n            if (this._debugMode) {\n                this._secureLog('debug', `\uD83C\uDFAD Decoy channel \"${channelName}\" closed`);\n            }\n            this.stopDecoyTraffic(channelName);\n        };\n\n        channel.onerror = (error) => {\n            if (this._debugMode) {\n                this._secureLog('error', `\u274C Decoy channel \"${channelName}\" error`, { error: error.message });\n            }\n        };\n    }\n\n    startDecoyTraffic(channel, channelName) {\n        const sendDecoyData = async () => {\n            if (channel.readyState !== 'open') {\n                return;\n            }\n\n            try {\n                const decoyData = this.generateDecoyData(channelName);\n                channel.send(decoyData);\n                \n                const interval = this.decoyChannelConfig.randomDecoyIntervals ?\n                    Math.random() * 15000 + 10000 : \n                    20000; \n                \n                this.decoyTimers.set(channelName, setTimeout(() => sendDecoyData(), interval));\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('error', `\u274C Failed to send decoy data on \"${channelName}\"`, { error: error.message });\n                }\n            }\n        };\n\n        const initialDelay = Math.random() * 10000 + 5000; \n        this.decoyTimers.set(channelName, setTimeout(() => sendDecoyData(), initialDelay));\n    }\n\n    stopDecoyTraffic(channelName) {\n        const timer = this.decoyTimers.get(channelName);\n        if (timer) {\n            clearTimeout(timer);\n            this.decoyTimers.delete(channelName);\n        }\n    }\n\n    generateDecoyData(channelName) {\n        const decoyTypes = {\n            'sync': () => JSON.stringify({\n                type: 'sync',\n                timestamp: Date.now(),\n                sequence: Math.floor(Math.random() * 1000),\n                data: Array.from(crypto.getRandomValues(new Uint8Array(32)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            }),\n            'status': () => JSON.stringify({\n                type: 'status',\n                status: ['online', 'away', 'busy'][Math.floor(Math.random() * 3)],\n                uptime: Math.floor(Math.random() * 3600),\n                data: Array.from(crypto.getRandomValues(new Uint8Array(16)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            }),\n            'heartbeat': () => JSON.stringify({\n                type: 'heartbeat',\n                timestamp: Date.now(),\n                data: Array.from(crypto.getRandomValues(new Uint8Array(24)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            }),\n            'metrics': () => JSON.stringify({\n                type: 'metrics',\n                cpu: Math.random() * 100,\n                memory: Math.random() * 100,\n                network: Math.random() * 1000,\n                data: Array.from(crypto.getRandomValues(new Uint8Array(20)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            }),\n            'debug': () => JSON.stringify({\n                type: 'debug',\n                level: ['info', 'warn', 'error'][Math.floor(Math.random() * 3)],\n                message: 'Debug message',\n                data: Array.from(crypto.getRandomValues(new Uint8Array(28)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('')\n            })\n        };\n\n        return decoyTypes[channelName] ? decoyTypes[channelName]() : \n            Array.from(crypto.getRandomValues(new Uint8Array(64)))\n                .map(b => b.toString(16).padStart(2, '0')).join('');\n    }\n\n    // ============================================\n    // 6. PACKET REORDERING PROTECTION\n    // ============================================\n\n    addReorderingHeaders(data) {\n        if (!this.reorderingConfig.enabled) {\n            return data;\n        }\n\n        try {\n            const dataArray = new Uint8Array(data);\n            const headerSize = this.reorderingConfig.useTimestamps ? 12 : 8;\n            const header = new ArrayBuffer(headerSize);\n            const headerView = new DataView(header);\n\n            // Add sequence number\n            if (this.reorderingConfig.useSequenceNumbers) {\n                headerView.setUint32(0, this.sequenceNumber++, false);\n            }\n\n            // Add timestamp\n            if (this.reorderingConfig.useTimestamps) {\n                headerView.setUint32(4, Date.now(), false);\n            }\n\n            // Add data size\n            headerView.setUint32(this.reorderingConfig.useTimestamps ? 8 : 4, dataArray.length, false);\n\n            // Combine header and data\n            const result = new Uint8Array(headerSize + dataArray.length);\n            result.set(new Uint8Array(header), 0);\n            result.set(dataArray, headerSize);\n\n            return result.buffer;\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to add reordering headers:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data;\n        }\n    }\n\n    async processReorderedPacket(data) {\n    if (!this.reorderingConfig.enabled) {\n        return this.processMessage(data);\n    }\n\n    try {\n        const dataArray = new Uint8Array(data);\n        const headerSize = this.reorderingConfig.useTimestamps ? 12 : 8;\n\n        if (dataArray.length < headerSize) {\n            if (this._debugMode) {\n                this._secureLog('warn', '\u26A0\uFE0F Data too short for reordering headers, processing directly');\n            }\n            return this.processMessage(data);\n        }\n\n        const headerView = new DataView(dataArray.buffer, 0, headerSize);\n        let sequence = 0;\n        let timestamp = 0;\n        let dataSize = 0;\n\n        if (this.reorderingConfig.useSequenceNumbers) {\n            sequence = headerView.getUint32(0, false);\n        }\n\n        if (this.reorderingConfig.useTimestamps) {\n            timestamp = headerView.getUint32(4, false);\n        }\n\n        dataSize = headerView.getUint32(this.reorderingConfig.useTimestamps ? 8 : 4, false);\n\n        if (dataSize > dataArray.length - headerSize || dataSize <= 0) {\n            if (this._debugMode) {\n                this._secureLog('warn', '\u26A0\uFE0F Invalid reordered packet data size, processing directly');\n            }\n            return this.processMessage(data);\n        }\n\n        const actualData = dataArray.slice(headerSize, headerSize + dataSize);\n\n        try {\n            const textData = new TextDecoder().decode(actualData);\n            const content = JSON.parse(textData);\n            if (content.type === 'fake' || content.isFakeTraffic === true) {\n                if (this._debugMode) {\n                    this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Reordered fake message: ${content.pattern || 'unknown'}`);\n                }\n                return; \n            }\n        } catch (e) {\n\n        }\n\n        this.packetBuffer.set(sequence, {\n            data: actualData.buffer,\n            timestamp: timestamp || Date.now()\n        });\n\n        await this.processOrderedPackets();\n\n    } catch (error) {\n        this._secureLog('error', '\u274C Failed to process reordered packet:', { errorType: error?.constructor?.name || 'Unknown' });\n        return this.processMessage(data);\n    }\n}\n\n// ============================================\n// IMPROVED PROCESSORDEREDPACKETS with filtering\n// ============================================\n\nasync processOrderedPackets() {\n    const now = Date.now();\n    const timeout = this.reorderingConfig.reorderTimeout;\n\n    while (true) {\n        const nextSequence = this.lastProcessedSequence + 1;\n        const packet = this.packetBuffer.get(nextSequence);\n\n        if (!packet) {\n            const oldestPacket = this.findOldestPacket();\n            if (oldestPacket && (now - oldestPacket.timestamp) > timeout) {\n                this._secureLog('warn', '\u26A0\uFE0F Packet ${oldestPacket.sequence} timed out, processing out of order');\n                \n                try {\n                    const textData = new TextDecoder().decode(oldestPacket.data);\n                    const content = JSON.parse(textData);\n                    if (content.type === 'fake' || content.isFakeTraffic === true) {\n                        this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Timed out fake message: ${content.pattern || 'unknown'}`);\n                        this.packetBuffer.delete(oldestPacket.sequence);\n                        this.lastProcessedSequence = oldestPacket.sequence;\n                        continue; \n                    }\n                } catch (e) {\n                }\n                \n                await this.processMessage(oldestPacket.data);\n                this.packetBuffer.delete(oldestPacket.sequence);\n                this.lastProcessedSequence = oldestPacket.sequence;\n            } else {\n                break; \n            }\n        } else {\n            try {\n                const textData = new TextDecoder().decode(packet.data);\n                const content = JSON.parse(textData);\n                if (content.type === 'fake' || content.isFakeTraffic === true) {\n                    this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Ordered fake message: ${content.pattern || 'unknown'}`);\n                    this.packetBuffer.delete(nextSequence);\n                    this.lastProcessedSequence = nextSequence;\n                    continue; \n                }\n            } catch (e) {\n            }\n            \n            await this.processMessage(packet.data);\n            this.packetBuffer.delete(nextSequence);\n            this.lastProcessedSequence = nextSequence;\n        }\n    }\n\n    this.cleanupOldPackets(now, timeout);\n}\n\n\n    findOldestPacket() {\n        let oldest = null;\n        for (const [sequence, packet] of this.packetBuffer.entries()) {\n            if (!oldest || packet.timestamp < oldest.timestamp) {\n                oldest = { sequence, ...packet };\n            }\n        }\n        return oldest;\n    }\n\n    cleanupOldPackets(now, timeout) {\n        for (const [sequence, packet] of this.packetBuffer.entries()) {\n            if ((now - packet.timestamp) > timeout) {\n                this._secureLog('warn', '\u26A0\uFE0F \uD83D\uDDD1\uFE0F Removing timed out packet ${sequence}');\n                this.packetBuffer.delete(sequence);\n            }\n        }\n    }\n\n    // ============================================\n    // 7. ANTI-FINGERPRINTING\n    // ============================================\n\n    applyAntiFingerprinting(data) {\n        if (!this.antiFingerprintingConfig.enabled) {\n            return data;\n        }\n\n        try {\n            let processedData = data;\n\n            // Add random noise\n            if (this.antiFingerprintingConfig.addNoise) {\n                processedData = this.addNoise(processedData);\n            }\n\n            // Randomize sizes\n            if (this.antiFingerprintingConfig.randomizeSizes) {\n                processedData = this.randomizeSize(processedData);\n            }\n\n            // Mask patterns\n            if (this.antiFingerprintingConfig.maskPatterns) {\n                processedData = this.maskPatterns(processedData);\n            }\n\n            // Add random headers\n            if (this.antiFingerprintingConfig.useRandomHeaders) {\n                processedData = this.addRandomHeaders(processedData);\n            }\n\n            return processedData;\n        } catch (error) {\n            this._secureLog('error', '\u274C Anti-fingerprinting failed:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data;\n        }\n    }\n\n    addNoise(data) {\n        const dataArray = new Uint8Array(data);\n        const noiseSize = this.getUnbiasedRandomInRange(8, 40); // 8-40 bytes\n        const noise = crypto.getRandomValues(new Uint8Array(noiseSize));\n        \n        const result = new Uint8Array(dataArray.length + noiseSize);\n        result.set(dataArray, 0);\n        result.set(noise, dataArray.length);\n        \n        return result.buffer;\n    }\n\n    randomizeSize(data) {\n        const dataArray = new Uint8Array(data);\n        const variation = this.fingerprintMask.sizeVariation;\n        const targetSize = Math.floor(dataArray.length * variation);\n        \n        if (targetSize > dataArray.length) {\n            // Add padding to increase size\n            const padding = crypto.getRandomValues(new Uint8Array(targetSize - dataArray.length));\n            const result = new Uint8Array(targetSize);\n            result.set(dataArray, 0);\n            result.set(padding, dataArray.length);\n            return result.buffer;\n        } else if (targetSize < dataArray.length) {\n            // Truncate to decrease size\n            return dataArray.slice(0, targetSize).buffer;\n        }\n        \n        return data;\n    }\n\n    maskPatterns(data) {\n        const dataArray = new Uint8Array(data);\n        const result = new Uint8Array(dataArray.length);\n        \n        // Apply XOR with noise pattern\n        for (let i = 0; i < dataArray.length; i++) {\n            const noiseByte = this.fingerprintMask.noisePattern[i % this.fingerprintMask.noisePattern.length];\n            result[i] = dataArray[i] ^ noiseByte;\n        }\n        \n        return result.buffer;\n    }\n\n    addRandomHeaders(data) {\n        const dataArray = new Uint8Array(data);\n        const headerCount = this.getUnbiasedRandomInRange(1, 3); // 1-3 headers\n        let totalHeaderSize = 0;\n        \n        // Calculate total header size\n        for (let i = 0; i < headerCount; i++) {\n            totalHeaderSize += 4 + this.getUnbiasedRandomInRange(0, 15) + 4; // size + data + checksum\n        }\n        \n        const result = new Uint8Array(totalHeaderSize + dataArray.length);\n        let offset = 0;\n        \n        // Add random headers\n        for (let i = 0; i < headerCount; i++) {\n            // Generate unbiased random index for header selection\n            let headerIndex;\n            do {\n                headerIndex = crypto.getRandomValues(new Uint8Array(1))[0];\n            } while (headerIndex >= 256 - (256 % this.fingerprintMask.headerVariations.length));\n            \n            const headerName = this.fingerprintMask.headerVariations[headerIndex % this.fingerprintMask.headerVariations.length];\n            \n            // Generate unbiased random size for header data (4-19 bytes)\n            let headerSize;\n            do {\n                headerSize = crypto.getRandomValues(new Uint8Array(1))[0];\n            } while (headerSize >= 256 - (256 % 16));\n            \n            const headerData = crypto.getRandomValues(new Uint8Array((headerSize % 16) + 4));\n            \n            // Header structure: [size:4][name:4][data:variable][checksum:4]\n            const headerView = new DataView(result.buffer, offset);\n            headerView.setUint32(0, headerData.length + 8, false); // Total header size\n            headerView.setUint32(4, this.hashString(headerName), false); // Name hash\n            \n            result.set(headerData, offset + 8);\n            \n            // Add checksum\n            const checksum = this.calculateChecksum(result.slice(offset, offset + 8 + headerData.length));\n            const checksumView = new DataView(result.buffer, offset + 8 + headerData.length);\n            checksumView.setUint32(0, checksum, false);\n            \n            offset += 8 + headerData.length + 4;\n        }\n        \n        // Add original data\n        result.set(dataArray, offset);\n        \n        return result.buffer;\n    }\n\n    hashString(str) {\n        let hash = 0;\n        for (let i = 0; i < str.length; i++) {\n            const char = str.charCodeAt(i);\n            hash = ((hash << 5) - hash) + char;\n            hash = hash & hash;\n        }\n        return Math.abs(hash);\n    }\n\n    calculateChecksum(data) {\n        let checksum = 0;\n        for (let i = 0; i < data.length; i++) {\n            checksum = (checksum + data[i]) & 0xFFFFFFFF;\n        }\n        return checksum;\n    }\n\n    // ============================================\n    // ENHANCED MESSAGE SENDING AND RECEIVING\n    // ============================================\n\n    async removeSecurityLayers(data) {\n    try {\n        const status = this.getSecurityStatus();\n        if (this._debugMode) {\n            this._secureLog('debug', `\uD83D\uDD0D removeSecurityLayers (Stage ${status.stage})`, {\n                dataType: typeof data,\n                dataLength: data?.length || data?.byteLength || 0,\n                activeFeatures: status.activeFeaturesCount\n            });\n        }\n\n        if (!data) {\n            this._secureLog('warn', '\u26A0\uFE0F Received empty data');\n            return null;\n        }\n\n        let processedData = data;\n\n        // IMPORTANT: Early check for fake messages\n        if (typeof data === 'string') {\n            try {\n                const jsonData = JSON.parse(data);\n                \n                // PRIORITY ONE: Filtering out fake messages\n                if (jsonData.type === 'fake') {\n                    if (this._debugMode) {\n                        this._secureLog('debug', `\uD83C\uDFAD Fake message filtered out: ${jsonData.pattern} (size: ${jsonData.size})`);\n                    }\n                    return 'FAKE_MESSAGE_FILTERED'; \n                }\n                \n                // System messages \u2014 do NOT return for re-processing\n                if (jsonData.type && ['heartbeat', 'verification', 'verification_response', 'peer_disconnect', 'key_rotation_signal', 'key_rotation_ready', 'security_upgrade', 'ice_restart_offer', 'ice_restart_answer', 'ice_restart_request'].includes(jsonData.type)) {\n                    return 'SYSTEM_MESSAGE_FILTERED';\n                }\n                \n                // File transfer messages \u2014 do NOT return for display\n                if (jsonData.type && ['file_transfer_start', 'file_transfer_response', 'file_chunk', 'chunk_confirmation', 'file_transfer_complete', 'file_transfer_error'].includes(jsonData.type)) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCC1 File transfer message detected, blocking from chat', { type: jsonData.type });\n                    }\n                    return 'FILE_MESSAGE_FILTERED';\n                }\n                \n                // Regular text messages - extract the actual message text\n                if (jsonData.type === 'message') {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCDD Regular message detected, extracting text', { data: jsonData.data });\n                    }\n                    return jsonData.data; // Return the actual message text, not the JSON\n                }\n                \n                // Enhanced messages\n                if (jsonData.type === 'enhanced_message' && jsonData.data) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDD10 Enhanced message detected, decrypting...');\n                    }\n                    \n                    if (!this.encryptionKey || !this.macKey || !this.metadataKey) {\n                        this._secureLog('error', '\u274C Missing encryption keys');\n                        return null;\n                    }\n                    \n                    const decryptedResult = await window.EnhancedSecureCryptoUtils.decryptMessage(\n                        jsonData.data,\n                        this.encryptionKey,\n                        this.macKey,\n                        this.metadataKey\n                    );\n                    \n                    if (this._debugMode) {\n                        this._secureLog('debug', '\u2705 Enhanced message decrypted, extracting...');\n                        this._secureLog('debug', '\uD83D\uDD0D decryptedResult', {\n                            type: typeof decryptedResult,\n                            hasMessage: !!decryptedResult?.message,\n                            messageType: typeof decryptedResult?.message,\n                            messageLength: decryptedResult?.message?.length || 0,\n                            messageSample: decryptedResult?.message?.substring(0, 50) || 'no message'\n                        });\n                    }\n                    \n                    // CHECKING FOR FAKE MESSAGES AFTER DECRYPTION\n                    try {\n                        const decryptedContent = JSON.parse(decryptedResult.message);\n                        if (decryptedContent.type === 'fake' || decryptedContent.isFakeTraffic === true) {\n                            if (this._debugMode) {\n                                this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Encrypted fake message: ${decryptedContent.pattern || 'unknown'}`);\n                            }\n                            return 'FAKE_MESSAGE_FILTERED';\n                        }\n                    } catch (e) {\n                        if (this._debugMode) {\n                            this._secureLog('debug', '\uD83D\uDCDD Decrypted content is not JSON, treating as plain text message');\n                        }\n                    }\n                    \n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCE4 Returning decrypted message', { message: decryptedResult.message?.substring(0, 50) });\n                    }\n                    return decryptedResult.message;\n                }\n                \n                // Regular messages\n                if (jsonData.type === 'message' && jsonData.data) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCDD Regular message detected, extracting data');\n                    }\n                    return jsonData.data; // Return the actual message text\n                }\n                \n                // If it's a regular message with type 'message', let it continue processing\n                if (jsonData.type === 'message') {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCDD Regular message detected, returning for display');\n                    }\n                    return data; // Return the original JSON string for processing\n                }\n                \n                // If it's not a special type, return the original data for display\n                if (!jsonData.type || (jsonData.type !== 'fake' && !['heartbeat', 'verification', 'verification_response', 'peer_disconnect', 'key_rotation_signal', 'key_rotation_ready', 'enhanced_message', 'security_upgrade', 'ice_restart_offer', 'ice_restart_answer', 'ice_restart_request', 'file_transfer_start', 'file_transfer_response', 'file_chunk', 'chunk_confirmation', 'file_transfer_complete', 'file_transfer_error'].includes(jsonData.type))) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDCDD Regular message detected, returning for display');\n                    }\n                    return data;\n                }\n            } catch (e) {\n                if (this._debugMode) {\n                    this._secureLog('debug', '\uD83D\uDCC4 Not JSON, processing as raw data');\n                }\n                // If it's not JSON, it might be a plain text message - return as-is\n                return data;\n            }\n        }\n\n        // Standard Decryption\n        if (this.encryptionKey && typeof processedData === 'string' && processedData.length > 50) {\n            try {\n                const base64Regex = /^[A-Za-z0-9+/=]+$/;\n                if (base64Regex.test(processedData.trim())) {\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\uD83D\uDD13 Applying standard decryption...');\n                    }\n                    processedData = await window.EnhancedSecureCryptoUtils.decryptData(processedData, this.encryptionKey);\n                    if (this._debugMode) {\n                        this._secureLog('debug', '\u2705 Standard decryption successful');\n                    }\n                    \n                    // CHECKING FOR FAKE MESSAGES AFTER LEGACY DECRYPTION\n                    if (typeof processedData === 'string') {\n                        try {\n                            const legacyContent = JSON.parse(processedData);\n                            if (legacyContent.type === 'fake' || legacyContent.isFakeTraffic === true) {\n                                if (this._debugMode) {\n                                    this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Legacy fake message: ${legacyContent.pattern || 'unknown'}`);\n                                }\n                                return 'FAKE_MESSAGE_FILTERED';\n                            }\n                        } catch (e) {\n                            \n                        }\n                        processedData = new TextEncoder().encode(processedData).buffer;\n                    }\n                }\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Standard decryption failed:', { details: error.message });\n                }\n                return data; \n            }\n        }\n\n        if (this.securityFeatures.hasNestedEncryption && \n            this.nestedEncryptionKey && \n            processedData instanceof ArrayBuffer &&\n            processedData.byteLength > 12) { \n            \n            try {\n                processedData = await this.removeNestedEncryption(processedData);\n                \n                if (processedData instanceof ArrayBuffer) {\n                    try {\n                        const textData = new TextDecoder().decode(processedData);\n                        const nestedContent = JSON.parse(textData);\n                        if (nestedContent.type === 'fake' || nestedContent.isFakeTraffic === true) {\n                            if (this._debugMode) {\n                                this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Nested fake message: ${nestedContent.pattern || 'unknown'}`);\n                            }\n                            return 'FAKE_MESSAGE_FILTERED';\n                        }\n                    } catch (e) {\n                        \n                    }\n                }\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Nested decryption failed - skipping this layer:', { details: error.message });\n                }\n            }\n        }\n\n        if (this.securityFeatures.hasPacketReordering && \n            this.reorderingConfig.enabled && \n            processedData instanceof ArrayBuffer) {\n            try {\n                const headerSize = this.reorderingConfig.useTimestamps ? 12 : 8;\n                if (processedData.byteLength > headerSize) {\n                    return await this.processReorderedPacket(processedData);\n                }\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Reordering processing failed - using direct processing:', { details: error.message });\n                }\n            }\n        }\n\n        // Packet Padding Removal\n        if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n            try {\n                processedData = this.removePacketPadding(processedData);\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Padding removal failed:', { details: error.message });\n                }\n            }\n        }\n\n        // Anti-Fingerprinting Removal\n        if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n            try {\n                processedData = this.removeAntiFingerprinting(processedData);\n            } catch (error) {\n                if (this._debugMode) {\n                    this._secureLog('warn', '\u26A0\uFE0F Anti-fingerprinting removal failed:', { details: error.message });\n                }\n            }\n        }\n\n        // Final transformation\n        if (processedData instanceof ArrayBuffer) {\n            processedData = new TextDecoder().decode(processedData);\n        }\n\n        if (typeof processedData === 'string') {\n            try {\n                const finalContent = JSON.parse(processedData);\n                if (finalContent.type === 'fake' || finalContent.isFakeTraffic === true) {\n                    if (this._debugMode) {\n                        this._secureLog('warn', `\uD83C\uDFAD BLOCKED: Final check fake message: ${finalContent.pattern || 'unknown'}`);\n                    }\n                    return 'FAKE_MESSAGE_FILTERED';\n                }\n            } catch (e) {\n            }\n        }\n\n        return processedData;\n\n    } catch (error) {\n        this._secureLog('error', '\u274C Critical error in removeSecurityLayers:', { errorType: error?.constructor?.name || 'Unknown' });\n        return data;\n    }\n}\n\n    removeAntiFingerprinting(data) {\n        // This is a simplified version - in practice, you'd need to reverse all operations\n        // For now, we'll just return the data as-is since the operations are mostly additive\n        return data;\n    }\n\n    async applySecurityLayers(data, isFakeMessage = false) {\n        try {\n            let processedData = data;\n            \n            if (isFakeMessage) {\n                if (this.encryptionKey && typeof processedData === 'string') {\n                    processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n                }\n                return processedData;\n            }\n            \n            if (this.securityFeatures.hasNestedEncryption && this.nestedEncryptionKey && processedData instanceof ArrayBuffer) {\n                processedData = await this.applyNestedEncryption(processedData);\n            }\n            \n            if (this.securityFeatures.hasPacketReordering && this.reorderingConfig?.enabled && processedData instanceof ArrayBuffer) {\n                processedData = this.applyPacketReordering(processedData);\n            }\n            \n            if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n                processedData = this.applyPacketPadding(processedData);\n            }\n            \n            if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n                processedData = this.applyAntiFingerprinting(processedData);\n            }\n            \n            if (this.encryptionKey && typeof processedData === 'string') {\n                processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n            }\n            \n            return processedData;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error in applySecurityLayers:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data;\n        }\n    }\n\n    /**\n     * Whitelist + bound the per-message UI metadata so a peer cannot smuggle\n     * arbitrary objects, huge values, or absurd timers through it.\n     * @param {object} meta\n     * @returns {object|null}\n     */\n    _sanitizeMessageMeta(meta) {\n        if (!meta || typeof meta !== 'object') return null;\n        const out = {};\n        if (typeof meta.mid === 'string' && meta.mid.length > 0 && meta.mid.length <= 64) {\n            out.mid = meta.mid.replace(/[^A-Za-z0-9_-]/g, '').slice(0, 64);\n        }\n        if (meta.code === true) out.code = true;\n        if (meta.once === true) out.once = true;\n        if (Number.isFinite(meta.onceTtl)) {\n            // View-once: seconds the message stays visible after the peer opens it.\n            const onceTtl = Math.floor(meta.onceTtl);\n            if (onceTtl >= 1 && onceTtl <= 3600) out.onceTtl = onceTtl;\n        }\n        if (Number.isFinite(meta.ttl)) {\n            // Clamp disappearing timer to [5s, 24h]; ignore anything else.\n            const ttl = Math.floor(meta.ttl);\n            if (ttl >= 5 && ttl <= 86400) out.ttl = ttl;\n        }\n        return Object.keys(out).length ? out : null;\n    }\n\n    /**\n     * Unsend: ask the peer to remove a previously delivered message by id.\n     * Sent over the authenticated DTLS control channel like other system\n     * messages. Best-effort and cooperative \u2014 a peer can ignore it, exactly\n     * like WhatsApp/Telegram \"delete for everyone\".\n     * @param {string} messageId\n     * @returns {boolean}\n     */\n    sendMessageDelete(messageId) {\n        if (typeof messageId !== 'string' || !messageId) return false;\n        return this.sendSystemMessage({\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE_DELETE,\n            messageId: messageId.slice(0, 64)\n        });\n    }\n\n    /**\n     * Delivery receipt: tell the sender we received a chat message (by id), so\n     * their bubble can flip from \"sent\" (\u2713) to \"delivered\" (\u2713\u2713). Best-effort,\n     * over the same authenticated control channel as unsend.\n     * @param {string} messageId\n     * @returns {boolean}\n     */\n    sendDeliveryReceipt(messageId) {\n        if (typeof messageId !== 'string' || !messageId) return false;\n        return this.sendSystemMessage({\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE_RECEIPT,\n            messageId: messageId.slice(0, 64)\n        });\n    }\n\n    async sendMessage(data, meta = null) {\n        //   Comprehensive input validation\n        const validation = this._validateInputData(data, 'sendMessage');\n        if (!validation.isValid) {\n            const errorMessage = `Input validation failed: ${validation.errors.join(', ')}`;\n            this._secureLog('error', '\u274C Input validation failed in sendMessage', {\n                errors: validation.errors,\n                dataType: typeof data,\n                dataLength: data?.length || data?.byteLength || 0\n            });\n            throw new Error(errorMessage);\n        }\n\n        //   Rate limiting check\n        if (!this._checkRateLimit('sendMessage')) {\n            throw new Error('Rate limit exceeded for message sending');\n        }\n\n        //   Enforce verification gate\n        this._enforceVerificationGate('sendMessage');\n\n        //   Connection validation\n        if (!this.dataChannel || this.dataChannel.readyState !== 'open') {\n            throw new Error('Data channel not ready');\n        }\n\n        try {\n            // Ensure encryption keys are available; try to reinitialize if needed\n            if (!(this.encryptionKey && this.macKey && this.metadataKey)) {\n                await this._tryReinitializeEncryptionKeys();\n            }\n\n            this._secureLog('debug', 'sendMessage called', {\n                hasDataChannel: !!this.dataChannel,\n                dataChannelReady: this.dataChannel?.readyState === 'open',\n                isInitiator: this.isInitiator,\n                isVerified: this.isVerified,\n                connectionReady: this.peerConnection?.connectionState === 'connected'\n            });\n\n            this._secureLog('debug', '\uD83D\uDD0D sendMessage DEBUG', {\n                dataType: typeof validation.sanitizedData,\n                isString: typeof validation.sanitizedData === 'string',\n                isArrayBuffer: validation.sanitizedData instanceof ArrayBuffer,\n                dataLength: validation.sanitizedData?.length || validation.sanitizedData?.byteLength || 0,\n            });\n\n            // CRITICAL SECURITY FIX: File messages MUST be encrypted\n            // No more bypassing encryption for file_* messages\n            if (typeof validation.sanitizedData === 'string') {\n                try {\n                    const parsed = JSON.parse(validation.sanitizedData);\n                    \n                    if (parsed.type && parsed.type.startsWith('file_')) {\n                        this._secureLog('debug', '\uD83D\uDCC1 File message detected - applying full encryption with AAD', { type: parsed.type });\n                        \n                        // Create AAD for file message\n                        const aad = this._createFileMessageAAD(parsed.type, parsed.data);\n                        \n                        // Encrypt file message with AAD\n                        const encryptedData = await this._encryptFileMessage(validation.sanitizedData, aad);\n                        \n                        this.dataChannel.send(encryptedData);\n                        return true;\n                    }\n                } catch (jsonError) {\n                    // Not JSON \u2014 continue normal handling\n                }\n            }\n\n            //   For regular text messages, send via secure path with AAD\n            if (typeof validation.sanitizedData === 'string') {\n                // Verify that _createMessageAAD method is available\n                if (typeof this._createMessageAAD !== 'function') {\n                    throw new Error('_createMessageAAD method is not available. Manager may not be fully initialized.');\n                }\n                \n                // Create AAD with sequence number for anti-replay protection\n                const aad = this._createMessageAAD('message', { content: validation.sanitizedData });\n\n                const envelope = {\n                    type: 'message',\n                    data: validation.sanitizedData,\n                    timestamp: Date.now(),\n                    aad: aad // Include AAD for sequence number validation\n                };\n                // Optional per-message UI metadata (code/view-once/disappearing/id).\n                // Travels inside the encrypted envelope, NOT in the sanitized text,\n                // so it cannot corrupt or be spoofed from message content.\n                if (meta && typeof meta === 'object') {\n                    envelope.meta = this._sanitizeMessageMeta(meta);\n                }\n\n                return await this.sendSecureMessage(envelope);\n            }\n\n            //   For binary data, apply security layers with a limited mutex\n            this._secureLog('debug', '\uD83D\uDD10 Applying security layers to non-string data');\n            const securedData = await this._applySecurityLayersWithLimitedMutex(validation.sanitizedData, false);\n            this.dataChannel.send(securedData);\n            \n            return true;\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to send message', { \n                error: error.message,\n                errorType: error.constructor.name\n            });\n            throw error;\n        }\n    }\n\n    // FIX: New method applying security layers with limited mutex use\n    async _applySecurityLayersWithLimitedMutex(data, isFakeMessage = false) {\n    // Use mutex ONLY for cryptographic operations\n    return this._withMutex('cryptoOperation', async (operationId) => {\n        try {\n            let processedData = data;\n            \n            if (isFakeMessage) {\n                if (this.encryptionKey && typeof processedData === 'string') {\n                    processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n                }\n                return processedData;\n            }\n            \n            if (this.securityFeatures.hasNestedEncryption && this.nestedEncryptionKey && processedData instanceof ArrayBuffer) {\n                processedData = await this.applyNestedEncryption(processedData);\n            }\n            \n            if (this.securityFeatures.hasPacketReordering && this.reorderingConfig?.enabled && processedData instanceof ArrayBuffer) {\n                processedData = this.applyPacketReordering(processedData);\n            }\n            \n            if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n                processedData = this.applyPacketPadding(processedData);\n            }\n            \n            if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n                processedData = this.applyAntiFingerprinting(processedData);\n            }\n            \n            if (this.encryptionKey && typeof processedData === 'string') {\n                processedData = await window.EnhancedSecureCryptoUtils.encryptData(processedData, this.encryptionKey);\n            }\n            \n            return processedData;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error in applySecurityLayers:', { errorType: error?.constructor?.name || 'Unknown' });\n            return data;\n        }\n    }, 3000); // Short timeout for crypto operations\n}\n\n    async sendSystemMessage(messageData) {\n        //   Block system messages without verification\n        // Exception: Allow verification-related system messages\n        const isVerificationMessage = messageData.type === 'verification_request' || \n                                     messageData.type === 'verification_response' ||\n                                     messageData.type === 'verification_required';\n        \n        if (!isVerificationMessage) {\n            this._enforceVerificationGate('sendSystemMessage', false);\n        }\n        \n        if (!this.dataChannel || this.dataChannel.readyState !== 'open') {\n            this._secureLog('warn', '\u26A0\uFE0F Cannot send system message - data channel not ready');\n            return false;\n        }\n\n        try {\n            const systemMessage = JSON.stringify({\n                type: messageData.type,\n                data: messageData,\n                timestamp: Date.now()\n            });\n\n            this._secureLog('debug', '\uD83D\uDD27 Sending system message', { type: messageData.type });\n            this.dataChannel.send(systemMessage);\n            return true;\n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to send system message:', { errorType: error?.constructor?.name || 'Unknown' });\n            return false;\n        }\n    }\n\n    // FIX 1: Simplified mutex system for message processing\nasync processMessage(data) {\n    try {\n        // Liveness: anything arriving from the peer proves the path is alive.\n        // Optional-call on purpose \u2014 see the note in dataChannel.onmessage.\n        this._noteInboundActivity?.();\n        this._secureLog('debug', '\uFFFD\uFFFD Processing message', {\n            dataType: typeof data,\n            isArrayBuffer: data instanceof ArrayBuffer,\n            hasData: !!(data?.length || data?.byteLength)\n        });\n        \n        // CRITICAL: Early check for file messages WITHOUT mutex\n        if (typeof data === 'string') {\n            try {\n                const parsed = JSON.parse(data);\n\n                // ============================================\n                // FILE MESSAGES \u2014 PRIORITY 1 (WITHOUT MUTEX)\n                // ============================================\n                \n                const fileMessageTypes = [\n                    'file_transfer_start',\n                    'file_transfer_response',\n                    'file_chunk', \n                    'chunk_confirmation',\n                    'file_transfer_complete',\n                    'file_transfer_error'\n                ];\n\n                // CRITICAL SECURITY FIX: Check for encrypted file messages first\n                if (parsed.type === 'encrypted_file_message') {\n                    this._secureLog('debug', '\uD83D\uDCC1 Encrypted file message detected in processMessage');\n                    \n                    try {\n                        // Decrypt and validate file message\n                        const { decryptedData, aad } = await this._decryptFileMessage(data);\n                        \n                        // Parse decrypted data\n                        const decryptedParsed = JSON.parse(decryptedData);\n                        \n                        this._secureLog('debug', '\uD83D\uDCC1 File message decrypted successfully', { \n                            type: decryptedParsed.type,\n                            aadMessageType: aad.messageType \n                        });\n                        \n                        // Process decrypted file message\n                        if (this.fileTransferSystem && typeof this.fileTransferSystem.handleFileMessage === 'function') {\n                            await this.fileTransferSystem.handleFileMessage(decryptedParsed);\n                            return;\n                        }\n                    } catch (error) {\n                        this._secureLog('error', '\u274C Failed to decrypt file message', { error: error.message });\n                        return; // Drop invalid file message\n                    }\n                }\n                \n                // Legacy unencrypted file messages - should not happen in secure mode\n                if (parsed.type && fileMessageTypes.includes(parsed.type)) {\n                    this._secureLog('warn', '\u26A0\uFE0F Unencrypted file message detected - this should not happen in secure mode', { type: parsed.type });\n                    \n                    // Drop unencrypted file messages for security\n                    this._secureLog('error', '\u274C Dropping unencrypted file message for security', { type: parsed.type });\n                    return;\n                }\n                \n                // ============================================\n                // ENHANCED MESSAGES WITH AAD VALIDATION (WITHOUT MUTEX)\n                // ============================================\n                \n                if (parsed.type === 'enhanced_message') {\n                    this._secureLog('debug', '\uD83D\uDD10 Enhanced message detected in processMessage');\n                    if (!this._checkInboundRateLimit('processMessage:enhanced_message')) {\n                        return;\n                    }\n                    \n                    try {\n                        // Decrypt enhanced message\n                        const decryptedData = await window.EnhancedSecureCryptoUtils.decryptMessage(\n                            parsed.data,\n                            this.encryptionKey,\n                            this.macKey,\n                            this.metadataKey\n                        );\n                        \n                        // Parse decrypted data\n                        const decryptedParsed = JSON.parse(decryptedData.data);\n                        \n                        //   Validate AAD with sequence number\n                        if (decryptedData.metadata && decryptedData.metadata.sequenceNumber !== undefined) {\n                            if (!this._validateIncomingSequenceNumber(decryptedData.metadata.sequenceNumber, 'enhanced_message')) {\n                                this._secureLog('warn', '\u26A0\uFE0F Enhanced message sequence number validation failed - possible replay attack', {\n                                    received: decryptedData.metadata.sequenceNumber,\n                                    expected: this.expectedSequenceNumber\n                                });\n                                return; // Drop message with invalid sequence number\n                            }\n                        }\n                        \n                        // Process decrypted message (with optional UI metadata)\n                        if (decryptedParsed.type === 'message' && this.onMessage && decryptedParsed.data) {\n                            this.deliverMessageToUI(decryptedParsed.data, 'received', decryptedParsed.meta);\n                        }\n\n                        return;\n                    } catch (error) {\n                        this._secureLog('error', '\u274C Failed to decrypt enhanced message', { error: error.message });\n                        return; // Drop invalid enhanced message\n                    }\n                }\n                \n                // ============================================\n                // REGULAR USER MESSAGES (WITHOUT MUTEX)\n                // ============================================\n                \n                // SECURITY: a bare `{type:'message'}` frame and the control frames\n                // below used to be acted on here with no authentication at all \u2014\n                // the same injection that was removed from dataChannel.onmessage.\n                // This whole method is currently unreachable from the live handler\n                // (nothing outside its own call cycle enters it), but leaving a\n                // second, weaker inbound pipeline in place means one future call\n                // site silently undoes that fix. Mirror the live policy exactly:\n                // chat content only via authenticated `enhanced_message`, control\n                // frames only after verification.\n                if (parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.MESSAGE) {\n                    this._secureLog('error', 'Rejected unencrypted frame in processMessage', {\n                        messageType: 'message'\n                    });\n                    return;\n                }\n\n                if (parsed.type &&\n                    EnhancedSecureWebRTCManager.POST_VERIFICATION_CONTROL_TYPES.has(parsed.type)) {\n                    if (!this._enforceVerificationGate('control_frame_receive', false)) {\n                        this._secureLog('error', 'Dropped control frame received before verification', {\n                            messageType: parsed.type\n                        });\n                        return;\n                    }\n\n                    const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n\n                    if (parsed.type === T.MESSAGE_DELETE) {\n                        const messageId = parsed?.data?.messageId ?? parsed?.messageId;\n                        if (typeof messageId === 'string' && messageId) {\n                            try { this.onMessageDelete?.(messageId.slice(0, 64)); } catch (_) {}\n                        }\n                        return;\n                    }\n\n                    if (parsed.type === T.MESSAGE_RECEIPT) {\n                        const messageId = parsed?.data?.messageId ?? parsed?.messageId;\n                        if (typeof messageId === 'string' && messageId) {\n                            try { this.onMessageDelivered?.(messageId.slice(0, 64)); } catch (_) {}\n                        }\n                        return;\n                    }\n\n                    if ([T.CALL_OFFER, T.CALL_ANSWER, T.CALL_ICE,\n                         T.CALL_DECLINE, T.CALL_END].includes(parsed.type)) {\n                        try { await this._handleCallSignal(parsed.type, parsed.data || {}); } catch (e) {\n                            this._secureLog('error', '\u274C Call signal handling failed', { errorType: e?.constructor?.name });\n                        }\n                        return;\n                    }\n\n                    if ([T.ICE_RESTART_OFFER, T.ICE_RESTART_ANSWER,\n                         T.ICE_RESTART_REQUEST].includes(parsed.type)) {\n                        try { await this._handleIceRestartSignal(parsed.type, parsed.data || {}); } catch (e) {\n                            this._secureLog('error', '\u274C ICE restart signal handling failed', { errorType: e?.constructor?.name });\n                        }\n                        return;\n                    }\n\n                    return;\n                }\n\n                // ============================================\n                // SYSTEM MESSAGES (WITHOUT MUTEX)\n                // ============================================\n                \n                if (parsed.type && ['heartbeat', 'verification', 'verification_response', 'verification_confirmed', 'verification_both_confirmed', 'peer_disconnect', 'security_upgrade'].includes(parsed.type)) {\n                    this.handleSystemMessage(parsed);\n                    return;\n                }\n                \n                // ============================================\n                // FAKE MESSAGES (WITHOUT MUTEX)\n                // ============================================\n                \n                if (parsed.type === 'fake') {\n                    this._secureLog('warn', '\uD83C\uDFAD Fake message blocked in processMessage', { pattern: parsed.pattern });\n                    return;\n                }\n                \n            } catch (jsonError) {\n                // SECURITY: non-JSON payloads were rendered straight into the chat\n                // as plain text \u2014 unauthenticated peer input presented as a real\n                // message. Every legitimate frame is JSON; drop the rest.\n                this._secureLog('error', 'Rejected malformed (non-JSON) frame in processMessage', {\n                    dataLength: typeof data === 'string' ? data.length : 0\n                });\n                return;\n            }\n        }\n\n        // ============================================\n        // ENCRYPTED DATA PROCESSING (WITH MUTEX ONLY FOR CRYPTO)\n        // ============================================\n        \n        // If here \u2014 apply security layers with limited mutex\n        const originalData = await this._processEncryptedDataWithLimitedMutex(data);\n\n        // Check processing result\n        if (originalData === 'FAKE_MESSAGE_FILTERED' || \n            originalData === 'FILE_MESSAGE_FILTERED' || \n            originalData === 'SYSTEM_MESSAGE_FILTERED') {\n            return;\n        }\n        \n        if (!originalData) {\n            this._secureLog('warn', '\u26A0\uFE0F No data returned from removeSecurityLayers');\n            return;\n        }\n\n        // Handle result after removeSecurityLayers\n        let messageText;\n        \n        if (typeof originalData === 'string') {\n            try {\n                const message = JSON.parse(originalData);\n                \n                // SECOND CHECK FOR FILE MESSAGES AFTER DECRYPTION\n                if (message.type && fileMessageTypes.includes(message.type)) {\n                    this._secureLog('debug', '\uD83D\uDCC1 File message detected after decryption', { type: message.type });\n                    if (this.fileTransferSystem) {\n                        await this.fileTransferSystem.handleFileMessage(message);\n                    }\n                    return;\n                }\n                \n                if (message.type && ['heartbeat', 'verification', 'verification_response', 'verification_confirmed', 'verification_both_confirmed', 'peer_disconnect', 'security_upgrade'].includes(message.type)) {\n                    this.handleSystemMessage(message);\n                    return;\n                }\n                \n                if (message.type === 'fake') {\n                    this._secureLog('warn', `\uD83C\uDFAD Post-decryption fake message blocked: ${message.pattern}`);\n                    return;\n                }\n                \n                // Regular messages\n                if (message.type === 'message' && message.data) {\n                    messageText = message.data;\n                } else {\n                    messageText = originalData;\n                }\n            } catch (e) {\n                messageText = originalData;\n            }\n        } else if (originalData instanceof ArrayBuffer) {\n            messageText = new TextDecoder().decode(originalData);\n        } else if (originalData && typeof originalData === 'object' && originalData.message) {\n            messageText = originalData.message;\n        } else {\n            this._secureLog('warn', '\u26A0\uFE0F Unexpected data type after processing:', { details: typeof originalData });\n            return;\n        }\n\n        // Final check for fake and file messages\n        if (messageText && messageText.trim().startsWith('{')) {\n            try {\n                const finalCheck = JSON.parse(messageText);\n                if (finalCheck.type === 'fake') {\n                    this._secureLog('warn', `\uD83C\uDFAD Final fake message check blocked: ${finalCheck.pattern}`);\n                    return;\n                }\n                \n                // Additional check for file and system messages\n                const blockedTypes = [\n                    'file_transfer_start', 'file_transfer_response', 'file_chunk', \n                    'chunk_confirmation', 'file_transfer_complete', 'file_transfer_error',\n                    'heartbeat', 'verification', 'verification_response',\n                    'peer_disconnect', 'key_rotation_signal', 'key_rotation_ready', 'security_upgrade',\n                    'ice_restart_offer', 'ice_restart_answer', 'ice_restart_request'\n                ];\n                \n                if (finalCheck.type && blockedTypes.includes(finalCheck.type)) {\n                    this._secureLog('warn', `\uD83D\uDCC1 Final system/file message check blocked: ${finalCheck.type}`);\n                    return;\n                }\n            } catch (e) {\n                // Not JSON \u2014 fine for plain text\n            }\n        }\n\n        // SECURITY: removeSecurityLayers() strips obfuscation (padding, reordering,\n        // nested layers) \u2014 it does NOT authenticate anything, and it returns the\n        // input untouched whenever no layer applies. Delivering its output was\n        // therefore a second door into the chat for unauthenticated peer input.\n        // Chat content has exactly one door: _processEnhancedMessageWithoutMutex,\n        // which verifies the HMAC, the AAD and the sequence number first.\n        if (messageText) {\n            this._secureLog('error', 'Rejected unauthenticated payload at the end of processMessage', {\n                messageLength: typeof messageText === 'string' ? messageText.length : 0\n            });\n        }\n\n    } catch (error) {\n        this._secureLog('error', '\u274C Failed to process message:', { errorType: error?.constructor?.name || 'Unknown' });\n    }\n}\n\n    // FIX: New method with limited mutex when processing encrypted data\n    async _processEncryptedDataWithLimitedMutex(data) {\n        // Use mutex ONLY for cryptographic operations\n        return this._withMutex('cryptoOperation', async (operationId) => {\n            this._secureLog('debug', '\uD83D\uDD10 Processing encrypted data with limited mutex', {\n                operationId: operationId,\n                dataType: typeof data\n            });\n            \n            try {\n                // Apply security layers\n                const originalData = await this.removeSecurityLayers(data);\n                return originalData;\n                \n            } catch (error) {\n                this._secureLog('error', '\u274C Error processing encrypted data', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                return data; // Return original data on error\n            }\n        }, 2000); // Short timeout for crypto operations\n    }\n\n        notifySecurityUpdate() {\n            try {\n                this._secureLog('debug', '\uD83D\uDD12 Notifying about security level update', {\n                        isConnected: this.isConnected(),\n                        isVerified: this.isVerified,\n                        hasKeys: !!(this.encryptionKey && this.macKey && this.metadataKey),\n                        hasLastCalculation: !!this.lastSecurityCalculation\n                    });\n                \n                // Send an event about security level update\n                this._dispatchAppEvent?.(new CustomEvent('security-level-updated', {\n                    detail: { \n                        timestamp: Date.now(), \n                        manager: 'webrtc',\n                        webrtcManager: this,\n                        isConnected: this.isConnected(),\n                        isVerified: this.isVerified,\n                        hasKeys: !!(this.encryptionKey && this.macKey && this.metadataKey),\n                        lastCalculation: this.lastSecurityCalculation\n                    }\n                }));\n                \n                // FIX: Force header refresh with correct manager\n                setTimeout(() => {\n                    //   Removed global callback - use event system instead\n                    // if (window.forceHeaderSecurityUpdate) {\n                    //     window.forceHeaderSecurityUpdate(this);\n                    // }\n                }, 100);\n                \n                // FIX: Direct update if there is a calculation\n                if (this.lastSecurityCalculation) {\n                    this._dispatchAppEvent?.(new CustomEvent('real-security-calculated', {\n                        detail: {\n                            securityData: this.lastSecurityCalculation,\n                            webrtcManager: this,\n                            timestamp: Date.now()\n                        }\n                    }));\n                }\n                \n            } catch (error) {\n                this._secureLog('error', '\u274C Error in notifySecurityUpdate', {\n                        error: error.message\n                    });\n            }\n        }\n\n        handleSystemMessage(message) {\n            this._secureLog('debug', '\uD83D\uDD27 Handling system message:', { type: message.type });\n            \n            switch (message.type) {\n                case 'heartbeat':\n                    this.handleHeartbeat(message);\n                    break;\n                case 'verification':\n                    this.handleVerificationRequest(message.data);\n                    break;\n                case 'verification_response':\n                    this.handleVerificationResponse(message.data);\n                    break;\n                case 'sas_code':\n                    this.handleSASCode(message.data);\n                    break;\n                case 'verification_confirmed':\n                    this.handleVerificationConfirmed(message.data);\n                    break;\n                case 'verification_both_confirmed':\n                    this.handleVerificationBothConfirmed(message.data);\n                    break;\n                case 'peer_disconnect':\n                    this.handlePeerDisconnectNotification(message);\n                    break;\n                case 'key_rotation_signal':\n                    this._secureLog('debug', '\uD83D\uDD04 Key rotation signal received (ignored for stability)');\n                    break;\n                case 'key_rotation_ready':\n                    this._secureLog('debug', '\uD83D\uDD04 Key rotation ready signal received (ignored for stability)');\n                    break;\n                case 'security_upgrade':\n                    this._secureLog('debug', '\uD83D\uDD12 Security upgrade notification received:', { type: message.type });\n                    // Security upgrade messages are handled internally, not displayed to user\n                    // to prevent duplicate system messages\n                    break;\n                default:\n                    this._secureLog('debug', '\uD83D\uDD27 Unknown system message type:', { type: message.type });\n            }\n        }\n\n        // ============================================\n        // FUNCTION MANAGEMENT METHODS\n        // ============================================\n\n        // Method to enable Stage 2 functions\n        enableStage2Security() {\n        if (this.sessionConstraints?.hasPacketReordering) {\n            this.securityFeatures.hasPacketReordering = true;\n            this.reorderingConfig.enabled = true;\n        }\n        \n        if (this.sessionConstraints?.hasAntiFingerprinting) {\n            this.securityFeatures.hasAntiFingerprinting = true;\n            this.antiFingerprintingConfig.enabled = true;\n            // Enable full anti-fingerprinting features\n            this.antiFingerprintingConfig.randomizeSizes = true;\n            this.antiFingerprintingConfig.maskPatterns = true;\n            this.antiFingerprintingConfig.useRandomHeaders = true;\n        }\n        \n        this.notifySecurityUpgrade(2);\n        setTimeout(() => {\n            this.calculateAndReportSecurityLevel();\n        }, 500);\n    }\n\n        // Method to enable Stage 3 features (traffic obfuscation)\n        enableStage3Security() {\n            this._secureLog('info', '\uD83D\uDD12 Enabling Stage 3 features (traffic obfuscation)');\n            \n            if (this.sessionConstraints?.hasMessageChunking) {\n                this.securityFeatures.hasMessageChunking = true;\n                this.chunkingConfig.enabled = true;\n            }\n            \n            if (this.sessionConstraints?.hasFakeTraffic) {\n                this.securityFeatures.hasFakeTraffic = true;\n                this.fakeTrafficConfig.enabled = true;\n                this.startFakeTrafficGeneration();\n            }\n            \n            this.notifySecurityUpgrade(3);\n            setTimeout(() => {\n                this.calculateAndReportSecurityLevel();\n            }, 500);\n        }\n\n        // Method for enabling Stage 4 functions (maximum safety)\n        enableStage4Security() {\n            this._secureLog('info', '\uD83D\uDD12 Enabling Stage 4 features (maximum safety)');\n            \n            if (this.sessionConstraints?.hasDecoyChannels && this.isConnected() && this.isVerified) {\n                this.securityFeatures.hasDecoyChannels = true;\n                this.decoyChannelConfig.enabled = true;\n                \n                try {\n                    this.initializeDecoyChannels();\n                } catch (error) {\n                    this._secureLog('warn', '\u26A0\uFE0F Decoy channels initialization failed:', { details: error.message });\n                    this.securityFeatures.hasDecoyChannels = false;\n                    this.decoyChannelConfig.enabled = false;\n                }\n            }\n            \n            // Full anti-fingerprinting for maximum sessions\n            if (this.sessionConstraints?.hasAntiFingerprinting) {\n                this.antiFingerprintingConfig.randomizeSizes = true;\n                this.antiFingerprintingConfig.maskPatterns = true;\n                this.antiFingerprintingConfig.useRandomHeaders = false; \n            }\n            \n            this.notifySecurityUpgrade(4);\n            setTimeout(() => {\n                this.calculateAndReportSecurityLevel();\n            }, 500);\n        }\n\n        forceSecurityUpdate() {\n            setTimeout(() => {\n                this.calculateAndReportSecurityLevel();\n                this.notifySecurityUpdate();\n            }, 100);\n        }\n\n        // Method for getting security status\n        getSecurityStatus() {\n            const activeFeatures = Object.entries(this.securityFeatures)\n                .filter(([key, value]) => value === true)\n                .map(([key]) => key);\n                \n            const stage = 4; // Maximum security stage\n                        \n            return {\n                stage: stage,\n                securityLevel: 'maximum',\n                activeFeatures: activeFeatures,\n                totalFeatures: Object.keys(this.securityFeatures).length,\n                activeFeaturesCount: activeFeatures.length,\n                activeFeaturesNames: activeFeatures,\n                sessionConstraints: this.sessionConstraints\n            };\n        }\n\n        // Method to notify UI about security update\n        notifySecurityUpgrade(stage) {\n            const stageNames = {\n                1: 'Basic Enhanced',\n                2: 'Medium Security', \n                3: 'High Security',\n                4: 'Maximum Security'\n            };\n            \n            const message = `\uD83D\uDD12 Security upgraded to Stage ${stage}: ${stageNames[stage]}`;\n            \n            // Avoid duplicate security-upgrade notifications\n            if (!this.securityUpgradeNotificationSent || this.lastSecurityUpgradeStage !== stage) {\n                this.securityUpgradeNotificationSent = true;\n                this.lastSecurityUpgradeStage = stage;\n                \n                // Notify local UI via onMessage\n                if (this.onMessage) {\n                    this.deliverMessageToUI(message, 'system');\n                }\n            }\n\n            // Send security upgrade notification to peer via WebRTC\n            if (this.dataChannel && this.dataChannel.readyState === 'open') {\n                try {\n                    const securityNotification = {\n                        type: 'security_upgrade',\n                        stage: stage,\n                        stageName: stageNames[stage],\n                        message: message,\n                        timestamp: Date.now()\n                    };\n                    \n                    this._secureLog('debug', '\uD83D\uDD12 Sending security upgrade notification to peer:', { type: securityNotification.type, stage: securityNotification.stage });\n                    this.dataChannel.send(JSON.stringify(securityNotification));\n                } catch (error) {\n                    this._secureLog('warn', '\u26A0\uFE0F Failed to send security upgrade notification to peer:', { details: error.message });\n                }\n            }\n\n            const status = this.getSecurityStatus();\n        }\n\n        async calculateAndReportSecurityLevel() {\n            try {\n                if (!window.EnhancedSecureCryptoUtils) {\n                    this._secureLog('warn', '\u26A0\uFE0F EnhancedSecureCryptoUtils not available for security calculation');\n                    return null;\n                }\n\n                if (!this.isConnected() || !this.isVerified || !this.encryptionKey || !this.macKey) {\n                    this._secureLog('debug', '\u26A0\uFE0F WebRTC not ready for security calculation', {\n                        connected: this.isConnected(),\n                        verified: this.isVerified,\n                        hasEncryptionKey: !!this.encryptionKey,\n                        hasMacKey: !!this.macKey\n                    });\n                    return null;\n                }\n\n                this._secureLog('debug', '\uD83D\uDD0D Calculating real security level', {\n                    managerState: 'ready',\n                    hasAllKeys: !!(this.encryptionKey && this.macKey && this.metadataKey)\n                });\n                \n                const securityData = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(this);\n                \n                this._secureLog('info', 'Real security level calculated', {\n                    hasSecurityLevel: !!securityData.level,\n                    scoreRange: securityData.score > 80 ? 'high' : securityData.score > 50 ? 'medium' : 'low',\n                    checksRatio: `${securityData.passedChecks}/${securityData.totalChecks}`,\n                    isRealCalculation: securityData.isRealData\n                });\n\n                this.lastSecurityCalculation = securityData;\n\n                this._dispatchAppEvent?.(new CustomEvent('real-security-calculated', {\n                    detail: {\n                        securityData: securityData,\n                        webrtcManager: this,\n                        timestamp: Date.now(),\n                        source: 'calculateAndReportSecurityLevel'\n                    }\n                }));\n\n                if (securityData.isRealData && this.onMessage) {\n                    if (!this.securityCalculationNotificationSent || this.lastSecurityCalculationLevel !== securityData.level) {\n                        this.securityCalculationNotificationSent = true;\n                        this.lastSecurityCalculationLevel = securityData.level;\n                        \n                        const message = `Security Level: ${securityData.level} (${securityData.score}%) - ${securityData.passedChecks}/${securityData.totalChecks} checks passed`;\n                        this.deliverMessageToUI(message, 'system');\n                    }\n                }\n                \n                return securityData;\n                \n            } catch (error) {\n                this._secureLog('error', 'Failed to calculate real security level', {\n                    errorType: error.constructor.name\n                });\n                return null;\n            }\n        }\n\n        // ============================================\n        // AUTOMATIC STEP-BY-STEP SWITCHING ON\n        // ============================================\n\n        // Method for automatic feature enablement with stability check\n        async autoEnableSecurityFeatures() {\n            this._secureLog('info', 'Starting graduated security activation - all features enabled');\n\n        const checkStability = () => {\n            const isStable = this.isConnected() && \n                            this.isVerified && \n                            this.connectionAttempts === 0 && \n                            this.messageQueue.length === 0 &&\n                            this.peerConnection?.connectionState === 'connected';\n            return isStable;\n        };\n        \n        await this.calculateAndReportSecurityLevel();\n        this.notifySecurityUpgrade(1);\n        \n            // Enable all security stages progressively\n            setTimeout(async () => {\n                if (checkStability()) {\n                    this.enableStage2Security();\n                    await this.calculateAndReportSecurityLevel(); \n                    \n                        setTimeout(async () => {\n                            if (checkStability()) {\n                                this.enableStage3Security();\n                                await this.calculateAndReportSecurityLevel();\n                                \n                                setTimeout(async () => {\n                                    if (checkStability()) {\n                                        this.enableStage4Security();\n                                        await this.calculateAndReportSecurityLevel();\n                                    }\n                                }, 20000);\n                            }\n                        }, 15000);\n                }\n            }, 10000);\n    }\n\n    // ============================================\n    // CONNECTION MANAGEMENT WITH ENHANCED SECURITY\n    // ============================================\n\n    async establishConnection() {\n        try {\n            // Initialize enhanced security features\n            await this.initializeEnhancedSecurity();\n            \n            // Start fake traffic generation\n            if (this.fakeTrafficConfig.enabled) {\n                this.startFakeTrafficGeneration();\n            }\n            \n            // Initialize decoy channels\n            if (this.decoyChannelConfig.enabled) {\n                this.initializeDecoyChannels();\n            }\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Failed to establish enhanced connection:', { errorType: error?.constructor?.name || 'Unknown' });\n            // Do not close the connection on setup errors \u2014 just log and continue\n            this.onStatusChange('disconnected');\n            throw error;\n        }\n    }\n\n    /**\n     *   Clear all verification states and data\n     * Called when verification is rejected or connection is terminated\n     */\n    _clearVerificationStates() {\n        try {\n            \n            // Clear verification states\n            this.localVerificationConfirmed = false;\n            this.remoteVerificationConfirmed = false;\n            this.bothVerificationsConfirmed = false;\n            this.isVerified = false;\n            this.verificationCode = null;\n            this.pendingSASCode = null;\n            this.sasValidationAttempts = 0;\n            this._verificationUiOpened = false;\n            this._sasLocalFingerprint = null;\n            this._sasRemoteFingerprint = null;\n            \n            // Clear key fingerprint and connection data\n            this.keyFingerprint = null;\n            this.expectedDTLSFingerprint = null;\n            this._peerDTLSFingerprint = null;\n            this.connectionId = null;\n            \n            // Clear processed message IDs\n            this.processedMessageIds.clear();\n            \n            // Reset notification flags\n            this.verificationNotificationSent = false;\n            this.verificationInitiationSent = false;\n            \n        } catch (error) {\n            this._secureLog('error', '\u274C Error clearing verification states:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n\n    // Start periodic cleanup for rate limiting and security\n    startPeriodicCleanup() {\n        //   Cleanup moved to unified scheduler\n        this._secureLog('info', '\uD83D\uDD27 Periodic cleanup moved to unified scheduler');\n    }\n\n    // Calculate current security level with real verification\n    async calculateSecurityLevel() {\n        return await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(this);\n    }\n\n    // PFS: Check if key rotation is needed\n    shouldRotateKeys() {\n        if (!this.isConnected() || !this.isVerified) {\n            return false;\n        }\n        \n        const now = Date.now();\n        const timeSinceLastRotation = now - this.lastKeyRotation;\n        \n        // Rotate keys every 5 minutes or after 100 messages\n        return timeSinceLastRotation > this.keyRotationInterval || \n               this.messageCounter % 100 === 0;\n    }\n\n    // PFS: Rotate encryption keys for Perfect Forward Secrecy\n    async rotateKeys() {\n        return this._withMutex('keyOperation', async (operationId) => {\n            this._secureLog('info', '\uD83D\uDD04 Starting key rotation with mutex', {\n                operationId: operationId\n            });\n            \n            // Validate state inside the critical section\n            if (!this.isConnected() || !this.isVerified) {\n                this._secureLog('warn', ' Key rotation aborted - connection not ready', {\n                    operationId: operationId,\n                    isConnected: this.isConnected(),\n                    isVerified: this.isVerified\n                });\n                return false;\n            }\n            \n            // Ensure rotation is not already in progress\n            if (this._keySystemState.isRotating) {\n                this._secureLog('warn', ' Key rotation already in progress', {\n                    operationId: operationId\n                });\n                return false;\n            }\n            \n            try {\n                // Set rotation flag\n                this._keySystemState.isRotating = true;\n                this._keySystemState.lastOperation = 'rotation';\n                this._keySystemState.lastOperationTime = Date.now();\n                \n                // Send rotation signal to peer\n                const rotationSignal = {\n                    type: 'key_rotation_signal',\n                    newVersion: this.currentKeyVersion + 1,\n                    timestamp: Date.now(),\n                    operationId: operationId\n                };\n                \n                if (this.dataChannel && this.dataChannel.readyState === 'open') {\n                    this.dataChannel.send(JSON.stringify(rotationSignal));\n                } else {\n                    throw new Error('Data channel not ready for key rotation');\n                }\n                \n                //   Perform hard wipe of old keys for real PFS\n                this._hardWipeOldKeys();\n                \n                // Wait for peer confirmation\n                return new Promise((resolve) => {\n                    this.pendingRotation = {\n                        newVersion: this.currentKeyVersion + 1,\n                        operationId: operationId,\n                        resolve: resolve,\n                        timeout: setTimeout(() => {\n                            this._secureLog('error', ' Key rotation timeout', {\n                                operationId: operationId\n                            });\n                            this._keySystemState.isRotating = false;\n                            this.pendingRotation = null;\n                            resolve(false);\n                        }, 10000) // 10 seconds timeout\n                    };\n                });\n                \n            } catch (error) {\n                this._secureLog('error', ' Key rotation failed in critical section', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                this._keySystemState.isRotating = false;\n                return false;\n            }\n        }, 10000); // 10 seconds timeout for the entire operation\n    }\n\n    //   Real PFS - Clean up old keys with hard wipe\n    cleanupOldKeys() {\n        const now = Date.now();\n        const maxKeyAge = EnhancedSecureWebRTCManager.LIMITS.MAX_KEY_AGE; // 15 minutes - keys older than this are deleted\n        \n        let wipedKeysCount = 0;\n        \n        for (const [version, keySet] of this.oldKeys.entries()) {\n            if (now - keySet.timestamp > maxKeyAge) {\n                //   Hard wipe old keys before deletion\n                if (keySet.encryptionKey) {\n                    this._secureWipeMemory(keySet.encryptionKey, 'pfs_cleanup_wipe');\n                }\n                if (keySet.macKey) {\n                    this._secureWipeMemory(keySet.macKey, 'pfs_cleanup_wipe');\n                }\n                if (keySet.metadataKey) {\n                    this._secureWipeMemory(keySet.metadataKey, 'pfs_cleanup_wipe');\n                }\n                \n                // Clear references\n                keySet.encryptionKey = null;\n                keySet.macKey = null;\n                keySet.metadataKey = null;\n                keySet.keyFingerprint = null;\n                \n                this.oldKeys.delete(version);\n                wipedKeysCount++;\n                \n                this._secureLog('info', '\uD83E\uDDF9 Old PFS keys hard wiped and cleaned up', {\n                    version: version,\n                    age: Math.round((now - keySet.timestamp) / 1000) + 's',\n                    timestamp: Date.now()\n                });\n            }\n        }\n        \n        if (wipedKeysCount > 0) {\n            this._secureLog('info', `PFS cleanup completed: ${wipedKeysCount} keys hard wiped`, {\n                timestamp: Date.now()\n            });\n        }\n    }\n\n    // PFS: Get keys for specific version (for decryption)\n    getKeysForVersion(version) {\n        // First, we check the old keys (including version 0).\n        const oldKeySet = this.oldKeys.get(version);\n        if (oldKeySet && oldKeySet.encryptionKey && oldKeySet.macKey && oldKeySet.metadataKey) {\n            return {\n                encryptionKey: oldKeySet.encryptionKey,\n                macKey: oldKeySet.macKey,\n                metadataKey: oldKeySet.metadataKey\n            };\n        }\n        \n        // If this is the current version, return the current keys.\n        if (version === this.currentKeyVersion) {\n            if (this.encryptionKey && this.macKey && this.metadataKey) {\n                return {\n                    encryptionKey: this.encryptionKey,\n                    macKey: this.macKey,\n                    metadataKey: this.metadataKey\n                };\n            }\n        }\n        \n        window.EnhancedSecureCryptoUtils.secureLog.log('error', 'No valid keys found for version', {\n            requestedVersion: version,\n            currentVersion: this.currentKeyVersion,\n            availableVersions: Array.from(this.oldKeys.keys())\n        });\n        \n        return null;\n    }\n\n    _hasTurnServer() {\n        return (this._config.webrtc.iceServers || []).some(server => {\n            const urls = Array.isArray(server.urls) ? server.urls : [server.urls];\n            return urls.some(url => typeof url === 'string' && url.toLowerCase().startsWith('turn:'));\n        });\n    }\n\n    _buildPeerConnectionConfig() {\n        const relayOnly = this._isRelayOnlyMode();\n        const config = {\n            iceServers: this._config.webrtc.iceServers,\n            iceCandidatePoolSize: 10,\n            bundlePolicy: 'balanced'\n        };\n        if (relayOnly) {\n            config.iceTransportPolicy = 'relay';\n        }\n        return config;\n    }\n\n    _summarizeIceServerConfig(iceServers = []) {\n        const summary = {\n            serverCount: 0,\n            stun: 0,\n            turn: 0,\n            turns: 0,\n            hasCredentials: false\n        };\n\n        for (const server of iceServers || []) {\n            summary.serverCount += 1;\n            if (server?.username || server?.credential) {\n                summary.hasCredentials = true;\n            }\n\n            const urls = Array.isArray(server?.urls) ? server.urls : [server?.urls];\n            for (const rawUrl of urls) {\n                const url = String(rawUrl || '').toLowerCase();\n                if (url.startsWith('stun:')) summary.stun += 1;\n                if (url.startsWith('turn:')) summary.turn += 1;\n                if (url.startsWith('turns:')) summary.turns += 1;\n            }\n        }\n\n        return summary;\n    }\n\n    _isRelayOnlyMode() {\n        return this._config.webrtc.privacyMode === 'relay-only';\n    }\n\n    _setRelayOnlyMode(relayOnly) {\n        const enabled = relayOnly === true;\n        this._config.webrtc.privacyMode = enabled ? 'relay-only' : 'standard';\n        this._config.webrtc.relayOnly = enabled;\n    }\n\n    _warnIfTurnMissing() {\n        if (this._ipLeakWarningShown) return;\n        this._ipLeakWarningShown = true;\n\n        const relayOnly = this._isRelayOnlyMode();\n        const hasTurnServer = this._hasTurnServer();\n        let message = null;\n\n        if (relayOnly && !hasTurnServer) {\n            message = 'Privacy mode is relay-only, but no TURN server is configured. Relay-only mode cannot connect until TURN is configured; STUN alone does not hide IP addresses.';\n        } else if (!relayOnly && !hasTurnServer) {\n            message = 'Privacy warning: relay-only mode is disabled and no TURN server is configured. Direct WebRTC connections may expose host or server-reflexive IP addresses; STUN alone does not provide IP protection.';\n        } else if (!relayOnly) {\n            message = 'Privacy warning: relay-only mode is disabled. Direct WebRTC connectivity may expose host or server-reflexive IP addresses even when TURN is available.';\n        }\n\n        if (!message) return;\n        this.deliverMessageToUI(message, 'system');\n    }\n\n    createPeerConnection() {\n        this._sessionAlive = true;\n        const config = this._buildPeerConnectionConfig();\n        this._warnIfTurnMissing();\n        console.info('[SecureBit ICE] peer connection config', this._summarizeIceServerConfig(config.iceServers));\n\n        this.peerConnection = new RTCPeerConnection(config);\n\n        // A fresh PC invalidates any call senders kept from a previous PC \u2014 reset\n        // them so the next call creates new transceivers on this connection.\n        this._callAudioSender = null;\n        this._callVideoSender = null;\n\n        this.peerConnection.onconnectionstatechange = () => {\n            const state = this.peerConnection.connectionState;\n            console.info('[SecureBit ICE] connection state changed', {\n                connectionState: state,\n                iceConnectionState: this.peerConnection.iceConnectionState,\n                iceGatheringState: this.peerConnection.iceGatheringState\n            });\n            \n            if (state === 'connected' && !this.isVerified) {\n                this._notifyVerificationReadyIfPossible();\n            } else if (state === 'connected' && this.isVerified) {\n                // Covers both a first connect and the end of a successful ICE\n                // restart. When it was a recovery, _onPathRecovered emits\n                // 'connected' itself (after draining the queue), so don't repeat it.\n                if (!this._onPathRecovered()) this.onStatusChange('connected');\n            } else if (state === 'disconnected') {\n                if (this.intentionalDisconnect) {\n                    this.onStatusChange('disconnected');\n                    setTimeout(() => this.disconnect(), 100);\n                } else if (this.isVerified) {\n                    // 'disconnected' is usually a transient path glitch \u2014 do NOT\n                    // tear the session down. Recovery keeps the keys, the SAS\n                    // verification and the history intact; only the path changes.\n                    this._onPathDegraded('ice_disconnected');\n                } else {\n                    console.warn(`[SecureBit ICE] State is ${state} but not verified yet. Keeping session open for manual exchange.`);\n                }\n            } else if (state === 'closed') {\n                // 'closed' is terminal: the peer connection is gone, nothing to restart.\n                this._resetReconnectState();\n                this.onStatusChange('disconnected');\n                this._clearVerificationStates();\n                if (this.intentionalDisconnect) setTimeout(() => this.disconnect(), 100);\n            } else if (state === 'failed') {\n                this._collectIceFailureDiagnostics().then((diagnostics) => {\n                    console.warn('[SecureBit ICE] failure diagnostics', diagnostics);\n                    this._noteIceFailureDiagnostics(diagnostics);\n                });\n\n                // Do not auto-reconnect or close session during setup.\n                if (this.isVerified) {\n                    this._onPathLost('ice_failed');\n                } else {\n                    console.warn('[SecureBit ICE] State is failed but not verified yet. Keeping session open for manual exchange.');\n                }\n            } else if (this.isReconnecting() && (state === 'connecting' || state === 'new')) {\n                // Mid-restart churn: keep the UI on \"reconnecting\" instead of\n                // flapping back to \"connecting\".\n            } else {\n                this.onStatusChange(state);\n            }\n        };\n\n        this.peerConnection.oniceconnectionstatechange = () => {\n            console.info('[SecureBit ICE] ICE connection state changed', {\n                connectionState: this.peerConnection.connectionState,\n                iceConnectionState: this.peerConnection.iceConnectionState,\n                iceGatheringState: this.peerConnection.iceGatheringState\n            });\n        };\n\n        this.peerConnection.onicecandidateerror = (event) => {\n            console.warn('[SecureBit ICE] ICE candidate error', {\n                url: event.url,\n                errorCode: event.errorCode,\n                errorText: event.errorText\n            });\n        };\n\n        // Inbound call media (DTLS-SRTP encrypted, bundled on this same transport).\n        // ontrack does NOT re-fire for a REUSED transceiver on a later call, so we\n        // never rely on the event's track alone \u2014 we rebuild the remote stream from\n        // pc.getReceivers() (the source of truth for current live inbound tracks).\n        this.peerConnection.ontrack = (event) => {\n            try {\n                this._refreshRemoteStream();\n            } catch (e) {\n                this._secureLog('warn', '\u26A0\uFE0F ontrack handling failed', { errorType: e?.constructor?.name });\n            }\n        };\n\n        this.peerConnection.ondatachannel = (event) => {\n\n            // CRITICAL: Store the received data channel\n            if (event.channel.label === 'securechat') {\n                this.dataChannel = event.channel;\n                this.setupDataChannel(event.channel);\n            } else {\n                // Handle additional channels (heartbeat, etc.)\n                if (event.channel.label === 'heartbeat') {\n                    this.heartbeatChannel = event.channel;\n                }\n            }\n        };\n    }\n\n    setupDataChannel(channel) {\n\n        this.dataChannel = channel;\n        // The open handler must run exactly once, whether it is reached through\n        // the 'open' event or through the already-open path below.\n        let openHandled = false;\n\n        const handleChannelOpen = async () => {\n            if (openHandled) return;\n            openHandled = true;\n            // Configure backpressure for large transfers\n            try {\n                if (this.dataChannel && typeof this.dataChannel.bufferedAmountLowThreshold === 'number') {\n                    // 1 MB threshold for bufferedamountlow event\n                    this.dataChannel.bufferedAmountLowThreshold = 1024 * 1024;\n                }\n            } catch (e) {\n                // ignore\n            }\n            \n            // SBQ2: the key material has not moved yet. Run the in-band exchange\n            // before anything else touches the channel \u2014 establishConnection and\n            // the file-transfer subsystem both assume keys exist, and the SAS\n            // cannot be computed until the transcript is closed.\n            //\n            // Read the latched field rather than calling _isSbq2(): this handler\n            // is shared by both handshake paths and by the recovery tests, and a\n            // helper call here would make an unrelated path depend on a method\n            // that has nothing to do with opening a channel.\n            if (this._handshakeMode === 'sbq2') {\n                try {\n                    await this._runSbq2KeyExchange();\n                } catch (error) {\n                    this._secureLog('error', 'SBQ2 key exchange failed to start', {\n                        errorType: error?.constructor?.name || 'Unknown'\n                    });\n                    this._sbq2Abort('start_failed',\n                        'The secure handshake could not be started. Please try connecting again.');\n                    return;\n                }\n            }\n\n            try {\n                await this.establishConnection();\n\n        this.initializeFileTransfer();\n\n            } catch (error) {\n                this._secureLog('error', 'Error in establishConnection:', { errorType: error?.constructor?.name || 'Unknown' });\n                // Continue despite errors\n            }\n            \n            // CRITICAL: Send pending SAS code if available\n            if (this.pendingSASCode && this.dataChannel && this.dataChannel.readyState === 'open') {\n                try {\n                    const sasPayload = {\n                        type: 'sas_code',\n                        data: {\n                            code: this.pendingSASCode,\n                            timestamp: Date.now(),\n                            verificationMethod: 'SAS',\n                            securityLevel: 'MITM_PROTECTION_REQUIRED'\n                        }\n                    };\n                    this.dataChannel.send(JSON.stringify(sasPayload));\n                    this.pendingSASCode = null; // Clear after sending\n                } catch (error) {\n                }\n            } else if (this.pendingSASCode) {\n            }\n                \n            if (this.isVerified) {\n                this.onStatusChange('connected');\n                this.processMessageQueue();\n\n                setTimeout(async () => {\n                    await this.calculateAndReportSecurityLevel();\n                    this.autoEnableSecurityFeatures();\n                    this.notifySecurityUpdate();\n                }, 500);\n            } else {\n                this._notifyVerificationReadyIfPossible();\n                this.initiateVerification();\n            }\n            this.startHeartbeat();\n        };\n\n        this.dataChannel.onopen = handleChannelOpen;\n\n        // CRITICAL: on the answering side the channel arrives through\n        // `ondatachannel`, and it can ALREADY be in the 'open' state by then \u2014\n        // the 'open' event was dispatched before this handler existed, so\n        // assigning onopen above would never fire it. That silently left the\n        // answerer without heartbeats, without the liveness watchdog and without\n        // file-transfer init, which is why the peer whose network was fine kept\n        // showing \"connected\" long after the other side had vanished: nothing was\n        // running on that side to notice. Run it directly in that case.\n        if (this.dataChannel.readyState === 'open') {\n            Promise.resolve()\n                .then(() => handleChannelOpen())\n                .catch((error) => {\n                    this._secureLog('error', 'Deferred data channel open handling failed', {\n                        errorType: error?.constructor?.name || 'Unknown'\n                    });\n                });\n        }\n\n        this.dataChannel.onclose = () => {\n            // The channel closing takes SCTP with it, so there is nothing left for\n            // an ICE restart to repair \u2014 stop any recovery cycle rather than\n            // letting its timers keep firing against a dead session.\n            this._resetReconnectState?.();\n            this._teardownRecoveryLifecycleListeners?.();\n\n            if (!this.intentionalDisconnect) {\n                this.onStatusChange('disconnected');\n                // Clear verification states on data channel close\n                this._clearVerificationStates();\n                \n                if (!this.connectionClosedNotificationSent) {\n                    this.connectionClosedNotificationSent = true;\n                    this.deliverMessageToUI('\uD83D\uDD0C Enhanced secure connection closed. Check connection status.', 'system');\n                }\n            } else {\n                this.onStatusChange('disconnected');\n                // Clear verification states on intentional disconnect\n                this._clearVerificationStates();\n                \n                if (!this.connectionClosedNotificationSent) {\n                    this.connectionClosedNotificationSent = true;\n                    this.deliverMessageToUI('\uD83D\uDD0C Enhanced secure connection closed', 'system');\n                }\n            }\n            \n            //   Wipe ephemeral keys when session ends for PFS\n            this._wipeEphemeralKeys();\n            \n            this.stopHeartbeat();\n            this.isVerified = false;\n        };\n\n        // FIX 2: Remove mutex entirely from message processing path\n        this.dataChannel.onmessage = async (event) => {\n            try {\n                // Liveness: anything arriving from the peer proves the path is alive.\n                // Optional-call on purpose \u2014 liveness bookkeeping is auxiliary and must\n                // never be able to throw ahead of routing, where the surrounding catch\n                // would swallow it and silently drop every inbound message.\n                this._noteInboundActivity?.();\n\n                // IMPORTANT: Process ALL messages WITHOUT mutex\n                if (typeof event.data === 'string') {\n                    try {\n                        const parsed = JSON.parse(event.data);\n\n                        \n                        // ============================================\n                        // CRITICAL: FILE MESSAGES (WITHOUT MUTEX)\n                        // ============================================\n                        \n                        const fileMessageTypes = [\n                            'file_transfer_start',\n                            'file_transfer_response', \n                            'file_chunk',\n                            'chunk_confirmation',\n                            'file_transfer_complete',\n                            'file_transfer_error'\n                        ];\n                        \n                        if (parsed.type && fileMessageTypes.includes(parsed.type)) {\n\n                            // SECURITY: file control frames are written straight to\n                            // the data channel by the transfer system, so they never\n                            // pass through sendMessage()'s gate. The send side is\n                            // already gated (see sendFile); gate the receive side too\n                            // so an unverified peer cannot open transfers, push\n                            // chunks or drive transfer state before the SAS has been\n                            // compared. Nothing legitimate arrives here earlier: the\n                            // chat UI only opens once the session is verified.\n                            if (!this._enforceVerificationGate('file_message_receive', false)) {\n                                this._secureLog('error', 'Dropped file message received before verification', {\n                                    messageType: parsed.type\n                                });\n                                return;\n                            }\n\n                            if (!this.fileTransferSystem) {\n                                try {\n                                    if (this.isVerified && this.dataChannel && this.dataChannel.readyState === 'open') {\n                                        this.initializeFileTransfer();\n\n                                        let attempts = 0;\n                                        const maxAttempts = 30;\n                                        while (!this.fileTransferSystem && attempts < maxAttempts) {\n                                            await new Promise(resolve => setTimeout(resolve, 100));\n                                            attempts++;\n                                        }\n                                    }\n                                } catch (initError) {\n                                    this._secureLog('error', 'Failed to initialize file transfer system for receiver:', { errorType: initError?.constructor?.name || 'Unknown' });\n                                }\n                            }\n\n                            if (this.fileTransferSystem) {\n                                await this.fileTransferSystem.handleFileMessage(parsed);\n                                return;\n                            }\n                            // Attempt lazy initialization on receiver side\n                            this._secureLog('warn', '\u26A0\uFE0F File transfer system not ready, attempting lazy init...');\n                            try {\n                                await this._ensureFileTransferReady();\n                                if (this.fileTransferSystem) {\n                                    await this.fileTransferSystem.handleFileMessage(parsed);\n                                    return;\n                                }\n                            } catch (e) {\n                                this._secureLog('error', 'Lazy init of file transfer failed:', { errorType: e?.message || e?.constructor?.name || 'Unknown' });\n                            }\n                            this._secureLog('error', 'No file transfer system available for:', { errorType: parsed.type?.constructor?.name || 'Unknown' });\n                            return; // IMPORTANT: Do not process further\n                        }\n                        \n                        // SECURITY: everything below this line drives state the user can\n                        // see or that reshapes the peer connection \u2014 transcript edits,\n                        // ringing UI, media negotiation, ICE renegotiation. None of it is\n                        // needed before the SAS has been compared, and completing the\n                        // handshake alone is not evidence of who the peer is. Gate the\n                        // whole control plane once, here, rather than per-branch: deny by\n                        // default, and admit only the frames listed in\n                        // POST_VERIFICATION_CONTROL_TYPES, and only after verification.\n                        // Pre-verification traffic (verification/*, heartbeat) is handled\n                        // further down and is deliberately not in that set.\n                        if (parsed.type &&\n                            EnhancedSecureWebRTCManager.POST_VERIFICATION_CONTROL_TYPES.has(parsed.type)) {\n                            if (!this._enforceVerificationGate('control_frame_receive', false)) {\n                                this._secureLog('error', 'Dropped control frame received before verification', {\n                                    messageType: parsed.type\n                                });\n                                return;\n                            }\n\n                            const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n\n                            // Per-message delete (unsend) from the peer.\n                            if (parsed.type === T.MESSAGE_DELETE) {\n                                const messageId = parsed?.data?.messageId ?? parsed?.messageId;\n                                if (typeof messageId === 'string' && messageId) {\n                                    try { this.onMessageDelete?.(messageId.slice(0, 64)); } catch (_) {}\n                                }\n                                return;\n                            }\n\n                            // Delivery receipt from the peer \u2192 mark our message \"delivered\".\n                            if (parsed.type === T.MESSAGE_RECEIPT) {\n                                const messageId = parsed?.data?.messageId ?? parsed?.messageId;\n                                if (typeof messageId === 'string' && messageId) {\n                                    try { this.onMessageDelivered?.(messageId.slice(0, 64)); } catch (_) {}\n                                }\n                                return;\n                            }\n\n                            // Call signalling (offer / answer / ice / decline / end).\n                            if ([T.CALL_OFFER, T.CALL_ANSWER, T.CALL_ICE,\n                                 T.CALL_DECLINE, T.CALL_END].includes(parsed.type)) {\n                                try { await this._handleCallSignal(parsed.type, parsed.data || {}); }\n                                catch (_) {}\n                                return;\n                            }\n\n                            // Session recovery signalling (ICE restart over the live channel).\n                            if ([T.ICE_RESTART_OFFER, T.ICE_RESTART_ANSWER,\n                                 T.ICE_RESTART_REQUEST].includes(parsed.type)) {\n                                try { await this._handleIceRestartSignal(parsed.type, parsed.data || {}); }\n                                catch (e) {\n                                    this._secureLog('error', '\u274C ICE restart signal handling failed', { errorType: e?.constructor?.name });\n                                }\n                                return;\n                            }\n\n                            return;\n                        }\n\n                        // ============================================\n                        // SYSTEM MESSAGES (WITHOUT MUTEX)\n                        // ============================================\n\n                        // ============================================\n                        // SBQ2 IN-BAND KEY EXCHANGE\n                        // ============================================\n                        // The only frames that legitimately precede any key. They\n                        // are dispatched before the system-message branch so they\n                        // can never be confused with post-handshake traffic, and\n                        // _sbq2HandleHandshakeFrame refuses them outright on a\n                        // session that is not SBQ2.\n                        if (parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_BLOB ||\n                            parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.KEY_PROOF) {\n                            await this._sbq2HandleHandshakeFrame(parsed);\n                            return;\n                        }\n\n                        if (parsed.type && ['heartbeat', 'verification', 'verification_response', 'verification_confirmed', 'verification_both_confirmed', 'sas_code', 'peer_disconnect', 'security_upgrade'].includes(parsed.type)) {\n                            this.handleSystemMessage(parsed);\n                            return;\n                        }\n                        \n                        // ============================================\n                        // ENHANCED MESSAGES (WITHOUT MUTEX)\n                        // ============================================\n\n                        if (parsed.type === EnhancedSecureWebRTCManager.MESSAGE_TYPES.RATCHET_MESSAGE) {\n                            await this._processRatchetMessage(parsed);\n                            return;\n                        }\n\n                        if (parsed.type === 'enhanced_message' && parsed.data) {\n                            await this._processEnhancedMessageWithoutMutex(parsed);\n                            return;\n                        }\n\n                        // SECURITY: chat content reaches the UI through exactly one\n                        // door \u2014 `enhanced_message`, which is AES-GCM encrypted,\n                        // HMAC-authenticated and AAD/sequence-checked. A bare\n                        // `{type:'message'}` frame used to be rendered as-is, which\n                        // let anyone on the channel inject unauthenticated text that\n                        // looked identical to real messages and bypassed E2EE\n                        // entirely. sendMessage() has always encrypted, so nothing\n                        // legitimate produces such a frame: drop it loudly.\n                        this._secureLog('error', 'Rejected unencrypted frame on the chat channel', {\n                            messageType: typeof parsed.type === 'string' ? parsed.type.slice(0, 32) : typeof parsed.type\n                        });\n                        return;\n\n                    } catch (jsonError) {\n                        // SECURITY: non-JSON payloads were previously rendered in the\n                        // chat as plain text \u2014 the same unauthenticated injection\n                        // vector as above. Every legitimate frame is JSON.\n                        this._secureLog('error', 'Rejected malformed (non-JSON) frame on the chat channel', {\n                            dataLength: typeof event.data === 'string' ? event.data.length : 0\n                        });\n                        return;\n                    }\n                } else if (event.data instanceof ArrayBuffer) {\n                    await this._processBinaryDataWithoutMutex(event.data);\n                } else {\n                }\n                \n            } catch (error) {\n                this._secureLog('error', 'Failed to process message in onmessage:', { errorType: error?.constructor?.name || 'Unknown' });\n            }\n        };\n    }\n        // FIX 4: New method for processing binary data WITHOUT mutex\n    async _processBinaryDataWithoutMutex(data) {\n        try {\n            if (!this._checkInboundRateLimit('binary_message')) {\n                return;\n            }\n            \n            // Apply security layers WITHOUT mutex\n            let processedData = data;\n            \n            // Nested Encryption Removal (if enabled)\n            if (this.securityFeatures.hasNestedEncryption && \n                this.nestedEncryptionKey && \n                processedData instanceof ArrayBuffer &&\n                processedData.byteLength > 12) {\n                \n                try {\n                    processedData = await this.removeNestedEncryption(processedData);\n                } catch (error) {\n                    this._secureLog('warn', 'Nested decryption failed, continuing with original data');\n                }\n            }\n            \n            // Packet Padding Removal (if enabled)\n            if (this.securityFeatures.hasPacketPadding && processedData instanceof ArrayBuffer) {\n                try {\n                    processedData = this.removePacketPadding(processedData);\n                } catch (error) {\n                    this._secureLog('warn', 'Packet padding removal failed, continuing with original data');\n                }\n            }\n            \n            // Anti-Fingerprinting Removal (if enabled)\n            if (this.securityFeatures.hasAntiFingerprinting && processedData instanceof ArrayBuffer) {\n                try {\n                    processedData = this.removeAntiFingerprinting(processedData);\n                } catch (error) {\n                    this._secureLog('warn', 'Anti-fingerprinting removal failed, continuing with original data');\n                }\n            }\n            \n            // Convert to text\n            if (processedData instanceof ArrayBuffer) {\n                const textData = new TextDecoder().decode(processedData);\n\n                // SECURITY: the only thing legitimately sent as a binary frame is\n                // cover traffic (see sendFakeMessage), which exists purely to be\n                // discarded. Real chat content always arrives as an authenticated\n                // `enhanced_message`. Decoding a binary frame and handing it to the\n                // UI would therefore only ever surface unauthenticated peer input,\n                // so nothing on this path may reach the user.\n                try {\n                    const content = JSON.parse(textData);\n                    if (content.type === 'fake' || content.isFakeTraffic === true) {\n                        return;\n                    }\n                } catch (e) {\n                    // Not JSON \u2014 still not deliverable.\n                }\n\n                this._secureLog('error', 'Rejected unauthenticated binary frame on the chat channel', {\n                    byteLength: data?.byteLength || 0\n                });\n            }\n\n        } catch (error) {\n            this._secureLog('error', 'Error processing binary data:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n    /**\n     * Inbound chat under the Double Ratchet.\n     *\n     * No sequence-number check is needed or wanted here: replay protection is a\n     * property of the ratchet itself, since a message key is destroyed on use and\n     * a number behind the current chain has no key left to open it. Layering the\n     * old sliding window on top would reject legitimate out-of-order frames that\n     * the ratchet can still read.\n     */\n    async _processRatchetMessage(parsedMessage) {\n        try {\n            if (!this._checkInboundRateLimit('ratchet_message')) {\n                return;\n            }\n            if (!this.isRatchetActive()) {\n                this._secureLog('error', 'Received a ratchet message but no ratchet is active');\n                return;\n            }\n            if (typeof parsedMessage?.h !== 'string' || typeof parsedMessage?.c !== 'string') {\n                this._secureLog('error', 'Malformed ratchet message frame');\n                return;\n            }\n\n            const plaintext = await this._ratchet.decrypt(parsedMessage.h, parsedMessage.c);\n\n            // Same envelope as the static path, so the UI layer is unchanged.\n            try {\n                const content = JSON.parse(plaintext);\n                if (content.type === 'fake' || content.isFakeTraffic === true) return;\n                if (content && content.type === 'message' && typeof content.data === 'string') {\n                    this.deliverMessageToUI(content.data, 'received', content.meta);\n                    return;\n                }\n            } catch (_) {\n                // Not JSON \u2014 plain text is fine.\n            }\n            this.deliverMessageToUI(plaintext, 'received');\n        } catch (error) {\n            // Never surface the reason: \"authentication failed\" versus \"behind the\n            // chain\" tells a probing peer where its guess landed.\n            this._secureLog('error', 'Failed to decrypt ratchet message', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        }\n    }\n\n    // FIX 3: New method for processing enhanced messages WITHOUT mutex\n    async _processEnhancedMessageWithoutMutex(parsedMessage) {\n        try {\n            if (!this._checkInboundRateLimit('enhanced_message')) {\n                return;\n            }\n            \n            if (!this.encryptionKey || !this.macKey || !this.metadataKey) {\n                this._secureLog('error', 'Missing encryption keys for enhanced message');\n                return;\n            }\n            \n            const decryptedResult = await window.EnhancedSecureCryptoUtils.decryptMessage(\n                parsedMessage.data,\n                this.encryptionKey,\n                this.macKey,\n                this.metadataKey\n            );\n\n            // SECURITY: enforce the anti-replay window. The sequence number lives\n            // inside the AES-GCM-encrypted, HMAC-covered metadata, so it cannot be\n            // forged or rewritten in transit \u2014 but until it is actually checked\n            // against the sliding window, a captured frame could simply be played\n            // back. The main data channel is ordered+reliable, so legitimate\n            // messages always arrive in sequence.\n            if (!this._validateIncomingSequenceNumber(decryptedResult?.sequenceNumber, 'enhanced_message')) {\n                this._secureLog('error', 'Rejected chat message failing anti-replay validation', {\n                    messageId: decryptedResult?.messageId ? 'present' : 'absent'\n                });\n                return;\n            }\n\n            if (decryptedResult && decryptedResult.message) {\n\n                // Try parsing JSON and showing nested text if it's a chat message\n                try {\n                    const decryptedContent = JSON.parse(decryptedResult.message);\n                    if (decryptedContent.type === 'fake' || decryptedContent.isFakeTraffic === true) {\n                        return;\n                    }\n                    if (decryptedContent && decryptedContent.type === 'message' && typeof decryptedContent.data === 'string') {\n                        if (this.onMessage) {\n                            this.deliverMessageToUI(decryptedContent.data, 'received', decryptedContent.meta);\n                        }\n                        return;\n                    }\n                } catch (e) {\n                    // Not JSON \u2014 fine for plain text\n                }\n                \n                // Otherwise pass as-is\n                if (this.onMessage) {\n                    this.deliverMessageToUI(decryptedResult.message, 'received');\n                }\n            } else {\n                this._secureLog('warn', 'No message content in decrypted result');\n            }\n            \n        } catch (error) {\n            this._secureLog('error', 'Error processing enhanced message:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n    /**\n     * Creates a unique ID for an operation\n     */\n    _generateOperationId() {\n        return `op_${Date.now()}_${Math.random().toString(36).substr(2, 9)}`;\n    }\n\n    /**\n     *   Atomic mutex acquisition with enhanced race condition protection\n     */\n    async _acquireMutex(mutexName, operationId, timeout = 5000) {\n        //   Build correct mutex property name\n        const mutexPropertyName = `_${mutexName}Mutex`;\n        const mutex = this[mutexPropertyName];\n        \n        if (!mutex) {\n            this._secureLog('error', `Unknown mutex: ${mutexName}`, {\n                mutexPropertyName: mutexPropertyName,\n                availableMutexes: this._getAvailableMutexes(),\n                operationId: operationId\n            });\n            throw new Error(`Unknown mutex: ${mutexName}. Available: ${this._getAvailableMutexes().join(', ')}`);\n        }\n        \n        //   Validate operation ID\n        if (!operationId || typeof operationId !== 'string') {\n            throw new Error('Invalid operation ID for mutex acquisition');\n        }\n        \n        return new Promise((resolve, reject) => {\n            //   Atomic lock attempt with immediate state check\n            const attemptLock = () => {\n                //   Check if mutex is already locked by this operation\n                if (mutex.lockId === operationId) {\n                    this._secureLog('warn', `Mutex '${mutexName}' already locked by same operation`, {\n                        operationId: operationId\n                    });\n                    resolve();\n                    return;\n                }\n                \n                //   Atomic check and lock operation\n                if (!mutex.locked) {\n                    //   Set lock state atomically\n                    mutex.locked = true;\n                    mutex.lockId = operationId;\n                    mutex.lockTime = Date.now();\n                    \n                    this._secureLog('debug', `Mutex '${mutexName}' acquired atomically`, {\n                        operationId: operationId,\n                        lockTime: mutex.lockTime\n                    });\n                    \n                    //   Set timeout for automatic release with enhanced validation\n                    mutex.lockTimeout = setTimeout(() => {\n                        //   Enhanced timeout handling with state validation\n                        this._handleMutexTimeout(mutexName, operationId, timeout);\n                    }, timeout);\n                    \n                    resolve();\n                } else {\n                    //   Add to queue with timeout\n                    const queueItem = { \n                        resolve, \n                        reject, \n                        operationId,\n                        timestamp: Date.now(),\n                        timeout: setTimeout(() => {\n                            //   Remove from queue on timeout\n                            const index = mutex.queue.findIndex(item => item.operationId === operationId);\n                            if (index !== -1) {\n                                mutex.queue.splice(index, 1);\n                                reject(new Error(`Mutex acquisition timeout for '${mutexName}'`));\n                            }\n                        }, timeout)\n                    };\n                    \n                    mutex.queue.push(queueItem);\n                    \n                    this._secureLog('debug', `Operation queued for mutex '${mutexName}'`, {\n                        operationId: operationId,\n                        queueLength: mutex.queue.length,\n                        currentLockId: mutex.lockId\n                    });\n                }\n            };\n            \n            //   Execute lock attempt immediately\n            attemptLock();\n        });\n    }\n\n    /**\n     *   Enhanced mutex release with strict validation and error handling\n     */\n    _releaseMutex(mutexName, operationId) {\n        //   Validate input parameters\n        if (!mutexName || typeof mutexName !== 'string') {\n            throw new Error('Invalid mutex name provided for release');\n        }\n        \n        if (!operationId || typeof operationId !== 'string') {\n            throw new Error('Invalid operation ID provided for mutex release');\n        }\n        \n        //   Build correct mutex property name\n        const mutexPropertyName = `_${mutexName}Mutex`;\n        const mutex = this[mutexPropertyName];\n        \n        if (!mutex) {\n            this._secureLog('error', `Unknown mutex for release: ${mutexName}`, {\n                mutexPropertyName: mutexPropertyName,\n                availableMutexes: this._getAvailableMutexes(),\n                operationId: operationId\n            });\n            throw new Error(`Unknown mutex for release: ${mutexName}`);\n        }\n        \n        //   Strict validation of lock ownership\n        if (mutex.lockId !== operationId) {\n            this._secureLog('error', `CRITICAL: Invalid mutex release attempt - potential race condition`, {\n                mutexName: mutexName,\n                expectedLockId: mutex.lockId,\n                providedOperationId: operationId,\n                mutexState: {\n                    locked: mutex.locked,\n                    lockTime: mutex.lockTime,\n                    queueLength: mutex.queue.length\n                }\n            });\n            \n            //   Throw error instead of silent failure\n            throw new Error(`Invalid mutex release attempt for '${mutexName}': expected '${mutex.lockId}', got '${operationId}'`);\n        }\n        \n        //   Validate mutex is actually locked\n        if (!mutex.locked) {\n            this._secureLog('error', `CRITICAL: Attempting to release unlocked mutex`, {\n                mutexName: mutexName,\n                operationId: operationId,\n                mutexState: {\n                    locked: mutex.locked,\n                    lockId: mutex.lockId,\n                    lockTime: mutex.lockTime\n                }\n            });\n            throw new Error(`Attempting to release unlocked mutex: ${mutexName}`);\n        }\n        \n        try {\n            //   Clear timeout first\n            if (mutex.lockTimeout) {\n                clearTimeout(mutex.lockTimeout);\n                mutex.lockTimeout = null;\n            }\n            \n            //   Calculate lock duration for monitoring\n            const lockDuration = mutex.lockTime ? Date.now() - mutex.lockTime : 0;\n            \n            //   Atomic release with state validation\n            mutex.locked = false;\n            mutex.lockId = null;\n            mutex.lockTime = null;\n            \n            this._secureLog('debug', `Mutex released successfully: ${mutexName}`, {\n                operationId: operationId,\n                lockDuration: lockDuration,\n                queueLength: mutex.queue.length\n            });\n            \n            //   Process next in queue with enhanced error handling\n            this._processNextInQueue(mutexName);\n            \n        } catch (error) {\n            //   If queue processing fails, ensure mutex is still released\n            this._secureLog('error', `Error during mutex release queue processing`, {\n                mutexName: mutexName,\n                operationId: operationId,\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            \n            //   Ensure mutex is released even if queue processing fails\n            mutex.locked = false;\n            mutex.lockId = null;\n            mutex.lockTime = null;\n            mutex.lockTimeout = null;\n            \n            throw error;\n        }\n    }\n\n    /**\n     *   Enhanced queue processing with comprehensive error handling\n     */\n    _processNextInQueue(mutexName) {\n        const mutex = this[`_${mutexName}Mutex`];\n        \n        if (!mutex) {\n            this._secureLog('error', `Mutex not found for queue processing: ${mutexName}`);\n            return;\n        }\n        \n        if (mutex.queue.length === 0) {\n            return;\n        }\n        \n        //   Validate mutex state before processing queue\n        if (mutex.locked) {\n            this._secureLog('warn', `Mutex '${mutexName}' is still locked, skipping queue processing`, {\n                lockId: mutex.lockId,\n                queueLength: mutex.queue.length\n            });\n            return;\n        }\n        \n        //   Get next item from queue atomically with validation\n        const nextItem = mutex.queue.shift();\n        \n        if (!nextItem) {\n            this._secureLog('warn', `Empty queue item for mutex '${mutexName}'`);\n            return;\n        }\n        \n        //   Validate queue item structure\n        if (!nextItem.operationId || !nextItem.resolve || !nextItem.reject) {\n            this._secureLog('error', `Invalid queue item structure for mutex '${mutexName}'`, {\n                hasOperationId: !!nextItem.operationId,\n                hasResolve: !!nextItem.resolve,\n                hasReject: !!nextItem.reject\n            });\n            return;\n        }\n        \n        try {\n            //   Clear timeout for this item\n            if (nextItem.timeout) {\n                clearTimeout(nextItem.timeout);\n            }\n            \n            //   Attempt to acquire lock for next item\n            this._secureLog('debug', `Processing next operation in queue for mutex '${mutexName}'`, {\n                operationId: nextItem.operationId,\n                queueRemaining: mutex.queue.length,\n                timestamp: Date.now()\n            });\n            \n            //   Retry lock acquisition for queued operation with enhanced error handling\n            setTimeout(async () => {\n                try {\n                    await this._acquireMutex(mutexName, nextItem.operationId, 5000);\n                    \n                    this._secureLog('debug', `Queued operation acquired mutex '${mutexName}'`, {\n                        operationId: nextItem.operationId,\n                        acquisitionTime: Date.now()\n                    });\n                    \n                    nextItem.resolve();\n                    \n                } catch (error) {\n                    this._secureLog('error', `Queued operation failed to acquire mutex '${mutexName}'`, {\n                        operationId: nextItem.operationId,\n                        errorType: error.constructor.name,\n                        errorMessage: error.message,\n                        timestamp: Date.now()\n                    });\n                    \n                    //   Reject with detailed error information\n                    nextItem.reject(new Error(`Queue processing failed for '${mutexName}': ${error.message}`));\n                    \n                    //   Continue processing queue even if one item fails\n                    setTimeout(() => {\n                        this._processNextInQueue(mutexName);\n                    }, 50);\n                }\n            }, 10); // Small delay to prevent immediate re-acquisition\n            \n        } catch (error) {\n            this._secureLog('error', `Critical error during queue processing for mutex '${mutexName}'`, {\n                operationId: nextItem.operationId,\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            \n            //   Reject the operation and continue processing\n            try {\n                nextItem.reject(new Error(`Queue processing critical error: ${error.message}`));\n            } catch (rejectError) {\n                this._secureLog('error', `Failed to reject queue item`, {\n                    originalError: error.message,\n                    rejectError: rejectError.message\n                });\n            }\n            \n            //   Continue processing remaining queue items\n            setTimeout(() => {\n                this._processNextInQueue(mutexName);\n            }, 100);\n        }\n    }\n\n    _getAvailableMutexes() {\n        const mutexes = [];\n        const propertyNames = Object.getOwnPropertyNames(this);\n        \n        for (const prop of propertyNames) {\n            if (prop.endsWith('Mutex') && prop.startsWith('_')) {\n                // Extract mutex name without prefix/suffix\n                const mutexName = prop.slice(1, -5); // Remove '_' prefix and 'Mutex' suffix\n                mutexes.push(mutexName);\n            }\n        }\n        \n        return mutexes;\n    }\n\n    /**\n     *   Enhanced mutex execution with atomic operations\n     */\n    async _withMutex(mutexName, operation, timeout = 5000) {\n        const operationId = this._generateOperationId();\n        \n        //   Validate mutex system before operation\n        if (!this._validateMutexSystem()) {\n            this._secureLog('error', 'Mutex system not properly initialized', {\n                operationId: operationId,\n                mutexName: mutexName\n            });\n            throw new Error('Mutex system not properly initialized. Call _initializeMutexSystem() first.');\n        }\n        \n        //   Get mutex reference with validation\n        const mutex = this[`_${mutexName}Mutex`];\n        if (!mutex) {\n            throw new Error(`Mutex '${mutexName}' not found`);\n        }\n        \n        let mutexAcquired = false;\n        \n        try {\n            //   Atomic mutex acquisition with timeout\n            await this._acquireMutex(mutexName, operationId, timeout);\n            mutexAcquired = true;\n            \n            //   Increment operation counter atomically\n            const counterKey = `${mutexName}Operations`;\n            if (this._operationCounters && this._operationCounters[counterKey] !== undefined) {\n                this._operationCounters[counterKey]++;\n            }\n            \n            //   Execute operation with enhanced error handling\n            const result = await operation(operationId);\n            \n            //   Validate result before returning\n            if (result === undefined && operation.name !== 'cleanup') {\n                this._secureLog('warn', 'Mutex operation returned undefined result', {\n                    operationId: operationId,\n                    mutexName: mutexName,\n                    operationName: operation.name\n                });\n            }\n            \n            return result;\n            \n        } catch (error) {\n            //   Enhanced error logging with context\n            this._secureLog('error', 'Error in mutex operation', {\n                operationId: operationId,\n                mutexName: mutexName,\n                errorType: error.constructor.name,\n                errorMessage: error.message,\n                mutexAcquired: mutexAcquired,\n                mutexState: mutex ? {\n                    locked: mutex.locked,\n                    lockId: mutex.lockId,\n                    queueLength: mutex.queue.length\n                } : 'null'\n            });\n            \n                    //   If this is a key operation error, trigger emergency recovery\n        if (mutexName === 'keyOperation') {\n            this._handleKeyOperationError(error, operationId);\n        }\n        \n        //   Trigger emergency unlock for critical mutex errors\n        if (error.message.includes('timeout') || error.message.includes('race condition')) {\n            this._emergencyUnlockAllMutexes('errorHandler');\n        }\n            \n            throw error;\n        } finally {\n            //   Always release mutex in finally block with validation\n            if (mutexAcquired) {\n                try {\n                    await this._releaseMutex(mutexName, operationId);\n                    \n                    //   Verify mutex was properly released\n                    if (mutex.locked && mutex.lockId === operationId) {\n                        this._secureLog('error', 'Mutex release verification failed', {\n                            operationId: operationId,\n                            mutexName: mutexName\n                        });\n                        // Force release as fallback\n                        mutex.locked = false;\n                        mutex.lockId = null;\n                        mutex.lockTimeout = null;\n                    }\n                    \n                } catch (releaseError) {\n                    this._secureLog('error', 'Error releasing mutex in finally block', {\n                        operationId: operationId,\n                        mutexName: mutexName,\n                        releaseErrorType: releaseError.constructor.name,\n                        releaseErrorMessage: releaseError.message\n                    });\n                    \n                    //   Force release on error\n                    mutex.locked = false;\n                    mutex.lockId = null;\n                    mutex.lockTimeout = null;\n                }\n            }\n        }\n    }\n\n    _validateMutexSystem() {\n        const requiredMutexes = ['keyOperation', 'cryptoOperation', 'connectionOperation'];\n        \n        for (const mutexName of requiredMutexes) {\n            const mutexPropertyName = `_${mutexName}Mutex`;\n            const mutex = this[mutexPropertyName];\n            \n            if (!mutex || typeof mutex !== 'object') {\n                this._secureLog('error', `Missing or invalid mutex: ${mutexName}`, {\n                    mutexPropertyName: mutexPropertyName,\n                    mutexType: typeof mutex\n                });\n                return false;\n            }\n            \n            // Validate mutex structure\n            const requiredProps = ['locked', 'queue', 'lockId', 'lockTimeout'];\n            for (const prop of requiredProps) {\n                if (!(prop in mutex)) {\n                    this._secureLog('error', `Mutex ${mutexName} missing property: ${prop}`);\n                    return false;\n                }\n            }\n        }\n        \n        return true;\n    }\n\n    /**\n     *   Enhanced emergency recovery of the mutex system\n     */\n    _emergencyRecoverMutexSystem() {\n        this._secureLog('warn', 'Emergency mutex system recovery initiated');\n        \n        try {\n            //   Emergency unlock all mutexes first\n            this._emergencyUnlockAllMutexes('emergencyRecovery');\n            \n            //   Force re-initialize the system\n            this._initializeMutexSystem();\n            \n            //   Validate recovery success\n            if (!this._validateMutexSystem()) {\n                throw new Error('Mutex system validation failed after recovery');\n            }\n            \n            this._secureLog('info', 'Mutex system recovered successfully with validation');\n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to recover mutex system', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            \n            //   Last resort - force re-initialization\n            try {\n                this._initializeMutexSystem();\n                this._secureLog('warn', 'Forced mutex system re-initialization completed');\n                return true;\n            } catch (reinitError) {\n                this._secureLog('error', 'CRITICAL: Forced re-initialization also failed', {\n                    originalError: error.message,\n                    reinitError: reinitError.message\n                });\n                return false;\n            }\n        }\n    }\n\n    /**\n     *   Atomic key generation with race condition protection\n     */\n    async _generateEncryptionKeys() {\n        return this._withMutex('keyOperation', async (operationId) => {\n            this._secureLog('info', 'Generating encryption keys with atomic mutex', {\n                operationId: operationId\n            });\n            \n            //   Atomic state check and update using mutex lock\n            const currentState = this._keySystemState;\n            \n            //   Atomic check - if already initializing, wait or fail\n            if (currentState.isInitializing) {\n                this._secureLog('warn', 'Key generation already in progress, waiting for completion', {\n                    operationId: operationId,\n                    lastOperation: currentState.lastOperation,\n                    lastOperationTime: currentState.lastOperationTime\n                });\n                \n                // Wait for existing operation to complete\n                let waitAttempts = 0;\n                const maxWaitAttempts = 50; // 5 seconds max wait\n                \n                while (currentState.isInitializing && waitAttempts < maxWaitAttempts) {\n                    await new Promise(resolve => setTimeout(resolve, 100));\n                    waitAttempts++;\n                }\n                \n                if (currentState.isInitializing) {\n                    throw new Error('Key generation timeout - operation still in progress after 5 seconds');\n                }\n            }\n            \n            //   Atomic state update within mutex protection\n            try {\n                //   Set state atomically within mutex\n                currentState.isInitializing = true;\n                currentState.lastOperation = 'generation';\n                currentState.lastOperationTime = Date.now();\n                currentState.operationId = operationId;\n                \n                this._secureLog('debug', 'Atomic key generation state set', {\n                    operationId: operationId,\n                    timestamp: currentState.lastOperationTime\n                });\n                \n                //   Generate keys with individual error handling\n                let ecdhKeyPair = null;\n                let ecdsaKeyPair = null;\n                \n                //   Generate ephemeral ECDH keys for PFS\n                try {\n                    ecdhKeyPair = await this._generateEphemeralECDHKeys();\n                    \n                    //   Validate ECDH keys immediately\n                    if (!ecdhKeyPair || !ecdhKeyPair.privateKey || !ecdhKeyPair.publicKey) {\n                        throw new Error('Ephemeral ECDH key pair validation failed');\n                    }\n                    \n                    //   Constant-time validation for key types\n                    if (!this._validateKeyPairConstantTime(ecdhKeyPair)) {\n                        throw new Error('Ephemeral ECDH keys are not valid CryptoKey instances');\n                    }\n                    \n                    this._secureLog('debug', 'Ephemeral ECDH keys generated and validated for PFS', {\n                        operationId: operationId,\n                        privateKeyType: ecdhKeyPair.privateKey.algorithm?.name,\n                        publicKeyType: ecdhKeyPair.publicKey.algorithm?.name,\n                        isEphemeral: true\n                    });\n\n                } catch (ecdhError) {\n                    this._secureLog('error', 'Ephemeral ECDH key generation failed', {\n                        operationId: operationId,\n                        errorType: ecdhError.constructor.name\n                    });\n                    this._throwSecureError(ecdhError, 'ephemeral_ecdh_key_generation');\n                }\n                \n                // Generate ECDSA keys with retry mechanism\n                try {\n                    ecdsaKeyPair = await window.EnhancedSecureCryptoUtils.generateECDSAKeyPair();\n                    \n                                    //   Validate ECDSA keys immediately\n                if (!ecdsaKeyPair || !ecdsaKeyPair.privateKey || !ecdsaKeyPair.publicKey) {\n                    throw new Error('ECDSA key pair validation failed');\n                }\n                \n                //   Constant-time validation for key types\n                if (!this._validateKeyPairConstantTime(ecdsaKeyPair)) {\n                    throw new Error('ECDSA keys are not valid CryptoKey instances');\n                }\n                    \n                    this._secureLog('debug', 'ECDSA keys generated and validated', {\n                        operationId: operationId,\n                        privateKeyType: ecdsaKeyPair.privateKey.algorithm?.name,\n                        publicKeyType: ecdsaKeyPair.publicKey.algorithm?.name\n                    });\n                    \n                } catch (ecdsaError) {\n                    this._secureLog('error', 'ECDSA key generation failed', {\n                        operationId: operationId,\n                        errorType: ecdsaError.constructor.name\n                    });\n                    this._throwSecureError(ecdsaError, 'ecdsa_key_generation');\n                }\n                \n                //   Final validation of both key pairs\n                if (!ecdhKeyPair || !ecdsaKeyPair) {\n                    throw new Error('One or both key pairs failed to generate');\n                }\n                \n                //   Enable security features after successful key generation\n                this._enableSecurityFeaturesAfterKeyGeneration(ecdhKeyPair, ecdsaKeyPair);\n                \n                this._secureLog('info', 'Encryption keys generated successfully with atomic protection', {\n                    operationId: operationId,\n                    hasECDHKeys: !!(ecdhKeyPair?.privateKey && ecdhKeyPair?.publicKey),\n                    hasECDSAKeys: !!(ecdsaKeyPair?.privateKey && ecdsaKeyPair?.publicKey),\n                    generationTime: Date.now() - currentState.lastOperationTime\n                });\n                \n                return { ecdhKeyPair, ecdsaKeyPair };\n                \n            } catch (error) {\n                //   Ensure state is reset on any error\n                this._secureLog('error', 'Key generation failed, resetting state', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                throw error;\n            } finally {\n                //   Always reset state in finally block\n                currentState.isInitializing = false;\n                currentState.operationId = null;\n                \n                this._secureLog('debug', 'Key generation state reset', {\n                    operationId: operationId\n                });\n            }\n        });\n    }\n\n    /**\n     *   Enable security features after successful key generation\n     */\n    _enableSecurityFeaturesAfterKeyGeneration(ecdhKeyPair, ecdsaKeyPair) {\n        try {\n            //   Enable encryption features based on available keys\n            if (ecdhKeyPair && ecdhKeyPair.privateKey && ecdhKeyPair.publicKey) {\n                this.securityFeatures.hasEncryption = true;\n                this.securityFeatures.hasECDH = true;\n                this._secureLog('info', 'ECDH encryption features enabled');\n            }\n            \n            if (ecdsaKeyPair && ecdsaKeyPair.privateKey && ecdsaKeyPair.publicKey) {\n                this.securityFeatures.hasECDSA = true;\n                this._secureLog('info', 'ECDSA signature features enabled');\n            }\n            \n            //   Enable additional features that depend on encryption\n            if (this.securityFeatures.hasEncryption) {\n                this.securityFeatures.hasMetadataProtection = true;\n                this.securityFeatures.hasEnhancedReplayProtection = true;\n                this.securityFeatures.hasNonExtractableKeys = true;\n                this._secureLog('info', 'Additional encryption-dependent features enabled');\n            }\n            \n            //   Enable PFS after ephemeral key generation\n            if (ecdhKeyPair && this.ephemeralKeyPairs.size > 0) {\n                this.securityFeatures.hasPFS = true;\n                this._secureLog('info', 'Perfect Forward Secrecy enabled with ephemeral keys');\n            }\n            \n            this._secureLog('info', 'Security features updated after key generation', {\n                hasEncryption: this.securityFeatures.hasEncryption,\n                hasECDH: this.securityFeatures.hasECDH,\n                hasECDSA: this.securityFeatures.hasECDSA,\n                hasMetadataProtection: this.securityFeatures.hasMetadataProtection,\n                hasEnhancedReplayProtection: this.securityFeatures.hasEnhancedReplayProtection,\n                hasNonExtractableKeys: this.securityFeatures.hasNonExtractableKeys,\n                hasPFS: this.securityFeatures.hasPFS\n            });\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to enable security features after key generation', {\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n        }\n    }\n\n    /**\n     *   Enhanced emergency mutex unlocking with authorization and validation\n     */\n    _emergencyUnlockAllMutexes(callerContext = 'unknown') {\n        //   Validate caller authorization\n        const authorizedCallers = [\n            'keyOperation', 'cryptoOperation', 'connectionOperation',\n            'emergencyRecovery', 'systemShutdown', 'errorHandler'\n        ];\n        \n        if (!authorizedCallers.includes(callerContext)) {\n            this._secureLog('error', `UNAUTHORIZED emergency mutex unlock attempt`, {\n                callerContext: callerContext,\n                authorizedCallers: authorizedCallers,\n                timestamp: Date.now()\n            });\n            throw new Error(`Unauthorized emergency mutex unlock attempt by: ${callerContext}`);\n        }\n        \n        const mutexes = ['keyOperation', 'cryptoOperation', 'connectionOperation'];\n        \n        this._secureLog('error', 'EMERGENCY: Unlocking all mutexes with authorization and state cleanup', {\n            callerContext: callerContext,\n            timestamp: Date.now()\n        });\n        \n        let unlockedCount = 0;\n        let errorCount = 0;\n        \n        mutexes.forEach(mutexName => {\n            const mutex = this[`_${mutexName}Mutex`];\n            if (mutex) {\n                try {\n                    //   Clear timeout first\n                    if (mutex.lockTimeout) {\n                        clearTimeout(mutex.lockTimeout);\n                    }\n                    \n                    //   Log mutex state before emergency unlock\n                    const previousState = {\n                        locked: mutex.locked,\n                        lockId: mutex.lockId,\n                        lockTime: mutex.lockTime,\n                        queueLength: mutex.queue.length\n                    };\n                    \n                    //   Reset mutex state atomically\n                    mutex.locked = false;\n                    mutex.lockId = null;\n                    mutex.lockTimeout = null;\n                    mutex.lockTime = null;\n                    \n                    //   Clear queue with proper error handling and logging\n                    let queueRejectCount = 0;\n                    mutex.queue.forEach(item => {\n                        try {\n                            if (item.reject && typeof item.reject === 'function') {\n                                item.reject(new Error(`Emergency mutex unlock for ${mutexName} by ${callerContext}`));\n                                queueRejectCount++;\n                            }\n                        } catch (rejectError) {\n                            this._secureLog('warn', `Failed to reject queue item during emergency unlock`, {\n                                mutexName: mutexName,\n                                errorType: rejectError.constructor.name\n                            });\n                        }\n                    });\n                    \n                    //   Clear queue array\n                    mutex.queue = [];\n                    \n                    unlockedCount++;\n                    \n                    this._secureLog('debug', `Emergency unlocked mutex: ${mutexName}`, {\n                        previousState: previousState,\n                        queueRejectCount: queueRejectCount,\n                        callerContext: callerContext\n                    });\n                    \n                } catch (error) {\n                    errorCount++;\n                    this._secureLog('error', `Error during emergency unlock of mutex: ${mutexName}`, {\n                        errorType: error.constructor.name,\n                        errorMessage: error.message,\n                        callerContext: callerContext\n                    });\n                }\n            }\n        });\n        \n        //   Reset key system state with validation\n        if (this._keySystemState) {\n            try {\n                const previousKeyState = { ...this._keySystemState };\n                \n                this._keySystemState.isInitializing = false;\n                this._keySystemState.isRotating = false;\n                this._keySystemState.isDestroying = false;\n                this._keySystemState.operationId = null;\n                this._keySystemState.concurrentOperations = 0;\n                \n                this._secureLog('debug', `Emergency reset key system state`, {\n                    previousState: previousKeyState,\n                    callerContext: callerContext\n                });\n                \n            } catch (error) {\n                this._secureLog('error', `Error resetting key system state during emergency unlock`, {\n                    errorType: error.constructor.name,\n                    errorMessage: error.message,\n                    callerContext: callerContext\n                });\n            }\n        }\n        \n        //   Log emergency unlock summary\n        this._secureLog('info', `Emergency mutex unlock completed`, {\n            callerContext: callerContext,\n            unlockedCount: unlockedCount,\n            errorCount: errorCount,\n            totalMutexes: mutexes.length,\n            timestamp: Date.now()\n        });\n        \n        //   Trigger system validation after emergency unlock\n        setTimeout(() => {\n            this._validateMutexSystemAfterEmergencyUnlock();\n        }, 100);\n    }\n\n    /**\n     *   Handle key operation errors with recovery mechanisms\n     */\n    _handleKeyOperationError(error, operationId) {\n        this._secureLog('error', 'Key operation error detected, initiating recovery', {\n            operationId: operationId,\n            errorType: error.constructor.name,\n            errorMessage: error.message\n        });\n        \n        //   Reset key system state immediately\n        if (this._keySystemState) {\n            this._keySystemState.isInitializing = false;\n            this._keySystemState.isRotating = false;\n            this._keySystemState.isDestroying = false;\n            this._keySystemState.operationId = null;\n        }\n        \n        //   Clear any partial key data\n        this.ecdhKeyPair = null;\n        this.ecdsaKeyPair = null;\n        this.encryptionKey = null;\n        this.macKey = null;\n        this.metadataKey = null;\n        \n        //   Trigger emergency recovery if needed\n        if (error.message.includes('timeout') || error.message.includes('race condition')) {\n            this._secureLog('warn', 'Race condition or timeout detected, triggering emergency recovery');\n            this._emergencyRecoverMutexSystem();\n        }\n    }\n\n    /**\n     *   Generate cryptographically secure IV with reuse prevention\n     */\n    _generateSecureIV(ivSize = 12, context = 'general') {\n        //   Check if we're in emergency mode\n        if (this._ivTrackingSystem.emergencyMode) {\n            this._secureLog('error', 'CRITICAL: IV generation blocked - emergency mode active due to IV reuse');\n            throw new Error('IV generation blocked - emergency mode active');\n        }\n        \n        let attempts = 0;\n        const maxAttempts = 100; // Prevent infinite loops\n        \n        while (attempts < maxAttempts) {\n            attempts++;\n            \n            //   Generate fresh IV with crypto.getRandomValues\n            const iv = crypto.getRandomValues(new Uint8Array(ivSize));\n            \n            //   Convert IV to string for tracking\n            const ivString = Array.from(iv).map(b => b.toString(16).padStart(2, '0')).join('');\n            \n            //   Check for IV reuse\n            if (this._ivTrackingSystem.usedIVs.has(ivString)) {\n                this._ivTrackingSystem.collisionCount++;\n                this._secureLog('error', `CRITICAL: IV reuse detected!`, {\n                    context: context,\n                    attempt: attempts,\n                    collisionCount: this._ivTrackingSystem.collisionCount,\n                    ivString: ivString.substring(0, 16) + '...' // Log partial IV for debugging\n                });\n                \n                //   If too many collisions, trigger emergency mode\n                if (this._ivTrackingSystem.collisionCount > 5) {\n                    this._ivTrackingSystem.emergencyMode = true;\n                    this._secureLog('error', 'CRITICAL: Emergency mode activated due to excessive IV reuse');\n                    throw new Error('Emergency mode: Excessive IV reuse detected');\n                }\n                \n                continue; // Try again\n            }\n            \n            //   Validate IV entropy\n            if (!this._validateIVEntropy(iv)) {\n                this._ivTrackingSystem.entropyValidation.entropyFailures++;\n                this._secureLog('warn', `Low entropy IV detected`, {\n                    context: context,\n                    attempt: attempts,\n                    entropyFailures: this._ivTrackingSystem.entropyValidation.entropyFailures\n                });\n                \n                //   If too many entropy failures, trigger emergency mode\n                if (this._ivTrackingSystem.entropyValidation.entropyFailures > 10) {\n                    this._ivTrackingSystem.emergencyMode = true;\n                    this._secureLog('error', 'CRITICAL: Emergency mode activated due to low entropy IVs');\n                    throw new Error('Emergency mode: Low entropy IVs detected');\n                }\n                \n                continue; // Try again\n            }\n            \n            //   Track IV usage\n            this._ivTrackingSystem.usedIVs.add(ivString);\n            this._ivTrackingSystem.ivHistory.set(ivString, {\n                timestamp: Date.now(),\n                context: context,\n                attempt: attempts\n            });\n            \n            //   Track per-session IVs\n            if (this.sessionId) {\n                if (!this._ivTrackingSystem.sessionIVs.has(this.sessionId)) {\n                    this._ivTrackingSystem.sessionIVs.set(this.sessionId, new Set());\n                }\n                this._ivTrackingSystem.sessionIVs.get(this.sessionId).add(ivString);\n            }\n            \n            //   Validate RNG periodically\n            this._validateRNGQuality();\n            \n            this._secureLog('debug', `Secure IV generated`, {\n                context: context,\n                attempt: attempts,\n                ivSize: ivSize,\n                totalIVs: this._ivTrackingSystem.usedIVs.size\n            });\n            \n            return iv;\n        }\n        \n        //   If we can't generate a unique IV after max attempts\n        this._secureLog('error', `Failed to generate unique IV after ${maxAttempts} attempts`, {\n            context: context,\n            totalIVs: this._ivTrackingSystem.usedIVs.size\n        });\n        throw new Error(`Failed to generate unique IV after ${maxAttempts} attempts`);\n    }\n    \n    /**\n     *   Validate IV entropy to detect weak RNG\n     */\n    _validateIVEntropy(iv) {\n        this._ivTrackingSystem.entropyValidation.entropyTests++;\n        \n        //   Calculate byte distribution\n        const byteCounts = new Array(256).fill(0);\n        for (let i = 0; i < iv.length; i++) {\n            byteCounts[iv[i]]++;\n        }\n        \n        //   Multi-dimensional entropy analysis\n        const entropyResults = {\n            shannon: 0,\n            min: 0,\n            collision: 0,\n            compression: 0,\n            quantum: 0\n        };\n        \n        // 1. Shannon entropy calculation\n        let shannonEntropy = 0;\n        const totalBytes = iv.length;\n        \n        for (let i = 0; i < 256; i++) {\n            if (byteCounts[i] > 0) {\n                const probability = byteCounts[i] / totalBytes;\n                shannonEntropy -= probability * Math.log2(probability);\n            }\n        }\n        entropyResults.shannon = shannonEntropy;\n        \n        // 2. Min-entropy calculation (worst-case scenario)\n        const maxCount = Math.max(...byteCounts);\n        const maxProbability = maxCount / totalBytes;\n        entropyResults.min = -Math.log2(maxProbability);\n        \n        // 3. Collision entropy calculation\n        let collisionSum = 0;\n        for (let i = 0; i < 256; i++) {\n            if (byteCounts[i] > 0) {\n                const probability = byteCounts[i] / totalBytes;\n                collisionSum += probability * probability;\n            }\n        }\n        entropyResults.collision = -Math.log2(collisionSum);\n        \n        // 4. Compression-based entropy estimation\n        const ivString = Array.from(iv).map(b => String.fromCharCode(b)).join('');\n        const compressedLength = this._estimateCompressedLength(ivString);\n        entropyResults.compression = (1 - compressedLength / totalBytes) * 8;\n        \n        // 5. Quantum-resistant entropy analysis\n        entropyResults.quantum = this._calculateQuantumResistantEntropy(iv);\n        \n        //   Enhanced suspicious pattern detection\n        const hasSuspiciousPatterns = this._detectAdvancedSuspiciousPatterns(iv);\n        \n        //   Multi-criteria validation\n        const minEntropyThreshold = this._ivTrackingSystem.entropyValidation.minEntropy;\n        const isValid = (\n            entropyResults.shannon >= minEntropyThreshold &&\n            entropyResults.min >= minEntropyThreshold * 0.8 &&\n            entropyResults.collision >= minEntropyThreshold * 0.9 &&\n            entropyResults.compression >= minEntropyThreshold * 0.7 &&\n            entropyResults.quantum >= minEntropyThreshold * 0.6 &&\n            !hasSuspiciousPatterns\n        );\n        \n        if (!isValid) {\n            this._secureLog('warn', `Enhanced IV entropy validation failed`, {\n                shannon: entropyResults.shannon.toFixed(2),\n                min: entropyResults.min.toFixed(2),\n                collision: entropyResults.collision.toFixed(2),\n                compression: entropyResults.compression.toFixed(2),\n                quantum: entropyResults.quantum.toFixed(2),\n                minThreshold: minEntropyThreshold,\n                hasSuspiciousPatterns: hasSuspiciousPatterns\n            });\n        }\n        \n        return isValid;\n    }\n    \n    /**\n     *   Estimate compressed length for entropy calculation\n     * @param {string} data - Data to estimate compression\n     * @returns {number} Estimated compressed length\n     */\n    _estimateCompressedLength(data) {\n        // Simple LZ77-like compression estimation\n        let compressedLength = 0;\n        let i = 0;\n        \n        while (i < data.length) {\n            let matchLength = 0;\n            let matchDistance = 0;\n            \n            // Look for repeated patterns\n            for (let j = Math.max(0, i - 255); j < i; j++) {\n                let k = 0;\n                while (i + k < data.length && data[i + k] === data[j + k] && k < 255) {\n                    k++;\n                }\n                if (k > matchLength) {\n                    matchLength = k;\n                    matchDistance = i - j;\n                }\n            }\n            \n            if (matchLength >= 3) {\n                compressedLength += 3; // Distance + length + literal\n                i += matchLength;\n            } else {\n                compressedLength += 1;\n                i += 1;\n            }\n        }\n        \n        return compressedLength;\n    }\n\n    /**\n     *   Calculate quantum-resistant entropy\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {number} Quantum-resistant entropy score\n     */\n    _calculateQuantumResistantEntropy(data) {\n        // Quantum-resistant entropy analysis\n        let quantumScore = 0;\n        \n        // 1. Check for quantum-vulnerable patterns\n        const hasQuantumVulnerablePatterns = this._detectQuantumVulnerablePatterns(data);\n        if (hasQuantumVulnerablePatterns) {\n            quantumScore -= 2;\n        }\n        \n        // 2. Analyze bit distribution\n        const bitDistribution = this._analyzeBitDistribution(data);\n        quantumScore += bitDistribution.score;\n        \n        // 3. Check for periodicity\n        const periodicity = this._detectPeriodicity(data);\n        quantumScore -= periodicity * 0.5;\n        \n        // 4. Normalize to 0-8 range\n        return Math.max(0, Math.min(8, quantumScore));\n    }\n\n    /**\n     *   Detect quantum-vulnerable patterns\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {boolean} true if quantum-vulnerable patterns found\n     */\n    _detectQuantumVulnerablePatterns(data) {\n        // Check for patterns vulnerable to quantum attacks\n        const patterns = [\n            [0, 0, 0, 0, 0, 0, 0, 0], // All zeros\n            [255, 255, 255, 255, 255, 255, 255, 255], // All ones\n            [0, 1, 0, 1, 0, 1, 0, 1], // Alternating\n            [1, 0, 1, 0, 1, 0, 1, 0]  // Alternating reverse\n        ];\n        \n        for (const pattern of patterns) {\n            for (let i = 0; i <= data.length - pattern.length; i++) {\n                let match = true;\n                for (let j = 0; j < pattern.length; j++) {\n                    if (data[i + j] !== pattern[j]) {\n                        match = false;\n                        break;\n                    }\n                }\n                if (match) return true;\n            }\n        }\n        \n        return false;\n    }\n\n    /**\n     *   Analyze bit distribution\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {Object} Bit distribution analysis\n     */\n    _analyzeBitDistribution(data) {\n        let ones = 0;\n        let totalBits = data.length * 8;\n        \n        for (const byte of data) {\n            ones += (byte >>> 0).toString(2).split('1').length - 1;\n        }\n        \n        const zeroRatio = (totalBits - ones) / totalBits;\n        const oneRatio = ones / totalBits;\n        \n        // Ideal distribution is 50/50\n        const deviation = Math.abs(0.5 - oneRatio);\n        const score = Math.max(0, 8 - deviation * 16);\n        \n        return { score, zeroRatio, oneRatio, deviation };\n    }\n\n    /**\n     *   Detect periodicity in data\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {number} Periodicity score (0-1)\n     */\n    _detectPeriodicity(data) {\n        if (data.length < 16) return 0;\n        \n        let maxPeriodicity = 0;\n        \n        // Check for periods from 2 to data.length/2\n        for (let period = 2; period <= data.length / 2; period++) {\n            let matches = 0;\n            let totalChecks = 0;\n            \n            for (let i = 0; i < data.length - period; i++) {\n                if (data[i] === data[i + period]) {\n                    matches++;\n                }\n                totalChecks++;\n            }\n            \n            if (totalChecks > 0) {\n                const periodicity = matches / totalChecks;\n                maxPeriodicity = Math.max(maxPeriodicity, periodicity);\n            }\n        }\n        \n        return maxPeriodicity;\n    }\n\n    /**\n     *   Enhanced suspicious pattern detection\n     * @param {Uint8Array} iv - IV to check\n     * @returns {boolean} true if suspicious patterns found\n     */\n    _detectAdvancedSuspiciousPatterns(iv) {\n        // Enhanced pattern detection with quantum-resistant analysis\n        const patterns = [\n            // Sequential patterns\n            [0, 1, 2, 3, 4, 5, 6, 7],\n            [255, 254, 253, 252, 251, 250, 249, 248],\n            \n            // Repeated patterns\n            [0, 0, 0, 0, 0, 0, 0, 0],\n            [255, 255, 255, 255, 255, 255, 255, 255],\n            \n            // Alternating patterns\n            [0, 255, 0, 255, 0, 255, 0, 255],\n            [255, 0, 255, 0, 255, 0, 255, 0]\n        ];\n        \n        for (const pattern of patterns) {\n            for (let i = 0; i <= iv.length - pattern.length; i++) {\n                let match = true;\n                for (let j = 0; j < pattern.length; j++) {\n                    if (iv[i + j] !== pattern[j]) {\n                        match = false;\n                        break;\n                    }\n                }\n                if (match) return true;\n            }\n        }\n        \n        // Check for low entropy regions\n        const entropyMap = this._calculateLocalEntropy(iv);\n        const lowEntropyRegions = entropyMap.filter(e => e < 3.0).length;\n        \n        return lowEntropyRegions > iv.length * 0.3; // More than 30% low entropy\n    }\n\n    /**\n     *   Calculate local entropy for pattern detection\n     * @param {Uint8Array} data - Data to analyze\n     * @returns {Array} Array of local entropy values\n     */\n    _calculateLocalEntropy(data) {\n        const windowSize = 8;\n        const entropyMap = [];\n        \n        for (let i = 0; i <= data.length - windowSize; i++) {\n            const window = data.slice(i, i + windowSize);\n            const charCount = {};\n            \n            for (const byte of window) {\n                charCount[byte] = (charCount[byte] || 0) + 1;\n            }\n            \n            let entropy = 0;\n            for (const count of Object.values(charCount)) {\n                const probability = count / windowSize;\n                entropy -= probability * Math.log2(probability);\n            }\n            \n            entropyMap.push(entropy);\n        }\n        \n        return entropyMap;\n    }\n\n    /**\n     *   Detect suspicious patterns in IVs\n     */\n    _detectSuspiciousIVPatterns(iv) {\n        //   Check for all zeros or all ones\n        const allZeros = iv.every(byte => byte === 0);\n        const allOnes = iv.every(byte => byte === 255);\n        \n        if (allZeros || allOnes) {\n            return true;\n        }\n        \n        //   Check for sequential patterns\n        let sequentialCount = 0;\n        for (let i = 1; i < iv.length; i++) {\n            if (iv[i] === iv[i-1] + 1 || iv[i] === iv[i-1] - 1) {\n                sequentialCount++;\n            } else {\n                sequentialCount = 0;\n            }\n            \n            if (sequentialCount >= 3) {\n                return true; // Suspicious sequential pattern\n            }\n        }\n        \n        //   Check for repeated patterns\n        for (let patternLength = 2; patternLength <= Math.floor(iv.length / 2); patternLength++) {\n            for (let start = 0; start <= iv.length - patternLength * 2; start++) {\n                const pattern1 = iv.slice(start, start + patternLength);\n                const pattern2 = iv.slice(start + patternLength, start + patternLength * 2);\n                \n                if (pattern1.every((byte, index) => byte === pattern2[index])) {\n                    return true; // Repeated pattern detected\n                }\n            }\n        }\n        \n        return false;\n    }\n    \n    /**\n     *   Clean up old IVs with strict limits\n     */\n    async _cleanupOldIVs() {\n        const now = Date.now();\n        const maxAge = 1800000; // Reduced to 30 minutes for better security\n        let cleanedCount = 0;\n        const cleanupBatch = [];\n        \n        //   Aggressive cleanup with quantum-resistant patterns\n        // Enforce maximum IV history size with batch processing\n        if (this._ivTrackingSystem.ivHistory.size > this._ivTrackingSystem.maxIVHistorySize) {\n            const ivArray = Array.from(this._ivTrackingSystem.ivHistory.entries());\n            const toRemove = ivArray.slice(0, ivArray.length - this._ivTrackingSystem.maxIVHistorySize);\n            \n            for (const [ivString] of toRemove) {\n                cleanupBatch.push(ivString);\n                cleanedCount++;\n                \n                // Process in batches to prevent memory spikes\n                if (cleanupBatch.length >= 100) {\n                    this._processCleanupBatch(cleanupBatch);\n                    cleanupBatch.length = 0;\n                }\n            }\n        }\n        \n        //   Clean up old IVs from history by age with enhanced security\n        for (const [ivString, metadata] of this._ivTrackingSystem.ivHistory.entries()) {\n            if (now - metadata.timestamp > maxAge) {\n                cleanupBatch.push(ivString);\n                cleanedCount++;\n                \n                // Process in batches to prevent memory spikes\n                if (cleanupBatch.length >= 100) {\n                    this._processCleanupBatch(cleanupBatch);\n                    cleanupBatch.length = 0;\n                }\n            }\n        }\n        \n        // Process remaining batch\n        if (cleanupBatch.length > 0) {\n            this._processCleanupBatch(cleanupBatch);\n        }\n        \n        //   Enhanced session IV cleanup with entropy preservation\n        for (const [sessionId, sessionIVs] of this._ivTrackingSystem.sessionIVs.entries()) {\n            if (sessionIVs.size > this._ivTrackingSystem.maxSessionIVs) {\n                const ivArray = Array.from(sessionIVs);\n                const toRemove = ivArray.slice(0, ivArray.length - this._ivTrackingSystem.maxSessionIVs);\n                \n                for (const ivString of toRemove) {\n                    sessionIVs.delete(ivString);\n                    this._ivTrackingSystem.usedIVs.delete(ivString);\n                    this._ivTrackingSystem.ivHistory.delete(ivString);\n                    cleanedCount++;\n                }\n            }\n        }\n        \n        //   Schedule natural cleanup if significant cleanup occurred\n        if (cleanedCount > 50) {\n            await this._performNaturalCleanup();\n        }\n        \n        if (cleanedCount > 0) {\n            this._secureLog('debug', `Enhanced cleanup: ${cleanedCount} old IVs removed`, {\n                cleanedCount: cleanedCount,\n                remainingIVs: this._ivTrackingSystem.usedIVs.size,\n                remainingHistory: this._ivTrackingSystem.ivHistory.size,\n                memoryPressure: this._calculateMemoryPressure()\n            });\n        }\n    }\n    \n    /**\n     *   Process cleanup batch with constant-time operations\n     * @param {Array} batch - Batch of items to clean up\n     */\n    _processCleanupBatch(batch) {\n        //   Constant-time batch processing\n        for (const item of batch) {\n            this._ivTrackingSystem.usedIVs.delete(item);\n            this._ivTrackingSystem.ivHistory.delete(item);\n        }\n    }\n\n    /**\n     *   Calculate memory pressure for adaptive cleanup\n     * @returns {number} Memory pressure score (0-100)\n     */\n    _calculateMemoryPressure() {\n        const totalIVs = this._ivTrackingSystem.usedIVs.size;\n        const maxAllowed = this._resourceLimits.maxIVHistory;\n        \n        return Math.min(100, Math.floor((totalIVs / maxAllowed) * 100));\n    }\n\n    /**\n     *   Get IV tracking system statistics\n     */\n    _getIVTrackingStats() {\n        return {\n            totalIVs: this._ivTrackingSystem.usedIVs.size,\n            collisionCount: this._ivTrackingSystem.collisionCount,\n            entropyTests: this._ivTrackingSystem.entropyValidation.entropyTests,\n            entropyFailures: this._ivTrackingSystem.entropyValidation.entropyFailures,\n            rngTests: this._ivTrackingSystem.rngValidation.testsPerformed,\n            weakRngDetected: this._ivTrackingSystem.rngValidation.weakRngDetected,\n            emergencyMode: this._ivTrackingSystem.emergencyMode,\n            sessionCount: this._ivTrackingSystem.sessionIVs.size,\n            lastCleanup: this._lastIVCleanupTime || 0\n        };\n    }\n    \n    /**\n     *   Reset IV tracking system (for testing or emergency recovery)\n     */\n    _resetIVTrackingSystem() {\n        this._secureLog('warn', 'Resetting IV tracking system');\n        \n        this._ivTrackingSystem.usedIVs.clear();\n        this._ivTrackingSystem.ivHistory.clear();\n        this._ivTrackingSystem.sessionIVs.clear();\n        this._ivTrackingSystem.collisionCount = 0;\n        this._ivTrackingSystem.entropyValidation.entropyTests = 0;\n        this._ivTrackingSystem.entropyValidation.entropyFailures = 0;\n        this._ivTrackingSystem.rngValidation.testsPerformed = 0;\n        this._ivTrackingSystem.rngValidation.weakRngDetected = false;\n        this._ivTrackingSystem.emergencyMode = false;\n        \n        this._secureLog('info', 'IV tracking system reset completed');\n    }\n    \n    /**\n     *   Validate RNG quality\n     */\n    _validateRNGQuality() {\n        const now = Date.now();\n        \n        //   Validate RNG every 1000 IV generations\n        if (this._ivTrackingSystem.rngValidation.testsPerformed % 1000 === 0) {\n            try {\n                //   Generate test IVs and validate\n                const testIVs = [];\n                for (let i = 0; i < 100; i++) {\n                    testIVs.push(crypto.getRandomValues(new Uint8Array(12)));\n                }\n                \n                //   Check for duplicates in test set\n                const testIVStrings = testIVs.map(iv => Array.from(iv).map(b => b.toString(16).padStart(2, '0')).join(''));\n                const uniqueTestIVs = new Set(testIVStrings);\n                \n                if (uniqueTestIVs.size < 95) { // Allow some tolerance\n                    this._ivTrackingSystem.rngValidation.weakRngDetected = true;\n                    this._secureLog('error', 'CRITICAL: Weak RNG detected in validation test', {\n                        uniqueIVs: uniqueTestIVs.size,\n                        totalTests: testIVs.length\n                    });\n                }\n                \n                this._ivTrackingSystem.rngValidation.lastValidation = now;\n                \n            } catch (error) {\n                this._secureLog('error', 'RNG validation failed', {\n                    errorType: error.constructor.name\n                });\n            }\n        }\n        \n        this._ivTrackingSystem.rngValidation.testsPerformed++;\n    }\n    \n    /**\n     *   Handle mutex timeout with enhanced state validation\n     */\n    _handleMutexTimeout(mutexName, operationId, timeout) {\n        const mutex = this[`_${mutexName}Mutex`];\n        \n        if (!mutex) {\n            this._secureLog('error', `Mutex '${mutexName}' not found during timeout handling`);\n            return;\n        }\n        \n        //   Validate timeout conditions\n        if (mutex.lockId !== operationId) {\n            this._secureLog('warn', `Timeout for different operation ID on mutex '${mutexName}'`, {\n                expectedOperationId: operationId,\n                actualLockId: mutex.lockId,\n                locked: mutex.locked\n            });\n            return;\n        }\n        \n        if (!mutex.locked) {\n            this._secureLog('warn', `Timeout for already unlocked mutex '${mutexName}'`, {\n                operationId: operationId\n            });\n            return;\n        }\n        \n        try {\n            //   Calculate lock duration for monitoring\n            const lockDuration = mutex.lockTime ? Date.now() - mutex.lockTime : 0;\n            \n            this._secureLog('warn', `Mutex '${mutexName}' auto-released due to timeout`, {\n                operationId: operationId,\n                lockDuration: lockDuration,\n                timeout: timeout,\n                queueLength: mutex.queue.length\n            });\n            \n            //   Atomic release with state validation\n            mutex.locked = false;\n            mutex.lockId = null;\n            mutex.lockTimeout = null;\n            mutex.lockTime = null;\n            \n            //   Process next in queue with error handling\n            setTimeout(() => {\n                try {\n                    this._processNextInQueue(mutexName);\n                } catch (queueError) {\n                    this._secureLog('error', `Error processing queue after timeout for mutex '${mutexName}'`, {\n                        errorType: queueError.constructor.name,\n                        errorMessage: queueError.message\n                    });\n                }\n            }, 10);\n            \n        } catch (error) {\n            this._secureLog('error', `Critical error during mutex timeout handling for '${mutexName}'`, {\n                operationId: operationId,\n                errorType: error.constructor.name,\n                errorMessage: error.message\n            });\n            \n            //   Force emergency unlock if timeout handling fails\n            try {\n                this._emergencyUnlockAllMutexes('timeoutHandler');\n            } catch (emergencyError) {\n                this._secureLog('error', `Emergency unlock failed during timeout handling`, {\n                    originalError: error.message,\n                    emergencyError: emergencyError.message\n                });\n            }\n        }\n    }\n\n    /**\n     *   Validate mutex system after emergency unlock\n     */\n    _validateMutexSystemAfterEmergencyUnlock() {\n        const mutexes = ['keyOperation', 'cryptoOperation', 'connectionOperation'];\n        let validationErrors = 0;\n        \n        this._secureLog('info', 'Validating mutex system after emergency unlock');\n        \n        mutexes.forEach(mutexName => {\n            const mutex = this[`_${mutexName}Mutex`];\n            \n            if (!mutex) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' not found after emergency unlock`);\n                return;\n            }\n            \n            //   Validate mutex state consistency\n            if (mutex.locked) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' still locked after emergency unlock`, {\n                    lockId: mutex.lockId,\n                    lockTime: mutex.lockTime\n                });\n            }\n            \n            if (mutex.lockId !== null) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' still has lock ID after emergency unlock`, {\n                    lockId: mutex.lockId\n                });\n            }\n            \n            if (mutex.lockTimeout !== null) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' still has timeout after emergency unlock`);\n            }\n            \n            if (mutex.queue.length > 0) {\n                validationErrors++;\n                this._secureLog('error', `Mutex '${mutexName}' still has queue items after emergency unlock`, {\n                    queueLength: mutex.queue.length\n                });\n            }\n        });\n        \n        //   Validate key system state\n        if (this._keySystemState) {\n            if (this._keySystemState.isInitializing || \n                this._keySystemState.isRotating || \n                this._keySystemState.isDestroying) {\n                validationErrors++;\n                this._secureLog('error', `Key system state not properly reset after emergency unlock`, {\n                    isInitializing: this._keySystemState.isInitializing,\n                    isRotating: this._keySystemState.isRotating,\n                    isDestroying: this._keySystemState.isDestroying\n                });\n            }\n        }\n        \n        if (validationErrors === 0) {\n            this._secureLog('info', 'Mutex system validation passed after emergency unlock');\n        } else {\n            this._secureLog('error', `Mutex system validation failed after emergency unlock`, {\n                validationErrors: validationErrors\n            });\n            \n            //   Force re-initialization if validation fails\n            setTimeout(() => {\n                this._emergencyRecoverMutexSystem();\n            }, 1000);\n        }\n    }\n    /**\n     * NEW: Diagnostics of the mutex system state\n     */\n    _getMutexSystemDiagnostics() {\n        const diagnostics = {\n            timestamp: Date.now(),\n            systemValid: this._validateMutexSystem(),\n            mutexes: {},\n            counters: { ...this._operationCounters },\n            keySystemState: { ...this._keySystemState }\n        };\n        \n        const mutexNames = ['keyOperation', 'cryptoOperation', 'connectionOperation'];\n        \n        mutexNames.forEach(mutexName => {\n            const mutexPropertyName = `_${mutexName}Mutex`;\n            const mutex = this[mutexPropertyName];\n            \n            if (mutex) {\n                diagnostics.mutexes[mutexName] = {\n                    locked: mutex.locked,\n                    lockId: mutex.lockId,\n                    queueLength: mutex.queue.length,\n                    hasTimeout: !!mutex.lockTimeout\n                };\n            } else {\n                diagnostics.mutexes[mutexName] = { error: 'not_found' };\n            }\n        });\n        \n        return diagnostics;\n    }\n\n    /**\n     * FULLY FIXED createSecureOffer()\n     * With race-condition protection and improved security\n     */\n    async createSecureOffer() {\n        return this._withMutex('connectionOperation', async (operationId) => {\n            this._secureLog('info', 'Creating secure offer with mutex', {\n                operationId: operationId,\n                connectionAttempts: this.connectionAttempts,\n                currentState: this.peerConnection?.connectionState || 'none'\n            });\n            \n            try {\n                // ============================================\n                // PHASE 1: INITIALIZATION AND VALIDATION\n                // ============================================\n                \n                // Reset notification flags for a new connection\n                this._resetNotificationFlags();\n                \n                // Rate limiting check\n                if (!this._checkRateLimit()) {\n                    throw new Error('Connection rate limit exceeded. Please wait before trying again.');\n                }\n                \n                // Reset attempt counters\n                this.connectionAttempts = 0;\n                \n                // Generate session salt (64 bytes for v4.0)\n                this.sessionSalt = window.EnhancedSecureCryptoUtils.generateSalt();\n                \n                this._secureLog('debug', 'Session salt generated', {\n                    operationId: operationId,\n                    saltLength: this.sessionSalt.length,\n                    isValidSalt: Array.isArray(this.sessionSalt) && this.sessionSalt.length === 64\n                });\n                \n                // ============================================\n                // PHASE 2: SECURE KEY GENERATION\n                // ============================================\n                \n                // Secure key generation via mutex\n                const keyPairs = await this._generateEncryptionKeys();\n                this.ecdhKeyPair = keyPairs.ecdhKeyPair;\n                this.ecdsaKeyPair = keyPairs.ecdsaKeyPair;\n                \n                // Validate generated keys\n                if (!this.ecdhKeyPair?.privateKey || !this.ecdhKeyPair?.publicKey) {\n                    throw new Error('Failed to generate valid ECDH key pair');\n                }\n                \n                if (!this.ecdsaKeyPair?.privateKey || !this.ecdsaKeyPair?.publicKey) {\n                    throw new Error('Failed to generate valid ECDSA key pair');\n                }\n                \n                // ============================================\n                // PHASE 3: MITM PROTECTION AND FINGERPRINTING\n                // ============================================\n                \n                // MITM Protection: Compute unique key fingerprints\n                const ecdhFingerprint = await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(\n                    await crypto.subtle.exportKey('spki', this.ecdhKeyPair.publicKey)\n                );\n                const ecdsaFingerprint = await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(\n                    await crypto.subtle.exportKey('spki', this.ecdsaKeyPair.publicKey)\n                );\n                \n                // Validate fingerprints\n                if (!ecdhFingerprint || !ecdsaFingerprint) {\n                    throw new Error('Failed to generate key fingerprints');\n                }\n                \n                this._secureLog('info', 'Generated unique key pairs for MITM protection', {\n                    operationId: operationId,\n                    hasECDHFingerprint: !!ecdhFingerprint,\n                    hasECDSAFingerprint: !!ecdsaFingerprint,\n                    fingerprintLength: ecdhFingerprint.length,\n                    timestamp: Date.now()\n                });\n                \n                // ============================================\n                // PHASE 4: EXPORT SIGNED KEYS\n                // ============================================\n                \n                // Export keys with digital signatures\n                const ecdhPublicKeyData = await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(\n                    this.ecdhKeyPair.publicKey,\n                    this.ecdsaKeyPair.privateKey,\n                    'ECDH'\n                );\n                \n                const ecdsaPublicKeyData = await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(\n                    this.ecdsaKeyPair.publicKey,\n                    this.ecdsaKeyPair.privateKey,\n                    'ECDSA'\n                );\n\n                \n                if (!ecdhPublicKeyData || typeof ecdhPublicKeyData !== 'object') {\n                    this._secureLog('error', 'CRITICAL: ECDH key export failed - invalid object structure', { operationId });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key export validation failed - hard abort required');\n                }\n                \n                if (!ecdhPublicKeyData.keyData || !ecdhPublicKeyData.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDH key export incomplete - missing keyData or signature', { \n                        operationId,\n                        hasKeyData: !!ecdhPublicKeyData.keyData,\n                        hasSignature: !!ecdhPublicKeyData.signature \n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key export incomplete - hard abort required');\n                }\n                \n                if (!ecdsaPublicKeyData || typeof ecdsaPublicKeyData !== 'object') {\n                    this._secureLog('error', 'CRITICAL: ECDSA key export failed - invalid object structure', { operationId });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key export validation failed - hard abort required');\n                }\n                \n                if (!ecdsaPublicKeyData.keyData || !ecdsaPublicKeyData.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDSA key export incomplete - missing keyData or signature', { \n                        operationId,\n                        hasKeyData: !!ecdsaPublicKeyData.keyData,\n                        hasSignature: !!ecdsaPublicKeyData.signature \n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key export incomplete - hard abort required');\n                }\n                \n                // ============================================\n                // PHASE 5: UPDATE SECURITY FEATURES\n                // ============================================\n                \n                // Atomic update of security features\n                this._updateSecurityFeatures({\n                    hasEncryption: true,\n                    hasECDH: true,\n                    hasECDSA: true,\n                    hasMutualAuth: true,\n                    hasMetadataProtection: true,\n                    hasEnhancedReplayProtection: true,\n                    hasNonExtractableKeys: true,\n                    hasRateLimiting: true,\n                    hasEnhancedValidation: true,\n                    hasPFS: true\n                });\n                \n                // ============================================\n                // PHASE 6: INITIALIZE PEER CONNECTION\n                // ============================================\n                \n                this.isInitiator = true;\n                this.onStatusChange('connecting');\n                \n                // Create peer connection\n                this.createPeerConnection();\n                \n                // Create main data channel\n                this.dataChannel = this.peerConnection.createDataChannel('securechat', {\n                    ordered: true\n                });\n                \n                // Setup data channel\n                this.setupDataChannel(this.dataChannel);\n                \n                this._secureLog('debug', 'Data channel created', {\n                    operationId: operationId,\n                    channelLabel: this.dataChannel.label,\n                    channelOrdered: this.dataChannel.ordered\n                });\n                \n                // ============================================\n                // PHASE 7: CREATE SDP OFFER\n                // ============================================\n                \n\n                const offer = await this.peerConnection.createOffer({\n                    offerToReceiveAudio: false,\n                    offerToReceiveVideo: false\n                });\n                \n                await this.peerConnection.setLocalDescription(offer);\n\n                try {\n                    const ourFingerprint = this._extractDTLSFingerprintFromSDP(offer.sdp);\n                    this.expectedDTLSFingerprint = ourFingerprint;\n                    \n                    this._secureLog('info', 'Generated DTLS fingerprint for out-of-band verification', {\n                        fingerprint: ourFingerprint,\n                        context: 'offer_creation'\n                    });\n                    \n                    // Notify UI that fingerprint is ready for out-of-band verification\n                    this.deliverMessageToUI(`DTLS fingerprint ready for verification: ${ourFingerprint}`, 'system');\n                } catch (error) {\n                    this._secureLog('error', 'Failed to extract DTLS fingerprint from offer', { error: error.message });\n                    // Continue without fingerprint validation (fallback mode)\n                }\n                \n                // Await ICE gathering. Manual out-of-band exchange does not use\n                // trickle ICE, so exporting an SDP before completion can strand\n                // late candidates that the remote peer will never receive.\n                const offerIceGatheringStartedAt = Date.now();\n                const offerIceGatheringCompleted = await this.waitForIceGathering();\n                const offerCandidateSummary = this._summarizeIceCandidatesInSDP(this.peerConnection.localDescription?.sdp);\n                const offerCandidateCount = offerCandidateSummary.total;\n                if (!offerIceGatheringCompleted && offerCandidateCount === 0) {\n                    this.deliverMessageToUI(\n                        'No network candidates could be gathered, so the invitation would not be usable. ' +\n                        'This usually means a VPN or firewall is blocking STUN/TURN. Try turning the VPN off, ' +\n                        'switching network, or adding your own TURN server in Advanced network settings.',\n                        'system'\n                    );\n                    throw new Error('ICE gathering produced no candidates \u2014 check VPN/firewall or configure a TURN server');\n                }\n                this._secureLog(offerCandidateCount > 0 ? 'info' : 'warn', 'ICE candidates captured for offer export', {\n                    candidateSummary: offerCandidateSummary,\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    iceGatheringDurationMs: Date.now() - offerIceGatheringStartedAt,\n                    iceGatheringCompleted: offerIceGatheringCompleted\n                });\n                this._logIceCandidateDiagnostics('offer export', this.peerConnection.localDescription?.sdp, {\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    iceGatheringDurationMs: Date.now() - offerIceGatheringStartedAt,\n                    iceGatheringCompleted: offerIceGatheringCompleted\n                });\n                if (!offerIceGatheringCompleted) {\n                    this.deliverMessageToUI('ICE gathering timed out before completion, but available candidates were included in the invitation. Connectivity may still fail on restrictive networks.', 'system');\n                }\n                if (offerCandidateCount === 0) {\n                    this.deliverMessageToUI('No ICE candidates were gathered for the invitation yet. The peer connection may fail unless network candidates become available.', 'system');\n                }\n                \n                this._secureLog('debug', 'ICE gathering completed', {\n                    operationId: operationId,\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    connectionState: this.peerConnection.connectionState\n                });\n                \n                // ============================================\n                // PHASE 8: GENERATE SAS FOR OUT-OF-BAND VERIFICATION\n                // ============================================\n\n                this.verificationCode = window.EnhancedSecureCryptoUtils.generateVerificationCode();\n                \n                // Validate verification code\n                if (!this.verificationCode || this.verificationCode.length < EnhancedSecureWebRTCManager.SIZES.VERIFICATION_CODE_MIN_LENGTH) {\n                    throw new Error('Failed to generate valid verification code');\n                }\n                \n                // ============================================\n                // PHASE 9: MUTUAL AUTHENTICATION CHALLENGE\n                // ============================================\n                \n                // Generate challenge for mutual authentication\n                const authChallenge = window.EnhancedSecureCryptoUtils.generateMutualAuthChallenge();\n                \n                if (!authChallenge) {\n                    throw new Error('Failed to generate mutual authentication challenge');\n                }\n                \n                // ============================================\n                // PHASE 10: SESSION ID FOR MITM PROTECTION\n                // ============================================\n                \n                // MITM Protection: Generate session-specific ID\n                this.sessionId = Array.from(crypto.getRandomValues(new Uint8Array(EnhancedSecureWebRTCManager.SIZES.SESSION_ID_LENGTH)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('');\n                \n                // Validate session ID\n                if (!this.sessionId || this.sessionId.length !== (EnhancedSecureWebRTCManager.SIZES.SESSION_ID_LENGTH * 2)) {\n                    throw new Error('Failed to generate valid session ID');\n                }\n                \n                // Generate connection ID for AAD\n                this.connectionId = Array.from(crypto.getRandomValues(new Uint8Array(8)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('');\n                this._storePendingOfferContext();\n                \n                // ============================================\n                // PHASE 11: SECURITY LEVEL CALCULATION\n                // ============================================\n                \n                // All security features are enabled by default\n                const securityLevel = {\n                    level: 'MAXIMUM',\n                    score: 100,\n                    color: 'green',\n                    details: 'All security features enabled by default',\n                        passedChecks: 10,\n                    totalChecks: 10,\n                    isRealData: true\n                    };\n                \n                // ============================================\n                // PHASE 12: CREATE OFFER PACKAGE\n                // ============================================\n                \n                const currentTimestamp = Date.now();\n                \n                // Create compact offer package for smaller QR codes\n                const offerPackage = {\n                    // Core information (minimal)\n                    t: 'offer', // type\n                    s: this.peerConnection.localDescription.sdp, // sdp\n                    v: EnhancedSecureWebRTCManager.PROTOCOL_VERSION, // version\n                    ts: currentTimestamp, // timestamp\n                    \n                    // Cryptographic keys (essential)\n                    e: ecdhPublicKeyData, // ecdhPublicKey\n                    d: ecdsaPublicKeyData, // ecdsaPublicKey\n                    \n                    // Session data (essential)\n                    sl: this.sessionSalt, // salt\n                    si: this.sessionId, // sessionId\n                    ci: this.connectionId, // connectionId\n                    \n                    // Authentication (essential)\n                    vc: this.verificationCode, // verificationCode\n                    ac: authChallenge, // authChallenge\n                    \n                    // Security metadata (simplified)\n                    slv: 'MAX', // securityLevel\n\n                    // Double Ratchet support. Advertised rather than assumed so a\n                    // peer still on 5.6.x keeps working on the static-key path\n                    // instead of failing to decrypt anything: with no server there\n                    // is no way to roll both ends at once. Absent = not supported.\n                    dr: EnhancedSecureWebRTCManager.RATCHET_VERSION,\n\n                    // Key fingerprints (shortened)\n                    kf: {\n                        e: ecdhFingerprint.substring(0, 12), // ecdh (12 chars)\n                        d: ecdsaFingerprint.substring(0, 12) // ecdsa (12 chars)\n                    }\n                };\n                \n                // ============================================\n                // PHASE 13: VALIDATE OFFER PACKAGE\n                // ============================================\n\n                try {\n                    const validationResult = this.validateEnhancedOfferData(offerPackage);\n\n                } catch (validationError) {\n                    throw new Error(`Offer package validation error: ${validationError.message}`);\n                }\n                \n                // ============================================\n                // PHASE 14: LOGGING AND EVENTS\n                // ============================================\n                \n                this._secureLog('info', 'Enhanced secure offer created successfully', {\n                    operationId: operationId,\n                    version: offerPackage.version,\n                    hasECDSA: true,\n                    hasMutualAuth: true,\n                    hasSessionId: !!offerPackage.sessionId,\n                    securityLevel: securityLevel.level,\n                    timestamp: currentTimestamp,\n                    capabilitiesCount: 10 // All capabilities enabled by default\n                });\n                \n                // Dispatch event about new connection\n                this._dispatchAppEvent?.(new CustomEvent('new-connection', {\n                    detail: { \n                        type: 'offer',\n                        timestamp: currentTimestamp,\n                        securityLevel: securityLevel.level,\n                        operationId: operationId\n                    }\n                }));\n\n                // ============================================\n                // PHASE 15: SBQ2 \u2014 EMIT THE COMPACT DESCRIPTOR INSTEAD\n                // ============================================\n                // Everything above still runs: the key pairs it generates are the\n                // ones the in-band exchange will publish, and the DTLS\n                // fingerprint it extracted is the anchor the descriptor carries.\n                // What changes is what leaves the device \u2014 a descriptor with a\n                // commitment, not the key material itself.\n                if (EnhancedSecureWebRTCManager.SBQ2_SEND_ENABLED) {\n                    this._latchHandshakeMode('sbq2');\n                    const { text } = await this._sbq2BuildDescriptor(SBQ2_TYPE.OFFER);\n                    return { t: 'offer', sbq2: text };\n                }\n\n                this._latchHandshakeMode('sb1');\n                return offerPackage;\n\n            } catch (error) {\n                // ============================================\n                // ERROR HANDLING\n                // ============================================\n                \n                this._secureLog('error', 'Enhanced secure offer creation failed in critical section', {\n                    operationId: operationId,\n                    errorType: error.constructor.name,\n                    errorMessage: error.message,\n                    phase: this._determineErrorPhase(error),\n                    connectionAttempts: this.connectionAttempts\n                });\n                \n                // Cleanup state on error\n                this._cleanupFailedOfferCreation();\n                \n                // Update status\n                this.onStatusChange('disconnected');\n                \n                // Re-throw for upper-level handling\n                throw error;\n            }\n        }, 60000); // 60 seconds timeout for the entire offer creation\n    }\n\n    /**\n     * HELPER: Determine the phase where the error occurred\n     */\n    _determineErrorPhase(error) {\n        const message = error.message.toLowerCase();\n        \n        if (message.includes('rate limit')) return 'rate_limiting';\n        if (message.includes('key pair') || message.includes('generate')) return 'key_generation';\n        if (message.includes('fingerprint')) return 'fingerprinting';\n        if (message.includes('export') || message.includes('signature')) return 'key_export';\n        if (message.includes('peer connection')) return 'webrtc_setup';\n        if (message.includes('offer') || message.includes('sdp')) return 'sdp_creation';\n        if (message.includes('verification')) return 'verification_setup';\n        if (message.includes('session')) return 'session_setup';\n        if (message.includes('validation')) return 'package_validation';\n        \n        return 'unknown';\n    }\n\n    /**\n     *   Secure cleanup state after failed offer creation\n     */\n    _cleanupFailedOfferCreation() {\n        try {\n            //   Secure wipe of cryptographic materials\n            this._secureCleanupCryptographicMaterials();\n            \n            //   Close peer connection if it was created\n            if (this.peerConnection) {\n                this.peerConnection.close();\n                this.peerConnection = null;\n            }\n            \n            //   Clear data channel\n            if (this.dataChannel) {\n                this.dataChannel.close();\n                this.dataChannel = null;\n            }\n            \n            //   Reset flags\n            this.isInitiator = false;\n            this.isVerified = false;\n            \n            //   Reset security features to baseline\n            this._updateSecurityFeatures({\n                hasEncryption: false,\n                hasECDH: false,\n                hasECDSA: false,\n                hasMutualAuth: false,\n                hasMetadataProtection: false,\n                hasEnhancedReplayProtection: false,\n                hasNonExtractableKeys: false,\n                hasEnhancedValidation: false,\n                hasPFS: false\n            });\n            \n            //   Schedule natural cleanup\n            this._forceGarbageCollection().catch(error => {\n                this._secureLog('error', 'Cleanup failed during offer cleanup', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n            \n            this._secureLog('debug', 'Failed offer creation cleanup completed with secure memory wipe');\n            \n        } catch (cleanupError) {\n            this._secureLog('error', 'Error during offer creation cleanup', {\n                errorType: cleanupError.constructor.name,\n                errorMessage: cleanupError.message\n            });\n        }\n    }\n\n    /**\n     * HELPER: Atomic update of security features (if not added yet)\n     */\n    _updateSecurityFeatures(updates) {\n        const oldFeatures = { ...this.securityFeatures };\n        \n        try {\n            Object.assign(this.securityFeatures, updates);\n            \n            this._secureLog('debug', 'Security features updated', {\n                updatedCount: Object.keys(updates).length,\n                totalFeatures: Object.keys(this.securityFeatures).length\n            });\n            \n        } catch (error) {\n            // Roll back on error\n            this.securityFeatures = oldFeatures;\n            this._secureLog('error', 'Security features update failed, rolled back', {\n                errorType: error.constructor.name\n            });\n            throw error;\n        }\n    }\n\n    /**\n     * FULLY FIXED METHOD createSecureAnswer()\n     * With race-condition protection and enhanced security\n     */\n    /**\n     * SBQ2 answer path.\n     *\n     * Deliberately separate from createSecureAnswer rather than folded into it:\n     * that method's job is to import the peer's keys and derive the session from\n     * the offer, and here there are no peer keys yet \u2014 only a fingerprint and a\n     * commitment. Sharing the body would mean threading \"do we have keys yet?\"\n     * through fifteen phases, and the whole point of the format is that the\n     * answer is produced before any key material has been seen.\n     */\n    async _createSbq2Answer(offerData) {\n        return this._withMutex('connectionOperation', async (operationId) => {\n            try {\n                this._resetNotificationFlags();\n                if (!this._checkRateLimit()) {\n                    throw new Error('Connection rate limit exceeded. Please wait before trying again.');\n                }\n                this._latchHandshakeMode('sbq2');\n\n                // Strict decode of untrusted input, before anything is used.\n                const offerBytes = sbq2DecodeText(String(offerData.sbq2));\n                const desc = this._sbq2AdoptRemoteDescriptor(offerBytes, SBQ2_TYPE.OFFER);\n                const { sdp: remoteSdp } = sbq2SerializeSdp(desc);\n\n                this.isInitiator = false;\n                this.onStatusChange('connecting');\n\n                const keyPairs = await this._generateEncryptionKeys();\n                this.ecdhKeyPair = keyPairs.ecdhKeyPair;\n                this.ecdsaKeyPair = keyPairs.ecdsaKeyPair;\n                if (!this.ecdhKeyPair?.privateKey || !this.ecdsaKeyPair?.privateKey) {\n                    throw new Error('Failed to generate valid key pairs');\n                }\n\n                this.createPeerConnection();\n\n                // The peer's DTLS fingerprint comes straight from the descriptor,\n                // which is the value the user carried by hand. This is the anchor\n                // the whole in-band exchange hangs from.\n                this._peerDTLSFingerprint = Array.from(desc.fingerprint,\n                    (b) => b.toString(16).padStart(2, '0').toUpperCase()).join(':');\n\n                await this.peerConnection.setRemoteDescription({ type: 'offer', sdp: remoteSdp });\n                await this.peerConnection.setLocalDescription(await this.peerConnection.createAnswer({\n                    offerToReceiveAudio: false,\n                    offerToReceiveVideo: false\n                }));\n\n                this.expectedDTLSFingerprint =\n                    this._extractDTLSFingerprintFromSDP(this.peerConnection.localDescription.sdp);\n\n                // Manual exchange has no trickle channel, so the descriptor must\n                // carry a complete candidate set.\n                await this.waitForIceGathering();\n\n                const digest = async (b) => new Uint8Array(await crypto.subtle.digest('SHA-256', b));\n                const { text } = await this._sbq2BuildDescriptor(SBQ2_TYPE.ANSWER, {\n                    bindingTag: await sbq2BindingTag(digest, offerBytes),\n                });\n\n                this._dispatchAppEvent?.(new CustomEvent('new-connection', {\n                    detail: { type: 'answer', timestamp: Date.now(), operationId }\n                }));\n\n                return { t: 'answer', sbq2: text };\n            } catch (error) {\n                this._secureLog('error', 'SBQ2 answer creation failed', {\n                    operationId,\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n                this.onStatusChange('disconnected');\n                throw error;\n            }\n        }, 60000);\n    }\n\n    async createSecureAnswer(offerData) {\n        // Format detection happens before the mutex and before any validation\n        // written for the old shape: an SBQ2 invitation has none of the fields\n        // the SB1 validator requires, so it must never reach it.\n        if (offerData && typeof offerData.sbq2 === 'string') {\n            return this._createSbq2Answer(offerData);\n        }\n        return this._withMutex('connectionOperation', async (operationId) => {\n            this._secureLog('info', 'Creating secure answer with mutex', {\n                operationId: operationId,\n                hasOfferData: !!offerData,\n                offerType: offerData?.type,\n                offerVersion: offerData?.version,\n                offerTimestamp: offerData?.timestamp\n            });\n            \n            try {\n                // ============================================\n                // PHASE 1: PRE-VALIDATION OF OFFER\n                // ============================================\n                \n                // Reset notification flags for a new connection\n                this._resetNotificationFlags();\n                \n                this._secureLog('debug', 'Starting enhanced offer validation', {\n                    operationId: operationId,\n                    hasOfferData: !!offerData,\n                    offerType: offerData?.type,\n                    hasECDHKey: !!offerData?.ecdhPublicKey,\n                    hasECDSAKey: !!offerData?.ecdsaPublicKey,\n                    hasSalt: !!offerData?.salt\n                });\n                \n                // Strict input validation\n                if (!this.validateEnhancedOfferData(offerData)) {\n                    throw new Error('Invalid connection data format - failed enhanced validation');\n                }\n                \n                // Rate limiting check\n                if (!window.EnhancedSecureCryptoUtils.rateLimiter.checkConnectionRate(this.rateLimiterId)) {\n                    throw new Error('Connection rate limit exceeded. Please wait before trying again.');\n                }\n                \n                // ============================================\n                // PHASE 2: SECURITY AND ANTI-REPLAY PROTECTION\n                // ============================================\n                \n                // MITM Protection: Validate offer data structure (support both formats)\n                const timestamp = offerData.ts || offerData.timestamp;\n                const version = offerData.v || offerData.version;\n                if (!timestamp || !version) {\n                    throw new Error('Missing required security fields in offer data \u2013 possible MITM attack');\n                }\n                \n                // Replay attack protection (extended to 30 minutes for better UX)\n                const offerAge = Date.now() - timestamp;\n                const MAX_OFFER_AGE = 1800000; // 30 minutes for better user experience\n                \n                if (offerAge > MAX_OFFER_AGE) {\n                    this._secureLog('error', 'Offer data is too old - possible replay attack', {\n                        operationId: operationId,\n                        offerAge: Math.round(offerAge / 1000),\n                        maxAllowedAge: Math.round(MAX_OFFER_AGE / 1000),\n                        timestamp: offerData.timestamp\n                    });\n                    \n                    // Notify the main code about the replay attack\n                    if (this.onAnswerError) {\n                        this.onAnswerError('replay_attack', 'Offer data is too old \u2013 possible replay attack');\n                    }\n                    \n                    throw new Error('Offer data is too old \u2013 possible replay attack');\n                }\n                \n                // Protocol version compatibility check (support both formats)\n                const protocolVersion = version; // Use the version we already extracted\n                if (protocolVersion !== EnhancedSecureWebRTCManager.PROTOCOL_VERSION) {\n                    this._secureLog('warn', 'Protocol version mismatch detected', {\n                        operationId: operationId,\n                        expectedVersion: EnhancedSecureWebRTCManager.PROTOCOL_VERSION,\n                        receivedVersion: protocolVersion\n                    });\n                    throw new Error(`Version mismatch: expected protocol ${EnhancedSecureWebRTCManager.PROTOCOL_VERSION}, received ${protocolVersion}`);\n                }\n                \n                // ============================================\n                // PHASE 3: EXTRACT AND VALIDATE SESSION SALT\n                // ============================================\n                \n                // Set session salt from offer (support both formats)\n                this.sessionSalt = offerData.sl || offerData.salt;\n\n                // Does the initiator speak our ratchet version? Absent means an\n                // older build, which is a downgrade to the previous scheme rather\n                // than a failure \u2014 see _initializeRatchet.\n                this._peerSupportsRatchet =\n                    offerData.dr === EnhancedSecureWebRTCManager.RATCHET_VERSION;\n                \n                // Validate session salt\n                if (!Array.isArray(this.sessionSalt)) {\n                    throw new Error('Invalid session salt format - must be array');\n                }\n                \n                const expectedSaltLength = 64;\n                if (this.sessionSalt.length !== expectedSaltLength) {\n                    throw new Error(`Invalid session salt length: expected ${expectedSaltLength}, got ${this.sessionSalt.length}`);\n                }\n                \n                // MITM Protection: Check salt integrity\n                const saltFingerprint = await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(this.sessionSalt);\n                \n                this._secureLog('info', 'Session salt validated successfully', {\n                    operationId: operationId,\n                    saltLength: this.sessionSalt.length,\n                    saltFingerprint: saltFingerprint.substring(0, 8)\n                });\n                \n                // ============================================\n                // PHASE 4: SECURE GENERATION OF OUR KEYS\n                // ============================================\n                \n                // Secure generation of our keys via mutex\n                const keyPairs = await this._generateEncryptionKeys();\n                this.ecdhKeyPair = keyPairs.ecdhKeyPair;\n                this.ecdsaKeyPair = keyPairs.ecdsaKeyPair;\n                \n                // Additional validation of generated keys\n                if (!(this.ecdhKeyPair?.privateKey instanceof CryptoKey)) {\n                    this._secureLog('error', 'Local ECDH private key is not a CryptoKey', {\n                        operationId: operationId,\n                        hasKeyPair: !!this.ecdhKeyPair,\n                        privateKeyType: typeof this.ecdhKeyPair?.privateKey,\n                        privateKeyAlgorithm: this.ecdhKeyPair?.privateKey?.algorithm?.name\n                    });\n                    throw new Error('Local ECDH private key is not a valid CryptoKey');\n                }\n                \n                // ============================================\n                // PHASE 5: IMPORT AND VERIFY PEER KEYS\n                // ============================================\n                \n                // Import peer ECDSA public key for signature verification (support both formats)\n                let peerECDSAPublicKey;\n                \n                try {\n                    const ecdsaKey = offerData.d || offerData.ecdsaPublicKey;\n                    peerECDSAPublicKey = await crypto.subtle.importKey(\n                        'spki',\n                        new Uint8Array(ecdsaKey.keyData),\n                        {\n                            name: 'ECDSA',\n                            namedCurve: 'P-384'\n                        },\n                        false,\n                        ['verify']\n                    );\n                } catch (error) {\n                    this._throwSecureError(error, 'ecdsa_key_import');\n                }\n                \n                // ============================================\n                // PHASE 6: IMPORT AND VERIFY ECDH KEY\n                // ============================================\n                \n                // Import and verify ECDH public key using verified ECDSA key (support both formats)\n                let peerECDHPublicKey;\n                \n                try {\n                    const ecdhKey = offerData.e || offerData.ecdhPublicKey;\n                    peerECDHPublicKey = await window.EnhancedSecureCryptoUtils.importSignedPublicKey(\n                        ecdhKey,\n                        peerECDSAPublicKey,\n                        'ECDH'\n                    );\n                } catch (error) {\n                    this._secureLog('error', 'Failed to import signed ECDH public key', {\n                        operationId: operationId,\n                        errorType: error.constructor.name\n                    });\n                    this._throwSecureError(error, 'ecdh_key_import');\n                }\n                \n                // Final validation of ECDH key\n                if (!(peerECDHPublicKey instanceof CryptoKey)) {\n                    this._secureLog('error', 'Peer ECDH public key is not a CryptoKey', {\n                        operationId: operationId,\n                        publicKeyType: typeof peerECDHPublicKey,\n                        publicKeyAlgorithm: peerECDHPublicKey?.algorithm?.name\n                    });\n                    throw new Error('Peer ECDH public key is not a valid CryptoKey');\n                }\n                \n                // Save peer key for PFS rotation\n                this.peerPublicKey = peerECDHPublicKey;\n                \n                // ============================================\n                // PHASE 7: DERIVE SHARED ENCRYPTION KEYS\n                // ============================================\n                \n                // Derive shared keys with metadata protection\n                let derivedKeys;\n                \n                try {\n                    this._secureLog('debug', 'About to call deriveSharedKeys', {\n                        operationId: operationId,\n                        privateKeyType: typeof this.ecdhKeyPair.privateKey,\n                        publicKeyType: typeof peerECDHPublicKey,\n                        saltLength: this.sessionSalt?.length,\n                        privateKeyAlgorithm: this.ecdhKeyPair.privateKey?.algorithm?.name,\n                        publicKeyAlgorithm: peerECDHPublicKey?.algorithm?.name\n                    });\n                    \n                    derivedKeys = await window.EnhancedSecureCryptoUtils.deriveSharedKeys(\n                        this.ecdhKeyPair.privateKey,\n                        peerECDHPublicKey,\n                        this.sessionSalt\n                    );\n                    \n                    this._secureLog('debug', 'deriveSharedKeys completed successfully', {\n                        operationId: operationId,\n                        hasMessageKey: !!derivedKeys.messageKey,\n                        hasMacKey: !!derivedKeys.macKey,\n                        hasPfsKey: !!derivedKeys.pfsKey,\n                        hasMetadataKey: !!derivedKeys.metadataKey,\n                        hasFingerprint: !!derivedKeys.fingerprint\n                    });\n                } catch (error) {\n                    this._secureLog('error', 'Failed to derive shared keys', {\n                        operationId: operationId,\n                        errorType: error.constructor.name,\n                        errorMessage: error.message,\n                        errorStack: error.stack,\n                        privateKeyType: typeof this.ecdhKeyPair.privateKey,\n                        publicKeyType: typeof peerECDHPublicKey,\n                        saltLength: this.sessionSalt?.length,\n                        privateKeyAlgorithm: this.ecdhKeyPair.privateKey?.algorithm?.name,\n                        publicKeyAlgorithm: peerECDHPublicKey?.algorithm?.name\n                    });\n                    this._throwSecureError(error, 'key_derivation');\n                }\n                \n                // Securely set keys via helper\n                await this._setEncryptionKeys(\n                    derivedKeys.messageKey,\n                    derivedKeys.macKey,\n                    derivedKeys.metadataKey,\n                    derivedKeys.fingerprint\n                );\n\n                // Responder: no sending chain until the initiator's first message\n                // arrives, which is what makes the first DH ratchet agree.\n                await this._initializeRatchet(derivedKeys, /* isInitiator */ false);\n\n                // Additional validation of installed keys\n                if (!(this.encryptionKey instanceof CryptoKey) || \n                    !(this.macKey instanceof CryptoKey) || \n                    !(this.metadataKey instanceof CryptoKey)) {\n                    \n                    this._secureLog('error', 'Invalid key types after derivation', {\n                        operationId: operationId,\n                        encryptionKeyType: typeof this.encryptionKey,\n                        macKeyType: typeof this.macKey,\n                        metadataKeyType: typeof this.metadataKey\n                    });\n                    throw new Error('Invalid key types after derivation');\n                }\n                \n                // Preserve the invitation code only as a temporary legacy field.\n                // The real SAS is recomputed locally after the DTLS fingerprints exist.\n                this.verificationCode = offerData.vc || offerData.verificationCode || null;\n                \n                this._secureLog('info', 'Encryption keys derived and set successfully', {\n                    operationId: operationId,\n                    hasEncryptionKey: !!this.encryptionKey,\n                    hasMacKey: !!this.macKey,\n                    hasMetadataKey: !!this.metadataKey,\n                    hasKeyFingerprint: !!this.keyFingerprint,\n                    mitmProtection: 'enabled',\n                    signatureVerified: true\n                });\n                \n                // ============================================\n                // PHASE 8: UPDATE SECURITY FEATURES\n                // ============================================\n                \n                // Atomic update of security features\n                this._updateSecurityFeatures({\n                    hasEncryption: true,\n                    hasECDH: true,\n                    hasECDSA: true,\n                    hasMutualAuth: true,\n                    hasMetadataProtection: true,\n                    hasEnhancedReplayProtection: true,\n                    hasNonExtractableKeys: true,\n                    hasRateLimiting: true,\n                    hasEnhancedValidation: true,\n                    hasPFS: true\n                });\n                \n                // PFS: Initialize key version tracking\n                this.currentKeyVersion = 0;\n                this.lastKeyRotation = Date.now();\n                this.keyVersions.set(0, {\n                    salt: this.sessionSalt,\n                    timestamp: this.lastKeyRotation,\n                    messageCount: 0\n                });\n                \n                // ============================================\n                // PHASE 9: CREATE AUTHENTICATION PROOF\n                // ============================================\n                \n                // Create proof for mutual authentication\n                let authProof;\n                \n                if (offerData.authChallenge) {\n                    try {\n                        authProof = await window.EnhancedSecureCryptoUtils.createAuthProof(\n                            offerData.authChallenge,\n                            this.ecdsaKeyPair.privateKey,\n                            this.ecdsaKeyPair.publicKey\n                        );\n                    } catch (error) {\n                        this._secureLog('error', 'Failed to create authentication proof', {\n                            operationId: operationId,\n                            errorType: error.constructor.name\n                        });\n                        this._throwSecureError(error, 'authentication_proof_creation');\n                    }\n                } else {\n                    this._secureLog('warn', 'No auth challenge in offer - mutual auth disabled', {\n                        operationId: operationId\n                    });\n                }\n                \n                // ============================================\n                // PHASE 10: INITIALIZE WEBRTC\n                // ============================================\n                \n                this.isInitiator = false;\n                this.onStatusChange('connecting');\n                \n                this.onKeyExchange(this.keyFingerprint);\n                \n                // Create peer connection first\n                this.createPeerConnection();\n                \n                // There is nothing to validate the peer's fingerprint AGAINST on a\n                // first contact: with no signalling server and no prior trust, any\n                // \"expected\" value would have arrived over the same channel as the\n                // offer itself. The code here used to look like a check but could\n                // not be one \u2014 `expectedDTLSFingerprint` doubles as storage for our\n                // OWN fingerprint (see below and :10549), so the comparison ran\n                // remote-against-local, always mismatched, and every failure was\n                // swallowed with a warning. It reported `dtlsFingerprint: true` in\n                // the security status while proving nothing.\n                //\n                // What actually binds this session to a specific peer is the SAS:\n                // _computeSAS mixes the ECDH-derived key fingerprint with BOTH DTLS\n                // fingerprints, so a substituted certificate changes the code the\n                // user reads aloud. Fingerprint comparison is meaningful only later,\n                // during recovery, where a live session provides the baseline \u2014 see\n                // _assertSameRemoteIdentity.\n                if (this.strictDTLSValidation) {\n                    try {\n                        this._peerDTLSFingerprint = this._extractDTLSFingerprintFromSDP(offerData.sdp);\n                    } catch (error) {\n                        this._secureLog('warn', 'Could not extract peer DTLS fingerprint from offer', {\n                            error: error.message,\n                            context: 'offer_validation'\n                        });\n                    }\n                } else {\n                    this._secureLog('info', 'DTLS fingerprint validation disabled - proceeding without validation');\n                }\n\n                // Set remote description from offer\n                try {\n                    this._secureLog('debug', 'Setting remote description from offer', {\n                        operationId: operationId,\n                        sdpLength: offerData.sdp?.length || 0\n                    });\n                    \n                    await this.peerConnection.setRemoteDescription(new RTCSessionDescription({\n                        type: 'offer',\n                        sdp: offerData.s || offerData.sdp\n                    }));\n                    this._logIceCandidateDiagnostics('remote offer applied', this.peerConnection.remoteDescription?.sdp, {\n                        signalingState: this.peerConnection.signalingState\n                    });\n                    this._warnIfRemoteCandidatesNeedRelay('offer', this.peerConnection.remoteDescription?.sdp);\n                    \n                    this._secureLog('debug', 'Remote description set successfully', {\n                        operationId: operationId,\n                        signalingState: this.peerConnection.signalingState\n                    });\n                } catch (error) {\n                    this._secureLog('error', 'Failed to set remote description', { \n                        error: error.message,\n                        operationId: operationId\n                    });\n                    this._throwSecureError(error, 'webrtc_remote_description');\n                }\n                \n                this._secureLog('debug', 'Remote description set successfully', {\n                    operationId: operationId,\n                    connectionState: this.peerConnection.connectionState,\n                    signalingState: this.peerConnection.signalingState\n                });\n                \n                // ============================================\n                // PHASE 11: CREATE SDP ANSWER\n                // ============================================\n                \n                // Create WebRTC answer\n                let answer;\n                \n                try {\n                    answer = await this.peerConnection.createAnswer({\n                        offerToReceiveAudio: false,\n                        offerToReceiveVideo: false\n                    });\n                } catch (error) {\n                    this._throwSecureError(error, 'webrtc_create_answer');\n                }\n                \n                // Set local description\n                try {\n                    await this.peerConnection.setLocalDescription(answer);\n                } catch (error) {\n                    this._throwSecureError(error, 'webrtc_local_description');\n                }\n                \n                //   Extract and store our DTLS fingerprint for out-of-band verification\n                try {\n                    const ourFingerprint = this._extractDTLSFingerprintFromSDP(answer.sdp);\n                    this.expectedDTLSFingerprint = ourFingerprint;\n                    \n                    this._secureLog('info', 'Generated DTLS fingerprint for out-of-band verification', {\n                        fingerprint: ourFingerprint,\n                        context: 'answer_creation'\n                    });\n                    \n                    // Notify UI that fingerprint is ready for out-of-band verification\n                    this.deliverMessageToUI(`DTLS fingerprint ready for verification: ${ourFingerprint}`, 'system');\n                } catch (error) {\n                    this._secureLog('error', 'Failed to extract DTLS fingerprint from answer', { error: error.message });\n                    // Continue without fingerprint validation (fallback mode)\n                }\n\n                // Compute the same SAS locally on the answer side. This keeps the\n                // protocol honest: the peer may announce its SAS later, but it must\n                // match what we independently derived from the session.\n                try {\n                    const remoteFP = this._extractDTLSFingerprintFromSDP(offerData.s || offerData.sdp);\n                    const localFP = this.expectedDTLSFingerprint;\n                    const keyBytes = this._decodeKeyFingerprint(this.keyFingerprint);\n                    this.verificationCode = await this._computeSAS(keyBytes, localFP, remoteFP);\n                    this._setSASMaterialReady(localFP, remoteFP);\n                } catch (sasError) {\n                    this._secureLog('error', 'SAS computation failed in createSecureAnswer (Answer side)', {\n                        errorType: sasError?.constructor?.name || 'Unknown'\n                    });\n                    throw new Error(`SAS computation failed: ${sasError.message}`);\n                }\n                \n                \n                // Await ICE gathering. Manual out-of-band exchange does not use\n                // trickle ICE, so exporting an SDP before completion can strand\n                // late candidates that the remote peer will never receive.\n                const answerIceGatheringStartedAt = Date.now();\n                const answerIceGatheringCompleted = await this.waitForIceGathering();\n                const answerCandidateSummary = this._summarizeIceCandidatesInSDP(this.peerConnection.localDescription?.sdp);\n                const answerCandidateCount = answerCandidateSummary.total;\n                if (!answerIceGatheringCompleted && answerCandidateCount === 0) {\n                    this.deliverMessageToUI(\n                        'No network candidates could be gathered, so the response would not be usable. ' +\n                        'This usually means a VPN or firewall is blocking STUN/TURN. Try turning the VPN off, ' +\n                        'switching network, or adding your own TURN server in Advanced network settings.',\n                        'system'\n                    );\n                    throw new Error('ICE gathering produced no candidates \u2014 check VPN/firewall or configure a TURN server');\n                }\n                this._secureLog(answerCandidateCount > 0 ? 'info' : 'warn', 'ICE candidates captured for answer export', {\n                    candidateSummary: answerCandidateSummary,\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    iceGatheringDurationMs: Date.now() - answerIceGatheringStartedAt,\n                    iceGatheringCompleted: answerIceGatheringCompleted\n                });\n                this._logIceCandidateDiagnostics('answer export', this.peerConnection.localDescription?.sdp, {\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    iceGatheringDurationMs: Date.now() - answerIceGatheringStartedAt,\n                    iceGatheringCompleted: answerIceGatheringCompleted\n                });\n                if (!answerIceGatheringCompleted) {\n                    this.deliverMessageToUI('ICE gathering timed out before completion, but available candidates were included in the response. Connectivity may still fail on restrictive networks.', 'system');\n                }\n                if (answerCandidateCount === 0) {\n                    this.deliverMessageToUI('No ICE candidates were gathered for the response yet. The peer connection may fail unless network candidates become available.', 'system');\n                }\n                \n                this._secureLog('debug', 'ICE gathering completed for answer', {\n                    operationId: operationId,\n                    iceGatheringState: this.peerConnection.iceGatheringState,\n                    connectionState: this.peerConnection.connectionState\n                });\n                \n                // ============================================\n                // PHASE 12: EXPORT OUR KEYS\n                // ============================================\n                \n                // Export our keys with signatures\n                const ecdhPublicKeyData = await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(\n                    this.ecdhKeyPair.publicKey,\n                    this.ecdsaKeyPair.privateKey,\n                    'ECDH'\n                );\n                \n                const ecdsaPublicKeyData = await window.EnhancedSecureCryptoUtils.exportPublicKeyWithSignature(\n                    this.ecdsaKeyPair.publicKey,\n                    this.ecdsaKeyPair.privateKey,\n                    'ECDSA'\n                );\n                \n                if (!ecdhPublicKeyData || typeof ecdhPublicKeyData !== 'object') {\n                    this._secureLog('error', 'CRITICAL: ECDH key export failed - invalid object structure', { operationId });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key export validation failed - hard abort required');\n                }\n                \n                if (!ecdhPublicKeyData.keyData || !ecdhPublicKeyData.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDH key export incomplete - missing keyData or signature', { \n                        operationId,\n                        hasKeyData: !!ecdhPublicKeyData.keyData,\n                        hasSignature: !!ecdhPublicKeyData.signature \n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key export incomplete - hard abort required');\n                }\n                \n                if (!ecdsaPublicKeyData || typeof ecdsaPublicKeyData !== 'object') {\n                    this._secureLog('error', 'CRITICAL: ECDSA key export failed - invalid object structure', { operationId });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key export validation failed - hard abort required');\n                }\n                \n                if (!ecdsaPublicKeyData.keyData || !ecdsaPublicKeyData.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDSA key export incomplete - missing keyData or signature', { \n                        operationId,\n                        hasKeyData: !!ecdsaPublicKeyData.keyData,\n                        hasSignature: !!ecdsaPublicKeyData.signature \n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key export incomplete - hard abort required');\n                }\n                \n                // ============================================\n                // PHASE 13: SECURITY LEVEL CALCULATION\n                // ============================================\n                \n                // All security features are enabled by default\n                const securityLevel = {\n                    level: 'MAXIMUM',\n                    score: 100,\n                    color: 'green',\n                    details: 'All security features enabled by default',\n                    passedChecks: 10,\n                    totalChecks: 10,\n                    isRealData: true\n                };\n                \n                // ============================================\n                // PHASE 14: CREATE ANSWER PACKAGE\n                // ============================================\n                \n                const currentTimestamp = Date.now();\n                \n                // Create compact answer package for smaller QR codes\n                const answerPackage = {\n                    // Core information (minimal)\n                    t: 'answer', // type\n                    s: this.peerConnection.localDescription.sdp, // sdp\n                    v: EnhancedSecureWebRTCManager.PROTOCOL_VERSION, // version\n                    ts: currentTimestamp, // timestamp\n                    \n                    // Cryptographic keys (essential)\n                    e: ecdhPublicKeyData, // ecdhPublicKey\n                    d: ecdsaPublicKeyData, // ecdsaPublicKey\n                    \n                    // Authentication (essential)\n                    ap: authProof, // authProof\n                    \n                    // Security metadata (simplified)\n                    slv: 'MAX', // securityLevel\n\n                    // Double Ratchet support (see the note on the offer package).\n                    dr: EnhancedSecureWebRTCManager.RATCHET_VERSION,\n\n                    // Session confirmation (simplified)\n                    sc: {\n                        sf: saltFingerprint.substring(0, 12), // saltFingerprint (12 chars)\n                        kd: true, // keyDerivationSuccess\n                        ma: true // mutualAuthEnabled\n                    }\n                };\n                \n                // ============================================\n                // PHASE 15: VALIDATION AND LOGGING\n                // ============================================\n                \n                // Final validation of the answer package (support both formats)\n                const hasSDP = answerPackage.s || answerPackage.sdp;\n                const hasECDH = answerPackage.e || answerPackage.ecdhPublicKey;\n                const hasECDSA = answerPackage.d || answerPackage.ecdsaPublicKey;\n                \n                if (!hasSDP || !hasECDH || !hasECDSA) {\n                    throw new Error('Generated answer package is incomplete');\n                }\n                \n                this._secureLog('info', 'Enhanced secure answer created successfully', {\n                    operationId: operationId,\n                    version: answerPackage.version,\n                    hasECDSA: true,\n                    hasMutualAuth: !!authProof,\n                    hasSessionConfirmation: !!answerPackage.sessionConfirmation,\n                    securityLevel: securityLevel.level,\n                    timestamp: currentTimestamp,\n                    processingTime: currentTimestamp - offerData.timestamp\n                });\n                \n                // Dispatch event about new connection\n                this._dispatchAppEvent?.(new CustomEvent('new-connection', {\n                    detail: { \n                        type: 'answer',\n                        timestamp: currentTimestamp,\n                        securityLevel: securityLevel.level,\n                        operationId: operationId\n                    }\n                }));\n                \n                // ============================================\n                // PHASE 16: SCHEDULE SECURITY CALCULATIONS\n                // ============================================\n                \n                // Plan security calculation after connection\n                setTimeout(async () => {\n                    try {\n                        const realSecurityData = await this.calculateAndReportSecurityLevel();\n                        if (realSecurityData) {\n                            this.notifySecurityUpdate();\n                            this._secureLog('info', 'Post-connection security level calculated', {\n                                operationId: operationId,\n                                level: realSecurityData.level\n                            });\n                        }\n                    } catch (error) {\n                        this._secureLog('error', 'Error calculating post-connection security', {\n                            operationId: operationId,\n                            errorType: error.constructor.name\n                        });\n                    }\n                }, 1000);\n                \n                // Retry if the first calculation fails\n                setTimeout(async () => {\n                    if (!this.lastSecurityCalculation || this.lastSecurityCalculation.score < 50) {\n                        this._secureLog('info', 'Retrying security calculation', {\n                            operationId: operationId\n                        });\n                        await this.calculateAndReportSecurityLevel();\n                        this.notifySecurityUpdate();\n                    }\n                }, 3000);\n                \n                // Final security update\n                this.notifySecurityUpdate();\n                \n                // ============================================\n                // PHASE 17: RETURN RESULT\n                // ============================================\n                \n                return answerPackage;\n                \n            } catch (error) {\n                // ============================================\n                // ERROR HANDLING\n                // ============================================\n                \n                this._secureLog('error', 'Enhanced secure answer creation failed in critical section', {\n                    operationId: operationId,\n                    errorType: error.constructor.name,\n                    errorMessage: error.message,\n                    phase: this._determineAnswerErrorPhase(error),\n                    offerAge: offerData?.timestamp ? Date.now() - offerData.timestamp : 'unknown'\n                });\n                \n                // Cleanup state on error\n                this._cleanupFailedAnswerCreation();\n                \n                // Update status\n                this.onStatusChange('disconnected');\n                \n                // Special handling of security errors\n                if (this.onAnswerError) {\n                    if (error.message.includes('too old') || error.message.includes('replay')) {\n                        this.onAnswerError('replay_attack', error.message);\n                    } else if (error.message.includes('MITM') || error.message.includes('signature')) {\n                        this.onAnswerError('security_violation', error.message);\n                    } else if (error.message.includes('validation') || error.message.includes('format')) {\n                        this.onAnswerError('invalid_format', error.message);\n                    } else {\n                        this.onAnswerError('general_error', error.message);\n                    }\n                }\n                \n                // Re-throw for upper-level handling\n                throw error;\n            }\n        }, 60000); // 60 seconds timeout for the entire answer creation (longer than offer)\n    }\n\n    /**\n     * HELPER: Determine error phase for answer\n     */\n    _determineAnswerErrorPhase(error) {\n        const message = error.message.toLowerCase();\n        \n        if (message.includes('validation') || message.includes('format')) return 'offer_validation';\n        if (message.includes('rate limit')) return 'rate_limiting';\n        if (message.includes('replay') || message.includes('too old')) return 'replay_protection';\n        if (message.includes('salt')) return 'salt_validation';\n        if (message.includes('key pair') || message.includes('generate')) return 'key_generation';\n        if (message.includes('import') || message.includes('ecdsa') || message.includes('ecdh')) return 'key_import';\n        if (message.includes('signature') || message.includes('mitm')) return 'signature_verification';\n        if (message.includes('derive') || message.includes('shared')) return 'key_derivation';\n        if (message.includes('auth') || message.includes('proof')) return 'authentication';\n        if (message.includes('remote description') || message.includes('local description')) return 'webrtc_setup';\n        if (message.includes('answer') || message.includes('sdp')) return 'sdp_creation';\n        if (message.includes('export')) return 'key_export';\n        if (message.includes('security level')) return 'security_calculation';\n        \n        return 'unknown';\n    }\n\n    /**\n     * HELPER: Cleanup state after failed answer creation\n     */\n    /**\n     *   Secure cleanup state after failed answer creation\n     */\n    _cleanupFailedAnswerCreation() {\n        try {\n            //   Secure wipe of cryptographic materials\n            this._clearPendingOfferContext();\n            this._secureCleanupCryptographicMaterials();\n            \n            //   Secure wipe of PFS key versions\n            this.currentKeyVersion = 0;\n            this.keyVersions.clear();\n            this.oldKeys.clear();\n            \n            //   Close peer connection if created\n            if (this.peerConnection) {\n                this.peerConnection.close();\n                this.peerConnection = null;\n            }\n            \n            //   Clear data channel\n            if (this.dataChannel) {\n                this.dataChannel.close();\n                this.dataChannel = null;\n            }\n            \n            //   Reset flags and counters\n            this.isInitiator = false;\n            this.isVerified = false;\n            this.sequenceNumber = 0;\n            this.expectedSequenceNumber = 0;\n            this.messageCounter = 0;\n            this.processedMessageIds.clear();\n            this.replayWindow.clear(); //   Clear replay window\n            \n            //   Reset security features to baseline\n            this._updateSecurityFeatures({\n                hasEncryption: false,\n                hasECDH: false,\n                hasECDSA: false,\n                hasMutualAuth: false,\n                hasMetadataProtection: false,\n                hasEnhancedReplayProtection: false,\n                hasNonExtractableKeys: false,\n                hasEnhancedValidation: false,\n                hasPFS: false\n            });\n            \n            //   Schedule natural cleanup\n            this._forceGarbageCollection().catch(error => {\n                this._secureLog('error', 'Cleanup failed during answer cleanup', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n            \n            this._secureLog('debug', 'Failed answer creation cleanup completed with secure memory wipe');\n            \n        } catch (cleanupError) {\n            this._secureLog('error', 'Error during answer creation cleanup', {\n                errorType: cleanupError.constructor.name,\n                errorMessage: cleanupError.message\n            });\n        }\n    }\n\n    /**\n     * HELPER: Securely set encryption keys (if not set yet)\n     */\n    async _setEncryptionKeys(encryptionKey, macKey, metadataKey, keyFingerprint) {\n        return this._withMutex('keyOperation', async (operationId) => {\n            this._secureLog('info', 'Setting encryption keys with mutex', {\n                operationId: operationId\n            });\n            \n            // Validate all keys before setting\n            if (!(encryptionKey instanceof CryptoKey) ||\n                !(macKey instanceof CryptoKey) ||\n                !(metadataKey instanceof CryptoKey)) {\n                throw new Error('Invalid key types provided');\n            }\n            \n            if (!keyFingerprint || typeof keyFingerprint !== 'string') {\n                throw new Error('Invalid key fingerprint provided');\n            }\n            \n            // Atomically set all keys\n            const oldKeys = {\n                encryptionKey: this.encryptionKey,\n                macKey: this.macKey,\n                metadataKey: this.metadataKey,\n                keyFingerprint: this.keyFingerprint\n            };\n            \n            try {\n                this.encryptionKey = encryptionKey;\n                this.macKey = macKey;\n                this.metadataKey = metadataKey;\n                this.keyFingerprint = keyFingerprint;\n                \n                            // Reset counters\n            this.sequenceNumber = 0;\n            this.expectedSequenceNumber = 0;\n            this.messageCounter = 0;\n            this.processedMessageIds.clear();\n            this.replayWindow.clear(); //   Clear replay window\n                \n                this._secureLog('info', 'Encryption keys set successfully', {\n                    operationId: operationId,\n                    hasAllKeys: !!(this.encryptionKey && this.macKey && this.metadataKey),\n                    hasFingerprint: !!this.keyFingerprint\n                });\n                \n                return true;\n                \n            } catch (error) {\n                // Roll back on error\n                this.encryptionKey = oldKeys.encryptionKey;\n                this.macKey = oldKeys.macKey;\n                this.metadataKey = oldKeys.metadataKey;\n                this.keyFingerprint = oldKeys.keyFingerprint;\n                \n                this._secureLog('error', 'Key setting failed, rolled back', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                \n                throw error;\n            }\n        });\n    }\n\n    /**\n     * SBQ2 answer handling on the offerer side.\n     *\n     * Sets the remote description and nothing else. No key is imported and no\n     * secret derived here, because none has been sent yet \u2014 that happens in\n     * _runSbq2KeyExchange once the channel is open and the commitment has been\n     * checked.\n     */\n    async _handleSbq2Answer(answerData) {\n        if (!this._isSbq2()) {\n            // We advertised SB1 and got SBQ2 back. Refuse rather than switch:\n            // an established session's format is latched, and this is precisely\n            // the shape a downgrade/upgrade confusion attack would take.\n            throw new Error('Received a new-format response to an old-format invitation. Please start a new invitation.');\n        }\n        const st = this._sbq2State();\n        const answerBytes = sbq2DecodeText(String(answerData.sbq2));\n        const desc = sbq2Decode(answerBytes);\n        if (desc.type !== SBQ2_TYPE.ANSWER) throw new Error('That code is an invitation, not a response to one.');\n        if (!desc.commitment) throw new Error('The response carries no key commitment');\n\n        // One-shot binding: this must be the answer to the invitation we are\n        // currently showing, not to any other one.\n        const digest = async (b) => new Uint8Array(await crypto.subtle.digest('SHA-256', b));\n        const expected = await sbq2BindingTag(digest, st.localDescriptor);\n        let diff = 0;\n        for (let i = 0; i < expected.length; i++) diff |= expected[i] ^ desc.bindingTag[i];\n        if (diff !== 0) {\n            throw new Error('This response belongs to a different invitation. Ask for a response to the code you are showing now.');\n        }\n\n        st.remoteDescriptor = answerBytes;\n        st.remoteCommitment = desc.commitment;\n        this._peerDTLSFingerprint = Array.from(desc.fingerprint,\n            (b) => b.toString(16).padStart(2, '0').toUpperCase()).join(':');\n\n        const { sdp } = sbq2SerializeSdp(desc);\n        await this.peerConnection.setRemoteDescription({ type: 'answer', sdp });\n\n        this._secureLog('info', 'SBQ2 answer accepted; awaiting in-band key exchange', {\n            bytes: answerBytes.length\n        });\n    }\n\n    async handleSecureAnswer(answerData) {\n        if (answerData && typeof answerData.sbq2 === 'string') {\n            return this._handleSbq2Answer(answerData);\n        }\n        try {\n\n            if (!answerData || typeof answerData !== 'object' || Array.isArray(answerData)) {\n                this._secureLog('error', 'CRITICAL: Invalid answer data structure', { \n                    hasAnswerData: !!answerData,\n                    answerDataType: typeof answerData,\n                    isArray: Array.isArray(answerData)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Answer data must be a non-null object');\n            }\n            \n            // Support both compact and legacy answer formats\n            const isCompactAnswer = answerData.t === 'answer' && answerData.s;\n            const isLegacyAnswer = answerData.type === 'enhanced_secure_answer' && answerData.sdp;\n            \n            if (!isCompactAnswer && !isLegacyAnswer) {\n                this._secureLog('error', 'CRITICAL: Invalid answer format', { \n                    type: answerData.type || answerData.t,\n                    hasSdp: !!(answerData.sdp || answerData.s)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Invalid answer format - hard abort required');\n            }\n\n            const answerVersion = answerData.v || answerData.version;\n            if (answerVersion !== EnhancedSecureWebRTCManager.PROTOCOL_VERSION) {\n                throw new Error(`Version mismatch: expected protocol ${EnhancedSecureWebRTCManager.PROTOCOL_VERSION}, received ${answerVersion || 'unknown'}`);\n            }\n\n            // CRITICAL: Strict validation of ECDH public key structure\n            // Support both full and compact key names\n            const ecdhKey = answerData.ecdhPublicKey || answerData.e;\n            const ecdsaKey = answerData.ecdsaPublicKey || answerData.d;\n            \n            if (!ecdhKey || typeof ecdhKey !== 'object' || Array.isArray(ecdhKey)) {\n                this._secureLog('error', 'CRITICAL: Invalid ECDH public key structure in answer', { \n                    hasEcdhKey: !!ecdhKey,\n                    ecdhKeyType: typeof ecdhKey,\n                    isArray: Array.isArray(ecdhKey),\n                    availableKeys: Object.keys(answerData)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Missing or invalid ECDH public key structure');\n            }\n            \n            if (!ecdhKey.keyData || !ecdhKey.signature) {\n                this._secureLog('error', 'CRITICAL: ECDH key missing keyData or signature in answer', { \n                    hasKeyData: !!ecdhKey.keyData,\n                    hasSignature: !!ecdhKey.signature\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: ECDH key missing keyData or signature');\n            }\n\n            // CRITICAL: Strict validation of ECDSA public key structure\n            if (!ecdsaKey || typeof ecdsaKey !== 'object' || Array.isArray(ecdsaKey)) {\n                this._secureLog('error', 'CRITICAL: Invalid ECDSA public key structure in answer', { \n                    hasEcdsaKey: !!ecdsaKey,\n                    ecdsaKeyType: typeof ecdsaKey,\n                    isArray: Array.isArray(ecdsaKey)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Missing or invalid ECDSA public key structure');\n            }\n            \n            if (!ecdsaKey.keyData || !ecdsaKey.signature) {\n                this._secureLog('error', 'CRITICAL: ECDSA key missing keyData or signature in answer', { \n                    hasKeyData: !!ecdsaKey.keyData,\n                    hasSignature: !!ecdsaKey.signature\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: ECDSA key missing keyData or signature');\n            }\n\n            // Additional MITM protection: Validate answer data structure\n            // Support both compact and legacy formats\n            const timestamp = answerData.ts || answerData.timestamp;\n            const version = answerData.v || answerData.version;\n            \n            if (!timestamp || !version) {\n                throw new Error('Missing required fields in response data \u2013 possible MITM attack');\n            }\n\n            // MITM Protection: Verify session ID if present (for enhanced security)\n            if (answerData.sessionId && this.sessionId && answerData.sessionId !== this.sessionId) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Session ID mismatch detected - possible MITM attack', {});\n                throw new Error('Session ID mismatch \u2013 possible MITM attack');\n            }\n\n            // Check for replay attacks (reject answers older than 1 hour)\n            const answerAge = Date.now() - answerData.timestamp;\n            if (answerAge > 3600000) { // 1 hour in milliseconds\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Answer data is too old - possible replay attack', {\n                    answerAge: answerAge,\n                    timestamp: answerData.timestamp\n                });\n                \n                // Notify the main code about the replay attack error\n                if (this.onAnswerError) {\n                    this.onAnswerError('replay_attack', 'Response data is too old \u2013 possible replay attack');\n                }\n                \n                throw new Error('Response data is too old \u2013 possible replay attack');\n            }\n\n            // Check protocol version compatibility using the normalized field so\n            // compact and legacy answer payloads are handled consistently.\n            if (answerVersion !== EnhancedSecureWebRTCManager.PROTOCOL_VERSION) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('warn', 'Incompatible protocol version in answer', {\n                    expectedVersion: EnhancedSecureWebRTCManager.PROTOCOL_VERSION,\n                    receivedVersion: answerVersion\n                });\n            }\n\n            // Import ECDSA public key for verification (self-signed)\n            const peerECDSAPublicKey = await crypto.subtle.importKey(\n                'spki',\n                new Uint8Array(ecdsaKey.keyData),\n                {\n                    name: 'ECDSA',\n                    namedCurve: 'P-384'\n                },\n                false,\n                ['verify']\n            );\n\n\n            // Now import and verify the ECDH public key using the verified ECDSA key\n            const peerPublicKey = await window.EnhancedSecureCryptoUtils.importPublicKeyFromSignedPackage(\n                ecdhKey,\n                peerECDSAPublicKey\n            );\n            \n            // Additional MITM protection: Verify session salt integrity\n            this._restorePendingOfferContextIfNeeded();\n            if (!this.sessionSalt || this.sessionSalt.length !== 64) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Invalid session salt detected - possible session hijacking', {\n                    saltLength: this.sessionSalt ? this.sessionSalt.length : 0\n                });\n                throw new Error('Missing pending offer context. Apply the response in the original creator window that generated the invitation.');\n            }\n\n            // Verify that the session salt hasn't been tampered with\n            const expectedSaltHash = await window.EnhancedSecureCryptoUtils.calculateKeyFingerprint(this.sessionSalt);\n            window.EnhancedSecureCryptoUtils.secureLog.log('info', 'Session salt integrity verified', {\n                saltFingerprint: expectedSaltHash.substring(0, 8)\n            });\n\n            // Additional validation: Ensure all keys are CryptoKey instances before derivation\n            if (!(this.ecdhKeyPair?.privateKey instanceof CryptoKey)) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Local ECDH private key is not a CryptoKey in handleSecureAnswer', {\n                    hasKeyPair: !!this.ecdhKeyPair,\n                    privateKeyType: typeof this.ecdhKeyPair?.privateKey,\n                    privateKeyAlgorithm: this.ecdhKeyPair?.privateKey?.algorithm?.name\n                });\n                throw new Error('Local ECDH private key is not a CryptoKey');\n            }\n            \n            if (!(peerPublicKey instanceof CryptoKey)) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Peer ECDH public key is not a CryptoKey in handleSecureAnswer', {\n                    publicKeyType: typeof peerPublicKey,\n                    publicKeyAlgorithm: peerPublicKey?.algorithm?.name\n                });\n                throw new Error('Peer ECDH public key is not a CryptoKey');\n            }\n\n            // Store peer's public key for PFS key rotation\n            this.peerPublicKey = peerPublicKey;\n\n            // Does the responder speak our ratchet version? (see the offer side)\n            this._peerSupportsRatchet =\n                answerData.dr === EnhancedSecureWebRTCManager.RATCHET_VERSION;\n\n            // Initialize connection ID if not already set\n            if (!this.connectionId) {\n                this.connectionId = Array.from(crypto.getRandomValues(new Uint8Array(8)))\n                    .map(b => b.toString(16).padStart(2, '0')).join('');\n            }\n\n            \n            const derivedKeys = await window.EnhancedSecureCryptoUtils.deriveSharedKeys(\n                this.ecdhKeyPair.privateKey,\n                peerPublicKey,\n                this.sessionSalt\n            );\n            \n            this.encryptionKey = derivedKeys.messageKey;\n            this.macKey = derivedKeys.macKey;\n            this.metadataKey = derivedKeys.metadataKey;\n            this.keyFingerprint = derivedKeys.fingerprint;\n\n            // Initiator: adopts a fresh ratchet key immediately, so even the very\n            // first message it sends has already left the handshake key behind.\n            await this._initializeRatchet(derivedKeys, /* isInitiator */ true);\n\n            this.sequenceNumber = 0;\n            this.expectedSequenceNumber = 0;\n            this.messageCounter = 0;\n            this.processedMessageIds.clear();\n            this.replayWindow.clear(); //   Clear replay window\n            // Validate that all keys are properly set\n            if (!(this.encryptionKey instanceof CryptoKey) || \n                !(this.macKey instanceof CryptoKey) || \n                !(this.metadataKey instanceof CryptoKey)) {\n                window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Invalid key types after derivation in handleSecureAnswer', {\n                    encryptionKeyType: typeof this.encryptionKey,\n                    macKeyType: typeof this.macKey,\n                    metadataKeyType: typeof this.metadataKey,\n                    encryptionKeyAlgorithm: this.encryptionKey?.algorithm?.name,\n                    macKeyAlgorithm: this.macKey?.algorithm?.name,\n                    metadataKeyAlgorithm: this.metadataKey?.algorithm?.name\n                });\n                throw new Error('Invalid key types after export');\n            }\n            \n            this._secureLog('info', 'Encryption keys set in handleSecureAnswer', {\n                hasEncryptionKey: !!this.encryptionKey,\n                hasMacKey: !!this.macKey,\n                hasMetadataKey: !!this.metadataKey,\n                hasKeyFingerprint: !!this.keyFingerprint,\n                mitmProtection: 'enabled',\n                signatureVerified: true\n            });\n            \n            // Update security features for initiator after successful key exchange\n            this.securityFeatures.hasMutualAuth = true;\n            this.securityFeatures.hasMetadataProtection = true;\n            this.securityFeatures.hasEnhancedReplayProtection = true;\n            this.securityFeatures.hasPFS = true;\n            \n            // PFS: Initialize key version tracking\n            this.currentKeyVersion = 0;\n            this.lastKeyRotation = Date.now();\n            this.keyVersions.set(0, {\n                salt: this.sessionSalt,\n                timestamp: this.lastKeyRotation,\n                messageCount: 0\n            });\n            \n            this.onKeyExchange(this.keyFingerprint);\n\n            //   Compute SAS for MITM protection (Offer side - Answer handler)\n            try {\n                const remoteFP = this._extractDTLSFingerprintFromSDP(answerData.sdp || answerData.s); \n                const localFP = this.expectedDTLSFingerprint; \n                const keyBytes = this._decodeKeyFingerprint(this.keyFingerprint); \n\n                this.verificationCode = await this._computeSAS(keyBytes, localFP, remoteFP);\n                this._setSASMaterialReady(localFP, remoteFP);\n                \n                // CRITICAL: Store SAS code to send when data channel opens\n                this.pendingSASCode = this.verificationCode;\n                \n                this._secureLog('info', 'SAS verification code generated for MITM protection (Offer side)', {\n                    sasCode: this.verificationCode,\n                    localFP: localFP.substring(0, 16) + '...',\n                    remoteFP: remoteFP.substring(0, 16) + '...',\n                    timestamp: Date.now()\n                });\n            } catch (sasError) {\n                this._secureLog('error', 'SAS computation failed in handleSecureAnswer (Offer side)', {\n                    errorType: sasError?.constructor?.name || 'Unknown'\n                });\n                this._secureLog('error', 'SAS computation failed in handleSecureAnswer (Offer side)', {\n                    error: sasError.message,\n                    stack: sasError.stack,\n                    timestamp: Date.now()\n                });\n            }\n\n            // Same as on the offer side: on first contact there is no trusted\n            // baseline to compare the peer's fingerprint against, and the previous\n            // comparison ran the remote fingerprint against our own. Record the\n            // peer's value (it feeds the SAS, which is the real binding) and let\n            // the user's out-of-band code comparison do the authenticating.\n            if (this.strictDTLSValidation) {\n                try {\n                    this._peerDTLSFingerprint = this._extractDTLSFingerprintFromSDP(answerData.sdp || answerData.s);\n                } catch (error) {\n                    this._secureLog('warn', 'Could not extract peer DTLS fingerprint from answer', {\n                        error: error.message,\n                        context: 'answer_validation'\n                    });\n                }\n            } else {\n                this._secureLog('info', 'DTLS fingerprint validation disabled - proceeding without validation');\n            }\n\n            // Support both full and compact SDP field names\n            const sdpData = answerData.sdp || answerData.s;\n\n            if (this.peerConnection?.signalingState !== 'have-local-offer') {\n                this._secureLog('warn', 'Ignoring answer outside have-local-offer state', {\n                    signalingState: this.peerConnection?.signalingState || 'unknown'\n                });\n                return;\n            }\n            \n            this._secureLog('debug', 'Setting remote description from answer', {\n                sdpLength: sdpData?.length || 0,\n                usingCompactSDP: !answerData.sdp && !!answerData.s\n            });\n            \n            await this.peerConnection.setRemoteDescription({\n                type: 'answer',\n                sdp: sdpData\n            });\n            this._logIceCandidateDiagnostics('remote answer applied', this.peerConnection.remoteDescription?.sdp, {\n                signalingState: this.peerConnection.signalingState\n            });\n            this._warnIfRemoteCandidatesNeedRelay('answer', this.peerConnection.remoteDescription?.sdp);\n            \n            this._secureLog('debug', 'Remote description set successfully from answer', {\n                signalingState: this.peerConnection.signalingState\n            });\n\n            setTimeout(async () => {\n                try {\n                    const securityData = await this.calculateAndReportSecurityLevel();\n                    if (securityData) {\n                        this.notifySecurityUpdate();\n                    }\n                } catch (error) {\n                    this._secureLog('error', 'Error calculating security after connection:', { errorType: error?.constructor?.name || 'Unknown' });\n                }\n            }, 1000);\n            setTimeout(async () => {\n                if (!this.lastSecurityCalculation || this.lastSecurityCalculation.score < 50) {\n                    await this.calculateAndReportSecurityLevel();\n                    this.notifySecurityUpdate();\n                }\n            }, 3000);\n            this.notifySecurityUpdate();\n        } catch (error) {\n            this._secureLog('error', 'Enhanced secure answer handling failed', {\n                errorType: error.constructor.name\n            });\n            this.onStatusChange('failed');\n\n            if (this.onAnswerError) {\n                if (error.message.includes('too old') || error.message.includes('\u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0441\u0442\u0430\u0440\u044B\u0435')) {\n                    this.onAnswerError('replay_attack', error.message);\n                } else if (error.message.includes('MITM') || error.message.includes('signature') || error.message.includes('\u043F\u043E\u0434\u043F\u0438\u0441\u044C')) {\n                    this.onAnswerError('security_violation', error.message);\n                } else {\n                    this.onAnswerError('general_error', error.message);\n                }\n            }\n            \n            throw error;\n        }\n    }\n\n\n    initiateVerification() {\n        \n        if (this.isInitiator) {\n            // Ensure verification initiation notice wasn't already sent\n            if (!this.verificationInitiationSent) {\n                this.verificationInitiationSent = true;\n                this.deliverMessageToUI('CRITICAL: Compare verification code with peer out-of-band (voice/video/in-person) to prevent MITM attack!', 'system');\n                this.deliverMessageToUI(`Your verification code: ${this.verificationCode}`, 'system');\n                this.deliverMessageToUI('Ask peer to confirm this exact code before allowing traffic!', 'system');\n            }\n        } else {\n\n            this.deliverMessageToUI('Waiting for verification code from peer...', 'system');\n        }\n    }\n\n    /**\n     * Normalizes and validates the user-entered SAS code.\n     * Users may enter the same shared SAS with spaces or hyphens.\n     * @param {string} input\n     * @returns {boolean}\n     */\n    _validateSASCode(input) {\n        if (!input || typeof input !== 'string' || !this.verificationCode || typeof this.verificationCode !== 'string') {\n            return false;\n        }\n\n        const normalizedInput = input.replace(/[-\\s]/g, '').toUpperCase();\n        const normalizedActual = this.verificationCode.replace(/[-\\s]/g, '').toUpperCase();\n\n        if (normalizedInput.length !== normalizedActual.length) {\n            return false;\n        }\n\n        return window.EnhancedSecureCryptoUtils.constantTimeCompare(normalizedInput, normalizedActual);\n    }\n\n    confirmVerification(userCode) {\n        \n        try {\n            if (!this._validateSASCode(userCode)) {\n                this.sasValidationAttempts = (this.sasValidationAttempts || 0) + 1;\n                this._secureLog('warn', 'SAS validation failed: user entered incorrect code', {\n                    attempts: this.sasValidationAttempts,\n                    maxAttempts: EnhancedSecureWebRTCManager.MAX_SAS_ATTEMPTS\n                });\n\n                if (this.sasValidationAttempts >= EnhancedSecureWebRTCManager.MAX_SAS_ATTEMPTS) {\n                    this.deliverMessageToUI('Verification failed 3 times. Session reset for safety.', 'system');\n                    this.disconnect();\n                    throw new Error('SAS_MAX_ATTEMPTS');\n                }\n\n                throw new Error('SAS_MISMATCH');\n            }\n            \n            // Mark local verification as confirmed\n            this.localVerificationConfirmed = true;\n            this.sasValidationAttempts = 0;\n            \n            // Send confirmation to peer\n            const confirmationPayload = {\n                type: 'verification_confirmed',\n                data: {\n                    timestamp: Date.now(),\n                    verificationMethod: 'MANUAL_SAS_ENTRY',\n                    securityLevel: 'MITM_PROTECTION_REQUIRED'\n                }\n            };\n\n            this.dataChannel.send(JSON.stringify(confirmationPayload));\n            \n            // Notify UI about state change\n            if (this.onVerificationStateChange) {\n                this.onVerificationStateChange({\n                    localConfirmed: this.localVerificationConfirmed,\n                    remoteConfirmed: this.remoteVerificationConfirmed,\n                    bothConfirmed: this.bothVerificationsConfirmed\n                });\n            }\n            \n            // Check if both parties have confirmed\n            this._checkBothVerificationsConfirmed();\n            \n            // Notify UI about local confirmation\n            this.deliverMessageToUI('Code verified locally. Waiting for peer confirmation...', 'system');\n            \n            this.processMessageQueue();\n        } catch (error) {\n            if (error.message === 'SAS_MISMATCH') {\n                this.deliverMessageToUI('Verification failed: the code you entered is incorrect.', 'system');\n            } else if (error.message !== 'SAS_MAX_ATTEMPTS') {\n                this._secureLog('error', 'SAS verification failed:', { errorType: error?.constructor?.name || 'Unknown' });\n                this.deliverMessageToUI('SAS verification failed', 'system');\n            }\n            throw error;\n        }\n    }\n\n    _checkBothVerificationsConfirmed() {\n        // Check if both parties have confirmed verification\n        if (this.localVerificationConfirmed && this.remoteVerificationConfirmed && !this.bothVerificationsConfirmed) {\n            this.bothVerificationsConfirmed = true;\n            \n            // Notify both parties that verification is complete\n            const bothConfirmedPayload = {\n                type: 'verification_both_confirmed',\n                data: {\n                    timestamp: Date.now(),\n                    verificationMethod: 'SAS',\n                    securityLevel: 'MITM_PROTECTION_COMPLETE'\n                }\n            };\n\n            this.dataChannel.send(JSON.stringify(bothConfirmedPayload));\n            \n            // Notify UI about state change\n            if (this.onVerificationStateChange) {\n                this.onVerificationStateChange({\n                    localConfirmed: this.localVerificationConfirmed,\n                    remoteConfirmed: this.remoteVerificationConfirmed,\n                    bothConfirmed: this.bothVerificationsConfirmed\n                });\n            }\n            \n            // Set verified status and open chat after 2 second delay\n            this.deliverMessageToUI('Both parties confirmed! Opening secure chat in 2 seconds...', 'system');\n            \n            setTimeout(() => {\n                try {\n                    this._setVerifiedStatus(true, 'MUTUAL_SAS_CONFIRMED', {\n                        code: this.verificationCode,\n                        timestamp: Date.now()\n                    });\n                    this._enforceVerificationGate('mutual_confirmed', false);\n                    this.onStatusChange?.('verified');\n                } catch (error) {\n                    // The verified transition is guarded (see _setVerifiedStatus).\n                    // If it refuses, the session is not trustworthy \u2014 tear it down\n                    // instead of leaving the UI in a half-verified state.\n                    this._secureLog('error', 'Verified transition rejected - aborting session', {\n                        errorType: error?.constructor?.name || 'Unknown'\n                    });\n                    this.deliverMessageToUI('Verification could not be completed safely. Connection aborted.', 'system');\n                    this.disconnect();\n                }\n            }, 2000);\n        }\n    }\n\n    handleVerificationConfirmed(data) {\n        this.remoteVerificationConfirmed = true;\n        \n        // Notify UI about peer confirmation\n        this.deliverMessageToUI('Peer confirmed the verification code. Waiting for your confirmation...', 'system');\n        \n        // Notify UI about state change\n        if (this.onVerificationStateChange) {\n            this.onVerificationStateChange({\n                localConfirmed: this.localVerificationConfirmed,\n                remoteConfirmed: this.remoteVerificationConfirmed,\n                bothConfirmed: this.bothVerificationsConfirmed\n            });\n        }\n        \n        // Check if both parties have confirmed\n        this._checkBothVerificationsConfirmed();\n    }\n\n    handleVerificationBothConfirmed(data) {\n        // Both parties can reach the \"both confirmed\" state independently: this\n        // party may have already detected it locally (_checkBothVerificationsConfirmed)\n        // and now also receives the peer's notification. Without this guard the\n        // \"Both parties confirmed\" message and the verified transition fire twice.\n        if (this.bothVerificationsConfirmed) {\n            return;\n        }\n\n        // SECURITY: this frame is unauthenticated peer input on an as-yet\n        // unverified channel. It may only ACKNOWLEDGE a mutual confirmation, never\n        // create one. Without this check a MITM who completed the signalling\n        // exchange could send a single `verification_both_confirmed` right after\n        // the data channel opens and drive us to isVerified=true while the user\n        // never compared the SAS out-of-band \u2014 defeating the entire MITM defence.\n        if (!this.localVerificationConfirmed) {\n            this._secureLog('error', 'Peer claimed mutual SAS confirmation before local confirmation - possible MITM attack', {\n                localConfirmed: this.localVerificationConfirmed,\n                remoteConfirmed: this.remoteVerificationConfirmed,\n                timestamp: Date.now()\n            });\n            this.deliverMessageToUI('Verification protocol violation: peer claimed confirmation before you verified the code. Connection aborted for safety.', 'system');\n            this.disconnect();\n            return;\n        }\n\n        // The peer can only reach \"both confirmed\" after confirming on its side,\n        // so record that too \u2014 otherwise the state reported to the UI is\n        // inconsistent with the transition we are about to make.\n        this.remoteVerificationConfirmed = true;\n\n        // Handle notification that both parties have confirmed\n        this.bothVerificationsConfirmed = true;\n        \n        // Notify UI about state change\n        if (this.onVerificationStateChange) {\n            this.onVerificationStateChange({\n                localConfirmed: this.localVerificationConfirmed,\n                remoteConfirmed: this.remoteVerificationConfirmed,\n                bothConfirmed: this.bothVerificationsConfirmed\n            });\n        }\n        \n        // Set verified status and open chat after 2 second delay\n        this.deliverMessageToUI('Both parties confirmed! Opening secure chat in 2 seconds...', 'system');\n        \n        setTimeout(() => {\n            this._setVerifiedStatus(true, 'MUTUAL_SAS_CONFIRMED', { \n                code: this.verificationCode,\n                timestamp: Date.now()\n            });\n            this._enforceVerificationGate('mutual_confirmed', false);\n            this.onStatusChange?.('verified');\n        }, 2000);\n    }\n\n    handleVerificationRequest(data) {\n\n        \n        // Constant-time comparison, consistent with confirmVerification().\n        if (this._validateSASCode(data?.code)) {\n            const responsePayload = {\n                type: 'verification_response',\n                data: {\n                    ok: true,\n                    timestamp: Date.now(),\n                    verificationMethod: 'SAS', // Indicate SAS was used\n                    securityLevel: 'MITM_PROTECTED'\n                }\n            };\n            this.dataChannel.send(JSON.stringify(responsePayload));\n            \n            // Ensure verification success notice wasn't already sent\n            if (!this.verificationNotificationSent) {\n                this.verificationNotificationSent = true;\n                this.deliverMessageToUI('SAS verification successful! MITM protection confirmed. Channel is now secure!', 'system');\n            }\n            \n            this.processMessageQueue();\n        } else {\n            //  SAS verification failed - possible MITM attack\n            const responsePayload = {\n                type: 'verification_response',\n                data: {\n                    ok: false,\n                    timestamp: Date.now(),\n                    reason: 'code_mismatch'\n                }\n            };\n            this.dataChannel.send(JSON.stringify(responsePayload));\n            \n            this._secureLog('error', 'SAS verification failed - possible MITM attack', {\n                // Never log the codes themselves \u2014 the SAS is the one secret the\n                // user is asked to compare out-of-band.\n                receivedCodeLength: typeof data?.code === 'string' ? data.code.length : 0,\n                timestamp: Date.now()\n            });\n            \n            this.deliverMessageToUI('SAS verification failed! Possible MITM attack detected. Connection aborted for safety!', 'system');\n            this.disconnect();\n        }\n    }\n\n    handleSASCode(data) {\n        if (!data?.code || typeof data.code !== 'string') {\n            this._secureLog('warn', 'Invalid SAS announcement received from peer');\n            return;\n        }\n\n        // SECURITY: the peer's announcement may only CORROBORATE the SAS we\n        // derived ourselves from the shared ECDH secret and both DTLS\n        // fingerprints \u2014 never supply it. Adopting a peer-provided code would\n        // mean showing the user a number chosen by whoever is on the other end,\n        // so an attacker could simply announce the same value to both sides and\n        // the out-of-band comparison would always \"succeed\".\n        if (!this.verificationCode) {\n            this._secureLog('error', 'Received peer SAS announcement before local SAS was derived - refusing to adopt it', {\n                timestamp: Date.now()\n            });\n            this.deliverMessageToUI('Verification failed: no locally derived code to compare against. Connection aborted for safety.', 'system');\n            this.disconnect();\n            return;\n        }\n\n        if (!this._validateSASCode(data.code)) {\n            this._secureLog('error', 'Peer-announced SAS does not match locally computed SAS');\n            this.deliverMessageToUI('Version or SAS mismatch detected. Connection aborted for safety.', 'system');\n            this.disconnect();\n            return;\n        }\n\n        // Codes agree \u2014 keep our own locally derived value and continue.\n        this._notifyVerificationReadyIfPossible();\n\n        this._secureLog('info', 'Peer SAS announcement matched locally derived code', {\n            timestamp: Date.now()\n        });\n    }\n\n    handleVerificationResponse(data) {\n        \n        if (data.ok === true) {\n            \n            // Log successful mutual SAS verification\n            this._secureLog('info', 'Mutual SAS verification completed - MITM protection active', {\n                verificationMethod: data.verificationMethod || 'SAS',\n                securityLevel: data.securityLevel || 'MITM_PROTECTED',\n                timestamp: Date.now()\n            });\n            \n            // Ensure verification success notice wasn't already sent\n            if (!this.verificationNotificationSent) {\n                this.verificationNotificationSent = true;\n                this.deliverMessageToUI(' Mutual SAS verification complete! MITM protection active. Channel is now secure!', 'system');\n            }\n            \n            this.processMessageQueue();\n        } else {\n            //  Peer verification failed - connection not secure\n            this._secureLog('error', 'Peer SAS verification failed - connection not secure', {\n                responseData: data,\n                timestamp: Date.now()\n            });\n            \n            this.deliverMessageToUI('Peer verification failed! Connection not secure!', 'system');\n            this.disconnect();\n        }\n    }\n\n    validateOfferData(offerData) {\n        return offerData &&\n               offerData.type === 'enhanced_secure_offer' &&\n               offerData.sdp &&\n               offerData.publicKey &&\n               offerData.salt &&\n               offerData.verificationCode &&\n               Array.isArray(offerData.publicKey) &&\n               Array.isArray(offerData.salt) &&\n               offerData.salt.length === 32;\n    }\n\n    validateEnhancedOfferData(offerData) {\n        try {\n            // CRITICAL: Strict type checking to prevent syntax errors\n            if (!offerData || typeof offerData !== 'object' || Array.isArray(offerData)) {\n                this._secureLog('error', 'CRITICAL: Invalid offer data structure', { \n                    hasOfferData: !!offerData,\n                    offerDataType: typeof offerData,\n                    isArray: Array.isArray(offerData)\n                });\n                throw new Error('CRITICAL SECURITY FAILURE: Offer data must be a non-null object');\n            }\n\n            // Basic required fields will be validated after format detection\n\n            // Check if this is v4.0 compact format or legacy format\n            const isV4CompactFormat = offerData.v === EnhancedSecureWebRTCManager.PROTOCOL_VERSION && offerData.e && offerData.d;\n            const isV4Format = offerData.version === EnhancedSecureWebRTCManager.PROTOCOL_VERSION && offerData.ecdhPublicKey && offerData.ecdsaPublicKey;\n            \n            // Validate offer type (support compact, legacy v3.0 and v4.0 formats)\n            const isValidType = isV4CompactFormat ? \n                ['offer'].includes(offerData.t) :\n                ['enhanced_secure_offer', 'secure_offer'].includes(offerData.type);\n                \n            if (!isValidType) {\n                throw new Error('Invalid offer type');\n            }\n            \n            if (isV4CompactFormat) {\n                // v4.1 compact format validation\n                const compactRequiredFields = [\n                    'e', 'd', 'sl', 'vc', 'si', 'ci', 'ac', 'slv'\n                ];\n                \n                for (const field of compactRequiredFields) {\n                if (!offerData[field]) {\n                        throw new Error(`Missing required v4.1 compact field: ${field}`);\n                    }\n                }\n                \n                // Validate key structures\n                if (!offerData.e || typeof offerData.e !== 'object' || Array.isArray(offerData.e)) {\n                    throw new Error('CRITICAL SECURITY FAILURE: Invalid ECDH public key structure');\n                }\n                \n                if (!offerData.d || typeof offerData.d !== 'object' || Array.isArray(offerData.d)) {\n                    throw new Error('CRITICAL SECURITY FAILURE: Invalid ECDSA public key structure');\n                }\n                \n                // Validate salt length\n                if (!Array.isArray(offerData.sl) || offerData.sl.length !== 64) {\n                    throw new Error('Salt must be exactly 64 bytes for v4.1');\n                }\n                \n                // Validate verification code format\n                if (typeof offerData.vc !== 'string' || offerData.vc.length < 6) {\n                    throw new Error('Invalid verification code format');\n                }\n                \n                // Validate security level\n                if (!['MAX', 'HIGH', 'MED', 'LOW'].includes(offerData.slv)) {\n                    throw new Error('Invalid security level');\n                }\n                \n                // Validate timestamp (not older than 1 hour)\n                const offerAge = Date.now() - offerData.ts;\n                if (offerAge > 3600000) {\n                    throw new Error('Offer is too old (older than 1 hour)');\n                }\n                \n                this._secureLog('info', 'v4.1 compact offer validation passed', {\n                    version: offerData.v,\n                    hasECDH: !!offerData.e,\n                    hasECDSA: !!offerData.d,\n                    hasSalt: !!offerData.sl,\n                    hasVerificationCode: !!offerData.vc,\n                    securityLevel: offerData.slv,\n                    offerAge: Math.round(offerAge / 1000) + 's'\n                });\n            } else if (isV4Format) {\n                // v4.1 enhanced validation\n                const v4RequiredFields = [\n                    'ecdhPublicKey', 'ecdsaPublicKey', 'salt', 'verificationCode',\n                    'authChallenge', 'timestamp', 'version', 'securityLevel'\n                ];\n\n                for (const field of v4RequiredFields) {\n                    if (!offerData[field]) {\n                        throw new Error(`Missing v4.1 field: ${field}`);\n                    }\n                }\n\n                // Validate salt (must be 64 bytes for v4.0)\n                if (!Array.isArray(offerData.salt) || offerData.salt.length !== 64) {\n                    throw new Error('Salt must be exactly 64 bytes for v4.1');\n                }\n\n                // Validate timestamp (not older than 1 hour)\n                const offerAge = Date.now() - offerData.timestamp;\n                if (offerAge > 3600000) {\n                    throw new Error('Offer is too old (older than 1 hour)');\n                }\n\n                // CRITICAL: Strict validation of key structures to prevent syntax errors\n                if (!offerData.ecdhPublicKey || typeof offerData.ecdhPublicKey !== 'object' || Array.isArray(offerData.ecdhPublicKey)) {\n                    this._secureLog('error', 'CRITICAL: Invalid ECDH public key structure', { \n                        hasEcdhKey: !!offerData.ecdhPublicKey,\n                        ecdhKeyType: typeof offerData.ecdhPublicKey,\n                        isArray: Array.isArray(offerData.ecdhPublicKey)\n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: Invalid ECDH public key structure - hard abort required');\n                }\n\n                if (!offerData.ecdsaPublicKey || typeof offerData.ecdsaPublicKey !== 'object' || Array.isArray(offerData.ecdsaPublicKey)) {\n                    this._secureLog('error', 'CRITICAL: Invalid ECDSA public key structure', { \n                        hasEcdsaKey: !!offerData.ecdsaPublicKey,\n                        ecdsaKeyType: typeof offerData.ecdsaPublicKey,\n                        isArray: Array.isArray(offerData.ecdsaPublicKey)\n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: Invalid ECDSA public key structure - hard abort required');\n                }\n\n                // CRITICAL: Validate key internal structure to prevent syntax errors\n                if (!offerData.ecdhPublicKey.keyData || !offerData.ecdhPublicKey.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDH key missing keyData or signature', { \n                        hasKeyData: !!offerData.ecdhPublicKey.keyData,\n                        hasSignature: !!offerData.ecdhPublicKey.signature\n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDH key missing keyData or signature');\n                }\n\n                if (!offerData.ecdsaPublicKey.keyData || !offerData.ecdsaPublicKey.signature) {\n                    this._secureLog('error', 'CRITICAL: ECDSA key missing keyData or signature', { \n                        hasKeyData: !!offerData.ecdsaPublicKey.keyData,\n                        hasSignature: !!offerData.ecdsaPublicKey.signature\n                    });\n                    throw new Error('CRITICAL SECURITY FAILURE: ECDSA key missing keyData or signature');\n                }\n\n                if (typeof offerData.verificationCode !== 'string' || offerData.verificationCode.length < 6) {\n                    throw new Error('Invalid SAS verification code format - MITM protection required');\n                }\n\n                this._secureLog('info', 'v4.1 offer validation passed', {\n                    version: offerData.version,\n                    hasSecurityLevel: !!offerData.securityLevel?.level,\n                    offerAge: Math.round(offerAge / 1000) + 's'\n                });\n            } else {\n                const receivedVersion = offerData.v || offerData.version || 'unknown';\n                throw new Error(`Version mismatch: expected protocol ${EnhancedSecureWebRTCManager.PROTOCOL_VERSION}, received ${receivedVersion}`);\n            }\n\n            // Validate SDP structure (basic check for all versions)\n            const sdp = isV4CompactFormat ? offerData.s : offerData.sdp;\n            if (typeof sdp !== 'string' || !sdp.includes('v=0')) {\n                throw new Error('Invalid SDP structure');\n            }\n\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'CRITICAL: Security validation failed - hard abort required', {\n                error: error.message,\n                errorType: error.constructor.name,\n                timestamp: Date.now()\n            });\n\n            throw new Error(`CRITICAL SECURITY VALIDATION FAILURE: ${error.message}`);\n        }\n    }\n\n    async sendSecureMessage(message) {\n        //   Comprehensive input validation\n        const validation = this._validateInputData(message, 'sendSecureMessage');\n        if (!validation.isValid) {\n            const errorMessage = `Input validation failed: ${validation.errors.join(', ')}`;\n            this._secureLog('error', 'Input validation failed in sendSecureMessage', {\n                errors: validation.errors,\n                messageType: typeof message\n            });\n            throw new Error(errorMessage);\n        }\n\n        //   Rate limiting check\n        if (!this._checkRateLimit('sendSecureMessage')) {\n            throw new Error('Rate limit exceeded for secure message sending');\n        }\n\n        //   Enforce verification gate\n        this._enforceVerificationGate('sendSecureMessage');\n\n        //   Quick readiness check WITHOUT mutex\n        if (!this.isConnected()) {\n            if (validation.sanitizedData && typeof validation.sanitizedData === 'object' && validation.sanitizedData.type && validation.sanitizedData.type.startsWith('file_')) {\n                throw new Error('Connection not ready for file transfer. Please ensure the connection is established and verified.');\n            }\n            this.messageQueue.push(validation.sanitizedData);\n            throw new Error('Connection not ready. Message queued for sending.');\n        }\n        \n        //   Use mutex ONLY for cryptographic operations\n        return this._withMutex('cryptoOperation', async (operationId) => {\n            // Re-check inside critical section\n            if (!this.isConnected() || !this.isVerified) {\n                throw new Error('Connection lost during message preparation');\n            }\n            \n            // Note: master key session is managed by SecureMasterKeyManager\n            // Do not gate here on _isUnlocked to avoid false blocking\n            // Session timers are handled inside the master key manager on key access\n            \n            // Validate keys inside critical section\n            if (!this.encryptionKey || !this.macKey || !this.metadataKey) {\n                throw new Error('Encryption keys not initialized');\n            }\n            \n            //   Additional rate limiting check\n            if (!window.EnhancedSecureCryptoUtils.rateLimiter.checkMessageRate(this.rateLimiterId)) {\n                throw new Error('Message rate limit exceeded (60 messages per minute)');\n            }\n            \n            try {\n                //   Accept strings and objects; stringify objects\n                const textToSend = typeof validation.sanitizedData === 'string' ? validation.sanitizedData : JSON.stringify(validation.sanitizedData);\n                const sanitizedMessage = window.EnhancedSecureCryptoUtils.sanitizeMessage(textToSend);\n                const messageId = `msg_${Date.now()}_${this.messageCounter++}`;\n                \n                //   Create AAD with sequence number for anti-replay protection\n                if (typeof this._createMessageAAD !== 'function') {\n                    throw new Error('_createMessageAAD method is not available in sendSecureMessage. Manager may not be fully initialized.');\n                }\n                const aad = message.aad || this._createMessageAAD('enhanced_message', { content: sanitizedMessage });\n                \n                let payload;\n\n                // `canEncrypt` rather than `isRatchetActive`: the responder has no\n                // sending chain until the initiator's first message arrives, and\n                // the app sends a presence update from BOTH sides the instant\n                // verification completes. Without this check the responder's very\n                // first frame would throw. Those few frames fall back to the\n                // session keys \u2014 the protection every release before this one had\n                // \u2014 and everything after them is ratcheted.\n                if (this._ratchet?.canEncrypt) {\n                    // Per-message key from the ratchet: derived, used once and\n                    // destroyed, so this frame stays unreadable to anyone who\n                    // later recovers the session state.\n                    const { header, ciphertext } = await this._ratchet.encrypt(sanitizedMessage);\n                    payload = {\n                        type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.RATCHET_MESSAGE,\n                        h: header,\n                        c: ciphertext,\n                        version: '5.0'\n                    };\n                } else {\n                    //   Use enhanced encryption with AAD and sequence number\n                    const encryptedData = await window.EnhancedSecureCryptoUtils.encryptMessage(\n                        sanitizedMessage,\n                        this.encryptionKey,\n                        this.macKey,\n                        this.metadataKey,\n                        messageId,\n                        JSON.parse(aad).sequenceNumber // Use sequence number from AAD\n                    );\n\n                    payload = {\n                        type: 'enhanced_message',\n                        data: encryptedData,\n                        keyVersion: this.currentKeyVersion,\n                        version: '4.0'\n                    };\n                }\n\n                this.dataChannel.send(JSON.stringify(payload));\n                //   Locally display only plain strings to avoid UI duplication\n                if (typeof validation.sanitizedData === 'string') {\n                    this.deliverMessageToUI(validation.sanitizedData, 'sent');\n                }\n                \n                this._secureLog('debug', 'Secure message sent successfully', {\n                    operationId: operationId,\n                    messageLength: sanitizedMessage.length,\n                    keyVersion: this.currentKeyVersion\n                });\n                \n            } catch (error) {\n                this._secureLog('error', 'Secure message sending failed', {\n                    operationId: operationId,\n                    errorType: error.constructor.name\n                });\n                \n                // Improved user-facing error messages (English)\n                if (error.message.includes('Session expired')) {\n                    throw new Error('Session expired. Please enter your password to unlock.');\n                } else if (error.message.includes('Encryption keys not initialized')) {\n                    throw new Error('Session expired due to inactivity. Please reconnect to the chat.');\n                } else if (error.message.includes('Connection lost')) {\n                    throw new Error('Connection lost. Please check your Internet connection.');\n                } else if (error.message.includes('Rate limit exceeded')) {\n                    throw new Error('Message rate limit exceeded. Please wait before sending another message.');\n                } else {\n                    throw error;\n                }\n            }\n        }, 2000); // Reduced timeout for crypto operations\n    }\n\n    processMessageQueue() {\n        while (this.messageQueue.length > 0 && this.isConnected() && this.isVerified) {\n            const message = this.messageQueue.shift();\n            this.sendSecureMessage(message).catch(console.error);\n        }\n    }\n\n    // Heartbeat runs on its own HEARTBEAT_INTERVAL timer. It used to be folded\n    // into the unified maintenance cycle, which ticks every 5 minutes \u2014 far too\n    // coarse to notice a dead path, and long enough that a drop looked like\n    // silence. The maintenance cycle no longer sends heartbeats.\n    startHeartbeat() {\n        this._heartbeatConfig = {\n            enabled: true,\n            interval: EnhancedSecureWebRTCManager.TIMEOUTS.HEARTBEAT_INTERVAL,\n            lastHeartbeat: 0\n        };\n\n        this.stopHeartbeat(/* keepConfig */ true);\n\n        this._heartbeatTimer = setInterval(() => {\n            if (!this._heartbeatConfig?.enabled) return;\n            if (this.dataChannel?.readyState === 'open') {\n                this._sendHeartbeat();\n            }\n        }, EnhancedSecureWebRTCManager.TIMEOUTS.HEARTBEAT_INTERVAL);\n        this._trackActiveTimer(this._heartbeatTimer);\n\n        // Treat \"connected now\" as the liveness baseline, otherwise the watchdog\n        // fires immediately on a session that has simply been quiet so far.\n        this._lastInboundAt = Date.now();\n        this._livenessProbeAt = 0;\n        this._livenessArmed = false;\n        this._startLivenessWatchdog();\n        this._setupRecoveryLifecycleListeners();\n\n        this._secureLog('info', '\uD83D\uDD04 Liveness watchdog started', {\n            heartbeatMs: EnhancedSecureWebRTCManager.TIMEOUTS.HEARTBEAT_INTERVAL,\n            probeAfterMs: EnhancedSecureWebRTCManager.TIMEOUTS.LIVENESS_PROBE_AFTER,\n            probeTimeoutMs: EnhancedSecureWebRTCManager.TIMEOUTS.LIVENESS_PROBE_TIMEOUT\n        });\n    }\n\n    stopHeartbeat(keepConfig = false) {\n        if (!keepConfig && this._heartbeatConfig) {\n            this._heartbeatConfig.enabled = false;\n        }\n        if (this._heartbeatTimer) {\n            clearInterval(this._heartbeatTimer);\n            this._activeTimers?.delete(this._heartbeatTimer);\n            this._heartbeatTimer = null;\n        }\n        if (!keepConfig) this._stopLivenessWatchdog();\n    }\n\n    /**\n     * Inbound heartbeat from the peer. This method used to be missing entirely\n     * while handleSystemMessage still dispatched to it, so every heartbeat threw\n     * a TypeError and liveness was never actually observed.\n     *\n     * A non-ack heartbeat is a probe and must be answered immediately: that reply\n     * is what proves this side is alive even when its tab is backgrounded and its\n     * own timers have been throttled to a standstill.\n     */\n    handleHeartbeat(message) {\n        this._lastInboundAt = Date.now();\n        this._livenessProbeAt = 0;\n\n        const isAck = message?.ack === true || message?.data?.ack === true;\n        if (!isAck) this._sendHeartbeat(true);\n\n        this._secureLog('debug', isAck ? '\uD83D\uDC93 Heartbeat ack received' : '\uD83D\uDC93 Heartbeat probe received');\n    }\n\n    /**\n     * Any authenticated inbound frame proves the path is alive, not just\n     * heartbeats \u2014 a busy conversation must never trip the watchdog.\n     */\n    _noteInboundActivity() {\n        this._lastInboundAt = Date.now();\n        // Any frame at all answers the question a probe was asking.\n        this._livenessProbeAt = 0;\n        // Liveness can only judge a peer it has actually heard from. Until the\n        // first frame arrives there is no baseline, and \"not started yet\" must\n        // never be mistaken for \"died\".\n        this._livenessArmed = true;\n    }\n\n    _startLivenessWatchdog() {\n        this._stopLivenessWatchdog();\n        this._livenessTimer = setInterval(() => {\n            try {\n                this._checkLiveness();\n            } catch (error) {\n                this._secureLog('error', '\u274C Liveness check failed', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            }\n        }, EnhancedSecureWebRTCManager.TIMEOUTS.LIVENESS_CHECK_INTERVAL);\n        this._trackActiveTimer(this._livenessTimer);\n    }\n\n    _stopLivenessWatchdog() {\n        if (this._livenessTimer) {\n            clearInterval(this._livenessTimer);\n            this._activeTimers?.delete(this._livenessTimer);\n            this._livenessTimer = null;\n        }\n    }\n\n    /**\n     * A data channel keeps reporting readyState === 'open' long after the\n     * underlying path has died (the classic Wi-Fi \u2192 LTE switch: nothing closes,\n     * nothing errors, packets simply stop). Nothing tells us \u2014 so we ask.\n     *\n     * Two steps, because silence alone is not evidence of death. A backgrounded\n     * tab has its timers throttled to roughly one tick per minute (frozen\n     * outright on iOS), so a healthy peer routinely goes quiet. What a healthy\n     * peer cannot do is fail to ANSWER: inbound message handling is not throttled\n     * the way timers are. So after a period of silence we send a probe, and only\n     * an unanswered probe is treated as a dead path.\n     */\n    _checkLiveness() {\n        if (!this.isVerified) return;\n        if (this._reconnect.phase !== 'idle') return;         // already recovering\n        if (this.dataChannel?.readyState !== 'open') return;   // handled by onclose\n        if (!this._lastInboundAt) return;\n        if (!this._livenessArmed) return;                      // peer never heard from yet\n\n        const T = EnhancedSecureWebRTCManager.TIMEOUTS;\n        const now = Date.now();\n\n        // The discriminator that makes silence interpretable.\n        //\n        // An unanswered probe does NOT mean the peer is gone. A browser fully\n        // freezes a backgrounded tab \u2014 iOS Safari almost immediately, Chrome after\n        // a few minutes \u2014 and a frozen tab runs no JavaScript at all, so it cannot\n        // answer anything. (An earlier version of this assumed inbound message\n        // handling always runs; that is only true for timer throttling, not for\n        // freezing, and the difference was tearing down healthy sessions whenever\n        // the peer's phone went to sleep.)\n        //\n        // ICE consent checks are the signal that survives, because the browser\n        // runs them in its network stack rather than on the page's thread. So a\n        // 'connected' ICE state means the peer's machine is still answering at the\n        // transport level, and the silence above it is a sleeping tab. Messages\n        // sent meanwhile are not lost \u2014 SCTP delivers them when it wakes.\n        const iceHealthy = this.peerConnection?.connectionState === 'connected';\n\n        // While ICE is connected the answer changes nothing \u2014 a silent peer is a\n        // sleeping tab and is left alone either way \u2014 so don't ask. Probing here\n        // was pure traffic and pure log noise, once per cycle for as long as the\n        // peer's phone stayed asleep. Liveness is therefore only an accelerator\n        // for an ICE state that already looks wrong.\n        if (iceHealthy) {\n            this._livenessProbeAt = 0;\n            return;\n        }\n\n        // A probe is outstanding \u2014 has it gone unanswered long enough?\n        if (this._livenessProbeAt) {\n            if (now - this._livenessProbeAt < T.LIVENESS_PROBE_TIMEOUT) return;\n            this._livenessProbeAt = 0;\n            this._secureLog('warn', '\u26A0\uFE0F liveness probe unanswered and ICE is not connected \u2014 path presumed dead');\n            this._onPathLost('liveness_probe_timeout');\n            return;\n        }\n\n        if (now - this._lastInboundAt < T.LIVENESS_PROBE_AFTER) return;\n\n        this._livenessProbeAt = now;\n        const delivered = this._sendHeartbeat(false);\n        this._secureLog('info', '\uD83D\uDD04 peer silent and ICE degraded, probing', {\n            silentForMs: now - this._lastInboundAt,\n            connectionState: this.peerConnection?.connectionState,\n            probeSent: delivered\n        });\n    }\n\n    // ============================================\n    // SESSION RECOVERY (serverless, in-band)\n    // ============================================\n    //\n    // What survives an ICE restart and what does not:\n    //\n    //   ICE restart replaces the candidate pair \u2014 i.e. the network path. The\n    //   DTLS handshake, the negotiated keys and the SCTP association that the\n    //   data channel rides on are all layered ABOVE ICE and survive untouched.\n    //   That is why a restart can recover a Wi-Fi \u2192 LTE switch without a new\n    //   handshake, without a new SAS, and without losing message history.\n    //\n    //   The restart SDP travels over that same still-established data channel,\n    //   so it inherits the channel's authentication: an attacker who cannot\n    //   already decrypt the session cannot inject one. No signalling server is\n    //   involved at any point.\n    //\n    //   The one thing a restart must never do is change peer identity, so the\n    //   DTLS fingerprint in the incoming SDP is checked against the fingerprint\n    //   of the live session before anything is applied. A mismatch is treated\n    //   as an attack and aborts recovery rather than re-keying to a stranger.\n    //\n    // What it cannot recover: a closed data channel (SCTP gone) or a path so\n    // dead that the restart offer itself cannot be delivered. Those fall\n    // through to _giveUpAutoReconnect and require a fresh, manually exchanged\n    // handshake \u2014 the existing offer/answer flow.\n\n    isReconnecting() {\n        return this._reconnect.phase !== 'idle' && this._reconnect.phase !== 'exhausted';\n    }\n\n\n    /**\n     * Device-level signals that a path is worth re-checking right now, instead of\n     * waiting out a backoff: this device regained network, or a mobile browser\n     * brought the tab back to the foreground (where it may have frozen the\n     * connection while backgrounded).\n     */\n    _setupRecoveryLifecycleListeners() {\n        if (typeof window === 'undefined' || this._recoveryLifecycleBound) return;\n        this._recoveryLifecycleBound = true;\n\n        this._onDeviceOnline = () => {\n            if (!this.isVerified) return;\n            if (this.isReconnecting()) {\n                // Skip the remaining backoff \u2014 the reason for it just went away.\n                this._secureLog('info', '\uD83D\uDD04 Device back online \u2014 retrying immediately');\n                this._attemptIceRestart();\n            } else {\n                // We may have missed the drop entirely while offline.\n                this._checkLiveness();\n            }\n        };\n        this._onVisibilityRestored = () => {\n            if (typeof document === 'undefined' || document.visibilityState !== 'visible') return;\n            if (!this.isVerified) return;\n\n            // A backgrounded tab gets its timers frozen, so on return the liveness\n            // clock reads as a long silence that never actually happened, and\n            // connectionState can still be catching up. Judging the connection on\n            // either of those declares a perfectly healthy session broken \u2014 which\n            // then blocks sending, while messages keep arriving, because the\n            // transport was fine all along.\n            //\n            // So re-baseline and ASK instead of concluding: a probe settles it\n            // within seconds, and a genuinely dead path still gets caught.\n            this._lastInboundAt = Date.now();\n            this._livenessProbeAt = 0;\n\n            if (this._reconnect.phase === 'idle' && this.dataChannel?.readyState === 'open') {\n                this._livenessProbeAt = Date.now();\n                this._sendHeartbeat(false);\n                this._secureLog('info', '\uD83D\uDD04 returned to foreground, probing peer');\n            }\n        };\n\n        window.addEventListener('online', this._onDeviceOnline);\n        if (typeof document !== 'undefined') {\n            document.addEventListener('visibilitychange', this._onVisibilityRestored);\n        }\n    }\n\n    _teardownRecoveryLifecycleListeners() {\n        if (!this._recoveryLifecycleBound || typeof window === 'undefined') return;\n        this._recoveryLifecycleBound = false;\n        if (this._onDeviceOnline) window.removeEventListener('online', this._onDeviceOnline);\n        if (this._onVisibilityRestored && typeof document !== 'undefined') {\n            document.removeEventListener('visibilitychange', this._onVisibilityRestored);\n        }\n        this._onDeviceOnline = null;\n        this._onVisibilityRestored = null;\n    }\n\n    _resetReconnectState() {\n        const r = this._reconnect;\n        if (!r) return;   // teardown can run before the constructor finishes\n        if (r.graceTimer) { clearTimeout(r.graceTimer); this._activeTimers?.delete(r.graceTimer); }\n        if (r.retryTimer) { clearTimeout(r.retryTimer); this._activeTimers?.delete(r.retryTimer); }\n        if (r.restartTimer) { clearTimeout(r.restartTimer); this._activeTimers?.delete(r.restartTimer); }\n        r.graceTimer = null;\n        r.retryTimer = null;\n        r.restartTimer = null;\n        r.phase = 'idle';\n        r.attempts = 0;\n        r.startedAt = 0;\n        r.inFlightAt = 0;\n        r.barrenFailures = 0;\n        r.pendingRole = null;\n    }\n\n    /**\n     * ICE reported 'disconnected'. This is usually transient \u2014 the browser's own\n     * consent freshness checks recover it within a couple of seconds \u2014 so hold a\n     * grace window before spending a restart, but tell the UI right away so the\n     * user sees \"reconnecting\" rather than a silently stalled chat.\n     */\n    _onPathDegraded(reason = 'ice_disconnected') {\n        if (!this.isVerified) return;\n        if (this._reconnect.phase !== 'idle') return;\n\n        this._reconnect.phase = 'grace';\n        this._reconnect.startedAt = Date.now();\n        this._secureLog('info', '\uD83D\uDD04 path degraded, holding grace window', { reason });\n        this.onStatusChange('reconnecting');\n\n        this._reconnect.graceTimer = setTimeout(() => {\n            this._reconnect.graceTimer = null;\n            if (this.peerConnection?.connectionState === 'connected') {\n                this._onPathRecovered();\n                return;\n            }\n            this._attemptIceRestart();\n        }, EnhancedSecureWebRTCManager.TIMEOUTS.ICE_DISCONNECT_GRACE);\n        this._trackActiveTimer(this._reconnect.graceTimer);\n    }\n\n    /** ICE failed outright, or the peer went silent \u2014 restart without waiting. */\n    _onPathLost(reason = 'ice_failed') {\n        if (!this.isVerified) return;\n        if (this._reconnect.phase === 'restarting' || this._reconnect.phase === 'exhausted') return;\n\n        if (this._reconnect.phase === 'idle') {\n            this._reconnect.startedAt = Date.now();\n            this.onStatusChange('reconnecting');\n        }\n        if (this._reconnect.graceTimer) {\n            clearTimeout(this._reconnect.graceTimer);\n            this._activeTimers?.delete(this._reconnect.graceTimer);\n            this._reconnect.graceTimer = null;\n        }\n        this._secureLog('info', '\uD83D\uDD04 path lost, restarting ICE', { reason });\n        this._attemptIceRestart();\n    }\n\n    /**\n     * A restart is only worth trying while the ICE agent can still produce\n     * candidates. After the device changes network, a PeerConnection is often\n     * left bound to interfaces that no longer exist: every STUN binding and TURN\n     * allocation times out, gathering yields nothing, and each restart fails with\n     * zero candidate pairs. restartIce() does not rebind it \u2014 only a brand-new\n     * PeerConnection will, and building one needs a whole new handshake.\n     *\n     * Recognising that early matters: retrying it for the full two-minute\n     * deadline is two minutes of the user watching nothing happen, when the way\n     * out was available immediately.\n     */\n    _noteIceFailureDiagnostics(diagnostics) {\n        if (!this.isReconnecting()) return;\n        if (!diagnostics) return;\n\n        if (diagnostics.pairCount > 0) {\n            this._reconnect.barrenFailures = 0;\n            return;\n        }\n\n        this._reconnect.barrenFailures = (this._reconnect.barrenFailures || 0) + 1;\n        if (this._reconnect.barrenFailures < EnhancedSecureWebRTCManager.LIMITS.MAX_BARREN_ICE_FAILURES) return;\n\n        this._secureLog('warn', '\u26A0\uFE0F ICE cannot gather any usable candidate \u2014 this connection is bound to a network that is gone', {\n            consecutiveBarrenFailures: this._reconnect.barrenFailures\n        });\n        this._giveUpAutoReconnect('ice_agent_unusable');\n    }\n\n    /**\n     * Path is back. Same keys, same verification, same history \u2014 carry on.\n     * Returns true if it actually handled a recovery (and therefore already\n     * emitted 'connected'), so the caller does not emit it twice.\n     */\n    _onPathRecovered() {\n        const wasRecovering = this.isReconnecting();\n        this._resetReconnectState();\n        this._lastInboundAt = Date.now();\n        this._livenessProbeAt = 0;\n\n        if (!wasRecovering) return false;\n\n        this._secureLog('info', '\uD83D\uDD04 connection recovered, session preserved');\n        this.onStatusChange('connected');\n        // Anything the user sent into the dead channel goes out now.\n        this.processMessageQueue();\n        try {\n            this._dispatchAppEvent?.(new CustomEvent('connection-recovered', {\n                detail: { timestamp: Date.now() }\n            }));\n        } catch (_) { /* non-DOM host */ }\n        return true;\n    }\n\n    /**\n     * Only the side that created the original offer drives restarts. Both sides\n     * offering at once produces glare, and with no signalling server there is no\n     * referee to break the tie \u2014 so the answerer asks instead of acting.\n     */\n    async _attemptIceRestart() {\n        if (!this.isVerified || !this.peerConnection) return;\n\n        // Never renegotiate a connection that is actually up. Recovery can be\n        // entered on a stale reading (a tab thawing out of the background is the\n        // common one), and restarting from here would break a working session and\n        // strand it in \"reconnecting\" \u2014 where sending is blocked even though\n        // messages keep arriving.\n        if (this.peerConnection.connectionState === 'connected') {\n            this._onPathRecovered();\n            return;\n        }\n\n        const r = this._reconnect;\n\n        // While THIS device has no network at all (tunnel, flight mode), a restart\n        // cannot possibly succeed and the give-up deadline must not burn down \u2014\n        // otherwise a five-minute underground ride costs the user their session.\n        // Hold the deadline open and wait; the 'online' event retries immediately.\n        if (typeof navigator !== 'undefined' && navigator.onLine === false) {\n            r.phase = 'waiting';\n            r.startedAt = Date.now();\n            this._secureLog('debug', '\uD83D\uDD04 Device offline \u2014 holding recovery open');\n            this._scheduleReconnectRetry();\n            return;\n        }\n\n        const elapsed = Date.now() - (r.startedAt || Date.now());\n        if (elapsed > EnhancedSecureWebRTCManager.TIMEOUTS.RECONNECT_MAX_DURATION) {\n            this._giveUpAutoReconnect('timeout');\n            return;\n        }\n\n        // A restart round-trip (offer \u2192 gather \u2192 answer \u2192 gather) takes seconds,\n        // far longer than the head of the backoff. Launching another one on top\n        // replaces the local description out from under the attempt already in\n        // flight, so each try cancels the last and recovery never converges. Wait\n        // the round-trip out before spending another attempt.\n        if (r.inFlightAt && Date.now() - r.inFlightAt < EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_TIMEOUT) {\n            this._scheduleReconnectRetry();\n            return;\n        }\n\n        // The restart SDP rides the data channel: if that is gone, SCTP is gone\n        // and no restart can help.\n        if (this.dataChannel?.readyState !== 'open') {\n            this._giveUpAutoReconnect('data_channel_closed');\n            return;\n        }\n\n        // The decisive check, and it holds for BOTH roles.\n        //\n        // Every route out of a broken path runs over the data channel: the\n        // offerer's restart offer, the answerer's request for one, the answer\n        // coming back. So recovery is only possible while that channel still\n        // carries something. If the peer has been completely silent since\n        // recovery began \u2014 no heartbeat, no ack, no reply to any attempt \u2014 then\n        // it does not, in either direction.\n        //\n        // This is also what the answerer needs: it cannot renegotiate on its own\n        // (only the offerer may create the offer), so without a working channel\n        // it has no move at all and would otherwise sit out the full deadline\n        // sending requests nobody can receive.\n        const silentFor = Date.now() - Math.max(this._lastInboundAt || 0, r.startedAt);\n        if (r.attempts >= 2 && silentFor > EnhancedSecureWebRTCManager.TIMEOUTS.RECOVERY_SILENCE_LIMIT) {\n            this._secureLog('warn', '\u26A0\uFE0F nothing has reached us since the drop \u2014 the channel cannot carry a renegotiation', {\n                silentForMs: silentFor,\n                attempts: r.attempts\n            });\n            this._giveUpAutoReconnect('no_signalling_path');\n            return;\n        }\n\n        r.phase = 'restarting';\n        r.attempts += 1;\n        r.inFlightAt = Date.now();\n        this._secureLog('info', '\uD83D\uDD04 ICE restart attempt', {\n            attempt: r.attempts,\n            role: this.isInitiator ? 'offerer' : 'answerer'\n        });\n\n        try {\n            if (this.isInitiator) {\n                await this._sendIceRestartOffer();\n            } else {\n                await this.sendSystemMessage({\n                    type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_REQUEST,\n                    timestamp: Date.now()\n                });\n            }\n        } catch (error) {\n            this._secureLog('warn', '\u26A0\uFE0F ICE restart attempt failed to send', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        }\n\n        // Arm the retry regardless: if the round-trip completes, the\n        // 'connected' transition clears it via _onPathRecovered.\n        this._scheduleReconnectRetry();\n    }\n\n    _scheduleReconnectRetry() {\n        const r = this._reconnect;\n        if (r.retryTimer) {\n            clearTimeout(r.retryTimer);\n            this._activeTimers?.delete(r.retryTimer);\n        }\n        const backoff = EnhancedSecureWebRTCManager.RECONNECT_BACKOFF;\n        // Clamp at both ends: a retry can be scheduled before any attempt has been\n        // counted (the device-offline hold), and a negative index would yield an\n        // undefined delay \u2014 i.e. a 0 ms timer spinning as fast as the event loop.\n        const delay = backoff[Math.min(Math.max(r.attempts - 1, 0), backoff.length - 1)];\n\n        r.retryTimer = setTimeout(() => {\n            r.retryTimer = null;\n            if (this.peerConnection?.connectionState === 'connected') {\n                this._onPathRecovered();\n                return;\n            }\n            this._attemptIceRestart();\n        }, delay);\n        this._trackActiveTimer(r.retryTimer);\n    }\n\n    /**\n     * Hand the peer connection the ICE server list as it is NOW.\n     *\n     * A connection keeps the servers it was built with, and our relay's credential\n     * expires after a day (src/network/turnCredentials.js renews it in place on the\n     * shared list). A restart gathers new relay candidates, so it must present the\n     * current credential or a long-lived session would lose its relay path exactly\n     * when it needs one. Best effort: an engine that refuses the update restarts\n     * with what it had.\n     */\n    _applyCurrentIceServers(pc) {\n        try {\n            if (!pc || typeof pc.getConfiguration !== 'function' || typeof pc.setConfiguration !== 'function') return;\n            const servers = this._config?.webrtc?.iceServers;\n            if (!Array.isArray(servers) || servers.length === 0) return;\n            pc.setConfiguration({ ...pc.getConfiguration(), iceServers: servers });\n        } catch (error) {\n            this._secureLog('warn', 'Could not refresh ICE servers before restart', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        }\n    }\n\n    async _sendIceRestartOffer() {\n        const pc = this.peerConnection;\n        if (!pc) return;\n        this._applyCurrentIceServers(pc);\n\n        // Rolling back to 'stable' first: a previous restart round-trip may have\n        // left a local offer pending that was never answered.\n        if (pc.signalingState === 'have-local-offer') {\n            try { await pc.setLocalDescription({ type: 'rollback' }); } catch (_) { /* Safari */ }\n        }\n\n        const offer = await pc.createOffer({ iceRestart: true });\n        await pc.setLocalDescription(offer);\n        await this.waitForIceGathering(\n            EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_GATHERING,\n            // Recovery keeps a hard 4 s budget: a restart round-trip has to fit\n            // inside ICE_RESTART_TIMEOUT, so the extra patience the handshake\n            // gets would push the whole cycle past its own deadline.\n            EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_GATHERING\n        );\n\n        await this.sendSystemMessage({\n            type: EnhancedSecureWebRTCManager.MESSAGE_TYPES.ICE_RESTART_OFFER,\n            sdp: pc.localDescription.sdp,\n            timestamp: Date.now()\n        });\n        this._secureLog('debug', '\uD83D\uDD04 ICE restart offer sent');\n    }\n\n    /**\n     * The fingerprint of the live, already-SAS-verified session. Recovery must\n     * re-point the path at the SAME peer, never re-key to a new one.\n     */\n    _currentRemoteDtlsFingerprint() {\n        const sdp = this.peerConnection?.currentRemoteDescription?.sdp\n            || this.peerConnection?.remoteDescription?.sdp;\n        if (!sdp) return null;\n        try {\n            return this._extractDTLSFingerprintFromSDP(sdp);\n        } catch (_) {\n            return null;\n        }\n    }\n\n    async _assertSameRemoteIdentity(sdp, context) {\n        const expected = this._currentRemoteDtlsFingerprint();\n        if (!expected) {\n            // No baseline to compare against \u2014 refuse rather than accept blindly.\n            throw new Error(`Cannot verify peer identity for ${context}`);\n        }\n        const received = this._extractDTLSFingerprintFromSDP(sdp);\n        await this._validateDTLSFingerprint(received, expected, context);\n    }\n\n    /** Inbound recovery signalling, routed from processMessage. */\n    async _handleIceRestartSignal(type, data) {\n        const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n        const pc = this.peerConnection;\n        if (!pc) return;\n\n        this._noteInboundActivity();\n\n        switch (type) {\n            case T.ICE_RESTART_REQUEST: {\n                // Peer noticed the break first. Only the offerer may act on it.\n                if (!this.isInitiator) return;\n                if (this._reconnect.phase === 'idle') {\n                    this._reconnect.startedAt = Date.now();\n                    this._reconnect.phase = 'restarting';\n                    this.onStatusChange('reconnecting');\n                }\n                await this._sendIceRestartOffer();\n                return;\n            }\n\n            case T.ICE_RESTART_OFFER: {\n                if (!data.sdp) return;\n                // Identity check BEFORE touching the peer connection.\n                await this._assertSameRemoteIdentity(data.sdp, 'ice_restart_offer');\n\n                if (this._reconnect.phase === 'idle') {\n                    this._reconnect.startedAt = Date.now();\n                    this.onStatusChange('reconnecting');\n                }\n                this._reconnect.phase = 'restarting';\n\n                this._applyCurrentIceServers(pc);\n                await pc.setRemoteDescription({ type: 'offer', sdp: data.sdp });\n                const answer = await pc.createAnswer();\n                await pc.setLocalDescription(answer);\n                await this.waitForIceGathering(\n                    EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_GATHERING,\n                    // Recovery keeps a hard 4 s budget: a restart round-trip has to\n                    // fit inside ICE_RESTART_TIMEOUT, so the extra patience the\n                    // handshake gets would push the cycle past its own deadline.\n                    EnhancedSecureWebRTCManager.TIMEOUTS.ICE_RESTART_GATHERING\n                );\n\n                await this.sendSystemMessage({\n                    type: T.ICE_RESTART_ANSWER,\n                    sdp: pc.localDescription.sdp,\n                    timestamp: Date.now()\n                });\n                this._secureLog('debug', '\uD83D\uDD04 ICE restart answer sent');\n                return;\n            }\n\n            case T.ICE_RESTART_ANSWER: {\n                if (!data.sdp) return;\n                if (pc.signalingState !== 'have-local-offer') {\n                    this._secureLog('warn', '\u26A0\uFE0F Ignoring restart answer in unexpected state', {\n                        signalingState: pc.signalingState\n                    });\n                    return;\n                }\n                await this._assertSameRemoteIdentity(data.sdp, 'ice_restart_answer');\n                await pc.setRemoteDescription({ type: 'answer', sdp: data.sdp });\n                // Round-trip complete: the next attempt (if the pair still fails\n                // to connect) may start without waiting out the full budget.\n                this._reconnect.inFlightAt = 0;\n                this._secureLog('debug', '\uD83D\uDD04 ICE restart answer applied');\n                return;\n            }\n\n            default:\n        }\n    }\n\n    /**\n     * Automatic recovery is out of road, and there is no fallback: with no\n     * signalling server, a path that cannot carry a renegotiation cannot be\n     * rebuilt without a fresh, manually exchanged handshake.\n     *\n     * So the session ends here rather than lingering half-alive. Everything goes\n     * with it \u2014 keys, queued messages, transcript \u2014 which is also the safer\n     * default: a conversation whose transport is gone should not leave its\n     * plaintext sitting in a tab the user has stopped watching.\n     */\n    _giveUpAutoReconnect(reason) {\n        this._resetReconnectState();\n        this._reconnect.phase = 'exhausted';\n        this._teardownRecoveryLifecycleListeners?.();\n        this._secureLog('warn', '\u26A0\uFE0F automatic reconnection exhausted \u2014 ending session', { reason });\n\n        if (!this.reconnectionFailedNotificationSent) {\n            this.reconnectionFailedNotificationSent = true;\n            this.deliverMessageToUI(\n                'Could not restore the connection. This chat is being closed and its data wiped \u2014 start a new one to continue.',\n                'system'\n            );\n        }\n\n        // 'recovery_failed' is distinct from a plain 'disconnected': the UI takes\n        // it as the instruction to tear the whole conversation down, not merely\n        // to show a dropped-connection state.\n        this.onStatusChange('recovery_failed');\n        this._clearVerificationStates();\n    }\n\n    /**\n     *   Stop all active timers and cleanup scheduler\n     */\n    _stopAllTimers() {\n        this._secureLog('info', 'Stopping all timers and cleanup scheduler');\n        \n        // Stop maintenance scheduler\n        if (this._maintenanceScheduler) {\n            clearInterval(this._maintenanceScheduler);\n            this._maintenanceScheduler = null;\n        }\n        \n        // Stop heartbeat + liveness watchdog, and abandon any in-flight session\n        // recovery. Optional-called: a throw here would skip the bulk\n        // _activeTimers sweep below and leak every remaining timer.\n        this.stopHeartbeat?.();\n        this._resetReconnectState?.();\n\n        // Clear all timer references\n        if (this._activeTimers) {\n            this._activeTimers.forEach(timer => {\n                if (timer) {\n                    clearInterval(timer);\n                    clearTimeout(timer);\n                }\n            });\n            this._activeTimers.clear();\n        }\n\n        if (this._fileTransferInitRetryTimers) {\n            this._fileTransferInitRetryTimers.clear();\n        }\n        this._logCleanupInterval = null;\n        \n        this._secureLog('info', 'All timers stopped successfully');\n    }\n\n\n    /**\n     * @param {number} [timeoutMs] - gathering budget. Recovery uses a much shorter\n     *   one than the initial handshake: a restart round-trip must finish well\n     *   inside the retry backoff, or the next attempt cancels the one in flight.\n     */\n    /**\n     * Wait for ICE gathering, but do not confuse \"finished\" with \"usable\".\n     *\n     * Gathering only reaches 'complete' once EVERY configured STUN/TURN server has\n     * answered or timed out. On a network that blocks them \u2014 a VPN, a captive\n     * portal, an interface the browser cannot route from \u2014 that never happens\n     * inside the budget, even though host candidates are available immediately and\n     * are enough to connect on a LAN. The old code waited a flat 10 s and then\n     * hard-failed the whole handshake if the SDP happened to be empty at that\n     * instant, which made success a race: the same device would fail one attempt\n     * and connect on the next with gathering still in progress.\n     *\n     * So: return as soon as gathering completes, and otherwise keep waiting past\n     * the soft deadline only while there is still nothing to export. `hardMs`\n     * bounds that extra patience so a truly dead network still fails, just later\n     * and for a real reason.\n     */\n    waitForIceGathering(\n        timeoutMs = EnhancedSecureWebRTCManager.TIMEOUTS.ICE_GATHERING_TIMEOUT,\n        hardMs = EnhancedSecureWebRTCManager.TIMEOUTS.ICE_GATHERING_HARD_TIMEOUT\n    ) {\n        return new Promise((resolve) => {\n            const pc = this.peerConnection;\n            if (!pc) {\n                resolve(false);\n                return;\n            }\n            if (pc.iceGatheringState === 'complete') {\n                resolve(true);\n                return;\n            }\n\n            let settled = false;\n            let softTimer = null;\n            let hardTimer = null;\n\n            // Runs inside a timer callback, where a throw has nowhere to go and\n            // would leave the promise pending forever \u2014 i.e. a hung handshake.\n            // \"Cannot tell\" must therefore read as \"nothing to export\", which\n            // falls through to the hard deadline rather than resolving early.\n            const hasCandidates = () => {\n                try {\n                    const sdp = this.peerConnection?.localDescription?.sdp;\n                    if (!sdp) return false;\n                    return this._summarizeIceCandidatesInSDP(sdp).total > 0;\n                } catch (_) {\n                    return false;\n                }\n            };\n\n            const finish = (completed) => {\n                if (settled) return;\n                settled = true;\n                if (softTimer) { clearTimeout(softTimer); this._untrackActiveTimer?.(softTimer); }\n                if (hardTimer) { clearTimeout(hardTimer); this._untrackActiveTimer?.(hardTimer); }\n                try { pc.removeEventListener('icegatheringstatechange', onStateChange); } catch (_) {}\n                resolve(completed);\n            };\n\n            const onStateChange = () => {\n                if (this.peerConnection?.iceGatheringState === 'complete') {\n                    finish(true);\n                }\n            };\n\n            pc.addEventListener('icegatheringstatechange', onStateChange);\n\n            // Soft deadline: gathering is still running, but if we already have\n            // something exportable there is no reason to keep the user waiting.\n            softTimer = setTimeout(() => {\n                if (hasCandidates()) {\n                    finish(false);\n                }\n                // Otherwise fall through to the hard deadline \u2014 an empty SDP is\n                // exactly the case that used to be reported as a fatal error.\n            }, timeoutMs);\n            this._trackActiveTimer?.(softTimer);\n\n            hardTimer = setTimeout(() => finish(false), Math.max(hardMs, timeoutMs));\n            this._trackActiveTimer?.(hardTimer);\n        });\n    }\n\n    retryConnection() {\n        this._secureLog('info', 'Retrying connection', {\n            attempt: this.connectionAttempts,\n            maxAttempts: this.maxConnectionAttempts\n        });\n        this.onStatusChange('retrying');\n    }\n\n    isConnected() {\n        const hasDataChannel = !!this.dataChannel;\n        const dataChannelState = this.dataChannel?.readyState;\n        const isDataChannelOpen = dataChannelState === 'open';\n        const isVerified = this.isVerified;\n        const connectionState = this.peerConnection?.connectionState;\n        \n        return this.dataChannel && this.dataChannel.readyState === 'open' && this.isVerified;\n    }\n\n    getConnectionInfo() {\n        return {\n            fingerprint: this.keyFingerprint,\n            isConnected: this.isConnected(),\n            isVerified: this.isVerified,\n            connectionState: this.peerConnection?.connectionState,\n            iceConnectionState: this.peerConnection?.iceConnectionState,\n            verificationCode: this.verificationCode\n        };\n    }\n\n    handleUnexpectedDisconnect() {\n        this.sendDisconnectNotification();\n        this.isVerified = false;\n        \n        // Ensure disconnect notification wasn't already sent\n        if (!this.disconnectNotificationSent) {\n            this.disconnectNotificationSent = true;\n            this.deliverMessageToUI('\uD83D\uDD0C Connection lost. Attempting to reconnect...', 'system');\n        }\n        \n        // Cleanup file transfer system on unexpected disconnect\n        if (this.fileTransferSystem) {\n            this.fileTransferSystem.cleanup();\n            this.fileTransferSystem = null;\n        }\n        \n        this._dispatchAppEvent?.(new CustomEvent('peer-disconnect', {\n            detail: { \n                reason: 'connection_lost',\n                timestamp: Date.now()\n            }\n        }));\n\n    }\n    \n    sendDisconnectNotification() {\n        try {\n            if (this.dataChannel && this.dataChannel.readyState === 'open') {\n                const notification = {\n                    type: 'peer_disconnect',\n                    timestamp: Date.now(),\n                    reason: this.intentionalDisconnect ? 'user_disconnect' : 'connection_lost'\n                };\n\n                for (let i = 0; i < 3; i++) {\n                    try {\n                        this.dataChannel.send(JSON.stringify(notification));\n                        window.EnhancedSecureCryptoUtils.secureLog.log('info', 'Disconnect notification sent', {\n                            reason: notification.reason,\n                            attempt: i + 1\n                        });\n                        break;\n                    } catch (sendError) {\n                        if (i === 2) { \n                            window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Failed to send disconnect notification', {\n                                error: sendError.message\n                            });\n                        }\n                    }\n                }\n            }\n        } catch (error) {\n            window.EnhancedSecureCryptoUtils.secureLog.log('error', 'Could not send disconnect notification', {\n                error: error.message\n            });\n        }\n    }\n    \n    /**\n     * Manual \"try again\" from the UI. Restarts the automatic recovery cycle from\n     * scratch (fresh attempt counter and deadline) as long as the data channel is\n     * still there to carry the renegotiation.\n     */\n    attemptReconnection() {\n        if (!this.isVerified || this.dataChannel?.readyState !== 'open') {\n            if (!this.reconnectionFailedNotificationSent) {\n                this.reconnectionFailedNotificationSent = true;\n                this.deliverMessageToUI('Unable to reconnect. A new connection is required.', 'system');\n            }\n            return false;\n        }\n\n        this._resetReconnectState();\n        this.reconnectionFailedNotificationSent = false;\n        this._reconnect.startedAt = Date.now();\n        this.onStatusChange('reconnecting');\n        this._attemptIceRestart();\n        return true;\n    }\n    \n    handlePeerDisconnectNotification(data) {\n        const reason = data.reason || 'unknown';\n        const reasonText = reason === 'user_disconnect' ? 'manually disconnected.' : 'connection lost.';\n        \n        // Ensure peer-disconnect notification wasn't already sent\n        if (!this.peerDisconnectNotificationSent) {\n            this.peerDisconnectNotificationSent = true;\n            this.deliverMessageToUI(`Peer ${reasonText}`, 'system');\n        }\n        \n        this.onStatusChange('peer_disconnected');\n \n        this.intentionalDisconnect = false;\n        this.isVerified = false;\n        this.stopHeartbeat();\n        \n        this.onKeyExchange(''); \n        this.onVerificationRequired(''); \n\n        this._dispatchAppEvent?.(new CustomEvent('peer-disconnect', {\n            detail: { \n                reason: reason,\n                timestamp: Date.now()\n            }\n        }));\n\n        if (!this._peerDisconnectCleanupTimer) {\n            this._peerDisconnectCleanupTimer = this._trackActiveTimer(setTimeout(() => {\n                const timer = this._peerDisconnectCleanupTimer;\n                this._peerDisconnectCleanupTimer = null;\n                this._untrackActiveTimer(timer);\n                if (this._sessionAlive === false) return;\n                this.disconnect();\n            }, 2000));\n        }\n        \n        window.EnhancedSecureCryptoUtils.secureLog.log('info', 'Peer disconnect notification processed', {\n            reason: reason\n        });\n    }\n    \n    /**\n     *   Secure disconnect with complete memory cleanup\n     */\n    disconnect() {\n        try {\n            this._sessionAlive = false;\n\n            // End any active call and fully release the persistent mic/camera capture\n            // (kept alive between calls; the session is ending now).\n            try { this._stopAdaptation?.(); } catch (_) {}\n            try { this._stopLocalMediaPermanently?.(); } catch (_) {}\n            this._callAudioSender = null;\n            this._callVideoSender = null;\n            // A session that is ending is no longer a leg of anything. Clearing\n            // the group context matters most: it is what allows an inbound offer\n            // to be answered without asking, and it must not survive the session\n            // it was granted for.\n            this._callGroupContext = null;\n            this._externalMediaStream = null;\n            this._callStateListeners?.clear?.();\n\n            // Preserve the explicit-disconnect notification flow before channels are closed.\n            this.intentionalDisconnect = true;\n            window.EnhancedSecureCryptoUtils.secureLog.log('info', 'Starting intentional disconnect');\n            this.sendDisconnectNotification();\n\n            // Stop every timer-backed subsystem first.\n            this._teardownRecoveryLifecycleListeners?.();\n            this._stopAllTimers();\n            this._peerDisconnectCleanupTimer = null;\n            this.stopHeartbeat();\n            this.stopFakeTrafficGeneration();\n            for (const timer of this.decoyTimers.entries()) {\n                clearTimeout(timer[1]);\n            }\n            this.decoyTimers.clear();\n\n            // Pending file transfers must not survive a disconnect.\n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n            }\n\n            // Close auxiliary channels alongside the primary channel.\n            for (const channel of this.decoyChannels.values()) {\n                if (channel.readyState === 'open') channel.close();\n            }\n            this.decoyChannels.clear();\n            if (this.heartbeatChannel) {\n                this.heartbeatChannel.close();\n                this.heartbeatChannel = null;\n            }\n\n            // Reset transport-independent state.\n            this.isVerified = false;\n            this.processedMessageIds.clear();\n            this.messageCounter = 0;\n            this.packetBuffer.clear();\n            this.chunkQueue = [];\n\n            // Preserve all key/material cleanup from the former implementations.\n            this._wipeEphemeralKeys();\n            this._hardWipeOldKeys();\n            this._secureCleanupCryptographicMaterials();\n            this.keyVersions.clear();\n            this.oldKeys.clear();\n            this.currentKeyVersion = 0;\n            this.lastKeyRotation = Date.now();\n            this.sequenceNumber = 0;\n            this.expectedSequenceNumber = 0;\n            this.replayWindow.clear();\n            this._clearVerificationStates();\n\n            this.securityFeatures = {\n                hasEncryption: true,\n                hasECDH: true,\n                hasECDSA: true,\n                hasMutualAuth: true,\n                hasMetadataProtection: true,\n                hasEnhancedReplayProtection: true,\n                hasNonExtractableKeys: true,\n                hasRateLimiting: true,\n                hasEnhancedValidation: true,\n                hasPFS: true\n            };\n\n            // Close live transports, then release their listeners/references.\n            if (this.dataChannel) {\n                this.dataChannel.close();\n                this.dataChannel.onopen = null;\n                this.dataChannel.onclose = null;\n                this.dataChannel.onmessage = null;\n                this.dataChannel.onerror = null;\n                this.dataChannel = null;\n            }\n            if (this.peerConnection) {\n                this.peerConnection.close();\n                this.peerConnection.onconnectionstatechange = null;\n                this.peerConnection.ondatachannel = null;\n                this.peerConnection = null;\n            }\n\n            if (this.messageQueue && this.messageQueue.length > 0) {\n                this.messageQueue.forEach((message, index) => {\n                    this._secureWipeMemory(message, `messageQueue[${index}]`);\n                });\n                this.messageQueue = [];\n            }\n\n            this._forceGarbageCollection().catch(error => {\n                this._secureLog('error', 'Cleanup failed during disconnect', {\n                    errorType: error?.constructor?.name || 'Unknown'\n                });\n            });\n\n            this._dispatchAppEvent?.(new CustomEvent('peer-disconnect', {\n                detail: {\n                    reason: 'user_disconnect',\n                    timestamp: Date.now()\n                }\n            }));\n            this._dispatchAppEvent?.(new CustomEvent('connection-cleaned', {\n                detail: {\n                    timestamp: Date.now(),\n                    reason: 'user_cleanup'\n                }\n            }));\n\n            this.onStatusChange('disconnected');\n            this.onKeyExchange('');\n            this.onVerificationRequired('');\n            this._secureLog('info', 'Connection securely cleaned up with complete memory wipe');\n        } catch (error) {\n            this._secureLog('error', '\u274C Error during enhanced disconnect:', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        } finally {\n            this.intentionalDisconnect = false;\n        }\n    }\n    // Public method to send files\n    async sendFile(file, options = {}) {\n        //   Enforce verification gate for file transfers\n        this._enforceVerificationGate('sendFile');\n\n        if (!this.isConnected()) {\n            throw new Error('Connection not ready for file transfer. Please ensure the connection is established.');\n        }\n\n        if (!this.fileTransferSystem) {\n            this.initializeFileTransfer();\n            \n            // Allow time for initialization\n            await new Promise(resolve => setTimeout(resolve, 500));\n            \n            if (!this.fileTransferSystem) {\n                throw new Error('File transfer system could not be initialized. Please try reconnecting.');\n            }\n        }\n\n        //   Verify key readiness\n        if (!this.encryptionKey || !this.macKey) {\n            throw new Error('Encryption keys not ready. Please wait for connection to be fully established.');\n        }\n\n\n        try {\n            const fileId = await this.fileTransferSystem.sendFile(file, options);\n            return fileId;\n        } catch (error) {\n            this._secureLog('error', 'File transfer error:', { errorType: error?.constructor?.name || 'Unknown' });\n            \n            // Re-throw with a clearer message\n            if (error.message.includes('Connection not ready')) {\n                throw new Error('Connection not ready for file transfer. Check connection status.');\n            } else if (error.message.includes('Encryption keys not initialized')) {\n                throw new Error('Session expired due to inactivity. Please reconnect to the chat.');\n            } else if (error.message.includes('Transfer timeout')) {\n                throw new Error('File transfer timeout. Check connection and try again.');\n            } else {\n                throw error;\n            }\n        }\n    }\n\n    // Get active file transfers\n    getFileTransfers() {\n        if (!this.fileTransferSystem) {\n            return { sending: [], receiving: [] };\n        }\n        \n        try {\n            // Check available methods in file transfer system\n            let sending = [];\n            let receiving = [];\n            \n            if (typeof this.fileTransferSystem.getActiveTransfers === 'function') {\n                sending = this.fileTransferSystem.getActiveTransfers();\n            } else {\n                this._secureLog('warn', 'getActiveTransfers method not available in file transfer system');\n            }\n            \n            if (typeof this.fileTransferSystem.getReceivingTransfers === 'function') {\n                receiving = this.fileTransferSystem.getReceivingTransfers();\n            } else {\n                this._secureLog('warn', 'getReceivingTransfers method not available in file transfer system');\n            }\n            \n            return {\n                sending: sending || [],\n                receiving: receiving || []\n            };\n        } catch (error) {\n            this._secureLog('error', 'Error getting file transfers:', { errorType: error?.constructor?.name || 'Unknown' });\n            return { sending: [], receiving: [] };\n        }\n    }\n\n    // Get file transfer system status\n    getFileTransferStatus() {\n        if (!this.fileTransferSystem) {\n            return {\n                initialized: false,\n                status: 'not_initialized',\n                message: 'File transfer system not initialized'\n            };\n        }\n        \n        const activeTransfers = this.fileTransferSystem.getActiveTransfers();\n        const receivingTransfers = this.fileTransferSystem.getReceivingTransfers();\n        \n        return {\n            initialized: true,\n            status: 'ready',\n            activeTransfers: activeTransfers.length,\n            receivingTransfers: receivingTransfers.length,\n            totalTransfers: activeTransfers.length + receivingTransfers.length\n        };\n    }\n\n    // Cancel file transfer\n    cancelFileTransfer(fileId) {\n        if (!this.fileTransferSystem) return false;\n        return this.fileTransferSystem.cancelTransfer(fileId);\n    }\n\n    // Force cleanup of file transfer system\n    cleanupFileTransferSystem() {\n        if (this.fileTransferSystem) {\n            this._secureLog('info', '\uD83E\uDDF9 Force cleaning up file transfer system');\n            this.fileTransferSystem.cleanup();\n            this.fileTransferSystem = null;\n            return true;\n        }\n        return false;\n    }\n\n    // Reinitialize file transfer system\n    reinitializeFileTransfer() {\n        try {\n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n            }\n            this.initializeFileTransfer();\n            return true;\n        } catch (error) {\n            this._secureLog('error', 'Failed to reinitialize file transfer system:', { errorType: error?.constructor?.name || 'Unknown' });\n            return false;\n        }\n    }\n\n    // Set file transfer callbacks\n    setFileTransferCallbacks(onProgress, onReceived, onError, onIncomingRequest = null) {\n        this.onFileProgress = onProgress;\n        this.onFileReceived = onReceived;\n        this.onFileError = onError;\n        this.onIncomingFileRequest = onIncomingRequest;\n        \n        // Propagate callback updates into the live transfer system.\n        if (this.fileTransferSystem) {\n            this.fileTransferSystem.onProgress = onProgress;\n            this.fileTransferSystem.onFileReceived = onReceived;\n            this.fileTransferSystem.onError = onError;\n            this.fileTransferSystem.onIncomingFileRequest = onIncomingRequest;\n        }\n    }\n\n    getPendingIncomingFiles() {\n        if (!this.fileTransferSystem) return [];\n        return this.fileTransferSystem.getPendingIncomingTransfers();\n    }\n\n    async acceptIncomingFile(fileId) {\n        if (!this.fileTransferSystem) return false;\n        return this.fileTransferSystem.acceptIncomingFile(fileId);\n    }\n\n    async rejectIncomingFile(fileId) {\n        if (!this.fileTransferSystem) return false;\n        return this.fileTransferSystem.rejectIncomingFile(fileId);\n    }\n\n    async getReceivedFileObjectURL(fileId) {\n        if (!this.fileTransferSystem) return null;\n        return this.fileTransferSystem.getObjectURL(fileId);\n    }\n\n    revokeReceivedFileObjectURL(url) {\n        if (!this.fileTransferSystem) return;\n        this.fileTransferSystem.revokeObjectURL(url);\n    }\n\n    // ============================================\n    // SESSION ACTIVATION HANDLING\n    // ============================================\n\n    async handleSessionActivation(sessionData) {\n        try {\n            \n            // Update session state\n            this.currentSession = sessionData;\n            \n            // FIX: More lenient checks for activation\n            const hasKeys = !!(this.encryptionKey && this.macKey);\n            const hasSession = !!(sessionData.sessionId);\n            \n            // Force connection status if there is an active session\n            if (hasSession) {\n                this.onStatusChange('connected');\n\n            }\n\n        setTimeout(() => {\n            try {\n                this.initializeFileTransfer();\n            } catch (error) {\n                this._secureLog('warn', 'File transfer initialization failed during session activation:', { details: error.message });\n            }\n        }, 1000);\n            \n            \n            if (this.fileTransferSystem && this.isConnected()) {\n                \n                if (typeof this.fileTransferSystem.onSessionUpdate === 'function') {\n                    this.fileTransferSystem.onSessionUpdate({\n                        keyFingerprint: this.keyFingerprint,\n                        sessionSalt: this.sessionSalt,\n                        hasMacKey: !!this.macKey\n                    });\n                }\n            }\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to handle session activation:', { errorType: error?.constructor?.name || 'Unknown' });\n        }\n    }\n    // Method to check readiness of file transfers\ncheckFileTransferReadiness() {\n        const status = {\n            hasFileTransferSystem: !!this.fileTransferSystem,\n            hasDataChannel: !!this.dataChannel,\n            dataChannelState: this.dataChannel?.readyState,\n            isConnected: this.isConnected(),\n            isVerified: this.isVerified,\n            hasEncryptionKey: !!this.encryptionKey,\n            hasMacKey: !!this.macKey,\n            ready: false\n        };\n        \n        status.ready = status.hasFileTransferSystem && \n                    status.hasDataChannel && \n                    status.dataChannelState === 'open' && \n                    status.isConnected && \n                    status.isVerified;\n        return status;\n    }\n\n    // Method to force re-initialize file transfer system\n    forceReinitializeFileTransfer() {\n        try {\n            \n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n            }\n            \n            // Small delay before reinitialization\n            setTimeout(() => {\n                this.initializeFileTransfer();\n            }, 500);\n            \n            return true;\n        } catch (error) {\n            this._secureLog('error', 'Failed to force reinitialize file transfer:', { errorType: error?.constructor?.name || 'Unknown' });\n            return false;\n        }\n    }\n\n    // Method to get diagnostic information\n    getFileTransferDiagnostics() {\n        const diagnostics = {\n            timestamp: new Date().toISOString(),\n            webrtcManager: {\n                hasDataChannel: !!this.dataChannel,\n                dataChannelState: this.dataChannel?.readyState,\n                isConnected: this.isConnected(),\n                isVerified: this.isVerified,\n                isInitiator: this.isInitiator,\n                hasEncryptionKey: !!this.encryptionKey,\n                hasMacKey: !!this.macKey,\n                hasMetadataKey: !!this.metadataKey,\n                hasKeyFingerprint: !!this.keyFingerprint,\n                hasSessionSalt: !!this.sessionSalt\n            },\n            fileTransferSystem: null,\n            globalState: {\n                fileTransferActive: this._fileTransferActive || false,\n            hasFileTransferSystem: !!this.fileTransferSystem,\n            fileTransferSystemType: this.fileTransferSystem ? 'EnhancedSecureFileTransfer' : 'none'\n            }\n        };\n        \n        if (this.fileTransferSystem) {\n            try {\n                diagnostics.fileTransferSystem = this.fileTransferSystem.getSystemStatus();\n            } catch (error) {\n                diagnostics.fileTransferSystem = { error: error.message };\n            }\n        }\n        \n        return diagnostics;\n    }\n\n    getSupportedFileTypes() {\n        if (!this.fileTransferSystem) {\n            return { error: 'File transfer system not initialized' };\n        }\n        \n        try {\n            return this.fileTransferSystem.getSupportedFileTypes();\n        } catch (error) {\n            return { error: error.message };\n        }\n    }\n\n    validateFile(file) {\n        if (!this.fileTransferSystem) {\n            return { \n                isValid: false, \n                errors: ['File transfer system not initialized'],\n                fileType: null,\n                fileSize: file?.size || 0,\n                formattedSize: '0 B'\n            };\n        }\n        \n        try {\n            return this.fileTransferSystem.validateFile(file);\n        } catch (error) {\n            return { \n                isValid: false, \n                errors: [error.message],\n                fileType: null,\n                fileSize: file?.size || 0,\n                formattedSize: '0 B'\n            };\n        }\n    }\n\n    getFileTypeInfo() {\n        if (!this.fileTransferSystem) {\n            return { error: 'File transfer system not initialized' };\n        }\n        \n        try {\n            return this.fileTransferSystem.getFileTypeInfo();\n        } catch (error) {\n            return { error: error.message };\n        }\n    }\n\n    async forceInitializeFileTransfer(options = {}) {\n        const abortController = new AbortController();\n        const { signal = abortController.signal, timeout = 6000 } = options;\n\n        if (signal && signal !== abortController.signal) {\n            signal.addEventListener('abort', () => abortController.abort());\n        }\n        try {\n            if (!this.isVerified) {\n                throw new Error('Connection not verified');\n            }\n            \n            if (!this.dataChannel || this.dataChannel.readyState !== 'open') {\n                throw new Error('Data channel not open');\n            }\n            \n            if (!this.encryptionKey || !this.macKey) {\n                throw new Error('Encryption keys not ready');\n            }\n\n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n            }\n\n            this.initializeFileTransfer();\n\n            let attempts = 0;\n            const maxAttempts = 50;\n            const checkInterval = 100; \n            const maxWaitTime = maxAttempts * checkInterval; \n\n            const initializationPromise = new Promise((resolve, reject) => {\n                const checkInitialization = () => {\n                    if (abortController.signal.aborted) {\n                        reject(new Error('Operation cancelled'));\n                        return;\n                    }\n                    \n                    if (this.fileTransferSystem) {\n                        resolve(true);\n                        return;\n                    }\n                    \n                    if (attempts >= maxAttempts) {\n                        reject(new Error(`Initialization timeout after ${maxWaitTime}ms`));\n                        return;\n                    }\n                    \n                    attempts++;\n                    setTimeout(checkInitialization, checkInterval);\n                };\n                \n                checkInitialization();\n            });\n\n            await Promise.race([\n                initializationPromise,\n                new Promise((_, reject) => \n                    setTimeout(() => reject(new Error(`Global timeout after ${timeout}ms`)), timeout)\n                )\n            ]);\n            \n            if (this.fileTransferSystem) {\n                return true;\n            } else {\n                throw new Error('Force initialization timeout');\n            }\n            \n        } catch (error) {\n            if (error.name === 'AbortError' || error.message.includes('cancelled')) {\n                this._secureLog('info', 'File transfer initialization cancelled by user');\n                return { cancelled: true };\n            }\n            \n            this._secureLog('error', 'Force file transfer initialization failed:', { \n                errorType: error?.constructor?.name || 'Unknown',\n                message: error.message,\n                attempts: attempts\n            });\n            return { error: error.message, attempts: attempts };\n        }\n    }\n\n    cancelFileTransferInitialization() {\n        try {\n            if (this.fileTransferSystem) {\n                this.fileTransferSystem.cleanup();\n                this.fileTransferSystem = null;\n                this._fileTransferActive = false;\n                this._secureLog('info', 'File transfer initialization cancelled');\n                return true;\n            }\n            return false;\n        } catch (error) {\n            this._secureLog('error', 'Failed to cancel file transfer initialization:', { \n                errorType: error?.constructor?.name || 'Unknown' \n            });\n            return false;\n        }\n    }\n    \n    getFileTransferSystemStatus() {\n        if (!this.fileTransferSystem) {\n            return { available: false, status: 'not_initialized' };\n        }\n        \n        try {\n            const status = this.fileTransferSystem.getSystemStatus();\n            return {\n                available: true,\n                status: status.status || 'unknown',\n                activeTransfers: status.activeTransfers || 0,\n                receivingTransfers: status.receivingTransfers || 0,\n                systemType: 'EnhancedSecureFileTransfer'\n            };\n        } catch (error) {\n            this._secureLog('error', 'Failed to get file transfer system status:', { \n                errorType: error?.constructor?.name || 'Unknown' \n            });\n            return { available: false, status: 'error', error: error.message };\n        }\n    }\n\n    _validateNestedEncryptionSecurity() {\n        if (this.securityFeatures.hasNestedEncryption && this.nestedEncryptionKey) {\n            //   Test secure IV generation with reuse prevention\n            try {\n                const testIV1 = this._generateSecureIV(EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE, 'securityTest1');\n                const testIV2 = this._generateSecureIV(EnhancedSecureWebRTCManager.SIZES.NESTED_ENCRYPTION_IV_SIZE, 'securityTest2');\n                \n                //   Verify IVs are different and properly tracked\n                if (testIV1.every((byte, index) => byte === testIV2[index])) {\n                    this._secureLog('error', 'CRITICAL: Nested encryption security validation failed - IVs are identical!');\n                    return false;\n                }\n                \n                //   Verify IV tracking system is working\n                const stats = this._getIVTrackingStats();\n                if (stats.totalIVs < 2) {\n                    this._secureLog('error', 'CRITICAL: IV tracking system not working properly');\n                    return false;\n                }\n                \n                this._secureLog('info', 'Nested encryption security validation passed - secure IV generation working');\n                return true;\n            } catch (error) {\n                this._secureLog('error', 'CRITICAL: Nested encryption security validation failed:', {\n                    errorType: error.constructor.name,\n                    errorMessage: error.message\n                });\n                return false;\n            }\n        }\n        return true;\n    }\n\n    // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n    //   ENCRYPTED VOICE / VIDEO CALLS\n    //\n    //   Media is carried by the existing RTCPeerConnection: audio/video tracks\n    //   are bundled onto the same DTLS-SRTP transport already used by the data\n    //   channel, so they are end-to-end encrypted with the very connection that\n    //   in-person SAS verification authenticated. Renegotiation SDP travels over\n    //   the verified data channel (never a server), so the media's DTLS\n    //   fingerprints are authenticated end-to-end too. Calls are therefore only\n    //   permitted once the session is connected AND SAS-verified.\n    // \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\n    getCallState() {\n        return { ...this.callState };\n    }\n\n    /**\n     * Subscribe to call-state changes without taking the onCallStateChanged slot.\n     * @param {(state: object) => void} listener\n     * @returns {() => void} unsubscribe\n     */\n    addCallStateListener(listener) {\n        if (typeof listener !== 'function') return () => {};\n        this._callStateListeners.add(listener);\n        return () => this._callStateListeners.delete(listener);\n    }\n\n    removeCallStateListener(listener) {\n        this._callStateListeners.delete(listener);\n    }\n\n    /**\n     * Mark this session as one leg of a group call, or clear it.\n     *\n     * While set, an inbound call offer is answered without ringing. That is safe\n     * only because of who sets it: the group-call controller, and only while the\n     * local user is in that group's call. Nothing on the wire can set it, so a\n     * peer cannot cause this session to open a microphone on its own.\n     *\n     * @param {string|null} groupCallId\n     */\n    setCallGroupContext(groupCallId) {\n        this._callGroupContext = (typeof groupCallId === 'string' && groupCallId) ? groupCallId : null;\n        // Reflect it immediately: the 1:1 call UI uses this field to stay out of\n        // the way of a group call running on the same session.\n        this._updateCallState({});\n\n        // An offer that arrived BEFORE we knew this session was a call leg is\n        // sitting here ringing, and nothing would ever pick it up: the auto-answer\n        // is checked when the offer lands, not afterwards. That window is real \u2014\n        // a peer can dial the moment they join, which can beat the announcement\n        // telling us they joined \u2014 and the visible symptom was one member stuck\n        // at \"connecting\" for the whole call while the other's phone rang for a\n        // call they had already agreed to. Answer it now.\n        if (this._callGroupContext && this._pendingCallOffer && this.callState.phase === 'incoming') {\n            this.acceptCall().catch((error) => {\n                this._secureLog('warn', '\u26A0\uFE0F Failed to answer a group call leg that was already ringing', {\n                    errorType: error?.constructor?.name\n                });\n            });\n        }\n    }\n\n    /**\n     * Use a capture owned by somebody else for the next call on this session.\n     *\n     * The group-call controller captures the microphone and camera ONCE and\n     * hands the same stream to every leg. This manager attaches its tracks and\n     * must never stop them: the other legs are still sending them.\n     *\n     * @param {MediaStream|null} stream\n     */\n    setExternalMediaStream(stream) {\n        this._externalMediaStream = stream || null;\n    }\n\n    /** True when the live capture belongs to somebody else. */\n    _usingExternalMedia() {\n        return !!this._externalMediaStream && this.localMediaStream === this._externalMediaStream;\n    }\n\n    getRemoteMediaStream() {\n        return this.remoteMediaStream;\n    }\n\n    getLocalMediaStream() {\n        return this.localMediaStream;\n    }\n\n    // Rebuild the remote MediaStream from the PC's current receivers. This is the\n    // reliable source of inbound tracks \u2014 ontrack does not re-fire for a reused\n    // transceiver on a later call, so relying on it dropped remote audio/video.\n    _refreshRemoteStream() {\n        const pc = this.peerConnection;\n        if (!pc || typeof pc.getReceivers !== 'function') return;\n        const live = pc.getReceivers()\n            .map(r => r.track)\n            .filter(t => t && (t.kind === 'audio' || t.kind === 'video') && t.readyState === 'live');\n        const prev = this.remoteMediaStream ? this.remoteMediaStream.getTracks() : [];\n        const unchanged = prev.length === live.length && prev.every(t => live.includes(t));\n        if (!unchanged) {\n            // Build a NEW MediaStream so the UI's srcObject-changed check fires and\n            // re-attaches (an element does not reliably pick up a track added to a\n            // stream that is already its srcObject).\n            this.remoteMediaStream = new MediaStream(live);\n        }\n        this._updateCallState({ remoteHasVideo: live.some(t => t.kind === 'video') });\n    }\n\n    // Remote tracks can take a beat to go 'live' after setRemoteDescription, and\n    // ontrack may not fire for reused transceivers \u2014 so refresh now and shortly\n    // after to reliably pick up the inbound audio/video.\n    _scheduleRemoteRefresh() {\n        this._refreshRemoteStream();\n        setTimeout(() => { try { this._refreshRemoteStream(); } catch (_) {} }, 300);\n        setTimeout(() => { try { this._refreshRemoteStream(); } catch (_) {} }, 1200);\n    }\n\n    _updateCallState(patch) {\n        this.callState = { ...this.callState, ...patch, groupCallId: this._callGroupContext };\n        const snapshot = this.getCallState();\n        // Adaptation controller follows the call lifecycle: run while active,\n        // stop when the call ends.\n        if (snapshot.phase === 'active') this._startAdaptation();\n        else if (snapshot.phase === 'idle') this._stopAdaptation();\n        try { this.onCallStateChanged?.(snapshot); } catch (_) {}\n        // A single callback property cannot serve two owners, and a group call\n        // has two: the group's media controller and whatever UI is bound to this\n        // session. Listeners are additive so neither has to displace the other.\n        for (const listener of this._callStateListeners) {\n            try { listener(snapshot); } catch (_) {}\n        }\n        if (typeof document !== 'undefined') {\n            try {\n                this._dispatchAppEvent?.(new CustomEvent('securebit-call-state', {\n                    detail: { managerId: this._managerId || null, state: snapshot }\n                }));\n            } catch (_) {}\n        }\n    }\n\n    _callCanStart() {\n        const connected = typeof this.isConnected === 'function' ? this.isConnected() : false;\n        const channelOpen = this.dataChannel && this.dataChannel.readyState === 'open';\n        // SAS verification is mandatory: it is what authenticates the DTLS\n        // transport the media rides on, closing the MITM window.\n        // A call must also not be placed onto a path that is mid-repair \u2014 the\n        // media renegotiation would race the ICE restart on the same connection.\n        const ok = !!(connected && channelOpen && this.isVerified && !this.isReconnecting());\n        return ok;\n    }\n\n    async _sendCallSignal(type, data) {\n        const sent = await this.sendSystemMessage({ type, ...data });\n        return sent;\n    }\n\n    _audioConstraints() {\n        return { echoCancellation: true, noiseSuppression: true, autoGainControl: true };\n    }\n    _videoConstraints() {\n        return { facingMode: this._callFacingMode, width: { ideal: 1280 }, height: { ideal: 720 } };\n    }\n\n    async _acquireLocalMedia(withVideo) {\n        // Fresh capture each call (the mic/camera is fully released on hang-up, so\n        // the OS indicator goes off). Senders are reused across calls via\n        // replaceTrack; addTrack only on first use.\n        // A group call captures once and shares the result across every leg, so\n        // there is nothing to capture here \u2014 just tracks to attach.\n        const stream = this._externalMediaStream || await navigator.mediaDevices.getUserMedia({\n            audio: this._audioConstraints(),\n            video: withVideo ? this._videoConstraints() : false\n        });\n        this.localMediaStream = stream;\n        const pc = this.peerConnection;\n        const audioTrack = stream.getAudioTracks()[0] || null;\n        const videoTrack = stream.getVideoTracks()[0] || null;\n        if (audioTrack) {\n            if (this._callAudioSender) await this._callAudioSender.replaceTrack(audioTrack);\n            else this._callAudioSender = pc.addTrack(audioTrack, stream);\n        }\n        if (videoTrack) {\n            if (this._callVideoSender) await this._callVideoSender.replaceTrack(videoTrack);\n            else this._callVideoSender = pc.addTrack(videoTrack, stream);\n        }\n        this._applyCallCodecPrefs();   // codec prefs BEFORE createOffer/createAnswer\n        return stream;\n    }\n\n    // Fully release the mic/camera \u2014 only on session disconnect, not between calls.\n    _stopLocalMediaPermanently() {\n        try {\n            if (this.localMediaStream && !this._usingExternalMedia()) {\n                for (const t of this.localMediaStream.getTracks()) { try { t.stop(); } catch (_) {} }\n            }\n        } catch (_) {}\n        this.localMediaStream = null;\n    }\n\n    // Codec preferences on the audio (RED\u2192Opus) and video (VP9\u2192AV1\u2192H264\u2192VP8)\n    // transceivers created by addTrack. Called before offer/answer creation.\n    _applyCallCodecPrefs() {\n        try {\n            const trs = this.peerConnection?.getTransceivers?.() || [];\n            const audioTr = trs.find(t => t.sender && t.sender === this._callAudioSender);\n            if (audioTr) applyAudioCodecPreferences(audioTr);\n            const videoTr = trs.find(t => t.sender && t.sender === this._callVideoSender);\n            if (videoTr) applyVideoCodecPreferences(videoTr);\n        } catch (_) {}\n    }\n\n    // Munge locally-created call SDP: Opus FEC/DTX/bitrate fmtp + transport\n    // feedback (TWCC/NACK/PLI/FIR/REMB) & the TWCC header extension. Both peers\n    // run this, so the negotiated result carries it.\n    _mungeCallSdp(sdp) {\n        try {\n            let out = applyOpusSettings(sdp, AUDIO_CONFIG.opusFmtp);\n            out = applyTransport(out, TRANSPORT_CONFIG);\n            return out;\n        } catch (e) { return sdp; }\n    }\n\n    // setLocalDescription with progressive fallback so munging can never break a\n    // call: try full munge \u2192 Opus-only munge \u2192 raw. (Some browsers reject added\n    // rtcp-fb/extmap lines in a local description; the raw path always works.)\n    async _setLocalMunged(desc) {\n        const pc = this.peerConnection;\n        try {\n            await pc.setLocalDescription({ type: desc.type, sdp: this._mungeCallSdp(desc.sdp) });\n            return;\n        } catch (e) {\n            try {\n                await pc.setLocalDescription({ type: desc.type, sdp: applyOpusSettings(desc.sdp, AUDIO_CONFIG.opusFmtp) });\n                return;\n            } catch (e2) {\n                await pc.setLocalDescription(desc);\n            }\n        }\n    }\n\n    // Apply sender-level params after setLocalDescription, when senders have live\n    // parameters: audio priority/bitrate, video SVC/bitrate/degradation.\n    async _applyCallSenderParams() {\n        try {\n            if (this._callAudioSender) await configureAudioSender(this._callAudioSender, {});\n            if (this._callVideoSender) await configureVideoSender(this._callVideoSender, {});\n        } catch (_) {}\n    }\n\n    // Start the reactive bitrate controller for the active call. Idempotent. It\n    // also feeds the connection-quality indicator shown in the call UI.\n    _startAdaptation() {\n        if (this._adaptationController || !this.peerConnection) return;\n        try {\n            this._adaptationController = new NetworkAdaptationController(this.peerConnection, {\n                getVideoSender: () => this._callVideoSender,\n                ceilingBitrate: 1500000,\n                onQuality: (q) => {\n                    if (q !== this.callState.quality) this._updateCallState({ quality: q });\n                },\n            });\n            this._adaptationController.start();\n        } catch (_) {}\n    }\n\n    _stopAdaptation() {\n        if (this._adaptationController) {\n            try { this._adaptationController.stop(); } catch (_) {}\n            this._adaptationController = null;\n        }\n    }\n\n    // Turn a getUserMedia failure into a clear, user-visible reason (shown in the\n    // chat as a system message) + a machine-readable callState.error code. These\n    // are device/permission problems, NOT connection problems \u2014 surfacing them\n    // stops the call from looking like it \"silently drops\".\n    _notifyCallMediaError(error, wantVideo) {\n        const name = error?.name || '';\n        const dev = wantVideo ? 'camera/microphone' : 'microphone';\n        let msg, code;\n        if (name === 'NotAllowedError') {\n            code = 'permission_denied';\n            msg = `\u26A0\uFE0F Call not started \u2014 ${dev} access is blocked. Allow it for this site in the browser, and enable your browser under System Settings \u2192 Privacy & Security \u2192 ${wantVideo ? 'Camera/Microphone' : 'Microphone'}, then try again.`;\n        } else if (name === 'NotFoundError' || name === 'OverconstrainedError') {\n            code = 'device_not_found';\n            msg = `\u26A0\uFE0F Call not started \u2014 no ${dev} found on this device.`;\n        } else if (name === 'NotReadableError' || name === 'AbortError') {\n            code = 'device_busy';\n            msg = `\u26A0\uFE0F Call not started \u2014 your ${dev} is in use by another app. Close it and try again.`;\n        } else {\n            code = 'media_failed';\n            msg = `\u26A0\uFE0F Call not started \u2014 could not access ${dev}${name ? ' (' + name + ')' : ''}.`;\n        }\n        try { this.deliverMessageToUI(msg, 'system'); } catch (_) {}\n        return code;\n    }\n\n    // Caller side: begin an outgoing call.\n    async startCall(withVideo = false) {\n        if (!this._callCanStart()) {\n            this._updateCallState({ error: 'not_verified' });\n            throw new Error('Calls require a connected, SAS-verified session.');\n        }\n        if (this.callState.active) {\n            this._secureLog('warn', '\u26A0\uFE0F startCall ignored \u2014 a call is already active');\n            return;\n        }\n        const callId = (crypto?.randomUUID?.() || String(Date.now()) + Math.random().toString(36).slice(2));\n        this._updateCallState({\n            active: true, phase: 'outgoing', withVideo, callId,\n            micEnabled: true, cameraEnabled: withVideo, remoteHasVideo: false, error: null\n        });\n        try {\n            await this._acquireLocalMedia(withVideo);\n            this._callMakingOffer = true;\n            const offer = await this.peerConnection.createOffer();\n            await this._setLocalMunged(offer);\n            this._callMakingOffer = false;\n            await this._applyCallSenderParams();\n            await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_OFFER, {\n                callId, withVideo, sdp: this.peerConnection.localDescription.sdp\n            });\n        } catch (error) {\n            this._callMakingOffer = false;\n            this._secureLog('error', '\u274C startCall failed', { errorType: error?.constructor?.name });\n            const code = this._notifyCallMediaError(error, withVideo);\n            await this._teardownCallMedia();\n            this._updateCallState({ active: false, phase: 'idle', error: code });\n            throw error;\n        }\n    }\n\n    // Callee side: an inbound call offer arrived \u2192 surface it to the UI.\n    async _onIncomingCallOffer(data) {\n        // A renegotiation of an ALREADY-active call (e.g. audio \u2192 video upgrade,\n        // or the peer turning their camera on) is auto-accepted transparently.\n        if (this.callState.active && (this.callState.phase === 'active' || this.callState.phase === 'connecting')) {\n            await this._answerCallOffer(data, /* renegotiation */ true);\n            if (data.withVideo) this._updateCallState({ withVideo: true });\n            return;\n        }\n        this._pendingCallOffer = data;\n        this._updateCallState({\n            active: true, phase: 'incoming', withVideo: !!data.withVideo,\n            callId: data.callId, remoteHasVideo: !!data.withVideo, error: null\n        });\n        // One leg of a group call the user has already joined: answer it rather\n        // than ring. The consent was given once, for the whole call \u2014 see\n        // setCallGroupContext for why nothing on the wire can reach this branch.\n        if (this._callGroupContext) {\n            await this.acceptCall();\n        }\n    }\n\n    async _answerCallOffer(data, renegotiation = false) {\n        await this.peerConnection.setRemoteDescription({ type: 'offer', sdp: data.sdp });\n        // Attach OUR media on every fresh accept. Crucial: _acquireLocalMedia must\n        // run even when a persistent localMediaStream already exists \u2014 teardown\n        // detached the tracks from the senders (replaceTrack(null)), and this\n        // re-attaches them. Without it the answerer sends silence/black (the \"no\n        // sound when I pick up / on the reverse call\" bug). It reuses the live\n        // capture internally, so no extra getUserMedia. Skip only on renegotiation\n        // (upgrade to video), where the senders already carry live tracks.\n        if (!renegotiation) {\n            await this._acquireLocalMedia(!!data.withVideo);\n        }\n        const answer = await this.peerConnection.createAnswer();\n        await this._setLocalMunged(answer);\n        await this._applyCallSenderParams();\n        await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_ANSWER, {\n            callId: data.callId, sdp: this.peerConnection.localDescription.sdp\n        });\n    }\n\n    // Callee accepts the ringing call.\n    async acceptCall() {\n        const data = this._pendingCallOffer;\n        if (!data) return;\n        this._pendingCallOffer = null;\n        this._updateCallState({ phase: 'connecting', cameraEnabled: !!data.withVideo });\n        try {\n            await this._answerCallOffer(data, false);\n            this._updateCallState({ phase: 'active' });\n            this._scheduleRemoteRefresh();\n        } catch (error) {\n            this._secureLog('error', '\u274C acceptCall failed', { errorType: error?.constructor?.name });\n            const code = this._notifyCallMediaError(error, !!data.withVideo);\n            // Tell the caller we couldn't pick up so their ringing UI stops.\n            try { await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_END, { callId: data.callId }); } catch (_) {}\n            await this._teardownCallMedia();\n            this._updateCallState({ active: false, phase: 'idle', error: code });\n        }\n    }\n\n    // Callee rejects the ringing call.\n    async declineCall() {\n        const callId = this.callState.callId;\n        this._pendingCallOffer = null;\n        await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_DECLINE, { callId });\n        this._updateCallState({ active: false, phase: 'idle', withVideo: false, remoteHasVideo: false });\n    }\n\n    // Either side hangs up.\n    async endCall(sendSignal = true) {\n        const callId = this.callState.callId;\n        if (sendSignal && callId) {\n            try { await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_END, { callId }); } catch (_) {}\n        }\n        await this._teardownCallMedia();\n        this._updateCallState({\n            active: false, phase: 'idle', withVideo: false, micEnabled: true,\n            cameraEnabled: false, remoteHasVideo: false, callId: null, quality: null\n        });\n    }\n\n    async _teardownCallMedia() {\n        this._stopAdaptation();\n        const pc = this.peerConnection;\n        try {\n            // 1. STOP our capture tracks \u2192 releases the mic/camera so the OS\n            //    indicator goes off after the call. A capture we borrowed from a\n            //    group call is left alone: the other legs are still sending it,\n            //    and stopping it here would mute this device for all of them.\n            if (this.localMediaStream && !this._usingExternalMedia()) {\n                for (const track of this.localMediaStream.getTracks()) { try { track.stop(); } catch (_) {} }\n            }\n            // 2. Do NOT stop the REMOTE receiver tracks: the transceivers are reused\n            //    on the next call and ontrack won't re-fire, so a stopped receiver\n            //    track would leave the next call with NO remote audio/video. They go\n            //    'muted' when the peer stops sending (idle, negligible CPU) and are\n            //    fully released in disconnect(). Just detach our senders.\n            if (pc) {\n                for (const sender of [this._callAudioSender, this._callVideoSender].filter(Boolean)) {\n                    try { await sender.replaceTrack(null); } catch (_) {}\n                }\n            }\n        } catch (_) {}\n        this.localMediaStream = null;\n        this.remoteMediaStream = null;\n        // _callAudioSender/_callVideoSender are KEPT (reused next call; reset only\n        // when the PC is rebuilt \u2014 see createPeerConnection).\n        this._callMakingOffer = false;\n        // If we created an offer that was never answered (call declined / failed\n        // mid-negotiation), the PC is stuck in 'have-local-offer'. Roll it back to\n        // 'stable' so the data channel and future calls keep working.\n        try {\n            if (this.peerConnection &&\n                (this.peerConnection.signalingState === 'have-local-offer' ||\n                 this.peerConnection.signalingState === 'have-local-pranswer')) {\n                await this.peerConnection.setLocalDescription({ type: 'rollback' });\n            }\n        } catch (_) {}\n        // No teardown renegotiation otherwise: stopping the tracks fires\n        // 'ended'/'mute' on the peer's receivers, and the next startCall\n        // renegotiates the PC from scratch anyway. Skipping it avoids offer/answer\n        // glare when both ends hang up at once; dormant transceivers are reused.\n    }\n\n    // Mute / unmute the microphone (no renegotiation \u2014 just toggles the track).\n    setMicEnabled(enabled) {\n        if (this.localMediaStream) {\n            this.localMediaStream.getAudioTracks().forEach(t => { t.enabled = enabled; });\n        }\n        this._updateCallState({ micEnabled: enabled });\n    }\n\n    toggleMic() { this.setMicEnabled(!this.callState.micEnabled); }\n\n    // Turn the camera on/off. Turning it on for an audio-only call adds a video\n    // track and renegotiates (an in-call \"upgrade to video\").\n    async setCameraEnabled(enabled) {\n        if (!enabled) {\n            if (this.localMediaStream) {\n                this.localMediaStream.getVideoTracks().forEach(t => { t.enabled = false; });\n            }\n            this._updateCallState({ cameraEnabled: false });\n            return;\n        }\n        // Enabling: reuse an existing (disabled) track, otherwise add one.\n        const existing = this.localMediaStream?.getVideoTracks?.() || [];\n        if (existing.length) {\n            existing.forEach(t => { t.enabled = true; });\n            this._updateCallState({ cameraEnabled: true, withVideo: true });\n            return;\n        }\n        await this.upgradeToVideo();\n    }\n\n    async toggleCamera() { await this.setCameraEnabled(!this.callState.cameraEnabled); }\n\n    // Add a camera to an in-progress audio call and renegotiate.\n    async upgradeToVideo() {\n        if (!this.localMediaStream) return;\n        try {\n            // Add ONLY a camera track to the in-call stream (don't re-capture audio).\n            const camStream = await navigator.mediaDevices.getUserMedia({ video: this._videoConstraints() });\n            const videoTrack = camStream.getVideoTracks()[0];\n            if (!videoTrack) return;\n            await this.addVideoTrack(videoTrack);\n        } catch (error) {\n            this._secureLog('error', '\u274C upgradeToVideo failed', { errorType: error?.constructor?.name });\n            this._updateCallState({ cameraEnabled: false, error: 'camera_failed' });\n        }\n    }\n\n    /**\n     * Put an already-captured camera track on this call and renegotiate.\n     *\n     * Split out of upgradeToVideo so a group call can capture its camera once\n     * and add the SAME track to every leg \u2014 N captures of one camera is both\n     * wasteful and, on several devices, simply not permitted.\n     *\n     * @param {MediaStreamTrack} videoTrack\n     */\n    async addVideoTrack(videoTrack) {\n        if (!videoTrack || !this.localMediaStream || !this.peerConnection) return;\n        if (!this.localMediaStream.getVideoTracks().includes(videoTrack)) {\n            this.localMediaStream.addTrack(videoTrack);\n        }\n        if (this._callVideoSender) await this._callVideoSender.replaceTrack(videoTrack);\n        else this._callVideoSender = this.peerConnection.addTrack(videoTrack, this.localMediaStream);\n        this._applyCallCodecPrefs();\n        this._updateCallState({ cameraEnabled: true, withVideo: true });\n        await this._renegotiateCall();\n    }\n\n    /**\n     * Swap the outgoing camera track without renegotiating.\n     *\n     * The group's camera flip captures one new track and hands it to every leg;\n     * replaceTrack keeps the transceiver, so no leg has to renegotiate for it.\n     *\n     * @param {MediaStreamTrack} videoTrack\n     */\n    async replaceVideoTrack(videoTrack) {\n        if (!videoTrack || !this._callVideoSender) return;\n        await this._callVideoSender.replaceTrack(videoTrack);\n    }\n\n    // Flip between front/back cameras without renegotiation (replaceTrack).\n    async switchCamera() {\n        if (!this._callVideoSender || !this.localMediaStream) return;\n        this._callFacingMode = this._callFacingMode === 'user' ? 'environment' : 'user';\n        try {\n            const camStream = await navigator.mediaDevices.getUserMedia({\n                video: { facingMode: this._callFacingMode }\n            });\n            const newTrack = camStream.getVideoTracks()[0];\n            const old = this.localMediaStream.getVideoTracks()[0];\n            if (old) { this.localMediaStream.removeTrack(old); try { old.stop(); } catch (_) {} }\n            this.localMediaStream.addTrack(newTrack);\n            await this._callVideoSender.replaceTrack(newTrack);\n        } catch (error) {\n            this._secureLog('warn', '\u26A0\uFE0F switchCamera failed', { errorType: error?.constructor?.name });\n        }\n    }\n\n    async _renegotiateCall() {\n        if (this._callMakingOffer) return;\n        try {\n            this._callMakingOffer = true;\n            const offer = await this.peerConnection.createOffer();\n            await this._setLocalMunged(offer);\n            await this._applyCallSenderParams();\n            await this._sendCallSignal(EnhancedSecureWebRTCManager.MESSAGE_TYPES.CALL_OFFER, {\n                callId: this.callState.callId, withVideo: this.callState.withVideo,\n                sdp: this.peerConnection.localDescription.sdp\n            });\n        } finally {\n            this._callMakingOffer = false;\n        }\n    }\n\n    // Central inbound call-signal router (called from processMessage).\n    async _handleCallSignal(type, data) {\n        const T = EnhancedSecureWebRTCManager.MESSAGE_TYPES;\n        switch (type) {\n            case T.CALL_OFFER: {\n                await this._onIncomingCallOffer(data);\n                return;\n            }\n            case T.CALL_ANSWER: {\n                try {\n                    if (this.peerConnection.signalingState === 'have-local-offer') {\n                        await this.peerConnection.setRemoteDescription({ type: 'answer', sdp: data.sdp });\n                    }\n                    if (this.callState.phase === 'outgoing') this._updateCallState({ phase: 'active' });\n                    this._scheduleRemoteRefresh();   // caller: pick up the answerer's tracks\n                } catch (e) {\n                    this._secureLog('warn', '\u26A0\uFE0F Failed to apply call answer', { errorType: e?.constructor?.name });\n                }\n                return;\n            }\n            case T.CALL_ICE: {\n                try { if (data.candidate) await this.peerConnection.addIceCandidate(data.candidate); } catch (_) {}\n                return;\n            }\n            case T.CALL_DECLINE: {\n                await this._teardownCallMedia();\n                this._updateCallState({ active: false, phase: 'idle', withVideo: false, remoteHasVideo: false, error: 'declined' });\n                return;\n            }\n            case T.CALL_END: {\n                await this.endCall(/* sendSignal */ false);\n                return;\n            }\n            default: return;\n        }\n    }\n}\n\nclass SecureKeyStorage {\n    constructor(masterKeyManager = null) {\n        // Use WeakMap for automatic garbage collection of unused keys\n        this._keyStore = new WeakMap();\n        this._keyMetadata = new Map(); // Metadata doesn't need WeakMap\n        this._keyReferences = new Map(); // Strong references for active keys\n        \n        // Use secure master key manager instead of global key\n        this._masterKeyManager = masterKeyManager || new SecureMasterKeyManager();\n        \n        // Initialize persistent storage for extractable keys\n        this._persistentStorage = new SecurePersistentKeyStorage(this._masterKeyManager);\n        \n        // Setup master key manager callbacks\n        this._setupMasterKeyCallbacks();\n\n        setTimeout(() => {\n            if (!this.validateStorageIntegrity()) {\n                this._secureLog('error', 'CRITICAL: Key storage integrity check failed');\n            }\n        }, 100);\n\n    }\n\n    /**\n     * SecureKeyStorage calls this._secureLog() in a dozen places but never\n     * defined it, so every one of those calls threw a TypeError instead of\n     * logging \u2014 including the integrity-violation and key-storage-failure paths,\n     * i.e. exactly the reports worth having. Delegate to the shared sanitising\n     * logger, which redacts key-shaped values before anything reaches the console.\n     */\n    _secureLog(level, message, context = {}) {\n        try {\n            const logger = (typeof window !== 'undefined' && window.EnhancedSecureCryptoUtils?.secureLog) || null;\n            if (logger && typeof logger.log === 'function') {\n                logger.log(level, `[KeyStorage] ${message}`, context);\n                return;\n            }\n        } catch (_) { /* fall through to console */ }\n\n        if (level === 'error') console.error(`[KeyStorage] ${message}`);\n        else if (level === 'warn') console.warn(`[KeyStorage] ${message}`);\n    }\n\n    /**\n     * Setup callbacks for master key manager\n     */\n    _setupMasterKeyCallbacks() {\n        // No password prompt by default. The previous default called window.prompt(),\n        // which shows the master password in clear text with no masking, is trivially\n        // imitated by any page content (so it trains users to type their password into\n        // an unauthenticated dialog), and leaves the password in an immutable JS string\n        // that can never be wiped. Failing closed is the safer default: the application\n        // owns the password UI (see components/ui/PasswordModal.jsx) and must install it\n        // via setMasterKeyPasswordCallback().\n        this._masterKeyManager.setPasswordRequiredCallback((isRetry, callback) => {\n            this._secureLog('error', 'Master key password requested but no password UI is installed', {\n                isRetry: !!isRetry\n            });\n            callback(null); // rejects the unlock rather than prompting insecurely\n        });\n        \n        this._masterKeyManager.setSessionExpiredCallback((reason) => {\n            console.warn(`Master key session expired: ${reason}`);\n            // Application should handle this event\n        });\n        \n        this._masterKeyManager.setUnlockedCallback(() => {\n            console.log('Master key unlocked successfully');\n        });\n    }\n    \n    /**\n     * Set custom password callback\n     */\n    setPasswordCallback(callback) {\n        this._masterKeyManager.setPasswordRequiredCallback(callback);\n    }\n    \n    /**\n     * Set custom session expired callback\n     */\n    setSessionExpiredCallback(callback) {\n        this._masterKeyManager.setSessionExpiredCallback(callback);\n    }\n    \n    /**\n     * Get master key (with automatic unlock if needed)\n     */\n    async _ensureMasterKeyUnlocked() {\n        if (!this._masterKeyManager.isUnlocked()) {\n            await this._masterKeyManager.unlock();\n        }\n    }\n\n    async storeKey(keyId, cryptoKey, metadata = {}) {\n        if (!(cryptoKey instanceof CryptoKey)) {\n            throw new Error('Only CryptoKey objects can be stored');\n        }\n\n        try {\n            // For non-extractable keys, store only in-memory reference\n            if (!cryptoKey.extractable) {\n                this._keyReferences.set(keyId, cryptoKey);\n                this._keyMetadata.set(keyId, {\n                    ...metadata,\n                    created: Date.now(),\n                    lastAccessed: Date.now(),\n                    extractable: false,\n                    persistent: false,\n                    encrypted: false\n                });\n                return true;\n            }\n\n            // For extractable keys, use persistent storage with encryption\n            await this._persistentStorage.storeExtractableKey(keyId, cryptoKey, metadata);\n            \n            // Also store in memory for immediate access\n            this._keyReferences.set(keyId, cryptoKey);\n            this._keyMetadata.set(keyId, {\n                ...metadata,\n                created: Date.now(),\n                lastAccessed: Date.now(),\n                extractable: true,\n                persistent: true,\n                encrypted: true\n            });\n\n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to store key securely', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return false;\n        }\n    }\n\n    async retrieveKey(keyId) {\n        try {\n            // Check if key is in memory first\n            if (this._keyReferences.has(keyId)) {\n                const metadata = this._keyMetadata.get(keyId);\n                if (metadata) {\n                    metadata.lastAccessed = Date.now();\n                }\n                return this._keyReferences.get(keyId);\n            }\n            \n            // Try to restore from persistent storage\n            const restoredKey = await this._persistentStorage.retrieveKey(keyId);\n            if (restoredKey) {\n                // Update memory cache\n                this._keyReferences.set(keyId, restoredKey);\n                \n                // Update or create metadata\n                const existingMetadata = this._keyMetadata.get(keyId);\n                this._keyMetadata.set(keyId, {\n                    ...existingMetadata,\n                    lastAccessed: Date.now(),\n                    restoredFromPersistent: true\n                });\n                \n                return restoredKey;\n            }\n            \n            return null;\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to retrieve key', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return null;\n        }\n    }\n\n    async _encryptKeyData(keyData) {\n        const dataToEncrypt = typeof keyData === 'object' \n            ? JSON.stringify(keyData) \n            : keyData;\n        \n        const encoder = new TextEncoder();\n        const data = encoder.encode(dataToEncrypt);\n        \n        await this._ensureMasterKeyUnlocked();\n        const { encryptedData, iv } = await this._masterKeyManager.encryptBytes(data);\n        // Return IV + encrypted data\n        const result = new Uint8Array(iv.length + encryptedData.byteLength);\n        result.set(iv, 0);\n        result.set(encryptedData, iv.length);\n        return result;\n    }\n\n    async _decryptKeyData(encryptedData) {\n        const iv = encryptedData.slice(0, 12);\n        const data = encryptedData.slice(12);\n        \n        await this._ensureMasterKeyUnlocked();\n        const decryptedData = await this._masterKeyManager.decryptBytes(data, iv);\n\n        const decoder = new TextDecoder();\n        const jsonString = decoder.decode(decryptedData);\n        \n        try {\n            return JSON.parse(jsonString);\n        } catch {\n            return decryptedData;\n        }\n    }\n\n    async secureWipe(keyId) {\n        const cryptoKey = this._keyReferences.get(keyId);\n        \n        if (cryptoKey) {\n            // Remove from WeakMap (will be GC'd)\n            this._keyStore.delete(cryptoKey);\n            // Remove strong reference\n            this._keyReferences.delete(keyId);\n            // Remove metadata\n            this._keyMetadata.delete(keyId);\n        }\n\n        // Schedule natural cleanup\n        await this._performNaturalCleanup();\n    }\n\n    async secureWipeAll() {\n        // Clear persistent storage\n        try {\n            await this._persistentStorage.clearAll();\n        } catch (error) {\n            this._secureLog('error', 'Failed to clear persistent storage', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n        }\n        \n        // Clear all references\n        this._keyReferences.clear();\n        this._keyMetadata.clear();\n        \n        // WeakMap entries will be garbage collected\n        this._keyStore = new WeakMap();\n        \n        // Schedule natural cleanup\n        await this._performNaturalCleanup();\n    }\n\n    //   Validate storage integrity\n    validateStorageIntegrity() {\n        const violations = [];\n        \n        for (const [keyId, metadata] of this._keyMetadata.entries()) {\n            // Check: extractable keys must be encrypted\n            if (metadata.extractable === true && metadata.encrypted !== true) {\n                violations.push({\n                    keyId,\n                    type: 'EXTRACTABLE_KEY_NOT_ENCRYPTED',\n                    metadata\n                });\n            }\n            \n            // Check: non-extractable keys should not be encrypted\n            if (metadata.extractable === false && metadata.encrypted === true) {\n                violations.push({\n                    keyId,\n                    type: 'NON_EXTRACTABLE_KEY_ENCRYPTED',\n                    metadata\n                });\n            }\n        }\n        \n        if (violations.length > 0) {\n            this._secureLog('error', 'Storage integrity violations detected', {\n                violationCount: violations.length\n            });\n            return false;\n        }\n        \n        return true;\n    }\n\n    async getStorageStats() {\n        const persistentStats = await this._persistentStorage.getStorageStats();\n        \n        return {\n            totalKeys: this._keyReferences.size,\n            memoryKeys: this._keyReferences.size,\n            persistentKeys: persistentStats.persistentKeys,\n            metadata: Array.from(this._keyMetadata.entries()).map(([id, meta]) => ({\n                id,\n                created: meta.created,\n                lastAccessed: meta.lastAccessed,\n                age: Date.now() - meta.created,\n                persistent: meta.persistent || false\n            })),\n            persistent: persistentStats\n        };\n    }\n    \n    /**\n     * List all stored keys (memory + persistent)\n     */\n    async listAllKeys() {\n        try {\n            const memoryKeys = Array.from(this._keyMetadata.entries()).map(([keyId, metadata]) => ({\n                keyId,\n                ...metadata,\n                location: 'memory'\n            }));\n            \n            const persistentKeys = await this._persistentStorage.listStoredKeys();\n            const persistentKeysFormatted = persistentKeys.map(key => ({\n                ...key,\n                location: 'persistent'\n            }));\n            \n            return {\n                memoryKeys,\n                persistentKeys: persistentKeysFormatted,\n                totalCount: memoryKeys.length + persistentKeysFormatted.length\n            };\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to list keys', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return {\n                memoryKeys: [],\n                persistentKeys: [],\n                totalCount: 0,\n                error: error.message\n            };\n        }\n    }\n    \n    /**\n     * Delete key from both memory and persistent storage\n     */\n    async deleteKey(keyId) {\n        try {\n            // Remove from memory\n            this._keyReferences.delete(keyId);\n            this._keyMetadata.delete(keyId);\n            \n            // Remove from persistent storage\n            await this._persistentStorage.deleteKey(keyId);\n            \n            return true;\n            \n        } catch (error) {\n            this._secureLog('error', 'Failed to delete key', {\n                errorType: error?.constructor?.name || 'Unknown'\n            });\n            return false;\n        }\n    }\n\n}\n\n/**\n * Secure IndexedDB Wrapper for Encrypted Key Storage\n * Provides secure persistent storage with encryption\n */\nclass SecureIndexedDBWrapper {\n    constructor(dbName = 'SecureKeyStorage', version = 1) {\n        this.dbName = dbName;\n        this.version = version;\n        this.db = null;\n        \n        // Store names\n        this.KEYS_STORE = 'encrypted_keys';\n        this.METADATA_STORE = 'key_metadata';\n        this.SALT_STORE = 'master_salt';\n    }\n    \n    /**\n     * Initialize IndexedDB connection\n     */\n    async initialize() {\n        return new Promise((resolve, reject) => {\n            const request = indexedDB.open(this.dbName, this.version);\n            \n            request.onerror = () => {\n                reject(new Error(`Failed to open IndexedDB: ${request.error}`));\n            };\n            \n            request.onsuccess = () => {\n                this.db = request.result;\n                resolve();\n            };\n            \n            request.onupgradeneeded = (event) => {\n                const db = event.target.result;\n                \n                // Create encrypted keys store\n                if (!db.objectStoreNames.contains(this.KEYS_STORE)) {\n                    const keysStore = db.createObjectStore(this.KEYS_STORE, { keyPath: 'keyId' });\n                    keysStore.createIndex('timestamp', 'timestamp', { unique: false });\n                    keysStore.createIndex('algorithm', 'algorithm', { unique: false });\n                }\n                \n                // Create metadata store\n                if (!db.objectStoreNames.contains(this.METADATA_STORE)) {\n                    const metadataStore = db.createObjectStore(this.METADATA_STORE, { keyPath: 'keyId' });\n                    metadataStore.createIndex('created', 'created', { unique: false });\n                    metadataStore.createIndex('lastAccessed', 'lastAccessed', { unique: false });\n                }\n                \n                // Create salt store\n                if (!db.objectStoreNames.contains(this.SALT_STORE)) {\n                    db.createObjectStore(this.SALT_STORE, { keyPath: 'id' });\n                }\n            };\n        });\n    }\n    \n    /**\n     * Store encrypted key data\n     */\n    async storeEncryptedKey(keyId, encryptedData, iv, algorithm, usages, type, metadata = {}) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.KEYS_STORE, this.METADATA_STORE], 'readwrite');\n        \n        const keyRecord = {\n            keyId: keyId,\n            encryptedData: Array.from(new Uint8Array(encryptedData)), // Convert to array for storage\n            iv: Array.from(new Uint8Array(iv)),\n            algorithm: algorithm,\n            usages: usages,\n            type: type\n        };\n        \n        const metadataRecord = { keyId, ...metadata };\n        \n        return new Promise((resolve, reject) => {\n            const keysRequest = transaction.objectStore(this.KEYS_STORE).put(keyRecord);\n            const metadataRequest = transaction.objectStore(this.METADATA_STORE).put(metadataRecord);\n            \n            transaction.oncomplete = () => resolve();\n            transaction.onerror = () => reject(new Error(`Failed to store key: ${transaction.error}`));\n        });\n    }\n    \n    /**\n     * Retrieve encrypted key data\n     */\n    async getEncryptedKey(keyId) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.KEYS_STORE], 'readonly');\n        const store = transaction.objectStore(this.KEYS_STORE);\n        \n        return new Promise((resolve, reject) => {\n            const request = store.get(keyId);\n            \n            request.onsuccess = () => {\n                const result = request.result;\n                if (result) {\n                    // Convert arrays back to Uint8Array\n                    result.encryptedData = new Uint8Array(result.encryptedData);\n                    result.iv = new Uint8Array(result.iv);\n                }\n                resolve(result);\n            };\n            \n            request.onerror = () => reject(new Error(`Failed to retrieve key: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Update key metadata (e.g., last accessed time)\n     */\n    async updateKeyMetadata(keyId, updates) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.METADATA_STORE], 'readwrite');\n        const store = transaction.objectStore(this.METADATA_STORE);\n        \n        return new Promise((resolve, reject) => {\n            const getRequest = store.get(keyId);\n            \n            getRequest.onsuccess = () => {\n                const metadata = getRequest.result;\n                if (metadata) {\n                    Object.assign(metadata, updates);\n                    const putRequest = store.put(metadata);\n                    \n                    putRequest.onsuccess = () => resolve();\n                    putRequest.onerror = () => reject(new Error(`Failed to update metadata: ${putRequest.error}`));\n                } else {\n                    reject(new Error(`Key metadata not found: ${keyId}`));\n                }\n            };\n            \n            getRequest.onerror = () => reject(new Error(`Failed to get metadata: ${getRequest.error}`));\n        });\n    }\n\n    async getKeyMetadataRecord(keyId) {\n        if (!this.db) throw new Error('Database not initialized');\n        const transaction = this.db.transaction([this.METADATA_STORE], 'readonly');\n        const store = transaction.objectStore(this.METADATA_STORE);\n        return new Promise((resolve, reject) => {\n            const request = store.get(keyId);\n            request.onsuccess = () => resolve(request.result || null);\n            request.onerror = () => reject(new Error(`Failed to get metadata: ${request.error}`));\n        });\n    }\n\n    async putKeyMetadataRecord(record) {\n        if (!this.db) throw new Error('Database not initialized');\n        const transaction = this.db.transaction([this.METADATA_STORE], 'readwrite');\n        const store = transaction.objectStore(this.METADATA_STORE);\n        return new Promise((resolve, reject) => {\n            const request = store.put(record);\n            request.onsuccess = () => resolve();\n            request.onerror = () => reject(new Error(`Failed to store metadata: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Delete key and its metadata\n     */\n    async deleteKey(keyId) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.KEYS_STORE, this.METADATA_STORE], 'readwrite');\n        \n        return new Promise((resolve, reject) => {\n            const keysRequest = transaction.objectStore(this.KEYS_STORE).delete(keyId);\n            const metadataRequest = transaction.objectStore(this.METADATA_STORE).delete(keyId);\n            \n            transaction.oncomplete = () => resolve();\n            transaction.onerror = () => reject(new Error(`Failed to delete key: ${transaction.error}`));\n        });\n    }\n    \n    /**\n     * List all stored keys\n     */\n    async listKeys() {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.METADATA_STORE], 'readonly');\n        const store = transaction.objectStore(this.METADATA_STORE);\n        \n        return new Promise((resolve, reject) => {\n            const request = store.getAll();\n            \n            request.onsuccess = () => resolve(request.result);\n            request.onerror = () => reject(new Error(`Failed to list keys: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Store master key salt\n     */\n    async storeMasterSalt(salt) {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.SALT_STORE], 'readwrite');\n        const store = transaction.objectStore(this.SALT_STORE);\n        \n        const saltRecord = {\n            id: 'master_salt',\n            salt: Array.from(new Uint8Array(salt))\n        };\n        \n        return new Promise((resolve, reject) => {\n            const request = store.put(saltRecord);\n            \n            request.onsuccess = () => resolve();\n            request.onerror = () => reject(new Error(`Failed to store salt: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Retrieve master key salt\n     */\n    async getMasterSalt() {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.SALT_STORE], 'readonly');\n        const store = transaction.objectStore(this.SALT_STORE);\n        \n        return new Promise((resolve, reject) => {\n            const request = store.get('master_salt');\n            \n            request.onsuccess = () => {\n                const result = request.result;\n                if (result) {\n                    resolve(new Uint8Array(result.salt));\n                } else {\n                    resolve(null);\n                }\n            };\n            \n            request.onerror = () => reject(new Error(`Failed to retrieve salt: ${request.error}`));\n        });\n    }\n    \n    /**\n     * Clear all data (for security wipe)\n     */\n    async clearAll() {\n        if (!this.db) {\n            throw new Error('Database not initialized');\n        }\n        \n        const transaction = this.db.transaction([this.KEYS_STORE, this.METADATA_STORE, this.SALT_STORE], 'readwrite');\n        \n        return new Promise((resolve, reject) => {\n            const keysRequest = transaction.objectStore(this.KEYS_STORE).clear();\n            const metadataRequest = transaction.objectStore(this.METADATA_STORE).clear();\n            const saltRequest = transaction.objectStore(this.SALT_STORE).clear();\n            \n            transaction.oncomplete = () => resolve();\n            transaction.onerror = () => reject(new Error(`Failed to clear database: ${transaction.error}`));\n        });\n    }\n    \n    /**\n     * Close database connection\n     */\n    close() {\n        if (this.db) {\n            this.db.close();\n            this.db = null;\n        }\n    }\n}\n\n/**\n * Secure Persistent Key Storage with Key Wrapping\n * Implements secure storage of extractable keys using AES-GCM encryption\n */\nclass SecurePersistentKeyStorage {\n    constructor(masterKeyManager, indexedDBWrapper = null) {\n        this._masterKeyManager = masterKeyManager;\n        this._indexedDB = indexedDBWrapper || new SecureIndexedDBWrapper();\n        this._dbInitialized = false;\n        \n        // In-memory cache for restored keys (WeakMap for automatic cleanup)\n        this._keyCache = new WeakMap();\n        this._keyReferences = new Map(); // Strong references for active keys\n    }\n    \n    /**\n     * Initialize IndexedDB if not already done\n     */\n    async _ensureDBInitialized() {\n        if (!this._dbInitialized) {\n            await this._indexedDB.initialize();\n            this._dbInitialized = true;\n        }\n    }\n\n    async _ensureMasterKeyUnlocked() {\n        if (typeof this._masterKeyManager.isUnlocked === 'function' && !this._masterKeyManager.isUnlocked()) {\n            await this._masterKeyManager.unlock();\n        }\n    }\n    \n    /**\n     * Store extractable key with encryption\n     */\n    async storeExtractableKey(keyId, cryptoKey, metadata = {}) {\n        if (!(cryptoKey instanceof CryptoKey)) {\n            throw new Error('Only CryptoKey objects can be stored');\n        }\n        \n        if (!cryptoKey.extractable) {\n            throw new Error('Key must be extractable for persistent storage');\n        }\n        \n        try {\n            await this._ensureDBInitialized();\n            \n            // Export key to JWK\n            const jwkData = await crypto.subtle.exportKey('jwk', cryptoKey);\n            \n            // Encrypt JWK data\n            const { encryptedData, iv } = await this._encryptKeyData(jwkData);\n            \n            // Store encrypted data in IndexedDB\n            const encryptedMetadata = await this._encryptMetadata({\n                ...metadata,\n                created: Date.now(),\n                lastAccessed: Date.now(),\n                extractable: true,\n                persistent: true\n            });\n\n            await this._indexedDB.storeEncryptedKey(\n                keyId,\n                encryptedData,\n                iv,\n                cryptoKey.algorithm,\n                cryptoKey.usages,\n                cryptoKey.type,\n                encryptedMetadata\n            );\n            \n            // Store non-extractable reference in memory cache\n            const nonExtractableKey = await this._importAsNonExtractable(jwkData, cryptoKey.algorithm, cryptoKey.usages);\n            this._keyReferences.set(keyId, nonExtractableKey);\n            \n            return true;\n            \n        } catch (error) {\n            throw new Error(`Failed to store extractable key: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Retrieve and restore key from persistent storage\n     */\n    async retrieveKey(keyId) {\n        try {\n            // Check if key is already in memory cache\n            if (this._keyReferences.has(keyId)) {\n                return this._keyReferences.get(keyId);\n            }\n            \n            await this._ensureDBInitialized();\n            \n            // Get encrypted key data from IndexedDB\n            const keyRecord = await this._indexedDB.getEncryptedKey(keyId);\n            if (!keyRecord) {\n                return null;\n            }\n            \n            // Decrypt JWK data\n            const jwkData = await this._decryptKeyData(keyRecord.encryptedData, keyRecord.iv);\n            \n            // Import as non-extractable key\n            const restoredKey = await this._importAsNonExtractable(jwkData, keyRecord.algorithm, keyRecord.usages);\n            \n            // Cache in memory\n            this._keyReferences.set(keyId, restoredKey);\n            \n            // Update last accessed time\n            await this._updateEncryptedMetadata(keyId, { lastAccessed: Date.now() });\n            \n            return restoredKey;\n            \n        } catch (error) {\n            throw new Error(`Failed to retrieve key: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Delete key from persistent storage\n     */\n    async deleteKey(keyId) {\n        try {\n            await this._ensureDBInitialized();\n            \n            // Remove from IndexedDB\n            await this._indexedDB.deleteKey(keyId);\n            \n            // Remove from memory cache\n            this._keyReferences.delete(keyId);\n            \n            return true;\n            \n        } catch (error) {\n            throw new Error(`Failed to delete key: ${error.message}`);\n        }\n    }\n    \n    /**\n     * List all stored keys\n     */\n    async listStoredKeys() {\n        try {\n            await this._ensureDBInitialized();\n            const records = await this._indexedDB.listKeys();\n            const results = [];\n            for (const record of records) {\n                const metadata = await this._readMetadataWithMigration(record);\n                if (metadata) results.push({ keyId: record.keyId, ...metadata });\n            }\n            return results;\n        } catch (error) {\n            throw new Error(`Failed to list keys: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Clear all persistent storage\n     */\n    async clearAll() {\n        try {\n            await this._ensureDBInitialized();\n            \n            // Clear IndexedDB\n            await this._indexedDB.clearAll();\n            \n            // Clear memory cache\n            this._keyReferences.clear();\n            \n            return true;\n            \n        } catch (error) {\n            throw new Error(`Failed to clear storage: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Encrypt key data using master key\n     */\n    async _encryptKeyData(jwkData) {\n        // Convert JWK to JSON string and then to bytes\n        const jsonString = JSON.stringify(jwkData);\n        const data = new TextEncoder().encode(jsonString);\n        \n        await this._ensureMasterKeyUnlocked();\n        return await this._masterKeyManager.encryptBytes(data);\n    }\n    \n    /**\n     * Decrypt key data using master key\n     */\n    async _decryptKeyData(encryptedData, iv) {\n        await this._ensureMasterKeyUnlocked();\n        const decryptedData = await this._masterKeyManager.decryptBytes(encryptedData, iv);\n        \n        // Convert back to JWK\n        const jsonString = new TextDecoder().decode(decryptedData);\n        return JSON.parse(jsonString);\n    }\n\n    async _encryptMetadata(metadata) {\n        const data = new TextEncoder().encode(JSON.stringify(metadata));\n        await this._ensureMasterKeyUnlocked();\n        const { encryptedData, iv } = await this._masterKeyManager.encryptBytes(data);\n        return {\n            metadataVersion: 1,\n            encryptedMetadata: Array.from(encryptedData),\n            metadataIv: Array.from(iv)\n        };\n    }\n\n    async _decryptMetadataRecord(record) {\n        if (!record?.encryptedMetadata || !record?.metadataIv) {\n            throw new Error('Encrypted metadata missing');\n        }\n        await this._ensureMasterKeyUnlocked();\n        const decrypted = await this._masterKeyManager.decryptBytes(\n            new Uint8Array(record.encryptedMetadata),\n            new Uint8Array(record.metadataIv)\n        );\n        return JSON.parse(new TextDecoder().decode(decrypted));\n    }\n\n    async _readMetadataWithMigration(record) {\n        if (!record) return null;\n        if (record.encryptedMetadata) {\n            try {\n                return await this._decryptMetadataRecord(record);\n            } catch (error) {\n                // Corrupted encrypted metadata must not be exposed or trusted.\n                return null;\n            }\n        }\n\n        // Legacy plaintext record: read once, then migrate to encrypted envelope.\n        const { keyId, ...legacyMetadata } = record;\n        const encryptedRecord = { keyId, ...(await this._encryptMetadata(legacyMetadata)) };\n        await this._indexedDB.putKeyMetadataRecord(encryptedRecord);\n        return legacyMetadata;\n    }\n\n    async _updateEncryptedMetadata(keyId, updates) {\n        const record = await this._indexedDB.getKeyMetadataRecord(keyId);\n        if (!record) throw new Error(`Key metadata not found: ${keyId}`);\n        const current = await this._readMetadataWithMigration(record);\n        if (!current) throw new Error(`Key metadata corrupted: ${keyId}`);\n        await this._indexedDB.putKeyMetadataRecord({\n            keyId,\n            ...(await this._encryptMetadata({ ...current, ...updates }))\n        });\n    }\n    \n    /**\n     * Import JWK as non-extractable key\n     */\n    async _importAsNonExtractable(jwkData, algorithm, usages) {\n        return await crypto.subtle.importKey(\n            'jwk',\n            jwkData,\n            algorithm,\n            false, // non-extractable for security\n            usages\n        );\n    }\n    \n    /**\n     * Get storage statistics\n     */\n    async getStorageStats() {\n        try {\n            await this._ensureDBInitialized();\n            const keys = await this._indexedDB.listKeys();\n            \n            return {\n                totalKeys: keys.length,\n                memoryKeys: this._keyReferences.size,\n                persistentKeys: keys.length,\n                lastAccessed: keys.reduce((latest, key) => \n                    Math.max(latest, key.lastAccessed || 0), 0)\n            };\n            \n        } catch (error) {\n            return {\n                totalKeys: 0,\n                memoryKeys: this._keyReferences.size,\n                persistentKeys: 0,\n                lastAccessed: 0,\n                error: error.message\n            };\n        }\n    }\n}\n\n/**\n * Secure Master Key Manager with Password-Based Derivation\n * Implements PBKDF2-based key derivation and session management\n */\nclass SecureMasterKeyManager {\n    constructor(indexedDBWrapper = null) {\n        // Session state\n        this._keyHandle = null; // non-extractable CryptoKey\n        this._isUnlocked = false;\n        this._sessionTimeout = null;\n        this._lastActivity = null;\n        \n        // Configuration\n        this._sessionTimeoutMs = 60 * 60 * 1000; // 60 minutes (\u0443\u0432\u0435\u043B\u0438\u0447\u0435\u043D\u043E \u0441 15 \u043C\u0438\u043D\u0443\u0442)\n        this._inactivityTimeoutMs = 30 * 60 * 1000; // 30 minutes (\u0443\u0432\u0435\u043B\u0438\u0447\u0435\u043D\u043E \u0441 5 \u043C\u0438\u043D\u0443\u0442)\n        \n        // PBKDF2 parameters\n        this._pbkdf2Iterations = 310000; // OWASP 2025 recommendation for PBKDF2-SHA256\n        this._saltSize = 32; // 256 bits\n        \n        // IndexedDB wrapper for persistent salt storage\n        this._indexedDB = indexedDBWrapper || new SecureIndexedDBWrapper();\n        this._dbInitialized = false;\n        \n        // Event handlers\n        this._onPasswordRequired = null;\n        this._onSessionExpired = null;\n        this._onUnlocked = null;\n        \n        // Setup event listeners (disabled for better UX - no auto-disconnect)\n        // this._setupEventListeners();\n    }\n    \n    /**\n     * Set callback for password requests\n     */\n    setPasswordRequiredCallback(callback) {\n        this._onPasswordRequired = callback;\n    }\n    \n    /**\n     * Set callback for session expiration\n     */\n    setSessionExpiredCallback(callback) {\n        this._onSessionExpired = callback;\n    }\n    \n    /**\n     * Set callback for successful unlock\n     */\n    setUnlockedCallback(callback) {\n        this._onUnlocked = callback;\n    }\n    \n    /**\n     * Setup event listeners for session management\n     */\n    _setupEventListeners() {\n        // Handle page visibility changes\n        if (typeof document !== 'undefined') {\n            document.addEventListener('visibilitychange', () => {\n                if (document.hidden) {\n                    this._handleFocusOut();\n                } else {\n                    this._handleFocusIn();\n                }\n            });\n            \n            // Handle window focus/blur\n            window.addEventListener('blur', () => this._handleFocusOut());\n            window.addEventListener('focus', () => this._handleFocusIn());\n            \n            // Handle user activity\n            ['mousedown', 'mousemove', 'keypress', 'scroll', 'touchstart'].forEach(event => {\n                document.addEventListener(event, () => this._updateActivity(), { passive: true });\n            });\n        }\n    }\n    \n    /**\n     * Handle focus out - start inactivity timer\n     */\n    _handleFocusOut() {\n        if (this._isUnlocked) {\n            // Start shorter timeout when window loses focus\n            this._startInactivityTimer(this._inactivityTimeoutMs);\n        }\n    }\n    \n    /**\n     * Handle focus in - reset timers\n     */\n    _handleFocusIn() {\n        if (this._isUnlocked) {\n            this._resetSessionTimer();\n        }\n    }\n    \n    /**\n     * Update last activity timestamp\n     */\n    _updateActivity() {\n        this._lastActivity = Date.now();\n        if (this._isUnlocked) {\n            this._resetSessionTimer();\n        }\n    }\n    \n    /**\n     * Start session timer\n     */\n    _startSessionTimer() {\n        this._clearTimers();\n        this._sessionTimeout = setTimeout(() => {\n            this._expireSession('timeout');\n        }, this._sessionTimeoutMs);\n    }\n    \n    /**\n     * Start inactivity timer\n     */\n    _startInactivityTimer(timeout) {\n        this._clearTimers();\n        this._sessionTimeout = setTimeout(() => {\n            this._expireSession('inactivity');\n        }, timeout);\n    }\n    \n    /**\n     * Reset session timer\n     */\n    _resetSessionTimer() {\n        if (this._isUnlocked) {\n            this._startSessionTimer();\n        }\n    }\n    \n    /**\n     * Clear all timers\n     */\n    _clearTimers() {\n        if (this._sessionTimeout) {\n            clearTimeout(this._sessionTimeout);\n            this._sessionTimeout = null;\n        }\n    }\n    \n    /**\n     * Expire the current session\n     */\n    _expireSession(reason = 'unknown') {\n        if (this._isUnlocked) {\n            this._secureWipeMasterKey();\n            this._isUnlocked = false;\n            \n            if (this._onSessionExpired) {\n                this._onSessionExpired(reason);\n            }\n        }\n    }\n    \n    /**\n     * Initialize IndexedDB if not already done\n     */\n    async _ensureDBInitialized() {\n        if (!this._dbInitialized) {\n            await this._indexedDB.initialize();\n            this._dbInitialized = true;\n        }\n    }\n    \n    /**\n     * Generate salt for PBKDF2\n     */\n    _generateSalt() {\n        return crypto.getRandomValues(new Uint8Array(this._saltSize));\n    }\n    \n    /**\n     * Get or create persistent salt\n     */\n    async _getOrCreateSalt() {\n        await this._ensureDBInitialized();\n        \n        // Try to get existing salt\n        let salt = await this._indexedDB.getMasterSalt();\n        \n        if (!salt) {\n            // Generate new salt and store it\n            salt = this._generateSalt();\n            await this._indexedDB.storeMasterSalt(salt);\n        }\n        \n        return salt;\n    }\n    \n    /**\n     * Derive master key from password using PBKDF2\n     */\n    async _deriveKeyFromPassword(password, salt) {\n        try {\n            // Import password as key material\n            const passwordKey = await crypto.subtle.importKey(\n                'raw',\n                new TextEncoder().encode(password),\n                'PBKDF2',\n                false,\n                ['deriveKey']\n            );\n            \n            // Derive AES-GCM key using PBKDF2\n            const derivedKey = await crypto.subtle.deriveKey(\n                {\n                    name: 'PBKDF2',\n                    salt: salt,\n                    iterations: this._pbkdf2Iterations,\n                    hash: 'SHA-256'\n                },\n                passwordKey,\n                {\n                    name: 'AES-GCM',\n                    length: 256\n                },\n                false, // non-extractable for security\n                ['encrypt', 'decrypt', 'wrapKey', 'unwrapKey']\n            );\n            \n            return derivedKey;\n        } catch (error) {\n            throw new Error(`Key derivation failed: ${error.message}`);\n        }\n    }\n    \n    /**\n     * Request password from user\n     */\n    async _requestPassword(isRetry = false) {\n        if (!this._onPasswordRequired) {\n            throw new Error('Password callback not set');\n        }\n        \n        return new Promise((resolve, reject) => {\n            this._onPasswordRequired(isRetry, (password) => {\n                if (password) {\n                    resolve(password);\n                } else {\n                    reject(new Error('Password not provided'));\n                }\n            });\n        });\n    }\n    \n    /**\n     * Unlock the master key with password\n     */\n    async unlock(password = null) {\n        try {\n            // Request password if not provided\n            if (!password) {\n                password = await this._requestPassword(false);\n            }\n            \n            // Get or create persistent salt\n            const salt = await this._getOrCreateSalt();\n            \n            // Derive non-extractable key handle\n            this._keyHandle = await this._deriveKeyFromPassword(password, salt);\n            \n            // Mark as unlocked\n            this._isUnlocked = true;\n            this._lastActivity = Date.now();\n            \n            // Start session timer\n            this._startSessionTimer();\n            \n            // Securely wipe password from memory\n            password = null;\n            \n            if (this._onUnlocked) {\n                this._onUnlocked();\n            }\n            \n            return { success: true };\n            \n        } catch (error) {\n            // Securely wipe password on error\n            password = null;\n            throw error;\n        }\n    }\n    \n    /**\n     * Lock the master key\n     */\n    lock() {\n        this._expireSession('manual');\n    }\n    \n    /**\n     * Get master key (only if unlocked)\n     */\n    // Prevent direct key access; provide operations only\n    async encryptBytes(plainBytes) {\n        if (!this._isUnlocked || !this._keyHandle) {\n            throw new Error('Master key is locked');\n        }\n        this._updateActivity();\n        const iv = crypto.getRandomValues(new Uint8Array(12));\n        const encrypted = await crypto.subtle.encrypt({ name: 'AES-GCM', iv }, this._keyHandle, plainBytes);\n        return { encryptedData: new Uint8Array(encrypted), iv };\n    }\n\n    async decryptBytes(encryptedBytes, iv) {\n        if (!this._isUnlocked || !this._keyHandle) {\n            throw new Error('Master key is locked');\n        }\n        this._updateActivity();\n        const decrypted = await crypto.subtle.decrypt({ name: 'AES-GCM', iv }, this._keyHandle, encryptedBytes);\n        return new Uint8Array(decrypted);\n    }\n    \n    /**\n     * Check if master key is unlocked\n     */\n    isUnlocked() {\n        // The derived key lives in _keyHandle (non-extractable CryptoKey). This\n        // used to test a long-renamed `_masterKey` field, which was always\n        // undefined and therefore never actually gated anything.\n        return this._isUnlocked && this._keyHandle !== null;\n    }\n    \n    /**\n     * Get session status\n     */\n    getSessionStatus() {\n        return {\n            isUnlocked: this._isUnlocked,\n            lastActivity: this._lastActivity,\n            sessionTimeoutMs: this._sessionTimeoutMs,\n            inactivityTimeoutMs: this._inactivityTimeoutMs\n        };\n    }\n    \n    /**\n     * Securely wipe master key from memory\n     */\n    _secureWipeMasterKey() {\n        if (this._keyHandle) {\n            // CryptoKey objects are automatically garbage collected\n            // but we clear the reference immediately\n            this._keyHandle = null;\n        }\n        this._clearTimers();\n    }\n    \n    /**\n     * Cleanup on destruction\n     */\n    destroy() {\n        this._secureWipeMasterKey();\n        this._isUnlocked = false;\n        \n        // Remove event listeners\n        if (typeof document !== 'undefined') {\n            document.removeEventListener('visibilitychange', this._handleFocusOut);\n            window.removeEventListener('blur', this._handleFocusOut);\n            window.removeEventListener('focus', this._handleFocusIn);\n        }\n    }\n}\n\nexport { \n    EnhancedSecureWebRTCManager, \n    SecureMasterKeyManager, \n    SecureIndexedDBWrapper, \n    SecurePersistentKeyStorage \n};\n", "import { EnhancedSecureCryptoUtils } from '../crypto/EnhancedSecureCryptoUtils.js';\nimport { EnhancedSecureWebRTCManager } from '../network/EnhancedSecureWebRTCManager.js';\nimport { EnhancedSecureFileTransfer } from '../transfer/EnhancedSecureFileTransfer.js';\nimport { NotificationIntegration } from '../notifications/NotificationIntegration.js';\n\n// Import UI components (side-effect: they attach themselves to window.*)\nimport '../components/ui/Header.jsx';\nimport '../components/ui/LanguageSwitcher.jsx';\nimport '../components/ui/DownloadApps.jsx';\nimport '../components/ui/BecomePartner.jsx';\nimport '../components/ui/UniqueFeatureSlider.jsx';\nimport '../components/ui/Roadmap.jsx';\nimport '../components/ui/DonateCrypto.jsx';\nimport '../components/ui/CommunityCTA.jsx';\nimport '../components/ui/FileTransfer.jsx';\nimport '../components/ui/IceServerSettings.jsx';\nimport '../components/ui/CallUI.jsx';\n\n// Expose to global for legacy usage inside app code\nwindow.EnhancedSecureCryptoUtils = EnhancedSecureCryptoUtils;\nwindow.EnhancedSecureWebRTCManager = EnhancedSecureWebRTCManager;\nwindow.EnhancedSecureFileTransfer = EnhancedSecureFileTransfer;\nwindow.NotificationIntegration = NotificationIntegration;\n\n// Earlier releases had an unused QR flow that persisted session invitation data\n// under `qr_offer_<id>` and never removed it. The writer is gone, but records it\n// already left on disk are not, and they outlive a disconnect and the in-app\n// \"clear data\". Purge them once on startup, so updating actually clears what was\n// stored rather than only stopping new entries.\nconst purgeLegacyOfferRecords = () => {\n    try {\n        const stale = [];\n        for (let i = 0; i < localStorage.length; i++) {\n            const key = localStorage.key(i);\n            if (key && key.startsWith('qr_offer_')) stale.push(key);\n        }\n        for (const key of stale) {\n            try { localStorage.removeItem(key); } catch (_) {}\n        }\n    } catch (_) {\n        // Private mode / disabled storage: nothing to purge.\n    }\n};\n\n/**\n * QR generation and scanning live in their own bundle \u2014 142 KB gzipped, the third\n * largest thing this site serves. It used to be a <script type=\"module\"> in <head>,\n * which meant every first visit paid for it before the app was interactive, on a\n * screen that has no QR on it: the scanner only exists behind a button, and the\n * generator only runs once a channel is being created.\n *\n * So it is fetched after the app has mounted and the browser is idle. Every call site\n * already checks `typeof window.<fn> === 'function'` before using it, so arriving late\n * is not an error condition \u2014 but the scanner effect in app.jsx keys off this event to\n * start the camera for anyone who opened the modal in the meantime.\n */\nconst loadQrBundle = () => {\n    if (window.__qrReady) return window.__qrReady;\n    window.__qrReady = import('/dist/qr-local.js')\n        .then(() => {\n            window.dispatchEvent(new Event('securebit:qr-ready'));\n        })\n        .catch((error) => {\n            console.warn('QR bundle failed to load:', error && error.message);\n            // Let a later attempt retry rather than caching the rejection forever.\n            window.__qrReady = null;\n        });\n    return window.__qrReady;\n};\n\nconst scheduleQrBundle = () => {\n    if (typeof window.requestIdleCallback === 'function') {\n        window.requestIdleCallback(loadQrBundle, { timeout: 3000 });\n    } else {\n        setTimeout(loadQrBundle, 1200);\n    }\n};\n\n// Mount application once DOM and modules are ready\nconst start = () => {\n    purgeLegacyOfferRecords();\n  if (typeof window.initializeApp === 'function') {\n    window.initializeApp();\n  } else if (window.DEBUG_MODE) {\n    console.error('initializeApp is not defined on window');\n  }\n  scheduleQrBundle();\n};\n\nif (document.readyState === 'loading') {\n  document.addEventListener('DOMContentLoaded', start);\n} else {\n  start();\n}\n", "{\n  \"name\": \"securebit-chat\",\n  \"version\": \"6.8.12\",\n  \"description\": \"Secure P2P Communication Application with End-to-End Encryption\",\n  \"main\": \"index.html\",\n  \"scripts\": {\n    \"build\": \"npm run build:i18n && npm run build:docs && npm run build:js && npm run build:css && npm run post-build\",\n    \"build:css\": \"npx tailwindcss -i src/styles/tw-input.css -o assets/tailwind.css --minify --content \\\"./index.html,./src/**/*.jsx,./src/**/*.js\\\" && node scripts/build-css.js\",\n    \"build:js\": \"npx esbuild src/app.jsx --bundle --format=esm --outfile=dist/app.js --minify --sourcemap && npx esbuild src/scripts/app-boot.js --bundle --format=esm --outfile=dist/app-boot.js --minify --sourcemap && npx esbuild src/scripts/qr-local.js --bundle --format=esm --outfile=dist/qr-local.js --minify --sourcemap\",\n    \"build:i18n\": \"node scripts/build-i18n.js\",\n    \"build:docs\": \"node scripts/build-docs.js\",\n    \"post-build\": \"node scripts/post-build.js\",\n    \"dev\": \"npm run build && python -m http.server 8000\",\n    \"watch\": \"npx tailwindcss -i src/styles/tw-input.css -o assets/tailwind.css --watch\",\n    \"serve\": \"npx http-server -p 8000\",\n    \"test\": \"node tests/sas-verification.test.mjs && node tests/verification-gate.test.mjs && node tests/inbound-frame-authentication.test.mjs && node tests/control-frame-authorization.test.mjs && node tests/security-level-shape.test.mjs && node tests/desktop-download-links.test.mjs && node tests/file-transfer-consent.test.mjs && node tests/incoming-message-sanitization.test.mjs && node tests/outgoing-message-integrity.test.mjs && node tests/secure-chat-features.test.mjs && node tests/notification-meta-forwarding.test.mjs && node tests/notification-ephemeral-privacy.test.mjs && node tests/key-derivation-compat.test.mjs && node tests/key-exchange-e2e.test.mjs && node tests/file-type-allowlist.test.mjs && node tests/voice-auto-accept.test.mjs && node tests/legacy-offer-purge.test.mjs && node tests/webrtc-privacy-mode.test.mjs && node tests/indexeddb-metadata-encryption.test.mjs && node tests/disconnect-cleanup.test.mjs && node tests/timer-lifecycle.test.mjs && node tests/file-transfer-cleanup.test.mjs && node tests/file-transfer-ui-cleanup.test.mjs && node tests/file-transfer-callback-propagation.test.mjs && node tests/debug-window-hooks.test.mjs && node tests/inbound-message-rate-limit.test.mjs && node tests/file-transfer-chunk-rate-limit.test.mjs && node tests/ice-servers-validation.test.mjs && node tests/sessions-reducer.test.mjs && node tests/webrtc-sdp.test.mjs && node tests/webrtc-video.test.mjs && node tests/webrtc-adaptation.test.mjs && node tests/session-recovery.test.mjs && node tests/qr-zip-bomb.test.mjs && node tests/ice-gathering-patience.test.mjs && node tests/version-consistency.test.mjs && node tests/i18n-build.test.mjs && node tests/docs-build.test.mjs && node tests/qr-bundle-deferred.test.mjs && node tests/icon-subset.test.mjs && node tests/i18n-runtime.test.mjs && node tests/language-switcher.test.mjs && node tests/language-suggestion.test.mjs && node tests/rtl-layout.test.mjs && node tests/asset-paths-locale-safe.test.mjs && node tests/double-ratchet.test.mjs && node tests/ratchet-integration.test.mjs && node tests/descriptor-sbq2.test.mjs && node tests/sbq2-key-exchange.test.mjs && node tests/qr-scan-single-frame.test.mjs && node tests/mobile-chat-layout.test.mjs && node tests/group-crypto.test.mjs && node tests/groups-reducer.test.mjs && node tests/group-session-e2e.test.mjs && node tests/group-app-integration.test.mjs && node tests/group-sender.test.mjs && node tests/group-mesh.test.mjs && node tests/group-call.test.mjs && node tests/group-call-autoanswer.test.mjs && node tests/apple-motion.test.mjs && node tests/pwa-install-prompt-capture.test.mjs && node tests/theme-switching.test.mjs && node tests/turn-credentials.test.mjs\"\n  },\n  \"keywords\": [\n    \"p2p\",\n    \"chat\",\n    \"encryption\",\n    \"webrtc\",\n    \"privacy\",\n    \"security\"\n  ],\n  \"author\": \"SecureBit Team\",\n  \"license\": \"MIT\",\n  \"devDependencies\": {\n    \"esbuild\": \"^0.28.1\",\n    \"jsdom\": \"^28.1.0\",\n    \"marked\": \"^18.0.11\",\n    \"tailwindcss\": \"3.4.17\"\n  },\n  \"dependencies\": {\n    \"base64-js\": \"1.5.1\",\n    \"cbor-js\": \"0.1.0\",\n    \"dompurify\": \"^3.4.4\",\n    \"html5-qrcode\": \"2.3.8\",\n    \"pako\": \"2.1.0\",\n    \"qr-scanner\": \"1.4.2\",\n    \"qrcode\": \"1.5.4\"\n  }\n}\n", "// Switching language is a navigation, not a state change: every locale is its own\n// document at its own URL, generated at build time. So the entries are ordinary links \u2014\n// they work before React has mounted, they open in a new tab, they can be copied and\n// shared, and a crawler can follow them. A <button> that re-rendered the page in another\n// language would leave every language sharing one URL, which is the one thing this\n// arrangement exists to prevent.\n//\n// The list is a dropdown showing short codes: with nine languages, a row of full native\n// names does not fit a phone header. Every link stays in the DOM whether the menu is open\n// or shut \u2014 hiding is visual only, so nothing depends on the menu having been opened.\n//\n// Because it navigates, the switcher belongs on the landing page only. Offering it during\n// a call or a chat would invite someone to reload the document and drop the peer\n// connection mid-conversation.\n\nimport { SUPPORTED_LOCALES, currentLocale, languageLinks, rememberLocale, t } from '../../i18n/index.js';\n\nconst LanguageSwitcher = () => {\n    if (SUPPORTED_LOCALES.length < 2) return null;\n\n    const [open, setOpen] = React.useState(false);\n    const rootRef = React.useRef(null);\n\n    const pathname = typeof window !== 'undefined' ? window.location.pathname : '/';\n    const links = languageLinks({ pathname, active: currentLocale() });\n    const active = links.find((l) => l.isCurrent) || links[0];\n\n    // Close on an outside press or Escape \u2014 the two ways people expect a menu to go away.\n    React.useEffect(() => {\n        if (!open) return undefined;\n        const onDown = (e) => {\n            if (rootRef.current && !rootRef.current.contains(e.target)) setOpen(false);\n        };\n        const onKey = (e) => { if (e.key === 'Escape') setOpen(false); };\n        document.addEventListener('pointerdown', onDown);\n        document.addEventListener('keydown', onKey);\n        return () => {\n            document.removeEventListener('pointerdown', onDown);\n            document.removeEventListener('keydown', onKey);\n        };\n    }, [open]);\n\n    const trigger = React.createElement('button', {\n        key: 'trigger',\n        type: 'button',\n        onClick: () => setOpen((v) => !v),\n        'aria-haspopup': 'menu',\n        'aria-expanded': open ? 'true' : 'false',\n        'aria-label': t('language.label'),\n        style: {\n            display: 'flex', alignItems: 'center', gap: '6px',\n            padding: '7px 10px', borderRadius: '9px',\n            border: '1px solid rgba(var(--sb-ink), 0.07)',\n            background: open ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.02)',\n            color: 'var(--sb-text-4)', font: 'inherit', fontSize: '12.5px', fontWeight: 600,\n            cursor: 'pointer', transition: 'background .15s, color .15s',\n        },\n    }, [\n        React.createElement('span', { key: 'c' }, active ? active.abbr : ''),\n        React.createElement('svg', {\n            key: 'v', width: 11, height: 11, viewBox: '0 0 24 24', fill: 'none',\n            stroke: 'currentColor', strokeWidth: 2.4, strokeLinecap: 'round', strokeLinejoin: 'round',\n            style: { transform: open ? 'rotate(180deg)' : 'none', transition: 'transform .18s' },\n            dangerouslySetInnerHTML: { __html: '<path d=\"M6 9l6 6 6-6\"/>' },\n        }),\n    ]);\n\n    const menu = React.createElement('div', {\n        key: 'menu',\n        role: 'menu',\n        // The same scrollbar the chat uses, rather than the browser's default slab \u2014\n        // a 170px menu is exactly where a 15px stock scrollbar looks like a mistake.\n        className: 'sb-scroll',\n        // Kept in the DOM when shut: the links stay followable and the menu costs nothing\n        // to reopen.\n        style: {\n            position: 'absolute', top: 'calc(100% + 6px)', insetInlineEnd: 0, zIndex: 60,\n            display: open ? 'block' : 'none',\n            minWidth: '170px', padding: '5px', borderRadius: '11px',\n            border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)',\n            boxShadow: '0 14px 34px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))',\n            // Thirteen languages is taller than a phone in landscape. Cap it and scroll\n            // rather than let the list run off the bottom, where the last few entries\n            // would be unreachable.\n            maxHeight: 'min(62vh, 420px)', overflowY: 'auto', overscrollBehavior: 'contain',\n        },\n    }, links.map((link) => React.createElement('a', {\n        key: link.code,\n        href: link.href,\n        hrefLang: link.hrefLang,\n        lang: link.hrefLang,\n        // Each row is a word in its own script, so it gets its own direction \u2014 the menu\n        // around it stays in the direction of the page being read.\n        dir: link.dir,\n        role: 'menuitem',\n        // aria-current names the page you are on for a screen reader; the weight and\n        // contrast below say the same thing to everyone else.\n        'aria-current': link.isCurrent ? 'page' : undefined,\n        // Remember the choice, then let the browser navigate. The click is deliberately\n        // not intercepted \u2014 the next locale is a different document.\n        onClick: () => rememberLocale(link.code),\n        style: {\n            display: 'flex', alignItems: 'center', gap: '10px',\n            padding: '8px 10px', borderRadius: '8px',\n            fontSize: '13px',\n            fontWeight: link.isCurrent ? 600 : 500,\n            color: link.isCurrent ? 'var(--sb-text-2)' : 'var(--sb-text-6)',\n            background: link.isCurrent ? 'rgba(var(--sb-ink), 0.06)' : 'transparent',\n            textDecoration: 'none', whiteSpace: 'nowrap',\n        },\n    }, [\n        React.createElement('span', {\n            key: 'a',\n            style: { fontSize: '11px', fontWeight: 700, letterSpacing: '0.4px', color: 'var(--sb-text-9)', width: '22px', flex: 'none', textAlign: 'start' },\n        }, link.abbr),\n        React.createElement('span', { key: 'n' }, link.label),\n    ])));\n\n    return React.createElement('nav', {\n        ref: rootRef,\n        'aria-label': t('language.label'),\n        style: { position: 'relative', display: 'inline-flex' },\n    }, [trigger, menu]);\n};\n\nwindow.LanguageSwitcher = LanguageSwitcher;\n\nexport { LanguageSwitcher };\n", "// The three-state theme control, modelled on the language switcher next to it.\n//\n// Three states rather than a two-way toggle, because \"follow the system\" is a real\n// preference and not the same as \"dark\": someone whose laptop turns light at sunrise\n// wants the page to follow, and a two-way switch has nowhere to say so. The stored\n// value is the *mode* ('system' | 'light' | 'dark'), never the colour it resolved to,\n// so a page opened tomorrow in system mode answers the question again rather than\n// replaying yesterday's answer.\n//\n// Nothing here owns the theme. src/scripts/theme-boot.js does \u2014 it runs blocking in\n// <head>, long before React exists, because the theme has to be right on the first\n// paint. This component is a view onto it: it reads window.SecureBitTheme, calls set(),\n// and re-renders from the subscription rather than from its own state, so the header\n// stays correct when the OS theme changes under it or another tab switches.\n//\n// Landing page only, like the language switcher, though for a different reason: there\n// is no room for it in the connected header, which already carries the security pill,\n// the connection status and the network settings, and the preference persists across\n// the transition into the chat anyway.\n\nimport { t } from '../../i18n/index.js';\n\n// 24\u00D724 line icons, drawn to match the chevron the language switcher uses.\nconst ICON = {\n    system: '<rect x=\"2.5\" y=\"4\" width=\"19\" height=\"13\" rx=\"2\"/><path d=\"M8 20.5h8M12 17.5v3\"/>',\n    light: '<circle cx=\"12\" cy=\"12\" r=\"4.2\"/><path d=\"M12 2.6v2.4M12 19v2.4M2.6 12h2.4M19 12h2.4M5.3 5.3l1.7 1.7M17 17l1.7 1.7M18.7 5.3L17 7M7 17l-1.7 1.7\"/>',\n    dark: '<path d=\"M20.5 14.3A8.6 8.6 0 0 1 9.7 3.5a8.6 8.6 0 1 0 10.8 10.8z\"/>',\n};\n\nconst svg = (path, size, width) => React.createElement('svg', {\n    width: size, height: size, viewBox: '0 0 24 24', fill: 'none',\n    stroke: 'currentColor', strokeWidth: width, strokeLinecap: 'round', strokeLinejoin: 'round',\n    'aria-hidden': 'true',\n    dangerouslySetInnerHTML: { __html: path },\n});\n\nconst ThemeSwitcher = () => {\n    const api = typeof window !== 'undefined' ? window.SecureBitTheme : null;\n    // Without the boot script there is nothing to drive, and a control that cannot\n    // change anything is worse than no control.\n    if (!api) return null;\n\n    const [open, setOpen] = React.useState(false);\n    const [mode, setMode] = React.useState(() => api.get());\n    const [resolved, setResolved] = React.useState(() => api.resolved());\n    const rootRef = React.useRef(null);\n\n    // The mode can change without this component doing it \u2014 the OS flipping while in\n    // system mode, or another tab writing the preference.\n    React.useEffect(() => api.subscribe((nextMode, nextResolved) => {\n        setMode(nextMode);\n        setResolved(nextResolved);\n    }), []);\n\n    React.useEffect(() => {\n        if (!open) return undefined;\n        const onDown = (e) => {\n            if (rootRef.current && !rootRef.current.contains(e.target)) setOpen(false);\n        };\n        const onKey = (e) => { if (e.key === 'Escape') setOpen(false); };\n        document.addEventListener('pointerdown', onDown);\n        document.addEventListener('keydown', onKey);\n        return () => {\n            document.removeEventListener('pointerdown', onDown);\n            document.removeEventListener('keydown', onKey);\n        };\n    }, [open]);\n\n    const OPTIONS = [\n        { mode: 'system', icon: ICON.system, label: t('theme.system') },\n        { mode: 'light', icon: ICON.light, label: t('theme.light') },\n        { mode: 'dark', icon: ICON.dark, label: t('theme.dark') },\n    ];\n\n    // The trigger shows what you are *getting*, not what you picked: in system mode the\n    // useful thing to see is whether the page is currently light or dark. Which mode is\n    // selected is the menu's job, and the check mark there says it.\n    const triggerIcon = mode === 'system' ? ICON.system : (resolved === 'light' ? ICON.light : ICON.dark);\n    const current = OPTIONS.find((o) => o.mode === mode) || OPTIONS[0];\n\n    const trigger = React.createElement('button', {\n        key: 'trigger',\n        type: 'button',\n        onClick: () => setOpen((v) => !v),\n        'aria-haspopup': 'menu',\n        'aria-expanded': open ? 'true' : 'false',\n        'aria-label': t('theme.label') + ': ' + current.label,\n        title: t('theme.label'),\n        style: {\n            display: 'flex', alignItems: 'center', gap: '6px',\n            padding: '8px 9px', borderRadius: '9px',\n            border: '1px solid rgba(var(--sb-ink), 0.07)',\n            background: open ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.02)',\n            color: 'var(--sb-text-4)', font: 'inherit',\n            cursor: 'pointer', transition: 'background .15s, color .15s',\n        },\n    }, [\n        React.createElement('span', { key: 'i', style: { display: 'grid', placeItems: 'center' } }, svg(triggerIcon, 15, 1.9)),\n        React.createElement('svg', {\n            key: 'v', width: 11, height: 11, viewBox: '0 0 24 24', fill: 'none',\n            stroke: 'currentColor', strokeWidth: 2.4, strokeLinecap: 'round', strokeLinejoin: 'round',\n            style: { transform: open ? 'rotate(180deg)' : 'none', transition: 'transform .18s' },\n            dangerouslySetInnerHTML: { __html: '<path d=\"M6 9l6 6 6-6\"/>' },\n        }),\n    ]);\n\n    const menu = React.createElement('div', {\n        key: 'menu',\n        role: 'menu',\n        style: {\n            position: 'absolute', top: 'calc(100% + 6px)', insetInlineEnd: 0, zIndex: 60,\n            display: open ? 'block' : 'none',\n            minWidth: '158px', padding: '5px', borderRadius: '11px',\n            border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)',\n            boxShadow: '0 14px 34px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))',\n        },\n    }, OPTIONS.map((option) => {\n        const active = option.mode === mode;\n        return React.createElement('button', {\n            key: option.mode,\n            type: 'button',\n            role: 'menuitemradio',\n            'aria-checked': active ? 'true' : 'false',\n            onClick: () => { api.set(option.mode); setOpen(false); },\n            style: {\n                width: '100%', display: 'flex', alignItems: 'center', gap: '10px',\n                padding: '8px 10px', borderRadius: '8px', border: 'none',\n                fontSize: '13px', fontFamily: 'inherit',\n                fontWeight: active ? 600 : 500,\n                color: active ? 'var(--sb-text-2)' : 'var(--sb-text-6)',\n                background: active ? 'rgba(var(--sb-ink), 0.06)' : 'transparent',\n                cursor: 'pointer', textAlign: 'start', whiteSpace: 'nowrap',\n            },\n        }, [\n            React.createElement('span', {\n                key: 'i',\n                style: { flex: 'none', display: 'grid', placeItems: 'center', width: '16px', color: active ? 'var(--sb-orange)' : 'var(--sb-text-9)' },\n            }, svg(option.icon, 14, 1.9)),\n            React.createElement('span', { key: 'l', style: { flex: 1 } }, option.label),\n            // The check is the only thing that distinguishes \"system, currently dark\"\n            // from \"dark\" \u2014 the trigger icon cannot, because both look dark.\n            active && React.createElement('span', {\n                key: 'c',\n                style: { flex: 'none', display: 'grid', placeItems: 'center', color: 'var(--sb-orange)' },\n            }, svg('<path d=\"M4.5 12.5l5 5 10-11\"/>', 12, 2.6)),\n        ]);\n    }));\n\n    return React.createElement('div', {\n        ref: rootRef,\n        style: { position: 'relative', display: 'inline-flex' },\n    }, [trigger, menu]);\n};\n\nwindow.ThemeSwitcher = ThemeSwitcher;\n\nexport { ThemeSwitcher };\n", "import { t } from '../../i18n/index.js';\n// The version shown in the header comes from package.json rather than a literal,\n// so a release cannot ship a header advertising the previous one. It was\n// hard-coded and drifted. A named import lets the bundler inline just this field\n// instead of embedding the whole manifest.\nimport { version as packageVersion } from '../../../package.json';\nimport { LanguageSwitcher } from './LanguageSwitcher.jsx';\nimport { ThemeSwitcher } from './ThemeSwitcher.jsx';\n\nconst APP_VERSION = `v${packageVersion}`;\n\nconst EnhancedMinimalHeader = ({\n    status,\n    fingerprint,\n    verificationCode,\n    onDisconnect,\n    isConnected,\n    securityLevel,\n    webrtcManager\n}) => {\n    const [realSecurityLevel, setRealSecurityLevel] = React.useState(null);\n    const [lastSecurityUpdate, setLastSecurityUpdate] = React.useState(0);\n    // Added local session state to remove references errors after session timer removal\n    const [hasActiveSession, setHasActiveSession] = React.useState(false);\n    const [currentTimeLeft, setCurrentTimeLeft] = React.useState(0);\n    const [sessionType, setSessionType] = React.useState('unknown');\n\n    // ============================================\n    // FIXED SECURITY UPDATE LOGIC\n    // ============================================\n    \n    React.useEffect(() => {\n        let isUpdating = false; \n        let lastUpdateAttempt = 0; \n        \n        const updateRealSecurityStatus = async () => {\n            const now = Date.now();\n            if (now - lastUpdateAttempt < 10000) { \n                return;\n            }\n\n            if (isUpdating) {\n                return;\n            }\n            \n            isUpdating = true;\n            lastUpdateAttempt = now;\n            \n            try {\n                if (!webrtcManager || !isConnected) {\n                    return;\n                }\n                \n                const activeWebrtcManager = webrtcManager;\n                \n                let realSecurityData = null;\n                \n                if (typeof activeWebrtcManager.getRealSecurityLevel === 'function') {\n                    realSecurityData = await activeWebrtcManager.getRealSecurityLevel();\n                } else if (typeof activeWebrtcManager.calculateAndReportSecurityLevel === 'function') {\n                    realSecurityData = await activeWebrtcManager.calculateAndReportSecurityLevel();\n                } else {\n                    realSecurityData = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(activeWebrtcManager);\n                }\n                \n                if (realSecurityData && realSecurityData.isRealData !== false) {\n                    const currentScore = realSecurityLevel?.score || 0;\n                    const newScore = realSecurityData.score || 0;\n\n                    if (currentScore !== newScore || !realSecurityLevel) {\n                        setRealSecurityLevel(realSecurityData);\n                        setLastSecurityUpdate(now);\n\n                        } else if (window.DEBUG_MODE) {\n                    }\n                } else {\n                    \n                }\n                \n            } catch (error) {\n                \n            } finally {\n                isUpdating = false;\n            }\n        };\n\n        if (isConnected) {\n            updateRealSecurityStatus();\n            \n            if (!realSecurityLevel || realSecurityLevel.score < 50) {\n                const retryInterval = setInterval(() => {\n                    if (!realSecurityLevel || realSecurityLevel.score < 50) {\n                        updateRealSecurityStatus();\n                    } else {\n                        clearInterval(retryInterval);\n                    }\n                }, 5000); \n                \n                setTimeout(() => clearInterval(retryInterval), 30000);\n            }\n        }\n\n        const interval = setInterval(updateRealSecurityStatus, 30000);\n        \n        return () => clearInterval(interval);\n    }, [webrtcManager, isConnected]);\n\n    // ============================================\n    // FIXED EVENT HANDLERS\n    // ============================================\n\n    React.useEffect(() => {\n        const handleSecurityUpdate = (event) => {\n\n            setTimeout(() => {\n                setLastSecurityUpdate(0);\n            }, 100);\n        };\n\n        const handleRealSecurityCalculated = (event) => {\n            \n            if (event.detail && event.detail.securityData) {\n                setRealSecurityLevel(event.detail.securityData);\n                setLastSecurityUpdate(Date.now());\n            }\n        };\n\n        document.addEventListener('security-level-updated', handleSecurityUpdate);\n        document.addEventListener('real-security-calculated', handleRealSecurityCalculated);\n        \n        window.forceHeaderSecurityUpdate = (webrtcManager) => {\n            \n            if (webrtcManager && window.EnhancedSecureCryptoUtils) {\n                window.EnhancedSecureCryptoUtils.calculateSecurityLevel(webrtcManager)\n                    .then(securityData => {\n                        if (securityData && securityData.isRealData !== false) {\n                            setRealSecurityLevel(securityData);\n                            setLastSecurityUpdate(Date.now());\n                            \n                        }\n                    })\n                    .catch(error => {\n                        \n                    });\n            } else {\n                setLastSecurityUpdate(0); \n            }\n        };\n\n        return () => {\n            document.removeEventListener('security-level-updated', handleSecurityUpdate);\n            document.removeEventListener('real-security-calculated', handleRealSecurityCalculated);\n        };\n    }, []);\n\n    // ============================================\n    // REST of the component logic\n    // ============================================\n\n    React.useEffect(() => {\n        // All security features are enabled by default - no session management needed\n        setHasActiveSession(true);\n        setCurrentTimeLeft(0);\n        setSessionType('premium'); // All features enabled\n    }, []);\n\n    React.useEffect(() => {\n        // All security features are enabled by default\n        setHasActiveSession(true);\n        setCurrentTimeLeft(0);\n        setSessionType('premium'); // All features enabled\n    }, []);\n\n    React.useEffect(() => {\n        const handleForceUpdate = (event) => {\n            // All security features are enabled by default\n            setHasActiveSession(true);\n            setCurrentTimeLeft(0);\n            setSessionType('premium'); // All features enabled\n        };\n\n        // Connection cleanup handler (use existing event from module)\n        const handleConnectionCleaned = () => {\n            \n\n            setRealSecurityLevel(null);\n            setLastSecurityUpdate(0);\n\n            setHasActiveSession(false);\n            setCurrentTimeLeft(0);\n            setSessionType('unknown');\n        };\n\n        const handlePeerDisconnect = () => {\n            \n\n            setRealSecurityLevel(null);\n            setLastSecurityUpdate(0);\n        };\n\n        const handleDisconnected = () => {\n\n            setRealSecurityLevel(null);\n            setLastSecurityUpdate(0);\n            setHasActiveSession(false);\n            setCurrentTimeLeft(0);\n            setSessionType('unknown');\n        };\n\n        document.addEventListener('force-header-update', handleForceUpdate);\n        document.addEventListener('peer-disconnect', handlePeerDisconnect);\n        document.addEventListener('connection-cleaned', handleConnectionCleaned);\n        document.addEventListener('disconnected', handleDisconnected);\n        \n        return () => {\n            document.removeEventListener('force-header-update', handleForceUpdate);\n            document.removeEventListener('peer-disconnect', handlePeerDisconnect);\n            document.removeEventListener('connection-cleaned', handleConnectionCleaned);\n            document.removeEventListener('disconnected', handleDisconnected);\n        };\n    }, []);\n\n    // ============================================\n    // SECURITY INDICATOR CLICK HANDLER\n    // ============================================\n\n    const handleSecurityClick = async (event) => {\n        // Check if it's a right-click or Ctrl+click to disconnect\n        if (event && (event.button === 2 || event.ctrlKey || event.metaKey)) {\n            if (onDisconnect && typeof onDisconnect === 'function') {\n                onDisconnect();\n                return;\n            }\n        }\n\n        // Prevent default behavior\n        event.preventDefault();\n        event.stopPropagation();\n\n\n        // Run real security tests if webrtcManager is available\n        let realTestResults = null;\n        if (webrtcManager && window.EnhancedSecureCryptoUtils) {\n            try {\n                realTestResults = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(webrtcManager);\n                \n            } catch (error) {\n                \n            }\n        } else {\n            \n        }\n\n        // If no real test results and no existing security level, show progress message\n        if (!realTestResults && !realSecurityLevel) {\n            alert(t('sec.verificationWait'));\n            return;\n        }\n\n        // Use real test results if available, otherwise fall back to current data\n        let securityData = realTestResults || realSecurityLevel;\n\n        // If still no security data, create a basic fallback\n        if (!securityData) {\n            securityData = {\n                level: 'UNKNOWN',\n                score: 0,\n                color: 'gray',\n                verificationResults: {},\n                timestamp: Date.now(),\n                details: t('sec.verificationUnavailable'),\n                isRealData: false,\n                passedChecks: 0,\n                totalChecks: 0\n            };\n            \n        }\n\n        // Detailed information about the REAL security check\n        let message = `REAL-TIME SECURITY VERIFICATION\\n\\n`;\n        message += `Security Level: ${securityData.level} (${securityData.score}%)\\n`;\n        message += `Verification Time: ${new Date(securityData.timestamp).toLocaleTimeString()}\\n`;\n        message += `Data Source: ${securityData.isRealData ? t('sec.realTests') : t('sec.simulatedData')}\\n\\n`;\n        \n        if (securityData.verificationResults) {\n            message += 'DETAILED CRYPTOGRAPHIC TESTS:\\n';\n            message += '=' + '='.repeat(40) + '\\n';\n            \n            const passedTests = Object.entries(securityData.verificationResults).filter(([key, result]) => result.passed);\n            const failedTests = Object.entries(securityData.verificationResults).filter(([key, result]) => !result.passed);\n            \n            if (passedTests.length > 0) {\n                message += 'PASSED TESTS:\\n';\n                passedTests.forEach(([key, result]) => {\n                    const testName = key.replace(/([A-Z])/g, ' $1').replace(/^./, str => str.toUpperCase());\n                    message += `   ${testName}: ${result.details || t('sec.testPassed')}\\n`;\n                });\n                message += '\\n';\n            }\n            \n            if (failedTests.length > 0) {\n                message += 'FAILED/UNAVAILABLE TESTS:\\n';\n                failedTests.forEach(([key, result]) => {\n                    const testName = key.replace(/([A-Z])/g, ' $1').replace(/^./, str => str.toUpperCase());\n                    message += `   ${testName}: ${result.details || t('sec.testFailed')}\\n`;\n                });\n                message += '\\n';\n            }\n            \n            message += `SUMMARY:\\n`;\n            message += `Passed: ${securityData.passedChecks}/${securityData.totalChecks} tests\\n`;\n            message += `Score: ${securityData.score}/${securityData.maxPossibleScore || 100} points\\n\\n`;\n        }\n        \n        // Real security features status\n        message += `SECURITY FEATURES STATUS:\\n`;\n        message += '=' + '='.repeat(40) + '\\n';\n        \n        if (securityData.verificationResults) {\n            const features = {\n                'ECDSA Digital Signatures': securityData.verificationResults.verifyECDSASignatures?.passed || false,\n                'ECDH Key Exchange': securityData.verificationResults.verifyECDHKeyExchange?.passed || false,\n                'AES-GCM Encryption': securityData.verificationResults.verifyEncryption?.passed || false,\n                [t('sec.messageIntegrity')]: securityData.verificationResults.verifyMessageIntegrity?.passed || false,\n                [t('sec.forwardSecrecy')]: securityData.verificationResults.verifyPerfectForwardSecrecy?.passed || false,\n                [t('sec.replayProtection')]: securityData.verificationResults.verifyReplayProtection?.passed || false,\n                'DTLS Fingerprint': securityData.verificationResults.verifyDTLSFingerprint?.passed || false,\n                'SAS Verification': securityData.verificationResults.verifySASVerification?.passed || false,\n                [t('sec.metadataProtection')]: securityData.verificationResults.verifyMetadataProtection?.passed || false,\n                [t('sec.trafficObfuscation')]: securityData.verificationResults.verifyTrafficObfuscation?.passed || false\n            };\n            \n            Object.entries(features).forEach(([feature, isEnabled]) => {\n                message += `${isEnabled ? '\u2705' : '\u274C'} ${feature}\\n`;\n            });\n        } else {\n            // Fallback if no verification results\n            message += `\u2705 ECDSA Digital Signatures\\n`;\n            message += `\u2705 ECDH Key Exchange\\n`;\n            message += `\u2705 AES-GCM Encryption\\n`;\n            message += `\u2705 Message Integrity (HMAC)\\n`;\n            message += `\u2705 Perfect Forward Secrecy\\n`;\n            message += `\u2705 Replay Protection\\n`;\n            message += `\u2705 DTLS Fingerprint\\n`;\n            message += `\u2705 SAS Verification\\n`;\n            message += `\u2705 Metadata Protection\\n`;\n            message += `\u2705 Traffic Obfuscation\\n`;\n        }\n        \n        message += `\\n${securityData.details || t('sec.verificationDone')}`;\n        \n        if (securityData.isRealData) {\n            message += '\\n\\n\u2705 This is REAL-TIME verification using actual cryptographic functions.';\n        } else {\n            message += '\\n\\n\u26A0\uFE0F Warning: This data may be simulated. Connection may not be fully established.';\n        }\n        \n        // Show in a more user-friendly way\n        const modal = document.createElement('div');\n        modal.style.cssText = `\n            position: fixed;\n            top: 0;\n            left: 0;\n            width: 100%;\n            height: 100%;\n            background: rgba(var(--sb-scrim-rgb), 0.8);\n            z-index: 10000;\n            display: flex;\n            align-items: center;\n            justify-content: center;\n            font-family: monospace;\n        `;\n        \n        const content = document.createElement('div');\n        content.style.cssText = `\n            background: var(--sb-legacy-panel);\n            color: var(--sb-text-1);\n            padding: 20px;\n            border-radius: 8px;\n            max-width: 80%;\n            max-height: 80%;\n            overflow-y: auto;\n            white-space: pre-line;\n            border: 1px solid var(--sb-surface-5);\n        `;\n        \n        content.textContent = message;\n        modal.appendChild(content);\n        \n        // Close on click outside\n        modal.addEventListener('click', (e) => {\n            if (e.target === modal) {\n                document.body.removeChild(modal);\n            }\n        });\n        \n        // Close on Escape key\n        const handleKeyDown = (e) => {\n            if (e.key === 'Escape') {\n                document.body.removeChild(modal);\n                document.removeEventListener('keydown', handleKeyDown);\n            }\n        };\n        document.addEventListener('keydown', handleKeyDown);\n        \n        document.body.appendChild(modal);\n    };\n\n    // ============================================\n    // DISPLAY UTILITIES\n    // ============================================\n\n    const getStatusConfig = () => {\n        switch (status) {\n            case 'connected':\n                return {\n                    text: t('status.connected'),\n                    className: 'status-connected',\n                    badgeClass: 'bg-green-500/10 text-green-400 border-green-500/20'\n                };\n            case 'verifying':\n                return {\n                    text: t('status.verifying'),\n                    className: 'status-verifying',\n                    badgeClass: 'bg-purple-500/10 text-purple-400 border-purple-500/20'\n                };\n            case 'connecting':\n                return {\n                    text: t('status.connecting'),\n                    className: 'status-connecting',\n                    badgeClass: 'bg-blue-500/10 text-blue-400 border-blue-500/20'\n                };\n            case 'retrying':\n                return {\n                    text: t('status.retrying'),\n                    className: 'status-connecting',\n                    badgeClass: 'bg-yellow-500/10 text-yellow-400 border-yellow-500/20'\n                };\n            case 'failed':\n                return {\n                    text: t('status.error'),\n                    className: 'status-failed',\n                    badgeClass: 'bg-red-500/10 text-red-400 border-red-500/20'\n                };\n            case 'reconnecting':\n                return {\n                    text: t('status.reconnecting'),\n                    className: 'status-connecting',\n                    badgeClass: 'bg-yellow-500/10 text-yellow-400 border-yellow-500/20'\n                };\n            case 'peer_disconnected':\n                return {\n                    text: t('status.peerDisconnected'),\n                    className: 'status-failed',\n                    badgeClass: 'bg-orange-500/10 text-orange-400 border-orange-500/20'\n                };\n            default:\n                return {\n                    text: t('status.notConnected'),\n                    className: 'status-disconnected',\n                    badgeClass: 'bg-gray-500/10 text-gray-400 border-gray-500/20'\n                };\n        }\n    };\n\n    const config = getStatusConfig();\n    const displaySecurityLevel = isConnected ? (realSecurityLevel || securityLevel) : null;\n    \n\n    // ============================================\n    // DATA RELIABILITY INDICATOR\n    // ============================================\n\n    const getSecurityIndicatorDetails = () => {\n        if (!displaySecurityLevel) {\n            return {\n                tooltip: t('sec.verificationInProgress'),\n                isVerified: false,\n                dataSource: 'loading'\n            };\n        }\n        \n        const isRealData = displaySecurityLevel.isRealData !== false;\n        const baseTooltip = `${displaySecurityLevel.level} (${displaySecurityLevel.score}%)`;\n        \n        if (isRealData) {\n            return {\n                tooltip: `${baseTooltip} - Real-time verification \u2705\\nRight-click or Ctrl+click to disconnect`,\n                isVerified: true,\n                dataSource: 'real'\n            };\n        } else {\n            return {\n                tooltip: `${baseTooltip} - Estimated (connection establishing...)\\nRight-click or Ctrl+click to disconnect`,\n                isVerified: false,\n                dataSource: 'estimated'\n            };\n        }\n    };\n\n    const securityDetails = getSecurityIndicatorDetails();\n\n    // ============================================\n    // ADDING global methods for debugging\n    // ============================================\n\n    React.useEffect(() => {\n        window.debugHeaderSecurity = undefined;\n        \n        return () => {\n            delete window.debugHeaderSecurity;\n        };\n    }, [realSecurityLevel, lastSecurityUpdate, isConnected, webrtcManager, displaySecurityLevel, securityDetails]);\n\n    // ============================================\n    // RENDER\n    // ============================================\n\n    const secColor = displaySecurityLevel\n        ? (displaySecurityLevel.color === 'green' ? 'var(--sb-green)' : displaySecurityLevel.color === 'orange' ? 'var(--sb-orange)' : displaySecurityLevel.color === 'yellow' ? 'var(--sb-yellow)' : 'var(--sb-red)')\n        : 'var(--sb-green)';\n    // The dot is a mark, not a label, so it takes the -solid accents: the brand colour\n    // in both themes. The text-safe accents darken on a light ground, which is right for\n    // a word and wrong for a 7px circle.\n    const dotColor = isConnected ? 'var(--sb-green-solid)'\n        : (['connecting', 'verifying', 'retrying', 'reconnecting'].includes(status) ? 'var(--sb-yellow-solid)'\n        : (status === 'failed' ? 'var(--sb-red-solid)' : 'var(--sb-text-9)'));\n    const dotGlow = dotColor === 'var(--sb-green-solid)' ? 'rgba(var(--sb-green-rgb), 0.16)' : dotColor === 'var(--sb-yellow-solid)' ? 'rgba(var(--sb-yellow-rgb), 0.16)' : dotColor === 'var(--sb-red-solid)' ? 'rgba(var(--sb-red-rgb), 0.16)' : 'rgba(var(--sb-text-9-rgb), 0.16)';\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\n    // On the landing / setup view (no verified connection) the new Start Secure\n    // screen owns the network settings and step status, so keep the header clean:\n    // brand only \u2014 no status pill, no settings. The bar is transparent at the top\n    // of the page and gains a blurred background once the user scrolls.\n    const onLanding = !isConnected;\n    const [scrolled, setScrolled] = React.useState(false);\n    React.useEffect(() => {\n        const onScroll = () => setScrolled((window.scrollY || window.pageYOffset || 0) > 8);\n        onScroll();\n        window.addEventListener('scroll', onScroll, { passive: true });\n        return () => window.removeEventListener('scroll', onScroll);\n    }, []);\n\n    // On the landing the header floats *over* the full-height hero (position\n    // fixed), transparent at the top and blurred once scrolled. When connected it\n    // falls back to the in-flow sticky bar.\n    // The bar is a material, not a coloured strip: a big surface reads as a thick\n    // one, so it gets a heavy blur, and the saturation bump is what stops a\n    // blurred dark background from going flat grey. Blur and background are\n    // animated together so the bar *materialises* on scroll rather than fading in.\n    const GLASS = 'blur(20px) saturate(180%)';\n    const MATERIALISE = 'background .25s ease, backdrop-filter .25s ease, -webkit-backdrop-filter .25s ease, border-color .25s ease';\n    // Installed on iOS the web view starts at the physical top of the screen, so a\n    // bar pinned to top:0 sits under the clock and the notch. --sb-safe-top is that\n    // strip (src/styles/pwa.css) and 0 in a browser tab, so it can be added\n    // unconditionally: the bar grows by the inset and its contents clear the status\n    // bar, while the translucent background still reaches the top edge.\n    const safeTop = { paddingTop: 'var(--sb-safe-top, 0px)', paddingBottom: 'var(--sb-bar-extra, 0px)' };\n    const overlay = { position: 'fixed', top: 0, left: 0, right: 0, ...safeTop };\n    const headerStyle = onLanding\n        ? (scrolled\n            ? { ...overlay, background: 'rgba(var(--sb-bg-rgb), 0.72)', backdropFilter: GLASS, WebkitBackdropFilter: GLASS, borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', transition: MATERIALISE }\n            : { ...overlay, background: 'transparent', backdropFilter: 'blur(0px) saturate(100%)', WebkitBackdropFilter: 'blur(0px) saturate(100%)', borderBottom: '1px solid transparent', transition: MATERIALISE })\n        : { ...safeTop, background: 'rgba(var(--sb-bg-rgb), 0.72)', backdropFilter: GLASS, WebkitBackdropFilter: GLASS, borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' };\n\n    return React.createElement('header', {\n        className: onLanding ? 'header-minimal z-50' : 'header-minimal sticky top-0 z-50',\n        style: headerStyle\n    }, [\n        React.createElement('div', {\n            key: 'container',\n            className: 'max-w-7xl mx-auto',\n            style: { padding: '0 20px' }\n        }, [\n            React.createElement('div', {\n                key: 'content',\n                className: 'flex items-center justify-between',\n                style: { height: 'var(--sb-bar-h, 64px)', gap: '16px' }\n            }, [\n                // Left: logo + wordmark\n                React.createElement('div', { key: 'left', style: { display: 'flex', alignItems: 'center', gap: '12px', minWidth: 0 } }, [\n                    React.createElement('div', { key: 'logo', style: { width: '36px', height: '36px', flex: 'none', display: 'grid', placeItems: 'center' } },\n                        React.createElement('img', { src: '/logo/securebit-mark.svg', alt: 'SecureBit', style: { width: '100%', height: '100%', objectFit: 'contain', display: 'block' } })\n                    ),\n                    React.createElement('div', { key: 'txt', style: { lineHeight: 1.2, minWidth: 0 } }, [\n                        React.createElement('div', { key: 'r1', style: { display: 'flex', alignItems: 'baseline', gap: '7px' } }, [\n                            React.createElement('span', { key: 'n', style: { fontSize: '16px', fontWeight: 800, letterSpacing: '-0.3px', color: 'var(--sb-text-2)' } }, 'SecureBit'),\n                            React.createElement('span', { key: 'v', style: { fontFamily: MONO, fontSize: '10px', fontWeight: 500, color: 'var(--sb-text-faint)' } }, APP_VERSION)\n                        ]),\n                        React.createElement('div', { key: 'r2', className: 'hidden sm:block', style: { fontSize: '11px', color: 'var(--sb-text-9)', fontWeight: 500 } }, t('hdr.tagline'))\n                    ])\n                ]),\n                // Right: controls\n                React.createElement('div', { key: 'right', style: { display: 'flex', alignItems: 'center', gap: '9px' } }, [\n                    // Landing only: switching locale reloads the document, which would\n                    // tear down an live peer connection if offered inside the chat.\n                    onLanding && React.createElement(LanguageSwitcher, { key: 'lang' }),\n\n                    // Landing only, alongside the language switcher: the connected\n                    // header has no room left, and the preference survives the move\n                    // into the chat regardless of where it was set.\n                    onLanding && React.createElement(ThemeSwitcher, { key: 'theme' }),\n\n                    !onLanding && React.createElement('button', {\n                        key: 'net', type: 'button',\n                        onClick: () => window.dispatchEvent(new CustomEvent('securebit:open-network-settings')),\n                        title: t('hdr.netSettingsTitle'), 'aria-label': t('hdr.netSettings'),\n                        className: 'sb-disconnect',\n                        style: { display: 'grid', placeItems: 'center', width: '38px', height: '38px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)', color: 'var(--sb-text-6)', cursor: 'pointer', transition: 'all .15s' }\n                    }, React.createElement('i', { className: 'fas fa-network-wired', style: { fontSize: '13px' } })),\n\n                    (!onLanding && displaySecurityLevel) && React.createElement('div', {\n                        key: 'sec', onClick: handleSecurityClick,\n                        onContextMenu: (e) => { e.preventDefault(); if (typeof onDisconnect === 'function') onDisconnect(); },\n                        title: securityDetails.tooltip, className: 'sb-secpill',\n                        style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '7px 12px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)', cursor: 'pointer' }\n                    }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-shield-halved', style: { fontSize: '13px', color: secColor } }),\n                        React.createElement('span', { key: 'l', className: 'hidden sm:inline', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-2)' } }, (t(`secLevel.${displaySecurityLevel.level}`) === `secLevel.${displaySecurityLevel.level}` ? String(displaySecurityLevel.level) : t(`secLevel.${displaySecurityLevel.level}`))),\n                        React.createElement('span', { key: 's', style: { fontFamily: MONO, fontSize: '11.5px', color: 'var(--sb-text-7)' } }, displaySecurityLevel.score + '%')\n                    ]),\n\n                    !onLanding && React.createElement('div', { key: 'status', style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '8px 13px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)' } }, [\n                        React.createElement('span', { key: 'dot', style: { width: '7px', height: '7px', borderRadius: '50%', background: dotColor, boxShadow: '0 0 0 3px ' + dotGlow } }),\n                        React.createElement('span', { key: 't', className: 'hidden sm:inline', style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-4)' } }, config.text)\n                    ]),\n\n                    isConnected && React.createElement('button', {\n                        key: 'dc', onClick: onDisconnect, className: 'sb-disconnect',\n                        style: { display: 'flex', alignItems: 'center', gap: '7px', padding: '8px 14px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'transparent', color: 'var(--sb-text-6)', fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: 'pointer', transition: 'all .15s' }\n                    }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-power-off', style: { fontSize: '12px' } }),\n                        React.createElement('span', { key: 't', className: 'sb-hide-sm' }, t('hdr.disconnect'))\n                    ])\n                ])\n            ])\n        ])\n    ]);\n};\n\nwindow.EnhancedMinimalHeader = EnhancedMinimalHeader;\n", "// Desktop release these links point at. Bump this one constant when a new\n// desktop version ships \u2014 the version used to be repeated in three URLs in two\n// different forms, which is how they ended up stuck on 0.1.0.\n//\n// The tag is pinned rather than using /releases/latest/download/: the filenames\n// carry the version, so a `latest` link 404s the moment a newer release exists,\n// whereas a pinned tag keeps serving a working (if older) installer.\nconst DESKTOP_VERSION = '1.0.5';\nconst DESKTOP_RELEASE = `https://github.com/SecureBitChat/securebit-desktop/releases/download/v${DESKTOP_VERSION}`;\n\nconst DownloadApps = () => {\n    const apps = [\n        { id: 'web', name: 'Web App', subtitle: 'Browser Version', icon: 'fas fa-globe', platform: 'Web', isActive: true, url: 'https://securebit.chat/', color: 'green' },\n        { id: 'windows', name: 'Windows', subtitle: 'Desktop App', icon: 'fab fa-windows', platform: 'Desktop', isActive: true, url: `${DESKTOP_RELEASE}/SecureBit.Chat_${DESKTOP_VERSION}_x64-setup.exe`, color: 'blue' },\n        { id: 'macos', name: 'macOS', subtitle: 'Desktop App', icon: 'fab fa-safari', platform: 'Desktop', isActive: true, url: `${DESKTOP_RELEASE}/SecureBit.Chat_${DESKTOP_VERSION}_x64.dmg`, color: 'gray' },\n        { id: 'linux', name: 'Linux', subtitle: 'Desktop App', icon: 'fab fa-linux', platform: 'Desktop', isActive: true, url: `${DESKTOP_RELEASE}/SecureBit.Chat_${DESKTOP_VERSION}_amd64.AppImage`, color: 'orange' },\n        { id: 'ios', name: 'iOS', subtitle: 'iPhone & iPad', icon: 'fab fa-apple', platform: 'Mobile', isActive: false, url: 'https://apps.apple.com/app/securebit-chat/', color: 'white' },\n        { id: 'android', name: 'Android', subtitle: 'Google Play', icon: 'fab fa-android', platform: 'Mobile', isActive: false, url: 'https://play.google.com/store/apps/details?id=com.securebit.chat', color: 'green' },\n        { id: 'chrome', name: 'Chrome', subtitle: 'Browser Extension', icon: 'fab fa-chrome', platform: 'Browser', isActive: false, url: '#', color: 'yellow' },\n        { id: 'edge', name: 'Edge', subtitle: 'Browser Extension', icon: 'fab fa-edge', platform: 'Browser', isActive: false, url: '#', color: 'blue' },\n        { id: 'opera', name: 'Opera', subtitle: 'Browser Extension', icon: 'fab fa-opera', platform: 'Browser', isActive: false, url: '#', color: 'red' },\n        { id: 'firefox', name: 'Firefox', subtitle: 'Browser Extension', icon: 'fab fa-firefox-browser', platform: 'Browser', isActive: false, url: '#', color: 'orange' },\n    ];\n\n    const handleDownload = (app) => {\n        if (app.isActive) window.open(app.url, '_blank');\n    };\n\n    const desktopApps = apps.filter(a => a.platform === 'Desktop' || a.platform === 'Web');\n    const mobileApps = apps.filter(a => a.platform === 'Mobile');\n    const browserApps = apps.filter(a => a.platform === 'Browser');\n\n    const cardSize = \"w-28 h-28\";\n\n    const colorClasses = {\n        green: 'text-green-500',\n        blue: 'text-blue-500',\n        gray: 'text-gray-500',\n        orange: 'text-orange-500',\n        red: 'text-red-500',\n        white: 'text-white',\n        yellow: 'text-yellow-400',\n    };\n\n    const renderAppCard = (app) => (\n        React.createElement('div', {\n            key: app.id,\n            className: `group relative ${cardSize} rounded-2xl overflow-hidden card-minimal cursor-pointer`\n        }, [\n            React.createElement('i', {\n                key: 'bg-icon',\n                className: `${app.icon} absolute text-[3rem] ${app.isActive ? colorClasses[app.color] : 'text-white/10'} top-1/2 left-1/2 -translate-x-1/2 -translate-y-1/2 pointer-events-none transition-all duration-500 group-hover:scale-105`\n            }),\n            React.createElement('div', {\n                key: 'overlay',\n                className: \"absolute inset-0 bg-black/30 backdrop-blur-md flex flex-col items-center justify-center text-center opacity-0 transition-opacity duration-300 group-hover:opacity-100\"\n            }, [\n                React.createElement('h4', { key: 'name', className: `text-sm font-semibold text-primary mb-1` }, app.name),\n                React.createElement('p', { key: 'subtitle', className: `text-xs text-secondary mb-2` }, app.subtitle),\n                app.isActive ?\n                    React.createElement('button', {\n                        key: 'btn',\n                        onClick: () => handleDownload(app),\n                        className: `px-2 py-1 rounded-xl bg-emerald-500 text-black font-medium hover:bg-emerald-600 transition-colors text-xs`\n                    }, app.id === \"web\" ? \"Launch\" : \"Download\")\n                    :\n                    React.createElement('span', { key: 'coming', className: \"text-gray-400 font-medium text-xs\" }, \"Coming Soon\")\n            ])\n        ])\n    );\n\n    return React.createElement('div', { className: \"mt-20 px-6\" }, [\n        // Header\n        React.createElement('div', { key: 'header', className: \"text-center max-w-3xl mx-auto mb-12\" }, [\n            React.createElement('h3', { key: 'title', className: \"text-3xl font-bold text-primary mb-3\" }, 'Download SecureBit.chat'),\n            React.createElement('p', { key: 'subtitle', className: \"text-secondary text-lg mb-5\" }, 'Stay secure on every device. Choose your platform and start chatting privately.')\n        ]),\n\n        // Desktop Apps\n        React.createElement('div', { key: 'desktop-row', className: \"hidden sm:flex justify-center flex-wrap gap-6 mb-6\" },\n            desktopApps.map(renderAppCard)\n        ),\n\n        // Mobile Apps\n        React.createElement('div', { key: 'mobile-row', className: \"flex justify-center gap-6 mb-6\" },\n            mobileApps.map(renderAppCard)\n        ),\n\n        // Browser Extensions\n        React.createElement('div', { key: 'browser-row', className: \"flex justify-center gap-6\" },\n            browserApps.map(renderAppCard)\n        )\n    ]);\n};\n\nwindow.DownloadApps = DownloadApps;\n", "import { t } from '../../i18n/index.js';\n\n// \"Trusted by our partners\" \u2014 partner ecosystem section.\n// Translated from the Claude Design component (Partners.dc.html) into the\n// project's React.createElement style: a full-bleed dark band with partner\n// cards plus a dashed \"Become a partner\" invite card.\nconst BecomePartner = () => {\n    const [isMobile, setIsMobile] = React.useState(\n        typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n    );\n\n    React.useEffect(() => {\n        const mq = window.matchMedia('(max-width:767px)');\n        const onChange = () => setIsMobile(mq.matches);\n        mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n        return () => {\n            mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n        };\n    }, []);\n\n    const ACCENT = 'var(--sb-orange)';\n    // Fill form: brand colour in both themes. See app.jsx.\n    const ACCENT_SOLID = 'var(--sb-orange-solid)';\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n    const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n\n    const formUrl = 'https://docs.google.com/forms/d/e/1FAIpQLSc9ijV9PCoyXkus6vEx1OWwvwAsLq8fKS6-H5BmX-c-bvia6w/viewform?usp=dialog';\n\n    const partners = [\n        {\n            id: 'aegis',\n            name: 'Aegis Investment',\n            logo: '/logo/aegis.png',\n            logoHeight: '42px',\n            url: 'https://aegis-investment.com/',\n            desc: t('partners.aegis.desc'),\n            role: t('partners.aegis.role'),\n            delay: '.5s'\n        },\n        {\n            id: 'furi',\n            name: 'FuriLabs',\n            // Renamed on resize rather than replaced: the file carries no ?v= stamp and is\n            // served immutable for a year, so Cloudflare and every browser that had already\n            // seen it kept handing back the old 164 KB original. A new path is the only\n            // thing that reliably busts a cache entry that has no version in its URL.\n            logo: '/logo/furi-160.png',\n            logoHeight: '54px',\n            url: 'https://furilabs.com/',\n            desc: t('partners.furilabs.desc'),\n            role: t('partners.furilabs.role'),\n            delay: '.56s'\n        }\n    ];\n\n    const svg = (inner, size, stroke, sw, className) =>\n        React.createElement('svg', {\n            className, width: size, height: size, viewBox: '0 0 24 24', fill: 'none',\n            stroke, strokeWidth: sw, strokeLinecap: 'round', strokeLinejoin: 'round',\n            dangerouslySetInnerHTML: { __html: inner }\n        });\n\n    const roleTag = (role) => React.createElement('span', {\n        key: 'role',\n        style: { fontFamily: MONO, fontSize: '10.5px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.2px', padding: '6px 11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.025)', whiteSpace: 'nowrap' }\n    }, role);\n\n    const partnerCard = (p) => React.createElement('a', {\n        key: p.id,\n        href: p.url,\n        target: '_blank',\n        rel: 'noopener noreferrer',\n        style: {\n            flex: '1 1 320px', minWidth: isMobile ? 'auto' : '300px',\n            borderRadius: '18px', background: 'var(--sb-surface)', border: '1px solid rgba(var(--sb-ink), 0.06)',\n            padding: '30px 30px 26px', display: 'flex', flexDirection: 'column',\n            textDecoration: 'none', color: 'inherit',\n            transition: 'transform .28s cubic-bezier(.2,.7,.3,1), border-color .28s cubic-bezier(.2,.7,.3,1)',\n            animation: `ptUp ${p.delay} cubic-bezier(.2,.7,.3,1)`\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.transform = 'translateY(-4px)'; e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.13)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.transform = 'none'; e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.06)'; }\n    }, [\n        React.createElement('div', { key: 'logo', style: { display: 'flex', alignItems: 'center', marginBottom: '30px', height: '54px' } },\n            React.createElement('img', {\n                src: p.logo, alt: p.name,\n                // The partner strip sits well below the fold, so these are never part of\n                // the first screen \u2014 but they were being fetched as though they were.\n                // furi.png in particular arrived at 500\u00D7500 and 164 KB to be drawn 54px\n                // tall, which Lighthouse counted as the largest single waste on the page.\n                loading: 'lazy', decoding: 'async',\n                style: { height: p.logoHeight, width: 'auto', maxWidth: '190px', objectFit: 'contain', display: 'block' }\n            })\n        ),\n        React.createElement('h3', { key: 'name', style: { margin: '0 0 9px', fontSize: '21px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, p.name),\n        React.createElement('p', { key: 'desc', style: { margin: '0 0 22px', fontSize: '14.5px', lineHeight: 1.6, color: 'var(--sb-text-6)' } }, p.desc),\n        React.createElement('div', { key: 'foot', style: { marginTop: 'auto', paddingTop: '6px', display: 'flex', alignItems: 'center', gap: '12px' } }, [\n            roleTag(p.role)\n        ])\n    ]);\n\n    const inviteCard = React.createElement('a', {\n        key: 'invite',\n        href: formUrl,\n        target: '_blank',\n        rel: 'noopener noreferrer',\n        style: {\n            flex: '1 1 320px', minWidth: isMobile ? 'auto' : '300px',\n            borderRadius: '18px', background: 'var(--sb-bg)', border: '1px dashed rgba(var(--sb-ink), 0.12)',\n            padding: '30px', display: 'flex', flexDirection: 'column', justifyContent: 'space-between',\n            textDecoration: 'none', color: 'inherit',\n            transition: 'border-color .28s cubic-bezier(.2,.7,.3,1)',\n            animation: 'ptUp .62s cubic-bezier(.2,.7,.3,1)'\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-orange-rgb), 0.4)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.12)'; }\n    }, [\n        React.createElement('div', { key: 'top' }, [\n            React.createElement('div', {\n                key: 'icon',\n                style: { width: '48px', height: '48px', borderRadius: '13px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-orange-rgb), 0.12)', border: '1px solid rgba(var(--sb-orange-rgb), 0.28)', marginBottom: '24px' }\n            }, svg('<path d=\"M16 21v-2a4 4 0 0 0-4-4H6a4 4 0 0 0-4 4v2\"/><circle cx=\"9\" cy=\"7\" r=\"4\"/><path d=\"M19 8v6M22 11h-6\"/>', 23, ACCENT_SOLID, 1.9)),\n            React.createElement('h3', { key: 'title', style: { margin: '0 0 8px', fontSize: '21px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, t('partners.inviteTitle')),\n            React.createElement('p', { key: 'desc', style: { margin: 0, fontSize: '14.5px', lineHeight: 1.6, color: 'var(--sb-text-7)' } }, t('partners.inviteDesc'))\n        ]),\n        React.createElement('span', {\n            key: 'btn',\n            style: {\n                marginTop: '26px', width: '100%', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '10px',\n                padding: '15px 20px', borderRadius: '12px', border: 'none', background: ACCENT_SOLID, color: 'var(--sb-on-accent)',\n                fontFamily: SANS, fontSize: '15px', fontWeight: 700, cursor: 'pointer',\n                boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)', boxSizing: 'border-box',\n                transition: 'background .2s cubic-bezier(.2,.7,.3,1), transform .2s cubic-bezier(.2,.7,.3,1)'\n            }\n        }, [\n            t('partners.inviteCta'),\n            svg('<path d=\"M5 12h14M13 6l6 6-6 6\"/>', 17, 'currentColor', 2.2, 'sb-mirror-rtl')\n        ])\n    ]);\n\n    const inner = React.createElement('div', {\n        key: 'inner',\n        style: { maxWidth: '1240px', margin: '0 auto', padding: isMobile ? '0 18px' : '0 40px' }\n    }, [\n        // Header\n        React.createElement('div', { key: 'head', style: { marginBottom: '44px' } }, [\n            React.createElement('div', {\n                key: 'eyebrow',\n                style: { fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.6px', marginBottom: '14px' }\n            }, t('partners.eyebrow')),\n            // The heading used to share a flex row with a strapline; with that gone the\n            // row had one child and nothing left to arrange.\n            React.createElement('h2', {\n                key: 'h2',\n                style: { margin: 0, fontSize: isMobile ? '30px' : '40px', fontWeight: 800, letterSpacing: '-1.1px', lineHeight: 1.04, color: 'var(--sb-text-1)' }\n            }, t('partners.heading'))\n        ]),\n\n        // Cards\n        React.createElement('div', {\n            key: 'cards',\n            style: { display: 'flex', gap: '18px', alignItems: 'stretch', flexWrap: 'wrap' }\n        }, [\n            ...partners.map(partnerCard),\n            inviteCard\n        ])\n    ]);\n\n    return React.createElement('section', {\n        style: {\n            width: '100%', color: 'var(--sb-text-2)', fontFamily: SANS,\n            padding: isMobile ? '48px 0' : '72px 0',\n            background: 'radial-gradient(1100px 640px at 50% -6%, rgba(var(--sb-orange-rgb), 0.055), transparent 62%), var(--sb-bg)'\n        }\n    }, [\n        React.createElement('style', { key: 'kf', dangerouslySetInnerHTML: { __html: '@keyframes ptUp{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:translateY(0)}}' } }),\n        inner\n    ]);\n};\n\nwindow.BecomePartner = BecomePartner;\n", "import { t, tList } from '../../i18n/index.js';\n\n// \"Why SecureBit is unique\" \u2014 interactive accordion section.\n// Translated from the Claude Design component (Why Unique.dc.html) into the\n// project's React.createElement style. Five horizontal panels; the active one\n// expands to reveal full content, the rest collapse to a vertical spine label.\nconst UniqueFeatureSlider = () => {\n  const [active, setActive] = React.useState(0);\n  const [isMobile, setIsMobile] = React.useState(\n    typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n  );\n\n  React.useEffect(() => {\n    const mq = window.matchMedia('(max-width:767px)');\n    const onChange = () => setIsMobile(mq.matches);\n    mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n    return () => {\n      mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n    };\n  }, []);\n\n  const ACCENT = 'var(--sb-orange)';\n  // The icons are stroked with this, and a stroke is a mark, not a label \u2014 brand\n  // colour in both themes. ACCENT above is for text and darkens on a light ground.\n  const ACCENT_SOLID = 'var(--sb-orange-solid)';\n  const ACTIVE_BG = 'radial-gradient(130% 90% at 28% 0%, rgba(var(--sb-orange-rgb), 0.11), transparent 60%), var(--sb-surface)';\n  const ACTIVE_BD = 'rgba(var(--sb-orange-rgb), 0.3)';\n  const IDLE_BG = 'var(--sb-bg)';\n  const IDLE_BD = 'rgba(var(--sb-ink), 0.06)';\n  const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n  const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n\n  const slides = [\n    {\n      num: '01',\n      title: [t('unique.s1.titleTop'), t('unique.s1.titleBottom')],\n      collapsed: t('unique.s1.collapsed'),\n      desc: t('unique.s1.desc'),\n      tags: tList('unique.s1.tags'),\n      icon: '<path d=\"M12 3l8 4v5c0 4.5-3.2 7.8-8 9-4.8-1.2-8-4.5-8-9V7l8-4z\"/><path d=\"M9.2 12.2l2 2 3.6-3.8\"/>'\n    },\n    {\n      num: '02',\n      title: [t('unique.s2.titleTop'), t('unique.s2.titleBottom')],\n      collapsed: t('unique.s2.collapsed'),\n      desc: t('unique.s2.desc'),\n      tags: tList('unique.s2.tags'),\n      icon: '<circle cx=\"5.5\" cy=\"12\" r=\"2.5\"/><circle cx=\"18.5\" cy=\"6\" r=\"2.5\"/><circle cx=\"18.5\" cy=\"18\" r=\"2.5\"/><path d=\"M7.8 10.8l8.4-3.6M7.8 13.2l8.4 3.6\"/>'\n    },\n    {\n      num: '03',\n      title: [t('unique.s3.titleTop'), t('unique.s3.titleBottom')],\n      collapsed: t('unique.s3.collapsed'),\n      desc: t('unique.s3.desc'),\n      tags: tList('unique.s3.tags'),\n      icon: '<path d=\"M21 8a8.5 8.5 0 0 0-15.6-2.5M3 4v4h4\"/><path d=\"M3 16a8.5 8.5 0 0 0 15.6 2.5M21 20v-4h-4\"/>'\n    },\n    {\n      num: '04',\n      title: [t('unique.s4.titleTop'), t('unique.s4.titleBottom')],\n      collapsed: t('unique.s4.collapsed'),\n      desc: t('unique.s4.desc'),\n      tags: tList('unique.s4.tags'),\n      icon: '<path d=\"M3 7h4l3 10h4M14 7h3l3 0\"/><path d=\"M17 4l3 3-3 3\"/><path d=\"M3 17h4l2-6\"/>'\n    },\n    {\n      num: '05',\n      title: [t('unique.s5.titleTop'), t('unique.s5.titleBottom')],\n      collapsed: t('unique.s5.collapsed'),\n      desc: t('unique.s5.desc'),\n      tags: tList('unique.s5.tags'),\n      icon: '<path d=\"M9.9 5.1A9.6 9.6 0 0 1 12 5c5.5 0 9 5 9 7a11 11 0 0 1-2.2 3M6.3 7.3C3.6 8.9 2 11.2 2 12c0 1.4 3.5 7 10 7 1.6 0 3-.3 4.2-.8\"/><path d=\"M9.9 9.9a3 3 0 0 0 4.2 4.2M3 3l18 18\"/>'\n    }\n  ];\n\n  const svg = (inner, size, stroke, sw) =>\n    React.createElement('svg', {\n      width: size, height: size, viewBox: '0 0 24 24', fill: 'none',\n      stroke, strokeWidth: sw, strokeLinecap: 'round', strokeLinejoin: 'round',\n      dangerouslySetInnerHTML: { __html: inner }\n    });\n\n  const go = (step) =>\n    setActive((a) => (a + step + slides.length) % slides.length);\n\n  const navBtn = (key, onClick, path) =>\n    React.createElement('button', {\n      key, onClick, 'aria-label': key, className: 'sb-mirror-rtl',\n      style: {\n        width: '46px', height: '46px', display: 'grid', placeItems: 'center',\n        borderRadius: '50%', border: '1px solid rgba(var(--sb-ink), 0.1)',\n        background: 'rgba(var(--sb-ink), 0.025)', color: 'var(--sb-text-4)', cursor: 'pointer',\n        transition: 'all .2s cubic-bezier(.2,.7,.3,1)'\n      },\n      onMouseEnter: (e) => { e.currentTarget.style.borderColor = ACTIVE_BD; e.currentTarget.style.color = ACCENT; },\n      onMouseLeave: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.1)'; e.currentTarget.style.color = 'var(--sb-text-4)'; }\n    }, svg(path, 18, 'currentColor', 2.1));\n\n  const tag = (label) =>\n    React.createElement('span', {\n      key: label,\n      style: {\n        display: 'inline-flex', alignItems: 'center', gap: '7px', padding: '7px 12px',\n        borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)',\n        background: 'rgba(var(--sb-ink), 0.025)', fontFamily: MONO,\n        fontSize: '11.5px', fontWeight: 500, color: 'var(--sb-text-6)'\n      }\n    }, [\n      React.createElement('span', { key: 'dot', style: { width: '5px', height: '5px', borderRadius: '50%', background: 'var(--sb-green-solid)' } }),\n      label\n    ]);\n\n  const expandedContent = (s) =>\n    React.createElement('div', {\n      key: 'exp',\n      style: {\n        height: '100%', display: 'flex', flexDirection: 'column',\n        justifyContent: isMobile ? 'flex-start' : 'space-between',\n        gap: isMobile ? '18px' : 0,\n        padding: isMobile ? '24px 22px' : '32px 34px',\n        minWidth: isMobile ? 'auto' : '320px',\n        animation: 'wuUp .42s cubic-bezier(.2,.7,.3,1)'\n      }\n    }, [\n      React.createElement('div', { key: 'top', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between' } }, [\n        React.createElement('div', {\n          key: 'ic',\n          style: {\n            width: '54px', height: '54px', borderRadius: '15px', display: 'grid', placeItems: 'center',\n            background: 'rgba(var(--sb-orange-rgb), 0.13)', border: '1px solid rgba(var(--sb-orange-rgb), 0.3)'\n          }\n        }, svg(s.icon, 26, ACCENT_SOLID, 1.9)),\n        React.createElement('span', { key: 'n', style: { fontFamily: MONO, fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-9)' } }, s.num)\n      ]),\n      React.createElement('div', { key: 'mid' }, [\n        React.createElement('h3', {\n          key: 'h', style: { margin: '0 0 12px', fontSize: isMobile ? '24px' : '30px', fontWeight: 800, letterSpacing: '-0.7px', lineHeight: 1.08, color: 'var(--sb-text-1)' }\n        }, [s.title[0], React.createElement('br', { key: 'br' }), s.title[1]]),\n        React.createElement('p', {\n          key: 'p', style: { margin: 0, fontSize: '15px', lineHeight: 1.6, color: 'var(--sb-text-6)', maxWidth: '380px' }\n        }, s.desc)\n      ]),\n      React.createElement('div', { key: 'tags', style: { display: 'flex', flexWrap: 'wrap', gap: '8px' } }, s.tags.map(tag))\n    ]);\n\n  const collapsedContent = (s) => isMobile\n    ? React.createElement('div', {\n        key: 'col',\n        style: { display: 'flex', alignItems: 'center', gap: '16px', padding: '20px 22px' }\n      }, [\n        React.createElement('span', { key: 'n', style: { fontFamily: MONO, fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-faint)' } }, s.num),\n        React.createElement('span', { key: 'l', style: { fontSize: '16px', fontWeight: 800, letterSpacing: '-0.2px', color: 'var(--sb-text-4)' } }, s.collapsed)\n      ])\n    : React.createElement('div', {\n        key: 'col',\n        style: { position: 'absolute', inset: 0, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'space-between', padding: '24px 0' }\n      }, [\n        React.createElement('span', { key: 'n', style: { fontFamily: MONO, fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-faint)' } }, s.num),\n        React.createElement('span', {\n          key: 'l',\n          style: { writingMode: 'vertical-rl', transform: 'rotate(180deg)', fontSize: '17px', fontWeight: 800, letterSpacing: '-0.2px', color: 'var(--sb-text-4)', whiteSpace: 'nowrap' }\n        }, s.collapsed),\n        svg(s.icon, 22, 'var(--sb-text-faint)', 1.8)\n      ]);\n\n  const panels = slides.map((s, i) => {\n    const isActive = active === i;\n    return React.createElement('div', {\n      key: i,\n      onClick: () => setActive(i),\n      // Selection is click-only (like the design); hover just brightens the panel\n      // a touch so the orange glow never jumps around chasing the cursor.\n      onMouseEnter: (e) => { if (!isActive) e.currentTarget.style.filter = 'brightness(1.18)'; },\n      onMouseLeave: (e) => { e.currentTarget.style.filter = 'none'; },\n      style: {\n        flex: isMobile ? 'none' : (isActive ? 6.2 : 1),\n        minWidth: isMobile ? 'auto' : '72px',\n        position: 'relative',\n        borderRadius: '18px',\n        overflow: 'hidden',\n        cursor: 'pointer',\n        background: isActive ? ACTIVE_BG : IDLE_BG,\n        border: '1px solid ' + (isActive ? ACTIVE_BD : IDLE_BD),\n        color: 'var(--sb-text-7)',\n        transition: 'flex .46s cubic-bezier(.2,.7,.3,1), background .3s ease, border-color .3s ease, filter .2s ease'\n      }\n    }, isActive ? expandedContent(s) : collapsedContent(s));\n  });\n\n  const inner = React.createElement('div', {\n    key: 'inner',\n    style: {\n      maxWidth: '1180px', margin: '0 auto',\n      padding: isMobile ? '0 18px' : '0 40px'\n    }\n  }, [\n    // Header\n    React.createElement('div', {\n      key: 'head',\n      style: { display: 'flex', alignItems: 'flex-end', justifyContent: 'space-between', gap: '24px', marginBottom: '28px' }\n    }, [\n      React.createElement('div', { key: 'titles' }, [\n        React.createElement('div', {\n          key: 'eyebrow',\n          style: { fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.4px', marginBottom: '12px' }\n        }, t('unique.eyebrow')),\n        React.createElement('h2', {\n          key: 'h2',\n          style: { margin: 0, fontSize: isMobile ? '28px' : '38px', fontWeight: 800, letterSpacing: '-1.1px', lineHeight: 1.05, color: 'var(--sb-text-1)' }\n        }, t('unique.heading'))\n      ]),\n      React.createElement('div', { key: 'nav', style: { display: 'flex', alignItems: 'center', gap: '10px', flex: 'none' } }, [\n        navBtn('prev', () => go(-1), '<path d=\"M15 6l-6 6 6 6\"/>'),\n        navBtn('next', () => go(1), '<path d=\"M9 6l6 6-6 6\"/>')\n      ])\n    ]),\n\n    // Accordion\n    React.createElement('div', {\n      key: 'accordion',\n      style: {\n        display: 'flex',\n        flexDirection: isMobile ? 'column' : 'row',\n        gap: isMobile ? '12px' : '14px',\n        height: isMobile ? 'auto' : '440px'\n      }\n    }, panels)\n  ]);\n\n  // Full-bleed dark band with the radial accent glow \u2014 matches the design mockup.\n  return React.createElement('section', {\n    style: {\n      width: '100%', color: 'var(--sb-text-2)', fontFamily: SANS,\n      padding: isMobile ? '44px 0' : '64px 0',\n      background: 'radial-gradient(1100px 700px at 18% 8%, rgba(var(--sb-orange-rgb), 0.05), transparent 60%), var(--sb-bg)'\n    }\n  }, [\n    React.createElement('style', { key: 'kf', dangerouslySetInnerHTML: { __html: '@keyframes wuUp{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}' } }),\n    inner\n  ]);\n};\n\n// Export for use in your app\nwindow.UniqueFeatureSlider = UniqueFeatureSlider;\n", "import { t, tList } from '../../i18n/index.js';\n\n// \"Development Roadmap\" \u2014 milestone timeline section.\n// Translated from the Claude Design component (Roadmap.dc.html): a full-bleed\n// dark band with a shipped-progress bar and an expandable, status-coded timeline.\nfunction Roadmap() {\n    const [isMobile, setIsMobile] = React.useState(\n        typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n    );\n\n    React.useEffect(() => {\n        const mq = window.matchMedia('(max-width:767px)');\n        const onChange = () => setIsMobile(mq.matches);\n        mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n        return () => {\n            mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n        };\n    }, []);\n\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n    const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n\n    const DATA = [\n        { v: \"v1.0\", k: 'r1', status: \"released\" },\n        { v: \"v1.5\", k: 'r2', status: \"released\" },\n        { v: \"v2.0\", k: 'r3', status: \"released\" },\n        { v: \"v3.0\", k: 'r4', status: \"released\" },\n        { v: \"v3.5\", k: 'r5', status: \"released\" },\n        { v: \"v4.5\", k: 'r6', status: \"released\" },\n        { v: \"v5.0\", k: 'r7', status: \"released\" },\n        { v: \"v5.5\", k: 'r8', status: \"released\" },\n        { v: \"v6.0\", k: 'r9', status: \"current\" },\n        { v: \"v6.5\", k: 'r10', status: \"dev\" },\n        { v: \"v7.0\", k: 'r11', status: \"planned\" },\n        { v: \"v7.5\", k: 'r12', status: \"research\" },\n        { v: \"v8.0\", k: 'r13', status: \"research\" }\n    ].map((d) => ({\n        ...d,\n        // Version tag and status are identifiers, not copy; everything a reader\n        // actually reads comes from the locale file.\n        title: t(`roadmap.${d.k}.title`),\n        sub: t(`roadmap.${d.k}.sub`),\n        date: t(`roadmap.${d.k}.date`),\n        features: tList(`roadmap.${d.k}.features`)\n    }));\n\n    // The status of a milestone is shown by its marker on the timeline and the colour of\n    // its bullets, not by a word: the labels (Released, In development, ...) were taken\n    // out. `solid` is the dot colour, `line` the spine below it.\n    const META = {\n        released: { solid: \"var(--sb-green-solid)\", line: \"rgba(var(--sb-green-rgb), 0.32)\" },\n        current: { solid: \"var(--sb-orange-solid)\", line: \"rgba(var(--sb-orange-rgb), 0.32)\" },\n        dev: { solid: \"var(--sb-yellow-2-solid)\", line: \"rgba(var(--sb-ink), 0.08)\" },\n        planned: { solid: \"var(--sb-text-7)\", line: \"rgba(var(--sb-ink), 0.08)\" },\n        research: { solid: \"var(--sb-text-9)\", line: \"rgba(var(--sb-ink), 0.08)\" }\n    };\n\n    const [open, setOpen] = React.useState({});\n    const isOpen = (i) => (open[i] === undefined ? DATA[i].status === 'current' : open[i]);\n    const toggle = (i) => setOpen((s) => ({ ...s, [i]: !isOpen(i) }));\n\n    const total = DATA.length;\n    const shipped = DATA.filter((d) => d.status === 'released' || d.status === 'current').length;\n    const upcoming = total - shipped;\n    const shippedPct = (shipped / total * 100).toFixed(1) + '%';\n\n    // The shipped count is highlighted, so the sentence is split around it rather than\n    // interpolated whole. Passing only `total` leaves the {shipped} placeholder in the\n    // string, which is where the highlighted number goes \u2014 a translation is free to put\n    // it anywhere in the sentence, and the highlight follows it there.\n    const [progressBefore, progressAfter] = t('roadmap.progress', { total }).split('{shipped}');\n\n    const renderNode = (status) => {\n        if (status === 'released') {\n            return (\n                <div style={{ position: 'absolute', insetInlineStart: '13px', top: '16px', width: '28px', height: '28px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'linear-gradient(rgba(var(--sb-green-rgb), 0.16),rgba(var(--sb-green-rgb), 0.16)), var(--sb-bg)', border: '1px solid rgba(var(--sb-green-rgb), 0.4)', zIndex: 2 }}>\n                    <svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" strokeWidth=\"2.4\" strokeLinecap=\"round\" strokeLinejoin=\"round\"><path d=\"M5 13l4 4 10-11\" /></svg>\n                </div>\n            );\n        }\n        if (status === 'current') {\n            return (\n                <div style={{ position: 'absolute', insetInlineStart: '13px', top: '16px', width: '28px', height: '28px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'linear-gradient(rgba(var(--sb-orange-rgb), 0.2),rgba(var(--sb-orange-rgb), 0.2)), var(--sb-bg)', border: '1px solid var(--sb-orange-solid)', zIndex: 2, animation: 'rmPulse 2.4s ease-out infinite' }}>\n                    <span style={{ width: '9px', height: '9px', borderRadius: '50%', background: 'var(--sb-orange-solid)' }} />\n                </div>\n            );\n        }\n        if (status === 'dev') {\n            return (\n                <div style={{ position: 'absolute', insetInlineStart: '13px', top: '16px', width: '28px', height: '28px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'linear-gradient(rgba(var(--sb-yellow-2-rgb), 0.15),rgba(var(--sb-yellow-2-rgb), 0.15)), var(--sb-bg)', border: '1px solid rgba(var(--sb-yellow-2-rgb), 0.4)', zIndex: 2 }}>\n                    <svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-yellow-2-solid)\" strokeWidth=\"2.2\" strokeLinecap=\"round\" strokeLinejoin=\"round\"><path d=\"M12 3a9 9 0 1 0 9 9\" /></svg>\n                </div>\n            );\n        }\n        // planned / research\n        return (\n            <div style={{ position: 'absolute', insetInlineStart: '13px', top: '16px', width: '28px', height: '28px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'var(--sb-bg)', border: `1px ${status === 'research' ? 'dashed' : 'solid'} rgba(var(--sb-ink), 0.18)`, zIndex: 2 }}>\n                <span style={{ width: '7px', height: '7px', borderRadius: '50%', background: META[status].solid }} />\n            </div>\n        );\n    };\n\n    return (\n        <section style={{ width: '100%', color: 'var(--sb-text-2)', fontFamily: SANS, padding: isMobile ? '48px 0' : '64px 0', background: 'radial-gradient(1200px 720px at 50% -8%, rgba(var(--sb-orange-rgb), 0.05), transparent 60%), var(--sb-bg)' }}>\n            <style dangerouslySetInnerHTML={{ __html: '@keyframes rmExp{from{opacity:0;transform:translateY(-4px)}to{opacity:1;transform:translateY(0)}}@keyframes rmPulse{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-orange-rgb), 0.18)}60%{box-shadow:0 0 0 9px rgba(var(--sb-orange-rgb), 0)}}' }} />\n\n            <div style={{ maxWidth: '1040px', margin: '0 auto', padding: isMobile ? '0 18px' : '0 40px' }}>\n\n                {/* header */}\n                <div style={{ marginBottom: '30px' }}>\n                    <div style={{ fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.6px', marginBottom: '13px' }}>{t('roadmap.eyebrow')}</div>\n                    <h2 style={{ margin: '0 0 14px', fontSize: isMobile ? '27px' : '34px', fontWeight: 800, letterSpacing: '-1px', lineHeight: 1.08, color: 'var(--sb-text-1)' }}>{t('roadmap.heading')}</h2>\n                    <p style={{ margin: 0, fontSize: '15.5px', lineHeight: 1.6, color: 'var(--sb-text-7)', maxWidth: '660px' }}>{t('roadmap.subheading')}</p>\n                </div>\n\n                {/* progress */}\n                <div style={{ display: 'flex', alignItems: 'center', gap: '18px', flexWrap: 'wrap', padding: '18px 22px', borderRadius: '14px', background: 'var(--sb-surface)', border: '1px solid rgba(var(--sb-ink), 0.06)', marginBottom: '36px' }}>\n                    <div style={{ fontFamily: MONO, fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-2)', whiteSpace: 'nowrap' }}>{progressBefore}<span style={{ color: 'var(--sb-green)' }}>{shipped}</span>{progressAfter}</div>\n                    <div style={{ flex: '1 1 240px', minWidth: '200px', height: '8px', borderRadius: '99px', background: 'var(--sb-bg-deep)', border: '1px solid rgba(var(--sb-ink), 0.06)', overflow: 'hidden' }}>\n                        <div style={{ height: '100%', width: shippedPct, background: 'linear-gradient(90deg, var(--sb-green), var(--sb-orange))' }} />\n                    </div>\n                    <div style={{ fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '0.8px', whiteSpace: 'nowrap' }}>{t('roadmap.upcoming', { upcoming })}</div>\n                </div>\n\n                {/* timeline */}\n                {DATA.map((d, i) => {\n                    const meta = META[d.status];\n                    const opened = isOpen(i);\n                    const notLast = i < total - 1;\n                    return (\n                        <div key={i} style={{ position: 'relative', display: 'grid', gridTemplateColumns: '54px 1fr', marginBottom: '16px' }}>\n\n                            {/* spine */}\n                            <div style={{ position: 'relative' }}>\n                                {notLast && <div style={{ position: 'absolute', insetInlineStart: '26px', top: '30px', height: 'calc(100% + 16px)', width: '2px', background: meta.line }} />}\n                                {renderNode(d.status)}\n                            </div>\n\n                            {/* card */}\n                            <div style={{ borderRadius: '16px', background: 'var(--sb-surface)', border: `1px solid ${d.status === 'current' ? 'rgba(var(--sb-orange-rgb), 0.28)' : 'rgba(var(--sb-ink), 0.06)'}`, overflow: 'hidden' }}>\n                                <div\n                                    onClick={() => toggle(i)}\n                                    style={{ display: 'flex', alignItems: 'center', gap: isMobile ? '11px' : '16px', padding: isMobile ? '16px 16px' : '18px 22px', cursor: 'pointer', transition: 'background .18s ease' }}\n                                    onMouseEnter={(e) => { e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.018)'; }}\n                                    onMouseLeave={(e) => { e.currentTarget.style.background = 'transparent'; }}\n                                >\n                                    <div style={{ flex: 'none', minWidth: '52px', textAlign: 'center', padding: '7px 10px', borderRadius: '9px', background: 'var(--sb-bg-deep)', border: '1px solid rgba(var(--sb-ink), 0.07)', fontFamily: MONO, fontSize: '13px', fontWeight: 700, color: d.status === 'current' ? 'var(--sb-orange)' : 'var(--sb-text-4)' }}>{d.v}</div>\n                                    <div style={{ flex: 1, minWidth: 0 }}>\n                                        <div style={{ fontSize: isMobile ? '15.5px' : '17px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' }}>{d.title}</div>\n                                        {!isMobile && <div style={{ marginTop: '3px', fontSize: '13.5px', color: 'var(--sb-text-6)' }}>{d.sub}</div>}\n                                    </div>\n                                    <div style={{ flex: 'none', display: 'flex', alignItems: 'center', gap: isMobile ? '8px' : '14px' }}>\n                                        {!isMobile && <span style={{ fontFamily: MONO, fontSize: '12px', fontWeight: 500, color: 'var(--sb-text-7)', whiteSpace: 'nowrap', minWidth: '74px', textAlign: 'end' }}>{d.date}</span>}\n                                        <span style={{ color: 'var(--sb-text-9)', display: 'inline-flex', transition: 'transform .22s cubic-bezier(.2,.7,.3,1)', transform: opened ? 'rotate(180deg)' : 'rotate(0deg)' }}>\n                                            <svg width=\"17\" height=\"17\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" strokeWidth=\"2.1\" strokeLinecap=\"round\" strokeLinejoin=\"round\"><path d=\"M6 9l6 6 6-6\" /></svg>\n                                        </span>\n                                    </div>\n                                </div>\n                                {opened && (\n                                    <div style={{ padding: '4px 22px 22px 22px', animation: 'rmExp .24s cubic-bezier(.2,.7,.3,1)' }}>\n                                        <div style={{ fontFamily: MONO, fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '1.2px', marginBottom: '14px', paddingTop: '14px', borderTop: '1px solid rgba(var(--sb-ink), 0.05)' }}>{t('roadmap.keyFeatures')}</div>\n                                        <div style={{ display: 'grid', gridTemplateColumns: isMobile ? '1fr' : '1fr 1fr', gap: '11px 28px' }}>\n                                            {d.features.map((f, fi) => (\n                                                <div key={fi} style={{ display: 'flex', alignItems: 'flex-start', gap: '10px' }}>\n                                                    <span style={{ flex: 'none', marginTop: '7px', width: '5px', height: '5px', borderRadius: '50%', background: meta.solid }} />\n                                                    <span style={{ fontSize: '13.5px', lineHeight: 1.5, color: 'var(--sb-text-4)' }}>{f}</span>\n                                                </div>\n                                            ))}\n                                        </div>\n                                    </div>\n                                )}\n                            </div>\n                        </div>\n                    );\n                })}\n\n            </div>\n        </section>\n    );\n}\n\nwindow.Roadmap = Roadmap;\n", "import { t, isRTL } from '../../i18n/index.js';\n\n// \"Keep SecureBit independent\" \u2014 crypto donation card.\n// Translated from the Claude Design component (Crypto Donate v3.dc.html): coin switcher,\n// address with copy, and a QR on the right.\n//\n// Everything is served from this origin. The design pulled the coin icons from jsDelivr\n// and built the QR with a CDN script; the site's CSP (`img-src 'self' data:`) would block\n// the first, and both would hand a third party the address of every visitor. The\n// addresses are fixed, so the QRs are pre-rendered SVGs in /assets/crypto/.\n\nconst WALLETS = [\n    { id: 'usdt', tab: 'USDT', coin: 'Tether USDT', badge: 'trx', address: 'TMopDoco5EwJB1QvQYsuhjUJdMvzPXNQYu' },\n    { id: 'btc', tab: 'BTC', coin: 'Bitcoin', badge: null, address: 'bc1qnmc2xl7p0pxcy6lzf2tyf52wnslgzkgaq9kxpr' },\n    { id: 'eth', tab: 'ETH', coin: 'Ethereum', badge: null, address: '0xCDfDfaD4EC1fa657C3d2A7EFabc1cb751bf1dAf7' }\n];\n\nconst icon = (id) => `/assets/crypto/${id}.svg`;\n\n// A disconnect asks for the page to be brought here (see handleDisconnect in app.jsx).\n// The request is a timestamped flag rather than just an event, because the landing \u2014 and\n// this card with it \u2014 usually mounts only after the chat has been torn down. It expires\n// so that a request made while no landing was shown cannot fire minutes later.\nconst SCROLL_FLAG = '__sbScrollToDonate';\nconst SCROLL_EVENT = 'securebit:scroll-to-donate';\nconst SCROLL_TTL_MS = 5000;\n\nconst DonateCrypto = () => {\n    const [isMobile, setIsMobile] = React.useState(\n        typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n    );\n    const [sel, setSel] = React.useState(0);\n    const [copied, setCopied] = React.useState(false);\n    // +1 when the new coin comes in from the end side, -1 from the start side; the QR\n    // slides in accordingly so a swipe feels like moving along the row of tabs.\n    const [slide, setSlide] = React.useState(0);\n    const touchStart = React.useRef(null);\n    const sectionRef = React.useRef(null);\n    const copyTimer = React.useRef(null);\n\n    React.useEffect(() => {\n        const mq = window.matchMedia('(max-width:767px)');\n        const onChange = () => setIsMobile(mq.matches);\n        mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n        return () => {\n            mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n            clearTimeout(copyTimer.current);\n        };\n    }, []);\n\n    React.useEffect(() => {\n        let timer = null;\n        const scrollHere = () => {\n            const at = window[SCROLL_FLAG];\n            window[SCROLL_FLAG] = 0;\n            if (!at || Date.now() - at > SCROLL_TTL_MS) return;\n            clearTimeout(timer);\n            // Let the landing finish laying out first, or the target moves under the scroll.\n            timer = setTimeout(() => {\n                const el = sectionRef.current;\n                if (!el) return;\n                const reduce = window.matchMedia('(prefers-reduced-motion: reduce)').matches;\n                el.scrollIntoView({ behavior: reduce ? 'auto' : 'smooth', block: 'center' });\n            }, 350);\n        };\n        scrollHere();\n        document.addEventListener(SCROLL_EVENT, scrollHere);\n        return () => {\n            document.removeEventListener(SCROLL_EVENT, scrollHere);\n            clearTimeout(timer);\n        };\n    }, []);\n\n    const cur = WALLETS[sel];\n\n    const pick = (i) => {\n        const next = (i + WALLETS.length) % WALLETS.length;\n        if (next === sel) return;\n        setSlide(i > sel ? 1 : -1);\n        setSel(next);\n        setCopied(false);\n    };\n\n    // Swipe across the QR to change coin on a phone. Horizontal only, and only past a\n    // clear threshold, so a vertical scroll that starts on the QR still scrolls the page\n    // (touch-action: pan-y hands vertical pans to the browser). In a right-to-left locale\n    // the tab row runs the other way, and so does the swipe.\n    const onTouchStart = (e) => {\n        const p = e.touches[0];\n        touchStart.current = { x: p.clientX, y: p.clientY };\n    };\n    const onTouchEnd = (e) => {\n        const start = touchStart.current;\n        touchStart.current = null;\n        if (!start) return;\n        const p = e.changedTouches[0];\n        const dx = p.clientX - start.x;\n        const dy = p.clientY - start.y;\n        if (Math.abs(dx) < 40 || Math.abs(dx) < Math.abs(dy) * 1.5) return;\n        const forward = isRTL() ? dx > 0 : dx < 0;\n        pick(sel + (forward ? 1 : -1));\n    };\n\n    const copy = async () => {\n        try {\n            await navigator.clipboard.writeText(cur.address);\n        } catch (e) {\n            const ta = document.createElement('textarea');\n            ta.value = cur.address;\n            document.body.appendChild(ta);\n            ta.select();\n            try { document.execCommand('copy'); } catch (_) {}\n            ta.remove();\n        }\n        setCopied(true);\n        clearTimeout(copyTimer.current);\n        copyTimer.current = setTimeout(() => setCopied(false), 1800);\n    };\n\n    const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n    const FIELD = {\n        borderRadius: '14px', background: 'var(--sb-bg)', border: '1px solid rgba(var(--sb-ink), 0.07)'\n    };\n\n    const tabs = React.createElement('div', {\n        key: 'tabs', role: 'tablist',\n        style: { ...FIELD, display: 'flex', gap: '6px', padding: '5px', marginBottom: '14px' }\n    }, WALLETS.map((w, i) => {\n        const on = i === sel;\n        return React.createElement('button', {\n            key: w.id, type: 'button', role: 'tab', 'aria-selected': on,\n            onClick: () => pick(i),\n            style: {\n                flex: '1 1 0', minWidth: 0, display: 'inline-flex', alignItems: 'center', justifyContent: 'center',\n                gap: '9px', padding: '11px 10px', borderRadius: '10px', border: 'none', cursor: 'pointer',\n                fontFamily: SANS, fontSize: '14px', fontWeight: 700, transition: 'all .18s',\n                background: on ? 'var(--sb-surface-2)' : 'transparent',\n                color: on ? 'var(--sb-text-1)' : 'var(--sb-text-7)',\n                boxShadow: on ? 'inset 0 0 0 1px rgba(var(--sb-orange-rgb), 0.45)' : 'none'\n            }\n        }, [\n            React.createElement('span', { key: 'ic', style: { position: 'relative', flex: 'none', width: '22px', height: '22px' } }, [\n                React.createElement('img', { key: 'logo', src: icon(w.id), alt: '', width: 22, height: 22, style: { display: 'block', width: '22px', height: '22px' } }),\n                w.badge && React.createElement('img', {\n                    key: 'badge', src: icon(w.badge), alt: '', width: 11, height: 11,\n                    style: {\n                        position: 'absolute', right: '-3px', bottom: '-3px', width: '11px', height: '11px', borderRadius: '50%',\n                        border: '1.5px solid var(--sb-surface-2)', background: 'var(--sb-surface-2)'\n                    }\n                })\n            ]),\n            w.tab\n        ]);\n    }));\n\n    const copyBtn = React.createElement('button', {\n        key: 'copy', type: 'button', onClick: copy,\n        style: {\n            flex: 'none', display: 'inline-flex', alignItems: 'center', gap: '8px', padding: '12px 16px',\n            borderRadius: '10px', fontFamily: SANS, fontSize: '13.5px', fontWeight: 700, cursor: 'pointer',\n            background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-2)',\n            border: '1px solid rgba(var(--sb-ink), 0.1)', transition: 'all .18s'\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.09)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.05)'; }\n    }, [\n        copied\n            ? React.createElement('svg', {\n                key: 'ok', width: 15, height: 15, viewBox: '0 0 24 24', fill: 'none', stroke: 'var(--sb-green-solid)',\n                strokeWidth: 2.4, strokeLinecap: 'round', strokeLinejoin: 'round',\n                dangerouslySetInnerHTML: { __html: '<path d=\"M5 12.5l4.2 4.2L19 6.5\"/>' }\n            })\n            : React.createElement('svg', {\n                key: 'cp', width: 15, height: 15, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor',\n                strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round',\n                dangerouslySetInnerHTML: { __html: '<rect x=\"9\" y=\"9\" width=\"12\" height=\"12\" rx=\"2.5\"/><path d=\"M5 15V5a2 2 0 0 1 2-2h8\"/>' }\n            }),\n        React.createElement('span', { key: 'l', 'aria-live': 'polite' }, copied ? t('donate.copied') : t('donate.copy'))\n    ]);\n\n    const addressField = React.createElement('div', {\n        key: 'addr',\n        style: { ...FIELD, display: 'flex', alignItems: 'center', gap: '12px', padding: '8px 8px 8px 18px' }\n    }, [\n        React.createElement('div', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n            React.createElement('div', { key: 'net', style: { fontSize: '11.5px', fontWeight: 600, color: 'var(--sb-text-9)', marginBottom: '2px' } }, t(`donate.net.${cur.id}`)),\n            React.createElement('div', {\n                key: 'a', title: cur.address, dir: 'ltr',\n                style: { fontFamily: MONO, fontSize: '14px', color: 'var(--sb-text-2)', letterSpacing: '0.3px', overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' }\n            }, cur.address.slice(0, 8) + '\u2026' + cur.address.slice(-8))\n        ]),\n        copyBtn\n    ]);\n\n    const warn = React.createElement('div', {\n        key: 'warn',\n        style: { display: 'flex', alignItems: 'center', gap: '7px', marginTop: '14px', fontSize: '12px', color: 'var(--sb-text-9)' }\n    }, [\n        React.createElement('svg', {\n            key: 'i', width: 13, height: 13, viewBox: '0 0 24 24', fill: 'none', stroke: 'var(--sb-orange-solid)',\n            strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round', style: { flex: 'none' },\n            dangerouslySetInnerHTML: { __html: '<path d=\"M12 3l9.5 17h-19z\"/><path d=\"M12 10v4M12 17.5v.01\"/>' }\n        }),\n        t(`donate.warn.${cur.id}`)\n    ]);\n\n    const left = React.createElement('div', {\n        key: 'left',\n        style: { flex: '1 1 440px', minWidth: 0, padding: isMobile ? '32px 22px 8px' : '44px', display: 'flex', flexDirection: 'column' }\n    }, [\n        React.createElement('div', {\n            key: 'eyebrow',\n            style: { fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1.8px', marginBottom: '14px' }\n        }, t('donate.eyebrow')),\n        React.createElement('h2', {\n            key: 'title',\n            style: { margin: '0 0 10px', fontSize: isMobile ? '28px' : '34px', fontWeight: 800, letterSpacing: '-1px', lineHeight: 1.08, color: 'var(--sb-text-1)' }\n        }, t('donate.title')),\n        React.createElement('p', {\n            key: 'desc',\n            style: { margin: '0 0 30px', fontSize: '15px', lineHeight: 1.6, color: 'var(--sb-text-7)' }\n        }, t('donate.description')),\n        tabs,\n        addressField,\n        warn\n    ]);\n\n    // The QR plate is white in both themes: scanners want dark modules on a light ground.\n    const dirSign = isRTL() ? -1 : 1;\n    const slideAnim = slide === 0 ? 'none'\n        : `${slide * dirSign > 0 ? 'cdInEnd' : 'cdInStart'} .28s cubic-bezier(.2,.7,.3,1)`;\n\n    const plate = React.createElement('div', {\n        key: 'plate',\n        onTouchStart, onTouchEnd,\n        style: {\n            position: 'relative', width: '232px', height: '232px', padding: '14px', borderRadius: '20px', background: '#fff',\n            boxShadow: '0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.45 * var(--sb-shadow-k)))',\n            border: '1px solid rgba(var(--sb-ink), 0.07)', overflow: 'hidden', touchAction: 'pan-y', userSelect: 'none'\n        }\n    }, React.createElement('div', {\n        key: cur.id,\n        style: { position: 'relative', width: '100%', height: '100%', animation: slideAnim }\n    }, [\n        React.createElement('img', {\n            key: 'qr', src: `/assets/crypto/qr-${cur.id}.svg`, alt: t('donate.qrAlt', { coin: cur.coin }),\n            width: 204, height: 204, draggable: false,\n            style: { display: 'block', width: '100%', height: '100%', imageRendering: 'pixelated' }\n        }),\n        React.createElement('div', {\n            key: 'logo',\n            style: { position: 'absolute', left: '50%', top: '50%', transform: 'translate(-50%,-50%)', width: '48px', height: '48px', borderRadius: '12px', background: '#fff', display: 'grid', placeItems: 'center' }\n        }, React.createElement('img', { src: icon(cur.id), alt: '', width: 34, height: 34, draggable: false, style: { display: 'block', width: '34px', height: '34px' } }))\n    ]));\n\n    // Page dots under the QR on a phone \u2014 the hint that it can be swiped.\n    const dots = isMobile && React.createElement('div', {\n        key: 'dots', 'aria-hidden': true,\n        style: { display: 'flex', justifyContent: 'center', gap: '7px', marginTop: '18px' }\n    }, WALLETS.map((w, i) => React.createElement('span', {\n        key: w.id,\n        style: {\n            width: i === sel ? '18px' : '7px', height: '7px', borderRadius: '4px', transition: 'all .25s',\n            background: i === sel ? 'var(--sb-orange-solid)' : 'rgba(var(--sb-ink), 0.16)'\n        }\n    })));\n\n    const right = React.createElement('div', {\n        key: 'right',\n        style: { flex: '0 0 auto', minWidth: isMobile ? 0 : '300px', margin: '0 auto', padding: isMobile ? '24px 22px 32px' : '44px', display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center' }\n    }, [plate, dots]);\n\n    const card = React.createElement('div', {\n        key: 'card',\n        style: {\n            width: '100%', maxWidth: '1000px', position: 'relative', overflow: 'hidden', borderRadius: '24px',\n            background: 'radial-gradient(520px 420px at 100% 50%, rgba(var(--sb-orange-rgb), 0.09), transparent 70%), var(--sb-surface)',\n            border: '1px solid rgba(var(--sb-ink), 0.07)', display: 'flex', flexWrap: 'wrap', alignItems: 'stretch',\n            animation: 'cdUp .45s cubic-bezier(.2,.7,.3,1)'\n        }\n    }, [\n        left,\n        right\n    ]);\n\n    return React.createElement('section', {\n        id: 'donate', ref: sectionRef,\n        style: {\n            width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center',\n            background: 'var(--sb-bg)', color: 'var(--sb-text-2)', fontFamily: SANS,\n            padding: isMobile ? '48px 18px' : '64px 32px'\n        }\n    }, [\n        React.createElement('style', { key: 'kf', dangerouslySetInnerHTML: { __html: '@keyframes cdUp{from{opacity:0;transform:translateY(10px)}to{opacity:1;transform:translateY(0)}}' +\n            '@keyframes cdInEnd{from{opacity:0;transform:translateX(36px)}to{opacity:1;transform:none}}' +\n            '@keyframes cdInStart{from{opacity:0;transform:translateX(-36px)}to{opacity:1;transform:none}}' +\n            '@media (prefers-reduced-motion: reduce){#donate [style*=\"cdIn\"]{animation:none!important}}' } }),\n        card\n    ]);\n};\n\nDonateCrypto.SCROLL_FLAG = SCROLL_FLAG;\nDonateCrypto.SCROLL_EVENT = SCROLL_EVENT;\n\nwindow.DonateCrypto = DonateCrypto;\n", "import { t } from '../../i18n/index.js';\n\n// \"Join the future of privacy\" \u2014 community / open-source call-to-action.\n// Translated from the Claude Design component (Community CTA.dc.html): a centered\n// glowing card with GitHub + Feedback actions on a full-bleed dark band.\nconst CommunityCTA = () => {\n    const [isMobile, setIsMobile] = React.useState(\n        typeof window !== 'undefined' && window.matchMedia('(max-width:767px)').matches\n    );\n\n    React.useEffect(() => {\n        const mq = window.matchMedia('(max-width:767px)');\n        const onChange = () => setIsMobile(mq.matches);\n        mq.addEventListener ? mq.addEventListener('change', onChange) : mq.addListener(onChange);\n        return () => {\n            mq.removeEventListener ? mq.removeEventListener('change', onChange) : mq.removeListener(onChange);\n        };\n    }, []);\n\n    const ACCENT = 'var(--sb-orange)';\n    // Fill form: brand colour in both themes. See app.jsx.\n    const ACCENT_SOLID = 'var(--sb-orange-solid)';\n    const SANS = \"'Manrope', system-ui, -apple-system, sans-serif\";\n\n    const githubUrl = 'https://github.com/SecureBitChat/securebit-chat/';\n    const feedbackUrl = 'mailto:lockbitchat@tutanota.com';\n\n    const githubBtn = React.createElement('a', {\n        key: 'gh',\n        href: githubUrl,\n        target: '_blank',\n        rel: 'noopener noreferrer',\n        style: {\n            display: 'inline-flex', alignItems: 'center', gap: '11px', padding: '15px 26px',\n            borderRadius: '13px', background: ACCENT_SOLID, color: 'var(--sb-on-accent)', textDecoration: 'none',\n            fontSize: '15.5px', fontWeight: 700, letterSpacing: '-0.2px',\n            boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)', whiteSpace: 'nowrap',\n            transition: 'all .2s cubic-bezier(.2,.7,.3,1)'\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.background = 'var(--sb-orange-hi)'; e.currentTarget.style.transform = 'translateY(-2px)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.background = ACCENT_SOLID; e.currentTarget.style.transform = 'none'; }\n    }, [\n        React.createElement('svg', {\n            key: 'i', width: 20, height: 20, viewBox: '0 0 24 24', fill: 'currentColor',\n            dangerouslySetInnerHTML: { __html: '<path d=\"M12 2C6.48 2 2 6.58 2 12.26c0 4.5 2.87 8.32 6.84 9.67.5.09.68-.22.68-.49 0-.24-.01-.87-.01-1.71-2.78.62-3.37-1.36-3.37-1.36-.46-1.18-1.11-1.5-1.11-1.5-.91-.63.07-.62.07-.62 1 .07 1.53 1.05 1.53 1.05.89 1.56 2.34 1.11 2.91.85.09-.66.35-1.11.63-1.36-2.22-.26-4.55-1.14-4.55-5.07 0-1.12.39-2.03 1.03-2.75-.1-.26-.45-1.3.1-2.71 0 0 .84-.27 2.75 1.05a9.3 9.3 0 0 1 5 0c1.91-1.32 2.75-1.05 2.75-1.05.55 1.41.2 2.45.1 2.71.64.72 1.03 1.63 1.03 2.75 0 3.94-2.34 4.81-4.57 5.06.36.32.68.94.68 1.9 0 1.37-.01 2.47-.01 2.81 0 .27.18.59.69.49A10.02 10.02 0 0 0 22 12.26C22 6.58 17.52 2 12 2z\"/>' }\n        }),\n        t('community.github')\n    ]);\n\n    const feedbackBtn = React.createElement('a', {\n        key: 'fb',\n        href: feedbackUrl,\n        rel: 'noopener noreferrer',\n        style: {\n            display: 'inline-flex', alignItems: 'center', gap: '11px', padding: '15px 26px',\n            borderRadius: '13px', background: 'rgba(var(--sb-ink), 0.03)', color: 'var(--sb-text-2)', textDecoration: 'none',\n            fontSize: '15.5px', fontWeight: 700, letterSpacing: '-0.2px',\n            border: '1px solid rgba(var(--sb-ink), 0.1)', whiteSpace: 'nowrap',\n            transition: 'all .2s cubic-bezier(.2,.7,.3,1)'\n        },\n        onMouseEnter: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.24)'; e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.06)'; },\n        onMouseLeave: (e) => { e.currentTarget.style.borderColor = 'rgba(var(--sb-ink), 0.1)'; e.currentTarget.style.background = 'rgba(var(--sb-ink), 0.03)'; }\n    }, [\n        React.createElement('svg', {\n            key: 'i', width: 20, height: 20, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor',\n            strokeWidth: 1.9, strokeLinecap: 'round', strokeLinejoin: 'round',\n            dangerouslySetInnerHTML: { __html: '<path d=\"M21 11.5a8 8 0 0 1-11.6 7.1L4 20l1.4-5.3A8 8 0 1 1 21 11.5z\"/><path d=\"M8.5 11h7M8.5 14h4.5\"/>' }\n        }),\n        t('community.feedback')\n    ]);\n\n    const card = React.createElement('div', {\n        key: 'card',\n        style: {\n            position: 'relative', overflow: 'hidden', maxWidth: '860px', width: '100%',\n            borderRadius: '24px',\n            background: 'radial-gradient(700px 360px at 50% 0%, rgba(var(--sb-orange-rgb), 0.1), transparent 65%), var(--sb-bg)',\n            border: '1px solid rgba(var(--sb-ink), 0.07)',\n            padding: isMobile ? '40px 24px 36px' : '56px 56px 48px',\n            textAlign: 'center', boxShadow: '0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))'\n        }\n    }, [\n        // hairline accent\n        React.createElement('div', {\n            key: 'hairline',\n            style: { position: 'absolute', top: 0, left: '50%', transform: 'translateX(-50%)', width: '180px', height: '1px', background: 'linear-gradient(90deg, transparent, rgba(var(--sb-orange-rgb), 0.7), transparent)' }\n        }),\n        // brand mark (same SVG as the header \u2014 no border or background)\n        React.createElement('img', {\n            key: 'icon',\n            src: '/logo/securebit-mark.svg',\n            alt: 'SecureBit',\n            style: { display: 'inline-block', width: '64px', height: '64px', objectFit: 'contain', marginBottom: '22px', animation: 'ccUp .4s cubic-bezier(.2,.7,.3,1)' }\n        }),\n        // title\n        React.createElement('h2', {\n            key: 'title',\n            style: { margin: '0 0 16px', fontSize: isMobile ? '28px' : '36px', fontWeight: 800, letterSpacing: '-1px', lineHeight: 1.05, color: 'var(--sb-text-1)' }\n        }, t('community.title')),\n        // description\n        React.createElement('p', {\n            key: 'desc',\n            style: { margin: '0 auto 32px', maxWidth: '560px', fontSize: '16px', lineHeight: 1.65, color: 'var(--sb-text-6)' }\n        }, t('community.description')),\n        // buttons\n        React.createElement('div', {\n            key: 'btns',\n            style: { display: 'flex', gap: '14px', justifyContent: 'center', flexWrap: 'wrap' }\n        }, [githubBtn, feedbackBtn]),\n        // Snap Store, bottom right.\n        //\n        // Served from this origin, not snapcraft.io. The site's CSP is\n        // `img-src 'self' data:` and would block a hotlink anyway, but the\n        // reason to keep it that way is the product's own claim: fetching a\n        // badge from someone else's server hands them the address of every\n        // visitor to a page that promises no servers are involved.\n        React.createElement('div', {\n            key: 'snap',\n            style: {\n                display: 'flex',\n                justifyContent: isMobile ? 'center' : 'flex-end',\n                marginTop: '28px'\n            }\n        }, React.createElement('a', {\n            href: 'https://snapcraft.io/securebit-chat',\n            target: '_blank',\n            rel: 'noopener noreferrer',\n            'aria-label': 'Get it from the Snap Store',\n            style: { display: 'inline-flex', opacity: 0.9, transition: 'opacity .2s' },\n            onMouseEnter: (e) => { e.currentTarget.style.opacity = 1; },\n            onMouseLeave: (e) => { e.currentTarget.style.opacity = 0.9; }\n        }, React.createElement('img', {\n            src: '/assets/badges/snap-store.svg',\n            alt: 'Get it from the Snap Store',\n            width: 182,\n            height: 56,\n            loading: 'lazy',\n            style: { display: 'block' }\n        })))\n    ]);\n\n    return React.createElement('section', {\n        style: {\n            width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center',\n            background: 'var(--sb-bg)', fontFamily: SANS,\n            padding: isMobile ? '48px 18px' : '64px 48px'\n        }\n    }, [\n        React.createElement('style', { key: 'kf', dangerouslySetInnerHTML: { __html: '@keyframes ccUp{from{opacity:0;transform:translateY(12px)}to{opacity:1;transform:translateY(0)}}' } }),\n        card\n    ]);\n};\n\nwindow.CommunityCTA = CommunityCTA;\n", "import { t } from '../../i18n/index.js';\n// File Transfer Component for Chat Interface - Fixed Version\nconst FileTransferComponent = ({ webrtcManager, isConnected, pendingIncomingFiles = [], onIncomingDecision, showDropzone = true }) => {\n    const [dragOver, setDragOver] = React.useState(false);\n    const [transfers, setTransfers] = React.useState({ sending: [], receiving: [] });\n    const fileInputRef = React.useRef(null);\n\n    // Update transfers periodically via polling \u2014 no callback registration needed here\n    React.useEffect(() => {\n        if (!isConnected || !webrtcManager) return;\n\n        const updateTransfers = () => {\n            const currentTransfers = webrtcManager.getFileTransfers();\n            setTransfers(currentTransfers);\n        };\n\n        const interval = setInterval(updateTransfers, 500);\n        return () => clearInterval(interval);\n    }, [isConnected, webrtcManager]);\n\n    // Clear transfers UI when connection drops\n    React.useEffect(() => {\n        if (isConnected) return;\n        setTransfers({ sending: [], receiving: [] });\n    }, [isConnected]);\n\n    const handleFileSelect = async (files) => {\n        if (!isConnected || !webrtcManager) {\n            alert('\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u043D\u0435 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043B\u0435\u043D\u043E. \u0421\u043D\u0430\u0447\u0430\u043B\u0430 \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u0438\u0442\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435.');\n            return;\n        }\n\n        // \u0414\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u0430\u044F \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0430 \u0441\u043E\u0441\u0442\u043E\u044F\u043D\u0438\u044F \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u044F\n        if (!webrtcManager.isConnected() || !webrtcManager.isVerified) {\n            alert('\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u043D\u0435 \u0433\u043E\u0442\u043E\u0432\u043E \u0434\u043B\u044F \u043F\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0444\u0430\u0439\u043B\u043E\u0432. \u0414\u043E\u0436\u0434\u0438\u0442\u0435\u0441\u044C \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u044F.');\n            return;\n        }\n\n        for (const file of files) {\n            try {\n                // \u041A\u0420\u0418\u0422\u0418\u0427\u0415\u0421\u041A\u041E\u0415 \u0418\u0421\u041F\u0420\u0410\u0412\u041B\u0415\u041D\u0418\u0415: \u0412\u0430\u043B\u0438\u0434\u0430\u0446\u0438\u044F \u0444\u0430\u0439\u043B\u0430 \u043F\u0435\u0440\u0435\u0434 \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u043E\u0439\n                const validation = webrtcManager.validateFile(file);\n                if (!validation.isValid) {\n                    const errorMessage = validation.errors.join('. ');\n                    alert(`\u0424\u0430\u0439\u043B ${file.name} \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u0431\u044B\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D: ${errorMessage}`);\n                    continue;\n                }\n\n                await webrtcManager.sendFile(file);\n            } catch (error) {\n                // \u0411\u043E\u043B\u0435\u0435 \u043C\u044F\u0433\u043A\u0430\u044F \u043E\u0431\u0440\u0430\u0431\u043E\u0442\u043A\u0430 \u043E\u0448\u0438\u0431\u043E\u043A - \u043D\u0435 \u0437\u0430\u043A\u0440\u044B\u0432\u0430\u0435\u043C \u0441\u0435\u0441\u0441\u0438\u044E\n                \n                // \u041F\u043E\u043A\u0430\u0437\u044B\u0432\u0430\u0435\u043C \u043F\u043E\u043B\u044C\u0437\u043E\u0432\u0430\u0442\u0435\u043B\u044E \u043E\u0448\u0438\u0431\u043A\u0443, \u043D\u043E \u043D\u0435 \u0437\u0430\u043A\u0440\u044B\u0432\u0430\u0435\u043C \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435\n                if (error.message.includes(t('file.notReady'))) {\n                    alert(`\u0424\u0430\u0439\u043B ${file.name} \u043D\u0435 \u043C\u043E\u0436\u0435\u0442 \u0431\u044B\u0442\u044C \u043E\u0442\u043F\u0440\u0430\u0432\u043B\u0435\u043D \u0441\u0435\u0439\u0447\u0430\u0441. \u041F\u0440\u043E\u0432\u0435\u0440\u044C\u0442\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0438 \u043F\u043E\u043F\u0440\u043E\u0431\u0443\u0439\u0442\u0435 \u0441\u043D\u043E\u0432\u0430.`);\n                } else if (error.message.includes(t('file.tooLarge')) || error.message.includes('exceeds maximum')) {\n                    alert(`\u0424\u0430\u0439\u043B ${file.name} \u0441\u043B\u0438\u0448\u043A\u043E\u043C \u0431\u043E\u043B\u044C\u0448\u043E\u0439: ${error.message}`);\n                } else if (error.message.includes(t('file.maxConcurrent'))) {\n                    alert(`\u0414\u043E\u0441\u0442\u0438\u0433\u043D\u0443\u0442 \u043B\u0438\u043C\u0438\u0442 \u043E\u0434\u043D\u043E\u0432\u0440\u0435\u043C\u0435\u043D\u043D\u044B\u0445 \u043F\u0435\u0440\u0435\u0434\u0430\u0447. \u0414\u043E\u0436\u0434\u0438\u0442\u0435\u0441\u044C \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0442\u0435\u043A\u0443\u0449\u0438\u0445 \u043F\u0435\u0440\u0435\u0434\u0430\u0447.`);\n                } else if (error.message.includes(t('file.typeNotAllowed'))) {\n                    alert(`\u0422\u0438\u043F \u0444\u0430\u0439\u043B\u0430 ${file.name} \u043D\u0435 \u043F\u043E\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044F: ${error.message}`);\n                } else {\n                    alert(`\u041E\u0448\u0438\u0431\u043A\u0430 \u043E\u0442\u043F\u0440\u0430\u0432\u043A\u0438 \u0444\u0430\u0439\u043B\u0430 ${file.name}: ${error.message}`);\n                }\n            }\n        }\n    };\n\n    const handleDrop = (e) => {\n        e.preventDefault();\n        setDragOver(false);\n        \n        const files = Array.from(e.dataTransfer.files);\n        handleFileSelect(files);\n    };\n\n    const handleDragOver = (e) => {\n        e.preventDefault();\n        setDragOver(true);\n    };\n\n    const handleDragLeave = (e) => {\n        e.preventDefault();\n        setDragOver(false);\n    };\n\n    const handleFileInputChange = (e) => {\n        const files = Array.from(e.target.files);\n        handleFileSelect(files);\n        e.target.value = ''; // Reset input\n    };\n\n    const formatFileSize = (bytes) => {\n        if (bytes === 0) return '0 B';\n        const k = 1024;\n        const sizes = ['B', 'KB', 'MB', 'GB'];\n        const i = Math.floor(Math.log(bytes) / Math.log(k));\n        return parseFloat((bytes / Math.pow(k, i)).toFixed(2)) + ' ' + sizes[i];\n    };\n\n    const getStatusIcon = (status) => {\n        switch (status) {\n            case 'metadata_sent':\n            case 'preparing':\n                return 'fas fa-cog fa-spin';\n            case 'transmitting':\n            case 'receiving':\n                return 'fas fa-exchange-alt fa-pulse';\n            case 'assembling':\n                return 'fas fa-puzzle-piece fa-pulse';\n            case 'completed':\n                return 'fas fa-check text-green-400';\n            case 'failed':\n                return 'fas fa-times text-red-400';\n            default:\n                return 'fas fa-circle';\n        }\n    };\n\n    const getStatusText = (status) => {\n        switch (status) {\n            case 'metadata_sent':\n                return '\u041F\u043E\u0434\u0433\u043E\u0442\u043E\u0432\u043A\u0430...';\n            case 'transmitting':\n                return '\u041E\u0442\u043F\u0440\u0430\u0432\u043A\u0430...';\n            case 'receiving':\n                return '\u041F\u043E\u043B\u0443\u0447\u0435\u043D\u0438\u0435...';\n            case 'assembling':\n                return '\u0421\u0431\u043E\u0440\u043A\u0430 \u0444\u0430\u0439\u043B\u0430...';\n            case 'completed':\n                return '\u0417\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u043E';\n            case 'failed':\n                return '\u041E\u0448\u0438\u0431\u043A\u0430';\n            default:\n                return status;\n        }\n    };\n\n    // Segmented (per-chunk) progress \u2014 squares fill as chunks transfer, like a\n    // download manager. For large files chunks are grouped into a fixed grid;\n    // for small files it's literally one square per chunk.\n    const renderProgress = (transfer, color) => {\n        const total = transfer.totalChunks || 0;\n        const done = transfer.transferredChunks || 0;\n        const isDone = transfer.status === 'completed';\n        const squares = total > 0 ? Math.min(total, 32) : 24;\n        let filled;\n        if (isDone) filled = squares;\n        else if (total > 0) filled = Math.floor((done / total) * squares);\n        else filled = Math.floor(((transfer.progress || 0) / 100) * squares);\n        filled = Math.max(0, Math.min(squares, filled));\n\n        return React.createElement('div', { key: 'progress' }, [\n            React.createElement('div', {\n                key: 'squares',\n                style: { display: 'flex', flexWrap: 'wrap', gap: '3px', marginBottom: '7px' }\n            }, Array.from({ length: squares }, (_, i) => React.createElement('div', {\n                key: i,\n                style: {\n                    width: '11px', height: '11px', borderRadius: '2px',\n                    background: i < filled ? color : 'rgba(var(--sb-ink), 0.07)',\n                    border: '1px solid ' + (i < filled ? 'transparent' : 'rgba(var(--sb-ink), 0.05)'),\n                    boxShadow: i < filled ? `0 0 5px ${color}55` : 'none',\n                    transition: 'background .2s ease, box-shadow .2s ease'\n                }\n            }))),\n            React.createElement('div', {\n                key: 'text',\n                style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', fontSize: '11.5px', color: 'var(--sb-text-7)' }\n            }, [\n                React.createElement('span', { key: 'status', style: { display: 'inline-flex', alignItems: 'center', gap: '5px' } }, [\n                    React.createElement('i', { key: 'icon', className: getStatusIcon(transfer.status) }),\n                    getStatusText(transfer.status)\n                ]),\n                React.createElement('span', {\n                    key: 'count',\n                    style: { fontFamily: \"'JetBrains Mono', ui-monospace, monospace\", color: i_done(transfer) ? color : 'var(--sb-text-7)' }\n                }, total > 0 ? `${Math.min(done, total)} / ${total} chunks` : `${(transfer.progress || 0).toFixed(0)}%`)\n            ])\n        ]);\n    };\n    const i_done = (t) => t.status === 'completed';\n\n    const handleIncomingDecision = async (fileId, accepted) => {\n        if (typeof onIncomingDecision === 'function') {\n            await onIncomingDecision(fileId, accepted);\n        }\n        setTransfers(webrtcManager.getFileTransfers());\n    };\n\n    if (!isConnected) {\n        return React.createElement('div', {\n            className: \"p-4 text-center text-muted\"\n        }, t('file.needConnection'));\n    }\n\n    // \u041F\u0440\u043E\u0432\u0435\u0440\u044F\u0435\u043C \u0434\u043E\u043F\u043E\u043B\u043D\u0438\u0442\u0435\u043B\u044C\u043D\u043E\u0435 \u0441\u043E\u0441\u0442\u043E\u044F\u043D\u0438\u0435 \u0441\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u044F\n    const isConnectionReady = webrtcManager && webrtcManager.isConnected() && webrtcManager.isVerified;\n    \n    if (!isConnectionReady) {\n        return React.createElement('div', {\n            className: \"p-4 text-center text-yellow-600\"\n        }, [\n            React.createElement('i', {\n                key: 'icon',\n                className: 'fas fa-exclamation-triangle me-2'\n            }),\n            '\u0421\u043E\u0435\u0434\u0438\u043D\u0435\u043D\u0438\u0435 \u0443\u0441\u0442\u0430\u043D\u0430\u0432\u043B\u0438\u0432\u0430\u0435\u0442\u0441\u044F... \u041F\u0435\u0440\u0435\u0434\u0430\u0447\u0430 \u0444\u0430\u0439\u043B\u043E\u0432 \u0431\u0443\u0434\u0435\u0442 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043F\u043E\u0441\u043B\u0435 \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043D\u0438\u044F \u0443\u0441\u0442\u0430\u043D\u043E\u0432\u043A\u0438.'\n        ]);\n    }\n\n    return React.createElement('div', {\n        className: \"file-transfer-component\"\n    }, [\n        // File Drop Zone (SecureBit Chat design) \u2014 only when the panel is opened to SEND,\n        // so a receiver never sees the \"send attachments\" UI.\n        showDropzone && React.createElement('div', {\n            key: 'drop-zone',\n            onDrop: handleDrop,\n            onDragOver: handleDragOver,\n            onDragLeave: handleDragLeave,\n            style: {\n                position: 'relative',\n                border: '1.5px dashed ' + (dragOver ? 'rgba(var(--sb-orange-rgb), 0.7)' : 'rgba(var(--sb-ink), 0.14)'),\n                borderRadius: '14px',\n                background: dragOver ? 'rgba(var(--sb-orange-rgb), 0.07)' : 'var(--sb-surface)',\n                padding: '24px 22px',\n                textAlign: 'center',\n                transition: 'all .15s'\n            }\n        }, [\n            React.createElement('div', {\n                key: 'icon-box',\n                style: { width: '42px', height: '42px', margin: '0 auto 10px', borderRadius: '12px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-ink), 0.04)', border: '1px solid rgba(var(--sb-ink), 0.08)' }\n            }, React.createElement('i', { className: 'fas fa-arrow-up-from-bracket', style: { color: 'var(--sb-text-6)', fontSize: '18px' } })),\n            React.createElement('div', { key: 'title', style: { fontSize: '14px', fontWeight: 700, color: 'var(--sb-text-2)' } }, t('file.drop')),\n            React.createElement('div', { key: 'sub', style: { fontSize: '12px', color: 'var(--sb-text-8)', marginTop: '4px' } }, t('file.dropHint')),\n            React.createElement('button', {\n                key: 'browse',\n                type: 'button',\n                onClick: () => fileInputRef.current?.click(),\n                className: 'sb-send',\n                style: { marginTop: '14px', display: 'inline-flex', alignItems: 'center', gap: '7px', padding: '9px 16px', borderRadius: '9px', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '13px', fontWeight: 700, cursor: 'pointer' }\n            }, [\n                React.createElement('i', { key: 'i', className: 'fas fa-folder-open', style: { fontSize: '13px' } }),\n                t('file.browse')\n            ])\n        ]),\n\n        // Hidden file input\n        showDropzone && React.createElement('input', {\n            key: 'file-input',\n            ref: fileInputRef,\n            type: 'file',\n            multiple: true,\n            className: 'hidden',\n            onChange: handleFileInputChange\n        }),\n\n        pendingIncomingFiles.length > 0 && React.createElement('div', {\n            key: 'incoming-consent',\n            className: \"mt-4 space-y-2\"\n        }, pendingIncomingFiles.map(file => React.createElement('div', {\n            key: file.fileId,\n            style: { borderRadius: '12px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)', padding: '12px 14px' }\n        }, [\n            React.createElement('div', {\n                key: 'info',\n                style: { marginBottom: '12px', display: 'flex', alignItems: 'center', gap: '11px' }\n            }, [\n                React.createElement('div', { key: 'ic', style: { flex: 'none', width: '34px', height: '34px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-orange-rgb), 0.12)', border: '1px solid rgba(var(--sb-orange-rgb), 0.22)' } },\n                    React.createElement('i', { className: 'fas fa-file-arrow-down', style: { color: 'var(--sb-orange)', fontSize: '15px' } })\n                ),\n                React.createElement('div', { key: 'text', style: { minWidth: 0 } }, [\n                    React.createElement('div', {\n                        key: 'title',\n                        style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-2)' }\n                    }, t('file.incoming')),\n                    React.createElement('div', {\n                        key: 'meta',\n                        style: { fontSize: '11.5px', color: 'var(--sb-text-8)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' }\n                    }, `${file.fileName} \u00B7 ${formatFileSize(file.fileSize)} \u00B7 ${file.mimeType}`)\n                ])\n            ]),\n            React.createElement('div', {\n                key: 'actions',\n                style: { display: 'flex', gap: '8px' }\n            }, [\n                React.createElement('button', {\n                    key: 'accept',\n                    onClick: () => handleIncomingDecision(file.fileId, true),\n                    style: { display: 'inline-flex', alignItems: 'center', gap: '6px', borderRadius: '8px', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', padding: '8px 14px', fontSize: '13px', fontWeight: 700, cursor: 'pointer' }\n                }, [React.createElement('i', { key: 'i', className: 'fas fa-check', style: { fontSize: '12px' } }), t('file.accept')]),\n                React.createElement('button', {\n                    key: 'reject',\n                    onClick: () => handleIncomingDecision(file.fileId, false),\n                    style: { display: 'inline-flex', alignItems: 'center', gap: '6px', borderRadius: '8px', border: '1px solid rgba(var(--sb-red-rgb), 0.3)', background: 'rgba(var(--sb-red-rgb), 0.08)', color: 'var(--sb-red)', padding: '8px 14px', fontSize: '13px', fontWeight: 600, cursor: 'pointer' }\n                }, [React.createElement('i', { key: 'i', className: 'fas fa-xmark', style: { fontSize: '12px' } }), t('file.reject')])\n            ])\n        ]))),\n\n        // Active Transfers\n        (transfers.sending.length > 0 || transfers.receiving.length > 0) && React.createElement('div', {\n            key: 'transfers',\n            className: \"active-transfers mt-4\"\n        }, [\n            React.createElement('h4', {\n                key: 'title',\n                style: { display: 'flex', alignItems: 'center', gap: '8px', fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-7)', marginBottom: '10px' }\n            }, [\n                React.createElement('i', {\n                    key: 'icon',\n                    className: 'fas fa-right-left',\n                    style: { fontSize: '12px' }\n                }),\n                t('file.title')\n            ]),\n\n            // Sending files\n            ...transfers.sending.map(transfer =>\n                React.createElement('div', {\n                    key: `send-${transfer.fileId}`,\n                    style: { borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', padding: '12px', marginBottom: '8px' }\n                }, [\n                    React.createElement('div', {\n                        key: 'header',\n                        className: \"flex items-center justify-between mb-2\"\n                    }, [\n                        React.createElement('div', {\n                            key: 'info',\n                            className: \"flex items-center\"\n                        }, [\n                            React.createElement('i', {\n                                key: 'icon',\n                                className: 'fas fa-arrow-up',\n                                style: { color: 'var(--sb-orange)', fontSize: '13px', marginInlineEnd: '8px' }\n                            }),\n                            React.createElement('span', {\n                                key: 'name',\n                                className: \"font-medium text-sm\",\n                                style: { color: 'var(--sb-text-2)' }\n                            }, transfer.fileName),\n                            React.createElement('span', {\n                                key: 'size',\n                                className: \"text-xs ms-2\",\n                                style: { color: 'var(--sb-text-8)' }\n                            }, formatFileSize(transfer.fileSize))\n                        ]),\n                        React.createElement('button', {\n                            key: 'cancel',\n                            onClick: () => webrtcManager.cancelFileTransfer(transfer.fileId),\n                            className: \"text-red-400 hover:text-red-300 text-xs\"\n                        }, [\n                            React.createElement('i', {\n                                className: 'fas fa-times'\n                            })\n                        ])\n                    ]),\n                    renderProgress(transfer, 'var(--sb-orange)')\n                ])\n            ),\n\n            // Receiving files\n            ...transfers.receiving.map(transfer => \n                React.createElement('div', {\n                    key: `recv-${transfer.fileId}`,\n                    style: { borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', padding: '12px', marginBottom: '8px' }\n                }, [\n                    React.createElement('div', {\n                        key: 'header',\n                        className: \"flex items-center justify-between mb-2\"\n                    }, [\n                        React.createElement('div', {\n                            key: 'info',\n                            className: \"flex items-center\"\n                        }, [\n                            React.createElement('i', {\n                                key: 'icon',\n                                className: 'fas fa-arrow-down',\n                                style: { color: 'var(--sb-green)', fontSize: '13px', marginInlineEnd: '8px' }\n                            }),\n                            React.createElement('span', {\n                                key: 'name',\n                                className: \"font-medium text-sm\",\n                                style: { color: 'var(--sb-text-2)' }\n                            }, transfer.fileName),\n                            React.createElement('span', {\n                                key: 'size',\n                                className: \"text-xs ms-2\",\n                                style: { color: 'var(--sb-text-8)' }\n                            }, formatFileSize(transfer.fileSize))\n                        ]),\n                        React.createElement('div', { key: 'actions', className: 'flex items-center space-x-2' }, [\n                            transfer.status === 'completed' ? React.createElement('button', {\n                                key: 'download',\n                                className: 'text-green-400 hover:text-green-300 text-xs flex items-center',\n                                onClick: async () => {\n                                    try {\n                                        const url = await webrtcManager.getReceivedFileObjectURL(transfer.fileId);\n                                        if (!url) { alert(t('file.gone')); return; }\n                                        const a = document.createElement('a');\n                                        a.href = url;\n                                        a.download = transfer.fileName || 'file';\n                                        a.click();\n                                        setTimeout(() => webrtcManager.revokeReceivedFileObjectURL(url), 10000);\n                                    } catch (e) {\n                                        alert(e.message || t('file.gone'));\n                                    }\n                                }\n                            }, [\n                                React.createElement('i', { key: 'i', className: 'fas fa-download me-1' }),\n                                t('file.download')\n                            ]) : null,\n                            React.createElement('button', {\n                                key: 'cancel',\n                                onClick: () => webrtcManager.cancelFileTransfer(transfer.fileId),\n                                className: \"text-red-400 hover:text-red-300 text-xs\"\n                            }, [\n                                React.createElement('i', {\n                                    className: 'fas fa-times'\n                                })\n                            ])\n                        ])\n                    ]),\n                    renderProgress(transfer, 'var(--sb-green)')\n                ])\n            )\n        ])\n    ]);\n};\n\n// Export\nwindow.FileTransferComponent = FileTransferComponent;\n", "import { t } from '../i18n/index.js';\n// Pure, dependency-free validation and normalization of user-supplied ICE\n// (STUN/TURN) servers. No DOM, no browser APIs \u2014 safe to unit-test in Node.\n//\n// Security intent: a user can paste arbitrary text here. We must never hand an\n// un-vetted value to RTCPeerConnection, and we must reject anything that is not\n// a real STUN/TURN URL (e.g. javascript:, data:, http(s):, ws(s):) so the field\n// cannot be abused as an injection surface or silently break the connection.\n// Validation is allowlist-based: only known-good schemes, host shapes, and the\n// standard transport query are accepted; everything else is rejected.\n\nexport const ICE_LIMITS = Object.freeze({\n    MAX_SERVERS: 10,\n    MAX_URLS_PER_SERVER: 8,\n    MAX_STRING_LENGTH: 512\n});\n\n// RTCIceServer only accepts these schemes. Everything else is rejected.\nexport const ALLOWED_ICE_SCHEMES = Object.freeze(['stun', 'stuns', 'turn', 'turns']);\n\nconst SCHEME_RE = /^(stuns?|turns?):/i;\n// Positive allowlist for the host portion: hostname/IPv4, or bracketed IPv6,\n// with an optional numeric port. Anything outside this shape is rejected.\nconst HOST_RE = /^(\\[[0-9a-f:]+\\]|[a-z0-9.-]+)(:\\d{1,5})?$/i;\nconst TRANSPORT_RE = /^transport=(udp|tcp)$/i;\n\n// True if the string contains any ASCII control character (0x00\u20130x1F or 0x7F).\n// Implemented via char codes to keep the source free of literal control bytes.\nfunction hasControlChars(value) {\n    for (let i = 0; i < value.length; i++) {\n        const code = value.charCodeAt(i);\n        if (code < 0x20 || code === 0x7f) return true;\n    }\n    return false;\n}\n\n/**\n * Validate a single ICE URL string.\n * @returns {string|null} error message, or null if valid.\n */\nexport function validateIceUrl(url) {\n    if (typeof url !== 'string') return t('iceUrl.notString');\n    const trimmed = url.trim();\n    if (!trimmed) return t('iceUrl.empty');\n    if (trimmed.length > ICE_LIMITS.MAX_STRING_LENGTH) return t('iceUrl.tooLong');\n    if (hasControlChars(trimmed)) return t('iceUrl.badChars');\n\n    const scheme = trimmed.match(SCHEME_RE);\n    if (!scheme) {\n        return t('iceUrl.badScheme');\n    }\n\n    // Validate the part after \"<scheme>:\" \u2014 host[:port][?transport=udp|tcp].\n    const rest = trimmed.slice(scheme[0].length);\n    const [hostPort, query, ...extra] = rest.split('?');\n    if (extra.length > 0) return t('iceUrl.badQuery');\n    if (!hostPort) return t('iceUrl.noHost');\n    if (!HOST_RE.test(hostPort)) return t('iceUrl.badHost');\n\n    if (query !== undefined && !TRANSPORT_RE.test(query)) {\n        return t('iceUrl.badTransport');\n    }\n\n    return null;\n}\n\nexport function isTurnUrl(url) {\n    return typeof url === 'string' && /^turns?:/i.test(url.trim());\n}\n\nfunction validateSecret(value, label) {\n    if (value === undefined || value === null || value === '') return null;\n    if (typeof value !== 'string') return `${label} must be a string`;\n    if (value.length > ICE_LIMITS.MAX_STRING_LENGTH) return `${label} is too long`;\n    if (hasControlChars(value)) return `${label} contains invalid characters`;\n    return null;\n}\n\n/**\n * Validate and normalize a list of ICE server entries.\n * Each entry: { urls: string | string[], username?: string, credential?: string }\n * @returns {{ servers: Array, errors: string[], warnings: string[] }}\n */\nexport function normalizeIceServers(entries) {\n    const errors = [];\n    const warnings = [];\n    const servers = [];\n\n    if (!Array.isArray(entries)) {\n        return { servers: [], errors: [t('iceErr.notArray')], warnings: [] };\n    }\n    if (entries.length === 0) {\n        return { servers: [], errors: [], warnings: [] };\n    }\n    if (entries.length > ICE_LIMITS.MAX_SERVERS) {\n        errors.push(t('iceErr.tooMany', { max: ICE_LIMITS.MAX_SERVERS }));\n        return { servers: [], errors, warnings };\n    }\n\n    entries.forEach((entry, index) => {\n        const label = `Server #${index + 1}`;\n        if (!entry || typeof entry !== 'object') {\n            errors.push(t('iceErr.invalidEntry', { label }));\n            return;\n        }\n\n        const rawUrls = Array.isArray(entry.urls) ? entry.urls : [entry.urls];\n        if (rawUrls.length === 0 || rawUrls.length > ICE_LIMITS.MAX_URLS_PER_SERVER) {\n            errors.push(t('iceErr.urlCount', { label, max: ICE_LIMITS.MAX_URLS_PER_SERVER }));\n            return;\n        }\n\n        const cleanUrls = [];\n        let entryHasTurn = false;\n        for (const rawUrl of rawUrls) {\n            const err = validateIceUrl(rawUrl);\n            if (err) {\n                errors.push(`${label}: ${err}`);\n                continue;\n            }\n            const trimmed = rawUrl.trim();\n            cleanUrls.push(trimmed);\n            if (isTurnUrl(trimmed)) entryHasTurn = true;\n        }\n        if (cleanUrls.length === 0) return;\n\n        const userErr = validateSecret(entry.username, `${label} username`);\n        if (userErr) errors.push(userErr);\n        const credErr = validateSecret(entry.credential, `${label} credential`);\n        if (credErr) errors.push(credErr);\n\n        const server = { urls: cleanUrls.length === 1 ? cleanUrls[0] : cleanUrls };\n        if (entry.username) server.username = String(entry.username);\n        if (entry.credential) server.credential = String(entry.credential);\n\n        if (entryHasTurn && (!server.username || !server.credential)) {\n            warnings.push(t('iceErr.turnCreds', { label }));\n        }\n\n        servers.push(server);\n    });\n\n    return { servers, errors, warnings };\n}\n\n/**\n * Parse free-form user input into ICE server entries.\n * Accepts either a JSON array of RTCIceServer-like objects, or one URL per line\n * (URL-only servers, e.g. public STUN). Returns normalized + validated output.\n */\nexport function parseIceServersInput(text) {\n    if (typeof text !== 'string' || !text.trim()) {\n        return { servers: [], errors: [], warnings: [] };\n    }\n\n    const trimmed = text.trim();\n    if (trimmed.startsWith('[') || trimmed.startsWith('{')) {\n        let parsed;\n        try {\n            parsed = JSON.parse(trimmed);\n        } catch {\n            return { servers: [], errors: [t('iceErr.invalidJson')], warnings: [] };\n        }\n        const arr = Array.isArray(parsed) ? parsed : [parsed];\n        return normalizeIceServers(arr);\n    }\n\n    // Line-based: each non-empty line is a single URL-only server.\n    const entries = trimmed\n        .split('\\n')\n        .map(line => line.trim())\n        .filter(Boolean)\n        .map(url => ({ urls: url }));\n    return normalizeIceServers(entries);\n}\n\n/** Does a normalized server list contain at least one TURN/TURNS server? */\nexport function listHasTurn(servers) {\n    if (!Array.isArray(servers)) return false;\n    return servers.some(server => {\n        const urls = Array.isArray(server?.urls) ? server.urls : [server?.urls];\n        return urls.some(isTurnUrl);\n    });\n}\n", "import { t, direction } from '../../i18n/index.js';\n// Advanced network settings: lets a user supply their own STUN/TURN servers\n// instead of the bundled public defaults, and toggle relay-only privacy mode.\n// Free / power-user feature, hidden behind an explicit \"Advanced\" entry point.\n//\n// All input is validated through src/network/iceServers.js before it can reach\n// RTCPeerConnection. Persistence is opt-in and encrypted at rest (see\n// src/network/iceSettingsStore.js).\nimport {\n    parseIceServersInput,\n    listHasTurn,\n    ICE_LIMITS\n} from '../../network/iceServers.js';\n\nconst React = window.React;\n\nconst PLACEHOLDER = [\n    '# One URL per line, e.g.:',\n    'stun:stun.example.com:3478',\n    'turn:turn.example.com:3478?transport=udp',\n    '',\n    '# Or paste JSON for servers with credentials:',\n    '[{\"urls\":\"turns:turn.example.com:5349\",\"username\":\"user\",\"credential\":\"secret\"}]'\n].join('\\n');\n\nasync function testIceServers(servers, timeoutMs = 6000) {\n    const found = { host: 0, srflx: 0, relay: 0 };\n    if (typeof RTCPeerConnection === 'undefined') {\n        return { ...found, error: t('ice.errUnavailable') };\n    }\n    let pc;\n    try {\n        pc = new RTCPeerConnection({ iceServers: servers });\n    } catch (error) {\n        return { ...found, error: error.message || t('ice.errInvalid') };\n    }\n\n    return new Promise((resolve) => {\n        let settled = false;\n        const finish = () => {\n            if (settled) return;\n            settled = true;\n            clearTimeout(timer);\n            try { pc.close(); } catch { /* noop */ }\n            resolve(found);\n        };\n        const timer = setTimeout(finish, timeoutMs);\n\n        pc.onicecandidate = (event) => {\n            if (!event.candidate) { finish(); return; }\n            const c = event.candidate.candidate || '';\n            if (/ typ host/.test(c)) found.host++;\n            else if (/ typ srflx/.test(c)) found.srflx++;\n            else if (/ typ relay/.test(c)) found.relay++;\n        };\n\n        try {\n            pc.createDataChannel('securebit-ice-test');\n            pc.createOffer()\n                .then((offer) => pc.setLocalDescription(offer))\n                .catch(() => finish());\n        } catch {\n            finish();\n        }\n    });\n}\n\nconst IceServerSettings = ({ isOpen, onClose, initial, hasSaved, onApply, onForget, embedded }) => {\n    if (!isOpen) return null;\n\n    const [useCustom, setUseCustom] = React.useState(initial?.useCustom || false);\n    const [serversText, setServersText] = React.useState(initial?.serversText || '');\n    const [relayOnly, setRelayOnly] = React.useState(initial?.privacyMode === 'relay-only');\n    const [persist, setPersist] = React.useState(initial?.persisted || false);\n    const [testState, setTestState] = React.useState('idle'); // idle | running | done\n    const [testResult, setTestResult] = React.useState(null);\n\n    const parsed = useCustom ? parseIceServersInput(serversText) : { servers: [], errors: [], warnings: [] };\n    const hasTurn = listHasTurn(parsed.servers);\n    const canApply = !useCustom || (parsed.servers.length > 0 && parsed.errors.length === 0);\n\n    const handleTest = async () => {\n        setTestState('running');\n        setTestResult(null);\n        const result = await testIceServers(parsed.servers);\n        setTestResult(result);\n        setTestState('done');\n    };\n\n    const handleApply = () => {\n        if (!canApply) return;\n        onApply(\n            {\n                useCustom,\n                servers: useCustom ? parsed.servers : [],\n                privacyMode: relayOnly ? 'relay-only' : 'standard',\n                serversText\n            },\n            persist\n        );\n    };\n\n    const handleForget = async () => {\n        if (onForget) await onForget();\n        setPersist(false);\n    };\n\n    // \u2500\u2500 Design import: dark slide-up overlay (orange/green accents) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    const h = React.createElement;\n    const C_ORANGE = 'var(--sb-orange)';\n    const C_GREEN = 'var(--sb-green)';\n    // Fill forms of the two: brand colour in both themes. See app.jsx.\n    const C_ORANGE_SOLID = 'var(--sb-orange-solid)';\n    const C_GREEN_SOLID = 'var(--sb-green-solid)';\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\n    // radio card (public / own servers)\n    const radioCard = (selected, onClick, title, desc, extraStyle) => h('button', {\n        type: 'button', onClick,\n        style: Object.assign({\n            width: '100%', textAlign: 'start', display: 'flex', alignItems: 'flex-start', gap: '12px',\n            padding: '14px 15px', borderRadius: '13px',\n            border: `1px solid ${selected ? 'rgba(var(--sb-orange-rgb), 0.45)' : 'rgba(var(--sb-ink), 0.07)'}`,\n            background: selected ? 'rgba(var(--sb-orange-rgb), 0.06)' : 'var(--sb-surface)',\n            color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', transition: 'all .15s', marginBottom: '10px'\n        }, extraStyle || {})\n    }, [\n        h('span', { key: 'ring', style: { flex: 'none', width: '18px', height: '18px', marginTop: '1px', borderRadius: '50%', border: `1.5px solid ${selected ? C_ORANGE : 'rgba(var(--sb-ink), 0.22)'}`, display: 'grid', placeItems: 'center' } },\n            h('span', { style: { width: '8px', height: '8px', borderRadius: '50%', background: selected ? C_ORANGE_SOLID : 'transparent' } })),\n        h('span', { key: 'tx', style: { flex: 1 } }, [\n            h('span', { key: 't', style: { display: 'block', fontSize: '14px', fontWeight: 700, color: 'var(--sb-text-1)' } }, title),\n            h('span', { key: 'd', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '2px' } }, desc)\n        ])\n    ]);\n\n    // pill toggle row (relay / save)\n    const toggleRow = (on, onClick, title, desc, accent, badge) => h('button', {\n        type: 'button', onClick,\n        style: {\n            width: '100%', textAlign: 'start', display: 'flex', alignItems: 'flex-start', gap: '12px',\n            padding: '14px 15px', borderRadius: '13px',\n            border: `1px solid ${on ? 'rgba(var(--sb-green-rgb), 0.3)' : 'rgba(var(--sb-ink), 0.07)'}`,\n            background: on ? 'rgba(var(--sb-green-rgb), 0.05)' : 'var(--sb-surface)',\n            color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', transition: 'all .15s', marginBottom: '10px'\n        }\n    }, [\n        h('span', { key: 'tx', style: { flex: 1 } }, [\n            h('span', { key: 'r1', style: { display: 'flex', alignItems: 'center', gap: '8px' } }, [\n                h('span', { key: 't', style: { fontSize: '14px', fontWeight: 700, color: 'var(--sb-text-1)' } }, title),\n                badge && h('span', { key: 'b', style: { fontSize: '10px', fontWeight: 700, color: C_GREEN, padding: '2px 7px', borderRadius: '5px', background: 'rgba(var(--sb-green-rgb), 0.1)', border: '1px solid rgba(var(--sb-green-rgb), 0.22)' } }, badge)\n            ]),\n            h('span', { key: 'd', style: { display: 'block', fontSize: '12.5px', lineHeight: 1.5, color: 'var(--sb-text-7)', marginTop: '3px' } }, desc)\n        ]),\n        h('span', { key: 'tr', style: { flex: 'none', width: '42px', height: '24px', borderRadius: '99px', background: on ? (accent || C_GREEN_SOLID) : 'rgba(var(--sb-ink), 0.08)', border: `1px solid ${on ? (accent || C_GREEN) : 'rgba(var(--sb-ink), 0.12)'}`, position: 'relative', transition: 'all .18s', marginTop: '1px' } },\n            h('span', { style: { position: 'absolute', top: '2px', insetInlineStart: '2px', width: '18px', height: '18px', borderRadius: '50%', background: '#fff', transform: on ? `translateX(${18 * direction()}px)` : 'translateX(0)', transition: 'transform .18s' } }))\n    ]);\n\n    // \u2500\u2500 scrollable body \u2500\u2500\n    const body = [];\n    body.push(h('p', { key: 'intro', style: { margin: '0 0 18px', fontSize: '13.5px', lineHeight: 1.6, color: 'var(--sb-text-6)' } },\n        t('ice.intro')));\n    body.push(radioCard(!useCustom, () => setUseCustom(false), t('ice.publicTitle'), t('ice.publicDesc')));\n    body.push(radioCard(useCustom, () => setUseCustom(true), t('ice.customTitle'), t('ice.customDesc', { max: ICE_LIMITS.MAX_SERVERS }), useCustom ? { marginBottom: '14px' } : null));\n\n    if (useCustom) {\n        const custom = [];\n        custom.push(h('div', { key: 'ta', style: { borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-bg-deep)', overflow: 'hidden', marginBottom: '12px' } },\n            h('textarea', {\n                dir: 'ltr',\n                value: serversText, onChange: (e) => setServersText(e.target.value), rows: 5, spellCheck: false, autoComplete: 'off',\n                placeholder: PLACEHOLDER,\n                style: { width: '100%', resize: 'vertical', border: 'none', outline: 'none', background: 'transparent', color: 'var(--sb-text-code)', fontFamily: MONO, fontSize: '12px', lineHeight: 1.65, padding: '13px 14px', minHeight: '104px' }\n            })));\n        if (parsed.errors.length > 0) {\n            custom.push(h('ul', { key: 'err', style: { margin: '0 0 10px', paddingInlineStart: '18px', color: 'var(--sb-red)', fontSize: '12.5px' } },\n                parsed.errors.slice(0, 6).map((err, i) => h('li', { key: i }, err))));\n        }\n        if (parsed.warnings.length > 0) {\n            custom.push(h('ul', { key: 'warn', style: { margin: '0 0 10px', paddingInlineStart: '18px', color: 'var(--sb-yellow)', fontSize: '12.5px' } },\n                parsed.warnings.slice(0, 6).map((w, i) => h('li', { key: i }, w))));\n        }\n        if (parsed.servers.length > 0 && parsed.errors.length === 0) {\n            custom.push(h('p', { key: 'ok', style: { margin: '0 0 10px', fontSize: '12.5px', color: C_GREEN } },\n                `${parsed.servers.length} server(s) parsed${hasTurn ? ' (TURN present)' : ' (STUN only \u2014 does not hide IP)'}.`));\n        }\n        custom.push(h('div', { key: 'note', style: { display: 'flex', alignItems: 'flex-start', gap: '9px', padding: '12px 13px', borderRadius: '11px', border: '1px solid rgba(var(--sb-green-rgb), 0.18)', background: 'rgba(var(--sb-green-rgb), 0.05)', marginBottom: '12px' } }, [\n            h('i', { key: 'i', className: 'fas fa-info-circle', style: { color: C_GREEN, fontSize: '13px', marginTop: '2px', flex: 'none' } }),\n            h('span', { key: 't', style: { fontSize: '12px', lineHeight: 1.55, color: 'var(--sb-green-muted)' } }, [\n                t('ice.turnNote'),\n                h('span', { key: 'm', style: { fontFamily: MONO, color: C_GREEN } }, 'turns:'), t('ice.turnNoteTls')\n            ])\n        ]));\n        const testColor = testState === 'done' && testResult && !testResult.error ? C_GREEN : 'var(--sb-text-4)';\n        custom.push(h('div', { key: 'test', style: { display: 'flex', alignItems: 'center', gap: '12px', flexWrap: 'wrap', marginBottom: '4px' } }, [\n            h('button', {\n                key: 'btn', type: 'button', disabled: !canApply || testState === 'running', onClick: handleTest,\n                style: { display: 'inline-flex', alignItems: 'center', gap: '8px', padding: '10px 15px', borderRadius: '10px', border: `1px solid ${testState === 'done' && testResult && !testResult.error ? 'rgba(var(--sb-green-rgb), 0.4)' : 'rgba(var(--sb-ink), 0.1)'}`, background: testState === 'done' && testResult && !testResult.error ? 'rgba(var(--sb-green-rgb), 0.08)' : 'rgba(var(--sb-ink), 0.04)', color: testColor, fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: (!canApply || testState === 'running') ? 'not-allowed' : 'pointer', opacity: (!canApply || testState === 'running') ? 0.6 : 1 }\n            }, [\n                h('i', { key: 'i', className: testState === 'running' ? 'fas fa-circle-notch' : 'fas fa-play-circle', style: testState === 'running' ? { animation: 'sbSpin 1s linear infinite' } : null }),\n                testState === 'running' ? t('ice.testing') : t('ice.test')\n            ]),\n            (testState === 'done' && testResult) ? h('span', { key: 'res', style: { fontSize: '12px', color: testResult.error ? 'var(--sb-red)' : 'var(--sb-text-7)' } },\n                testResult.error\n                    ? `Test failed: ${testResult.error}`\n                    : (testResult.srflx > 0 || testResult.relay > 0)\n                        ? `STUN ${testResult.srflx > 0 ? 'OK' : 'none'} \u00B7 TURN ${testResult.relay > 0 ? 'OK' : 'none'} \u00B7 host ${testResult.host}`\n                        : `host ${testResult.host} \u00B7 this browser hides STUN/TURN candidates from the test \u2014 your servers still apply to real connections`\n            ) : null\n        ]));\n        body.push(h('div', { key: 'custom', style: { marginBottom: '16px' } }, custom));\n    }\n\n    body.push(toggleRow(relayOnly, () => setRelayOnly(!relayOnly), t('ice.relayTitle'),\n        t('ice.relayDesc'), C_GREEN, t('ice.relayBadge')));\n    if (relayOnly && useCustom && !hasTurn) {\n        body.push(h('p', { key: 'relaywarn', style: { margin: '-4px 0 10px', fontSize: '12.5px', color: 'var(--sb-yellow)' } },\n            t('ice.relayWarning')));\n    }\n    body.push(toggleRow(persist, () => setPersist(!persist), t('ice.persist'),\n        t('ice.persistDesc'), C_ORANGE));\n\n    // \u2500\u2500 footer actions \u2500\u2500\n    const footerBtns = [];\n    if (hasSaved) {\n        footerBtns.push(h('button', { key: 'forget', type: 'button', onClick: handleForget,\n            style: { marginInlineEnd: 'auto', padding: '11px 18px', borderRadius: '11px', border: '1px solid rgba(var(--sb-red-rgb), 0.3)', background: 'transparent', color: 'var(--sb-red)', fontFamily: 'inherit', fontSize: '13.5px', fontWeight: 600, cursor: 'pointer' } }, t('ice.forget')));\n    }\n    footerBtns.push(h('button', { key: 'cancel', type: 'button', onClick: onClose,\n        style: { padding: '11px 18px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'transparent', color: 'var(--sb-text-5)', fontFamily: 'inherit', fontSize: '13.5px', fontWeight: 600, cursor: 'pointer' } }, t('ice.cancel')));\n    footerBtns.push(h('button', { key: 'apply', type: 'button', onClick: handleApply, disabled: !canApply,\n        style: { display: 'inline-flex', alignItems: 'center', gap: '8px', padding: '11px 20px', borderRadius: '11px', border: 'none', background: C_ORANGE_SOLID, color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '13.5px', fontWeight: 700, cursor: canApply ? 'pointer' : 'not-allowed', opacity: canApply ? 1 : 0.5, boxShadow: '0 6px 18px rgba(var(--sb-orange-rgb), 0.28)' } }, [\n        h('i', { key: 'i', className: 'fas fa-check' }), t('ice.apply')\n    ]));\n\n    // Embedded mode (default for the new design): fill the connection screen's\n    // right column and slide up over it. Fallback: a fixed right-side drawer.\n    const wrapperStyle = embedded\n        ? { position: 'absolute', inset: 0, zIndex: 60, display: 'flex', flexDirection: 'column', background: 'var(--sb-bg)', animation: 'sbSlideUp .32s cubic-bezier(.2,.7,.3,1)' }\n        : { position: 'fixed', inset: 0, zIndex: 60, display: 'flex', flexDirection: 'column', alignItems: 'stretch', background: 'var(--sb-bg)', animation: 'sbSlideUp .32s cubic-bezier(.2,.7,.3,1)' };\n\n    return h('div', { className: 'sb-ice-overlay', style: wrapperStyle }, [\n        h(React.Fragment, { key: 'panel' }, [\n            // header\n            h('div', { key: 'head', style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '20px 24px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                h('div', { key: 'ic', style: { width: '38px', height: '38px', flex: 'none', display: 'grid', placeItems: 'center', borderRadius: '10px', background: 'rgba(var(--sb-ink), 0.03)', border: '1px solid rgba(var(--sb-ink), 0.06)' } },\n                    h('i', { className: 'fas fa-sliders-h', style: { color: 'var(--sb-text-4)', fontSize: '15px' } })),\n                h('div', { key: 'tx', style: { flex: 1, lineHeight: 1.25 } }, [\n                    h('div', { key: 't', style: { fontSize: '16.5px', fontWeight: 800, letterSpacing: '-0.3px', color: 'var(--sb-text-1)' } }, t('ice.title')),\n                    h('div', { key: 's', style: { fontSize: '12px', color: 'var(--sb-text-8)' } }, t('ice.subtitle'))\n                ]),\n                h('button', { key: 'x', type: 'button', onClick: onClose, style: { width: '32px', height: '32px', flex: 'none', display: 'grid', placeItems: 'center', borderRadius: '9px', border: 'none', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-7)', cursor: 'pointer' } },\n                    h('i', { className: 'fas fa-times' }))\n            ]),\n            // scroll body\n            h('div', { key: 'body', className: 'custom-scrollbar', style: { flex: 1, overflowY: 'auto', padding: '20px 24px' } }, body),\n            // footer\n            h('div', { key: 'foot', style: { display: 'flex', alignItems: 'center', justifyContent: 'flex-end', gap: '10px', padding: '16px 24px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', background: 'var(--sb-bg-deep)', borderRadius: '0' } }, footerBtns)\n        ])\n    ]);\n};\n\nwindow.IceServerSettings = IceServerSettings;\n\nexport { IceServerSettings, testIceServers };\n", "import { t } from '../../i18n/index.js';\n// Encrypted voice / video call UI for SecureBit.chat.\n//\n// Faithful implementation of the \"SecureBit Chat.dc.html\" design: the voice-call\n// (expanded), video-call (expanded) and minimized-widget states use the exact\n// icons, sizes, colours and layout from that mockup. This component is a thin\n// presentational shell over the call subsystem in EnhancedSecureWebRTCManager \u2014\n// all media and crypto live there. Media is DTLS-SRTP encrypted on the same\n// SAS-verified transport as the chat (see the manager's call section).\n//\n// Loaded as a native ES module (no JSX compilation), so this file uses\n// React.createElement directly, mirroring the other components/ui modules.\n\nconst CallUIComponent = ({ webrtcManager, peerTitle }) => {\n    const h = React.createElement;\n    const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\n    // Exact SVG icons lifted from the design. Rendered via innerHTML (CSP-safe \u2014\n    // markup, not script); `stroke=\"currentColor\"` inherits the button's colour.\n    const ICON = {\n        lock: '<path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/><rect x=\"4.5\" y=\"11\" width=\"15\" height=\"9\" rx=\"2.2\"/>',\n        minimize: '<path d=\"M9 4v4a1 1 0 0 1-1 1H4M15 4v4a1 1 0 0 0 1 1h4M9 20v-4a1 1 0 0 0-1-1H4M15 20v-4a1 1 0 0 1 1-1h4\"/>',\n        expand: '<path d=\"M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7\"/>',\n        user: '<circle cx=\"12\" cy=\"8\" r=\"3.6\"/><path d=\"M5 20c0-3.5 3-5.5 7-5.5s7 2 7 5.5\"/>',\n        micOn: '<rect x=\"9\" y=\"3\" width=\"6\" height=\"11\" rx=\"3\"/><path d=\"M5 11a7 7 0 0 0 14 0\"/><path d=\"M12 18v3\"/>',\n        micOff: '<path d=\"M9 9v-1a3 3 0 0 1 5.1-2.1M15 11v3a3 3 0 0 1-4.6 2.5\"/><path d=\"M5 11a7 7 0 0 0 10.3 6.2M19 11a7 7 0 0 1-.4 2.3\"/><path d=\"M12 18v3\"/><path d=\"M3 3l18 18\"/>',\n        camOn: '<path d=\"M23 7l-7 5 7 5V7z\"/><rect x=\"1\" y=\"5\" width=\"15\" height=\"14\" rx=\"2.5\"/>',\n        camOff: '<path d=\"M16 16H3a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h2l2-2M11 6h2l7-3v14M2 2l20 20\"/>',\n        flip: '<path d=\"M3 7h3l2-2h8l2 2h3v12H3z\"/><path d=\"M9.5 13a2.5 2.5 0 0 1 5 0M14.5 13l-1.3-1.3M14.5 13l1.3-1.3\"/>',\n        phone: '<path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\"/>',\n        phoneHangup: '<path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\" transform=\"rotate(135 12 12)\"/>'\n    };\n    const svg = (inner, size, sw) => h('span', {\n        style: { display: 'grid', placeItems: 'center', width: size + 'px', height: size + 'px' },\n        dangerouslySetInnerHTML: { __html: `<svg width=\"${size}\" height=\"${size}\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"${sw}\" stroke-linecap=\"round\" stroke-linejoin=\"round\">${inner}</svg>` }\n    });\n\n    const [call, setCall] = React.useState(() => (webrtcManager?.getCallState?.() || { phase: 'idle', active: false }));\n    const [minimized, setMinimized] = React.useState(false);\n    const [seconds, setSeconds] = React.useState(0);\n\n    const remoteVideoRef = React.useRef(null);\n    const remoteAudioRef = React.useRef(null);\n    const selfVideoRef = React.useRef(null);\n\n    // Subscribe to call-state changes from the active session's manager.\n    React.useEffect(() => {\n        if (!webrtcManager) return;\n        const onState = (state) => setCall(state);\n        const prev = webrtcManager.onCallStateChanged;\n        webrtcManager.onCallStateChanged = onState;\n        setCall(webrtcManager.getCallState ? webrtcManager.getCallState() : { phase: 'idle', active: false });\n        return () => { if (webrtcManager.onCallStateChanged === onState) webrtcManager.onCallStateChanged = prev || null; };\n    }, [webrtcManager]);\n\n    const phase = call.phase || 'idle';\n    const active = !!call.active;\n    const isVideo = !!call.withVideo || !!call.remoteHasVideo;\n\n    // Attach media streams to the <video>/<audio> elements AND explicitly play():\n    // just setting srcObject does not reliably start playback (esp. when the\n    // element mounts before the stream exists), so the peer's audio stayed silent.\n    React.useEffect(() => {\n        const remoteStream = webrtcManager?.getRemoteMediaStream?.();\n        const localStream = webrtcManager?.getLocalMediaStream?.();\n        const attach = (el, stream, muted) => {\n            if (!el || !stream) return;\n            if (el.srcObject !== stream) { el.muted = muted; el.srcObject = stream; }\n            const p = el.play && el.play();\n            if (p && p.catch) p.catch(() => {});\n        };\n        // Remote audio via the dedicated <audio>; remote <video> stays muted so the\n        // peer's audio isn't played twice.\n        attach(remoteAudioRef.current, remoteStream, false, 'remoteAudio');\n        attach(remoteVideoRef.current, remoteStream, true, 'remoteVideo');\n        attach(selfVideoRef.current, localStream, true, 'selfVideo');\n    });\n\n    // Call duration timer (starts when the call goes active).\n    React.useEffect(() => {\n        if (phase !== 'active') { setSeconds(0); return; }\n        const started = Date.now();\n        const iv = setInterval(() => setSeconds(Math.floor((Date.now() - started) / 1000)), 1000);\n        return () => clearInterval(iv);\n    }, [phase]);\n\n    React.useEffect(() => { if (phase === 'idle') setMinimized(false); }, [phase]);\n\n    if (!active || phase === 'idle' || phase === 'ended') return null;\n    // One leg of a group call runs on this same session. The group's own surface\n    // renders it as a tile alongside the others; a second full-screen 1:1 overlay\n    // on top of that would be the same audio shown twice, with two hang-up\n    // buttons that mean different things.\n    if (call.groupCallId) return null;\n\n    const fmt = (s) => `${String(Math.floor(s / 60)).padStart(2, '0')}:${String(s % 60).padStart(2, '0')}`;\n    const ringing = phase === 'outgoing' || phase === 'connecting';\n    const callStatus = phase === 'outgoing' ? t('call.ringing')\n        : phase === 'connecting' ? t('call.connecting')\n            : phase === 'active' ? fmt(seconds) : t('call.ringing');\n    const name = peerTitle || t('call.peer');\n\n    // \u2500\u2500 shared styles (from the design) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    const ctrlBase = {\n        width: '56px', height: '56px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n        border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.05)',\n        color: 'var(--sb-text-4)', cursor: 'pointer', transition: 'all .15s'\n    };\n    const dangerCtrl = { ...ctrlBase, background: 'var(--sb-red-strong-solid)', color: '#fff', border: '1px solid transparent' };\n    const endBtn = {\n        width: '56px', height: '56px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n        border: 'none', background: 'var(--sb-red-strong-solid)', color: '#fff', cursor: 'pointer',\n        boxShadow: '0 8px 24px rgba(var(--sb-red-strong-rgb), 0.35)', transition: 'transform .15s'\n    };\n    const minimizeBtn = (light) => ({\n        width: '36px', height: '36px', borderRadius: '9px', display: 'grid', placeItems: 'center',\n        border: '1px solid rgba(var(--sb-ink), ' + (light ? '0.15' : '0.1') + ')',\n        background: light ? 'rgba(0,0,0,0.35)' : 'rgba(var(--sb-ink), 0.04)',\n        color: light ? '#fff' : 'var(--sb-text-4)', cursor: 'pointer', transition: 'all .15s'\n    });\n\n    const encBadge = h('span', { key: 'enc', style: { display: 'inline-flex', alignItems: 'center', gap: '4px', fontSize: '11px', fontWeight: 600, color: 'var(--sb-green)' } },\n        [svg(ICON.lock, 11, 2), t('call.encryptedShort')]);\n\n    // Connection-quality indicator \u2014 driven by the adaptation controller's\n    // getStats (loss + RTT). Signal bars + label; hidden until there's data.\n    // `color` labels the quality in words; `solid` fills the signal bars. A bar is a\n    // mark, so it keeps the brand colour in both themes \u2014 see src/styles/theme.css.\n    const QUALITY = {\n        excellent: { bars: 4, color: 'var(--sb-green)', solid: 'var(--sb-green-solid)', label: t('call.qualityExcellent') },\n        good: { bars: 3, color: 'var(--sb-green)', solid: 'var(--sb-green-solid)', label: t('call.qualityGood') },\n        fair: { bars: 2, color: 'var(--sb-yellow)', solid: 'var(--sb-yellow-solid)', label: t('call.qualityFair') },\n        poor: { bars: 1, color: 'var(--sb-red)', solid: 'var(--sb-red-solid)', label: t('call.qualityWeak') },\n    };\n    const qualityIndicator = (compact) => {\n        const q = QUALITY[call.quality];\n        if (!q) return null;\n        const bars = h('span', { key: 'bars', style: { display: 'inline-flex', alignItems: 'flex-end', gap: '2px', height: '14px' } },\n            [0, 1, 2, 3].map(i => h('span', {\n                key: i, style: { width: '3px', height: (5 + i * 3) + 'px', borderRadius: '1px', background: i < q.bars ? q.solid : 'rgba(var(--sb-ink), 0.18)' }\n            })));\n        if (compact) return bars;\n        return h('span', { key: 'q', title: t('call.quality'), style: { display: 'inline-flex', alignItems: 'center', gap: '6px', fontSize: '11.5px', fontWeight: 600, color: q.color } }, [bars, q.label]);\n    };\n\n    // \u2500\u2500 actions \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    const doAccept = () => webrtcManager?.acceptCall?.();\n    const doDecline = () => webrtcManager?.declineCall?.();\n    const doEnd = () => { setMinimized(false); webrtcManager?.endCall?.(); };\n    const doMute = () => webrtcManager?.toggleMic?.();\n    const doCamera = () => webrtcManager?.toggleCamera?.();\n    const doFlip = () => webrtcManager?.switchCamera?.();\n    const doUpgrade = () => webrtcManager?.upgradeToVideo?.();\n\n    const hiddenAudio = h('audio', { key: 'ra', ref: remoteAudioRef, autoPlay: true, playsInline: true, style: { display: 'none' } });\n\n    const labeled = (key, btn, label) => h('div', { key, style: { display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '8px' } },\n        [btn, h('span', { key: 'l', style: { fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-7)' } }, label)]);\n\n    // Avatar disc with optional ringing pulse (voice + incoming).\n    const avatarDisc = (size, ring) => h('div', { key: 'av', style: { position: 'relative', width: '120px', height: '120px', marginBottom: '28px', display: 'grid', placeItems: 'center' } }, [\n        ring && h('span', { key: 'p1', style: { position: 'absolute', inset: 0, borderRadius: '50%', border: '1.5px solid rgba(var(--sb-orange-rgb), 0.5)', animation: 'sbCallPulse 2s ease-out infinite' } }),\n        ring && h('span', { key: 'p2', style: { position: 'absolute', inset: 0, borderRadius: '50%', border: '1.5px solid rgba(var(--sb-orange-rgb), 0.4)', animation: 'sbCallPulse 2s ease-out infinite', animationDelay: '1s' } }),\n        h('div', { key: 'c', style: { width: '104px', height: '104px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))', border: '1px solid rgba(var(--sb-ink), 0.1)', boxShadow: '0 12px 30px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))', color: 'var(--sb-text-7)' } }, svg(ICON.user, size, 1.6))\n    ]);\n\n    // \u2500\u2500 INCOMING (ringing) prompt \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (phase === 'incoming') {\n        return h('div', { style: { position: 'absolute', inset: 0, zIndex: 40, display: 'flex', flexDirection: 'column', background: 'radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)', animation: 'sbExpand .2s ease' } }, [\n            hiddenAudio,\n            h('div', { key: 'top', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'flex-start', padding: '16px 18px' } },\n                h('span', { style: { display: 'inline-flex', alignItems: 'center', gap: '7px', fontSize: '12px', fontWeight: 600, color: 'var(--sb-green)' } }, [svg(ICON.lock, 13, 2), t('call.encrypted')])),\n            h('div', { key: 'mid', style: { flex: 1, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center' } }, [\n                avatarDisc(46, true),\n                h('div', { key: 'nm', style: { fontSize: '24px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, name),\n                h('div', { key: 'st', style: { fontFamily: MONO, fontSize: '14px', fontWeight: 500, color: 'var(--sb-text-6)', marginTop: '8px' } }, call.withVideo ? t('call.incomingVideo') : t('call.incoming'))\n            ]),\n            h('div', { key: 'ctrls', style: { flex: 'none', display: 'flex', alignItems: 'flex-start', justifyContent: 'center', gap: '48px', padding: '28px 24px 40px' } }, [\n                labeled('dec', h('button', { onClick: doDecline, title: t('call.decline'), style: { ...endBtn, width: '62px', height: '62px' } }, svg(ICON.phoneHangup, 24, 1.9)), t('call.decline')),\n                labeled('acc', h('button', { onClick: doAccept, title: t('call.accept'), style: { width: '62px', height: '62px', borderRadius: '50%', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-green-solid)', color: 'var(--sb-on-green)', cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-green-rgb), 0.35)' } }, svg(ICON.phone, 24, 1.9)), t('call.accept'))\n            ])\n        ]);\n    }\n\n    // \u2500\u2500 MINIMIZED widget \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (minimized) {\n        return h('div', { style: { position: 'absolute', bottom: '18px', insetInlineEnd: '18px', zIndex: 40, width: '236px', borderRadius: '14px', overflow: 'hidden', background: 'var(--sb-surface)', border: '1px solid rgba(var(--sb-ink), 0.1)', boxShadow: '0 18px 44px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))', animation: 'sbExpand .18s ease' } }, [\n            hiddenAudio,\n            isVideo && h('div', { key: 'v', style: { position: 'relative', height: '132px', background: '#111' } }, [\n                h('video', { key: 'rv', ref: remoteVideoRef, autoPlay: true, muted: true, playsInline: true, style: { width: '100%', height: '100%', objectFit: 'cover', display: 'block' } }),\n                !call.remoteHasVideo && h('div', { key: 'off', style: { position: 'absolute', inset: 0, display: 'grid', placeItems: 'center', background: 'linear-gradient(120deg,var(--sb-grad-1),var(--sb-grad-2))', color: 'var(--sb-text-9)' } }, svg(ICON.camOff, 22, 1.8)),\n                h('span', { key: 's', style: { position: 'absolute', top: '8px', insetInlineStart: '9px', fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: '#fff', padding: '3px 7px', borderRadius: '6px', background: 'rgba(0,0,0,0.5)' } }, callStatus)\n            ]),\n            h('div', { key: 'bar', style: { display: 'flex', alignItems: 'center', gap: '11px', padding: '11px 12px' } }, [\n                h('span', { key: 'ic', style: { position: 'relative', flex: 'none', width: '34px', height: '34px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.1)', border: '1px solid rgba(var(--sb-green-rgb), 0.25)', color: 'var(--sb-green)' } }, svg(ICON.user, 16, 1.9)),\n                h('div', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                    h('div', { key: 'n', style: { fontSize: '13px', fontWeight: 700, color: 'var(--sb-text-1)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, name),\n                    h('div', { key: 's', style: { display: 'flex', alignItems: 'center', gap: '7px', fontFamily: MONO, fontSize: '11px', color: 'var(--sb-text-6)' } }, [\n                        (isVideo ? t('call.videoPrefix') : t('call.voicePrefix')) + callStatus,\n                        phase === 'active' && qualityIndicator(true)\n                    ])\n                ]),\n                h('button', { key: 'exp', onClick: () => setMinimized(false), title: t('call.expand'), style: { flex: 'none', width: '32px', height: '32px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-4)', cursor: 'pointer', transition: 'all .15s' } }, svg(ICON.expand, 15, 2)),\n                h('button', { key: 'end', onClick: doEnd, title: t('call.end'), style: { flex: 'none', width: '32px', height: '32px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-red-strong-solid)', color: '#fff', cursor: 'pointer', transition: 'transform .15s' } }, svg(ICON.phoneHangup, 15, 2))\n            ])\n        ]);\n    }\n\n    // \u2500\u2500 VIDEO call (expanded) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (isVideo) {\n        return h('div', { style: { position: 'absolute', inset: 0, zIndex: 40, overflow: 'hidden', background: 'var(--sb-bg-deepest)', animation: 'sbExpand .2s ease' } }, [\n            hiddenAudio,\n            call.remoteHasVideo\n                ? h('video', { key: 'rv', ref: remoteVideoRef, autoPlay: true, muted: true, playsInline: true, style: { position: 'absolute', inset: 0, width: '100%', height: '100%', objectFit: 'cover', background: 'var(--sb-bg-deepest)' } })\n                : h('div', { key: 'ph', style: { position: 'absolute', inset: 0, background: 'linear-gradient(120deg, var(--sb-grad-1), var(--sb-grad-2), var(--sb-grad-3))', backgroundSize: '200% 200%', animation: 'sbLiveBg 9s ease-in-out infinite', display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center', gap: '18px' } }, [\n                    h('div', { key: 'a', style: { width: '120px', height: '120px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: 'radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))', border: '1px solid rgba(var(--sb-ink), 0.1)', color: 'var(--sb-text-6)' } }, svg(ICON.user, 54, 1.5)),\n                    h('div', { key: 't', style: { fontSize: '15px', fontWeight: 600, color: 'var(--sb-text-7)' } }, t('call.peerCameraOff'))\n                ]),\n            // Top bar\n            h('div', { key: 'top', style: { position: 'absolute', top: 0, left: 0, right: 0, display: 'flex', alignItems: 'flex-start', justifyContent: 'space-between', gap: '14px', padding: '18px 20px', background: 'linear-gradient(180deg, rgba(0,0,0,0.55), transparent)' } }, [\n                h('div', { key: 'l' }, [\n                    h('div', { key: 'n', style: { fontSize: '18px', fontWeight: 800, letterSpacing: '-0.3px', color: '#fff' } }, name),\n                    h('div', { key: 's', style: { display: 'inline-flex', alignItems: 'center', gap: '9px', marginTop: '4px' } }, [\n                        h('span', { key: 'st', style: { fontFamily: MONO, fontSize: '12.5px', fontWeight: 500, color: 'var(--sb-text-2)' } }, callStatus),\n                        encBadge,\n                        phase === 'active' && qualityIndicator(false)\n                    ])\n                ]),\n                h('button', { key: 'min', onClick: () => setMinimized(true), title: t('call.minimize'), style: { flex: 'none', ...minimizeBtn(true) } }, svg(ICON.minimize, 16, 2))\n            ]),\n            // Self-cam PiP\n            h('div', { key: 'self', style: { position: 'absolute', bottom: '108px', insetInlineEnd: '18px', width: '132px', height: '176px', borderRadius: '14px', overflow: 'hidden', border: '1px solid rgba(var(--sb-ink), 0.16)', boxShadow: '0 12px 30px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))', background: '#111' } }, [\n                h('video', { key: 'sv', ref: selfVideoRef, autoPlay: true, muted: true, playsInline: true, style: { width: '100%', height: '100%', objectFit: 'cover', transform: 'scaleX(-1)', display: 'block' } }),\n                !call.cameraEnabled && h('div', { key: 'off', style: { position: 'absolute', inset: 0, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center', gap: '8px', background: 'var(--sb-surface)', color: 'var(--sb-text-9)' } }, [\n                    svg(ICON.camOff, 24, 1.8),\n                    h('span', { key: 't', style: { fontSize: '10.5px', color: 'var(--sb-text-9)', fontFamily: MONO } }, t('call.cameraOff'))\n                ])\n            ]),\n            // Control bar\n            h('div', { key: 'ctrls', style: { position: 'absolute', bottom: 0, left: 0, right: 0, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '18px', padding: '22px 24px 28px', background: 'linear-gradient(0deg, rgba(0,0,0,0.6), transparent)' } }, [\n                h('button', { key: 'mute', onClick: doMute, title: t('call.mute'), style: call.micEnabled ? ctrlBase : dangerCtrl }, svg(call.micEnabled ? ICON.micOn : ICON.micOff, 21, 1.9)),\n                h('button', { key: 'cam', onClick: doCamera, title: t('call.camera'), style: call.cameraEnabled ? ctrlBase : dangerCtrl }, svg(call.cameraEnabled ? ICON.camOn : ICON.camOff, 21, 1.8)),\n                h('button', { key: 'flip', onClick: doFlip, title: t('call.flipCamera'), style: ctrlBase }, svg(ICON.flip, 21, 1.8)),\n                h('button', { key: 'end', onClick: doEnd, title: t('call.end'), style: endBtn }, svg(ICON.phoneHangup, 22, 1.9))\n            ])\n        ]);\n    }\n\n    // \u2500\u2500 VOICE call (expanded) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    return h('div', { style: { position: 'absolute', inset: 0, zIndex: 40, display: 'flex', flexDirection: 'column', background: 'radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)', animation: 'sbExpand .2s ease' } }, [\n        hiddenAudio,\n        h('div', { key: 'top', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'space-between', padding: '16px 18px' } }, [\n            h('span', { key: 'enc', style: { display: 'inline-flex', alignItems: 'center', gap: '7px', fontSize: '12px', fontWeight: 600, color: 'var(--sb-green)' } }, [svg(ICON.lock, 13, 2), t('call.encrypted')]),\n            h('button', { key: 'min', onClick: () => setMinimized(true), title: t('call.minimize'), style: minimizeBtn(false) }, svg(ICON.minimize, 16, 2))\n        ]),\n        h('div', { key: 'mid', style: { flex: 1, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center' } }, [\n            avatarDisc(46, ringing),\n            h('div', { key: 'nm', style: { fontSize: '24px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, name),\n            h('div', { key: 'st', style: { fontFamily: MONO, fontSize: '14px', fontWeight: 500, color: 'var(--sb-text-6)', marginTop: '8px' } }, callStatus),\n            phase === 'active' && h('div', { key: 'q', style: { marginTop: '12px' } }, qualityIndicator(false))\n        ]),\n        h('div', { key: 'ctrls', style: { flex: 'none', display: 'flex', alignItems: 'flex-start', justifyContent: 'center', gap: '26px', padding: '28px 24px 34px' } }, [\n            labeled('mute', h('button', { onClick: doMute, title: t('call.mute'), style: call.micEnabled ? ctrlBase : dangerCtrl }, svg(call.micEnabled ? ICON.micOn : ICON.micOff, 22, 1.9)), call.micEnabled ? 'Mute' : t('call.muted')),\n            labeled('video', h('button', { onClick: doUpgrade, title: t('call.addVideo'), style: ctrlBase }, svg(ICON.camOn, 22, 1.8)), t('call.video')),\n            labeled('end', h('button', { onClick: doEnd, title: t('call.end'), style: endBtn }, svg(ICON.phoneHangup, 22, 1.9)), t('call.endShort'))\n        ])\n    ]);\n};\n\nif (typeof window !== 'undefined') {\n    window.CallUIComponent = CallUIComponent;\n}\n\nexport { CallUIComponent };\n"],
+  "mappings": "2jBAAA,IAAAA,GAAAC,GAAA,CAAAC,GAAAC,KAAA,CASA,IAAMC,GAAN,KAAoC,CAClC,YAAYC,EAAS,CAAC,EAAG,CAEvB,KAAK,WAAc,OAAO,aAAiB,KAAe,cAAgB,OAAO,aAAa,YAAe,SACzG,aAAa,WACb,SACJ,KAAK,YAAc,KAAK,eAAe,EACvC,KAAK,YAAc,EACnB,KAAK,cAAgB,SAAS,MAC9B,KAAK,kBAAoB,CAAC,EAC1B,KAAK,aAAeA,EAAO,cAAgB,EAC3C,KAAK,YAAcA,EAAO,aAAe,IACzC,KAAK,qBAAuB,EAC5B,KAAK,eAAiBA,EAAO,gBAAkB,CAAC,EAGhD,KAAK,gBAAkB,OAAO,gBAG9B,KAAK,OAAS,KAAK,kBAAkB,EACrC,KAAK,iBAAmB,KAAK,yBAAyB,EAEtD,KAAK,uBAAuB,EAC5B,KAAK,mBAAmB,CAC1B,CAMA,oBAAqB,CAErB,CAOA,mBAAoB,CAClB,OAAI,OAAO,SAAS,OAAW,IACtB,SACE,OAAO,SAAS,SAAa,IAC/B,WACE,OAAO,SAAS,aAAiB,IACnC,eAEF,QACT,CAOA,0BAA2B,CACzB,OAAI,OAAO,SAAS,OAAW,IACtB,mBACE,OAAO,SAAS,SAAa,IAC/B,qBACE,OAAO,SAAS,aAAiB,IACnC,yBAEF,kBACT,CAOA,gBAAiB,CAEf,OAAI,KAAK,QAAU,OAAO,SAAS,KAAK,MAAM,EAAM,IAC3C,CAAC,SAAS,KAAK,MAAM,EAI1B,OAAO,SAAS,UAAa,WACxB,SAAS,SAAS,EAIpB,EACT,CAMA,wBAAyB,CAEnB,OAAO,SAAS,iBAAqB,KAAe,OAAO,SAAS,KAAK,MAAM,EAAM,KACvF,SAAS,iBAAiB,KAAK,iBAAkB,IAAM,CACrD,KAAK,YAAc,KAAK,eAAe,EAEnC,KAAK,cACP,KAAK,iBAAiB,EACtB,KAAK,uBAAuB,EAEhC,CAAC,EAIH,OAAO,iBAAiB,QAAS,IAAM,CACrC,KAAK,YAAc,KAAK,eAAe,EACnC,KAAK,aACP,KAAK,iBAAiB,CAE1B,CAAC,EAED,OAAO,iBAAiB,OAAQ,IAAM,CACpC,KAAK,YAAc,KAAK,eAAe,CACzC,CAAC,EAGD,OAAO,iBAAiB,eAAgB,IAAM,CAC5C,KAAK,uBAAuB,CAC9B,CAAC,CACH,CAOA,MAAM,mBAAoB,CAExB,GAAI,CAAC,KAAK,iBAAmB,EAAE,iBAAkB,QAC/C,MAAO,GAGT,GAAI,KAAK,aAAe,UACtB,MAAO,GAGT,GAAI,KAAK,aAAe,SACtB,MAAO,GAGT,GAAI,CACF,YAAK,WAAa,MAAM,aAAa,kBAAkB,EAChD,KAAK,aAAe,SAC7B,MAAgB,CACd,MAAO,EACT,CACF,CAMA,aAAc,CACR,KAAK,YAAc,EACrB,SAAS,MAAQ,IAAI,KAAK,WAAW,KAAK,KAAK,aAAa,GAE5D,SAAS,MAAQ,KAAK,aAE1B,CAQA,aAAaC,EAAM,CACjB,GAAI,OAAOA,GAAS,SAClB,MAAO,GAIT,IAAMC,EAAM,SAAS,cAAc,KAAK,EACxC,OAAAA,EAAI,YAAcD,EACXC,EAAI,UACR,QAAQ,KAAM,MAAM,EACpB,QAAQ,KAAM,MAAM,EACpB,QAAQ,KAAM,QAAQ,EACtB,QAAQ,KAAM,QAAQ,EACtB,UAAU,EAAG,GAAG,CACrB,CAQA,gBAAgBC,EAAK,CACnB,GAAI,CAACA,EAAK,OAAO,KAEjB,GAAI,CACF,IAAMC,EAAY,IAAI,IAAID,EAAK,OAAO,SAAS,MAAM,EAGrD,OAAIC,EAAU,WAAa,UAAYA,EAAU,WAAa,QAExD,KAAK,eAAe,OAAS,EACb,KAAK,eAAe,KAAKC,GACzCD,EAAU,SAAWC,CACvB,EACmBD,EAAU,KAAO,KAE/BA,EAAU,KAGZ,IACT,MAAgB,CACd,OAAO,IACT,CACF,CAOA,gBAAiB,CACf,IAAME,EAAM,KAAK,IAAI,EACrB,OAAIA,EAAM,KAAK,qBAAuB,KAAK,YAClC,IAET,KAAK,qBAAuBA,EACrB,GACT,CASA,OAAOC,EAAYC,EAASC,EAAU,CAAC,EAAG,CAmBxC,GAjBI,OAAO,aAAiB,MAI5B,KAAK,YAAc,KAAK,eAAe,EAGnC,KAAK,cAKL,KAAK,aAAe,WAKpB,CAAC,KAAK,eAAe,EACvB,OAAO,KAIT,IAAMC,EAAiB,KAAK,aAAaH,GAAc,SAAS,EAC1DI,EAAc,KAAK,aAAaH,GAAW,EAAE,EAC7CI,EAAW,KAAK,gBAAgBH,EAAQ,IAAI,GAAK,yBAGnD,KAAK,kBAAkB,QAAU,KAAK,cACxC,KAAK,uBAAuB,EAG9B,GAAI,CAEF,IAAMI,EAAe,IAAI,aACvB,GAAGH,CAAc,GACjB,CACE,KAAMC,EAAY,UAAU,EAAG,GAAG,EAClC,KAAMC,EACN,MAAOA,EACP,IAAK,QAAQH,EAAQ,UAAY,SAAS,GAC1C,mBAAoB,GACpB,OAAQA,EAAQ,QAAU,GAE1B,QAAS,UAAU,QAAU,CAAC,IAAK,IAAK,GAAG,EAAI,OAE/C,KAAM,CACJ,SAAU,KAAK,aAAaA,EAAQ,QAAQ,EAC5C,UAAW,KAAK,IAAI,CAEtB,CACF,CACF,EAGA,KAAK,cACL,KAAK,YAAY,EAGjB,KAAK,kBAAkB,KAAKI,CAAY,EAGxCA,EAAa,QAAWC,GAAU,CAMhC,GALAA,EAAM,eAAe,EACrB,OAAO,MAAM,EACbD,EAAa,MAAM,EAGf,OAAOJ,EAAQ,SAAY,WAC7B,GAAI,CACFA,EAAQ,QAAQA,EAAQ,QAAQ,CAClC,OAASM,EAAO,CACd,QAAQ,MAAM,4CAA6CA,CAAK,CAClE,CAEJ,EAGAF,EAAa,QAAWC,GAAU,CAChC,QAAQ,MAAM,8CAA+CA,CAAK,CACpE,EAGA,IAAME,EAAmB,KAAK,IAAIP,EAAQ,WAAa,IAAM,GAAK,EAClE,kBAAW,IAAM,CACfI,EAAa,MAAM,EACnB,KAAK,gBAAgBA,CAAY,CACnC,EAAGG,CAAgB,EAEZH,CAET,OAASE,EAAO,CACd,eAAQ,MAAM,iDAAkDA,CAAK,EAC9D,IACT,CACF,CAOA,gBAAgBF,EAAc,CAC5B,IAAMI,EAAQ,KAAK,kBAAkB,QAAQJ,CAAY,EACrDI,EAAQ,IACV,KAAK,kBAAkB,OAAOA,EAAO,CAAC,CAE1C,CAKA,wBAAyB,CACvB,KAAK,kBAAkB,QAAQJ,GAAgB,CAC7C,GAAI,CACFA,EAAa,MAAM,CACrB,MAAgB,CAEhB,CACF,CAAC,EACD,KAAK,kBAAoB,CAAC,CAC5B,CAKA,kBAAmB,CACjB,KAAK,YAAc,EACnB,KAAK,YAAY,CACnB,CAMA,WAAY,CACV,MAAO,CACL,WAAY,KAAK,WACjB,YAAa,KAAK,YAClB,YAAa,KAAK,YAClB,gBAAiB,KAAK,gBACtB,UAAW,KAAK,kBAAkB,MACpC,CACF,CACF,EAKMK,GAAN,KAAoB,CAClB,aAAc,CACZ,KAAK,oBAAsB,IAAInB,GAA8B,CAC3D,aAAc,EACd,YAAa,IACb,eAAgB,CACd,OAAO,SAAS,MAElB,CACF,CAAC,EAED,KAAK,YAAc,KACnB,KAAK,eAAiB,KACtB,KAAK,eAAiB,OACtB,KAAK,eAAiB,CAAC,EACvB,KAAK,eAAiB,GACxB,CAKA,MAAM,MAAO,CAEb,CAMA,MAAM,qBAAsB,CAE1B,OADgB,MAAM,KAAK,oBAAoB,kBAAkB,CAEnE,CAMA,iBAAiBoB,EAAa,CAC5B,GAAI,CAACA,EAAa,CAChB,QAAQ,MAAM,4BAA4B,EAC1C,MACF,CAEA,KAAK,YAAcA,EAGnB,KAAK,YAAY,UAAaL,GAAU,CACtC,KAAK,sBAAsBA,EAAM,IAAI,CACvC,EAEA,KAAK,YAAY,QAAWC,GAAU,CAEtC,CACF,CAQA,gBAAgBK,EAAM,CACpB,GAAI,CACF,IAAMZ,EAAU,OAAOY,GAAS,SAAW,KAAK,MAAMA,CAAI,EAAIA,EAG9D,GAAI,CAACZ,GAAW,OAAOA,GAAY,SACjC,MAAM,IAAI,MAAM,2BAA2B,EAI7C,GAAI,CAACA,EAAQ,MAAQ,OAAOA,EAAQ,MAAS,SAC3C,MAAM,IAAI,MAAM,sBAAsB,EAIxC,GAAIA,EAAQ,KAAK,OAAS,IACxB,MAAM,IAAI,MAAM,kBAAkB,EAGpC,MAAO,CACL,KAAMA,EAAQ,KACd,WAAYA,EAAQ,YAAc,UAClC,SAAUA,EAAQ,UAAY,UAC9B,UAAWA,EAAQ,WAAa,KAAK,IAAI,EACzC,aAAcA,EAAQ,cAAgB,IACxC,CAEF,OAASO,EAAO,CACd,eAAQ,MAAM,oCAAqCA,CAAK,EACjD,IACT,CACF,CAOA,sBAAsBK,EAAM,CAC1B,IAAMZ,EAAU,KAAK,gBAAgBY,CAAI,EAEpCZ,IAKL,KAAK,eAAe,KAAKA,CAAO,EAC5B,KAAK,eAAe,OAAS,KAAK,gBACpC,KAAK,eAAe,MAAM,EAI5B,KAAK,eAAeA,CAAO,EAG3B,KAAK,oBAAoB,OACvBA,EAAQ,WACRA,EAAQ,KACR,CACE,KAAMA,EAAQ,aACd,SAAUA,EAAQ,SAClB,QAAUa,GAAa,CACrB,KAAK,sBAAsB,CAC7B,CACF,CACF,EAGK,KAAK,oBAAoB,aAC5B,KAAK,sBAAsB,EAE/B,CAOA,eAAeb,EAAS,CACtB,IAAMc,EAAY,SAAS,eAAe,UAAU,EACpD,GAAI,CAACA,EACH,OAGF,IAAMC,EAAY,SAAS,cAAc,KAAK,EAC9CA,EAAU,UAAY,UAGtB,IAAMC,EAAS,SAAS,cAAc,QAAQ,EAC9CA,EAAO,YAAchB,EAAQ,WAAa,KAE1C,IAAMiB,EAAS,SAAS,cAAc,MAAM,EAC5CA,EAAO,YAAcjB,EAAQ,KAC7BiB,EAAO,MAAM,SAAW,aACxBA,EAAO,MAAM,aAAe,aAC5BA,EAAO,MAAM,WAAa,SAE1B,IAAMC,EAAS,SAAS,cAAc,OAAO,EAC7CA,EAAO,YAAc,IAAI,KAAKlB,EAAQ,SAAS,EAAE,mBAAmB,EAEpEe,EAAU,YAAYC,CAAM,EAC5BD,EAAU,YAAYE,CAAM,EAC5BF,EAAU,YAAY,SAAS,cAAc,IAAI,CAAC,EAClDA,EAAU,YAAYG,CAAM,EAE5BJ,EAAU,YAAYC,CAAS,EAC/B,KAAK,sBAAsB,CAC7B,CAMA,uBAAwB,CACtB,GAAI,CAEF,IAAMI,EAAQ,IAAI,MAAM,gCAAgC,EACxDA,EAAM,OAAS,GAGfA,EAAM,KAAK,EAAE,MAAMZ,GAAS,CAE5B,CAAC,CACH,MAAgB,CAEhB,CACF,CAMA,uBAAwB,CACtB,IAAMO,EAAY,SAAS,eAAe,UAAU,EAChDA,IACFA,EAAU,UAAYA,EAAU,aAEpC,CAMA,WAAY,CACV,MAAO,CACL,cAAe,KAAK,oBAAoB,UAAU,EAClD,aAAc,KAAK,eAAe,OAClC,UAAW,KAAK,aAAa,aAAe,MAC9C,CACF,CACF,EAGI,OAAOxB,GAAW,KAAeA,GAAO,UAC1CA,GAAO,QAAU,CAAE,8BAAAC,GAA+B,cAAAmB,EAAc,GAI9D,OAAO,OAAW,MACpB,OAAO,8BAAgCnB,GACvC,OAAO,cAAgBmB,MCtmBzB,IAAAU,GAAAC,GAAA,CAAAC,GAAAC,KAAA,CASA,IAAAC,GAA8C,SAE9C,IAAMC,GAAN,KAA8B,CAC5B,YAAYC,EAAe,CACzB,KAAK,cAAgBA,EACrB,KAAK,oBAAsB,IAAI,iCAA8B,CAC3D,aAAc,GACd,YAAa,IACb,eAAgB,CACd,OAAO,SAAS,MAElB,CACF,CAAC,EAED,KAAK,cAAgB,GACrB,KAAK,kBAAoB,KACzB,KAAK,uBAAyB,KAC9B,KAAK,kBAAoB,IAAI,GAC/B,CAMA,MAAM,MAAO,CACX,GAAI,CACF,OAAI,KAAK,gBAKT,KAAK,kBAAoB,KAAK,cAAc,UAC5C,KAAK,uBAAyB,KAAK,cAAc,eAMjD,KAAK,cAAc,UAAY,CAACC,EAASC,KAASC,IAAS,CACzD,KAAK,sBAAsBF,EAASC,EAAMC,EAAK,CAAC,CAAC,EAG7C,KAAK,mBACP,KAAK,kBAAkBF,EAASC,EAAM,GAAGC,CAAI,CAEjD,EAGA,KAAK,cAAc,eAAkBC,GAAW,CAC9C,KAAK,mBAAmBA,CAAM,EAG1B,KAAK,wBACP,KAAK,uBAAuBA,CAAM,CAEtC,EAKI,KAAK,cAAc,qBACrB,KAAK,2BAA6B,KAAK,cAAc,mBAAmB,KAAK,KAAK,aAAa,EAC/F,KAAK,cAAc,mBAAqB,CAACH,EAASC,KAASC,IAAS,CAClE,KAAK,sBAAsBF,EAASC,EAAMC,EAAK,CAAC,CAAC,EACjD,KAAK,2BAA2BF,EAASC,EAAM,GAAGC,CAAI,CACxD,GAGF,KAAK,cAAgB,IACd,EAET,MAAgB,CACd,MAAO,EACT,CACF,CAQA,sBAAsBF,EAASC,EAAMG,EAAM,CACzC,GAAI,CAEF,IAAMC,EAAa,GAAGJ,CAAI,IAAI,OAAOD,GAAY,SAAWA,EAAU,KAAK,UAAUA,CAAO,CAAC,GAG7F,GAAI,KAAK,kBAAkB,IAAIK,CAAU,EACvC,OAOF,GAHA,KAAK,kBAAkB,IAAIA,CAAU,EAGjC,KAAK,kBAAkB,KAAO,IAAK,CACrC,IAAMC,EAAgB,MAAM,KAAK,KAAK,iBAAiB,EACvD,KAAK,kBAAkB,MAAM,EAC7BA,EAAc,MAAM,GAAG,EAAE,QAAQC,GAAO,KAAK,kBAAkB,IAAIA,CAAG,CAAC,CACzE,CAIA,GAAIN,IAAS,UAAYA,IAAS,iBAAmBA,IAAS,YAC5D,OAIF,IAAMO,EAAc,KAAK,mBAAmBR,EAASC,CAAI,EACzD,GAAI,CAACO,EACH,OAYF,IAAMC,EAFc,CAAC,CAACL,GAAQ,OAAOA,GAAS,WAC3CA,EAAK,OAAS,IAAS,OAAO,SAASA,EAAK,GAAG,GAAKA,EAAK,IAAM,GAC3B,6BAA+BI,EAAY,KAG5EE,EAAqB,KAAK,oBAAoB,OAClDF,EAAY,WACZC,EACA,CACE,KAAMD,EAAY,aAClB,SAAUA,EAAY,SACtB,QAAUG,GAAa,CACrB,KAAK,gBAAgB,CACvB,CACF,CACF,CAEF,MAAgB,CAEhB,CACF,CAOA,mBAAmBR,EAAQ,CACzB,GAAI,EAEEA,IAAW,gBAAkBA,IAAW,YAC1C,KAAK,oBAAoB,uBAAuB,EAChD,KAAK,oBAAoB,iBAAiB,EAE9C,MAAgB,CAEhB,CACF,CASA,mBAAmBH,EAASC,EAAM,CAChC,GAAI,CACF,IAAIW,EAAcZ,EAGlB,GAAI,OAAOA,GAAY,SACrB,GAAI,CACFY,EAAc,KAAK,MAAMZ,CAAO,CAClC,MAAY,CAEV,MAAO,CACL,WAAY,OACZ,KAAMA,EACN,SAAU,OACV,aAAc,IAChB,CACF,CAIF,OAAI,OAAOY,GAAgB,UAAYA,IAAgB,KAC9C,CACL,WAAYA,EAAY,YAAcA,EAAY,MAAQ,OAC1D,KAAMA,EAAY,MAAQA,EAAY,SAAWA,EAAY,SAAW,GACxE,SAAUA,EAAY,UAAYA,EAAY,IAAM,OACpD,aAAcA,EAAY,cAAgBA,EAAY,QAAU,IAClE,EAGK,IACT,MAAgB,CACd,OAAO,IACT,CACF,CAMA,iBAAkB,CAChB,GAAI,CACF,OAAO,MAAM,EAGb,IAAMC,EAAoB,SAAS,eAAe,UAAU,EACxDA,IACFA,EAAkB,UAAYA,EAAkB,aAEpD,MAAgB,CAEhB,CACF,CAMA,MAAM,mBAAoB,CACxB,GAAI,CACF,OAAO,MAAM,KAAK,oBAAoB,kBAAkB,CAC1D,MAAgB,CACd,MAAO,EACT,CACF,CAMA,WAAY,CACV,OAAO,KAAK,oBAAoB,UAAU,CAC5C,CAKA,oBAAqB,CACnB,KAAK,oBAAoB,uBAAuB,EAChD,KAAK,oBAAoB,iBAAiB,CAC5C,CAKA,SAAU,CACR,GAAI,CACE,KAAK,gBAEH,KAAK,oBACP,KAAK,cAAc,UAAY,KAAK,mBAElC,KAAK,yBACP,KAAK,cAAc,eAAiB,KAAK,wBAEvC,KAAK,6BACP,KAAK,cAAc,mBAAqB,KAAK,4BAI/C,KAAK,mBAAmB,EAExB,KAAK,cAAgB,GAEzB,MAAgB,CAEhB,CACF,CACF,EAGI,OAAOjB,GAAW,KAAeA,GAAO,UAC1CA,GAAO,QAAU,CAAE,wBAAAE,EAAwB,GAIzC,OAAO,OAAW,MACpB,OAAO,wBAA0BA;+ZCpSnC,IACEgB,GAKEC,OALFD,QACAE,GAIED,OAJFC,eACAC,GAGEF,OAHFE,SACAC,GAEEH,OAFFG,eACAC,GACEJ,OADFI,yBAGIC,GAAyBL,OAAzBK,OAAQC,GAAiBN,OAAjBM,KAAMC,GAAWP,OAAXO,OACpBC,GAA2B,OAAOC,QAAY,KAAeA,QAAvDC,GAAKF,GAALE,MAAOC,GAASH,GAATG,UAERN,KACHA,GAAS,SAAaO,EAAI,CACxB,OAAOA,CACT,GAGGN,KACHA,GAAO,SAAaM,EAAI,CACtB,OAAOA,CACT,GAGGF,KACHA,GAAQ,SACNG,EACAC,EACc,CAAA,QAAAC,EAAAC,UAAAC,OAAXC,EAAW,IAAAC,MAAAJ,EAAA,EAAAA,EAAA,EAAA,CAAA,EAAAK,EAAA,EAAAA,EAAAL,EAAAK,IAAXF,EAAWE,EAAA,CAAA,EAAAJ,UAAAI,CAAA,EAEd,OAAOP,EAAKH,MAAMI,EAASI,CAAI,CACjC,GAGGP,KACHA,GAAY,SAAaU,EAA+C,CAAA,QAAAC,EAAAN,UAAAC,OAAXC,EAAW,IAAAC,MAAAG,EAAA,EAAAA,EAAA,EAAA,CAAA,EAAAC,EAAA,EAAAA,EAAAD,EAAAC,IAAXL,EAAWK,EAAA,CAAA,EAAAP,UAAAO,CAAA,EACtE,OAAO,IAAIF,EAAK,GAAGH,CAAI,CACzB,GAGF,IAAMM,GAAeC,GAAQN,MAAMO,UAAUC,OAAO,EAE9CC,GAAmBH,GAAQN,MAAMO,UAAUG,WAAW,EACtDC,GAAWL,GAAQN,MAAMO,UAAUK,GAAG,EACtCC,GAAYP,GAAQN,MAAMO,UAAUO,IAAI,EAExCC,GAAcT,GAAQN,MAAMO,UAAUS,MAAM,EAC5CC,GAAejB,MAAMkB,QAErBC,GAAoBb,GAAQc,OAAOb,UAAUc,WAAW,EACxDC,GAAiBhB,GAAQc,OAAOb,UAAUgB,QAAQ,EAClDC,GAAclB,GAAQc,OAAOb,UAAUkB,KAAK,EAC5CC,GAAgBpB,GAAQc,OAAOb,UAAUoB,OAAO,EAChDC,GAAgBtB,GAAQc,OAAOb,UAAUsB,OAAO,EAChDC,GAAaxB,GAAQc,OAAOb,UAAUwB,IAAI,EAE1CC,GAAiB1B,GAAQ2B,OAAO1B,UAAUgB,QAAQ,EAClDW,GAAkB5B,GAAQ6B,QAAQ5B,UAAUgB,QAAQ,EACpDa,GACJ,OAAOC,OAAW,IAAc,KAAO/B,GAAQ+B,OAAO9B,UAAUgB,QAAQ,EACpEe,GACJ,OAAOC,OAAW,IAAc,KAAOjC,GAAQiC,OAAOhC,UAAUgB,QAAQ,EAEpEiB,GAAuBlC,GAAQzB,OAAO0B,UAAUkC,cAAc,EAC9DC,GAAiBpC,GAAQzB,OAAO0B,UAAUgB,QAAQ,EAElDoB,GAAarC,GAAQsC,OAAOrC,UAAUsC,IAAI,EAE1CC,GAAkBC,GAAYC,SAAS,EAQ7C,SAAS1C,GACPZ,EAAyC,CAEzC,OAAO,SAACC,EAAmC,CACrCA,aAAmBiD,SACrBjD,EAAQsD,UAAY,GACrB,QAAAC,EAAArD,UAAAC,OAHsBC,EAAW,IAAAC,MAAAkD,EAAA,EAAAA,EAAA,EAAA,CAAA,EAAAC,EAAA,EAAAA,EAAAD,EAAAC,IAAXpD,EAAWoD,EAAA,CAAA,EAAAtD,UAAAsD,CAAA,EAKlC,OAAO5D,GAAMG,EAAMC,EAASI,CAAI,CAClC,CACF,CAQA,SAASgD,GACP7C,EAA+B,CAE/B,OAAO,UAAA,CAAA,QAAAkD,EAAAvD,UAAAC,OAAIC,EAAW,IAAAC,MAAAoD,CAAA,EAAAC,EAAA,EAAAA,EAAAD,EAAAC,IAAXtD,EAAWsD,CAAA,EAAAxD,UAAAwD,CAAA,EAAA,OAAQ7D,GAAUU,EAAMH,CAAI,CAAC,CACrD,CAUA,SAASuD,EACPC,EACAC,EACyE,CAAA,IAAzEC,EAAAA,UAAAA,OAAAA,GAAAA,UAAAA,CAAAA,IAAAA,OAAAA,UAAAA,CAAAA,EAAwDtC,GASxD,GAPIrC,IAIFA,GAAeyE,EAAK,IAAI,EAGtB,CAACtC,GAAauC,CAAK,EACrB,OAAOD,EAGT,IAAIG,EAAIF,EAAM1D,OACd,KAAO4D,KAAK,CACV,IAAIC,EAAUH,EAAME,CAAC,EAErB,GAAI,OAAOC,GAAY,SAAU,CAC/B,IAAMC,EAAYH,EAAkBE,CAAO,EAEvCC,IAAcD,IAEX5E,GAASyE,CAAK,IAChBA,EAAoBE,CAAC,EAAIE,GAG5BD,EAAUC,EAEd,CAEAL,EAAII,CAAiB,EAAI,EAC3B,CAEA,OAAOJ,CACT,CAQA,SAASM,GAAcL,EAAU,CAC/B,QAASM,EAAQ,EAAGA,EAAQN,EAAM1D,OAAQgE,IAChBtB,GAAqBgB,EAAOM,CAAK,IAGvDN,EAAMM,CAAK,EAAI,MAInB,OAAON,CACT,CAQA,SAASO,GAAqCC,EAAS,CACrD,IAAMC,EAAY7E,GAAO,IAAI,EAE7B,QAAA8E,KAAgCtF,GAAQoF,CAAM,EAAG,CAAA,IAAAG,EAAAC,GAAAF,EAAA,CAAA,EAAA,IAArCG,EAAQF,EAAA,CAAA,EAAEG,EAAKH,EAAA,CAAA,EACD3B,GAAqBwB,EAAQK,CAAQ,IAGvDpD,GAAaqD,CAAK,EACpBL,EAAUI,CAAQ,EAAIR,GAAWS,CAAK,EAEtCA,GACA,OAAOA,GAAU,UACjBA,EAAMC,cAAgB1F,OAEtBoF,EAAUI,CAAQ,EAAIN,GAAMO,CAAK,EAEjCL,EAAUI,CAAQ,EAAIC,EAG5B,CAEA,OAAOL,CACT,CAQA,SAASO,GAAeF,EAAc,CACpC,OAAQ,OAAOA,EAAK,CAClB,IAAK,SACH,OAAOA,EAGT,IAAK,SACH,OAAOtC,GAAesC,CAAK,EAG7B,IAAK,UACH,OAAOpC,GAAgBoC,CAAK,EAG9B,IAAK,SACH,OAAOlC,GAAiBA,GAAekC,CAAK,EAAI,IAGlD,IAAK,SACH,OAAOhC,GAAiBA,GAAegC,CAAK,EAAI,WAGlD,IAAK,YACH,OAAO5B,GAAe4B,CAAK,EAG7B,IAAK,WACL,IAAK,SAAU,CACb,GAAIA,IAAU,KACZ,OAAO5B,GAAe4B,CAAK,EAG7B,IAAMG,EAAgBH,EAChBI,EAAgBC,GAAaF,EAAe,UAAU,EAE5D,GAAI,OAAOC,GAAkB,WAAY,CACvC,IAAME,EAAcF,EAAcD,CAAa,EAE/C,OAAO,OAAOG,GAAgB,SAC1BA,EACAlC,GAAekC,CAAW,CAChC,CAEA,OAAOlC,GAAe4B,CAAK,CAC7B,CAEA,QACE,OAAO5B,GAAe4B,CAAK,CAE/B,CACF,CASA,SAASK,GACPX,EACAa,EAAY,CAEZ,KAAOb,IAAW,MAAM,CACtB,IAAMc,EAAO7F,GAAyB+E,EAAQa,CAAI,EAElD,GAAIC,EAAM,CACR,GAAIA,EAAKC,IACP,OAAOzE,GAAQwE,EAAKC,GAAG,EAGzB,GAAI,OAAOD,EAAKR,OAAU,WACxB,OAAOhE,GAAQwE,EAAKR,KAAK,CAE7B,CAEAN,EAAShF,GAAegF,CAAM,CAChC,CAEA,SAASgB,GAAa,CACpB,OAAO,IACT,CAEA,OAAOA,CACT,CAEA,SAASC,GAAQX,EAAc,CAC7B,GAAI,CACF3B,OAAAA,GAAW2B,EAAiB,EAAE,EACvB,EACT,MAAQ,CACN,MAAO,EACT,CACF,CCnSO,IAAMY,GAAOhG,GAAO,CACzB,IACA,OACA,UACA,UACA,OACA,UACA,QACA,QACA,IACA,MACA,MACA,MACA,QACA,aACA,OACA,KACA,SACA,SACA,UACA,SACA,OACA,OACA,MACA,WACA,UACA,OACA,WACA,KACA,YACA,MACA,UACA,MACA,SACA,MACA,MACA,KACA,KACA,UACA,KACA,WACA,aACA,SACA,OACA,SACA,OACA,KACA,KACA,KACA,KACA,KACA,KACA,OACA,SACA,SACA,KACA,OACA,IACA,MACA,QACA,MACA,MACA,QACA,SACA,KACA,OACA,MACA,OACA,UACA,OACA,WACA,QACA,MACA,OACA,KACA,WACA,SACA,SACA,IACA,UACA,MACA,WACA,IACA,KACA,KACA,OACA,IACA,OACA,SACA,UACA,SACA,SACA,OACA,QACA,SACA,SACA,OACA,SACA,SACA,QACA,MACA,UACA,MACA,QACA,QACA,KACA,WACA,WACA,QACA,KACA,QACA,OACA,KACA,QACA,KACA,IACA,KACA,MACA,QACA,KAAK,CACG,EAEGiG,GAAMjG,GAAO,CACxB,MACA,IACA,WACA,cACA,eACA,eACA,gBACA,mBACA,SACA,WACA,OACA,OACA,UACA,eACA,cACA,SACA,OACA,IACA,QACA,WACA,QACA,QACA,YACA,OACA,iBACA,SACA,OACA,WACA,QACA,OACA,OACA,UACA,UACA,WACA,iBACA,OACA,OACA,QACA,SACA,SACA,OACA,WACA,QACA,OACA,QACA,OACA,OAAO,CACC,EAEGkG,GAAalG,GAAO,CAC/B,UACA,gBACA,sBACA,cACA,mBACA,oBACA,oBACA,iBACA,eACA,UACA,UACA,UACA,UACA,UACA,iBACA,UACA,UACA,cACA,eACA,WACA,eACA,qBACA,cACA,SACA,cAAc,CACN,EAMGmG,GAAgBnG,GAAO,CAClC,UACA,gBACA,SACA,UACA,YACA,mBACA,iBACA,gBACA,gBACA,gBACA,QACA,YACA,OACA,eACA,YACA,UACA,gBACA,SACA,MACA,aACA,UACA,KAAK,CACG,EAEGoG,GAASpG,GAAO,CAC3B,OACA,WACA,SACA,UACA,QACA,SACA,KACA,aACA,gBACA,KACA,KACA,QACA,UACA,WACA,QACA,OACA,KACA,SACA,QACA,SACA,OACA,OACA,UACA,SACA,MACA,QACA,MACA,SACA,aACA,aAAa,CACL,EAIGqG,GAAmBrG,GAAO,CACrC,UACA,cACA,aACA,WACA,YACA,UACA,UACA,SACA,SACA,QACA,YACA,aACA,iBACA,cACA,MAAM,CACE,EAEGsG,GAAOtG,GAAO,CAAC,OAAO,CAAU,EC1RhCgG,GAAOhG,GAAO,CACzB,SACA,SACA,QACA,MACA,iBACA,eACA,uBACA,WACA,aACA,UACA,SACA,UACA,cACA,cACA,UACA,OACA,QACA,QACA,QACA,OACA,UACA,UACA,aACA,WACA,eACA,SACA,cACA,WACA,WACA,UACA,MACA,WACA,0BACA,wBACA,WACA,YACA,UACA,eACA,cACA,OACA,MACA,UACA,SACA,SACA,OACA,OACA,WACA,KACA,QACA,YACA,YACA,QACA,OACA,QACA,OACA,OACA,UACA,OACA,MACA,MACA,YACA,QACA,SACA,MACA,YACA,WACA,QACA,OACA,QACA,UACA,aACA,SACA,OACA,UACA,OACA,UACA,cACA,cACA,UACA,gBACA,sBACA,SACA,UACA,UACA,aACA,WACA,MACA,WACA,MACA,WACA,OACA,OACA,UACA,aACA,QACA,WACA,QACA,OACA,QACA,OACA,OACA,UACA,QACA,MACA,SACA,OACA,QACA,UACA,WACA,QACA,YACA,OACA,SACA,SACA,QACA,QACA,OACA,OAAO,CACC,EAEGiG,GAAMjG,GAAO,CACxB,gBACA,aACA,WACA,qBACA,YACA,SACA,gBACA,gBACA,UACA,gBACA,iBACA,QACA,OACA,KACA,QACA,OACA,gBACA,YACA,YACA,QACA,sBACA,8BACA,gBACA,kBACA,KACA,KACA,IACA,KACA,KACA,kBACA,YACA,UACA,UACA,MACA,WACA,YACA,MACA,WACA,OACA,eACA,YACA,SACA,cACA,cACA,gBACA,cACA,YACA,mBACA,eACA,aACA,eACA,cACA,KACA,KACA,KACA,KACA,aACA,WACA,gBACA,oBACA,SACA,OACA,KACA,kBACA,KACA,MACA,YACA,IACA,KACA,KACA,KACA,KACA,UACA,YACA,aACA,WACA,OACA,eACA,iBACA,eACA,mBACA,iBACA,QACA,aACA,aACA,eACA,eACA,cACA,cACA,mBACA,YACA,MACA,OACA,YACA,QACA,SACA,OACA,MACA,OACA,aACA,SACA,WACA,UACA,QACA,SACA,cACA,SACA,WACA,cACA,OACA,aACA,sBACA,mBACA,eACA,SACA,gBACA,sBACA,iBACA,IACA,KACA,KACA,SACA,OACA,OACA,cACA,YACA,UACA,SACA,SACA,QACA,OACA,kBACA,QACA,mBACA,mBACA,eACA,cACA,eACA,cACA,aACA,eACA,mBACA,oBACA,iBACA,kBACA,oBACA,iBACA,SACA,eACA,QACA,eACA,iBACA,WACA,cACA,UACA,UACA,YACA,mBACA,cACA,kBACA,iBACA,aACA,OACA,KACA,KACA,UACA,SACA,UACA,aACA,UACA,aACA,gBACA,gBACA,QACA,eACA,OACA,eACA,mBACA,mBACA,IACA,KACA,KACA,QACA,IACA,KACA,KACA,IACA,YAAY,CACJ,EAEGoG,GAASpG,GAAO,CAC3B,SACA,cACA,QACA,WACA,QACA,cACA,cACA,gBACA,aACA,aACA,QACA,MACA,UACA,eACA,WACA,QACA,QACA,SACA,OACA,KACA,UACA,SACA,gBACA,SACA,SACA,iBACA,YACA,WACA,cACA,UACA,UACA,gBACA,WACA,WACA,OACA,WACA,WACA,aACA,UACA,SACA,SACA,cACA,gBACA,uBACA,YACA,YACA,aACA,WACA,iBACA,iBACA,YACA,UACA,QACA,OAAO,CACR,EAEYuG,GAAMvG,GAAO,CACxB,aACA,SACA,cACA,YACA,aAAa,CACL,ECvXGwG,GAAgBvG,GAAK,uBAAuB,EAC5CwG,GAAWxG,GAAK,uBAAuB,EACvCyG,GAAczG,GAAK,aAAa,EAChC0G,GAAY1G,GAAK,8BAA8B,EAC/C2G,GAAY3G,GAAK,gBAAgB,EACjC4G,GAAiB5G,GAC5B,oGAEW6G,GAAoB7G,GAAK,uBAAuB,EAChD8G,GAAkB9G,GAC7B,+DAEW+G,GAAe/G,GAAK,SAAS,EAC7BgH,GAAiBhH,GAAK,0BAA0B,EAKhDiH,GAAuBjH,GAAK,UAAU,EACtCkH,GAAuBlH,GAAK,SAAS,EACrCmH,GAAqBnH,GAAK,6BAA6B,EACvDoH,GAAmBpH,GAAK,MAAM,EC+BrCqH,GAAY,CAChB7C,QAAS,EACT8C,UAAW,EACXjB,KAAM,EACNkB,aAAc,EACdC,gBAAiB,EACjBC,WAAY,EACZC,sBAAuB,EACvBC,QAAS,EACTC,SAAU,EACVC,aAAc,GACdC,iBAAkB,GAClBC,SAAU,IAGNC,GAAY,UAAA,CAChB,OAAO,OAAOC,OAAW,IAAc,KAAOA,MAChD,EAUMC,GAA4B,SAChCC,EACAC,EAAoC,CAEpC,GACE,OAAOD,GAAiB,UACxB,OAAOA,EAAaE,cAAiB,WAErC,OAAO,KAMT,IAAIC,EAAS,KACPC,EAAY,wBACdH,GAAqBA,EAAkBI,aAAaD,CAAS,IAC/DD,EAASF,EAAkBK,aAAaF,CAAS,GAGnD,IAAMG,EAAa,aAAeJ,EAAS,IAAMA,EAAS,IAE1D,GAAI,CACF,OAAOH,EAAaE,aAAaK,EAAY,CAC3CC,WAAW5C,EAAI,CACb,OAAOA,CACT,EACA6C,gBAAgBC,EAAS,CACvB,OAAOA,CACT,CACD,CAAA,CACH,MAAY,CAIVC,eAAQC,KACN,uBAAyBL,EAAa,wBAAwB,EAEzD,IACT,CACF,EAEMM,GAAkB,UAAA,CACtB,MAAO,CACLC,wBAAyB,CAAA,EACzBC,sBAAuB,CAAA,EACvBC,uBAAwB,CAAA,EACxBC,yBAA0B,CAAA,EAC1BC,uBAAwB,CAAA,EACxBC,wBAAyB,CAAA,EACzBC,sBAAuB,CAAA,EACvBC,oBAAqB,CAAA,EACrBC,uBAAwB,CAAA,EAE5B,EAcMC,GAAoB,SACxBC,EACAC,EACAC,EACAC,EAGC,CAED,OAAOzG,GAAqBsG,EAAKC,CAAG,GAAK9H,GAAa6H,EAAIC,CAAG,CAAC,EAC1DzF,EACE2F,EAAQC,KAAOnF,GAAMkF,EAAQC,IAAI,EAAI,CAAA,EACrCJ,EAAIC,CAAG,EACPE,EAAQE,SAAS,EAEnBH,CACN,EAEA,SAASI,IAAgD,CAAA,IAAhChC,EAAAvH,UAAAC,OAAA,GAAAD,UAAA,CAAA,IAAAwJ,OAAAxJ,UAAA,CAAA,EAAqBsH,GAAS,EAC/CmC,EAAwBC,GAAqBH,GAAgBG,CAAI,EAMvE,GAJAD,EAAUE,QAAUC,SAEpBH,EAAUI,QAAU,CAAA,EAGlB,CAACtC,GACD,CAACA,EAAOL,UACRK,EAAOL,SAAS4C,WAAanD,GAAUO,UACvC,CAACK,EAAOwC,QAIRN,OAAAA,EAAUO,YAAc,GAEjBP,EAGT,IAAMvC,EAAaK,EAAbL,SAEA+C,EAAmB/C,EACnBgD,EACJD,EAAiBC,cAWf3C,EATF4C,qBACAC,EAQE7C,EARF6C,oBACAC,EAOE9C,EAPF8C,KACAN,EAMExC,EANFwC,QACAO,EAKE/C,EALF+C,WAAUC,EAKRhD,EAJFiD,aAAYD,IAAA,SAAGhD,EAAOiD,cAAiBjD,EAAekD,iBAIpDlD,EAHFmD,oBACAC,EAEEpD,EAFFoD,UACAlD,EACEF,EADFE,aAGImD,EAAmBb,EAAQrJ,UAE3BmK,EAAY/F,GAAa8F,EAAkB,WAAW,EACtDE,EAAShG,GAAa8F,EAAkB,QAAQ,EAChDG,EAAiBjG,GAAa8F,EAAkB,aAAa,EAC7DI,EAAgBlG,GAAa8F,EAAkB,YAAY,EAC3DK,EAAgBnG,GAAa8F,EAAkB,YAAY,EAC3DM,EAAgBpG,GAAa8F,EAAkB,YAAY,EAC3DO,EAAgBrG,GAAa8F,EAAkB,YAAY,EAC3DQ,EACJf,GAAQA,EAAK3J,UAAYoE,GAAauF,EAAK3J,UAAW,UAAU,EAAI,KAChE2K,EACJhB,GAAQA,EAAK3J,UAAYoE,GAAauF,EAAK3J,UAAW,UAAU,EAAI,KAQtE,GAAI,OAAO0J,GAAwB,WAAY,CAC7C,IAAMkB,EAAWpE,EAASqE,cAAc,UAAU,EAC9CD,EAASE,SAAWF,EAASE,QAAQC,gBACvCvE,EAAWoE,EAASE,QAAQC,cAEhC,CAEA,IAAIC,EACAC,EAAY,GAMZC,EACAC,EAAoC,GASpCC,EAA0B,EACxBC,EAAiC,UAAA,CACrC,GAAID,EAA0B,EAC5B,MAAM7I,GACJ,2RAIiC,CAGvC,EAEM+I,EAAqB,SAAU3G,EAAY,CAC/C0G,EAA8B,EAE9BD,IACA,GAAI,CACF,OAAOJ,EAAmBzD,WAAW5C,CAAI,CAC3C,QAAC,CACCyG,GACF,CACF,EAEMG,GAA0B,SAAU9D,EAAiB,CACzD4D,EAA8B,EAE9BD,IACA,GAAI,CACF,OAAOJ,EAAmBxD,gBAAgBC,CAAS,CACrD,QAAC,CACC2D,GACF,CACF,EAMMI,EAAgC,UAAA,CACpC,OAAKL,IACHD,EAA4BpE,GAC1BC,EACAyC,CAAa,EAEf2B,EAAoC,IAG/BD,CACT,EAEAO,EAKIjF,EAJFkF,EAAcD,EAAdC,eACAC,EAAkBF,EAAlBE,mBACAC,GAAsBH,EAAtBG,uBACAC,EAAoBJ,EAApBI,qBAEMC,EAAevC,EAAfuC,WAEJC,EAAQnE,GAAe,EAK3BmB,EAAUO,YACR,OAAOjL,IAAY,YACnB,OAAOkM,GAAkB,YACzBmB,GACAA,EAAeM,qBAAuBlD,OAExC,IACE3D,EAQE8G,GAPF7G,EAOE6G,GANF5G,EAME4G,GALF3G,EAKE2G,GAJF1G,EAIE0G,GAHFxG,GAGEwG,GAFFvG,GAEEuG,GADFrG,GACEqG,GAEEzG,GAAmByG,GAQrBC,EAAe,KACbC,GAAuBpJ,EAAS,CAAA,EAAI,CACxC,GAAGqJ,GACH,GAAGA,GACH,GAAGA,GACH,GAAGA,GACH,GAAGA,EAAS,CACb,EAGGC,GAAe,KACbC,GAAuBvJ,EAAS,CAAA,EAAI,CACxC,GAAGwJ,GACH,GAAGA,GACH,GAAGA,GACH,GAAGA,EAAS,CACb,EAQGC,GAA0BlO,OAAOM,KACnCC,GAAO,KAAM,CACX4N,aAAc,CACZC,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,MAET8I,mBAAoB,CAClBH,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,MAET+I,+BAAgC,CAC9BJ,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,EACR,CACF,CAAA,CAAC,EAIAgJ,GAAc,KAGdC,GAAc,KAGZC,GAAyB3O,OAAOM,KACpCC,GAAO,KAAM,CACXqO,SAAU,CACRR,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,MAEToJ,eAAgB,CACdT,SAAU,GACVC,aAAc,GACdC,WAAY,GACZ7I,MAAO,IACR,CACF,CAAA,CAAC,EAIAqJ,GAAkB,GAGlBC,GAAkB,GAGlBC,GAA0B,GAI1BC,GAA2B,GAK3BC,GAAqB,GAKrBC,GAAe,GAGfC,GAAiB,GAGjBC,GAAa,GAIbC,GAAa,GAMbC,GAAa,GAIbC,GAAsB,GAItBC,GAAsB,GAKtBC,GAAe,GAefC,GAAuB,GACrBC,GAA8B,gBAGhCC,GAAe,GAIfC,GAAW,GAGXC,GAA0C,CAAA,EAG1CC,GAAkB,KAChBC,GAA0BxL,EAAS,CAAA,EAAI,CAC3C,iBACA,QACA,WACA,OACA,gBACA,OACA,SACA,OACA,KACA,KACA,KACA,KACA,QACA,UACA,WACA,WACA,YACA,SAUA,kBACA,QACA,MACA,WACA,QACA,QACA,QACA,KAAK,CACN,EAGGyL,GAAgB,KACdC,GAAwB1L,EAAS,CAAA,EAAI,CACzC,QACA,QACA,MACA,SACA,QACA,OAAO,CACR,EAGG2L,GAAsB,KACpBC,GAA8B5L,EAAS,CAAA,EAAI,CAC/C,MACA,QACA,MACA,KACA,QACA,OACA,UACA,cACA,OACA,UACA,QACA,QACA,QACA,OAAO,CACR,EAEK6L,GAAmB,qCACnBC,GAAgB,6BAChBC,GAAiB,+BAEnBC,GAAYD,GACZE,GAAiB,GAGjBC,GAAqB,KACnBC,GAA6BnM,EACjC,CAAA,EACA,CAAC6L,GAAkBC,GAAeC,EAAc,EAChD/N,EAAc,EAGVoO,GAAyCxQ,GAAO,CACpD,KACA,KACA,KACA,KACA,OAAO,CACR,EACGyQ,GAAiCrM,EACnC,CAAA,EACAoM,EAAsC,EAGlCE,GAAkC1Q,GAAO,CAAC,gBAAgB,CAAC,EAC7D2Q,GAA0BvM,EAAS,CAAA,EAAIsM,EAA+B,EAMpEE,GAA+BxM,EAAS,CAAA,EAAI,CAChD,QACA,QACA,OACA,IACA,QAAQ,CACT,EAGGyM,GAAmD,KACjDC,GAA+B,CAAC,wBAAyB,WAAW,EACpEC,GAA4B,YAC9BxM,GAA2D,KAG3DyM,GAAwB,KAKtBC,GAAcpJ,EAASqE,cAAc,MAAM,EAE3CgF,GAAoB,SACxBC,EAAkB,CAElB,OAAOA,aAAqBzN,QAAUyN,aAAqBC,QAC7D,EAQMC,GAAe,UAA0B,CAAA,IAAhBzH,EAAAjJ,UAAAC,OAAA,GAAAD,UAAA,CAAA,IAAAwJ,OAAAxJ,UAAA,CAAA,EAAc,CAAA,EAC3C,GAAIqQ,IAAUA,KAAWpH,EACvB,QAIE,CAACA,GAAO,OAAOA,GAAQ,YACzBA,EAAM,CAAA,GAIRA,EAAM/E,GAAM+E,CAAG,EAEfiH,GAEEC,GAA6BnO,QAAQiH,EAAIiH,iBAAiB,IAAM,GAC5DE,GACAnH,EAAIiH,kBAGVtM,GACEsM,KAAsB,wBAClBzO,GACAH,GAGNsL,EAAe5D,GACbC,EACA,eACA4D,GACA,CAAEvD,UAAW1F,EAAiB,CAAE,EAElCmJ,GAAe/D,GACbC,EACA,eACA+D,GACA,CAAE1D,UAAW1F,EAAiB,CAAE,EAElC+L,GAAqB3G,GACnBC,EACA,qBACA2G,GACA,CAAEtG,UAAW7H,EAAc,CAAE,EAE/B2N,GAAsBpG,GACpBC,EACA,oBACAoG,GACA,CAAE/F,UAAW1F,GAAmByF,KAAMgG,EAA2B,CAAE,EAErEH,GAAgBlG,GACdC,EACA,oBACAkG,GACA,CAAE7F,UAAW1F,GAAmByF,KAAM8F,EAAqB,CAAE,EAE/DH,GAAkBhG,GAChBC,EACA,kBACAgG,GACA,CAAE3F,UAAW1F,EAAiB,CAAE,EAElC6J,GAAczE,GAAkBC,EAAK,cAAe/E,GAAM,CAAA,CAAE,EAAG,CAC7DoF,UAAW1F,EACZ,CAAA,EACD8J,GAAc1E,GAAkBC,EAAK,cAAe/E,GAAM,CAAA,CAAE,EAAG,CAC7DoF,UAAW1F,EACZ,CAAA,EACDmL,GAAepM,GAAqBsG,EAAK,cAAc,EACnDA,EAAI8F,cAAgB,OAAO9F,EAAI8F,cAAiB,SAC9C7K,GAAM+E,EAAI8F,YAAY,EACtB9F,EAAI8F,aACN,GAEJjB,GAAkB7E,EAAI6E,kBAAoB,GAC1CC,GAAkB9E,EAAI8E,kBAAoB,GAC1CC,GAA0B/E,EAAI+E,yBAA2B,GACzDC,GAA2BhF,EAAIgF,2BAA6B,GAC5DC,GAAqBjF,EAAIiF,oBAAsB,GAC/CC,GAAelF,EAAIkF,eAAiB,GACpCC,GAAiBnF,EAAImF,gBAAkB,GACvCG,GAAatF,EAAIsF,YAAc,GAC/BC,GAAsBvF,EAAIuF,qBAAuB,GACjDC,GAAsBxF,EAAIwF,qBAAuB,GACjDH,GAAarF,EAAIqF,YAAc,GAC/BI,GAAezF,EAAIyF,eAAiB,GACpCC,GAAuB1F,EAAI0F,sBAAwB,GACnDE,GAAe5F,EAAI4F,eAAiB,GACpCC,GAAW7F,EAAI6F,UAAY,GAC3B5I,GAAiBd,GAAQ6D,EAAI0H,kBAAkB,EAC3C1H,EAAI0H,mBACJhE,GAEJ8C,GACE,OAAOxG,EAAIwG,WAAc,SAAWxG,EAAIwG,UAAYD,GAEtDM,GACEnN,GAAqBsG,EAAK,gCAAgC,GAC1DA,EAAI6G,gCACJ,OAAO7G,EAAI6G,gCAAmC,SAC1C5L,GAAM+E,EAAI6G,8BAA8B,EACxCrM,EAAS,CAAA,EAAIoM,EAAsC,EAEzDG,GACErN,GAAqBsG,EAAK,yBAAyB,GACnDA,EAAI+G,yBACJ,OAAO/G,EAAI+G,yBAA4B,SACnC9L,GAAM+E,EAAI+G,uBAAuB,EACjCvM,EAAS,CAAA,EAAIsM,EAA+B,EAElD,IAAMa,EACJjO,GAAqBsG,EAAK,yBAAyB,GACnDA,EAAIiE,yBACJ,OAAOjE,EAAIiE,yBAA4B,SACnChJ,GAAM+E,EAAIiE,uBAAuB,EACjC3N,GAAO,IAAI,EAsJjB,GApJA2N,GAA0B3N,GAAO,IAAI,EAGnCoD,GAAqBiO,EAAuB,cAAc,GAC1DL,GAAkBK,EAAsBzD,YAAY,IAEpDD,GAAwBC,aAAeyD,EAAsBzD,cAI7DxK,GAAqBiO,EAAuB,oBAAoB,GAChEL,GAAkBK,EAAsBrD,kBAAkB,IAE1DL,GAAwBK,mBACtBqD,EAAsBrD,oBAIxB5K,GACEiO,EACA,gCAAgC,GAElC,OAAOA,EAAsBpD,gCAAmC,YAEhEN,GAAwBM,+BACtBoD,EAAsBpD,gCAG1BlO,GAAK4N,EAAuB,EAExBgB,KACFH,GAAkB,IAGhBS,KACFD,GAAa,IAIXQ,KACFnC,EAAenJ,EAAS,CAAA,EAAIqJ,EAAS,EACrCC,GAAexN,GAAO,IAAI,EACtBwP,GAAa1J,OAAS,KACxB5B,EAASmJ,EAAcE,EAAS,EAChCrJ,EAASsJ,GAAcE,EAAU,GAG/B8B,GAAazJ,MAAQ,KACvB7B,EAASmJ,EAAcE,EAAQ,EAC/BrJ,EAASsJ,GAAcE,EAAS,EAChCxJ,EAASsJ,GAAcE,EAAS,GAG9B8B,GAAaxJ,aAAe,KAC9B9B,EAASmJ,EAAcE,EAAe,EACtCrJ,EAASsJ,GAAcE,EAAS,EAChCxJ,EAASsJ,GAAcE,EAAS,GAG9B8B,GAAatJ,SAAW,KAC1BhC,EAASmJ,EAAcE,EAAW,EAClCrJ,EAASsJ,GAAcE,EAAY,EACnCxJ,EAASsJ,GAAcE,EAAS,IAMpCU,GAAuBC,SAAW,KAClCD,GAAuBE,eAAiB,KAGpClL,GAAqBsG,EAAK,UAAU,IAClC,OAAOA,EAAI4H,UAAa,WAC1BlD,GAAuBC,SAAW3E,EAAI4H,SAC7BzP,GAAa6H,EAAI4H,QAAQ,IAC9BjE,IAAiBC,KACnBD,EAAe1I,GAAM0I,CAAY,GAGnCnJ,EAASmJ,EAAc3D,EAAI4H,SAAUjN,EAAiB,IAItDjB,GAAqBsG,EAAK,UAAU,IAClC,OAAOA,EAAI6H,UAAa,WAC1BnD,GAAuBE,eAAiB5E,EAAI6H,SACnC1P,GAAa6H,EAAI6H,QAAQ,IAC9B/D,KAAiBC,KACnBD,GAAe7I,GAAM6I,EAAY,GAGnCtJ,EAASsJ,GAAc9D,EAAI6H,SAAUlN,EAAiB,IAKxDjB,GAAqBsG,EAAK,mBAAmB,GAC7C7H,GAAa6H,EAAI8H,iBAAiB,GAElCtN,EAAS2L,GAAqBnG,EAAI8H,kBAAmBnN,EAAiB,EAItEjB,GAAqBsG,EAAK,iBAAiB,GAC3C7H,GAAa6H,EAAI+F,eAAe,IAE5BA,KAAoBC,KACtBD,GAAkB9K,GAAM8K,EAAe,GAGzCvL,EAASuL,GAAiB/F,EAAI+F,gBAAiBpL,EAAiB,GAIhEjB,GAAqBsG,EAAK,qBAAqB,GAC/C7H,GAAa6H,EAAI+H,mBAAmB,IAEhChC,KAAoBC,KACtBD,GAAkB9K,GAAM8K,EAAe,GAGzCvL,EAASuL,GAAiB/F,EAAI+H,oBAAqBpN,EAAiB,GAIlEiL,KACFjC,EAAa,OAAO,EAAI,IAItBwB,IACF3K,EAASmJ,EAAc,CAAC,OAAQ,OAAQ,MAAM,CAAC,EAI7CA,EAAaqE,QACfxN,EAASmJ,EAAc,CAAC,OAAO,CAAC,EAChC,OAAOa,GAAYyD,OAUjBjI,EAAIkI,qBAAsB,CAC5B,GAAI,OAAOlI,EAAIkI,qBAAqBlJ,YAAe,WACjD,MAAMhF,GACJ,6EAA6E,EAIjF,GAAI,OAAOgG,EAAIkI,qBAAqBjJ,iBAAoB,WACtD,MAAMjF,GACJ,kFAAkF,EAKtF,IAAMmO,EAA6B1F,EACnCA,EAAqBzC,EAAIkI,qBAMzB,GAAI,CACFxF,EAAYK,EAAmB,EAAE,CACnC,OAASqF,EAAO,CACd3F,MAAAA,EAAqB0F,EACfC,CACR,CACF,MAAWpI,EAAIkI,uBAAyB,MAQtCzF,EAAqBlC,OACrBmC,EAAY,KAQRD,IAAuBlC,SACzBkC,EAAqBQ,EAA6B,GAOhDR,GAAsB,OAAOC,GAAc,WAC7CA,EAAYK,EAAmB,EAAE,KAclCS,EAAM3D,oBAAoB7I,OAAS,GAClCwM,EAAM5D,sBAAsB5I,OAAS,IACvC2M,IAAiBC,KAEjBD,EAAe1I,GAAM0I,CAAY,GAIjCH,EAAM5D,sBAAsB5I,OAAS,GACrC8M,KAAiBC,KAEjBD,GAAe7I,GAAM6I,EAAY,GAK/B1N,IACFA,GAAO4J,CAAG,EAGZoH,GAASpH,CACX,EAKMqI,GAAe7N,EAAS,CAAA,EAAI,CAChC,GAAGqJ,GACH,GAAGA,GACH,GAAGA,EAAkB,CACtB,EACKyE,GAAkB9N,EAAS,CAAA,EAAI,CACnC,GAAGqJ,GACH,GAAGA,EAAqB,CACzB,EAUK0E,GAAqB,SACzBC,EACAC,EACAC,EAAqB,CAKrB,OAAID,EAAOE,eAAiBpC,GACnBiC,IAAY,MAMjBC,EAAOE,eAAiBtC,GAExBmC,IAAY,QACXE,IAAkB,kBACjB7B,GAA+B6B,CAAa,GAM3CrP,EAAQgP,GAAaG,CAAO,CACrC,EAUMI,GAAwB,SAC5BJ,EACAC,EACAC,EAAqB,CAKrB,OAAID,EAAOE,eAAiBpC,GACnBiC,IAAY,OAKjBC,EAAOE,eAAiBrC,GACnBkC,IAAY,QAAUzB,GAAwB2B,CAAa,EAK7DrP,EAAQiP,GAAgBE,CAAO,CACxC,EAUMK,GAAsB,SAC1BL,EACAC,EACAC,EAAqB,CAYrB,OANED,EAAOE,eAAiBrC,IACxB,CAACS,GAAwB2B,CAAa,GAMtCD,EAAOE,eAAiBtC,IACxB,CAACQ,GAA+B6B,CAAa,EAEtC,GAMP,CAACJ,GAAgBE,CAAO,IACvBxB,GAA6BwB,CAAO,GAAK,CAACH,GAAaG,CAAO,EAEnE,EAQMM,GAAuB,SAAUjO,EAAgB,CACrD,IAAI4N,EAASzG,EAAcnH,CAAO,GAI9B,CAAC4N,GAAU,CAACA,EAAOD,WACrBC,EAAS,CACPE,aAAcnC,GACdgC,QAAS,aAIb,IAAMA,EAAUnQ,GAAkBwC,EAAQ2N,OAAO,EAC3CE,EAAgBrQ,GAAkBoQ,EAAOD,OAAO,EAEtD,OAAK9B,GAAmB7L,EAAQ8N,YAAY,EAIxC9N,EAAQ8N,eAAiBrC,GACpBiC,GAAmBC,EAASC,EAAQC,CAAa,EAGtD7N,EAAQ8N,eAAiBtC,GACpBuC,GAAsBJ,EAASC,EAAQC,CAAa,EAGzD7N,EAAQ8N,eAAiBpC,GACpBsC,GAAoBL,EAASC,EAAQC,CAAa,EAKzDzB,GAAAA,KAAsB,yBACtBP,GAAmB7L,EAAQ8N,YAAY,GAlBhC,EA4BX,EAOMI,GAAe,SAAUC,EAAU,CACvCjR,GAAUyI,EAAUI,QAAS,CAAE/F,QAASmO,CAAI,CAAE,EAE9C,GAAI,CAEFhH,EAAcgH,CAAI,EAAEC,YAAYD,CAAI,CACtC,MAAY,CAsBV,GAFAnH,EAAOmH,CAAI,EAEP,CAAChH,EAAcgH,CAAI,EACrB,MAAMhP,GACJ,8HACgE,CAGtE,CACF,EAkBMkP,GAAkB,SAAUzI,EAAU,CAC1C,IAAM0I,EAAapH,EAActB,CAAI,EACrC,GAAI0I,EAAY,CACd,IAAMC,EAAmB,CAAA,EACzB7R,GAAa4R,EAAaE,GAAS,CACjCtR,GAAUqR,EAAUC,CAAK,CAC3B,CAAC,EACD9R,GAAa6R,EAAWC,GAAS,CAC/B,GAAI,CACFxH,EAAOwH,CAAK,CACd,MAAY,CACV,CAEJ,CAAC,CACH,CAEA,IAAMC,EAAapH,EAAczB,CAAI,EACrC,GAAI6I,EACF,QAASC,EAAID,EAAWtS,OAAS,EAAGuS,GAAK,EAAG,EAAEA,EAAG,CAC/C,IAAM5L,EAAY2L,EAAWC,CAAC,EACxBC,EAAO7L,GAAaA,EAAU6L,KACpC,GAAI,OAAOA,GAAS,SAClB,GAAI,CACD/I,EAAiBgJ,gBAAgBD,CAAI,CACxC,MAAY,CACV,CAGN,CAEJ,EAQME,GAAmB,SAAUF,EAAc3O,EAAgB,CAC/D,GAAI,CACF9C,GAAUyI,EAAUI,QAAS,CAC3BjD,UAAW9C,EAAQ8O,iBAAiBH,CAAI,EACxCI,KAAM/O,CACP,CAAA,CACH,MAAY,CACV9C,GAAUyI,EAAUI,QAAS,CAC3BjD,UAAW,KACXiM,KAAM/O,CACP,CAAA,CACH,CAKA,GAHAA,EAAQ4O,gBAAgBD,CAAI,EAGxBA,IAAS,KACX,GAAIlE,IAAcC,GAChB,GAAI,CACFwD,GAAalO,CAAO,CACtB,MAAY,CAAC,KAEb,IAAI,CACFA,EAAQgP,aAAaL,EAAM,EAAE,CAC/B,MAAY,CAAC,CAGnB,EAYMM,GAA6B,SAAUjP,EAAgB,CAC3D,IAAMyO,EAAapH,EAAcrH,CAAO,EACxC,GAAKyO,EAIL,QAASC,EAAID,EAAWtS,OAAS,EAAGuS,GAAK,EAAG,EAAEA,EAAG,CAC/C,IAAM5L,EAAY2L,EAAWC,CAAC,EACxBC,EAAO7L,GAAaA,EAAU6L,KACpC,GAAI,SAAOA,GAAS,UAAY1F,GAAanJ,GAAkB6O,CAAI,CAAC,GAIpE,GAAI,CACF3O,EAAQ4O,gBAAgBD,CAAI,CAC9B,MAAY,CACV,CAEJ,CACF,EAwBMO,GAAqB,SAAUtJ,EAAU,CAC7C,IAAMuJ,EAAgB,CAACvJ,CAAI,EAE3B,KAAOuJ,EAAMhT,OAAS,GAAG,CACvB,IAAMgS,EAAOgB,EAAMlS,IAAG,GACLqK,EAAcA,EAAY6G,CAAI,EAAKA,EAAanI,YAEhDnD,GAAU7C,SACzBiP,GAA2Bd,CAAe,EAG5C,IAAMG,EAAapH,EAAciH,CAAI,EACrC,GAAIG,EACF,QAASI,EAAIJ,EAAWnS,OAAS,EAAGuS,GAAK,EAAG,EAAEA,EAC5CS,EAAMhS,KAAKmR,EAAWI,CAAC,CAAC,CAG9B,CACF,EAQMU,GAAgB,SAAUC,EAAa,CAE3C,IAAIC,EAAM,KACNC,EAAoB,KAExB,GAAI/E,GACF6E,EAAQ,oBAAsBA,MACzB,CAEL,IAAMG,EAAU3R,GAAYwR,EAAO,aAAa,EAChDE,EAAoBC,GAAWA,EAAQ,CAAC,CAC1C,CAGEpD,KAAsB,yBACtBT,KAAcD,KAGd2D,EACE,iEACAA,EACA,kBAGJ,IAAMI,EAAe7H,EAAqBM,EAAmBmH,CAAK,EAAIA,EAKtE,GAAI1D,KAAcD,GAChB,GAAI,CACF4D,EAAM,IAAIzI,EAAS,EAAG6I,gBAAgBD,EAAcrD,EAAiB,CACvE,MAAY,CAAC,CAIf,GAAI,CAACkD,GAAO,CAACA,EAAIK,gBAAiB,CAChCL,EAAMhH,EAAesH,eAAejE,GAAW,WAAY,IAAI,EAC/D,GAAI,CACF2D,EAAIK,gBAAgBE,UAAYjE,GAC5B/D,EACA4H,CACN,MAAY,CACV,CAEJ,CAEA,IAAMK,EAAOR,EAAIQ,MAAQR,EAAIK,gBAU7B,OARIN,GAASE,GACXO,EAAKC,aACH3M,EAAS4M,eAAeT,CAAiB,EACzCO,EAAKxB,WAAW,CAAC,GAAK,IAAI,EAK1B3C,KAAcD,GACTjD,EAAqBwH,KAC1BX,EACAhF,GAAiB,OAAS,MAAM,EAChC,CAAC,EAGEA,GAAiBgF,EAAIK,gBAAkBG,CAChD,EAQMI,GAAsB,SAAUtK,EAAU,CAC9C,OAAO2C,EAAmB0H,KACxBrK,EAAK+B,eAAiB/B,EACtBA,EAEAY,EAAW2J,aACT3J,EAAW4J,aACX5J,EAAW6J,UACX7J,EAAW8J,4BACX9J,EAAW+J,mBACb,IAAI,CAER,EAUMC,GAA4B,SAAU7P,EAAa,CACvDA,OAAAA,EAAQ5C,GAAc4C,EAAOoB,EAAe,GAAG,EAC/CpB,EAAQ5C,GAAc4C,EAAOqB,EAAU,GAAG,EAC1CrB,EAAQ5C,GAAc4C,EAAOsB,EAAa,GAAG,EACtCtB,CACT,EAqBM8P,GAA4B,SAAUtC,EAAa,CAAA,IAAAuC,EACvDvC,EAAKwC,UAAS,EACd,IAAMC,EAASrI,EAAmB0H,KAChC9B,EAAKxG,eAAiBwG,EACtBA,EAEA3H,EAAW6J,UACT7J,EAAW4J,aACX5J,EAAW+J,mBACX/J,EAAW8J,4BACb,IAAI,EAGFO,EAAcD,EAAOE,SAAQ,EACjC,KAAOD,GACLA,EAAYE,KAAOP,GAA0BK,EAAYE,IAAI,EAC7DF,EAAcD,EAAOE,SAAQ,EAM/B,IAAME,GAASN,EAAGvC,EAAK8C,oBAAgB,MAAAP,IAAA,OAAA,OAArBA,EAAAT,KAAA9B,EAAwB,UAAU,EAChD6C,GACFtU,GAAasU,EAAYE,GAA6B,CAChDC,GAAoBD,EAAKxJ,OAAO,GAClC+I,GAA0BS,EAAKxJ,OAA6B,CAEhE,CAAC,CAEL,EAcM0J,GAAe,SAAUpR,EAAgB,CAI7C,IAAMqR,EAAc9J,EAAcA,EAAYvH,CAAO,EAAI,KAKzD,OAJI,OAAOqR,GAAgB,UAIvBvR,GAAkBuR,CAAW,IAAM,OAC9B,GAIP,OAAOrR,EAAQsR,UAAa,UAC5B,OAAOtR,EAAQuR,aAAgB,UAC/B,OAAOvR,EAAQoO,aAAgB,YAM/BpO,EAAQyO,aAAepH,EAAcrH,CAAO,GAC5C,OAAOA,EAAQ4O,iBAAoB,YACnC,OAAO5O,EAAQgP,cAAiB,YAChC,OAAOhP,EAAQ8N,cAAiB,UAChC,OAAO9N,EAAQ+P,cAAiB,YAChC,OAAO/P,EAAQwR,eAAkB,YAQjCxR,EAAQgG,WAAasB,EAAYtH,CAAO,GAYxCA,EAAQsO,aAAepH,EAAclH,CAAO,CAEhD,EAaMmR,GAAsB,SAAUxQ,EAAc,CAClD,GAAI,CAAC2G,GAAe,OAAO3G,GAAU,UAAYA,IAAU,KACzD,MAAO,GAGT,GAAI,CACF,OAAO2G,EAAY3G,CAAa,IAAMkC,GAAUS,gBAClD,MAAY,CACV,MAAO,EACT,CACF,EAaMmO,GAAU,SAAU9Q,EAAc,CACtC,GAAI,CAAC2G,GAAe,OAAO3G,GAAU,UAAYA,IAAU,KACzD,MAAO,GAGT,GAAI,CACF,OAAO,OAAO2G,EAAY3G,CAAK,GAAM,QACvC,MAAY,CACV,MAAO,EACT,CACF,EAEA,SAAS+Q,GACP/I,EACAkI,EACAE,EAAsB,CAElBpI,EAAMxM,SAAW,GAIrBO,GAAaiM,EAAQgJ,GAAW,CAC9BA,EAAK1B,KAAKtK,EAAWkL,EAAaE,EAAMxE,EAAM,CAChD,CAAC,CACH,CAYA,IAAMqF,GAAgB,SAAUf,EAAkBlD,EAAe,CA4B/D,MAzBEtD,GAAAA,IACAwG,EAAYW,cAAa,GACzB,CAACC,GAAQZ,EAAYgB,iBAAiB,GACtC7S,GAAW6J,GAAkCgI,EAAYU,WAAW,GACpEvS,GAAW6J,GAAkCgI,EAAYhB,SAAS,GAOlExF,IACAwG,EAAY/C,eAAiBpC,IAC7BiC,IAAY,SACZ8D,GAAQZ,EAAYgB,iBAAiB,GAMnChB,EAAY7K,WAAanD,GAAUK,uBAMrCmH,IACAwG,EAAY7K,WAAanD,GAAUM,SACnCnE,GAAW6J,GAAkCgI,EAAYE,IAAI,EAMjE,EAaMe,GAA0B,SAC9BjB,EACAlD,EAAe,CAGf,GAAI,CAAChE,GAAYgE,CAAO,GAAKoE,GAAsBpE,CAAO,IAEtDvE,GAAwBC,wBAAwBpK,QAChDD,GAAWoK,GAAwBC,aAAcsE,CAAO,GAMxDvE,GAAwBC,wBAAwBsD,UAChDvD,GAAwBC,aAAasE,CAAO,GAE5C,MAAO,GAYX,GAAI5C,IAAgB,CAACG,GAAgByC,CAAO,EAAG,CAC7C,IAAMqE,EAAa7K,EAAc0J,CAAW,EACtCvC,EAAapH,EAAc2J,CAAW,EAE5C,GAAIvC,GAAc0D,EAAY,CAC5B,IAAMC,EAAa3D,EAAWnS,OAuB9B,QAASuS,EAAIuD,EAAa,EAAGvD,GAAK,EAAG,EAAEA,EAAG,CACxC,IAAMwD,GAAUlH,GACZsD,EAAWI,CAAC,EACZ3H,EAAUuH,EAAWI,CAAC,EAAG,EAAI,EACjCsD,EAAWjC,aAAamC,GAASjL,EAAe4J,CAAW,CAAC,CAC9D,CACF,CACF,CAEA3C,OAAAA,GAAa2C,CAAW,EACjB,EACT,EAWMsB,GAAoB,SAAUtB,EAAgB,CAKlD,GAHAa,GAAc/I,EAAM9D,uBAAwBgM,EAAa,IAAI,EAGzDO,GAAaP,CAAW,EAC1B3C,OAAAA,GAAa2C,CAAW,EACjB,GAIT,IAAMlD,EAAU7N,GACdyH,EAAcA,EAAYsJ,CAAW,EAAIA,EAAYS,QAAQ,EAU/D,GANAI,GAAc/I,EAAM3D,oBAAqB6L,EAAa,CACpDlD,QAAAA,EACAyE,YAAatJ,CACd,CAAA,EAGG8I,GAAcf,EAAalD,CAAO,EACpCO,OAAAA,GAAa2C,CAAW,EACjB,GAIT,GACElH,GAAYgE,CAAO,GAClB,EACC9D,GAAuBC,oBAAoB6C,UAC3C9C,GAAuBC,SAAS6D,CAAO,IAEvC,CAAC7E,EAAa6E,CAAO,EAEvB,OAAOmE,GAAwBjB,EAAalD,CAAO,EAgBrD,IAPWrG,EAAcA,EAAYuJ,CAAW,EAAIA,EAAY7K,YACrDnD,GAAU7C,SAAW,CAACiO,GAAqB4C,CAAW,IAO9DlD,IAAY,YACXA,IAAY,WACZA,IAAY,aACd3O,GAAW6J,GAAgCgI,EAAYhB,SAAS,EAEhE3B,OAAAA,GAAa2C,CAAW,EACjB,GAIT,GAAIzG,IAAsByG,EAAY7K,WAAanD,GAAUhB,KAAM,CAEjE,IAAM6F,EAAU8I,GAA0BK,EAAYU,WAAW,EAE7DV,EAAYU,cAAgB7J,IAC9BxK,GAAUyI,EAAUI,QAAS,CAAE/F,QAAS6Q,EAAY9J,UAAS,CAAE,CAAE,EACjE8J,EAAYU,YAAc7J,EAE9B,CAGAgK,OAAAA,GAAc/I,EAAMjE,sBAAuBmM,EAAa,IAAI,EAErD,EACT,EAWMwB,GAAoB,SACxBC,EACAC,EACA5R,EAAa,CAQb,GALIiJ,GAAY2I,CAAM,GAMpB3H,KACC2H,IAAW,MAAQA,IAAW,UAC9B5R,KAASyC,GAAYzC,KAAS6L,IAE/B,MAAO,GAGT,IAAMgG,EACJvJ,GAAasJ,CAAM,GAClB1I,GAAuBE,0BAA0B4C,UAChD9C,GAAuBE,eAAewI,EAAQD,CAAK,EAMvD,GAAIrI,EAAAA,IAAmBjL,GAAWkD,EAAWqQ,CAAM,IAE5C,GAAIvI,EAAAA,IAAmBhL,GAAWmD,EAAWoQ,CAAM,IAGnD,GAAKC,GA6BL,GAAIlH,CAAAA,GAAoBiH,CAAM,GAI9B,GACLvT,CAAAA,GAAWoD,GAAgBrE,GAAc4C,EAAO2B,GAAiB,EAAE,CAAC,GAK/D,GACJiQ,GAAAA,IAAW,OAASA,IAAW,cAAgBA,IAAW,SAC3DD,IAAU,UACVrU,GAAc0C,EAAO,OAAO,IAAM,GAClCyK,GAAckH,CAAK,IAMd,GACLpI,EAAAA,IACA,CAAClL,GAAWqD,GAAmBtE,GAAc4C,EAAO2B,GAAiB,EAAE,CAAC,IAInE,GAAI3B,EACT,MAAO,eAnDJoR,EAAAA,GAAsBO,CAAK,IACxBlJ,GAAwBC,wBAAwBpK,QAChDD,GAAWoK,GAAwBC,aAAciJ,CAAK,GACrDlJ,GAAwBC,wBAAwBsD,UAC/CvD,GAAwBC,aAAaiJ,CAAK,KAC5ClJ,GAAwBK,8BAA8BxK,QACtDD,GAAWoK,GAAwBK,mBAAoB8I,CAAM,GAC5DnJ,GAAwBK,8BAA8BkD,UACrDvD,GAAwBK,mBAAmB8I,EAAQD,CAAK,IAG7DC,IAAW,MACVnJ,GAAwBM,iCACtBN,GAAwBC,wBAAwBpK,QAChDD,GAAWoK,GAAwBC,aAAc1I,CAAK,GACrDyI,GAAwBC,wBAAwBsD,UAC/CvD,GAAwBC,aAAa1I,CAAK,IAKhD,MAAO,IAoCX,MAAO,EACT,EAKM8R,GAAgC9S,EAAS,CAAA,EAAI,CACjD,iBACA,gBACA,YACA,mBACA,iBACA,gBACA,gBACA,eAAe,CAChB,EAUKoS,GAAwB,SAAUpE,EAAe,CACrD,MACE,CAAC8E,GAA8BjV,GAAkBmQ,CAAO,CAAC,GACzD3O,GAAWwD,GAAgBmL,CAAO,CAEtC,EAcM+E,GAAgC,SACpCJ,EACAC,EACAzE,EACAnN,EAAa,CAEb,GACEiH,GACA,OAAOjE,GAAiB,UACxB,OAAOA,EAAagP,kBAAqB,YACzC,CAAC7E,EAED,OAAQnK,EAAagP,iBAAiBL,EAAOC,CAAM,EAAC,CAClD,IAAK,cACH,OAAOrK,EAAmBvH,CAAK,EAGjC,IAAK,mBACH,OAAOwH,GAAwBxH,CAAK,CAMxC,CAGF,OAAOA,CACT,EAeMiS,GAAqB,SACzB/B,EACAlC,EACAb,EACAnN,EAAa,CAEb,GAAI,CACEmN,EACF+C,EAAYgC,eAAe/E,EAAca,EAAMhO,CAAK,EAGpDkQ,EAAY7B,aAAaL,EAAMhO,CAAK,EAGlCyQ,GAAaP,CAAW,EAC1B3C,GAAa2C,CAAW,EAExB7T,GAAS2I,EAAUI,OAAO,CAE9B,MAAY,CACV8I,GAAiBF,EAAMkC,CAAW,CACpC,CACF,EAYMiC,GAAsB,SAAUjC,EAAoB,CAExDa,GAAc/I,EAAM/D,yBAA0BiM,EAAa,IAAI,EAE/D,IAAQpC,EAAeoC,EAAfpC,WAGR,GAAI,CAACA,GAAc2C,GAAaP,CAAW,EACzC,OAGF,IAAMkC,EAAY,CAChBC,SAAU,GACVC,UAAW,GACXC,SAAU,GACVC,kBAAmBlK,GACnBmK,cAAe1N,QAEb3F,EAAI0O,EAAWtS,OACbmW,EAAQxS,GAAkB+Q,EAAYS,QAAQ,EAGpD,KAAOvR,KAAK,CACV,IAAMsT,EAAO5E,EAAW1O,CAAC,EACjB4O,GAAyC0E,EAAzC1E,KAAMb,GAAmCuF,EAAnCvF,aAAqBmF,GAAcI,EAArB1S,MACtB4R,GAASzS,GAAkB6O,EAAI,EAE/B2E,GAAYL,GACdtS,GAAQgO,KAAS,QAAU2E,GAAYnV,GAAWmV,EAAS,EA2B/D,GAxBAP,EAAUC,SAAWT,GACrBQ,EAAUE,UAAYtS,GACtBoS,EAAUG,SAAW,GACrBH,EAAUK,cAAgB1N,OAC1BgM,GAAc/I,EAAM5D,sBAAuB8L,EAAakC,CAAS,EACjEpS,GAAQoS,EAAUE,UAMhBpI,KACC0H,KAAW,MAAQA,KAAW,SAC/BtU,GAAc0C,GAAOmK,EAA2B,IAAM,IAGtD+D,GAAiBF,GAAMkC,CAAW,EAElClQ,GAAQmK,GAA8BnK,IAOtC0J,IACArL,GACE,qFACA2B,EAAK,EAEP,CACAkO,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAGA,GAAI0B,KAAW,iBAAmB1U,GAAY8C,GAAO,MAAM,EAAG,CAC5DkO,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAGA,GAAIkC,CAAAA,EAAUK,cAKd,IAAI,CAACL,EAAUG,SAAU,CACvBrE,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAGA,GACE,CAAC1G,IACDnL,GAAW6J,GAA8BlI,EAAK,EAC9C,CACAkO,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAQA,GALIzG,KACFzJ,GAAQ6P,GAA0B7P,EAAK,GAIrC,CAAC0R,GAAkBC,EAAOC,GAAQ5R,EAAK,EAAG,CAC5CkO,GAAiBF,GAAMkC,CAAW,EAClC,QACF,CAGAlQ,GAAQ+R,GAA8BJ,EAAOC,GAAQzE,GAAcnN,EAAK,EAGpEA,KAAU2S,IACZV,GAAmB/B,EAAalC,GAAMb,GAAcnN,EAAK,EAE7D,CAGA+Q,GAAc/I,EAAMlE,wBAAyBoM,EAAa,IAAI,CAChE,EAOM0C,GAAqB,SAAUC,EAA0B,CAC7D,IAAIC,EAAa,KACXC,EAAiBxD,GAAoBsD,CAAQ,EAKnD,IAFA9B,GAAc/I,EAAM7D,wBAAyB0O,EAAU,IAAI,EAEnDC,EAAaC,EAAe5C,SAAQ,GA+B1C,GA7BAY,GAAc/I,EAAM1D,uBAAwBwO,EAAY,IAAI,EAG5DtB,GAAkBsB,CAAU,EAG5BX,GAAoBW,CAAU,EAM1BtC,GAAoBsC,EAAW/L,OAAO,GACxC6L,GAAmBE,EAAW/L,OAAO,GAahBJ,EACnBA,EAAYmM,CAAU,EACtBA,EAAWzN,YACQnD,GAAU7C,QAAS,CACxC,IAAM2T,EAAUvM,EAAcqM,CAAU,EACpCtC,GAAoBwC,CAAO,IAC7BC,GAA6BD,CAAO,EACpCJ,GAAmBI,CAAO,EAE9B,CAIFjC,GAAc/I,EAAMhE,uBAAwB6O,EAAU,IAAI,CAC5D,EAqBMI,GAA+B,SAAUhO,EAAU,CAiBvD,IAAMuJ,EACJ,CAAC,CAAEhB,KAAMvI,EAAMiO,OAAQ,IAAI,CAAE,EAE/B,KAAO1E,EAAMhT,OAAS,GAAG,CACvB,IAAM2X,EAAO3E,EAAMlS,IAAG,EAGtB,GAAI6W,EAAKD,OAAQ,CACfN,GAAmBO,EAAKD,MAAM,EAC9B,QACF,CAEA,IAAM1F,EAAO2F,EAAK3F,KAEZ4F,GADWzM,EAAcA,EAAY6G,CAAI,EAAKA,EAAanI,YAClCnD,GAAU7C,QAKnCsO,GAAapH,EAAciH,CAAI,EACrC,GAAIG,GACF,QAASI,GAAIJ,GAAWnS,OAAS,EAAGuS,IAAK,EAAG,EAAEA,GAC5CS,EAAMhS,KAAK,CAAEgR,KAAMG,GAAWI,EAAC,EAAGmF,OAAQ,IAAI,CAAE,EAOpD,GAAIE,EAAW,CACb,IAAMC,GAAWzM,EAAcA,EAAY4G,CAAI,EAAI,KACnD,GACE,OAAO6F,IAAa,UACpBlU,GAAkBkU,EAAQ,IAAM,WAChC,CACA,IAAMtM,GAAWyG,EAA6BzG,QAC1CyJ,GAAoBzJ,EAAO,GAC7ByH,EAAMhS,KAAK,CAAEgR,KAAMzG,GAASmM,OAAQ,IAAI,CAAE,CAE9C,CACF,CAOA,GAAIE,EAAW,CACb,IAAME,GAAK7M,EAAc+G,CAAI,EACzBgD,GAAoB8C,EAAE,GAIxB9E,EAAMhS,KAAK,CAAEgR,KAAM,KAAM0F,OAAQI,IAAM,CAAE9F,KAAM8F,GAAIJ,OAAQ,IAAI,CAAE,CAErE,CACF,CACF,EAGAlO,OAAAA,EAAUuO,SAAW,SAAU7E,EAAe,CAAA,IAARlK,EAAGjJ,UAAAC,OAAA,GAAAD,UAAA,CAAA,IAAAwJ,OAAAxJ,UAAA,CAAA,EAAG,CAAA,EACtC4T,EAAO,KACPqE,EAAe,KACftD,EAAc,KACduD,EAAa,KAUjB,GANAxI,GAAiB,CAACyD,EACdzD,KACFyD,EAAQ,SAIN,OAAOA,GAAU,UAAY,CAACoC,GAAQpC,CAAK,IAC7CA,EAAQxO,GAAewO,CAAK,EAExB,OAAOA,GAAU,UACnB,MAAMlQ,GAAgB,iCAAiC,EAK3D,GAAI,CAACwG,EAAUO,YACb,OAAOmJ,EAIJ9E,IACHqC,GAAazH,CAAG,EAIlBQ,EAAUI,QAAU,CAAA,EAQpB,IAAMsO,EAAUrJ,IAAY,OAAOqE,GAAU,UAAYoC,GAAQpC,CAAK,EAEtE,GAAIgF,EAAS,CAMX,IAAMC,GAAK/M,EACPA,EAAY8H,CAAa,EACxBA,EAAeiC,SACpB,GAAI,OAAOgD,IAAO,SAAU,CAC1B,IAAM3G,GAAU7N,GAAkBwU,EAAE,EACpC,GAAI,CAACxL,EAAa6E,EAAO,GAAKhE,GAAYgE,EAAO,EAC/C,MAAMxO,GACJ,yDAAyD,CAG/D,CAYA,GAAIiS,GAAa/B,CAAgB,EAC/B,MAAMlQ,GACJ,yDAAyD,EAS7D,GAAI,CACFyU,GAA6BvE,CAAa,CAC5C,OAAS9B,GAAO,CACdc,MAAAA,GAAgBgB,CAAa,EAEvB9B,EACR,CACF,SAAWkE,GAAQpC,CAAK,EAGtBS,EAAOV,GAAc,SAAS,EAC9B+E,EAAerE,EAAKnI,cAAce,WAAW2G,EAAO,EAAI,EAEtD8E,EAAanO,WAAanD,GAAU7C,SACpCmU,EAAa7C,WAAa,QAIjB6C,EAAa7C,WAAa,OADnCxB,EAAOqE,EAKPrE,EAAKyE,YAAYJ,CAAY,EAQ/BP,GAA6BO,CAAY,MACpC,CAEL,GACE,CAAC1J,IACD,CAACL,IACD,CAACE,IAED+E,EAAMnR,QAAQ,GAAG,IAAM,GAEvB,OAAO0J,GAAsB+C,GACzBzC,EAAmBmH,CAAK,EACxBA,EAON,GAHAS,EAAOV,GAAcC,CAAK,EAGtB,CAACS,EACH,OAAOrF,GAAa,KAAOE,GAAsB9C,EAAY,EAEjE,CAGIiI,GAAQtF,IACV0D,GAAa4B,EAAK0E,UAAU,EAI9B,IAAMC,GAAevE,GAAoBmE,EAAUhF,EAAQS,CAAI,EAW/D,GAAI,CACF,KAAQe,EAAc4D,GAAa3D,SAAQ,GAEzCqB,GAAkBtB,CAAW,EAG7BiC,GAAoBjC,CAAW,EAM3BM,GAAoBN,EAAYnJ,OAAO,GACzC6L,GAAmB1C,EAAYnJ,OAAO,CAG5C,OAAS6F,GAAO,CACd,MAAI8G,GACFhG,GAAgBgB,CAAa,EAGzB9B,EACR,CAGA,GAAI8G,EAQF3X,OAAAA,GAAaiJ,EAAUI,QAAU2O,IAAS,CACpCA,GAAM1U,SACRkP,GAAmBwF,GAAM1U,OAAe,CAE5C,CAAC,EAEGoK,IACFqG,GAA0BpB,CAAgB,EAGrCA,EAIT,GAAI5E,GAAY,CAKd,GAJIL,IACFqG,GAA0BX,CAAI,EAG5BpF,GAGF,IAFA0J,EAAa5L,GAAuByH,KAAKH,EAAKnI,aAAa,EAEpDmI,EAAK0E,YAEVJ,EAAWG,YAAYzE,EAAK0E,UAAU,OAGxCJ,EAAatE,EAGf,OAAI7G,GAAa0L,YAAc1L,GAAa2L,kBAQ1CR,EAAa1L,EAAWuH,KAAK9J,EAAkBiO,EAAY,EAAI,GAG1DA,CACT,CAEA,IAAIS,GAAiBvK,GAAiBwF,EAAKgF,UAAYhF,EAAKD,UAG5D,OACEvF,IACAxB,EAAa,UAAU,GACvBgH,EAAKnI,eACLmI,EAAKnI,cAAcoN,SACnBjF,EAAKnI,cAAcoN,QAAQpG,MAC3B3P,GAAW6J,GAA0BiH,EAAKnI,cAAcoN,QAAQpG,IAAI,IAEpEkG,GACE,aAAe/E,EAAKnI,cAAcoN,QAAQpG,KAAO;EAAQkG,IAIzDzK,KACFyK,GAAiBrE,GAA0BqE,EAAc,GAGpDjN,GAAsB+C,GACzBzC,EAAmB2M,EAAc,EACjCA,EACN,EAEAlP,EAAUqP,UAAY,UAAkB,CAAA,IAAR7P,EAAGjJ,UAAAC,OAAA,GAAAD,UAAA,CAAA,IAAAwJ,OAAAxJ,UAAA,CAAA,EAAG,CAAA,EACpC0Q,GAAazH,CAAG,EAChBoF,GAAa,EACf,EAEA5E,EAAUsP,YAAc,UAAA,CACtB1I,GAAS,KACThC,GAAa,GAMb3C,EAAqBE,EACrBD,EAAY,EACd,EAEAlC,EAAUuP,iBAAmB,SAAUC,EAAK9B,EAAM1S,EAAK,CAEhD4L,IACHK,GAAa,CAAA,CAAE,EAGjB,IAAM0F,EAAQxS,GAAkBqV,CAAG,EAC7B5C,EAASzS,GAAkBuT,CAAI,EACrC,OAAOhB,GAAkBC,EAAOC,EAAQ5R,CAAK,CAC/C,EAEAgF,EAAUyP,QAAU,SAClBC,EACAC,EAA0B,CAEtB,OAAOA,GAAiB,YAI5BpY,GAAUyL,EAAM0M,CAAU,EAAGC,CAAY,CAC3C,EAEA3P,EAAU4P,WAAa,SACrBF,EACAC,EAA0B,CAE1B,GAAIA,IAAiB5P,OAAW,CAC9B,IAAMvF,EAAQrD,GAAiB6L,EAAM0M,CAAU,EAAGC,CAAY,EAE9D,OAAOnV,IAAU,GACbuF,OACAtI,GAAYuL,EAAM0M,CAAU,EAAGlV,EAAO,CAAC,EAAE,CAAC,CAChD,CAEA,OAAOnD,GAAS2L,EAAM0M,CAAU,CAAC,CACnC,EAEA1P,EAAU6P,YAAc,SAAUH,EAA0B,CAC1D1M,EAAM0M,CAAU,EAAI,CAAA,CACtB,EAEA1P,EAAU8P,eAAiB,UAAA,CACzB9M,EAAQnE,GAAe,CACzB,EAEOmB,CACT,CAEA,IAAA+P,GAAejQ,GAAe,EClmF9B,IAAMkQ,GAAN,MAAMC,CAA0B,CAE5B,OAAO,aAAe,IAAI,QAC1B,OAAO,kBAAoB,KAK3B,OAAO,eAAeC,EAAK,CACvB,GAAI,OAAOA,GAAQ,UAAYA,IAAQ,KACnC,OAAOA,EAGX,GAAI,MAAM,QAAQA,CAAG,EACjB,OAAOA,EAAI,IAAID,EAA0B,cAAc,EAG3D,IAAME,EAAY,CAAC,EACnB,cAAO,KAAKD,CAAG,EAAE,KAAK,EAAE,QAAQE,GAAO,CACnCD,EAAUC,CAAG,EAAIH,EAA0B,eAAeC,EAAIE,CAAG,CAAC,CACtE,CAAC,EACMD,CACX,CAGA,OAAO,gBAAgBC,EAAKC,EAAe,KAAMC,EAAiB,CAAC,EAAG,CAClE,GAAI,EAAEF,aAAe,WAAY,MAAM,IAAI,MAAM,oBAAoB,EACrE,GAAIC,GAAgBD,EAAI,WAAW,OAASC,EACxC,MAAM,IAAI,MAAM,sBAAsBA,CAAY,SAASD,EAAI,WAAW,IAAI,EAAE,EAEpF,QAAWG,KAAKD,EACZ,GAAI,CAACF,EAAI,QAAU,CAACA,EAAI,OAAO,SAASG,CAAC,EACrC,MAAM,IAAI,MAAM,+BAA+BA,CAAC,EAAE,CAG9D,CAEA,OAAO,oBAAoBC,EAAQ,CAC/B,IAAIC,EAAS,GACPC,EAAQ,IAAI,WAAWF,CAAM,EAC7BG,EAAMD,EAAM,WAClB,QAASE,EAAI,EAAGA,EAAID,EAAKC,IACrBH,GAAU,OAAO,aAAaC,EAAME,CAAC,CAAC,EAE1C,OAAO,KAAKH,CAAM,CACtB,CAGA,OAAO,oBAAoBI,EAAQ,CAC/B,GAAI,CAEA,GAAI,OAAOA,GAAW,UAAY,CAACA,EAC/B,MAAM,IAAI,MAAM,kDAAkD,EAItE,IAAMC,EAAcD,EAAO,KAAK,EAChC,GAAI,CAAC,yBAAyB,KAAKC,CAAW,EAC1C,MAAM,IAAI,MAAM,uBAAuB,EAI3C,GAAIA,IAAgB,GAChB,OAAO,IAAI,YAAY,CAAC,EAG5B,IAAMC,EAAe,KAAKD,CAAW,EAC/BH,EAAMI,EAAa,OACnBL,EAAQ,IAAI,WAAWC,CAAG,EAChC,QAASC,EAAI,EAAGA,EAAID,EAAKC,IACrBF,EAAME,CAAC,EAAIG,EAAa,WAAWH,CAAC,EAExC,OAAOF,EAAM,MACjB,OAASM,EAAO,CACZ,cAAQ,MAAM,2CAA4CA,EAAM,OAAO,EACjE,IAAI,MAAM,4BAA4BA,EAAM,OAAO,EAAE,CAC/D,CACJ,CAGA,OAAO,gBAAgBC,EAAW,CAC9B,GAAI,CACA,GAAI,CAACA,GAAa,OAAOA,GAAc,SACnC,MAAM,IAAI,MAAM,sDAAsD,EAI1E,IAAMC,EAAWD,EAAU,QAAQ,KAAM,EAAE,EAAE,QAAQ,MAAO,EAAE,EAG9D,GAAI,CAAC,iBAAiB,KAAKC,CAAQ,EAC/B,MAAM,IAAI,MAAM,iDAAiD,EAIrE,GAAIA,EAAS,OAAS,IAAM,EACxB,MAAM,IAAI,MAAM,gCAAgC,EAIpD,IAAMR,EAAQ,IAAI,WAAWQ,EAAS,OAAS,CAAC,EAChD,QAAS,EAAI,EAAG,EAAIA,EAAS,OAAQ,GAAK,EACtCR,EAAM,EAAI,CAAC,EAAI,SAASQ,EAAS,OAAO,EAAG,CAAC,EAAG,EAAE,EAGrD,OAAOR,CACX,OAASM,EAAO,CACZ,cAAQ,MAAM,uCAAwCA,EAAM,OAAO,EAC7D,IAAI,MAAM,yBAAyBA,EAAM,OAAO,EAAE,CAC5D,CACJ,CAiBA,OAAO,cAAcR,EAAQ,CACzB,GAAI,CACA,GAAI,CAACA,EAAQ,OACb,IAAMW,EAAOX,aAAkB,WACzBA,EACCA,aAAkB,YAAc,IAAI,WAAWA,CAAM,EAAI,KAChE,GAAI,CAACW,GAAQA,EAAK,SAAW,EAAG,OAChC,OAAO,gBAAgBA,CAAI,EAC3BA,EAAK,KAAK,CAAC,CACf,MAAY,CAEZ,CACJ,CAEA,aAAa,YAAYC,EAAMC,EAAU,CACrC,GAAI,CACA,IAAMC,EAAa,OAAOF,GAAS,SAAWA,EAAO,KAAK,UAAUA,CAAI,EAClEG,EAAO,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAChDC,EAAU,IAAI,YACdC,EAAiBD,EAAQ,OAAOH,CAAQ,EAExCK,EAAc,MAAM,OAAO,OAAO,UACpC,MACAD,EACA,CAAE,KAAM,QAAS,EACjB,GACA,CAAC,WAAW,CAChB,EAEMrB,EAAM,MAAM,OAAO,OAAO,UAC5B,CACI,KAAM,SACN,KAAMmB,EACN,WAAY,KACZ,KAAM,SACV,EACAG,EACA,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,SAAS,CACd,EAEMC,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC9CC,EAAaJ,EAAQ,OAAOF,CAAU,EACtCO,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAIF,CAAG,EAC1BvB,EACAwB,CACJ,EAEME,EAAmB,CACrB,QAAS,MACT,KAAM,MAAM,KAAKP,CAAI,EACrB,GAAI,MAAM,KAAKI,CAAE,EACjB,KAAM,MAAM,KAAK,IAAI,WAAWE,CAAS,CAAC,EAC1C,UAAW,KAAK,IAAI,CACxB,EAEME,EAAgB,KAAK,UAAUD,CAAgB,EACrD,OAAO7B,EAA0B,oBAAoB,IAAI,YAAY,EAAE,OAAO8B,CAAa,EAAE,MAAM,CAEvG,OAASf,EAAO,CACZ,cAAQ,MAAM,qBAAsBA,EAAM,OAAO,EAC3C,IAAI,MAAM,qBAAqBA,EAAM,OAAO,EAAE,CACxD,CACJ,CAEI,aAAa,YAAYgB,EAAeX,EAAU,CAClD,GAAI,CACA,IAAMY,EAAgBhC,EAA0B,oBAAoB+B,CAAa,EAC3ED,EAAgB,IAAI,YAAY,EAAE,OAAOE,CAAa,EACtDH,EAAmB,KAAK,MAAMC,CAAa,EAEjD,GAAI,CAACD,EAAiB,SAAW,CAACA,EAAiB,MAAQ,CAACA,EAAiB,IAAM,CAACA,EAAiB,KACjG,MAAM,IAAI,MAAM,+BAA+B,EAGnD,IAAMP,EAAO,IAAI,WAAWO,EAAiB,IAAI,EAC3CH,EAAK,IAAI,WAAWG,EAAiB,EAAE,EACvCD,EAAY,IAAI,WAAWC,EAAiB,IAAI,EAGhDL,EADU,IAAI,YAAY,EACD,OAAOJ,CAAQ,EAExCK,EAAc,MAAM,OAAO,OAAO,UACpC,MACAD,EACA,CAAE,KAAM,QAAS,EACjB,GACA,CAAC,WAAW,CAChB,EAEMrB,EAAM,MAAM,OAAO,OAAO,UAC5B,CACI,KAAM,SACN,KAAMmB,EACN,WAAY,KACZ,KAAM,SACV,EACAG,EACA,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,SAAS,CACd,EAEMQ,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAAP,CAAG,EACtBvB,EACAyB,CACJ,EAEMM,EAAkB,IAAI,YAAY,EAAE,OAAOD,CAAS,EAE1D,GAAI,CACA,OAAO,KAAK,MAAMC,CAAe,CACrC,MAAQ,CACJ,OAAOA,CACX,CAEJ,OAASnB,EAAO,CACZ,cAAQ,MAAM,qBAAsBA,EAAM,OAAO,EAC3C,IAAI,MAAM,qBAAqBA,EAAM,OAAO,EAAE,CACxD,CACJ,CAIA,OAAO,wBAAyB,CAC5B,IAAMoB,EAAQ,2FACRC,EAAYD,EAAM,OAClBE,EAAS,GACXjB,EAAW,GAGf,QAAST,EAAI,EAAGA,EAAI0B,EAAQ1B,IAAK,CAC7B,IAAI2B,EACJ,GACIA,EAAc,OAAO,gBAAgB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,QACrDA,GAAe,WAAc,WAAaF,GAEnDhB,GAAYe,EAAMG,EAAcF,CAAS,CAC7C,CACA,OAAOhB,CACX,CAGA,aAAa,uBAAuBmB,EAAiB,CACjD,IAAIC,EAAQ,EACNC,EAAW,IACXC,EAAsB,CAAC,EAE7B,GAAI,CAEA,GAAI,CAACH,GAAmB,CAACA,EAAgB,iBACrC,eAAQ,KAAK,oEAAoE,EAC1E,CACH,MAAO,eACP,MAAO,EACP,MAAO,OACP,oBAAqB,CAAC,EACtB,UAAW,KAAK,IAAI,EACpB,QAAS,kCACT,WAAY,EAChB,EAIJ,IAAMI,EAAc,OACdC,EAAgB,GAGtB,GAAI,CACA,IAAMC,EAAmB,MAAM7C,EAA0B,iBAAiBuC,CAAe,EACrFM,EAAiB,QACjBL,GAAS,GACTE,EAAoB,iBAAmB,CAAE,OAAQ,GAAM,QAASG,EAAiB,QAAS,OAAQ,EAAG,GAErGH,EAAoB,iBAAmB,CAAE,OAAQ,GAAO,QAASG,EAAiB,QAAS,OAAQ,CAAE,CAE7G,OAAS9B,EAAO,CACZ2B,EAAoB,iBAAmB,CAAE,OAAQ,GAAO,QAAS,4BAA4B3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CAC5H,CAGA,GAAI,CACA,IAAM+B,EAAa,MAAM9C,EAA0B,sBAAsBuC,CAAe,EACpFO,EAAW,QACXN,GAAS,GACTE,EAAoB,sBAAwB,CAAE,OAAQ,GAAM,QAASI,EAAW,QAAS,OAAQ,EAAG,GAEpGJ,EAAoB,sBAAwB,CAAE,OAAQ,GAAO,QAASI,EAAW,QAAS,OAAQ,CAAE,CAE5G,OAAS/B,EAAO,CACZ2B,EAAoB,sBAAwB,CAAE,OAAQ,GAAO,QAAS,8BAA8B3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CACnI,CAGA,GAAI,CACA,IAAMgC,EAAkB,MAAM/C,EAA0B,uBAAuBuC,CAAe,EAC1FQ,EAAgB,QACpBP,GAAS,GACLE,EAAoB,uBAAyB,CAAE,OAAQ,GAAM,QAASK,EAAgB,QAAS,OAAQ,EAAG,GAE1GL,EAAoB,uBAAyB,CAAE,OAAQ,GAAO,QAASK,EAAgB,QAAS,OAAQ,CAAE,CAElH,OAAShC,EAAO,CACZ2B,EAAoB,uBAAyB,CAAE,OAAQ,GAAO,QAAS,mCAAmC3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CACzI,CAGA,GAAI,CACA,IAAMiC,EAAc,MAAMhD,EAA0B,sBAAsBuC,CAAe,EACrFS,EAAY,QACZR,GAAS,GACTE,EAAoB,sBAAwB,CAAE,OAAQ,GAAM,QAASM,EAAY,QAAS,OAAQ,EAAG,GAErGN,EAAoB,sBAAwB,CAAE,OAAQ,GAAO,QAASM,EAAY,QAAS,OAAQ,CAAE,CAE7G,OAASjC,EAAO,CACZ2B,EAAoB,sBAAwB,CAAE,OAAQ,GAAO,QAAS,oCAAoC3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CACzI,CAGA,GAAI,CACA,IAAMkC,EAAkB,MAAMjD,EAA0B,mBAAmBuC,CAAe,EACtFU,EAAgB,QAChBT,GAAS,EACTE,EAAoB,mBAAqB,CAAE,OAAQ,GAAM,QAASO,EAAgB,QAAS,OAAQ,CAAE,GAErGP,EAAoB,mBAAqB,CAAE,OAAQ,GAAO,QAASO,EAAgB,QAAS,OAAQ,CAAE,CAE9G,OAASlC,EAAO,CACZ2B,EAAoB,mBAAqB,CAAE,OAAQ,GAAO,QAAS,+BAA+B3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CACjI,CAGA,GAAI,CACA,IAAMmC,EAAiB,MAAMlD,EAA0B,yBAAyBuC,CAAe,EAC3FW,EAAe,QACnBV,GAAS,GACLE,EAAoB,yBAA2B,CAAE,OAAQ,GAAM,QAASQ,EAAe,QAAS,OAAQ,EAAG,GAE3GR,EAAoB,yBAA2B,CAAE,OAAQ,GAAO,QAASQ,EAAe,QAAS,OAAQ,CAAE,CAEnH,OAASnC,EAAO,CACZ2B,EAAoB,yBAA2B,CAAE,OAAQ,GAAO,QAAS,qCAAqC3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CAC7I,CAGA,GAAI,CACA,IAAMoC,EAAY,MAAMnD,EAA0B,4BAA4BuC,CAAe,EACzFY,EAAU,QACdX,GAAS,GACLE,EAAoB,4BAA8B,CAAE,OAAQ,GAAM,QAASS,EAAU,QAAS,OAAQ,EAAG,GAEzGT,EAAoB,4BAA8B,CAAE,OAAQ,GAAO,QAASS,EAAU,QAAS,OAAQ,CAAE,CAEjH,OAASpC,EAAO,CACZ2B,EAAoB,4BAA8B,CAAE,OAAQ,GAAO,QAAS,qBAAqB3B,EAAM,OAAO,GAAI,OAAQ,CAAE,CAChI,CAGI,MAAMf,EAA0B,uBAAuBuC,CAAe,GACtEC,GAAS,EACTE,EAAoB,iBAAmB,CAAE,OAAQ,GAAM,QAAS,2BAA4B,OAAQ,CAAE,GAEtGA,EAAoB,iBAAmB,CAAE,OAAQ,GAAO,QAAS,2BAA4B,OAAQ,CAAE,EAIvG,MAAM1C,EAA0B,oBAAoBuC,CAAe,GACnEC,GAAS,EACTE,EAAoB,cAAgB,CAAE,OAAQ,GAAM,QAAS,wBAAyB,OAAQ,CAAE,GAEhGA,EAAoB,cAAgB,CAAE,OAAQ,GAAO,QAAS,wBAAyB,OAAQ,CAAE,EAIjG,MAAM1C,EAA0B,uBAAuBuC,CAAe,GACtEC,GAAS,GACTE,EAAoB,iBAAmB,CAAE,OAAQ,GAAM,QAAS,2BAA4B,OAAQ,EAAG,GAEvGA,EAAoB,iBAAmB,CAAE,OAAQ,GAAO,QAAS,2BAA4B,OAAQ,CAAE,EAG3G,IAAMU,EAAa,KAAK,MAAOZ,EAAQC,EAAY,GAAG,EAGhDY,EAAkB,GAClBC,EAAe,OAAO,OAAOZ,CAAmB,EAAE,OAAOa,GAAKA,EAAE,MAAM,EAAE,OAiB9E,MAfe,CACX,MAAOH,GAAc,GAAK,OAASA,GAAc,GAAK,SAAWA,GAAc,GAAK,MAAQ,WAC5F,MAAOA,EACP,MAAOA,GAAc,GAAK,QAAUA,GAAc,GAAK,SAAWA,GAAc,GAAK,SAAW,MAChG,oBAAAV,EACA,UAAW,KAAK,IAAI,EACpB,QAAS,sBAAsBF,CAAK,IAAIC,CAAQ,4BAA4Ba,CAAY,IAAID,CAAe,cAC3G,WAAY,GACZ,aAAcC,EACd,YAAaD,EACb,YAAaV,EACb,iBAAkB,GACtB,CAIJ,OAAS5B,EAAO,CACZ,eAAQ,MAAM,qCAAsCA,EAAM,OAAO,EAC1D,CACH,MAAO,UACP,MAAO,EACP,MAAO,MACP,oBAAqB,CAAC,EACtB,UAAW,KAAK,IAAI,EACpB,QAAS,wBAAwBA,EAAM,OAAO,GAC9C,WAAY,EAChB,CACJ,CACJ,CAGA,aAAa,iBAAiBwB,EAAiB,CAC3C,GAAI,CACA,GAAI,CAACA,EAAgB,cACjB,MAAO,CAAE,OAAQ,GAAO,QAAS,6BAA8B,EAInE,IAAMiB,EAAY,CACd,+BACA,gJACA,4CACA,eAAiB,IAAI,OAAO,GAAI,CACpC,EAEA,QAAWC,KAAYD,EAAW,CAElC,IAAME,EADU,IAAI,YAAY,EACL,OAAOD,CAAQ,EACpC/B,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAE9CE,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAAF,CAAG,EACtBa,EAAgB,cAChBmB,CACJ,EAEMzB,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAAP,CAAG,EACtBa,EAAgB,cAChBX,CACJ,EAGI,GADkB,IAAI,YAAY,EAAE,OAAOK,CAAS,IAC9BwB,EAClB,MAAO,CAAE,OAAQ,GAAO,QAAS,4BAA4BA,EAAS,UAAU,EAAG,EAAE,CAAC,KAAM,CAEpG,CAEA,MAAO,CAAE,OAAQ,GAAM,QAAS,iDAAkD,CACtF,OAAS1C,EAAO,CACZ,eAAQ,MAAM,kCAAmCA,EAAM,OAAO,EACvD,CAAE,OAAQ,GAAO,QAAS,2BAA2BA,EAAM,OAAO,EAAG,CAChF,CACJ,CAEA,aAAa,sBAAsBwB,EAAiB,CAChD,GAAI,CACA,GAAI,CAACA,EAAgB,aAAe,CAACA,EAAgB,YAAY,YAAc,CAACA,EAAgB,YAAY,UACxG,MAAO,CAAE,OAAQ,GAAO,QAAS,4BAA6B,EAIlE,IAAMoB,EAAUpB,EAAgB,YAAY,WAAW,UAAU,KAC3DqB,EAAQrB,EAAgB,YAAY,WAAW,UAAU,WAE/D,GAAIoB,IAAY,OACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,qBAAqBA,CAAO,iBAAkB,EAGnF,GAAIC,IAAU,SAAWA,IAAU,QAC/B,MAAO,CAAE,OAAQ,GAAO,QAAS,sBAAsBA,CAAK,2BAA4B,EAI5F,GAAI,CASA,GAAI,CARe,MAAM,OAAO,OAAO,UACnC,CAAE,KAAM,OAAQ,OAAQrB,EAAgB,YAAY,SAAU,EAC9DA,EAAgB,YAAY,WAC5B,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,UAAW,SAAS,CACzB,EAGI,MAAO,CAAE,OAAQ,GAAO,QAAS,uBAAwB,CAEjE,OAASsB,EAAa,CAClB,MAAO,CAAE,OAAQ,GAAO,QAAS,+BAA+BA,EAAY,OAAO,EAAG,CAC1F,CAEA,MAAO,CAAE,OAAQ,GAAM,QAAS,kCAAkCD,CAAK,QAAS,CACpF,OAAS7C,EAAO,CACZ,eAAQ,MAAM,4BAA6BA,EAAM,OAAO,EACjD,CAAE,OAAQ,GAAO,QAAS,qBAAqBA,EAAM,OAAO,EAAG,CAC1E,CACJ,CAEA,aAAa,sBAAsBwB,EAAiB,CAChD,GAAI,CACA,GAAI,CAACA,EAAgB,cAAgB,CAACA,EAAgB,aAAa,YAAc,CAACA,EAAgB,aAAa,UAC3G,MAAO,CAAE,OAAQ,GAAO,QAAS,6BAA8B,EAInE,IAAMiB,EAAY,CACd,oCACA,0IACA,4CACA,eAAiB,IAAI,OAAO,GAAI,CACpC,EAEA,QAAWC,KAAYD,EAAW,CAElC,IAAME,EADU,IAAI,YAAY,EACL,OAAOD,CAAQ,EAEpCK,EAAY,MAAM,OAAO,OAAO,KAClC,CAAE,KAAM,QAAS,KAAM,SAAU,EACjCvB,EAAgB,aAAa,WAC7BmB,CACJ,EASI,GAAI,CAPQ,MAAM,OAAO,OAAO,OAChC,CAAE,KAAM,QAAS,KAAM,SAAU,EACjCnB,EAAgB,aAAa,UAC7BuB,EACAJ,CACJ,EAGQ,MAAO,CAAE,OAAQ,GAAO,QAAS,sCAAsCD,EAAS,UAAU,EAAG,EAAE,CAAC,KAAM,CAE9G,CAEA,MAAO,CAAE,OAAQ,GAAM,QAAS,4CAA6C,CACjF,OAAS1C,EAAO,CACZ,eAAQ,MAAM,6BAA8BA,EAAM,OAAO,EAClD,CAAE,OAAQ,GAAO,QAAS,sBAAsBA,EAAM,OAAO,EAAG,CAC3E,CACJ,CAEA,aAAa,uBAAuBwB,EAAiB,CACjD,GAAI,CAEA,GAAI,CAACA,EAAgB,QAAU,EAAEA,EAAgB,kBAAkB,WAC/D,MAAO,CAAE,OAAQ,GAAO,QAAS,kCAAmC,EAIxE,IAAMiB,EAAY,CACd,sCACA,mNACA,4CACA,eAAiB,IAAI,OAAO,GAAI,CACpC,EAEA,QAAWC,KAAYD,EAAW,CAElC,IAAME,EADU,IAAI,YAAY,EACL,OAAOD,CAAQ,EAEpCM,EAAO,MAAM,OAAO,OAAO,KAC7B,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChCxB,EAAgB,OAChBmB,CACJ,EASI,GAAI,CAPQ,MAAM,OAAO,OAAO,OAChC,CAAE,KAAM,OAAQ,KAAM,SAAU,EAChCnB,EAAgB,OAChBwB,EACAL,CACJ,EAGQ,MAAO,CAAE,OAAQ,GAAO,QAAS,iCAAiCD,EAAS,UAAU,EAAG,EAAE,CAAC,KAAM,CAEzG,CAEA,MAAO,CAAE,OAAQ,GAAM,QAAS,4CAA6C,CACjF,OAAS1C,EAAO,CACZ,eAAQ,MAAM,yCAA0CA,EAAM,OAAO,EAC9D,CAAE,OAAQ,GAAO,QAAS,kCAAkCA,EAAM,OAAO,EAAG,CACvF,CACJ,CAWA,aAAa,mBAAmBwB,EAAiB,CAC7C,GAAI,CACA,IAAMyB,EAAUhE,EAA0B,YAC1C,GAAI,CAACgE,GAAW,OAAOA,EAAQ,kBAAqB,WAChD,MAAO,CAAE,OAAQ,GAAO,QAAS,+BAAgC,EAMrE,IAAMC,EAAU,YAAY,OAAO,gBAAgB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CAAC,GACnEC,EAAQ,EACd,QAASvD,EAAI,EAAGA,EAAIuD,EAAOvD,IAEvB,GAAI,CADY,MAAMqD,EAAQ,iBAAiBC,EAASC,EAAO,GAAK,EAEhE,MAAO,CAAE,OAAQ,GAAO,QAAS,gCAAgCvD,EAAI,CAAC,OAAOuD,CAAK,wBAAyB,EAInH,IAAMC,EAAkB,MAAMH,EAAQ,iBAAiBC,EAASC,EAAO,GAAK,EAG5E,OAFAF,EAAQ,SAAS,OAAO,OAAOC,CAAO,EAAE,EAEpCE,EACO,CAAE,OAAQ,GAAO,QAAS,qDAAsD,EAGpF,CAAE,OAAQ,GAAM,QAAS,2BAA2BD,CAAK,4BAA6B,CACjG,OAASnD,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,8BAA8BA,EAAM,OAAO,EAAG,CACnF,CACJ,CAEA,aAAa,yBAAyBwB,EAAiB,CACnD,GAAI,CACA,IAAM6B,EAAc7B,GAAiB,YACrC,GAAI,CAAC6B,GAAe,EAAEA,aAAuB,WACzC,MAAO,CAAE,OAAQ,GAAO,QAAS,uCAAwC,EAE7E,GAAIA,EAAY,WAAW,OAAS,UAChC,MAAO,CAAE,OAAQ,GAAO,QAAS,yCAAyCA,EAAY,WAAW,IAAI,EAAG,EAE5G,GAAIA,EAAY,YACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,6BAA8B,EAKnE,GAAI7B,EAAgB,gBAAkB6B,EAClC,MAAO,CAAE,OAAQ,GAAO,QAAS,oDAAqD,EAI1F,IAAM1C,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC9C2C,EAAQ,IAAI,YAAY,EAAE,OAAO,8BAA8B,EAC/DC,EAAS,MAAM,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,GAAA5C,CAAG,EAAG0C,EAAaC,CAAK,EAChFE,EAAS,MAAM,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,GAAA7C,CAAG,EAAG0C,EAAaE,CAAM,EACvF,OAAI,IAAI,YAAY,EAAE,OAAOC,CAAM,IAAM,+BAC9B,CAAE,OAAQ,GAAO,QAAS,yCAA0C,EAGxE,CAAE,OAAQ,GAAM,QAAS,4DAA6D,CACjG,OAASxD,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,oCAAoCA,EAAM,OAAO,EAAG,CACzF,CACJ,CAEA,aAAa,4BAA4BwB,EAAiB,CACtD,GAAI,CAKA,GAAI,EAFqB,CAAC,CAACA,GAAiB,aAAa,YACrDA,EAAgB,YAAY,WAAW,cAAgB,IAEvD,MAAO,CAAE,OAAQ,GAAO,QAAS,6DAA8D,EAQnG,GAAIA,GAAiB,kBAAkB,EAAG,CACtC,IAAMiC,EAAQjC,EAAgB,UAAU,WAAW,GAAK,CAAC,EACzD,MAAO,CACH,OAAQ,GACR,QAAS,8FAA8FiC,EAAM,WAAa,CAAC,cAAcA,EAAM,cAAgB,CAAC,wBACpK,CACJ,CAEA,MAAO,CACH,OAAQ,GACR,QAAS,0MACb,CACJ,OAASzD,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,oBAAoBA,EAAM,OAAO,EAAG,CACzE,CACJ,CAEA,aAAa,uBAAuBwB,EAAiB,CACjD,GAAI,CAIA,OAAKA,EAAgB,iBAId,CAAE,OAAQ,GAAM,QAAS,wCAAyC,EAH9D,CAAE,OAAQ,GAAO,QAAS,+BAAgC,CAIzE,OAASxB,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,kCAAkCA,EAAM,OAAO,EAAG,CACvF,CACJ,CAEA,aAAa,sBAAsBwB,EAAiB,CAChD,GAAI,CAIA,OAAKA,EAAgB,gBAId,CAAE,OAAQ,GAAM,QAAS,yCAA0C,EAH/D,CAAE,OAAQ,GAAO,QAAS,gCAAiC,CAI1E,OAASxB,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,iCAAiCA,EAAM,OAAO,EAAG,CACtF,CACJ,CAEA,aAAa,sBAAsBwB,EAAiB,CAChD,GAAI,CAIA,OAAKA,EAAgB,QAId,CAAE,OAAQ,GAAM,QAAS,8CAA+C,EAHpE,CAAE,OAAQ,GAAO,QAAS,wBAAyB,CAIlE,OAASxB,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,iCAAiCA,EAAM,OAAO,EAAG,CACtF,CACJ,CAEA,aAAa,yBAAyBwB,EAAiB,CACnD,GAAI,CAIA,OAAKA,EAAgB,mBAId,CAAE,OAAQ,GAAM,QAAS,0CAA2C,EAHhE,CAAE,OAAQ,GAAO,QAAS,iCAAkC,CAI3E,OAASxB,EAAO,CACZ,MAAO,CAAE,OAAQ,GAAO,QAAS,oCAAoCA,EAAM,OAAO,EAAG,CACzF,CACJ,CAEA,aAAa,uBAAuBwB,EAAiB,CACjD,GAAI,CAEA,GAAI,CAACA,EAAgB,qBAAuB,EAAEA,EAAgB,+BAA+B,WACzF,eAAQ,KAAK,gDAAgD,EACtD,GAMX,IAAMmB,EADU,IAAI,YAAY,EACL,OAFV,qCAEyB,EAGpC9B,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAI,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAE,EAClEW,EAAgB,oBAChBmB,CACJ,EAEA,OAAO9B,GAAaA,EAAU,WAAa,CAC/C,OAASb,EAAO,CACZ,eAAQ,MAAM,yCAA0CA,EAAM,OAAO,EAC9D,EACX,CACJ,CAEA,aAAa,oBAAoBwB,EAAiB,CAC9C,GAAI,CACA,GAAI,CAACA,EAAgB,eAAiB,CAACA,EAAgB,cAAc,QAAS,MAAO,GAKrF,IAAMmB,EADU,IAAI,YAAY,EACL,OAFV,kCAEyB,EAGpCe,EAAc,KAAK,MAAM,KAAK,OAAO,GAAKlC,EAAgB,cAAc,WAAaA,EAAgB,cAAc,WAAW,EAAIA,EAAgB,cAAc,WAChKmC,EAAa,IAAI,WAAWhB,EAAW,WAAae,CAAW,EACrE,OAAAC,EAAW,IAAI,IAAI,WAAWhB,CAAU,EAAG,CAAC,EAErCgB,EAAW,YAAchB,EAAW,WAAanB,EAAgB,cAAc,UAC1F,OAASxB,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,qCAAsC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACxG,EACX,CACJ,CAEA,aAAa,uBAAuBwB,EAAiB,CACjD,GAAI,CAEA,IAAMoC,EAAiBpC,EAAgB,mBAAqBA,EAAgB,kBAAkB,QACxFqC,EAAmBrC,EAAgB,qBAAuBA,EAAgB,oBAAoB,QAC9FsC,EAAwBtC,EAAgB,0BAA4BA,EAAgB,yBAAyB,QAEnH,OAAOoC,GAAkBC,GAAoBC,CACjD,OAAS9D,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,wCAAyC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC3G,EACX,CACJ,CAEA,aAAa,iBAAiBwB,EAAiB,CAC3C,GAAI,CACA,MAAI,CAACA,EAAgB,YAAc,CAACA,EAAgB,iBAAyB,GAGtEA,EAAgB,YAAcA,EAAgB,iBAAiB,OAAS,CACnF,OAASxB,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACrG,EACX,CACJ,CAGA,aAAa,yBAAyBwB,EAAiB,CAInD,IAAMuC,EAAO,CACT,CAAC,gBAAiBvC,GAAiB,aAAa,EAChD,CAAC,SAAUA,GAAiB,MAAM,EAClC,CAAC,cAAeA,GAAiB,WAAW,CAChD,EAEA,OAAW,CAACwC,EAAM5E,CAAG,IAAK2E,EAAM,CAC5B,GAAI,CAAC3E,GAAO,EAAEA,aAAe,WACzB,MAAO,GAKX,GAAIA,EAAI,cAAgB,GACpB,OAAAH,EAA0B,UAAU,IAAI,QAAS,6BAA8B,CAAE,QAAS+E,CAAK,CAAC,EACzF,EAEf,CAEA,MAAO,EACX,CAEA,aAAa,yBAAyBxC,EAAiB,CACnD,GAAI,CACA,OAAKA,EAAgB,iBAGCA,EAAgB,iBAAiB,uBACnCA,EAAgB,iBAAiB,4BAJP,EAOlD,OAASxB,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,0CAA2C,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC7G,EACX,CACJ,CAGA,aAAa,UAAUwB,EAAiB,CACpC,GAAI,CAEA,OAAOA,EAAgB,kBAChBA,EAAgB,iBAAiB,SAAW,IAC5CA,EAAgB,qBAChBA,EAAgB,oBAAsB,QACtCA,EAAgB,aAChBA,EAAgB,uBAAuB,GAClD,OAASxB,EAAO,CACZ,OAAAf,EAA0B,UAAU,IAAI,QAAS,0BAA2B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC7F,EACX,CACJ,CAGA,OAAO,YAAc,CACrB,SAAU,IAAI,IACd,YAAa,IAAI,IACjB,MAAO,IAAI,IAEX,MAAM,iBAAiBiE,EAAYd,EAAQ,GAAIe,EAAW,IAAO,CAC7D,GAAI,OAAOD,GAAe,UAAYA,EAAW,OAAS,IACtD,MAAO,GAGX,IAAM7E,EAAM,OAAO6E,CAAU,GAE7B,GAAI,KAAK,MAAM,IAAI7E,CAAG,EAElB,aAAM,IAAI,QAAQ+E,GAAW,WAAWA,EAAS,KAAK,MAAM,KAAK,OAAO,EAAI,EAAE,EAAI,CAAC,CAAC,EAC7E,KAAK,iBAAiBF,EAAYd,EAAOe,CAAQ,EAG5D,KAAK,MAAM,IAAI9E,EAAK,EAAI,EAExB,GAAI,CACA,IAAMgF,EAAM,KAAK,IAAI,EAEhB,KAAK,SAAS,IAAIhF,CAAG,GACtB,KAAK,SAAS,IAAIA,EAAK,CAAC,CAAC,EAK7B,IAAMiF,EAFa,KAAK,SAAS,IAAIjF,CAAG,EAEL,OAAOkF,GAAMF,EAAME,EAAKJ,CAAQ,EAEnE,OAAIG,EAAgB,QAAUlB,EACnB,IAGXkB,EAAgB,KAAKD,CAAG,EACxB,KAAK,SAAS,IAAIhF,EAAKiF,CAAe,EAC/B,GACX,QAAE,CACE,KAAK,MAAM,OAAOjF,CAAG,CACzB,CACJ,EAEA,MAAM,oBAAoB6E,EAAYd,EAAQ,EAAGe,EAAW,IAAQ,CAChE,GAAI,OAAOD,GAAe,UAAYA,EAAW,OAAS,IACtD,MAAO,GAGX,IAAM7E,EAAM,QAAQ6E,CAAU,GAE9B,GAAI,KAAK,MAAM,IAAI7E,CAAG,EAClB,aAAM,IAAI,QAAQ+E,GAAW,WAAWA,EAAS,KAAK,MAAM,KAAK,OAAO,EAAI,EAAE,EAAI,CAAC,CAAC,EAC7E,KAAK,oBAAoBF,EAAYd,EAAOe,CAAQ,EAG/D,KAAK,MAAM,IAAI9E,EAAK,EAAI,EAExB,GAAI,CACA,IAAMgF,EAAM,KAAK,IAAI,EAEhB,KAAK,YAAY,IAAIhF,CAAG,GACzB,KAAK,YAAY,IAAIA,EAAK,CAAC,CAAC,EAIhC,IAAMiF,EADa,KAAK,YAAY,IAAIjF,CAAG,EACR,OAAOkF,GAAMF,EAAME,EAAKJ,CAAQ,EAEnE,OAAIG,EAAgB,QAAUlB,EACnB,IAGXkB,EAAgB,KAAKD,CAAG,EACxB,KAAK,YAAY,IAAIhF,EAAKiF,CAAe,EAClC,GACX,QAAE,CACE,KAAK,MAAM,OAAOjF,CAAG,CACzB,CACJ,EAEA,SAAU,CACN,IAAMgF,EAAM,KAAK,IAAI,EACfG,EAAS,KAEf,OAAW,CAACnF,EAAKoF,CAAU,IAAK,KAAK,SAAS,QAAQ,EAAG,CACrD,GAAI,KAAK,MAAM,IAAIpF,CAAG,EAAG,SAEzB,IAAMqF,EAAQD,EAAW,OAAOF,GAAMF,EAAME,EAAKC,CAAM,EACnDE,EAAM,SAAW,EACjB,KAAK,SAAS,OAAOrF,CAAG,EAExB,KAAK,SAAS,IAAIA,EAAKqF,CAAK,CAEpC,CAEA,OAAW,CAACrF,EAAKoF,CAAU,IAAK,KAAK,YAAY,QAAQ,EAAG,CACxD,GAAI,KAAK,MAAM,IAAIpF,CAAG,EAAG,SAEzB,IAAMqF,EAAQD,EAAW,OAAOF,GAAMF,EAAME,EAAKC,CAAM,EACnDE,EAAM,SAAW,EACjB,KAAK,YAAY,OAAOrF,CAAG,EAE3B,KAAK,YAAY,IAAIA,EAAKqF,CAAK,CAEvC,CAEA,QAAWC,KAAW,KAAK,MAAM,KAAK,EAAG,CACrC,IAAMC,EAAe,SAASD,EAAQ,MAAM,GAAG,EAAE,IAAI,CAAC,GAAK,EACvDN,EAAMO,EAAe,KACrB,KAAK,MAAM,OAAOD,CAAO,CAEjC,CACJ,CACJ,EAEI,OAAO,aAAanE,EAAM,CACtB,GAAI,CAACA,GAAQA,EAAK,SAAW,GACzB,MAAM,IAAI,MAAM,+BAA+B,EAInD,GADoB,IAAI,IAAIA,CAAI,EAChB,KAAO,GACnB,MAAM,IAAI,MAAM,+BAA+B,EAGnD,MAAO,EACX,CAGA,OAAO,UAAY,CACf,KAAM,CAAC,EACP,QAAS,IACT,iBAAkB,GAGlB,MAAO,CACH,KAAK,iBAAmB,KAAK,sBAAsB,EAC/C,KAAK,kBACL,QAAQ,IAAI,oEAAoE,CAExF,EAEA,uBAAwB,CACpB,OACK,OAAO,QAAY,KAAe,IAClC,CAAC,OAAO,YAAc,CAAC,OAAO,kBAC9B,OAAO,SAAS,UAAY,CAAC,OAAO,SAAS,SAAS,SAAS,WAAW,GAC1E,CAAC,OAAO,SAAS,SAAS,SAAS,WAAW,GAC9C,CAAC,OAAO,SAAS,SAAS,SAAS,QAAQ,GAC3C,OAAO,OAAO,iBAAqB,KAAe,CAAC,OAAO,SAAS,OAAO,SAAS,OAAO,CAEnG,EAEA,IAAIqE,EAAOC,EAASC,EAAU,CAAC,EAAG,CAC9B,IAAMC,EAAmB,KAAK,gBAAgBD,CAAO,EAC/CE,EAAW,CACb,UAAW,KAAK,IAAI,EACpB,MAAAJ,EACA,QAAAC,EACA,QAASE,EACT,GAAI,OAAO,gBAAgB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,CACpD,EAUA,GARA,KAAK,KAAK,KAAKC,CAAQ,EAGnB,KAAK,KAAK,OAAS,KAAK,UACxB,KAAK,KAAO,KAAK,KAAK,MAAM,CAAC,KAAK,OAAO,GAIzC,KAAK,iBACL,GAAIJ,IAAU,QAEV,QAAQ,MAAM,uBAAkBC,CAAO,iBAAiB,KAAK,mBAAmBA,CAAO,CAAC,GAAG,UACpFD,IAAU,OAEjB,QAAQ,KAAK,6BAAmBC,CAAO,EAAE,MAGzC,aAIAD,IAAU,QACV,QAAQ,MAAM,uBAAkBC,CAAO,GAAI,CAAE,UAAWE,GAAkB,aAAa,MAAQ,SAAU,CAAC,EACnGH,IAAU,OACjB,QAAQ,KAAK,6BAAmBC,CAAO,GAAI,CAAE,QAASE,CAAiB,CAAC,EAExE,QAAQ,IAAI,gBAAgBF,CAAO,GAAIE,CAAgB,CAGnE,EAGA,mBAAmBF,EAAS,CACxB,IAAMI,EAAOJ,EAAQ,MAAM,EAAE,EAAE,OAAO,CAACK,EAAGC,KACtCD,GAAMA,GAAK,GAAKA,EAAKC,EAAE,WAAW,CAAC,EAC5BD,EAAIA,GACZ,CAAC,EACJ,OAAO,KAAK,IAAID,CAAI,EAAE,SAAS,EAAE,EAAE,UAAU,EAAG,CAAC,EAAE,YAAY,CACnE,EAEA,gBAAgBH,EAAS,CACrB,GAAI,CAACA,GAAW,OAAOA,GAAY,SAC/B,OAAOA,EAGX,IAAMM,EAAoB,CACtB,OAAQ,UAAW,YAAa,SAAU,aAC1C,aAAc,SAAU,QAAS,MAAO,SAAU,QAClD,eAAgB,OAAQ,WAAY,cAAe,aACvD,EAEMC,EAAY,CAAC,EACnB,OAAW,CAACjG,EAAKkG,CAAK,IAAK,OAAO,QAAQR,CAAO,EACzBM,EAAkB,KAAKG,GACvCA,EAAQ,KAAKnG,CAAG,GAAM,OAAOkG,GAAU,UAAYC,EAAQ,KAAKD,CAAK,CACzE,EAGID,EAAUjG,CAAG,EAAI,aACV,OAAOkG,GAAU,UAAYA,EAAM,OAAS,IACnDD,EAAUjG,CAAG,EAAIkG,EAAM,UAAU,EAAG,GAAG,EAAI,iBACpCA,aAAiB,aAAeA,aAAiB,WACxDD,EAAUjG,CAAG,EAAI,IAAIkG,EAAM,YAAY,IAAI,IAAIA,EAAM,YAAcA,EAAM,MAAM,WACxEA,GAAS,OAAOA,GAAU,UAAY,CAAC,MAAM,QAAQA,CAAK,EAEjED,EAAUjG,CAAG,EAAI,KAAK,gBAAgBkG,CAAK,EAE3CD,EAAUjG,CAAG,EAAIkG,EAGzB,OAAOD,CACX,EAEA,QAAQT,EAAQ,KAAM,CAClB,OAAIA,EACO,KAAK,KAAK,OAAOY,GAAOA,EAAI,QAAUZ,CAAK,EAE/C,CAAC,GAAG,KAAK,IAAI,CACxB,EAEA,WAAY,CACR,KAAK,KAAO,CAAC,CACjB,EAGA,MAAM,kBAAkBa,EAAWZ,EAASC,EAAU,CAAC,EAAG,CACtD,GAAK,KAAK,iBAIV,GAAI,CAEA,IAAMY,EAAgB,CAClB,UAAAD,EACA,UAAW,KAAK,IAAI,EACpB,UAAW,UAAU,UAAU,UAAU,EAAG,GAAG,EAC/C,IAAK,OAAO,SAAS,KAAK,UAAU,EAAG,GAAG,CAC9C,EAKI,OAAO,YACP,QAAQ,IAAI,uCAAwCC,CAAa,CAEzE,MAAY,CAEZ,CACJ,CACJ,EAGA,aAAa,qBAAsB,CAC/B,GAAI,CAEA,GAAI,CAmBA,OAlBgB,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,OACN,WAAY,OAChB,EACA,GAQA,CAAC,YAAa,YAAY,CAC9B,CAKJ,OAASC,EAAW,CAChB,OAAA1G,EAA0B,UAAU,IAAI,OAAQ,0DAA2D,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAGvH,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,OACN,WAAY,OAChB,EACA,GACA,CAAC,YAAa,YAAY,CAC9B,CAKJ,CACJ,OAAS3F,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,6BAA8B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACjG,IAAI,MAAM,2CAA2C,CAC/D,CACJ,CAGA,aAAa,sBAAuB,CAChC,GAAI,CAEA,GAAI,CAYA,OAXgB,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,QACN,WAAY,OAChB,EACA,GACA,CAAC,OAAQ,QAAQ,CACrB,CAKJ,OAAS2F,EAAW,CAChB,OAAA1G,EAA0B,UAAU,IAAI,OAAQ,0DAA2D,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAGvH,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,QACN,WAAY,OAChB,EACA,GACA,CAAC,OAAQ,QAAQ,CACrB,CAKJ,CACJ,OAAS3F,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,8BAA+B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAClG,IAAI,MAAM,gDAAgD,CACpE,CACJ,CAGA,aAAa,SAAS4F,EAAYxF,EAAM,CACpC,GAAI,CACA,IAAMI,EAAU,IAAI,YACdI,EAAa,OAAOR,GAAS,SAAWI,EAAQ,OAAOJ,CAAI,EAAIA,EAGrE,GAAI,CACA,IAAM2C,EAAY,MAAM,OAAO,OAAO,KAClC,CACI,KAAM,QACN,KAAM,SACV,EACA6C,EACAhF,CACJ,EAEA,OAAO,MAAM,KAAK,IAAI,WAAWmC,CAAS,CAAC,CAC/C,OAAS8C,EAAa,CAClB5G,EAA0B,UAAU,IAAI,OAAQ,yCAA0C,CAAE,MAAO4G,EAAY,OAAQ,CAAC,EAExH,IAAM9C,EAAY,MAAM,OAAO,OAAO,KAClC,CACI,KAAM,QACN,KAAM,SACV,EACA6C,EACAhF,CACJ,EAEA,OAAO,MAAM,KAAK,IAAI,WAAWmC,CAAS,CAAC,CAC/C,CACJ,OAAS/C,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,sBAAuB,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC1F,IAAI,MAAM,qBAAqB,CACzC,CACJ,CAGA,aAAa,gBAAgB8F,EAAW/C,EAAW3C,EAAM,CACrD,GAAI,CAGA,IAAMI,EAAU,IAAI,YACdI,EAAa,OAAOR,GAAS,SAAWI,EAAQ,OAAOJ,CAAI,EAAIA,EAC/D2F,EAAkB,IAAI,WAAWhD,CAAS,EAKhD,GAAI,CAgBA,OAdgB,MAAM,OAAO,OAAO,OAChC,CACI,KAAM,QACN,KAAM,SACV,EACA+C,EACAC,EACAnF,CACJ,CAOJ,MAAsB,CAmBlB,OAdgB,MAAM,OAAO,OAAO,OAChC,CACI,KAAM,QACN,KAAM,SACV,EACAkF,EACAC,EACAnF,CACJ,CAOJ,CACJ,OAASZ,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,gCAAiC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACpG,IAAI,MAAM,oCAAoC,CACxD,CACJ,CAGA,aAAa,qBAAqBgG,EAASC,EAAoB,OAAQ,CACnE,GAAI,CACA,GAAI,CAAC,MAAM,QAAQD,CAAO,GAAKA,EAAQ,SAAW,EAC9C,MAAM,IAAI,MAAM,yBAAyB,EAG7C,IAAME,EAAW,IAAI,WAAWF,CAAO,EAGvC,GAAIE,EAAS,OAAS,GAClB,MAAM,IAAI,MAAM,6CAA6C,EAEjE,GAAIA,EAAS,OAAS,IAClB,MAAM,IAAI,MAAM,qCAAqC,EAIzD,IAAMC,EAAOlH,EAA0B,UAAUiH,CAAQ,EAGzD,GAAI,CAACC,GAAQA,EAAK,MAAQ,GACtB,MAAM,IAAI,MAAM,+CAA+C,EAInE,GAAIA,EAAK,SAAS,SAAW,EACzB,MAAM,IAAI,MAAM,qDAAqDA,EAAK,SAAS,MAAM,EAAE,EAI/F,IAAMC,EAAgBD,EAAK,SAAS,CAAC,EACrC,GAAIC,EAAc,MAAQ,GACtB,MAAM,IAAI,MAAM,8CAA8C,EAIlE,IAAMC,EAASD,EAAc,SAAS,CAAC,EACvC,GAAIC,EAAO,MAAQ,EACf,MAAM,IAAI,MAAM,kDAAkD,EAItE,IAAMC,EAAWD,EAAO,MAClBE,EAAYtH,EAA0B,YAAYqH,CAAQ,EAU1DE,EAPkB,CACpB,KAAQ,CAAC,mBAAmB,EAC5B,MAAS,CAAC,mBAAmB,EAC7B,IAAO,CAAC,sBAAsB,EAC9B,UAAW,CAAC,yBAA0B,yBAAyB,CACnE,EAEqCP,CAAiB,EACtD,GAAI,CAACO,EACD,MAAM,IAAI,MAAM,sBAAsBP,CAAiB,EAAE,EAG7D,GAAI,CAACO,EAAa,SAASD,CAAS,EAChC,MAAM,IAAI,MAAM,mCAAmCC,EAAa,KAAK,MAAM,CAAC,SAASD,CAAS,EAAE,EAIpG,GAAIN,IAAsB,QAAUA,IAAsB,QAAS,CAC/D,GAAIG,EAAc,SAAS,OAAS,EAChC,MAAM,IAAI,MAAM,qCAAqC,EAGzD,IAAMK,EAAWL,EAAc,SAAS,CAAC,EACzC,GAAIK,EAAS,MAAQ,EACjB,MAAM,IAAI,MAAM,8CAA8C,EAGlE,IAAMC,EAAiBzH,EAA0B,YAAYwH,EAAS,KAAK,EAQ3E,GAAI,CALgB,CAChB,sBAAuB,QACvB,eAAgB,OACpB,EAEiBC,CAAc,EAC3B,MAAM,IAAI,MAAM,qCAAqCA,CAAc,EAAE,CAI7E,CAGA,IAAMC,EAAqBR,EAAK,SAAS,CAAC,EAC1C,GAAIQ,EAAmB,MAAQ,EAC3B,MAAM,IAAI,MAAM,uCAAuC,EAI3D,GAAIA,EAAmB,MAAM,CAAC,IAAM,EAChC,MAAM,IAAI,MAAM,gDAAgDA,EAAmB,MAAM,CAAC,CAAC,EAAE,EAIjG,GAAIV,IAAsB,QAAUA,IAAsB,QAAS,CAC/D,IAAMW,EAAYD,EAAmB,MAAM,MAAM,CAAC,EAGlD,GAAIC,EAAU,CAAC,IAAM,EACjB,MAAM,IAAI,MAAM,gEAAgEA,EAAU,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,EAI/G,IAAMC,EAAgB,CAClB,QAAS,GACT,QAAS,EACb,EAIMC,EADiB7H,EAA0B,YAAYmH,EAAc,SAAS,CAAC,EAAE,KAAK,IACvD,sBAAwB,QAAU,QACjEW,EAAeF,EAAcC,CAAS,EAE5C,GAAIF,EAAU,SAAWG,EACrB,MAAM,IAAI,MAAM,6BAA6BD,CAAS,cAAcC,CAAY,SAASH,EAAU,MAAM,EAAE,CAEnH,CAGA,GAAI,CACA,IAAMI,EAAYf,IAAsB,SAAWA,IAAsB,OACnE,CAAE,KAAMA,EAAmB,WAAY,OAAQ,EAC/C,CAAE,KAAMA,CAAkB,EAE1BgB,EAAShB,IAAsB,QAAU,CAAC,QAAQ,EAAI,CAAC,EAE7D,MAAM,OAAO,OAAO,UAAU,OAAQC,EAAS,OAAQc,EAAW,GAAOC,CAAM,CACnF,OAASC,EAAa,CAElB,GAAIjB,IAAsB,SAAWA,IAAsB,OACvD,GAAI,CACA,IAAMe,EAAY,CAAE,KAAMf,EAAmB,WAAY,OAAQ,EAC3DgB,EAAShB,IAAsB,QAAU,CAAC,QAAQ,EAAI,CAAC,EAC7D,MAAM,OAAO,OAAO,UAAU,OAAQC,EAAS,OAAQc,EAAW,GAAOC,CAAM,CACnF,OAASE,EAAe,CACpB,MAAM,IAAI,MAAM,iCAAiCA,EAAc,OAAO,EAAE,CAC5E,KAEA,OAAM,IAAI,MAAM,iCAAiCD,EAAY,OAAO,EAAE,CAE9E,CAIA,MAAO,EACX,OAASE,EAAK,CACV,MAAAnI,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAChF,MAAOmI,EAAI,QACX,UAAWnB,CACf,CAAC,EACK,IAAI,MAAM,0BAA0BmB,EAAI,OAAO,EAAE,CAC3D,CACJ,CAGA,OAAO,UAAU1H,EAAO2H,EAAS,EAAG,CAChC,GAAIA,GAAU3H,EAAM,OAChB,OAAO,KAGX,IAAM4H,EAAM5H,EAAM2H,CAAM,EACpBE,EAAeF,EAAS,EAE5B,GAAIE,GAAgB7H,EAAM,OACtB,MAAM,IAAI,MAAM,2BAA2B,EAG/C,IAAI4B,EAAS5B,EAAM6H,CAAY,EAC3BC,EAAcD,EAAe,EAGjC,GAAIjG,EAAS,IAAM,CACf,IAAMmG,EAAiBnG,EAAS,IAChC,GAAImG,EAAiB,EACjB,MAAM,IAAI,MAAM,wBAAwB,EAG5CnG,EAAS,EACT,QAAS1B,EAAI,EAAGA,EAAI6H,EAAgB7H,IAAK,CACrC,GAAI4H,EAAc5H,GAAKF,EAAM,OACzB,MAAM,IAAI,MAAM,wBAAwB,EAE5C4B,EAAUA,GAAU,EAAK5B,EAAM8H,EAAc5H,CAAC,CAClD,CACA4H,GAAeC,CACnB,CAEA,GAAID,EAAclG,EAAS5B,EAAM,OAC7B,MAAM,IAAI,MAAM,qCAAqC,EAGzD,IAAM4F,EAAQ5F,EAAM,MAAM8H,EAAaA,EAAclG,CAAM,EACrDoG,EAAO,CACT,IAAKJ,EACL,OAAQhG,EACR,MAAOgE,EACP,SAAU,CAAC,CACf,EAGA,GAAIgC,IAAQ,IAAQA,IAAQ,GAAM,CAC9B,IAAIK,EAAc,EAClB,KAAOA,EAAcrC,EAAM,QAAQ,CAC/B,IAAMsC,EAAQ3I,EAA0B,UAAUqG,EAAOqC,CAAW,EACpE,GAAI,CAACC,EAAO,MACZF,EAAK,SAAS,KAAKE,CAAK,EACxBD,EAAcA,EAAc,EAAIC,EAAM,YAAcA,EAAM,MAC9D,CACJ,CAGA,OAAAF,EAAK,YAAcF,EAAcD,EAE1BG,CACX,CAGA,OAAO,YAAYhI,EAAO,CACtB,GAAI,CAACA,GAASA,EAAM,SAAW,EAC3B,MAAM,IAAI,MAAM,WAAW,EAG/B,IAAMmI,EAAQ,CAAC,EAGTC,EAAQ,KAAK,MAAMpI,EAAM,CAAC,EAAI,EAAE,EAChCqI,EAASrI,EAAM,CAAC,EAAI,GAC1BmI,EAAM,KAAKC,CAAK,EAChBD,EAAM,KAAKE,CAAM,EAGjB,IAAIzC,EAAQ,EACZ,QAAS1F,EAAI,EAAGA,EAAIF,EAAM,OAAQE,IAC9B0F,EAASA,GAAS,EAAM5F,EAAME,CAAC,EAAI,IAC7BF,EAAME,CAAC,EAAI,MACbiI,EAAM,KAAKvC,CAAK,EAChBA,EAAQ,GAIhB,OAAOuC,EAAM,KAAK,GAAG,CACzB,CAGA,OAAO,kBAAkBtB,EAAW,CAGhC,GAAI,CADa,sBACH,KAAKA,CAAS,EACxB,MAAM,IAAI,MAAM,uBAAuBA,CAAS,EAAE,EAGtD,IAAMsB,EAAQtB,EAAU,MAAM,GAAG,EAAE,IAAI,MAAM,EAG7C,GAAIsB,EAAM,CAAC,EAAI,EACX,MAAM,IAAI,MAAM,gCAAgCA,EAAM,CAAC,CAAC,EAAE,EAI9D,IAAKA,EAAM,CAAC,IAAM,GAAKA,EAAM,CAAC,IAAM,IAAMA,EAAM,CAAC,EAAI,GACjD,MAAM,IAAI,MAAM,iCAAiCA,EAAM,CAAC,CAAC,uCAAuCA,EAAM,CAAC,CAAC,GAAG,EAG/G,MAAO,EACX,CAGA,aAAa,6BAA6B/B,EAAWkC,EAAYpF,EAAU,OAAQ,CAC/E,GAAI,CAEA,GAAI,CAAC,CAAC,OAAQ,OAAO,EAAE,SAASA,CAAO,EACnC,MAAM,IAAI,MAAM,kBAAkB,EAGtC,IAAMqF,EAAW,MAAM,OAAO,OAAO,UAAU,OAAQnC,CAAS,EAC1DE,EAAU,MAAM,KAAK,IAAI,WAAWiC,CAAQ,CAAC,EAEnD,MAAMhJ,EAA0B,qBAAqB+G,EAASpD,CAAO,EAGrE,IAAMsF,EAAa,CACf,QAAAtF,EACA,QAAAoD,EACA,UAAW,KAAK,IAAI,EACpB,QAAS,KACb,EAGMjF,EAAgB,KAAK,UAAUmH,CAAU,EACzCnF,EAAY,MAAM9D,EAA0B,SAAS+I,EAAYjH,CAAa,EASpF,MAPsB,CAClB,GAAGmH,EACH,UAAAnF,CACJ,CAKJ,OAAS/C,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,2BAA4B,CACzE,MAAOe,EAAM,QACb,QAAA4C,CACJ,CAAC,EACK,IAAI,MAAM,oBAAoBA,CAAO,SAAS5C,EAAM,OAAO,EAAE,CACvE,CACJ,CAGA,aAAa,sBAAsBmI,EAAeC,EAAcC,EAAkB,OAAQ,CACtF,GAAI,CAIA,GAAI,CAACF,GAAiB,OAAOA,GAAkB,SAC3C,MAAM,IAAI,MAAM,+BAA+B,EAGnD,GAAM,CAAE,QAAAvF,EAAS,QAAAoD,EAAS,UAAAsC,EAAW,QAAAC,EAAS,UAAAxF,CAAU,EAAIoF,EAE5D,GAAI,CAACvF,GAAW,CAACoD,GAAW,CAACsC,GAAa,CAACvF,EACvC,MAAM,IAAI,MAAM,2CAA2C,EAG/D,GAAI,CAAC9D,EAA0B,oBAAoB2D,EAASyF,CAAe,EACvE,MAAM,IAAI,MAAM,+BAA+BA,CAAe,SAASzF,CAAO,EAAE,EAKpF,GADe,KAAK,IAAI,EAAI0F,EACf,KACT,MAAM,IAAI,MAAM,+BAA+B,EAGnD,MAAMrJ,EAA0B,qBAAqB+G,EAASpD,CAAO,EAIrE,IAAM7B,EAAgB,KAAK,UADP,CAAE,QAAA6B,EAAS,QAAAoD,EAAS,UAAAsC,EAAW,QAAAC,CAAQ,CACX,EAKhD,GAAI,CAHqB,MAAMtJ,EAA0B,gBAAgBmJ,EAAcrF,EAAWhC,CAAa,EAI3G,MAAM,IAAI,MAAM,yDAAyD,EAI7E,IAAMmF,EAAW,IAAI,WAAWF,CAAO,EAGvC,GAAI,CACA,IAAMgB,EAAYpE,IAAY,OAC1B,CAAE,KAAM,OAAQ,WAAY,OAAQ,EAClC,CAAE,KAAM,QAAS,WAAY,OAAQ,EAErC4F,EAAY5F,IAAY,OAAS,CAAC,EAAI,CAAC,QAAQ,EAYrD,OAVkB,MAAM,OAAO,OAAO,UAClC,OACAsD,EACAc,EACA,GACAwB,CACJ,CAKJ,OAAS7C,EAAW,CAEhB1G,EAA0B,UAAU,IAAI,OAAQ,sDAAuD,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAEnI,IAAMqB,EAAYpE,IAAY,OAC1B,CAAE,KAAM,OAAQ,WAAY,OAAQ,EAClC,CAAE,KAAM,QAAS,WAAY,OAAQ,EAErC4F,EAAY5F,IAAY,OAAS,CAAC,EAAI,CAAC,QAAQ,EAYrD,OAVkB,MAAM,OAAO,OAAO,UAClC,OACAsD,EACAc,EACA,GACAwB,CACJ,CAKJ,CACJ,OAASxI,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAChF,MAAOe,EAAM,QACb,gBAAAqI,CACJ,CAAC,EACK,IAAI,MAAM,oCAAoCrI,EAAM,OAAO,EAAE,CACvE,CACJ,CAGA,aAAa,gBAAgB8F,EAAW,CACpC,GAAI,CACA,IAAMmC,EAAW,MAAM,OAAO,OAAO,UAAU,OAAQnC,CAAS,EAC1DE,EAAU,MAAM,KAAK,IAAI,WAAWiC,CAAQ,CAAC,EAEnD,aAAMhJ,EAA0B,qBAAqB+G,EAAS,MAAM,EAG7DA,CACX,OAAShG,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACtG,IAAI,MAAM,iCAAiC,CACrD,CACJ,CAGA,aAAa,gBAAgBgG,EAAS,CAClC,GAAI,CACA,MAAM/G,EAA0B,qBAAqB+G,EAAS,MAAM,EAEpE,IAAME,EAAW,IAAI,WAAWF,CAAO,EAGvC,GAAI,CAaA,OAZkB,MAAM,OAAO,OAAO,UAClC,OACAE,EACA,CACI,KAAM,OACN,WAAY,OAChB,EACA,GACA,CAAC,CACL,CAIJ,OAASP,EAAW,CAChB,OAAA1G,EAA0B,UAAU,IAAI,OAAQ,oCAAqC,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAG/F,MAAM,OAAO,OAAO,UAClC,OACAO,EACA,CACI,KAAM,OACN,WAAY,OAChB,EACA,GACA,CAAC,CACL,CAIJ,CACJ,OAASlG,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,kCAAmC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACtG,IAAI,MAAM,iCAAiC,CACrD,CACJ,CAIA,OAAO,aAAayI,EAAkB,CACtC,GAAIA,aAA4B,UAAW,CACvC,IAAMC,EAAOzJ,EAA0B,aAAa,IAAIwJ,CAAgB,EACxE,OAAOC,EAAOA,EAAK,UAAY,GAAO,EACtC,SAAWD,GAAoBA,EAAiB,kBAE5C,OAAOA,EAAiB,kBAAkB,UAAY,GAG1D,MAAO,EACX,CAEA,aAAa,iCAAiCN,EAAeC,EAAe,KAAMO,EAAU,CAAC,EAAG,CAC5F,GAAI,CACA,GAAI,CAACR,GAAiB,CAACA,EAAc,SAAW,CAACA,EAAc,UAC3D,MAAM,IAAI,MAAM,mCAAmC,EAKvD,IAAMS,EADiB,CAAC,UAAW,YAAa,UAAW,YAAa,SAAS,EAC5C,OAAOC,GAAS,CAACV,EAAcU,CAAK,CAAC,EAE1E,GAAID,EAAc,OAAS,EACvB,MAAA3J,EAA0B,UAAU,IAAI,QAAS,4CAA6C,CAC1F,cAAe2J,EACf,gBAAiB,OAAO,KAAKT,CAAa,CAC9C,CAAC,EACK,IAAI,MAAM,sDAAsDS,EAAc,KAAK,IAAI,CAAC,EAAE,EAIpG,GAAI,CAACR,EACD,MAAAnJ,EAA0B,UAAU,IAAI,QAAS,oEAAqE,CAClH,QAASkJ,EAAc,QACvB,QAASA,EAAc,QAAQ,OAC/B,UAAWA,EAAc,UACzB,QAASA,EAAc,QACvB,aAAc,qCAClB,CAAC,EAGK,IAAI,MAAM,0KACyF,EAI7G,MAAMlJ,EAA0B,qBAAqBkJ,EAAc,QAASA,EAAc,SAAW,MAAM,EAG3G,IAAMW,EAAc,CAAE,GAAGX,CAAc,EACvC,OAAOW,EAAY,UACnB,IAAM/H,EAAgB,KAAK,UAAU+H,CAAW,EAGhD,GAAI,CAFqB,MAAM7J,EAA0B,gBAAgBmJ,EAAcD,EAAc,UAAWpH,CAAa,EAGzH,MAAA9B,EAA0B,UAAU,IAAI,QAAS,sEAAuE,CACpH,QAASkJ,EAAc,QACvB,QAASA,EAAc,QAAQ,OAC/B,UAAWA,EAAc,UACzB,QAASA,EAAc,QACvB,gBAAiB,EACrB,CAAC,EACK,IAAI,MAAM,8HACqE,EAIzF,IAAMY,EAAiB,MAAM9J,EAA0B,wBAAwBkJ,EAAc,OAAO,EAM9FjC,EAAW,IAAI,WAAWiC,EAAc,OAAO,EAC/CvF,EAAUuF,EAAc,SAAW,OAGzC,GAAI,CACA,IAAMrC,EAAY,MAAM,OAAO,OAAO,UAClC,OACAI,EACA,CACI,KAAMtD,EACN,WAAY,OAChB,EACA,GACAA,IAAY,QAAU,CAAC,QAAQ,EAAI,CAAC,CACxC,EAGA,OAAA3D,EAA0B,aAAa,IAAI6G,EAAW,CAClD,QAAS,GACT,mBAAoB,kBACpB,sBAAuB,KAAK,IAAI,CACpC,CAAC,EAEMA,CACX,OAASH,EAAW,CAChB1G,EAA0B,UAAU,IAAI,OAAQ,oCAAqC,CAAE,MAAO0G,EAAU,OAAQ,CAAC,EAGjH,IAAMG,EAAY,MAAM,OAAO,OAAO,UAClC,OACAI,EACA,CACI,KAAMtD,EACN,WAAY,OAChB,EACA,GACAA,IAAY,QAAU,CAAC,QAAQ,EAAI,CAAC,CACxC,EAGA,OAAA3D,EAA0B,aAAa,IAAI6G,EAAW,CAClD,QAAS,GACT,mBAAoB,kBACpB,sBAAuB,KAAK,IAAI,CACpC,CAAC,EAEMA,CACX,CACJ,OAAS9F,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,mCAAoC,CACjF,MAAOe,EAAM,QACb,qBAAsB,qCAC1B,CAAC,EACK,IAAI,MAAM,4DAA4DA,EAAM,OAAO,EAAE,CAC/F,CACJ,CAGA,aAAa,iBAAiB4F,EAAYE,EAAWvF,EAAM,CACvD,GAAI,CAIA,GAAI,EAAEqF,aAAsB,WACxB,MAAA3G,EAA0B,UAAU,IAAI,QAAS,iCAAkC,CAC/E,eAAgB,OAAO2G,EACvB,oBAAqBA,GAAY,WAAW,IAChD,CAAC,EACK,IAAI,MAAM,2CAA2C,EAG/D,GAAI,EAAEE,aAAqB,WACvB,MAAA7G,EAA0B,UAAU,IAAI,QAAS,gCAAiC,CAC9E,cAAe,OAAO6G,EACtB,mBAAoBA,GAAW,WAAW,IAC9C,CAAC,EACK,IAAI,MAAM,0CAA0C,EAI9D,GAAI,CAACvF,GAAQA,EAAK,SAAW,GACzB,MAAM,IAAI,MAAM,qDAAqD,EAGzE,IAAMyI,EAAY,IAAI,WAAWzI,CAAI,EAC/BC,EAAU,IAAI,YAmBhByI,EACAC,EAAmB,KACvB,GAAI,CACAA,EAAmB,MAAM,OAAO,OAAO,WACnC,CACI,KAAM,OACN,OAAQpD,CACZ,EACAF,EACA,GACJ,EAEAqD,EAAkB,MAAM,OAAO,OAAO,UAClC,MACAC,EACA,CACI,KAAM,OACN,KAAM,SACV,EACA,GAGA,CAAC,YAAa,YAAY,CAC9B,CACJ,OAASlJ,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,yBAA0B,CACvE,MAAOe,EAAM,OACjB,CAAC,EACKA,CACV,QAAE,CAIMkJ,IACAjK,EAA0B,cAAciK,CAAgB,EACxDA,EAAmB,KAE3B,CASA,IAAIC,EACJA,EAAa,MAAM,OAAO,OAAO,UAC7B,CACI,KAAM,OACN,KAAM,UACN,KAAMH,EACN,KAAMxI,EAAQ,OAAO,uBAAuB,CAChD,EACAyI,EACA,CACI,KAAM,UACN,OAAQ,GACZ,EACA,GACA,CAAC,UAAW,SAAS,CACzB,EAGA,IAAIG,EACJA,EAAS,MAAM,OAAO,OAAO,UACzB,CACI,KAAM,OACN,KAAM,UACN,KAAMJ,EACN,KAAMxI,EAAQ,OAAO,2BAA2B,CACpD,EACAyI,EACA,CACI,KAAM,OACN,KAAM,SACV,EACA,GACA,CAAC,OAAQ,QAAQ,CACrB,EAGA,IAAII,EACJA,EAAS,MAAM,OAAO,OAAO,UACzB,CACI,KAAM,OACN,KAAM,UACN,KAAML,EACN,KAAMxI,EAAQ,OAAO,4BAA4B,CACrD,EACAyI,EACA,CACI,KAAM,UACN,OAAQ,GACZ,EACA,GACA,CAAC,UAAW,SAAS,CACzB,EAGA,IAAI5F,EACJA,EAAc,MAAM,OAAO,OAAO,UAC9B,CACI,KAAM,OACN,KAAM,UACN,KAAM2F,EACN,KAAMxI,EAAQ,OAAO,wBAAwB,CACjD,EACAyI,EACA,CACI,KAAM,UACN,OAAQ,GACZ,EACA,GACA,CAAC,UAAW,SAAS,CACzB,EAQA,IAAMK,EAAkB,MAAM,OAAO,OAAO,WACxC,CACI,KAAM,OACN,KAAM,UACN,KAAMN,EACN,KAAMxI,EAAQ,OAAO,wBAAwB,CACjD,EACAyI,EACA,GACJ,EACMM,EAAc,IAAI,WAAWD,CAAe,EAO9CE,EAAkB,KAClBC,EACJ,GAAI,CACAD,EAAkB,MAAM,OAAO,OAAO,WAClC,CACI,KAAM,OACN,KAAM,UACN,KAAMR,EACN,KAAMxI,EAAQ,OAAO,2BAA2B,CACpD,EACAyI,EACA,GACJ,EAGAQ,EAAc,MAAMxK,EAA0B,uBAC1C,IAAI,WAAWuK,CAAe,CAClC,CACJ,QAAE,CACMA,IACAvK,EAA0B,cAAcuK,CAAe,EACvDA,EAAkB,KAE1B,CAGA,GAAI,EAAEL,aAAsB,WACxB,MAAAlK,EAA0B,UAAU,IAAI,QAAS,yCAA0C,CACvF,eAAgB,OAAOkK,EACvB,oBAAqBA,GAAY,WAAW,IAChD,CAAC,EACK,IAAI,MAAM,mDAAmD,EAGvE,GAAI,EAAEC,aAAkB,WACpB,MAAAnK,EAA0B,UAAU,IAAI,QAAS,qCAAsC,CACnF,WAAY,OAAOmK,EACnB,gBAAiBA,GAAQ,WAAW,IACxC,CAAC,EACK,IAAI,MAAM,+CAA+C,EAGnE,GAAI,EAAEC,aAAkB,WACpB,MAAApK,EAA0B,UAAU,IAAI,QAAS,qCAAsC,CACnF,WAAY,OAAOoK,EACnB,gBAAiBA,GAAQ,WAAW,IACxC,CAAC,EACK,IAAI,MAAM,+CAA+C,EAGnE,GAAI,EAAEhG,aAAuB,WACzB,MAAApE,EAA0B,UAAU,IAAI,QAAS,0CAA2C,CACxF,gBAAiB,OAAOoE,EACxB,qBAAsBA,GAAa,WAAW,IAClD,CAAC,EACK,IAAI,MAAM,oDAAoD,EAKxE,MAAO,CACH,WAAA8F,EACA,OAAAC,EACA,OAAAC,EACA,YAAAhG,EAIA,YAAAkG,EACA,YAAAE,EACA,UAAW,KAAK,IAAI,EACpB,QAAS,KACb,CACJ,OAASzJ,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,iCAAkC,CAC/E,MAAOe,EAAM,QACb,WAAYA,EAAM,MAClB,eAAgB,OAAO4F,EACvB,cAAe,OAAOE,EACtB,WAAYvF,GAAM,OAClB,oBAAqBqF,GAAY,WAAW,KAC5C,mBAAoBE,GAAW,WAAW,IAC9C,CAAC,EACK,IAAI,MAAM,4CAA4C9F,EAAM,OAAO,EAAE,CAC/E,CACJ,CAEA,aAAa,uBAAuBgG,EAAS,CACzC,IAAM0D,EAAY,IAAI,WAAW1D,CAAO,EAClC2D,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWD,CAAS,EAElE,OADkB,MAAM,KAAK,IAAI,WAAWC,CAAU,CAAC,EACtC,MAAM,EAAG,EAAE,EAAE,IAAIxE,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,GAAG,CACpF,CAGA,OAAO,6BAA8B,CACjC,IAAMyE,EAAY,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EACrDtB,EAAY,KAAK,IAAI,EACrBuB,EAAQ,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAEvD,MAAO,CACH,UAAW,MAAM,KAAKD,CAAS,EAC/B,UAAAtB,EACA,MAAO,MAAM,KAAKuB,CAAK,EACvB,QAAS,KACb,CACJ,CAGA,aAAa,gBAAgBD,EAAWhE,EAAYE,EAAW,CAC3D,GAAI,CACA,GAAI,CAAC8D,GAAa,CAACA,EAAU,WAAa,CAACA,EAAU,WAAa,CAACA,EAAU,MACzE,MAAM,IAAI,MAAM,6BAA6B,EAIjD,IAAME,EAAe,KAAK,IAAI,EAAIF,EAAU,UAC5C,GAAIE,EAAe,KACf,MAAM,IAAI,MAAM,mBAAmB,EAIvC,IAAMC,EAAY,CACd,UAAWH,EAAU,UACrB,UAAWA,EAAU,UACrB,MAAOA,EAAU,MACjB,kBAAmB,KAAK,IAAI,EAC5B,cAAe,MAAM3K,EAA0B,cAAc6G,CAAS,CAC1E,EAGMkE,EAAc,KAAK,UAAUD,CAAS,EACtChH,EAAY,MAAM9D,EAA0B,SAAS2G,EAAYoE,CAAW,EAE5EC,EAAQ,CACV,GAAGF,EACH,UAAAhH,EACA,QAAS,KACb,EAEA,OAAA9D,EAA0B,UAAU,IAAI,OAAQ,+BAAgC,CAC5E,aAAc,KAAK,MAAM6K,EAAe,GAAI,EAAI,GACpD,CAAC,EAEMG,CACX,OAASjK,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,uCAAwC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC3G,IAAI,MAAM,yCAAyCA,EAAM,OAAO,EAAE,CAC5E,CACJ,CAGA,aAAa,gBAAgBiK,EAAOL,EAAW9D,EAAW,CACtD,GAAI,CAKA,GAJA,MAAM,IAAI,QAAQ3B,GAAW,WAAWA,EAAS,KAAK,MAAM,KAAK,OAAO,EAAI,EAAE,EAAI,CAAC,CAAC,EAEpFlF,EAA0B,gBAAgB6G,EAAW,QAAS,CAAC,QAAQ,CAAC,EAEpE,CAACmE,GAAS,CAACL,GAAa,CAAC9D,EACzB,MAAM,IAAI,MAAM,oDAAoD,EAIxE,IAAMoE,EAAiB,CAAC,YAAa,YAAa,QAAS,oBAAqB,gBAAiB,WAAW,EAC5G,QAAWrB,KAASqB,EAChB,GAAI,CAACD,EAAMpB,CAAK,EACZ,MAAM,IAAI,MAAM,2BAA2BA,CAAK,EAAE,EAK1D,GAAI,CAAC5J,EAA0B,0BAA0BgL,EAAM,UAAWL,EAAU,SAAS,GACzFK,EAAM,YAAcL,EAAU,WAC9B,CAAC3K,EAA0B,0BAA0BgL,EAAM,MAAOL,EAAU,KAAK,EACjF,MAAM,IAAI,MAAM,6CAA6C,EAIjE,IAAMO,EAAc,KAAK,IAAI,EAAIF,EAAM,kBACvC,GAAIE,EAAc,KACd,MAAM,IAAI,MAAM,wBAAwB,EAI5C,IAAMC,EAAe,MAAMnL,EAA0B,cAAc6G,CAAS,EAC5E,GAAI,CAAC7G,EAA0B,oBAAoBgL,EAAM,cAAeG,CAAY,EAChF,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMC,EAAY,CAAE,GAAGJ,CAAM,EAC7B,OAAOI,EAAU,UACjB,IAAML,EAAc,KAAK,UAAUK,CAAS,EAG5C,GAAI,CAFqB,MAAMpL,EAA0B,gBAAgB6G,EAAWmE,EAAM,UAAWD,CAAW,EAG5G,MAAM,IAAI,MAAM,yBAAyB,EAG7C,OAAA/K,EAA0B,UAAU,IAAI,OAAQ,6CAA8C,CAC1F,YAAa,KAAK,MAAMkL,EAAc,GAAI,EAAI,GAClD,CAAC,EAEM,EACX,OAASnK,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,2CAA4C,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAC/G,IAAI,MAAM,yCAAyCA,EAAM,OAAO,EAAE,CAC5E,CACJ,CAGA,aAAa,cAAc8F,EAAW,CAClC,GAAI,CACA,IAAMmC,EAAW,MAAM,OAAO,OAAO,UAAU,OAAQnC,CAAS,EAC1Db,EAAO,MAAM,OAAO,OAAO,OAAO,UAAWgD,CAAQ,EAE3D,OADkB,MAAM,KAAK,IAAI,WAAWhD,CAAI,CAAC,EAChC,IAAIE,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CACtE,OAASnF,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,4BAA6B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAChG,IAAI,MAAM,yCAAyC,CAC7D,CACJ,CAGA,OAAO,uBAAwB,CAC3B,IAAM4J,EAAY,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC3D,OAAO,MAAM,KAAKA,CAAS,CAC/B,CAGA,OAAO,0BAA2B,CAC9B,IAAMxI,EAAQ,mBACRC,EAAYD,EAAM,OACpBkJ,EAAS,GAGb,QAAS,EAAI,EAAG,EAAI,EAAG,IAAK,CACxB,IAAIC,EACJ,GACIA,EAAa,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,QACnDA,GAAc,IAAO,IAAMlJ,GAEpCiJ,GAAUlJ,EAAMmJ,EAAalJ,CAAS,CAC1C,CAEA,OAAOiJ,EAAO,MAAM,SAAS,EAAE,KAAK,GAAG,CAC3C,CAGA,aAAa,eAAezF,EAAS2F,EAAepB,EAAQ/F,EAAaoH,EAAWC,EAAiB,EAAG,CACpG,GAAI,CACA,GAAI,CAAC7F,GAAW,OAAOA,GAAY,SAC/B,MAAM,IAAI,MAAM,wBAAwB,EAG5C5F,EAA0B,gBAAgBuL,EAAe,UAAW,CAAC,SAAS,CAAC,EAC/EvL,EAA0B,gBAAgBmK,EAAQ,OAAQ,CAAC,MAAM,CAAC,EAClEnK,EAA0B,gBAAgBoE,EAAa,UAAW,CAAC,SAAS,CAAC,EAE7E,IAAM7C,EAAU,IAAI,YACdmK,EAAcnK,EAAQ,OAAOqE,CAAO,EACpC+F,EAAY,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EACrDC,EAAa,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EACtDvC,EAAY,KAAK,IAAI,EAErB5E,EAAc,GAAMiH,EAAY,OAAS,GACzCG,EAAgB,IAAI,WAAWH,EAAY,OAASjH,CAAW,EACrEoH,EAAc,IAAIH,CAAW,EAC7B,IAAMI,EAAU,OAAO,gBAAgB,IAAI,WAAWrH,CAAW,CAAC,EAClEoH,EAAc,IAAIC,EAASJ,EAAY,MAAM,EAE7C,IAAMK,EAAmB,MAAM,OAAO,OAAO,QACzC,CAAE,KAAM,UAAW,GAAIJ,CAAU,EACjCJ,EACAM,CACJ,EAEMG,EAAW,CACb,GAAIR,EACJ,UAAWnC,EACX,eAAgBoC,EAChB,eAAgBC,EAAY,OAC5B,QAAS,KACb,EAEMO,EAAc,KAAK,UAAUjM,EAA0B,eAAegM,CAAQ,CAAC,EAC/EE,EAAoB,MAAM,OAAO,OAAO,QAC1C,CAAE,KAAM,UAAW,GAAIN,CAAW,EAClCxH,EACA7C,EAAQ,OAAO0K,CAAW,CAC9B,EAEME,EAAU,CACZ,UAAW,MAAM,KAAKR,CAAS,EAC/B,YAAa,MAAM,KAAK,IAAI,WAAWI,CAAgB,CAAC,EACxD,WAAY,MAAM,KAAKH,CAAU,EACjC,aAAc,MAAM,KAAK,IAAI,WAAWM,CAAiB,CAAC,EAC1D,QAAS,KACb,EAEME,EAAgBpM,EAA0B,eAAemM,CAAO,EAChEE,EAAa,KAAK,UAAUD,CAAa,EAEzCE,EAAM,MAAM,OAAO,OAAO,KAC5B,OACAnC,EACA5I,EAAQ,OAAO8K,CAAU,CAC7B,EAEA,OAAAF,EAAQ,IAAM,MAAM,KAAK,IAAI,WAAWG,CAAG,CAAC,EAIrCH,CACX,OAASpL,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,4BAA6B,CAC1E,MAAOe,EAAM,QACb,UAAAyK,CACJ,CAAC,EACK,IAAI,MAAM,kCAAkCzK,EAAM,OAAO,EAAE,CACrE,CACJ,CAGA,aAAa,eAAewL,EAAkBhB,EAAepB,EAAQ/F,EAAaoI,EAAyB,KAAM,CAC7G,GAAI,CACAxM,EAA0B,gBAAgBuL,EAAe,UAAW,CAAC,SAAS,CAAC,EAC/EvL,EAA0B,gBAAgBmK,EAAQ,OAAQ,CAAC,QAAQ,CAAC,EACpEnK,EAA0B,gBAAgBoE,EAAa,UAAW,CAAC,SAAS,CAAC,EAE7E,IAAM6G,EAAiB,CAAC,YAAa,cAAe,aAAc,eAAgB,MAAO,SAAS,EAClG,QAAWrB,KAASqB,EAChB,GAAI,CAACsB,EAAiB3C,CAAK,EACvB,MAAM,IAAI,MAAM,2BAA2BA,CAAK,EAAE,EAI1D,IAAM6C,EAAc,CAAE,GAAGF,CAAiB,EAC1C,OAAOE,EAAY,IACnB,IAAMC,EAAoB1M,EAA0B,eAAeyM,CAAW,EACxEJ,EAAa,KAAK,UAAUK,CAAiB,EASnD,GAAI,CAPa,MAAM,OAAO,OAAO,OACjC,OACAvC,EACA,IAAI,WAAWoC,EAAiB,GAAG,EACnC,IAAI,YAAY,EAAE,OAAOF,CAAU,CACvC,EAGI,MAAArM,EAA0B,UAAU,IAAI,QAAS,0BAA2B,CACxE,cAAe,OAAO,KAAKuM,CAAgB,EAC3C,UAAWA,EAAiB,KAAK,MACrC,CAAC,EACK,IAAI,MAAM,oDAAoD,EAGxE,IAAMX,EAAa,IAAI,WAAWW,EAAiB,UAAU,EACvDI,EAAe,IAAI,WAAWJ,EAAiB,YAAY,EAE3DK,EAA0B,MAAM,OAAO,OAAO,QAChD,CAAE,KAAM,UAAW,GAAIhB,CAAW,EAClCxH,EACAuI,CACJ,EAEMV,EAAc,IAAI,YAAY,EAAE,OAAOW,CAAuB,EAC9DZ,EAAW,KAAK,MAAMC,CAAW,EAEvC,GAAI,CAACD,EAAS,IAAM,CAACA,EAAS,WAAaA,EAAS,iBAAmB,QAAa,CAACA,EAAS,eAC1F,MAAM,IAAI,MAAM,4BAA4B,EAGhD,IAAMa,EAAa,KAAK,IAAI,EAAIb,EAAS,UACzC,GAAIa,EAAa,KACb,MAAM,IAAI,MAAM,yCAAyC,EAG7D,GAAIL,IAA2B,KAAM,CAKjC,GAAIR,EAAS,eAAiBQ,EAC1B,MAAAxM,EAA0B,UAAU,IAAI,QAAS,gEAAiE,CAC9G,SAAUwM,EACV,SAAUR,EAAS,eACnB,UAAWA,EAAS,EACxB,CAAC,EACK,IAAI,MAAM,4CAA4CQ,CAAsB,SAASR,EAAS,cAAc,EAAE,EACjH,GAAIA,EAAS,eAAiBQ,EAAyB,GAC1D,MAAM,IAAI,MAAM,kDAAkDA,CAAsB,SAASR,EAAS,cAAc,EAAE,CAElI,CAEA,IAAML,EAAY,IAAI,WAAWY,EAAiB,SAAS,EACrDb,EAAc,IAAI,WAAWa,EAAiB,WAAW,EAEzDO,EAAyB,MAAM,OAAO,OAAO,QAC/C,CAAE,KAAM,UAAW,GAAInB,CAAU,EACjCJ,EACAG,CACJ,EAGMqB,EADgB,IAAI,WAAWD,CAAsB,EACrB,MAAM,EAAGd,EAAS,cAAc,EAGhEpG,EADU,IAAI,YAAY,EACR,OAAOmH,CAAe,EAE9C,OAAA/M,EAA0B,UAAU,IAAI,OAAQ,iCAAkC,CAC9E,UAAWgM,EAAS,GACpB,eAAgBA,EAAS,eACzB,WAAY,KAAK,MAAMa,EAAa,GAAI,EAAI,GAChD,CAAC,EAEM,CACH,QAASjH,EACT,UAAWoG,EAAS,GACpB,UAAWA,EAAS,UACpB,eAAgBA,EAAS,cAC7B,CACJ,OAASjL,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,4BAA6B,CAAE,MAAOe,EAAM,OAAQ,CAAC,EAChG,IAAI,MAAM,kCAAkCA,EAAM,OAAO,EAAE,CACrE,CACJ,CAEA,OAAO,sBAAuB,CAC1B,GAAIf,EAA0B,kBAC1B,OAAOA,EAA0B,kBAGrC,GAAI,OAAO,OAAW,KAAe,CAAC,QAAQ,SAC1C,MAAM,IAAI,MAAM,mEAAmE,EAGvF,OAAAA,EAA0B,kBAAoBgN,GAAgB,MAAM,EAC7DhN,EAA0B,iBACrC,CAIA,OAAO,gBAAgB4F,EAAS,CAC5B,GAAI,OAAOA,GAAY,SACnB,MAAM,IAAI,MAAM,0BAA0B,EAG9C,IAAMQ,EAAYpG,EAA0B,qBAAqB,EAAE,SAAS4F,EAAS,CACjF,aAAc,CAAC,EACf,aAAc,CAAC,EACf,wBAAyB,GACzB,YAAa,CAAC,SAAU,QAAS,MAAO,OAAQ,UAAU,EAC1D,YAAa,CAAC,OAAO,EACrB,aAAc,GACd,oBAAqB,GACrB,aAAc,CACV,KAAM,GACN,IAAK,GACL,WAAY,GACZ,OAAQ,EACZ,CACJ,CAAC,EAED,OAAO,OAAOQ,CAAS,EAAE,KAAK,EAAE,UAAU,EAAG,GAAI,CACrD,CAGA,OAAO,cAAe,CAClB,OAAO,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,CAChE,CAGA,aAAa,wBAAwBW,EAAS,CAC1C,GAAI,CACA,IAAMxF,EAAU,IAAI,YACd0F,EAAW,IAAI,WAAWF,CAAO,EAGjC2D,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWzD,CAAQ,EAQjE,OAPkB,MAAM,KAAK,IAAI,WAAWyD,CAAU,CAAC,EAGzB,IAAIxE,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAKnF,OAASnF,EAAO,CACZ,MAAAf,EAA0B,UAAU,IAAI,QAAS,qCAAsC,CAAE,MAAOe,EAAM,OAAQ,CAAC,EACzG,IAAI,MAAM,uCAAuC,CAC3D,CACJ,CAEA,OAAO,oBAAoBkF,EAAGC,EAAG,CAC7B,IAAM+G,EAAO,OAAOhH,GAAM,SAAWA,EAAI,KAAK,UAAUA,CAAC,EACnDiH,EAAO,OAAOhH,GAAM,SAAWA,EAAI,KAAK,UAAUA,CAAC,EAEzD,GAAI+G,EAAK,SAAWC,EAAK,OAAQ,CAC7B,IAAIC,EAAQ,EACZ,QAASxM,EAAI,EAAGA,EAAI,KAAK,IAAIsM,EAAK,OAAQC,EAAK,MAAM,EAAGvM,IACpDwM,IAAUF,EAAK,WAAWtM,EAAIsM,EAAK,MAAM,GAAK,IAAMC,EAAK,WAAWvM,EAAIuM,EAAK,MAAM,GAAK,GAE5F,MAAO,EACX,CAEA,IAAI7B,EAAS,EACb,QAAS1K,EAAI,EAAGA,EAAIsM,EAAK,OAAQtM,IAC7B0K,GAAU4B,EAAK,WAAWtM,CAAC,EAAIuM,EAAK,WAAWvM,CAAC,EAGpD,OAAO0K,IAAW,CACtB,CAEA,OAAO,0BAA0B+B,EAAMC,EAAM,CACzC,GAAI,CAAC,MAAM,QAAQD,CAAI,GAAK,CAAC,MAAM,QAAQC,CAAI,EAC3C,MAAO,GAGX,GAAID,EAAK,SAAWC,EAAK,OAAQ,CAC7B,IAAIF,EAAQ,EACNG,EAAS,KAAK,IAAIF,EAAK,OAAQC,EAAK,MAAM,EAChD,QAAS1M,EAAI,EAAGA,EAAI2M,EAAQ3M,IACxBwM,IAAUC,EAAKzM,EAAIyM,EAAK,MAAM,GAAK,IAAMC,EAAK1M,EAAI0M,EAAK,MAAM,GAAK,GAEtE,MAAO,EACX,CAEA,IAAIhC,EAAS,EACb,QAAS,EAAI,EAAG,EAAI+B,EAAK,OAAQ,IAC7B/B,GAAU+B,EAAK,CAAC,EAAIC,EAAK,CAAC,EAG9B,OAAOhC,IAAW,CACtB,CAMA,aAAa,mBAAmBlK,EAAMhB,EAAKoN,EAAK,CAC5C,GAAI,CACA,IAAMlM,EAAa,OAAOF,GAAS,SAAWA,EAAO,KAAK,UAAUA,CAAI,EAClEI,EAAU,IAAI,YACdI,EAAaJ,EAAQ,OAAOF,CAAU,EACtCmM,EAAYjM,EAAQ,OAAOgM,CAAG,EAG9B7L,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAG9CE,EAAY,MAAM,OAAO,OAAO,QAClC,CACI,KAAM,UACN,GAAIF,EACJ,eAAgB8L,CACpB,EACArN,EACAwB,CACJ,EAGME,EAAmB,CACrB,QAAS,MACT,GAAI,MAAM,KAAKH,CAAE,EACjB,KAAM,MAAM,KAAK,IAAI,WAAWE,CAAS,CAAC,EAC1C,IAAK2L,EACL,UAAW,KAAK,IAAI,CACxB,EAEMzL,EAAgB,KAAK,UAAUD,CAAgB,EAC/CG,EAAgBT,EAAQ,OAAOO,CAAa,EAElD,OAAO9B,EAA0B,oBAAoBgC,CAAa,CACtE,OAASjB,EAAO,CACZ,MAAM,IAAI,MAAM,0BAA0BA,EAAM,OAAO,EAAE,CAC7D,CACJ,CAMA,aAAa,mBAAmBgB,EAAe5B,EAAKsN,EAAa,CAC7D,GAAI,CACA,IAAMzL,EAAgBhC,EAA0B,oBAAoB+B,CAAa,EAC3ED,EAAgB,IAAI,YAAY,EAAE,OAAOE,CAAa,EACtDH,EAAmB,KAAK,MAAMC,CAAa,EAEjD,GAAI,CAACD,EAAiB,SAAW,CAACA,EAAiB,IAAM,CAACA,EAAiB,MAAQ,CAACA,EAAiB,IACjG,MAAM,IAAI,MAAM,+BAA+B,EAInD,GAAIA,EAAiB,MAAQ4L,EACzB,MAAM,IAAI,MAAM,oDAAoD,EAGxE,IAAM/L,EAAK,IAAI,WAAWG,EAAiB,EAAE,EACvCD,EAAY,IAAI,WAAWC,EAAiB,IAAI,EAChD2L,EAAY,IAAI,YAAY,EAAE,OAAO3L,EAAiB,GAAG,EAGzDI,EAAY,MAAM,OAAO,OAAO,QAClC,CACI,KAAM,UACN,GAAIP,EACJ,eAAgB8L,CACpB,EACArN,EACAyB,CACJ,EAEMM,EAAkB,IAAI,YAAY,EAAE,OAAOD,CAAS,EAE1D,GAAI,CACA,OAAO,KAAK,MAAMC,CAAe,CACrC,MAAQ,CACJ,OAAOA,CACX,CACJ,OAASnB,EAAO,CACZ,MAAM,IAAI,MAAM,0BAA0BA,EAAM,OAAO,EAAE,CAC7D,CACJ,CAGA,MAAO,CACCf,EAA0B,WAAa,OAAOA,EAA0B,UAAU,MAAS,YAC3FA,EAA0B,UAAU,KAAK,CAEjD,CACJ,ECzuFO,IAAM0N,GAAoB,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,EACrFC,GAAc,CACvB,GAAM,CACF,SAAY,KACZ,WAAc,UACd,KAAQ,KACR,IAAO,MACP,KAAQ,GACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,UACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,cACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,aACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,+DACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,6CACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,UACZ,WAAc,2BACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,qBACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,uCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,6CACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,iCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,iCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,2BACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,CACJ,EAIaC,GAAuB,CAChC,GAAM,CACF,wBAAyB,0CACzB,uBAAwB,kBACxB,2BAA4B,SAChC,EACA,GAAM,CACF,wBAAyB,wCACzB,uBAAwB,oBACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,kDACzB,uBAAwB,sBACxB,2BAA4B,QAChC,EACA,GAAM,CACF,wBAAyB,8DACzB,uBAAwB,qBACxB,2BAA4B,QAChC,EACA,GAAM,CACF,wBAAyB,oNACzB,uBAAwB,0GACxB,2BAA4B,4CAChC,EACA,GAAM,CACF,wBAAyB,+MACzB,uBAAwB,yFACxB,2BAA4B,4CAChC,EACA,GAAM,CACF,wBAAyB,2EACzB,uBAAwB,uCACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,yGACzB,uBAAwB,wCACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,2KACzB,uBAAwB,yFACxB,2BAA4B,6CAChC,EACA,GAAM,CACF,wBAAyB,gLACzB,uBAAwB,4EACxB,2BAA4B,gCAChC,EACA,GAAM,CACF,wBAAyB,oHACzB,uBAAwB,4EACxB,2BAA4B,gCAChC,EACA,GAAM,CACF,wBAAyB,uKACzB,uBAAwB,mFACxB,2BAA4B,0BAChC,EACA,GAAM,CACF,wBAAyB,+JACzB,uBAAwB,6EACxB,2BAA4B,6CAChC,CACJ,ECpKO,IAAMC,GAAa,CACtB,iBAAkB,WAClB,wBAAyB,0CACzB,uBAAwB,kBACxB,2BAA4B,UAC5B,cAAe,QACf,eAAgB,SAChB,cAAe,QACf,aAAc,OACd,iBAAkB,mBAClB,eAAgB,6BAChB,qBAAsB,iDACtB,cAAe,OACf,gBAAiB,SACjB,kBAAmB,0BACnB,iBAAkB,kBAClB,iBAAkB,mBAClB,mBAAoB,mCACpB,kBAAmB,wCACnB,kBAAmB,qCACnB,eAAgB,yCAChB,kBAAmB,6BACnB,wBAAyB,4KACzB,mBAAoB,oBACpB,qBAAsB,WACtB,iBAAkB,qBAClB,iBAAkB,0BAClB,qBAAsB,UACtB,wBAAyB,kBACzB,sBAAuB,kBACvB,iBAAkB,mIAClB,iBAAkB,CACd,aACA,cACA,QACA,OACJ,EACA,qBAAsB,WACtB,wBAAyB,SACzB,sBAAuB,kBACvB,iBAAkB,oIAClB,iBAAkB,CACd,WACA,UACJ,EACA,qBAAsB,UACtB,wBAAyB,kBACzB,sBAAuB,kBACvB,iBAAkB,iIAClB,iBAAkB,CACd,iBACA,aACJ,EACA,qBAAsB,UACtB,wBAAyB,cACzB,sBAAuB,sBACvB,iBAAkB,6GAClB,iBAAkB,CACd,iBACA,eACJ,EACA,qBAAsB,YACtB,wBAAyB,aACzB,sBAAuB,uBACvB,iBAAkB,qGAClB,iBAAkB,CACd,cACA,SACJ,EACA,mBAAoB,uBACpB,mBAAoB,0BACpB,sBAAuB,uFACvB,sBAAuB,mBACvB,yBAA0B,8EAC1B,yBAA0B,qBAC1B,uBAAwB,mBACxB,sBAAuB,0EACvB,qBAAsB,uBACtB,kBAAmB,sBACnB,kBAAmB,6BACnB,qBAAsB,0HACtB,mBAAoB,0CACpB,mBAAoB,wBACpB,sBAAuB,eACvB,mBAAoB,gBACpB,sBAAuB,yBACvB,kBAAmB,+GACnB,kBAAmB,4EACnB,oBAAqB,uBACrB,mBAAoB,sFACpB,kBAAmB,6BACnB,kBAAmB,iBACnB,iBAAkB,wEAClB,kBAAmB,sBACnB,qBAAsB,wCACtB,oBAAqB,oBACrB,yBAA0B,mCAC1B,gBAAiB,UACjB,mBAAoB,mBACpB,mBAAoB,uBACpB,iBAAkB,4CAClB,kBAAmB,aACnB,sBAAuB,CACnB,qCACA,6CACA,6BACA,6BACA,gCACA,cACJ,EACA,mBAAoB,gBACpB,iBAAkB,kDAClB,kBAAmB,cACnB,sBAAuB,CACnB,iCACA,sCACA,oCACA,yBACA,wCACJ,EACA,mBAAoB,oBACpB,iBAAkB,mDAClB,kBAAmB,cACnB,sBAAuB,CACnB,0CACA,2CACA,iCACA,8CACA,gCACJ,EACA,mBAAoB,sBACpB,iBAAkB,6CAClB,kBAAmB,YACnB,sBAAuB,CACnB,oDACA,6CACA,wCACA,uCACA,6CACJ,EACA,mBAAoB,wBACpB,iBAAkB,wCAClB,kBAAmB,cACnB,sBAAuB,CACnB,gDACA,yCACA,oCACA,kCACA,sCACJ,EACA,mBAAoB,4BACpB,iBAAkB,sEAClB,kBAAmB,YACnB,sBAAuB,CACnB,0CACA,0CACA,gCACA,iDACA,4CACA,kCACA,gCACA,gCACA,4BACA,0BACA,sBACA,uBACJ,EACA,mBAAoB,kBACpB,iBAAkB,oDAClB,kBAAmB,aACnB,sBAAuB,CACnB,iCACA,+BACA,oCACA,0BACA,yBACA,+BACA,iBACA,+BACJ,EACA,mBAAoB,uBACpB,iBAAkB,yDAClB,kBAAmB,aACnB,sBAAuB,CACnB,sCACA,qCACA,qCACA,yCACA,oCACA,2BACA,2CACA,uBACJ,EACA,mBAAoB,uBACpB,iBAAkB,qCAClB,kBAAmB,MACnB,sBAAuB,CACnB,uCACA,2CACA,8CACA,oDACA,+CACA,wCACA,qDACA,4CACJ,EACA,oBAAqB,iBACrB,kBAAmB,yCACnB,mBAAoB,UACpB,uBAAwB,CACpB,iCACA,8CACA,kCACA,+BACA,uBACA,yBACA,0BACA,0BACJ,EACA,oBAAqB,4BACrB,kBAAmB,uCACnB,mBAAoB,UACpB,uBAAwB,CACpB,2CACA,8BACA,8BACA,4BACA,6BACA,iCACA,0BACA,6BACJ,EACA,oBAAqB,wBACrB,kBAAmB,8BACnB,mBAAoB,OACpB,uBAAwB,CACpB,oBACA,yBACA,yBACA,iCACA,qBACA,uCACA,+BACA,sBACJ,EACA,oBAAqB,uBACrB,kBAAmB,8BACnB,mBAAoB,QACpB,uBAAwB,CACpB,2BACA,2BACA,wBACA,wCACA,kCACA,uBACA,sBACA,8BACJ,EACA,kBAAmB,iCACnB,kBAAmB,6BACnB,kBAAmB,kCACnB,0BAA2B,wBAC3B,wBAAyB,uBACzB,yBAA0B,kDAC1B,uBAAwB,wBACxB,4BAA6B,wBAC7B,sBAAuB,iFACvB,2BAA4B,4EAC5B,sBAAuB,uBACvB,wBAAyB,+CACzB,mCAAoC,iCACpC,2BAA4B,oEAC5B,mBAAoB,oDACpB,yBAA0B,uGAC1B,qBAAsB,iBACtB,iBAAkB,eAClB,mBAAoB,YACpB,iBAAkB,UAClB,iBAAkB,yBAClB,aAAc,mBACd,iBAAkB,gBAClB,YAAa,iGACb,gBAAiB,qEACjB,aAAc,iBACd,aAAc,QACd,eAAgB,gBAChB,WAAY,MACZ,YAAa,OACb,mBAAoB,yBACpB,mBAAoB,oBACpB,eAAgB,sBAChB,kBAAmB,yBACnB,iBAAkB,uDAClB,cAAe,UACf,cAAe,UACf,YAAa,QACb,eAAgB,iBAChB,eAAgB,uBAChB,mBAAoB,kCACpB,eAAgB,4BAChB,mBAAoB,gCACpB,eAAgB,YAChB,mBAAoB,oCACpB,mBAAoB,oBACpB,kBAAmB,8EACnB,wBAAyB,6DACzB,uBAAwB,oDACxB,YAAa,SACb,qBAAsB,iBACtB,mBAAoB,4CACpB,uBAAwB,uCACxB,mBAAoB,kBACpB,kBAAmB,yFACnB,SAAU,KACV,YAAa,6BACb,gBAAiB,uBACjB,oBAAqB,2BACrB,gBAAiB,SACjB,cAAe,OACf,cAAe,OACf,cAAe,OACf,gBAAiB,SACjB,cAAe,OACf,yBAA0B,uBAC1B,0BAA2B,oBAC3B,cAAe,2CACf,cAAe,mBACf,WAAY,eACZ,cAAe,gCACf,cAAe,iBACf,UAAW,0FACX,WAAY,MACZ,YAAa,sBACb,eAAgB,sBAChB,eAAgB,sBAChB,YAAa,mBACb,eAAgB,mDAChB,YAAa,qIACb,kBAAmB,2BACnB,iBAAkB,oCAClB,kBAAmB,2BACnB,iBAAkB,uBAClB,eAAgB,6HAChB,kBAAmB,UACnB,WAAY,eACZ,cAAe,gBACf,iBAAkB,kBAClB,iBAAkB,cAClB,gBAAiB,mGACjB,mBAAoB,oGACpB,cAAe,sBACf,kBAAmB,4EACnB,aAAc,eACd,aAAc,SACd,YAAa,QACb,qBAAsB,0CACtB,iBAAkB,+BAClB,eAAgB,mBAChB,cAAe,kDACf,wBAAyB,kBACzB,oBAAqB,cACrB,aAAc,aACd,eAAgB,QAChB,iBAAkB,MAClB,oBAAqB,iBACrB,sBAAuB,oCACvB,0BAA2B,mCAC3B,0BAA2B,4BAC3B,qBAAsB,sBACtB,oBAAqB,2BACrB,eAAgB,0EAChB,qBAAsB,oGACtB,qBAAsB,cACtB,eAAgB,eAChB,kBAAmB,UACnB,oBAAqB,kBACrB,mBAAoB,yFACpB,iBAAkB,sCAClB,iBAAkB,+BAClB,iBAAkB,2CAClB,mBAAoB,mBACpB,wBAAyB,qBACzB,uBAAwB,gJACxB,kBAAmB,8BACnB,iBAAkB,4EAClB,kBAAmB,4BACnB,iBAAkB,8DAClB,kBAAmB,gCACnB,iBAAkB,6EAClB,kBAAmB,kBACnB,iBAAkB,uFAClB,gBAAiB,SACjB,eAAgB,eAChB,kBAAmB,sCACnB,wBAAyB,0DACzB,qBAAsB,mEACtB,qBAAsB,uEACtB,WAAY,iBACZ,iBAAkB,oBAClB,aAAc,UACd,YAAa,SACb,aAAc,iBACd,YAAa,yBACb,gBAAiB,yDACjB,cAAe,gBACf,gBAAiB,wBACjB,cAAe,SACf,cAAe,SACf,gBAAiB,WACjB,gBAAiB,uBACjB,gBAAiB,iBACjB,sBAAuB,wBACvB,qBAAsB,+BACtB,YAAa,iDACb,gBAAiB,gBACjB,qBAAsB,sBACtB,iBAAkB,iBAClB,sBAAuB,YACvB,YAAa,cACb,kBAAmB,mBACnB,eAAgB,gBAChB,cAAe,SACf,eAAgB,UAChB,WAAY,WACZ,cAAe,SACf,iBAAkB,aAClB,qBAAsB,uBACtB,kBAAmB,cACnB,gBAAiB,YACjB,aAAc,QACd,aAAc,QACd,cAAe,SACf,gBAAiB,WACjB,eAAgB,qBAChB,wBAAyB,YACzB,mBAAoB,cACpB,mBAAoB,cACpB,YAAa,YACb,eAAgB,eAChB,aAAc,aACd,aAAc,aACd,oBAAqB,8BACrB,iBAAkB,kGAClB,eAAgB,SAChB,mBAAoB,sBACpB,qBAAsB,wBACtB,mBAAoB,mBACpB,mBAAoB,cACpB,gBAAiB,oFACjB,qBAAsB,kBACtB,eAAgB,SAChB,gBAAiB,UACjB,eAAgB,gBAChB,gBAAiB,iBACjB,cAAe,QACf,kBAAmB,mBACnB,eAAgB,eAChB,cAAe,QACf,kBAAmB,SACnB,gBAAiB,UACjB,gBAAiB,gBACjB,iBAAkB,oBAClB,oBAAqB,0BACrB,mBAAoB,+DACpB,qBAAsB,8BACtB,mBAAoB,gHACpB,qBAAsB,+BACtB,mBAAoB,oBACpB,yBAA0B,0BAC1B,sBAAuB,2CACvB,oBAAqB,8CACrB,kBAAmB,0GACnB,mBAAoB,2IACpB,oBAAqB,qFACrB,mBAAoB,2BACpB,qBAAsB,uFACtB,kBAAmB,2OACnB,qBAAsB,6LACtB,sBAAuB,8GACvB,iBAAkB,2HAClB,uBAAwB,wIACxB,sBAAuB,oBACvB,0BAA2B,0CAC3B,uBAAwB,kGACxB,qBAAsB,kCACtB,gBAAiB,sBACjB,wBAAyB,iEACzB,wBAAyB,8CACzB,wBAAyB,+EACzB,oBAAqB,kEACrB,cAAe,uBACf,kBAAmB,4BACnB,uBAAwB,wCACxB,iBAAkB,aAClB,mBAAoB,YACpB,oBAAqB,gBACrB,sBAAuB,gBACvB,sBAAuB,kBACvB,kBAAmB,cACnB,mBAAoB,eACpB,0BAA2B,oBAC3B,uBAAwB,oBACxB,uBAAwB,2BACxB,qBAAsB,0BACtB,yBAA0B,sBAC1B,yBAA0B,sBAC1B,gBAAiB,2BACjB,oBAAqB,iBACrB,iBAAkB,cAClB,iBAAkB,6BAClB,uBAAwB,4CACxB,6BAA8B,uCAC9B,uBAAwB;AAAA,mEACxB,8BAA+B,sCAC/B,mBAAoB,kCACpB,YAAa,eACb,iBAAkB,aAClB,iBAAkB,aAClB,mBAAoB,uBACpB,iBAAkB,qBAClB,eAAgB,UAChB,iBAAkB,2CAClB,gBAAiB,mEACjB,gBAAiB,YACjB,qBAAsB,+CACtB,sBAAuB,kBACvB,mBAAoB,+BACpB,kBAAmB,cACnB,oBAAqB,+CACrB,sBAAuB,kBACvB,kBAAmB,cACnB,mBAAoB,cACpB,eAAgB,2BAChB,yBAA0B,sBAC1B,eAAgB,UAChB,iBAAkB,YAClB,eAAgB,WAChB,qBAAsB,qEACtB,iBAAkB,YAClB,iBAAkB,YAClB,yBAA0B,2BAC1B,iBAAkB,YAClB,mBAAoB,cACpB,oBAAqB,qBACrB,cAAe,UACf,gBAAiB,WACjB,iBAAkB,aAClB,eAAgB,WAChB,gBAAiB,YACjB,mBAAoB,iBACpB,kBAAmB,cACnB,kBAAmB,cACnB,gBAAiB,iBACjB,cAAe,2BACf,kBAAmB,yBACnB,kBAAmB,8CACnB,iBAAkB,kBAClB,wBAAyB,iBACzB,gBAAiB,8BACjB,eAAgB,UAChB,iBAAkB,+BAClB,sBAAuB,6BACvB,sBAAuB,6BACvB,sBAAuB,qCACvB,gBAAiB,yEACjB,iBAAkB,sEAClB,yBAA0B,4BAC1B,6BAA8B,2CAC9B,uBAAwB,0BACxB,2BAA4B,2BAC5B,sBAAuB,8FACvB,oBAAqB,mGACrB,yBAA0B,0BAC1B,uBAAwB,oBACxB,oBAAqB,4BACrB,4BAA6B,sCAC7B,0BAA2B,oCAC3B,kBAAmB,sCACnB,0BAA2B,6BAC3B,oBAAqB,0BACrB,iBAAkB,6BAClB,0BAA2B,uBAC3B,qBAAsB,iEACtB,mBAAoB,+DACpB,qBAAsB,kDACtB,oBAAqB,uGACrB,wBAAyB,mGACzB,uBAAwB,4DACxB,iBAAkB,yBAClB,eAAgB,uBAChB,qBAAsB,iDACtB,yBAA0B,wDAC1B,gBAAiB,qIACjB,uBAAwB,8EACxB,yBAA0B,0EAC1B,8BAA+B,oGAC/B,qBAAsB,0DACtB,cAAe,iEACf,2BAA4B,4EAC5B,qBAAsB,8EACtB,mBAAoB,iBACpB,mBAAoB,gBACpB,gBAAiB,yDACjB,cAAe,yBACf,eAAgB,qCAChB,sBAAuB,yDACvB,yBAA0B,sBAC1B,eAAgB,wCAChB,sBAAuB,4BACvB,iBAAkB,2BAClB,eAAgB,WAChB,gBAAiB,YACjB,kBAAmB,eACnB,iBAAkB,2CAClB,mBAAoB,8EACpB,uBAAwB,8EACxB,WAAY,qBACZ,UAAW,wBACX,UAAW,yFACX,eAAgB,OAChB,gBAAiB,QACjB,kBAAmB,QACnB,iBAAkB,SAClB,iBAAkB,gCAClB,eAAgB,OAChB,gBAAiB,QACjB,iBAAkB,SAClB,cAAe,MACf,iBAAkB,UAClB,oBAAqB,eACrB,YAAa,OACb,gBAAiB,MACjB,YAAa,MACb,aAAc,OACd,eAAgB,0BAChB,aAAc,SACd,aAAc,QACd,sBAAuB,yCACvB,qBAAsB,YACtB,gBAAiB,OACjB,gBAAiB,OACjB,mBAAoB,UACpB,qBAAsB,YACtB,yBAA0B,uBAC1B,oBAAqB,yBACrB,oBAAqB,iBACrB,yBAA0B,0BAC1B,kBAAmB,SACnB,WAAY,qBACZ,iBAAkB,kBAClB,kBAAmB,mBACnB,oBAAqB,qBACrB,wBAAyB,oBACzB,oBAAqB,eACrB,oBAAqB,OACrB,qBAAsB,gBACtB,yBAA0B,+BAC1B,uBAAwB,kBACxB,qBAAsB,yBACtB,mBAAoB,cACpB,oBAAqB,eACrB,mBAAoB,OACpB,mBAAoB,OACpB,mBAAoB,OACpB,WAAY,OACZ,YAAa,QACb,YAAa,QACb,WAAY,OACZ,WAAY,OACZ,WAAY,OACZ,eAAgB,kCAChB,gBAAiB,SACjB,qBAAsB,eACtB,oBAAqB,cACrB,gBAAiB,SACjB,gCAAiC,oBACjC,gCAAiC,2BACjC,2BAA4B,qBAC5B,iCAAkC,oBAClC,sCAAuC,0BACvC,oBAAqB,0BACrB,iCAAkC,oBAClC,gCAAiC,mBACjC,gCAAiC,mBACjC,mCAAoC,sBACpC,mCAAoC,sBACpC,8BAA+B,iBAC/B,iCAAkC,oBAClC,mCAAoC,uBACpC,6BAA8B,gBAC9B,2BAA4B,wBAC5B,0BAA2B,uBAC3B,mCAAoC,sBACpC,iCAAkC,oBAClC,0BAA2B,kBAC3B,4CAA6C,kCAC7C,qCAAsC,2BACtC,qCAAsC,2BACtC,kCAAmC,wBACnC,kCAAmC,wBACnC,qCAAsC,2BACtC,qCAAsC,2BACtC,wCAAyC,8BACzC,4DAA6D,kDAC7D,uCAAwC,6BACxC,kCAAmC,wBACnC,wCAAyC,8BACzC,uDAAwD,6CACxD,6CAA8C,mCAC9C,gEAAiE,sDACjE,0CAA2C,gCAC3C,mDAAoD,yCACpD,0CAA2C,gCAC3C,mCAAoC,yBACpC,yDAA0D,+CAC1D,qDAAsD,2CACtD,4CAA6C,kCAC7C,wEAAyE,8DACzE,qNAAsN,2MACtN,YAAa,QACb,aAAc,SACd,mBAAoB,yDACpB,uBAAwB,4DACxB,0BAA2B,kEAC3B,yBAA0B,sDAC1B,sBAAuB,+CACvB,oBAAqB,kDACrB,iBAAkB,uCAClB,oBAAqB,gDACrB,gBAAiB,aACjB,kBAAmB,SACnB,oBAAqB,WACrB,iBAAkB,iBAClB,uBAAwB,cACxB,eAAgB,eAChB,cAAe,YACf,eAAgB,QAChB,oBAAqB,yBACrB,kBAAmB,qBACnB,eAAgB,0BAChB,kBAAmB,sBACnB,kBAAmB,cACnB,kBAAmB,+BACnB,qBAAsB,eACtB,iBAAkB,+BAClB,sBAAuB,yBACvB,kBAAmB,6CACnB,mBAAoB,kEACpB,mBAAoB,uBACpB,eAAgB,eAChB,iBAAkB,kBAClB,kBAAmB,kCACnB,mBAAoB,qDACpB,kBAAmB,2BACnB,gBAAiB,wBACjB,iBAAkB,kCAClB,sBAAuB,mDACvB,UAAW,MACX,0BAA2B,2BAC3B,mBAAoB,UACpB,wBAAyB,eACzB,iBAAkB,QAClB,mBAAoB,UACpB,eAAgB,QAChB,qBAAsB,aACtB,oBAAqB,aACrB,iBAAkB,cAClB,aAAc,gBACd,uBAAwB,2BACxB,uBAAwB,2BACxB,iBAAkB,OAClB,oBAAqB,UACrB,kBAAmB,aACnB,gBAAiB,MACjB,uBAAwB,mBACxB,wBAAyB,kCACzB,sBAAuB,oBACvB,yBAA0B,8BAC1B,yBAA0B,8BAC1B,mBAAoB,sBACpB,kCAAmC,8GACnC,iCAAkC,qEAClC,4BAA6B,+FAC7B,6BAA8B,iEAC9B,iCAAkC,gFAClC,0BAA2B,yCAC3B,qBAAsB,qBACtB,gBAAiB,oBACjB,kBAAmB,mBACnB,yBAA0B,WAC1B,cAAe,mBACf,eAAgB,oBAChB,eAAgB,oBAChB,cAAe,mBACf,YAAa,aACb,WAAY,YACZ,YAAa,SACb,oBAAqB,kEACrB,4BAA6B,oDAC7B,mBAAoB,iEACpB,mBAAoB,uBACpB,oBAAqB,wBACrB,2BAA4B,yCAC5B,4BAA6B,uCAC7B,sBAAuB,gBACvB,uBAAwB,gBACxB,4BAA6B,2CAC7B,wBAAyB,0BACzB,0BAA2B,sFAC3B,gCAAiC,mHACjC,mBAAoB,WACpB,uBAAwB,8EACxB,sBAAuB,0EACvB,4BAA6B,8CAC7B,8BAA+B,iDAC/B,gCAAiC,oCACjC,wBAAyB,uDACzB,0BAA2B,+EAC3B,oBAAqB,0CACrB,kBAAmB,yCACnB,uBAAwB,8EACxB,wBAAyB,sDACzB,2BAA4B,+CAC5B,0BAA2B,oGAC3B,oBAAqB,gCACrB,wBAAyB,iEACzB,oBAAqB,8FACrB,gBAAiB,oEACjB,uBAAwB,qDACxB,oBAAqB,4BACrB,iCAAkC,iEAClC,mBAAoB,iDACpB,uBAAwB,iEACxB,sBAAuB,sGACvB,4BAA6B,6FAC7B,+BAAgC,gEAChC,gBAAiB,OACjB,kBAAmB,SACnB,eAAgB,MAChB,gBAAiB,SACjB,yBAA0B,iDAC1B,0BAA2B,yEAC3B,0BAA2B,4LAC3B,sBAAuB,mFACvB,wBAAyB,yBACzB,qBAAsB,8EACtB,uBAAwB,0BACxB,2BAA4B,6DAC5B,2BAA4B,yCAC5B,0BAA2B,sDAC3B,0BAA2B,2CAC3B,oBAAqB,6DACrB,oBAAqB,eACrB,uBAAwB,uFACxB,uBAAwB,eACxB,yBAA0B,qCAC1B,uBAAwB,uCACxB,sBAAuB,mDACvB,4BAA6B,uDAC7B,yBAA0B,qEAC1B,2BAA4B,kBAC5B,sBAAuB,6FACvB,uBAAwB,6CACxB,+BAAgC,iFAChC,kBAAmB,qBACnB,uBAAwB,2FAC5B,EAEMC,GAAW,WAAW,qBAAuB,WAAW,mBAAqB,OAAO,OAAO,IAAI,GACrGA,GAAS,GAAQD,GCv0BjB,IAAME,GAAW,WAAW,qBAAuB,WAAW,mBAAqB,OAAO,OAAO,IAAI,GAGrG,SAASC,GAAWC,EAAM,CACtB,OAAOF,GAASE,CAAI,GAAK,IAC7B,CAEA,IAAMC,GAAc,mBAGb,SAASC,GAAmBC,EAAW,IAAK,CAC/C,IAAMC,EAAU,OAAOD,CAAQ,EAAE,MAAM,GAAG,EAAE,CAAC,EAC7C,OAAOE,GAAkB,SAASD,CAAO,GAAKA,IAAY,KAAiBA,EAAU,IACzF,CAMO,SAASE,GAAoBC,EAAY,CAAC,EAAG,CAChD,QAAWC,KAAOD,EAAW,CACzB,IAAME,EAAQ,OAAOD,CAAG,EAAE,YAAY,EAChCE,EAAQL,GAAkB,KAAML,GAASA,EAAK,YAAY,IAAMS,CAAK,EAC3E,GAAIC,EAAO,OAAOA,EAClB,IAAMC,EAAOF,EAAM,MAAM,GAAG,EAAE,CAAC,EACzBG,EAAUP,GAAkB,KAAML,GAASA,EAAK,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC,IAAMW,CAAI,EAC1F,GAAIC,EAAS,OAAOA,CACxB,CACA,OAAO,IACX,CAOO,SAASC,GAAa,CAAE,SAAAV,EAAW,IAAK,OAAAW,EAAS,KAAM,UAAAP,EAAY,CAAC,CAAE,EAAI,CAAC,EAAG,CACjF,IAAMQ,EAAWb,GAAmBC,CAAQ,EAC5C,OAAIY,IAIAC,GAAab,CAAQ,EAAU,KAE/BW,GAAUT,GAAkB,SAASS,CAAM,EAAUA,EAClDR,GAAoBC,CAAS,GAAK,KAC7C,CAGA,SAASS,GAAab,EAAU,CAC5B,OAAOA,IAAa,KAAOA,IAAa,aAC5C,CAMO,SAASc,GAAWjB,EAAMG,EAAW,IAAK,CAC7C,IAAMe,EAAUhB,GAAmBC,CAAQ,EAErCgB,GADOD,EAAU,OAAOf,CAAQ,EAAE,MAAMe,EAAQ,OAAS,CAAC,EAAI,OAAOf,CAAQ,GACjE,QAAQ,OAAQ,EAAE,EACpC,OAAOH,IAAS,KAAiB,IAAImB,CAAI,GAAK,IAAInB,CAAI,IAAImB,CAAI,EAClE,CAGO,SAASC,GAAepB,EAAM,CACjC,GAAI,CACA,aAAa,QAAQC,GAAaD,CAAI,CAC1C,MAAY,CAEZ,CACJ,CAEO,SAASqB,IAAe,CAC3B,GAAI,CACA,OAAO,aAAa,QAAQpB,EAAW,CAC3C,MAAY,CACR,OAAO,IACX,CACJ,CAOA,IAAIqB,GAAiB,KACd,SAASC,IAAgB,CAC5B,GAAID,GAAgB,OAAOA,GAI3B,IAAME,EAAI,OAAO,OAAW,IAAc,KAAO,OACjD,MAAI,CAACA,GAAK,CAACA,EAAE,SAAiB,MAC9BF,GAAiBT,GAAa,CAC1B,SAAUW,EAAE,SAAS,UAAY,IACjC,OAAQH,GAAa,EACrB,UAAWG,EAAE,WAAW,WAAa,CAAC,CAC1C,CAAC,EACMF,GACX,CAWO,SAASG,GAAUzB,EAAOuB,GAAc,EAAG,CAC9C,OAAOG,GAAY1B,CAAI,GAAG,MAAQ,MAAQ,MAAQ,KACtD,CAEO,SAAS2B,GAAM3B,EAAOuB,GAAc,EAAG,CAC1C,OAAOE,GAAUzB,CAAI,IAAM,KAC/B,CAOO,SAAS4B,GAAU5B,EAAOuB,GAAc,EAAG,CAC9C,OAAOI,GAAM3B,CAAI,EAAI,GAAK,CAC9B,CAwDO,SAAS6B,GAAMC,EAAKC,EAASC,GAAc,EAAG,CACjD,IAAMC,EAAQC,GAAWH,CAAM,IAAID,CAAG,GAAKI,GAAW,IAAc,IAAIJ,CAAG,EAC3E,OAAO,MAAM,QAAQG,CAAK,EAAIA,EAAQ,CAAC,CAC3C,CAQO,SAASE,GAAc,CAAE,SAAAC,EAAW,IAAK,OAAAC,EAAS,IAAe,EAAI,CAAC,EAAG,CAC5E,OAAOC,GAAkB,IAAKC,IAAU,CACpC,KAAAA,EACA,KAAMC,GAAWD,EAAMH,CAAQ,EAC/B,SAAUK,GAAYF,CAAI,GAAG,UAAYA,EAGzC,MAAOE,GAAYF,CAAI,GAAG,YAAcA,EAExC,KAAME,GAAYF,CAAI,GAAG,MAAQA,EAAK,YAAY,EAGlD,IAAKE,GAAYF,CAAI,GAAG,KAAO,MAC/B,UAAWA,IAASF,CACxB,EAAE,CACN,CAMO,SAASK,EAAEZ,EAAKa,EAAMZ,EAASC,GAAc,EAAG,CACnD,IAAMY,EACFV,GAAWH,CAAM,IAAID,CAAG,GAIxBe,GAAqBd,CAAM,IAAID,CAAG,GAClCI,GAAW,IAAc,IAAIJ,CAAG,GAChCA,EACJ,OAAKa,EACE,OAAOC,CAAQ,EAAE,QAAQ,aAAc,CAACE,EAAOC,IAClD,OAAO,UAAU,eAAe,KAAKJ,EAAMI,CAAI,EAAI,OAAOJ,EAAKI,CAAI,CAAC,EAAID,CAC5E,EAHkBF,CAItB,CChQA,IAAMI,GAAN,MAAMC,CAA0B,CAC5B,MAAOC,GAAY,KACnB,MAAOC,GAAc,OAAO,2BAA2B,EAEvD,OAAO,aAAc,CACjB,OAAK,KAAKD,KACN,KAAKA,GAAY,IAAID,GAElB,KAAKC,EAChB,CAEAE,GAAsB,KACtBC,GAAU,GACVC,GAAiB,OAEjB,sBAAsBC,EAAQ,CAC1B,GAAI,EAAEA,aAAkBC,IACpB,MAAM,IAAI,MAAM,uCAAuC,EAE3D,KAAKJ,GAAsBG,EAC3B,KAAKF,GAAU,EACnB,CAEA,uBAAwB,CACpB,OAAO,KAAKD,EAChB,CAEA,UAAW,CACP,OAAO,KAAKC,IAAW,KAAKD,KAAwB,IACxD,CAEA,YAAa,CACT,KAAKC,GAAU,GACf,KAAKD,GAAsB,IAC/B,CAEA,kBAAmB,CACf,OAAO,KAAKE,EAChB,CAEA,iBAAiBG,EAAO,CAChB,CAAC,MAAO,SAAU,MAAM,EAAE,SAASA,CAAK,IACxC,KAAKH,GAAiBG,EAE9B,CACJ,EAMMC,GAAN,KAA2B,CACvB,MAAOC,GAAiB,IAAI,IAAI,CAC5B,kCACA,wBACA,mBACA,kBACA,oBACA,uBACA,qBACA,gBACA,iBACA,mBACJ,CAAC,EAED,OAAO,cAAcC,EAAO,CACxB,IAAMC,EAAUD,EAAM,SAAWA,EAEjC,QAAWE,KAAW,KAAKH,GACvB,GAAIE,EAAQ,SAASC,CAAO,EACxB,OAAOA,EAIf,eAAQ,MAAM,0CAAoC,CAC9C,QAASF,EAAM,QACf,MAAOA,EAAM,MACb,UAAW,IAAI,KAAK,EAAE,YAAY,CACtC,CAAC,EAEM,sBACX,CAEA,OAAO,iBAAiBG,EAAOC,EAAU,CAAC,EAAG,CACzC,QAAQ,KAAK,4BAAsB,CAC/B,MAAAD,EACA,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,GAAGC,CACP,CAAC,CACL,CACJ,EAMMC,GAAN,KAAyB,CACrB,aAAa,iBAAiBC,EAAUC,EAAY,CAChD,GAAI,CAEA,IAAMC,EADU,IAAI,YAAY,EACX,OAAO,KAAK,UAAU,CACvC,OAAQF,EAAS,OACjB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,UAAWA,EAAS,UACpB,QAASA,EAAS,SAAW,KACjC,CAAC,CAAC,EAEIG,EAAY,MAAM,OAAO,OAAO,KAClC,oBACAF,EACAC,CACJ,EAEA,OAAO,MAAM,KAAK,IAAI,WAAWC,CAAS,CAAC,CAC/C,OAAST,EAAO,CACZ,MAAAF,GAAqB,iBAAiB,mBAAoB,CAAE,MAAOE,EAAM,OAAQ,CAAC,EAC5E,IAAI,MAAM,8BAA8B,CAClD,CACJ,CAEA,aAAa,mBAAmBM,EAAUG,EAAWC,EAAW,CAC5D,GAAI,CAEA,IAAMF,EADU,IAAI,YAAY,EACX,OAAO,KAAK,UAAU,CACvC,OAAQF,EAAS,OACjB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,UAAWA,EAAS,UACpB,QAASA,EAAS,SAAW,KACjC,CAAC,CAAC,EAEIK,EAAkB,IAAI,WAAWF,CAAS,EAE1CG,EAAU,MAAM,OAAO,OAAO,OAChC,oBACAF,EACAC,EACAH,CACJ,EAEA,OAAKI,GACDd,GAAqB,iBAAiB,oBAAqB,CAAE,OAAQQ,EAAS,MAAO,CAAC,EAGnFM,CACX,OAASZ,EAAO,CACZ,OAAAF,GAAqB,iBAAiB,sBAAuB,CAAE,MAAOE,EAAM,OAAQ,CAAC,EAC9E,EACX,CACJ,CACJ,EAMMa,GAAN,KAA2B,CACvB,OAAO,iBAAmB,KAAO,KAEjC,OAAO,mBAAmBZ,EAAS,CAC/B,IAAMa,EAAgB,KAAK,UAAUb,CAAO,EACtCc,EAAc,IAAI,KAAK,CAACD,CAAa,CAAC,EAAE,KAE9C,GAAIC,EAAc,KAAK,iBACnB,MAAAjB,GAAqB,iBAAiB,oBAAqB,CACvD,KAAMiB,EACN,MAAO,KAAK,gBAChB,CAAC,EACK,IAAI,MAAM,mBAAmB,EAGvC,MAAO,EACX,CACJ,EAEMC,GAAN,KAAuB,CACnB,aAAc,CACV,KAAK,MAAQ,IAAI,GACrB,CAEA,MAAM,SAASC,EAAKC,EAAW,CAK3B,KAAO,KAAK,MAAM,IAAID,CAAG,GACrB,MAAM,KAAK,MAAM,IAAIA,CAAG,EAG5B,IAAIE,EACEC,EAAc,IAAI,QAAQC,GAAW,CAAEF,EAAcE,CAAS,CAAC,EACrE,KAAK,MAAM,IAAIJ,EAAKG,CAAW,EAE/B,GAAI,CACA,OAAO,MAAMF,EAAU,CAC3B,QAAE,CACE,KAAK,MAAM,OAAOD,CAAG,EACrBE,EAAY,CAChB,CACJ,CACJ,EAGMG,GAAN,KAAkB,CACd,YAAYC,EAAaC,EAAU,CAC/B,KAAK,YAAcD,EACnB,KAAK,SAAWC,EAChB,KAAK,SAAW,IAAI,GACxB,CAEA,UAAUC,EAAY,CAClB,IAAMC,EAAM,KAAK,IAAI,EACfC,EAAcD,EAAM,KAAK,SAE1B,KAAK,SAAS,IAAID,CAAU,GAC7B,KAAK,SAAS,IAAIA,EAAY,CAAC,CAAC,EAKpC,IAAMG,EAFe,KAAK,SAAS,IAAIH,CAAU,EAEd,OAAOI,GAAQA,EAAOF,CAAW,EAGpE,OAFA,KAAK,SAAS,IAAIF,EAAYG,CAAa,EAEvCA,EAAc,QAAU,KAAK,aAC7B9B,GAAqB,iBAAiB,sBAAuB,CACzD,WAAA2B,EACA,aAAcG,EAAc,OAC5B,MAAO,KAAK,WAChB,CAAC,EACM,KAGXA,EAAc,KAAKF,CAAG,EACf,GACX,CACJ,EAEMI,GAAN,KAA0B,CACtB,OAAO,WAAWC,EAAQ,CACtB,GAAIA,aAAkB,YAAa,CAC/B,IAAMC,EAAO,IAAI,WAAWD,CAAM,EAClC,OAAO,gBAAgBC,CAAI,CAC/B,MAAWD,aAAkB,YACzB,OAAO,gBAAgBA,CAAM,CAErC,CAEA,OAAO,aAAaE,EAAKC,EAAM,CACvBD,EAAIC,CAAI,IACR,KAAK,WAAWD,EAAIC,CAAI,CAAC,EACzB,OAAOD,EAAIC,CAAI,EAEvB,CACJ,EAEMtC,GAAN,KAAiC,CAC7B,YAAYuC,EAAeC,EAAYC,EAAYC,EAASC,EAAgBC,EAAuB,CAS/F,GARA,KAAK,cAAgBL,EACrB,KAAK,WAAaC,EAClB,KAAK,WAAaC,EAClB,KAAK,QAAUC,EACf,KAAK,eAAiBC,EACtB,KAAK,sBAAwBC,EAGzB,CAACL,EACD,MAAM,IAAI,MAAM,0DAA0D,EAG9E/C,GAA0B,YAAY,EAAE,sBAAsB,IAAI,EAElE,KAAK,UAAY,IAAI4B,GACrB,KAAK,YAAc,IAAIM,GAAY,GAAI,GAAK,EAE5C,KAAK,WAAa,KAClB,KAAK,gBAAkB,KAYvB,KAAK,WAAa,GAAK,KAIvB,KAAK,uBAAyB,GAAK,KACnC,KAAK,cAAgB,IAAM,KAAO,KAClC,KAAK,yBAA2B,EAChC,KAAK,cAAgB,IACrB,KAAK,eAAiB,EAEtB,KAAK,uBAAyB,CAC1B,IAAK,CACD,WAAY,CAAC,MAAM,EACnB,UAAW,CAAC,kBAAmB,oBAAqB,qBAAqB,EACzE,QAAS,GAAK,KAAO,KACrB,SAAU,MACV,YAAa,KACjB,EAEA,KAAM,CACF,WAAY,CAAC,MAAM,EACnB,UAAW,CAAC,aAAc,iBAAiB,EAC3C,QAAS,GAAK,KAAO,KACrB,SAAUmB,EAAE,eAAe,EAC3B,YAAa,KACjB,EAEA,OAAQ,CACJ,WAAY,CAAC,OAAQ,QAAS,OAAQ,OAAQ,QAAS,OAAQ,MAAM,EACrE,UAAW,CACP,aACA,YACA,cACA,YACA,YACA,aACA,YACA,sBACA,eACA,0BACJ,EACA,QAAS,GAAK,KAAO,KACrB,SAAUA,EAAE,iBAAiB,EAC7B,YAAa,qCACjB,EAEA,SAAU,CACN,WAAY,CAAC,MAAM,EACnB,UAAW,CACP,kBACA,oBACA,+BACA,iBACJ,EACA,QAAS,IAAM,KAAO,KACtB,SAAUA,EAAE,mBAAmB,EAC/B,YAAa,KACjB,EAOA,MAAO,CACH,WAAY,CAAC,QAAS,OAAQ,OAAQ,QAAS,OAAQ,OAAQ,OAAQ,MAAM,EAC7E,UAAW,CACP,aACA,YACA,aACA,YACA,aACA,YACA,YACA,cACA,WACJ,EACA,QAAS,GAAK,KAAO,KACrB,SAAU,QACV,YAAaA,EAAE,gBAAgB,CACnC,CACJ,EACA,KAAK,mBAAqB,IAAI,IAAI,CAC9B,OAAQ,OAAQ,OAAQ,MAAO,MAAO,OAAQ,OAAQ,OACtD,OAAQ,OAAQ,OAAQ,OAAQ,QAAS,MAC7C,CAAC,EAGD,KAAK,kBAAoB,IAAI,IAAI,CAAC,2BAA4B,oBAAoB,CAAC,EAGnF,KAAK,kBAAoB,IAAI,IAC7B,QAAWC,KAAc,OAAO,OAAO,KAAK,sBAAsB,EAC9D,QAAWC,KAAQD,EAAW,UAAW,KAAK,kBAAkB,IAAIC,CAAI,EAI5E,KAAK,gBAAkB,IAAI,IAC3B,KAAK,mBAAqB,IAAI,IAC9B,KAAK,yBAA2B,IAAI,IACpC,KAAK,cAAgB,CAAC,EACtB,KAAK,cAAgB,IAAI,IACzB,KAAK,qBAAuB,IAAIrB,GAAY,EAAG,GAAK,EAMpD,KAAK,qBAAuB,IAAIA,GAAY,IAAO,GAAK,EACxD,KAAK,8BAAgC,IAAI,IACzC,KAAK,4CAA8C,IACnD,KAAK,+BAAiC,EAStC,KAAK,2BAA6B,EAAI,KAAO,KAG7C,KAAK,oCAAsC,GAAK,KAAO,KACvD,KAAK,uBAAyB,EAG9B,KAAK,YAAc,IAAI,IAGvB,KAAK,gBAAkB,IAAI,IAC3B,KAAK,eAAiB,IAAI,IAC1B,KAAK,oBAAsB,IAAI,IAC/B,KAAK,mCAAqC,EAE1C,KAAK,yBAAyB,EAE1B,KAAK,gBACL,KAAK,cAAc,mBAAqB,KAEhD,CAMA,YAAYsB,EAAM,CACd,IAAMC,EAAW,OAAOD,GAAM,MAAQ,EAAE,EAAE,YAAY,EAChDE,EAAiBD,EAAS,YAAY,GAAG,EACzCE,EAAgBD,GAAkB,EAAID,EAAS,UAAUC,CAAc,EAAI,GAC3EE,EAAW,OAAOJ,GAAM,MAAQ,EAAE,EAAE,YAAY,EAQtD,OAAW,CAACK,EAASP,CAAU,IAAK,OAAO,QAAQ,KAAK,sBAAsB,EAAG,CAE7E,GAAI,CADqBA,EAAW,WAAW,SAASK,CAAa,EAC9C,SAIvB,GAHuB,CAACC,GACjB,KAAK,kBAAkB,IAAIA,CAAQ,GACnC,KAAK,kBAAkB,IAAIA,CAAQ,EAEtC,MAAO,CACH,KAAMC,EACN,SAAUP,EAAW,SACrB,YAAaA,EAAW,YACxB,QAASA,EAAW,QACpB,QAAS,GACT,UAAWK,EACX,SAAAC,CACJ,CAER,CAEA,MAAO,CACH,KAAM,UACN,SAAUP,EAAE,sBAAsB,EAClC,YAAa,8DACb,QAAS,KAAK,cACd,QAAS,GACT,UAAWM,EACX,SAAAC,CACJ,CACJ,CAEA,aAAaJ,EAAM,CACf,IAAMM,EAAW,KAAK,YAAYN,CAAI,EAChCO,EAAS,CAAC,EAEVC,EADW,OAAOR,GAAM,MAAQ,EAAE,EACb,YAAY,EACjCE,EAAiBM,EAAU,YAAY,GAAG,EAC1CL,EAAgBD,GAAkB,EAAIM,EAAU,UAAUN,CAAc,EAAI,GAElF,OAAI,KAAK,mBAAmB,IAAIC,CAAa,GACzCI,EAAO,KAAK,kBAAkBJ,CAAa,8CAA8C,EAGzFH,EAAK,KAAOM,EAAS,SACrBC,EAAO,KAAK,cAAc,KAAK,eAAeP,EAAK,IAAI,CAAC,iCAAiCM,EAAS,QAAQ,KAAK,KAAK,eAAeA,EAAS,OAAO,CAAC,GAAG,EAGvJ,CAACA,EAAS,SAAW,CAAC,KAAK,mBAAmB,IAAIH,CAAa,GAC/DI,EAAO,KAAK,0DAA0DD,EAAS,WAAW,EAAE,EAG5FN,EAAK,KAAO,KAAK,eACjBO,EAAO,KAAK,cAAc,KAAK,eAAeP,EAAK,IAAI,CAAC,4BAA4B,KAAK,eAAe,KAAK,aAAa,CAAC,GAAG,EAG3H,CACH,QAASO,EAAO,SAAW,EAC3B,OAAQA,EACR,SAAUD,EACV,SAAUN,EAAK,KACf,cAAe,KAAK,eAAeA,EAAK,IAAI,CAChD,CACJ,CAEA,yBAAyBC,EAAU,CAC/B,OAAO,OAAOA,GAAY,EAAE,EACvB,UAAU,MAAM,EAChB,QAAQ,yBAA0B,EAAE,EACpC,QAAQ,UAAW,GAAG,EACtB,KAAK,EACL,MAAM,EAAG,GAAG,CACrB,CAEA,yBAAyBvC,EAAU,CAC/B,IAAM6C,EAAS,CAAC,GACZ,CAAC7C,GAAY,OAAOA,GAAa,WAAU6C,EAAO,KAAK,gCAAgC,GACvF,CAAC7C,GAAU,QAAU,OAAOA,EAAS,QAAW,WAAU6C,EAAO,KAAK,iBAAiB,GACvF,CAAC,OAAO,cAAc7C,GAAU,QAAQ,GAAKA,EAAS,UAAY,IAAG6C,EAAO,KAAK,mBAAmB,GACpG,CAAC,OAAO,cAAc7C,GAAU,WAAW,GAAKA,EAAS,aAAe,IAAG6C,EAAO,KAAK,qBAAqB,GAC5G,CAAC,OAAO,cAAc7C,GAAU,SAAS,GAAKA,EAAS,WAAa,GAAKA,EAAS,UAAY,KAAK,yBAAwB6C,EAAO,KAAK,oBAAoB,GAC3J,CAAC,MAAM,QAAQ7C,GAAU,IAAI,GAAKA,EAAS,KAAK,SAAW,KAAI6C,EAAO,KAAK,cAAc,EAE7F,IAAME,EAAU,OAAO/C,GAAU,UAAa,SAAWA,EAAS,SAAW,GACvEgD,EAAc,KAAK,yBAAyBD,CAAO,EAWzD,IATI,CAACA,GACDA,IAAYA,EAAQ,KAAK,GACzB,wBAAwB,KAAKA,CAAO,GACpC,QAAQ,KAAKA,CAAO,GACpBA,IAAY,KACZA,IAAY,MACZC,EAAY,SAAW,IACLH,EAAO,KAAK,qBAAqB,EAEnDA,EAAO,SAAW,EAAG,CACrB,IAAMI,EAAa,KAAK,aAAa,CACjC,KAAMD,EACN,KAAMhD,EAAS,SACf,KAAMA,EAAS,UAAY,0BAC/B,CAAC,EACIiD,EAAW,SAASJ,EAAO,KAAK,GAAGI,EAAW,MAAM,CAC7D,CAKA,IAAMC,EAAc,CAAC,CAAClD,GAAU,QAC1BmD,EAAiBD,EAAc,KAAK,4BAA4BlD,CAAQ,EAAI,KAElF,MAAO,CACH,QAAS6C,EAAO,SAAW,EAC3B,OAAAA,EACA,YAAAG,EACA,QAASE,GAAe,CAACC,EACzB,eAAAA,CACJ,CACJ,CAQA,4BAA4BnD,EAAU,CAClC,IAAM0C,EAAW,OAAO1C,GAAU,UAAY,EAAE,EAAE,YAAY,EACxDoD,EAAOpD,GAAU,SAEvB,OAAK0C,EAAS,WAAW,QAAQ,EAG5B,KAAK,uBAAuB,MAAM,UAAU,SAASA,CAAQ,EAG9D,CAAC,OAAO,cAAcU,CAAI,GAAKA,GAAQ,GAAKA,EAAO,KAAK,2BACjD,6BAA6B,KAAK,eAAeA,GAAQ,CAAC,CAAC,MAAM,KAAK,eAAe,KAAK,0BAA0B,CAAC,IAE5H,KAAK,uBAAyBA,EAAO,KAAK,oCACnC,0DAEJ,KARI,gCAAgCV,CAAQ,IAHxC,2BAA2BA,GAAY,QAAQ,GAY9D,CAEA,eAAeW,EAAO,CAClB,GAAIA,IAAU,EAAG,MAAO,MACxB,IAAMC,EAAI,KACJC,EAAQ,CAAC,IAAK,KAAM,KAAM,IAAI,EAC9B,EAAI,KAAK,MAAM,KAAK,IAAIF,CAAK,EAAI,KAAK,IAAIC,CAAC,CAAC,EAClD,OAAO,YAAYD,EAAQ,KAAK,IAAIC,EAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAI,IAAMC,EAAM,CAAC,CAC1E,CAEA,uBAAwB,CACpB,IAAMC,EAAiB,CAAC,EAExB,OAAW,CAACb,EAASP,CAAU,IAAK,OAAO,QAAQ,KAAK,sBAAsB,EAC1EoB,EAAeb,CAAO,EAAI,CACtB,SAAUP,EAAW,SACrB,YAAaA,EAAW,YACxB,WAAYA,EAAW,WACvB,QAAS,KAAK,eAAeA,EAAW,OAAO,EAC/C,aAAcA,EAAW,OAC7B,EAGJ,OAAOoB,CACX,CAEA,iBAAkB,CACd,MAAO,CACH,eAAgB,KAAK,sBAAsB,EAC3C,eAAgB,KAAK,eAAe,KAAK,aAAa,EACtD,oBAAqB,KAAK,cAC1B,aAAc,KAAK,sBACvB,CACJ,CAKA,oBAAoB/B,EAAQ,CACxB,IAAM4B,EAAQ5B,aAAkB,WAAaA,EAAS,IAAI,WAAWA,CAAM,EACvEgC,EAAS,GACPC,EAAML,EAAM,WAClB,QAASM,EAAI,EAAGA,EAAID,EAAKC,IACrBF,GAAU,OAAO,aAAaJ,EAAMM,CAAC,CAAC,EAE1C,OAAO,KAAKF,CAAM,CACtB,CAEA,mBAAmBG,EAAQ,CACvB,IAAMC,EAAe,KAAKD,CAAM,EAC1BF,EAAMG,EAAa,OACnBR,EAAQ,IAAI,WAAWK,CAAG,EAChC,QAASC,EAAI,EAAGA,EAAID,EAAKC,IACrBN,EAAMM,CAAC,EAAIE,EAAa,WAAWF,CAAC,EAExC,OAAON,CACX,CAKA,oBAAoBS,EAAQ,CACxB,IAAMC,EAAQ,KAAK,oBAAoB,IAAID,CAAM,EACjD,OAAKC,EACE,CAAE,OAAAD,EAAQ,SAAUC,EAAM,KAAM,SAAUA,EAAM,KAAM,SAAUA,EAAM,IAAK,EAD/D,IAEvB,CAEA,MAAM,QAAQD,EAAQ,CAClB,IAAMC,EAAQ,KAAK,oBAAoB,IAAID,CAAM,EACjD,OAAKC,EACE,IAAI,KAAK,CAACA,EAAM,MAAM,EAAG,CAAE,KAAMA,EAAM,IAAK,CAAC,EADjC,IAEvB,CAEA,MAAM,aAAaD,EAAQ,CACvB,IAAME,EAAO,MAAM,KAAK,QAAQF,CAAM,EACtC,OAAKE,EACE,IAAI,gBAAgBA,CAAI,EADb,IAEtB,CAEA,gBAAgBC,EAAK,CACjB,GAAI,CAAE,IAAI,gBAAgBA,CAAG,CAAG,MAAY,CAAC,CACjD,CAEA,0BAA2B,CACvB,GAAI,CAAC,KAAK,cAAc,YAAa,CACjC,IAAMC,EAAa,YAAY,IAAM,CAC7B,KAAK,cAAc,cACnB,cAAcA,CAAU,EACxB,KAAK,yBAAyB,EAEtC,EAAG,GAAG,EAEN,WAAW,IAAM,CACb,cAAcA,CAAU,CAC5B,EAAG,GAAI,EAEP,MACJ,CAGA,KAAK,yBAAyB,CAClC,CAEA,0BAA2B,CACvB,GAAI,CACA,GAAI,CAAC,KAAK,cAAc,YACpB,OAGA,KAAK,gBACL,KAAK,cAAc,mBAAqB,MAGxC,KAAK,cAAc,YAAY,YAC/B,KAAK,kBAAoB,KAAK,cAAc,YAAY,WAG5D,KAAK,cAAc,YAAY,UAAY,MAAOrE,GAAU,CACxD,GAAI,CACA,GAAIA,EAAM,KAAK,OAASU,GAAqB,iBAAkB,CAC3D,QAAQ,KAAK,uCAAgC,EAC7Cf,GAAqB,iBAAiB,2BAA2B,EACjE,MACJ,CAEA,GAAI,OAAOK,EAAM,MAAS,SACtB,GAAI,CACA,IAAMsE,EAAS,KAAK,MAAMtE,EAAM,IAAI,EAIpC,GAFAU,GAAqB,mBAAmB4D,CAAM,EAE1C,KAAK,sBAAsBA,CAAM,EAAG,CACpC,MAAM,KAAK,kBAAkBA,CAAM,EACnC,MACJ,CACJ,OAASC,EAAY,CACjB,GAAIA,EAAW,UAAY,oBACvB,MAER,CAGJ,GAAI,KAAK,kBACL,OAAO,KAAK,kBAAkB,KAAK,KAAK,cAAc,YAAavE,CAAK,CAEhF,OAASH,EAAO,CAEZ,GADA,QAAQ,MAAM,oDAAgDA,CAAK,EAC/D,KAAK,kBACL,OAAO,KAAK,kBAAkB,KAAK,KAAK,cAAc,YAAaG,CAAK,CAEhF,CACJ,CACJ,OAASH,EAAO,CACZ,QAAQ,MAAM,gDAA4CA,CAAK,CACnE,CACJ,CAEA,sBAAsBC,EAAS,CAC3B,MAAI,CAACA,GAAW,OAAOA,GAAY,UAAY,CAACA,EAAQ,KAC7C,GAGc,CACrB,sBACA,yBACA,aACA,qBACA,qBACA,yBACA,qBACJ,EAEwB,SAASA,EAAQ,IAAI,CACjD,CAEA,MAAM,kBAAkBA,EAAS,CAC7B,GAAI,CACA,GAAI,CAAC,KAAK,cAAc,mBACpB,GAAI,CACA,GAAI,OAAO,KAAK,cAAc,wBAA2B,WAAY,CACjE,KAAK,cAAc,uBAAuB,EAE1C,IAAI0E,EAAW,EACTC,EAAc,GACpB,KAAO,CAAC,KAAK,cAAc,oBAAsBD,EAAWC,GACxD,MAAM,IAAI,QAAQvD,GAAW,WAAWA,EAAS,GAAG,CAAC,EACrDsD,IAGJ,GAAI,CAAC,KAAK,cAAc,mBACpB,MAAM,IAAI,MAAM,6CAA6C,CAErE,KACI,OAAM,IAAI,MAAM,6CAA6C,CAErE,OAASE,EAAW,CAEhB,GADA,QAAQ,MAAM,oDAAgDA,CAAS,EACnE5E,EAAQ,OAAQ,CAChB,IAAM6E,EAAe,CACjB,KAAM,sBACN,OAAQ7E,EAAQ,OAChB,MAAO,qCACP,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkB6E,CAAY,CAC7C,CACA,MACJ,CAGJ,OAAQ7E,EAAQ,KAAM,CAClB,IAAK,sBACD,MAAM,KAAK,wBAAwBA,CAAO,EAC1C,MAEJ,IAAK,yBACD,KAAK,uBAAuBA,CAAO,EACnC,MAEJ,IAAK,aACD,MAAM,KAAK,gBAAgBA,CAAO,EAClC,MAEJ,IAAK,qBACD,KAAK,wBAAwBA,CAAO,EACpC,MAEJ,IAAK,qBACD,MAAM,KAAK,mBAAmBA,CAAO,EACrC,MAEJ,IAAK,yBACD,KAAK,uBAAuBA,CAAO,EACnC,MAEJ,IAAK,sBACD,KAAK,oBAAoBA,CAAO,EAChC,MAEJ,QACI,QAAQ,KAAK,0CAAiCA,EAAQ,IAAI,CAClE,CAEJ,OAASD,EAAO,CAGZ,GAFA,QAAQ,MAAM,sCAAkCA,CAAK,EAEjDC,EAAQ,OAAQ,CAChB,IAAM6E,EAAe,CACjB,KAAM,sBACN,OAAQ7E,EAAQ,OAChB,MAAOD,EAAM,QACb,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkB8E,CAAY,CAC7C,CACJ,CACJ,CAMA,MAAM,qBAAqBV,EAAQ,CAC/B,GAAI,CAEA,GAAI,CAAC,KAAK,cAAc,gBAAkB,CAAC,KAAK,cAAc,YAC1D,MAAM,IAAI,MAAM,mCAAmC,EAGvD,IAAMW,EAAW,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAEpDC,EAAU,IAAI,YACdC,EAAkBD,EAAQ,OAAO,KAAK,cAAc,cAAc,EAClEE,EAAaF,EAAQ,OAAOZ,CAAM,EAElCe,EAAmB,IAAI,WAAW,KAAK,cAAc,WAAW,EAChEC,EAAe,IAAI,WACrBH,EAAgB,OAChBE,EAAiB,OACjBJ,EAAS,OACTG,EAAW,MACf,EAEIG,EAAS,EACbD,EAAa,IAAIH,EAAiBI,CAAM,EACxCA,GAAUJ,EAAgB,OAC1BG,EAAa,IAAID,EAAkBE,CAAM,EACzCA,GAAUF,EAAiB,OAC3BC,EAAa,IAAIL,EAAUM,CAAM,EACjCA,GAAUN,EAAS,OACnBK,EAAa,IAAIF,EAAYG,CAAM,EAEnC,IAAMC,EAAc,MAAM,OAAO,OAAO,OAAO,UAAWF,CAAY,EAEhEG,EAAiB,MAAM,OAAO,OAAO,UACvC,MACAD,EACA,CAAE,KAAM,SAAU,EAClB,GACA,CAAC,UAAW,SAAS,CACzB,EAEA,YAAK,YAAY,IAAIlB,EAAQ,CACzB,IAAKmB,EACL,KAAM,MAAM,KAAKR,CAAQ,EACzB,QAAS,KAAK,IAAI,CACtB,CAAC,EAEM,CAAE,IAAKQ,EAAgB,KAAM,MAAM,KAAKR,CAAQ,CAAE,CAE7D,OAAS/E,EAAO,CACZ,cAAQ,MAAM,4CAAwCA,CAAK,EACrDA,CACV,CACJ,CAEA,MAAM,6BAA6BoE,EAAQoB,EAAW,CAClD,GAAI,CACA,GAAI,CAACA,GAAa,CAAC,MAAM,QAAQA,CAAS,GAAKA,EAAU,SAAW,GAChE,MAAM,IAAI,MAAM,iBAAiBA,GAAW,QAAU,CAAC,QAAQ,EAGnE,GAAI,CAAC,KAAK,cAAc,gBAAkB,CAAC,KAAK,cAAc,YAC1D,MAAM,IAAI,MAAM,mCAAmC,EAGvD,IAAMR,EAAU,IAAI,YACdC,EAAkBD,EAAQ,OAAO,KAAK,cAAc,cAAc,EAClEE,EAAaF,EAAQ,OAAOZ,CAAM,EAElCW,EAAW,IAAI,WAAWS,CAAS,EACnCL,EAAmB,IAAI,WAAW,KAAK,cAAc,WAAW,EAEhEC,EAAe,IAAI,WACrBH,EAAgB,OAChBE,EAAiB,OACjBJ,EAAS,OACTG,EAAW,MACf,EAEIG,EAAS,EACbD,EAAa,IAAIH,EAAiBI,CAAM,EACxCA,GAAUJ,EAAgB,OAC1BG,EAAa,IAAID,EAAkBE,CAAM,EACzCA,GAAUF,EAAiB,OAC3BC,EAAa,IAAIL,EAAUM,CAAM,EACjCA,GAAUN,EAAS,OACnBK,EAAa,IAAIF,EAAYG,CAAM,EAEnC,IAAMC,EAAc,MAAM,OAAO,OAAO,OAAO,UAAWF,CAAY,EAEhEG,EAAiB,MAAM,OAAO,OAAO,UACvC,MACAD,EACA,CAAE,KAAM,SAAU,EAClB,GACA,CAAC,UAAW,SAAS,CACzB,EAEA,YAAK,YAAY,IAAIlB,EAAQ,CACzB,IAAKmB,EACL,KAAMC,EACN,QAAS,KAAK,IAAI,CACtB,CAAC,EAEMD,CAEX,OAASvF,EAAO,CACZ,cAAQ,MAAM,iDAA6CA,CAAK,EAC1DA,CACV,CACJ,CAUA,sBAAsByF,EAAOC,EAAW,CACpC,GAAI,OAAO,KAAK,YAAe,YAAc,CAACD,EAAO,OACrD,IAAME,EAAQF,EAAM,aAAe,EAC7BG,EAAOF,IAAc,KAAQD,EAAM,YAAc,EAAMA,EAAM,eAAiB,EAC9EI,EAAWF,EAAQ,EAAI,KAAK,IAAI,IAAK,KAAK,MAAOC,EAAOD,EAAS,GAAG,CAAC,EAAI,EAC/E,GAAI,CACA,KAAK,WAAW,CACZ,OAAQF,EAAM,OACd,KAAMA,EAAM,MAAQ,KACpB,UAAAC,EACA,SAAAG,EACA,kBAAmBD,EACnB,YAAaD,EACb,QAAS,CAAC,CAACF,EAAM,QACjB,MAAOA,EAAM,OAAS,IAC1B,CAAC,CACL,MAAY,CAAgC,CAChD,CAEA,MAAM,SAAS7C,EAAMkD,EAAU,CAAC,EAAG,CAC/B,GAAI,CAEA,GAAI,CAAC,KAAK,cACN,MAAM,IAAI,MAAM,gCAAgC,EAGpD,IAAMC,EAAW,KAAK,oBAAoB,EAC1C,GAAI,CAAC,KAAK,YAAY,UAAUA,CAAQ,EACpC,MAAAjG,GAAqB,iBAAiB,sBAAuB,CAAE,SAAAiG,CAAS,CAAC,EACnE,IAAI,MAAM,+DAA+D,EAGnF,GAAI,CAACnD,GAAQ,CAACA,EAAK,KACf,MAAM,IAAI,MAAM,qBAAqB,EAGzC,IAAMW,EAAa,KAAK,aAAaX,CAAI,EACzC,GAAI,CAACW,EAAW,QAAS,CACrB,IAAMuB,EAAevB,EAAW,OAAO,KAAK,IAAI,EAChD,MAAM,IAAI,MAAMuB,CAAY,CAChC,CAEA,GAAI,KAAK,gBAAgB,MAAQ,KAAK,yBAClC,MAAM,IAAI,MAAM,sCAAsC,EAI1D,IAAMV,EAAS,QAAQ,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAG,CAAC,CAAC,GAGtE4B,EAAW,MAAM,KAAK,kBAAkBpD,CAAI,EAG5CqD,EAAY,MAAM,KAAK,qBAAqB7B,CAAM,EAClD8B,EAAaD,EAAU,IACvBE,EAAOF,EAAU,KAGjBG,EAAgB,CAClB,OAAQhC,EACR,KAAMxB,EACN,SAAUoD,EACV,WAAYE,EACZ,KAAMC,EACN,YAAa,KAAK,KAAKvD,EAAK,KAAO,KAAK,UAAU,EAClD,WAAY,EACZ,gBAAiB,EACjB,UAAW,KAAK,IAAI,EACpB,OAAQ,YACR,WAAY,EACZ,cAAe,KAAK,IAAI,EAExB,QAAS,CAAC,EAAEkD,GAAWA,EAAQ,OAC/B,MAAQA,GAAWA,EAAQ,MAASA,EAAQ,MAAQ,KACpD,KAAOA,GAAWA,EAAQ,KAAQA,EAAQ,KAAO,IACrD,EAEA,KAAK,gBAAgB,IAAI1B,EAAQgC,CAAa,EAC9C,KAAK,eAAe,IAAIhC,EAAQ,CAAC,EAEjC,IAAMiC,EAAiB,IAAI,QAAQ,CAAChF,EAASiF,IAAW,CACpDF,EAAc,eAAiB/E,EAC/B+E,EAAc,cAAgBE,EAC9BF,EAAc,eAAiB,WAAW,IAAM,CAC5CA,EAAc,eAAiB,KAC/BE,EAAO,IAAI,MAAM,kBAAkB,CAAC,CACxC,EAAG,GAAK,CACZ,CAAC,EAGD,aAAM,KAAK,iBAAiBF,CAAa,EAGzC,MAAMC,EAEN,MAAM,KAAK,uBAAuBD,CAAa,EAExChC,CAEX,OAASpE,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,8BAA0BuG,CAAS,EAC7C,KAAK,SAAS,KAAK,QAAQA,CAAS,EAClC,IAAI,MAAMA,CAAS,CAC7B,CACJ,CAEA,MAAM,iBAAiBH,EAAe,CAClC,GAAI,CACA,IAAM9F,EAAW,CACb,KAAM,sBACN,OAAQ8F,EAAc,OACtB,SAAUA,EAAc,KAAK,KAC7B,SAAUA,EAAc,KAAK,KAC7B,SAAUA,EAAc,KAAK,MAAQ,2BACrC,SAAUA,EAAc,SACxB,YAAaA,EAAc,YAC3B,UAAW,KAAK,WAChB,KAAMA,EAAc,KACpB,UAAW,KAAK,IAAI,EACpB,QAAS,KACb,EAWA,GALIA,EAAc,UACd9F,EAAS,QAAU,GACf8F,EAAc,QAAO9F,EAAS,MAAQ8F,EAAc,QAGxD,KAAK,WACL,GAAI,CACA9F,EAAS,UAAY,MAAMD,GAAmB,iBAAiBC,EAAU,KAAK,UAAU,EACxF,QAAQ,IAAI,6CAAsC,CACtD,OAASkG,EAAW,CAChB1G,GAAqB,iBAAiB,mBAAoB,CACtD,OAAQsG,EAAc,OACtB,MAAOI,EAAU,OACrB,CAAC,CACL,CAIJ,MAAM,KAAK,kBAAkBlG,CAAQ,EAErC8F,EAAc,OAAS,eAE3B,OAASpG,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,uCAAmCuG,CAAS,EAC1DH,EAAc,OAAS,SACjB,IAAI,MAAMG,CAAS,CAC7B,CACJ,CAEA,MAAM,uBAAuBH,EAAe,CACxC,GAAI,CACAA,EAAc,OAAS,eAEvB,IAAMxD,EAAOwD,EAAc,KACrBK,EAAcL,EAAc,YAElC,QAASM,EAAa,EAAGA,EAAaD,EAAaC,IAAc,CAC7D,IAAMC,EAAQD,EAAa,KAAK,WAC1BE,EAAM,KAAK,IAAID,EAAQ,KAAK,WAAY/D,EAAK,IAAI,EAGjDiE,EAAY,MAAM,KAAK,cAAcjE,EAAM+D,EAAOC,CAAG,EAG3D,MAAM,KAAK,cAAcR,EAAeM,EAAYG,CAAS,EAG7DT,EAAc,aACd,IAAMP,EAAW,KAAK,MAAOO,EAAc,WAAaK,EAAe,EAAE,EAAI,EAC7E,KAAK,sBAAsBL,EAAe,IAAI,EAE9C,MAAM,KAAK,oBAAoB,CACnC,CAEAA,EAAc,OAAS,uBAMvB,KAAK,sBAAsBA,CAAa,CAE5C,OAASpG,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,oCAAgCuG,CAAS,EACvDH,EAAc,OAAS,SACjB,IAAI,MAAMG,CAAS,CAC7B,CACJ,CAIA,sBAAsBH,EAAe,CAE7BA,EAAc,cAAc,aAAaA,EAAc,YAAY,EACvEA,EAAc,aAAe,WAAW,IAAM,CAC1C,IAAMX,EAAQ,KAAK,gBAAgB,IAAIW,EAAc,MAAM,EACvDX,GAASA,EAAM,SAAW,aAC1B,KAAK,gBAAgBW,EAAc,MAAM,CAEjD,EAAG,IAAO,CACd,CAGA,MAAM,mBAAmBnG,EAAS,CAC9B,IAAMmG,EAAgB,KAAK,gBAAgB,IAAInG,GAAS,MAAM,EAC9D,GAAI,CAACmG,GAAiB,CAACA,EAAc,KAAM,OAC3C,IAAMU,EAAU,MAAM,QAAQ7G,EAAQ,OAAO,EAAIA,EAAQ,QAAU,CAAC,EACpE,GAAI6G,EAAQ,SAAW,EAAG,OAE1B,KAAK,sBAAsBV,CAAa,EACxCA,EAAc,OAAS,eAGvB,IAAMW,EAAUD,EAAQ,MAAM,EADN,GACwB,EAChD,QAAWE,KAAOD,EACd,GAAI,GAAC,OAAO,UAAUC,CAAG,GAAKA,EAAM,GAAKA,GAAOZ,EAAc,aAC9D,GAAI,CACA,IAAMO,EAAQK,EAAM,KAAK,WACnBJ,EAAM,KAAK,IAAID,EAAQ,KAAK,WAAYP,EAAc,KAAK,IAAI,EAC/DS,EAAY,MAAM,KAAK,cAAcT,EAAc,KAAMO,EAAOC,CAAG,EACzE,MAAM,KAAK,cAAcR,EAAeY,EAAKH,CAAS,EACtD,MAAM,KAAK,oBAAoB,CACnC,OAAS7G,EAAO,CACZ,QAAQ,KAAK,0CAAiCgH,EAAKlH,GAAqB,cAAcE,CAAK,CAAC,CAChG,CAGAoG,EAAc,SAAW,iBACzBA,EAAc,OAAS,wBAE3B,KAAK,sBAAsBA,CAAa,CAC5C,CAEA,MAAM,cAAcxD,EAAM+D,EAAOC,EAAK,CAClC,GAAI,CAEA,OAAO,MADMhE,EAAK,MAAM+D,EAAOC,CAAG,EAChB,YAAY,CAClC,OAAS5G,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,oCAAgCuG,CAAS,EACjD,IAAI,MAAMA,CAAS,CAC7B,CACJ,CAEA,MAAM,cAAcH,EAAeM,EAAYG,EAAW,CACtD,GAAI,CACA,IAAMX,EAAaE,EAAc,WAC3Ba,EAAQ,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAGjDC,EAAiB,MAAM,OAAO,OAAO,QACvC,CACI,KAAM,UACN,GAAID,CACR,EACAf,EACAW,CACJ,EAGMM,EAAe,KAAK,oBAAoB,IAAI,WAAWD,CAAc,CAAC,EACtEE,EAAe,CACjB,KAAM,aACN,OAAQhB,EAAc,OACtB,WAAYM,EACZ,YAAaN,EAAc,YAC3B,MAAO,MAAM,KAAKa,CAAK,EACvB,iBAAkBE,EAClB,UAAWN,EAAU,WACrB,UAAW,KAAK,IAAI,CACxB,EAEA,MAAM,KAAK,oBAAoB,EAE/B,MAAM,KAAK,kBAAkBO,CAAY,CAE7C,OAASpH,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,oCAAgCuG,CAAS,EACjD,IAAI,MAAMA,CAAS,CAC7B,CACJ,CAEA,MAAM,kBAAkBtG,EAAS,CAE7B,IAAMa,EAAgB,KAAK,UAAUb,CAAO,EACtCoH,EAAK,KAAK,eAAe,YACzBC,EAAa,GACfC,EAAU,EACRC,EAAQC,GAAO,IAAI,QAAQC,GAAK,WAAWA,EAAGD,CAAE,CAAC,EAEvD,OACI,GAAI,CACA,GAAI,CAACJ,GAAMA,EAAG,aAAe,OACzB,MAAM,IAAI,MAAM,wBAAwB,EAE5C,MAAM,KAAK,oBAAoB,EAC/BA,EAAG,KAAKvG,CAAa,EACrB,MACJ,OAASd,EAAO,CACZ,IAAM2H,EAAM,OAAO3H,GAAO,SAAW,EAAE,EACjC4H,EAAYD,EAAI,SAAS,oBAAoB,GAAKA,EAAI,SAAS,gBAAgB,EAC/EE,EAAQ7H,GAAO,OAAS,iBAC9B,IAAK4H,GAAaC,IAAUN,EAAUD,EAAY,CAC9CC,IACA,MAAM,KAAK,oBAAoB,EAC/B,MAAMC,EAAK,KAAK,IAAI,GAAKD,EAAS,GAAG,CAAC,EACtC,QACJ,CACA,cAAQ,MAAM,wCAAoCvH,CAAK,EACjDA,CACV,CAER,CAEA,MAAM,qBAAsB,CACxB,GAAI,CACA,IAAMqH,EAAK,KAAK,eAAe,YAC/B,GAAI,CAACA,EAAI,OAET,GAAI,OAAOA,EAAG,4BAA+B,SAAU,CAC/CA,EAAG,eAAiBA,EAAG,4BACvB,MAAM,IAAI,QAAQhG,GAAW,CACzB,IAAMyG,EAAU,IAAM,CAClBT,EAAG,oBAAoB,oBAAqBS,CAAO,EACnDzG,EAAQ,CACZ,EACAgG,EAAG,iBAAiB,oBAAqBS,EAAS,CAAE,KAAM,EAAK,CAAC,CACpE,CAAC,EAEL,MACJ,CAEA,IAAMC,EAAY,EAAI,KAAO,KAC7B,KAAOV,EAAG,eAAiBU,GACvB,MAAM,IAAI,QAAQ,GAAK,WAAW,EAAG,EAAE,CAAC,CAEhD,MAAY,CAEZ,CACJ,CAEA,MAAM,kBAAkBnF,EAAM,CAC1B,GAAI,CACA,IAAMoF,EAAc,MAAMpF,EAAK,YAAY,EACrCqF,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWD,CAAW,EAEpE,OADkB,MAAM,KAAK,IAAI,WAAWC,CAAU,CAAC,EACtC,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CACtE,OAASlI,EAAO,CACZ,cAAQ,MAAM,uCAAmCA,CAAK,EAChDA,CACV,CACJ,CAMA,MAAM,wBAAwBM,EAAU,CACpC,GAAI,CACA,IAAMyF,EAAW,KAAK,oBAAoB,EAC1C,GAAI,CAAC,KAAK,qBAAqB,UAAUA,CAAQ,EAC7C,MAAM,IAAI,MAAM,2CAA2C,EAG/D,IAAMxC,EAAa,KAAK,yBAAyBjD,CAAQ,EACzD,GAAI,CAACiD,EAAW,QAAS,MAAM,IAAI,MAAMA,EAAW,OAAO,KAAK,IAAI,CAAC,EAErE,GAAIjD,EAAS,WAAa,KAAK,gBAC3B,GAAI,CAOA,GAAI,CANY,MAAMD,GAAmB,mBACrCC,EACAA,EAAS,UACT,KAAK,eACT,EAGI,MAAAR,GAAqB,iBAAiB,6BAA8B,CAChE,OAAQQ,EAAS,MACrB,CAAC,EACK,IAAI,MAAM,iCAAiC,EAGrD,QAAQ,IAAI,yDAAkD,CAClE,OAAS6H,EAAa,CAClB,MAAArI,GAAqB,iBAAiB,sBAAuB,CACzD,OAAQQ,EAAS,OACjB,MAAO6H,EAAY,OACvB,CAAC,EACK,IAAI,MAAM,mCAAmC,CACvD,CAIJ,GAAI,KAAK,mBAAmB,IAAI7H,EAAS,MAAM,GAAK,KAAK,yBAAyB,IAAIA,EAAS,MAAM,EACjG,OAGJ,GAAI,KAAK,yBAAyB,MAAQ,KAAK,+BAC3C,MAAM,IAAI,MAAM,yCAAyC,EAGzDiD,EAAW,gBAGX,QAAQ,KAAK,wDAAwDA,EAAW,cAAc,EAAE,EAGpG,IAAM6E,EAAkB,CACpB,GAAG9H,EAEH,QAASiD,EAAW,QACpB,SAAUA,EAAW,YACrB,WAAY,KAAK,IAAI,CACzB,EACA,KAAK,yBAAyB,IAAIjD,EAAS,OAAQ8H,CAAe,EAE9D7E,EAAW,UACX,KAAK,wBAA0BjD,EAAS,UAGxC,OAAO,KAAK,uBAA0B,WACtC,KAAK,sBAAsB,CACvB,OAAQ8H,EAAgB,OACxB,SAAUA,EAAgB,SAC1B,SAAUA,EAAgB,SAC1B,SAAUA,EAAgB,UAAY,2BAGtC,QAAS7E,EAAW,QACpB,MAAO6E,EAAgB,OAAS,IACpC,CAAC,EAED,MAAM,KAAK,mBAAmB9H,EAAS,OAAQmC,EAAE,yBAAyB,CAAC,CAGnF,OAASzC,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,QAAQ,MAAM,+CAA2CuG,CAAS,EAGlE,IAAM8B,EAAgB,CAClB,KAAM,yBACN,OAAQ/H,EAAS,OACjB,SAAU,GACV,MAAOiG,EACP,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkB8B,CAAa,CAC9C,CACJ,CAEA,MAAM,gBAAgBjB,EAAc,CAChC,OAAO,KAAK,UAAU,SAClB,SAASA,EAAa,MAAM,GAC5B,SAAY,CACR,GAAI,CACA,IAAIkB,EAAiB,KAAK,mBAAmB,IAAIlB,EAAa,MAAM,EAQpE,GALI,CAACkB,GAKDA,EAAe,YAAcA,EAAe,SAAW,YACvD,OAGJ,GAAI,CAAC,KAAK,wBAAwBlB,EAAa,MAAM,EAAG,CACpD,QAAQ,KAAK,8EAAqEA,EAAa,MAAM,EACrG,KAAK,yBAAyBA,EAAa,MAAM,EACjD,MACJ,CAMA,GAHAkB,EAAe,cAAgB,KAAK,IAAI,EAGpCA,EAAe,eAAe,IAAIlB,EAAa,UAAU,EACzD,OAIJ,GAAIA,EAAa,WAAa,GAAKA,EAAa,YAAckB,EAAe,YACzE,MAAM,IAAI,MAAM,wBAAwBlB,EAAa,UAAU,EAAE,EAIrE,IAAMH,EAAQ,IAAI,WAAWG,EAAa,KAAK,EAE3CmB,EACJ,GAAInB,EAAa,iBACbmB,EAAgB,KAAK,mBAAmBnB,EAAa,gBAAgB,UAC9DA,EAAa,cACpBmB,EAAgB,IAAI,WAAWnB,EAAa,aAAa,MAEzD,OAAM,IAAI,MAAM,wBAAwB,EAG5C,IAAMoB,EAAiB,MAAM,OAAO,OAAO,QACvC,CACI,KAAM,UACN,GAAIvB,CACR,EACAqB,EAAe,WACfC,CACJ,EAGA,GAAIC,EAAe,aAAepB,EAAa,UAC3C,MAAM,IAAI,MAAM,iCAAiCA,EAAa,SAAS,SAASoB,EAAe,UAAU,EAAE,EAI/GF,EAAe,eAAe,IAAIlB,EAAa,WAAYoB,CAAc,EACzEF,EAAe,gBACf,KAAK,sBAAsBA,EAAgB,MAAM,EAGjD,IAAMG,EAAe,CACjB,KAAM,qBACN,OAAQrB,EAAa,OACrB,WAAYA,EAAa,WACzB,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkBqB,CAAY,EAGrCH,EAAe,gBAAkBA,EAAe,aAChD,MAAM,KAAK,aAAaA,CAAc,CAG9C,OAAStI,EAAO,CAKZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,QAAQ,KAAK,yEAAgEoH,EAAa,WAAYb,CAAS,CACnH,CACJ,CACJ,CACJ,CAEA,wBAAwBnC,EAAQ,CAC5B,IAAM2B,EAAW,KAAK,oBAAoB,EAC1C,OAAK,KAAK,qBAAqB,UAAUA,CAAQ,GAQ5C,KAAK,8BAA8B,IAAI3B,CAAM,GAC9C,KAAK,8BAA8B,IAC/BA,EACA,IAAI9C,GAAY,KAAK,4CAA6C,GAAK,CAC3E,EAGoB,KAAK,8BAA8B,IAAI8C,CAAM,EAChD,UAAUA,CAAM,EAQ9B,IAPHtE,GAAqB,iBAAiB,8CAA+C,CACjF,SAAAiG,EACA,OAAA3B,CACJ,CAAC,EACM,MApBPtE,GAAqB,iBAAiB,+CAAgD,CAClF,SAAAiG,EACA,OAAA3B,CACJ,CAAC,EACM,GAoBf,CAEA,MAAM,aAAakE,EAAgB,CAI/B,GAAI,CAAAA,EAAe,WAGnB,CAAAA,EAAe,WAAa,GAE5B,GAAI,CACAA,EAAe,OAAS,aAGxB,QAASrE,EAAI,EAAGA,EAAIqE,EAAe,YAAarE,IAC5C,GAAI,CAACqE,EAAe,eAAe,IAAIrE,CAAC,EACpC,MAAM,IAAI,MAAM,iBAAiBA,CAAC,EAAE,EAK5C,IAAMyE,EAAS,CAAC,EAChB,QAASzE,EAAI,EAAGA,EAAIqE,EAAe,YAAarE,IAAK,CACjD,IAAM0E,EAAQL,EAAe,eAAe,IAAIrE,CAAC,EACjDyE,EAAO,KAAK,IAAI,WAAWC,CAAK,CAAC,CACrC,CAGA,IAAMC,EAAYF,EAAO,OAAO,CAACG,EAAKF,IAAUE,EAAMF,EAAM,OAAQ,CAAC,EAGrE,GAAIC,IAAcN,EAAe,SAC7B,MAAM,IAAI,MAAM,gCAAgCA,EAAe,QAAQ,SAASM,CAAS,EAAE,EAI/F,IAAME,EAAW,IAAI,WAAWF,CAAS,EACrCvD,EAAS,EACb,QAAWsD,KAASD,EAChBI,EAAS,IAAIH,EAAOtD,CAAM,EAC1BA,GAAUsD,EAAM,OAKpB,GADqB,MAAM,KAAK,0BAA0BG,CAAQ,IAC7CR,EAAe,SAChC,MAAM,IAAI,MAAM,6CAA6C,EAGjE,IAAMS,EAAaD,EAAS,OACtBE,EAAW,IAAI,KAAK,CAACD,CAAU,EAAG,CAAE,KAAMT,EAAe,QAAS,CAAC,EAYzE,GAVAA,EAAe,QAAU,KAAK,IAAI,EAClCA,EAAe,OAAS,YAExB,KAAK,yBAAyBA,EAAe,OAAQ,CACjD,OAAQS,EACR,KAAMT,EAAe,SACrB,KAAMA,EAAe,SACrB,KAAMA,EAAe,QACzB,CAAC,EAEG,KAAK,eAAgB,CACrB,IAAMW,EAAU,SAAY,CACxB,IAAM3E,EAAO,MAAM,KAAK,QAAQgE,EAAe,MAAM,EACrD,GAAI,CAAChE,EACD,MAAM,IAAI,MAAM,gDAAgD,EAEpE,OAAOA,CACX,EACM4E,EAAe,SAAY,CAC7B,IAAM5E,EAAO,MAAM2E,EAAQ,EAC3B,OAAO,IAAI,gBAAgB3E,CAAI,CACnC,EACM6E,EAAmB5E,GAAQ,CAC7B,GAAI,CAAE,IAAI,gBAAgBA,CAAG,CAAG,MAAY,CAAC,CACjD,EAEA,KAAK,eAAe,CAChB,OAAQ+D,EAAe,OACvB,SAAUA,EAAe,SACzB,SAAUA,EAAe,SACzB,SAAUA,EAAe,SACzB,aAAcA,EAAe,QAAUA,EAAe,UAEtD,QAAS,CAAC,CAACA,EAAe,QAC1B,MAAOA,EAAe,OAAS,KAE/B,SAAAU,EACA,QAAAC,EACA,aAAAC,EACA,gBAAAC,CACJ,CAAC,CACL,CAGA,IAAMC,EAAoB,CACtB,KAAM,yBACN,OAAQd,EAAe,OACvB,QAAS,GACT,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkBc,CAAiB,EAO1Cd,EAAe,cACf,cAAcA,EAAe,WAAW,EACxCA,EAAe,YAAc,MAE7BA,EAAe,gBAAgBA,EAAe,eAAe,MAAM,EACvEA,EAAe,WAAa,IAEhC,OAAStI,EAAO,CACZ,QAAQ,MAAM,+BAA2BA,CAAK,EAC9CsI,EAAe,OAAS,SAEpB,KAAK,SACL,KAAK,QAAQ,yBAAyBtI,EAAM,OAAO,EAAE,EAIzD,IAAM8E,EAAe,CACjB,KAAM,yBACN,OAAQwD,EAAe,OACvB,QAAS,GACT,MAAOtI,EAAM,QACb,UAAW,KAAK,IAAI,CACxB,EACA,MAAM,KAAK,kBAAkB8E,CAAY,EAGzC,KAAK,yBAAyBwD,EAAe,MAAM,CACvD,EACJ,CAEA,MAAM,0BAA0B9H,EAAM,CAClC,GAAI,CACA,IAAMyH,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWzH,CAAI,EAE7D,OADkB,MAAM,KAAK,IAAI,WAAWyH,CAAU,CAAC,EACtC,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CACtE,OAASlI,EAAO,CACZ,cAAQ,MAAM,kCAA8BA,CAAK,EAC3CA,CACV,CACJ,CAEA,uBAAuBqJ,EAAU,CAC7B,GAAI,CACA,IAAMjD,EAAgB,KAAK,gBAAgB,IAAIiD,EAAS,MAAM,EAE9D,GAAI,CAACjD,EACD,OAGAiD,EAAS,UACTjD,EAAc,OAAS,WACnBA,EAAc,gBAAgB,aAAaA,EAAc,cAAc,EAC3EA,EAAc,eAAiB,KAC/BA,EAAc,iBAAiB,EAC/BA,EAAc,eAAiB,KAC/BA,EAAc,cAAgB,OAE9BA,EAAc,OAAS,WACnBA,EAAc,gBAAgB,aAAaA,EAAc,cAAc,EAC3EA,EAAc,eAAiB,KAC/BA,EAAc,gBAAgB,IAAI,MAAMiD,EAAS,OAAS,mBAAmB,CAAC,EAC9EjD,EAAc,cAAgB,KAC9BA,EAAc,eAAiB,KAE3B,KAAK,SACL,KAAK,QAAQ,sBAAsBiD,EAAS,OAAS,gBAAgB,EAAE,EAG3E,KAAK,gBAAgBA,EAAS,MAAM,EAE5C,OAASrJ,EAAO,CACZ,QAAQ,MAAM,6CAAyCA,CAAK,CAChE,CACJ,CAEA,wBAAwByI,EAAc,CAClC,GAAI,CACA,IAAMrC,EAAgB,KAAK,gBAAgB,IAAIqC,EAAa,MAAM,EAClE,GAAI,CAACrC,EACD,OAGJA,EAAc,kBACdA,EAAc,cAAgB,KAAK,IAAI,EACnCA,EAAc,SAAW,wBACzB,KAAK,sBAAsBA,CAAa,CAEhD,OAASpG,EAAO,CACZ,QAAQ,MAAM,8CAA0CA,CAAK,CACjE,CACJ,CAEA,uBAAuBsJ,EAAY,CAC/B,GAAI,CACA,IAAMlD,EAAgB,KAAK,gBAAgB,IAAIkD,EAAW,MAAM,EAChE,GAAI,CAAClD,EACD,OAGAkD,EAAW,SACXlD,EAAc,OAAS,YACvBA,EAAc,QAAU,KAAK,IAAI,EAE7B,KAAK,YACL,KAAK,WAAW,CACZ,OAAQA,EAAc,OACtB,SAAUA,EAAc,KAAK,KAC7B,SAAUA,EAAc,KAAK,KAC7B,aAAcA,EAAc,QAAUA,EAAc,UACpD,OAAQ,WACZ,CAAC,IAGLA,EAAc,OAAS,SAEnB,KAAK,SACL,KAAK,QAAQ,oBAAoBkD,EAAW,OAAS,eAAe,EAAE,GAI9E,KAAK,gBAAgBA,EAAW,MAAM,CAE1C,OAAStJ,EAAO,CACZ,QAAQ,MAAM,+CAA2CA,CAAK,CAClE,CACJ,CAEA,oBAAoB8E,EAAc,CAC9B,GAAI,CACA,IAAMsB,EAAgB,KAAK,gBAAgB,IAAItB,EAAa,MAAM,EAC9DsB,IACAA,EAAc,OAAS,SACvB,KAAK,gBAAgBtB,EAAa,MAAM,GAG5C,IAAMwD,EAAiB,KAAK,mBAAmB,IAAIxD,EAAa,MAAM,EAClEwD,IACAA,EAAe,OAAS,SACxB,KAAK,yBAAyBxD,EAAa,MAAM,GAGjD,KAAK,SACL,KAAK,QAAQ,mBAAmBA,EAAa,OAAS,eAAe,EAAE,CAG/E,OAAS9E,EAAO,CACZ,QAAQ,MAAM,0CAAsCA,CAAK,CAC7D,CACJ,CAMA,oBAAqB,CACjB,OAAO,MAAM,KAAK,KAAK,gBAAgB,OAAO,CAAC,EAAE,IAAIuJ,IAAa,CAC9D,OAAQA,EAAS,OACjB,SAAUA,EAAS,MAAM,MAAQ,UACjC,SAAUA,EAAS,MAAM,MAAQ,EACjC,SAAU,KAAK,MAAOA,EAAS,WAAaA,EAAS,YAAe,GAAG,EAEvE,YAAaA,EAAS,aAAe,EACrC,kBAAmBA,EAAS,YAAc,EAC1C,OAAQA,EAAS,OACjB,UAAWA,EAAS,SACxB,EAAE,CACN,CAEA,uBAAwB,CACpB,OAAO,MAAM,KAAK,KAAK,mBAAmB,OAAO,CAAC,EAAE,IAAIA,IAAa,CACjE,OAAQA,EAAS,OACjB,SAAUA,EAAS,UAAY,UAC/B,SAAUA,EAAS,UAAY,EAC/B,SAAU,KAAK,MAAOA,EAAS,cAAgBA,EAAS,YAAe,GAAG,EAE1E,YAAaA,EAAS,aAAe,EACrC,kBAAmBA,EAAS,eAAiB,EAC7C,OAAQA,EAAS,OACjB,UAAWA,EAAS,SACxB,EAAE,CACN,CAEA,6BAA8B,CAC1B,OAAO,MAAM,KAAK,KAAK,yBAAyB,OAAO,CAAC,EAAE,IAAIA,IAAa,CACvE,OAAQA,EAAS,OACjB,SAAUA,EAAS,SACnB,SAAUA,EAAS,SACnB,SAAUA,EAAS,UAAY,2BAC/B,WAAYA,EAAS,UACzB,EAAE,CACN,CAEA,MAAM,mBAAmBnF,EAAQ,CAC7B,IAAM9D,EAAW,KAAK,yBAAyB,IAAI8D,CAAM,EACzD,GAAI,CAAC9D,EAAU,MAAO,GACtB,IAAM4F,EAAa,MAAM,KAAK,6BAA6B9B,EAAQ9D,EAAS,IAAI,EAChF,YAAK,mBAAmB,IAAI8D,EAAQ,CAChC,OAAAA,EACA,SAAU9D,EAAS,SACnB,SAAUA,EAAS,SACnB,SAAUA,EAAS,UAAY,2BAC/B,SAAUA,EAAS,SACnB,YAAaA,EAAS,YACtB,UAAWA,EAAS,WAAa,KAAK,WACtC,WAAA4F,EACA,KAAM5F,EAAS,KACf,eAAgB,IAAI,IACpB,cAAe,EACf,UAAW,KAAK,IAAI,EACpB,cAAe,KAAK,IAAI,EACxB,OAAQ,YACR,QAAS,CAAC,CAACA,EAAS,QACpB,MAAOA,EAAS,OAAS,IAC7B,CAAC,EACD,KAAK,yBAAyB,OAAO8D,CAAM,EAC3C,MAAM,KAAK,kBAAkB,CAAE,KAAM,yBAA0B,OAAAA,EAAQ,SAAU,GAAM,UAAW,KAAK,IAAI,CAAE,CAAC,EAE9G,KAAK,4BAA4BA,CAAM,EAChC,EACX,CAKA,4BAA4BA,EAAQ,CAKhC,IAAMoF,EAAK,KAAK,mBAAmB,IAAIpF,CAAM,EACxCoF,IACDA,EAAG,aAAa,cAAcA,EAAG,WAAW,EAChDA,EAAG,mBAAqBA,EAAG,eAAiB,EAC5CA,EAAG,kBAAoB,KAAK,IAAI,EAEhCA,EAAG,YAAc,YAAY,SAAY,CACrC,IAAM/D,EAAQ,KAAK,mBAAmB,IAAIrB,CAAM,EAChD,GAAI,CAACqB,GAASA,EAAM,cAAgB+D,EAAG,YAAa,CAChD,cAAcA,EAAG,WAAW,EAC5B,MACJ,CACA,GAAI/D,EAAM,SAAW,aAAeA,EAAM,WAAY,CAClD,cAAcA,EAAM,WAAW,EAC/BA,EAAM,YAAc,KACpB,MACJ,CAOA,GAJIA,EAAM,gBAAkBA,EAAM,qBAC9BA,EAAM,mBAAqBA,EAAM,cACjCA,EAAM,kBAAoB,KAAK,IAAI,GAEnC,EAAAA,EAAM,eAAiBA,EAAM,cAG7B,OAAK,IAAI,GAAKA,EAAM,eAAiB,GAAK,KAG9C,IAAI,KAAK,IAAI,EAAIA,EAAM,kBAAoB,KAAa,CACpD,cAAcA,EAAM,WAAW,EAC/BA,EAAM,YAAc,KACpBA,EAAM,OAAS,SACX,KAAK,SAAS,KAAK,QAAQ,kEAA6D,EAC5F,KAAK,yBAAyBrB,CAAM,EACpC,MACJ,CAEA,MAAM,KAAK,sBAAsBA,CAAM,EAC3C,EAAG,IAAO,EACd,CAEA,MAAM,sBAAsBA,EAAQ,CAChC,IAAMqB,EAAQ,KAAK,mBAAmB,IAAIrB,CAAM,EAChD,GAAI,CAACqB,GAAS,CAACA,EAAM,eAAgB,OACrC,IAAMgE,EAAkB,IAClB3C,EAAU,CAAC,EACjB,QAAS7C,EAAI,EAAGA,EAAIwB,EAAM,aAAeqB,EAAQ,OAAS2C,EAAiBxF,IAClEwB,EAAM,eAAe,IAAIxB,CAAC,GAAG6C,EAAQ,KAAK7C,CAAC,EAEpD,GAAI6C,EAAQ,SAAW,EACvB,CAAArB,EAAM,OAAS,YACf,GAAI,CACA,MAAM,KAAK,kBAAkB,CACzB,KAAM,qBACN,OAAArB,EACA,QAAA0C,EACA,UAAW,KAAK,IAAI,CACxB,CAAC,CACL,MAAY,CAEZ,EACJ,CAEA,MAAM,mBAAmB1C,EAAQpE,EAAQ,mBAAoB,CACzD,OAAK,KAAK,yBAAyB,IAAIoE,CAAM,GAC7C,KAAK,yBAAyB,OAAOA,CAAM,EAC3C,MAAM,KAAK,kBAAkB,CAAE,KAAM,yBAA0B,OAAAA,EAAQ,SAAU,GAAO,MAAApE,EAAO,UAAW,KAAK,IAAI,CAAE,CAAC,EAC/G,IAHgD,EAI3D,CAEA,eAAeoE,EAAQ,CACnB,GAAI,CACA,OAAI,KAAK,gBAAgB,IAAIA,CAAM,GAC/B,KAAK,gBAAgBA,CAAM,EACpB,IAEP,KAAK,mBAAmB,IAAIA,CAAM,GAClC,KAAK,yBAAyBA,CAAM,EAC7B,IAEJ,EACX,OAASpE,EAAO,CACZ,eAAQ,MAAM,oCAAgCA,CAAK,EAC5C,EACX,CACJ,CAEA,gBAAgBoE,EAAQ,CACpB,IAAMgC,EAAgB,KAAK,gBAAgB,IAAIhC,CAAM,EACjDgC,IACIA,EAAc,eACd,aAAaA,EAAc,YAAY,EACvCA,EAAc,aAAe,MAE7BA,EAAc,iBACd,aAAaA,EAAc,cAAc,EACzCA,EAAc,eAAiB,MAE/BA,EAAc,gBACdA,EAAc,cAAc,IAAI,MAAM,iDAAiD,CAAC,EACxFA,EAAc,cAAgB,KAC9BA,EAAc,eAAiB,OAIvC,KAAK,gBAAgB,OAAOhC,CAAM,EAClC,KAAK,YAAY,OAAOA,CAAM,EAC9B,KAAK,eAAe,OAAOA,CAAM,EACjC,KAAK,8BAA8B,OAAOA,CAAM,EAGhD,QAAWsF,KAAW,KAAK,gBACnBA,EAAQ,WAAWtF,CAAM,GACzB,KAAK,gBAAgB,OAAOsF,CAAO,CAG/C,CAEA,yBAAyBtF,EAAQC,EAAO,CAEpC,IADA,KAAK,oBAAoB,IAAID,EAAQC,CAAK,EACnC,KAAK,oBAAoB,KAAO,KAAK,oCAAoC,CAC5E,IAAMsF,EAAe,KAAK,oBAAoB,KAAK,EAAE,KAAK,EAAE,MAC5D,KAAK,2BAA2BA,CAAY,CAChD,CACJ,CAEA,2BAA2BvF,EAAQ,CAC/B,IAAM2E,EAAa,KAAK,oBAAoB,IAAI3E,CAAM,EACtD,GAAI,CAAC2E,EAAY,OACjB,GAAI,CACIA,EAAW,SACXjH,GAAoB,WAAWiH,EAAW,MAAM,EAChD,IAAI,WAAWA,EAAW,MAAM,EAAE,KAAK,CAAC,EAEhD,MAAY,CAEZ,CACA,KAAK,oBAAoB,OAAO3E,CAAM,EAItC,IAAMoF,EAAK,KAAK,mBAAmB,IAAIpF,CAAM,EACzCoF,IAAOA,EAAG,SAAW,aAAeA,EAAG,cACnCA,EAAG,cAAe,cAAcA,EAAG,WAAW,EAAGA,EAAG,YAAc,MACtE,KAAK,mBAAmB,OAAOpF,CAAM,EAE7C,CAGA,yBAAyBA,EAAQ,CAC7B,GAAI,CAEA,KAAK,cAAc,OAAOA,CAAM,EAEhC,IAAMkE,EAAiB,KAAK,mBAAmB,IAAIlE,CAAM,EACzD,GAAIkE,EAAgB,CAOhB,GALIA,EAAe,cACf,cAAcA,EAAe,WAAW,EACxCA,EAAe,YAAc,MAG7BA,EAAe,gBAAkBA,EAAe,eAAe,KAAO,EAAG,CACzE,OAAW,CAACsB,EAAOjB,CAAK,IAAKL,EAAe,eACxC,GAAI,CAEIK,IAAUA,aAAiB,aAAeA,aAAiB,cAC3D7G,GAAoB,WAAW6G,CAAK,EAGhCA,aAAiB,YACJ,IAAI,WAAWA,CAAK,EAC5B,KAAK,CAAC,EACJA,aAAiB,YACxBA,EAAM,KAAK,CAAC,EAGxB,OAASkB,EAAY,CACjB,QAAQ,KAAK,8CAAqCA,CAAU,CAChE,CAEJvB,EAAe,eAAe,MAAM,CACxC,CAGA,GAAIA,EAAe,WACf,GAAI,CAEAA,EAAe,WAAa,IAChC,OAASwB,EAAU,CACf,QAAQ,KAAK,4CAAmCA,CAAQ,CAC5D,CAIJ,GAAIxB,EAAe,KACf,GAAI,CACI,MAAM,QAAQA,EAAe,IAAI,GACjCA,EAAe,KAAK,KAAK,CAAC,EAE9BA,EAAe,KAAO,IAC1B,OAASyB,EAAW,CAChB,QAAQ,KAAK,qCAA4BA,CAAS,CACtD,CAIJ,OAAW,CAAC9I,EAAK+I,CAAK,IAAK,OAAO,QAAQ1B,CAAc,EAChD0B,GAAS,OAAOA,GAAU,WACtBA,aAAiB,aAAeA,aAAiB,WACjDlI,GAAoB,WAAWkI,CAAK,EAC7B,MAAM,QAAQA,CAAK,GAC1BA,EAAM,KAAK,CAAC,EAEhB1B,EAAerH,CAAG,EAAI,KAGlC,CAGA,KAAK,mBAAmB,OAAOmD,CAAM,EACrC,KAAK,YAAY,OAAOA,CAAM,EAC9B,KAAK,8BAA8B,OAAOA,CAAM,EAGhD,IAAM2E,EAAa,KAAK,oBAAoB,IAAI3E,CAAM,EACtD,GAAI2E,EACA,GAAI,CACIA,EAAW,SACXjH,GAAoB,WAAWiH,EAAW,MAAM,EAGnC,IAAI,WAAWA,EAAW,MAAM,EACxC,KAAK,CAAC,GAIf,OAAW,CAAC9H,EAAK+I,CAAK,IAAK,OAAO,QAAQjB,CAAU,EAC5CiB,GAAS,OAAOA,GAAU,YACtBA,aAAiB,aAAeA,aAAiB,aACjDlI,GAAoB,WAAWkI,CAAK,EAExCjB,EAAW9H,CAAG,EAAI,MAI1B,KAAK,oBAAoB,OAAOmD,CAAM,CAC1C,OAAS6F,EAAa,CAClB,QAAQ,KAAK,qDAA4CA,CAAW,EAEpE,KAAK,oBAAoB,OAAO7F,CAAM,CAC1C,CAIJ,IAAM8F,EAAiB,CAAC,EACxB,QAAWR,KAAW,KAAK,gBACnBA,EAAQ,WAAWtF,CAAM,GACzB8F,EAAe,KAAKR,CAAO,EAKnC,QAAWA,KAAWQ,EAClB,KAAK,gBAAgB,OAAOR,CAAO,EAIvC,GAAI,OAAO,OAAW,KAAe,OAAO,GACxC,GAAI,CACA,OAAO,GAAG,CACd,MAAkB,CAElB,CAGJ,QAAQ,IAAI,sDAA+CtF,CAAM,EAAE,CAEvE,OAASpE,EAAO,CACZ,cAAQ,MAAM,6CAAyCA,CAAK,EAG5D,KAAK,mBAAmB,OAAOoE,CAAM,EACrC,KAAK,YAAY,OAAOA,CAAM,EAC9B,KAAK,oBAAoB,OAAOA,CAAM,EACtC,KAAK,cAAc,OAAOA,CAAM,EAE1B,IAAI,MAAM,0BAA0BpE,EAAM,OAAO,EAAE,CAC7D,CACJ,CAEA,kBAAkBoE,EAAQ,CACtB,GAAI,KAAK,gBAAgB,IAAIA,CAAM,EAAG,CAClC,IAAMmF,EAAW,KAAK,gBAAgB,IAAInF,CAAM,EAChD,MAAO,CACH,KAAM,UACN,OAAQmF,EAAS,OACjB,SAAUA,EAAS,KAAK,KACxB,SAAU,KAAK,MAAOA,EAAS,WAAaA,EAAS,YAAe,GAAG,EACvE,OAAQA,EAAS,OACjB,UAAWA,EAAS,SACxB,CACJ,CAEA,GAAI,KAAK,mBAAmB,IAAInF,CAAM,EAAG,CACrC,IAAMmF,EAAW,KAAK,mBAAmB,IAAInF,CAAM,EACnD,MAAO,CACH,KAAM,YACN,OAAQmF,EAAS,OACjB,SAAUA,EAAS,SACnB,SAAU,KAAK,MAAOA,EAAS,cAAgBA,EAAS,YAAe,GAAG,EAC1E,OAAQA,EAAS,OACjB,UAAWA,EAAS,SACxB,CACJ,CAEA,OAAO,IACX,CAEA,iBAAkB,CACd,MAAO,CACH,YAAa,GACb,gBAAiB,KAAK,gBAAgB,KACtC,mBAAoB,KAAK,mBAAmB,KAC5C,eAAgB,KAAK,gBAAgB,KAAO,KAAK,mBAAmB,KACpE,uBAAwB,KAAK,yBAC7B,YAAa,KAAK,cAClB,UAAW,KAAK,WAChB,iBAAkB,CAAC,CAAC,KAAK,cACzB,YAAa,KAAK,eAAe,cAAc,GAAK,GACpD,eAAgB,CAAC,CAAC,KAAK,eAAe,YACtC,iBAAkB,KAAK,eAAe,aAAa,WACnD,WAAY,KAAK,eAAe,WAChC,iBAAkB,CAAC,CAAC,KAAK,eAAe,cACxC,UAAW,CAAC,CAAC,KAAK,eAAe,OACjC,sBAAuB,KAAK,eAAe,qBAAuB,KAClE,mBAAoB,KAAK,sBAAsB,EAC/C,aAAc,KAAK,gBAAgB,CACvC,CACJ,CAEA,SAAU,CACNnK,GAA0B,YAAY,EAAE,WAAW,EAE/C,KAAK,eAAiB,KAAK,cAAc,aAAe,KAAK,oBAC7D,KAAK,cAAc,YAAY,UAAY,KAAK,kBAChD,KAAK,kBAAoB,MAGzB,KAAK,eAAiB,KAAK,yBAC3B,KAAK,cAAc,eAAiB,KAAK,uBACzC,KAAK,uBAAyB,MAG9B,KAAK,eAAiB,KAAK,+BAC3B,KAAK,cAAc,qBAAuB,KAAK,6BAC/C,KAAK,6BAA+B,MAIxC,QAAWgF,KAAU,KAAK,gBAAgB,KAAK,EAC3C,KAAK,gBAAgBA,CAAM,EAG/B,QAAWA,KAAU,KAAK,mBAAmB,KAAK,EAC9C,KAAK,yBAAyBA,CAAM,EAGpC,KAAK,WACL,KAAK,UAAU,MAAM,MAAM,EAG3B,KAAK,aACL,KAAK,YAAY,SAAS,MAAM,EAEhC,KAAK,sBACL,KAAK,qBAAqB,SAAS,MAAM,EAE7C,KAAK,8BAA8B,MAAM,EAGzC,KAAK,cAAc,MAAM,EACzB,KAAK,yBAAyB,MAAM,EACpC,KAAK,gBAAgB,MAAM,EAC3B,KAAK,mBAAmB,MAAM,EAC9B,KAAK,cAAc,OAAS,EAC5B,KAAK,YAAY,MAAM,EACvB,KAAK,eAAe,MAAM,EAC1B,KAAK,gBAAgB,MAAM,EAE3B,QAAWA,KAAU,MAAM,KAAK,KAAK,oBAAoB,KAAK,CAAC,EAC3D,KAAK,2BAA2BA,CAAM,EAG1C,KAAK,UAAU,CACnB,CAMA,gBAAgB+F,EAAa,CAEzB,KAAK,YAAY,MAAM,CAC3B,CAMA,2BAA4B,CAsCxB,MArCkB,CACd,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,mBAAoB,CAChB,YAAa,CAAC,CAAC,KACf,iBAAkB,CAAC,CAAC,KAAK,cACzB,kBAAmB,KAAK,eAAe,aAAa,KACpD,sBAAuB,KAAK,eAAe,qBAAuB,IACtE,EACA,cAAe,CACX,eAAgB,CAAC,CAAC,KAAK,eAAe,YACtC,iBAAkB,KAAK,eAAe,aAAa,WACnD,YAAa,KAAK,eAAe,cAAc,GAAK,GACpD,WAAY,KAAK,eAAe,WAChC,iBAAkB,CAAC,CAAC,KAAK,eAAe,cACxC,UAAW,CAAC,CAAC,KAAK,eAAe,OACjC,kBAAmB,CAAC,CAAC,KAAK,eAAe,eACzC,eAAgB,CAAC,CAAC,KAAK,eAAe,WAC1C,EACA,gBAAiB,CACb,cAAe/K,GAA0B,YAAY,EAAE,SAAS,EAChE,cAAeA,GAA0B,YAAY,EAAE,iBAAiB,EACxE,aAAc,CAAC,CAAC,KAAK,UACrB,eAAgB,CAAC,CAAC,KAAK,WAC3B,EACA,UAAW,CACP,gBAAiB,KAAK,gBAAgB,KACtC,mBAAoB,KAAK,mBAAmB,KAC5C,cAAe,KAAK,cAAc,KAClC,YAAa,KAAK,YAAY,IAClC,EACA,gBAAiB,CACb,eAAgB,KAAK,sBAAsB,EAC3C,eAAgB,KAAK,eAAe,KAAK,aAAa,EACtD,aAAc,OAAO,KAAK,KAAK,sBAAsB,CACzD,CACJ,CAGJ,CAEA,MAAM,mBAAmBgF,EAAQ,CAC7B,GAAI,CACA,GAAI,CAAC,KAAK,cAAc,gBAAkB,CAAC,KAAK,cAAc,YAC1D,MAAM,IAAI,MAAM,4BAA4B,EAIhD,IAAMgG,EAAe,MAAM,KAAK,qBAAqBhG,CAAM,EAGrDiG,EAAc,MAAM,KAAK,6BAA6BjG,EAAQgG,EAAa,IAAI,EAG/EE,EAAW,IAAI,YAAY,EAAE,OAAO,WAAW,EAC/CrD,EAAQ,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAEjDsD,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAItD,CAAM,EAC7BmD,EAAa,IACbE,CACJ,EAEME,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAIvD,CAAM,EAC7BoD,EACAE,CACJ,EAIA,GAFsB,IAAI,YAAY,EAAE,OAAOC,CAAS,IAElC,YAClB,MAAO,CAAE,QAAS,GAAM,QAAS,kBAAmB,EAEpD,MAAM,IAAI,MAAM,gCAAgC,CAGxD,OAASxK,EAAO,CACZ,eAAQ,MAAM,qCAAiCA,CAAK,EAC7C,CAAE,QAAS,GAAO,MAAOA,EAAM,OAAQ,CAClD,CACJ,CAMA,2BAA4B,CACxB,GAAI,CAAC,KAAK,cACN,MAAM,IAAI,MAAM,8BAA8B,EAGlD,KAAK,cAAc,mBAAqB,KAExC,KAAK,cAAc,sBAAyB8H,GAAY,CACpD,KAAK,cAAc,oBAAsBA,CAC7C,EAEA,KAAK,cAAc,sBAAuB7H,GAC/B,KAAK,kBAAkBA,CAAO,CACxC,CACL,CAEA,OAAO,wBAAwBwK,EAAoB,CAC/C,MAAO,OAAOtK,GAAU,CACpB,GAAI,CACA,GAAI,OAAOA,EAAM,MAAS,SAAU,CAChC,IAAMsE,EAAS,KAAK,MAAMtE,EAAM,IAAI,EAEpC,GAAIsK,EAAmB,sBAAsBhG,CAAM,EAC/C,aAAMgG,EAAmB,kBAAkBhG,CAAM,EAC1C,EAEf,CACJ,MAAgB,CAChB,CAEA,MAAO,EACX,CACJ,CAMA,cAAclE,EAAY,CACtB,GAAI,CAACA,GAAc,EAAEA,aAAsB,WACvC,MAAM,IAAI,MAAM,iCAAiC,EAErD,KAAK,WAAaA,EAClB,QAAQ,IAAI,wCAAiC,CACjD,CAEA,mBAAmBG,EAAW,CAC1B,GAAI,CAACA,GAAa,EAAEA,aAAqB,WACrC,MAAM,IAAI,MAAM,qCAAqC,EAEzD,KAAK,gBAAkBA,EACvB,QAAQ,IAAI,6CAAsC,CACtD,CAEA,MAAM,wBAAyB,CAC3B,GAAI,CACA,IAAMgK,EAAU,MAAM,OAAO,OAAO,YAChC,CACI,KAAM,oBACN,cAAe,KACf,eAAgB,IAAI,WAAW,CAAC,EAAG,EAAG,CAAC,CAAC,EACxC,KAAM,SACV,EACA,GACA,CAAC,OAAQ,QAAQ,CACrB,EAEA,YAAK,WAAaA,EAAQ,WAC1B,KAAK,gBAAkBA,EAAQ,UAE/B,QAAQ,IAAI,+CAAwC,EAC7CA,CACX,OAAS1K,EAAO,CACZ,IAAMuG,EAAYzG,GAAqB,cAAcE,CAAK,EAC1D,cAAQ,MAAM,8CAA0CuG,CAAS,EAC3D,IAAI,MAAMA,CAAS,CAC7B,CACJ,CAEA,WAAY,CACR,KAAK,WAAa,KAClB,KAAK,gBAAkB,KACvB,QAAQ,IAAI,iCAA0B,CAC1C,CAEA,mBAAoB,CAChB,MAAO,CACH,eAAgB,KAAK,aAAe,KACpC,oBAAqB,KAAK,kBAAoB,KAC9C,cAAenH,GAA0B,YAAY,EAAE,SAAS,EAChE,cAAeA,GAA0B,YAAY,EAAE,iBAAiB,CAC5E,CACJ,CAEA,qBAAsB,CAClB,OAAO,KAAK,eAAe,cACpB,KAAK,eAAe,gBAAgB,UAAU,EAAG,EAAE,GACnD,gBACX,CAEA,SAAU,CACNA,GAA0B,YAAY,EAAE,WAAW,EACnD,KAAK,UAAU,EACf,QAAQ,IAAI,iDAA0C,CAC1D,CACJ,EC/6EO,IAAMuL,GAAa,OAAO,UAAc,KACxC,cAAc,KAAK,UAAU,SAAS,GACtC,CAAC,wBAAwB,KAAK,UAAU,SAAS,EAK3CC,GAAe,CAWxB,SAAU,CACN,SAAU,GACV,aAAc,EACd,OAAQ,EACR,OAAQ,EACR,kBAAmB,KACnB,IAAK,CACT,EAIA,UAAW,GAGX,OAAQ,CACJ,WAAY,IACZ,SAAU,OACV,gBAAiB,MACrB,CACJ,EAMaC,GAAe,CACxB,qBAAsB,CAAC,MAAO,MAAO,OAAQ,KAAK,EAGlD,IAAK,CACD,yBAA0B,WAC1B,UAAW,CACP,CAAE,IAAK,MAAQ,sBAAuB,EAAG,WAAY,KAAS,gBAAiB,MAAO,EACtF,CAAE,IAAK,MAAQ,sBAAuB,EAAG,WAAY,IAAS,gBAAiB,MAAO,EACtF,CAAE,IAAK,OAAQ,sBAAuB,EAAG,WAAY,KAAS,gBAAiB,MAAO,CAC1F,EACA,sBAAuB,UAC3B,EACA,IAAK,CACD,gBAAiB,OACjB,WAAY,KACZ,sBAAuB,oBAC3B,EAEA,UAAW,CACP,CAAE,IAAK,MAAQ,sBAAuB,EAAG,WAAY,IAAO,EAC5D,CAAE,IAAK,MAAQ,sBAAuB,EAAG,WAAY,GAAO,EAC5D,CAAE,IAAK,OAAQ,sBAAuB,EAAG,WAAY,IAAQ,CACjE,EACA,gBAAiB,QACrB,EAKaC,GAAmB,CAC5B,QAAS,4EACT,MAAO,CACH,OAAQ,CAAC,eAAgB,OAAQ,WAAY,UAAW,WAAW,EACnE,KAAM,EACV,EACA,MAAO,CACH,OAAQ,CAAC,eAAgB,MAAM,EAC/B,KAAM,EACV,CACJ,EAKaC,GAAoB,CAC7B,WAAY,IACZ,KAAM,CACF,QAAS,GACT,WAAY,IACZ,gBAAiB,GACrB,EACA,IAAK,CACD,OAAQ,IACR,UAAW,GACf,EACA,YAAa,GACb,UAAW,GACX,gBAAiB,IACjB,mBAAoB,EACpB,aAAc,GAClB,EC/GA,SAASC,GAAUC,EAAK,CACpB,OAAOA,EAAI,QAAQ;AAAA,CAAM,IAAM,GAAK;AAAA,EAAS;AAAA,CACjD,CAMO,SAASC,GAASD,EAAK,CAC1B,IAAME,EAAMH,GAAUC,CAAG,EACnBG,EAAQH,EAAI,MAAM,SAAS,EAC3BI,EAAU,CAAC,EACXC,EAAQ,CAAC,EACXC,EAAU,KACd,QAAWC,KAAQJ,EACXI,EAAK,WAAW,IAAI,GACpBD,EAAU,CAAE,MAAO,CAACC,CAAI,CAAE,EAC1BF,EAAM,KAAKC,CAAO,GACXA,EACPA,EAAQ,MAAM,KAAKC,CAAI,EAEvBH,EAAQ,KAAKG,CAAI,EAGzB,MAAO,CAAE,IAAAL,EAAK,QAAAE,EAAS,MAAAC,CAAM,CACjC,CAGO,SAASG,GAAQC,EAAQ,CAC5B,IAAMC,EAAM,CAAC,GAAGD,EAAO,OAAO,EAC9B,QAAWE,KAAKF,EAAO,MAAOC,EAAI,KAAK,GAAGC,EAAE,KAAK,EACjD,OAAOD,EAAI,KAAKD,EAAO,GAAG,CAC9B,CAGO,SAASG,GAAYC,EAAS,CACjC,IAAMF,EAAIE,EAAQ,MAAM,CAAC,EAAE,MAAM,UAAU,EAC3C,OAAOF,EAAIA,EAAE,CAAC,EAAI,IACtB,CAOO,SAASG,GAAiBD,EAASE,EAAW,CACjD,IAAMC,EAAK,IAAI,OAAO,uBAAyBD,EAAY,MAAO,GAAG,EAC/DE,EAAM,CAAC,EACb,QAAWV,KAAQM,EAAQ,MAAO,CAC9B,IAAMF,EAAIJ,EAAK,MAAMS,CAAE,EACnBL,GAAGM,EAAI,KAAKN,EAAE,CAAC,CAAC,CACxB,CACA,OAAOM,CACX,CAGA,SAASC,GAAgBC,EAAO,CAC5B,IAAMC,EAAM,IAAI,IAChB,QAAWC,KAAQF,EAAM,MAAM,GAAG,EAAG,CACjC,IAAMG,EAAID,EAAK,KAAK,EACpB,GAAI,CAACC,EAAG,SACR,IAAMC,EAAKD,EAAE,QAAQ,GAAG,EACpBC,IAAO,GAAIH,EAAI,IAAIE,EAAG,MAAS,EAC9BF,EAAI,IAAIE,EAAE,MAAM,EAAGC,CAAE,EAAE,KAAK,EAAGD,EAAE,MAAMC,EAAK,CAAC,EAAE,KAAK,CAAC,CAC9D,CACA,OAAOH,CACX,CAGA,SAASI,GAAoBJ,EAAK,CAC9B,IAAMK,EAAQ,CAAC,EACf,OAAW,CAACC,EAAGC,CAAC,IAAKP,EAAKK,EAAM,KAAKE,IAAM,OAAYD,EAAI,GAAGA,CAAC,IAAIC,CAAC,EAAE,EACtE,OAAOF,EAAM,KAAK,GAAG,CACzB,CAOO,SAASG,GAAWf,EAASgB,EAAIC,EAAQ,CAC5C,IAAMC,EAAUlB,EAAQ,MAAM,UAAUmB,GAAKA,EAAE,WAAW,UAAUH,CAAE,GAAG,GAAKG,IAAM,UAAUH,CAAE,EAAE,EAClG,GAAIE,IAAY,GAAI,CAChB,IAAME,EAAWpB,EAAQ,MAAMkB,CAAO,EAAE,MAAM,UAAUF,CAAE,IAAI,MAAM,EAC9DT,EAAMF,GAAgBe,CAAQ,EACpC,OAAW,CAACP,EAAGC,CAAC,IAAK,OAAO,QAAQG,CAAM,EAAGV,EAAI,IAAIM,EAAG,OAAOC,CAAC,CAAC,EACjEd,EAAQ,MAAMkB,CAAO,EAAI,UAAUF,CAAE,IAAIL,GAAoBJ,CAAG,CAAC,GACjE,MACJ,CAEA,IAAMA,EAAM,IAAI,IAChB,OAAW,CAACM,EAAGC,CAAC,IAAK,OAAO,QAAQG,CAAM,EAAGV,EAAI,IAAIM,EAAG,OAAOC,CAAC,CAAC,EACjE,IAAMO,EAAU,UAAUL,CAAE,IAAIL,GAAoBJ,CAAG,CAAC,GAClDe,EAAYtB,EAAQ,MAAM,UAAUmB,GAAKA,EAAE,WAAW,YAAYH,CAAE,GAAG,CAAC,EAC1EM,IAAc,GAAItB,EAAQ,MAAM,OAAOsB,EAAY,EAAG,EAAGD,CAAO,EAC/DrB,EAAQ,MAAM,KAAKqB,CAAO,CACnC,CAOO,SAASE,GAAkBpC,EAAKqC,EAAU,CAC7C,GAAI,CAACrC,GAAO,OAAOA,GAAQ,SAAU,OAAOA,EAC5C,IAAMS,EAASR,GAASD,CAAG,EACvBsC,EAAU,GACd,QAAWzB,KAAWJ,EAAO,MACzB,GAAIG,GAAYC,CAAO,IAAM,QAC7B,QAAWgB,KAAMf,GAAiBD,EAAS,MAAM,EAC7Ce,GAAWf,EAASgB,EAAIQ,CAAQ,EAChCC,EAAU,GAGlB,OAAOA,EAAU9B,GAAQC,CAAM,EAAIT,CACvC,CAKA,IAAMuC,GAAY,oDAGX,SAASC,GAAqB3B,EAAS,CAC1C,IAAMI,EAAM,CAAC,EACb,QAAWV,KAAQM,EAAQ,MAAO,CAC9B,IAAMF,EAAIJ,EAAK,MAAM,6BAA6B,EAC9CI,GAAK,CAAC4B,GAAU,KAAK5B,EAAE,CAAC,CAAC,GAAGM,EAAI,KAAKN,EAAE,CAAC,CAAC,CACjD,CACA,OAAOM,CACX,CAMO,SAASwB,GAAa5B,EAAS6B,EAAW,CAC7C,QAAWb,KAAMW,GAAqB3B,CAAO,EACzC,QAAW8B,KAAMD,EAAW,CACxB,IAAMnC,EAAO,aAAasB,CAAE,IAAIc,CAAE,GAClC,GAAI9B,EAAQ,MAAM,SAASN,CAAI,EAAG,SAElC,IAAIqC,EAAW,GACf,QAASC,EAAI,EAAGA,EAAIhC,EAAQ,MAAM,OAAQgC,IAAK,CAC3C,IAAMb,EAAInB,EAAQ,MAAMgC,CAAC,GACrBb,EAAE,WAAW,YAAYH,CAAE,GAAG,GAAKG,EAAE,WAAW,UAAUH,CAAE,GAAG,GAAKG,EAAE,WAAW,aAAaH,CAAE,GAAG,KAAGe,EAAWC,EACzH,CACID,IAAa,KAAIA,EAAW/B,EAAQ,MAAM,OAAS,GACvDA,EAAQ,MAAM,OAAO+B,EAAW,EAAG,EAAGrC,CAAI,CAC9C,CAER,CAMO,SAASuC,GAAajC,EAASkC,EAAK,CACvC,GAAIlC,EAAQ,MAAM,KAAKmB,GAAKA,EAAE,WAAW,WAAW,GAAKA,EAAE,SAASe,CAAG,CAAC,EAAG,OAC3E,IAAIC,EAAQ,EAAGJ,EAAW,GAC1B,QAAS,EAAI,EAAG,EAAI/B,EAAQ,MAAM,OAAQ,IAAK,CAC3C,IAAMF,EAAIE,EAAQ,MAAM,CAAC,EAAE,MAAM,iBAAiB,EAC9CF,IAAKqC,EAAQ,KAAK,IAAIA,EAAO,OAAOrC,EAAE,CAAC,CAAC,CAAC,EAAGiC,EAAW,EAC/D,CACIA,IAAa,KAEbA,EAAW/B,EAAQ,MAAM,UAAUmB,GAAKA,EAAE,WAAW,QAAQ,CAAC,EAC1DY,IAAa,KAAIA,EAAW/B,EAAQ,MAAM,OAAS,IAE3DA,EAAQ,MAAM,OAAO+B,EAAW,EAAG,EAAG,YAAYI,EAAQ,CAAC,IAAID,CAAG,EAAE,CACxE,CAOO,SAASE,GAAejD,EAAKkD,EAAK,CACrC,GAAI,CAAClD,GAAO,OAAOA,GAAQ,UAAY,CAACkD,EAAK,OAAOlD,EACpD,IAAMS,EAASR,GAASD,CAAG,EACvBsC,EAAU,GACd,QAAWzB,KAAWJ,EAAO,MAAO,CAChC,IAAM0C,EAAOvC,GAAYC,CAAO,EAC1BuC,EAAID,IAAS,QAAUD,EAAI,MAAQC,IAAS,QAAUD,EAAI,MAAQ,KACnEE,IACD,MAAM,QAAQA,EAAE,MAAM,IAAKX,GAAa5B,EAASuC,EAAE,MAAM,EAAGd,EAAU,IACtEc,EAAE,MAAQF,EAAI,UAAWJ,GAAajC,EAASqC,EAAI,OAAO,EAAGZ,EAAU,IAC/E,CACA,OAAOA,EAAU9B,GAAQC,CAAM,EAAIT,CACvC,CCpLO,SAASqD,GAA2BC,EAAa,CACpD,GAAI,CAGA,GAFIC,IACA,CAACD,GAAe,OAAOA,EAAY,qBAAwB,YAC3D,CAACE,GAAa,UAAW,MAAO,GACpC,IAAMC,EAAQ,OAAO,aAAiB,KAAe,aAAa,gBAC5D,aAAa,gBAAgB,OAAO,EACpC,KACN,GAAI,CAACA,GAAQ,CAAC,MAAM,QAAQA,EAAK,MAAM,EAAG,MAAO,GAEjD,IAAMC,EAAQC,GAAK,QAAQ,KAAKA,EAAE,QAAQ,EACpCC,EAASD,GAAK,SAAS,KAAKA,EAAE,QAAQ,EAC5C,GAAI,CAACF,EAAK,OAAO,KAAKC,CAAK,EAAG,MAAO,GAErC,IAAMG,EAAMJ,EAAK,OAAO,OAAOC,CAAK,EAC9BI,EAAOL,EAAK,OAAO,OAAOG,CAAM,EAChCG,EAAON,EAAK,OAAO,OAAOE,GAAK,CAACD,EAAMC,CAAC,GAAK,CAACC,EAAOD,CAAC,CAAC,EAC5D,OAAAL,EAAY,oBAAoB,CAAC,GAAGO,EAAK,GAAGC,EAAM,GAAGC,CAAI,CAAC,EACnD,EACX,MAAY,CACR,MAAO,EACX,CACJ,CASA,eAAsBC,GAAqBC,EAAQC,EAAU,CAAC,EAAG,CAC7D,GAAI,CAEA,GADIX,IACA,CAACU,GAAU,OAAOA,EAAO,eAAkB,WAAY,MAAO,GAClE,IAAME,EAAM,CAAE,GAAGX,GAAa,OAAQ,GAAGU,CAAQ,EAC3CE,EAASH,EAAO,cAAc,GAChC,CAACG,EAAO,WAAaA,EAAO,UAAU,SAAW,KAAGA,EAAO,UAAY,CAAC,CAAC,CAAC,GAC9E,QAAWC,KAAOD,EAAO,UACrBC,EAAI,WAAaF,EAAI,WACrBE,EAAI,SAAWF,EAAI,SACnBE,EAAI,gBAAkBF,EAAI,gBAE9B,aAAMF,EAAO,cAAcG,CAAM,EAC1B,EACX,MAAY,CACR,MAAO,EACX,CACJ,CCvDA,IAAME,GAAa,CAAE,IAAK,EAAG,IAAK,EAAG,KAAM,EAAG,IAAK,CAAE,EAG9C,SAASC,GAAeC,EAAU,CAErC,OADY,OAAOA,GAAY,EAAE,EAAE,MAAM,GAAG,EAAE,CAAC,GAAK,IACzC,YAAY,CAC3B,CAQO,SAASC,GAAgBC,EAAQ,CACpC,IAAMC,EAAOC,GAAK,CACd,IAAMC,EAAIN,GAAeK,EAAE,QAAQ,EACnC,OAAO,OAAO,UAAU,eAAe,KAAKN,GAAYO,CAAC,EAAIP,GAAWO,CAAC,EAAI,EACjF,EACA,OAAOH,EACF,IAAI,CAACE,EAAGE,KAAO,CAAE,EAAAF,EAAG,EAAAE,CAAE,EAAE,EACxB,KAAK,CAACC,EAAGC,IAAOL,EAAKI,EAAE,CAAC,EAAIJ,EAAKK,EAAE,CAAC,GAAOD,EAAE,EAAIC,EAAE,CAAE,EACrD,IAAIC,GAAKA,EAAE,CAAC,CACrB,CAGO,SAASC,GAAwBC,EAAM,CAC1C,GAAI,CAACA,GAAQ,CAAC,MAAM,QAAQA,EAAK,MAAM,EAAG,OAAO,KACjD,IAAMC,EAAU,IAAI,IAAID,EAAK,OAAO,IAAIP,GAAKL,GAAeK,EAAE,QAAQ,CAAC,CAAC,EACxE,QAAWS,KAAQC,GAAa,qBAAsB,GAAIF,EAAQ,IAAIC,CAAI,EAAG,OAAOA,EACpF,OAAO,IACX,CAEA,SAASE,IAAY,CACjB,OAAQ,OAAO,aAAiB,KAAe,aAAa,gBACtD,aAAa,gBAAgB,OAAO,EAAI,IAClD,CAOO,SAASC,GAA2BC,EAAa,CACpD,GAAI,CAEA,GADIC,IACA,CAACD,GAAe,OAAOA,EAAY,qBAAwB,WAAY,MAAO,GAClF,IAAMN,EAAOI,GAAU,EACvB,MAAI,CAACJ,GAAQ,CAAC,MAAM,QAAQA,EAAK,MAAM,EAAU,IACjDM,EAAY,oBAAoBhB,GAAgBU,EAAK,MAAM,CAAC,EACrDD,GAAwBC,CAAI,EACvC,MAAY,CACR,MAAO,EACX,CACJ,CAqCO,SAASQ,GAAgBC,EAAW,CACvC,OAAIA,IAAc,MACP,CAAE,gBAAiBC,GAAa,IAAI,yBAA0B,WAAY,KAAS,sBAAuBA,GAAa,IAAI,qBAAsB,EAExJD,IAAc,MACP,CAAE,gBAAiBC,GAAa,IAAI,gBAAiB,WAAYA,GAAa,IAAI,WAAY,sBAAuBA,GAAa,IAAI,qBAAsB,EAGhK,CAAE,gBAAiB,OAAW,WAAY,KAAS,sBAAuB,UAAW,CAChG,CAQA,eAAsBC,GAAqBC,EAAQC,EAAU,CAAC,EAAG,CAC7D,GAAI,CAEA,GADIC,IACA,CAACF,GAAU,OAAOA,EAAO,eAAkB,WAAY,MAAO,GAClE,IAAMG,EAAYC,GAAwBC,GAAU,CAAC,GAAK,MACpDC,EAAO,CAAE,GAAGV,GAAgBO,CAAS,EAAG,GAAGF,CAAQ,EACnDM,EAASP,EAAO,cAAc,GAChC,CAACO,EAAO,WAAaA,EAAO,UAAU,SAAW,KAAGA,EAAO,UAAY,CAAC,CAAC,CAAC,GAC9E,IAAMC,EAAYD,EAAO,UAAU,OAAS,EAE5C,GAAIC,EAGA,QAAWC,KAAOF,EAAO,UAAWE,EAAI,gBAAkBX,GAAa,oBACpE,CACH,IAAMW,EAAMF,EAAO,UAAU,CAAC,EAC9BE,EAAI,WAAaH,EAAK,WACtBG,EAAI,gBAAkBX,GAAa,gBAC/BQ,EAAK,kBAAiBG,EAAI,gBAAkBH,EAAK,gBACzD,CACIA,EAAK,wBAAuBC,EAAO,sBAAwBD,EAAK,uBAEpE,GAAI,CACA,aAAMN,EAAO,cAAcO,CAAM,EAC1B,EACX,MAAY,CAER,GAAI,CAACC,GAAaF,EAAK,gBAAiB,CACpC,OAAOC,EAAO,UAAU,CAAC,EAAE,gBAC3B,GAAI,CACA,aAAMP,EAAO,cAAcO,CAAM,EAC1B,EACX,MAAa,CACT,MAAO,EACX,CACJ,CACA,MAAO,EACX,CACJ,MAAY,CACR,MAAO,EACX,CACJ,CCnJO,SAASG,GAAeC,EAAOC,EAAO,CAAC,EAAG,CAC7C,IAAIC,EAAW,KAAMC,EAAgB,KAAMC,EAAgB,KAC3D,QAAWC,KAAKL,EACR,CAACK,GAAK,OAAOA,EAAE,MAAS,WACxBA,EAAE,OAAS,gBAAkB,CAACA,EAAE,UAC5B,CAACH,GAAYG,EAAE,OAAS,WAASH,EAAWG,GACzCA,EAAE,OAAS,sBACd,CAACF,GAAiBE,EAAE,OAAS,WAASF,EAAgBE,GACnDA,EAAE,OAAS,mBACHA,EAAE,WAAaA,EAAE,UAAYA,EAAE,QAAU,eACzC,CAACD,GAAiBC,EAAE,aAAYD,EAAgBC,IAIvE,IAAMC,EAAc,OAAOJ,GAAU,aAAe,CAAC,EAC/CK,EAAc,OAAOJ,GAAe,aAAe,CAAC,EACpDK,EAAQF,GAAeL,EAAK,aAAeK,GAC3CG,EAAQF,GAAeN,EAAK,aAAeM,GAC3CG,EAAQF,EAAQC,EAEhBE,EAAUD,EAAQ,EAAI,KAAK,IAAI,EAAG,KAAK,IAAI,EAAGD,EAAQC,CAAK,CAAC,EAAI,EAEhEE,EAASR,GAAe,sBAAwBD,GAAe,eAAiB,EAChFU,EAAQ,OAAOD,CAAM,EAAI,IACzBE,EAAW,OAAOX,GAAe,QAAU,CAAC,EAAI,IAChDY,EAA2BX,GAAe,0BAA4B,KACtE,OAAOA,EAAc,wBAAwB,EAAI,KACjDY,EAA0Bd,GAAU,yBAA2B,OAErE,MAAO,CACH,QAAAS,EAAS,MAAAE,EAAO,SAAAC,EAAU,yBAAAC,EAA0B,wBAAAC,EACpD,SAAU,CAAE,YAAAV,EAAa,YAAAC,CAAY,EACrC,QAAS,CAAC,EAAEL,IAAaC,GAAiBC,GAC9C,CACJ,CAMO,SAASa,GAAmBC,EAAG,CAClC,GAAI,CAACA,GAAK,CAACA,EAAE,QAAS,OAAO,KAC7B,IAAMC,EAAID,EAAE,QAASE,EAAIF,EAAE,MAC3B,OAAIC,EAAI,KAAQC,EAAI,IAAY,YAC5BD,EAAI,KAAQC,EAAI,IAAY,OAC5BD,EAAI,KAAQC,EAAI,IAAY,OACzB,MACX,CCxCO,SAASC,GAAiBC,EAAGC,EAAOC,EAAMC,GAAmB,CAChE,GAAI,CAAE,cAAAC,EAAe,eAAAC,EAAgB,sBAAAC,EAAuB,UAAAC,CAAU,EAAIN,EACtEO,EAAU,GAAOC,EAAS,SAE9B,GAAIT,EAAE,0BAA4B,MAAO,CAErC,IAAMU,EAAO,KAAK,IAAI,EAAG,EAAEJ,EAAwBJ,EAAI,cAAc,QAAQ,CAAC,CAAC,EAC3EQ,IAASJ,IAAyBA,EAAwBI,EAAMF,EAAU,IAC9ED,EAAY,EAAGE,EAAS,KAC5B,SAAWT,EAAE,QAAUE,EAAI,KAAK,SAAWF,EAAE,MAAQE,EAAI,IAAI,OAAQ,CAEjE,IAAMQ,EAAO,KAAK,IAAIR,EAAI,gBAAiB,KAAK,MAAME,GAAiB,EAAIF,EAAI,YAAY,CAAC,EACxFQ,IAASN,IAAiBA,EAAgBM,EAAMF,EAAU,IAC9DD,EAAY,EAAGE,EAAS,SAC5B,SAAWT,EAAE,QAAUE,EAAI,KAAK,YAAcF,EAAE,MAAQE,EAAI,IAAI,WAG5D,GADAK,GAAa,EAAGE,EAAS,aACrBF,GAAaL,EAAI,mBAAoB,CACrC,IAAMQ,EAAO,KAAK,IAAIL,EAAgB,KAAK,MAAMD,GAAiB,EAAIF,EAAI,UAAU,CAAC,EACjFQ,IAASN,IAAiBA,EAAgBM,EAAMF,EAAU,GAAMC,EAAS,UAC7EF,EAAY,CAChB,OAEAA,EAAY,EAGhB,MAAO,CAAE,cAAAH,EAAe,sBAAAE,EAAuB,UAAAC,EAAW,QAAAC,EAAS,OAAAC,CAAO,CAC9E,CAEO,IAAME,GAAN,KAAkC,CAKrC,YAAYC,EAAIC,EAAO,CAAC,EAAG,CACvB,KAAK,GAAKD,EACV,KAAK,eAAiBC,EAAK,iBAAmB,IAAM,MACpD,KAAK,UAAYA,EAAK,YAAc,IAAM,CAAC,GAC3C,KAAK,IAAMA,EAAK,KAAOV,GACvB,KAAK,OAAS,KACd,KAAK,cAAgB,CAAC,EACtB,KAAK,aAAe,OACpB,KAAK,MAAQ,CACT,cAAeU,EAAK,gBAAkB,KACtC,eAAgBA,EAAK,gBAAkB,KACvC,sBAAuB,EACvB,UAAW,CACf,CACJ,CAEA,OAAQ,CACA,KAAK,SACT,KAAK,OAAS,YAAY,IAAM,CAAE,KAAK,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,CAAG,EAAG,KAAK,IAAI,UAAU,EAC1F,CAEA,MAAO,CACC,KAAK,SAAU,cAAc,KAAK,MAAM,EAAG,KAAK,OAAS,KACjE,CAEA,MAAM,OAAQ,CACV,GAAI,CAAC,KAAK,IAAM,OAAO,KAAK,GAAG,UAAa,WAAY,OACxD,IAAMC,EAAS,MAAM,KAAK,GAAG,SAAS,EAChCC,EAAQ,OAAOD,EAAO,QAAW,WAAa,MAAM,KAAKA,EAAO,OAAO,CAAC,EAAIA,EAC5Ed,EAAIgB,GAAeD,EAAO,KAAK,aAAa,EAClD,KAAK,cAAgBf,EAAE,SAGvB,IAAMiB,EAAIC,GAAmBlB,CAAC,EAC9B,GAAIiB,GAAKA,IAAM,KAAK,aAAc,CAC9B,KAAK,aAAeA,EACpB,GAAI,CAAE,KAAK,UAAUA,EAAGjB,CAAC,CAAG,MAAY,CAAC,CAC7C,CAEA,GAAI,CAACA,EAAE,QAAS,OAEhB,IAAMmB,EAAWpB,GAAiBC,EAAG,KAAK,MAAO,KAAK,GAAG,EACzD,KAAK,MAAQ,CACT,cAAemB,EAAS,cACxB,eAAgB,KAAK,MAAM,eAC3B,sBAAuBA,EAAS,sBAChC,UAAWA,EAAS,SACxB,EACIA,EAAS,SACT,MAAM,KAAK,oBAAoB,CAEvC,CAEA,MAAM,qBAAsB,CAGxB,GAAIC,GAAW,OACf,IAAMC,EAAS,KAAK,eAAe,EACnC,GAAI,GAACA,GAAU,OAAOA,EAAO,eAAkB,YAC/C,GAAI,CACA,IAAMC,EAASD,EAAO,cAAc,EAEpC,IADI,CAACC,EAAO,WAAaA,EAAO,UAAU,SAAW,KAAGA,EAAO,UAAY,CAAC,CAAC,CAAC,GAC1EA,EAAO,UAAU,SAAW,EAE5BA,EAAO,UAAU,CAAC,EAAE,WAAa,KAAK,MAAM,cAC5CA,EAAO,UAAU,CAAC,EAAE,sBAAwB,KAAK,MAAM,0BACpD,CAGH,IAAMC,EAAMD,EAAO,UAAUA,EAAO,UAAU,OAAS,CAAC,EACxDC,EAAI,WAAa,KAAK,MAAM,aAChC,CACA,MAAMF,EAAO,cAAcC,CAAM,CACrC,MAAY,CAEZ,CACJ,CACJ,ECtFA,IAAME,GAAY,uBACZC,GAAe,0BACfC,GAAY,uBAGZC,GAAU,WAAW,GAAG,CAAI,EAC5BC,GAAU,WAAW,GAAG,CAAI,EAE5BC,GAAM,IAAI,YACVC,GAAM,IAAI,YAQHC,GAAiB,OAAO,OAAO,CAExC,mBAAoB,IAEpB,iBAAkB,KAGlB,mBAAoB,IAAS,GACjC,CAAC,EAED,SAASC,GAAIC,EAAO,CAChB,IAAIC,EAAS,GACPC,EAAO,IAAI,WAAWF,CAAK,EACjC,QAASG,EAAI,EAAGA,EAAID,EAAK,OAAQC,IAAKF,GAAU,OAAO,aAAaC,EAAKC,CAAC,CAAC,EAC3E,OAAO,KAAKF,CAAM,CACtB,CAEA,SAASG,GAAMC,EAAM,CACjB,IAAMJ,EAAS,KAAKI,CAAI,EAClBC,EAAM,IAAI,WAAWL,EAAO,MAAM,EACxC,QAASE,EAAI,EAAGA,EAAIF,EAAO,OAAQE,IAAKG,EAAIH,CAAC,EAAIF,EAAO,WAAWE,CAAC,EACpE,OAAOG,CACX,CAEA,SAASC,EAAQP,EAAO,CACpB,GAAI,CACIA,GAASA,EAAM,SACf,OAAO,gBAAgBA,CAAK,EAC5BA,EAAM,KAAK,CAAC,EAEpB,MAAY,CAA6C,CAC7D,CAEA,eAAeQ,GAAKC,EAAKC,EAAMC,EAAMC,EAAa,CAC9C,IAAMC,EAAM,MAAM,OAAO,OAAO,UAAU,MAAOJ,EAAK,OAAQ,GAAO,CAAC,YAAY,CAAC,EAC7EK,EAAO,MAAM,OAAO,OAAO,WAC7B,CAAE,KAAM,OAAQ,KAAM,UAAW,KAAAJ,EAAM,KAAMd,GAAI,OAAOe,CAAI,CAAE,EAC9DE,EACAD,EAAc,CAClB,EACA,OAAO,IAAI,WAAWE,CAAI,CAC9B,CAEA,eAAeC,GAAKC,EAAUC,EAAM,CAChC,IAAMJ,EAAM,MAAM,OAAO,OAAO,UAC5B,MAAOG,EAAU,CAAE,KAAM,OAAQ,KAAM,SAAU,EAAG,GAAO,CAAC,MAAM,CACtE,EACA,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,KAAK,OAAQH,EAAKI,CAAI,CAAC,CACrE,CAGA,eAAeC,GAAaC,EAAU,CAClC,IAAMC,EAAa,MAAML,GAAKI,EAAUzB,EAAO,EACzC2B,EAAe,MAAMN,GAAKI,EAAUxB,EAAO,EACjD,MAAO,CAAE,WAAAyB,EAAY,aAAAC,CAAa,CACtC,CAGA,eAAeC,GAAYC,EAASC,EAAU,CAC1C,IAAMC,EAAU,MAAMjB,GAAKgB,EAAUD,EAAShC,GAAW,EAAE,EACrDmC,EAAWD,EAAQ,MAAM,EAAG,EAAE,EAC9BN,EAAWM,EAAQ,MAAM,GAAI,EAAE,EACrC,OAAAlB,EAAQkB,CAAO,EACR,CAAE,SAAAC,EAAU,SAAAP,CAAS,CAChC,CAEO,IAAMQ,GAAN,KAAoB,CACvB,aAAc,CACV,KAAK,SAAW,KAChB,KAAK,iBAAmB,KACxB,KAAK,mBAAqB,KAC1B,KAAK,aAAe,KACpB,KAAK,iBAAmB,KACxB,KAAK,oBAAsB,KAC3B,KAAK,WAAa,EAClB,KAAK,cAAgB,EACrB,KAAK,mBAAqB,EAC1B,KAAK,SAAW,IAAI,IACpB,KAAK,YAAc,QACnB,KAAK,aAAe,EACxB,CAUA,MAAM,KAAK,CAAE,aAAAC,EAAc,YAAAC,EAAa,eAAAC,EAAgB,gBAAAC,EAAiB,YAAAC,CAAY,EAAG,CACpF,GAAI,EAAEJ,aAAwB,aAAeA,EAAa,SAAW,EACjE,MAAM,IAAI,MAAM,4CAA4C,EAEhE,GAAI,EAAEE,aAA0B,YAAc,EAAEC,aAA2B,WACvE,MAAM,IAAI,MAAM,iDAAiD,EASrE,GANA,KAAK,YAAcD,EAAe,WAAW,YAAc,QAI3D,KAAK,SAAW,MAAMtB,GAAKoB,EAAcC,GAAe,IAAI,WAAW,CAAC,EAAGpC,GAAW,EAAE,EAEpFuC,EAAa,CAIb,KAAK,aAAe,MAAM,KAAK,iBAAiB,EAWhD,KAAK,iBAAmBD,EACxB,KAAK,oBAAsB,KAE3B,IAAME,EAAK,MAAM,KAAK,IAAI,KAAK,aAAa,WAAY,KAAK,gBAAgB,EACvE,CAAE,SAAAP,EAAU,SAAAP,CAAS,EAAI,MAAMG,GAAY,KAAK,SAAUW,CAAE,EAClE1B,EAAQ0B,CAAE,EACV1B,EAAQ,KAAK,QAAQ,EACrB,KAAK,SAAWmB,EAChB,KAAK,iBAAmBP,CAC5B,MAII,KAAK,aAAe,CAAE,WAAYW,EAAgB,UAAW,IAAK,EAClE,KAAK,iBAAmB,KACxB,KAAK,oBAAsB,KAG/B,KAAK,aAAe,EACxB,CAEA,IAAI,eAAgB,CAAE,OAAO,KAAK,YAAc,CAYhD,IAAI,YAAa,CACb,OAAO,KAAK,cAAgB,KAAK,mBAAqB,IAC1D,CAGA,UAAW,CACP,MAAO,CACH,YAAa,KAAK,aAClB,QAAS,KAAK,mBAAqB,KACnC,UAAW,KAAK,qBAAuB,KACvC,UAAW,KAAK,WAChB,aAAc,KAAK,cACnB,kBAAmB,KAAK,mBACxB,YAAa,KAAK,SAAS,IAC/B,CACJ,CAEA,MAAM,kBAAmB,CACrB,OAAO,OAAO,OAAO,YACjB,CAAE,KAAM,OAAQ,WAAY,KAAK,WAAY,EAC7C,GACA,CAAC,YAAa,YAAY,CAC9B,CACJ,CAEA,MAAM,IAAII,EAAYC,EAAW,CAC7B,IAAMrB,EAAO,MAAM,OAAO,OAAO,WAC7B,CAAE,KAAM,OAAQ,OAAQqB,CAAU,EAAGD,EAAY,GACrD,EACA,OAAO,IAAI,WAAWpB,CAAI,CAC9B,CAEA,MAAM,mBAAoB,CACtB,OAAK,KAAK,cAAc,UACjBf,GAAI,MAAM,OAAO,OAAO,UAAU,OAAQ,KAAK,aAAa,SAAS,CAAC,EADnC,IAE9C,CAEA,MAAM,cAAcqC,EAAS,CACzB,OAAO,OAAO,OAAO,UACjB,OAAQhC,GAAMgC,CAAO,EAAG,CAAE,KAAM,OAAQ,WAAY,KAAK,WAAY,EAAG,GAAM,CAAC,CACnF,CACJ,CAGA,MAAM,eAAehB,EAAY,CAC7B,IAAMiB,EAAW,MAAM7B,GAAKY,EAAY,IAAI,WAAW,EAAE,EAAG5B,GAAc,EAAE,EACtEqB,EAAM,MAAM,OAAO,OAAO,UAC5B,MAAOwB,EAAS,MAAM,EAAG,EAAE,EAAG,CAAE,KAAM,SAAU,EAAG,GAAO,CAAC,UAAW,SAAS,CACnF,EACMC,EAAKD,EAAS,MAAM,GAAI,EAAE,EAChC,OAAA9B,EAAQ8B,CAAQ,EACT,CAAE,IAAAxB,EAAK,GAAAyB,CAAG,CACrB,CASA,MAAM,QAAQC,EAAW,CACrB,GAAI,CAAC,KAAK,aAAc,MAAM,IAAI,MAAM,gCAAgC,EACxE,GAAI,CAAC,KAAK,iBACN,MAAM,IAAI,MAAM,0EAAsE,EAG1F,GAAM,CAAE,WAAAnB,EAAY,aAAAC,CAAa,EAAI,MAAMH,GAAa,KAAK,gBAAgB,EAC7EX,EAAQ,KAAK,gBAAgB,EAC7B,KAAK,iBAAmBc,EAExB,IAAMmB,EAAS,KAAK,UAAU,CAC1B,GAAI,MAAM,KAAK,kBAAkB,EACjC,GAAI,KAAK,mBACT,EAAG,KAAK,UACZ,CAAC,EACD,KAAK,YAAc,EAEnB,GAAM,CAAE,IAAA3B,EAAK,GAAAyB,CAAG,EAAI,MAAM,KAAK,eAAelB,CAAU,EACxDb,EAAQa,CAAU,EAElB,IAAMqB,EAAa,MAAM,OAAO,OAAO,QACnC,CAAE,KAAM,UAAW,GAAAH,EAAI,eAAgB1C,GAAI,OAAO4C,CAAM,CAAE,EAC1D3B,EACAjB,GAAI,OAAO2C,CAAS,CACxB,EAEA,MAAO,CAAE,OAAAC,EAAQ,WAAYzC,GAAI0C,CAAU,CAAE,CACjD,CAOA,MAAM,QAAQD,EAAQC,EAAY,CAC9B,GAAI,CAAC,KAAK,aAAc,MAAM,IAAI,MAAM,gCAAgC,EAExE,IAAIC,EACJ,GAAI,CACAA,EAAS,KAAK,MAAMF,CAAM,CAC9B,MAAY,CACR,MAAM,IAAI,MAAM,iCAAiC,CACrD,CACA,GAAM,CAAE,GAAAP,EAAI,GAAAU,EAAI,EAAAC,CAAE,EAAIF,EACtB,GAAI,OAAOT,GAAO,UAAY,CAAC,OAAO,cAAcW,CAAC,GAAKA,EAAI,GAC1D,CAAC,OAAO,cAAcD,CAAE,GAAKA,EAAK,EAClC,MAAM,IAAI,MAAM,sCAAsC,EAG1D,KAAK,cAAc,EAKnB,IAAME,EAAY,GAAGZ,CAAE,IAAIW,CAAC,GACtBE,EAAW,KAAK,SAAS,IAAID,CAAS,EAC5C,GAAIC,EAAU,CACV,IAAMP,EAAY,MAAM,KAAK,MAAMO,EAAS,IAAKN,EAAQC,CAAU,EACnE,YAAK,SAAS,OAAOI,CAAS,EAC9BtC,EAAQuC,EAAS,GAAG,EACbP,CACX,CASA,IAAMQ,EAAS,MAAM,KAAK,cAAcd,EAAIU,EAAIC,CAAC,EAE7CL,EACJ,GAAI,CACAA,EAAY,MAAM,KAAK,MAAMQ,EAAO,WAAYP,EAAQC,CAAU,CACtE,OAASO,EAAO,CACZ,MAAAD,EAAO,QAAQ,EACTC,CACV,CAEA,OAAAD,EAAO,OAAO,EACPR,CACX,CAMA,MAAM,cAAcN,EAAIU,EAAIC,EAAG,CAC3B,IAAMK,EAAahB,IAAO,KAAK,oBACzBiB,EAAU,CAAC,EACXC,EAAiB,CAAC,EACpBC,EAAU,KAEVjC,EACAkC,EACAC,EAEJ,GAAIL,EAAY,CAEZ,GAAI,KAAK,mBAAoB,CACzB,IAAMM,EAAU,MAAM,KAAK,gBACvB,KAAK,mBAAoB,KAAK,cAAeZ,EAAI,KAAK,mBAC1D,EACAO,EAAQ,KAAK,GAAGK,EAAQ,IAAI,EAC5BJ,EAAe,KAAKI,EAAQ,aAAa,CAC7C,CACAH,EAAU,MAAM,KAAK,gBAAgBnB,CAAE,EACvCd,EAAWiC,EAAQ,kBACnBC,EAAe,EACfC,EAAYrB,CAChB,MACId,EAAW,KAAK,mBAChBkC,EAAe,KAAK,cACpBC,EAAY,KAAK,oBAGrB,GAAI,CAACnC,EACD,MAAM,IAAI,MAAM,oDAAoD,EAGxE,IAAMqC,EAAM,MAAM,KAAK,gBAAgBrC,EAAUkC,EAAcT,EAAGU,CAAS,EAC3EJ,EAAQ,KAAK,GAAGM,EAAI,IAAI,EAExB,GAAM,CAAE,WAAApC,EAAY,aAAAC,CAAa,EAAI,MAAMH,GAAasC,EAAI,aAAa,EACzE,OAAIA,EAAI,gBAAkBrC,GAAUgC,EAAe,KAAKK,EAAI,aAAa,EAElE,CACH,WAAApC,EACA,OAAQ,IAAM,CACNgC,GAASA,EAAQ,MAAM,EACvB,KAAK,oBAAsB,KAAK,qBAAuB/B,GACvDd,EAAQ,KAAK,kBAAkB,EAEnC,QAAWM,KAAOsC,EAAgB5C,EAAQM,CAAG,EAC7C,KAAK,mBAAqBQ,EAC1B,KAAK,cAAgBuB,EAAI,EACzB,KAAK,oBAAsBU,EAC3B,OAAW,CAAE,GAAAG,EAAI,IAAA5C,CAAI,IAAKqC,EAAS,KAAK,iBAAiBO,EAAI5C,CAAG,EAChEN,EAAQa,CAAU,CACtB,EACA,QAAS,IAAM,CACPgC,GAASA,EAAQ,QAAQ,EAC7B,OAAW,CAAE,IAAAvC,CAAI,IAAKqC,EAAS3C,EAAQM,CAAG,EAC1C,QAAWA,KAAOsC,EAAgB5C,EAAQM,CAAG,EAC7CN,EAAQc,CAAY,EACpBd,EAAQa,CAAU,CACtB,CACJ,CACJ,CAMA,MAAM,gBAAgBD,EAAUuC,EAAMC,EAAOL,EAAW,CACpD,GAAIK,EAAQD,EAGR,MAAM,IAAI,MAAM,2DAA2D,EAE/E,GAAIC,EAAQD,EAAO5D,GAAe,mBAC9B,MAAM,IAAI,MACN,mCAAmC6D,EAAQD,CAAI,oBACrC5D,GAAe,kBAAkB,GAC/C,EAGJ,IAAM8D,EAAO,CAAC,EACVC,EAAU1C,EACd,QAAShB,EAAIuD,EAAMvD,EAAIwD,EAAOxD,IAAK,CAC/B,GAAM,CAAE,WAAAiB,EAAY,aAAAC,CAAa,EAAI,MAAMH,GAAa2C,CAAO,EAC3DA,IAAY1C,GAAUZ,EAAQsD,CAAO,EACzCA,EAAUxC,EACVuC,EAAK,KAAK,CAAE,GAAI,GAAGN,CAAS,IAAInD,CAAC,GAAI,IAAKiB,CAAW,CAAC,CAC1D,CACA,MAAO,CAAE,KAAAwC,EAAM,cAAeC,CAAQ,CAC1C,CAEA,MAAM,MAAMzC,EAAYoB,EAAQC,EAAY,CACxC,GAAM,CAAE,IAAA5B,EAAK,GAAAyB,CAAG,EAAI,MAAM,KAAK,eAAelB,CAAU,EACpD0C,EACJ,GAAI,CACAA,EAAS,MAAM,OAAO,OAAO,QACzB,CAAE,KAAM,UAAW,GAAAxB,EAAI,eAAgB1C,GAAI,OAAO4C,CAAM,CAAE,EAC1D3B,EACAT,GAAMqC,CAAU,CACpB,CACJ,MAAY,CAGR,MAAM,IAAI,MAAM,sCAAsC,CAC1D,CACA,OAAO5C,GAAI,OAAOiE,CAAM,CAC5B,CAEA,iBAAiBL,EAAI5C,EAAK,CAGtB,KAAO,KAAK,SAAS,MAAQf,GAAe,kBAAkB,CAC1D,IAAMiE,EAAS,KAAK,SAAS,KAAK,EAAE,KAAK,EAAE,MACrCC,EAAU,KAAK,SAAS,IAAID,CAAM,EACxC,KAAK,SAAS,OAAOA,CAAM,EACvBC,GAASzD,EAAQyD,EAAQ,GAAG,CACpC,CACA,KAAK,SAAS,IAAIP,EAAI,CAAE,IAAA5C,EAAK,SAAU,KAAK,IAAI,CAAE,CAAC,CACvD,CAEA,eAAgB,CACZ,IAAMoD,EAAS,KAAK,IAAI,EAAInE,GAAe,mBAC3C,OAAW,CAAC2D,EAAIS,CAAK,IAAK,KAAK,SACvBA,EAAM,SAAWD,IACjB1D,EAAQ2D,EAAM,GAAG,EACjB,KAAK,SAAS,OAAOT,CAAE,EAGnC,CAMA,MAAM,gBAAgBU,EAAoB,CACtC,IAAMpC,EAAkB,MAAM,KAAK,cAAcoC,CAAkB,EAK7DC,EAAY,MAAM,KAAK,IAAI,KAAK,aAAa,WAAYrC,CAAe,EACxEsC,EAAW,MAAM/C,GAAY,KAAK,SAAU8C,CAAS,EAC3D7D,EAAQ6D,CAAS,EAKjB,IAAME,EAAkB,MAAM,KAAK,iBAAiB,EAC9CC,EAAS,MAAM,KAAK,IAAID,EAAgB,WAAYvC,CAAe,EACnEyC,EAAU,MAAMlD,GAAY+C,EAAS,SAAUE,CAAM,EAC3D,OAAAhE,EAAQgE,CAAM,EAEP,CACH,kBAAmBF,EAAS,SAC5B,MAAO,IAAM,CACT9D,EAAQ,KAAK,QAAQ,EACrBA,EAAQ8D,EAAS,QAAQ,EACrB,KAAK,kBAAkB9D,EAAQ,KAAK,gBAAgB,EACxD,KAAK,SAAWiE,EAAQ,SACxB,KAAK,iBAAmBA,EAAQ,SAChC,KAAK,aAAeF,EACpB,KAAK,iBAAmBvC,EACxB,KAAK,oBAAsBoC,EAC3B,KAAK,mBAAqB,KAAK,WAC/B,KAAK,WAAa,CACtB,EACA,QAAS,IAAM,CACX5D,EAAQ8D,EAAS,QAAQ,EACzB9D,EAAQ8D,EAAS,QAAQ,EACzB9D,EAAQiE,EAAQ,QAAQ,EACxBjE,EAAQiE,EAAQ,QAAQ,CAC5B,CACJ,CACJ,CAGA,SAAU,CACNjE,EAAQ,KAAK,QAAQ,EACrBA,EAAQ,KAAK,gBAAgB,EAC7BA,EAAQ,KAAK,kBAAkB,EAC/B,QAAW2D,KAAS,KAAK,SAAS,OAAO,EAAG3D,EAAQ2D,EAAM,GAAG,EAC7D,KAAK,SAAS,MAAM,EACpB,KAAK,SAAW,KAChB,KAAK,iBAAmB,KACxB,KAAK,mBAAqB,KAC1B,KAAK,aAAe,KACpB,KAAK,iBAAmB,KACxB,KAAK,oBAAsB,KAC3B,KAAK,aAAe,EACxB,CACJ,EC3gBO,IAAMO,EAAS,OAAO,OAAO,CAChC,kBAAmB,IACnB,eAAgB,EAChB,UAAW,EACX,UAAW,GACX,QAAS,GACT,QAAS,GACT,kBAAmB,GACnB,iBAAkB,GAClB,cAAe,EACf,qBAAsB,GACtB,cAAe,IAQf,wBAAyB,GAazB,cAAe,IACnB,CAAC,EAKKC,GAAW,KAAK,IAAI,KAAM,EAAG,CAAC,EAC9BC,GAAmB,SAEZC,GAAO,OAAO,OAAO,CAAE,MAAO,EAAG,OAAQ,CAAE,CAAC,EACnDC,GAAQ,OAAO,OAAO,CAAC,UAAW,SAAU,SAAS,CAAC,EAKtDC,GAAW,OAAO,OAAO,CAAC,OAAQ,WAAY,MAAO,IAAI,CAAC,EAC1DC,GAAe,EAGRC,GAAM,OAAO,OAAO,CAAE,iBAAkB,CAAK,CAAC,EAGrDC,GAAO,OAAO,OAAO,CACvB,QAAS,EAAG,UAAW,EAAG,SAAU,EAAG,SAAU,EACjD,QAAS,EAAG,SAAU,EAAG,SAAU,CACvC,CAAC,EACKC,GAAgB,OAAO,OAAO,CAAE,EAAG,EAAG,EAAG,GAAI,EAAG,EAAG,EAAG,EAAG,EAAG,GAAI,EAAG,GAAI,EAAG,EAAG,CAAC,EAC9EC,GAAY,OAAO,OAAO,CAAE,EAAG,OAAQ,EAAG,OAAQ,EAAG,QAAS,EAAG,QAAS,EAAG,OAAQ,EAAG,QAAS,EAAG,OAAQ,CAAC,EAG7GC,GAAc,OAAO,OAAO,CAAE,EAAG,KAAM,EAAG,OAAQ,EAAG,KAAM,EAAG,KAAM,EAAG,KAAM,EAAG,KAAM,EAAG,IAAK,CAAC,EAC/FC,GAAU,OAAO,OAAO,CAAC,KAAM,UAAW,SAAU,IAAI,CAAC,EAOzDC,GAAY,OAAO,OAAO,CAAE,KAAM,IAAK,MAAO,IAAK,MAAO,CAAE,CAAC,EAG7DC,GAAW,mBAEXC,GAAN,cAA8B,KAAM,CAChC,YAAYC,EAASC,EAAO,YAAa,CAAE,MAAMD,CAAO,EAAG,KAAK,KAAO,kBAAmB,KAAK,KAAOC,CAAM,CAChH,EACMC,EAAO,CAACC,EAAKF,IAAS,CAAE,MAAM,IAAIF,GAAgBI,EAAKF,CAAI,CAAG,EAM9DG,GAAU,mFACVC,GAAU,+CAEhB,SAASC,GAAU,EAAG,CAClB,IAAMC,EAAIF,GAAQ,KAAK,CAAC,EACxB,GAAI,CAACE,EAAG,OAAO,KACf,IAAMC,EAAM,IAAI,WAAW,CAAC,EAC5B,QAASC,EAAI,EAAGA,EAAI,EAAGA,IAAK,CACxB,IAAMC,EAAI,OAAOH,EAAEE,EAAI,CAAC,CAAC,EACzB,GAAI,CAAC,OAAO,UAAUC,CAAC,GAAKA,EAAI,GAAKA,EAAI,IAAK,OAAO,KACrDF,EAAIC,CAAC,EAAIC,CACb,CACA,OAAOF,CACX,CAEA,SAASG,GAAU,EAAG,CAGlB,GAAI,CAAC,mBAAmB,KAAK,CAAC,GAAK,EAAE,OAAS,GAAI,OAAO,KACzD,IAAIC,EAAO,EACPC,EAAQ,KACNC,EAAYF,EAAK,YAAY,GAAG,EACtC,GAAIA,EAAK,SAAS,GAAG,EAAG,CAEpB,GADAC,EAAQP,GAAUM,EAAK,MAAME,EAAY,CAAC,CAAC,EACvC,CAACD,EAAO,OAAO,KACnBD,EAAOA,EAAK,MAAM,EAAGE,EAAY,CAAC,EAAI,KAC1C,CACA,IAAMC,EAASH,EAAK,MAAM,IAAI,EAC9B,GAAIG,EAAO,OAAS,EAAG,OAAO,KAC9B,IAAMC,EAAWC,GAAUA,IAAS,GAAK,CAAC,EAAIA,EAAK,MAAM,GAAG,EAAE,IAAK,GAC/D,EAAE,SAAW,GAAK,EAAE,OAAS,EAAI,IAAM,SAAS,EAAG,EAAE,CACxD,EACKC,EAAOF,EAAQD,EAAO,CAAC,CAAC,EACxBI,EAAOJ,EAAO,SAAW,EAAIC,EAAQD,EAAO,CAAC,CAAC,EAAI,CAAC,EACzD,GAAI,CAAC,GAAGG,EAAM,GAAGC,CAAI,EAAE,KAAMC,GAAM,CAAC,OAAO,UAAUA,CAAC,GAAKA,EAAI,GAAKA,EAAI,KAAM,EAAG,OAAO,KACxF,IAAIC,EACJ,GAAIN,EAAO,SAAW,EAAG,CACrB,IAAMO,EAAM,EAAIJ,EAAK,OAASC,EAAK,OACnC,GAAIG,EAAM,EAAG,OAAO,KACpBD,EAAQ,CAAC,GAAGH,EAAM,GAAG,IAAI,MAAMI,CAAG,EAAE,KAAK,CAAC,EAAG,GAAGH,CAAI,CACxD,MACIE,EAAQH,EAEZ,GAAIG,EAAM,SAAW,EAAG,OAAO,KAC/B,IAAMb,EAAM,IAAI,WAAW,EAAE,EAC7B,OAAAa,EAAM,QAAQ,CAACD,EAAGX,IAAM,CAAED,EAAIC,EAAI,CAAC,EAAIW,GAAK,EAAGZ,EAAIC,EAAI,EAAI,CAAC,EAAIW,EAAI,GAAM,CAAC,EACvEP,GAAOL,EAAI,IAAIK,EAAO,EAAE,EACrBL,CACX,CAEA,SAASe,GAAU,EAAG,CAClB,IAAMhB,EAAIH,GAAQ,KAAK,CAAC,EACxB,GAAI,CAACG,EAAG,OAAO,KACf,IAAMiB,GAAOjB,EAAE,CAAC,EAAIA,EAAE,CAAC,EAAIA,EAAE,CAAC,EAAIA,EAAE,CAAC,EAAIA,EAAE,CAAC,GAAG,YAAY,EACrDC,EAAM,IAAI,WAAW,EAAE,EAC7B,QAAS,EAAI,EAAG,EAAI,GAAI,IAAKA,EAAI,CAAC,EAAI,SAASgB,EAAI,OAAO,EAAI,EAAG,CAAC,EAAG,EAAE,EACvE,OAAOhB,CACX,CAEA,SAASiB,GAASC,EAAK,CACnB,OAAI,OAAOA,GAAQ,UAAUxB,EAAK,sBAAsB,EACpDwB,EAAI,OAAS,GAAK,MAAMxB,EAAK,kBAAkB,EAC5CwB,EAAI,MAAM,SAAS,EAAE,OAAQC,GAAMA,EAAE,OAAS,CAAC,CAC1D,CAEA,SAASC,GAAKC,EAAOC,EAAM,CACvB,IAAMC,EAAS,KAAKD,CAAI,IACxB,QAAWH,KAAKE,EAAO,GAAIF,EAAE,WAAWI,CAAM,EAAG,OAAOJ,EAAE,MAAMI,EAAO,MAAM,EAAE,KAAK,EACpF,OAAO,IACX,CASO,SAASC,GAASN,EAAK,CAC1B,IAAMG,EAAQJ,GAASC,CAAG,EAEpBO,EAAQL,GAAKC,EAAO,WAAW,EAC/BK,EAAMN,GAAKC,EAAO,SAAS,GAC7B,CAACI,GAAS,CAACC,IAAKhC,EAAK,gCAAgC,EAEzD,IAAMiC,EAASP,GAAKC,EAAO,aAAa,EACnCM,GAAQjC,EAAK,mCAAmC,EACrD,GAAM,CAACkC,EAASC,CAAK,EAAIF,EAAO,MAAM,KAAK,GACvC,CAACC,GAAWA,EAAQ,YAAY,IAAM,YACtClC,EAAK,2CAA2C,OAAOkC,CAAO,EAAE,MAAM,EAAG,EAAE,CAAC,EAAE,EAElF,IAAME,EAAU,OAAOD,CAAK,EAAE,MAAM,GAAG,EACnCC,EAAQ,SAAWtD,EAAO,mBAAmBkB,EAAK,uCAAuC,EAC7F,IAAMqC,EAAc,IAAI,WAAWvD,EAAO,iBAAiB,EAC3DsD,EAAQ,QAAQ,CAACE,EAAG/B,IAAM,CACjB,mBAAmB,KAAK+B,CAAC,GAAGtC,EAAK,6BAA6B,EACnEqC,EAAY9B,CAAC,EAAI,SAAS+B,EAAG,EAAE,CACnC,CAAC,EAED,IAAMC,EAAWb,GAAKC,EAAO,OAAO,GAAK,UACnCa,EAAQtD,GAAM,QAAQqD,CAAQ,EAChCC,EAAQ,GAAGxC,EAAK,gCAAgCuC,EAAS,MAAM,EAAG,EAAE,CAAC,EAAE,EAG3E,IAAME,EAASf,GAAKC,EAAO,kBAAkB,EACvCe,EAAiBD,IAAW,KAAO,MAAQ,OAAOA,CAAM,GAC1D,CAAC,OAAO,UAAUC,CAAc,GAAKA,EAAiB,IAAG1C,EAAK,4BAA4B,EAE9F,IAAM2C,EAAa,CAAC,EACpB,QAAWC,KAAQjB,EAAO,CACtB,GAAI,CAACiB,EAAK,WAAW,cAAc,EAAG,SACtC,IAAMC,EAAID,EAAK,MAAM,EAAqB,EAAE,MAAM,KAAK,EAGvD,GADIC,EAAE,OAAS,GAAKA,EAAE,CAAC,IAAM,OACzBA,EAAE,CAAC,IAAM,IAAK,SAClB,IAAMC,EAAYD,EAAE,CAAC,EAAE,YAAY,EAC7BE,EAAW,OAAOF,EAAE,CAAC,CAAC,EACtBG,EAAOH,EAAE,CAAC,EACVI,EAAO,OAAOJ,EAAE,CAAC,CAAC,EAClBK,EAAQL,EAAE,CAAC,EACjB,GAAI,CAAC,OAAO,UAAUI,CAAI,GAAKA,EAAO,GAAKA,EAAO,MAAO,SAEzD,IAAIE,EAAU,EACd,GAAIL,IAAc,MAAO,CACrB,IAAMM,EAAMP,EAAE,QAAQ,SAAS,EACzBQ,EAAID,GAAO,EAAI1D,GAAQ,QAAQmD,EAAEO,EAAM,CAAC,CAAC,EAAI,GACnD,GAAIC,GAAK,EAAG,SACZF,EAAUE,CACd,SAAWP,IAAc,MACrB,SAGJ,IAAIQ,EAAO,KAAUC,EAAQ,KACvBC,EAAOnC,GAAU2B,CAAI,EAC3B,GAAIQ,GAAQN,IAAU,OAAUI,EAAOhE,GAAK,UAAWiE,EAAQC,MAC1D,CACD,IAAMC,EAAKrD,GAAU4C,CAAI,EACnBU,EAAKD,EAAK,KAAOhD,GAAUuC,CAAI,EAC/BW,EAAMF,GAAMC,EAClB,GAAI,CAACC,EAAK,SACV,GAAIT,IAAU,OAAQI,EAAOG,EAAKnE,GAAK,QAAUA,GAAK,gBAC7C4D,IAAU,SAAWA,IAAU,QAASI,EAAOG,EAAKnE,GAAK,SAAWA,GAAK,iBACzE4D,IAAU,QAASI,EAAOG,EAAKnE,GAAK,SAAWA,GAAK,aACxD,UACLiE,EAAQI,CACZ,CACAhB,EAAW,KAAK,CACZ,KAAAW,EAAM,QAAAH,EAAS,KAAMI,EAAO,KAAAN,EAC5B,SAAU,OAAO,SAASF,CAAQ,EAAIA,EAAW,CACrD,CAAC,CACL,CAEA,MAAO,CAAE,MAAAhB,EAAO,IAAAC,EAAK,YAAAK,EAAa,MAAAG,EAAO,eAAAE,EAAgB,WAAAC,CAAW,CACxE,CAGO,SAASiB,GAAcC,EAAG,CAAE,MAAO,GAAItE,GAAcsE,EAAE,IAAI,EAAI,CAAG,CAWzE,IAAMC,GAAiBD,GAAMA,EAAE,UAAY,GAAKA,EAAE,UAAY,EAsBvD,SAASE,GAAgBpB,EAAY,CACxC,cAAAqB,EAAgBlF,EAAO,eACvB,SAAAmF,EAAWnF,EAAO,wBAClB,SAAAoF,EAAW,GACX,UAAAC,EAAY,CAChB,EAAI,CAAC,EAAG,CACJ,IAAMC,EAAOzB,EAAW,OAAQkB,GAAMK,GAAYL,EAAE,OAASvE,GAAK,SAAS,EAGrE+E,EAAO,CAAC,EACRC,EAAO,IAAI,IACjB,QAAWT,KAAKO,EAAM,CAClB,IAAMG,EAAM,GAAGV,EAAE,IAAI,IAAIA,EAAE,OAAO,IAAI,MAAM,KAAKA,EAAE,IAAI,EAAE,KAAK,GAAG,CAAC,IAAIA,EAAE,IAAI,GACxES,EAAK,IAAIC,CAAG,IAChBD,EAAK,IAAIC,CAAG,EACZF,EAAK,KAAKR,CAAC,EACf,CAEA,IAAMW,EAAa,CAACC,EAAGnC,KAAOA,EAAE,UAAY,IAAMmC,EAAE,UAAY,GAC1DC,EAAYb,GAAM,GAAGpE,GAAYoE,EAAE,IAAI,CAAC,IAAIrE,GAAUqE,EAAE,IAAI,CAAC,IAAIA,EAAE,UAAY,EAAI,MAAQ,KAAK,GAIhGc,EAAS,IAAI,IACnB,QAAWd,IAAK,CAAC,GAAGQ,CAAI,EAAE,KAAKG,CAAU,EAAG,CACxC,GAAI,CAACV,GAAcD,CAAC,EAAG,SACvB,IAAMe,EAAIF,EAASb,CAAC,EACfc,EAAO,IAAIC,CAAC,GAAGD,EAAO,IAAIC,EAAG,CAAC,CAAC,EACpCD,EAAO,IAAIC,CAAC,EAAE,KAAKf,CAAC,CACxB,CACA,IAAMgB,EAAS,CAAC,EACVC,EAAQ,IAAI,IACdvB,EAAQ,EACRwB,EAAS,EACPC,EAASnB,GAAM,CACjBgB,EAAO,KAAKhB,CAAC,EACbiB,EAAM,IAAIjB,CAAC,EACXN,GAASK,GAAcC,CAAC,EACpBrE,GAAUqE,EAAE,IAAI,IAAM,SAASkB,GACvC,EACA,QAAWE,KAAQN,EAAO,OAAO,EAAGK,EAAMC,EAAK,CAAC,CAAC,EAGjD,QAAWpB,IAAK,CAAC,GAAGQ,CAAI,EAAE,KAAKG,CAAU,EACrC,GAAI,CAAAM,EAAM,IAAIjB,CAAC,EACf,IAAIgB,EAAO,QAAUb,EAAe,MAChCT,EAAQK,GAAcC,CAAC,EAAII,GAC3BzE,GAAUqE,EAAE,IAAI,IAAM,SAAWkB,GAAUZ,GAC/Ca,EAAMnB,CAAC,EAKX,OAAOgB,EAAO,KAAKL,CAAU,CACjC,CAMA,IAAMU,GAAN,KAAa,CACT,aAAc,CAAE,KAAK,EAAI,CAAC,CAAG,CAC7B,GAAG1E,EAAG,CAAE,KAAK,EAAE,KAAKA,EAAI,GAAI,CAAG,CAC/B,IAAIA,EAAG,CAAE,KAAK,EAAE,KAAMA,GAAK,EAAK,IAAMA,EAAI,GAAI,CAAG,CACjD,IAAIA,EAAG,CAAE,KAAK,EAAE,KAAMA,GAAK,GAAM,IAAOA,GAAK,EAAK,IAAMA,EAAI,GAAI,CAAG,CACnE,IAAIA,EAAG,CAAE,KAAK,EAAE,KAAMA,IAAM,GAAM,IAAOA,IAAM,GAAM,IAAOA,IAAM,EAAK,IAAMA,EAAI,GAAI,CAAG,CACxF,MAAMiE,EAAG,CAAE,QAAWU,KAAKV,EAAG,KAAK,EAAE,KAAKU,EAAI,GAAI,CAAG,CACrD,MAAMC,EAAG,CAAE,QAAS7E,EAAI,EAAGA,EAAI6E,EAAE,OAAQ7E,IAAK,KAAK,EAAE,KAAK6E,EAAE,WAAW7E,CAAC,EAAI,GAAI,CAAG,CACnF,MAAO,CAAE,OAAO,WAAW,KAAK,KAAK,CAAC,CAAG,CAC7C,EAEA,SAAS8E,GAAgB3C,EAAgB,EAIjC,CAAC,OAAO,UAAUA,CAAc,GAAKA,EAAiB,MAAQA,EAAiB,aAC/E1C,EAAK,6DAA6D,EAItE,IAAMsF,EAAU,CAAC,EACbC,EAAWpG,GAAS,QAAQuD,CAAc,EAC9C,GAAI6C,EAAW,EAAG,CACdA,EAAWnG,GACX,IAAM8B,EAAI,IAAIgE,GACdhE,EAAE,IAAIwB,CAAc,EACpB4C,EAAQ,KAAK,CAAE,KAAMjG,GAAI,iBAAkB,MAAO6B,EAAE,KAAK,CAAE,CAAC,CAChE,CACA,MAAO,CAAE,SAAAqE,EAAU,QAAAD,CAAQ,CAC/B,CAUO,SAASE,GAAiBC,EAAG,CAChC,GAAM,CAAE,KAAAC,EAAM,WAAYC,EAAM,KAAM,YAAAC,EAAa,UAAAC,EAAW,WAAAC,EAAa,IAAK,EAAIL,EAChFC,IAASzG,GAAK,OAASyG,IAASzG,GAAK,QAAQe,EAAK,yBAAyB,EAC3E0F,IAASzG,GAAK,QACV,EAAE0G,aAAe,aAAeA,EAAI,SAAW7G,EAAO,gBAAekB,EAAK,oCAAoC,EAC3G2F,IAAQ,MACf3F,EAAK,mCAAmC,EAExC8F,IAAe,OAAS,EAAEA,aAAsB,aAAeA,EAAW,SAAWhH,EAAO,mBAC5FkB,EAAK,6BAA6B,EAGtC,GAAM,CAAE,MAAA+B,EAAO,IAAAC,EAAK,YAAAK,EAAa,MAAAG,EAAO,eAAAE,EAAgB,WAAAC,CAAW,EAAIkD,GACnE9D,EAAM,OAASjD,EAAO,WAAaiD,EAAM,OAASjD,EAAO,WAAa,CAACc,GAAS,KAAKmC,CAAK,IAAG/B,EAAK,mBAAmB,GACrHgC,EAAI,OAASlD,EAAO,SAAWkD,EAAI,OAASlD,EAAO,SAAW,CAACc,GAAS,KAAKoC,CAAG,IAAGhC,EAAK,iBAAiB,EACzG2C,EAAW,OAAS7D,EAAO,gBAAgBkB,EAAK,qBAAqB,EAEzE,IAAM+F,EAAU,KAAK,MAAMH,EAAc7G,IAAY,GAAK,GACtD,CAAC,OAAO,UAAUgH,CAAO,GAAKA,EAAU,GAAKA,EAAU/G,KAAkBgB,EAAK,qBAAqB,EAEvG,GAAM,CAAE,SAAAuF,EAAU,QAAAD,CAAQ,EAAID,GAAgB3C,CAAc,EAEtDsD,EAAM,IAAId,GAChB,QAAWe,KAAKX,EACRW,EAAE,MAAM,OAAS,KAAKjG,EAAK,6BAA6B,EAC5DgG,EAAI,GAAGC,EAAE,IAAI,EAAGD,EAAI,GAAGC,EAAE,MAAM,MAAM,EAAGD,EAAI,MAAMC,EAAE,KAAK,EAE7D,IAAMC,EAAWF,EAAI,KAAK,EACtBE,EAAS,OAASpH,EAAO,eAAekB,EAAK,4BAA4B,EAE7E,IAAMmG,EAAST,EAAO,GACdlD,EAAQ,IAAS,GACjB+C,EAAW,IAAS,GACrBO,EAAa,GAAO,IACpBI,EAAS,OAAS,IAAO,GAE1BhF,EAAI,IAAIgE,GACdhE,EAAE,GAAG,CAAY,EACjBA,EAAE,GAAGiF,CAAK,EACVjF,EAAE,IAAI6E,CAAO,EACTL,IAASzG,GAAK,QAAQiC,EAAE,MAAMyE,CAAG,EACrCzE,EAAE,MAAMmB,CAAW,EACnBnB,EAAE,GAAGa,EAAM,MAAM,EAAGb,EAAE,MAAMa,CAAK,EACjCb,EAAE,GAAGc,EAAI,MAAM,EAAGd,EAAE,MAAMc,CAAG,EAC7Bd,EAAE,GAAGyB,EAAW,MAAM,EACtB,QAAWkB,KAAKlB,EACZzB,EAAE,IAAK2C,EAAE,KAAO,KAAS,EAAMA,EAAE,QAAU,EAAK,EAChD3C,EAAE,MAAM2C,EAAE,IAAI,EACd3C,EAAE,IAAI2C,EAAE,IAAI,EAEZiC,GAAY5E,EAAE,MAAM4E,CAAU,EAC9BI,EAAS,SAAUhF,EAAE,GAAGgF,EAAS,MAAM,EAAGhF,EAAE,MAAMgF,CAAQ,GAE9D,IAAM5F,EAAMY,EAAE,KAAK,EACnB,OAAIZ,EAAI,OAASxB,EAAO,mBAAmBkB,EAAK,sCAAsC,EAC/EM,CACX,CAMA,IAAM8F,GAAN,KAAa,CACT,YAAYC,EAAK,CAAE,KAAK,IAAMA,EAAK,KAAK,EAAI,CAAG,CAC/C,KAAKC,EAAG,CAAM,KAAK,EAAIA,EAAI,KAAK,IAAI,QAAQtG,EAAK,yBAAyB,CAAG,CAC7E,IAAK,CAAE,YAAK,KAAK,CAAC,EAAU,KAAK,IAAI,KAAK,GAAG,CAAG,CAChD,KAAM,CAAE,KAAK,KAAK,CAAC,EAAG,IAAMQ,EAAK,KAAK,IAAI,KAAK,CAAC,GAAK,EAAK,KAAK,IAAI,KAAK,EAAI,CAAC,EAAG,YAAK,GAAK,EAAUA,CAAG,CACvG,KAAM,CAAE,KAAK,KAAK,CAAC,EAAG,IAAMA,EAAK,KAAK,IAAI,KAAK,CAAC,GAAK,GAAO,KAAK,IAAI,KAAK,EAAI,CAAC,GAAK,EAAK,KAAK,IAAI,KAAK,EAAI,CAAC,EAAG,YAAK,GAAK,EAAUA,CAAG,CACtI,KAAM,CAAE,KAAK,KAAK,CAAC,EAAG,IAAMA,GAAM,KAAK,IAAI,KAAK,CAAC,GAAK,KAAQ,IAAM,KAAK,IAAI,KAAK,EAAI,CAAC,GAAK,KAAO,KAAK,IAAI,KAAK,EAAI,CAAC,GAAK,GAAK,KAAK,IAAI,KAAK,EAAI,CAAC,EAAG,YAAK,GAAK,EAAUA,IAAM,CAAG,CACnL,MAAM8F,EAAG,CAAE,YAAK,KAAKA,CAAC,EAAU,KAAK,IAAI,MAAM,KAAK,EAAG,KAAK,GAAKA,CAAC,CAAG,CACrE,MAAMA,EAAG,CACL,KAAK,KAAKA,CAAC,EACX,IAAIlB,EAAI,GACR,QAASmB,EAAI,EAAGA,EAAID,EAAGC,IAAK,CACxB,IAAM1C,EAAI,KAAK,IAAI,KAAK,EAAI0C,CAAC,GACzB1C,EAAI,IAAQA,EAAI,MAAM7D,EAAK,oCAAoC,EACnEoF,GAAK,OAAO,aAAavB,CAAC,CAC9B,CACA,YAAK,GAAKyC,EACHlB,CACX,CACA,IAAI,MAAO,CAAE,OAAO,KAAK,IAAI,OAAS,KAAK,CAAG,CAClD,EAcA,SAASoB,GAAUH,EAAK,CACpB,IAAMJ,EAAI,IAAIG,GAAOC,CAAG,EAClB/F,EAAM,IAAI,IACZmG,EAAW,GACf,KAAOR,EAAE,KAAO,GAAG,CACf,IAAMP,EAAOO,EAAE,GAAG,EACZS,EAAMT,EAAE,GAAG,EACXU,EAAQV,EAAE,MAAMS,CAAG,EAGzB,GAFIhB,GAAQe,GAAUzG,EAAK,sEAAsE,EACjGyG,EAAWf,EACHA,IACCrG,GAAI,iBAAkB,CACnBqH,IAAQ,GAAG1G,EAAK,gCAAgC,EACpD,IAAMQ,EAAI,IAAI4F,GAAOO,CAAK,EAAE,IAAI,GAC5BnG,EAAI,MAAQA,EAAI,aAAYR,EAAK,sCAAsC,EACvEb,GAAS,SAASqB,CAAC,GAAGR,EAAK,4DAA4D,EAC3FM,EAAI,IAAIoF,EAAMlF,CAAC,CAEnB,MAEIR,EAAK,4BAA4B0F,EAAK,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,GAAI,mBAAmB,CAEtG,CACA,OAAOpF,CACX,CAUO,SAASsG,GAAiBP,EAAK,CAAE,MAAAQ,EAAQ,KAAK,IAAI,CAAE,EAAI,CAAC,EAAG,CACzDR,aAAe,YAAarG,EAAK,iCAAiC,EACpEqG,EAAI,SAAW,GAAGrG,EAAK,qBAAqB,EAC5CqG,EAAI,OAASvH,EAAO,mBAAmBkB,EAAK,sCAAsC,EAEtF,IAAMiG,EAAI,IAAIG,GAAOC,CAAG,EAKlBS,EAAUb,EAAE,GAAG,EACjBa,IAAY,GAAc9G,EAAK,oCAAoC8G,EAAQ,SAAS,EAAE,CAAC,GAAI,SAAS,EAExG,IAAMX,EAAQF,EAAE,GAAG,EACbP,EAAOS,EAAQ,EACjBT,IAASzG,GAAK,OAASyG,IAASzG,GAAK,QAAQe,EAAK,0BAA0B,EAChF,IAAMwC,EAAS2D,GAAS,EAAK,EACzB3D,EAAQ,GAAGxC,EAAK,0BAA0B,EAC9C,IAAMuF,EAAYY,GAAS,EAAK,EAC1BY,GAAiBZ,EAAQ,MAAU,EACnCa,GAAUb,EAAQ,OAAU,EAE5BJ,EAAUE,EAAE,IAAI,EAChBL,EAAc7G,GAAWgH,EAAU,IACzC,GAAIc,EAAQ/H,EAAO,cAAgB8G,EAAa,CAC5C,IAAMqB,EAAU,KAAK,OAAOJ,EAAQjB,GAAe,GAAK,EACxD5F,EACI,qBAAqBiH,CAAO,sIAE5B,SACJ,CACJ,CACIrB,EAAciB,EAAS/H,EAAO,qBAAuB,IAASA,EAAO,eACrEkB,EAAK,0CAA2C,UAAU,EAG9D,IAAMkH,EAAaxB,IAASzG,GAAK,OAASgH,EAAE,MAAMnH,EAAO,aAAa,EAAI,KACpEuD,EAAc4D,EAAE,MAAMnH,EAAO,iBAAiB,EAE9CqI,EAAWlB,EAAE,GAAG,GAClBkB,EAAWrI,EAAO,WAAaqI,EAAWrI,EAAO,YAAWkB,EAAK,+BAA+B,EACpG,IAAM+B,EAAQkE,EAAE,MAAMkB,CAAQ,EACzBvH,GAAS,KAAKmC,CAAK,GAAG/B,EAAK,wDAAwD,EAExF,IAAMoH,EAASnB,EAAE,GAAG,GAChBmB,EAAStI,EAAO,SAAWsI,EAAStI,EAAO,UAASkB,EAAK,6BAA6B,EAC1F,IAAMgC,EAAMiE,EAAE,MAAMmB,CAAM,EACrBxH,GAAS,KAAKoC,CAAG,GAAGhC,EAAK,sDAAsD,EAEpF,IAAMqH,EAAQpB,EAAE,GAAG,EACfoB,EAAQvI,EAAO,gBAAgBkB,EAAK,qBAAqB,EAC7D,IAAM2C,EAAa,CAAC,EACpB,QAASpC,EAAI,EAAGA,EAAI8G,EAAO9G,IAAK,CAC5B,IAAM+G,EAAUrB,EAAE,GAAG,EACf3C,EAAQgE,GAAW,EAAK,GACxBnE,EAAUmE,EAAU,GACpBC,EAAUhI,GAAc+D,CAAI,EAC9BiE,IAAY,QAAWvH,EAAK,2BAA2BsD,CAAI,EAAE,EAC7DH,GAAWzD,GAAQ,QAAQM,EAAK,6BAA6B,EACjE,IAAMgD,EAAOiD,EAAE,MAAMsB,CAAO,EACtBtE,GAAOgD,EAAE,IAAI,EACfhD,GAAO,GAAGjD,EAAK,iCAAiC,EACpD2C,EAAW,KAAK,CAAE,KAAAW,EAAM,QAAAH,EAAS,KAAAH,EAAM,KAAAC,EAAK,CAAC,CACjD,CAEA,IAAI6C,EAAa,KACbiB,IAAejB,EAAaG,EAAE,MAAMnH,EAAO,gBAAgB,GAE/D,IAAI0I,EAAa,IAAI,IACrB,GAAIR,EAAQ,CACR,IAAMS,EAASxB,EAAE,GAAG,EAChBwB,IAAW,GAAGzH,EAAK,qCAAqC,EAC5DwH,EAAahB,GAAUP,EAAE,MAAMwB,CAAM,CAAC,CAC1C,CAKIxB,EAAE,OAAS,GAAGjG,EAAK,GAAGiG,EAAE,IAAI,wCAAwC,EAExE,IAAIvD,EACJ,OAAI6C,IAAanG,IACRoI,EAAW,IAAInI,GAAI,gBAAgB,GAAGW,EAAK,wEAAwE,EACxH0C,EAAiB8E,EAAW,IAAInI,GAAI,gBAAgB,IAEhDmI,EAAW,IAAInI,GAAI,gBAAgB,GAAGW,EAAK,uDAAuD,EACtG0C,EAAiBvD,GAASoG,CAAQ,GAG/B,CACH,QAAAuB,EAAS,KAAApB,EAAM,MAAAlD,EAAO,eAAAE,EAAgB,YAAAkD,EACtC,WAAAsB,EAAY,YAAA7E,EAAa,MAAAN,EAAO,IAAAC,EAAK,WAAAW,EAAY,WAAAmD,EAAY,WAAA0B,CACjE,CACJ,CAMA,IAAME,GAAQpF,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EAElD,SAASqF,GAAWrE,EAAMN,EAAM,CAC5B,OAAQM,EAAM,CACV,KAAKhE,GAAK,UAAW,CACjB,IAAMsI,EAAI,MAAM,KAAK5E,EAAM0E,EAAI,EAAE,KAAK,EAAE,EACxC,MAAO,GAAGE,EAAE,MAAM,EAAG,CAAC,CAAC,IAAIA,EAAE,MAAM,EAAG,EAAE,CAAC,IAAIA,EAAE,MAAM,GAAI,EAAE,CAAC,IAAIA,EAAE,MAAM,GAAI,EAAE,CAAC,IAAIA,EAAE,MAAM,EAAE,CAAC,QAClG,CACA,KAAKtI,GAAK,QAAS,KAAKA,GAAK,SAAU,KAAKA,GAAK,SAC7C,MAAO,GAAG0D,EAAK,CAAC,CAAC,IAAIA,EAAK,CAAC,CAAC,IAAIA,EAAK,CAAC,CAAC,IAAIA,EAAK,CAAC,CAAC,GACtD,QAAS,CACL,IAAM7B,EAAQ,CAAC,EACf,QAASZ,EAAI,EAAGA,EAAI,GAAIA,GAAK,EAAGY,EAAM,MAAO6B,EAAKzC,CAAC,GAAK,EAAKyC,EAAKzC,EAAI,CAAC,GAAG,SAAS,EAAE,CAAC,EACtF,OAAOY,EAAM,KAAK,GAAG,CACzB,CACJ,CACJ,CAWO,SAAS0G,GAAaC,EAAM,CAAE,UAAAC,EAAY,GAAI,EAAI,CAAC,EAAG,CACzD,IAAMC,EAAUF,EAAK,OAAS7I,GAAK,MAsB7BgJ,EAAe,CAAE,MAAO,EAAG,MAAO,EAAG,KAAM,CAAE,EAC7CC,EAAMJ,EAAK,WACZ,OAAQjE,GAAMA,EAAE,OAASvE,GAAK,WAAauE,EAAE,UAAY,CAAC,EAC1D,KAAK,CAACsB,EAAGgD,IAAMF,EAAazI,GAAU2F,EAAE,IAAI,CAAC,EAAI8C,EAAazI,GAAU2I,EAAE,IAAI,CAAC,CAAC,EAAE,CAAC,EAClFC,EAAUF,GAAOzI,GAAYyI,EAAI,IAAI,IAAM,KAC3CG,EAAQH,EAAMA,EAAI,KAAO,EACzBI,EAAQJ,EACR,UAAUE,EAAU,IAAM,GAAG,IAAIT,GAAWO,EAAI,KAAMA,EAAI,IAAI,CAAC,GAC/D,mBAEAvG,EAAQ,CACV,MACA,OAAOoG,CAAS,sBAChB,MACA,QACA,mBACA,uBACA,iBAAiBM,CAAK,oCACtBC,EACA,eAAiBR,EAAK,MACtB,aAAeA,EAAK,IAKpB,yBAA2B,MAAM,KAAKA,EAAK,YAAcxF,GAAMoF,GAAKpF,CAAC,EAAE,YAAY,CAAC,EAAE,KAAK,GAAG,EAC9F,WAAapD,GAAM4I,EAAK,KAAK,EAC7B,UACA,mBACA,sBAAwBA,EAAK,cACjC,EAKMS,EAAYT,EAAK,WAAW,IAAI,CAACjE,EAAGtD,IAAM,CAC5C,IAAM2C,EAAQ1D,GAAUqE,EAAE,IAAI,EACxBf,EAAYe,EAAE,UAAY,EAAI,MAAQ,MAGtC2E,EAAY,KAAK,IAAI,EAAG,MAAQjI,CAAC,EACjCwC,EAAWpD,GAAUuD,CAAK,EAAI,SAAWsF,EAAY,IAAM,IAK7D5F,EAAO,eADQ,OAAOiB,EAAE,KAAO,EAAIA,EAAE,QAAU,CAAC,CAChB,MAAMf,CAAS,IAAIC,CAAQ,IAAI4E,GAAW9D,EAAE,KAAMA,EAAE,IAAI,CAAC,IAAIA,EAAE,IAAI,QAAQX,CAAK,GAUpH,OAAIA,IAAU,SACVN,GAAQnD,GAAYoE,EAAE,IAAI,IAAM,KAAO,oBAAsB,0BAE7Df,IAAc,QAAOF,GAAQ,YAAYlD,GAAQmE,EAAE,OAAO,CAAC,IACxDjB,CACX,CAAC,EAID2F,EAAU,KAAK,qBAAqB,EACpC,IAAME,EAAK9G,EAAM,QAAQ2G,CAAK,EAAI,EAClC,OAAA3G,EAAM,OAAO8G,EAAI,EAAG,GAAGF,CAAS,EAEzB,CAAE,KAAMP,EAAU,QAAU,SAAU,IAAKrG,EAAM,KAAK;AAAA,CAAM,EAAI;AAAA,CAAO,CAClF,CAMA,IAAM+G,GAAM,IAAI,YAEhB,SAASC,MAAUC,EAAO,CACtB,IAAMC,EAAQD,EAAM,OAAO,CAACtC,EAAGzD,IAAMyD,EAAIzD,EAAE,OAAQ,CAAC,EAC9CvC,EAAM,IAAI,WAAWuI,CAAK,EAC5BC,EAAI,EACR,QAAWjG,KAAK+F,EAAStI,EAAI,IAAIuC,EAAGiG,CAAC,EAAGA,GAAKjG,EAAE,OAC/C,OAAOvC,CACX,CAiBA,eAAsB4G,GAAW6B,EAAQC,EAAY,CAEjD,OADU,MAAMD,EAAOJ,GAAOD,GAAI,OAAO,aAAa,EAAGM,CAAU,CAAC,GAC3D,MAAM,EAAGlK,EAAO,aAAa,CAC1C,CAGA,eAAsBmK,GAAWF,EAAQG,EAAW,CAEhD,OADU,MAAMH,EAAOJ,GAAOD,GAAI,OAAO,aAAa,EAAGQ,CAAS,CAAC,GAC1D,MAAM,EAAGpK,EAAO,gBAAgB,CAC7C,CAYO,SAASqK,GAAcH,EAAYI,EAAaC,EAAWC,EAAY,CAC1E,IAAMC,EAAMjH,GAAM,CACd,IAAMgE,EAAI,IAAI,WAAW,CAAC,EAC1B,WAAI,SAASA,EAAE,MAAM,EAAE,UAAU,EAAGhE,EAAE,MAAM,EACrCqG,GAAOrC,EAAGhE,CAAC,CACtB,EACA,OAAOqG,GACHD,GAAI,OAAO,eAAe,EAC1Ba,EAAGP,CAAU,EAAGO,EAAGH,CAAW,EAAGG,EAAGF,CAAS,EAAGE,EAAGD,CAAU,CACjE,CACJ,CAMA,IAAME,GAAS,mEAER,SAASC,GAAYlG,EAAO,CAC/B,IAAIjD,EAAM,GACV,QAASC,EAAI,EAAGA,EAAIgD,EAAM,OAAQhD,GAAK,EAAG,CACtC,IAAMkE,EAAIlB,EAAMhD,CAAC,EAAG+B,EAAIiB,EAAMhD,EAAI,CAAC,EAAGsD,EAAIN,EAAMhD,EAAI,CAAC,EAKrD,GAJAD,GAAOkJ,GAAO/E,GAAK,CAAC,EACpBnE,GAAOkJ,IAAS/E,EAAI,IAAM,GAAOnC,GAAK,IAAM,CAAE,EAC1CA,IAAM,SACVhC,GAAOkJ,IAASlH,EAAI,KAAO,GAAOuB,GAAK,IAAM,CAAE,EAC3CA,IAAM,QAAW,MACrBvD,GAAOkJ,GAAO3F,EAAI,EAAE,CACxB,CACA,OAAOvD,CACX,CAEO,SAASoJ,GAAchJ,EAAM,CAC5B,OAAOA,GAAS,UAAUV,EAAK,0BAA0B,EAG7D,IAAMoF,EAAI1E,EAAK,QAAQ,OAAQ,EAAE,EAC7B0E,EAAE,OAAS,KAAK,KAAKtG,EAAO,kBAAoB,EAAI,CAAC,EAAI,GAAGkB,EAAK,qBAAqB,EACrF,mBAAmB,KAAKoF,CAAC,GAAGpF,EAAK,+CAA+C,EACjFoF,EAAE,OAAS,IAAM,GAAGpF,EAAK,kCAAkC,EAC/D,IAAMM,EAAM,IAAI,WAAW,KAAK,MAAM8E,EAAE,OAAS,EAAI,CAAC,CAAC,EACnD0D,EAAI,EAAGa,EAAM,EAAGC,EAAO,EAC3B,QAAWC,KAAMzE,EACbuE,EAAOA,GAAO,EAAKH,GAAO,QAAQK,CAAE,EACpCD,GAAQ,EACJA,GAAQ,IAAKA,GAAQ,EAAGtJ,EAAIwI,GAAG,EAAKa,GAAOC,EAAQ,KAE3D,OAAID,GAAQ,GAAKC,GAAQ,GAAI5J,EAAK,mCAAmC,EAC9DM,EAAI,SAAS,EAAGwI,CAAC,CAC5B,CAEO,IAAMgB,GAAc,OAEpB,SAASC,GAAWxG,EAAO,CAAE,OAAOuG,GAAcL,GAAYlG,CAAK,CAAG,CAEtE,SAASyG,GAAWtJ,EAAM,CACzB,OAAOA,GAAS,UAAUV,EAAK,0BAA0B,EAC7D,IAAMqD,EAAI3C,EAAK,KAAK,EACpB,OAAK2C,EAAE,WAAWyG,EAAW,GAAG9J,EAAK,uBAAuB,EACrD0J,GAAcrG,EAAE,MAAMyG,GAAY,MAAM,CAAC,CACpD,CCj0BO,IAAMG,GAAmB,EAEnBC,GAAO,OAAO,OAAO,CAAE,MAAO,EAAG,OAAQ,CAAE,CAAC,EAE5CC,GAAc,OAAO,OAAO,CAIrC,SAAU,IACV,SAAU,GAEV,QAAS,IACT,QAAS,GACT,eAAgB,IACpB,CAAC,EAEKC,GAAN,cAA+B,KAAM,CACjC,YAAYC,EAASC,EAAO,eAAgB,CACxC,MAAMD,CAAO,EACb,KAAK,KAAO,mBACZ,KAAK,KAAOC,CAChB,CACJ,EACMC,GAAO,CAACC,EAAKF,IAAS,CAAE,MAAM,IAAIF,GAAiBI,EAAKF,CAAI,CAAG,EAa9D,SAASG,GAAc,CAAE,KAAAC,EAAM,SAAAC,EAAU,UAAAC,CAAU,EAAG,CACrDF,IAASR,GAAK,OAASQ,IAASR,GAAK,QAAQK,GAAK,cAAc,EACpE,OAAW,CAACM,EAAMC,CAAC,GAAK,CAAC,CAAC,OAAQH,CAAQ,EAAG,CAAC,QAASC,CAAS,CAAC,EACvDE,aAAa,YAAaP,GAAK,GAAGM,CAAI,4BAA4B,GACpEC,EAAE,OAASX,GAAY,UAAYW,EAAE,OAASX,GAAY,WAC1DI,GAAK,GAAGM,CAAI,2BAA2B,EAG/C,IAAME,EAAM,IAAI,WAAW,EAAYJ,EAAS,OAAS,EAAIC,EAAU,MAAM,EACvEI,EAAK,IAAI,SAASD,EAAI,MAAM,EAC9BE,EAAI,EACR,OAAAF,EAAIE,GAAG,EAAIhB,GACXc,EAAIE,GAAG,EAAIP,EACXM,EAAG,UAAUC,EAAGN,EAAS,MAAM,EAAGM,GAAK,EACvCF,EAAI,IAAIJ,EAAUM,CAAC,EAAGA,GAAKN,EAAS,OACpCK,EAAG,UAAUC,EAAGL,EAAU,MAAM,EAAGK,GAAK,EACxCF,EAAI,IAAIH,EAAWK,CAAC,EACbF,CACX,CAGO,SAASG,GAAcC,EAAK,CACzBA,aAAe,YAAaZ,GAAK,+BAA+B,EAClEY,EAAI,SAAW,GAAGZ,GAAK,mBAAmB,EAC1CY,EAAI,OAAShB,GAAY,gBAAgBI,GAAK,iCAAiC,EAEnF,IAAMS,EAAK,IAAI,SAASG,EAAI,OAAQA,EAAI,WAAYA,EAAI,UAAU,EAC9DF,EAAI,EACFG,EAAQC,GAAM,CAAMJ,EAAII,EAAIF,EAAI,QAAQZ,GAAK,uBAAuB,CAAG,EAE7Ea,EAAK,CAAC,EACN,IAAME,EAAUH,EAAIF,GAAG,EAGnBK,IAAYrB,IAAkBM,GAAK,kCAAkCe,EAAQ,SAAS,EAAE,CAAC,GAAI,SAAS,EAE1GF,EAAK,CAAC,EACN,IAAMV,EAAOS,EAAIF,GAAG,EAChBP,IAASR,GAAK,OAASQ,IAASR,GAAK,QAAQK,GAAK,wBAAwB,EAE9Ea,EAAK,CAAC,EACN,IAAMG,EAAUP,EAAG,UAAUC,CAAC,EAAGA,GAAK,GAClCM,EAAUpB,GAAY,UAAYoB,EAAUpB,GAAY,WAAUI,GAAK,+BAA+B,EAC1Ga,EAAKG,CAAO,EACZ,IAAMZ,EAAWQ,EAAI,MAAMF,EAAGA,EAAIM,CAAO,EAAGN,GAAKM,EAEjDH,EAAK,CAAC,EACN,IAAMI,EAAWR,EAAG,UAAUC,CAAC,EAAGA,GAAK,GACnCO,EAAWrB,GAAY,UAAYqB,EAAWrB,GAAY,WAAUI,GAAK,gCAAgC,EAC7Ga,EAAKI,CAAQ,EACb,IAAMZ,EAAYO,EAAI,MAAMF,EAAGA,EAAIO,CAAQ,EAAG,OAAAP,GAAKO,EAK/CP,IAAME,EAAI,QAAQZ,GAAK,GAAGY,EAAI,OAASF,CAAC,sCAAsC,EAE3E,CAAE,QAAAK,EAAS,KAAAZ,EAAM,SAAAC,EAAU,UAAAC,CAAU,CAChD,CAUO,SAASa,GAAgB,CAAE,gBAAAC,EAAiB,iBAAAC,EAAkB,UAAAC,EAAW,WAAAC,CAAW,EAAG,CAC1F,OAAW,CAAChB,EAAMC,CAAC,IAAK,OAAO,QAAQ,CAAE,gBAAAY,EAAiB,iBAAAC,EAAkB,UAAAC,EAAW,WAAAC,CAAW,CAAC,GAC3F,EAAEf,aAAa,aAAeA,EAAE,SAAW,IAAGP,GAAK,wBAAwBM,CAAI,aAAa,EAEpG,OAAOiB,GAAcJ,EAAiBC,EAAkBC,EAAWC,CAAU,CACjF,CAUA,eAAsBE,GAAqBC,EAAQC,EAAY,CAC3D,IAAMC,EAAI,MAAMF,EAAO,OAAO,UAAWC,CAAU,EACnD,OAAO,MAAM,KAAK,IAAI,WAAWC,CAAC,CAAC,CACvC,CAEA,IAAMC,GAAM,IAAI,YAGT,SAASC,GAAaH,EAAY,CACrC,IAAMI,EAAQF,GAAI,OAAO,iBAAiB,EACpCpB,EAAM,IAAI,WAAWsB,EAAM,OAASJ,EAAW,MAAM,EAC3D,OAAAlB,EAAI,IAAIsB,EAAO,CAAC,EAChBtB,EAAI,IAAIkB,EAAYI,EAAM,MAAM,EACzBtB,CACX,CASA,eAAsBuB,GAAqBN,EAAQ,CAAE,eAAAO,EAAgB,kBAAAC,EAAmB,WAAAP,EAAY,OAAAQ,EAAS,CAAE,EAAG,CAC9G,IAAMC,EAAS,MAAMV,EAAO,WAAW,CAAE,KAAM,OAAQ,OAAQQ,CAAkB,EAAGD,EAAgB,GAAG,EACnGI,EAAM,KACV,GAAI,CACAA,EAAM,MAAMX,EAAO,UAAU,MAAOU,EAAQ,OAAQ,GAAO,CAAC,YAAY,CAAC,EACzE,IAAME,EAAO,IAAI,WAAW,MAAMZ,EAAO,OAAO,UAAWC,CAAU,CAAC,EAChEY,EAAO,MAAMb,EAAO,WACtB,CAAE,KAAM,OAAQ,KAAM,UAAW,KAAAY,EAAM,KAAMT,GAAI,OAAO,aAAa,CAAE,EACvEQ,EAAK,EACT,EACM3B,EAAK,IAAI,SAAS6B,CAAI,EACtBxB,GAAKL,EAAG,UAAU,CAAC,EAAIA,EAAG,UAAU,CAAC,KAAO,EAC5C8B,EAAM,IAAML,EAClB,OAAO,OAAOpB,EAAIyB,CAAG,EAAE,SAASL,EAAQ,GAAG,CAC/C,QAAE,CAEE,GAAI,CAAE,IAAI,WAAWC,CAAM,EAAE,KAAK,CAAC,CAAG,MAAY,CAA0B,CAChF,CACJ,CASA,eAAsBK,GAAqBf,EAAQgB,EAAWC,EAAoB,EAC1E,EAAEA,aAA8B,aAAeA,EAAmB,SAAWC,EAAO,mBACpF3C,GAAK,0CAA2C,oBAAoB,EAGxE,IAAM4C,EAAS,MAAMC,GADN,MAAOC,GAAM,IAAI,WAAW,MAAMrB,EAAO,OAAO,UAAWqB,CAAC,CAAC,EACpCL,CAAS,EAC7CG,EAAO,SAAWF,EAAmB,QAAQ1C,GAAK,6BAA8B,qBAAqB,EACzG,IAAI+C,EAAO,EACX,QAASC,EAAI,EAAGA,EAAIJ,EAAO,OAAQI,IAAKD,GAAQH,EAAOI,CAAC,EAAIN,EAAmBM,CAAC,EAChF,OAAID,IAAS,GACT/C,GAAK,mEAAoE,qBAAqB,EAE3F,EACX,CCpKA,IAAMiD,GAAN,MAAMC,CAA4B,CAK9B,OAAO,SAAW,CACd,sBAAuB,IACvB,mBAAoB,IAGpB,mBAAoB,IACpB,oBAAqB,IACrB,0BAA2B,IAC3B,iBAAkB,IAClB,uBAAwB,IACxB,sBAAuB,IAIvB,2BAA4B,KAC5B,yBAA0B,IAC1B,wBAAyB,IACzB,wBAAyB,IACzB,wBAAyB,KACzB,wBAAyB,IACzB,yBAA0B,IAC1B,0BAA2B,KAC3B,0BAA2B,IAC3B,oBAAqB,IACrB,kBAAmB,IACnB,kBAAmB,KACnB,gBAAiB,IACjB,uBAAwB,IAiBxB,qBAAsB,IAKtB,oBAAqB,IAKrB,sBAAuB,IAGvB,uBAAwB,KAMxB,uBAAwB,KAQxB,qBAAsB,KACtB,uBAAwB,IACxB,wBAAyB,GAE7B,EAKA,OAAO,kBAAoB,OAAO,OAAO,CAAC,IAAM,IAAM,IAAM,IAAM,KAAO,GAAK,CAAC,EAE/E,OAAO,OAAS,CACZ,wBAAyB,EAIzB,wBAAyB,EACzB,aAAc,EACd,0BAA2B,IAC3B,yBAA0B,EAC1B,mBAAoB,EACpB,mBAAoB,GACpB,YAAa,IACb,cAAe,KACf,aAAc,GACd,aAAc,EAClB,EAEA,OAAO,MAAQ,CACX,6BAA8B,EAC9B,sBAAuB,GACvB,sBAAuB,IACvB,mBAAoB,GACpB,mBAAoB,IACpB,eAAgB,KAChB,gBAAiB,IACjB,gBAAiB,IACjB,2BAA4B,EAC5B,kBAAmB,GACnB,0BAA2B,EAC/B,EAEA,OAAO,cAAgB,CAEnB,QAAS,UACT,iBAAkB,mBAIlB,gBAAiB,kBAGjB,eAAgB,iBAEhB,gBAAiB,kBAGjB,UAAW,YACX,aAAc,eACd,sBAAuB,wBACvB,uBAAwB,yBACxB,4BAA6B,8BAC7B,gBAAiB,kBACjB,iBAAkB,mBAClB,oBAAqB,sBACrB,mBAAoB,qBAGpB,oBAAqB,sBACrB,uBAAwB,yBACxB,WAAY,aACZ,mBAAoB,qBACpB,uBAAwB,yBACxB,oBAAqB,sBAMrB,WAAY,aACZ,YAAa,cACb,SAAU,WACV,aAAc,eACd,SAAU,WAWV,kBAAmB,oBACnB,mBAAoB,qBAGpB,oBAAqB,sBAMrB,SAAU,WACV,UAAW,YAGX,KAAM,MACV,EAEA,OAAO,iBAAmB,CACtB,aAAc,wBACd,aAAc,wBACd,eAAgB,yBACpB,EAOA,OAAO,gCAAkC,IAAI,IAAI,CAC7CA,EAA4B,cAAc,eAC1CA,EAA4B,cAAc,gBAC1CA,EAA4B,cAAc,WAC1CA,EAA4B,cAAc,YAC1CA,EAA4B,cAAc,SAC1CA,EAA4B,cAAc,aAC1CA,EAA4B,cAAc,SAC1CA,EAA4B,cAAc,kBAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,mBAC9C,CAAC,EAYD,OAAO,kBAAoB,GAK3B,OAAO,6BAA+B,KAEtC,OAAO,iBAAmB,MAG1B,OAAO,gBAAkB,EACzB,OAAO,iBAAmB,EAC1B,OAAO,oBAAsB,OAAO,OAAO,CAGvC,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,EACvD,OAAO,OAAO,CAAE,KAAM,8BAA+B,CAAC,EACtD,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,EACvD,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,EACvD,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,EACvD,OAAO,OAAO,CAAE,KAAM,+BAAgC,CAAC,CAC3D,CAAC,EAGD,OAAO,WAAa,GAGpB,YAAYC,EAAWC,EAAgBC,EAAeC,EAAwBC,EAAgB,KAAMC,EAA4B,KAAMC,EAAS,CAAC,EAAG,CAgFnJ,GA9EA,KAAK,kBAAoB,KAAK,sBAAsB,EAEhD,KAAK,WAAa,CAAC,KAAK,mBAAqBP,EAA4B,WAGzE,KAAK,QAAU,CACX,YAAa,CACT,QAASO,EAAO,aAAa,SAAW,GACxC,YAAaA,EAAO,aAAa,aAAeP,EAA4B,SAAS,0BACrF,YAAaO,EAAO,aAAa,aAAeP,EAA4B,SAAS,0BACrF,QAASO,EAAO,aAAa,SAAWP,EAA4B,MAAM,sBAC1E,QAASO,EAAO,aAAa,SAAWP,EAA4B,MAAM,sBAC1E,SAAUO,EAAO,aAAa,UAAY,CAAC,YAAa,SAAU,MAAM,CAC5E,EACA,cAAe,CACX,QAASA,EAAO,eAAe,SAAW,GAC1C,iBAAkBA,EAAO,eAAe,kBAAoBP,EAA4B,OAAO,mBAC/F,kBAAmBO,EAAO,eAAe,mBAAqB,CAAC,WAAW,EAC1E,cAAeA,EAAO,eAAe,eAAiB,GACtD,qBAAsBA,EAAO,eAAe,sBAAwB,EACxE,EACA,cAAe,CACX,QAASA,EAAO,eAAe,SAAW,GAC1C,WAAYA,EAAO,eAAe,YAAcP,EAA4B,MAAM,mBAClF,WAAYO,EAAO,eAAe,YAAcP,EAA4B,MAAM,mBAClF,iBAAkBO,EAAO,eAAe,kBAAoB,GAC5D,oBAAqBA,EAAO,eAAe,qBAAuB,EACtE,EACA,mBAAoB,CAChB,QAASA,EAAO,oBAAoB,SAAW,GAC/C,gBAAiBA,EAAO,oBAAoB,iBAAmB,GAC/D,eAAgBA,EAAO,oBAAoB,gBAAkB,GAC7D,SAAUA,EAAO,oBAAoB,UAAY,GACjD,aAAcA,EAAO,oBAAoB,cAAgB,GACzD,iBAAkBA,EAAO,oBAAoB,kBAAoB,EACrE,EACA,OAAQ,CAGJ,YAAaA,EAAO,QAAQ,cACpBA,EAAO,QAAQ,UAAY,aAAe,YAClD,UAAWA,EAAO,QAAQ,YACpBA,EAAO,OAAO,cAAgB,aAC9BA,EAAO,QAAQ,WAAa,GAClC,WAAYA,EAAO,QAAQ,YACpBP,EAA4B,oBAAoB,IAAIQ,IAAW,CAAE,GAAGA,CAAO,EAAE,CACxF,CACJ,EAiBA,KAAK,kBAAoBD,EAAO,mBAAqB,GAErD,KAAK,oBAAsB,GAG3B,KAAK,yBAAyB,EAC9B,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAG7B,KAAK,uBAAuB,EAG5B,KAAK,sBAAsB,EAC3B,CAAC,OAAO,0BACR,MAAM,IAAI,MAAM,oFAAoF,EAExG,KAAK,gBAAkB,IAEZ,KAAK,wBAA0B,CAClC,MAAO,KAAK,wBAAwB,MACpC,MAAO,KAAK,wBAAwB,MACpC,UAAW,KAAK,wBAAwB,SAE5C,EAAI,KAER,KAAK,WAAW,OAAQ,+DAAwD,EAChF,KAAK,mBAAqB,KAC1B,KAAK,eAAiB,KACtB,KAAK,YAAc,KAGnB,KAAK,UAAYN,EACjB,KAAK,eAAiBC,EACtB,KAAK,cAAgBC,EACrB,KAAK,0BAA4BG,EAEjC,KAAK,uBAAyBF,EAC9B,KAAK,cAAgBC,EACrB,KAAK,YAAc,GACnB,KAAK,mBAAqB,EAC1B,KAAK,sBAAwBL,EAA4B,OAAO,wBAChE,GAAI,CACJ,KAAK,uBAAuB,CAChC,OAASS,EAAO,CACZ,WAAK,WAAW,QAAS,2CAAuC,CAC5D,UAAWA,EAAM,YAAY,IACjC,CAAC,EACK,IAAI,MAAM,8CAA8C,CAClE,CAGA,GAAI,CAAC,KAAK,qBAAqB,EAC3B,WAAK,WAAW,QAAS,4DAAuD,EAC1E,IAAI,MAAM,0CAA0C,EAoStD,GAjSJ,OAAO,OAAW,KAClB,KAAK,WAAW,OAAQ,yEAAkE,EAG9F,KAAK,WAAW,OAAQ,iEAA0D,EAC9E,KAAK,kBAAoB,KACzB,KAAK,aAAe,CAAC,EAErB,KAAK,WAAa,CACd,MAAO,OACP,SAAU,EACV,UAAW,EACX,WAAY,KACZ,WAAY,KACZ,aAAc,KACd,WAAY,EACZ,eAAgB,EAChB,YAAa,IACjB,EAEA,KAAK,eAAiB,EACtB,KAAK,iBAAmB,EACxB,KAAK,eAAiB,KACtB,KAAK,gBAAkB,KACvB,KAAK,YAAc,KACnB,KAAK,aAAe,KAChB,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAEtB,KAAK,iBAAmB,KAC5B,KAAK,eAAiB,KACtB,KAAK,WAAa,GAClB,KAAK,sBAAwB,EAC7B,KAAK,oBAAsB,IAAI,IAG/B,KAAK,2BAA6B,GAClC,KAAK,4BAA8B,GACnC,KAAK,2BAA6B,GAQlC,KAAK,wBAA0B,KAC/B,KAAK,qBAAuB,KAC5B,KAAK,qBAAuB,GAG5B,KAAK,kBAAoB,IAAI,IAC7B,KAAK,iBAAmB,KAAK,IAAI,EACrC,KAAK,eAAiB,EACtB,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,YAAc,KACnB,KAAK,qBAAuB,KAG5B,KAAK,iBAAmB,GACxB,KAAK,aAAe,IAAI,IACxB,KAAK,eAAiB,IACtB,KAAK,wBAA0B,GAC/B,KAAK,UAAY,KAMjB,KAAK,eAAiB,KAEtB,KAAK,MAAQ,KACb,KAAK,aAAe,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EACnE,IAAIC,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EACtD,KAAK,cAAgB,KAKrB,KAAK,SAAW,KAChB,KAAK,qBAAuB,GAC5B,KAAK,cAAgB,KACrB,KAAK,sBAAwB,GAC7B,KAAK,cAAgB,GACrB,KAAK,6BAA+B,IAAI,IACxC,KAAK,4BAA8B,KACnC,KAAK,oBAAsB,KAC3B,KAAK,gBAAkB,KAAK,IAAI,EAGhC,KAAK,wBAAwB,EAI7B,KAAK,2BAA6B,GAClC,KAAK,2BAA6B,GAClC,KAAK,mCAAqC,GAC1C,KAAK,+BAAiC,GACtC,KAAK,iCAAmC,GACxC,KAAK,oCAAsC,GAC3C,KAAK,yCAA2C,GAChD,KAAK,gCAAkC,GACvC,KAAK,yBAA2B,KAChC,KAAK,oCAAsC,GAC3C,KAAK,6BAA+B,KAGpC,KAAK,mBAAqB,KAC1B,KAAK,eAAiB,KAOtB,KAAK,kBAAoB,CACrB,QAAS,IAAI,IACb,UAAW,IAAI,IACf,eAAgB,EAChB,iBAAkB,IAClB,cAAe,IACf,kBAAmB,CACf,WAAY,EACZ,aAAc,EACd,gBAAiB,CACrB,EACA,cAAe,CACX,eAAgB,EAChB,gBAAiB,GACjB,eAAgB,CACpB,EACA,WAAY,IAAI,IAChB,cAAe,EACnB,EAGA,KAAK,mBAAqB,KAK1B,KAAK,oBAAsB,CACvB,gBAAiB,CACb,cAAe,gBACf,QAAS,UACT,WAAY,aACZ,OAAQ,SACR,QAAS,SACb,EACA,cAAe,IAAI,IACnB,YAAa,IAAI,IACjB,cAAe,EACf,eAAgB,GAChB,cAAe,EACnB,EAKA,KAAK,qBAAuB,CACxB,cAAe,IAAI,QACnB,aAAc,CAAC,EACf,WAAY,GACZ,gBAAiB,KACjB,YAAa,CACT,cAAe,EACf,eAAgB,EAChB,YAAa,CACjB,CACJ,EACA,KAAK,eAAiB,KACtB,KAAK,YAAc,KAQnB,KAAK,mBAAqB,KAC1B,KAAK,UAAY,CACb,OAAQ,GACR,MAAO,OACP,UAAW,GACX,WAAY,GACZ,cAAe,GACf,eAAgB,GAChB,OAAQ,KACR,QAAS,KACT,YAAa,KACb,MAAO,IACX,EACA,KAAK,iBAAmB,KACxB,KAAK,kBAAoB,KACzB,KAAK,kBAAoB,KACzB,KAAK,iBAAmB,GACxB,KAAK,iBAAmB,KACxB,KAAK,iBAAmB,KACxB,KAAK,gBAAkB,OACvB,KAAK,sBAAwB,KAuB7B,KAAK,kBAAoB,KACzB,KAAK,qBAAuB,KAE5B,KAAK,oBAAsB,IAAI,IAG/B,KAAK,oBAAsB,KAC3B,KAAK,gBAAkB,KAAK,IAAI,EAChC,KAAK,kBAAoB,EACzB,KAAK,YAAc,IAAI,IACvB,KAAK,QAAU,IAAI,IACnB,KAAK,WAAaV,EAA4B,OAAO,aACrD,KAAK,eAAiB,KACtB,KAAK,YAAc,KAGnB,KAAK,iBAAmB,CAEpB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,gBAAiB,GACjB,sBAAuB,GACvB,OAAQ,GAGR,oBAAqB,GACrB,iBAAkB,GAClB,oBAAqB,GACrB,sBAAuB,GACvB,eAAgB,GAChB,iBAAkB,GAClB,mBAAoB,EACpB,EACA,KAAK,WAAW,OAAQ,oEAA6D,EAGrF,KAAK,WAAW,OAAQ,6DAAuD,CAC3E,YAAa,KAAK,QAAQ,YAAY,QACtC,cAAe,KAAK,QAAQ,cAAc,QAC1C,cAAe,KAAK,QAAQ,cAAc,QAC1C,mBAAoB,KAAK,QAAQ,mBAAmB,OACxD,CAAC,EASD,KAAK,YAAc,UAGnB,KAAK,2BAA2B,EAGhC,KAAK,4BAA4B,EAEjC,KAAK,gCAAgC,EAEjC,CAAC,KAAK,+BAA+B,EACrC,WAAK,WAAW,QAAS,gFAAyE,EAC5F,IAAI,MAAM,0EAA0E,EAO1F,KAAK,oBAAsB,KAK3B,KAAK,cAAgB,CACjB,QAAS,KAAK,QAAQ,cAAc,QACpC,WAAY,KAAK,QAAQ,cAAc,WACvC,WAAY,KAAK,QAAQ,cAAc,WACvC,iBAAkB,KAAK,QAAQ,cAAc,iBAC7C,oBAAqB,KAAK,QAAQ,cAAc,mBACpD,EAGA,KAAK,kBAAoB,CACrB,QAAS,KAAK,QAAQ,aAAa,SAAW,GAC9C,YAAa,KAAK,QAAQ,aAAa,aAAe,KACtD,YAAa,KAAK,QAAQ,aAAa,aAAe,IACtD,QAAS,KAAK,QAAQ,aAAa,SAAW,GAC9C,QAAS,KAAK,QAAQ,aAAa,SAAW,KAC9C,SAAU,KAAK,QAAQ,aAAa,UAAY,CAAC,YAAa,SAAU,MAAM,EAC9E,qBAAsB,KAAK,QAAQ,aAAa,sBAAwB,EAC5E,EACA,KAAK,iBAAmB,KACxB,KAAK,gBAAkB,EAGvB,KAAK,eAAiB,CAClB,QAAS,GACT,aAAcA,EAA4B,MAAM,eAChD,SAAUA,EAA4B,MAAM,gBAC5C,SAAUA,EAA4B,MAAM,gBAC5C,gBAAiB,GACjB,gBAAiB,EACrB,EACA,KAAK,WAAa,CAAC,EACnB,KAAK,mBAAqB,GAG1B,KAAK,cAAgB,IAAI,IACzB,KAAK,mBAAqB,CACtB,QAAS,KAAK,QAAQ,cAAc,QACpC,iBAAkB,KAAK,QAAQ,cAAc,iBAC7C,kBAAmB,KAAK,QAAQ,cAAc,kBAC9C,cAAe,KAAK,QAAQ,cAAc,cAC1C,qBAAsB,KAAK,QAAQ,cAAc,oBACrD,EACA,KAAK,YAAc,IAAI,IAGvB,KAAK,iBAAmB,CACpB,QAAS,GACT,cAAeA,EAA4B,OAAO,yBAClD,eAAgBA,EAA4B,SAAS,gBACrD,mBAAoB,GACpB,cAAe,EACnB,EACA,KAAK,aAAe,IAAI,IACxB,KAAK,sBAAwB,GAG7B,KAAK,yBAA2B,CAC5B,QAAS,KAAK,QAAQ,mBAAmB,QACzC,gBAAiB,KAAK,QAAQ,mBAAmB,gBACjD,eAAgB,KAAK,QAAQ,mBAAmB,eAChD,SAAU,KAAK,QAAQ,mBAAmB,SAC1C,aAAc,KAAK,QAAQ,mBAAmB,aAC9C,iBAAkB,KAAK,QAAQ,mBAAmB,gBACtD,EACA,KAAK,gBAAkB,KAAK,wBAAwB,EAGpD,KAAK,cAAgB,UAAU,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAG,CAAC,CAAC,GAGpF,KAAK,qBAAqB,EAE1B,KAAK,2BAA2B,EAOhC,KAAK,mBAAqB,CACtB,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,IACjB,EAGA,KAAK,sBAAwB,CACzB,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,IACjB,EAGA,KAAK,0BAA4B,CAC7B,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,IACjB,EAGA,KAAK,gBAAkB,CACnB,eAAgB,GAChB,WAAY,GACZ,aAAc,GACd,cAAe,KACf,kBAAmB,KAAK,IAAI,CAChC,EAGA,KAAK,mBAAqB,CACtB,cAAe,EACf,iBAAkB,EAClB,qBAAsB,CAC1B,CAEJ,CAMA,kBAAkBW,EAAaC,EAAc,KAAMC,EAAgB,GAAO,CACtE,GAAI,CACA,IAAMC,EAAM,CACR,UAAW,KAAK,gBAAgB,WAAa,KAAK,WAAa,UAC/D,eAAgB,KAAK,gBAAkB,UACvC,eAAgB,KAAK,4BAA4B,EACjD,YAAaH,EACb,UAAW,KAAK,IAAI,EACpB,aAAc,KAAK,cAAgB,UACnC,cAAeE,CACnB,EAGA,OAAID,GAAe,OAAOA,GAAgB,WAClCA,EAAY,SAAQE,EAAI,OAASF,EAAY,QAC7CA,EAAY,aAAe,SAAWE,EAAI,WAAaF,EAAY,YACnEA,EAAY,cAAgB,SAAWE,EAAI,YAAcF,EAAY,cAGtE,KAAK,UAAUE,CAAG,CAC7B,OAASL,EAAO,CACZ,YAAK,WAAW,QAAS,sCAAkC,CACvD,UAAWA,EAAM,YAAY,KAC7B,QAASA,EAAM,QACf,YAAaE,CACjB,CAAC,EAEM,KAAK,UAAU,CAClB,UAAW,UACX,eAAgB,UAChB,eAAgB,KAAK,IAAI,EACzB,YAAaA,EACb,UAAW,KAAK,IAAI,EACpB,aAAc,UACd,cAAeE,CACnB,CAAC,CACL,CACJ,CAMA,6BAA8B,CAC1B,IAAME,EAAU,KAAK,iBAGrB,OAAI,KAAK,eAAiB,OAAO,iBAAmB,MAChD,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,aAAa,MAAM,EACxB,KAAK,WAAW,OAAQ,qDAA4C,CAChE,UAAW,KAAK,IAAI,CACxB,CAAC,GAGEA,CACX,CASA,MAAM,mBAAmBC,EAAeC,EAAU,UAAW,CACzD,GAAI,CACA,IAAIC,EAGJ,GAAIF,aAAyB,YACzBE,EAAa,IAAI,WAAWF,CAAa,UAClCA,aAAyB,WAChCE,EAAaF,UACNA,aAAyB,UAAW,CAE3C,IAAMG,EAAU,GAAGH,EAAc,IAAI,IAAIA,EAAc,WAAW,MAAQ,SAAS,IAAIA,EAAc,WAAW,GAChHE,EAAa,IAAI,YAAY,EAAE,OAAOC,CAAO,CACjD,SAAW,OAAOH,GAAkB,SAChCE,EAAa,IAAI,YAAY,EAAE,OAAOF,CAAa,UAC5C,OAAOA,GAAkB,UAAYA,IAAkB,KAAM,CAEpE,IAAMI,EAAU,CAAE,KAAMJ,EAAc,KAAO,UAAW,IAAKA,EAAc,KAAO,SAAU,EAC5FE,EAAa,IAAI,YAAY,EAAE,OAAO,KAAK,UAAUE,CAAO,CAAC,CACjE,MAEIF,EAAa,IAAI,YAAY,EAAE,OAAO,OAAOF,CAAa,CAAC,EAI/D,IAAMK,EAAa,MAAM,OAAO,OAAO,OAAO,UAAWH,CAAU,EAC7DI,EAAY,IAAI,WAAWD,CAAU,EAG3C,OAAO,MAAM,KAAKC,EAAU,MAAM,EAAG,CAAC,CAAC,EAClC,IAAIZ,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EACxC,KAAK,EAAE,CAEhB,MAAgB,CAEZ,MAAO,YACX,CACJ,CAKA,MAAM,YAAYa,EAAI,CAClB,OAAO,IAAI,QAAQC,GAAW,WAAWA,EAASD,CAAE,CAAC,CACzD,CAKA,MAAM,sBAAsBE,EAAWC,EAAQ,EAAG,CAC9C,OAAO,IAAI,QAASF,GAAY,CAC5B,WAAW,SAAY,CACnB,GAAI,CACA,MAAMC,EAAU,EAChBD,EAAQ,EAAI,CAChB,OAASf,EAAO,CACZ,KAAK,WAAW,QAAS,uBAAwB,CAC7C,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACDe,EAAQ,EAAK,CACjB,CACJ,EAAGE,CAAK,CACZ,CAAC,CACL,CAKA,MAAM,qBAAqBC,EAAOC,EAAY,GAAIC,EAAsB,EAAG,CACvE,IAAMC,EAAU,CAAC,EAEjB,QAASC,EAAI,EAAGA,EAAIJ,EAAM,OAAQI,GAAKH,EAAW,CAC9C,IAAMI,EAAQL,EAAM,MAAMI,EAAGA,EAAIH,CAAS,EACpCK,EAAe,MAAM,QAAQ,IAAID,CAAK,EAC5CF,EAAQ,KAAK,GAAGG,CAAY,EAGxBF,EAAIH,EAAYD,EAAM,QACtB,MAAM,KAAK,YAAYE,CAAmB,CAElD,CAEA,OAAOC,CACX,CAKA,MAAM,wBAAyB,CAK3B,MAAM,KAAK,YAAY,CAAC,EAGxB,QAASC,EAAI,EAAGA,EAAI,EAAGA,IACnB,MAAM,KAAK,YAAY,EAAE,CAEjC,CAKA,MAAM,qBAAqBG,EAAa,CAEpC,GAAI,OAAO,OAAW,IAClB,GAAI,CACA,OAAO,MAAM,KAAK,mBAAmBA,CAAW,CACpD,OAASzB,EAAO,CACZ,KAAK,WAAW,OAAQ,wDAAyD,CAC7E,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAIJ,OAAO,MAAM,KAAK,qBAAqByB,CAAW,CACtD,CAKA,MAAM,mBAAmBA,EAAa,CAClC,OAAO,IAAI,QAAQ,CAACV,EAASW,IAAW,CAEpC,IAAMC,EAAa;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,kBAmCbC,EAAO,IAAI,KAAK,CAACD,CAAU,EAAG,CAAE,KAAM,wBAAyB,CAAC,EAChEE,EAAS,IAAI,OAAO,IAAI,gBAAgBD,CAAI,CAAC,EAE7CE,EAAU,WAAW,IAAM,CAC7BD,EAAO,UAAU,EACjBH,EAAO,IAAI,MAAM,wBAAwB,CAAC,CAC9C,EAAG,GAAI,EAEPG,EAAO,UAAaE,GAAM,CACtB,aAAaD,CAAO,EACpBD,EAAO,UAAU,EACjB,IAAI,gBAAgBD,CAAI,EAEpBG,EAAE,KAAK,QACPhB,EAAQgB,EAAE,IAAI,EAEdL,EAAO,IAAI,MAAMK,EAAE,KAAK,KAAK,CAAC,CAEtC,EAEAF,EAAO,QAAW7B,GAAU,CACxB,aAAa8B,CAAO,EACpBD,EAAO,UAAU,EACjB,IAAI,gBAAgBD,CAAI,EACxBF,EAAO1B,CAAK,CAChB,EAEA6B,EAAO,YAAYJ,CAAW,CAClC,CAAC,CACL,CAKA,MAAM,qBAAqBA,EAAa,CACpC,GAAM,CAAE,KAAAO,EAAM,KAAAC,CAAK,EAAIR,EAEvB,OAAQO,EAAM,CACV,IAAK,iBAED,IAAIE,EAAY,EACVf,EAAY,IAElB,KAAOe,EAAYD,EAAK,OAAO,CAC3B,IAAME,EAAW,KAAK,IAAID,EAAYf,EAAWc,EAAK,KAAK,EAG3D,QAASX,EAAIY,EAAWZ,EAAIa,EAAUb,IAAK,CAI3CY,EAAYC,EAGZ,MAAM,KAAK,YAAY,CAAC,CAC5B,CAEA,MAAO,CAAE,QAAS,GAAM,UAAAD,CAAU,EAEtC,IAAK,kBAED,IAAME,EAAUH,EAAK,SAAW,CAAC,EAC3BI,EAAU,CAAC,EAEjB,QAASf,EAAI,EAAGA,EAAIc,EAAQ,OAAQd,GAAK,GACrCe,EAAQ,KAAKD,EAAQ,MAAMd,EAAGA,EAAI,EAAE,CAAC,EAGzC,IAAIgB,EAAU,EACd,QAAWf,KAASc,EAChBd,EAAM,QAAQ,IAAMe,GAAS,EAC7B,MAAM,KAAK,YAAY,CAAC,EAG5B,MAAO,CAAE,QAAS,GAAM,QAAAA,CAAQ,EAEpC,QACI,MAAO,CAAE,QAAS,GAAM,QAAS,sBAAuB,CAChE,CACJ,CAKJ,wBAAyB,CAErB,KAAK,mBAAqB,CACtB,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,KACb,SAAU,KACV,eAAgB,CACpB,EAEA,KAAK,sBAAwB,CACzB,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,KACb,SAAU,KACV,eAAgB,CACpB,EAEA,KAAK,0BAA4B,CAC7B,OAAQ,GACR,MAAO,CAAC,EACR,OAAQ,KACR,YAAa,KACb,SAAU,KACV,eAAgB,CACpB,EAGA,KAAK,gBAAkB,CACnB,eAAgB,GAChB,WAAY,GACZ,aAAc,GACd,cAAe,KACf,kBAAmB,KAAK,IAAI,EAC5B,YAAa,KACb,qBAAsB,EACtB,wBAAyB,CAC7B,EAGA,KAAK,mBAAqB,CACtB,cAAe,EACf,iBAAkB,EAClB,qBAAsB,EACtB,gBAAiB,EACjB,iBAAkB,CACtB,EAEA,KAAK,WAAW,OAAQ,qEAA+D,CACnF,QAAS,CAAC,eAAgB,kBAAmB,qBAAqB,EAClE,UAAW,KAAK,IAAI,EACpB,SAAU,CAAC,oBAAqB,4BAA6B,yBAAyB,CAC1F,CAAC,CACL,CAMA,4BAA6B,CAEzB,KAAK,WAAW,OAAQ,iEAA0D,CACtF,CAMA,6BAA8B,CAE1B,KAAK,sBAAwB,YAAY,IAAM,CAC3C,KAAK,yBAAyB,CAClC,EAAG,GAAM,EAGT,KAAK,WAAW,OAAQ,sEAA+D,EAGvF,KAAK,cAAgB,IAAI,IAAI,CAAC,KAAK,qBAAqB,CAAC,CAC7D,CAEA,kBAAkBC,EAAO,CACrB,OAAKA,IACA,KAAK,gBAAe,KAAK,cAAgB,IAAI,KAClD,KAAK,cAAc,IAAIA,CAAK,EACrBA,EACX,CAEA,oBAAoBA,EAAO,CACnBA,GAAS,KAAK,eAAe,KAAK,cAAc,OAAOA,CAAK,CACpE,CAEA,qBAAqBC,EAAkBC,EAAmB,CACtD,KAAK,qBAAuBD,EAC5B,KAAK,sBAAwBC,CACjC,CAEA,sBAAuB,CACnB,IAAMC,EAAkB,CAAC,EACrB,KAAK,gBAAgB,kBACrB,KAAK,gBAAgB,mBAEnBC,EAAqB,KAAK,aAAa,aAAe,OACtDC,EAAsB,OAAO,KAAK,kBAAqB,UACzD,KAAK,iBAAiB,KAAK,EAAE,OAAS,EACpCC,EAAyB,OAAO,KAAK,sBAAyB,UAChE,KAAK,qBAAqB,KAAK,EAAE,OAAS,GAC1C,OAAO,KAAK,uBAA0B,UACtC,KAAK,sBAAsB,KAAK,EAAE,OAAS,EAE/C,OAAOH,GAAmBC,GAAsBC,GAAuBC,CAC3E,CAEA,oCAAqC,CACjC,OAAK,KAAK,qBAAqB,GAI1B,KAAK,wBACN,KAAK,sBAAwB,GAC7B,KAAK,iBAAiB,WAAW,EACjC,KAAK,yBAAyB,KAAK,gBAAgB,GAGhD,IATI,EAUf,CAEA,yBAAyBC,EAAK,CAC1B,OAAI,OAAOA,GAAQ,SAAiB,GAC5BA,EAAI,MAAM,iBAAiB,GAAK,CAAC,GAAG,MAChD,CAEA,6BAA6BA,EAAK,CAC9B,IAAMC,EAAU,CACZ,MAAO,EACP,KAAM,EACN,MAAO,EACP,MAAO,EACP,MAAO,EACP,QAAS,CACb,EAEA,GAAI,OAAOD,GAAQ,SAAU,OAAOC,EAEpC,QAAWC,KAAQF,EAAI,MAAM,oBAAoB,GAAK,CAAC,EAAG,CACtDC,EAAQ,OAAS,EAEjB,IAAMf,EADQgB,EAAK,MAAM,qCAAqC,IACzC,CAAC,GAAG,YAAY,EAEjChB,GAAQ,OAAO,UAAU,eAAe,KAAKe,EAASf,CAAI,EAC1De,EAAQf,CAAI,GAAK,EAEjBe,EAAQ,SAAW,CAE3B,CAEA,OAAOA,CACX,CAEA,4BAA4BD,EAAK,CAC7B,OAAI,OAAOA,GAAQ,SAAiB,CAAC,GAE7BA,EAAI,MAAM,oBAAoB,GAAK,CAAC,GAAG,IAAKE,GAAS,CACzD,IAAMC,EAAQD,EAAK,MAAM,EAAqB,EAAE,KAAK,EAAE,MAAM,KAAK,EAC5DE,EAAWD,EAAM,UAAUE,GAAQA,EAAK,YAAY,IAAM,KAAK,EAC/DC,EAAUH,EAAM,CAAC,GAAK,GACtBI,EAAOJ,EAAM,CAAC,GAAK,GACnBK,EAAgBJ,GAAY,GAAID,EAAMC,EAAW,CAAC,GAAK,UACvDK,GAAYN,EAAM,CAAC,GAAK,WAAW,YAAY,EAEjDO,EAAc,UAClB,MAAI,YAAY,KAAKJ,CAAO,EACxBI,EAAc,OACP,gDAAgD,KAAKJ,CAAO,EACnEI,EAAc,eACP,0BAA0B,KAAKJ,CAAO,EAC7CI,EAAc,cACPJ,EAAQ,SAAS,GAAG,IAC3BI,EAAc,QAGX,CACH,cAAAF,EACA,SAAAC,EACA,YAAAC,EACA,YAAa,CAAC,CAACH,EACf,SAAU,IAAM,CACZ,IAAMI,EAAWR,EAAM,UAAUE,GAAQA,EAAK,YAAY,IAAM,SAAS,EACzE,OAAOM,GAAY,GAAIR,EAAMQ,EAAW,CAAC,GAAK,IAClD,GAAG,CACP,CACJ,CAAC,CACL,CAEA,4BAA4BC,EAAOZ,EAAKa,EAAQ,CAAC,EAAG,CAChD,IAAMC,EAAmB,KAAK,6BAA6Bd,CAAG,EACxDe,EAAmB,KAAK,4BAA4Bf,CAAG,EAC7D,eAAQ,KAAK,mBAAmBY,CAAK,GAAI,CACrC,iBAAAE,EACA,iBAAAC,EACA,qBAAsB,KAAK,UAAUA,CAAgB,EACrD,GAAGF,CACP,CAAC,EACM,CAAE,iBAAAC,EAAkB,iBAAAC,CAAiB,CAChD,CAEA,2BAA2Bf,EAAK,CAC5B,IAAMC,EAAU,KAAK,6BAA6BD,CAAG,EAC/CgB,EAAU,KAAK,4BAA4BhB,CAAG,EAEpD,OAAOC,EAAQ,MAAQ,GACnBA,EAAQ,QAAU,GAClBA,EAAQ,QAAU,GAClBA,EAAQ,QAAU,GAClBe,EAAQ,MAAMC,GACVA,EAAU,gBAAkB,QAC5BA,EAAU,cAAgB,MAC9B,CACR,CAEA,iCAAiCvD,EAASsC,EAAK,CAC3C,GAAI,CAAC,KAAK,2BAA2BA,CAAG,EAAG,MAAO,GAElD,IAAMkB,EAAUxD,IAAY,SACtB,kNACA,oNAEN,YAAK,WAAW,OAAQ,mEAAoE,CACxF,QAAAA,EACA,iBAAkB,KAAK,6BAA6BsC,CAAG,EACvD,iBAAkB,KAAK,4BAA4BA,CAAG,CAC1D,CAAC,EACD,KAAK,mBAAmBkB,EAAS,QAAQ,EAClC,EACX,CAEA,MAAM,+BAAgC,CAClC,GAAI,CAAC,KAAK,gBAAgB,SAAU,OAAO,KAE3C,GAAI,CACA,IAAMC,EAAQ,MAAM,KAAK,eAAe,SAAS,EAC3CC,EAAa,IAAI,IACjBC,EAAiB,CAAC,EAExB,OAAAF,EAAM,QAASG,GAAW,EAClBA,EAAO,OAAS,mBAAqBA,EAAO,OAAS,qBACrDF,EAAW,IAAIE,EAAO,GAAI,CACtB,KAAMA,EAAO,KACb,cAAeA,EAAO,cACtB,SAAUA,EAAO,SACjB,QAASA,EAAO,SAAWA,EAAO,IAAM,KACxC,KAAMA,EAAO,MAAQ,KACrB,YAAaA,EAAO,aAAe,IACvC,CAAC,CAET,CAAC,EAEDH,EAAM,QAASG,GAAW,CAClBA,EAAO,OAAS,kBACpBD,EAAe,KAAK,CAChB,MAAOC,EAAO,MACd,UAAW,CAAC,CAACA,EAAO,UACpB,SAAU,CAAC,CAACA,EAAO,SACnB,UAAWA,EAAO,WAAa,EAC/B,cAAeA,EAAO,eAAiB,EACvC,qBAAsBA,EAAO,sBAAwB,KACrD,MAAOF,EAAW,IAAIE,EAAO,gBAAgB,GAAK,KAClD,OAAQF,EAAW,IAAIE,EAAO,iBAAiB,GAAK,IACxD,CAAC,CACL,CAAC,EAEM,CACH,UAAWD,EAAe,OAC1B,OAAQA,EAAe,OAAO,CAACE,EAAKC,KAChCD,EAAIC,EAAK,OAAS,SAAS,GAAKD,EAAIC,EAAK,OAAS,SAAS,GAAK,GAAK,EAC9DD,GACR,CAAC,CAAC,EACL,MAAOF,CACX,CACJ,OAASnE,EAAO,CACZ,MAAO,CACH,MAAOA,GAAO,SAAW,mCAC7B,CACJ,CACJ,CAEA,2BAA4B,CACxB,KAAK,qBAAuB,CACxB,YAAa,MAAM,QAAQ,KAAK,WAAW,EAAI,CAAC,GAAG,KAAK,WAAW,EAAI,KACvE,UAAW,KAAK,WAAa,KAC7B,aAAc,KAAK,cAAgB,KACnC,eAAgB,KAAK,gBAAkB,KACvC,UAAW,KAAK,IAAI,CACxB,CACJ,CAEA,qCAAsC,CAElC,GADoB,MAAM,QAAQ,KAAK,WAAW,GAAK,KAAK,YAAY,SAAW,GAClE,MAAO,GAExB,IAAMuE,EAAc,KAAK,sBAAsB,YAC/C,MAAI,CAAC,MAAM,QAAQA,CAAW,GAAKA,EAAY,SAAW,GAC/C,IAGX,KAAK,YAAc,CAAC,GAAGA,CAAW,EAC9B,CAAC,KAAK,WAAa,KAAK,qBAAqB,YAC7C,KAAK,UAAY,KAAK,qBAAqB,WAE3C,CAAC,KAAK,cAAgB,KAAK,qBAAqB,eAChD,KAAK,aAAe,KAAK,qBAAqB,cAE9C,CAAC,KAAK,gBAAkB,KAAK,qBAAqB,iBAClD,KAAK,eAAiB,KAAK,qBAAqB,gBAGpD,KAAK,WAAW,OAAQ,wDAAyD,CAC7E,oBAAqB,KAAK,IAAI,GAAK,KAAK,qBAAqB,WAAa,KAAK,IAAI,EACvF,CAAC,EAEM,GACX,CAEA,2BAA4B,CACpB,KAAK,sBAAsB,aAC3B,KAAK,kBAAkB,KAAK,qBAAqB,YAAa,iCAAiC,EAEnG,KAAK,qBAAuB,IAChC,CAKA,0BAA2B,CACvB,GAAI,CACA,KAAK,WAAW,OAAQ,sCAA+B,EAGvD,KAAK,aAAa,EAClB,KAAK,4BAA4B,EAGjC,KAAK,oBAAoB,EACzB,KAAK,+BAA+B,EACpC,KAAK,gCAAgC,EAGrC,KAAK,kBAAkB,EACvB,KAAK,uBAAuB,EAGxB,KAAK,aAAe,KAAK,YACzB,KAAK,oBAAoB,EAIzB,KAAK,YACL,KAAK,uBAAuB,EAOhC,KAAK,WAAW,OAAQ,oDAA6C,CAEzE,OAASvE,EAAO,CACZ,KAAK,WAAW,QAAS,kCAA8B,CACnD,UAAWA,GAAO,aAAa,MAAQ,UACvC,QAASA,GAAO,SAAW,eAC/B,CAAC,EAGD,KAAK,kBAAkB,EAAE,MAAMA,GAAS,CACpC,KAAK,WAAW,QAAS,2BAA4B,CACjD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,CACL,CACJ,CAKA,wBAAyB,CACrB,IAAMwE,EAAa,CAAC,EAGhB,KAAK,WAAW,KAAO,KAAK,gBAAgB,eAC5CA,EAAW,KAAK,aAAa,EAI7B,KAAK,aAAa,OAAS,KAAK,gBAAgB,iBAChDA,EAAW,KAAK,eAAe,EAI/B,KAAK,mBAAqB,KAAK,kBAAkB,UAAU,KAAO,KAAK,gBAAgB,cACvFA,EAAW,KAAK,YAAY,EAI5B,KAAK,oBAAoB,KAAO,KAAK,gBAAgB,wBACrDA,EAAW,KAAK,uBAAuB,EAIvC,KAAK,cAAc,KAAO,KAAK,gBAAgB,kBAC/CA,EAAW,KAAK,gBAAgB,EAIhC,KAAK,sBAAwB,KAAK,qBAAqB,OAAS,KAAK,gBAAgB,wBACrFA,EAAW,KAAK,uBAAuB,EAIvC,KAAK,WAAW,OAAS,KAAK,gBAAgB,eAC9CA,EAAW,KAAK,aAAa,EAI7B,KAAK,cAAgB,KAAK,aAAa,KAAO,KAAK,gBAAgB,iBACnEA,EAAW,KAAK,eAAe,EAI/BA,EAAW,OAAS,IACpB,KAAK,WAAW,OAAQ,kDAAyC,CAAE,WAAAA,CAAW,CAAC,EAC/E,KAAK,kBAAkB,EAAE,MAAMxE,GAAS,CACpC,KAAK,WAAW,QAAS,2BAA4B,CACjD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAET,CAKA,MAAM,mBAAoB,CACtB,KAAK,WAAW,OAAQ,6EAAsE,EAE9F,GAAI,CAwBA,GAtBA,KAAK,WAAW,MAAM,EACtB,KAAK,WAAW,OAAQ,uCAAgC,EAGxD,KAAK,aAAa,OAAS,EAC3B,KAAK,WAAW,OAAQ,4CAAqC,EAGzD,KAAK,oBACL,KAAK,kBAAkB,QAAQ,MAAM,EACrC,KAAK,kBAAkB,UAAU,MAAM,EACvC,KAAK,kBAAkB,WAAW,MAAM,EACxC,KAAK,kBAAkB,eAAiB,EACxC,KAAK,kBAAkB,cAAgB,GACvC,KAAK,WAAW,OAAQ,0DAAmD,GAI/E,KAAK,oBAAoB,MAAM,EAC/B,KAAK,WAAW,OAAQ,oDAA6C,EAGjE,KAAK,cAAe,CACpB,OAAW,CAACyE,EAAalC,CAAK,IAAK,KAAK,YAChCA,GAAO,aAAaA,CAAK,EAEjC,KAAK,cAAc,MAAM,EACzB,KAAK,YAAY,MAAM,EACvB,KAAK,WAAW,OAAQ,sDAA+C,CAC3E,CAGI,KAAK,mBACL,aAAa,KAAK,gBAAgB,EAClC,KAAK,iBAAmB,MAExB,KAAK,uBACL,KAAK,qBAAqB,OAAS,EACnC,KAAK,WAAW,OAAQ,6DAAsD,GAIlF,KAAK,WAAW,OAAS,EACzB,KAAK,WAAW,OAAQ,0CAAmC,EAGvD,KAAK,eACL,KAAK,aAAa,MAAM,EACxB,KAAK,WAAW,OAAQ,4CAAqC,GAIjE,KAAK,qBAAqB,WAAa,GACvC,KAAK,qBAAqB,aAAa,OAAS,EAChD,KAAK,qBAAqB,YAAY,YAAc,KAAK,IAAI,EAG7D,MAAM,KAAK,sBAAsB,SAAY,CACzC,KAAK,WAAW,OAAQ,+DAAwD,EAGhF,QAASjB,EAAI,EAAGA,EAAI,EAAGA,IACnB,KAAK,WAAW,OAAQ,+CAAwCA,EAAI,CAAC,IAAI,EAGzE,MAAM,KAAK,uBAAuB,EAGtC,KAAK,WAAW,OAAQ,yDAAkD,CAC9E,EAAG,CAAC,EAEJ,KAAK,qBAAqB,WAAa,GAEvC,KAAK,WAAW,OAAQ,0DAAqD,CAEjF,OAAStB,EAAO,CACZ,KAAK,WAAW,QAAS,2CAAuC,CAC5D,UAAWA,GAAO,aAAa,MAAQ,UACvC,QAASA,GAAO,SAAW,eAC/B,CAAC,EAGD,KAAK,qBAAqB,WAAa,EAC3C,CACJ,CAOA,0BAA0B0E,EAAe,CACrC,IAAMC,EAAe,CACjB,iBAAkB,KAAK,aAAa,OACpC,iBAAkB,KAAK,oBAAoB,KAC3C,iBAAkB,KAAK,aAAe,KAAK,aAAa,KAAO,EAC/D,eAAgB,KAAK,kBAAoB,KAAK,kBAAkB,QAAQ,KAAO,EAC/E,kBAAmB,KAAK,cAAgB,KAAK,cAAc,KAAO,CACtE,EAiBA,MAfmB,CACf,oBAAqBA,EAAa,mBAAqB,EACvD,oBAAqBA,EAAa,mBAAqB,EACvD,oBAAqBA,EAAa,mBAAqB,EACvD,kBAAmBA,EAAa,iBAAmB,EACnD,qBAAsBA,EAAa,oBAAsB,EACzD,WACIA,EAAa,mBAAqB,GAClCA,EAAa,mBAAqB,GAClCA,EAAa,mBAAqB,GAClCA,EAAa,iBAAmB,GAChCA,EAAa,oBAAsB,CAE3C,CAGJ,CAKA,mBAAoB,CAChB,IAAMC,EAAM,KAAK,IAAI,EAGjB,KAAK,oBAAoB,KAAO,KAAK,qBAAqB,sBAC1D,KAAK,oBAAoB,MAAM,EAC/B,KAAK,WAAW,OAAQ,6CAAsC,GAI9D,KAAK,mBACL,KAAK,eAAe,EAIxB,KAAK,eAAe,EAGhB,OAAO,2BAA6B,OAAO,0BAA0B,aACrE,OAAO,0BAA0B,YAAY,QAAQ,EAGzD,KAAK,WAAW,OAAQ,sCAA+B,CAC3D,CAKA,qBAAsB,CACd,KAAK,iBAAiB,WAAa,IACnC,KAAK,WAAW,OAAQ,sEAA4D,CAG5F,CASA,eAAeC,EAAM,GAAO,CACxB,GAAI,CAWA,OAAI,KAAK,aAAe,KAAK,YAAY,aAAe,QACpD,KAAK,YAAY,KAAK,KAAK,UAAU,CACjC,KAAMtF,EAA4B,cAAc,UAChD,IAAAsF,EACA,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF,KAAK,iBAAiB,cAAgB,KAAK,IAAI,EAC/C,KAAK,WAAW,QAASA,EAAM,+BAA0B,0BAAmB,EACrE,IAEJ,EACX,OAAS7E,EAAO,CACZ,YAAK,WAAW,QAAS,2BAAuB,CAC5C,UAAWA,GAAO,aAAa,MAAQ,UACvC,QAASA,GAAO,SAAW,eAC/B,CAAC,EACM,EACX,CACJ,CAQA,mBAAmBiC,EAAMzB,EAAU,UAAW,CAC1C,IAAMsE,EAAmB,CACrB,QAAS,GACT,cAAe,KACf,OAAQ,CAAC,EACT,SAAU,CAAC,CACf,EAEA,GAAI,CAEA,GAAI7C,GAAS,KACT,OAAA6C,EAAiB,OAAO,KAAK,kCAAkC,EACxDA,EAIX,GAAI,OAAO7C,GAAS,SAChB,OAAIA,EAAK,OAAS,KAAK,uBAAuB,iBAC1C6C,EAAiB,OAAO,KAAK,oBAAoB7C,EAAK,MAAM,MAAM,KAAK,uBAAuB,eAAe,EAAE,EACxG6C,IAcXA,EAAiB,cAAgB,KAAK,qBAAqB7C,CAAI,EAC/D6C,EAAiB,QAAU,GACpBA,GAIX,GAAI,OAAO7C,GAAS,SAAU,CAE1B,IAAM8C,EAAO,IAAI,QACXC,EAAgB,CAACC,EAAKC,EAAO,KAAO,CACtC,GAAI,EAAAD,IAAQ,MAAQ,OAAOA,GAAQ,UAEnC,IAAIF,EAAK,IAAIE,CAAG,EAAG,CACfH,EAAiB,OAAO,KAAK,wCAAwCI,CAAI,EAAE,EAC3E,MACJ,CAKA,GAHAH,EAAK,IAAIE,CAAG,EAGRC,EAAK,MAAM,GAAG,EAAE,OAAS,KAAK,uBAAuB,eAAgB,CACrEJ,EAAiB,OAAO,KAAK,oBAAoBI,EAAK,MAAM,GAAG,EAAE,MAAM,MAAM,KAAK,uBAAuB,cAAc,EAAE,EACzH,MACJ,CAGA,GAAI,MAAM,QAAQD,CAAG,GAAKA,EAAI,OAAS,KAAK,uBAAuB,eAAgB,CAC/EH,EAAiB,OAAO,KAAK,mBAAmBG,EAAI,MAAM,MAAM,KAAK,uBAAuB,cAAc,EAAE,EAC5G,MACJ,CAGA,QAAWE,KAAOF,EACVA,EAAI,eAAeE,CAAG,GACtBH,EAAcC,EAAIE,CAAG,EAAGD,EAAO,GAAGA,CAAI,IAAIC,CAAG,GAAKA,CAAG,EAGjE,EAIA,GAFAH,EAAc/C,CAAI,EAEd6C,EAAiB,OAAO,OAAS,EACjC,OAAOA,EAIX,IAAMM,EAAa,KAAK,qBAAqBnD,CAAI,EACjD,OAAImD,EAAa,KAAK,uBAAuB,gBACzCN,EAAiB,OAAO,KAAK,qBAAqBM,CAAU,YAAY,KAAK,uBAAuB,cAAc,QAAQ,EACnHN,IAIXA,EAAiB,cAAgB,KAAK,qBAAqB7C,CAAI,EAC/D6C,EAAiB,QAAU,GACpBA,EACX,CAGA,OAAI7C,aAAgB,YACZA,EAAK,WAAa,KAAK,uBAAuB,gBAC9C6C,EAAiB,OAAO,KAAK,0BAA0B7C,EAAK,UAAU,YAAY,KAAK,uBAAuB,cAAc,QAAQ,EAC7H6C,IAGXA,EAAiB,cAAgB7C,EACjC6C,EAAiB,QAAU,GACpBA,IAIXA,EAAiB,OAAO,KAAK,0BAA0B,OAAO7C,CAAI,EAAE,EAC7D6C,EAEX,OAAS9E,EAAO,CACZ,OAAA8E,EAAiB,OAAO,KAAK,qBAAqB9E,EAAM,OAAO,EAAE,EACjE,KAAK,WAAW,QAAS,iCAA6B,CAClD,QAASQ,EACT,UAAWR,GAAO,aAAa,MAAQ,UACvC,QAASA,GAAO,SAAW,eAC/B,CAAC,EACM8E,CACX,CACJ,CAOA,qBAAqBG,EAAK,CACtB,GAAI,CACA,IAAMI,EAAa,KAAK,UAAUJ,CAAG,EACrC,OAAO,IAAI,YAAY,EAAE,OAAOI,CAAU,EAAE,MAChD,MAAgB,CAEZ,MAAO,MAAO,IAClB,CACJ,CAOA,qBAAqBC,EAAK,CACtB,OAAI,OAAOA,GAAQ,WAMnBA,EAAMA,EAAI,QAAQ,yDAA0D,EAAE,EAK9EA,EAAMA,EAAI,QAAQ,SAAU;AAAA,CAAI,EAGhCA,EAAMA,EAAI,QAAQ,UAAW;AAAA;AAAA,CAAM,EAGnCA,EAAMA,EAAI,KAAK,GAERA,CACX,CAOA,qBAAqBL,EAAK,CACtB,GAAIA,IAAQ,MAAQ,OAAOA,GAAQ,SAAU,OAAOA,EAEpD,GAAI,MAAM,QAAQA,CAAG,EACjB,OAAOA,EAAI,IAAIM,GAAQ,KAAK,qBAAqBA,CAAI,CAAC,EAG1D,IAAMC,EAAY,CAAC,EACnB,QAAWL,KAAOF,EACd,GAAIA,EAAI,eAAeE,CAAG,EAAG,CACzB,IAAMM,EAAQR,EAAIE,CAAG,EACjB,OAAOM,GAAU,SACjBD,EAAUL,CAAG,EAAI,KAAK,qBAAqBM,CAAK,EACzC,OAAOA,GAAU,SACxBD,EAAUL,CAAG,EAAI,KAAK,qBAAqBM,CAAK,EAEhDD,EAAUL,CAAG,EAAIM,CAEzB,CAGJ,OAAOD,CACX,CAOA,gBAAgBhF,EAAU,UAAW,CACjC,IAAMoE,EAAM,KAAK,IAAI,EAwBrB,OArBK,KAAK,eACN,KAAK,aAAe,CAChB,aAAc,EACd,UAAWA,EACX,WAAY,EACZ,eAAgBA,CACpB,GAIAA,EAAM,KAAK,aAAa,UAAY,MACpC,KAAK,aAAa,aAAe,EACjC,KAAK,aAAa,UAAYA,GAG9BA,EAAM,KAAK,aAAa,eAAiB,MACzC,KAAK,aAAa,WAAa,EAC/B,KAAK,aAAa,eAAiBA,GAInC,KAAK,aAAa,YAAc,KAAK,uBAAuB,oBAC5D,KAAK,WAAW,OAAQ,yCAAgC,CAAE,QAAApE,CAAQ,CAAC,EAC5D,IAIP,KAAK,aAAa,cAAgB,KAAK,uBAAuB,4BAC9D,KAAK,WAAW,OAAQ,mCAA0B,CAAE,QAAAA,CAAQ,CAAC,EACtD,KAIX,KAAK,aAAa,eAClB,KAAK,aAAa,aAEX,GACX,CAMA,uBAAuBA,EAAU,mBAAoB,CACjD,IAAMoE,EAAM,KAAK,IAAI,EAqBrB,OAnBK,KAAK,sBACN,KAAK,oBAAsB,CACvB,aAAc,EACd,UAAWA,EACX,WAAY,EACZ,eAAgBA,CACpB,GAGAA,EAAM,KAAK,oBAAoB,UAAY,MAC3C,KAAK,oBAAoB,aAAe,EACxC,KAAK,oBAAoB,UAAYA,GAGrCA,EAAM,KAAK,oBAAoB,eAAiB,MAChD,KAAK,oBAAoB,WAAa,EACtC,KAAK,oBAAoB,eAAiBA,GAG1C,KAAK,oBAAoB,YAAc,KAAK,uBAAuB,oBACnE,KAAK,WAAW,OAAQ,sEAA6D,CAAE,QAAApE,CAAQ,CAAC,EACzF,IAGP,KAAK,oBAAoB,cAAgB,KAAK,uBAAuB,4BACrE,KAAK,WAAW,OAAQ,qEAA4D,CAAE,QAAAA,CAAQ,CAAC,EACxF,KAGX,KAAK,oBAAoB,eACzB,KAAK,oBAAoB,aAClB,GACX,CASA,6BAA8B,CAE1B,KAAK,kBAAoB,IAAIkF,GAG7B,KAAK,kBAAoB,IAAIC,GAAiB,KAAK,iBAAiB,EAGpE,KAAK,iBAAmB,CACpB,UAAW,EACX,WAAY,EACZ,WAAY,KACZ,aAAc,IAClB,EAEA,KAAK,WAAW,OAAQ,mDAA4C,CACxE,CAKA,6BAA6BC,EAAU,CAC/B,KAAK,mBACL,KAAK,kBAAkB,4BAA4BA,CAAQ,CAEnE,CAKA,mCAAmCA,EAAU,CACrC,KAAK,mBACL,KAAK,kBAAkB,0BAA0BA,CAAQ,CAEjE,CAKA,eAAgB,CACR,KAAK,mBACL,KAAK,kBAAkB,KAAK,CAEpC,CAKA,qBAAsB,CAClB,OAAO,KAAK,kBAAoB,KAAK,kBAAkB,WAAW,EAAI,EAC1E,CAKA,2BAA4B,CACxB,OAAO,KAAK,kBAAoB,KAAK,kBAAkB,iBAAiB,EAAI,IAChF,CAGA,MAAM,0BAA2B,CAC7B,GAAI,CAEA,GAAI,KAAK,mBACL,MAAO,GAGX,GAAI,CAAC,KAAK,aAAe,KAAK,YAAY,aAAe,OACrD,MAAM,IAAI,MAAM,uBAAuB,EAE3C,GAAI,CAAC,KAAK,WACN,MAAM,IAAI,MAAM,yBAAyB,EAG7C,KAAK,uBAAuB,EAG5B,IAAIC,EAAW,EACTC,EAAc,GACpB,KAAO,CAAC,KAAK,oBAAsBD,EAAWC,GAC1C,MAAM,IAAI,QAAQ,GAAK,WAAW,EAAG,GAAG,CAAC,EACzCD,IAGJ,GAAI,CAAC,KAAK,mBACN,MAAM,IAAI,MAAM,6CAA6C,EAGjE,MAAO,EACX,OAAS,EAAG,CACR,YAAK,WAAW,QAAS,yCAAqC,CAC1D,UAAW,GAAG,aAAa,MAAQ,UACnC,WAAY,CAAC,CAAC,GAAG,OACrB,CAAC,EACM,EACX,CACJ,CAEA,cAAcE,EAAO,CACjB,OAAO,KAAK,kBAAkB,YAAYA,CAAK,CACnD,CAEA,MAAM,cAAcA,EAAOZ,EAAK,CAC5B,GAAI,EAAEA,aAAe,WACjB,YAAK,WAAW,QAAS,uCAAkC,EACpD,GAGX,IAAMa,EAAU,MAAM,KAAK,kBAAkB,SAASD,EAAOZ,EAAK,CAC9D,QAAS,KAAK,kBACd,KAAMA,EAAI,UAAU,IACxB,CAAC,EAED,OAAIa,GACA,KAAK,WAAW,OAAQ,iBAAUD,CAAK,kCAAkC,EAGtEC,CACX,CAOA,kBAAkBb,EAAK,CACnB,OAAOA,aAAe,WAClBA,EAAI,WACJA,EAAI,QACJA,EAAI,OAAO,OAAS,CAC5B,CAEA,iBAAkB,CACd,KAAK,kBAAkB,cAAc,EAGjC,KAAK,mBACL,KAAK,kBAAkB,KAAK,EAGhC,KAAK,WAAW,OAAQ,iEAA0D,CACtF,CAMA,qBAAsB,CAClB,OAAO,KAAK,6BAA6BQ,EAC7C,CAMA,qBAAsB,CAClB,IAAM1B,EAAQ,KAAK,kBAAkB,gBAAgB,EACrD,MAAO,CACH,eAAgBA,EAAM,UACtB,gBAAiBA,EAAM,UACvB,cAAeA,EAAM,SAAS,KAAKgC,GAAKA,EAAE,YAAY,EACtD,gBAAiB,CAAC,CAAC,KAAK,iBAAiB,aACzC,YAAa,mBACb,UAAW,KAAK,IAAI,CACxB,CACJ,CAKA,aAAc,CACV,IAAMC,EAAU,MAAM,KAAK,KAAK,kBAAkB,KAAK,CAAC,EACxD,KAAK,kBAAkB,MAAM,EAC7B,KAAK,iBAAiB,aAAe,KAAK,IAAI,EAC9C,KAAK,iBAAiB,WAAa,EACnC,KAAK,WAAW,OAAQ,qCAA8BA,EAAQ,MAAM,eAAe,CACvF,CAKA,mBAAoB,CAChB,KAAK,gBAAgB,EACrB,KAAK,WAAW,QAAS,4DAAqD,CAClF,CAMA,6BAA8B,CAE1B,KAAK,WAAW,OAAQ,8DAAuD,CACnF,CAWA,yBAAyBf,EAAK,CAE1B,IAAIgB,EAAU,EAGd,GAAI,CACA,IAAMC,EAAcjB,aAAe,UACnCgB,GAAWC,EAAc,EAAI,CACjC,MAAQ,CACJD,GAAW,CACf,CAGA,GAAI,CACA,IAAME,EAAe,CAAC,EAAElB,GAAOA,EAAI,WACnCgB,GAAWE,EAAe,EAAI,CAClC,MAAQ,CACJF,GAAW,CACf,CAGA,GAAI,CACA,IAAMG,EAAU,CAAC,EAAEnB,GAAOA,EAAI,MAC9BgB,GAAWG,EAAU,EAAI,CAC7B,MAAQ,CACJH,GAAW,CACf,CAGA,GAAI,CACA,IAAMI,EAAiBpB,GAAOA,EAAI,cAAgB,OAClDgB,GAAWI,EAAiB,EAAI,CACpC,MAAQ,CACJJ,GAAW,CACf,CAGA,OAAOA,IAAY,CACvB,CAOA,6BAA6BK,EAAS,CAClC,GAAI,CAACA,GAAW,OAAOA,GAAY,SAAU,MAAO,GAEpD,IAAMC,EAAkB,KAAK,yBAAyBD,EAAQ,UAAU,EAClEE,EAAiB,KAAK,yBAAyBF,EAAQ,SAAS,EAGtE,OAAOC,GAAmBC,CAC9B,CAKA,0BAA2B,CAEvB,KAAK,WAAa,CACd,MAAO,EACP,KAAM,EACN,KAAM,EACN,MAAO,EACP,MAAO,CACX,EAGA,KAAK,iBAAmB,KAAK,kBACzB,KAAK,WAAW,MAChB,KAAK,WAAW,KAGpB,KAAK,WAAa,IAAI,IACtB,KAAK,aAAe,KAAK,kBAAoB,EAAI,GAGjD,KAAK,gBAAkB,CACnB,cAAe,KAAK,kBAAoB,IAAM,IAC9C,gBAAiB,IACjB,aAAc,IACd,uBAAwB,IACxB,iBAAkB,IAClB,uBAAwB,IACxB,cAAe,IACf,gBAAiB,GACrB,EAGA,KAAK,qBAAuB,CACxB,WAAY,KAAK,gBAAgB,cAAgB,GACjD,aAAc,KAAK,gBAAgB,gBAAkB,GACrD,UAAW,KAAK,gBAAgB,aAAe,GAC/C,oBAAqB,KAAK,gBAAgB,uBAAyB,EACvE,EAGA,KAAK,uBAAyB,CAC1B,gBAAiB,IACjB,eAAgB,GAChB,eAAgB,IAChB,eAAgB,KAAO,KACvB,sBAAuB,GACvB,2BAA4B,GAC5B,mBAAoB,EACxB,EAUA,KAAK,mBAAqB,IAAI,IAAI,CAE9B,gBAAiB,SAAU,cAAe,aAAc,YACxD,cAAe,eAAgB,gBAAiB,sBAGhD,mBAAoB,cAAe,iBAAkB,YACrD,gBAAiB,YAAa,YAAa,eAG3C,WAAY,QAAS,SAAU,aAAc,YAC7C,SAAU,YAAa,YAAa,aAGpC,OAAQ,SAAU,QAAS,KAAM,SAAU,OAC3C,UAAW,SAAU,OAAQ,cAG7B,MAAO,SAAU,eAAgB,cAGjC,WAAY,gBAAiB,cAAe,UAChD,CAAC,EAGD,KAAK,qBAAuB,IAAI,IAAI,CAEhC,YAAa,OAAQ,SAAU,QAAS,QACxC,cAAe,aAAc,cAAe,UAG5C,QAAS,QAAS,SAAU,WAAY,UAAW,UAGnD,aAAc,kBAAmB,qBAGjC,sBAAuB,gBAAiB,QAGxC,YAAa,YAAa,QAAS,SACvC,CAAC,EAGD,KAAK,iCAAiC,EAEtC,KAAK,WAAW,OAAQ,8DAAuD,KAAK,iBAAiB,GAAG,CAC5G,CAKA,kCAAmC,CAE/B,KAAK,uBAAyB,EAC9B,KAAK,0BAA4B,CACrC,CAKA,6BAA8B,CAC1B,IAAIlC,EAAa,EAGjB,OAAW,CAACW,EAAKwB,CAAK,IAAK,KAAK,WAAW,QAAQ,EAC3CA,EAAQ,KAAK,aAAe,IAC5BnC,IACA,KAAK,kBAAkB,QAAQ,yDAAkDW,CAAG,EAAE,GAK9F,IAAMyB,EAAa,MAAM,KAAK,KAAK,WAAW,KAAK,CAAC,EACpD,QAAWC,KAAUD,EACb,KAAK,0BAA0BC,CAAM,IACrCrC,IACA,KAAK,kBAAkB,QAAQ,yDAAkDqC,CAAM,EAAE,GAKjG,KAAK,wBAA0BrC,EAC3B,KAAK,wBAA0B,KAAK,4BACpC,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,wEAAiE,EAExG,CAEA,kBAAkBsC,EAAM,CACpB,GAAI,CAEA,GAAI,CAAC,MAAM,QAAQA,CAAI,GAAKA,EAAK,SAAW,EACxC,OAIJ,IAAM9C,EAAU8C,EAAK,CAAC,EAChBC,EAAWD,EAAK,MAAM,CAAC,EAG7B,GAAIC,EAAS,SAAW,EAAG,CACvB,KAAK,WAAW,OAAQ,OAAO/C,GAAW,EAAE,CAAC,EAC7C,MACJ,CAEA,GAAI+C,EAAS,SAAW,EAAG,CACvB,KAAK,WAAW,OAAQ,OAAO/C,GAAW,EAAE,EAAG+C,EAAS,CAAC,CAAC,EAC1D,MACJ,CAGA,KAAK,WAAW,OAAQ,OAAO/C,GAAW,EAAE,EAAG,CAC3C,eAAgB+C,EAChB,SAAUA,EAAS,MACvB,CAAC,CACL,MAAgB,CAEZ,GAAI,CACI,KAAK,kBAAkB,KACvB,KAAK,iBAAiB,IAAI,GAAGD,CAAI,CAEzC,MAAwB,CAExB,CACJ,CACJ,CAKA,iBAAkB,CAEd,KAAK,OAAS,CACV,IAAK,CAAC9C,EAAS/B,IAAS,KAAK,WAAW,OAAQ+B,EAAS/B,CAAI,EAC7D,KAAM,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,OAAQ+B,EAAS/B,CAAI,EAC9D,KAAM,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,OAAQ+B,EAAS/B,CAAI,EAC9D,MAAO,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,QAAS+B,EAAS/B,CAAI,EAChE,MAAO,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,QAAS+B,EAAS/B,CAAI,CACpE,EAGI1C,EAA4B,WAC5B,KAAK,WAAW,OAAQ,iDAA0C,EAElE,KAAK,WAAW,OAAQ,gDAAyC,CAEzE,CAIA,yBAA0B,CAElB,KAAK,oBACL,KAAK,OAAS,CACV,IAAK,IAAM,CAAC,EACZ,KAAM,IAAM,CAAC,EACb,KAAM,CAACyE,EAAS/B,IAAS,KAAK,WAAW,OAAQ+B,EAAS/B,CAAI,EAC9D,MAAO,CAAC+B,EAAS/B,IAAS,KAAK,WAAW,QAAS+B,EAAS/B,CAAI,EAChE,MAAO,IAAM,CAAC,CAClB,EAEA,KAAK,WAAW,OAAQ,mCAAmC,EAEnE,CAOA,WAAW+E,EAAOhD,EAAS/B,EAAO,KAAM,CAEpC,GAAIA,GAAQ,CAAC,KAAK,iBAAiB+B,EAAS/B,CAAI,EAAG,CAE/C,KAAK,kBAAkB,QAAQ,yDAAyD,EACxF,MACJ,CAGA,GAAI,KAAK,WAAW+E,CAAK,EAAI,KAAK,iBAC9B,OAIJ,IAAMH,EAAS,GAAGG,CAAK,IAAIhD,EAAQ,UAAU,EAAG,EAAE,CAAC,GAC7CiD,EAAe,KAAK,WAAW,IAAIJ,CAAM,GAAK,EAEpD,GAAII,GAAgB,KAAK,aACrB,OAGJ,KAAK,WAAW,IAAIJ,EAAQI,EAAe,CAAC,EAG5C,IAAIC,EAAgB,KACpB,GAAIjF,IAEAiF,EAAgB,KAAK,iBAAiBjF,CAAI,EAGtC,KAAK,0BAA0B,KAAK,UAAUiF,CAAa,CAAC,GAAG,CAC/D,KAAK,kBAAkB,QAAQ,yEAAyE,EACxG,MACJ,CAIJ,GAAI,KAAK,kBAAmB,CACxB,GAAIF,IAAU,QAAS,CAEnB,IAAMG,EAAc,KAAK,gBAAgBnD,CAAO,EAChD,KAAK,kBAAkB,QAAQmD,CAAW,CAC9C,CAEA,MACJ,CAGA,IAAMC,EAAY,KAAK,mBAAmBJ,CAAK,GAAK,KAAK,kBAAkB,IACvEE,EACAE,EAAUpD,EAASkD,CAAa,EAEhCE,EAAUpD,CAAO,CAEzB,CAIA,iBAAiB/B,EAAM,CAEnB,GAAI,OAAOA,GAAS,SAChB,OAAO,KAAK,gBAAgBA,CAAI,EAGpC,GAAI,CAACA,GAAQ,OAAOA,GAAS,SACzB,OAAOA,EAGX,IAAMuD,EAAY,CAAC,EAEnB,OAAW,CAACL,EAAKM,CAAK,IAAK,OAAO,QAAQxD,CAAI,EAAG,CAC7C,IAAMoF,EAAWlC,EAAI,YAAY,EAG3BmC,EAAoB,CACtB,MAAO,SAAU,QAAS,WAAY,aAAc,OACpD,cAAe,OAAQ,YAAa,UAAW,aAC/C,MAAO,WAAY,UAAW,MAAO,SAAU,OAC/C,SAAU,QAAS,KAAM,SAAU,OAAQ,SAC/C,EAKA,GAHsB,KAAK,mBAAmB,IAAInC,CAAG,GACjDmC,EAAkB,KAAKC,GAAWF,EAAS,SAASE,CAAO,CAAC,EAE7C,CACf/B,EAAUL,CAAG,EAAI,2BACjB,QACJ,CAGA,GAAI,KAAK,qBAAqB,IAAIA,CAAG,EAAG,CAEhC,OAAOM,GAAU,SACjBD,EAAUL,CAAG,EAAI,KAAK,gBAAgBM,CAAK,EAE3CD,EAAUL,CAAG,EAAIM,EAErB,QACJ,CAGA,GAAI,OAAOA,GAAU,WAAa,OAAOA,GAAU,SAC/CD,EAAUL,CAAG,EAAIM,UACV,OAAOA,GAAU,SACxBD,EAAUL,CAAG,EAAI,KAAK,gBAAgBM,CAAK,UACpCA,aAAiB,aAAeA,aAAiB,WAExDD,EAAUL,CAAG,EAAI,IAAIM,EAAM,YAAY,IAAI,8BACpCA,GAAS,OAAOA,GAAU,SAEjC,GAAI,CACAD,EAAUL,CAAG,EAAI,KAAK,iBAAiBM,CAAK,CAChD,MAAgB,CACZD,EAAUL,CAAG,EAAI,iCACrB,MAEAK,EAAUL,CAAG,EAAI,IAAI,OAAOM,CAAK,GAEzC,CAGA,IAAM+B,EAAkB,KAAK,UAAUhC,CAAS,EAChD,OAAI,KAAK,0BAA0BgC,CAAe,EACvC,CAAE,MAAO,gDAAiD,EAG9DhC,CACX,CAIA,gBAAgBF,EAAK,CACjB,GAAI,OAAOA,GAAQ,UAAYA,EAAI,SAAW,EAC1C,OAAOA,EAIX,IAAMmC,EAAoB,CAEtB,iBACA,gBAGA,2BACA,qBACA,sBAGA,4BAGA,sBACA,gBAGA,sBACA,wBAGA,uBACA,sBAGA,6CACA,2CAGA,mDAGA,kFAGA,gEAGA,6CACA,wBAGA,iDAGA,uEACA,qEAGA,4DACJ,EAGA,QAAWF,KAAWE,EAClB,GAAIF,EAAQ,KAAKjC,CAAG,EAEhB,MAAO,4BAKf,OAAI,KAAK,gBAAgBA,CAAG,EACjB,+BAIP,KAAK,2BAA2BA,CAAG,EAC5B,6BAIPA,EAAI,OAAS,GACNA,EAAI,UAAU,EAAG,EAAE,EAAI,iBAG3BA,CACX,CAIA,0BAA0BA,EAAK,CAC3B,OAAI,OAAOA,GAAQ,SAAiB,GAGV,CACtB,iBACA,2BACA,4BACA,sBACA,uBACA,6CACA,mDACA,iFACJ,EAEyB,KAAKiC,GAAWA,EAAQ,KAAKjC,CAAG,CAAC,GACnD,KAAK,gBAAgBA,CAAG,GACxB,KAAK,2BAA2BA,CAAG,CAC9C,CAKA,gBAAgBA,EAAK,CACjB,GAAIA,EAAI,OAAS,EAAG,MAAO,GAG3B,IAAMoC,EAAY,CAAC,EACnB,QAAWC,KAAQrC,EACfoC,EAAUC,CAAI,GAAKD,EAAUC,CAAI,GAAK,GAAK,EAI/C,IAAMC,EAAStC,EAAI,OACfuC,EAAU,EAEd,QAAWlB,KAAS,OAAO,OAAOe,CAAS,EAAG,CAC1C,IAAMI,EAAcnB,EAAQiB,EAC5BC,GAAWC,EAAc,KAAK,KAAKA,CAAW,CAClD,CAGA,OAAOD,EAAU,GACrB,CAKA,2BAA2BvC,EAAK,CAC5B,OAAIA,EAAI,OAAS,EAAU,IAGVA,EAAI,MAAM,YAAY,GAAK,CAAC,GAChC,QAAUA,EAAI,OAAS,KAMhBA,EAAI,MAAM,iBAAiB,GAAK,CAAC,GACrC,QAAUA,EAAI,OAAS,IAMnB,IAAI,IAAIA,CAAG,EAAE,KACIA,EAAI,OAGpB,IAAOA,EAAI,OAAS,EAK7C,CAUA,uBAAwB,CAEpB,OAEK,OAAO,QAAY,KAAe,IAElC,CAAC,KAAK,YAEN,OAAO,SAAS,UAAY,CAAC,OAAO,SAAS,SAAS,SAAS,WAAW,GAC1E,CAAC,OAAO,SAAS,SAAS,SAAS,WAAW,GAC9C,CAAC,OAAO,SAAS,SAAS,SAAS,QAAQ,GAE3C,OAAO,OAAO,iBAAqB,KAAe,CAAC,OAAO,SAAS,OAAO,SAAS,OAAO,CAEnG,CAQA,uBAAwB,CAEpB,KAAK,WAAW,OAAQ,kCAAkC,EAG1D,IAAMyC,EAAY,CAAC,EAGf,OAAO,KAAK,aAAgB,aAC5BA,EAAU,YAAc,KAAK,YAAY,KAAK,IAAI,GAItDA,EAAU,oBAAsB,KAAO,CACnC,YAAa,KAAK,YAAc,KAAK,YAAY,EAAI,GACrD,WAAY,KAAK,YAAc,GAC/B,gBAAiB,KAAK,gBAAgB,iBAAmB,cAC7D,GAGAA,EAAU,kBAAoB,KAAO,CACjC,cAAe,UACf,MAAO,cACP,oBAAqB,OAAO,OAAO,KAAK,kBAAoB,CAAC,CAAC,EAAE,OAAO,OAAO,EAAE,MACpF,GAEI,OAAO,KAAK,UAAa,aACzBA,EAAU,SAAW,KAAK,SAAS,KAAK,IAAI,GAIhDA,EAAU,sBAAwB,KAAO,CACrC,YAAa,CAAC,CAAC,KAAK,mBACpB,OAAQ,QACR,gBAAiB,EACjB,mBAAoB,CACxB,GAEI,OAAO,KAAK,YAAe,aAC3BA,EAAU,WAAa,KAAK,WAAW,KAAK,IAAI,GAIpD,IAAMC,EAAgB,CAClB,GAAGD,EACH,iBAAkB,KAAO,CACrB,YAAa,KAAK,QAAQ,YAAY,QACtC,cAAe,KAAK,QAAQ,cAAc,QAC1C,cAAe,KAAK,QAAQ,cAAc,QAC1C,mBAAoB,KAAK,QAAQ,mBAAmB,OACxD,GACA,UAAW,CAAC,CAChB,EAGI,OAAO,KAAK,4BAA+B,aAC3CC,EAAc,UAAU,iBAAmB,KAAK,2BAA2B,KAAK,IAAI,GAGpF,OAAO,KAAK,8BAAiC,aAC7CA,EAAc,UAAU,mBAAqB,KAAK,6BAA6B,KAAK,IAAI,GAGxF,OAAO,KAAK,0BAA6B,aACzCA,EAAc,UAAU,eAAiB,KAAK,yBAAyB,KAAK,IAAI,GAGhF,OAAO,KAAK,qBAAwB,aACpCA,EAAc,UAAU,aAAe,KAAK,oBAAoB,KAAK,IAAI,GAI7EA,EAAc,4BAA8B,KAAO,CAC/C,YAAa,CAAC,CAAC,KAAK,mBACpB,OAAQ,QACR,gBAAiB,EACjB,mBAAoB,CACxB,GAGA,KAAK,WAAW,OAAQ,wBAAyB,CAC7C,YAAa,CAAC,CAACD,EAAU,YACzB,oBAAqB,CAAC,CAACA,EAAU,oBACjC,kBAAmB,CAAC,CAACA,EAAU,kBAC/B,SAAU,CAAC,CAACA,EAAU,SACtB,sBAAuB,CAAC,CAACA,EAAU,sBACnC,WAAY,CAAC,CAACA,EAAU,WACxB,iBAAkB,CAAC,CAACC,EAAc,iBAClC,iBAAkB,OAAO,KAAKA,EAAc,SAAS,EAAE,MAC3D,CAAC,EAGD,OAAO,OAAOA,CAAa,EAC3B,OAAO,OAAOA,EAAc,SAAS,EAGrC,KAAK,0BAA0BA,CAAa,EAG5C,KAAK,8BAA8B,EAGnC,KAAK,WAAW,OAAQ,gDAAgD,CAC5E,CAIA,0BAA0BA,EAAe,CAErC,KAAK,WAAW,OAAQ,+BAA+B,EAGlD,OAAO,cAGR,KAAK,WAAW,OAAQ,wDAA8C,EAFtE,KAAK,WAAWA,CAAa,CAIrC,CAKA,WAAWC,EAAW,CAElB,KAAK,WAAW,OAAQ,uCAAuC,EAG3D,CAAC,KAAK,mBAAqB,CAAC,KAAK,kBAAkB,gBACnD,KAAK,WAAW,QAAS,uEAAkE,EAE3F,OAAO,eAAe,OAAQ,gBAAiB,CAC3C,MAAOA,EACP,SAAU,GACV,aAAc,GACd,WAAY,EAChB,CAAC,GAGD,KAAK,kBAAkB,eAAe,OAAQ,gBAAiB,CAC3D,MAAOA,EACP,SAAU,GACV,aAAc,GACd,WAAY,EAChB,CAAC,EAGL,KAAK,WAAW,OAAQ,uDAAgD,CAC5E,CAKA,+BAAgC,CAE5B,KAAK,kBAAkB,EAEvB,KAAK,WAAW,OAAQ,+CAAwC,CACpE,CAKA,wBAAyB,CAErB,KAAK,kBAAoB,CACrB,eAAgB,OAAO,eACvB,yBAA0B,OAAO,yBACjC,OAAQ,OAAO,OACf,WAAY,QAAQ,IACpB,aAAc,QAAQ,MACtB,YAAa,QAAQ,IACzB,EAEA,KAAK,WAAW,OAAQ,6CAAuC,CAC3D,eAAgB,CAAC,CAAC,KAAK,kBAAkB,eACzC,yBAA0B,CAAC,CAAC,KAAK,kBAAkB,yBACnD,OAAQ,CAAC,CAAC,KAAK,kBAAkB,MACrC,CAAC,CACL,CAKA,wBAAyB,CACrB,KAAK,WAAW,OAAQ,uDAAgD,CAC5E,CAKA,wBAAyB,CACrB,KAAK,WAAW,OAAQ,wEAAiE,CAC7F,CAIA,qBAAsB,CAClB,GAAI,CACA,GAAI,CAAC,OAAO,cACR,YAAK,WAAW,QAAS,qDAAgD,EAClE,GAIX,IAAMC,EADkB,CAAC,cAAe,sBAAuB,YAAY,EACpC,OAAOC,GAC1C,OAAO,OAAO,cAAcA,CAAM,GAAM,UAC5C,EAEA,OAAID,EAAe,OAAS,GACxB,KAAK,WAAW,QAAS,kEAA8D,CAAE,UAAWA,GAAgB,aAAa,MAAQ,SAAU,CAAC,EAC7I,IAGJ,EACX,OAASlI,EAAO,CACZ,YAAK,WAAW,QAAS,qDAAiD,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACvH,EACX,CACJ,CAQA,sBAAuB,CAEnB,YAAK,WAAW,OAAQ,6DAAsD,EACvE,CAAC,CACZ,CAKA,qBAAsB,CAElB,KAAK,WAAW,OAAQ,+EAAwE,CACpG,CAKA,mBAAoB,CAChB,GAAI,CAAC,OAAO,cAAe,CACvB,KAAK,WAAW,OAAQ,2DAAiD,EACzE,MACJ,CAEA,GAAI,CAEI,KAAK,0BAA0B,GAC/B,KAAK,WAAW,OAAQ,0CAAmC,CAGnE,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,gDAA4C,CACjE,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,CACJ,CAKA,2BAA4B,CACxB,GAAI,CAEA,GAAI,CAAC,KAAK,mBAAqB,CAAC,KAAK,kBAAkB,yBAA0B,CAE7E,IAAMoI,EAAa,OAAO,yBAAyB,OAAQ,eAAe,EAE1E,GAAI,CAACA,GAAcA,EAAW,aAC1B,MAAM,IAAI,MAAM,2CAA2C,CAEnE,KAAO,CACH,IAAMA,EAAa,KAAK,kBAAkB,yBAAyB,OAAQ,eAAe,EAE1F,GAAI,CAACA,GAAcA,EAAW,aAC1B,MAAM,IAAI,MAAM,2CAA2C,CAEnE,CAEA,YAAK,WAAW,OAAQ,gCAA2B,EAC5C,EAEX,OAASpI,EAAO,CACZ,YAAK,WAAW,QAAS,yCAAqC,CAC1D,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EACM,EACX,CACJ,CAKA,kBAAkBiC,EAAMzB,EAAU,UAAW,CACzC,GAAKyB,EAEL,GAAI,CAEIA,aAAgB,YAChB,KAAK,uBAAuBA,EAAMzB,CAAO,EAClCyB,aAAgB,WACvB,KAAK,sBAAsBA,EAAMzB,CAAO,EACjC,MAAM,QAAQyB,CAAI,EACzB,KAAK,iBAAiBA,EAAMzB,CAAO,EAC5B,OAAOyB,GAAS,SACvB,KAAK,kBAAkBA,EAAMzB,CAAO,EAC7ByB,aAAgB,UACvB,KAAK,qBAAqBA,EAAMzB,CAAO,EAChC,OAAOyB,GAAS,UACvB,KAAK,kBAAkBA,EAAMzB,CAAO,EAGxC,KAAK,qBAAqB,YAAY,eAE1C,OAASR,EAAO,CACZ,KAAK,qBAAqB,YAAY,iBACtC,KAAK,WAAW,QAAS,mCAA+B,CACpD,QAASQ,EACT,UAAWR,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,CACJ,CAKA,uBAAuBqI,EAAQ7H,EAAS,CACpC,GAAI,GAAC6H,GAAUA,EAAO,aAAe,GAErC,GAAI,CACA,IAAMC,EAAO,IAAI,WAAWD,CAAM,EAGlC,OAAO,gBAAgBC,CAAI,EAG3BA,EAAK,KAAK,CAAC,EAGXA,EAAK,KAAK,GAAG,EAGbA,EAAK,KAAK,CAAC,EAEX,KAAK,WAAW,QAAS,uCAAiC,CACtD,QAAS9H,EACT,KAAM6H,EAAO,UACjB,CAAC,CAEL,OAASrI,EAAO,CACZ,KAAK,WAAW,QAAS,oCAAgC,CACrD,QAASQ,EACT,UAAWR,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAKA,sBAAsBuI,EAAO/H,EAAS,CAClC,GAAI,GAAC+H,GAASA,EAAM,SAAW,GAE/B,GAAI,CAEA,OAAO,gBAAgBA,CAAK,EAG5BA,EAAM,KAAK,CAAC,EAGZA,EAAM,KAAK,GAAG,EAGdA,EAAM,KAAK,CAAC,EAEZ,KAAK,WAAW,QAAS,sCAAgC,CACrD,QAAS/H,EACT,KAAM+H,EAAM,MAChB,CAAC,CAEL,OAASvI,EAAO,CACZ,KAAK,WAAW,QAAS,mCAA+B,CACpD,QAASQ,EACT,UAAWR,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAKA,iBAAiBuI,EAAO/H,EAAS,CAC7B,GAAI,GAAC,MAAM,QAAQ+H,CAAK,GAAKA,EAAM,SAAW,GAE9C,GAAI,CAEAA,EAAM,QAAQ,CAAChD,EAAMiD,IAAU,CACvBjD,GAAS,MACT,KAAK,kBAAkBA,EAAM,GAAG/E,CAAO,IAAIgI,CAAK,GAAG,CAE3D,CAAC,EAGDD,EAAM,KAAK,IAAI,EAEf,KAAK,WAAW,QAAS,iCAA2B,CAChD,QAAS/H,EACT,KAAM+H,EAAM,MAChB,CAAC,CAEL,OAASvI,EAAO,CACZ,KAAK,WAAW,QAAS,8BAA0B,CAC/C,QAASQ,EACT,UAAWR,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAmBA,kBAAkBsF,EAAK9E,EAAS,CAC5B,YAAK,WAAW,QAAS,gFAA4E,CACjG,QAASA,EACT,OAAQ8E,EAAMA,EAAI,OAAS,CAC/B,CAAC,EACM,EACX,CAmBA,qBAAqBH,EAAK3E,EAAS,CAC/B,MAAI,CAAC2E,GAAO,EAAEA,aAAe,aAE7B,KAAK,WAAW,QAAS,uFAAmF,CACxG,QAAS3E,EACT,KAAM2E,EAAI,KACV,YAAaA,EAAI,WACrB,CAAC,EAIGA,EAAI,aACJ,KAAK,WAAW,QAAS,8EAA0E,CAC/F,QAAS3E,CACb,CAAC,GAGE,EACX,CAKA,kBAAkByE,EAAKzE,EAAS,CAC5B,GAAI,GAACyE,GAAO,OAAOA,GAAQ,UAE3B,GAAI,CAEA,OAAW,CAACE,EAAKM,CAAK,IAAK,OAAO,QAAQR,CAAG,EACrCQ,GAAU,MACV,KAAK,kBAAkBA,EAAO,GAAGjF,CAAO,IAAI2E,CAAG,EAAE,EAGrDF,EAAIE,CAAG,EAAI,KAGf,KAAK,WAAW,QAAS,kCAA4B,CACjD,QAAS3E,EACT,WAAY,OAAO,KAAKyE,CAAG,EAAE,MACjC,CAAC,CAEL,OAASjF,EAAO,CACZ,KAAK,WAAW,QAAS,+BAA2B,CAChD,QAASQ,EACT,UAAWR,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAKA,sCAAuC,CACnC,GAAI,CAqEA,GAnEI,KAAK,cACL,KAAK,kBAAkB,KAAK,YAAa,aAAa,EACtD,KAAK,YAAc,MAGnB,KAAK,eACL,KAAK,kBAAkB,KAAK,aAAc,cAAc,EACxD,KAAK,aAAe,MAIpB,KAAK,gBACL,KAAK,kBAAkB,KAAK,cAAe,eAAe,EAC1D,KAAK,cAAgB,MAGrB,KAAK,SACL,KAAK,kBAAkB,KAAK,OAAQ,QAAQ,EAC5C,KAAK,OAAS,MAGd,KAAK,cACL,KAAK,kBAAkB,KAAK,YAAa,aAAa,EACtD,KAAK,YAAc,MAGnB,KAAK,sBACL,KAAK,kBAAkB,KAAK,oBAAqB,qBAAqB,EACtE,KAAK,oBAAsB,MAI3B,KAAK,cACL,KAAK,kBAAkB,KAAK,YAAa,aAAa,EACtD,KAAK,YAAc,MAGnB,KAAK,YACL,KAAK,kBAAkB,KAAK,UAAW,WAAW,EAClD,KAAK,UAAY,MAGjB,KAAK,mBACL,KAAK,kBAAkB,KAAK,iBAAkB,kBAAkB,EAChE,KAAK,iBAAmB,MAGxB,KAAK,gBACL,KAAK,kBAAkB,KAAK,cAAe,eAAe,EAC1D,KAAK,cAAgB,MAGrB,KAAK,iBACL,KAAK,kBAAkB,KAAK,eAAgB,gBAAgB,EAC5D,KAAK,eAAiB,MAGtB,KAAK,eACL,KAAK,kBAAkB,KAAK,aAAc,cAAc,EACxD,KAAK,aAAe,MAGxB,KAAK,0BAA0B,EAK3B,KAAK,SAAU,CACf,GAAI,CAAE,KAAK,SAAS,QAAQ,CAAG,MAAY,CAAC,CAC5C,KAAK,SAAW,IACpB,CACA,KAAK,qBAAuB,GAE5B,KAAK,WAAW,OAAQ,uDAAgD,CAE5E,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,mDAA+C,CACpE,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,CACJ,CAKA,MAAM,yBAA0B,CAC5B,GAAI,CAEA,MAAM,KAAK,uBAAuB,EAClC,KAAK,WAAW,QAAS,4CAAqC,CAClE,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,2CAAuC,CAC5D,UAAWA,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,CAKA,MAAM,+BAAgC,CAClC,GAAI,CACA,KAAK,qBAAqB,WAAa,GAGvC,IAAMyI,EAAyB,KAAK,cAAgB,WAAc,KAAK,aAAe,KAAK,aAAe,KAAK,YAAY,aAAe,OAMpIC,EAAoB,KAAK,qBACxB,KAAK,IAAI,GAAK,KAAK,qBAAqB,WAAa,GACtD,IACAC,EAAkB,CAAC,CAAC,KAAK,sBACxB,MAAM,QAAQ,KAAK,qBAAqB,WAAW,GACnD,KAAK,qBAAqB,YAAY,SAAW,IACjDD,EAAoBnJ,EAA4B,OAAO,cAC7BkJ,GAAyBE,EAEtD,KAAK,WAAW,QAAS,6DAAuD,CAC5E,OAAQF,EAAwB,4BAA8B,uBAClE,CAAC,EAED,KAAK,qCAAqC,EAI1C,KAAK,cAAgB,KAAK,aAAa,OAAS,KACzB,KAAK,aAAa,OAAO,EAAG,KAAK,aAAa,OAAS,EAAE,EACjE,QAAQ,CAACzE,EAASwE,IAAU,CACvC,KAAK,kBAAkBxE,EAAS,mBAAmBwE,CAAK,GAAG,CAC/D,CAAC,EAID,KAAK,qBAAuB,KAAK,oBAAoB,KAAO,KAC5D,KAAK,oBAAoB,MAAM,EAInC,MAAM,KAAK,wBAAwB,EAEnC,KAAK,WAAW,QAAS,6CAAsC,CAEnE,OAASxI,EAAO,CACZ,KAAK,WAAW,QAAS,8CAA0C,CAC/D,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,QAAE,CACE,KAAK,qBAAqB,WAAa,EAC3C,CACJ,CAKA,0BAA0B4I,EAAepI,EAAU,UAAW,CAC1D,GAAI,CAEA,IAAMqI,EAAW,KAAK,iBAAiBD,CAAa,EAG9CzB,EAAc,KAAK,qBAAqB0B,EAAUrI,CAAO,EAG/D,YAAK,WAAW,QAAS,0BAA2B,CAChD,SAAUqI,EACV,QAASrI,EACT,UAAWoI,GAAe,aAAa,MAAQ,UAC/C,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,KAAK,qBAAqBC,CAAQ,EAE3B1B,CAEX,OAASnH,EAAO,CAEZ,YAAK,WAAW,QAAS,wBAAyB,CAC9C,cAAe4I,GAAe,SAAW,UACzC,cAAe5I,EAAM,OACzB,CAAC,EACM,8BACX,CACJ,CAKA,iBAAiBA,EAAO,CACpB,GAAI,CAACA,GAAS,CAACA,EAAM,QACjB,OAAO,KAAK,oBAAoB,gBAAgB,QAGpD,IAAMgE,EAAUhE,EAAM,QAAQ,YAAY,EAG1C,OAAIgE,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,KAAK,GACtBA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,MAAM,GACvBA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,MAAM,GACvBA,EAAQ,SAAS,OAAO,EACjB,KAAK,oBAAoB,gBAAgB,cAIhDA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,YAAY,GAC7BA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,MAAM,EAChB,KAAK,oBAAoB,gBAAgB,QAIhDA,EAAQ,SAAS,SAAS,GAC1BA,EAAQ,SAAS,YAAY,GAC7BA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,MAAM,EAChB,KAAK,oBAAoB,gBAAgB,WAIhDA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,UAAU,GAC3BA,EAAQ,SAAS,QAAQ,GACzBA,EAAQ,SAAS,UAAU,EACpB,KAAK,oBAAoB,gBAAgB,OAG7C,KAAK,oBAAoB,gBAAgB,OACpD,CAKA,qBAAqB6E,EAAUrI,EAAS,CACpC,IAAMsI,EAAe,CACjB,CAAC,KAAK,oBAAoB,gBAAgB,aAAa,EAAG,CACtD,eAAkB,iCAClB,WAAc,+BACd,eAAkB,wBAClB,WAAc,0BACd,WAAc,8BACd,UAAa,wBACb,QAAW,2BACf,EACA,CAAC,KAAK,oBAAoB,gBAAgB,OAAO,EAAG,CAChD,WAAc,oBACd,QAAW,qBACX,KAAQ,yBACR,OAAU,uBACV,QAAW,0BACf,EACA,CAAC,KAAK,oBAAoB,gBAAgB,UAAU,EAAG,CACnD,OAAU,sBACV,KAAQ,oBACR,UAAa,yBACb,QAAW,mBACf,EACA,CAAC,KAAK,oBAAoB,gBAAgB,MAAM,EAAG,CAC/C,OAAU,wBACV,SAAY,8BACZ,SAAY,wBACZ,QAAW,yBACf,EACA,CAAC,KAAK,oBAAoB,gBAAgB,OAAO,EAAG,CAChD,QAAW,8BACf,CACJ,EAEMC,EAAmBD,EAAaD,CAAQ,GAAKC,EAAa,KAAK,oBAAoB,gBAAgB,OAAO,EAG5GE,EAAkB,UACtB,OAAIxI,EAAQ,SAAS,KAAK,GAAKA,EAAQ,SAAS,QAAQ,EACpDwI,EAAkBH,IAAa,KAAK,oBAAoB,gBAAgB,cAAgB,iBAAmB,UACpGrI,EAAQ,SAAS,YAAY,GAAKA,EAAQ,SAAS,MAAM,EAChEwI,EAAkBH,IAAa,KAAK,oBAAoB,gBAAgB,QAAU,aAAe,WAC1FrI,EAAQ,SAAS,YAAY,GAAKA,EAAQ,SAAS,QAAQ,KAClEwI,EAAkBH,IAAa,KAAK,oBAAoB,gBAAgB,WAAa,SAAW,WAG7FE,EAAiBC,CAAe,GAAKD,EAAiB,OACjE,CAKA,qBAAqBF,EAAU,CAC3B,IAAMjE,EAAM,KAAK,IAAI,EAGjBA,EAAM,KAAK,oBAAoB,cAAgB,KAC/C,KAAK,oBAAoB,YAAY,MAAM,EAI/C,IAAMqC,EAAe,KAAK,oBAAoB,YAAY,IAAI4B,CAAQ,GAAK,EAC3E,KAAK,oBAAoB,YAAY,IAAIA,EAAU5B,EAAe,CAAC,EACnE,KAAK,oBAAoB,cAAgBrC,EAGzC,IAAMqE,EAAc,MAAM,KAAK,KAAK,oBAAoB,YAAY,OAAO,CAAC,EAAE,OAAO,CAACC,EAAKvC,IAAUuC,EAAMvC,EAAO,CAAC,EAE/GsC,EAAc,KAAK,oBAAoB,iBACvC,KAAK,oBAAoB,cAAgB,GACzC,KAAK,WAAW,OAAQ,mEAA0D,CAC9E,YAAaA,EACb,UAAW,KAAK,oBAAoB,cACxC,CAAC,EAET,CAKA,kBAAkBL,EAAepI,EAAU,UAAW,CAClD,IAAM2I,EAAgB,KAAK,0BAA0BP,EAAepI,CAAO,EAC3E,MAAM,IAAI,MAAM2I,CAAa,CACjC,CAKA,wBAAyB,CACrB,MAAO,CACH,YAAa,OAAO,YAAY,KAAK,oBAAoB,WAAW,EACpE,cAAe,KAAK,oBAAoB,cACxC,cAAe,KAAK,oBAAoB,cACxC,eAAgB,KAAK,oBAAoB,cAC7C,CACJ,CAKA,2BAA4B,CACxB,KAAK,oBAAoB,YAAY,MAAM,EAC3C,KAAK,oBAAoB,cAAgB,GACzC,KAAK,oBAAoB,cAAgB,EAEzC,KAAK,WAAW,OAAQ,uCAAgC,CAC5D,CAKA,2BAA4B,CACxB,MAAO,CACH,cAAe,KAAK,qBAAqB,YAAY,cACrD,eAAgB,KAAK,qBAAqB,YAAY,eACtD,YAAa,KAAK,qBAAqB,YAAY,YACnD,WAAY,KAAK,qBAAqB,WACtC,YAAa,KAAK,qBAAqB,aAAa,MACxD,CACJ,CAKA,uBAAwB,CACpB,GAAI,CAEA,GAAI,CAAC,OAAO,cACR,YAAK,WAAW,QAAS,yDAAoD,EACtE,GAIX,IAAMC,EAAkB,CAAC,cAAe,sBAAuB,oBAAqB,WAAY,YAAY,EACtGlB,EAAiBkB,EAAgB,OAAOjB,GAC1C,CAAC,OAAO,cAAcA,CAAM,GAAK,OAAO,OAAO,cAAcA,CAAM,GAAM,UAC7E,EAEA,GAAID,EAAe,OAAS,EACxB,YAAK,WAAW,QAAS,kEAA8D,CACnF,eAAgBA,CACpB,CAAC,EACM,GAIX,IAAMmB,EAAc,CAAE,KAAM,EAAK,EAS3BC,EAReF,EAAgB,IAAIjB,GAAU,CAC/C,GAAI,CACA,OAAO,OAAO,cAAcA,CAAM,EAAE,KAAKkB,CAAW,CACxD,MAAgB,CACZ,OAAO,IACX,CACJ,CAAC,EAEmC,OAAOlB,GAAUA,IAAW,IAAI,EACpE,GAAImB,EAAe,OAAS,EACxB,YAAK,WAAW,QAAS,wEAAoE,CACzF,eAAgBA,EAAe,MACnC,CAAC,EACM,GAIX,GAAI,CACA,IAAMC,EAAW,mBAAqB,KAAK,IAAI,EAC/C,cAAO,eAAe,OAAO,cAAeA,EAAU,CAClD,MAAO,OACP,SAAU,GACV,aAAc,EAClB,CAAC,EAED,KAAK,WAAW,QAAS,gEAA2D,EACpF,OAAO,OAAO,cAAcA,CAAQ,EAC7B,EAEX,MAA4B,CAExB,KAAK,WAAW,QAAS,yCAAoC,CACjE,CAEA,YAAK,WAAW,OAAQ,+CAA0C,EAC3D,EAEX,OAASvJ,EAAO,CACZ,YAAK,WAAW,QAAS,gDAA4C,CACjE,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EACM,EACX,CACJ,CAEA,gCAAiC,CAE7B,IAAMwJ,EAAmB,CAAC,iBAAiB,EACrCC,EAAkBD,EAAiB,OAAOE,GAAW,CAAC,KAAK,iBAAiBA,CAAO,CAAC,EAEtFD,EAAgB,OAAS,IACzB,KAAK,WAAW,QAAS,6DAAuD,CAC5E,QAASA,EACT,gBAAiB,KAAK,iBACtB,OAAQ,sCACZ,CAAC,EAEDA,EAAgB,QAAQC,GAAW,CAC/B,KAAK,iBAAiBA,CAAO,EAAI,GACjC,KAAK,WAAW,OAAQ,wCAA8BA,CAAO,SAAS,CAC1E,CAAC,GAIL,IAAMC,EAAoB,OAAO,KAAK,KAAK,gBAAgB,EAAE,OAAOC,GAAK,KAAK,iBAAiBA,CAAC,CAAC,EAC3FC,EAAqB,CAAC,gBAAiB,UAAW,UAAU,EAAE,OAAOD,GAAK,KAAK,iBAAiBA,CAAC,CAAC,EAExG,YAAK,WAAW,OAAQ,kDAA8C,CAClE,iBAAkBJ,EAAiB,OACnC,kBAAmBG,EAAkB,OACrC,mBAAoBE,EAAmB,OACvC,sBAAuBF,EAAkB,OACzC,KAAM,2DACN,aAAc,CACV,cAAe,KAAK,iBAAiB,cACrC,QAAS,KAAK,iBAAiB,QAC/B,SAAU,KAAK,iBAAiB,SAChC,gBAAiB,KAAK,iBAAiB,eAC3C,CACJ,CAAC,EAEM,EACX,CAEA,iCAAkC,CAE9B,KAAK,WAAW,OAAQ,uEAAkE,EAGtE,CAChB,gBAAiB,UAAW,WAAY,gBACxC,wBAAyB,8BACzB,wBAAyB,kBAAmB,wBAAyB,SACrE,sBAAuB,mBAAoB,sBAC3C,wBAAyB,iBAAkB,mBAAoB,oBACnE,EAEY,QAAQD,GAAW,CAC3B,KAAK,iBAAiBA,CAAO,EAAI,EACrC,CAAC,EAED,KAAK,WAAW,OAAQ,kDAA8C,CAClE,gBAAiB,OAAO,KAAK,KAAK,gBAAgB,EAAE,OAAOE,GAAK,KAAK,iBAAiBA,CAAC,CAAC,EAAE,OAC1F,cAAe,OAAO,KAAK,KAAK,gBAAgB,EAAE,MACtD,CAAC,CAGL,CAKA,mBAAmBE,EAAS,kBAAmB,CAC3C,KAAK,WAAW,QAAS,sCAAiC,EAE1D,GAAI,CAEA,KAAK,cAAgB,KACrB,KAAK,OAAS,KACd,KAAK,YAAc,KACnB,KAAK,iBAAmB,KACxB,KAAK,eAAiB,KACtB,KAAK,aAAe,KAGhB,KAAK,cACL,KAAK,YAAY,MAAM,EACvB,KAAK,YAAc,MAEnB,KAAK,iBACL,KAAK,eAAe,MAAM,EAC1B,KAAK,eAAiB,MAI1B,KAAK,aAAe,CAAC,EACrB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,aAAa,MAAM,EAGpB,KAAK,gBACL,KAAK,eAAe,iBAAiB,EAGzC,KAAK,WAAW,OAAQ,wCAAiC,CAE7D,OAAS9J,EAAO,CACZ,KAAK,WAAW,QAAS,0CAAsC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACvH,CACJ,CACA,+BAAgC,CAI5B,GAHA,KAAK,4BAA4B,EAG7B,CAAC,KAAK,oBAAoB,EAAG,CAC7B,KAAK,WAAW,QAAS,uCAAkC,EAC3D,MACJ,CAEA,KAAK,yBAAyB,EAG9B,KAAK,oBAAsB,KAAK,kBAAkB,YAAY,IAAM,CAChE,KAAK,aAAa,CACtB,EAAG,GAAM,CAAC,EAEV,KAAK,WAAW,OAAQ,uDAAkD,EAC1E,KAAK,WAAW,OAAQ,6EAAsE,CAClG,CAKA,0BAA2B,CAEvB,KAAK,WAAW,OAAQ,0DAAmD,CAC/E,CAMA,oBAAoB+J,EAAa,GAAM,CACnC,IAAMC,EAAqB,KAAK,aAAe,KAAK,YAAY,aAAe,OACzEC,EAAuB,KAAK,WAC5B9D,EAAU6D,GAAsBC,EAEtC,GAAI,CAAC9D,GAAW4D,EAAY,CACxB,GAAI,CAACC,EACD,MAAM,IAAI,MAAM,wBAAwB,EAE5C,GAAI,CAACC,EACD,MAAM,IAAI,MAAM,yBAAyB,CAEjD,CAEA,OAAO9D,CACX,CAOA,yBAAyB+D,EAAY,UAAWH,EAAa,GAAM,CAC/D,GAAI,CAAC,KAAK,WAAY,CAClB,IAAMI,EAAe,uBAAuBD,CAAS,uDAQrD,GAPA,KAAK,WAAW,QAASC,EAAc,CACnC,UAAWD,EACX,WAAY,KAAK,WACjB,QAAS,CAAC,EAAE,KAAK,eAAiB,KAAK,QACvC,UAAW,KAAK,IAAI,CACxB,CAAC,EAEGH,EACA,MAAM,IAAI,MAAMI,CAAY,EAEhC,MAAO,EACX,CACA,MAAO,EACX,CAMA,mBAAmBC,EAAUC,EAAqB,UAAWC,EAAmB,KAAM,CAClF,GAAIF,EAAU,CAEV,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,OAC7B,MAAM,IAAI,MAAM,kDAAkD,EAGtE,GAAI,CAACC,GAAsBA,IAAuB,UAC9C,MAAM,IAAI,MAAM,iEAAiE,EAQrF,GAAIA,EAAmB,SAAS,KAAK,GAAK,CAAC,KAAK,2BAC5C,WAAK,WAAW,QAAS,6DAA8D,CACnF,mBAAoBA,EACpB,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,2BAC1B,CAAC,EACK,IAAI,MAAM,yDAAyD,EAI7E,KAAK,WAAW,OAAQ,yDAA0D,CAC9E,mBAAoBA,EACpB,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,eAAgB,KAAK,eACrB,UAAW,KAAK,IAAI,EACpB,iBAAkBC,EAAmB,WAAa,MACtD,CAAC,CACL,CAEA,KAAK,WAAaF,EAEdA,EACA,KAAK,eAAe,WAAW,EAE/B,KAAK,eAAe,cAAc,CAE1C,CA+BA,sBAAsBN,EAAS,yBAA0B,CACrD,IAAMS,EAAK,KAAK,MAChB,GAAI,CAAC,KAAK,QAAQ,GAAK,CAACA,GAAM,CAACA,EAAG,WAAa,CAACA,EAAG,eAAiB,CAACA,EAAG,YACpE,MAAM,IAAI,MAAM,wEAAwE,EAE5F,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,OAC7B,MAAM,IAAI,MAAM,yDAAyD,EAE7E,GAAI,KAAK,WAAY,MAAO,GAI5B,KAAK,2BAA6B,GAClC,KAAK,4BAA8B,GACnC,KAAK,2BAA6B,GAElC,KAAK,mBAAmB,GAAM,yBAA0B,CACpD,OAAAT,EACA,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,yBAAyB,qBAAsB,EAAK,EACzD,KAAK,iBAAiB,UAAU,EAChC,GAAI,CAAE,KAAK,oBAAoB,CAAG,MAAY,CAAC,CAC/C,MAAO,EACX,CAMA,sBAAsB5J,EAAaC,EAAc,KAAM,CAEnD,GAAI,OAAO,KAAK,mBAAsB,WAClC,MAAM,IAAI,MAAM,2GAA2G,EAG/H,OAAO,KAAK,kBAAkBD,EAAaC,EAAa,EAAI,CAChE,CAMA,wBAAwBqK,EAAWC,EAAsB,KAAM,CAC3D,GAAI,CACA,IAAMpK,EAAM,KAAK,MAAMmK,CAAS,EAGhC,GAAInK,EAAI,aAAe,KAAK,gBAAgB,WAAa,WACrD,MAAM,IAAI,MAAM,iDAAiD,EAGrE,GAAIA,EAAI,kBAAoB,KAAK,gBAAkB,WAC/C,MAAM,IAAI,MAAM,gEAAgE,EAIpF,GAAIoK,GAAuBpK,EAAI,cAAgBoK,EAC3C,MAAM,IAAI,MAAM,uCAAuCA,CAAmB,SAASpK,EAAI,WAAW,EAAE,EAMxG,GAFY,KAAK,IAAI,EACIA,EAAI,UACZ,KACb,MAAM,IAAI,MAAM,gDAAgD,EAGpE,OAAOA,CACX,OAASL,EAAO,CAGZ,WAAK,WAAW,QAAS,wBAAyB,CAC9C,MAAOA,EAAM,QACb,UAAW,OAAOwK,GAAc,SAAWA,EAAU,OAAS,CAClE,CAAC,EACK,IAAI,MAAM,0BAA0BxK,EAAM,OAAO,EAAE,CAC7D,CACJ,CAcA,gCAAgC0K,EAAalK,EAAU,UAAW,CAC9D,GAAI,CACA,GAAI,CAAC,KAAK,wBACN,MAAO,GAQX,GAAI,OAAOkK,GAAgB,UAAY,CAAC,OAAO,SAASA,CAAW,EAC/D,YAAK,WAAW,OAAQ,qDAAsD,CAC1E,aAAc,OAAOA,EACrB,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,GAIX,GAAIkK,EAAc,KAAK,uBAAyB,KAAK,iBACjD,YAAK,WAAW,OAAQ,mDAAoD,CACxE,SAAUA,EACV,SAAU,KAAK,uBACf,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,GAIX,GAAIkK,EAAc,KAAK,uBAAyB,KAAK,eACjD,YAAK,WAAW,OAAQ,sDAAuD,CAC3E,SAAUA,EACV,SAAU,KAAK,uBACf,IAAKA,EAAc,KAAK,uBACxB,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,GAIX,GAAI,KAAK,aAAa,IAAIkK,CAAW,EACjC,YAAK,WAAW,OAAQ,qDAAsD,CAC1E,SAAUA,EACV,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,GAOX,GAHA,KAAK,aAAa,IAAIkK,CAAW,EAG7B,KAAK,aAAa,KAAO,KAAK,iBAAkB,CAChD,IAAMC,EAAY,KAAK,IAAI,GAAG,KAAK,YAAY,EAC/C,KAAK,aAAa,OAAOA,CAAS,CACtC,CAGA,GAAID,IAAgB,KAAK,uBAIrB,IAHA,KAAK,yBAGE,KAAK,aAAa,IAAI,KAAK,uBAAyB,KAAK,iBAAmB,CAAC,GAChF,KAAK,aAAa,OAAO,KAAK,uBAAyB,KAAK,iBAAmB,CAAC,EAIxF,YAAK,WAAW,QAAS,wCAAyC,CAC9D,SAAUA,EACV,SAAU,KAAK,uBACf,QAASlK,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EAEM,EACX,OAASR,EAAO,CACZ,YAAK,WAAW,QAAS,oCAAqC,CAC1D,MAAOA,EAAM,QACb,QAASQ,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EACM,EACX,CACJ,CAQA,oBAAoBgK,EAAWC,EAAsB,KAAM,CACvD,GAAI,CACA,IAAMpK,EAAM,KAAK,MAAMmK,CAAS,EAGhC,GAAInK,EAAI,aAAe,KAAK,gBAAgB,WAAa,WACrD,MAAM,IAAI,MAAM,iDAAiD,EAGrE,GAAIA,EAAI,kBAAoB,KAAK,gBAAkB,WAC/C,MAAM,IAAI,MAAM,gEAAgE,EAIpF,GAAI,CAAC,KAAK,gCAAgCA,EAAI,eAAgBA,EAAI,WAAW,EACzE,MAAM,IAAI,MAAM,mEAAmE,EAIvF,GAAIoK,GAAuBpK,EAAI,cAAgBoK,EAC3C,MAAM,IAAI,MAAM,uCAAuCA,CAAmB,SAASpK,EAAI,WAAW,EAAE,EAGxG,OAAOA,CACX,OAASL,EAAO,CAGZ,WAAK,WAAW,QAAS,wBAAyB,CAC9C,MAAOA,EAAM,QACb,UAAW,OAAOwK,GAAc,SAAWA,EAAU,OAAS,CAClE,CAAC,EACK,IAAI,MAAM,0BAA0BxK,EAAM,OAAO,EAAE,CAC7D,CACJ,CAMA,qBAAsB,CAClB,IAAM4K,EAAS,CACX,wBAAyB,KAAK,wBAC9B,iBAAkB,KAAK,iBACvB,wBAAyB,KAAK,aAAa,KAC3C,eAAgB,KAAK,eACrB,uBAAwB,KAAK,uBAC7B,eAAgB,KAAK,eACrB,oBAAqB,MAAM,KAAK,KAAK,YAAY,EAAE,KAAK,CAACC,EAAG5K,IAAM4K,EAAI5K,CAAC,CAC3E,EAEA,YAAK,WAAW,OAAQ,+BAAgC2K,CAAM,EACvDA,CACX,CAMA,8BAA8B9K,EAAQ,CAClC,GAAI,CACA,GAAIA,EAAO,aAAe,OAAW,CACjC,GAAIA,EAAO,WAAa,IAAMA,EAAO,WAAa,KAC9C,MAAM,IAAI,MAAM,gDAAgD,EAEpE,KAAK,iBAAmBA,EAAO,UACnC,CAEA,GAAIA,EAAO,SAAW,OAAW,CAC7B,GAAIA,EAAO,OAAS,IAAMA,EAAO,OAAS,IACtC,MAAM,IAAI,MAAM,8CAA8C,EAElE,KAAK,eAAiBA,EAAO,MACjC,CAEA,OAAIA,EAAO,UAAY,SACnB,KAAK,wBAA0BA,EAAO,SAG1C,KAAK,WAAW,OAAQ,oCAAqCA,CAAM,EAC5D,EACX,OAASE,EAAO,CACZ,YAAK,WAAW,QAAS,6CAA8C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACxF,EACX,CACJ,CAWA,MAAM,sBAAuB,CACzB,GAAI,CACA,IAAM8K,EAAe,CAEjB,gBAAiB,CAAC,CAAC,KAAK,YACxB,gBAAiB,CAAC,CAAC,KAAK,aACxB,cAAe,CAAC,CAAC,KAAK,cACtB,iBAAkB,CAAC,CAAC,KAAK,QAGzB,iBAAkB,KAAK,wBAGvB,gBAAiB,CAAC,EAAE,KAAK,yBAA2B,KAAK,sBAGzD,QAAS,CAAC,CAAC,KAAK,kBAAoB,KAAK,6BAA+B,GACxE,mBAAoB,GACpB,mBAAoB,GAMpB,sBAAuB,KAAK,kBAAkB,IAAM,GAGpD,YAAa,GAGb,aAAc,KAAK,aACnB,eAAgB,KAAK,eACrB,qBAAsB,UACtB,UAAW,KAAK,IAAI,CACxB,EAIMC,EAAS,MAAM,KAAK,gCAAgC,EAE1D,OAAKA,EAYE,CAAE,GAAGA,EAAQ,GAAGD,CAAa,EARzB,CACH,GAAGA,EACH,MAAO,eACP,MAAO,EACP,WAAY,EAChB,CAIR,OAAS9K,EAAO,CACZ,WAAK,WAAW,QAAS,0CAA2C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACtFA,CACV,CACJ,CAQA,+BAA+B8C,EAAK,CAChC,GAAI,CACA,GAAI,CAACA,GAAO,OAAOA,GAAQ,SACvB,MAAM,IAAI,MAAM,sBAAsB,EAI1C,IAAMkI,EAAmB,mDACnBC,EAAe,CAAC,EAClBC,EAEJ,MAAQA,EAAQF,EAAiB,KAAKlI,CAAG,KAAO,MAC5CmI,EAAa,KAAK,CACd,UAAWC,EAAM,CAAC,EAAE,YAAY,EAChC,YAAaA,EAAM,CAAC,EAAE,KAAK,CAC/B,CAAC,EAGL,GAAID,EAAa,SAAW,EAAG,CAE3B,IAAME,EAAsB,wDAC5B,MAAQD,EAAQC,EAAoB,KAAKrI,CAAG,KAAO,MAC/CmI,EAAa,KAAK,CACd,UAAWC,EAAM,CAAC,EAAE,YAAY,EAChC,YAAaA,EAAM,CAAC,EAAE,KAAK,CAC/B,CAAC,CAET,CAEA,GAAID,EAAa,SAAW,EACxB,WAAK,WAAW,OAAQ,yFAA0F,CAC9G,UAAWnI,EAAI,OACf,WAAYA,EAAI,UAAU,EAAG,GAAG,EAAI,KACxC,CAAC,EACK,IAAI,MAAM,mCAAmC,EAoBvD,MAf2B,CAAC,GAAGmI,CAAY,EAAE,KAAK,CAAC,EAAGhL,IAAM,CACxD,IAAMmL,EAAY,EAAE,YAAc,UAC5BC,EAAYpL,EAAE,YAAc,UAClC,GAAImL,IAAcC,EACd,OAAOD,EAAY,GAAK,EAG5B,IAAME,EAAsB,EAAE,UAAU,cAAcrL,EAAE,SAAS,EACjE,OAAIqL,IAAwB,EACjBA,EAGJ,EAAE,YAAY,cAAcrL,EAAE,WAAW,CACpD,CAAC,EAAE,CAAC,EAEsB,WAC9B,OAASD,EAAO,CACZ,WAAK,WAAW,QAAS,8CAA+C,CACpE,MAAOA,EAAM,QACb,UAAW8C,GAAK,QAAU,CAC9B,CAAC,EACK,IAAI,MAAM,uCAAuC9C,EAAM,OAAO,EAAE,CAC1E,CACJ,CAMA,MAAM,yBAAyBuL,EAAqBC,EAAqBhL,EAAU,UAAW,CAC1F,GAAI,CACA,GAAI,CAAC+K,GAAuB,CAACC,EACzB,MAAM,IAAI,MAAM,oCAAoC,EAIxD,IAAMC,EAAqBF,EAAoB,YAAY,EAAE,QAAQ,KAAM,EAAE,EACvEG,EAAqBF,EAAoB,YAAY,EAAE,QAAQ,KAAM,EAAE,EAS7E,GAAIC,IAAuBC,EACvB,WAAK,WAAW,QAAS,mDAAoD,CACzE,QAASlL,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EAEK,IAAI,MAAM,uDAAuDA,CAAO,EAAE,EAGpF,YAAK,WAAW,OAAQ,yCAA0C,CAC9D,QAASA,EACT,UAAW,KAAK,IAAI,CACxB,CAAC,EAEM,EACX,OAASR,EAAO,CACZ,WAAK,WAAW,QAAS,qCAAsC,CAC3D,MAAOA,EAAM,QACb,QAASQ,CACb,CAAC,EACKR,CACV,CACJ,CAUA,MAAM,YAAY2L,EAAgBC,EAASC,EAAU,CACjD,GAAI,CAEA,GAAI,CAACF,EAAgB,CACjB,IAAMG,EAAU,CAAC,EACjB,MAAKH,GAAgBG,EAAQ,KAAK,gBAAgB,EAC5C,IAAI,MAAM,oDAAoDA,EAAQ,KAAK,IAAI,CAAC,EAAE,CAC5F,CAEA,IAAMC,EAAM,IAAI,YACVC,EAA6B,CAACC,EAAavI,IAAU,CACvD,GAAI,OAAOuI,GAAgB,UAAYA,EAAY,KAAK,EAAE,SAAW,EACjE,MAAM,IAAI,MACN,mBAAmBvI,CAAK,kEAC5B,EAGJ,OAAOuI,EAAY,KAAK,EAAE,YAAY,CAC1C,EAEMC,EAAoBF,EAA2BJ,EAAS,SAAS,EACjEO,EAAqBH,EAA2BH,EAAU,UAAU,EAEpEO,EAAOL,EAAI,OACb,cAAgB,CAACG,EAAmBC,CAAkB,EAAE,KAAK,EAAE,KAAK,GAAG,CAC3E,EAEIE,EACJ,GAAIV,aAA0B,YAC1BU,EAAYV,UACLA,aAA0B,WACjCU,EAAYV,EAAe,eACpB,OAAOA,GAAmB,SAAU,CAG3C,IAAMW,EAAYX,EAAe,QAAQ,KAAM,EAAE,EAAE,QAAQ,MAAO,EAAE,EAC9DY,EAAQ,IAAI,WAAWD,EAAU,OAAS,CAAC,EACjD,QAAShL,EAAI,EAAGA,EAAIgL,EAAU,OAAQhL,GAAK,EACvCiL,EAAMjL,EAAI,CAAC,EAAI,SAASgL,EAAU,OAAOhL,EAAG,CAAC,EAAG,EAAE,EAEtD+K,EAAYE,EAAM,MACtB,KACI,OAAM,IAAI,MAAM,6BAA6B,EAIjD,IAAMpH,EAAM,MAAM,OAAO,OAAO,UAC5B,MACAkH,EACA,OACA,GACA,CAAC,YAAY,CACjB,EAEMG,EAAOT,EAAI,OAAO,YAAY,EAC9BU,EAAO,MAAM,OAAO,OAAO,WAC7B,CAAE,KAAM,OAAQ,KAAM,UAAW,KAAAL,EAAM,KAAAI,CAAK,EAC5CrH,EACA,EACJ,EAEMuH,EAAK,IAAI,SAASD,CAAI,EACtBE,GAAKD,EAAG,UAAU,CAAC,EAAIA,EAAG,UAAU,CAAC,KAAO,EAI5CE,EAAU,OAAOD,EAAI,GAAU,EAAE,SAAS,EAAG,GAAG,EAGtD,YAAK,WAAW,OAAQ,iCAAkC,CACtD,QAAST,EAAkB,UAAU,EAAG,EAAE,EAAI,MAC9C,SAAUC,EAAmB,UAAU,EAAG,EAAE,EAAI,MAChD,UAAWS,EAAQ,OACnB,UAAW,KAAK,IAAI,CACxB,CAAC,EAEMA,CACX,OAAS5M,EAAO,CACZ,WAAK,WAAW,QAAS,yBAA0B,CAC/C,MAAOA,EAAM,QACb,gBAAiB,OAAO2L,EACxB,WAAY,CAAC,CAACC,EACd,YAAa,CAAC,CAACC,EACf,UAAW,KAAK,IAAI,CACxB,CAAC,EACK,IAAI,MAAM,2BAA2B7L,EAAM,OAAO,EAAE,CAC9D,CACJ,CAUA,kBAAkB6M,EAAO,CAKrB,GAAI,CAAC,KAAK,kBAAmB,MAAO,GACpC,GAAI,CACA,OAAO,SAAS,cAAcA,CAAK,CACvC,MAAY,CACR,MAAO,EACX,CACJ,CAGA,SAAU,CAAE,OAAO,KAAK,iBAAmB,MAAQ,CAUnD,oBAAoBC,EAAM,CACtB,GAAI,KAAK,gBAAkB,KAAK,iBAAmBA,EAC/C,MAAM,IAAI,MACN,+CAA+C,KAAK,cAAc,OAAOA,CAAI,GACjF,EAEJ,KAAK,eAAiBA,CAC1B,CAEA,YAAa,CACT,OAAK,KAAK,QACN,KAAK,MAAQ,CACT,KAAM,KACN,gBAAiB,KACjB,iBAAkB,KAClB,UAAW,KACX,WAAY,KACZ,iBAAkB,KAClB,WAAY,KACZ,YAAa,KACb,aAAc,KACd,SAAU,GACV,UAAW,GACX,cAAe,GACf,YAAa,GACb,aAAc,KACd,UAAW,GACX,MAAO,KACP,UAAW,CACf,GAEG,KAAK,KAChB,CAUA,WAAWC,EAAMC,EAAa,CAC1B,IAAMzC,EAAK,KAAK,MACZA,GAAI,QAAS,aAAaA,EAAG,KAAK,EAAGA,EAAG,MAAQ,MACpD,KAAK,WAAW,QAAS,yBAA0B,CAAE,KAAAwC,CAAK,CAAC,EAC3D,GAAI,CAAE,KAAK,mBAAmBC,EAAa,QAAQ,CAAG,MAAY,CAAC,CACnE,GAAI,CAAE,KAAK,iBAAiB,QAAQ,CAAG,MAAY,CAAC,CACpD,GAAI,CAAE,KAAK,WAAW,CAAG,MAAY,CAAC,CAC1C,CAGA,MAAM,YAAY7H,EAAK,CACnB,OAAO,IAAI,WAAW,MAAM,OAAO,OAAO,UAAU,OAAQA,CAAG,CAAC,CACpE,CAOA,MAAM,oBAAoB8H,EAAM,CAC5B,GAAI,CAAC,KAAK,aAAa,WAAa,CAAC,KAAK,cAAc,UACpD,MAAM,IAAI,MAAM,+BAA+B,EAEnD,IAAMrL,EAAOsL,GAAc,CACvB,KAAAD,EACA,SAAU,MAAM,KAAK,YAAY,KAAK,YAAY,SAAS,EAC3D,UAAW,MAAM,KAAK,YAAY,KAAK,aAAa,SAAS,CACjE,CAAC,EAEKE,EAAa,MAAMC,GADV,MAAOnN,GAAM,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,UAAWA,CAAC,CAAC,EACnC2B,CAAI,EAC9C2I,EAAK,KAAK,WAAW,EAC3B,OAAAA,EAAG,KAAO0C,EACV1C,EAAG,UAAY3I,EACR,CAAE,KAAAA,EAAM,WAAAuL,CAAW,CAC9B,CAMA,MAAM,qBAAqBnL,EAAM,CAAE,WAAAqL,EAAa,KAAM,WAAAC,EAAa,IAAU,GAAK,EAAI,CAAC,EAAG,CACtF,IAAMxK,EAAM,KAAK,gBAAgB,kBAAkB,IACnD,GAAI,CAACA,EAAK,MAAM,IAAI,MAAM,sCAAsC,EAEhE,IAAMmK,EAAOjL,IAASuL,GAAU,MAAQC,GAAQ,MAAQA,GAAQ,OAC1D,CAAE,WAAAL,CAAW,EAAI,MAAM,KAAK,oBAAoBF,CAAI,EAEpDQ,EAAMC,GAAa5K,CAAG,EACtByJ,EAAQoB,GAAW,CACrB,KAAA3L,EACA,YAAa,KAAK,IAAI,EAAIsL,EAC1B,UAAW,CAAE,GAAGG,EAAK,WAAYG,GAAoBH,EAAI,UAAU,CAAE,EACrE,WAAAN,EACA,GAAInL,IAASuL,GAAU,OAAS,CAAE,WAAAF,CAAW,EAAI,CAAC,CACtD,CAAC,EAEK9C,EAAK,KAAK,WAAW,EAC3B,OAAAA,EAAG,gBAAkBgC,EAErB,KAAK,WAAW,OAAQ,wBAAyB,CAC7C,KAAMvK,IAASuL,GAAU,MAAQ,QAAU,SAC3C,MAAOhB,EAAM,OACb,WAAYqB,GAAoBH,EAAI,UAAU,EAAE,MACpD,CAAC,EAEM,CAAE,MAAAlB,EAAO,KAAMsB,GAAetB,CAAK,CAAE,CAChD,CAMA,2BAA2BA,EAAOuB,EAAc,CAC5C,IAAMC,EAAOC,GAAWzB,CAAK,EAC7B,GAAIwB,EAAK,OAASD,EACd,MAAM,IAAI,MACN,eAAeA,IAAiBP,GAAU,MAAQ,aAAe,QAAQ,sBAC7E,EAEJ,GAAI,CAACQ,EAAK,WAKN,MAAM,IAAI,MAAM,0CAA0C,EAE9D,IAAMxD,EAAK,KAAK,WAAW,EAC3B,OAAAA,EAAG,iBAAmBgC,EACtBhC,EAAG,iBAAmBwD,EAAK,WACpBA,CACX,CAMA,MAAM,qBAAsB,CACxB,IAAMxD,EAAK,KAAK,WAAW,EAC3B,GAAI,EAAAA,EAAG,WAAaA,EAAG,UAGvB,IAFAA,EAAG,UAAY,KAAK,IAAI,EAEpB,CAACA,EAAG,WAAa,CAACA,EAAG,iBAAmB,CAACA,EAAG,kBAAoB,CAACA,EAAG,iBAAkB,CACtF,KAAK,WAAW,mBACZ,iHAAiH,EACrH,MACJ,CAEAA,EAAG,MAAQ,WAAW,IAAM,CACnBA,EAAG,WACJ,KAAK,WAAW,UACZ,4FAA4F,CAExG,EAAGhL,EAA4B,4BAA4B,EAE3D,GAAI,CACA,KAAK,YAAY,KAAK,KAAK,UAAU,CACjC,KAAMA,EAA4B,cAAc,SAChD,EAAG,EACH,KAAM,OAAO,0BAA0B,oBAAoBgL,EAAG,UAAU,OAAO,MAC3EA,EAAG,UAAU,WAAYA,EAAG,UAAU,WAAaA,EAAG,UAAU,UAAU,CAAC,CACnF,CAAC,CAAC,EACFA,EAAG,SAAW,GACd,KAAK,WAAW,OAAQ,qBAAsB,CAAE,MAAOA,EAAG,UAAU,MAAO,CAAC,CAChF,MAAgB,CACZ,KAAK,WAAW,mBACZ,sEAAsE,CAC9E,EACJ,CAOA,MAAM,0BAA0B0D,EAAQ,CACpC,IAAMC,EAAI3O,EAA4B,cAChCgL,EAAK,KAAK,WAAW,EAE3B,GAAI,CAAC,KAAK,QAAQ,EAAG,CAIjB,KAAK,WAAW,QAAS,sDAAuD,CAC5E,YAAa0D,GAAQ,IACzB,CAAC,EACD,MACJ,CAEA,GAAI,CACA,GAAIA,EAAO,OAASC,EAAE,SAAU,CAC5B,GAAI3D,EAAG,WAAY,CAGf,KAAK,WAAW,iBACZ,iFAAiF,EACrF,MACJ,CACA,IAAMgC,EAAQ,IAAI,WAAW,OAAO,0BAA0B,oBAAoB,OAAO0B,EAAO,MAAQ,EAAE,CAAC,CAAC,EAI5G,MAAME,GAAqB,OAAO,OAAQ5B,EAAOhC,EAAG,gBAAgB,EAEpE,IAAM3I,EAAOwM,GAAc7B,CAAK,EAC1B8B,EAAe9D,EAAG,OAASiD,GAAQ,MAAQA,GAAQ,OAASA,GAAQ,MAC1E,GAAI5L,EAAK,OAASyM,EAAc,CAC5B,KAAK,WAAW,gBACZ,6FAA6F,EACjG,MACJ,CAEA9D,EAAG,WAAagC,EAChBhC,EAAG,YAAc,MAAM,OAAO,OAAO,UACjC,OAAQ3I,EAAK,SAAU,CAAE,KAAM,OAAQ,WAAY,OAAQ,EAAG,GAAO,CAAC,CAAC,EAC3E2I,EAAG,aAAe,MAAM,OAAO,OAAO,UAClC,OAAQ3I,EAAK,UAAW,CAAE,KAAM,QAAS,WAAY,OAAQ,EAAG,GAAO,CAAC,QAAQ,CAAC,EAErF,MAAM,KAAK,sBAAsB,EACjC,MACJ,CAEA,GAAIqM,EAAO,OAASC,EAAE,UAAW,CAC7B,IAAMI,EAAM,IAAI,WAAW,OAAO,0BAA0B,oBAAoB,OAAOL,EAAO,KAAO,EAAE,CAAC,CAAC,EACzG,GAAI,CAAC1D,EAAG,YAAc,CAACA,EAAG,aAAc,CAGpCA,EAAG,aAAe+D,EAClB,MACJ,CACA,MAAM,KAAK,iBAAiBA,CAAG,EAC/B,MACJ,CACJ,OAAStO,EAAO,CACZ,IAAM+M,EAAO/M,GAAO,MAAQ,mBACtBgE,EAAU+I,IAAS,sBACnB,yIACA,0EACN,KAAK,WAAWA,EAAM/I,CAAO,CACjC,CACJ,CAMA,MAAM,uBAAwB,CAC1B,IAAMuG,EAAK,KAAK,WAAW,EAC3B,GAAIA,EAAG,aAAe,CAACA,EAAG,YAAc,CAACA,EAAG,UAAW,OAYvD,KAAK,qBAAuB,GAE5B,IAAMgE,EAAUhE,EAAG,OAASiD,GAAQ,MACpCjD,EAAG,WAAaiE,GAAgB,CAC5B,gBAAiBD,EAAUhE,EAAG,gBAAkBA,EAAG,iBACnD,iBAAkBgE,EAAUhE,EAAG,iBAAmBA,EAAG,gBACrD,UAAWgE,EAAUhE,EAAG,UAAYA,EAAG,WACvC,WAAYgE,EAAUhE,EAAG,WAAaA,EAAG,SAC7C,CAAC,EAID,KAAK,YAAc,MAAMkE,GAAqB,OAAO,OAAQlE,EAAG,UAAU,EAE1E,KAAK,cAAgBA,EAAG,YACxB,KAAK,kBAAoBA,EAAG,YAE5B,IAAMmE,EAAc,MAAM,OAAO,0BAA0B,iBACvD,KAAK,YAAY,WAAYnE,EAAG,YAAa,KAAK,WAAW,EAEjE,MAAM,KAAK,mBACPmE,EAAY,WAAYA,EAAY,OAAQA,EAAY,YAAaA,EAAY,WAAW,EAEhG,MAAM,KAAK,mBAAmBA,EAA+BH,CAAO,EACpEhE,EAAG,YAAc,GAKjB,IAAM+D,EAAM,IAAI,WAAW,MAAM,OAAO,OAAO,KAC3C,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG,KAAK,aAAa,WAAYK,GAAapE,EAAG,UAAU,CAAC,CAAC,EAOlG,GANA,KAAK,YAAY,KAAK,KAAK,UAAU,CACjC,KAAMhL,EAA4B,cAAc,UAChD,IAAK,OAAO,0BAA0B,oBAAoB+O,EAAI,MAAM,CACxE,CAAC,CAAC,EACF/D,EAAG,UAAY,GAEXA,EAAG,aAAc,CACjB,IAAMqE,EAAOrE,EAAG,aAChBA,EAAG,aAAe,KAClB,MAAM,KAAK,iBAAiBqE,CAAI,CACpC,CACJ,CAGA,MAAM,iBAAiBN,EAAK,CACxB,IAAM/D,EAAK,KAAK,WAAW,EAC3B,GAAIA,EAAG,cAAe,OAItB,GAAI,CAFO,MAAM,OAAO,OAAO,OAC3B,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGA,EAAG,aAAc+D,EAAKK,GAAapE,EAAG,UAAU,CAAC,EAChF,CACL,KAAK,WAAW,YACZ,qGAAqG,EACzG,MACJ,CACAA,EAAG,cAAgB,GAInB,KAAK,iBAAmB,MAAMsE,GAAqB,OAAO,OAAQ,CAC9D,eAAgB,KAAK,YAAY,WACjC,kBAAmBtE,EAAG,YACtB,WAAYA,EAAG,UACnB,CAAC,EAED,IAAMqB,EAAU,KAAK,wBACfC,EAAW,KAAK,qBAClBD,GAAWC,GAAU,KAAK,qBAAqBD,EAASC,CAAQ,EAEpEtB,EAAG,UAAY,GACXA,EAAG,QAAS,aAAaA,EAAG,KAAK,EAAGA,EAAG,MAAQ,MAEnD,KAAK,iBAAiB,cAAgB,GACtC,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,iBAAiB,4BAA8B,GAEpD,KAAK,WAAW,OAAQ,qCAAsC,CAC1D,UAAW,KAAK,IAAI,EAAIA,EAAG,UAC3B,cAAe,KAAK,kBAAkB,IAAM,EAChD,CAAC,EAED,GAAI,CAAE,KAAK,gBAAgB,KAAK,cAAc,CAAG,MAAY,CAAC,CAC9D,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,CAC9B,CAOA,sBAAsB+B,EAAW,CAC7B,GAAI,CACA,GAAI,CAACA,GAAa,OAAOA,GAAc,SACnC,MAAM,IAAI,MAAM,6BAA6B,EAIjD,OAAO,OAAO,0BAA0B,gBAAgBA,CAAS,CACrE,OAAStM,EAAO,CACZ,WAAK,WAAW,QAAS,kCAAmC,CACxD,MAAOA,EAAM,QACb,UAAW,OAAOsM,EAClB,YAAaA,GAAW,QAAU,CACtC,CAAC,EACK,IAAI,MAAM,oCAAoCtM,EAAM,OAAO,EAAE,CACvE,CACJ,CAMA,oCAAoC8J,EAAS,4BAA6B,CACtE,GAAI,CACA,KAAK,WAAW,QAAS,4EAAsE,CAC3F,OAAQA,EACR,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,KAAK,gBAAgB,EACrB,KAAK,kBAAkB,KAAK,cAAe,gBAAgB,EAC3D,KAAK,kBAAkB,KAAK,OAAQ,gBAAgB,EACpD,KAAK,kBAAkB,KAAK,YAAa,gBAAgB,EAGzD,KAAK,mBAAmB,EAGxB,KAAK,iBAAiB,EAGtB,KAAK,WAAa,KAClB,KAAK,iBAAmB,KACxB,KAAK,eAAiB,KACtB,KAAK,aAAe,KACpB,KAAK,wBAA0B,KAC/B,KAAK,qBAAuB,KAG5B,KAAK,WAAW,EAGhB,KAAK,mBAAmB,+GAAyG,QAAQ,CAE7I,OAAS9J,EAAO,CACZ,KAAK,WAAW,QAAS,mCAAoC,CAAE,MAAOA,EAAM,OAAQ,CAAC,CACzF,CACJ,CAcA,2BAA4B,CACxB,GAAI,CACA,GAAI,CAAC,KAAK,wBACN,MAAM,IAAI,MAAM,4DAA4D,EAGhF,OAAO,KAAK,uBAChB,OAASA,EAAO,CACZ,WAAK,WAAW,QAAS,yCAA0C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACrFA,CACV,CACJ,CAMA,6BAA8B,CAC1B,KAAK,qBAAuB,GAC5B,KAAK,WAAW,OAAQ,kEAAyD,CAC7E,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,mBAAmB,sDAA6C,QAAQ,CACjF,CAKA,4BAA6B,CACzB,KAAK,qBAAuB,GAC5B,KAAK,WAAW,OAAQ,2CAAuC,CAC3D,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,mBAAmB,oCAAgC,QAAQ,CACpE,CAmBA,MAAM,mBAAmB0O,EAAaI,EAAa,CAC/C,IAAMC,EAAcL,GAAa,YACjC,GAAI,CAACK,EAAa,MAAO,GAEzB,GAAI,CAAC,KAAK,qBACN,YAAK,WAAW,OAAQ,mFAA+E,CACnG,aAAcxP,EAA4B,eAC9C,CAAC,EACD,OAAO,0BAA0B,cAAcwP,CAAW,EACnD,GAGX,GAAI,CACA,IAAMC,EAAgB,KAAK,eAAiB,KAAK,kBACjD,GAAI,CAACA,GAAiB,CAAC,KAAK,aAAa,WACrC,MAAM,IAAI,MAAM,iCAAiC,EAGrD,IAAMC,EAAU,IAAIC,GACpB,aAAMD,EAAQ,KAAK,CACf,aAAcF,EACd,YAAa,IAAI,WAAW,KAAK,aAAe,CAAC,CAAC,EAClD,eAAgB,KAAK,YAAY,WACjC,gBAAiBC,EACjB,YAAAF,CACJ,CAAC,EAED,KAAK,SAAWG,EAChB,KAAK,iBAAiB,OAAS,GAC/B,KAAK,WAAW,OAAQ,6EAAkE,CACtF,KAAMH,EAAc,YAAc,WACtC,CAAC,EACM,EACX,OAAS9O,EAAO,CACZ,YAAK,SAAW,KAChB,KAAK,iBAAiB,OAAS,GAC/B,KAAK,WAAW,QAAS,kFAA8E,CACnG,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,EACX,QAAE,CAGE,OAAO,0BAA0B,cAAc+O,CAAW,CAC9D,CACJ,CAGA,iBAAkB,CACd,MAAO,CAAC,CAAC,KAAK,UAAU,aAC5B,CAEA,MAAM,4BAA6B,CAC/B,GAAI,CACA,KAAK,WAAW,OAAQ,mDAA6C,CACjE,iBAAkB,KAAK,iBACvB,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,IAAMI,EAAmB,MAAM,OAAO,0BAA0B,oBAAoB,EAEpF,GAAI,CAACA,GAAoB,CAAC,KAAK,6BAA6BA,CAAgB,EACxE,MAAM,IAAI,MAAM,2CAA2C,EAI/D,IAAMC,EAAY,KAAK,gBAAgB,WAAa,WAAW,KAAK,IAAI,CAAC,GACzE,YAAK,kBAAkB,IAAIA,EAAW,CAClC,QAASD,EACT,UAAW,KAAK,IAAI,EACpB,UAAWC,CACf,CAAC,EAED,KAAK,WAAW,OAAQ,+CAA2C,CAC/D,UAAW,KAAK,IAAI,CACxB,CAAC,EAEMD,CACX,OAASnP,EAAO,CACZ,WAAK,WAAW,QAAS,gDAA4C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACvF,IAAI,MAAM,oCAAoCA,EAAM,OAAO,EAAE,CACvE,CACJ,CAMA,MAAM,kBAAmB,CACrB,GAAI,CACA,KAAK,WAAW,OAAQ,qDAA+C,CACnE,aAAc,KAAK,QAAQ,KAC3B,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,OAAW,CAACqP,EAASC,CAAM,IAAK,KAAK,QAAQ,QAAQ,EAC7CA,EAAO,eACP,KAAK,kBAAkBA,EAAO,cAAe,cAAc,EAE3DA,EAAO,QACP,KAAK,kBAAkBA,EAAO,OAAQ,cAAc,EAEpDA,EAAO,aACP,KAAK,kBAAkBA,EAAO,YAAa,cAAc,EAI7DA,EAAO,cAAgB,KACvBA,EAAO,OAAS,KAChBA,EAAO,YAAc,KACrBA,EAAO,eAAiB,KAI5B,KAAK,QAAQ,MAAM,EAGnB,MAAM,KAAK,uBAAuB,EAElC,KAAK,WAAW,OAAQ,iDAA6C,CACjE,UAAW,KAAK,IAAI,CACxB,CAAC,CAEL,OAAStP,EAAO,CACZ,KAAK,WAAW,QAAS,iDAA6C,CAAE,MAAOA,EAAM,OAAQ,CAAC,CAClG,CACJ,CAMA,MAAM,oBAAqB,CACvB,GAAI,CACA,KAAK,WAAW,OAAQ,0CAAoC,CACxD,mBAAoB,KAAK,kBAAkB,KAC3C,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,OAAW,CAACoP,EAAWG,CAAO,IAAK,KAAK,kBAAkB,QAAQ,EAC1DA,EAAQ,SAAS,YACjB,KAAK,kBAAkBA,EAAQ,QAAQ,WAAY,oBAAoB,EAEvEA,EAAQ,SAAS,WACjB,KAAK,kBAAkBA,EAAQ,QAAQ,UAAW,oBAAoB,EAI1EA,EAAQ,QAAU,KAClBA,EAAQ,UAAY,KACpBA,EAAQ,UAAY,KAIxB,KAAK,kBAAkB,MAAM,EAG7B,MAAM,KAAK,uBAAuB,EAElC,KAAK,WAAW,OAAQ,sCAAkC,CACtD,UAAW,KAAK,IAAI,CACxB,CAAC,CAEL,OAASvP,EAAO,CACZ,KAAK,WAAW,QAAS,uCAAmC,CAAE,MAAOA,EAAM,OAAQ,CAAC,CACxF,CACJ,CAMA,MAAM,oBAAoBG,EAAaE,EAAK,CACxC,GAAI,CACA,GAAI,CAAC,KAAK,cACN,MAAM,IAAI,MAAM,8CAA8C,EAIlE,IAAMmP,EAAgB,OAAOrP,GAAgB,SAAWA,EAAc,KAAK,UAAUA,CAAW,EAU1FsP,EAAmB,CACrB,KAAM,yBACN,cATkB,MAAM,OAAO,0BAA0B,mBACzDD,EACA,KAAK,cACLnP,CACJ,EAMI,IAAKA,EACL,UAAW,KAAK,IAAI,EACpB,eAAgB,KAAK,cACzB,EAEA,OAAO,KAAK,UAAUoP,CAAgB,CAC1C,OAASzP,EAAO,CACZ,WAAK,WAAW,QAAS,iCAAkC,CAAE,MAAOA,EAAM,OAAQ,CAAC,EAC7E,IAAI,MAAM,mCAAmCA,EAAM,OAAO,EAAE,CACtE,CACJ,CAMA,MAAM,oBAAoB0P,EAAwB,CAC9C,GAAI,CACA,IAAMD,EAAmB,KAAK,MAAMC,CAAsB,EAE1D,GAAID,EAAiB,OAAS,yBAC1B,MAAM,IAAI,MAAM,qCAAqC,EAIzD,GAAIA,EAAiB,iBAAmB,KAAK,eACzC,MAAM,IAAI,MAAM,oDAAoD,EAIxE,IAAMpP,EAAM,KAAK,oBAAoBoP,EAAiB,IAAK,cAAc,EAEzE,GAAI,CAAC,KAAK,cACN,MAAM,IAAI,MAAM,yDAAyD,EAU7E,MAAO,CACH,cAPkB,MAAM,OAAO,0BAA0B,mBACzDA,EAAiB,cACjB,KAAK,cACLA,EAAiB,GACrB,EAII,IAAKpP,CACT,CACJ,OAASL,EAAO,CACZ,WAAK,WAAW,QAAS,iCAAkC,CAAE,MAAOA,EAAM,OAAQ,CAAC,EAC7E,IAAI,MAAM,mCAAmCA,EAAM,OAAO,EAAE,CACtE,CACJ,CAOA,wBAAwB+J,EAAa,GAAM,CACvC,IAAM4F,EAAa,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,aAEhE,GAAI,CAACA,GAAc5F,EACf,MAAM,IAAI,MAAM,iCAAiC,EAGrD,OAAO4F,CACX,CAOA,MAAM,gCAAiC,CACnC,GAAI,CAEA,GAAI,KAAK,eAAiB,KAAK,QAAU,KAAK,YAC1C,MAAO,GAIX,IAAMC,EAAU,CAAC,EAAE,KAAK,aAAa,aAAe,KAAK,eAAiB,KAAK,oBACzEZ,EAAgB,KAAK,eAAiB,KAAK,kBACjD,GAAI,CAACY,GAAW,CAACZ,GAAiB,CAAC,KAAK,YACpC,MAAO,GAIX,IAAMN,EAAc,MAAM,OAAO,0BAA0B,iBACvD,KAAK,YAAY,WACjBM,EACA,KAAK,WACT,EAEA,aAAM,KAAK,mBACPN,EAAY,WACZA,EAAY,OACZA,EAAY,YACZA,EAAY,WAChB,EAEO,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,YACxD,OAAS1O,EAAO,CACZ,YAAK,WAAW,QAAS,yCAA0C,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACpF,EACX,CACJ,CAOA,eAAeiC,EAAM,CACjB,GAAI,OAAOA,GAAS,SAChB,GAAI,CACA,IAAMgM,EAAS,KAAK,MAAMhM,CAAI,EAC9B,OAAOgM,EAAO,MAAQA,EAAO,KAAK,WAAW,OAAO,CACxD,MAAQ,CACJ,MAAO,EACX,CAGJ,OAAI,OAAOhM,GAAS,UAAYA,EAAK,KAC1BA,EAAK,KAAK,WAAW,OAAO,EAGhC,EACX,CAOA,iBAAiBA,EAAM,CACnB,IAAM4N,EAAc,CAChBtQ,EAA4B,cAAc,UAC1CA,EAA4B,cAAc,aAC1CA,EAA4B,cAAc,sBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,4BAC1CA,EAA4B,cAAc,gBAC1CA,EAA4B,cAAc,iBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,kBAC9C,EAEA,GAAI,OAAO0C,GAAS,SAChB,GAAI,CACA,IAAMgM,EAAS,KAAK,MAAMhM,CAAI,EAC9B,OAAO4N,EAAY,SAAS5B,EAAO,IAAI,CAC3C,MAAQ,CACJ,MAAO,EACX,CAGJ,OAAI,OAAOhM,GAAS,UAAYA,EAAK,KAC1B4N,EAAY,SAAS5N,EAAK,IAAI,EAGlC,EACX,CAOA,eAAeA,EAAM,CACjB,GAAI,OAAOA,GAAS,SAChB,GAAI,CACA,IAAMgM,EAAS,KAAK,MAAMhM,CAAI,EAC9B,OAAOgM,EAAO,OAAS1O,EAA4B,cAAc,MAC1D0O,EAAO,gBAAkB,EACpC,MAAQ,CACJ,MAAO,EACX,CAGJ,OAAI,OAAOhM,GAAS,UAAYA,IAAS,KAC9BA,EAAK,OAAS1C,EAA4B,cAAc,MACxD0C,EAAK,gBAAkB,GAG3B,EACX,CASA,mBAAmBiI,EAAWC,EAAc2F,EAAW,KAAM,CACzD,GAAI,CACA,OAAO5F,EAAU,CACrB,OAASlK,EAAO,CACZ,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,0BAAsB,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAEhG8P,CACX,CACJ,CASA,MAAM,wBAAwB5F,EAAWC,EAAc2F,EAAW,KAAM,CACpE,GAAI,CACA,OAAO,MAAM5F,EAAU,CAC3B,OAASlK,EAAO,CACZ,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,0BAAsB,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAEhG8P,CACX,CACJ,CAQA,gBAAgB7N,EAAM,CAClB,GAAI,OAAOA,GAAS,SAChB,GAAI,CAEA,OADe,KAAK,MAAMA,CAAI,EAChB,MAAQ,IAC1B,MAAQ,CACJ,OAAO,IACX,CAGJ,OAAI,OAAOA,GAAS,UAAYA,IAAS,MAC9BA,EAAK,MAAQ,IAI5B,CAKA,yBAA0B,CACtB,KAAK,8BAAgC,KACrC,KAAK,6BAA+B,GACpC,KAAK,2BAA6B,GAClC,KAAK,sBAAwB,GAC7B,KAAK,qBAAuB,KAC5B,KAAK,sBAAwB,KAC7B,KAAK,2BAA6B,GAClC,KAAK,mCAAqC,GAC1C,KAAK,+BAAiC,GACtC,KAAK,iCAAmC,GACxC,KAAK,oCAAsC,GAC3C,KAAK,yCAA2C,GAChD,KAAK,gCAAkC,GACvC,KAAK,yBAA2B,KAChC,KAAK,oCAAsC,GAC3C,KAAK,6BAA+B,IACxC,CAOA,mBAAmB8N,EAAQ,CAEvB,OADwB,OAAO,OAAOxQ,EAA4B,gBAAgB,EAC3D,SAASwQ,CAAM,CAC1C,CAIA,cAAe,CAEP,KAAK,WAAW,KAAO,MACvB,KAAK,WAAW,MAAM,EACtB,KAAK,WAAW,QAAS,gDAAyC,GAItE,IAAMnL,EAAM,KAAK,IAAI,EACfoL,EAAS,IAGXC,EAAkB,EACtB,OAAW,CAAC9K,EAAKwB,CAAK,IAAK,KAAK,WAAW,QAAQ,EAC3CA,EAAQ,IACRsJ,IAKJA,EAAkB,KAClB,KAAK,WAAW,MAAM,EACtB,KAAK,WAAW,OAAQ,4DAAqD,GAI7E,KAAK,uBAAyB,GAAKA,EAAkB,IACrD,KAAK,uBAAyB,KAAK,IAAI,EAAG,KAAK,uBAAyB,CAAC,IAIzE,CAAC,KAAK,oBAAsB,KAAK,IAAI,EAAI,KAAK,mBAAqB,OACnE,KAAK,eAAe,EACpB,KAAK,mBAAqB,KAAK,IAAI,IAInC,CAAC,KAAK,qBAAqB,YAAY,aACvC,KAAK,IAAI,EAAI,KAAK,qBAAqB,YAAY,YAAc,OAEjE,KAAK,8BAA8B,EAAE,MAAMjQ,GAAS,CAChD,KAAK,WAAW,QAAS,0BAA2B,CAChD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EACD,KAAK,qBAAqB,YAAY,YAAc,KAAK,IAAI,EAErE,CAIA,kBAAmB,CAEf,IAAMiE,EAAQ,CACV,iBAAkB,KAAK,kBACvB,UAAW,KAAK,WAChB,gBAAiB,KAAK,iBACtB,cAAe,KAAK,WAAW,KAC/B,YAAa,KAAK,aAClB,mBAAoB,KAAK,wBAA0B,EACnD,sBAAuB,KAAK,2BAA6B,EACzD,aAAc,KAAK,mBAAqB,GAAK,WAAa,QAC9D,EAGMiM,EAAiB,CAAC,EACxB,OAAW,CAAC/K,EAAKM,CAAK,IAAK,OAAO,QAAQxB,CAAK,EACvC,OAAOwB,GAAU,UAAY,KAAK,0BAA0BA,CAAK,EACjEyK,EAAe/K,CAAG,EAAI,4BAEtB+K,EAAe/K,CAAG,EAAIM,EAI9B,OAAOyK,CACX,CAIA,MAAM,0BAA2B,CAE7B,KAAK,iBAAmB,GAGxB,KAAK,WAAW,MAAM,EAGlB,KAAK,yBACL,KAAK,uBAAyB,GAIlC,KAAK,WAAa,IAAM,CAEhB,UAAU,CAAC,IAAM,SAAW,KAAK,kBAAkB,OACnD,KAAK,iBAAiB,MAAM,iFAA0E,CAE9G,EAGA,KAAK,wBAA0B,KAAK,gBACpC,KAAK,yBAA2B,KAAK,iBACrC,KAAK,yBAA2B,KAAK,iBACrC,KAAK,kCAAoC,KAAK,0BAG9C,KAAK,gBAAkB,IAAM,qBAC7B,KAAK,iBAAmB,KAAO,CAAE,MAAO,kBAAmB,GAC3D,KAAK,iBAAmB,IAAM,GAC9B,KAAK,0BAA4B,IAAM,GAGvC,MAAM,KAAK,uBAAuB,EAGlC,KAAK,kBAAkB,QAAQ,mFAA4E,CAC/G,CAMA,qBAAsB,CAClB,KAAK,WAAW,OAAQ,6DAAsD,EAG9E,KAAK,gBAAkB,KAAK,0BAA6B5K,GAAQA,GACjE,KAAK,iBAAmB,KAAK,2BAA8BrD,GAASA,GACpE,KAAK,iBAAmB,KAAK,2BAA6B,IAAM,IAChE,KAAK,0BAA4B,KAAK,oCAAsC,IAAM,IAGlF,KAAK,uBAAyB,EAE9B,KAAK,WAAW,OAAQ,0CAAqC,CACjE,CAIA,iBAAiB+B,EAAS/B,EAAM,CAC5B,GAAI,CAACA,GAAQ,OAAOA,GAAS,SAAU,MAAO,GAG9C,IAAMkO,EAAa,KAAK,UAAUlO,CAAI,EAGtC,GAAI,KAAK,0BAA0B+B,CAAO,EACtC,YAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,sEAA+D,EACvF,GAIX,GAAI,KAAK,0BAA0BmM,CAAU,EACzC,YAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,mEAA4D,EACpF,GAIX,IAAMC,EAAoB,CACtB,SAAU,QAAS,WAAY,aAAc,OAC7C,cAAe,OAAQ,YAAa,cAAe,UAAW,UAC9D,aAAc,MAAO,WAAY,UAAW,MAAO,SACnD,MAAO,OAAQ,SAAU,QAAS,KAAM,QAC5C,EAEMC,EAAkBF,EAAW,YAAY,EAE/C,QAAW5I,KAAW6I,EAClB,GAAIC,EAAgB,SAAS9I,CAAO,GAAK,CAAC,KAAK,qBAAqB,IAAIA,CAAO,EAC3E,YAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,iEAA0DA,CAAO,EAAE,EAC3F,GAKf,OAAW,CAACpC,EAAKM,CAAK,IAAK,OAAO,QAAQxD,CAAI,EAC1C,GAAI,OAAOwD,GAAU,UAAY,KAAK,gBAAgBA,CAAK,EACvD,YAAK,yBAAyB,EAC9B,KAAK,kBAAkB,QAAQ,wEAAiEN,CAAG,EAAE,EAC9F,GAIf,MAAO,EACX,CAEA,wBAAyB,CACrB,GAAI,CACA,GAAI,KAAK,gBAAkB,GACvB,OAKJ,GAFA,KAAK,WAAW,OAAQ,gEAAyD,EAE7E,KAAK,mBAAoB,CACzB,KAAK,WAAW,OAAQ,iDAA4C,EACpE,MACJ,CAIA,GAAI,CADiB,CAAC,EAAE,KAAK,aAAe,KAAK,YAAY,aAAe,QACzD,CAEf,GADA,KAAK,WAAW,OAAQ,4EAAkE,EACtF,KAAK,YAAa,CAClB,IAAMmL,EAAc,IAAM,CACtB,KAAK,WAAW,OAAQ,6DAAsD,EAC9E,KAAK,uBAAuB,CAChC,EACA,KAAK,YAAY,iBAAiB,OAAQA,EAAa,CAAE,KAAM,EAAK,CAAC,CACzE,CACA,MACJ,CAEA,GAAI,CAAC,KAAK,WAAY,CAClB,KAAK,WAAW,OAAQ,kFAAwE,EAChG,KAAK,+BAA+B,GAAG,EACvC,MACJ,CAUA,GAPI,KAAK,qBACL,KAAK,WAAW,OAAQ,qDAA8C,EACtE,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAI1B,CAAC,KAAK,eAAiB,CAAC,KAAK,OAAQ,CACrC,KAAK,WAAW,OAAQ,gFAAsE,EAC9F,KAAK,+BAA+B,GAAI,EACxC,MACJ,CAGA,IAAMC,EAAkBxN,GAAY,CAEhC,GAAI,CACA,KAAK,WAAW,OAAQ,oCAA8B,CAAE,QAAAA,CAAQ,CAAC,EAE7D,KAAK,gBACL,KAAK,eAAe,CAAE,KAAM,WAAY,GAAGA,CAAQ,CAAC,CAE5D,OAAShB,EAAG,CACR,KAAK,WAAW,OAAQ,0CAAiC,CAAE,QAASA,EAAE,OAAQ,CAAC,CACnF,CACJ,EAEA,KAAK,mBAAqB,IAAIyO,GAC1B,KACA,KAAK,gBAAkB,KACvBD,EACA,KAAK,aAAe,KACpB,KAAK,gBAAkB,KACvB,KAAK,uBAAyB,IAClC,EAEA,KAAK,oBAAsB,GAE3B,KAAK,WAAW,OAAQ,sEAAiE,EAGzF,IAAM3F,EAAS,KAAK,mBAAmB,gBAAgB,EACvD,KAAK,WAAW,OAAQ,mDAA6C,CAAE,OAAAA,CAAO,CAAC,CAEnF,OAAS5K,EAAO,CACZ,KAAK,WAAW,QAAS,mDAA+C,CAAE,UAAWA,EAAM,YAAY,IAAK,CAAC,EAC7G,KAAK,mBAAqB,KAC1B,KAAK,oBAAsB,EAC/B,CACJ,CAEA,+BAA+BiB,EAAO,CAClC,GAAI,KAAK,gBAAkB,GAAO,OAAO,KACpC,KAAK,+BAA8B,KAAK,6BAA+B,IAAI,KAEhF,IAAMsB,EAAQ,KAAK,kBAAkB,WAAW,IAAM,CAClD,KAAK,6BAA6B,OAAOA,CAAK,EAC9C,KAAK,oBAAoBA,CAAK,EAC1B,KAAK,gBAAkB,IAC3B,KAAK,uBAAuB,CAChC,EAAGtB,CAAK,CAAC,EAET,YAAK,6BAA6B,IAAIsB,CAAK,EACpCA,CACX,CAMA,MAAM,4BAA6B,CAC/B,GAAI,CAEA,MAAM,KAAK,4BAA4B,EAGnC,KAAK,mBAAmB,SACxB,KAAK,wBAAwB,EAI7B,KAAK,kBAAkB,SACvB,KAAK,2BAA2B,CAGxC,OAASvC,EAAO,CACZ,KAAK,WAAW,QAAS,gDAA4C,CAAE,UAAWA,EAAM,YAAY,IAAK,CAAC,CAC9G,CACJ,CAGG,iBAAiByQ,EAAKC,EAAK,CACtB,GAAI,CAAC,OAAO,UAAUD,CAAG,GAAK,CAAC,OAAO,UAAUC,CAAG,EAC/C,MAAM,IAAI,MAAM,+CAA+C,EAEnE,GAAID,GAAOC,EACP,MAAM,IAAI,MAAM,2BAA2B,EAG/C,IAAMC,EAAQD,EAAMD,EAAM,EACpBG,EAAa,KAAK,KAAK,KAAK,KAAKD,CAAK,CAAC,EACvCE,EAAc,KAAK,KAAKD,EAAa,CAAC,EACtCE,GAAQ,GAAKF,GAAc,EAE7BG,EACJ,EAAG,CACC,IAAMC,EAAc,OAAO,gBAAgB,IAAI,WAAWH,CAAW,CAAC,EAEtEE,EAAc,EACd,QAASzP,EAAI,EAAGA,EAAIuP,EAAavP,IAC7ByP,EAAeA,EAAc,IAAOC,EAAY1P,CAAC,EAGrDyP,EAAcA,EAAcD,CAEhC,OAASC,GAAeJ,GAExB,OAAOF,EAAMM,CACjB,CAEA,mBAAmBE,EAAUC,EAAUC,EAAQ,IAAM,CACjD,GAAI,OAAOF,GAAa,UAAY,OAAOC,GAAa,SACpD,MAAM,IAAI,MAAM,iDAAiD,EAErE,GAAID,GAAYC,EACZ,MAAM,IAAI,MAAM,qCAAqC,EAEzD,IAAME,EAAc,KAAK,iBAAiB,EAAGD,CAAK,EAE5CE,GAAQH,EAAWD,GAAYE,EAErC,OAAOF,EAAYG,EAAcC,CACrC,CAEA,yBAA0B,CAatB,MAZa,CACT,aAAc,KAAK,iBAAiB,EAAG,IAAI,EAC3C,cAAe,KAAK,mBAAmB,IAAM,KAAM,GAAI,EACvD,aAAc,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACnE,iBAAkB,CACd,mBAAoB,eAAgB,eAAgB,cAAe,cACnE,WAAY,cAAe,cAAe,SAAU,cAAe,WACvE,EACA,eAAgB,KAAK,iBAAiB,GAAI,GAAG,EAC7C,eAAgB,KAAK,mBAAmB,IAAM,KAAM,GAAI,EACxD,gBAAiB,KAAK,iBAAiB,IAAK,IAAI,CACpD,CAEJ,CAGJ,6BAA8B,CAC1B,KAAK,WAAW,OAAQ,kEAA2D,EAG/E,KAAK,mBAAqB,CAAC,EAE3B,OAAO,KAAK,KAAK,gBAAgB,EAAE,QAAQ3H,GAAW,CACtD,KAAK,mBAAmBA,CAAO,EAAI,EACnC,CAAC,EAED,KAAK,wBAAwB,EAEjC,KAAK,WAAW,OAAQ,oDAAgD,CAAE,YAAa,KAAK,kBAAmB,CAAC,EAEvG,KAAK,+BAA+B,IACrC,KAAK,WAAW,QAAS,0FAAmF,EAExG,KAAK,gBACL,KAAK,eAAe,kBAAmB,CACnC,KAAM,0BACN,QAAS,sEACb,CAAC,GAIT,KAAK,oBAAoB,EAEzB,WAAW,IAAM,CACb,KAAK,gCAAgC,CACzC,EAAGnK,EAA4B,SAAS,mBAAmB,CACnE,CAGA,yBAA0B,CACjB,KAAK,qBAGV,OAAO,KAAK,KAAK,kBAAkB,EAAE,QAAQmK,GAAW,CAIhD,OAHJ,KAAK,iBAAiBA,CAAO,EAAI,GAGrBA,EAAS,CACb,IAAK,iBACD,KAAK,kBAAkB,QAAU,GAC7B,KAAK,YAAY,GACjB,KAAK,2BAA2B,EAEpC,MACJ,IAAK,mBACD,KAAK,mBAAmB,QAAU,GAC9B,KAAK,YAAY,GACjB,KAAK,wBAAwB,EAEjC,MACJ,IAAK,sBACD,KAAK,iBAAiB,QAAU,GAChC,MACJ,IAAK,wBACD,KAAK,yBAAyB,QAAU,GACxC,MACJ,IAAK,qBACD,KAAK,eAAe,QAAU,GAC9B,KACZ,CACJ,CAAC,EAED,KAAK,WAAW,OAAQ,kDAA8C,CAClE,YAAa,KAAK,mBAClB,gBAAiB,KAAK,gBAC1B,CAAC,EACL,CACA,6BAA6B1F,EAAS,CAClC,OAAI,OAAOA,GAAY,SACZA,EAGJ,OAAO,0BAA0B,gBAAgBA,CAAO,CACnE,CAEA,mBAAmBA,EAAShC,EAAO,WAAYsP,EAAO,KAAM,CACxD,GAAI,CAUA,GARA,KAAK,WAAW,QAAS,sCAAgC,CACrD,QAAStN,EACT,KAAMhC,EACN,YAAa,OAAOgC,EACpB,aAAc,CAAC,CAAC,KAAK,SACzB,CAAC,EAGG,OAAOA,GAAY,UAAYA,EAAQ,MAClB,CACjBzE,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,WAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,UAC1CA,EAA4B,cAAc,aAC1CA,EAA4B,cAAc,sBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,4BAC1CA,EAA4B,cAAc,gBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,gBAC9C,EACiB,SAASyE,EAAQ,IAAI,EAAG,CACjC,KAAK,YACL,KAAK,WAAW,OAAQ,kDAA2CA,EAAQ,IAAI,EAAE,EAErF,MACJ,CAIJ,GAAI,OAAOA,GAAY,UAAYA,EAAQ,KAAK,EAAE,WAAW,GAAG,EAC5D,GAAI,CACA,IAAMuN,EAAgB,KAAK,MAAMvN,CAAO,EACxC,GAAIuN,EAAc,MACO,CACjBhS,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,WAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,UAC1CA,EAA4B,cAAc,aAC1CA,EAA4B,cAAc,sBAC1CA,EAA4B,cAAc,uBAC1CA,EAA4B,cAAc,4BAC1CA,EAA4B,cAAc,gBAC1CA,EAA4B,cAAc,oBAC1CA,EAA4B,cAAc,mBAC1CA,EAA4B,cAAc,gBAC9C,EACiB,SAASgS,EAAc,IAAI,EAAG,CACvC,KAAK,YACL,KAAK,WAAW,OAAQ,2DAAoDA,EAAc,IAAI,EAAE,EAEpG,MACJ,CAER,MAAqB,CAErB,CAGJ,IAAMC,EAAYxP,IAAS,WACrB,KAAK,6BAA6BgC,CAAO,EACzCA,EAEN,GAAI,KAAK,UAAW,CAIhB,IAAMyN,EAAYH,GAAQ,OAAO,KAAK,sBAAyB,WACzD,KAAK,qBAAqBA,CAAI,EAC9B,KACN,KAAK,WAAW,QAAS,4CAAsC,CAAE,QAASE,EAAW,KAAAxP,CAAK,CAAC,EAC3F,KAAK,UAAUwP,EAAWxP,EAAMyP,GAAY,MAAS,CACzD,MACI,KAAK,WAAW,OAAQ,2DAAiD,CAEjF,OAASC,EAAK,CACV,KAAK,WAAW,QAAS,0CAAsC,CAAE,UAAWA,GAAK,aAAa,MAAQ,SAAU,CAAC,CACrH,CACJ,CAIA,qBAAsB,CAElB,GAAI,KAAK,gCAAkC,UACvC,OAYJ,GATA,KAAK,8BAAgC,UAIjC,KAAK,WACL,KAAK,mBAHO,iEAGqB,QAAQ,EAIzC,KAAK,UAAW,CAChB,IAAMC,EAAiB,OAAO,QAAQ,KAAK,gBAAgB,EACtD,OAAO,CAAC,CAACxM,EAAKM,CAAK,IAAMA,IAAU,EAAI,EACvC,IAAI,CAAC,CAACN,CAAG,IAAMA,EAAI,QAAQ,MAAO,EAAE,EAAE,QAAQ,WAAY,KAAK,EAAE,KAAK,EAAE,YAAY,CAAC,EACrF,MAAM,EAAG,CAAC,EAEf,KAAK,mBAAmB,qBAAcwM,EAAe,KAAK,IAAI,CAAC,MAAO,QAAQ,CAClF,CACJ,CAGA,sBAAuB,CAEnB,OAAW,CAAClN,EAAalC,CAAK,IAAK,KAAK,YAAY,QAAQ,EACxD,aAAaA,CAAK,EAEtB,KAAK,YAAY,MAAM,EAGvB,OAAW,CAACkC,EAAamN,CAAO,IAAK,KAAK,cAAc,QAAQ,EACxDA,EAAQ,aAAe,QACvBA,EAAQ,MAAM,EAGtB,KAAK,cAAc,MAAM,EAEzB,KAAK,WAAW,OAAQ,qCAA8B,CAC1D,CAMA,MAAM,6BAA8B,CAChC,GAAI,CAEA,KAAK,oBAAsB,MAAM,OAAO,OAAO,YAC3C,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,UAAW,SAAS,CACzB,CAMJ,OAAS5R,EAAO,CACZ,WAAK,WAAW,QAAS,mDAA+C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACtHA,CACV,CACJ,CAEA,MAAM,sBAAsBiC,EAAM,CAC9B,GAAI,CAAC,KAAK,qBAAuB,CAAC,KAAK,iBAAiB,oBACpD,OAAOA,EAGX,GAAI,CAEA,IAAM4P,EAAW,KAAK,kBAClBtS,EAA4B,MAAM,0BAClC,kBACJ,EAGMuS,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAID,CAAS,EAChC,KAAK,oBACL5P,CACJ,EAGM8N,EAAS,IAAI,WAAWxQ,EAA4B,MAAM,0BAA4BuS,EAAU,UAAU,EAChH,OAAA/B,EAAO,IAAI8B,EAAU,CAAC,EACtB9B,EAAO,IAAI,IAAI,WAAW+B,CAAS,EAAGvS,EAA4B,MAAM,yBAAyB,EAEjG,KAAK,WAAW,QAAS,kDAA8C,CACnE,OAAQsS,EAAS,OACjB,SAAU5P,EAAK,WACf,cAAe6P,EAAU,UAC7B,CAAC,EAEM/B,EAAO,MAClB,OAAS/P,EAAO,CACZ,YAAK,WAAW,QAAS,mCAA+B,CACpD,UAAWA,GAAO,aAAa,MAAQ,UACvC,aAAcA,GAAO,SAAW,eACpC,CAAC,EAGGA,EAAM,QAAQ,SAAS,gBAAgB,IACvC,KAAK,iBAAiB,oBAAsB,GAC5C,KAAK,WAAW,OAAQ,kEAAwD,GAG7EiC,CACX,CACJ,CAEA,MAAM,uBAAuBA,EAAM,CAC/B,GAAI,CAAC,KAAK,qBAAuB,CAAC,KAAK,iBAAiB,oBACpD,OAAOA,EAIX,GAAI,EAAEA,aAAgB,cAAgBA,EAAK,WAAa1C,EAA4B,MAAM,0BAA4B,GAClH,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,oGAA6F,EAEnH0C,EAGX,GAAI,CACA,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/B+P,EAAKD,EAAU,MAAM,EAAGxS,EAA4B,MAAM,yBAAyB,EACnF0S,EAAgBF,EAAU,MAAMxS,EAA4B,MAAM,yBAAyB,EAGjG,OAAI0S,EAAc,SAAW,GACrB,KAAK,YACL,KAAK,WAAW,QAAS,mCAA4B,EAElDhQ,GAIO,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAI+P,CAAG,EAC1B,KAAK,oBACLC,CACJ,CAGJ,OAASjS,EAAO,CAEZ,OAAIA,EAAM,OAAS,iBACX,KAAK,YACL,KAAK,WAAW,QAAS,kEAA2D,EAGpF,KAAK,YACL,KAAK,WAAW,OAAQ,yCAAgC,CAAE,QAASA,EAAM,OAAQ,CAAC,EAGnFiC,CACX,CACJ,CAMA,mBAAmBA,EAAM,CACrB,GAAI,CAAC,KAAK,iBAAiB,iBACvB,OAAOA,EAGX,GAAI,CACA,IAAMiQ,EAAejQ,EAAK,WACtBkQ,EAEA,KAAK,cAAc,iBAEnBA,EAAc,KAAK,MAAM,KAAK,OAAO,GAChC,KAAK,cAAc,WAAa,KAAK,cAAc,WAAa,EAAE,EACnE,KAAK,cAAc,WAGvBA,EAAc,KAAK,cAAc,WAIrC,IAAMC,EAAU,OAAO,gBAAgB,IAAI,WAAWD,CAAW,CAAC,EAG5DE,EAAa,IAAI,WAAWH,EAAeC,EAAc,CAAC,EAIhE,OADiB,IAAI,SAASE,EAAW,OAAQ,EAAG,CAAC,EAC5C,UAAU,EAAGH,EAAc,EAAK,EAGzCG,EAAW,IAAI,IAAI,WAAWpQ,CAAI,EAAG,CAAC,EAGtCoQ,EAAW,IAAID,EAAS,EAAIF,CAAY,EAEjCG,EAAW,MACtB,OAASrS,EAAO,CACZ,YAAK,WAAW,QAAS,gCAA4B,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAClGiC,CACX,CACJ,CAEA,oBAAoBA,EAAM,CACtB,GAAI,CAAC,KAAK,iBAAiB,iBACvB,OAAOA,EAGX,GAAI,CACA,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAGrC,GAAI8P,EAAU,OAAS,EACnB,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,kEAAwD,EAE7E9P,EAKX,IAAMiQ,EADW,IAAI,SAASH,EAAU,OAAQ,EAAG,CAAC,EACtB,UAAU,EAAG,EAAK,EAGhD,OAAIG,GAAgB,GAAKA,EAAeH,EAAU,OAAS,GACnD,KAAK,YACL,KAAK,WAAW,OAAQ,4DAAkD,EAEvE9P,GAIU8P,EAAU,MAAM,EAAG,EAAIG,CAAY,EAEpC,MACxB,OAASlS,EAAO,CACZ,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,wCAAoC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAE9GiC,CACX,CACJ,CAMA,4BAA6B,CACzB,GAAI,CAAC,KAAK,kBAAkB,SAAW,CAAC,KAAK,YAAY,EACrD,OAIJ,GAAI,KAAK,iBAAkB,CACvB,KAAK,WAAW,OAAQ,sDAA4C,EACpE,MACJ,CAEA,IAAMqQ,EAAkB,SAAY,CAChC,GAAI,CAAC,KAAK,YAAY,EAAG,CACrB,KAAK,0BAA0B,EAC/B,MACJ,CAEA,GAAI,CACA,IAAMC,EAAc,KAAK,oBAAoB,EAC7C,MAAM,KAAK,gBAAgBA,CAAW,EAGtC,IAAMC,EAAe,KAAK,kBAAkB,qBACxC,KAAK,yBAAyB,KAAK,kBAAkB,YAAa,KAAK,IAAI,KAAK,kBAAkB,YAAa,GAAK,CAAC,EACrH,KAAK,kBAAkB,YAGrBC,EAAe,KAAK,IAAID,EAAcjT,EAA4B,SAAS,yBAAyB,EAE1G,KAAK,iBAAmB,WAAW+S,EAAiBG,CAAY,CACpE,OAASzS,EAAO,CACR,KAAK,YACL,KAAK,WAAW,QAAS,yCAAqC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAEtH,KAAK,0BAA0B,CACnC,CACJ,EAIM0S,EAAWnT,EAA4B,SAAS,oBAChDoT,EAAW,KAAK,IAAI,KAAK,kBAAkB,YAAa,GAAK,EAC7DC,EAAe,KAAK,yBAAyBF,EAAUC,CAAQ,EACrE,KAAK,iBAAmB,WAAWL,EAAiBM,CAAY,CACpE,CAEA,2BAA4B,CACpB,KAAK,mBACL,aAAa,KAAK,gBAAgB,EAClC,KAAK,iBAAmB,KAEhC,CAEA,qBAAsB,CAClB,IAAMC,EAAe,KAAK,yBAAyB,EAAG,KAAK,kBAAkB,SAAS,OAAS,CAAC,EAC1FtL,EAAU,KAAK,kBAAkB,SAASsL,CAAY,EAEtDC,EAAO,KAAK,yBAAyB,KAAK,kBAAkB,QAAS,KAAK,kBAAkB,OAAO,EAEnGC,EAAW,OAAO,gBAAgB,IAAI,WAAWD,CAAI,CAAC,EAE5D,MAAO,CACH,KAAMvT,EAA4B,cAAc,KAChD,QAASgI,EACT,KAAM,MAAM,KAAKwL,CAAQ,EAAE,IAAI9S,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAC5E,UAAW,KAAK,IAAI,EACpB,KAAM6S,EACN,cAAe,GACf,OAAQ,yBACR,OAAQ,OAAO,gBAAgB,IAAI,YAAY,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,CACrE,CACJ,CAMI,kCAAmC,CACvB,KAAK,WAAW,QAAS,wEAAiE,EAGtG,KAAK,iBAAiB,oBAAsB,GAC5C,KAAK,iBAAiB,oBAAsB,GAC5C,KAAK,iBAAiB,sBAAwB,GAG9C,KAAK,iBAAiB,QAAU,GAChC,KAAK,yBAAyB,QAAU,GAGxC,KAAK,aAAa,MAAM,EAGxB,KAAK,4BAA4B,EAErB,KAAK,WAAW,OAAQ,6DAAwD,EAGvF,KAAK,2CACN,KAAK,yCAA2C,GAC5C,KAAK,WACL,KAAK,mBAAmB,wFAAkF,QAAQ,EAG9H,CAEA,MAAM,gBAAgBP,EAAa,CAC/B,GAAK,KAAK,oBAAoB,EAAK,EAInC,GAAI,CACA,KAAK,WAAW,QAAS,iCAA2B,CAChD,WAAY,CAAC,CAACA,EAAY,QAC1B,UAAWA,EAAY,KAAO,IAAM,QAAU,OAClD,CAAC,EAED,IAAMQ,EAAW,KAAK,UAAU,CAC5B,GAAGR,EACH,KAAMhT,EAA4B,cAAc,KAChD,cAAe,GACf,UAAW,KAAK,IAAI,CACxB,CAAC,EAEKyT,EAAa,IAAI,YAAY,EAAE,OAAOD,CAAQ,EAC9CE,EAAgB,MAAM,KAAK,oBAAoBD,EAAY,EAAI,EACrE,KAAK,YAAY,KAAKC,CAAa,EAEnC,KAAK,WAAW,QAAS,2CAAqC,CAC1D,QAASV,EAAY,OACzB,CAAC,CACL,OAASvS,EAAO,CACZ,KAAK,WAAW,QAAS,qCAAiC,CACtD,MAAOA,EAAM,OACjB,CAAC,CACL,CACJ,CAEJ,wBAAyB,CACjB,IAAM4K,EAAS,CACX,mBAAoB,KAAK,iBAAiB,eAC1C,yBAA0B,KAAK,kBAAkB,QACjD,YAAa,CAAC,CAAC,KAAK,iBACpB,SAAU,KAAK,kBAAkB,SACjC,UAAW,CACP,IAAK,KAAK,kBAAkB,YAC5B,IAAK,KAAK,kBAAkB,WAChC,CACJ,EAEA,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,gCAA0B,CAAE,OAAAA,CAAO,CAAC,EAEzDA,CACX,CACJ,6BAA8B,CAClB,KAAK,YACL,KAAK,WAAW,QAAS,4CAAqC,EAGlE,KAAK,iBAAiB,eAAiB,GACvC,KAAK,kBAAkB,QAAU,GACjC,KAAK,0BAA0B,EAE3B,KAAK,YACL,KAAK,WAAW,OAAQ,8BAAyB,EAIhD,KAAK,sCACN,KAAK,oCAAsC,GACvC,KAAK,WACL,KAAK,mBAAmB,4CAAsC,QAAQ,EAGlF,CACA,MAAM,iCAAiC3I,EAAMiR,EAAgB,GAAO,CACpE,GAAI,CACA,IAAIC,EAAgBlR,EAEpB,OAAIiR,GACI,KAAK,eAAiB,OAAOC,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAEjGA,IAIP,KAAK,iBAAiB,qBAAuB,KAAK,qBAAuBA,aAAyB,cAClGA,EAAgB,MAAM,KAAK,sBAAsBA,CAAa,GAI9D,KAAK,iBAAiB,qBAAuB,KAAK,kBAAkB,SAAWA,aAAyB,cACxGA,EAAgB,KAAK,sBAAsBA,CAAa,GAIxD,KAAK,iBAAiB,kBAAoBA,aAAyB,cACnEA,EAAgB,KAAK,mBAAmBA,CAAa,GAIrD,KAAK,iBAAiB,uBAAyBA,aAAyB,cACxEA,EAAgB,KAAK,wBAAwBA,CAAa,GAI1D,KAAK,eAAiB,OAAOA,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAGjGA,EAEX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,mDAA+C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACrHiC,CACX,CACJ,CAKI,MAAM,sBAAsBmR,EAAW,CACnC,GAAI,CACA,GAAI,CAAC,KAAK,eAAe,gBAErB,OAAO,KAAK,eAAeA,CAAS,EAGxC,IAAMC,EAAa,IAAI,WAAWD,CAAS,EAC3C,GAAIC,EAAW,OAAS,GAEpB,OAAO,KAAK,eAAeD,CAAS,EAIxC,IAAME,EAAa,IAAI,SAASD,EAAW,OAAQ,EAAG,EAAE,EAClDE,EAAYD,EAAW,UAAU,EAAG,EAAK,EACzCE,EAAaF,EAAW,UAAU,EAAG,EAAK,EAC1CG,EAAcH,EAAW,UAAU,EAAG,EAAK,EAC3CI,EAAYJ,EAAW,UAAU,GAAI,EAAK,EAG1CK,EAAQN,EAAW,MAAM,GAAI,GAAKK,CAAS,EAG5C,KAAK,WAAWH,CAAS,IAC1B,KAAK,WAAWA,CAAS,EAAI,CACzB,OAAQ,IAAI,MAAME,CAAW,EAC7B,SAAU,EACV,UAAW,KAAK,IAAI,CACxB,GAGJ,IAAMG,EAAgB,KAAK,WAAWL,CAAS,EAO/C,GANAK,EAAc,OAAOJ,CAAU,EAAIG,EACnCC,EAAc,WAEE,KAAK,WAAW,QAAS,4BAAqBJ,EAAa,CAAC,IAAIC,CAAW,gBAAgBF,CAAS,EAAE,EAGlHK,EAAc,WAAaH,EAAa,CAExC,IAAMI,EAAYD,EAAc,OAAO,OAAO,CAAC1K,EAAKyK,IAAUzK,EAAMyK,EAAM,OAAQ,CAAC,EAC7EG,EAAe,IAAI,WAAWD,CAAS,EAEzCE,EAAS,EACb,QAAWJ,KAASC,EAAc,OAC9BE,EAAa,IAAIH,EAAOI,CAAM,EAC9BA,GAAUJ,EAAM,OAIpB,MAAM,KAAK,eAAeG,EAAa,MAAM,EAG7C,OAAO,KAAK,WAAWP,CAAS,EAEhC,KAAK,WAAW,OAAQ,6BAAsBA,CAAS,4BAA4B,CACvF,CACJ,OAASvT,EAAO,CACZ,KAAK,WAAW,QAAS,4CAAwC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACzH,CACJ,CAMA,yBAA0B,CACtB,GAAI,GAAC,KAAK,mBAAmB,SAAW,CAAC,KAAK,gBAK9C,IAAI,KAAK,cAAc,KAAO,EAAG,CAC7B,KAAK,WAAW,OAAQ,8DAAoD,EAC5E,MACJ,CAEA,GAAI,CACA,IAAMgU,EAAmB,KAAK,IAC1B,KAAK,mBAAmB,iBACxB,KAAK,mBAAmB,kBAAkB,MAC9C,EAEA,QAAS1S,EAAI,EAAGA,EAAI0S,EAAkB1S,IAAK,CACvC,IAAMmD,EAAc,KAAK,mBAAmB,kBAAkBnD,CAAC,EACzD2S,EAAe,KAAK,eAAe,kBAAkBxP,EAAa,CACpE,QAAS,KAAK,OAAO,EAAI,GACzB,eAAgB,KAAK,MAAM,KAAK,OAAO,EAAI,CAAC,CAChD,CAAC,EAED,KAAK,kBAAkBwP,EAAcxP,CAAW,EAChD,KAAK,cAAc,IAAIA,EAAawP,CAAY,CACpD,CAEI,KAAK,YACL,KAAK,WAAW,OAAQ,yBAAkBD,CAAgB,iBAAiB,CAEnF,OAAShU,EAAO,CACR,KAAK,YACL,KAAK,WAAW,QAAS,8CAA0C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAE/H,EACJ,CAEA,kBAAkB4R,EAASnN,EAAa,CACpCmN,EAAQ,OAAS,IAAM,CACf,KAAK,YACL,KAAK,WAAW,QAAS,4BAAqBnN,CAAW,UAAU,EAEvE,KAAK,kBAAkBmN,EAASnN,CAAW,CAC/C,EAEAmN,EAAQ,UAAa/E,GAAU,CACvB,KAAK,YACL,KAAK,WAAW,QAAS,wCAAiCpI,CAAW,MAAMoI,EAAM,MAAM,QAAU,WAAW,QAAQ,CAE5H,EAEA+E,EAAQ,QAAU,IAAM,CAChB,KAAK,YACL,KAAK,WAAW,QAAS,4BAAqBnN,CAAW,UAAU,EAEvE,KAAK,iBAAiBA,CAAW,CACrC,EAEAmN,EAAQ,QAAW5R,GAAU,CACrB,KAAK,YACL,KAAK,WAAW,QAAS,yBAAoByE,CAAW,UAAW,CAAE,MAAOzE,EAAM,OAAQ,CAAC,CAEnG,CACJ,CAEA,kBAAkB4R,EAASnN,EAAa,CACpC,IAAMyP,EAAgB,SAAY,CAC9B,GAAItC,EAAQ,aAAe,OAI3B,GAAI,CACA,IAAMuC,EAAY,KAAK,kBAAkB1P,CAAW,EACpDmN,EAAQ,KAAKuC,CAAS,EAEtB,IAAMC,EAAW,KAAK,mBAAmB,qBACrC,KAAK,OAAO,EAAI,KAAQ,IACxB,IAEJ,KAAK,YAAY,IAAI3P,EAAa,WAAW,IAAMyP,EAAc,EAAGE,CAAQ,CAAC,CACjF,OAASpU,EAAO,CACR,KAAK,YACL,KAAK,WAAW,QAAS,wCAAmCyE,CAAW,IAAK,CAAE,MAAOzE,EAAM,OAAQ,CAAC,CAE5G,CACJ,EAEM4S,EAAe,KAAK,OAAO,EAAI,IAAQ,IAC7C,KAAK,YAAY,IAAInO,EAAa,WAAW,IAAMyP,EAAc,EAAGtB,CAAY,CAAC,CACrF,CAEA,iBAAiBnO,EAAa,CAC1B,IAAMlC,EAAQ,KAAK,YAAY,IAAIkC,CAAW,EAC1ClC,IACA,aAAaA,CAAK,EAClB,KAAK,YAAY,OAAOkC,CAAW,EAE3C,CAEA,kBAAkBA,EAAa,CAC3B,IAAM4P,EAAa,CACf,KAAQ,IAAM,KAAK,UAAU,CACzB,KAAM,OACN,UAAW,KAAK,IAAI,EACpB,SAAU,KAAK,MAAM,KAAK,OAAO,EAAI,GAAI,EACzC,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIpU,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,EACD,OAAU,IAAM,KAAK,UAAU,CAC3B,KAAM,SACN,OAAQ,CAAC,SAAU,OAAQ,MAAM,EAAE,KAAK,MAAM,KAAK,OAAO,EAAI,CAAC,CAAC,EAChE,OAAQ,KAAK,MAAM,KAAK,OAAO,EAAI,IAAI,EACvC,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIA,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,EACD,UAAa,IAAM,KAAK,UAAU,CAC9B,KAAM,YACN,UAAW,KAAK,IAAI,EACpB,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIA,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,EACD,QAAW,IAAM,KAAK,UAAU,CAC5B,KAAM,UACN,IAAK,KAAK,OAAO,EAAI,IACrB,OAAQ,KAAK,OAAO,EAAI,IACxB,QAAS,KAAK,OAAO,EAAI,IACzB,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIA,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,EACD,MAAS,IAAM,KAAK,UAAU,CAC1B,KAAM,QACN,MAAO,CAAC,OAAQ,OAAQ,OAAO,EAAE,KAAK,MAAM,KAAK,OAAO,EAAI,CAAC,CAAC,EAC9D,QAAS,gBACT,KAAM,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EACtD,IAAIA,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC1D,CAAC,CACL,EAEA,OAAOoU,EAAW5P,CAAW,EAAI4P,EAAW5P,CAAW,EAAE,EACrD,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EAChD,IAAIxE,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAC9D,CAMA,qBAAqBgC,EAAM,CACvB,GAAI,CAAC,KAAK,iBAAiB,QACvB,OAAOA,EAGX,GAAI,CACA,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BqS,EAAa,KAAK,iBAAiB,cAAgB,GAAK,EACxDC,EAAS,IAAI,YAAYD,CAAU,EACnChB,EAAa,IAAI,SAASiB,CAAM,EAGlC,KAAK,iBAAiB,oBACtBjB,EAAW,UAAU,EAAG,KAAK,iBAAkB,EAAK,EAIpD,KAAK,iBAAiB,eACtBA,EAAW,UAAU,EAAG,KAAK,IAAI,EAAG,EAAK,EAI7CA,EAAW,UAAU,KAAK,iBAAiB,cAAgB,EAAI,EAAGvB,EAAU,OAAQ,EAAK,EAGzF,IAAMhC,EAAS,IAAI,WAAWuE,EAAavC,EAAU,MAAM,EAC3D,OAAAhC,EAAO,IAAI,IAAI,WAAWwE,CAAM,EAAG,CAAC,EACpCxE,EAAO,IAAIgC,EAAWuC,CAAU,EAEzBvE,EAAO,MAClB,OAAS/P,EAAO,CACZ,YAAK,WAAW,QAAS,2CAAuC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAC7GiC,CACX,CACJ,CAEA,MAAM,uBAAuBA,EAAM,CACnC,GAAI,CAAC,KAAK,iBAAiB,QACvB,OAAO,KAAK,eAAeA,CAAI,EAGnC,GAAI,CACA,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BqS,EAAa,KAAK,iBAAiB,cAAgB,GAAK,EAE9D,GAAIvC,EAAU,OAASuC,EACnB,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,yEAA+D,EAEpF,KAAK,eAAerS,CAAI,EAGnC,IAAMqR,EAAa,IAAI,SAASvB,EAAU,OAAQ,EAAGuC,CAAU,EAC3DE,EAAW,EACXC,EAAY,EACZC,EAAW,EAYf,GAVI,KAAK,iBAAiB,qBACtBF,EAAWlB,EAAW,UAAU,EAAG,EAAK,GAGxC,KAAK,iBAAiB,gBACtBmB,EAAYnB,EAAW,UAAU,EAAG,EAAK,GAG7CoB,EAAWpB,EAAW,UAAU,KAAK,iBAAiB,cAAgB,EAAI,EAAG,EAAK,EAE9EoB,EAAW3C,EAAU,OAASuC,GAAcI,GAAY,EACxD,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,sEAA4D,EAEjF,KAAK,eAAezS,CAAI,EAGnC,IAAM0S,EAAa5C,EAAU,MAAMuC,EAAYA,EAAaI,CAAQ,EAEpE,GAAI,CACA,IAAME,EAAW,IAAI,YAAY,EAAE,OAAOD,CAAU,EAC9CE,EAAU,KAAK,MAAMD,CAAQ,EACnC,GAAIC,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GAAM,CACvD,KAAK,YACL,KAAK,WAAW,OAAQ,8CAAuCA,EAAQ,SAAW,SAAS,EAAE,EAEjG,MACJ,CACJ,MAAY,CAEZ,CAEA,KAAK,aAAa,IAAIL,EAAU,CAC5B,KAAMG,EAAW,OACjB,UAAWF,GAAa,KAAK,IAAI,CACrC,CAAC,EAED,MAAM,KAAK,sBAAsB,CAErC,OAASzU,EAAO,CACZ,YAAK,WAAW,QAAS,6CAAyC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAC/G,KAAK,eAAeiC,CAAI,CACnC,CACJ,CAMA,MAAM,uBAAwB,CAC1B,IAAM2C,EAAM,KAAK,IAAI,EACf9C,EAAU,KAAK,iBAAiB,eAEtC,OAAa,CACT,IAAMgT,EAAe,KAAK,sBAAwB,EAC5CC,EAAS,KAAK,aAAa,IAAID,CAAY,EAEjD,GAAKC,EAuBE,CACH,GAAI,CACA,IAAMH,EAAW,IAAI,YAAY,EAAE,OAAOG,EAAO,IAAI,EAC/CF,EAAU,KAAK,MAAMD,CAAQ,EACnC,GAAIC,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GAAM,CAC3D,KAAK,WAAW,OAAQ,4CAAqCA,EAAQ,SAAW,SAAS,EAAE,EAC3F,KAAK,aAAa,OAAOC,CAAY,EACrC,KAAK,sBAAwBA,EAC7B,QACJ,CACJ,MAAY,CACZ,CAEA,MAAM,KAAK,eAAeC,EAAO,IAAI,EACrC,KAAK,aAAa,OAAOD,CAAY,EACrC,KAAK,sBAAwBA,CACjC,KAvCa,CACT,IAAME,EAAe,KAAK,iBAAiB,EAC3C,GAAIA,GAAiBpQ,EAAMoQ,EAAa,UAAalT,EAAS,CAC1D,KAAK,WAAW,OAAQ,iFAAuE,EAE/F,GAAI,CACA,IAAM8S,EAAW,IAAI,YAAY,EAAE,OAAOI,EAAa,IAAI,EACrDH,EAAU,KAAK,MAAMD,CAAQ,EACnC,GAAIC,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GAAM,CAC3D,KAAK,WAAW,OAAQ,8CAAuCA,EAAQ,SAAW,SAAS,EAAE,EAC7F,KAAK,aAAa,OAAOG,EAAa,QAAQ,EAC9C,KAAK,sBAAwBA,EAAa,SAC1C,QACJ,CACJ,MAAY,CACZ,CAEA,MAAM,KAAK,eAAeA,EAAa,IAAI,EAC3C,KAAK,aAAa,OAAOA,EAAa,QAAQ,EAC9C,KAAK,sBAAwBA,EAAa,QAC9C,KACI,MAER,CAiBJ,CAEA,KAAK,kBAAkBpQ,EAAK9C,CAAO,CACvC,CAGI,kBAAmB,CACf,IAAImT,EAAS,KACb,OAAW,CAACT,EAAUO,CAAM,IAAK,KAAK,aAAa,QAAQ,GACnD,CAACE,GAAUF,EAAO,UAAYE,EAAO,aACrCA,EAAS,CAAE,SAAAT,EAAU,GAAGO,CAAO,GAGvC,OAAOE,CACX,CAEA,kBAAkBrQ,EAAK9C,EAAS,CAC5B,OAAW,CAAC0S,EAAUO,CAAM,IAAK,KAAK,aAAa,QAAQ,EAClDnQ,EAAMmQ,EAAO,UAAajT,IAC3B,KAAK,WAAW,OAAQ,oEAA8C,EACtE,KAAK,aAAa,OAAO0S,CAAQ,EAG7C,CAMA,wBAAwBvS,EAAM,CAC1B,GAAI,CAAC,KAAK,yBAAyB,QAC/B,OAAOA,EAGX,GAAI,CACA,IAAIkR,EAAgBlR,EAGpB,OAAI,KAAK,yBAAyB,WAC9BkR,EAAgB,KAAK,SAASA,CAAa,GAI3C,KAAK,yBAAyB,iBAC9BA,EAAgB,KAAK,cAAcA,CAAa,GAIhD,KAAK,yBAAyB,eAC9BA,EAAgB,KAAK,aAAaA,CAAa,GAI/C,KAAK,yBAAyB,mBAC9BA,EAAgB,KAAK,iBAAiBA,CAAa,GAGhDA,CACX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,qCAAiC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACvGiC,CACX,CACJ,CAEA,SAASA,EAAM,CACX,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BiT,EAAY,KAAK,yBAAyB,EAAG,EAAE,EAC/CC,EAAQ,OAAO,gBAAgB,IAAI,WAAWD,CAAS,CAAC,EAExDnF,EAAS,IAAI,WAAWgC,EAAU,OAASmD,CAAS,EAC1D,OAAAnF,EAAO,IAAIgC,EAAW,CAAC,EACvBhC,EAAO,IAAIoF,EAAOpD,EAAU,MAAM,EAE3BhC,EAAO,MAClB,CAEA,cAAc9N,EAAM,CAChB,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BmT,EAAY,KAAK,gBAAgB,cACjCC,EAAa,KAAK,MAAMtD,EAAU,OAASqD,CAAS,EAE1D,GAAIC,EAAatD,EAAU,OAAQ,CAE/B,IAAMK,EAAU,OAAO,gBAAgB,IAAI,WAAWiD,EAAatD,EAAU,MAAM,CAAC,EAC9EhC,EAAS,IAAI,WAAWsF,CAAU,EACxC,OAAAtF,EAAO,IAAIgC,EAAW,CAAC,EACvBhC,EAAO,IAAIqC,EAASL,EAAU,MAAM,EAC7BhC,EAAO,MAClB,SAAWsF,EAAatD,EAAU,OAE9B,OAAOA,EAAU,MAAM,EAAGsD,CAAU,EAAE,OAG1C,OAAOpT,CACX,CAEA,aAAaA,EAAM,CACf,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/B8N,EAAS,IAAI,WAAWgC,EAAU,MAAM,EAG9C,QAAS,EAAI,EAAG,EAAIA,EAAU,OAAQ,IAAK,CACvC,IAAMuD,EAAY,KAAK,gBAAgB,aAAa,EAAI,KAAK,gBAAgB,aAAa,MAAM,EAChGvF,EAAO,CAAC,EAAIgC,EAAU,CAAC,EAAIuD,CAC/B,CAEA,OAAOvF,EAAO,MAClB,CAEA,iBAAiB9N,EAAM,CACnB,IAAM8P,EAAY,IAAI,WAAW9P,CAAI,EAC/BsT,EAAc,KAAK,yBAAyB,EAAG,CAAC,EAClDC,EAAkB,EAGtB,QAASlU,EAAI,EAAGA,EAAIiU,EAAajU,IAC7BkU,GAAmB,EAAI,KAAK,yBAAyB,EAAG,EAAE,EAAI,EAGlE,IAAMzF,EAAS,IAAI,WAAWyF,EAAkBzD,EAAU,MAAM,EAC5DgC,EAAS,EAGb,QAASzS,EAAI,EAAGA,EAAIiU,EAAajU,IAAK,CAElC,IAAImU,EACJ,GACIA,EAAc,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,QACpDA,GAAe,IAAO,IAAM,KAAK,gBAAgB,iBAAiB,QAE3E,IAAMC,EAAa,KAAK,gBAAgB,iBAAiBD,EAAc,KAAK,gBAAgB,iBAAiB,MAAM,EAG/GnB,EACJ,GACIA,EAAa,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,EAAE,CAAC,QACnDA,GAAc,IAAO,IAAM,IAEpC,IAAMqB,EAAa,OAAO,gBAAgB,IAAI,WAAYrB,EAAa,GAAM,CAAC,CAAC,EAGzEhB,EAAa,IAAI,SAASvD,EAAO,OAAQgE,CAAM,EACrDT,EAAW,UAAU,EAAGqC,EAAW,OAAS,EAAG,EAAK,EACpDrC,EAAW,UAAU,EAAG,KAAK,WAAWoC,CAAU,EAAG,EAAK,EAE1D3F,EAAO,IAAI4F,EAAY5B,EAAS,CAAC,EAGjC,IAAM6B,EAAW,KAAK,kBAAkB7F,EAAO,MAAMgE,EAAQA,EAAS,EAAI4B,EAAW,MAAM,CAAC,EACvE,IAAI,SAAS5F,EAAO,OAAQgE,EAAS,EAAI4B,EAAW,MAAM,EAClE,UAAU,EAAGC,EAAU,EAAK,EAEzC7B,GAAU,EAAI4B,EAAW,OAAS,CACtC,CAGA,OAAA5F,EAAO,IAAIgC,EAAWgC,CAAM,EAErBhE,EAAO,MAClB,CAEA,WAAWzK,EAAK,CACZ,IAAIuQ,EAAO,EACX,QAASvU,EAAI,EAAGA,EAAIgE,EAAI,OAAQhE,IAAK,CACjC,IAAMqG,EAAOrC,EAAI,WAAWhE,CAAC,EAC7BuU,GAASA,GAAQ,GAAKA,EAAQlO,EAC9BkO,EAAOA,EAAOA,CAClB,CACA,OAAO,KAAK,IAAIA,CAAI,CACxB,CAEA,kBAAkB5T,EAAM,CACpB,IAAI2T,EAAW,EACf,QAAStU,EAAI,EAAGA,EAAIW,EAAK,OAAQX,IAC7BsU,EAAYA,EAAW3T,EAAKX,CAAC,EAAK,WAEtC,OAAOsU,CACX,CAMA,MAAM,qBAAqB3T,EAAM,CACjC,GAAI,CACA,IAAM2I,EAAS,KAAK,kBAAkB,EAStC,GARI,KAAK,YACL,KAAK,WAAW,QAAS,yCAAkCA,EAAO,KAAK,IAAK,CACxE,SAAU,OAAO3I,EACjB,WAAYA,GAAM,QAAUA,GAAM,YAAc,EAChD,eAAgB2I,EAAO,mBAC3B,CAAC,EAGD,CAAC3I,EACD,YAAK,WAAW,OAAQ,kCAAwB,EACzC,KAGX,IAAIkR,EAAgBlR,EAGpB,GAAI,OAAOA,GAAS,SAChB,GAAI,CACA,IAAM6T,EAAW,KAAK,MAAM7T,CAAI,EAGhC,GAAI6T,EAAS,OAAS,OAClB,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,wCAAiCA,EAAS,OAAO,WAAWA,EAAS,IAAI,GAAG,EAElG,wBAIX,GAAIA,EAAS,MAAQ,CAAC,YAAa,eAAgB,wBAAyB,kBAAmB,sBAAuB,qBAAsB,mBAAoB,oBAAqB,qBAAsB,qBAAqB,EAAE,SAASA,EAAS,IAAI,EACpP,MAAO,0BAIX,GAAIA,EAAS,MAAQ,CAAC,sBAAuB,yBAA0B,aAAc,qBAAsB,yBAA0B,qBAAqB,EAAE,SAASA,EAAS,IAAI,EAC9K,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,+DAAyD,CAAE,KAAMA,EAAS,IAAK,CAAC,EAEtG,wBAIX,GAAIA,EAAS,OAAS,UAClB,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,sDAAgD,CAAE,KAAMA,EAAS,IAAK,CAAC,EAE7FA,EAAS,KAIpB,GAAIA,EAAS,OAAS,oBAAsBA,EAAS,KAAM,CAKvD,GAJI,KAAK,YACL,KAAK,WAAW,QAAS,oDAA6C,EAGtE,CAAC,KAAK,eAAiB,CAAC,KAAK,QAAU,CAAC,KAAK,YAC7C,YAAK,WAAW,QAAS,gCAA2B,EAC7C,KAGX,IAAMC,EAAkB,MAAM,OAAO,0BAA0B,eAC3DD,EAAS,KACT,KAAK,cACL,KAAK,OACL,KAAK,WACT,EAEI,KAAK,aACL,KAAK,WAAW,QAAS,kDAA6C,EACtE,KAAK,WAAW,QAAS,4BAAsB,CAC3C,KAAM,OAAOC,EACb,WAAY,CAAC,CAACA,GAAiB,QAC/B,YAAa,OAAOA,GAAiB,QACrC,cAAeA,GAAiB,SAAS,QAAU,EACnD,cAAeA,GAAiB,SAAS,UAAU,EAAG,EAAE,GAAK,YACjE,CAAC,GAIL,GAAI,CACA,IAAMC,EAAmB,KAAK,MAAMD,EAAgB,OAAO,EAC3D,GAAIC,EAAiB,OAAS,QAAUA,EAAiB,gBAAkB,GACvE,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,8CAAuCA,EAAiB,SAAW,SAAS,EAAE,EAEnG,uBAEf,MAAY,CACJ,KAAK,YACL,KAAK,WAAW,QAAS,yEAAkE,CAEnG,CAEA,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,wCAAkC,CAAE,QAASD,EAAgB,SAAS,UAAU,EAAG,EAAE,CAAE,CAAC,EAE9GA,EAAgB,OAC3B,CAGA,GAAID,EAAS,OAAS,WAAaA,EAAS,KACxC,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,qDAA8C,EAEpEA,EAAS,KAIpB,GAAIA,EAAS,OAAS,UAClB,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,2DAAoD,EAE1E7T,EAIX,GAAI,CAAC6T,EAAS,MAASA,EAAS,OAAS,QAAU,CAAC,CAAC,YAAa,eAAgB,wBAAyB,kBAAmB,sBAAuB,qBAAsB,mBAAoB,mBAAoB,oBAAqB,qBAAsB,sBAAuB,sBAAuB,yBAA0B,aAAc,qBAAsB,yBAA0B,qBAAqB,EAAE,SAASA,EAAS,IAAI,EAC7a,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,2DAAoD,EAE1E7T,CAEf,MAAY,CACR,OAAI,KAAK,YACL,KAAK,WAAW,QAAS,4CAAqC,EAG3DA,CACX,CAIJ,GAAI,KAAK,eAAiB,OAAOkR,GAAkB,UAAYA,EAAc,OAAS,GAClF,GAAI,CAEA,GADoB,oBACJ,KAAKA,EAAc,KAAK,CAAC,IACjC,KAAK,YACL,KAAK,WAAW,QAAS,2CAAoC,EAEjEA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,EAChG,KAAK,YACL,KAAK,WAAW,QAAS,uCAAkC,EAI3D,OAAOA,GAAkB,UAAU,CACnC,GAAI,CACA,IAAM8C,EAAgB,KAAK,MAAM9C,CAAa,EAC9C,GAAI8C,EAAc,OAAS,QAAUA,EAAc,gBAAkB,GACjE,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,2CAAoCA,EAAc,SAAW,SAAS,EAAE,EAE7F,uBAEf,MAAY,CAEZ,CACA9C,EAAgB,IAAI,YAAY,EAAE,OAAOA,CAAa,EAAE,MAC5D,CAER,OAASnT,EAAO,CACZ,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,2CAAkC,CAAE,QAASA,EAAM,OAAQ,CAAC,EAEjFiC,CACX,CAGJ,GAAI,KAAK,iBAAiB,qBACtB,KAAK,qBACLkR,aAAyB,aACzBA,EAAc,WAAa,GAE3B,GAAI,CAGA,GAFAA,EAAgB,MAAM,KAAK,uBAAuBA,CAAa,EAE3DA,aAAyB,YACzB,GAAI,CACA,IAAMyB,EAAW,IAAI,YAAY,EAAE,OAAOzB,CAAa,EACjD+C,EAAgB,KAAK,MAAMtB,CAAQ,EACzC,GAAIsB,EAAc,OAAS,QAAUA,EAAc,gBAAkB,GACjE,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,2CAAoCA,EAAc,SAAW,SAAS,EAAE,EAE7F,uBAEf,MAAY,CAEZ,CAER,OAASlW,EAAO,CACR,KAAK,YACL,KAAK,WAAW,OAAQ,+DAAsD,CAAE,QAASA,EAAM,OAAQ,CAAC,CAEhH,CAGJ,GAAI,KAAK,iBAAiB,qBACtB,KAAK,iBAAiB,SACtBmT,aAAyB,YACzB,GAAI,CACA,IAAMmB,EAAa,KAAK,iBAAiB,cAAgB,GAAK,EAC9D,GAAInB,EAAc,WAAamB,EAC3B,OAAO,MAAM,KAAK,uBAAuBnB,CAAa,CAE9D,OAASnT,EAAO,CACR,KAAK,YACL,KAAK,WAAW,OAAQ,uEAA8D,CAAE,QAASA,EAAM,OAAQ,CAAC,CAExH,CAIJ,GAAI,KAAK,iBAAiB,kBAAoBmT,aAAyB,YACnE,GAAI,CACAA,EAAgB,KAAK,oBAAoBA,CAAa,CAC1D,OAASnT,EAAO,CACR,KAAK,YACL,KAAK,WAAW,OAAQ,uCAA8B,CAAE,QAASA,EAAM,OAAQ,CAAC,CAExF,CAIJ,GAAI,KAAK,iBAAiB,uBAAyBmT,aAAyB,YACxE,GAAI,CACAA,EAAgB,KAAK,yBAAyBA,CAAa,CAC/D,OAASnT,EAAO,CACR,KAAK,YACL,KAAK,WAAW,OAAQ,mDAA0C,CAAE,QAASA,EAAM,OAAQ,CAAC,CAEpG,CAQJ,GAJImT,aAAyB,cACzBA,EAAgB,IAAI,YAAY,EAAE,OAAOA,CAAa,GAGtD,OAAOA,GAAkB,SACzB,GAAI,CACA,IAAMgD,EAAe,KAAK,MAAMhD,CAAa,EAC7C,GAAIgD,EAAa,OAAS,QAAUA,EAAa,gBAAkB,GAC/D,OAAI,KAAK,YACL,KAAK,WAAW,OAAQ,gDAAyCA,EAAa,SAAW,SAAS,EAAE,EAEjG,uBAEf,MAAY,CACZ,CAGJ,OAAOhD,CAEX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,iDAA6C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACnHiC,CACX,CACJ,CAEI,yBAAyBA,EAAM,CAG3B,OAAOA,CACX,CAEA,MAAM,oBAAoBA,EAAMiR,EAAgB,GAAO,CACnD,GAAI,CACA,IAAIC,EAAgBlR,EAEpB,OAAIiR,GACI,KAAK,eAAiB,OAAOC,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAEjGA,IAGP,KAAK,iBAAiB,qBAAuB,KAAK,qBAAuBA,aAAyB,cAClGA,EAAgB,MAAM,KAAK,sBAAsBA,CAAa,GAG9D,KAAK,iBAAiB,qBAAuB,KAAK,kBAAkB,SAAWA,aAAyB,cACxGA,EAAgB,KAAK,sBAAsBA,CAAa,GAGxD,KAAK,iBAAiB,kBAAoBA,aAAyB,cACnEA,EAAgB,KAAK,mBAAmBA,CAAa,GAGrD,KAAK,iBAAiB,uBAAyBA,aAAyB,cACxEA,EAAgB,KAAK,wBAAwBA,CAAa,GAG1D,KAAK,eAAiB,OAAOA,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAGjGA,EAEX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,uCAAmC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACzGiC,CACX,CACJ,CAQA,qBAAqBqP,EAAM,CACvB,GAAI,CAACA,GAAQ,OAAOA,GAAS,SAAU,OAAO,KAC9C,IAAM8E,EAAM,CAAC,EAMb,GALI,OAAO9E,EAAK,KAAQ,UAAYA,EAAK,IAAI,OAAS,GAAKA,EAAK,IAAI,QAAU,KAC1E8E,EAAI,IAAM9E,EAAK,IAAI,QAAQ,kBAAmB,EAAE,EAAE,MAAM,EAAG,EAAE,GAE7DA,EAAK,OAAS,KAAM8E,EAAI,KAAO,IAC/B9E,EAAK,OAAS,KAAM8E,EAAI,KAAO,IAC/B,OAAO,SAAS9E,EAAK,OAAO,EAAG,CAE/B,IAAM+E,EAAU,KAAK,MAAM/E,EAAK,OAAO,EACnC+E,GAAW,GAAKA,GAAW,OAAMD,EAAI,QAAUC,EACvD,CACA,GAAI,OAAO,SAAS/E,EAAK,GAAG,EAAG,CAE3B,IAAMgF,EAAM,KAAK,MAAMhF,EAAK,GAAG,EAC3BgF,GAAO,GAAKA,GAAO,QAAOF,EAAI,IAAME,EAC5C,CACA,OAAO,OAAO,KAAKF,CAAG,EAAE,OAASA,EAAM,IAC3C,CAUA,kBAAkB7C,EAAW,CACzB,OAAI,OAAOA,GAAc,UAAY,CAACA,EAAkB,GACjD,KAAK,kBAAkB,CAC1B,KAAMhU,EAA4B,cAAc,eAChD,UAAWgU,EAAU,MAAM,EAAG,EAAE,CACpC,CAAC,CACL,CASA,oBAAoBA,EAAW,CAC3B,OAAI,OAAOA,GAAc,UAAY,CAACA,EAAkB,GACjD,KAAK,kBAAkB,CAC1B,KAAMhU,EAA4B,cAAc,gBAChD,UAAWgU,EAAU,MAAM,EAAG,EAAE,CACpC,CAAC,CACL,CAEA,MAAM,YAAYtR,EAAMqP,EAAO,KAAM,CAEjC,IAAMiF,EAAa,KAAK,mBAAmBtU,EAAM,aAAa,EAC9D,GAAI,CAACsU,EAAW,QAAS,CACrB,IAAMpM,EAAe,4BAA4BoM,EAAW,OAAO,KAAK,IAAI,CAAC,GAC7E,WAAK,WAAW,QAAS,gDAA4C,CACjE,OAAQA,EAAW,OACnB,SAAU,OAAOtU,EACjB,WAAYA,GAAM,QAAUA,GAAM,YAAc,CACpD,CAAC,EACK,IAAI,MAAMkI,CAAY,CAChC,CAGA,GAAI,CAAC,KAAK,gBAAgB,aAAa,EACnC,MAAM,IAAI,MAAM,yCAAyC,EAO7D,GAHA,KAAK,yBAAyB,aAAa,EAGvC,CAAC,KAAK,aAAe,KAAK,YAAY,aAAe,OACrD,MAAM,IAAI,MAAM,wBAAwB,EAG5C,GAAI,CAuBA,GArBM,KAAK,eAAiB,KAAK,QAAU,KAAK,aAC5C,MAAM,KAAK,+BAA+B,EAG9C,KAAK,WAAW,QAAS,qBAAsB,CAC3C,eAAgB,CAAC,CAAC,KAAK,YACvB,iBAAkB,KAAK,aAAa,aAAe,OACnD,YAAa,KAAK,YAClB,WAAY,KAAK,WACjB,gBAAiB,KAAK,gBAAgB,kBAAoB,WAC9D,CAAC,EAED,KAAK,WAAW,QAAS,8BAAwB,CAC7C,SAAU,OAAOoM,EAAW,cAC5B,SAAU,OAAOA,EAAW,eAAkB,SAC9C,cAAeA,EAAW,yBAAyB,YACnD,WAAYA,EAAW,eAAe,QAAUA,EAAW,eAAe,YAAc,CAC5F,CAAC,EAIG,OAAOA,EAAW,eAAkB,SACpC,GAAI,CACA,IAAMtI,EAAS,KAAK,MAAMsI,EAAW,aAAa,EAElD,GAAItI,EAAO,MAAQA,EAAO,KAAK,WAAW,OAAO,EAAG,CAChD,KAAK,WAAW,QAAS,sEAAgE,CAAE,KAAMA,EAAO,IAAK,CAAC,EAG9G,IAAM5N,EAAM,KAAK,sBAAsB4N,EAAO,KAAMA,EAAO,IAAI,EAGzDgE,EAAgB,MAAM,KAAK,oBAAoBsE,EAAW,cAAelW,CAAG,EAElF,YAAK,YAAY,KAAK4R,CAAa,EAC5B,EACX,CACJ,MAAoB,CAEpB,CAIJ,GAAI,OAAOsE,EAAW,eAAkB,SAAU,CAE9C,GAAI,OAAO,KAAK,mBAAsB,WAClC,MAAM,IAAI,MAAM,kFAAkF,EAItG,IAAMlW,EAAM,KAAK,kBAAkB,UAAW,CAAE,QAASkW,EAAW,aAAc,CAAC,EAE7EC,EAAW,CACb,KAAM,UACN,KAAMD,EAAW,cACjB,UAAW,KAAK,IAAI,EACpB,IAAKlW,CACT,EAIA,OAAIiR,GAAQ,OAAOA,GAAS,WACxBkF,EAAS,KAAO,KAAK,qBAAqBlF,CAAI,GAG3C,MAAM,KAAK,kBAAkBkF,CAAQ,CAChD,CAGA,KAAK,WAAW,QAAS,uDAAgD,EACzE,IAAMC,EAAc,MAAM,KAAK,qCAAqCF,EAAW,cAAe,EAAK,EACnG,YAAK,YAAY,KAAKE,CAAW,EAE1B,EACX,OAASzW,EAAO,CACZ,WAAK,WAAW,QAAS,gCAA4B,CACjD,MAAOA,EAAM,QACb,UAAWA,EAAM,YAAY,IACjC,CAAC,EACKA,CACV,CACJ,CAGA,MAAM,qCAAqCiC,EAAMiR,EAAgB,GAAO,CAExE,OAAO,KAAK,WAAW,kBAAmB,MAAOwD,GAAgB,CAC7D,GAAI,CACA,IAAIvD,EAAgBlR,EAEpB,OAAIiR,GACI,KAAK,eAAiB,OAAOC,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAEjGA,IAGP,KAAK,iBAAiB,qBAAuB,KAAK,qBAAuBA,aAAyB,cAClGA,EAAgB,MAAM,KAAK,sBAAsBA,CAAa,GAG9D,KAAK,iBAAiB,qBAAuB,KAAK,kBAAkB,SAAWA,aAAyB,cACxGA,EAAgB,KAAK,sBAAsBA,CAAa,GAGxD,KAAK,iBAAiB,kBAAoBA,aAAyB,cACnEA,EAAgB,KAAK,mBAAmBA,CAAa,GAGrD,KAAK,iBAAiB,uBAAyBA,aAAyB,cACxEA,EAAgB,KAAK,wBAAwBA,CAAa,GAG1D,KAAK,eAAiB,OAAOA,GAAkB,WAC/CA,EAAgB,MAAM,OAAO,0BAA0B,YAAYA,EAAe,KAAK,aAAa,GAGjGA,EAEX,OAASnT,EAAO,CACZ,YAAK,WAAW,QAAS,uCAAmC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACzGiC,CACX,CACJ,EAAG,GAAI,CACX,CAEI,MAAM,kBAAkB9B,EAAa,CAWjC,GAR8BA,EAAY,OAAS,wBACtBA,EAAY,OAAS,yBACrBA,EAAY,OAAS,yBAG9C,KAAK,yBAAyB,oBAAqB,EAAK,EAGxD,CAAC,KAAK,aAAe,KAAK,YAAY,aAAe,OACrD,YAAK,WAAW,OAAQ,kEAAwD,EACzE,GAGX,GAAI,CACA,IAAMwW,EAAgB,KAAK,UAAU,CACjC,KAAMxW,EAAY,KAClB,KAAMA,EACN,UAAW,KAAK,IAAI,CACxB,CAAC,EAED,YAAK,WAAW,QAAS,mCAA6B,CAAE,KAAMA,EAAY,IAAK,CAAC,EAChF,KAAK,YAAY,KAAKwW,CAAa,EAC5B,EACX,OAAS3W,EAAO,CACZ,YAAK,WAAW,QAAS,wCAAoC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAC1G,EACX,CACJ,CAGJ,MAAM,eAAeiC,EAAM,CACvB,GAAI,CAWA,GARA,KAAK,uBAAuB,EAC5B,KAAK,WAAW,QAAS,kCAAyB,CAC9C,SAAU,OAAOA,EACjB,cAAeA,aAAgB,YAC/B,QAAS,CAAC,EAAEA,GAAM,QAAUA,GAAM,WACtC,CAAC,EAGG,OAAOA,GAAS,SAChB,GAAI,CACA,IAAMgM,EAAS,KAAK,MAAMhM,CAAI,EAMxB2U,EAAmB,CACrB,sBACA,yBACA,aACA,qBACA,yBACA,qBACJ,EAGA,GAAI3I,EAAO,OAAS,yBAA0B,CAC1C,KAAK,WAAW,QAAS,6DAAsD,EAE/E,GAAI,CAEA,GAAM,CAAE,cAAA4I,EAAe,IAAAxW,CAAI,EAAI,MAAM,KAAK,oBAAoB4B,CAAI,EAG5D6U,EAAkB,KAAK,MAAMD,CAAa,EAQhD,GANA,KAAK,WAAW,QAAS,gDAA0C,CAC/D,KAAMC,EAAgB,KACtB,eAAgBzW,EAAI,WACxB,CAAC,EAGG,KAAK,oBAAsB,OAAO,KAAK,mBAAmB,mBAAsB,WAAY,CAC5F,MAAM,KAAK,mBAAmB,kBAAkByW,CAAe,EAC/D,MACJ,CACJ,OAAS9W,EAAO,CACZ,KAAK,WAAW,QAAS,wCAAoC,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACrF,MACJ,CACJ,CAGA,GAAIiO,EAAO,MAAQ2I,EAAiB,SAAS3I,EAAO,IAAI,EAAG,CACvD,KAAK,WAAW,OAAQ,yFAAgF,CAAE,KAAMA,EAAO,IAAK,CAAC,EAG7H,KAAK,WAAW,QAAS,wDAAoD,CAAE,KAAMA,EAAO,IAAK,CAAC,EAClG,MACJ,CAMA,GAAIA,EAAO,OAAS,mBAAoB,CAEpC,GADA,KAAK,WAAW,QAAS,uDAAgD,EACrE,CAAC,KAAK,uBAAuB,iCAAiC,EAC9D,OAGJ,GAAI,CAEA,IAAM4I,EAAgB,MAAM,OAAO,0BAA0B,eACzD5I,EAAO,KACP,KAAK,cACL,KAAK,OACL,KAAK,WACT,EAGM6I,EAAkB,KAAK,MAAMD,EAAc,IAAI,EAGrD,GAAIA,EAAc,UAAYA,EAAc,SAAS,iBAAmB,QAChE,CAAC,KAAK,gCAAgCA,EAAc,SAAS,eAAgB,kBAAkB,EAAG,CAClG,KAAK,WAAW,OAAQ,2FAAkF,CACtG,SAAUA,EAAc,SAAS,eACjC,SAAU,KAAK,sBACnB,CAAC,EACD,MACJ,CAIAC,EAAgB,OAAS,WAAa,KAAK,WAAaA,EAAgB,MACxE,KAAK,mBAAmBA,EAAgB,KAAM,WAAYA,EAAgB,IAAI,EAGlF,MACJ,OAAS9W,EAAO,CACZ,KAAK,WAAW,QAAS,4CAAwC,CAAE,MAAOA,EAAM,OAAQ,CAAC,EACzF,MACJ,CACJ,CAeA,GAAIiO,EAAO,OAAS1O,EAA4B,cAAc,QAAS,CACnE,KAAK,WAAW,QAAS,+CAAgD,CACrE,YAAa,SACjB,CAAC,EACD,MACJ,CAEA,GAAI0O,EAAO,MACP1O,EAA4B,gCAAgC,IAAI0O,EAAO,IAAI,EAAG,CAC9E,GAAI,CAAC,KAAK,yBAAyB,wBAAyB,EAAK,EAAG,CAChE,KAAK,WAAW,QAAS,qDAAsD,CAC3E,YAAaA,EAAO,IACxB,CAAC,EACD,MACJ,CAEA,IAAMC,EAAI3O,EAA4B,cAEtC,GAAI0O,EAAO,OAASC,EAAE,eAAgB,CAClC,IAAMqF,EAAYtF,GAAQ,MAAM,WAAaA,GAAQ,UACrD,GAAI,OAAOsF,GAAc,UAAYA,EACjC,GAAI,CAAE,KAAK,kBAAkBA,EAAU,MAAM,EAAG,EAAE,CAAC,CAAG,MAAY,CAAC,CAEvE,MACJ,CAEA,GAAItF,EAAO,OAASC,EAAE,gBAAiB,CACnC,IAAMqF,EAAYtF,GAAQ,MAAM,WAAaA,GAAQ,UACrD,GAAI,OAAOsF,GAAc,UAAYA,EACjC,GAAI,CAAE,KAAK,qBAAqBA,EAAU,MAAM,EAAG,EAAE,CAAC,CAAG,MAAY,CAAC,CAE1E,MACJ,CAEA,GAAI,CAACrF,EAAE,WAAYA,EAAE,YAAaA,EAAE,SAC/BA,EAAE,aAAcA,EAAE,QAAQ,EAAE,SAASD,EAAO,IAAI,EAAG,CACpD,GAAI,CAAE,MAAM,KAAK,kBAAkBA,EAAO,KAAMA,EAAO,MAAQ,CAAC,CAAC,CAAG,OAASlM,EAAG,CAC5E,KAAK,WAAW,QAAS,qCAAiC,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CACjG,CACA,MACJ,CAEA,GAAI,CAACmM,EAAE,kBAAmBA,EAAE,mBACvBA,EAAE,mBAAmB,EAAE,SAASD,EAAO,IAAI,EAAG,CAC/C,GAAI,CAAE,MAAM,KAAK,wBAAwBA,EAAO,KAAMA,EAAO,MAAQ,CAAC,CAAC,CAAG,OAASlM,EAAG,CAClF,KAAK,WAAW,QAAS,4CAAwC,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CACxG,CACA,MACJ,CAEA,MACJ,CAMA,GAAIkM,EAAO,MAAQ,CAAC,YAAa,eAAgB,wBAAyB,yBAA0B,8BAA+B,kBAAmB,kBAAkB,EAAE,SAASA,EAAO,IAAI,EAAG,CAC7L,KAAK,oBAAoBA,CAAM,EAC/B,MACJ,CAMA,GAAIA,EAAO,OAAS,OAAQ,CACxB,KAAK,WAAW,OAAQ,mDAA6C,CAAE,QAASA,EAAO,OAAQ,CAAC,EAChG,MACJ,CAEJ,MAAoB,CAIhB,KAAK,WAAW,QAAS,wDAAyD,CAC9E,WAAY,OAAOhM,GAAS,SAAWA,EAAK,OAAS,CACzD,CAAC,EACD,MACJ,CAQJ,IAAM8U,EAAe,MAAM,KAAK,sCAAsC9U,CAAI,EAG1E,GAAI8U,IAAiB,yBACjBA,IAAiB,yBACjBA,IAAiB,0BACjB,OAGJ,GAAI,CAACA,EAAc,CACf,KAAK,WAAW,OAAQ,yDAA+C,EACvE,MACJ,CAGA,IAAIC,EAEJ,GAAI,OAAOD,GAAiB,SACxB,GAAI,CACA,IAAM/S,EAAU,KAAK,MAAM+S,CAAY,EAGvC,GAAI/S,EAAQ,MAAQ,iBAAiB,SAASA,EAAQ,IAAI,EAAG,CACzD,KAAK,WAAW,QAAS,mDAA6C,CAAE,KAAMA,EAAQ,IAAK,CAAC,EACxF,KAAK,oBACL,MAAM,KAAK,mBAAmB,kBAAkBA,CAAO,EAE3D,MACJ,CAEA,GAAIA,EAAQ,MAAQ,CAAC,YAAa,eAAgB,wBAAyB,yBAA0B,8BAA+B,kBAAmB,kBAAkB,EAAE,SAASA,EAAQ,IAAI,EAAG,CAC/L,KAAK,oBAAoBA,CAAO,EAChC,MACJ,CAEA,GAAIA,EAAQ,OAAS,OAAQ,CACzB,KAAK,WAAW,OAAQ,mDAA4CA,EAAQ,OAAO,EAAE,EACrF,MACJ,CAGIA,EAAQ,OAAS,WAAaA,EAAQ,KACtCgT,EAAchT,EAAQ,KAEtBgT,EAAcD,CAEtB,MAAY,CACRC,EAAcD,CAClB,SACOA,aAAwB,YAC/BC,EAAc,IAAI,YAAY,EAAE,OAAOD,CAAY,UAC5CA,GAAgB,OAAOA,GAAiB,UAAYA,EAAa,QACxEC,EAAcD,EAAa,YACxB,CACH,KAAK,WAAW,OAAQ,sDAA6C,CAAE,QAAS,OAAOA,CAAa,CAAC,EACrG,MACJ,CAGA,GAAIC,GAAeA,EAAY,KAAK,EAAE,WAAW,GAAG,EAChD,GAAI,CACA,IAAMC,EAAa,KAAK,MAAMD,CAAW,EACzC,GAAIC,EAAW,OAAS,OAAQ,CAC5B,KAAK,WAAW,OAAQ,+CAAwCA,EAAW,OAAO,EAAE,EACpF,MACJ,CAGA,IAAMC,EAAe,CACjB,sBAAuB,yBAA0B,aACjD,qBAAsB,yBAA0B,sBAChD,YAAa,eAAgB,wBAC7B,kBAAmB,sBAAuB,qBAAsB,mBAChE,oBAAqB,qBAAsB,qBAC/C,EAEA,GAAID,EAAW,MAAQC,EAAa,SAASD,EAAW,IAAI,EAAG,CAC3D,KAAK,WAAW,OAAQ,sDAA+CA,EAAW,IAAI,EAAE,EACxF,MACJ,CACJ,MAAY,CAEZ,CASAD,GACA,KAAK,WAAW,QAAS,gEAAiE,CACtF,cAAe,OAAOA,GAAgB,SAAWA,EAAY,OAAS,CAC1E,CAAC,CAGT,OAAShX,EAAO,CACZ,KAAK,WAAW,QAAS,oCAAgC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACjH,CACJ,CAGI,MAAM,sCAAsCiC,EAAM,CAE9C,OAAO,KAAK,WAAW,kBAAmB,MAAOyU,GAAgB,CAC7D,KAAK,WAAW,QAAS,yDAAmD,CACxE,YAAaA,EACb,SAAU,OAAOzU,CACrB,CAAC,EAED,GAAI,CAGA,OADqB,MAAM,KAAK,qBAAqBA,CAAI,CAG7D,OAASjC,EAAO,CACZ,YAAK,WAAW,QAAS,yCAAqC,CAC1D,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACMiC,CACX,CACJ,EAAG,GAAI,CACX,CAEI,sBAAuB,CACnB,GAAI,CACA,KAAK,WAAW,QAAS,kDAA4C,CAC7D,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,QAAS,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,aACtD,mBAAoB,CAAC,CAAC,KAAK,uBAC/B,CAAC,EAGL,KAAK,oBAAoB,IAAI,YAAY,yBAA0B,CAC/D,OAAQ,CACJ,UAAW,KAAK,IAAI,EACpB,QAAS,SACT,cAAe,KACf,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,QAAS,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,aACtD,gBAAiB,KAAK,uBAC1B,CACJ,CAAC,CAAC,EAGF,WAAW,IAAM,CAKjB,EAAG,GAAG,EAGF,KAAK,yBACL,KAAK,oBAAoB,IAAI,YAAY,2BAA4B,CACjE,OAAQ,CACJ,aAAc,KAAK,wBACnB,cAAe,KACf,UAAW,KAAK,IAAI,CACxB,CACJ,CAAC,CAAC,CAGV,OAASjC,EAAO,CACZ,KAAK,WAAW,QAAS,uCAAmC,CACpD,MAAOA,EAAM,OACjB,CAAC,CACT,CACJ,CAEA,oBAAoBgE,EAAS,CAGzB,OAFA,KAAK,WAAW,QAAS,qCAA+B,CAAE,KAAMA,EAAQ,IAAK,CAAC,EAEtEA,EAAQ,KAAM,CAClB,IAAK,YACD,KAAK,gBAAgBA,CAAO,EAC5B,MACJ,IAAK,eACD,KAAK,0BAA0BA,EAAQ,IAAI,EAC3C,MACJ,IAAK,wBACD,KAAK,2BAA2BA,EAAQ,IAAI,EAC5C,MACJ,IAAK,WACD,KAAK,cAAcA,EAAQ,IAAI,EAC/B,MACJ,IAAK,yBACD,KAAK,4BAA4BA,EAAQ,IAAI,EAC7C,MACJ,IAAK,8BACD,KAAK,gCAAgCA,EAAQ,IAAI,EACjD,MACJ,IAAK,kBACD,KAAK,iCAAiCA,CAAO,EAC7C,MACJ,IAAK,sBACD,KAAK,WAAW,QAAS,gEAAyD,EAClF,MACJ,IAAK,qBACD,KAAK,WAAW,QAAS,sEAA+D,EACxF,MACJ,IAAK,mBACD,KAAK,WAAW,QAAS,oDAA8C,CAAE,KAAMA,EAAQ,IAAK,CAAC,EAG7F,MACJ,QACI,KAAK,WAAW,QAAS,yCAAmC,CAAE,KAAMA,EAAQ,IAAK,CAAC,CAC1F,CACJ,CAOA,sBAAuB,CACnB,KAAK,oBAAoB,sBACzB,KAAK,iBAAiB,oBAAsB,GAC5C,KAAK,iBAAiB,QAAU,IAGhC,KAAK,oBAAoB,wBACzB,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,yBAAyB,QAAU,GAExC,KAAK,yBAAyB,eAAiB,GAC/C,KAAK,yBAAyB,aAAe,GAC7C,KAAK,yBAAyB,iBAAmB,IAGrD,KAAK,sBAAsB,CAAC,EAC5B,WAAW,IAAM,CACb,KAAK,gCAAgC,CACzC,EAAG,GAAG,CACV,CAGI,sBAAuB,CACnB,KAAK,WAAW,OAAQ,2DAAoD,EAExE,KAAK,oBAAoB,qBACzB,KAAK,iBAAiB,mBAAqB,GAC3C,KAAK,eAAe,QAAU,IAG9B,KAAK,oBAAoB,iBACzB,KAAK,iBAAiB,eAAiB,GACvC,KAAK,kBAAkB,QAAU,GACjC,KAAK,2BAA2B,GAGpC,KAAK,sBAAsB,CAAC,EAC5B,WAAW,IAAM,CACb,KAAK,gCAAgC,CACzC,EAAG,GAAG,CACV,CAGA,sBAAuB,CAGnB,GAFA,KAAK,WAAW,OAAQ,sDAA+C,EAEnE,KAAK,oBAAoB,kBAAoB,KAAK,YAAY,GAAK,KAAK,WAAY,CACpF,KAAK,iBAAiB,iBAAmB,GACzC,KAAK,mBAAmB,QAAU,GAElC,GAAI,CACA,KAAK,wBAAwB,CACjC,OAAShE,EAAO,CACZ,KAAK,WAAW,OAAQ,qDAA4C,CAAE,QAASA,EAAM,OAAQ,CAAC,EAC9F,KAAK,iBAAiB,iBAAmB,GACzC,KAAK,mBAAmB,QAAU,EACtC,CACJ,CAGI,KAAK,oBAAoB,wBACzB,KAAK,yBAAyB,eAAiB,GAC/C,KAAK,yBAAyB,aAAe,GAC7C,KAAK,yBAAyB,iBAAmB,IAGrD,KAAK,sBAAsB,CAAC,EAC5B,WAAW,IAAM,CACb,KAAK,gCAAgC,CACzC,EAAG,GAAG,CACV,CAEA,qBAAsB,CAClB,WAAW,IAAM,CACb,KAAK,gCAAgC,EACrC,KAAK,qBAAqB,CAC9B,EAAG,GAAG,CACV,CAGA,mBAAoB,CAChB,IAAM2R,EAAiB,OAAO,QAAQ,KAAK,gBAAgB,EACtD,OAAO,CAAC,CAACxM,EAAKM,CAAK,IAAMA,IAAU,EAAI,EACvC,IAAI,CAAC,CAACN,CAAG,IAAMA,CAAG,EAIvB,MAAO,CACH,MAHU,EAIV,cAAe,UACf,eAAgBwM,EAChB,cAAe,OAAO,KAAK,KAAK,gBAAgB,EAAE,OAClD,oBAAqBA,EAAe,OACpC,oBAAqBA,EACrB,mBAAoB,KAAK,kBAC7B,CACJ,CAGA,sBAAsBwF,EAAO,CACzB,IAAMC,EAAa,CACf,EAAG,iBACH,EAAG,kBACH,EAAG,gBACH,EAAG,kBACP,EAEMpT,EAAU,wCAAiCmT,CAAK,KAAKC,EAAWD,CAAK,CAAC,GAc5E,IAXI,CAAC,KAAK,iCAAmC,KAAK,2BAA6BA,KAC3E,KAAK,gCAAkC,GACvC,KAAK,yBAA2BA,EAG5B,KAAK,WACL,KAAK,mBAAmBnT,EAAS,QAAQ,GAK7C,KAAK,aAAe,KAAK,YAAY,aAAe,OACpD,GAAI,CACA,IAAMqT,EAAuB,CACzB,KAAM,mBACN,MAAOF,EACP,UAAWC,EAAWD,CAAK,EAC3B,QAASnT,EACT,UAAW,KAAK,IAAI,CACxB,EAEA,KAAK,WAAW,QAAS,2DAAqD,CAAE,KAAMqT,EAAqB,KAAM,MAAOA,EAAqB,KAAM,CAAC,EACpJ,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAoB,CAAC,CAC9D,OAASrX,EAAO,CACZ,KAAK,WAAW,OAAQ,qEAA4D,CAAE,QAASA,EAAM,OAAQ,CAAC,CAClH,CAGJ,IAAM4K,EAAS,KAAK,kBAAkB,CAC1C,CAEA,MAAM,iCAAkC,CACpC,GAAI,CACA,GAAI,CAAC,OAAO,0BACR,YAAK,WAAW,OAAQ,+EAAqE,EACtF,KAGX,GAAI,CAAC,KAAK,YAAY,GAAK,CAAC,KAAK,YAAc,CAAC,KAAK,eAAiB,CAAC,KAAK,OACxE,YAAK,WAAW,QAAS,yDAAgD,CACrE,UAAW,KAAK,YAAY,EAC5B,SAAU,KAAK,WACf,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,MACtB,CAAC,EACM,KAGX,KAAK,WAAW,QAAS,4CAAsC,CAC3D,aAAc,QACd,WAAY,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,YAC7D,CAAC,EAED,IAAM0M,EAAe,MAAM,OAAO,0BAA0B,uBAAuB,IAAI,EAoBvF,GAlBA,KAAK,WAAW,OAAQ,iCAAkC,CACtD,iBAAkB,CAAC,CAACA,EAAa,MACjC,WAAYA,EAAa,MAAQ,GAAK,OAASA,EAAa,MAAQ,GAAK,SAAW,MACpF,YAAa,GAAGA,EAAa,YAAY,IAAIA,EAAa,WAAW,GACrE,kBAAmBA,EAAa,UACpC,CAAC,EAED,KAAK,wBAA0BA,EAE/B,KAAK,oBAAoB,IAAI,YAAY,2BAA4B,CACjE,OAAQ,CACJ,aAAcA,EACd,cAAe,KACf,UAAW,KAAK,IAAI,EACpB,OAAQ,iCACZ,CACJ,CAAC,CAAC,EAEEA,EAAa,YAAc,KAAK,YAC5B,CAAC,KAAK,qCAAuC,KAAK,+BAAiCA,EAAa,OAAO,CACvG,KAAK,oCAAsC,GAC3C,KAAK,6BAA+BA,EAAa,MAEjD,IAAMtT,EAAU,mBAAmBsT,EAAa,KAAK,KAAKA,EAAa,KAAK,QAAQA,EAAa,YAAY,IAAIA,EAAa,WAAW,iBACzI,KAAK,mBAAmBtT,EAAS,QAAQ,CAC7C,CAGJ,OAAOsT,CAEX,OAAStX,EAAO,CACZ,YAAK,WAAW,QAAS,0CAA2C,CAChE,UAAWA,EAAM,YAAY,IACjC,CAAC,EACM,IACX,CACJ,CAOA,MAAM,4BAA6B,CAC/B,KAAK,WAAW,OAAQ,+DAA+D,EAE3F,IAAMuX,EAAiB,IACF,KAAK,YAAY,GAClB,KAAK,YACL,KAAK,qBAAuB,GAC5B,KAAK,aAAa,SAAW,GAC7B,KAAK,gBAAgB,kBAAoB,YAI7D,MAAM,KAAK,gCAAgC,EAC3C,KAAK,sBAAsB,CAAC,EAGxB,WAAW,SAAY,CACfA,EAAe,IACf,KAAK,qBAAqB,EAC1B,MAAM,KAAK,gCAAgC,EAEvC,WAAW,SAAY,CACfA,EAAe,IACf,KAAK,qBAAqB,EAC1B,MAAM,KAAK,gCAAgC,EAE3C,WAAW,SAAY,CACfA,EAAe,IACf,KAAK,qBAAqB,EAC1B,MAAM,KAAK,gCAAgC,EAEnD,EAAG,GAAK,EAEhB,EAAG,IAAK,EAEpB,EAAG,GAAK,CAChB,CAMA,MAAM,qBAAsB,CACxB,GAAI,CAEA,MAAM,KAAK,2BAA2B,EAGlC,KAAK,kBAAkB,SACvB,KAAK,2BAA2B,EAIhC,KAAK,mBAAmB,SACxB,KAAK,wBAAwB,CAGrC,OAASvX,EAAO,CACZ,WAAK,WAAW,QAAS,kDAA8C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAE3H,KAAK,eAAe,cAAc,EAC5BA,CACV,CACJ,CAMA,0BAA2B,CACvB,GAAI,CAGA,KAAK,2BAA6B,GAClC,KAAK,4BAA8B,GACnC,KAAK,2BAA6B,GAClC,KAAK,WAAa,GAClB,KAAK,iBAAmB,KACxB,KAAK,eAAiB,KACtB,KAAK,sBAAwB,EAC7B,KAAK,sBAAwB,GAC7B,KAAK,qBAAuB,KAC5B,KAAK,sBAAwB,KAG7B,KAAK,eAAiB,KACtB,KAAK,wBAA0B,KAC/B,KAAK,qBAAuB,KAC5B,KAAK,aAAe,KAGpB,KAAK,oBAAoB,MAAM,EAG/B,KAAK,6BAA+B,GACpC,KAAK,2BAA6B,EAEtC,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,6CAAyC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAC1H,CACJ,CAGA,sBAAuB,CAEnB,KAAK,WAAW,OAAQ,uDAAgD,CAC5E,CAGA,MAAM,wBAAyB,CAC3B,OAAO,MAAM,OAAO,0BAA0B,uBAAuB,IAAI,CAC7E,CAGA,kBAAmB,CACf,MAAI,CAAC,KAAK,YAAY,GAAK,CAAC,KAAK,WACtB,GAGC,KAAK,IAAI,EACe,KAAK,gBAGV,KAAK,qBAC7B,KAAK,eAAiB,MAAQ,CACzC,CAGA,MAAM,YAAa,CACf,OAAO,KAAK,WAAW,eAAgB,MAAO0W,GAAgB,CAM1D,GALA,KAAK,WAAW,OAAQ,6CAAuC,CAC3D,YAAaA,CACjB,CAAC,EAGG,CAAC,KAAK,YAAY,GAAK,CAAC,KAAK,WAC7B,YAAK,WAAW,OAAQ,+CAAgD,CACpE,YAAaA,EACb,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,UACrB,CAAC,EACM,GAIX,GAAI,KAAK,gBAAgB,WACrB,YAAK,WAAW,OAAQ,oCAAqC,CACzD,YAAaA,CACjB,CAAC,EACM,GAGX,GAAI,CAEA,KAAK,gBAAgB,WAAa,GAClC,KAAK,gBAAgB,cAAgB,WACrC,KAAK,gBAAgB,kBAAoB,KAAK,IAAI,EAGlD,IAAMc,EAAiB,CACnB,KAAM,sBACN,WAAY,KAAK,kBAAoB,EACrC,UAAW,KAAK,IAAI,EACpB,YAAad,CACjB,EAEA,GAAI,KAAK,aAAe,KAAK,YAAY,aAAe,OACpD,KAAK,YAAY,KAAK,KAAK,UAAUc,CAAc,CAAC,MAEpD,OAAM,IAAI,MAAM,yCAAyC,EAI7D,YAAK,iBAAiB,EAGf,IAAI,QAASzW,GAAY,CAC5B,KAAK,gBAAkB,CACnB,WAAY,KAAK,kBAAoB,EACrC,YAAa2V,EACb,QAAS3V,EACT,QAAS,WAAW,IAAM,CACtB,KAAK,WAAW,QAAS,wBAAyB,CAC9C,YAAa2V,CACjB,CAAC,EACD,KAAK,gBAAgB,WAAa,GAClC,KAAK,gBAAkB,KACvB3V,EAAQ,EAAK,CACjB,EAAG,GAAK,CACZ,CACJ,CAAC,CAEL,OAASf,EAAO,CACZ,YAAK,WAAW,QAAS,2CAA4C,CACjE,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACD,KAAK,gBAAgB,WAAa,GAC3B,EACX,CACJ,EAAG,GAAK,CACZ,CAGA,gBAAiB,CACb,IAAM4E,EAAM,KAAK,IAAI,EACf6S,EAAYlY,EAA4B,OAAO,YAEjDmY,EAAiB,EAErB,OAAW,CAACrI,EAASC,CAAM,IAAK,KAAK,QAAQ,QAAQ,EAC7C1K,EAAM0K,EAAO,UAAYmI,IAErBnI,EAAO,eACP,KAAK,kBAAkBA,EAAO,cAAe,kBAAkB,EAE/DA,EAAO,QACP,KAAK,kBAAkBA,EAAO,OAAQ,kBAAkB,EAExDA,EAAO,aACP,KAAK,kBAAkBA,EAAO,YAAa,kBAAkB,EAIjEA,EAAO,cAAgB,KACvBA,EAAO,OAAS,KAChBA,EAAO,YAAc,KACrBA,EAAO,eAAiB,KAExB,KAAK,QAAQ,OAAOD,CAAO,EAC3BqI,IAEA,KAAK,WAAW,OAAQ,mDAA6C,CACjE,QAASrI,EACT,IAAK,KAAK,OAAOzK,EAAM0K,EAAO,WAAa,GAAI,EAAI,IACnD,UAAW,KAAK,IAAI,CACxB,CAAC,GAILoI,EAAiB,GACjB,KAAK,WAAW,OAAQ,0BAA0BA,CAAc,mBAAoB,CAChF,UAAW,KAAK,IAAI,CACxB,CAAC,CAET,CAGA,kBAAkBrI,EAAS,CAEvB,IAAMsI,EAAY,KAAK,QAAQ,IAAItI,CAAO,EAC1C,OAAIsI,GAAaA,EAAU,eAAiBA,EAAU,QAAUA,EAAU,YAC/D,CACH,cAAeA,EAAU,cACzB,OAAQA,EAAU,OAClB,YAAaA,EAAU,WAC3B,EAIAtI,IAAY,KAAK,mBACb,KAAK,eAAiB,KAAK,QAAU,KAAK,YACnC,CACH,cAAe,KAAK,cACpB,OAAQ,KAAK,OACb,YAAa,KAAK,WACtB,GAIR,OAAO,0BAA0B,UAAU,IAAI,QAAS,kCAAmC,CACvF,iBAAkBA,EAClB,eAAgB,KAAK,kBACrB,kBAAmB,MAAM,KAAK,KAAK,QAAQ,KAAK,CAAC,CACrD,CAAC,EAEM,KACX,CAEA,gBAAiB,CACb,OAAQ,KAAK,QAAQ,OAAO,YAAc,CAAC,GAAG,KAAKtP,IAClC,MAAM,QAAQA,EAAO,IAAI,EAAIA,EAAO,KAAO,CAACA,EAAO,IAAI,GACxD,KAAK6X,GAAO,OAAOA,GAAQ,UAAYA,EAAI,YAAY,EAAE,WAAW,OAAO,CAAC,CAC3F,CACL,CAEA,4BAA6B,CACzB,IAAMC,EAAY,KAAK,iBAAiB,EAClC/X,EAAS,CACX,WAAY,KAAK,QAAQ,OAAO,WAChC,qBAAsB,GACtB,aAAc,UAClB,EACA,OAAI+X,IACA/X,EAAO,mBAAqB,SAEzBA,CACX,CAEA,0BAA0BgY,EAAa,CAAC,EAAG,CACvC,IAAM/U,EAAU,CACZ,YAAa,EACb,KAAM,EACN,KAAM,EACN,MAAO,EACP,eAAgB,EACpB,EAEA,QAAWhD,KAAU+X,GAAc,CAAC,EAAG,CACnC/U,EAAQ,aAAe,GACnBhD,GAAQ,UAAYA,GAAQ,cAC5BgD,EAAQ,eAAiB,IAG7B,IAAMgV,EAAO,MAAM,QAAQhY,GAAQ,IAAI,EAAIA,EAAO,KAAO,CAACA,GAAQ,IAAI,EACtE,QAAWiY,KAAUD,EAAM,CACvB,IAAMH,EAAM,OAAOI,GAAU,EAAE,EAAE,YAAY,EACzCJ,EAAI,WAAW,OAAO,IAAG7U,EAAQ,MAAQ,GACzC6U,EAAI,WAAW,OAAO,IAAG7U,EAAQ,MAAQ,GACzC6U,EAAI,WAAW,QAAQ,IAAG7U,EAAQ,OAAS,EACnD,CACJ,CAEA,OAAOA,CACX,CAEA,kBAAmB,CACf,OAAO,KAAK,QAAQ,OAAO,cAAgB,YAC/C,CAEA,kBAAkB8U,EAAW,CACzB,IAAMI,EAAUJ,IAAc,GAC9B,KAAK,QAAQ,OAAO,YAAcI,EAAU,aAAe,WAC3D,KAAK,QAAQ,OAAO,UAAYA,CACpC,CAEA,oBAAqB,CACjB,GAAI,KAAK,oBAAqB,OAC9B,KAAK,oBAAsB,GAE3B,IAAMJ,EAAY,KAAK,iBAAiB,EAClCK,EAAgB,KAAK,eAAe,EACtClU,EAAU,KAEV6T,GAAa,CAACK,EACdlU,EAAU,gKACH,CAAC6T,GAAa,CAACK,EACtBlU,EAAU,wMACF6T,IACR7T,EAAU,0JAGTA,GACL,KAAK,mBAAmBA,EAAS,QAAQ,CAC7C,CAEA,sBAAuB,CACnB,KAAK,cAAgB,GACrB,IAAMlE,EAAS,KAAK,2BAA2B,EAC/C,KAAK,mBAAmB,EACxB,QAAQ,KAAK,yCAA0C,KAAK,0BAA0BA,EAAO,UAAU,CAAC,EAExG,KAAK,eAAiB,IAAI,kBAAkBA,CAAM,EAIlD,KAAK,iBAAmB,KACxB,KAAK,iBAAmB,KAExB,KAAK,eAAe,wBAA0B,IAAM,CAChD,IAAMqY,EAAQ,KAAK,eAAe,gBAClC,QAAQ,KAAK,2CAA4C,CACrD,gBAAiBA,EACjB,mBAAoB,KAAK,eAAe,mBACxC,kBAAmB,KAAK,eAAe,iBAC3C,CAAC,EAEGA,IAAU,aAAe,CAAC,KAAK,WAC/B,KAAK,mCAAmC,EACjCA,IAAU,aAAe,KAAK,WAIhC,KAAK,iBAAiB,GAAG,KAAK,eAAe,WAAW,EACtDA,IAAU,eACb,KAAK,uBACL,KAAK,eAAe,cAAc,EAClC,WAAW,IAAM,KAAK,WAAW,EAAG,GAAG,GAChC,KAAK,WAIZ,KAAK,gBAAgB,kBAAkB,EAEvC,QAAQ,KAAK,4BAA4BA,CAAK,kEAAkE,EAE7GA,IAAU,UAEjB,KAAK,qBAAqB,EAC1B,KAAK,eAAe,cAAc,EAClC,KAAK,yBAAyB,EAC1B,KAAK,uBAAuB,WAAW,IAAM,KAAK,WAAW,EAAG,GAAG,GAChEA,IAAU,UACjB,KAAK,8BAA8B,EAAE,KAAMC,GAAgB,CACvD,QAAQ,KAAK,sCAAuCA,CAAW,EAC/D,KAAK,2BAA2BA,CAAW,CAC/C,CAAC,EAGG,KAAK,WACL,KAAK,YAAY,YAAY,EAE7B,QAAQ,KAAK,iGAAiG,GAE3G,KAAK,eAAe,IAAMD,IAAU,cAAgBA,IAAU,QAIrE,KAAK,eAAeA,CAAK,CAEjC,EAEA,KAAK,eAAe,2BAA6B,IAAM,CACnD,QAAQ,KAAK,+CAAgD,CACzD,gBAAiB,KAAK,eAAe,gBACrC,mBAAoB,KAAK,eAAe,mBACxC,kBAAmB,KAAK,eAAe,iBAC3C,CAAC,CACL,EAEA,KAAK,eAAe,oBAAuBtL,GAAU,CACjD,QAAQ,KAAK,sCAAuC,CAChD,IAAKA,EAAM,IACX,UAAWA,EAAM,UACjB,UAAWA,EAAM,SACrB,CAAC,CACL,EAMA,KAAK,eAAe,QAAWA,GAAU,CACrC,GAAI,CACA,KAAK,qBAAqB,CAC9B,OAAS9K,EAAG,CACR,KAAK,WAAW,OAAQ,uCAA8B,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CAC7F,CACJ,EAEA,KAAK,eAAe,cAAiB8K,GAAU,CAGvCA,EAAM,QAAQ,QAAU,cACxB,KAAK,YAAcA,EAAM,QACzB,KAAK,iBAAiBA,EAAM,OAAO,GAG/BA,EAAM,QAAQ,QAAU,cACxB,KAAK,iBAAmBA,EAAM,QAG1C,CACJ,CAEA,iBAAiB+E,EAAS,CAEtB,KAAK,YAAcA,EAGnB,IAAIyG,EAAc,GAEZC,EAAoB,SAAY,CAClC,GAAI,CAAAD,EACJ,CAAAA,EAAc,GAEd,GAAI,CACI,KAAK,aAAe,OAAO,KAAK,YAAY,4BAA+B,WAE3E,KAAK,YAAY,2BAA6B,KAAO,KAE7D,MAAY,CAEZ,CAWA,GAAI,KAAK,iBAAmB,OACxB,GAAI,CACA,MAAM,KAAK,oBAAoB,CACnC,OAASrY,EAAO,CACZ,KAAK,WAAW,QAAS,oCAAqC,CAC1D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACD,KAAK,WAAW,eACZ,yEAAyE,EAC7E,MACJ,CAGJ,GAAI,CACA,MAAM,KAAK,oBAAoB,EAEvC,KAAK,uBAAuB,CAExB,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,gCAAiC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAElH,CAGA,GAAI,KAAK,gBAAkB,KAAK,aAAe,KAAK,YAAY,aAAe,OAC3E,GAAI,CACA,IAAMuY,EAAa,CACf,KAAM,WACN,KAAM,CACF,KAAM,KAAK,eACX,UAAW,KAAK,IAAI,EACpB,mBAAoB,MACpB,cAAe,0BACnB,CACJ,EACA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAU,CAAC,EAChD,KAAK,eAAiB,IAC1B,MAAgB,CAChB,MACO,KAAK,eAGZ,KAAK,YACL,KAAK,eAAe,WAAW,EAC/B,KAAK,oBAAoB,EAEzB,WAAW,SAAY,CACnB,MAAM,KAAK,gCAAgC,EAC3C,KAAK,2BAA2B,EAChC,KAAK,qBAAqB,CAC9B,EAAG,GAAG,IAEN,KAAK,mCAAmC,EACxC,KAAK,qBAAqB,GAE9B,KAAK,eAAe,EACxB,EAEA,KAAK,YAAY,OAASD,EAUtB,KAAK,YAAY,aAAe,QAChC,QAAQ,QAAQ,EACX,KAAK,IAAMA,EAAkB,CAAC,EAC9B,MAAOtY,GAAU,CACd,KAAK,WAAW,QAAS,6CAA8C,CACnE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAGT,KAAK,YAAY,QAAU,IAAM,CAI7B,KAAK,uBAAuB,EAC5B,KAAK,sCAAsC,EAEtC,KAAK,uBAUN,KAAK,eAAe,cAAc,EAElC,KAAK,yBAAyB,EAEzB,KAAK,mCACN,KAAK,iCAAmC,GACxC,KAAK,mBAAmB,8CAAwC,QAAQ,KAf5E,KAAK,eAAe,cAAc,EAElC,KAAK,yBAAyB,EAEzB,KAAK,mCACN,KAAK,iCAAmC,GACxC,KAAK,mBAAmB,wEAAkE,QAAQ,IAc1G,KAAK,mBAAmB,EAExB,KAAK,cAAc,EACnB,KAAK,WAAa,EACtB,EAGA,KAAK,YAAY,UAAY,MAAO6M,GAAU,CAC1C,GAAI,CAQA,GAHA,KAAK,uBAAuB,EAGxB,OAAOA,EAAM,MAAS,SACtB,GAAI,CACA,IAAMoB,EAAS,KAAK,MAAMpB,EAAM,IAAI,EAO9B+J,EAAmB,CACrB,sBACA,yBACA,aACA,qBACA,yBACA,qBACJ,EAEA,GAAI3I,EAAO,MAAQ2I,EAAiB,SAAS3I,EAAO,IAAI,EAAG,CAUvD,GAAI,CAAC,KAAK,yBAAyB,uBAAwB,EAAK,EAAG,CAC/D,KAAK,WAAW,QAAS,oDAAqD,CAC1E,YAAaA,EAAO,IACxB,CAAC,EACD,MACJ,CAEA,GAAI,CAAC,KAAK,mBACN,GAAI,CACA,GAAI,KAAK,YAAc,KAAK,aAAe,KAAK,YAAY,aAAe,OAAQ,CAC/E,KAAK,uBAAuB,EAE5B,IAAIpI,EAAW,EACTC,EAAc,GACpB,KAAO,CAAC,KAAK,oBAAsBD,EAAWC,GAC1C,MAAM,IAAI,QAAQ/E,GAAW,WAAWA,EAAS,GAAG,CAAC,EACrD8E,GAER,CACJ,OAAS2S,EAAW,CAChB,KAAK,WAAW,QAAS,0DAA2D,CAAE,UAAWA,GAAW,aAAa,MAAQ,SAAU,CAAC,CAChJ,CAGJ,GAAI,KAAK,mBAAoB,CACzB,MAAM,KAAK,mBAAmB,kBAAkBvK,CAAM,EACtD,MACJ,CAEA,KAAK,WAAW,OAAQ,sEAA4D,EACpF,GAAI,CAEA,GADA,MAAM,KAAK,yBAAyB,EAChC,KAAK,mBAAoB,CACzB,MAAM,KAAK,mBAAmB,kBAAkBA,CAAM,EACtD,MACJ,CACJ,OAASlM,EAAG,CACR,KAAK,WAAW,QAAS,qCAAsC,CAAE,UAAWA,GAAG,SAAWA,GAAG,aAAa,MAAQ,SAAU,CAAC,CACjI,CACA,KAAK,WAAW,QAAS,yCAA0C,CAAE,UAAWkM,EAAO,MAAM,aAAa,MAAQ,SAAU,CAAC,EAC7H,MACJ,CAYA,GAAIA,EAAO,MACP1O,EAA4B,gCAAgC,IAAI0O,EAAO,IAAI,EAAG,CAC9E,GAAI,CAAC,KAAK,yBAAyB,wBAAyB,EAAK,EAAG,CAChE,KAAK,WAAW,QAAS,qDAAsD,CAC3E,YAAaA,EAAO,IACxB,CAAC,EACD,MACJ,CAEA,IAAMC,EAAI3O,EAA4B,cAGtC,GAAI0O,EAAO,OAASC,EAAE,eAAgB,CAClC,IAAMqF,EAAYtF,GAAQ,MAAM,WAAaA,GAAQ,UACrD,GAAI,OAAOsF,GAAc,UAAYA,EACjC,GAAI,CAAE,KAAK,kBAAkBA,EAAU,MAAM,EAAG,EAAE,CAAC,CAAG,MAAY,CAAC,CAEvE,MACJ,CAGA,GAAItF,EAAO,OAASC,EAAE,gBAAiB,CACnC,IAAMqF,EAAYtF,GAAQ,MAAM,WAAaA,GAAQ,UACrD,GAAI,OAAOsF,GAAc,UAAYA,EACjC,GAAI,CAAE,KAAK,qBAAqBA,EAAU,MAAM,EAAG,EAAE,CAAC,CAAG,MAAY,CAAC,CAE1E,MACJ,CAGA,GAAI,CAACrF,EAAE,WAAYA,EAAE,YAAaA,EAAE,SAC/BA,EAAE,aAAcA,EAAE,QAAQ,EAAE,SAASD,EAAO,IAAI,EAAG,CACpD,GAAI,CAAE,MAAM,KAAK,kBAAkBA,EAAO,KAAMA,EAAO,MAAQ,CAAC,CAAC,CAAG,MAC1D,CAAC,CACX,MACJ,CAGA,GAAI,CAACC,EAAE,kBAAmBA,EAAE,mBACvBA,EAAE,mBAAmB,EAAE,SAASD,EAAO,IAAI,EAAG,CAC/C,GAAI,CAAE,MAAM,KAAK,wBAAwBA,EAAO,KAAMA,EAAO,MAAQ,CAAC,CAAC,CAAG,OACnElM,EAAG,CACN,KAAK,WAAW,QAAS,4CAAwC,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CACxG,CACA,MACJ,CAEA,MACJ,CAcA,GAAIkM,EAAO,OAAS1O,EAA4B,cAAc,UAC1D0O,EAAO,OAAS1O,EAA4B,cAAc,UAAW,CACrE,MAAM,KAAK,0BAA0B0O,CAAM,EAC3C,MACJ,CAEA,GAAIA,EAAO,MAAQ,CAAC,YAAa,eAAgB,wBAAyB,yBAA0B,8BAA+B,WAAY,kBAAmB,kBAAkB,EAAE,SAASA,EAAO,IAAI,EAAG,CACzM,KAAK,oBAAoBA,CAAM,EAC/B,MACJ,CAMA,GAAIA,EAAO,OAAS1O,EAA4B,cAAc,gBAAiB,CAC3E,MAAM,KAAK,uBAAuB0O,CAAM,EACxC,MACJ,CAEA,GAAIA,EAAO,OAAS,oBAAsBA,EAAO,KAAM,CACnD,MAAM,KAAK,oCAAoCA,CAAM,EACrD,MACJ,CAUA,KAAK,WAAW,QAAS,iDAAkD,CACvE,YAAa,OAAOA,EAAO,MAAS,SAAWA,EAAO,KAAK,MAAM,EAAG,EAAE,EAAI,OAAOA,EAAO,IAC5F,CAAC,EACD,MAEJ,MAAoB,CAIhB,KAAK,WAAW,QAAS,0DAA2D,CAChF,WAAY,OAAOpB,EAAM,MAAS,SAAWA,EAAM,KAAK,OAAS,CACrE,CAAC,EACD,MACJ,MACOA,EAAM,gBAAgB,aAC7B,MAAM,KAAK,+BAA+BA,EAAM,IAAI,CAI5D,OAAS7M,EAAO,CACZ,KAAK,WAAW,QAAS,0CAA2C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAC5H,CACJ,CACJ,CAEA,MAAM,+BAA+BiC,EAAM,CACvC,GAAI,CACA,GAAI,CAAC,KAAK,uBAAuB,gBAAgB,EAC7C,OAIJ,IAAIkR,EAAgBlR,EAGpB,GAAI,KAAK,iBAAiB,qBACtB,KAAK,qBACLkR,aAAyB,aACzBA,EAAc,WAAa,GAE3B,GAAI,CACAA,EAAgB,MAAM,KAAK,uBAAuBA,CAAa,CACnE,MAAgB,CACZ,KAAK,WAAW,OAAQ,yDAAyD,CACrF,CAIJ,GAAI,KAAK,iBAAiB,kBAAoBA,aAAyB,YACnE,GAAI,CACAA,EAAgB,KAAK,oBAAoBA,CAAa,CAC1D,MAAgB,CACZ,KAAK,WAAW,OAAQ,8DAA8D,CAC1F,CAIJ,GAAI,KAAK,iBAAiB,uBAAyBA,aAAyB,YACxE,GAAI,CACAA,EAAgB,KAAK,yBAAyBA,CAAa,CAC/D,MAAgB,CACZ,KAAK,WAAW,OAAQ,mEAAmE,CAC/F,CAIJ,GAAIA,aAAyB,YAAa,CACtC,IAAMyB,EAAW,IAAI,YAAY,EAAE,OAAOzB,CAAa,EAQvD,GAAI,CACA,IAAM0B,EAAU,KAAK,MAAMD,CAAQ,EACnC,GAAIC,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GACrD,MAER,MAAY,CAEZ,CAEA,KAAK,WAAW,QAAS,4DAA6D,CAClF,WAAY5S,GAAM,YAAc,CACpC,CAAC,CACL,CAEJ,OAASjC,EAAO,CACZ,KAAK,WAAW,QAAS,gCAAiC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CAClH,CACJ,CAUA,MAAM,uBAAuBuR,EAAe,CACxC,GAAI,CACA,GAAI,CAAC,KAAK,uBAAuB,iBAAiB,EAC9C,OAEJ,GAAI,CAAC,KAAK,gBAAgB,EAAG,CACzB,KAAK,WAAW,QAAS,qDAAqD,EAC9E,MACJ,CACA,GAAI,OAAOA,GAAe,GAAM,UAAY,OAAOA,GAAe,GAAM,SAAU,CAC9E,KAAK,WAAW,QAAS,iCAAiC,EAC1D,MACJ,CAEA,IAAMkH,EAAY,MAAM,KAAK,SAAS,QAAQlH,EAAc,EAAGA,EAAc,CAAC,EAG9E,GAAI,CACA,IAAMsD,EAAU,KAAK,MAAM4D,CAAS,EACpC,GAAI5D,EAAQ,OAAS,QAAUA,EAAQ,gBAAkB,GAAM,OAC/D,GAAIA,GAAWA,EAAQ,OAAS,WAAa,OAAOA,EAAQ,MAAS,SAAU,CAC3E,KAAK,mBAAmBA,EAAQ,KAAM,WAAYA,EAAQ,IAAI,EAC9D,MACJ,CACJ,MAAY,CAEZ,CACA,KAAK,mBAAmB4D,EAAW,UAAU,CACjD,OAASzY,EAAO,CAGZ,KAAK,WAAW,QAAS,oCAAqC,CAC1D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CACJ,CAGA,MAAM,oCAAoCuR,EAAe,CACrD,GAAI,CACA,GAAI,CAAC,KAAK,uBAAuB,kBAAkB,EAC/C,OAGJ,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,QAAU,CAAC,KAAK,YAAa,CAC1D,KAAK,WAAW,QAAS,8CAA8C,EACvE,MACJ,CAEA,IAAMwE,EAAkB,MAAM,OAAO,0BAA0B,eAC3DxE,EAAc,KACd,KAAK,cACL,KAAK,OACL,KAAK,WACT,EAQA,GAAI,CAAC,KAAK,gCAAgCwE,GAAiB,eAAgB,kBAAkB,EAAG,CAC5F,KAAK,WAAW,QAAS,uDAAwD,CAC7E,UAAWA,GAAiB,UAAY,UAAY,QACxD,CAAC,EACD,MACJ,CAEA,GAAIA,GAAmBA,EAAgB,QAAS,CAG5C,GAAI,CACA,IAAMC,EAAmB,KAAK,MAAMD,EAAgB,OAAO,EAC3D,GAAIC,EAAiB,OAAS,QAAUA,EAAiB,gBAAkB,GACvE,OAEJ,GAAIA,GAAoBA,EAAiB,OAAS,WAAa,OAAOA,EAAiB,MAAS,SAAU,CAClG,KAAK,WACL,KAAK,mBAAmBA,EAAiB,KAAM,WAAYA,EAAiB,IAAI,EAEpF,MACJ,CACJ,MAAY,CAEZ,CAGI,KAAK,WACL,KAAK,mBAAmBD,EAAgB,QAAS,UAAU,CAEnE,MACI,KAAK,WAAW,OAAQ,wCAAwC,CAGxE,OAAS/V,EAAO,CACZ,KAAK,WAAW,QAAS,qCAAsC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACvH,CACJ,CAIA,sBAAuB,CACnB,MAAO,MAAM,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,OAAO,EAAG,CAAC,CAAC,EACtE,CAKA,MAAM,cAAc0Y,EAAWhC,EAAa5U,EAAU,IAAM,CAExD,IAAM6W,EAAoB,IAAID,CAAS,QACjCE,EAAQ,KAAKD,CAAiB,EAEpC,GAAI,CAACC,EACD,WAAK,WAAW,QAAS,kBAAkBF,CAAS,GAAI,CACpD,kBAAmBC,EACnB,iBAAkB,KAAK,qBAAqB,EAC5C,YAAajC,CACjB,CAAC,EACK,IAAI,MAAM,kBAAkBgC,CAAS,gBAAgB,KAAK,qBAAqB,EAAE,KAAK,IAAI,CAAC,EAAE,EAIvG,GAAI,CAAChC,GAAe,OAAOA,GAAgB,SACvC,MAAM,IAAI,MAAM,4CAA4C,EAGhE,OAAO,IAAI,QAAQ,CAAC3V,EAASW,IAAW,EAEhB,IAAM,CAEtB,GAAIkX,EAAM,SAAWlC,EAAa,CAC9B,KAAK,WAAW,OAAQ,UAAUgC,CAAS,qCAAsC,CAC7E,YAAahC,CACjB,CAAC,EACD3V,EAAQ,EACR,MACJ,CAGA,GAAI,CAAC6X,EAAM,OAEPA,EAAM,OAAS,GACfA,EAAM,OAASlC,EACfkC,EAAM,SAAW,KAAK,IAAI,EAE1B,KAAK,WAAW,QAAS,UAAUF,CAAS,wBAAyB,CACjE,YAAahC,EACb,SAAUkC,EAAM,QACpB,CAAC,EAGDA,EAAM,YAAc,WAAW,IAAM,CAEjC,KAAK,oBAAoBF,EAAWhC,EAAa5U,CAAO,CAC5D,EAAGA,CAAO,EAEVf,EAAQ,MACL,CAEH,IAAM8X,EAAY,CACd,QAAA9X,EACA,OAAAW,EACA,YAAAgV,EACA,UAAW,KAAK,IAAI,EACpB,QAAS,WAAW,IAAM,CAEtB,IAAMlO,EAAQoQ,EAAM,MAAM,UAAUrT,GAAQA,EAAK,cAAgBmR,CAAW,EACxElO,IAAU,KACVoQ,EAAM,MAAM,OAAOpQ,EAAO,CAAC,EAC3B9G,EAAO,IAAI,MAAM,kCAAkCgX,CAAS,GAAG,CAAC,EAExE,EAAG5W,CAAO,CACd,EAEA8W,EAAM,MAAM,KAAKC,CAAS,EAE1B,KAAK,WAAW,QAAS,+BAA+BH,CAAS,IAAK,CAClE,YAAahC,EACb,YAAakC,EAAM,MAAM,OACzB,cAAeA,EAAM,MACzB,CAAC,CACL,CACJ,GAGY,CAChB,CAAC,CACL,CAKA,cAAcF,EAAWhC,EAAa,CAElC,GAAI,CAACgC,GAAa,OAAOA,GAAc,SACnC,MAAM,IAAI,MAAM,yCAAyC,EAG7D,GAAI,CAAChC,GAAe,OAAOA,GAAgB,SACvC,MAAM,IAAI,MAAM,iDAAiD,EAIrE,IAAMiC,EAAoB,IAAID,CAAS,QACjCE,EAAQ,KAAKD,CAAiB,EAEpC,GAAI,CAACC,EACD,WAAK,WAAW,QAAS,8BAA8BF,CAAS,GAAI,CAChE,kBAAmBC,EACnB,iBAAkB,KAAK,qBAAqB,EAC5C,YAAajC,CACjB,CAAC,EACK,IAAI,MAAM,8BAA8BgC,CAAS,EAAE,EAI7D,GAAIE,EAAM,SAAWlC,EACjB,WAAK,WAAW,QAAS,qEAAsE,CAC3F,UAAWgC,EACX,eAAgBE,EAAM,OACtB,oBAAqBlC,EACrB,WAAY,CACR,OAAQkC,EAAM,OACd,SAAUA,EAAM,SAChB,YAAaA,EAAM,MAAM,MAC7B,CACJ,CAAC,EAGK,IAAI,MAAM,sCAAsCF,CAAS,gBAAgBE,EAAM,MAAM,WAAWlC,CAAW,GAAG,EAIxH,GAAI,CAACkC,EAAM,OACP,WAAK,WAAW,QAAS,iDAAkD,CACvE,UAAWF,EACX,YAAahC,EACb,WAAY,CACR,OAAQkC,EAAM,OACd,OAAQA,EAAM,OACd,SAAUA,EAAM,QACpB,CACJ,CAAC,EACK,IAAI,MAAM,yCAAyCF,CAAS,EAAE,EAGxE,GAAI,CAEIE,EAAM,cACN,aAAaA,EAAM,WAAW,EAC9BA,EAAM,YAAc,MAIxB,IAAME,EAAeF,EAAM,SAAW,KAAK,IAAI,EAAIA,EAAM,SAAW,EAGpEA,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,SAAW,KAEjB,KAAK,WAAW,QAAS,gCAAgCF,CAAS,GAAI,CAClE,YAAahC,EACb,aAAcoC,EACd,YAAaF,EAAM,MAAM,MAC7B,CAAC,EAGD,KAAK,oBAAoBF,CAAS,CAEtC,OAAS1Y,EAAO,CAEZ,WAAK,WAAW,QAAS,8CAA+C,CACpE,UAAW0Y,EACX,YAAahC,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGD4Y,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,SAAW,KACjBA,EAAM,YAAc,KAEd5Y,CACV,CACJ,CAKA,oBAAoB0Y,EAAW,CAC3B,IAAME,EAAQ,KAAK,IAAIF,CAAS,OAAO,EAEvC,GAAI,CAACE,EAAO,CACR,KAAK,WAAW,QAAS,yCAAyCF,CAAS,EAAE,EAC7E,MACJ,CAEA,GAAIE,EAAM,MAAM,SAAW,EACvB,OAIJ,GAAIA,EAAM,OAAQ,CACd,KAAK,WAAW,OAAQ,UAAUF,CAAS,+CAAgD,CACvF,OAAQE,EAAM,OACd,YAAaA,EAAM,MAAM,MAC7B,CAAC,EACD,MACJ,CAGA,IAAMG,EAAWH,EAAM,MAAM,MAAM,EAEnC,GAAI,CAACG,EAAU,CACX,KAAK,WAAW,OAAQ,+BAA+BL,CAAS,GAAG,EACnE,MACJ,CAGA,GAAI,CAACK,EAAS,aAAe,CAACA,EAAS,SAAW,CAACA,EAAS,OAAQ,CAChE,KAAK,WAAW,QAAS,2CAA2CL,CAAS,IAAK,CAC9E,eAAgB,CAAC,CAACK,EAAS,YAC3B,WAAY,CAAC,CAACA,EAAS,QACvB,UAAW,CAAC,CAACA,EAAS,MAC1B,CAAC,EACD,MACJ,CAEA,GAAI,CAEIA,EAAS,SACT,aAAaA,EAAS,OAAO,EAIjC,KAAK,WAAW,QAAS,iDAAiDL,CAAS,IAAK,CACpF,YAAaK,EAAS,YACtB,eAAgBH,EAAM,MAAM,OAC5B,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,WAAW,SAAY,CACnB,GAAI,CACA,MAAM,KAAK,cAAcF,EAAWK,EAAS,YAAa,GAAI,EAE9D,KAAK,WAAW,QAAS,oCAAoCL,CAAS,IAAK,CACvE,YAAaK,EAAS,YACtB,gBAAiB,KAAK,IAAI,CAC9B,CAAC,EAEDA,EAAS,QAAQ,CAErB,OAAS/Y,EAAO,CACZ,KAAK,WAAW,QAAS,6CAA6C0Y,CAAS,IAAK,CAChF,YAAaK,EAAS,YACtB,UAAW/Y,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD+Y,EAAS,OAAO,IAAI,MAAM,gCAAgCL,CAAS,MAAM1Y,EAAM,OAAO,EAAE,CAAC,EAGzF,WAAW,IAAM,CACb,KAAK,oBAAoB0Y,CAAS,CACtC,EAAG,EAAE,CACT,CACJ,EAAG,EAAE,CAET,OAAS1Y,EAAO,CACZ,KAAK,WAAW,QAAS,qDAAqD0Y,CAAS,IAAK,CACxF,YAAaK,EAAS,YACtB,UAAW/Y,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGD,GAAI,CACA+Y,EAAS,OAAO,IAAI,MAAM,oCAAoC/Y,EAAM,OAAO,EAAE,CAAC,CAClF,OAASgZ,EAAa,CAClB,KAAK,WAAW,QAAS,8BAA+B,CACpD,cAAehZ,EAAM,QACrB,YAAagZ,EAAY,OAC7B,CAAC,CACL,CAGA,WAAW,IAAM,CACb,KAAK,oBAAoBN,CAAS,CACtC,EAAG,GAAG,CACV,CACJ,CAEA,sBAAuB,CACnB,IAAMO,EAAU,CAAC,EACXC,EAAgB,OAAO,oBAAoB,IAAI,EAErD,QAAWC,KAAQD,EACf,GAAIC,EAAK,SAAS,OAAO,GAAKA,EAAK,WAAW,GAAG,EAAG,CAEhD,IAAMT,EAAYS,EAAK,MAAM,EAAG,EAAE,EAClCF,EAAQ,KAAKP,CAAS,CAC1B,CAGJ,OAAOO,CACX,CAKA,MAAM,WAAWP,EAAWxO,EAAWpI,EAAU,IAAM,CACnD,IAAM4U,EAAc,KAAK,qBAAqB,EAG9C,GAAI,CAAC,KAAK,qBAAqB,EAC3B,WAAK,WAAW,QAAS,wCAAyC,CAC9D,YAAaA,EACb,UAAWgC,CACf,CAAC,EACK,IAAI,MAAM,6EAA6E,EAIjG,IAAME,EAAQ,KAAK,IAAIF,CAAS,OAAO,EACvC,GAAI,CAACE,EACD,MAAM,IAAI,MAAM,UAAUF,CAAS,aAAa,EAGpD,IAAIU,EAAgB,GAEpB,GAAI,CAEA,MAAM,KAAK,cAAcV,EAAWhC,EAAa5U,CAAO,EACxDsX,EAAgB,GAGhB,IAAMC,EAAa,GAAGX,CAAS,aAC3B,KAAK,oBAAsB,KAAK,mBAAmBW,CAAU,IAAM,QACnE,KAAK,mBAAmBA,CAAU,IAItC,IAAMtJ,EAAS,MAAM7F,EAAUwM,CAAW,EAG1C,OAAI3G,IAAW,QAAa7F,EAAU,OAAS,WAC3C,KAAK,WAAW,OAAQ,4CAA6C,CACjE,YAAawM,EACb,UAAWgC,EACX,cAAexO,EAAU,IAC7B,CAAC,EAGE6F,CAEX,OAAS/P,EAAO,CAEZ,WAAK,WAAW,QAAS,2BAA4B,CACjD,YAAa0W,EACb,UAAWgC,EACX,UAAW1Y,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,cAAeoZ,EACf,WAAYR,EAAQ,CAChB,OAAQA,EAAM,OACd,OAAQA,EAAM,OACd,YAAaA,EAAM,MAAM,MAC7B,EAAI,MACR,CAAC,EAGDF,IAAc,gBACd,KAAK,yBAAyB1Y,EAAO0W,CAAW,GAIhD1W,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,gBAAgB,IAC5E,KAAK,2BAA2B,cAAc,EAGxCA,CACV,QAAE,CAEE,GAAIoZ,EACA,GAAI,CACA,MAAM,KAAK,cAAcV,EAAWhC,CAAW,EAG3CkC,EAAM,QAAUA,EAAM,SAAWlC,IACjC,KAAK,WAAW,QAAS,oCAAqC,CAC1D,YAAaA,EACb,UAAWgC,CACf,CAAC,EAEDE,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,YAAc,KAG5B,OAASU,EAAc,CACnB,KAAK,WAAW,QAAS,yCAA0C,CAC/D,YAAa5C,EACb,UAAWgC,EACX,iBAAkBY,EAAa,YAAY,KAC3C,oBAAqBA,EAAa,OACtC,CAAC,EAGDV,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,YAAc,IACxB,CAER,CACJ,CAEA,sBAAuB,CACnB,IAAMW,EAAkB,CAAC,eAAgB,kBAAmB,qBAAqB,EAEjF,QAAWb,KAAaa,EAAiB,CACrC,IAAMZ,EAAoB,IAAID,CAAS,QACjCE,EAAQ,KAAKD,CAAiB,EAEpC,GAAI,CAACC,GAAS,OAAOA,GAAU,SAC3B,YAAK,WAAW,QAAS,6BAA6BF,CAAS,GAAI,CAC/D,kBAAmBC,EACnB,UAAW,OAAOC,CACtB,CAAC,EACM,GAIX,IAAMY,EAAgB,CAAC,SAAU,QAAS,SAAU,aAAa,EACjE,QAAWL,KAAQK,EACf,GAAI,EAAEL,KAAQP,GACV,YAAK,WAAW,QAAS,SAASF,CAAS,sBAAsBS,CAAI,EAAE,EAChE,EAGnB,CAEA,MAAO,EACX,CAKA,8BAA+B,CAC3B,KAAK,WAAW,OAAQ,2CAA2C,EAEnE,GAAI,CAQA,GANA,KAAK,2BAA2B,mBAAmB,EAGnD,KAAK,uBAAuB,EAGxB,CAAC,KAAK,qBAAqB,EAC3B,MAAM,IAAI,MAAM,+CAA+C,EAGnE,YAAK,WAAW,OAAQ,qDAAqD,EACtE,EAEX,OAASnZ,EAAO,CACZ,KAAK,WAAW,QAAS,iCAAkC,CACvD,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGD,GAAI,CACA,YAAK,uBAAuB,EAC5B,KAAK,WAAW,OAAQ,iDAAiD,EAClE,EACX,OAASyZ,EAAa,CAClB,YAAK,WAAW,QAAS,iDAAkD,CACvE,cAAezZ,EAAM,QACrB,YAAayZ,EAAY,OAC7B,CAAC,EACM,EACX,CACJ,CACJ,CAKA,MAAM,yBAA0B,CAC5B,OAAO,KAAK,WAAW,eAAgB,MAAO/C,GAAgB,CAC1D,KAAK,WAAW,OAAQ,+CAAgD,CACpE,YAAaA,CACjB,CAAC,EAGD,IAAM/R,EAAe,KAAK,gBAG1B,GAAIA,EAAa,eAAgB,CAC7B,KAAK,WAAW,OAAQ,6DAA8D,CAClF,YAAa+R,EACb,cAAe/R,EAAa,cAC5B,kBAAmBA,EAAa,iBACpC,CAAC,EAGD,IAAI+U,EAAe,EACbC,EAAkB,GAExB,KAAOhV,EAAa,gBAAkB+U,EAAeC,GACjD,MAAM,IAAI,QAAQ5Y,GAAW,WAAWA,EAAS,GAAG,CAAC,EACrD2Y,IAGJ,GAAI/U,EAAa,eACb,MAAM,IAAI,MAAM,sEAAsE,CAE9F,CAGA,GAAI,CAEAA,EAAa,eAAiB,GAC9BA,EAAa,cAAgB,aAC7BA,EAAa,kBAAoB,KAAK,IAAI,EAC1CA,EAAa,YAAc+R,EAE3B,KAAK,WAAW,QAAS,kCAAmC,CACxD,YAAaA,EACb,UAAW/R,EAAa,iBAC5B,CAAC,EAGD,IAAIiV,EAAc,KACdC,EAAe,KAGnB,GAAI,CAIA,GAHAD,EAAc,MAAM,KAAK,2BAA2B,EAGhD,CAACA,GAAe,CAACA,EAAY,YAAc,CAACA,EAAY,UACxD,MAAM,IAAI,MAAM,2CAA2C,EAI/D,GAAI,CAAC,KAAK,6BAA6BA,CAAW,EAC9C,MAAM,IAAI,MAAM,uDAAuD,EAG3E,KAAK,WAAW,QAAS,sDAAuD,CAC5E,YAAalD,EACb,eAAgBkD,EAAY,WAAW,WAAW,KAClD,cAAeA,EAAY,UAAU,WAAW,KAChD,YAAa,EACjB,CAAC,CAEL,OAASE,EAAW,CAChB,KAAK,WAAW,QAAS,uCAAwC,CAC7D,YAAapD,EACb,UAAWoD,EAAU,YAAY,IACrC,CAAC,EACD,KAAK,kBAAkBA,EAAW,+BAA+B,CACrE,CAGA,GAAI,CAIJ,GAHID,EAAe,MAAM,OAAO,0BAA0B,qBAAqB,EAG3E,CAACA,GAAgB,CAACA,EAAa,YAAc,CAACA,EAAa,UAC3D,MAAM,IAAI,MAAM,kCAAkC,EAItD,GAAI,CAAC,KAAK,6BAA6BA,CAAY,EAC/C,MAAM,IAAI,MAAM,8CAA8C,EAG9D,KAAK,WAAW,QAAS,qCAAsC,CAC3D,YAAanD,EACb,eAAgBmD,EAAa,WAAW,WAAW,KACnD,cAAeA,EAAa,UAAU,WAAW,IACrD,CAAC,CAEL,OAASE,EAAY,CACjB,KAAK,WAAW,QAAS,8BAA+B,CACpD,YAAarD,EACb,UAAWqD,EAAW,YAAY,IACtC,CAAC,EACD,KAAK,kBAAkBA,EAAY,sBAAsB,CAC7D,CAGA,GAAI,CAACH,GAAe,CAACC,EACjB,MAAM,IAAI,MAAM,0CAA0C,EAI9D,YAAK,0CAA0CD,EAAaC,CAAY,EAExE,KAAK,WAAW,OAAQ,gEAAiE,CACrF,YAAanD,EACb,YAAa,CAAC,EAAEkD,GAAa,YAAcA,GAAa,WACxD,aAAc,CAAC,EAAEC,GAAc,YAAcA,GAAc,WAC3D,eAAgB,KAAK,IAAI,EAAIlV,EAAa,iBAC9C,CAAC,EAEM,CAAE,YAAAiV,EAAa,aAAAC,CAAa,CAEvC,OAAS7Z,EAAO,CAEZ,WAAK,WAAW,QAAS,yCAA0C,CAC/D,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACKA,CACV,QAAE,CAEE2E,EAAa,eAAiB,GAC9BA,EAAa,YAAc,KAE3B,KAAK,WAAW,QAAS,6BAA8B,CACnD,YAAa+R,CACjB,CAAC,CACL,CACJ,CAAC,CACL,CAKA,0CAA0CkD,EAAaC,EAAc,CACjE,GAAI,CAEID,GAAeA,EAAY,YAAcA,EAAY,YACrD,KAAK,iBAAiB,cAAgB,GACtC,KAAK,iBAAiB,QAAU,GAChC,KAAK,WAAW,OAAQ,kCAAkC,GAG1DC,GAAgBA,EAAa,YAAcA,EAAa,YACxD,KAAK,iBAAiB,SAAW,GACjC,KAAK,WAAW,OAAQ,kCAAkC,GAI1D,KAAK,iBAAiB,gBACtB,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,iBAAiB,4BAA8B,GACpD,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,WAAW,OAAQ,kDAAkD,GAI1ED,GAAe,KAAK,kBAAkB,KAAO,IAC7C,KAAK,iBAAiB,OAAS,GAC/B,KAAK,WAAW,OAAQ,qDAAqD,GAGjF,KAAK,WAAW,OAAQ,iDAAkD,CACtE,cAAe,KAAK,iBAAiB,cACrC,QAAS,KAAK,iBAAiB,QAC/B,SAAU,KAAK,iBAAiB,SAChC,sBAAuB,KAAK,iBAAiB,sBAC7C,4BAA6B,KAAK,iBAAiB,4BACnD,sBAAuB,KAAK,iBAAiB,sBAC7C,OAAQ,KAAK,iBAAiB,MAClC,CAAC,CAEL,OAAS5Z,EAAO,CACZ,KAAK,WAAW,QAAS,0DAA2D,CAChF,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,CACL,CACJ,CAKA,2BAA2Bga,EAAgB,UAAW,CAElD,IAAMC,EAAoB,CACtB,eAAgB,kBAAmB,sBACnC,oBAAqB,iBAAkB,cAC3C,EAEA,GAAI,CAACA,EAAkB,SAASD,CAAa,EACzC,WAAK,WAAW,QAAS,8CAA+C,CACpE,cAAeA,EACf,kBAAmBC,EACnB,UAAW,KAAK,IAAI,CACxB,CAAC,EACK,IAAI,MAAM,mDAAmDD,CAAa,EAAE,EAGtF,IAAMf,EAAU,CAAC,eAAgB,kBAAmB,qBAAqB,EAEzE,KAAK,WAAW,QAAS,wEAAyE,CAC9F,cAAee,EACf,UAAW,KAAK,IAAI,CACxB,CAAC,EAED,IAAIE,EAAgB,EAChBC,EAAa,EAgEjB,GA9DAlB,EAAQ,QAAQP,GAAa,CACzB,IAAME,EAAQ,KAAK,IAAIF,CAAS,OAAO,EACvC,GAAIE,EACA,GAAI,CAEIA,EAAM,aACN,aAAaA,EAAM,WAAW,EAIlC,IAAMwB,EAAgB,CAClB,OAAQxB,EAAM,OACd,OAAQA,EAAM,OACd,SAAUA,EAAM,SAChB,YAAaA,EAAM,MAAM,MAC7B,EAGAA,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,YAAc,KACpBA,EAAM,SAAW,KAGjB,IAAIyB,EAAmB,EACvBzB,EAAM,MAAM,QAAQrT,GAAQ,CACxB,GAAI,CACIA,EAAK,QAAU,OAAOA,EAAK,QAAW,aACtCA,EAAK,OAAO,IAAI,MAAM,8BAA8BmT,CAAS,OAAOsB,CAAa,EAAE,CAAC,EACpFK,IAER,OAASrB,EAAa,CAClB,KAAK,WAAW,OAAQ,sDAAuD,CAC3E,UAAWN,EACX,UAAWM,EAAY,YAAY,IACvC,CAAC,CACL,CACJ,CAAC,EAGDJ,EAAM,MAAQ,CAAC,EAEfsB,IAEA,KAAK,WAAW,QAAS,6BAA6BxB,CAAS,GAAI,CAC/D,cAAe0B,EACf,iBAAkBC,EAClB,cAAeL,CACnB,CAAC,CAEL,OAASha,EAAO,CACZma,IACA,KAAK,WAAW,QAAS,2CAA2CzB,CAAS,GAAI,CAC7E,UAAW1Y,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,cAAega,CACnB,CAAC,CACL,CAER,CAAC,EAGG,KAAK,gBACL,GAAI,CACA,IAAMM,EAAmB,CAAE,GAAG,KAAK,eAAgB,EAEnD,KAAK,gBAAgB,eAAiB,GACtC,KAAK,gBAAgB,WAAa,GAClC,KAAK,gBAAgB,aAAe,GACpC,KAAK,gBAAgB,YAAc,KACnC,KAAK,gBAAgB,qBAAuB,EAE5C,KAAK,WAAW,QAAS,mCAAoC,CACzD,cAAeA,EACf,cAAeN,CACnB,CAAC,CAEL,OAASha,EAAO,CACZ,KAAK,WAAW,QAAS,2DAA4D,CACjF,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,cAAega,CACnB,CAAC,CACL,CAIJ,KAAK,WAAW,OAAQ,mCAAoC,CACxD,cAAeA,EACf,cAAeE,EACf,WAAYC,EACZ,aAAclB,EAAQ,OACtB,UAAW,KAAK,IAAI,CACxB,CAAC,EAGD,WAAW,IAAM,CACb,KAAK,yCAAyC,CAClD,EAAG,GAAG,CACV,CAKA,yBAAyBjZ,EAAO0W,EAAa,CACzC,KAAK,WAAW,QAAS,oDAAqD,CAC1E,YAAaA,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGG,KAAK,kBACL,KAAK,gBAAgB,eAAiB,GACtC,KAAK,gBAAgB,WAAa,GAClC,KAAK,gBAAgB,aAAe,GACpC,KAAK,gBAAgB,YAAc,MAIvC,KAAK,YAAc,KACnB,KAAK,aAAe,KACpB,KAAK,cAAgB,KACrB,KAAK,OAAS,KACd,KAAK,YAAc,MAGfA,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,gBAAgB,KAC5E,KAAK,WAAW,OAAQ,mEAAmE,EAC3F,KAAK,6BAA6B,EAE1C,CAKA,kBAAkBua,EAAS,GAAI/Z,EAAU,UAAW,CAEhD,GAAI,KAAK,kBAAkB,cACvB,WAAK,WAAW,QAAS,yEAAyE,EAC5F,IAAI,MAAM,+CAA+C,EAGnE,IAAIqF,EAAW,EACTC,EAAc,IAEpB,KAAOD,EAAWC,GAAa,CAC3BD,IAGA,IAAMmM,EAAK,OAAO,gBAAgB,IAAI,WAAWuI,CAAM,CAAC,EAGlDC,EAAW,MAAM,KAAKxI,CAAE,EAAE,IAAI/R,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAGjF,GAAI,KAAK,kBAAkB,QAAQ,IAAIua,CAAQ,EAAG,CAU9C,GATA,KAAK,kBAAkB,iBACvB,KAAK,WAAW,QAAS,+BAAgC,CACrD,QAASha,EACT,QAASqF,EACT,eAAgB,KAAK,kBAAkB,eACvC,SAAU2U,EAAS,UAAU,EAAG,EAAE,EAAI,KAC1C,CAAC,EAGG,KAAK,kBAAkB,eAAiB,EACxC,WAAK,kBAAkB,cAAgB,GACvC,KAAK,WAAW,QAAS,8DAA8D,EACjF,IAAI,MAAM,6CAA6C,EAGjE,QACJ,CAGA,GAAI,CAAC,KAAK,mBAAmBxI,CAAE,EAAG,CAS9B,GARA,KAAK,kBAAkB,kBAAkB,kBACzC,KAAK,WAAW,OAAQ,0BAA2B,CAC/C,QAASxR,EACT,QAASqF,EACT,gBAAiB,KAAK,kBAAkB,kBAAkB,eAC9D,CAAC,EAGG,KAAK,kBAAkB,kBAAkB,gBAAkB,GAC3D,WAAK,kBAAkB,cAAgB,GACvC,KAAK,WAAW,QAAS,2DAA2D,EAC9E,IAAI,MAAM,0CAA0C,EAG9D,QACJ,CAGA,YAAK,kBAAkB,QAAQ,IAAI2U,CAAQ,EAC3C,KAAK,kBAAkB,UAAU,IAAIA,EAAU,CAC3C,UAAW,KAAK,IAAI,EACpB,QAASha,EACT,QAASqF,CACb,CAAC,EAGG,KAAK,YACA,KAAK,kBAAkB,WAAW,IAAI,KAAK,SAAS,GACrD,KAAK,kBAAkB,WAAW,IAAI,KAAK,UAAW,IAAI,GAAK,EAEnE,KAAK,kBAAkB,WAAW,IAAI,KAAK,SAAS,EAAE,IAAI2U,CAAQ,GAItE,KAAK,oBAAoB,EAEzB,KAAK,WAAW,QAAS,sBAAuB,CAC5C,QAASha,EACT,QAASqF,EACT,OAAQ0U,EACR,SAAU,KAAK,kBAAkB,QAAQ,IAC7C,CAAC,EAEMvI,CACX,CAGA,WAAK,WAAW,QAAS,sCAAsClM,CAAW,YAAa,CACnF,QAAStF,EACT,SAAU,KAAK,kBAAkB,QAAQ,IAC7C,CAAC,EACK,IAAI,MAAM,sCAAsCsF,CAAW,WAAW,CAChF,CAKA,mBAAmBkM,EAAI,CACnB,KAAK,kBAAkB,kBAAkB,eAGzC,IAAMyI,EAAa,IAAI,MAAM,GAAG,EAAE,KAAK,CAAC,EACxC,QAASnZ,EAAI,EAAGA,EAAI0Q,EAAG,OAAQ1Q,IAC3BmZ,EAAWzI,EAAG1Q,CAAC,CAAC,IAIpB,IAAMoZ,EAAiB,CACnB,QAAS,EACT,IAAK,EACL,UAAW,EACX,YAAa,EACb,QAAS,CACb,EAGIC,EAAiB,EACfC,EAAa5I,EAAG,OAEtB,QAAS1Q,EAAI,EAAGA,EAAI,IAAKA,IACrB,GAAImZ,EAAWnZ,CAAC,EAAI,EAAG,CACnB,IAAMwG,EAAc2S,EAAWnZ,CAAC,EAAIsZ,EACpCD,GAAkB7S,EAAc,KAAK,KAAKA,CAAW,CACzD,CAEJ4S,EAAe,QAAUC,EAIzB,IAAME,EADW,KAAK,IAAI,GAAGJ,CAAU,EACLG,EAClCF,EAAe,IAAM,CAAC,KAAK,KAAKG,CAAc,EAG9C,IAAIC,EAAe,EACnB,QAASxZ,EAAI,EAAGA,EAAI,IAAKA,IACrB,GAAImZ,EAAWnZ,CAAC,EAAI,EAAG,CACnB,IAAMwG,EAAc2S,EAAWnZ,CAAC,EAAIsZ,EACpCE,GAAgBhT,EAAcA,CAClC,CAEJ4S,EAAe,UAAY,CAAC,KAAK,KAAKI,CAAY,EAGlD,IAAMN,EAAW,MAAM,KAAKxI,CAAE,EAAE,IAAI/R,GAAK,OAAO,aAAaA,CAAC,CAAC,EAAE,KAAK,EAAE,EAClE8a,EAAmB,KAAK,0BAA0BP,CAAQ,EAChEE,EAAe,aAAe,EAAIK,EAAmBH,GAAc,EAGnEF,EAAe,QAAU,KAAK,kCAAkC1I,CAAE,EAGlE,IAAMgJ,EAAwB,KAAK,kCAAkChJ,CAAE,EAGjEiJ,EAAsB,KAAK,kBAAkB,kBAAkB,WAC/D9U,EACFuU,EAAe,SAAWO,GAC1BP,EAAe,KAAOO,EAAsB,IAC5CP,EAAe,WAAaO,EAAsB,IAClDP,EAAe,aAAeO,EAAsB,IACpDP,EAAe,SAAWO,EAAsB,IAChD,CAACD,EAGL,OAAK7U,GACD,KAAK,WAAW,OAAQ,wCAAyC,CAC7D,QAASuU,EAAe,QAAQ,QAAQ,CAAC,EACzC,IAAKA,EAAe,IAAI,QAAQ,CAAC,EACjC,UAAWA,EAAe,UAAU,QAAQ,CAAC,EAC7C,YAAaA,EAAe,YAAY,QAAQ,CAAC,EACjD,QAASA,EAAe,QAAQ,QAAQ,CAAC,EACzC,aAAcO,EACd,sBAAuBD,CAC3B,CAAC,EAGE7U,CACX,CAOA,0BAA0BlE,EAAM,CAE5B,IAAI8Y,EAAmB,EACnBzZ,EAAI,EAER,KAAOA,EAAIW,EAAK,QAAQ,CACpB,IAAIiZ,EAAc,EACdC,EAAgB,EAGpB,QAASC,EAAI,KAAK,IAAI,EAAG9Z,EAAI,GAAG,EAAG8Z,EAAI9Z,EAAG8Z,IAAK,CAC3C,IAAIC,EAAI,EACR,KAAO/Z,EAAI+Z,EAAIpZ,EAAK,QAAUA,EAAKX,EAAI+Z,CAAC,IAAMpZ,EAAKmZ,EAAIC,CAAC,GAAKA,EAAI,KAC7DA,IAEAA,EAAIH,IACJA,EAAcG,EACdF,EAAgB7Z,EAAI8Z,EAE5B,CAEIF,GAAe,GACfH,GAAoB,EACpBzZ,GAAK4Z,IAELH,GAAoB,EACpBzZ,GAAK,EAEb,CAEA,OAAOyZ,CACX,CAOA,kCAAkC9Y,EAAM,CAEpC,IAAIqZ,EAAe,EAGkB,KAAK,iCAAiCrZ,CAAI,IAE3EqZ,GAAgB,GAIpB,IAAMC,EAAkB,KAAK,wBAAwBtZ,CAAI,EACzDqZ,GAAgBC,EAAgB,MAGhC,IAAMC,EAAc,KAAK,mBAAmBvZ,CAAI,EAChD,OAAAqZ,GAAgBE,EAAc,GAGvB,KAAK,IAAI,EAAG,KAAK,IAAI,EAAGF,CAAY,CAAC,CAChD,CAOA,iCAAiCrZ,EAAM,CAEnC,IAAMwZ,EAAW,CACb,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,EACvB,CAAC,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,GAAG,EACvC,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,EACvB,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,CAC3B,EAEA,QAAWlU,KAAWkU,EAClB,QAAS,EAAI,EAAG,GAAKxZ,EAAK,OAASsF,EAAQ,OAAQ,IAAK,CACpD,IAAI2D,EAAQ,GACZ,QAASkQ,EAAI,EAAGA,EAAI7T,EAAQ,OAAQ6T,IAChC,GAAInZ,EAAK,EAAImZ,CAAC,IAAM7T,EAAQ6T,CAAC,EAAG,CAC5BlQ,EAAQ,GACR,KACJ,CAEJ,GAAIA,EAAO,MAAO,EACtB,CAGJ,MAAO,EACX,CAOA,wBAAwBjJ,EAAM,CAC1B,IAAIyZ,EAAO,EACPC,EAAY1Z,EAAK,OAAS,EAE9B,QAAW2Z,KAAQ3Z,EACfyZ,IAASE,IAAS,GAAG,SAAS,CAAC,EAAE,MAAM,GAAG,EAAE,OAAS,EAGzD,IAAMC,GAAaF,EAAYD,GAAQC,EACjCG,EAAWJ,EAAOC,EAGlBI,EAAY,KAAK,IAAI,GAAMD,CAAQ,EAGzC,MAAO,CAAE,MAFK,KAAK,IAAI,EAAG,EAAIC,EAAY,EAAE,EAE5B,UAAAF,EAAW,SAAAC,EAAU,UAAAC,CAAU,CACnD,CAOA,mBAAmB9Z,EAAM,CACrB,GAAIA,EAAK,OAAS,GAAI,MAAO,GAE7B,IAAI+Z,EAAiB,EAGrB,QAASC,EAAS,EAAGA,GAAUha,EAAK,OAAS,EAAGga,IAAU,CACtD,IAAIC,EAAU,EACVC,EAAc,EAElB,QAAS7a,EAAI,EAAGA,EAAIW,EAAK,OAASga,EAAQ3a,IAClCW,EAAKX,CAAC,IAAMW,EAAKX,EAAI2a,CAAM,GAC3BC,IAEJC,IAGJ,GAAIA,EAAc,EAAG,CACjB,IAAMX,EAAcU,EAAUC,EAC9BH,EAAiB,KAAK,IAAIA,EAAgBR,CAAW,CACzD,CACJ,CAEA,OAAOQ,CACX,CAOA,kCAAkChK,EAAI,CAElC,IAAMyJ,EAAW,CAEb,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,EACvB,CAAC,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,GAAG,EAGvC,CAAC,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,EAAG,CAAC,EACvB,CAAC,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,IAAK,GAAG,EAGvC,CAAC,EAAG,IAAK,EAAG,IAAK,EAAG,IAAK,EAAG,GAAG,EAC/B,CAAC,IAAK,EAAG,IAAK,EAAG,IAAK,EAAG,IAAK,CAAC,CACnC,EAEA,QAAWlU,KAAWkU,EAClB,QAASna,EAAI,EAAGA,GAAK0Q,EAAG,OAASzK,EAAQ,OAAQjG,IAAK,CAClD,IAAI4J,EAAQ,GACZ,QAASkQ,EAAI,EAAGA,EAAI7T,EAAQ,OAAQ6T,IAChC,GAAIpJ,EAAG1Q,EAAI8Z,CAAC,IAAM7T,EAAQ6T,CAAC,EAAG,CAC1BlQ,EAAQ,GACR,KACJ,CAEJ,GAAIA,EAAO,MAAO,EACtB,CAOJ,OAHmB,KAAK,uBAAuB8G,CAAE,EACZ,OAAOjQ,GAAKA,EAAI,CAAG,EAAE,OAE/BiQ,EAAG,OAAS,EAC3C,CAOA,uBAAuB/P,EAAM,CAEzB,IAAMma,EAAa,CAAC,EAEpB,QAAS,EAAI,EAAG,GAAKna,EAAK,OAAS,EAAY,IAAK,CAChD,IAAMoa,EAASpa,EAAK,MAAM,EAAG,EAAI,CAAU,EACrCyF,EAAY,CAAC,EAEnB,QAAWkU,KAAQS,EACf3U,EAAUkU,CAAI,GAAKlU,EAAUkU,CAAI,GAAK,GAAK,EAG/C,IAAI/T,EAAU,EACd,QAAWlB,KAAS,OAAO,OAAOe,CAAS,EAAG,CAC1C,IAAMI,EAAcnB,EAAQ,EAC5BkB,GAAWC,EAAc,KAAK,KAAKA,CAAW,CAClD,CAEAsU,EAAW,KAAKvU,CAAO,CAC3B,CAEA,OAAOuU,CACX,CAKA,4BAA4BpK,EAAI,CAE5B,IAAMsK,EAAWtK,EAAG,MAAM4J,GAAQA,IAAS,CAAC,EACtCW,EAAUvK,EAAG,MAAM4J,GAAQA,IAAS,GAAG,EAE7C,GAAIU,GAAYC,EACZ,MAAO,GAIX,IAAIC,EAAkB,EACtB,QAASlb,EAAI,EAAGA,EAAI0Q,EAAG,OAAQ1Q,IAO3B,GANI0Q,EAAG1Q,CAAC,IAAM0Q,EAAG1Q,EAAE,CAAC,EAAI,GAAK0Q,EAAG1Q,CAAC,IAAM0Q,EAAG1Q,EAAE,CAAC,EAAI,EAC7Ckb,IAEAA,EAAkB,EAGlBA,GAAmB,EACnB,MAAO,GAKf,QAASC,EAAgB,EAAGA,GAAiB,KAAK,MAAMzK,EAAG,OAAS,CAAC,EAAGyK,IACpE,QAASC,EAAQ,EAAGA,GAAS1K,EAAG,OAASyK,EAAgB,EAAGC,IAAS,CACjE,IAAMC,EAAW3K,EAAG,MAAM0K,EAAOA,EAAQD,CAAa,EAChDG,EAAW5K,EAAG,MAAM0K,EAAQD,EAAeC,EAAQD,EAAgB,CAAC,EAE1E,GAAIE,EAAS,MAAM,CAACf,EAAMpT,IAAUoT,IAASgB,EAASpU,CAAK,CAAC,EACxD,MAAO,EAEf,CAGJ,MAAO,EACX,CAKA,MAAM,gBAAiB,CACnB,IAAM5D,EAAM,KAAK,IAAI,EACfoL,EAAS,KACX6M,EAAe,EACbC,EAAe,CAAC,EAItB,GAAI,KAAK,kBAAkB,UAAU,KAAO,KAAK,kBAAkB,iBAAkB,CACjF,IAAMC,EAAU,MAAM,KAAK,KAAK,kBAAkB,UAAU,QAAQ,CAAC,EAC/DC,EAAWD,EAAQ,MAAM,EAAGA,EAAQ,OAAS,KAAK,kBAAkB,gBAAgB,EAE1F,OAAW,CAACvC,CAAQ,IAAKwC,EACrBF,EAAa,KAAKtC,CAAQ,EAC1BqC,IAGIC,EAAa,QAAU,MACvB,KAAK,qBAAqBA,CAAY,EACtCA,EAAa,OAAS,EAGlC,CAGA,OAAW,CAACtC,EAAUyC,CAAQ,IAAK,KAAK,kBAAkB,UAAU,QAAQ,EACpErY,EAAMqY,EAAS,UAAYjN,IAC3B8M,EAAa,KAAKtC,CAAQ,EAC1BqC,IAGIC,EAAa,QAAU,MACvB,KAAK,qBAAqBA,CAAY,EACtCA,EAAa,OAAS,IAM9BA,EAAa,OAAS,GACtB,KAAK,qBAAqBA,CAAY,EAI1C,OAAW,CAAC1N,EAAW8N,CAAU,IAAK,KAAK,kBAAkB,WAAW,QAAQ,EAC5E,GAAIA,EAAW,KAAO,KAAK,kBAAkB,cAAe,CACxD,IAAMH,EAAU,MAAM,KAAKG,CAAU,EAC/BF,EAAWD,EAAQ,MAAM,EAAGA,EAAQ,OAAS,KAAK,kBAAkB,aAAa,EAEvF,QAAWvC,KAAYwC,EACnBE,EAAW,OAAO1C,CAAQ,EAC1B,KAAK,kBAAkB,QAAQ,OAAOA,CAAQ,EAC9C,KAAK,kBAAkB,UAAU,OAAOA,CAAQ,EAChDqC,GAER,CAIAA,EAAe,IACf,MAAM,KAAK,uBAAuB,EAGlCA,EAAe,GACf,KAAK,WAAW,QAAS,qBAAqBA,CAAY,mBAAoB,CAC1E,aAAcA,EACd,aAAc,KAAK,kBAAkB,QAAQ,KAC7C,iBAAkB,KAAK,kBAAkB,UAAU,KACnD,eAAgB,KAAK,yBAAyB,CAClD,CAAC,CAET,CAMA,qBAAqBtb,EAAO,CAExB,QAAWgE,KAAQhE,EACf,KAAK,kBAAkB,QAAQ,OAAOgE,CAAI,EAC1C,KAAK,kBAAkB,UAAU,OAAOA,CAAI,CAEpD,CAMA,0BAA2B,CACvB,IAAM4X,EAAW,KAAK,kBAAkB,QAAQ,KAC1CC,EAAa,KAAK,gBAAgB,aAExC,OAAO,KAAK,IAAI,IAAK,KAAK,MAAOD,EAAWC,EAAc,GAAG,CAAC,CAClE,CAKA,qBAAsB,CAClB,MAAO,CACH,SAAU,KAAK,kBAAkB,QAAQ,KACzC,eAAgB,KAAK,kBAAkB,eACvC,aAAc,KAAK,kBAAkB,kBAAkB,aACvD,gBAAiB,KAAK,kBAAkB,kBAAkB,gBAC1D,SAAU,KAAK,kBAAkB,cAAc,eAC/C,gBAAiB,KAAK,kBAAkB,cAAc,gBACtD,cAAe,KAAK,kBAAkB,cACtC,aAAc,KAAK,kBAAkB,WAAW,KAChD,YAAa,KAAK,oBAAsB,CAC5C,CACJ,CAKA,wBAAyB,CACrB,KAAK,WAAW,OAAQ,8BAA8B,EAEtD,KAAK,kBAAkB,QAAQ,MAAM,EACrC,KAAK,kBAAkB,UAAU,MAAM,EACvC,KAAK,kBAAkB,WAAW,MAAM,EACxC,KAAK,kBAAkB,eAAiB,EACxC,KAAK,kBAAkB,kBAAkB,aAAe,EACxD,KAAK,kBAAkB,kBAAkB,gBAAkB,EAC3D,KAAK,kBAAkB,cAAc,eAAiB,EACtD,KAAK,kBAAkB,cAAc,gBAAkB,GACvD,KAAK,kBAAkB,cAAgB,GAEvC,KAAK,WAAW,OAAQ,oCAAoC,CAChE,CAKA,qBAAsB,CAClB,IAAMxY,EAAM,KAAK,IAAI,EAGrB,GAAI,KAAK,kBAAkB,cAAc,eAAiB,MAAS,EAC/D,GAAI,CAEA,IAAMyY,EAAU,CAAC,EACjB,QAAS/b,EAAI,EAAGA,EAAI,IAAKA,IACrB+b,EAAQ,KAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,CAAC,EAI3D,IAAMC,EAAgBD,EAAQ,IAAIrL,GAAM,MAAM,KAAKA,CAAE,EAAE,IAAI/R,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EACnGsd,EAAgB,IAAI,IAAID,CAAa,EAEvCC,EAAc,KAAO,KACrB,KAAK,kBAAkB,cAAc,gBAAkB,GACvD,KAAK,WAAW,QAAS,iDAAkD,CACvE,UAAWA,EAAc,KACzB,WAAYF,EAAQ,MACxB,CAAC,GAGL,KAAK,kBAAkB,cAAc,eAAiBzY,CAE1D,OAAS5E,EAAO,CACZ,KAAK,WAAW,QAAS,wBAAyB,CAC9C,UAAWA,EAAM,YAAY,IACjC,CAAC,CACL,CAGJ,KAAK,kBAAkB,cAAc,gBACzC,CAKA,oBAAoB0Y,EAAWhC,EAAa5U,EAAS,CACjD,IAAM8W,EAAQ,KAAK,IAAIF,CAAS,OAAO,EAEvC,GAAI,CAACE,EAAO,CACR,KAAK,WAAW,QAAS,UAAUF,CAAS,qCAAqC,EACjF,MACJ,CAGA,GAAIE,EAAM,SAAWlC,EAAa,CAC9B,KAAK,WAAW,OAAQ,gDAAgDgC,CAAS,IAAK,CAClF,oBAAqBhC,EACrB,aAAckC,EAAM,OACpB,OAAQA,EAAM,MAClB,CAAC,EACD,MACJ,CAEA,GAAI,CAACA,EAAM,OAAQ,CACf,KAAK,WAAW,OAAQ,uCAAuCF,CAAS,IAAK,CACzE,YAAahC,CACjB,CAAC,EACD,MACJ,CAEA,GAAI,CAEA,IAAMoC,EAAeF,EAAM,SAAW,KAAK,IAAI,EAAIA,EAAM,SAAW,EAEpE,KAAK,WAAW,OAAQ,UAAUF,CAAS,iCAAkC,CACzE,YAAahC,EACb,aAAcoC,EACd,QAAShX,EACT,YAAa8W,EAAM,MAAM,MAC7B,CAAC,EAGDA,EAAM,OAAS,GACfA,EAAM,OAAS,KACfA,EAAM,YAAc,KACpBA,EAAM,SAAW,KAGjB,WAAW,IAAM,CACb,GAAI,CACA,KAAK,oBAAoBF,CAAS,CACtC,OAAS8E,EAAY,CACjB,KAAK,WAAW,QAAS,mDAAmD9E,CAAS,IAAK,CACtF,UAAW8E,EAAW,YAAY,KAClC,aAAcA,EAAW,OAC7B,CAAC,CACL,CACJ,EAAG,EAAE,CAET,OAASxd,EAAO,CACZ,KAAK,WAAW,QAAS,qDAAqD0Y,CAAS,IAAK,CACxF,YAAahC,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EAGD,GAAI,CACA,KAAK,2BAA2B,gBAAgB,CACpD,OAASyd,EAAgB,CACrB,KAAK,WAAW,QAAS,kDAAmD,CACxE,cAAezd,EAAM,QACrB,eAAgByd,EAAe,OACnC,CAAC,CACL,CACJ,CACJ,CAKA,0CAA2C,CACvC,IAAMxE,EAAU,CAAC,eAAgB,kBAAmB,qBAAqB,EACrEyE,EAAmB,EAEvB,KAAK,WAAW,OAAQ,gDAAgD,EAExEzE,EAAQ,QAAQP,GAAa,CACzB,IAAME,EAAQ,KAAK,IAAIF,CAAS,OAAO,EAEvC,GAAI,CAACE,EAAO,CACR8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,oCAAoC,EAChF,MACJ,CAGIE,EAAM,SACN8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,wCAAyC,CACjF,OAAQE,EAAM,OACd,SAAUA,EAAM,QACpB,CAAC,GAGDA,EAAM,SAAW,OACjB8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,6CAA8C,CACtF,OAAQE,EAAM,MAClB,CAAC,GAGDA,EAAM,cAAgB,OACtB8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,4CAA4C,GAGxFE,EAAM,MAAM,OAAS,IACrB8E,IACA,KAAK,WAAW,QAAS,UAAUhF,CAAS,iDAAkD,CAC1F,YAAaE,EAAM,MAAM,MAC7B,CAAC,EAET,CAAC,EAGG,KAAK,kBACD,KAAK,gBAAgB,gBACrB,KAAK,gBAAgB,YACrB,KAAK,gBAAgB,gBACrB8E,IACA,KAAK,WAAW,QAAS,6DAA8D,CACnF,eAAgB,KAAK,gBAAgB,eACrC,WAAY,KAAK,gBAAgB,WACjC,aAAc,KAAK,gBAAgB,YACvC,CAAC,GAILA,IAAqB,EACrB,KAAK,WAAW,OAAQ,uDAAuD,GAE/E,KAAK,WAAW,QAAS,wDAAyD,CAC9E,iBAAkBA,CACtB,CAAC,EAGD,WAAW,IAAM,CACb,KAAK,6BAA6B,CACtC,EAAG,GAAI,EAEf,CAIA,4BAA6B,CACzB,IAAMtF,EAAc,CAChB,UAAW,KAAK,IAAI,EACpB,YAAa,KAAK,qBAAqB,EACvC,QAAS,CAAC,EACV,SAAU,CAAE,GAAG,KAAK,kBAAmB,EACvC,eAAgB,CAAE,GAAG,KAAK,eAAgB,CAC9C,EAIA,MAFmB,CAAC,eAAgB,kBAAmB,qBAAqB,EAEjE,QAAQM,GAAa,CAC5B,IAAMC,EAAoB,IAAID,CAAS,QACjCE,EAAQ,KAAKD,CAAiB,EAEhCC,EACAR,EAAY,QAAQM,CAAS,EAAI,CAC7B,OAAQE,EAAM,OACd,OAAQA,EAAM,OACd,YAAaA,EAAM,MAAM,OACzB,WAAY,CAAC,CAACA,EAAM,WACxB,EAEAR,EAAY,QAAQM,CAAS,EAAI,CAAE,MAAO,WAAY,CAE9D,CAAC,EAEMN,CACX,CAMA,MAAM,mBAAoB,CACtB,OAAO,KAAK,WAAW,sBAAuB,MAAO1B,GAAgB,CACjE,KAAK,WAAW,OAAQ,mCAAoC,CACxD,YAAaA,EACb,mBAAoB,KAAK,mBACzB,aAAc,KAAK,gBAAgB,iBAAmB,MAC1D,CAAC,EAED,GAAI,CASA,GAHA,KAAK,wBAAwB,EAGzB,CAAC,KAAK,gBAAgB,EACtB,MAAM,IAAI,MAAM,kEAAkE,EAItF,KAAK,mBAAqB,EAG1B,KAAK,YAAc,OAAO,0BAA0B,aAAa,EAEjE,KAAK,WAAW,QAAS,yBAA0B,CAC/C,YAAaA,EACb,WAAY,KAAK,YAAY,OAC7B,YAAa,MAAM,QAAQ,KAAK,WAAW,GAAK,KAAK,YAAY,SAAW,EAChF,CAAC,EAOD,IAAMiH,EAAW,MAAM,KAAK,wBAAwB,EAKpD,GAJA,KAAK,YAAcA,EAAS,YAC5B,KAAK,aAAeA,EAAS,aAGzB,CAAC,KAAK,aAAa,YAAc,CAAC,KAAK,aAAa,UACpD,MAAM,IAAI,MAAM,wCAAwC,EAG5D,GAAI,CAAC,KAAK,cAAc,YAAc,CAAC,KAAK,cAAc,UACtD,MAAM,IAAI,MAAM,yCAAyC,EAQ7D,IAAMC,EAAkB,MAAM,OAAO,0BAA0B,wBAC3D,MAAM,OAAO,OAAO,UAAU,OAAQ,KAAK,YAAY,SAAS,CACpE,EACMC,EAAmB,MAAM,OAAO,0BAA0B,wBAC5D,MAAM,OAAO,OAAO,UAAU,OAAQ,KAAK,aAAa,SAAS,CACrE,EAGA,GAAI,CAACD,GAAmB,CAACC,EACrB,MAAM,IAAI,MAAM,qCAAqC,EAGzD,KAAK,WAAW,OAAQ,iDAAkD,CACtE,YAAanH,EACb,mBAAoB,CAAC,CAACkH,EACtB,oBAAqB,CAAC,CAACC,EACvB,kBAAmBD,EAAgB,OACnC,UAAW,KAAK,IAAI,CACxB,CAAC,EAOD,IAAME,EAAoB,MAAM,OAAO,0BAA0B,6BAC7D,KAAK,YAAY,UACjB,KAAK,aAAa,WAClB,MACJ,EAEMC,EAAqB,MAAM,OAAO,0BAA0B,6BAC9D,KAAK,aAAa,UAClB,KAAK,aAAa,WAClB,OACJ,EAGA,GAAI,CAACD,GAAqB,OAAOA,GAAsB,SACnD,WAAK,WAAW,QAAS,8DAA+D,CAAE,YAAApH,CAAY,CAAC,EACjG,IAAI,MAAM,oFAAoF,EAGxG,GAAI,CAACoH,EAAkB,SAAW,CAACA,EAAkB,UACjD,WAAK,WAAW,QAAS,sEAAuE,CAC5F,YAAApH,EACA,WAAY,CAAC,CAACoH,EAAkB,QAChC,aAAc,CAAC,CAACA,EAAkB,SACtC,CAAC,EACK,IAAI,MAAM,6EAA6E,EAGjG,GAAI,CAACC,GAAsB,OAAOA,GAAuB,SACrD,WAAK,WAAW,QAAS,+DAAgE,CAAE,YAAArH,CAAY,CAAC,EAClG,IAAI,MAAM,qFAAqF,EAGzG,GAAI,CAACqH,EAAmB,SAAW,CAACA,EAAmB,UACnD,WAAK,WAAW,QAAS,uEAAwE,CAC7F,YAAArH,EACA,WAAY,CAAC,CAACqH,EAAmB,QACjC,aAAc,CAAC,CAACA,EAAmB,SACvC,CAAC,EACK,IAAI,MAAM,8EAA8E,EAQlG,KAAK,wBAAwB,CACzB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,gBAAiB,GACjB,sBAAuB,GACvB,OAAQ,EACZ,CAAC,EAMD,KAAK,YAAc,GACnB,KAAK,eAAe,YAAY,EAGhC,KAAK,qBAAqB,EAG1B,KAAK,YAAc,KAAK,eAAe,kBAAkB,aAAc,CACnE,QAAS,EACb,CAAC,EAGD,KAAK,iBAAiB,KAAK,WAAW,EAEtC,KAAK,WAAW,QAAS,uBAAwB,CAC7C,YAAarH,EACb,aAAc,KAAK,YAAY,MAC/B,eAAgB,KAAK,YAAY,OACrC,CAAC,EAOD,IAAMsH,EAAQ,MAAM,KAAK,eAAe,YAAY,CAChD,oBAAqB,GACrB,oBAAqB,EACzB,CAAC,EAED,MAAM,KAAK,eAAe,oBAAoBA,CAAK,EAEnD,GAAI,CACA,IAAMC,EAAiB,KAAK,+BAA+BD,EAAM,GAAG,EACpE,KAAK,wBAA0BC,EAE/B,KAAK,WAAW,OAAQ,0DAA2D,CAC/E,YAAaA,EACb,QAAS,gBACb,CAAC,EAGD,KAAK,mBAAmB,4CAA4CA,CAAc,GAAI,QAAQ,CAClG,OAASje,EAAO,CACZ,KAAK,WAAW,QAAS,gDAAiD,CAAE,MAAOA,EAAM,OAAQ,CAAC,CAEtG,CAKA,IAAMke,EAA6B,KAAK,IAAI,EACtCC,EAA6B,MAAM,KAAK,oBAAoB,EAC5DC,EAAwB,KAAK,6BAA6B,KAAK,eAAe,kBAAkB,GAAG,EACnGC,EAAsBD,EAAsB,MAClD,GAAI,CAACD,GAA8BE,IAAwB,EACvD,WAAK,mBACD,uPAGA,QACJ,EACM,IAAI,MAAM,2FAAsF,EAiC1G,GA/BA,KAAK,WAAWA,EAAsB,EAAI,OAAS,OAAQ,2CAA4C,CACnG,iBAAkBD,EAClB,kBAAmB,KAAK,eAAe,kBACvC,uBAAwB,KAAK,IAAI,EAAIF,EACrC,sBAAuBC,CAC3B,CAAC,EACD,KAAK,4BAA4B,eAAgB,KAAK,eAAe,kBAAkB,IAAK,CACxF,kBAAmB,KAAK,eAAe,kBACvC,uBAAwB,KAAK,IAAI,EAAID,EACrC,sBAAuBC,CAC3B,CAAC,EACIA,GACD,KAAK,mBAAmB,4JAA6J,QAAQ,EAE7LE,IAAwB,GACxB,KAAK,mBAAmB,mIAAoI,QAAQ,EAGxK,KAAK,WAAW,QAAS,0BAA2B,CAChD,YAAa3H,EACb,kBAAmB,KAAK,eAAe,kBACvC,gBAAiB,KAAK,eAAe,eACzC,CAAC,EAMD,KAAK,iBAAmB,OAAO,0BAA0B,yBAAyB,EAG9E,CAAC,KAAK,kBAAoB,KAAK,iBAAiB,OAASnX,EAA4B,MAAM,6BAC3F,MAAM,IAAI,MAAM,4CAA4C,EAQhE,IAAM+e,EAAgB,OAAO,0BAA0B,4BAA4B,EAEnF,GAAI,CAACA,EACD,MAAM,IAAI,MAAM,oDAAoD,EAYxE,GAJA,KAAK,UAAY,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW/e,EAA4B,MAAM,iBAAiB,CAAC,CAAC,EAClH,IAAI,GAAK,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAGlD,CAAC,KAAK,WAAa,KAAK,UAAU,SAAYA,EAA4B,MAAM,kBAAoB,EACpG,MAAM,IAAI,MAAM,qCAAqC,EAIzD,KAAK,aAAe,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EACnE,IAAI,GAAK,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EACtD,KAAK,0BAA0B,EAO/B,IAAMgf,EAAgB,CAClB,MAAO,UACP,MAAO,IACP,MAAO,QACP,QAAS,2CACL,aAAc,GAClB,YAAa,GACb,WAAY,EACZ,EAMEC,EAAmB,KAAK,IAAI,EAG5BC,EAAe,CAEjB,EAAG,QACH,EAAG,KAAK,eAAe,iBAAiB,IACxC,EAAGlf,EAA4B,iBAC/B,GAAIif,EAGJ,EAAGV,EACH,EAAGC,EAGH,GAAI,KAAK,YACT,GAAI,KAAK,UACT,GAAI,KAAK,aAGT,GAAI,KAAK,iBACT,GAAIO,EAGJ,IAAK,MAML,GAAI/e,EAA4B,gBAGhC,GAAI,CACA,EAAGqe,EAAgB,UAAU,EAAG,EAAE,EAClC,EAAGC,EAAiB,UAAU,EAAG,EAAE,CACvC,CACJ,EAMA,GAAI,CACA,IAAM/Y,EAAmB,KAAK,0BAA0B2Z,CAAY,CAExE,OAASC,EAAiB,CACtB,MAAM,IAAI,MAAM,mCAAmCA,EAAgB,OAAO,EAAE,CAChF,CAmCA,GA7BA,KAAK,WAAW,OAAQ,6CAA8C,CAClE,YAAahI,EACb,QAAS+H,EAAa,QACtB,SAAU,GACV,cAAe,GACf,aAAc,CAAC,CAACA,EAAa,UAC7B,cAAeF,EAAc,MAC7B,UAAWC,EACX,kBAAmB,EACvB,CAAC,EAGD,KAAK,oBAAoB,IAAI,YAAY,iBAAkB,CACvD,OAAQ,CACJ,KAAM,QACN,UAAWA,EACX,cAAeD,EAAc,MAC7B,YAAa7H,CACjB,CACJ,CAAC,CAAC,EAUEnX,EAA4B,kBAAmB,CAC/C,KAAK,oBAAoB,MAAM,EAC/B,GAAM,CAAE,KAAAof,CAAK,EAAI,MAAM,KAAK,qBAAqBpR,GAAU,KAAK,EAChE,MAAO,CAAE,EAAG,QAAS,KAAMoR,CAAK,CACpC,CAEA,YAAK,oBAAoB,KAAK,EACvBF,CAEX,OAASze,EAAO,CAKZ,WAAK,WAAW,QAAS,4DAA6D,CAClF,YAAa0W,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,MAAO,KAAK,qBAAqBA,CAAK,EACtC,mBAAoB,KAAK,kBAC7B,CAAC,EAGD,KAAK,4BAA4B,EAGjC,KAAK,eAAe,cAAc,EAG5BA,CACV,CACJ,EAAG,GAAK,CACZ,CAKA,qBAAqBA,EAAO,CACxB,IAAMgE,EAAUhE,EAAM,QAAQ,YAAY,EAE1C,OAAIgE,EAAQ,SAAS,YAAY,EAAU,gBACvCA,EAAQ,SAAS,UAAU,GAAKA,EAAQ,SAAS,UAAU,EAAU,iBACrEA,EAAQ,SAAS,aAAa,EAAU,iBACxCA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,WAAW,EAAU,aACpEA,EAAQ,SAAS,iBAAiB,EAAU,eAC5CA,EAAQ,SAAS,OAAO,GAAKA,EAAQ,SAAS,KAAK,EAAU,eAC7DA,EAAQ,SAAS,cAAc,EAAU,qBACzCA,EAAQ,SAAS,SAAS,EAAU,gBACpCA,EAAQ,SAAS,YAAY,EAAU,qBAEpC,SACX,CAKA,6BAA8B,CAC1B,GAAI,CAEA,KAAK,qCAAqC,EAGtC,KAAK,iBACL,KAAK,eAAe,MAAM,EAC1B,KAAK,eAAiB,MAItB,KAAK,cACL,KAAK,YAAY,MAAM,EACvB,KAAK,YAAc,MAIvB,KAAK,YAAc,GACnB,KAAK,WAAa,GAGlB,KAAK,wBAAwB,CACzB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,sBAAuB,GACvB,OAAQ,EACZ,CAAC,EAGD,KAAK,wBAAwB,EAAE,MAAMhE,GAAS,CAC1C,KAAK,WAAW,QAAS,sCAAuC,CAC5D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAED,KAAK,WAAW,QAAS,iEAAiE,CAE9F,OAAS4e,EAAc,CACnB,KAAK,WAAW,QAAS,sCAAuC,CAC5D,UAAWA,EAAa,YAAY,KACpC,aAAcA,EAAa,OAC/B,CAAC,CACL,CACJ,CAKA,wBAAwBC,EAAS,CAC7B,IAAMC,EAAc,CAAE,GAAG,KAAK,gBAAiB,EAE/C,GAAI,CACA,OAAO,OAAO,KAAK,iBAAkBD,CAAO,EAE5C,KAAK,WAAW,QAAS,4BAA6B,CAClD,aAAc,OAAO,KAAKA,CAAO,EAAE,OACnC,cAAe,OAAO,KAAK,KAAK,gBAAgB,EAAE,MACtD,CAAC,CAEL,OAAS7e,EAAO,CAEZ,WAAK,iBAAmB8e,EACxB,KAAK,WAAW,QAAS,+CAAgD,CACrE,UAAW9e,EAAM,YAAY,IACjC,CAAC,EACKA,CACV,CACJ,CAgBA,MAAM,kBAAkB+e,EAAW,CAC/B,OAAO,KAAK,WAAW,sBAAuB,MAAOrI,GAAgB,CACjE,GAAI,CAEA,GADA,KAAK,wBAAwB,EACzB,CAAC,KAAK,gBAAgB,EACtB,MAAM,IAAI,MAAM,kEAAkE,EAEtF,KAAK,oBAAoB,MAAM,EAG/B,IAAMsI,EAAaC,GAAe,OAAOF,EAAU,IAAI,CAAC,EAClDhR,EAAO,KAAK,2BAA2BiR,EAAYzR,GAAU,KAAK,EAClE,CAAE,IAAK2R,CAAU,EAAIC,GAAiBpR,CAAI,EAEhD,KAAK,YAAc,GACnB,KAAK,eAAe,YAAY,EAEhC,IAAM4P,EAAW,MAAM,KAAK,wBAAwB,EAGpD,GAFA,KAAK,YAAcA,EAAS,YAC5B,KAAK,aAAeA,EAAS,aACzB,CAAC,KAAK,aAAa,YAAc,CAAC,KAAK,cAAc,WACrD,MAAM,IAAI,MAAM,oCAAoC,EAGxD,KAAK,qBAAqB,EAK1B,KAAK,qBAAuB,MAAM,KAAK5P,EAAK,YACvC9N,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EAAE,YAAY,CAAC,EAAE,KAAK,GAAG,EAElE,MAAM,KAAK,eAAe,qBAAqB,CAAE,KAAM,QAAS,IAAKif,CAAU,CAAC,EAChF,MAAM,KAAK,eAAe,oBAAoB,MAAM,KAAK,eAAe,aAAa,CACjF,oBAAqB,GACrB,oBAAqB,EACzB,CAAC,CAAC,EAEF,KAAK,wBACD,KAAK,+BAA+B,KAAK,eAAe,iBAAiB,GAAG,EAIhF,MAAM,KAAK,oBAAoB,EAE/B,IAAME,EAAS,MAAOnf,GAAM,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,UAAWA,CAAC,CAAC,EAC7E,CAAE,KAAA0e,CAAK,EAAI,MAAM,KAAK,qBAAqBpR,GAAU,OAAQ,CAC/D,WAAY,MAAMF,GAAe+R,EAAQJ,CAAU,CACvD,CAAC,EAED,YAAK,oBAAoB,IAAI,YAAY,iBAAkB,CACvD,OAAQ,CAAE,KAAM,SAAU,UAAW,KAAK,IAAI,EAAG,YAAAtI,CAAY,CACjE,CAAC,CAAC,EAEK,CAAE,EAAG,SAAU,KAAMiI,CAAK,CACrC,OAAS3e,EAAO,CACZ,WAAK,WAAW,QAAS,8BAA+B,CACpD,YAAA0W,EACA,UAAW1W,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACD,KAAK,eAAe,cAAc,EAC5BA,CACV,CACJ,EAAG,GAAK,CACZ,CAEA,MAAM,mBAAmB+e,EAAW,CAIhC,OAAIA,GAAa,OAAOA,EAAU,MAAS,SAChC,KAAK,kBAAkBA,CAAS,EAEpC,KAAK,WAAW,sBAAuB,MAAOrI,GAAgB,CACjE,KAAK,WAAW,OAAQ,oCAAqC,CACzD,YAAaA,EACb,aAAc,CAAC,CAACqI,EAChB,UAAWA,GAAW,KACtB,aAAcA,GAAW,QACzB,eAAgBA,GAAW,SAC/B,CAAC,EAED,GAAI,CAkBA,GAZA,KAAK,wBAAwB,EAE7B,KAAK,WAAW,QAAS,qCAAsC,CAC3D,YAAarI,EACb,aAAc,CAAC,CAACqI,EAChB,UAAWA,GAAW,KACtB,WAAY,CAAC,CAACA,GAAW,cACzB,YAAa,CAAC,CAACA,GAAW,eAC1B,QAAS,CAAC,CAACA,GAAW,IAC1B,CAAC,EAGG,CAAC,KAAK,0BAA0BA,CAAS,EACzC,MAAM,IAAI,MAAM,6DAA6D,EAIjF,GAAI,CAAC,OAAO,0BAA0B,YAAY,oBAAoB,KAAK,aAAa,EACpF,MAAM,IAAI,MAAM,kEAAkE,EAQtF,IAAMtK,EAAYsK,EAAU,IAAMA,EAAU,UACtC1P,EAAU0P,EAAU,GAAKA,EAAU,QACzC,GAAI,CAACtK,GAAa,CAACpF,EACf,MAAM,IAAI,MAAM,4EAAuE,EAI3F,IAAMgQ,EAAW,KAAK,IAAI,EAAI5K,EACxB6K,EAAgB,KAEtB,GAAID,EAAWC,EACX,WAAK,WAAW,QAAS,iDAAkD,CACvE,YAAa5I,EACb,SAAU,KAAK,MAAM2I,EAAW,GAAI,EACpC,cAAe,KAAK,MAAMC,EAAgB,GAAI,EAC9C,UAAWP,EAAU,SACzB,CAAC,EAGG,KAAK,eACL,KAAK,cAAc,gBAAiB,qDAAgD,EAGlF,IAAI,MAAM,qDAAgD,EAIpE,IAAMQ,EAAkBlQ,EACxB,GAAIkQ,IAAoBhgB,EAA4B,iBAChD,WAAK,WAAW,OAAQ,qCAAsC,CAC1D,YAAamX,EACb,gBAAiBnX,EAA4B,iBAC7C,gBAAiBggB,CACrB,CAAC,EACK,IAAI,MAAM,uCAAuChgB,EAA4B,gBAAgB,cAAcggB,CAAe,EAAE,EAiBtI,GATA,KAAK,YAAcR,EAAU,IAAMA,EAAU,KAK7C,KAAK,qBACDA,EAAU,KAAOxf,EAA4B,gBAG7C,CAAC,MAAM,QAAQ,KAAK,WAAW,EAC/B,MAAM,IAAI,MAAM,6CAA6C,EAGjE,IAAMigB,EAAqB,GAC3B,GAAI,KAAK,YAAY,SAAWA,EAC5B,MAAM,IAAI,MAAM,yCAAyCA,CAAkB,SAAS,KAAK,YAAY,MAAM,EAAE,EAIjH,IAAMC,EAAkB,MAAM,OAAO,0BAA0B,wBAAwB,KAAK,WAAW,EAEvG,KAAK,WAAW,OAAQ,sCAAuC,CAC3D,YAAa/I,EACb,WAAY,KAAK,YAAY,OAC7B,gBAAiB+I,EAAgB,UAAU,EAAG,CAAC,CACnD,CAAC,EAOD,IAAM9B,EAAW,MAAM,KAAK,wBAAwB,EAKpD,GAJA,KAAK,YAAcA,EAAS,YAC5B,KAAK,aAAeA,EAAS,aAGzB,EAAE,KAAK,aAAa,sBAAsB,WAC1C,WAAK,WAAW,QAAS,4CAA6C,CAClE,YAAajH,EACb,WAAY,CAAC,CAAC,KAAK,YACnB,eAAgB,OAAO,KAAK,aAAa,WACzC,oBAAqB,KAAK,aAAa,YAAY,WAAW,IAClE,CAAC,EACK,IAAI,MAAM,iDAAiD,EAQrE,IAAIgJ,EAEJ,GAAI,CACA,IAAMC,EAAWZ,EAAU,GAAKA,EAAU,eAC1CW,EAAqB,MAAM,OAAO,OAAO,UACrC,OACA,IAAI,WAAWC,EAAS,OAAO,EAC/B,CACI,KAAM,QACN,WAAY,OAChB,EACA,GACA,CAAC,QAAQ,CACb,CACJ,OAAS3f,EAAO,CACZ,KAAK,kBAAkBA,EAAO,kBAAkB,CACpD,CAOA,IAAI4f,EAEJ,GAAI,CACA,IAAMC,EAAUd,EAAU,GAAKA,EAAU,cACzCa,EAAoB,MAAM,OAAO,0BAA0B,sBACvDC,EACAH,EACA,MACJ,CACJ,OAAS1f,EAAO,CACZ,KAAK,WAAW,QAAS,0CAA2C,CAChE,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACD,KAAK,kBAAkBA,EAAO,iBAAiB,CACnD,CAGA,GAAI,EAAE4f,aAA6B,WAC/B,WAAK,WAAW,QAAS,0CAA2C,CAChE,YAAalJ,EACb,cAAe,OAAOkJ,EACtB,mBAAoBA,GAAmB,WAAW,IACtD,CAAC,EACK,IAAI,MAAM,+CAA+C,EAInE,KAAK,cAAgBA,EAOrB,IAAIlR,EAEJ,GAAI,CACA,KAAK,WAAW,QAAS,iCAAkC,CACvD,YAAagI,EACb,eAAgB,OAAO,KAAK,YAAY,WACxC,cAAe,OAAOkJ,EACtB,WAAY,KAAK,aAAa,OAC9B,oBAAqB,KAAK,YAAY,YAAY,WAAW,KAC7D,mBAAoBA,GAAmB,WAAW,IACtD,CAAC,EAEDlR,EAAc,MAAM,OAAO,0BAA0B,iBACjD,KAAK,YAAY,WACjBkR,EACA,KAAK,WACT,EAEA,KAAK,WAAW,QAAS,0CAA2C,CAChE,YAAalJ,EACb,cAAe,CAAC,CAAChI,EAAY,WAC7B,UAAW,CAAC,CAACA,EAAY,OACzB,UAAW,CAAC,CAACA,EAAY,OACzB,eAAgB,CAAC,CAACA,EAAY,YAC9B,eAAgB,CAAC,CAACA,EAAY,WAClC,CAAC,CACL,OAAS1O,EAAO,CACZ,KAAK,WAAW,QAAS,+BAAgC,CACrD,YAAa0W,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,WAAYA,EAAM,MAClB,eAAgB,OAAO,KAAK,YAAY,WACxC,cAAe,OAAO4f,EACtB,WAAY,KAAK,aAAa,OAC9B,oBAAqB,KAAK,YAAY,YAAY,WAAW,KAC7D,mBAAoBA,GAAmB,WAAW,IACtD,CAAC,EACD,KAAK,kBAAkB5f,EAAO,gBAAgB,CAClD,CAeA,GAZA,MAAM,KAAK,mBACP0O,EAAY,WACZA,EAAY,OACZA,EAAY,YACZA,EAAY,WAChB,EAIA,MAAM,KAAK,mBAAmBA,EAA+B,EAAK,EAG9D,EAAE,KAAK,yBAAyB,YAChC,EAAE,KAAK,kBAAkB,YACzB,EAAE,KAAK,uBAAuB,WAE9B,WAAK,WAAW,QAAS,qCAAsC,CAC3D,YAAagI,EACb,kBAAmB,OAAO,KAAK,cAC/B,WAAY,OAAO,KAAK,OACxB,gBAAiB,OAAO,KAAK,WACjC,CAAC,EACK,IAAI,MAAM,oCAAoC,EAKxD,KAAK,iBAAmBqI,EAAU,IAAMA,EAAU,kBAAoB,KAEtE,KAAK,WAAW,OAAQ,+CAAgD,CACpE,YAAarI,EACb,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,eAAgB,CAAC,CAAC,KAAK,YACvB,kBAAmB,CAAC,CAAC,KAAK,eAC1B,eAAgB,UAChB,kBAAmB,EACvB,CAAC,EAOD,KAAK,wBAAwB,CACzB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,gBAAiB,GACjB,sBAAuB,GACvB,OAAQ,EACZ,CAAC,EAGD,KAAK,kBAAoB,EACzB,KAAK,gBAAkB,KAAK,IAAI,EAChC,KAAK,YAAY,IAAI,EAAG,CACpB,KAAM,KAAK,YACX,UAAW,KAAK,gBAChB,aAAc,CAClB,CAAC,EAOD,IAAIoJ,EAEJ,GAAIf,EAAU,cACV,GAAI,CACAe,EAAY,MAAM,OAAO,0BAA0B,gBAC/Cf,EAAU,cACV,KAAK,aAAa,WAClB,KAAK,aAAa,SACtB,CACJ,OAAS/e,EAAO,CACZ,KAAK,WAAW,QAAS,wCAAyC,CAC9D,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EACD,KAAK,kBAAkBA,EAAO,+BAA+B,CACjE,MAEA,KAAK,WAAW,OAAQ,oDAAqD,CACzE,YAAa0W,CACjB,CAAC,EA+BL,GAxBA,KAAK,YAAc,GACnB,KAAK,eAAe,YAAY,EAEhC,KAAK,cAAc,KAAK,cAAc,EAGtC,KAAK,qBAAqB,EAkBtB,KAAK,qBACL,GAAI,CACA,KAAK,qBAAuB,KAAK,+BAA+BqI,EAAU,GAAG,CACjF,OAAS/e,EAAO,CACZ,KAAK,WAAW,OAAQ,qDAAsD,CAC1E,MAAOA,EAAM,QACb,QAAS,kBACb,CAAC,CACL,MAEA,KAAK,WAAW,OAAQ,sEAAsE,EAIlG,GAAI,CACA,KAAK,WAAW,QAAS,wCAAyC,CAC9D,YAAa0W,EACb,UAAWqI,EAAU,KAAK,QAAU,CACxC,CAAC,EAED,MAAM,KAAK,eAAe,qBAAqB,IAAI,sBAAsB,CACrE,KAAM,QACN,IAAKA,EAAU,GAAKA,EAAU,GAClC,CAAC,CAAC,EACF,KAAK,4BAA4B,uBAAwB,KAAK,eAAe,mBAAmB,IAAK,CACjG,eAAgB,KAAK,eAAe,cACxC,CAAC,EACD,KAAK,iCAAiC,QAAS,KAAK,eAAe,mBAAmB,GAAG,EAEzF,KAAK,WAAW,QAAS,sCAAuC,CAC5D,YAAarI,EACb,eAAgB,KAAK,eAAe,cACxC,CAAC,CACL,OAAS1W,EAAO,CACZ,KAAK,WAAW,QAAS,mCAAoC,CACzD,MAAOA,EAAM,QACb,YAAa0W,CACjB,CAAC,EACD,KAAK,kBAAkB1W,EAAO,2BAA2B,CAC7D,CAEA,KAAK,WAAW,QAAS,sCAAuC,CAC5D,YAAa0W,EACb,gBAAiB,KAAK,eAAe,gBACrC,eAAgB,KAAK,eAAe,cACxC,CAAC,EAOD,IAAIqJ,EAEJ,GAAI,CACAA,EAAS,MAAM,KAAK,eAAe,aAAa,CAC5C,oBAAqB,GACrB,oBAAqB,EACzB,CAAC,CACL,OAAS/f,EAAO,CACZ,KAAK,kBAAkBA,EAAO,sBAAsB,CACxD,CAGA,GAAI,CACA,MAAM,KAAK,eAAe,oBAAoB+f,CAAM,CACxD,OAAS/f,EAAO,CACZ,KAAK,kBAAkBA,EAAO,0BAA0B,CAC5D,CAGA,GAAI,CACA,IAAMie,EAAiB,KAAK,+BAA+B8B,EAAO,GAAG,EACrE,KAAK,wBAA0B9B,EAE/B,KAAK,WAAW,OAAQ,0DAA2D,CAC/E,YAAaA,EACb,QAAS,iBACb,CAAC,EAGD,KAAK,mBAAmB,4CAA4CA,CAAc,GAAI,QAAQ,CAClG,OAASje,EAAO,CACZ,KAAK,WAAW,QAAS,iDAAkD,CAAE,MAAOA,EAAM,OAAQ,CAAC,CAEvG,CAKA,GAAI,CACA,IAAM6L,EAAW,KAAK,+BAA+BkT,EAAU,GAAKA,EAAU,GAAG,EAC3EnT,GAAU,KAAK,wBACfoU,EAAW,KAAK,sBAAsB,KAAK,cAAc,EAC/D,KAAK,iBAAmB,MAAM,KAAK,YAAYA,EAAUpU,GAASC,CAAQ,EAC1E,KAAK,qBAAqBD,GAASC,CAAQ,CAC/C,OAASoU,EAAU,CACf,WAAK,WAAW,QAAS,6DAA8D,CACnF,UAAWA,GAAU,aAAa,MAAQ,SAC9C,CAAC,EACK,IAAI,MAAM,2BAA2BA,EAAS,OAAO,EAAE,CACjE,CAMA,IAAMC,EAA8B,KAAK,IAAI,EACvCC,EAA8B,MAAM,KAAK,oBAAoB,EAC7DC,EAAyB,KAAK,6BAA6B,KAAK,eAAe,kBAAkB,GAAG,EACpGC,EAAuBD,EAAuB,MACpD,GAAI,CAACD,GAA+BE,IAAyB,EACzD,WAAK,mBACD,qPAGA,QACJ,EACM,IAAI,MAAM,2FAAsF,EAE1G,KAAK,WAAWA,EAAuB,EAAI,OAAS,OAAQ,4CAA6C,CACrG,iBAAkBD,EAClB,kBAAmB,KAAK,eAAe,kBACvC,uBAAwB,KAAK,IAAI,EAAIF,EACrC,sBAAuBC,CAC3B,CAAC,EACD,KAAK,4BAA4B,gBAAiB,KAAK,eAAe,kBAAkB,IAAK,CACzF,kBAAmB,KAAK,eAAe,kBACvC,uBAAwB,KAAK,IAAI,EAAID,EACrC,sBAAuBC,CAC3B,CAAC,EACIA,GACD,KAAK,mBAAmB,0JAA2J,QAAQ,EAE3LE,IAAyB,GACzB,KAAK,mBAAmB,iIAAkI,QAAQ,EAGtK,KAAK,WAAW,QAAS,qCAAsC,CAC3D,YAAa3J,EACb,kBAAmB,KAAK,eAAe,kBACvC,gBAAiB,KAAK,eAAe,eACzC,CAAC,EAOD,IAAMoH,EAAoB,MAAM,OAAO,0BAA0B,6BAC7D,KAAK,YAAY,UACjB,KAAK,aAAa,WAClB,MACJ,EAEMC,EAAqB,MAAM,OAAO,0BAA0B,6BAC9D,KAAK,aAAa,UAClB,KAAK,aAAa,WAClB,OACJ,EAEA,GAAI,CAACD,GAAqB,OAAOA,GAAsB,SACnD,WAAK,WAAW,QAAS,8DAA+D,CAAE,YAAApH,CAAY,CAAC,EACjG,IAAI,MAAM,oFAAoF,EAGxG,GAAI,CAACoH,EAAkB,SAAW,CAACA,EAAkB,UACjD,WAAK,WAAW,QAAS,sEAAuE,CAC5F,YAAApH,EACA,WAAY,CAAC,CAACoH,EAAkB,QAChC,aAAc,CAAC,CAACA,EAAkB,SACtC,CAAC,EACK,IAAI,MAAM,6EAA6E,EAGjG,GAAI,CAACC,GAAsB,OAAOA,GAAuB,SACrD,WAAK,WAAW,QAAS,+DAAgE,CAAE,YAAArH,CAAY,CAAC,EAClG,IAAI,MAAM,qFAAqF,EAGzG,GAAI,CAACqH,EAAmB,SAAW,CAACA,EAAmB,UACnD,WAAK,WAAW,QAAS,uEAAwE,CAC7F,YAAArH,EACA,WAAY,CAAC,CAACqH,EAAmB,QACjC,aAAc,CAAC,CAACA,EAAmB,SACvC,CAAC,EACK,IAAI,MAAM,8EAA8E,EAQlG,IAAMQ,EAAgB,CAClB,MAAO,UACP,MAAO,IACP,MAAO,QACP,QAAS,2CACT,aAAc,GACd,YAAa,GACb,WAAY,EAChB,EAMMC,EAAmB,KAAK,IAAI,EAG5B8B,EAAgB,CAElB,EAAG,SACH,EAAG,KAAK,eAAe,iBAAiB,IACxC,EAAG/gB,EAA4B,iBAC/B,GAAIif,EAGJ,EAAGV,EACH,EAAGC,EAGH,GAAI+B,EAGJ,IAAK,MAGL,GAAIvgB,EAA4B,gBAGhC,GAAI,CACA,GAAIkgB,EAAgB,UAAU,EAAG,EAAE,EACnC,GAAI,GACJ,GAAI,EACR,CACJ,EAOMc,EAASD,EAAc,GAAKA,EAAc,IAC1C1Q,EAAU0Q,EAAc,GAAKA,EAAc,cAC3CE,EAAWF,EAAc,GAAKA,EAAc,eAElD,GAAI,CAACC,GAAU,CAAC3Q,GAAW,CAAC4Q,EACxB,MAAM,IAAI,MAAM,wCAAwC,EAG5D,YAAK,WAAW,OAAQ,8CAA+C,CACnE,YAAa9J,EACb,QAAS4J,EAAc,QACvB,SAAU,GACV,cAAe,CAAC,CAACR,EACjB,uBAAwB,CAAC,CAACQ,EAAc,oBACxC,cAAe/B,EAAc,MAC7B,UAAWC,EACX,eAAgBA,EAAmBO,EAAU,SACjD,CAAC,EAGD,KAAK,oBAAoB,IAAI,YAAY,iBAAkB,CACvD,OAAQ,CACJ,KAAM,SACN,UAAWP,EACX,cAAeD,EAAc,MAC7B,YAAa7H,CACjB,CACJ,CAAC,CAAC,EAOF,WAAW,SAAY,CACnB,GAAI,CACA,IAAM+J,EAAmB,MAAM,KAAK,gCAAgC,EAChEA,IACA,KAAK,qBAAqB,EAC1B,KAAK,WAAW,OAAQ,4CAA6C,CACjE,YAAa/J,EACb,MAAO+J,EAAiB,KAC5B,CAAC,EAET,OAASzgB,EAAO,CACZ,KAAK,WAAW,QAAS,6CAA8C,CACnE,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,CACL,CACJ,EAAG,GAAI,EAGP,WAAW,SAAY,EACf,CAAC,KAAK,yBAA2B,KAAK,wBAAwB,MAAQ,MACtE,KAAK,WAAW,OAAQ,gCAAiC,CACrD,YAAa0W,CACjB,CAAC,EACD,MAAM,KAAK,gCAAgC,EAC3C,KAAK,qBAAqB,EAElC,EAAG,GAAI,EAGP,KAAK,qBAAqB,EAMnB4J,CAEX,OAAStgB,EAAO,CAKZ,WAAK,WAAW,QAAS,6DAA8D,CACnF,YAAa0W,EACb,UAAW1W,EAAM,YAAY,KAC7B,aAAcA,EAAM,QACpB,MAAO,KAAK,2BAA2BA,CAAK,EAC5C,SAAU+e,GAAW,UAAY,KAAK,IAAI,EAAIA,EAAU,UAAY,SACxE,CAAC,EAGD,KAAK,6BAA6B,EAGlC,KAAK,eAAe,cAAc,EAG9B,KAAK,gBACD/e,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EACpE,KAAK,cAAc,gBAAiBA,EAAM,OAAO,EAC1CA,EAAM,QAAQ,SAAS,MAAM,GAAKA,EAAM,QAAQ,SAAS,WAAW,EAC3E,KAAK,cAAc,qBAAsBA,EAAM,OAAO,EAC/CA,EAAM,QAAQ,SAAS,YAAY,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC9E,KAAK,cAAc,iBAAkBA,EAAM,OAAO,EAElD,KAAK,cAAc,gBAAiBA,EAAM,OAAO,GAKnDA,CACV,CACJ,EAAG,GAAK,CACZ,CAKA,2BAA2BA,EAAO,CAC9B,IAAMgE,EAAUhE,EAAM,QAAQ,YAAY,EAE1C,OAAIgE,EAAQ,SAAS,YAAY,GAAKA,EAAQ,SAAS,QAAQ,EAAU,mBACrEA,EAAQ,SAAS,YAAY,EAAU,gBACvCA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,SAAS,EAAU,oBAClEA,EAAQ,SAAS,MAAM,EAAU,kBACjCA,EAAQ,SAAS,UAAU,GAAKA,EAAQ,SAAS,UAAU,EAAU,iBACrEA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,OAAO,GAAKA,EAAQ,SAAS,MAAM,EAAU,aAC5FA,EAAQ,SAAS,WAAW,GAAKA,EAAQ,SAAS,MAAM,EAAU,yBAClEA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,QAAQ,EAAU,iBACjEA,EAAQ,SAAS,MAAM,GAAKA,EAAQ,SAAS,OAAO,EAAU,iBAC9DA,EAAQ,SAAS,oBAAoB,GAAKA,EAAQ,SAAS,mBAAmB,EAAU,eACxFA,EAAQ,SAAS,QAAQ,GAAKA,EAAQ,SAAS,KAAK,EAAU,eAC9DA,EAAQ,SAAS,QAAQ,EAAU,aACnCA,EAAQ,SAAS,gBAAgB,EAAU,uBAExC,SACX,CAQA,8BAA+B,CAC3B,GAAI,CAEA,KAAK,0BAA0B,EAC/B,KAAK,qCAAqC,EAG1C,KAAK,kBAAoB,EACzB,KAAK,YAAY,MAAM,EACvB,KAAK,QAAQ,MAAM,EAGf,KAAK,iBACL,KAAK,eAAe,MAAM,EAC1B,KAAK,eAAiB,MAItB,KAAK,cACL,KAAK,YAAY,MAAM,EACvB,KAAK,YAAc,MAIvB,KAAK,YAAc,GACnB,KAAK,WAAa,GAClB,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,eAAiB,EACtB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,aAAa,MAAM,EAGxB,KAAK,wBAAwB,CACzB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,sBAAuB,GACvB,OAAQ,EACZ,CAAC,EAGD,KAAK,wBAAwB,EAAE,MAAMhE,GAAS,CAC1C,KAAK,WAAW,QAAS,uCAAwC,CAC7D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAED,KAAK,WAAW,QAAS,kEAAkE,CAE/F,OAAS4e,EAAc,CACnB,KAAK,WAAW,QAAS,uCAAwC,CAC7D,UAAWA,EAAa,YAAY,KACpC,aAAcA,EAAa,OAC/B,CAAC,CACL,CACJ,CAKA,MAAM,mBAAmB8B,EAAeC,EAAQC,EAAaC,EAAgB,CACzE,OAAO,KAAK,WAAW,eAAgB,MAAOnK,GAAgB,CAM1D,GALA,KAAK,WAAW,OAAQ,qCAAsC,CAC1D,YAAaA,CACjB,CAAC,EAGG,EAAEgK,aAAyB,YAC3B,EAAEC,aAAkB,YACpB,EAAEC,aAAuB,WACzB,MAAM,IAAI,MAAM,4BAA4B,EAGhD,GAAI,CAACC,GAAkB,OAAOA,GAAmB,SAC7C,MAAM,IAAI,MAAM,kCAAkC,EAItD,IAAM3a,EAAU,CACZ,cAAe,KAAK,cACpB,OAAQ,KAAK,OACb,YAAa,KAAK,YAClB,eAAgB,KAAK,cACzB,EAEA,GAAI,CACA,YAAK,cAAgBwa,EACrB,KAAK,OAASC,EACd,KAAK,YAAcC,EACnB,KAAK,eAAiBC,EAG1B,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,eAAiB,EACtB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,aAAa,MAAM,EAEpB,KAAK,WAAW,OAAQ,mCAAoC,CACxD,YAAanK,EACb,WAAY,CAAC,EAAE,KAAK,eAAiB,KAAK,QAAU,KAAK,aACzD,eAAgB,CAAC,CAAC,KAAK,cAC3B,CAAC,EAEM,EAEX,OAAS1W,EAAO,CAEZ,WAAK,cAAgBkG,EAAQ,cAC7B,KAAK,OAASA,EAAQ,OACtB,KAAK,YAAcA,EAAQ,YAC3B,KAAK,eAAiBA,EAAQ,eAE9B,KAAK,WAAW,QAAS,kCAAmC,CACxD,YAAawQ,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EAEKA,CACV,CACJ,CAAC,CACL,CAUA,MAAM,kBAAkB8gB,EAAY,CAChC,GAAI,CAAC,KAAK,QAAQ,EAId,MAAM,IAAI,MAAM,4FAA4F,EAEhH,IAAMvW,EAAK,KAAK,WAAW,EACrBwW,EAAc9B,GAAe,OAAO6B,EAAW,IAAI,CAAC,EACpD/S,EAAOC,GAAW+S,CAAW,EACnC,GAAIhT,EAAK,OAASR,GAAU,OAAQ,MAAM,IAAI,MAAM,oDAAoD,EACxG,GAAI,CAACQ,EAAK,WAAY,MAAM,IAAI,MAAM,wCAAwC,EAK9E,IAAMiT,EAAW,MAAM3T,GADR,MAAOpN,GAAM,IAAI,WAAW,MAAM,OAAO,OAAO,OAAO,UAAWA,CAAC,CAAC,EACrCsK,EAAG,eAAe,EAC5D0W,EAAO,EACX,QAAS3f,EAAI,EAAGA,EAAI0f,EAAS,OAAQ1f,IAAK2f,GAAQD,EAAS1f,CAAC,EAAIyM,EAAK,WAAWzM,CAAC,EACjF,GAAI2f,IAAS,EACT,MAAM,IAAI,MAAM,sGAAsG,EAG1H1W,EAAG,iBAAmBwW,EACtBxW,EAAG,iBAAmBwD,EAAK,WAC3B,KAAK,qBAAuB,MAAM,KAAKA,EAAK,YACvC9N,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EAAE,YAAY,CAAC,EAAE,KAAK,GAAG,EAElE,GAAM,CAAE,IAAA6C,CAAI,EAAIqc,GAAiBpR,CAAI,EACrC,MAAM,KAAK,eAAe,qBAAqB,CAAE,KAAM,SAAU,IAAAjL,CAAI,CAAC,EAEtE,KAAK,WAAW,OAAQ,sDAAuD,CAC3E,MAAOie,EAAY,MACvB,CAAC,CACL,CAEA,MAAM,mBAAmBD,EAAY,CACjC,GAAIA,GAAc,OAAOA,EAAW,MAAS,SACzC,OAAO,KAAK,kBAAkBA,CAAU,EAE5C,GAAI,CAEA,GAAI,CAACA,GAAc,OAAOA,GAAe,UAAY,MAAM,QAAQA,CAAU,EACzE,WAAK,WAAW,QAAS,0CAA2C,CAChE,cAAe,CAAC,CAACA,EACjB,eAAgB,OAAOA,EACvB,QAAS,MAAM,QAAQA,CAAU,CACrC,CAAC,EACK,IAAI,MAAM,kEAAkE,EAItF,IAAMI,EAAkBJ,EAAW,IAAM,UAAYA,EAAW,EAC1DK,EAAiBL,EAAW,OAAS,0BAA4BA,EAAW,IAElF,GAAI,CAACI,GAAmB,CAACC,EACrB,WAAK,WAAW,QAAS,kCAAmC,CACxD,KAAML,EAAW,MAAQA,EAAW,EACpC,OAAQ,CAAC,EAAEA,EAAW,KAAOA,EAAW,EAC5C,CAAC,EACK,IAAI,MAAM,wEAAwE,EAG5F,IAAMM,EAAgBN,EAAW,GAAKA,EAAW,QACjD,GAAIM,IAAkB7hB,EAA4B,iBAC9C,MAAM,IAAI,MAAM,uCAAuCA,EAA4B,gBAAgB,cAAc6hB,GAAiB,SAAS,EAAE,EAKjJ,IAAMvB,EAAUiB,EAAW,eAAiBA,EAAW,EACjDnB,EAAWmB,EAAW,gBAAkBA,EAAW,EAEzD,GAAI,CAACjB,GAAW,OAAOA,GAAY,UAAY,MAAM,QAAQA,CAAO,EAChE,WAAK,WAAW,QAAS,wDAAyD,CAC9E,WAAY,CAAC,CAACA,EACd,YAAa,OAAOA,EACpB,QAAS,MAAM,QAAQA,CAAO,EAC9B,cAAe,OAAO,KAAKiB,CAAU,CACzC,CAAC,EACK,IAAI,MAAM,yEAAyE,EAG7F,GAAI,CAACjB,EAAQ,SAAW,CAACA,EAAQ,UAC7B,WAAK,WAAW,QAAS,4DAA6D,CAClF,WAAY,CAAC,CAACA,EAAQ,QACtB,aAAc,CAAC,CAACA,EAAQ,SAC5B,CAAC,EACK,IAAI,MAAM,kEAAkE,EAItF,GAAI,CAACF,GAAY,OAAOA,GAAa,UAAY,MAAM,QAAQA,CAAQ,EACnE,WAAK,WAAW,QAAS,yDAA0D,CAC/E,YAAa,CAAC,CAACA,EACf,aAAc,OAAOA,EACrB,QAAS,MAAM,QAAQA,CAAQ,CACnC,CAAC,EACK,IAAI,MAAM,0EAA0E,EAG9F,GAAI,CAACA,EAAS,SAAW,CAACA,EAAS,UAC/B,WAAK,WAAW,QAAS,6DAA8D,CACnF,WAAY,CAAC,CAACA,EAAS,QACvB,aAAc,CAAC,CAACA,EAAS,SAC7B,CAAC,EACK,IAAI,MAAM,mEAAmE,EAKvF,IAAMlL,EAAYqM,EAAW,IAAMA,EAAW,UACxCzR,EAAUyR,EAAW,GAAKA,EAAW,QAE3C,GAAI,CAACrM,GAAa,CAACpF,EACf,MAAM,IAAI,MAAM,sEAAiE,EAIrF,GAAIyR,EAAW,WAAa,KAAK,WAAaA,EAAW,YAAc,KAAK,UACxE,aAAO,0BAA0B,UAAU,IAAI,QAAS,sDAAuD,CAAC,CAAC,EAC3G,IAAI,MAAM,iDAA4C,EAIhE,IAAMO,EAAY,KAAK,IAAI,EAAIP,EAAW,UAC1C,GAAIO,EAAY,KACZ,aAAO,0BAA0B,UAAU,IAAI,QAAS,kDAAmD,CACvG,UAAWA,EACX,UAAWP,EAAW,SAC1B,CAAC,EAGG,KAAK,eACL,KAAK,cAAc,gBAAiB,wDAAmD,EAGrF,IAAI,MAAM,wDAAmD,EAKnEM,IAAkB7hB,EAA4B,kBAC9C,OAAO,0BAA0B,UAAU,IAAI,OAAQ,0CAA2C,CAC9F,gBAAiBA,EAA4B,iBAC7C,gBAAiB6hB,CACrB,CAAC,EAIL,IAAM1B,EAAqB,MAAM,OAAO,OAAO,UAC3C,OACA,IAAI,WAAWC,EAAS,OAAO,EAC/B,CACI,KAAM,QACN,WAAY,OAChB,EACA,GACA,CAAC,QAAQ,CACb,EAIM3Q,EAAgB,MAAM,OAAO,0BAA0B,iCACzD6Q,EACAH,CACJ,EAIA,GADA,KAAK,oCAAoC,EACrC,CAAC,KAAK,aAAe,KAAK,YAAY,SAAW,GACjD,aAAO,0BAA0B,UAAU,IAAI,QAAS,6DAA8D,CAClH,WAAY,KAAK,YAAc,KAAK,YAAY,OAAS,CAC7D,CAAC,EACK,IAAI,MAAM,iHAAiH,EAIrI,IAAM4B,EAAmB,MAAM,OAAO,0BAA0B,wBAAwB,KAAK,WAAW,EAMxG,GALA,OAAO,0BAA0B,UAAU,IAAI,OAAQ,kCAAmC,CACtF,gBAAiBA,EAAiB,UAAU,EAAG,CAAC,CACpD,CAAC,EAGG,EAAE,KAAK,aAAa,sBAAsB,WAC1C,aAAO,0BAA0B,UAAU,IAAI,QAAS,kEAAmE,CACvH,WAAY,CAAC,CAAC,KAAK,YACnB,eAAgB,OAAO,KAAK,aAAa,WACzC,oBAAqB,KAAK,aAAa,YAAY,WAAW,IAClE,CAAC,EACK,IAAI,MAAM,2CAA2C,EAG/D,GAAI,EAAEtS,aAAyB,WAC3B,aAAO,0BAA0B,UAAU,IAAI,QAAS,gEAAiE,CACrH,cAAe,OAAOA,EACtB,mBAAoBA,GAAe,WAAW,IAClD,CAAC,EACK,IAAI,MAAM,yCAAyC,EAI7D,KAAK,cAAgBA,EAGrB,KAAK,qBACD8R,EAAW,KAAOvhB,EAA4B,gBAG7C,KAAK,eACN,KAAK,aAAe,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EACnE,IAAIU,GAAKA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,GAI1D,IAAMyO,EAAc,MAAM,OAAO,0BAA0B,iBACvD,KAAK,YAAY,WACjBM,EACA,KAAK,WACT,EAiBA,GAfA,KAAK,cAAgBN,EAAY,WACjC,KAAK,OAASA,EAAY,OAC1B,KAAK,YAAcA,EAAY,YAC/B,KAAK,eAAiBA,EAAY,YAIlC,MAAM,KAAK,mBAAmBA,EAA+B,EAAI,EAEjE,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,eAAiB,EACtB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,aAAa,MAAM,EAEpB,EAAE,KAAK,yBAAyB,YAChC,EAAE,KAAK,kBAAkB,YACzB,EAAE,KAAK,uBAAuB,WAC9B,aAAO,0BAA0B,UAAU,IAAI,QAAS,2DAA4D,CAChH,kBAAmB,OAAO,KAAK,cAC/B,WAAY,OAAO,KAAK,OACxB,gBAAiB,OAAO,KAAK,YAC7B,uBAAwB,KAAK,eAAe,WAAW,KACvD,gBAAiB,KAAK,QAAQ,WAAW,KACzC,qBAAsB,KAAK,aAAa,WAAW,IACvD,CAAC,EACK,IAAI,MAAM,gCAAgC,EAGpD,KAAK,WAAW,OAAQ,4CAA6C,CACjE,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,eAAgB,CAAC,CAAC,KAAK,YACvB,kBAAmB,CAAC,CAAC,KAAK,eAC1B,eAAgB,UAChB,kBAAmB,EACvB,CAAC,EAGD,KAAK,iBAAiB,cAAgB,GACtC,KAAK,iBAAiB,sBAAwB,GAC9C,KAAK,iBAAiB,4BAA8B,GACpD,KAAK,iBAAiB,OAAS,GAG/B,KAAK,kBAAoB,EACzB,KAAK,gBAAkB,KAAK,IAAI,EAChC,KAAK,YAAY,IAAI,EAAG,CACpB,KAAM,KAAK,YACX,UAAW,KAAK,gBAChB,aAAc,CAClB,CAAC,EAED,KAAK,cAAc,KAAK,cAAc,EAGtC,GAAI,CACA,IAAM7C,EAAW,KAAK,+BAA+BiV,EAAW,KAAOA,EAAW,CAAC,EAC7ElV,EAAU,KAAK,wBACfoU,EAAW,KAAK,sBAAsB,KAAK,cAAc,EAE/D,KAAK,iBAAmB,MAAM,KAAK,YAAYA,EAAUpU,EAASC,CAAQ,EAC1E,KAAK,qBAAqBD,EAASC,CAAQ,EAG3C,KAAK,eAAiB,KAAK,iBAE3B,KAAK,WAAW,OAAQ,mEAAoE,CACxF,QAAS,KAAK,iBACd,QAASD,EAAQ,UAAU,EAAG,EAAE,EAAI,MACpC,SAAUC,EAAS,UAAU,EAAG,EAAE,EAAI,MACtC,UAAW,KAAK,IAAI,CACxB,CAAC,CACL,OAASoU,EAAU,CACf,KAAK,WAAW,QAAS,4DAA6D,CAClF,UAAWA,GAAU,aAAa,MAAQ,SAC9C,CAAC,EACD,KAAK,WAAW,QAAS,4DAA6D,CAClF,MAAOA,EAAS,QAChB,MAAOA,EAAS,MAChB,UAAW,KAAK,IAAI,CACxB,CAAC,CACL,CAOA,GAAI,KAAK,qBACL,GAAI,CACA,KAAK,qBAAuB,KAAK,+BAA+Ba,EAAW,KAAOA,EAAW,CAAC,CAClG,OAAS9gB,EAAO,CACZ,KAAK,WAAW,OAAQ,sDAAuD,CAC3E,MAAOA,EAAM,QACb,QAAS,mBACb,CAAC,CACL,MAEA,KAAK,WAAW,OAAQ,sEAAsE,EAIlG,IAAMuhB,EAAUT,EAAW,KAAOA,EAAW,EAE7C,GAAI,KAAK,gBAAgB,iBAAmB,mBAAoB,CAC5D,KAAK,WAAW,OAAQ,iDAAkD,CACtE,eAAgB,KAAK,gBAAgB,gBAAkB,SAC3D,CAAC,EACD,MACJ,CAEA,KAAK,WAAW,QAAS,yCAA0C,CAC/D,UAAWS,GAAS,QAAU,EAC9B,gBAAiB,CAACT,EAAW,KAAO,CAAC,CAACA,EAAW,CACrD,CAAC,EAED,MAAM,KAAK,eAAe,qBAAqB,CAC3C,KAAM,SACN,IAAKS,CACT,CAAC,EACD,KAAK,4BAA4B,wBAAyB,KAAK,eAAe,mBAAmB,IAAK,CAClG,eAAgB,KAAK,eAAe,cACxC,CAAC,EACD,KAAK,iCAAiC,SAAU,KAAK,eAAe,mBAAmB,GAAG,EAE1F,KAAK,WAAW,QAAS,kDAAmD,CACxE,eAAgB,KAAK,eAAe,cACxC,CAAC,EAED,WAAW,SAAY,CACnB,GAAI,CACqB,MAAM,KAAK,gCAAgC,GAE5D,KAAK,qBAAqB,CAElC,OAASvhB,EAAO,CACZ,KAAK,WAAW,QAAS,+CAAgD,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACjI,CACJ,EAAG,GAAI,EACP,WAAW,SAAY,EACf,CAAC,KAAK,yBAA2B,KAAK,wBAAwB,MAAQ,MACtE,MAAM,KAAK,gCAAgC,EAC3C,KAAK,qBAAqB,EAElC,EAAG,GAAI,EACP,KAAK,qBAAqB,CAC9B,OAASA,EAAO,CACZ,WAAK,WAAW,QAAS,yCAA0C,CAC/D,UAAWA,EAAM,YAAY,IACjC,CAAC,EACD,KAAK,eAAe,QAAQ,EAExB,KAAK,gBACDA,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,iFAAgB,EAC5E,KAAK,cAAc,gBAAiBA,EAAM,OAAO,EAC1CA,EAAM,QAAQ,SAAS,MAAM,GAAKA,EAAM,QAAQ,SAAS,WAAW,GAAKA,EAAM,QAAQ,SAAS,4CAAS,EAChH,KAAK,cAAc,qBAAsBA,EAAM,OAAO,EAEtD,KAAK,cAAc,gBAAiBA,EAAM,OAAO,GAInDA,CACV,CACJ,CAGA,sBAAuB,CAEf,KAAK,YAEA,KAAK,6BACN,KAAK,2BAA6B,GAClC,KAAK,mBAAmB,4GAA6G,QAAQ,EAC7I,KAAK,mBAAmB,2BAA2B,KAAK,gBAAgB,GAAI,QAAQ,EACpF,KAAK,mBAAmB,+DAAgE,QAAQ,GAIpG,KAAK,mBAAmB,6CAA8C,QAAQ,CAEtF,CAQA,iBAAiBwhB,EAAO,CACpB,GAAI,CAACA,GAAS,OAAOA,GAAU,UAAY,CAAC,KAAK,kBAAoB,OAAO,KAAK,kBAAqB,SAClG,MAAO,GAGX,IAAMC,EAAkBD,EAAM,QAAQ,SAAU,EAAE,EAAE,YAAY,EAC1DE,EAAmB,KAAK,iBAAiB,QAAQ,SAAU,EAAE,EAAE,YAAY,EAEjF,OAAID,EAAgB,SAAWC,EAAiB,OACrC,GAGJ,OAAO,0BAA0B,oBAAoBD,EAAiBC,CAAgB,CACjG,CAEA,oBAAoBC,EAAU,CAE1B,GAAI,CACA,GAAI,CAAC,KAAK,iBAAiBA,CAAQ,EAO/B,MANA,KAAK,uBAAyB,KAAK,uBAAyB,GAAK,EACjE,KAAK,WAAW,OAAQ,qDAAsD,CAC1E,SAAU,KAAK,sBACf,YAAapiB,EAA4B,gBAC7C,CAAC,EAEG,KAAK,uBAAyBA,EAA4B,kBAC1D,KAAK,mBAAmB,yDAA0D,QAAQ,EAC1F,KAAK,WAAW,EACV,IAAI,MAAM,kBAAkB,GAGhC,IAAI,MAAM,cAAc,EAIlC,KAAK,2BAA6B,GAClC,KAAK,sBAAwB,EAG7B,IAAMqiB,EAAsB,CACxB,KAAM,yBACN,KAAM,CACF,UAAW,KAAK,IAAI,EACpB,mBAAoB,mBACpB,cAAe,0BACnB,CACJ,EAEA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAmB,CAAC,EAGrD,KAAK,2BACL,KAAK,0BAA0B,CAC3B,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,cAAe,KAAK,0BACxB,CAAC,EAIL,KAAK,iCAAiC,EAGtC,KAAK,mBAAmB,0DAA2D,QAAQ,EAE3F,KAAK,oBAAoB,CAC7B,OAAS5hB,EAAO,CACZ,MAAIA,EAAM,UAAY,eAClB,KAAK,mBAAmB,0DAA2D,QAAQ,EACpFA,EAAM,UAAY,qBACzB,KAAK,WAAW,QAAS,2BAA4B,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACzG,KAAK,mBAAmB,0BAA2B,QAAQ,GAEzDA,CACV,CACJ,CAEA,kCAAmC,CAE/B,GAAI,KAAK,4BAA8B,KAAK,6BAA+B,CAAC,KAAK,2BAA4B,CACzG,KAAK,2BAA6B,GAGlC,IAAM6hB,EAAuB,CACzB,KAAM,8BACN,KAAM,CACF,UAAW,KAAK,IAAI,EACpB,mBAAoB,MACpB,cAAe,0BACnB,CACJ,EAEA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAoB,CAAC,EAGtD,KAAK,2BACL,KAAK,0BAA0B,CAC3B,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,cAAe,KAAK,0BACxB,CAAC,EAIL,KAAK,mBAAmB,8DAA+D,QAAQ,EAE/F,WAAW,IAAM,CACb,GAAI,CACA,KAAK,mBAAmB,GAAM,uBAAwB,CAClD,KAAM,KAAK,iBACX,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,yBAAyB,mBAAoB,EAAK,EACvD,KAAK,iBAAiB,UAAU,CACpC,OAAS7hB,EAAO,CAIZ,KAAK,WAAW,QAAS,kDAAmD,CACxE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACD,KAAK,mBAAmB,kEAAmE,QAAQ,EACnG,KAAK,WAAW,CACpB,CACJ,EAAG,GAAI,CACX,CACJ,CAEA,4BAA4BiC,EAAM,CAC9B,KAAK,4BAA8B,GAGnC,KAAK,mBAAmB,yEAA0E,QAAQ,EAGtG,KAAK,2BACL,KAAK,0BAA0B,CAC3B,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,cAAe,KAAK,0BACxB,CAAC,EAIL,KAAK,iCAAiC,CAC1C,CAEA,gCAAgCA,EAAM,CAKlC,GAAI,MAAK,2BAUT,IAAI,CAAC,KAAK,2BAA4B,CAClC,KAAK,WAAW,QAAS,wFAAyF,CAC9G,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,mBAAmB,0HAA2H,QAAQ,EAC3J,KAAK,WAAW,EAChB,MACJ,CAKA,KAAK,4BAA8B,GAGnC,KAAK,2BAA6B,GAG9B,KAAK,2BACL,KAAK,0BAA0B,CAC3B,eAAgB,KAAK,2BACrB,gBAAiB,KAAK,4BACtB,cAAe,KAAK,0BACxB,CAAC,EAIL,KAAK,mBAAmB,8DAA+D,QAAQ,EAE/F,WAAW,IAAM,CACb,KAAK,mBAAmB,GAAM,uBAAwB,CAClD,KAAM,KAAK,iBACX,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,yBAAyB,mBAAoB,EAAK,EACvD,KAAK,iBAAiB,UAAU,CACpC,EAAG,GAAI,EACX,CAEA,0BAA0BA,EAAM,CAI5B,GAAI,KAAK,iBAAiBA,GAAM,IAAI,EAAG,CACnC,IAAM6f,EAAkB,CACpB,KAAM,wBACN,KAAM,CACF,GAAI,GACJ,UAAW,KAAK,IAAI,EACpB,mBAAoB,MACpB,cAAe,gBACnB,CACJ,EACA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAe,CAAC,EAGhD,KAAK,+BACN,KAAK,6BAA+B,GACpC,KAAK,mBAAmB,iFAAkF,QAAQ,GAGtH,KAAK,oBAAoB,CAC7B,KAAO,CAEH,IAAMA,EAAkB,CACpB,KAAM,wBACN,KAAM,CACF,GAAI,GACJ,UAAW,KAAK,IAAI,EACpB,OAAQ,eACZ,CACJ,EACA,KAAK,YAAY,KAAK,KAAK,UAAUA,CAAe,CAAC,EAErD,KAAK,WAAW,QAAS,iDAAkD,CAGvE,mBAAoB,OAAO7f,GAAM,MAAS,SAAWA,EAAK,KAAK,OAAS,EACxE,UAAW,KAAK,IAAI,CACxB,CAAC,EAED,KAAK,mBAAmB,yFAA0F,QAAQ,EAC1H,KAAK,WAAW,CACpB,CACJ,CAEA,cAAcA,EAAM,CAChB,GAAI,CAACA,GAAM,MAAQ,OAAOA,EAAK,MAAS,SAAU,CAC9C,KAAK,WAAW,OAAQ,6CAA6C,EACrE,MACJ,CAQA,GAAI,CAAC,KAAK,iBAAkB,CACxB,KAAK,WAAW,QAAS,qFAAsF,CAC3G,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,mBAAmB,kGAAmG,QAAQ,EACnI,KAAK,WAAW,EAChB,MACJ,CAEA,GAAI,CAAC,KAAK,iBAAiBA,EAAK,IAAI,EAAG,CACnC,KAAK,WAAW,QAAS,wDAAwD,EACjF,KAAK,mBAAmB,mEAAoE,QAAQ,EACpG,KAAK,WAAW,EAChB,MACJ,CAGA,KAAK,mCAAmC,EAExC,KAAK,WAAW,OAAQ,qDAAsD,CAC1E,UAAW,KAAK,IAAI,CACxB,CAAC,CACL,CAEA,2BAA2BA,EAAM,CAEzBA,EAAK,KAAO,IAGZ,KAAK,WAAW,OAAQ,6DAA8D,CAClF,mBAAoBA,EAAK,oBAAsB,MAC/C,cAAeA,EAAK,eAAiB,iBACrC,UAAW,KAAK,IAAI,CACxB,CAAC,EAGI,KAAK,+BACN,KAAK,6BAA+B,GACpC,KAAK,mBAAmB,oFAAqF,QAAQ,GAGzH,KAAK,oBAAoB,IAGzB,KAAK,WAAW,QAAS,uDAAwD,CAC7E,aAAcA,EACd,UAAW,KAAK,IAAI,CACxB,CAAC,EAED,KAAK,mBAAmB,mDAAoD,QAAQ,EACpF,KAAK,WAAW,EAExB,CAEA,kBAAkB8c,EAAW,CACzB,OAAOA,GACAA,EAAU,OAAS,yBACnBA,EAAU,KACVA,EAAU,WACVA,EAAU,MACVA,EAAU,kBACV,MAAM,QAAQA,EAAU,SAAS,GACjC,MAAM,QAAQA,EAAU,IAAI,GAC5BA,EAAU,KAAK,SAAW,EACrC,CAEA,0BAA0BA,EAAW,CACjC,GAAI,CAEA,GAAI,CAACA,GAAa,OAAOA,GAAc,UAAY,MAAM,QAAQA,CAAS,EACtE,WAAK,WAAW,QAAS,yCAA0C,CAC/D,aAAc,CAAC,CAACA,EAChB,cAAe,OAAOA,EACtB,QAAS,MAAM,QAAQA,CAAS,CACpC,CAAC,EACK,IAAI,MAAM,iEAAiE,EAMrF,IAAMgD,EAAoBhD,EAAU,IAAMxf,EAA4B,kBAAoBwf,EAAU,GAAKA,EAAU,EAC7GiD,EAAajD,EAAU,UAAYxf,EAA4B,kBAAoBwf,EAAU,eAAiBA,EAAU,eAO9H,GAAI,EAJgBgD,EAChB,CAAC,OAAO,EAAE,SAAShD,EAAU,CAAC,EAC9B,CAAC,wBAAyB,cAAc,EAAE,SAASA,EAAU,IAAI,GAGjE,MAAM,IAAI,MAAM,oBAAoB,EAGxC,GAAIgD,EAAmB,CAEnB,IAAME,EAAwB,CAC1B,IAAK,IAAK,KAAM,KAAM,KAAM,KAAM,KAAM,KAC5C,EAEA,QAAWC,KAASD,EACpB,GAAI,CAAClD,EAAUmD,CAAK,EACZ,MAAM,IAAI,MAAM,wCAAwCA,CAAK,EAAE,EAKvE,GAAI,CAACnD,EAAU,GAAK,OAAOA,EAAU,GAAM,UAAY,MAAM,QAAQA,EAAU,CAAC,EAC5E,MAAM,IAAI,MAAM,8DAA8D,EAGlF,GAAI,CAACA,EAAU,GAAK,OAAOA,EAAU,GAAM,UAAY,MAAM,QAAQA,EAAU,CAAC,EAC5E,MAAM,IAAI,MAAM,+DAA+D,EAInF,GAAI,CAAC,MAAM,QAAQA,EAAU,EAAE,GAAKA,EAAU,GAAG,SAAW,GACxD,MAAM,IAAI,MAAM,wCAAwC,EAI5D,GAAI,OAAOA,EAAU,IAAO,UAAYA,EAAU,GAAG,OAAS,EAC1D,MAAM,IAAI,MAAM,kCAAkC,EAItD,GAAI,CAAC,CAAC,MAAO,OAAQ,MAAO,KAAK,EAAE,SAASA,EAAU,GAAG,EACrD,MAAM,IAAI,MAAM,wBAAwB,EAI5C,IAAMM,EAAW,KAAK,IAAI,EAAIN,EAAU,GACxC,GAAIM,EAAW,KACX,MAAM,IAAI,MAAM,sCAAsC,EAG1D,KAAK,WAAW,OAAQ,uCAAwC,CAC5D,QAASN,EAAU,EACnB,QAAS,CAAC,CAACA,EAAU,EACrB,SAAU,CAAC,CAACA,EAAU,EACtB,QAAS,CAAC,CAACA,EAAU,GACrB,oBAAqB,CAAC,CAACA,EAAU,GACjC,cAAeA,EAAU,IACzB,SAAU,KAAK,MAAMM,EAAW,GAAI,EAAI,GAC5C,CAAC,CACL,SAAW2C,EAAY,CAEnB,IAAMG,EAAmB,CACrB,gBAAiB,iBAAkB,OAAQ,mBAC3C,gBAAiB,YAAa,UAAW,eAC7C,EAEA,QAAWD,KAASC,EAChB,GAAI,CAACpD,EAAUmD,CAAK,EAChB,MAAM,IAAI,MAAM,uBAAuBA,CAAK,EAAE,EAKtD,GAAI,CAAC,MAAM,QAAQnD,EAAU,IAAI,GAAKA,EAAU,KAAK,SAAW,GAC5D,MAAM,IAAI,MAAM,wCAAwC,EAI5D,IAAMM,EAAW,KAAK,IAAI,EAAIN,EAAU,UACxC,GAAIM,EAAW,KACX,MAAM,IAAI,MAAM,sCAAsC,EAI1D,GAAI,CAACN,EAAU,eAAiB,OAAOA,EAAU,eAAkB,UAAY,MAAM,QAAQA,EAAU,aAAa,EAChH,WAAK,WAAW,QAAS,8CAA+C,CACpE,WAAY,CAAC,CAACA,EAAU,cACxB,YAAa,OAAOA,EAAU,cAC9B,QAAS,MAAM,QAAQA,EAAU,aAAa,CAClD,CAAC,EACK,IAAI,MAAM,oFAAoF,EAGxG,GAAI,CAACA,EAAU,gBAAkB,OAAOA,EAAU,gBAAmB,UAAY,MAAM,QAAQA,EAAU,cAAc,EACnH,WAAK,WAAW,QAAS,+CAAgD,CACrE,YAAa,CAAC,CAACA,EAAU,eACzB,aAAc,OAAOA,EAAU,eAC/B,QAAS,MAAM,QAAQA,EAAU,cAAc,CACnD,CAAC,EACK,IAAI,MAAM,qFAAqF,EAIzG,GAAI,CAACA,EAAU,cAAc,SAAW,CAACA,EAAU,cAAc,UAC7D,WAAK,WAAW,QAAS,kDAAmD,CACxE,WAAY,CAAC,CAACA,EAAU,cAAc,QACtC,aAAc,CAAC,CAACA,EAAU,cAAc,SAC5C,CAAC,EACK,IAAI,MAAM,kEAAkE,EAGtF,GAAI,CAACA,EAAU,eAAe,SAAW,CAACA,EAAU,eAAe,UAC/D,WAAK,WAAW,QAAS,mDAAoD,CACzE,WAAY,CAAC,CAACA,EAAU,eAAe,QACvC,aAAc,CAAC,CAACA,EAAU,eAAe,SAC7C,CAAC,EACK,IAAI,MAAM,mEAAmE,EAGvF,GAAI,OAAOA,EAAU,kBAAqB,UAAYA,EAAU,iBAAiB,OAAS,EACtF,MAAM,IAAI,MAAM,iEAAiE,EAGrF,KAAK,WAAW,OAAQ,+BAAgC,CACpD,QAASA,EAAU,QACnB,iBAAkB,CAAC,CAACA,EAAU,eAAe,MAC7C,SAAU,KAAK,MAAMM,EAAW,GAAI,EAAI,GAC5C,CAAC,CACL,KAAO,CACH,IAAM+C,EAAkBrD,EAAU,GAAKA,EAAU,SAAW,UAC5D,MAAM,IAAI,MAAM,uCAAuCxf,EAA4B,gBAAgB,cAAc6iB,CAAe,EAAE,CACtI,CAGA,IAAMtf,EAAMif,EAAoBhD,EAAU,EAAIA,EAAU,IACxD,GAAI,OAAOjc,GAAQ,UAAY,CAACA,EAAI,SAAS,KAAK,EAC9C,MAAM,IAAI,MAAM,uBAAuB,EAG3C,MAAO,EACX,OAAS9C,EAAO,CACZ,WAAK,WAAW,QAAS,6DAA8D,CACnF,MAAOA,EAAM,QACb,UAAWA,EAAM,YAAY,KAC7B,UAAW,KAAK,IAAI,CACxB,CAAC,EAEK,IAAI,MAAM,yCAAyCA,EAAM,OAAO,EAAE,CAC5E,CACJ,CAEA,MAAM,kBAAkBgE,EAAS,CAE7B,IAAMuS,EAAa,KAAK,mBAAmBvS,EAAS,mBAAmB,EACvE,GAAI,CAACuS,EAAW,QAAS,CACrB,IAAMpM,EAAe,4BAA4BoM,EAAW,OAAO,KAAK,IAAI,CAAC,GAC7E,WAAK,WAAW,QAAS,+CAAgD,CACrE,OAAQA,EAAW,OACnB,YAAa,OAAOvS,CACxB,CAAC,EACK,IAAI,MAAMmG,CAAY,CAChC,CAGA,GAAI,CAAC,KAAK,gBAAgB,mBAAmB,EACzC,MAAM,IAAI,MAAM,gDAAgD,EAOpE,GAHA,KAAK,yBAAyB,mBAAmB,EAG7C,CAAC,KAAK,YAAY,EAClB,MAAIoM,EAAW,eAAiB,OAAOA,EAAW,eAAkB,UAAYA,EAAW,cAAc,MAAQA,EAAW,cAAc,KAAK,WAAW,OAAO,EACvJ,IAAI,MAAM,mGAAmG,GAEvH,KAAK,aAAa,KAAKA,EAAW,aAAa,EACzC,IAAI,MAAM,mDAAmD,GAIvE,OAAO,KAAK,WAAW,kBAAmB,MAAOG,GAAgB,CAE7D,GAAI,CAAC,KAAK,YAAY,GAAK,CAAC,KAAK,WAC7B,MAAM,IAAI,MAAM,4CAA4C,EAQhE,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,QAAU,CAAC,KAAK,YAC7C,MAAM,IAAI,MAAM,iCAAiC,EAIrD,GAAI,CAAC,OAAO,0BAA0B,YAAY,iBAAiB,KAAK,aAAa,EACjF,MAAM,IAAI,MAAM,sDAAsD,EAG1E,GAAI,CAEA,IAAM2L,EAAa,OAAO9L,EAAW,eAAkB,SAAWA,EAAW,cAAgB,KAAK,UAAUA,EAAW,aAAa,EAC9H+L,EAAmB,OAAO,0BAA0B,gBAAgBD,CAAU,EAC9E9O,EAAY,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,gBAAgB,GAG5D,GAAI,OAAO,KAAK,mBAAsB,WAClC,MAAM,IAAI,MAAM,uGAAuG,EAE3H,IAAMlT,EAAM2D,EAAQ,KAAO,KAAK,kBAAkB,mBAAoB,CAAE,QAASse,CAAiB,CAAC,EAE/FC,EASJ,GAAI,KAAK,UAAU,WAAY,CAI3B,GAAM,CAAE,OAAAhO,EAAQ,WAAAiO,CAAW,EAAI,MAAM,KAAK,SAAS,QAAQF,CAAgB,EAC3EC,EAAU,CACN,KAAMhjB,EAA4B,cAAc,gBAChD,EAAGgV,EACH,EAAGiO,EACH,QAAS,KACb,CACJ,MAWID,EAAU,CACN,KAAM,mBACN,KAXkB,MAAM,OAAO,0BAA0B,eACzDD,EACA,KAAK,cACL,KAAK,OACL,KAAK,YACL/O,EACA,KAAK,MAAMlT,CAAG,EAAE,cACpB,EAKI,WAAY,KAAK,kBACjB,QAAS,KACb,EAGJ,KAAK,YAAY,KAAK,KAAK,UAAUkiB,CAAO,CAAC,EAEzC,OAAOhM,EAAW,eAAkB,UACpC,KAAK,mBAAmBA,EAAW,cAAe,MAAM,EAG5D,KAAK,WAAW,QAAS,mCAAoC,CACzD,YAAaG,EACb,cAAe4L,EAAiB,OAChC,WAAY,KAAK,iBACrB,CAAC,CAEL,OAAStiB,EAAO,CAOZ,MANA,KAAK,WAAW,QAAS,gCAAiC,CACtD,YAAa0W,EACb,UAAW1W,EAAM,YAAY,IACjC,CAAC,EAGGA,EAAM,QAAQ,SAAS,iBAAiB,EAClC,IAAI,MAAM,wDAAwD,EACjEA,EAAM,QAAQ,SAAS,iCAAiC,EACzD,IAAI,MAAM,kEAAkE,EAC3EA,EAAM,QAAQ,SAAS,iBAAiB,EACzC,IAAI,MAAM,yDAAyD,EAClEA,EAAM,QAAQ,SAAS,qBAAqB,EAC7C,IAAI,MAAM,0EAA0E,EAEpFA,CAEd,CACJ,EAAG,GAAI,CACX,CAEA,qBAAsB,CAClB,KAAO,KAAK,aAAa,OAAS,GAAK,KAAK,YAAY,GAAK,KAAK,YAAY,CAC1E,IAAMgE,EAAU,KAAK,aAAa,MAAM,EACxC,KAAK,kBAAkBA,CAAO,EAAE,MAAM,QAAQ,KAAK,CACvD,CACJ,CAMA,gBAAiB,CACb,KAAK,iBAAmB,CACpB,QAAS,GACT,SAAUzE,EAA4B,SAAS,mBAC/C,cAAe,CACnB,EAEA,KAAK,cAA+B,EAAI,EAExC,KAAK,gBAAkB,YAAY,IAAM,CAChC,KAAK,kBAAkB,SACxB,KAAK,aAAa,aAAe,QACjC,KAAK,eAAe,CAE5B,EAAGA,EAA4B,SAAS,kBAAkB,EAC1D,KAAK,kBAAkB,KAAK,eAAe,EAI3C,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,iBAAmB,EACxB,KAAK,eAAiB,GACtB,KAAK,uBAAuB,EAC5B,KAAK,iCAAiC,EAEtC,KAAK,WAAW,OAAQ,sCAAgC,CACpD,YAAaA,EAA4B,SAAS,mBAClD,aAAcA,EAA4B,SAAS,qBACnD,eAAgBA,EAA4B,SAAS,sBACzD,CAAC,CACL,CAEA,cAAckjB,EAAa,GAAO,CAC1B,CAACA,GAAc,KAAK,mBACpB,KAAK,iBAAiB,QAAU,IAEhC,KAAK,kBACL,cAAc,KAAK,eAAe,EAClC,KAAK,eAAe,OAAO,KAAK,eAAe,EAC/C,KAAK,gBAAkB,MAEtBA,GAAY,KAAK,sBAAsB,CAChD,CAWA,gBAAgBze,EAAS,CACrB,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,iBAAmB,EAExB,IAAM0e,EAAQ1e,GAAS,MAAQ,IAAQA,GAAS,MAAM,MAAQ,GACzD0e,GAAO,KAAK,eAAe,EAAI,EAEpC,KAAK,WAAW,QAASA,EAAQ,mCAA8B,oCAA6B,CAChG,CAMA,sBAAuB,CACnB,KAAK,eAAiB,KAAK,IAAI,EAE/B,KAAK,iBAAmB,EAIxB,KAAK,eAAiB,EAC1B,CAEA,wBAAyB,CACrB,KAAK,sBAAsB,EAC3B,KAAK,eAAiB,YAAY,IAAM,CACpC,GAAI,CACA,KAAK,eAAe,CACxB,OAAS1iB,EAAO,CACZ,KAAK,WAAW,QAAS,+BAA2B,CAChD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CACJ,EAAGT,EAA4B,SAAS,uBAAuB,EAC/D,KAAK,kBAAkB,KAAK,cAAc,CAC9C,CAEA,uBAAwB,CAChB,KAAK,iBACL,cAAc,KAAK,cAAc,EACjC,KAAK,eAAe,OAAO,KAAK,cAAc,EAC9C,KAAK,eAAiB,KAE9B,CAcA,gBAAiB,CAKb,GAJI,CAAC,KAAK,YACN,KAAK,WAAW,QAAU,QAC1B,KAAK,aAAa,aAAe,QACjC,CAAC,KAAK,gBACN,CAAC,KAAK,eAAgB,OAE1B,IAAM2O,EAAI3O,EAA4B,SAChCqF,EAAM,KAAK,IAAI,EAwBrB,GAPmB,KAAK,gBAAgB,kBAAoB,YAO5C,CACZ,KAAK,iBAAmB,EACxB,MACJ,CAGA,GAAI,KAAK,iBAAkB,CACvB,GAAIA,EAAM,KAAK,iBAAmBsJ,EAAE,uBAAwB,OAC5D,KAAK,iBAAmB,EACxB,KAAK,WAAW,OAAQ,2FAA4E,EACpG,KAAK,YAAY,wBAAwB,EACzC,MACJ,CAEA,GAAItJ,EAAM,KAAK,eAAiBsJ,EAAE,qBAAsB,OAExD,KAAK,iBAAmBtJ,EACxB,IAAM+d,EAAY,KAAK,eAAe,EAAK,EAC3C,KAAK,WAAW,OAAQ,kDAA4C,CAChE,YAAa/d,EAAM,KAAK,eACxB,gBAAiB,KAAK,gBAAgB,gBACtC,UAAW+d,CACf,CAAC,CACL,CA6BA,gBAAiB,CACb,OAAO,KAAK,WAAW,QAAU,QAAU,KAAK,WAAW,QAAU,WACzE,CASA,kCAAmC,CAC3B,OAAO,OAAW,KAAe,KAAK,0BAC1C,KAAK,wBAA0B,GAE/B,KAAK,gBAAkB,IAAM,CACpB,KAAK,aACN,KAAK,eAAe,GAEpB,KAAK,WAAW,OAAQ,0DAA8C,EACtE,KAAK,mBAAmB,GAGxB,KAAK,eAAe,EAE5B,EACA,KAAK,sBAAwB,IAAM,CAC3B,OAAO,SAAa,KAAe,SAAS,kBAAoB,WAC/D,KAAK,aAWV,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,iBAAmB,EAEpB,KAAK,WAAW,QAAU,QAAU,KAAK,aAAa,aAAe,SACrE,KAAK,iBAAmB,KAAK,IAAI,EACjC,KAAK,eAAe,EAAK,EACzB,KAAK,WAAW,OAAQ,gDAAyC,GAEzE,EAEA,OAAO,iBAAiB,SAAU,KAAK,eAAe,EAClD,OAAO,SAAa,KACpB,SAAS,iBAAiB,mBAAoB,KAAK,qBAAqB,EAEhF,CAEA,qCAAsC,CAC9B,CAAC,KAAK,yBAA2B,OAAO,OAAW,MACvD,KAAK,wBAA0B,GAC3B,KAAK,iBAAiB,OAAO,oBAAoB,SAAU,KAAK,eAAe,EAC/E,KAAK,uBAAyB,OAAO,SAAa,KAClD,SAAS,oBAAoB,mBAAoB,KAAK,qBAAqB,EAE/E,KAAK,gBAAkB,KACvB,KAAK,sBAAwB,KACjC,CAEA,sBAAuB,CACnB,IAAMC,EAAI,KAAK,WACVA,IACDA,EAAE,aAAc,aAAaA,EAAE,UAAU,EAAG,KAAK,eAAe,OAAOA,EAAE,UAAU,GACnFA,EAAE,aAAc,aAAaA,EAAE,UAAU,EAAG,KAAK,eAAe,OAAOA,EAAE,UAAU,GACnFA,EAAE,eAAgB,aAAaA,EAAE,YAAY,EAAG,KAAK,eAAe,OAAOA,EAAE,YAAY,GAC7FA,EAAE,WAAa,KACfA,EAAE,WAAa,KACfA,EAAE,aAAe,KACjBA,EAAE,MAAQ,OACVA,EAAE,SAAW,EACbA,EAAE,UAAY,EACdA,EAAE,WAAa,EACfA,EAAE,eAAiB,EACnBA,EAAE,YAAc,KACpB,CAQA,gBAAgB9Y,EAAS,mBAAoB,CACpC,KAAK,YACN,KAAK,WAAW,QAAU,SAE9B,KAAK,WAAW,MAAQ,QACxB,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,WAAW,OAAQ,gDAA0C,CAAE,OAAAA,CAAO,CAAC,EAC5E,KAAK,eAAe,cAAc,EAElC,KAAK,WAAW,WAAa,WAAW,IAAM,CAE1C,GADA,KAAK,WAAW,WAAa,KACzB,KAAK,gBAAgB,kBAAoB,YAAa,CACtD,KAAK,iBAAiB,EACtB,MACJ,CACA,KAAK,mBAAmB,CAC5B,EAAGvK,EAA4B,SAAS,oBAAoB,EAC5D,KAAK,kBAAkB,KAAK,WAAW,UAAU,EACrD,CAGA,YAAYuK,EAAS,aAAc,CAC1B,KAAK,aACN,KAAK,WAAW,QAAU,cAAgB,KAAK,WAAW,QAAU,cAEpE,KAAK,WAAW,QAAU,SAC1B,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,eAAe,cAAc,GAElC,KAAK,WAAW,aAChB,aAAa,KAAK,WAAW,UAAU,EACvC,KAAK,eAAe,OAAO,KAAK,WAAW,UAAU,EACrD,KAAK,WAAW,WAAa,MAEjC,KAAK,WAAW,OAAQ,sCAAgC,CAAE,OAAAA,CAAO,CAAC,EAClE,KAAK,mBAAmB,GAC5B,CAcA,2BAA2BsO,EAAa,CACpC,GAAK,KAAK,eAAe,GACpBA,EAEL,IAAIA,EAAY,UAAY,EAAG,CAC3B,KAAK,WAAW,eAAiB,EACjC,MACJ,CAEA,KAAK,WAAW,gBAAkB,KAAK,WAAW,gBAAkB,GAAK,EACrE,OAAK,WAAW,eAAiB7Y,EAA4B,OAAO,2BAExE,KAAK,WAAW,OAAQ,gHAAkG,CACtH,0BAA2B,KAAK,WAAW,cAC/C,CAAC,EACD,KAAK,qBAAqB,oBAAoB,GAClD,CAOA,kBAAmB,CACf,IAAMsjB,EAAgB,KAAK,eAAe,EAK1C,GAJA,KAAK,qBAAqB,EAC1B,KAAK,eAAiB,KAAK,IAAI,EAC/B,KAAK,iBAAmB,EAEpB,CAACA,EAAe,MAAO,GAE3B,KAAK,WAAW,OAAQ,mDAA4C,EACpE,KAAK,eAAe,WAAW,EAE/B,KAAK,oBAAoB,EACzB,GAAI,CACA,KAAK,oBAAoB,IAAI,YAAY,uBAAwB,CAC7D,OAAQ,CAAE,UAAW,KAAK,IAAI,CAAE,CACpC,CAAC,CAAC,CACN,MAAY,CAAqB,CACjC,MAAO,EACX,CAOA,MAAM,oBAAqB,CACvB,GAAI,CAAC,KAAK,YAAc,CAAC,KAAK,eAAgB,OAO9C,GAAI,KAAK,eAAe,kBAAoB,YAAa,CACrD,KAAK,iBAAiB,EACtB,MACJ,CAEA,IAAMD,EAAI,KAAK,WAMf,GAAI,OAAO,UAAc,KAAe,UAAU,SAAW,GAAO,CAChEA,EAAE,MAAQ,UACVA,EAAE,UAAY,KAAK,IAAI,EACvB,KAAK,WAAW,QAAS,uDAA2C,EACpE,KAAK,wBAAwB,EAC7B,MACJ,CAGA,GADgB,KAAK,IAAI,GAAKA,EAAE,WAAa,KAAK,IAAI,GACxCrjB,EAA4B,SAAS,uBAAwB,CACvE,KAAK,qBAAqB,SAAS,EACnC,MACJ,CAOA,GAAIqjB,EAAE,YAAc,KAAK,IAAI,EAAIA,EAAE,WAAarjB,EAA4B,SAAS,oBAAqB,CACtG,KAAK,wBAAwB,EAC7B,MACJ,CAIA,GAAI,KAAK,aAAa,aAAe,OAAQ,CACzC,KAAK,qBAAqB,qBAAqB,EAC/C,MACJ,CAeA,IAAMujB,EAAY,KAAK,IAAI,EAAI,KAAK,IAAI,KAAK,gBAAkB,EAAGF,EAAE,SAAS,EAC7E,GAAIA,EAAE,UAAY,GAAKE,EAAYvjB,EAA4B,SAAS,uBAAwB,CAC5F,KAAK,WAAW,OAAQ,qGAAuF,CAC3G,YAAaujB,EACb,SAAUF,EAAE,QAChB,CAAC,EACD,KAAK,qBAAqB,oBAAoB,EAC9C,MACJ,CAEAA,EAAE,MAAQ,aACVA,EAAE,UAAY,EACdA,EAAE,WAAa,KAAK,IAAI,EACxB,KAAK,WAAW,OAAQ,gCAA0B,CAC9C,QAASA,EAAE,SACX,KAAM,KAAK,YAAc,UAAY,UACzC,CAAC,EAED,GAAI,CACI,KAAK,YACL,MAAM,KAAK,qBAAqB,EAEhC,MAAM,KAAK,kBAAkB,CACzB,KAAMrjB,EAA4B,cAAc,oBAChD,UAAW,KAAK,IAAI,CACxB,CAAC,CAET,OAASS,EAAO,CACZ,KAAK,WAAW,OAAQ,kDAAyC,CAC7D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAIA,KAAK,wBAAwB,CACjC,CAEA,yBAA0B,CACtB,IAAM4iB,EAAI,KAAK,WACXA,EAAE,aACF,aAAaA,EAAE,UAAU,EACzB,KAAK,eAAe,OAAOA,EAAE,UAAU,GAE3C,IAAMG,EAAUxjB,EAA4B,kBAItC0B,EAAQ8hB,EAAQ,KAAK,IAAI,KAAK,IAAIH,EAAE,SAAW,EAAG,CAAC,EAAGG,EAAQ,OAAS,CAAC,CAAC,EAE/EH,EAAE,WAAa,WAAW,IAAM,CAE5B,GADAA,EAAE,WAAa,KACX,KAAK,gBAAgB,kBAAoB,YAAa,CACtD,KAAK,iBAAiB,EACtB,MACJ,CACA,KAAK,mBAAmB,CAC5B,EAAG3hB,CAAK,EACR,KAAK,kBAAkB2hB,EAAE,UAAU,CACvC,CAYA,wBAAwBI,EAAI,CACxB,GAAI,CACA,GAAI,CAACA,GAAM,OAAOA,EAAG,kBAAqB,YAAc,OAAOA,EAAG,kBAAqB,WAAY,OACnG,IAAMC,EAAU,KAAK,SAAS,QAAQ,WACtC,GAAI,CAAC,MAAM,QAAQA,CAAO,GAAKA,EAAQ,SAAW,EAAG,OACrDD,EAAG,iBAAiB,CAAE,GAAGA,EAAG,iBAAiB,EAAG,WAAYC,CAAQ,CAAC,CACzE,OAASjjB,EAAO,CACZ,KAAK,WAAW,OAAQ,+CAAgD,CACpE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CACJ,CAEA,MAAM,sBAAuB,CACzB,IAAMgjB,EAAK,KAAK,eAChB,GAAI,CAACA,EAAI,OAKT,GAJA,KAAK,wBAAwBA,CAAE,EAI3BA,EAAG,iBAAmB,mBACtB,GAAI,CAAE,MAAMA,EAAG,oBAAoB,CAAE,KAAM,UAAW,CAAC,CAAG,MAAY,CAAe,CAGzF,IAAMhF,EAAQ,MAAMgF,EAAG,YAAY,CAAE,WAAY,EAAK,CAAC,EACvD,MAAMA,EAAG,oBAAoBhF,CAAK,EAClC,MAAM,KAAK,oBACPze,EAA4B,SAAS,sBAIrCA,EAA4B,SAAS,qBACzC,EAEA,MAAM,KAAK,kBAAkB,CACzB,KAAMA,EAA4B,cAAc,kBAChD,IAAKyjB,EAAG,iBAAiB,IACzB,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,WAAW,QAAS,kCAA2B,CACxD,CAMA,+BAAgC,CAC5B,IAAMlgB,EAAM,KAAK,gBAAgB,0BAA0B,KACpD,KAAK,gBAAgB,mBAAmB,IAC/C,GAAI,CAACA,EAAK,OAAO,KACjB,GAAI,CACA,OAAO,KAAK,+BAA+BA,CAAG,CAClD,MAAY,CACR,OAAO,IACX,CACJ,CAEA,MAAM,0BAA0BA,EAAKtC,EAAS,CAC1C,IAAMwgB,EAAW,KAAK,8BAA8B,EACpD,GAAI,CAACA,EAED,MAAM,IAAI,MAAM,mCAAmCxgB,CAAO,EAAE,EAEhE,IAAM0iB,EAAW,KAAK,+BAA+BpgB,CAAG,EACxD,MAAM,KAAK,yBAAyBogB,EAAUlC,EAAUxgB,CAAO,CACnE,CAGA,MAAM,wBAAwBwB,EAAMC,EAAM,CACtC,IAAMiM,EAAI3O,EAA4B,cAChCyjB,EAAK,KAAK,eAChB,GAAKA,EAIL,OAFA,KAAK,qBAAqB,EAElBhhB,EAAM,CACV,KAAKkM,EAAE,oBAAqB,CAExB,GAAI,CAAC,KAAK,YAAa,OACnB,KAAK,WAAW,QAAU,SAC1B,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,WAAW,MAAQ,aACxB,KAAK,eAAe,cAAc,GAEtC,MAAM,KAAK,qBAAqB,EAChC,MACJ,CAEA,KAAKA,EAAE,kBAAmB,CACtB,GAAI,CAACjM,EAAK,IAAK,OAEf,MAAM,KAAK,0BAA0BA,EAAK,IAAK,mBAAmB,EAE9D,KAAK,WAAW,QAAU,SAC1B,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,eAAe,cAAc,GAEtC,KAAK,WAAW,MAAQ,aAExB,KAAK,wBAAwB+gB,CAAE,EAC/B,MAAMA,EAAG,qBAAqB,CAAE,KAAM,QAAS,IAAK/gB,EAAK,GAAI,CAAC,EAC9D,IAAM8d,EAAS,MAAMiD,EAAG,aAAa,EACrC,MAAMA,EAAG,oBAAoBjD,CAAM,EACnC,MAAM,KAAK,oBACPxgB,EAA4B,SAAS,sBAIrCA,EAA4B,SAAS,qBACzC,EAEA,MAAM,KAAK,kBAAkB,CACzB,KAAM2O,EAAE,mBACR,IAAK8U,EAAG,iBAAiB,IACzB,UAAW,KAAK,IAAI,CACxB,CAAC,EACD,KAAK,WAAW,QAAS,mCAA4B,EACrD,MACJ,CAEA,KAAK9U,EAAE,mBAAoB,CACvB,GAAI,CAACjM,EAAK,IAAK,OACf,GAAI+gB,EAAG,iBAAmB,mBAAoB,CAC1C,KAAK,WAAW,OAAQ,2DAAkD,CACtE,eAAgBA,EAAG,cACvB,CAAC,EACD,MACJ,CACA,MAAM,KAAK,0BAA0B/gB,EAAK,IAAK,oBAAoB,EACnE,MAAM+gB,EAAG,qBAAqB,CAAE,KAAM,SAAU,IAAK/gB,EAAK,GAAI,CAAC,EAG/D,KAAK,WAAW,WAAa,EAC7B,KAAK,WAAW,QAAS,sCAA+B,EACxD,MACJ,CAEA,QACJ,CACJ,CAYA,qBAAqB6H,EAAQ,CACzB,KAAK,qBAAqB,EAC1B,KAAK,WAAW,MAAQ,YACxB,KAAK,sCAAsC,EAC3C,KAAK,WAAW,OAAQ,sEAAwD,CAAE,OAAAA,CAAO,CAAC,EAErF,KAAK,qCACN,KAAK,mCAAqC,GAC1C,KAAK,mBACD,qHACA,QACJ,GAMJ,KAAK,eAAe,iBAAiB,EACrC,KAAK,yBAAyB,CAClC,CAKA,gBAAiB,CACb,KAAK,WAAW,OAAQ,2CAA2C,EAG/D,KAAK,wBACL,cAAc,KAAK,qBAAqB,EACxC,KAAK,sBAAwB,MAMjC,KAAK,gBAAgB,EACrB,KAAK,uBAAuB,EAGxB,KAAK,gBACL,KAAK,cAAc,QAAQvH,GAAS,CAC5BA,IACA,cAAcA,CAAK,EACnB,aAAaA,CAAK,EAE1B,CAAC,EACD,KAAK,cAAc,MAAM,GAGzB,KAAK,8BACL,KAAK,6BAA6B,MAAM,EAE5C,KAAK,oBAAsB,KAE3B,KAAK,WAAW,OAAQ,iCAAiC,CAC7D,CAyBA,oBACI4gB,EAAY5jB,EAA4B,SAAS,sBACjD6jB,EAAS7jB,EAA4B,SAAS,2BAChD,CACE,OAAO,IAAI,QAASwB,GAAY,CAC5B,IAAMiiB,EAAK,KAAK,eAChB,GAAI,CAACA,EAAI,CACLjiB,EAAQ,EAAK,EACb,MACJ,CACA,GAAIiiB,EAAG,oBAAsB,WAAY,CACrCjiB,EAAQ,EAAI,EACZ,MACJ,CAEA,IAAIsiB,EAAU,GACVC,EAAY,KACZC,EAAY,KAMVC,EAAgB,IAAM,CACxB,GAAI,CACA,IAAM1gB,EAAM,KAAK,gBAAgB,kBAAkB,IACnD,OAAKA,EACE,KAAK,6BAA6BA,CAAG,EAAE,MAAQ,EADrC,EAErB,MAAY,CACR,MAAO,EACX,CACJ,EAEM2gB,EAAUC,GAAc,CAC1B,GAAI,CAAAL,EACJ,CAAAA,EAAU,GACNC,IAAa,aAAaA,CAAS,EAAG,KAAK,sBAAsBA,CAAS,GAC1EC,IAAa,aAAaA,CAAS,EAAG,KAAK,sBAAsBA,CAAS,GAC9E,GAAI,CAAEP,EAAG,oBAAoB,0BAA2BW,CAAa,CAAG,MAAY,CAAC,CACrF5iB,EAAQ2iB,CAAS,EACrB,EAEMC,EAAgB,IAAM,CACpB,KAAK,gBAAgB,oBAAsB,YAC3CF,EAAO,EAAI,CAEnB,EAEAT,EAAG,iBAAiB,0BAA2BW,CAAa,EAI5DL,EAAY,WAAW,IAAM,CACrBE,EAAc,GACdC,EAAO,EAAK,CAIpB,EAAGN,CAAS,EACZ,KAAK,oBAAoBG,CAAS,EAElCC,EAAY,WAAW,IAAME,EAAO,EAAK,EAAG,KAAK,IAAIL,EAAQD,CAAS,CAAC,EACvE,KAAK,oBAAoBI,CAAS,CACtC,CAAC,CACL,CAEA,iBAAkB,CACd,KAAK,WAAW,OAAQ,sBAAuB,CAC3C,QAAS,KAAK,mBACd,YAAa,KAAK,qBACtB,CAAC,EACD,KAAK,eAAe,UAAU,CAClC,CAEA,aAAc,CACV,IAAMK,EAAiB,CAAC,CAAC,KAAK,YAExBC,EADmB,KAAK,aAAa,aACI,OACzCC,EAAa,KAAK,WAClBC,EAAkB,KAAK,gBAAgB,gBAE7C,OAAO,KAAK,aAAe,KAAK,YAAY,aAAe,QAAU,KAAK,UAC9E,CAEA,mBAAoB,CAChB,MAAO,CACH,YAAa,KAAK,eAClB,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,gBAAiB,KAAK,gBAAgB,gBACtC,mBAAoB,KAAK,gBAAgB,mBACzC,iBAAkB,KAAK,gBAC3B,CACJ,CAEA,4BAA6B,CACzB,KAAK,2BAA2B,EAChC,KAAK,WAAa,GAGb,KAAK,6BACN,KAAK,2BAA6B,GAClC,KAAK,mBAAmB,wDAAkD,QAAQ,GAIlF,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAG9B,KAAK,oBAAoB,IAAI,YAAY,kBAAmB,CACxD,OAAQ,CACJ,OAAQ,kBACR,UAAW,KAAK,IAAI,CACxB,CACJ,CAAC,CAAC,CAEN,CAEA,4BAA6B,CACzB,GAAI,CACA,GAAI,KAAK,aAAe,KAAK,YAAY,aAAe,OAAQ,CAC5D,IAAMC,EAAe,CACjB,KAAM,kBACN,UAAW,KAAK,IAAI,EACpB,OAAQ,KAAK,sBAAwB,kBAAoB,iBAC7D,EAEA,QAAS1iB,EAAI,EAAGA,EAAI,EAAGA,IACnB,GAAI,CACA,KAAK,YAAY,KAAK,KAAK,UAAU0iB,CAAY,CAAC,EAClD,OAAO,0BAA0B,UAAU,IAAI,OAAQ,+BAAgC,CACnF,OAAQA,EAAa,OACrB,QAAS1iB,EAAI,CACjB,CAAC,EACD,KACJ,OAAS2iB,EAAW,CACZ3iB,IAAM,GACN,OAAO,0BAA0B,UAAU,IAAI,QAAS,yCAA0C,CAC9F,MAAO2iB,EAAU,OACrB,CAAC,CAET,CAER,CACJ,OAASjkB,EAAO,CACZ,OAAO,0BAA0B,UAAU,IAAI,QAAS,yCAA0C,CAC9F,MAAOA,EAAM,OACjB,CAAC,CACL,CACJ,CAOA,qBAAsB,CAClB,MAAI,CAAC,KAAK,YAAc,KAAK,aAAa,aAAe,QAChD,KAAK,qCACN,KAAK,mCAAqC,GAC1C,KAAK,mBAAmB,qDAAsD,QAAQ,GAEnF,KAGX,KAAK,qBAAqB,EAC1B,KAAK,mCAAqC,GAC1C,KAAK,WAAW,UAAY,KAAK,IAAI,EACrC,KAAK,eAAe,cAAc,EAClC,KAAK,mBAAmB,EACjB,GACX,CAEA,iCAAiCiC,EAAM,CACnC,IAAM6H,EAAS7H,EAAK,QAAU,UACxBiiB,EAAapa,IAAW,kBAAoB,yBAA2B,mBAGxE,KAAK,iCACN,KAAK,+BAAiC,GACtC,KAAK,mBAAmB,QAAQoa,CAAU,GAAI,QAAQ,GAG1D,KAAK,eAAe,mBAAmB,EAEvC,KAAK,sBAAwB,GAC7B,KAAK,WAAa,GAClB,KAAK,cAAc,EAEnB,KAAK,cAAc,EAAE,EACrB,KAAK,uBAAuB,EAAE,EAE9B,KAAK,oBAAoB,IAAI,YAAY,kBAAmB,CACxD,OAAQ,CACJ,OAAQpa,EACR,UAAW,KAAK,IAAI,CACxB,CACJ,CAAC,CAAC,EAEG,KAAK,8BACN,KAAK,4BAA8B,KAAK,kBAAkB,WAAW,IAAM,CACvE,IAAMvH,EAAQ,KAAK,4BACnB,KAAK,4BAA8B,KACnC,KAAK,oBAAoBA,CAAK,EAC1B,KAAK,gBAAkB,IAC3B,KAAK,WAAW,CACpB,EAAG,GAAI,CAAC,GAGZ,OAAO,0BAA0B,UAAU,IAAI,OAAQ,yCAA0C,CAC7F,OAAQuH,CACZ,CAAC,CACL,CAKA,YAAa,CACT,GAAI,CACA,KAAK,cAAgB,GAIrB,GAAI,CAAE,KAAK,kBAAkB,CAAG,MAAY,CAAC,CAC7C,GAAI,CAAE,KAAK,6BAA6B,CAAG,MAAY,CAAC,CACxD,KAAK,iBAAmB,KACxB,KAAK,iBAAmB,KAKxB,KAAK,kBAAoB,KACzB,KAAK,qBAAuB,KAC5B,KAAK,qBAAqB,QAAQ,EAGlC,KAAK,sBAAwB,GAC7B,OAAO,0BAA0B,UAAU,IAAI,OAAQ,iCAAiC,EACxF,KAAK,2BAA2B,EAGhC,KAAK,sCAAsC,EAC3C,KAAK,eAAe,EACpB,KAAK,4BAA8B,KACnC,KAAK,cAAc,EACnB,KAAK,0BAA0B,EAC/B,QAAWvH,KAAS,KAAK,YAAY,QAAQ,EACzC,aAAaA,EAAM,CAAC,CAAC,EAEzB,KAAK,YAAY,MAAM,EAGnB,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAI9B,QAAWqP,KAAW,KAAK,cAAc,OAAO,EACxCA,EAAQ,aAAe,QAAQA,EAAQ,MAAM,EAErD,KAAK,cAAc,MAAM,EACrB,KAAK,mBACL,KAAK,iBAAiB,MAAM,EAC5B,KAAK,iBAAmB,MAI5B,KAAK,WAAa,GAClB,KAAK,oBAAoB,MAAM,EAC/B,KAAK,eAAiB,EACtB,KAAK,aAAa,MAAM,EACxB,KAAK,WAAa,CAAC,EAGnB,KAAK,mBAAmB,EACxB,KAAK,iBAAiB,EACtB,KAAK,qCAAqC,EAC1C,KAAK,YAAY,MAAM,EACvB,KAAK,QAAQ,MAAM,EACnB,KAAK,kBAAoB,EACzB,KAAK,gBAAkB,KAAK,IAAI,EAChC,KAAK,eAAiB,EACtB,KAAK,uBAAyB,EAC9B,KAAK,aAAa,MAAM,EACxB,KAAK,yBAAyB,EAE9B,KAAK,iBAAmB,CACpB,cAAe,GACf,QAAS,GACT,SAAU,GACV,cAAe,GACf,sBAAuB,GACvB,4BAA6B,GAC7B,sBAAuB,GACvB,gBAAiB,GACjB,sBAAuB,GACvB,OAAQ,EACZ,EAGI,KAAK,cACL,KAAK,YAAY,MAAM,EACvB,KAAK,YAAY,OAAS,KAC1B,KAAK,YAAY,QAAU,KAC3B,KAAK,YAAY,UAAY,KAC7B,KAAK,YAAY,QAAU,KAC3B,KAAK,YAAc,MAEnB,KAAK,iBACL,KAAK,eAAe,MAAM,EAC1B,KAAK,eAAe,wBAA0B,KAC9C,KAAK,eAAe,cAAgB,KACpC,KAAK,eAAiB,MAGtB,KAAK,cAAgB,KAAK,aAAa,OAAS,IAChD,KAAK,aAAa,QAAQ,CAAC5N,EAASwE,IAAU,CAC1C,KAAK,kBAAkBxE,EAAS,gBAAgBwE,CAAK,GAAG,CAC5D,CAAC,EACD,KAAK,aAAe,CAAC,GAGzB,KAAK,wBAAwB,EAAE,MAAMxI,GAAS,CAC1C,KAAK,WAAW,QAAS,mCAAoC,CACzD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAAC,EAED,KAAK,oBAAoB,IAAI,YAAY,kBAAmB,CACxD,OAAQ,CACJ,OAAQ,kBACR,UAAW,KAAK,IAAI,CACxB,CACJ,CAAC,CAAC,EACF,KAAK,oBAAoB,IAAI,YAAY,qBAAsB,CAC3D,OAAQ,CACJ,UAAW,KAAK,IAAI,EACpB,OAAQ,cACZ,CACJ,CAAC,CAAC,EAEF,KAAK,eAAe,cAAc,EAClC,KAAK,cAAc,EAAE,EACrB,KAAK,uBAAuB,EAAE,EAC9B,KAAK,WAAW,OAAQ,0DAA0D,CACtF,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,2CAAuC,CAC5D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,QAAE,CACE,KAAK,sBAAwB,EACjC,CACJ,CAEA,MAAM,SAASmkB,EAAMC,EAAU,CAAC,EAAG,CAI/B,GAFA,KAAK,yBAAyB,UAAU,EAEpC,CAAC,KAAK,YAAY,EAClB,MAAM,IAAI,MAAM,sFAAsF,EAG1G,GAAI,CAAC,KAAK,qBACN,KAAK,uBAAuB,EAG5B,MAAM,IAAI,QAAQrjB,GAAW,WAAWA,EAAS,GAAG,CAAC,EAEjD,CAAC,KAAK,oBACN,MAAM,IAAI,MAAM,yEAAyE,EAKjG,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,OAC7B,MAAM,IAAI,MAAM,gFAAgF,EAIpG,GAAI,CAEA,OADe,MAAM,KAAK,mBAAmB,SAASojB,EAAMC,CAAO,CAEvE,OAASpkB,EAAO,CAIZ,MAHA,KAAK,WAAW,QAAS,uBAAwB,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EAGjGA,EAAM,QAAQ,SAAS,sBAAsB,EACvC,IAAI,MAAM,kEAAkE,EAC3EA,EAAM,QAAQ,SAAS,iCAAiC,EACzD,IAAI,MAAM,kEAAkE,EAC3EA,EAAM,QAAQ,SAAS,kBAAkB,EAC1C,IAAI,MAAM,wDAAwD,EAElEA,CAEd,CACJ,CAGA,kBAAmB,CACf,GAAI,CAAC,KAAK,mBACN,MAAO,CAAE,QAAS,CAAC,EAAG,UAAW,CAAC,CAAE,EAGxC,GAAI,CAEA,IAAIqkB,EAAU,CAAC,EACXC,EAAY,CAAC,EAEjB,OAAI,OAAO,KAAK,mBAAmB,oBAAuB,WACtDD,EAAU,KAAK,mBAAmB,mBAAmB,EAErD,KAAK,WAAW,OAAQ,iEAAiE,EAGzF,OAAO,KAAK,mBAAmB,uBAA0B,WACzDC,EAAY,KAAK,mBAAmB,sBAAsB,EAE1D,KAAK,WAAW,OAAQ,oEAAoE,EAGzF,CACH,QAASD,GAAW,CAAC,EACrB,UAAWC,GAAa,CAAC,CAC7B,CACJ,OAAStkB,EAAO,CACZ,YAAK,WAAW,QAAS,gCAAiC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACvG,CAAE,QAAS,CAAC,EAAG,UAAW,CAAC,CAAE,CACxC,CACJ,CAGA,uBAAwB,CACpB,GAAI,CAAC,KAAK,mBACN,MAAO,CACH,YAAa,GACb,OAAQ,kBACR,QAAS,sCACb,EAGJ,IAAMukB,EAAkB,KAAK,mBAAmB,mBAAmB,EAC7DC,EAAqB,KAAK,mBAAmB,sBAAsB,EAEzE,MAAO,CACH,YAAa,GACb,OAAQ,QACR,gBAAiBD,EAAgB,OACjC,mBAAoBC,EAAmB,OACvC,eAAgBD,EAAgB,OAASC,EAAmB,MAChE,CACJ,CAGA,mBAAmBC,EAAQ,CACvB,OAAK,KAAK,mBACH,KAAK,mBAAmB,eAAeA,CAAM,EADf,EAEzC,CAGA,2BAA4B,CACxB,OAAI,KAAK,oBACL,KAAK,WAAW,OAAQ,kDAA2C,EACnE,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,KACnB,IAEJ,EACX,CAGA,0BAA2B,CACvB,GAAI,CACA,OAAI,KAAK,oBACL,KAAK,mBAAmB,QAAQ,EAEpC,KAAK,uBAAuB,EACrB,EACX,OAASzkB,EAAO,CACZ,YAAK,WAAW,QAAS,+CAAgD,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACtH,EACX,CACJ,CAGA,yBAAyB0kB,EAAYC,EAAYC,EAASC,EAAoB,KAAM,CAChF,KAAK,eAAiBH,EACtB,KAAK,eAAiBC,EACtB,KAAK,YAAcC,EACnB,KAAK,sBAAwBC,EAGzB,KAAK,qBACL,KAAK,mBAAmB,WAAaH,EACrC,KAAK,mBAAmB,eAAiBC,EACzC,KAAK,mBAAmB,QAAUC,EAClC,KAAK,mBAAmB,sBAAwBC,EAExD,CAEA,yBAA0B,CACtB,OAAK,KAAK,mBACH,KAAK,mBAAmB,4BAA4B,EADtB,CAAC,CAE1C,CAEA,MAAM,mBAAmBJ,EAAQ,CAC7B,OAAK,KAAK,mBACH,KAAK,mBAAmB,mBAAmBA,CAAM,EADnB,EAEzC,CAEA,MAAM,mBAAmBA,EAAQ,CAC7B,OAAK,KAAK,mBACH,KAAK,mBAAmB,mBAAmBA,CAAM,EADnB,EAEzC,CAEA,MAAM,yBAAyBA,EAAQ,CACnC,OAAK,KAAK,mBACH,KAAK,mBAAmB,aAAaA,CAAM,EADb,IAEzC,CAEA,4BAA4B7M,EAAK,CACxB,KAAK,oBACV,KAAK,mBAAmB,gBAAgBA,CAAG,CAC/C,CAMA,MAAM,wBAAwBkN,EAAa,CACvC,GAAI,CAGA,KAAK,eAAiBA,EAGtB,IAAMC,EAAU,CAAC,EAAE,KAAK,eAAiB,KAAK,QACxBD,EAAY,WAI9B,KAAK,eAAe,WAAW,EAIvC,WAAW,IAAM,CACb,GAAI,CACA,KAAK,uBAAuB,CAChC,OAAS9kB,EAAO,CACZ,KAAK,WAAW,OAAQ,iEAAkE,CAAE,QAASA,EAAM,OAAQ,CAAC,CACxH,CACJ,EAAG,GAAI,EAGC,KAAK,oBAAsB,KAAK,YAAY,GAExC,OAAO,KAAK,mBAAmB,iBAAoB,YACnD,KAAK,mBAAmB,gBAAgB,CACpC,eAAgB,KAAK,eACrB,YAAa,KAAK,YAClB,UAAW,CAAC,CAAC,KAAK,MACtB,CAAC,CAIb,OAASA,EAAO,CACZ,KAAK,WAAW,QAAS,uCAAwC,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,CACzH,CACJ,CAEJ,4BAA6B,CACrB,IAAM4K,EAAS,CACX,sBAAuB,CAAC,CAAC,KAAK,mBAC9B,eAAgB,CAAC,CAAC,KAAK,YACvB,iBAAkB,KAAK,aAAa,WACpC,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,MAAO,EACX,EAEA,OAAAA,EAAO,MAAQA,EAAO,uBACVA,EAAO,gBACPA,EAAO,mBAAqB,QAC5BA,EAAO,aACPA,EAAO,WACZA,CACX,CAGA,+BAAgC,CAC5B,GAAI,CAEA,OAAI,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAI9B,WAAW,IAAM,CACb,KAAK,uBAAuB,CAChC,EAAG,GAAG,EAEC,EACX,OAAS5K,EAAO,CACZ,YAAK,WAAW,QAAS,8CAA+C,CAAE,UAAWA,GAAO,aAAa,MAAQ,SAAU,CAAC,EACrH,EACX,CACJ,CAGA,4BAA6B,CACzB,IAAMoY,EAAc,CAChB,UAAW,IAAI,KAAK,EAAE,YAAY,EAClC,cAAe,CACX,eAAgB,CAAC,CAAC,KAAK,YACvB,iBAAkB,KAAK,aAAa,WACpC,YAAa,KAAK,YAAY,EAC9B,WAAY,KAAK,WACjB,YAAa,KAAK,YAClB,iBAAkB,CAAC,CAAC,KAAK,cACzB,UAAW,CAAC,CAAC,KAAK,OAClB,eAAgB,CAAC,CAAC,KAAK,YACvB,kBAAmB,CAAC,CAAC,KAAK,eAC1B,eAAgB,CAAC,CAAC,KAAK,WAC3B,EACA,mBAAoB,KACpB,YAAa,CACT,mBAAoB,KAAK,qBAAuB,GACpD,sBAAuB,CAAC,CAAC,KAAK,mBAC9B,uBAAwB,KAAK,mBAAqB,6BAA+B,MACjF,CACJ,EAEA,GAAI,KAAK,mBACL,GAAI,CACAA,EAAY,mBAAqB,KAAK,mBAAmB,gBAAgB,CAC7E,OAASpY,EAAO,CACZoY,EAAY,mBAAqB,CAAE,MAAOpY,EAAM,OAAQ,CAC5D,CAGJ,OAAOoY,CACX,CAEA,uBAAwB,CACpB,GAAI,CAAC,KAAK,mBACN,MAAO,CAAE,MAAO,sCAAuC,EAG3D,GAAI,CACA,OAAO,KAAK,mBAAmB,sBAAsB,CACzD,OAASpY,EAAO,CACZ,MAAO,CAAE,MAAOA,EAAM,OAAQ,CAClC,CACJ,CAEA,aAAamkB,EAAM,CACf,GAAI,CAAC,KAAK,mBACN,MAAO,CACH,QAAS,GACT,OAAQ,CAAC,sCAAsC,EAC/C,SAAU,KACV,SAAUA,GAAM,MAAQ,EACxB,cAAe,KACnB,EAGJ,GAAI,CACA,OAAO,KAAK,mBAAmB,aAAaA,CAAI,CACpD,OAASnkB,EAAO,CACZ,MAAO,CACH,QAAS,GACT,OAAQ,CAACA,EAAM,OAAO,EACtB,SAAU,KACV,SAAUmkB,GAAM,MAAQ,EACxB,cAAe,KACnB,CACJ,CACJ,CAEA,iBAAkB,CACd,GAAI,CAAC,KAAK,mBACN,MAAO,CAAE,MAAO,sCAAuC,EAG3D,GAAI,CACA,OAAO,KAAK,mBAAmB,gBAAgB,CACnD,OAASnkB,EAAO,CACZ,MAAO,CAAE,MAAOA,EAAM,OAAQ,CAClC,CACJ,CAEA,MAAM,4BAA4BokB,EAAU,CAAC,EAAG,CAC5C,IAAMY,EAAkB,IAAI,gBACtB,CAAE,OAAAC,EAASD,EAAgB,OAAQ,QAAAljB,EAAU,GAAK,EAAIsiB,EAExDa,GAAUA,IAAWD,EAAgB,QACrCC,EAAO,iBAAiB,QAAS,IAAMD,EAAgB,MAAM,CAAC,EAElE,GAAI,CACA,GAAI,CAAC,KAAK,WACN,MAAM,IAAI,MAAM,yBAAyB,EAG7C,GAAI,CAAC,KAAK,aAAe,KAAK,YAAY,aAAe,OACrD,MAAM,IAAI,MAAM,uBAAuB,EAG3C,GAAI,CAAC,KAAK,eAAiB,CAAC,KAAK,OAC7B,MAAM,IAAI,MAAM,2BAA2B,EAG3C,KAAK,qBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,MAG9B,KAAK,uBAAuB,EAE5B,IAAInf,EAAW,EACTC,EAAc,GACdof,EAAgB,IAChBC,EAAcrf,EAAcof,EAE5BE,EAAwB,IAAI,QAAQ,CAACrkB,EAASW,IAAW,CAC3D,IAAM2jB,EAAsB,IAAM,CAC9B,GAAIL,EAAgB,OAAO,QAAS,CAChCtjB,EAAO,IAAI,MAAM,qBAAqB,CAAC,EACvC,MACJ,CAEA,GAAI,KAAK,mBAAoB,CACzBX,EAAQ,EAAI,EACZ,MACJ,CAEA,GAAI8E,GAAYC,EAAa,CACzBpE,EAAO,IAAI,MAAM,gCAAgCyjB,CAAW,IAAI,CAAC,EACjE,MACJ,CAEAtf,IACA,WAAWwf,EAAqBH,CAAa,CACjD,EAEAG,EAAoB,CACxB,CAAC,EASD,GAPA,MAAM,QAAQ,KAAK,CACfD,EACA,IAAI,QAAQ,CAACE,EAAG5jB,IACZ,WAAW,IAAMA,EAAO,IAAI,MAAM,wBAAwBI,CAAO,IAAI,CAAC,EAAGA,CAAO,CACpF,CACJ,CAAC,EAEG,KAAK,mBACL,MAAO,GAEP,MAAM,IAAI,MAAM,8BAA8B,CAGtD,OAAS9B,EAAO,CACZ,OAAIA,EAAM,OAAS,cAAgBA,EAAM,QAAQ,SAAS,WAAW,GACjE,KAAK,WAAW,OAAQ,gDAAgD,EACjE,CAAE,UAAW,EAAK,IAG7B,KAAK,WAAW,QAAS,6CAA8C,CACnE,UAAWA,GAAO,aAAa,MAAQ,UACvC,QAASA,EAAM,QACf,QACJ,CAAC,EACM,CAAE,MAAOA,EAAM,QAAS,QAAmB,EACtD,CACJ,CAEA,kCAAmC,CAC/B,GAAI,CACA,OAAI,KAAK,oBACL,KAAK,mBAAmB,QAAQ,EAChC,KAAK,mBAAqB,KAC1B,KAAK,oBAAsB,GAC3B,KAAK,WAAW,OAAQ,wCAAwC,EACzD,IAEJ,EACX,OAASA,EAAO,CACZ,YAAK,WAAW,QAAS,iDAAkD,CACvE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,EACX,CACJ,CAEA,6BAA8B,CAC1B,GAAI,CAAC,KAAK,mBACN,MAAO,CAAE,UAAW,GAAO,OAAQ,iBAAkB,EAGzD,GAAI,CACA,IAAM4K,EAAS,KAAK,mBAAmB,gBAAgB,EACvD,MAAO,CACH,UAAW,GACX,OAAQA,EAAO,QAAU,UACzB,gBAAiBA,EAAO,iBAAmB,EAC3C,mBAAoBA,EAAO,oBAAsB,EACjD,WAAY,4BAChB,CACJ,OAAS5K,EAAO,CACZ,YAAK,WAAW,QAAS,6CAA8C,CACnE,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,CAAE,UAAW,GAAO,OAAQ,QAAS,MAAOA,EAAM,OAAQ,CACrE,CACJ,CAEA,mCAAoC,CAChC,GAAI,KAAK,iBAAiB,qBAAuB,KAAK,oBAElD,GAAI,CACA,IAAMulB,EAAU,KAAK,kBAAkBhmB,EAA4B,MAAM,0BAA2B,eAAe,EAC7GimB,EAAU,KAAK,kBAAkBjmB,EAA4B,MAAM,0BAA2B,eAAe,EAGnH,OAAIgmB,EAAQ,MAAM,CAAC3J,EAAMpT,IAAUoT,IAAS4J,EAAQhd,CAAK,CAAC,GACtD,KAAK,WAAW,QAAS,6EAA6E,EAC/F,IAIG,KAAK,oBAAoB,EAC7B,SAAW,GACjB,KAAK,WAAW,QAAS,mDAAmD,EACrE,KAGX,KAAK,WAAW,OAAQ,6EAA6E,EAC9F,GACX,OAASxI,EAAO,CACZ,YAAK,WAAW,QAAS,0DAA2D,CAChF,UAAWA,EAAM,YAAY,KAC7B,aAAcA,EAAM,OACxB,CAAC,EACM,EACX,CAEJ,MAAO,EACX,CAcA,cAAe,CACX,MAAO,CAAE,GAAG,KAAK,SAAU,CAC/B,CAOA,qBAAqBylB,EAAU,CAC3B,OAAI,OAAOA,GAAa,WAAmB,IAAM,CAAC,GAClD,KAAK,oBAAoB,IAAIA,CAAQ,EAC9B,IAAM,KAAK,oBAAoB,OAAOA,CAAQ,EACzD,CAEA,wBAAwBA,EAAU,CAC9B,KAAK,oBAAoB,OAAOA,CAAQ,CAC5C,CAYA,oBAAoBC,EAAa,CAC7B,KAAK,kBAAqB,OAAOA,GAAgB,UAAYA,EAAeA,EAAc,KAG1F,KAAK,iBAAiB,CAAC,CAAC,EASpB,KAAK,mBAAqB,KAAK,mBAAqB,KAAK,UAAU,QAAU,YAC7E,KAAK,WAAW,EAAE,MAAO1lB,GAAU,CAC/B,KAAK,WAAW,OAAQ,0EAAiE,CACrF,UAAWA,GAAO,aAAa,IACnC,CAAC,CACL,CAAC,CAET,CAWA,uBAAuB2lB,EAAQ,CAC3B,KAAK,qBAAuBA,GAAU,IAC1C,CAGA,qBAAsB,CAClB,MAAO,CAAC,CAAC,KAAK,sBAAwB,KAAK,mBAAqB,KAAK,oBACzE,CAEA,sBAAuB,CACnB,OAAO,KAAK,iBAChB,CAEA,qBAAsB,CAClB,OAAO,KAAK,gBAChB,CAKA,sBAAuB,CACnB,IAAM3C,EAAK,KAAK,eAChB,GAAI,CAACA,GAAM,OAAOA,EAAG,cAAiB,WAAY,OAClD,IAAM4C,EAAO5C,EAAG,aAAa,EACxB,IAAIJ,GAAKA,EAAE,KAAK,EAChB,OAAOiD,GAAKA,IAAMA,EAAE,OAAS,SAAWA,EAAE,OAAS,UAAYA,EAAE,aAAe,MAAM,EACrFC,EAAO,KAAK,kBAAoB,KAAK,kBAAkB,UAAU,EAAI,CAAC,EAC1DA,EAAK,SAAWF,EAAK,QAAUE,EAAK,MAAMD,GAAKD,EAAK,SAASC,CAAC,CAAC,IAK7E,KAAK,kBAAoB,IAAI,YAAYD,CAAI,GAEjD,KAAK,iBAAiB,CAAE,eAAgBA,EAAK,KAAKC,GAAKA,EAAE,OAAS,OAAO,CAAE,CAAC,CAChF,CAKA,wBAAyB,CACrB,KAAK,qBAAqB,EAC1B,WAAW,IAAM,CAAE,GAAI,CAAE,KAAK,qBAAqB,CAAG,MAAY,CAAC,CAAE,EAAG,GAAG,EAC3E,WAAW,IAAM,CAAE,GAAI,CAAE,KAAK,qBAAqB,CAAG,MAAY,CAAC,CAAE,EAAG,IAAI,CAChF,CAEA,iBAAiBE,EAAO,CACpB,KAAK,UAAY,CAAE,GAAG,KAAK,UAAW,GAAGA,EAAO,YAAa,KAAK,iBAAkB,EACpF,IAAMC,EAAW,KAAK,aAAa,EAG/BA,EAAS,QAAU,SAAU,KAAK,iBAAiB,EAC9CA,EAAS,QAAU,QAAQ,KAAK,gBAAgB,EACzD,GAAI,CAAE,KAAK,qBAAqBA,CAAQ,CAAG,MAAY,CAAC,CAIxD,QAAWP,KAAY,KAAK,oBACxB,GAAI,CAAEA,EAASO,CAAQ,CAAG,MAAY,CAAC,CAE3C,GAAI,OAAO,SAAa,IACpB,GAAI,CACA,KAAK,oBAAoB,IAAI,YAAY,uBAAwB,CAC7D,OAAQ,CAAE,UAAW,KAAK,YAAc,KAAM,MAAOA,CAAS,CAClE,CAAC,CAAC,CACN,MAAY,CAAC,CAErB,CAEA,eAAgB,CACZ,IAAMC,EAAY,OAAO,KAAK,aAAgB,WAAa,KAAK,YAAY,EAAI,GAC1EC,EAAc,KAAK,aAAe,KAAK,YAAY,aAAe,OAMxE,MADW,CAAC,EAAED,GAAaC,GAAe,KAAK,YAAc,CAAC,KAAK,eAAe,EAEtF,CAEA,MAAM,gBAAgBlkB,EAAMC,EAAM,CAE9B,OADa,MAAM,KAAK,kBAAkB,CAAE,KAAAD,EAAM,GAAGC,CAAK,CAAC,CAE/D,CAEA,mBAAoB,CAChB,MAAO,CAAE,iBAAkB,GAAM,iBAAkB,GAAM,gBAAiB,EAAK,CACnF,CACA,mBAAoB,CAChB,MAAO,CAAE,WAAY,KAAK,gBAAiB,MAAO,CAAE,MAAO,IAAK,EAAG,OAAQ,CAAE,MAAO,GAAI,CAAE,CAC9F,CAEA,MAAM,mBAAmBkkB,EAAW,CAMhC,IAAMR,EAAS,KAAK,sBAAwB,MAAM,UAAU,aAAa,aAAa,CAClF,MAAO,KAAK,kBAAkB,EAC9B,MAAOQ,EAAY,KAAK,kBAAkB,EAAI,EAClD,CAAC,EACD,KAAK,iBAAmBR,EACxB,IAAM3C,EAAK,KAAK,eACVoD,EAAaT,EAAO,eAAe,EAAE,CAAC,GAAK,KAC3CU,EAAaV,EAAO,eAAe,EAAE,CAAC,GAAK,KACjD,OAAIS,IACI,KAAK,iBAAkB,MAAM,KAAK,iBAAiB,aAAaA,CAAU,EACzE,KAAK,iBAAmBpD,EAAG,SAASoD,EAAYT,CAAM,GAE3DU,IACI,KAAK,iBAAkB,MAAM,KAAK,iBAAiB,aAAaA,CAAU,EACzE,KAAK,iBAAmBrD,EAAG,SAASqD,EAAYV,CAAM,GAE/D,KAAK,qBAAqB,EACnBA,CACX,CAGA,4BAA6B,CACzB,GAAI,CACA,GAAI,KAAK,kBAAoB,CAAC,KAAK,oBAAoB,EACnD,QAAWE,KAAK,KAAK,iBAAiB,UAAU,EAAK,GAAI,CAAEA,EAAE,KAAK,CAAG,MAAY,CAAC,CAE1F,MAAY,CAAC,CACb,KAAK,iBAAmB,IAC5B,CAIA,sBAAuB,CACnB,GAAI,CACA,IAAMS,EAAM,KAAK,gBAAgB,kBAAkB,GAAK,CAAC,EACnDC,EAAUD,EAAI,KAAKT,GAAKA,EAAE,QAAUA,EAAE,SAAW,KAAK,gBAAgB,EACxEU,GAASC,GAA2BD,CAAO,EAC/C,IAAME,EAAUH,EAAI,KAAKT,GAAKA,EAAE,QAAUA,EAAE,SAAW,KAAK,gBAAgB,EACxEY,GAASC,GAA2BD,CAAO,CACnD,MAAY,CAAC,CACjB,CAKA,cAAc3jB,EAAK,CACf,GAAI,CACA,IAAIsT,EAAMuQ,GAAkB7jB,EAAK8jB,GAAa,QAAQ,EACtD,OAAAxQ,EAAMyQ,GAAezQ,EAAK0Q,EAAgB,EACnC1Q,CACX,MAAY,CAAE,OAAOtT,CAAK,CAC9B,CAKA,MAAM,gBAAgBiL,EAAM,CACxB,IAAMiV,EAAK,KAAK,eAChB,GAAI,CACA,MAAMA,EAAG,oBAAoB,CAAE,KAAMjV,EAAK,KAAM,IAAK,KAAK,cAAcA,EAAK,GAAG,CAAE,CAAC,EACnF,MACJ,MAAY,CACR,GAAI,CACA,MAAMiV,EAAG,oBAAoB,CAAE,KAAMjV,EAAK,KAAM,IAAK4Y,GAAkB5Y,EAAK,IAAK6Y,GAAa,QAAQ,CAAE,CAAC,EACzG,MACJ,MAAa,CACT,MAAM5D,EAAG,oBAAoBjV,CAAI,CACrC,CACJ,CACJ,CAIA,MAAM,wBAAyB,CAC3B,GAAI,CACI,KAAK,kBAAkB,MAAMgZ,GAAqB,KAAK,iBAAkB,CAAC,CAAC,EAC3E,KAAK,kBAAkB,MAAMC,GAAqB,KAAK,iBAAkB,CAAC,CAAC,CACnF,MAAY,CAAC,CACjB,CAIA,kBAAmB,CACf,GAAI,OAAK,uBAAyB,CAAC,KAAK,gBACxC,GAAI,CACA,KAAK,sBAAwB,IAAIC,GAA4B,KAAK,eAAgB,CAC9E,eAAgB,IAAM,KAAK,iBAC3B,eAAgB,KAChB,UAAYC,GAAM,CACVA,IAAM,KAAK,UAAU,SAAS,KAAK,iBAAiB,CAAE,QAASA,CAAE,CAAC,CAC1E,CACJ,CAAC,EACD,KAAK,sBAAsB,MAAM,CACrC,MAAY,CAAC,CACjB,CAEA,iBAAkB,CACd,GAAI,KAAK,sBAAuB,CAC5B,GAAI,CAAE,KAAK,sBAAsB,KAAK,CAAG,MAAY,CAAC,CACtD,KAAK,sBAAwB,IACjC,CACJ,CAMA,sBAAsBlnB,EAAOmnB,EAAW,CACpC,IAAMC,EAAOpnB,GAAO,MAAQ,GACtBqnB,EAAMF,EAAY,oBAAsB,aAC1CG,EAAKva,EACLqa,IAAS,mBACTra,EAAO,oBACPua,EAAM,wCAAyBD,CAAG,6IAAmIF,EAAY,oBAAsB,YAAY,qBAC5MC,IAAS,iBAAmBA,IAAS,wBAC5Cra,EAAO,mBACPua,EAAM,2CAA4BD,CAAG,0BAC9BD,IAAS,oBAAsBA,IAAS,cAC/Cra,EAAO,cACPua,EAAM,6CAA8BD,CAAG,uDAEvCta,EAAO,eACPua,EAAM,yDAA0CD,CAAG,GAAGD,EAAO,KAAOA,EAAO,IAAM,EAAE,KAEvF,GAAI,CAAE,KAAK,mBAAmBE,EAAK,QAAQ,CAAG,MAAY,CAAC,CAC3D,OAAOva,CACX,CAGA,MAAM,UAAUoZ,EAAY,GAAO,CAC/B,GAAI,CAAC,KAAK,cAAc,EACpB,WAAK,iBAAiB,CAAE,MAAO,cAAe,CAAC,EACzC,IAAI,MAAM,kDAAkD,EAEtE,GAAI,KAAK,UAAU,OAAQ,CACvB,KAAK,WAAW,OAAQ,gEAAiD,EACzE,MACJ,CACA,IAAMoB,EAAU,QAAQ,aAAa,GAAK,OAAO,KAAK,IAAI,CAAC,EAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,EACjG,KAAK,iBAAiB,CAClB,OAAQ,GAAM,MAAO,WAAY,UAAApB,EAAW,OAAAoB,EAC5C,WAAY,GAAM,cAAepB,EAAW,eAAgB,GAAO,MAAO,IAC9E,CAAC,EACD,GAAI,CACA,MAAM,KAAK,mBAAmBA,CAAS,EACvC,KAAK,iBAAmB,GACxB,IAAMnI,EAAQ,MAAM,KAAK,eAAe,YAAY,EACpD,MAAM,KAAK,gBAAgBA,CAAK,EAChC,KAAK,iBAAmB,GACxB,MAAM,KAAK,uBAAuB,EAClC,MAAM,KAAK,gBAAgBze,EAA4B,cAAc,WAAY,CAC7E,OAAAgoB,EAAQ,UAAApB,EAAW,IAAK,KAAK,eAAe,iBAAiB,GACjE,CAAC,CACL,OAASnmB,EAAO,CACZ,KAAK,iBAAmB,GACxB,KAAK,WAAW,QAAS,0BAAsB,CAAE,UAAWA,GAAO,aAAa,IAAK,CAAC,EACtF,IAAM+M,EAAO,KAAK,sBAAsB/M,EAAOmmB,CAAS,EACxD,YAAM,KAAK,mBAAmB,EAC9B,KAAK,iBAAiB,CAAE,OAAQ,GAAO,MAAO,OAAQ,MAAOpZ,CAAK,CAAC,EAC7D/M,CACV,CACJ,CAGA,MAAM,qBAAqBiC,EAAM,CAG7B,GAAI,KAAK,UAAU,SAAW,KAAK,UAAU,QAAU,UAAY,KAAK,UAAU,QAAU,cAAe,CACvG,MAAM,KAAK,iBAAiBA,EAA0B,EAAI,EACtDA,EAAK,WAAW,KAAK,iBAAiB,CAAE,UAAW,EAAK,CAAC,EAC7D,MACJ,CACA,KAAK,kBAAoBA,EACzB,KAAK,iBAAiB,CAClB,OAAQ,GAAM,MAAO,WAAY,UAAW,CAAC,CAACA,EAAK,UACnD,OAAQA,EAAK,OAAQ,eAAgB,CAAC,CAACA,EAAK,UAAW,MAAO,IAClE,CAAC,EAIG,KAAK,mBACL,MAAM,KAAK,WAAW,CAE9B,CAEA,MAAM,iBAAiBA,EAAMulB,EAAgB,GAAO,CAChD,MAAM,KAAK,eAAe,qBAAqB,CAAE,KAAM,QAAS,IAAKvlB,EAAK,GAAI,CAAC,EAQ1EulB,GACD,MAAM,KAAK,mBAAmB,CAAC,CAACvlB,EAAK,SAAS,EAElD,IAAM8d,EAAS,MAAM,KAAK,eAAe,aAAa,EACtD,MAAM,KAAK,gBAAgBA,CAAM,EACjC,MAAM,KAAK,uBAAuB,EAClC,MAAM,KAAK,gBAAgBxgB,EAA4B,cAAc,YAAa,CAC9E,OAAQ0C,EAAK,OAAQ,IAAK,KAAK,eAAe,iBAAiB,GACnE,CAAC,CACL,CAGA,MAAM,YAAa,CACf,IAAMA,EAAO,KAAK,kBAClB,GAAKA,EACL,MAAK,kBAAoB,KACzB,KAAK,iBAAiB,CAAE,MAAO,aAAc,cAAe,CAAC,CAACA,EAAK,SAAU,CAAC,EAC9E,GAAI,CACA,MAAM,KAAK,iBAAiBA,EAAM,EAAK,EACvC,KAAK,iBAAiB,CAAE,MAAO,QAAS,CAAC,EACzC,KAAK,uBAAuB,CAChC,OAASjC,EAAO,CACZ,KAAK,WAAW,QAAS,2BAAuB,CAAE,UAAWA,GAAO,aAAa,IAAK,CAAC,EACvF,IAAM+M,EAAO,KAAK,sBAAsB/M,EAAO,CAAC,CAACiC,EAAK,SAAS,EAE/D,GAAI,CAAE,MAAM,KAAK,gBAAgB1C,EAA4B,cAAc,SAAU,CAAE,OAAQ0C,EAAK,MAAO,CAAC,CAAG,MAAY,CAAC,CAC5H,MAAM,KAAK,mBAAmB,EAC9B,KAAK,iBAAiB,CAAE,OAAQ,GAAO,MAAO,OAAQ,MAAO8K,CAAK,CAAC,CACvE,EACJ,CAGA,MAAM,aAAc,CAChB,IAAMwa,EAAS,KAAK,UAAU,OAC9B,KAAK,kBAAoB,KACzB,MAAM,KAAK,gBAAgBhoB,EAA4B,cAAc,aAAc,CAAE,OAAAgoB,CAAO,CAAC,EAC7F,KAAK,iBAAiB,CAAE,OAAQ,GAAO,MAAO,OAAQ,UAAW,GAAO,eAAgB,EAAM,CAAC,CACnG,CAGA,MAAM,QAAQE,EAAa,GAAM,CAC7B,IAAMF,EAAS,KAAK,UAAU,OAC9B,GAAIE,GAAcF,EACd,GAAI,CAAE,MAAM,KAAK,gBAAgBhoB,EAA4B,cAAc,SAAU,CAAE,OAAAgoB,CAAO,CAAC,CAAG,MAAY,CAAC,CAEnH,MAAM,KAAK,mBAAmB,EAC9B,KAAK,iBAAiB,CAClB,OAAQ,GAAO,MAAO,OAAQ,UAAW,GAAO,WAAY,GAC5D,cAAe,GAAO,eAAgB,GAAO,OAAQ,KAAM,QAAS,IACxE,CAAC,CACL,CAEA,MAAM,oBAAqB,CACvB,KAAK,gBAAgB,EACrB,IAAMvE,EAAK,KAAK,eAChB,GAAI,CAKA,GAAI,KAAK,kBAAoB,CAAC,KAAK,oBAAoB,EACnD,QAAW0E,KAAS,KAAK,iBAAiB,UAAU,EAAK,GAAI,CAAEA,EAAM,KAAK,CAAG,MAAY,CAAC,CAO9F,GAAI1E,EACA,QAAW2E,IAAU,CAAC,KAAK,iBAAkB,KAAK,gBAAgB,EAAE,OAAO,OAAO,EAC9E,GAAI,CAAE,MAAMA,EAAO,aAAa,IAAI,CAAG,MAAY,CAAC,CAGhE,MAAY,CAAC,CACb,KAAK,iBAAmB,KACxB,KAAK,kBAAoB,KAGzB,KAAK,iBAAmB,GAIxB,GAAI,CACI,KAAK,iBACJ,KAAK,eAAe,iBAAmB,oBACvC,KAAK,eAAe,iBAAmB,wBACxC,MAAM,KAAK,eAAe,oBAAoB,CAAE,KAAM,UAAW,CAAC,CAE1E,MAAY,CAAC,CAKjB,CAGA,cAAc1P,EAAS,CACf,KAAK,kBACL,KAAK,iBAAiB,eAAe,EAAE,QAAQ,GAAK,CAAE,EAAE,QAAUA,CAAS,CAAC,EAEhF,KAAK,iBAAiB,CAAE,WAAYA,CAAQ,CAAC,CACjD,CAEA,WAAY,CAAE,KAAK,cAAc,CAAC,KAAK,UAAU,UAAU,CAAG,CAI9D,MAAM,iBAAiBA,EAAS,CAC5B,GAAI,CAACA,EAAS,CACN,KAAK,kBACL,KAAK,iBAAiB,eAAe,EAAE,QAAQ4N,GAAK,CAAEA,EAAE,QAAU,EAAO,CAAC,EAE9E,KAAK,iBAAiB,CAAE,cAAe,EAAM,CAAC,EAC9C,MACJ,CAEA,IAAM+B,EAAW,KAAK,kBAAkB,iBAAiB,GAAK,CAAC,EAC/D,GAAIA,EAAS,OAAQ,CACjBA,EAAS,QAAQ/B,GAAK,CAAEA,EAAE,QAAU,EAAM,CAAC,EAC3C,KAAK,iBAAiB,CAAE,cAAe,GAAM,UAAW,EAAK,CAAC,EAC9D,MACJ,CACA,MAAM,KAAK,eAAe,CAC9B,CAEA,MAAM,cAAe,CAAE,MAAM,KAAK,iBAAiB,CAAC,KAAK,UAAU,aAAa,CAAG,CAGnF,MAAM,gBAAiB,CACnB,GAAK,KAAK,iBACV,GAAI,CAGA,IAAMQ,GADY,MAAM,UAAU,aAAa,aAAa,CAAE,MAAO,KAAK,kBAAkB,CAAE,CAAC,GAClE,eAAe,EAAE,CAAC,EAC/C,GAAI,CAACA,EAAY,OACjB,MAAM,KAAK,cAAcA,CAAU,CACvC,OAASrmB,EAAO,CACZ,KAAK,WAAW,QAAS,+BAA2B,CAAE,UAAWA,GAAO,aAAa,IAAK,CAAC,EAC3F,KAAK,iBAAiB,CAAE,cAAe,GAAO,MAAO,eAAgB,CAAC,CAC1E,CACJ,CAWA,MAAM,cAAcqmB,EAAY,CACxB,CAACA,GAAc,CAAC,KAAK,kBAAoB,CAAC,KAAK,iBAC9C,KAAK,iBAAiB,eAAe,EAAE,SAASA,CAAU,GAC3D,KAAK,iBAAiB,SAASA,CAAU,EAEzC,KAAK,iBAAkB,MAAM,KAAK,iBAAiB,aAAaA,CAAU,EACzE,KAAK,iBAAmB,KAAK,eAAe,SAASA,EAAY,KAAK,gBAAgB,EAC3F,KAAK,qBAAqB,EAC1B,KAAK,iBAAiB,CAAE,cAAe,GAAM,UAAW,EAAK,CAAC,EAC9D,MAAM,KAAK,iBAAiB,EAChC,CAUA,MAAM,kBAAkBA,EAAY,CAC5B,CAACA,GAAc,CAAC,KAAK,kBACzB,MAAM,KAAK,iBAAiB,aAAaA,CAAU,CACvD,CAGA,MAAM,cAAe,CACjB,GAAI,GAAC,KAAK,kBAAoB,CAAC,KAAK,kBACpC,MAAK,gBAAkB,KAAK,kBAAoB,OAAS,cAAgB,OACzE,GAAI,CAIA,IAAMwB,GAHY,MAAM,UAAU,aAAa,aAAa,CACxD,MAAO,CAAE,WAAY,KAAK,eAAgB,CAC9C,CAAC,GAC0B,eAAe,EAAE,CAAC,EACvCC,EAAM,KAAK,iBAAiB,eAAe,EAAE,CAAC,EACpD,GAAIA,EAAK,CAAE,KAAK,iBAAiB,YAAYA,CAAG,EAAG,GAAI,CAAEA,EAAI,KAAK,CAAG,MAAY,CAAC,CAAE,CACpF,KAAK,iBAAiB,SAASD,CAAQ,EACvC,MAAM,KAAK,iBAAiB,aAAaA,CAAQ,CACrD,OAAS7nB,EAAO,CACZ,KAAK,WAAW,OAAQ,mCAA0B,CAAE,UAAWA,GAAO,aAAa,IAAK,CAAC,CAC7F,EACJ,CAEA,MAAM,kBAAmB,CACrB,GAAI,MAAK,iBACT,GAAI,CACA,KAAK,iBAAmB,GACxB,IAAMge,EAAQ,MAAM,KAAK,eAAe,YAAY,EACpD,MAAM,KAAK,gBAAgBA,CAAK,EAChC,MAAM,KAAK,uBAAuB,EAClC,MAAM,KAAK,gBAAgBze,EAA4B,cAAc,WAAY,CAC7E,OAAQ,KAAK,UAAU,OAAQ,UAAW,KAAK,UAAU,UACzD,IAAK,KAAK,eAAe,iBAAiB,GAC9C,CAAC,CACL,QAAE,CACE,KAAK,iBAAmB,EAC5B,CACJ,CAGA,MAAM,kBAAkByC,EAAMC,EAAM,CAChC,IAAMiM,EAAI3O,EAA4B,cACtC,OAAQyC,EAAM,CACV,KAAKkM,EAAE,WAAY,CACf,MAAM,KAAK,qBAAqBjM,CAAI,EACpC,MACJ,CACA,KAAKiM,EAAE,YAAa,CAChB,GAAI,CACI,KAAK,eAAe,iBAAmB,oBACvC,MAAM,KAAK,eAAe,qBAAqB,CAAE,KAAM,SAAU,IAAKjM,EAAK,GAAI,CAAC,EAEhF,KAAK,UAAU,QAAU,YAAY,KAAK,iBAAiB,CAAE,MAAO,QAAS,CAAC,EAClF,KAAK,uBAAuB,CAChC,OAASF,EAAG,CACR,KAAK,WAAW,OAAQ,2CAAkC,CAAE,UAAWA,GAAG,aAAa,IAAK,CAAC,CACjG,CACA,MACJ,CACA,KAAKmM,EAAE,SAAU,CACb,GAAI,CAAMjM,EAAK,WAAW,MAAM,KAAK,eAAe,gBAAgBA,EAAK,SAAS,CAAG,MAAY,CAAC,CAClG,MACJ,CACA,KAAKiM,EAAE,aAAc,CACjB,MAAM,KAAK,mBAAmB,EAC9B,KAAK,iBAAiB,CAAE,OAAQ,GAAO,MAAO,OAAQ,UAAW,GAAO,eAAgB,GAAO,MAAO,UAAW,CAAC,EAClH,MACJ,CACA,KAAKA,EAAE,SAAU,CACb,MAAM,KAAK,QAAyB,EAAK,EACzC,MACJ,CACA,QAAS,MACb,CACJ,CACJ,EAEMvI,GAAN,KAAuB,CACnB,YAAYoiB,EAAmB,KAAM,CAEjC,KAAK,UAAY,IAAI,QACrB,KAAK,aAAe,IAAI,IACxB,KAAK,eAAiB,IAAI,IAG1B,KAAK,kBAAoBA,GAAoB,IAAIriB,GAGjD,KAAK,mBAAqB,IAAIsiB,GAA2B,KAAK,iBAAiB,EAG/E,KAAK,yBAAyB,EAE9B,WAAW,IAAM,CACR,KAAK,yBAAyB,GAC/B,KAAK,WAAW,QAAS,8CAA8C,CAE/E,EAAG,GAAG,CAEV,CASA,WAAWhhB,EAAOhD,EAASxD,EAAU,CAAC,EAAG,CACrC,GAAI,CACA,IAAMynB,EAAU,OAAO,OAAW,KAAe,OAAO,2BAA2B,WAAc,KACjG,GAAIA,GAAU,OAAOA,EAAO,KAAQ,WAAY,CAC5CA,EAAO,IAAIjhB,EAAO,gBAAgBhD,CAAO,GAAIxD,CAAO,EACpD,MACJ,CACJ,MAAY,CAAgC,CAExCwG,IAAU,QAAS,QAAQ,MAAM,gBAAgBhD,CAAO,EAAE,EACrDgD,IAAU,QAAQ,QAAQ,KAAK,gBAAgBhD,CAAO,EAAE,CACrE,CAKA,0BAA2B,CAQvB,KAAK,kBAAkB,4BAA4B,CAACkkB,EAAStiB,IAAa,CACtE,KAAK,WAAW,QAAS,gEAAiE,CACtF,QAAS,CAAC,CAACsiB,CACf,CAAC,EACDtiB,EAAS,IAAI,CACjB,CAAC,EAED,KAAK,kBAAkB,0BAA2BkE,GAAW,CACzD,QAAQ,KAAK,+BAA+BA,CAAM,EAAE,CAExD,CAAC,EAED,KAAK,kBAAkB,oBAAoB,IAAM,CAC7C,QAAQ,IAAI,kCAAkC,CAClD,CAAC,CACL,CAKA,oBAAoBlE,EAAU,CAC1B,KAAK,kBAAkB,4BAA4BA,CAAQ,CAC/D,CAKA,0BAA0BA,EAAU,CAChC,KAAK,kBAAkB,0BAA0BA,CAAQ,CAC7D,CAKA,MAAM,0BAA2B,CACxB,KAAK,kBAAkB,WAAW,GACnC,MAAM,KAAK,kBAAkB,OAAO,CAE5C,CAEA,MAAM,SAASG,EAAOoiB,EAAWlL,EAAW,CAAC,EAAG,CAC5C,GAAI,EAAEkL,aAAqB,WACvB,MAAM,IAAI,MAAM,sCAAsC,EAG1D,GAAI,CAEA,OAAKA,EAAU,aAcf,MAAM,KAAK,mBAAmB,oBAAoBpiB,EAAOoiB,EAAWlL,CAAQ,EAG5E,KAAK,eAAe,IAAIlX,EAAOoiB,CAAS,EACxC,KAAK,aAAa,IAAIpiB,EAAO,CACzB,GAAGkX,EACH,QAAS,KAAK,IAAI,EAClB,aAAc,KAAK,IAAI,EACvB,YAAa,GACb,WAAY,GACZ,UAAW,EACf,CAAC,EAEM,KA1BH,KAAK,eAAe,IAAIlX,EAAOoiB,CAAS,EACxC,KAAK,aAAa,IAAIpiB,EAAO,CACzB,GAAGkX,EACH,QAAS,KAAK,IAAI,EAClB,aAAc,KAAK,IAAI,EACvB,YAAa,GACb,WAAY,GACZ,UAAW,EACf,CAAC,EACM,GAmBf,OAASjd,EAAO,CACZ,YAAK,WAAW,QAAS,+BAAgC,CACrD,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,EACX,CACJ,CAEA,MAAM,YAAY+F,EAAO,CACrB,GAAI,CAEA,GAAI,KAAK,eAAe,IAAIA,CAAK,EAAG,CAChC,IAAMkX,EAAW,KAAK,aAAa,IAAIlX,CAAK,EAC5C,OAAIkX,IACAA,EAAS,aAAe,KAAK,IAAI,GAE9B,KAAK,eAAe,IAAIlX,CAAK,CACxC,CAGA,IAAMqiB,EAAc,MAAM,KAAK,mBAAmB,YAAYriB,CAAK,EACnE,GAAIqiB,EAAa,CAEb,KAAK,eAAe,IAAIriB,EAAOqiB,CAAW,EAG1C,IAAMC,EAAmB,KAAK,aAAa,IAAItiB,CAAK,EACpD,YAAK,aAAa,IAAIA,EAAO,CACzB,GAAGsiB,EACH,aAAc,KAAK,IAAI,EACvB,uBAAwB,EAC5B,CAAC,EAEMD,CACX,CAEA,OAAO,IAEX,OAASpoB,EAAO,CACZ,YAAK,WAAW,QAAS,yBAA0B,CAC/C,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,IACX,CACJ,CAEA,MAAM,gBAAgBuP,EAAS,CAC3B,IAAM+Y,EAAgB,OAAO/Y,GAAY,SACnC,KAAK,UAAUA,CAAO,EACtBA,EAGAtN,EADU,IAAI,YAAY,EACX,OAAOqmB,CAAa,EAEzC,MAAM,KAAK,yBAAyB,EACpC,GAAM,CAAE,cAAArW,EAAe,GAAAD,CAAG,EAAI,MAAM,KAAK,kBAAkB,aAAa/P,CAAI,EAEtE8N,EAAS,IAAI,WAAWiC,EAAG,OAASC,EAAc,UAAU,EAClE,OAAAlC,EAAO,IAAIiC,EAAI,CAAC,EAChBjC,EAAO,IAAIkC,EAAeD,EAAG,MAAM,EAC5BjC,CACX,CAEA,MAAM,gBAAgBkC,EAAe,CACjC,IAAMD,EAAKC,EAAc,MAAM,EAAG,EAAE,EAC9BhQ,EAAOgQ,EAAc,MAAM,EAAE,EAEnC,MAAM,KAAK,yBAAyB,EACpC,IAAM4E,EAAgB,MAAM,KAAK,kBAAkB,aAAa5U,EAAM+P,CAAE,EAGlE3M,EADU,IAAI,YAAY,EACL,OAAOwR,CAAa,EAE/C,GAAI,CACA,OAAO,KAAK,MAAMxR,CAAU,CAChC,MAAQ,CACJ,OAAOwR,CACX,CACJ,CAEA,MAAM,WAAW9Q,EAAO,CACpB,IAAMoiB,EAAY,KAAK,eAAe,IAAIpiB,CAAK,EAE3CoiB,IAEA,KAAK,UAAU,OAAOA,CAAS,EAE/B,KAAK,eAAe,OAAOpiB,CAAK,EAEhC,KAAK,aAAa,OAAOA,CAAK,GAIlC,MAAM,KAAK,uBAAuB,CACtC,CAEA,MAAM,eAAgB,CAElB,GAAI,CACA,MAAM,KAAK,mBAAmB,SAAS,CAC3C,OAAS/F,EAAO,CACZ,KAAK,WAAW,QAAS,qCAAsC,CAC3D,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,CACL,CAGA,KAAK,eAAe,MAAM,EAC1B,KAAK,aAAa,MAAM,EAGxB,KAAK,UAAY,IAAI,QAGrB,MAAM,KAAK,uBAAuB,CACtC,CAGA,0BAA2B,CACvB,IAAMwE,EAAa,CAAC,EAEpB,OAAW,CAACuB,EAAOkX,CAAQ,IAAK,KAAK,aAAa,QAAQ,EAElDA,EAAS,cAAgB,IAAQA,EAAS,YAAc,IACxDzY,EAAW,KAAK,CACZ,MAAAuB,EACA,KAAM,gCACN,SAAAkX,CACJ,CAAC,EAIDA,EAAS,cAAgB,IAASA,EAAS,YAAc,IACzDzY,EAAW,KAAK,CACZ,MAAAuB,EACA,KAAM,gCACN,SAAAkX,CACJ,CAAC,EAIT,OAAIzY,EAAW,OAAS,GACpB,KAAK,WAAW,QAAS,wCAAyC,CAC9D,eAAgBA,EAAW,MAC/B,CAAC,EACM,IAGJ,EACX,CAEA,MAAM,iBAAkB,CACpB,IAAM+jB,EAAkB,MAAM,KAAK,mBAAmB,gBAAgB,EAEtE,MAAO,CACH,UAAW,KAAK,eAAe,KAC/B,WAAY,KAAK,eAAe,KAChC,eAAgBA,EAAgB,eAChC,SAAU,MAAM,KAAK,KAAK,aAAa,QAAQ,CAAC,EAAE,IAAI,CAAC,CAACC,EAAIlX,CAAI,KAAO,CACnE,GAAAkX,EACA,QAASlX,EAAK,QACd,aAAcA,EAAK,aACnB,IAAK,KAAK,IAAI,EAAIA,EAAK,QACvB,WAAYA,EAAK,YAAc,EACnC,EAAE,EACF,WAAYiX,CAChB,CACJ,CAKA,MAAM,aAAc,CAChB,GAAI,CACA,IAAME,EAAa,MAAM,KAAK,KAAK,aAAa,QAAQ,CAAC,EAAE,IAAI,CAAC,CAAC1iB,EAAOkX,CAAQ,KAAO,CACnF,MAAAlX,EACA,GAAGkX,EACH,SAAU,QACd,EAAE,EAGIyL,GADiB,MAAM,KAAK,mBAAmB,eAAe,GACrB,IAAIvjB,IAAQ,CACvD,GAAGA,EACH,SAAU,YACd,EAAE,EAEF,MAAO,CACH,WAAAsjB,EACA,eAAgBC,EAChB,WAAYD,EAAW,OAASC,EAAwB,MAC5D,CAEJ,OAAS1oB,EAAO,CACZ,YAAK,WAAW,QAAS,sBAAuB,CAC5C,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,CACH,WAAY,CAAC,EACb,eAAgB,CAAC,EACjB,WAAY,EACZ,MAAOA,EAAM,OACjB,CACJ,CACJ,CAKA,MAAM,UAAU+F,EAAO,CACnB,GAAI,CAEA,YAAK,eAAe,OAAOA,CAAK,EAChC,KAAK,aAAa,OAAOA,CAAK,EAG9B,MAAM,KAAK,mBAAmB,UAAUA,CAAK,EAEtC,EAEX,OAAS/F,EAAO,CACZ,YAAK,WAAW,QAAS,uBAAwB,CAC7C,UAAWA,GAAO,aAAa,MAAQ,SAC3C,CAAC,EACM,EACX,CACJ,CAEJ,EAMM2oB,GAAN,KAA6B,CACzB,YAAYC,EAAS,mBAAoBvZ,EAAU,EAAG,CAClD,KAAK,OAASuZ,EACd,KAAK,QAAUvZ,EACf,KAAK,GAAK,KAGV,KAAK,WAAa,iBAClB,KAAK,eAAiB,eACtB,KAAK,WAAa,aACtB,CAKA,MAAM,YAAa,CACf,OAAO,IAAI,QAAQ,CAACtO,EAASW,IAAW,CACpC,IAAMmnB,EAAU,UAAU,KAAK,KAAK,OAAQ,KAAK,OAAO,EAExDA,EAAQ,QAAU,IAAM,CACpBnnB,EAAO,IAAI,MAAM,6BAA6BmnB,EAAQ,KAAK,EAAE,CAAC,CAClE,EAEAA,EAAQ,UAAY,IAAM,CACtB,KAAK,GAAKA,EAAQ,OAClB9nB,EAAQ,CACZ,EAEA8nB,EAAQ,gBAAmBhc,GAAU,CACjC,IAAMic,EAAKjc,EAAM,OAAO,OAGxB,GAAI,CAACic,EAAG,iBAAiB,SAAS,KAAK,UAAU,EAAG,CAChD,IAAMC,EAAYD,EAAG,kBAAkB,KAAK,WAAY,CAAE,QAAS,OAAQ,CAAC,EAC5EC,EAAU,YAAY,YAAa,YAAa,CAAE,OAAQ,EAAM,CAAC,EACjEA,EAAU,YAAY,YAAa,YAAa,CAAE,OAAQ,EAAM,CAAC,CACrE,CAGA,GAAI,CAACD,EAAG,iBAAiB,SAAS,KAAK,cAAc,EAAG,CACpD,IAAME,EAAgBF,EAAG,kBAAkB,KAAK,eAAgB,CAAE,QAAS,OAAQ,CAAC,EACpFE,EAAc,YAAY,UAAW,UAAW,CAAE,OAAQ,EAAM,CAAC,EACjEA,EAAc,YAAY,eAAgB,eAAgB,CAAE,OAAQ,EAAM,CAAC,CAC/E,CAGKF,EAAG,iBAAiB,SAAS,KAAK,UAAU,GAC7CA,EAAG,kBAAkB,KAAK,WAAY,CAAE,QAAS,IAAK,CAAC,CAE/D,CACJ,CAAC,CACL,CAKA,MAAM,kBAAkB/iB,EAAOkM,EAAeD,EAAIiX,EAAWC,EAAQlnB,EAAMib,EAAW,CAAC,EAAG,CACtF,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAG9C,IAAMkM,EAAc,KAAK,GAAG,YAAY,CAAC,KAAK,WAAY,KAAK,cAAc,EAAG,WAAW,EAErFC,EAAY,CACd,MAAOrjB,EACP,cAAe,MAAM,KAAK,IAAI,WAAWkM,CAAa,CAAC,EACvD,GAAI,MAAM,KAAK,IAAI,WAAWD,CAAE,CAAC,EACjC,UAAWiX,EACX,OAAQC,EACR,KAAMlnB,CACV,EAEMqnB,EAAiB,CAAE,MAAAtjB,EAAO,GAAGkX,CAAS,EAE5C,OAAO,IAAI,QAAQ,CAAClc,EAASW,IAAW,CACpC,IAAM4nB,EAAcH,EAAY,YAAY,KAAK,UAAU,EAAE,IAAIC,CAAS,EACpEG,EAAkBJ,EAAY,YAAY,KAAK,cAAc,EAAE,IAAIE,CAAc,EAEvFF,EAAY,WAAa,IAAMpoB,EAAQ,EACvCooB,EAAY,QAAU,IAAMznB,EAAO,IAAI,MAAM,wBAAwBynB,EAAY,KAAK,EAAE,CAAC,CAC7F,CAAC,CACL,CAKA,MAAM,gBAAgBpjB,EAAO,CACzB,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMyjB,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,UAAU,EAAG,UAAU,EAC3C,YAAY,KAAK,UAAU,EAErD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAIzjB,CAAK,EAE/B8iB,EAAQ,UAAY,IAAM,CACtB,IAAM9Y,EAAS8Y,EAAQ,OACnB9Y,IAEAA,EAAO,cAAgB,IAAI,WAAWA,EAAO,aAAa,EAC1DA,EAAO,GAAK,IAAI,WAAWA,EAAO,EAAE,GAExChP,EAAQgP,CAAM,CAClB,EAEA8Y,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,2BAA2BmnB,EAAQ,KAAK,EAAE,CAAC,CACxF,CAAC,CACL,CAKA,MAAM,kBAAkB9iB,EAAO8Y,EAAS,CACpC,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAM2K,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,cAAc,EAAG,WAAW,EAChD,YAAY,KAAK,cAAc,EAEzD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAM+nB,EAAaD,EAAM,IAAIzjB,CAAK,EAElC0jB,EAAW,UAAY,IAAM,CACzB,IAAMxM,EAAWwM,EAAW,OAC5B,GAAIxM,EAAU,CACV,OAAO,OAAOA,EAAU4B,CAAO,EAC/B,IAAM6K,EAAaF,EAAM,IAAIvM,CAAQ,EAErCyM,EAAW,UAAY,IAAM3oB,EAAQ,EACrC2oB,EAAW,QAAU,IAAMhoB,EAAO,IAAI,MAAM,8BAA8BgoB,EAAW,KAAK,EAAE,CAAC,CACjG,MACIhoB,EAAO,IAAI,MAAM,2BAA2BqE,CAAK,EAAE,CAAC,CAE5D,EAEA0jB,EAAW,QAAU,IAAM/nB,EAAO,IAAI,MAAM,2BAA2B+nB,EAAW,KAAK,EAAE,CAAC,CAC9F,CAAC,CACL,CAEA,MAAM,qBAAqB1jB,EAAO,CAC9B,GAAI,CAAC,KAAK,GAAI,MAAM,IAAI,MAAM,0BAA0B,EAExD,IAAMyjB,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,cAAc,EAAG,UAAU,EAC/C,YAAY,KAAK,cAAc,EACzD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAIzjB,CAAK,EAC/B8iB,EAAQ,UAAY,IAAM9nB,EAAQ8nB,EAAQ,QAAU,IAAI,EACxDA,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,2BAA2BmnB,EAAQ,KAAK,EAAE,CAAC,CACxF,CAAC,CACL,CAEA,MAAM,qBAAqBc,EAAQ,CAC/B,GAAI,CAAC,KAAK,GAAI,MAAM,IAAI,MAAM,0BAA0B,EAExD,IAAMH,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,cAAc,EAAG,WAAW,EAChD,YAAY,KAAK,cAAc,EACzD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAIG,CAAM,EAChCd,EAAQ,UAAY,IAAM9nB,EAAQ,EAClC8nB,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,6BAA6BmnB,EAAQ,KAAK,EAAE,CAAC,CAC1F,CAAC,CACL,CAKA,MAAM,UAAU9iB,EAAO,CACnB,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAG9C,IAAMojB,EAAc,KAAK,GAAG,YAAY,CAAC,KAAK,WAAY,KAAK,cAAc,EAAG,WAAW,EAE3F,OAAO,IAAI,QAAQ,CAACpoB,EAASW,IAAW,CACpC,IAAM4nB,EAAcH,EAAY,YAAY,KAAK,UAAU,EAAE,OAAOpjB,CAAK,EACnEwjB,EAAkBJ,EAAY,YAAY,KAAK,cAAc,EAAE,OAAOpjB,CAAK,EAEjFojB,EAAY,WAAa,IAAMpoB,EAAQ,EACvCooB,EAAY,QAAU,IAAMznB,EAAO,IAAI,MAAM,yBAAyBynB,EAAY,KAAK,EAAE,CAAC,CAC9F,CAAC,CACL,CAKA,MAAM,UAAW,CACb,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMK,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,cAAc,EAAG,UAAU,EAC/C,YAAY,KAAK,cAAc,EAEzD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,OAAO,EAE7BX,EAAQ,UAAY,IAAM9nB,EAAQ8nB,EAAQ,MAAM,EAChDA,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,wBAAwBmnB,EAAQ,KAAK,EAAE,CAAC,CACrF,CAAC,CACL,CAKA,MAAM,gBAAgBzc,EAAM,CACxB,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMod,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,UAAU,EAAG,WAAW,EAC5C,YAAY,KAAK,UAAU,EAE/CI,EAAa,CACf,GAAI,cACJ,KAAM,MAAM,KAAK,IAAI,WAAWxd,CAAI,CAAC,CACzC,EAEA,OAAO,IAAI,QAAQ,CAACrL,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAII,CAAU,EAEpCf,EAAQ,UAAY,IAAM9nB,EAAQ,EAClC8nB,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,yBAAyBmnB,EAAQ,KAAK,EAAE,CAAC,CACtF,CAAC,CACL,CAKA,MAAM,eAAgB,CAClB,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAI9C,IAAMW,EADc,KAAK,GAAG,YAAY,CAAC,KAAK,UAAU,EAAG,UAAU,EAC3C,YAAY,KAAK,UAAU,EAErD,OAAO,IAAI,QAAQ,CAACzoB,EAASW,IAAW,CACpC,IAAMmnB,EAAUW,EAAM,IAAI,aAAa,EAEvCX,EAAQ,UAAY,IAAM,CACtB,IAAM9Y,EAAS8Y,EAAQ,OAEnB9nB,EADAgP,EACQ,IAAI,WAAWA,EAAO,IAAI,EAE1B,IAF2B,CAI3C,EAEA8Y,EAAQ,QAAU,IAAMnnB,EAAO,IAAI,MAAM,4BAA4BmnB,EAAQ,KAAK,EAAE,CAAC,CACzF,CAAC,CACL,CAKA,MAAM,UAAW,CACb,GAAI,CAAC,KAAK,GACN,MAAM,IAAI,MAAM,0BAA0B,EAG9C,IAAMM,EAAc,KAAK,GAAG,YAAY,CAAC,KAAK,WAAY,KAAK,eAAgB,KAAK,UAAU,EAAG,WAAW,EAE5G,OAAO,IAAI,QAAQ,CAACpoB,EAASW,IAAW,CACpC,IAAM4nB,EAAcH,EAAY,YAAY,KAAK,UAAU,EAAE,MAAM,EAC7DI,EAAkBJ,EAAY,YAAY,KAAK,cAAc,EAAE,MAAM,EACrEU,EAAcV,EAAY,YAAY,KAAK,UAAU,EAAE,MAAM,EAEnEA,EAAY,WAAa,IAAMpoB,EAAQ,EACvCooB,EAAY,QAAU,IAAMznB,EAAO,IAAI,MAAM,6BAA6BynB,EAAY,KAAK,EAAE,CAAC,CAClG,CAAC,CACL,CAKA,OAAQ,CACA,KAAK,KACL,KAAK,GAAG,MAAM,EACd,KAAK,GAAK,KAElB,CACJ,EAMMnB,GAAN,KAAiC,CAC7B,YAAYD,EAAkB+B,EAAmB,KAAM,CACnD,KAAK,kBAAoB/B,EACzB,KAAK,WAAa+B,GAAoB,IAAInB,GAC1C,KAAK,eAAiB,GAGtB,KAAK,UAAY,IAAI,QACrB,KAAK,eAAiB,IAAI,GAC9B,CAKA,MAAM,sBAAuB,CACpB,KAAK,iBACN,MAAM,KAAK,WAAW,WAAW,EACjC,KAAK,eAAiB,GAE9B,CAEA,MAAM,0BAA2B,CACzB,OAAO,KAAK,kBAAkB,YAAe,YAAc,CAAC,KAAK,kBAAkB,WAAW,GAC9F,MAAM,KAAK,kBAAkB,OAAO,CAE5C,CAKA,MAAM,oBAAoB5iB,EAAOoiB,EAAWlL,EAAW,CAAC,EAAG,CACvD,GAAI,EAAEkL,aAAqB,WACvB,MAAM,IAAI,MAAM,sCAAsC,EAG1D,GAAI,CAACA,EAAU,YACX,MAAM,IAAI,MAAM,gDAAgD,EAGpE,GAAI,CACA,MAAM,KAAK,qBAAqB,EAGhC,IAAM4B,EAAU,MAAM,OAAO,OAAO,UAAU,MAAO5B,CAAS,EAGxD,CAAE,cAAAlW,EAAe,GAAAD,CAAG,EAAI,MAAM,KAAK,gBAAgB+X,CAAO,EAG1DC,EAAoB,MAAM,KAAK,iBAAiB,CAClD,GAAG/M,EACH,QAAS,KAAK,IAAI,EAClB,aAAc,KAAK,IAAI,EACvB,YAAa,GACb,WAAY,EAChB,CAAC,EAED,MAAM,KAAK,WAAW,kBAClBlX,EACAkM,EACAD,EACAmW,EAAU,UACVA,EAAU,OACVA,EAAU,KACV6B,CACJ,EAGA,IAAMC,EAAoB,MAAM,KAAK,wBAAwBF,EAAS5B,EAAU,UAAWA,EAAU,MAAM,EAC3G,YAAK,eAAe,IAAIpiB,EAAOkkB,CAAiB,EAEzC,EAEX,OAASjqB,EAAO,CACZ,MAAM,IAAI,MAAM,oCAAoCA,EAAM,OAAO,EAAE,CACvE,CACJ,CAKA,MAAM,YAAY+F,EAAO,CACrB,GAAI,CAEA,GAAI,KAAK,eAAe,IAAIA,CAAK,EAC7B,OAAO,KAAK,eAAe,IAAIA,CAAK,EAGxC,MAAM,KAAK,qBAAqB,EAGhC,IAAMqjB,EAAY,MAAM,KAAK,WAAW,gBAAgBrjB,CAAK,EAC7D,GAAI,CAACqjB,EACD,OAAO,KAIX,IAAMW,EAAU,MAAM,KAAK,gBAAgBX,EAAU,cAAeA,EAAU,EAAE,EAG1EhB,EAAc,MAAM,KAAK,wBAAwB2B,EAASX,EAAU,UAAWA,EAAU,MAAM,EAGrG,YAAK,eAAe,IAAIrjB,EAAOqiB,CAAW,EAG1C,MAAM,KAAK,yBAAyBriB,EAAO,CAAE,aAAc,KAAK,IAAI,CAAE,CAAC,EAEhEqiB,CAEX,OAASpoB,EAAO,CACZ,MAAM,IAAI,MAAM,2BAA2BA,EAAM,OAAO,EAAE,CAC9D,CACJ,CAKA,MAAM,UAAU+F,EAAO,CACnB,GAAI,CACA,aAAM,KAAK,qBAAqB,EAGhC,MAAM,KAAK,WAAW,UAAUA,CAAK,EAGrC,KAAK,eAAe,OAAOA,CAAK,EAEzB,EAEX,OAAS/F,EAAO,CACZ,MAAM,IAAI,MAAM,yBAAyBA,EAAM,OAAO,EAAE,CAC5D,CACJ,CAKA,MAAM,gBAAiB,CACnB,GAAI,CACA,MAAM,KAAK,qBAAqB,EAChC,IAAMkqB,EAAU,MAAM,KAAK,WAAW,SAAS,EACzC7oB,EAAU,CAAC,EACjB,QAAWsoB,KAAUO,EAAS,CAC1B,IAAMjN,EAAW,MAAM,KAAK,2BAA2B0M,CAAM,EACzD1M,GAAU5b,EAAQ,KAAK,CAAE,MAAOsoB,EAAO,MAAO,GAAG1M,CAAS,CAAC,CACnE,CACA,OAAO5b,CACX,OAASrB,EAAO,CACZ,MAAM,IAAI,MAAM,wBAAwBA,EAAM,OAAO,EAAE,CAC3D,CACJ,CAKA,MAAM,UAAW,CACb,GAAI,CACA,aAAM,KAAK,qBAAqB,EAGhC,MAAM,KAAK,WAAW,SAAS,EAG/B,KAAK,eAAe,MAAM,EAEnB,EAEX,OAASA,EAAO,CACZ,MAAM,IAAI,MAAM,4BAA4BA,EAAM,OAAO,EAAE,CAC/D,CACJ,CAKA,MAAM,gBAAgB+pB,EAAS,CAE3B,IAAM1kB,EAAa,KAAK,UAAU0kB,CAAO,EACnC9nB,EAAO,IAAI,YAAY,EAAE,OAAOoD,CAAU,EAEhD,aAAM,KAAK,yBAAyB,EAC7B,MAAM,KAAK,kBAAkB,aAAapD,CAAI,CACzD,CAKA,MAAM,gBAAgBgQ,EAAeD,EAAI,CACrC,MAAM,KAAK,yBAAyB,EACpC,IAAM6E,EAAgB,MAAM,KAAK,kBAAkB,aAAa5E,EAAeD,CAAE,EAG3E3M,EAAa,IAAI,YAAY,EAAE,OAAOwR,CAAa,EACzD,OAAO,KAAK,MAAMxR,CAAU,CAChC,CAEA,MAAM,iBAAiB4X,EAAU,CAC7B,IAAMhb,EAAO,IAAI,YAAY,EAAE,OAAO,KAAK,UAAUgb,CAAQ,CAAC,EAC9D,MAAM,KAAK,yBAAyB,EACpC,GAAM,CAAE,cAAAhL,EAAe,GAAAD,CAAG,EAAI,MAAM,KAAK,kBAAkB,aAAa/P,CAAI,EAC5E,MAAO,CACH,gBAAiB,EACjB,kBAAmB,MAAM,KAAKgQ,CAAa,EAC3C,WAAY,MAAM,KAAKD,CAAE,CAC7B,CACJ,CAEA,MAAM,uBAAuB2X,EAAQ,CACjC,GAAI,CAACA,GAAQ,mBAAqB,CAACA,GAAQ,WACvC,MAAM,IAAI,MAAM,4BAA4B,EAEhD,MAAM,KAAK,yBAAyB,EACpC,IAAMQ,EAAY,MAAM,KAAK,kBAAkB,aAC3C,IAAI,WAAWR,EAAO,iBAAiB,EACvC,IAAI,WAAWA,EAAO,UAAU,CACpC,EACA,OAAO,KAAK,MAAM,IAAI,YAAY,EAAE,OAAOQ,CAAS,CAAC,CACzD,CAEA,MAAM,2BAA2BR,EAAQ,CACrC,GAAI,CAACA,EAAQ,OAAO,KACpB,GAAIA,EAAO,kBACP,GAAI,CACA,OAAO,MAAM,KAAK,uBAAuBA,CAAM,CACnD,MAAgB,CAEZ,OAAO,IACX,CAIJ,GAAM,CAAE,MAAA5jB,EAAO,GAAGqkB,CAAe,EAAIT,EAC/BU,EAAkB,CAAE,MAAAtkB,EAAO,GAAI,MAAM,KAAK,iBAAiBqkB,CAAc,CAAG,EAClF,aAAM,KAAK,WAAW,qBAAqBC,CAAe,EACnDD,CACX,CAEA,MAAM,yBAAyBrkB,EAAO8Y,EAAS,CAC3C,IAAM8K,EAAS,MAAM,KAAK,WAAW,qBAAqB5jB,CAAK,EAC/D,GAAI,CAAC4jB,EAAQ,MAAM,IAAI,MAAM,2BAA2B5jB,CAAK,EAAE,EAC/D,IAAMukB,EAAU,MAAM,KAAK,2BAA2BX,CAAM,EAC5D,GAAI,CAACW,EAAS,MAAM,IAAI,MAAM,2BAA2BvkB,CAAK,EAAE,EAChE,MAAM,KAAK,WAAW,qBAAqB,CACvC,MAAAA,EACA,GAAI,MAAM,KAAK,iBAAiB,CAAE,GAAGukB,EAAS,GAAGzL,CAAQ,CAAC,CAC9D,CAAC,CACL,CAKA,MAAM,wBAAwBkL,EAASd,EAAWC,EAAQ,CACtD,OAAO,MAAM,OAAO,OAAO,UACvB,MACAa,EACAd,EACA,GACAC,CACJ,CACJ,CAKA,MAAM,iBAAkB,CACpB,GAAI,CACA,MAAM,KAAK,qBAAqB,EAChC,IAAMqB,EAAO,MAAM,KAAK,WAAW,SAAS,EAE5C,MAAO,CACH,UAAWA,EAAK,OAChB,WAAY,KAAK,eAAe,KAChC,eAAgBA,EAAK,OACrB,aAAcA,EAAK,OAAO,CAACC,EAAQrlB,IAC/B,KAAK,IAAIqlB,EAAQrlB,EAAI,cAAgB,CAAC,EAAG,CAAC,CAClD,CAEJ,OAASnF,EAAO,CACZ,MAAO,CACH,UAAW,EACX,WAAY,KAAK,eAAe,KAChC,eAAgB,EAChB,aAAc,EACd,MAAOA,EAAM,OACjB,CACJ,CACJ,CACJ,EAMM0F,GAAN,KAA6B,CACzB,YAAYokB,EAAmB,KAAM,CAEjC,KAAK,WAAa,KAClB,KAAK,YAAc,GACnB,KAAK,gBAAkB,KACvB,KAAK,cAAgB,KAGrB,KAAK,kBAAoB,KAAU,IACnC,KAAK,qBAAuB,KAAU,IAGtC,KAAK,kBAAoB,KACzB,KAAK,UAAY,GAGjB,KAAK,WAAaA,GAAoB,IAAInB,GAC1C,KAAK,eAAiB,GAGtB,KAAK,oBAAsB,KAC3B,KAAK,kBAAoB,KACzB,KAAK,YAAc,IAIvB,CAKA,4BAA4B/iB,EAAU,CAClC,KAAK,oBAAsBA,CAC/B,CAKA,0BAA0BA,EAAU,CAChC,KAAK,kBAAoBA,CAC7B,CAKA,oBAAoBA,EAAU,CAC1B,KAAK,YAAcA,CACvB,CAKA,sBAAuB,CAEf,OAAO,SAAa,MACpB,SAAS,iBAAiB,mBAAoB,IAAM,CAC5C,SAAS,OACT,KAAK,gBAAgB,EAErB,KAAK,eAAe,CAE5B,CAAC,EAGD,OAAO,iBAAiB,OAAQ,IAAM,KAAK,gBAAgB,CAAC,EAC5D,OAAO,iBAAiB,QAAS,IAAM,KAAK,eAAe,CAAC,EAG5D,CAAC,YAAa,YAAa,WAAY,SAAU,YAAY,EAAE,QAAQiH,GAAS,CAC5E,SAAS,iBAAiBA,EAAO,IAAM,KAAK,gBAAgB,EAAG,CAAE,QAAS,EAAK,CAAC,CACpF,CAAC,EAET,CAKA,iBAAkB,CACV,KAAK,aAEL,KAAK,sBAAsB,KAAK,oBAAoB,CAE5D,CAKA,gBAAiB,CACT,KAAK,aACL,KAAK,mBAAmB,CAEhC,CAKA,iBAAkB,CACd,KAAK,cAAgB,KAAK,IAAI,EAC1B,KAAK,aACL,KAAK,mBAAmB,CAEhC,CAKA,oBAAqB,CACjB,KAAK,aAAa,EAClB,KAAK,gBAAkB,WAAW,IAAM,CACpC,KAAK,eAAe,SAAS,CACjC,EAAG,KAAK,iBAAiB,CAC7B,CAKA,sBAAsB/K,EAAS,CAC3B,KAAK,aAAa,EAClB,KAAK,gBAAkB,WAAW,IAAM,CACpC,KAAK,eAAe,YAAY,CACpC,EAAGA,CAAO,CACd,CAKA,oBAAqB,CACb,KAAK,aACL,KAAK,mBAAmB,CAEhC,CAKA,cAAe,CACP,KAAK,kBACL,aAAa,KAAK,eAAe,EACjC,KAAK,gBAAkB,KAE/B,CAKA,eAAegI,EAAS,UAAW,CAC3B,KAAK,cACL,KAAK,qBAAqB,EAC1B,KAAK,YAAc,GAEf,KAAK,mBACL,KAAK,kBAAkBA,CAAM,EAGzC,CAKA,MAAM,sBAAuB,CACpB,KAAK,iBACN,MAAM,KAAK,WAAW,WAAW,EACjC,KAAK,eAAiB,GAE9B,CAKA,eAAgB,CACZ,OAAO,OAAO,gBAAgB,IAAI,WAAW,KAAK,SAAS,CAAC,CAChE,CAKA,MAAM,kBAAmB,CACrB,MAAM,KAAK,qBAAqB,EAGhC,IAAIsC,EAAO,MAAM,KAAK,WAAW,cAAc,EAE/C,OAAKA,IAEDA,EAAO,KAAK,cAAc,EAC1B,MAAM,KAAK,WAAW,gBAAgBA,CAAI,GAGvCA,CACX,CAKA,MAAM,uBAAuBqe,EAAUre,EAAM,CACzC,GAAI,CAEA,IAAMse,EAAc,MAAM,OAAO,OAAO,UACpC,MACA,IAAI,YAAY,EAAE,OAAOD,CAAQ,EACjC,SACA,GACA,CAAC,WAAW,CAChB,EAmBA,OAhBmB,MAAM,OAAO,OAAO,UACnC,CACI,KAAM,SACN,KAAMre,EACN,WAAY,KAAK,kBACjB,KAAM,SACV,EACAse,EACA,CACI,KAAM,UACN,OAAQ,GACZ,EACA,GACA,CAAC,UAAW,UAAW,UAAW,WAAW,CACjD,CAGJ,OAAS1qB,EAAO,CACZ,MAAM,IAAI,MAAM,0BAA0BA,EAAM,OAAO,EAAE,CAC7D,CACJ,CAKA,MAAM,iBAAiBkoB,EAAU,GAAO,CACpC,GAAI,CAAC,KAAK,oBACN,MAAM,IAAI,MAAM,2BAA2B,EAG/C,OAAO,IAAI,QAAQ,CAACnnB,EAASW,IAAW,CACpC,KAAK,oBAAoBwmB,EAAUuC,GAAa,CACxCA,EACA1pB,EAAQ0pB,CAAQ,EAEhB/oB,EAAO,IAAI,MAAM,uBAAuB,CAAC,CAEjD,CAAC,CACL,CAAC,CACL,CAKA,MAAM,OAAO+oB,EAAW,KAAM,CAC1B,GAAI,CAEKA,IACDA,EAAW,MAAM,KAAK,iBAAiB,EAAK,GAIhD,IAAMre,EAAO,MAAM,KAAK,iBAAiB,EAGzC,YAAK,WAAa,MAAM,KAAK,uBAAuBqe,EAAUre,CAAI,EAGlE,KAAK,YAAc,GACnB,KAAK,cAAgB,KAAK,IAAI,EAG9B,KAAK,mBAAmB,EAGxBqe,EAAW,KAEP,KAAK,aACL,KAAK,YAAY,EAGd,CAAE,QAAS,EAAK,CAE3B,OAASzqB,EAAO,CAEZ,MAAAyqB,EAAW,KACLzqB,CACV,CACJ,CAKA,MAAO,CACH,KAAK,eAAe,QAAQ,CAChC,CAMA,MAAM,aAAa2qB,EAAY,CAC3B,GAAI,CAAC,KAAK,aAAe,CAAC,KAAK,WAC3B,MAAM,IAAI,MAAM,sBAAsB,EAE1C,KAAK,gBAAgB,EACrB,IAAM3Y,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC9CF,EAAY,MAAM,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,GAAAE,CAAG,EAAG,KAAK,WAAY2Y,CAAU,EAClG,MAAO,CAAE,cAAe,IAAI,WAAW7Y,CAAS,EAAG,GAAAE,CAAG,CAC1D,CAEA,MAAM,aAAa4Y,EAAgB5Y,EAAI,CACnC,GAAI,CAAC,KAAK,aAAe,CAAC,KAAK,WAC3B,MAAM,IAAI,MAAM,sBAAsB,EAE1C,KAAK,gBAAgB,EACrB,IAAMmY,EAAY,MAAM,OAAO,OAAO,QAAQ,CAAE,KAAM,UAAW,GAAAnY,CAAG,EAAG,KAAK,WAAY4Y,CAAc,EACtG,OAAO,IAAI,WAAWT,CAAS,CACnC,CAKA,YAAa,CAIT,OAAO,KAAK,aAAe,KAAK,aAAe,IACnD,CAKA,kBAAmB,CACf,MAAO,CACH,WAAY,KAAK,YACjB,aAAc,KAAK,cACnB,iBAAkB,KAAK,kBACvB,oBAAqB,KAAK,oBAC9B,CACJ,CAKA,sBAAuB,CACf,KAAK,aAGL,KAAK,WAAa,MAEtB,KAAK,aAAa,CACtB,CAKA,SAAU,CACN,KAAK,qBAAqB,EAC1B,KAAK,YAAc,GAGf,OAAO,SAAa,MACpB,SAAS,oBAAoB,mBAAoB,KAAK,eAAe,EACrE,OAAO,oBAAoB,OAAQ,KAAK,eAAe,EACvD,OAAO,oBAAoB,QAAS,KAAK,cAAc,EAE/D,CACJ,ECluhBA,IAAAU,GAAwC,SCDtC,IAAAC,GAAW,SCeb,IAAMC,GAAmB,IAAM,CAC3B,GAAIC,GAAkB,OAAS,EAAG,OAAO,KAEzC,GAAM,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,EAAK,EACtCC,EAAU,MAAM,OAAO,IAAI,EAE3BC,EAAW,OAAO,OAAW,IAAc,OAAO,SAAS,SAAW,IACtEC,EAAQC,GAAc,CAAE,SAAAF,EAAU,OAAQG,GAAc,CAAE,CAAC,EAC3DC,EAASH,EAAM,KAAMI,GAAMA,EAAE,SAAS,GAAKJ,EAAM,CAAC,EAGxD,MAAM,UAAU,IAAM,CAClB,GAAI,CAACJ,EAAM,OACX,IAAMS,EAAUC,GAAM,CACdR,EAAQ,SAAW,CAACA,EAAQ,QAAQ,SAASQ,EAAE,MAAM,GAAGT,EAAQ,EAAK,CAC7E,EACMU,EAASD,GAAM,CAAMA,EAAE,MAAQ,UAAUT,EAAQ,EAAK,CAAG,EAC/D,gBAAS,iBAAiB,cAAeQ,CAAM,EAC/C,SAAS,iBAAiB,UAAWE,CAAK,EACnC,IAAM,CACT,SAAS,oBAAoB,cAAeF,CAAM,EAClD,SAAS,oBAAoB,UAAWE,CAAK,CACjD,CACJ,EAAG,CAACX,CAAI,CAAC,EAET,IAAMY,EAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,UACL,KAAM,SACN,QAAS,IAAMX,EAASY,GAAM,CAACA,CAAC,EAChC,gBAAiB,OACjB,gBAAiBb,EAAO,OAAS,QACjC,aAAcc,EAAE,gBAAgB,EAChC,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,MAC5C,QAAS,WAAY,aAAc,MACnC,OAAQ,sCACR,WAAYd,EAAO,4BAA8B,4BACjD,MAAO,mBAAoB,KAAM,UAAW,SAAU,SAAU,WAAY,IAC5E,OAAQ,UAAW,WAAY,6BACnC,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CAAE,IAAK,GAAI,EAAGO,EAASA,EAAO,KAAO,EAAE,EACnE,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAC7D,OAAQ,eAAgB,YAAa,IAAK,cAAe,QAAS,eAAgB,QAClF,MAAO,CAAE,UAAWP,EAAO,iBAAmB,OAAQ,WAAY,gBAAiB,EACnF,wBAAyB,CAAE,OAAQ,0BAA2B,CAClE,CAAC,CACL,CAAC,EAEKe,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,KAAM,OAGN,UAAW,YAGX,MAAO,CACH,SAAU,WAAY,IAAK,mBAAoB,eAAgB,EAAG,OAAQ,GAC1E,QAASf,EAAO,QAAU,OAC1B,SAAU,QAAS,QAAS,MAAO,aAAc,OACjD,OAAQ,sCAAuC,WAAY,oBAC3D,UAAW,0EAIX,UAAW,mBAAoB,UAAW,OAAQ,mBAAoB,SAC1E,CACJ,EAAGI,EAAM,IAAKY,GAAS,MAAM,cAAc,IAAK,CAC5C,IAAKA,EAAK,KACV,KAAMA,EAAK,KACX,SAAUA,EAAK,SACf,KAAMA,EAAK,SAGX,IAAKA,EAAK,IACV,KAAM,WAGN,eAAgBA,EAAK,UAAY,OAAS,OAG1C,QAAS,IAAMC,GAAeD,EAAK,IAAI,EACvC,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,OAC5C,QAAS,WAAY,aAAc,MACnC,SAAU,OACV,WAAYA,EAAK,UAAY,IAAM,IACnC,MAAOA,EAAK,UAAY,mBAAqB,mBAC7C,WAAYA,EAAK,UAAY,4BAA8B,cAC3D,eAAgB,OAAQ,WAAY,QACxC,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,IACL,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,QAAS,MAAO,mBAAoB,MAAO,OAAQ,KAAM,OAAQ,UAAW,OAAQ,CACnJ,EAAGA,EAAK,IAAI,EACZ,MAAM,cAAc,OAAQ,CAAE,IAAK,GAAI,EAAGA,EAAK,KAAK,CACxD,CAAC,CAAC,CAAC,EAEH,OAAO,MAAM,cAAc,MAAO,CAC9B,IAAKd,EACL,aAAcY,EAAE,gBAAgB,EAChC,MAAO,CAAE,SAAU,WAAY,QAAS,aAAc,CAC1D,EAAG,CAACF,EAASG,CAAI,CAAC,CACtB,EAEA,OAAO,iBAAmBjB,GCtG1B,IAAMoB,GAAO,CACT,OAAQ,qFACR,MAAO,oJACP,KAAM,uEACV,EAEMC,GAAM,CAACC,EAAMC,EAAMC,IAAU,MAAM,cAAc,MAAO,CAC1D,MAAOD,EAAM,OAAQA,EAAM,QAAS,YAAa,KAAM,OACvD,OAAQ,eAAgB,YAAaC,EAAO,cAAe,QAAS,eAAgB,QACpF,cAAe,OACf,wBAAyB,CAAE,OAAQF,CAAK,CAC5C,CAAC,EAEKG,GAAgB,IAAM,CACxB,IAAMC,EAAM,OAAO,OAAW,IAAc,OAAO,eAAiB,KAGpE,GAAI,CAACA,EAAK,OAAO,KAEjB,GAAM,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,EAAK,EACtC,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,IAAMJ,EAAI,IAAI,CAAC,EAChD,CAACK,EAAUC,CAAW,EAAI,MAAM,SAAS,IAAMN,EAAI,SAAS,CAAC,EAC7DO,EAAU,MAAM,OAAO,IAAI,EAIjC,MAAM,UAAU,IAAMP,EAAI,UAAU,CAACQ,EAAUC,IAAiB,CAC5DL,EAAQI,CAAQ,EAChBF,EAAYG,CAAY,CAC5B,CAAC,EAAG,CAAC,CAAC,EAEN,MAAM,UAAU,IAAM,CAClB,GAAI,CAACR,EAAM,OACX,IAAMS,EAAUC,GAAM,CACdJ,EAAQ,SAAW,CAACA,EAAQ,QAAQ,SAASI,EAAE,MAAM,GAAGT,EAAQ,EAAK,CAC7E,EACMU,EAASD,GAAM,CAAMA,EAAE,MAAQ,UAAUT,EAAQ,EAAK,CAAG,EAC/D,gBAAS,iBAAiB,cAAeQ,CAAM,EAC/C,SAAS,iBAAiB,UAAWE,CAAK,EACnC,IAAM,CACT,SAAS,oBAAoB,cAAeF,CAAM,EAClD,SAAS,oBAAoB,UAAWE,CAAK,CACjD,CACJ,EAAG,CAACX,CAAI,CAAC,EAET,IAAMY,EAAU,CACZ,CAAE,KAAM,SAAU,KAAMnB,GAAK,OAAQ,MAAOoB,EAAE,cAAc,CAAE,EAC9D,CAAE,KAAM,QAAS,KAAMpB,GAAK,MAAO,MAAOoB,EAAE,aAAa,CAAE,EAC3D,CAAE,KAAM,OAAQ,KAAMpB,GAAK,KAAM,MAAOoB,EAAE,YAAY,CAAE,CAC5D,EAKMC,EAAcZ,IAAS,SAAWT,GAAK,OAAUW,IAAa,QAAUX,GAAK,MAAQA,GAAK,KAC1FsB,EAAUH,EAAQ,KAAMI,GAAMA,EAAE,OAASd,CAAI,GAAKU,EAAQ,CAAC,EAE3DK,EAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,UACL,KAAM,SACN,QAAS,IAAMhB,EAASiB,GAAM,CAACA,CAAC,EAChC,gBAAiB,OACjB,gBAAiBlB,EAAO,OAAS,QACjC,aAAca,EAAE,aAAa,EAAI,KAAOE,EAAQ,MAChD,MAAOF,EAAE,aAAa,EACtB,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,MAC5C,QAAS,UAAW,aAAc,MAClC,OAAQ,sCACR,WAAYb,EAAO,4BAA8B,4BACjD,MAAO,mBAAoB,KAAM,UACjC,OAAQ,UAAW,WAAY,6BACnC,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,QAAS,CAAE,EAAGN,GAAIoB,EAAa,GAAI,GAAG,CAAC,EACrH,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAC7D,OAAQ,eAAgB,YAAa,IAAK,cAAe,QAAS,eAAgB,QAClF,MAAO,CAAE,UAAWd,EAAO,iBAAmB,OAAQ,WAAY,gBAAiB,EACnF,wBAAyB,CAAE,OAAQ,0BAA2B,CAClE,CAAC,CACL,CAAC,EAEKmB,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,KAAM,OACN,MAAO,CACH,SAAU,WAAY,IAAK,mBAAoB,eAAgB,EAAG,OAAQ,GAC1E,QAASnB,EAAO,QAAU,OAC1B,SAAU,QAAS,QAAS,MAAO,aAAc,OACjD,OAAQ,sCAAuC,WAAY,oBAC3D,UAAW,yEACf,CACJ,EAAGY,EAAQ,IAAKQ,GAAW,CACvB,IAAMC,EAASD,EAAO,OAASlB,EAC/B,OAAO,MAAM,cAAc,SAAU,CACjC,IAAKkB,EAAO,KACZ,KAAM,SACN,KAAM,gBACN,eAAgBC,EAAS,OAAS,QAClC,QAAS,IAAM,CAAEtB,EAAI,IAAIqB,EAAO,IAAI,EAAGnB,EAAQ,EAAK,CAAG,EACvD,MAAO,CACH,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAC3D,QAAS,WAAY,aAAc,MAAO,OAAQ,OAClD,SAAU,OAAQ,WAAY,UAC9B,WAAYoB,EAAS,IAAM,IAC3B,MAAOA,EAAS,mBAAqB,mBACrC,WAAYA,EAAS,4BAA8B,cACnD,OAAQ,UAAW,UAAW,QAAS,WAAY,QACvD,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,IACL,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,MAAO,OAAQ,MAAOA,EAAS,mBAAqB,kBAAmB,CACzI,EAAG3B,GAAI0B,EAAO,KAAM,GAAI,GAAG,CAAC,EAC5B,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,CAAE,CAAE,EAAGA,EAAO,KAAK,EAG1EC,GAAU,MAAM,cAAc,OAAQ,CAClC,IAAK,IACL,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,MAAO,kBAAmB,CAC5F,EAAG3B,GAAI,kCAAmC,GAAI,GAAG,CAAC,CACtD,CAAC,CACL,CAAC,CAAC,EAEF,OAAO,MAAM,cAAc,MAAO,CAC9B,IAAKY,EACL,MAAO,CAAE,SAAU,WAAY,QAAS,aAAc,CAC1D,EAAG,CAACW,EAASE,CAAI,CAAC,CACtB,EAEA,OAAO,cAAgBrB,GCjJvB,IAAMwB,GAAc,IAAIC,EAAc,GAEhCC,GAAwB,CAAC,CAC3B,OAAAC,EACA,YAAAC,EACA,iBAAAC,EACA,aAAAC,EACA,YAAAC,EACA,cAAAC,EACA,cAAAC,CACJ,IAAM,CACF,GAAM,CAACC,EAAmBC,CAAoB,EAAI,MAAM,SAAS,IAAI,EAC/D,CAACC,EAAoBC,CAAqB,EAAI,MAAM,SAAS,CAAC,EAE9D,CAACC,EAAkBC,CAAmB,EAAI,MAAM,SAAS,EAAK,EAC9D,CAACC,EAAiBC,CAAkB,EAAI,MAAM,SAAS,CAAC,EACxD,CAACC,EAAaC,CAAc,EAAI,MAAM,SAAS,SAAS,EAM9D,MAAM,UAAU,IAAM,CAClB,IAAIC,EAAa,GACbC,EAAoB,EAElBC,EAA2B,SAAY,CACzC,IAAMC,EAAM,KAAK,IAAI,EACrB,GAAI,EAAAA,EAAMF,EAAoB,MAI1B,CAAAD,EAIJ,CAAAA,EAAa,GACbC,EAAoBE,EAEpB,GAAI,CACA,GAAI,CAACd,GAAiB,CAACF,EACnB,OAGJ,IAAMiB,EAAsBf,EAExBgB,EAAmB,KAUvB,GARI,OAAOD,EAAoB,sBAAyB,WACpDC,EAAmB,MAAMD,EAAoB,qBAAqB,EAC3D,OAAOA,EAAoB,iCAAoC,WACtEC,EAAmB,MAAMD,EAAoB,gCAAgC,EAE7EC,EAAmB,MAAM,OAAO,0BAA0B,uBAAuBD,CAAmB,EAGpGC,GAAoBA,EAAiB,aAAe,GAAO,CAC3D,IAAMC,EAAehB,GAAmB,OAAS,EAC3CiB,GAAWF,EAAiB,OAAS,EAEvCC,IAAiBC,IAAY,CAACjB,GAC9BC,EAAqBc,CAAgB,EACrCZ,EAAsBU,CAAG,GAEd,OAAO,UAE1B,CAIJ,MAAgB,CAEhB,QAAE,CACEH,EAAa,EACjB,EACJ,EAEA,GAAIb,IACAe,EAAyB,EAErB,CAACZ,GAAqBA,EAAkB,MAAQ,IAAI,CACpD,IAAMkB,EAAgB,YAAY,IAAM,CAChC,CAAClB,GAAqBA,EAAkB,MAAQ,GAChDY,EAAyB,EAEzB,cAAcM,CAAa,CAEnC,EAAG,GAAI,EAEP,WAAW,IAAM,cAAcA,CAAa,EAAG,GAAK,CACxD,CAGJ,IAAMC,EAAW,YAAYP,EAA0B,GAAK,EAE5D,MAAO,IAAM,cAAcO,CAAQ,CACvC,EAAG,CAACpB,EAAeF,CAAW,CAAC,EAM/B,MAAM,UAAU,IAAM,CAClB,IAAMuB,EAAwBC,GAAU,CAEpC,WAAW,IAAM,CACblB,EAAsB,CAAC,CAC3B,EAAG,GAAG,CACV,EAEMmB,EAAgCD,GAAU,CAExCA,EAAM,QAAUA,EAAM,OAAO,eAC7BpB,EAAqBoB,EAAM,OAAO,YAAY,EAC9ClB,EAAsB,KAAK,IAAI,CAAC,EAExC,EAEA,gBAAS,iBAAiB,yBAA0BiB,CAAoB,EACxE,SAAS,iBAAiB,2BAA4BE,CAA4B,EAElF,OAAO,0BAA6BvB,GAAkB,CAE9CA,GAAiB,OAAO,0BACxB,OAAO,0BAA0B,uBAAuBA,CAAa,EAChE,KAAKwB,GAAgB,CACdA,GAAgBA,EAAa,aAAe,KAC5CtB,EAAqBsB,CAAY,EACjCpB,EAAsB,KAAK,IAAI,CAAC,EAGxC,CAAC,EACA,MAAMqB,GAAS,CAEhB,CAAC,EAELrB,EAAsB,CAAC,CAE/B,EAEO,IAAM,CACT,SAAS,oBAAoB,yBAA0BiB,CAAoB,EAC3E,SAAS,oBAAoB,2BAA4BE,CAA4B,CACzF,CACJ,EAAG,CAAC,CAAC,EAML,MAAM,UAAU,IAAM,CAElBjB,EAAoB,EAAI,EACxBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CAElBJ,EAAoB,EAAI,EACxBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CAClB,IAAMgB,EAAqBJ,GAAU,CAEjChB,EAAoB,EAAI,EACxBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAGMiB,EAA0B,IAAM,CAGlCzB,EAAqB,IAAI,EACzBE,EAAsB,CAAC,EAEvBE,EAAoB,EAAK,EACzBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAEMkB,EAAuB,IAAM,CAG/B1B,EAAqB,IAAI,EACzBE,EAAsB,CAAC,CAC3B,EAEMyB,EAAqB,IAAM,CAE7B3B,EAAqB,IAAI,EACzBE,EAAsB,CAAC,EACvBE,EAAoB,EAAK,EACzBE,EAAmB,CAAC,EACpBE,EAAe,SAAS,CAC5B,EAEA,gBAAS,iBAAiB,sBAAuBgB,CAAiB,EAClE,SAAS,iBAAiB,kBAAmBE,CAAoB,EACjE,SAAS,iBAAiB,qBAAsBD,CAAuB,EACvE,SAAS,iBAAiB,eAAgBE,CAAkB,EAErD,IAAM,CACT,SAAS,oBAAoB,sBAAuBH,CAAiB,EACrE,SAAS,oBAAoB,kBAAmBE,CAAoB,EACpE,SAAS,oBAAoB,qBAAsBD,CAAuB,EAC1E,SAAS,oBAAoB,eAAgBE,CAAkB,CACnE,CACJ,EAAG,CAAC,CAAC,EAML,IAAMC,EAAsB,MAAOR,GAAU,CAEzC,GAAIA,IAAUA,EAAM,SAAW,GAAKA,EAAM,SAAWA,EAAM,UACnDzB,GAAgB,OAAOA,GAAiB,WAAY,CACpDA,EAAa,EACb,MACJ,CAIJyB,EAAM,eAAe,EACrBA,EAAM,gBAAgB,EAItB,IAAIS,EAAkB,KACtB,GAAI/B,GAAiB,OAAO,0BACxB,GAAI,CACA+B,EAAkB,MAAM,OAAO,0BAA0B,uBAAuB/B,CAAa,CAEjG,MAAgB,CAEhB,CAMJ,GAAI,CAAC+B,GAAmB,CAAC9B,EAAmB,CACxC,MAAM+B,EAAE,sBAAsB,CAAC,EAC/B,MACJ,CAGA,IAAIR,EAAeO,GAAmB9B,EAGjCuB,IACDA,EAAe,CACX,MAAO,UACP,MAAO,EACP,MAAO,OACP,oBAAqB,CAAC,EACtB,UAAW,KAAK,IAAI,EACpB,QAASQ,EAAE,6BAA6B,EACxC,WAAY,GACZ,aAAc,EACd,YAAa,CACjB,GAKJ,IAAIC,EAAU;AAAA;AAAA,EAKd,GAJAA,GAAW,mBAAmBT,EAAa,KAAK,KAAKA,EAAa,KAAK;AAAA,EACvES,GAAW,sBAAsB,IAAI,KAAKT,EAAa,SAAS,EAAE,mBAAmB,CAAC;AAAA,EACtFS,GAAW,gBAAgBT,EAAa,WAAaQ,EAAE,eAAe,EAAIA,EAAE,mBAAmB,CAAC;AAAA;AAAA,EAE5FR,EAAa,oBAAqB,CAClCS,GAAW;AAAA,EACXA,GAAW,IAAM,IAAI,OAAO,EAAE,EAAI;AAAA,EAElC,IAAMC,EAAc,OAAO,QAAQV,EAAa,mBAAmB,EAAE,OAAO,CAAC,CAACW,GAAKC,EAAM,IAAMA,GAAO,MAAM,EACtGC,GAAc,OAAO,QAAQb,EAAa,mBAAmB,EAAE,OAAO,CAAC,CAACW,GAAKC,EAAM,IAAM,CAACA,GAAO,MAAM,EAEzGF,EAAY,OAAS,IACrBD,GAAW;AAAA,EACXC,EAAY,QAAQ,CAAC,CAACC,GAAKC,EAAM,IAAM,CACnC,IAAME,GAAWH,GAAI,QAAQ,WAAY,KAAK,EAAE,QAAQ,KAAMI,GAAOA,EAAI,YAAY,CAAC,EACtFN,GAAW,MAAMK,EAAQ,KAAKF,GAAO,SAAWJ,EAAE,gBAAgB,CAAC;AAAA,CACvE,CAAC,EACDC,GAAW;AAAA,GAGXI,GAAY,OAAS,IACrBJ,GAAW;AAAA,EACXI,GAAY,QAAQ,CAAC,CAACF,GAAKC,EAAM,IAAM,CACnC,IAAME,GAAWH,GAAI,QAAQ,WAAY,KAAK,EAAE,QAAQ,KAAMI,GAAOA,EAAI,YAAY,CAAC,EACtFN,GAAW,MAAMK,EAAQ,KAAKF,GAAO,SAAWJ,EAAE,gBAAgB,CAAC;AAAA,CACvE,CAAC,EACDC,GAAW;AAAA,GAGfA,GAAW;AAAA,EACXA,GAAW,WAAWT,EAAa,YAAY,IAAIA,EAAa,WAAW;AAAA,EAC3ES,GAAW,UAAUT,EAAa,KAAK,IAAIA,EAAa,kBAAoB,GAAG;AAAA;AAAA,CACnF,CAMA,GAHAS,GAAW;AAAA,EACXA,GAAW,IAAM,IAAI,OAAO,EAAE,EAAI;AAAA,EAE9BT,EAAa,oBAAqB,CAClC,IAAMgB,EAAW,CACb,2BAA4BhB,EAAa,oBAAoB,uBAAuB,QAAU,GAC9F,oBAAqBA,EAAa,oBAAoB,uBAAuB,QAAU,GACvF,qBAAsBA,EAAa,oBAAoB,kBAAkB,QAAU,GACnF,CAACQ,EAAE,sBAAsB,CAAC,EAAGR,EAAa,oBAAoB,wBAAwB,QAAU,GAChG,CAACQ,EAAE,oBAAoB,CAAC,EAAGR,EAAa,oBAAoB,6BAA6B,QAAU,GACnG,CAACQ,EAAE,sBAAsB,CAAC,EAAGR,EAAa,oBAAoB,wBAAwB,QAAU,GAChG,mBAAoBA,EAAa,oBAAoB,uBAAuB,QAAU,GACtF,mBAAoBA,EAAa,oBAAoB,uBAAuB,QAAU,GACtF,CAACQ,EAAE,wBAAwB,CAAC,EAAGR,EAAa,oBAAoB,0BAA0B,QAAU,GACpG,CAACQ,EAAE,wBAAwB,CAAC,EAAGR,EAAa,oBAAoB,0BAA0B,QAAU,EACxG,EAEA,OAAO,QAAQgB,CAAQ,EAAE,QAAQ,CAAC,CAACC,GAASC,EAAS,IAAM,CACvDT,GAAW,GAAGS,GAAY,SAAM,QAAG,IAAID,EAAO;AAAA,CAClD,CAAC,CACL,MAEIR,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EACXA,GAAW;AAAA,EAGfA,GAAW;AAAA,EAAKT,EAAa,SAAWQ,EAAE,sBAAsB,CAAC,GAE7DR,EAAa,WACbS,GAAW;AAAA;AAAA,6EAEXA,GAAW;AAAA;AAAA,4FAIf,IAAMU,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,MAAM,QAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UActB,IAAMC,EAAU,SAAS,cAAc,KAAK,EAC5CA,EAAQ,MAAM,QAAU;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,UAYxBA,EAAQ,YAAcX,EACtBU,EAAM,YAAYC,CAAO,EAGzBD,EAAM,iBAAiB,QAAUE,GAAM,CAC/BA,EAAE,SAAWF,GACb,SAAS,KAAK,YAAYA,CAAK,CAEvC,CAAC,EAGD,IAAMG,EAAiBD,GAAM,CACrBA,EAAE,MAAQ,WACV,SAAS,KAAK,YAAYF,CAAK,EAC/B,SAAS,oBAAoB,UAAWG,CAAa,EAE7D,EACA,SAAS,iBAAiB,UAAWA,CAAa,EAElD,SAAS,KAAK,YAAYH,CAAK,CACnC,EA2DMI,GArDkB,IAAM,CAC1B,OAAQrD,EAAQ,CACZ,IAAK,YACD,MAAO,CACH,KAAMsC,EAAE,kBAAkB,EAC1B,UAAW,mBACX,WAAY,oDAChB,EACJ,IAAK,YACD,MAAO,CACH,KAAMA,EAAE,kBAAkB,EAC1B,UAAW,mBACX,WAAY,uDAChB,EACJ,IAAK,aACD,MAAO,CACH,KAAMA,EAAE,mBAAmB,EAC3B,UAAW,oBACX,WAAY,iDAChB,EACJ,IAAK,WACD,MAAO,CACH,KAAMA,EAAE,iBAAiB,EACzB,UAAW,oBACX,WAAY,uDAChB,EACJ,IAAK,SACD,MAAO,CACH,KAAMA,EAAE,cAAc,EACtB,UAAW,gBACX,WAAY,8CAChB,EACJ,IAAK,eACD,MAAO,CACH,KAAMA,EAAE,qBAAqB,EAC7B,UAAW,oBACX,WAAY,uDAChB,EACJ,IAAK,oBACD,MAAO,CACH,KAAMA,EAAE,yBAAyB,EACjC,UAAW,gBACX,WAAY,uDAChB,EACJ,QACI,MAAO,CACH,KAAMA,EAAE,qBAAqB,EAC7B,UAAW,sBACX,WAAY,iDAChB,CACR,CACJ,GAE+B,EACzBgB,EAAuBlD,EAAeG,GAAqBF,EAAiB,KAkC5EkD,GA3B8B,IAAM,CACtC,GAAI,CAACD,EACD,MAAO,CACH,QAAShB,EAAE,4BAA4B,EACvC,WAAY,GACZ,WAAY,SAChB,EAGJ,IAAMkB,EAAaF,EAAqB,aAAe,GACjDG,EAAc,GAAGH,EAAqB,KAAK,KAAKA,EAAqB,KAAK,KAEhF,OAAIE,EACO,CACH,QAAS,GAAGC,CAAW;AAAA,yCACvB,WAAY,GACZ,WAAY,MAChB,EAEO,CACH,QAAS,GAAGA,CAAW;AAAA,yCACvB,WAAY,GACZ,WAAY,WAChB,CAER,GAEoD,EAMpD,MAAM,UAAU,KACZ,OAAO,oBAAsB,OAEtB,IAAM,CACT,OAAO,OAAO,mBAClB,GACD,CAAClD,EAAmBE,EAAoBL,EAAaE,EAAegD,EAAsBC,CAAe,CAAC,EAM7G,IAAMG,EAAWJ,EACVA,EAAqB,QAAU,QAAU,kBAAoBA,EAAqB,QAAU,SAAW,mBAAqBA,EAAqB,QAAU,SAAW,mBAAqB,gBAC5L,kBAIAK,EAAWvD,EAAc,wBACxB,CAAC,aAAc,YAAa,WAAY,cAAc,EAAE,SAASJ,CAAM,EAAI,yBAC3EA,IAAW,SAAW,sBAAwB,mBAC/C4D,EAAUD,IAAa,wBAA0B,kCAAoCA,IAAa,yBAA2B,mCAAqCA,IAAa,sBAAwB,gCAAkC,mCACzOE,EAAO,mEAMPC,EAAY,CAAC1D,EACb,CAAC2D,EAAUC,EAAW,EAAI,MAAM,SAAS,EAAK,EACpD,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAW,IAAMD,IAAa,OAAO,SAAW,OAAO,aAAe,GAAK,CAAC,EAClF,OAAAC,EAAS,EACT,OAAO,iBAAiB,SAAUA,EAAU,CAAE,QAAS,EAAK,CAAC,EACtD,IAAM,OAAO,oBAAoB,SAAUA,CAAQ,CAC9D,EAAG,CAAC,CAAC,EASL,IAAMC,EAAQ,4BACRC,EAAc,6GAMdC,EAAU,CAAE,WAAY,0BAA2B,cAAe,0BAA2B,EAC7FC,EAAU,CAAE,SAAU,QAAS,IAAK,EAAG,KAAM,EAAG,MAAO,EAAG,GAAGD,CAAQ,EACrEE,GAAcR,EACbC,EACG,CAAE,GAAGM,EAAS,WAAY,+BAAgC,eAAgBH,EAAO,qBAAsBA,EAAO,aAAc,sCAAuC,WAAYC,CAAY,EAC3L,CAAE,GAAGE,EAAS,WAAY,cAAe,eAAgB,2BAA4B,qBAAsB,2BAA4B,aAAc,wBAAyB,WAAYF,CAAY,EAC1M,CAAE,GAAGC,EAAS,WAAY,+BAAgC,eAAgBF,EAAO,qBAAsBA,EAAO,aAAc,qCAAsC,EAExK,OAAO,MAAM,cAAc,SAAU,CACjC,UAAWJ,EAAY,sBAAwB,mCAC/C,MAAOQ,EACX,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,YACL,UAAW,oBACX,MAAO,CAAE,QAAS,QAAS,CAC/B,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,UAAW,oCACX,MAAO,CAAE,OAAQ,wBAAyB,IAAK,MAAO,CAC1D,EAAG,CAEC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,CAAE,CAAE,EAAG,CACpH,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EACpI,MAAM,cAAc,MAAO,CAAE,IAAK,2BAA4B,IAAK,YAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,OAAQ,CAAE,CAAC,CACtK,EACA,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,WAAY,IAAK,SAAU,CAAE,CAAE,EAAG,CAChF,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,WAAY,IAAK,KAAM,CAAE,EAAG,CACtG,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG,WAAW,EACvJ,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYT,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,sBAAuB,CAAE,EAAGhE,EAAW,CACxJ,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,UAAW,kBAAmB,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,GAAI,CAAE,EAAGyC,EAAE,aAAa,CAAC,CACrK,CAAC,CACL,CAAC,EAED,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAGvGwB,GAAa,MAAM,cAAcS,GAAkB,CAAE,IAAK,MAAO,CAAC,EAKlET,GAAa,MAAM,cAAcU,GAAe,CAAE,IAAK,OAAQ,CAAC,EAEhE,CAACV,GAAa,MAAM,cAAc,SAAU,CACxC,IAAK,MAAO,KAAM,SAClB,QAAS,IAAM,OAAO,cAAc,IAAI,YAAY,iCAAiC,CAAC,EACtF,MAAOxB,EAAE,sBAAsB,EAAG,aAAcA,EAAE,iBAAiB,EACnE,UAAW,gBACX,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,OAAQ,sCAAuC,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,UAAW,WAAY,UAAW,CACrQ,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,uBAAwB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EAE9F,CAACwB,GAAaR,GAAyB,MAAM,cAAc,MAAO,CAC/D,IAAK,MAAO,QAASlB,EACrB,cAAgBe,GAAM,CAAEA,EAAE,eAAe,EAAO,OAAOhD,GAAiB,YAAYA,EAAa,CAAG,EACpG,MAAOoD,EAAgB,QAAS,UAAW,aAC3C,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,4BAA6B,OAAQ,SAAU,CACpN,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,uBAAwB,MAAO,CAAE,SAAU,OAAQ,MAAOG,CAAS,CAAE,CAAC,EACtH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAIpB,EAAE,YAAYgB,EAAqB,KAAK,EAAE,IAAM,YAAYA,EAAqB,KAAK,GAAK,OAAOA,EAAqB,KAAK,EAAIhB,EAAE,YAAYgB,EAAqB,KAAK,EAAE,CAAE,EACjU,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYO,EAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGP,EAAqB,MAAQ,GAAG,CAC1J,CAAC,EAED,CAACQ,GAAa,MAAM,cAAc,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,2BAA4B,CAAE,EAAG,CACxP,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYH,EAAU,UAAW,aAAeC,CAAQ,CAAE,CAAC,EAChK,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGP,EAAO,IAAI,CACjK,CAAC,EAEDjD,GAAe,MAAM,cAAc,SAAU,CACzC,IAAK,KAAM,QAASD,EAAc,UAAW,gBAC7C,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,WAAY,UAAW,CACnT,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACjG,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,YAAa,EAAGmC,EAAE,gBAAgB,CAAC,CAC1F,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAAC,CACL,EAEA,OAAO,sBAAwBvC,GCznB/B,IAAM0E,GAAkB,QAClBC,GAAkB,yEAAyED,EAAe,GAE1GE,GAAe,IAAM,CACvB,IAAMC,EAAO,CACT,CAAE,GAAI,MAAO,KAAM,UAAW,SAAU,kBAAmB,KAAM,eAAgB,SAAU,MAAO,SAAU,GAAM,IAAK,0BAA2B,MAAO,OAAQ,EACjK,CAAE,GAAI,UAAW,KAAM,UAAW,SAAU,cAAe,KAAM,iBAAkB,SAAU,UAAW,SAAU,GAAM,IAAK,GAAGF,EAAe,mBAAmBD,EAAe,iBAAkB,MAAO,MAAO,EACjN,CAAE,GAAI,QAAS,KAAM,QAAS,SAAU,cAAe,KAAM,gBAAiB,SAAU,UAAW,SAAU,GAAM,IAAK,GAAGC,EAAe,mBAAmBD,EAAe,WAAY,MAAO,MAAO,EACtM,CAAE,GAAI,QAAS,KAAM,QAAS,SAAU,cAAe,KAAM,eAAgB,SAAU,UAAW,SAAU,GAAM,IAAK,GAAGC,EAAe,mBAAmBD,EAAe,kBAAmB,MAAO,QAAS,EAC9M,CAAE,GAAI,MAAO,KAAM,MAAO,SAAU,gBAAiB,KAAM,eAAgB,SAAU,SAAU,SAAU,GAAO,IAAK,6CAA8C,MAAO,OAAQ,EAClL,CAAE,GAAI,UAAW,KAAM,UAAW,SAAU,cAAe,KAAM,iBAAkB,SAAU,SAAU,SAAU,GAAO,IAAK,mEAAoE,MAAO,OAAQ,EAChN,CAAE,GAAI,SAAU,KAAM,SAAU,SAAU,oBAAqB,KAAM,gBAAiB,SAAU,UAAW,SAAU,GAAO,IAAK,IAAK,MAAO,QAAS,EACtJ,CAAE,GAAI,OAAQ,KAAM,OAAQ,SAAU,oBAAqB,KAAM,cAAe,SAAU,UAAW,SAAU,GAAO,IAAK,IAAK,MAAO,MAAO,EAC9I,CAAE,GAAI,QAAS,KAAM,QAAS,SAAU,oBAAqB,KAAM,eAAgB,SAAU,UAAW,SAAU,GAAO,IAAK,IAAK,MAAO,KAAM,EAChJ,CAAE,GAAI,UAAW,KAAM,UAAW,SAAU,oBAAqB,KAAM,yBAA0B,SAAU,UAAW,SAAU,GAAO,IAAK,IAAK,MAAO,QAAS,CACrK,EAEMI,EAAkBC,GAAQ,CACxBA,EAAI,UAAU,OAAO,KAAKA,EAAI,IAAK,QAAQ,CACnD,EAEMC,EAAcH,EAAK,OAAOI,GAAKA,EAAE,WAAa,WAAaA,EAAE,WAAa,KAAK,EAC/EC,EAAaL,EAAK,OAAOI,GAAKA,EAAE,WAAa,QAAQ,EACrDE,EAAcN,EAAK,OAAOI,GAAKA,EAAE,WAAa,SAAS,EAEvDG,EAAW,YAEXC,EAAe,CACjB,MAAO,iBACP,KAAM,gBACN,KAAM,gBACN,OAAQ,kBACR,IAAK,eACL,MAAO,aACP,OAAQ,iBACZ,EAEMC,EAAiBP,GACnB,MAAM,cAAc,MAAO,CACvB,IAAKA,EAAI,GACT,UAAW,kBAAkBK,CAAQ,0DACzC,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,UACL,UAAW,GAAGL,EAAI,IAAI,yBAAyBA,EAAI,SAAWM,EAAaN,EAAI,KAAK,EAAI,eAAe,2HAC3G,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,UAAW,uKACf,EAAG,CACC,MAAM,cAAc,KAAM,CAAE,IAAK,OAAQ,UAAW,yCAA0C,EAAGA,EAAI,IAAI,EACzG,MAAM,cAAc,IAAK,CAAE,IAAK,WAAY,UAAW,6BAA8B,EAAGA,EAAI,QAAQ,EACpGA,EAAI,SACA,MAAM,cAAc,SAAU,CAC1B,IAAK,MACL,QAAS,IAAMD,EAAeC,CAAG,EACjC,UAAW,2GACf,EAAGA,EAAI,KAAO,MAAQ,SAAW,UAAU,EAE3C,MAAM,cAAc,OAAQ,CAAE,IAAK,SAAU,UAAW,mCAAoC,EAAG,aAAa,CACpH,CAAC,CACL,CAAC,EAGL,OAAO,MAAM,cAAc,MAAO,CAAE,UAAW,YAAa,EAAG,CAE3D,MAAM,cAAc,MAAO,CAAE,IAAK,SAAU,UAAW,qCAAsC,EAAG,CAC5F,MAAM,cAAc,KAAM,CAAE,IAAK,QAAS,UAAW,sCAAuC,EAAG,yBAAyB,EACxH,MAAM,cAAc,IAAK,CAAE,IAAK,WAAY,UAAW,6BAA8B,EAAG,iFAAiF,CAC7K,CAAC,EAGD,MAAM,cAAc,MAAO,CAAE,IAAK,cAAe,UAAW,oDAAqD,EAC7GC,EAAY,IAAIM,CAAa,CACjC,EAGA,MAAM,cAAc,MAAO,CAAE,IAAK,aAAc,UAAW,gCAAiC,EACxFJ,EAAW,IAAII,CAAa,CAChC,EAGA,MAAM,cAAc,MAAO,CAAE,IAAK,cAAe,UAAW,2BAA4B,EACpFH,EAAY,IAAIG,CAAa,CACjC,CACJ,CAAC,CACL,EAEA,OAAO,aAAeV,GCzFtB,IAAMW,GAAgB,IAAM,CACxB,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAClC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC5E,EAEA,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMF,EAAYC,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACTD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,CACpG,CACJ,EAAG,CAAC,CAAC,EAEL,IAAMC,EAAS,mBAETC,EAAe,yBACfC,EAAO,mEACPC,EAAO,kDAEPC,EAAU,iHAEVC,EAAW,CACb,CACI,GAAI,QACJ,KAAM,mBACN,KAAM,kBACN,WAAY,OACZ,IAAK,gCACL,KAAMC,EAAE,qBAAqB,EAC7B,KAAMA,EAAE,qBAAqB,EAC7B,MAAO,KACX,EACA,CACI,GAAI,OACJ,KAAM,WAKN,KAAM,qBACN,WAAY,OACZ,IAAK,wBACL,KAAMA,EAAE,wBAAwB,EAChC,KAAMA,EAAE,wBAAwB,EAChC,MAAO,MACX,CACJ,EAEMC,EAAM,CAACC,EAAOC,EAAMC,EAAQC,EAAIC,IAClC,MAAM,cAAc,MAAO,CACvB,UAAAA,EAAW,MAAOH,EAAM,OAAQA,EAAM,QAAS,YAAa,KAAM,OAClE,OAAAC,EAAQ,YAAaC,EAAI,cAAe,QAAS,eAAgB,QACjE,wBAAyB,CAAE,OAAQH,CAAM,CAC7C,CAAC,EAECK,EAAWC,GAAS,MAAM,cAAc,OAAQ,CAClD,IAAK,OACL,MAAO,CAAE,WAAYZ,EAAM,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,6BAA8B,WAAY,QAAS,CAC3S,EAAGY,CAAI,EAEDC,EAAe,GAAM,MAAM,cAAc,IAAK,CAChD,IAAK,EAAE,GACP,KAAM,EAAE,IACR,OAAQ,SACR,IAAK,sBACL,MAAO,CACH,KAAM,YAAa,SAAUnB,EAAW,OAAS,QACjD,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,sCAC/D,QAAS,iBAAkB,QAAS,OAAQ,cAAe,SAC3D,eAAgB,OAAQ,MAAO,UAC/B,WAAY,sFACZ,UAAW,QAAQ,EAAE,KAAK,2BAC9B,EACA,aAAeoB,GAAM,CAAEA,EAAE,cAAc,MAAM,UAAY,mBAAoBA,EAAE,cAAc,MAAM,YAAc,2BAA6B,EAC9I,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,UAAY,OAAQA,EAAE,cAAc,MAAM,YAAc,2BAA6B,CACtI,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,OAAQ,MAAO,CAAE,EAC7H,MAAM,cAAc,MAAO,CACvB,IAAK,EAAE,KAAM,IAAK,EAAE,KAKpB,QAAS,OAAQ,SAAU,QAC3B,MAAO,CAAE,OAAQ,EAAE,WAAY,MAAO,OAAQ,SAAU,QAAS,UAAW,UAAW,QAAS,OAAQ,CAC5G,CAAC,CACL,EACA,MAAM,cAAc,KAAM,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG,EAAE,IAAI,EACtK,MAAM,cAAc,IAAK,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,EAAE,IAAI,EAC/I,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,UAAW,OAAQ,WAAY,MAAO,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CAC7IH,EAAQ,EAAE,IAAI,CAClB,CAAC,CACL,CAAC,EAEKI,EAAa,MAAM,cAAc,IAAK,CACxC,IAAK,SACL,KAAMb,EACN,OAAQ,SACR,IAAK,sBACL,MAAO,CACH,KAAM,YAAa,SAAUR,EAAW,OAAS,QACjD,aAAc,OAAQ,WAAY,eAAgB,OAAQ,uCAC1D,QAAS,OAAQ,QAAS,OAAQ,cAAe,SAAU,eAAgB,gBAC3E,eAAgB,OAAQ,MAAO,UAC/B,WAAY,6CACZ,UAAW,oCACf,EACA,aAAeoB,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,iCAAmC,EAC9F,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,2BAA6B,CAC5F,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,EAAG,CACvC,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,mCAAoC,OAAQ,6CAA8C,aAAc,MAAO,CACpO,EAAGT,EAAI,iHAAkH,GAAIN,EAAc,GAAG,CAAC,EAC/I,MAAM,cAAc,KAAM,CAAE,IAAK,QAAS,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGK,EAAE,sBAAsB,CAAC,EAC1L,MAAM,cAAc,IAAK,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGA,EAAE,qBAAqB,CAAC,CAC5J,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,MACL,MAAO,CACH,UAAW,OAAQ,MAAO,OAAQ,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,OAC/G,QAAS,YAAa,aAAc,OAAQ,OAAQ,OAAQ,WAAYL,EAAc,MAAO,sBAC7F,WAAYE,EAAM,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAC7D,UAAW,8CAA+C,UAAW,aACrE,WAAY,iFAChB,CACJ,EAAG,CACCG,EAAE,oBAAoB,EACtBC,EAAI,oCAAqC,GAAI,eAAgB,IAAK,eAAe,CACrF,CAAC,CACL,CAAC,EAEKC,EAAQ,MAAM,cAAc,MAAO,CACrC,IAAK,QACL,MAAO,CAAE,SAAU,SAAU,OAAQ,SAAU,QAASZ,EAAW,SAAW,QAAS,CAC3F,EAAG,CAEC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,aAAc,MAAO,CAAE,EAAG,CACzE,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,WAAYM,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,MAAO,CACtK,EAAGI,EAAE,kBAAkB,CAAC,EAGxB,MAAM,cAAc,KAAM,CACtB,IAAK,KACL,MAAO,CAAE,OAAQ,EAAG,SAAUV,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,SAAU,WAAY,KAAM,MAAO,kBAAmB,CACpJ,EAAGU,EAAE,kBAAkB,CAAC,CAC5B,CAAC,EAGD,MAAM,cAAc,MAAO,CACvB,IAAK,QACL,MAAO,CAAE,QAAS,OAAQ,IAAK,OAAQ,WAAY,UAAW,SAAU,MAAO,CACnF,EAAG,CACC,GAAGD,EAAS,IAAIU,CAAW,EAC3BE,CACJ,CAAC,CACL,CAAC,EAED,OAAO,MAAM,cAAc,UAAW,CAClC,MAAO,CACH,MAAO,OAAQ,MAAO,mBAAoB,WAAYd,EACtD,QAASP,EAAW,SAAW,SAC/B,WAAY,4GAChB,CACJ,EAAG,CACC,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OAAQ,kGAAmG,CAAE,CAAC,EACnLY,CACJ,CAAC,CACL,EAEA,OAAO,cAAgBb,GC9KvB,IAAMuB,GAAsB,IAAM,CAChC,GAAM,CAACC,EAAQC,CAAS,EAAI,MAAM,SAAS,CAAC,EACtC,CAACC,EAAUC,CAAW,EAAI,MAAM,SACpC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC1E,EAEA,MAAM,UAAU,IAAM,CACpB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMF,EAAYC,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACXD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,CAClG,CACF,EAAG,CAAC,CAAC,EAEL,IAAMC,EAAS,mBAGTC,EAAe,yBACfC,EAAY,4GACZC,EAAY,kCACZC,EAAU,eACVC,EAAU,4BACVC,EAAO,mEACPC,EAAO,kDAEPC,EAAS,CACb,CACE,IAAK,KACL,MAAO,CAACC,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,qGACR,EACA,CACE,IAAK,KACL,MAAO,CAACD,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,uJACR,EACA,CACE,IAAK,KACL,MAAO,CAACD,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,sGACR,EACA,CACE,IAAK,KACL,MAAO,CAACD,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,sFACR,EACA,CACE,IAAK,KACL,MAAO,CAACD,EAAE,oBAAoB,EAAGA,EAAE,uBAAuB,CAAC,EAC3D,UAAWA,EAAE,qBAAqB,EAClC,KAAMA,EAAE,gBAAgB,EACxB,KAAMC,GAAM,gBAAgB,EAC5B,KAAM,wLACR,CACF,EAEMC,EAAM,CAACC,EAAOC,EAAMC,EAAQC,IAChC,MAAM,cAAc,MAAO,CACzB,MAAOF,EAAM,OAAQA,EAAM,QAAS,YAAa,KAAM,OACvD,OAAAC,EAAQ,YAAaC,EAAI,cAAe,QAAS,eAAgB,QACjE,wBAAyB,CAAE,OAAQH,CAAM,CAC3C,CAAC,EAEGI,EAAMC,GACVtB,EAAWuB,IAAOA,EAAID,EAAOT,EAAO,QAAUA,EAAO,MAAM,EAEvDW,EAAS,CAACC,EAAKC,EAASC,IAC5B,MAAM,cAAc,SAAU,CAC5B,IAAAF,EAAK,QAAAC,EAAS,aAAcD,EAAK,UAAW,gBAC5C,MAAO,CACL,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAC5D,aAAc,MAAO,OAAQ,qCAC7B,WAAY,6BAA8B,MAAO,mBAAoB,OAAQ,UAC7E,WAAY,kCACd,EACA,aAAeG,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAcpB,EAAWoB,EAAE,cAAc,MAAM,MAAQvB,CAAQ,EAC5G,aAAeuB,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,2BAA4BA,EAAE,cAAc,MAAM,MAAQ,kBAAoB,CAC3I,EAAGZ,EAAIW,EAAM,GAAI,eAAgB,GAAG,CAAC,EAEjCE,EAAOC,GACX,MAAM,cAAc,OAAQ,CAC1B,IAAKA,EACL,MAAO,CACL,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WACnE,aAAc,MAAO,OAAQ,sCAC7B,WAAY,6BAA8B,WAAYnB,EACtD,SAAU,SAAU,WAAY,IAAK,MAAO,kBAC9C,CACF,EAAG,CACD,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,uBAAwB,CAAE,CAAC,EAC5ImB,CACF,CAAC,EAEGC,EAAmBC,GACvB,MAAM,cAAc,MAAO,CACzB,IAAK,MACL,MAAO,CACL,OAAQ,OAAQ,QAAS,OAAQ,cAAe,SAChD,eAAgB/B,EAAW,aAAe,gBAC1C,IAAKA,EAAW,OAAS,EACzB,QAASA,EAAW,YAAc,YAClC,SAAUA,EAAW,OAAS,QAC9B,UAAW,oCACb,CACF,EAAG,CACD,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,eAAgB,CAAE,EAAG,CAC5H,MAAM,cAAc,MAAO,CACzB,IAAK,KACL,MAAO,CACL,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAClF,WAAY,mCAAoC,OAAQ,2CAC1D,CACF,EAAGe,EAAIgB,EAAE,KAAM,GAAI1B,EAAc,GAAG,CAAC,EACrC,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYK,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGqB,EAAE,GAAG,CAC5I,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,EAAG,CACzC,MAAM,cAAc,KAAM,CACxB,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU/B,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,SAAU,WAAY,KAAM,MAAO,kBAAmB,CACrK,EAAG,CAAC+B,EAAE,MAAM,CAAC,EAAG,MAAM,cAAc,KAAM,CAAE,IAAK,IAAK,CAAC,EAAGA,EAAE,MAAM,CAAC,CAAC,CAAC,EACrE,MAAM,cAAc,IAAK,CACvB,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,SAAU,OAAQ,CAChH,EAAGA,EAAE,IAAI,CACX,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,IAAK,KAAM,CAAE,EAAGA,EAAE,KAAK,IAAIH,CAAG,CAAC,CACvH,CAAC,EAEGI,EAAoBD,GAAM/B,EAC5B,MAAM,cAAc,MAAO,CACzB,IAAK,MACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,WAAY,CACpF,EAAG,CACD,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYU,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,sBAAuB,CAAE,EAAGqB,EAAE,GAAG,EAC9I,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGA,EAAE,SAAS,CACzJ,CAAC,EACD,MAAM,cAAc,MAAO,CACzB,IAAK,MACL,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,gBAAiB,QAAS,QAAS,CAC9J,EAAG,CACD,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYrB,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,sBAAuB,CAAE,EAAGqB,EAAE,GAAG,EAC9I,MAAM,cAAc,OAAQ,CAC1B,IAAK,IACL,MAAO,CAAE,YAAa,cAAe,UAAW,iBAAkB,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,mBAAoB,WAAY,QAAS,CAChL,EAAGA,EAAE,SAAS,EACdhB,EAAIgB,EAAE,KAAM,GAAI,uBAAwB,GAAG,CAC7C,CAAC,EAECE,EAASrB,EAAO,IAAI,CAACmB,EAAGG,IAAM,CAClC,IAAMC,EAAWrC,IAAWoC,EAC5B,OAAO,MAAM,cAAc,MAAO,CAChC,IAAKA,EACL,QAAS,IAAMnC,EAAUmC,CAAC,EAG1B,aAAeP,GAAM,CAAOQ,IAAUR,EAAE,cAAc,MAAM,OAAS,mBAAoB,EACzF,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,OAAS,MAAQ,EAC9D,MAAO,CACL,KAAM3B,EAAW,OAAUmC,EAAW,IAAM,EAC5C,SAAUnC,EAAW,OAAS,OAC9B,SAAU,WACV,aAAc,OACd,SAAU,SACV,OAAQ,UACR,WAAYmC,EAAW7B,EAAYE,EACnC,OAAQ,cAAgB2B,EAAW5B,EAAYE,GAC/C,MAAO,mBACP,WAAY,iGACd,CACF,EAAG0B,EAAWL,EAAgBC,CAAC,EAAIC,EAAiBD,CAAC,CAAC,CACxD,CAAC,EAEKf,EAAQ,MAAM,cAAc,MAAO,CACvC,IAAK,QACL,MAAO,CACL,SAAU,SAAU,OAAQ,SAC5B,QAAShB,EAAW,SAAW,QACjC,CACF,EAAG,CAED,MAAM,cAAc,MAAO,CACzB,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,WAAY,WAAY,eAAgB,gBAAiB,IAAK,OAAQ,aAAc,MAAO,CACvH,EAAG,CACD,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,EAAG,CAC5C,MAAM,cAAc,MAAO,CACzB,IAAK,UACL,MAAO,CAAE,WAAYU,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,MAAO,CACpK,EAAGG,EAAE,gBAAgB,CAAC,EACtB,MAAM,cAAc,KAAM,CACxB,IAAK,KACL,MAAO,CAAE,OAAQ,EAAG,SAAUb,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,SAAU,WAAY,KAAM,MAAO,kBAAmB,CAClJ,EAAGa,EAAE,gBAAgB,CAAC,CACxB,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,KAAM,MAAO,CAAE,EAAG,CACtHU,EAAO,OAAQ,IAAMH,EAAG,EAAE,EAAG,4BAA4B,EACzDG,EAAO,OAAQ,IAAMH,EAAG,CAAC,EAAG,0BAA0B,CACxD,CAAC,CACH,CAAC,EAGD,MAAM,cAAc,MAAO,CACzB,IAAK,YACL,MAAO,CACL,QAAS,OACT,cAAepB,EAAW,SAAW,MACrC,IAAKA,EAAW,OAAS,OACzB,OAAQA,EAAW,OAAS,OAC9B,CACF,EAAGiC,CAAM,CACX,CAAC,EAGD,OAAO,MAAM,cAAc,UAAW,CACpC,MAAO,CACL,MAAO,OAAQ,MAAO,mBAAoB,WAAYtB,EACtD,QAASX,EAAW,SAAW,SAC/B,WAAY,0GACd,CACF,EAAG,CACD,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OAAQ,kGAAmG,CAAE,CAAC,EACnLgB,CACF,CAAC,CACH,EAGA,OAAO,oBAAsBnB,GC9O7B,SAASuC,IAAU,CACf,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAClC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC5E,EAEA,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMF,EAAYC,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACTD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,CACpG,CACJ,EAAG,CAAC,CAAC,EAEL,IAAMC,EAAO,mEACPC,EAAO,kDAEPC,EAAO,CACT,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,UAAW,EACzC,CAAE,EAAG,OAAQ,EAAG,KAAM,OAAQ,SAAU,EACxC,CAAE,EAAG,OAAQ,EAAG,MAAO,OAAQ,KAAM,EACrC,CAAE,EAAG,OAAQ,EAAG,MAAO,OAAQ,SAAU,EACzC,CAAE,EAAG,OAAQ,EAAG,MAAO,OAAQ,UAAW,EAC1C,CAAE,EAAG,OAAQ,EAAG,MAAO,OAAQ,UAAW,CAC9C,EAAE,IAAKC,IAAO,CACV,GAAGA,EAGH,MAAOC,EAAE,WAAWD,EAAE,CAAC,QAAQ,EAC/B,IAAKC,EAAE,WAAWD,EAAE,CAAC,MAAM,EAC3B,KAAMC,EAAE,WAAWD,EAAE,CAAC,OAAO,EAC7B,SAAUE,GAAM,WAAWF,EAAE,CAAC,WAAW,CAC7C,EAAE,EAKIG,EAAO,CACT,SAAU,CAAE,MAAO,wBAAyB,KAAM,iCAAkC,EACpF,QAAS,CAAE,MAAO,yBAA0B,KAAM,kCAAmC,EACrF,IAAK,CAAE,MAAO,2BAA4B,KAAM,2BAA4B,EAC5E,QAAS,CAAE,MAAO,mBAAoB,KAAM,2BAA4B,EACxE,SAAU,CAAE,MAAO,mBAAoB,KAAM,2BAA4B,CAC7E,EAEM,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,CAAC,CAAC,EACnCC,EAAUC,GAAOH,EAAKG,CAAC,IAAM,OAAYR,EAAKQ,CAAC,EAAE,SAAW,UAAYH,EAAKG,CAAC,EAC9EC,EAAUD,GAAMF,EAASI,IAAO,CAAE,GAAGA,EAAG,CAACF,CAAC,EAAG,CAACD,EAAOC,CAAC,CAAE,EAAE,EAE1DG,EAAQX,EAAK,OACbY,EAAUZ,EAAK,OAAQC,GAAMA,EAAE,SAAW,YAAcA,EAAE,SAAW,SAAS,EAAE,OAChFY,EAAWF,EAAQC,EACnBE,GAAcF,EAAUD,EAAQ,KAAK,QAAQ,CAAC,EAAI,IAMlD,CAACI,EAAgBC,CAAa,EAAId,EAAE,mBAAoB,CAAE,MAAAS,CAAM,CAAC,EAAE,MAAM,WAAW,EAEpFM,EAAcC,GACZA,IAAW,WAEP,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,iGAAkG,OAAQ,2CAA4C,OAAQ,CAAE,GAC9U,oBAAC,OAAI,MAAM,KAAK,OAAO,KAAK,QAAQ,YAAY,KAAK,OAAO,OAAO,wBAAwB,YAAY,MAAM,cAAc,QAAQ,eAAe,SAAQ,oBAAC,QAAK,EAAE,kBAAkB,CAAE,CAC1L,EAGJA,IAAW,UAEP,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,iGAAkG,OAAQ,mCAAoC,OAAQ,EAAG,UAAW,gCAAiC,GACnX,oBAAC,QAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,wBAAyB,EAAG,CAC7G,EAGJA,IAAW,MAEP,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,uGAAwG,OAAQ,8CAA+C,OAAQ,CAAE,GACvV,oBAAC,OAAI,MAAM,KAAK,OAAO,KAAK,QAAQ,YAAY,KAAK,OAAO,OAAO,2BAA2B,YAAY,MAAM,cAAc,QAAQ,eAAe,SAAQ,oBAAC,QAAK,EAAE,sBAAsB,CAAE,CACjM,EAKJ,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,eAAgB,OAAQ,OAAOA,IAAW,WAAa,SAAW,OAAO,6BAA8B,OAAQ,CAAE,GAC/R,oBAAC,QAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYd,EAAKc,CAAM,EAAE,KAAM,EAAG,CACvG,EAIR,OACI,oBAAC,WAAQ,MAAO,CAAE,MAAO,OAAQ,MAAO,mBAAoB,WAAYnB,EAAM,QAASL,EAAW,SAAW,SAAU,WAAY,2GAA4G,GAC3O,oBAAC,SAAM,wBAAyB,CAAE,OAAQ,0OAA2O,EAAG,EAExR,oBAAC,OAAI,MAAO,CAAE,SAAU,SAAU,OAAQ,SAAU,QAASA,EAAW,SAAW,QAAS,GAGxF,oBAAC,OAAI,MAAO,CAAE,aAAc,MAAO,GAC/B,oBAAC,OAAI,MAAO,CAAE,WAAYI,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,MAAO,GAAII,EAAE,iBAAiB,CAAE,EAChM,oBAAC,MAAG,MAAO,CAAE,OAAQ,WAAY,SAAUR,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,OAAQ,WAAY,KAAM,MAAO,kBAAmB,GAAIQ,EAAE,iBAAiB,CAAE,EACpL,oBAAC,KAAE,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,SAAU,OAAQ,GAAIA,EAAE,oBAAoB,CAAE,CACzI,EAGA,oBAAC,OAAI,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,OAAQ,QAAS,YAAa,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,sCAAuC,aAAc,MAAO,GACjO,oBAAC,OAAI,MAAO,CAAE,WAAYJ,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,QAAS,GAAIiB,EAAe,oBAAC,QAAK,MAAO,CAAE,MAAO,iBAAkB,GAAIH,CAAQ,EAAQI,CAAc,EAChN,oBAAC,OAAI,MAAO,CAAE,KAAM,YAAa,SAAU,QAAS,OAAQ,MAAO,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,sCAAuC,SAAU,QAAS,GACxL,oBAAC,OAAI,MAAO,CAAE,OAAQ,OAAQ,MAAOF,EAAY,WAAY,2DAA4D,EAAG,CAChI,EACA,oBAAC,OAAI,MAAO,CAAE,WAAYhB,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,WAAY,QAAS,GAAII,EAAE,mBAAoB,CAAE,SAAAW,CAAS,CAAC,CAAE,CACnN,EAGCb,EAAK,IAAI,CAACC,EAAGO,IAAM,CAChB,IAAMW,EAAOf,EAAKH,EAAE,MAAM,EACpBmB,EAASb,EAAOC,CAAC,EACjBa,EAAUb,EAAIG,EAAQ,EAC5B,OACI,oBAAC,OAAI,IAAKH,EAAG,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,oBAAqB,WAAY,aAAc,MAAO,GAG/G,oBAAC,OAAI,MAAO,CAAE,SAAU,UAAW,GAC9Ba,GAAW,oBAAC,OAAI,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,OAAQ,oBAAqB,MAAO,MAAO,WAAYF,EAAK,IAAK,EAAG,EAC1JF,EAAWhB,EAAE,MAAM,CACxB,EAGA,oBAAC,OAAI,MAAO,CAAE,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,aAAaA,EAAE,SAAW,UAAY,mCAAqC,2BAA2B,GAAI,SAAU,QAAS,GACtM,oBAAC,OACG,QAAS,IAAMQ,EAAOD,CAAC,EACvB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAKd,EAAW,OAAS,OAAQ,QAASA,EAAW,YAAc,YAAa,OAAQ,UAAW,WAAY,sBAAuB,EACtL,aAAe4B,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,4BAA8B,EACxF,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,aAAe,GAEzE,oBAAC,OAAI,MAAO,CAAE,KAAM,OAAQ,SAAU,OAAQ,UAAW,SAAU,QAAS,WAAY,aAAc,MAAO,WAAY,oBAAqB,OAAQ,sCAAuC,WAAYxB,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAOG,EAAE,SAAW,UAAY,mBAAqB,kBAAmB,GAAIA,EAAE,CAAE,EAClU,oBAAC,OAAI,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,GAC/B,oBAAC,OAAI,MAAO,CAAE,SAAUP,EAAW,SAAW,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,GAAIO,EAAE,KAAM,EACrI,CAACP,GAAY,oBAAC,OAAI,MAAO,CAAE,UAAW,MAAO,SAAU,SAAU,MAAO,kBAAmB,GAAIO,EAAE,GAAI,CAC1G,EACA,oBAAC,OAAI,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAKP,EAAW,MAAQ,MAAO,GAC7F,CAACA,GAAY,oBAAC,QAAK,MAAO,CAAE,WAAYI,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,SAAU,SAAU,OAAQ,UAAW,KAAM,GAAIG,EAAE,IAAK,EACjL,oBAAC,QAAK,MAAO,CAAE,MAAO,mBAAoB,QAAS,cAAe,WAAY,0CAA2C,UAAWmB,EAAS,iBAAmB,cAAe,GAC3K,oBAAC,OAAI,MAAM,KAAK,OAAO,KAAK,QAAQ,YAAY,KAAK,OAAO,OAAO,eAAe,YAAY,MAAM,cAAc,QAAQ,eAAe,SAAQ,oBAAC,QAAK,EAAE,eAAe,CAAE,CAC9K,CACJ,CACJ,EACCA,GACG,oBAAC,OAAI,MAAO,CAAE,QAAS,qBAAsB,UAAW,qCAAsC,GAC1F,oBAAC,OAAI,MAAO,CAAE,WAAYtB,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,QAAS,aAAc,OAAQ,WAAY,OAAQ,UAAW,qCAAsC,GAAII,EAAE,qBAAqB,CAAE,EAC9Q,oBAAC,OAAI,MAAO,CAAE,QAAS,OAAQ,oBAAqBR,EAAW,MAAQ,UAAW,IAAK,WAAY,GAC9FO,EAAE,SAAS,IAAI,CAACsB,EAAGC,IAChB,oBAAC,OAAI,IAAKA,EAAI,MAAO,CAAE,QAAS,OAAQ,WAAY,aAAc,IAAK,MAAO,GAC1E,oBAAC,QAAK,MAAO,CAAE,KAAM,OAAQ,UAAW,MAAO,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYL,EAAK,KAAM,EAAG,EAC3H,oBAAC,QAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,GAAII,CAAE,CACxF,CACH,CACL,CACJ,CAER,CACJ,CAER,CAAC,CAEL,CACJ,CAER,CAEA,OAAO,QAAU9B,GC1KjB,IAAMgC,GAAU,CACZ,CAAE,GAAI,OAAQ,IAAK,OAAQ,KAAM,cAAe,MAAO,MAAO,QAAS,oCAAqC,EAC5G,CAAE,GAAI,MAAO,IAAK,MAAO,KAAM,UAAW,MAAO,KAAM,QAAS,4CAA6C,EAC7G,CAAE,GAAI,MAAO,IAAK,MAAO,KAAM,WAAY,MAAO,KAAM,QAAS,4CAA6C,CAClH,EAEMC,GAAQC,GAAO,kBAAkBA,CAAE,OAMnCC,GAAc,qBACdC,GAAe,6BACfC,GAAgB,IAEhBC,GAAe,IAAM,CACvB,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAClC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC5E,EACM,CAACC,EAAKC,CAAM,EAAI,MAAM,SAAS,CAAC,EAChC,CAACC,EAAQC,CAAS,EAAI,MAAM,SAAS,EAAK,EAG1C,CAACC,EAAOC,CAAQ,EAAI,MAAM,SAAS,CAAC,EACpCC,EAAa,MAAM,OAAO,IAAI,EAC9BC,EAAa,MAAM,OAAO,IAAI,EAC9BC,EAAY,MAAM,OAAO,IAAI,EAEnC,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMX,EAAYU,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACTD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,EAChG,aAAaF,EAAU,OAAO,CAClC,CACJ,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CAClB,IAAIG,EAAQ,KACNC,EAAa,IAAM,CACrB,IAAMC,EAAK,OAAOnB,EAAW,EAC7B,OAAOA,EAAW,EAAI,EAClB,GAACmB,GAAM,KAAK,IAAI,EAAIA,EAAKjB,MAC7B,aAAae,CAAK,EAElBA,EAAQ,WAAW,IAAM,CACrB,IAAMG,EAAKP,EAAW,QACtB,GAAI,CAACO,EAAI,OACT,IAAMC,GAAS,OAAO,WAAW,kCAAkC,EAAE,QACrED,EAAG,eAAe,CAAE,SAAUC,GAAS,OAAS,SAAU,MAAO,QAAS,CAAC,CAC/E,EAAG,GAAG,EACV,EACA,OAAAH,EAAW,EACX,SAAS,iBAAiBjB,GAAciB,CAAU,EAC3C,IAAM,CACT,SAAS,oBAAoBjB,GAAciB,CAAU,EACrD,aAAaD,CAAK,CACtB,CACJ,EAAG,CAAC,CAAC,EAEL,IAAMK,EAAMzB,GAAQS,CAAG,EAEjBiB,EAAQC,GAAM,CAChB,IAAMC,GAAQD,EAAI3B,GAAQ,QAAUA,GAAQ,OACxC4B,IAASnB,IACbK,EAASa,EAAIlB,EAAM,EAAI,EAAE,EACzBC,EAAOkB,CAAI,EACXhB,EAAU,EAAK,EACnB,EAMMiB,EAAgBC,GAAM,CACxB,IAAMC,EAAID,EAAE,QAAQ,CAAC,EACrBf,EAAW,QAAU,CAAE,EAAGgB,EAAE,QAAS,EAAGA,EAAE,OAAQ,CACtD,EACMC,EAAcF,GAAM,CACtB,IAAMG,EAAQlB,EAAW,QAEzB,GADAA,EAAW,QAAU,KACjB,CAACkB,EAAO,OACZ,IAAMF,EAAID,EAAE,eAAe,CAAC,EACtBI,EAAKH,EAAE,QAAUE,EAAM,EACvBE,GAAKJ,EAAE,QAAUE,EAAM,EAC7B,GAAI,KAAK,IAAIC,CAAE,EAAI,IAAM,KAAK,IAAIA,CAAE,EAAI,KAAK,IAAIC,EAAE,EAAI,IAAK,OAC5D,IAAMC,EAAUC,GAAM,EAAIH,EAAK,EAAIA,EAAK,EACxCR,EAAKjB,GAAO2B,EAAU,EAAI,GAAG,CACjC,EAEME,EAAO,SAAY,CACrB,GAAI,CACA,MAAM,UAAU,UAAU,UAAUb,EAAI,OAAO,CACnD,MAAY,CACR,IAAMc,EAAK,SAAS,cAAc,UAAU,EAC5CA,EAAG,MAAQd,EAAI,QACf,SAAS,KAAK,YAAYc,CAAE,EAC5BA,EAAG,OAAO,EACV,GAAI,CAAE,SAAS,YAAY,MAAM,CAAG,MAAY,CAAC,CACjDA,EAAG,OAAO,CACd,CACA3B,EAAU,EAAI,EACd,aAAaK,EAAU,OAAO,EAC9BA,EAAU,QAAU,WAAW,IAAML,EAAU,EAAK,EAAG,IAAI,CAC/D,EAEM4B,EAAO,kDACPC,EAAO,mEACPC,EAAQ,CACV,aAAc,OAAQ,WAAY,eAAgB,OAAQ,qCAC9D,EAEMC,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OAAQ,KAAM,UACnB,MAAO,CAAE,GAAGD,EAAO,QAAS,OAAQ,IAAK,MAAO,QAAS,MAAO,aAAc,MAAO,CACzF,EAAG1C,GAAQ,IAAI,CAAC4C,EAAGjB,IAAM,CACrB,IAAMkB,EAAKlB,IAAMlB,EACjB,OAAO,MAAM,cAAc,SAAU,CACjC,IAAKmC,EAAE,GAAI,KAAM,SAAU,KAAM,MAAO,gBAAiBC,EACzD,QAAS,IAAMnB,EAAKC,CAAC,EACrB,MAAO,CACH,KAAM,QAAS,SAAU,EAAG,QAAS,cAAe,WAAY,SAAU,eAAgB,SAC1F,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,OAAQ,OAAQ,UAChF,WAAYa,EAAM,SAAU,OAAQ,WAAY,IAAK,WAAY,WACjE,WAAYK,EAAK,sBAAwB,cACzC,MAAOA,EAAK,mBAAqB,mBACjC,UAAWA,EAAK,mDAAqD,MACzE,CACJ,EAAG,CACC,MAAM,cAAc,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,MAAO,CAAE,EAAG,CACrH,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,IAAK5C,GAAK2C,EAAE,EAAE,EAAG,IAAK,GAAI,MAAO,GAAI,OAAQ,GAAI,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,OAAQ,MAAO,CAAE,CAAC,EACvJA,EAAE,OAAS,MAAM,cAAc,MAAO,CAClC,IAAK,QAAS,IAAK3C,GAAK2C,EAAE,KAAK,EAAG,IAAK,GAAI,MAAO,GAAI,OAAQ,GAC9D,MAAO,CACH,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAClG,OAAQ,kCAAmC,WAAY,qBAC3D,CACJ,CAAC,CACL,CAAC,EACDA,EAAE,GACN,CAAC,CACL,CAAC,CAAC,EAEIE,EAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,OAAQ,KAAM,SAAU,QAASR,EACtC,MAAO,CACH,KAAM,OAAQ,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,YACjF,aAAc,OAAQ,WAAYE,EAAM,SAAU,SAAU,WAAY,IAAK,OAAQ,UACrF,WAAY,4BAA6B,MAAO,mBAChD,OAAQ,qCAAsC,WAAY,UAC9D,EACA,aAAeV,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,2BAA6B,EACvF,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,2BAA6B,CAC3F,EAAG,CACCnB,EACM,MAAM,cAAc,MAAO,CACzB,IAAK,KAAM,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,wBAC9E,YAAa,IAAK,cAAe,QAAS,eAAgB,QAC1D,wBAAyB,CAAE,OAAQ,oCAAqC,CAC5E,CAAC,EACC,MAAM,cAAc,MAAO,CACzB,IAAK,KAAM,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAC9E,YAAa,EAAG,cAAe,QAAS,eAAgB,QACxD,wBAAyB,CAAE,OAAQ,wFAAyF,CAChI,CAAC,EACL,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,YAAa,QAAS,EAAGA,EAASoC,EAAE,eAAe,EAAIA,EAAE,aAAa,CAAC,CACnH,CAAC,EAEKC,EAAe,MAAM,cAAc,MAAO,CAC5C,IAAK,OACL,MAAO,CAAE,GAAGN,EAAO,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,kBAAmB,CACvG,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvE,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,aAAc,KAAM,CAAE,EAAGK,EAAE,cAActB,EAAI,EAAE,EAAE,CAAC,EACpK,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAOA,EAAI,QAAS,IAAK,MACnC,MAAO,CAAE,WAAYgB,EAAM,SAAU,OAAQ,MAAO,mBAAoB,cAAe,QAAS,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CACvK,EAAGhB,EAAI,QAAQ,MAAM,EAAG,CAAC,EAAI,SAAMA,EAAI,QAAQ,MAAM,EAAE,CAAC,CAC5D,CAAC,EACDqB,CACJ,CAAC,EAEKG,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,UAAW,OAAQ,SAAU,OAAQ,MAAO,kBAAmB,CAC/H,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,yBAC7E,YAAa,EAAG,cAAe,QAAS,eAAgB,QAAS,MAAO,CAAE,KAAM,MAAO,EACvF,wBAAyB,CAAE,OAAQ,+DAAgE,CACvG,CAAC,EACDF,EAAE,eAAetB,EAAI,EAAE,EAAE,CAC7B,CAAC,EAEKyB,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CAAE,KAAM,YAAa,SAAU,EAAG,QAAS3C,EAAW,gBAAkB,OAAQ,QAAS,OAAQ,cAAe,QAAS,CACpI,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,WAAYkC,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,MAAO,CACtK,EAAGM,EAAE,gBAAgB,CAAC,EACtB,MAAM,cAAc,KAAM,CACtB,IAAK,QACL,MAAO,CAAE,OAAQ,WAAY,SAAUxC,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAC3J,EAAGwC,EAAE,cAAc,CAAC,EACpB,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAC9F,EAAGA,EAAE,oBAAoB,CAAC,EAC1BJ,EACAK,EACAC,CACJ,CAAC,EAGKE,EAAUd,GAAM,EAAI,GAAK,EACzBe,EAAYvC,IAAU,EAAI,OAC1B,GAAGA,EAAQsC,EAAU,EAAI,UAAY,WAAW,iCAEhDE,EAAQ,MAAM,cAAc,MAAO,CACrC,IAAK,QACL,aAAAxB,EAAc,WAAAG,EACd,MAAO,CACH,SAAU,WAAY,MAAO,QAAS,OAAQ,QAAS,QAAS,OAAQ,aAAc,OAAQ,WAAY,OAC1G,UAAW,0EACX,OAAQ,sCAAuC,SAAU,SAAU,YAAa,QAAS,WAAY,MACzG,CACJ,EAAG,MAAM,cAAc,MAAO,CAC1B,IAAKP,EAAI,GACT,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,UAAW2B,CAAU,CACvF,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,KAAM,IAAK,qBAAqB3B,EAAI,EAAE,OAAQ,IAAKsB,EAAE,eAAgB,CAAE,KAAMtB,EAAI,IAAK,CAAC,EAC5F,MAAO,IAAK,OAAQ,IAAK,UAAW,GACpC,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,OAAQ,OAAQ,eAAgB,WAAY,CAC1F,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,SAAU,WAAY,KAAM,MAAO,IAAK,MAAO,UAAW,uBAAwB,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAC9M,EAAG,MAAM,cAAc,MAAO,CAAE,IAAKxB,GAAKwB,EAAI,EAAE,EAAG,IAAK,GAAI,MAAO,GAAI,OAAQ,GAAI,UAAW,GAAO,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,OAAQ,MAAO,CAAE,CAAC,CAAC,CACtK,CAAC,CAAC,EAGI6B,EAAO/C,GAAY,MAAM,cAAc,MAAO,CAChD,IAAK,OAAQ,cAAe,GAC5B,MAAO,CAAE,QAAS,OAAQ,eAAgB,SAAU,IAAK,MAAO,UAAW,MAAO,CACtF,EAAGP,GAAQ,IAAI,CAAC4C,EAAGjB,IAAM,MAAM,cAAc,OAAQ,CACjD,IAAKiB,EAAE,GACP,MAAO,CACH,MAAOjB,IAAMlB,EAAM,OAAS,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,WACnF,WAAYkB,IAAMlB,EAAM,yBAA2B,2BACvD,CACJ,CAAC,CAAC,CAAC,EAEG8C,EAAQ,MAAM,cAAc,MAAO,CACrC,IAAK,QACL,MAAO,CAAE,KAAM,WAAY,SAAUhD,EAAW,EAAI,QAAS,OAAQ,SAAU,QAASA,EAAW,iBAAmB,OAAQ,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,QAAS,CAC3N,EAAG,CAAC8C,EAAOC,CAAI,CAAC,EAEVE,GAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CACH,MAAO,OAAQ,SAAU,SAAU,SAAU,WAAY,SAAU,SAAU,aAAc,OAC3F,WAAY,iHACZ,OAAQ,sCAAuC,QAAS,OAAQ,SAAU,OAAQ,WAAY,UAC9F,UAAW,oCACf,CACJ,EAAG,CACCN,EACAK,CACJ,CAAC,EAED,OAAO,MAAM,cAAc,UAAW,CAClC,GAAI,SAAU,IAAKvC,EACnB,MAAO,CACH,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SACtE,WAAY,eAAgB,MAAO,mBAAoB,WAAYwB,EACnE,QAASjC,EAAW,YAAc,WACtC,CACJ,EAAG,CACC,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OAAQ,mXAGoB,CAAE,CAAC,EACpGiD,EACJ,CAAC,CACL,EAEAlD,GAAa,YAAcH,GAC3BG,GAAa,aAAeF,GAE5B,OAAO,aAAeE,GC5StB,IAAMmD,GAAe,IAAM,CACvB,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAClC,OAAO,OAAW,KAAe,OAAO,WAAW,mBAAmB,EAAE,OAC5E,EAEA,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAK,OAAO,WAAW,mBAAmB,EAC1CC,EAAW,IAAMF,EAAYC,EAAG,OAAO,EAC7C,OAAAA,EAAG,iBAAmBA,EAAG,iBAAiB,SAAUC,CAAQ,EAAID,EAAG,YAAYC,CAAQ,EAChF,IAAM,CACTD,EAAG,oBAAsBA,EAAG,oBAAoB,SAAUC,CAAQ,EAAID,EAAG,eAAeC,CAAQ,CACpG,CACJ,EAAG,CAAC,CAAC,EAEL,IAAMC,EAAS,mBAETC,EAAe,yBACfC,EAAO,kDAEPC,EAAY,mDACZC,EAAc,kCAEdC,EAAY,MAAM,cAAc,IAAK,CACvC,IAAK,KACL,KAAMF,EACN,OAAQ,SACR,IAAK,sBACL,MAAO,CACH,QAAS,cAAe,WAAY,SAAU,IAAK,OAAQ,QAAS,YACpE,aAAc,OAAQ,WAAYF,EAAc,MAAO,sBAAuB,eAAgB,OAC9F,SAAU,SAAU,WAAY,IAAK,cAAe,SACpD,UAAW,8CAA+C,WAAY,SACtE,WAAY,kCAChB,EACA,aAAeK,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAa,sBAAuBA,EAAE,cAAc,MAAM,UAAY,kBAAoB,EACvI,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,WAAaL,EAAcK,EAAE,cAAc,MAAM,UAAY,MAAQ,CACtH,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,eAC7D,wBAAyB,CAAE,OAAQ,ilBAAklB,CACznB,CAAC,EACDC,EAAE,kBAAkB,CACxB,CAAC,EAEKC,EAAc,MAAM,cAAc,IAAK,CACzC,IAAK,KACL,KAAMJ,EACN,IAAK,sBACL,MAAO,CACH,QAAS,cAAe,WAAY,SAAU,IAAK,OAAQ,QAAS,YACpE,aAAc,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,eAAgB,OAC1G,SAAU,SAAU,WAAY,IAAK,cAAe,SACpD,OAAQ,qCAAsC,WAAY,SAC1D,WAAY,kCAChB,EACA,aAAeE,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,4BAA6BA,EAAE,cAAc,MAAM,WAAa,2BAA6B,EACxJ,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,YAAc,2BAA4BA,EAAE,cAAc,MAAM,WAAa,2BAA6B,CAC3J,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAC7E,YAAa,IAAK,cAAe,QAAS,eAAgB,QAC1D,wBAAyB,CAAE,OAAQ,yGAA0G,CACjJ,CAAC,EACDC,EAAE,oBAAoB,CAC1B,CAAC,EAEKE,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CACH,SAAU,WAAY,SAAU,SAAU,SAAU,QAAS,MAAO,OACpE,aAAc,OACd,WAAY,yGACZ,OAAQ,sCACR,QAASb,EAAW,iBAAmB,iBACvC,UAAW,SAAU,UAAW,wEACpC,CACJ,EAAG,CAEC,MAAM,cAAc,MAAO,CACvB,IAAK,WACL,MAAO,CAAE,SAAU,WAAY,IAAK,EAAG,KAAM,MAAO,UAAW,mBAAoB,MAAO,QAAS,OAAQ,MAAO,WAAY,mFAAoF,CACtN,CAAC,EAED,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,IAAK,2BACL,IAAK,YACL,MAAO,CAAE,QAAS,eAAgB,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,aAAc,OAAQ,UAAW,mCAAoC,CAChK,CAAC,EAED,MAAM,cAAc,KAAM,CACtB,IAAK,QACL,MAAO,CAAE,OAAQ,WAAY,SAAUA,EAAW,OAAS,OAAQ,WAAY,IAAK,cAAe,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAC3J,EAAGW,EAAE,iBAAiB,CAAC,EAEvB,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,MAAO,CAAE,OAAQ,cAAe,SAAU,QAAS,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CACrH,EAAGA,EAAE,uBAAuB,CAAC,EAE7B,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,IAAK,OAAQ,eAAgB,SAAU,SAAU,MAAO,CACtF,EAAG,CAACF,EAAWG,CAAW,CAAC,EAQ3B,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CACH,QAAS,OACT,eAAgBZ,EAAW,SAAW,WACtC,UAAW,MACf,CACJ,EAAG,MAAM,cAAc,IAAK,CACxB,KAAM,sCACN,OAAQ,SACR,IAAK,sBACL,aAAc,6BACd,MAAO,CAAE,QAAS,cAAe,QAAS,GAAK,WAAY,aAAc,EACzE,aAAeU,GAAM,CAAEA,EAAE,cAAc,MAAM,QAAU,CAAG,EAC1D,aAAeA,GAAM,CAAEA,EAAE,cAAc,MAAM,QAAU,EAAK,CAChE,EAAG,MAAM,cAAc,MAAO,CAC1B,IAAK,gCACL,IAAK,6BACL,MAAO,IACP,OAAQ,GACR,QAAS,OACT,MAAO,CAAE,QAAS,OAAQ,CAC9B,CAAC,CAAC,CAAC,CACP,CAAC,EAED,OAAO,MAAM,cAAc,UAAW,CAClC,MAAO,CACH,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SACtE,WAAY,eAAgB,WAAYJ,EACxC,QAASN,EAAW,YAAc,WACtC,CACJ,EAAG,CACC,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OAAQ,kGAAmG,CAAE,CAAC,EACnLa,CACJ,CAAC,CACL,EAEA,OAAO,aAAed,GCvJtB,IAAMe,GAAwB,CAAC,CAAE,cAAAC,EAAe,YAAAC,EAAa,qBAAAC,EAAuB,CAAC,EAAG,mBAAAC,EAAoB,aAAAC,EAAe,EAAK,IAAM,CAClI,GAAM,CAACC,EAAUC,CAAW,EAAI,MAAM,SAAS,EAAK,EAC9C,CAACC,EAAWC,CAAY,EAAI,MAAM,SAAS,CAAE,QAAS,CAAC,EAAG,UAAW,CAAC,CAAE,CAAC,EACzEC,EAAe,MAAM,OAAO,IAAI,EAGtC,MAAM,UAAU,IAAM,CAClB,GAAI,CAACR,GAAe,CAACD,EAAe,OAOpC,IAAMU,EAAW,YALO,IAAM,CAC1B,IAAMC,EAAmBX,EAAc,iBAAiB,EACxDQ,EAAaG,CAAgB,CACjC,EAE8C,GAAG,EACjD,MAAO,IAAM,cAAcD,CAAQ,CACvC,EAAG,CAACT,EAAaD,CAAa,CAAC,EAG/B,MAAM,UAAU,IAAM,CACdC,GACJO,EAAa,CAAE,QAAS,CAAC,EAAG,UAAW,CAAC,CAAE,CAAC,CAC/C,EAAG,CAACP,CAAW,CAAC,EAEhB,IAAMW,EAAmB,MAAOC,GAAU,CACtC,GAAI,CAACZ,GAAe,CAACD,EAAe,CAChC,MAAM,qTAA2D,EACjE,MACJ,CAGA,GAAI,CAACA,EAAc,YAAY,GAAK,CAACA,EAAc,WAAY,CAC3D,MAAM,mcAAsF,EAC5F,MACJ,CAEA,QAAWc,KAAQD,EACf,GAAI,CAEA,IAAME,EAAaf,EAAc,aAAac,CAAI,EAClD,GAAI,CAACC,EAAW,QAAS,CACrB,IAAMC,EAAeD,EAAW,OAAO,KAAK,IAAI,EAChD,MAAM,4BAAQD,EAAK,IAAI,iIAA6BE,CAAY,EAAE,EAClE,QACJ,CAEA,MAAMhB,EAAc,SAASc,CAAI,CACrC,OAASG,EAAO,CAIRA,EAAM,QAAQ,SAASC,EAAE,eAAe,CAAC,EACzC,MAAM,4BAAQJ,EAAK,IAAI,4XAA2E,EAC3FG,EAAM,QAAQ,SAASC,EAAE,eAAe,CAAC,GAAKD,EAAM,QAAQ,SAAS,iBAAiB,EAC7F,MAAM,4BAAQH,EAAK,IAAI,2FAAqBG,EAAM,OAAO,EAAE,EACpDA,EAAM,QAAQ,SAASC,EAAE,oBAAoB,CAAC,EACrD,MAAM,6ZAA8E,EAC7ED,EAAM,QAAQ,SAASC,EAAE,qBAAqB,CAAC,EACtD,MAAM,qDAAaJ,EAAK,IAAI,uGAAuBG,EAAM,OAAO,EAAE,EAElE,MAAM,wHAAyBH,EAAK,IAAI,KAAKG,EAAM,OAAO,EAAE,CAEpE,CAER,EAEME,EAAcC,GAAM,CACtBA,EAAE,eAAe,EACjBd,EAAY,EAAK,EAEjB,IAAMO,EAAQ,MAAM,KAAKO,EAAE,aAAa,KAAK,EAC7CR,EAAiBC,CAAK,CAC1B,EAEMQ,EAAkBD,GAAM,CAC1BA,EAAE,eAAe,EACjBd,EAAY,EAAI,CACpB,EAEMgB,EAAmBF,GAAM,CAC3BA,EAAE,eAAe,EACjBd,EAAY,EAAK,CACrB,EAEMiB,EAAyBH,GAAM,CACjC,IAAMP,EAAQ,MAAM,KAAKO,EAAE,OAAO,KAAK,EACvCR,EAAiBC,CAAK,EACtBO,EAAE,OAAO,MAAQ,EACrB,EAEMI,EAAkBC,GAAU,CAC9B,GAAIA,IAAU,EAAG,MAAO,MACxB,IAAMC,EAAI,KACJC,EAAQ,CAAC,IAAK,KAAM,KAAM,IAAI,EAC9BC,EAAI,KAAK,MAAM,KAAK,IAAIH,CAAK,EAAI,KAAK,IAAIC,CAAC,CAAC,EAClD,OAAO,YAAYD,EAAQ,KAAK,IAAIC,EAAGE,CAAC,GAAG,QAAQ,CAAC,CAAC,EAAI,IAAMD,EAAMC,CAAC,CAC1E,EAEMC,EAAiBC,GAAW,CAC9B,OAAQA,EAAQ,CACZ,IAAK,gBACL,IAAK,YACD,MAAO,qBACX,IAAK,eACL,IAAK,YACD,MAAO,+BACX,IAAK,aACD,MAAO,+BACX,IAAK,YACD,MAAO,8BACX,IAAK,SACD,MAAO,4BACX,QACI,MAAO,eACf,CACJ,EAEMC,EAAiBD,GAAW,CAC9B,OAAQA,EAAQ,CACZ,IAAK,gBACD,MAAO,kEACX,IAAK,eACD,MAAO,sDACX,IAAK,YACD,MAAO,4DACX,IAAK,aACD,MAAO,yEACX,IAAK,YACD,MAAO,yDACX,IAAK,SACD,MAAO,uCACX,QACI,OAAOA,CACf,CACJ,EAKME,EAAiB,CAACC,EAAUC,IAAU,CACxC,IAAMC,EAAQF,EAAS,aAAe,EAChCG,EAAOH,EAAS,mBAAqB,EACrCI,EAASJ,EAAS,SAAW,YAC7BK,EAAUH,EAAQ,EAAI,KAAK,IAAIA,EAAO,EAAE,EAAI,GAC9CI,EACJ,OAAIF,EAAQE,EAASD,EACZH,EAAQ,EAAGI,EAAS,KAAK,MAAOH,EAAOD,EAASG,CAAO,EAC3DC,EAAS,KAAK,OAAQN,EAAS,UAAY,GAAK,IAAOK,CAAO,EACnEC,EAAS,KAAK,IAAI,EAAG,KAAK,IAAID,EAASC,CAAM,CAAC,EAEvC,MAAM,cAAc,MAAO,CAAE,IAAK,UAAW,EAAG,CACnD,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,IAAK,MAAO,aAAc,KAAM,CAChF,EAAG,MAAM,KAAK,CAAE,OAAQD,CAAQ,EAAG,CAACE,GAAGZ,IAAM,MAAM,cAAc,MAAO,CACpE,IAAKA,EACL,MAAO,CACH,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAC7C,WAAYA,EAAIW,EAASL,EAAQ,4BACjC,OAAQ,cAAgBN,EAAIW,EAAS,cAAgB,6BACrD,UAAWX,EAAIW,EAAS,WAAWL,CAAK,KAAO,OAC/C,WAAY,0CAChB,CACJ,CAAC,CAAC,CAAC,EACH,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,SAAU,SAAU,MAAO,kBAAmB,CACnI,EAAG,CACC,MAAM,cAAc,OAAQ,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAChH,MAAM,cAAc,IAAK,CAAE,IAAK,OAAQ,UAAWL,EAAcI,EAAS,MAAM,CAAE,CAAC,EACnFF,EAAcE,EAAS,MAAM,CACjC,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,QACL,MAAO,CAAE,WAAY,4CAA6C,MAAOQ,EAAOR,CAAQ,EAAIC,EAAQ,kBAAmB,CAC3H,EAAGC,EAAQ,EAAI,GAAG,KAAK,IAAIC,EAAMD,CAAK,CAAC,MAAMA,CAAK,UAAY,IAAIF,EAAS,UAAY,GAAG,QAAQ,CAAC,CAAC,GAAG,CAC3G,CAAC,CACL,CAAC,CACL,EACMQ,EAAUvB,GAAMA,EAAE,SAAW,YAE7BwB,EAAyB,MAAOC,EAAQC,IAAa,CACnD,OAAOzC,GAAuB,YAC9B,MAAMA,EAAmBwC,EAAQC,CAAQ,EAE7CpC,EAAaR,EAAc,iBAAiB,CAAC,CACjD,EAEA,OAAKC,EAOqBD,GAAiBA,EAAc,YAAY,GAAKA,EAAc,WAcjF,MAAM,cAAc,MAAO,CAC9B,UAAW,yBACf,EAAG,CAGCI,GAAgB,MAAM,cAAc,MAAO,CACvC,IAAK,YACL,OAAQe,EACR,WAAYE,EACZ,YAAaC,EACb,MAAO,CACH,SAAU,WACV,OAAQ,iBAAmBjB,EAAW,kCAAoC,6BAC1E,aAAc,OACd,WAAYA,EAAW,mCAAqC,oBAC5D,QAAS,YACT,UAAW,SACX,WAAY,UAChB,CACJ,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,WACL,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,OAAQ,cAAe,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,4BAA6B,OAAQ,qCAAsC,CACvN,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,+BAAgC,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,CAAC,EAClI,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGa,EAAE,WAAW,CAAC,EACpI,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGA,EAAE,eAAe,CAAC,EACvI,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,KAAM,SACN,QAAS,IAAMT,EAAa,SAAS,MAAM,EAC3C,UAAW,UACX,MAAO,CAAE,UAAW,OAAQ,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CACpS,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,qBAAsB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACnGS,EAAE,aAAa,CACnB,CAAC,CACL,CAAC,EAGDd,GAAgB,MAAM,cAAc,QAAS,CACzC,IAAK,aACL,IAAKK,EACL,KAAM,OACN,SAAU,GACV,UAAW,SACX,SAAUc,CACd,CAAC,EAEDrB,EAAqB,OAAS,GAAK,MAAM,cAAc,MAAO,CAC1D,IAAK,mBACL,UAAW,gBACf,EAAGA,EAAqB,IAAIY,GAAQ,MAAM,cAAc,MAAO,CAC3D,IAAKA,EAAK,OACV,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,QAAS,WAAY,CACxI,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CACtF,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,mCAAoC,OAAQ,4CAA6C,CAAE,EAC7P,MAAM,cAAc,IAAK,CAAE,UAAW,yBAA0B,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,CAC5H,EACA,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,CAAE,CAAE,EAAG,CAChE,MAAM,cAAc,MAAO,CACvB,IAAK,QACL,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAC1E,EAAGI,EAAE,eAAe,CAAC,EACrB,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,MAAO,CAAE,SAAU,SAAU,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAC/H,EAAG,GAAGJ,EAAK,QAAQ,SAAMU,EAAeV,EAAK,QAAQ,CAAC,SAAMA,EAAK,QAAQ,EAAE,CAC/E,CAAC,CACL,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,QAAS,OAAQ,IAAK,KAAM,CACzC,EAAG,CACC,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,QAAS,IAAM4B,EAAuB5B,EAAK,OAAQ,EAAI,EACvD,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,aAAc,MAAO,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,QAAS,WAAY,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAC1P,EAAG,CAAC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAAGI,EAAE,aAAa,CAAC,CAAC,EACrH,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,QAAS,IAAMwB,EAAuB5B,EAAK,OAAQ,EAAK,EACxD,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,aAAc,MAAO,OAAQ,yCAA0C,WAAY,gCAAiC,MAAO,gBAAiB,QAAS,WAAY,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAC7R,EAAG,CAAC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAAGI,EAAE,aAAa,CAAC,CAAC,CACzH,CAAC,CACL,CAAC,CAAC,CAAC,GAGFX,EAAU,QAAQ,OAAS,GAAKA,EAAU,UAAU,OAAS,IAAM,MAAM,cAAc,MAAO,CAC3F,IAAK,YACL,UAAW,uBACf,EAAG,CACC,MAAM,cAAc,KAAM,CACtB,IAAK,QACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,aAAc,MAAO,CACrJ,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,UAAW,oBACX,MAAO,CAAE,SAAU,MAAO,CAC9B,CAAC,EACDW,EAAE,YAAY,CAClB,CAAC,EAGD,GAAGX,EAAU,QAAQ,IAAI0B,GACrB,MAAM,cAAc,MAAO,CACvB,IAAK,QAAQA,EAAS,MAAM,GAC5B,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,QAAS,OAAQ,aAAc,KAAM,CACxJ,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,SACL,UAAW,wCACf,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,UAAW,mBACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,UAAW,kBACX,MAAO,CAAE,MAAO,mBAAoB,SAAU,OAAQ,gBAAiB,KAAM,CACjF,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,sBACX,MAAO,CAAE,MAAO,kBAAmB,CACvC,EAAGA,EAAS,QAAQ,EACpB,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,eACX,MAAO,CAAE,MAAO,kBAAmB,CACvC,EAAGT,EAAeS,EAAS,QAAQ,CAAC,CACxC,CAAC,EACD,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,QAAS,IAAMjC,EAAc,mBAAmBiC,EAAS,MAAM,EAC/D,UAAW,yCACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,UAAW,cACf,CAAC,CACL,CAAC,CACL,CAAC,EACDD,EAAeC,EAAU,kBAAkB,CAC/C,CAAC,CACL,EAGA,GAAG1B,EAAU,UAAU,IAAI0B,GACvB,MAAM,cAAc,MAAO,CACvB,IAAK,QAAQA,EAAS,MAAM,GAC5B,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,QAAS,OAAQ,aAAc,KAAM,CACxJ,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,SACL,UAAW,wCACf,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,OACL,UAAW,mBACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,UAAW,oBACX,MAAO,CAAE,MAAO,kBAAmB,SAAU,OAAQ,gBAAiB,KAAM,CAChF,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,sBACX,MAAO,CAAE,MAAO,kBAAmB,CACvC,EAAGA,EAAS,QAAQ,EACpB,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,eACX,MAAO,CAAE,MAAO,kBAAmB,CACvC,EAAGT,EAAeS,EAAS,QAAQ,CAAC,CACxC,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,UAAW,UAAW,6BAA8B,EAAG,CACrFA,EAAS,SAAW,YAAc,MAAM,cAAc,SAAU,CAC5D,IAAK,WACL,UAAW,gEACX,QAAS,SAAY,CACjB,GAAI,CACA,IAAMY,EAAM,MAAM7C,EAAc,yBAAyBiC,EAAS,MAAM,EACxE,GAAI,CAACY,EAAK,CAAE,MAAM3B,EAAE,WAAW,CAAC,EAAG,MAAQ,CAC3C,IAAM4B,EAAI,SAAS,cAAc,GAAG,EACpCA,EAAE,KAAOD,EACTC,EAAE,SAAWb,EAAS,UAAY,OAClCa,EAAE,MAAM,EACR,WAAW,IAAM9C,EAAc,4BAA4B6C,CAAG,EAAG,GAAK,CAC1E,OAASzB,EAAG,CACR,MAAMA,EAAE,SAAWF,EAAE,WAAW,CAAC,CACrC,CACJ,CACJ,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,sBAAuB,CAAC,EACxEA,EAAE,eAAe,CACrB,CAAC,EAAI,KACL,MAAM,cAAc,SAAU,CAC1B,IAAK,SACL,QAAS,IAAMlB,EAAc,mBAAmBiC,EAAS,MAAM,EAC/D,UAAW,yCACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,UAAW,cACf,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAAC,EACDD,EAAeC,EAAU,iBAAiB,CAC9C,CAAC,CACL,CACJ,CAAC,CACL,CAAC,EApOU,MAAM,cAAc,MAAO,CAC9B,UAAW,iCACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,OACL,UAAW,kCACf,CAAC,EACD,sdACJ,CAAC,EAjBM,MAAM,cAAc,MAAO,CAC9B,UAAW,4BACf,EAAGf,EAAE,qBAAqB,CAAC,CA4OnC,EAGA,OAAO,sBAAwBnB,GCraxB,IAAMgD,GAAa,OAAO,OAAO,CACpC,YAAa,GACb,oBAAqB,EACrB,kBAAmB,GACvB,CAAC,EAGYC,GAAsB,OAAO,OAAO,CAAC,OAAQ,QAAS,OAAQ,OAAO,CAAC,EAE7EC,GAAY,qBAGZC,GAAU,6CACVC,GAAe,yBAIrB,SAASC,GAAgBC,EAAO,CAC5B,QAASC,EAAI,EAAGA,EAAID,EAAM,OAAQC,IAAK,CACnC,IAAMC,EAAOF,EAAM,WAAWC,CAAC,EAC/B,GAAIC,EAAO,IAAQA,IAAS,IAAM,MAAO,EAC7C,CACA,MAAO,EACX,CAMO,SAASC,GAAeC,EAAK,CAChC,GAAI,OAAOA,GAAQ,SAAU,OAAOC,EAAE,kBAAkB,EACxD,IAAMC,EAAUF,EAAI,KAAK,EACzB,GAAI,CAACE,EAAS,OAAOD,EAAE,cAAc,EACrC,GAAIC,EAAQ,OAASZ,GAAW,kBAAmB,OAAOW,EAAE,gBAAgB,EAC5E,GAAIN,GAAgBO,CAAO,EAAG,OAAOD,EAAE,iBAAiB,EAExD,IAAME,EAASD,EAAQ,MAAMV,EAAS,EACtC,GAAI,CAACW,EACD,OAAOF,EAAE,kBAAkB,EAI/B,IAAMG,EAAOF,EAAQ,MAAMC,EAAO,CAAC,EAAE,MAAM,EACrC,CAACE,EAAUC,EAAO,GAAGC,CAAK,EAAIH,EAAK,MAAM,GAAG,EAClD,OAAIG,EAAM,OAAS,EAAUN,EAAE,iBAAiB,EAC3CI,EACAZ,GAAQ,KAAKY,CAAQ,EAEtBC,IAAU,QAAa,CAACZ,GAAa,KAAKY,CAAK,EACxCL,EAAE,qBAAqB,EAG3B,KAN6BA,EAAE,gBAAgB,EADhCA,EAAE,eAAe,CAQ3C,CAEO,SAASO,GAAUR,EAAK,CAC3B,OAAO,OAAOA,GAAQ,UAAY,YAAY,KAAKA,EAAI,KAAK,CAAC,CACjE,CAEA,SAASS,GAAeb,EAAOc,EAAO,CAClC,OAA2Bd,GAAU,MAAQA,IAAU,GAAW,KAC9D,OAAOA,GAAU,SAAiB,GAAGc,CAAK,oBAC1Cd,EAAM,OAASN,GAAW,kBAA0B,GAAGoB,CAAK,eAC5Df,GAAgBC,CAAK,EAAU,GAAGc,CAAK,+BACpC,IACX,CAOO,SAASC,GAAoBC,EAAS,CACzC,IAAMC,EAAS,CAAC,EACVC,EAAW,CAAC,EACZC,EAAU,CAAC,EAEjB,OAAK,MAAM,QAAQH,CAAO,EAGtBA,EAAQ,SAAW,EACZ,CAAE,QAAS,CAAC,EAAG,OAAQ,CAAC,EAAG,SAAU,CAAC,CAAE,EAE/CA,EAAQ,OAAStB,GAAW,aAC5BuB,EAAO,KAAKZ,EAAE,iBAAkB,CAAE,IAAKX,GAAW,WAAY,CAAC,CAAC,EACzD,CAAE,QAAS,CAAC,EAAG,OAAAuB,EAAQ,SAAAC,CAAS,IAG3CF,EAAQ,QAAQ,CAACI,EAAOC,IAAU,CAC9B,IAAMP,EAAQ,WAAWO,EAAQ,CAAC,GAClC,GAAI,CAACD,GAAS,OAAOA,GAAU,SAAU,CACrCH,EAAO,KAAKZ,EAAE,sBAAuB,CAAE,MAAAS,CAAM,CAAC,CAAC,EAC/C,MACJ,CAEA,IAAMQ,EAAU,MAAM,QAAQF,EAAM,IAAI,EAAIA,EAAM,KAAO,CAACA,EAAM,IAAI,EACpE,GAAIE,EAAQ,SAAW,GAAKA,EAAQ,OAAS5B,GAAW,oBAAqB,CACzEuB,EAAO,KAAKZ,EAAE,kBAAmB,CAAE,MAAAS,EAAO,IAAKpB,GAAW,mBAAoB,CAAC,CAAC,EAChF,MACJ,CAEA,IAAM6B,EAAY,CAAC,EACfC,EAAe,GACnB,QAAWC,KAAUH,EAAS,CAC1B,IAAMI,EAAMvB,GAAesB,CAAM,EACjC,GAAIC,EAAK,CACLT,EAAO,KAAK,GAAGH,CAAK,KAAKY,CAAG,EAAE,EAC9B,QACJ,CACA,IAAMpB,EAAUmB,EAAO,KAAK,EAC5BF,EAAU,KAAKjB,CAAO,EAClBM,GAAUN,CAAO,IAAGkB,EAAe,GAC3C,CACA,GAAID,EAAU,SAAW,EAAG,OAE5B,IAAMI,EAAUd,GAAeO,EAAM,SAAU,GAAGN,CAAK,WAAW,EAC9Da,GAASV,EAAO,KAAKU,CAAO,EAChC,IAAMC,EAAUf,GAAeO,EAAM,WAAY,GAAGN,CAAK,aAAa,EAClEc,GAASX,EAAO,KAAKW,CAAO,EAEhC,IAAMC,EAAS,CAAE,KAAMN,EAAU,SAAW,EAAIA,EAAU,CAAC,EAAIA,CAAU,EACrEH,EAAM,WAAUS,EAAO,SAAW,OAAOT,EAAM,QAAQ,GACvDA,EAAM,aAAYS,EAAO,WAAa,OAAOT,EAAM,UAAU,GAE7DI,IAAiB,CAACK,EAAO,UAAY,CAACA,EAAO,aAC7CX,EAAS,KAAKb,EAAE,mBAAoB,CAAE,MAAAS,CAAM,CAAC,CAAC,EAGlDK,EAAQ,KAAKU,CAAM,CACvB,CAAC,EAEM,CAAE,QAAAV,EAAS,OAAAF,EAAQ,SAAAC,CAAS,GArDxB,CAAE,QAAS,CAAC,EAAG,OAAQ,CAACb,EAAE,iBAAiB,CAAC,EAAG,SAAU,CAAC,CAAE,CAsD3E,CAOO,SAASyB,GAAqBC,EAAM,CACvC,GAAI,OAAOA,GAAS,UAAY,CAACA,EAAK,KAAK,EACvC,MAAO,CAAE,QAAS,CAAC,EAAG,OAAQ,CAAC,EAAG,SAAU,CAAC,CAAE,EAGnD,IAAMzB,EAAUyB,EAAK,KAAK,EAC1B,GAAIzB,EAAQ,WAAW,GAAG,GAAKA,EAAQ,WAAW,GAAG,EAAG,CACpD,IAAI0B,EACJ,GAAI,CACAA,EAAS,KAAK,MAAM1B,CAAO,CAC/B,MAAQ,CACJ,MAAO,CAAE,QAAS,CAAC,EAAG,OAAQ,CAACD,EAAE,oBAAoB,CAAC,EAAG,SAAU,CAAC,CAAE,CAC1E,CACA,IAAM4B,EAAM,MAAM,QAAQD,CAAM,EAAIA,EAAS,CAACA,CAAM,EACpD,OAAOjB,GAAoBkB,CAAG,CAClC,CAGA,IAAMjB,EAAUV,EACX,MAAM;AAAA,CAAI,EACV,IAAI4B,GAAQA,EAAK,KAAK,CAAC,EACvB,OAAO,OAAO,EACd,IAAI9B,IAAQ,CAAE,KAAMA,CAAI,EAAE,EAC/B,OAAOW,GAAoBC,CAAO,CACtC,CAGO,SAASmB,GAAYhB,EAAS,CACjC,OAAK,MAAM,QAAQA,CAAO,EACnBA,EAAQ,KAAKU,IACH,MAAM,QAAQA,GAAQ,IAAI,EAAIA,EAAO,KAAO,CAACA,GAAQ,IAAI,GAC1D,KAAKjB,EAAS,CAC7B,EAJmC,EAKxC,CCzKA,IAAMwB,GAAQ,OAAO,MAEfC,GAAc,CAChB,4BACA,6BACA,2CACA,GACA,gDACA,kFACJ,EAAE,KAAK;AAAA,CAAI,EAEX,eAAeC,GAAeC,EAASC,EAAY,IAAM,CACrD,IAAMC,EAAQ,CAAE,KAAM,EAAG,MAAO,EAAG,MAAO,CAAE,EAC5C,GAAI,OAAO,kBAAsB,IAC7B,MAAO,CAAE,GAAGA,EAAO,MAAOC,EAAE,oBAAoB,CAAE,EAEtD,IAAIC,EACJ,GAAI,CACAA,EAAK,IAAI,kBAAkB,CAAE,WAAYJ,CAAQ,CAAC,CACtD,OAASK,EAAO,CACZ,MAAO,CAAE,GAAGH,EAAO,MAAOG,EAAM,SAAWF,EAAE,gBAAgB,CAAE,CACnE,CAEA,OAAO,IAAI,QAASG,GAAY,CAC5B,IAAIC,EAAU,GACRC,EAAS,IAAM,CACjB,GAAI,CAAAD,EACJ,CAAAA,EAAU,GACV,aAAaE,CAAK,EAClB,GAAI,CAAEL,EAAG,MAAM,CAAG,MAAQ,CAAa,CACvCE,EAAQJ,CAAK,EACjB,EACMO,EAAQ,WAAWD,EAAQP,CAAS,EAE1CG,EAAG,eAAkBM,GAAU,CAC3B,GAAI,CAACA,EAAM,UAAW,CAAEF,EAAO,EAAG,MAAQ,CAC1C,IAAMG,EAAID,EAAM,UAAU,WAAa,GACnC,YAAY,KAAKC,CAAC,EAAGT,EAAM,OACtB,aAAa,KAAKS,CAAC,EAAGT,EAAM,QAC5B,aAAa,KAAKS,CAAC,GAAGT,EAAM,OACzC,EAEA,GAAI,CACAE,EAAG,kBAAkB,oBAAoB,EACzCA,EAAG,YAAY,EACV,KAAMQ,GAAUR,EAAG,oBAAoBQ,CAAK,CAAC,EAC7C,MAAM,IAAMJ,EAAO,CAAC,CAC7B,MAAQ,CACJA,EAAO,CACX,CACJ,CAAC,CACL,CAEA,IAAMK,GAAoB,CAAC,CAAE,OAAAC,EAAQ,QAAAC,EAAS,QAAAC,EAAS,SAAAC,EAAU,QAAAC,EAAS,SAAAC,EAAU,SAAAC,CAAS,IAAM,CAC/F,GAAI,CAACN,EAAQ,OAAO,KAEpB,GAAM,CAACO,EAAWC,CAAY,EAAIzB,GAAM,SAASmB,GAAS,WAAa,EAAK,EACtE,CAACO,EAAaC,CAAc,EAAI3B,GAAM,SAASmB,GAAS,aAAe,EAAE,EACzE,CAACS,EAAWC,CAAY,EAAI7B,GAAM,SAASmB,GAAS,cAAgB,YAAY,EAChF,CAACW,EAASC,CAAU,EAAI/B,GAAM,SAASmB,GAAS,WAAa,EAAK,EAClE,CAACa,EAAWC,CAAY,EAAIjC,GAAM,SAAS,MAAM,EACjD,CAACkC,EAAYC,CAAa,EAAInC,GAAM,SAAS,IAAI,EAEjDoC,EAASZ,EAAYa,GAAqBX,CAAW,EAAI,CAAE,QAAS,CAAC,EAAG,OAAQ,CAAC,EAAG,SAAU,CAAC,CAAE,EACjGY,EAAUC,GAAYH,EAAO,OAAO,EACpCI,EAAW,CAAChB,GAAcY,EAAO,QAAQ,OAAS,GAAKA,EAAO,OAAO,SAAW,EAEhFK,EAAa,SAAY,CAC3BR,EAAa,SAAS,EACtBE,EAAc,IAAI,EAClB,IAAMO,EAAS,MAAMxC,GAAekC,EAAO,OAAO,EAClDD,EAAcO,CAAM,EACpBT,EAAa,MAAM,CACvB,EAEMU,EAAc,IAAM,CACjBH,GACLnB,EACI,CACI,UAAAG,EACA,QAASA,EAAYY,EAAO,QAAU,CAAC,EACvC,YAAaR,EAAY,aAAe,WACxC,YAAAF,CACJ,EACAI,CACJ,CACJ,EAEMc,EAAe,SAAY,CACzBtB,GAAU,MAAMA,EAAS,EAC7BS,EAAW,EAAK,CACpB,EAGMc,EAAI7C,GAAM,cACV8C,EAAW,mBACXC,EAAU,kBAEVC,EAAiB,yBACjBC,GAAgB,wBAChBC,EAAO,mEAGPC,EAAY,CAACC,EAAUC,EAASC,EAAOC,EAAMC,IAAeX,EAAE,SAAU,CAC1E,KAAM,SAAU,QAAAQ,EAChB,MAAO,OAAO,OAAO,CACjB,MAAO,OAAQ,UAAW,QAAS,QAAS,OAAQ,WAAY,aAAc,IAAK,OACnF,QAAS,YAAa,aAAc,OACpC,OAAQ,aAAaD,EAAW,mCAAqC,2BAA2B,GAChG,WAAYA,EAAW,mCAAqC,oBAC5D,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,WAAY,WAAY,aAAc,MACtG,EAAGI,GAAc,CAAC,CAAC,CACvB,EAAG,CACCX,EAAE,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,UAAW,MAAO,aAAc,MAAO,OAAQ,eAAeO,EAAWN,EAAW,2BAA2B,GAAI,QAAS,OAAQ,WAAY,QAAS,CAAE,EACtOD,EAAE,OAAQ,CAAE,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYO,EAAWJ,EAAiB,aAAc,CAAE,CAAC,CAAC,EACrIH,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,CAAE,CAAE,EAAG,CACzCA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGS,CAAK,EACxHT,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGU,CAAI,CAC9H,CAAC,CACL,CAAC,EAGKE,EAAY,CAACC,EAAIL,EAASC,EAAOC,EAAMI,EAAQC,IAAUf,EAAE,SAAU,CACvE,KAAM,SAAU,QAAAQ,EAChB,MAAO,CACH,MAAO,OAAQ,UAAW,QAAS,QAAS,OAAQ,WAAY,aAAc,IAAK,OACnF,QAAS,YAAa,aAAc,OACpC,OAAQ,aAAaK,EAAK,iCAAmC,2BAA2B,GACxF,WAAYA,EAAK,kCAAoC,oBACrD,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,WAAY,WAAY,aAAc,MACtG,CACJ,EAAG,CACCb,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,CAAE,CAAE,EAAG,CACzCA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACnFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGS,CAAK,EACtGM,GAASf,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAS,QAAS,UAAW,aAAc,MAAO,WAAY,iCAAkC,OAAQ,2CAA4C,CAAE,EAAGa,CAAK,CACpP,CAAC,EACDf,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGU,CAAI,CAC/I,CAAC,EACDV,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAYa,EAAMC,GAAUV,GAAiB,4BAA6B,OAAQ,aAAaS,EAAMC,GAAUZ,EAAW,2BAA2B,GAAI,SAAU,WAAY,WAAY,WAAY,UAAW,KAAM,CAAE,EACzTF,EAAE,OAAQ,CAAE,MAAO,CAAE,SAAU,WAAY,IAAK,MAAO,iBAAkB,MAAO,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY,OAAQ,UAAWa,EAAK,cAAc,GAAKG,GAAU,CAAC,MAAQ,gBAAiB,WAAY,gBAAiB,CAAE,CAAC,CAAC,CACxQ,CAAC,EAGKC,EAAO,CAAC,EAMd,GALAA,EAAK,KAAKjB,EAAE,IAAK,CAAE,IAAK,QAAS,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAC3HvC,EAAE,WAAW,CAAC,CAAC,EACnBwD,EAAK,KAAKX,EAAU,CAAC3B,EAAW,IAAMC,EAAa,EAAK,EAAGnB,EAAE,iBAAiB,EAAGA,EAAE,gBAAgB,CAAC,CAAC,EACrGwD,EAAK,KAAKX,EAAU3B,EAAW,IAAMC,EAAa,EAAI,EAAGnB,EAAE,iBAAiB,EAAGA,EAAE,iBAAkB,CAAE,IAAKyD,GAAW,WAAY,CAAC,EAAGvC,EAAY,CAAE,aAAc,MAAO,EAAI,IAAI,CAAC,EAE7KA,EAAW,CACX,IAAMwC,EAAS,CAAC,EAChBA,EAAO,KAAKnB,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,SAAU,SAAU,aAAc,MAAO,CAAE,EACxLA,EAAE,WAAY,CACV,IAAK,MACL,MAAOnB,EAAa,SAAWuC,GAAMtC,EAAesC,EAAE,OAAO,KAAK,EAAG,KAAM,EAAG,WAAY,GAAO,aAAc,MAC/G,YAAahE,GACb,MAAO,CAAE,MAAO,OAAQ,OAAQ,WAAY,OAAQ,OAAQ,QAAS,OAAQ,WAAY,cAAe,MAAO,sBAAuB,WAAYiD,EAAM,SAAU,OAAQ,WAAY,KAAM,QAAS,YAAa,UAAW,OAAQ,CACzO,CAAC,CAAC,CAAC,EACHd,EAAO,OAAO,OAAS,GACvB4B,EAAO,KAAKnB,EAAE,KAAM,CAAE,IAAK,MAAO,MAAO,CAAE,OAAQ,WAAY,mBAAoB,OAAQ,MAAO,gBAAiB,SAAU,QAAS,CAAE,EACpIT,EAAO,OAAO,MAAM,EAAG,CAAC,EAAE,IAAI,CAAC8B,EAAKC,IAAMtB,EAAE,KAAM,CAAE,IAAKsB,CAAE,EAAGD,CAAG,CAAC,CAAC,CAAC,EAExE9B,EAAO,SAAS,OAAS,GACzB4B,EAAO,KAAKnB,EAAE,KAAM,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,WAAY,mBAAoB,OAAQ,MAAO,mBAAoB,SAAU,QAAS,CAAE,EACxIT,EAAO,SAAS,MAAM,EAAG,CAAC,EAAE,IAAI,CAACgC,EAAGD,IAAMtB,EAAE,KAAM,CAAE,IAAKsB,CAAE,EAAGC,CAAC,CAAC,CAAC,CAAC,EAEtEhC,EAAO,QAAQ,OAAS,GAAKA,EAAO,OAAO,SAAW,GACtD4B,EAAO,KAAKnB,EAAE,IAAK,CAAE,IAAK,KAAM,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,MAAOE,CAAQ,CAAE,EAC9F,GAAGX,EAAO,QAAQ,MAAM,oBAAoBE,EAAU,kBAAoB,sCAAiC,GAAG,CAAC,EAEvH0B,EAAO,KAAKnB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,aAAc,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,4CAA6C,WAAY,kCAAmC,aAAc,MAAO,CAAE,EAAG,CAC1QA,EAAE,IAAK,CAAE,IAAK,IAAK,UAAW,qBAAsB,MAAO,CAAE,MAAOE,EAAS,SAAU,OAAQ,UAAW,MAAO,KAAM,MAAO,CAAE,CAAC,EACjIF,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,KAAM,MAAO,uBAAwB,CAAE,EAAG,CACnGvC,EAAE,cAAc,EAChBuC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYK,EAAM,MAAOH,CAAQ,CAAE,EAAG,QAAQ,EAAGzC,EAAE,iBAAiB,CACvG,CAAC,CACL,CAAC,CAAC,EACF,IAAM+D,EAAYrC,IAAc,QAAUE,GAAc,CAACA,EAAW,MAAQa,EAAU,mBACtFiB,EAAO,KAAKnB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,OAAQ,aAAc,KAAM,CAAE,EAAG,CACxIA,EAAE,SAAU,CACR,IAAK,MAAO,KAAM,SAAU,SAAU,CAACL,GAAYR,IAAc,UAAW,QAASS,EACrF,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,aAAaT,IAAc,QAAUE,GAAc,CAACA,EAAW,MAAQ,iCAAmC,0BAA0B,GAAI,WAAYF,IAAc,QAAUE,GAAc,CAACA,EAAW,MAAQ,kCAAoC,4BAA6B,MAAOmC,EAAW,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAS,CAAC7B,GAAYR,IAAc,UAAa,cAAgB,UAAW,QAAU,CAACQ,GAAYR,IAAc,UAAa,GAAM,CAAE,CAC5lB,EAAG,CACCa,EAAE,IAAK,CAAE,IAAK,IAAK,UAAWb,IAAc,UAAY,sBAAwB,qBAAsB,MAAOA,IAAc,UAAY,CAAE,UAAW,2BAA4B,EAAI,IAAK,CAAC,EAC1LA,IAAc,UAAY1B,EAAE,aAAa,EAAIA,EAAE,UAAU,CAC7D,CAAC,EACA0B,IAAc,QAAUE,EAAcW,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,OAAQ,MAAOX,EAAW,MAAQ,gBAAkB,kBAAmB,CAAE,EACvJA,EAAW,MACL,gBAAgBA,EAAW,KAAK,GAC/BA,EAAW,MAAQ,GAAKA,EAAW,MAAQ,EACxC,QAAQA,EAAW,MAAQ,EAAI,KAAO,MAAM,cAAWA,EAAW,MAAQ,EAAI,KAAO,MAAM,cAAWA,EAAW,IAAI,GACrH,QAAQA,EAAW,IAAI,iHACrC,EAAI,IACR,CAAC,CAAC,EACF4B,EAAK,KAAKjB,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,aAAc,MAAO,CAAE,EAAGmB,CAAM,CAAC,CAClF,CAEAF,EAAK,KAAKL,EAAU7B,EAAW,IAAMC,EAAa,CAACD,CAAS,EAAGtB,EAAE,gBAAgB,EAC7EA,EAAE,eAAe,EAAGyC,EAASzC,EAAE,gBAAgB,CAAC,CAAC,EACjDsB,GAAaJ,GAAa,CAACc,GAC3BwB,EAAK,KAAKjB,EAAE,IAAK,CAAE,IAAK,YAAa,MAAO,CAAE,OAAQ,cAAe,SAAU,SAAU,MAAO,kBAAmB,CAAE,EACjHvC,EAAE,kBAAkB,CAAC,CAAC,EAE9BwD,EAAK,KAAKL,EAAU3B,EAAS,IAAMC,EAAW,CAACD,CAAO,EAAGxB,EAAE,aAAa,EACpEA,EAAE,iBAAiB,EAAGwC,CAAQ,CAAC,EAGnC,IAAMwB,GAAa,CAAC,EACpB,OAAIlD,GACAkD,GAAW,KAAKzB,EAAE,SAAU,CAAE,IAAK,SAAU,KAAM,SAAU,QAASD,EAClE,MAAO,CAAE,gBAAiB,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,yCAA0C,WAAY,cAAe,MAAO,gBAAiB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAGtC,EAAE,YAAY,CAAC,CAAC,EAE9RgE,GAAW,KAAKzB,EAAE,SAAU,CAAE,IAAK,SAAU,KAAM,SAAU,QAAS3B,EAClE,MAAO,CAAE,QAAS,YAAa,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAGZ,EAAE,YAAY,CAAC,CAAC,EAChQgE,GAAW,KAAKzB,EAAE,SAAU,CAAE,IAAK,QAAS,KAAM,SAAU,QAASF,EAAa,SAAU,CAACH,EACzF,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,OAAQ,WAAYQ,EAAgB,MAAO,sBAAuB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQR,EAAW,UAAY,cAAe,QAASA,EAAW,EAAI,GAAK,UAAW,6CAA8C,CAAE,EAAG,CAC9XK,EAAE,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,CAAC,EAAGvC,EAAE,WAAW,CAClE,CAAC,CAAC,EAQKuC,EAAE,MAAO,CAAE,UAAW,iBAAkB,MAJ1BtB,EACf,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAAU,WAAY,eAAgB,UAAW,yCAA0C,EACzK,CAAE,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAAU,WAAY,UAAW,WAAY,eAAgB,UAAW,yCAA0C,CAEhI,EAAG,CAClEsB,EAAE7C,GAAM,SAAU,CAAE,IAAK,OAAQ,EAAG,CAEhC6C,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,qCAAsC,CAAE,EAAG,CAChKA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,WAAY,4BAA6B,OAAQ,qCAAsC,CAAE,EAC9NA,EAAE,IAAK,CAAE,UAAW,mBAAoB,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,CAAC,EACrGA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,WAAY,IAAK,CAAE,EAAG,CAC1DA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGvC,EAAE,WAAW,CAAC,EACzIuC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAGvC,EAAE,cAAc,CAAC,CACpG,CAAC,EACDuC,EAAE,SAAU,CAAE,IAAK,IAAK,KAAM,SAAU,QAAS3B,EAAS,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,MAAO,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAChR2B,EAAE,IAAK,CAAE,UAAW,cAAe,CAAC,CAAC,CAC7C,CAAC,EAEDA,EAAE,MAAO,CAAE,IAAK,OAAQ,UAAW,mBAAoB,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,WAAY,CAAE,EAAGiB,CAAI,EAE1HjB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,WAAY,IAAK,OAAQ,QAAS,YAAa,UAAW,sCAAuC,WAAY,oBAAqB,aAAc,GAAI,CAAE,EAAGyB,EAAU,CAC/P,CAAC,CACL,CAAC,CACL,EAEA,OAAO,kBAAoBtD,GCxP3B,IAAMuD,GAAkB,CAAC,CAAE,cAAAC,EAAe,UAAAC,CAAU,IAAM,CACtD,IAAMC,EAAI,MAAM,cACVC,EAAO,mEAIPC,EAAO,CACT,KAAM,4FACN,SAAU,6GACV,OAAQ,qDACR,KAAM,gFACN,MAAO,uGACP,OAAQ,uKACR,MAAO,mFACP,OAAQ,mFACR,KAAM,6GACN,MAAO,gSACP,YAAa,6TACjB,EACMC,EAAM,CAACC,EAAOC,EAAMC,IAAON,EAAE,OAAQ,CACvC,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,MAAOK,EAAO,KAAM,OAAQA,EAAO,IAAK,EACxF,wBAAyB,CAAE,OAAQ,eAAeA,CAAI,aAAaA,CAAI,yEAAyEC,CAAE,oDAAoDF,CAAK,QAAS,CACxN,CAAC,EAEK,CAACG,EAAMC,CAAO,EAAI,MAAM,SAAS,IAAOV,GAAe,eAAe,GAAK,CAAE,MAAO,OAAQ,OAAQ,EAAM,CAAE,EAC5G,CAACW,EAAWC,CAAY,EAAI,MAAM,SAAS,EAAK,EAChD,CAACC,EAASC,CAAU,EAAI,MAAM,SAAS,CAAC,EAExCC,EAAiB,MAAM,OAAO,IAAI,EAClCC,EAAiB,MAAM,OAAO,IAAI,EAClCC,EAAe,MAAM,OAAO,IAAI,EAGtC,MAAM,UAAU,IAAM,CAClB,GAAI,CAACjB,EAAe,OACpB,IAAMkB,EAAWC,GAAUT,EAAQS,CAAK,EAClCC,EAAOpB,EAAc,mBAC3B,OAAAA,EAAc,mBAAqBkB,EACnCR,EAAQV,EAAc,aAAeA,EAAc,aAAa,EAAI,CAAE,MAAO,OAAQ,OAAQ,EAAM,CAAC,EAC7F,IAAM,CAAMA,EAAc,qBAAuBkB,IAASlB,EAAc,mBAAqBoB,GAAQ,KAAM,CACtH,EAAG,CAACpB,CAAa,CAAC,EAElB,IAAMqB,EAAQZ,EAAK,OAAS,OACtBa,EAAS,CAAC,CAACb,EAAK,OAChBc,EAAU,CAAC,CAACd,EAAK,WAAa,CAAC,CAACA,EAAK,eAoC3C,GA/BA,MAAM,UAAU,IAAM,CAClB,IAAMe,EAAexB,GAAe,uBAAuB,EACrDyB,EAAczB,GAAe,sBAAsB,EACnD0B,EAAS,CAACC,EAAIC,GAAQC,KAAU,CAClC,GAAI,CAACF,GAAM,CAACC,GAAQ,OAChBD,EAAG,YAAcC,KAAUD,EAAG,MAAQE,GAAOF,EAAG,UAAYC,IAChE,IAAME,GAAIH,EAAG,MAAQA,EAAG,KAAK,EACzBG,IAAKA,GAAE,OAAOA,GAAE,MAAM,IAAM,CAAC,CAAC,CACtC,EAGAJ,EAAOV,EAAe,QAASQ,EAAc,GAAO,aAAa,EACjEE,EAAOX,EAAe,QAASS,EAAc,GAAM,aAAa,EAChEE,EAAOT,EAAa,QAASQ,EAAa,GAAM,WAAW,CAC/D,CAAC,EAGD,MAAM,UAAU,IAAM,CAClB,GAAIJ,IAAU,SAAU,CAAEP,EAAW,CAAC,EAAG,MAAQ,CACjD,IAAMiB,EAAU,KAAK,IAAI,EACnBC,EAAK,YAAY,IAAMlB,EAAW,KAAK,OAAO,KAAK,IAAI,EAAIiB,GAAW,GAAI,CAAC,EAAG,GAAI,EACxF,MAAO,IAAM,cAAcC,CAAE,CACjC,EAAG,CAACX,CAAK,CAAC,EAEV,MAAM,UAAU,IAAM,CAAMA,IAAU,QAAQT,EAAa,EAAK,CAAG,EAAG,CAACS,CAAK,CAAC,EAEzE,CAACC,GAAUD,IAAU,QAAUA,IAAU,SAKzCZ,EAAK,YAAa,OAAO,KAE7B,IAAMwB,EAAOC,GAAM,GAAG,OAAO,KAAK,MAAMA,EAAI,EAAE,CAAC,EAAE,SAAS,EAAG,GAAG,CAAC,IAAI,OAAOA,EAAI,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,GAC9FC,EAAUd,IAAU,YAAcA,IAAU,aAC5Ce,EAAaf,IAAU,WAAagB,EAAE,cAAc,EACpDhB,IAAU,aAAegB,EAAE,iBAAiB,EACxChB,IAAU,SAAWY,EAAIpB,CAAO,EAAIwB,EAAE,cAAc,EACxDC,EAAOrC,GAAaoC,EAAE,WAAW,EAGjCE,EAAW,CACb,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,qCAAsC,WAAY,4BAC1D,MAAO,mBAAoB,OAAQ,UAAW,WAAY,UAC9D,EACMC,EAAa,CAAE,GAAGD,EAAU,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,uBAAwB,EACrHE,EAAS,CACX,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,OAAQ,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,UACjF,UAAW,kDAAmD,WAAY,gBAC9E,EACMC,EAAeC,IAAW,CAC5B,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,kCAAoCA,EAAQ,OAAS,OAAS,IACtE,WAAYA,EAAQ,mBAAqB,4BACzC,MAAOA,EAAQ,OAAS,mBAAoB,OAAQ,UAAW,WAAY,UAC/E,GAEMC,EAAW1C,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,iBAAkB,CAAE,EACtK,CAACG,EAAID,EAAK,KAAM,GAAI,CAAC,EAAGiC,EAAE,qBAAqB,CAAC,CAAC,EAM/CQ,EAAU,CACZ,UAAW,CAAE,KAAM,EAAG,MAAO,kBAAmB,MAAO,wBAAyB,MAAOR,EAAE,uBAAuB,CAAE,EAClH,KAAM,CAAE,KAAM,EAAG,MAAO,kBAAmB,MAAO,wBAAyB,MAAOA,EAAE,kBAAkB,CAAE,EACxG,KAAM,CAAE,KAAM,EAAG,MAAO,mBAAoB,MAAO,yBAA0B,MAAOA,EAAE,kBAAkB,CAAE,EAC1G,KAAM,CAAE,KAAM,EAAG,MAAO,gBAAiB,MAAO,sBAAuB,MAAOA,EAAE,kBAAkB,CAAE,CACxG,EACMS,EAAoBC,GAAY,CAClC,IAAMC,EAAIH,EAAQpC,EAAK,OAAO,EAC9B,GAAI,CAACuC,EAAG,OAAO,KACf,IAAMC,EAAO/C,EAAE,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,cAAe,WAAY,WAAY,IAAK,MAAO,OAAQ,MAAO,CAAE,EACxH,CAAC,EAAG,EAAG,EAAG,CAAC,EAAE,IAAIgD,GAAKhD,EAAE,OAAQ,CAC5B,IAAKgD,EAAG,MAAO,CAAE,MAAO,MAAO,OAAS,EAAIA,EAAI,EAAK,KAAM,aAAc,MAAO,WAAYA,EAAIF,EAAE,KAAOA,EAAE,MAAQ,2BAA4B,CACnJ,CAAC,CAAC,CAAC,EACP,OAAID,EAAgBE,EACb/C,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOmC,EAAE,cAAc,EAAG,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAOW,EAAE,KAAM,CAAE,EAAG,CAACC,EAAMD,EAAE,KAAK,CAAC,CACtM,EAGMG,GAAW,IAAMnD,GAAe,aAAa,EAC7CoD,EAAY,IAAMpD,GAAe,cAAc,EAC/CqD,EAAQ,IAAM,CAAEzC,EAAa,EAAK,EAAGZ,GAAe,UAAU,CAAG,EACjEsD,EAAS,IAAMtD,GAAe,YAAY,EAC1CuD,EAAW,IAAMvD,GAAe,eAAe,EAC/CwD,GAAS,IAAMxD,GAAe,eAAe,EAC7CyD,EAAY,IAAMzD,GAAe,iBAAiB,EAElD0D,EAAcxD,EAAE,QAAS,CAAE,IAAK,KAAM,IAAKc,EAAgB,SAAU,GAAM,YAAa,GAAM,MAAO,CAAE,QAAS,MAAO,CAAE,CAAC,EAE1H2C,EAAU,CAACC,EAAKC,EAAKC,IAAU5D,EAAE,MAAO,CAAE,IAAA0D,EAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,KAAM,CAAE,EACvI,CAACC,EAAK3D,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYC,EAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG2D,CAAK,CAAC,CAAC,EAG/GC,EAAa,CAACxD,EAAMyD,IAAS9D,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,QAAS,OAAQ,QAAS,aAAc,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAAG,CACtL8D,GAAQ9D,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,OAAQ,8CAA+C,UAAW,kCAAmC,CAAE,CAAC,EACrM8D,GAAQ9D,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,OAAQ,8CAA+C,UAAW,mCAAoC,eAAgB,IAAK,CAAE,CAAC,EAC3NA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,QAAS,OAAQ,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,6EAA8E,OAAQ,qCAAsC,UAAW,yEAA0E,MAAO,kBAAmB,CAAE,EAAGG,EAAID,EAAK,KAAMG,EAAM,GAAG,CAAC,CACpZ,CAAC,EAGD,OAAIc,IAAU,WACHnB,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAAU,WAAY,gHAAiH,UAAW,mBAAoB,CAAE,EAAG,CAC9QwD,EACAxD,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,aAAc,QAAS,WAAY,CAAE,EACtIA,EAAE,OAAQ,CAAE,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,iBAAkB,CAAE,EAAG,CAACG,EAAID,EAAK,KAAM,GAAI,CAAC,EAAGiC,EAAE,gBAAgB,CAAC,CAAC,CAAC,EACjMnC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,QAAS,CAAE,EAAG,CACnI6D,EAAW,GAAI,EAAI,EACnB7D,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGoC,CAAI,EAC9HpC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,WAAYC,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGM,EAAK,UAAY4B,EAAE,oBAAoB,EAAIA,EAAE,eAAe,CAAC,CACtM,CAAC,EACDnC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,aAAc,eAAgB,SAAU,IAAK,OAAQ,QAAS,gBAAiB,CAAE,EAAG,CAC7JyD,EAAQ,MAAOzD,EAAE,SAAU,CAAE,QAASkD,EAAW,MAAOf,EAAE,cAAc,EAAG,MAAO,CAAE,GAAGI,EAAQ,MAAO,OAAQ,OAAQ,MAAO,CAAE,EAAGpC,EAAID,EAAK,YAAa,GAAI,GAAG,CAAC,EAAGiC,EAAE,cAAc,CAAC,EACpLsB,EAAQ,MAAOzD,EAAE,SAAU,CAAE,QAASiD,GAAU,MAAOd,EAAE,aAAa,EAAG,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,wBAAyB,MAAO,qBAAsB,OAAQ,UAAW,UAAW,4CAA6C,CAAE,EAAGhC,EAAID,EAAK,MAAO,GAAI,GAAG,CAAC,EAAGiC,EAAE,aAAa,CAAC,CAC9X,CAAC,CACL,CAAC,EAID1B,EACOT,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,WAAY,OAAQ,OAAQ,eAAgB,OAAQ,OAAQ,GAAI,MAAO,QAAS,aAAc,OAAQ,SAAU,SAAU,WAAY,oBAAqB,OAAQ,qCAAsC,UAAW,0EAA2E,UAAW,oBAAqB,CAAE,EAAG,CACrWwD,EACAnC,GAAWrB,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,WAAY,OAAQ,QAAS,WAAY,MAAO,CAAE,EAAG,CACpGA,EAAE,QAAS,CAAE,IAAK,KAAM,IAAKa,EAAgB,SAAU,GAAM,MAAO,GAAM,YAAa,GAAM,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,QAAS,QAAS,OAAQ,CAAE,CAAC,EAC7K,CAACN,EAAK,gBAAkBP,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,WAAY,SAAU,WAAY,4DAA6D,MAAO,kBAAmB,CAAE,EAAGG,EAAID,EAAK,OAAQ,GAAI,GAAG,CAAC,EAChQF,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,WAAY,IAAK,MAAO,iBAAkB,MAAO,WAAYC,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,OAAQ,QAAS,UAAW,aAAc,MAAO,WAAY,iBAAkB,CAAE,EAAGiC,CAAU,CACxP,CAAC,EACDlC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,WAAY,CAAE,EAAG,CAC1GA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,iCAAkC,OAAQ,4CAA6C,MAAO,iBAAkB,CAAE,EAAGG,EAAID,EAAK,KAAM,GAAI,GAAG,CAAC,EACvTF,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACrDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGoC,CAAI,EACxKpC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,WAAYC,EAAM,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAG,EAC/IoB,EAAUc,EAAE,kBAAkB,EAAIA,EAAE,kBAAkB,GAAKD,EAC5Df,IAAU,UAAYyB,EAAiB,EAAI,CAC/C,CAAC,CACL,CAAC,EACD5C,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAMU,EAAa,EAAK,EAAG,MAAOyB,EAAE,aAAa,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,UAAW,WAAY,UAAW,CAAE,EAAGhC,EAAID,EAAK,OAAQ,GAAI,CAAC,CAAC,EACnWF,EAAE,SAAU,CAAE,IAAK,MAAO,QAASmD,EAAO,MAAOhB,EAAE,UAAU,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,UAAW,WAAY,gBAAiB,CAAE,EAAGhC,EAAID,EAAK,YAAa,GAAI,CAAC,CAAC,CAChV,CAAC,CACL,CAAC,EAIDmB,EACOrB,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,SAAU,SAAU,WAAY,uBAAwB,UAAW,mBAAoB,CAAE,EAAG,CAC/JwD,EACAjD,EAAK,eACCP,EAAE,QAAS,CAAE,IAAK,KAAM,IAAKa,EAAgB,SAAU,GAAM,MAAO,GAAM,YAAa,GAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,MAAO,OAAQ,OAAQ,OAAQ,UAAW,QAAS,WAAY,sBAAuB,CAAE,CAAC,EAC/Nb,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,WAAY,gFAAiF,eAAgB,YAAa,UAAW,mCAAoC,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,CAAE,EAAG,CACjVA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,QAAS,OAAQ,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,6EAA8E,OAAQ,qCAAsC,MAAO,kBAAmB,CAAE,EAAGG,EAAID,EAAK,KAAM,GAAI,GAAG,CAAC,EACzTF,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGmC,EAAE,oBAAoB,CAAC,CAC3H,CAAC,EAELnC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,IAAK,EAAG,KAAM,EAAG,MAAO,EAAG,QAAS,OAAQ,WAAY,aAAc,eAAgB,gBAAiB,IAAK,OAAQ,QAAS,YAAa,WAAY,wDAAyD,CAAE,EAAG,CACtQA,EAAE,MAAO,CAAE,IAAK,GAAI,EAAG,CACnBA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,MAAO,CAAE,EAAGoC,CAAI,EACjHpC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,UAAW,KAAM,CAAE,EAAG,CAC1GA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,WAAYC,EAAM,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGiC,CAAU,EAChIQ,EACAvB,IAAU,UAAYyB,EAAiB,EAAK,CAChD,CAAC,CACL,CAAC,EACD5C,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAMU,EAAa,EAAI,EAAG,MAAOyB,EAAE,eAAe,EAAG,MAAO,CAAE,KAAM,OAAQ,GAAGK,EAAY,EAAI,CAAE,CAAE,EAAGrC,EAAID,EAAK,SAAU,GAAI,CAAC,CAAC,CACtK,CAAC,EAEDF,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,WAAY,OAAQ,QAAS,eAAgB,OAAQ,MAAO,QAAS,OAAQ,QAAS,aAAc,OAAQ,SAAU,SAAU,OAAQ,sCAAuC,UAAW,yEAA0E,WAAY,MAAO,CAAE,EAAG,CACnUA,EAAE,QAAS,CAAE,IAAK,KAAM,IAAKe,EAAc,SAAU,GAAM,MAAO,GAAM,YAAa,GAAM,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,QAAS,UAAW,aAAc,QAAS,OAAQ,CAAE,CAAC,EACpM,CAACR,EAAK,eAAiBP,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,WAAY,oBAAqB,MAAO,kBAAmB,CAAE,EAAG,CACzPG,EAAID,EAAK,OAAQ,GAAI,GAAG,EACxBF,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,mBAAoB,WAAYC,CAAK,CAAE,EAAGkC,EAAE,gBAAgB,CAAC,CAC3H,CAAC,CACL,CAAC,EAEDnC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,KAAM,EAAG,MAAO,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,OAAQ,QAAS,iBAAkB,WAAY,qDAAsD,CAAE,EAAG,CAClQA,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASoD,EAAQ,MAAOjB,EAAE,WAAW,EAAG,MAAO5B,EAAK,WAAa8B,EAAWC,CAAW,EAAGnC,EAAII,EAAK,WAAaL,EAAK,MAAQA,EAAK,OAAQ,GAAI,GAAG,CAAC,EAC7KF,EAAE,SAAU,CAAE,IAAK,MAAO,QAASqD,EAAU,MAAOlB,EAAE,aAAa,EAAG,MAAO5B,EAAK,cAAgB8B,EAAWC,CAAW,EAAGnC,EAAII,EAAK,cAAgBL,EAAK,MAAQA,EAAK,OAAQ,GAAI,GAAG,CAAC,EACtLF,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASsD,GAAQ,MAAOnB,EAAE,iBAAiB,EAAG,MAAOE,CAAS,EAAGlC,EAAID,EAAK,KAAM,GAAI,GAAG,CAAC,EACnHF,EAAE,SAAU,CAAE,IAAK,MAAO,QAASmD,EAAO,MAAOhB,EAAE,UAAU,EAAG,MAAOI,CAAO,EAAGpC,EAAID,EAAK,YAAa,GAAI,GAAG,CAAC,CACnH,CAAC,CACL,CAAC,EAIEF,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAAU,WAAY,gHAAiH,UAAW,mBAAoB,CAAE,EAAG,CAC9QwD,EACAxD,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,QAAS,WAAY,CAAE,EAAG,CAC5IA,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,iBAAkB,CAAE,EAAG,CAACG,EAAID,EAAK,KAAM,GAAI,CAAC,EAAGiC,EAAE,gBAAgB,CAAC,CAAC,EACxMnC,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAMU,EAAa,EAAI,EAAG,MAAOyB,EAAE,eAAe,EAAG,MAAOK,EAAY,EAAK,CAAE,EAAGrC,EAAID,EAAK,SAAU,GAAI,CAAC,CAAC,CAClJ,CAAC,EACDF,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,QAAS,CAAE,EAAG,CACnI6D,EAAW,GAAI5B,CAAO,EACtBjC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGoC,CAAI,EAC9HpC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,WAAYC,EAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGiC,CAAU,EAC/If,IAAU,UAAYnB,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,UAAW,MAAO,CAAE,EAAG4C,EAAiB,EAAK,CAAC,CACtG,CAAC,EACD5C,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,aAAc,eAAgB,SAAU,IAAK,OAAQ,QAAS,gBAAiB,CAAE,EAAG,CAC7JyD,EAAQ,OAAQzD,EAAE,SAAU,CAAE,QAASoD,EAAQ,MAAOjB,EAAE,WAAW,EAAG,MAAO5B,EAAK,WAAa8B,EAAWC,CAAW,EAAGnC,EAAII,EAAK,WAAaL,EAAK,MAAQA,EAAK,OAAQ,GAAI,GAAG,CAAC,EAAGK,EAAK,WAAa,OAAS4B,EAAE,YAAY,CAAC,EAC7NsB,EAAQ,QAASzD,EAAE,SAAU,CAAE,QAASuD,EAAW,MAAOpB,EAAE,eAAe,EAAG,MAAOE,CAAS,EAAGlC,EAAID,EAAK,MAAO,GAAI,GAAG,CAAC,EAAGiC,EAAE,YAAY,CAAC,EAC3IsB,EAAQ,MAAOzD,EAAE,SAAU,CAAE,QAASmD,EAAO,MAAOhB,EAAE,UAAU,EAAG,MAAOI,CAAO,EAAGpC,EAAID,EAAK,YAAa,GAAI,GAAG,CAAC,EAAGiC,EAAE,eAAe,CAAC,CAC3I,CAAC,CACL,CAAC,CACL,EAEI,OAAO,OAAW,MAClB,OAAO,gBAAkBtC,Id3P7B,OAAO,0BAA4BkE,GACnC,OAAO,4BAA8BC,GACrC,OAAO,2BAA6BC,GACpC,OAAO,wBAA0B,2BAOjC,IAAMC,GAA0B,IAAM,CAClC,GAAI,CACA,IAAMC,EAAQ,CAAC,EACf,QAASC,EAAI,EAAGA,EAAI,aAAa,OAAQA,IAAK,CAC1C,IAAMC,EAAM,aAAa,IAAID,CAAC,EAC1BC,GAAOA,EAAI,WAAW,WAAW,GAAGF,EAAM,KAAKE,CAAG,CAC1D,CACA,QAAWA,KAAOF,EACd,GAAI,CAAE,aAAa,WAAWE,CAAG,CAAG,MAAY,CAAC,CAEzD,MAAY,CAEZ,CACJ,EAcMC,GAAe,KACb,OAAO,YACX,OAAO,UAAY,OAAO,mBAAmB,EACxC,KAAK,IAAM,CACR,OAAO,cAAc,IAAI,MAAM,oBAAoB,CAAC,CACxD,CAAC,EACA,MAAOC,GAAU,CACd,QAAQ,KAAK,4BAA6BA,GAASA,EAAM,OAAO,EAEhE,OAAO,UAAY,IACvB,CAAC,GACE,OAAO,WAGZC,GAAmB,IAAM,CACvB,OAAO,OAAO,qBAAwB,WACtC,OAAO,oBAAoBF,GAAc,CAAE,QAAS,GAAK,CAAC,EAE1D,WAAWA,GAAc,IAAI,CAErC,EAGMG,GAAQ,IAAM,CAChBP,GAAwB,EACtB,OAAO,OAAO,eAAkB,WAClC,OAAO,cAAc,EACZ,OAAO,YAChB,QAAQ,MAAM,wCAAwC,EAExDM,GAAiB,CACnB,EAEI,SAAS,aAAe,UAC1B,SAAS,iBAAiB,mBAAoBC,EAAK,EAEnDA,GAAM",
   "names": ["require_SecureNotificationManager", "__commonJSMin", "exports", "module", "SecureChatNotificationManager", "config", "text", "div", "url", "parsedUrl", "origin", "now", "senderName", "message", "options", "safeSenderName", "safeMessage", "safeIcon", "notification", "event", "error", "autoCloseTimeout", "index", "SecureP2PChat", "dataChannel", "data", "senderId", "container", "messageEl", "nameEl", "textEl", "timeEl", "audio", "require_NotificationIntegration", "__commonJSMin", "exports", "module", "import_SecureNotificationManager", "NotificationIntegration", "webrtcManager", "message", "type", "rest", "status", "meta", "messageKey", "messagesArray", "msg", "messageInfo", "notificationText", "notificationResult", "senderId", "messageData", "messagesContainer", "entries", "Object", "setPrototypeOf", "isFrozen", "getPrototypeOf", "getOwnPropertyDescriptor", "freeze", "seal", "create", "_ref", "Reflect", "apply", "construct", "x", "func", "thisArg", "_len", "arguments", "length", "args", "Array", "_key", "Func", "_len2", "_key2", "arrayForEach", "unapply", "prototype", "forEach", "arrayLastIndexOf", "lastIndexOf", "arrayPop", "pop", "arrayPush", "push", "arraySplice", "splice", "arrayIsArray", "isArray", "stringToLowerCase", "String", "toLowerCase", "stringToString", "toString", "stringMatch", "match", "stringReplace", "replace", "stringIndexOf", "indexOf", "stringTrim", "trim", "numberToString", "Number", "booleanToString", "Boolean", "bigintToString", "BigInt", "symbolToString", "Symbol", "objectHasOwnProperty", "hasOwnProperty", "objectToString", "regExpTest", "RegExp", "test", "typeErrorCreate", "unconstruct", "TypeError", "lastIndex", "_len3", "_key3", "_len4", "_key4", "addToSet", "set", "array", "transformCaseFunc", "l", "element", "lcElement", "cleanArray", "index", "clone", "object", "newObject", "_ref2", "_ref3", "_slicedToArray", "property", "value", "constructor", "stringifyValue", "valueAsRecord", "valueToString", "lookupGetter", "stringified", "prop", "desc", "get", "fallbackValue", "isRegex", "html", "svg", "svgFilters", "svgDisallowed", "mathMl", "mathMlDisallowed", "text", "xml", "MUSTACHE_EXPR", "ERB_EXPR", "TMPLIT_EXPR", "DATA_ATTR", "ARIA_ATTR", "IS_ALLOWED_URI", "IS_SCRIPT_OR_DATA", "ATTR_WHITESPACE", "DOCTYPE_NAME", "CUSTOM_ELEMENT", "ELEMENT_MARKUP_PROBE", "COMMENT_MARKUP_PROBE", "FALLBACK_TAG_CLOSE", "SELF_CLOSING_TAG", "NODE_TYPE", "attribute", "cdataSection", "entityReference", "entityNode", "processingInstruction", "comment", "document", "documentType", "documentFragment", "notation", "getGlobal", "window", "_createTrustedTypesPolicy", "trustedTypes", "purifyHostElement", "createPolicy", "suffix", "ATTR_NAME", "hasAttribute", "getAttribute", "policyName", "createHTML", "createScriptURL", "scriptUrl", "console", "warn", "_createHooksMap", "afterSanitizeAttributes", "afterSanitizeElements", "afterSanitizeShadowDOM", "beforeSanitizeAttributes", "beforeSanitizeElements", "beforeSanitizeShadowDOM", "uponSanitizeAttribute", "uponSanitizeElement", "uponSanitizeShadowNode", "_resolveSetOption", "cfg", "key", "fallback", "options", "base", "transform", "createDOMPurify", "undefined", "DOMPurify", "root", "version", "VERSION", "removed", "nodeType", "Element", "isSupported", "originalDocument", "currentScript", "DocumentFragment", "HTMLTemplateElement", "Node", "NodeFilter", "_window$NamedNodeMap", "NamedNodeMap", "MozNamedAttrMap", "HTMLFormElement", "DOMParser", "ElementPrototype", "cloneNode", "remove", "getNextSibling", "getChildNodes", "getParentNode", "getShadowRoot", "getAttributes", "getNodeType", "getNodeName", "template", "createElement", "content", "ownerDocument", "trustedTypesPolicy", "emptyHTML", "defaultTrustedTypesPolicy", "defaultTrustedTypesPolicyResolved", "IN_TRUSTED_TYPES_POLICY", "_assertNotInTrustedTypesPolicy", "_createTrustedHTML", "_createTrustedScriptURL", "_getDefaultTrustedTypesPolicy", "_document", "implementation", "createNodeIterator", "createDocumentFragment", "getElementsByTagName", "importNode", "hooks", "createHTMLDocument", "EXPRESSIONS", "ALLOWED_TAGS", "DEFAULT_ALLOWED_TAGS", "TAGS", "ALLOWED_ATTR", "DEFAULT_ALLOWED_ATTR", "ATTRS", "CUSTOM_ELEMENT_HANDLING", "tagNameCheck", "writable", "configurable", "enumerable", "attributeNameCheck", "allowCustomizedBuiltInElements", "FORBID_TAGS", "FORBID_ATTR", "EXTRA_ELEMENT_HANDLING", "tagCheck", "attributeCheck", "ALLOW_ARIA_ATTR", "ALLOW_DATA_ATTR", "ALLOW_UNKNOWN_PROTOCOLS", "ALLOW_SELF_CLOSE_IN_ATTR", "SAFE_FOR_TEMPLATES", "SAFE_FOR_XML", "WHOLE_DOCUMENT", "SET_CONFIG", "FORCE_BODY", "RETURN_DOM", "RETURN_DOM_FRAGMENT", "RETURN_TRUSTED_TYPE", "SANITIZE_DOM", "SANITIZE_NAMED_PROPS", "SANITIZE_NAMED_PROPS_PREFIX", "KEEP_CONTENT", "IN_PLACE", "USE_PROFILES", "FORBID_CONTENTS", "DEFAULT_FORBID_CONTENTS", "DATA_URI_TAGS", "DEFAULT_DATA_URI_TAGS", "URI_SAFE_ATTRIBUTES", "DEFAULT_URI_SAFE_ATTRIBUTES", "MATHML_NAMESPACE", "SVG_NAMESPACE", "HTML_NAMESPACE", "NAMESPACE", "IS_EMPTY_INPUT", "ALLOWED_NAMESPACES", "DEFAULT_ALLOWED_NAMESPACES", "DEFAULT_MATHML_TEXT_INTEGRATION_POINTS", "MATHML_TEXT_INTEGRATION_POINTS", "DEFAULT_HTML_INTEGRATION_POINTS", "HTML_INTEGRATION_POINTS", "COMMON_SVG_AND_HTML_ELEMENTS", "PARSER_MEDIA_TYPE", "SUPPORTED_PARSER_MEDIA_TYPES", "DEFAULT_PARSER_MEDIA_TYPE", "CONFIG", "formElement", "isRegexOrFunction", "testValue", "Function", "_parseConfig", "ALLOWED_URI_REGEXP", "customElementHandling", "ADD_TAGS", "ADD_ATTR", "ADD_URI_SAFE_ATTR", "ADD_FORBID_CONTENTS", "table", "tbody", "TRUSTED_TYPES_POLICY", "previousTrustedTypesPolicy", "error", "ALL_SVG_TAGS", "ALL_MATHML_TAGS", "_checkSvgNamespace", "tagName", "parent", "parentTagName", "namespaceURI", "_checkMathMlNamespace", "_checkHtmlNamespace", "_checkValidNamespace", "_forceRemove", "node", "removeChild", "_neutralizeRoot", "childNodes", "snapshot", "child", "attributes", "i", "name", "removeAttribute", "_removeAttribute", "getAttributeNode", "from", "setAttribute", "_stripDisallowedAttributes", "_neutralizeSubtree", "stack", "_initDocument", "dirty", "doc", "leadingWhitespace", "matches", "dirtyPayload", "parseFromString", "documentElement", "createDocument", "innerHTML", "body", "insertBefore", "createTextNode", "call", "_createNodeIterator", "SHOW_ELEMENT", "SHOW_COMMENT", "SHOW_TEXT", "SHOW_PROCESSING_INSTRUCTION", "SHOW_CDATA_SECTION", "_stripTemplateExpressions", "_scrubTemplateExpressions", "_node$querySelectorAl", "normalize", "walker", "currentNode", "nextNode", "data", "templates", "querySelectorAll", "tmpl", "_isDocumentFragment", "_isClobbered", "realTagName", "nodeName", "textContent", "hasChildNodes", "_isNode", "_executeHooks", "hook", "_isUnsafeNode", "firstElementChild", "_sanitizeDisallowedNode", "_isBasicCustomElement", "parentNode", "childCount", "hoisted", "_sanitizeElements", "allowedTags", "_isValidAttribute", "lcTag", "lcName", "nameIsPermitted", "RESERVED_CUSTOM_ELEMENT_NAMES", "_applyTrustedTypesToAttribute", "getAttributeType", "_setAttributeValue", "setAttributeNS", "_sanitizeAttributes", "hookEvent", "attrName", "attrValue", "keepAttr", "allowedAttributes", "forceKeepAttr", "attr", "initValue", "_sanitizeShadowDOM", "fragment", "shadowNode", "shadowIterator", "innerSr", "_sanitizeAttachedShadowRoots", "shadow", "item", "isElement", "rootName", "sr", "sanitize", "importedNode", "returnNode", "inPlace", "nn", "appendChild", "firstChild", "nodeIterator", "entry", "shadowroot", "shadowrootmode", "serializedHTML", "outerHTML", "doctype", "setConfig", "clearConfig", "isValidAttribute", "tag", "addHook", "entryPoint", "hookFunction", "removeHook", "removeHooks", "removeAllHooks", "purify", "EnhancedSecureCryptoUtils", "_EnhancedSecureCryptoUtils", "obj", "sortedObj", "key", "expectedName", "expectedUsages", "u", "buffer", "binary", "bytes", "len", "i", "base64", "cleanBase64", "binaryString", "error", "hexString", "cleanHex", "view", "data", "password", "dataString", "salt", "encoder", "passwordBuffer", "keyMaterial", "iv", "dataBuffer", "encrypted", "encryptedPackage", "packageString", "encryptedData", "packageBuffer", "decrypted", "decryptedString", "chars", "charCount", "length", "randomValue", "securityManager", "score", "maxScore", "verificationResults", "sessionType", "isDemoSession", "encryptionResult", "ecdhResult", "integrityResult", "ecdsaResult", "rateLimitResult", "metadataResult", "pfsResult", "percentage", "availableChecks", "passedChecks", "r", "testCases", "testData", "testBuffer", "keyType", "curve", "deriveError", "signature", "hmac", "limiter", "probeId", "limit", "shouldBeBlocked", "metadataKey", "probe", "sealed", "opened", "state", "paddingSize", "paddedData", "hasFakeTraffic", "hasDecoyChannels", "hasAntiFingerprinting", "keys", "name", "identifier", "windowMs", "resolve", "now", "validTimestamps", "ts", "maxAge", "timestamps", "valid", "lockKey", "keyTimestamp", "level", "message", "context", "sanitizedContext", "logEntry", "hash", "a", "b", "sensitivePatterns", "sanitized", "value", "pattern", "log", "errorCode", "safeErrorData", "p384Error", "privateKey", "sha384Error", "publicKey", "signatureBuffer", "keyData", "expectedAlgorithm", "keyBytes", "asn1", "algIdentifier", "algOid", "oidBytes", "oidString", "expectedOids", "curveOid", "curveOidString", "publicKeyBitString", "pointData", "expectedSizes", "curveName", "expectedSize", "algorithm", "usages", "importError", "fallbackError", "err", "offset", "tag", "lengthOffset", "valueOffset", "numLengthBytes", "node", "childOffset", "child", "parts", "first", "second", "signingKey", "exported", "keyPackage", "signedPackage", "verifyingKey", "expectedKeyType", "timestamp", "version", "keyUsages", "keyOrFingerprint", "meta", "options", "missingFields", "field", "packageCopy", "keyFingerprint", "saltBytes", "rawSharedSecret", "sharedSecretBits", "messageKey", "macKey", "pfsKey", "ratchetRootBits", "ratchetRoot", "fingerprintBits", "fingerprint", "keyBuffer", "hashBuffer", "challenge", "nonce", "challengeAge", "proofData", "proofString", "proof", "requiredFields", "responseAge", "expectedHash", "proofCopy", "result", "randomByte", "encryptionKey", "messageId", "sequenceNumber", "messageData", "messageIv", "metadataIv", "paddedMessage", "padding", "encryptedMessage", "metadata", "metadataStr", "encryptedMetadata", "payload", "sortedPayload", "payloadStr", "mac", "encryptedPayload", "expectedSequenceNumber", "payloadCopy", "sortedPayloadCopy", "metadataData", "decryptedMetadataBuffer", "messageAge", "decryptedMessageBuffer", "originalMessage", "purify", "strA", "strB", "dummy", "arr1", "arr2", "maxLen", "aad", "aadBuffer", "expectedAad", "SUPPORTED_LOCALES", "LOCALE_META", "CROSS_LOCALE_STRINGS", "DICTIONARY", "registry", "REGISTRY", "dictionary", "code", "STORAGE_KEY", "localeFromPathname", "pathname", "segment", "SUPPORTED_LOCALES", "localeFromLanguages", "languages", "tag", "lower", "exact", "base", "partial", "detectLocale", "stored", "fromPath", "isLocaleRoot", "localeHref", "current", "tail", "rememberLocale", "storedLocale", "resolvedLocale", "currentLocale", "w", "localeDir", "LOCALE_META", "isRTL", "direction", "tList", "key", "locale", "currentLocale", "value", "dictionary", "languageLinks", "pathname", "active", "SUPPORTED_LOCALES", "code", "localeHref", "LOCALE_META", "t", "vars", "template", "CROSS_LOCALE_STRINGS", "match", "name", "SecureFileTransferContext", "_SecureFileTransferContext", "#instance", "#contextKey", "#fileTransferSystem", "#active", "#securityLevel", "system", "EnhancedSecureFileTransfer", "level", "SecurityErrorHandler", "#allowedErrors", "error", "message", "allowed", "event", "details", "FileMetadataSigner", "metadata", "privateKey", "data", "signature", "publicKey", "signatureBuffer", "isValid", "MessageSizeValidator", "messageString", "sizeInBytes", "AtomicOperations", "key", "operation", "releaseLock", "lockPromise", "resolve", "RateLimiter", "maxRequests", "windowMs", "identifier", "now", "windowStart", "validRequests", "time", "SecureMemoryManager", "buffer", "view", "obj", "prop", "webrtcManager", "onProgress", "onComplete", "onError", "onFileReceived", "onIncomingFileRequest", "t", "typeConfig", "mime", "file", "fileName", "extensionIndex", "fileExtension", "mimeType", "typeKey", "fileType", "errors", "lowerName", "rawName", "displayName", "validation", "claimsVoice", "voiceRejection", "size", "bytes", "k", "sizes", "supportedTypes", "binary", "len", "i", "base64", "binaryString", "fileId", "entry", "blob", "url", "setupRetry", "parsed", "parseError", "attempts", "maxAttempts", "initError", "errorMessage", "fileSalt", "encoder", "fingerprintData", "fileIdData", "sessionSaltArray", "combinedSeed", "offset", "keyMaterial", "fileSessionKey", "saltArray", "state", "direction", "total", "done", "progress", "options", "clientId", "fileHash", "keyResult", "sessionKey", "salt", "transferState", "consentPromise", "reject", "safeError", "signError", "totalChunks", "chunkIndex", "start", "end", "chunkData", "missing", "indices", "idx", "nonce", "encryptedChunk", "encryptedB64", "chunkMessage", "dc", "maxRetries", "attempt", "wait", "ms", "r", "msg", "queueFull", "opErr", "handler", "softLimit", "arrayBuffer", "hashBuffer", "b", "verifyError", "pendingMetadata", "errorResponse", "receivingState", "encryptedData", "decryptedChunk", "confirmation", "chunks", "chunk", "totalSize", "sum", "fileData", "fileBuffer", "fileBlob", "getBlob", "getObjectURL", "revokeObjectURL", "completionMessage", "response", "completion", "transfer", "rs", "MAX_PER_REQUEST", "chunkId", "oldestFileId", "index", "chunkError", "keyError", "saltError", "value", "bufferError", "chunksToRemove", "sessionData", "senderResult", "receiverKey", "testData", "encrypted", "decrypted", "fileTransferSystem", "keyPair", "IS_WEBKIT", "AUDIO_CONFIG", "VIDEO_CONFIG", "TRANSPORT_CONFIG", "ADAPTATION_CONFIG", "detectEol", "sdp", "splitSdp", "eol", "lines", "session", "media", "current", "line", "joinSdp", "parsed", "all", "m", "sectionKind", "section", "findPayloadTypes", "codecName", "re", "pts", "parseFmtpParams", "value", "map", "part", "p", "eq", "serializeFmtpParams", "parts", "k", "v", "upsertFmtp", "pt", "params", "fmtpIdx", "l", "existing", "newLine", "rtpmapIdx", "applyOpusSettings", "opusFmtp", "changed", "AUX_CODEC", "getCodecPayloadTypes", "ensureRtcpFb", "feedbacks", "fb", "insertAt", "i", "ensureExtmap", "uri", "maxId", "applyTransport", "cfg", "kind", "c", "applyAudioCodecPreferences", "transceiver", "IS_WEBKIT", "AUDIO_CONFIG", "caps", "isRed", "c", "isOpus", "red", "opus", "rest", "configureAudioSender", "sender", "options", "cfg", "params", "enc", "CODEC_RANK", "codecShortName", "mimeType", "sortVideoCodecs", "codecs", "rank", "c", "n", "i", "a", "b", "x", "pickPreferredVideoCodec", "caps", "present", "name", "VIDEO_CONFIG", "videoCaps", "applyVideoCodecPreferences", "transceiver", "IS_WEBKIT", "encodingPlanFor", "codecName", "VIDEO_CONFIG", "configureVideoSender", "sender", "options", "IS_WEBKIT", "preferred", "pickPreferredVideoCodec", "videoCaps", "plan", "params", "simulcast", "enc", "summarizeStats", "stats", "prev", "outbound", "remoteInbound", "candidatePair", "s", "packetsSent", "packetsLost", "dSent", "dLost", "denom", "lossPct", "rttSec", "rttMs", "jitterMs", "availableOutgoingBitrate", "qualityLimitationReason", "qualityFromMetrics", "m", "l", "r", "decideAdaptation", "m", "state", "cfg", "ADAPTATION_CONFIG", "targetBitrate", "ceilingBitrate", "scaleResolutionDownBy", "goodTicks", "changed", "reason", "next", "NetworkAdaptationController", "pc", "opts", "report", "stats", "summarizeStats", "q", "qualityFromMetrics", "decision", "IS_WEBKIT", "sender", "params", "top", "ROOT_INFO", "MESSAGE_INFO", "INIT_INFO", "MK_SEED", "CK_SEED", "enc", "dec", "RATCHET_LIMITS", "b64", "bytes", "binary", "view", "i", "unb64", "text", "out", "zeroize", "hkdf", "ikm", "salt", "info", "lengthBytes", "key", "bits", "hmac", "keyBytes", "data", "advanceChain", "chainKey", "messageKey", "nextChainKey", "advanceRoot", "rootKey", "dhOutput", "derived", "nextRoot", "DoubleRatchet", "sharedSecret", "sessionSalt", "selfPrivateKey", "remotePublicKey", "isInitiator", "dh", "privateKey", "publicKey", "spkiB64", "material", "iv", "plaintext", "header", "ciphertext", "parsed", "pn", "n", "skippedId", "retained", "staged", "error", "isNewChain", "pending", "toZeroOnCommit", "ratchet", "receiveCount", "remoteB64", "carried", "gap", "id", "from", "until", "keys", "current", "opened", "oldest", "evicted", "cutoff", "entry", "remotePublicKeyB64", "receiveDh", "received", "nextSelfKeyPair", "sendDh", "sending", "LIMITS", "EPOCH_MS", "MAX_EXPIRY_UNITS", "TYPE", "SETUP", "MMS_ENUM", "MMS_EXPLICIT", "EXT", "KIND", "KIND_ADDR_LEN", "KIND_TYPE", "KIND_FAMILY", "TCPTYPE", "TYPE_PREF", "ICE_CHAR", "DescriptorError", "message", "code", "fail", "msg", "UUID_RE", "IPV4_RE", "parseIpv4", "m", "out", "i", "v", "parseIpv6", "text", "tail4", "lastColon", "halves", "toWords", "part", "head", "tail", "w", "words", "gap", "parseMdns", "hex", "sdpLines", "sdp", "l", "attr", "lines", "name", "prefix", "parseSdp", "ufrag", "pwd", "fpLine", "hashAlg", "fpHex", "fpBytes", "fingerprint", "b", "setupStr", "setup", "mmsStr", "maxMessageSize", "candidates", "line", "p", "transport", "priority", "addr", "port", "ctype", "tcptype", "idx", "t", "kind", "bytes", "mdns", "v4", "v6", "raw", "candidateSize", "c", "isConnectable", "pruneCandidates", "maxCandidates", "maxBytes", "keepMdns", "maxRelays", "pool", "uniq", "seen", "key", "byPriority", "a", "groupKey", "groups", "g", "chosen", "taken", "relays", "admit", "list", "Writer", "x", "s", "buildExtensions", "records", "mmsIndex", "encodeDescriptor", "d", "type", "tag", "expiresAtMs", "sdpFields", "commitment", "minutes", "ext", "r", "extBytes", "flags", "Reader", "buf", "n", "k", "decodeExt", "lastType", "len", "value", "decodeDescriptor", "nowMs", "version", "hasCommitment", "hasExt", "lateMin", "bindingTag", "ufragLen", "pwdLen", "count", "tagByte", "addrLen", "extensions", "extLen", "hex2", "renderAddr", "h", "serializeSdp", "desc", "sessionId", "isOffer", "DEFAULT_RANK", "def", "y", "defIsV6", "mPort", "cLine", "candLines", "localPref", "at", "enc", "concat", "parts", "total", "o", "digest", "offerBytes", "commitBlob", "blobBytes", "sasTranscript", "answerBytes", "offerBlob", "answerBlob", "lp", "B64URL", "toBase64Url", "fromBase64Url", "acc", "bits", "ch", "TEXT_PREFIX", "encodeText", "decodeText", "KEY_BLOB_VERSION", "ROLE", "BLOB_LIMITS", "KeyExchangeError", "message", "code", "fail", "msg", "encodeKeyBlob", "role", "ecdhSpki", "ecdsaSpki", "name", "v", "out", "dv", "o", "decodeKeyBlob", "buf", "need", "n", "version", "ecdhLen", "ecdsaLen", "buildTranscript", "offerDescriptor", "answerDescriptor", "offerBlob", "answerBlob", "sasTranscript", "deriveTranscriptSalt", "subtle", "transcript", "h", "enc", "proofPayload", "label", "computeTranscriptSas", "ecdhPrivateKey", "peerEcdhPublicKey", "digits", "shared", "ikm", "salt", "bits", "mod", "verifyBlobCommitment", "blobBytes", "expectedCommitment", "LIMITS", "actual", "commitBlob", "b", "diff", "i", "EnhancedSecureWebRTCManager", "_EnhancedSecureWebRTCManager", "onMessage", "onStatusChange", "onKeyExchange", "onVerificationRequired", "onAnswerError", "onVerificationStateChange", "config", "server", "error", "b", "messageType", "messageData", "isFileMessage", "aad", "nextSeq", "sensitiveData", "context", "dataToHash", "keyInfo", "safeObj", "hashBuffer", "hashArray", "ms", "resolve", "cleanupFn", "delay", "items", "batchSize", "delayBetweenBatches", "results", "i", "batch", "batchResults", "cleanupData", "reject", "workerCode", "blob", "worker", "timeout", "e", "type", "data", "processed", "batchEnd", "objects", "batches", "cleaned", "timer", "localFingerprint", "remoteFingerprint", "hasDescriptions", "hasOpenDataChannel", "hasVerificationCode", "hasFingerprintMaterial", "sdp", "summary", "line", "parts", "typIndex", "part", "address", "port", "candidateType", "protocol", "addressKind", "tcpIndex", "label", "extra", "candidateSummary", "candidateDetails", "details", "candidate", "message", "stats", "candidates", "candidatePairs", "report", "acc", "pair", "pendingSalt", "violations", "channelName", "originalState", "currentState", "now", "ack", "validationResult", "seen", "checkCircular", "obj", "path", "key", "objectSize", "jsonString", "str", "item", "sanitized", "value", "SecureMasterKeyManager", "SecureKeyStorage", "callback", "attempts", "maxAttempts", "keyId", "success", "m", "oldKeys", "isValid", "isCryptoKey", "hasAlgorithm", "hasType", "hasExtractable", "keyPair", "privateKeyValid", "publicKeyValid", "count", "recentLogs", "logKey", "args", "restArgs", "level", "currentCount", "sanitizedData", "safeMessage", "logMethod", "lowerKey", "blacklistPatterns", "pattern", "sanitizedString", "sensitivePatterns", "charCount", "char", "length", "entropy", "probability", "secureAPI", "safeGlobalAPI", "apiObject", "missingMethods", "method", "descriptor", "buffer", "view", "array", "index", "preserveActiveRatchet", "pendingOfferAgeMs", "hasPendingOffer", "originalError", "category", "safeMessages", "categoryMessages", "specificContext", "totalErrors", "sum", "secureMessage", "requiredMethods", "testContext", "unboundMethods", "testProp", "criticalFeatures", "missingCritical", "feature", "availableFeatures", "f", "encryptionFeatures", "reason", "throwError", "isDataChannelReady", "isConnectionVerified", "operation", "errorMessage", "verified", "verificationMethod", "verificationData", "st", "aadString", "expectedMessageType", "receivedSeq", "oldestSeq", "status", "a", "featureFlags", "scored", "fingerprintRegex", "fingerprints", "match", "altFingerprintRegex", "aIsSha256", "bIsSha256", "algorithmComparison", "receivedFingerprint", "expectedFingerprint", "normalizedReceived", "normalizedExpected", "keyMaterialRaw", "localFP", "remoteFP", "missing", "enc", "normalizeFingerprintForSAS", "fingerprint", "normalizedLocalFP", "normalizedRemoteFP", "salt", "keyBuffer", "hexString", "bytes", "info", "bits", "dv", "n", "sasCode", "event", "mode", "code", "userMessage", "role", "encodeKeyBlob", "commitment", "commitBlob", "bindingTag", "lifetimeMs", "TYPE", "ROLE", "raw", "parseSdp", "encodeDescriptor", "pruneCandidates", "encodeText", "expectedType", "desc", "decodeDescriptor", "parsed", "T", "verifyBlobCommitment", "decodeKeyBlob", "expectedRole", "sig", "isOffer", "buildTranscript", "deriveTranscriptSalt", "derivedKeys", "proofPayload", "held", "computeTranscriptSas", "isInitiator", "ratchetRoot", "peerPublicKey", "ratchet", "DoubleRatchet", "ephemeralKeyPair", "sessionId", "version", "keySet", "keyData", "messageString", "encryptedMessage", "encryptedMessageString", "hasAllKeys", "hasECDH", "systemTypes", "fallback", "result", "maxAge", "suspiciousCount", "sanitizedStats", "dataString", "dangerousPatterns", "dataStringLower", "initHandler", "safeOnComplete", "EnhancedSecureFileTransfer", "min", "max", "range", "bitsNeeded", "bytesNeeded", "mask", "randomValue", "randomBytes", "minFloat", "maxFloat", "steps", "randomIndex", "step", "meta", "parsedMessage", "uiMessage", "safeMeta", "err", "activeFeatures", "channel", "uniqueIV", "encrypted", "dataArray", "iv", "encryptedData", "originalSize", "paddingSize", "padding", "paddedData", "sendFakeMessage", "fakeMessage", "nextInterval", "safeInterval", "minDelay", "maxDelay", "initialDelay", "patternIndex", "size", "fakeData", "fakeBuffer", "encryptedFake", "isFakeMessage", "processedData", "chunkData", "chunkArray", "headerView", "messageId", "chunkIndex", "totalChunks", "chunkSize", "chunk", "messageBuffer", "totalSize", "combinedData", "offset", "numDecoyChannels", "decoyChannel", "sendDecoyData", "decoyData", "interval", "decoyTypes", "headerSize", "header", "sequence", "timestamp", "dataSize", "actualData", "textData", "content", "nextSequence", "packet", "oldestPacket", "oldest", "noiseSize", "noise", "variation", "targetSize", "noiseByte", "headerCount", "totalHeaderSize", "headerIndex", "headerName", "headerData", "checksum", "hash", "jsonData", "decryptedResult", "decryptedContent", "legacyContent", "nestedContent", "finalContent", "out", "onceTtl", "ttl", "validation", "envelope", "securedData", "operationId", "systemMessage", "fileMessageTypes", "decryptedData", "decryptedParsed", "originalData", "messageText", "finalCheck", "blockedTypes", "stage", "stageNames", "securityNotification", "securityData", "checkStability", "rotationSignal", "maxKeyAge", "wipedKeysCount", "oldKeySet", "url", "relayOnly", "iceServers", "urls", "rawUrl", "enabled", "hasTurnServer", "state", "diagnostics", "openHandled", "handleChannelOpen", "sasPayload", "initError", "plaintext", "mutexName", "mutexPropertyName", "mutex", "queueItem", "lockDuration", "nextItem", "rejectError", "mutexes", "propertyNames", "prop", "mutexAcquired", "counterKey", "releaseError", "requiredMutexes", "requiredProps", "reinitError", "waitAttempts", "maxWaitAttempts", "ecdhKeyPair", "ecdsaKeyPair", "ecdhError", "ecdsaError", "callerContext", "authorizedCallers", "unlockedCount", "errorCount", "previousState", "queueRejectCount", "previousKeyState", "ivSize", "ivString", "byteCounts", "entropyResults", "shannonEntropy", "totalBytes", "maxProbability", "collisionSum", "compressedLength", "hasSuspiciousPatterns", "minEntropyThreshold", "matchLength", "matchDistance", "j", "k", "quantumScore", "bitDistribution", "periodicity", "patterns", "ones", "totalBits", "byte", "zeroRatio", "oneRatio", "deviation", "maxPeriodicity", "period", "matches", "totalChecks", "entropyMap", "window", "allZeros", "allOnes", "sequentialCount", "patternLength", "start", "pattern1", "pattern2", "cleanedCount", "cleanupBatch", "ivArray", "toRemove", "metadata", "sessionIVs", "totalIVs", "maxAllowed", "testIVs", "testIVStrings", "uniqueTestIVs", "queueError", "emergencyError", "validationErrors", "keyPairs", "ecdhFingerprint", "ecdsaFingerprint", "ecdhPublicKeyData", "ecdsaPublicKeyData", "offer", "ourFingerprint", "offerIceGatheringStartedAt", "offerIceGatheringCompleted", "offerCandidateSummary", "offerCandidateCount", "authChallenge", "securityLevel", "currentTimestamp", "offerPackage", "validationError", "text", "cleanupError", "updates", "oldFeatures", "offerData", "offerBytes", "decodeText", "remoteSdp", "serializeSdp", "digest", "offerAge", "MAX_OFFER_AGE", "protocolVersion", "expectedSaltLength", "saltFingerprint", "peerECDSAPublicKey", "ecdsaKey", "peerECDHPublicKey", "ecdhKey", "authProof", "answer", "keyBytes", "sasError", "answerIceGatheringStartedAt", "answerIceGatheringCompleted", "answerCandidateSummary", "answerCandidateCount", "answerPackage", "hasSDP", "hasECDSA", "realSecurityData", "encryptionKey", "macKey", "metadataKey", "keyFingerprint", "answerData", "answerBytes", "expected", "diff", "isCompactAnswer", "isLegacyAnswer", "answerVersion", "answerAge", "expectedSaltHash", "sdpData", "input", "normalizedInput", "normalizedActual", "userCode", "confirmationPayload", "bothConfirmedPayload", "responsePayload", "isV4CompactFormat", "isV4Format", "compactRequiredFields", "field", "v4RequiredFields", "receivedVersion", "textToSend", "sanitizedMessage", "payload", "ciphertext", "keepConfig", "isAck", "delivered", "r", "wasRecovering", "silentFor", "backoff", "pc", "servers", "received", "timeoutMs", "hardMs", "settled", "softTimer", "hardTimer", "hasCandidates", "finish", "completed", "onStateChange", "hasDataChannel", "isDataChannelOpen", "isVerified", "connectionState", "notification", "sendError", "reasonText", "file", "options", "sending", "receiving", "activeTransfers", "receivingTransfers", "fileId", "onProgress", "onReceived", "onError", "onIncomingRequest", "sessionData", "hasKeys", "abortController", "signal", "checkInterval", "maxWaitTime", "initializationPromise", "checkInitialization", "_", "testIV1", "testIV2", "listener", "groupCallId", "stream", "live", "t", "prev", "patch", "snapshot", "connected", "channelOpen", "withVideo", "audioTrack", "videoTrack", "trs", "audioTr", "applyAudioCodecPreferences", "videoTr", "applyVideoCodecPreferences", "applyOpusSettings", "AUDIO_CONFIG", "applyTransport", "TRANSPORT_CONFIG", "configureAudioSender", "configureVideoSender", "NetworkAdaptationController", "q", "wantVideo", "name", "dev", "msg", "callId", "renegotiation", "sendSignal", "track", "sender", "existing", "newTrack", "old", "masterKeyManager", "SecurePersistentKeyStorage", "logger", "isRetry", "cryptoKey", "restoredKey", "existingMetadata", "dataToEncrypt", "persistentStats", "id", "memoryKeys", "persistentKeysFormatted", "SecureIndexedDBWrapper", "dbName", "request", "db", "keysStore", "metadataStore", "algorithm", "usages", "transaction", "keyRecord", "metadataRecord", "keysRequest", "metadataRequest", "store", "getRequest", "putRequest", "record", "saltRecord", "saltRequest", "indexedDBWrapper", "jwkData", "encryptedMetadata", "nonExtractableKey", "records", "decrypted", "legacyMetadata", "encryptedRecord", "current", "keys", "latest", "password", "passwordKey", "plainBytes", "encryptedBytes", "import_NotificationIntegration", "version", "LanguageSwitcher", "SUPPORTED_LOCALES", "open", "setOpen", "rootRef", "pathname", "links", "languageLinks", "currentLocale", "active", "l", "onDown", "e", "onKey", "trigger", "v", "t", "menu", "link", "rememberLocale", "ICON", "svg", "path", "size", "width", "ThemeSwitcher", "api", "open", "setOpen", "mode", "setMode", "resolved", "setResolved", "rootRef", "nextMode", "nextResolved", "onDown", "e", "onKey", "OPTIONS", "t", "triggerIcon", "current", "o", "trigger", "v", "menu", "option", "active", "APP_VERSION", "version", "EnhancedMinimalHeader", "status", "fingerprint", "verificationCode", "onDisconnect", "isConnected", "securityLevel", "webrtcManager", "realSecurityLevel", "setRealSecurityLevel", "lastSecurityUpdate", "setLastSecurityUpdate", "hasActiveSession", "setHasActiveSession", "currentTimeLeft", "setCurrentTimeLeft", "sessionType", "setSessionType", "isUpdating", "lastUpdateAttempt", "updateRealSecurityStatus", "now", "activeWebrtcManager", "realSecurityData", "currentScore", "newScore", "retryInterval", "interval", "handleSecurityUpdate", "event", "handleRealSecurityCalculated", "securityData", "error", "handleForceUpdate", "handleConnectionCleaned", "handlePeerDisconnect", "handleDisconnected", "handleSecurityClick", "realTestResults", "t", "message", "passedTests", "key", "result", "failedTests", "testName", "str", "features", "feature", "isEnabled", "modal", "content", "e", "handleKeyDown", "config", "displaySecurityLevel", "securityDetails", "isRealData", "baseTooltip", "secColor", "dotColor", "dotGlow", "MONO", "onLanding", "scrolled", "setScrolled", "onScroll", "GLASS", "MATERIALISE", "safeTop", "overlay", "headerStyle", "LanguageSwitcher", "ThemeSwitcher", "DESKTOP_VERSION", "DESKTOP_RELEASE", "DownloadApps", "apps", "handleDownload", "app", "desktopApps", "a", "mobileApps", "browserApps", "cardSize", "colorClasses", "renderAppCard", "BecomePartner", "isMobile", "setIsMobile", "mq", "onChange", "ACCENT", "ACCENT_SOLID", "MONO", "SANS", "formUrl", "partners", "t", "svg", "inner", "size", "stroke", "sw", "className", "roleTag", "role", "partnerCard", "e", "inviteCard", "UniqueFeatureSlider", "active", "setActive", "isMobile", "setIsMobile", "mq", "onChange", "ACCENT", "ACCENT_SOLID", "ACTIVE_BG", "ACTIVE_BD", "IDLE_BG", "IDLE_BD", "MONO", "SANS", "slides", "t", "tList", "svg", "inner", "size", "stroke", "sw", "go", "step", "a", "navBtn", "key", "onClick", "path", "e", "tag", "label", "expandedContent", "s", "collapsedContent", "panels", "i", "isActive", "Roadmap", "isMobile", "setIsMobile", "mq", "onChange", "MONO", "SANS", "DATA", "d", "t", "tList", "META", "open", "setOpen", "isOpen", "i", "toggle", "s", "total", "shipped", "upcoming", "shippedPct", "progressBefore", "progressAfter", "renderNode", "status", "meta", "opened", "notLast", "e", "f", "fi", "WALLETS", "icon", "id", "SCROLL_FLAG", "SCROLL_EVENT", "SCROLL_TTL_MS", "DonateCrypto", "isMobile", "setIsMobile", "sel", "setSel", "copied", "setCopied", "slide", "setSlide", "touchStart", "sectionRef", "copyTimer", "mq", "onChange", "timer", "scrollHere", "at", "el", "reduce", "cur", "pick", "i", "next", "onTouchStart", "e", "p", "onTouchEnd", "start", "dx", "dy", "forward", "isRTL", "copy", "ta", "SANS", "MONO", "FIELD", "tabs", "w", "on", "copyBtn", "t", "addressField", "warn", "left", "dirSign", "slideAnim", "plate", "dots", "right", "card", "CommunityCTA", "isMobile", "setIsMobile", "mq", "onChange", "ACCENT", "ACCENT_SOLID", "SANS", "githubUrl", "feedbackUrl", "githubBtn", "e", "t", "feedbackBtn", "card", "FileTransferComponent", "webrtcManager", "isConnected", "pendingIncomingFiles", "onIncomingDecision", "showDropzone", "dragOver", "setDragOver", "transfers", "setTransfers", "fileInputRef", "interval", "currentTransfers", "handleFileSelect", "files", "file", "validation", "errorMessage", "error", "t", "handleDrop", "e", "handleDragOver", "handleDragLeave", "handleFileInputChange", "formatFileSize", "bytes", "k", "sizes", "i", "getStatusIcon", "status", "getStatusText", "renderProgress", "transfer", "color", "total", "done", "isDone", "squares", "filled", "_", "i_done", "handleIncomingDecision", "fileId", "accepted", "url", "a", "ICE_LIMITS", "ALLOWED_ICE_SCHEMES", "SCHEME_RE", "HOST_RE", "TRANSPORT_RE", "hasControlChars", "value", "i", "code", "validateIceUrl", "url", "t", "trimmed", "scheme", "rest", "hostPort", "query", "extra", "isTurnUrl", "validateSecret", "label", "normalizeIceServers", "entries", "errors", "warnings", "servers", "entry", "index", "rawUrls", "cleanUrls", "entryHasTurn", "rawUrl", "err", "userErr", "credErr", "server", "parseIceServersInput", "text", "parsed", "arr", "line", "listHasTurn", "React", "PLACEHOLDER", "testIceServers", "servers", "timeoutMs", "found", "t", "pc", "error", "resolve", "settled", "finish", "timer", "event", "c", "offer", "IceServerSettings", "isOpen", "onClose", "initial", "hasSaved", "onApply", "onForget", "embedded", "useCustom", "setUseCustom", "serversText", "setServersText", "relayOnly", "setRelayOnly", "persist", "setPersist", "testState", "setTestState", "testResult", "setTestResult", "parsed", "parseIceServersInput", "hasTurn", "listHasTurn", "canApply", "handleTest", "result", "handleApply", "handleForget", "h", "C_ORANGE", "C_GREEN", "C_ORANGE_SOLID", "C_GREEN_SOLID", "MONO", "radioCard", "selected", "onClick", "title", "desc", "extraStyle", "toggleRow", "on", "accent", "badge", "direction", "body", "ICE_LIMITS", "custom", "e", "err", "i", "w", "testColor", "footerBtns", "CallUIComponent", "webrtcManager", "peerTitle", "h", "MONO", "ICON", "svg", "inner", "size", "sw", "call", "setCall", "minimized", "setMinimized", "seconds", "setSeconds", "remoteVideoRef", "remoteAudioRef", "selfVideoRef", "onState", "state", "prev", "phase", "active", "isVideo", "remoteStream", "localStream", "attach", "el", "stream", "muted", "p", "started", "iv", "fmt", "s", "ringing", "callStatus", "t", "name", "ctrlBase", "dangerCtrl", "endBtn", "minimizeBtn", "light", "encBadge", "QUALITY", "qualityIndicator", "compact", "q", "bars", "i", "doAccept", "doDecline", "doEnd", "doMute", "doCamera", "doFlip", "doUpgrade", "hiddenAudio", "labeled", "key", "btn", "label", "avatarDisc", "ring", "EnhancedSecureCryptoUtils", "EnhancedSecureWebRTCManager", "EnhancedSecureFileTransfer", "purgeLegacyOfferRecords", "stale", "i", "key", "loadQrBundle", "error", "scheduleQrBundle", "start"]
 }
diff --git a/dist/app.js b/dist/app.js
index 31e562e..ff21bf2 100644
--- a/dist/app.js
+++ b/dist/app.js
@@ -1,11 +1,11 @@
-function ja(t=globalThis.window){return t?.SECUREBIT_DEBUG===!0}function Us({targetWindow:t=globalThis.window,webrtcManagerRef:e,onClearData:n,clearConsole:r=()=>{typeof console.clear=="function"&&console.clear()}}){return ja(t)?(t.forceCleanup=()=>{n(),e.current&&e.current.disconnect()},t.clearLogs=r,t.webrtcManagerRef=e,()=>{delete t.forceCleanup,delete t.clearLogs,delete t.webrtcManagerRef}):()=>{}}var $a="securebit-net";var Wr="ice-device-key",jr="ice-settings";function $r(){return typeof indexedDB<"u"&&typeof crypto<"u"&&!!crypto.subtle}function qr(){return new Promise((t,e)=>{let n;try{n=indexedDB.open($a,1)}catch(r){e(r);return}n.onupgradeneeded=()=>{let r=n.result;r.objectStoreNames.contains("kv")||r.createObjectStore("kv")},n.onsuccess=()=>t(n.result),n.onerror=()=>e(n.error)})}function Vr(t,e){return new Promise((n,r)=>{let c=t.transaction("kv","readonly").objectStore("kv").get(e);c.onsuccess=()=>n(c.result),c.onerror=()=>r(c.error)})}function Gs(t,e,n){return new Promise((r,i)=>{let c=t.transaction("kv","readwrite");c.objectStore("kv").put(n,e),c.oncomplete=()=>r(),c.onerror=()=>i(c.error)})}function qa(t,e){return new Promise((n,r)=>{let i=t.transaction("kv","readwrite");i.objectStore("kv").delete(e),i.oncomplete=()=>n(),i.onerror=()=>r(i.error)})}async function Ya(t){let e=await Vr(t,Wr);if(e instanceof CryptoKey)return e;let n=await crypto.subtle.generateKey({name:"AES-GCM",length:256},!1,["encrypt","decrypt"]);return await Gs(t,Wr,n),n}async function Hs(t){if(!$r())throw new Error("Persistent storage is not available in this browser");let e=await qr(),n=await Ya(e),r=JSON.stringify({version:1,servers:Array.isArray(t?.servers)?t.servers:[],privacyMode:t?.privacyMode==="relay-only"?"relay-only":"standard"}),i=crypto.getRandomValues(new Uint8Array(12)),c=await crypto.subtle.encrypt({name:"AES-GCM",iv:i},n,new TextEncoder().encode(r));await Gs(e,jr,{iv:Array.from(i),data:Array.from(new Uint8Array(c))})}async function Ws(){if(!$r())return null;try{let t=await qr(),e=await Vr(t,jr);if(!e||!Array.isArray(e.iv)||!Array.isArray(e.data))return null;let n=await Vr(t,Wr);if(!(n instanceof CryptoKey))return null;let r=await crypto.subtle.decrypt({name:"AES-GCM",iv:new Uint8Array(e.iv)},n,new Uint8Array(e.data)),i=JSON.parse(new TextDecoder().decode(r));return{servers:Array.isArray(i.servers)?i.servers:[],privacyMode:i.privacyMode==="relay-only"?"relay-only":"standard"}}catch{return null}}async function Yr(){if($r())try{let t=await qr();await qa(t,jr)}catch{}}var Ka="/api/turn-credentials",$s=["turn.securebit.chat","144.172.96.126"];var Vs=[6e4,3e5,9e5];function qs(t){let e=/^turns?:([^:?\s]+)/i.exec(String(t||"").trim());return e?e[1].toLowerCase():null}function Qa(t){return!t||typeof t!="object"?!1:(Array.isArray(t.urls)?t.urls:[t.urls]).some(n=>$s.includes(qs(n)))}function Hn(t){if(typeof t!="string"||t.length===0||t.length>512)return!1;for(let e=0;e<t.length;e++){let n=t.charCodeAt(e);if(n<32||n===127)return!1}return!0}function Xa(t,e){if(!Array.isArray(t)||!e||!Hn(e.username)||!Hn(e.credential))return!1;let n=!1;for(let r of t)Qa(r)&&(r.username=e.username,r.credential=e.credential,n=!0);if(!n&&Array.isArray(e.urls)){let r=e.urls.filter(i=>Hn(i)&&$s.includes(qs(i)));r.length>0&&(t.push({urls:r,username:e.username,credential:e.credential}),n=!0)}return n}function Ja(t,e){let n=t&&Array.isArray(t.iceServers)?t.iceServers[0]:null;if(!n||!Hn(n.username)||!Hn(n.credential))return null;let r=Number(String(n.username).split(":")[0]);if(!Number.isFinite(r)||r<=e)return null;let i=Number(t.ttl);return{urls:Array.isArray(n.urls)?n.urls.slice(0,8):[],username:n.username,credential:n.credential,expiry:r,ttl:Number.isFinite(i)&&i>0?i:r-e}}var js=!1;function Ys(t={}){if(js||typeof window>"u"||typeof fetch!="function")return;js=!0;let e=t.getList||(()=>window.SECUREBIT_ICE_SERVERS),n=0,r=0,i=null,c=0,d=m=>{i&&clearTimeout(i),i=setTimeout(h,m)};async function h(){i=null;try{let m=await fetch(Ka,{method:"POST",cache:"no-store",credentials:"omit"});if(!m.ok)throw new Error(`HTTP ${m.status}`);let v=Ja(await m.json(),Date.now()/1e3);if(!v)throw new Error("unusable response");Xa(e(),v),n=v.expiry,r=v.ttl,c=0,d(Math.max(60,r/2)*1e3)}catch{let v=Vs[Math.min(c,Vs.length-1)];c++,d(v)}}document.addEventListener("visibilitychange",()=>{if(document.visibilityState!=="visible")return;let m=Date.now()/1e3;(!n||n-m<r/2)&&h()}),h()}var Nn=["en","de","fr","es","uk","ru","zh","ko","hi","ar","he","fa","ur"],or={en:{htmlLang:"en",nativeName:"English",abbr:"EN",dir:"ltr",path:"/"},de:{htmlLang:"de",nativeName:"Deutsch",abbr:"DE",dir:"ltr",path:"/de/"},fr:{htmlLang:"fr",nativeName:"Fran\xE7ais",abbr:"FR",dir:"ltr",path:"/fr/"},es:{htmlLang:"es",nativeName:"Espa\xF1ol",abbr:"ES",dir:"ltr",path:"/es/"},uk:{htmlLang:"uk",nativeName:"\u0423\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u0430",abbr:"UK",dir:"ltr",path:"/uk/"},ru:{htmlLang:"ru",nativeName:"\u0420\u0443\u0441\u0441\u043A\u0438\u0439",abbr:"RU",dir:"ltr",path:"/ru/"},zh:{htmlLang:"zh-Hans",nativeName:"\u7B80\u4F53\u4E2D\u6587",abbr:"ZH",dir:"ltr",path:"/zh/"},ko:{htmlLang:"ko",nativeName:"\uD55C\uAD6D\uC5B4",abbr:"KO",dir:"ltr",path:"/ko/"},hi:{htmlLang:"hi",nativeName:"\u0939\u093F\u0928\u094D\u0926\u0940",abbr:"HI",dir:"ltr",path:"/hi/"},ar:{htmlLang:"ar",nativeName:"\u0627\u0644\u0639\u0631\u0628\u064A\u0629",abbr:"AR",dir:"rtl",path:"/ar/"},he:{htmlLang:"he",nativeName:"\u05E2\u05D1\u05E8\u05D9\u05EA",abbr:"HE",dir:"rtl",path:"/he/"},fa:{htmlLang:"fa",nativeName:"\u0641\u0627\u0631\u0633\u06CC",abbr:"FA",dir:"rtl",path:"/fa/"},ur:{htmlLang:"ur",nativeName:"\u0627\u0631\u062F\u0648",abbr:"UR",dir:"rtl",path:"/ur/"}},Ks={en:{"language.suggest.text":"This page is also available in English.","language.suggest.cta":"Read in English","language.suggest.dismiss":"Dismiss"},de:{"language.suggest.text":"Diese Seite gibt es auch auf Deutsch.","language.suggest.cta":"Auf Deutsch lesen","language.suggest.dismiss":"Schlie\xDFen"},fr:{"language.suggest.text":"Cette page est aussi disponible en fran\xE7ais.","language.suggest.cta":"Lire en fran\xE7ais","language.suggest.dismiss":"Fermer"},es:{"language.suggest.text":"Esta p\xE1gina tambi\xE9n est\xE1 disponible en espa\xF1ol.","language.suggest.cta":"Leer en espa\xF1ol","language.suggest.dismiss":"Cerrar"},uk:{"language.suggest.text":"\u0426\u044F \u0441\u0442\u043E\u0440\u0456\u043D\u043A\u0430 \u0442\u0430\u043A\u043E\u0436 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E.","language.suggest.cta":"\u0427\u0438\u0442\u0430\u0442\u0438 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E","language.suggest.dismiss":"\u0417\u0430\u043A\u0440\u0438\u0442\u0438"},ru:{"language.suggest.text":"\u042D\u0442\u0430 \u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u0442\u0430\u043A\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043D\u0430 \u0440\u0443\u0441\u0441\u043A\u043E\u043C.","language.suggest.cta":"\u0427\u0438\u0442\u0430\u0442\u044C \u043F\u043E-\u0440\u0443\u0441\u0441\u043A\u0438","language.suggest.dismiss":"\u0417\u0430\u043A\u0440\u044B\u0442\u044C"},zh:{"language.suggest.text":"\u672C\u9875\u9762\u4E5F\u6709\u7B80\u4F53\u4E2D\u6587\u7248\u672C\u3002","language.suggest.cta":"\u9605\u8BFB\u7B80\u4F53\u4E2D\u6587","language.suggest.dismiss":"\u5173\u95ED"},ko:{"language.suggest.text":"\uC774 \uD398\uC774\uC9C0\uB294 \uD55C\uAD6D\uC5B4\uB85C\uB3C4 \uBCFC \uC218 \uC788\uC2B5\uB2C8\uB2E4.","language.suggest.cta":"\uD55C\uAD6D\uC5B4\uB85C \uBCF4\uAE30","language.suggest.dismiss":"\uB2EB\uAE30"},hi:{"language.suggest.text":"\u092F\u0939 \u092A\u0943\u0937\u094D\u0920 \u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092D\u0940 \u0909\u092A\u0932\u092C\u094D\u0927 \u0939\u0948\u0964","language.suggest.cta":"\u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092A\u0922\u093C\u0947\u0902","language.suggest.dismiss":"\u092C\u0902\u0926 \u0915\u0930\u0947\u0902"},ar:{"language.suggest.text":"\u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062D\u0629 \u0645\u062A\u0648\u0641\u0631\u0629 \u0623\u064A\u0636\u064B\u0627 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629.","language.suggest.cta":"\u0627\u0642\u0631\u0623 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629","language.suggest.dismiss":"\u0625\u063A\u0644\u0627\u0642"},he:{"language.suggest.text":"\u05D4\u05D3\u05E3 \u05D4\u05D6\u05D4 \u05D6\u05DE\u05D9\u05DF \u05D2\u05DD \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA.","language.suggest.cta":"\u05DC\u05E7\u05E8\u05D9\u05D0\u05D4 \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA","language.suggest.dismiss":"\u05E1\u05D2\u05D9\u05E8\u05D4"},fa:{"language.suggest.text":"\u0627\u06CC\u0646 \u0635\u0641\u062D\u0647 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC \u0647\u0645 \u062F\u0631 \u062F\u0633\u062A\u0631\u0633 \u0627\u0633\u062A.","language.suggest.cta":"\u062E\u0648\u0627\u0646\u062F\u0646 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC","language.suggest.dismiss":"\u0628\u0633\u062A\u0646"},ur:{"language.suggest.text":"\u06CC\u06C1 \u0635\u0641\u062D\u06C1 \u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u0628\u06BE\u06CC \u062F\u0633\u062A\u06CC\u0627\u0628 \u06C1\u06D2\u06D4","language.suggest.cta":"\u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u067E\u0691\u06BE\u06CC\u06BA","language.suggest.dismiss":"\u0628\u0646\u062F \u06A9\u0631\u06CC\u06BA"}};var Za={"language.label":"Language","language.suggest.text":"This page is also available in English.","language.suggest.cta":"Read in English","language.suggest.dismiss":"Dismiss","theme.label":"Theme","theme.system":"System","theme.light":"Light","theme.dark":"Dark","donate.eyebrow":"Donate in crypto","donate.title":"Keep SecureBit independent","donate.description":"Every donation goes to development and audits.","donate.copy":"Copy","donate.copied":"Copied","donate.net.usdt":"USDT \xB7 Tron (TRC-20)","donate.net.btc":"Bitcoin network","donate.net.eth":"Ethereum mainnet","donate.warn.usdt":"Send only USDT on Tron (TRC-20).","donate.warn.btc":"Send only BTC on the Bitcoin network.","donate.warn.eth":"Send only ETH on Ethereum mainnet.","donate.qrAlt":"QR code of the {coin} donation address","community.title":"Join the future of privacy","community.description":"SecureBit grows thanks to its community. Your ideas and feedback shape the future of secure communication - built in the open, with complete ASN.1 validation end-to-end.","community.github":"GitHub Repository","community.feedback":"Feedback","unique.eyebrow":"What sets us apart","unique.heading":"Why SecureBit is unique","unique.s1.titleTop":"Layered","unique.s1.titleBottom":"encryption core","unique.s1.collapsed":"Encryption core","unique.s1.desc":"ECDH P-384 key exchange, AES-256-GCM payloads, ECDSA signatures and full ASN.1 validation - composed into one hardened pipeline.","unique.s1.tags":["ECDH P-384","AES-256-GCM","ECDSA","ASN.1"],"unique.s2.titleTop":"Pure P2P","unique.s2.titleBottom":"WebRTC","unique.s2.collapsed":"Pure P2P WebRTC","unique.s2.desc":"Messages travel directly between devices over WebRTC. No relay holds your data - the server only helps two peers find each other.","unique.s2.tags":["DTLS 1.3","No relay"],"unique.s3.titleTop":"Perfect","unique.s3.titleBottom":"forward secrecy","unique.s3.collapsed":"Forward secrecy","unique.s3.desc":"Session keys rotate continuously and are discarded after use, so a single compromised key can never unlock past conversations.","unique.s3.tags":["Ephemeral keys","Auto-rotate"],"unique.s4.titleTop":"Traffic","unique.s4.titleBottom":"obfuscation","unique.s4.collapsed":"Traffic obfuscation","unique.s4.desc":"Packet sizes and timing are padded and randomized, hiding metadata patterns from anyone watching the wire.","unique.s4.tags":["Packet padding","Timing jitter"],"unique.s5.titleTop":"Zero data","unique.s5.titleBottom":"collection","unique.s5.collapsed":"Zero data collection","unique.s5.desc":"No accounts, no logs, no message storage. There is nothing on a server to leak, subpoena, or sell.","unique.s5.tags":["No accounts","No logs"],"partners.eyebrow":"Partners & ecosystem","partners.heading":"Trusted by our partners","partners.aegis.desc":"Capital partner securing confidential financial communications across its portfolio.","partners.aegis.role":"Strategic backer","partners.furilabs.desc":"Privacy-first Linux phones that ship SecureBit as a default secure channel.","partners.furilabs.role":"Technology partner","partners.inviteTitle":"Become a partner","partners.inviteDesc":"Building privacy hardware or infrastructure? Let's integrate SecureBit.","partners.inviteCta":"Start a conversation","roadmap.eyebrow":"Development Roadmap","roadmap.heading":"The evolution of SecureBit","roadmap.subheading":"From the first prototype to a quantum-resistant, decentralized network - with complete ASN.1 validation at every layer.","roadmap.progress":"{shipped} of {total} milestones shipped","roadmap.upcoming":"{upcoming} on the way","roadmap.keyFeatures":"Key features","hero.headlineTop":"A direct line","hero.headlineBottom":"only you two can read.","hero.subheading":"Keys are generated on your device and exchanged peer-to-peer. No accounts, no servers storing your messages.","hero.diagramAlt":"A direct encrypted line to one peer, with two more peers joining the mesh","intro.createTitle":"Create a new channel","intro.createDesc":"Your device generates the keys and a one-time invitation. Nothing touches a server.","intro.createCta":"Generate keys & invitation","intro.joinTitle":"Join a channel","intro.scanTitle":"Scan QR with camera","intro.scanSubtitle":"Fastest - point at your peer's screen","intro.orPasteCode":"or paste code","intro.pastePlaceholder":"Paste invitation code here\u2026","intro.connect":"Connect","intro.connecting":"Processing\u2026","roadmap.r1.title":"Start of Development","roadmap.r1.sub":"Idea, prototype, and infrastructure setup","roadmap.r1.date":"Early 2025","roadmap.r1.features":["Concept and requirements formation","Stack selection: WebRTC, P2P, cryptography","First messaging prototypes","Repository creation and CI","Basic encryption architecture","UX/UI design"],"roadmap.r2.title":"Alpha Release","roadmap.r2.sub":"First public alpha: basic chat and key exchange","roadmap.r2.date":"Spring 2025","roadmap.r2.features":["Basic P2P messaging via WebRTC","Simple E2E encryption (demo scheme)","Stable signaling and reconnection","Minimal UX for testing","Feedback collection from early testers"],"roadmap.r3.title":"Security Hardened","roadmap.r3.sub":"Security strengthening and stable branch release","roadmap.r3.date":"Summer 2025","roadmap.r3.features":["ECDH/ECDSA implementation in production","Perfect Forward Secrecy and key rotation","Improved authentication checks","File encryption and large payload transfers","Audit of basic cryptoprocesses"],"roadmap.r4.title":"Scaling & Stability","roadmap.r4.sub":"Network scaling and stability improvements","roadmap.r4.date":"Fall 2025","roadmap.r4.features":["Optimization of P2P connections and NAT traversal","Reconnection mechanisms and message queues","Reduced battery consumption on mobile","Multi-device synchronization support","Monitoring and logging tools for developers"],"roadmap.r5.title":"Privacy-first Release","roadmap.r5.sub":"Focus on privacy: minimizing metadata","roadmap.r5.date":"Winter 2025","roadmap.r5.features":["Metadata protection and fingerprint reduction","Experiments with onion routing and DHT","Options for anonymous connections","Preparation for open code audit","Improved user verification processes"],"roadmap.r6.title":"Enhanced Security Edition","roadmap.r6.sub":"18-layer military-grade cryptography with complete ASN.1 validation","roadmap.r6.date":"Late 2025","roadmap.r6.features":["ECDH + DTLS + SAS triple-layer security","ECDH P-384 + AES-GCM 256-bit encryption","DTLS fingerprint verification","SAS (Short Authentication String) verification","Perfect Forward Secrecy with key rotation","Enhanced MITM attack prevention","Complete ASN.1 DER validation","OID and EC point verification","SPKI structure validation","P2P WebRTC architecture","Metadata protection","100% open source code"],"roadmap.r7.title":"Desktop Edition","roadmap.r7.sub":"Native desktop apps for Windows, macOS, and Linux","roadmap.r7.date":"Early 2026","roadmap.r7.features":["Windows desktop app (Tauri v2)","macOS desktop app (Tauri v2)","Linux AppImage support (Tauri v2)","Real-time notifications","Automatic reconnection","Cross-device synchronization","Improved UX/UI","Support for files up to 100MB"],"roadmap.r8.title":"Secure Voice & Calls","roadmap.r8.sub":"Encrypted voice messages, audio calls, and video calls","roadmap.r8.date":"Early 2026","roadmap.r8.features":["End-to-end encrypted voice messages","1:1 encrypted audio calls (WebRTC)","1:1 encrypted video calls (WebRTC)","Perfect Forward Secrecy for live media","SRTP/DTLS-protected media streams","In-call SAS verification","Call notifications and auto-reconnection","Low-latency P2P media"],"roadmap.r9.title":"Group Communications","roadmap.r9.sub":"Group chats with preserved privacy","roadmap.r9.date":"Now","roadmap.r9.features":["P2P group chats up to 8 participants","Mesh delivery with signed relay fallback","One group safety code, compared by everyone","Commit-then-reveal ceremony against code grinding","Per-group identity keys, ephemeral by design","Signed membership with epoch ordering","Signed messages, so a split transcript is provable","No server, no shared group key, no history"],"roadmap.r10.title":"Mobile Edition","roadmap.r10.sub":"Native mobile apps for iOS and Android","roadmap.r10.date":"Q2 2027","roadmap.r10.features":["iOS native app (Swift/SwiftUI)","Android native app (Kotlin/Jetpack Compose)","PWA support for mobile browsers","Real-time push notifications","Battery optimization","Mobile-optimized UX/UI","Offline message queuing","Biometric authentication"],"roadmap.r11.title":"Quantum-Resistant Edition","roadmap.r11.sub":"Protection against quantum computers","roadmap.r11.date":"Q4 2027","roadmap.r11.features":["Post-quantum cryptography CRYSTALS-Kyber","SPHINCS+ digital signatures","Hybrid scheme: classic + PQ","Quantum-safe key exchange","Updated hashing algorithms","Migration of existing sessions","Compatibility with v5.x","Quantum-resistant protocols"],"roadmap.r12.title":"Decentralized Network","roadmap.r12.sub":"Fully decentralized network","roadmap.r12.date":"2028","roadmap.r12.features":["Node mesh network","DHT for peer discovery","Built-in onion routing","Tokenomics and node incentives","Governance via DAO","Interoperability with other networks","Cross-platform compatibility","Self-healing network"],"roadmap.r13.title":"AI Privacy Assistant","roadmap.r13.sub":"AI for privacy and security","roadmap.r13.date":"2028+","roadmap.r13.features":["Local AI threat analysis","Automatic MITM detection","Adaptive cryptography","Personalized security recommendations","Zero-knowledge machine learning","Private AI assistant","Predictive security","Autonomous attack protection"],"handshake.step1":"Generating ECDH P-384 key pair","handshake.step2":"Deriving verification code","handshake.step3":"Pinning Perfect Forward Secrecy","handshake.securingTitle":"Securing your channel","handshake.answerTitle":"Building your answer","handshake.securingDesc":"Forging keys strong enough to resist tampering.","handshake.shareTitle":"Share your invitation","handshake.sendAnswerTitle":"Send back your answer","handshake.shareDesc":"Show the QR or send the code to your peer. It is one-time and expires shortly.","handshake.sendAnswerDesc":"Give this answer to the channel creator so they can finish the handshake.","handshake.establish":"Establish connection","handshake.thenReceive":"Then receive the answer your peer sends back","handshake.pasteAnswerPlaceholder":"Paste peer's answer code\u2026","handshake.answerSentNote":"Send this answer to the creator, then wait - the chat opens once they connect.","handshake.qrHint":"Keep this open until your peer captures the code.","handshake.qrHintFrames":"The handshake is split across {frames} frames - keep this open until your peer captures all of them.","verify.title":"Security verification","verify.desc":"Compare this safety code with your peer over a separate channel (voice / in person), then type it to unlock the chat.","verify.enterLabel":"Enter the verified code","verify.placeholder":"Type code here","verify.confirm":"Confirm code","verify.confirmed":"Confirmed","verify.mismatch":"Don't match","verify.yours":"Your confirmation","verify.peer":"Peer confirmation","verify.pending":"Pending","verify.waiting":"Waiting for code\u2026","verify.verified":"Channel verified","verify.bothConfirmed":"Both parties confirmed. Opening the secure chat\u2026","pwa.bannerTitle":"Install SecureBit.chat","pwa.bannerDesc":"Get the native app experience with enhanced security","pwa.install":"Install","pwa.dismiss":"Dismiss","pwa.close":"Close","pwa.iosTitle":"Install on iOS","pwa.iosStep1":"Tap the Share button","pwa.iosStep1Hint":"Usually at the bottom of Safari","pwa.iosStep2":'Find "Add to Home Screen"',"pwa.iosStep2Hint":"Scroll down in the share menu","pwa.iosStep3":'Tap "Add"',"pwa.iosStep3Hint":"Confirm to install SecureBit.chat","pwa.genericTitle":"Install SecureBit","pwa.genericDesc":"Your browser handles installs its own way. Pick the steps that match yours.","pwa.androidChromeHint":"Tap \u22EE in the top corner, then \u201CInstall app\u201D","pwa.androidOtherHint":"Tap the menu, then \u201CAdd to Home screen\u201D","pwa.gotIt":"Got it","pwa.installedTitle":"App Installed!","pwa.installedIos":"iOS App installed! Open from home screen.","pwa.installedGeneric":"SecureBit.chat is now on your device","pwa.anytimeTitle":"Install Anytime","pwa.anytimeDesc":"You can still install SecureBit.chat from your browser's menu for the best experience.","pwa.ok":"OK","step.open":"Step 1 \xB7 open a channel","step.exchange":"Step 2 \xB7 exchange","step.verification":"Step 3 \xB7 verification","action.create":"Create","action.join":"Join","action.back":"Back","action.copy":"Copy","action.copied":"Copied","action.scan":"Scan","action.downloadDesktop":"Download desktop app","action.advancedSettings":"Advanced settings","cred.offerTag":"offer \xB7 or copy text","cred.answerTag":"answer \xB7 or copy text","cred.reveal":"Click to reveal - keep this code private","qr.title":"Scan QR code","qr.subtitle":"Point your camera at their QR","qr.scanning":"Scanning\u2026","qr.hint":"Hold steady until all parts are captured. Camera access is local - nothing is uploaded.","mesh.you":"you","mesh.peer":"peer \xB7 session 1","mesh.joined2":"mara joined \xB7 +2","mesh.joined3":"tobi joined \xB7 +3","ice.title":"Network settings","ice.subtitle":"Configured locally - never shared with your peer","ice.intro":"SecureBit uses public STUN servers by default to negotiate the peer-to-peer link. Point it at your own STUN/TURN if you self-host.","ice.publicTitle":"Public servers (default)","ice.publicDesc":"Zero-config. Good for most users.","ice.customTitle":"My own STUN/TURN servers","ice.customDesc":"Up to {max} servers.","ice.turnNote":"A TURN relay sees both peers' IP and traffic timing - but never message contents, which stay end-to-end encrypted. Prefer ","ice.turnNoteTls":" (TLS).","ice.test":"Test servers","ice.testing":"Testing\u2026","ice.relayTitle":"Relay-only mode","ice.relayBadge":"MAX PRIVACY","ice.relayDesc":"Routes all traffic through TURN so your IP is never exposed to the peer. Requires a TURN server.","ice.relayWarning":"Relay-only is enabled but no TURN server is configured. The connection will not be able to start.","ice.persist":"Save on this device","ice.persistDesc":"Stored encrypted in this browser. Leave off to use only for this session.","ice.forget":"Forget saved","ice.cancel":"Cancel","ice.apply":"Apply","ice.errUnavailable":"WebRTC is not available in this browser","ice.errInvalid":"Invalid server configuration","update.title":"Update available","update.desc":"A newer version of SecureBit has been detected.","update.currentVersion":"Current version","update.newVersion":"New version","update.now":"Update now","update.later":"Later","update.unknown":"N/A","update.stepSaving":"Saving data...","update.stepSwCaches":"Clearing Service Worker caches...","update.stepSwUnregister":"Unregistering Service Workers...","update.stepBrowserCache":"Clearing browser cache...","update.stepVersion":"Updating version...","update.stepReload":"Reloading application...","update.error":"Update error. Please refresh the page manually (Ctrl+F5 or Cmd+Shift+R)","update.confirmSkip":"New version available. Update is recommended for security and stability. Continue without update?","offline.backOnline":"Back online","offline.mode":"Offline mode","offline.dismiss":"Dismiss","offline.lostTitle":"Connection lost","offline.lostDesc":"SecureBit is now in offline mode. Some features are limited, but your data stays safe.","offline.point1":"Your session and keys are preserved","offline.point2":"No data is stored on servers","offline.point3":"Messages & files sync when you reconnect","offline.continue":"Continue offline","offline.restoredTitle":"When you reconnect","offline.restoredDesc":"A dropped connection costs you nothing. SecureBit queues everything locally and resumes the encrypted session the instant you're back online.","offline.r1Title":"Your messages get delivered","offline.r1Desc":"Everything you wrote while offline is sent to your contact automatically.","offline.r2Title":"Files finish transferring","offline.r2Desc":"Uploads resume from where they stopped - no need to resend.","offline.r3Title":"Their messages & files arrive","offline.r3Desc":"Whatever your contact sent during the outage is delivered to you in order.","offline.r4Title":"Nothing is lost","offline.r4Desc":"After reconnect there's no gap - the conversation continues exactly where it paused.","offline.gotIt":"Got it","qr.showTitle":"Show QR code","qr.showSubtitle":"Full-screen \xB7 let your peer scan","qr.showSubtitleFrames":"Full-screen \xB7 let your peer scan all {frames} frames","notify.enabledBody":"Notifications enabled! You will receive alerts for new messages.","notify.workingBody":"Notifications are working! You will receive alerts for new messages.","pw.label":"Password input","pw.placeholder":"Enter password...","pw.decrypt":"Decrypt","pw.cancel":"Cancel","file.title":"File transfers","file.drop":"Drag & drop files here","file.dropHint":"Encrypted end-to-end before transfer \xB7 up to 100 MB","file.browse":"Browse device","file.incoming":"Incoming file request","file.accept":"Accept","file.reject":"Reject","file.download":"Download","file.notReady":"Connection not ready","file.tooLarge":"File too large","file.typeNotAllowed":"File type not allowed","file.maxConcurrent":"Maximum concurrent transfers","file.gone":"This file is no longer available for download.","call.incoming":"Incoming call","call.incomingVideo":"Incoming video call","call.encrypted":"Encrypted call","call.encryptedShort":"Encrypted","call.peer":"Secure peer","call.connecting":"Connecting\u2026","call.ringing":"Ringing\u2026","call.accept":"Accept","call.decline":"Decline","call.end":"End call","call.camera":"Camera","call.cameraOff":"Camera off","call.peerCameraOff":"Peer's camera is off","call.flipCamera":"Flip camera","call.addVideo":"Add video","call.video":"Video","call.muted":"Muted","call.expand":"Expand","call.minimize":"Minimize","call.quality":"Connection quality","call.qualityExcellent":"Excellent","call.videoPrefix":"Video \xB7 ","call.voicePrefix":"Voice \xB7 ","group.new":"New group","group.create":"Create group","group.join":"Join group","group.name":"Group name","group.nameTooLong":"The group name is too long.","group.capacity":"Up to {max} people, peer to peer. Everyone will compare one safety code before the group opens.","group.invite":"Invite","group.inviteMore":"Invite more members","group.invitePeople":"Invite {count} people","group.invitation":"Group invitation","group.addMembers":"Add members","group.roomFor":"Room for {remaining} more. Everyone will compare a new group code once they join.","group.membersCount":"{count} members","group.member":"Member","group.members":"Members","group.remove":"Remove {name}","group.message":"Message {name}","group.leave":"Leave","group.leaveThis":"Leave this group","group.cancel":"Cancel group","group.close":"Close","group.cancelBtn":"Cancel","group.decline":"Decline","group.working":"Working\u2026","group.sasTitle":"Group safety code","group.sasEveryone":"Everyone sees this code","group.sasCompare":"Compare the group code with every member to open this group.","group.sasReadAloud":"Read these digits aloud to ","group.sasWarning":"If even one member reads a different code, someone is sitting between you. Cancel the group - do not confirm.","group.confirmFirst":"Confirm the group code first","group.codeSuffix":" \xB7 code {code}","group.exchangingNonces":"Exchanging nonces\u2026","group.waitingCommit":"Waiting for every member to commit\u2026","group.waitingJoin":"Waiting for the other members to join\u2026","group.emptyChat":"Nothing here yet. Messages are signed by their sender and travel over each member's own encrypted link.","group.noVerified":"No verified chats yet. Open a 1:1 chat and compare its safety code first - a group is built out of connections you have already checked.","group.noMoreToAdd":"No other verified chats to add. Open a 1:1 chat and compare its safety code first.","group.directLink":"Direct peer-to-peer link","group.noDirectLink":"No direct link yet - messages are relayed by another member while one is being built","group.relayNote":"Some members have no direct link to you yet. Their messages travel through another member, who can see that you are talking but cannot read past the signature or change what you said. The group keeps trying to connect them directly.","group.relayOnlyOff":"Relay-only mode is off, so each member connects to you directly and learns your IP address - including members somebody else invited. Turn it on in network settings if that matters here.","group.memberOffline":"{name} is offline and will not receive messages. They are still a member - removing them re-keys the group.","group.joinNote":"Other members will learn your presence in this group. There is no message history to catch up on - a group starts empty.","group.inviteSentNote":"The group keeps working until they accept. There is no history for them to catch up on - they will only see what is sent from now on.","group.errNotCreated":"Group not created","group.errNobodyAccepted":"Nobody accepted the invitation in time.","group.errNothingSent":"Nothing was sent and nothing was verified. Close this and try again once everyone is connected.","group.errNotFormed":"This group could not be formed.","group.errFull":"This group is full.","group.errInviteFailed":"The invitation could not be sent - that chat is not connected.","group.errNoMemberList":"The group owner never sent the member list.","group.errUnsignedList":"The member list was not signed by the group owner. Do not retry - tell them.","group.errNotOwner":"Someone other than the group owner tried to change the members.","hdr.tagline":"End-to-end encrypted","hdr.netSettings":"Advanced network settings","hdr.netSettingsTitle":"Advanced network settings (STUN/TURN)","hdr.disconnect":"Disconnect","status.connected":"Connected","status.connecting":"Connecting...","status.notConnected":"Not connected","status.reconnecting":"Reconnecting...","status.retrying":"Retrying...","status.verifying":"Verifying...","status.peerDisconnected":"Peer disconnected","sec.replayProtection":"Replay Protection","sec.messageIntegrity":"Message Integrity (HMAC)","sec.forwardSecrecy":"Perfect Forward Secrecy","sec.metadataProtection":"Metadata Protection","sec.trafficObfuscation":"Traffic Obfuscation","sec.realTests":"Real Cryptographic Tests","sec.simulatedData":"Simulated Data","sec.testPassed":"Test passed","sec.testFailed":"Test failed or unavailable","sec.verificationDone":"Real cryptographic verification completed","sec.verificationInProgress":"Security verification in progress...","sec.verificationWait":`Security verification in progress...
-Please wait for real-time cryptographic verification to complete.`,"sec.verificationUnavailable":"Security verification not available","chat.placeholder":"Type an encrypted message\u2026","chat.send":"Send message","chat.sendFiles":"Send files","chat.hideFiles":"Hide files","chat.recordVoice":"Record voice message","chat.sendVoice":"Send voice message","chat.discard":"Discard","chat.codeBlock":"Send as a code block (expands the input)","chat.codeHint":"Code snippet \xB7 formatting preserved \xB7 \u2318\u21B5 to send","chat.viewOnce":"View once","chat.viewOnceTitle":"View once - vanishes after the peer reads it","chat.viewOncePrefix":"View once \xB7 ","chat.viewOnceTap":"View once \xB7 tap to reveal","chat.viewedOnce":"Viewed once","chat.disappearing":"Disappearing message - deletes on both sides","chat.disappearAfter":"Disappear after","chat.visibleFor":"Visible for","chat.timerPrefix":"Timer \xB7 ","chat.expired":"This message has expired","chat.deleteForEveryone":"Delete for everyone","chat.sending":"Sending","chat.delivered":"Delivered","chat.notSent":"Not sent","chat.notSentReason":"Not sent - the secure channel is not ready. Reconnect to continue.","chat.encrypted":"Encrypted","chat.decrypted":"Decrypted","chat.encryptedOnDevice":"Encrypted on your device","chat.uploading":"Uploading","chat.downloading":"Downloading","chat.transferring":"Transferring\u2026","chat.copied":"Copied!","chat.collapse":"Collapse","chat.closeMenu":"Close menu","chat.newChat":"New chat","chat.newGroup":"New group","chat.createGroup":"Create a group","chat.groupChats":"Group chats","chat.secureChat":"Secure chat","chat.nameThis":"Name this chat","chat.rename":"Rename chat (local only)","chat.renameHint":"Double-click to rename","chat.localLabel":"Local label \xB7 stored only on this device","chat.setStatus":"Set your status","chat.yourStatusPrefix":"Your status - ","chat.meshHint":"Up to 8 peers \xB7 P2P mesh","chat.offline":"Offline","chat.noNetwork":"No network \xB7 reconnecting","chat.startVoiceCall":"Start encrypted voice call","chat.startVideoCall":"Start encrypted video call","chat.verifyForCalls":"Verify the session to enable calls","chat.e2eeNote":"Every message is end-to-end encrypted on your device before it leaves.","chat.peersOnly":"Sent end-to-end to connected peers only - never stored on a server.","flow.invitationCreated":"Secure invitation created","flow.invitationCreatedBang":"Secure invitation created and encrypted!","flow.responseCreated":"Secure response created","flow.responseCreatedBang":"Secure response created!","flow.sendInvitation":"Send the invitation code to your interlocutor via a secure channel (voice call, SMS, etc.).","flow.sendResponse":"Send the response code to the initiator via a secure channel or let them scan the QR code below.","flow.sendEncryptedCode":"Send the encrypted code","flow.sendTheResponse":"Send the response","flow.pasteOrWrite":"Paste or write code\u2026","flow.processingInvitation":"Processing the secure invitation...","flow.processingResponse":"Processing the secure response...","flow.finalizing":"Finalizing the secure connection...","flow.channelEstablished":"Secure channel established","flow.channelReady":"Secure channel is ready","flow.restoring":"Restoring connection\u2026","flow.invitationCaptured":"Invitation captured.","err.needInvitation":"You need to insert the invitation code from your interlocutor.","err.needResponse":"You need to insert the response code from your interlocutor.","err.responseFormat":"Invalid response format - please check the code","err.responseNoKey":"Invalid response code - missing or corrupted cryptographic key. Please check the code and try again.","err.responseNoSignKey":"Invalid response code - missing signature verification key. Please check the code and try again.","err.responseOutdated":"Response data is outdated - please use a fresh invitation","err.setupError":"Connection setup error","err.notReady":"Connection not ready","err.securityBreach":"Security breach detected - connection rejected","err.securityValidation":"Security validation failed - possible attack detected","err.retiredQr":"This QR code uses a retired format that could not transfer the invitation. Ask your peer to generate a new one, or use copy/paste.","err.compressedQrNote":"Compressed QR may omit SDP for brevity. Use copy/paste if connection fails.","err.inviteNotConnected":"The invitation could not be sent. That chat is not connected right now.","err.inviteNotConnectedRetry":"The invitation could not be sent. That chat is not connected right now - reopen it and try again.","err.nobodyAccepted":"Nobody accepted the invitation. The group is unchanged.","err.noAudio":"No audio captured - check microphone permission and try again.","err.voiceNeedsConnection":"Voice message needs an active secure connection. Reconnect and try again.","err.voiceRestoring":"Restoring the connection - try sending the voice message again in a moment.","err.fileTooLarge":"File too large","sas.safetyNumber":"Safety number","sas.incorrect":"Incorrect code. Check it with your peer and try again.","sas.noMatch":"The codes do not match","sas.makeSure":"Make sure the codes match exactly.","sas.tooManyAttempts":"Too many incorrect attempts. Session reset for safety.","sas.verificationFailed":"Verification failed","sas.verified":"Verified \xB7 Perfect Forward Secrecy","sas.runVerification":"Run security verification","sec.panelTitle":"Network & crypto details","sec.security":"Security","sec.transport":"Transport","sec.keyExchange":"Key exchange","sec.allEnabled":"All security features enabled by default","sec.realTimeNote":"Real-time verification using actual cryptographic functions - no mock data.","sec.simulatedWarning":"Warning: connection may not be fully established - values may be simulated.","dl.title":"Download SecureBit","dl.free":"Free \xB7 open source","dl.soon":"Mobile (iOS, Android) and browser extensions (Chrome, Firefox, Opera) are coming soon.","chatHdr.chat":"Chat","chatHdr.chats":"Chats","chatHdr.newChat":"+ New","chatHdr.secure":"Secure","chatHdr.p2pSub":"P2P \xB7 end-to-end encrypted","chatHdr.save":"Save","chatHdr.close":"Close","chatHdr.expand":"Expand","chatHdr.you":"You","chatHdr.qrCode":"QR code","chat.disconnected":"Disconnected","call.mute":"Mute","call.endShort":"End","group.add":"Add","group.send":"Send","sec.pfsShort":"Perfect Forward Secrecy","sec.cipher":"Cipher","chat.close":"Close","file.needConnection":"File transfer needs an open connection","presence.available":"Available","presence.away":"Away","presence.busy":"Busy","presence.offline":"Offline","presence.invisible":"Invisible","presence.availableDesc":"Online and reachable","presence.awayDesc":"Idle \xB7 stepped away","presence.busyDesc":"Do not disturb","presence.invisibleDesc":"Appear offline to peers","presence.online":"Online","conn.p2p":"P2P \xB7 connected","conn.verifying":"Verifying\u2026","conn.connecting":"Connecting\u2026","conn.reconnecting":"Reconnecting\u2026","conn.peerDisconnected":"Peer disconnected","conn.disconnected":"Disconnected","chat.defaultLabel":"Chat","groupPhase.forming":"Forming\u2026","groupPhase.commitments":"Exchanging commitments\u2026","groupPhase.revealing":"Revealing\u2026","groupPhase.compare":"Compare the group code","groupPhase.ready":"Group ready","groupPhase.failed":"Group failed","call.qualityGood":"Good","call.qualityFair":"Fair","call.qualityWeak":"Weak","msg.code":"Code","msg.timer":"Timer","msg.voice":"Voice","msg.play":"Play","msg.sent":"Sent","msg.read":"Read","report.title":"Real-time security verification","report.active":"Active","report.testsPassed":"Tests passed","report.verifiedAt":"Verified at","report.source":"Source","secTest.verifyECDHKeyExchange":"ECDH key exchange","secTest.verifyECDSASignatures":"ECDSA digital signatures","secTest.verifyEncryption":"AES-GCM encryption","secTest.verifyMessageIntegrity":"Message integrity","secTest.verifyPerfectForwardSecrecy":"Perfect forward secrecy","secTest.verifyPFS":"Perfect forward secrecy","secTest.verifyReplayProtection":"Replay protection","secTest.verifyDTLSFingerprint":"DTLS fingerprint","secTest.verifySASVerification":"SAS verification","secTest.verifyMetadataProtection":"Metadata protection","secTest.verifyTrafficObfuscation":"Traffic obfuscation","secTest.verifyPacketPadding":"Packet padding","secTest.verifyNestedEncryption":"Nested encryption","secTest.verifyNonExtractableKeys":"Non-extractable keys","secTest.verifyRateLimiting":"Rate limiting","secTest.verifyMutualAuth":"Mutual authentication","secTest.verifyAuthProof":"Authentication proof","secTest.verifyEnhancedValidation":"Enhanced validation","secTest.verifyAdvancedFeatures":"Advanced features","secTest.verifySignature":"Signature check","secDetail.Security system initializing...":"Security system initializing...","secDetail.Nested encryption active":"Nested encryption active","secDetail.Nested encryption failed":"Nested encryption failed","secDetail.Packet padding active":"Packet padding active","secDetail.Packet padding failed":"Packet padding failed","secDetail.Advanced features active":"Advanced features active","secDetail.Advanced features failed":"Advanced features failed","secDetail.No encryption key available":"No encryption key available","secDetail.AES-GCM encryption/decryption working correctly":"AES-GCM encryption/decryption working correctly","secDetail.No ECDH key pair available":"No ECDH key pair available","secDetail.Key derivation failed":"Key derivation failed","secDetail.No ECDSA key pair available":"No ECDSA key pair available","secDetail.ECDSA digital signatures working correctly":"ECDSA digital signatures working correctly","secDetail.MAC key not available or invalid":"MAC key not available or invalid","secDetail.Rate limiter did not block a message over the limit":"Rate limiter did not block a message over the limit","secDetail.Rate limiter is not available":"Rate limiter is not available","secDetail.Replay protection is working correctly":"Replay protection is working correctly","secDetail.Replay protection not enabled":"Replay protection not enabled","secDetail.SAS code not available":"SAS code not available","secDetail.SAS verification code is valid and available":"SAS verification code is valid and available","secDetail.Traffic obfuscation is working correctly":"Traffic obfuscation is working correctly","secDetail.Traffic obfuscation not enabled":"Traffic obfuscation not enabled","secDetail.No non-extractable ephemeral ECDH key pair for this session":"No non-extractable ephemeral ECDH key pair for this session","secDetail.Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation":"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation","msg.pause":"Pause","msg.failed":"Failed","groupErr.timeout":"A member stopped responding before the code was ready.","groupErr.keyMismatch":"A member's key did not match the identity claimed for it.","groupErr.revealMismatch":"A member's revealed value did not match what they committed to.","groupErr.commitChanged":"A member changed their commitment part-way through.","groupErr.missingKey":"A member was listed whose key never arrived.","groupErr.outsider":"A frame arrived from someone outside the group.","groupErr.limit":"A group is limited to eight members.","groupErr.tooLarge":"A message was too large to send to the group.","fileType.text":"Plain text","fileType.images":"Images","fileType.archives":"Archives","fileType.voice":"Voice messages","fileType.unsupported":"Unsupported","qrScan.title":"Scan QR Code","qrScan.auto":"Auto Mode","qrScan.reset":"Reset","qrScan.autoScroll":"Auto-scrolling enabled","qrScan.starting":"Starting camera...","qrScan.point":"Point camera at QR code","qrScan.tapFocus":"Tap screen to focus","qrScan.focusing":"Focusing...","iceErr.notArray":"Server list must be an array","iceErr.invalidJson":"Invalid JSON","iceErr.tooMany":"Too many servers (max {max})","iceErr.invalidEntry":"{label}: invalid entry","iceErr.urlCount":"{label}: between 1 and {max} URLs required","iceErr.turnCreds":"{label}: TURN servers usually require a username and credential","iceUrl.notString":"URL must be a string","iceUrl.empty":"URL is empty","iceUrl.tooLong":"URL is too long","iceUrl.badChars":"URL contains invalid characters","iceUrl.badScheme":"URL must start with stun:, stuns:, turn: or turns:","iceUrl.badQuery":"URL has an invalid query","iceUrl.noHost":"URL is missing a host","iceUrl.badHost":"URL has an invalid host or port","iceUrl.badTransport":"URL query must be transport=udp or transport=tcp","msg.off":"Off","file.consentUnavailable":"User consent unavailable","secLevel.MAXIMUM":"MAXIMUM","secLevel.INITIALIZING":"INITIALIZING","secLevel.ERROR":"ERROR","secLevel.UNKNOWN":"UNKNOWN","status.error":"Error","offline.disconnect":"Disconnect","offline.learnMore":"Learn more","pwa.installApp":"Install App","chat.onWeb":"You're on Web","groupCall.startVoice":"Start a group voice call","groupCall.startVideo":"Start a group video call","groupCall.join":"Join","groupCall.dismiss":"Not now","groupCall.leave":"Leave call","groupCall.you":"You","groupCall.connecting":"Connecting\u2026","groupCall.waitingLink":"Waiting for a direct link\u2026","groupCall.legFailed":"Could not connect","groupCall.startedVoice":"{name} started a voice call","groupCall.startedVideo":"{name} started a video call","groupCall.inCall":"{count} in the call","groupCall.err.permission_denied":"The call could not start - microphone and camera access is blocked. Allow it for this site, then try again.","groupCall.err.device_not_found":"The call could not start - no microphone was found on this device.","groupCall.err.device_busy":"The call could not start - your microphone is in use by another app. Close it and try again.","groupCall.err.media_failed":"The call could not start - the microphone could not be opened.","groupCall.err.call_in_progress":"A call is already running in this group. Join it instead of starting another.","groupCall.err.not_ready":"Confirm the group code before calling.","groupCall.speaking":"{name} is speaking","groupCall.pin":"Show {name} large","groupCall.unpin":"Back to everyone","groupCall.showEveryone":"Everyone","msg.after5s":"5s after reading","msg.after15s":"15s after reading","msg.after30s":"30s after reading","msg.after1m":"1m after reading","msg.sec30":"30 seconds","msg.min5":"5 minutes","msg.hour1":"1 hour","desktop.shareDesc":"Send the code to your peer. It is one-time and expires shortly.","desktop.invitationCreated":"Secure invitation created - send it to your peer.","desktop.joinDesc":"Paste your peer's invitation code to build your secure answer.","desktop.offerTag":"offer \xB7 copy text","desktop.answerTag":"answer \xB7 copy text","desktop.offerPlaceholder":"Invitation code will appear here\u2026","desktop.answerPlaceholder":"Response code will appear here\u2026","desktop.backToChats":"Back to chats","desktop.sendFeedback":"Send feedback","desktop.callsNeedVerified":"Calls require a verified secure channel.","desktop.noOpenChannel":"No open secure channel.","desktop.chatCarriesCall":"This chat is carrying a group call. Leave the group call before placing a 1:1 call.","desktop.err.permission_denied":"The call could not start - microphone and camera access is blocked. Allow it in system settings, then try again.","desktop.language":"Language","desktop.languageHint":"Applies at once. Messages already sent keep the words they were written in.","desktop.compareCode":"Compare the verification code with your peer and confirm if it matches.","desktop.verifyBeforeFiles":"Complete verification before sending files.","desktop.verifyBeforeSending":"Complete verification before sending messages.","desktop.disconnectedByBackend":"Connection securely disconnected.","desktop.restoreFailed":"Could not restore the connection. Closing this chat.","desktop.channelNotReady":"The data channel is not available yet. Wait for the connection to establish.","desktop.enterCode":"Enter the verification code to confirm.","desktop.noOffer":"No invitation found. Create one first.","desktop.notInitiator":"You did not create this connection, so there is no answer for you to apply.","desktop.decryptFailed":"A message could not be decrypted and was discarded.","desktop.badMessageFormat":"A malformed frame arrived and was discarded.","desktop.notSentNotReady":"Message not sent: the secure channel is not ready. Wait for verification to finish, or reconnect.","desktop.micDenied":"Microphone access was denied.","desktop.noChannelWait":"No open secure channel - wait for the connection to establish.","desktop.sasFailed":"Verification failed. A machine-in-the-middle may be present, so the connection was aborted.","desktop.sasOk":"Verification succeeded. This channel is authenticated end to end.","desktop.iceForgotten":"Saved servers forgotten. Using public ICE servers.","desktop.icePublic":"Using public ICE servers.","desktop.verificationInProgress":"Security verification is still running. Wait for it to finish.","desktop.fileGone":"This file is no longer available for download.","desktop.codeMismatch":"The verification codes do not match. Disconnecting for safety.","desktop.noLocalCode":"Verification failed: there is no locally derived code to compare against. Disconnecting for safety.","desktop.protocolViolation":"The peer claimed the code was confirmed before you confirmed it. Disconnecting for safety.","desktop.verificationRejected":"Verification rejected. The connection was aborted for safety.","secLevel.HIGH":"HIGH","secLevel.MEDIUM":"MEDIUM","secLevel.LOW":"LOW","desktop.rerun":"Re-run","desktop.ice.customDesc":"Up to {max} servers, one URL per line or JSON.","desktop.ice.persistDesc":"Stored locally on this device. Leave off to use only for this session.","desktop.group.leaveNote":"The other members are told you left. Nothing about this group is kept on this device afterwards - there is no server holding a copy to rejoin from, so you would need a fresh invitation.","desktop.sec.ecdsaOk":"Peer key package signature verified during the handshake (ECDSA P-384 / SHA-384)","desktop.sec.ecdsaNone":"No completed handshake","desktop.sec.ecdhOk":"Session keys derived from an ephemeral ECDH P-384 exchange via HKDF-SHA-256","desktop.sec.ecdhNone":"No session keys derived","desktop.sec.encryptionOk":"AES-GCM encryption and decryption verified inside the core","desktop.sec.encryptionNa":"The AES-GCM self-test could not be run","desktop.sec.integrityOk":"Message integrity verified (AES-GCM authentication)","desktop.sec.integrityNa":"The integrity self-test could not be run","desktop.sec.pfsOk":"Double Ratchet active - every message has a key of its own","desktop.sec.pfsNa":"Not measured","desktop.sec.replayOk":"Ratchet message keys are destroyed once used, so a captured frame cannot be replayed","desktop.sec.replayNa":"Not measured","desktop.sec.dtlsPinned":"Peer DTLS fingerprint pinned: {fp}","desktop.sec.dtlsNone":"No remote DTLS fingerprint available","desktop.sec.sasBoth":"Both peers confirmed the out-of-band safety code","desktop.sec.sasIncomplete":"The safety code has not been confirmed by both peers","desktop.sec.metadataOk":"A dedicated metadata key was derived (HKDF metadata-protection-v4)","desktop.sec.metadataNone":"No metadata key","desktop.sec.coverOn":"Cover traffic active: random fake frames (32-128 B every 15-30 s) on the ratcheted channel","desktop.sec.coverOff":"The cover traffic generator is not running","desktop.sec.coverUnsupported":"Cover traffic needs a Double Ratchet session (the peer is on an older release)","desktop.tagline":"End-to-end freedom","desktop.callsNotHere":"Calls are not available in this build yet. Messages, files and group chats work as usual."},eo=globalThis.__SECUREBIT_I18N__||(globalThis.__SECUREBIT_I18N__=Object.create(null));eo.en=Za;var to=globalThis.__SECUREBIT_I18N__||(globalThis.__SECUREBIT_I18N__=Object.create(null));function Qs(t){return to[t]||null}var Xs="securebit-locale";function Kr(t="/"){let e=String(t).split("/")[1];return Nn.includes(e)&&e!=="en"?e:null}function Js(t=[]){for(let e of t){let n=String(e).toLowerCase(),r=Nn.find(d=>d.toLowerCase()===n);if(r)return r;let i=n.split("-")[0],c=Nn.find(d=>d.toLowerCase().split("-")[0]===i);if(c)return c}return null}function no({pathname:t="/",stored:e=null,languages:n=[]}={}){let r=Kr(t);return r||(ro(t)?"en":e&&Nn.includes(e)?e:Js(n)||"en")}function ro(t){return t==="/"||t==="/index.html"}function Zs(t,e="/"){let n=Kr(e),i=(n?String(e).slice(n.length+1):String(e)).replace(/^\/+/,"");return t==="en"?`/${i}`:`/${t}/${i}`}function ei(t){try{localStorage.setItem(Xs,t)}catch{}}function Qr(){try{return localStorage.getItem(Xs)}catch{return null}}var cr=null;function lr(){if(cr)return cr;let t=typeof window>"u"?null:window;return!t||!t.location?"en":(cr=no({pathname:t.location.pathname||"/",stored:Qr(),languages:t.navigator?.languages||[]}),cr)}function so(t=lr()){return or[t]?.dir==="rtl"?"rtl":"ltr"}function io(t=lr()){return so(t)==="rtl"}function ti(t=lr()){return io(t)?-1:1}var ni="securebit-locale-suggest-dismissed";function ri(){try{return localStorage.getItem(ni)==="1"}catch{return!1}}function Xr(){try{localStorage.setItem(ni,"1")}catch{}}function si({pathname:t="/",languages:e=[],stored:n=null}={}){let r=Kr(t)||"en",i=Nn.includes(n)&&n||Js(e);return i&&i!==r?i:null}function a(t,e,n=lr()){let r=Qs(n)?.[t]??Ks[n]?.[t]??Qs("en")?.[t]??t;return e?String(r).replace(/\{(\w+)\}/g,(i,c)=>Object.prototype.hasOwnProperty.call(e,c)?String(e[c]):i):r}var X=Object.freeze({CREATE_SESSION:"CREATE_SESSION",REMOVE_SESSION:"REMOVE_SESSION",SET_ACTIVE:"SET_ACTIVE",SET_STATUS:"SET_STATUS",SET_FINGERPRINT:"SET_FINGERPRINT",SET_VERIFICATION:"SET_VERIFICATION",SET_SAS:"SET_SAS",ADD_MESSAGE:"ADD_MESSAGE",SET_MESSAGES:"SET_MESSAGES",UPDATE_MESSAGE_STATUS:"UPDATE_MESSAGE_STATUS",PATCH_MESSAGE:"PATCH_MESSAGE",DELETE_MESSAGE:"DELETE_MESSAGE",EXPIRE_MESSAGE:"EXPIRE_MESSAGE",INCREMENT_UNREAD:"INCREMENT_UNREAD",CLEAR_UNREAD:"CLEAR_UNREAD",SET_PENDING_FILES:"SET_PENDING_FILES",PATCH_SETUP:"PATCH_SETUP",RENAME:"RENAME",SET_PEER_PRESENCE:"SET_PEER_PRESENCE"}),Jr={available:"var(--sb-green-solid)",away:"var(--sb-yellow-2-solid)",busy:"var(--sb-red-solid)",offline:"var(--sb-text-9)"},Zr={available:a("presence.available"),away:a("presence.away"),busy:a("presence.busy"),offline:a("presence.offline")},dr=[{key:"available",word:a("presence.available"),desc:a("presence.availableDesc"),dot:"var(--sb-green-solid)"},{key:"away",word:a("presence.away"),desc:a("presence.awayDesc"),dot:"var(--sb-yellow-2-solid)"},{key:"busy",word:a("presence.busy"),desc:a("presence.busyDesc"),dot:"var(--sb-red-solid)"},{key:"invisible",word:a("presence.invisible"),desc:a("presence.invisibleDesc"),dot:"var(--sb-text-9)"}];function ao(t){let e=String(t||"").replace(/[^a-z0-9]/gi,"");return a("chat.defaultLabel")+" "+(e.slice(0,4)||"0000").toUpperCase()}function pr(t){let e=String(t||"").trim().split(/\s+/).filter(Boolean),n=e[0]?.[0]||"",r=e[1]?.[0]||e[0]?.[1]||"";return(n+r).toUpperCase()||"\xB7\xB7"}function ii(t){switch(t){case"connected":case"verified":return a("conn.p2p");case"verifying":return a("conn.verifying");case"connecting":case"new":return a("conn.connecting");case"reconnecting":return a("conn.reconnecting");case"peer_disconnected":return a("conn.peerDisconnected");default:return a("conn.disconnected")}}function oo(){return{offerData:"",answerData:"",offerInput:"",answerInput:"",showOfferStep:!1,showAnswerStep:!1,showVerification:!1,showQRCode:!1,qrCodeUrl:"",isGeneratingKeys:!1,qrFramesTotal:0,qrFrameIndex:0,qrManualMode:!1}}function es(t={}){let e=t.id||(typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():String(Date.now())+Math.random());return{id:e,peerLabel:t.peerLabel||ao(e),labelIsCustom:!1,createdAt:t.createdAt||Date.now(),role:t.role||"offer",status:t.status||"new",keyFingerprint:"",verificationCode:"",sas:{localConfirmed:!1,remoteConfirmed:!1,bothConfirmed:!1,isVerified:!1},messages:[],unreadCount:0,pendingIncomingFiles:[],peerPresence:null,setup:oo()}}function ai(){return{sessions:{},order:[],activeSessionId:null}}function tt(t,e,n){let r=t.sessions[e];return r?{...t,sessions:{...t.sessions,[e]:{...r,...n}}}:t}function oi(t,e){let n=X;switch(e.type){case n.CREATE_SESSION:{let r=e.entry||es(e);return t.sessions[r.id]?t:{sessions:{...t.sessions,[r.id]:r},order:[...t.order,r.id],activeSessionId:e.activate===!1?t.activeSessionId:r.id}}case n.REMOVE_SESSION:{let{id:r}=e;if(!t.sessions[r])return t;let i={...t.sessions};delete i[r];let c=t.order.filter(h=>h!==r),d=t.activeSessionId;if(d===r){let h=t.order.indexOf(r);d=c[Math.max(0,h-1)]||c[0]||null}return{sessions:i,order:c,activeSessionId:d}}case n.SET_ACTIVE:return!t.sessions[e.id]||t.activeSessionId===e.id?t:{...t,activeSessionId:e.id};case n.SET_STATUS:{let r=t.sessions[e.id];if(!r||r.status===e.status)return t;let c=!(e.status==="connected"||e.status==="verified"||e.status==="reconnecting")&&r.peerPresence!==null?{status:e.status,peerPresence:null}:{status:e.status};return tt(t,e.id,c)}case n.SET_FINGERPRINT:return tt(t,e.id,{keyFingerprint:e.fingerprint});case n.SET_VERIFICATION:return tt(t,e.id,{verificationCode:e.code});case n.SET_SAS:{let r=t.sessions[e.id];return r?tt(t,e.id,{sas:{...r.sas,...e.sas}}):t}case n.ADD_MESSAGE:{let r=t.sessions[e.id];return r?tt(t,e.id,{messages:[...r.messages,e.message]}):t}case n.SET_MESSAGES:{let r=t.sessions[e.id];if(!r)return t;let i=typeof e.updater=="function"?e.updater(r.messages):e.messages;return tt(t,e.id,{messages:Array.isArray(i)?i:[]})}case n.UPDATE_MESSAGE_STATUS:{let r=t.sessions[e.id];if(!r)return t;let i=!1,c=r.messages.map(d=>String(d.mid)===String(e.mid)&&d.status!==e.status?(i=!0,{...d,status:e.status}):d);return i?tt(t,e.id,{messages:c}):t}case n.PATCH_MESSAGE:{let r=t.sessions[e.id];if(!r)return t;let i=e.messageId!=null?String(e.messageId):null,c=e.mid!=null?String(e.mid):null,d=e.fileId!=null?String(e.fileId):null,h=!1,m=r.messages.map(v=>{if(!(i!=null&&String(v.id)===i||c!=null&&String(v.mid)===c||d!=null&&v.fileId!=null&&String(v.fileId)===d))return v;h=!0;let p=typeof e.patch=="function"?e.patch(v):e.patch;return{...v,...p}});return h?tt(t,e.id,{messages:m}):t}case n.DELETE_MESSAGE:{let r=t.sessions[e.id];if(!r)return t;let i=r.messages.filter(c=>String(c.mid)!==String(e.mid));return i.length===r.messages.length?t:tt(t,e.id,{messages:i})}case n.EXPIRE_MESSAGE:{let r=t.sessions[e.id];if(!r)return t;let i=!1,c=r.messages.map(d=>String(d.id)===String(e.messageId)&&!d.expired?(i=!0,{...d,expired:!0,message:"",expiresAt:void 0}):d);return i?tt(t,e.id,{messages:c}):t}case n.INCREMENT_UNREAD:{let r=t.sessions[e.id];return r?tt(t,e.id,{unreadCount:r.unreadCount+1}):t}case n.CLEAR_UNREAD:{let r=t.sessions[e.id];return!r||r.unreadCount===0?t:tt(t,e.id,{unreadCount:0})}case n.SET_PENDING_FILES:{let r=t.sessions[e.id];if(!r)return t;let i=typeof e.updater=="function"?e.updater(r.pendingIncomingFiles):e.files;return tt(t,e.id,{pendingIncomingFiles:Array.isArray(i)?i:[]})}case n.PATCH_SETUP:{let r=t.sessions[e.id];return r?tt(t,e.id,{setup:{...r.setup,...e.patch}}):t}case n.RENAME:{let r=t.sessions[e.id];if(!r)return t;let i=String(e.label||"").trim()||r.peerLabel;return tt(t,e.id,{peerLabel:i,labelIsCustom:!0})}case n.SET_PEER_PRESENCE:{let r=t.sessions[e.id];return!r||r.peerPresence===e.presence?t:tt(t,e.id,{peerPresence:e.presence})}default:return t}}function co(t,e){let n=[...t.messages].reverse().find(v=>!v.expired&&v.type!=="system"&&(typeof v.message=="string"&&v.message.trim()||v.voice)),r=t.status,i=r==="connected"||r==="verified",c=r==="connecting"||r==="verifying"||r==="new"||r==="reconnecting",d,h;c?(d="var(--sb-yellow-2-solid)",h=ii(r)):i?(d=t.peerPresence?Jr[t.peerPresence]||"var(--sb-text-9)":"var(--sb-green-solid)",h=t.peerPresence?Zr[t.peerPresence]||a("presence.online"):a("conn.p2p")):(d="var(--sb-red-solid)",h=ii(r));let m=n?n.voice?"\u{1F399} Voice message":n.message:h;return{id:t.id,name:t.peerLabel,mono:pr(t.peerLabel),dot:d,headerSub:h,status:t.status,peerPresence:t.peerPresence,preview:m,unread:t.unreadCount>0?t.unreadCount>99?"99+":String(t.unreadCount):null,verified:!!t.sas.isVerified,active:t.id===e,inactive:t.id!==e}}function ci(t){return t.order.map(e=>t.sessions[e]).filter(Boolean).map(e=>co(e,t.activeSessionId))}var D=Object.freeze({MAX_MEMBERS:8,MIN_MEMBERS:2,GROUP_ID_BYTES:16,NONCE_BYTES:32,COMMIT_BYTES:32,FINGERPRINT_BYTES:32,SAS_DIGITS:7,MAX_NAME_BYTES:128,MAX_EPOCH:4294967295,MAX_SPKI_BYTES:256,MIN_SPKI_BYTES:40,MAX_SIG_BYTES:160,MIN_SIG_BYTES:48,MAX_BODY_BYTES:1024,FRAME_BUDGET_CHARS:1800,MAX_DESCRIPTOR_CHARS:768,MESH_NONCE_BYTES:16,CALL_ID_BYTES:16}),Ft=Object.freeze({START:"start",JOIN:"join",LEAVE:"leave"}),gn=Object.freeze({OFFER:"moffer",ANSWER:"manswer"}),mn=Object.freeze({CREATE:"create",ADD:"add",REMOVE:"remove",RENAME:"rename"}),Wn=new TextEncoder,ts=class extends Error{constructor(e,n="group_crypto"){super(e),this.name="GroupCryptoError",this.code=n}},se=(t,e)=>{throw new ts(t,e)};function ns(t){let e=t instanceof Uint8Array?t:new Uint8Array(t),n="";for(let r=0;r<e.length;r++)n+=e[r].toString(16).padStart(2,"0");return n}function Ye(t){(typeof t!="string"||t.length%2!==0||!/^[0-9a-f]*$/i.test(t))&&se("not a hex string","bad_hex");let e=new Uint8Array(t.length/2);for(let n=0;n<e.length;n++)e[n]=parseInt(t.substr(n*2,2),16);return e}function $e(t){let e=t instanceof Uint8Array?t:new Uint8Array(t),n="";for(let r=0;r<e.length;r++)n+=String.fromCharCode(e[r]);return btoa(n)}function nt(t,{max:e=D.MAX_SPKI_BYTES}={}){typeof t!="string"&&se("not a base64 string","bad_b64"),t.length>Math.ceil(e*4/3)+4&&se("base64 payload exceeds its limit","bad_b64");let n;try{n=atob(t)}catch{se("malformed base64","bad_b64")}let r=new Uint8Array(n.length);for(let i=0;i<n.length;i++)r[i]=n.charCodeAt(i);return r}function Vn(t){return crypto.getRandomValues(new Uint8Array(t))}function li(){return ns(Vn(D.GROUP_ID_BYTES))}function nn(t,...e){let n=[Wn.encode(t+"\0")],r=n[0].length;for(let d of e){let h=d instanceof Uint8Array?d:typeof d=="string"?Wn.encode(d):se("unsupported payload component","bad_payload"),m=new Uint8Array(4);new DataView(m.buffer).setUint32(0,h.length),n.push(m,h),r+=4+h.length}let i=new Uint8Array(r),c=0;for(let d of n)i.set(d,c),c+=d.length;return i}function Pt(t){(!Number.isInteger(t)||t<0||t>D.MAX_EPOCH)&&se("value out of uint32 range","bad_u32");let e=new Uint8Array(4);return new DataView(e.buffer).setUint32(0,t),e}function di(t,e){if(!(t instanceof Uint8Array)||!(e instanceof Uint8Array)||t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r++)n|=t[r]^e[r];return n===0}function At(t){return(typeof t!="string"||t.length!==D.GROUP_ID_BYTES*2||!/^[0-9a-f]+$/.test(t))&&se("malformed group id","bad_group_id"),t}function Me(t){return(typeof t!="string"||t.length!==D.FINGERPRINT_BYTES*2||!/^[0-9a-f]+$/.test(t))&&se("malformed member fingerprint","bad_fingerprint"),t}function De(t){return(!Number.isInteger(t)||t<0||t>D.MAX_EPOCH)&&se("epoch out of range","bad_epoch"),t}function yn(t){let e=typeof t=="string"?t:"";return Wn.encode(e).length>D.MAX_NAME_BYTES&&se("group name too long","bad_name"),e}function bn(t){Array.isArray(t)||se("member list is not an array","bad_members"),t.length<D.MIN_MEMBERS&&se("a group needs at least two members","bad_members"),t.length>D.MAX_MEMBERS&&se(`a group is limited to ${D.MAX_MEMBERS} members`,"too_many_members");let e=new Set;for(let n of t)Me(n),e.has(n)&&se("duplicate member fingerprint","duplicate_member"),e.add(n);return[...t].sort()}async function pi(t){let e=await t.generateKey({name:"ECDSA",namedCurve:"P-384"},!1,["sign","verify"]),n=new Uint8Array(await t.exportKey("spki",e.publicKey)),r=await ui(t,n);return{keyPair:e,spki:n,fingerprint:r}}async function ui(t,e){return(!(e instanceof Uint8Array)||e.length<D.MIN_SPKI_BYTES||e.length>D.MAX_SPKI_BYTES)&&se("SPKI length out of range","bad_spki"),ns(new Uint8Array(await t.digest("SHA-256",e)))}async function jn(t,e){let n=await ui(t,e),r;try{r=await t.importKey("spki",e,{name:"ECDSA",namedCurve:"P-384"},!1,["verify"])}catch{se("member identity key is not a valid P-384 public key","bad_spki")}return{publicKey:r,fingerprint:n}}async function fi(t,{groupId:e,epoch:n,fingerprint:r,nonce:i}){At(e),De(n),Me(r),(!(i instanceof Uint8Array)||i.length!==D.NONCE_BYTES)&&se("nonce must be 32 bytes","bad_nonce");let c=nn("securebit/group/commit/v1",Ye(e),Pt(n),Ye(r),i);return new Uint8Array(await t.digest("SHA-256",c))}async function lo(t,e,n){if(!(e instanceof Uint8Array)||e.length!==D.COMMIT_BYTES)return!1;let r;try{r=await fi(t,n)}catch{return!1}return di(e,r)}async function rs(t,{groupId:e,epoch:n,contributions:r,digits:i=D.SAS_DIGITS}){At(e),De(n),Array.isArray(r)||se("contributions must be an array","bad_contributions"),(!Number.isInteger(i)||i<4||i>12)&&se("digit count out of range","bad_digits"),bn(r.map(S=>S&&S.fingerprint));let c=[...r].sort((S,p)=>S.fingerprint<p.fingerprint?-1:1),d=[];for(let S of c)(!(S.nonce instanceof Uint8Array)||S.nonce.length!==D.NONCE_BYTES)&&se("every member must contribute a 32-byte nonce","bad_nonce"),d.push(Ye(S.fingerprint),S.nonce);let h=nn("securebit/group/sas/v1",Ye(e),Pt(n),...d),m=new Uint8Array(await t.digest("SHA-256",nn("securebit/group/sas-salt/v1",Ye(e),Pt(n)))),v=null;try{v=await t.importKey("raw",h,"HKDF",!1,["deriveBits"]);let S=await t.deriveBits({name:"HKDF",hash:"SHA-256",salt:m,info:Wn.encode("securebit-group-sas-v1")},v,64),p=new DataView(S),k=p.getUint32(0)*2**20+(p.getUint32(4)>>>12);return String(k%10**i).padStart(i,"0")}finally{try{h.fill(0)}catch{}}}var ur=class{constructor({groupId:e,epoch:n,selfFingerprint:r,memberFingerprints:i}){this.groupId=At(e),this.epoch=De(n),this.selfFingerprint=Me(r),this.members=bn(i),this.members.includes(this.selfFingerprint)||se("the local member is not in the member set","not_a_member"),this.nonce=Vn(D.NONCE_BYTES),this.commitments=new Map,this.nonces=new Map,this.revealed=!1,this.code=null}async ownCommitment(e){let n=await fi(e,{groupId:this.groupId,epoch:this.epoch,fingerprint:this.selfFingerprint,nonce:this.nonce});return this.commitments.set(this.selfFingerprint,n),n}acceptCommitment(e,n){Me(e),this.members.includes(e)||se("commitment from a non-member","not_a_member"),(!(n instanceof Uint8Array)||n.length!==D.COMMIT_BYTES)&&se("malformed commitment","bad_commitment");let r=this.commitments.get(e);return r?(di(r,n)||se("member changed their commitment","commitment_changed"),!1):(this.commitments.set(e,n),!0)}get commitmentsComplete(){return this.members.every(e=>this.commitments.has(e))}reveal(){return this.commitmentsComplete||se("cannot reveal before every member has committed","premature_reveal"),this.revealed=!0,this.nonces.set(this.selfFingerprint,this.nonce),this.nonce}async acceptReveal(e,n,r){Me(n),this.members.includes(n)||se("reveal from a non-member","not_a_member");let i=this.commitments.get(n);return i||se("reveal arrived before the commitment","reveal_without_commitment"),await lo(e,i,{groupId:this.groupId,epoch:this.epoch,fingerprint:n,nonce:r})||se("revealed nonce does not match the commitment","commitment_mismatch"),this.nonces.set(n,r),!0}get revealsComplete(){return this.members.every(e=>this.nonces.has(e))}async finish(e){return this.revealsComplete||se("not every member has revealed","incomplete_reveal"),this.code=await rs(e,{groupId:this.groupId,epoch:this.epoch,contributions:this.members.map(n=>({fingerprint:n,nonce:this.nonces.get(n)}))}),this.code}destroy(){try{this.nonce.fill(0)}catch{}for(let e of this.nonces.values())try{e.fill(0)}catch{}this.nonces.clear(),this.commitments.clear()}};function hi({groupId:t,epoch:e,op:n,memberFps:r,name:i=""}){At(t),De(e),Object.values(mn).includes(n)||se("unknown membership operation","bad_op");let c=bn(r);return nn("securebit/group/member-op/v1",Ye(t),Pt(e),n,yn(i),...c.map(d=>Ye(d)))}async function gi(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,hi(n));return new Uint8Array(r)}async function mi(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<D.MIN_SIG_BYTES||r.length>D.MAX_SIG_BYTES)return!1;let i;try{i=hi(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}async function ss(t,e){let n=typeof e=="string"?Wn.encode(e):e;return n instanceof Uint8Array||se("message body must be a string or bytes","bad_body"),n.length>D.MAX_BODY_BYTES&&se("message body exceeds the group limit","body_too_large"),new Uint8Array(await t.digest("SHA-256",n))}function yi({groupId:t,epoch:e,seq:n,senderFp:r,bodyHash:i}){return At(t),De(e),De(n),Me(r),(!(i instanceof Uint8Array)||i.length!==32)&&se("body hash must be 32 bytes","bad_body_hash"),nn("securebit/group/message/v1",Ye(t),Pt(e),Pt(n),Ye(r),i)}async function bi(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,yi(n));return new Uint8Array(r)}async function xi(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<D.MIN_SIG_BYTES||r.length>D.MAX_SIG_BYTES)return!1;let i;try{i=yi(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}function vi({groupId:t,epoch:e,kind:n,fromFp:r,toFp:i,descriptor:c,nonce:d}){return At(t),De(e),n!==gn.OFFER&&n!==gn.ANSWER&&se("unknown mesh descriptor kind","bad_mesh_kind"),Me(r),Me(i),r===i&&se("a member cannot dial itself","bad_mesh_peer"),(typeof c!="string"||c.length===0||c.length>D.MAX_DESCRIPTOR_CHARS)&&se("mesh descriptor is missing or oversized","bad_descriptor"),(!(d instanceof Uint8Array)||d.length!==D.MESH_NONCE_BYTES)&&se("mesh nonce must be 16 bytes","bad_mesh_nonce"),nn("securebit/group/mesh-descriptor/v1",Ye(t),Pt(e),n,Ye(r),Ye(i),c,d)}async function is(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,vi(n));return new Uint8Array(r)}async function as(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<D.MIN_SIG_BYTES||r.length>D.MAX_SIG_BYTES)return!1;let i;try{i=vi(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}function wi({groupId:t,epoch:e,fp:n,linkFp:r}){return At(t),De(e),Me(n),(typeof r!="string"||r.length===0||r.length>256)&&se("link fingerprint is missing or oversized","bad_link_fp"),nn("securebit/group/link-probe/v1",Ye(t),Pt(e),Ye(n),r)}async function ki(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,wi(n));return new Uint8Array(r)}async function Si(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<D.MIN_SIG_BYTES||r.length>D.MAX_SIG_BYTES)return!1;let i;try{i=wi(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}function Ei({groupId:t,epoch:e,callId:n,action:r,fp:i,seq:c,withVideo:d}){return At(t),De(e),os(n),De(c),Me(i),r!==Ft.START&&r!==Ft.JOIN&&r!==Ft.LEAVE&&se("unknown call action","bad_call_action"),nn("securebit/group/call/v1",Ye(t),Pt(e),Ye(n),r,Ye(i),Pt(c),d===!0?"v":"a")}function os(t){return(typeof t!="string"||t.length!==D.CALL_ID_BYTES*2||!/^[0-9a-f]+$/.test(t))&&se("malformed call id","bad_call_id"),t}function Ri(){return ns(Vn(D.CALL_ID_BYTES))}async function _i(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,Ei(n));return new Uint8Array(r)}async function Ci(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<D.MIN_SIG_BYTES||r.length>D.MAX_SIG_BYTES)return!1;let i;try{i=Ei(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}var ge=Object.freeze({CREATE_GROUP:"CREATE_GROUP",REMOVE_GROUP:"REMOVE_GROUP",SET_ACTIVE_GROUP:"SET_ACTIVE_GROUP",SET_PHASE:"SET_PHASE",SET_MEMBERS:"SET_MEMBERS",PATCH_MEMBER:"PATCH_MEMBER",SET_SAS:"SET_SAS",CONFIRM_SAS:"CONFIRM_SAS",ADD_MESSAGE:"ADD_MESSAGE",SET_MESSAGES:"SET_MESSAGES",UPDATE_MESSAGE_STATUS:"UPDATE_MESSAGE_STATUS",INCREMENT_UNREAD:"INCREMENT_UNREAD",CLEAR_UNREAD:"CLEAR_UNREAD",RENAME:"RENAME",SET_ERROR:"SET_ERROR"}),Y=Object.freeze({FORMING:"forming",COMMITTING:"committing",REVEALING:"revealing",AWAITING_SAS:"awaiting_sas",READY:"ready",FAILED:"failed"}),ce=Object.freeze({SELF:"self",LINKED:"linked",PENDING:"pending",LOST:"lost"}),po={[Y.FORMING]:a("groupPhase.forming"),[Y.COMMITTING]:a("groupPhase.commitments"),[Y.REVEALING]:a("groupPhase.revealing"),[Y.AWAITING_SAS]:a("groupPhase.compare"),[Y.READY]:a("groupPhase.ready"),[Y.FAILED]:a("groupPhase.failed")};function cs(t){let e=String(t||"").trim().split(/\s+/).filter(Boolean),n=e[0]?.[0]||"",r=e[1]?.[0]||e[0]?.[1]||"";return(n+r).toUpperCase()||"##"}function fr(t={}){return{id:t.id,name:t.name||"Group",createdAt:t.createdAt||Date.now(),adminFp:t.adminFp||"",selfFp:t.selfFp||"",isAdmin:!!t.isAdmin,epoch:Number.isInteger(t.epoch)?t.epoch:1,phase:t.phase||Y.FORMING,members:Array.isArray(t.members)?[...t.members].sort(Ii):[],sasCode:"",sasConfirmed:!1,messages:[],unreadCount:0,error:null}}var uo=new TextEncoder;function fo(t){let e=String(t);for(;uo.encode(e).length>D.MAX_NAME_BYTES;)e=e.slice(0,-1);return e}function Ii(t,e){return t.fp<e.fp?-1:t.fp>e.fp?1:0}function Ai(){return{groups:{},order:[],activeGroupId:null}}function kt(t,e,n){let r=t.groups[e];return r?{...t,groups:{...t.groups,[e]:{...r,...n}}}:t}function Mi(t,e){let n=ge;switch(e.type){case n.CREATE_GROUP:{let r=e.entry||fr(e);return!r.id||t.groups[r.id]?t:{groups:{...t.groups,[r.id]:r},order:[...t.order,r.id],activeGroupId:e.activate===!1?t.activeGroupId:r.id}}case n.REMOVE_GROUP:{let{id:r}=e;if(!t.groups[r])return t;let i={...t.groups};delete i[r];let c=t.order.filter(h=>h!==r),d=t.activeGroupId;if(d===r){let h=t.order.indexOf(r);d=c[Math.max(0,h-1)]||c[0]||null}return{groups:i,order:c,activeGroupId:d}}case n.SET_ACTIVE_GROUP:return e.id===null?t.activeGroupId===null?t:{...t,activeGroupId:null}:!t.groups[e.id]||t.activeGroupId===e.id?t:{...t,activeGroupId:e.id};case n.SET_PHASE:{let r=t.groups[e.id];if(!r||r.phase===e.phase)return t;let i={phase:e.phase};return e.phase!==Y.READY&&r.sasConfirmed&&(i.sasConfirmed=!1),e.phase!==Y.READY&&e.phase!==Y.AWAITING_SAS&&(i.sasCode=""),e.phase!==Y.FAILED&&(i.error=null),kt(t,e.id,i)}case n.SET_MEMBERS:{let r=t.groups[e.id];if(!r)return t;let c={members:Array.isArray(e.members)?[...e.members].sort(Ii):r.members};return Number.isInteger(e.epoch)&&(c.epoch=e.epoch),kt(t,e.id,c)}case n.PATCH_MEMBER:{let r=t.groups[e.id];if(!r)return t;let i=!1,c=r.members.map(d=>{if(d.fp!==e.fp)return d;let h={...d,...e.patch};return Object.keys(e.patch).every(m=>d[m]===h[m])?d:(i=!0,h)});return i?kt(t,e.id,{members:c}):t}case n.SET_SAS:{let r=t.groups[e.id];return!r||r.sasCode===e.code?t:kt(t,e.id,{sasCode:e.code||"",sasConfirmed:!1})}case n.CONFIRM_SAS:{let r=t.groups[e.id];return!r||!r.sasCode||r.phase!==Y.AWAITING_SAS||r.sasConfirmed&&r.phase===Y.READY?t:kt(t,e.id,{sasConfirmed:!0,phase:Y.READY,error:null})}case n.ADD_MESSAGE:{let r=t.groups[e.id];return r?kt(t,e.id,{messages:[...r.messages,e.message]}):t}case n.SET_MESSAGES:{let r=t.groups[e.id];if(!r)return t;let i=typeof e.updater=="function"?e.updater(r.messages):e.messages;return kt(t,e.id,{messages:Array.isArray(i)?i:[]})}case n.UPDATE_MESSAGE_STATUS:{let r=t.groups[e.id];if(!r)return t;let i=!1,c=r.messages.map(d=>String(d.mid)===String(e.mid)&&d.status!==e.status?(i=!0,{...d,status:e.status}):d);return i?kt(t,e.id,{messages:c}):t}case n.INCREMENT_UNREAD:{let r=t.groups[e.id];return r?kt(t,e.id,{unreadCount:r.unreadCount+1}):t}case n.CLEAR_UNREAD:{let r=t.groups[e.id];return!r||r.unreadCount===0?t:kt(t,e.id,{unreadCount:0})}case n.RENAME:{let r=t.groups[e.id];if(!r)return t;let i=fo(String(e.name||"").trim())||r.name;return kt(t,e.id,{name:i})}case n.SET_ERROR:{if(!t.groups[e.id])return t;let i={error:e.error||null};return e.error&&(i.phase=Y.FAILED),kt(t,e.id,i)}default:return t}}function ls(t){return t.members.filter(e=>e.state===ce.SELF||e.state===ce.LINKED).length}function ho(t){if(t.phase!==Y.READY)return po[t.phase]||"Group";let e=t.members.length,n=ls(t);return n<e?`${n} of ${e} connected`:`${e} members \xB7 P2P mesh`}function go(t){switch(t.phase){case Y.READY:return ls(t)<t.members.length?"var(--sb-yellow-2-solid)":"var(--sb-green-solid)";case Y.FAILED:return"var(--sb-red-solid)";default:return"var(--sb-yellow-2-solid)"}}function mo(t,e){let n=[...t.messages].reverse().find(i=>!i.expired&&typeof i.message=="string"&&i.message.trim()),r=ho(t);return{id:t.id,kind:"group",name:t.name,mono:cs(t.name),dot:go(t),headerSub:r,phase:t.phase,memberCount:t.members.length,linkedCount:ls(t),preview:n?n.message:r,unread:t.unreadCount>0?t.unreadCount>99?"99+":String(t.unreadCount):null,verified:t.phase===Y.READY&&t.sasConfirmed,active:t.id===e,inactive:t.id!==e}}function Ti(t){return t.order.map(e=>t.groups[e]).filter(Boolean).map(e=>mo(e,t.activeGroupId))}var de=Object.freeze({INVITE:"g_invite",HELLO:"g_hello",MEMBER:"g_member",ROSTER:"g_roster",COMMIT:"g_commit",REVEAL:"g_reveal",MESSAGE:"g_msg",RELAY:"g_relay",LEAVE:"g_leave",MESH_OFFER:"g_moffer",MESH_ANSWER:"g_manswer",MESH_ABORT:"g_mabort",PROBE:"g_probe",CALL:"g_call"}),gr="g_env",mr=Object.freeze(new Set(Object.values(de)));function $n(t){return!t||typeof t!="object"?!1:t.type===gr||mr.has(t.type)}function Ni(t){return!t||typeof t!="object"?null:t.type===gr?typeof t.t=="string"?t.t:null:mr.has(t.type)?t.type:null}function yo(t){let e=JSON.stringify(t),n=$e(new TextEncoder().encode(e));if(n.length>D.FRAME_BUDGET_CHARS)throw new K("group frame exceeds the transport budget","frame_too_large");return{type:gr,gid:t.gid,t:t.type,d:n}}function hr(t){if(!t||t.type!==gr)return t;let e=String(t.d||"");if(e.length>D.FRAME_BUDGET_CHARS)throw new K("group frame exceeds the transport budget","frame_too_large");let n=nt(e,{max:D.FRAME_BUDGET_CHARS}),r=JSON.parse(new TextDecoder().decode(n));if(!r||typeof r!="object"||!mr.has(r.type))throw new K("envelope carried no recognisable frame","bad_envelope");if(t.gid&&r.gid!==t.gid)throw new K("envelope group id does not match its frame","bad_envelope");if(t.t&&r.type!==t.t)throw new K("envelope type does not match its frame","bad_envelope");return r}var xn=Object.freeze({CEREMONY_MS:6e4,HELLO_MS:45e3,MESH_DIAL_MS:45e3,MESH_RETRY_MS:2e4}),bo=2,xo=3,K=class extends Error{constructor(e,n="group_session"){super(e),this.name="GroupSessionError",this.code=n}},Dn=class{constructor({groupId:e,name:n,isAdmin:r,subtle:i,send:c,emit:d,mesh:h=null,log:m=()=>{}}){this.groupId=At(e),this.name=yn(n),this.isAdmin=!!r,this.subtle=i,this._send=c,this._emit=d,this._log=m,this._mesh=h,this.identity=null,this.epoch=1,this.adminFp="",this.phase=Y.FORMING,this.members=new Map,this.sessionToFp=new Map,this.ceremony=null,this.sasCode="",this.sasConfirmed=!1,this.seq=0,this.transcript=new Map,this._timers=new Set,this._destroyed=!1,this._awaitingHello=new Map,this._pendingCeremony=[],this._draining=!1,this._pendingKeys=new Map,this._pendingAdd=null,this._meshDials=new Map,this._meshFailures=new Map,this._meshSessions=new Set,this._probed=new Set,this._meshPass=null,this.call=null,this.callSeq=0,this._callSeen=new Map}static newId(){return li()}async init(){return this.identity?this.identity:(this.identity=await pi(this.subtle),this.members.set(this.identity.fingerprint,{fp:this.identity.fingerprint,name:"You",spki:this.identity.spki,publicKey:null,sessionId:null,state:ce.SELF}),this.isAdmin&&(this.adminFp=this.identity.fingerprint),this.identity)}get selfFp(){return this.identity?.fingerprint||""}destroy(){this._destroyed=!0;for(let e of this._timers)clearTimeout(e);this._timers.clear();try{this.ceremony?.destroy()}catch{}this.ceremony=null;for(let e of this._meshSessions)try{this._mesh?.close(e)}catch{}this._meshSessions.clear(),this._meshDials.clear(),this._meshFailures.clear(),this._probed.clear(),this.call=null,this._callSeen.clear(),this.members.clear(),this.sessionToFp.clear(),this.transcript.clear(),this._pendingCeremony=[],this._pendingKeys.clear(),this._pendingAdd=null,this.identity=null}_timer(e,n){let r=setTimeout(()=>{this._timers.delete(r),this._destroyed||e()},n);return this._timers.add(r),r}_fail(e){if(!this._destroyed){this._log("warn","group ceremony failed",{code:e}),this.phase=Y.FAILED;try{this.ceremony?.destroy()}catch{}this.ceremony=null,this._emit("error",{error:e})}}_setPhase(e){this.phase!==e&&(this.phase=e,e!==Y.READY&&(this.sasConfirmed=!1),e!==Y.READY&&e!==Y.AWAITING_SAS&&(this.sasCode=""),this._emit("phase",{phase:e}))}_memberSnapshot(){return[...this.members.values()].map(e=>({fp:e.fp,name:e.name,sessionId:e.sessionId,state:e.state}))}_emitMembers(){this._pruneCall(),this._emit("members",{members:this._memberSnapshot(),epoch:this.epoch})}_pruneCall(){if(!this.call)return;let e=!1;for(let n of[...this.call.participants])this.members.has(n)||(this.call.participants.delete(n),e=!0);this.call.participants.size===0&&(this.call=null,e=!0),e&&this._emit("call",{call:this.getCallSnapshot()})}_directPeers(){return[...this.members.values()].filter(e=>e.state===ce.LINKED&&e.sessionId)}_relayFor(e){let n=this.members.get(this.adminFp);return n&&n.state===ce.LINKED&&n.sessionId&&n.fp!==e?n:this._directPeers().find(r=>r.fp!==e)||null}async _wire(e,n){return this._send(e,yo(n))}async _sendTo(e,n){let r=this.members.get(e);if(!r||r.fp===this.selfFp)return!1;if(r.state===ce.LINKED&&r.sessionId)return await this._wire(r.sessionId,n),!0;let i=this._relayFor(e);return i?(await this._wire(i.sessionId,{type:de.RELAY,gid:this.groupId,to:e,hopped:!1,inner:n}),r.state!==ce.LOST):!1}async _broadcast(e,{exclude:n=[]}={}){let r=[...this.members.keys()].filter(h=>h!==this.selfFp&&!n.includes(h)),i=await Promise.allSettled(r.map(h=>this._sendTo(h,e))),c=[],d=0;return i.forEach((h,m)=>{if(h.status==="fulfilled"&&h.value===!0){d+=1;return}let v=this.members.get(r[m]);c.push({fp:r[m],name:v?.name||"A member"})}),{delivered:d,unreachable:c}}bindSession(e,n,r=ce.LINKED){let i=this.members.get(e);return i?(i.sessionId&&i.sessionId!==n&&(this.sessionToFp.delete(i.sessionId),this._closeMeshSession(i.sessionId)),i.sessionId=n,i.state=r,n&&this.sessionToFp.set(n,e),this._emitMembers(),!0):!1}unbindSession(e){let n=this.members.get(e);if(!n||!n.sessionId)return!1;let r=n.sessionId;return this.sessionToFp.delete(r),n.sessionId=null,(n.state===ce.LINKED||n.state===ce.LOST)&&(n.state=ce.PENDING),this._closeMeshSession(r),this._emitMembers(),this._scheduleMeshMaintain(),!0}setSessionState(e,n){let r=this.sessionToFp.get(e);if(!r)return;let i=this.members.get(r);if(!i||i.state===ce.SELF)return;let c=n?ce.LINKED:ce.LOST;i.state!==c&&(i.state=c,this._emitMembers(),n&&this._settleDial(r),this._scheduleMeshMaintain())}_dialStillWanted(e,n){if(this._destroyed||this._meshDials.get(e)!==n||this.epoch!==n.epoch)return!1;let r=this.members.get(e);return!(!r||r.sessionId&&r.sessionId!==n.sessionId)}_abandonDial(e,n,r){this._meshDials.get(e)===n&&(n.timer&&(clearTimeout(n.timer),this._timers.delete(n.timer)),this._meshDials.delete(e)),this._meshSessions.delete(r);try{this._mesh?.close(r)}catch{}}_closeMeshSession(e){if(!(!e||!this._meshSessions.has(e))){this._meshSessions.delete(e);try{this._mesh?.close(e)}catch{}}}_settleDial(e){let n=this._meshDials.get(e);n&&(n.timer&&(clearTimeout(n.timer),this._timers.delete(n.timer)),this._meshDials.delete(e),this._meshFailures.delete(e))}_meshFail(e,n,{tellPeer:r=!0}={}){let i=this._meshDials.get(e);if(i){i.timer&&(clearTimeout(i.timer),this._timers.delete(i.timer)),this._meshDials.delete(e);let d=this.members.get(e);i.sessionId&&d&&d.sessionId===i.sessionId?this.unbindSession(e):this._closeMeshSession(i.sessionId)}let c=this._meshFailures.get(e)||{attempts:0,nextAt:0};c.attempts+=1,c.nextAt=Date.now()+xn.MESH_RETRY_MS*2**(c.attempts-1),this._meshFailures.set(e,c),this._log("warn","mesh dial failed",{code:n,attempts:c.attempts}),r&&this.members.has(e)&&this._sendTo(e,{type:de.MESH_ABORT,gid:this.groupId,epoch:this.epoch,from:this.selfFp,to:e}).catch(()=>{}),this._scheduleMeshMaintain()}_meshReset(){for(let e of[...this._meshDials.keys()]){let n=this._meshDials.get(e);n?.timer&&(clearTimeout(n.timer),this._timers.delete(n.timer)),this._meshDials.delete(e);let r=this.members.get(e);n?.sessionId&&r&&r.sessionId===n.sessionId?this.unbindSession(e):this._closeMeshSession(n?.sessionId)}this._meshFailures.clear(),this._probed.clear()}_scheduleMeshMaintain(){this._destroyed||!this._mesh||this._meshPass||(this._meshPass=this._timer(()=>{this._meshPass=null,this._meshMaintain()},0))}_meshMaintain(){if(this._destroyed||!this._mesh||this.phase!==Y.READY||!this.sasConfirmed)return;let e=Date.now(),n=this._meshDials.size,r=1/0;for(let i of bn([...this.members.keys()])){if(n>=bo)break;let c=this.members.get(i);if(!c||c.state===ce.SELF||c.sessionId||this._meshDials.has(i)||!(this.selfFp<i))continue;let d=this._meshFailures.get(i);if(d){if(d.attempts>=xo)continue;if(e<d.nextAt){r=Math.min(r,d.nextAt);continue}}this._relayFor(i)&&(n+=1,this._meshDial(i).catch(()=>{}))}r!==1/0&&!this._meshPass&&(this._meshPass=this._timer(()=>{this._meshPass=null,this._meshMaintain()},Math.max(0,r-e)+50))}async _meshDial(e){let n=this.members.get(e);if(!n||n.sessionId||this._meshDials.has(e))return;let r=this.epoch,i=Vn(D.MESH_NONCE_BYTES),c={role:"offer",sessionId:null,nonce:i,epoch:r,timer:null};this._meshDials.set(e,c);try{let d=await this._mesh.createOffer(e),h=d&&d.sessionId,m=String(d&&d.descriptor||"");if(!h||!m)throw new K("mesh transport produced no descriptor","no_descriptor");if(!this._dialStillWanted(e,c))return this._abandonDial(e,c,h);c.sessionId=h,this._meshSessions.add(h),this.bindSession(e,h,ce.PENDING);let v=await is(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:r,kind:gn.OFFER,fromFp:this.selfFp,toFp:e,descriptor:m,nonce:i});if(!await this._sendTo(e,{type:de.MESH_OFFER,gid:this.groupId,epoch:r,from:this.selfFp,to:e,d:m,n:$e(i),sig:$e(v)}))throw new K("no route to carry the dial","unreachable");c.timer=this._timer(()=>this._meshFail(e,"dial_timeout"),xn.MESH_DIAL_MS)}catch(d){this._meshFail(e,d?.code||"dial_failed")}}async _onMeshOffer(e){if(!this._mesh||this._destroyed)return;let n=Me(String(e.from||""));if(Me(String(e.to||""))!==this.selfFp||De(e.epoch)!==this.epoch||this.phase!==Y.READY||!this.sasConfirmed)return;let r=this.members.get(n);if(!r||!r.publicKey)throw new K("mesh dial from a non-member","not_a_member");if(r.sessionId||this._meshDials.has(n)||this.selfFp<n)return;let i=String(e.d||"");if(!i||i.length>D.MAX_DESCRIPTOR_CHARS)throw new K("mesh descriptor is missing or oversized","bad_descriptor");let c=nt(String(e.n||""),{max:D.MESH_NONCE_BYTES});if(!await as(this.subtle,r.publicKey,{groupId:this.groupId,epoch:this.epoch,kind:gn.OFFER,fromFp:n,toFp:this.selfFp,descriptor:i,nonce:c},nt(String(e.sig||""),{max:D.MAX_SIG_BYTES})))throw new K("mesh dial signature did not verify","bad_signature");if(this._destroyed||r.sessionId||this._meshDials.has(n)||De(e.epoch)!==this.epoch)return;let h=this.epoch,m={role:"answer",sessionId:null,nonce:c,epoch:h,timer:null};this._meshDials.set(n,m);try{let v=await this._mesh.createAnswer(n,i),S=v&&v.sessionId,p=String(v&&v.descriptor||"");if(!S||!p)throw new K("mesh transport produced no answer","no_descriptor");if(!this._dialStillWanted(n,m))return this._abandonDial(n,m,S);m.sessionId=S,this._meshSessions.add(S),this.bindSession(n,S,ce.PENDING);let k=await is(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:h,kind:gn.ANSWER,fromFp:this.selfFp,toFp:n,descriptor:p,nonce:c});if(!await this._sendTo(n,{type:de.MESH_ANSWER,gid:this.groupId,epoch:h,from:this.selfFp,to:n,d:p,n:$e(c),sig:$e(k)}))throw new K("no route to carry the answer","unreachable");m.timer=this._timer(()=>this._meshFail(n,"answer_timeout"),xn.MESH_DIAL_MS)}catch(v){this._meshFail(n,v?.code||"answer_failed")}}async _onMeshAnswer(e){if(!this._mesh||this._destroyed)return;let n=Me(String(e.from||""));if(Me(String(e.to||""))!==this.selfFp||De(e.epoch)!==this.epoch)return;let r=this._meshDials.get(n);if(!r||r.role!=="offer"||!r.sessionId||r.epoch!==this.epoch)return;let i=this.members.get(n);if(!i||!i.publicKey)throw new K("mesh answer from a non-member","not_a_member");let c=String(e.d||"");if(!c||c.length>D.MAX_DESCRIPTOR_CHARS)throw new K("mesh descriptor is missing or oversized","bad_descriptor");let d=nt(String(e.n||""),{max:D.MESH_NONCE_BYTES});if(d.length!==r.nonce.length||!d.every((m,v)=>m===r.nonce[v]))throw new K("mesh answer does not match the dial it claims","bad_mesh_nonce");if(!await as(this.subtle,i.publicKey,{groupId:this.groupId,epoch:this.epoch,kind:gn.ANSWER,fromFp:n,toFp:this.selfFp,descriptor:c,nonce:d},nt(String(e.sig||""),{max:D.MAX_SIG_BYTES})))throw new K("mesh answer signature did not verify","bad_signature");try{await this._mesh.acceptAnswer(r.sessionId,c)}catch(m){this._meshFail(n,m?.code||"answer_rejected")}}_onMeshAbort(e){let n=Me(String(e.from||""));Me(String(e.to||""))===this.selfFp&&this._meshDials.has(n)&&this._meshFail(n,"peer_aborted",{tellPeer:!1})}async probeSession(e){return this._destroyed||!this._mesh||!e||this.phase!==Y.READY||!this.sasConfirmed||this.sessionToFp.has(e)?!1:this._sendProbe(e)}async _sendProbe(e){if(this._destroyed||this._probed.has(e))return!1;let n=this._linkFingerprint(e);if(!n)return!1;this._probed.add(e);let r=await ki(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:this.epoch,fp:this.selfFp,linkFp:n});return await this._wire(e,{type:de.PROBE,gid:this.groupId,epoch:this.epoch,fp:this.selfFp,sig:$e(r)}),!0}_linkFingerprint(e){try{let n=this._mesh?.linkFingerprint?.(e);return typeof n=="string"&&n.length>0?n:""}catch{return""}}async _onProbe(e,n){if(this._destroyed||this.phase!==Y.READY||!this.sasConfirmed||De(n.epoch)!==this.epoch)return;let r=Me(String(n.fp||""));if(r===this.selfFp)return;let i=this.members.get(r);if(!i||!i.publicKey||this.sessionToFp.has(e)||i.sessionId&&(i.state===ce.LINKED||!this._meshDials.has(r)))return;let c=this._linkFingerprint(e);if(!c)return;if(!await Si(this.subtle,i.publicKey,{groupId:this.groupId,epoch:this.epoch,fp:r,linkFp:c},nt(String(n.sig||""),{max:D.MAX_SIG_BYTES})))throw new K("link probe signature did not verify","bad_signature");this._settleDial(r),this.bindSession(r,e,ce.LINKED),this._sendProbe(e).catch(()=>{}),this._scheduleMeshMaintain()}async invite(e){if(!this.isAdmin)throw new K("only the admin invites","not_admin");if(await this.init(),e.length+1>D.MAX_MEMBERS)throw new K(`a group is limited to ${D.MAX_MEMBERS} members`,"too_many_members");this._setPhase(Y.FORMING);for(let c of e)this._awaitingHello.set(c.sessionId,c.name||"Member");let n={type:de.INVITE,gid:this.groupId,epoch:this.epoch,name:this.name,adminSpki:$e(this.identity.spki)},r=await Promise.allSettled(e.map(c=>this._wire(c.sessionId,n))),i=r.filter(c=>c.status==="rejected");if(i.length===e.length)throw this._fail("invitations_could_not_be_sent"),new K("the invitation could not be sent \u2014 the chat with that peer is not connected","invitations_could_not_be_sent");if(i.length>0){let c=e.filter((d,h)=>r[h].status==="fulfilled");for(let d of e)c.includes(d)||this._awaitingHello.delete(d.sessionId);this._emit("partial_invite",{sent:c.length,total:e.length})}this._timer(()=>{this.phase===Y.FORMING&&this._fail("invitees_did_not_respond")},xn.HELLO_MS)}async acceptInvite(e,n){let r=hr(n);await this.init();let i=nt(String(r.adminSpki||"")),{publicKey:c,fingerprint:d}=await jn(this.subtle,i);this.adminFp=d,this.epoch=De(r.epoch),this.name=yn(r.name),this.members.set(d,{fp:d,name:"Admin",spki:i,publicKey:c,sessionId:e,state:ce.LINKED}),this.sessionToFp.set(e,d),this._setPhase(Y.FORMING),this._emitMembers(),await this._wire(e,{type:de.HELLO,gid:this.groupId,epoch:this.epoch,spki:$e(this.identity.spki)}),this._timer(()=>{this.phase===Y.FORMING&&this._fail("roster_never_arrived")},xn.HELLO_MS)}async _onHello(e,n){if(!this.isAdmin)return;if(!this._awaitingHello.has(e)){this._log("warn","dropped an unsolicited group hello",{groupId:this.groupId});return}let r=nt(String(n.spki||"")),{publicKey:i,fingerprint:c}=await jn(this.subtle,r);if(!(this.members.has(c)&&c!==this.selfFp)){if(this.members.size>=D.MAX_MEMBERS)throw new K("group is full","too_many_members");if(this.members.set(c,{fp:c,name:this._awaitingHello.get(e)||"Member",spki:r,publicKey:i,sessionId:e,state:ce.LINKED}),this.sessionToFp.set(e,c),this._awaitingHello.delete(e),this._emitMembers(),this._awaitingHello.size===0){if(this._pendingAdd)return this._finishAdd();await this.publishRoster(mn.CREATE)}}}async publishRoster(e=mn.ADD){if(!this.isAdmin)throw new K("only the admin publishes the roster","not_admin");let n=bn([...this.members.keys()]),r={groupId:this.groupId,epoch:this.epoch,op:e,memberFps:n,name:this.name},i=await gi(this.subtle,this.identity.keyPair.privateKey,r);for(let c of n){let d=this.members.get(c);await this._broadcast({type:de.MEMBER,gid:this.groupId,epoch:this.epoch,fp:c,name:d.name==="You"?"Admin":d.name,spki:$e(d.spki)})}await this._broadcast({type:de.ROSTER,gid:this.groupId,epoch:this.epoch,op:e,name:this.name,adminSpki:$e(this.identity.spki),members:n,sig:$e(i)}),await this._startCeremony()}async _onMemberKey(e){if(De(e.epoch)<this.epoch||this._pendingKeys.size>D.MAX_MEMBERS*2)return;let r=nt(String(e.spki||"")),{publicKey:i,fingerprint:c}=await jn(this.subtle,r);if(Me(String(e.fp||""))!==c)throw new K("member key does not match its fingerprint","fingerprint_mismatch");this._pendingKeys.set(c,{spki:r,publicKey:i,name:yn(e.name)})}async _onRoster(e,n){let r=De(n.epoch);if(this.isAdmin)return;if(r<this.epoch)throw new K("roster epoch went backwards","stale_epoch");let i=nt(String(n.adminSpki||"")),{publicKey:c,fingerprint:d}=await jn(this.subtle,i);if(this.adminFp&&d!==this.adminFp)throw new K("roster was signed by someone other than the admin","wrong_admin");if(!Array.isArray(n.members))throw new K("roster carries no member list","bad_roster");if(n.members.length>D.MAX_MEMBERS)throw new K("roster exceeds the member limit","too_many_members");let h=bn(n.members.map(p=>String(p||"")));if(!h.includes(this.selfFp))throw new K("roster does not include us","not_a_member");if(!h.includes(d))throw new K("roster does not include its author","bad_roster");let m=[];for(let p of h){if(p===this.selfFp){m.push({fp:p,name:"You",spki:this.identity.spki,publicKey:null});continue}let k=this._pendingKeys.get(p)||(p===d?{spki:i,publicKey:c,name:"Admin"}:null);if(!k)throw new K("roster names a member whose key never arrived","missing_member_key");m.push({fp:p,name:k.name,spki:k.spki,publicKey:k.publicKey})}if(!await mi(this.subtle,c,{groupId:this.groupId,epoch:r,op:String(n.op||""),memberFps:h,name:yn(n.name)},nt(String(n.sig||""),{max:D.MAX_SIG_BYTES})))throw new K("roster signature did not verify","bad_signature");this.epoch=r,this.name=yn(n.name),this.adminFp=d;let S=this.members;this.members=new Map;for(let p of m){let k=S.get(p.fp);this.members.set(p.fp,{fp:p.fp,name:p.fp===this.selfFp?"You":p.name,spki:p.spki,publicKey:p.fp===this.selfFp?null:p.publicKey,sessionId:k?.sessionId||null,state:p.fp===this.selfFp?ce.SELF:k?.state===ce.LINKED?ce.LINKED:ce.PENDING})}for(let[p,k]of[...this.sessionToFp])this.members.has(k)||this.sessionToFp.delete(p);this._emit("roster",{name:this.name,epoch:this.epoch,adminFp:d}),this._emitMembers(),await this._startCeremony()}async _startCeremony(){try{this.ceremony?.destroy()}catch{}this._meshReset(),this.ceremony=new ur({groupId:this.groupId,epoch:this.epoch,selfFingerprint:this.selfFp,memberFingerprints:[...this.members.keys()]}),this._setPhase(Y.COMMITTING);let e=await this.ceremony.ownCommitment(this.subtle);await this._broadcast({type:de.COMMIT,gid:this.groupId,epoch:this.epoch,fp:this.selfFp,commit:$e(e)});let n=this.epoch;this._timer(()=>{this.epoch===n&&(this.phase===Y.COMMITTING||this.phase===Y.REVEALING)&&this._fail("ceremony_timed_out")},xn.CEREMONY_MS),await this._drainPendingCeremony(),await this._maybeReveal()}_holdCeremonyFrame(e){this._pendingCeremony.length>=D.MAX_MEMBERS*2||this._pendingCeremony.push(e)}async _drainPendingCeremony(){if(!this._draining){this._draining=!0;try{let e=this._pendingCeremony;this._pendingCeremony=[];for(let n of e)try{n.type===de.COMMIT?await this._onCommit(n):n.type===de.REVEAL&&await this._onReveal(n)}catch(r){this._log("warn","held ceremony frame discarded",{code:r?.code})}}finally{this._draining=!1}}}async _onCommit(e){if(!this.ceremony)return this._holdCeremonyFrame(e);De(e.epoch)===this.epoch&&(this.ceremony.acceptCommitment(Me(String(e.fp||"")),nt(String(e.commit||""),{max:D.COMMIT_BYTES})),await this._drainPendingCeremony(),await this._maybeReveal())}async _maybeReveal(){if(!this.ceremony||this.ceremony.revealed||!this.ceremony.commitmentsComplete)return;this._setPhase(Y.REVEALING);let e=this.ceremony.reveal();await this._broadcast({type:de.REVEAL,gid:this.groupId,epoch:this.epoch,fp:this.selfFp,nonce:$e(e)}),await this._maybeFinish()}async _onReveal(e){if(!this.ceremony)return this._holdCeremonyFrame(e);if(De(e.epoch)===this.epoch){if(!this.ceremony.commitments.has(Me(String(e.fp||""))))return this._holdCeremonyFrame(e);await this.ceremony.acceptReveal(this.subtle,Me(String(e.fp||"")),nt(String(e.nonce||""),{max:D.NONCE_BYTES})),await this._maybeFinish()}}async _maybeFinish(){if(!this.ceremony||!this.ceremony.revealsComplete||this.sasCode)return;let e=await this.ceremony.finish(this.subtle);this._setPhase(Y.AWAITING_SAS),this.sasCode=e,this._emit("sas",{code:e})}confirmSas(){if(this.phase!==Y.AWAITING_SAS||!this.sasCode)throw new K("there is no group code to confirm","no_code");this.sasConfirmed=!0,this.phase=Y.READY;try{this.ceremony?.destroy()}catch{}this.ceremony=null,this._emit("confirmed",{members:this._memberSnapshot()}),this._scheduleMeshMaintain()}async _recomputeSas(e){return rs(this.subtle,{groupId:this.groupId,epoch:this.epoch,contributions:e})}async sendText(e){if(this.phase!==Y.READY||!this.sasConfirmed)throw new K("the group code has not been confirmed","not_ready");let n=String(e??"");if(!n.trim())throw new K("empty message","empty");let r=++this.seq,i=await ss(this.subtle,n),c=await bi(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:this.epoch,seq:r,senderFp:this.selfFp,bodyHash:i}),d={type:de.MESSAGE,gid:this.groupId,epoch:this.epoch,seq:r,fp:this.selfFp,ts:Date.now(),body:n,sig:$e(c)},{delivered:h,unreachable:m}=await this._broadcast(d);return{seq:r,delivered:h,total:this.members.size-1,unreachable:m}}async _onMessage(e,{relayed:n=!1}={}){let r=De(e.epoch),i=De(e.seq),c=Me(String(e.fp||""));if(c===this.selfFp)return;let d=this.members.get(c);if(!d||!d.publicKey)throw new K("message from a non-member","not_a_member");if(r!==this.epoch)throw new K("message from another epoch","stale_epoch");let h=String(e.body??""),m=await ss(this.subtle,h);if(!await xi(this.subtle,d.publicKey,{groupId:this.groupId,epoch:r,seq:i,senderFp:c,bodyHash:m},nt(String(e.sig||""),{max:D.MAX_SIG_BYTES})))throw new K("message signature did not verify","bad_signature");let S=this.transcript.get(c)||new Map,p=$e(m),k=S.get(i);if(k!==void 0){if(k===p)return;throw this._emit("inconsistency",{fp:c,seq:i,name:d.name}),new K("member sent conflicting messages under one sequence number","transcript_split")}S.set(i,p),S.size>512&&S.delete(S.keys().next().value),this.transcript.set(c,S),this._emit("message",{fp:c,name:d.name,body:h,seq:i,ts:Number.isFinite(e.ts)?e.ts:Date.now(),relayed:n})}getCallSnapshot(){if(!this.call)return null;let e=this.members.get(this.call.startedBy);return{callId:this.call.callId,startedBy:this.call.startedBy,startedByName:this.call.startedBy===this.selfFp?"You":e?.name||"A member",withVideo:this.call.withVideo,startedAt:this.call.startedAt,joined:this.call.joined,participants:[...this.call.participants].map(n=>{let r=this.members.get(n);return{fp:n,name:n===this.selfFp?"You":r?.name||"A member",self:n===this.selfFp,sessionId:r?.sessionId||null,state:r?.state||ce.LOST}}).sort((n,r)=>n.fp<r.fp?-1:n.fp>r.fp?1:0)}}_emitCall(){this._emit("call",{call:this.getCallSnapshot()})}_requireReady(){if(this.phase!==Y.READY||!this.sasConfirmed)throw new K("the group code has not been confirmed","not_ready")}async _sendCallFrame(e,n,r){let i=++this.callSeq,c=await _i(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:this.epoch,callId:n,action:e,fp:this.selfFp,seq:i,withVideo:r});return this._broadcast({type:de.CALL,gid:this.groupId,epoch:this.epoch,callId:n,action:e,fp:this.selfFp,seq:i,v:r===!0,ts:Date.now(),sig:$e(c)})}async startCall({withVideo:e=!1,prepare:n=null}={}){if(this._requireReady(),this.call)throw new K("a call is already running in this group","call_in_progress");let r=Ri();this.call={callId:r,startedBy:this.selfFp,withVideo:e===!0,startedAt:Date.now(),participants:new Set([this.selfFp]),joined:!0},this._emitCall(),this._scheduleMeshMaintain();try{typeof n=="function"&&await n(this.getCallSnapshot());let{unreachable:i}=await this._sendCallFrame(Ft.START,r,this.call.withVideo);return{callId:r,unreachable:i}}catch(i){throw this.call=null,this._emitCall(),i}}async joinCall(){if(this._requireReady(),!this.call)throw new K("there is no call to join","no_call");if(this.call.joined)return{callId:this.call.callId,unreachable:[]};this.call.joined=!0,this.call.participants.add(this.selfFp),this._emitCall(),this._scheduleMeshMaintain();let{unreachable:e}=await this._sendCallFrame(Ft.JOIN,this.call.callId,this.call.withVideo);return{callId:this.call.callId,unreachable:e}}async leaveCall(){if(!this.call)return;let e=this.call.callId,n=this.call.withVideo;this.call.joined=!1,this.call.participants.delete(this.selfFp),this.call.participants.size===0&&(this.call=null),this._emitCall();try{await this._sendCallFrame(Ft.LEAVE,e,n)}catch{}}_dropFromCall(e){!this.call||!this.call.participants.has(e)||(this.call.participants.delete(e),this.call.participants.size===0&&(this.call=null),this._emitCall())}async _onCall(e){let n=De(e.epoch),r=De(e.seq),i=Me(String(e.fp||"")),c=os(String(e.callId||"")),d=String(e.action||""),h=e.v===!0;if(i===this.selfFp)return;let m=this.members.get(i);if(!m||!m.publicKey)throw new K("call frame from a non-member","not_a_member");if(n!==this.epoch)throw new K("call frame from another epoch","stale_epoch");let v=this._callSeen.get(i);if(v!==void 0&&r<=v)return;if(!await Ci(this.subtle,m.publicKey,{groupId:this.groupId,epoch:n,callId:c,action:d,fp:i,seq:r,withVideo:h},nt(String(e.sig||""),{max:D.MAX_SIG_BYTES})))throw new K("call frame signature did not verify","bad_signature");if(this._callSeen.set(i,r),!(this.phase!==Y.READY||!this.sasConfirmed))switch(d){case Ft.START:{if(this.call&&this.call.callId!==c){if(c>=this.call.callId)return;this.call=null}this.call?this.call.participants.add(i):this.call={callId:c,startedBy:i,withVideo:h,startedAt:Date.now(),participants:new Set([i]),joined:!1},this._emitCall(),this._scheduleMeshMaintain();return}case Ft.JOIN:{if(!this.call||this.call.callId!==c||this.call.participants.has(i))return;this.call.participants.add(i),h&&(this.call.withVideo=!0),this._emitCall(),this._scheduleMeshMaintain();return}case Ft.LEAVE:{if(!this.call||this.call.callId!==c)return;this._dropFromCall(i);return}default:return}}async handleFrame(e,n,{relayed:r=!1}={}){if(this._destroyed||!$n(n))return;let i=hr(n);if(!(!i||!mr.has(i.type))&&At(String(i.gid||""))===this.groupId)switch(i.type){case de.RELAY:return this._onRelay(e,i);case de.HELLO:return this._onHello(e,i);case de.MEMBER:return this._onMemberKey(i);case de.ROSTER:return this._onRoster(e,i);case de.COMMIT:return this._onCommit(i);case de.REVEAL:return this._onReveal(i);case de.MESSAGE:return this._onMessage(i,{relayed:r});case de.LEAVE:return this._onLeave(i);case de.MESH_OFFER:return this._onMeshOffer(i);case de.MESH_ANSWER:return this._onMeshAnswer(i);case de.MESH_ABORT:return this._onMeshAbort(i);case de.CALL:return this._onCall(i);case de.PROBE:return r?void 0:this._onProbe(e,i);case de.INVITE:return;default:return}}async _onRelay(e,n){let r=Me(String(n.to||"")),i=n.inner;if(!$n(i)||i.type===de.RELAY)return;if(r===this.selfFp)return this.handleFrame(e,i,{relayed:!0});if(n.hopped===!0)return;let c=this.members.get(r);!c||c.state!==ce.LINKED||!c.sessionId||await this._wire(c.sessionId,{...n,hopped:!0})}async _onLeave(e){let n=Me(String(e.fp||"")),r=this.members.get(n);if(!(!r||n===this.selfFp)){if(this._emit("left",{fp:n,name:r.name}),this._dropFromCall(n),!this.isAdmin&&n===this.adminFp){this.members.delete(n);for(let[i,c]of[...this.sessionToFp])c===n&&this.sessionToFp.delete(i);this._emit("ended",{reason:"admin_left"});return}if(this.isAdmin){this.members.delete(n);for(let[i,c]of[...this.sessionToFp])c===n&&this.sessionToFp.delete(i);if(this._emitMembers(),this.members.size<D.MIN_MEMBERS){this._emit("ended",{reason:"last_member_left"});return}this.epoch+=1,await this.publishRoster(mn.REMOVE)}}}async leave(){try{await this._broadcast({type:de.LEAVE,gid:this.groupId,fp:this.selfFp})}catch{}}async addMembers(e){if(!this.isAdmin)throw new K("only the admin invites","not_admin");if(!Array.isArray(e)||e.length===0)return 0;if(this._pendingAdd)throw new K("an invitation round is already running","add_in_flight");if(this.members.size+e.length>D.MAX_MEMBERS)throw new K(`a group is limited to ${D.MAX_MEMBERS} members`,"too_many_members");for(let d of e)if(this.sessionToFp.has(d.sessionId))throw new K("that chat is already a member of this group","already_a_member");this._pendingAdd={op:mn.ADD,epoch:this.epoch+1,before:new Set(this.members.keys())};for(let d of e)this._awaitingHello.set(d.sessionId,d.name||"Member");let n={type:de.INVITE,gid:this.groupId,epoch:this._pendingAdd.epoch,name:this.name,adminSpki:$e(this.identity.spki)},r=this._pendingAdd,i=await Promise.allSettled(e.map(d=>this._wire(d.sessionId,n))),c=i.filter(d=>d.status==="fulfilled").length;if(c===0){for(let d of e)this._awaitingHello.delete(d.sessionId);throw this._pendingAdd===r&&(this._pendingAdd=null),new K("the invitation could not be sent \u2014 that chat is not connected","invitations_could_not_be_sent")}return e.forEach((d,h)=>{i[h].status==="rejected"&&this._awaitingHello.delete(d.sessionId)}),this._pendingAdd===r&&this._timer(()=>{this._pendingAdd===r&&this._finishAdd()},xn.HELLO_MS),c}async _finishAdd(){let e=this._pendingAdd;return e?(this._pendingAdd=null,this._awaitingHello.clear(),[...this.members.keys()].filter(r=>!e.before.has(r)).length===0?(this._emit("add_failed",{reason:"nobody_joined"}),!1):(this.epoch=e.epoch,this._emitMembers(),await this.publishRoster(e.op),!0)):!1}async removeMember(e){if(!this.isAdmin)throw new K("only the admin removes members","not_admin");if(e===this.selfFp)throw new K("the admin cannot remove themselves","bad_target");if(!this.members.has(e))return!1;if(this.members.size-1<D.MIN_MEMBERS)throw new K("a group cannot drop below two members \u2014 leave it instead","would_empty_group");this.members.delete(e);for(let[n,r]of[...this.sessionToFp])r===e&&this.sessionToFp.delete(n);return this.epoch+=1,this._emitMembers(),await this.publishRoster(mn.REMOVE),!0}};var vo=t=>/rate limit/i.test(t?.message||"");function Di({getManager:t,gapMs:e=260,attempts:n=4,now:r=()=>Date.now(),sleep:i=c=>new Promise(d=>setTimeout(d,c))}={}){let c=new Map;return async function(h,m){let v=t(h);if(!v||typeof v.sendMessage!="function")throw new Error("no such link");if(typeof v.isConnected=="function"&&!v.isConnected())throw new Error("link is down");let S=c.get(h)||{chain:Promise.resolve(),lastAt:0},p=JSON.stringify(m),k=S.chain.then(async()=>{let y=e-(r()-S.lastAt);y>0&&await i(y);let I=null;for(let B=0;B<n;B++)try{return await v.sendMessage(p),S.lastAt=r(),!0}catch(N){if(I=N,!vo(N))throw N;await i(e*(B+1))}throw I});return S.chain=k.catch(()=>{}),c.set(h,S),k}}var Fn={move:{damping:1,response:.4},drawer:{damping:.8,response:.3},rotate:{damping:.8,response:.4}},wo=1/480,ko=.064;function qn(){try{return typeof matchMedia=="function"&&matchMedia("(prefers-reduced-motion: reduce)").matches}catch{return!1}}function So(t,e=.998){return t/1e3*e/(1-e)}function Fi(t,e,n,r={}){let{flick:i=220,decelerationRate:c=.998}=r;if(!n||!n.length)return t;let d=t+So(e,c),h=n;if(Math.abs(e)>i){let m=n.filter(v=>e>0?v>=t:v<=t);m.length&&(h=m)}return h.reduce((m,v)=>Math.abs(v-d)<Math.abs(m-d)?v:m,h[0])}function ds(t,e,n=.55){return e?t*e*n/(e+n*Math.abs(t)):0}function Pi(t=100){let e=[];return{add(n,r=performance.now()){for(e.push({value:n,time:r});e.length>2&&r-e[0].time>t;)e.shift()},get(n=performance.now()){if(e.length<2)return 0;let r=e[e.length-1];if(n-r.time>t)return 0;let i=e[0],c=(r.time-i.time)/1e3;return c<=0?0:(r.value-i.value)/c},reset(){e.length=0}}}function Oi(t){let{from:e,to:n,velocity:r=0,damping:i=Fn.move.damping,response:c=Fn.move.response,restDelta:d=.1,restSpeed:h=.5,respectReducedMotion:m=!0,onUpdate:v,onComplete:S}=t,p=e,k=r,y=n,I=0,B=0,N=!1,ae=2*Math.PI/c,te=i,pe=()=>{N=!0,I=0,p=y,k=0,v&&v(p),S&&S()};if(m&&qn())return pe(),{get value(){return p},get velocity(){return 0},get done(){return!0},retarget(C){y=C,pe()},stop(){}};let ve=C=>{I=0;let F=Math.min((C-B)/1e3,ko);B=C;let V=F;for(;V>0;){let P=Math.min(wo,V),O=-ae*ae*(p-y)-2*te*ae*k;k+=O*P,p+=k*P,V-=P}if(Math.abs(p-y)<d&&Math.abs(k)<h){pe();return}v&&v(p),I=requestAnimationFrame(ve)};return B=performance.now(),I=requestAnimationFrame(ve),{get value(){return p},get velocity(){return k},get done(){return N},retarget(C){y=C},stop(){I&&cancelAnimationFrame(I),I=0,N=!0}}}var ps=()=>{let[t]=React.useState(()=>typeof window>"u"||!window.location||ri()?null:si({pathname:window.location.pathname||"/",languages:window.navigator?.languages||[],stored:Qr()})),[e,n]=React.useState(!1),[r,i]=React.useState(!1);if(React.useEffect(()=>{if(!t)return;let I=setTimeout(()=>i(!0),600);return()=>clearTimeout(I)},[t]),!t||e)return null;let c=or[t]||{},d=c.dir==="rtl"?"rtl":"ltr",h=typeof window<"u"?window.location.pathname:"/",m=Zs(t,h),v=qn(),S=()=>{Xr(),n(!0)},p=React.createElement("div",{key:"line",lang:c.htmlLang||t,dir:d,style:{fontSize:"13px",lineHeight:1.45,color:"var(--sb-text-4)",textAlign:"start"}},a("language.suggest.text",null,t)),k=React.createElement("a",{key:"cta",href:m,hrefLang:c.htmlLang||t,lang:c.htmlLang||t,dir:d,onClick:()=>{ei(t),Xr()},style:{display:"inline-flex",alignItems:"center",gap:"6px",padding:"7px 12px",borderRadius:"9px",border:"1px solid rgba(var(--sb-orange-rgb), 0.30)",background:"rgba(var(--sb-orange-rgb), 0.12)",color:"var(--sb-orange)",fontSize:"12.5px",fontWeight:600,textDecoration:"none",whiteSpace:"nowrap"}},a("language.suggest.cta",null,t)),y=React.createElement("button",{key:"dismiss",type:"button",onClick:S,"aria-label":a("language.suggest.dismiss",null,t),style:{padding:"7px 10px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)",color:"var(--sb-text-7)",font:"inherit",fontSize:"12.5px",fontWeight:500,cursor:"pointer",whiteSpace:"nowrap"}},a("language.suggest.dismiss",null,t));return React.createElement("div",{role:"region","aria-label":a("language.label"),style:{position:"fixed",bottom:"24px",insetInlineStart:"24px",zIndex:50,maxWidth:"min(340px, calc(100vw - 48px))",display:"flex",flexDirection:"column",gap:"11px",padding:"14px 16px",borderRadius:"14px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",boxShadow:"0 16px 40px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))",opacity:r?1:0,transform:r||v?"none":"translateY(10px)",transition:v?"opacity .2s linear":"opacity .3s ease, transform .3s cubic-bezier(.2,.7,.3,1)",pointerEvents:r?"auto":"none"}},[p,React.createElement("div",{key:"actions",style:{display:"flex",alignItems:"center",gap:"8px"}},[k,y])])};window.LanguageSuggestion=ps;var R=(...t)=>React.createElement(...t),_={bg:"var(--sb-bg-deep)",panel:"var(--sb-surface)",panel2:"var(--sb-surface-2)",line:"rgba(var(--sb-ink), 0.07)",line2:"rgba(var(--sb-ink), 0.13)",ink:"var(--sb-text-1)",ink2:"var(--sb-text-5b)",ink3:"var(--sb-text-9)",accent:"var(--sb-orange)",good:"var(--sb-green)",warn:"var(--sb-yellow-2)",bad:"var(--sb-red)",accentSolid:"var(--sb-orange-solid)",goodSolid:"var(--sb-green-solid)",warnSolid:"var(--sb-yellow-2-solid)",badSolid:"var(--sb-red-solid)",mono:"'JetBrains Mono', ui-monospace, monospace"},rn={users:'<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19"/><circle cx="10" cy="8" r="3.2"/><path d="M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4"/><path d="M15.5 5.3a3.2 3.2 0 0 1 0 5.4"/></svg>',send:'<svg width="17" height="17" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 2 11 13"/><path d="m22 2-7 20-4-9-9-4 20-7z"/></svg>',shield:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/><path d="m9 12 2 2 4-4"/></svg>',x:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><path d="M18 6 6 18M6 6l12 12"/></svg>',plus:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"><path d="M12 5v14M5 12h14"/></svg>',relay:'<svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 12h4l3-7 4 14 3-7h2"/></svg>',phone:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z"/></svg>',exit:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M10 20H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h4"/><path d="m15 16 4-4-4-4"/><path d="M19 12H10"/></svg>',video:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M23 7l-7 5 7 5V7z"/><rect x="1" y="5" width="15" height="14" rx="2.5"/></svg>'},sn=(t,e={})=>R("span",{style:{display:"grid",placeItems:"center",...e},dangerouslySetInnerHTML:{__html:t}}),ut=(t=!1)=>({display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"11px 18px",borderRadius:"10px",cursor:"pointer",fontFamily:"inherit",fontSize:"14px",fontWeight:700,border:t?"none":`1px solid ${_.line2}`,background:t?_.accentSolid:"transparent",color:t?"var(--sb-on-accent)":_.ink2}),Yn={position:"fixed",inset:0,zIndex:90,display:"grid",placeItems:"center",background:"rgba(var(--sb-scrim-rgb), 0.72)",backdropFilter:"blur(6px)",padding:"20px"},Kn={width:"100%",maxWidth:"440px",background:_.panel,border:`1px solid ${_.line}`,borderRadius:"16px",padding:"24px",display:"flex",flexDirection:"column",gap:"18px",boxShadow:"0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))"};function Eo(t,e){let n=new TextEncoder,r=String(t);for(;n.encode(r).length>e;)r=r.slice(0,-1);return r}var vn={fontFamily:_.mono,fontSize:"10px",fontWeight:700,letterSpacing:"1.3px",textTransform:"uppercase",color:_.ink3};function Ro(t){switch(t.phase){case Y.FORMING:return a("group.waitingJoin");case Y.COMMITTING:return a("group.waitingCommit");case Y.REVEALING:return a("group.exchangingNonces");case Y.FAILED:return _o[t.error]||a("group.errNotFormed");default:return a("group.working")}}var _o={invitations_could_not_be_sent:a("group.errInviteFailed"),invitees_did_not_respond:a("group.errNobodyAccepted"),roster_never_arrived:a("group.errNoMemberList"),ceremony_timed_out:a("groupErr.timeout"),bad_signature:a("group.errUnsignedList"),wrong_admin:a("group.errNotOwner"),fingerprint_mismatch:a("groupErr.keyMismatch"),commitment_mismatch:a("groupErr.revealMismatch"),commitment_changed:a("groupErr.commitChanged"),missing_member_key:a("groupErr.missingKey"),not_a_member:a("groupErr.outsider"),bad_name:a("group.nameTooLong"),too_many_members:a("groupErr.limit"),frame_too_large:a("groupErr.tooLarge")};function Li({group:t,onConfirm:e,onCancel:n}){if(!t)return null;let r=t.phase===Y.FAILED,i=t.phase!==Y.AWAITING_SAS||!t.sasCode;return R("div",{style:Yn,role:"dialog","aria-modal":"true"},R("div",{style:Kn},[R("div",{key:"h",style:{display:"flex",flexDirection:"column",gap:"6px"}},[R("span",{key:"l",style:vn},a("group.sasTitle")),R("h3",{key:"t",style:{margin:0,fontSize:"19px",fontWeight:700,color:_.ink}},t.name)]),i?R("div",{key:"wait",style:{padding:"28px 16px",textAlign:"center",borderRadius:"12px",background:_.panel2,border:`1px solid ${_.line}`,color:_.ink2,fontSize:"14px"}},[R("div",{key:"d",style:{fontFamily:_.mono,fontSize:"26px",letterSpacing:"6px",color:r?_.bad:_.ink3}},"\xB7\xB7\xB7\xB7\xB7\xB7\xB7"),R("div",{key:"s",style:{marginTop:"10px",color:r?_.bad:_.ink2}},Ro(t)),r&&R("div",{key:"why",style:{marginTop:"6px",fontFamily:_.mono,fontSize:"11px",color:_.ink3}},t.error||"unknown")]):R("div",{key:"code",style:{padding:"22px 16px",textAlign:"center",borderRadius:"12px",background:"rgba(var(--sb-orange-rgb), 0.09)",border:"1px solid rgba(var(--sb-orange-rgb), 0.3)"}},R("span",{dir:"ltr",style:{fontFamily:_.mono,fontSize:"clamp(30px, 9vw, 42px)",fontWeight:700,letterSpacing:"9px",color:_.accentSolid,unicodeBidi:"isolate"}},t.sasCode)),R("p",{key:"why",style:{margin:0,fontSize:"13.5px",lineHeight:1.62,color:_.ink2}},[a("group.sasReadAloud"),R("b",{key:"b",style:{color:_.ink}},`all ${t.members.length-1} other members`)," \u2014 in person, or on a call where you recognise every voice. Everyone must see the same code."]),R("p",{key:"warn",style:{margin:0,padding:"11px 13px",borderRadius:"9px",fontSize:"12.5px",lineHeight:1.55,background:"rgba(var(--sb-red-rgb), 0.09)",border:"1px solid rgba(var(--sb-red-rgb), 0.26)",color:"var(--sb-red-soft)"}},r?a("group.errNothingSent"):a("group.sasWarning")),R("div",{key:"actions",style:{display:"flex",gap:"10px"}},[R("button",{key:"c",onClick:n,style:{...ut(r),flex:r?2:1}},r?a("group.close"):a("group.cancel")),!r&&R("button",{key:"ok",onClick:e,disabled:i,style:{...ut(!0),flex:2,opacity:i?.4:1,cursor:i?"not-allowed":"pointer"}},[sn(rn.shield,{key:"i"}),a("group.sasEveryone")])])]))}function Bi({candidates:t,relayOnly:e,onCreate:n,onCancel:r}){let[i,c]=React.useState(""),[d,h]=React.useState([]),m=D.MAX_MEMBERS-1,v=p=>h(k=>k.includes(p)?k.filter(y=>y!==p):k.length>=m?k:[...k,p]),S=i.trim().length>0&&d.length>=1;return R("div",{style:Yn,role:"dialog","aria-modal":"true"},R("div",{style:{...Kn,maxWidth:"470px"}},[R("div",{key:"h",style:{display:"flex",flexDirection:"column",gap:"6px"}},[R("span",{key:"l",style:vn},a("group.new")),R("p",{key:"p",style:{margin:0,fontSize:"13.5px",lineHeight:1.6,color:_.ink2}},a("group.capacity",{max:D.MAX_MEMBERS}))]),R("input",{key:"name",value:i,onChange:p=>c(Eo(p.target.value,D.MAX_NAME_BYTES)),placeholder:a("group.name"),style:{width:"100%",padding:"12px 14px",borderRadius:"10px",outline:"none",background:_.panel2,border:`1px solid ${_.line2}`,color:_.ink,fontFamily:"inherit",fontSize:"14.5px"}}),R("div",{key:"pick",style:{display:"flex",flexDirection:"column",gap:"9px"}},[R("div",{key:"l",style:{display:"flex",justifyContent:"space-between",alignItems:"baseline"}},[R("span",{key:"a",style:vn},a("group.members")),R("span",{key:"b",style:{...vn,color:d.length>=m?_.warn:_.ink3}},`${d.length} / ${m}`)]),t.length===0?R("div",{key:"empty",style:{padding:"18px 14px",borderRadius:"10px",textAlign:"center",background:_.panel2,border:`1px dashed ${_.line2}`,color:_.ink3,fontSize:"13px",lineHeight:1.55}},a("group.noVerified")):R("div",{key:"list",className:"msc-scroll",style:{display:"flex",flexDirection:"column",gap:"6px",maxHeight:"240px",overflowY:"auto"}},t.map(p=>{let k=d.includes(p.id),y=!k&&d.length>=m;return R("button",{key:p.id,onClick:()=>v(p.id),disabled:y,style:{display:"flex",alignItems:"center",gap:"11px",padding:"10px 12px",borderRadius:"10px",cursor:y?"not-allowed":"pointer",textAlign:"start",background:k?"rgba(var(--sb-orange-rgb), 0.1)":"transparent",border:`1px solid ${k?"rgba(var(--sb-orange-rgb), 0.32)":_.line}`,opacity:y?.4:1,fontFamily:"inherit"}},[R("span",{key:"av",style:{flex:"none",width:"32px",height:"32px",borderRadius:"9px",display:"grid",placeItems:"center",background:_.panel2,border:`1px solid ${_.line}`,fontFamily:_.mono,fontSize:"11px",fontWeight:700,color:_.ink2}},p.mono),R("span",{key:"n",style:{flex:1,minWidth:0,fontSize:"14px",color:_.ink,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},p.name),R("span",{key:"tick",style:{flex:"none",width:"18px",height:"18px",borderRadius:"5px",background:k?_.accentSolid:"transparent",border:`1px solid ${k?_.accentSolid:_.line2}`}})])}))]),!e&&R("p",{key:"ip",style:{margin:0,padding:"11px 13px",borderRadius:"9px",fontSize:"12.5px",lineHeight:1.55,background:"rgba(var(--sb-yellow-2-rgb), 0.08)",border:"1px solid rgba(var(--sb-yellow-2-rgb), 0.26)",color:"var(--sb-yellow-2)"}},a("group.relayOnlyOff")),R("div",{key:"actions",style:{display:"flex",gap:"10px"}},[R("button",{key:"c",onClick:r,style:{...ut(!1),flex:1}},a("group.cancelBtn")),R("button",{key:"ok",onClick:()=>S&&n({name:i.trim(),sessionIds:d}),disabled:!S,style:{...ut(!0),flex:2,opacity:S?1:.4,cursor:S?"pointer":"not-allowed"}},a("group.create"))])]))}function zi({message:t,onDismiss:e}){return t?R("div",{style:Yn,role:"alertdialog","aria-modal":"true"},R("div",{style:{...Kn,maxWidth:"400px"}},[R("span",{key:"l",style:vn},a("group.errNotCreated")),R("p",{key:"m",style:{margin:0,fontSize:"14px",lineHeight:1.6,color:_.ink2}},t),R("button",{key:"ok",onClick:e,style:ut(!0)},a("group.close"))])):null}function Ui({candidates:t,remaining:e,onAdd:n,onCancel:r}){let[i,c]=React.useState([]),d=h=>c(m=>m.includes(h)?m.filter(v=>v!==h):m.length>=e?m:[...m,h]);return R("div",{style:Yn,role:"dialog","aria-modal":"true"},R("div",{style:{...Kn,maxWidth:"440px"}},[R("div",{key:"h",style:{display:"flex",flexDirection:"column",gap:"6px"}},[R("span",{key:"l",style:vn},a("group.addMembers")),R("p",{key:"p",style:{margin:0,fontSize:"13.5px",lineHeight:1.6,color:_.ink2}},e>0?a("group.roomFor",{remaining:e}):a("group.errFull"))]),t.length===0?R("div",{key:"empty",style:{padding:"18px 14px",borderRadius:"10px",textAlign:"center",background:_.panel2,border:`1px dashed ${_.line2}`,color:_.ink3,fontSize:"13px",lineHeight:1.55}},a("group.noMoreToAdd")):R("div",{key:"list",className:"msc-scroll",style:{display:"flex",flexDirection:"column",gap:"6px",maxHeight:"260px",overflowY:"auto"}},t.map(h=>{let m=i.includes(h.id),v=!m&&i.length>=e;return R("button",{key:h.id,onClick:()=>d(h.id),disabled:v,style:{display:"flex",alignItems:"center",gap:"11px",padding:"10px 12px",borderRadius:"10px",cursor:v?"not-allowed":"pointer",textAlign:"start",background:m?"rgba(var(--sb-orange-rgb), 0.1)":"transparent",border:`1px solid ${m?"rgba(var(--sb-orange-rgb), 0.32)":_.line}`,opacity:v?.4:1,fontFamily:"inherit"}},[R("span",{key:"av",style:{flex:"none",width:"32px",height:"32px",borderRadius:"9px",display:"grid",placeItems:"center",background:_.panel2,border:`1px solid ${_.line}`,fontFamily:_.mono,fontSize:"11px",fontWeight:700,color:_.ink2}},h.mono),R("span",{key:"n",style:{flex:1,minWidth:0,fontSize:"14px",color:_.ink,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},h.name),R("span",{key:"tick",style:{flex:"none",width:"18px",height:"18px",borderRadius:"5px",background:m?_.accentSolid:"transparent",border:`1px solid ${m?_.accentSolid:_.line2}`}})])})),R("p",{key:"note",style:{margin:0,padding:"11px 13px",borderRadius:"9px",fontSize:"12.5px",lineHeight:1.55,background:_.panel2,border:`1px solid ${_.line}`,color:_.ink3}},a("group.inviteSentNote")),R("div",{key:"actions",style:{display:"flex",gap:"10px"}},[R("button",{key:"c",onClick:r,style:{...ut(!1),flex:1}},a("group.cancelBtn")),R("button",{key:"ok",onClick:()=>i.length&&n(i),disabled:i.length===0,style:{...ut(!0),flex:2,opacity:i.length?1:.4,cursor:i.length?"pointer":"not-allowed"}},i.length>1?a("group.invitePeople",{count:i.length}):a("group.invite"))])]))}function Gi({invite:t,onAccept:e,onDecline:n}){return t?R("div",{style:Yn,role:"dialog","aria-modal":"true"},R("div",{style:Kn},[R("div",{key:"h",style:{display:"flex",flexDirection:"column",gap:"6px"}},[R("span",{key:"l",style:vn},a("group.invitation")),R("h3",{key:"t",style:{margin:0,fontSize:"19px",fontWeight:700,color:_.ink}},t.name)]),R("p",{key:"p",style:{margin:0,fontSize:"13.5px",lineHeight:1.62,color:_.ink2}},[R("b",{key:"b",style:{color:_.ink}},t.fromLabel)," invited you to a peer-to-peer group. You will compare one safety code with every member before anything is sent."]),R("p",{key:"note",style:{margin:0,padding:"11px 13px",borderRadius:"9px",fontSize:"12.5px",lineHeight:1.55,background:_.panel2,border:`1px solid ${_.line}`,color:_.ink3}},a("group.joinNote")),R("div",{key:"actions",style:{display:"flex",gap:"10px"}},[R("button",{key:"d",onClick:n,style:{...ut(!1),flex:1}},a("group.decline")),R("button",{key:"a",onClick:e,style:{...ut(!0),flex:2}},a("group.join"))])])):null}function Co({group:t,onRemove:e,isAdmin:n}){return R("div",{className:"msc-scroll",style:{display:"flex",gap:"7px",padding:"9px 16px",overflowX:"auto",borderBottom:`1px solid ${_.line}`,flex:"none"}},t.members.map(r=>{let i=r.state===ce.SELF,c=r.state===ce.LOST,d=i||r.state===ce.LINKED?_.goodSolid:r.state===ce.PENDING?_.warnSolid:_.badSolid,h=r.state===ce.PENDING;return R("span",{key:r.fp,title:i?"You":r.state===ce.LINKED?a("group.directLink"):r.state===ce.PENDING?a("group.noDirectLink"):a("group.memberOffline",{name:r.name}),style:{flex:"none",display:"inline-flex",alignItems:"center",gap:"6px",padding:"5px 10px",borderRadius:"20px",background:c?"transparent":_.panel2,border:`1px solid ${c?"rgba(var(--sb-red-rgb), 0.3)":_.line}`,fontSize:"12.5px",color:i?_.ink:c?_.ink3:_.ink2,opacity:c?.75:1}},[R("span",{key:"d",style:{width:"7px",height:"7px",borderRadius:"50%",background:d}}),R("span",{key:"n",style:c?{textDecoration:"line-through"}:void 0},i?"You":r.name),c&&R("span",{key:"off",style:{fontFamily:_.mono,fontSize:"10px",color:_.bad,letterSpacing:"0.04em"}},"offline"),h&&sn(rn.relay,{key:"r",color:_.warn}),n&&!i&&e&&R("button",{key:"x",onClick:()=>e(r.fp),title:a("group.remove",{name:r.name}),style:{border:"none",background:"transparent",color:_.ink3,cursor:"pointer",display:"grid",padding:0},dangerouslySetInnerHTML:{__html:'<svg width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round"><path d="M18 6 6 18M6 6l12 12"/></svg>'}})])}))}function Io({msg:t}){let e=t.type==="sent";return t.type==="system"?R("div",{style:{alignSelf:"center",maxWidth:"80%",textAlign:"center",padding:"6px 12px",borderRadius:"9px",background:_.panel2,border:`1px solid ${_.line}`,fontSize:"12px",color:_.ink3,lineHeight:1.5}},t.message):R("div",{style:{alignSelf:e?"flex-end":"flex-start",maxWidth:"min(74%, 560px)",display:"flex",flexDirection:"column",gap:"3px"}},[!e&&R("span",{key:"who",style:{fontSize:"11.5px",fontWeight:600,color:_.accent,paddingInlineStart:"3px"}},t.senderName||a("group.member")),R("div",{key:"b",style:{padding:"9px 13px",borderRadius:e?"13px 13px 4px 13px":"13px 13px 13px 4px",background:e?"rgba(var(--sb-orange-rgb), 0.14)":_.panel2,border:`1px solid ${e?"rgba(var(--sb-orange-rgb), 0.26)":_.line}`,color:_.ink,fontSize:"14.5px",lineHeight:1.5,wordBreak:"break-word",whiteSpace:"pre-wrap"}},t.message),R("span",{key:"t",style:{fontFamily:_.mono,fontSize:"10px",color:_.ink3,alignSelf:e?"flex-end":"flex-start",padding:"0 3px"}},[new Date(t.timestamp||Date.now()).toLocaleTimeString([],{hour:"2-digit",minute:"2-digit"}),t.relayed?" \xB7 relayed":""].join(""))])}function Hi({group:t,input:e,setInput:n,onSend:r,onLeave:i,onRemoveMember:c,onAddMembers:d,isAdmin:h,scrollRef:m,onStartCall:v,callActive:S,callOverlay:p}){let k=t.phase===Y.READY&&t.sasConfirmed,y=t.members.some(B=>B.state===ce.PENDING),I=B=>{B.preventDefault(),!(!k||!e.trim())&&r(e)};return R("div",{style:{position:"relative",display:"flex",flexDirection:"column",height:"100%",minHeight:0,background:_.bg}},[R("style",{key:"head-css",dangerouslySetInnerHTML:{__html:"@media (max-width:1023px){.sb-group-header{padding-inline-start:58px !important;gap:9px !important;}}@media (max-width:600px){.sb-group-header .sb-gh-label{display:none !important;}.sb-group-header .sb-gh-btn{padding:8px 10px !important;}}"}}),R("div",{key:"head",className:"sb-group-header",style:{flex:"none",display:"flex",alignItems:"center",gap:"12px",padding:"var(--sb-safe-top, 0px) 16px 0",minHeight:"calc(64px + var(--sb-safe-top, 0px))",borderBottom:`1px solid ${_.line}`}},[R("span",{key:"av",style:{flex:"none",width:"38px",height:"38px",borderRadius:"11px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.24)",color:_.accent,fontFamily:_.mono,fontSize:"12px",fontWeight:700}},cs(t.name)),R("div",{key:"meta",style:{flex:1,minWidth:0}},[R("div",{key:"n",style:{fontSize:"15px",fontWeight:700,color:_.ink,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},t.name),R("div",{key:"s",style:{fontSize:"11.5px",color:y?_.warn:_.ink3,display:"flex",alignItems:"center",gap:"5px"}},[sn(rn.users,{key:"i",width:"13px",height:"13px"}),a("group.membersCount",{count:t.members.length}),k&&t.sasCode?R("span",{key:"code",dir:"ltr",style:{unicodeBidi:"isolate"}},a("group.codeSuffix",{code:t.sasCode})):""])]),k&&v&&R("button",{key:"callvoice",className:"sb-gh-btn",onClick:()=>v(!1),disabled:S,title:a("groupCall.startVoice"),"aria-label":a("groupCall.startVoice"),style:{...ut(!1),flex:"none",padding:"8px 10px",opacity:S?.4:1,cursor:S?"default":"pointer"}},sn(rn.phone,{key:"i"})),k&&v&&R("button",{key:"callvideo",className:"sb-gh-btn",onClick:()=>v(!0),disabled:S,title:a("groupCall.startVideo"),"aria-label":a("groupCall.startVideo"),style:{...ut(!1),flex:"none",padding:"8px 10px",opacity:S?.4:1,cursor:S?"default":"pointer"}},sn(rn.video,{key:"i"})),h&&d&&t.members.length<D.MAX_MEMBERS&&R("button",{key:"add",className:"sb-gh-btn",onClick:d,title:a("group.inviteMore"),style:{...ut(!1),flex:"none",padding:"8px 12px",fontSize:"12.5px"}},[sn(rn.plus,{key:"i"}),R("span",{key:"l",className:"sb-gh-label"},a("group.add"))]),R("button",{key:"leave",className:"sb-gh-btn",onClick:i,title:a("group.leaveThis"),"aria-label":a("group.leaveThis"),style:{...ut(!1),flex:"none",padding:"8px 12px",fontSize:"12.5px",color:_.bad,borderColor:"rgba(var(--sb-red-rgb), 0.3)"}},[sn(rn.exit,{key:"i"}),R("span",{key:"l",className:"sb-gh-label"},a("group.leave"))])]),R(Co,{key:"strip",group:t,onRemove:c,isAdmin:h}),y&&k&&R("div",{key:"relay-note",style:{flex:"none",padding:"8px 16px",fontSize:"12px",lineHeight:1.5,color:_.warn,background:"rgba(var(--sb-yellow-2-rgb), 0.08)",borderBottom:`1px solid ${_.line}`}},a("group.relayNote")),R("div",{key:"msgs",ref:m,className:"msc-scroll",style:{flex:1,minHeight:0,overflowY:"auto",padding:"18px 16px",display:"flex",flexDirection:"column",gap:"11px"}},t.messages.length===0?[R("div",{key:"empty",style:{margin:"auto",textAlign:"center",color:_.ink3,fontSize:"13.5px",lineHeight:1.6,maxWidth:"320px"}},k?a("group.emptyChat"):a("group.sasCompare"))]:t.messages.map(B=>R(Io,{key:B.id,msg:B}))),R("form",{key:"composer",onSubmit:I,style:{flex:"none",display:"flex",gap:"9px",padding:"12px 16px",borderTop:`1px solid ${_.line}`,alignItems:"flex-end"}},[R("input",{key:"in",value:e,onChange:B=>n(B.target.value),placeholder:k?a("group.message",{name:t.name}):a("group.confirmFirst"),disabled:!k,maxLength:D.MAX_BODY_BYTES,style:{flex:1,minWidth:0,padding:"12px 14px",borderRadius:"11px",outline:"none",background:_.panel2,border:`1px solid ${_.line2}`,color:_.ink,fontFamily:"inherit",fontSize:"14.5px",opacity:k?1:.5}}),R("button",{key:"send",type:"submit",disabled:!k||!e.trim(),title:a("group.send"),style:{...ut(!0),flex:"none",width:"44px",height:"44px",padding:0,borderRadius:"11px",opacity:!k||!e.trim()?.4:1}},sn(rn.send))]),p])}var Ue=Object.freeze({UNREACHABLE:"unreachable",CONNECTING:"connecting",ACTIVE:"active",FAILED:"failed"}),Ao={idle:Ue.CONNECTING,outgoing:Ue.CONNECTING,incoming:Ue.CONNECTING,connecting:Ue.CONNECTING,active:Ue.ACTIVE,ended:Ue.FAILED},yr=Object.freeze({ON:.05,OFF:.025,HOLD_MS:600,SAMPLE_MS:120}),Mo=8e3;function To(t,e){if(!t||!e)return null;let n;try{n=t.createMediaStreamSource(e)}catch{return null}let r=t.createAnalyser();r.fftSize=512,r.smoothingTimeConstant=.2,n.connect(r);let i=new Uint8Array(r.fftSize);return{read(){r.getByteTimeDomainData(i);let c=0;for(let d=0;d<i.length;d++){let h=(i[d]-128)/128;c+=h*h}return Math.sqrt(c/i.length)},close(){try{n.disconnect()}catch{}try{r.disconnect()}catch{}}}}var br=class{constructor({getManager:e,getUserMedia:n=null,createAudioSink:r=null,createLevelMeter:i=null,onChange:c=()=>{},log:d=()=>{}}){this._getManager=e,this._getUserMedia=n||(h=>navigator.mediaDevices.getUserMedia(h)),this._createAudioSink=r||(()=>typeof Audio=="function"?new Audio:null),this._createLevelMeter=i||(h=>To(this._audioContext(),h)),this._onChange=c,this._log=d,this.callId=null,this.selfFp="",this.withVideo=!1,this.micEnabled=!0,this.cameraEnabled=!1,this.facingMode="user",this.error=null,this.localStream=null,this._legs=new Map,this._peers=[],this._busy=!1,this._ctx=null,this._selfMeter=null,this.selfSpeaking=!1,this._selfQuietSince=0,this._levelTimer=null}_audioContext(){if(this._ctx)return this._ctx;let e=typeof AudioContext<"u"?AudioContext:typeof webkitAudioContext<"u"?webkitAudioContext:null;if(!e)return null;try{this._ctx=new e,this._ctx.state==="suspended"&&this._ctx.resume().catch(()=>{})}catch{this._ctx=null}return this._ctx}get active(){return this.callId!==null}async join({callId:e,selfFp:n,withVideo:r=!1,peers:i=[]}){if(this.callId===e){this.setPeers(i);return}this.callId&&await this.leave(),this.callId=e,this.selfFp=n,this.withVideo=r===!0,this.micEnabled=!0,this.cameraEnabled=this.withVideo,this.error=null,this._changed();try{this.localStream=await this._getUserMedia({audio:{echoCancellation:!0,noiseSuppression:!0,autoGainControl:!0},video:this.withVideo?{facingMode:this.facingMode,width:{ideal:1280},height:{ideal:720}}:!1})}catch(c){throw this.callId=null,this.error=Qn(c),this._changed(),c}this._selfMeter=this._createLevelMeter(this.localStream),this._startLevelPolling(),this.setPeers(i)}setPeers(e){if(this._peers=Array.isArray(e)?e:[],!this.active)return;let n=new Map;for(let r of this._peers)!r||!r.fp||r.fp===this.selfFp||n.set(r.fp,r);for(let[r,i]of[...this._legs]){let c=n.get(r);(!c||c.sessionId!==i.sessionId)&&this._detach(r)}for(let[r,i]of n){let c=this._legs.get(r);if(c){c.state===Ue.FAILED&&this._weDial(r)&&this._dial(c);continue}i.sessionId&&this._attach(r,i)}this._changed()}async leave(){if(this._stopLevelPolling(),this._selfMeter){try{this._selfMeter.close?.()}catch{}this._selfMeter=null}this.selfSpeaking=!1;for(let e of[...this._legs.keys()])this._detach(e);if(this._ctx){try{this._ctx.close?.()}catch{}this._ctx=null}if(this.localStream)for(let e of this.localStream.getTracks())try{e.stop()}catch{}this.localStream=null,this.callId=null,this.selfFp="",this.withVideo=!1,this.cameraEnabled=!1,this.micEnabled=!0,this._peers=[],this._changed()}_weDial(e){return this.selfFp<e}_attach(e,n){let r=this._getManager(n.sessionId);if(!r)return;let i={fp:e,name:n.name||"Member",sessionId:n.sessionId,manager:r,unsubscribe:null,sink:this._createAudioSink(),meter:null,fallback:null,speaking:!1,quietSince:0,state:Ue.CONNECTING,quality:null,hasVideo:!1};i.sink&&(i.sink.autoplay=!0,i.sink.muted=!1),this._legs.set(e,i);try{r.setCallGroupContext(this.callId)}catch{}try{r.setExternalMediaStream(this.localStream)}catch{}if(typeof r.addCallStateListener=="function"&&(i.unsubscribe=r.addCallStateListener(c=>this._onLegState(e,c))),this._onLegState(e,r.getCallState?.()||{}),this._weDial(e)){this._dial(i);return}i.fallback=setTimeout(()=>this._dialFallback(e),Mo)}_dialFallback(e){let n=this._legs.get(e);!n||!this.active||(n.fallback=null,(n.manager.getCallState?.().phase||"idle")!=="idle")||(this._log("info","group call leg was never dialled by the peer; dialling it",{}),Promise.resolve().then(()=>n.manager.startCall(this.withVideo)).catch(()=>{let i=this._legs.get(e);i===n&&(i.state=Ue.FAILED,this._changed())}))}_dial(e){(e.manager.getCallState?.().phase||"idle")==="idle"&&(e.state=Ue.CONNECTING,Promise.resolve().then(()=>e.manager.startCall(this.withVideo)).catch(r=>{this._log("warn","group call leg could not be placed",{errorType:r?.constructor?.name});let i=this._legs.get(e.fp);i===e&&(i.state=Ue.FAILED,this._changed())}))}_detach(e){let n=this._legs.get(e);if(n){this._legs.delete(e),n.fallback&&(clearTimeout(n.fallback),n.fallback=null);try{n.unsubscribe?.()}catch{}if(n.sink){try{n.sink.pause?.()}catch{}try{n.sink.srcObject=null}catch{}}if(n.meter){try{n.meter.close?.()}catch{}n.meter=null}try{n.manager.endCall?.()}catch{}try{n.manager.setExternalMediaStream?.(null)}catch{}try{n.manager.setCallGroupContext?.(null)}catch{}}}_onLegState(e,n){let r=this._legs.get(e);if(!r)return;let i=n?.phase||"idle";r.fallback&&i!=="idle"&&(clearTimeout(r.fallback),r.fallback=null),r.state=Ao[i]||Ue.CONNECTING,r.quality=n?.quality||null,r.hasVideo=n?.remoteHasVideo===!0,this._pumpAudio(r),this._changed()}_pumpAudio(e){if(!e.sink)return;let n=null;try{n=e.manager.getRemoteMediaStream?.()||null}catch{return}if(!(!n||e.sink.srcObject===n)){try{e.sink.srcObject=n;let r=e.sink.play?.();r&&r.catch&&r.catch(()=>{})}catch{}if(e.meter)try{e.meter.close?.()}catch{}e.meter=this._createLevelMeter(n),e.speaking=!1}}_startLevelPolling(){this._levelTimer||typeof setInterval!="function"||(this._levelTimer=setInterval(()=>this._sampleLevels(),yr.SAMPLE_MS))}_stopLevelPolling(){this._levelTimer&&(clearInterval(this._levelTimer),this._levelTimer=null)}_applyLevel(e,n,r,i,c){let d=e[n]===!0;return i>=yr.ON?(e[r]=0,d?!1:(e[n]=!0,!0)):d?i>yr.OFF?(e[r]=0,!1):e[r]?c-e[r]>=yr.HOLD_MS?(e[n]=!1,!0):!1:(e[r]=c,!1):!1}_sampleLevels(){if(!this.active)return;let e=Date.now(),n=!1,r=this.micEnabled&&this._selfMeter?Wi(this._selfMeter):0;this._applyLevel(this,"selfSpeaking","_selfQuietSince",r,e)&&(n=!0);for(let i of this._legs.values()){let c=i.meter?Wi(i.meter):0;this._applyLevel(i,"speaking","quietSince",c,e)&&(n=!0)}n&&this._changed()}setMic(e){if(this.micEnabled=e!==!1,this.localStream)for(let n of this.localStream.getAudioTracks())n.enabled=this.micEnabled;this.micEnabled||(this.selfSpeaking=!1,this._selfQuietSince=0);for(let n of this._legs.values())try{n.manager.setMicEnabled?.(this.micEnabled)}catch{}this._changed()}toggleMic(){this.setMic(!this.micEnabled)}async setCamera(e){if(!this.active||this._busy)return;if(e===!1){if(this.cameraEnabled=!1,this.localStream)for(let r of this.localStream.getVideoTracks())r.enabled=!1;for(let r of this._legs.values())try{r.manager.setCameraEnabled?.(!1)}catch{}this._changed();return}let n=this.localStream?.getVideoTracks?.()||[];if(n.length){for(let r of n)r.enabled=!0;this.cameraEnabled=!0,this.withVideo=!0,this._changed();return}this._busy=!0;try{let i=(await this._getUserMedia({video:{facingMode:this.facingMode,width:{ideal:1280},height:{ideal:720}}})).getVideoTracks()[0];if(!i)return;this.localStream.addTrack(i),this.cameraEnabled=!0,this.withVideo=!0,await Promise.allSettled([...this._legs.values()].map(c=>Promise.resolve().then(()=>c.manager.addVideoTrack?.(i))))}catch(r){this.error=Qn(r),this.cameraEnabled=!1}finally{this._busy=!1,this._changed()}}async toggleCamera(){await this.setCamera(!this.cameraEnabled)}async flipCamera(){if(!this.active||this._busy||!this.localStream)return;let e=this.localStream.getVideoTracks()[0];if(!e)return;this._busy=!0;let n=this.facingMode;this.facingMode=this.facingMode==="user"?"environment":"user";try{let i=(await this._getUserMedia({video:{facingMode:this.facingMode}})).getVideoTracks()[0];if(!i){this.facingMode=n;return}i.enabled=this.cameraEnabled,this.localStream.removeTrack(e);try{e.stop()}catch{}this.localStream.addTrack(i),await Promise.allSettled([...this._legs.values()].map(c=>Promise.resolve().then(()=>c.manager.replaceVideoTrack?.(i))))}catch(r){this.facingMode=n,this._log("warn","group call camera flip failed",{errorType:r?.constructor?.name})}finally{this._busy=!1,this._changed()}}getLocalStream(){return this.localStream}getRemoteStream(e){let n=this._legs.get(e);if(!n)return null;try{return n.manager.getRemoteMediaStream?.()||null}catch{return null}}snapshot(){let e=this._peers.filter(n=>n&&n.fp!==this.selfFp).map(n=>{let r=this._legs.get(n.fp);return{fp:n.fp,name:n.name||"Member",state:r?r.state:Ue.UNREACHABLE,quality:r?r.quality:null,hasVideo:r?r.hasVideo:!1,speaking:r?r.speaking===!0:!1}}).sort((n,r)=>n.fp<r.fp?-1:n.fp>r.fp?1:0);return{active:this.active,callId:this.callId,withVideo:this.withVideo,micEnabled:this.micEnabled,cameraEnabled:this.cameraEnabled,facingMode:this.facingMode,error:this.error,selfSpeaking:this.selfSpeaking,peers:e,connected:e.filter(n=>n.state===Ue.ACTIVE).length}}_changed(){try{this._onChange(this.snapshot())}catch{}}};function Wi(t){try{return t.read()}catch{return 0}}function Qn(t){let e=t?.name||"";return e==="NotAllowedError"||e==="SecurityError"?"permission_denied":e==="NotFoundError"||e==="OverconstrainedError"?"device_not_found":e==="NotReadableError"||e==="AbortError"?"device_busy":"media_failed"}var Vi=1.7777777777777777,No=150;function ji(t,e,n,{gap:r=10,aspect:i=Vi,minWidth:c=No}={}){if(t<=0)return{cols:0,rows:0,tileW:0,tileH:0};if(!(e>0)||!(n>0)){let h=Math.min(t,t<=2?t:Math.ceil(Math.sqrt(t)));return{cols:h,rows:Math.ceil(t/h),tileW:0,tileH:0}}let d={cols:1,rows:t,tileW:0,tileH:0};for(let h=1;h<=t;h++){let m=Math.ceil(t/h),v=(e-r*(h-1))/h,S=(n-r*(m-1))/m;if(v<=0||S<=0)continue;let p=Math.min(v,S*i);p>d.tileW&&(d={cols:h,rows:m,tileW:p,tileH:p/i})}return d.tileW<c&&(d.tileW=c,d.tileH=c/i),d}function $i(t,e,n,{gap:r=10,aspect:i=Vi,minThumb:c=92,maxThumb:d=168}={}){if(!(e>0)||!(n>0))return{main:{w:0,h:0},stripH:0,thumbW:0};if(t<=0){let p=Math.min(e,n*i);return{main:{w:p,h:p/i},stripH:0,thumbW:0}}let h=Math.max(c,Math.min(d,Math.round(n*.2*i))),m=h/i,v=n-m-r,S=Math.min(e,v*i);return v<=0||S<h*2?{main:{w:0,h:0},stripH:0,thumbW:0}:{main:{w:S,h:S/i},stripH:m,thumbW:h}}var W=(...t)=>React.createElement(...t),wn="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",Ke={lock:'<path d="M7 11V7a5 5 0 0 1 10 0v4"/><rect x="4.5" y="11" width="15" height="9" rx="2.2"/>',minimize:'<path d="M9 4v4a1 1 0 0 1-1 1H4M15 4v4a1 1 0 0 0 1 1h4M9 20v-4a1 1 0 0 0-1-1H4M15 20v-4a1 1 0 0 1 1-1h4"/>',expand:'<path d="M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7"/>',users:'<path d="M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19"/><circle cx="10" cy="8" r="3.2"/><path d="M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4"/><path d="M15.5 5.3a3.2 3.2 0 0 1 0 5.4"/>',micOn:'<rect x="9" y="3" width="6" height="11" rx="3"/><path d="M5 11a7 7 0 0 0 14 0"/><path d="M12 18v3"/>',micOff:'<path d="M9 9v-1a3 3 0 0 1 5.1-2.1M15 11v3a3 3 0 0 1-4.6 2.5"/><path d="M5 11a7 7 0 0 0 10.3 6.2M19 11a7 7 0 0 1-.4 2.3"/><path d="M12 18v3"/><path d="M3 3l18 18"/>',camOn:'<path d="M23 7l-7 5 7 5V7z"/><rect x="1" y="5" width="15" height="14" rx="2.5"/>',camOff:'<path d="M16 16H3a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h2l2-2M11 6h2l7-3v14M2 2l20 20"/>',grid:'<rect x="3" y="3" width="7.5" height="7.5" rx="1.6"/><rect x="13.5" y="3" width="7.5" height="7.5" rx="1.6"/><rect x="3" y="13.5" width="7.5" height="7.5" rx="1.6"/><rect x="13.5" y="13.5" width="7.5" height="7.5" rx="1.6"/>',flip:'<path d="M3 7h3l2-2h8l2 2h3v12H3z"/><path d="M9.5 13a2.5 2.5 0 0 1 5 0M14.5 13l-1.3-1.3M14.5 13l1.3-1.3"/>',phone:'<path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z"/>',phoneHangup:'<path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z" transform="rotate(135 12 12)"/>'},dt=(t,e,n)=>W("span",{style:{display:"grid",placeItems:"center",width:e+"px",height:e+"px"},dangerouslySetInnerHTML:{__html:`<svg width="${e}" height="${e}" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="${n}" stroke-linecap="round" stroke-linejoin="round">${t}</svg>`}}),vr={width:"56px",height:"56px",borderRadius:"50%",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-4)",cursor:"pointer",transition:"all .15s"},qi={...vr,background:"var(--sb-red-strong-solid)",color:"#fff",border:"1px solid transparent"},Yi={width:"56px",height:"56px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"var(--sb-red-strong-solid)",color:"#fff",cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-red-strong-rgb), 0.35)",transition:"transform .15s"},Do={width:"36px",height:"36px",borderRadius:"9px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.15)",background:"rgba(0,0,0,0.35)",color:"#fff",cursor:"pointer",transition:"all .15s"},Fo={excellent:{bars:4,color:"var(--sb-green)",solid:"var(--sb-green-solid)"},good:{bars:3,color:"var(--sb-green)",solid:"var(--sb-green-solid)"},fair:{bars:2,color:"var(--sb-yellow)",solid:"var(--sb-yellow-solid)"},poor:{bars:1,color:"var(--sb-red)",solid:"var(--sb-red-solid)"}};function Po(t){let e=Fo[t];return e?W("span",{key:"q",style:{display:"inline-flex",alignItems:"flex-end",gap:"2px",height:"12px"}},[0,1,2,3].map(n=>W("span",{key:n,style:{width:"2.5px",height:4+n*2.6+"px",borderRadius:"1px",background:n<e.bars?e.solid:"rgba(var(--sb-ink), 0.18)"}}))):null}function Oo(t){let e=String(t||"").trim().split(/\s+/).filter(Boolean);return((e[0]?.[0]||"")+(e[1]?.[0]||e[0]?.[1]||"")).toUpperCase()||"#"}var Ki=t=>`${String(Math.floor(t/60)).padStart(2,"0")}:${String(t%60).padStart(2,"0")}`;function Lo(){let[t,e]=React.useState({w:0,h:0}),[n,r]=React.useState(null);return React.useLayoutEffect(()=>{if(!n)return;let i=()=>e(d=>d.w===n.clientWidth&&d.h===n.clientHeight?d:{w:n.clientWidth,h:n.clientHeight});if(i(),typeof ResizeObserver>"u")return window.addEventListener("resize",i),()=>window.removeEventListener("resize",i);let c=new ResizeObserver(i);return c.observe(n),()=>c.disconnect()},[n]),[r,t]}function Bo({peer:t,stream:e,self:n,localStream:r,cameraEnabled:i,speaking:c,tileW:d,tileH:h,onSelect:m,pinned:v,compact:S}){let p=React.useRef(null),k=n?r:e,y=n?i:t.hasVideo;React.useEffect(()=>{let N=p.current;if(!N||!k)return;N.srcObject!==k&&(N.muted=!0,N.srcObject=k);let ae=N.play&&N.play();ae&&ae.catch&&ae.catch(()=>{})});let I=n||t.state===Ue.ACTIVE?null:t.state===Ue.UNREACHABLE?a("groupCall.waitingLink"):t.state===Ue.FAILED?a("groupCall.legFailed"):a("groupCall.connecting"),B=Math.max(44,Math.min(148,Math.round((h||180)*.42)));return W("div",{role:m?"button":void 0,tabIndex:m?0:void 0,onClick:m,onKeyDown:m?N=>{(N.key==="Enter"||N.key===" ")&&(N.preventDefault(),m())}:void 0,title:v?a("groupCall.unpin",{name:t.name}):m?a("groupCall.pin",{name:t.name}):c?a("groupCall.speaking",{name:t.name}):t.name,style:{cursor:m?"pointer":"default",position:"relative",borderRadius:"14px",overflow:"hidden",background:"var(--sb-surface)",border:c?"2px solid var(--sb-green-solid)":"2px solid rgba(var(--sb-ink), 0.08)",boxShadow:c?"0 0 0 3px rgba(var(--sb-green-rgb), 0.16)":"none",transition:"border-color .12s ease, box-shadow .12s ease",flex:d?"0 0 auto":"1 1 260px",minWidth:d?void 0:"200px",width:d?d+"px":"auto",height:h?h+"px":"auto",aspectRatio:h?void 0:"16 / 9",display:"grid",placeItems:"center"}},[y?W("video",{key:"v",ref:p,autoPlay:!0,muted:!0,playsInline:!0,style:{position:"absolute",inset:0,width:"100%",height:"100%",objectFit:"cover",transform:n?"scaleX(-1)":"none",background:"var(--sb-bg)"}}):W("div",{key:"av",style:{width:B+"px",height:B+"px",borderRadius:"50%",display:"grid",placeItems:"center",background:"radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))",border:c?"1.5px solid rgba(var(--sb-green-rgb), 0.65)":"1px solid rgba(var(--sb-ink), 0.1)",color:c?"var(--sb-green)":"var(--sb-text-4)",fontFamily:wn,fontSize:Math.round(B*.3)+"px",fontWeight:700,transition:"color .12s ease, border-color .12s ease"}},Oo(t.name)),W("div",{key:"label",style:{position:"absolute",insetInline:0,bottom:0,display:"flex",alignItems:"center",gap:S?"4px":"7px",padding:S?"4px 6px":"8px 10px",background:"linear-gradient(0deg, rgba(0,0,0,0.7), transparent)"}},[W("span",{key:"n",style:{flex:1,minWidth:0,fontSize:S?"10.5px":"12.5px",fontWeight:700,color:"var(--sb-text-1)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},t.name),c&&W("span",{key:"sp",style:{flex:"none",color:"var(--sb-green)",display:"grid",placeItems:"center"}},dt(Ke.micOn,S?11:13,2)),I&&!S&&W("span",{key:"s",style:{flex:"none",fontFamily:wn,fontSize:"10.5px",color:t.state===Ue.FAILED?"var(--sb-red)":"var(--sb-text-6)"}},I),!n&&!S&&Po(t.quality)])])}function us({call:t,media:e,groupName:n,localStream:r,getRemoteStream:i,onJoin:c,onDismiss:d,onLeave:h,onToggleMic:m,onToggleCamera:v,onFlipCamera:S}){let[p,k]=React.useState(!1),[y,I]=React.useState(0),[B,N]=React.useState(null),[ae,te]=Lo(),pe=!!t?.joined;React.useEffect(()=>{if(!pe){I(0);return}let L=Date.now(),j=setInterval(()=>I(Math.floor((Date.now()-L)/1e3)),1e3);return()=>clearInterval(j)},[pe,t?.callId]),React.useEffect(()=>{t||k(!1)},[!t]);let ve=React.useMemo(()=>new Set(["self",...(e?.peers||[]).map(L=>L.fp)]),[e]);if(React.useEffect(()=>{B&&!ve.has(B)&&N(null)},[B,ve]),!t)return null;let C=W("span",{key:"enc",style:{display:"inline-flex",alignItems:"center",gap:"5px",fontSize:"11.5px",fontWeight:600,color:"var(--sb-green)"}},[dt(Ke.lock,12,2),a("call.encryptedShort")]);if(!pe)return W("div",{style:{position:"absolute",inset:0,zIndex:40,display:"flex",flexDirection:"column",background:"radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)",animation:"sbExpand .2s ease"}},[W("div",{key:"top",style:{flex:"none",padding:"16px 18px"}},W("span",{style:{display:"inline-flex",alignItems:"center",gap:"7px",fontSize:"12px",fontWeight:600,color:"var(--sb-green)"}},[dt(Ke.lock,13,2),a("call.encrypted")])),W("div",{key:"mid",style:{flex:1,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",padding:"0 24px",textAlign:"center"}},[W("div",{key:"av",style:{position:"relative",width:"112px",height:"112px",marginBottom:"26px",display:"grid",placeItems:"center"}},[W("span",{key:"p1",style:{position:"absolute",inset:0,borderRadius:"50%",border:"1.5px solid rgba(var(--sb-orange-rgb), 0.5)",animation:"sbCallPulse 2s ease-out infinite"}}),W("span",{key:"p2",style:{position:"absolute",inset:0,borderRadius:"50%",border:"1.5px solid rgba(var(--sb-orange-rgb), 0.4)",animation:"sbCallPulse 2s ease-out infinite",animationDelay:"1s"}}),W("div",{key:"c",style:{width:"96px",height:"96px",borderRadius:"50%",display:"grid",placeItems:"center",background:"radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))",border:"1px solid rgba(var(--sb-ink), 0.1)",color:"var(--sb-text-7)"}},dt(Ke.users,42,1.6))]),W("div",{key:"n",style:{fontSize:"22px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},n),W("div",{key:"s",style:{fontFamily:wn,fontSize:"13.5px",color:"var(--sb-text-6)",marginTop:"8px"}},t.withVideo?a("groupCall.startedVideo",{name:t.startedByName}):a("groupCall.startedVoice",{name:t.startedByName})),W("div",{key:"p",style:{fontSize:"12.5px",color:"var(--sb-text-9)",marginTop:"6px"}},a("groupCall.inCall",{count:t.participants.length}))]),W("div",{key:"ctrls",style:{flex:"none",display:"flex",justifyContent:"center",gap:"48px",padding:"24px 24px 40px"}},[W("div",{key:"dec",style:{display:"flex",flexDirection:"column",alignItems:"center",gap:"8px"}},[W("button",{key:"b",onClick:d,title:a("groupCall.dismiss"),style:{...Yi,width:"62px",height:"62px"}},dt(Ke.phoneHangup,24,1.9)),W("span",{key:"l",style:{fontFamily:wn,fontSize:"10.5px",color:"var(--sb-text-7)"}},a("groupCall.dismiss"))]),W("div",{key:"acc",style:{display:"flex",flexDirection:"column",alignItems:"center",gap:"8px"}},[W("button",{key:"b",onClick:c,title:a("groupCall.join"),style:{width:"62px",height:"62px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"var(--sb-green-solid)",color:"var(--sb-on-green)",cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-green-rgb), 0.35)"}},dt(Ke.phone,24,1.9)),W("span",{key:"l",style:{fontFamily:wn,fontSize:"10.5px",color:"var(--sb-text-7)"}},a("groupCall.join"))])])]);let F=e?.peers||[],V={fp:"self",name:a("groupCall.you"),state:Ue.ACTIVE,hasVideo:e?.cameraEnabled,quality:null,speaking:e?.selfSpeaking===!0};if(p){let L=F.filter(ne=>ne.speaking).map(ne=>ne.name),j=L.length===1?L[0]:L.length>1?L.slice(0,2).join(", "):e?.selfSpeaking?a("groupCall.you"):null;return W("div",{style:{position:"absolute",bottom:"18px",insetInlineEnd:"18px",zIndex:40,width:"244px",borderRadius:"14px",overflow:"hidden",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.1)",boxShadow:"0 18px 44px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))",animation:"sbExpand .18s ease"}},[W("div",{key:"bar",style:{display:"flex",alignItems:"center",gap:"11px",padding:"11px 12px"}},[W("span",{key:"ic",style:{flex:"none",width:"34px",height:"34px",borderRadius:"9px",display:"grid",placeItems:"center",background:"rgba(var(--sb-green-rgb), 0.1)",border:"1px solid rgba(var(--sb-green-rgb), 0.25)",color:"var(--sb-green)"}},dt(Ke.users,16,1.9)),W("div",{key:"tx",style:{flex:1,minWidth:0}},[W("div",{key:"n",style:{fontSize:"13px",fontWeight:700,color:"var(--sb-text-1)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},n),W("div",{key:"s",style:{fontFamily:wn,fontSize:"11px",color:j?"var(--sb-green)":"var(--sb-text-6)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},j?a("groupCall.speaking",{name:j}):`${a("groupCall.inCall",{count:t.participants.length})} \xB7 ${Ki(y)}`)]),W("button",{key:"exp",onClick:()=>k(!1),title:a("call.expand"),style:{flex:"none",width:"32px",height:"32px",borderRadius:"8px",display:"grid",placeItems:"center",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-4)",cursor:"pointer"}},dt(Ke.expand,15,2)),W("button",{key:"end",onClick:h,title:a("groupCall.leave"),style:{flex:"none",width:"32px",height:"32px",borderRadius:"8px",display:"grid",placeItems:"center",border:"none",background:"var(--sb-red-strong-solid)",color:"#fff",cursor:"pointer"}},dt(Ke.phoneHangup,15,2))])])}let P=[V,...F],$=B?(L=>P.find(j=>j.fp===L)||null)(B):null,Q=$?P.filter(L=>L.fp!==$.fp):[],H=$?$i(Q.length,te.w,te.h):null,re=$&&H&&H.main.w>0,ie=ji(P.length,te.w,te.h),ue=(L,j={})=>W(Bo,{key:L.fp,peer:L,self:L.fp==="self",speaking:L.speaking===!0,localStream:r,cameraEnabled:e?.cameraEnabled,stream:L.fp==="self"?null:i(L.fp),...j});return W("div",{style:{position:"absolute",inset:0,zIndex:40,display:"flex",flexDirection:"column",background:"var(--sb-bg-deepest)",animation:"sbExpand .2s ease"}},[W("div",{key:"top",style:{flex:"none",display:"flex",alignItems:"flex-start",justifyContent:"space-between",gap:"14px",padding:"16px 18px 10px"}},[W("div",{key:"l",style:{minWidth:0}},[W("div",{key:"n",style:{fontSize:"17px",fontWeight:800,letterSpacing:"-0.3px",color:"#fff",overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},n),W("div",{key:"s",style:{display:"inline-flex",alignItems:"center",gap:"9px",marginTop:"4px"}},[W("span",{key:"d",style:{fontFamily:wn,fontSize:"12.5px",color:"var(--sb-text-2)"}},Ki(y)),C,W("span",{key:"c",style:{fontSize:"11.5px",color:"var(--sb-text-7)"}},a("groupCall.inCall",{count:t.participants.length}))])]),W("div",{key:"r",style:{flex:"none",display:"flex",alignItems:"center",gap:"8px"}},[re&&W("button",{key:"grid",onClick:()=>N(null),title:a("groupCall.showEveryone"),style:{height:"36px",padding:"0 12px",borderRadius:"9px",display:"inline-flex",alignItems:"center",gap:"7px",border:"1px solid rgba(var(--sb-ink), 0.15)",background:"rgba(0,0,0,0.35)",color:"#fff",cursor:"pointer",fontFamily:"inherit",fontSize:"12.5px",fontWeight:600}},[dt(Ke.grid,14,2),a("groupCall.showEveryone")]),W("button",{key:"min",onClick:()=>k(!0),title:a("call.minimize"),style:Do},dt(Ke.minimize,16,2))])]),e?.error&&W("div",{key:"err",style:{flex:"none",margin:"0 18px 10px",padding:"9px 12px",borderRadius:"10px",background:"rgba(var(--sb-red-rgb), 0.1)",border:"1px solid rgba(var(--sb-red-rgb), 0.28)",color:"var(--sb-red)",fontSize:"12.5px",lineHeight:1.5}},a(`groupCall.err.${e.error}`)),W("div",{key:"stage",ref:ae,className:"msc-scroll",style:{flex:1,minHeight:0,minWidth:0,overflow:"auto",margin:"0 14px 6px",display:"flex",alignItems:"safe center",justifyContent:"safe center"}},re?W("div",{style:{display:"flex",flexDirection:"column",gap:10+"px",width:"100%",height:te.h+"px",minHeight:0}},[W("div",{key:"main",style:{flex:"none",display:"flex",justifyContent:"center",minHeight:0}},ue($,{tileW:H.main.w,tileH:H.main.h,pinned:!0,onSelect:()=>N(null)})),Q.length>0&&W("div",{key:"strip",className:"msc-scroll",style:{flex:"none",height:H.stripH+"px",display:"flex",gap:10+"px",justifyContent:Q.length>4?"flex-start":"center",overflowX:"auto",overflowY:"hidden"}},Q.map(L=>ue(L,{tileW:H.thumbW,tileH:H.stripH,compact:!0,onSelect:()=>N(L.fp)})))]):W("div",{style:{display:"flex",flexWrap:"wrap",gap:10+"px",justifyContent:"center",alignContent:"center",width:ie.tileW?ie.cols*ie.tileW+(ie.cols-1)*10+"px":"100%"}},P.map(L=>ue(L,{tileW:ie.tileW,tileH:ie.tileH,onSelect:()=>N(L.fp)})))),W("div",{key:"ctrls",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"center",gap:"16px",padding:"16px 20px calc(22px + var(--sb-safe-bottom, env(safe-area-inset-bottom, 0px)))",background:"linear-gradient(0deg, rgba(0,0,0,0.6), transparent)"}},[W("button",{key:"mic",onClick:m,title:a("call.mute"),style:e?.micEnabled?vr:qi},dt(e?.micEnabled?Ke.micOn:Ke.micOff,21,1.9)),W("button",{key:"cam",onClick:v,title:a("call.camera"),style:e?.cameraEnabled?vr:qi},dt(e?.cameraEnabled?Ke.camOn:Ke.camOff,21,1.8)),e?.cameraEnabled&&W("button",{key:"flip",onClick:S,title:a("call.flipCamera"),style:vr},dt(Ke.flip,21,1.8)),W("button",{key:"end",onClick:h,title:a("groupCall.leave"),style:Yi},dt(Ke.phoneHangup,22,1.9))])])}typeof window<"u"&&(window.GroupCallUI=us);var Xn=ti(),wr=()=>qn()?"auto":"smooth",Qi=()=>{window.__sbScrollToDonate=Date.now(),document.dispatchEvent(new CustomEvent("securebit:scroll-to-donate"))},hs=async(t,e=0)=>{let n=!1;try{await navigator.clipboard.writeText(t),n=!0}catch{try{let i=document.createElement("textarea");i.value=t,i.style.position="fixed",i.style.opacity="0",document.body.appendChild(i),i.select(),n=document.execCommand("copy"),document.body.removeChild(i)}catch{n=!1}}return n&&e>0&&navigator.clipboard&&navigator.clipboard.writeText&&setTimeout(async()=>{let r=null,i=!0;try{r=await navigator.clipboard.readText()}catch{i=!1}if(!i||r===t)try{await navigator.clipboard.writeText("")}catch{}},e),n},zo=t=>{if(typeof t!="string"||t.indexOf("```")===-1)return null;let e=[],n=/```([a-zA-Z0-9_+#.-]*)\n?([\s\S]*?)```/g,r=0,i;for(;(i=n.exec(t))!==null;)i.index>r&&e.push({kind:"text",content:t.slice(r,i.index)}),e.push({kind:"code",lang:(i[1]||"").toLowerCase(),content:i[2].replace(/\n$/,"")}),r=n.lastIndex;return r<t.length&&e.push({kind:"text",content:t.slice(r)}),e.some(c=>c.kind==="code")?e:null},Uo=new Set(["const","let","var","function","return","if","else","for","while","do","switch","case","break","continue","class","extends","new","this","super","import","export","from","as","default","async","await","try","catch","finally","throw","typeof","instanceof","delete","yield","in","of","def","elif","lambda","pass","with","global","public","private","protected","static","final","void","int","long","float","double","char","bool","boolean","string","struct","enum","interface","package","func","fn","type","where","select","update","insert","delete","where","and","or","not","end","then","fi","done","echo","use","mut","impl","trait","match","module","require"]),Go=new Set(["true","false","null","undefined","None","True","False","nil","NaN","Infinity"]),Ho=t=>{let e=/(\/\/[^\n]*|#[^\n]*|\/\*[\s\S]*?\*\/|--[^\n]*)|(`(?:\\.|[^`\\])*`|"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*')|(\b\d[\d_.]*(?:[eE][+-]?\d+)?\b|\b0[xX][0-9a-fA-F]+\b)|([A-Za-z_$][A-Za-z0-9_$]*)/g,n=[],r="",i=0,c=0,d=()=>{r&&(n.push(r),r="")},h;for(;(h=e.exec(t))!==null;){h.index>i&&(r+=t.slice(i,h.index)),i=e.lastIndex;let m=null;h[1]?m="text-gray-500 italic":h[2]?m="text-amber-300":h[3]?m="text-sky-300":h[4]&&(Uo.has(h[4])?m="text-purple-300":Go.has(h[4])&&(m="text-sky-300")),m?(d(),n.push(React.createElement("span",{key:`h${c++}`,className:m},h[0]))):r+=h[0]}return i<t.length&&(r+=t.slice(i)),d(),n},Wo={js:"javascript",mjs:"javascript",javascript:"javascript",node:"javascript",ts:"typescript",typescript:"typescript",jsx:"jsx",tsx:"tsx",py:"python",python:"python",sh:"bash",shell:"bash",zsh:"bash",bash:"bash","c++":"cpp",cpp:"cpp",cc:"cpp",cxx:"cpp",c:"c",h:"c",cs:"csharp",csharp:"csharp",java:"java",go:"go",golang:"go",rs:"rust",rust:"rust",json:"json",yml:"yaml",yaml:"yaml",sql:"sql",md:"markdown",markdown:"markdown",html:"markup",xml:"markup",svg:"markup",css:"css"},Vo=({code:t,lang:e})=>{let[n,r]=React.useState(!1),i=async()=>{await hs(t,3e4)&&(r(!0),setTimeout(()=>r(!1),2e3))},c=Wo[(e||"").toLowerCase()]||(e||"").toLowerCase(),d=typeof window<"u"?window.Prism:null,h=d&&d.languages?d.languages[c]:null,m=!!(d&&h&&typeof d.highlight=="function"),v=null;if(m)try{v=d.highlight(t,h,c)}catch{v=null}let S=m?c:e||"code",p=m&&v!=null?React.createElement("code",{className:"language-"+c,dangerouslySetInnerHTML:{__html:v}}):React.createElement("code",null,Ho(t));return React.createElement("div",{className:"my-1 rounded-lg overflow-hidden",style:{backgroundColor:"var(--sb-legacy-1)",border:"0 solid var(--sb-text-3)"}},[React.createElement("div",{key:"hdr",className:"flex items-center justify-between px-3 py-1.5",style:{backgroundColor:"var(--sb-legacy-2)",border:"0 solid var(--sb-text-3)"}},[React.createElement("span",{key:"lang",className:"text-[11px] uppercase tracking-wide text-gray-500 font-mono"},S),React.createElement("button",{key:"copy",onClick:i,title:"Copy \u2014 clipboard auto-clears in 30s",className:"flex items-center text-[11px] text-gray-400 hover:text-green-400 transition-colors"},[React.createElement("i",{key:"ic",className:`${n?"fas fa-check text-green-400":"far fa-copy"} me-1`}),n?a("action.copied"):a("action.copy")])]),React.createElement("pre",{key:"pre",className:"px-3 py-2 overflow-x-auto text-xs leading-relaxed text-gray-200 custom-scrollbar",style:{whiteSpace:"pre",fontFamily:"ui-monospace, SFMono-Regular, Menlo, Consolas, monospace",margin:0}},p)])},jo=({text:t})=>{let e=zo(t);return e?React.createElement("div",{className:"text-sm"},e.map((n,r)=>n.kind==="code"?React.createElement(Vo,{key:r,code:n.content,lang:n.lang}):n.content.trim()?React.createElement("div",{key:r,className:"break-words",style:{whiteSpace:"pre-wrap",wordBreak:"break-word"}},n.content):null)):React.createElement("div",{className:"text-sm break-words",style:{whiteSpace:"pre-wrap",wordBreak:"break-word"}},t)};var Xi=7;var $o=`url("data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20width='100'%20height='100'%3E%3Cfilter%20id='n'%3E%3CfeTurbulence%20type='fractalNoise'%20baseFrequency='0.9'%20numOctaves='2'%20stitchTiles='stitch'/%3E%3C/filter%3E%3Crect%20width='100%25'%20height='100%25'%20filter='url(%23n)'/%3E%3C/svg%3E")`,Pn="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",qo=(t,e)=>{let n=[],r=t||1;for(let i=0;i<e;i++){r=(r*9301+49297)%233280;let c=r/233280,d=.45+.55*Math.sin(i/e*Math.PI);n.push(Math.max(.16,Math.min(1,(.3+c*.7)*d)))}return n},ea=t=>{t=Math.max(0,Math.round(t));let e=Math.floor(t/60),n=t%60;return e+":"+String(n).padStart(2,"0")},Yo=({voice:t,isMe:e})=>{let n=React.createElement,[r,i]=React.useState(!1),[c,d]=React.useState(0),[h,m]=React.useState(!1),v=React.useRef(null),S=React.useRef(null),p=t||{},k=Number.isFinite(p.dur)&&p.dur>0?p.dur:8,y=Array.isArray(p.bars)&&p.bars.length?p.bars:qo(k*37+11,34),I=p.url||null,B=p.transfer||null,N=!!B&&!I,ae=!!p.error||h,te=B?B.dir:null,pe=B?Math.max(0,Math.min(100,B.pct||0)):100;React.useEffect(()=>()=>{if(S.current&&cancelAnimationFrame(S.current),v.current){try{v.current.pause()}catch{}v.current=null}},[]),React.useEffect(()=>{if(!I&&v.current){try{v.current.pause()}catch{}v.current=null,i(!1),d(0)}},[I]);let ve=()=>{if(v.current)try{v.current.pause()}catch{}S.current&&cancelAnimationFrame(S.current),i(!1)},C=()=>{if(!I)return;if(m(!1),!v.current){let ne=new Audio;ne.preload="auto",ne.addEventListener("timeupdate",()=>{let Te=ne.duration&&isFinite(ne.duration)?ne.duration:k;Te&&d(Math.min(1,ne.currentTime/Te))}),ne.addEventListener("ended",()=>{i(!1),d(0)}),ne.addEventListener("error",()=>{i(!1),m(!0)}),ne.src=I,v.current=ne}let j=v.current.play();j&&typeof j.then=="function"?j.then(()=>i(!0)).catch(ne=>{console.warn("Voice playback failed:",ne&&ne.name,ne&&ne.message),m(!0),i(!1)}):i(!0)},F=()=>{N||ae||!I||(r?ve():C())},V=j=>{if(N||ae||!I)return;let ne=j.currentTarget.getBoundingClientRect(),Te=Math.max(0,Math.min(1,(j.clientX-ne.left)/ne.width));v.current&&v.current.duration&&(v.current.currentTime=Te*v.current.duration),d(Te)},P=c*k,O=2*Math.PI*23,$=e?"var(--sb-orange-solid)":"rgba(var(--sb-orange-rgb), 0.14)",Q=e?"var(--sb-on-accent)":"var(--sb-orange)",H=y.map((j,ne)=>{let Te=(ne+.5)/y.length<=c,q;return N?q=e?"rgba(var(--sb-ink), 0.13)":"rgba(var(--sb-ink), 0.1)":q=Te?"var(--sb-orange-solid)":e?"rgba(var(--sb-ink), 0.22)":"rgba(var(--sb-ink), 0.16)",n("span",{key:ne,style:{flex:"1 1 0",minWidth:0,width:"3px",height:Math.round(6+j*22)+"px",borderRadius:"2px",background:q,transition:"background .12s"}})}),re=N&&n("svg",{key:"ring",width:50,height:50,viewBox:"0 0 50 50",style:{position:"absolute",inset:0,transform:"rotate(-90deg)"}},[n("circle",{key:"bg",cx:25,cy:25,r:23,fill:"none",stroke:"rgba(var(--sb-orange-rgb), 0.2)",strokeWidth:2.5}),n("circle",{key:"fg",cx:25,cy:25,r:23,fill:"none",stroke:"var(--sb-orange-solid)",strokeWidth:2.5,strokeLinecap:"round",strokeDasharray:O.toFixed(1),strokeDashoffset:(O*(1-pe/100)).toFixed(1),style:{transition:"stroke-dashoffset .12s linear"}})]),ie=ae?n("i",{className:"fas fa-triangle-exclamation",style:{fontSize:"14px"}}):N?n("svg",{width:15,height:15,viewBox:"0 0 24 24",fill:"currentColor",style:{opacity:.5}},n("path",{d:"M8 5.2v13.6l11-6.8z"})):r?n("svg",{width:16,height:16,viewBox:"0 0 24 24",fill:"currentColor"},[n("rect",{key:"a",x:6,y:5,width:4,height:14,rx:1.2}),n("rect",{key:"b",x:14,y:5,width:4,height:14,rx:1.2})]):n("svg",{width:16,height:16,viewBox:"0 0 24 24",fill:"currentColor"},n("path",{d:"M8 5.2v13.6l11-6.8z"})),ue=ae?a("msg.failed"):N?te==="up"?a("chat.uploading"):a("chat.downloading"):a("msg.voice"),L=N?pe+"%":ea(r||c>0?P:k);return n("div",{style:{display:"flex",alignItems:"center",gap:"13px",padding:"13px 15px 12px"}},[n("div",{key:"pw",style:{position:"relative",flex:"none",width:"50px",height:"50px",display:"grid",placeItems:"center"}},[re,n("button",{key:"pb",onClick:F,title:N?a("chat.transferring"):r?a("msg.pause"):a("msg.play"),style:{width:"42px",height:"42px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:ae?"rgba(var(--sb-red-rgb), 0.15)":$,color:ae?"var(--sb-red)":Q,cursor:N||ae||!I?"default":"pointer",transition:"transform .15s cubic-bezier(.2,.7,.3,1)"}},ie)]),n("div",{key:"body",style:{flex:1,minWidth:0}},[n("div",{key:"wave",onClick:V,style:{display:"flex",alignItems:"center",gap:"2px",height:"30px",cursor:N||ae||!I?"default":"pointer"}},H),n("div",{key:"meta",style:{display:"flex",alignItems:"center",justifyContent:"space-between",marginTop:"6px"}},[n("span",{key:"t",style:{fontFamily:Pn,fontSize:"10.5px",fontWeight:500,color:N?"var(--sb-orange-3)":"var(--sb-text-6)"}},L),n("span",{key:"l",style:{fontFamily:Pn,fontSize:"9.5px",fontWeight:600,color:ae?"var(--sb-red)":N?"var(--sb-orange)":"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"0.8px"}},ue)])])])},Ko=({onSend:t,onCancel:e})=>{let n=React.createElement,r=300,i=40,[c,d]=React.useState(0),[h,m]=React.useState(()=>new Array(i).fill(.06)),[v,S]=React.useState(!1),p=React.useRef({}).current,k=()=>{try{p.node&&(p.node.disconnect(),p.node.port&&(p.node.port.onmessage=null),p.node.onaudioprocess=null)}catch{}try{p.srcNode&&p.srcNode.disconnect()}catch{}try{p.sink&&p.sink.disconnect()}catch{}p.node=p.srcNode=p.sink=null},y=()=>{p.timer&&clearInterval(p.timer),p.timer=null,k();try{p.stream&&p.stream.getTracks().forEach(C=>C.stop())}catch{}try{p.ac&&p.ac.close()}catch{}if(p.wurl){try{URL.revokeObjectURL(p.wurl)}catch{}p.wurl=null}p.stream=p.ac=null},I=C=>{p.peaks=p.peaks||[],p.peaks.push(C);let F=performance.now();(!p.lastDraw||F-p.lastDraw>55)&&(p.lastDraw=F,m(V=>{let P=V.slice(1);return P.push(Math.max(.08,C)),P}))},B=(C,F)=>{if(!C||!C.length)return new Array(F).fill(.3);let V=[],P=C.length/F;for(let O=0;O<F;O++){let $=Math.floor(O*P),Q=Math.max($+1,Math.floor((O+1)*P)),H=0;for(let re=$;re<Q&&re<C.length;re++)H=Math.max(H,C[re]);V.push(Math.max(.16,Math.min(1,H)))}return V},N=(C,F,V)=>{if(!C||!C.length||V>=F)return C||new Float32Array(0);let P=F/V,O=Math.floor(C.length/P),$=new Float32Array(O);for(let Q=0;Q<O;Q++){let H=Math.floor(Q*P),re=Math.min(C.length,Math.floor((Q+1)*P)),ie=0,ue=0;for(let L=H;L<re;L++)ie+=C[L],ue++;$[Q]=ue?ie/ue:0}return $},ae=(C,F)=>{let V=new ArrayBuffer(44+C.length*2),P=new DataView(V),O=(Q,H)=>{for(let re=0;re<H.length;re++)P.setUint8(Q+re,H.charCodeAt(re))};O(0,"RIFF"),P.setUint32(4,36+C.length*2,!0),O(8,"WAVE"),O(12,"fmt "),P.setUint32(16,16,!0),P.setUint16(20,1,!0),P.setUint16(22,1,!0),P.setUint32(24,F,!0),P.setUint32(28,F*2,!0),P.setUint16(32,2,!0),P.setUint16(34,16,!0),O(36,"data"),P.setUint32(40,C.length*2,!0);let $=44;for(let Q=0;Q<C.length;Q++){let H=Math.max(-1,Math.min(1,C[Q]));P.setInt16($,H<0?H*32768:H*32767,!0),$+=2}return new Blob([V],{type:"audio/wav"})},te=C=>{if(!C||!C.length)return;p.pcm.push(C),p.sampleCount=(p.sampleCount||0)+C.length;let F=0;for(let V=0;V<C.length;V++)F+=C[V]*C[V];I(Math.min(1,Math.sqrt(F/C.length)*3.2))},pe=C=>{if(p.finished)return;p.finished=!0,p.timer&&clearInterval(p.timer),p.timer=null;let F=(p.peaks||[]).slice(),V=p.ac&&p.ac.sampleRate||48e3;k();let P=null,O=1,$=p.sampleCount||0;if(C&&p.pcm&&p.pcm.length&&$>V*.2){let Q=new Float32Array($),H=0;for(let ue of p.pcm)Q.set(ue,H),H+=ue.length;let re=24e3,ie=N(Q,V,re);O=Math.max(1,Math.round(ie.length/re)),P=ae(ie,re)}try{p.stream&&p.stream.getTracks().forEach(Q=>Q.stop())}catch{}try{p.ac&&p.ac.close()}catch{}if(p.wurl){try{URL.revokeObjectURL(p.wurl)}catch{}p.wurl=null}p.stream=p.ac=null,p.pcm=[],C&&P&&P.size>44?t(P,O,B(F,34)):C?(S(!0),p.finished=!1):e()};if(React.useEffect(()=>{let C=!1;return p.finished=!1,p.peaks=[],p.pcm=[],p.sampleCount=0,p.t0=performance.now(),p.timer=setInterval(()=>{let F=(performance.now()-p.t0)/1e3;d(F),F>=r&&pe(!0)},200),(async()=>{let F=null;try{navigator.mediaDevices&&navigator.mediaDevices.getUserMedia&&(F=await navigator.mediaDevices.getUserMedia({audio:{channelCount:1,echoCancellation:!0,noiseSuppression:!0}}))}catch{F=null}if(C){F&&F.getTracks().forEach(V=>V.stop());return}if(!F){S(!0),p.timer&&clearInterval(p.timer);return}p.stream=F;try{let V=window.AudioContext||window.webkitAudioContext;if(p.ac=new V,p.ac.state==="suspended")try{await p.ac.resume()}catch{}p.srcNode=p.ac.createMediaStreamSource(F),p.sink=p.ac.createGain(),p.sink.gain.value=0;let P=!1;if(p.ac.audioWorklet&&typeof p.ac.audioWorklet.addModule=="function"&&window.AudioWorkletNode)try{let O='class P extends AudioWorkletProcessor{process(i){const c=i[0]&&i[0][0];if(c){this.port.postMessage(c.slice(0));}return true;}}registerProcessor("sb-pcm",P);';if(p.wurl=URL.createObjectURL(new Blob([O],{type:"application/javascript"})),await p.ac.audioWorklet.addModule(p.wurl),C)return;p.node=new AudioWorkletNode(p.ac,"sb-pcm"),p.node.port.onmessage=$=>te($.data),p.srcNode.connect(p.node),p.node.connect(p.sink),p.sink.connect(p.ac.destination),P=!0}catch{P=!1}P||(p.node=p.ac.createScriptProcessor(4096,1,1),p.node.onaudioprocess=$=>{let Q=$.inputBuffer.getChannelData(0);te(new Float32Array(Q))},p.srcNode.connect(p.node),p.node.connect(p.sink),p.sink.connect(p.ac.destination))}catch{S(!0),p.timer&&clearInterval(p.timer)}})(),()=>{C=!0,y()}},[]),v)return n("div",{style:{display:"flex",alignItems:"center",gap:"12px"}},[n("div",{key:"msg",style:{flex:1,minWidth:0,display:"flex",alignItems:"center",gap:"9px",height:"46px",padding:"0 16px",borderRadius:"13px",background:"rgba(var(--sb-red-strong-rgb), 0.06)",border:"1px solid rgba(var(--sb-red-strong-rgb), 0.22)",color:"var(--sb-red)",fontSize:"13.5px"}},[n("i",{key:"i",className:"fas fa-microphone-slash",style:{fontSize:"14px"}}),a("err.noAudio")]),n("button",{key:"x",onClick:e,title:a("chatHdr.close"),style:{flex:"none",width:"46px",height:"46px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-6)",cursor:"pointer"}},n("i",{className:"fas fa-xmark",style:{fontSize:"16px"}}))]);let ve=h.map((C,F)=>n("span",{key:F,style:{flex:"none",width:"3px",height:Math.round(4+C*24)+"px",borderRadius:"2px",background:"var(--sb-red-solid)",opacity:.45+C*.55}}));return n("div",{style:{display:"flex",alignItems:"center",gap:"12px"}},[n("button",{key:"cancel",onClick:()=>pe(!1),title:a("chat.discard"),style:{flex:"none",width:"42px",height:"42px",borderRadius:"12px",display:"grid",placeItems:"center",border:"none",background:"rgba(var(--sb-ink), 0.04)",color:"var(--sb-text-6)",cursor:"pointer"}},n("i",{className:"fas fa-trash-can",style:{fontSize:"15px"}})),n("div",{key:"bar",style:{flex:1,minWidth:0,display:"flex",alignItems:"center",gap:"11px",height:"46px",padding:"0 16px",borderRadius:"13px",background:"rgba(var(--sb-red-strong-rgb), 0.06)",border:"1px solid rgba(var(--sb-red-strong-rgb), 0.22)"}},[n("span",{key:"dot",style:{position:"relative",flex:"none",width:"9px",height:"9px"}},n("span",{style:{position:"absolute",inset:0,borderRadius:"50%",background:"var(--sb-red-solid)",animation:"vmRec 1.3s ease-in-out infinite"}})),n("span",{key:"time",style:{flex:"none",fontFamily:Pn,fontSize:"13px",fontWeight:600,color:"var(--sb-text-1)",minWidth:"42px"}},ea(c)),n("div",{key:"wave",style:{flex:1,minWidth:0,display:"flex",alignItems:"center",justifyContent:"flex-end",gap:"2px",height:"30px",overflow:"hidden"}},ve)]),n("button",{key:"send",onClick:()=>pe(!0),title:a("chat.sendVoice"),style:{flex:"none",width:"46px",height:"46px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",cursor:"pointer",boxShadow:"0 8px 22px rgba(var(--sb-orange-rgb), 0.3)",transition:"transform .15s cubic-bezier(.2,.7,.3,1)"}},n("svg",{width:20,height:20,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round"},[n("path",{key:"a",d:"M22 2L11 13"}),n("path",{key:"b",d:"M22 2l-7 20-4-9-9-4 20-7z"})]))])},Qo=({message:t,type:e,timestamp:n,mid:r,status:i,viewOnce:c,viewOnceTtl:d,expiresAt:h,expired:m,nowTick:v,canUnsend:S,onUnsend:p,onExpire:k,voice:y})=>{let[I,B]=React.useState(!1),N=React.useRef(null),ae=L=>new Date(L).toLocaleTimeString("en-GB",{hour:"2-digit",minute:"2-digit",second:"2-digit"});if(React.useEffect(()=>()=>{N.current&&clearTimeout(N.current)},[]),e==="system"||e==="notice"){let L=e==="notice";return React.createElement("div",{className:"message-slide",style:{display:"flex",justifyContent:"center",margin:"4px 0"}},React.createElement("div",{style:{maxWidth:"80%",padding:"8px 14px",borderRadius:"10px",border:"1px solid "+(L?"rgba(var(--sb-green-rgb), 0.25)":"rgba(var(--sb-orange-rgb), 0.22)"),background:L?"rgba(var(--sb-green-rgb), 0.08)":"rgba(var(--sb-orange-rgb), 0.08)",color:L?"var(--sb-green-soft)":"var(--sb-orange-4)",fontSize:"12.5px",textAlign:"center",lineHeight:1.5}},t))}let te=e==="sent",pe=te,ve=e==="received"&&c===!0,C=typeof h=="number"?Math.max(0,Math.ceil((h-(v||Date.now()))/1e3)):null,F=L=>{if(L==null)return"";let j=Math.floor(L/3600),ne=Math.floor(L%3600/60),Te=L%60,q=ye=>String(ye).padStart(2,"0");return j>0?j+":"+q(ne)+":"+q(Te):ne+":"+q(Te)},V=()=>{if(I)return;B(!0);let L=Math.max(1,typeof d=="number"?d:15)*1e3;N.current=setTimeout(()=>{k&&k()},L)},P=te?"14px 14px 4px 14px":"14px 14px 14px 4px",O=te?"1px solid rgba(var(--sb-ink), 0.10)":"1px solid rgba(var(--sb-ink), 0.06)",$=te?"var(--sb-surface-3)":"var(--sb-surface)";if(m===!0||typeof h=="number"&&(v||Date.now())>=h)return React.createElement("div",{className:"message-slide",style:{display:"flex",width:"100%",justifyContent:te?"flex-end":"flex-start"}},React.createElement("div",{style:{maxWidth:"74%",minWidth:"170px"}},React.createElement("div",{style:{display:"flex",alignItems:"center",gap:"9px",padding:"12px 15px",borderRadius:P,border:"1px dashed rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.018)"}},[React.createElement("i",{key:"i",className:"fas fa-clock",style:{color:"var(--sb-text-9)",fontSize:"13px"}}),React.createElement("span",{key:"t",style:{fontSize:"13px",color:"var(--sb-text-9)",fontStyle:"italic"}},a("chat.expired"))])));let H;y?H=React.createElement(Yo,{key:"voice",voice:y,isMe:te}):ve&&!I?H=React.createElement("div",{key:"cover",onClick:V,style:{position:"relative",cursor:"pointer",padding:"12px 15px 10px",overflow:"hidden"}},[React.createElement("div",{key:"blur",style:{fontSize:"14.5px",lineHeight:1.55,color:"var(--sb-text-5)",filter:"blur(7px)",userSelect:"none",pointerEvents:"none",wordBreak:"break-word",minHeight:"22px"}},t),React.createElement("div",{key:"grain",style:{position:"absolute",inset:0,backgroundImage:$o,backgroundSize:"90px",opacity:.18,mixBlendMode:"screen",pointerEvents:"none"}}),React.createElement("div",{key:"lbl",style:{position:"absolute",inset:0,display:"flex",alignItems:"center",justifyContent:"center",gap:"7px",pointerEvents:"none"}},[React.createElement("i",{key:"i",className:"fas fa-eye-slash",style:{color:"var(--sb-text-2)",fontSize:"13px"}}),React.createElement("span",{key:"t",style:{fontSize:"12px",fontWeight:600,color:"var(--sb-text-2)",textShadow:"0 1px 5px rgba(0,0,0,0.75)"}},a("chat.viewOnceTap"))])]):H=React.createElement("div",{key:"body",style:{padding:"12px 15px 10px",color:"var(--sb-text-2)"}},React.createElement(jo,{text:t}));let re=[React.createElement("span",{key:"time",style:{fontFamily:Pn,fontSize:"10.5px",color:"var(--sb-text-9)"}},ae(n))];if(te){let L={sending:{icon:"fa-clock",color:"var(--sb-text-9)",label:a("chat.sending")},sent:{icon:"fa-check",color:"var(--sb-text-7)",label:a("msg.sent")},delivered:{icon:"fa-check-double",color:"var(--sb-text-7)",label:a("chat.delivered")},read:{icon:"fa-check-double",color:"var(--sb-green)",label:a("msg.read")},failed:{icon:"fa-triangle-exclamation",color:"var(--sb-red)",label:a("chat.notSent")}}[i||"sent"]||{icon:"fa-check",color:"var(--sb-text-7)",label:a("msg.sent")};re.push(React.createElement("span",{key:"dlv",title:L.label,style:{display:"inline-flex",alignItems:"center",color:L.color}},React.createElement("i",{className:"fas "+L.icon,style:{fontSize:"10.5px"}})))}ve&&I?re.push(React.createElement("span",{key:"vo",style:{display:"inline-flex",alignItems:"center",gap:"4px",fontSize:"10px",fontWeight:600,color:"var(--sb-text-7)"}},[React.createElement("span",{key:"d",style:{width:"4px",height:"4px",borderRadius:"50%",background:"var(--sb-text-7)"}}),a("chat.viewedOnce")])):C!==null&&re.push(React.createElement("span",{key:"ttl",style:{display:"inline-flex",alignItems:"center",gap:"4px",fontFamily:Pn,fontSize:"10.5px",fontWeight:500,color:"var(--sb-orange)"}},[React.createElement("i",{key:"i",className:"fas fa-clock",style:{fontSize:"10px"}}),F(C)]));let ie=[];ie.push(React.createElement("span",{key:"status",style:{display:"inline-flex",alignItems:"center",gap:"5px",fontSize:"10.5px",fontWeight:600,color:"var(--sb-green)",flex:"none"}},[React.createElement("i",{key:"i",className:pe?"fas fa-lock":"fas fa-lock-open",style:{fontSize:"10px"}}),pe?a("chat.encrypted"):a("chat.decrypted")])),S&&te&&r&&ie.push(React.createElement("button",{key:"unsend",onClick:()=>p&&p(r),title:a("chat.deleteForEveryone"),className:"sb-unsend",style:{background:"none",border:"none",cursor:"pointer",color:"var(--sb-text-faint)",fontSize:"11px",padding:0,lineHeight:1}},React.createElement("i",{className:"fas fa-trash-can"})));let ue=React.createElement("div",{key:"meta",style:{display:"flex",alignItems:"center",justifyContent:"space-between",gap:"14px",padding:"0 15px 10px"}},[React.createElement("div",{key:"l",style:{display:"flex",alignItems:"center",gap:"9px",minWidth:0}},re),React.createElement("div",{key:"r",style:{display:"flex",alignItems:"center",gap:"9px",flex:"none"}},ie)]);return React.createElement("div",{className:"message-slide",style:{display:"flex",width:"100%",justifyContent:te?"flex-end":"flex-start"}},[React.createElement("div",{key:"wrap",style:{maxWidth:"74%",minWidth:"170px"}},React.createElement("div",{style:{borderRadius:P,border:O,background:$,overflow:"hidden"}},[H,ue]))])},Xo=({messages:t,onCreateOffer:e,onCreateAnswer:n,onConnect:r,onClearData:i,onVerifyConnection:c,connectionStatus:d,offerData:h,answerData:m,offerInput:v,setOfferInput:S,answerInput:p,setAnswerInput:k,showOfferStep:y,showAnswerStep:I,verificationCode:B,showVerification:N,showQRCode:ae,qrCodeUrl:te,showQRScanner:pe,setShowQRCode:ve,setShowQRScanner:C,setShowQRScannerModal:F,offerPassword:V,answerPassword:P,localVerificationConfirmed:O,remoteVerificationConfirmed:$,bothVerificationsConfirmed:Q,qrFramesTotal:H,qrFrameIndex:re,qrManualMode:ie,toggleQrManualMode:ue,nextQrFrame:L,prevQrFrame:j,markAnswerCreated:ne,notificationIntegrationRef:Te,isGeneratingKeys:q,setIsGeneratingKeys:ye,handleCreateOffer:Be,relayOnlyMode:rt,setRelayOnlyMode:Re,webrtcManagerRef:Qe,showIceSettings:st,setShowIceSettings:mt,iceServersText:Wt,iceSettingsPersisted:yt,customIceServers:Ce,handleApplyIceSettings:ft,handleForgetIceSettings:ee,compact:Fe=!1})=>{let[bt,ht]=React.useState("create"),[Ot,xt]=React.useState(!1),[Lt,gt]=React.useState(!1),[St,Vt]=React.useState(!1),[b,J]=React.useState(""),[Ne,qe]=React.useState(""),[Le,Ge]=React.useState(!1),[Bt,Xe]=React.useState(!1),[it,on]=React.useState(0);React.useEffect(()=>{J(""),qe("")},[B]),React.useEffect(()=>{(N||!y&&!I)&&gt(!1),Xe(!1)},[y,I,N]),React.useEffect(()=>{if(!(q&&!y&&!I&&!N)){on(0);return}on(0);let Z=0,Se=setInterval(()=>{Z+=1,on(Z),Z>=3&&clearInterval(Se)},520);return()=>clearInterval(Se)},[q,y,I,N]),React.useEffect(()=>{if(!Le)return;let U=()=>Ge(!1),Z=setTimeout(()=>document.addEventListener("click",U),0);return()=>{clearTimeout(Z),document.removeEventListener("click",U)}},[Le]);let jt=()=>{ye(!1),gt(!1),i()},On=U=>c(U),cn=()=>{c(null,!1)},Et=async()=>{if(!Ot)try{if(!("Notification"in window)||!window.isSecureContext&&window.location.protocol!=="https:"&&window.location.hostname!=="localhost")return;let U=typeof Notification<"u"&&Notification?Notification.permission:"denied";if(U==="default"&&typeof Notification<"u"&&Notification){if(await Notification.requestPermission()==="granted"){try{if(window.NotificationIntegration&&Qe.current){let Se=new window.NotificationIntegration(Qe.current);await Se.init(),Te.current=Se}}catch{}setTimeout(()=>{try{let Se=new Notification("SecureBit Chat",{body:a("notify.enabledBody"),icon:"/logo/icon-192x192.png",tag:"welcome-notification"});Se.onclick=()=>{Se.close()},setTimeout(()=>{Se.close()},5e3)}catch{}},1e3)}}else if(U==="granted"){try{if(window.NotificationIntegration&&Qe.current&&!Te.current){let Z=new window.NotificationIntegration(Qe.current);await Z.init(),Te.current=Z}}catch{}setTimeout(()=>{try{let Z=new Notification("SecureBit Chat",{body:a("notify.workingBody"),icon:"/logo/icon-192x192.png",tag:"test-notification"});Z.onclick=()=>{Z.close()},setTimeout(()=>{Z.close()},5e3)}catch{}},1e3)}xt(!0)}catch{}},f=React.createElement,Je="var(--sb-orange)",Oe="var(--sb-green)",ke="var(--sb-orange-solid)",He="var(--sb-green-solid)",We=Pn,$t=U=>{try{let Z=typeof U=="object"?JSON.stringify(U):U||"";return Z?typeof window.encodeBinaryToPrefixed=="function"?window.encodeBinaryToPrefixed(Z):typeof window.compressToPrefixedGzip=="function"?window.compressToPrefixedGzip(Z):Z:""}catch{return typeof U=="object"?JSON.stringify(U):U||""}},Pe=bt==="create",ln=q&&!y&&!I&&!N,qt=Pe&&y&&!N,E=!Pe&&I&&!N,me=!N&&!ln&&!qt&&!E,Ie=Pe?Je:Oe,Rt=Pe?ke:He,Mt=N?a("step.verification"):qt||E?a("step.exchange"):a("step.open"),be=$t(Pe?h:m),_t=(v||"").trim().length>0,Ct=(p||"").trim().length>0,kr=async()=>{try{typeof hs=="function"?await hs(be):await navigator.clipboard.writeText(be)}catch{}Vt(!0),setTimeout(()=>Vt(!1),1600)},kn=(B||"").replace(/[-\s]/g,"").length,Sr=b.replace(/[-\s]/g,"").length,zt=!O&&kn>0&&Sr===kn,Jn=async()=>{try{qe(""),await c(b)}catch(U){J(""),qe(U?.message==="SAS_MAX_ATTEMPTS"?a("sas.tooManyAttempts"):a("sas.incorrect"))}},Yt={"fa-user":{sw:1.9,e:[["circle",{cx:12,cy:8,r:3.6}],["path",{d:"M5 20c0-3.5 3-5.5 7-5.5s7 2 7 5.5"}]]},"fa-lock":{sw:2,e:[["path",{d:"M7 11V7a5 5 0 0 1 10 0v4"}],["rect",{x:4.5,y:11,width:15,height:9,rx:2.2}]]},"fa-plus":{sw:2.1,e:[["path",{d:"M12 5v14M5 12h14"}]]},"fa-link":{sw:2,e:[["path",{d:"M9.5 14.5l5-5M8 11l-2.2 2.2a3.5 3.5 0 0 0 4.95 4.95L13 16M16 13l2.2-2.2a3.5 3.5 0 0 0-4.95-4.95L11 8"}]]},"fa-bolt":{sw:2.1,e:[["path",{d:"M13 2L4.5 13H11l-1 9 8.5-11H12l1-9z"}]]},"fa-camera":{sw:1.8,e:[["path",{d:"M2 8.5V6.5A2.5 2.5 0 0 1 4.5 4h2M17.5 4h2A2.5 2.5 0 0 1 22 6.5v2M22 15.5v2a2.5 2.5 0 0 1-2.5 2.5h-2M6.5 20h-2A2.5 2.5 0 0 1 2 17.5v-2"}],["circle",{cx:12,cy:12,r:3.2}]]},"fa-qrcode":{sw:1.9,e:[["rect",{x:3,y:3,width:7,height:7,rx:1.3}],["rect",{x:14,y:3,width:7,height:7,rx:1.3}],["rect",{x:3,y:14,width:7,height:7,rx:1.3}],["path",{d:"M14 14h3v3M21 14v.01M14 21h.01M21 21v-4M17.5 21H21"}]]},"fa-chevron-right":{sw:2,e:[["path",{d:"M9 6l6 6-6 6"}]]},"fa-chevron-left":{sw:2,e:[["path",{d:"M15 6l-6 6 6 6"}]]},"fa-chevron-down":{sw:2,e:[["path",{d:"M6 9l6 6 6-6"}]]},"fa-circle-notch":{sw:2,e:[["path",{d:"M21 12a9 9 0 1 1-6.2-8.6"}]]},"fa-check":{sw:2.4,e:[["path",{d:"M20 6L9 17l-5-5"}]]},"fa-check-circle":{sw:2,e:[["circle",{cx:12,cy:12,r:9}],["path",{d:"M8.5 12.4l2.4 2.4 4.6-5"}]]},"fa-shield-alt":{sw:1.9,e:[["path",{d:"M12 2.6l7 3v5.1c0 4.5-3 8.3-7 10.2-4-1.9-7-5.7-7-10.2V5.6l7-3z"}],["path",{d:"M9 12l2 2 4-4.1"}]]},"fa-download":{sw:2,e:[["path",{d:"M12 3v12M12 15l-4.5-4.5M12 15l4.5-4.5"}],["path",{d:"M4 20h16"}]]},"fa-clock":{sw:1.8,e:[["circle",{cx:12,cy:13,r:8}],["path",{d:"M12 9v4l2.5 2M9 2h6"}]]},"fa-times":{sw:2.2,e:[["path",{d:"M18 6L6 18M6 6l12 12"}]]},"fa-eye":{sw:1.9,e:[["path",{d:"M2 12s3.6-7 10-7 10 7 10 7-3.6 7-10 7-10-7-10-7z"}],["circle",{cx:12,cy:12,r:3}]]}},fe=(U,Z)=>{Z=Z||{};let Se=Yt[U];if(!Se){let It={};return Z.color&&(It.color=Z.color),Z.fontSize&&(It.fontSize=Z.fontSize),Z.animation&&(It.animation=Z.animation),Z.style&&Object.assign(It,Z.style),f("i",{key:Z.key,className:`fas ${U}`,style:It})}let _e=Z.fontSize?parseFloat(Z.fontSize):16,ot={};return Z.animation&&(ot.animation=Z.animation,ot.transformOrigin="center",ot.transformBox="fill-box"),Z.style&&Object.assign(ot,Z.style),f("svg",{key:Z.key,className:U,width:_e,height:_e,viewBox:"0 0 24 24",fill:"none",stroke:Z.color||"currentColor",strokeWidth:Se.sw||2,strokeLinecap:"round",strokeLinejoin:"round",style:ot},Se.e.map((It,Ir)=>f(It[0],Object.assign({key:Ir},It[1]))))},Kt=f("div",{key:"left",className:"sb-start-left",style:{flex:"1.05 1 380px",position:"relative",overflow:"hidden",minHeight:"100vh",boxSizing:"border-box",padding:"46px",display:"flex",flexDirection:"column",justifyContent:"space-between",gap:"36px",borderInlineEnd:"1px solid rgba(var(--sb-ink), 0.06)",background:"radial-gradient(900px 600px at 25% 18%, rgba(var(--sb-orange-rgb), 0.07), transparent 62%), radial-gradient(800px 700px at 80% 92%, rgba(var(--sb-green-rgb), 0.06), transparent 60%), var(--sb-bg-deep)"}},[f("div",{key:"herowrap",style:{flex:1,display:"flex",flexDirection:"column",justifyContent:"center",position:"relative",zIndex:2}},f("div",{key:"hero",style:{maxWidth:"560px"}},[f("h1",{key:"h1",style:{margin:"0 0 14px",fontSize:"34px",fontWeight:800,letterSpacing:"-1.1px",lineHeight:1.1,color:"var(--sb-text-1)"}},[a("hero.headlineTop"),f("br",{key:"br"}),a("hero.headlineBottom")]),f("p",{key:"p",style:{margin:"0 0 38px",fontSize:"14.5px",lineHeight:1.6,color:"var(--sb-text-7)",maxWidth:"390px"}},a("hero.subheading")),f("div",{key:"channel",style:{display:"flex",alignItems:"center",gap:"32px",flexWrap:"wrap"}},[f("svg",{key:"svg",viewBox:"0 0 380 200",role:"img","aria-label":a("hero.diagramAlt"),style:{display:"block",width:"100%",maxWidth:"380px",height:"auto",overflow:"visible"}},[f("line",{key:"l0",x1:30,y1:100,x2:330,y2:100,stroke:ke,strokeWidth:1.5,strokeOpacity:.75}),f("circle",{key:"p0",r:3.6,fill:"var(--sb-orange-2)",style:{offsetPath:"path('M30,100 L330,100')",animation:"sbTrav 2.8s linear infinite"}}),f("g",{key:"g1",style:{animation:"sbIn1 14s linear infinite"}},[f("line",{key:"a",x1:30,y1:100,x2:250,y2:26,stroke:ke,strokeWidth:1.4,strokeOpacity:.7}),f("line",{key:"b",x1:250,y1:26,x2:330,y2:100,stroke:He,strokeWidth:1.2,strokeOpacity:.3}),f("circle",{key:"p",r:3.2,fill:"var(--sb-orange-2)",style:{offsetPath:"path('M30,100 L250,26')",animation:"sbTrav 3s linear .6s infinite"}}),f("circle",{key:"n",cx:250,cy:26,r:5,fill:"var(--sb-bg-deep)",stroke:"var(--sb-diag-stroke)",strokeWidth:1.2}),f("text",{key:"t",x:250,y:8,textAnchor:"middle",fontFamily:We,fontSize:12,fill:"var(--sb-diag-label)"},"mara")]),f("circle",{key:"r1",cx:250,cy:26,r:5,fill:"none",stroke:ke,strokeOpacity:.6,style:{animation:"sbRing1 14s linear infinite"}}),f("g",{key:"g2",style:{animation:"sbIn2 14s linear infinite"}},[f("line",{key:"a",x1:30,y1:100,x2:250,y2:174,stroke:ke,strokeWidth:1.4,strokeOpacity:.7}),f("line",{key:"b",x1:250,y1:174,x2:330,y2:100,stroke:He,strokeWidth:1.2,strokeOpacity:.3}),f("line",{key:"c",x1:250,y1:26,x2:250,y2:174,stroke:He,strokeWidth:1.2,strokeOpacity:.3}),f("circle",{key:"p",r:3.2,fill:"var(--sb-orange-2)",style:{offsetPath:"path('M30,100 L250,174')",animation:"sbTrav 3s linear .3s infinite"}}),f("circle",{key:"q",r:2.8,fill:He,style:{offsetPath:"path('M250,26 L250,174')",animation:"sbTrav 3.4s linear 1.2s infinite"}}),f("circle",{key:"n",cx:250,cy:174,r:5,fill:"var(--sb-bg-deep)",stroke:"var(--sb-diag-stroke)",strokeWidth:1.2}),f("text",{key:"t",x:250,y:194,textAnchor:"middle",fontFamily:We,fontSize:12,fill:"var(--sb-diag-label)"},"tobi")]),f("circle",{key:"r2",cx:250,cy:174,r:5,fill:"none",stroke:ke,strokeOpacity:.6,style:{animation:"sbRing2 14s linear infinite"}}),f("circle",{key:"pe",cx:330,cy:100,r:5,fill:"var(--sb-bg-deep)",stroke:"var(--sb-diag-stroke)",strokeWidth:1.2}),f("text",{key:"pt",x:346,y:104,fontFamily:We,fontSize:12,fill:"var(--sb-diag-label)"},"peer"),f("circle",{key:"yh",cx:30,cy:100,r:15,fill:ke,fillOpacity:.09}),f("circle",{key:"yc",cx:30,cy:100,r:6,fill:ke}),f("text",{key:"yt",x:30,y:126,textAnchor:"middle",fontFamily:We,fontSize:12,fill:"var(--sb-diag-text)"},a("mesh.you"))]),f("div",{key:"log",style:{display:"flex",flexDirection:"column",gap:"12px",fontFamily:We,fontSize:"12px",color:"var(--sb-diag-dim)"}},[f("div",{key:"r0",style:{animation:"sbRow0 14s linear infinite"}},a("mesh.peer")),f("div",{key:"r1",style:{animation:"sbRow1 14s linear infinite"}},a("mesh.joined2")),f("div",{key:"r2",style:{animation:"sbRow2 14s linear infinite"}},a("mesh.joined3"))])])])),f("div",{key:"badges",style:{position:"relative",zIndex:2,display:"flex",flexWrap:"wrap",gap:"8px"}},["ECDH P-384","AES-256-GCM",a("sec.pfsShort")].map(U=>f("span",{key:U,style:{display:"inline-flex",alignItems:"center",gap:"6px",padding:"6px 11px",borderRadius:"8px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.025)",fontFamily:We,fontSize:"11px",fontWeight:500,color:"var(--sb-text-6)"}},[f("span",{key:"dot",style:{width:"5px",height:"5px",borderRadius:"50%",background:He}}),U])))]),Sn=me&&f("div",{key:"seg",style:{position:"relative",display:"flex",padding:"4px",borderRadius:"12px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",marginBottom:"26px"}},[f("div",{key:"ind",style:{position:"absolute",top:"4px",bottom:"4px",insetInlineStart:"4px",width:"calc(50% - 4px)",borderRadius:"9px",background:"rgba(var(--sb-ink), 0.07)",border:"1px solid rgba(var(--sb-ink), 0.08)",transform:Pe?"translateX(0%)":`translateX(${100*Xn}%)`,transition:"transform .26s cubic-bezier(.3,.8,.3,1)"}}),f("button",{key:"c",className:"sb-seg-btn",onClick:()=>ht("create"),style:{position:"relative",zIndex:1,flex:1,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"11px",border:"none",background:"transparent",color:Pe?"var(--sb-text-1)":"var(--sb-text-8)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,cursor:"pointer"}},[fe("fa-plus",{key:"i"}),a("action.create")]),f("button",{key:"j",className:"sb-seg-btn",onClick:()=>ht("join"),style:{position:"relative",zIndex:1,flex:1,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"11px",border:"none",background:"transparent",color:Pe?"var(--sb-text-8)":"var(--sb-text-1)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,cursor:"pointer"}},[fe("fa-link",{key:"i"}),a("action.join")])]),dn=U=>f("button",{key:U||"back",className:"sb-soft-btn",onClick:jt,style:{display:"inline-flex",alignItems:"center",gap:"6px",marginBottom:"14px",paddingBlock:"6px",paddingInlineStart:"8px",paddingInlineEnd:"11px",borderRadius:"8px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"transparent",color:"var(--sb-text-6)",fontFamily:"inherit",fontSize:"12.5px",fontWeight:600,cursor:"pointer"}},[fe("fa-chevron-left",{key:"i"}),a("action.back")]),Zn=f("div",{key:"codeblock",style:{borderRadius:"13px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",overflow:"hidden",marginBottom:"16px"}},[f("div",{key:"bar",style:{display:"flex",alignItems:"center",gap:"8px",padding:"9px 12px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(0,0,0,0.2)"}},[f("span",{key:"dot",style:{width:"7px",height:"7px",borderRadius:"50%",background:Ie}}),f("span",{key:"tag",style:{fontFamily:We,fontSize:"10.5px",fontWeight:600,color:"var(--sb-text-7)"}},Pe?a("cred.offerTag"):a("cred.answerTag")),f("button",{key:"copy",onClick:kr,style:{marginInlineStart:"auto",padding:"4px 9px",borderRadius:"6px",border:`1px solid ${St?"rgba(var(--sb-green-rgb), 0.4)":"rgba(var(--sb-ink), 0.1)"}`,background:St?"rgba(var(--sb-green-rgb), 0.1)":"rgba(var(--sb-ink), 0.04)",color:St?Oe:"var(--sb-text-5)",fontFamily:"inherit",fontSize:"11px",fontWeight:600,cursor:"pointer",transition:"all .14s"}},St?a("action.copied"):a("action.copy"))]),f("div",{key:"codewrap",style:{position:"relative"}},[f("div",{key:"code",className:"sb-sc",style:{fontFamily:We,fontSize:"11px",lineHeight:1.55,color:"var(--sb-text-code)",wordBreak:"break-all",padding:"11px 12px",maxHeight:"72px",overflowY:"auto",filter:Bt?"none":"blur(6px)",userSelect:Bt?"text":"none",transition:"filter .2s"}},be),!Bt&&f("button",{key:"reveal",onClick:()=>Xe(!0),style:{position:"absolute",inset:0,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",border:"none",background:"rgba(var(--sb-surface-rgb), 0.25)",color:"var(--sb-text-4)",fontFamily:"inherit",fontSize:"12px",fontWeight:600,cursor:"pointer"}},[fe("fa-eye",{key:"i",fontSize:"15px"}),a("cred.reveal")])])]),vt=te&&f("button",{key:"showqr",onClick:()=>gt(!0),style:{width:"100%",display:"flex",alignItems:"center",gap:"13px",padding:"15px 16px",borderRadius:"14px",border:`1px solid ${Pe?"rgba(var(--sb-orange-rgb), 0.3)":"rgba(var(--sb-green-rgb), 0.3)"}`,background:Pe?"rgba(var(--sb-orange-rgb), 0.06)":"rgba(var(--sb-green-rgb), 0.06)",color:"inherit",fontFamily:"inherit",cursor:"pointer",textAlign:"start",marginBottom:"14px"}},[f("span",{key:"ic",style:{flex:"none",width:"42px",height:"42px",borderRadius:"12px",display:"grid",placeItems:"center",background:Pe?"rgba(var(--sb-orange-rgb), 0.12)":"rgba(var(--sb-green-rgb), 0.12)",border:`1px solid ${Pe?"rgba(var(--sb-orange-rgb), 0.28)":"rgba(var(--sb-green-rgb), 0.28)"}`}},fe("fa-qrcode",{color:Rt,fontSize:"18px"})),f("span",{key:"tx",style:{flex:1}},[f("span",{key:"t",style:{display:"block",fontSize:"14.5px",fontWeight:700,color:"var(--sb-text-1)"}},a("qr.showTitle")),f("span",{key:"s",style:{display:"block",fontSize:"12.5px",color:"var(--sb-text-7)",marginTop:"1px"}},(H||0)>1?a("qr.showSubtitleFrames",{frames:H}):a("qr.showSubtitle"))]),fe("fa-chevron-right",{color:"var(--sb-text-9)"})]),Ut;if(N){let U=Q,Z=(B||"").split("").map((Se,_e)=>f("div",{key:_e,style:{flex:1,maxWidth:"46px",aspectRatio:"0.82",display:"grid",placeItems:"center",borderRadius:"10px",border:"1px solid rgba(var(--sb-green-rgb), 0.25)",background:"rgba(var(--sb-green-rgb), 0.05)",fontFamily:We,fontSize:"22px",fontWeight:700,color:Oe}},Se));Ut=f("div",{key:"verify",style:{animation:"sbUp .3s ease"}},[!U&&dn("vback"),f("div",{key:"head",style:{display:"flex",alignItems:"center",gap:"11px",marginBottom:"8px"}},[f("div",{key:"i",style:{width:"34px",height:"34px",flex:"none",borderRadius:"10px",display:"grid",placeItems:"center",background:"rgba(var(--sb-green-rgb), 0.1)",border:"1px solid rgba(var(--sb-green-rgb), 0.25)"}},fe("fa-shield-alt",{color:He})),f("h2",{key:"t",style:{margin:0,fontSize:"21px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},a("verify.title"))]),f("p",{key:"sub",style:{margin:"0 0 18px",fontSize:"13.5px",lineHeight:1.55,color:"var(--sb-text-7)"}},a("verify.desc")),f("div",{key:"cells",dir:"ltr",style:{display:"flex",gap:"6px",justifyContent:"center",marginBottom:"20px",flexWrap:"wrap"}},Z),U?f("div",{key:"ok",style:{display:"flex",flexDirection:"column",alignItems:"center",textAlign:"center",padding:"24px 16px",borderRadius:"16px",border:"1px solid rgba(var(--sb-green-rgb), 0.25)",background:"rgba(var(--sb-green-rgb), 0.06)",animation:"sbUp .3s ease"}},[f("div",{key:"i",style:{width:"54px",height:"54px",borderRadius:"16px",display:"grid",placeItems:"center",background:"rgba(var(--sb-green-rgb), 0.14)",border:"1px solid rgba(var(--sb-green-rgb), 0.35)",marginBottom:"14px"}},fe("fa-check",{color:He,fontSize:"24px"})),f("div",{key:"t",style:{fontSize:"18px",fontWeight:800,color:"var(--sb-text-1)"}},a("verify.verified")),f("div",{key:"s",style:{fontSize:"13.5px",color:"var(--sb-text-7)",marginTop:"5px"}},a("verify.bothConfirmed"))]):f("div",{key:"form"},[f("div",{key:"lbl",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-6)",marginBottom:"8px"}},a("verify.enterLabel")),f("input",{key:"in",dir:"ltr",value:b,onChange:Se=>{J(Se.target.value.replace(/\D/g,"").slice(0,Xi)),Ne&&qe("")},disabled:O,autoFocus:!0,autoComplete:"one-time-code",spellCheck:!1,type:"text",inputMode:"numeric",pattern:"[0-9]*",maxLength:Xi,placeholder:B?a("verify.placeholder"):a("verify.waiting"),style:{width:"100%",textAlign:"center",letterSpacing:"6px",borderRadius:"12px",border:`1px solid ${b.length?zt||O?"rgba(var(--sb-green-rgb), 0.5)":"rgba(var(--sb-ink), 0.14)":"rgba(var(--sb-ink), 0.08)"}`,background:"var(--sb-surface)",color:"var(--sb-text-1)",fontFamily:We,fontSize:"20px",fontWeight:700,padding:"14px",outline:"none",marginBottom:Ne?"8px":"16px"}}),Ne&&f("p",{key:"err",style:{color:"var(--sb-red)",fontSize:"12.5px",margin:"0 0 16px"}},Ne),f("div",{key:"status",style:{display:"flex",flexDirection:"column",gap:"8px",marginBottom:"16px"}},[f("div",{key:"you",style:{display:"flex",alignItems:"center",justifyContent:"space-between",padding:"11px 14px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.06)",background:"var(--sb-surface)"}},[f("span",{key:"l",style:{fontSize:"13px",color:"var(--sb-text-4)",fontWeight:600}},a("verify.yours")),f("span",{key:"v",style:{display:"inline-flex",alignItems:"center",gap:"6px",fontSize:"12.5px",fontWeight:600,color:O?Oe:"var(--sb-text-8)"}},[fe(O?"fa-check-circle":"fa-clock",{key:"i"}),O?a("verify.confirmed"):a("verify.pending")])]),f("div",{key:"peer",style:{display:"flex",alignItems:"center",justifyContent:"space-between",padding:"11px 14px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.06)",background:"var(--sb-surface)"}},[f("span",{key:"l",style:{fontSize:"13px",color:"var(--sb-text-4)",fontWeight:600}},a("verify.peer")),f("span",{key:"v",style:{display:"inline-flex",alignItems:"center",gap:"6px",fontSize:"12.5px",fontWeight:600,color:$?Oe:"var(--sb-text-8)"}},[fe($?"fa-check-circle":"fa-clock",{key:"i"}),$?a("verify.confirmed"):a("verify.pending")])])]),f("div",{key:"btns",style:{display:"flex",gap:"10px"}},[f("button",{key:"ok",onClick:Jn,disabled:!zt,style:{flex:1,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"14px",borderRadius:"13px",border:"none",background:zt?He:"rgba(var(--sb-ink), 0.05)",color:zt?"var(--sb-on-green-2)":"var(--sb-text-faint)",fontFamily:"inherit",fontSize:"14.5px",fontWeight:700,cursor:zt?"pointer":"not-allowed",boxShadow:zt?"0 8px 24px rgba(var(--sb-green-rgb), 0.25)":"none"}},[fe(O?"fa-check-circle":"fa-check",{key:"i"}),O?a("verify.confirmed"):a("verify.confirm")]),f("button",{key:"no",onClick:cn,style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"center",gap:"7px",padding:"14px 16px",borderRadius:"13px",border:"1px solid rgba(var(--sb-red-rgb), 0.3)",background:"transparent",color:"var(--sb-red)",fontFamily:"inherit",fontSize:"13.5px",fontWeight:600,cursor:"pointer"}},[fe("fa-times",{key:"i"}),a("verify.mismatch")])])])])}else if(ln){let U=[a("handshake.step1"),a("handshake.step2"),a("handshake.step3")];Ut=f("div",{key:"gen",style:{animation:"sbUp .28s ease"}},[f("div",{key:"head",style:{display:"flex",alignItems:"center",gap:"13px",marginBottom:"22px"}},[f("div",{key:"sp",style:{width:"44px",height:"44px",flex:"none",display:"grid",placeItems:"center"}},fe("fa-circle-notch",{color:ke,fontSize:"32px",animation:"sbSpin 1s linear infinite"})),f("div",{key:"tx"},[f("h2",{key:"t",style:{margin:0,fontSize:"20px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},Pe?a("handshake.securingTitle"):a("handshake.answerTitle")),f("p",{key:"s",style:{margin:"3px 0 0",fontSize:"13px",color:"var(--sb-text-7)"}},a("handshake.securingDesc"))])]),f("div",{key:"steps",style:{display:"flex",flexDirection:"column",borderRadius:"13px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",overflow:"hidden"}},U.map((Z,Se)=>{let _e=it>Se,ot=it===Se;return f("div",{key:Se,style:{display:"flex",alignItems:"center",gap:"12px",padding:"13px 15px",borderTop:Se?"1px solid rgba(var(--sb-ink), 0.05)":"none",transition:"background .3s",background:_e?"rgba(var(--sb-green-rgb), 0.04)":"transparent"}},[f("div",{key:"d",style:{flex:"none",width:"20px",height:"20px",borderRadius:"50%",display:"grid",placeItems:"center",background:_e?"rgba(var(--sb-green-rgb), 0.12)":ot?"rgba(var(--sb-orange-rgb), 0.12)":"rgba(var(--sb-ink), 0.04)",border:`1px solid ${_e?"rgba(var(--sb-green-rgb), 0.3)":ot?"rgba(var(--sb-orange-rgb), 0.3)":"rgba(var(--sb-ink), 0.1)"}`,transition:"all .3s"}},_e?fe("fa-check",{color:He,fontSize:"11px"}):f("span",{style:{width:"6px",height:"6px",borderRadius:"50%",background:ot?ke:"var(--sb-text-faint)",animation:ot?"sbBlink 1s ease-in-out infinite":"none"}})),f("span",{key:"l",style:{fontSize:"13.5px",color:_e?"var(--sb-text-4)":ot?"var(--sb-text-2)":"var(--sb-text-9)",transition:"color .3s"}},Z)])}))])}else qt||E?Ut=f("div",{key:"cred",style:{animation:"sbUp .3s ease"}},[dn("cback"),f("h2",{key:"h",style:{margin:"0 0 6px",fontSize:"23px",fontWeight:800,letterSpacing:"-0.5px",color:"var(--sb-text-1)"}},Pe?a("handshake.shareTitle"):a("handshake.sendAnswerTitle")),f("p",{key:"p",style:{margin:"0 0 18px",fontSize:"14px",lineHeight:1.55,color:"var(--sb-text-7)"}},Pe?a("handshake.shareDesc"):a("handshake.sendAnswerDesc")),vt,Zn,qt&&f("div",{key:"offerextra",style:{marginTop:"4px"}},[f("div",{key:"lbl",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-6)",marginBottom:"8px"}},a("handshake.thenReceive")),f("div",{key:"ta",style:{borderRadius:"12px",border:`1px solid ${Ct?"rgba(var(--sb-ink), 0.18)":"rgba(var(--sb-ink), 0.07)"}`,background:"var(--sb-surface)",padding:"11px 14px",marginBottom:"10px"}},f("textarea",{dir:"ltr",value:p,onChange:U=>{k(U.target.value),U.target.value.trim().length>0&&typeof ne=="function"&&ne()},rows:2,placeholder:a("handshake.pasteAnswerPlaceholder"),style:{width:"100%",resize:"none",border:"none",outline:"none",background:"transparent",color:"var(--sb-text-3)",fontFamily:We,fontSize:"12px",lineHeight:1.55,minHeight:"44px"}})),f("div",{key:"btns",style:{display:"flex",gap:"10px"}},[f("button",{key:"scan",className:"sb-scan-btn",onClick:()=>F(!0),style:{flex:"none",display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"14px 16px",borderRadius:"13px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.04)",color:"var(--sb-text-4)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,cursor:"pointer"}},[fe("fa-camera",{key:"i"}),a("action.scan")]),f("button",{key:"est",onClick:r,disabled:!Ct,style:{flex:1,display:"flex",alignItems:"center",justifyContent:"center",gap:"9px",padding:"14px",borderRadius:"13px",border:"none",background:Ct?ke:"rgba(var(--sb-ink), 0.05)",color:Ct?"var(--sb-on-accent)":"var(--sb-text-faint)",fontFamily:"inherit",fontSize:"14.5px",fontWeight:700,cursor:Ct?"pointer":"not-allowed",boxShadow:Ct?"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)":"none"}},a("handshake.establish"))])]),E&&f("div",{key:"answerextra",style:{marginTop:"4px",display:"flex",alignItems:"center",gap:"10px",padding:"12px 14px",borderRadius:"12px",border:"1px solid rgba(var(--sb-green-rgb), 0.18)",background:"rgba(var(--sb-green-rgb), 0.05)"}},[fe("fa-circle-notch",{key:"i",color:He,animation:"sbSpin 1.4s linear infinite"}),f("span",{key:"t",style:{fontSize:"13px",color:"var(--sb-text-4)",fontWeight:500}},a("handshake.answerSentNote"))])]):Pe?Ut=f("div",{key:"introC",style:{animation:"sbUp .28s ease"}},[f("h2",{key:"h",style:{margin:"0 0 6px",fontSize:"23px",fontWeight:800,letterSpacing:"-0.5px",color:"var(--sb-text-1)"}},a("intro.createTitle")),f("p",{key:"p",style:{margin:"0 0 22px",fontSize:"14px",lineHeight:1.55,color:"var(--sb-text-7)"}},a("intro.createDesc")),f("button",{key:"gen",className:"sb-gen-btn",onClick:()=>{Et(),Qe.current&&Be()},style:{width:"100%",display:"flex",alignItems:"center",justifyContent:"center",gap:"9px",padding:"15px",borderRadius:"13px",border:"none",background:ke,color:"var(--sb-on-accent)",fontFamily:"inherit",fontSize:"15px",fontWeight:700,cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)"}},[fe("fa-bolt",{key:"i"}),a("intro.createCta")])]):Ut=f("div",{key:"introJ",style:{animation:"sbUp .28s ease"}},[f("h2",{key:"h",style:{margin:"0 0 6px",fontSize:"23px",fontWeight:800,letterSpacing:"-0.5px",color:"var(--sb-text-1)"}},a("intro.joinTitle")),f("p",{key:"p",style:{margin:"0 0 16px",fontSize:"14px",lineHeight:1.55,color:"var(--sb-text-7)"}},"Scan your peer's QR with your camera, or paste their invitation code."),f("button",{key:"scan",className:"sb-scan-btn",onClick:()=>{Et(),F(!0)},style:{width:"100%",display:"flex",alignItems:"center",gap:"13px",padding:"15px 16px",borderRadius:"14px",border:"1px solid rgba(var(--sb-green-rgb), 0.3)",background:"rgba(var(--sb-green-rgb), 0.06)",color:"inherit",fontFamily:"inherit",cursor:"pointer",textAlign:"start",marginBottom:"14px"}},[f("span",{key:"ic",style:{flex:"none",width:"42px",height:"42px",borderRadius:"12px",display:"grid",placeItems:"center",background:"rgba(var(--sb-green-rgb), 0.12)",border:"1px solid rgba(var(--sb-green-rgb), 0.28)"}},fe("fa-camera",{color:He,fontSize:"18px"})),f("span",{key:"tx",style:{flex:1}},[f("span",{key:"t",style:{display:"block",fontSize:"14.5px",fontWeight:700,color:"var(--sb-text-1)"}},a("intro.scanTitle")),f("span",{key:"s",style:{display:"block",fontSize:"12.5px",color:"var(--sb-text-7)",marginTop:"1px"}},a("intro.scanSubtitle"))]),fe("fa-chevron-right",{color:"var(--sb-text-9)"})]),f("div",{key:"or",style:{display:"flex",alignItems:"center",gap:"12px",marginBottom:"14px"}},[f("span",{key:"a",style:{flex:1,height:"1px",background:"rgba(var(--sb-ink), 0.07)"}}),f("span",{key:"m",style:{fontSize:"11px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"0.7px"}},a("intro.orPasteCode")),f("span",{key:"b",style:{flex:1,height:"1px",background:"rgba(var(--sb-ink), 0.07)"}})]),f("div",{key:"ta",style:{borderRadius:"13px",border:`1px solid ${_t?"rgba(var(--sb-ink), 0.18)":"rgba(var(--sb-ink), 0.07)"}`,background:"var(--sb-surface)",padding:"13px 15px",marginBottom:"12px"}},f("textarea",{dir:"ltr",value:v,onChange:U=>{S(U.target.value),U.target.value.trim().length>0&&typeof ne=="function"&&ne()},rows:3,placeholder:a("intro.pastePlaceholder"),style:{width:"100%",resize:"none",border:"none",outline:"none",background:"transparent",color:"var(--sb-text-3)",fontFamily:We,fontSize:"12.5px",lineHeight:1.6,minHeight:"66px"}})),f("button",{key:"connect",onClick:()=>{Et(),n()},disabled:!_t||d==="connecting",style:{width:"100%",display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"9px",padding:"14px",borderRadius:"13px",border:"none",background:_t&&d!=="connecting"?ke:"rgba(var(--sb-ink), 0.05)",color:_t&&d!=="connecting"?"var(--sb-on-accent)":"var(--sb-text-faint)",fontFamily:"inherit",fontSize:"15px",fontWeight:700,cursor:_t&&d!=="connecting"?"pointer":"not-allowed",boxShadow:_t&&d!=="connecting"?"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)":"none"}},d==="connecting"?a("intro.connecting"):a("intro.connect"))]);let pn="1.0.4",Ln=`https://github.com/SecureBitChat/securebit-desktop/releases/download/v${pn}`,at={mac:{name:"macOS",format:".dmg \xB7 Apple Silicon & Intel",icon:"fab fa-apple",url:`${Ln}/SecureBit.Chat_${pn}_x64.dmg`},win:{name:"Windows",format:".exe \xB7 64-bit installer",icon:"fab fa-windows",url:`${Ln}/SecureBit.Chat_${pn}_x64-setup.exe`},linux:{name:"Linux",format:".AppImage",icon:"fab fa-linux",url:`${Ln}/SecureBit.Chat_${pn}_amd64.AppImage`}},Qt=(()=>{let U=(navigator.userAgent||"")+" "+(navigator.platform||"");return/Mac|iPhone|iPad|iPod/i.test(U)&&!/Android/i.test(U)?"mac":/Win/i.test(U)?"win":/Linux/i.test(U)&&!/Android/i.test(U)?"linux":"win"})(),Tt=["mac","win","linux"].filter(U=>U!==Qt),En=U=>{try{window.open(U,"_blank","noopener")}catch{}},Nt=Le&&f("div",{key:"platmenu",className:"sb-platforms-menu",style:{position:"absolute",insetInlineStart:0,bottom:"calc(100% + 10px)",width:"344px",maxWidth:"100%",borderRadius:"16px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"var(--sb-surface)",boxShadow:"0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))",overflow:"hidden",zIndex:25,animation:"sbUp .2s ease"}},[f("div",{key:"mh",style:{display:"flex",alignItems:"center",gap:"10px",padding:"14px 16px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[f("div",{key:"t",style:{flex:1,lineHeight:1.2}},[f("div",{key:"a",style:{fontSize:"14px",fontWeight:800,color:"var(--sb-text-1)"}},a("dl.title")),f("div",{key:"b",style:{fontSize:"11.5px",color:"var(--sb-text-8)"}},a("dl.free"))]),f("span",{key:"pill",style:{fontFamily:We,fontSize:"10px",fontWeight:600,color:Oe,padding:"3px 8px",borderRadius:"6px",background:"rgba(var(--sb-green-rgb), 0.1)",border:"1px solid rgba(var(--sb-green-rgb), 0.22)"}},a("chat.onWeb"))]),f("div",{key:"rec",style:{padding:"12px 12px 6px"}},f("button",{key:"b",onClick:()=>En(at[Qt].url),style:{width:"100%",display:"flex",alignItems:"center",gap:"12px",padding:"13px 14px",borderRadius:"12px",border:"1px solid rgba(var(--sb-orange-rgb), 0.4)",background:"rgba(var(--sb-orange-rgb), 0.08)",color:"inherit",fontFamily:"inherit",cursor:"pointer",textAlign:"start"}},[f("span",{key:"ic",style:{flex:"none",display:"grid",placeItems:"center",width:"38px",height:"38px",borderRadius:"11px",background:"rgba(var(--sb-orange-rgb), 0.14)",border:"1px solid rgba(var(--sb-orange-rgb), 0.3)",color:Je}},f("i",{className:at[Qt].icon,style:{fontSize:"17px"}})),f("span",{key:"tx",style:{flex:1,minWidth:0}},[f("span",{key:"n",style:{display:"block",fontSize:"13.5px",fontWeight:700,color:"var(--sb-text-1)"}},at[Qt].name),f("span",{key:"f",style:{display:"block",fontSize:"11px",color:"var(--sb-orange-3)",marginTop:"1px"}},`Recommended for this device \xB7 ${at[Qt].format}`)]),fe("fa-download",{color:ke})])),f("div",{key:"others",style:{padding:"0 12px 8px",display:"flex",flexDirection:"column",gap:"2px"}},Tt.map(U=>f("button",{key:U,onClick:()=>En(at[U].url),style:{width:"100%",display:"flex",alignItems:"center",gap:"12px",padding:"11px 14px",borderRadius:"11px",border:"none",background:"transparent",color:"inherit",fontFamily:"inherit",cursor:"pointer",textAlign:"start"}},[f("span",{key:"ic",style:{flex:"none",display:"grid",placeItems:"center",width:"34px",height:"34px",borderRadius:"10px",background:"rgba(var(--sb-ink), 0.04)",border:"1px solid rgba(var(--sb-ink), 0.08)",color:"var(--sb-text-4)"}},f("i",{className:at[U].icon,style:{fontSize:"15px"}})),f("span",{key:"tx",style:{flex:1,minWidth:0}},[f("span",{key:"n",style:{display:"block",fontSize:"13px",fontWeight:600,color:"var(--sb-text-2)"}},at[U].name),f("span",{key:"f",style:{display:"block",fontSize:"11px",color:"var(--sb-text-8)",marginTop:"1px"}},at[U].format)]),fe("fa-download",{color:"var(--sb-text-7)"})]))),f("div",{key:"soon",style:{display:"flex",alignItems:"center",gap:"9px",padding:"12px 16px",borderTop:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(var(--sb-ink), 0.015)"}},[fe("fa-clock",{key:"i",color:"var(--sb-text-9)"}),f("span",{key:"t",style:{fontSize:"11.5px",lineHeight:1.45,color:"var(--sb-text-8)"}},a("dl.soon"))])]),Bn=f("div",{key:"footer",className:"sb-conn-footer",style:{position:"relative",marginTop:"30px",paddingTop:"18px",borderTop:"1px solid rgba(var(--sb-ink), 0.06)",display:"flex",alignItems:"center",justifyContent:"space-between",gap:"12px",flexWrap:"wrap"}},[f("button",{key:"dl",onClick:()=>Ge(U=>!U),style:{display:"inline-flex",alignItems:"center",gap:"9px",paddingBlock:"8px",paddingInlineStart:"9px",paddingInlineEnd:"13px",borderRadius:"10px",border:`1px solid ${Le?"rgba(var(--sb-orange-rgb), 0.4)":"rgba(var(--sb-ink), 0.08)"}`,background:Le?"rgba(var(--sb-orange-rgb), 0.06)":"rgba(var(--sb-ink), 0.02)",color:"inherit",fontFamily:"inherit",cursor:"pointer",transition:"all .15s"}},[fe("fa-download",{key:"i",color:ke}),f("span",{key:"t",style:{fontSize:"12.5px",fontWeight:700,color:"var(--sb-text-2)"}},a("action.downloadDesktop")),fe("fa-chevron-down",{key:"c",color:"var(--sb-text-9)",style:{fontSize:"11px",transform:Le?"rotate(180deg)":"rotate(0deg)",transition:"transform .2s"}})]),f("button",{key:"settings",className:"sb-link",onClick:()=>mt&&mt(!0),style:{display:"inline-flex",alignItems:"center",gap:"7px",background:"none",border:"none",color:"var(--sb-text-7)",fontFamily:"inherit",fontSize:"12.5px",fontWeight:600,cursor:"pointer"}},[fe("fa-sliders-h",{key:"i"}),a("action.advancedSettings")]),Nt]),Er=st&&typeof window<"u"&&window.IceServerSettings?f(window.IceServerSettings,{key:"ice-settings",isOpen:!0,embedded:!0,onClose:()=>mt(!1),initial:{useCustom:Array.isArray(Ce)&&Ce.length>0,serversText:Wt,privacyMode:rt?"relay-only":"standard",persisted:yt},hasSaved:yt,onApply:ft,onForget:ee}):null,Rn=f("div",{key:"right",style:Fe?{flex:1,minWidth:0,width:"100%",position:"relative",overflow:"hidden",display:"flex",flexDirection:"column",height:"100%"}:{flex:"0.95 1 460px",minWidth:"min(100%, 320px)",position:"relative",overflow:"hidden",display:"flex",flexDirection:"column",height:"100vh"}},[f("div",{key:"scroll",className:"custom-scrollbar",style:{flex:1,overflowY:"auto",display:"flex",flexDirection:"column",padding:"42px 44px"}},f("div",{style:{maxWidth:"430px",width:"100%",margin:"auto"}},[f("div",{key:"kicker",style:{fontFamily:We,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1px",marginBottom:"10px"}},Mt),Sn,Ut,Bn])),Er]),_n=Lt&&te&&f("div",{key:"qrmodal",onClick:()=>gt(!1),style:{position:"fixed",inset:0,zIndex:50,display:"flex",alignItems:"center",justifyContent:"center",padding:"32px",background:"rgba(var(--sb-scrim-rgb), 0.82)",backdropFilter:"blur(10px)",animation:"sbUp .2s ease"}},f("div",{onClick:U=>U.stopPropagation(),style:{width:"100%",maxWidth:"460px",borderRadius:"22px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"var(--sb-bg)",boxShadow:"0 30px 90px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))",overflow:"hidden"}},[f("div",{key:"head",style:{display:"flex",alignItems:"center",gap:"11px",padding:"18px 20px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[f("span",{key:"d",style:{width:"9px",height:"9px",borderRadius:"50%",background:Ie}}),f("div",{key:"tx",style:{flex:1,lineHeight:1.2}},[f("div",{key:"t",style:{fontSize:"15.5px",fontWeight:800,color:"var(--sb-text-1)"}},Pe?a("handshake.shareTitle"):a("handshake.sendAnswerTitle")),f("div",{key:"s",style:{fontSize:"12px",color:"var(--sb-text-8)"}},`${Pe?"offer":"answer"} \xB7 one-time`)]),f("button",{key:"x",onClick:()=>gt(!1),style:{width:"32px",height:"32px",display:"grid",placeItems:"center",borderRadius:"9px",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-6)",cursor:"pointer"}},fe("fa-times"))]),f("div",{key:"body",style:{padding:"22px 24px 24px"}},[f("div",{key:"qr",style:{position:"relative",width:"100%",aspectRatio:"1",borderRadius:"18px",overflow:"hidden",background:"#fff",padding:"18px",display:"grid",placeItems:"center"}},f("img",{src:te,alt:a("chatHdr.qrCode"),style:{width:"100%",height:"100%",objectFit:"contain",display:"block"}})),f("div",{key:"ctrls",style:{display:"flex",flexDirection:"column",alignItems:"center",gap:"12px",marginTop:"18px"}},[(H||0)>=1&&f("div",{key:"frame",style:{display:"flex",alignItems:"center",gap:"9px"}},[f("span",{key:"l",style:{fontFamily:We,fontSize:"12px",fontWeight:600,color:"var(--sb-text-6)"}},`Frame ${Math.max(1,re||1)} / ${H||1}`),f("div",{key:"dots",style:{display:"flex",gap:"5px"}},Array.from({length:H||1},(U,Z)=>f("span",{key:Z,style:{width:"7px",height:"7px",borderRadius:"50%",background:Z+1===(re||1)?Ie:"rgba(var(--sb-ink), 0.14)",transition:"background .25s"}})))]),(H||0)>1&&f("div",{key:"nav",style:{display:"flex",alignItems:"center",gap:"6px"}},[f("button",{key:"prev",onClick:j,style:{width:"40px",height:"36px",display:"grid",placeItems:"center",borderRadius:"10px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.04)",color:"var(--sb-text-4)",cursor:"pointer"}},fe("fa-chevron-left")),f("button",{key:"auto",onClick:ue,style:{display:"inline-flex",alignItems:"center",gap:"7px",padding:"9px 18px",borderRadius:"10px",border:`1px solid ${ie?"rgba(var(--sb-ink), 0.1)":"rgba(var(--sb-orange-rgb), 0.45)"}`,background:ie?"rgba(var(--sb-ink), 0.04)":"rgba(var(--sb-orange-rgb), 0.08)",color:ie?"var(--sb-text-6)":Je,fontFamily:"inherit",fontSize:"13px",fontWeight:600,cursor:"pointer"}},ie?"Manual":"Auto"),f("button",{key:"next",onClick:L,style:{width:"40px",height:"36px",display:"grid",placeItems:"center",borderRadius:"10px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.04)",color:"var(--sb-text-4)",cursor:"pointer"}},fe("fa-chevron-right"))]),f("p",{key:"hint",style:{margin:"2px 0 0",textAlign:"center",fontSize:"12px",lineHeight:1.5,color:"var(--sb-text-9)"}},(H||0)>1?a("handshake.qrHintFrames",{frames:H}):a("handshake.qrHint"))])])])),Cn=f("div",{key:"hero",style:{display:"flex",flexWrap:"wrap",minHeight:"100vh",width:"100%",background:"var(--sb-bg)",color:"var(--sb-text-2)"}},[Kt,Rn]),Rr=me&&f(UniqueFeatureSlider,{key:"unique-features-slider"}),zn=me&&f(BecomePartner,{key:"become-partner"}),_r=me&&f(Roadmap,{key:"roadmap"}),Cr=me&&f(DonateCrypto,{key:"donate-crypto"}),In=me&&f(CommunityCTA,{key:"community-cta"}),Xt=f("style",{key:"kf",dangerouslySetInnerHTML:{__html:'@keyframes sbFlowR{0%{left:4%;opacity:0}12%{opacity:1}88%{opacity:1}100%{left:96%;opacity:0}}@keyframes sbFlowL{0%{left:96%;opacity:0}12%{opacity:1}88%{opacity:1}100%{left:4%;opacity:0}}@keyframes sbPulse{0%,100%{transform:translate(-50%,-50%) scale(1);opacity:.5}50%{transform:translate(-50%,-50%) scale(1.5);opacity:0}}@keyframes sbSpin{to{transform:rotate(360deg)}}@keyframes sbUp{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}@keyframes sbNode{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-green-rgb), 0)}50%{box-shadow:0 0 0 6px rgba(var(--sb-green-rgb), .06)}}@keyframes sbScan{0%{top:8%}100%{top:88%}}@keyframes sbBlink{0%,100%{opacity:1}50%{opacity:.35}}@keyframes sbTrav{0%{offset-distance:0%;opacity:0}15%{opacity:1}80%{opacity:1}100%{offset-distance:100%;opacity:0}}@keyframes sbRing1{0%,24%{r:5;opacity:0}26%{opacity:.8}34%{r:22;opacity:0}100%{r:22;opacity:0}}@keyframes sbRing2{0%,54%{r:5;opacity:0}56%{opacity:.8}64%{r:22;opacity:0}100%{r:22;opacity:0}}@keyframes sbIn1{0%,24%{opacity:0}27%{opacity:1}100%{opacity:1}}@keyframes sbIn2{0%,54%{opacity:0}57%{opacity:1}100%{opacity:1}}@keyframes sbRow0{0%,4%{opacity:0;transform:translateY(4px)}8%{opacity:1;transform:none}100%{opacity:1;transform:none}}@keyframes sbRow1{0%,25%{opacity:0;transform:translateY(4px)}29%{opacity:1;transform:none}100%{opacity:1;transform:none}}@keyframes sbRow2{0%,55%{opacity:0;transform:translateY(4px)}59%{opacity:1;transform:none}100%{opacity:1;transform:none}}@media (prefers-reduced-motion: reduce){.sb-start [style*="sbTrav"],.sb-start [style*="sbRing"]{animation:none!important;opacity:0!important}.sb-start [style*="sbIn1"],.sb-start [style*="sbIn2"],.sb-start [style*="sbRow0"],.sb-start [style*="sbRow1"],.sb-start [style*="sbRow2"]{animation:none!important;opacity:1!important;transform:none!important}}'}});return Fe?f("div",{className:"sb-start",style:{flex:1,minHeight:0,width:"100%",display:"flex",flexDirection:"column",background:"var(--sb-bg)",color:"var(--sb-text-2)"}},[Xt,Rn,_n]):f("div",{className:"sb-start",style:{width:"100%"}},[Xt,Cn,Rr,zn,_r,Cr,In,_n])};function Jo(t){let e=!1;try{e=new URLSearchParams(window.location.search).get("vvdebug")==="1"}catch{return null}if(!e)return null;let n=document.createElement("div");n.setAttribute("data-sb-vvdebug",""),n.style.cssText="position:fixed;top:0;left:0;z-index:2147483647;max-width:100vw;padding:6px 8px;font:600 10.5px/1.45 ui-monospace,SFMono-Regular,Menlo,monospace;white-space:pre;color:#fff;background:#000;pointer-events:none;",document.body.appendChild(n);let r=(()=>{let d=document.querySelector('script[src*="dist/app.js"]');return d&&String(d.getAttribute("src")||"").split("?v=")[1]||"?"})(),i=()=>{let d=document.querySelector(".sb-app-shell"),h=d?getComputedStyle(d):null,m=d?d.getBoundingClientRect():null,v=getComputedStyle(document.documentElement);n.textContent=["build "+r,"innerH "+window.innerHeight+"  scrollY "+Math.round(window.scrollY),"vv h "+(t?Math.round(t.height):"\u2014")+"  top "+(t?Math.round(t.offsetTop):"\u2014")+"  scale "+(t?t.scale.toFixed(2):"\u2014"),"var vh "+v.getPropertyValue("--sb-vh").trim()+"  vvtop "+v.getPropertyValue("--sb-vv-top").trim(),"shell "+(d?h.position+" h"+Math.round(m.height)+" y"+Math.round(m.top):"ABSENT")].join(`
-`),n.style.transform="translate3d(0,"+(t?Math.round(t.offsetTop):0)+"px,0)"};i();let c=setInterval(i,200);return()=>{clearInterval(c),n.remove()}}var Zo=t=>()=>{if(t&&t.current){let e=()=>{t.current&&t.current.scrollTo({top:t.current.scrollHeight,behavior:wr()})};e(),setTimeout(e,50),setTimeout(e,150),setTimeout(e,300),requestAnimationFrame(()=>{setTimeout(e,100)})}},ta=async t=>{let e=null;try{t&&window.EnhancedSecureCryptoUtils&&(e=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(t))}catch{}if(!e){alert(`Security verification in progress\u2026
-Please wait for real-time cryptographic verification to complete.`);return}let n="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",r=O=>String(O).replace(/[&<>"]/g,$=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;"})[$]),i=e.color==="orange"?"var(--sb-orange-solid)":e.color==="yellow"?"var(--sb-yellow-solid)":e.color==="red"?"var(--sb-red-solid)":"var(--sb-green-solid)",c=e.color==="orange"?"var(--sb-orange)":e.color==="yellow"?"var(--sb-yellow)":e.color==="red"?"var(--sb-red)":"var(--sb-green)",d=e.color==="orange"?"var(--sb-orange-rgb)":e.color==="yellow"?"var(--sb-yellow-rgb)":e.color==="red"?"var(--sb-red-rgb)":"var(--sb-green-rgb)",h=Math.max(0,Math.min(100,Math.round(e.score||0))),m=2*Math.PI*56,v=`${(m*Math.min(1,h/100)).toFixed(1)} ${m.toFixed(1)}`,S=String(e.level||"SECURE").toUpperCase(),p=e.isRealData!==!1,k=e.verificationResults?Object.entries(e.verificationResults):[],y=Number.isFinite(e.passedChecks)?e.passedChecks:k.filter(([,O])=>O&&O.passed).length,I=Number.isFinite(e.totalChecks)?e.totalChecks:k.length,B=new Date(e.timestamp||Date.now()).toLocaleTimeString([],{hour:"2-digit",minute:"2-digit",second:"2-digit",hour12:!1}),N=O=>{let $=a(`secTest.${O}`);return $===`secTest.${O}`?ae(O):$},ae=O=>{let $=String(O).replace(/^verify/i,"").replace(/([a-z0-9])([A-Z])/g,"$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g,"$1 $2").trim();return $=$.replace(/\b(ecdh|ecdsa|aes|gcm|hmac|pfs|sas|mitm|asn|dtls|hkdf|spki|oid|p384)\b/gi,Q=>Q.toUpperCase()),$.charAt(0).toUpperCase()+$.slice(1)},te='<svg width="17" height="17" viewBox="0 0 24 24" fill="none" stroke="var(--sb-green-solid)" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round"><path d="M5 13l4 4 10-11"/></svg>',pe='<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="var(--sb-red-solid)" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round"><path d="M18 6L6 18M6 6l12 12"/></svg>',ve=k.map(([O,$],Q)=>{let H=!!($&&$.passed),re=$&&$.details||(H?a("sec.testPassed"):a("sec.testFailed")),ie=a(`secDetail.${re}`),ue=ie===`secDetail.${re}`?re:ie,L=H?"var(--sb-surface)":"var(--sb-bg)",j=H?"rgba(var(--sb-green-rgb), 0.16)":"rgba(var(--sb-red-rgb), 0.18)",ne=H?"rgba(var(--sb-green-rgb), 0.12)":"rgba(var(--sb-red-rgb), 0.1)",Te=H?"rgba(var(--sb-green-rgb), 0.26)":"rgba(var(--sb-red-rgb), 0.24)",q=H?"var(--sb-text-1)":"var(--sb-text-4)";return`<div style="display:flex; align-items:flex-start; gap:13px; padding:16px 18px; border-radius:14px; background:${L}; border:1px solid ${j}; animation:svIn .3s cubic-bezier(.2,.7,.3,1) both; animation-delay:${(Q*.04).toFixed(2)}s;">
-                        <span style="flex:none; width:34px; height:34px; border-radius:9px; display:grid; place-items:center; background:${ne}; border:1px solid ${Te};">${H?te:pe}</span>
+function qa(t=globalThis.window){return t?.SECUREBIT_DEBUG===!0}function js({targetWindow:t=globalThis.window,webrtcManagerRef:e,onClearData:n,clearConsole:r=()=>{typeof console.clear=="function"&&console.clear()}}){return qa(t)?(t.forceCleanup=()=>{n(),e.current&&e.current.disconnect()},t.clearLogs=r,t.webrtcManagerRef=e,()=>{delete t.forceCleanup,delete t.clearLogs,delete t.webrtcManagerRef}):()=>{}}var Ya="securebit-net";var ts="ice-device-key",rs="ice-settings";function ss(){return typeof indexedDB<"u"&&typeof crypto<"u"&&!!crypto.subtle}function is(){return new Promise((t,e)=>{let n;try{n=indexedDB.open(Ya,1)}catch(r){e(r);return}n.onupgradeneeded=()=>{let r=n.result;r.objectStoreNames.contains("kv")||r.createObjectStore("kv")},n.onsuccess=()=>t(n.result),n.onerror=()=>e(n.error)})}function ns(t,e){return new Promise((n,r)=>{let c=t.transaction("kv","readonly").objectStore("kv").get(e);c.onsuccess=()=>n(c.result),c.onerror=()=>r(c.error)})}function $s(t,e,n){return new Promise((r,i)=>{let c=t.transaction("kv","readwrite");c.objectStore("kv").put(n,e),c.oncomplete=()=>r(),c.onerror=()=>i(c.error)})}function Ka(t,e){return new Promise((n,r)=>{let i=t.transaction("kv","readwrite");i.objectStore("kv").delete(e),i.oncomplete=()=>n(),i.onerror=()=>r(i.error)})}async function Qa(t){let e=await ns(t,ts);if(e instanceof CryptoKey)return e;let n=await crypto.subtle.generateKey({name:"AES-GCM",length:256},!1,["encrypt","decrypt"]);return await $s(t,ts,n),n}async function qs(t){if(!ss())throw new Error("Persistent storage is not available in this browser");let e=await is(),n=await Qa(e),r=JSON.stringify({version:1,servers:Array.isArray(t?.servers)?t.servers:[],privacyMode:t?.privacyMode==="relay-only"?"relay-only":"standard"}),i=crypto.getRandomValues(new Uint8Array(12)),c=await crypto.subtle.encrypt({name:"AES-GCM",iv:i},n,new TextEncoder().encode(r));await $s(e,rs,{iv:Array.from(i),data:Array.from(new Uint8Array(c))})}async function Ys(){if(!ss())return null;try{let t=await is(),e=await ns(t,rs);if(!e||!Array.isArray(e.iv)||!Array.isArray(e.data))return null;let n=await ns(t,ts);if(!(n instanceof CryptoKey))return null;let r=await crypto.subtle.decrypt({name:"AES-GCM",iv:new Uint8Array(e.iv)},n,new Uint8Array(e.data)),i=JSON.parse(new TextDecoder().decode(r));return{servers:Array.isArray(i.servers)?i.servers:[],privacyMode:i.privacyMode==="relay-only"?"relay-only":"standard"}}catch{return null}}async function as(){if(ss())try{let t=await is();await Ka(t,rs)}catch{}}var Xa="/api/turn-credentials",Xs=["turn.securebit.chat","144.172.96.126"];var Ks=[6e4,3e5,9e5];function Js(t){let e=/^turns?:([^:?\s]+)/i.exec(String(t||"").trim());return e?e[1].toLowerCase():null}function Ja(t){return!t||typeof t!="object"?!1:(Array.isArray(t.urls)?t.urls:[t.urls]).some(n=>Xs.includes(Js(n)))}function rr(t){if(typeof t!="string"||t.length===0||t.length>512)return!1;for(let e=0;e<t.length;e++){let n=t.charCodeAt(e);if(n<32||n===127)return!1}return!0}function Za(t,e){if(!Array.isArray(t)||!e||!rr(e.username)||!rr(e.credential))return!1;let n=!1;for(let r of t)Ja(r)&&(r.username=e.username,r.credential=e.credential,n=!0);if(!n&&Array.isArray(e.urls)){let r=e.urls.filter(i=>rr(i)&&Xs.includes(Js(i)));r.length>0&&(t.push({urls:r,username:e.username,credential:e.credential}),n=!0)}return n}function eo(t,e){let n=t&&Array.isArray(t.iceServers)?t.iceServers[0]:null;if(!n||!rr(n.username)||!rr(n.credential))return null;let r=Number(String(n.username).split(":")[0]);if(!Number.isFinite(r)||r<=e)return null;let i=Number(t.ttl);return{urls:Array.isArray(n.urls)?n.urls.slice(0,8):[],username:n.username,credential:n.credential,expiry:r,ttl:Number.isFinite(i)&&i>0?i:r-e}}var Qs=!1;function Zs(t={}){if(Qs||typeof window>"u"||typeof fetch!="function")return;Qs=!0;let e=t.getList||(()=>window.SECUREBIT_ICE_SERVERS),n=0,r=0,i=null,c=0,d=m=>{i&&clearTimeout(i),i=setTimeout(h,m)};async function h(){i=null;try{let m=await fetch(Xa,{method:"POST",cache:"no-store",credentials:"omit"});if(!m.ok)throw new Error(`HTTP ${m.status}`);let v=eo(await m.json(),Date.now()/1e3);if(!v)throw new Error("unusable response");Za(e(),v),n=v.expiry,r=v.ttl,c=0,d(Math.max(60,r/2)*1e3)}catch{let v=Ks[Math.min(c,Ks.length-1)];c++,d(v)}}document.addEventListener("visibilitychange",()=>{if(document.visibilityState!=="visible")return;let m=Date.now()/1e3;(!n||n-m<r/2)&&h()}),h()}var Wn=["en","de","fr","es","uk","ru","zh","ko","hi","ar","he","fa","ur"],_r={en:{htmlLang:"en",nativeName:"English",abbr:"EN",dir:"ltr",path:"/"},de:{htmlLang:"de",nativeName:"Deutsch",abbr:"DE",dir:"ltr",path:"/de/"},fr:{htmlLang:"fr",nativeName:"Fran\xE7ais",abbr:"FR",dir:"ltr",path:"/fr/"},es:{htmlLang:"es",nativeName:"Espa\xF1ol",abbr:"ES",dir:"ltr",path:"/es/"},uk:{htmlLang:"uk",nativeName:"\u0423\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u0430",abbr:"UK",dir:"ltr",path:"/uk/"},ru:{htmlLang:"ru",nativeName:"\u0420\u0443\u0441\u0441\u043A\u0438\u0439",abbr:"RU",dir:"ltr",path:"/ru/"},zh:{htmlLang:"zh-Hans",nativeName:"\u7B80\u4F53\u4E2D\u6587",abbr:"ZH",dir:"ltr",path:"/zh/"},ko:{htmlLang:"ko",nativeName:"\uD55C\uAD6D\uC5B4",abbr:"KO",dir:"ltr",path:"/ko/"},hi:{htmlLang:"hi",nativeName:"\u0939\u093F\u0928\u094D\u0926\u0940",abbr:"HI",dir:"ltr",path:"/hi/"},ar:{htmlLang:"ar",nativeName:"\u0627\u0644\u0639\u0631\u0628\u064A\u0629",abbr:"AR",dir:"rtl",path:"/ar/"},he:{htmlLang:"he",nativeName:"\u05E2\u05D1\u05E8\u05D9\u05EA",abbr:"HE",dir:"rtl",path:"/he/"},fa:{htmlLang:"fa",nativeName:"\u0641\u0627\u0631\u0633\u06CC",abbr:"FA",dir:"rtl",path:"/fa/"},ur:{htmlLang:"ur",nativeName:"\u0627\u0631\u062F\u0648",abbr:"UR",dir:"rtl",path:"/ur/"}},ei={en:{"language.suggest.text":"This page is also available in English.","language.suggest.cta":"Read in English","language.suggest.dismiss":"Dismiss"},de:{"language.suggest.text":"Diese Seite gibt es auch auf Deutsch.","language.suggest.cta":"Auf Deutsch lesen","language.suggest.dismiss":"Schlie\xDFen"},fr:{"language.suggest.text":"Cette page est aussi disponible en fran\xE7ais.","language.suggest.cta":"Lire en fran\xE7ais","language.suggest.dismiss":"Fermer"},es:{"language.suggest.text":"Esta p\xE1gina tambi\xE9n est\xE1 disponible en espa\xF1ol.","language.suggest.cta":"Leer en espa\xF1ol","language.suggest.dismiss":"Cerrar"},uk:{"language.suggest.text":"\u0426\u044F \u0441\u0442\u043E\u0440\u0456\u043D\u043A\u0430 \u0442\u0430\u043A\u043E\u0436 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E.","language.suggest.cta":"\u0427\u0438\u0442\u0430\u0442\u0438 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E","language.suggest.dismiss":"\u0417\u0430\u043A\u0440\u0438\u0442\u0438"},ru:{"language.suggest.text":"\u042D\u0442\u0430 \u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u0442\u0430\u043A\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043D\u0430 \u0440\u0443\u0441\u0441\u043A\u043E\u043C.","language.suggest.cta":"\u0427\u0438\u0442\u0430\u0442\u044C \u043F\u043E-\u0440\u0443\u0441\u0441\u043A\u0438","language.suggest.dismiss":"\u0417\u0430\u043A\u0440\u044B\u0442\u044C"},zh:{"language.suggest.text":"\u672C\u9875\u9762\u4E5F\u6709\u7B80\u4F53\u4E2D\u6587\u7248\u672C\u3002","language.suggest.cta":"\u9605\u8BFB\u7B80\u4F53\u4E2D\u6587","language.suggest.dismiss":"\u5173\u95ED"},ko:{"language.suggest.text":"\uC774 \uD398\uC774\uC9C0\uB294 \uD55C\uAD6D\uC5B4\uB85C\uB3C4 \uBCFC \uC218 \uC788\uC2B5\uB2C8\uB2E4.","language.suggest.cta":"\uD55C\uAD6D\uC5B4\uB85C \uBCF4\uAE30","language.suggest.dismiss":"\uB2EB\uAE30"},hi:{"language.suggest.text":"\u092F\u0939 \u092A\u0943\u0937\u094D\u0920 \u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092D\u0940 \u0909\u092A\u0932\u092C\u094D\u0927 \u0939\u0948\u0964","language.suggest.cta":"\u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092A\u0922\u093C\u0947\u0902","language.suggest.dismiss":"\u092C\u0902\u0926 \u0915\u0930\u0947\u0902"},ar:{"language.suggest.text":"\u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062D\u0629 \u0645\u062A\u0648\u0641\u0631\u0629 \u0623\u064A\u0636\u064B\u0627 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629.","language.suggest.cta":"\u0627\u0642\u0631\u0623 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629","language.suggest.dismiss":"\u0625\u063A\u0644\u0627\u0642"},he:{"language.suggest.text":"\u05D4\u05D3\u05E3 \u05D4\u05D6\u05D4 \u05D6\u05DE\u05D9\u05DF \u05D2\u05DD \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA.","language.suggest.cta":"\u05DC\u05E7\u05E8\u05D9\u05D0\u05D4 \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA","language.suggest.dismiss":"\u05E1\u05D2\u05D9\u05E8\u05D4"},fa:{"language.suggest.text":"\u0627\u06CC\u0646 \u0635\u0641\u062D\u0647 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC \u0647\u0645 \u062F\u0631 \u062F\u0633\u062A\u0631\u0633 \u0627\u0633\u062A.","language.suggest.cta":"\u062E\u0648\u0627\u0646\u062F\u0646 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC","language.suggest.dismiss":"\u0628\u0633\u062A\u0646"},ur:{"language.suggest.text":"\u06CC\u06C1 \u0635\u0641\u062D\u06C1 \u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u0628\u06BE\u06CC \u062F\u0633\u062A\u06CC\u0627\u0628 \u06C1\u06D2\u06D4","language.suggest.cta":"\u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u067E\u0691\u06BE\u06CC\u06BA","language.suggest.dismiss":"\u0628\u0646\u062F \u06A9\u0631\u06CC\u06BA"}};var to={"language.label":"Language","language.suggest.text":"This page is also available in English.","language.suggest.cta":"Read in English","language.suggest.dismiss":"Dismiss","theme.label":"Theme","theme.system":"System","theme.light":"Light","theme.dark":"Dark","donate.eyebrow":"Donate in crypto","donate.title":"Keep SecureBit independent","donate.description":"Every donation goes to development and audits.","donate.copy":"Copy","donate.copied":"Copied","donate.net.usdt":"USDT \xB7 Tron (TRC-20)","donate.net.btc":"Bitcoin network","donate.net.eth":"Ethereum mainnet","donate.warn.usdt":"Send only USDT on Tron (TRC-20).","donate.warn.btc":"Send only BTC on the Bitcoin network.","donate.warn.eth":"Send only ETH on Ethereum mainnet.","donate.qrAlt":"QR code of the {coin} donation address","community.title":"Join the future of privacy","community.description":"SecureBit grows thanks to its community. Your ideas and feedback shape the future of secure communication - built in the open, with complete ASN.1 validation end-to-end.","community.github":"GitHub Repository","community.feedback":"Feedback","unique.eyebrow":"What sets us apart","unique.heading":"Why SecureBit is unique","unique.s1.titleTop":"Layered","unique.s1.titleBottom":"encryption core","unique.s1.collapsed":"Encryption core","unique.s1.desc":"ECDH P-384 key exchange, AES-256-GCM payloads, ECDSA signatures and full ASN.1 validation - composed into one hardened pipeline.","unique.s1.tags":["ECDH P-384","AES-256-GCM","ECDSA","ASN.1"],"unique.s2.titleTop":"Pure P2P","unique.s2.titleBottom":"WebRTC","unique.s2.collapsed":"Pure P2P WebRTC","unique.s2.desc":"Messages travel directly between devices over WebRTC. No relay holds your data - the server only helps two peers find each other.","unique.s2.tags":["DTLS 1.3","No relay"],"unique.s3.titleTop":"Perfect","unique.s3.titleBottom":"forward secrecy","unique.s3.collapsed":"Forward secrecy","unique.s3.desc":"Session keys rotate continuously and are discarded after use, so a single compromised key can never unlock past conversations.","unique.s3.tags":["Ephemeral keys","Auto-rotate"],"unique.s4.titleTop":"Traffic","unique.s4.titleBottom":"obfuscation","unique.s4.collapsed":"Traffic obfuscation","unique.s4.desc":"Packet sizes and timing are padded and randomized, hiding metadata patterns from anyone watching the wire.","unique.s4.tags":["Packet padding","Timing jitter"],"unique.s5.titleTop":"Zero data","unique.s5.titleBottom":"collection","unique.s5.collapsed":"Zero data collection","unique.s5.desc":"No accounts, no logs, no message storage. There is nothing on a server to leak, subpoena, or sell.","unique.s5.tags":["No accounts","No logs"],"partners.eyebrow":"Partners & ecosystem","partners.heading":"Trusted by our partners","partners.aegis.desc":"Capital partner securing confidential financial communications across its portfolio.","partners.aegis.role":"Strategic backer","partners.furilabs.desc":"Privacy-first Linux phones that ship SecureBit as a default secure channel.","partners.furilabs.role":"Technology partner","partners.inviteTitle":"Become a partner","partners.inviteDesc":"Building privacy hardware or infrastructure? Let's integrate SecureBit.","partners.inviteCta":"Start a conversation","roadmap.eyebrow":"Development Roadmap","roadmap.heading":"The evolution of SecureBit","roadmap.subheading":"From the first prototype to a quantum-resistant, decentralized network - with complete ASN.1 validation at every layer.","roadmap.progress":"{shipped} of {total} milestones shipped","roadmap.upcoming":"{upcoming} on the way","roadmap.keyFeatures":"Key features","hero.headlineTop":"A direct line","hero.headlineBottom":"only you two can read.","hero.subheading":"Keys are generated on your device and exchanged peer-to-peer. No accounts, no servers storing your messages.","hero.diagramAlt":"A direct encrypted line to one peer, with two more peers joining the mesh","intro.createTitle":"Create a new channel","intro.createDesc":"Your device generates the keys and a one-time invitation. Nothing touches a server.","intro.createCta":"Generate keys & invitation","intro.joinTitle":"Join a channel","intro.joinDesc":"Scan your peer's QR with your camera, or paste their invitation code.","intro.scanTitle":"Scan QR with camera","intro.scanSubtitle":"Fastest - point at your peer's screen","intro.orPasteCode":"Or paste the code","intro.pastePlaceholder":"Paste invitation code here\u2026","intro.connect":"Connect","intro.connecting":"Processing\u2026","roadmap.r1.title":"Start of Development","roadmap.r1.sub":"Idea, prototype, and infrastructure setup","roadmap.r1.date":"Early 2025","roadmap.r1.features":["Concept and requirements formation","Stack selection: WebRTC, P2P, cryptography","First messaging prototypes","Repository creation and CI","Basic encryption architecture","UX/UI design"],"roadmap.r2.title":"Alpha Release","roadmap.r2.sub":"First public alpha: basic chat and key exchange","roadmap.r2.date":"Spring 2025","roadmap.r2.features":["Basic P2P messaging via WebRTC","Simple E2E encryption (demo scheme)","Stable signaling and reconnection","Minimal UX for testing","Feedback collection from early testers"],"roadmap.r3.title":"Security Hardened","roadmap.r3.sub":"Security strengthening and stable branch release","roadmap.r3.date":"Summer 2025","roadmap.r3.features":["ECDH/ECDSA implementation in production","Perfect Forward Secrecy and key rotation","Improved authentication checks","File encryption and large payload transfers","Audit of basic cryptoprocesses"],"roadmap.r4.title":"Scaling & Stability","roadmap.r4.sub":"Network scaling and stability improvements","roadmap.r4.date":"Fall 2025","roadmap.r4.features":["Optimization of P2P connections and NAT traversal","Reconnection mechanisms and message queues","Reduced battery consumption on mobile","Multi-device synchronization support","Monitoring and logging tools for developers"],"roadmap.r5.title":"Privacy-first Release","roadmap.r5.sub":"Focus on privacy: minimizing metadata","roadmap.r5.date":"Winter 2025","roadmap.r5.features":["Metadata protection and fingerprint reduction","Experiments with onion routing and DHT","Options for anonymous connections","Preparation for open code audit","Improved user verification processes"],"roadmap.r6.title":"Enhanced Security Edition","roadmap.r6.sub":"18-layer military-grade cryptography with complete ASN.1 validation","roadmap.r6.date":"Late 2025","roadmap.r6.features":["ECDH + DTLS + SAS triple-layer security","ECDH P-384 + AES-GCM 256-bit encryption","DTLS fingerprint verification","SAS (Short Authentication String) verification","Perfect Forward Secrecy with key rotation","Enhanced MITM attack prevention","Complete ASN.1 DER validation","OID and EC point verification","SPKI structure validation","P2P WebRTC architecture","Metadata protection","100% open source code"],"roadmap.r7.title":"Desktop Edition","roadmap.r7.sub":"Native desktop apps for Windows, macOS, and Linux","roadmap.r7.date":"Early 2026","roadmap.r7.features":["Windows desktop app (Tauri v2)","macOS desktop app (Tauri v2)","Linux AppImage support (Tauri v2)","Real-time notifications","Automatic reconnection","Cross-device synchronization","Improved UX/UI","Support for files up to 100MB"],"roadmap.r8.title":"Secure Voice & Calls","roadmap.r8.sub":"Encrypted voice messages, audio calls, and video calls","roadmap.r8.date":"Early 2026","roadmap.r8.features":["End-to-end encrypted voice messages","1:1 encrypted audio calls (WebRTC)","1:1 encrypted video calls (WebRTC)","Perfect Forward Secrecy for live media","SRTP/DTLS-protected media streams","In-call SAS verification","Call notifications and auto-reconnection","Low-latency P2P media"],"roadmap.r9.title":"Group Communications","roadmap.r9.sub":"Group chats with preserved privacy","roadmap.r9.date":"Now","roadmap.r9.features":["P2P group chats up to 8 participants","Mesh delivery with signed relay fallback","One group safety code, compared by everyone","Commit-then-reveal ceremony against code grinding","Per-group identity keys, ephemeral by design","Signed membership with epoch ordering","Signed messages, so a split transcript is provable","No server, no shared group key, no history"],"roadmap.r10.title":"Mobile Edition","roadmap.r10.sub":"Native mobile apps for iOS and Android","roadmap.r10.date":"Q2 2027","roadmap.r10.features":["iOS native app (Swift/SwiftUI)","Android native app (Kotlin/Jetpack Compose)","PWA support for mobile browsers","Real-time push notifications","Battery optimization","Mobile-optimized UX/UI","Offline message queuing","Biometric authentication"],"roadmap.r11.title":"Quantum-Resistant Edition","roadmap.r11.sub":"Protection against quantum computers","roadmap.r11.date":"Q4 2027","roadmap.r11.features":["Post-quantum cryptography CRYSTALS-Kyber","SPHINCS+ digital signatures","Hybrid scheme: classic + PQ","Quantum-safe key exchange","Updated hashing algorithms","Migration of existing sessions","Compatibility with v5.x","Quantum-resistant protocols"],"roadmap.r12.title":"Decentralized Network","roadmap.r12.sub":"Fully decentralized network","roadmap.r12.date":"2028","roadmap.r12.features":["Node mesh network","DHT for peer discovery","Built-in onion routing","Tokenomics and node incentives","Governance via DAO","Interoperability with other networks","Cross-platform compatibility","Self-healing network"],"roadmap.r13.title":"AI Privacy Assistant","roadmap.r13.sub":"AI for privacy and security","roadmap.r13.date":"2028+","roadmap.r13.features":["Local AI threat analysis","Automatic MITM detection","Adaptive cryptography","Personalized security recommendations","Zero-knowledge machine learning","Private AI assistant","Predictive security","Autonomous attack protection"],"handshake.step1":"Generating ECDH P-384 key pair","handshake.step2":"Deriving verification code","handshake.step3":"Pinning Perfect Forward Secrecy","handshake.securingTitle":"Securing your channel","handshake.answerTitle":"Building your answer","handshake.securingDesc":"Forging keys strong enough to resist tampering.","handshake.shareTitle":"Share your invitation","handshake.sendAnswerTitle":"Send back your answer","handshake.shareDesc":"Show the QR or send the code to your peer. It is one-time and expires shortly.","handshake.sendAnswerDesc":"Give this answer to the channel creator so they can finish the handshake.","handshake.establish":"Establish connection","handshake.thenReceive":"Then receive the answer your peer sends back","handshake.pasteAnswerPlaceholder":"Paste peer's answer code\u2026","handshake.answerSentNote":"Waiting for the creator to connect. The chat opens automatically.","handshake.qrHint":"Keep this open until your peer captures the code.","handshake.qrHintFrames":"The handshake is split across {frames} frames - keep this open until your peer captures all of them.","verify.placeholder":"Type code here","verify.confirm":"Confirm code","verify.confirmed":"Confirmed","verify.pending":"Pending","verify.waiting":"Waiting for code\u2026","sasv.title":"Verify your peer","sasv.titleDone":"Peer verified","sasv.desc":"Read the code aloud over a call or in person. Continue only if your peer sees the same digits.","sasv.descDone":"You both confirmed the same code. The connection is authenticated.","sasv.enter":"Enter the code","sasv.match":"Match","sasv.noMatch":"Doesn't match","sasv.you":"You","sasv.peer":"Peer","sasv.waitingPeer":"Waiting for peer\u2026","sasv.codesDiffer":"Codes don't match","sasv.opening":"Opening secure chat","pwa.bannerTitle":"Install SecureBit.chat","pwa.bannerDesc":"Get the native app experience with enhanced security","pwa.install":"Install","pwa.dismiss":"Dismiss","pwa.close":"Close","pwa.iosTitle":"Install on iOS","pwa.iosStep1":"Tap the Share button","pwa.iosStep1Hint":"Usually at the bottom of Safari","pwa.iosStep2":'Find "Add to Home Screen"',"pwa.iosStep2Hint":"Scroll down in the share menu","pwa.iosStep3":'Tap "Add"',"pwa.iosStep3Hint":"Confirm to install SecureBit.chat","pwa.genericTitle":"Install SecureBit","pwa.genericDesc":"Your browser handles installs its own way. Pick the steps that match yours.","pwa.androidChromeHint":"Tap \u22EE in the top corner, then \u201CInstall app\u201D","pwa.androidOtherHint":"Tap the menu, then \u201CAdd to Home screen\u201D","pwa.gotIt":"Got it","pwa.installedTitle":"App Installed!","pwa.installedIos":"iOS App installed! Open from home screen.","pwa.installedGeneric":"SecureBit.chat is now on your device","pwa.anytimeTitle":"Install Anytime","pwa.anytimeDesc":"You can still install SecureBit.chat from your browser's menu for the best experience.","pwa.ok":"OK","step.open":"Step 1 \xB7 open a channel","step.exchange":"Step 2 \xB7 exchange","step.verification":"Step 3 \xB7 verification","action.create":"Create","action.join":"Join","action.back":"Back","action.copy":"Copy","action.copied":"Copied","action.scan":"Scan","action.downloadDesktop":"Download desktop app","action.advancedSettings":"Advanced settings","cred.reveal":"Click to reveal - keep this code private","cred.orCopy":"Or copy the code","qr.title":"Scan QR code","qr.subtitle":"Point your camera at their QR","qr.scanning":"Scanning\u2026","qr.hint":"Hold steady until all parts are captured. Camera access is local - nothing is uploaded.","mesh.you":"you","mesh.peer":"peer \xB7 session 1","mesh.joined2":"mara joined \xB7 +2","mesh.joined3":"tobi joined \xB7 +3","ice.title":"Network settings","ice.subtitle":"Configured locally - never shared with your peer","ice.intro":"SecureBit uses public STUN servers by default to negotiate the peer-to-peer link. Point it at your own STUN/TURN if you self-host.","ice.publicTitle":"Public servers (default)","ice.publicDesc":"Zero-config. Good for most users.","ice.customTitle":"My own STUN/TURN servers","ice.customDesc":"Up to {max} servers.","ice.turnNote":"A TURN relay sees both peers' IP and traffic timing - but never message contents, which stay end-to-end encrypted. Prefer ","ice.turnNoteTls":" (TLS).","ice.test":"Test servers","ice.testing":"Testing\u2026","ice.relayTitle":"Relay-only mode","ice.relayBadge":"MAX PRIVACY","ice.relayDesc":"Routes all traffic through TURN so your IP is never exposed to the peer. Requires a TURN server.","ice.relayWarning":"Relay-only is enabled but no TURN server is configured. The connection will not be able to start.","ice.persist":"Save on this device","ice.persistDesc":"Stored encrypted in this browser. Leave off to use only for this session.","ice.forget":"Forget saved","ice.cancel":"Cancel","ice.apply":"Apply","ice.errUnavailable":"WebRTC is not available in this browser","ice.errInvalid":"Invalid server configuration","update.title":"Update available","update.desc":"A newer version of SecureBit has been detected.","update.currentVersion":"Current version","update.newVersion":"New version","update.now":"Update now","update.later":"Later","update.unknown":"N/A","update.stepSaving":"Saving data...","update.stepSwCaches":"Clearing Service Worker caches...","update.stepSwUnregister":"Unregistering Service Workers...","update.stepBrowserCache":"Clearing browser cache...","update.stepVersion":"Updating version...","update.stepReload":"Reloading application...","update.error":"Update error. Please refresh the page manually (Ctrl+F5 or Cmd+Shift+R)","update.confirmSkip":"New version available. Update is recommended for security and stability. Continue without update?","offline.backOnline":"Back online","offline.mode":"Offline mode","offline.dismiss":"Dismiss","offline.lostTitle":"Connection lost","offline.lostDesc":"SecureBit is now in offline mode. Some features are limited, but your data stays safe.","offline.point1":"Your session and keys are preserved","offline.point2":"No data is stored on servers","offline.point3":"Messages & files sync when you reconnect","offline.continue":"Continue offline","offline.restoredTitle":"When you reconnect","offline.restoredDesc":"A dropped connection costs you nothing. SecureBit queues everything locally and resumes the encrypted session the instant you're back online.","offline.r1Title":"Your messages get delivered","offline.r1Desc":"Everything you wrote while offline is sent to your contact automatically.","offline.r2Title":"Files finish transferring","offline.r2Desc":"Uploads resume from where they stopped - no need to resend.","offline.r3Title":"Their messages & files arrive","offline.r3Desc":"Whatever your contact sent during the outage is delivered to you in order.","offline.r4Title":"Nothing is lost","offline.r4Desc":"After reconnect there's no gap - the conversation continues exactly where it paused.","offline.gotIt":"Got it","qr.showTitle":"Show QR code","qr.showSubtitle":"Full-screen \xB7 let your peer scan","qr.showSubtitleFrames":"Full-screen \xB7 let your peer scan all {frames} frames","notify.enabledBody":"Notifications enabled! You will receive alerts for new messages.","notify.workingBody":"Notifications are working! You will receive alerts for new messages.","pw.label":"Password input","pw.placeholder":"Enter password...","pw.decrypt":"Decrypt","pw.cancel":"Cancel","file.title":"File transfers","file.drop":"Drag & drop files here","file.dropHint":"Encrypted end-to-end before transfer \xB7 up to 100 MB","file.browse":"Browse device","file.incoming":"Incoming file request","file.accept":"Accept","file.reject":"Reject","file.download":"Download","file.notReady":"Connection not ready","file.tooLarge":"File too large","file.typeNotAllowed":"File type not allowed","file.maxConcurrent":"Maximum concurrent transfers","file.gone":"This file is no longer available for download.","call.incoming":"Incoming call","call.incomingVideo":"Incoming video call","call.encrypted":"Encrypted call","call.encryptedShort":"Encrypted","call.peer":"Secure peer","call.connecting":"Connecting\u2026","call.ringing":"Ringing\u2026","call.accept":"Accept","call.decline":"Decline","call.end":"End call","call.camera":"Camera","call.cameraOff":"Camera off","call.peerCameraOff":"Peer's camera is off","call.flipCamera":"Flip camera","call.addVideo":"Add video","call.video":"Video","call.muted":"Muted","call.expand":"Expand","call.minimize":"Minimize","call.quality":"Connection quality","call.qualityExcellent":"Excellent","call.videoPrefix":"Video \xB7 ","call.voicePrefix":"Voice \xB7 ","group.new":"New group","group.create":"Create group","group.join":"Join group","group.name":"Group name","group.nameTooLong":"The group name is too long.","group.capacity":"Up to {max} people, peer to peer. Everyone will compare one safety code before the group opens.","group.invite":"Invite","group.inviteMore":"Invite more members","group.invitePeople":"Invite {count} people","group.invitation":"Group invitation","group.addMembers":"Add members","group.roomFor":"Room for {remaining} more. Everyone will compare a new group code once they join.","group.membersCount":"{count} members","group.member":"Member","group.members":"Members","group.remove":"Remove {name}","group.message":"Message {name}","group.leave":"Leave","group.leaveThis":"Leave this group","group.cancel":"Cancel group","group.close":"Close","group.cancelBtn":"Cancel","group.decline":"Decline","group.working":"Working\u2026","group.sasTitle":"Group safety code","group.sasEveryone":"Everyone sees this code","group.sasCompare":"Compare the group code with every member to open this group.","group.sasReadAloud":"Read these digits aloud to ","group.sasWarning":"If even one member reads a different code, someone is sitting between you. Cancel the group - do not confirm.","group.confirmFirst":"Confirm the group code first","group.codeSuffix":" \xB7 code {code}","group.exchangingNonces":"Exchanging nonces\u2026","group.waitingCommit":"Waiting for every member to commit\u2026","group.waitingJoin":"Waiting for the other members to join\u2026","group.emptyChat":"Nothing here yet. Messages are signed by their sender and travel over each member's own encrypted link.","group.noVerified":"No verified chats yet. Open a 1:1 chat and compare its safety code first - a group is built out of connections you have already checked.","group.noMoreToAdd":"No other verified chats to add. Open a 1:1 chat and compare its safety code first.","group.directLink":"Direct peer-to-peer link","group.noDirectLink":"No direct link yet - messages are relayed by another member while one is being built","group.relayNote":"Some members have no direct link to you yet. Their messages travel through another member, who can see that you are talking but cannot read past the signature or change what you said. The group keeps trying to connect them directly.","group.relayOnlyOff":"Relay-only mode is off, so each member connects to you directly and learns your IP address - including members somebody else invited. Turn it on in network settings if that matters here.","group.memberOffline":"{name} is offline and will not receive messages. They are still a member - removing them re-keys the group.","group.joinNote":"Other members will learn your presence in this group. There is no message history to catch up on - a group starts empty.","group.inviteSentNote":"The group keeps working until they accept. There is no history for them to catch up on - they will only see what is sent from now on.","group.errNotCreated":"Group not created","group.errNobodyAccepted":"Nobody accepted the invitation in time.","group.errNothingSent":"Nothing was sent and nothing was verified. Close this and try again once everyone is connected.","group.errNotFormed":"This group could not be formed.","group.errFull":"This group is full.","group.errInviteFailed":"The invitation could not be sent - that chat is not connected.","group.errNoMemberList":"The group owner never sent the member list.","group.errUnsignedList":"The member list was not signed by the group owner. Do not retry - tell them.","group.errNotOwner":"Someone other than the group owner tried to change the members.","hdr.tagline":"End-to-end encrypted","hdr.netSettings":"Advanced network settings","hdr.netSettingsTitle":"Advanced network settings (STUN/TURN)","hdr.disconnect":"Disconnect","status.connected":"Connected","status.connecting":"Connecting...","status.notConnected":"Not connected","status.reconnecting":"Reconnecting...","status.retrying":"Retrying...","status.verifying":"Verifying...","status.peerDisconnected":"Peer disconnected","sec.replayProtection":"Replay Protection","sec.messageIntegrity":"Message Integrity (HMAC)","sec.forwardSecrecy":"Perfect Forward Secrecy","sec.metadataProtection":"Metadata Protection","sec.trafficObfuscation":"Traffic Obfuscation","sec.realTests":"Real Cryptographic Tests","sec.simulatedData":"Simulated Data","sec.testPassed":"Test passed","sec.testFailed":"Test failed or unavailable","sec.verificationDone":"Real cryptographic verification completed","sec.verificationInProgress":"Security verification in progress...","sec.verificationWait":`Security verification in progress...
+Please wait for real-time cryptographic verification to complete.`,"sec.verificationUnavailable":"Security verification not available","chat.placeholder":"Type an encrypted message\u2026","chat.send":"Send message","chat.sendFiles":"Send files","chat.hideFiles":"Hide files","chat.recordVoice":"Record voice message","chat.sendVoice":"Send voice message","chat.discard":"Discard","chat.codeBlock":"Send as a code block (expands the input)","chat.codeHint":"Code snippet \xB7 formatting preserved \xB7 \u2318\u21B5 to send","chat.viewOnce":"View once","chat.viewOnceTitle":"View once - vanishes after the peer reads it","chat.viewOncePrefix":"View once \xB7 ","chat.viewOnceTap":"View once \xB7 tap to reveal","chat.viewedOnce":"Viewed once","chat.disappearing":"Disappearing message - deletes on both sides","chat.disappearAfter":"Disappear after","chat.visibleFor":"Visible for","chat.timerPrefix":"Timer \xB7 ","chat.expired":"This message has expired","chat.deleteForEveryone":"Delete for everyone","chat.sending":"Sending","chat.delivered":"Delivered","chat.notSent":"Not sent","chat.notSentReason":"Not sent - the secure channel is not ready. Reconnect to continue.","chat.encrypted":"Encrypted","chat.decrypted":"Decrypted","chat.encryptedOnDevice":"Encrypted on your device","chat.uploading":"Uploading","chat.downloading":"Downloading","chat.transferring":"Transferring\u2026","chat.copied":"Copied!","chat.collapse":"Collapse","chat.closeMenu":"Close menu","chat.newChat":"New chat","chat.newGroup":"New group","chat.createGroup":"Create a group","chat.groupChats":"Group chats","chat.secureChat":"Secure chat","chat.nameThis":"Name this chat","chat.rename":"Rename chat (local only)","chat.renameHint":"Double-click to rename","chat.localLabel":"Local label \xB7 stored only on this device","chat.setStatus":"Set your status","chat.yourStatusPrefix":"Your status - ","chat.meshHint":"Up to 8 peers \xB7 P2P mesh","chat.offline":"Offline","chat.noNetwork":"No network \xB7 reconnecting","chat.startVoiceCall":"Start encrypted voice call","chat.startVideoCall":"Start encrypted video call","chat.verifyForCalls":"Verify the session to enable calls","chat.e2eeNote":"Every message is end-to-end encrypted on your device before it leaves.","chat.peersOnly":"Sent end-to-end to connected peers only - never stored on a server.","flow.invitationCreated":"Secure invitation created","flow.invitationCreatedBang":"Secure invitation created and encrypted!","flow.responseCreated":"Secure response created","flow.responseCreatedBang":"Secure response created!","flow.sendInvitation":"Send the invitation code to your interlocutor via a secure channel (voice call, SMS, etc.).","flow.sendResponse":"Send the response code to the initiator via a secure channel or let them scan the QR code below.","flow.sendEncryptedCode":"Send the encrypted code","flow.sendTheResponse":"Send the response","flow.pasteOrWrite":"Paste or write code\u2026","flow.processingInvitation":"Processing the secure invitation...","flow.processingResponse":"Processing the secure response...","flow.finalizing":"Finalizing the secure connection...","flow.channelEstablished":"Secure channel established","flow.channelReady":"Secure channel is ready","flow.restoring":"Restoring connection\u2026","flow.invitationCaptured":"Invitation captured.","err.needInvitation":"You need to insert the invitation code from your interlocutor.","err.needResponse":"You need to insert the response code from your interlocutor.","err.responseFormat":"Invalid response format - please check the code","err.responseNoKey":"Invalid response code - missing or corrupted cryptographic key. Please check the code and try again.","err.responseNoSignKey":"Invalid response code - missing signature verification key. Please check the code and try again.","err.responseOutdated":"Response data is outdated - please use a fresh invitation","err.setupError":"Connection setup error","err.notReady":"Connection not ready","err.securityBreach":"Security breach detected - connection rejected","err.securityValidation":"Security validation failed - possible attack detected","err.retiredQr":"This QR code uses a retired format that could not transfer the invitation. Ask your peer to generate a new one, or use copy/paste.","err.compressedQrNote":"Compressed QR may omit SDP for brevity. Use copy/paste if connection fails.","err.inviteNotConnected":"The invitation could not be sent. That chat is not connected right now.","err.inviteNotConnectedRetry":"The invitation could not be sent. That chat is not connected right now - reopen it and try again.","err.nobodyAccepted":"Nobody accepted the invitation. The group is unchanged.","err.noAudio":"No audio captured - check microphone permission and try again.","err.voiceNeedsConnection":"Voice message needs an active secure connection. Reconnect and try again.","err.voiceRestoring":"Restoring the connection - try sending the voice message again in a moment.","err.fileTooLarge":"File too large","sas.safetyNumber":"Safety number","sas.incorrect":"Incorrect code. Check it with your peer and try again.","sas.noMatch":"The codes do not match","sas.makeSure":"Make sure the codes match exactly.","sas.tooManyAttempts":"Too many incorrect attempts. Session reset for safety.","sas.verificationFailed":"Verification failed","sas.verified":"Verified \xB7 Perfect Forward Secrecy","sas.runVerification":"Run security verification","sec.panelTitle":"Network & crypto details","sec.security":"Security","sec.transport":"Transport","sec.keyExchange":"Key exchange","sec.allEnabled":"All security features enabled by default","sec.realTimeNote":"Real-time verification using actual cryptographic functions - no mock data.","sec.simulatedWarning":"Warning: connection may not be fully established - values may be simulated.","dl.title":"Download SecureBit","dl.free":"Free \xB7 open source","dl.soon":"Mobile (iOS, Android) and browser extensions (Chrome, Firefox, Opera) are coming soon.","chatHdr.chat":"Chat","chatHdr.chats":"Chats","chatHdr.newChat":"+ New","chatHdr.secure":"Secure","chatHdr.p2pSub":"P2P \xB7 end-to-end encrypted","chatHdr.save":"Save","chatHdr.close":"Close","chatHdr.expand":"Expand","chatHdr.you":"You","chatHdr.qrCode":"QR code","chat.disconnected":"Disconnected","call.mute":"Mute","call.endShort":"End","group.add":"Add","group.send":"Send","sec.pfsShort":"Perfect Forward Secrecy","sec.cipher":"Cipher","chat.close":"Close","file.needConnection":"File transfer needs an open connection","presence.available":"Available","presence.away":"Away","presence.busy":"Busy","presence.offline":"Offline","presence.invisible":"Invisible","presence.availableDesc":"Online and reachable","presence.awayDesc":"Idle \xB7 stepped away","presence.busyDesc":"Do not disturb","presence.invisibleDesc":"Appear offline to peers","presence.online":"Online","conn.p2p":"P2P \xB7 connected","conn.verifying":"Verifying\u2026","conn.connecting":"Connecting\u2026","conn.reconnecting":"Reconnecting\u2026","conn.peerDisconnected":"Peer disconnected","conn.disconnected":"Disconnected","chat.defaultLabel":"Chat","groupPhase.forming":"Forming\u2026","groupPhase.commitments":"Exchanging commitments\u2026","groupPhase.revealing":"Revealing\u2026","groupPhase.compare":"Compare the group code","groupPhase.ready":"Group ready","groupPhase.failed":"Group failed","call.qualityGood":"Good","call.qualityFair":"Fair","call.qualityWeak":"Weak","msg.code":"Code","msg.timer":"Timer","msg.voice":"Voice","msg.play":"Play","msg.sent":"Sent","msg.read":"Read","report.title":"Real-time security verification","report.active":"Active","report.testsPassed":"Tests passed","report.verifiedAt":"Verified at","report.source":"Source","secTest.verifyECDHKeyExchange":"ECDH key exchange","secTest.verifyECDSASignatures":"ECDSA digital signatures","secTest.verifyEncryption":"AES-GCM encryption","secTest.verifyMessageIntegrity":"Message integrity","secTest.verifyPerfectForwardSecrecy":"Perfect forward secrecy","secTest.verifyPFS":"Perfect forward secrecy","secTest.verifyReplayProtection":"Replay protection","secTest.verifyDTLSFingerprint":"DTLS fingerprint","secTest.verifySASVerification":"SAS verification","secTest.verifyMetadataProtection":"Metadata protection","secTest.verifyTrafficObfuscation":"Traffic obfuscation","secTest.verifyPacketPadding":"Packet padding","secTest.verifyNestedEncryption":"Nested encryption","secTest.verifyNonExtractableKeys":"Non-extractable keys","secTest.verifyRateLimiting":"Rate limiting","secTest.verifyMutualAuth":"Mutual authentication","secTest.verifyAuthProof":"Authentication proof","secTest.verifyEnhancedValidation":"Enhanced validation","secTest.verifyAdvancedFeatures":"Advanced features","secTest.verifySignature":"Signature check","secDetail.Security system initializing...":"Security system initializing...","secDetail.Nested encryption active":"Nested encryption active","secDetail.Nested encryption failed":"Nested encryption failed","secDetail.Packet padding active":"Packet padding active","secDetail.Packet padding failed":"Packet padding failed","secDetail.Advanced features active":"Advanced features active","secDetail.Advanced features failed":"Advanced features failed","secDetail.No encryption key available":"No encryption key available","secDetail.AES-GCM encryption/decryption working correctly":"AES-GCM encryption/decryption working correctly","secDetail.No ECDH key pair available":"No ECDH key pair available","secDetail.Key derivation failed":"Key derivation failed","secDetail.No ECDSA key pair available":"No ECDSA key pair available","secDetail.ECDSA digital signatures working correctly":"ECDSA digital signatures working correctly","secDetail.MAC key not available or invalid":"MAC key not available or invalid","secDetail.Rate limiter did not block a message over the limit":"Rate limiter did not block a message over the limit","secDetail.Rate limiter is not available":"Rate limiter is not available","secDetail.Replay protection is working correctly":"Replay protection is working correctly","secDetail.Replay protection not enabled":"Replay protection not enabled","secDetail.SAS code not available":"SAS code not available","secDetail.SAS verification code is valid and available":"SAS verification code is valid and available","secDetail.Traffic obfuscation is working correctly":"Traffic obfuscation is working correctly","secDetail.Traffic obfuscation not enabled":"Traffic obfuscation not enabled","secDetail.No non-extractable ephemeral ECDH key pair for this session":"No non-extractable ephemeral ECDH key pair for this session","secDetail.Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation":"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation","msg.pause":"Pause","msg.failed":"Failed","groupErr.timeout":"A member stopped responding before the code was ready.","groupErr.keyMismatch":"A member's key did not match the identity claimed for it.","groupErr.revealMismatch":"A member's revealed value did not match what they committed to.","groupErr.commitChanged":"A member changed their commitment part-way through.","groupErr.missingKey":"A member was listed whose key never arrived.","groupErr.outsider":"A frame arrived from someone outside the group.","groupErr.limit":"A group is limited to eight members.","groupErr.tooLarge":"A message was too large to send to the group.","fileType.text":"Plain text","fileType.images":"Images","fileType.archives":"Archives","fileType.voice":"Voice messages","fileType.unsupported":"Unsupported","qrScan.title":"Scan QR Code","qrScan.auto":"Auto Mode","qrScan.reset":"Reset","qrScan.autoScroll":"Auto-scrolling enabled","qrScan.starting":"Starting camera...","qrScan.point":"Point camera at QR code","qrScan.tapFocus":"Tap screen to focus","qrScan.focusing":"Focusing...","iceErr.notArray":"Server list must be an array","iceErr.invalidJson":"Invalid JSON","iceErr.tooMany":"Too many servers (max {max})","iceErr.invalidEntry":"{label}: invalid entry","iceErr.urlCount":"{label}: between 1 and {max} URLs required","iceErr.turnCreds":"{label}: TURN servers usually require a username and credential","iceUrl.notString":"URL must be a string","iceUrl.empty":"URL is empty","iceUrl.tooLong":"URL is too long","iceUrl.badChars":"URL contains invalid characters","iceUrl.badScheme":"URL must start with stun:, stuns:, turn: or turns:","iceUrl.badQuery":"URL has an invalid query","iceUrl.noHost":"URL is missing a host","iceUrl.badHost":"URL has an invalid host or port","iceUrl.badTransport":"URL query must be transport=udp or transport=tcp","msg.off":"Off","file.consentUnavailable":"User consent unavailable","secLevel.MAXIMUM":"MAXIMUM","secLevel.INITIALIZING":"INITIALIZING","secLevel.ERROR":"ERROR","secLevel.UNKNOWN":"UNKNOWN","status.error":"Error","offline.disconnect":"Disconnect","offline.learnMore":"Learn more","pwa.installApp":"Install App","chat.onWeb":"You're on Web","groupCall.startVoice":"Start a group voice call","groupCall.startVideo":"Start a group video call","groupCall.join":"Join","groupCall.dismiss":"Not now","groupCall.leave":"Leave call","groupCall.you":"You","groupCall.connecting":"Connecting\u2026","groupCall.waitingLink":"Waiting for a direct link\u2026","groupCall.legFailed":"Could not connect","groupCall.startedVoice":"{name} started a voice call","groupCall.startedVideo":"{name} started a video call","groupCall.inCall":"{count} in the call","groupCall.err.permission_denied":"The call could not start - microphone and camera access is blocked. Allow it for this site, then try again.","groupCall.err.device_not_found":"The call could not start - no microphone was found on this device.","groupCall.err.device_busy":"The call could not start - your microphone is in use by another app. Close it and try again.","groupCall.err.media_failed":"The call could not start - the microphone could not be opened.","groupCall.err.call_in_progress":"A call is already running in this group. Join it instead of starting another.","groupCall.err.not_ready":"Confirm the group code before calling.","groupCall.speaking":"{name} is speaking","groupCall.pin":"Show {name} large","groupCall.unpin":"Back to everyone","groupCall.showEveryone":"Everyone","msg.after5s":"5s after reading","msg.after15s":"15s after reading","msg.after30s":"30s after reading","msg.after1m":"1m after reading","msg.sec30":"30 seconds","msg.min5":"5 minutes","msg.hour1":"1 hour","desktop.shareDesc":"Send the code to your peer. It is one-time and expires shortly.","desktop.invitationCreated":"Secure invitation created - send it to your peer.","desktop.joinDesc":"Paste your peer's invitation code to build your secure answer.","desktop.offerTag":"offer \xB7 copy text","desktop.answerTag":"answer \xB7 copy text","desktop.offerPlaceholder":"Invitation code will appear here\u2026","desktop.answerPlaceholder":"Response code will appear here\u2026","desktop.backToChats":"Back to chats","desktop.sendFeedback":"Send feedback","desktop.callsNeedVerified":"Calls require a verified secure channel.","desktop.noOpenChannel":"No open secure channel.","desktop.chatCarriesCall":"This chat is carrying a group call. Leave the group call before placing a 1:1 call.","desktop.err.permission_denied":"The call could not start - microphone and camera access is blocked. Allow it in system settings, then try again.","desktop.language":"Language","desktop.languageHint":"Applies at once. Messages already sent keep the words they were written in.","desktop.compareCode":"Compare the verification code with your peer and confirm if it matches.","desktop.verifyBeforeFiles":"Complete verification before sending files.","desktop.verifyBeforeSending":"Complete verification before sending messages.","desktop.disconnectedByBackend":"Connection securely disconnected.","desktop.restoreFailed":"Could not restore the connection. Closing this chat.","desktop.channelNotReady":"The data channel is not available yet. Wait for the connection to establish.","desktop.enterCode":"Enter the verification code to confirm.","desktop.noOffer":"No invitation found. Create one first.","desktop.notInitiator":"You did not create this connection, so there is no answer for you to apply.","desktop.decryptFailed":"A message could not be decrypted and was discarded.","desktop.badMessageFormat":"A malformed frame arrived and was discarded.","desktop.notSentNotReady":"Message not sent: the secure channel is not ready. Wait for verification to finish, or reconnect.","desktop.micDenied":"Microphone access was denied.","desktop.noChannelWait":"No open secure channel - wait for the connection to establish.","desktop.sasFailed":"Verification failed. A machine-in-the-middle may be present, so the connection was aborted.","desktop.sasOk":"Verification succeeded. This channel is authenticated end to end.","desktop.iceForgotten":"Saved servers forgotten. Using public ICE servers.","desktop.icePublic":"Using public ICE servers.","desktop.verificationInProgress":"Security verification is still running. Wait for it to finish.","desktop.fileGone":"This file is no longer available for download.","desktop.codeMismatch":"The verification codes do not match. Disconnecting for safety.","desktop.noLocalCode":"Verification failed: there is no locally derived code to compare against. Disconnecting for safety.","desktop.protocolViolation":"The peer claimed the code was confirmed before you confirmed it. Disconnecting for safety.","desktop.verificationRejected":"Verification rejected. The connection was aborted for safety.","secLevel.HIGH":"HIGH","secLevel.MEDIUM":"MEDIUM","secLevel.LOW":"LOW","desktop.rerun":"Re-run","desktop.ice.customDesc":"Up to {max} servers, one URL per line or JSON.","desktop.ice.persistDesc":"Stored locally on this device. Leave off to use only for this session.","desktop.group.leaveNote":"The other members are told you left. Nothing about this group is kept on this device afterwards - there is no server holding a copy to rejoin from, so you would need a fresh invitation.","desktop.sec.ecdsaOk":"Peer key package signature verified during the handshake (ECDSA P-384 / SHA-384)","desktop.sec.ecdsaNone":"No completed handshake","desktop.sec.ecdhOk":"Session keys derived from an ephemeral ECDH P-384 exchange via HKDF-SHA-256","desktop.sec.ecdhNone":"No session keys derived","desktop.sec.encryptionOk":"AES-GCM encryption and decryption verified inside the core","desktop.sec.encryptionNa":"The AES-GCM self-test could not be run","desktop.sec.integrityOk":"Message integrity verified (AES-GCM authentication)","desktop.sec.integrityNa":"The integrity self-test could not be run","desktop.sec.pfsOk":"Double Ratchet active - every message has a key of its own","desktop.sec.pfsNa":"Not measured","desktop.sec.replayOk":"Ratchet message keys are destroyed once used, so a captured frame cannot be replayed","desktop.sec.replayNa":"Not measured","desktop.sec.dtlsPinned":"Peer DTLS fingerprint pinned: {fp}","desktop.sec.dtlsNone":"No remote DTLS fingerprint available","desktop.sec.sasBoth":"Both peers confirmed the out-of-band safety code","desktop.sec.sasIncomplete":"The safety code has not been confirmed by both peers","desktop.sec.metadataOk":"A dedicated metadata key was derived (HKDF metadata-protection-v4)","desktop.sec.metadataNone":"No metadata key","desktop.sec.coverOn":"Cover traffic active: random fake frames (32-128 B every 15-30 s) on the ratcheted channel","desktop.sec.coverOff":"The cover traffic generator is not running","desktop.sec.coverUnsupported":"Cover traffic needs a Double Ratchet session (the peer is on an older release)","desktop.tagline":"End-to-end freedom","desktop.callsNotHere":"Calls are not available in this build yet. Messages, files and group chats work as usual."},no=globalThis.__SECUREBIT_I18N__||(globalThis.__SECUREBIT_I18N__=Object.create(null));no.en=to;var ro=globalThis.__SECUREBIT_I18N__||(globalThis.__SECUREBIT_I18N__=Object.create(null));function ti(t){return ro[t]||null}var ni="securebit-locale";function os(t="/"){let e=String(t).split("/")[1];return Wn.includes(e)&&e!=="en"?e:null}function ri(t=[]){for(let e of t){let n=String(e).toLowerCase(),r=Wn.find(d=>d.toLowerCase()===n);if(r)return r;let i=n.split("-")[0],c=Wn.find(d=>d.toLowerCase().split("-")[0]===i);if(c)return c}return null}function so({pathname:t="/",stored:e=null,languages:n=[]}={}){let r=os(t);return r||(io(t)?"en":e&&Wn.includes(e)?e:ri(n)||"en")}function io(t){return t==="/"||t==="/index.html"}function si(t,e="/"){let n=os(e),i=(n?String(e).slice(n.length+1):String(e)).replace(/^\/+/,"");return t==="en"?`/${i}`:`/${t}/${i}`}function ii(t){try{localStorage.setItem(ni,t)}catch{}}function cs(){try{return localStorage.getItem(ni)}catch{return null}}var Cr=null;function Ir(){if(Cr)return Cr;let t=typeof window>"u"?null:window;return!t||!t.location?"en":(Cr=so({pathname:t.location.pathname||"/",stored:cs(),languages:t.navigator?.languages||[]}),Cr)}function ao(t=Ir()){return _r[t]?.dir==="rtl"?"rtl":"ltr"}function oo(t=Ir()){return ao(t)==="rtl"}function ai(t=Ir()){return oo(t)?-1:1}var oi="securebit-locale-suggest-dismissed";function ci(){try{return localStorage.getItem(oi)==="1"}catch{return!1}}function ls(){try{localStorage.setItem(oi,"1")}catch{}}function li({pathname:t="/",languages:e=[],stored:n=null}={}){let r=os(t)||"en",i=Wn.includes(n)&&n||ri(e);return i&&i!==r?i:null}function a(t,e,n=Ir()){let r=ti(n)?.[t]??ei[n]?.[t]??ti("en")?.[t]??t;return e?String(r).replace(/\{(\w+)\}/g,(i,c)=>Object.prototype.hasOwnProperty.call(e,c)?String(e[c]):i):r}var J=Object.freeze({CREATE_SESSION:"CREATE_SESSION",REMOVE_SESSION:"REMOVE_SESSION",SET_ACTIVE:"SET_ACTIVE",SET_STATUS:"SET_STATUS",SET_FINGERPRINT:"SET_FINGERPRINT",SET_VERIFICATION:"SET_VERIFICATION",SET_SAS:"SET_SAS",ADD_MESSAGE:"ADD_MESSAGE",SET_MESSAGES:"SET_MESSAGES",UPDATE_MESSAGE_STATUS:"UPDATE_MESSAGE_STATUS",PATCH_MESSAGE:"PATCH_MESSAGE",DELETE_MESSAGE:"DELETE_MESSAGE",EXPIRE_MESSAGE:"EXPIRE_MESSAGE",INCREMENT_UNREAD:"INCREMENT_UNREAD",CLEAR_UNREAD:"CLEAR_UNREAD",SET_PENDING_FILES:"SET_PENDING_FILES",PATCH_SETUP:"PATCH_SETUP",RENAME:"RENAME",SET_PEER_PRESENCE:"SET_PEER_PRESENCE"}),ds={available:"var(--sb-green-solid)",away:"var(--sb-yellow-2-solid)",busy:"var(--sb-red-solid)",offline:"var(--sb-text-9)"},ps={available:a("presence.available"),away:a("presence.away"),busy:a("presence.busy"),offline:a("presence.offline")},Mr=[{key:"available",word:a("presence.available"),desc:a("presence.availableDesc"),dot:"var(--sb-green-solid)"},{key:"away",word:a("presence.away"),desc:a("presence.awayDesc"),dot:"var(--sb-yellow-2-solid)"},{key:"busy",word:a("presence.busy"),desc:a("presence.busyDesc"),dot:"var(--sb-red-solid)"},{key:"invisible",word:a("presence.invisible"),desc:a("presence.invisibleDesc"),dot:"var(--sb-text-9)"}];function co(t){let e=String(t||"").replace(/[^a-z0-9]/gi,"");return a("chat.defaultLabel")+" "+(e.slice(0,4)||"0000").toUpperCase()}function Ar(t){let e=String(t||"").trim().split(/\s+/).filter(Boolean),n=e[0]?.[0]||"",r=e[1]?.[0]||e[0]?.[1]||"";return(n+r).toUpperCase()||"\xB7\xB7"}function di(t){switch(t){case"connected":case"verified":return a("conn.p2p");case"verifying":return a("conn.verifying");case"connecting":case"new":return a("conn.connecting");case"reconnecting":return a("conn.reconnecting");case"peer_disconnected":return a("conn.peerDisconnected");default:return a("conn.disconnected")}}function lo(){return{offerData:"",answerData:"",offerInput:"",answerInput:"",showOfferStep:!1,showAnswerStep:!1,showVerification:!1,showQRCode:!1,qrCodeUrl:"",isGeneratingKeys:!1,qrFramesTotal:0,qrFrameIndex:0,qrManualMode:!1}}function us(t={}){let e=t.id||(typeof crypto<"u"&&crypto.randomUUID?crypto.randomUUID():String(Date.now())+Math.random());return{id:e,peerLabel:t.peerLabel||co(e),labelIsCustom:!1,createdAt:t.createdAt||Date.now(),role:t.role||"offer",status:t.status||"new",keyFingerprint:"",verificationCode:"",sas:{localConfirmed:!1,remoteConfirmed:!1,bothConfirmed:!1,isVerified:!1},messages:[],unreadCount:0,pendingIncomingFiles:[],peerPresence:null,setup:lo()}}function pi(){return{sessions:{},order:[],activeSessionId:null}}function st(t,e,n){let r=t.sessions[e];return r?{...t,sessions:{...t.sessions,[e]:{...r,...n}}}:t}function ui(t,e){let n=J;switch(e.type){case n.CREATE_SESSION:{let r=e.entry||us(e);return t.sessions[r.id]?t:{sessions:{...t.sessions,[r.id]:r},order:[...t.order,r.id],activeSessionId:e.activate===!1?t.activeSessionId:r.id}}case n.REMOVE_SESSION:{let{id:r}=e;if(!t.sessions[r])return t;let i={...t.sessions};delete i[r];let c=t.order.filter(h=>h!==r),d=t.activeSessionId;if(d===r){let h=t.order.indexOf(r);d=c[Math.max(0,h-1)]||c[0]||null}return{sessions:i,order:c,activeSessionId:d}}case n.SET_ACTIVE:return!t.sessions[e.id]||t.activeSessionId===e.id?t:{...t,activeSessionId:e.id};case n.SET_STATUS:{let r=t.sessions[e.id];if(!r||r.status===e.status)return t;let c=!(e.status==="connected"||e.status==="verified"||e.status==="reconnecting")&&r.peerPresence!==null?{status:e.status,peerPresence:null}:{status:e.status};return st(t,e.id,c)}case n.SET_FINGERPRINT:return st(t,e.id,{keyFingerprint:e.fingerprint});case n.SET_VERIFICATION:return st(t,e.id,{verificationCode:e.code});case n.SET_SAS:{let r=t.sessions[e.id];return r?st(t,e.id,{sas:{...r.sas,...e.sas}}):t}case n.ADD_MESSAGE:{let r=t.sessions[e.id];return r?st(t,e.id,{messages:[...r.messages,e.message]}):t}case n.SET_MESSAGES:{let r=t.sessions[e.id];if(!r)return t;let i=typeof e.updater=="function"?e.updater(r.messages):e.messages;return st(t,e.id,{messages:Array.isArray(i)?i:[]})}case n.UPDATE_MESSAGE_STATUS:{let r=t.sessions[e.id];if(!r)return t;let i=!1,c=r.messages.map(d=>String(d.mid)===String(e.mid)&&d.status!==e.status?(i=!0,{...d,status:e.status}):d);return i?st(t,e.id,{messages:c}):t}case n.PATCH_MESSAGE:{let r=t.sessions[e.id];if(!r)return t;let i=e.messageId!=null?String(e.messageId):null,c=e.mid!=null?String(e.mid):null,d=e.fileId!=null?String(e.fileId):null,h=!1,m=r.messages.map(v=>{if(!(i!=null&&String(v.id)===i||c!=null&&String(v.mid)===c||d!=null&&v.fileId!=null&&String(v.fileId)===d))return v;h=!0;let p=typeof e.patch=="function"?e.patch(v):e.patch;return{...v,...p}});return h?st(t,e.id,{messages:m}):t}case n.DELETE_MESSAGE:{let r=t.sessions[e.id];if(!r)return t;let i=r.messages.filter(c=>String(c.mid)!==String(e.mid));return i.length===r.messages.length?t:st(t,e.id,{messages:i})}case n.EXPIRE_MESSAGE:{let r=t.sessions[e.id];if(!r)return t;let i=!1,c=r.messages.map(d=>String(d.id)===String(e.messageId)&&!d.expired?(i=!0,{...d,expired:!0,message:"",expiresAt:void 0}):d);return i?st(t,e.id,{messages:c}):t}case n.INCREMENT_UNREAD:{let r=t.sessions[e.id];return r?st(t,e.id,{unreadCount:r.unreadCount+1}):t}case n.CLEAR_UNREAD:{let r=t.sessions[e.id];return!r||r.unreadCount===0?t:st(t,e.id,{unreadCount:0})}case n.SET_PENDING_FILES:{let r=t.sessions[e.id];if(!r)return t;let i=typeof e.updater=="function"?e.updater(r.pendingIncomingFiles):e.files;return st(t,e.id,{pendingIncomingFiles:Array.isArray(i)?i:[]})}case n.PATCH_SETUP:{let r=t.sessions[e.id];return r?st(t,e.id,{setup:{...r.setup,...e.patch}}):t}case n.RENAME:{let r=t.sessions[e.id];if(!r)return t;let i=String(e.label||"").trim()||r.peerLabel;return st(t,e.id,{peerLabel:i,labelIsCustom:!0})}case n.SET_PEER_PRESENCE:{let r=t.sessions[e.id];return!r||r.peerPresence===e.presence?t:st(t,e.id,{peerPresence:e.presence})}default:return t}}function po(t,e){let n=[...t.messages].reverse().find(v=>!v.expired&&v.type!=="system"&&(typeof v.message=="string"&&v.message.trim()||v.voice)),r=t.status,i=r==="connected"||r==="verified",c=r==="connecting"||r==="verifying"||r==="new"||r==="reconnecting",d,h;c?(d="var(--sb-yellow-2-solid)",h=di(r)):i?(d=t.peerPresence?ds[t.peerPresence]||"var(--sb-text-9)":"var(--sb-green-solid)",h=t.peerPresence?ps[t.peerPresence]||a("presence.online"):a("conn.p2p")):(d="var(--sb-red-solid)",h=di(r));let m=n?n.voice?"\u{1F399} Voice message":n.message:h;return{id:t.id,name:t.peerLabel,mono:Ar(t.peerLabel),dot:d,headerSub:h,status:t.status,peerPresence:t.peerPresence,preview:m,unread:t.unreadCount>0?t.unreadCount>99?"99+":String(t.unreadCount):null,verified:!!t.sas.isVerified,active:t.id===e,inactive:t.id!==e}}function fi(t){return t.order.map(e=>t.sessions[e]).filter(Boolean).map(e=>po(e,t.activeSessionId))}var F=Object.freeze({MAX_MEMBERS:8,MIN_MEMBERS:2,GROUP_ID_BYTES:16,NONCE_BYTES:32,COMMIT_BYTES:32,FINGERPRINT_BYTES:32,SAS_DIGITS:7,MAX_NAME_BYTES:128,MAX_EPOCH:4294967295,MAX_SPKI_BYTES:256,MIN_SPKI_BYTES:40,MAX_SIG_BYTES:160,MIN_SIG_BYTES:48,MAX_BODY_BYTES:1024,FRAME_BUDGET_CHARS:1800,MAX_DESCRIPTOR_CHARS:768,MESH_NONCE_BYTES:16,CALL_ID_BYTES:16}),zt=Object.freeze({START:"start",JOIN:"join",LEAVE:"leave"}),En=Object.freeze({OFFER:"moffer",ANSWER:"manswer"}),Rn=Object.freeze({CREATE:"create",ADD:"add",REMOVE:"remove",RENAME:"rename"}),sr=new TextEncoder,fs=class extends Error{constructor(e,n="group_crypto"){super(e),this.name="GroupCryptoError",this.code=n}},oe=(t,e)=>{throw new fs(t,e)};function hs(t){let e=t instanceof Uint8Array?t:new Uint8Array(t),n="";for(let r=0;r<e.length;r++)n+=e[r].toString(16).padStart(2,"0");return n}function Qe(t){(typeof t!="string"||t.length%2!==0||!/^[0-9a-f]*$/i.test(t))&&oe("not a hex string","bad_hex");let e=new Uint8Array(t.length/2);for(let n=0;n<e.length;n++)e[n]=parseInt(t.substr(n*2,2),16);return e}function $e(t){let e=t instanceof Uint8Array?t:new Uint8Array(t),n="";for(let r=0;r<e.length;r++)n+=String.fromCharCode(e[r]);return btoa(n)}function it(t,{max:e=F.MAX_SPKI_BYTES}={}){typeof t!="string"&&oe("not a base64 string","bad_b64"),t.length>Math.ceil(e*4/3)+4&&oe("base64 payload exceeds its limit","bad_b64");let n;try{n=atob(t)}catch{oe("malformed base64","bad_b64")}let r=new Uint8Array(n.length);for(let i=0;i<n.length;i++)r[i]=n.charCodeAt(i);return r}function ir(t){return crypto.getRandomValues(new Uint8Array(t))}function hi(){return hs(ir(F.GROUP_ID_BYTES))}function rn(t,...e){let n=[sr.encode(t+"\0")],r=n[0].length;for(let d of e){let h=d instanceof Uint8Array?d:typeof d=="string"?sr.encode(d):oe("unsupported payload component","bad_payload"),m=new Uint8Array(4);new DataView(m.buffer).setUint32(0,h.length),n.push(m,h),r+=4+h.length}let i=new Uint8Array(r),c=0;for(let d of n)i.set(d,c),c+=d.length;return i}function Ut(t){(!Number.isInteger(t)||t<0||t>F.MAX_EPOCH)&&oe("value out of uint32 range","bad_u32");let e=new Uint8Array(4);return new DataView(e.buffer).setUint32(0,t),e}function gi(t,e){if(!(t instanceof Uint8Array)||!(e instanceof Uint8Array)||t.length!==e.length)return!1;let n=0;for(let r=0;r<t.length;r++)n|=t[r]^e[r];return n===0}function Dt(t){return(typeof t!="string"||t.length!==F.GROUP_ID_BYTES*2||!/^[0-9a-f]+$/.test(t))&&oe("malformed group id","bad_group_id"),t}function Ie(t){return(typeof t!="string"||t.length!==F.FINGERPRINT_BYTES*2||!/^[0-9a-f]+$/.test(t))&&oe("malformed member fingerprint","bad_fingerprint"),t}function Te(t){return(!Number.isInteger(t)||t<0||t>F.MAX_EPOCH)&&oe("epoch out of range","bad_epoch"),t}function _n(t){let e=typeof t=="string"?t:"";return sr.encode(e).length>F.MAX_NAME_BYTES&&oe("group name too long","bad_name"),e}function Cn(t){Array.isArray(t)||oe("member list is not an array","bad_members"),t.length<F.MIN_MEMBERS&&oe("a group needs at least two members","bad_members"),t.length>F.MAX_MEMBERS&&oe(`a group is limited to ${F.MAX_MEMBERS} members`,"too_many_members");let e=new Set;for(let n of t)Ie(n),e.has(n)&&oe("duplicate member fingerprint","duplicate_member"),e.add(n);return[...t].sort()}async function mi(t){let e=await t.generateKey({name:"ECDSA",namedCurve:"P-384"},!1,["sign","verify"]),n=new Uint8Array(await t.exportKey("spki",e.publicKey)),r=await yi(t,n);return{keyPair:e,spki:n,fingerprint:r}}async function yi(t,e){return(!(e instanceof Uint8Array)||e.length<F.MIN_SPKI_BYTES||e.length>F.MAX_SPKI_BYTES)&&oe("SPKI length out of range","bad_spki"),hs(new Uint8Array(await t.digest("SHA-256",e)))}async function ar(t,e){let n=await yi(t,e),r;try{r=await t.importKey("spki",e,{name:"ECDSA",namedCurve:"P-384"},!1,["verify"])}catch{oe("member identity key is not a valid P-384 public key","bad_spki")}return{publicKey:r,fingerprint:n}}async function bi(t,{groupId:e,epoch:n,fingerprint:r,nonce:i}){Dt(e),Te(n),Ie(r),(!(i instanceof Uint8Array)||i.length!==F.NONCE_BYTES)&&oe("nonce must be 32 bytes","bad_nonce");let c=rn("securebit/group/commit/v1",Qe(e),Ut(n),Qe(r),i);return new Uint8Array(await t.digest("SHA-256",c))}async function uo(t,e,n){if(!(e instanceof Uint8Array)||e.length!==F.COMMIT_BYTES)return!1;let r;try{r=await bi(t,n)}catch{return!1}return gi(e,r)}async function gs(t,{groupId:e,epoch:n,contributions:r,digits:i=F.SAS_DIGITS}){Dt(e),Te(n),Array.isArray(r)||oe("contributions must be an array","bad_contributions"),(!Number.isInteger(i)||i<4||i>12)&&oe("digit count out of range","bad_digits"),Cn(r.map(S=>S&&S.fingerprint));let c=[...r].sort((S,p)=>S.fingerprint<p.fingerprint?-1:1),d=[];for(let S of c)(!(S.nonce instanceof Uint8Array)||S.nonce.length!==F.NONCE_BYTES)&&oe("every member must contribute a 32-byte nonce","bad_nonce"),d.push(Qe(S.fingerprint),S.nonce);let h=rn("securebit/group/sas/v1",Qe(e),Ut(n),...d),m=new Uint8Array(await t.digest("SHA-256",rn("securebit/group/sas-salt/v1",Qe(e),Ut(n)))),v=null;try{v=await t.importKey("raw",h,"HKDF",!1,["deriveBits"]);let S=await t.deriveBits({name:"HKDF",hash:"SHA-256",salt:m,info:sr.encode("securebit-group-sas-v1")},v,64),p=new DataView(S),k=p.getUint32(0)*2**20+(p.getUint32(4)>>>12);return String(k%10**i).padStart(i,"0")}finally{try{h.fill(0)}catch{}}}var Tr=class{constructor({groupId:e,epoch:n,selfFingerprint:r,memberFingerprints:i}){this.groupId=Dt(e),this.epoch=Te(n),this.selfFingerprint=Ie(r),this.members=Cn(i),this.members.includes(this.selfFingerprint)||oe("the local member is not in the member set","not_a_member"),this.nonce=ir(F.NONCE_BYTES),this.commitments=new Map,this.nonces=new Map,this.revealed=!1,this.code=null}async ownCommitment(e){let n=await bi(e,{groupId:this.groupId,epoch:this.epoch,fingerprint:this.selfFingerprint,nonce:this.nonce});return this.commitments.set(this.selfFingerprint,n),n}acceptCommitment(e,n){Ie(e),this.members.includes(e)||oe("commitment from a non-member","not_a_member"),(!(n instanceof Uint8Array)||n.length!==F.COMMIT_BYTES)&&oe("malformed commitment","bad_commitment");let r=this.commitments.get(e);return r?(gi(r,n)||oe("member changed their commitment","commitment_changed"),!1):(this.commitments.set(e,n),!0)}get commitmentsComplete(){return this.members.every(e=>this.commitments.has(e))}reveal(){return this.commitmentsComplete||oe("cannot reveal before every member has committed","premature_reveal"),this.revealed=!0,this.nonces.set(this.selfFingerprint,this.nonce),this.nonce}async acceptReveal(e,n,r){Ie(n),this.members.includes(n)||oe("reveal from a non-member","not_a_member");let i=this.commitments.get(n);return i||oe("reveal arrived before the commitment","reveal_without_commitment"),await uo(e,i,{groupId:this.groupId,epoch:this.epoch,fingerprint:n,nonce:r})||oe("revealed nonce does not match the commitment","commitment_mismatch"),this.nonces.set(n,r),!0}get revealsComplete(){return this.members.every(e=>this.nonces.has(e))}async finish(e){return this.revealsComplete||oe("not every member has revealed","incomplete_reveal"),this.code=await gs(e,{groupId:this.groupId,epoch:this.epoch,contributions:this.members.map(n=>({fingerprint:n,nonce:this.nonces.get(n)}))}),this.code}destroy(){try{this.nonce.fill(0)}catch{}for(let e of this.nonces.values())try{e.fill(0)}catch{}this.nonces.clear(),this.commitments.clear()}};function xi({groupId:t,epoch:e,op:n,memberFps:r,name:i=""}){Dt(t),Te(e),Object.values(Rn).includes(n)||oe("unknown membership operation","bad_op");let c=Cn(r);return rn("securebit/group/member-op/v1",Qe(t),Ut(e),n,_n(i),...c.map(d=>Qe(d)))}async function vi(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,xi(n));return new Uint8Array(r)}async function wi(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<F.MIN_SIG_BYTES||r.length>F.MAX_SIG_BYTES)return!1;let i;try{i=xi(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}async function ms(t,e){let n=typeof e=="string"?sr.encode(e):e;return n instanceof Uint8Array||oe("message body must be a string or bytes","bad_body"),n.length>F.MAX_BODY_BYTES&&oe("message body exceeds the group limit","body_too_large"),new Uint8Array(await t.digest("SHA-256",n))}function ki({groupId:t,epoch:e,seq:n,senderFp:r,bodyHash:i}){return Dt(t),Te(e),Te(n),Ie(r),(!(i instanceof Uint8Array)||i.length!==32)&&oe("body hash must be 32 bytes","bad_body_hash"),rn("securebit/group/message/v1",Qe(t),Ut(e),Ut(n),Qe(r),i)}async function Si(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,ki(n));return new Uint8Array(r)}async function Ei(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<F.MIN_SIG_BYTES||r.length>F.MAX_SIG_BYTES)return!1;let i;try{i=ki(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}function Ri({groupId:t,epoch:e,kind:n,fromFp:r,toFp:i,descriptor:c,nonce:d}){return Dt(t),Te(e),n!==En.OFFER&&n!==En.ANSWER&&oe("unknown mesh descriptor kind","bad_mesh_kind"),Ie(r),Ie(i),r===i&&oe("a member cannot dial itself","bad_mesh_peer"),(typeof c!="string"||c.length===0||c.length>F.MAX_DESCRIPTOR_CHARS)&&oe("mesh descriptor is missing or oversized","bad_descriptor"),(!(d instanceof Uint8Array)||d.length!==F.MESH_NONCE_BYTES)&&oe("mesh nonce must be 16 bytes","bad_mesh_nonce"),rn("securebit/group/mesh-descriptor/v1",Qe(t),Ut(e),n,Qe(r),Qe(i),c,d)}async function ys(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,Ri(n));return new Uint8Array(r)}async function bs(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<F.MIN_SIG_BYTES||r.length>F.MAX_SIG_BYTES)return!1;let i;try{i=Ri(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}function _i({groupId:t,epoch:e,fp:n,linkFp:r}){return Dt(t),Te(e),Ie(n),(typeof r!="string"||r.length===0||r.length>256)&&oe("link fingerprint is missing or oversized","bad_link_fp"),rn("securebit/group/link-probe/v1",Qe(t),Ut(e),Qe(n),r)}async function Ci(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,_i(n));return new Uint8Array(r)}async function Ii(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<F.MIN_SIG_BYTES||r.length>F.MAX_SIG_BYTES)return!1;let i;try{i=_i(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}function Mi({groupId:t,epoch:e,callId:n,action:r,fp:i,seq:c,withVideo:d}){return Dt(t),Te(e),xs(n),Te(c),Ie(i),r!==zt.START&&r!==zt.JOIN&&r!==zt.LEAVE&&oe("unknown call action","bad_call_action"),rn("securebit/group/call/v1",Qe(t),Ut(e),Qe(n),r,Qe(i),Ut(c),d===!0?"v":"a")}function xs(t){return(typeof t!="string"||t.length!==F.CALL_ID_BYTES*2||!/^[0-9a-f]+$/.test(t))&&oe("malformed call id","bad_call_id"),t}function Ai(){return hs(ir(F.CALL_ID_BYTES))}async function Ti(t,e,n){let r=await t.sign({name:"ECDSA",hash:"SHA-384"},e,Mi(n));return new Uint8Array(r)}async function Ni(t,e,n,r){if(!(r instanceof Uint8Array)||r.length<F.MIN_SIG_BYTES||r.length>F.MAX_SIG_BYTES)return!1;let i;try{i=Mi(n)}catch{return!1}try{return await t.verify({name:"ECDSA",hash:"SHA-384"},e,r,i)}catch{return!1}}var be=Object.freeze({CREATE_GROUP:"CREATE_GROUP",REMOVE_GROUP:"REMOVE_GROUP",SET_ACTIVE_GROUP:"SET_ACTIVE_GROUP",SET_PHASE:"SET_PHASE",SET_MEMBERS:"SET_MEMBERS",PATCH_MEMBER:"PATCH_MEMBER",SET_SAS:"SET_SAS",CONFIRM_SAS:"CONFIRM_SAS",ADD_MESSAGE:"ADD_MESSAGE",SET_MESSAGES:"SET_MESSAGES",UPDATE_MESSAGE_STATUS:"UPDATE_MESSAGE_STATUS",INCREMENT_UNREAD:"INCREMENT_UNREAD",CLEAR_UNREAD:"CLEAR_UNREAD",RENAME:"RENAME",SET_ERROR:"SET_ERROR"}),Y=Object.freeze({FORMING:"forming",COMMITTING:"committing",REVEALING:"revealing",AWAITING_SAS:"awaiting_sas",READY:"ready",FAILED:"failed"}),pe=Object.freeze({SELF:"self",LINKED:"linked",PENDING:"pending",LOST:"lost"}),fo={[Y.FORMING]:a("groupPhase.forming"),[Y.COMMITTING]:a("groupPhase.commitments"),[Y.REVEALING]:a("groupPhase.revealing"),[Y.AWAITING_SAS]:a("groupPhase.compare"),[Y.READY]:a("groupPhase.ready"),[Y.FAILED]:a("groupPhase.failed")};function vs(t){let e=String(t||"").trim().split(/\s+/).filter(Boolean),n=e[0]?.[0]||"",r=e[1]?.[0]||e[0]?.[1]||"";return(n+r).toUpperCase()||"##"}function Nr(t={}){return{id:t.id,name:t.name||"Group",createdAt:t.createdAt||Date.now(),adminFp:t.adminFp||"",selfFp:t.selfFp||"",isAdmin:!!t.isAdmin,epoch:Number.isInteger(t.epoch)?t.epoch:1,phase:t.phase||Y.FORMING,members:Array.isArray(t.members)?[...t.members].sort(Di):[],sasCode:"",sasConfirmed:!1,messages:[],unreadCount:0,error:null}}var ho=new TextEncoder;function go(t){let e=String(t);for(;ho.encode(e).length>F.MAX_NAME_BYTES;)e=e.slice(0,-1);return e}function Di(t,e){return t.fp<e.fp?-1:t.fp>e.fp?1:0}function Fi(){return{groups:{},order:[],activeGroupId:null}}function Mt(t,e,n){let r=t.groups[e];return r?{...t,groups:{...t.groups,[e]:{...r,...n}}}:t}function Pi(t,e){let n=be;switch(e.type){case n.CREATE_GROUP:{let r=e.entry||Nr(e);return!r.id||t.groups[r.id]?t:{groups:{...t.groups,[r.id]:r},order:[...t.order,r.id],activeGroupId:e.activate===!1?t.activeGroupId:r.id}}case n.REMOVE_GROUP:{let{id:r}=e;if(!t.groups[r])return t;let i={...t.groups};delete i[r];let c=t.order.filter(h=>h!==r),d=t.activeGroupId;if(d===r){let h=t.order.indexOf(r);d=c[Math.max(0,h-1)]||c[0]||null}return{groups:i,order:c,activeGroupId:d}}case n.SET_ACTIVE_GROUP:return e.id===null?t.activeGroupId===null?t:{...t,activeGroupId:null}:!t.groups[e.id]||t.activeGroupId===e.id?t:{...t,activeGroupId:e.id};case n.SET_PHASE:{let r=t.groups[e.id];if(!r||r.phase===e.phase)return t;let i={phase:e.phase};return e.phase!==Y.READY&&r.sasConfirmed&&(i.sasConfirmed=!1),e.phase!==Y.READY&&e.phase!==Y.AWAITING_SAS&&(i.sasCode=""),e.phase!==Y.FAILED&&(i.error=null),Mt(t,e.id,i)}case n.SET_MEMBERS:{let r=t.groups[e.id];if(!r)return t;let c={members:Array.isArray(e.members)?[...e.members].sort(Di):r.members};return Number.isInteger(e.epoch)&&(c.epoch=e.epoch),Mt(t,e.id,c)}case n.PATCH_MEMBER:{let r=t.groups[e.id];if(!r)return t;let i=!1,c=r.members.map(d=>{if(d.fp!==e.fp)return d;let h={...d,...e.patch};return Object.keys(e.patch).every(m=>d[m]===h[m])?d:(i=!0,h)});return i?Mt(t,e.id,{members:c}):t}case n.SET_SAS:{let r=t.groups[e.id];return!r||r.sasCode===e.code?t:Mt(t,e.id,{sasCode:e.code||"",sasConfirmed:!1})}case n.CONFIRM_SAS:{let r=t.groups[e.id];return!r||!r.sasCode||r.phase!==Y.AWAITING_SAS||r.sasConfirmed&&r.phase===Y.READY?t:Mt(t,e.id,{sasConfirmed:!0,phase:Y.READY,error:null})}case n.ADD_MESSAGE:{let r=t.groups[e.id];return r?Mt(t,e.id,{messages:[...r.messages,e.message]}):t}case n.SET_MESSAGES:{let r=t.groups[e.id];if(!r)return t;let i=typeof e.updater=="function"?e.updater(r.messages):e.messages;return Mt(t,e.id,{messages:Array.isArray(i)?i:[]})}case n.UPDATE_MESSAGE_STATUS:{let r=t.groups[e.id];if(!r)return t;let i=!1,c=r.messages.map(d=>String(d.mid)===String(e.mid)&&d.status!==e.status?(i=!0,{...d,status:e.status}):d);return i?Mt(t,e.id,{messages:c}):t}case n.INCREMENT_UNREAD:{let r=t.groups[e.id];return r?Mt(t,e.id,{unreadCount:r.unreadCount+1}):t}case n.CLEAR_UNREAD:{let r=t.groups[e.id];return!r||r.unreadCount===0?t:Mt(t,e.id,{unreadCount:0})}case n.RENAME:{let r=t.groups[e.id];if(!r)return t;let i=go(String(e.name||"").trim())||r.name;return Mt(t,e.id,{name:i})}case n.SET_ERROR:{if(!t.groups[e.id])return t;let i={error:e.error||null};return e.error&&(i.phase=Y.FAILED),Mt(t,e.id,i)}default:return t}}function ws(t){return t.members.filter(e=>e.state===pe.SELF||e.state===pe.LINKED).length}function mo(t){if(t.phase!==Y.READY)return fo[t.phase]||"Group";let e=t.members.length,n=ws(t);return n<e?`${n} of ${e} connected`:`${e} members \xB7 P2P mesh`}function yo(t){switch(t.phase){case Y.READY:return ws(t)<t.members.length?"var(--sb-yellow-2-solid)":"var(--sb-green-solid)";case Y.FAILED:return"var(--sb-red-solid)";default:return"var(--sb-yellow-2-solid)"}}function bo(t,e){let n=[...t.messages].reverse().find(i=>!i.expired&&typeof i.message=="string"&&i.message.trim()),r=mo(t);return{id:t.id,kind:"group",name:t.name,mono:vs(t.name),dot:yo(t),headerSub:r,phase:t.phase,memberCount:t.members.length,linkedCount:ws(t),preview:n?n.message:r,unread:t.unreadCount>0?t.unreadCount>99?"99+":String(t.unreadCount):null,verified:t.phase===Y.READY&&t.sasConfirmed,active:t.id===e,inactive:t.id!==e}}function Oi(t){return t.order.map(e=>t.groups[e]).filter(Boolean).map(e=>bo(e,t.activeGroupId))}var he=Object.freeze({INVITE:"g_invite",HELLO:"g_hello",MEMBER:"g_member",ROSTER:"g_roster",COMMIT:"g_commit",REVEAL:"g_reveal",MESSAGE:"g_msg",RELAY:"g_relay",LEAVE:"g_leave",MESH_OFFER:"g_moffer",MESH_ANSWER:"g_manswer",MESH_ABORT:"g_mabort",PROBE:"g_probe",CALL:"g_call"}),Fr="g_env",Pr=Object.freeze(new Set(Object.values(he)));function or(t){return!t||typeof t!="object"?!1:t.type===Fr||Pr.has(t.type)}function Li(t){return!t||typeof t!="object"?null:t.type===Fr?typeof t.t=="string"?t.t:null:Pr.has(t.type)?t.type:null}function xo(t){let e=JSON.stringify(t),n=$e(new TextEncoder().encode(e));if(n.length>F.FRAME_BUDGET_CHARS)throw new K("group frame exceeds the transport budget","frame_too_large");return{type:Fr,gid:t.gid,t:t.type,d:n}}function Dr(t){if(!t||t.type!==Fr)return t;let e=String(t.d||"");if(e.length>F.FRAME_BUDGET_CHARS)throw new K("group frame exceeds the transport budget","frame_too_large");let n=it(e,{max:F.FRAME_BUDGET_CHARS}),r=JSON.parse(new TextDecoder().decode(n));if(!r||typeof r!="object"||!Pr.has(r.type))throw new K("envelope carried no recognisable frame","bad_envelope");if(t.gid&&r.gid!==t.gid)throw new K("envelope group id does not match its frame","bad_envelope");if(t.t&&r.type!==t.t)throw new K("envelope type does not match its frame","bad_envelope");return r}var In=Object.freeze({CEREMONY_MS:6e4,HELLO_MS:45e3,MESH_DIAL_MS:45e3,MESH_RETRY_MS:2e4}),vo=2,wo=3,K=class extends Error{constructor(e,n="group_session"){super(e),this.name="GroupSessionError",this.code=n}},Vn=class{constructor({groupId:e,name:n,isAdmin:r,subtle:i,send:c,emit:d,mesh:h=null,log:m=()=>{}}){this.groupId=Dt(e),this.name=_n(n),this.isAdmin=!!r,this.subtle=i,this._send=c,this._emit=d,this._log=m,this._mesh=h,this.identity=null,this.epoch=1,this.adminFp="",this.phase=Y.FORMING,this.members=new Map,this.sessionToFp=new Map,this.ceremony=null,this.sasCode="",this.sasConfirmed=!1,this.seq=0,this.transcript=new Map,this._timers=new Set,this._destroyed=!1,this._awaitingHello=new Map,this._pendingCeremony=[],this._draining=!1,this._pendingKeys=new Map,this._pendingAdd=null,this._meshDials=new Map,this._meshFailures=new Map,this._meshSessions=new Set,this._probed=new Set,this._meshPass=null,this.call=null,this.callSeq=0,this._callSeen=new Map}static newId(){return hi()}async init(){return this.identity?this.identity:(this.identity=await mi(this.subtle),this.members.set(this.identity.fingerprint,{fp:this.identity.fingerprint,name:"You",spki:this.identity.spki,publicKey:null,sessionId:null,state:pe.SELF}),this.isAdmin&&(this.adminFp=this.identity.fingerprint),this.identity)}get selfFp(){return this.identity?.fingerprint||""}destroy(){this._destroyed=!0;for(let e of this._timers)clearTimeout(e);this._timers.clear();try{this.ceremony?.destroy()}catch{}this.ceremony=null;for(let e of this._meshSessions)try{this._mesh?.close(e)}catch{}this._meshSessions.clear(),this._meshDials.clear(),this._meshFailures.clear(),this._probed.clear(),this.call=null,this._callSeen.clear(),this.members.clear(),this.sessionToFp.clear(),this.transcript.clear(),this._pendingCeremony=[],this._pendingKeys.clear(),this._pendingAdd=null,this.identity=null}_timer(e,n){let r=setTimeout(()=>{this._timers.delete(r),this._destroyed||e()},n);return this._timers.add(r),r}_fail(e){if(!this._destroyed){this._log("warn","group ceremony failed",{code:e}),this.phase=Y.FAILED;try{this.ceremony?.destroy()}catch{}this.ceremony=null,this._emit("error",{error:e})}}_setPhase(e){this.phase!==e&&(this.phase=e,e!==Y.READY&&(this.sasConfirmed=!1),e!==Y.READY&&e!==Y.AWAITING_SAS&&(this.sasCode=""),this._emit("phase",{phase:e}))}_memberSnapshot(){return[...this.members.values()].map(e=>({fp:e.fp,name:e.name,sessionId:e.sessionId,state:e.state}))}_emitMembers(){this._pruneCall(),this._emit("members",{members:this._memberSnapshot(),epoch:this.epoch})}_pruneCall(){if(!this.call)return;let e=!1;for(let n of[...this.call.participants])this.members.has(n)||(this.call.participants.delete(n),e=!0);this.call.participants.size===0&&(this.call=null,e=!0),e&&this._emit("call",{call:this.getCallSnapshot()})}_directPeers(){return[...this.members.values()].filter(e=>e.state===pe.LINKED&&e.sessionId)}_relayFor(e){let n=this.members.get(this.adminFp);return n&&n.state===pe.LINKED&&n.sessionId&&n.fp!==e?n:this._directPeers().find(r=>r.fp!==e)||null}async _wire(e,n){return this._send(e,xo(n))}async _sendTo(e,n){let r=this.members.get(e);if(!r||r.fp===this.selfFp)return!1;if(r.state===pe.LINKED&&r.sessionId)return await this._wire(r.sessionId,n),!0;let i=this._relayFor(e);return i?(await this._wire(i.sessionId,{type:he.RELAY,gid:this.groupId,to:e,hopped:!1,inner:n}),r.state!==pe.LOST):!1}async _broadcast(e,{exclude:n=[]}={}){let r=[...this.members.keys()].filter(h=>h!==this.selfFp&&!n.includes(h)),i=await Promise.allSettled(r.map(h=>this._sendTo(h,e))),c=[],d=0;return i.forEach((h,m)=>{if(h.status==="fulfilled"&&h.value===!0){d+=1;return}let v=this.members.get(r[m]);c.push({fp:r[m],name:v?.name||"A member"})}),{delivered:d,unreachable:c}}bindSession(e,n,r=pe.LINKED){let i=this.members.get(e);return i?(i.sessionId&&i.sessionId!==n&&(this.sessionToFp.delete(i.sessionId),this._closeMeshSession(i.sessionId)),i.sessionId=n,i.state=r,n&&this.sessionToFp.set(n,e),this._emitMembers(),!0):!1}unbindSession(e){let n=this.members.get(e);if(!n||!n.sessionId)return!1;let r=n.sessionId;return this.sessionToFp.delete(r),n.sessionId=null,(n.state===pe.LINKED||n.state===pe.LOST)&&(n.state=pe.PENDING),this._closeMeshSession(r),this._emitMembers(),this._scheduleMeshMaintain(),!0}setSessionState(e,n){let r=this.sessionToFp.get(e);if(!r)return;let i=this.members.get(r);if(!i||i.state===pe.SELF)return;let c=n?pe.LINKED:pe.LOST;i.state!==c&&(i.state=c,this._emitMembers(),n&&this._settleDial(r),this._scheduleMeshMaintain())}_dialStillWanted(e,n){if(this._destroyed||this._meshDials.get(e)!==n||this.epoch!==n.epoch)return!1;let r=this.members.get(e);return!(!r||r.sessionId&&r.sessionId!==n.sessionId)}_abandonDial(e,n,r){this._meshDials.get(e)===n&&(n.timer&&(clearTimeout(n.timer),this._timers.delete(n.timer)),this._meshDials.delete(e)),this._meshSessions.delete(r);try{this._mesh?.close(r)}catch{}}_closeMeshSession(e){if(!(!e||!this._meshSessions.has(e))){this._meshSessions.delete(e);try{this._mesh?.close(e)}catch{}}}_settleDial(e){let n=this._meshDials.get(e);n&&(n.timer&&(clearTimeout(n.timer),this._timers.delete(n.timer)),this._meshDials.delete(e),this._meshFailures.delete(e))}_meshFail(e,n,{tellPeer:r=!0}={}){let i=this._meshDials.get(e);if(i){i.timer&&(clearTimeout(i.timer),this._timers.delete(i.timer)),this._meshDials.delete(e);let d=this.members.get(e);i.sessionId&&d&&d.sessionId===i.sessionId?this.unbindSession(e):this._closeMeshSession(i.sessionId)}let c=this._meshFailures.get(e)||{attempts:0,nextAt:0};c.attempts+=1,c.nextAt=Date.now()+In.MESH_RETRY_MS*2**(c.attempts-1),this._meshFailures.set(e,c),this._log("warn","mesh dial failed",{code:n,attempts:c.attempts}),r&&this.members.has(e)&&this._sendTo(e,{type:he.MESH_ABORT,gid:this.groupId,epoch:this.epoch,from:this.selfFp,to:e}).catch(()=>{}),this._scheduleMeshMaintain()}_meshReset(){for(let e of[...this._meshDials.keys()]){let n=this._meshDials.get(e);n?.timer&&(clearTimeout(n.timer),this._timers.delete(n.timer)),this._meshDials.delete(e);let r=this.members.get(e);n?.sessionId&&r&&r.sessionId===n.sessionId?this.unbindSession(e):this._closeMeshSession(n?.sessionId)}this._meshFailures.clear(),this._probed.clear()}_scheduleMeshMaintain(){this._destroyed||!this._mesh||this._meshPass||(this._meshPass=this._timer(()=>{this._meshPass=null,this._meshMaintain()},0))}_meshMaintain(){if(this._destroyed||!this._mesh||this.phase!==Y.READY||!this.sasConfirmed)return;let e=Date.now(),n=this._meshDials.size,r=1/0;for(let i of Cn([...this.members.keys()])){if(n>=vo)break;let c=this.members.get(i);if(!c||c.state===pe.SELF||c.sessionId||this._meshDials.has(i)||!(this.selfFp<i))continue;let d=this._meshFailures.get(i);if(d){if(d.attempts>=wo)continue;if(e<d.nextAt){r=Math.min(r,d.nextAt);continue}}this._relayFor(i)&&(n+=1,this._meshDial(i).catch(()=>{}))}r!==1/0&&!this._meshPass&&(this._meshPass=this._timer(()=>{this._meshPass=null,this._meshMaintain()},Math.max(0,r-e)+50))}async _meshDial(e){let n=this.members.get(e);if(!n||n.sessionId||this._meshDials.has(e))return;let r=this.epoch,i=ir(F.MESH_NONCE_BYTES),c={role:"offer",sessionId:null,nonce:i,epoch:r,timer:null};this._meshDials.set(e,c);try{let d=await this._mesh.createOffer(e),h=d&&d.sessionId,m=String(d&&d.descriptor||"");if(!h||!m)throw new K("mesh transport produced no descriptor","no_descriptor");if(!this._dialStillWanted(e,c))return this._abandonDial(e,c,h);c.sessionId=h,this._meshSessions.add(h),this.bindSession(e,h,pe.PENDING);let v=await ys(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:r,kind:En.OFFER,fromFp:this.selfFp,toFp:e,descriptor:m,nonce:i});if(!await this._sendTo(e,{type:he.MESH_OFFER,gid:this.groupId,epoch:r,from:this.selfFp,to:e,d:m,n:$e(i),sig:$e(v)}))throw new K("no route to carry the dial","unreachable");c.timer=this._timer(()=>this._meshFail(e,"dial_timeout"),In.MESH_DIAL_MS)}catch(d){this._meshFail(e,d?.code||"dial_failed")}}async _onMeshOffer(e){if(!this._mesh||this._destroyed)return;let n=Ie(String(e.from||""));if(Ie(String(e.to||""))!==this.selfFp||Te(e.epoch)!==this.epoch||this.phase!==Y.READY||!this.sasConfirmed)return;let r=this.members.get(n);if(!r||!r.publicKey)throw new K("mesh dial from a non-member","not_a_member");if(r.sessionId||this._meshDials.has(n)||this.selfFp<n)return;let i=String(e.d||"");if(!i||i.length>F.MAX_DESCRIPTOR_CHARS)throw new K("mesh descriptor is missing or oversized","bad_descriptor");let c=it(String(e.n||""),{max:F.MESH_NONCE_BYTES});if(!await bs(this.subtle,r.publicKey,{groupId:this.groupId,epoch:this.epoch,kind:En.OFFER,fromFp:n,toFp:this.selfFp,descriptor:i,nonce:c},it(String(e.sig||""),{max:F.MAX_SIG_BYTES})))throw new K("mesh dial signature did not verify","bad_signature");if(this._destroyed||r.sessionId||this._meshDials.has(n)||Te(e.epoch)!==this.epoch)return;let h=this.epoch,m={role:"answer",sessionId:null,nonce:c,epoch:h,timer:null};this._meshDials.set(n,m);try{let v=await this._mesh.createAnswer(n,i),S=v&&v.sessionId,p=String(v&&v.descriptor||"");if(!S||!p)throw new K("mesh transport produced no answer","no_descriptor");if(!this._dialStillWanted(n,m))return this._abandonDial(n,m,S);m.sessionId=S,this._meshSessions.add(S),this.bindSession(n,S,pe.PENDING);let k=await ys(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:h,kind:En.ANSWER,fromFp:this.selfFp,toFp:n,descriptor:p,nonce:c});if(!await this._sendTo(n,{type:he.MESH_ANSWER,gid:this.groupId,epoch:h,from:this.selfFp,to:n,d:p,n:$e(c),sig:$e(k)}))throw new K("no route to carry the answer","unreachable");m.timer=this._timer(()=>this._meshFail(n,"answer_timeout"),In.MESH_DIAL_MS)}catch(v){this._meshFail(n,v?.code||"answer_failed")}}async _onMeshAnswer(e){if(!this._mesh||this._destroyed)return;let n=Ie(String(e.from||""));if(Ie(String(e.to||""))!==this.selfFp||Te(e.epoch)!==this.epoch)return;let r=this._meshDials.get(n);if(!r||r.role!=="offer"||!r.sessionId||r.epoch!==this.epoch)return;let i=this.members.get(n);if(!i||!i.publicKey)throw new K("mesh answer from a non-member","not_a_member");let c=String(e.d||"");if(!c||c.length>F.MAX_DESCRIPTOR_CHARS)throw new K("mesh descriptor is missing or oversized","bad_descriptor");let d=it(String(e.n||""),{max:F.MESH_NONCE_BYTES});if(d.length!==r.nonce.length||!d.every((m,v)=>m===r.nonce[v]))throw new K("mesh answer does not match the dial it claims","bad_mesh_nonce");if(!await bs(this.subtle,i.publicKey,{groupId:this.groupId,epoch:this.epoch,kind:En.ANSWER,fromFp:n,toFp:this.selfFp,descriptor:c,nonce:d},it(String(e.sig||""),{max:F.MAX_SIG_BYTES})))throw new K("mesh answer signature did not verify","bad_signature");try{await this._mesh.acceptAnswer(r.sessionId,c)}catch(m){this._meshFail(n,m?.code||"answer_rejected")}}_onMeshAbort(e){let n=Ie(String(e.from||""));Ie(String(e.to||""))===this.selfFp&&this._meshDials.has(n)&&this._meshFail(n,"peer_aborted",{tellPeer:!1})}async probeSession(e){return this._destroyed||!this._mesh||!e||this.phase!==Y.READY||!this.sasConfirmed||this.sessionToFp.has(e)?!1:this._sendProbe(e)}async _sendProbe(e){if(this._destroyed||this._probed.has(e))return!1;let n=this._linkFingerprint(e);if(!n)return!1;this._probed.add(e);let r=await Ci(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:this.epoch,fp:this.selfFp,linkFp:n});return await this._wire(e,{type:he.PROBE,gid:this.groupId,epoch:this.epoch,fp:this.selfFp,sig:$e(r)}),!0}_linkFingerprint(e){try{let n=this._mesh?.linkFingerprint?.(e);return typeof n=="string"&&n.length>0?n:""}catch{return""}}async _onProbe(e,n){if(this._destroyed||this.phase!==Y.READY||!this.sasConfirmed||Te(n.epoch)!==this.epoch)return;let r=Ie(String(n.fp||""));if(r===this.selfFp)return;let i=this.members.get(r);if(!i||!i.publicKey||this.sessionToFp.has(e)||i.sessionId&&(i.state===pe.LINKED||!this._meshDials.has(r)))return;let c=this._linkFingerprint(e);if(!c)return;if(!await Ii(this.subtle,i.publicKey,{groupId:this.groupId,epoch:this.epoch,fp:r,linkFp:c},it(String(n.sig||""),{max:F.MAX_SIG_BYTES})))throw new K("link probe signature did not verify","bad_signature");this._settleDial(r),this.bindSession(r,e,pe.LINKED),this._sendProbe(e).catch(()=>{}),this._scheduleMeshMaintain()}async invite(e){if(!this.isAdmin)throw new K("only the admin invites","not_admin");if(await this.init(),e.length+1>F.MAX_MEMBERS)throw new K(`a group is limited to ${F.MAX_MEMBERS} members`,"too_many_members");this._setPhase(Y.FORMING);for(let c of e)this._awaitingHello.set(c.sessionId,c.name||"Member");let n={type:he.INVITE,gid:this.groupId,epoch:this.epoch,name:this.name,adminSpki:$e(this.identity.spki)},r=await Promise.allSettled(e.map(c=>this._wire(c.sessionId,n))),i=r.filter(c=>c.status==="rejected");if(i.length===e.length)throw this._fail("invitations_could_not_be_sent"),new K("the invitation could not be sent \u2014 the chat with that peer is not connected","invitations_could_not_be_sent");if(i.length>0){let c=e.filter((d,h)=>r[h].status==="fulfilled");for(let d of e)c.includes(d)||this._awaitingHello.delete(d.sessionId);this._emit("partial_invite",{sent:c.length,total:e.length})}this._timer(()=>{this.phase===Y.FORMING&&this._fail("invitees_did_not_respond")},In.HELLO_MS)}async acceptInvite(e,n){let r=Dr(n);await this.init();let i=it(String(r.adminSpki||"")),{publicKey:c,fingerprint:d}=await ar(this.subtle,i);this.adminFp=d,this.epoch=Te(r.epoch),this.name=_n(r.name),this.members.set(d,{fp:d,name:"Admin",spki:i,publicKey:c,sessionId:e,state:pe.LINKED}),this.sessionToFp.set(e,d),this._setPhase(Y.FORMING),this._emitMembers(),await this._wire(e,{type:he.HELLO,gid:this.groupId,epoch:this.epoch,spki:$e(this.identity.spki)}),this._timer(()=>{this.phase===Y.FORMING&&this._fail("roster_never_arrived")},In.HELLO_MS)}async _onHello(e,n){if(!this.isAdmin)return;if(!this._awaitingHello.has(e)){this._log("warn","dropped an unsolicited group hello",{groupId:this.groupId});return}let r=it(String(n.spki||"")),{publicKey:i,fingerprint:c}=await ar(this.subtle,r);if(!(this.members.has(c)&&c!==this.selfFp)){if(this.members.size>=F.MAX_MEMBERS)throw new K("group is full","too_many_members");if(this.members.set(c,{fp:c,name:this._awaitingHello.get(e)||"Member",spki:r,publicKey:i,sessionId:e,state:pe.LINKED}),this.sessionToFp.set(e,c),this._awaitingHello.delete(e),this._emitMembers(),this._awaitingHello.size===0){if(this._pendingAdd)return this._finishAdd();await this.publishRoster(Rn.CREATE)}}}async publishRoster(e=Rn.ADD){if(!this.isAdmin)throw new K("only the admin publishes the roster","not_admin");let n=Cn([...this.members.keys()]),r={groupId:this.groupId,epoch:this.epoch,op:e,memberFps:n,name:this.name},i=await vi(this.subtle,this.identity.keyPair.privateKey,r);for(let c of n){let d=this.members.get(c);await this._broadcast({type:he.MEMBER,gid:this.groupId,epoch:this.epoch,fp:c,name:d.name==="You"?"Admin":d.name,spki:$e(d.spki)})}await this._broadcast({type:he.ROSTER,gid:this.groupId,epoch:this.epoch,op:e,name:this.name,adminSpki:$e(this.identity.spki),members:n,sig:$e(i)}),await this._startCeremony()}async _onMemberKey(e){if(Te(e.epoch)<this.epoch||this._pendingKeys.size>F.MAX_MEMBERS*2)return;let r=it(String(e.spki||"")),{publicKey:i,fingerprint:c}=await ar(this.subtle,r);if(Ie(String(e.fp||""))!==c)throw new K("member key does not match its fingerprint","fingerprint_mismatch");this._pendingKeys.set(c,{spki:r,publicKey:i,name:_n(e.name)})}async _onRoster(e,n){let r=Te(n.epoch);if(this.isAdmin)return;if(r<this.epoch)throw new K("roster epoch went backwards","stale_epoch");let i=it(String(n.adminSpki||"")),{publicKey:c,fingerprint:d}=await ar(this.subtle,i);if(this.adminFp&&d!==this.adminFp)throw new K("roster was signed by someone other than the admin","wrong_admin");if(!Array.isArray(n.members))throw new K("roster carries no member list","bad_roster");if(n.members.length>F.MAX_MEMBERS)throw new K("roster exceeds the member limit","too_many_members");let h=Cn(n.members.map(p=>String(p||"")));if(!h.includes(this.selfFp))throw new K("roster does not include us","not_a_member");if(!h.includes(d))throw new K("roster does not include its author","bad_roster");let m=[];for(let p of h){if(p===this.selfFp){m.push({fp:p,name:"You",spki:this.identity.spki,publicKey:null});continue}let k=this._pendingKeys.get(p)||(p===d?{spki:i,publicKey:c,name:"Admin"}:null);if(!k)throw new K("roster names a member whose key never arrived","missing_member_key");m.push({fp:p,name:k.name,spki:k.spki,publicKey:k.publicKey})}if(!await wi(this.subtle,c,{groupId:this.groupId,epoch:r,op:String(n.op||""),memberFps:h,name:_n(n.name)},it(String(n.sig||""),{max:F.MAX_SIG_BYTES})))throw new K("roster signature did not verify","bad_signature");this.epoch=r,this.name=_n(n.name),this.adminFp=d;let S=this.members;this.members=new Map;for(let p of m){let k=S.get(p.fp);this.members.set(p.fp,{fp:p.fp,name:p.fp===this.selfFp?"You":p.name,spki:p.spki,publicKey:p.fp===this.selfFp?null:p.publicKey,sessionId:k?.sessionId||null,state:p.fp===this.selfFp?pe.SELF:k?.state===pe.LINKED?pe.LINKED:pe.PENDING})}for(let[p,k]of[...this.sessionToFp])this.members.has(k)||this.sessionToFp.delete(p);this._emit("roster",{name:this.name,epoch:this.epoch,adminFp:d}),this._emitMembers(),await this._startCeremony()}async _startCeremony(){try{this.ceremony?.destroy()}catch{}this._meshReset(),this.ceremony=new Tr({groupId:this.groupId,epoch:this.epoch,selfFingerprint:this.selfFp,memberFingerprints:[...this.members.keys()]}),this._setPhase(Y.COMMITTING);let e=await this.ceremony.ownCommitment(this.subtle);await this._broadcast({type:he.COMMIT,gid:this.groupId,epoch:this.epoch,fp:this.selfFp,commit:$e(e)});let n=this.epoch;this._timer(()=>{this.epoch===n&&(this.phase===Y.COMMITTING||this.phase===Y.REVEALING)&&this._fail("ceremony_timed_out")},In.CEREMONY_MS),await this._drainPendingCeremony(),await this._maybeReveal()}_holdCeremonyFrame(e){this._pendingCeremony.length>=F.MAX_MEMBERS*2||this._pendingCeremony.push(e)}async _drainPendingCeremony(){if(!this._draining){this._draining=!0;try{let e=this._pendingCeremony;this._pendingCeremony=[];for(let n of e)try{n.type===he.COMMIT?await this._onCommit(n):n.type===he.REVEAL&&await this._onReveal(n)}catch(r){this._log("warn","held ceremony frame discarded",{code:r?.code})}}finally{this._draining=!1}}}async _onCommit(e){if(!this.ceremony)return this._holdCeremonyFrame(e);Te(e.epoch)===this.epoch&&(this.ceremony.acceptCommitment(Ie(String(e.fp||"")),it(String(e.commit||""),{max:F.COMMIT_BYTES})),await this._drainPendingCeremony(),await this._maybeReveal())}async _maybeReveal(){if(!this.ceremony||this.ceremony.revealed||!this.ceremony.commitmentsComplete)return;this._setPhase(Y.REVEALING);let e=this.ceremony.reveal();await this._broadcast({type:he.REVEAL,gid:this.groupId,epoch:this.epoch,fp:this.selfFp,nonce:$e(e)}),await this._maybeFinish()}async _onReveal(e){if(!this.ceremony)return this._holdCeremonyFrame(e);if(Te(e.epoch)===this.epoch){if(!this.ceremony.commitments.has(Ie(String(e.fp||""))))return this._holdCeremonyFrame(e);await this.ceremony.acceptReveal(this.subtle,Ie(String(e.fp||"")),it(String(e.nonce||""),{max:F.NONCE_BYTES})),await this._maybeFinish()}}async _maybeFinish(){if(!this.ceremony||!this.ceremony.revealsComplete||this.sasCode)return;let e=await this.ceremony.finish(this.subtle);this._setPhase(Y.AWAITING_SAS),this.sasCode=e,this._emit("sas",{code:e})}confirmSas(){if(this.phase!==Y.AWAITING_SAS||!this.sasCode)throw new K("there is no group code to confirm","no_code");this.sasConfirmed=!0,this.phase=Y.READY;try{this.ceremony?.destroy()}catch{}this.ceremony=null,this._emit("confirmed",{members:this._memberSnapshot()}),this._scheduleMeshMaintain()}async _recomputeSas(e){return gs(this.subtle,{groupId:this.groupId,epoch:this.epoch,contributions:e})}async sendText(e){if(this.phase!==Y.READY||!this.sasConfirmed)throw new K("the group code has not been confirmed","not_ready");let n=String(e??"");if(!n.trim())throw new K("empty message","empty");let r=++this.seq,i=await ms(this.subtle,n),c=await Si(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:this.epoch,seq:r,senderFp:this.selfFp,bodyHash:i}),d={type:he.MESSAGE,gid:this.groupId,epoch:this.epoch,seq:r,fp:this.selfFp,ts:Date.now(),body:n,sig:$e(c)},{delivered:h,unreachable:m}=await this._broadcast(d);return{seq:r,delivered:h,total:this.members.size-1,unreachable:m}}async _onMessage(e,{relayed:n=!1}={}){let r=Te(e.epoch),i=Te(e.seq),c=Ie(String(e.fp||""));if(c===this.selfFp)return;let d=this.members.get(c);if(!d||!d.publicKey)throw new K("message from a non-member","not_a_member");if(r!==this.epoch)throw new K("message from another epoch","stale_epoch");let h=String(e.body??""),m=await ms(this.subtle,h);if(!await Ei(this.subtle,d.publicKey,{groupId:this.groupId,epoch:r,seq:i,senderFp:c,bodyHash:m},it(String(e.sig||""),{max:F.MAX_SIG_BYTES})))throw new K("message signature did not verify","bad_signature");let S=this.transcript.get(c)||new Map,p=$e(m),k=S.get(i);if(k!==void 0){if(k===p)return;throw this._emit("inconsistency",{fp:c,seq:i,name:d.name}),new K("member sent conflicting messages under one sequence number","transcript_split")}S.set(i,p),S.size>512&&S.delete(S.keys().next().value),this.transcript.set(c,S),this._emit("message",{fp:c,name:d.name,body:h,seq:i,ts:Number.isFinite(e.ts)?e.ts:Date.now(),relayed:n})}getCallSnapshot(){if(!this.call)return null;let e=this.members.get(this.call.startedBy);return{callId:this.call.callId,startedBy:this.call.startedBy,startedByName:this.call.startedBy===this.selfFp?"You":e?.name||"A member",withVideo:this.call.withVideo,startedAt:this.call.startedAt,joined:this.call.joined,participants:[...this.call.participants].map(n=>{let r=this.members.get(n);return{fp:n,name:n===this.selfFp?"You":r?.name||"A member",self:n===this.selfFp,sessionId:r?.sessionId||null,state:r?.state||pe.LOST}}).sort((n,r)=>n.fp<r.fp?-1:n.fp>r.fp?1:0)}}_emitCall(){this._emit("call",{call:this.getCallSnapshot()})}_requireReady(){if(this.phase!==Y.READY||!this.sasConfirmed)throw new K("the group code has not been confirmed","not_ready")}async _sendCallFrame(e,n,r){let i=++this.callSeq,c=await Ti(this.subtle,this.identity.keyPair.privateKey,{groupId:this.groupId,epoch:this.epoch,callId:n,action:e,fp:this.selfFp,seq:i,withVideo:r});return this._broadcast({type:he.CALL,gid:this.groupId,epoch:this.epoch,callId:n,action:e,fp:this.selfFp,seq:i,v:r===!0,ts:Date.now(),sig:$e(c)})}async startCall({withVideo:e=!1,prepare:n=null}={}){if(this._requireReady(),this.call)throw new K("a call is already running in this group","call_in_progress");let r=Ai();this.call={callId:r,startedBy:this.selfFp,withVideo:e===!0,startedAt:Date.now(),participants:new Set([this.selfFp]),joined:!0},this._emitCall(),this._scheduleMeshMaintain();try{typeof n=="function"&&await n(this.getCallSnapshot());let{unreachable:i}=await this._sendCallFrame(zt.START,r,this.call.withVideo);return{callId:r,unreachable:i}}catch(i){throw this.call=null,this._emitCall(),i}}async joinCall(){if(this._requireReady(),!this.call)throw new K("there is no call to join","no_call");if(this.call.joined)return{callId:this.call.callId,unreachable:[]};this.call.joined=!0,this.call.participants.add(this.selfFp),this._emitCall(),this._scheduleMeshMaintain();let{unreachable:e}=await this._sendCallFrame(zt.JOIN,this.call.callId,this.call.withVideo);return{callId:this.call.callId,unreachable:e}}async leaveCall(){if(!this.call)return;let e=this.call.callId,n=this.call.withVideo;this.call.joined=!1,this.call.participants.delete(this.selfFp),this.call.participants.size===0&&(this.call=null),this._emitCall();try{await this._sendCallFrame(zt.LEAVE,e,n)}catch{}}_dropFromCall(e){!this.call||!this.call.participants.has(e)||(this.call.participants.delete(e),this.call.participants.size===0&&(this.call=null),this._emitCall())}async _onCall(e){let n=Te(e.epoch),r=Te(e.seq),i=Ie(String(e.fp||"")),c=xs(String(e.callId||"")),d=String(e.action||""),h=e.v===!0;if(i===this.selfFp)return;let m=this.members.get(i);if(!m||!m.publicKey)throw new K("call frame from a non-member","not_a_member");if(n!==this.epoch)throw new K("call frame from another epoch","stale_epoch");let v=this._callSeen.get(i);if(v!==void 0&&r<=v)return;if(!await Ni(this.subtle,m.publicKey,{groupId:this.groupId,epoch:n,callId:c,action:d,fp:i,seq:r,withVideo:h},it(String(e.sig||""),{max:F.MAX_SIG_BYTES})))throw new K("call frame signature did not verify","bad_signature");if(this._callSeen.set(i,r),!(this.phase!==Y.READY||!this.sasConfirmed))switch(d){case zt.START:{if(this.call&&this.call.callId!==c){if(c>=this.call.callId)return;this.call=null}this.call?this.call.participants.add(i):this.call={callId:c,startedBy:i,withVideo:h,startedAt:Date.now(),participants:new Set([i]),joined:!1},this._emitCall(),this._scheduleMeshMaintain();return}case zt.JOIN:{if(!this.call||this.call.callId!==c||this.call.participants.has(i))return;this.call.participants.add(i),h&&(this.call.withVideo=!0),this._emitCall(),this._scheduleMeshMaintain();return}case zt.LEAVE:{if(!this.call||this.call.callId!==c)return;this._dropFromCall(i);return}default:return}}async handleFrame(e,n,{relayed:r=!1}={}){if(this._destroyed||!or(n))return;let i=Dr(n);if(!(!i||!Pr.has(i.type))&&Dt(String(i.gid||""))===this.groupId)switch(i.type){case he.RELAY:return this._onRelay(e,i);case he.HELLO:return this._onHello(e,i);case he.MEMBER:return this._onMemberKey(i);case he.ROSTER:return this._onRoster(e,i);case he.COMMIT:return this._onCommit(i);case he.REVEAL:return this._onReveal(i);case he.MESSAGE:return this._onMessage(i,{relayed:r});case he.LEAVE:return this._onLeave(i);case he.MESH_OFFER:return this._onMeshOffer(i);case he.MESH_ANSWER:return this._onMeshAnswer(i);case he.MESH_ABORT:return this._onMeshAbort(i);case he.CALL:return this._onCall(i);case he.PROBE:return r?void 0:this._onProbe(e,i);case he.INVITE:return;default:return}}async _onRelay(e,n){let r=Ie(String(n.to||"")),i=n.inner;if(!or(i)||i.type===he.RELAY)return;if(r===this.selfFp)return this.handleFrame(e,i,{relayed:!0});if(n.hopped===!0)return;let c=this.members.get(r);!c||c.state!==pe.LINKED||!c.sessionId||await this._wire(c.sessionId,{...n,hopped:!0})}async _onLeave(e){let n=Ie(String(e.fp||"")),r=this.members.get(n);if(!(!r||n===this.selfFp)){if(this._emit("left",{fp:n,name:r.name}),this._dropFromCall(n),!this.isAdmin&&n===this.adminFp){this.members.delete(n);for(let[i,c]of[...this.sessionToFp])c===n&&this.sessionToFp.delete(i);this._emit("ended",{reason:"admin_left"});return}if(this.isAdmin){this.members.delete(n);for(let[i,c]of[...this.sessionToFp])c===n&&this.sessionToFp.delete(i);if(this._emitMembers(),this.members.size<F.MIN_MEMBERS){this._emit("ended",{reason:"last_member_left"});return}this.epoch+=1,await this.publishRoster(Rn.REMOVE)}}}async leave(){try{await this._broadcast({type:he.LEAVE,gid:this.groupId,fp:this.selfFp})}catch{}}async addMembers(e){if(!this.isAdmin)throw new K("only the admin invites","not_admin");if(!Array.isArray(e)||e.length===0)return 0;if(this._pendingAdd)throw new K("an invitation round is already running","add_in_flight");if(this.members.size+e.length>F.MAX_MEMBERS)throw new K(`a group is limited to ${F.MAX_MEMBERS} members`,"too_many_members");for(let d of e)if(this.sessionToFp.has(d.sessionId))throw new K("that chat is already a member of this group","already_a_member");this._pendingAdd={op:Rn.ADD,epoch:this.epoch+1,before:new Set(this.members.keys())};for(let d of e)this._awaitingHello.set(d.sessionId,d.name||"Member");let n={type:he.INVITE,gid:this.groupId,epoch:this._pendingAdd.epoch,name:this.name,adminSpki:$e(this.identity.spki)},r=this._pendingAdd,i=await Promise.allSettled(e.map(d=>this._wire(d.sessionId,n))),c=i.filter(d=>d.status==="fulfilled").length;if(c===0){for(let d of e)this._awaitingHello.delete(d.sessionId);throw this._pendingAdd===r&&(this._pendingAdd=null),new K("the invitation could not be sent \u2014 that chat is not connected","invitations_could_not_be_sent")}return e.forEach((d,h)=>{i[h].status==="rejected"&&this._awaitingHello.delete(d.sessionId)}),this._pendingAdd===r&&this._timer(()=>{this._pendingAdd===r&&this._finishAdd()},In.HELLO_MS),c}async _finishAdd(){let e=this._pendingAdd;return e?(this._pendingAdd=null,this._awaitingHello.clear(),[...this.members.keys()].filter(r=>!e.before.has(r)).length===0?(this._emit("add_failed",{reason:"nobody_joined"}),!1):(this.epoch=e.epoch,this._emitMembers(),await this.publishRoster(e.op),!0)):!1}async removeMember(e){if(!this.isAdmin)throw new K("only the admin removes members","not_admin");if(e===this.selfFp)throw new K("the admin cannot remove themselves","bad_target");if(!this.members.has(e))return!1;if(this.members.size-1<F.MIN_MEMBERS)throw new K("a group cannot drop below two members \u2014 leave it instead","would_empty_group");this.members.delete(e);for(let[n,r]of[...this.sessionToFp])r===e&&this.sessionToFp.delete(n);return this.epoch+=1,this._emitMembers(),await this.publishRoster(Rn.REMOVE),!0}};var ko=t=>/rate limit/i.test(t?.message||"");function Bi({getManager:t,gapMs:e=260,attempts:n=4,now:r=()=>Date.now(),sleep:i=c=>new Promise(d=>setTimeout(d,c))}={}){let c=new Map;return async function(h,m){let v=t(h);if(!v||typeof v.sendMessage!="function")throw new Error("no such link");if(typeof v.isConnected=="function"&&!v.isConnected())throw new Error("link is down");let S=c.get(h)||{chain:Promise.resolve(),lastAt:0},p=JSON.stringify(m),k=S.chain.then(async()=>{let y=e-(r()-S.lastAt);y>0&&await i(y);let I=null;for(let B=0;B<n;B++)try{return await v.sendMessage(p),S.lastAt=r(),!0}catch(D){if(I=D,!ko(D))throw D;await i(e*(B+1))}throw I});return S.chain=k.catch(()=>{}),c.set(h,S),k}}var jn={move:{damping:1,response:.4},drawer:{damping:.8,response:.3},rotate:{damping:.8,response:.4}},So=1/480,Eo=.064;function cr(){try{return typeof matchMedia=="function"&&matchMedia("(prefers-reduced-motion: reduce)").matches}catch{return!1}}function Ro(t,e=.998){return t/1e3*e/(1-e)}function zi(t,e,n,r={}){let{flick:i=220,decelerationRate:c=.998}=r;if(!n||!n.length)return t;let d=t+Ro(e,c),h=n;if(Math.abs(e)>i){let m=n.filter(v=>e>0?v>=t:v<=t);m.length&&(h=m)}return h.reduce((m,v)=>Math.abs(v-d)<Math.abs(m-d)?v:m,h[0])}function ks(t,e,n=.55){return e?t*e*n/(e+n*Math.abs(t)):0}function Ui(t=100){let e=[];return{add(n,r=performance.now()){for(e.push({value:n,time:r});e.length>2&&r-e[0].time>t;)e.shift()},get(n=performance.now()){if(e.length<2)return 0;let r=e[e.length-1];if(n-r.time>t)return 0;let i=e[0],c=(r.time-i.time)/1e3;return c<=0?0:(r.value-i.value)/c},reset(){e.length=0}}}function Gi(t){let{from:e,to:n,velocity:r=0,damping:i=jn.move.damping,response:c=jn.move.response,restDelta:d=.1,restSpeed:h=.5,respectReducedMotion:m=!0,onUpdate:v,onComplete:S}=t,p=e,k=r,y=n,I=0,B=0,D=!1,le=2*Math.PI/c,ee=i,ge=()=>{D=!0,I=0,p=y,k=0,v&&v(p),S&&S()};if(m&&cr())return ge(),{get value(){return p},get velocity(){return 0},get done(){return!0},retarget(C){y=C,ge()},stop(){}};let we=C=>{I=0;let P=Math.min((C-B)/1e3,Eo);B=C;let j=P;for(;j>0;){let O=Math.min(So,j),z=-le*le*(p-y)-2*ee*le*k;k+=z*O,p+=k*O,j-=O}if(Math.abs(p-y)<d&&Math.abs(k)<h){ge();return}v&&v(p),I=requestAnimationFrame(we)};return B=performance.now(),I=requestAnimationFrame(we),{get value(){return p},get velocity(){return k},get done(){return D},retarget(C){y=C},stop(){I&&cancelAnimationFrame(I),I=0,D=!0}}}var Ss=()=>{let[t]=React.useState(()=>typeof window>"u"||!window.location||ci()?null:li({pathname:window.location.pathname||"/",languages:window.navigator?.languages||[],stored:cs()})),[e,n]=React.useState(!1),[r,i]=React.useState(!1);if(React.useEffect(()=>{if(!t)return;let I=setTimeout(()=>i(!0),600);return()=>clearTimeout(I)},[t]),!t||e)return null;let c=_r[t]||{},d=c.dir==="rtl"?"rtl":"ltr",h=typeof window<"u"?window.location.pathname:"/",m=si(t,h),v=cr(),S=()=>{ls(),n(!0)},p=React.createElement("div",{key:"line",lang:c.htmlLang||t,dir:d,style:{fontSize:"13px",lineHeight:1.45,color:"var(--sb-text-4)",textAlign:"start"}},a("language.suggest.text",null,t)),k=React.createElement("a",{key:"cta",href:m,hrefLang:c.htmlLang||t,lang:c.htmlLang||t,dir:d,onClick:()=>{ii(t),ls()},style:{display:"inline-flex",alignItems:"center",gap:"6px",padding:"7px 12px",borderRadius:"9px",border:"1px solid rgba(var(--sb-orange-rgb), 0.30)",background:"rgba(var(--sb-orange-rgb), 0.12)",color:"var(--sb-orange)",fontSize:"12.5px",fontWeight:600,textDecoration:"none",whiteSpace:"nowrap"}},a("language.suggest.cta",null,t)),y=React.createElement("button",{key:"dismiss",type:"button",onClick:S,"aria-label":a("language.suggest.dismiss",null,t),style:{padding:"7px 10px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)",color:"var(--sb-text-7)",font:"inherit",fontSize:"12.5px",fontWeight:500,cursor:"pointer",whiteSpace:"nowrap"}},a("language.suggest.dismiss",null,t));return React.createElement("div",{role:"region","aria-label":a("language.label"),style:{position:"fixed",bottom:"24px",insetInlineStart:"24px",zIndex:50,maxWidth:"min(340px, calc(100vw - 48px))",display:"flex",flexDirection:"column",gap:"11px",padding:"14px 16px",borderRadius:"14px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"var(--sb-surface)",boxShadow:"0 16px 40px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))",opacity:r?1:0,transform:r||v?"none":"translateY(10px)",transition:v?"opacity .2s linear":"opacity .3s ease, transform .3s cubic-bezier(.2,.7,.3,1)",pointerEvents:r?"auto":"none"}},[p,React.createElement("div",{key:"actions",style:{display:"flex",alignItems:"center",gap:"8px"}},[k,y])])};window.LanguageSuggestion=Ss;var R=(...t)=>React.createElement(...t),_={bg:"var(--sb-bg-deep)",panel:"var(--sb-surface)",panel2:"var(--sb-surface-2)",line:"rgba(var(--sb-ink), 0.07)",line2:"rgba(var(--sb-ink), 0.13)",ink:"var(--sb-text-1)",ink2:"var(--sb-text-5b)",ink3:"var(--sb-text-9)",accent:"var(--sb-orange)",good:"var(--sb-green)",warn:"var(--sb-yellow-2)",bad:"var(--sb-red)",accentSolid:"var(--sb-orange-solid)",goodSolid:"var(--sb-green-solid)",warnSolid:"var(--sb-yellow-2-solid)",badSolid:"var(--sb-red-solid)",mono:"'JetBrains Mono', ui-monospace, monospace"},sn={users:'<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19"/><circle cx="10" cy="8" r="3.2"/><path d="M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4"/><path d="M15.5 5.3a3.2 3.2 0 0 1 0 5.4"/></svg>',send:'<svg width="17" height="17" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M22 2 11 13"/><path d="m22 2-7 20-4-9-9-4 20-7z"/></svg>',shield:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z"/><path d="m9 12 2 2 4-4"/></svg>',x:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round"><path d="M18 6 6 18M6 6l12 12"/></svg>',plus:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.2" stroke-linecap="round"><path d="M12 5v14M5 12h14"/></svg>',relay:'<svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 12h4l3-7 4 14 3-7h2"/></svg>',phone:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z"/></svg>',exit:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M10 20H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h4"/><path d="m15 16 4-4-4-4"/><path d="M19 12H10"/></svg>',video:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M23 7l-7 5 7 5V7z"/><rect x="1" y="5" width="15" height="14" rx="2.5"/></svg>'},an=(t,e={})=>R("span",{style:{display:"grid",placeItems:"center",...e},dangerouslySetInnerHTML:{__html:t}}),mt=(t=!1)=>({display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"11px 18px",borderRadius:"10px",cursor:"pointer",fontFamily:"inherit",fontSize:"14px",fontWeight:700,border:t?"none":`1px solid ${_.line2}`,background:t?_.accentSolid:"transparent",color:t?"var(--sb-on-accent)":_.ink2}),lr={position:"fixed",inset:0,zIndex:90,display:"grid",placeItems:"center",background:"rgba(var(--sb-scrim-rgb), 0.72)",backdropFilter:"blur(6px)",padding:"20px"},dr={width:"100%",maxWidth:"440px",background:_.panel,border:`1px solid ${_.line}`,borderRadius:"16px",padding:"24px",display:"flex",flexDirection:"column",gap:"18px",boxShadow:"0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))"};function _o(t,e){let n=new TextEncoder,r=String(t);for(;n.encode(r).length>e;)r=r.slice(0,-1);return r}var Mn={fontFamily:_.mono,fontSize:"10px",fontWeight:700,letterSpacing:"1.3px",textTransform:"uppercase",color:_.ink3};function Co(t){switch(t.phase){case Y.FORMING:return a("group.waitingJoin");case Y.COMMITTING:return a("group.waitingCommit");case Y.REVEALING:return a("group.exchangingNonces");case Y.FAILED:return Io[t.error]||a("group.errNotFormed");default:return a("group.working")}}var Io={invitations_could_not_be_sent:a("group.errInviteFailed"),invitees_did_not_respond:a("group.errNobodyAccepted"),roster_never_arrived:a("group.errNoMemberList"),ceremony_timed_out:a("groupErr.timeout"),bad_signature:a("group.errUnsignedList"),wrong_admin:a("group.errNotOwner"),fingerprint_mismatch:a("groupErr.keyMismatch"),commitment_mismatch:a("groupErr.revealMismatch"),commitment_changed:a("groupErr.commitChanged"),missing_member_key:a("groupErr.missingKey"),not_a_member:a("groupErr.outsider"),bad_name:a("group.nameTooLong"),too_many_members:a("groupErr.limit"),frame_too_large:a("groupErr.tooLarge")};function Hi({group:t,onConfirm:e,onCancel:n}){if(!t)return null;let r=t.phase===Y.FAILED,i=t.phase!==Y.AWAITING_SAS||!t.sasCode;return R("div",{style:lr,role:"dialog","aria-modal":"true"},R("div",{style:dr},[R("div",{key:"h",style:{display:"flex",flexDirection:"column",gap:"6px"}},[R("span",{key:"l",style:Mn},a("group.sasTitle")),R("h3",{key:"t",style:{margin:0,fontSize:"19px",fontWeight:700,color:_.ink}},t.name)]),i?R("div",{key:"wait",style:{padding:"28px 16px",textAlign:"center",borderRadius:"12px",background:_.panel2,border:`1px solid ${_.line}`,color:_.ink2,fontSize:"14px"}},[R("div",{key:"d",style:{fontFamily:_.mono,fontSize:"26px",letterSpacing:"6px",color:r?_.bad:_.ink3}},"\xB7\xB7\xB7\xB7\xB7\xB7\xB7"),R("div",{key:"s",style:{marginTop:"10px",color:r?_.bad:_.ink2}},Co(t)),r&&R("div",{key:"why",style:{marginTop:"6px",fontFamily:_.mono,fontSize:"11px",color:_.ink3}},t.error||"unknown")]):R("div",{key:"code",style:{padding:"22px 16px",textAlign:"center",borderRadius:"12px",background:"rgba(var(--sb-orange-rgb), 0.09)",border:"1px solid rgba(var(--sb-orange-rgb), 0.3)"}},R("span",{dir:"ltr",style:{fontFamily:_.mono,fontSize:"clamp(30px, 9vw, 42px)",fontWeight:700,letterSpacing:"9px",color:_.accentSolid,unicodeBidi:"isolate"}},t.sasCode)),R("p",{key:"why",style:{margin:0,fontSize:"13.5px",lineHeight:1.62,color:_.ink2}},[a("group.sasReadAloud"),R("b",{key:"b",style:{color:_.ink}},`all ${t.members.length-1} other members`)," \u2014 in person, or on a call where you recognise every voice. Everyone must see the same code."]),R("p",{key:"warn",style:{margin:0,padding:"11px 13px",borderRadius:"9px",fontSize:"12.5px",lineHeight:1.55,background:"rgba(var(--sb-red-rgb), 0.09)",border:"1px solid rgba(var(--sb-red-rgb), 0.26)",color:"var(--sb-red-soft)"}},r?a("group.errNothingSent"):a("group.sasWarning")),R("div",{key:"actions",style:{display:"flex",gap:"10px"}},[R("button",{key:"c",onClick:n,style:{...mt(r),flex:r?2:1}},r?a("group.close"):a("group.cancel")),!r&&R("button",{key:"ok",onClick:e,disabled:i,style:{...mt(!0),flex:2,opacity:i?.4:1,cursor:i?"not-allowed":"pointer"}},[an(sn.shield,{key:"i"}),a("group.sasEveryone")])])]))}function Wi({candidates:t,relayOnly:e,onCreate:n,onCancel:r}){let[i,c]=React.useState(""),[d,h]=React.useState([]),m=F.MAX_MEMBERS-1,v=p=>h(k=>k.includes(p)?k.filter(y=>y!==p):k.length>=m?k:[...k,p]),S=i.trim().length>0&&d.length>=1;return R("div",{style:lr,role:"dialog","aria-modal":"true"},R("div",{style:{...dr,maxWidth:"470px"}},[R("div",{key:"h",style:{display:"flex",flexDirection:"column",gap:"6px"}},[R("span",{key:"l",style:Mn},a("group.new")),R("p",{key:"p",style:{margin:0,fontSize:"13.5px",lineHeight:1.6,color:_.ink2}},a("group.capacity",{max:F.MAX_MEMBERS}))]),R("input",{key:"name",value:i,onChange:p=>c(_o(p.target.value,F.MAX_NAME_BYTES)),placeholder:a("group.name"),style:{width:"100%",padding:"12px 14px",borderRadius:"10px",outline:"none",background:_.panel2,border:`1px solid ${_.line2}`,color:_.ink,fontFamily:"inherit",fontSize:"14.5px"}}),R("div",{key:"pick",style:{display:"flex",flexDirection:"column",gap:"9px"}},[R("div",{key:"l",style:{display:"flex",justifyContent:"space-between",alignItems:"baseline"}},[R("span",{key:"a",style:Mn},a("group.members")),R("span",{key:"b",style:{...Mn,color:d.length>=m?_.warn:_.ink3}},`${d.length} / ${m}`)]),t.length===0?R("div",{key:"empty",style:{padding:"18px 14px",borderRadius:"10px",textAlign:"center",background:_.panel2,border:`1px dashed ${_.line2}`,color:_.ink3,fontSize:"13px",lineHeight:1.55}},a("group.noVerified")):R("div",{key:"list",className:"msc-scroll",style:{display:"flex",flexDirection:"column",gap:"6px",maxHeight:"240px",overflowY:"auto"}},t.map(p=>{let k=d.includes(p.id),y=!k&&d.length>=m;return R("button",{key:p.id,onClick:()=>v(p.id),disabled:y,style:{display:"flex",alignItems:"center",gap:"11px",padding:"10px 12px",borderRadius:"10px",cursor:y?"not-allowed":"pointer",textAlign:"start",background:k?"rgba(var(--sb-orange-rgb), 0.1)":"transparent",border:`1px solid ${k?"rgba(var(--sb-orange-rgb), 0.32)":_.line}`,opacity:y?.4:1,fontFamily:"inherit"}},[R("span",{key:"av",style:{flex:"none",width:"32px",height:"32px",borderRadius:"9px",display:"grid",placeItems:"center",background:_.panel2,border:`1px solid ${_.line}`,fontFamily:_.mono,fontSize:"11px",fontWeight:700,color:_.ink2}},p.mono),R("span",{key:"n",style:{flex:1,minWidth:0,fontSize:"14px",color:_.ink,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},p.name),R("span",{key:"tick",style:{flex:"none",width:"18px",height:"18px",borderRadius:"5px",background:k?_.accentSolid:"transparent",border:`1px solid ${k?_.accentSolid:_.line2}`}})])}))]),!e&&R("p",{key:"ip",style:{margin:0,padding:"11px 13px",borderRadius:"9px",fontSize:"12.5px",lineHeight:1.55,background:"rgba(var(--sb-yellow-2-rgb), 0.08)",border:"1px solid rgba(var(--sb-yellow-2-rgb), 0.26)",color:"var(--sb-yellow-2)"}},a("group.relayOnlyOff")),R("div",{key:"actions",style:{display:"flex",gap:"10px"}},[R("button",{key:"c",onClick:r,style:{...mt(!1),flex:1}},a("group.cancelBtn")),R("button",{key:"ok",onClick:()=>S&&n({name:i.trim(),sessionIds:d}),disabled:!S,style:{...mt(!0),flex:2,opacity:S?1:.4,cursor:S?"pointer":"not-allowed"}},a("group.create"))])]))}function Vi({message:t,onDismiss:e}){return t?R("div",{style:lr,role:"alertdialog","aria-modal":"true"},R("div",{style:{...dr,maxWidth:"400px"}},[R("span",{key:"l",style:Mn},a("group.errNotCreated")),R("p",{key:"m",style:{margin:0,fontSize:"14px",lineHeight:1.6,color:_.ink2}},t),R("button",{key:"ok",onClick:e,style:mt(!0)},a("group.close"))])):null}function ji({candidates:t,remaining:e,onAdd:n,onCancel:r}){let[i,c]=React.useState([]),d=h=>c(m=>m.includes(h)?m.filter(v=>v!==h):m.length>=e?m:[...m,h]);return R("div",{style:lr,role:"dialog","aria-modal":"true"},R("div",{style:{...dr,maxWidth:"440px"}},[R("div",{key:"h",style:{display:"flex",flexDirection:"column",gap:"6px"}},[R("span",{key:"l",style:Mn},a("group.addMembers")),R("p",{key:"p",style:{margin:0,fontSize:"13.5px",lineHeight:1.6,color:_.ink2}},e>0?a("group.roomFor",{remaining:e}):a("group.errFull"))]),t.length===0?R("div",{key:"empty",style:{padding:"18px 14px",borderRadius:"10px",textAlign:"center",background:_.panel2,border:`1px dashed ${_.line2}`,color:_.ink3,fontSize:"13px",lineHeight:1.55}},a("group.noMoreToAdd")):R("div",{key:"list",className:"msc-scroll",style:{display:"flex",flexDirection:"column",gap:"6px",maxHeight:"260px",overflowY:"auto"}},t.map(h=>{let m=i.includes(h.id),v=!m&&i.length>=e;return R("button",{key:h.id,onClick:()=>d(h.id),disabled:v,style:{display:"flex",alignItems:"center",gap:"11px",padding:"10px 12px",borderRadius:"10px",cursor:v?"not-allowed":"pointer",textAlign:"start",background:m?"rgba(var(--sb-orange-rgb), 0.1)":"transparent",border:`1px solid ${m?"rgba(var(--sb-orange-rgb), 0.32)":_.line}`,opacity:v?.4:1,fontFamily:"inherit"}},[R("span",{key:"av",style:{flex:"none",width:"32px",height:"32px",borderRadius:"9px",display:"grid",placeItems:"center",background:_.panel2,border:`1px solid ${_.line}`,fontFamily:_.mono,fontSize:"11px",fontWeight:700,color:_.ink2}},h.mono),R("span",{key:"n",style:{flex:1,minWidth:0,fontSize:"14px",color:_.ink,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},h.name),R("span",{key:"tick",style:{flex:"none",width:"18px",height:"18px",borderRadius:"5px",background:m?_.accentSolid:"transparent",border:`1px solid ${m?_.accentSolid:_.line2}`}})])})),R("p",{key:"note",style:{margin:0,padding:"11px 13px",borderRadius:"9px",fontSize:"12.5px",lineHeight:1.55,background:_.panel2,border:`1px solid ${_.line}`,color:_.ink3}},a("group.inviteSentNote")),R("div",{key:"actions",style:{display:"flex",gap:"10px"}},[R("button",{key:"c",onClick:r,style:{...mt(!1),flex:1}},a("group.cancelBtn")),R("button",{key:"ok",onClick:()=>i.length&&n(i),disabled:i.length===0,style:{...mt(!0),flex:2,opacity:i.length?1:.4,cursor:i.length?"pointer":"not-allowed"}},i.length>1?a("group.invitePeople",{count:i.length}):a("group.invite"))])]))}function $i({invite:t,onAccept:e,onDecline:n}){return t?R("div",{style:lr,role:"dialog","aria-modal":"true"},R("div",{style:dr},[R("div",{key:"h",style:{display:"flex",flexDirection:"column",gap:"6px"}},[R("span",{key:"l",style:Mn},a("group.invitation")),R("h3",{key:"t",style:{margin:0,fontSize:"19px",fontWeight:700,color:_.ink}},t.name)]),R("p",{key:"p",style:{margin:0,fontSize:"13.5px",lineHeight:1.62,color:_.ink2}},[R("b",{key:"b",style:{color:_.ink}},t.fromLabel)," invited you to a peer-to-peer group. You will compare one safety code with every member before anything is sent."]),R("p",{key:"note",style:{margin:0,padding:"11px 13px",borderRadius:"9px",fontSize:"12.5px",lineHeight:1.55,background:_.panel2,border:`1px solid ${_.line}`,color:_.ink3}},a("group.joinNote")),R("div",{key:"actions",style:{display:"flex",gap:"10px"}},[R("button",{key:"d",onClick:n,style:{...mt(!1),flex:1}},a("group.decline")),R("button",{key:"a",onClick:e,style:{...mt(!0),flex:2}},a("group.join"))])])):null}function Mo({group:t,onRemove:e,isAdmin:n}){return R("div",{className:"msc-scroll",style:{display:"flex",gap:"7px",padding:"9px 16px",overflowX:"auto",borderBottom:`1px solid ${_.line}`,flex:"none"}},t.members.map(r=>{let i=r.state===pe.SELF,c=r.state===pe.LOST,d=i||r.state===pe.LINKED?_.goodSolid:r.state===pe.PENDING?_.warnSolid:_.badSolid,h=r.state===pe.PENDING;return R("span",{key:r.fp,title:i?"You":r.state===pe.LINKED?a("group.directLink"):r.state===pe.PENDING?a("group.noDirectLink"):a("group.memberOffline",{name:r.name}),style:{flex:"none",display:"inline-flex",alignItems:"center",gap:"6px",padding:"5px 10px",borderRadius:"20px",background:c?"transparent":_.panel2,border:`1px solid ${c?"rgba(var(--sb-red-rgb), 0.3)":_.line}`,fontSize:"12.5px",color:i?_.ink:c?_.ink3:_.ink2,opacity:c?.75:1}},[R("span",{key:"d",style:{width:"7px",height:"7px",borderRadius:"50%",background:d}}),R("span",{key:"n",style:c?{textDecoration:"line-through"}:void 0},i?"You":r.name),c&&R("span",{key:"off",style:{fontFamily:_.mono,fontSize:"10px",color:_.bad,letterSpacing:"0.04em"}},"offline"),h&&an(sn.relay,{key:"r",color:_.warn}),n&&!i&&e&&R("button",{key:"x",onClick:()=>e(r.fp),title:a("group.remove",{name:r.name}),style:{border:"none",background:"transparent",color:_.ink3,cursor:"pointer",display:"grid",padding:0},dangerouslySetInnerHTML:{__html:'<svg width="12" height="12" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.4" stroke-linecap="round"><path d="M18 6 6 18M6 6l12 12"/></svg>'}})])}))}function Ao({msg:t}){let e=t.type==="sent";return t.type==="system"?R("div",{style:{alignSelf:"center",maxWidth:"80%",textAlign:"center",padding:"6px 12px",borderRadius:"9px",background:_.panel2,border:`1px solid ${_.line}`,fontSize:"12px",color:_.ink3,lineHeight:1.5}},t.message):R("div",{style:{alignSelf:e?"flex-end":"flex-start",maxWidth:"min(74%, 560px)",display:"flex",flexDirection:"column",gap:"3px"}},[!e&&R("span",{key:"who",style:{fontSize:"11.5px",fontWeight:600,color:_.accent,paddingInlineStart:"3px"}},t.senderName||a("group.member")),R("div",{key:"b",style:{padding:"9px 13px",borderRadius:e?"13px 13px 4px 13px":"13px 13px 13px 4px",background:e?"rgba(var(--sb-orange-rgb), 0.14)":_.panel2,border:`1px solid ${e?"rgba(var(--sb-orange-rgb), 0.26)":_.line}`,color:_.ink,fontSize:"14.5px",lineHeight:1.5,wordBreak:"break-word",whiteSpace:"pre-wrap"}},t.message),R("span",{key:"t",style:{fontFamily:_.mono,fontSize:"10px",color:_.ink3,alignSelf:e?"flex-end":"flex-start",padding:"0 3px"}},[new Date(t.timestamp||Date.now()).toLocaleTimeString([],{hour:"2-digit",minute:"2-digit"}),t.relayed?" \xB7 relayed":""].join(""))])}function qi({group:t,input:e,setInput:n,onSend:r,onLeave:i,onRemoveMember:c,onAddMembers:d,isAdmin:h,scrollRef:m,onStartCall:v,callActive:S,callOverlay:p}){let k=t.phase===Y.READY&&t.sasConfirmed,y=t.members.some(B=>B.state===pe.PENDING),I=B=>{B.preventDefault(),!(!k||!e.trim())&&r(e)};return R("div",{style:{position:"relative",display:"flex",flexDirection:"column",height:"100%",minHeight:0,background:_.bg}},[R("style",{key:"head-css",dangerouslySetInnerHTML:{__html:"@media (max-width:1023px){.sb-group-header{padding-inline-start:58px !important;gap:9px !important;}}@media (max-width:600px){.sb-group-header .sb-gh-label{display:none !important;}.sb-group-header .sb-gh-btn{padding:8px 10px !important;}}"}}),R("div",{key:"head",className:"sb-group-header",style:{flex:"none",display:"flex",alignItems:"center",gap:"12px",padding:"var(--sb-safe-top, 0px) 16px 0",minHeight:"calc(64px + var(--sb-safe-top, 0px))",borderBottom:`1px solid ${_.line}`}},[R("span",{key:"av",style:{flex:"none",width:"38px",height:"38px",borderRadius:"11px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.24)",color:_.accent,fontFamily:_.mono,fontSize:"12px",fontWeight:700}},vs(t.name)),R("div",{key:"meta",style:{flex:1,minWidth:0}},[R("div",{key:"n",style:{fontSize:"15px",fontWeight:700,color:_.ink,overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},t.name),R("div",{key:"s",style:{fontSize:"11.5px",color:y?_.warn:_.ink3,display:"flex",alignItems:"center",gap:"5px"}},[an(sn.users,{key:"i",width:"13px",height:"13px"}),a("group.membersCount",{count:t.members.length}),k&&t.sasCode?R("span",{key:"code",dir:"ltr",style:{unicodeBidi:"isolate"}},a("group.codeSuffix",{code:t.sasCode})):""])]),k&&v&&R("button",{key:"callvoice",className:"sb-gh-btn",onClick:()=>v(!1),disabled:S,title:a("groupCall.startVoice"),"aria-label":a("groupCall.startVoice"),style:{...mt(!1),flex:"none",padding:"8px 10px",opacity:S?.4:1,cursor:S?"default":"pointer"}},an(sn.phone,{key:"i"})),k&&v&&R("button",{key:"callvideo",className:"sb-gh-btn",onClick:()=>v(!0),disabled:S,title:a("groupCall.startVideo"),"aria-label":a("groupCall.startVideo"),style:{...mt(!1),flex:"none",padding:"8px 10px",opacity:S?.4:1,cursor:S?"default":"pointer"}},an(sn.video,{key:"i"})),h&&d&&t.members.length<F.MAX_MEMBERS&&R("button",{key:"add",className:"sb-gh-btn",onClick:d,title:a("group.inviteMore"),style:{...mt(!1),flex:"none",padding:"8px 12px",fontSize:"12.5px"}},[an(sn.plus,{key:"i"}),R("span",{key:"l",className:"sb-gh-label"},a("group.add"))]),R("button",{key:"leave",className:"sb-gh-btn",onClick:i,title:a("group.leaveThis"),"aria-label":a("group.leaveThis"),style:{...mt(!1),flex:"none",padding:"8px 12px",fontSize:"12.5px",color:_.bad,borderColor:"rgba(var(--sb-red-rgb), 0.3)"}},[an(sn.exit,{key:"i"}),R("span",{key:"l",className:"sb-gh-label"},a("group.leave"))])]),R(Mo,{key:"strip",group:t,onRemove:c,isAdmin:h}),y&&k&&R("div",{key:"relay-note",style:{flex:"none",padding:"8px 16px",fontSize:"12px",lineHeight:1.5,color:_.warn,background:"rgba(var(--sb-yellow-2-rgb), 0.08)",borderBottom:`1px solid ${_.line}`}},a("group.relayNote")),R("div",{key:"msgs",ref:m,className:"msc-scroll",style:{flex:1,minHeight:0,overflowY:"auto",padding:"18px 16px",display:"flex",flexDirection:"column",gap:"11px"}},t.messages.length===0?[R("div",{key:"empty",style:{margin:"auto",textAlign:"center",color:_.ink3,fontSize:"13.5px",lineHeight:1.6,maxWidth:"320px"}},k?a("group.emptyChat"):a("group.sasCompare"))]:t.messages.map(B=>R(Ao,{key:B.id,msg:B}))),R("form",{key:"composer",onSubmit:I,style:{flex:"none",display:"flex",gap:"9px",padding:"12px 16px",borderTop:`1px solid ${_.line}`,alignItems:"flex-end"}},[R("input",{key:"in",value:e,onChange:B=>n(B.target.value),placeholder:k?a("group.message",{name:t.name}):a("group.confirmFirst"),disabled:!k,maxLength:F.MAX_BODY_BYTES,style:{flex:1,minWidth:0,padding:"12px 14px",borderRadius:"11px",outline:"none",background:_.panel2,border:`1px solid ${_.line2}`,color:_.ink,fontFamily:"inherit",fontSize:"14.5px",opacity:k?1:.5}}),R("button",{key:"send",type:"submit",disabled:!k||!e.trim(),title:a("group.send"),style:{...mt(!0),flex:"none",width:"44px",height:"44px",padding:0,borderRadius:"11px",opacity:!k||!e.trim()?.4:1}},an(sn.send))]),p])}var Le=Object.freeze({UNREACHABLE:"unreachable",CONNECTING:"connecting",ACTIVE:"active",FAILED:"failed"}),To={idle:Le.CONNECTING,outgoing:Le.CONNECTING,incoming:Le.CONNECTING,connecting:Le.CONNECTING,active:Le.ACTIVE,ended:Le.FAILED},Or=Object.freeze({ON:.05,OFF:.025,HOLD_MS:600,SAMPLE_MS:120}),No=8e3;function Do(t,e){if(!t||!e)return null;let n;try{n=t.createMediaStreamSource(e)}catch{return null}let r=t.createAnalyser();r.fftSize=512,r.smoothingTimeConstant=.2,n.connect(r);let i=new Uint8Array(r.fftSize);return{read(){r.getByteTimeDomainData(i);let c=0;for(let d=0;d<i.length;d++){let h=(i[d]-128)/128;c+=h*h}return Math.sqrt(c/i.length)},close(){try{n.disconnect()}catch{}try{r.disconnect()}catch{}}}}var Lr=class{constructor({getManager:e,getUserMedia:n=null,createAudioSink:r=null,createLevelMeter:i=null,onChange:c=()=>{},log:d=()=>{}}){this._getManager=e,this._getUserMedia=n||(h=>navigator.mediaDevices.getUserMedia(h)),this._createAudioSink=r||(()=>typeof Audio=="function"?new Audio:null),this._createLevelMeter=i||(h=>Do(this._audioContext(),h)),this._onChange=c,this._log=d,this.callId=null,this.selfFp="",this.withVideo=!1,this.micEnabled=!0,this.cameraEnabled=!1,this.facingMode="user",this.error=null,this.localStream=null,this._legs=new Map,this._peers=[],this._busy=!1,this._ctx=null,this._selfMeter=null,this.selfSpeaking=!1,this._selfQuietSince=0,this._levelTimer=null}_audioContext(){if(this._ctx)return this._ctx;let e=typeof AudioContext<"u"?AudioContext:typeof webkitAudioContext<"u"?webkitAudioContext:null;if(!e)return null;try{this._ctx=new e,this._ctx.state==="suspended"&&this._ctx.resume().catch(()=>{})}catch{this._ctx=null}return this._ctx}get active(){return this.callId!==null}async join({callId:e,selfFp:n,withVideo:r=!1,peers:i=[]}){if(this.callId===e){this.setPeers(i);return}this.callId&&await this.leave(),this.callId=e,this.selfFp=n,this.withVideo=r===!0,this.micEnabled=!0,this.cameraEnabled=this.withVideo,this.error=null,this._changed();try{this.localStream=await this._getUserMedia({audio:{echoCancellation:!0,noiseSuppression:!0,autoGainControl:!0},video:this.withVideo?{facingMode:this.facingMode,width:{ideal:1280},height:{ideal:720}}:!1})}catch(c){throw this.callId=null,this.error=pr(c),this._changed(),c}this._selfMeter=this._createLevelMeter(this.localStream),this._startLevelPolling(),this.setPeers(i)}setPeers(e){if(this._peers=Array.isArray(e)?e:[],!this.active)return;let n=new Map;for(let r of this._peers)!r||!r.fp||r.fp===this.selfFp||n.set(r.fp,r);for(let[r,i]of[...this._legs]){let c=n.get(r);(!c||c.sessionId!==i.sessionId)&&this._detach(r)}for(let[r,i]of n){let c=this._legs.get(r);if(c){c.state===Le.FAILED&&this._weDial(r)&&this._dial(c);continue}i.sessionId&&this._attach(r,i)}this._changed()}async leave(){if(this._stopLevelPolling(),this._selfMeter){try{this._selfMeter.close?.()}catch{}this._selfMeter=null}this.selfSpeaking=!1;for(let e of[...this._legs.keys()])this._detach(e);if(this._ctx){try{this._ctx.close?.()}catch{}this._ctx=null}if(this.localStream)for(let e of this.localStream.getTracks())try{e.stop()}catch{}this.localStream=null,this.callId=null,this.selfFp="",this.withVideo=!1,this.cameraEnabled=!1,this.micEnabled=!0,this._peers=[],this._changed()}_weDial(e){return this.selfFp<e}_attach(e,n){let r=this._getManager(n.sessionId);if(!r)return;let i={fp:e,name:n.name||"Member",sessionId:n.sessionId,manager:r,unsubscribe:null,sink:this._createAudioSink(),meter:null,fallback:null,speaking:!1,quietSince:0,state:Le.CONNECTING,quality:null,hasVideo:!1};i.sink&&(i.sink.autoplay=!0,i.sink.muted=!1),this._legs.set(e,i);try{r.setCallGroupContext(this.callId)}catch{}try{r.setExternalMediaStream(this.localStream)}catch{}if(typeof r.addCallStateListener=="function"&&(i.unsubscribe=r.addCallStateListener(c=>this._onLegState(e,c))),this._onLegState(e,r.getCallState?.()||{}),this._weDial(e)){this._dial(i);return}i.fallback=setTimeout(()=>this._dialFallback(e),No)}_dialFallback(e){let n=this._legs.get(e);!n||!this.active||(n.fallback=null,(n.manager.getCallState?.().phase||"idle")!=="idle")||(this._log("info","group call leg was never dialled by the peer; dialling it",{}),Promise.resolve().then(()=>n.manager.startCall(this.withVideo)).catch(()=>{let i=this._legs.get(e);i===n&&(i.state=Le.FAILED,this._changed())}))}_dial(e){(e.manager.getCallState?.().phase||"idle")==="idle"&&(e.state=Le.CONNECTING,Promise.resolve().then(()=>e.manager.startCall(this.withVideo)).catch(r=>{this._log("warn","group call leg could not be placed",{errorType:r?.constructor?.name});let i=this._legs.get(e.fp);i===e&&(i.state=Le.FAILED,this._changed())}))}_detach(e){let n=this._legs.get(e);if(n){this._legs.delete(e),n.fallback&&(clearTimeout(n.fallback),n.fallback=null);try{n.unsubscribe?.()}catch{}if(n.sink){try{n.sink.pause?.()}catch{}try{n.sink.srcObject=null}catch{}}if(n.meter){try{n.meter.close?.()}catch{}n.meter=null}try{n.manager.endCall?.()}catch{}try{n.manager.setExternalMediaStream?.(null)}catch{}try{n.manager.setCallGroupContext?.(null)}catch{}}}_onLegState(e,n){let r=this._legs.get(e);if(!r)return;let i=n?.phase||"idle";r.fallback&&i!=="idle"&&(clearTimeout(r.fallback),r.fallback=null),r.state=To[i]||Le.CONNECTING,r.quality=n?.quality||null,r.hasVideo=n?.remoteHasVideo===!0,this._pumpAudio(r),this._changed()}_pumpAudio(e){if(!e.sink)return;let n=null;try{n=e.manager.getRemoteMediaStream?.()||null}catch{return}if(!(!n||e.sink.srcObject===n)){try{e.sink.srcObject=n;let r=e.sink.play?.();r&&r.catch&&r.catch(()=>{})}catch{}if(e.meter)try{e.meter.close?.()}catch{}e.meter=this._createLevelMeter(n),e.speaking=!1}}_startLevelPolling(){this._levelTimer||typeof setInterval!="function"||(this._levelTimer=setInterval(()=>this._sampleLevels(),Or.SAMPLE_MS))}_stopLevelPolling(){this._levelTimer&&(clearInterval(this._levelTimer),this._levelTimer=null)}_applyLevel(e,n,r,i,c){let d=e[n]===!0;return i>=Or.ON?(e[r]=0,d?!1:(e[n]=!0,!0)):d?i>Or.OFF?(e[r]=0,!1):e[r]?c-e[r]>=Or.HOLD_MS?(e[n]=!1,!0):!1:(e[r]=c,!1):!1}_sampleLevels(){if(!this.active)return;let e=Date.now(),n=!1,r=this.micEnabled&&this._selfMeter?Yi(this._selfMeter):0;this._applyLevel(this,"selfSpeaking","_selfQuietSince",r,e)&&(n=!0);for(let i of this._legs.values()){let c=i.meter?Yi(i.meter):0;this._applyLevel(i,"speaking","quietSince",c,e)&&(n=!0)}n&&this._changed()}setMic(e){if(this.micEnabled=e!==!1,this.localStream)for(let n of this.localStream.getAudioTracks())n.enabled=this.micEnabled;this.micEnabled||(this.selfSpeaking=!1,this._selfQuietSince=0);for(let n of this._legs.values())try{n.manager.setMicEnabled?.(this.micEnabled)}catch{}this._changed()}toggleMic(){this.setMic(!this.micEnabled)}async setCamera(e){if(!this.active||this._busy)return;if(e===!1){if(this.cameraEnabled=!1,this.localStream)for(let r of this.localStream.getVideoTracks())r.enabled=!1;for(let r of this._legs.values())try{r.manager.setCameraEnabled?.(!1)}catch{}this._changed();return}let n=this.localStream?.getVideoTracks?.()||[];if(n.length){for(let r of n)r.enabled=!0;this.cameraEnabled=!0,this.withVideo=!0,this._changed();return}this._busy=!0;try{let i=(await this._getUserMedia({video:{facingMode:this.facingMode,width:{ideal:1280},height:{ideal:720}}})).getVideoTracks()[0];if(!i)return;this.localStream.addTrack(i),this.cameraEnabled=!0,this.withVideo=!0,await Promise.allSettled([...this._legs.values()].map(c=>Promise.resolve().then(()=>c.manager.addVideoTrack?.(i))))}catch(r){this.error=pr(r),this.cameraEnabled=!1}finally{this._busy=!1,this._changed()}}async toggleCamera(){await this.setCamera(!this.cameraEnabled)}async flipCamera(){if(!this.active||this._busy||!this.localStream)return;let e=this.localStream.getVideoTracks()[0];if(!e)return;this._busy=!0;let n=this.facingMode;this.facingMode=this.facingMode==="user"?"environment":"user";try{let i=(await this._getUserMedia({video:{facingMode:this.facingMode}})).getVideoTracks()[0];if(!i){this.facingMode=n;return}i.enabled=this.cameraEnabled,this.localStream.removeTrack(e);try{e.stop()}catch{}this.localStream.addTrack(i),await Promise.allSettled([...this._legs.values()].map(c=>Promise.resolve().then(()=>c.manager.replaceVideoTrack?.(i))))}catch(r){this.facingMode=n,this._log("warn","group call camera flip failed",{errorType:r?.constructor?.name})}finally{this._busy=!1,this._changed()}}getLocalStream(){return this.localStream}getRemoteStream(e){let n=this._legs.get(e);if(!n)return null;try{return n.manager.getRemoteMediaStream?.()||null}catch{return null}}snapshot(){let e=this._peers.filter(n=>n&&n.fp!==this.selfFp).map(n=>{let r=this._legs.get(n.fp);return{fp:n.fp,name:n.name||"Member",state:r?r.state:Le.UNREACHABLE,quality:r?r.quality:null,hasVideo:r?r.hasVideo:!1,speaking:r?r.speaking===!0:!1}}).sort((n,r)=>n.fp<r.fp?-1:n.fp>r.fp?1:0);return{active:this.active,callId:this.callId,withVideo:this.withVideo,micEnabled:this.micEnabled,cameraEnabled:this.cameraEnabled,facingMode:this.facingMode,error:this.error,selfSpeaking:this.selfSpeaking,peers:e,connected:e.filter(n=>n.state===Le.ACTIVE).length}}_changed(){try{this._onChange(this.snapshot())}catch{}}};function Yi(t){try{return t.read()}catch{return 0}}function pr(t){let e=t?.name||"";return e==="NotAllowedError"||e==="SecurityError"?"permission_denied":e==="NotFoundError"||e==="OverconstrainedError"?"device_not_found":e==="NotReadableError"||e==="AbortError"?"device_busy":"media_failed"}var Ki=1.7777777777777777,Fo=150;function Qi(t,e,n,{gap:r=10,aspect:i=Ki,minWidth:c=Fo}={}){if(t<=0)return{cols:0,rows:0,tileW:0,tileH:0};if(!(e>0)||!(n>0)){let h=Math.min(t,t<=2?t:Math.ceil(Math.sqrt(t)));return{cols:h,rows:Math.ceil(t/h),tileW:0,tileH:0}}let d={cols:1,rows:t,tileW:0,tileH:0};for(let h=1;h<=t;h++){let m=Math.ceil(t/h),v=(e-r*(h-1))/h,S=(n-r*(m-1))/m;if(v<=0||S<=0)continue;let p=Math.min(v,S*i);p>d.tileW&&(d={cols:h,rows:m,tileW:p,tileH:p/i})}return d.tileW<c&&(d.tileW=c,d.tileH=c/i),d}function Xi(t,e,n,{gap:r=10,aspect:i=Ki,minThumb:c=92,maxThumb:d=168}={}){if(!(e>0)||!(n>0))return{main:{w:0,h:0},stripH:0,thumbW:0};if(t<=0){let p=Math.min(e,n*i);return{main:{w:p,h:p/i},stripH:0,thumbW:0}}let h=Math.max(c,Math.min(d,Math.round(n*.2*i))),m=h/i,v=n-m-r,S=Math.min(e,v*i);return v<=0||S<h*2?{main:{w:0,h:0},stripH:0,thumbW:0}:{main:{w:S,h:S/i},stripH:m,thumbW:h}}var V=(...t)=>React.createElement(...t),An="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",Xe={lock:'<path d="M7 11V7a5 5 0 0 1 10 0v4"/><rect x="4.5" y="11" width="15" height="9" rx="2.2"/>',minimize:'<path d="M9 4v4a1 1 0 0 1-1 1H4M15 4v4a1 1 0 0 0 1 1h4M9 20v-4a1 1 0 0 0-1-1H4M15 20v-4a1 1 0 0 1 1-1h4"/>',expand:'<path d="M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7"/>',users:'<path d="M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19"/><circle cx="10" cy="8" r="3.2"/><path d="M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4"/><path d="M15.5 5.3a3.2 3.2 0 0 1 0 5.4"/>',micOn:'<rect x="9" y="3" width="6" height="11" rx="3"/><path d="M5 11a7 7 0 0 0 14 0"/><path d="M12 18v3"/>',micOff:'<path d="M9 9v-1a3 3 0 0 1 5.1-2.1M15 11v3a3 3 0 0 1-4.6 2.5"/><path d="M5 11a7 7 0 0 0 10.3 6.2M19 11a7 7 0 0 1-.4 2.3"/><path d="M12 18v3"/><path d="M3 3l18 18"/>',camOn:'<path d="M23 7l-7 5 7 5V7z"/><rect x="1" y="5" width="15" height="14" rx="2.5"/>',camOff:'<path d="M16 16H3a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h2l2-2M11 6h2l7-3v14M2 2l20 20"/>',grid:'<rect x="3" y="3" width="7.5" height="7.5" rx="1.6"/><rect x="13.5" y="3" width="7.5" height="7.5" rx="1.6"/><rect x="3" y="13.5" width="7.5" height="7.5" rx="1.6"/><rect x="13.5" y="13.5" width="7.5" height="7.5" rx="1.6"/>',flip:'<path d="M3 7h3l2-2h8l2 2h3v12H3z"/><path d="M9.5 13a2.5 2.5 0 0 1 5 0M14.5 13l-1.3-1.3M14.5 13l1.3-1.3"/>',phone:'<path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z"/>',phoneHangup:'<path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z" transform="rotate(135 12 12)"/>'},ft=(t,e,n)=>V("span",{style:{display:"grid",placeItems:"center",width:e+"px",height:e+"px"},dangerouslySetInnerHTML:{__html:`<svg width="${e}" height="${e}" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="${n}" stroke-linecap="round" stroke-linejoin="round">${t}</svg>`}}),zr={width:"56px",height:"56px",borderRadius:"50%",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-4)",cursor:"pointer",transition:"all .15s"},Ji={...zr,background:"var(--sb-red-strong-solid)",color:"#fff",border:"1px solid transparent"},Zi={width:"56px",height:"56px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"var(--sb-red-strong-solid)",color:"#fff",cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-red-strong-rgb), 0.35)",transition:"transform .15s"},Po={width:"36px",height:"36px",borderRadius:"9px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.15)",background:"rgba(0,0,0,0.35)",color:"#fff",cursor:"pointer",transition:"all .15s"},Oo={excellent:{bars:4,color:"var(--sb-green)",solid:"var(--sb-green-solid)"},good:{bars:3,color:"var(--sb-green)",solid:"var(--sb-green-solid)"},fair:{bars:2,color:"var(--sb-yellow)",solid:"var(--sb-yellow-solid)"},poor:{bars:1,color:"var(--sb-red)",solid:"var(--sb-red-solid)"}};function Lo(t){let e=Oo[t];return e?V("span",{key:"q",style:{display:"inline-flex",alignItems:"flex-end",gap:"2px",height:"12px"}},[0,1,2,3].map(n=>V("span",{key:n,style:{width:"2.5px",height:4+n*2.6+"px",borderRadius:"1px",background:n<e.bars?e.solid:"rgba(var(--sb-ink), 0.18)"}}))):null}function Bo(t){let e=String(t||"").trim().split(/\s+/).filter(Boolean);return((e[0]?.[0]||"")+(e[1]?.[0]||e[0]?.[1]||"")).toUpperCase()||"#"}var ea=t=>`${String(Math.floor(t/60)).padStart(2,"0")}:${String(t%60).padStart(2,"0")}`;function zo(){let[t,e]=React.useState({w:0,h:0}),[n,r]=React.useState(null);return React.useLayoutEffect(()=>{if(!n)return;let i=()=>e(d=>d.w===n.clientWidth&&d.h===n.clientHeight?d:{w:n.clientWidth,h:n.clientHeight});if(i(),typeof ResizeObserver>"u")return window.addEventListener("resize",i),()=>window.removeEventListener("resize",i);let c=new ResizeObserver(i);return c.observe(n),()=>c.disconnect()},[n]),[r,t]}function Uo({peer:t,stream:e,self:n,localStream:r,cameraEnabled:i,speaking:c,tileW:d,tileH:h,onSelect:m,pinned:v,compact:S}){let p=React.useRef(null),k=n?r:e,y=n?i:t.hasVideo;React.useEffect(()=>{let D=p.current;if(!D||!k)return;D.srcObject!==k&&(D.muted=!0,D.srcObject=k);let le=D.play&&D.play();le&&le.catch&&le.catch(()=>{})});let I=n||t.state===Le.ACTIVE?null:t.state===Le.UNREACHABLE?a("groupCall.waitingLink"):t.state===Le.FAILED?a("groupCall.legFailed"):a("groupCall.connecting"),B=Math.max(44,Math.min(148,Math.round((h||180)*.42)));return V("div",{role:m?"button":void 0,tabIndex:m?0:void 0,onClick:m,onKeyDown:m?D=>{(D.key==="Enter"||D.key===" ")&&(D.preventDefault(),m())}:void 0,title:v?a("groupCall.unpin",{name:t.name}):m?a("groupCall.pin",{name:t.name}):c?a("groupCall.speaking",{name:t.name}):t.name,style:{cursor:m?"pointer":"default",position:"relative",borderRadius:"14px",overflow:"hidden",background:"var(--sb-surface)",border:c?"2px solid var(--sb-green-solid)":"2px solid rgba(var(--sb-ink), 0.08)",boxShadow:c?"0 0 0 3px rgba(var(--sb-green-rgb), 0.16)":"none",transition:"border-color .12s ease, box-shadow .12s ease",flex:d?"0 0 auto":"1 1 260px",minWidth:d?void 0:"200px",width:d?d+"px":"auto",height:h?h+"px":"auto",aspectRatio:h?void 0:"16 / 9",display:"grid",placeItems:"center"}},[y?V("video",{key:"v",ref:p,autoPlay:!0,muted:!0,playsInline:!0,style:{position:"absolute",inset:0,width:"100%",height:"100%",objectFit:"cover",transform:n?"scaleX(-1)":"none",background:"var(--sb-bg)"}}):V("div",{key:"av",style:{width:B+"px",height:B+"px",borderRadius:"50%",display:"grid",placeItems:"center",background:"radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))",border:c?"1.5px solid rgba(var(--sb-green-rgb), 0.65)":"1px solid rgba(var(--sb-ink), 0.1)",color:c?"var(--sb-green)":"var(--sb-text-4)",fontFamily:An,fontSize:Math.round(B*.3)+"px",fontWeight:700,transition:"color .12s ease, border-color .12s ease"}},Bo(t.name)),V("div",{key:"label",style:{position:"absolute",insetInline:0,bottom:0,display:"flex",alignItems:"center",gap:S?"4px":"7px",padding:S?"4px 6px":"8px 10px",background:"linear-gradient(0deg, rgba(0,0,0,0.7), transparent)"}},[V("span",{key:"n",style:{flex:1,minWidth:0,fontSize:S?"10.5px":"12.5px",fontWeight:700,color:"var(--sb-text-1)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},t.name),c&&V("span",{key:"sp",style:{flex:"none",color:"var(--sb-green)",display:"grid",placeItems:"center"}},ft(Xe.micOn,S?11:13,2)),I&&!S&&V("span",{key:"s",style:{flex:"none",fontFamily:An,fontSize:"10.5px",color:t.state===Le.FAILED?"var(--sb-red)":"var(--sb-text-6)"}},I),!n&&!S&&Lo(t.quality)])])}function Es({call:t,media:e,groupName:n,localStream:r,getRemoteStream:i,onJoin:c,onDismiss:d,onLeave:h,onToggleMic:m,onToggleCamera:v,onFlipCamera:S}){let[p,k]=React.useState(!1),[y,I]=React.useState(0),[B,D]=React.useState(null),[le,ee]=zo(),ge=!!t?.joined;React.useEffect(()=>{if(!ge){I(0);return}let L=Date.now(),$=setInterval(()=>I(Math.floor((Date.now()-L)/1e3)),1e3);return()=>clearInterval($)},[ge,t?.callId]),React.useEffect(()=>{t||k(!1)},[!t]);let we=React.useMemo(()=>new Set(["self",...(e?.peers||[]).map(L=>L.fp)]),[e]);if(React.useEffect(()=>{B&&!we.has(B)&&D(null)},[B,we]),!t)return null;let C=V("span",{key:"enc",style:{display:"inline-flex",alignItems:"center",gap:"5px",fontSize:"11.5px",fontWeight:600,color:"var(--sb-green)"}},[ft(Xe.lock,12,2),a("call.encryptedShort")]);if(!ge)return V("div",{style:{position:"absolute",inset:0,zIndex:40,display:"flex",flexDirection:"column",background:"radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)",animation:"sbExpand .2s ease"}},[V("div",{key:"top",style:{flex:"none",padding:"16px 18px"}},V("span",{style:{display:"inline-flex",alignItems:"center",gap:"7px",fontSize:"12px",fontWeight:600,color:"var(--sb-green)"}},[ft(Xe.lock,13,2),a("call.encrypted")])),V("div",{key:"mid",style:{flex:1,display:"flex",flexDirection:"column",alignItems:"center",justifyContent:"center",padding:"0 24px",textAlign:"center"}},[V("div",{key:"av",style:{position:"relative",width:"112px",height:"112px",marginBottom:"26px",display:"grid",placeItems:"center"}},[V("span",{key:"p1",style:{position:"absolute",inset:0,borderRadius:"50%",border:"1.5px solid rgba(var(--sb-orange-rgb), 0.5)",animation:"sbCallPulse 2s ease-out infinite"}}),V("span",{key:"p2",style:{position:"absolute",inset:0,borderRadius:"50%",border:"1.5px solid rgba(var(--sb-orange-rgb), 0.4)",animation:"sbCallPulse 2s ease-out infinite",animationDelay:"1s"}}),V("div",{key:"c",style:{width:"96px",height:"96px",borderRadius:"50%",display:"grid",placeItems:"center",background:"radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))",border:"1px solid rgba(var(--sb-ink), 0.1)",color:"var(--sb-text-7)"}},ft(Xe.users,42,1.6))]),V("div",{key:"n",style:{fontSize:"22px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},n),V("div",{key:"s",style:{fontFamily:An,fontSize:"13.5px",color:"var(--sb-text-6)",marginTop:"8px"}},t.withVideo?a("groupCall.startedVideo",{name:t.startedByName}):a("groupCall.startedVoice",{name:t.startedByName})),V("div",{key:"p",style:{fontSize:"12.5px",color:"var(--sb-text-9)",marginTop:"6px"}},a("groupCall.inCall",{count:t.participants.length}))]),V("div",{key:"ctrls",style:{flex:"none",display:"flex",justifyContent:"center",gap:"48px",padding:"24px 24px 40px"}},[V("div",{key:"dec",style:{display:"flex",flexDirection:"column",alignItems:"center",gap:"8px"}},[V("button",{key:"b",onClick:d,title:a("groupCall.dismiss"),style:{...Zi,width:"62px",height:"62px"}},ft(Xe.phoneHangup,24,1.9)),V("span",{key:"l",style:{fontFamily:An,fontSize:"10.5px",color:"var(--sb-text-7)"}},a("groupCall.dismiss"))]),V("div",{key:"acc",style:{display:"flex",flexDirection:"column",alignItems:"center",gap:"8px"}},[V("button",{key:"b",onClick:c,title:a("groupCall.join"),style:{width:"62px",height:"62px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"var(--sb-green-solid)",color:"var(--sb-on-green)",cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-green-rgb), 0.35)"}},ft(Xe.phone,24,1.9)),V("span",{key:"l",style:{fontFamily:An,fontSize:"10.5px",color:"var(--sb-text-7)"}},a("groupCall.join"))])])]);let P=e?.peers||[],j={fp:"self",name:a("groupCall.you"),state:Le.ACTIVE,hasVideo:e?.cameraEnabled,quality:null,speaking:e?.selfSpeaking===!0};if(p){let L=P.filter(ne=>ne.speaking).map(ne=>ne.name),$=L.length===1?L[0]:L.length>1?L.slice(0,2).join(", "):e?.selfSpeaking?a("groupCall.you"):null;return V("div",{style:{position:"absolute",bottom:"18px",insetInlineEnd:"18px",zIndex:40,width:"244px",borderRadius:"14px",overflow:"hidden",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.1)",boxShadow:"0 18px 44px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))",animation:"sbExpand .18s ease"}},[V("div",{key:"bar",style:{display:"flex",alignItems:"center",gap:"11px",padding:"11px 12px"}},[V("span",{key:"ic",style:{flex:"none",width:"34px",height:"34px",borderRadius:"9px",display:"grid",placeItems:"center",background:"rgba(var(--sb-green-rgb), 0.1)",border:"1px solid rgba(var(--sb-green-rgb), 0.25)",color:"var(--sb-green)"}},ft(Xe.users,16,1.9)),V("div",{key:"tx",style:{flex:1,minWidth:0}},[V("div",{key:"n",style:{fontSize:"13px",fontWeight:700,color:"var(--sb-text-1)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},n),V("div",{key:"s",style:{fontFamily:An,fontSize:"11px",color:$?"var(--sb-green)":"var(--sb-text-6)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},$?a("groupCall.speaking",{name:$}):`${a("groupCall.inCall",{count:t.participants.length})} \xB7 ${ea(y)}`)]),V("button",{key:"exp",onClick:()=>k(!1),title:a("call.expand"),style:{flex:"none",width:"32px",height:"32px",borderRadius:"8px",display:"grid",placeItems:"center",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-4)",cursor:"pointer"}},ft(Xe.expand,15,2)),V("button",{key:"end",onClick:h,title:a("groupCall.leave"),style:{flex:"none",width:"32px",height:"32px",borderRadius:"8px",display:"grid",placeItems:"center",border:"none",background:"var(--sb-red-strong-solid)",color:"#fff",cursor:"pointer"}},ft(Xe.phoneHangup,15,2))])])}let O=[j,...P],Q=B?(L=>O.find($=>$.fp===L)||null)(B):null,X=Q?O.filter(L=>L.fp!==Q.fp):[],W=Q?Xi(X.length,ee.w,ee.h):null,se=Q&&W&&W.main.w>0,ce=Qi(O.length,ee.w,ee.h),me=(L,$={})=>V(Uo,{key:L.fp,peer:L,self:L.fp==="self",speaking:L.speaking===!0,localStream:r,cameraEnabled:e?.cameraEnabled,stream:L.fp==="self"?null:i(L.fp),...$});return V("div",{style:{position:"absolute",inset:0,zIndex:40,display:"flex",flexDirection:"column",background:"var(--sb-bg-deepest)",animation:"sbExpand .2s ease"}},[V("div",{key:"top",style:{flex:"none",display:"flex",alignItems:"flex-start",justifyContent:"space-between",gap:"14px",padding:"16px 18px 10px"}},[V("div",{key:"l",style:{minWidth:0}},[V("div",{key:"n",style:{fontSize:"17px",fontWeight:800,letterSpacing:"-0.3px",color:"#fff",overflow:"hidden",textOverflow:"ellipsis",whiteSpace:"nowrap"}},n),V("div",{key:"s",style:{display:"inline-flex",alignItems:"center",gap:"9px",marginTop:"4px"}},[V("span",{key:"d",style:{fontFamily:An,fontSize:"12.5px",color:"var(--sb-text-2)"}},ea(y)),C,V("span",{key:"c",style:{fontSize:"11.5px",color:"var(--sb-text-7)"}},a("groupCall.inCall",{count:t.participants.length}))])]),V("div",{key:"r",style:{flex:"none",display:"flex",alignItems:"center",gap:"8px"}},[se&&V("button",{key:"grid",onClick:()=>D(null),title:a("groupCall.showEveryone"),style:{height:"36px",padding:"0 12px",borderRadius:"9px",display:"inline-flex",alignItems:"center",gap:"7px",border:"1px solid rgba(var(--sb-ink), 0.15)",background:"rgba(0,0,0,0.35)",color:"#fff",cursor:"pointer",fontFamily:"inherit",fontSize:"12.5px",fontWeight:600}},[ft(Xe.grid,14,2),a("groupCall.showEveryone")]),V("button",{key:"min",onClick:()=>k(!0),title:a("call.minimize"),style:Po},ft(Xe.minimize,16,2))])]),e?.error&&V("div",{key:"err",style:{flex:"none",margin:"0 18px 10px",padding:"9px 12px",borderRadius:"10px",background:"rgba(var(--sb-red-rgb), 0.1)",border:"1px solid rgba(var(--sb-red-rgb), 0.28)",color:"var(--sb-red)",fontSize:"12.5px",lineHeight:1.5}},a(`groupCall.err.${e.error}`)),V("div",{key:"stage",ref:le,className:"msc-scroll",style:{flex:1,minHeight:0,minWidth:0,overflow:"auto",margin:"0 14px 6px",display:"flex",alignItems:"safe center",justifyContent:"safe center"}},se?V("div",{style:{display:"flex",flexDirection:"column",gap:10+"px",width:"100%",height:ee.h+"px",minHeight:0}},[V("div",{key:"main",style:{flex:"none",display:"flex",justifyContent:"center",minHeight:0}},me(Q,{tileW:W.main.w,tileH:W.main.h,pinned:!0,onSelect:()=>D(null)})),X.length>0&&V("div",{key:"strip",className:"msc-scroll",style:{flex:"none",height:W.stripH+"px",display:"flex",gap:10+"px",justifyContent:X.length>4?"flex-start":"center",overflowX:"auto",overflowY:"hidden"}},X.map(L=>me(L,{tileW:W.thumbW,tileH:W.stripH,compact:!0,onSelect:()=>D(L.fp)})))]):V("div",{style:{display:"flex",flexWrap:"wrap",gap:10+"px",justifyContent:"center",alignContent:"center",width:ce.tileW?ce.cols*ce.tileW+(ce.cols-1)*10+"px":"100%"}},O.map(L=>me(L,{tileW:ce.tileW,tileH:ce.tileH,onSelect:()=>D(L.fp)})))),V("div",{key:"ctrls",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"center",gap:"16px",padding:"16px 20px calc(22px + var(--sb-safe-bottom, env(safe-area-inset-bottom, 0px)))",background:"linear-gradient(0deg, rgba(0,0,0,0.6), transparent)"}},[V("button",{key:"mic",onClick:m,title:a("call.mute"),style:e?.micEnabled?zr:Ji},ft(e?.micEnabled?Xe.micOn:Xe.micOff,21,1.9)),V("button",{key:"cam",onClick:v,title:a("call.camera"),style:e?.cameraEnabled?zr:Ji},ft(e?.cameraEnabled?Xe.camOn:Xe.camOff,21,1.8)),e?.cameraEnabled&&V("button",{key:"flip",onClick:S,title:a("call.flipCamera"),style:zr},ft(Xe.flip,21,1.8)),V("button",{key:"end",onClick:h,title:a("groupCall.leave"),style:Zi},ft(Xe.phoneHangup,22,1.9))])])}typeof window<"u"&&(window.GroupCallUI=Es);var ur=ai(),Ur=()=>cr()?"auto":"smooth",ta=()=>{window.__sbScrollToDonate=Date.now(),document.dispatchEvent(new CustomEvent("securebit:scroll-to-donate"))},Cs=async(t,e=0)=>{let n=!1;try{await navigator.clipboard.writeText(t),n=!0}catch{try{let i=document.createElement("textarea");i.value=t,i.style.position="fixed",i.style.opacity="0",document.body.appendChild(i),i.select(),n=document.execCommand("copy"),document.body.removeChild(i)}catch{n=!1}}return n&&e>0&&navigator.clipboard&&navigator.clipboard.writeText&&setTimeout(async()=>{let r=null,i=!0;try{r=await navigator.clipboard.readText()}catch{i=!1}if(!i||r===t)try{await navigator.clipboard.writeText("")}catch{}},e),n},Go=t=>{if(typeof t!="string"||t.indexOf("```")===-1)return null;let e=[],n=/```([a-zA-Z0-9_+#.-]*)\n?([\s\S]*?)```/g,r=0,i;for(;(i=n.exec(t))!==null;)i.index>r&&e.push({kind:"text",content:t.slice(r,i.index)}),e.push({kind:"code",lang:(i[1]||"").toLowerCase(),content:i[2].replace(/\n$/,"")}),r=n.lastIndex;return r<t.length&&e.push({kind:"text",content:t.slice(r)}),e.some(c=>c.kind==="code")?e:null},Ho=new Set(["const","let","var","function","return","if","else","for","while","do","switch","case","break","continue","class","extends","new","this","super","import","export","from","as","default","async","await","try","catch","finally","throw","typeof","instanceof","delete","yield","in","of","def","elif","lambda","pass","with","global","public","private","protected","static","final","void","int","long","float","double","char","bool","boolean","string","struct","enum","interface","package","func","fn","type","where","select","update","insert","delete","where","and","or","not","end","then","fi","done","echo","use","mut","impl","trait","match","module","require"]),Wo=new Set(["true","false","null","undefined","None","True","False","nil","NaN","Infinity"]),Vo=t=>{let e=/(\/\/[^\n]*|#[^\n]*|\/\*[\s\S]*?\*\/|--[^\n]*)|(`(?:\\.|[^`\\])*`|"(?:\\.|[^"\\])*"|'(?:\\.|[^'\\])*')|(\b\d[\d_.]*(?:[eE][+-]?\d+)?\b|\b0[xX][0-9a-fA-F]+\b)|([A-Za-z_$][A-Za-z0-9_$]*)/g,n=[],r="",i=0,c=0,d=()=>{r&&(n.push(r),r="")},h;for(;(h=e.exec(t))!==null;){h.index>i&&(r+=t.slice(i,h.index)),i=e.lastIndex;let m=null;h[1]?m="text-gray-500 italic":h[2]?m="text-amber-300":h[3]?m="text-sky-300":h[4]&&(Ho.has(h[4])?m="text-purple-300":Wo.has(h[4])&&(m="text-sky-300")),m?(d(),n.push(React.createElement("span",{key:`h${c++}`,className:m},h[0]))):r+=h[0]}return i<t.length&&(r+=t.slice(i)),d(),n},jo={js:"javascript",mjs:"javascript",javascript:"javascript",node:"javascript",ts:"typescript",typescript:"typescript",jsx:"jsx",tsx:"tsx",py:"python",python:"python",sh:"bash",shell:"bash",zsh:"bash",bash:"bash","c++":"cpp",cpp:"cpp",cc:"cpp",cxx:"cpp",c:"c",h:"c",cs:"csharp",csharp:"csharp",java:"java",go:"go",golang:"go",rs:"rust",rust:"rust",json:"json",yml:"yaml",yaml:"yaml",sql:"sql",md:"markdown",markdown:"markdown",html:"markup",xml:"markup",svg:"markup",css:"css"},$o=({code:t,lang:e})=>{let[n,r]=React.useState(!1),i=async()=>{await Cs(t,3e4)&&(r(!0),setTimeout(()=>r(!1),2e3))},c=jo[(e||"").toLowerCase()]||(e||"").toLowerCase(),d=typeof window<"u"?window.Prism:null,h=d&&d.languages?d.languages[c]:null,m=!!(d&&h&&typeof d.highlight=="function"),v=null;if(m)try{v=d.highlight(t,h,c)}catch{v=null}let S=m?c:e||"code",p=m&&v!=null?React.createElement("code",{className:"language-"+c,dangerouslySetInnerHTML:{__html:v}}):React.createElement("code",null,Vo(t));return React.createElement("div",{className:"my-1 rounded-lg overflow-hidden",style:{backgroundColor:"var(--sb-legacy-1)",border:"0 solid var(--sb-text-3)"}},[React.createElement("div",{key:"hdr",className:"flex items-center justify-between px-3 py-1.5",style:{backgroundColor:"var(--sb-legacy-2)",border:"0 solid var(--sb-text-3)"}},[React.createElement("span",{key:"lang",className:"text-[11px] uppercase tracking-wide text-gray-500 font-mono"},S),React.createElement("button",{key:"copy",onClick:i,title:"Copy \u2014 clipboard auto-clears in 30s",className:"flex items-center text-[11px] text-gray-400 hover:text-green-400 transition-colors"},[React.createElement("i",{key:"ic",className:`${n?"fas fa-check text-green-400":"far fa-copy"} me-1`}),n?a("action.copied"):a("action.copy")])]),React.createElement("pre",{key:"pre",className:"px-3 py-2 overflow-x-auto text-xs leading-relaxed text-gray-200 custom-scrollbar",style:{whiteSpace:"pre",fontFamily:"ui-monospace, SFMono-Regular, Menlo, Consolas, monospace",margin:0}},p)])},qo=({text:t})=>{let e=Go(t);return e?React.createElement("div",{className:"text-sm"},e.map((n,r)=>n.kind==="code"?React.createElement($o,{key:r,code:n.content,lang:n.lang}):n.content.trim()?React.createElement("div",{key:r,className:"break-words",style:{whiteSpace:"pre-wrap",wordBreak:"break-word"}},n.content):null)):React.createElement("div",{className:"text-sm break-words",style:{whiteSpace:"pre-wrap",wordBreak:"break-word"}},t)};var Rs=7;var Yo=`url("data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20width='100'%20height='100'%3E%3Cfilter%20id='n'%3E%3CfeTurbulence%20type='fractalNoise'%20baseFrequency='0.9'%20numOctaves='2'%20stitchTiles='stitch'/%3E%3C/filter%3E%3Crect%20width='100%25'%20height='100%25'%20filter='url(%23n)'/%3E%3C/svg%3E")`,$n="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",Ko=(t,e)=>{let n=[],r=t||1;for(let i=0;i<e;i++){r=(r*9301+49297)%233280;let c=r/233280,d=.45+.55*Math.sin(i/e*Math.PI);n.push(Math.max(.16,Math.min(1,(.3+c*.7)*d)))}return n},sa=t=>{t=Math.max(0,Math.round(t));let e=Math.floor(t/60),n=t%60;return e+":"+String(n).padStart(2,"0")},Qo=({voice:t,isMe:e})=>{let n=React.createElement,[r,i]=React.useState(!1),[c,d]=React.useState(0),[h,m]=React.useState(!1),v=React.useRef(null),S=React.useRef(null),p=t||{},k=Number.isFinite(p.dur)&&p.dur>0?p.dur:8,y=Array.isArray(p.bars)&&p.bars.length?p.bars:Ko(k*37+11,34),I=p.url||null,B=p.transfer||null,D=!!B&&!I,le=!!p.error||h,ee=B?B.dir:null,ge=B?Math.max(0,Math.min(100,B.pct||0)):100;React.useEffect(()=>()=>{if(S.current&&cancelAnimationFrame(S.current),v.current){try{v.current.pause()}catch{}v.current=null}},[]),React.useEffect(()=>{if(!I&&v.current){try{v.current.pause()}catch{}v.current=null,i(!1),d(0)}},[I]);let we=()=>{if(v.current)try{v.current.pause()}catch{}S.current&&cancelAnimationFrame(S.current),i(!1)},C=()=>{if(!I)return;if(m(!1),!v.current){let ne=new Audio;ne.preload="auto",ne.addEventListener("timeupdate",()=>{let Me=ne.duration&&isFinite(ne.duration)?ne.duration:k;Me&&d(Math.min(1,ne.currentTime/Me))}),ne.addEventListener("ended",()=>{i(!1),d(0)}),ne.addEventListener("error",()=>{i(!1),m(!0)}),ne.src=I,v.current=ne}let $=v.current.play();$&&typeof $.then=="function"?$.then(()=>i(!0)).catch(ne=>{console.warn("Voice playback failed:",ne&&ne.name,ne&&ne.message),m(!0),i(!1)}):i(!0)},P=()=>{D||le||!I||(r?we():C())},j=$=>{if(D||le||!I)return;let ne=$.currentTarget.getBoundingClientRect(),Me=Math.max(0,Math.min(1,($.clientX-ne.left)/ne.width));v.current&&v.current.duration&&(v.current.currentTime=Me*v.current.duration),d(Me)},O=c*k,z=2*Math.PI*23,Q=e?"var(--sb-orange-solid)":"rgba(var(--sb-orange-rgb), 0.14)",X=e?"var(--sb-on-accent)":"var(--sb-orange)",W=y.map(($,ne)=>{let Me=(ne+.5)/y.length<=c,q;return D?q=e?"rgba(var(--sb-ink), 0.13)":"rgba(var(--sb-ink), 0.1)":q=Me?"var(--sb-orange-solid)":e?"rgba(var(--sb-ink), 0.22)":"rgba(var(--sb-ink), 0.16)",n("span",{key:ne,style:{flex:"1 1 0",minWidth:0,width:"3px",height:Math.round(6+$*22)+"px",borderRadius:"2px",background:q,transition:"background .12s"}})}),se=D&&n("svg",{key:"ring",width:50,height:50,viewBox:"0 0 50 50",style:{position:"absolute",inset:0,transform:"rotate(-90deg)"}},[n("circle",{key:"bg",cx:25,cy:25,r:23,fill:"none",stroke:"rgba(var(--sb-orange-rgb), 0.2)",strokeWidth:2.5}),n("circle",{key:"fg",cx:25,cy:25,r:23,fill:"none",stroke:"var(--sb-orange-solid)",strokeWidth:2.5,strokeLinecap:"round",strokeDasharray:z.toFixed(1),strokeDashoffset:(z*(1-ge/100)).toFixed(1),style:{transition:"stroke-dashoffset .12s linear"}})]),ce=le?n("i",{className:"fas fa-triangle-exclamation",style:{fontSize:"14px"}}):D?n("svg",{width:15,height:15,viewBox:"0 0 24 24",fill:"currentColor",style:{opacity:.5}},n("path",{d:"M8 5.2v13.6l11-6.8z"})):r?n("svg",{width:16,height:16,viewBox:"0 0 24 24",fill:"currentColor"},[n("rect",{key:"a",x:6,y:5,width:4,height:14,rx:1.2}),n("rect",{key:"b",x:14,y:5,width:4,height:14,rx:1.2})]):n("svg",{width:16,height:16,viewBox:"0 0 24 24",fill:"currentColor"},n("path",{d:"M8 5.2v13.6l11-6.8z"})),me=le?a("msg.failed"):D?ee==="up"?a("chat.uploading"):a("chat.downloading"):a("msg.voice"),L=D?ge+"%":sa(r||c>0?O:k);return n("div",{style:{display:"flex",alignItems:"center",gap:"13px",padding:"13px 15px 12px"}},[n("div",{key:"pw",style:{position:"relative",flex:"none",width:"50px",height:"50px",display:"grid",placeItems:"center"}},[se,n("button",{key:"pb",onClick:P,title:D?a("chat.transferring"):r?a("msg.pause"):a("msg.play"),style:{width:"42px",height:"42px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:le?"rgba(var(--sb-red-rgb), 0.15)":Q,color:le?"var(--sb-red)":X,cursor:D||le||!I?"default":"pointer",transition:"transform .15s cubic-bezier(.2,.7,.3,1)"}},ce)]),n("div",{key:"body",style:{flex:1,minWidth:0}},[n("div",{key:"wave",onClick:j,style:{display:"flex",alignItems:"center",gap:"2px",height:"30px",cursor:D||le||!I?"default":"pointer"}},W),n("div",{key:"meta",style:{display:"flex",alignItems:"center",justifyContent:"space-between",marginTop:"6px"}},[n("span",{key:"t",style:{fontFamily:$n,fontSize:"10.5px",fontWeight:500,color:D?"var(--sb-orange-3)":"var(--sb-text-6)"}},L),n("span",{key:"l",style:{fontFamily:$n,fontSize:"9.5px",fontWeight:600,color:le?"var(--sb-red)":D?"var(--sb-orange)":"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"0.8px"}},me)])])])},Xo=({onSend:t,onCancel:e})=>{let n=React.createElement,r=300,i=40,[c,d]=React.useState(0),[h,m]=React.useState(()=>new Array(i).fill(.06)),[v,S]=React.useState(!1),p=React.useRef({}).current,k=()=>{try{p.node&&(p.node.disconnect(),p.node.port&&(p.node.port.onmessage=null),p.node.onaudioprocess=null)}catch{}try{p.srcNode&&p.srcNode.disconnect()}catch{}try{p.sink&&p.sink.disconnect()}catch{}p.node=p.srcNode=p.sink=null},y=()=>{p.timer&&clearInterval(p.timer),p.timer=null,k();try{p.stream&&p.stream.getTracks().forEach(C=>C.stop())}catch{}try{p.ac&&p.ac.close()}catch{}if(p.wurl){try{URL.revokeObjectURL(p.wurl)}catch{}p.wurl=null}p.stream=p.ac=null},I=C=>{p.peaks=p.peaks||[],p.peaks.push(C);let P=performance.now();(!p.lastDraw||P-p.lastDraw>55)&&(p.lastDraw=P,m(j=>{let O=j.slice(1);return O.push(Math.max(.08,C)),O}))},B=(C,P)=>{if(!C||!C.length)return new Array(P).fill(.3);let j=[],O=C.length/P;for(let z=0;z<P;z++){let Q=Math.floor(z*O),X=Math.max(Q+1,Math.floor((z+1)*O)),W=0;for(let se=Q;se<X&&se<C.length;se++)W=Math.max(W,C[se]);j.push(Math.max(.16,Math.min(1,W)))}return j},D=(C,P,j)=>{if(!C||!C.length||j>=P)return C||new Float32Array(0);let O=P/j,z=Math.floor(C.length/O),Q=new Float32Array(z);for(let X=0;X<z;X++){let W=Math.floor(X*O),se=Math.min(C.length,Math.floor((X+1)*O)),ce=0,me=0;for(let L=W;L<se;L++)ce+=C[L],me++;Q[X]=me?ce/me:0}return Q},le=(C,P)=>{let j=new ArrayBuffer(44+C.length*2),O=new DataView(j),z=(X,W)=>{for(let se=0;se<W.length;se++)O.setUint8(X+se,W.charCodeAt(se))};z(0,"RIFF"),O.setUint32(4,36+C.length*2,!0),z(8,"WAVE"),z(12,"fmt "),O.setUint32(16,16,!0),O.setUint16(20,1,!0),O.setUint16(22,1,!0),O.setUint32(24,P,!0),O.setUint32(28,P*2,!0),O.setUint16(32,2,!0),O.setUint16(34,16,!0),z(36,"data"),O.setUint32(40,C.length*2,!0);let Q=44;for(let X=0;X<C.length;X++){let W=Math.max(-1,Math.min(1,C[X]));O.setInt16(Q,W<0?W*32768:W*32767,!0),Q+=2}return new Blob([j],{type:"audio/wav"})},ee=C=>{if(!C||!C.length)return;p.pcm.push(C),p.sampleCount=(p.sampleCount||0)+C.length;let P=0;for(let j=0;j<C.length;j++)P+=C[j]*C[j];I(Math.min(1,Math.sqrt(P/C.length)*3.2))},ge=C=>{if(p.finished)return;p.finished=!0,p.timer&&clearInterval(p.timer),p.timer=null;let P=(p.peaks||[]).slice(),j=p.ac&&p.ac.sampleRate||48e3;k();let O=null,z=1,Q=p.sampleCount||0;if(C&&p.pcm&&p.pcm.length&&Q>j*.2){let X=new Float32Array(Q),W=0;for(let me of p.pcm)X.set(me,W),W+=me.length;let se=24e3,ce=D(X,j,se);z=Math.max(1,Math.round(ce.length/se)),O=le(ce,se)}try{p.stream&&p.stream.getTracks().forEach(X=>X.stop())}catch{}try{p.ac&&p.ac.close()}catch{}if(p.wurl){try{URL.revokeObjectURL(p.wurl)}catch{}p.wurl=null}p.stream=p.ac=null,p.pcm=[],C&&O&&O.size>44?t(O,z,B(P,34)):C?(S(!0),p.finished=!1):e()};if(React.useEffect(()=>{let C=!1;return p.finished=!1,p.peaks=[],p.pcm=[],p.sampleCount=0,p.t0=performance.now(),p.timer=setInterval(()=>{let P=(performance.now()-p.t0)/1e3;d(P),P>=r&&ge(!0)},200),(async()=>{let P=null;try{navigator.mediaDevices&&navigator.mediaDevices.getUserMedia&&(P=await navigator.mediaDevices.getUserMedia({audio:{channelCount:1,echoCancellation:!0,noiseSuppression:!0}}))}catch{P=null}if(C){P&&P.getTracks().forEach(j=>j.stop());return}if(!P){S(!0),p.timer&&clearInterval(p.timer);return}p.stream=P;try{let j=window.AudioContext||window.webkitAudioContext;if(p.ac=new j,p.ac.state==="suspended")try{await p.ac.resume()}catch{}p.srcNode=p.ac.createMediaStreamSource(P),p.sink=p.ac.createGain(),p.sink.gain.value=0;let O=!1;if(p.ac.audioWorklet&&typeof p.ac.audioWorklet.addModule=="function"&&window.AudioWorkletNode)try{let z='class P extends AudioWorkletProcessor{process(i){const c=i[0]&&i[0][0];if(c){this.port.postMessage(c.slice(0));}return true;}}registerProcessor("sb-pcm",P);';if(p.wurl=URL.createObjectURL(new Blob([z],{type:"application/javascript"})),await p.ac.audioWorklet.addModule(p.wurl),C)return;p.node=new AudioWorkletNode(p.ac,"sb-pcm"),p.node.port.onmessage=Q=>ee(Q.data),p.srcNode.connect(p.node),p.node.connect(p.sink),p.sink.connect(p.ac.destination),O=!0}catch{O=!1}O||(p.node=p.ac.createScriptProcessor(4096,1,1),p.node.onaudioprocess=Q=>{let X=Q.inputBuffer.getChannelData(0);ee(new Float32Array(X))},p.srcNode.connect(p.node),p.node.connect(p.sink),p.sink.connect(p.ac.destination))}catch{S(!0),p.timer&&clearInterval(p.timer)}})(),()=>{C=!0,y()}},[]),v)return n("div",{style:{display:"flex",alignItems:"center",gap:"12px"}},[n("div",{key:"msg",style:{flex:1,minWidth:0,display:"flex",alignItems:"center",gap:"9px",height:"46px",padding:"0 16px",borderRadius:"13px",background:"rgba(var(--sb-red-strong-rgb), 0.06)",border:"1px solid rgba(var(--sb-red-strong-rgb), 0.22)",color:"var(--sb-red)",fontSize:"13.5px"}},[n("i",{key:"i",className:"fas fa-microphone-slash",style:{fontSize:"14px"}}),a("err.noAudio")]),n("button",{key:"x",onClick:e,title:a("chatHdr.close"),style:{flex:"none",width:"46px",height:"46px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-6)",cursor:"pointer"}},n("i",{className:"fas fa-xmark",style:{fontSize:"16px"}}))]);let we=h.map((C,P)=>n("span",{key:P,style:{flex:"none",width:"3px",height:Math.round(4+C*24)+"px",borderRadius:"2px",background:"var(--sb-red-solid)",opacity:.45+C*.55}}));return n("div",{style:{display:"flex",alignItems:"center",gap:"12px"}},[n("button",{key:"cancel",onClick:()=>ge(!1),title:a("chat.discard"),style:{flex:"none",width:"42px",height:"42px",borderRadius:"12px",display:"grid",placeItems:"center",border:"none",background:"rgba(var(--sb-ink), 0.04)",color:"var(--sb-text-6)",cursor:"pointer"}},n("i",{className:"fas fa-trash-can",style:{fontSize:"15px"}})),n("div",{key:"bar",style:{flex:1,minWidth:0,display:"flex",alignItems:"center",gap:"11px",height:"46px",padding:"0 16px",borderRadius:"13px",background:"rgba(var(--sb-red-strong-rgb), 0.06)",border:"1px solid rgba(var(--sb-red-strong-rgb), 0.22)"}},[n("span",{key:"dot",style:{position:"relative",flex:"none",width:"9px",height:"9px"}},n("span",{style:{position:"absolute",inset:0,borderRadius:"50%",background:"var(--sb-red-solid)",animation:"vmRec 1.3s ease-in-out infinite"}})),n("span",{key:"time",style:{flex:"none",fontFamily:$n,fontSize:"13px",fontWeight:600,color:"var(--sb-text-1)",minWidth:"42px"}},sa(c)),n("div",{key:"wave",style:{flex:1,minWidth:0,display:"flex",alignItems:"center",justifyContent:"flex-end",gap:"2px",height:"30px",overflow:"hidden"}},we)]),n("button",{key:"send",onClick:()=>ge(!0),title:a("chat.sendVoice"),style:{flex:"none",width:"46px",height:"46px",borderRadius:"50%",display:"grid",placeItems:"center",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",cursor:"pointer",boxShadow:"0 8px 22px rgba(var(--sb-orange-rgb), 0.3)",transition:"transform .15s cubic-bezier(.2,.7,.3,1)"}},n("svg",{width:20,height:20,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round"},[n("path",{key:"a",d:"M22 2L11 13"}),n("path",{key:"b",d:"M22 2l-7 20-4-9-9-4 20-7z"})]))])},Jo=({message:t,type:e,timestamp:n,mid:r,status:i,viewOnce:c,viewOnceTtl:d,expiresAt:h,expired:m,nowTick:v,canUnsend:S,onUnsend:p,onExpire:k,voice:y})=>{let[I,B]=React.useState(!1),D=React.useRef(null),le=L=>new Date(L).toLocaleTimeString("en-GB",{hour:"2-digit",minute:"2-digit",second:"2-digit"});if(React.useEffect(()=>()=>{D.current&&clearTimeout(D.current)},[]),e==="system"||e==="notice"){let L=e==="notice";return React.createElement("div",{className:"message-slide",style:{display:"flex",justifyContent:"center",margin:"4px 0"}},React.createElement("div",{style:{maxWidth:"80%",padding:"8px 14px",borderRadius:"10px",border:"1px solid "+(L?"rgba(var(--sb-green-rgb), 0.25)":"rgba(var(--sb-orange-rgb), 0.22)"),background:L?"rgba(var(--sb-green-rgb), 0.08)":"rgba(var(--sb-orange-rgb), 0.08)",color:L?"var(--sb-green-soft)":"var(--sb-orange-4)",fontSize:"12.5px",textAlign:"center",lineHeight:1.5}},t))}let ee=e==="sent",ge=ee,we=e==="received"&&c===!0,C=typeof h=="number"?Math.max(0,Math.ceil((h-(v||Date.now()))/1e3)):null,P=L=>{if(L==null)return"";let $=Math.floor(L/3600),ne=Math.floor(L%3600/60),Me=L%60,q=xe=>String(xe).padStart(2,"0");return $>0?$+":"+q(ne)+":"+q(Me):ne+":"+q(Me)},j=()=>{if(I)return;B(!0);let L=Math.max(1,typeof d=="number"?d:15)*1e3;D.current=setTimeout(()=>{k&&k()},L)},O=ee?"14px 14px 4px 14px":"14px 14px 14px 4px",z=ee?"1px solid rgba(var(--sb-ink), 0.10)":"1px solid rgba(var(--sb-ink), 0.06)",Q=ee?"var(--sb-surface-3)":"var(--sb-surface)";if(m===!0||typeof h=="number"&&(v||Date.now())>=h)return React.createElement("div",{className:"message-slide",style:{display:"flex",width:"100%",justifyContent:ee?"flex-end":"flex-start"}},React.createElement("div",{style:{maxWidth:"74%",minWidth:"170px"}},React.createElement("div",{style:{display:"flex",alignItems:"center",gap:"9px",padding:"12px 15px",borderRadius:O,border:"1px dashed rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.018)"}},[React.createElement("i",{key:"i",className:"fas fa-clock",style:{color:"var(--sb-text-9)",fontSize:"13px"}}),React.createElement("span",{key:"t",style:{fontSize:"13px",color:"var(--sb-text-9)",fontStyle:"italic"}},a("chat.expired"))])));let W;y?W=React.createElement(Qo,{key:"voice",voice:y,isMe:ee}):we&&!I?W=React.createElement("div",{key:"cover",onClick:j,style:{position:"relative",cursor:"pointer",padding:"12px 15px 10px",overflow:"hidden"}},[React.createElement("div",{key:"blur",style:{fontSize:"14.5px",lineHeight:1.55,color:"var(--sb-text-5)",filter:"blur(7px)",userSelect:"none",pointerEvents:"none",wordBreak:"break-word",minHeight:"22px"}},t),React.createElement("div",{key:"grain",style:{position:"absolute",inset:0,backgroundImage:Yo,backgroundSize:"90px",opacity:.18,mixBlendMode:"screen",pointerEvents:"none"}}),React.createElement("div",{key:"lbl",style:{position:"absolute",inset:0,display:"flex",alignItems:"center",justifyContent:"center",gap:"7px",pointerEvents:"none"}},[React.createElement("i",{key:"i",className:"fas fa-eye-slash",style:{color:"var(--sb-text-2)",fontSize:"13px"}}),React.createElement("span",{key:"t",style:{fontSize:"12px",fontWeight:600,color:"var(--sb-text-2)",textShadow:"0 1px 5px rgba(0,0,0,0.75)"}},a("chat.viewOnceTap"))])]):W=React.createElement("div",{key:"body",style:{padding:"12px 15px 10px",color:"var(--sb-text-2)"}},React.createElement(qo,{text:t}));let se=[React.createElement("span",{key:"time",style:{fontFamily:$n,fontSize:"10.5px",color:"var(--sb-text-9)"}},le(n))];if(ee){let L={sending:{icon:"fa-clock",color:"var(--sb-text-9)",label:a("chat.sending")},sent:{icon:"fa-check",color:"var(--sb-text-7)",label:a("msg.sent")},delivered:{icon:"fa-check-double",color:"var(--sb-text-7)",label:a("chat.delivered")},read:{icon:"fa-check-double",color:"var(--sb-green)",label:a("msg.read")},failed:{icon:"fa-triangle-exclamation",color:"var(--sb-red)",label:a("chat.notSent")}}[i||"sent"]||{icon:"fa-check",color:"var(--sb-text-7)",label:a("msg.sent")};se.push(React.createElement("span",{key:"dlv",title:L.label,style:{display:"inline-flex",alignItems:"center",color:L.color}},React.createElement("i",{className:"fas "+L.icon,style:{fontSize:"10.5px"}})))}we&&I?se.push(React.createElement("span",{key:"vo",style:{display:"inline-flex",alignItems:"center",gap:"4px",fontSize:"10px",fontWeight:600,color:"var(--sb-text-7)"}},[React.createElement("span",{key:"d",style:{width:"4px",height:"4px",borderRadius:"50%",background:"var(--sb-text-7)"}}),a("chat.viewedOnce")])):C!==null&&se.push(React.createElement("span",{key:"ttl",style:{display:"inline-flex",alignItems:"center",gap:"4px",fontFamily:$n,fontSize:"10.5px",fontWeight:500,color:"var(--sb-orange)"}},[React.createElement("i",{key:"i",className:"fas fa-clock",style:{fontSize:"10px"}}),P(C)]));let ce=[];ce.push(React.createElement("span",{key:"status",style:{display:"inline-flex",alignItems:"center",gap:"5px",fontSize:"10.5px",fontWeight:600,color:"var(--sb-green)",flex:"none"}},[React.createElement("i",{key:"i",className:ge?"fas fa-lock":"fas fa-lock-open",style:{fontSize:"10px"}}),ge?a("chat.encrypted"):a("chat.decrypted")])),S&&ee&&r&&ce.push(React.createElement("button",{key:"unsend",onClick:()=>p&&p(r),title:a("chat.deleteForEveryone"),className:"sb-unsend",style:{background:"none",border:"none",cursor:"pointer",color:"var(--sb-text-faint)",fontSize:"11px",padding:0,lineHeight:1}},React.createElement("i",{className:"fas fa-trash-can"})));let me=React.createElement("div",{key:"meta",style:{display:"flex",alignItems:"center",justifyContent:"space-between",gap:"14px",padding:"0 15px 10px"}},[React.createElement("div",{key:"l",style:{display:"flex",alignItems:"center",gap:"9px",minWidth:0}},se),React.createElement("div",{key:"r",style:{display:"flex",alignItems:"center",gap:"9px",flex:"none"}},ce)]);return React.createElement("div",{className:"message-slide",style:{display:"flex",width:"100%",justifyContent:ee?"flex-end":"flex-start"}},[React.createElement("div",{key:"wrap",style:{maxWidth:"74%",minWidth:"170px"}},React.createElement("div",{style:{borderRadius:O,border:z,background:Q,overflow:"hidden"}},[W,me]))])},Zo=({messages:t,onCreateOffer:e,onCreateAnswer:n,onConnect:r,onClearData:i,onVerifyConnection:c,connectionStatus:d,offerData:h,answerData:m,offerInput:v,setOfferInput:S,answerInput:p,setAnswerInput:k,showOfferStep:y,showAnswerStep:I,verificationCode:B,showVerification:D,showQRCode:le,qrCodeUrl:ee,showQRScanner:ge,setShowQRCode:we,setShowQRScanner:C,setShowQRScannerModal:P,offerPassword:j,answerPassword:O,localVerificationConfirmed:z,remoteVerificationConfirmed:Q,bothVerificationsConfirmed:X,qrFramesTotal:W,qrFrameIndex:se,qrManualMode:ce,toggleQrManualMode:me,nextQrFrame:L,prevQrFrame:$,markAnswerCreated:ne,notificationIntegrationRef:Me,isGeneratingKeys:q,setIsGeneratingKeys:xe,handleCreateOffer:Fe,relayOnlyMode:at,setRelayOnlyMode:Ee,webrtcManagerRef:Je,showIceSettings:ot,setShowIceSettings:wt,iceServersText:$t,iceSettingsPersisted:kt,customIceServers:Re,handleApplyIceSettings:yt,handleForgetIceSettings:te,compact:Ne=!1})=>{let[St,bt]=React.useState("create"),[Gt,Et]=React.useState(!1),[Ht,xt]=React.useState(!1),[Wt,qt]=React.useState(!1),[b,Z]=React.useState(""),[Ae,qe]=React.useState(""),[Ze,Be]=React.useState(!1),[cn,ct]=React.useState(0),[ze,Tn]=React.useState(!1),[At,ln]=React.useState(!1),[Yt,Tt]=React.useState(0),et=1800*1e3,Ye=h&&typeof h=="object"&&Number(h.ts||h.timestamp)||null,[Ke,lt]=React.useState(()=>Date.now());React.useEffect(()=>{if(!y||!Ye)return;lt(Date.now());let M=setInterval(()=>lt(Date.now()),1e3);return()=>clearInterval(M)},[y,Ye]),React.useEffect(()=>{Z(""),qe("")},[B]),React.useEffect(()=>{(D||!y&&!I)&&xt(!1),ln(!1)},[y,I,D]),React.useEffect(()=>{if(!(q&&!y&&!I&&!D)){Tt(0);return}Tt(0);let H=0,ae=setInterval(()=>{H+=1,Tt(H),H>=3&&clearInterval(ae)},520);return()=>clearInterval(ae)},[q,y,I,D]),React.useEffect(()=>{if(!ze)return;let M=()=>Tn(!1),H=setTimeout(()=>document.addEventListener("click",M),0);return()=>{clearTimeout(H),document.removeEventListener("click",M)}},[ze]);let Kt=()=>{xe(!1),xt(!1),i()},fr=M=>c(M),dn=()=>{c(null,!1)},pn=async()=>{if(!Gt)try{if(!("Notification"in window)||!window.isSecureContext&&window.location.protocol!=="https:"&&window.location.hostname!=="localhost")return;let M=typeof Notification<"u"&&Notification?Notification.permission:"denied";if(M==="default"&&typeof Notification<"u"&&Notification){if(await Notification.requestPermission()==="granted"){try{if(window.NotificationIntegration&&Je.current){let ae=new window.NotificationIntegration(Je.current);await ae.init(),Me.current=ae}}catch{}setTimeout(()=>{try{let ae=new Notification("SecureBit Chat",{body:a("notify.enabledBody"),icon:"/logo/icon-192x192.png",tag:"welcome-notification"});ae.onclick=()=>{ae.close()},setTimeout(()=>{ae.close()},5e3)}catch{}},1e3)}}else if(M==="granted"){try{if(window.NotificationIntegration&&Je.current&&!Me.current){let H=new window.NotificationIntegration(Je.current);await H.init(),Me.current=H}}catch{}setTimeout(()=>{try{let H=new Notification("SecureBit Chat",{body:a("notify.workingBody"),icon:"/logo/icon-192x192.png",tag:"test-notification"});H.onclick=()=>{H.close()},setTimeout(()=>{H.close()},5e3)}catch{}},1e3)}Et(!0)}catch{}},f=React.createElement,un="var(--sb-orange)",E="var(--sb-green)",ie="var(--sb-orange-solid)",ue="var(--sb-green-solid)",_e=$n,Nt=M=>{try{let H=typeof M=="object"?JSON.stringify(M):M||"";return H?typeof window.encodeBinaryToPrefixed=="function"?window.encodeBinaryToPrefixed(H):typeof window.compressToPrefixedGzip=="function"?window.compressToPrefixedGzip(H):H:""}catch{return typeof M=="object"?JSON.stringify(M):M||""}},re=St==="create",fn=q&&!y&&!I&&!D,Vt=re&&y&&!D,Nn=!re&&I&&!D,Ft=!D&&!fn&&!Vt&&!Nn,hr=re?un:E,Gr=re?ie:ue,gr=D?a("step.verification"):Vt||Nn?a("step.exchange"):a("step.open"),Pt=Nt(re?h:m),hn=(v||"").trim().length>0,Rt=(p||"").trim().length>0,Dn=async()=>{try{typeof Cs=="function"?await Cs(Pt):await navigator.clipboard.writeText(Pt)}catch{}qt(!0),setTimeout(()=>qt(!1),1600)},gn=(B||"").replace(/[-\s]/g,"").length,mr=b.replace(/[-\s]/g,"").length,_t=!z&&gn>0&&mr===gn,yr=async()=>{try{qe(""),await c(b)}catch(M){Z(""),qe(M?.message==="SAS_MAX_ATTEMPTS"?a("sas.tooManyAttempts"):a("sas.incorrect"))}},br={"fa-user":{sw:1.9,e:[["circle",{cx:12,cy:8,r:3.6}],["path",{d:"M5 20c0-3.5 3-5.5 7-5.5s7 2 7 5.5"}]]},"fa-lock":{sw:2,e:[["path",{d:"M7 11V7a5 5 0 0 1 10 0v4"}],["rect",{x:4.5,y:11,width:15,height:9,rx:2.2}]]},"fa-plus":{sw:2.1,e:[["path",{d:"M12 5v14M5 12h14"}]]},"fa-link":{sw:2,e:[["path",{d:"M9.5 14.5l5-5M8 11l-2.2 2.2a3.5 3.5 0 0 0 4.95 4.95L13 16M16 13l2.2-2.2a3.5 3.5 0 0 0-4.95-4.95L11 8"}]]},"fa-bolt":{sw:2.1,e:[["path",{d:"M13 2L4.5 13H11l-1 9 8.5-11H12l1-9z"}]]},"fa-camera":{sw:1.8,e:[["path",{d:"M2 8.5V6.5A2.5 2.5 0 0 1 4.5 4h2M17.5 4h2A2.5 2.5 0 0 1 22 6.5v2M22 15.5v2a2.5 2.5 0 0 1-2.5 2.5h-2M6.5 20h-2A2.5 2.5 0 0 1 2 17.5v-2"}],["circle",{cx:12,cy:12,r:3.2}]]},"fa-qrcode":{sw:1.9,e:[["rect",{x:3,y:3,width:7,height:7,rx:1.3}],["rect",{x:14,y:3,width:7,height:7,rx:1.3}],["rect",{x:3,y:14,width:7,height:7,rx:1.3}],["path",{d:"M14 14h3v3M21 14v.01M14 21h.01M21 21v-4M17.5 21H21"}]]},"fa-chevron-right":{sw:2,e:[["path",{d:"M9 6l6 6-6 6"}]]},"fa-chevron-left":{sw:2,e:[["path",{d:"M15 6l-6 6 6 6"}]]},"fa-chevron-down":{sw:2,e:[["path",{d:"M6 9l6 6 6-6"}]]},"fa-circle-notch":{sw:2,e:[["path",{d:"M21 12a9 9 0 1 1-6.2-8.6"}]]},"fa-check":{sw:2.4,e:[["path",{d:"M20 6L9 17l-5-5"}]]},"fa-check-circle":{sw:2,e:[["circle",{cx:12,cy:12,r:9}],["path",{d:"M8.5 12.4l2.4 2.4 4.6-5"}]]},"fa-shield-alt":{sw:1.9,e:[["path",{d:"M12 2.6l7 3v5.1c0 4.5-3 8.3-7 10.2-4-1.9-7-5.7-7-10.2V5.6l7-3z"}],["path",{d:"M9 12l2 2 4-4.1"}]]},"fa-download":{sw:2,e:[["path",{d:"M12 3v12M12 15l-4.5-4.5M12 15l4.5-4.5"}],["path",{d:"M4 20h16"}]]},"fa-clock":{sw:1.8,e:[["circle",{cx:12,cy:13,r:8}],["path",{d:"M12 9v4l2.5 2M9 2h6"}]]},"fa-times":{sw:2.2,e:[["path",{d:"M18 6L6 18M6 6l12 12"}]]},"fa-eye":{sw:1.9,e:[["path",{d:"M2 12s3.6-7 10-7 10 7 10 7-3.6 7-10 7-10-7-10-7z"}],["circle",{cx:12,cy:12,r:3}]]}},De=(M,H)=>{H=H||{};let ae=br[M];if(!ae){let tt={};return H.color&&(tt.color=H.color),H.fontSize&&(tt.fontSize=H.fontSize),H.animation&&(tt.animation=H.animation),H.style&&Object.assign(tt,H.style),f("i",{key:H.key,className:`fas ${M}`,style:tt})}let Ue=H.fontSize?parseFloat(H.fontSize):16,Ge={};return H.animation&&(Ge.animation=H.animation,Ge.transformOrigin="center",Ge.transformBox="fill-box"),H.style&&Object.assign(Ge,H.style),f("svg",{key:H.key,className:M,width:Ue,height:Ue,viewBox:"0 0 24 24",fill:"none",stroke:H.color||"currentColor",strokeWidth:ae.sw||2,strokeLinecap:"round",strokeLinejoin:"round",style:Ge},ae.e.map((tt,xn)=>f(tt[0],Object.assign({key:xn},tt[1]))))},Qt=f("div",{key:"left",className:"sb-start-left",style:{flex:"1.05 1 380px",position:"relative",overflow:"hidden",minHeight:"100vh",boxSizing:"border-box",padding:"46px",display:"flex",flexDirection:"column",justifyContent:"space-between",gap:"36px",borderInlineEnd:"1px solid rgba(var(--sb-ink), 0.06)",background:"radial-gradient(900px 600px at 25% 18%, rgba(var(--sb-orange-rgb), 0.07), transparent 62%), radial-gradient(800px 700px at 80% 92%, rgba(var(--sb-green-rgb), 0.06), transparent 60%), var(--sb-bg-deep)"}},[f("div",{key:"herowrap",style:{flex:1,display:"flex",flexDirection:"column",justifyContent:"center",position:"relative",zIndex:2}},f("div",{key:"hero",style:{maxWidth:"560px"}},[f("h1",{key:"h1",style:{margin:"0 0 14px",fontSize:"34px",fontWeight:800,letterSpacing:"-1.1px",lineHeight:1.1,color:"var(--sb-text-1)"}},[a("hero.headlineTop"),f("br",{key:"br"}),a("hero.headlineBottom")]),f("p",{key:"p",style:{margin:"0 0 38px",fontSize:"14.5px",lineHeight:1.6,color:"var(--sb-text-7)",maxWidth:"390px"}},a("hero.subheading")),f("div",{key:"channel",style:{display:"flex",alignItems:"center",gap:"32px",flexWrap:"wrap"}},[f("svg",{key:"svg",viewBox:"0 0 380 200",role:"img","aria-label":a("hero.diagramAlt"),style:{display:"block",width:"100%",maxWidth:"380px",height:"auto",overflow:"visible"}},[f("line",{key:"l0",x1:30,y1:100,x2:330,y2:100,stroke:ie,strokeWidth:1.5,strokeOpacity:.75}),f("circle",{key:"p0",r:3.6,fill:"var(--sb-orange-2)",style:{offsetPath:"path('M30,100 L330,100')",animation:"sbTrav 2.8s linear infinite"}}),f("g",{key:"g1",style:{animation:"sbIn1 14s linear infinite"}},[f("line",{key:"a",x1:30,y1:100,x2:250,y2:26,stroke:ie,strokeWidth:1.4,strokeOpacity:.7}),f("line",{key:"b",x1:250,y1:26,x2:330,y2:100,stroke:ue,strokeWidth:1.2,strokeOpacity:.3}),f("circle",{key:"p",r:3.2,fill:"var(--sb-orange-2)",style:{offsetPath:"path('M30,100 L250,26')",animation:"sbTrav 3s linear .6s infinite"}}),f("circle",{key:"n",cx:250,cy:26,r:5,fill:"var(--sb-bg-deep)",stroke:"var(--sb-diag-stroke)",strokeWidth:1.2}),f("text",{key:"t",x:250,y:8,textAnchor:"middle",fontFamily:_e,fontSize:12,fill:"var(--sb-diag-label)"},"mara")]),f("circle",{key:"r1",cx:250,cy:26,r:5,fill:"none",stroke:ie,strokeOpacity:.6,style:{animation:"sbRing1 14s linear infinite"}}),f("g",{key:"g2",style:{animation:"sbIn2 14s linear infinite"}},[f("line",{key:"a",x1:30,y1:100,x2:250,y2:174,stroke:ie,strokeWidth:1.4,strokeOpacity:.7}),f("line",{key:"b",x1:250,y1:174,x2:330,y2:100,stroke:ue,strokeWidth:1.2,strokeOpacity:.3}),f("line",{key:"c",x1:250,y1:26,x2:250,y2:174,stroke:ue,strokeWidth:1.2,strokeOpacity:.3}),f("circle",{key:"p",r:3.2,fill:"var(--sb-orange-2)",style:{offsetPath:"path('M30,100 L250,174')",animation:"sbTrav 3s linear .3s infinite"}}),f("circle",{key:"q",r:2.8,fill:ue,style:{offsetPath:"path('M250,26 L250,174')",animation:"sbTrav 3.4s linear 1.2s infinite"}}),f("circle",{key:"n",cx:250,cy:174,r:5,fill:"var(--sb-bg-deep)",stroke:"var(--sb-diag-stroke)",strokeWidth:1.2}),f("text",{key:"t",x:250,y:194,textAnchor:"middle",fontFamily:_e,fontSize:12,fill:"var(--sb-diag-label)"},"tobi")]),f("circle",{key:"r2",cx:250,cy:174,r:5,fill:"none",stroke:ie,strokeOpacity:.6,style:{animation:"sbRing2 14s linear infinite"}}),f("circle",{key:"pe",cx:330,cy:100,r:5,fill:"var(--sb-bg-deep)",stroke:"var(--sb-diag-stroke)",strokeWidth:1.2}),f("text",{key:"pt",x:346,y:104,fontFamily:_e,fontSize:12,fill:"var(--sb-diag-label)"},"peer"),f("circle",{key:"yh",cx:30,cy:100,r:15,fill:ie,fillOpacity:.09}),f("circle",{key:"yc",cx:30,cy:100,r:6,fill:ie}),f("text",{key:"yt",x:30,y:126,textAnchor:"middle",fontFamily:_e,fontSize:12,fill:"var(--sb-diag-text)"},a("mesh.you"))]),f("div",{key:"log",style:{display:"flex",flexDirection:"column",gap:"12px",fontFamily:_e,fontSize:"12px",color:"var(--sb-diag-dim)"}},[f("div",{key:"r0",style:{animation:"sbRow0 14s linear infinite"}},a("mesh.peer")),f("div",{key:"r1",style:{animation:"sbRow1 14s linear infinite"}},a("mesh.joined2")),f("div",{key:"r2",style:{animation:"sbRow2 14s linear infinite"}},a("mesh.joined3"))])])])),f("div",{key:"badges",style:{position:"relative",zIndex:2,display:"flex",flexWrap:"wrap",gap:"8px"}},["ECDH P-384","AES-256-GCM",a("sec.pfsShort")].map(M=>f("span",{key:M,style:{display:"inline-flex",alignItems:"center",gap:"6px",padding:"6px 11px",borderRadius:"8px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.025)",fontFamily:_e,fontSize:"11px",fontWeight:500,color:"var(--sb-text-6)"}},[f("span",{key:"dot",style:{width:"5px",height:"5px",borderRadius:"50%",background:ue}}),M])))]),qn=Ft&&f("div",{key:"seg",style:{position:"relative",display:"flex",padding:"4px",borderRadius:"12px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",marginBottom:"26px"}},[f("div",{key:"ind",style:{position:"absolute",top:"4px",bottom:"4px",insetInlineStart:"4px",width:"calc(50% - 4px)",borderRadius:"9px",background:"rgba(var(--sb-ink), 0.07)",border:"1px solid rgba(var(--sb-ink), 0.08)",transform:re?"translateX(0%)":`translateX(${100*ur}%)`,transition:"transform .26s cubic-bezier(.3,.8,.3,1)"}}),f("button",{key:"c",className:"sb-seg-btn",onClick:()=>bt("create"),style:{position:"relative",zIndex:1,flex:1,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"11px",border:"none",background:"transparent",color:re?"var(--sb-text-1)":"var(--sb-text-8)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,cursor:"pointer"}},[De("fa-plus",{key:"i"}),a("action.create")]),f("button",{key:"j",className:"sb-seg-btn",onClick:()=>bt("join"),style:{position:"relative",zIndex:1,flex:1,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"11px",border:"none",background:"transparent",color:re?"var(--sb-text-8)":"var(--sb-text-1)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,cursor:"pointer"}},[De("fa-link",{key:"i"}),a("action.join")])]),Yn=M=>f("button",{key:M||"back",className:"sb-soft-btn",onClick:Kt,style:{display:"inline-flex",alignItems:"center",gap:"6px",marginBottom:"14px",paddingBlock:"6px",paddingInlineStart:"8px",paddingInlineEnd:"11px",borderRadius:"8px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"transparent",color:"var(--sb-text-6)",fontFamily:"inherit",fontSize:"12.5px",fontWeight:600,cursor:"pointer"}},[De("fa-chevron-left",{key:"i"}),a("action.back")]),vt=re&&Ye?Math.max(0,Math.ceil((Ye+et-Ke)/1e3)):null,Fn=vt===null?null:`${Math.floor(vt/60)}:${String(vt%60).padStart(2,"0")}`,Ot=f("div",{key:"card",style:{borderRadius:"16px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",overflow:"hidden",marginBottom:re?"26px":"16px"}},[ee&&f("button",{key:"showqr",className:"sb-qr-row",onClick:()=>xt(!0),style:{width:"100%",display:"flex",alignItems:"center",gap:"14px",padding:"14px 16px",border:"none",background:"transparent",color:"inherit",fontFamily:"inherit",cursor:"pointer",textAlign:"start",transition:"background .15s"}},[f("span",{key:"ic",style:{flex:"none",width:"48px",height:"48px",padding:"5px",borderRadius:"9px",background:"#fff"}},f("img",{src:ee,alt:"",style:{width:"100%",height:"100%",objectFit:"contain",display:"block",imageRendering:"pixelated"}})),f("span",{key:"tx",style:{flex:1,minWidth:0}},[f("span",{key:"t",style:{display:"block",fontSize:"15px",fontWeight:700,color:"var(--sb-text-1)"}},a("qr.showTitle")),f("span",{key:"s",style:{display:"block",fontSize:"12.5px",color:"var(--sb-text-7)",marginTop:"2px"}},(W||0)>1?a("qr.showSubtitleFrames",{frames:W}):a("qr.showSubtitle"))]),De("fa-chevron-right",{color:"var(--sb-text-9)"})]),ee&&f("div",{key:"div",style:{height:"1px",background:"rgba(var(--sb-ink), 0.06)"}}),f("div",{key:"code",style:{padding:"12px 16px 16px"}},[f("div",{key:"bar",style:{display:"flex",alignItems:"center",justifyContent:"space-between",gap:"10px",marginBottom:"10px"}},[f("span",{key:"l",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-6)"}},a("cred.orCopy")),f("span",{key:"r",style:{display:"flex",alignItems:"center",gap:"12px"}},[Fn&&f("span",{key:"exp",dir:"ltr",style:{fontFamily:_e,fontSize:"11px",color:vt<60?"var(--sb-red)":"var(--sb-text-9)"}},Fn),f("button",{key:"copy",className:"sb-soft-btn",onClick:Dn,style:{display:"inline-flex",alignItems:"center",gap:"6px",padding:"6px 11px",borderRadius:"8px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.03)",color:"var(--sb-text-2)",fontFamily:"inherit",fontSize:"12.5px",fontWeight:700,cursor:"pointer"}},[Wt&&De("fa-check",{key:"i",color:ue}),Wt?a("action.copied"):a("action.copy")])])]),f("div",{key:"codewrap",onClick:()=>ln(M=>!M),style:{position:"relative",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.05)",background:"var(--sb-bg)",overflow:"hidden",cursor:"pointer"}},[f("div",{key:"code",dir:"ltr",className:"sb-sc",style:{fontFamily:_e,fontSize:"11.5px",lineHeight:1.6,color:"var(--sb-text-code)",wordBreak:"break-all",padding:"11px 13px",maxHeight:"78px",overflowY:At?"auto":"hidden",filter:At?"none":"blur(5px)",userSelect:At?"text":"none",transition:"filter .25s"}},Pt),!At&&f("span",{key:"reveal",style:{position:"absolute",inset:0,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"0 12px",textAlign:"center",color:"var(--sb-text-3)",fontSize:"12.5px",fontWeight:600}},[De("fa-eye",{key:"i"}),a("cred.reveal")])])])]),Lt;if(D){let M=X,H=(B||"").replace(/[-\s]/g,""),ae=H.length,Ue=b.replace(/[-\s]/g,""),Ge=ae>0&&Ue.length===ae,tt=Ge&&Ue===H,xn=Ge&&!tt,ht=z,dt=Q,kr=ht&&!dt,vn=Math.min(3,ae),er=_t&&tt,Xt=Pe=>f("svg",{key:Pe,width:12,height:12,viewBox:"0 0 24 24",fill:"none",stroke:"var(--sb-on-green-2)",strokeWidth:3.2,strokeLinecap:"round",strokeLinejoin:"round"},f("path",{d:"M5 12.5l4.2 4.2L19 7",strokeDasharray:24,style:{animation:"svDraw .35s ease-out .1s both"}})),tr=(Pe,Ve)=>({position:"relative",width:"22px",height:"22px",flex:"none",borderRadius:"50%",display:"grid",placeItems:"center",transition:"all .3s",border:`1.5px solid ${Pe?ue:Ve?"rgba(var(--sb-green-rgb), 0.5)":"rgba(var(--sb-ink), 0.18)"}`,background:Pe?ue:"transparent"}),Bt=(Pe,Ve)=>f("span",{key:Pe,style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-4)"}},Ve),Jt=H.split("").map((Pe,Ve)=>{let wn=Ue[Ve]||"",Bn=Ze&&!ht&&Ve===Ue.length&&!Ge,Zt="rgba(var(--sb-ink), 0.09)",zn="var(--sb-text-1)",Un="none";return wn&&(Zt="rgba(var(--sb-ink), 0.2)",Un="otpPop .28s cubic-bezier(.2,.8,.3,1.2) both"),Bn&&(Zt="rgba(var(--sb-orange-rgb), 0.65)"),xn&&(Zt="rgba(var(--sb-red-rgb), 0.6)",zn="var(--sb-red)"),tt&&(Un=`otpOk .45s cubic-bezier(.2,.8,.3,1) ${Ve*55}ms both`),f("span",{key:Ve,style:{position:"relative",flex:1,minWidth:0,height:"56px",display:"grid",placeItems:"center",borderRadius:"12px",border:`1px solid ${Zt}`,background:"var(--sb-surface)",fontFamily:_e,fontSize:"22px",fontWeight:600,color:zn,transition:"border-color .15s, color .15s, box-shadow .15s",animation:Un,marginInlineStart:Ve===vn&&ae>vn?"10px":0,boxShadow:Bn?"0 0 0 3px rgba(var(--sb-orange-rgb), 0.12)":"none"}},[wn,Bn&&f("span",{key:"caret",style:{position:"absolute",left:"50%",top:"50%",width:"2px",height:"22px",margin:"-11px 0 0 -1px",borderRadius:"1px",background:ie,animation:"otpCaret 1s steps(1) infinite"}})])});Lt=f("div",{key:"verify",style:{animation:"sbUp .3s ease"}},[!M&&Yn("vback"),f("h2",{key:"t",style:{margin:"0 0 8px",fontSize:"22px",fontWeight:800,letterSpacing:"-0.5px",color:"var(--sb-text-1)"}},M?a("sasv.titleDone"):a("sasv.title")),f("p",{key:"sub",style:{margin:"0 0 24px",fontSize:"13.5px",lineHeight:1.55,color:"var(--sb-text-7)",textWrap:"pretty"}},M?a("sasv.descDone"):a("sasv.desc")),f("div",{key:"code",style:{padding:"20px 0 22px",borderTop:"1px solid rgba(var(--sb-ink), 0.06)",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)",marginBottom:"22px",textAlign:"center"}},f("div",{dir:"ltr",style:{display:"inline-flex",alignItems:"center",gap:"18px",fontFamily:_e,fontSize:"34px",fontWeight:600,letterSpacing:"8px",lineHeight:1,color:M?E:"var(--sb-text-1)",transition:"color .4s"}},ae?[f("span",{key:"a"},H.slice(0,vn)),f("span",{key:"b"},H.slice(vn))]:f("span",{style:{fontSize:"14px",letterSpacing:0,color:"var(--sb-text-8)"}},a("verify.waiting")))),!M&&f("div",{key:"form"},[f("div",{key:"lbl",style:{display:"flex",alignItems:"center",justifyContent:"space-between",marginBottom:"10px"}},[f("span",{key:"l",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-6)"}},a("sasv.enter")),f("span",{key:"h",style:{fontFamily:_e,fontSize:"11px",transition:"color .2s",color:Ge?tt?E:"var(--sb-red)":"var(--sb-text-faint)"}},Ge?tt?a("sasv.match"):a("sasv.noMatch"):`${Ue.length} / ${ae||Rs}`)]),f("label",{key:"cells",dir:"ltr",style:{position:"relative",display:"flex",gap:"6px",marginBottom:Ae?"8px":"18px",cursor:"text",animation:xn?`otpShake .4s ease ${cn%2?"0s":"0.001s"}`:"none"}},[...Jt,f("input",{key:"in",dir:"ltr",value:b,disabled:ht||!ae,autoFocus:!0,autoComplete:"one-time-code",spellCheck:!1,type:"text",inputMode:"numeric",pattern:"[0-9]*",maxLength:ae||Rs,"aria-label":a("sasv.enter"),onChange:Pe=>{let Ve=Pe.target.value.replace(/\D/g,"").slice(0,ae||Rs);ae&&Ve.length===ae&&Ve!==H&&ct(wn=>wn+1),Z(Ve),Ae&&qe("")},onFocus:()=>Be(!0),onBlur:()=>Be(!1),style:{position:"absolute",inset:0,width:"100%",height:"100%",opacity:0,border:"none",outline:"none",background:"transparent",color:"transparent",caretColor:"transparent",fontSize:"16px"}})]),Ae&&f("p",{key:"err",style:{color:"var(--sb-red)",fontSize:"12.5px",margin:"0 0 16px"}},Ae)]),f("div",{key:"link",style:{display:"flex",alignItems:"center",gap:"12px",marginBottom:"20px"}},[f("div",{key:"you",style:{display:"flex",alignItems:"center",gap:"9px",flex:"none"}},[f("span",{key:"r",style:tr(ht,!1)},ht&&Xt("c")),Bt("l",a("sasv.you"))]),f("div",{key:"bar",style:{position:"relative",flex:1,height:"2px",borderRadius:"2px",background:"rgba(var(--sb-ink), 0.08)",overflow:"hidden"}},[f("div",{key:"fill",style:{position:"absolute",insetInlineStart:0,top:0,bottom:0,width:dt?"100%":ht?"50%":"0%",background:ue,transition:"width .6s cubic-bezier(.4,0,.2,1)"}}),kr&&f("div",{key:"scan",style:{position:"absolute",top:0,bottom:0,width:"30%",background:"linear-gradient(90deg, transparent, rgba(var(--sb-green-rgb), 0.9), transparent)",animation:"svScan 1.1s ease-in-out infinite"}})]),f("div",{key:"peer",style:{display:"flex",alignItems:"center",gap:"9px",flex:"none"}},[Bt("l",a("sasv.peer")),f("span",{key:"r",style:tr(dt,ht)},dt&&Xt("c"))])]),M?f("div",{key:"opening",style:{animation:"svFade .35s ease .3s both"}},f("div",{style:{display:"flex",alignItems:"center",justifyContent:"center",gap:"10px",padding:"14px 0 4px",fontSize:"13.5px",fontWeight:600,color:"var(--sb-text-4)"}},[a("sasv.opening"),f("span",{key:"d",style:{display:"inline-flex",gap:"4px"}},[0,.15,.3].map((Pe,Ve)=>f("span",{key:Ve,style:{width:"4px",height:"4px",borderRadius:"50%",background:ue,animation:`svDot 1.2s ease-in-out ${Pe}s infinite`}})))])):f("div",{key:"btns"},[f("button",{key:"ok",onClick:yr,disabled:!er,style:{width:"100%",display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"14px",borderRadius:"13px",border:"none",fontFamily:"inherit",fontSize:"14.5px",fontWeight:700,transition:"background .25s, color .25s",background:ht?"rgba(var(--sb-green-rgb), 0.12)":er?ue:"rgba(var(--sb-ink), 0.05)",color:ht?E:er?"var(--sb-on-green-2)":"var(--sb-text-faint)",cursor:er?"pointer":"default"}},ht?a("sasv.waitingPeer"):a("verify.confirm")),f("button",{key:"no",onClick:dn,className:"sb-sas-mismatch",style:{display:"flex",alignItems:"center",justifyContent:"center",width:"100%",marginTop:"10px",padding:"8px",border:"none",background:"transparent",color:"var(--sb-text-7)",fontFamily:"inherit",fontSize:"13px",fontWeight:600,cursor:"pointer",transition:"color .15s"},onMouseEnter:Pe=>{Pe.currentTarget.style.color="var(--sb-red)"},onMouseLeave:Pe=>{Pe.currentTarget.style.color="var(--sb-text-7)"}},a("sasv.codesDiffer"))])])}else if(fn){let M=[a("handshake.step1"),a("handshake.step2"),a("handshake.step3")];Lt=f("div",{key:"gen",style:{animation:"sbUp .28s ease"}},[f("div",{key:"head",style:{display:"flex",alignItems:"center",gap:"13px",marginBottom:"22px"}},[f("div",{key:"sp",style:{width:"44px",height:"44px",flex:"none",display:"grid",placeItems:"center"}},De("fa-circle-notch",{color:ie,fontSize:"32px",animation:"sbSpin 1s linear infinite"})),f("div",{key:"tx"},[f("h2",{key:"t",style:{margin:0,fontSize:"20px",fontWeight:800,letterSpacing:"-0.4px",color:"var(--sb-text-1)"}},re?a("handshake.securingTitle"):a("handshake.answerTitle")),f("p",{key:"s",style:{margin:"3px 0 0",fontSize:"13px",color:"var(--sb-text-7)"}},a("handshake.securingDesc"))])]),f("div",{key:"steps",style:{display:"flex",flexDirection:"column",borderRadius:"13px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",overflow:"hidden"}},M.map((H,ae)=>{let Ue=Yt>ae,Ge=Yt===ae;return f("div",{key:ae,style:{display:"flex",alignItems:"center",gap:"12px",padding:"13px 15px",borderTop:ae?"1px solid rgba(var(--sb-ink), 0.05)":"none",transition:"background .3s",background:Ue?"rgba(var(--sb-green-rgb), 0.04)":"transparent"}},[f("div",{key:"d",style:{flex:"none",width:"20px",height:"20px",borderRadius:"50%",display:"grid",placeItems:"center",background:Ue?"rgba(var(--sb-green-rgb), 0.12)":Ge?"rgba(var(--sb-orange-rgb), 0.12)":"rgba(var(--sb-ink), 0.04)",border:`1px solid ${Ue?"rgba(var(--sb-green-rgb), 0.3)":Ge?"rgba(var(--sb-orange-rgb), 0.3)":"rgba(var(--sb-ink), 0.1)"}`,transition:"all .3s"}},Ue?De("fa-check",{color:ue,fontSize:"11px"}):f("span",{style:{width:"6px",height:"6px",borderRadius:"50%",background:Ge?ie:"var(--sb-text-faint)",animation:Ge?"sbBlink 1s ease-in-out infinite":"none"}})),f("span",{key:"l",style:{fontSize:"13.5px",color:Ue?"var(--sb-text-4)":Ge?"var(--sb-text-2)":"var(--sb-text-9)",transition:"color .3s"}},H)])}))])}else if(Vt||Nn)Lt=f("div",{key:"cred",style:{animation:"sbUp .3s ease"}},[Yn("cback"),f("h2",{key:"h",style:{margin:"0 0 8px",fontSize:"26px",fontWeight:800,letterSpacing:"-0.7px",color:"var(--sb-text-1)"}},re?a("handshake.shareTitle"):a("handshake.sendAnswerTitle")),f("p",{key:"p",style:{margin:"0 0 24px",fontSize:"14px",lineHeight:1.55,color:"var(--sb-text-7)"}},re?a("handshake.shareDesc"):a("handshake.sendAnswerDesc")),Ot,Vt&&f("div",{key:"offerextra"},[f("div",{key:"lbl",style:{fontSize:"13.5px",fontWeight:600,color:"var(--sb-text-3)",marginBottom:"10px"}},a("handshake.thenReceive")),f("textarea",{key:"ta",dir:"ltr",value:p,onChange:M=>{k(M.target.value),M.target.value.trim().length>0&&typeof ne=="function"&&ne()},rows:3,placeholder:a("handshake.pasteAnswerPlaceholder"),style:{display:"block",width:"100%",resize:"none",borderRadius:"14px",border:`1px solid ${Rt?"rgba(var(--sb-orange-rgb), 0.45)":"rgba(var(--sb-ink), 0.08)"}`,background:"var(--sb-surface)",outline:"none",color:"var(--sb-text-2)",fontFamily:_e,fontSize:"12.5px",lineHeight:1.5,padding:"13px 15px",marginBottom:"12px",transition:"border-color .15s"}}),f("div",{key:"btns",style:{display:"flex",gap:"10px"}},[f("button",{key:"scan",className:"sb-scan-btn",onClick:()=>P(!0),style:{flex:"none",display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"0 18px",height:"50px",borderRadius:"13px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"transparent",color:"var(--sb-text-2)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,cursor:"pointer"}},[f("svg",{key:"i",width:16,height:16,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":!0},f("path",{d:"M4 8V5a1 1 0 0 1 1-1h3M16 4h3a1 1 0 0 1 1 1v3M20 16v3a1 1 0 0 1-1 1h-3M8 20H5a1 1 0 0 1-1-1v-3M7 12h10"})),a("action.scan")]),f("button",{key:"est",onClick:r,disabled:!Rt,style:{flex:1,display:"flex",alignItems:"center",justifyContent:"center",gap:"9px",height:"50px",borderRadius:"13px",border:"none",background:Rt?ie:"rgba(var(--sb-ink), 0.05)",color:Rt?"var(--sb-on-accent)":"var(--sb-text-faint)",fontFamily:"inherit",fontSize:"14.5px",fontWeight:700,cursor:Rt?"pointer":"not-allowed",transition:"background .2s, color .2s"}},a("handshake.establish"))])]),Nn&&f("div",{key:"answerextra",style:{display:"flex",alignItems:"center",gap:"12px",padding:"4px 2px"}},[f("span",{key:"i",style:{flex:"none",width:"16px",height:"16px",borderRadius:"50%",border:"2px solid rgba(var(--sb-ink), 0.1)",borderTopColor:ie,animation:"sbSpin .9s linear infinite"}}),f("span",{key:"t",style:{fontSize:"13px",lineHeight:1.5,color:"var(--sb-text-7)"}},a("handshake.answerSentNote"))])]);else if(re)Lt=f("div",{key:"introC",style:{animation:"sbUp .28s ease"}},[f("h2",{key:"h",style:{margin:"0 0 6px",fontSize:"23px",fontWeight:800,letterSpacing:"-0.5px",color:"var(--sb-text-1)"}},a("intro.createTitle")),f("p",{key:"p",style:{margin:"0 0 22px",fontSize:"14px",lineHeight:1.55,color:"var(--sb-text-7)"}},a("intro.createDesc")),f("button",{key:"gen",className:"sb-gen-btn",onClick:()=>{pn(),Je.current&&Fe()},style:{width:"100%",display:"flex",alignItems:"center",justifyContent:"center",gap:"9px",padding:"15px",borderRadius:"13px",border:"none",background:ie,color:"var(--sb-on-accent)",fontFamily:"inherit",fontSize:"15px",fontWeight:700,cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)"}},[De("fa-bolt",{key:"i"}),a("intro.createCta")])]);else{let M=hn&&d!=="connecting";Lt=f("div",{key:"introJ",style:{animation:"sbUp .28s ease"}},[f("h2",{key:"h",style:{margin:"0 0 8px",fontSize:"26px",fontWeight:800,letterSpacing:"-0.7px",color:"var(--sb-text-1)"}},a("intro.joinTitle")),f("p",{key:"p",style:{margin:"0 0 24px",fontSize:"14px",lineHeight:1.55,color:"var(--sb-text-7)"}},a("intro.joinDesc")),f("div",{key:"card",style:{borderRadius:"16px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)",overflow:"hidden",marginBottom:"12px"}},[f("button",{key:"scan",className:"sb-qr-row",onClick:()=>{pn(),P(!0)},style:{width:"100%",display:"flex",alignItems:"center",gap:"14px",padding:"14px 16px",border:"none",background:"transparent",color:"inherit",fontFamily:"inherit",cursor:"pointer",textAlign:"start",transition:"background .15s"}},[f("span",{key:"ic",style:{flex:"none",width:"48px",height:"48px",borderRadius:"9px",display:"grid",placeItems:"center",background:"rgba(var(--sb-ink), 0.05)",border:"1px solid rgba(var(--sb-ink), 0.08)",color:"var(--sb-text-2)"}},f("svg",{width:22,height:22,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:2,strokeLinecap:"round",strokeLinejoin:"round","aria-hidden":!0},f("path",{d:"M4 8V5a1 1 0 0 1 1-1h3M16 4h3a1 1 0 0 1 1 1v3M20 16v3a1 1 0 0 1-1 1h-3M8 20H5a1 1 0 0 1-1-1v-3M7 12h10"}))),f("span",{key:"tx",style:{flex:1,minWidth:0}},[f("span",{key:"t",style:{display:"block",fontSize:"15px",fontWeight:700,color:"var(--sb-text-1)"}},a("intro.scanTitle")),f("span",{key:"s",style:{display:"block",fontSize:"12.5px",color:"var(--sb-text-7)",marginTop:"2px"}},a("intro.scanSubtitle"))]),De("fa-chevron-right",{color:"var(--sb-text-9)"})]),f("div",{key:"div",style:{height:"1px",background:"rgba(var(--sb-ink), 0.06)"}}),f("div",{key:"paste",style:{padding:"12px 16px 16px"}},[f("div",{key:"l",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-6)",marginBottom:"10px"}},a("intro.orPasteCode")),f("textarea",{key:"ta",dir:"ltr",value:v,onChange:H=>{S(H.target.value),H.target.value.trim().length>0&&typeof ne=="function"&&ne()},rows:3,placeholder:a("intro.pastePlaceholder"),style:{display:"block",width:"100%",resize:"none",borderRadius:"11px",border:`1px solid ${hn?"rgba(var(--sb-orange-rgb), 0.45)":"rgba(var(--sb-ink), 0.05)"}`,background:"var(--sb-bg)",outline:"none",color:"var(--sb-text-2)",fontFamily:_e,fontSize:"12.5px",lineHeight:1.5,padding:"11px 13px",transition:"border-color .15s"}})])]),f("button",{key:"connect",onClick:()=>{pn(),n()},disabled:!M,style:{width:"100%",display:"flex",alignItems:"center",justifyContent:"center",gap:"9px",height:"50px",borderRadius:"13px",border:"none",background:M?ie:"rgba(var(--sb-ink), 0.05)",color:M?"var(--sb-on-accent)":"var(--sb-text-faint)",fontFamily:"inherit",fontSize:"14.5px",fontWeight:700,cursor:M?"pointer":"not-allowed",transition:"background .2s, color .2s"}},d==="connecting"?a("intro.connecting"):a("intro.connect"))])}let Pn="1.0.5",mn=`https://github.com/SecureBitChat/securebit-desktop/releases/download/v${Pn}`,Ct={mac:{name:"macOS",format:".dmg \xB7 Apple Silicon & Intel",icon:"fab fa-apple",url:`${mn}/SecureBit.Chat_${Pn}_x64.dmg`},win:{name:"Windows",format:".exe \xB7 64-bit installer",icon:"fab fa-windows",url:`${mn}/SecureBit.Chat_${Pn}_x64-setup.exe`},linux:{name:"Linux",format:".AppImage",icon:"fab fa-linux",url:`${mn}/SecureBit.Chat_${Pn}_amd64.AppImage`}},yn=(()=>{let M=(navigator.userAgent||"")+" "+(navigator.platform||"");return/Mac|iPhone|iPad|iPod/i.test(M)&&!/Android/i.test(M)?"mac":/Win/i.test(M)?"win":/Linux/i.test(M)&&!/Android/i.test(M)?"linux":"win"})(),Qn=["mac","win","linux"].filter(M=>M!==yn),xr=M=>{try{window.open(M,"_blank","noopener")}catch{}},Hr=ze&&f("div",{key:"platmenu",className:"sb-platforms-menu",style:{position:"absolute",insetInlineStart:0,bottom:"calc(100% + 10px)",width:"344px",maxWidth:"100%",borderRadius:"16px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"var(--sb-surface)",boxShadow:"0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))",overflow:"hidden",zIndex:25,animation:"sbUp .2s ease"}},[f("div",{key:"mh",style:{display:"flex",alignItems:"center",gap:"10px",padding:"14px 16px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[f("div",{key:"t",style:{flex:1,lineHeight:1.2}},[f("div",{key:"a",style:{fontSize:"14px",fontWeight:800,color:"var(--sb-text-1)"}},a("dl.title")),f("div",{key:"b",style:{fontSize:"11.5px",color:"var(--sb-text-8)"}},a("dl.free"))]),f("span",{key:"pill",style:{fontFamily:_e,fontSize:"10px",fontWeight:600,color:E,padding:"3px 8px",borderRadius:"6px",background:"rgba(var(--sb-green-rgb), 0.1)",border:"1px solid rgba(var(--sb-green-rgb), 0.22)"}},a("chat.onWeb"))]),f("div",{key:"rec",style:{padding:"12px 12px 6px"}},f("button",{key:"b",onClick:()=>xr(Ct[yn].url),style:{width:"100%",display:"flex",alignItems:"center",gap:"12px",padding:"13px 14px",borderRadius:"12px",border:"1px solid rgba(var(--sb-orange-rgb), 0.4)",background:"rgba(var(--sb-orange-rgb), 0.08)",color:"inherit",fontFamily:"inherit",cursor:"pointer",textAlign:"start"}},[f("span",{key:"ic",style:{flex:"none",display:"grid",placeItems:"center",width:"38px",height:"38px",borderRadius:"11px",background:"rgba(var(--sb-orange-rgb), 0.14)",border:"1px solid rgba(var(--sb-orange-rgb), 0.3)",color:un}},f("i",{className:Ct[yn].icon,style:{fontSize:"17px"}})),f("span",{key:"tx",style:{flex:1,minWidth:0}},[f("span",{key:"n",style:{display:"block",fontSize:"13.5px",fontWeight:700,color:"var(--sb-text-1)"}},Ct[yn].name),f("span",{key:"f",style:{display:"block",fontSize:"11px",color:"var(--sb-orange-3)",marginTop:"1px"}},`Recommended for this device \xB7 ${Ct[yn].format}`)]),De("fa-download",{color:ie})])),f("div",{key:"others",style:{padding:"0 12px 8px",display:"flex",flexDirection:"column",gap:"2px"}},Qn.map(M=>f("button",{key:M,onClick:()=>xr(Ct[M].url),style:{width:"100%",display:"flex",alignItems:"center",gap:"12px",padding:"11px 14px",borderRadius:"11px",border:"none",background:"transparent",color:"inherit",fontFamily:"inherit",cursor:"pointer",textAlign:"start"}},[f("span",{key:"ic",style:{flex:"none",display:"grid",placeItems:"center",width:"34px",height:"34px",borderRadius:"10px",background:"rgba(var(--sb-ink), 0.04)",border:"1px solid rgba(var(--sb-ink), 0.08)",color:"var(--sb-text-4)"}},f("i",{className:Ct[M].icon,style:{fontSize:"15px"}})),f("span",{key:"tx",style:{flex:1,minWidth:0}},[f("span",{key:"n",style:{display:"block",fontSize:"13px",fontWeight:600,color:"var(--sb-text-2)"}},Ct[M].name),f("span",{key:"f",style:{display:"block",fontSize:"11px",color:"var(--sb-text-8)",marginTop:"1px"}},Ct[M].format)]),De("fa-download",{color:"var(--sb-text-7)"})]))),f("div",{key:"soon",style:{display:"flex",alignItems:"center",gap:"9px",padding:"12px 16px",borderTop:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(var(--sb-ink), 0.015)"}},[De("fa-clock",{key:"i",color:"var(--sb-text-9)"}),f("span",{key:"t",style:{fontSize:"11.5px",lineHeight:1.45,color:"var(--sb-text-8)"}},a("dl.soon"))])]),On=f("div",{key:"footer",className:"sb-conn-footer",style:{position:"relative",marginTop:"30px",paddingTop:"18px",borderTop:"1px solid rgba(var(--sb-ink), 0.06)",display:"flex",alignItems:"center",justifyContent:"space-between",gap:"12px",flexWrap:"wrap"}},[f("button",{key:"dl",onClick:()=>Tn(M=>!M),style:{display:"inline-flex",alignItems:"center",gap:"9px",paddingBlock:"8px",paddingInlineStart:"9px",paddingInlineEnd:"13px",borderRadius:"10px",border:`1px solid ${ze?"rgba(var(--sb-orange-rgb), 0.4)":"rgba(var(--sb-ink), 0.08)"}`,background:ze?"rgba(var(--sb-orange-rgb), 0.06)":"rgba(var(--sb-ink), 0.02)",color:"inherit",fontFamily:"inherit",cursor:"pointer",transition:"all .15s"}},[De("fa-download",{key:"i",color:ie}),f("span",{key:"t",style:{fontSize:"12.5px",fontWeight:700,color:"var(--sb-text-2)"}},a("action.downloadDesktop")),De("fa-chevron-down",{key:"c",color:"var(--sb-text-9)",style:{fontSize:"11px",transform:ze?"rotate(180deg)":"rotate(0deg)",transition:"transform .2s"}})]),f("button",{key:"settings",className:"sb-link",onClick:()=>wt&&wt(!0),style:{display:"inline-flex",alignItems:"center",gap:"7px",background:"none",border:"none",color:"var(--sb-text-7)",fontFamily:"inherit",fontSize:"12.5px",fontWeight:600,cursor:"pointer"}},[De("fa-sliders-h",{key:"i"}),a("action.advancedSettings")]),Hr]),bn=ot&&typeof window<"u"&&window.IceServerSettings?f(window.IceServerSettings,{key:"ice-settings",isOpen:!0,embedded:!0,onClose:()=>wt(!1),initial:{useCustom:Array.isArray(Re)&&Re.length>0,serversText:$t,privacyMode:at?"relay-only":"standard",persisted:kt},hasSaved:kt,onApply:yt,onForget:te}):null,vr=f("div",{key:"right",style:Ne?{flex:1,minWidth:0,width:"100%",position:"relative",overflow:"hidden",display:"flex",flexDirection:"column",height:"100%"}:{flex:"0.95 1 460px",minWidth:"min(100%, 320px)",position:"relative",overflow:"hidden",display:"flex",flexDirection:"column",height:"100vh"}},[f("div",{key:"scroll",className:"custom-scrollbar",style:{flex:1,overflowY:"auto",display:"flex",flexDirection:"column",padding:"42px 44px"}},f("div",{style:{maxWidth:"430px",width:"100%",margin:"auto"}},[f("div",{key:"kicker",style:{fontFamily:_e,fontSize:"11px",fontWeight:600,color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"1px",marginBottom:"10px"}},gr),qn,Lt,On])),bn]),Xn=Ht&&ee&&f("div",{key:"qrmodal",onClick:()=>xt(!1),style:{position:"fixed",inset:0,zIndex:50,display:"flex",alignItems:"center",justifyContent:"center",padding:"32px",background:"rgba(var(--sb-scrim-rgb), 0.82)",backdropFilter:"blur(10px)",animation:"sbUp .2s ease"}},f("div",{onClick:M=>M.stopPropagation(),style:{width:"100%",maxWidth:"460px",borderRadius:"22px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"var(--sb-bg)",boxShadow:"0 30px 90px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))",overflow:"hidden"}},[f("div",{key:"head",style:{display:"flex",alignItems:"center",gap:"11px",padding:"18px 20px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[f("span",{key:"d",style:{width:"9px",height:"9px",borderRadius:"50%",background:hr}}),f("div",{key:"tx",style:{flex:1,lineHeight:1.2}},[f("div",{key:"t",style:{fontSize:"15.5px",fontWeight:800,color:"var(--sb-text-1)"}},re?a("handshake.shareTitle"):a("handshake.sendAnswerTitle")),f("div",{key:"s",style:{fontSize:"12px",color:"var(--sb-text-8)"}},`${re?"offer":"answer"} \xB7 one-time`)]),f("button",{key:"x",onClick:()=>xt(!1),style:{width:"32px",height:"32px",display:"grid",placeItems:"center",borderRadius:"9px",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-6)",cursor:"pointer"}},De("fa-times"))]),f("div",{key:"body",style:{padding:"22px 24px 24px"}},[f("div",{key:"qr",style:{position:"relative",width:"100%",aspectRatio:"1",borderRadius:"18px",overflow:"hidden",background:"#fff",padding:"18px",display:"grid",placeItems:"center"}},f("img",{src:ee,alt:a("chatHdr.qrCode"),style:{width:"100%",height:"100%",objectFit:"contain",display:"block"}})),f("div",{key:"ctrls",style:{display:"flex",flexDirection:"column",alignItems:"center",gap:"12px",marginTop:"18px"}},[(W||0)>=1&&f("div",{key:"frame",style:{display:"flex",alignItems:"center",gap:"9px"}},[f("span",{key:"l",style:{fontFamily:_e,fontSize:"12px",fontWeight:600,color:"var(--sb-text-6)"}},`Frame ${Math.max(1,se||1)} / ${W||1}`),f("div",{key:"dots",style:{display:"flex",gap:"5px"}},Array.from({length:W||1},(M,H)=>f("span",{key:H,style:{width:"7px",height:"7px",borderRadius:"50%",background:H+1===(se||1)?hr:"rgba(var(--sb-ink), 0.14)",transition:"background .25s"}})))]),(W||0)>1&&f("div",{key:"nav",style:{display:"flex",alignItems:"center",gap:"6px"}},[f("button",{key:"prev",onClick:$,style:{width:"40px",height:"36px",display:"grid",placeItems:"center",borderRadius:"10px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.04)",color:"var(--sb-text-4)",cursor:"pointer"}},De("fa-chevron-left")),f("button",{key:"auto",onClick:me,style:{display:"inline-flex",alignItems:"center",gap:"7px",padding:"9px 18px",borderRadius:"10px",border:`1px solid ${ce?"rgba(var(--sb-ink), 0.1)":"rgba(var(--sb-orange-rgb), 0.45)"}`,background:ce?"rgba(var(--sb-ink), 0.04)":"rgba(var(--sb-orange-rgb), 0.08)",color:ce?"var(--sb-text-6)":un,fontFamily:"inherit",fontSize:"13px",fontWeight:600,cursor:"pointer"}},ce?"Manual":"Auto"),f("button",{key:"next",onClick:L,style:{width:"40px",height:"36px",display:"grid",placeItems:"center",borderRadius:"10px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.04)",color:"var(--sb-text-4)",cursor:"pointer"}},De("fa-chevron-right"))]),f("p",{key:"hint",style:{margin:"2px 0 0",textAlign:"center",fontSize:"12px",lineHeight:1.5,color:"var(--sb-text-9)"}},(W||0)>1?a("handshake.qrHintFrames",{frames:W}):a("handshake.qrHint"))])])])),Jn=f("div",{key:"hero",style:{display:"flex",flexWrap:"wrap",minHeight:"100vh",width:"100%",background:"var(--sb-bg)",color:"var(--sb-text-2)"}},[Qt,vr]),We=Ft&&f(UniqueFeatureSlider,{key:"unique-features-slider"}),Zn=Ft&&f(BecomePartner,{key:"become-partner"}),wr=Ft&&f(Roadmap,{key:"roadmap"}),Wr=Ft&&f(DonateCrypto,{key:"donate-crypto"}),Ln=Ft&&f(CommunityCTA,{key:"community-cta"}),Vr=f("style",{key:"kf",dangerouslySetInnerHTML:{__html:'@keyframes sbFlowR{0%{left:4%;opacity:0}12%{opacity:1}88%{opacity:1}100%{left:96%;opacity:0}}@keyframes sbFlowL{0%{left:96%;opacity:0}12%{opacity:1}88%{opacity:1}100%{left:4%;opacity:0}}@keyframes sbPulse{0%,100%{transform:translate(-50%,-50%) scale(1);opacity:.5}50%{transform:translate(-50%,-50%) scale(1.5);opacity:0}}@keyframes sbSpin{to{transform:rotate(360deg)}}@keyframes sbUp{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}@keyframes sbNode{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-green-rgb), 0)}50%{box-shadow:0 0 0 6px rgba(var(--sb-green-rgb), .06)}}@keyframes sbScan{0%{top:8%}100%{top:88%}}@keyframes sbBlink{0%,100%{opacity:1}50%{opacity:.35}}@keyframes otpPop{0%{transform:translateY(6px) scale(.9);opacity:0}60%{transform:translateY(-1px) scale(1.04);opacity:1}100%{transform:none;opacity:1}}@keyframes otpOk{0%{transform:none}45%{transform:translateY(-4px)}100%{transform:none;background:rgba(var(--sb-green-rgb),.07);border-color:rgba(var(--sb-green-rgb),.55);color:var(--sb-green)}}@keyframes otpShake{0%,100%{transform:translateX(0)}20%{transform:translateX(-7px)}40%{transform:translateX(6px)}60%{transform:translateX(-4px)}80%{transform:translateX(2px)}}@keyframes otpCaret{0%,100%{opacity:1}50%{opacity:0}}@keyframes svDot{0%,80%,100%{opacity:.25;transform:translateY(0)}40%{opacity:1;transform:translateY(-3px)}}@keyframes svDraw{from{stroke-dashoffset:24}to{stroke-dashoffset:0}}@keyframes svScan{from{left:-30%}to{left:100%}}@keyframes svFade{from{opacity:0;transform:translateY(4px)}to{opacity:1;transform:none}}@keyframes sbTrav{0%{offset-distance:0%;opacity:0}15%{opacity:1}80%{opacity:1}100%{offset-distance:100%;opacity:0}}@keyframes sbRing1{0%,24%{r:5;opacity:0}26%{opacity:.8}34%{r:22;opacity:0}100%{r:22;opacity:0}}@keyframes sbRing2{0%,54%{r:5;opacity:0}56%{opacity:.8}64%{r:22;opacity:0}100%{r:22;opacity:0}}@keyframes sbIn1{0%,24%{opacity:0}27%{opacity:1}100%{opacity:1}}@keyframes sbIn2{0%,54%{opacity:0}57%{opacity:1}100%{opacity:1}}@keyframes sbRow0{0%,4%{opacity:0;transform:translateY(4px)}8%{opacity:1;transform:none}100%{opacity:1;transform:none}}@keyframes sbRow1{0%,25%{opacity:0;transform:translateY(4px)}29%{opacity:1;transform:none}100%{opacity:1;transform:none}}@keyframes sbRow2{0%,55%{opacity:0;transform:translateY(4px)}59%{opacity:1;transform:none}100%{opacity:1;transform:none}}@media (prefers-reduced-motion: reduce){.sb-start [style*="sbTrav"],.sb-start [style*="sbRing"]{animation:none!important;opacity:0!important}.sb-start [style*="sbIn1"],.sb-start [style*="sbIn2"],.sb-start [style*="sbRow0"],.sb-start [style*="sbRow1"],.sb-start [style*="sbRow2"]{animation:none!important;opacity:1!important;transform:none!important}}'}});return Ne?f("div",{className:"sb-start",style:{flex:1,minHeight:0,width:"100%",display:"flex",flexDirection:"column",background:"var(--sb-bg)",color:"var(--sb-text-2)"}},[Vr,vr,Xn]):f("div",{className:"sb-start",style:{width:"100%"}},[Vr,Jn,We,Zn,wr,Wr,Ln,Xn])};function ec(t){let e=!1;try{e=new URLSearchParams(window.location.search).get("vvdebug")==="1"}catch{return null}if(!e)return null;let n=document.createElement("div");n.setAttribute("data-sb-vvdebug",""),n.style.cssText="position:fixed;top:0;left:0;z-index:2147483647;max-width:100vw;padding:6px 8px;font:600 10.5px/1.45 ui-monospace,SFMono-Regular,Menlo,monospace;white-space:pre;color:#fff;background:#000;pointer-events:none;",document.body.appendChild(n);let r=(()=>{let d=document.querySelector('script[src*="dist/app.js"]');return d&&String(d.getAttribute("src")||"").split("?v=")[1]||"?"})(),i=()=>{let d=document.querySelector(".sb-app-shell"),h=d?getComputedStyle(d):null,m=d?d.getBoundingClientRect():null,v=getComputedStyle(document.documentElement);n.textContent=["build "+r,"innerH "+window.innerHeight+"  scrollY "+Math.round(window.scrollY),"vv h "+(t?Math.round(t.height):"\u2014")+"  top "+(t?Math.round(t.offsetTop):"\u2014")+"  scale "+(t?t.scale.toFixed(2):"\u2014"),"var vh "+v.getPropertyValue("--sb-vh").trim()+"  vvtop "+v.getPropertyValue("--sb-vv-top").trim(),"shell "+(d?h.position+" h"+Math.round(m.height)+" y"+Math.round(m.top):"ABSENT")].join(`
+`),n.style.transform="translate3d(0,"+(t?Math.round(t.offsetTop):0)+"px,0)"};i();let c=setInterval(i,200);return()=>{clearInterval(c),n.remove()}}var tc=t=>()=>{if(t&&t.current){let e=()=>{t.current&&t.current.scrollTo({top:t.current.scrollHeight,behavior:Ur()})};e(),setTimeout(e,50),setTimeout(e,150),setTimeout(e,300),requestAnimationFrame(()=>{setTimeout(e,100)})}},ia=async t=>{let e=null;try{t&&window.EnhancedSecureCryptoUtils&&(e=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(t))}catch{}if(!e){alert(`Security verification in progress\u2026
+Please wait for real-time cryptographic verification to complete.`);return}let n="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",r=z=>String(z).replace(/[&<>"]/g,Q=>({"&":"&amp;","<":"&lt;",">":"&gt;",'"':"&quot;"})[Q]),i=e.color==="orange"?"var(--sb-orange-solid)":e.color==="yellow"?"var(--sb-yellow-solid)":e.color==="red"?"var(--sb-red-solid)":"var(--sb-green-solid)",c=e.color==="orange"?"var(--sb-orange)":e.color==="yellow"?"var(--sb-yellow)":e.color==="red"?"var(--sb-red)":"var(--sb-green)",d=e.color==="orange"?"var(--sb-orange-rgb)":e.color==="yellow"?"var(--sb-yellow-rgb)":e.color==="red"?"var(--sb-red-rgb)":"var(--sb-green-rgb)",h=Math.max(0,Math.min(100,Math.round(e.score||0))),m=2*Math.PI*56,v=`${(m*Math.min(1,h/100)).toFixed(1)} ${m.toFixed(1)}`,S=String(e.level||"SECURE").toUpperCase(),p=e.isRealData!==!1,k=e.verificationResults?Object.entries(e.verificationResults):[],y=Number.isFinite(e.passedChecks)?e.passedChecks:k.filter(([,z])=>z&&z.passed).length,I=Number.isFinite(e.totalChecks)?e.totalChecks:k.length,B=new Date(e.timestamp||Date.now()).toLocaleTimeString([],{hour:"2-digit",minute:"2-digit",second:"2-digit",hour12:!1}),D=z=>{let Q=a(`secTest.${z}`);return Q===`secTest.${z}`?le(z):Q},le=z=>{let Q=String(z).replace(/^verify/i,"").replace(/([a-z0-9])([A-Z])/g,"$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g,"$1 $2").trim();return Q=Q.replace(/\b(ecdh|ecdsa|aes|gcm|hmac|pfs|sas|mitm|asn|dtls|hkdf|spki|oid|p384)\b/gi,X=>X.toUpperCase()),Q.charAt(0).toUpperCase()+Q.slice(1)},ee='<svg width="17" height="17" viewBox="0 0 24 24" fill="none" stroke="var(--sb-green-solid)" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round"><path d="M5 13l4 4 10-11"/></svg>',ge='<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="var(--sb-red-solid)" stroke-width="2.4" stroke-linecap="round" stroke-linejoin="round"><path d="M18 6L6 18M6 6l12 12"/></svg>',we=k.map(([z,Q],X)=>{let W=!!(Q&&Q.passed),se=Q&&Q.details||(W?a("sec.testPassed"):a("sec.testFailed")),ce=a(`secDetail.${se}`),me=ce===`secDetail.${se}`?se:ce,L=W?"var(--sb-surface)":"var(--sb-bg)",$=W?"rgba(var(--sb-green-rgb), 0.16)":"rgba(var(--sb-red-rgb), 0.18)",ne=W?"rgba(var(--sb-green-rgb), 0.12)":"rgba(var(--sb-red-rgb), 0.1)",Me=W?"rgba(var(--sb-green-rgb), 0.26)":"rgba(var(--sb-red-rgb), 0.24)",q=W?"var(--sb-text-1)":"var(--sb-text-4)";return`<div style="display:flex; align-items:flex-start; gap:13px; padding:16px 18px; border-radius:14px; background:${L}; border:1px solid ${$}; animation:svIn .3s cubic-bezier(.2,.7,.3,1) both; animation-delay:${(X*.04).toFixed(2)}s;">
+                        <span style="flex:none; width:34px; height:34px; border-radius:9px; display:grid; place-items:center; background:${ne}; border:1px solid ${Me};">${W?ee:ge}</span>
                         <div style="flex:1; min-width:0;">
-                            <div style="font-size:14.5px; font-weight:700; letter-spacing:-0.2px; color:${q}; margin-bottom:3px;">${r(N(O))}</div>
-                            <div style="font-family:${n}; font-size:11.5px; line-height:1.45; color:var(--sb-text-7);">${r(ue)}</div>
+                            <div style="font-size:14.5px; font-weight:700; letter-spacing:-0.2px; color:${q}; margin-bottom:3px;">${r(D(z))}</div>
+                            <div style="font-family:${n}; font-size:11.5px; line-height:1.45; color:var(--sb-text-7);">${r(me)}</div>
                         </div>
                     </div>`}).join(""),C=document.createElement("div");C.id="sb-security-report",C.style.cssText="position:fixed; inset:0; z-index:10000; display:flex; align-items:center; justify-content:center; padding:24px; background:rgba(var(--sb-scrim-rgb), 0.62); backdrop-filter:blur(4px); -webkit-backdrop-filter:blur(4px); font-family:'Manrope',system-ui,-apple-system,sans-serif; overflow:auto;",C.innerHTML=`
                   <style>@keyframes svIn{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}@keyframes svPulse{0%,100%{opacity:1}50%{opacity:.4}}</style>
@@ -42,10 +42,10 @@ Please wait for real-time cryptographic verification to complete.`);return}let n
                         Re-run
                       </button>
                     </div>
-                    <div style="display:grid; grid-template-columns:repeat(auto-fit, minmax(248px, 1fr)); gap:12px;">${ve}</div>
+                    <div style="display:grid; grid-template-columns:repeat(auto-fit, minmax(248px, 1fr)); gap:12px;">${we}</div>
                     <div style="display:flex; align-items:center; gap:12px; margin-top:18px; padding:16px 20px; border-radius:14px; background:rgba(${d},0.06); border:1px solid rgba(${d},0.18);">
                       <svg width="20" height="20" viewBox="0 0 24 24" fill="none" stroke="${i}" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round" style="flex:none;"><path d="M12 3l8 4v5c0 4.5-3.2 7.8-8 9-4.8-1.2-8-4.5-8-9V7l8-4z"/><path d="M9.2 12.2l2 2 3.6-3.8"/></svg>
                       <span style="font-size:14px; font-weight:600; color:var(--sb-text-2);">${p?a("sec.realTimeNote"):a("sec.simulatedWarning")}</span>
                     </div>
-                  </div>`;let F=O=>{O.key==="Escape"&&V()},V=()=>{C.parentNode&&C.remove(),document.removeEventListener("keydown",F)};C.querySelector(".sv-close").addEventListener("click",V),C.addEventListener("click",O=>{O.target===C&&V()}),document.addEventListener("keydown",F);let P=C.querySelector(".sv-rerun");P.addEventListener("mouseenter",()=>{P.style.borderColor="rgba(var(--sb-orange-rgb), 0.45)",P.style.color="var(--sb-orange)"}),P.addEventListener("mouseleave",()=>{P.style.borderColor="rgba(var(--sb-ink), 0.1)",P.style.color="var(--sb-text-4)"}),P.addEventListener("click",()=>{V(),ta(t)}),document.body.appendChild(C)},ec=({status:t,onDisconnect:e,webrtcManager:n,title:r,isOffline:i,peerPresence:c,onRenameTitle:d})=>{let h="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",[m,v]=React.useState(!1),[S,p]=React.useState(null),[k,y]=React.useState(!1),[I,B]=React.useState("");React.useEffect(()=>{let q=!0,ye=async()=>{try{if(!n)return;let Re=null;typeof n.getRealSecurityLevel=="function"?Re=await n.getRealSecurityLevel():typeof n.calculateAndReportSecurityLevel=="function"?Re=await n.calculateAndReportSecurityLevel():window.EnhancedSecureCryptoUtils&&(Re=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(n)),q&&Re&&Re.isRealData!==!1&&p(Re)}catch{}};ye();let Be=Re=>{q&&Re.detail&&Re.detail.securityData&&p(Re.detail.securityData)};document.addEventListener("real-security-calculated",Be);let rt=setInterval(ye,15e3);return()=>{q=!1,clearInterval(rt),document.removeEventListener("real-security-calculated",Be)}},[n]);let N=t==="connected"||t==="verified",ae=t==="disconnected"||t==="peer_disconnected",te=N&&!i,pe=i||ae?"var(--sb-red-solid)":N?"var(--sb-green-solid)":"var(--sb-yellow-solid)",ve=i?a("chat.offline"):N?a("status.connected"):t==="peer_disconnected"?a("status.peerDisconnected"):t==="disconnected"?a("chat.disconnected"):a("status.connecting"),C=i||ae?"0 0 0 3px rgba(var(--sb-red-rgb), 0.16)":N?"0 0 0 3px rgba(var(--sb-green-rgb), 0.16)":"0 0 0 3px rgba(var(--sb-yellow-rgb), 0.16)",F=N&&!i?Jr[c]||"var(--sb-green-solid)":pe,V=N&&!i&&c&&Zr[c]||null,P=()=>{B(r||""),y(!0)},O=()=>{typeof d=="function"&&d(I),y(!1)},$=q=>{q.key==="Enter"?(q.preventDefault(),O()):q.key==="Escape"&&y(!1)},Q=S&&Number.isFinite(S.passedChecks)?S.passedChecks:null,H=S&&Number.isFinite(S.totalChecks)?S.totalChecks:null,re=q=>{if(!q)return q;let ye=a(`secLevel.${q}`);return ye===`secLevel.${q}`?q:ye},ie=Q!=null&&H?Q+"/"+H:S?S.score+"%":"\u2014",ue=S?S.color==="green"?"var(--sb-green)":S.color==="orange"?"var(--sb-orange)":S.color==="yellow"?"var(--sb-yellow)":"var(--sb-red)":"var(--sb-green)",L=React.createElement("div",{key:"sec",title:a("sas.runVerification"),onClick:()=>ta(n),className:"sb-secpill",style:{display:"flex",alignItems:"center",gap:"9px",padding:"7px 13px",borderRadius:"9px",border:"1px solid "+(m?"rgba(var(--sb-ink), 0.16)":"rgba(var(--sb-ink), 0.07)"),background:m?"rgba(var(--sb-ink), 0.05)":"rgba(var(--sb-ink), 0.02)",cursor:"pointer",fontFamily:"inherit",transition:"all .15s"}},[React.createElement("i",{key:"i",className:"fas fa-shield-halved",style:{color:ue,fontSize:"13px"}}),React.createElement("span",{key:"l",className:"sb-sec-label",style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-2)"}},S?re(S.level)||a("chatHdr.secure"):a("chatHdr.secure")),React.createElement("span",{key:"d",className:"sb-sec-div",style:{width:"1px",height:"13px",background:"rgba(var(--sb-ink), 0.12)"}}),React.createElement("span",{key:"s",className:"sb-sec-score",style:{fontFamily:h,fontSize:"11.5px",fontWeight:500,color:"var(--sb-text-7)"}},ie),React.createElement("button",{key:"c",type:"button",title:a("sec.panelTitle"),onClick:q=>{q.stopPropagation(),v(ye=>!ye)},style:{background:"none",border:"none",padding:0,margin:0,cursor:"pointer",display:"grid",placeItems:"center"}},React.createElement("i",{className:"fas fa-chevron-down",style:{color:"var(--sb-text-9)",fontSize:"11px",transform:m?"rotate(180deg)":"rotate(0deg)",transition:"transform .2s"}}))]),j=React.createElement("style",{key:"hdr-css",dangerouslySetInnerHTML:{__html:".sb-call-btn:not(.sb-call-off):hover{border-color:rgba(var(--sb-green-rgb), 0.45) !important;color:var(--sb-green) !important;background:rgba(var(--sb-green-rgb), 0.07) !important;}@media (max-width:768px){.sb-chat-header{padding-inline-start:58px !important;gap:8px !important;}.sb-chat-header .sb-secpill{display:none !important;}.sb-chat-header .sb-conn-text{display:none !important;}.sb-chat-header .sb-conn{padding:9px !important;}.sb-chat-header .sb-hdr-sub{display:none !important;}.sb-chat-header .sb-disconnect{width:40px !important;height:40px !important;padding:0 !important;gap:0 !important;justify-content:center !important;border-radius:9px !important;color:var(--sb-red) !important;border-color:rgba(var(--sb-red-rgb), 0.28) !important;}.sb-chat-header .sb-disconnect .sb-hide-sm{display:none !important;}}@media (max-width:600px){.sb-chips{flex-wrap:nowrap !important;justify-content:flex-start !important;overflow-x:auto;-webkit-overflow-scrolling:touch;scrollbar-width:none;}.sb-chips::-webkit-scrollbar{display:none;}.sb-chips>*{flex:0 0 auto !important;}.sb-chips .sb-chips-right{flex-wrap:nowrap !important;}.sb-chips .sb-chip{white-space:nowrap;}}@media (max-width:480px){.sb-chat-header{padding-inline-end:12px !important;}}"}}),ne=React.createElement("header",{key:"hdr",className:"sb-chat-header",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"space-between",gap:"24px",padding:"var(--sb-safe-top, 0px) 20px var(--sb-bar-extra, 0px)",minHeight:"calc(var(--sb-bar-h, 64px) + var(--sb-safe-top, 0px) + var(--sb-bar-extra, 0px))",boxSizing:"border-box",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(var(--sb-bg-rgb), 0.72)",backdropFilter:"blur(14px)",WebkitBackdropFilter:"blur(14px)"}},[j,React.createElement("div",{key:"left",style:{display:"flex",alignItems:"center",gap:"12px",minWidth:0}},[React.createElement("div",{key:"avatar",style:{position:"relative",flex:"none",width:"36px",height:"36px",borderRadius:"10px",display:"grid",placeItems:"center",background:"rgba(var(--sb-ink), 0.05)",border:"1px solid rgba(var(--sb-ink), 0.09)",fontSize:"13px",fontWeight:700,letterSpacing:"-0.3px",color:"var(--sb-text-2)"}},[pr(r||a("chatHdr.chat")),React.createElement("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:F,border:"2px solid var(--sb-bg)"}})]),k?React.createElement("div",{key:"edit",style:{display:"flex",flexDirection:"column",gap:"4px",minWidth:0}},[React.createElement("div",{key:"row",style:{display:"flex",alignItems:"center",gap:"6px"}},[React.createElement("input",{key:"in",autoFocus:!0,value:I,maxLength:32,placeholder:a("chat.nameThis"),onChange:q=>B(q.target.value),onKeyDown:$,onBlur:O,style:{width:"210px",padding:"5px 10px",borderRadius:"8px",border:"1px solid rgba(var(--sb-orange-rgb), 0.55)",background:"var(--sb-bg)",color:"var(--sb-text-1)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,outline:"none"}}),React.createElement("button",{key:"ok",onMouseDown:q=>q.preventDefault(),onClick:O,title:a("chatHdr.save"),style:{flex:"none",width:"28px",height:"28px",borderRadius:"8px",display:"grid",placeItems:"center",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",cursor:"pointer"}},React.createElement("i",{className:"fas fa-check",style:{fontSize:"12px"}}))]),React.createElement("div",{key:"hint",style:{fontSize:"11px",color:"var(--sb-text-faint)"}},a("chat.localLabel"))]):React.createElement("div",{key:"txt",style:{lineHeight:1.2,minWidth:0}},[React.createElement("div",{key:"r1",style:{display:"flex",alignItems:"center",gap:"7px"}},[React.createElement("span",{key:"n",style:{fontSize:"15px",fontWeight:800,letterSpacing:"-0.3px",color:"var(--sb-text-1)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},r||a("chat.secureChat")),React.createElement("button",{key:"edit",className:"sb-rename-btn",onClick:P,title:a("chat.rename"),style:{flex:"none",width:"24px",height:"24px",borderRadius:"7px",display:"grid",placeItems:"center",border:"none",background:"transparent",color:"var(--sb-text-faint)",cursor:"pointer"}},React.createElement("i",{className:"fas fa-pen",style:{fontSize:"11px"}}))]),React.createElement("div",{key:"r2",className:"sb-hdr-sub",style:{fontSize:"11px",color:"var(--sb-text-9)",fontWeight:500,whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},i?a("chat.noNetwork"):t==="reconnecting"?a("flow.restoring"):V||(N?a("chatHdr.p2pSub"):t==="peer_disconnected"?a("status.peerDisconnected"):t==="disconnected"?a("chat.disconnected"):a("status.connecting")))])]),L,React.createElement("div",{key:"right",className:"sb-hdr-right",style:{display:"flex",alignItems:"center",gap:"9px"}},[...(()=>{let q=te&&n&&n.isVerified===!0,ye=Qe=>{if(!(!q||!n))try{let st=n.startCall(Qe);st&&st.catch&&st.catch(()=>{})}catch{}},Be={width:"40px",height:"40px",borderRadius:"9px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"rgba(var(--sb-ink), 0.02)",color:q?"var(--sb-text-6)":"var(--sb-surface-5)",cursor:q?"pointer":"not-allowed",transition:"all .15s"};return[React.createElement("button",{key:"call-audio",className:q?"sb-call-btn":"sb-call-btn sb-call-off",disabled:!q,onClick:()=>ye(!1),title:q?a("chat.startVoiceCall"):a("chat.verifyForCalls"),style:Be,dangerouslySetInnerHTML:{__html:'<svg width="17" height="17" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z"/></svg>'}}),React.createElement("button",{key:"call-video",className:q?"sb-call-btn":"sb-call-btn sb-call-off",disabled:!q,onClick:()=>ye(!0),title:q?a("chat.startVideoCall"):a("chat.verifyForCalls"),style:Be,dangerouslySetInnerHTML:{__html:'<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M23 7l-7 5 7 5V7z"/><rect x="1" y="5" width="15" height="14" rx="2.5"/></svg>'}})]})(),React.createElement("div",{key:"conn",className:"sb-conn",style:{display:"flex",alignItems:"center",gap:"8px",padding:"8px 13px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)"}},[React.createElement("span",{key:"dot",style:{flex:"none",width:"7px",height:"7px",borderRadius:"50%",background:pe,boxShadow:C}}),React.createElement("span",{key:"t",className:"sb-conn-text",style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-4)"}},ve)]),React.createElement("button",{key:"dc",onClick:e,className:"sb-disconnect",style:{display:"flex",alignItems:"center",gap:"7px",padding:"8px 14px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"transparent",color:"var(--sb-text-6)",fontFamily:"inherit",fontSize:"13px",fontWeight:600,cursor:"pointer",transition:"all .15s"}},[React.createElement("i",{key:"i",className:"fas fa-power-off",style:{fontSize:"12px"}}),React.createElement("span",{key:"t",className:"sb-hide-sm"},a("hdr.disconnect"))])])]),Te=m&&React.createElement("div",{key:"net",style:{flex:"none",padding:"13px 20px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(var(--sb-bg-rgb), 0.72)",backdropFilter:"blur(14px)",WebkitBackdropFilter:"blur(14px)"}},React.createElement("div",{style:{maxWidth:"1000px",margin:"0 auto",display:"grid",gridTemplateColumns:"repeat(auto-fit,minmax(140px,1fr))",gap:"14px",fontFamily:h}},[[a("sec.transport"),"WebRTC \xB7 DTLS"],[a("sec.cipher"),"AES-256-GCM"],[a("sec.keyExchange"),"ECDH P-384"],[a("sec.security"),ie+(S?" \xB7 "+S.score+"%":"")]].map(([q,ye],Be)=>React.createElement("div",{key:"nf"+Be},[React.createElement("div",{key:"k",style:{fontSize:"10px",color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"0.6px",marginBottom:"4px"}},q),React.createElement("div",{key:"v",style:{fontSize:"12.5px",color:Be===3?ue:"var(--sb-text-4)",fontWeight:500}},ye)]))));return React.createElement("div",{style:{flex:"none"}},[ne,Te])},Ji=({title:t,isOffline:e,peerPresence:n,onRenameTitle:r,messages:i,messageInput:c,setMessageInput:d,onSendMessage:h,onSendVoice:m,onDisconnect:v,keyFingerprint:S,isVerified:p,chatMessagesRef:k,scrollToBottom:y,webrtcManager:I,status:B,pendingIncomingFiles:N=[],onIncomingDecision:ae,codeMode:te,setCodeMode:pe,viewOnceMode:ve,setViewOnceMode:C,viewOnceTtl:F,setViewOnceTtl:V,disappearTtl:P,setDisappearTtl:O,nowTick:$,onUnsendMessage:Q,onMessageExpire:H})=>{let[re,ie]=React.useState(!1),[ue,L]=React.useState(!1),[j,ne]=React.useState(!1),[Te,q]=React.useState(!1),[ye,Be]=React.useState(!1),[rt,Re]=React.useState(!1),[Qe,st]=React.useState(!1),[mt,Wt]=React.useState(()=>typeof window<"u"&&!!window.matchMedia&&window.matchMedia("(min-width:1024px)").matches);React.useEffect(()=>{if(typeof window>"u"||!window.matchMedia)return;let E=window.matchMedia("(min-width:1024px)"),me=()=>Wt(E.matches);try{E.addEventListener("change",me)}catch{E.addListener(me)}return()=>{try{E.removeEventListener("change",me)}catch{E.removeListener(me)}}},[]);let yt=React.useRef(null);React.useEffect(()=>{let E=yt.current;!E||te||(E.style.height="auto",E.style.height=Math.min(E.scrollHeight,240)+"px")},[c,te]),React.useEffect(()=>{N.length>0&&L(!0)},[N.length]);let Ce=React.useRef(!0);React.useEffect(()=>{let E=typeof window<"u"?window.visualViewport:null;if(!E)return;let me=()=>{if(!Ce.current)return;let Rt=k.current;Rt&&(Rt.scrollTop=Rt.scrollHeight)},Ie=()=>{requestAnimationFrame(me),setTimeout(me,300)};return E.addEventListener("resize",Ie),()=>E.removeEventListener("resize",Ie)},[k]),React.useEffect(()=>{if(k.current&&i.length>0){let{scrollTop:E,scrollHeight:me,clientHeight:Ie}=k.current;if(me-E-Ie<100){let Mt=()=>{k.current&&k.current.scrollTo({top:k.current.scrollHeight,behavior:wr()})};Mt(),setTimeout(Mt,50),setTimeout(Mt,150)}}},[i,k]);let ft=()=>{if(k.current){let{scrollTop:E,scrollHeight:me,clientHeight:Ie}=k.current,Rt=me-E-Ie<100;Ce.current=Rt,ie(!Rt)}},ee=()=>{Ce.current=!0,typeof y=="function"?(y(),ie(!1)):k.current&&(k.current.scrollTo({top:k.current.scrollHeight,behavior:wr()}),ie(!1))},Fe=E=>{E.key==="Enter"&&(te?(E.metaKey||E.ctrlKey)&&(E.preventDefault(),h()):E.shiftKey||(E.preventDefault(),h()))},bt=()=>{if(!I)return!1;let E=I.isConnected?I.isConnected():!1,me=I.isVerified||!1,Ie=I.dataChannel&&I.dataChannel.readyState==="open";return E&&me&&Ie},ht="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",Ot=E=>E?E>=86400&&E%86400===0?E/86400+"d":E>=3600&&E%3600===0?E/3600+"h":E>=60?Math.round(E/60)+"m":E+"s":"",xt=E=>({display:"flex",alignItems:"center",gap:"6px",padding:"7px 11px",borderRadius:"8px",border:"1px solid "+(E?"rgba(var(--sb-ink), 0.18)":"rgba(var(--sb-ink), 0.07)"),background:E?"rgba(var(--sb-ink), 0.06)":"transparent",color:E?"#fff":"var(--sb-text-6)",fontFamily:"inherit",fontSize:"12.5px",fontWeight:600,cursor:"pointer",transition:"all .15s"}),Lt=E=>({padding:"6px 12px",borderRadius:"8px",border:"1px solid "+(E?"rgba(var(--sb-ink), 0.22)":"rgba(var(--sb-ink), 0.07)"),background:E?"rgba(var(--sb-ink), 0.07)":"transparent",color:E?"#fff":"var(--sb-text-7)",fontFamily:ht,fontSize:"12px",fontWeight:500,cursor:"pointer",transition:"all .14s"}),gt=[{label:a("msg.off"),v:0},{label:"5s",v:5},{label:"30s",v:30},{label:"1m",v:60},{label:"1h",v:3600},{label:"24h",v:86400}],St=[{label:a("msg.off"),v:0},{label:"5s",v:5},{label:"10s",v:10},{label:"30s",v:30},{label:"1m",v:60}],Vt=ve?F:0,b=E=>{O(E),q(!1)},J=E=>{E===0?C(!1):(V(E),C(!0)),Be(!1)},Ne=!!(c&&c.trim()),qe=typeof m=="function"&&!e&&bt()&&typeof navigator<"u"&&navigator.mediaDevices&&typeof navigator.mediaDevices.getUserMedia=="function",Le=E=>{try{return new Date(E).toLocaleTimeString("en-GB",{hour:"2-digit",minute:"2-digit",second:"2-digit"})}catch{return""}},Ge=i.filter(E=>E.type==="system"&&typeof E.message=="string"&&E.message.trim()),Bt=i.filter(E=>E.type!=="system"),Xe=(p||Ge.length>0)&&React.createElement("div",{key:"handshake",style:{border:"1px solid rgba(var(--sb-ink), 0.07)",borderRadius:"12px",background:"var(--sb-surface)",overflow:"hidden"}},[React.createElement("button",{key:"hs-btn",onClick:()=>Re(E=>!E),style:{width:"100%",display:"flex",alignItems:"center",gap:"13px",padding:"14px 16px",background:"transparent",border:"none",color:"inherit",cursor:"pointer",textAlign:"start",fontFamily:"inherit"}},[React.createElement("div",{key:"ic",style:{flex:"none",width:"30px",height:"30px",display:"grid",placeItems:"center"}},React.createElement("i",{className:"fas fa-check",style:{color:"var(--sb-green)",fontSize:"16px"}})),React.createElement("div",{key:"tx",style:{flex:1,minWidth:0}},[React.createElement("div",{key:"t1",style:{fontSize:"13.5px",fontWeight:600,color:"var(--sb-text-2)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},a("flow.channelEstablished")),React.createElement("div",{key:"t2",style:{fontSize:"12px",color:"var(--sb-text-8)",marginTop:"1px",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},a("sas.verified")+(Ge.length?" \xB7 "+Ge.length+(Ge.length===1?" event":" events"):""))]),React.createElement("i",{key:"chev",className:"fas fa-chevron-down",style:{flex:"none",color:"var(--sb-text-9)",fontSize:"13px",transform:rt?"rotate(180deg)":"rotate(0deg)",transition:"transform .2s"}})]),rt&&React.createElement("div",{key:"hs-body",style:{paddingTop:"2px",paddingBottom:"14px",paddingInlineStart:"59px",paddingInlineEnd:"16px"}},[Ge.length>0&&React.createElement("div",{key:"steps",className:"sb-scroll",style:{marginBottom:"12px",maxHeight:"220px",overflowY:"auto",paddingInlineEnd:"6px"}},Ge.map((E,me)=>React.createElement("div",{key:"s"+me,style:{display:"flex",gap:"11px",padding:"6px 0",borderTop:me===0?"none":"1px solid rgba(var(--sb-ink), 0.04)"}},[React.createElement("span",{key:"d",style:{flex:"none",width:"5px",height:"5px",borderRadius:"50%",background:"var(--sb-green-solid)",marginTop:"7px",opacity:.6}}),React.createElement("span",{key:"t",style:{flex:1,fontSize:"12.5px",color:"var(--sb-text-6)",lineHeight:1.5,wordBreak:"break-word"}},String(E.message||"").trim()),React.createElement("span",{key:"tm",style:{flex:"none",fontFamily:ht,fontSize:"10.5px",color:"var(--sb-text-faint)"}},Le(E.timestamp))]))),S&&React.createElement("div",{key:"sn",style:{display:"flex",alignItems:"center",gap:"9px",padding:"10px 12px",borderRadius:"9px",background:"rgba(var(--sb-ink), 0.025)",border:"1px solid rgba(var(--sb-ink), 0.06)"}},[React.createElement("i",{key:"i",className:"fas fa-lock",style:{color:"var(--sb-text-7)",fontSize:"12px"}}),React.createElement("span",{key:"l",style:{fontSize:"11.5px",color:"var(--sb-text-7)"}},a("sas.safetyNumber")),React.createElement("span",{key:"v",style:{fontFamily:ht,fontSize:"12px",color:"var(--sb-text-4)",letterSpacing:"0.8px",fontWeight:500,wordBreak:"break-all"}},S)])])]),it=React.createElement("div",{key:"empty",style:{display:"flex",alignItems:"center",justifyContent:"center",flex:1,minHeight:"40vh"}},React.createElement("div",{style:{textAlign:"center",maxWidth:"420px"}},[React.createElement("img",{key:"ic",src:"/logo/securebit-mark.svg",alt:"SecureBit",style:{width:"60px",height:"60px",objectFit:"contain",display:"block",margin:"0 auto 16px"}}),React.createElement("h3",{key:"t",style:{fontSize:"17px",fontWeight:700,color:"var(--sb-text-2)",margin:"0 0 6px"}},a("flow.channelReady")),React.createElement("p",{key:"p",style:{fontSize:"13px",color:"var(--sb-text-8)",margin:0}},a("chat.e2eeNote"))])),on=React.createElement("main",{key:"main",ref:k,onScroll:ft,className:"sb-scroll",style:{flex:1,overflowY:"auto",padding:"20px 20px 22px"}},React.createElement("div",{style:{width:"100%",maxWidth:"1000px",margin:"0 auto",display:"flex",flexDirection:"column",gap:"16px",minHeight:"100%"}},Bt.length===0?[Xe,it]:[Xe].concat(Bt.map(E=>React.createElement(Qo,{key:E.id,message:E.message,type:E.type,timestamp:E.timestamp,mid:E.mid,status:E.status,viewOnce:E.viewOnce,viewOnceTtl:E.viewOnceTtl,expiresAt:E.expiresAt,expired:E.expired,nowTick:$,canUnsend:typeof Q=="function",onUnsend:Q,onExpire:()=>H&&H(E.id),voice:E.voice}))))),jt=Te&&React.createElement("div",{key:"timer-row",style:{display:"flex",flexWrap:"wrap",alignItems:"center",gap:"8px",padding:"10px 12px",marginBottom:"10px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)"}},[React.createElement("span",{key:"lbl",style:{fontSize:"12px",color:"var(--sb-text-7)",fontWeight:600,marginInlineEnd:"4px"}},a("chat.disappearAfter"))].concat(gt.map(E=>React.createElement("button",{key:"td"+E.v,onClick:()=>b(E.v),style:Lt(P===E.v)},E.label)))),On=ye&&React.createElement("div",{key:"once-row",style:{display:"flex",flexWrap:"wrap",alignItems:"center",gap:"8px",padding:"10px 12px",marginBottom:"10px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)"}},[React.createElement("span",{key:"lbl",style:{fontSize:"12px",color:"var(--sb-text-7)",fontWeight:600,marginInlineEnd:"4px"}},a("chat.visibleFor"))].concat(St.map(E=>React.createElement("button",{key:"od"+E.v,onClick:()=>J(E.v),style:Lt(Vt===E.v)},E.label)))),cn=ue&&React.createElement("div",{key:"file-panel",style:{marginBottom:"10px"}},React.createElement(window.FileTransferComponent||(()=>React.createElement("div",{style:{padding:"16px",textAlign:"center",color:"var(--sb-red)"}},"FileTransferComponent not loaded")),{webrtcManager:I,isConnected:bt(),pendingIncomingFiles:N,onIncomingDecision:ae,showDropzone:j})),Et=React.createElement("div",{key:"chips",className:"sb-chips",style:{display:"flex",alignItems:"center",justifyContent:"space-between",flexWrap:"wrap",gap:"8px",marginBottom:"10px"}},[React.createElement("button",{key:"files",onClick:()=>{ue&&j?(L(!1),ne(!1)):(L(!0),ne(!0))},className:"sb-chip",style:xt(ue&&j)},[React.createElement("i",{key:"i",className:"fas fa-paperclip",style:{fontSize:"13px"}}),ue&&j?a("chat.hideFiles"):a("chat.sendFiles")]),React.createElement("div",{key:"right",className:"sb-chips-right",style:{display:"flex",alignItems:"center",gap:"6px",flexWrap:"wrap"}},[React.createElement("button",{key:"code",onClick:()=>pe(E=>!E),className:"sb-chip",style:xt(te)},[React.createElement("i",{key:"i",className:"fas fa-code",style:{fontSize:"13px"}}),a("msg.code")]),React.createElement("button",{key:"once",onClick:()=>{Be(E=>!E),q(!1)},className:"sb-chip",style:xt(ye||ve)},[React.createElement("i",{key:"i",className:"fas fa-eye-slash",style:{fontSize:"13px"}}),ve?a("chat.viewOncePrefix")+Ot(F):a("chat.viewOnce")]),React.createElement("button",{key:"timer",onClick:()=>{q(E=>!E),Be(!1)},className:"sb-chip",style:xt(Te||P>0)},[React.createElement("i",{key:"i",className:"fas fa-stopwatch",style:{fontSize:"13px"}}),P>0?a("chat.timerPrefix")+Ot(P):a("msg.timer")])])]),f=te&&React.createElement("div",{key:"code-strip",style:{display:"flex",alignItems:"center",gap:"8px",padding:"8px 14px",border:"1px solid rgba(var(--sb-ink), 0.08)",borderBottom:"none",borderRadius:"14px 14px 0 0",background:"var(--sb-surface)"}},[React.createElement("i",{key:"i",className:"fas fa-code",style:{color:"var(--sb-text-7)",fontSize:"12px"}}),React.createElement("span",{key:"s",style:{fontSize:"11.5px",fontWeight:600,color:"var(--sb-text-7)"}},a("chat.codeHint")),React.createElement("button",{key:"c",onClick:()=>pe(!1),className:"sb-link",style:{marginInlineStart:"auto",background:"none",border:"none",color:"var(--sb-text-9)",cursor:"pointer",fontSize:"11.5px",fontFamily:"inherit",fontWeight:600}},a("chat.close"))]),Je=React.createElement("button",{key:"send",onClick:h,disabled:!Ne,title:a("chat.send"),className:"sb-send",style:{flex:"none",width:"44px",height:"44px",borderRadius:"11px",border:"none",display:"grid",placeItems:"center",cursor:Ne?"pointer":"default",background:Ne?"var(--sb-orange-solid)":"rgba(var(--sb-ink), 0.05)",color:Ne?"var(--sb-on-accent)":"var(--sb-text-faint)",transition:"all .15s"}},React.createElement("i",{className:"fas fa-paper-plane sb-mirror-rtl",style:{fontSize:"15px"}})),Oe=React.createElement("button",{key:"mic",onClick:()=>st(!0),title:a("chat.recordVoice"),className:"sb-send",style:{flex:"none",width:"44px",height:"44px",borderRadius:"50%",border:"none",display:"grid",placeItems:"center",cursor:"pointer",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",boxShadow:"0 8px 22px rgba(var(--sb-orange-rgb), 0.3)",transition:"transform .15s cubic-bezier(.2,.7,.3,1)"}},React.createElement("svg",{width:19,height:19,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.9,strokeLinecap:"round",strokeLinejoin:"round"},[React.createElement("rect",{key:"a",x:9,y:3,width:6,height:11,rx:3}),React.createElement("path",{key:"b",d:"M5 11a7 7 0 0 0 14 0"}),React.createElement("path",{key:"c",d:"M12 18v3"})])),ke=qe?mt?[Oe,Je]:Ne?[Je]:[Oe]:[Je],He=React.createElement("div",{key:"input",style:{display:"flex",alignItems:"flex-end",gap:"11px",paddingBlock:"11px",paddingInlineStart:"16px",paddingInlineEnd:"11px",border:"1px solid "+(Ne?"rgba(var(--sb-ink), 0.18)":"rgba(var(--sb-ink), 0.08)"),background:"var(--sb-surface)",borderRadius:te?"0 0 14px 14px":"14px",transition:"border .15s"}},[React.createElement("div",{key:"ta-wrap",style:{flex:1,minWidth:0}},[React.createElement("textarea",{key:"ta",value:c,ref:yt,onChange:E=>d(E.target.value),onKeyDown:Fe,rows:1,maxLength:2e3,placeholder:te?a("flow.pasteOrWrite"):a("chat.placeholder"),className:"sb-textarea",style:{width:"100%",minHeight:te?"120px":"22px",maxHeight:"240px",resize:"none",border:"none",outline:"none",background:"transparent",color:"var(--sb-text-2)",fontFamily:te?ht:"inherit",fontSize:te?"13px":"14.5px",lineHeight:1.55,padding:"6px 0"}}),React.createElement("div",{key:"foot",style:{display:"flex",alignItems:"center",gap:"12px",marginTop:"3px"}},[React.createElement("span",{key:"enc",style:{display:"inline-flex",alignItems:"center",gap:"5px",fontSize:"11px",color:"var(--sb-text-faint)"}},[React.createElement("i",{key:"i",className:"fas fa-lock",style:{color:"var(--sb-green)",fontSize:"10px"}}),a("chat.encryptedOnDevice")]),React.createElement("span",{key:"cnt",style:{fontFamily:ht,fontSize:"10.5px",color:"var(--sb-text-faint)",marginInlineStart:"auto"}},(c?c.length:0)+"/2000")])])].concat(ke)),We=React.createElement("div",{key:"recbar"},React.createElement(Ko,{onCancel:()=>st(!1),onSend:(E,me,Ie)=>{st(!1),typeof m=="function"&&m(E,me,Ie)}})),$t=React.createElement("footer",{key:"composer",style:{flex:"none",padding:"12px 20px calc(18px + var(--sb-safe-bottom, env(safe-area-inset-bottom, 0px)))",background:"var(--sb-bg)",borderTop:"1px solid rgba(var(--sb-ink), 0.05)"}},React.createElement("div",{style:{maxWidth:"1000px",margin:"0 auto"}},Qe?[We]:[jt,On,cn,Et,f,He])),Pe=re&&React.createElement("button",{key:"scrollbtn",onClick:ee,style:{position:"fixed",insetInlineEnd:"24px",bottom:"150px",width:"44px",height:"44px",borderRadius:"50%",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"var(--sb-surface-3)",color:"var(--sb-text-4)",display:"grid",placeItems:"center",cursor:"pointer",zIndex:50,boxShadow:"0 6px 20px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))"}},React.createElement("i",{className:"fas fa-arrow-down",style:{fontSize:"15px"}})),ln=React.createElement(ec,{key:"chat-header",status:B,onDisconnect:v,webrtcManager:I,title:t,isOffline:e,peerPresence:n,onRenameTitle:r}),qt=window.CallUIComponent&&React.createElement(window.CallUIComponent,{key:"call-overlay",webrtcManager:I,peerTitle:t});return React.createElement("div",{className:"chat-container",style:{position:"relative",display:"flex",flexDirection:"column",height:"100vh",background:"var(--sb-bg)",color:"var(--sb-text-2)"}},[ln,on,Pe,$t,qt])},fs=(t,e,n={})=>({message:t,type:e,id:Date.now()+Math.random(),timestamp:typeof n.timestamp=="number"?n.timestamp:Date.now(),mid:n.mid,status:n.status,viewOnce:n.viewOnce===!0,viewOnceTtl:typeof n.viewOnceTtl=="number"?n.viewOnceTtl:15,expiresAt:typeof n.expiresAt=="number"?n.expiresAt:void 0,voice:n.voice||void 0,fileId:n.fileId||void 0}),an={chevL:'<svg class="sb-mirror-rtl" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 6l-6 6 6 6"/></svg>',chevR:'<svg class="sb-mirror-rtl" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9 6l6 6-6 6"/></svg>',plus:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.1" stroke-linecap="round"><path d="M12 5v14M5 12h14"/></svg>',users:'<svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19"/><circle cx="10" cy="8" r="3.2"/><path d="M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4"/><path d="M15.5 5.3a3.2 3.2 0 0 1 0 5.4"/></svg>',burger:'<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></svg>'},Zi=({chats:t,groups:e=[],collapsed:n,drawerOpen:r,onToggleCollapse:i,onSelect:c,onSelectGroup:d,onNewChat:h,onNewGroup:m,onRename:v,onCloseDrawer:S,myStatus:p,onSetStatus:k})=>{let y=React.createElement,[I,B]=React.useState(null),[N,ae]=React.useState(""),[te,pe]=React.useState(!1),ve=React.useRef(null),C=React.useRef(null),F=React.useRef(null),V=React.useRef(null),P=React.useRef(0),O=React.useRef(!1),$=React.useRef(!1),[Q,H]=React.useState(!!r),re=10,ie=220,ue=()=>C.current&&C.current.offsetWidth||292,L=b=>{P.current=b;let J=ue(),Ne=Math.min(1,Math.max(0,1+b/J));if(C.current&&(C.current.style.transform="translate3d("+(b*Xn).toFixed(2)+"px,0,0)"),ve.current){ve.current.style.opacity=Ne.toFixed(3);let qe="blur("+(5*Ne).toFixed(2)+"px)";ve.current.style.backdropFilter=qe,ve.current.style.webkitBackdropFilter=qe}},j=(b,J)=>{F.current&&F.current.stop(),F.current=Oi({from:P.current,to:b,velocity:J,damping:Math.abs(J)>60?Fn.drawer.damping:Fn.move.damping,response:Fn.drawer.response,restDelta:.5,restSpeed:8,onUpdate:L,onComplete:()=>{L(b),F.current=null,b!==0&&H(!1)}})};React.useLayoutEffect(()=>{if(r&&!Q){H(!0);return}if(!Q||r===O.current)return;let b=ue();r&&!F.current&&!V.current&&L(-b),O.current=r,j(r?0:-b,F.current?F.current.velocity:0)},[r,Q]),React.useEffect(()=>()=>{F.current&&F.current.stop()},[]);let ne=b=>{b.pointerType==="mouse"&&b.button!==0||V.current||($.current=!1,V.current={id:b.pointerId,x0:b.clientX,y0:b.clientY,base:P.current,axis:null,vel:Pi()},V.current.vel.add(b.clientX*Xn,b.timeStamp||performance.now()))},Te=b=>{let J=V.current;if(!J||b.pointerId!==J.id)return;let Ne=b.clientX-J.x0,qe=b.clientY-J.y0;if(!J.axis){if(Math.abs(Ne)<re&&Math.abs(qe)<re)return;if(Math.abs(qe)>=Math.abs(Ne)){V.current=null;return}J.axis="x",F.current&&(J.base=P.current,J.x0=b.clientX,F.current.stop(),F.current=null);try{b.currentTarget.setPointerCapture(J.id)}catch{}}J.vel.add(b.clientX*Xn,b.timeStamp||performance.now());let Le=ue(),Ge=J.base+(b.clientX-J.x0)*Xn;Ge>0?Ge=ds(Ge,Le):Ge<-Le&&(Ge=-Le+ds(Ge+Le,Le)),L(Ge)},q=b=>{let J=V.current;if(!J||b.pointerId!==void 0&&b.pointerId!==J.id||(V.current=null,J.axis!=="x"))return;$.current=!0;let Ne=ue(),qe=J.vel.get(b.timeStamp||performance.now()),Le=Fi(P.current,qe,[-Ne,0],{flick:ie})===0;O.current=Le,j(Le?0:-Ne,qe),Le||S()},ye=()=>{if($.current){$.current=!1;return}S()},Be=b=>J=>{J.stopPropagation(),B(b.id),ae(b.name)},rt=()=>{I&&(v(I,N),B(null))},Re=b=>{b.key==="Enter"?(b.preventDefault(),rt()):b.key==="Escape"&&B(null)},Qe=(b={})=>y("input",{autoFocus:!0,value:N,onChange:J=>ae(J.target.value),onKeyDown:Re,onBlur:rt,onClick:J=>J.stopPropagation(),style:Object.assign({width:"100%",background:"rgba(var(--sb-ink), 0.06)",border:"1px solid rgba(var(--sb-orange-rgb), 0.5)",borderRadius:"6px",color:"var(--sb-text-1)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,padding:"2px 6px",outline:"none"},b)}),st=(b,J)=>y("span",{style:Object.assign({display:"grid",placeItems:"center"},J||{}),dangerouslySetInnerHTML:{__html:b}}),mt=(b,J,Ne)=>y("div",{style:{position:"relative",flex:"none",width:J+"px",height:J+"px",borderRadius:(J>=44?12:11)+"px",display:"grid",placeItems:"center",background:b.active?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.035)",border:"1px solid rgba(var(--sb-ink), "+(b.active?"0.14":"0.07")+")",fontSize:"13px",fontWeight:700,letterSpacing:"-0.3px",color:b.active?"var(--sb-text-1)":"var(--sb-text-6)"}},[b.mono,y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:b.dot,border:"2px solid "+Ne}})]),Wt=b=>y("div",{key:b.id,onClick:()=>c(b.id),style:{position:"relative",display:"flex",alignItems:"center",gap:"12px",padding:"11px 12px",marginBottom:"4px",borderRadius:"11px",background:b.active?"var(--sb-surface)":"transparent",border:"1px solid "+(b.active?"rgba(var(--sb-ink), 0.08)":"transparent"),cursor:"pointer"}},[b.active&&y("span",{key:"bar",style:{position:"absolute",insetInlineStart:0,top:"12px",bottom:"12px",width:"3px",borderStartEndRadius:"3px",borderEndEndRadius:"3px",background:"var(--sb-orange-solid)"}}),mt(b,38,b.active?"var(--sb-surface)":"var(--sb-bg-deep)"),y("div",{key:"body",style:{flex:1,minWidth:0}},[y("div",{key:"top",style:{display:"flex",alignItems:"center",gap:"7px"}},[I===b.id?Qe():y("span",{key:"name",onDoubleClick:Be(b),title:a("chat.renameHint"),style:{flex:1,minWidth:0,fontSize:"14px",fontWeight:b.active?700:600,letterSpacing:"-0.2px",color:b.active?"var(--sb-text-1)":"var(--sb-text-4)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},b.name),b.unread&&I!==b.id&&y("span",{key:"u",style:{flex:"none",minWidth:"18px",height:"18px",padding:"0 5px",borderRadius:"9px",display:"grid",placeItems:"center",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:700}},b.unread)]),y("div",{key:"prev",style:{fontSize:"12px",color:b.active?"var(--sb-text-7)":"var(--sb-text-9)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},b.preview)])]),yt=b=>y("div",{key:b.id,style:{position:"relative"}},[b.active&&y("span",{key:"bar",style:{position:"absolute",insetInlineStart:"-13px",top:"9px",bottom:"9px",width:"3px",borderStartEndRadius:"3px",borderEndEndRadius:"3px",background:"var(--sb-orange-solid)"}}),y("div",{key:"tile",onClick:()=>c(b.id),title:b.name,style:{position:"relative",width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",cursor:"pointer",background:b.active?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.03)",border:"1px solid rgba(var(--sb-ink), "+(b.active?"0.14":"0.07")+")",fontSize:"13px",fontWeight:700,letterSpacing:"-0.3px",color:b.active?"var(--sb-text-1)":"var(--sb-text-6)"}},[b.mono,y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:b.dot,border:"2.5px solid var(--sb-bg-deep)"}}),b.unread&&y("span",{key:"u",style:{position:"absolute",insetInlineStart:"-5px",top:"-5px",minWidth:"17px",height:"17px",padding:"0 4px",borderRadius:"9px",display:"grid",placeItems:"center",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"'JetBrains Mono',monospace",fontSize:"9.5px",fontWeight:700,border:"2px solid var(--sb-bg-deep)"}},b.unread)])]),Ce=b=>y("div",{style:{width:b+"px",height:b+"px",flex:"none",display:"grid",placeItems:"center"}},y("img",{src:"/logo/securebit-mark.svg",alt:"SecureBit",style:{width:"100%",height:"100%",objectFit:"contain",display:"block"}})),ft=(b,J)=>y("button",{className:"sb-collapse-btn",onClick:i,title:J,style:{width:"30px",height:"30px",borderRadius:"8px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"transparent",color:"var(--sb-text-7)",cursor:"pointer"},dangerouslySetInnerHTML:{__html:b}}),ee=dr.find(b=>b.key===p)||dr[0],Fe={user:'<svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M18 20v-1.5a4 4 0 0 0-4-4h-4a4 4 0 0 0-4 4V20"/><circle cx="12" cy="8" r="3.6"/></svg>',check:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="var(--sb-orange-solid)" stroke-width="2.3" stroke-linecap="round" stroke-linejoin="round"><path d="M5 13l4 4 10-11"/></svg>',chevUp:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="var(--sb-text-9)" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M6 15l6-6 6 6"/></svg>',lock:'<svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="var(--sb-green-solid)" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M7 11V7a5 5 0 0 1 10 0v4"/><rect x="4.5" y="11" width="15" height="9" rx="2.2"/></svg>'},bt=b=>te?y("div",{key:"pmenu",style:Object.assign({position:"absolute",zIndex:30,borderRadius:"14px",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.1)",boxShadow:"0 16px 40px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))",padding:"6px"},b)},[y("div",{key:"h",style:{padding:"9px 10px 7px",fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"1.2px"}},a("chat.setStatus")),...dr.map(J=>y("button",{key:J.key,onClick:()=>{k(J.key),pe(!1)},style:{width:"100%",display:"flex",alignItems:"center",gap:"11px",padding:"9px 10px",borderRadius:"9px",border:"none",background:"transparent",cursor:"pointer",textAlign:"start"}},[y("span",{key:"d",style:{flex:"none",width:"10px",height:"10px",borderRadius:"50%",background:J.dot}}),y("span",{key:"t",style:{flex:1,minWidth:0}},[y("span",{key:"w",style:{display:"block",fontSize:"13.5px",fontWeight:600,color:"var(--sb-text-2)"}},J.word),y("span",{key:"de",style:{display:"block",fontSize:"11.5px",color:"var(--sb-text-9)"}},J.desc)]),J.key===p&&y("span",{key:"c",style:{flex:"none",display:"grid",placeItems:"center"},dangerouslySetInnerHTML:{__html:Fe.check}})])),y("div",{key:"note",style:{display:"flex",alignItems:"flex-start",gap:"8px",margin:"6px 6px 4px",padding:"9px 10px",borderRadius:"9px",background:"rgba(var(--sb-green-rgb), 0.06)",border:"1px solid rgba(var(--sb-green-rgb), 0.16)"}},[y("span",{key:"i",style:{flex:"none",marginTop:"1px",display:"grid"},dangerouslySetInnerHTML:{__html:Fe.lock}}),y("span",{key:"t",style:{fontSize:"11px",lineHeight:1.45,color:"var(--sb-text-7)"}},a("chat.peersOnly"))])]):null,ht=y("div",{key:"you",style:{flex:"none",position:"relative",marginTop:"10px",borderTop:"1px solid rgba(var(--sb-ink), 0.06)",padding:"10px 12px 12px"}},[bt({left:"12px",right:"12px",bottom:"64px"}),y("button",{key:"btn",onClick:()=>pe(b=>!b),style:{width:"100%",display:"flex",alignItems:"center",gap:"11px",padding:"7px 8px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(var(--sb-ink), 0.02)",cursor:"pointer"}},[y("div",{key:"av",style:{position:"relative",flex:"none",width:"36px",height:"36px",borderRadius:"10px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.24)",color:"var(--sb-orange)"}},[y("span",{key:"i",style:{display:"grid"},dangerouslySetInnerHTML:{__html:Fe.user}}),y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:ee.dot,border:"2px solid var(--sb-bg-deep)"}})]),y("div",{key:"tx",style:{flex:1,minWidth:0,textAlign:"start"}},[y("div",{key:"y",style:{fontSize:"13.5px",fontWeight:700,color:"var(--sb-text-1)"}},a("chatHdr.you")),y("div",{key:"w",style:{fontSize:"12px",color:"var(--sb-text-7)"}},ee.word)]),y("span",{key:"ch",style:{display:"grid",placeItems:"center"},dangerouslySetInnerHTML:{__html:Fe.chevUp}})])]),Ot=y("div",{key:"you",style:{flex:"none",position:"relative",display:"flex",flexDirection:"column",alignItems:"center",padding:"0 0 13px"}},[bt({insetInlineStart:"60px",bottom:"8px",width:"248px"}),y("button",{key:"btn",onClick:()=>pe(b=>!b),title:a("chat.yourStatusPrefix")+ee.word,style:{position:"relative",width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",cursor:"pointer",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.24)",color:"var(--sb-orange)"}},[y("span",{key:"i",style:{display:"grid"},dangerouslySetInnerHTML:{__html:Fe.user}}),y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"12px",height:"12px",borderRadius:"50%",background:ee.dot,border:"2.5px solid var(--sb-bg-deep)"}})])]),xt=[y("div",{key:"head",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"space-between",paddingBlock:0,paddingInlineStart:"16px",paddingInlineEnd:"12px",height:"var(--sb-bar-h, 64px)",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[y("div",{key:"brand",style:{display:"flex",alignItems:"center",gap:"10px"}},[Ce(30),y("span",{key:"t",style:{fontSize:"15px",fontWeight:800,letterSpacing:"-0.3px",color:"var(--sb-text-1)"}},"SecureBit")]),ft(an.chevL,a("chat.collapse"))]),y("div",{key:"label",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"space-between",padding:"16px 16px 9px"}},[y("span",{key:"l",style:{fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"1.3px"}},a("chatHdr.chats")),y("span",{key:"c",style:{fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:600,color:"var(--sb-text-9)"}},String(t.length))]),y("div",{key:"list",className:"msc-scroll",style:{flex:1,overflowY:"auto",padding:"0 10px"}},[...t.map(Wt),y("div",{key:"gh",style:{marginTop:"14px",padding:"0 2px 6px",display:"flex",alignItems:"baseline",justifyContent:"space-between"}},[y("span",{key:"l",style:{fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"1.3px"}},a("chat.groupChats")),y("button",{key:"add",onClick:m,title:a("chat.newGroup"),style:{border:"none",background:"transparent",color:"var(--sb-orange)",cursor:"pointer",fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:700,textTransform:"uppercase",letterSpacing:"0.9px",padding:0}},a("chatHdr.newChat"))]),...e.length===0?[y("div",{key:"gph",onClick:m,title:a("chat.createGroup"),style:{display:"flex",alignItems:"center",gap:"12px",padding:"11px 12px",borderRadius:"11px",background:"transparent",border:"1px dashed rgba(var(--sb-ink), 0.09)",cursor:"pointer"}},[y("div",{key:"i",style:{flex:"none",width:"38px",height:"38px",borderRadius:"11px",display:"grid",placeItems:"center",background:"rgba(var(--sb-ink), 0.025)",border:"1px solid rgba(var(--sb-ink), 0.06)",color:"var(--sb-text-faint)"},dangerouslySetInnerHTML:{__html:an.users}}),y("div",{key:"b",style:{flex:1,minWidth:0}},[y("div",{key:"t",style:{fontSize:"14px",fontWeight:600,color:"var(--sb-text-7)"}},a("chat.newGroup")),y("div",{key:"s",style:{fontSize:"11.5px",color:"var(--sb-text-faint)"}},a("chat.meshHint"))])])]:e.map(b=>y("div",{key:b.id,onClick:()=>d(b.id),style:{position:"relative",display:"flex",alignItems:"center",gap:"12px",padding:"11px 12px",marginBottom:"4px",borderRadius:"11px",background:b.active?"var(--sb-surface)":"transparent",border:"1px solid "+(b.active?"rgba(var(--sb-ink), 0.08)":"transparent"),cursor:"pointer"}},[b.active&&y("span",{key:"bar",style:{position:"absolute",insetInlineStart:0,top:"12px",bottom:"12px",width:"3px",borderStartEndRadius:"3px",borderEndEndRadius:"3px",background:"var(--sb-orange-solid)"}}),mt(b,38,b.active?"var(--sb-surface)":"var(--sb-bg-deep)"),y("div",{key:"body",style:{flex:1,minWidth:0}},[y("div",{key:"top",style:{display:"flex",alignItems:"center",gap:"7px"}},[y("span",{key:"n",style:{flex:1,minWidth:0,fontSize:"14px",fontWeight:b.active?700:600,letterSpacing:"-0.2px",color:b.active?"var(--sb-text-1)":"var(--sb-text-4)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},b.name),b.unread&&y("span",{key:"u",style:{flex:"none",minWidth:"18px",height:"18px",padding:"0 5px",borderRadius:"9px",display:"grid",placeItems:"center",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:700}},b.unread)]),y("div",{key:"prev",style:{fontSize:"12px",color:b.active?"var(--sb-text-7)":"var(--sb-text-9)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},b.preview)])]))]),y("div",{key:"new",style:{flex:"none",padding:"12px"}},y("button",{onClick:h,style:{width:"100%",display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"9px",padding:"12px",borderRadius:"11px",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)"}},[st(an.plus,{key:"p"}),a("chat.newChat")])),ht],Lt=[y("div",{key:"head",style:{flex:"none",display:"flex",flexDirection:"column",alignItems:"center",gap:"10px",padding:"13px 0",width:"100%",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[Ce(32),ft(an.chevR,a("chatHdr.expand"))]),y("div",{key:"list",className:"msc-scroll",style:{flex:1,overflowY:"auto",display:"flex",flexDirection:"column",alignItems:"center",gap:"10px",padding:"14px 0",width:"100%"}},[...t.map(yt),y("div",{key:"sep",style:{width:"30px",height:"1px",background:"rgba(var(--sb-ink), 0.07)",margin:"2px 0"}}),...e.map(b=>y("div",{key:b.id,style:{position:"relative"}},[b.active&&y("span",{key:"bar",style:{position:"absolute",insetInlineStart:"-13px",top:"9px",bottom:"9px",width:"3px",borderStartEndRadius:"3px",borderEndEndRadius:"3px",background:"var(--sb-orange-solid)"}}),y("div",{key:"tile",onClick:()=>d(b.id),title:b.name+" \u2014 "+b.headerSub,style:{position:"relative",width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",cursor:"pointer",background:b.active?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.03)",border:"1px solid rgba(var(--sb-ink), "+(b.active?"0.14":"0.07")+")",fontSize:"13px",fontWeight:700,letterSpacing:"-0.3px",color:b.active?"var(--sb-text-1)":"var(--sb-text-6)"}},[b.mono,y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:b.dot,border:"2.5px solid var(--sb-bg-deep)"}}),b.unread&&y("span",{key:"u",style:{position:"absolute",insetInlineStart:"-5px",top:"-5px",minWidth:"17px",height:"17px",padding:"0 4px",borderRadius:"9px",display:"grid",placeItems:"center",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"'JetBrains Mono',monospace",fontSize:"9.5px",fontWeight:700,border:"2px solid var(--sb-bg-deep)"}},b.unread)])])),y("div",{key:"gph",onClick:m,title:a("chat.newGroup"),style:{position:"relative",width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",cursor:"pointer",background:"transparent",border:"1px dashed rgba(var(--sb-ink), 0.1)",color:"var(--sb-text-faint)"},dangerouslySetInnerHTML:{__html:an.users}})]),y("div",{key:"new",style:{flex:"none",padding:"13px 0"}},y("button",{onClick:h,title:a("chat.newChat"),style:{width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)"},dangerouslySetInnerHTML:{__html:an.plus}})),Ot],St={flex:"none",width:n?"72px":"292px",display:"flex",flexDirection:"column",alignItems:n?"center":"stretch",paddingTop:"var(--sb-safe-top, 0px)",background:"var(--sb-bg-deep)",borderInlineEnd:"1px solid rgba(var(--sb-ink), 0.06)"},Vt=n?Lt:xt;return y(React.Fragment,null,[y("style",{key:"css",dangerouslySetInnerHTML:{__html:"@media (max-width:1023px){.sb-rail{display:none !important;}.sb-burger{display:grid !important;}}@media (min-width:1024px){.sb-drawer-overlay{display:none !important;}}.sb-mobile-drawer .sb-collapse-btn{display:none !important;}html,body{background:var(--sb-bg) !important;overscroll-behavior:none;}.sb-app-shell{height:var(--sb-vh,100dvh) !important;min-height:0 !important;overflow:hidden;position:fixed;top:0;inset-inline:0;transform:translate3d(0,var(--sb-vv-top, 0px),0);}.sb-chat-header{position:sticky;top:0;z-index:20;}.sb-app-col{height:100% !important;min-height:0 !important;}.chat-container{height:100% !important;min-height:0 !important;}.sb-scroll{min-height:0 !important;overscroll-behavior:contain;-webkit-overflow-scrolling:touch;}@media (max-width:768px){textarea,input,select{font-size:16px !important;}}@media (max-width:768px){.sb-rename-btn{display:none !important;}}"}}),y("aside",{key:"rail",className:"sb-rail",style:St},Vt),y("div",{key:"drawer",className:"sb-drawer-overlay",ref:ve,onClick:ye,onPointerDown:ne,onPointerMove:Te,onPointerUp:q,onPointerCancel:q,style:{position:"fixed",inset:0,zIndex:60,background:"rgba(var(--sb-scrim-rgb), 0.6)",backdropFilter:"blur(0px)",WebkitBackdropFilter:"blur(0px)",opacity:0,display:Q?"block":"none",touchAction:"pan-y",willChange:"opacity"}},y("aside",{className:"sb-mobile-drawer",ref:C,onClick:b=>b.stopPropagation(),style:{position:"absolute",insetInlineStart:0,top:0,bottom:0,width:"min(292px, 86vw)",display:"flex",flexDirection:"column",paddingTop:"var(--sb-safe-top, 0px)",background:"var(--sb-bg-deep)",borderInlineEnd:"1px solid rgba(var(--sb-ink), 0.06)",boxShadow:"0 0 60px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))",touchAction:"pan-y",willChange:"transform"}},[y("button",{key:"x",onClick:S,title:a("chat.closeMenu"),"aria-label":a("chat.closeMenu"),style:{position:"absolute",top:"calc(15px + var(--sb-safe-top, 0px))",insetInlineEnd:"13px",zIndex:2,width:"34px",height:"34px",borderRadius:"9px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-4)",cursor:"pointer"}},y("i",{className:"fas fa-xmark",style:{fontSize:"16px"}})),xt]))])},gs=()=>{let[t,e]=React.useReducer(oi,void 0,ai),n=t.activeSessionId,r=React.useRef(null);r.current=n;let i=n?t.sessions[n]:null,c=React.useRef([]).current,d=React.useRef(new Map),h=React.useRef(new Map),m=React.useRef(new Map),v=React.useRef(new Map),[S,p]=React.useReducer(Mi,void 0,Ai),k=React.useRef(new Map),y=S.activeGroupId,I=y?S.groups[y]:null,B=React.useRef(null);B.current=y;let[N,ae]=React.useState(""),[te,pe]=React.useState(!1),[ve,C]=React.useState(!1),[F,V]=React.useState(null),[P,O]=React.useState(null),[$,Q]=React.useState(!1),H=React.useRef(null),[re,ie]=React.useState({}),[ue,L]=React.useState({}),j=React.useRef(new Map),[ne,Te]=React.useState({}),q=React.useRef(new Set),ye=React.useRef(new Map),Be=React.useRef(new Map),rt=React.useMemo(()=>Di({getManager:s=>d.current.get(s)||ye.current.get(s)?.manager||null}),[]),Re=(s,o,l={})=>({id:Date.now()+Math.random(),message:s,type:o,timestamp:Date.now(),...l}),Qe=React.useCallback(s=>(o,l={})=>{switch(o){case"phase":p({type:ge.SET_PHASE,id:s,phase:l.phase});break;case"members":p({type:ge.SET_MEMBERS,id:s,members:l.members,epoch:l.epoch}),Lr.current(s,null);break;case"roster":p({type:ge.RENAME,id:s,name:l.name});break;case"sas":p({type:ge.SET_SAS,id:s,code:l.code}),p({type:ge.SET_ACTIVE_GROUP,id:s}),C(!0);break;case"confirmed":p({type:ge.CONFIRM_SAS,id:s});break;case"call":if(ie(u=>({...u,[s]:l.call})),Lr.current(s,l.call),l.call&&!l.call.joined&&s!==B.current){let u=`${s}:${l.call.callId}`;q.current.has(u)||(q.current.add(u),p({type:ge.INCREMENT_UNREAD,id:s}))}break;case"message":p({type:ge.ADD_MESSAGE,id:s,message:Re(l.body,"received",{senderName:l.name,senderFp:l.fp,timestamp:l.ts,relayed:l.relayed===!0})}),s!==B.current&&p({type:ge.INCREMENT_UNREAD,id:s});break;case"ended":As.current(s,{announce:!1});break;case"add_failed":p({type:ge.ADD_MESSAGE,id:s,message:Re(a("err.nobodyAccepted"),"system")});break;case"left":p({type:ge.ADD_MESSAGE,id:s,message:Re(`${l.name} left the group.`,"system")});break;case"inconsistency":p({type:ge.ADD_MESSAGE,id:s,message:Re(`${l.name} sent conflicting messages to different members. That message was discarded.`,"system")});break;case"error":p({type:ge.SET_ERROR,id:s,error:l.error});break;default:break}},[]),st=React.useCallback((s,o)=>{let l=k.current.get(o.gid);if(!l){if(Ni(o)===de.INVITE){let u=null;try{u=hr(o)}catch{return}V(g=>g||{gid:u.gid,name:String(u.name||"Group").slice(0,D.MAX_NAME_BYTES),frame:u,sessionId:s})}return}l.handleFrame(s,o).catch(u=>{let g=u?.code||(u?.message?`frame_rejected: ${String(u.message).slice(0,120)}`:"frame_rejected");p({type:ge.SET_ERROR,id:o.gid,error:g})})},[]),mt=React.useRef(st);mt.current=st;let Wt=React.useCallback((s,o)=>{for(let l of k.current.values())try{l.setSessionState(s,o)}catch{}},[]),yt=React.useRef(Wt);yt.current=Wt;let Ce=React.useCallback(s=>{let o=r.current;o&&e(s(o))},[]),ft=i?i.messages:c,ee=React.useCallback(s=>{let o=r.current;o&&e(typeof s=="function"?{type:X.SET_MESSAGES,id:o,updater:s}:{type:X.SET_MESSAGES,id:o,messages:s})},[]),Fe=i?i.status:"disconnected",bt=React.useCallback(s=>Ce(o=>({type:X.SET_STATUS,id:o,status:s})),[Ce]),ht=i?i.keyFingerprint:"",Ot=React.useCallback(s=>Ce(o=>({type:X.SET_FINGERPRINT,id:o,fingerprint:s})),[Ce]),xt=i?i.verificationCode:"",Lt=React.useCallback(s=>Ce(o=>({type:X.SET_VERIFICATION,id:o,code:s})),[Ce]),gt=i?i.sas.isVerified:!1,St=React.useCallback(s=>Ce(o=>({type:X.SET_SAS,id:o,sas:{isVerified:!!s}})),[Ce]),Vt=i?i.sas.localConfirmed:!1,b=React.useCallback(s=>Ce(o=>({type:X.SET_SAS,id:o,sas:{localConfirmed:!!s}})),[Ce]),J=i?i.sas.remoteConfirmed:!1,Ne=React.useCallback(s=>Ce(o=>({type:X.SET_SAS,id:o,sas:{remoteConfirmed:!!s}})),[Ce]),qe=i?i.sas.bothConfirmed:!1,Le=React.useCallback(s=>Ce(o=>({type:X.SET_SAS,id:o,sas:{bothConfirmed:!!s}})),[Ce]),Ge=i?i.pendingIncomingFiles:c,Bt=React.useCallback(s=>{let o=r.current;o&&e(typeof s=="function"?{type:X.SET_PENDING_FILES,id:o,updater:s}:{type:X.SET_PENDING_FILES,id:o,files:s})},[]),Xe=(s,o)=>i?i.setup[s]:o,it=s=>React.useCallback(o=>Ce(l=>({type:X.PATCH_SETUP,id:l,patch:{[s]:o}})),[Ce]),on=Xe("offerData",""),jt=it("offerData"),On=Xe("answerData",""),cn=it("answerData"),Et=Xe("offerInput",""),f=it("offerInput"),Je=Xe("answerInput",""),Oe=it("answerInput"),ke=Xe("showOfferStep",!1),He=it("showOfferStep"),We=Xe("showAnswerStep",!1),$t=it("showAnswerStep"),Pe=Xe("showVerification",!1),ln=it("showVerification"),qt=Xe("showQRCode",!1),E=it("showQRCode"),me=Xe("qrCodeUrl",""),Ie=it("qrCodeUrl"),Rt=Xe("isGeneratingKeys",!1),Mt=it("isGeneratingKeys"),be=React.useMemo(()=>({get current(){return d.current.get(r.current)||null},set current(s){let o=r.current;o&&(s?d.current.set(o,s):d.current.delete(o))}}),[]),_t=React.useMemo(()=>({get current(){return h.current.get(r.current)||null},set current(s){let o=r.current;o&&(s?h.current.set(o,s):h.current.delete(o))}}),[]),[Ct,kr]=React.useState(()=>{try{return localStorage.getItem("securebit_my_status")||"available"}catch{return"available"}}),kn=React.useRef(Ct);kn.current=Ct;let Sr=s=>s==="invisible"?"offline":s,zt=React.useCallback((s,o)=>{if(!(!s||typeof s.sendMessage!="function"))try{if(s.isConnected&&s.isConnected()){let l=s.sendMessage(JSON.stringify({type:"presence",status:Sr(o)}));l&&typeof l.catch=="function"&&l.catch(()=>{})}}catch{}},[]),Jn=React.useCallback(s=>{kr(s);try{localStorage.setItem("securebit_my_status",s)}catch{}for(let o of d.current.values())zt(o,s)},[zt]),[Yt,fe]=React.useState(!1),[Kt,Sn]=React.useState(!1),[dn,Zn]=React.useState(15),[vt,Ut]=React.useState(0),[pn,Ln]=React.useState(()=>Date.now()),[at,er]=React.useState(typeof navigator<"u"&&navigator.onLine===!1),Qt=React.useRef(at);React.useEffect(()=>{Qt.current=at},[at]),React.useEffect(()=>{let s=()=>er(!0),o=()=>er(!1),l=()=>{document.visibilityState==="visible"&&er(navigator.onLine===!1)};return window.addEventListener("offline",s),window.addEventListener("online",o),document.addEventListener("visibilitychange",l),()=>{window.removeEventListener("offline",s),window.removeEventListener("online",o),document.removeEventListener("visibilitychange",l)}},[]),React.useEffect(()=>{let s=typeof window<"u"?window.visualViewport:null,o=document.documentElement,l=-1,u="",g=-1,w=0,A=()=>{let ct=Math.round(s?s.height:window.innerHeight||0);ct&&ct!==l&&(l=ct,o.style.setProperty("--sb-vh",ct+"px"))},M=()=>!!s&&window.innerHeight-s.height>120,z=()=>{let et=M()?"0px":"env(safe-area-inset-bottom, 0px)";et!==u&&(u=et,o.style.setProperty("--sb-safe-bottom",et))},xe=()=>{let ct=!!s&&s.scale>1.01,et=s&&!ct?Math.max(0,Math.round(s.offsetTop)):0;et!==g&&(g=et,o.style.setProperty("--sb-vv-top",et+"px"))},Ee=()=>{A(),z(),xe()},oe=()=>{w||(w=requestAnimationFrame(()=>{w=0,xe()}))},le=[],Ze=()=>{xe(),[60,180,360,600].forEach(ct=>le.push(setTimeout(()=>{A(),z(),xe()},ct)))};Ee(),s&&(s.addEventListener("resize",Ee),s.addEventListener("scroll",oe)),window.addEventListener("resize",Ee),window.addEventListener("orientationchange",Ee),window.addEventListener("scroll",oe,{passive:!0}),document.addEventListener("focusin",Ze),document.addEventListener("focusout",Ze);let Ve=Jo(s);return()=>{w&&cancelAnimationFrame(w),le.forEach(clearTimeout),s&&(s.removeEventListener("resize",Ee),s.removeEventListener("scroll",oe)),window.removeEventListener("resize",Ee),window.removeEventListener("orientationchange",Ee),window.removeEventListener("scroll",oe),document.removeEventListener("focusin",Ze),document.removeEventListener("focusout",Ze),Ve&&Ve()}},[]);let[Tt,En]=React.useState(()=>{try{return localStorage.getItem("securebit_relay_only_mode")==="true"}catch{return!1}}),[Nt,Bn]=React.useState(null),[Er,Rn]=React.useState(""),[_n,Cn]=React.useState(!1),[Rr,zn]=React.useState(!1);React.useEffect(()=>{let s=!1;return Ws().then(o=>{s||!o||(Array.isArray(o.servers)&&o.servers.length>0&&(Bn(o.servers),Rn(JSON.stringify(o.servers,null,2))),o.privacyMode==="relay-only"&&En(!0),Cn(!0))}).catch(()=>{}),()=>{s=!0}},[]),React.useEffect(()=>{let s=()=>zn(!0);return window.addEventListener("securebit:open-network-settings",s),()=>window.removeEventListener("securebit:open-network-settings",s)},[]);let _r=React.useCallback((s,o)=>{let l=s.useCustom&&Array.isArray(s.servers)?s.servers:null;Bn(l&&l.length?l:null),Rn(s.serversText||""),En(s.privacyMode==="relay-only"),zn(!1),o?(Cn(!0),Hs({servers:l||[],privacyMode:s.privacyMode}).catch(()=>{})):_n&&(Cn(!1),Yr().catch(()=>{}))},[_n]),Cr=React.useCallback(async()=>{await Yr().catch(()=>{}),Cn(!1),Bn(null),Rn("")},[]),[In,Xt]=React.useState(""),[U,Z]=React.useState(!1),[Se,_e]=React.useState(!1),[ot,It]=React.useState(()=>typeof window<"u"&&!!window.Html5Qrcode);React.useEffect(()=>{if(ot)return;let s=()=>It(!0);return window.addEventListener("securebit:qr-ready",s),window.Html5Qrcode&&It(!0),()=>window.removeEventListener("securebit:qr-ready",s)},[ot]);let[Ir,tr]=React.useState(null),[rc,Gt]=React.useState(0),[Ar,Jt]=React.useState(null),[nr,na]=React.useState({status:"disconnected",hasActiveAnswer:!1,answerCreatedAt:null,isUserInitiatedDisconnect:!1}),ra=(s,o={})=>{let{preserveAnswer:l=!1,isUserAction:u=!1}=o;na(g=>({...g,...s,isUserInitiatedDisconnect:u,hasActiveAnswer:l?g.hasActiveAnswer:!1,answerCreatedAt:l?g.answerCreatedAt:null}))},ms=()=>{let s=!!On||Je&&typeof Je=="string"&&Je.trim().length>0,o=me&&typeof me=="string"&&me.trim().length>0;return nr.hasActiveAnswer&&!nr.isUserInitiatedDisconnect||s&&!nr.isUserInitiatedDisconnect||o&&!nr.isUserInitiatedDisconnect},Mr=()=>{ra({hasActiveAnswer:!0,answerCreatedAt:Date.now()})};React.useEffect(()=>Us({targetWindow:window,webrtcManagerRef:be,onClearData:Fs}),[]),React.useEffect(()=>{Ys()},[]);let Dt=React.useCallback((s,o,l={})=>{let u=Date.now()+Math.random(),g={message:s,type:o,id:u,timestamp:typeof l.timestamp=="number"?l.timestamp:Date.now(),mid:l.mid,status:l.status,viewOnce:l.viewOnce===!0,viewOnceTtl:typeof l.viewOnceTtl=="number"?l.viewOnceTtl:15,expiresAt:typeof l.expiresAt=="number"?l.expiresAt:void 0,voice:l.voice||void 0,fileId:l.fileId||void 0};return ee(w=>{let A=[...w,g];return setTimeout(()=>{if(An?.current){let M=An.current;try{let{scrollTop:z,scrollHeight:xe,clientHeight:Ee}=M;(xe-z-Ee<100||w.length===0)&&requestAnimationFrame(()=>{M&&M.scrollTo&&M.scrollTo({top:M.scrollHeight,behavior:wr()})})}catch(z){console.warn("Scroll error:",z),M.scrollTop=M.scrollHeight}}},50),A}),u},[]),ys=React.useCallback((s,o)=>{s&&ee(l=>l.map(u=>String(u.mid)===String(s)&&u.type==="sent"?{...u,status:o}:u))},[]),bs=React.useCallback((s,o)=>{s!=null&&ee(l=>l.map(u=>String(u.id)===String(s)?{...u,...typeof o=="function"?o(u):o}:u))},[]),sc=React.useCallback((s,o)=>{s&&ee(l=>l.map(u=>u.fileId&&String(u.fileId)===String(s)?{...u,...typeof o=="function"?o(u):o}:u))},[]),Un=React.useCallback(s=>{let o=m.current.get(s);if(!o)return;let l=d.current.get(s),u=o.outgoing;o.outgoing=[];let g=[];for(let M of u){if(!l||l.isConnected?.()!==!0){g.push(M);continue}try{let z=l.sendMessage?.(M.outText,M.meta);z&&typeof z.then=="function"&&z.then(()=>e({type:X.UPDATE_MESSAGE_STATUS,id:s,mid:M.mid,status:"delivered"})).catch(()=>e({type:X.UPDATE_MESSAGE_STATUS,id:s,mid:M.mid,status:"failed"}))}catch{g.push(M)}}g.length&&(o.outgoing=g.concat(o.outgoing));let w=o.incoming;o.incoming=[],w.length>0&&e({type:X.ADD_MESSAGE,id:s,message:fs(`Connection restored \u2014 ${w.length} message${w.length===1?"":"s"} received while you were offline.`,"notice")});let A=s===r.current&&(typeof document>"u"||document.visibilityState==="visible");for(let M of w)if(e({type:X.ADD_MESSAGE,id:s,message:fs(M.message,M.type,M.opts)}),M.opts&&M.opts.mid&&M.type==="received")if(A)try{l?.sendDeliveryReceipt?.(M.opts.mid)}catch{}else o.pendingReadAcks&&o.pendingReadAcks.push(M.opts.mid)},[]),xs=React.useCallback(()=>{for(let s of m.current.keys())Un(s)},[Un]);React.useEffect(()=>{at||xs()},[at,xs]),React.useEffect(()=>{let s=setInterval(()=>{for(let[o,l]of m.current.entries()){if(!l.outgoing.length&&!l.incoming.length)continue;let u=d.current.get(o);u?.isConnected?.()===!0&&u?.isReconnecting?.()!==!0&&Un(o)}},2e3);return()=>clearInterval(s)},[Un]);let un=React.useCallback(async()=>{if(!window.isUpdatingSecurity){window.isUpdatingSecurity=!0;try{if(be.current&&(tr({level:"MAXIMUM",score:100,color:"green",details:a("sec.allEnabled"),passedChecks:10,totalChecks:10,isRealData:!0}),window.DEBUG_MODE)){let s=be.current.ecdhKeyPair&&be.current.ecdsaKeyPair?await be.current.calculateSecurityLevel():{level:"MAXIMUM",score:100,sessionType:"premium",passedChecks:10,totalChecks:10}}}catch(s){console.error("Failed to update security level:",s),tr({level:"ERROR",score:0,color:"red",details:a("sas.verificationFailed")})}finally{setTimeout(()=>{window.isUpdatingSecurity=!1},2e3)}}},[]),An=React.useRef(null),rr=Zo(An);React.useEffect(()=>{try{localStorage.setItem("securebit_relay_only_mode",String(Tt))}catch{}be.current?._config?.webrtc&&be.current._setRelayOnlyMode(Tt)},[Tt]),React.useEffect(()=>{ft.length>0&&An.current&&(rr(),setTimeout(rr,50),setTimeout(rr,150))},[ft]);let vs=t.order.some(s=>(t.sessions[s]?.messages||[]).some(o=>typeof o.expiresAt=="number")),ws=React.useRef(t);ws.current=t,React.useEffect(()=>{if(!vs)return;let s=l=>{let u=Date.now(),g=!1,w=l.map(A=>typeof A.expiresAt=="number"&&A.expiresAt<=u&&!A.expired?(g=!0,{...A,expired:!0,message:"",expiresAt:void 0}):A);return g?w:l},o=setInterval(()=>{let l=Date.now();Ln(l);let u=ws.current;for(let g of u.order)(u.sessions[g]?.messages||[]).some(A=>typeof A.expiresAt=="number"&&A.expiresAt<=l&&!A.expired)&&e({type:X.SET_MESSAGES,id:g,updater:s})},1e3);return()=>clearInterval(o)},[vs]);let ks=(s={})=>{let o=s.role||"offer",l=es({role:o}),u=l.id;e({type:X.CREATE_SESSION,entry:l,activate:s.activate!==!1}),m.current.set(u,{incoming:[],outgoing:[],pendingReadAcks:[]});let g=x=>{e(typeof x=="function"?{type:X.SET_MESSAGES,id:u,updater:x}:{type:X.SET_MESSAGES,id:u,messages:x})},w=(x,he,we={})=>{e({type:X.ADD_MESSAGE,id:u,message:fs(x,he,we)}),he==="received"&&u!==r.current&&e({type:X.INCREMENT_UNREAD,id:u})},A=(x,he)=>{x&&e({type:X.UPDATE_MESSAGE_STATUS,id:u,mid:x,status:he})},M=(x,he)=>{x!=null&&e({type:X.PATCH_MESSAGE,id:u,messageId:x,patch:he})},z=(x,he)=>{x&&e({type:X.PATCH_MESSAGE,id:u,fileId:x,patch:he})},xe=x=>e({type:X.SET_STATUS,id:u,status:x}),Ee=x=>e({type:X.SET_FINGERPRINT,id:u,fingerprint:x}),oe=x=>e({type:X.SET_VERIFICATION,id:u,code:x}),le=x=>e({type:X.SET_SAS,id:u,sas:{isVerified:!!x}}),Ze=x=>e({type:X.SET_SAS,id:u,sas:{localConfirmed:!!x}}),Ve=x=>e({type:X.SET_SAS,id:u,sas:{remoteConfirmed:!!x}}),ct=x=>e({type:X.SET_SAS,id:u,sas:{bothConfirmed:!!x}}),et=x=>e({type:X.PATCH_SETUP,id:u,patch:{showVerification:!!x}}),dc=x=>e({type:X.PATCH_SETUP,id:u,patch:{showOfferStep:!!x}}),pc=x=>e({type:X.PATCH_SETUP,id:u,patch:{showAnswerStep:!!x}}),uc=x=>e({type:X.PATCH_SETUP,id:u,patch:{showQRCode:!!x}}),fc=x=>e({type:X.PATCH_SETUP,id:u,patch:{qrCodeUrl:x}}),hc=x=>e({type:X.PATCH_SETUP,id:u,patch:{offerData:x}}),gc=x=>e({type:X.PATCH_SETUP,id:u,patch:{answerData:x}}),mc=x=>e({type:X.PATCH_SETUP,id:u,patch:{offerInput:x}}),yc=x=>e({type:X.PATCH_SETUP,id:u,patch:{answerInput:x}}),za=x=>{e(typeof x=="function"?{type:X.SET_PENDING_FILES,id:u,updater:x}:{type:X.SET_PENDING_FILES,id:u,files:x})},Ls=()=>m.current.get(u)||{incoming:[],outgoing:[]},Bs=(x,he,we)=>{if(typeof x=="string"&&x.trim().startsWith("{"))try{let Ae=JSON.parse(x);if(Ae.type==="presence"){let zs=Ae.data&&Ae.data.status||Ae.status;zs&&e({type:X.SET_PEER_PRESENCE,id:u,presence:zs});return}if($n(Ae)){mt.current(u,Ae);return}let lt=["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error","heartbeat","verification","verification_response","verification_confirmed","verification_both_confirmed","peer_disconnect","key_rotation_signal","key_rotation_ready","security_upgrade","message_delete","message_receipt"];if(Ae.type&&lt.includes(Ae.type)){console.log(`Blocked system/file message from chat: ${Ae.type}`);return}Ae.type==="message"&&typeof Ae.data=="string"&&(x=Ae.data,Ae.meta&&typeof Ae.meta=="object"&&(we=Ae.meta))}catch{}let ze={};if(we&&typeof we=="object"&&(typeof we.mid=="string"&&(ze.mid=we.mid),we.once===!0&&(ze.viewOnce=!0,ze.viewOnceTtl=Number.isFinite(we.onceTtl)?we.onceTtl:15),Number.isFinite(we.ttl)&&we.ttl>0&&(ze.expiresAt=Date.now()+we.ttl*1e3),Number.isFinite(we.ts)&&(ze.timestamp=we.ts)),Qt.current&&he==="received"){Ls().incoming.push({message:x,type:he,opts:ze});return}if(w(x,he,ze),ze.mid&&he==="received")if(u===r.current&&(typeof document>"u"||document.visibilityState==="visible"))try{tn?.sendDeliveryReceipt?.(ze.mid)}catch{}else{let lt=Ls();lt.pendingReadAcks&&lt.pendingReadAcks.push(ze.mid)}},Ua=x=>{let he=v.current.get(u);if(v.current.set(u,x),xe(x),yt.current(u,x==="connected"||x==="verified"),x!=="reconnecting"){if(x==="connected"&&he==="reconnecting"&&Un(u),x==="recovery_failed"){xe("disconnected"),u===r.current&&(document.dispatchEvent(new CustomEvent("peer-disconnect")),document.dispatchEvent(new CustomEvent("disconnected"))),setTimeout(()=>{Dr.current(u)||Fr(u)},2500);return}if(x==="connected")document.dispatchEvent(new CustomEvent("new-connection")),window.isUpdatingSecurity||un().catch(console.error);else if(x==="verifying")et(!0),window.isUpdatingSecurity||un().catch(console.error);else if(x==="verified"){le(!0),et(!1),ct(!0),xe("connected"),setTimeout(()=>{le(!0)},0);try{let we=kn.current==="invisible"?"offline":kn.current;setTimeout(()=>{try{let ze=tn.sendMessage?.(JSON.stringify({type:"presence",status:we}));ze&&typeof ze.catch=="function"&&ze.catch(()=>{})}catch{}},400)}catch{}window.isUpdatingSecurity||un().catch(console.error)}else x==="connecting"?window.isUpdatingSecurity||un().catch(console.error):x==="disconnected"?(xe("disconnected"),le(!1),et(!1),Ze(!1),Ve(!1),ct(!1),u===r.current&&document.dispatchEvent(new CustomEvent("disconnected"))):x==="peer_disconnected"&&(u===r.current&&(Gt(0),document.dispatchEvent(new CustomEvent("peer-disconnect"))),xe("peer_disconnected"),le(!1),et(!1),Ze(!1),Ve(!1),ct(!1),setTimeout(()=>{Dr.current(u)||Fr(u)},2500))}},Ga=x=>{Ee(x===""?"":x)},Ha=x=>{x===""?(oe(""),et(!1)):(oe(x),et(!0))},Wa=x=>{Ze(x.localConfirmed),Ve(x.remoteConfirmed),ct(x.bothConfirmed)},Va=(x,he)=>{x==="replay_attack"?(Gt(0),Jt(null),w("\u{1F4A1} Data is outdated. Please create a new invitation or use a current response code.","system"),typeof console.clear=="function"&&console.clear()):x==="security_violation"&&(Gt(0),Jt(null),w(` Security breach: ${he}`,"system"),typeof console.clear=="function"&&console.clear())};typeof console.clear=="function"&&console.clear();let tn=new EnhancedSecureWebRTCManager(Bs,Ua,Ga,Ha,Va,Wa,{webrtc:{relayOnly:Tt,iceServers:Array.isArray(Nt)&&Nt.length?Nt:Array.isArray(window.SECUREBIT_ICE_SERVERS)?window.SECUREBIT_ICE_SERVERS:void 0}});if(d.current.set(u,tn),tn.onMessageDelete=x=>{x&&g(he=>he.filter(we=>String(we.mid)!==String(x)))},tn.onMessageDelivered=x=>{A(x,"read")},typeof Notification<"u"&&Notification&&Notification.permission==="granted"&&window.NotificationIntegration&&!h.current.get(u))try{let x=new window.NotificationIntegration(tn);x.init().then(()=>{h.current.set(u,x)}).catch(he=>{})}catch{}return Bs(" SecureBit.chat Enhanced Security Edition v5.6.0 - ECDH + DTLS + SAS initialized. Ready to establish a secure connection with ECDH key exchange, DTLS fingerprint verification, and SAS authentication to prevent MITM attacks.","system"),tn.setFileTransferCallbacks(x=>{if(x&&x.isVoice){let he=Math.max(0,Math.min(100,x.progress||0)),we=ze=>ze.voice?x.direction==="up"&&he>=100?{voice:{...ze.voice,transfer:null}}:{voice:{...ze.voice,transfer:{dir:x.direction,pct:he}}}:{};x.direction==="up"&&x.uiId!=null?M(x.uiId,we):x.fileId&&z(x.fileId,we);return}console.log("File progress:",x)},x=>{if(!!x.isVoice||typeof x.mimeType=="string"&&x.mimeType.startsWith("audio/")){x.getObjectURL().then(Ae=>{z(x.fileId,lt=>({voice:{...lt.voice||{},url:Ae,transfer:null}}))}).catch(Ae=>{console.error("Voice decode failed:",Ae),z(x.fileId,lt=>({voice:{...lt.voice||{},transfer:null,error:!0}}))});return}let we=Math.max(1,Math.round((x.fileSize||0)/(1024*1024)));(async()=>{let Ae=await x.getObjectURL(),lt=document.createElement("a");lt.href=Ae,lt.download=x.fileName||"file",document.body.appendChild(lt),lt.click(),lt.remove(),setTimeout(()=>x.revokeObjectURL(Ae),15e3)})().then(()=>{w(`File received & saved: ${x.fileName} (${we} MB)`,"system")}).catch(Ae=>{console.error("Auto-save failed:",Ae),w(`File received: ${x.fileName} (${we} MB). Open the file panel to download it.`,"system")})},x=>{console.error("File transfer error:",x),x.includes(a("err.notReady"))?w(" File transfer error: connection not ready. Try again later.","system"):x.includes(a("err.fileTooLarge"))?w(" File is too big. Maximum size: 100 MB","system"):w(` File transfer error: ${x}`,"system")},x=>{if(x&&x.isVoice){let he=x.voice||{};w("","received",{voice:{dur:Number.isFinite(he.dur)?he.dur:0,bars:Array.isArray(he.bars)?he.bars:null,transfer:{dir:"down",pct:0},url:null},fileId:x.fileId});try{tn.acceptIncomingFile(x.fileId)}catch{}return}za(he=>he.some(we=>we.fileId===x.fileId)?he:[...he,x])}),u},Tr=React.useRef(ks);Tr.current=ks;let Nr=React.useRef(new Set),Ss=React.useCallback(s=>{for(let o of k.current.values())if(o.sessionToFp&&o.sessionToFp.has(s))return!0;return!1},[]),Dr=React.useRef(Ss);Dr.current=Ss;let Fr=React.useCallback(s=>{if(!(!s||Nr.current.has(s))){Nr.current.add(s);try{let o=d.current.get(s);if(o){try{o.disconnect()}catch{}d.current.delete(s)}let l=h.current.get(s);if(l){try{l.cleanup?.()}catch{}h.current.delete(s)}m.current.delete(s),v.current.delete(s),e({type:X.REMOVE_SESSION,id:s})}finally{Nr.current.delete(s)}}},[]);React.useEffect(()=>{t.order.length===0&&Tr.current({role:"offer"})},[t.order.length]);let[sr,Es]=React.useState(()=>{try{return localStorage.getItem("securebit_sidebar_collapsed")==="true"}catch{return!1}});React.useEffect(()=>{try{localStorage.setItem("securebit_sidebar_collapsed",String(sr))}catch{}},[sr]);let[Rs,Zt]=React.useState(!1),sa=React.useCallback(s=>{e({type:X.SET_ACTIVE,id:s}),e({type:X.CLEAR_UNREAD,id:s}),Zt(!1)},[]),ia=React.useCallback(()=>{p({type:ge.SET_ACTIVE_GROUP,id:null}),Tr.current({role:"offer"}),Zt(!1)},[]),aa=React.useCallback((s,o)=>{e({type:X.RENAME,id:s,label:o})},[]),_s=React.useCallback(s=>{let o=ye.current.get(s);if(o){ye.current.delete(s);try{o.manager.disconnect()}catch{}}},[]),fn=React.useRef(_s);fn.current=_s;let Cs=React.useCallback((s,o)=>{let l="mesh:"+Array.from(crypto.getRandomValues(new Uint8Array(8))).map(z=>z.toString(16).padStart(2,"0")).join(""),u={manager:null,gid:s,fp:o,sessionId:l},g=z=>{if(typeof z!="string"||!z.trim().startsWith("{"))return;let xe;try{xe=JSON.parse(z)}catch{return}$n(xe)&&mt.current(l,xe)},w=z=>{let xe=z==="disconnected"||z==="failed"||z==="peer_disconnected"||z==="recovery_failed";if(yt.current(l,!xe&&u.manager?.isVerified===!0),z==="recovery_failed"||z==="failed"){let Ee=k.current.get(s);try{Ee?.unbindSession(o)}catch{}fn.current(l)}},A=z=>{if(!(!z||!u.manager))try{u.manager.markGroupLinkVerified(`group:${s}`)}catch{fn.current(l),yt.current(l,!1)}},M=new EnhancedSecureWebRTCManager(g,w,()=>{},A,()=>{},()=>{},{emitGlobalEvents:!1,webrtc:{relayOnly:Tt,iceServers:Array.isArray(Nt)&&Nt.length?Nt:Array.isArray(window.SECUREBIT_ICE_SERVERS)?window.SECUREBIT_ICE_SERVERS:void 0}});return u.manager=M,ye.current.set(l,u),u},[Tt,Nt]),Pr=React.useRef(Cs);Pr.current=Cs;let Is=React.useCallback(s=>({createOffer:async o=>{let l=Pr.current(s,o);try{let u=await l.manager.createSecureOffer();if(!u||typeof u.sbq2!="string")throw new Error("mesh dial needs a compact descriptor");return{sessionId:l.sessionId,descriptor:u.sbq2}}catch(u){throw fn.current(l.sessionId),u}},createAnswer:async(o,l)=>{let u=Pr.current(s,o);try{let g=await u.manager.createSecureAnswer({t:"offer",sbq2:l});if(!g||typeof g.sbq2!="string")throw new Error("mesh answer needs a compact descriptor");return{sessionId:u.sessionId,descriptor:g.sbq2}}catch(g){throw fn.current(u.sessionId),g}},acceptAnswer:async(o,l)=>{let u=ye.current.get(o);if(!u)throw new Error("that mesh dial is no longer open");await u.manager.handleSecureAnswer({t:"answer",sbq2:l})},close:o=>fn.current(o),linkFingerprint:o=>{let l=d.current.get(o)||ye.current.get(o)?.manager||null;return!l||l.isVerified!==!0?"":typeof l.keyFingerprint=="string"?l.keyFingerprint:""}}),[]);React.useEffect(()=>{for(let[s,o]of k.current){let l=S.groups[s];if(!(!l||l.phase!==Y.READY||!l.sasConfirmed))for(let u of t.order){let g=t.sessions[u];!g||!g.sas.isVerified||o.probeSession(u).catch(()=>{})}}},[S,t]);let Or=React.useMemo(()=>t.order.map(s=>t.sessions[s]).filter(s=>s&&s.sas&&s.sas.isVerified).map(s=>({id:s.id,name:s.peerLabel,mono:pr(s.peerLabel)})),[t]),oa=React.useCallback(s=>{p({type:ge.SET_ACTIVE_GROUP,id:s}),p({type:ge.CLEAR_UNREAD,id:s}),Zt(!1)},[]),ca=React.useCallback(async({name:s,sessionIds:o})=>{pe(!1);let l=Dn.newId(),u=new Dn({groupId:l,name:s,isAdmin:!0,subtle:crypto.subtle,send:rt,emit:Qe(l),mesh:Is(l)});k.current.set(l,u);try{await u.init(),p({type:ge.CREATE_GROUP,entry:fr({id:l,name:s,selfFp:u.selfFp,adminFp:u.selfFp,isAdmin:!0,members:u._memberSnapshot()})}),await u.invite(o.map(g=>({sessionId:g,name:t.sessions[g]?.peerLabel||"Member"})))}catch(g){k.current.delete(l);try{u.destroy()}catch{}p({type:ge.REMOVE_GROUP,id:l}),O(g?.code==="invitations_could_not_be_sent"?a("err.inviteNotConnectedRetry"):`The group could not be created (${g?.code||"unknown error"}).`)}},[rt,Qe,t]),la=React.useCallback(async()=>{let s=F;if(!s)return;V(null);let o=new Dn({groupId:s.gid,name:s.name,isAdmin:!1,subtle:crypto.subtle,send:rt,emit:Qe(s.gid),mesh:Is(s.gid)});k.current.set(s.gid,o);try{await o.init(),p({type:ge.CREATE_GROUP,entry:fr({id:s.gid,name:s.name,selfFp:o.selfFp})}),await o.acceptInvite(s.sessionId,s.frame)}catch(l){k.current.delete(s.gid);try{o.destroy()}catch{}p({type:ge.SET_ERROR,id:s.gid,error:l?.code||"join_failed"})}},[F,rt,Qe]),da=React.useCallback(()=>{let s=B.current,o=s&&k.current.get(s);if(o)try{o.confirmSas(),C(!1)}catch(l){p({type:ge.SET_ERROR,id:s,error:l?.code||"confirm_failed"})}},[]),ir=React.useCallback((s,{announce:o=!0}={})=>{let l=k.current.get(s),u=j.current.get(s);u&&(j.current.delete(s),u.leave().catch(()=>{})),ie(g=>{let w={...g};return delete w[s],w}),L(g=>{let w={...g};return delete w[s],w}),k.current.delete(s),Be.current.delete(s),p({type:ge.REMOVE_GROUP,id:s}),C(!1),l&&(o?Promise.resolve().then(()=>l.leave()).catch(()=>{}):Promise.resolve()).then(()=>{try{l.destroy()}catch{}})},[]),As=React.useRef(ir);As.current=ir;let pa=React.useCallback(async s=>{let o=B.current,l=o&&k.current.get(o);if(!l)return;let u=String(s||"").trim();if(u){ae("");try{let{unreachable:g}=await l.sendText(u);p({type:ge.ADD_MESSAGE,id:o,message:Re(u,"sent")});let w=g.map(A=>A.fp).sort().join(",");if(w!==(Be.current.get(o)||"")&&(Be.current.set(o,w),g.length>0)){let A=g.map(z=>z.name),M=A.length===1?`${A[0]} is`:`${A.slice(0,-1).join(", ")} and ${A[A.length-1]} are`;p({type:ge.ADD_MESSAGE,id:o,message:Re(`${M} offline and will not receive messages until they reconnect.`,"system")})}}catch(g){p({type:ge.ADD_MESSAGE,id:o,message:Re(`Could not send: ${g?.message||"unknown error"}`,"system")})}}},[]),ua=React.useMemo(()=>{if(!I)return[];let s=new Set(I.members.map(o=>o.sessionId).filter(Boolean));return Or.filter(o=>!s.has(o.id))},[I,Or]),fa=React.useCallback(async s=>{Q(!1);let o=B.current,l=o&&k.current.get(o);if(l)try{await l.addMembers(s.map(u=>({sessionId:u,name:t.sessions[u]?.peerLabel||"Member"})))}catch(u){O(u?.code==="invitations_could_not_be_sent"?a("err.inviteNotConnected"):u?.code==="too_many_members"?`A group is limited to ${D.MAX_MEMBERS} members.`:`Could not invite (${u?.code||"unknown error"}).`)}},[t]),ha=React.useCallback(async s=>{let o=B.current,l=o&&k.current.get(o);if(l)try{await l.removeMember(s)}catch(u){p({type:ge.SET_ERROR,id:o,error:u?.code||"remove_failed"})}},[]),Ms=React.useCallback((s,o)=>{let l=j.current.get(s);if(!l)return;let u=k.current.get(s),g=o!==null?o:u?.getCallSnapshot?.()||null;if(!g||!g.joined||g.callId!==l.callId){j.current.delete(s),l.leave().catch(()=>{}),L(w=>{let A={...w};return delete A[s],A});return}l.setPeers(g.participants)},[]),Lr=React.useRef(Ms);Lr.current=Ms;let ar=React.useCallback(async(s,o)=>{let l=j.current.get(s);if(l&&l.callId===o.callId)return l.setPeers(o.participants),l;l&&(j.current.delete(s),await l.leave().catch(()=>{}));let u=new br({getManager:g=>d.current.get(g)||ye.current.get(g)?.manager||null,onChange:g=>{L(w=>({...w,[s]:g}))}});return j.current.set(s,u),await u.join({callId:o.callId,selfFp:S.groups[s]?.selfFp||k.current.get(s)?.selfFp||"",withVideo:o.withVideo,peers:[]}),u},[S]),ga=React.useCallback(async s=>{let o=B.current,l=o&&k.current.get(o);if(l)try{await l.startCall({withVideo:s,prepare:u=>ar(o,u)})}catch(u){let g=j.current.get(o);g&&(j.current.delete(o),g.leave().catch(()=>{}));let w=u?.code||"media_failed";p({type:ge.ADD_MESSAGE,id:o,message:Re(w==="call_in_progress"?a("groupCall.err.call_in_progress"):w==="not_ready"?a("groupCall.err.not_ready"):a(`groupCall.err.${Qn(u)}`),"system")})}},[ar]),ma=React.useCallback(async()=>{let s=B.current,o=s&&k.current.get(s),l=o?.getCallSnapshot?.();if(!(!o||!l))try{let u=await ar(s,{...l,joined:!0});await o.joinCall(),u.setPeers(o.getCallSnapshot()?.participants||[])}catch(u){let g=j.current.get(s);g&&(j.current.delete(s),g.leave().catch(()=>{})),p({type:ge.ADD_MESSAGE,id:s,message:Re(a(`groupCall.err.${Qn(u)}`),"system")})}},[ar]),ya=React.useCallback(()=>{let s=B.current,o=s&&k.current.get(s)?.getCallSnapshot?.();o&&Te(l=>({...l,[s]:o.callId}))},[]),ba=React.useCallback(async()=>{let s=B.current;if(!s)return;let o=j.current.get(s);o&&(j.current.delete(s),L(l=>{let u={...l};return delete u[s],u}),await o.leave().catch(()=>{}));try{await k.current.get(s)?.leaveCall()}catch{}},[]),Mn=React.useCallback(()=>B.current?j.current.get(B.current):null,[]),xa=React.useCallback(()=>{Mn()?.toggleMic()},[Mn]),va=React.useCallback(()=>{Mn()?.toggleCamera()},[Mn]),wa=React.useCallback(()=>{Mn()?.flipCamera()},[Mn]);React.useEffect(()=>{y&&p({type:ge.CLEAR_UNREAD,id:y})},[y]),React.useEffect(()=>{let s=H.current;s&&(s.scrollTop=s.scrollHeight)},[I&&I.messages.length]),React.useEffect(()=>()=>{for(let s of j.current.values())s.leave().catch(()=>{});j.current.clear();for(let s of k.current.values())try{s.destroy()}catch{}k.current.clear();for(let s of[...ye.current.keys()])fn.current(s)},[]);let Br=React.useCallback(s=>{if(!s)return;let o=m.current.get(s),l=d.current.get(s);if(!o||!l||!o.pendingReadAcks||o.pendingReadAcks.length===0)return;let u=o.pendingReadAcks;o.pendingReadAcks=[];for(let g of u)try{l.sendDeliveryReceipt?.(g)}catch{}},[]);React.useEffect(()=>{n&&(e({type:X.CLEAR_UNREAD,id:n}),(typeof document>"u"||document.visibilityState==="visible")&&Br(n))},[n,Br]);let Ts=React.useRef(!1);React.useEffect(()=>{if(Ts.current)return;Ts.current=!0;let s=!1,o=null,l=g=>{if(g.type==="beforeunload"&&!s)for(let w of d.current.values())try{if(w.isConnected&&w.isConnected()){try{w.sendSystemMessage({type:"peer_disconnect",reason:"user_disconnect",timestamp:Date.now()})}catch{}setTimeout(()=>{try{w.disconnect()}catch{}},100)}else w.disconnect()}catch{}else s&&(g.preventDefault(),g.returnValue="")},u=()=>{document.visibilityState==="hidden"?(s=!0,o&&clearTimeout(o),o=setTimeout(()=>{s=!1},5e3)):document.visibilityState==="visible"&&(s=!1,o&&(clearTimeout(o),o=null),Br(r.current))};return window.addEventListener("beforeunload",l),document.addEventListener("visibilitychange",u),()=>{window.removeEventListener("beforeunload",l),document.removeEventListener("visibilitychange",u),o&&(clearTimeout(o),o=null);for(let g of d.current.values())try{g.disconnect()}catch{}d.current.clear();for(let g of h.current.values())try{g.cleanup?.()}catch{}h.current.clear(),m.current.clear(),v.current.clear()}},[]);let ic=s=>{try{let o=typeof s=="string"?JSON.parse(s):s,l={type:o.type,version:o.version,timestamp:o.timestamp,sessionId:o.sessionId,connectionId:o.connectionId,verificationCode:o.verificationCode,salt:o.salt,keyFingerprints:o.keyFingerprints,fullDataAvailable:!0,compressionLevel:"minimal"};return JSON.stringify(l)}catch(o){return console.error("Error compressing offer data:",o),s}},ac=s=>({type:"enhanced_secure_offer_template",version:"4.0",sessionId:s.sessionId,connectionId:s.connectionId,verificationCode:s.verificationCode,timestamp:s.timestamp,keyFingerprints:s.keyFingerprints,authChallenge:s?.authChallenge?.challenge,capabilities:Array.isArray(s.capabilities)&&s.capabilities.length<=5?s.capabilities:void 0}),ka=800,oc=400,[zr,pt]=React.useState(0),[Sa,je]=React.useState(0),[Gn,en]=React.useState(!1),T=React.useRef({timer:null,chunks:[],idx:0,active:!1});React.useEffect(()=>()=>{try{T.current&&T.current.timer&&(clearInterval(T.current.timer),T.current.timer=null)}catch{}},[n]);let cc=()=>{try{T.current.timer&&clearInterval(T.current.timer)}catch{}T.current={timer:null,chunks:[],idx:0,active:!1},je(0),pt(0),en(!1)},Ur=async()=>{let{chunks:s,idx:o}=T.current||{};if(!s||!s.length)return;let l=s[o%s.length];try{let g=typeof window<"u"&&(window.innerWidth||0)>=1024?720:512,w=await(window.generateQRCode?window.generateQRCode(l,{errorCorrectionLevel:"M",margin:2,size:g}):Promise.resolve(""));w&&Ie(w)}catch(u){console.warn("Animated QR render error (current):",u)}je((T.current?.idx||0)%(T.current?.chunks?.length||1)+1)},Tn=async()=>{await Ur();let s=T.current?.chunks?.length||0;if(s>0){let o=((T.current?.idx||0)+1)%s;T.current.idx=o,je(o+1)}},Ea=()=>{let s=!Gn;en(s),s?(T.current.timer&&(clearInterval(T.current.timer),T.current.timer=null),console.log("QR Manual mode enabled - auto-scroll stopped")):(T.current.chunks.length>1&&(T.current.active=!0,clearInterval(T.current.timer),T.current.timer=setInterval(Tn,3e3)),console.log("QR Manual mode disabled - auto-scroll resumed"))},Ra=async()=>{if(console.log("\u{1F3AE} nextQrFrame called, qrFramesTotal:",zr,"qrAnimationRef.current:",T.current),T.current.chunks.length>1){let s=(T.current.idx+1)%T.current.chunks.length;T.current.idx=s,je(s+1),console.log("\u{1F3AE} Next frame index:",s+1);try{clearInterval(T.current.timer)}catch{}T.current.timer=null,await Ur(),!Gn&&T.current.chunks.length>1?(T.current.active=!0,T.current.timer=setInterval(Tn,3e3)):T.current.active=!1}else console.log("\u{1F3AE} No multiple frames to navigate")},_a=async()=>{if(console.log("\u{1F3AE} prevQrFrame called, qrFramesTotal:",zr,"qrAnimationRef.current:",T.current),T.current.chunks.length>1){let s=(T.current.idx-1+T.current.chunks.length)%T.current.chunks.length;T.current.idx=s,je(s+1),console.log("\u{1F3AE} Previous frame index:",s+1);try{clearInterval(T.current.timer)}catch{}T.current.timer=null,await Ur(),!Gn&&T.current.chunks.length>1?(T.current.active=!0,T.current.timer=setInterval(Tn,3e3)):T.current.active=!1}else console.log("\u{1F3AE} No multiple frames to navigate")},G=React.useRef({id:null,total:0,seen:new Set,items:[]}),Ns=async s=>{try{let o=typeof s=="string"?s.length:JSON.stringify(s).length,u=typeof window<"u"&&(window.innerWidth||0)>=1024?720:512;if(typeof window.generateBinaryQRCodeFromObject=="function")try{let oe=typeof s=="string"?JSON.parse(s):s,le=await window.generateBinaryQRCodeFromObject(oe,{errorCorrectionLevel:"M",size:u,margin:2});if(le){try{T.current&&T.current.timer&&clearInterval(T.current.timer)}catch{}T.current={timer:null,chunks:[],idx:0,active:!1},je(0),pt(0),en(!1),Ie(le),pt(1),je(1);return}}catch(oe){console.warn("Binary QR generation failed, falling back to compressed:",oe?.message||oe)}if(typeof window.generateCompressedQRCode=="function")try{let oe=typeof s=="string"?s:JSON.stringify(s),le=await window.generateCompressedQRCode(oe,{errorCorrectionLevel:"M",size:u,margin:2});if(le){try{T.current&&T.current.timer&&clearInterval(T.current.timer)}catch{}T.current={timer:null,chunks:[],idx:0,active:!1},je(0),pt(0),en(!1),Ie(le),pt(1),je(1);return}}catch(oe){console.warn("Compressed QR generation failed, falling back to plain:",oe?.message||oe)}let g=typeof s=="string"?s:JSON.stringify(s);if(g.length<=ka){if(!window.generateQRCode)throw new Error("QR code generator unavailable");try{T.current&&T.current.timer&&clearInterval(T.current.timer)}catch{}T.current={timer:null,chunks:[],idx:0,active:!1},je(0),pt(0),en(!1);let oe=await window.generateQRCode(g,{errorCorrectionLevel:"M",size:u,margin:2});Ie(oe),pt(1),je(1);return}try{T.current&&T.current.timer&&clearInterval(T.current.timer)}catch{}T.current={timer:null,chunks:[],idx:0,active:!1},je(0),pt(0),en(!1);let w=`raw_${Date.now()}_${Math.random().toString(36).slice(2)}`,M=Math.max(200,Math.floor(g.length/10)),z=Math.ceil(g.length/M),xe=[];for(let oe=0;oe<z;oe++){let le=oe+1,Ze=g.slice(oe*M,(oe+1)*M);xe.push(JSON.stringify({hdr:{v:1,id:w,seq:le,total:z,rt:"raw"},body:Ze}))}if(!window.generateQRCode)throw new Error("QR code generator unavailable");if(xe.length===1){let oe=await window.generateQRCode(xe[0],{errorCorrectionLevel:"M",margin:2,size:u});Ie(oe),pt(1),je(1);return}T.current.chunks=xe,T.current.idx=0,T.current.active=!0,pt(xe.length),je(1);let Ee={errorCorrectionLevel:"M",margin:2,size:u};await renderNext(),Gn||(T.current.active=!0,T.current.timer=setInterval(Tn,4e3));return}catch(o){console.error("QR code generation failed:",o),ee(l=>[...l,{message:` QR code generation failed: ${o.message}`,type:"error"}])}},Ca=s=>({type:"enhanced_secure_offer",version:s.version,timestamp:s.timestamp,sessionId:s.sessionId,connectionId:s.connectionId,verificationCode:s.verificationCode,salt:s.salt,sdp:s.sdp,keyFingerprints:s.keyFingerprints,capabilities:s.capabilities,ecdhPublicKey:{keyType:"ECDH",keyData:s.ecdhKeyData,timestamp:s.timestamp-1e3,version:s.version,signature:s.ecdhSignature},ecdsaPublicKey:{keyType:"ECDSA",keyData:s.ecdsaKeyData,timestamp:s.timestamp-999,version:s.version,signature:s.ecdsaSignature},authChallenge:{challenge:s.authChallenge,timestamp:s.timestamp,nonce:s.authNonce,version:s.version},securityLevel:{level:"CRITICAL",score:20,color:"red",verificationResults:{encryption:{passed:!1,details:"Encryption not working",points:0},keyExchange:{passed:!0,details:"Simple key exchange verified",points:15},messageIntegrity:{passed:!1,details:"Message integrity failed",points:0},rateLimiting:{passed:!0,details:"Rate limiting active",points:5},ecdsa:{passed:!1,details:"Enhanced session required - feature not available",points:0},metadataProtection:{passed:!1,details:"Enhanced session required - feature not available",points:0},pfs:{passed:!1,details:"Enhanced session required - feature not available",points:0},nestedEncryption:{passed:!1,details:"Enhanced session required - feature not available",points:0},packetPadding:{passed:!1,details:"Enhanced session required - feature not available",points:0},advancedFeatures:{passed:!1,details:"Premium session required - feature not available",points:0}},timestamp:s.timestamp,details:"Real verification: 20/100 security checks passed (2/4 available)",isRealData:!0,passedChecks:2,totalChecks:4,sessionType:"demo",maxPossibleScore:50}}),Ia=async s=>{try{if(console.log("QR Code scanned:",s.substring(0,100)+"..."),console.log("Current buffer state:",G.current),s.startsWith("SB2:")||s.charCodeAt(0)===2)return G.current={id:null,total:0,seen:new Set,items:[]},ke?Oe(s):f(s),ee(l=>[...l,{message:a("flow.invitationCaptured"),type:"success"}]),_e(!1),Promise.resolve(!0);if(s.startsWith("SB1:bin:")||G.current&&G.current.id){console.log("Binary chunk detected:",s.substring(0,50)+"..."),G.current.id||(console.log("Initializing buffer for binary chunks"),G.current={id:`bin_${Date.now()}`,total:4,seen:new Set,items:[],lastUpdateMs:Date.now()});let l=s.substring(0,50);if(G.current.seen.has(l))return console.log("Chunk already scanned, ignoring..."),Promise.resolve(!1);G.current.seen.add(l),G.current.items.push(s),G.current.lastUpdateMs=Date.now();try{let g=G.current.seen.size;document.dispatchEvent(new CustomEvent("qr-scan-progress",{detail:{id:G.current.id,seq:g,total:G.current.total}})),pt(G.current.total),je(g)}catch{}let u=G.current.seen.size>=G.current.total;if(console.log(`Chunks collected: ${G.current.seen.size}/${G.current.total}, complete: ${u}`),!u)return console.log(`Scanned chunk ${G.current.seen.size}/${G.current.total}, waiting for more...`),Promise.resolve(!1);try{let g=G.current.items.join("");return ke?Oe(g):f(g),ee(w=>[...w,{message:"All binary chunks captured. Payload reconstructed.",type:"success"}]),G.current={id:null,total:0,seen:new Set,items:[]},_e(!1),Promise.resolve(!0)}catch(g){return console.warn("Binary chunks reconstruction failed:",g),Promise.resolve(!1)}}if(s.length>100&&!s.startsWith("{")&&!s.startsWith("[")){console.log("Detected potential binary chunk (long non-JSON string):",s.substring(0,50)+"..."),G.current.id||(console.log("Initializing buffer for potential binary chunks"),G.current={id:`bin_${Date.now()}`,total:4,seen:new Set,items:[],lastUpdateMs:Date.now()});let l=s.substring(0,50);if(G.current.seen.has(l))return console.log("Chunk already scanned, ignoring..."),Promise.resolve(!1);G.current.seen.add(l),G.current.items.push(s),G.current.lastUpdateMs=Date.now();try{let g=G.current.seen.size;document.dispatchEvent(new CustomEvent("qr-scan-progress",{detail:{id:G.current.id,seq:g,total:G.current.total}})),pt(G.current.total),je(g)}catch{}let u=G.current.seen.size>=G.current.total;if(console.log(`Chunks collected: ${G.current.seen.size}/${G.current.total}, complete: ${u}`),!u)return console.log(`Scanned chunk ${G.current.seen.size}/${G.current.total}, waiting for more...`),Promise.resolve(!1);try{let g=G.current.items.join("");return ke?Oe(g):f(g),ee(w=>[...w,{message:"All binary chunks captured. Payload reconstructed.",type:"success"}]),G.current={id:null,total:0,seen:new Set,items:[]},_e(!1),Promise.resolve(!0)}catch(g){return console.warn("Binary chunks reconstruction failed:",g),Promise.resolve(!1)}}let o;if(typeof window.decodeAnyPayload=="function"){let l=window.decodeAnyPayload(s);typeof l=="string"?o=JSON.parse(l):o=l}else{let l=typeof window.decompressIfNeeded=="function"?window.decompressIfNeeded(s):s;o=JSON.parse(l)}if(console.log("Decoded data:",o),o.hdr&&o.body){let{hdr:l}=o;if(!G.current.id||G.current.id!==l.id){G.current={id:l.id,total:l.total||1,seen:new Set,items:[],lastUpdateMs:Date.now()};try{document.dispatchEvent(new CustomEvent("qr-scan-progress",{detail:{id:l.id,seq:0,total:l.total||1}}))}catch{}}G.current.seen.has(l.seq)||(G.current.seen.add(l.seq),G.current.items.push(s),G.current.lastUpdateMs=Date.now());try{let g=G.current.seen.size;document.dispatchEvent(new CustomEvent("qr-scan-progress",{detail:{id:l.id,seq:g,total:G.current.total||l.total||0}}))}catch{}if(!(G.current.seen.size>=(G.current.total||1)))return Promise.resolve(!1);if(l.rt==="raw")try{let w=G.current.items.map(M=>JSON.parse(M)).sort((M,z)=>(M.hdr.seq||0)-(z.hdr.seq||0)).map(M=>M.body||"").join(""),A=JSON.parse(w);ke?Oe(JSON.stringify(A,null,2)):f(JSON.stringify(A,null,2)),ee(M=>[...M,{message:"All frames captured. RAW payload reconstructed.",type:"success"}]);try{document.dispatchEvent(new CustomEvent("qr-scan-complete",{detail:{id:l.id}}))}catch{}return G.current={id:null,total:0,seen:new Set,items:[]},_e(!1),Promise.resolve(!0)}catch(g){return console.warn("RAW multi-frame reconstruction failed:",g),Promise.resolve(!1)}else if(l.rt==="bin")try{let w=G.current.items.map(M=>JSON.parse(M)).sort((M,z)=>(M.hdr.seq||0)-(z.hdr.seq||0)).map(M=>M.body||"").join(""),A;if(typeof window.decodeAnyPayload=="function"){let M=window.decodeAnyPayload(w);A=typeof M=="string"?JSON.parse(M):M}else A=JSON.parse(w);ke?Oe(JSON.stringify(A,null,2)):f(JSON.stringify(A,null,2)),ee(M=>[...M,{message:"All frames captured. BIN payload reconstructed.",type:"success"}]);try{document.dispatchEvent(new CustomEvent("qr-scan-complete",{detail:{id:l.id}}))}catch{}return G.current={id:null,total:0,seen:new Set,items:[]},_e(!1),Promise.resolve(!0)}catch(g){return console.warn("BIN multi-frame reconstruction failed:",g),Promise.resolve(!1)}else if(window.receiveAndProcess){try{let g=await window.receiveAndProcess(G.current.items);if(g.length>0){let{payloadObj:w}=g[0];ke?Oe(JSON.stringify(w,null,2)):f(JSON.stringify(w,null,2)),ee(A=>[...A,{message:"All frames captured. COSE payload reconstructed.",type:"success"}]);try{document.dispatchEvent(new CustomEvent("qr-scan-complete",{detail:{id:l.id}}))}catch{}return G.current={id:null,total:0,seen:new Set,items:[]},_e(!1),Promise.resolve(!0)}}catch(g){console.warn("COSE multi-chunk processing failed:",g)}return Promise.resolve(!1)}else return Promise.resolve(!1)}if(o.type==="enhanced_secure_offer_template"){console.log("QR scan: Template-based offer detected, reconstructing...");let l=Ca(o);return ke?(Oe(JSON.stringify(l,null,2)),console.log("\u{1F4F1} Template data populated to answerInput (waiting for response mode)")):(f(JSON.stringify(l,null,2)),console.log("\u{1F4F1} Template data populated to offerInput (paste invitation mode)")),ee(u=>[...u,{message:"\u{1F4F1} QR code scanned successfully! Full offer reconstructed from template.",type:"success"}]),_e(!1),!0}else return o.type==="secure_offer_reference"?(ee(l=>[...l,{message:a("err.retiredQr"),type:"error"}]),!1):(!o.sdp&&o.type==="enhanced_secure_offer"&&ee(l=>[...l,{message:a("err.compressedQrNote"),type:"warning"}]),ke?(console.log("QR scan: Populating answerInput with:",o),Oe(JSON.stringify(o,null,2))):(console.log("QR scan: Populating offerInput with:",o),f(JSON.stringify(o,null,2))),ee(l=>[...l,{message:"\u{1F4F1} QR code scanned successfully!",type:"success"}]),_e(!1),!0)}catch{return ke?Oe(s):f(s),ee(l=>[...l,{message:"\u{1F4F1} QR code scanned successfully!",type:"success"}]),_e(!1),!0}},Ds=async()=>{try{Mt(!0),jt(""),He(!1),E(!1),Ie("");let s=await be.current.createSecureOffer();jt(s),He(!0);let o=typeof s=="object"?JSON.stringify(s):s;try{if(typeof window.encodeBinaryToPrefixed=="function"){let u=window.encodeBinaryToPrefixed(o),g=4,w=g,A=Math.max(200,Math.ceil(u.length/g));A<=0&&(A=200),u.length<=A?(w=1,A=u.length):(A=Math.ceil(u.length/g),w=g);let M=`bin_${Date.now()}_${Math.random().toString(36).slice(2)}`,z=[];for(let le=0;le<w;le++){let Ze=le+1,Ve=u.slice(le*A,(le+1)*A);z.push(Ve)}let Ee=typeof window<"u"&&(window.innerWidth||0)>=1024?720:512;if(window.generateQRCode&&z.length>0){let le=await window.generateQRCode(z[0],{errorCorrectionLevel:"M",size:Ee,margin:2});le&&Ie(le)}try{T.current&&T.current.timer&&clearInterval(T.current.timer)}catch{}T.current={timer:null,chunks:z,idx:0,active:!0},pt(z.length),je(1),en(!1);let oe=3e3;T.current.timer=setInterval(Tn,oe);try{E(!0)}catch{}}else{await Ns(s);try{E(!0)}catch{}}}catch(u){console.warn("Offer QR generation failed:",u)}ft.filter(u=>u.type==="system"&&(u.message.includes(a("flow.invitationCreated"))||u.message.includes(a("flow.sendEncryptedCode")))).length===0&&(ee(u=>[...u,{message:a("flow.invitationCreatedBang"),type:"system",id:Date.now(),timestamp:Date.now()}]),ee(u=>[...u,{message:a("flow.sendInvitation"),type:"system",id:Date.now(),timestamp:Date.now()}])),window.isUpdatingSecurity||un().catch(console.error)}catch(s){ee(o=>[...o,{message:`Error creating invitation: ${s.message}`,type:"system",id:Date.now(),timestamp:Date.now()}])}finally{Mt(!1)}},Aa=async()=>{try{if(!Et.trim()){ee(s=>[...s,{message:a("err.needInvitation"),type:"system",id:Date.now(),timestamp:Date.now()}]);return}try{ee(w=>[...w,{message:a("flow.processingInvitation"),type:"system",id:Date.now(),timestamp:Date.now()}]);let s;try{if(typeof window.decodeAnyPayload=="function"){let w=window.decodeAnyPayload(Et.trim());s=typeof w=="string"?JSON.parse(w):w}else{let w=typeof window.decompressIfNeeded=="function"?window.decompressIfNeeded(Et.trim()):Et.trim();s=JSON.parse(w)}}catch(w){throw new Error(`Invalid invitation format: ${w.message}`)}if(!s||typeof s!="object")throw new Error("The invitation must be an object");if(!(s.t==="offer"||s.type==="enhanced_secure_offer"))throw new Error("Invalid invitation type. Expected offer or enhanced_secure_offer");let l=await be.current.createSecureAnswer(s);cn(l),$t(!0);let u=typeof l=="object"?JSON.stringify(l):l;try{if(typeof window.encodeBinaryToPrefixed=="function"){let w=window.encodeBinaryToPrefixed(u),A=4,M=A,z=Math.max(200,Math.ceil(w.length/A));z<=0&&(z=200),w.length<=z?(M=1,z=w.length):(z=Math.ceil(w.length/A),M=A);let xe=`ans_${Date.now()}_${Math.random().toString(36).slice(2)}`,Ee=[];for(let Ve=0;Ve<M;Ve++){let ct=Ve+1,et=w.slice(Ve*z,(Ve+1)*z);Ee.push(et)}let le=typeof window<"u"&&(window.innerWidth||0)>=1024?720:512;if(window.generateQRCode&&Ee.length>0){let Ve=await window.generateQRCode(Ee[0],{errorCorrectionLevel:"M",size:le,margin:2});Ve&&Ie(Ve)}try{T.current&&T.current.timer&&clearInterval(T.current.timer)}catch{}T.current={timer:null,chunks:Ee,idx:0,active:!0},pt(Ee.length),je(1),en(!1);let Ze=3e3;T.current.timer=setInterval(Tn,Ze);try{E(!0)}catch{}}else{await Ns(l);try{E(!0)}catch{}}}catch(w){console.warn("Answer QR generation failed:",w)}typeof Mr=="function"&&Mr(),ft.filter(w=>w.type==="system"&&(w.message.includes(a("flow.responseCreated"))||w.message.includes(a("flow.sendTheResponse")))).length===0&&(ee(w=>[...w,{message:a("flow.responseCreatedBang"),type:"system",id:Date.now(),timestamp:Date.now()}]),ee(w=>[...w,{message:a("flow.sendResponse"),type:"system",id:Date.now(),timestamp:Date.now()}])),window.isUpdatingSecurity||un().catch(console.error)}catch(s){console.error("Error in handleCreateAnswer:",s),ee(o=>[...o,{message:`Error processing the invitation: ${s.message}`,type:"system",id:Date.now(),timestamp:Date.now()}])}}catch(s){console.error("Error in handleCreateAnswer:",s),ee(o=>[...o,{message:`Invitation processing error: ${s.message}`,type:"system",id:Date.now(),timestamp:Date.now()}])}},Ma=async()=>{try{if(!Je.trim()){ee(s=>[...s,{message:a("err.needResponse"),type:"system",id:Date.now(),timestamp:Date.now()}]);return}try{ee(l=>[...l,{message:a("flow.processingResponse"),type:"system",id:Date.now(),timestamp:Date.now()}]);let s;try{if(typeof window.decodeAnyPayload=="function"){let l=window.decodeAnyPayload(Je.trim());s=typeof l=="string"?JSON.parse(l):l}else{let l=typeof window.decompressIfNeeded=="function"?window.decompressIfNeeded(Je.trim()):Je.trim();s=JSON.parse(l)}}catch(l){throw new Error(`Invalid response format: ${l.message}`)}if(!s||typeof s!="object")throw new Error("The response must be an object");let o=s.t||s.type;if(!o||o!=="answer"&&o!=="enhanced_secure_answer")throw new Error("Invalid response type. Expected answer or enhanced_secure_answer");await be.current.handleSecureAnswer(s),Ar&&(Jt(null),ee(l=>[...l,{message:"All security features enabled by default",type:"system",id:Date.now(),timestamp:Date.now()}])),ee(l=>[...l,{message:a("flow.finalizing"),type:"system",id:Date.now(),timestamp:Date.now()}]),window.isUpdatingSecurity||un().catch(console.error)}catch(s){console.error("Error in handleConnect inner try:",s);let o=a("err.setupError");s.message.includes("CRITICAL SECURITY FAILURE")?s.message.includes("ECDH public key structure")?o=a("err.responseNoKey"):s.message.includes("ECDSA public key structure")?o=a("err.responseNoSignKey"):o=a("err.securityValidation"):s.message.includes("too old")||s.message.includes("replay")?o=a("err.responseOutdated"):s.message.includes("MITM")||s.message.includes("signature")?o=a("err.securityBreach"):s.message.includes("Invalid")||s.message.includes("format")?o=a("err.responseFormat"):o=` ${s.message}`,ee(l=>[...l,{message:o,type:"system",id:Date.now(),timestamp:Date.now(),showRetryButton:!0}]),!s.message.includes("too old")&&!s.message.includes("replay")&&(Jt(null),Gt(0)),bt("failed")}}catch(s){console.error("Error in handleConnect outer try:",s);let o=a("err.setupError");s.message.includes("CRITICAL SECURITY FAILURE")?s.message.includes("ECDH public key structure")?o=a("err.responseNoKey"):s.message.includes("ECDSA public key structure")?o=a("err.responseNoSignKey"):o=a("err.securityValidation"):s.message.includes("too old")||s.message.includes("replay")?o=a("err.responseOutdated"):s.message.includes("MITM")||s.message.includes("signature")?o=a("err.securityBreach"):s.message.includes("Invalid")||s.message.includes("format")?o=a("err.responseFormat"):o=`${s.message}`,ee(l=>[...l,{message:o,type:"system",id:Date.now(),timestamp:Date.now(),showRetryButton:!0}]),!s.message.includes("too old")&&!s.message.includes("replay")&&(Jt(null),Gt(0)),bt("failed")}},Ta=async(s,o=!0)=>{if(o){be.current.confirmVerification(s),b(!0);try{if(window.NotificationIntegration&&be.current&&!_t.current){let l=new window.NotificationIntegration(be.current);await l.init(),_t.current=l,l.getStatus().permission==="granted"?ee(g=>[...g,{message:"\u2713 Notifications enabled - you will receive alerts when the tab is inactive",type:"system",id:Date.now(),timestamp:Date.now()}]):ee(g=>[...g,{message:"\u2139 Notifications disabled - you can enable them using the button on the main page",type:"system",id:Date.now(),timestamp:Date.now()}])}else _t.current}catch(l){console.warn("Failed to initialize notifications:",l)}}else ee(l=>[...l,{message:" Verification rejected. The connection is unsafe! Session reset..",type:"system",id:Date.now(),timestamp:Date.now()}]),b(!1),Ne(!1),Le(!1),ln(!1),Lt(""),bt("disconnected"),jt(""),cn(""),f(""),Oe(""),He(!1),$t(!1),Ot(""),tr(null),St(!1),ee([]),Gt(0),Jt(null),document.dispatchEvent(new CustomEvent("disconnected")),Gr()},Na=async()=>{if(!In.trim()||!be.current)return;let s=In.trim(),o=`m_${Date.now().toString(36)}_${Math.random().toString(36).slice(2,8)}`,l=be.current,u=l?.isConnected?.()===!0&&l?.isReconnecting?.()!==!0;if(!u&&l?.isConnected){let g=Yt?"```\n"+s+"\n```":s,w=Date.now(),A={mid:o,ts:w};Kt&&(A.once=!0,A.onceTtl=dn),vt>0&&(A.ttl=vt);let M={mid:o,status:"sent",timestamp:w};vt>0&&(M.expiresAt=w+vt*1e3),Dt(g,"sent",M);let z=m.current.get(r.current);z&&z.outgoing.push({outText:g,meta:A,mid:o}),Xt(""),Yt&&fe(!1),Kt&&Sn(!1);return}if(!u){Dt(a("chat.notSentReason"),"system");return}try{let g=s,w=Yt?"```\n"+g+"\n```":g,A=o,M={mid:A,ts:Date.now()};Kt&&(M.once=!0,M.onceTtl=dn),vt>0&&(M.ttl=vt);let z={mid:A,status:"sending"};vt>0&&(z.expiresAt=Date.now()+vt*1e3),Dt(w,"sent",z);try{await be.current.sendMessage(w,M),ys(A,"delivered")}catch(xe){throw ys(A,"failed"),xe}Xt(""),Yt&&fe(!1),Kt&&Sn(!1)}catch(g){let w=String(g?.message||g);/queued for sending|Data channel not ready/i.test(w)||Dt(`Sending error: ${w}`,"system")}},Da=async(s,o,l)=>{if(!s||!be.current)return;let u=String(s.type||"").toLowerCase(),g="audio/wav";u.startsWith("audio/webm")?g="audio/webm":u.startsWith("audio/mp4")||u.startsWith("audio/x-m4a")?g="audio/mp4":u.startsWith("audio/ogg")&&(g="audio/ogg");let w=g==="audio/mp4"?"m4a":g==="audio/ogg"?"ogg":g==="audio/webm"?"webm":"wav",A=new File([s],`voice-message.${w}`,{type:g}),M=null;try{M=URL.createObjectURL(s)}catch{}let z=be.current?.isReconnecting?.()===!0;if(z||be.current?.isConnected?.()!==!0){if(M)try{URL.revokeObjectURL(M)}catch{}Dt(z?a("err.voiceRestoring"):a("err.voiceNeedsConnection"),"system");return}let Ee={dur:Math.max(1,Math.round(o||0)),bars:Array.isArray(l)?l.map(le=>Math.round(le*1e3)/1e3):[]},oe=Dt("","sent",{voice:{dur:Ee.dur,bars:Ee.bars,url:M,transfer:{dir:"up",pct:0}}});try{await be.current.sendFile(A,{voice:Ee,uiId:oe}),bs(oe,le=>({voice:{...le.voice||{},transfer:null}}))}catch(le){bs(oe,Ve=>({voice:{...Ve.voice||{},transfer:null,error:!0}}));let Ze=String(le?.message||le);/queued for sending|Data channel not ready/i.test(Ze)||Dt(`Voice message failed: ${Ze}`,"system")}},Fa=React.useCallback(s=>{if(s){ee(o=>o.filter(l=>String(l.mid)!==String(s)));try{be.current?.sendMessageDelete?.(String(s))}catch{}}},[]),Pa=React.useCallback(s=>{ee(o=>o.map(l=>l.id===s?{...l,expired:!0,message:"",expiresAt:void 0}:l))},[]),Fs=()=>{jt(""),cn(""),f(""),Oe(""),He(!1),Mt(!1),ms()||$t(!1),ln(!1),E(!1),Z(!1),_e(!1),G.current={id:null,total:0,seen:new Set,items:[]},ms()||Ie(""),Lt(""),St(!1),Ot(""),tr(null),bt("disconnected"),ee([]),Xt(""),b(!1),Ne(!1),Le(!1),typeof console.clear=="function"&&console.clear(),Gt(0),Jt(null),document.dispatchEvent(new CustomEvent("peer-disconnect"))},Oa=React.useCallback(async(s,o)=>{try{o?await be.current?.acceptIncomingFile(s):await be.current?.rejectIncomingFile(s)}finally{Bt(l=>l.filter(u=>u.fileId!==s))}},[]),Gr=()=>{try{let s=r.current;Qi(),Gt(0),document.dispatchEvent(new CustomEvent("peer-disconnect")),document.dispatchEvent(new CustomEvent("disconnected")),document.dispatchEvent(new CustomEvent("session-cleanup",{detail:{timestamp:Date.now(),reason:"manual_disconnect"}})),Fr(s),typeof console.clear=="function"&&console.clear()}catch(s){console.error("Error during disconnect:",s)}},lc=s=>{let o;s.type==="demo"?o=" Demo session activated for 6 minutes. You can create invitations!":o=" All security features enabled by default. You can create invitations!",Dt(o,"system")},Ps=React.useRef(Fe);React.useEffect(()=>{let s=Ps.current==="reconnecting";Ps.current=Fe,Fe==="connected"&&gt&&!s&&Dt(" Secure connection successfully established and verified! You can now communicate safely with full protection against MITM attacks and Perfect Forward Secrecy..","system")},[Fe,gt]);let Hr=React.useMemo(()=>{try{return new URLSearchParams(window.location.search).get("preview")==="chat"}catch{return!1}},[]),wt=(Fe==="connected"||Fe==="verified"||Fe==="reconnecting")&&gt,Os=React.useRef({id:n,live:wt});React.useEffect(()=>{let s=Os.current;Os.current={id:n,live:wt},s.live&&!wt&&s.id===n&&Qi()},[wt,n]),React.useEffect(()=>(document.body.classList.toggle("sb-in-chat",wt||Hr),()=>document.body.classList.remove("sb-in-chat")),[wt,Hr]),React.useEffect(()=>{wt&&Ar&&Fe!=="failed"&&(Jt(null),Gt(0),Dt(" All security features enabled by default","system"))},[wt,Ar,Fe]),React.useEffect(()=>{if(Se&&window.Html5Qrcode){let s=new window.Html5Qrcode("qr-reader"),o={fps:10},l=!0;return s.start({facingMode:"environment"},o,(u,g)=>{if(!l){console.log("Scanner stopped, ignoring scan");return}console.log("QR Code scanned:",u),console.log("Current buffer state:",G.current),Ia(u).then(w=>{if(console.log("QR scan result:",w),w){console.log("Closing scanner and modal"),l=!1;try{console.log("Stopping scanner..."),s.stop().then(()=>{console.log("Scanner stopped, clearing..."),s.clear(),_e(!1)}).catch(A=>{console.log("Error stopping scanner:",A);try{s.clear()}catch(M){console.log("Error clearing scanner:",M)}_e(!1)})}catch(A){console.log("Error in scanner cleanup:",A),_e(!1)}}else console.log("Continuing to scan for more chunks...")}).catch(w=>{console.error("QR scan processing error:",w)})},u=>{l&&console.log("QR scan error (ignored):",u)}).catch(u=>{console.error("QR Scanner start error:",u),_e(!1)}),()=>{l=!1;try{s.stop().then(()=>{s.clear()}).catch(u=>{console.log("Scanner already stopped or error stopping:",u);try{s.clear()}catch(g){console.log("Error clearing scanner in cleanup:",g)}})}catch(u){console.log("Error in cleanup:",u);try{s.clear()}catch(g){console.log("Error clearing scanner in cleanup:",g)}}}}},[Se,ot]);let La=ci(t),Ba=Ti(S),Ht=t.order.length>1||S.order.length>0||t.order.some(s=>{let o=t.sessions[s];return o&&o.sas&&o.sas.isVerified});if(Hr){let s=[{message:"Preview mode \u2014 no connection is open.",type:"system",id:1,timestamp:Date.now()-3e5},{message:"This renders the real chat components so the layout can be checked without a handshake.",type:"received",id:2,timestamp:Date.now()-24e4},{message:"Header pinned, list scrolls, composer sits above the keyboard.",type:"sent",id:3,timestamp:Date.now()-18e4},...Array.from({length:30},(l,u)=>({message:"Filler message "+(u+1)+" \u2014 enough content to make the list scroll.",type:u%2?"sent":"received",id:10+u,timestamp:Date.now()-(30-u)*5e3}))],o=()=>{};return React.createElement("div",{className:"minimal-bg sb-app-shell",style:{display:"flex",flexDirection:"row",height:"100vh",width:"100%",overflow:"hidden"}},[React.createElement(Zi,{key:"sidebar",chats:[{id:"preview",label:"Preview peer",unread:0,active:!0,verified:!0}],collapsed:sr,drawerOpen:Rs,onToggleCollapse:()=>Es(l=>!l),onSelect:o,onNewChat:o,onRename:o,onCloseDrawer:()=>Zt(!1),myStatus:Ct,onSetStatus:Jn}),React.createElement("button",{key:"burger",className:"sb-burger",onClick:()=>Zt(!0),style:{display:"none",position:"fixed",top:"calc(13px + var(--sb-safe-top, 0px))",insetInlineStart:"13px",zIndex:55,width:"38px",height:"38px",borderRadius:"10px",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-bg-rgb), 0.9)",color:"var(--sb-text-4)",cursor:"pointer"},dangerouslySetInnerHTML:{__html:an.burger}}),React.createElement("div",{key:"col",className:"minimal-bg sb-app-col",style:{flex:1,minWidth:0,height:"100vh",overflow:"hidden",display:"flex",flexDirection:"column"}},React.createElement("main",{key:"main"},React.createElement(Ji,{title:"Preview peer",isOffline:!1,peerPresence:"available",onRenameTitle:o,messages:s,messageInput:In,setMessageInput:Xt,onSendMessage:o,onSendVoice:o,onDisconnect:o,keyFingerprint:"preview",isVerified:!0,chatMessagesRef:An,scrollToBottom:o,webrtcManager:null,status:"connected",pendingIncomingFiles:[],onIncomingDecision:o,codeMode:Yt,setCodeMode:fe,viewOnceMode:Kt,setViewOnceMode:Sn,viewOnceTtl:dn,setViewOnceTtl:Zn,disappearTtl:vt,setDisappearTtl:Ut,nowTick:pn,onUnsendMessage:o,onMessageExpire:o})))])}return React.createElement("div",{className:Ht?"minimal-bg sb-app-shell":"minimal-bg",style:Ht?{display:"flex",flexDirection:"row",height:"100vh",width:"100%",overflow:"hidden"}:{minHeight:"100vh"}},[Ht&&React.createElement(Zi,{key:"sessions-sidebar",chats:La,groups:Ba,collapsed:sr,drawerOpen:Rs,onToggleCollapse:()=>Es(s=>!s),onSelect:s=>{p({type:ge.SET_ACTIVE_GROUP,id:null}),sa(s)},onSelectGroup:oa,onNewChat:ia,onNewGroup:()=>{pe(!0),Zt(!1)},onRename:aa,onCloseDrawer:()=>Zt(!1),myStatus:Ct,onSetStatus:Jn}),te&&React.createElement(Bi,{key:"create-group",candidates:Or,relayOnly:Tt,onCreate:ca,onCancel:()=>pe(!1)}),F&&React.createElement(Gi,{key:"group-invite",invite:{name:F.name,fromLabel:t.sessions[F.sessionId]?.peerLabel||"A verified contact"},onAccept:la,onDecline:()=>V(null)}),P&&React.createElement(zi,{key:"group-error",message:P,onDismiss:()=>O(null)}),$&&I&&React.createElement(Ui,{key:"add-members",candidates:ua,remaining:Math.max(0,D.MAX_MEMBERS-I.members.length),onAdd:fa,onCancel:()=>Q(!1)}),ve&&I&&React.createElement(Li,{key:"group-sas",group:I,onConfirm:da,onCancel:()=>{I.phase===Y.READY?C(!1):ir(I.id)}}),Ht&&React.createElement("button",{key:"sb-burger",className:"sb-burger",onClick:()=>Zt(!0),style:{display:"none",position:"fixed",top:"calc(13px + var(--sb-safe-top, 0px))",insetInlineStart:"13px",zIndex:55,width:"38px",height:"38px",borderRadius:"10px",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-bg-rgb), 0.9)",color:"var(--sb-text-4)",cursor:"pointer"},dangerouslySetInnerHTML:{__html:an.burger}}),React.createElement("div",{key:"app-column",className:Ht?"minimal-bg sb-app-col":"minimal-bg min-h-screen",style:Ht?{flex:1,minWidth:0,height:"100vh",overflow:"hidden",display:"flex",flexDirection:"column"}:{}},[!wt&&!Ht&&window.EnhancedMinimalHeader&&React.createElement(window.EnhancedMinimalHeader,{key:"header",status:Fe,fingerprint:ht,verificationCode:xt,onDisconnect:Gr,isConnected:wt,securityLevel:Ir,webrtcManager:be.current}),!wt&&!Ht&&React.createElement(ps,{key:"lang-suggest"}),I&&React.createElement("main",{key:"group-main",style:{flex:1,minHeight:0,display:"flex",flexDirection:"column"}},React.createElement(Hi,{group:I,input:N,setInput:ae,onSend:pa,onLeave:()=>ir(I.id),onRemoveMember:ha,onAddMembers:()=>Q(!0),isAdmin:I.isAdmin,scrollRef:H,onStartCall:ga,callActive:!!re[I.id],callOverlay:(()=>{let s=re[I.id]||null;if(!s||!s.joined&&ne[I.id]===s.callId)return null;let o=ue[I.id]||null;return React.createElement(us,{key:"group-call",call:s,media:o,groupName:I.name,localStream:j.current.get(I.id)?.getLocalStream()||null,getRemoteStream:l=>j.current.get(I.id)?.getRemoteStream(l)||null,onJoin:ma,onDismiss:ya,onLeave:ba,onToggleMic:xa,onToggleCamera:va,onFlipCamera:wa})})()})),!I&&React.createElement("main",{key:"main"},wt?React.createElement(Ji,{title:i?i.peerLabel:"",isOffline:at,peerPresence:i?i.peerPresence:null,onRenameTitle:s=>{n&&e({type:X.RENAME,id:n,label:s})},messages:ft,messageInput:In,setMessageInput:Xt,onSendMessage:Na,onSendVoice:Da,onDisconnect:Gr,keyFingerprint:ht,isVerified:gt,chatMessagesRef:An,scrollToBottom:rr,webrtcManager:be.current,status:Fe,pendingIncomingFiles:Ge,onIncomingDecision:Oa,codeMode:Yt,setCodeMode:fe,viewOnceMode:Kt,setViewOnceMode:Sn,viewOnceTtl:dn,setViewOnceTtl:Zn,disappearTtl:vt,setDisappearTtl:Ut,nowTick:pn,onUnsendMessage:Fa,onMessageExpire:Pa}):React.createElement(Xo,{onCreateOffer:Ds,onCreateAnswer:Aa,onConnect:Ma,onClearData:Fs,onVerifyConnection:Ta,connectionStatus:Fe,offerData:on,answerData:On,offerInput:Et,setOfferInput:f,answerInput:Je,setAnswerInput:Oe,showOfferStep:ke,showAnswerStep:We,verificationCode:xt,showVerification:Pe,showQRCode:qt,qrCodeUrl:me,showQRScanner:U,setShowQRCode:E,setShowQRScanner:Z,setShowQRScannerModal:_e,messages:ft,localVerificationConfirmed:Vt,remoteVerificationConfirmed:J,bothVerificationsConfirmed:qe,qrFramesTotal:zr,qrFrameIndex:Sa,qrManualMode:Gn,toggleQrManualMode:Ea,nextQrFrame:Ra,prevQrFrame:_a,markAnswerCreated:Mr,notificationIntegrationRef:_t,isGeneratingKeys:Rt,setIsGeneratingKeys:Mt,handleCreateOffer:Ds,relayOnlyMode:Tt,setRelayOnlyMode:En,webrtcManagerRef:be,showIceSettings:Rr,setShowIceSettings:zn,iceServersText:Er,iceSettingsPersisted:_n,customIceServers:Nt,handleApplyIceSettings:_r,handleForgetIceSettings:Cr,compact:Ht})),Se&&(()=>{let s=()=>{_e(!1),G.current={id:null,total:0,seen:new Set,items:[]}},o=G.current,u=!!(o&&o.id&&o.total>1)?`Scanning frames\u2026 ${o.seen.size} / ${o.total}`:a("qr.scanning"),g=(w,A)=>React.createElement("span",{key:w,style:Object.assign({position:"absolute",width:"34px",height:"34px",zIndex:3},A)});return React.createElement("div",{key:"qr-scanner-modal",onClick:s,style:{position:"fixed",inset:0,zIndex:50,display:"flex",alignItems:"center",justifyContent:"center",padding:"32px",background:"rgba(var(--sb-scrim-rgb), 0.82)",backdropFilter:"blur(10px)",WebkitBackdropFilter:"blur(10px)",animation:"sbUp .2s ease"}},[React.createElement("div",{key:"scanner-container",onClick:w=>w.stopPropagation(),style:{width:"100%",maxWidth:"420px",borderRadius:"22px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"var(--sb-bg)",boxShadow:"0 30px 90px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))",overflow:"hidden"}},[React.createElement("div",{key:"scanner-header",style:{display:"flex",alignItems:"center",gap:"11px",padding:"18px 20px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[React.createElement("span",{key:"scanner-icon",style:{display:"flex"},dangerouslySetInnerHTML:{__html:'<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="var(--sb-green-solid)" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M2 8.5V6.5A2.5 2.5 0 0 1 4.5 4h2M17.5 4h2A2.5 2.5 0 0 1 22 6.5v2M22 15.5v2a2.5 2.5 0 0 1-2.5 2.5h-2M6.5 20h-2A2.5 2.5 0 0 1 2 17.5v-2"/><circle cx="12" cy="12" r="3.2"/></svg>'}}),React.createElement("div",{key:"scanner-titles",style:{flex:1,lineHeight:1.2}},[React.createElement("div",{key:"scanner-title",style:{fontSize:"15.5px",fontWeight:800,color:"var(--sb-text-1)"}},a("qr.title")),React.createElement("div",{key:"scanner-hint",style:{fontSize:"12px",color:"var(--sb-text-8)"}},a("qr.subtitle"))]),React.createElement("button",{key:"close-btn",onClick:s,style:{width:"32px",height:"32px",display:"grid",placeItems:"center",borderRadius:"9px",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-6)",cursor:"pointer"}},React.createElement("i",{className:"fas fa-times"}))]),React.createElement("div",{key:"scanner-body",style:{padding:"22px 24px 24px"}},[React.createElement("div",{key:"viewfinder",style:{position:"relative",aspectRatio:"1",borderRadius:"18px",overflow:"hidden",background:"#000",border:"1px solid rgba(var(--sb-ink), 0.1)"}},[React.createElement("div",{key:"vf-bg",style:{position:"absolute",inset:0,background:"radial-gradient(circle at 50% 45%, var(--sb-surface-2), #000)"}}),React.createElement("div",{key:"qr-reader",id:"qr-reader",style:{position:"absolute",inset:0,zIndex:1}}),g("c-tl",{top:"18px",insetInlineStart:"18px",borderTop:"2.5px solid var(--sb-green-solid)",borderInlineStart:"2.5px solid var(--sb-green-solid)",borderRadius:"8px 0 0 0"}),g("c-tr",{top:"18px",insetInlineEnd:"18px",borderTop:"2.5px solid var(--sb-green-solid)",borderInlineEnd:"2.5px solid var(--sb-green-solid)",borderRadius:"0 8px 0 0"}),g("c-bl",{bottom:"18px",insetInlineStart:"18px",borderBottom:"2.5px solid var(--sb-green-solid)",borderInlineStart:"2.5px solid var(--sb-green-solid)",borderRadius:"0 0 0 8px"}),g("c-br",{bottom:"18px",insetInlineEnd:"18px",borderBottom:"2.5px solid var(--sb-green-solid)",borderInlineEnd:"2.5px solid var(--sb-green-solid)",borderRadius:"0 0 8px 0"}),React.createElement("span",{key:"scan-line",style:{position:"absolute",left:"18px",right:"18px",height:"2.5px",zIndex:2,background:"linear-gradient(90deg, transparent, var(--sb-green), transparent)",boxShadow:"0 0 16px var(--sb-green)",animation:"sbScan 1.5s ease-in-out infinite alternate"}}),React.createElement("div",{key:"scan-status",style:{position:"absolute",bottom:0,left:0,right:0,zIndex:3,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"14px",background:"linear-gradient(transparent, rgba(0,0,0,0.6))"}},[React.createElement("span",{key:"spinner",style:{display:"flex",animation:"sbSpin 1.4s linear infinite"},dangerouslySetInnerHTML:{__html:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="var(--sb-green-solid)" stroke-width="2" stroke-linecap="round"><path d="M21 12a9 9 0 1 1-6.2-8.6"/></svg>'}}),React.createElement("span",{key:"scan-frames",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-4)"}},u)])]),React.createElement("p",{key:"scanner-note",style:{margin:"16px 0 0",textAlign:"center",fontSize:"12px",lineHeight:1.5,color:"var(--sb-text-9)"}},a("qr.hint"))])])])})()])])},tc=({children:t})=>typeof window<"u"&&window.UpdateChecker?React.createElement(window.UpdateChecker,{debug:!1},t):t;function nc(){if(window.EnhancedSecureCryptoUtils&&window.EnhancedSecureWebRTCManager){let t=React.createElement(tc,null,React.createElement(gs));ReactDOM.render(t,document.getElementById("root"))}else console.error("\u041C\u043E\u0434\u0443\u043B\u0438 \u043D\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043D\u044B:",{hasCrypto:!!window.EnhancedSecureCryptoUtils,hasWebRTC:!!window.EnhancedSecureWebRTCManager})}typeof window<"u"&&(window.addEventListener("unhandledrejection",t=>{console.error("Unhandled promise rejection:",t.reason),t.preventDefault()}),window.addEventListener("error",t=>{console.error("Global error:",t.error),t.preventDefault()}),window.initializeApp||(window.initializeApp=nc));if(window.EnhancedSecureCryptoUtils&&window.EnhancedSecureWebRTCManager){let t=({children:n})=>typeof window<"u"&&window.UpdateChecker?React.createElement(window.UpdateChecker,{debug:!1},n):n,e=React.createElement(t,null,React.createElement(gs));ReactDOM.render(e,document.getElementById("root"))}else ReactDOM.render(React.createElement(gs),document.getElementById("root"));
+                  </div>`;let P=z=>{z.key==="Escape"&&j()},j=()=>{C.parentNode&&C.remove(),document.removeEventListener("keydown",P)};C.querySelector(".sv-close").addEventListener("click",j),C.addEventListener("click",z=>{z.target===C&&j()}),document.addEventListener("keydown",P);let O=C.querySelector(".sv-rerun");O.addEventListener("mouseenter",()=>{O.style.borderColor="rgba(var(--sb-orange-rgb), 0.45)",O.style.color="var(--sb-orange)"}),O.addEventListener("mouseleave",()=>{O.style.borderColor="rgba(var(--sb-ink), 0.1)",O.style.color="var(--sb-text-4)"}),O.addEventListener("click",()=>{j(),ia(t)}),document.body.appendChild(C)},nc=({status:t,onDisconnect:e,webrtcManager:n,title:r,isOffline:i,peerPresence:c,onRenameTitle:d})=>{let h="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",[m,v]=React.useState(!1),[S,p]=React.useState(null),[k,y]=React.useState(!1),[I,B]=React.useState("");React.useEffect(()=>{let q=!0,xe=async()=>{try{if(!n)return;let Ee=null;typeof n.getRealSecurityLevel=="function"?Ee=await n.getRealSecurityLevel():typeof n.calculateAndReportSecurityLevel=="function"?Ee=await n.calculateAndReportSecurityLevel():window.EnhancedSecureCryptoUtils&&(Ee=await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(n)),q&&Ee&&Ee.isRealData!==!1&&p(Ee)}catch{}};xe();let Fe=Ee=>{q&&Ee.detail&&Ee.detail.securityData&&p(Ee.detail.securityData)};document.addEventListener("real-security-calculated",Fe);let at=setInterval(xe,15e3);return()=>{q=!1,clearInterval(at),document.removeEventListener("real-security-calculated",Fe)}},[n]);let D=t==="connected"||t==="verified",le=t==="disconnected"||t==="peer_disconnected",ee=D&&!i,ge=i||le?"var(--sb-red-solid)":D?"var(--sb-green-solid)":"var(--sb-yellow-solid)",we=i?a("chat.offline"):D?a("status.connected"):t==="peer_disconnected"?a("status.peerDisconnected"):t==="disconnected"?a("chat.disconnected"):a("status.connecting"),C=i||le?"0 0 0 3px rgba(var(--sb-red-rgb), 0.16)":D?"0 0 0 3px rgba(var(--sb-green-rgb), 0.16)":"0 0 0 3px rgba(var(--sb-yellow-rgb), 0.16)",P=D&&!i?ds[c]||"var(--sb-green-solid)":ge,j=D&&!i&&c&&ps[c]||null,O=()=>{B(r||""),y(!0)},z=()=>{typeof d=="function"&&d(I),y(!1)},Q=q=>{q.key==="Enter"?(q.preventDefault(),z()):q.key==="Escape"&&y(!1)},X=S&&Number.isFinite(S.passedChecks)?S.passedChecks:null,W=S&&Number.isFinite(S.totalChecks)?S.totalChecks:null,se=q=>{if(!q)return q;let xe=a(`secLevel.${q}`);return xe===`secLevel.${q}`?q:xe},ce=X!=null&&W?X+"/"+W:S?S.score+"%":"\u2014",me=S?S.color==="green"?"var(--sb-green)":S.color==="orange"?"var(--sb-orange)":S.color==="yellow"?"var(--sb-yellow)":"var(--sb-red)":"var(--sb-green)",L=React.createElement("div",{key:"sec",title:a("sas.runVerification"),onClick:()=>ia(n),className:"sb-secpill",style:{display:"flex",alignItems:"center",gap:"9px",padding:"7px 13px",borderRadius:"9px",border:"1px solid "+(m?"rgba(var(--sb-ink), 0.16)":"rgba(var(--sb-ink), 0.07)"),background:m?"rgba(var(--sb-ink), 0.05)":"rgba(var(--sb-ink), 0.02)",cursor:"pointer",fontFamily:"inherit",transition:"all .15s"}},[React.createElement("i",{key:"i",className:"fas fa-shield-halved",style:{color:me,fontSize:"13px"}}),React.createElement("span",{key:"l",className:"sb-sec-label",style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-2)"}},S?se(S.level)||a("chatHdr.secure"):a("chatHdr.secure")),React.createElement("span",{key:"d",className:"sb-sec-div",style:{width:"1px",height:"13px",background:"rgba(var(--sb-ink), 0.12)"}}),React.createElement("span",{key:"s",className:"sb-sec-score",style:{fontFamily:h,fontSize:"11.5px",fontWeight:500,color:"var(--sb-text-7)"}},ce),React.createElement("button",{key:"c",type:"button",title:a("sec.panelTitle"),onClick:q=>{q.stopPropagation(),v(xe=>!xe)},style:{background:"none",border:"none",padding:0,margin:0,cursor:"pointer",display:"grid",placeItems:"center"}},React.createElement("i",{className:"fas fa-chevron-down",style:{color:"var(--sb-text-9)",fontSize:"11px",transform:m?"rotate(180deg)":"rotate(0deg)",transition:"transform .2s"}}))]),$=React.createElement("style",{key:"hdr-css",dangerouslySetInnerHTML:{__html:".sb-call-btn:not(.sb-call-off):hover{border-color:rgba(var(--sb-green-rgb), 0.45) !important;color:var(--sb-green) !important;background:rgba(var(--sb-green-rgb), 0.07) !important;}@media (max-width:768px){.sb-chat-header{padding-inline-start:58px !important;gap:8px !important;}.sb-chat-header .sb-secpill{display:none !important;}.sb-chat-header .sb-conn-text{display:none !important;}.sb-chat-header .sb-conn{padding:9px !important;}.sb-chat-header .sb-hdr-sub{display:none !important;}.sb-chat-header .sb-disconnect{width:40px !important;height:40px !important;padding:0 !important;gap:0 !important;justify-content:center !important;border-radius:9px !important;color:var(--sb-red) !important;border-color:rgba(var(--sb-red-rgb), 0.28) !important;}.sb-chat-header .sb-disconnect .sb-hide-sm{display:none !important;}}@media (max-width:600px){.sb-chips{flex-wrap:nowrap !important;justify-content:flex-start !important;overflow-x:auto;-webkit-overflow-scrolling:touch;scrollbar-width:none;}.sb-chips::-webkit-scrollbar{display:none;}.sb-chips>*{flex:0 0 auto !important;}.sb-chips .sb-chips-right{flex-wrap:nowrap !important;}.sb-chips .sb-chip{white-space:nowrap;}}@media (max-width:480px){.sb-chat-header{padding-inline-end:12px !important;}}"}}),ne=React.createElement("header",{key:"hdr",className:"sb-chat-header",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"space-between",gap:"24px",padding:"var(--sb-safe-top, 0px) 20px var(--sb-bar-extra, 0px)",minHeight:"calc(var(--sb-bar-h, 64px) + var(--sb-safe-top, 0px) + var(--sb-bar-extra, 0px))",boxSizing:"border-box",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(var(--sb-bg-rgb), 0.72)",backdropFilter:"blur(14px)",WebkitBackdropFilter:"blur(14px)"}},[$,React.createElement("div",{key:"left",style:{display:"flex",alignItems:"center",gap:"12px",minWidth:0}},[React.createElement("div",{key:"avatar",style:{position:"relative",flex:"none",width:"36px",height:"36px",borderRadius:"10px",display:"grid",placeItems:"center",background:"rgba(var(--sb-ink), 0.05)",border:"1px solid rgba(var(--sb-ink), 0.09)",fontSize:"13px",fontWeight:700,letterSpacing:"-0.3px",color:"var(--sb-text-2)"}},[Ar(r||a("chatHdr.chat")),React.createElement("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:P,border:"2px solid var(--sb-bg)"}})]),k?React.createElement("div",{key:"edit",style:{display:"flex",flexDirection:"column",gap:"4px",minWidth:0}},[React.createElement("div",{key:"row",style:{display:"flex",alignItems:"center",gap:"6px"}},[React.createElement("input",{key:"in",autoFocus:!0,value:I,maxLength:32,placeholder:a("chat.nameThis"),onChange:q=>B(q.target.value),onKeyDown:Q,onBlur:z,style:{width:"210px",padding:"5px 10px",borderRadius:"8px",border:"1px solid rgba(var(--sb-orange-rgb), 0.55)",background:"var(--sb-bg)",color:"var(--sb-text-1)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,outline:"none"}}),React.createElement("button",{key:"ok",onMouseDown:q=>q.preventDefault(),onClick:z,title:a("chatHdr.save"),style:{flex:"none",width:"28px",height:"28px",borderRadius:"8px",display:"grid",placeItems:"center",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",cursor:"pointer"}},React.createElement("i",{className:"fas fa-check",style:{fontSize:"12px"}}))]),React.createElement("div",{key:"hint",style:{fontSize:"11px",color:"var(--sb-text-faint)"}},a("chat.localLabel"))]):React.createElement("div",{key:"txt",style:{lineHeight:1.2,minWidth:0}},[React.createElement("div",{key:"r1",style:{display:"flex",alignItems:"center",gap:"7px"}},[React.createElement("span",{key:"n",style:{fontSize:"15px",fontWeight:800,letterSpacing:"-0.3px",color:"var(--sb-text-1)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},r||a("chat.secureChat")),React.createElement("button",{key:"edit",className:"sb-rename-btn",onClick:O,title:a("chat.rename"),style:{flex:"none",width:"24px",height:"24px",borderRadius:"7px",display:"grid",placeItems:"center",border:"none",background:"transparent",color:"var(--sb-text-faint)",cursor:"pointer"}},React.createElement("i",{className:"fas fa-pen",style:{fontSize:"11px"}}))]),React.createElement("div",{key:"r2",className:"sb-hdr-sub",style:{fontSize:"11px",color:"var(--sb-text-9)",fontWeight:500,whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},i?a("chat.noNetwork"):t==="reconnecting"?a("flow.restoring"):j||(D?a("chatHdr.p2pSub"):t==="peer_disconnected"?a("status.peerDisconnected"):t==="disconnected"?a("chat.disconnected"):a("status.connecting")))])]),L,React.createElement("div",{key:"right",className:"sb-hdr-right",style:{display:"flex",alignItems:"center",gap:"9px"}},[...(()=>{let q=ee&&n&&n.isVerified===!0,xe=Je=>{if(!(!q||!n))try{let ot=n.startCall(Je);ot&&ot.catch&&ot.catch(()=>{})}catch{}},Fe={width:"40px",height:"40px",borderRadius:"9px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"rgba(var(--sb-ink), 0.02)",color:q?"var(--sb-text-6)":"var(--sb-surface-5)",cursor:q?"pointer":"not-allowed",transition:"all .15s"};return[React.createElement("button",{key:"call-audio",className:q?"sb-call-btn":"sb-call-btn sb-call-off",disabled:!q,onClick:()=>xe(!1),title:q?a("chat.startVoiceCall"):a("chat.verifyForCalls"),style:Fe,dangerouslySetInnerHTML:{__html:'<svg width="17" height="17" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z"/></svg>'}}),React.createElement("button",{key:"call-video",className:q?"sb-call-btn":"sb-call-btn sb-call-off",disabled:!q,onClick:()=>xe(!0),title:q?a("chat.startVideoCall"):a("chat.verifyForCalls"),style:Fe,dangerouslySetInnerHTML:{__html:'<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M23 7l-7 5 7 5V7z"/><rect x="1" y="5" width="15" height="14" rx="2.5"/></svg>'}})]})(),React.createElement("div",{key:"conn",className:"sb-conn",style:{display:"flex",alignItems:"center",gap:"8px",padding:"8px 13px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"rgba(var(--sb-ink), 0.02)"}},[React.createElement("span",{key:"dot",style:{flex:"none",width:"7px",height:"7px",borderRadius:"50%",background:ge,boxShadow:C}}),React.createElement("span",{key:"t",className:"sb-conn-text",style:{fontSize:"13px",fontWeight:600,color:"var(--sb-text-4)"}},we)]),React.createElement("button",{key:"dc",onClick:e,className:"sb-disconnect",style:{display:"flex",alignItems:"center",gap:"7px",padding:"8px 14px",borderRadius:"9px",border:"1px solid rgba(var(--sb-ink), 0.08)",background:"transparent",color:"var(--sb-text-6)",fontFamily:"inherit",fontSize:"13px",fontWeight:600,cursor:"pointer",transition:"all .15s"}},[React.createElement("i",{key:"i",className:"fas fa-power-off",style:{fontSize:"12px"}}),React.createElement("span",{key:"t",className:"sb-hide-sm"},a("hdr.disconnect"))])])]),Me=m&&React.createElement("div",{key:"net",style:{flex:"none",padding:"13px 20px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(var(--sb-bg-rgb), 0.72)",backdropFilter:"blur(14px)",WebkitBackdropFilter:"blur(14px)"}},React.createElement("div",{style:{maxWidth:"1000px",margin:"0 auto",display:"grid",gridTemplateColumns:"repeat(auto-fit,minmax(140px,1fr))",gap:"14px",fontFamily:h}},[[a("sec.transport"),"WebRTC \xB7 DTLS"],[a("sec.cipher"),"AES-256-GCM"],[a("sec.keyExchange"),"ECDH P-384"],[a("sec.security"),ce+(S?" \xB7 "+S.score+"%":"")]].map(([q,xe],Fe)=>React.createElement("div",{key:"nf"+Fe},[React.createElement("div",{key:"k",style:{fontSize:"10px",color:"var(--sb-text-9)",textTransform:"uppercase",letterSpacing:"0.6px",marginBottom:"4px"}},q),React.createElement("div",{key:"v",style:{fontSize:"12.5px",color:Fe===3?me:"var(--sb-text-4)",fontWeight:500}},xe)]))));return React.createElement("div",{style:{flex:"none"}},[ne,Me])},na=({title:t,isOffline:e,peerPresence:n,onRenameTitle:r,messages:i,messageInput:c,setMessageInput:d,onSendMessage:h,onSendVoice:m,onDisconnect:v,keyFingerprint:S,isVerified:p,chatMessagesRef:k,scrollToBottom:y,webrtcManager:I,status:B,pendingIncomingFiles:D=[],onIncomingDecision:le,codeMode:ee,setCodeMode:ge,viewOnceMode:we,setViewOnceMode:C,viewOnceTtl:P,setViewOnceTtl:j,disappearTtl:O,setDisappearTtl:z,nowTick:Q,onUnsendMessage:X,onMessageExpire:W})=>{let[se,ce]=React.useState(!1),[me,L]=React.useState(!1),[$,ne]=React.useState(!1),[Me,q]=React.useState(!1),[xe,Fe]=React.useState(!1),[at,Ee]=React.useState(!1),[Je,ot]=React.useState(!1),[wt,$t]=React.useState(()=>typeof window<"u"&&!!window.matchMedia&&window.matchMedia("(min-width:1024px)").matches);React.useEffect(()=>{if(typeof window>"u"||!window.matchMedia)return;let E=window.matchMedia("(min-width:1024px)"),ie=()=>$t(E.matches);try{E.addEventListener("change",ie)}catch{E.addListener(ie)}return()=>{try{E.removeEventListener("change",ie)}catch{E.removeListener(ie)}}},[]);let kt=React.useRef(null);React.useEffect(()=>{let E=kt.current;!E||ee||(E.style.height="auto",E.style.height=Math.min(E.scrollHeight,240)+"px")},[c,ee]),React.useEffect(()=>{D.length>0&&L(!0)},[D.length]);let Re=React.useRef(!0);React.useEffect(()=>{let E=typeof window<"u"?window.visualViewport:null;if(!E)return;let ie=()=>{if(!Re.current)return;let _e=k.current;_e&&(_e.scrollTop=_e.scrollHeight)},ue=()=>{requestAnimationFrame(ie),setTimeout(ie,300)};return E.addEventListener("resize",ue),()=>E.removeEventListener("resize",ue)},[k]),React.useEffect(()=>{if(k.current&&i.length>0){let{scrollTop:E,scrollHeight:ie,clientHeight:ue}=k.current;if(ie-E-ue<100){let Nt=()=>{k.current&&k.current.scrollTo({top:k.current.scrollHeight,behavior:Ur()})};Nt(),setTimeout(Nt,50),setTimeout(Nt,150)}}},[i,k]);let yt=()=>{if(k.current){let{scrollTop:E,scrollHeight:ie,clientHeight:ue}=k.current,_e=ie-E-ue<100;Re.current=_e,ce(!_e)}},te=()=>{Re.current=!0,typeof y=="function"?(y(),ce(!1)):k.current&&(k.current.scrollTo({top:k.current.scrollHeight,behavior:Ur()}),ce(!1))},Ne=E=>{E.key==="Enter"&&(ee?(E.metaKey||E.ctrlKey)&&(E.preventDefault(),h()):E.shiftKey||(E.preventDefault(),h()))},St=()=>{if(!I)return!1;let E=I.isConnected?I.isConnected():!1,ie=I.isVerified||!1,ue=I.dataChannel&&I.dataChannel.readyState==="open";return E&&ie&&ue},bt="'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace",Gt=E=>E?E>=86400&&E%86400===0?E/86400+"d":E>=3600&&E%3600===0?E/3600+"h":E>=60?Math.round(E/60)+"m":E+"s":"",Et=E=>({display:"flex",alignItems:"center",gap:"6px",padding:"7px 11px",borderRadius:"8px",border:"1px solid "+(E?"rgba(var(--sb-ink), 0.18)":"rgba(var(--sb-ink), 0.07)"),background:E?"rgba(var(--sb-ink), 0.06)":"transparent",color:E?"#fff":"var(--sb-text-6)",fontFamily:"inherit",fontSize:"12.5px",fontWeight:600,cursor:"pointer",transition:"all .15s"}),Ht=E=>({padding:"6px 12px",borderRadius:"8px",border:"1px solid "+(E?"rgba(var(--sb-ink), 0.22)":"rgba(var(--sb-ink), 0.07)"),background:E?"rgba(var(--sb-ink), 0.07)":"transparent",color:E?"#fff":"var(--sb-text-7)",fontFamily:bt,fontSize:"12px",fontWeight:500,cursor:"pointer",transition:"all .14s"}),xt=[{label:a("msg.off"),v:0},{label:"5s",v:5},{label:"30s",v:30},{label:"1m",v:60},{label:"1h",v:3600},{label:"24h",v:86400}],Wt=[{label:a("msg.off"),v:0},{label:"5s",v:5},{label:"10s",v:10},{label:"30s",v:30},{label:"1m",v:60}],qt=we?P:0,b=E=>{z(E),q(!1)},Z=E=>{E===0?C(!1):(j(E),C(!0)),Fe(!1)},Ae=!!(c&&c.trim()),qe=typeof m=="function"&&!e&&St()&&typeof navigator<"u"&&navigator.mediaDevices&&typeof navigator.mediaDevices.getUserMedia=="function",Ze=E=>{try{return new Date(E).toLocaleTimeString("en-GB",{hour:"2-digit",minute:"2-digit",second:"2-digit"})}catch{return""}},Be=i.filter(E=>E.type==="system"&&typeof E.message=="string"&&E.message.trim()),cn=i.filter(E=>E.type!=="system"),ct=(p||Be.length>0)&&React.createElement("div",{key:"handshake",style:{border:"1px solid rgba(var(--sb-ink), 0.07)",borderRadius:"12px",background:"var(--sb-surface)",overflow:"hidden"}},[React.createElement("button",{key:"hs-btn",onClick:()=>Ee(E=>!E),style:{width:"100%",display:"flex",alignItems:"center",gap:"13px",padding:"14px 16px",background:"transparent",border:"none",color:"inherit",cursor:"pointer",textAlign:"start",fontFamily:"inherit"}},[React.createElement("div",{key:"ic",style:{flex:"none",width:"30px",height:"30px",display:"grid",placeItems:"center"}},React.createElement("i",{className:"fas fa-check",style:{color:"var(--sb-green)",fontSize:"16px"}})),React.createElement("div",{key:"tx",style:{flex:1,minWidth:0}},[React.createElement("div",{key:"t1",style:{fontSize:"13.5px",fontWeight:600,color:"var(--sb-text-2)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},a("flow.channelEstablished")),React.createElement("div",{key:"t2",style:{fontSize:"12px",color:"var(--sb-text-8)",marginTop:"1px",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},a("sas.verified")+(Be.length?" \xB7 "+Be.length+(Be.length===1?" event":" events"):""))]),React.createElement("i",{key:"chev",className:"fas fa-chevron-down",style:{flex:"none",color:"var(--sb-text-9)",fontSize:"13px",transform:at?"rotate(180deg)":"rotate(0deg)",transition:"transform .2s"}})]),at&&React.createElement("div",{key:"hs-body",style:{paddingTop:"2px",paddingBottom:"14px",paddingInlineStart:"59px",paddingInlineEnd:"16px"}},[Be.length>0&&React.createElement("div",{key:"steps",className:"sb-scroll",style:{marginBottom:"12px",maxHeight:"220px",overflowY:"auto",paddingInlineEnd:"6px"}},Be.map((E,ie)=>React.createElement("div",{key:"s"+ie,style:{display:"flex",gap:"11px",padding:"6px 0",borderTop:ie===0?"none":"1px solid rgba(var(--sb-ink), 0.04)"}},[React.createElement("span",{key:"d",style:{flex:"none",width:"5px",height:"5px",borderRadius:"50%",background:"var(--sb-green-solid)",marginTop:"7px",opacity:.6}}),React.createElement("span",{key:"t",style:{flex:1,fontSize:"12.5px",color:"var(--sb-text-6)",lineHeight:1.5,wordBreak:"break-word"}},String(E.message||"").trim()),React.createElement("span",{key:"tm",style:{flex:"none",fontFamily:bt,fontSize:"10.5px",color:"var(--sb-text-faint)"}},Ze(E.timestamp))]))),S&&React.createElement("div",{key:"sn",style:{display:"flex",alignItems:"center",gap:"9px",padding:"10px 12px",borderRadius:"9px",background:"rgba(var(--sb-ink), 0.025)",border:"1px solid rgba(var(--sb-ink), 0.06)"}},[React.createElement("i",{key:"i",className:"fas fa-lock",style:{color:"var(--sb-text-7)",fontSize:"12px"}}),React.createElement("span",{key:"l",style:{fontSize:"11.5px",color:"var(--sb-text-7)"}},a("sas.safetyNumber")),React.createElement("span",{key:"v",style:{fontFamily:bt,fontSize:"12px",color:"var(--sb-text-4)",letterSpacing:"0.8px",fontWeight:500,wordBreak:"break-all"}},S)])])]),ze=React.createElement("div",{key:"empty",style:{display:"flex",alignItems:"center",justifyContent:"center",flex:1,minHeight:"40vh"}},React.createElement("div",{style:{textAlign:"center",maxWidth:"420px"}},[React.createElement("img",{key:"ic",src:"/logo/securebit-mark.svg",alt:"SecureBit",style:{width:"60px",height:"60px",objectFit:"contain",display:"block",margin:"0 auto 16px"}}),React.createElement("h3",{key:"t",style:{fontSize:"17px",fontWeight:700,color:"var(--sb-text-2)",margin:"0 0 6px"}},a("flow.channelReady")),React.createElement("p",{key:"p",style:{fontSize:"13px",color:"var(--sb-text-8)",margin:0}},a("chat.e2eeNote"))])),Tn=React.createElement("main",{key:"main",ref:k,onScroll:yt,className:"sb-scroll",style:{flex:1,overflowY:"auto",padding:"20px 20px 22px"}},React.createElement("div",{style:{width:"100%",maxWidth:"1000px",margin:"0 auto",display:"flex",flexDirection:"column",gap:"16px",minHeight:"100%"}},cn.length===0?[ct,ze]:[ct].concat(cn.map(E=>React.createElement(Jo,{key:E.id,message:E.message,type:E.type,timestamp:E.timestamp,mid:E.mid,status:E.status,viewOnce:E.viewOnce,viewOnceTtl:E.viewOnceTtl,expiresAt:E.expiresAt,expired:E.expired,nowTick:Q,canUnsend:typeof X=="function",onUnsend:X,onExpire:()=>W&&W(E.id),voice:E.voice}))))),At=Me&&React.createElement("div",{key:"timer-row",style:{display:"flex",flexWrap:"wrap",alignItems:"center",gap:"8px",padding:"10px 12px",marginBottom:"10px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)"}},[React.createElement("span",{key:"lbl",style:{fontSize:"12px",color:"var(--sb-text-7)",fontWeight:600,marginInlineEnd:"4px"}},a("chat.disappearAfter"))].concat(xt.map(E=>React.createElement("button",{key:"td"+E.v,onClick:()=>b(E.v),style:Ht(O===E.v)},E.label)))),ln=xe&&React.createElement("div",{key:"once-row",style:{display:"flex",flexWrap:"wrap",alignItems:"center",gap:"8px",padding:"10px 12px",marginBottom:"10px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"var(--sb-surface)"}},[React.createElement("span",{key:"lbl",style:{fontSize:"12px",color:"var(--sb-text-7)",fontWeight:600,marginInlineEnd:"4px"}},a("chat.visibleFor"))].concat(Wt.map(E=>React.createElement("button",{key:"od"+E.v,onClick:()=>Z(E.v),style:Ht(qt===E.v)},E.label)))),Yt=me&&React.createElement("div",{key:"file-panel",style:{marginBottom:"10px"}},React.createElement(window.FileTransferComponent||(()=>React.createElement("div",{style:{padding:"16px",textAlign:"center",color:"var(--sb-red)"}},"FileTransferComponent not loaded")),{webrtcManager:I,isConnected:St(),pendingIncomingFiles:D,onIncomingDecision:le,showDropzone:$})),Tt=React.createElement("div",{key:"chips",className:"sb-chips",style:{display:"flex",alignItems:"center",justifyContent:"space-between",flexWrap:"wrap",gap:"8px",marginBottom:"10px"}},[React.createElement("button",{key:"files",onClick:()=>{me&&$?(L(!1),ne(!1)):(L(!0),ne(!0))},className:"sb-chip",style:Et(me&&$)},[React.createElement("i",{key:"i",className:"fas fa-paperclip",style:{fontSize:"13px"}}),me&&$?a("chat.hideFiles"):a("chat.sendFiles")]),React.createElement("div",{key:"right",className:"sb-chips-right",style:{display:"flex",alignItems:"center",gap:"6px",flexWrap:"wrap"}},[React.createElement("button",{key:"code",onClick:()=>ge(E=>!E),className:"sb-chip",style:Et(ee)},[React.createElement("i",{key:"i",className:"fas fa-code",style:{fontSize:"13px"}}),a("msg.code")]),React.createElement("button",{key:"once",onClick:()=>{Fe(E=>!E),q(!1)},className:"sb-chip",style:Et(xe||we)},[React.createElement("i",{key:"i",className:"fas fa-eye-slash",style:{fontSize:"13px"}}),we?a("chat.viewOncePrefix")+Gt(P):a("chat.viewOnce")]),React.createElement("button",{key:"timer",onClick:()=>{q(E=>!E),Fe(!1)},className:"sb-chip",style:Et(Me||O>0)},[React.createElement("i",{key:"i",className:"fas fa-stopwatch",style:{fontSize:"13px"}}),O>0?a("chat.timerPrefix")+Gt(O):a("msg.timer")])])]),et=ee&&React.createElement("div",{key:"code-strip",style:{display:"flex",alignItems:"center",gap:"8px",padding:"8px 14px",border:"1px solid rgba(var(--sb-ink), 0.08)",borderBottom:"none",borderRadius:"14px 14px 0 0",background:"var(--sb-surface)"}},[React.createElement("i",{key:"i",className:"fas fa-code",style:{color:"var(--sb-text-7)",fontSize:"12px"}}),React.createElement("span",{key:"s",style:{fontSize:"11.5px",fontWeight:600,color:"var(--sb-text-7)"}},a("chat.codeHint")),React.createElement("button",{key:"c",onClick:()=>ge(!1),className:"sb-link",style:{marginInlineStart:"auto",background:"none",border:"none",color:"var(--sb-text-9)",cursor:"pointer",fontSize:"11.5px",fontFamily:"inherit",fontWeight:600}},a("chat.close"))]),Ye=React.createElement("button",{key:"send",onClick:h,disabled:!Ae,title:a("chat.send"),className:"sb-send",style:{flex:"none",width:"44px",height:"44px",borderRadius:"11px",border:"none",display:"grid",placeItems:"center",cursor:Ae?"pointer":"default",background:Ae?"var(--sb-orange-solid)":"rgba(var(--sb-ink), 0.05)",color:Ae?"var(--sb-on-accent)":"var(--sb-text-faint)",transition:"all .15s"}},React.createElement("i",{className:"fas fa-paper-plane sb-mirror-rtl",style:{fontSize:"15px"}})),Ke=React.createElement("button",{key:"mic",onClick:()=>ot(!0),title:a("chat.recordVoice"),className:"sb-send",style:{flex:"none",width:"44px",height:"44px",borderRadius:"50%",border:"none",display:"grid",placeItems:"center",cursor:"pointer",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",boxShadow:"0 8px 22px rgba(var(--sb-orange-rgb), 0.3)",transition:"transform .15s cubic-bezier(.2,.7,.3,1)"}},React.createElement("svg",{width:19,height:19,viewBox:"0 0 24 24",fill:"none",stroke:"currentColor",strokeWidth:1.9,strokeLinecap:"round",strokeLinejoin:"round"},[React.createElement("rect",{key:"a",x:9,y:3,width:6,height:11,rx:3}),React.createElement("path",{key:"b",d:"M5 11a7 7 0 0 0 14 0"}),React.createElement("path",{key:"c",d:"M12 18v3"})])),lt=qe?wt?[Ke,Ye]:Ae?[Ye]:[Ke]:[Ye],Kt=React.createElement("div",{key:"input",style:{display:"flex",alignItems:"flex-end",gap:"11px",paddingBlock:"11px",paddingInlineStart:"16px",paddingInlineEnd:"11px",border:"1px solid "+(Ae?"rgba(var(--sb-ink), 0.18)":"rgba(var(--sb-ink), 0.08)"),background:"var(--sb-surface)",borderRadius:ee?"0 0 14px 14px":"14px",transition:"border .15s"}},[React.createElement("div",{key:"ta-wrap",style:{flex:1,minWidth:0}},[React.createElement("textarea",{key:"ta",value:c,ref:kt,onChange:E=>d(E.target.value),onKeyDown:Ne,rows:1,maxLength:2e3,placeholder:ee?a("flow.pasteOrWrite"):a("chat.placeholder"),className:"sb-textarea",style:{width:"100%",minHeight:ee?"120px":"22px",maxHeight:"240px",resize:"none",border:"none",outline:"none",background:"transparent",color:"var(--sb-text-2)",fontFamily:ee?bt:"inherit",fontSize:ee?"13px":"14.5px",lineHeight:1.55,padding:"6px 0"}}),React.createElement("div",{key:"foot",style:{display:"flex",alignItems:"center",gap:"12px",marginTop:"3px"}},[React.createElement("span",{key:"enc",style:{display:"inline-flex",alignItems:"center",gap:"5px",fontSize:"11px",color:"var(--sb-text-faint)"}},[React.createElement("i",{key:"i",className:"fas fa-lock",style:{color:"var(--sb-green)",fontSize:"10px"}}),a("chat.encryptedOnDevice")]),React.createElement("span",{key:"cnt",style:{fontFamily:bt,fontSize:"10.5px",color:"var(--sb-text-faint)",marginInlineStart:"auto"}},(c?c.length:0)+"/2000")])])].concat(lt)),fr=React.createElement("div",{key:"recbar"},React.createElement(Xo,{onCancel:()=>ot(!1),onSend:(E,ie,ue)=>{ot(!1),typeof m=="function"&&m(E,ie,ue)}})),dn=React.createElement("footer",{key:"composer",style:{flex:"none",padding:"12px 20px calc(18px + var(--sb-safe-bottom, env(safe-area-inset-bottom, 0px)))",background:"var(--sb-bg)",borderTop:"1px solid rgba(var(--sb-ink), 0.05)"}},React.createElement("div",{style:{maxWidth:"1000px",margin:"0 auto"}},Je?[fr]:[At,ln,Yt,Tt,et,Kt])),pn=se&&React.createElement("button",{key:"scrollbtn",onClick:te,style:{position:"fixed",insetInlineEnd:"24px",bottom:"150px",width:"44px",height:"44px",borderRadius:"50%",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"var(--sb-surface-3)",color:"var(--sb-text-4)",display:"grid",placeItems:"center",cursor:"pointer",zIndex:50,boxShadow:"0 6px 20px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))"}},React.createElement("i",{className:"fas fa-arrow-down",style:{fontSize:"15px"}})),f=React.createElement(nc,{key:"chat-header",status:B,onDisconnect:v,webrtcManager:I,title:t,isOffline:e,peerPresence:n,onRenameTitle:r}),un=window.CallUIComponent&&React.createElement(window.CallUIComponent,{key:"call-overlay",webrtcManager:I,peerTitle:t});return React.createElement("div",{className:"chat-container",style:{position:"relative",display:"flex",flexDirection:"column",height:"100vh",background:"var(--sb-bg)",color:"var(--sb-text-2)"}},[f,Tn,pn,dn,un])},_s=(t,e,n={})=>({message:t,type:e,id:Date.now()+Math.random(),timestamp:typeof n.timestamp=="number"?n.timestamp:Date.now(),mid:n.mid,status:n.status,viewOnce:n.viewOnce===!0,viewOnceTtl:typeof n.viewOnceTtl=="number"?n.viewOnceTtl:15,expiresAt:typeof n.expiresAt=="number"?n.expiresAt:void 0,voice:n.voice||void 0,fileId:n.fileId||void 0}),on={chevL:'<svg class="sb-mirror-rtl" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M15 6l-6 6 6 6"/></svg>',chevR:'<svg class="sb-mirror-rtl" width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M9 6l6 6-6 6"/></svg>',plus:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2.1" stroke-linecap="round"><path d="M12 5v14M5 12h14"/></svg>',users:'<svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.8" stroke-linecap="round" stroke-linejoin="round"><path d="M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19"/><circle cx="10" cy="8" r="3.2"/><path d="M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4"/><path d="M15.5 5.3a3.2 3.2 0 0 1 0 5.4"/></svg>',burger:'<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M4 7h16M4 12h16M4 17h16"/></svg>'},ra=({chats:t,groups:e=[],collapsed:n,drawerOpen:r,onToggleCollapse:i,onSelect:c,onSelectGroup:d,onNewChat:h,onNewGroup:m,onRename:v,onCloseDrawer:S,myStatus:p,onSetStatus:k})=>{let y=React.createElement,[I,B]=React.useState(null),[D,le]=React.useState(""),[ee,ge]=React.useState(!1),we=React.useRef(null),C=React.useRef(null),P=React.useRef(null),j=React.useRef(null),O=React.useRef(0),z=React.useRef(!1),Q=React.useRef(!1),[X,W]=React.useState(!!r),se=10,ce=220,me=()=>C.current&&C.current.offsetWidth||292,L=b=>{O.current=b;let Z=me(),Ae=Math.min(1,Math.max(0,1+b/Z));if(C.current&&(C.current.style.transform="translate3d("+(b*ur).toFixed(2)+"px,0,0)"),we.current){we.current.style.opacity=Ae.toFixed(3);let qe="blur("+(5*Ae).toFixed(2)+"px)";we.current.style.backdropFilter=qe,we.current.style.webkitBackdropFilter=qe}},$=(b,Z)=>{P.current&&P.current.stop(),P.current=Gi({from:O.current,to:b,velocity:Z,damping:Math.abs(Z)>60?jn.drawer.damping:jn.move.damping,response:jn.drawer.response,restDelta:.5,restSpeed:8,onUpdate:L,onComplete:()=>{L(b),P.current=null,b!==0&&W(!1)}})};React.useLayoutEffect(()=>{if(r&&!X){W(!0);return}if(!X||r===z.current)return;let b=me();r&&!P.current&&!j.current&&L(-b),z.current=r,$(r?0:-b,P.current?P.current.velocity:0)},[r,X]),React.useEffect(()=>()=>{P.current&&P.current.stop()},[]);let ne=b=>{b.pointerType==="mouse"&&b.button!==0||j.current||(Q.current=!1,j.current={id:b.pointerId,x0:b.clientX,y0:b.clientY,base:O.current,axis:null,vel:Ui()},j.current.vel.add(b.clientX*ur,b.timeStamp||performance.now()))},Me=b=>{let Z=j.current;if(!Z||b.pointerId!==Z.id)return;let Ae=b.clientX-Z.x0,qe=b.clientY-Z.y0;if(!Z.axis){if(Math.abs(Ae)<se&&Math.abs(qe)<se)return;if(Math.abs(qe)>=Math.abs(Ae)){j.current=null;return}Z.axis="x",P.current&&(Z.base=O.current,Z.x0=b.clientX,P.current.stop(),P.current=null);try{b.currentTarget.setPointerCapture(Z.id)}catch{}}Z.vel.add(b.clientX*ur,b.timeStamp||performance.now());let Ze=me(),Be=Z.base+(b.clientX-Z.x0)*ur;Be>0?Be=ks(Be,Ze):Be<-Ze&&(Be=-Ze+ks(Be+Ze,Ze)),L(Be)},q=b=>{let Z=j.current;if(!Z||b.pointerId!==void 0&&b.pointerId!==Z.id||(j.current=null,Z.axis!=="x"))return;Q.current=!0;let Ae=me(),qe=Z.vel.get(b.timeStamp||performance.now()),Ze=zi(O.current,qe,[-Ae,0],{flick:ce})===0;z.current=Ze,$(Ze?0:-Ae,qe),Ze||S()},xe=()=>{if(Q.current){Q.current=!1;return}S()},Fe=b=>Z=>{Z.stopPropagation(),B(b.id),le(b.name)},at=()=>{I&&(v(I,D),B(null))},Ee=b=>{b.key==="Enter"?(b.preventDefault(),at()):b.key==="Escape"&&B(null)},Je=(b={})=>y("input",{autoFocus:!0,value:D,onChange:Z=>le(Z.target.value),onKeyDown:Ee,onBlur:at,onClick:Z=>Z.stopPropagation(),style:Object.assign({width:"100%",background:"rgba(var(--sb-ink), 0.06)",border:"1px solid rgba(var(--sb-orange-rgb), 0.5)",borderRadius:"6px",color:"var(--sb-text-1)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,padding:"2px 6px",outline:"none"},b)}),ot=(b,Z)=>y("span",{style:Object.assign({display:"grid",placeItems:"center"},Z||{}),dangerouslySetInnerHTML:{__html:b}}),wt=(b,Z,Ae)=>y("div",{style:{position:"relative",flex:"none",width:Z+"px",height:Z+"px",borderRadius:(Z>=44?12:11)+"px",display:"grid",placeItems:"center",background:b.active?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.035)",border:"1px solid rgba(var(--sb-ink), "+(b.active?"0.14":"0.07")+")",fontSize:"13px",fontWeight:700,letterSpacing:"-0.3px",color:b.active?"var(--sb-text-1)":"var(--sb-text-6)"}},[b.mono,y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:b.dot,border:"2px solid "+Ae}})]),$t=b=>y("div",{key:b.id,onClick:()=>c(b.id),style:{position:"relative",display:"flex",alignItems:"center",gap:"12px",padding:"11px 12px",marginBottom:"4px",borderRadius:"11px",background:b.active?"var(--sb-surface)":"transparent",border:"1px solid "+(b.active?"rgba(var(--sb-ink), 0.08)":"transparent"),cursor:"pointer"}},[b.active&&y("span",{key:"bar",style:{position:"absolute",insetInlineStart:0,top:"12px",bottom:"12px",width:"3px",borderStartEndRadius:"3px",borderEndEndRadius:"3px",background:"var(--sb-orange-solid)"}}),wt(b,38,b.active?"var(--sb-surface)":"var(--sb-bg-deep)"),y("div",{key:"body",style:{flex:1,minWidth:0}},[y("div",{key:"top",style:{display:"flex",alignItems:"center",gap:"7px"}},[I===b.id?Je():y("span",{key:"name",onDoubleClick:Fe(b),title:a("chat.renameHint"),style:{flex:1,minWidth:0,fontSize:"14px",fontWeight:b.active?700:600,letterSpacing:"-0.2px",color:b.active?"var(--sb-text-1)":"var(--sb-text-4)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},b.name),b.unread&&I!==b.id&&y("span",{key:"u",style:{flex:"none",minWidth:"18px",height:"18px",padding:"0 5px",borderRadius:"9px",display:"grid",placeItems:"center",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:700}},b.unread)]),y("div",{key:"prev",style:{fontSize:"12px",color:b.active?"var(--sb-text-7)":"var(--sb-text-9)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},b.preview)])]),kt=b=>y("div",{key:b.id,style:{position:"relative"}},[b.active&&y("span",{key:"bar",style:{position:"absolute",insetInlineStart:"-13px",top:"9px",bottom:"9px",width:"3px",borderStartEndRadius:"3px",borderEndEndRadius:"3px",background:"var(--sb-orange-solid)"}}),y("div",{key:"tile",onClick:()=>c(b.id),title:b.name,style:{position:"relative",width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",cursor:"pointer",background:b.active?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.03)",border:"1px solid rgba(var(--sb-ink), "+(b.active?"0.14":"0.07")+")",fontSize:"13px",fontWeight:700,letterSpacing:"-0.3px",color:b.active?"var(--sb-text-1)":"var(--sb-text-6)"}},[b.mono,y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:b.dot,border:"2.5px solid var(--sb-bg-deep)"}}),b.unread&&y("span",{key:"u",style:{position:"absolute",insetInlineStart:"-5px",top:"-5px",minWidth:"17px",height:"17px",padding:"0 4px",borderRadius:"9px",display:"grid",placeItems:"center",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"'JetBrains Mono',monospace",fontSize:"9.5px",fontWeight:700,border:"2px solid var(--sb-bg-deep)"}},b.unread)])]),Re=b=>y("div",{style:{width:b+"px",height:b+"px",flex:"none",display:"grid",placeItems:"center"}},y("img",{src:"/logo/securebit-mark.svg",alt:"SecureBit",style:{width:"100%",height:"100%",objectFit:"contain",display:"block"}})),yt=(b,Z)=>y("button",{className:"sb-collapse-btn",onClick:i,title:Z,style:{width:"30px",height:"30px",borderRadius:"8px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.07)",background:"transparent",color:"var(--sb-text-7)",cursor:"pointer"},dangerouslySetInnerHTML:{__html:b}}),te=Mr.find(b=>b.key===p)||Mr[0],Ne={user:'<svg width="19" height="19" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M18 20v-1.5a4 4 0 0 0-4-4h-4a4 4 0 0 0-4 4V20"/><circle cx="12" cy="8" r="3.6"/></svg>',check:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="var(--sb-orange-solid)" stroke-width="2.3" stroke-linecap="round" stroke-linejoin="round"><path d="M5 13l4 4 10-11"/></svg>',chevUp:'<svg width="16" height="16" viewBox="0 0 24 24" fill="none" stroke="var(--sb-text-9)" stroke-width="2" stroke-linecap="round" stroke-linejoin="round"><path d="M6 15l6-6 6 6"/></svg>',lock:'<svg width="13" height="13" viewBox="0 0 24 24" fill="none" stroke="var(--sb-green-solid)" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M7 11V7a5 5 0 0 1 10 0v4"/><rect x="4.5" y="11" width="15" height="9" rx="2.2"/></svg>'},St=b=>ee?y("div",{key:"pmenu",style:Object.assign({position:"absolute",zIndex:30,borderRadius:"14px",background:"var(--sb-surface)",border:"1px solid rgba(var(--sb-ink), 0.1)",boxShadow:"0 16px 40px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))",padding:"6px"},b)},[y("div",{key:"h",style:{padding:"9px 10px 7px",fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"1.2px"}},a("chat.setStatus")),...Mr.map(Z=>y("button",{key:Z.key,onClick:()=>{k(Z.key),ge(!1)},style:{width:"100%",display:"flex",alignItems:"center",gap:"11px",padding:"9px 10px",borderRadius:"9px",border:"none",background:"transparent",cursor:"pointer",textAlign:"start"}},[y("span",{key:"d",style:{flex:"none",width:"10px",height:"10px",borderRadius:"50%",background:Z.dot}}),y("span",{key:"t",style:{flex:1,minWidth:0}},[y("span",{key:"w",style:{display:"block",fontSize:"13.5px",fontWeight:600,color:"var(--sb-text-2)"}},Z.word),y("span",{key:"de",style:{display:"block",fontSize:"11.5px",color:"var(--sb-text-9)"}},Z.desc)]),Z.key===p&&y("span",{key:"c",style:{flex:"none",display:"grid",placeItems:"center"},dangerouslySetInnerHTML:{__html:Ne.check}})])),y("div",{key:"note",style:{display:"flex",alignItems:"flex-start",gap:"8px",margin:"6px 6px 4px",padding:"9px 10px",borderRadius:"9px",background:"rgba(var(--sb-green-rgb), 0.06)",border:"1px solid rgba(var(--sb-green-rgb), 0.16)"}},[y("span",{key:"i",style:{flex:"none",marginTop:"1px",display:"grid"},dangerouslySetInnerHTML:{__html:Ne.lock}}),y("span",{key:"t",style:{fontSize:"11px",lineHeight:1.45,color:"var(--sb-text-7)"}},a("chat.peersOnly"))])]):null,bt=y("div",{key:"you",style:{flex:"none",position:"relative",marginTop:"10px",borderTop:"1px solid rgba(var(--sb-ink), 0.06)",padding:"10px 12px 12px"}},[St({left:"12px",right:"12px",bottom:"64px"}),y("button",{key:"btn",onClick:()=>ge(b=>!b),style:{width:"100%",display:"flex",alignItems:"center",gap:"11px",padding:"7px 8px",borderRadius:"11px",border:"1px solid rgba(var(--sb-ink), 0.06)",background:"rgba(var(--sb-ink), 0.02)",cursor:"pointer"}},[y("div",{key:"av",style:{position:"relative",flex:"none",width:"36px",height:"36px",borderRadius:"10px",display:"grid",placeItems:"center",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.24)",color:"var(--sb-orange)"}},[y("span",{key:"i",style:{display:"grid"},dangerouslySetInnerHTML:{__html:Ne.user}}),y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:te.dot,border:"2px solid var(--sb-bg-deep)"}})]),y("div",{key:"tx",style:{flex:1,minWidth:0,textAlign:"start"}},[y("div",{key:"y",style:{fontSize:"13.5px",fontWeight:700,color:"var(--sb-text-1)"}},a("chatHdr.you")),y("div",{key:"w",style:{fontSize:"12px",color:"var(--sb-text-7)"}},te.word)]),y("span",{key:"ch",style:{display:"grid",placeItems:"center"},dangerouslySetInnerHTML:{__html:Ne.chevUp}})])]),Gt=y("div",{key:"you",style:{flex:"none",position:"relative",display:"flex",flexDirection:"column",alignItems:"center",padding:"0 0 13px"}},[St({insetInlineStart:"60px",bottom:"8px",width:"248px"}),y("button",{key:"btn",onClick:()=>ge(b=>!b),title:a("chat.yourStatusPrefix")+te.word,style:{position:"relative",width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",cursor:"pointer",background:"rgba(var(--sb-orange-rgb), 0.12)",border:"1px solid rgba(var(--sb-orange-rgb), 0.24)",color:"var(--sb-orange)"}},[y("span",{key:"i",style:{display:"grid"},dangerouslySetInnerHTML:{__html:Ne.user}}),y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"12px",height:"12px",borderRadius:"50%",background:te.dot,border:"2.5px solid var(--sb-bg-deep)"}})])]),Et=[y("div",{key:"head",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"space-between",paddingBlock:0,paddingInlineStart:"16px",paddingInlineEnd:"12px",height:"var(--sb-bar-h, 64px)",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[y("div",{key:"brand",style:{display:"flex",alignItems:"center",gap:"10px"}},[Re(30),y("span",{key:"t",style:{fontSize:"15px",fontWeight:800,letterSpacing:"-0.3px",color:"var(--sb-text-1)"}},"SecureBit")]),yt(on.chevL,a("chat.collapse"))]),y("div",{key:"label",style:{flex:"none",display:"flex",alignItems:"center",justifyContent:"space-between",padding:"16px 16px 9px"}},[y("span",{key:"l",style:{fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"1.3px"}},a("chatHdr.chats")),y("span",{key:"c",style:{fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:600,color:"var(--sb-text-9)"}},String(t.length))]),y("div",{key:"list",className:"msc-scroll",style:{flex:1,overflowY:"auto",padding:"0 10px"}},[...t.map($t),y("div",{key:"gh",style:{marginTop:"14px",padding:"0 2px 6px",display:"flex",alignItems:"baseline",justifyContent:"space-between"}},[y("span",{key:"l",style:{fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:600,color:"var(--sb-text-faint)",textTransform:"uppercase",letterSpacing:"1.3px"}},a("chat.groupChats")),y("button",{key:"add",onClick:m,title:a("chat.newGroup"),style:{border:"none",background:"transparent",color:"var(--sb-orange)",cursor:"pointer",fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:700,textTransform:"uppercase",letterSpacing:"0.9px",padding:0}},a("chatHdr.newChat"))]),...e.length===0?[y("div",{key:"gph",onClick:m,title:a("chat.createGroup"),style:{display:"flex",alignItems:"center",gap:"12px",padding:"11px 12px",borderRadius:"11px",background:"transparent",border:"1px dashed rgba(var(--sb-ink), 0.09)",cursor:"pointer"}},[y("div",{key:"i",style:{flex:"none",width:"38px",height:"38px",borderRadius:"11px",display:"grid",placeItems:"center",background:"rgba(var(--sb-ink), 0.025)",border:"1px solid rgba(var(--sb-ink), 0.06)",color:"var(--sb-text-faint)"},dangerouslySetInnerHTML:{__html:on.users}}),y("div",{key:"b",style:{flex:1,minWidth:0}},[y("div",{key:"t",style:{fontSize:"14px",fontWeight:600,color:"var(--sb-text-7)"}},a("chat.newGroup")),y("div",{key:"s",style:{fontSize:"11.5px",color:"var(--sb-text-faint)"}},a("chat.meshHint"))])])]:e.map(b=>y("div",{key:b.id,onClick:()=>d(b.id),style:{position:"relative",display:"flex",alignItems:"center",gap:"12px",padding:"11px 12px",marginBottom:"4px",borderRadius:"11px",background:b.active?"var(--sb-surface)":"transparent",border:"1px solid "+(b.active?"rgba(var(--sb-ink), 0.08)":"transparent"),cursor:"pointer"}},[b.active&&y("span",{key:"bar",style:{position:"absolute",insetInlineStart:0,top:"12px",bottom:"12px",width:"3px",borderStartEndRadius:"3px",borderEndEndRadius:"3px",background:"var(--sb-orange-solid)"}}),wt(b,38,b.active?"var(--sb-surface)":"var(--sb-bg-deep)"),y("div",{key:"body",style:{flex:1,minWidth:0}},[y("div",{key:"top",style:{display:"flex",alignItems:"center",gap:"7px"}},[y("span",{key:"n",style:{flex:1,minWidth:0,fontSize:"14px",fontWeight:b.active?700:600,letterSpacing:"-0.2px",color:b.active?"var(--sb-text-1)":"var(--sb-text-4)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},b.name),b.unread&&y("span",{key:"u",style:{flex:"none",minWidth:"18px",height:"18px",padding:"0 5px",borderRadius:"9px",display:"grid",placeItems:"center",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"'JetBrains Mono',monospace",fontSize:"10px",fontWeight:700}},b.unread)]),y("div",{key:"prev",style:{fontSize:"12px",color:b.active?"var(--sb-text-7)":"var(--sb-text-9)",whiteSpace:"nowrap",overflow:"hidden",textOverflow:"ellipsis"}},b.preview)])]))]),y("div",{key:"new",style:{flex:"none",padding:"12px"}},y("button",{onClick:h,style:{width:"100%",display:"inline-flex",alignItems:"center",justifyContent:"center",gap:"9px",padding:"12px",borderRadius:"11px",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"inherit",fontSize:"14px",fontWeight:700,cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)"}},[ot(on.plus,{key:"p"}),a("chat.newChat")])),bt],Ht=[y("div",{key:"head",style:{flex:"none",display:"flex",flexDirection:"column",alignItems:"center",gap:"10px",padding:"13px 0",width:"100%",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[Re(32),yt(on.chevR,a("chatHdr.expand"))]),y("div",{key:"list",className:"msc-scroll",style:{flex:1,overflowY:"auto",display:"flex",flexDirection:"column",alignItems:"center",gap:"10px",padding:"14px 0",width:"100%"}},[...t.map(kt),y("div",{key:"sep",style:{width:"30px",height:"1px",background:"rgba(var(--sb-ink), 0.07)",margin:"2px 0"}}),...e.map(b=>y("div",{key:b.id,style:{position:"relative"}},[b.active&&y("span",{key:"bar",style:{position:"absolute",insetInlineStart:"-13px",top:"9px",bottom:"9px",width:"3px",borderStartEndRadius:"3px",borderEndEndRadius:"3px",background:"var(--sb-orange-solid)"}}),y("div",{key:"tile",onClick:()=>d(b.id),title:b.name+" \u2014 "+b.headerSub,style:{position:"relative",width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",cursor:"pointer",background:b.active?"rgba(var(--sb-ink), 0.06)":"rgba(var(--sb-ink), 0.03)",border:"1px solid rgba(var(--sb-ink), "+(b.active?"0.14":"0.07")+")",fontSize:"13px",fontWeight:700,letterSpacing:"-0.3px",color:b.active?"var(--sb-text-1)":"var(--sb-text-6)"}},[b.mono,y("span",{key:"dot",style:{position:"absolute",insetInlineEnd:"-2px",bottom:"-2px",width:"11px",height:"11px",borderRadius:"50%",background:b.dot,border:"2.5px solid var(--sb-bg-deep)"}}),b.unread&&y("span",{key:"u",style:{position:"absolute",insetInlineStart:"-5px",top:"-5px",minWidth:"17px",height:"17px",padding:"0 4px",borderRadius:"9px",display:"grid",placeItems:"center",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",fontFamily:"'JetBrains Mono',monospace",fontSize:"9.5px",fontWeight:700,border:"2px solid var(--sb-bg-deep)"}},b.unread)])])),y("div",{key:"gph",onClick:m,title:a("chat.newGroup"),style:{position:"relative",width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",cursor:"pointer",background:"transparent",border:"1px dashed rgba(var(--sb-ink), 0.1)",color:"var(--sb-text-faint)"},dangerouslySetInnerHTML:{__html:on.users}})]),y("div",{key:"new",style:{flex:"none",padding:"13px 0"}},y("button",{onClick:h,title:a("chat.newChat"),style:{width:"44px",height:"44px",borderRadius:"12px",display:"grid",placeItems:"center",border:"none",background:"var(--sb-orange-solid)",color:"var(--sb-on-accent)",cursor:"pointer",boxShadow:"0 8px 24px rgba(var(--sb-orange-rgb), 0.28)"},dangerouslySetInnerHTML:{__html:on.plus}})),Gt],Wt={flex:"none",width:n?"72px":"292px",display:"flex",flexDirection:"column",alignItems:n?"center":"stretch",paddingTop:"var(--sb-safe-top, 0px)",background:"var(--sb-bg-deep)",borderInlineEnd:"1px solid rgba(var(--sb-ink), 0.06)"},qt=n?Ht:Et;return y(React.Fragment,null,[y("style",{key:"css",dangerouslySetInnerHTML:{__html:"@media (max-width:1023px){.sb-rail{display:none !important;}.sb-burger{display:grid !important;}}@media (min-width:1024px){.sb-drawer-overlay{display:none !important;}}.sb-mobile-drawer .sb-collapse-btn{display:none !important;}html,body{background:var(--sb-bg) !important;overscroll-behavior:none;}.sb-app-shell{height:var(--sb-vh,100dvh) !important;min-height:0 !important;overflow:hidden;position:fixed;top:0;inset-inline:0;transform:translate3d(0,var(--sb-vv-top, 0px),0);}.sb-chat-header{position:sticky;top:0;z-index:20;}.sb-app-col{height:100% !important;min-height:0 !important;}.chat-container{height:100% !important;min-height:0 !important;}.sb-scroll{min-height:0 !important;overscroll-behavior:contain;-webkit-overflow-scrolling:touch;}@media (max-width:768px){textarea,input,select{font-size:16px !important;}}@media (max-width:768px){.sb-rename-btn{display:none !important;}}"}}),y("aside",{key:"rail",className:"sb-rail",style:Wt},qt),y("div",{key:"drawer",className:"sb-drawer-overlay",ref:we,onClick:xe,onPointerDown:ne,onPointerMove:Me,onPointerUp:q,onPointerCancel:q,style:{position:"fixed",inset:0,zIndex:60,background:"rgba(var(--sb-scrim-rgb), 0.6)",backdropFilter:"blur(0px)",WebkitBackdropFilter:"blur(0px)",opacity:0,display:X?"block":"none",touchAction:"pan-y",willChange:"opacity"}},y("aside",{className:"sb-mobile-drawer",ref:C,onClick:b=>b.stopPropagation(),style:{position:"absolute",insetInlineStart:0,top:0,bottom:0,width:"min(292px, 86vw)",display:"flex",flexDirection:"column",paddingTop:"var(--sb-safe-top, 0px)",background:"var(--sb-bg-deep)",borderInlineEnd:"1px solid rgba(var(--sb-ink), 0.06)",boxShadow:"0 0 60px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))",touchAction:"pan-y",willChange:"transform"}},[y("button",{key:"x",onClick:S,title:a("chat.closeMenu"),"aria-label":a("chat.closeMenu"),style:{position:"absolute",top:"calc(15px + var(--sb-safe-top, 0px))",insetInlineEnd:"13px",zIndex:2,width:"34px",height:"34px",borderRadius:"9px",display:"grid",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-4)",cursor:"pointer"}},y("i",{className:"fas fa-xmark",style:{fontSize:"16px"}})),Et]))])},Is=()=>{let[t,e]=React.useReducer(ui,void 0,pi),n=t.activeSessionId,r=React.useRef(null);r.current=n;let i=n?t.sessions[n]:null,c=React.useRef([]).current,d=React.useRef(new Map),h=React.useRef(new Map),m=React.useRef(new Map),v=React.useRef(new Map),[S,p]=React.useReducer(Pi,void 0,Fi),k=React.useRef(new Map),y=S.activeGroupId,I=y?S.groups[y]:null,B=React.useRef(null);B.current=y;let[D,le]=React.useState(""),[ee,ge]=React.useState(!1),[we,C]=React.useState(!1),[P,j]=React.useState(null),[O,z]=React.useState(null),[Q,X]=React.useState(!1),W=React.useRef(null),[se,ce]=React.useState({}),[me,L]=React.useState({}),$=React.useRef(new Map),[ne,Me]=React.useState({}),q=React.useRef(new Set),xe=React.useRef(new Map),Fe=React.useRef(new Map),at=React.useMemo(()=>Bi({getManager:s=>d.current.get(s)||xe.current.get(s)?.manager||null}),[]),Ee=(s,o,l={})=>({id:Date.now()+Math.random(),message:s,type:o,timestamp:Date.now(),...l}),Je=React.useCallback(s=>(o,l={})=>{switch(o){case"phase":p({type:be.SET_PHASE,id:s,phase:l.phase});break;case"members":p({type:be.SET_MEMBERS,id:s,members:l.members,epoch:l.epoch}),Kr.current(s,null);break;case"roster":p({type:be.RENAME,id:s,name:l.name});break;case"sas":p({type:be.SET_SAS,id:s,code:l.code}),p({type:be.SET_ACTIVE_GROUP,id:s}),C(!0);break;case"confirmed":p({type:be.CONFIRM_SAS,id:s});break;case"call":if(ce(u=>({...u,[s]:l.call})),Kr.current(s,l.call),l.call&&!l.call.joined&&s!==B.current){let u=`${s}:${l.call.callId}`;q.current.has(u)||(q.current.add(u),p({type:be.INCREMENT_UNREAD,id:s}))}break;case"message":p({type:be.ADD_MESSAGE,id:s,message:Ee(l.body,"received",{senderName:l.name,senderFp:l.fp,timestamp:l.ts,relayed:l.relayed===!0})}),s!==B.current&&p({type:be.INCREMENT_UNREAD,id:s});break;case"ended":Fs.current(s,{announce:!1});break;case"add_failed":p({type:be.ADD_MESSAGE,id:s,message:Ee(a("err.nobodyAccepted"),"system")});break;case"left":p({type:be.ADD_MESSAGE,id:s,message:Ee(`${l.name} left the group.`,"system")});break;case"inconsistency":p({type:be.ADD_MESSAGE,id:s,message:Ee(`${l.name} sent conflicting messages to different members. That message was discarded.`,"system")});break;case"error":p({type:be.SET_ERROR,id:s,error:l.error});break;default:break}},[]),ot=React.useCallback((s,o)=>{let l=k.current.get(o.gid);if(!l){if(Li(o)===he.INVITE){let u=null;try{u=Dr(o)}catch{return}j(g=>g||{gid:u.gid,name:String(u.name||"Group").slice(0,F.MAX_NAME_BYTES),frame:u,sessionId:s})}return}l.handleFrame(s,o).catch(u=>{let g=u?.code||(u?.message?`frame_rejected: ${String(u.message).slice(0,120)}`:"frame_rejected");p({type:be.SET_ERROR,id:o.gid,error:g})})},[]),wt=React.useRef(ot);wt.current=ot;let $t=React.useCallback((s,o)=>{for(let l of k.current.values())try{l.setSessionState(s,o)}catch{}},[]),kt=React.useRef($t);kt.current=$t;let Re=React.useCallback(s=>{let o=r.current;o&&e(s(o))},[]),yt=i?i.messages:c,te=React.useCallback(s=>{let o=r.current;o&&e(typeof s=="function"?{type:J.SET_MESSAGES,id:o,updater:s}:{type:J.SET_MESSAGES,id:o,messages:s})},[]),Ne=i?i.status:"disconnected",St=React.useCallback(s=>Re(o=>({type:J.SET_STATUS,id:o,status:s})),[Re]),bt=i?i.keyFingerprint:"",Gt=React.useCallback(s=>Re(o=>({type:J.SET_FINGERPRINT,id:o,fingerprint:s})),[Re]),Et=i?i.verificationCode:"",Ht=React.useCallback(s=>Re(o=>({type:J.SET_VERIFICATION,id:o,code:s})),[Re]),xt=i?i.sas.isVerified:!1,Wt=React.useCallback(s=>Re(o=>({type:J.SET_SAS,id:o,sas:{isVerified:!!s}})),[Re]),qt=i?i.sas.localConfirmed:!1,b=React.useCallback(s=>Re(o=>({type:J.SET_SAS,id:o,sas:{localConfirmed:!!s}})),[Re]),Z=i?i.sas.remoteConfirmed:!1,Ae=React.useCallback(s=>Re(o=>({type:J.SET_SAS,id:o,sas:{remoteConfirmed:!!s}})),[Re]),qe=i?i.sas.bothConfirmed:!1,Ze=React.useCallback(s=>Re(o=>({type:J.SET_SAS,id:o,sas:{bothConfirmed:!!s}})),[Re]),Be=i?i.pendingIncomingFiles:c,cn=React.useCallback(s=>{let o=r.current;o&&e(typeof s=="function"?{type:J.SET_PENDING_FILES,id:o,updater:s}:{type:J.SET_PENDING_FILES,id:o,files:s})},[]),ct=(s,o)=>i?i.setup[s]:o,ze=s=>React.useCallback(o=>Re(l=>({type:J.PATCH_SETUP,id:l,patch:{[s]:o}})),[Re]),Tn=ct("offerData",""),At=ze("offerData"),ln=ct("answerData",""),Yt=ze("answerData"),Tt=ct("offerInput",""),et=ze("offerInput"),Ye=ct("answerInput",""),Ke=ze("answerInput"),lt=ct("showOfferStep",!1),Kt=ze("showOfferStep"),fr=ct("showAnswerStep",!1),dn=ze("showAnswerStep"),pn=ct("showVerification",!1),f=ze("showVerification"),un=ct("showQRCode",!1),E=ze("showQRCode"),ie=ct("qrCodeUrl",""),ue=ze("qrCodeUrl"),_e=ct("isGeneratingKeys",!1),Nt=ze("isGeneratingKeys"),re=React.useMemo(()=>({get current(){return d.current.get(r.current)||null},set current(s){let o=r.current;o&&(s?d.current.set(o,s):d.current.delete(o))}}),[]),fn=React.useMemo(()=>({get current(){return h.current.get(r.current)||null},set current(s){let o=r.current;o&&(s?h.current.set(o,s):h.current.delete(o))}}),[]),[Vt,Nn]=React.useState(()=>{try{return localStorage.getItem("securebit_my_status")||"available"}catch{return"available"}}),Ft=React.useRef(Vt);Ft.current=Vt;let hr=s=>s==="invisible"?"offline":s,Gr=React.useCallback((s,o)=>{if(!(!s||typeof s.sendMessage!="function"))try{if(s.isConnected&&s.isConnected()){let l=s.sendMessage(JSON.stringify({type:"presence",status:hr(o)}));l&&typeof l.catch=="function"&&l.catch(()=>{})}}catch{}},[]),gr=React.useCallback(s=>{Nn(s);try{localStorage.setItem("securebit_my_status",s)}catch{}for(let o of d.current.values())Gr(o,s)},[Gr]),[Pt,hn]=React.useState(!1),[Rt,Dn]=React.useState(!1),[gn,mr]=React.useState(15),[_t,yr]=React.useState(0),[br,De]=React.useState(()=>Date.now()),[Qt,qn]=React.useState(typeof navigator<"u"&&navigator.onLine===!1),Yn=React.useRef(Qt);React.useEffect(()=>{Yn.current=Qt},[Qt]),React.useEffect(()=>{let s=()=>qn(!0),o=()=>qn(!1),l=()=>{document.visibilityState==="visible"&&qn(navigator.onLine===!1)};return window.addEventListener("offline",s),window.addEventListener("online",o),document.addEventListener("visibilitychange",l),()=>{window.removeEventListener("offline",s),window.removeEventListener("online",o),document.removeEventListener("visibilitychange",l)}},[]),React.useEffect(()=>{let s=typeof window<"u"?window.visualViewport:null,o=document.documentElement,l=-1,u="",g=-1,w=0,A=()=>{let pt=Math.round(s?s.height:window.innerHeight||0);pt&&pt!==l&&(l=pt,o.style.setProperty("--sb-vh",pt+"px"))},T=()=>!!s&&window.innerHeight-s.height>120,U=()=>{let rt=T()?"0px":"env(safe-area-inset-bottom, 0px)";rt!==u&&(u=rt,o.style.setProperty("--sb-safe-bottom",rt))},ve=()=>{let pt=!!s&&s.scale>1.01,rt=s&&!pt?Math.max(0,Math.round(s.offsetTop)):0;rt!==g&&(g=rt,o.style.setProperty("--sb-vv-top",rt+"px"))},Se=()=>{A(),U(),ve()},de=()=>{w||(w=requestAnimationFrame(()=>{w=0,ve()}))},fe=[],nt=()=>{ve(),[60,180,360,600].forEach(pt=>fe.push(setTimeout(()=>{A(),U(),ve()},pt)))};Se(),s&&(s.addEventListener("resize",Se),s.addEventListener("scroll",de)),window.addEventListener("resize",Se),window.addEventListener("orientationchange",Se),window.addEventListener("scroll",de,{passive:!0}),document.addEventListener("focusin",nt),document.addEventListener("focusout",nt);let He=ec(s);return()=>{w&&cancelAnimationFrame(w),fe.forEach(clearTimeout),s&&(s.removeEventListener("resize",Se),s.removeEventListener("scroll",de)),window.removeEventListener("resize",Se),window.removeEventListener("orientationchange",Se),window.removeEventListener("scroll",de),document.removeEventListener("focusin",nt),document.removeEventListener("focusout",nt),He&&He()}},[]);let[vt,Fn]=React.useState(()=>{try{return localStorage.getItem("securebit_relay_only_mode")==="true"}catch{return!1}}),[Ot,Lt]=React.useState(null),[Pn,mn]=React.useState(""),[Ct,Kn]=React.useState(!1),[yn,Qn]=React.useState(!1);React.useEffect(()=>{let s=!1;return Ys().then(o=>{s||!o||(Array.isArray(o.servers)&&o.servers.length>0&&(Lt(o.servers),mn(JSON.stringify(o.servers,null,2))),o.privacyMode==="relay-only"&&Fn(!0),Kn(!0))}).catch(()=>{}),()=>{s=!0}},[]),React.useEffect(()=>{let s=()=>Qn(!0);return window.addEventListener("securebit:open-network-settings",s),()=>window.removeEventListener("securebit:open-network-settings",s)},[]);let xr=React.useCallback((s,o)=>{let l=s.useCustom&&Array.isArray(s.servers)?s.servers:null;Lt(l&&l.length?l:null),mn(s.serversText||""),Fn(s.privacyMode==="relay-only"),Qn(!1),o?(Kn(!0),qs({servers:l||[],privacyMode:s.privacyMode}).catch(()=>{})):Ct&&(Kn(!1),as().catch(()=>{}))},[Ct]),Hr=React.useCallback(async()=>{await as().catch(()=>{}),Kn(!1),Lt(null),mn("")},[]),[On,bn]=React.useState(""),[vr,Xn]=React.useState(!1),[Jn,We]=React.useState(!1),[Zn,wr]=React.useState(()=>typeof window<"u"&&!!window.Html5Qrcode);React.useEffect(()=>{if(Zn)return;let s=()=>wr(!0);return window.addEventListener("securebit:qr-ready",s),window.Html5Qrcode&&wr(!0),()=>window.removeEventListener("securebit:qr-ready",s)},[Zn]);let[Wr,Ln]=React.useState(null),[Vr,M]=React.useState(0),[H,ae]=React.useState(null),[Ue,Ge]=React.useState({status:"disconnected",hasActiveAnswer:!1,answerCreatedAt:null,isUserInitiatedDisconnect:!1}),tt=(s,o={})=>{let{preserveAnswer:l=!1,isUserAction:u=!1}=o;Ge(g=>({...g,...s,isUserInitiatedDisconnect:u,hasActiveAnswer:l?g.hasActiveAnswer:!1,answerCreatedAt:l?g.answerCreatedAt:null}))},xn=()=>{let s=!!ln||Ye&&typeof Ye=="string"&&Ye.trim().length>0,o=ie&&typeof ie=="string"&&ie.trim().length>0;return Ue.hasActiveAnswer&&!Ue.isUserInitiatedDisconnect||s&&!Ue.isUserInitiatedDisconnect||o&&!Ue.isUserInitiatedDisconnect},ht=()=>{tt({hasActiveAnswer:!0,answerCreatedAt:Date.now()})};React.useEffect(()=>js({targetWindow:window,webrtcManagerRef:re,onClearData:zs}),[]),React.useEffect(()=>{Zs()},[]);let dt=React.useCallback((s,o,l={})=>{let u=Date.now()+Math.random(),g={message:s,type:o,id:u,timestamp:typeof l.timestamp=="number"?l.timestamp:Date.now(),mid:l.mid,status:l.status,viewOnce:l.viewOnce===!0,viewOnceTtl:typeof l.viewOnceTtl=="number"?l.viewOnceTtl:15,expiresAt:typeof l.expiresAt=="number"?l.expiresAt:void 0,voice:l.voice||void 0,fileId:l.fileId||void 0};return te(w=>{let A=[...w,g];return setTimeout(()=>{if(Jt?.current){let T=Jt.current;try{let{scrollTop:U,scrollHeight:ve,clientHeight:Se}=T;(ve-U-Se<100||w.length===0)&&requestAnimationFrame(()=>{T&&T.scrollTo&&T.scrollTo({top:T.scrollHeight,behavior:Ur()})})}catch(U){console.warn("Scroll error:",U),T.scrollTop=T.scrollHeight}}},50),A}),u},[]),kr=React.useCallback((s,o)=>{s&&te(l=>l.map(u=>String(u.mid)===String(s)&&u.type==="sent"?{...u,status:o}:u))},[]),vn=React.useCallback((s,o)=>{s!=null&&te(l=>l.map(u=>String(u.id)===String(s)?{...u,...typeof o=="function"?o(u):o}:u))},[]),er=React.useCallback((s,o)=>{s&&te(l=>l.map(u=>u.fileId&&String(u.fileId)===String(s)?{...u,...typeof o=="function"?o(u):o}:u))},[]),Xt=React.useCallback(s=>{let o=m.current.get(s);if(!o)return;let l=d.current.get(s),u=o.outgoing;o.outgoing=[];let g=[];for(let T of u){if(!l||l.isConnected?.()!==!0){g.push(T);continue}try{let U=l.sendMessage?.(T.outText,T.meta);U&&typeof U.then=="function"&&U.then(()=>e({type:J.UPDATE_MESSAGE_STATUS,id:s,mid:T.mid,status:"delivered"})).catch(()=>e({type:J.UPDATE_MESSAGE_STATUS,id:s,mid:T.mid,status:"failed"}))}catch{g.push(T)}}g.length&&(o.outgoing=g.concat(o.outgoing));let w=o.incoming;o.incoming=[],w.length>0&&e({type:J.ADD_MESSAGE,id:s,message:_s(`Connection restored \u2014 ${w.length} message${w.length===1?"":"s"} received while you were offline.`,"notice")});let A=s===r.current&&(typeof document>"u"||document.visibilityState==="visible");for(let T of w)if(e({type:J.ADD_MESSAGE,id:s,message:_s(T.message,T.type,T.opts)}),T.opts&&T.opts.mid&&T.type==="received")if(A)try{l?.sendDeliveryReceipt?.(T.opts.mid)}catch{}else o.pendingReadAcks&&o.pendingReadAcks.push(T.opts.mid)},[]),tr=React.useCallback(()=>{for(let s of m.current.keys())Xt(s)},[Xt]);React.useEffect(()=>{Qt||tr()},[Qt,tr]),React.useEffect(()=>{let s=setInterval(()=>{for(let[o,l]of m.current.entries()){if(!l.outgoing.length&&!l.incoming.length)continue;let u=d.current.get(o);u?.isConnected?.()===!0&&u?.isReconnecting?.()!==!0&&Xt(o)}},2e3);return()=>clearInterval(s)},[Xt]);let Bt=React.useCallback(async()=>{if(!window.isUpdatingSecurity){window.isUpdatingSecurity=!0;try{if(re.current&&(Ln({level:"MAXIMUM",score:100,color:"green",details:a("sec.allEnabled"),passedChecks:10,totalChecks:10,isRealData:!0}),window.DEBUG_MODE)){let s=re.current.ecdhKeyPair&&re.current.ecdsaKeyPair?await re.current.calculateSecurityLevel():{level:"MAXIMUM",score:100,sessionType:"premium",passedChecks:10,totalChecks:10}}}catch(s){console.error("Failed to update security level:",s),Ln({level:"ERROR",score:0,color:"red",details:a("sas.verificationFailed")})}finally{setTimeout(()=>{window.isUpdatingSecurity=!1},2e3)}}},[]),Jt=React.useRef(null),Pe=tc(Jt);React.useEffect(()=>{try{localStorage.setItem("securebit_relay_only_mode",String(vt))}catch{}re.current?._config?.webrtc&&re.current._setRelayOnlyMode(vt)},[vt]),React.useEffect(()=>{yt.length>0&&Jt.current&&(Pe(),setTimeout(Pe,50),setTimeout(Pe,150))},[yt]);let Ve=t.order.some(s=>(t.sessions[s]?.messages||[]).some(o=>typeof o.expiresAt=="number")),wn=React.useRef(t);wn.current=t,React.useEffect(()=>{if(!Ve)return;let s=l=>{let u=Date.now(),g=!1,w=l.map(A=>typeof A.expiresAt=="number"&&A.expiresAt<=u&&!A.expired?(g=!0,{...A,expired:!0,message:"",expiresAt:void 0}):A);return g?w:l},o=setInterval(()=>{let l=Date.now();De(l);let u=wn.current;for(let g of u.order)(u.sessions[g]?.messages||[]).some(A=>typeof A.expiresAt=="number"&&A.expiresAt<=l&&!A.expired)&&e({type:J.SET_MESSAGES,id:g,updater:s})},1e3);return()=>clearInterval(o)},[Ve]);let Bn=(s={})=>{let o=s.role||"offer",l=us({role:o}),u=l.id;e({type:J.CREATE_SESSION,entry:l,activate:s.activate!==!1}),m.current.set(u,{incoming:[],outgoing:[],pendingReadAcks:[]});let g=x=>{e(typeof x=="function"?{type:J.SET_MESSAGES,id:u,updater:x}:{type:J.SET_MESSAGES,id:u,messages:x})},w=(x,ye,ke={})=>{e({type:J.ADD_MESSAGE,id:u,message:_s(x,ye,ke)}),ye==="received"&&u!==r.current&&e({type:J.INCREMENT_UNREAD,id:u})},A=(x,ye)=>{x&&e({type:J.UPDATE_MESSAGE_STATUS,id:u,mid:x,status:ye})},T=(x,ye)=>{x!=null&&e({type:J.PATCH_MESSAGE,id:u,messageId:x,patch:ye})},U=(x,ye)=>{x&&e({type:J.PATCH_MESSAGE,id:u,fileId:x,patch:ye})},ve=x=>e({type:J.SET_STATUS,id:u,status:x}),Se=x=>e({type:J.SET_FINGERPRINT,id:u,fingerprint:x}),de=x=>e({type:J.SET_VERIFICATION,id:u,code:x}),fe=x=>e({type:J.SET_SAS,id:u,sas:{isVerified:!!x}}),nt=x=>e({type:J.SET_SAS,id:u,sas:{localConfirmed:!!x}}),He=x=>e({type:J.SET_SAS,id:u,sas:{remoteConfirmed:!!x}}),pt=x=>e({type:J.SET_SAS,id:u,sas:{bothConfirmed:!!x}}),rt=x=>e({type:J.PATCH_SETUP,id:u,patch:{showVerification:!!x}}),dc=x=>e({type:J.PATCH_SETUP,id:u,patch:{showOfferStep:!!x}}),pc=x=>e({type:J.PATCH_SETUP,id:u,patch:{showAnswerStep:!!x}}),uc=x=>e({type:J.PATCH_SETUP,id:u,patch:{showQRCode:!!x}}),fc=x=>e({type:J.PATCH_SETUP,id:u,patch:{qrCodeUrl:x}}),hc=x=>e({type:J.PATCH_SETUP,id:u,patch:{offerData:x}}),gc=x=>e({type:J.PATCH_SETUP,id:u,patch:{answerData:x}}),mc=x=>e({type:J.PATCH_SETUP,id:u,patch:{offerInput:x}}),yc=x=>e({type:J.PATCH_SETUP,id:u,patch:{answerInput:x}}),Ga=x=>{e(typeof x=="function"?{type:J.SET_PENDING_FILES,id:u,updater:x}:{type:J.SET_PENDING_FILES,id:u,files:x})},Hs=()=>m.current.get(u)||{incoming:[],outgoing:[]},Ws=(x,ye,ke)=>{if(typeof x=="string"&&x.trim().startsWith("{"))try{let Ce=JSON.parse(x);if(Ce.type==="presence"){let Vs=Ce.data&&Ce.data.status||Ce.status;Vs&&e({type:J.SET_PEER_PRESENCE,id:u,presence:Vs});return}if(or(Ce)){wt.current(u,Ce);return}let ut=["file_transfer_start","file_transfer_response","file_chunk","chunk_confirmation","file_transfer_complete","file_transfer_error","heartbeat","verification","verification_response","verification_confirmed","verification_both_confirmed","peer_disconnect","key_rotation_signal","key_rotation_ready","security_upgrade","message_delete","message_receipt"];if(Ce.type&&ut.includes(Ce.type)){console.log(`Blocked system/file message from chat: ${Ce.type}`);return}Ce.type==="message"&&typeof Ce.data=="string"&&(x=Ce.data,Ce.meta&&typeof Ce.meta=="object"&&(ke=Ce.meta))}catch{}let Oe={};if(ke&&typeof ke=="object"&&(typeof ke.mid=="string"&&(Oe.mid=ke.mid),ke.once===!0&&(Oe.viewOnce=!0,Oe.viewOnceTtl=Number.isFinite(ke.onceTtl)?ke.onceTtl:15),Number.isFinite(ke.ttl)&&ke.ttl>0&&(Oe.expiresAt=Date.now()+ke.ttl*1e3),Number.isFinite(ke.ts)&&(Oe.timestamp=ke.ts)),Yn.current&&ye==="received"){Hs().incoming.push({message:x,type:ye,opts:Oe});return}if(w(x,ye,Oe),Oe.mid&&ye==="received")if(u===r.current&&(typeof document>"u"||document.visibilityState==="visible"))try{nn?.sendDeliveryReceipt?.(Oe.mid)}catch{}else{let ut=Hs();ut.pendingReadAcks&&ut.pendingReadAcks.push(Oe.mid)}},Ha=x=>{let ye=v.current.get(u);if(v.current.set(u,x),ve(x),kt.current(u,x==="connected"||x==="verified"),x!=="reconnecting"){if(x==="connected"&&ye==="reconnecting"&&Xt(u),x==="recovery_failed"){ve("disconnected"),u===r.current&&(document.dispatchEvent(new CustomEvent("peer-disconnect")),document.dispatchEvent(new CustomEvent("disconnected"))),setTimeout(()=>{jr.current(u)||$r(u)},2500);return}if(x==="connected")document.dispatchEvent(new CustomEvent("new-connection")),window.isUpdatingSecurity||Bt().catch(console.error);else if(x==="verifying")rt(!0),window.isUpdatingSecurity||Bt().catch(console.error);else if(x==="verified"){fe(!0),rt(!1),pt(!0),ve("connected"),setTimeout(()=>{fe(!0)},0);try{let ke=Ft.current==="invisible"?"offline":Ft.current;setTimeout(()=>{try{let Oe=nn.sendMessage?.(JSON.stringify({type:"presence",status:ke}));Oe&&typeof Oe.catch=="function"&&Oe.catch(()=>{})}catch{}},400)}catch{}window.isUpdatingSecurity||Bt().catch(console.error)}else x==="connecting"?window.isUpdatingSecurity||Bt().catch(console.error):x==="disconnected"?(ve("disconnected"),fe(!1),rt(!1),nt(!1),He(!1),pt(!1),u===r.current&&document.dispatchEvent(new CustomEvent("disconnected"))):x==="peer_disconnected"&&(u===r.current&&(M(0),document.dispatchEvent(new CustomEvent("peer-disconnect"))),ve("peer_disconnected"),fe(!1),rt(!1),nt(!1),He(!1),pt(!1),setTimeout(()=>{jr.current(u)||$r(u)},2500))}},Wa=x=>{Se(x===""?"":x)},Va=x=>{x===""?(de(""),rt(!1)):(de(x),rt(!0))},ja=x=>{nt(x.localConfirmed),He(x.remoteConfirmed),pt(x.bothConfirmed)},$a=(x,ye)=>{x==="replay_attack"?(M(0),ae(null),w("\u{1F4A1} Data is outdated. Please create a new invitation or use a current response code.","system"),typeof console.clear=="function"&&console.clear()):x==="security_violation"&&(M(0),ae(null),w(` Security breach: ${ye}`,"system"),typeof console.clear=="function"&&console.clear())};typeof console.clear=="function"&&console.clear();let nn=new EnhancedSecureWebRTCManager(Ws,Ha,Wa,Va,$a,ja,{webrtc:{relayOnly:vt,iceServers:Array.isArray(Ot)&&Ot.length?Ot:Array.isArray(window.SECUREBIT_ICE_SERVERS)?window.SECUREBIT_ICE_SERVERS:void 0}});if(d.current.set(u,nn),nn.onMessageDelete=x=>{x&&g(ye=>ye.filter(ke=>String(ke.mid)!==String(x)))},nn.onMessageDelivered=x=>{A(x,"read")},typeof Notification<"u"&&Notification&&Notification.permission==="granted"&&window.NotificationIntegration&&!h.current.get(u))try{let x=new window.NotificationIntegration(nn);x.init().then(()=>{h.current.set(u,x)}).catch(ye=>{})}catch{}return Ws(" SecureBit.chat Enhanced Security Edition v5.6.0 - ECDH + DTLS + SAS initialized. Ready to establish a secure connection with ECDH key exchange, DTLS fingerprint verification, and SAS authentication to prevent MITM attacks.","system"),nn.setFileTransferCallbacks(x=>{if(x&&x.isVoice){let ye=Math.max(0,Math.min(100,x.progress||0)),ke=Oe=>Oe.voice?x.direction==="up"&&ye>=100?{voice:{...Oe.voice,transfer:null}}:{voice:{...Oe.voice,transfer:{dir:x.direction,pct:ye}}}:{};x.direction==="up"&&x.uiId!=null?T(x.uiId,ke):x.fileId&&U(x.fileId,ke);return}console.log("File progress:",x)},x=>{if(!!x.isVoice||typeof x.mimeType=="string"&&x.mimeType.startsWith("audio/")){x.getObjectURL().then(Ce=>{U(x.fileId,ut=>({voice:{...ut.voice||{},url:Ce,transfer:null}}))}).catch(Ce=>{console.error("Voice decode failed:",Ce),U(x.fileId,ut=>({voice:{...ut.voice||{},transfer:null,error:!0}}))});return}let ke=Math.max(1,Math.round((x.fileSize||0)/(1024*1024)));(async()=>{let Ce=await x.getObjectURL(),ut=document.createElement("a");ut.href=Ce,ut.download=x.fileName||"file",document.body.appendChild(ut),ut.click(),ut.remove(),setTimeout(()=>x.revokeObjectURL(Ce),15e3)})().then(()=>{w(`File received & saved: ${x.fileName} (${ke} MB)`,"system")}).catch(Ce=>{console.error("Auto-save failed:",Ce),w(`File received: ${x.fileName} (${ke} MB). Open the file panel to download it.`,"system")})},x=>{console.error("File transfer error:",x),x.includes(a("err.notReady"))?w(" File transfer error: connection not ready. Try again later.","system"):x.includes(a("err.fileTooLarge"))?w(" File is too big. Maximum size: 100 MB","system"):w(` File transfer error: ${x}`,"system")},x=>{if(x&&x.isVoice){let ye=x.voice||{};w("","received",{voice:{dur:Number.isFinite(ye.dur)?ye.dur:0,bars:Array.isArray(ye.bars)?ye.bars:null,transfer:{dir:"down",pct:0},url:null},fileId:x.fileId});try{nn.acceptIncomingFile(x.fileId)}catch{}return}Ga(ye=>ye.some(ke=>ke.fileId===x.fileId)?ye:[...ye,x])}),u},Zt=React.useRef(Bn);Zt.current=Bn;let zn=React.useRef(new Set),Un=React.useCallback(s=>{for(let o of k.current.values())if(o.sessionToFp&&o.sessionToFp.has(s))return!0;return!1},[]),jr=React.useRef(Un);jr.current=Un;let $r=React.useCallback(s=>{if(!(!s||zn.current.has(s))){zn.current.add(s);try{let o=d.current.get(s);if(o){try{o.disconnect()}catch{}d.current.delete(s)}let l=h.current.get(s);if(l){try{l.cleanup?.()}catch{}h.current.delete(s)}m.current.delete(s),v.current.delete(s),e({type:J.REMOVE_SESSION,id:s})}finally{zn.current.delete(s)}}},[]);React.useEffect(()=>{t.order.length===0&&Zt.current({role:"offer"})},[t.order.length]);let[Sr,Ms]=React.useState(()=>{try{return localStorage.getItem("securebit_sidebar_collapsed")==="true"}catch{return!1}});React.useEffect(()=>{try{localStorage.setItem("securebit_sidebar_collapsed",String(Sr))}catch{}},[Sr]);let[As,en]=React.useState(!1),aa=React.useCallback(s=>{e({type:J.SET_ACTIVE,id:s}),e({type:J.CLEAR_UNREAD,id:s}),en(!1)},[]),oa=React.useCallback(()=>{p({type:be.SET_ACTIVE_GROUP,id:null}),Zt.current({role:"offer"}),en(!1)},[]),ca=React.useCallback((s,o)=>{e({type:J.RENAME,id:s,label:o})},[]),Ts=React.useCallback(s=>{let o=xe.current.get(s);if(o){xe.current.delete(s);try{o.manager.disconnect()}catch{}}},[]),kn=React.useRef(Ts);kn.current=Ts;let Ns=React.useCallback((s,o)=>{let l="mesh:"+Array.from(crypto.getRandomValues(new Uint8Array(8))).map(U=>U.toString(16).padStart(2,"0")).join(""),u={manager:null,gid:s,fp:o,sessionId:l},g=U=>{if(typeof U!="string"||!U.trim().startsWith("{"))return;let ve;try{ve=JSON.parse(U)}catch{return}or(ve)&&wt.current(l,ve)},w=U=>{let ve=U==="disconnected"||U==="failed"||U==="peer_disconnected"||U==="recovery_failed";if(kt.current(l,!ve&&u.manager?.isVerified===!0),U==="recovery_failed"||U==="failed"){let Se=k.current.get(s);try{Se?.unbindSession(o)}catch{}kn.current(l)}},A=U=>{if(!(!U||!u.manager))try{u.manager.markGroupLinkVerified(`group:${s}`)}catch{kn.current(l),kt.current(l,!1)}},T=new EnhancedSecureWebRTCManager(g,w,()=>{},A,()=>{},()=>{},{emitGlobalEvents:!1,webrtc:{relayOnly:vt,iceServers:Array.isArray(Ot)&&Ot.length?Ot:Array.isArray(window.SECUREBIT_ICE_SERVERS)?window.SECUREBIT_ICE_SERVERS:void 0}});return u.manager=T,xe.current.set(l,u),u},[vt,Ot]),qr=React.useRef(Ns);qr.current=Ns;let Ds=React.useCallback(s=>({createOffer:async o=>{let l=qr.current(s,o);try{let u=await l.manager.createSecureOffer();if(!u||typeof u.sbq2!="string")throw new Error("mesh dial needs a compact descriptor");return{sessionId:l.sessionId,descriptor:u.sbq2}}catch(u){throw kn.current(l.sessionId),u}},createAnswer:async(o,l)=>{let u=qr.current(s,o);try{let g=await u.manager.createSecureAnswer({t:"offer",sbq2:l});if(!g||typeof g.sbq2!="string")throw new Error("mesh answer needs a compact descriptor");return{sessionId:u.sessionId,descriptor:g.sbq2}}catch(g){throw kn.current(u.sessionId),g}},acceptAnswer:async(o,l)=>{let u=xe.current.get(o);if(!u)throw new Error("that mesh dial is no longer open");await u.manager.handleSecureAnswer({t:"answer",sbq2:l})},close:o=>kn.current(o),linkFingerprint:o=>{let l=d.current.get(o)||xe.current.get(o)?.manager||null;return!l||l.isVerified!==!0?"":typeof l.keyFingerprint=="string"?l.keyFingerprint:""}}),[]);React.useEffect(()=>{for(let[s,o]of k.current){let l=S.groups[s];if(!(!l||l.phase!==Y.READY||!l.sasConfirmed))for(let u of t.order){let g=t.sessions[u];!g||!g.sas.isVerified||o.probeSession(u).catch(()=>{})}}},[S,t]);let Yr=React.useMemo(()=>t.order.map(s=>t.sessions[s]).filter(s=>s&&s.sas&&s.sas.isVerified).map(s=>({id:s.id,name:s.peerLabel,mono:Ar(s.peerLabel)})),[t]),la=React.useCallback(s=>{p({type:be.SET_ACTIVE_GROUP,id:s}),p({type:be.CLEAR_UNREAD,id:s}),en(!1)},[]),da=React.useCallback(async({name:s,sessionIds:o})=>{ge(!1);let l=Vn.newId(),u=new Vn({groupId:l,name:s,isAdmin:!0,subtle:crypto.subtle,send:at,emit:Je(l),mesh:Ds(l)});k.current.set(l,u);try{await u.init(),p({type:be.CREATE_GROUP,entry:Nr({id:l,name:s,selfFp:u.selfFp,adminFp:u.selfFp,isAdmin:!0,members:u._memberSnapshot()})}),await u.invite(o.map(g=>({sessionId:g,name:t.sessions[g]?.peerLabel||"Member"})))}catch(g){k.current.delete(l);try{u.destroy()}catch{}p({type:be.REMOVE_GROUP,id:l}),z(g?.code==="invitations_could_not_be_sent"?a("err.inviteNotConnectedRetry"):`The group could not be created (${g?.code||"unknown error"}).`)}},[at,Je,t]),pa=React.useCallback(async()=>{let s=P;if(!s)return;j(null);let o=new Vn({groupId:s.gid,name:s.name,isAdmin:!1,subtle:crypto.subtle,send:at,emit:Je(s.gid),mesh:Ds(s.gid)});k.current.set(s.gid,o);try{await o.init(),p({type:be.CREATE_GROUP,entry:Nr({id:s.gid,name:s.name,selfFp:o.selfFp})}),await o.acceptInvite(s.sessionId,s.frame)}catch(l){k.current.delete(s.gid);try{o.destroy()}catch{}p({type:be.SET_ERROR,id:s.gid,error:l?.code||"join_failed"})}},[P,at,Je]),ua=React.useCallback(()=>{let s=B.current,o=s&&k.current.get(s);if(o)try{o.confirmSas(),C(!1)}catch(l){p({type:be.SET_ERROR,id:s,error:l?.code||"confirm_failed"})}},[]),Er=React.useCallback((s,{announce:o=!0}={})=>{let l=k.current.get(s),u=$.current.get(s);u&&($.current.delete(s),u.leave().catch(()=>{})),ce(g=>{let w={...g};return delete w[s],w}),L(g=>{let w={...g};return delete w[s],w}),k.current.delete(s),Fe.current.delete(s),p({type:be.REMOVE_GROUP,id:s}),C(!1),l&&(o?Promise.resolve().then(()=>l.leave()).catch(()=>{}):Promise.resolve()).then(()=>{try{l.destroy()}catch{}})},[]),Fs=React.useRef(Er);Fs.current=Er;let fa=React.useCallback(async s=>{let o=B.current,l=o&&k.current.get(o);if(!l)return;let u=String(s||"").trim();if(u){le("");try{let{unreachable:g}=await l.sendText(u);p({type:be.ADD_MESSAGE,id:o,message:Ee(u,"sent")});let w=g.map(A=>A.fp).sort().join(",");if(w!==(Fe.current.get(o)||"")&&(Fe.current.set(o,w),g.length>0)){let A=g.map(U=>U.name),T=A.length===1?`${A[0]} is`:`${A.slice(0,-1).join(", ")} and ${A[A.length-1]} are`;p({type:be.ADD_MESSAGE,id:o,message:Ee(`${T} offline and will not receive messages until they reconnect.`,"system")})}}catch(g){p({type:be.ADD_MESSAGE,id:o,message:Ee(`Could not send: ${g?.message||"unknown error"}`,"system")})}}},[]),ha=React.useMemo(()=>{if(!I)return[];let s=new Set(I.members.map(o=>o.sessionId).filter(Boolean));return Yr.filter(o=>!s.has(o.id))},[I,Yr]),ga=React.useCallback(async s=>{X(!1);let o=B.current,l=o&&k.current.get(o);if(l)try{await l.addMembers(s.map(u=>({sessionId:u,name:t.sessions[u]?.peerLabel||"Member"})))}catch(u){z(u?.code==="invitations_could_not_be_sent"?a("err.inviteNotConnected"):u?.code==="too_many_members"?`A group is limited to ${F.MAX_MEMBERS} members.`:`Could not invite (${u?.code||"unknown error"}).`)}},[t]),ma=React.useCallback(async s=>{let o=B.current,l=o&&k.current.get(o);if(l)try{await l.removeMember(s)}catch(u){p({type:be.SET_ERROR,id:o,error:u?.code||"remove_failed"})}},[]),Ps=React.useCallback((s,o)=>{let l=$.current.get(s);if(!l)return;let u=k.current.get(s),g=o!==null?o:u?.getCallSnapshot?.()||null;if(!g||!g.joined||g.callId!==l.callId){$.current.delete(s),l.leave().catch(()=>{}),L(w=>{let A={...w};return delete A[s],A});return}l.setPeers(g.participants)},[]),Kr=React.useRef(Ps);Kr.current=Ps;let Rr=React.useCallback(async(s,o)=>{let l=$.current.get(s);if(l&&l.callId===o.callId)return l.setPeers(o.participants),l;l&&($.current.delete(s),await l.leave().catch(()=>{}));let u=new Lr({getManager:g=>d.current.get(g)||xe.current.get(g)?.manager||null,onChange:g=>{L(w=>({...w,[s]:g}))}});return $.current.set(s,u),await u.join({callId:o.callId,selfFp:S.groups[s]?.selfFp||k.current.get(s)?.selfFp||"",withVideo:o.withVideo,peers:[]}),u},[S]),ya=React.useCallback(async s=>{let o=B.current,l=o&&k.current.get(o);if(l)try{await l.startCall({withVideo:s,prepare:u=>Rr(o,u)})}catch(u){let g=$.current.get(o);g&&($.current.delete(o),g.leave().catch(()=>{}));let w=u?.code||"media_failed";p({type:be.ADD_MESSAGE,id:o,message:Ee(w==="call_in_progress"?a("groupCall.err.call_in_progress"):w==="not_ready"?a("groupCall.err.not_ready"):a(`groupCall.err.${pr(u)}`),"system")})}},[Rr]),ba=React.useCallback(async()=>{let s=B.current,o=s&&k.current.get(s),l=o?.getCallSnapshot?.();if(!(!o||!l))try{let u=await Rr(s,{...l,joined:!0});await o.joinCall(),u.setPeers(o.getCallSnapshot()?.participants||[])}catch(u){let g=$.current.get(s);g&&($.current.delete(s),g.leave().catch(()=>{})),p({type:be.ADD_MESSAGE,id:s,message:Ee(a(`groupCall.err.${pr(u)}`),"system")})}},[Rr]),xa=React.useCallback(()=>{let s=B.current,o=s&&k.current.get(s)?.getCallSnapshot?.();o&&Me(l=>({...l,[s]:o.callId}))},[]),va=React.useCallback(async()=>{let s=B.current;if(!s)return;let o=$.current.get(s);o&&($.current.delete(s),L(l=>{let u={...l};return delete u[s],u}),await o.leave().catch(()=>{}));try{await k.current.get(s)?.leaveCall()}catch{}},[]),Gn=React.useCallback(()=>B.current?$.current.get(B.current):null,[]),wa=React.useCallback(()=>{Gn()?.toggleMic()},[Gn]),ka=React.useCallback(()=>{Gn()?.toggleCamera()},[Gn]),Sa=React.useCallback(()=>{Gn()?.flipCamera()},[Gn]);React.useEffect(()=>{y&&p({type:be.CLEAR_UNREAD,id:y})},[y]),React.useEffect(()=>{let s=W.current;s&&(s.scrollTop=s.scrollHeight)},[I&&I.messages.length]),React.useEffect(()=>()=>{for(let s of $.current.values())s.leave().catch(()=>{});$.current.clear();for(let s of k.current.values())try{s.destroy()}catch{}k.current.clear();for(let s of[...xe.current.keys()])kn.current(s)},[]);let Qr=React.useCallback(s=>{if(!s)return;let o=m.current.get(s),l=d.current.get(s);if(!o||!l||!o.pendingReadAcks||o.pendingReadAcks.length===0)return;let u=o.pendingReadAcks;o.pendingReadAcks=[];for(let g of u)try{l.sendDeliveryReceipt?.(g)}catch{}},[]);React.useEffect(()=>{n&&(e({type:J.CLEAR_UNREAD,id:n}),(typeof document>"u"||document.visibilityState==="visible")&&Qr(n))},[n,Qr]);let Os=React.useRef(!1);React.useEffect(()=>{if(Os.current)return;Os.current=!0;let s=!1,o=null,l=g=>{if(g.type==="beforeunload"&&!s)for(let w of d.current.values())try{if(w.isConnected&&w.isConnected()){try{w.sendSystemMessage({type:"peer_disconnect",reason:"user_disconnect",timestamp:Date.now()})}catch{}setTimeout(()=>{try{w.disconnect()}catch{}},100)}else w.disconnect()}catch{}else s&&(g.preventDefault(),g.returnValue="")},u=()=>{document.visibilityState==="hidden"?(s=!0,o&&clearTimeout(o),o=setTimeout(()=>{s=!1},5e3)):document.visibilityState==="visible"&&(s=!1,o&&(clearTimeout(o),o=null),Qr(r.current))};return window.addEventListener("beforeunload",l),document.addEventListener("visibilitychange",u),()=>{window.removeEventListener("beforeunload",l),document.removeEventListener("visibilitychange",u),o&&(clearTimeout(o),o=null);for(let g of d.current.values())try{g.disconnect()}catch{}d.current.clear();for(let g of h.current.values())try{g.cleanup?.()}catch{}h.current.clear(),m.current.clear(),v.current.clear()}},[]);let ic=s=>{try{let o=typeof s=="string"?JSON.parse(s):s,l={type:o.type,version:o.version,timestamp:o.timestamp,sessionId:o.sessionId,connectionId:o.connectionId,verificationCode:o.verificationCode,salt:o.salt,keyFingerprints:o.keyFingerprints,fullDataAvailable:!0,compressionLevel:"minimal"};return JSON.stringify(l)}catch(o){return console.error("Error compressing offer data:",o),s}},ac=s=>({type:"enhanced_secure_offer_template",version:"4.0",sessionId:s.sessionId,connectionId:s.connectionId,verificationCode:s.verificationCode,timestamp:s.timestamp,keyFingerprints:s.keyFingerprints,authChallenge:s?.authChallenge?.challenge,capabilities:Array.isArray(s.capabilities)&&s.capabilities.length<=5?s.capabilities:void 0}),Ea=800,oc=400,[Xr,gt]=React.useState(0),[Ra,je]=React.useState(0),[nr,tn]=React.useState(!1),N=React.useRef({timer:null,chunks:[],idx:0,active:!1});React.useEffect(()=>()=>{try{N.current&&N.current.timer&&(clearInterval(N.current.timer),N.current.timer=null)}catch{}},[n]);let cc=()=>{try{N.current.timer&&clearInterval(N.current.timer)}catch{}N.current={timer:null,chunks:[],idx:0,active:!1},je(0),gt(0),tn(!1)},Jr=async()=>{let{chunks:s,idx:o}=N.current||{};if(!s||!s.length)return;let l=s[o%s.length];try{let g=typeof window<"u"&&(window.innerWidth||0)>=1024?720:512,w=await(window.generateQRCode?window.generateQRCode(l,{errorCorrectionLevel:"M",margin:2,size:g}):Promise.resolve(""));w&&ue(w)}catch(u){console.warn("Animated QR render error (current):",u)}je((N.current?.idx||0)%(N.current?.chunks?.length||1)+1)},Hn=async()=>{await Jr();let s=N.current?.chunks?.length||0;if(s>0){let o=((N.current?.idx||0)+1)%s;N.current.idx=o,je(o+1)}},_a=()=>{let s=!nr;tn(s),s?(N.current.timer&&(clearInterval(N.current.timer),N.current.timer=null),console.log("QR Manual mode enabled - auto-scroll stopped")):(N.current.chunks.length>1&&(N.current.active=!0,clearInterval(N.current.timer),N.current.timer=setInterval(Hn,3e3)),console.log("QR Manual mode disabled - auto-scroll resumed"))},Ca=async()=>{if(console.log("\u{1F3AE} nextQrFrame called, qrFramesTotal:",Xr,"qrAnimationRef.current:",N.current),N.current.chunks.length>1){let s=(N.current.idx+1)%N.current.chunks.length;N.current.idx=s,je(s+1),console.log("\u{1F3AE} Next frame index:",s+1);try{clearInterval(N.current.timer)}catch{}N.current.timer=null,await Jr(),!nr&&N.current.chunks.length>1?(N.current.active=!0,N.current.timer=setInterval(Hn,3e3)):N.current.active=!1}else console.log("\u{1F3AE} No multiple frames to navigate")},Ia=async()=>{if(console.log("\u{1F3AE} prevQrFrame called, qrFramesTotal:",Xr,"qrAnimationRef.current:",N.current),N.current.chunks.length>1){let s=(N.current.idx-1+N.current.chunks.length)%N.current.chunks.length;N.current.idx=s,je(s+1),console.log("\u{1F3AE} Previous frame index:",s+1);try{clearInterval(N.current.timer)}catch{}N.current.timer=null,await Jr(),!nr&&N.current.chunks.length>1?(N.current.active=!0,N.current.timer=setInterval(Hn,3e3)):N.current.active=!1}else console.log("\u{1F3AE} No multiple frames to navigate")},G=React.useRef({id:null,total:0,seen:new Set,items:[]}),Ls=async s=>{try{let o=typeof s=="string"?s.length:JSON.stringify(s).length,u=typeof window<"u"&&(window.innerWidth||0)>=1024?720:512;if(typeof window.generateBinaryQRCodeFromObject=="function")try{let de=typeof s=="string"?JSON.parse(s):s,fe=await window.generateBinaryQRCodeFromObject(de,{errorCorrectionLevel:"M",size:u,margin:2});if(fe){try{N.current&&N.current.timer&&clearInterval(N.current.timer)}catch{}N.current={timer:null,chunks:[],idx:0,active:!1},je(0),gt(0),tn(!1),ue(fe),gt(1),je(1);return}}catch(de){console.warn("Binary QR generation failed, falling back to compressed:",de?.message||de)}if(typeof window.generateCompressedQRCode=="function")try{let de=typeof s=="string"?s:JSON.stringify(s),fe=await window.generateCompressedQRCode(de,{errorCorrectionLevel:"M",size:u,margin:2});if(fe){try{N.current&&N.current.timer&&clearInterval(N.current.timer)}catch{}N.current={timer:null,chunks:[],idx:0,active:!1},je(0),gt(0),tn(!1),ue(fe),gt(1),je(1);return}}catch(de){console.warn("Compressed QR generation failed, falling back to plain:",de?.message||de)}let g=typeof s=="string"?s:JSON.stringify(s);if(g.length<=Ea){if(!window.generateQRCode)throw new Error("QR code generator unavailable");try{N.current&&N.current.timer&&clearInterval(N.current.timer)}catch{}N.current={timer:null,chunks:[],idx:0,active:!1},je(0),gt(0),tn(!1);let de=await window.generateQRCode(g,{errorCorrectionLevel:"M",size:u,margin:2});ue(de),gt(1),je(1);return}try{N.current&&N.current.timer&&clearInterval(N.current.timer)}catch{}N.current={timer:null,chunks:[],idx:0,active:!1},je(0),gt(0),tn(!1);let w=`raw_${Date.now()}_${Math.random().toString(36).slice(2)}`,T=Math.max(200,Math.floor(g.length/10)),U=Math.ceil(g.length/T),ve=[];for(let de=0;de<U;de++){let fe=de+1,nt=g.slice(de*T,(de+1)*T);ve.push(JSON.stringify({hdr:{v:1,id:w,seq:fe,total:U,rt:"raw"},body:nt}))}if(!window.generateQRCode)throw new Error("QR code generator unavailable");if(ve.length===1){let de=await window.generateQRCode(ve[0],{errorCorrectionLevel:"M",margin:2,size:u});ue(de),gt(1),je(1);return}N.current.chunks=ve,N.current.idx=0,N.current.active=!0,gt(ve.length),je(1);let Se={errorCorrectionLevel:"M",margin:2,size:u};await renderNext(),nr||(N.current.active=!0,N.current.timer=setInterval(Hn,4e3));return}catch(o){console.error("QR code generation failed:",o),te(l=>[...l,{message:` QR code generation failed: ${o.message}`,type:"error"}])}},Ma=s=>({type:"enhanced_secure_offer",version:s.version,timestamp:s.timestamp,sessionId:s.sessionId,connectionId:s.connectionId,verificationCode:s.verificationCode,salt:s.salt,sdp:s.sdp,keyFingerprints:s.keyFingerprints,capabilities:s.capabilities,ecdhPublicKey:{keyType:"ECDH",keyData:s.ecdhKeyData,timestamp:s.timestamp-1e3,version:s.version,signature:s.ecdhSignature},ecdsaPublicKey:{keyType:"ECDSA",keyData:s.ecdsaKeyData,timestamp:s.timestamp-999,version:s.version,signature:s.ecdsaSignature},authChallenge:{challenge:s.authChallenge,timestamp:s.timestamp,nonce:s.authNonce,version:s.version},securityLevel:{level:"CRITICAL",score:20,color:"red",verificationResults:{encryption:{passed:!1,details:"Encryption not working",points:0},keyExchange:{passed:!0,details:"Simple key exchange verified",points:15},messageIntegrity:{passed:!1,details:"Message integrity failed",points:0},rateLimiting:{passed:!0,details:"Rate limiting active",points:5},ecdsa:{passed:!1,details:"Enhanced session required - feature not available",points:0},metadataProtection:{passed:!1,details:"Enhanced session required - feature not available",points:0},pfs:{passed:!1,details:"Enhanced session required - feature not available",points:0},nestedEncryption:{passed:!1,details:"Enhanced session required - feature not available",points:0},packetPadding:{passed:!1,details:"Enhanced session required - feature not available",points:0},advancedFeatures:{passed:!1,details:"Premium session required - feature not available",points:0}},timestamp:s.timestamp,details:"Real verification: 20/100 security checks passed (2/4 available)",isRealData:!0,passedChecks:2,totalChecks:4,sessionType:"demo",maxPossibleScore:50}}),Aa=async s=>{try{if(console.log("QR Code scanned:",s.substring(0,100)+"..."),console.log("Current buffer state:",G.current),s.startsWith("SB2:")||s.charCodeAt(0)===2)return G.current={id:null,total:0,seen:new Set,items:[]},lt?Ke(s):et(s),te(l=>[...l,{message:a("flow.invitationCaptured"),type:"success"}]),We(!1),Promise.resolve(!0);if(s.startsWith("SB1:bin:")||G.current&&G.current.id){console.log("Binary chunk detected:",s.substring(0,50)+"..."),G.current.id||(console.log("Initializing buffer for binary chunks"),G.current={id:`bin_${Date.now()}`,total:4,seen:new Set,items:[],lastUpdateMs:Date.now()});let l=s.substring(0,50);if(G.current.seen.has(l))return console.log("Chunk already scanned, ignoring..."),Promise.resolve(!1);G.current.seen.add(l),G.current.items.push(s),G.current.lastUpdateMs=Date.now();try{let g=G.current.seen.size;document.dispatchEvent(new CustomEvent("qr-scan-progress",{detail:{id:G.current.id,seq:g,total:G.current.total}})),gt(G.current.total),je(g)}catch{}let u=G.current.seen.size>=G.current.total;if(console.log(`Chunks collected: ${G.current.seen.size}/${G.current.total}, complete: ${u}`),!u)return console.log(`Scanned chunk ${G.current.seen.size}/${G.current.total}, waiting for more...`),Promise.resolve(!1);try{let g=G.current.items.join("");return lt?Ke(g):et(g),te(w=>[...w,{message:"All binary chunks captured. Payload reconstructed.",type:"success"}]),G.current={id:null,total:0,seen:new Set,items:[]},We(!1),Promise.resolve(!0)}catch(g){return console.warn("Binary chunks reconstruction failed:",g),Promise.resolve(!1)}}if(s.length>100&&!s.startsWith("{")&&!s.startsWith("[")){console.log("Detected potential binary chunk (long non-JSON string):",s.substring(0,50)+"..."),G.current.id||(console.log("Initializing buffer for potential binary chunks"),G.current={id:`bin_${Date.now()}`,total:4,seen:new Set,items:[],lastUpdateMs:Date.now()});let l=s.substring(0,50);if(G.current.seen.has(l))return console.log("Chunk already scanned, ignoring..."),Promise.resolve(!1);G.current.seen.add(l),G.current.items.push(s),G.current.lastUpdateMs=Date.now();try{let g=G.current.seen.size;document.dispatchEvent(new CustomEvent("qr-scan-progress",{detail:{id:G.current.id,seq:g,total:G.current.total}})),gt(G.current.total),je(g)}catch{}let u=G.current.seen.size>=G.current.total;if(console.log(`Chunks collected: ${G.current.seen.size}/${G.current.total}, complete: ${u}`),!u)return console.log(`Scanned chunk ${G.current.seen.size}/${G.current.total}, waiting for more...`),Promise.resolve(!1);try{let g=G.current.items.join("");return lt?Ke(g):et(g),te(w=>[...w,{message:"All binary chunks captured. Payload reconstructed.",type:"success"}]),G.current={id:null,total:0,seen:new Set,items:[]},We(!1),Promise.resolve(!0)}catch(g){return console.warn("Binary chunks reconstruction failed:",g),Promise.resolve(!1)}}let o;if(typeof window.decodeAnyPayload=="function"){let l=window.decodeAnyPayload(s);typeof l=="string"?o=JSON.parse(l):o=l}else{let l=typeof window.decompressIfNeeded=="function"?window.decompressIfNeeded(s):s;o=JSON.parse(l)}if(console.log("Decoded data:",o),o.hdr&&o.body){let{hdr:l}=o;if(!G.current.id||G.current.id!==l.id){G.current={id:l.id,total:l.total||1,seen:new Set,items:[],lastUpdateMs:Date.now()};try{document.dispatchEvent(new CustomEvent("qr-scan-progress",{detail:{id:l.id,seq:0,total:l.total||1}}))}catch{}}G.current.seen.has(l.seq)||(G.current.seen.add(l.seq),G.current.items.push(s),G.current.lastUpdateMs=Date.now());try{let g=G.current.seen.size;document.dispatchEvent(new CustomEvent("qr-scan-progress",{detail:{id:l.id,seq:g,total:G.current.total||l.total||0}}))}catch{}if(!(G.current.seen.size>=(G.current.total||1)))return Promise.resolve(!1);if(l.rt==="raw")try{let w=G.current.items.map(T=>JSON.parse(T)).sort((T,U)=>(T.hdr.seq||0)-(U.hdr.seq||0)).map(T=>T.body||"").join(""),A=JSON.parse(w);lt?Ke(JSON.stringify(A,null,2)):et(JSON.stringify(A,null,2)),te(T=>[...T,{message:"All frames captured. RAW payload reconstructed.",type:"success"}]);try{document.dispatchEvent(new CustomEvent("qr-scan-complete",{detail:{id:l.id}}))}catch{}return G.current={id:null,total:0,seen:new Set,items:[]},We(!1),Promise.resolve(!0)}catch(g){return console.warn("RAW multi-frame reconstruction failed:",g),Promise.resolve(!1)}else if(l.rt==="bin")try{let w=G.current.items.map(T=>JSON.parse(T)).sort((T,U)=>(T.hdr.seq||0)-(U.hdr.seq||0)).map(T=>T.body||"").join(""),A;if(typeof window.decodeAnyPayload=="function"){let T=window.decodeAnyPayload(w);A=typeof T=="string"?JSON.parse(T):T}else A=JSON.parse(w);lt?Ke(JSON.stringify(A,null,2)):et(JSON.stringify(A,null,2)),te(T=>[...T,{message:"All frames captured. BIN payload reconstructed.",type:"success"}]);try{document.dispatchEvent(new CustomEvent("qr-scan-complete",{detail:{id:l.id}}))}catch{}return G.current={id:null,total:0,seen:new Set,items:[]},We(!1),Promise.resolve(!0)}catch(g){return console.warn("BIN multi-frame reconstruction failed:",g),Promise.resolve(!1)}else if(window.receiveAndProcess){try{let g=await window.receiveAndProcess(G.current.items);if(g.length>0){let{payloadObj:w}=g[0];lt?Ke(JSON.stringify(w,null,2)):et(JSON.stringify(w,null,2)),te(A=>[...A,{message:"All frames captured. COSE payload reconstructed.",type:"success"}]);try{document.dispatchEvent(new CustomEvent("qr-scan-complete",{detail:{id:l.id}}))}catch{}return G.current={id:null,total:0,seen:new Set,items:[]},We(!1),Promise.resolve(!0)}}catch(g){console.warn("COSE multi-chunk processing failed:",g)}return Promise.resolve(!1)}else return Promise.resolve(!1)}if(o.type==="enhanced_secure_offer_template"){console.log("QR scan: Template-based offer detected, reconstructing...");let l=Ma(o);return lt?(Ke(JSON.stringify(l,null,2)),console.log("\u{1F4F1} Template data populated to answerInput (waiting for response mode)")):(et(JSON.stringify(l,null,2)),console.log("\u{1F4F1} Template data populated to offerInput (paste invitation mode)")),te(u=>[...u,{message:"\u{1F4F1} QR code scanned successfully! Full offer reconstructed from template.",type:"success"}]),We(!1),!0}else return o.type==="secure_offer_reference"?(te(l=>[...l,{message:a("err.retiredQr"),type:"error"}]),!1):(!o.sdp&&o.type==="enhanced_secure_offer"&&te(l=>[...l,{message:a("err.compressedQrNote"),type:"warning"}]),lt?(console.log("QR scan: Populating answerInput with:",o),Ke(JSON.stringify(o,null,2))):(console.log("QR scan: Populating offerInput with:",o),et(JSON.stringify(o,null,2))),te(l=>[...l,{message:"\u{1F4F1} QR code scanned successfully!",type:"success"}]),We(!1),!0)}catch{return lt?Ke(s):et(s),te(l=>[...l,{message:"\u{1F4F1} QR code scanned successfully!",type:"success"}]),We(!1),!0}},Bs=async()=>{try{Nt(!0),At(""),Kt(!1),E(!1),ue("");let s=await re.current.createSecureOffer();At(s),Kt(!0);let o=typeof s=="object"?JSON.stringify(s):s;try{if(typeof window.encodeBinaryToPrefixed=="function"){let u=window.encodeBinaryToPrefixed(o),g=4,w=g,A=Math.max(200,Math.ceil(u.length/g));A<=0&&(A=200),u.length<=A?(w=1,A=u.length):(A=Math.ceil(u.length/g),w=g);let T=`bin_${Date.now()}_${Math.random().toString(36).slice(2)}`,U=[];for(let fe=0;fe<w;fe++){let nt=fe+1,He=u.slice(fe*A,(fe+1)*A);U.push(He)}let Se=typeof window<"u"&&(window.innerWidth||0)>=1024?720:512;if(window.generateQRCode&&U.length>0){let fe=await window.generateQRCode(U[0],{errorCorrectionLevel:"M",size:Se,margin:2});fe&&ue(fe)}try{N.current&&N.current.timer&&clearInterval(N.current.timer)}catch{}N.current={timer:null,chunks:U,idx:0,active:!0},gt(U.length),je(1),tn(!1);let de=3e3;N.current.timer=setInterval(Hn,de);try{E(!0)}catch{}}else{await Ls(s);try{E(!0)}catch{}}}catch(u){console.warn("Offer QR generation failed:",u)}yt.filter(u=>u.type==="system"&&(u.message.includes(a("flow.invitationCreated"))||u.message.includes(a("flow.sendEncryptedCode")))).length===0&&(te(u=>[...u,{message:a("flow.invitationCreatedBang"),type:"system",id:Date.now(),timestamp:Date.now()}]),te(u=>[...u,{message:a("flow.sendInvitation"),type:"system",id:Date.now(),timestamp:Date.now()}])),window.isUpdatingSecurity||Bt().catch(console.error)}catch(s){te(o=>[...o,{message:`Error creating invitation: ${s.message}`,type:"system",id:Date.now(),timestamp:Date.now()}])}finally{Nt(!1)}},Ta=async()=>{try{if(!Tt.trim()){te(s=>[...s,{message:a("err.needInvitation"),type:"system",id:Date.now(),timestamp:Date.now()}]);return}try{te(w=>[...w,{message:a("flow.processingInvitation"),type:"system",id:Date.now(),timestamp:Date.now()}]);let s;try{if(typeof window.decodeAnyPayload=="function"){let w=window.decodeAnyPayload(Tt.trim());s=typeof w=="string"?JSON.parse(w):w}else{let w=typeof window.decompressIfNeeded=="function"?window.decompressIfNeeded(Tt.trim()):Tt.trim();s=JSON.parse(w)}}catch(w){throw new Error(`Invalid invitation format: ${w.message}`)}if(!s||typeof s!="object")throw new Error("The invitation must be an object");if(!(s.t==="offer"||s.type==="enhanced_secure_offer"))throw new Error("Invalid invitation type. Expected offer or enhanced_secure_offer");let l=await re.current.createSecureAnswer(s);Yt(l),dn(!0);let u=typeof l=="object"?JSON.stringify(l):l;try{if(typeof window.encodeBinaryToPrefixed=="function"){let w=window.encodeBinaryToPrefixed(u),A=4,T=A,U=Math.max(200,Math.ceil(w.length/A));U<=0&&(U=200),w.length<=U?(T=1,U=w.length):(U=Math.ceil(w.length/A),T=A);let ve=`ans_${Date.now()}_${Math.random().toString(36).slice(2)}`,Se=[];for(let He=0;He<T;He++){let pt=He+1,rt=w.slice(He*U,(He+1)*U);Se.push(rt)}let fe=typeof window<"u"&&(window.innerWidth||0)>=1024?720:512;if(window.generateQRCode&&Se.length>0){let He=await window.generateQRCode(Se[0],{errorCorrectionLevel:"M",size:fe,margin:2});He&&ue(He)}try{N.current&&N.current.timer&&clearInterval(N.current.timer)}catch{}N.current={timer:null,chunks:Se,idx:0,active:!0},gt(Se.length),je(1),tn(!1);let nt=3e3;N.current.timer=setInterval(Hn,nt);try{E(!0)}catch{}}else{await Ls(l);try{E(!0)}catch{}}}catch(w){console.warn("Answer QR generation failed:",w)}typeof ht=="function"&&ht(),yt.filter(w=>w.type==="system"&&(w.message.includes(a("flow.responseCreated"))||w.message.includes(a("flow.sendTheResponse")))).length===0&&(te(w=>[...w,{message:a("flow.responseCreatedBang"),type:"system",id:Date.now(),timestamp:Date.now()}]),te(w=>[...w,{message:a("flow.sendResponse"),type:"system",id:Date.now(),timestamp:Date.now()}])),window.isUpdatingSecurity||Bt().catch(console.error)}catch(s){console.error("Error in handleCreateAnswer:",s),te(o=>[...o,{message:`Error processing the invitation: ${s.message}`,type:"system",id:Date.now(),timestamp:Date.now()}])}}catch(s){console.error("Error in handleCreateAnswer:",s),te(o=>[...o,{message:`Invitation processing error: ${s.message}`,type:"system",id:Date.now(),timestamp:Date.now()}])}},Na=async()=>{try{if(!Ye.trim()){te(s=>[...s,{message:a("err.needResponse"),type:"system",id:Date.now(),timestamp:Date.now()}]);return}try{te(l=>[...l,{message:a("flow.processingResponse"),type:"system",id:Date.now(),timestamp:Date.now()}]);let s;try{if(typeof window.decodeAnyPayload=="function"){let l=window.decodeAnyPayload(Ye.trim());s=typeof l=="string"?JSON.parse(l):l}else{let l=typeof window.decompressIfNeeded=="function"?window.decompressIfNeeded(Ye.trim()):Ye.trim();s=JSON.parse(l)}}catch(l){throw new Error(`Invalid response format: ${l.message}`)}if(!s||typeof s!="object")throw new Error("The response must be an object");let o=s.t||s.type;if(!o||o!=="answer"&&o!=="enhanced_secure_answer")throw new Error("Invalid response type. Expected answer or enhanced_secure_answer");await re.current.handleSecureAnswer(s),H&&(ae(null),te(l=>[...l,{message:"All security features enabled by default",type:"system",id:Date.now(),timestamp:Date.now()}])),te(l=>[...l,{message:a("flow.finalizing"),type:"system",id:Date.now(),timestamp:Date.now()}]),window.isUpdatingSecurity||Bt().catch(console.error)}catch(s){console.error("Error in handleConnect inner try:",s);let o=a("err.setupError");s.message.includes("CRITICAL SECURITY FAILURE")?s.message.includes("ECDH public key structure")?o=a("err.responseNoKey"):s.message.includes("ECDSA public key structure")?o=a("err.responseNoSignKey"):o=a("err.securityValidation"):s.message.includes("too old")||s.message.includes("replay")?o=a("err.responseOutdated"):s.message.includes("MITM")||s.message.includes("signature")?o=a("err.securityBreach"):s.message.includes("Invalid")||s.message.includes("format")?o=a("err.responseFormat"):o=` ${s.message}`,te(l=>[...l,{message:o,type:"system",id:Date.now(),timestamp:Date.now(),showRetryButton:!0}]),!s.message.includes("too old")&&!s.message.includes("replay")&&(ae(null),M(0)),St("failed")}}catch(s){console.error("Error in handleConnect outer try:",s);let o=a("err.setupError");s.message.includes("CRITICAL SECURITY FAILURE")?s.message.includes("ECDH public key structure")?o=a("err.responseNoKey"):s.message.includes("ECDSA public key structure")?o=a("err.responseNoSignKey"):o=a("err.securityValidation"):s.message.includes("too old")||s.message.includes("replay")?o=a("err.responseOutdated"):s.message.includes("MITM")||s.message.includes("signature")?o=a("err.securityBreach"):s.message.includes("Invalid")||s.message.includes("format")?o=a("err.responseFormat"):o=`${s.message}`,te(l=>[...l,{message:o,type:"system",id:Date.now(),timestamp:Date.now(),showRetryButton:!0}]),!s.message.includes("too old")&&!s.message.includes("replay")&&(ae(null),M(0)),St("failed")}},Da=async(s,o=!0)=>{if(o){re.current.confirmVerification(s),b(!0);try{if(window.NotificationIntegration&&re.current&&!fn.current){let l=new window.NotificationIntegration(re.current);await l.init(),fn.current=l,l.getStatus().permission==="granted"?te(g=>[...g,{message:"\u2713 Notifications enabled - you will receive alerts when the tab is inactive",type:"system",id:Date.now(),timestamp:Date.now()}]):te(g=>[...g,{message:"\u2139 Notifications disabled - you can enable them using the button on the main page",type:"system",id:Date.now(),timestamp:Date.now()}])}else fn.current}catch(l){console.warn("Failed to initialize notifications:",l)}}else te(l=>[...l,{message:" Verification rejected. The connection is unsafe! Session reset..",type:"system",id:Date.now(),timestamp:Date.now()}]),b(!1),Ae(!1),Ze(!1),f(!1),Ht(""),St("disconnected"),At(""),Yt(""),et(""),Ke(""),Kt(!1),dn(!1),Gt(""),Ln(null),Wt(!1),te([]),M(0),ae(null),document.dispatchEvent(new CustomEvent("disconnected")),Zr()},Fa=async()=>{if(!On.trim()||!re.current)return;let s=On.trim(),o=`m_${Date.now().toString(36)}_${Math.random().toString(36).slice(2,8)}`,l=re.current,u=l?.isConnected?.()===!0&&l?.isReconnecting?.()!==!0;if(!u&&l?.isConnected){let g=Pt?"```\n"+s+"\n```":s,w=Date.now(),A={mid:o,ts:w};Rt&&(A.once=!0,A.onceTtl=gn),_t>0&&(A.ttl=_t);let T={mid:o,status:"sent",timestamp:w};_t>0&&(T.expiresAt=w+_t*1e3),dt(g,"sent",T);let U=m.current.get(r.current);U&&U.outgoing.push({outText:g,meta:A,mid:o}),bn(""),Pt&&hn(!1),Rt&&Dn(!1);return}if(!u){dt(a("chat.notSentReason"),"system");return}try{let g=s,w=Pt?"```\n"+g+"\n```":g,A=o,T={mid:A,ts:Date.now()};Rt&&(T.once=!0,T.onceTtl=gn),_t>0&&(T.ttl=_t);let U={mid:A,status:"sending"};_t>0&&(U.expiresAt=Date.now()+_t*1e3),dt(w,"sent",U);try{await re.current.sendMessage(w,T),kr(A,"delivered")}catch(ve){throw kr(A,"failed"),ve}bn(""),Pt&&hn(!1),Rt&&Dn(!1)}catch(g){let w=String(g?.message||g);/queued for sending|Data channel not ready/i.test(w)||dt(`Sending error: ${w}`,"system")}},Pa=async(s,o,l)=>{if(!s||!re.current)return;let u=String(s.type||"").toLowerCase(),g="audio/wav";u.startsWith("audio/webm")?g="audio/webm":u.startsWith("audio/mp4")||u.startsWith("audio/x-m4a")?g="audio/mp4":u.startsWith("audio/ogg")&&(g="audio/ogg");let w=g==="audio/mp4"?"m4a":g==="audio/ogg"?"ogg":g==="audio/webm"?"webm":"wav",A=new File([s],`voice-message.${w}`,{type:g}),T=null;try{T=URL.createObjectURL(s)}catch{}let U=re.current?.isReconnecting?.()===!0;if(U||re.current?.isConnected?.()!==!0){if(T)try{URL.revokeObjectURL(T)}catch{}dt(U?a("err.voiceRestoring"):a("err.voiceNeedsConnection"),"system");return}let Se={dur:Math.max(1,Math.round(o||0)),bars:Array.isArray(l)?l.map(fe=>Math.round(fe*1e3)/1e3):[]},de=dt("","sent",{voice:{dur:Se.dur,bars:Se.bars,url:T,transfer:{dir:"up",pct:0}}});try{await re.current.sendFile(A,{voice:Se,uiId:de}),vn(de,fe=>({voice:{...fe.voice||{},transfer:null}}))}catch(fe){vn(de,He=>({voice:{...He.voice||{},transfer:null,error:!0}}));let nt=String(fe?.message||fe);/queued for sending|Data channel not ready/i.test(nt)||dt(`Voice message failed: ${nt}`,"system")}},Oa=React.useCallback(s=>{if(s){te(o=>o.filter(l=>String(l.mid)!==String(s)));try{re.current?.sendMessageDelete?.(String(s))}catch{}}},[]),La=React.useCallback(s=>{te(o=>o.map(l=>l.id===s?{...l,expired:!0,message:"",expiresAt:void 0}:l))},[]),zs=()=>{At(""),Yt(""),et(""),Ke(""),Kt(!1),Nt(!1),xn()||dn(!1),f(!1),E(!1),Xn(!1),We(!1),G.current={id:null,total:0,seen:new Set,items:[]},xn()||ue(""),Ht(""),Wt(!1),Gt(""),Ln(null),St("disconnected"),te([]),bn(""),b(!1),Ae(!1),Ze(!1),typeof console.clear=="function"&&console.clear(),M(0),ae(null),document.dispatchEvent(new CustomEvent("peer-disconnect"))},Ba=React.useCallback(async(s,o)=>{try{o?await re.current?.acceptIncomingFile(s):await re.current?.rejectIncomingFile(s)}finally{cn(l=>l.filter(u=>u.fileId!==s))}},[]),Zr=()=>{try{let s=r.current;ta(),M(0),document.dispatchEvent(new CustomEvent("peer-disconnect")),document.dispatchEvent(new CustomEvent("disconnected")),document.dispatchEvent(new CustomEvent("session-cleanup",{detail:{timestamp:Date.now(),reason:"manual_disconnect"}})),$r(s),typeof console.clear=="function"&&console.clear()}catch(s){console.error("Error during disconnect:",s)}},lc=s=>{let o;s.type==="demo"?o=" Demo session activated for 6 minutes. You can create invitations!":o=" All security features enabled by default. You can create invitations!",dt(o,"system")},Us=React.useRef(Ne);React.useEffect(()=>{let s=Us.current==="reconnecting";Us.current=Ne,Ne==="connected"&&xt&&!s&&dt(" Secure connection successfully established and verified! You can now communicate safely with full protection against MITM attacks and Perfect Forward Secrecy..","system")},[Ne,xt]);let es=React.useMemo(()=>{try{return new URLSearchParams(window.location.search).get("preview")==="chat"}catch{return!1}},[]),It=(Ne==="connected"||Ne==="verified"||Ne==="reconnecting")&&xt,Gs=React.useRef({id:n,live:It});React.useEffect(()=>{let s=Gs.current;Gs.current={id:n,live:It},s.live&&!It&&s.id===n&&ta()},[It,n]),React.useEffect(()=>(document.body.classList.toggle("sb-in-chat",It||es),()=>document.body.classList.remove("sb-in-chat")),[It,es]),React.useEffect(()=>{It&&H&&Ne!=="failed"&&(ae(null),M(0),dt(" All security features enabled by default","system"))},[It,H,Ne]),React.useEffect(()=>{if(Jn&&window.Html5Qrcode){let s=new window.Html5Qrcode("qr-reader"),o={fps:10},l=!0;return s.start({facingMode:"environment"},o,(u,g)=>{if(!l){console.log("Scanner stopped, ignoring scan");return}console.log("QR Code scanned:",u),console.log("Current buffer state:",G.current),Aa(u).then(w=>{if(console.log("QR scan result:",w),w){console.log("Closing scanner and modal"),l=!1;try{console.log("Stopping scanner..."),s.stop().then(()=>{console.log("Scanner stopped, clearing..."),s.clear(),We(!1)}).catch(A=>{console.log("Error stopping scanner:",A);try{s.clear()}catch(T){console.log("Error clearing scanner:",T)}We(!1)})}catch(A){console.log("Error in scanner cleanup:",A),We(!1)}}else console.log("Continuing to scan for more chunks...")}).catch(w=>{console.error("QR scan processing error:",w)})},u=>{l&&console.log("QR scan error (ignored):",u)}).catch(u=>{console.error("QR Scanner start error:",u),We(!1)}),()=>{l=!1;try{s.stop().then(()=>{s.clear()}).catch(u=>{console.log("Scanner already stopped or error stopping:",u);try{s.clear()}catch(g){console.log("Error clearing scanner in cleanup:",g)}})}catch(u){console.log("Error in cleanup:",u);try{s.clear()}catch(g){console.log("Error clearing scanner in cleanup:",g)}}}}},[Jn,Zn]);let za=fi(t),Ua=Oi(S),jt=t.order.length>1||S.order.length>0||t.order.some(s=>{let o=t.sessions[s];return o&&o.sas&&o.sas.isVerified});if(es){let s=[{message:"Preview mode \u2014 no connection is open.",type:"system",id:1,timestamp:Date.now()-3e5},{message:"This renders the real chat components so the layout can be checked without a handshake.",type:"received",id:2,timestamp:Date.now()-24e4},{message:"Header pinned, list scrolls, composer sits above the keyboard.",type:"sent",id:3,timestamp:Date.now()-18e4},...Array.from({length:30},(l,u)=>({message:"Filler message "+(u+1)+" \u2014 enough content to make the list scroll.",type:u%2?"sent":"received",id:10+u,timestamp:Date.now()-(30-u)*5e3}))],o=()=>{};return React.createElement("div",{className:"minimal-bg sb-app-shell",style:{display:"flex",flexDirection:"row",height:"100vh",width:"100%",overflow:"hidden"}},[React.createElement(ra,{key:"sidebar",chats:[{id:"preview",label:"Preview peer",unread:0,active:!0,verified:!0}],collapsed:Sr,drawerOpen:As,onToggleCollapse:()=>Ms(l=>!l),onSelect:o,onNewChat:o,onRename:o,onCloseDrawer:()=>en(!1),myStatus:Vt,onSetStatus:gr}),React.createElement("button",{key:"burger",className:"sb-burger",onClick:()=>en(!0),style:{display:"none",position:"fixed",top:"calc(13px + var(--sb-safe-top, 0px))",insetInlineStart:"13px",zIndex:55,width:"38px",height:"38px",borderRadius:"10px",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-bg-rgb), 0.9)",color:"var(--sb-text-4)",cursor:"pointer"},dangerouslySetInnerHTML:{__html:on.burger}}),React.createElement("div",{key:"col",className:"minimal-bg sb-app-col",style:{flex:1,minWidth:0,height:"100vh",overflow:"hidden",display:"flex",flexDirection:"column"}},React.createElement("main",{key:"main"},React.createElement(na,{title:"Preview peer",isOffline:!1,peerPresence:"available",onRenameTitle:o,messages:s,messageInput:On,setMessageInput:bn,onSendMessage:o,onSendVoice:o,onDisconnect:o,keyFingerprint:"preview",isVerified:!0,chatMessagesRef:Jt,scrollToBottom:o,webrtcManager:null,status:"connected",pendingIncomingFiles:[],onIncomingDecision:o,codeMode:Pt,setCodeMode:hn,viewOnceMode:Rt,setViewOnceMode:Dn,viewOnceTtl:gn,setViewOnceTtl:mr,disappearTtl:_t,setDisappearTtl:yr,nowTick:br,onUnsendMessage:o,onMessageExpire:o})))])}return React.createElement("div",{className:jt?"minimal-bg sb-app-shell":"minimal-bg",style:jt?{display:"flex",flexDirection:"row",height:"100vh",width:"100%",overflow:"hidden"}:{minHeight:"100vh"}},[jt&&React.createElement(ra,{key:"sessions-sidebar",chats:za,groups:Ua,collapsed:Sr,drawerOpen:As,onToggleCollapse:()=>Ms(s=>!s),onSelect:s=>{p({type:be.SET_ACTIVE_GROUP,id:null}),aa(s)},onSelectGroup:la,onNewChat:oa,onNewGroup:()=>{ge(!0),en(!1)},onRename:ca,onCloseDrawer:()=>en(!1),myStatus:Vt,onSetStatus:gr}),ee&&React.createElement(Wi,{key:"create-group",candidates:Yr,relayOnly:vt,onCreate:da,onCancel:()=>ge(!1)}),P&&React.createElement($i,{key:"group-invite",invite:{name:P.name,fromLabel:t.sessions[P.sessionId]?.peerLabel||"A verified contact"},onAccept:pa,onDecline:()=>j(null)}),O&&React.createElement(Vi,{key:"group-error",message:O,onDismiss:()=>z(null)}),Q&&I&&React.createElement(ji,{key:"add-members",candidates:ha,remaining:Math.max(0,F.MAX_MEMBERS-I.members.length),onAdd:ga,onCancel:()=>X(!1)}),we&&I&&React.createElement(Hi,{key:"group-sas",group:I,onConfirm:ua,onCancel:()=>{I.phase===Y.READY?C(!1):Er(I.id)}}),jt&&React.createElement("button",{key:"sb-burger",className:"sb-burger",onClick:()=>en(!0),style:{display:"none",position:"fixed",top:"calc(13px + var(--sb-safe-top, 0px))",insetInlineStart:"13px",zIndex:55,width:"38px",height:"38px",borderRadius:"10px",placeItems:"center",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"rgba(var(--sb-bg-rgb), 0.9)",color:"var(--sb-text-4)",cursor:"pointer"},dangerouslySetInnerHTML:{__html:on.burger}}),React.createElement("div",{key:"app-column",className:jt?"minimal-bg sb-app-col":"minimal-bg min-h-screen",style:jt?{flex:1,minWidth:0,height:"100vh",overflow:"hidden",display:"flex",flexDirection:"column"}:{}},[!It&&!jt&&window.EnhancedMinimalHeader&&React.createElement(window.EnhancedMinimalHeader,{key:"header",status:Ne,fingerprint:bt,verificationCode:Et,onDisconnect:Zr,isConnected:It,securityLevel:Wr,webrtcManager:re.current}),!It&&!jt&&React.createElement(Ss,{key:"lang-suggest"}),I&&React.createElement("main",{key:"group-main",style:{flex:1,minHeight:0,display:"flex",flexDirection:"column"}},React.createElement(qi,{group:I,input:D,setInput:le,onSend:fa,onLeave:()=>Er(I.id),onRemoveMember:ma,onAddMembers:()=>X(!0),isAdmin:I.isAdmin,scrollRef:W,onStartCall:ya,callActive:!!se[I.id],callOverlay:(()=>{let s=se[I.id]||null;if(!s||!s.joined&&ne[I.id]===s.callId)return null;let o=me[I.id]||null;return React.createElement(Es,{key:"group-call",call:s,media:o,groupName:I.name,localStream:$.current.get(I.id)?.getLocalStream()||null,getRemoteStream:l=>$.current.get(I.id)?.getRemoteStream(l)||null,onJoin:ba,onDismiss:xa,onLeave:va,onToggleMic:wa,onToggleCamera:ka,onFlipCamera:Sa})})()})),!I&&React.createElement("main",{key:"main"},It?React.createElement(na,{title:i?i.peerLabel:"",isOffline:Qt,peerPresence:i?i.peerPresence:null,onRenameTitle:s=>{n&&e({type:J.RENAME,id:n,label:s})},messages:yt,messageInput:On,setMessageInput:bn,onSendMessage:Fa,onSendVoice:Pa,onDisconnect:Zr,keyFingerprint:bt,isVerified:xt,chatMessagesRef:Jt,scrollToBottom:Pe,webrtcManager:re.current,status:Ne,pendingIncomingFiles:Be,onIncomingDecision:Ba,codeMode:Pt,setCodeMode:hn,viewOnceMode:Rt,setViewOnceMode:Dn,viewOnceTtl:gn,setViewOnceTtl:mr,disappearTtl:_t,setDisappearTtl:yr,nowTick:br,onUnsendMessage:Oa,onMessageExpire:La}):React.createElement(Zo,{onCreateOffer:Bs,onCreateAnswer:Ta,onConnect:Na,onClearData:zs,onVerifyConnection:Da,connectionStatus:Ne,offerData:Tn,answerData:ln,offerInput:Tt,setOfferInput:et,answerInput:Ye,setAnswerInput:Ke,showOfferStep:lt,showAnswerStep:fr,verificationCode:Et,showVerification:pn,showQRCode:un,qrCodeUrl:ie,showQRScanner:vr,setShowQRCode:E,setShowQRScanner:Xn,setShowQRScannerModal:We,messages:yt,localVerificationConfirmed:qt,remoteVerificationConfirmed:Z,bothVerificationsConfirmed:qe,qrFramesTotal:Xr,qrFrameIndex:Ra,qrManualMode:nr,toggleQrManualMode:_a,nextQrFrame:Ca,prevQrFrame:Ia,markAnswerCreated:ht,notificationIntegrationRef:fn,isGeneratingKeys:_e,setIsGeneratingKeys:Nt,handleCreateOffer:Bs,relayOnlyMode:vt,setRelayOnlyMode:Fn,webrtcManagerRef:re,showIceSettings:yn,setShowIceSettings:Qn,iceServersText:Pn,iceSettingsPersisted:Ct,customIceServers:Ot,handleApplyIceSettings:xr,handleForgetIceSettings:Hr,compact:jt})),Jn&&(()=>{let s=()=>{We(!1),G.current={id:null,total:0,seen:new Set,items:[]}},o=G.current,u=!!(o&&o.id&&o.total>1)?`Scanning frames\u2026 ${o.seen.size} / ${o.total}`:a("qr.scanning"),g=(w,A)=>React.createElement("span",{key:w,style:Object.assign({position:"absolute",width:"34px",height:"34px",zIndex:3},A)});return React.createElement("div",{key:"qr-scanner-modal",onClick:s,style:{position:"fixed",inset:0,zIndex:50,display:"flex",alignItems:"center",justifyContent:"center",padding:"32px",background:"rgba(var(--sb-scrim-rgb), 0.82)",backdropFilter:"blur(10px)",WebkitBackdropFilter:"blur(10px)",animation:"sbUp .2s ease"}},[React.createElement("div",{key:"scanner-container",onClick:w=>w.stopPropagation(),style:{width:"100%",maxWidth:"420px",borderRadius:"22px",border:"1px solid rgba(var(--sb-ink), 0.1)",background:"var(--sb-bg)",boxShadow:"0 30px 90px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))",overflow:"hidden"}},[React.createElement("div",{key:"scanner-header",style:{display:"flex",alignItems:"center",gap:"11px",padding:"18px 20px",borderBottom:"1px solid rgba(var(--sb-ink), 0.06)"}},[React.createElement("span",{key:"scanner-icon",style:{display:"flex"},dangerouslySetInnerHTML:{__html:'<svg width="18" height="18" viewBox="0 0 24 24" fill="none" stroke="var(--sb-green-solid)" stroke-width="1.9" stroke-linecap="round" stroke-linejoin="round"><path d="M2 8.5V6.5A2.5 2.5 0 0 1 4.5 4h2M17.5 4h2A2.5 2.5 0 0 1 22 6.5v2M22 15.5v2a2.5 2.5 0 0 1-2.5 2.5h-2M6.5 20h-2A2.5 2.5 0 0 1 2 17.5v-2"/><circle cx="12" cy="12" r="3.2"/></svg>'}}),React.createElement("div",{key:"scanner-titles",style:{flex:1,lineHeight:1.2}},[React.createElement("div",{key:"scanner-title",style:{fontSize:"15.5px",fontWeight:800,color:"var(--sb-text-1)"}},a("qr.title")),React.createElement("div",{key:"scanner-hint",style:{fontSize:"12px",color:"var(--sb-text-8)"}},a("qr.subtitle"))]),React.createElement("button",{key:"close-btn",onClick:s,style:{width:"32px",height:"32px",display:"grid",placeItems:"center",borderRadius:"9px",border:"none",background:"rgba(var(--sb-ink), 0.05)",color:"var(--sb-text-6)",cursor:"pointer"}},React.createElement("i",{className:"fas fa-times"}))]),React.createElement("div",{key:"scanner-body",style:{padding:"22px 24px 24px"}},[React.createElement("div",{key:"viewfinder",style:{position:"relative",aspectRatio:"1",borderRadius:"18px",overflow:"hidden",background:"#000",border:"1px solid rgba(var(--sb-ink), 0.1)"}},[React.createElement("div",{key:"vf-bg",style:{position:"absolute",inset:0,background:"radial-gradient(circle at 50% 45%, var(--sb-surface-2), #000)"}}),React.createElement("div",{key:"qr-reader",id:"qr-reader",style:{position:"absolute",inset:0,zIndex:1}}),g("c-tl",{top:"18px",insetInlineStart:"18px",borderTop:"2.5px solid var(--sb-green-solid)",borderInlineStart:"2.5px solid var(--sb-green-solid)",borderRadius:"8px 0 0 0"}),g("c-tr",{top:"18px",insetInlineEnd:"18px",borderTop:"2.5px solid var(--sb-green-solid)",borderInlineEnd:"2.5px solid var(--sb-green-solid)",borderRadius:"0 8px 0 0"}),g("c-bl",{bottom:"18px",insetInlineStart:"18px",borderBottom:"2.5px solid var(--sb-green-solid)",borderInlineStart:"2.5px solid var(--sb-green-solid)",borderRadius:"0 0 0 8px"}),g("c-br",{bottom:"18px",insetInlineEnd:"18px",borderBottom:"2.5px solid var(--sb-green-solid)",borderInlineEnd:"2.5px solid var(--sb-green-solid)",borderRadius:"0 0 8px 0"}),React.createElement("span",{key:"scan-line",style:{position:"absolute",left:"18px",right:"18px",height:"2.5px",zIndex:2,background:"linear-gradient(90deg, transparent, var(--sb-green), transparent)",boxShadow:"0 0 16px var(--sb-green)",animation:"sbScan 1.5s ease-in-out infinite alternate"}}),React.createElement("div",{key:"scan-status",style:{position:"absolute",bottom:0,left:0,right:0,zIndex:3,display:"flex",alignItems:"center",justifyContent:"center",gap:"8px",padding:"14px",background:"linear-gradient(transparent, rgba(0,0,0,0.6))"}},[React.createElement("span",{key:"spinner",style:{display:"flex",animation:"sbSpin 1.4s linear infinite"},dangerouslySetInnerHTML:{__html:'<svg width="15" height="15" viewBox="0 0 24 24" fill="none" stroke="var(--sb-green-solid)" stroke-width="2" stroke-linecap="round"><path d="M21 12a9 9 0 1 1-6.2-8.6"/></svg>'}}),React.createElement("span",{key:"scan-frames",style:{fontSize:"12.5px",fontWeight:600,color:"var(--sb-text-4)"}},u)])]),React.createElement("p",{key:"scanner-note",style:{margin:"16px 0 0",textAlign:"center",fontSize:"12px",lineHeight:1.5,color:"var(--sb-text-9)"}},a("qr.hint"))])])])})()])])},rc=({children:t})=>typeof window<"u"&&window.UpdateChecker?React.createElement(window.UpdateChecker,{debug:!1},t):t;function sc(){if(window.EnhancedSecureCryptoUtils&&window.EnhancedSecureWebRTCManager){let t=React.createElement(rc,null,React.createElement(Is));ReactDOM.render(t,document.getElementById("root"))}else console.error("\u041C\u043E\u0434\u0443\u043B\u0438 \u043D\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043D\u044B:",{hasCrypto:!!window.EnhancedSecureCryptoUtils,hasWebRTC:!!window.EnhancedSecureWebRTCManager})}typeof window<"u"&&(window.addEventListener("unhandledrejection",t=>{console.error("Unhandled promise rejection:",t.reason),t.preventDefault()}),window.addEventListener("error",t=>{console.error("Global error:",t.error),t.preventDefault()}),window.initializeApp||(window.initializeApp=sc));if(window.EnhancedSecureCryptoUtils&&window.EnhancedSecureWebRTCManager){let t=({children:n})=>typeof window<"u"&&window.UpdateChecker?React.createElement(window.UpdateChecker,{debug:!1},n):n,e=React.createElement(t,null,React.createElement(Is));ReactDOM.render(e,document.getElementById("root"))}else ReactDOM.render(React.createElement(Is),document.getElementById("root"));
 //# sourceMappingURL=app.js.map
diff --git a/dist/app.js.map b/dist/app.js.map
index 827e537..cab6942 100644
--- a/dist/app.js.map
+++ b/dist/app.js.map
@@ -1,7 +1,7 @@
 {
   "version": 3,
   "sources": ["../src/utils/debugWindowHooks.js", "../src/network/iceSettingsStore.js", "../src/network/turnCredentials.js", "../src/i18n/generated.js", "../src/i18n/dict/en.js", "../src/i18n/index.js", "../src/state/sessionsStore.js", "../src/group/groupCrypto.js", "../src/state/groupsStore.js", "../src/group/GroupSession.js", "../src/group/groupSender.js", "../src/ui/motion.js", "../src/components/ui/LanguageSuggestion.jsx", "../src/components/ui/GroupChat.jsx", "../src/group/groupCallMedia.js", "../src/components/ui/callLayout.js", "../src/components/ui/GroupCallUI.jsx", "../src/app.jsx"],
-  "sourcesContent": ["function isSecureBitDebugEnabled(targetWindow = globalThis.window) {\n    return targetWindow?.SECUREBIT_DEBUG === true;\n}\n\nfunction installDebugWindowHooks({\n    targetWindow = globalThis.window,\n    webrtcManagerRef,\n    onClearData,\n    clearConsole = () => {\n        if (typeof console.clear === 'function') {\n            console.clear();\n        }\n    }\n}) {\n    if (!isSecureBitDebugEnabled(targetWindow)) {\n        return () => {};\n    }\n\n    targetWindow.forceCleanup = () => {\n        onClearData();\n        if (webrtcManagerRef.current) {\n            webrtcManagerRef.current.disconnect();\n        }\n    };\n    targetWindow.clearLogs = clearConsole;\n    targetWindow.webrtcManagerRef = webrtcManagerRef;\n\n    return () => {\n        delete targetWindow.forceCleanup;\n        delete targetWindow.clearLogs;\n        delete targetWindow.webrtcManagerRef;\n    };\n}\n\nexport { installDebugWindowHooks, isSecureBitDebugEnabled };\n", "// Persistent, at-rest-encrypted storage for the user's custom ICE (STUN/TURN)\n// configuration. Persistence is OPTIONAL: the UI only calls saveIceSettings when\n// the user explicitly opts in (\"Save on this device\"). Session-only use never\n// touches this store \u2014 the settings live in React state and vanish on reload.\n//\n// At-rest protection model:\n//   - A non-extractable AES-GCM device key is generated once and kept in\n//     IndexedDB. It can never be exported back into JS, so a copy of the\n//     on-disk database is useless without executing code in this exact origin.\n//   - The settings blob (which may contain TURN credentials) is encrypted with\n//     that key before being written.\n//   This protects against disk/profile inspection. It does NOT protect against a\n//   live code-execution compromise of the page (consistent with the project's\n//   stated threat model \u2014 see SECURITY.md). Credentials are never persisted in\n//   plaintext, and the user can delete them at any time via clearIceSettings().\n\nconst DB_NAME = 'securebit-net';\nconst DB_VERSION = 1;\nconst STORE = 'kv';\nconst KEY_RECORD = 'ice-device-key';\nconst SETTINGS_RECORD = 'ice-settings';\nconst SETTINGS_VERSION = 1;\n\nfunction isSupported() {\n    return typeof indexedDB !== 'undefined' &&\n        typeof crypto !== 'undefined' &&\n        !!crypto.subtle;\n}\n\nfunction openDb() {\n    return new Promise((resolve, reject) => {\n        let request;\n        try {\n            request = indexedDB.open(DB_NAME, DB_VERSION);\n        } catch (error) {\n            reject(error);\n            return;\n        }\n        request.onupgradeneeded = () => {\n            const db = request.result;\n            if (!db.objectStoreNames.contains(STORE)) {\n                db.createObjectStore(STORE);\n            }\n        };\n        request.onsuccess = () => resolve(request.result);\n        request.onerror = () => reject(request.error);\n    });\n}\n\nfunction idbGet(db, key) {\n    return new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE, 'readonly');\n        const req = tx.objectStore(STORE).get(key);\n        req.onsuccess = () => resolve(req.result);\n        req.onerror = () => reject(req.error);\n    });\n}\n\nfunction idbPut(db, key, value) {\n    return new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE, 'readwrite');\n        tx.objectStore(STORE).put(value, key);\n        tx.oncomplete = () => resolve();\n        tx.onerror = () => reject(tx.error);\n    });\n}\n\nfunction idbDelete(db, key) {\n    return new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE, 'readwrite');\n        tx.objectStore(STORE).delete(key);\n        tx.oncomplete = () => resolve();\n        tx.onerror = () => reject(tx.error);\n    });\n}\n\nasync function getOrCreateDeviceKey(db) {\n    const existing = await idbGet(db, KEY_RECORD);\n    if (existing instanceof CryptoKey) {\n        return existing;\n    }\n    const key = await crypto.subtle.generateKey(\n        { name: 'AES-GCM', length: 256 },\n        false, // non-extractable\n        ['encrypt', 'decrypt']\n    );\n    await idbPut(db, KEY_RECORD, key);\n    return key;\n}\n\n/**\n * Persist custom ICE settings, encrypted at rest.\n * @param {{ servers: Array, privacyMode: string }} settings\n */\nexport async function saveIceSettings(settings) {\n    if (!isSupported()) throw new Error('Persistent storage is not available in this browser');\n\n    const db = await openDb();\n    const key = await getOrCreateDeviceKey(db);\n\n    const payload = JSON.stringify({\n        version: SETTINGS_VERSION,\n        servers: Array.isArray(settings?.servers) ? settings.servers : [],\n        privacyMode: settings?.privacyMode === 'relay-only' ? 'relay-only' : 'standard'\n    });\n\n    const iv = crypto.getRandomValues(new Uint8Array(12));\n    const ciphertext = await crypto.subtle.encrypt(\n        { name: 'AES-GCM', iv },\n        key,\n        new TextEncoder().encode(payload)\n    );\n\n    await idbPut(db, SETTINGS_RECORD, {\n        iv: Array.from(iv),\n        data: Array.from(new Uint8Array(ciphertext))\n    });\n}\n\n/**\n * Load and decrypt previously saved ICE settings.\n * Fails closed: returns null if absent, unsupported, or undecryptable.\n * @returns {Promise<{ servers: Array, privacyMode: string }|null>}\n */\nexport async function loadIceSettings() {\n    if (!isSupported()) return null;\n\n    try {\n        const db = await openDb();\n        const record = await idbGet(db, SETTINGS_RECORD);\n        if (!record || !Array.isArray(record.iv) || !Array.isArray(record.data)) {\n            return null;\n        }\n        const key = await idbGet(db, KEY_RECORD);\n        if (!(key instanceof CryptoKey)) return null;\n\n        const plaintext = await crypto.subtle.decrypt(\n            { name: 'AES-GCM', iv: new Uint8Array(record.iv) },\n            key,\n            new Uint8Array(record.data)\n        );\n        const parsed = JSON.parse(new TextDecoder().decode(plaintext));\n        return {\n            servers: Array.isArray(parsed.servers) ? parsed.servers : [],\n            privacyMode: parsed.privacyMode === 'relay-only' ? 'relay-only' : 'standard'\n        };\n    } catch {\n        // Corrupted or tampered record: fail closed.\n        return null;\n    }\n}\n\n/** Delete any persisted ICE settings (the device key is left in place). */\nexport async function clearIceSettings() {\n    if (!isSupported()) return;\n    try {\n        const db = await openDb();\n        await idbDelete(db, SETTINGS_RECORD);\n    } catch {\n        // Best-effort deletion; nothing to surface to the user.\n    }\n}\n\nexport async function hasSavedIceSettings() {\n    if (!isSupported()) return false;\n    try {\n        const db = await openDb();\n        const record = await idbGet(db, SETTINGS_RECORD);\n        return !!record;\n    } catch {\n        return false;\n    }\n}\n", "// Keeps the credential for SecureBit's own TURN relay fresh.\n//\n// The relay's credential is no longer something the client carries: it is minted\n// by the site (POST /api/turn-credentials, see deploy/turn-credentials.js) and\n// expires after a day. This module fetches one at startup and again before it\n// runs out, and writes it into the ICE list the connection managers already hold.\n//\n// The update is made IN PLACE on the existing entry objects. Every manager keeps a\n// reference to window.SECUREBIT_ICE_SERVERS rather than a copy, so the next peer\n// connection \u2014 and the next in-band ICE restart, which re-reads the list \u2014 picks\n// up the new credential without anything else having to know it changed.\n//\n// The web build ships no relay entry at all: a TURN entry without a credential\n// is refused by RTCPeerConnection, and a built-in credential is exactly what this\n// replaced. So the first successful fetch ADDS the entry, and later ones renew it.\n// Until then \u2014 or if the site cannot be reached \u2014 connections use STUN only.\n// Only our relay's entries are touched; a TURN server the user configured\n// themselves is never modified.\n\nconst ENDPOINT = '/api/turn-credentials';\nconst OWN_RELAY_HOSTS = ['turn.securebit.chat', '144.172.96.126'];\nconst MAX_FIELD = 512;\n// How long to wait before trying again after a failed fetch.\nconst RETRY_DELAYS_MS = [60_000, 5 * 60_000, 15 * 60_000];\n\nfunction relayHost(url) {\n    const m = /^turns?:([^:?\\s]+)/i.exec(String(url || '').trim());\n    return m ? m[1].toLowerCase() : null;\n}\n\n/** True when an ICE entry points at SecureBit's own relay. */\nexport function isOwnRelayEntry(entry) {\n    if (!entry || typeof entry !== 'object') return false;\n    const urls = Array.isArray(entry.urls) ? entry.urls : [entry.urls];\n    return urls.some((u) => OWN_RELAY_HOSTS.includes(relayHost(u)));\n}\n\nfunction isCleanField(value) {\n    if (typeof value !== 'string' || value.length === 0 || value.length > MAX_FIELD) return false;\n    for (let i = 0; i < value.length; i++) {\n        const c = value.charCodeAt(i);\n        if (c < 0x20 || c === 0x7f) return false;\n    }\n    return true;\n}\n\n/**\n * Write a fresh credential into every own-relay entry of `list`, in place. When\n * the list has no such entry yet and `cred.urls` names our relay, one is added.\n * @returns {boolean} whether anything was updated\n */\nexport function applyTurnCredentials(list, cred) {\n    if (!Array.isArray(list) || !cred || !isCleanField(cred.username) || !isCleanField(cred.credential)) {\n        return false;\n    }\n    let updated = false;\n    for (const entry of list) {\n        if (!isOwnRelayEntry(entry)) continue;\n        entry.username = cred.username;\n        entry.credential = cred.credential;\n        updated = true;\n    }\n    if (!updated && Array.isArray(cred.urls)) {\n        // Only our relay's addresses may come from the response: the endpoint\n        // is trusted to renew a password, not to point connections elsewhere.\n        const urls = cred.urls.filter((u) => isCleanField(u) && OWN_RELAY_HOSTS.includes(relayHost(u)));\n        if (urls.length > 0) {\n            list.push({ urls, username: cred.username, credential: cred.credential });\n            updated = true;\n        }\n    }\n    return updated;\n}\n\n/** Pull the credential out of an endpoint response, or null if it is not usable. */\nexport function parseCredentialResponse(body, nowSeconds) {\n    const server = body && Array.isArray(body.iceServers) ? body.iceServers[0] : null;\n    if (!server || !isCleanField(server.username) || !isCleanField(server.credential)) return null;\n    // coturn REST-API usernames are \"<expiry>:<label>\"; refuse one already expired.\n    const expiry = Number(String(server.username).split(':')[0]);\n    if (!Number.isFinite(expiry) || expiry <= nowSeconds) return null;\n    const ttl = Number(body.ttl);\n    return {\n        urls: Array.isArray(server.urls) ? server.urls.slice(0, 8) : [],\n        username: server.username,\n        credential: server.credential,\n        expiry,\n        ttl: Number.isFinite(ttl) && ttl > 0 ? ttl : expiry - nowSeconds,\n    };\n}\n\nlet started = false;\n\n/**\n * Start keeping the relay credential fresh. Safe to call more than once.\n * @param {object} [opts]\n * @param {() => Array} [opts.getList]  the ICE list to update\n */\nexport function startTurnCredentialRefresh(opts = {}) {\n    if (started || typeof window === 'undefined' || typeof fetch !== 'function') return;\n    started = true;\n\n    const getList = opts.getList || (() => window.SECUREBIT_ICE_SERVERS);\n    let expiry = 0;\n    let ttl = 0;\n    let timer = null;\n    let failures = 0;\n\n    const schedule = (ms) => {\n        if (timer) clearTimeout(timer);\n        timer = setTimeout(refresh, ms);\n    };\n\n    async function refresh() {\n        timer = null;\n        try {\n            const res = await fetch(ENDPOINT, { method: 'POST', cache: 'no-store', credentials: 'omit' });\n            if (!res.ok) throw new Error(`HTTP ${res.status}`);\n            const cred = parseCredentialResponse(await res.json(), Date.now() / 1000);\n            if (!cred) throw new Error('unusable response');\n            applyTurnCredentials(getList(), cred);\n            expiry = cred.expiry;\n            ttl = cred.ttl;\n            failures = 0;\n            // Renew at half-life, so a call started just before renewal still has\n            // hours of validity left for the relay to refresh its allocation.\n            schedule(Math.max(60, ttl / 2) * 1000);\n        } catch (_) {\n            const delay = RETRY_DELAYS_MS[Math.min(failures, RETRY_DELAYS_MS.length - 1)];\n            failures++;\n            schedule(delay);\n        }\n    }\n\n    // Timers are throttled in background tabs and stop while a laptop sleeps; on\n    // coming back, renew straight away if the credential is past its half-life.\n    document.addEventListener('visibilitychange', () => {\n        if (document.visibilityState !== 'visible') return;\n        const now = Date.now() / 1000;\n        if (!expiry || expiry - now < ttl / 2) refresh();\n    });\n\n    refresh();\n}\n", "// Generated by scripts/build-i18n.js from locales/*.json \u2014 do not edit by hand.\n// Add or change strings in locales/<code>.json, then run `npm run build:i18n`.\n\nexport const DEFAULT_LOCALE = \"en\";\nexport const SUPPORTED_LOCALES = [\"en\",\"de\",\"fr\",\"es\",\"uk\",\"ru\",\"zh\",\"ko\",\"hi\",\"ar\",\"he\",\"fa\",\"ur\"];\nexport const LOCALE_META = {\n    \"en\": {\n        \"htmlLang\": \"en\",\n        \"nativeName\": \"English\",\n        \"abbr\": \"EN\",\n        \"dir\": \"ltr\",\n        \"path\": \"/\"\n    },\n    \"de\": {\n        \"htmlLang\": \"de\",\n        \"nativeName\": \"Deutsch\",\n        \"abbr\": \"DE\",\n        \"dir\": \"ltr\",\n        \"path\": \"/de/\"\n    },\n    \"fr\": {\n        \"htmlLang\": \"fr\",\n        \"nativeName\": \"Fran\u00E7ais\",\n        \"abbr\": \"FR\",\n        \"dir\": \"ltr\",\n        \"path\": \"/fr/\"\n    },\n    \"es\": {\n        \"htmlLang\": \"es\",\n        \"nativeName\": \"Espa\u00F1ol\",\n        \"abbr\": \"ES\",\n        \"dir\": \"ltr\",\n        \"path\": \"/es/\"\n    },\n    \"uk\": {\n        \"htmlLang\": \"uk\",\n        \"nativeName\": \"\u0423\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u0430\",\n        \"abbr\": \"UK\",\n        \"dir\": \"ltr\",\n        \"path\": \"/uk/\"\n    },\n    \"ru\": {\n        \"htmlLang\": \"ru\",\n        \"nativeName\": \"\u0420\u0443\u0441\u0441\u043A\u0438\u0439\",\n        \"abbr\": \"RU\",\n        \"dir\": \"ltr\",\n        \"path\": \"/ru/\"\n    },\n    \"zh\": {\n        \"htmlLang\": \"zh-Hans\",\n        \"nativeName\": \"\u7B80\u4F53\u4E2D\u6587\",\n        \"abbr\": \"ZH\",\n        \"dir\": \"ltr\",\n        \"path\": \"/zh/\"\n    },\n    \"ko\": {\n        \"htmlLang\": \"ko\",\n        \"nativeName\": \"\uD55C\uAD6D\uC5B4\",\n        \"abbr\": \"KO\",\n        \"dir\": \"ltr\",\n        \"path\": \"/ko/\"\n    },\n    \"hi\": {\n        \"htmlLang\": \"hi\",\n        \"nativeName\": \"\u0939\u093F\u0928\u094D\u0926\u0940\",\n        \"abbr\": \"HI\",\n        \"dir\": \"ltr\",\n        \"path\": \"/hi/\"\n    },\n    \"ar\": {\n        \"htmlLang\": \"ar\",\n        \"nativeName\": \"\u0627\u0644\u0639\u0631\u0628\u064A\u0629\",\n        \"abbr\": \"AR\",\n        \"dir\": \"rtl\",\n        \"path\": \"/ar/\"\n    },\n    \"he\": {\n        \"htmlLang\": \"he\",\n        \"nativeName\": \"\u05E2\u05D1\u05E8\u05D9\u05EA\",\n        \"abbr\": \"HE\",\n        \"dir\": \"rtl\",\n        \"path\": \"/he/\"\n    },\n    \"fa\": {\n        \"htmlLang\": \"fa\",\n        \"nativeName\": \"\u0641\u0627\u0631\u0633\u06CC\",\n        \"abbr\": \"FA\",\n        \"dir\": \"rtl\",\n        \"path\": \"/fa/\"\n    },\n    \"ur\": {\n        \"htmlLang\": \"ur\",\n        \"nativeName\": \"\u0627\u0631\u062F\u0648\",\n        \"abbr\": \"UR\",\n        \"dir\": \"rtl\",\n        \"path\": \"/ur/\"\n    }\n};\n\n// Strings a page may need for a locale it did not load. See CROSS_LOCALE_KEYS in\n// scripts/build-i18n.js for why this list is short on purpose.\nexport const CROSS_LOCALE_STRINGS = {\n    \"en\": {\n        \"language.suggest.text\": \"This page is also available in English.\",\n        \"language.suggest.cta\": \"Read in English\",\n        \"language.suggest.dismiss\": \"Dismiss\"\n    },\n    \"de\": {\n        \"language.suggest.text\": \"Diese Seite gibt es auch auf Deutsch.\",\n        \"language.suggest.cta\": \"Auf Deutsch lesen\",\n        \"language.suggest.dismiss\": \"Schlie\u00DFen\"\n    },\n    \"fr\": {\n        \"language.suggest.text\": \"Cette page est aussi disponible en fran\u00E7ais.\",\n        \"language.suggest.cta\": \"Lire en fran\u00E7ais\",\n        \"language.suggest.dismiss\": \"Fermer\"\n    },\n    \"es\": {\n        \"language.suggest.text\": \"Esta p\u00E1gina tambi\u00E9n est\u00E1 disponible en espa\u00F1ol.\",\n        \"language.suggest.cta\": \"Leer en espa\u00F1ol\",\n        \"language.suggest.dismiss\": \"Cerrar\"\n    },\n    \"uk\": {\n        \"language.suggest.text\": \"\u0426\u044F \u0441\u0442\u043E\u0440\u0456\u043D\u043A\u0430 \u0442\u0430\u043A\u043E\u0436 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E.\",\n        \"language.suggest.cta\": \"\u0427\u0438\u0442\u0430\u0442\u0438 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E\",\n        \"language.suggest.dismiss\": \"\u0417\u0430\u043A\u0440\u0438\u0442\u0438\"\n    },\n    \"ru\": {\n        \"language.suggest.text\": \"\u042D\u0442\u0430 \u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u0442\u0430\u043A\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043D\u0430 \u0440\u0443\u0441\u0441\u043A\u043E\u043C.\",\n        \"language.suggest.cta\": \"\u0427\u0438\u0442\u0430\u0442\u044C \u043F\u043E-\u0440\u0443\u0441\u0441\u043A\u0438\",\n        \"language.suggest.dismiss\": \"\u0417\u0430\u043A\u0440\u044B\u0442\u044C\"\n    },\n    \"zh\": {\n        \"language.suggest.text\": \"\u672C\u9875\u9762\u4E5F\u6709\u7B80\u4F53\u4E2D\u6587\u7248\u672C\u3002\",\n        \"language.suggest.cta\": \"\u9605\u8BFB\u7B80\u4F53\u4E2D\u6587\",\n        \"language.suggest.dismiss\": \"\u5173\u95ED\"\n    },\n    \"ko\": {\n        \"language.suggest.text\": \"\uC774 \uD398\uC774\uC9C0\uB294 \uD55C\uAD6D\uC5B4\uB85C\uB3C4 \uBCFC \uC218 \uC788\uC2B5\uB2C8\uB2E4.\",\n        \"language.suggest.cta\": \"\uD55C\uAD6D\uC5B4\uB85C \uBCF4\uAE30\",\n        \"language.suggest.dismiss\": \"\uB2EB\uAE30\"\n    },\n    \"hi\": {\n        \"language.suggest.text\": \"\u092F\u0939 \u092A\u0943\u0937\u094D\u0920 \u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092D\u0940 \u0909\u092A\u0932\u092C\u094D\u0927 \u0939\u0948\u0964\",\n        \"language.suggest.cta\": \"\u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092A\u0922\u093C\u0947\u0902\",\n        \"language.suggest.dismiss\": \"\u092C\u0902\u0926 \u0915\u0930\u0947\u0902\"\n    },\n    \"ar\": {\n        \"language.suggest.text\": \"\u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062D\u0629 \u0645\u062A\u0648\u0641\u0631\u0629 \u0623\u064A\u0636\u064B\u0627 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629.\",\n        \"language.suggest.cta\": \"\u0627\u0642\u0631\u0623 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629\",\n        \"language.suggest.dismiss\": \"\u0625\u063A\u0644\u0627\u0642\"\n    },\n    \"he\": {\n        \"language.suggest.text\": \"\u05D4\u05D3\u05E3 \u05D4\u05D6\u05D4 \u05D6\u05DE\u05D9\u05DF \u05D2\u05DD \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA.\",\n        \"language.suggest.cta\": \"\u05DC\u05E7\u05E8\u05D9\u05D0\u05D4 \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA\",\n        \"language.suggest.dismiss\": \"\u05E1\u05D2\u05D9\u05E8\u05D4\"\n    },\n    \"fa\": {\n        \"language.suggest.text\": \"\u0627\u06CC\u0646 \u0635\u0641\u062D\u0647 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC \u0647\u0645 \u062F\u0631 \u062F\u0633\u062A\u0631\u0633 \u0627\u0633\u062A.\",\n        \"language.suggest.cta\": \"\u062E\u0648\u0627\u0646\u062F\u0646 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC\",\n        \"language.suggest.dismiss\": \"\u0628\u0633\u062A\u0646\"\n    },\n    \"ur\": {\n        \"language.suggest.text\": \"\u06CC\u06C1 \u0635\u0641\u062D\u06C1 \u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u0628\u06BE\u06CC \u062F\u0633\u062A\u06CC\u0627\u0628 \u06C1\u06D2\u06D4\",\n        \"language.suggest.cta\": \"\u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u067E\u0691\u06BE\u06CC\u06BA\",\n        \"language.suggest.dismiss\": \"\u0628\u0646\u062F \u06A9\u0631\u06CC\u06BA\"\n    }\n};\n", "// Generated by scripts/build-i18n.js from locales/*.json \u2014 do not edit by hand.\n// Add or change strings in locales/<code>.json, then run `npm run build:i18n`.\n\nexport const DICTIONARY = {\n    \"language.label\": \"Language\",\n    \"language.suggest.text\": \"This page is also available in English.\",\n    \"language.suggest.cta\": \"Read in English\",\n    \"language.suggest.dismiss\": \"Dismiss\",\n    \"theme.label\": \"Theme\",\n    \"theme.system\": \"System\",\n    \"theme.light\": \"Light\",\n    \"theme.dark\": \"Dark\",\n    \"donate.eyebrow\": \"Donate in crypto\",\n    \"donate.title\": \"Keep SecureBit independent\",\n    \"donate.description\": \"Every donation goes to development and audits.\",\n    \"donate.copy\": \"Copy\",\n    \"donate.copied\": \"Copied\",\n    \"donate.net.usdt\": \"USDT \u00B7 Tron (TRC-20)\",\n    \"donate.net.btc\": \"Bitcoin network\",\n    \"donate.net.eth\": \"Ethereum mainnet\",\n    \"donate.warn.usdt\": \"Send only USDT on Tron (TRC-20).\",\n    \"donate.warn.btc\": \"Send only BTC on the Bitcoin network.\",\n    \"donate.warn.eth\": \"Send only ETH on Ethereum mainnet.\",\n    \"donate.qrAlt\": \"QR code of the {coin} donation address\",\n    \"community.title\": \"Join the future of privacy\",\n    \"community.description\": \"SecureBit grows thanks to its community. Your ideas and feedback shape the future of secure communication - built in the open, with complete ASN.1 validation end-to-end.\",\n    \"community.github\": \"GitHub Repository\",\n    \"community.feedback\": \"Feedback\",\n    \"unique.eyebrow\": \"What sets us apart\",\n    \"unique.heading\": \"Why SecureBit is unique\",\n    \"unique.s1.titleTop\": \"Layered\",\n    \"unique.s1.titleBottom\": \"encryption core\",\n    \"unique.s1.collapsed\": \"Encryption core\",\n    \"unique.s1.desc\": \"ECDH P-384 key exchange, AES-256-GCM payloads, ECDSA signatures and full ASN.1 validation - composed into one hardened pipeline.\",\n    \"unique.s1.tags\": [\n        \"ECDH P-384\",\n        \"AES-256-GCM\",\n        \"ECDSA\",\n        \"ASN.1\"\n    ],\n    \"unique.s2.titleTop\": \"Pure P2P\",\n    \"unique.s2.titleBottom\": \"WebRTC\",\n    \"unique.s2.collapsed\": \"Pure P2P WebRTC\",\n    \"unique.s2.desc\": \"Messages travel directly between devices over WebRTC. No relay holds your data - the server only helps two peers find each other.\",\n    \"unique.s2.tags\": [\n        \"DTLS 1.3\",\n        \"No relay\"\n    ],\n    \"unique.s3.titleTop\": \"Perfect\",\n    \"unique.s3.titleBottom\": \"forward secrecy\",\n    \"unique.s3.collapsed\": \"Forward secrecy\",\n    \"unique.s3.desc\": \"Session keys rotate continuously and are discarded after use, so a single compromised key can never unlock past conversations.\",\n    \"unique.s3.tags\": [\n        \"Ephemeral keys\",\n        \"Auto-rotate\"\n    ],\n    \"unique.s4.titleTop\": \"Traffic\",\n    \"unique.s4.titleBottom\": \"obfuscation\",\n    \"unique.s4.collapsed\": \"Traffic obfuscation\",\n    \"unique.s4.desc\": \"Packet sizes and timing are padded and randomized, hiding metadata patterns from anyone watching the wire.\",\n    \"unique.s4.tags\": [\n        \"Packet padding\",\n        \"Timing jitter\"\n    ],\n    \"unique.s5.titleTop\": \"Zero data\",\n    \"unique.s5.titleBottom\": \"collection\",\n    \"unique.s5.collapsed\": \"Zero data collection\",\n    \"unique.s5.desc\": \"No accounts, no logs, no message storage. There is nothing on a server to leak, subpoena, or sell.\",\n    \"unique.s5.tags\": [\n        \"No accounts\",\n        \"No logs\"\n    ],\n    \"partners.eyebrow\": \"Partners & ecosystem\",\n    \"partners.heading\": \"Trusted by our partners\",\n    \"partners.aegis.desc\": \"Capital partner securing confidential financial communications across its portfolio.\",\n    \"partners.aegis.role\": \"Strategic backer\",\n    \"partners.furilabs.desc\": \"Privacy-first Linux phones that ship SecureBit as a default secure channel.\",\n    \"partners.furilabs.role\": \"Technology partner\",\n    \"partners.inviteTitle\": \"Become a partner\",\n    \"partners.inviteDesc\": \"Building privacy hardware or infrastructure? Let's integrate SecureBit.\",\n    \"partners.inviteCta\": \"Start a conversation\",\n    \"roadmap.eyebrow\": \"Development Roadmap\",\n    \"roadmap.heading\": \"The evolution of SecureBit\",\n    \"roadmap.subheading\": \"From the first prototype to a quantum-resistant, decentralized network - with complete ASN.1 validation at every layer.\",\n    \"roadmap.progress\": \"{shipped} of {total} milestones shipped\",\n    \"roadmap.upcoming\": \"{upcoming} on the way\",\n    \"roadmap.keyFeatures\": \"Key features\",\n    \"hero.headlineTop\": \"A direct line\",\n    \"hero.headlineBottom\": \"only you two can read.\",\n    \"hero.subheading\": \"Keys are generated on your device and exchanged peer-to-peer. No accounts, no servers storing your messages.\",\n    \"hero.diagramAlt\": \"A direct encrypted line to one peer, with two more peers joining the mesh\",\n    \"intro.createTitle\": \"Create a new channel\",\n    \"intro.createDesc\": \"Your device generates the keys and a one-time invitation. Nothing touches a server.\",\n    \"intro.createCta\": \"Generate keys & invitation\",\n    \"intro.joinTitle\": \"Join a channel\",\n    \"intro.scanTitle\": \"Scan QR with camera\",\n    \"intro.scanSubtitle\": \"Fastest - point at your peer's screen\",\n    \"intro.orPasteCode\": \"or paste code\",\n    \"intro.pastePlaceholder\": \"Paste invitation code here\u2026\",\n    \"intro.connect\": \"Connect\",\n    \"intro.connecting\": \"Processing\u2026\",\n    \"roadmap.r1.title\": \"Start of Development\",\n    \"roadmap.r1.sub\": \"Idea, prototype, and infrastructure setup\",\n    \"roadmap.r1.date\": \"Early 2025\",\n    \"roadmap.r1.features\": [\n        \"Concept and requirements formation\",\n        \"Stack selection: WebRTC, P2P, cryptography\",\n        \"First messaging prototypes\",\n        \"Repository creation and CI\",\n        \"Basic encryption architecture\",\n        \"UX/UI design\"\n    ],\n    \"roadmap.r2.title\": \"Alpha Release\",\n    \"roadmap.r2.sub\": \"First public alpha: basic chat and key exchange\",\n    \"roadmap.r2.date\": \"Spring 2025\",\n    \"roadmap.r2.features\": [\n        \"Basic P2P messaging via WebRTC\",\n        \"Simple E2E encryption (demo scheme)\",\n        \"Stable signaling and reconnection\",\n        \"Minimal UX for testing\",\n        \"Feedback collection from early testers\"\n    ],\n    \"roadmap.r3.title\": \"Security Hardened\",\n    \"roadmap.r3.sub\": \"Security strengthening and stable branch release\",\n    \"roadmap.r3.date\": \"Summer 2025\",\n    \"roadmap.r3.features\": [\n        \"ECDH/ECDSA implementation in production\",\n        \"Perfect Forward Secrecy and key rotation\",\n        \"Improved authentication checks\",\n        \"File encryption and large payload transfers\",\n        \"Audit of basic cryptoprocesses\"\n    ],\n    \"roadmap.r4.title\": \"Scaling & Stability\",\n    \"roadmap.r4.sub\": \"Network scaling and stability improvements\",\n    \"roadmap.r4.date\": \"Fall 2025\",\n    \"roadmap.r4.features\": [\n        \"Optimization of P2P connections and NAT traversal\",\n        \"Reconnection mechanisms and message queues\",\n        \"Reduced battery consumption on mobile\",\n        \"Multi-device synchronization support\",\n        \"Monitoring and logging tools for developers\"\n    ],\n    \"roadmap.r5.title\": \"Privacy-first Release\",\n    \"roadmap.r5.sub\": \"Focus on privacy: minimizing metadata\",\n    \"roadmap.r5.date\": \"Winter 2025\",\n    \"roadmap.r5.features\": [\n        \"Metadata protection and fingerprint reduction\",\n        \"Experiments with onion routing and DHT\",\n        \"Options for anonymous connections\",\n        \"Preparation for open code audit\",\n        \"Improved user verification processes\"\n    ],\n    \"roadmap.r6.title\": \"Enhanced Security Edition\",\n    \"roadmap.r6.sub\": \"18-layer military-grade cryptography with complete ASN.1 validation\",\n    \"roadmap.r6.date\": \"Late 2025\",\n    \"roadmap.r6.features\": [\n        \"ECDH + DTLS + SAS triple-layer security\",\n        \"ECDH P-384 + AES-GCM 256-bit encryption\",\n        \"DTLS fingerprint verification\",\n        \"SAS (Short Authentication String) verification\",\n        \"Perfect Forward Secrecy with key rotation\",\n        \"Enhanced MITM attack prevention\",\n        \"Complete ASN.1 DER validation\",\n        \"OID and EC point verification\",\n        \"SPKI structure validation\",\n        \"P2P WebRTC architecture\",\n        \"Metadata protection\",\n        \"100% open source code\"\n    ],\n    \"roadmap.r7.title\": \"Desktop Edition\",\n    \"roadmap.r7.sub\": \"Native desktop apps for Windows, macOS, and Linux\",\n    \"roadmap.r7.date\": \"Early 2026\",\n    \"roadmap.r7.features\": [\n        \"Windows desktop app (Tauri v2)\",\n        \"macOS desktop app (Tauri v2)\",\n        \"Linux AppImage support (Tauri v2)\",\n        \"Real-time notifications\",\n        \"Automatic reconnection\",\n        \"Cross-device synchronization\",\n        \"Improved UX/UI\",\n        \"Support for files up to 100MB\"\n    ],\n    \"roadmap.r8.title\": \"Secure Voice & Calls\",\n    \"roadmap.r8.sub\": \"Encrypted voice messages, audio calls, and video calls\",\n    \"roadmap.r8.date\": \"Early 2026\",\n    \"roadmap.r8.features\": [\n        \"End-to-end encrypted voice messages\",\n        \"1:1 encrypted audio calls (WebRTC)\",\n        \"1:1 encrypted video calls (WebRTC)\",\n        \"Perfect Forward Secrecy for live media\",\n        \"SRTP/DTLS-protected media streams\",\n        \"In-call SAS verification\",\n        \"Call notifications and auto-reconnection\",\n        \"Low-latency P2P media\"\n    ],\n    \"roadmap.r9.title\": \"Group Communications\",\n    \"roadmap.r9.sub\": \"Group chats with preserved privacy\",\n    \"roadmap.r9.date\": \"Now\",\n    \"roadmap.r9.features\": [\n        \"P2P group chats up to 8 participants\",\n        \"Mesh delivery with signed relay fallback\",\n        \"One group safety code, compared by everyone\",\n        \"Commit-then-reveal ceremony against code grinding\",\n        \"Per-group identity keys, ephemeral by design\",\n        \"Signed membership with epoch ordering\",\n        \"Signed messages, so a split transcript is provable\",\n        \"No server, no shared group key, no history\"\n    ],\n    \"roadmap.r10.title\": \"Mobile Edition\",\n    \"roadmap.r10.sub\": \"Native mobile apps for iOS and Android\",\n    \"roadmap.r10.date\": \"Q2 2027\",\n    \"roadmap.r10.features\": [\n        \"iOS native app (Swift/SwiftUI)\",\n        \"Android native app (Kotlin/Jetpack Compose)\",\n        \"PWA support for mobile browsers\",\n        \"Real-time push notifications\",\n        \"Battery optimization\",\n        \"Mobile-optimized UX/UI\",\n        \"Offline message queuing\",\n        \"Biometric authentication\"\n    ],\n    \"roadmap.r11.title\": \"Quantum-Resistant Edition\",\n    \"roadmap.r11.sub\": \"Protection against quantum computers\",\n    \"roadmap.r11.date\": \"Q4 2027\",\n    \"roadmap.r11.features\": [\n        \"Post-quantum cryptography CRYSTALS-Kyber\",\n        \"SPHINCS+ digital signatures\",\n        \"Hybrid scheme: classic + PQ\",\n        \"Quantum-safe key exchange\",\n        \"Updated hashing algorithms\",\n        \"Migration of existing sessions\",\n        \"Compatibility with v5.x\",\n        \"Quantum-resistant protocols\"\n    ],\n    \"roadmap.r12.title\": \"Decentralized Network\",\n    \"roadmap.r12.sub\": \"Fully decentralized network\",\n    \"roadmap.r12.date\": \"2028\",\n    \"roadmap.r12.features\": [\n        \"Node mesh network\",\n        \"DHT for peer discovery\",\n        \"Built-in onion routing\",\n        \"Tokenomics and node incentives\",\n        \"Governance via DAO\",\n        \"Interoperability with other networks\",\n        \"Cross-platform compatibility\",\n        \"Self-healing network\"\n    ],\n    \"roadmap.r13.title\": \"AI Privacy Assistant\",\n    \"roadmap.r13.sub\": \"AI for privacy and security\",\n    \"roadmap.r13.date\": \"2028+\",\n    \"roadmap.r13.features\": [\n        \"Local AI threat analysis\",\n        \"Automatic MITM detection\",\n        \"Adaptive cryptography\",\n        \"Personalized security recommendations\",\n        \"Zero-knowledge machine learning\",\n        \"Private AI assistant\",\n        \"Predictive security\",\n        \"Autonomous attack protection\"\n    ],\n    \"handshake.step1\": \"Generating ECDH P-384 key pair\",\n    \"handshake.step2\": \"Deriving verification code\",\n    \"handshake.step3\": \"Pinning Perfect Forward Secrecy\",\n    \"handshake.securingTitle\": \"Securing your channel\",\n    \"handshake.answerTitle\": \"Building your answer\",\n    \"handshake.securingDesc\": \"Forging keys strong enough to resist tampering.\",\n    \"handshake.shareTitle\": \"Share your invitation\",\n    \"handshake.sendAnswerTitle\": \"Send back your answer\",\n    \"handshake.shareDesc\": \"Show the QR or send the code to your peer. It is one-time and expires shortly.\",\n    \"handshake.sendAnswerDesc\": \"Give this answer to the channel creator so they can finish the handshake.\",\n    \"handshake.establish\": \"Establish connection\",\n    \"handshake.thenReceive\": \"Then receive the answer your peer sends back\",\n    \"handshake.pasteAnswerPlaceholder\": \"Paste peer's answer code\u2026\",\n    \"handshake.answerSentNote\": \"Send this answer to the creator, then wait - the chat opens once they connect.\",\n    \"handshake.qrHint\": \"Keep this open until your peer captures the code.\",\n    \"handshake.qrHintFrames\": \"The handshake is split across {frames} frames - keep this open until your peer captures all of them.\",\n    \"verify.title\": \"Security verification\",\n    \"verify.desc\": \"Compare this safety code with your peer over a separate channel (voice / in person), then type it to unlock the chat.\",\n    \"verify.enterLabel\": \"Enter the verified code\",\n    \"verify.placeholder\": \"Type code here\",\n    \"verify.confirm\": \"Confirm code\",\n    \"verify.confirmed\": \"Confirmed\",\n    \"verify.mismatch\": \"Don't match\",\n    \"verify.yours\": \"Your confirmation\",\n    \"verify.peer\": \"Peer confirmation\",\n    \"verify.pending\": \"Pending\",\n    \"verify.waiting\": \"Waiting for code\u2026\",\n    \"verify.verified\": \"Channel verified\",\n    \"verify.bothConfirmed\": \"Both parties confirmed. Opening the secure chat\u2026\",\n    \"pwa.bannerTitle\": \"Install SecureBit.chat\",\n    \"pwa.bannerDesc\": \"Get the native app experience with enhanced security\",\n    \"pwa.install\": \"Install\",\n    \"pwa.dismiss\": \"Dismiss\",\n    \"pwa.close\": \"Close\",\n    \"pwa.iosTitle\": \"Install on iOS\",\n    \"pwa.iosStep1\": \"Tap the Share button\",\n    \"pwa.iosStep1Hint\": \"Usually at the bottom of Safari\",\n    \"pwa.iosStep2\": \"Find \\\"Add to Home Screen\\\"\",\n    \"pwa.iosStep2Hint\": \"Scroll down in the share menu\",\n    \"pwa.iosStep3\": \"Tap \\\"Add\\\"\",\n    \"pwa.iosStep3Hint\": \"Confirm to install SecureBit.chat\",\n    \"pwa.genericTitle\": \"Install SecureBit\",\n    \"pwa.genericDesc\": \"Your browser handles installs its own way. Pick the steps that match yours.\",\n    \"pwa.androidChromeHint\": \"Tap \u22EE in the top corner, then \u201CInstall app\u201D\",\n    \"pwa.androidOtherHint\": \"Tap the menu, then \u201CAdd to Home screen\u201D\",\n    \"pwa.gotIt\": \"Got it\",\n    \"pwa.installedTitle\": \"App Installed!\",\n    \"pwa.installedIos\": \"iOS App installed! Open from home screen.\",\n    \"pwa.installedGeneric\": \"SecureBit.chat is now on your device\",\n    \"pwa.anytimeTitle\": \"Install Anytime\",\n    \"pwa.anytimeDesc\": \"You can still install SecureBit.chat from your browser's menu for the best experience.\",\n    \"pwa.ok\": \"OK\",\n    \"step.open\": \"Step 1 \u00B7 open a channel\",\n    \"step.exchange\": \"Step 2 \u00B7 exchange\",\n    \"step.verification\": \"Step 3 \u00B7 verification\",\n    \"action.create\": \"Create\",\n    \"action.join\": \"Join\",\n    \"action.back\": \"Back\",\n    \"action.copy\": \"Copy\",\n    \"action.copied\": \"Copied\",\n    \"action.scan\": \"Scan\",\n    \"action.downloadDesktop\": \"Download desktop app\",\n    \"action.advancedSettings\": \"Advanced settings\",\n    \"cred.offerTag\": \"offer \u00B7 or copy text\",\n    \"cred.answerTag\": \"answer \u00B7 or copy text\",\n    \"cred.reveal\": \"Click to reveal - keep this code private\",\n    \"qr.title\": \"Scan QR code\",\n    \"qr.subtitle\": \"Point your camera at their QR\",\n    \"qr.scanning\": \"Scanning\u2026\",\n    \"qr.hint\": \"Hold steady until all parts are captured. Camera access is local - nothing is uploaded.\",\n    \"mesh.you\": \"you\",\n    \"mesh.peer\": \"peer \u00B7 session 1\",\n    \"mesh.joined2\": \"mara joined \u00B7 +2\",\n    \"mesh.joined3\": \"tobi joined \u00B7 +3\",\n    \"ice.title\": \"Network settings\",\n    \"ice.subtitle\": \"Configured locally - never shared with your peer\",\n    \"ice.intro\": \"SecureBit uses public STUN servers by default to negotiate the peer-to-peer link. Point it at your own STUN/TURN if you self-host.\",\n    \"ice.publicTitle\": \"Public servers (default)\",\n    \"ice.publicDesc\": \"Zero-config. Good for most users.\",\n    \"ice.customTitle\": \"My own STUN/TURN servers\",\n    \"ice.customDesc\": \"Up to {max} servers.\",\n    \"ice.turnNote\": \"A TURN relay sees both peers' IP and traffic timing - but never message contents, which stay end-to-end encrypted. Prefer \",\n    \"ice.turnNoteTls\": \" (TLS).\",\n    \"ice.test\": \"Test servers\",\n    \"ice.testing\": \"Testing\u2026\",\n    \"ice.relayTitle\": \"Relay-only mode\",\n    \"ice.relayBadge\": \"MAX PRIVACY\",\n    \"ice.relayDesc\": \"Routes all traffic through TURN so your IP is never exposed to the peer. Requires a TURN server.\",\n    \"ice.relayWarning\": \"Relay-only is enabled but no TURN server is configured. The connection will not be able to start.\",\n    \"ice.persist\": \"Save on this device\",\n    \"ice.persistDesc\": \"Stored encrypted in this browser. Leave off to use only for this session.\",\n    \"ice.forget\": \"Forget saved\",\n    \"ice.cancel\": \"Cancel\",\n    \"ice.apply\": \"Apply\",\n    \"ice.errUnavailable\": \"WebRTC is not available in this browser\",\n    \"ice.errInvalid\": \"Invalid server configuration\",\n    \"update.title\": \"Update available\",\n    \"update.desc\": \"A newer version of SecureBit has been detected.\",\n    \"update.currentVersion\": \"Current version\",\n    \"update.newVersion\": \"New version\",\n    \"update.now\": \"Update now\",\n    \"update.later\": \"Later\",\n    \"update.unknown\": \"N/A\",\n    \"update.stepSaving\": \"Saving data...\",\n    \"update.stepSwCaches\": \"Clearing Service Worker caches...\",\n    \"update.stepSwUnregister\": \"Unregistering Service Workers...\",\n    \"update.stepBrowserCache\": \"Clearing browser cache...\",\n    \"update.stepVersion\": \"Updating version...\",\n    \"update.stepReload\": \"Reloading application...\",\n    \"update.error\": \"Update error. Please refresh the page manually (Ctrl+F5 or Cmd+Shift+R)\",\n    \"update.confirmSkip\": \"New version available. Update is recommended for security and stability. Continue without update?\",\n    \"offline.backOnline\": \"Back online\",\n    \"offline.mode\": \"Offline mode\",\n    \"offline.dismiss\": \"Dismiss\",\n    \"offline.lostTitle\": \"Connection lost\",\n    \"offline.lostDesc\": \"SecureBit is now in offline mode. Some features are limited, but your data stays safe.\",\n    \"offline.point1\": \"Your session and keys are preserved\",\n    \"offline.point2\": \"No data is stored on servers\",\n    \"offline.point3\": \"Messages & files sync when you reconnect\",\n    \"offline.continue\": \"Continue offline\",\n    \"offline.restoredTitle\": \"When you reconnect\",\n    \"offline.restoredDesc\": \"A dropped connection costs you nothing. SecureBit queues everything locally and resumes the encrypted session the instant you're back online.\",\n    \"offline.r1Title\": \"Your messages get delivered\",\n    \"offline.r1Desc\": \"Everything you wrote while offline is sent to your contact automatically.\",\n    \"offline.r2Title\": \"Files finish transferring\",\n    \"offline.r2Desc\": \"Uploads resume from where they stopped - no need to resend.\",\n    \"offline.r3Title\": \"Their messages & files arrive\",\n    \"offline.r3Desc\": \"Whatever your contact sent during the outage is delivered to you in order.\",\n    \"offline.r4Title\": \"Nothing is lost\",\n    \"offline.r4Desc\": \"After reconnect there's no gap - the conversation continues exactly where it paused.\",\n    \"offline.gotIt\": \"Got it\",\n    \"qr.showTitle\": \"Show QR code\",\n    \"qr.showSubtitle\": \"Full-screen \u00B7 let your peer scan\",\n    \"qr.showSubtitleFrames\": \"Full-screen \u00B7 let your peer scan all {frames} frames\",\n    \"notify.enabledBody\": \"Notifications enabled! You will receive alerts for new messages.\",\n    \"notify.workingBody\": \"Notifications are working! You will receive alerts for new messages.\",\n    \"pw.label\": \"Password input\",\n    \"pw.placeholder\": \"Enter password...\",\n    \"pw.decrypt\": \"Decrypt\",\n    \"pw.cancel\": \"Cancel\",\n    \"file.title\": \"File transfers\",\n    \"file.drop\": \"Drag & drop files here\",\n    \"file.dropHint\": \"Encrypted end-to-end before transfer \u00B7 up to 100 MB\",\n    \"file.browse\": \"Browse device\",\n    \"file.incoming\": \"Incoming file request\",\n    \"file.accept\": \"Accept\",\n    \"file.reject\": \"Reject\",\n    \"file.download\": \"Download\",\n    \"file.notReady\": \"Connection not ready\",\n    \"file.tooLarge\": \"File too large\",\n    \"file.typeNotAllowed\": \"File type not allowed\",\n    \"file.maxConcurrent\": \"Maximum concurrent transfers\",\n    \"file.gone\": \"This file is no longer available for download.\",\n    \"call.incoming\": \"Incoming call\",\n    \"call.incomingVideo\": \"Incoming video call\",\n    \"call.encrypted\": \"Encrypted call\",\n    \"call.encryptedShort\": \"Encrypted\",\n    \"call.peer\": \"Secure peer\",\n    \"call.connecting\": \"Connecting\u2026\",\n    \"call.ringing\": \"Ringing\u2026\",\n    \"call.accept\": \"Accept\",\n    \"call.decline\": \"Decline\",\n    \"call.end\": \"End call\",\n    \"call.camera\": \"Camera\",\n    \"call.cameraOff\": \"Camera off\",\n    \"call.peerCameraOff\": \"Peer's camera is off\",\n    \"call.flipCamera\": \"Flip camera\",\n    \"call.addVideo\": \"Add video\",\n    \"call.video\": \"Video\",\n    \"call.muted\": \"Muted\",\n    \"call.expand\": \"Expand\",\n    \"call.minimize\": \"Minimize\",\n    \"call.quality\": \"Connection quality\",\n    \"call.qualityExcellent\": \"Excellent\",\n    \"call.videoPrefix\": \"Video \u00B7 \",\n    \"call.voicePrefix\": \"Voice \u00B7 \",\n    \"group.new\": \"New group\",\n    \"group.create\": \"Create group\",\n    \"group.join\": \"Join group\",\n    \"group.name\": \"Group name\",\n    \"group.nameTooLong\": \"The group name is too long.\",\n    \"group.capacity\": \"Up to {max} people, peer to peer. Everyone will compare one safety code before the group opens.\",\n    \"group.invite\": \"Invite\",\n    \"group.inviteMore\": \"Invite more members\",\n    \"group.invitePeople\": \"Invite {count} people\",\n    \"group.invitation\": \"Group invitation\",\n    \"group.addMembers\": \"Add members\",\n    \"group.roomFor\": \"Room for {remaining} more. Everyone will compare a new group code once they join.\",\n    \"group.membersCount\": \"{count} members\",\n    \"group.member\": \"Member\",\n    \"group.members\": \"Members\",\n    \"group.remove\": \"Remove {name}\",\n    \"group.message\": \"Message {name}\",\n    \"group.leave\": \"Leave\",\n    \"group.leaveThis\": \"Leave this group\",\n    \"group.cancel\": \"Cancel group\",\n    \"group.close\": \"Close\",\n    \"group.cancelBtn\": \"Cancel\",\n    \"group.decline\": \"Decline\",\n    \"group.working\": \"Working\u2026\",\n    \"group.sasTitle\": \"Group safety code\",\n    \"group.sasEveryone\": \"Everyone sees this code\",\n    \"group.sasCompare\": \"Compare the group code with every member to open this group.\",\n    \"group.sasReadAloud\": \"Read these digits aloud to \",\n    \"group.sasWarning\": \"If even one member reads a different code, someone is sitting between you. Cancel the group - do not confirm.\",\n    \"group.confirmFirst\": \"Confirm the group code first\",\n    \"group.codeSuffix\": \" \u00B7 code {code}\",\n    \"group.exchangingNonces\": \"Exchanging nonces\u2026\",\n    \"group.waitingCommit\": \"Waiting for every member to commit\u2026\",\n    \"group.waitingJoin\": \"Waiting for the other members to join\u2026\",\n    \"group.emptyChat\": \"Nothing here yet. Messages are signed by their sender and travel over each member's own encrypted link.\",\n    \"group.noVerified\": \"No verified chats yet. Open a 1:1 chat and compare its safety code first - a group is built out of connections you have already checked.\",\n    \"group.noMoreToAdd\": \"No other verified chats to add. Open a 1:1 chat and compare its safety code first.\",\n    \"group.directLink\": \"Direct peer-to-peer link\",\n    \"group.noDirectLink\": \"No direct link yet - messages are relayed by another member while one is being built\",\n    \"group.relayNote\": \"Some members have no direct link to you yet. Their messages travel through another member, who can see that you are talking but cannot read past the signature or change what you said. The group keeps trying to connect them directly.\",\n    \"group.relayOnlyOff\": \"Relay-only mode is off, so each member connects to you directly and learns your IP address - including members somebody else invited. Turn it on in network settings if that matters here.\",\n    \"group.memberOffline\": \"{name} is offline and will not receive messages. They are still a member - removing them re-keys the group.\",\n    \"group.joinNote\": \"Other members will learn your presence in this group. There is no message history to catch up on - a group starts empty.\",\n    \"group.inviteSentNote\": \"The group keeps working until they accept. There is no history for them to catch up on - they will only see what is sent from now on.\",\n    \"group.errNotCreated\": \"Group not created\",\n    \"group.errNobodyAccepted\": \"Nobody accepted the invitation in time.\",\n    \"group.errNothingSent\": \"Nothing was sent and nothing was verified. Close this and try again once everyone is connected.\",\n    \"group.errNotFormed\": \"This group could not be formed.\",\n    \"group.errFull\": \"This group is full.\",\n    \"group.errInviteFailed\": \"The invitation could not be sent - that chat is not connected.\",\n    \"group.errNoMemberList\": \"The group owner never sent the member list.\",\n    \"group.errUnsignedList\": \"The member list was not signed by the group owner. Do not retry - tell them.\",\n    \"group.errNotOwner\": \"Someone other than the group owner tried to change the members.\",\n    \"hdr.tagline\": \"End-to-end encrypted\",\n    \"hdr.netSettings\": \"Advanced network settings\",\n    \"hdr.netSettingsTitle\": \"Advanced network settings (STUN/TURN)\",\n    \"hdr.disconnect\": \"Disconnect\",\n    \"status.connected\": \"Connected\",\n    \"status.connecting\": \"Connecting...\",\n    \"status.notConnected\": \"Not connected\",\n    \"status.reconnecting\": \"Reconnecting...\",\n    \"status.retrying\": \"Retrying...\",\n    \"status.verifying\": \"Verifying...\",\n    \"status.peerDisconnected\": \"Peer disconnected\",\n    \"sec.replayProtection\": \"Replay Protection\",\n    \"sec.messageIntegrity\": \"Message Integrity (HMAC)\",\n    \"sec.forwardSecrecy\": \"Perfect Forward Secrecy\",\n    \"sec.metadataProtection\": \"Metadata Protection\",\n    \"sec.trafficObfuscation\": \"Traffic Obfuscation\",\n    \"sec.realTests\": \"Real Cryptographic Tests\",\n    \"sec.simulatedData\": \"Simulated Data\",\n    \"sec.testPassed\": \"Test passed\",\n    \"sec.testFailed\": \"Test failed or unavailable\",\n    \"sec.verificationDone\": \"Real cryptographic verification completed\",\n    \"sec.verificationInProgress\": \"Security verification in progress...\",\n    \"sec.verificationWait\": \"Security verification in progress...\\nPlease wait for real-time cryptographic verification to complete.\",\n    \"sec.verificationUnavailable\": \"Security verification not available\",\n    \"chat.placeholder\": \"Type an encrypted message\u2026\",\n    \"chat.send\": \"Send message\",\n    \"chat.sendFiles\": \"Send files\",\n    \"chat.hideFiles\": \"Hide files\",\n    \"chat.recordVoice\": \"Record voice message\",\n    \"chat.sendVoice\": \"Send voice message\",\n    \"chat.discard\": \"Discard\",\n    \"chat.codeBlock\": \"Send as a code block (expands the input)\",\n    \"chat.codeHint\": \"Code snippet \u00B7 formatting preserved \u00B7 \u2318\u21B5 to send\",\n    \"chat.viewOnce\": \"View once\",\n    \"chat.viewOnceTitle\": \"View once - vanishes after the peer reads it\",\n    \"chat.viewOncePrefix\": \"View once \u00B7 \",\n    \"chat.viewOnceTap\": \"View once \u00B7 tap to reveal\",\n    \"chat.viewedOnce\": \"Viewed once\",\n    \"chat.disappearing\": \"Disappearing message - deletes on both sides\",\n    \"chat.disappearAfter\": \"Disappear after\",\n    \"chat.visibleFor\": \"Visible for\",\n    \"chat.timerPrefix\": \"Timer \u00B7 \",\n    \"chat.expired\": \"This message has expired\",\n    \"chat.deleteForEveryone\": \"Delete for everyone\",\n    \"chat.sending\": \"Sending\",\n    \"chat.delivered\": \"Delivered\",\n    \"chat.notSent\": \"Not sent\",\n    \"chat.notSentReason\": \"Not sent - the secure channel is not ready. Reconnect to continue.\",\n    \"chat.encrypted\": \"Encrypted\",\n    \"chat.decrypted\": \"Decrypted\",\n    \"chat.encryptedOnDevice\": \"Encrypted on your device\",\n    \"chat.uploading\": \"Uploading\",\n    \"chat.downloading\": \"Downloading\",\n    \"chat.transferring\": \"Transferring\u2026\",\n    \"chat.copied\": \"Copied!\",\n    \"chat.collapse\": \"Collapse\",\n    \"chat.closeMenu\": \"Close menu\",\n    \"chat.newChat\": \"New chat\",\n    \"chat.newGroup\": \"New group\",\n    \"chat.createGroup\": \"Create a group\",\n    \"chat.groupChats\": \"Group chats\",\n    \"chat.secureChat\": \"Secure chat\",\n    \"chat.nameThis\": \"Name this chat\",\n    \"chat.rename\": \"Rename chat (local only)\",\n    \"chat.renameHint\": \"Double-click to rename\",\n    \"chat.localLabel\": \"Local label \u00B7 stored only on this device\",\n    \"chat.setStatus\": \"Set your status\",\n    \"chat.yourStatusPrefix\": \"Your status - \",\n    \"chat.meshHint\": \"Up to 8 peers \u00B7 P2P mesh\",\n    \"chat.offline\": \"Offline\",\n    \"chat.noNetwork\": \"No network \u00B7 reconnecting\",\n    \"chat.startVoiceCall\": \"Start encrypted voice call\",\n    \"chat.startVideoCall\": \"Start encrypted video call\",\n    \"chat.verifyForCalls\": \"Verify the session to enable calls\",\n    \"chat.e2eeNote\": \"Every message is end-to-end encrypted on your device before it leaves.\",\n    \"chat.peersOnly\": \"Sent end-to-end to connected peers only - never stored on a server.\",\n    \"flow.invitationCreated\": \"Secure invitation created\",\n    \"flow.invitationCreatedBang\": \"Secure invitation created and encrypted!\",\n    \"flow.responseCreated\": \"Secure response created\",\n    \"flow.responseCreatedBang\": \"Secure response created!\",\n    \"flow.sendInvitation\": \"Send the invitation code to your interlocutor via a secure channel (voice call, SMS, etc.).\",\n    \"flow.sendResponse\": \"Send the response code to the initiator via a secure channel or let them scan the QR code below.\",\n    \"flow.sendEncryptedCode\": \"Send the encrypted code\",\n    \"flow.sendTheResponse\": \"Send the response\",\n    \"flow.pasteOrWrite\": \"Paste or write code\u2026\",\n    \"flow.processingInvitation\": \"Processing the secure invitation...\",\n    \"flow.processingResponse\": \"Processing the secure response...\",\n    \"flow.finalizing\": \"Finalizing the secure connection...\",\n    \"flow.channelEstablished\": \"Secure channel established\",\n    \"flow.channelReady\": \"Secure channel is ready\",\n    \"flow.restoring\": \"Restoring connection\u2026\",\n    \"flow.invitationCaptured\": \"Invitation captured.\",\n    \"err.needInvitation\": \"You need to insert the invitation code from your interlocutor.\",\n    \"err.needResponse\": \"You need to insert the response code from your interlocutor.\",\n    \"err.responseFormat\": \"Invalid response format - please check the code\",\n    \"err.responseNoKey\": \"Invalid response code - missing or corrupted cryptographic key. Please check the code and try again.\",\n    \"err.responseNoSignKey\": \"Invalid response code - missing signature verification key. Please check the code and try again.\",\n    \"err.responseOutdated\": \"Response data is outdated - please use a fresh invitation\",\n    \"err.setupError\": \"Connection setup error\",\n    \"err.notReady\": \"Connection not ready\",\n    \"err.securityBreach\": \"Security breach detected - connection rejected\",\n    \"err.securityValidation\": \"Security validation failed - possible attack detected\",\n    \"err.retiredQr\": \"This QR code uses a retired format that could not transfer the invitation. Ask your peer to generate a new one, or use copy/paste.\",\n    \"err.compressedQrNote\": \"Compressed QR may omit SDP for brevity. Use copy/paste if connection fails.\",\n    \"err.inviteNotConnected\": \"The invitation could not be sent. That chat is not connected right now.\",\n    \"err.inviteNotConnectedRetry\": \"The invitation could not be sent. That chat is not connected right now - reopen it and try again.\",\n    \"err.nobodyAccepted\": \"Nobody accepted the invitation. The group is unchanged.\",\n    \"err.noAudio\": \"No audio captured - check microphone permission and try again.\",\n    \"err.voiceNeedsConnection\": \"Voice message needs an active secure connection. Reconnect and try again.\",\n    \"err.voiceRestoring\": \"Restoring the connection - try sending the voice message again in a moment.\",\n    \"err.fileTooLarge\": \"File too large\",\n    \"sas.safetyNumber\": \"Safety number\",\n    \"sas.incorrect\": \"Incorrect code. Check it with your peer and try again.\",\n    \"sas.noMatch\": \"The codes do not match\",\n    \"sas.makeSure\": \"Make sure the codes match exactly.\",\n    \"sas.tooManyAttempts\": \"Too many incorrect attempts. Session reset for safety.\",\n    \"sas.verificationFailed\": \"Verification failed\",\n    \"sas.verified\": \"Verified \u00B7 Perfect Forward Secrecy\",\n    \"sas.runVerification\": \"Run security verification\",\n    \"sec.panelTitle\": \"Network & crypto details\",\n    \"sec.security\": \"Security\",\n    \"sec.transport\": \"Transport\",\n    \"sec.keyExchange\": \"Key exchange\",\n    \"sec.allEnabled\": \"All security features enabled by default\",\n    \"sec.realTimeNote\": \"Real-time verification using actual cryptographic functions - no mock data.\",\n    \"sec.simulatedWarning\": \"Warning: connection may not be fully established - values may be simulated.\",\n    \"dl.title\": \"Download SecureBit\",\n    \"dl.free\": \"Free \u00B7 open source\",\n    \"dl.soon\": \"Mobile (iOS, Android) and browser extensions (Chrome, Firefox, Opera) are coming soon.\",\n    \"chatHdr.chat\": \"Chat\",\n    \"chatHdr.chats\": \"Chats\",\n    \"chatHdr.newChat\": \"+ New\",\n    \"chatHdr.secure\": \"Secure\",\n    \"chatHdr.p2pSub\": \"P2P \u00B7 end-to-end encrypted\",\n    \"chatHdr.save\": \"Save\",\n    \"chatHdr.close\": \"Close\",\n    \"chatHdr.expand\": \"Expand\",\n    \"chatHdr.you\": \"You\",\n    \"chatHdr.qrCode\": \"QR code\",\n    \"chat.disconnected\": \"Disconnected\",\n    \"call.mute\": \"Mute\",\n    \"call.endShort\": \"End\",\n    \"group.add\": \"Add\",\n    \"group.send\": \"Send\",\n    \"sec.pfsShort\": \"Perfect Forward Secrecy\",\n    \"sec.cipher\": \"Cipher\",\n    \"chat.close\": \"Close\",\n    \"file.needConnection\": \"File transfer needs an open connection\",\n    \"presence.available\": \"Available\",\n    \"presence.away\": \"Away\",\n    \"presence.busy\": \"Busy\",\n    \"presence.offline\": \"Offline\",\n    \"presence.invisible\": \"Invisible\",\n    \"presence.availableDesc\": \"Online and reachable\",\n    \"presence.awayDesc\": \"Idle \u00B7 stepped away\",\n    \"presence.busyDesc\": \"Do not disturb\",\n    \"presence.invisibleDesc\": \"Appear offline to peers\",\n    \"presence.online\": \"Online\",\n    \"conn.p2p\": \"P2P \u00B7 connected\",\n    \"conn.verifying\": \"Verifying\u2026\",\n    \"conn.connecting\": \"Connecting\u2026\",\n    \"conn.reconnecting\": \"Reconnecting\u2026\",\n    \"conn.peerDisconnected\": \"Peer disconnected\",\n    \"conn.disconnected\": \"Disconnected\",\n    \"chat.defaultLabel\": \"Chat\",\n    \"groupPhase.forming\": \"Forming\u2026\",\n    \"groupPhase.commitments\": \"Exchanging commitments\u2026\",\n    \"groupPhase.revealing\": \"Revealing\u2026\",\n    \"groupPhase.compare\": \"Compare the group code\",\n    \"groupPhase.ready\": \"Group ready\",\n    \"groupPhase.failed\": \"Group failed\",\n    \"call.qualityGood\": \"Good\",\n    \"call.qualityFair\": \"Fair\",\n    \"call.qualityWeak\": \"Weak\",\n    \"msg.code\": \"Code\",\n    \"msg.timer\": \"Timer\",\n    \"msg.voice\": \"Voice\",\n    \"msg.play\": \"Play\",\n    \"msg.sent\": \"Sent\",\n    \"msg.read\": \"Read\",\n    \"report.title\": \"Real-time security verification\",\n    \"report.active\": \"Active\",\n    \"report.testsPassed\": \"Tests passed\",\n    \"report.verifiedAt\": \"Verified at\",\n    \"report.source\": \"Source\",\n    \"secTest.verifyECDHKeyExchange\": \"ECDH key exchange\",\n    \"secTest.verifyECDSASignatures\": \"ECDSA digital signatures\",\n    \"secTest.verifyEncryption\": \"AES-GCM encryption\",\n    \"secTest.verifyMessageIntegrity\": \"Message integrity\",\n    \"secTest.verifyPerfectForwardSecrecy\": \"Perfect forward secrecy\",\n    \"secTest.verifyPFS\": \"Perfect forward secrecy\",\n    \"secTest.verifyReplayProtection\": \"Replay protection\",\n    \"secTest.verifyDTLSFingerprint\": \"DTLS fingerprint\",\n    \"secTest.verifySASVerification\": \"SAS verification\",\n    \"secTest.verifyMetadataProtection\": \"Metadata protection\",\n    \"secTest.verifyTrafficObfuscation\": \"Traffic obfuscation\",\n    \"secTest.verifyPacketPadding\": \"Packet padding\",\n    \"secTest.verifyNestedEncryption\": \"Nested encryption\",\n    \"secTest.verifyNonExtractableKeys\": \"Non-extractable keys\",\n    \"secTest.verifyRateLimiting\": \"Rate limiting\",\n    \"secTest.verifyMutualAuth\": \"Mutual authentication\",\n    \"secTest.verifyAuthProof\": \"Authentication proof\",\n    \"secTest.verifyEnhancedValidation\": \"Enhanced validation\",\n    \"secTest.verifyAdvancedFeatures\": \"Advanced features\",\n    \"secTest.verifySignature\": \"Signature check\",\n    \"secDetail.Security system initializing...\": \"Security system initializing...\",\n    \"secDetail.Nested encryption active\": \"Nested encryption active\",\n    \"secDetail.Nested encryption failed\": \"Nested encryption failed\",\n    \"secDetail.Packet padding active\": \"Packet padding active\",\n    \"secDetail.Packet padding failed\": \"Packet padding failed\",\n    \"secDetail.Advanced features active\": \"Advanced features active\",\n    \"secDetail.Advanced features failed\": \"Advanced features failed\",\n    \"secDetail.No encryption key available\": \"No encryption key available\",\n    \"secDetail.AES-GCM encryption/decryption working correctly\": \"AES-GCM encryption/decryption working correctly\",\n    \"secDetail.No ECDH key pair available\": \"No ECDH key pair available\",\n    \"secDetail.Key derivation failed\": \"Key derivation failed\",\n    \"secDetail.No ECDSA key pair available\": \"No ECDSA key pair available\",\n    \"secDetail.ECDSA digital signatures working correctly\": \"ECDSA digital signatures working correctly\",\n    \"secDetail.MAC key not available or invalid\": \"MAC key not available or invalid\",\n    \"secDetail.Rate limiter did not block a message over the limit\": \"Rate limiter did not block a message over the limit\",\n    \"secDetail.Rate limiter is not available\": \"Rate limiter is not available\",\n    \"secDetail.Replay protection is working correctly\": \"Replay protection is working correctly\",\n    \"secDetail.Replay protection not enabled\": \"Replay protection not enabled\",\n    \"secDetail.SAS code not available\": \"SAS code not available\",\n    \"secDetail.SAS verification code is valid and available\": \"SAS verification code is valid and available\",\n    \"secDetail.Traffic obfuscation is working correctly\": \"Traffic obfuscation is working correctly\",\n    \"secDetail.Traffic obfuscation not enabled\": \"Traffic obfuscation not enabled\",\n    \"secDetail.No non-extractable ephemeral ECDH key pair for this session\": \"No non-extractable ephemeral ECDH key pair for this session\",\n    \"secDetail.Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation\": \"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation\",\n    \"msg.pause\": \"Pause\",\n    \"msg.failed\": \"Failed\",\n    \"groupErr.timeout\": \"A member stopped responding before the code was ready.\",\n    \"groupErr.keyMismatch\": \"A member's key did not match the identity claimed for it.\",\n    \"groupErr.revealMismatch\": \"A member's revealed value did not match what they committed to.\",\n    \"groupErr.commitChanged\": \"A member changed their commitment part-way through.\",\n    \"groupErr.missingKey\": \"A member was listed whose key never arrived.\",\n    \"groupErr.outsider\": \"A frame arrived from someone outside the group.\",\n    \"groupErr.limit\": \"A group is limited to eight members.\",\n    \"groupErr.tooLarge\": \"A message was too large to send to the group.\",\n    \"fileType.text\": \"Plain text\",\n    \"fileType.images\": \"Images\",\n    \"fileType.archives\": \"Archives\",\n    \"fileType.voice\": \"Voice messages\",\n    \"fileType.unsupported\": \"Unsupported\",\n    \"qrScan.title\": \"Scan QR Code\",\n    \"qrScan.auto\": \"Auto Mode\",\n    \"qrScan.reset\": \"Reset\",\n    \"qrScan.autoScroll\": \"Auto-scrolling enabled\",\n    \"qrScan.starting\": \"Starting camera...\",\n    \"qrScan.point\": \"Point camera at QR code\",\n    \"qrScan.tapFocus\": \"Tap screen to focus\",\n    \"qrScan.focusing\": \"Focusing...\",\n    \"iceErr.notArray\": \"Server list must be an array\",\n    \"iceErr.invalidJson\": \"Invalid JSON\",\n    \"iceErr.tooMany\": \"Too many servers (max {max})\",\n    \"iceErr.invalidEntry\": \"{label}: invalid entry\",\n    \"iceErr.urlCount\": \"{label}: between 1 and {max} URLs required\",\n    \"iceErr.turnCreds\": \"{label}: TURN servers usually require a username and credential\",\n    \"iceUrl.notString\": \"URL must be a string\",\n    \"iceUrl.empty\": \"URL is empty\",\n    \"iceUrl.tooLong\": \"URL is too long\",\n    \"iceUrl.badChars\": \"URL contains invalid characters\",\n    \"iceUrl.badScheme\": \"URL must start with stun:, stuns:, turn: or turns:\",\n    \"iceUrl.badQuery\": \"URL has an invalid query\",\n    \"iceUrl.noHost\": \"URL is missing a host\",\n    \"iceUrl.badHost\": \"URL has an invalid host or port\",\n    \"iceUrl.badTransport\": \"URL query must be transport=udp or transport=tcp\",\n    \"msg.off\": \"Off\",\n    \"file.consentUnavailable\": \"User consent unavailable\",\n    \"secLevel.MAXIMUM\": \"MAXIMUM\",\n    \"secLevel.INITIALIZING\": \"INITIALIZING\",\n    \"secLevel.ERROR\": \"ERROR\",\n    \"secLevel.UNKNOWN\": \"UNKNOWN\",\n    \"status.error\": \"Error\",\n    \"offline.disconnect\": \"Disconnect\",\n    \"offline.learnMore\": \"Learn more\",\n    \"pwa.installApp\": \"Install App\",\n    \"chat.onWeb\": \"You're on Web\",\n    \"groupCall.startVoice\": \"Start a group voice call\",\n    \"groupCall.startVideo\": \"Start a group video call\",\n    \"groupCall.join\": \"Join\",\n    \"groupCall.dismiss\": \"Not now\",\n    \"groupCall.leave\": \"Leave call\",\n    \"groupCall.you\": \"You\",\n    \"groupCall.connecting\": \"Connecting\u2026\",\n    \"groupCall.waitingLink\": \"Waiting for a direct link\u2026\",\n    \"groupCall.legFailed\": \"Could not connect\",\n    \"groupCall.startedVoice\": \"{name} started a voice call\",\n    \"groupCall.startedVideo\": \"{name} started a video call\",\n    \"groupCall.inCall\": \"{count} in the call\",\n    \"groupCall.err.permission_denied\": \"The call could not start - microphone and camera access is blocked. Allow it for this site, then try again.\",\n    \"groupCall.err.device_not_found\": \"The call could not start - no microphone was found on this device.\",\n    \"groupCall.err.device_busy\": \"The call could not start - your microphone is in use by another app. Close it and try again.\",\n    \"groupCall.err.media_failed\": \"The call could not start - the microphone could not be opened.\",\n    \"groupCall.err.call_in_progress\": \"A call is already running in this group. Join it instead of starting another.\",\n    \"groupCall.err.not_ready\": \"Confirm the group code before calling.\",\n    \"groupCall.speaking\": \"{name} is speaking\",\n    \"groupCall.pin\": \"Show {name} large\",\n    \"groupCall.unpin\": \"Back to everyone\",\n    \"groupCall.showEveryone\": \"Everyone\",\n    \"msg.after5s\": \"5s after reading\",\n    \"msg.after15s\": \"15s after reading\",\n    \"msg.after30s\": \"30s after reading\",\n    \"msg.after1m\": \"1m after reading\",\n    \"msg.sec30\": \"30 seconds\",\n    \"msg.min5\": \"5 minutes\",\n    \"msg.hour1\": \"1 hour\",\n    \"desktop.shareDesc\": \"Send the code to your peer. It is one-time and expires shortly.\",\n    \"desktop.invitationCreated\": \"Secure invitation created - send it to your peer.\",\n    \"desktop.joinDesc\": \"Paste your peer's invitation code to build your secure answer.\",\n    \"desktop.offerTag\": \"offer \u00B7 copy text\",\n    \"desktop.answerTag\": \"answer \u00B7 copy text\",\n    \"desktop.offerPlaceholder\": \"Invitation code will appear here\u2026\",\n    \"desktop.answerPlaceholder\": \"Response code will appear here\u2026\",\n    \"desktop.backToChats\": \"Back to chats\",\n    \"desktop.sendFeedback\": \"Send feedback\",\n    \"desktop.callsNeedVerified\": \"Calls require a verified secure channel.\",\n    \"desktop.noOpenChannel\": \"No open secure channel.\",\n    \"desktop.chatCarriesCall\": \"This chat is carrying a group call. Leave the group call before placing a 1:1 call.\",\n    \"desktop.err.permission_denied\": \"The call could not start - microphone and camera access is blocked. Allow it in system settings, then try again.\",\n    \"desktop.language\": \"Language\",\n    \"desktop.languageHint\": \"Applies at once. Messages already sent keep the words they were written in.\",\n    \"desktop.compareCode\": \"Compare the verification code with your peer and confirm if it matches.\",\n    \"desktop.verifyBeforeFiles\": \"Complete verification before sending files.\",\n    \"desktop.verifyBeforeSending\": \"Complete verification before sending messages.\",\n    \"desktop.disconnectedByBackend\": \"Connection securely disconnected.\",\n    \"desktop.restoreFailed\": \"Could not restore the connection. Closing this chat.\",\n    \"desktop.channelNotReady\": \"The data channel is not available yet. Wait for the connection to establish.\",\n    \"desktop.enterCode\": \"Enter the verification code to confirm.\",\n    \"desktop.noOffer\": \"No invitation found. Create one first.\",\n    \"desktop.notInitiator\": \"You did not create this connection, so there is no answer for you to apply.\",\n    \"desktop.decryptFailed\": \"A message could not be decrypted and was discarded.\",\n    \"desktop.badMessageFormat\": \"A malformed frame arrived and was discarded.\",\n    \"desktop.notSentNotReady\": \"Message not sent: the secure channel is not ready. Wait for verification to finish, or reconnect.\",\n    \"desktop.micDenied\": \"Microphone access was denied.\",\n    \"desktop.noChannelWait\": \"No open secure channel - wait for the connection to establish.\",\n    \"desktop.sasFailed\": \"Verification failed. A machine-in-the-middle may be present, so the connection was aborted.\",\n    \"desktop.sasOk\": \"Verification succeeded. This channel is authenticated end to end.\",\n    \"desktop.iceForgotten\": \"Saved servers forgotten. Using public ICE servers.\",\n    \"desktop.icePublic\": \"Using public ICE servers.\",\n    \"desktop.verificationInProgress\": \"Security verification is still running. Wait for it to finish.\",\n    \"desktop.fileGone\": \"This file is no longer available for download.\",\n    \"desktop.codeMismatch\": \"The verification codes do not match. Disconnecting for safety.\",\n    \"desktop.noLocalCode\": \"Verification failed: there is no locally derived code to compare against. Disconnecting for safety.\",\n    \"desktop.protocolViolation\": \"The peer claimed the code was confirmed before you confirmed it. Disconnecting for safety.\",\n    \"desktop.verificationRejected\": \"Verification rejected. The connection was aborted for safety.\",\n    \"secLevel.HIGH\": \"HIGH\",\n    \"secLevel.MEDIUM\": \"MEDIUM\",\n    \"secLevel.LOW\": \"LOW\",\n    \"desktop.rerun\": \"Re-run\",\n    \"desktop.ice.customDesc\": \"Up to {max} servers, one URL per line or JSON.\",\n    \"desktop.ice.persistDesc\": \"Stored locally on this device. Leave off to use only for this session.\",\n    \"desktop.group.leaveNote\": \"The other members are told you left. Nothing about this group is kept on this device afterwards - there is no server holding a copy to rejoin from, so you would need a fresh invitation.\",\n    \"desktop.sec.ecdsaOk\": \"Peer key package signature verified during the handshake (ECDSA P-384 / SHA-384)\",\n    \"desktop.sec.ecdsaNone\": \"No completed handshake\",\n    \"desktop.sec.ecdhOk\": \"Session keys derived from an ephemeral ECDH P-384 exchange via HKDF-SHA-256\",\n    \"desktop.sec.ecdhNone\": \"No session keys derived\",\n    \"desktop.sec.encryptionOk\": \"AES-GCM encryption and decryption verified inside the core\",\n    \"desktop.sec.encryptionNa\": \"The AES-GCM self-test could not be run\",\n    \"desktop.sec.integrityOk\": \"Message integrity verified (AES-GCM authentication)\",\n    \"desktop.sec.integrityNa\": \"The integrity self-test could not be run\",\n    \"desktop.sec.pfsOk\": \"Double Ratchet active - every message has a key of its own\",\n    \"desktop.sec.pfsNa\": \"Not measured\",\n    \"desktop.sec.replayOk\": \"Ratchet message keys are destroyed once used, so a captured frame cannot be replayed\",\n    \"desktop.sec.replayNa\": \"Not measured\",\n    \"desktop.sec.dtlsPinned\": \"Peer DTLS fingerprint pinned: {fp}\",\n    \"desktop.sec.dtlsNone\": \"No remote DTLS fingerprint available\",\n    \"desktop.sec.sasBoth\": \"Both peers confirmed the out-of-band safety code\",\n    \"desktop.sec.sasIncomplete\": \"The safety code has not been confirmed by both peers\",\n    \"desktop.sec.metadataOk\": \"A dedicated metadata key was derived (HKDF metadata-protection-v4)\",\n    \"desktop.sec.metadataNone\": \"No metadata key\",\n    \"desktop.sec.coverOn\": \"Cover traffic active: random fake frames (32-128 B every 15-30 s) on the ratcheted channel\",\n    \"desktop.sec.coverOff\": \"The cover traffic generator is not running\",\n    \"desktop.sec.coverUnsupported\": \"Cover traffic needs a Double Ratchet session (the peer is on an older release)\",\n    \"desktop.tagline\": \"End-to-end freedom\",\n    \"desktop.callsNotHere\": \"Calls are not available in this build yet. Messages, files and group chats work as usual.\"\n};\n\nconst registry = globalThis.__SECUREBIT_I18N__ || (globalThis.__SECUREBIT_I18N__ = Object.create(null));\nregistry[\"en\"] = DICTIONARY;\n", "/**\n * Language selection and string lookup.\n *\n * Every locale is a real page at a real URL (/, /de/, ...), generated at build time,\n * because the app is client-rendered: a language that exists only as a runtime string\n * swap has no URL for a crawler to index. This module is the runtime half \u2014 it decides\n * which locale the current page is, and hands components their strings.\n *\n * The rule that matters: the URL wins over everything. Someone who opens /de/ gets\n * German even if they once chose English here, or a shared link would open in whatever\n * language the recipient happened to pick last, which makes links unshareable.\n */\n\nimport { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALE_META, CROSS_LOCALE_STRINGS } from './generated.js';\n// Side-effect import: loading the default locale's dictionary registers the strings\n// t() falls back to when a translation is missing a key. It is the one dictionary that\n// has to be present on every page, so it is the one that gets bundled.\nimport './dict/default.js';\n\nexport { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALE_META };\n\n/**\n * Loaded dictionaries, by locale code.\n *\n * On a global rather than in module scope, and that is the point. index.js exists twice\n * on a page: once bundled inside dist/app.js, and once as raw source, because the PWA\n * install prompt, the PWA manager and the update checker import it directly. Two module\n * instances mean two module-scoped registries, and the /ru/ dictionary loaded by the\n * page would have been invisible to the half of the app that needed it.\n *\n * A page loads its own dictionary through a <script type=\"module\"> that runs before the\n * bundles; every locale other than the default arrives that way. See scripts/build-i18n.js.\n */\nconst REGISTRY = globalThis.__SECUREBIT_I18N__ || (globalThis.__SECUREBIT_I18N__ = Object.create(null));\n\n/** The dictionary for a locale, or an empty one if that locale was never loaded. */\nfunction dictionary(code) {\n    return REGISTRY[code] || null;\n}\n\nconst STORAGE_KEY = 'securebit-locale';\n\n/** The locale a path belongs to, or null for the default locale at the root. */\nexport function localeFromPathname(pathname = '/') {\n    const segment = String(pathname).split('/')[1];\n    return SUPPORTED_LOCALES.includes(segment) && segment !== DEFAULT_LOCALE ? segment : null;\n}\n\n/**\n * Best match for a browser's language list. \"de-AT\" should get German if German is all\n * we have, so the base tag is tried after the full one, in the order the browser gave.\n */\nexport function localeFromLanguages(languages = []) {\n    for (const tag of languages) {\n        const lower = String(tag).toLowerCase();\n        const exact = SUPPORTED_LOCALES.find((code) => code.toLowerCase() === lower);\n        if (exact) return exact;\n        const base = lower.split('-')[0];\n        const partial = SUPPORTED_LOCALES.find((code) => code.toLowerCase().split('-')[0] === base);\n        if (partial) return partial;\n    }\n    return null;\n}\n\n/**\n * Which locale to render, given everything we know. Pure, so the precedence can be\n * tested without a browser: URL, then a previous explicit choice, then the browser's\n * languages, then the default.\n */\nexport function detectLocale({ pathname = '/', stored = null, languages = [] } = {}) {\n    const fromPath = localeFromPathname(pathname);\n    if (fromPath) return fromPath;\n\n    // The root path is the default locale's own page, not an absence of information \u2014\n    // redirecting away from it would break every link to the site's canonical URL.\n    if (isLocaleRoot(pathname)) return DEFAULT_LOCALE;\n\n    if (stored && SUPPORTED_LOCALES.includes(stored)) return stored;\n    return localeFromLanguages(languages) || DEFAULT_LOCALE;\n}\n\n/** True for \"/\" and \"/index.html\" \u2014 the pages the default locale is served from. */\nfunction isLocaleRoot(pathname) {\n    return pathname === '/' || pathname === '/index.html';\n}\n\n/**\n * The URL of the current page in another locale. Switching keeps you where you are\n * rather than dumping you back on the home page.\n */\nexport function localeHref(code, pathname = '/') {\n    const current = localeFromPathname(pathname);\n    const rest = current ? String(pathname).slice(current.length + 1) : String(pathname);\n    const tail = rest.replace(/^\\/+/, '');\n    return code === DEFAULT_LOCALE ? `/${tail}` : `/${code}/${tail}`;\n}\n\n/** Remember an explicit choice. Storage can throw in private mode; a preference is not worth an exception. */\nexport function rememberLocale(code) {\n    try {\n        localStorage.setItem(STORAGE_KEY, code);\n    } catch (_) {\n        // Private mode or blocked storage: the URL still carries the choice.\n    }\n}\n\nexport function storedLocale() {\n    try {\n        return localStorage.getItem(STORAGE_KEY);\n    } catch (_) {\n        return null;\n    }\n}\n\n/**\n * The locale of the page as actually loaded. Resolved once: it cannot change without a\n * navigation, and t() is called dozens of times per render \u2014 re-reading localStorage\n * on each of those would be a synchronous storage hit per string.\n */\nlet resolvedLocale = null;\nexport function currentLocale() {\n    if (resolvedLocale) return resolvedLocale;\n    // A window may exist without the parts this needs: test harnesses and workers both\n    // provide partial shims. Reading through them blindly threw and took the caller with\n    // it, which for t() means a missing string becomes a crash.\n    const w = typeof window === 'undefined' ? null : window;\n    if (!w || !w.location) return DEFAULT_LOCALE;\n    resolvedLocale = detectLocale({\n        pathname: w.location.pathname || '/',\n        stored: storedLocale(),\n        languages: w.navigator?.languages || [],\n    });\n    return resolvedLocale;\n}\n\n/**\n * Writing direction of a locale. Arabic, Hebrew, Persian and Urdu read right to left,\n * and the whole layout \u2014 not just the text \u2014 has to follow: an avatar that sits before\n * a name in English sits after it in Arabic.\n *\n * The generated page already carries dir on <html>, so nothing here needs to apply it\n * at load. This exists for the handful of decisions CSS cannot express on its own \u2014\n * which way an arrow points, which edge a drawer slides in from.\n */\nexport function localeDir(code = currentLocale()) {\n    return LOCALE_META[code]?.dir === 'rtl' ? 'rtl' : 'ltr';\n}\n\nexport function isRTL(code = currentLocale()) {\n    return localeDir(code) === 'rtl';\n}\n\n/**\n * +1 or -1, for arithmetic on a horizontal offset: a swipe threshold, a translate, the\n * side a sheet enters from. `x * direction()` is the whole of what a mirrored gesture\n * needs, and it reads better than an `isRTL ? -x : x` at every call site.\n */\nexport function direction(code = currentLocale()) {\n    return isRTL(code) ? -1 : 1;\n}\n\n/**\n * Force a fragment to be laid out left to right inside right-to-left text.\n *\n * Bidi reordering is done by the browser on the rendered text, and it mangles exactly\n * the strings this app is made of: a key fingerprint, a base64 session descriptor, a\n * URL, a version number. In an RTL paragraph \"a1b2:c3d4\" can come out as \"c3d4:a1b2\" \u2014\n * the characters are all there, so nothing looks broken, and the reader compares the\n * wrong thing against their peer's screen. Any element showing machine text gets these\n * props.\n */\nexport const LTR_TEXT = { dir: 'ltr', style: { unicodeBidi: 'isolate', textAlign: 'start' } };\n\n/**\n * The suggestion is an offer, and an offer that keeps coming back after it was turned\n * down is an ad. One dismissal is remembered for good; storage can be unavailable, in\n * which case the bar simply comes back \u2014 a worse experience, never a broken one.\n */\nconst SUGGEST_KEY = 'securebit-locale-suggest-dismissed';\n\nexport function localeSuggestionDismissed() {\n    try {\n        return localStorage.getItem(SUGGEST_KEY) === '1';\n    } catch (_) {\n        return false;\n    }\n}\n\nexport function dismissLocaleSuggestion() {\n    try {\n        localStorage.setItem(SUGGEST_KEY, '1');\n    } catch (_) {\n        // Nothing to do: the bar reappears next visit, which is not worth an exception.\n    }\n}\n\n/**\n * A locale the visitor would probably rather read, when it is not the one they are on.\n * Used to offer a link, never to redirect: an automatic redirect sends Googlebot \u2014\n * which crawls from one place \u2014 to a single locale and leaves the rest unindexed.\n */\nexport function suggestedLocale({ pathname = '/', languages = [], stored = null } = {}) {\n    const shown = localeFromPathname(pathname) || DEFAULT_LOCALE;\n    // An explicit past choice outranks the browser's list: someone who picked a\n    // language once meant it, and it is exactly when their page does not match that\n    // choice that the offer is worth making.\n    const preferred = (SUPPORTED_LOCALES.includes(stored) && stored) || localeFromLanguages(languages);\n    return preferred && preferred !== shown ? preferred : null;\n}\n\n/**\n * A list-valued string, for the handful of places where the copy is a set of short\n * labels rather than a sentence \u2014 a language may need a different number of them, so\n * the count belongs to the translation, not to the component.\n */\nexport function tList(key, locale = currentLocale()) {\n    const value = dictionary(locale)?.[key] ?? dictionary(DEFAULT_LOCALE)?.[key];\n    return Array.isArray(value) ? value : [];\n}\n\n/**\n * The rows a language switcher renders. Built here rather than in the component so the\n * URLs can be tested without a DOM, and so the switcher stays what it must be: a list\n * of real links. A control that swaps strings in place would leave every language on\n * one URL, which is the thing this whole arrangement exists to avoid.\n */\nexport function languageLinks({ pathname = '/', active = DEFAULT_LOCALE } = {}) {\n    return SUPPORTED_LOCALES.map((code) => ({\n        code,\n        href: localeHref(code, pathname),\n        hrefLang: LOCALE_META[code]?.htmlLang || code,\n        // Listed in its own language: someone looking for German is looking for\n        // \"Deutsch\", not for the English word for it.\n        label: LOCALE_META[code]?.nativeName || code,\n        // Short code for the collapsed switcher.\n        abbr: LOCALE_META[code]?.abbr || code.toUpperCase(),\n        // The row renders a name in its own script, so it needs its own direction:\n        // \"\u0627\u0644\u0639\u0631\u0628\u064A\u0629\" laid out left-to-right is the word spelled backwards.\n        dir: LOCALE_META[code]?.dir || 'ltr',\n        isCurrent: code === active,\n    }));\n}\n\n/**\n * Look up a string. Falls back to the default locale and then to the key itself, so a\n * missing translation shows English rather than blank UI.\n */\nexport function t(key, vars, locale = currentLocale()) {\n    const template =\n        dictionary(locale)?.[key] ??\n        // Asked for a locale whose dictionary is not on this page. Only the language\n        // suggestion does that, and only for the handful of keys it needs, so those\n        // ship for every locale; anything else falls through to the default below.\n        CROSS_LOCALE_STRINGS[locale]?.[key] ??\n        dictionary(DEFAULT_LOCALE)?.[key] ??\n        key;\n    if (!vars) return template;\n    return String(template).replace(/\\{(\\w+)\\}/g, (match, name) =>\n        Object.prototype.hasOwnProperty.call(vars, name) ? String(vars[name]) : match\n    );\n}\n", "import { t } from '../i18n/index.js';\n// Sessions registry for SecureBit.chat multi-session support.\n//\n// Pure, framework-free reducer + helpers. The root React component drives it via\n// React.useReducer; non-serializable per-session objects (the EnhancedSecureWebRTCManager\n// instance, its NotificationIntegration, offline queues, QR-animation timers) live OUTSIDE\n// this state in ref-held Maps keyed by sessionId \u2014 never in here, never shared between\n// sessions. Every reducer case returns fresh objects for the touched session only, so a\n// change to one session can never mutate another (full isolation).\n//\n// sessionId is LOCAL ONLY (crypto.randomUUID). It is never sent to the peer as identity.\n\nexport const SESSION_ACTIONS = Object.freeze({\n    CREATE_SESSION: 'CREATE_SESSION',\n    REMOVE_SESSION: 'REMOVE_SESSION',\n    SET_ACTIVE: 'SET_ACTIVE',\n    SET_STATUS: 'SET_STATUS',\n    SET_FINGERPRINT: 'SET_FINGERPRINT',\n    SET_VERIFICATION: 'SET_VERIFICATION',\n    SET_SAS: 'SET_SAS',\n    ADD_MESSAGE: 'ADD_MESSAGE',\n    SET_MESSAGES: 'SET_MESSAGES',\n    UPDATE_MESSAGE_STATUS: 'UPDATE_MESSAGE_STATUS',\n    PATCH_MESSAGE: 'PATCH_MESSAGE',\n    DELETE_MESSAGE: 'DELETE_MESSAGE',\n    EXPIRE_MESSAGE: 'EXPIRE_MESSAGE',\n    INCREMENT_UNREAD: 'INCREMENT_UNREAD',\n    CLEAR_UNREAD: 'CLEAR_UNREAD',\n    SET_PENDING_FILES: 'SET_PENDING_FILES',\n    PATCH_SETUP: 'PATCH_SETUP',\n    RENAME: 'RENAME',\n    SET_PEER_PRESENCE: 'SET_PEER_PRESENCE'\n});\n\n// Availability presence the PEER advertises to us (sent E2E over the data channel, never\n// stored on a server). 'invisible' is sent on the wire as 'offline' so peers can't tell.\nexport const PRESENCE_DOT = { available: 'var(--sb-green-solid)', away: 'var(--sb-yellow-2-solid)', busy: 'var(--sb-red-solid)', offline: 'var(--sb-text-9)' };\nexport const PRESENCE_WORD = { available: t('presence.available'), away: t('presence.away'), busy: t('presence.busy'), offline: t('presence.offline') };\n// The statuses the local user can pick for themselves (design: Set your status).\nexport const MY_STATUS_OPTIONS = [\n    { key: 'available', word: t('presence.available'), desc: t('presence.availableDesc'), dot: 'var(--sb-green-solid)' },\n    { key: 'away', word: t('presence.away'), desc: t('presence.awayDesc'), dot: 'var(--sb-yellow-2-solid)' },\n    { key: 'busy', word: t('presence.busy'), desc: t('presence.busyDesc'), dot: 'var(--sb-red-solid)' },\n    { key: 'invisible', word: t('presence.invisible'), desc: t('presence.invisibleDesc'), dot: 'var(--sb-text-9)' }\n];\n\n// Short, human-friendly default label derived from the local sessionId. Never the peer's\n// identity \u2014 just something stable to show before the SAS-derived label is available.\nexport function shortLabelFromId(id) {\n    const hex = String(id || '').replace(/[^a-z0-9]/gi, '');\n    return t('chat.defaultLabel') + ' ' + (hex.slice(0, 4) || '0000').toUpperCase();\n}\n\n// Two-letter monogram for the avatar tile (mirrors the design's `mono()` helper).\nexport function monoInitials(label) {\n    const words = String(label || '').trim().split(/\\s+/).filter(Boolean);\n    const a = words[0]?.[0] || '';\n    const b = words[1]?.[0] || words[0]?.[1] || '';\n    return (a + b).toUpperCase() || '\u00B7\u00B7';\n}\n\n// Status \u2192 dot colour (mirrors the design's DOT map).\nexport function statusDot(status) {\n    switch (status) {\n        case 'connected':\n        case 'verified':\n            return 'var(--sb-green-solid)';\n        case 'connecting':\n        case 'verifying':\n        case 'new':\n            return 'var(--sb-yellow-2-solid)';\n        default:\n            return 'var(--sb-red-solid)'; // disconnected / peer_disconnected / lost\n    }\n}\n\n// Status \u2192 header sub-text (mirrors the design's SUB map).\nexport function statusSub(status) {\n    switch (status) {\n        case 'connected':\n        case 'verified':\n            return t('conn.p2p');\n        case 'verifying':\n            return t('conn.verifying');\n        case 'connecting':\n        case 'new':\n            return t('conn.connecting');\n        case 'reconnecting':\n            return t('conn.reconnecting');\n        case 'peer_disconnected':\n            return t('conn.peerDisconnected');\n        default:\n            return t('conn.disconnected');\n    }\n}\n\nfunction emptySetup() {\n    return {\n        offerData: '',\n        answerData: '',\n        offerInput: '',\n        answerInput: '',\n        showOfferStep: false,\n        showAnswerStep: false,\n        showVerification: false,\n        showQRCode: false,\n        qrCodeUrl: '',\n        isGeneratingKeys: false,\n        qrFramesTotal: 0,\n        qrFrameIndex: 0,\n        qrManualMode: false\n    };\n}\n\nexport function createSessionEntry(opts = {}) {\n    const id = opts.id || (typeof crypto !== 'undefined' && crypto.randomUUID ? crypto.randomUUID() : String(Date.now()) + Math.random());\n    return {\n        id,\n        peerLabel: opts.peerLabel || shortLabelFromId(id),\n        labelIsCustom: false, // becomes true once the user renames; blocks SAS auto-relabel\n        createdAt: opts.createdAt || Date.now(),\n        role: opts.role || 'offer', // 'offer' | 'answer'\n        status: opts.status || 'new',\n        keyFingerprint: '',\n        verificationCode: '',\n        sas: { localConfirmed: false, remoteConfirmed: false, bothConfirmed: false, isVerified: false },\n        messages: [],\n        unreadCount: 0,\n        pendingIncomingFiles: [],\n        peerPresence: null, // peer's advertised availability ('available'|'away'|'busy'|'offline'); null = unknown\n        setup: emptySetup()\n    };\n}\n\nexport function createInitialState() {\n    return { sessions: {}, order: [], activeSessionId: null };\n}\n\n// Apply a partial patch to one session, returning a new state with only that session's\n// object replaced. Other sessions keep their identity (referential isolation).\nfunction patchSession(state, id, patch) {\n    const session = state.sessions[id];\n    if (!session) return state;\n    return {\n        ...state,\n        sessions: { ...state.sessions, [id]: { ...session, ...patch } }\n    };\n}\n\nexport function sessionsReducer(state, action) {\n    const A = SESSION_ACTIONS;\n    switch (action.type) {\n        case A.CREATE_SESSION: {\n            const entry = action.entry || createSessionEntry(action);\n            if (state.sessions[entry.id]) return state;\n            return {\n                sessions: { ...state.sessions, [entry.id]: entry },\n                order: [...state.order, entry.id],\n                activeSessionId: action.activate === false ? state.activeSessionId : entry.id\n            };\n        }\n\n        case A.REMOVE_SESSION: {\n            const { id } = action;\n            if (!state.sessions[id]) return state;\n            const sessions = { ...state.sessions };\n            delete sessions[id];\n            const order = state.order.filter((x) => x !== id);\n            let activeSessionId = state.activeSessionId;\n            if (activeSessionId === id) {\n                // Re-point to the previous sibling in display order, else the first remaining.\n                const removedIdx = state.order.indexOf(id);\n                activeSessionId = order[Math.max(0, removedIdx - 1)] || order[0] || null;\n            }\n            return { sessions, order, activeSessionId };\n        }\n\n        case A.SET_ACTIVE: {\n            if (!state.sessions[action.id]) return state;\n            if (state.activeSessionId === action.id) return state;\n            return { ...state, activeSessionId: action.id };\n        }\n\n        case A.SET_STATUS: {\n            const session = state.sessions[action.id];\n            if (!session || session.status === action.status) return state; // no-op if unchanged\n            // Peer presence is only meaningful while connected. Clear it whenever the\n            // session leaves the connected state, so a later reconnect doesn't briefly\n            // re-show the peer's stale status before they re-broadcast their presence.\n            // 'reconnecting' keeps the peer's advertised presence: the session is\n            // still alive, only its network path is being repaired, and blanking\n            // the presence would make a 2-second glitch look like a disconnect.\n            const connected = action.status === 'connected'\n                || action.status === 'verified'\n                || action.status === 'reconnecting';\n            const patch = (!connected && session.peerPresence !== null)\n                ? { status: action.status, peerPresence: null }\n                : { status: action.status };\n            return patchSession(state, action.id, patch);\n        }\n\n        case A.SET_FINGERPRINT:\n            return patchSession(state, action.id, { keyFingerprint: action.fingerprint });\n\n        case A.SET_VERIFICATION:\n            return patchSession(state, action.id, { verificationCode: action.code });\n\n        case A.SET_SAS: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            return patchSession(state, action.id, { sas: { ...session.sas, ...action.sas } });\n        }\n\n        case A.ADD_MESSAGE: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            return patchSession(state, action.id, { messages: [...session.messages, action.message] });\n        }\n\n        case A.SET_MESSAGES: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const next = typeof action.updater === 'function'\n                ? action.updater(session.messages)\n                : action.messages;\n            return patchSession(state, action.id, { messages: Array.isArray(next) ? next : [] });\n        }\n\n        case A.UPDATE_MESSAGE_STATUS: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            let changed = false;\n            const messages = session.messages.map((m) => {\n                if (String(m.mid) === String(action.mid) && m.status !== action.status) {\n                    changed = true;\n                    return { ...m, status: action.status };\n                }\n                return m;\n            });\n            return changed ? patchSession(state, action.id, { messages }) : state;\n        }\n\n        case A.PATCH_MESSAGE: {\n            // Shallow-merge a partial into a single message, matched by local `id`\n            // or `mid` (whichever the caller provides). Used to drive voice-message\n            // transfer progress and to attach the decrypted audio URL on completion.\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const byId = action.messageId != null ? String(action.messageId) : null;\n            const byMid = action.mid != null ? String(action.mid) : null;\n            const byFileId = action.fileId != null ? String(action.fileId) : null;\n            let changed = false;\n            const messages = session.messages.map((m) => {\n                const hit = (byId != null && String(m.id) === byId)\n                    || (byMid != null && String(m.mid) === byMid)\n                    || (byFileId != null && m.fileId != null && String(m.fileId) === byFileId);\n                if (!hit) return m;\n                changed = true;\n                const patch = typeof action.patch === 'function' ? action.patch(m) : action.patch;\n                return { ...m, ...patch };\n            });\n            return changed ? patchSession(state, action.id, { messages }) : state;\n        }\n\n        case A.DELETE_MESSAGE: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const messages = session.messages.filter((m) => String(m.mid) !== String(action.mid));\n            if (messages.length === session.messages.length) return state;\n            return patchSession(state, action.id, { messages });\n        }\n\n        case A.EXPIRE_MESSAGE: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            let changed = false;\n            const messages = session.messages.map((m) => {\n                if (String(m.id) === String(action.messageId) && !m.expired) {\n                    changed = true;\n                    return { ...m, expired: true, message: '', expiresAt: undefined };\n                }\n                return m;\n            });\n            return changed ? patchSession(state, action.id, { messages }) : state;\n        }\n\n        case A.INCREMENT_UNREAD: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            return patchSession(state, action.id, { unreadCount: session.unreadCount + 1 });\n        }\n\n        case A.CLEAR_UNREAD: {\n            const session = state.sessions[action.id];\n            if (!session || session.unreadCount === 0) return state;\n            return patchSession(state, action.id, { unreadCount: 0 });\n        }\n\n        case A.SET_PENDING_FILES: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const next = typeof action.updater === 'function'\n                ? action.updater(session.pendingIncomingFiles)\n                : action.files;\n            return patchSession(state, action.id, { pendingIncomingFiles: Array.isArray(next) ? next : [] });\n        }\n\n        case A.PATCH_SETUP: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            return patchSession(state, action.id, { setup: { ...session.setup, ...action.patch } });\n        }\n\n        case A.RENAME: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const label = String(action.label || '').trim() || session.peerLabel;\n            return patchSession(state, action.id, { peerLabel: label, labelIsCustom: true });\n        }\n\n        case A.SET_PEER_PRESENCE: {\n            const session = state.sessions[action.id];\n            if (!session || session.peerPresence === action.presence) return state;\n            return patchSession(state, action.id, { peerPresence: action.presence });\n        }\n\n        default:\n            return state;\n    }\n}\n\n// Decorate a session into the shape the sidebar/header rendering consumes (avatar monogram,\n// status dot, sub-text, last-message preview, unread badge). Pure derivation \u2014 no state.\nexport function decorateSession(session, activeSessionId) {\n    // System notices are not conversation. Letting them win the preview put\n    // things like \"Enhanced secure connection closed\" in the rail where the last\n    // thing the peer actually said belongs \u2014 and the status line beside it was\n    // already saying the same thing, better.\n    const lastMessage = [...session.messages].reverse().find(\n        (m) => !m.expired && m.type !== 'system'\n            && ((typeof m.message === 'string' && m.message.trim()) || m.voice),\n    );\n    const s = session.status;\n    const isUp = s === 'connected' || s === 'verified';\n    // 'reconnecting' is a live session whose path is being repaired \u2014 amber, not\n    // red: the keys, the SAS verification and the history are all still valid.\n    const isPending = s === 'connecting' || s === 'verifying' || s === 'new' || s === 'reconnecting';\n    // Avatar dot + sub-text: while a session is up, reflect the PEER's advertised presence;\n    // otherwise reflect the connection state (amber = connecting, red = dropped).\n    let dot, headerSub;\n    if (isPending) {\n        dot = 'var(--sb-yellow-2-solid)';\n        headerSub = statusSub(s);\n    } else if (isUp) {\n        dot = session.peerPresence ? (PRESENCE_DOT[session.peerPresence] || 'var(--sb-text-9)') : 'var(--sb-green-solid)';\n        headerSub = session.peerPresence ? (PRESENCE_WORD[session.peerPresence] || t('presence.online')) : t('conn.p2p');\n    } else {\n        dot = 'var(--sb-red-solid)';\n        headerSub = statusSub(s);\n    }\n    const preview = lastMessage ? (lastMessage.voice ? '\uD83C\uDF99 Voice message' : lastMessage.message) : headerSub;\n    return {\n        id: session.id,\n        name: session.peerLabel,\n        mono: monoInitials(session.peerLabel),\n        dot,\n        headerSub,\n        status: session.status,\n        peerPresence: session.peerPresence,\n        preview,\n        unread: session.unreadCount > 0 ? (session.unreadCount > 99 ? '99+' : String(session.unreadCount)) : null,\n        verified: !!session.sas.isVerified,\n        active: session.id === activeSessionId,\n        inactive: session.id !== activeSessionId\n    };\n}\n\nexport function decorateSessions(state) {\n    return state.order\n        .map((id) => state.sessions[id])\n        .filter(Boolean)\n        .map((s) => decorateSession(s, state.activeSessionId));\n}\n", "// Group cryptography for SecureBit.chat.\n//\n// WHY A SEPARATE IDENTITY KEY EXISTS\n// ----------------------------------\n// The pairwise handshake generates a fresh ECDSA key pair per CONNECTION\n// (see createSecureOffer / createSecureAnswer). That is exactly right for 1:1 \u2014\n// there are no accounts, so there is nothing a long-term key should outlive \u2014\n// but it means Alice presents a different identity key to Bob than she presents\n// to Carol. A group cannot be built on that: a membership operation signed\n// toward Bob would be unverifiable by Carol, and there would be nothing stable\n// to put in a group safety code.\n//\n// So a group gets its own ECDSA P-384 key pair, generated per group per device\n// and destroyed with the group. It never touches the pairwise handshake, and it\n// is published to the other members over the ALREADY VERIFIED pairwise channels.\n// That keeps the 1:1 protocol untouched while giving the group one signing key\n// per member for the epoch's lifetime.\n//\n// WHY THE SAFETY CODE IS COMMIT-THEN-REVEAL\n// -----------------------------------------\n// The obvious construction \u2014 hash the sorted set of member key fingerprints and\n// show the digits, the way a Signal safety number works \u2014 is unsafe at the\n// length a group can actually read aloud.\n//\n// The attacker here is a group member who introduces two others and sits in the\n// middle of the pair they could not reach directly. They present key K_b to Bob\n// and K_c to Carol. To go unnoticed they need Bob's digits and Carol's digits to\n// match, and both sets are under their control: they can generate candidate key\n// pairs until the two truncated hashes collide. That is a BIRTHDAY search, not a\n// preimage search \u2014 roughly 10^(d/2) work for d digits. A 7-digit code falls in\n// a few thousand tries. Signal answers this by making the safety number 60\n// digits; nobody reads 60 digits aloud to seven other people.\n//\n// Commit-then-reveal removes the search instead of outrunning it. Every member\n// commits to a secret nonce (publishing only its hash), and only once ALL\n// commitments are in does anyone reveal. The attacker must fix both of their\n// commitments before they can see a single honest nonce, so they cannot steer\n// either digit string \u2014 they are reduced to guessing, once, at 10^-d. Seven\n// digits is then genuinely safe, and it matches the pairwise SAS the users have\n// already been trained to compare.\n//\n// The ordering is the whole security property: revealing before every commitment\n// has arrived hands the attacker exactly the grinding freedom this construction\n// exists to deny. GroupSasCeremony below enforces that transition; nothing else\n// may.\n//\n// WHY GROUP MESSAGES ARE SIGNED\n// -----------------------------\n// Messages fan out over N-1 independent pairwise ratchets, so each recipient\n// authenticates only that the sender's SESSION sent it. A malicious member could\n// send different text to different people under one sequence number and no\n// recipient could tell. A signature over (group, epoch, seq, body hash) with the\n// sender's group identity key makes such a split provable: two valid signatures\n// from one member on one seq are non-repudiable evidence. It does not prevent\n// the split \u2014 nothing without a shared transcript can \u2014 it makes it detectable,\n// which is what a group without a server can honestly offer.\n//\n// This module is pure: SubtleCrypto is injected, no DOM, no network, no state\n// beyond the ceremony object. It parses attacker-controlled input, so every\n// length and range is checked before the value is used.\n\nexport const GROUP_LIMITS = Object.freeze({\n    // Eight is a mesh limit, not a crypto limit: it is where N(N-1)/2 pairwise\n    // connections and N-1 fan-out copies stop being comfortable in a browser.\n    MAX_MEMBERS: 8,\n    MIN_MEMBERS: 2,\n    GROUP_ID_BYTES: 16,\n    NONCE_BYTES: 32,\n    COMMIT_BYTES: 32,\n    FINGERPRINT_BYTES: 32,\n    // Matches the pairwise SAS. Safe at this length only because of the\n    // commit-reveal ordering above \u2014 see the header.\n    SAS_DIGITS: 7,\n    // Bytes, not characters \u2014 and the gap between the two is a real trap. The\n    // create dialog used to cap input at 64 CHARACTERS, so a 36-character\n    // Cyrillic name (\"\u041D\u0430\u0448\u0430 \u0441\u0435\u043A\u0440\u0435\u0442\u043D\u0430\u044F \u0433\u0440\u0443\u043F\u043F\u0430 \u0434\u043B\u044F \u043E\u0431\u0441\u0443\u0436\u0434\u0435\u043D\u0438\u0439\") is 68 bytes and was\n    // accepted by the UI and then rejected here, inside the admin's roster\n    // signing, killing group formation with no visible cause. The dialog now\n    // clamps by bytes, and the budget is generous enough that a normal name in\n    // any script fits.\n    MAX_NAME_BYTES: 128,\n    // Epoch is a uint32 on the wire; a group that changes membership four\n    // billion times has other problems.\n    MAX_EPOCH: 0xffffffff,\n    MAX_SPKI_BYTES: 256,\n    MIN_SPKI_BYTES: 40,\n    MAX_SIG_BYTES: 160,\n    MIN_SIG_BYTES: 48,\n\n    /**\n     * Group frames travel as chat content on a pairwise session, and that path\n     * ends in EnhancedSecureCryptoUtils.sanitizeMessage, which runs DOMPurify and\n     * then truncates to 2000 characters. Truncation would corrupt a frame\n     * silently, so every frame has to fit underneath it after base64 \u2014 see\n     * FRAME_BUDGET_CHARS and the envelope in GroupSession.\n     *\n     * A frame's fixed overhead (group id, epoch, sequence, sender fingerprint,\n     * timestamp, signature, envelope) is roughly 300 bytes, and base64 costs\n     * another third. 1024 bytes of body leaves comfortable headroom, and it is\n     * bytes rather than characters so a message in a non-Latin script is bounded\n     * by the same real budget.\n     */\n    MAX_BODY_BYTES: 1024,\n    FRAME_BUDGET_CHARS: 1800,\n\n    /**\n     * A mesh descriptor as it travels inside a group frame.\n     *\n     * SBQ2 caps a descriptor payload at 512 bytes (LIMITS.MAX_PAYLOAD_BYTES),\n     * which is \"SB2:\" plus 683 base64url characters at the absolute worst. 768\n     * bounds the allocation with room to spare and still leaves the whole frame\n     * \u2014 descriptor, two fingerprints, a nonce and a signature, wrapped in a\n     * relay envelope and base64'd \u2014 under FRAME_BUDGET_CHARS. A descriptor that\n     * somehow does not fit is refused rather than truncated; the pair simply\n     * stays on the relay path, which is the same thing that happens when the\n     * mesh dial fails for any other reason.\n     */\n    MAX_DESCRIPTOR_CHARS: 768,\n    /** Binds an answer to the one dial attempt that asked for it. */\n    MESH_NONCE_BYTES: 16,\n\n    /**\n     * A group call's identifier, in bytes.\n     *\n     * Random rather than derived, and long enough that two members who press\n     * \"call\" at the same instant cannot collide. Everything about a call is\n     * scoped to it: a `join` for one call says nothing about another, and a\n     * `leave` replayed from a finished call cannot end a later one.\n     */\n    CALL_ID_BYTES: 16,\n});\n\n/**\n * What one member is telling the group about a call.\n *\n * There is deliberately no \"end the call for everyone\": a call ends when the\n * last person in it leaves, which is a fact every member can observe from the\n * frames they already have. An explicit end would be a button one member could\n * press to hang up on the others, and nothing in a group without a server makes\n * that person more entitled to it than anybody else.\n */\nexport const CALL_ACTIONS = Object.freeze({\n    START: 'start',   // I have opened a call and I am in it\n    JOIN: 'join',     // I am joining the call already open\n    LEAVE: 'leave',   // I have left; the call ends when nobody is left\n});\n\n/** Which half of a mesh dial a signature covers. */\nexport const MESH_KINDS = Object.freeze({ OFFER: 'moffer', ANSWER: 'manswer' });\n\nexport const MEMBER_OPS = Object.freeze({\n    CREATE: 'create',\n    ADD: 'add',\n    REMOVE: 'remove',\n    RENAME: 'rename',\n});\n\nconst ENC = new TextEncoder();\n\nclass GroupCryptoError extends Error {\n    constructor(message, code = 'group_crypto') {\n        super(message);\n        this.name = 'GroupCryptoError';\n        this.code = code;\n    }\n}\nconst fail = (msg, code) => { throw new GroupCryptoError(msg, code); };\n\n// ---------------------------------------------------------------------------\n// codecs\n// ---------------------------------------------------------------------------\n\nexport function toHex(bytes) {\n    const view = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);\n    let out = '';\n    for (let i = 0; i < view.length; i++) out += view[i].toString(16).padStart(2, '0');\n    return out;\n}\n\nexport function fromHex(hex) {\n    if (typeof hex !== 'string' || hex.length % 2 !== 0 || !/^[0-9a-f]*$/i.test(hex)) {\n        fail('not a hex string', 'bad_hex');\n    }\n    const out = new Uint8Array(hex.length / 2);\n    for (let i = 0; i < out.length; i++) out[i] = parseInt(hex.substr(i * 2, 2), 16);\n    return out;\n}\n\nexport function toB64(bytes) {\n    const view = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);\n    let binary = '';\n    for (let i = 0; i < view.length; i++) binary += String.fromCharCode(view[i]);\n    return btoa(binary);\n}\n\nexport function fromB64(b64, { max = GROUP_LIMITS.MAX_SPKI_BYTES } = {}) {\n    if (typeof b64 !== 'string') fail('not a base64 string', 'bad_b64');\n    // Bound BEFORE decoding: base64 expands 3:4, so this caps the allocation.\n    if (b64.length > Math.ceil((max * 4) / 3) + 4) fail('base64 payload exceeds its limit', 'bad_b64');\n    let binary;\n    try {\n        binary = atob(b64);\n    } catch (_) {\n        fail('malformed base64', 'bad_b64');\n    }\n    const out = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n    return out;\n}\n\nexport function randomBytes(n) {\n    return crypto.getRandomValues(new Uint8Array(n));\n}\n\n/** A fresh group id. Shared between members, unlike the local-only sessionId. */\nexport function newGroupId() {\n    return toHex(randomBytes(GROUP_LIMITS.GROUP_ID_BYTES));\n}\n\n// ---------------------------------------------------------------------------\n// canonical encoding\n// ---------------------------------------------------------------------------\n\n/**\n * Length-prefixed concatenation.\n *\n * Everything signed or hashed in this module goes through here, so that no two\n * distinct field sets can ever produce the same bytes. Plain concatenation would\n * let (\"ab\",\"c\") and (\"a\",\"bc\") sign the same payload, which is precisely how a\n * membership operation gets reinterpreted as a different one.\n */\nfunction lp(label, ...parts) {\n    const chunks = [ENC.encode(label + '\\0')];\n    let total = chunks[0].length;\n    for (const part of parts) {\n        const bytes = part instanceof Uint8Array ? part\n            : typeof part === 'string' ? ENC.encode(part)\n            : fail('unsupported payload component', 'bad_payload');\n        const header = new Uint8Array(4);\n        new DataView(header.buffer).setUint32(0, bytes.length);\n        chunks.push(header, bytes);\n        total += 4 + bytes.length;\n    }\n    const out = new Uint8Array(total);\n    let o = 0;\n    for (const c of chunks) { out.set(c, o); o += c.length; }\n    return out;\n}\n\nfunction u32(n) {\n    if (!Number.isInteger(n) || n < 0 || n > GROUP_LIMITS.MAX_EPOCH) fail('value out of uint32 range', 'bad_u32');\n    const b = new Uint8Array(4);\n    new DataView(b.buffer).setUint32(0, n);\n    return b;\n}\n\n/** Constant-time byte comparison. Cheap, and keeps the habit uniform. */\nfunction equalBytes(a, b) {\n    if (!(a instanceof Uint8Array) || !(b instanceof Uint8Array) || a.length !== b.length) return false;\n    let diff = 0;\n    for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n    return diff === 0;\n}\n\n// ---------------------------------------------------------------------------\n// validation of attacker-supplied values\n// ---------------------------------------------------------------------------\n\nexport function assertGroupId(groupId) {\n    if (typeof groupId !== 'string' || groupId.length !== GROUP_LIMITS.GROUP_ID_BYTES * 2 || !/^[0-9a-f]+$/.test(groupId)) {\n        fail('malformed group id', 'bad_group_id');\n    }\n    return groupId;\n}\n\nexport function assertFingerprint(fp) {\n    if (typeof fp !== 'string' || fp.length !== GROUP_LIMITS.FINGERPRINT_BYTES * 2 || !/^[0-9a-f]+$/.test(fp)) {\n        fail('malformed member fingerprint', 'bad_fingerprint');\n    }\n    return fp;\n}\n\nexport function assertEpoch(epoch) {\n    if (!Number.isInteger(epoch) || epoch < 0 || epoch > GROUP_LIMITS.MAX_EPOCH) {\n        fail('epoch out of range', 'bad_epoch');\n    }\n    return epoch;\n}\n\nexport function assertName(name) {\n    const value = typeof name === 'string' ? name : '';\n    if (ENC.encode(value).length > GROUP_LIMITS.MAX_NAME_BYTES) fail('group name too long', 'bad_name');\n    return value;\n}\n\n/**\n * Canonical member ordering.\n *\n * Sorting by fingerprint \u2014 never by join order, never by however the array\n * arrived \u2014 is what makes every device hash identical bytes. A set that two\n * members order differently produces two different safety codes and the group\n * fails to form for no visible reason.\n */\nexport function canonicalFingerprints(fps) {\n    if (!Array.isArray(fps)) fail('member list is not an array', 'bad_members');\n    if (fps.length < GROUP_LIMITS.MIN_MEMBERS) fail('a group needs at least two members', 'bad_members');\n    if (fps.length > GROUP_LIMITS.MAX_MEMBERS) fail(`a group is limited to ${GROUP_LIMITS.MAX_MEMBERS} members`, 'too_many_members');\n    const seen = new Set();\n    for (const fp of fps) {\n        assertFingerprint(fp);\n        if (seen.has(fp)) fail('duplicate member fingerprint', 'duplicate_member');\n        seen.add(fp);\n    }\n    return [...fps].sort();\n}\n\n// ---------------------------------------------------------------------------\n// group identity key\n// ---------------------------------------------------------------------------\n\n/**\n * A group identity key pair for this device, in this group.\n *\n * Non-extractable private key: it signs and nothing else, and it must not be\n * reachable from a heap dump the way an exportable key is. The public half is\n * exported once, here, because it has to travel to the other members.\n */\nexport async function generateGroupIdentity(subtle) {\n    const keyPair = await subtle.generateKey(\n        { name: 'ECDSA', namedCurve: 'P-384' },\n        false,\n        ['sign', 'verify'],\n    );\n    const spki = new Uint8Array(await subtle.exportKey('spki', keyPair.publicKey));\n    const fingerprint = await fingerprintSpki(subtle, spki);\n    return { keyPair, spki, fingerprint };\n}\n\n/** SHA-256 over the SPKI, hex. The stable name of a member inside a group. */\nexport async function fingerprintSpki(subtle, spki) {\n    if (!(spki instanceof Uint8Array) || spki.length < GROUP_LIMITS.MIN_SPKI_BYTES || spki.length > GROUP_LIMITS.MAX_SPKI_BYTES) {\n        fail('SPKI length out of range', 'bad_spki');\n    }\n    return toHex(new Uint8Array(await subtle.digest('SHA-256', spki)));\n}\n\n/**\n * Import a member's published verifying key.\n *\n * Returns the key AND the fingerprint computed from the bytes we were actually\n * given, never one the sender asserted. A member is identified by what their key\n * hashes to; accepting a claimed fingerprint would let a member occupy someone\n * else's slot in the safety code.\n */\nexport async function importMemberIdentity(subtle, spki) {\n    const fingerprint = await fingerprintSpki(subtle, spki);\n    let publicKey;\n    try {\n        publicKey = await subtle.importKey('spki', spki, { name: 'ECDSA', namedCurve: 'P-384' }, false, ['verify']);\n    } catch (_) {\n        fail('member identity key is not a valid P-384 public key', 'bad_spki');\n    }\n    return { publicKey, fingerprint };\n}\n\n// ---------------------------------------------------------------------------\n// commit / reveal\n// ---------------------------------------------------------------------------\n\n/**\n * Commitment to a member's nonce for one epoch.\n *\n * The group id and epoch are inside the hash so a commitment cannot be replayed\n * into a different group or a later epoch, and the fingerprint is inside so one\n * member cannot claim another member's commitment as their own.\n */\nexport async function buildCommitment(subtle, { groupId, epoch, fingerprint, nonce }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    assertFingerprint(fingerprint);\n    if (!(nonce instanceof Uint8Array) || nonce.length !== GROUP_LIMITS.NONCE_BYTES) {\n        fail('nonce must be 32 bytes', 'bad_nonce');\n    }\n    const payload = lp('securebit/group/commit/v1', fromHex(groupId), u32(epoch), fromHex(fingerprint), nonce);\n    return new Uint8Array(await subtle.digest('SHA-256', payload));\n}\n\nexport async function verifyCommitment(subtle, commitment, fields) {\n    if (!(commitment instanceof Uint8Array) || commitment.length !== GROUP_LIMITS.COMMIT_BYTES) return false;\n    let expected;\n    try {\n        expected = await buildCommitment(subtle, fields);\n    } catch (_) {\n        return false;\n    }\n    return equalBytes(commitment, expected);\n}\n\n/**\n * The digits every member reads aloud.\n *\n * Inputs are the full member set with their revealed nonces, sorted by\n * fingerprint. Every member's key AND every member's nonce is covered, so a\n * substituted key or a substituted nonce anywhere in the group changes the code\n * for the members who received the substitution \u2014 and not for the others, which\n * is the mismatch the humans are there to notice.\n */\nexport async function computeGroupSas(subtle, { groupId, epoch, contributions, digits = GROUP_LIMITS.SAS_DIGITS }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    if (!Array.isArray(contributions)) fail('contributions must be an array', 'bad_contributions');\n    if (!Number.isInteger(digits) || digits < 4 || digits > 12) fail('digit count out of range', 'bad_digits');\n\n    canonicalFingerprints(contributions.map((c) => c && c.fingerprint));\n\n    const ordered = [...contributions].sort((a, b) => (a.fingerprint < b.fingerprint ? -1 : 1));\n    const parts = [];\n    for (const c of ordered) {\n        if (!(c.nonce instanceof Uint8Array) || c.nonce.length !== GROUP_LIMITS.NONCE_BYTES) {\n            fail('every member must contribute a 32-byte nonce', 'bad_nonce');\n        }\n        parts.push(fromHex(c.fingerprint), c.nonce);\n    }\n\n    const ikm = lp('securebit/group/sas/v1', fromHex(groupId), u32(epoch), ...parts);\n    const salt = new Uint8Array(await subtle.digest('SHA-256', lp('securebit/group/sas-salt/v1', fromHex(groupId), u32(epoch))));\n\n    let key = null;\n    try {\n        key = await subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);\n        const bits = await subtle.deriveBits(\n            { name: 'HKDF', hash: 'SHA-256', salt, info: ENC.encode('securebit-group-sas-v1') },\n            key, 64,\n        );\n        const dv = new DataView(bits);\n        // 52 bits of entropy folded into the digits. Staying under 2^53 keeps\n        // this exact in a JS Number; the modulo bias at 10^7 is ~1e-9.\n        const n = dv.getUint32(0) * 2 ** 20 + (dv.getUint32(4) >>> 12);\n        return String(n % 10 ** digits).padStart(digits, '0');\n    } finally {\n        try { ikm.fill(0); } catch (_) { /* not ours to wipe */ }\n    }\n}\n\n/**\n * The commit-reveal state machine.\n *\n * This object exists so that the ordering rule has exactly one implementation.\n * `reveal()` throws until every expected commitment has arrived, and that refusal\n * is the entire security argument for a 7-digit group code \u2014 see the header.\n */\nexport class GroupSasCeremony {\n    constructor({ groupId, epoch, selfFingerprint, memberFingerprints }) {\n        this.groupId = assertGroupId(groupId);\n        this.epoch = assertEpoch(epoch);\n        this.selfFingerprint = assertFingerprint(selfFingerprint);\n        this.members = canonicalFingerprints(memberFingerprints);\n        if (!this.members.includes(this.selfFingerprint)) {\n            fail('the local member is not in the member set', 'not_a_member');\n        }\n        this.nonce = randomBytes(GROUP_LIMITS.NONCE_BYTES);\n        this.commitments = new Map(); // fp -> Uint8Array(32)\n        this.nonces = new Map();      // fp -> Uint8Array(32)\n        this.revealed = false;\n        this.code = null;\n    }\n\n    /** Our own commitment, to be broadcast first. */\n    async ownCommitment(subtle) {\n        const commitment = await buildCommitment(subtle, {\n            groupId: this.groupId, epoch: this.epoch,\n            fingerprint: this.selfFingerprint, nonce: this.nonce,\n        });\n        this.commitments.set(this.selfFingerprint, commitment);\n        return commitment;\n    }\n\n    /**\n     * Record a peer commitment. Rejects anyone outside the member set, and\n     * refuses to overwrite one already recorded \u2014 a second, different commitment\n     * from the same member is an attempt to move after seeing more of the round.\n     */\n    acceptCommitment(fingerprint, commitment) {\n        assertFingerprint(fingerprint);\n        if (!this.members.includes(fingerprint)) fail('commitment from a non-member', 'not_a_member');\n        if (!(commitment instanceof Uint8Array) || commitment.length !== GROUP_LIMITS.COMMIT_BYTES) {\n            fail('malformed commitment', 'bad_commitment');\n        }\n        const existing = this.commitments.get(fingerprint);\n        if (existing) {\n            if (!equalBytes(existing, commitment)) fail('member changed their commitment', 'commitment_changed');\n            return false;\n        }\n        this.commitments.set(fingerprint, commitment);\n        return true;\n    }\n\n    get commitmentsComplete() {\n        return this.members.every((fp) => this.commitments.has(fp));\n    }\n\n    /**\n     * Our nonce \u2014 available ONLY once every commitment is in.\n     *\n     * This is the gate the whole construction rests on. Do not add a caller that\n     * bypasses it, and do not \"helpfully\" relax it when a member is slow: a\n     * timeout must fail the ceremony, never proceed without a commitment.\n     */\n    reveal() {\n        if (!this.commitmentsComplete) {\n            fail('cannot reveal before every member has committed', 'premature_reveal');\n        }\n        this.revealed = true;\n        this.nonces.set(this.selfFingerprint, this.nonce);\n        return this.nonce;\n    }\n\n    /** Record a peer nonce, checking it against the commitment they are bound to. */\n    async acceptReveal(subtle, fingerprint, nonce) {\n        assertFingerprint(fingerprint);\n        if (!this.members.includes(fingerprint)) fail('reveal from a non-member', 'not_a_member');\n        const commitment = this.commitments.get(fingerprint);\n        if (!commitment) fail('reveal arrived before the commitment', 'reveal_without_commitment');\n        const ok = await verifyCommitment(subtle, commitment, {\n            groupId: this.groupId, epoch: this.epoch, fingerprint, nonce,\n        });\n        if (!ok) fail('revealed nonce does not match the commitment', 'commitment_mismatch');\n        this.nonces.set(fingerprint, nonce);\n        return true;\n    }\n\n    get revealsComplete() {\n        return this.members.every((fp) => this.nonces.has(fp));\n    }\n\n    /** The digits, once every nonce is in and verified. */\n    async finish(subtle) {\n        if (!this.revealsComplete) fail('not every member has revealed', 'incomplete_reveal');\n        this.code = await computeGroupSas(subtle, {\n            groupId: this.groupId,\n            epoch: this.epoch,\n            contributions: this.members.map((fp) => ({ fingerprint: fp, nonce: this.nonces.get(fp) })),\n        });\n        return this.code;\n    }\n\n    /** Wipe the nonce material once the code exists or the ceremony is abandoned. */\n    destroy() {\n        try { this.nonce.fill(0); } catch (_) {}\n        for (const n of this.nonces.values()) { try { n.fill(0); } catch (_) {} }\n        this.nonces.clear();\n        this.commitments.clear();\n    }\n}\n\n// ---------------------------------------------------------------------------\n// membership operations\n// ---------------------------------------------------------------------------\n\n/**\n * The bytes a membership change is signed over.\n *\n * The resulting member set is signed in full rather than the delta, so a\n * recipient never has to reconstruct state from a sequence of operations it may\n * have received out of order or incompletely. The epoch is what orders them, and\n * accepting only a strictly greater epoch is what refuses both a replay and a\n * rollback to a set that used to be valid.\n */\nexport function memberOpPayload({ groupId, epoch, op, memberFps, name = '' }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    if (!Object.values(MEMBER_OPS).includes(op)) fail('unknown membership operation', 'bad_op');\n    const ordered = canonicalFingerprints(memberFps);\n    return lp(\n        'securebit/group/member-op/v1',\n        fromHex(groupId), u32(epoch), op, assertName(name),\n        ...ordered.map((fp) => fromHex(fp)),\n    );\n}\n\nexport async function signMemberOp(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, memberOpPayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyMemberOp(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = memberOpPayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// group messages\n// ---------------------------------------------------------------------------\n\nexport async function hashBody(subtle, body) {\n    const bytes = typeof body === 'string' ? ENC.encode(body) : body;\n    if (!(bytes instanceof Uint8Array)) fail('message body must be a string or bytes', 'bad_body');\n    if (bytes.length > GROUP_LIMITS.MAX_BODY_BYTES) fail('message body exceeds the group limit', 'body_too_large');\n    return new Uint8Array(await subtle.digest('SHA-256', bytes));\n}\n\n/**\n * The bytes a group message is signed over.\n *\n * Only the hash of the body is signed, not the body: it keeps the payload a\n * fixed size regardless of message length, and the hash is what a later\n * consistency comparison needs anyway.\n */\nexport function groupMessagePayload({ groupId, epoch, seq, senderFp, bodyHash }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    assertEpoch(seq); // same uint32 range; a per-sender counter\n    assertFingerprint(senderFp);\n    if (!(bodyHash instanceof Uint8Array) || bodyHash.length !== 32) fail('body hash must be 32 bytes', 'bad_body_hash');\n    return lp('securebit/group/message/v1', fromHex(groupId), u32(epoch), u32(seq), fromHex(senderFp), bodyHash);\n}\n\nexport async function signGroupMessage(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, groupMessagePayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyGroupMessage(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = groupMessagePayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// mesh links\n// ---------------------------------------------------------------------------\n//\n// WHY A MESH DESCRIPTOR IS SIGNED WITH THE GROUP IDENTITY KEY\n// -----------------------------------------------------------\n// Two members who have never met have no pairwise channel to introduce\n// themselves over, so their WebRTC descriptors have to travel through a member\n// who CAN reach both \u2014 in practice the admin. That relay is not trusted with\n// the content of the group, and it must not become trusted with the shape of\n// the group's transport either: a relay that could swap a descriptor for its\n// own would sit in the middle of the very link that was built to route around\n// it.\n//\n// The descriptor is therefore signed with the sender's group identity key \u2014\n// the same key whose fingerprint the signed roster names and whose presence the\n// humans confirmed when they compared the group code. A relay can drop a dial\n// or delay it, which costs availability and nothing else. It cannot substitute\n// one, because it cannot produce that signature.\n//\n// The signature covers the direction (offer or answer), BOTH fingerprints and a\n// per-attempt nonce as well as the descriptor bytes:\n//\n//   - the direction stops an offer being replayed back as an answer;\n//   - both fingerprints stop a descriptor addressed to one member being\n//     re-aimed at another;\n//   - the nonce binds an answer to the one dial that asked for it, so an answer\n//     captured from an earlier attempt cannot be replayed into a later one.\n//\n// SBQ2's own expiry check bounds how long a descriptor is usable at all, and\n// the epoch is inside the payload so nothing survives a membership change.\n\nexport function meshDescriptorPayload({ groupId, epoch, kind, fromFp, toFp, descriptor, nonce }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    if (kind !== MESH_KINDS.OFFER && kind !== MESH_KINDS.ANSWER) {\n        fail('unknown mesh descriptor kind', 'bad_mesh_kind');\n    }\n    assertFingerprint(fromFp);\n    assertFingerprint(toFp);\n    if (fromFp === toFp) fail('a member cannot dial itself', 'bad_mesh_peer');\n    if (typeof descriptor !== 'string' || descriptor.length === 0\n        || descriptor.length > GROUP_LIMITS.MAX_DESCRIPTOR_CHARS) {\n        fail('mesh descriptor is missing or oversized', 'bad_descriptor');\n    }\n    if (!(nonce instanceof Uint8Array) || nonce.length !== GROUP_LIMITS.MESH_NONCE_BYTES) {\n        fail('mesh nonce must be 16 bytes', 'bad_mesh_nonce');\n    }\n    return lp(\n        'securebit/group/mesh-descriptor/v1',\n        fromHex(groupId), u32(epoch), kind,\n        fromHex(fromFp), fromHex(toFp),\n        descriptor, nonce,\n    );\n}\n\nexport async function signMeshDescriptor(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, meshDescriptorPayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyMeshDescriptor(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = meshDescriptorPayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\n/**\n * The bytes a link probe is signed over.\n *\n * A probe is how a member says \"the pairwise chat you are reading this on is\n * me, member <fp>\". It exists because two members can perfectly well already\n * hold a verified 1:1 chat with each other before the group was formed, and\n * dialling a second connection between them would be pure waste.\n *\n * The claim has to be authenticated, and it has to be authenticated TO THIS\n * SESSION. A bare signed claim would be replayable: any member could capture\n * one and present it on their own link to impersonate its author, and group\n * traffic meant for that member would then be encrypted to the impersonator's\n * pairwise session, which is a plaintext disclosure and not merely a routing\n * mistake.\n *\n * `linkFp` is what closes that. It is the pairwise session's own key\n * fingerprint \u2014 derived from the ECDH shared secret, so it is known to exactly\n * the two endpoints of that session and to nobody else. A probe replayed onto\n * any other session carries the wrong one and fails to verify. The receiver\n * checks it against the fingerprint IT holds for the session the probe arrived\n * on, never against a value inside the frame.\n */\nexport function linkProbePayload({ groupId, epoch, fp, linkFp }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    assertFingerprint(fp);\n    if (typeof linkFp !== 'string' || linkFp.length === 0 || linkFp.length > 256) {\n        fail('link fingerprint is missing or oversized', 'bad_link_fp');\n    }\n    return lp('securebit/group/link-probe/v1', fromHex(groupId), u32(epoch), fromHex(fp), linkFp);\n}\n\nexport async function signLinkProbe(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, linkProbePayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyLinkProbe(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = linkProbePayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\n/**\n * The bytes a call-control frame is signed over.\n *\n * Call control is membership-visible metadata, not content, but it is signed\n * with the same group identity key for the same reason a message is: a relaying\n * member carries these frames, and a relay that could forge one could put a\n * member into a call they never joined, or take one out of a call they are in,\n * with no way for anyone to tell who did it.\n *\n * `seq` is a per-sender counter over call frames only. It is what makes a\n * captured frame unusable later: a `leave` from a finished call replays with a\n * sequence number the receiver has already passed, and is dropped before its\n * action is ever considered.\n */\nexport function groupCallPayload({ groupId, epoch, callId, action, fp, seq, withVideo }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    assertCallId(callId);\n    assertEpoch(seq);\n    assertFingerprint(fp);\n    if (action !== CALL_ACTIONS.START && action !== CALL_ACTIONS.JOIN && action !== CALL_ACTIONS.LEAVE) {\n        fail('unknown call action', 'bad_call_action');\n    }\n    return lp(\n        'securebit/group/call/v1',\n        fromHex(groupId), u32(epoch), fromHex(callId), action,\n        fromHex(fp), u32(seq), withVideo === true ? 'v' : 'a',\n    );\n}\n\nexport function assertCallId(callId) {\n    if (typeof callId !== 'string' || callId.length !== GROUP_LIMITS.CALL_ID_BYTES * 2 || !/^[0-9a-f]+$/.test(callId)) {\n        fail('malformed call id', 'bad_call_id');\n    }\n    return callId;\n}\n\nexport function newCallId() {\n    return toHex(randomBytes(GROUP_LIMITS.CALL_ID_BYTES));\n}\n\nexport async function signGroupCall(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, groupCallPayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyGroupCall(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = groupCallPayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\nexport { GroupCryptoError };\n", "import { t } from '../i18n/index.js';\n// Groups registry for SecureBit.chat.\n//\n// Same contract as sessionsStore.js, and deliberately a SEPARATE reducer rather\n// than a slice bolted onto that one: a group is built out of pairwise sessions\n// but owns none of them, and keeping the two stores apart means adding groups\n// cannot disturb the 1:1 state that every existing test covers.\n//\n// What lives here is only what React renders. The non-serializable half of a\n// group \u2014 its ECDSA identity key pair, the running commit/reveal ceremony, the\n// per-member imported verifying keys, the outbound sequence counter \u2014 lives\n// OUTSIDE this state in a ref-held Map keyed by groupId, exactly the way\n// managersRef holds the WebRTC managers. Key material must never reach a\n// reducer: it would be cloned on every dispatch and retained by React's state\n// history, which is the opposite of what a non-extractable key is for.\n//\n// groupId is SHARED with the other members (it identifies the group on the\n// wire), unlike sessionId, which is local-only. Member identity is the\n// fingerprint of a member's group identity key \u2014 never a session id, and never\n// a name the peer supplied.\n\nimport { GROUP_LIMITS } from '../group/groupCrypto.js';\n\nexport const GROUP_ACTIONS = Object.freeze({\n    CREATE_GROUP: 'CREATE_GROUP',\n    REMOVE_GROUP: 'REMOVE_GROUP',\n    SET_ACTIVE_GROUP: 'SET_ACTIVE_GROUP',\n    SET_PHASE: 'SET_PHASE',\n    SET_MEMBERS: 'SET_MEMBERS',\n    PATCH_MEMBER: 'PATCH_MEMBER',\n    SET_SAS: 'SET_SAS',\n    CONFIRM_SAS: 'CONFIRM_SAS',\n    ADD_MESSAGE: 'ADD_MESSAGE',\n    SET_MESSAGES: 'SET_MESSAGES',\n    UPDATE_MESSAGE_STATUS: 'UPDATE_MESSAGE_STATUS',\n    INCREMENT_UNREAD: 'INCREMENT_UNREAD',\n    CLEAR_UNREAD: 'CLEAR_UNREAD',\n    RENAME: 'RENAME',\n    SET_ERROR: 'SET_ERROR',\n});\n\n/**\n * A group's lifecycle.\n *\n * The order matters and the UI depends on it: nothing may be sent or displayed\n * as group traffic until `ready`, and `ready` is reachable only through\n * `awaiting_sas`, where a human confirmed the code. A group that skips that step\n * is a group whose introduced members were never authenticated by anyone.\n */\nexport const GROUP_PHASE = Object.freeze({\n    FORMING: 'forming',       // members chosen, identity keys being exchanged\n    COMMITTING: 'committing', // commitments in flight\n    REVEALING: 'revealing',   // every commitment in, nonces in flight\n    AWAITING_SAS: 'awaiting_sas', // code computed, waiting for the humans\n    READY: 'ready',           // confirmed; group traffic flows\n    FAILED: 'failed',         // ceremony aborted; nothing flows\n});\n\n/** Per-member link state. 'self' is us; the rest describe the pairwise session. */\nexport const MEMBER_STATE = Object.freeze({\n    SELF: 'self',\n    LINKED: 'linked',   // pairwise session up and SAS-verified\n    PENDING: 'pending', // session exists but is not verified/connected yet\n    LOST: 'lost',       // was linked, connection dropped\n});\n\nexport const GROUP_PHASE_WORD = {\n    [GROUP_PHASE.FORMING]: t('groupPhase.forming'),\n    [GROUP_PHASE.COMMITTING]: t('groupPhase.commitments'),\n    [GROUP_PHASE.REVEALING]: t('groupPhase.revealing'),\n    [GROUP_PHASE.AWAITING_SAS]: t('groupPhase.compare'),\n    [GROUP_PHASE.READY]: t('groupPhase.ready'),\n    [GROUP_PHASE.FAILED]: t('groupPhase.failed'),\n};\n\n/** Two-letter monogram for the group tile. Mirrors monoInitials in sessionsStore. */\nexport function groupInitials(name) {\n    const words = String(name || '').trim().split(/\\s+/).filter(Boolean);\n    const a = words[0]?.[0] || '';\n    const b = words[1]?.[0] || words[0]?.[1] || '';\n    return (a + b).toUpperCase() || '##';\n}\n\nexport function createGroupEntry(opts = {}) {\n    return {\n        id: opts.id,\n        name: opts.name || 'Group',\n        createdAt: opts.createdAt || Date.now(),\n        adminFp: opts.adminFp || '',\n        selfFp: opts.selfFp || '',\n        isAdmin: !!opts.isAdmin,\n        epoch: Number.isInteger(opts.epoch) ? opts.epoch : 1,\n        phase: opts.phase || GROUP_PHASE.FORMING,\n        // members: [{ fp, name, sessionId, state }]. Always stored in canonical\n        // fingerprint order so every device renders the same list.\n        members: Array.isArray(opts.members) ? [...opts.members].sort(byFingerprint) : [],\n        sasCode: '',\n        sasConfirmed: false,\n        messages: [],\n        unreadCount: 0,\n        error: null,\n    };\n}\n\nconst NAME_ENCODER = new TextEncoder();\n\n/** Trim a group name so its UTF-8 encoding fits the protocol's byte budget. */\nfunction clampNameBytes(value) {\n    let out = String(value);\n    while (NAME_ENCODER.encode(out).length > GROUP_LIMITS.MAX_NAME_BYTES) out = out.slice(0, -1);\n    return out;\n}\n\nfunction byFingerprint(a, b) {\n    return a.fp < b.fp ? -1 : a.fp > b.fp ? 1 : 0;\n}\n\nexport function createInitialGroupState() {\n    return { groups: {}, order: [], activeGroupId: null };\n}\n\n/** Patch one group, leaving every sibling referentially untouched. */\nfunction patchGroup(state, id, patch) {\n    const group = state.groups[id];\n    if (!group) return state;\n    return { ...state, groups: { ...state.groups, [id]: { ...group, ...patch } } };\n}\n\nexport function groupsReducer(state, action) {\n    const A = GROUP_ACTIONS;\n    switch (action.type) {\n        case A.CREATE_GROUP: {\n            const entry = action.entry || createGroupEntry(action);\n            if (!entry.id || state.groups[entry.id]) return state;\n            return {\n                groups: { ...state.groups, [entry.id]: entry },\n                order: [...state.order, entry.id],\n                activeGroupId: action.activate === false ? state.activeGroupId : entry.id,\n            };\n        }\n\n        case A.REMOVE_GROUP: {\n            const { id } = action;\n            if (!state.groups[id]) return state;\n            const groups = { ...state.groups };\n            delete groups[id];\n            const order = state.order.filter((x) => x !== id);\n            let activeGroupId = state.activeGroupId;\n            if (activeGroupId === id) {\n                const removedIdx = state.order.indexOf(id);\n                activeGroupId = order[Math.max(0, removedIdx - 1)] || order[0] || null;\n            }\n            return { groups, order, activeGroupId };\n        }\n\n        case A.SET_ACTIVE_GROUP: {\n            // null is legitimate: it means a 1:1 session took the foreground.\n            if (action.id === null) {\n                return state.activeGroupId === null ? state : { ...state, activeGroupId: null };\n            }\n            if (!state.groups[action.id] || state.activeGroupId === action.id) return state;\n            return { ...state, activeGroupId: action.id };\n        }\n\n        case A.SET_PHASE: {\n            const group = state.groups[action.id];\n            if (!group || group.phase === action.phase) return state;\n            // Leaving READY clears the confirmation: a membership change starts a\n            // new epoch with a new code, and a stale \"confirmed\" tick would tell\n            // the user they had checked something they had not.\n            const patch = { phase: action.phase };\n            if (action.phase !== GROUP_PHASE.READY && group.sasConfirmed) {\n                patch.sasConfirmed = false;\n            }\n            // The code is cleared only on the way BACK to a pre-code phase.\n            // AWAITING_SAS is where a code is born, so clearing it there would\n            // erase the digits the user is about to be shown.\n            if (action.phase !== GROUP_PHASE.READY && action.phase !== GROUP_PHASE.AWAITING_SAS) {\n                patch.sasCode = '';\n            }\n            if (action.phase !== GROUP_PHASE.FAILED) patch.error = null;\n            return patchGroup(state, action.id, patch);\n        }\n\n        case A.SET_MEMBERS: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            const members = Array.isArray(action.members) ? [...action.members].sort(byFingerprint) : group.members;\n            const patch = { members };\n            if (Number.isInteger(action.epoch)) patch.epoch = action.epoch;\n            return patchGroup(state, action.id, patch);\n        }\n\n        case A.PATCH_MEMBER: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            let changed = false;\n            const members = group.members.map((m) => {\n                if (m.fp !== action.fp) return m;\n                const next = { ...m, ...action.patch };\n                // Skip the dispatch entirely when nothing actually moved \u2014 link\n                // state churns on every ICE event and would otherwise re-render\n                // the whole group list continuously.\n                if (Object.keys(action.patch).every((k) => m[k] === next[k])) return m;\n                changed = true;\n                return next;\n            });\n            return changed ? patchGroup(state, action.id, { members }) : state;\n        }\n\n        case A.SET_SAS: {\n            const group = state.groups[action.id];\n            if (!group || group.sasCode === action.code) return state;\n            return patchGroup(state, action.id, { sasCode: action.code || '', sasConfirmed: false });\n        }\n\n        case A.CONFIRM_SAS: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            // Refuse the transition unless there is a code to have confirmed AND\n            // the group is actually waiting on that confirmation.\n            //\n            // Checking only for a code was not enough: a ceremony that reached\n            // AWAITING_SAS and then FAILED \u2014 a mismatched commitment, a member\n            // that vanished \u2014 kept its code, so confirming promoted a group whose\n            // verification had demonstrably gone wrong straight to READY. The\n            // phase is what says the code in hand is still the one being asked\n            // about, which mirrors the 1:1 rule that verified state comes only\n            // from the local user acting on something currently true.\n            if (!group.sasCode) return state;\n            if (group.phase !== GROUP_PHASE.AWAITING_SAS) return state;\n            if (group.sasConfirmed && group.phase === GROUP_PHASE.READY) return state;\n            return patchGroup(state, action.id, { sasConfirmed: true, phase: GROUP_PHASE.READY, error: null });\n        }\n\n        case A.ADD_MESSAGE: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            return patchGroup(state, action.id, { messages: [...group.messages, action.message] });\n        }\n\n        case A.SET_MESSAGES: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            const next = typeof action.updater === 'function' ? action.updater(group.messages) : action.messages;\n            return patchGroup(state, action.id, { messages: Array.isArray(next) ? next : [] });\n        }\n\n        case A.UPDATE_MESSAGE_STATUS: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            let changed = false;\n            const messages = group.messages.map((m) => {\n                if (String(m.mid) === String(action.mid) && m.status !== action.status) {\n                    changed = true;\n                    return { ...m, status: action.status };\n                }\n                return m;\n            });\n            return changed ? patchGroup(state, action.id, { messages }) : state;\n        }\n\n        case A.INCREMENT_UNREAD: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            return patchGroup(state, action.id, { unreadCount: group.unreadCount + 1 });\n        }\n\n        case A.CLEAR_UNREAD: {\n            const group = state.groups[action.id];\n            if (!group || group.unreadCount === 0) return state;\n            return patchGroup(state, action.id, { unreadCount: 0 });\n        }\n\n        case A.RENAME: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            // Clamped by BYTES, the unit the protocol enforces. A character slice\n            // against a byte budget lets a name in a multi-byte script through\n            // here and then fails when the roster carrying it is signed.\n            const name = clampNameBytes(String(action.name || '').trim()) || group.name;\n            return patchGroup(state, action.id, { name });\n        }\n\n        case A.SET_ERROR: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            const patch = { error: action.error || null };\n            if (action.error) patch.phase = GROUP_PHASE.FAILED;\n            return patchGroup(state, action.id, patch);\n        }\n\n        default:\n            return state;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// derivation for rendering\n// ---------------------------------------------------------------------------\n\n/** How many members currently have a usable pairwise link (including us). */\nexport function linkedCount(group) {\n    return group.members.filter((m) => m.state === MEMBER_STATE.SELF || m.state === MEMBER_STATE.LINKED).length;\n}\n\n/**\n * A group is only fully up when every member is reachable. Partial connectivity\n * is shown rather than hidden: in a mesh with no server, a member you cannot\n * reach is a member who is not receiving your messages, and the sender is the\n * only one who can know that.\n */\nexport function groupSub(group) {\n    if (group.phase !== GROUP_PHASE.READY) return GROUP_PHASE_WORD[group.phase] || 'Group';\n    const total = group.members.length;\n    const linked = linkedCount(group);\n    if (linked < total) return `${linked} of ${total} connected`;\n    return `${total} members \u00B7 P2P mesh`;\n}\n\nexport function groupDot(group) {\n    switch (group.phase) {\n        case GROUP_PHASE.READY:\n            return linkedCount(group) < group.members.length ? 'var(--sb-yellow-2-solid)' : 'var(--sb-green-solid)';\n        case GROUP_PHASE.FAILED:\n            return 'var(--sb-red-solid)';\n        default:\n            return 'var(--sb-yellow-2-solid)';\n    }\n}\n\nexport function decorateGroup(group, activeGroupId) {\n    const lastMessage = [...group.messages].reverse().find(\n        (m) => !m.expired && typeof m.message === 'string' && m.message.trim(),\n    );\n    const sub = groupSub(group);\n    return {\n        id: group.id,\n        kind: 'group',\n        name: group.name,\n        mono: groupInitials(group.name),\n        dot: groupDot(group),\n        headerSub: sub,\n        phase: group.phase,\n        memberCount: group.members.length,\n        linkedCount: linkedCount(group),\n        preview: lastMessage ? lastMessage.message : sub,\n        unread: group.unreadCount > 0 ? (group.unreadCount > 99 ? '99+' : String(group.unreadCount)) : null,\n        verified: group.phase === GROUP_PHASE.READY && group.sasConfirmed,\n        active: group.id === activeGroupId,\n        inactive: group.id !== activeGroupId,\n    };\n}\n\nexport function decorateGroups(state) {\n    return state.order\n        .map((id) => state.groups[id])\n        .filter(Boolean)\n        .map((g) => decorateGroup(g, state.activeGroupId));\n}\n", "// GroupSession \u2014 the orchestrator that turns N pairwise sessions into a group.\n//\n// WHAT THIS IS AND IS NOT\n// -----------------------\n// It owns no transport. Every byte it sends leaves through an existing\n// EnhancedSecureWebRTCManager, over a channel that is already SAS-verified and\n// already ratcheted, and arrives having been authenticated by that session. This\n// class adds the group layer on top: who is a member, what epoch it is, what\n// code the humans compare, and which of the N-1 links a given frame should take.\n//\n// It holds the non-serializable half of a group \u2014 the ECDSA identity key pair,\n// the running commit/reveal ceremony, the imported verifying keys \u2014 which is\n// exactly why it lives in a ref-held Map in the app and never inside the\n// reducer. See src/state/groupsStore.js.\n//\n// DELIVERY: DIRECT WHERE POSSIBLE, RELAYED WHERE NOT\n// --------------------------------------------------\n// A full mesh needs N(N-1)/2 pairwise links, and at the moment a group is\n// created only the admin holds a link to everyone. Rather than block the group\n// until every pair is introduced, a frame for a member we cannot reach directly\n// is handed to a member who can reach both of us.\n//\n// That is the STARTING state, not the resting one. Once the group is ready and\n// the safety code has been confirmed, every pair that has no link between it\n// builds one \u2014 see \"the mesh\" below \u2014 and the relay becomes the exception this\n// paragraph always described rather than the way the whole group runs. Until\n// then, and for any pair that cannot connect directly, the relay carries it.\n//\n// This is safe because it is not a trust decision. Group messages and membership\n// operations are signed with the sender's group identity key, and every member\n// holds every other member's verifying key from the signed roster. A relaying\n// member can therefore drop a frame or read a frame \u2014 they are a member of the\n// group, so reading it is what membership already entitles them to \u2014 but they\n// cannot forge one, alter one, or attribute one to somebody else. What relaying\n// costs is metadata (the relay learns who is talking to the group and when) and\n// availability (a relay that goes away takes the indirect paths with it), which\n// is why a direct link is always preferred and the UI shows how many exist.\n//\n// Relaying is single-hop by construction. A frame carries `to`; a member that is\n// not the addressee forwards it once, marked, and a marked frame is never\n// forwarded again. There is no routing table to poison and no loop to form.\n//\n// ORDER OF OPERATIONS\n// -------------------\n//   1. invite    admin sends the group's name and its own identity key\n//   2. hello     each invitee replies with its identity key\n//   3. roster    admin signs the full member set for this epoch and broadcasts it\n//   4. commit    every member commits to a secret nonce\n//   5. reveal    ONLY once every commitment has arrived, nonces are published\n//   6. code      every member computes the same digits and the humans compare\n//   7. ready     group traffic flows\n//   8. mesh      every pair without a link dials one, over the relay path\n//\n// Step 8 is the only one that can fail without the group noticing, and that is\n// deliberate: a pair that cannot connect directly keeps working exactly as it\n// did in step 7.\n//\n// Steps 4 and 5 are what make a seven-digit code safe; the reasoning is in\n// groupCrypto.js and the ordering is enforced by GroupSasCeremony, not here.\n\nimport {\n    GROUP_LIMITS,\n    MEMBER_OPS,\n    MESH_KINDS,\n    GroupSasCeremony,\n    generateGroupIdentity,\n    importMemberIdentity,\n    signMemberOp,\n    verifyMemberOp,\n    hashBody,\n    signGroupMessage,\n    verifyGroupMessage,\n    computeGroupSas,\n    signMeshDescriptor,\n    verifyMeshDescriptor,\n    signLinkProbe,\n    verifyLinkProbe,\n    CALL_ACTIONS,\n    newCallId,\n    assertCallId,\n    signGroupCall,\n    verifyGroupCall,\n    randomBytes,\n    canonicalFingerprints,\n    assertGroupId,\n    assertFingerprint,\n    assertEpoch,\n    assertName,\n    newGroupId,\n    toB64,\n    fromB64,\n} from './groupCrypto.js';\n\nimport { GROUP_PHASE, MEMBER_STATE } from '../state/groupsStore.js';\n\n/** Wire frame types. All group traffic rides the ordinary chat message path. */\nexport const GROUP_FRAMES = Object.freeze({\n    INVITE: 'g_invite',\n    HELLO: 'g_hello',\n    MEMBER: 'g_member',\n    ROSTER: 'g_roster',\n    COMMIT: 'g_commit',\n    REVEAL: 'g_reveal',\n    MESSAGE: 'g_msg',\n    RELAY: 'g_relay',\n    LEAVE: 'g_leave',\n    // Mesh link establishment. These carry SBQ2 descriptors between two members\n    // who have no link yet, over the relay path of a member who can reach both.\n    MESH_OFFER: 'g_moffer',\n    MESH_ANSWER: 'g_manswer',\n    MESH_ABORT: 'g_mabort',\n    // \"The pairwise chat this arrived on is me, member <fp>.\"\n    PROBE: 'g_probe',\n    // Call control: who opened a call, who is in it, who has left. Media never\n    // travels here \u2014 see the call section below.\n    CALL: 'g_call',\n});\n\n/** The outer wrapper every group frame travels inside. See encodeEnvelope. */\nexport const GROUP_ENVELOPE = 'g_env';\n\n/** Every type this module will act on. Anything else is dropped by default. */\nexport const GROUP_FRAME_TYPES = Object.freeze(new Set(Object.values(GROUP_FRAMES)));\n\nexport function isGroupFrame(parsed) {\n    if (!parsed || typeof parsed !== 'object') return false;\n    return parsed.type === GROUP_ENVELOPE || GROUP_FRAME_TYPES.has(parsed.type);\n}\n\n/**\n * The inner type of a frame, without decoding it.\n *\n * Callers outside this module need it for exactly one decision \u2014 whether an\n * arriving frame is an invitation to a group they do not have yet \u2014 and that\n * decision has to be made before any group state exists to decode with. It is a\n * routing hint only; decodeEnvelope re-checks it against the frame it wraps.\n */\nexport function groupFrameType(parsed) {\n    if (!parsed || typeof parsed !== 'object') return null;\n    if (parsed.type === GROUP_ENVELOPE) return typeof parsed.t === 'string' ? parsed.t : null;\n    return GROUP_FRAME_TYPES.has(parsed.type) ? parsed.type : null;\n}\n\n/**\n * Wrap a frame so the pairwise chat path cannot alter it.\n *\n * Group frames ride sendMessage, which sanitises its payload before encrypting:\n * DOMPurify escapes `<`, `>` and `&`, control characters are stripped, runs of\n * blank lines are collapsed, the string is trimmed, and the result is cut to\n * 2000 characters. Every one of those is correct for chat text and fatal for a\n * signed frame \u2014 a body that came back HTML-escaped no longer matches the hash\n * its signature covers, and the message would be rejected as forged.\n *\n * Base64 sidesteps all of it: its alphabet contains nothing DOMPurify rewrites\n * and nothing the sanitiser strips, and it has no whitespace to trim. The group\n * id and the inner type stay outside the encoding so a frame can be routed \u2014\n * and an invitation recognised \u2014 without decoding anything first. Neither\n * reveals more than the peer on that link already knows.\n */\nexport function encodeEnvelope(frame) {\n    const json = JSON.stringify(frame);\n    const encoded = toB64(new TextEncoder().encode(json));\n    if (encoded.length > GROUP_LIMITS.FRAME_BUDGET_CHARS) {\n        throw new GroupSessionError('group frame exceeds the transport budget', 'frame_too_large');\n    }\n    return { type: GROUP_ENVELOPE, gid: frame.gid, t: frame.type, d: encoded };\n}\n\nexport function decodeEnvelope(envelope) {\n    if (!envelope || envelope.type !== GROUP_ENVELOPE) return envelope;\n    const raw = String(envelope.d || '');\n    if (raw.length > GROUP_LIMITS.FRAME_BUDGET_CHARS) {\n        throw new GroupSessionError('group frame exceeds the transport budget', 'frame_too_large');\n    }\n    const bytes = fromB64(raw, { max: GROUP_LIMITS.FRAME_BUDGET_CHARS });\n    const frame = JSON.parse(new TextDecoder().decode(bytes));\n    if (!frame || typeof frame !== 'object' || !GROUP_FRAME_TYPES.has(frame.type)) {\n        throw new GroupSessionError('envelope carried no recognisable frame', 'bad_envelope');\n    }\n    // The routing hints outside the encoding are conveniences, not authority:\n    // if they disagree with the frame they wrap, the frame was tampered with.\n    if (envelope.gid && frame.gid !== envelope.gid) {\n        throw new GroupSessionError('envelope group id does not match its frame', 'bad_envelope');\n    }\n    if (envelope.t && frame.type !== envelope.t) {\n        throw new GroupSessionError('envelope type does not match its frame', 'bad_envelope');\n    }\n    return frame;\n}\n\nconst TIMEOUTS = Object.freeze({\n    // A member that has not committed by now is treated as absent and the\n    // ceremony fails. It must FAIL rather than proceed: proceeding without a\n    // commitment is exactly the grinding freedom the commit round removes.\n    CEREMONY_MS: 60_000,\n    // How long the admin waits for invitees to publish their identity keys.\n    HELLO_MS: 45_000,\n    // How long one mesh dial may stay in flight. It covers a descriptor going\n    // out over a relay hop, an answer coming back, and the whole SBQ2 in-band\n    // exchange completing on the new channel. Generous, because failing early\n    // costs a direct link and gains nothing: the pair keeps working over the\n    // relay the entire time the dial is running.\n    MESH_DIAL_MS: 45_000,\n    // Gap before a failed pair is dialled again, doubling per failure. A pair\n    // that cannot connect is usually a network that will not allow it, and\n    // retrying hard turns one unreachable member into a permanent load.\n    MESH_RETRY_MS: 20_000,\n});\n\n/** How many mesh dials one member will have in flight at once. */\nconst MESH_MAX_CONCURRENT_DIALS = 2;\n/** After this many consecutive failures a pair is left on the relay for good. */\nconst MESH_MAX_ATTEMPTS = 3;\n\nexport class GroupSessionError extends Error {\n    constructor(message, code = 'group_session') {\n        super(message);\n        this.name = 'GroupSessionError';\n        this.code = code;\n    }\n}\n\nexport class GroupSession {\n    /**\n     * @param {object} opts\n     * @param {string} opts.groupId\n     * @param {string} opts.name\n     * @param {boolean} opts.isAdmin\n     * @param {SubtleCrypto} opts.subtle\n     * @param {(sessionId: string, frame: object) => Promise<void>} opts.send\n     * @param {(event: string, payload: object) => void} opts.emit\n     */\n    constructor({ groupId, name, isAdmin, subtle, send, emit, mesh = null, log = () => {} }) {\n        this.groupId = assertGroupId(groupId);\n        this.name = assertName(name);\n        this.isAdmin = !!isAdmin;\n        this.subtle = subtle;\n        this._send = send;\n        this._emit = emit;\n        this._log = log;\n\n        /**\n         * How this group builds a transport it does not have.\n         *\n         * Injected rather than imported, for the same reason SubtleCrypto is:\n         * this class stays free of WebRTC, of the app's manager registry, and of\n         * anything that needs a browser to exist. A group constructed without it\n         * runs exactly as it did before \u2014 every indirect pair simply stays on\n         * the relay path.\n         *\n         *   createOffer(fp)                 -> { sessionId, descriptor }\n         *   createAnswer(fp, descriptor)    -> { sessionId, descriptor }\n         *   acceptAnswer(sessionId, descriptor) -> void\n         *   close(sessionId)                -> void\n         *   linkFingerprint(sessionId)      -> string  (pairwise session's key fp)\n         */\n        this._mesh = mesh;\n\n        this.identity = null;      // { keyPair, spki, fingerprint }\n        this.epoch = 1;\n        this.adminFp = '';\n        this.phase = GROUP_PHASE.FORMING;\n\n        /** fp -> { fp, name, spki, publicKey, sessionId, state } */\n        this.members = new Map();\n        /** sessionId -> fp, so an inbound frame can be attributed to a member. */\n        this.sessionToFp = new Map();\n\n        this.ceremony = null;\n        this.sasCode = '';\n        this.sasConfirmed = false;\n\n        this.seq = 0;\n        /**\n         * Sender fingerprint -> Map(seq -> body hash). Does double duty: it\n         * absorbs the duplicates that fan-out and relay inevitably produce, and\n         * it is what catches a member sending two different bodies under one\n         * sequence number. See _onMessage for why one structure has to do both.\n         */\n        this.transcript = new Map();\n\n        this._timers = new Set();\n        this._destroyed = false;\n        /** Invitees the admin is still waiting on, by sessionId. */\n        this._awaitingHello = new Map();\n\n        /**\n         * Commit and reveal frames that arrived before our own ceremony existed.\n         *\n         * Members start their ceremony when the roster reaches them, and the\n         * roster does not reach everyone at the same instant \u2014 a member on a fast\n         * link routinely broadcasts its commitment before a member on a slow one\n         * has even adopted the roster. Dropping those frames deadlocks the round\n         * for everyone, because the commit set never completes and the reveal\n         * gate never opens. They are held here and drained when the ceremony\n         * starts. Bounded, because the sender of these frames chooses how many to\n         * send.\n         */\n        this._pendingCeremony = [];\n        this._draining = false;\n\n        /**\n         * Member identity keys that arrived ahead of the roster that names them.\n         *\n         * A key frame on its own is an unverified claim, so nothing is applied\n         * from here until the admin's signed roster says which fingerprints are\n         * actually members. Bounded for the same reason as _pendingCeremony.\n         */\n        this._pendingKeys = new Map();\n\n        /**\n         * An in-flight \"add members\" round: which operation it is, the epoch it\n         * will open, and who was already in the group when it started. Held so a\n         * round that nobody answers can be abandoned without having touched the\n         * epoch or the member set \u2014 the group carries on exactly as it was.\n         */\n        this._pendingAdd = null;\n\n        /**\n         * Mesh dials in flight, by peer fingerprint.\n         *\n         * fp -> { role, sessionId, nonce, epoch, timer }. One entry per PAIR,\n         * never per direction: the dialling rule below means only one side of a\n         * pair ever opens a dial, so a second entry for the same peer is a\n         * duplicate to be refused rather than a second attempt to run.\n         */\n        this._meshDials = new Map();\n        /** fp -> { attempts, nextAt }. Backoff for pairs that will not connect. */\n        this._meshFailures = new Map();\n        /** Sessions this group built itself, so destroy() can close them. */\n        this._meshSessions = new Set();\n        /** Sessions a probe has already been sent on, so it is sent once. */\n        this._probed = new Set();\n        /** The coalescing timer for _meshMaintain, or null when none is armed. */\n        this._meshPass = null;\n\n        /**\n         * The call this group is currently holding, or null.\n         *\n         * { callId, startedBy, withVideo, startedAt, participants: Set<fp>, joined }\n         *\n         * `joined` is about US specifically: a call can be running with three\n         * people in it while we have not picked up, and the difference decides\n         * whether this device is capturing a microphone. It is never inferred\n         * from the participant set, because a member could otherwise put us in a\n         * call by naming us in one.\n         */\n        this.call = null;\n        /** Our own counter over call frames. Monotonic; never reset within an epoch. */\n        this.callSeq = 0;\n        /** fp -> highest call sequence seen, so a captured frame cannot be replayed. */\n        this._callSeen = new Map();\n    }\n\n    // -----------------------------------------------------------------------\n    // lifecycle\n    // -----------------------------------------------------------------------\n\n    static newId() {\n        return newGroupId();\n    }\n\n    async init() {\n        if (this.identity) return this.identity;\n        this.identity = await generateGroupIdentity(this.subtle);\n        this.members.set(this.identity.fingerprint, {\n            fp: this.identity.fingerprint,\n            name: 'You',\n            spki: this.identity.spki,\n            publicKey: null, // our own key verifies nothing inbound\n            sessionId: null,\n            state: MEMBER_STATE.SELF,\n        });\n        if (this.isAdmin) this.adminFp = this.identity.fingerprint;\n        return this.identity;\n    }\n\n    get selfFp() {\n        return this.identity?.fingerprint || '';\n    }\n\n    destroy() {\n        this._destroyed = true;\n        for (const t of this._timers) clearTimeout(t);\n        this._timers.clear();\n        try { this.ceremony?.destroy(); } catch (_) {}\n        this.ceremony = null;\n\n        // Connections this group opened are this group's to close. They exist\n        // nowhere in the app's chat list, so nothing else would ever reap them\n        // and a torn-down group would leave live peer connections behind.\n        for (const sessionId of this._meshSessions) {\n            try { this._mesh?.close(sessionId); } catch (_) {}\n        }\n        this._meshSessions.clear();\n        this._meshDials.clear();\n        this._meshFailures.clear();\n        this._probed.clear();\n\n        this.call = null;\n        this._callSeen.clear();\n\n        this.members.clear();\n        this.sessionToFp.clear();\n\n        this.transcript.clear();\n        this._pendingCeremony = [];\n        this._pendingKeys.clear();\n        this._pendingAdd = null;\n        this.identity = null;\n    }\n\n    _timer(fn, ms) {\n        const t = setTimeout(() => { this._timers.delete(t); if (!this._destroyed) fn(); }, ms);\n        this._timers.add(t);\n        return t;\n    }\n\n    _fail(code) {\n        if (this._destroyed) return;\n        this._log('warn', 'group ceremony failed', { code });\n        this.phase = GROUP_PHASE.FAILED;\n        try { this.ceremony?.destroy(); } catch (_) {}\n        this.ceremony = null;\n        this._emit('error', { error: code });\n    }\n\n    _setPhase(phase) {\n        if (this.phase === phase) return;\n        this.phase = phase;\n        // Any phase other than READY means nothing is currently confirmed.\n        if (phase !== GROUP_PHASE.READY) this.sasConfirmed = false;\n        // The code itself only survives from the moment it is computed\n        // (AWAITING_SAS) until the group leaves READY. Clearing it on the way\n        // INTO AWAITING_SAS would erase the digits _maybeFinish just derived.\n        if (phase !== GROUP_PHASE.READY && phase !== GROUP_PHASE.AWAITING_SAS) {\n            this.sasCode = '';\n        }\n        this._emit('phase', { phase });\n    }\n\n    /** The member list in the shape the reducer stores. */\n    _memberSnapshot() {\n        return [...this.members.values()].map((m) => ({\n            fp: m.fp, name: m.name, sessionId: m.sessionId, state: m.state,\n        }));\n    }\n\n    _emitMembers() {\n        this._pruneCall();\n        this._emit('members', { members: this._memberSnapshot(), epoch: this.epoch });\n    }\n\n    /**\n     * Drop anyone from the current call who is no longer a member.\n     *\n     * Membership can change under a call \u2014 the admin removes somebody, a roster\n     * for a new epoch arrives \u2014 and a participant list that outlives the roster\n     * would show a person in the call who is not in the group, which is exactly\n     * the kind of stale claim a group must not make about who can hear it.\n     */\n    _pruneCall() {\n        if (!this.call) return;\n        let changed = false;\n        for (const fp of [...this.call.participants]) {\n            if (!this.members.has(fp)) { this.call.participants.delete(fp); changed = true; }\n        }\n        if (this.call.participants.size === 0) { this.call = null; changed = true; }\n        if (changed) this._emit('call', { call: this.getCallSnapshot() });\n    }\n\n    // -----------------------------------------------------------------------\n    // routing\n    // -----------------------------------------------------------------------\n\n    /** Members we can reach over their own pairwise link right now. */\n    _directPeers() {\n        return [...this.members.values()].filter(\n            (m) => m.state === MEMBER_STATE.LINKED && m.sessionId,\n        );\n    }\n\n    /**\n     * Whoever can carry a frame to a member we cannot reach ourselves.\n     *\n     * The admin is preferred because by construction it holds a link to every\n     * member; any other directly-linked member is a fallback for when the admin\n     * is the one that has gone away.\n     */\n    _relayFor(toFp) {\n        const admin = this.members.get(this.adminFp);\n        if (admin && admin.state === MEMBER_STATE.LINKED && admin.sessionId && admin.fp !== toFp) {\n            return admin;\n        }\n        return this._directPeers().find((m) => m.fp !== toFp) || null;\n    }\n\n    /**\n     * Put a frame on the wire, wrapped.\n     *\n     * Every outbound frame goes through here so the envelope is applied in\n     * exactly one place \u2014 a frame sent raw would be silently mangled by the\n     * chat path's sanitiser rather than rejected, which is the worst way for\n     * this to fail.\n     */\n    async _wire(sessionId, frame) {\n        return this._send(sessionId, encodeEnvelope(frame));\n    }\n\n    /** Send one frame to one member, directly if we can and relayed if we cannot. */\n    async _sendTo(toFp, frame) {\n        const member = this.members.get(toFp);\n        if (!member || member.fp === this.selfFp) return false;\n\n        if (member.state === MEMBER_STATE.LINKED && member.sessionId) {\n            await this._wire(member.sessionId, frame);\n            return true;\n        }\n        const relay = this._relayFor(toFp);\n        if (!relay) return false;\n        await this._wire(relay.sessionId, {\n            type: GROUP_FRAMES.RELAY,\n            gid: this.groupId,\n            to: toFp,\n            hopped: false,\n            inner: frame,\n        });\n\n        // A relay hop is unacknowledged \u2014 we hand the frame to a member who may\n        // or may not be able to reach the target, and nothing comes back either\n        // way. For a member we have never held a link to, that is simply the\n        // normal path and the best that can be said. For one whose link we LOST,\n        // it is a guess: reporting it as delivered would tell the sender their\n        // message arrived when there is no reason to believe it did. The frame\n        // still goes \u2014 the target may be reachable from elsewhere in the mesh \u2014\n        // it just does not count toward the delivery the sender is shown.\n        return member.state !== MEMBER_STATE.LOST;\n    }\n\n    /**\n     * Fan a frame out to every other member. Failures are per-recipient.\n     *\n     * Returns WHO could not be reached as well as how many could, because a\n     * count on its own cannot tell \"Alice is offline\" from \"Bob is offline\" \u2014\n     * and the sender is the only person in a position to know the difference.\n     */\n    async _broadcast(frame, { exclude = [] } = {}) {\n        const targets = [...this.members.keys()].filter(\n            (fp) => fp !== this.selfFp && !exclude.includes(fp),\n        );\n        const results = await Promise.allSettled(targets.map((fp) => this._sendTo(fp, frame)));\n        const unreachable = [];\n        let delivered = 0;\n        results.forEach((result, i) => {\n            if (result.status === 'fulfilled' && result.value === true) {\n                delivered += 1;\n                return;\n            }\n            const member = this.members.get(targets[i]);\n            unreachable.push({ fp: targets[i], name: member?.name || 'A member' });\n        });\n        return { delivered, unreachable };\n    }\n\n    // -----------------------------------------------------------------------\n    // link bookkeeping (driven by the app as pairwise sessions come and go)\n    // -----------------------------------------------------------------------\n\n    /**\n     * Bind a pairwise session to a member. Called for the admin's own invites and\n     * whenever a member is reached over a session for the first time.\n     */\n    bindSession(fp, sessionId, state = MEMBER_STATE.LINKED) {\n        const member = this.members.get(fp);\n        if (!member) return false;\n        // A member never holds two links at once. Rebinding to a new session \u2014\n        // a mesh dial that succeeded where an old link had dropped, or a chat\n        // the user rebuilt by hand \u2014 has to drop the stale mapping, or a frame\n        // arriving on the dead session id would still be attributed to them.\n        if (member.sessionId && member.sessionId !== sessionId) {\n            this.sessionToFp.delete(member.sessionId);\n            this._closeMeshSession(member.sessionId);\n        }\n        member.sessionId = sessionId;\n        member.state = state;\n        if (sessionId) this.sessionToFp.set(sessionId, fp);\n        this._emitMembers();\n        return true;\n    }\n\n    /**\n     * Detach a member from whatever link it was on, back to the relay path.\n     *\n     * Used when a mesh dial fails: the half-built session is closed and the\n     * member returns to being reachable only through someone else, which is\n     * where they were before the dial started. Deliberately does NOT change the\n     * member's state to LOST \u2014 they are not offline, we just have no direct\n     * route to them.\n     */\n    unbindSession(fp) {\n        const member = this.members.get(fp);\n        if (!member || !member.sessionId) return false;\n        const sessionId = member.sessionId;\n        this.sessionToFp.delete(sessionId);\n        member.sessionId = null;\n        if (member.state === MEMBER_STATE.LINKED || member.state === MEMBER_STATE.LOST) {\n            member.state = MEMBER_STATE.PENDING;\n        }\n        this._closeMeshSession(sessionId);\n        this._emitMembers();\n        // The member has no route of their own now, so the mesh should look at\n        // building one. This is what makes a link dying recoverable rather than\n        // permanent: the pair goes back to the relay and dials again.\n        this._scheduleMeshMaintain();\n        return true;\n    }\n\n    /** A pairwise session changed state; reflect it on whichever member owns it. */\n    setSessionState(sessionId, connected) {\n        const fp = this.sessionToFp.get(sessionId);\n        if (!fp) return;\n        const member = this.members.get(fp);\n        if (!member || member.state === MEMBER_STATE.SELF) return;\n        const next = connected ? MEMBER_STATE.LINKED : MEMBER_STATE.LOST;\n        if (member.state === next) return;\n        member.state = next;\n        this._emitMembers();\n\n        // A dial that reached LINKED is finished; stop its timer before it fires\n        // and tears down the very link it was guarding. A link that DROPPED is\n        // also settled \u2014 the dial is over either way \u2014 but the failure counter\n        // is left alone, because a link that worked and then died says nothing\n        // about whether the pair can connect.\n        if (connected) this._settleDial(fp);\n        // Either edge changes the picture: a member who came up may be the relay\n        // some other pair was waiting for, and a member who went down may have\n        // been the only route to somebody.\n        this._scheduleMeshMaintain();\n    }\n\n    // -----------------------------------------------------------------------\n    // the mesh\n    // -----------------------------------------------------------------------\n    //\n    // Every pair that has no link between it dials one, so that the relay path\n    // becomes the exception it was always described as rather than the way the\n    // whole group runs.\n    //\n    // WHO DIALS\n    // ---------\n    // The member with the smaller fingerprint. That is the entire glare\n    // protocol: both sides compute it from the roster they already agree on, so\n    // exactly one side opens each pair and there is no simultaneous-offer case\n    // to resolve. A member that receives an offer from someone it should have\n    // been dialling ITSELF refuses it \u2014 either the peer is confused or somebody\n    // is trying to get two half-open dials fighting over one pair.\n    //\n    // WHEN\n    // ----\n    // Only once the group is READY and the safety code is confirmed. Before\n    // that, the roster's identity keys are keys nobody has vouched for yet, and\n    // a link authenticated by an unconfirmed key is a link authenticated by\n    // nothing. Waiting costs a few seconds of relayed traffic.\n    //\n    // HOW IT IS AUTHENTICATED\n    // -----------------------\n    // The descriptors travel through a relay, so they are signed with the\n    // sender's group identity key and checked against the roster \u2014 see\n    // meshDescriptorPayload in groupCrypto.js for why that is enough and what\n    // it deliberately does not defend against. Once the transport is up, the\n    // SBQ2 in-band exchange runs on it exactly as it does for a 1:1 chat, with\n    // one difference: nobody is asked to compare digits, because the group code\n    // already authenticated the key that signed the descriptor. The app closes\n    // that loop by marking the link verified on the group's authority.\n\n    /**\n     * Is this dial still worth finishing?\n     *\n     * Re-checked after EVERY await inside a dial, and that is not defensive\n     * padding \u2014 both awaits are long. Building a descriptor means gathering ICE,\n     * and verifying a signature is a trip through WebCrypto; either is ample time\n     * for the answer to change.\n     *\n     * The case that made this necessary: a link probe adopts a chat the two\n     * members already had while a dial for the same pair is mid-flight. The\n     * probe binds a link that works. The dial then came back and bound its own\n     * half-built session over the top, downgrading a live link to a pending one\n     * and leaving the pair relaying to each other over a connection that was\n     * never needed. Checking the member's session \u2014 not just our own dial\n     * bookkeeping \u2014 is what catches that.\n     */\n    _dialStillWanted(fp, dial) {\n        if (this._destroyed) return false;\n        if (this._meshDials.get(fp) !== dial) return false;\n        if (this.epoch !== dial.epoch) return false;\n        const member = this.members.get(fp);\n        if (!member) return false;\n        if (member.sessionId && member.sessionId !== dial.sessionId) return false;\n        return true;\n    }\n\n    /** Drop a dial that is no longer wanted, without recording it as a failure. */\n    _abandonDial(fp, dial, sessionId) {\n        if (this._meshDials.get(fp) === dial) {\n            if (dial.timer) { clearTimeout(dial.timer); this._timers.delete(dial.timer); }\n            this._meshDials.delete(fp);\n        }\n        this._meshSessions.delete(sessionId);\n        try { this._mesh?.close(sessionId); } catch (_) {}\n    }\n\n    /** Close and forget a connection this group opened. Never touches a chat. */\n    _closeMeshSession(sessionId) {\n        if (!sessionId || !this._meshSessions.has(sessionId)) return;\n        this._meshSessions.delete(sessionId);\n        try { this._mesh?.close(sessionId); } catch (_) {}\n    }\n\n    /** A dial is over, one way or another. Stops its timer and frees the slot. */\n    _settleDial(fp) {\n        const dial = this._meshDials.get(fp);\n        if (!dial) return;\n        if (dial.timer) { clearTimeout(dial.timer); this._timers.delete(dial.timer); }\n        this._meshDials.delete(fp);\n        this._meshFailures.delete(fp);\n    }\n\n    /**\n     * Give up on one pair, for now.\n     *\n     * The half-built connection is closed and the member goes back to being\n     * reached through somebody else \u2014 which is where they were before the dial\n     * started, so nothing the user can see gets worse. The backoff doubles per\n     * attempt because a pair that cannot connect is usually a network that will\n     * not allow it, and hammering at that produces load rather than links.\n     */\n    _meshFail(fp, code, { tellPeer = true } = {}) {\n        const dial = this._meshDials.get(fp);\n        if (dial) {\n            if (dial.timer) { clearTimeout(dial.timer); this._timers.delete(dial.timer); }\n            this._meshDials.delete(fp);\n            const member = this.members.get(fp);\n            // Only unbind if the member is still on THIS dial's session. If a\n            // real link arrived in the meantime, it is not ours to tear down.\n            if (dial.sessionId && member && member.sessionId === dial.sessionId) {\n                this.unbindSession(fp);\n            } else {\n                this._closeMeshSession(dial.sessionId);\n            }\n        }\n\n        const failure = this._meshFailures.get(fp) || { attempts: 0, nextAt: 0 };\n        failure.attempts += 1;\n        failure.nextAt = Date.now() + TIMEOUTS.MESH_RETRY_MS * 2 ** (failure.attempts - 1);\n        this._meshFailures.set(fp, failure);\n        this._log('warn', 'mesh dial failed', { code, attempts: failure.attempts });\n\n        // Tell the peer so their half of the dial does not sit until it times\n        // out. Best effort by definition \u2014 if we could reach them reliably we\n        // would not be failing.\n        if (tellPeer && this.members.has(fp)) {\n            this._sendTo(fp, {\n                type: GROUP_FRAMES.MESH_ABORT, gid: this.groupId, epoch: this.epoch,\n                from: this.selfFp, to: fp,\n            }).catch(() => {});\n        }\n        this._scheduleMeshMaintain();\n    }\n\n    /**\n     * Cancel every dial in flight and forget every backoff.\n     *\n     * Called when the epoch moves. A dial signed against the old epoch will not\n     * verify against the new one, and a pair that could not connect under the\n     * old membership deserves a fresh chance under the new one. Links that are\n     * already up are untouched \u2014 _onRoster carries them across.\n     */\n    _meshReset() {\n        for (const fp of [...this._meshDials.keys()]) {\n            const dial = this._meshDials.get(fp);\n            if (dial?.timer) { clearTimeout(dial.timer); this._timers.delete(dial.timer); }\n            this._meshDials.delete(fp);\n            const member = this.members.get(fp);\n            if (dial?.sessionId && member && member.sessionId === dial.sessionId) {\n                this.unbindSession(fp);\n            } else {\n                this._closeMeshSession(dial?.sessionId);\n            }\n        }\n        this._meshFailures.clear();\n        this._probed.clear();\n    }\n\n    /**\n     * Ask for a maintenance pass soon rather than now.\n     *\n     * Every edge that could change the answer calls this \u2014 a link coming up, a\n     * dial failing, the code being confirmed \u2014 and several of them fire in a\n     * burst. Coalescing them means one pass sees the settled picture instead of\n     * several passes each acting on a half-updated one.\n     */\n    _scheduleMeshMaintain() {\n        if (this._destroyed || !this._mesh || this._meshPass) return;\n        this._meshPass = this._timer(() => {\n            this._meshPass = null;\n            this._meshMaintain();\n        }, 0);\n    }\n\n    /** Open dials for whoever still has no link, within the concurrency limit. */\n    _meshMaintain() {\n        if (this._destroyed || !this._mesh) return;\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return;\n\n        const now = Date.now();\n        let inFlight = this._meshDials.size;\n        let soonest = Infinity;\n\n        // Fingerprint order, so every member walks the same list and the load of\n        // being dialled is spread the same way everywhere.\n        for (const fp of canonicalFingerprints([...this.members.keys()])) {\n            if (inFlight >= MESH_MAX_CONCURRENT_DIALS) break;\n            const member = this.members.get(fp);\n            if (!member || member.state === MEMBER_STATE.SELF) continue;\n            if (member.sessionId) continue;          // already on a link, or one is being built\n            if (this._meshDials.has(fp)) continue;\n            if (!(this.selfFp < fp)) continue;        // their turn to dial, not ours\n\n            const failure = this._meshFailures.get(fp);\n            if (failure) {\n                if (failure.attempts >= MESH_MAX_ATTEMPTS) continue;\n                if (now < failure.nextAt) { soonest = Math.min(soonest, failure.nextAt); continue; }\n            }\n            // Nothing can carry the offer, so there is no dial to make. When a\n            // relay appears, that link coming up schedules another pass.\n            if (!this._relayFor(fp)) continue;\n\n            inFlight += 1;\n            this._meshDial(fp).catch(() => {});\n        }\n\n        // Re-arm for the earliest pair whose backoff has not expired yet.\n        if (soonest !== Infinity && !this._meshPass) {\n            this._meshPass = this._timer(() => {\n                this._meshPass = null;\n                this._meshMaintain();\n            }, Math.max(0, soonest - now) + 50);\n        }\n    }\n\n    /** Build a descriptor for one peer, sign it, and put it on the relay path. */\n    async _meshDial(fp) {\n        const member = this.members.get(fp);\n        if (!member || member.sessionId || this._meshDials.has(fp)) return;\n\n        const epoch = this.epoch;\n        const nonce = randomBytes(GROUP_LIMITS.MESH_NONCE_BYTES);\n        // The slot is reserved BEFORE the first await. Creating an offer means\n        // gathering ICE, which takes long enough for a second maintenance pass\n        // to run and start a duplicate dial for the same peer.\n        const dial = { role: 'offer', sessionId: null, nonce, epoch, timer: null };\n        this._meshDials.set(fp, dial);\n\n        try {\n            const link = await this._mesh.createOffer(fp);\n            const sessionId = link && link.sessionId;\n            const descriptor = String((link && link.descriptor) || '');\n            if (!sessionId || !descriptor) throw new GroupSessionError('mesh transport produced no descriptor', 'no_descriptor');\n\n            // The world may have moved while ICE was gathering.\n            if (!this._dialStillWanted(fp, dial)) return this._abandonDial(fp, dial, sessionId);\n            dial.sessionId = sessionId;\n            this._meshSessions.add(sessionId);\n            // Bound now, as PENDING: it makes this member's link state\n            // addressable the moment the transport reports in, and PENDING keeps\n            // every frame on the relay path until it actually comes up.\n            this.bindSession(fp, sessionId, MEMBER_STATE.PENDING);\n\n            const sig = await signMeshDescriptor(this.subtle, this.identity.keyPair.privateKey, {\n                groupId: this.groupId, epoch, kind: MESH_KINDS.OFFER,\n                fromFp: this.selfFp, toFp: fp, descriptor, nonce,\n            });\n            const sent = await this._sendTo(fp, {\n                type: GROUP_FRAMES.MESH_OFFER, gid: this.groupId, epoch,\n                from: this.selfFp, to: fp, d: descriptor,\n                n: toB64(nonce), sig: toB64(sig),\n            });\n            if (!sent) throw new GroupSessionError('no route to carry the dial', 'unreachable');\n\n            dial.timer = this._timer(() => this._meshFail(fp, 'dial_timeout'), TIMEOUTS.MESH_DIAL_MS);\n        } catch (error) {\n            this._meshFail(fp, error?.code || 'dial_failed');\n        }\n    }\n\n    async _onMeshOffer(frame) {\n        if (!this._mesh || this._destroyed) return;\n        const from = assertFingerprint(String(frame.from || ''));\n        if (assertFingerprint(String(frame.to || '')) !== this.selfFp) return;\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return;\n\n        const member = this.members.get(from);\n        if (!member || !member.publicKey) {\n            throw new GroupSessionError('mesh dial from a non-member', 'not_a_member');\n        }\n        if (member.sessionId) return;                 // already reachable directly\n        if (this._meshDials.has(from)) return;        // one dial per pair\n        // We are the smaller fingerprint, so dialling this pair is OUR job. An\n        // offer arriving the wrong way round is refused rather than answered.\n        if (this.selfFp < from) return;\n\n        const descriptor = String(frame.d || '');\n        if (!descriptor || descriptor.length > GROUP_LIMITS.MAX_DESCRIPTOR_CHARS) {\n            throw new GroupSessionError('mesh descriptor is missing or oversized', 'bad_descriptor');\n        }\n        const nonce = fromB64(String(frame.n || ''), { max: GROUP_LIMITS.MESH_NONCE_BYTES });\n        const ok = await verifyMeshDescriptor(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch: this.epoch, kind: MESH_KINDS.OFFER,\n            fromFp: from, toFp: this.selfFp, descriptor, nonce,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('mesh dial signature did not verify', 'bad_signature');\n\n        // Re-checked after the signature work: verifying is a trip through\n        // WebCrypto, and a probe can adopt an existing chat for this member in\n        // that window. Answering then would build a second connection to\n        // somebody we are already talking to.\n        if (this._destroyed || member.sessionId || this._meshDials.has(from)) return;\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n\n        const epoch = this.epoch;\n        const dial = { role: 'answer', sessionId: null, nonce, epoch, timer: null };\n        this._meshDials.set(from, dial);\n\n        try {\n            const link = await this._mesh.createAnswer(from, descriptor);\n            const sessionId = link && link.sessionId;\n            const answer = String((link && link.descriptor) || '');\n            if (!sessionId || !answer) throw new GroupSessionError('mesh transport produced no answer', 'no_descriptor');\n\n            if (!this._dialStillWanted(from, dial)) return this._abandonDial(from, dial, sessionId);\n            dial.sessionId = sessionId;\n            this._meshSessions.add(sessionId);\n            this.bindSession(from, sessionId, MEMBER_STATE.PENDING);\n\n            const sig = await signMeshDescriptor(this.subtle, this.identity.keyPair.privateKey, {\n                groupId: this.groupId, epoch, kind: MESH_KINDS.ANSWER,\n                fromFp: this.selfFp, toFp: from, descriptor: answer, nonce,\n            });\n            const sent = await this._sendTo(from, {\n                type: GROUP_FRAMES.MESH_ANSWER, gid: this.groupId, epoch,\n                from: this.selfFp, to: from, d: answer,\n                n: toB64(nonce), sig: toB64(sig),\n            });\n            if (!sent) throw new GroupSessionError('no route to carry the answer', 'unreachable');\n\n            dial.timer = this._timer(() => this._meshFail(from, 'answer_timeout'), TIMEOUTS.MESH_DIAL_MS);\n        } catch (error) {\n            this._meshFail(from, error?.code || 'answer_failed');\n        }\n    }\n\n    async _onMeshAnswer(frame) {\n        if (!this._mesh || this._destroyed) return;\n        const from = assertFingerprint(String(frame.from || ''));\n        if (assertFingerprint(String(frame.to || '')) !== this.selfFp) return;\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n\n        const dial = this._meshDials.get(from);\n        if (!dial || dial.role !== 'offer' || !dial.sessionId || dial.epoch !== this.epoch) return;\n\n        const member = this.members.get(from);\n        if (!member || !member.publicKey) {\n            throw new GroupSessionError('mesh answer from a non-member', 'not_a_member');\n        }\n\n        const descriptor = String(frame.d || '');\n        if (!descriptor || descriptor.length > GROUP_LIMITS.MAX_DESCRIPTOR_CHARS) {\n            throw new GroupSessionError('mesh descriptor is missing or oversized', 'bad_descriptor');\n        }\n        // The nonce we generated for THIS dial, or the answer belongs to another\n        // attempt and is being replayed into this one.\n        const nonce = fromB64(String(frame.n || ''), { max: GROUP_LIMITS.MESH_NONCE_BYTES });\n        if (nonce.length !== dial.nonce.length || !nonce.every((b, i) => b === dial.nonce[i])) {\n            throw new GroupSessionError('mesh answer does not match the dial it claims', 'bad_mesh_nonce');\n        }\n\n        const ok = await verifyMeshDescriptor(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch: this.epoch, kind: MESH_KINDS.ANSWER,\n            fromFp: from, toFp: this.selfFp, descriptor, nonce,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('mesh answer signature did not verify', 'bad_signature');\n\n        try {\n            await this._mesh.acceptAnswer(dial.sessionId, descriptor);\n        } catch (error) {\n            this._meshFail(from, error?.code || 'answer_rejected');\n        }\n        // From here the transport finishes its own handshake; the link is\n        // declared up by setSessionState when it does.\n    }\n\n    _onMeshAbort(frame) {\n        const from = assertFingerprint(String(frame.from || ''));\n        if (assertFingerprint(String(frame.to || '')) !== this.selfFp) return;\n        if (!this._meshDials.has(from)) return;\n        // No abort back \u2014 that is how two peers keep telling each other to stop.\n        this._meshFail(from, 'peer_aborted', { tellPeer: false });\n    }\n\n    // -----------------------------------------------------------------------\n    // link probes\n    // -----------------------------------------------------------------------\n\n    /**\n     * Claim a pairwise chat we already hold as this group's link to a member.\n     *\n     * Two people who were already talking do not need a second connection built\n     * between them, and dialling one anyway would spend a WebRTC negotiation to\n     * arrive back where we started. The app calls this for every verified chat\n     * that is not already carrying a member; whoever is on the other end and is\n     * in this group binds it, and the pair is meshed without dialling anything.\n     *\n     * Sent once per session per epoch. It is a claim about identity, not a\n     * request, so there is nothing to retry.\n     */\n    async probeSession(sessionId) {\n        if (this._destroyed || !this._mesh || !sessionId) return false;\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return false;\n        if (this.sessionToFp.has(sessionId)) return false;\n        return this._sendProbe(sessionId);\n    }\n\n    /**\n     * Sign and send one probe. Once per session per epoch, whatever asked for it.\n     *\n     * Split from probeSession because the two callers disagree about one check:\n     * the app only offers sessions that carry nobody, while an ANSWERING probe\n     * goes out on a session that has just been bound \u2014 by the very probe it is\n     * answering.\n     */\n    async _sendProbe(sessionId) {\n        if (this._destroyed || this._probed.has(sessionId)) return false;\n        const linkFp = this._linkFingerprint(sessionId);\n        if (!linkFp) return false;\n\n        this._probed.add(sessionId);\n        const sig = await signLinkProbe(this.subtle, this.identity.keyPair.privateKey, {\n            groupId: this.groupId, epoch: this.epoch, fp: this.selfFp, linkFp,\n        });\n        await this._wire(sessionId, {\n            type: GROUP_FRAMES.PROBE, gid: this.groupId, epoch: this.epoch,\n            fp: this.selfFp, sig: toB64(sig),\n        });\n        return true;\n    }\n\n    _linkFingerprint(sessionId) {\n        try {\n            const fp = this._mesh?.linkFingerprint?.(sessionId);\n            return typeof fp === 'string' && fp.length > 0 ? fp : '';\n        } catch (_) {\n            return '';\n        }\n    }\n\n    async _onProbe(sessionId, frame) {\n        if (this._destroyed) return;\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return;\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n\n        const fp = assertFingerprint(String(frame.fp || ''));\n        if (fp === this.selfFp) return;\n        const member = this.members.get(fp);\n        if (!member || !member.publicKey) return;\n        if (this.sessionToFp.has(sessionId)) return;  // this session carries someone else\n\n        if (member.sessionId) {\n            // A link that is already carrying traffic is not replaced.\n            if (member.state === MEMBER_STATE.LINKED) return;\n            // But a dial still being built loses to a chat that already works.\n            // The dial is abandoned below; bindSession closes its half-open\n            // connection. Without this the probe would arrive a moment too late\n            // and we would finish building a second connection to somebody we\n            // were already talking to.\n            if (!this._meshDials.has(fp)) return;\n        }\n\n        // The fingerprint of the session the probe ARRIVED on, read locally.\n        // Taking it from the frame would defeat the whole point \u2014 see\n        // linkProbePayload for what this binding is defending against.\n        const linkFp = this._linkFingerprint(sessionId);\n        if (!linkFp) return;\n\n        const ok = await verifyLinkProbe(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch: this.epoch, fp, linkFp,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('link probe signature did not verify', 'bad_signature');\n\n        // A probe only ever arrives on a link that is already up and verified \u2014\n        // it travelled over it \u2014 so this one is LINKED, not PENDING.\n        this._settleDial(fp);\n        this.bindSession(fp, sessionId, MEMBER_STATE.LINKED);\n\n        // Answer in kind, or the adoption is one-sided. The peer now routes to\n        // us over this link, but we are the only ones who know that: without a\n        // probe back they never learn who is on their end, and they would go on\n        // relaying to us through somebody else forever. The once-per-session\n        // guard in _sendProbe is what stops the two sides answering each other\n        // indefinitely.\n        this._sendProbe(sessionId).catch(() => { /* the link works either way */ });\n\n        this._scheduleMeshMaintain();\n    }\n\n    // -----------------------------------------------------------------------\n    // step 1-2: invite / hello\n    // -----------------------------------------------------------------------\n\n    /**\n     * Admin: invite peers we already hold verified 1:1 sessions with.\n     * @param {{sessionId: string, name: string}[]} peers\n     */\n    async invite(peers) {\n        if (!this.isAdmin) throw new GroupSessionError('only the admin invites', 'not_admin');\n        await this.init();\n        if (peers.length + 1 > GROUP_LIMITS.MAX_MEMBERS) {\n            throw new GroupSessionError(`a group is limited to ${GROUP_LIMITS.MAX_MEMBERS} members`, 'too_many_members');\n        }\n        this._setPhase(GROUP_PHASE.FORMING);\n\n        for (const peer of peers) this._awaitingHello.set(peer.sessionId, peer.name || 'Member');\n\n        const frame = {\n            type: GROUP_FRAMES.INVITE,\n            gid: this.groupId,\n            epoch: this.epoch,\n            name: this.name,\n            adminSpki: toB64(this.identity.spki),\n        };\n\n        // Report what actually left the device.\n        //\n        // Swallowing these failures turned a dead link into forty-five seconds of\n        // nothing followed by a generic timeout, which is indistinguishable from\n        // an invitee who simply has not answered. A send that fails for everyone\n        // failed now, and saying so now is the difference between a bug someone\n        // can act on and a group that mysteriously never forms.\n        const results = await Promise.allSettled(peers.map((p) => this._wire(p.sessionId, frame)));\n        const failed = results.filter((r) => r.status === 'rejected');\n        if (failed.length === peers.length) {\n            this._fail('invitations_could_not_be_sent');\n            throw new GroupSessionError(\n                'the invitation could not be sent \u2014 the chat with that peer is not connected',\n                'invitations_could_not_be_sent',\n            );\n        }\n        if (failed.length > 0) {\n            // Some links are down. Those invitees will never send a hello, so the\n            // roster would wait on them forever; drop them from the round.\n            const reachable = peers.filter((_, i) => results[i].status === 'fulfilled');\n            for (const p of peers) {\n                if (!reachable.includes(p)) this._awaitingHello.delete(p.sessionId);\n            }\n            this._emit('partial_invite', { sent: reachable.length, total: peers.length });\n        }\n\n        this._timer(() => {\n            if (this.phase === GROUP_PHASE.FORMING) this._fail('invitees_did_not_respond');\n        }, TIMEOUTS.HELLO_MS);\n    }\n\n    /** Invitee: adopt an invitation and publish our own identity key back. */\n    async acceptInvite(sessionId, envelope) {\n        // The app receives an invitation before any group exists to decode it\n        // with, so it may hand back either the envelope or the frame inside.\n        const frame = decodeEnvelope(envelope);\n        await this.init();\n        const adminSpki = fromB64(String(frame.adminSpki || ''));\n        const { publicKey, fingerprint } = await importMemberIdentity(this.subtle, adminSpki);\n        this.adminFp = fingerprint;\n        this.epoch = assertEpoch(frame.epoch);\n        this.name = assertName(frame.name);\n\n        this.members.set(fingerprint, {\n            fp: fingerprint,\n            name: 'Admin',\n            spki: adminSpki,\n            publicKey,\n            sessionId,\n            state: MEMBER_STATE.LINKED,\n        });\n        this.sessionToFp.set(sessionId, fingerprint);\n        this._setPhase(GROUP_PHASE.FORMING);\n        this._emitMembers();\n\n        await this._wire(sessionId, {\n            type: GROUP_FRAMES.HELLO,\n            gid: this.groupId,\n            epoch: this.epoch,\n            spki: toB64(this.identity.spki),\n        });\n\n        this._timer(() => {\n            if (this.phase === GROUP_PHASE.FORMING) this._fail('roster_never_arrived');\n        }, TIMEOUTS.HELLO_MS);\n    }\n\n    async _onHello(sessionId, frame) {\n        if (!this.isAdmin) return; // only the admin collects identity keys\n\n        // A hello is only ever an ANSWER to an invitation this admin sent, on\n        // the very session it was sent over. Without that check the frame is an\n        // open door: any member \u2014 or anyone else who holds a verified chat with\n        // the admin and has learnt the group id \u2014 could publish an identity key\n        // the admin never invited, and the branch at the end of this method\n        // would then sign and broadcast a roster containing it. \"Only the admin\n        // invites\" has to be enforced here, because this is the only place a\n        // member is created from something that arrived on the wire.\n        //\n        // It also confines the frame to a DIRECT link. A hello can be wrapped in\n        // a relay and handed to the admin by a third party, and _onRelay hands\n        // the inner frame on with the RELAY's session id \u2014 which is never a\n        // session an invitation went out on, so such a frame lands here and\n        // stops.\n        if (!this._awaitingHello.has(sessionId)) {\n            this._log('warn', 'dropped an unsolicited group hello', { groupId: this.groupId });\n            return;\n        }\n\n        const spki = fromB64(String(frame.spki || ''));\n        const { publicKey, fingerprint } = await importMemberIdentity(this.subtle, spki);\n        if (this.members.has(fingerprint) && fingerprint !== this.selfFp) return;\n        if (this.members.size >= GROUP_LIMITS.MAX_MEMBERS) throw new GroupSessionError('group is full', 'too_many_members');\n\n        this.members.set(fingerprint, {\n            fp: fingerprint,\n            name: this._awaitingHello.get(sessionId) || 'Member',\n            spki,\n            publicKey,\n            sessionId,\n            state: MEMBER_STATE.LINKED,\n        });\n        this.sessionToFp.set(sessionId, fingerprint);\n        this._awaitingHello.delete(sessionId);\n        this._emitMembers();\n\n        if (this._awaitingHello.size === 0) {\n            if (this._pendingAdd) return this._finishAdd();\n            await this.publishRoster(MEMBER_OPS.CREATE);\n        }\n    }\n\n    // -----------------------------------------------------------------------\n    // step 3: the signed roster\n    // -----------------------------------------------------------------------\n\n    /** Admin: sign the current member set for this epoch and broadcast it. */\n    async publishRoster(op = MEMBER_OPS.ADD) {\n        if (!this.isAdmin) throw new GroupSessionError('only the admin publishes the roster', 'not_admin');\n        const memberFps = canonicalFingerprints([...this.members.keys()]);\n        const fields = { groupId: this.groupId, epoch: this.epoch, op, memberFps, name: this.name };\n        const sig = await signMemberOp(this.subtle, this.identity.keyPair.privateKey, fields);\n\n        // Member keys go out one frame each, BEFORE the roster that names them.\n        //\n        // They cannot ride inside the roster: eight members' SPKI would put the\n        // frame past the 2000-character ceiling the chat path truncates at, and a\n        // truncated roster fails in the most confusing way possible. Splitting\n        // them costs nothing in security, because the signed roster commits to\n        // the FINGERPRINTS \u2014 a key that arrives separately is checked against the\n        // fingerprint it claims, so a substituted key is refused whichever frame\n        // carried it.\n        for (const fp of memberFps) {\n            const m = this.members.get(fp);\n            await this._broadcast({\n                type: GROUP_FRAMES.MEMBER,\n                gid: this.groupId,\n                epoch: this.epoch,\n                fp,\n                name: m.name === 'You' ? 'Admin' : m.name,\n                spki: toB64(m.spki),\n            });\n        }\n\n        await this._broadcast({\n            type: GROUP_FRAMES.ROSTER,\n            gid: this.groupId,\n            epoch: this.epoch,\n            op,\n            name: this.name,\n            adminSpki: toB64(this.identity.spki),\n            members: memberFps,\n            sig: toB64(sig),\n        });\n        await this._startCeremony();\n    }\n\n    /**\n     * A member's identity key, published ahead of the roster that names them.\n     *\n     * Held in a staging area rather than applied: until the admin's signed roster\n     * arrives, a key frame is an unverified claim about who is in the group. The\n     * fingerprint is derived from the bytes, never taken from the frame, so a\n     * member cannot register a key under someone else's name.\n     */\n    async _onMemberKey(frame) {\n        const epoch = assertEpoch(frame.epoch);\n        if (epoch < this.epoch) return;\n        if (this._pendingKeys.size > GROUP_LIMITS.MAX_MEMBERS * 2) return;\n\n        const spki = fromB64(String(frame.spki || ''));\n        const { publicKey, fingerprint } = await importMemberIdentity(this.subtle, spki);\n        if (assertFingerprint(String(frame.fp || '')) !== fingerprint) {\n            throw new GroupSessionError('member key does not match its fingerprint', 'fingerprint_mismatch');\n        }\n        this._pendingKeys.set(fingerprint, { spki, publicKey, name: assertName(frame.name) });\n    }\n\n    /**\n     * Member: adopt a roster.\n     *\n     * The admin's signature is checked against the key whose fingerprint IS the\n     * admin fingerprint we recorded at invite time \u2014 not against whatever key the\n     * frame happens to carry \u2014 so a member cannot promote itself by attaching its\n     * own key to a roster. The epoch must move forward, which refuses both a\n     * replay and a rollback to a membership that used to be valid.\n     */\n    async _onRoster(sessionId, frame) {\n        const epoch = assertEpoch(frame.epoch);\n        if (this.isAdmin) return; // we authored it\n        if (epoch < this.epoch) throw new GroupSessionError('roster epoch went backwards', 'stale_epoch');\n\n        const adminSpki = fromB64(String(frame.adminSpki || ''));\n        const { publicKey: adminKey, fingerprint: adminFp } = await importMemberIdentity(this.subtle, adminSpki);\n        if (this.adminFp && adminFp !== this.adminFp) {\n            throw new GroupSessionError('roster was signed by someone other than the admin', 'wrong_admin');\n        }\n\n        if (!Array.isArray(frame.members)) throw new GroupSessionError('roster carries no member list', 'bad_roster');\n        if (frame.members.length > GROUP_LIMITS.MAX_MEMBERS) throw new GroupSessionError('roster exceeds the member limit', 'too_many_members');\n\n        const memberFps = canonicalFingerprints(frame.members.map((fp) => String(fp || '')));\n        if (!memberFps.includes(this.selfFp)) throw new GroupSessionError('roster does not include us', 'not_a_member');\n        if (!memberFps.includes(adminFp)) throw new GroupSessionError('roster does not include its author', 'bad_roster');\n\n        // Match each named member to the key frame that arrived ahead of the\n        // roster. A member the admin names but whose key never arrived is a\n        // member we could not verify a single message from, so the roster is\n        // refused outright rather than adopted with a hole in it.\n        const imported = [];\n        for (const fp of memberFps) {\n            if (fp === this.selfFp) {\n                imported.push({ fp, name: 'You', spki: this.identity.spki, publicKey: null });\n                continue;\n            }\n            const staged = this._pendingKeys.get(fp) || (fp === adminFp\n                ? { spki: adminSpki, publicKey: adminKey, name: 'Admin' }\n                : null);\n            if (!staged) throw new GroupSessionError('roster names a member whose key never arrived', 'missing_member_key');\n            imported.push({ fp, name: staged.name, spki: staged.spki, publicKey: staged.publicKey });\n        }\n\n        const ok = await verifyMemberOp(this.subtle, adminKey, {\n            groupId: this.groupId, epoch, op: String(frame.op || ''),\n            memberFps, name: assertName(frame.name),\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('roster signature did not verify', 'bad_signature');\n\n        // Adopt. Existing links are preserved: the session we already hold with\n        // the admin (and with anyone else) stays bound to the same fingerprint.\n        this.epoch = epoch;\n        this.name = assertName(frame.name);\n        this.adminFp = adminFp;\n\n        const previous = this.members;\n        this.members = new Map();\n        for (const m of imported) {\n            const old = previous.get(m.fp);\n            this.members.set(m.fp, {\n                fp: m.fp,\n                name: m.fp === this.selfFp ? 'You' : m.name,\n                spki: m.spki,\n                publicKey: m.fp === this.selfFp ? null : m.publicKey,\n                sessionId: old?.sessionId || null,\n                state: m.fp === this.selfFp ? MEMBER_STATE.SELF\n                    : (old?.state === MEMBER_STATE.LINKED ? MEMBER_STATE.LINKED : MEMBER_STATE.PENDING),\n            });\n        }\n        // Drop session bindings for members who left.\n        for (const [sid, fp] of [...this.sessionToFp]) {\n            if (!this.members.has(fp)) this.sessionToFp.delete(sid);\n        }\n\n        this._emit('roster', { name: this.name, epoch: this.epoch, adminFp });\n        this._emitMembers();\n        await this._startCeremony();\n    }\n\n    // -----------------------------------------------------------------------\n    // steps 4-6: the safety code ceremony\n    // -----------------------------------------------------------------------\n\n    async _startCeremony() {\n        try { this.ceremony?.destroy(); } catch (_) {}\n        // A new round means a new epoch, and every dial in flight was signed\n        // against the old one. Abandon them rather than let them arrive as\n        // signatures that cannot verify; links already up are kept.\n        this._meshReset();\n        this.ceremony = new GroupSasCeremony({\n            groupId: this.groupId,\n            epoch: this.epoch,\n            selfFingerprint: this.selfFp,\n            memberFingerprints: [...this.members.keys()],\n        });\n        this._setPhase(GROUP_PHASE.COMMITTING);\n\n        const commitment = await this.ceremony.ownCommitment(this.subtle);\n\n        // Our commitment goes out BEFORE anything held is replayed, and the order\n        // is load-bearing.\n        //\n        // Draining first can complete the commit round on the spot \u2014 every peer\n        // commitment may already be waiting \u2014 which reveals our nonce and puts a\n        // reveal on the wire ahead of our own commitment. A peer then has a reveal\n        // it cannot check yet and has to hold it until our commitment turns up,\n        // so the round only completes if that one later frame arrives. It made\n        // correctness depend on a peer's buffer instead of on the protocol, and a\n        // single dropped commitment left every member waiting on a nonce that had\n        // already been sent.\n        await this._broadcast({\n            type: GROUP_FRAMES.COMMIT,\n            gid: this.groupId,\n            epoch: this.epoch,\n            fp: this.selfFp,\n            commit: toB64(commitment),\n        });\n\n        const epochAtStart = this.epoch;\n        this._timer(() => {\n            if (this.epoch !== epochAtStart) return;\n            if (this.phase === GROUP_PHASE.COMMITTING || this.phase === GROUP_PHASE.REVEALING) {\n                this._fail('ceremony_timed_out');\n            }\n        }, TIMEOUTS.CEREMONY_MS);\n\n        // Only now replay what arrived before this ceremony existed. Our\n        // commitment is already on the wire, so a reveal this produces can never\n        // outrun it.\n        await this._drainPendingCeremony();\n        await this._maybeReveal();\n    }\n\n    /** Hold a ceremony frame that outran our own roster. See _pendingCeremony. */\n    _holdCeremonyFrame(frame) {\n        // Two frames per member per epoch is all that can legitimately be\n        // outstanding; the cap keeps a chatty member from growing this without\n        // bound while we wait for a roster.\n        if (this._pendingCeremony.length >= GROUP_LIMITS.MAX_MEMBERS * 2) return;\n        this._pendingCeremony.push(frame);\n    }\n\n    async _drainPendingCeremony() {\n        // Re-entrancy guard: draining calls the same handlers that hold frames,\n        // and a frame that is still premature is put back for the next drain.\n        if (this._draining) return;\n        this._draining = true;\n        try {\n            const held = this._pendingCeremony;\n            this._pendingCeremony = [];\n            for (const frame of held) {\n                try {\n                    if (frame.type === GROUP_FRAMES.COMMIT) await this._onCommit(frame);\n                    else if (frame.type === GROUP_FRAMES.REVEAL) await this._onReveal(frame);\n                } catch (error) {\n                    // A held frame that no longer makes sense (wrong epoch, a\n                    // member dropped from the roster) is discarded, not fatal.\n                    this._log('warn', 'held ceremony frame discarded', { code: error?.code });\n                }\n            }\n        } finally {\n            this._draining = false;\n        }\n    }\n\n    async _onCommit(frame) {\n        if (!this.ceremony) return this._holdCeremonyFrame(frame);\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n        this.ceremony.acceptCommitment(\n            assertFingerprint(String(frame.fp || '')),\n            fromB64(String(frame.commit || ''), { max: GROUP_LIMITS.COMMIT_BYTES }),\n        );\n        // A reveal we had to hold may now have the commitment it needs.\n        await this._drainPendingCeremony();\n        await this._maybeReveal();\n    }\n\n    /**\n     * Publish our nonce, but only once every commitment is in.\n     *\n     * The check lives in GroupSasCeremony.reveal(), which throws otherwise. This\n     * method only asks whether the round is complete \u2014 it must never be changed\n     * to reveal on a timer or on a partial round.\n     */\n    async _maybeReveal() {\n        if (!this.ceremony || this.ceremony.revealed) return;\n        if (!this.ceremony.commitmentsComplete) return;\n\n        this._setPhase(GROUP_PHASE.REVEALING);\n        const nonce = this.ceremony.reveal();\n        await this._broadcast({\n            type: GROUP_FRAMES.REVEAL,\n            gid: this.groupId,\n            epoch: this.epoch,\n            fp: this.selfFp,\n            nonce: toB64(nonce),\n        });\n        await this._maybeFinish();\n    }\n\n    async _onReveal(frame) {\n        if (!this.ceremony) return this._holdCeremonyFrame(frame);\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n        // A reveal can also outrun the commitment it opens, on a link where the\n        // two frames took different paths. Hold it rather than failing the\n        // ceremony for an ordering the network chose.\n        if (!this.ceremony.commitments.has(assertFingerprint(String(frame.fp || '')))) {\n            return this._holdCeremonyFrame(frame);\n        }\n        await this.ceremony.acceptReveal(\n            this.subtle,\n            assertFingerprint(String(frame.fp || '')),\n            fromB64(String(frame.nonce || ''), { max: GROUP_LIMITS.NONCE_BYTES }),\n        );\n        await this._maybeFinish();\n    }\n\n    async _maybeFinish() {\n        if (!this.ceremony || !this.ceremony.revealsComplete) return;\n        // Reached from both _onReveal and _maybeReveal, so it must be idempotent:\n        // the round produces one code and computing it twice is not an error.\n        if (this.sasCode) return;\n        const code = await this.ceremony.finish(this.subtle);\n        this._setPhase(GROUP_PHASE.AWAITING_SAS);\n        this.sasCode = code;\n        this._emit('sas', { code });\n    }\n\n    /**\n     * The humans compared the digits and they matched.\n     *\n     * This is the only path to READY, and it is driven by a user action \u2014 never\n     * by a frame arriving. It mirrors the 1:1 rule: completing a handshake proves\n     * somebody completed it, and only the out-of-band comparison proves who.\n     */\n    confirmSas() {\n        if (this.phase !== GROUP_PHASE.AWAITING_SAS || !this.sasCode) {\n            throw new GroupSessionError('there is no group code to confirm', 'no_code');\n        }\n        this.sasConfirmed = true;\n        this.phase = GROUP_PHASE.READY;\n        try { this.ceremony?.destroy(); } catch (_) {}\n        this.ceremony = null;\n        this._emit('confirmed', { members: this._memberSnapshot() });\n        // The moment the human vouches for the code, the roster's identity keys\n        // become keys worth authenticating a transport with. This is the gate\n        // the whole mesh waits behind.\n        this._scheduleMeshMaintain();\n    }\n\n    /** Recompute the code for the current epoch \u2014 used only by tests and diagnostics. */\n    async _recomputeSas(contributions) {\n        return computeGroupSas(this.subtle, {\n            groupId: this.groupId, epoch: this.epoch, contributions,\n        });\n    }\n\n    // -----------------------------------------------------------------------\n    // step 7: messages\n    // -----------------------------------------------------------------------\n\n    async sendText(text) {\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) {\n            throw new GroupSessionError('the group code has not been confirmed', 'not_ready');\n        }\n        const body = String(text ?? '');\n        if (!body.trim()) throw new GroupSessionError('empty message', 'empty');\n\n        const seq = ++this.seq;\n        const bodyHash = await hashBody(this.subtle, body);\n        const sig = await signGroupMessage(this.subtle, this.identity.keyPair.privateKey, {\n            groupId: this.groupId, epoch: this.epoch, seq, senderFp: this.selfFp, bodyHash,\n        });\n\n        const frame = {\n            type: GROUP_FRAMES.MESSAGE,\n            gid: this.groupId,\n            epoch: this.epoch,\n            seq,\n            fp: this.selfFp,\n            ts: Date.now(),\n            body,\n            sig: toB64(sig),\n        };\n        const { delivered, unreachable } = await this._broadcast(frame);\n        return { seq, delivered, total: this.members.size - 1, unreachable };\n    }\n\n    async _onMessage(frame, { relayed = false } = {}) {\n        const epoch = assertEpoch(frame.epoch);\n        const seq = assertEpoch(frame.seq);\n        const senderFp = assertFingerprint(String(frame.fp || ''));\n\n        if (senderFp === this.selfFp) return; // our own frame came back around\n        const member = this.members.get(senderFp);\n        if (!member || !member.publicKey) throw new GroupSessionError('message from a non-member', 'not_a_member');\n\n        // A message from an epoch we have left is not applied: its signature is\n        // valid but it belongs to a membership that no longer holds.\n        if (epoch !== this.epoch) throw new GroupSessionError('message from another epoch', 'stale_epoch');\n\n        const body = String(frame.body ?? '');\n        const bodyHash = await hashBody(this.subtle, body);\n        const ok = await verifyGroupMessage(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch, seq, senderFp, bodyHash,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('message signature did not verify', 'bad_signature');\n\n        // Transcript consistency AND duplicate suppression, in that order \u2014\n        // which is the whole point. Fan-out plus relay means the same frame\n        // legitimately arrives twice, so a repeat has to be absorbed silently.\n        // But \"same sender, same sequence number\" is NOT enough to call something\n        // a duplicate: a member telling two halves of the group different things\n        // does exactly that, and deduplicating on the key alone would hide the\n        // split this record exists to catch. The body hash is what separates the\n        // two cases.\n        const byMember = this.transcript.get(senderFp) || new Map();\n        const hashHex = toB64(bodyHash);\n        const previous = byMember.get(seq);\n        if (previous !== undefined) {\n            if (previous === hashHex) return; // the same message, arriving again\n            this._emit('inconsistency', { fp: senderFp, seq, name: member.name });\n            throw new GroupSessionError('member sent conflicting messages under one sequence number', 'transcript_split');\n        }\n\n        byMember.set(seq, hashHex);\n        // Bounded per sender. The pairwise ratchet already refuses genuinely old\n        // frames, so this window only has to outlast fan-out and one relay hop.\n        if (byMember.size > 512) byMember.delete(byMember.keys().next().value);\n        this.transcript.set(senderFp, byMember);\n\n        this._emit('message', {\n            fp: senderFp,\n            name: member.name,\n            body,\n            seq,\n            ts: Number.isFinite(frame.ts) ? frame.ts : Date.now(),\n            // Whether this particular copy came straight from its author or was\n            // carried by another member. Worth showing: a relayed message is one\n            // a third member knew the timing of, and the reader is the only one\n            // in a position to notice that is still happening.\n            relayed,\n        });\n    }\n\n    // -----------------------------------------------------------------------\n    // calls\n    // -----------------------------------------------------------------------\n    //\n    // WHAT TRAVELS HERE AND WHAT DOES NOT\n    // -----------------------------------\n    // Only the roster of a call: somebody opened one, somebody joined it,\n    // somebody left. No SDP, no ICE, no audio, no video. Media is carried by the\n    // pairwise sessions themselves \u2014 each member places an ordinary encrypted\n    // call to each other member over the link they already share, so a group\n    // call is N-1 of the 1:1 calls this app already makes, on transports that\n    // were already SAS-verified. There is no mixer, no conference server and no\n    // point at which two people's audio meets anywhere but on a device.\n    //\n    // That is why call control is separate from the media path. Control has to\n    // reach every member, including one who is currently reachable only through\n    // a relay; media can only flow where a direct link exists. Splitting them\n    // means a member with no direct link still SEES the call and can be dialled\n    // into it as the mesh completes, instead of silently missing it.\n    //\n    // WHY THESE FRAMES ARE SIGNED\n    // ---------------------------\n    // A relaying member carries call control for pairs that cannot reach each\n    // other. Unsigned, that member could add somebody to a call they never\n    // joined, or drop somebody who is in one, and nobody could tell it had\n    // happened. Signed with the group identity key, a relay can still refuse to\n    // carry a frame \u2014 the same availability cost relaying always has \u2014 but it\n    // cannot write one.\n\n    /** What the app renders. Null when there is no call. */\n    getCallSnapshot() {\n        if (!this.call) return null;\n        const starter = this.members.get(this.call.startedBy);\n        return {\n            callId: this.call.callId,\n            startedBy: this.call.startedBy,\n            startedByName: this.call.startedBy === this.selfFp\n                ? 'You'\n                : (starter?.name || 'A member'),\n            withVideo: this.call.withVideo,\n            startedAt: this.call.startedAt,\n            joined: this.call.joined,\n            participants: [...this.call.participants].map((fp) => {\n                const member = this.members.get(fp);\n                return {\n                    fp,\n                    name: fp === this.selfFp ? 'You' : (member?.name || 'A member'),\n                    self: fp === this.selfFp,\n                    sessionId: member?.sessionId || null,\n                    state: member?.state || MEMBER_STATE.LOST,\n                };\n            }).sort((a, b) => (a.fp < b.fp ? -1 : a.fp > b.fp ? 1 : 0)),\n        };\n    }\n\n    _emitCall() {\n        this._emit('call', { call: this.getCallSnapshot() });\n    }\n\n    _requireReady() {\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) {\n            throw new GroupSessionError('the group code has not been confirmed', 'not_ready');\n        }\n    }\n\n    /** Sign and fan out one call-control frame. */\n    async _sendCallFrame(action, callId, withVideo) {\n        const seq = ++this.callSeq;\n        const sig = await signGroupCall(this.subtle, this.identity.keyPair.privateKey, {\n            groupId: this.groupId, epoch: this.epoch, callId, action,\n            fp: this.selfFp, seq, withVideo,\n        });\n        return this._broadcast({\n            type: GROUP_FRAMES.CALL,\n            gid: this.groupId,\n            epoch: this.epoch,\n            callId,\n            action,\n            fp: this.selfFp,\n            seq,\n            v: withVideo === true,\n            ts: Date.now(),\n            sig: toB64(sig),\n        });\n    }\n\n    /**\n     * Open a call and put ourselves in it.\n     *\n     * Refused while one is already running: joining the call that exists is what\n     * the user means, and a second concurrent call would split the group into two\n     * rooms that cannot hear each other.\n     */\n    async startCall({ withVideo = false, prepare = null } = {}) {\n        this._requireReady();\n        if (this.call) throw new GroupSessionError('a call is already running in this group', 'call_in_progress');\n\n        const callId = newCallId();\n        this.call = {\n            callId,\n            startedBy: this.selfFp,\n            withVideo: withVideo === true,\n            startedAt: Date.now(),\n            participants: new Set([this.selfFp]),\n            joined: true,\n        };\n        this._emitCall();\n        // Media needs a direct link, so a call is the moment it is most worth\n        // having one. The mesh would get there on its own; this stops the first\n        // seconds of the call being spent waiting for a maintenance pass.\n        this._scheduleMeshMaintain();\n        try {\n            // `prepare` is where the caller opens its microphone, and it runs\n            // BEFORE the group is told anything. Announcing first would ring\n            // everybody else's device for a call this one turns out not to be\n            // able to make \u2014 a denied permission, no microphone, another\n            // application holding it. Failing here costs nobody but the person\n            // who pressed the button.\n            if (typeof prepare === 'function') await prepare(this.getCallSnapshot());\n            const { unreachable } = await this._sendCallFrame(CALL_ACTIONS.START, callId, this.call.withVideo);\n            return { callId, unreachable };\n        } catch (error) {\n            this.call = null;\n            this._emitCall();\n            throw error;\n        }\n    }\n\n    /** Join the call that is already running. */\n    async joinCall() {\n        this._requireReady();\n        if (!this.call) throw new GroupSessionError('there is no call to join', 'no_call');\n        if (this.call.joined) return { callId: this.call.callId, unreachable: [] };\n\n        this.call.joined = true;\n        this.call.participants.add(this.selfFp);\n        this._emitCall();\n        this._scheduleMeshMaintain();\n        const { unreachable } = await this._sendCallFrame(CALL_ACTIONS.JOIN, this.call.callId, this.call.withVideo);\n        return { callId: this.call.callId, unreachable };\n    }\n\n    /**\n     * Leave the call.\n     *\n     * Leaving is always local first: the frame is best effort, because a member\n     * who cannot be reached must not be able to keep us in a call by being\n     * unreachable.\n     */\n    async leaveCall() {\n        if (!this.call) return;\n        const callId = this.call.callId;\n        const withVideo = this.call.withVideo;\n        this.call.joined = false;\n        this.call.participants.delete(this.selfFp);\n        if (this.call.participants.size === 0) this.call = null;\n        this._emitCall();\n        try {\n            await this._sendCallFrame(CALL_ACTIONS.LEAVE, callId, withVideo);\n        } catch (_) { /* leaving is best effort */ }\n    }\n\n    /**\n     * A member is gone (left the call, left the group, or was removed).\n     *\n     * A call with NOBODY in it is over. A call with only us in it is not: that\n     * is exactly the state every call is in for the seconds between opening it\n     * and the first person joining, and ending it there would hang up on\n     * somebody who is on their way in. Leaving is the user's decision, and\n     * leaveCall is the only thing that makes it.\n     */\n    _dropFromCall(fp) {\n        if (!this.call || !this.call.participants.has(fp)) return;\n        this.call.participants.delete(fp);\n        if (this.call.participants.size === 0) this.call = null;\n        this._emitCall();\n    }\n\n    async _onCall(frame) {\n        const epoch = assertEpoch(frame.epoch);\n        const seq = assertEpoch(frame.seq);\n        const senderFp = assertFingerprint(String(frame.fp || ''));\n        const callId = assertCallId(String(frame.callId || ''));\n        const action = String(frame.action || '');\n        const withVideo = frame.v === true;\n\n        if (senderFp === this.selfFp) return;\n        const member = this.members.get(senderFp);\n        if (!member || !member.publicKey) throw new GroupSessionError('call frame from a non-member', 'not_a_member');\n        if (epoch !== this.epoch) throw new GroupSessionError('call frame from another epoch', 'stale_epoch');\n\n        // Replay window first, so a captured frame is dropped before its action\n        // is considered at all. Equal counts as a replay: a sender never reuses\n        // a sequence number, and fan-out duplicates of the same frame are\n        // exactly what this absorbs.\n        const seen = this._callSeen.get(senderFp);\n        if (seen !== undefined && seq <= seen) return;\n\n        const ok = await verifyGroupCall(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch, callId, action, fp: senderFp, seq, withVideo,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('call frame signature did not verify', 'bad_signature');\n        this._callSeen.set(senderFp, seq);\n\n        // Nothing about a call may be acted on before the group itself is\n        // usable: a call that arrives mid-ceremony would be a ringing phone for\n        // a group nobody has authenticated yet.\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return;\n\n        switch (action) {\n            case CALL_ACTIONS.START: {\n                if (this.call && this.call.callId !== callId) {\n                    // Two calls opened at once. The lower id wins for everyone,\n                    // because every member compares the same two values and gets\n                    // the same answer \u2014 so the group converges on one room\n                    // instead of splitting into two that cannot hear each other.\n                    if (callId >= this.call.callId) return;\n                    // We are being moved off a call we may be in. Say so, so the\n                    // media layer tears the old one down before building the new.\n                    this.call = null;\n                }\n                if (!this.call) {\n                    this.call = {\n                        callId,\n                        startedBy: senderFp,\n                        withVideo,\n                        startedAt: Date.now(),\n                        participants: new Set([senderFp]),\n                        joined: false,\n                    };\n                } else {\n                    this.call.participants.add(senderFp);\n                }\n                this._emitCall();\n                this._scheduleMeshMaintain();\n                return;\n            }\n            case CALL_ACTIONS.JOIN: {\n                if (!this.call || this.call.callId !== callId) return;\n                if (this.call.participants.has(senderFp)) return;\n                this.call.participants.add(senderFp);\n                // A member joining with video turns the call into one that has\n                // video in it; nobody's own camera is turned on by this.\n                if (withVideo) this.call.withVideo = true;\n                this._emitCall();\n                this._scheduleMeshMaintain();\n                return;\n            }\n            case CALL_ACTIONS.LEAVE: {\n                if (!this.call || this.call.callId !== callId) return;\n                this._dropFromCall(senderFp);\n                return;\n            }\n            default:\n                return;\n        }\n    }\n\n    // -----------------------------------------------------------------------\n    // inbound dispatch\n    // -----------------------------------------------------------------------\n\n    /**\n     * Handle one frame that arrived on a pairwise session.\n     *\n     * Everything here is attacker-supplied in the sense that matters: it comes\n     * from a verified peer, but a group member is only as trustworthy as the\n     * group makes them. Types are matched against an explicit list and anything\n     * unrecognised is dropped rather than passed on.\n     */\n    async handleFrame(sessionId, envelope, { relayed = false } = {}) {\n        if (this._destroyed) return;\n        if (!isGroupFrame(envelope)) return;\n        const frame = decodeEnvelope(envelope);\n        if (!frame || !GROUP_FRAME_TYPES.has(frame.type)) return;\n        if (assertGroupId(String(frame.gid || '')) !== this.groupId) return;\n\n        switch (frame.type) {\n            case GROUP_FRAMES.RELAY:\n                return this._onRelay(sessionId, frame);\n            case GROUP_FRAMES.HELLO:\n                return this._onHello(sessionId, frame);\n            case GROUP_FRAMES.MEMBER:\n                return this._onMemberKey(frame);\n            case GROUP_FRAMES.ROSTER:\n                return this._onRoster(sessionId, frame);\n            case GROUP_FRAMES.COMMIT:\n                return this._onCommit(frame);\n            case GROUP_FRAMES.REVEAL:\n                return this._onReveal(frame);\n            case GROUP_FRAMES.MESSAGE:\n                return this._onMessage(frame, { relayed });\n            case GROUP_FRAMES.LEAVE:\n                return this._onLeave(frame);\n            case GROUP_FRAMES.MESH_OFFER:\n                return this._onMeshOffer(frame);\n            case GROUP_FRAMES.MESH_ANSWER:\n                return this._onMeshAnswer(frame);\n            case GROUP_FRAMES.MESH_ABORT:\n                return this._onMeshAbort(frame);\n            case GROUP_FRAMES.CALL:\n                return this._onCall(frame);\n            case GROUP_FRAMES.PROBE:\n                // A probe is a claim about the link it arrived on, so it is only\n                // meaningful on a direct one. Relayed, it says nothing.\n                return relayed ? undefined : this._onProbe(sessionId, frame);\n            case GROUP_FRAMES.INVITE:\n                return; // handled by the app, which decides whether to join at all\n            default:\n                return;\n        }\n    }\n\n    /**\n     * Single-hop relay.\n     *\n     * A frame addressed to us is unwrapped and handled. A frame addressed to\n     * someone else is forwarded exactly once \u2014 `hopped` makes a second forward\n     * impossible, so there is no loop to form and no path to lengthen.\n     */\n    async _onRelay(sessionId, frame) {\n        const to = assertFingerprint(String(frame.to || ''));\n        const inner = frame.inner;\n        if (!isGroupFrame(inner)) return;\n        if (inner.type === GROUP_FRAMES.RELAY) return; // never nest\n\n        if (to === this.selfFp) return this.handleFrame(sessionId, inner, { relayed: true });\n        if (frame.hopped === true) return; // already relayed once; do not forward again\n\n        const member = this.members.get(to);\n        if (!member || member.state !== MEMBER_STATE.LINKED || !member.sessionId) return;\n        await this._wire(member.sessionId, { ...frame, hopped: true });\n    }\n\n    async _onLeave(frame) {\n        const fp = assertFingerprint(String(frame.fp || ''));\n        const member = this.members.get(fp);\n        if (!member || fp === this.selfFp) return;\n        this._emit('left', { fp, name: member.name });\n        this._dropFromCall(fp);\n\n        // The admin leaving ends the group for everyone else. Nobody else can\n        // sign a roster, so there is no next epoch and no safety code to compare\n        // again \u2014 carrying on would leave a group that looks alive but can never\n        // change membership. Say so and let the app tear it down, so the slot is\n        // free when someone starts a new group with the same people.\n        if (!this.isAdmin && fp === this.adminFp) {\n            this.members.delete(fp);\n            for (const [sid, f] of [...this.sessionToFp]) if (f === fp) this.sessionToFp.delete(sid);\n            this._emit('ended', { reason: 'admin_left' });\n            return;\n        }\n\n        // Only the admin rewrites membership; everyone else waits for the roster\n        // that the admin will publish for the new epoch.\n        if (!this.isAdmin) return;\n\n        this.members.delete(fp);\n        for (const [sid, f] of [...this.sessionToFp]) if (f === fp) this.sessionToFp.delete(sid);\n        // Tell the UI immediately. Dropping the member from this map without\n        // emitting left them on the admin's member strip until some later event\n        // happened to refresh it \u2014 a member who had visibly left still shown as\n        // present, which is exactly the wrong thing for a group to be vague about.\n        this._emitMembers();\n\n        // A group of one is not a group. Publishing a roster for it would throw\n        // out of canonicalFingerprints and abort mid-teardown, leaving the group\n        // stuck in a failed state that still occupies the member.\n        if (this.members.size < GROUP_LIMITS.MIN_MEMBERS) {\n            this._emit('ended', { reason: 'last_member_left' });\n            return;\n        }\n\n        this.epoch += 1;\n        await this.publishRoster(MEMBER_OPS.REMOVE);\n    }\n\n    /**\n     * Tell the group we are leaving, best effort.\n     *\n     * Await this before destroy(): teardown clears the member map this walks to\n     * find recipients, so a leave that is merely started can end up addressed to\n     * nobody \u2014 and a peer that never hears it keeps a group nobody is in.\n     */\n    async leave() {\n        try {\n            await this._broadcast({ type: GROUP_FRAMES.LEAVE, gid: this.groupId, fp: this.selfFp });\n        } catch (_) { /* leaving is best effort */ }\n    }\n\n    /**\n     * Admin: invite more people into a group that is already running.\n     *\n     * The group stays usable throughout. Nothing about the membership changes\n     * until the new members have published their identity keys and a roster for\n     * the next epoch actually goes out \u2014 at which point every member, old and\n     * new, runs a fresh commit/reveal round and compares a new code. That is not\n     * ceremony for its own sake: the safety code covers the member set, so a set\n     * that has changed has a different code, and the old one no longer says\n     * anything about who is in the room.\n     *\n     * If nobody answers, the round is abandoned and the group is left exactly as\n     * it was \u2014 which is why the epoch is not touched until the roster is sent.\n     *\n     * @param {{sessionId: string, name: string}[]} peers\n     */\n    async addMembers(peers) {\n        if (!this.isAdmin) throw new GroupSessionError('only the admin invites', 'not_admin');\n        if (!Array.isArray(peers) || peers.length === 0) return 0;\n        if (this._pendingAdd) throw new GroupSessionError('an invitation round is already running', 'add_in_flight');\n        if (this.members.size + peers.length > GROUP_LIMITS.MAX_MEMBERS) {\n            throw new GroupSessionError(`a group is limited to ${GROUP_LIMITS.MAX_MEMBERS} members`, 'too_many_members');\n        }\n\n        // Refuse a session that is already carrying a member: inviting someone\n        // twice would have them answer with a second identity key and occupy two\n        // slots in the safety code.\n        for (const peer of peers) {\n            if (this.sessionToFp.has(peer.sessionId)) {\n                throw new GroupSessionError('that chat is already a member of this group', 'already_a_member');\n            }\n        }\n\n        this._pendingAdd = {\n            op: MEMBER_OPS.ADD,\n            epoch: this.epoch + 1,\n            before: new Set(this.members.keys()),\n        };\n        for (const peer of peers) this._awaitingHello.set(peer.sessionId, peer.name || 'Member');\n\n        // The invitation already names the epoch the new roster will open, so an\n        // invitee adopts it before anything is signed against it.\n        const frame = {\n            type: GROUP_FRAMES.INVITE,\n            gid: this.groupId,\n            epoch: this._pendingAdd.epoch,\n            name: this.name,\n            adminSpki: toB64(this.identity.spki),\n        };\n        const round = this._pendingAdd;\n        const results = await Promise.allSettled(peers.map((p) => this._wire(p.sessionId, frame)));\n        const sent = results.filter((r) => r.status === 'fulfilled').length;\n\n        // Judge \"nothing was sent\" by the SEND RESULTS, never by what is left in\n        // _awaitingHello. On a fast link the invitee's hello comes back \u2014 and the\n        // whole round completes \u2014 inside the very call that sent the invitation,\n        // so by the time this line runs the queue is legitimately empty. Reading\n        // emptiness as failure aborted rounds that had already succeeded.\n        if (sent === 0) {\n            for (const peer of peers) this._awaitingHello.delete(peer.sessionId);\n            if (this._pendingAdd === round) this._pendingAdd = null;\n            throw new GroupSessionError(\n                'the invitation could not be sent \u2014 that chat is not connected',\n                'invitations_could_not_be_sent',\n            );\n        }\n\n        peers.forEach((peer, i) => {\n            if (results[i].status === 'rejected') this._awaitingHello.delete(peer.sessionId);\n        });\n\n        // The round may already be finished; only arm the timer if it is not.\n        if (this._pendingAdd === round) {\n            this._timer(() => { if (this._pendingAdd === round) this._finishAdd(); }, TIMEOUTS.HELLO_MS);\n        }\n        return sent;\n    }\n\n    /**\n     * Close an add round: publish the new roster, or abandon it.\n     *\n     * Reached either when every invitee has answered or when the wait runs out.\n     * A partial answer is still worth publishing \u2014 the people who did join are\n     * in \u2014 but if nobody joined, the group is left untouched rather than pushed\n     * through a re-keying that would achieve nothing except making everyone\n     * compare a new code.\n     */\n    async _finishAdd() {\n        const round = this._pendingAdd;\n        if (!round) return false;\n        this._pendingAdd = null;\n        this._awaitingHello.clear();\n\n        const joined = [...this.members.keys()].filter((fp) => !round.before.has(fp));\n        if (joined.length === 0) {\n            this._emit('add_failed', { reason: 'nobody_joined' });\n            return false;\n        }\n\n        this.epoch = round.epoch;\n        this._emitMembers();\n        await this.publishRoster(round.op);\n        return true;\n    }\n\n    /**\n     * Admin: remove a member and re-key the group.\n     *\n     * The new epoch is what makes the removal effective \u2014 a new safety code every\n     * remaining member must compare again, and a member set the removed member is\n     * not in. There is no shared group key to rotate because there never was one:\n     * every message travels over pairwise ratchets, so a removed member simply\n     * stops being sent anything.\n     */\n    async removeMember(fp) {\n        if (!this.isAdmin) throw new GroupSessionError('only the admin removes members', 'not_admin');\n        if (fp === this.selfFp) throw new GroupSessionError('the admin cannot remove themselves', 'bad_target');\n        if (!this.members.has(fp)) return false;\n        if (this.members.size - 1 < GROUP_LIMITS.MIN_MEMBERS) {\n            throw new GroupSessionError('a group cannot drop below two members \u2014 leave it instead', 'would_empty_group');\n        }\n        this.members.delete(fp);\n        for (const [sid, f] of [...this.sessionToFp]) if (f === fp) this.sessionToFp.delete(sid);\n        this.epoch += 1;\n        this._emitMembers();\n        await this.publishRoster(MEMBER_OPS.REMOVE);\n        return true;\n    }\n}\n", "// Paced, serialised delivery of group frames over pairwise sessions.\n//\n// WHY THIS EXISTS\n// ---------------\n// A group frame rides `EnhancedSecureWebRTCManager.sendMessage`, which is the\n// right call \u2014 it inherits the session's encryption, ratchet, replay protection\n// and verification gate without adding a second path through the transport. But\n// that path is rate limited, and the accounting is not what it looks like:\n// `sendMessage` checks the limiter and then hands off to `sendSecureMessage`,\n// which checks the SAME shared counter again. One frame therefore spends two of\n// the ten burst slots available per second.\n//\n// Forming a group sends six frames back to back on one session \u2014 invite, two\n// member keys, roster, commit, reveal \u2014 which asks for twelve slots out of ten.\n// The overflow was rejected, and rejected as a plain `Error` with no code, so it\n// surfaced to the user as a meaningless `frame_rejected`; the peer that never\n// received the dropped frame simply waited until the ceremony timed out. Two\n// different symptoms, one cause.\n//\n// The fix belongs here rather than in the limiter. Widening the burst allowance\n// would loosen a control that exists for the 1:1 chat, to suit a caller that can\n// perfectly well wait: five frames a second makes group formation take about a\n// second and a half, which nobody notices.\n//\n// Sends are also SERIALISED per session. The protocol is order-dependent \u2014 a\n// commitment must reach a peer before the reveal that opens it \u2014 and firing\n// several `sendMessage` calls concurrently at one channel puts that ordering at\n// the mercy of the manager's internal mutex.\n//\n// Time is injected so the pacing can be tested without waiting for it.\n\n/**\n * Minimum gap between two group frames on one session, in milliseconds.\n * Two limiter slots per frame against a ten-per-second burst means five frames\n * per second is the real budget; 260ms leaves a little headroom.\n */\nexport const GROUP_SEND_GAP_MS = 260;\n\n/** How many times a rate-limited frame is retried before giving up. */\nexport const GROUP_SEND_ATTEMPTS = 4;\n\nconst isRateLimit = (error) => /rate limit/i.test(error?.message || '');\n\n/**\n * Build the `send` function a GroupSession is constructed with.\n *\n * @param {object} opts\n * @param {(sessionId: string) => object|null} opts.getManager  resolve a live manager\n * @param {number} [opts.gapMs]\n * @param {number} [opts.attempts]\n * @param {() => number} [opts.now]\n * @param {(ms: number) => Promise<void>} [opts.sleep]\n */\nexport function createGroupSender({\n    getManager,\n    gapMs = GROUP_SEND_GAP_MS,\n    attempts = GROUP_SEND_ATTEMPTS,\n    now = () => Date.now(),\n    sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)),\n} = {}) {\n    /** sessionId -> { chain, lastAt } */\n    const queues = new Map();\n\n    return async function sendGroupFrame(sessionId, frame) {\n        const manager = getManager(sessionId);\n        if (!manager || typeof manager.sendMessage !== 'function') throw new Error('no such link');\n        if (typeof manager.isConnected === 'function' && !manager.isConnected()) {\n            throw new Error('link is down');\n        }\n\n        const queue = queues.get(sessionId) || { chain: Promise.resolve(), lastAt: 0 };\n        const payload = JSON.stringify(frame);\n\n        const run = queue.chain.then(async () => {\n            const wait = gapMs - (now() - queue.lastAt);\n            if (wait > 0) await sleep(wait);\n\n            let lastError = null;\n            for (let attempt = 0; attempt < attempts; attempt++) {\n                try {\n                    await manager.sendMessage(payload);\n                    queue.lastAt = now();\n                    return true;\n                } catch (error) {\n                    lastError = error;\n                    // Only a rate-limit rejection is worth retrying. A closed\n                    // channel or a refused verification gate will not improve by\n                    // being asked again, and retrying would just delay the error\n                    // the caller needs to see.\n                    if (!isRateLimit(error)) throw error;\n                    await sleep(gapMs * (attempt + 1));\n                }\n            }\n            throw lastError;\n        });\n\n        // The chain has to survive a failure. Leaving a rejected promise in it\n        // would wedge every later frame on that session behind the first error.\n        queue.chain = run.catch(() => {});\n        queues.set(sessionId, queue);\n        return run;\n    };\n}\n", "// Motion primitives \u2014 Apple's \"Designing Fluid Interfaces\" physics, on the web.\n//\n// The whole point of this file is that a gesture-driven interface cannot be built\n// out of CSS transitions. A transition runs from a value it captured when it\n// started, for a duration fixed in advance; grab the element halfway through and\n// it either ignores you or snaps. A spring has no duration \u2014 it always integrates\n// from wherever the thing currently *is*, at whatever speed it is currently\n// moving \u2014 so it can be interrupted, re-targeted and reversed mid-flight without\n// a visible seam. Everything here exists to serve that one property.\n//\n// Nothing in here is a dependency. The app ships offline as a PWA and has no\n// bundled animation library; these are ~150 lines of physics instead of ~30KB.\n\n// Apple exposes two designer-facing parameters instead of mass/stiffness/damping:\n//\n//   damping (ratio)  1.0 = critically damped, settles without overshoot.\n//                    < 1.0 overshoots; lower is bouncier.\n//   response (s)     how quickly the value reaches the target. NOT a duration \u2014\n//                    a spring's settle time emerges from the parameters.\n//\n// These are the values Apple ships, and the ones to reach for by default.\nexport const SPRING = {\n    // Move / reposition something. No overshoot: a panel that bounces when it\n    // was not thrown reads as decoration.\n    move:   { damping: 1.0, response: 0.4 },\n    // A sheet or drawer the user dragged. The bounce is earned \u2014 the gesture\n    // carried momentum into it.\n    drawer: { damping: 0.8, response: 0.3 },\n    // Rotation.\n    rotate: { damping: 0.8, response: 0.4 }\n};\n\n// Integration step. Fixed and small, so the same gesture produces the same\n// motion on a 60Hz phone and a 120Hz iPad \u2014 frame-rate must not be a physics\n// parameter.\nconst DT = 1 / 480;\nconst MAX_FRAME = 0.064; // clamp after a stall, or the spring explodes\n\n/**\n * True when the user has asked the system for less motion.\n *\n * Read live rather than cached: the setting can be flipped while the app is\n * open, and a long-lived PWA session would otherwise keep animating.\n */\nexport function prefersReducedMotion() {\n    try {\n        return typeof matchMedia === 'function' &&\n            matchMedia('(prefers-reduced-motion: reduce)').matches;\n    } catch (_) {\n        return false;\n    }\n}\n\n/**\n * Where a flick would come to rest, if you let it decelerate.\n *\n * This is the exponential-decay projection from Apple's sample code, not the\n * textbook v\u00B2/2a. Use it to pick which snap point a gesture was aiming at:\n * snapping to whatever is nearest the *release* point throws away the user's\n * velocity and makes a fast flick feel identical to a slow drag.\n *\n * @param {number} velocity px/s at release\n * @param {number} decelerationRate 0.998 \u2248 normal scroll feel, 0.99 snappier\n * @returns {number} signed distance the gesture would still travel\n */\nexport function project(velocity, decelerationRate = 0.998) {\n    return (velocity / 1000) * decelerationRate / (1 - decelerationRate);\n}\n\n/**\n * Which snap point a release was aiming at.\n *\n * Two rules, in this order:\n *\n *   A deliberate flick is decided by its *direction*. Someone who threw a panel\n *   leftwards meant \"away\", even if they let go while it was still nearer the\n *   open position than the closed one \u2014 position at the moment of release says\n *   nothing about intent when the hand is still moving fast.\n *\n *   A slow drag has no direction worth trusting, so it is decided by where its\n *   remaining momentum would have carried it. That is still not the same as\n *   \"nearest the release point\": a gentle push that was clearly going somewhere\n *   should be allowed to arrive.\n *\n * @param {number} position current value at release\n * @param {number} velocity px/s at release\n * @param {number[]} points the values it is allowed to rest at\n * @param {object} [o]\n * @param {number} [o.flick] px/s above which direction wins over projection\n * @param {number} [o.decelerationRate] passed through to project()\n */\nexport function snapTarget(position, velocity, points, o = {}) {\n    const { flick = 220, decelerationRate = 0.998 } = o;\n    if (!points || !points.length) return position;\n    const projected = position + project(velocity, decelerationRate);\n    let pool = points;\n    if (Math.abs(velocity) > flick) {\n        const ahead = points.filter((p) => (velocity > 0 ? p >= position : p <= position));\n        if (ahead.length) pool = ahead;\n    }\n    return pool.reduce(\n        (best, p) => (Math.abs(p - projected) < Math.abs(best - projected) ? p : best),\n        pool[0]\n    );\n}\n\n/**\n * Progressive resistance past a boundary.\n *\n * A hard stop reads as \"the app froze\". Continuous resistance reads as\n * \"responsive, but there is nothing more this way\" \u2014 the finger keeps moving\n * and the element keeps answering, just less and less.\n *\n * @param {number} overshoot how far past the bound the pointer is (px, signed)\n * @param {number} dimension the size the resistance is scaled against (px)\n * @param {number} constant lower = stiffer\n */\nexport function rubberband(overshoot, dimension, constant = 0.55) {\n    if (!dimension) return 0;\n    return (overshoot * dimension * constant) / (dimension + constant * Math.abs(overshoot));\n}\n\n/**\n * Tracks a short position history so a release can be handed a real velocity.\n *\n * The instantaneous delta between the last two pointer events is far too noisy\n * to animate from \u2014 one stalled frame and a fast flick reports as a dead stop.\n * Averaging over a small trailing window is what makes the handoff invisible.\n */\nexport function velocityTracker(windowMs = 100) {\n    const samples = [];\n    return {\n        add(value, time = performance.now()) {\n            samples.push({ value, time });\n            while (samples.length > 2 && time - samples[0].time > windowMs) samples.shift();\n        },\n        /** @returns {number} px/s over the trailing window */\n        get(now = performance.now()) {\n            if (samples.length < 2) return 0;\n            const last = samples[samples.length - 1];\n            // A pointer that has been still for a while has stopped, whatever\n            // the older samples say.\n            if (now - last.time > windowMs) return 0;\n            const first = samples[0];\n            const dt = (last.time - first.time) / 1000;\n            if (dt <= 0) return 0;\n            return (last.value - first.value) / dt;\n        },\n        reset() { samples.length = 0; }\n    };\n}\n\n/**\n * A spring animation that can be interrupted, re-targeted and reversed.\n *\n * The handle deliberately exposes live `value` and `velocity`: that is what a\n * gesture needs when it grabs a moving element \u2014 it must continue from the\n * *presentation* value, never from the logical target, or the element jumps.\n *\n * @param {object} o\n * @param {number} o.from starting value\n * @param {number} o.to target value\n * @param {number} [o.velocity] initial velocity, px/s \u2014 hand the release velocity here\n * @param {number} [o.damping] 1 = no overshoot, < 1 bounces\n * @param {number} [o.response] seconds to reach the target\n * @param {number} [o.restDelta] how close counts as arrived\n * @param {number} [o.restSpeed] how slow counts as stopped, px/s\n * @param {boolean} [o.respectReducedMotion] jump to the target instead of animating\n * @param {(v:number)=>void} [o.onUpdate]\n * @param {()=>void} [o.onComplete]\n */\nexport function spring(o) {\n    const {\n        from, to, velocity = 0,\n        damping = SPRING.move.damping,\n        response = SPRING.move.response,\n        restDelta = 0.1, restSpeed = 0.5,\n        respectReducedMotion = true,\n        onUpdate, onComplete\n    } = o;\n\n    let value = from;\n    let vel = velocity;\n    let target = to;\n    let raf = 0;\n    let last = 0;\n    let done = false;\n\n    const omega = (2 * Math.PI) / response;\n    const zeta = damping;\n\n    const finish = () => {\n        done = true;\n        raf = 0;\n        value = target;\n        vel = 0;\n        if (onUpdate) onUpdate(value);\n        if (onComplete) onComplete();\n    };\n\n    // Reduced motion means no vestibular travel \u2014 but it does not mean no\n    // feedback. The caller still gets its final value; it is up to the caller\n    // to cross-fade instead of slide.\n    if (respectReducedMotion && prefersReducedMotion()) {\n        finish();\n        return {\n            get value() { return value; },\n            get velocity() { return 0; },\n            get done() { return true; },\n            retarget(next) { target = next; finish(); },\n            stop() {}\n        };\n    }\n\n    const step = (now) => {\n        raf = 0;\n        const frame = Math.min((now - last) / 1000, MAX_FRAME);\n        last = now;\n\n        // Semi-implicit Euler at a fixed sub-step. Explicit Euler at frame size\n        // is unstable for a stiff spring; this stays well inside the stability\n        // bound for every response value we use.\n        let t = frame;\n        while (t > 0) {\n            const dt = Math.min(DT, t);\n            const accel = -omega * omega * (value - target) - 2 * zeta * omega * vel;\n            vel += accel * dt;\n            value += vel * dt;\n            t -= dt;\n        }\n\n        if (Math.abs(value - target) < restDelta && Math.abs(vel) < restSpeed) {\n            finish();\n            return;\n        }\n        if (onUpdate) onUpdate(value);\n        raf = requestAnimationFrame(step);\n    };\n\n    last = performance.now();\n    raf = requestAnimationFrame(step);\n\n    return {\n        get value() { return value; },\n        get velocity() { return vel; },\n        get done() { return done; },\n        /**\n         * Point the spring somewhere else without touching its current velocity.\n         *\n         * This is the anti-\"brick wall\" move. Killing this animation and starting\n         * a new one at velocity 0 puts a discontinuity exactly where the user\n         * reversed direction, which is the moment they are most attentive.\n         */\n        retarget(next) { target = next; },\n        stop() {\n            if (raf) cancelAnimationFrame(raf);\n            raf = 0;\n            done = true;\n        }\n    };\n}\n", "// An offer to switch language \u2014 never a redirect.\n//\n// The tempting version of this feature is to read navigator.language on load and send\n// the visitor to the matching locale. It breaks the site for search engines in a way\n// that is invisible from a browser: Googlebot crawls with a single language (en) from a\n// single place, so a language redirect answers every one of the thirteen locale URLs\n// with the English page. The twelve translations then have no indexable document of\n// their own, the hreflang cluster they are declared in contradicts what the crawler\n// actually receives, and the work of translating the site earns nothing. It is also\n// wrong for people: a link shared into a German group chat has to open in German for\n// everyone who follows it, including the person whose laptop is set to English.\n//\n// So the URL stays authoritative and this bar carries the whole feature. It appears only\n// when the page being read is not the language the visitor probably wants, it says so in\n// that language, and it offers a normal link. Dismissing it is remembered for good.\n//\n// Landing only, like the switcher: following the link is a navigation, and a navigation\n// during a session drops the peer connection.\n\nimport {\n    LOCALE_META,\n    dismissLocaleSuggestion,\n    localeHref,\n    localeSuggestionDismissed,\n    rememberLocale,\n    storedLocale,\n    suggestedLocale,\n    t,\n} from '../../i18n/index.js';\nimport { prefersReducedMotion } from '../../ui/motion.js';\n\nconst LanguageSuggestion = () => {\n    // Resolved once, at mount: the answer cannot change without a navigation, and\n    // re-deriving it on every render would mean a storage read per render.\n    const [target] = React.useState(() => {\n        if (typeof window === 'undefined' || !window.location) return null;\n        if (localeSuggestionDismissed()) return null;\n        return suggestedLocale({\n            pathname: window.location.pathname || '/',\n            languages: window.navigator?.languages || [],\n            stored: storedLocale(),\n        });\n    });\n    const [gone, setGone] = React.useState(false);\n    // Mounted invisible, then raised on the next frame, so the bar arrives rather than\n    // being part of the first paint \u2014 the page's own content should land first.\n    const [shown, setShown] = React.useState(false);\n\n    React.useEffect(() => {\n        if (!target) return undefined;\n        const id = setTimeout(() => setShown(true), 600);\n        return () => clearTimeout(id);\n    }, [target]);\n\n    if (!target || gone) return null;\n\n    const meta = LOCALE_META[target] || {};\n    const dir = meta.dir === 'rtl' ? 'rtl' : 'ltr';\n    const pathname = typeof window !== 'undefined' ? window.location.pathname : '/';\n    const href = localeHref(target, pathname);\n    const still = prefersReducedMotion();\n\n    const close = () => {\n        dismissLocaleSuggestion();\n        setGone(true);\n    };\n\n    // The copy is in the language being offered \u2014 the point of the bar is to be readable\n    // by someone who cannot read the page it sits on. `dir` and `lang` come with it, so\n    // Arabic in this bar is laid out as Arabic even on the English page.\n    const line = React.createElement('div', {\n        key: 'line',\n        lang: meta.htmlLang || target,\n        dir,\n        style: { fontSize: '13px', lineHeight: 1.45, color: 'var(--sb-text-4)', textAlign: 'start' },\n    }, t('language.suggest.text', null, target));\n\n    const link = React.createElement('a', {\n        key: 'cta',\n        href,\n        hrefLang: meta.htmlLang || target,\n        lang: meta.htmlLang || target,\n        dir,\n        // Following the link is an explicit choice, so it is remembered \u2014 the bar has\n        // then done its job and will not be offered again.\n        onClick: () => { rememberLocale(target); dismissLocaleSuggestion(); },\n        style: {\n            display: 'inline-flex', alignItems: 'center', gap: '6px',\n            padding: '7px 12px', borderRadius: '9px',\n            border: '1px solid rgba(var(--sb-orange-rgb), 0.30)', background: 'rgba(var(--sb-orange-rgb), 0.12)',\n            color: 'var(--sb-orange)', fontSize: '12.5px', fontWeight: 600,\n            textDecoration: 'none', whiteSpace: 'nowrap',\n        },\n    }, t('language.suggest.cta', null, target));\n\n    const dismiss = React.createElement('button', {\n        key: 'dismiss',\n        type: 'button',\n        onClick: close,\n        // Labelled in the offered language too: this button is for the same reader.\n        'aria-label': t('language.suggest.dismiss', null, target),\n        style: {\n            padding: '7px 10px', borderRadius: '9px',\n            border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)',\n            color: 'var(--sb-text-7)', font: 'inherit', fontSize: '12.5px', fontWeight: 500,\n            cursor: 'pointer', whiteSpace: 'nowrap',\n        },\n    }, t('language.suggest.dismiss', null, target));\n\n    return React.createElement('div', {\n        // A region rather than a dialog: it interrupts nothing and takes no focus.\n        role: 'region',\n        'aria-label': t('language.label'),\n        style: {\n            // Bottom inline-start, because the install prompt owns the opposite corner.\n            position: 'fixed', bottom: '24px', insetInlineStart: '24px', zIndex: 50,\n            maxWidth: 'min(340px, calc(100vw - 48px))',\n            display: 'flex', flexDirection: 'column', gap: '11px',\n            padding: '14px 16px', borderRadius: '14px',\n            border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)',\n            boxShadow: '0 16px 40px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))',\n            opacity: shown ? 1 : 0,\n            transform: shown || still ? 'none' : 'translateY(10px)',\n            transition: still ? 'opacity .2s linear' : 'opacity .3s ease, transform .3s cubic-bezier(.2,.7,.3,1)',\n            // Invisible and untouchable until raised, so it cannot swallow a tap during\n            // the fade.\n            pointerEvents: shown ? 'auto' : 'none',\n        },\n    }, [\n        line,\n        React.createElement('div', {\n            key: 'actions',\n            style: { display: 'flex', alignItems: 'center', gap: '8px' },\n        }, [link, dismiss]),\n    ]);\n};\n\nwindow.LanguageSuggestion = LanguageSuggestion;\n\nexport { LanguageSuggestion };\n", "import { t } from '../../i18n/index.js';\n// Group chat surfaces: the conversation view, the safety-code ceremony, the\n// create dialog and the inbound invitation.\n//\n// These render from the reducer's group entry and call back into the app; they\n// hold no protocol state and no key material. The safety-code modal is the one\n// piece here that carries security weight, so it is deliberately blunt: it shows\n// the digits, says who has to compare them and how, and offers no way to skip.\n//\n// React is a global in this app (loaded before the bundle), matching app.jsx.\n\nimport { GROUP_PHASE, MEMBER_STATE, groupInitials } from '../../state/groupsStore.js';\nimport { GROUP_LIMITS } from '../../group/groupCrypto.js';\n\nconst h = (...args) => React.createElement(...args);\n\nconst C = {\n    bg: 'var(--sb-bg-deep)',\n    panel: 'var(--sb-surface)',\n    panel2: 'var(--sb-surface-2)',\n    line: 'rgba(var(--sb-ink), 0.07)',\n    line2: 'rgba(var(--sb-ink), 0.13)',\n    ink: 'var(--sb-text-1)',\n    ink2: 'var(--sb-text-5b)',\n    ink3: 'var(--sb-text-9)',\n    // Two forms of each accent. The plain one is for text and darkens in the light\n    // theme so it clears 4.5:1 on white; the -Solid one is for anything painted \u2014 a\n    // button's ground, a checkbox, a dot, the safety code \u2014 and is the brand colour in\n    // both themes, because what sits on it is near-black either way. Reaching for the\n    // wrong one is how every accent button in this file came out brown.\n    accent: 'var(--sb-orange)',\n    good: 'var(--sb-green)',\n    warn: 'var(--sb-yellow-2)',\n    bad: 'var(--sb-red)',\n    accentSolid: 'var(--sb-orange-solid)',\n    goodSolid: 'var(--sb-green-solid)',\n    warnSolid: 'var(--sb-yellow-2-solid)',\n    badSolid: 'var(--sb-red-solid)',\n    mono: \"'JetBrains Mono', ui-monospace, monospace\",\n};\n\nconst ICON = {\n    users: '<svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19\"/><circle cx=\"10\" cy=\"8\" r=\"3.2\"/><path d=\"M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4\"/><path d=\"M15.5 5.3a3.2 3.2 0 0 1 0 5.4\"/></svg>',\n    send: '<svg width=\"17\" height=\"17\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M22 2 11 13\"/><path d=\"m22 2-7 20-4-9-9-4 20-7z\"/></svg>',\n    shield: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z\"/><path d=\"m9 12 2 2 4-4\"/></svg>',\n    x: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\"><path d=\"M18 6 6 18M6 6l12 12\"/></svg>',\n    plus: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.2\" stroke-linecap=\"round\"><path d=\"M12 5v14M5 12h14\"/></svg>',\n    relay: '<svg width=\"13\" height=\"13\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M4 12h4l3-7 4 14 3-7h2\"/></svg>',\n    phone: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\"/></svg>',\n    exit: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M10 20H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h4\"/><path d=\"m15 16 4-4-4-4\"/><path d=\"M19 12H10\"/></svg>',\n    video: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M23 7l-7 5 7 5V7z\"/><rect x=\"1\" y=\"5\" width=\"15\" height=\"14\" rx=\"2.5\"/></svg>',\n};\n\nconst svg = (markup, extra = {}) => h('span', {\n    style: { display: 'grid', placeItems: 'center', ...extra },\n    dangerouslySetInnerHTML: { __html: markup },\n});\n\nconst btn = (accent = false) => ({\n    display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '8px',\n    padding: '11px 18px', borderRadius: '10px', cursor: 'pointer',\n    fontFamily: 'inherit', fontSize: '14px', fontWeight: 700,\n    border: accent ? 'none' : `1px solid ${C.line2}`,\n    background: accent ? C.accentSolid : 'transparent',\n    color: accent ? 'var(--sb-on-accent)' : C.ink2,\n});\n\nconst overlay = {\n    position: 'fixed', inset: 0, zIndex: 90, display: 'grid', placeItems: 'center',\n    background: 'rgba(var(--sb-scrim-rgb), 0.72)', backdropFilter: 'blur(6px)', padding: '20px',\n};\n\nconst card = {\n    width: '100%', maxWidth: '440px', background: C.panel, border: `1px solid ${C.line}`,\n    borderRadius: '16px', padding: '24px', display: 'flex', flexDirection: 'column', gap: '18px',\n    boxShadow: '0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))',\n};\n\n/** Trim a string so its UTF-8 encoding fits `max` bytes, never mid-character. */\nfunction clampToBytes(value, max) {\n    const enc = new TextEncoder();\n    let out = String(value);\n    while (enc.encode(out).length > max) out = out.slice(0, -1);\n    return out;\n}\n\nconst label = {\n    fontFamily: C.mono, fontSize: '10px', fontWeight: 700, letterSpacing: '1.3px',\n    textTransform: 'uppercase', color: C.ink3,\n};\n\n// ---------------------------------------------------------------------------\n// the safety-code ceremony\n// ---------------------------------------------------------------------------\n\n/**\n * The group's safety code.\n *\n * Every member sees the same seven digits, and the comparison has to happen over\n * something an attacker cannot impersonate. The copy says so plainly, because\n * this is the step that distinguishes the intended group from a member who\n * introduced two people and sat between them \u2014 the code is the only thing that\n * catches it, and a user who dismisses it has verified nothing.\n */\n/**\n * What to say while there is no code yet.\n *\n * This used to collapse to t('group.exchangingNonces') for every phase that was not\n * COMMITTING \u2014 which included FAILED. A group that had actually died therefore\n * looked identical to one still working, the confirm button stayed disabled, and\n * the only visible symptom was a dialog that never finished. Naming the real\n * state is the difference between a hang and a diagnosis.\n */\nfunction waitingWord(group) {\n    switch (group.phase) {\n        case GROUP_PHASE.FORMING: return t('group.waitingJoin');\n        case GROUP_PHASE.COMMITTING: return t('group.waitingCommit');\n        case GROUP_PHASE.REVEALING: return t('group.exchangingNonces');\n        case GROUP_PHASE.FAILED: return GROUP_ERROR_WORD[group.error] || t('group.errNotFormed');\n        default: return t('group.working');\n    }\n}\n\n/** Failure codes from GroupSession, in words a person can act on. */\nconst GROUP_ERROR_WORD = {\n    invitations_could_not_be_sent: t('group.errInviteFailed'),\n    invitees_did_not_respond: t('group.errNobodyAccepted'),\n    roster_never_arrived: t('group.errNoMemberList'),\n    ceremony_timed_out: t('groupErr.timeout'),\n    bad_signature: t('group.errUnsignedList'),\n    wrong_admin: t('group.errNotOwner'),\n    fingerprint_mismatch: t('groupErr.keyMismatch'),\n    commitment_mismatch: t('groupErr.revealMismatch'),\n    commitment_changed: t('groupErr.commitChanged'),\n    missing_member_key: t('groupErr.missingKey'),\n    not_a_member: t('groupErr.outsider'),\n    bad_name: t('group.nameTooLong'),\n    too_many_members: t('groupErr.limit'),\n    frame_too_large: t('groupErr.tooLarge'),\n};\n\nexport function GroupSasModal({ group, onConfirm, onCancel }) {\n    if (!group) return null;\n    const failed = group.phase === GROUP_PHASE.FAILED;\n    const waiting = group.phase !== GROUP_PHASE.AWAITING_SAS || !group.sasCode;\n\n    return h('div', { style: overlay, role: 'dialog', 'aria-modal': 'true' },\n        h('div', { style: card }, [\n            h('div', { key: 'h', style: { display: 'flex', flexDirection: 'column', gap: '6px' } }, [\n                h('span', { key: 'l', style: label }, t('group.sasTitle')),\n                h('h3', { key: 't', style: { margin: 0, fontSize: '19px', fontWeight: 700, color: C.ink } }, group.name),\n            ]),\n\n            waiting\n                ? h('div', {\n                    key: 'wait',\n                    style: {\n                        padding: '28px 16px', textAlign: 'center', borderRadius: '12px',\n                        background: C.panel2, border: `1px solid ${C.line}`, color: C.ink2, fontSize: '14px',\n                    },\n                }, [\n                    h('div', {\n                        key: 'd',\n                        style: {\n                            fontFamily: C.mono, fontSize: '26px', letterSpacing: '6px',\n                            color: failed ? C.bad : C.ink3,\n                        },\n                    }, '\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7'),\n                    h('div', { key: 's', style: { marginTop: '10px', color: failed ? C.bad : C.ink2 } }, waitingWord(group)),\n                    failed && h('div', {\n                        key: 'why',\n                        style: { marginTop: '6px', fontFamily: C.mono, fontSize: '11px', color: C.ink3 },\n                    }, group.error || 'unknown'),\n                ])\n                : h('div', {\n                    key: 'code',\n                    style: {\n                        padding: '22px 16px', textAlign: 'center', borderRadius: '12px',\n                        background: 'rgba(var(--sb-orange-rgb), 0.09)', border: '1px solid rgba(var(--sb-orange-rgb), 0.3)',\n                    },\n                }, h('span', {\n                    // Everyone in the group compares these digits against each other's\n                    // screens, so their order must not depend on the reader's language.\n                    dir: 'ltr',\n                    style: {\n                        fontFamily: C.mono, fontSize: 'clamp(30px, 9vw, 42px)', fontWeight: 700,\n                        letterSpacing: '9px', color: C.accentSolid, unicodeBidi: 'isolate',\n                    },\n                }, group.sasCode)),\n\n            h('p', {\n                key: 'why',\n                style: { margin: 0, fontSize: '13.5px', lineHeight: 1.62, color: C.ink2 },\n            }, [\n                t('group.sasReadAloud'), h('b', { key: 'b', style: { color: C.ink } }, `all ${group.members.length - 1} other members`),\n                ' \u2014 in person, or on a call where you recognise every voice. Everyone must see the same code.',\n            ]),\n\n            h('p', {\n                key: 'warn',\n                style: {\n                    margin: 0, padding: '11px 13px', borderRadius: '9px', fontSize: '12.5px', lineHeight: 1.55,\n                    background: 'rgba(var(--sb-red-rgb), 0.09)', border: '1px solid rgba(var(--sb-red-rgb), 0.26)', color: 'var(--sb-red-soft)',\n                },\n            }, failed\n                ? t('group.errNothingSent')\n                : t('group.sasWarning')),\n\n            h('div', { key: 'actions', style: { display: 'flex', gap: '10px' } }, [\n                h('button', { key: 'c', onClick: onCancel, style: { ...btn(failed), flex: failed ? 2 : 1 } },\n                    failed ? t('group.close') : t('group.cancel')),\n                !failed && h('button', {\n                    key: 'ok', onClick: onConfirm, disabled: waiting,\n                    style: { ...btn(true), flex: 2, opacity: waiting ? 0.4 : 1, cursor: waiting ? 'not-allowed' : 'pointer' },\n                }, [svg(ICON.shield, { key: 'i' }), t('group.sasEveryone')]),\n            ]),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// creating a group\n// ---------------------------------------------------------------------------\n\n/**\n * Pick members from the 1:1 chats that are already verified.\n *\n * Only verified sessions are offered. A group built on an unverified session\n * would inherit that session's uncertainty and hide it behind a group code that\n * looks like it settled the question.\n */\nexport function CreateGroupModal({ candidates, relayOnly, onCreate, onCancel }) {\n    const [name, setName] = React.useState('');\n    const [picked, setPicked] = React.useState([]);\n    const max = GROUP_LIMITS.MAX_MEMBERS - 1; // the creator takes one slot\n\n    const toggle = (id) => setPicked((prev) => (\n        prev.includes(id) ? prev.filter((x) => x !== id)\n            : prev.length >= max ? prev : [...prev, id]\n    ));\n\n    const ready = name.trim().length > 0 && picked.length >= 1;\n\n    return h('div', { style: overlay, role: 'dialog', 'aria-modal': 'true' },\n        h('div', { style: { ...card, maxWidth: '470px' } }, [\n            h('div', { key: 'h', style: { display: 'flex', flexDirection: 'column', gap: '6px' } }, [\n                h('span', { key: 'l', style: label }, t('group.new')),\n                h('p', {\n                    key: 'p',\n                    style: { margin: 0, fontSize: '13.5px', lineHeight: 1.6, color: C.ink2 },\n                }, t('group.capacity', { max: GROUP_LIMITS.MAX_MEMBERS })),\n            ]),\n\n            h('input', {\n                key: 'name',\n                value: name,\n                // Clamped by BYTES, because that is the limit the protocol\n                // enforces. Counting characters here let a Cyrillic name through\n                // the dialog that the admin's roster signing then rejected.\n                onChange: (e) => setName(clampToBytes(e.target.value, GROUP_LIMITS.MAX_NAME_BYTES)),\n                placeholder: t('group.name'),\n                style: {\n                    width: '100%', padding: '12px 14px', borderRadius: '10px', outline: 'none',\n                    background: C.panel2, border: `1px solid ${C.line2}`, color: C.ink,\n                    fontFamily: 'inherit', fontSize: '14.5px',\n                },\n            }),\n\n            h('div', { key: 'pick', style: { display: 'flex', flexDirection: 'column', gap: '9px' } }, [\n                h('div', { key: 'l', style: { display: 'flex', justifyContent: 'space-between', alignItems: 'baseline' } }, [\n                    h('span', { key: 'a', style: label }, t('group.members')),\n                    h('span', { key: 'b', style: { ...label, color: picked.length >= max ? C.warn : C.ink3 } },\n                        `${picked.length} / ${max}`),\n                ]),\n                candidates.length === 0\n                    ? h('div', {\n                        key: 'empty',\n                        style: {\n                            padding: '18px 14px', borderRadius: '10px', textAlign: 'center',\n                            background: C.panel2, border: `1px dashed ${C.line2}`, color: C.ink3, fontSize: '13px', lineHeight: 1.55,\n                        },\n                    }, t('group.noVerified'))\n                    : h('div', {\n                        key: 'list',\n                        className: 'msc-scroll',\n                        style: { display: 'flex', flexDirection: 'column', gap: '6px', maxHeight: '240px', overflowY: 'auto' },\n                    }, candidates.map((c) => {\n                        const on = picked.includes(c.id);\n                        const full = !on && picked.length >= max;\n                        return h('button', {\n                            key: c.id,\n                            onClick: () => toggle(c.id),\n                            disabled: full,\n                            style: {\n                                display: 'flex', alignItems: 'center', gap: '11px', padding: '10px 12px',\n                                borderRadius: '10px', cursor: full ? 'not-allowed' : 'pointer', textAlign: 'start',\n                                background: on ? 'rgba(var(--sb-orange-rgb), 0.1)' : 'transparent',\n                                border: `1px solid ${on ? 'rgba(var(--sb-orange-rgb), 0.32)' : C.line}`,\n                                opacity: full ? 0.4 : 1, fontFamily: 'inherit',\n                            },\n                        }, [\n                            h('span', {\n                                key: 'av',\n                                style: {\n                                    flex: 'none', width: '32px', height: '32px', borderRadius: '9px', display: 'grid',\n                                    placeItems: 'center', background: C.panel2, border: `1px solid ${C.line}`,\n                                    fontFamily: C.mono, fontSize: '11px', fontWeight: 700, color: C.ink2,\n                                },\n                            }, c.mono),\n                            h('span', { key: 'n', style: { flex: 1, minWidth: 0, fontSize: '14px', color: C.ink, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, c.name),\n                            h('span', {\n                                key: 'tick',\n                                style: {\n                                    flex: 'none', width: '18px', height: '18px', borderRadius: '5px',\n                                    background: on ? C.accentSolid : 'transparent',\n                                    border: `1px solid ${on ? C.accentSolid : C.line2}`,\n                                },\n                            }),\n                        ]);\n                    })),\n            ]),\n\n            // A group is a bigger exposure than a 1:1 chat: without a relay, every\n            // member's address is visible to every other member, including people\n            // the user did not personally invite. Say it before they commit, not\n            // after.\n            !relayOnly && h('p', {\n                key: 'ip',\n                style: {\n                    margin: 0, padding: '11px 13px', borderRadius: '9px', fontSize: '12.5px', lineHeight: 1.55,\n                    background: 'rgba(var(--sb-yellow-2-rgb), 0.08)', border: '1px solid rgba(var(--sb-yellow-2-rgb), 0.26)', color: 'var(--sb-yellow-2)',\n                },\n            }, t('group.relayOnlyOff')),\n\n            h('div', { key: 'actions', style: { display: 'flex', gap: '10px' } }, [\n                h('button', { key: 'c', onClick: onCancel, style: { ...btn(false), flex: 1 } }, t('group.cancelBtn')),\n                h('button', {\n                    key: 'ok',\n                    onClick: () => ready && onCreate({ name: name.trim(), sessionIds: picked }),\n                    disabled: !ready,\n                    style: { ...btn(true), flex: 2, opacity: ready ? 1 : 0.4, cursor: ready ? 'pointer' : 'not-allowed' },\n                }, t('group.create')),\n            ]),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// something went wrong forming a group\n// ---------------------------------------------------------------------------\n\n/**\n * Says what failed and what to do about it.\n *\n * Group formation runs across several links at once, so a failure here is\n * usually one dead connection rather than anything the user did wrong. The\n * message names the cause; there is nothing to retry automatically, because a\n * link that is down will still be down a second later.\n */\nexport function GroupErrorModal({ message, onDismiss }) {\n    if (!message) return null;\n    return h('div', { style: overlay, role: 'alertdialog', 'aria-modal': 'true' },\n        h('div', { style: { ...card, maxWidth: '400px' } }, [\n            h('span', { key: 'l', style: label }, t('group.errNotCreated')),\n            h('p', {\n                key: 'm',\n                style: { margin: 0, fontSize: '14px', lineHeight: 1.6, color: C.ink2 },\n            }, message),\n            h('button', { key: 'ok', onClick: onDismiss, style: btn(true) }, t('group.close')),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// adding people to a running group\n// ---------------------------------------------------------------------------\n\n/**\n * Invite more members into an open group.\n *\n * Only verified 1:1 chats that are not already in the group are offered, and the\n * dialog says plainly what adding somebody costs: a new epoch, and a new code\n * that everyone has to compare again. The safety code covers the member set, so\n * a changed set means the old code no longer describes who is in the room.\n */\nexport function AddMembersModal({ candidates, remaining, onAdd, onCancel }) {\n    const [picked, setPicked] = React.useState([]);\n    const toggle = (id) => setPicked((prev) => (\n        prev.includes(id) ? prev.filter((x) => x !== id)\n            : prev.length >= remaining ? prev : [...prev, id]\n    ));\n\n    return h('div', { style: overlay, role: 'dialog', 'aria-modal': 'true' },\n        h('div', { style: { ...card, maxWidth: '440px' } }, [\n            h('div', { key: 'h', style: { display: 'flex', flexDirection: 'column', gap: '6px' } }, [\n                h('span', { key: 'l', style: label }, t('group.addMembers')),\n                h('p', {\n                    key: 'p',\n                    style: { margin: 0, fontSize: '13.5px', lineHeight: 1.6, color: C.ink2 },\n                }, remaining > 0\n                    ? t('group.roomFor', { remaining })\n                    : t('group.errFull')),\n            ]),\n\n            candidates.length === 0\n                ? h('div', {\n                    key: 'empty',\n                    style: {\n                        padding: '18px 14px', borderRadius: '10px', textAlign: 'center',\n                        background: C.panel2, border: `1px dashed ${C.line2}`, color: C.ink3, fontSize: '13px', lineHeight: 1.55,\n                    },\n                }, t('group.noMoreToAdd'))\n                : h('div', {\n                    key: 'list',\n                    className: 'msc-scroll',\n                    style: { display: 'flex', flexDirection: 'column', gap: '6px', maxHeight: '260px', overflowY: 'auto' },\n                }, candidates.map((c) => {\n                    const on = picked.includes(c.id);\n                    const full = !on && picked.length >= remaining;\n                    return h('button', {\n                        key: c.id,\n                        onClick: () => toggle(c.id),\n                        disabled: full,\n                        style: {\n                            display: 'flex', alignItems: 'center', gap: '11px', padding: '10px 12px',\n                            borderRadius: '10px', cursor: full ? 'not-allowed' : 'pointer', textAlign: 'start',\n                            background: on ? 'rgba(var(--sb-orange-rgb), 0.1)' : 'transparent',\n                            border: `1px solid ${on ? 'rgba(var(--sb-orange-rgb), 0.32)' : C.line}`,\n                            opacity: full ? 0.4 : 1, fontFamily: 'inherit',\n                        },\n                    }, [\n                        h('span', {\n                            key: 'av',\n                            style: {\n                                flex: 'none', width: '32px', height: '32px', borderRadius: '9px', display: 'grid',\n                                placeItems: 'center', background: C.panel2, border: `1px solid ${C.line}`,\n                                fontFamily: C.mono, fontSize: '11px', fontWeight: 700, color: C.ink2,\n                            },\n                        }, c.mono),\n                        h('span', { key: 'n', style: { flex: 1, minWidth: 0, fontSize: '14px', color: C.ink, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, c.name),\n                        h('span', {\n                            key: 'tick',\n                            style: {\n                                flex: 'none', width: '18px', height: '18px', borderRadius: '5px',\n                                background: on ? C.accentSolid : 'transparent',\n                                border: `1px solid ${on ? C.accentSolid : C.line2}`,\n                            },\n                        }),\n                    ]);\n                })),\n\n            h('p', {\n                key: 'note',\n                style: {\n                    margin: 0, padding: '11px 13px', borderRadius: '9px', fontSize: '12.5px', lineHeight: 1.55,\n                    background: C.panel2, border: `1px solid ${C.line}`, color: C.ink3,\n                },\n            }, t('group.inviteSentNote')),\n\n            h('div', { key: 'actions', style: { display: 'flex', gap: '10px' } }, [\n                h('button', { key: 'c', onClick: onCancel, style: { ...btn(false), flex: 1 } }, t('group.cancelBtn')),\n                h('button', {\n                    key: 'ok',\n                    onClick: () => picked.length && onAdd(picked),\n                    disabled: picked.length === 0,\n                    style: { ...btn(true), flex: 2, opacity: picked.length ? 1 : 0.4, cursor: picked.length ? 'pointer' : 'not-allowed' },\n                }, picked.length > 1 ? t('group.invitePeople', { count: picked.length }) : t('group.invite')),\n            ]),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// an inbound invitation\n// ---------------------------------------------------------------------------\n\nexport function GroupInviteModal({ invite, onAccept, onDecline }) {\n    if (!invite) return null;\n    return h('div', { style: overlay, role: 'dialog', 'aria-modal': 'true' },\n        h('div', { style: card }, [\n            h('div', { key: 'h', style: { display: 'flex', flexDirection: 'column', gap: '6px' } }, [\n                h('span', { key: 'l', style: label }, t('group.invitation')),\n                h('h3', { key: 't', style: { margin: 0, fontSize: '19px', fontWeight: 700, color: C.ink } }, invite.name),\n            ]),\n            h('p', {\n                key: 'p',\n                style: { margin: 0, fontSize: '13.5px', lineHeight: 1.62, color: C.ink2 },\n            }, [\n                h('b', { key: 'b', style: { color: C.ink } }, invite.fromLabel),\n                ' invited you to a peer-to-peer group. You will compare one safety code with every member before anything is sent.',\n            ]),\n            h('p', {\n                key: 'note',\n                style: {\n                    margin: 0, padding: '11px 13px', borderRadius: '9px', fontSize: '12.5px', lineHeight: 1.55,\n                    background: C.panel2, border: `1px solid ${C.line}`, color: C.ink3,\n                },\n            }, t('group.joinNote')),\n            h('div', { key: 'actions', style: { display: 'flex', gap: '10px' } }, [\n                h('button', { key: 'd', onClick: onDecline, style: { ...btn(false), flex: 1 } }, t('group.decline')),\n                h('button', { key: 'a', onClick: onAccept, style: { ...btn(true), flex: 2 } }, t('group.join')),\n            ]),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// the conversation\n// ---------------------------------------------------------------------------\n\nfunction MemberStrip({ group, onRemove, isAdmin }) {\n    return h('div', {\n        className: 'msc-scroll',\n        style: {\n            display: 'flex', gap: '7px', padding: '9px 16px', overflowX: 'auto',\n            borderBottom: `1px solid ${C.line}`, flex: 'none',\n        },\n    }, group.members.map((m) => {\n        const self = m.state === MEMBER_STATE.SELF;\n        const lost = m.state === MEMBER_STATE.LOST;\n        const dot = self || m.state === MEMBER_STATE.LINKED ? C.goodSolid\n            : m.state === MEMBER_STATE.PENDING ? C.warnSolid : C.badSolid;\n        const via = m.state === MEMBER_STATE.PENDING;\n        return h('span', {\n            key: m.fp,\n            title: self ? 'You'\n                : m.state === MEMBER_STATE.LINKED ? t('group.directLink')\n                : m.state === MEMBER_STATE.PENDING ? t('group.noDirectLink')\n                : t('group.memberOffline', { name: m.name }),\n            style: {\n                flex: 'none', display: 'inline-flex', alignItems: 'center', gap: '6px',\n                padding: '5px 10px', borderRadius: '20px',\n                // A member who is offline should not read as one who is present.\n                // They stay listed because membership is a signed, epoch-ordered\n                // fact that a dropped connection does not change \u2014 but the chip\n                // says plainly that nothing sent now reaches them.\n                background: lost ? 'transparent' : C.panel2,\n                border: `1px solid ${lost ? 'rgba(var(--sb-red-rgb), 0.3)' : C.line}`,\n                fontSize: '12.5px', color: self ? C.ink : (lost ? C.ink3 : C.ink2),\n                opacity: lost ? 0.75 : 1,\n            },\n        }, [\n            h('span', { key: 'd', style: { width: '7px', height: '7px', borderRadius: '50%', background: dot } }),\n            h('span', { key: 'n', style: lost ? { textDecoration: 'line-through' } : undefined }, self ? 'You' : m.name),\n            lost && h('span', {\n                key: 'off',\n                style: { fontFamily: C.mono, fontSize: '10px', color: C.bad, letterSpacing: '0.04em' },\n            }, 'offline'),\n            via && svg(ICON.relay, { key: 'r', color: C.warn }),\n            (isAdmin && !self && onRemove) && h('button', {\n                key: 'x',\n                onClick: () => onRemove(m.fp),\n                title: t('group.remove', { name: m.name }),\n                style: { border: 'none', background: 'transparent', color: C.ink3, cursor: 'pointer', display: 'grid', padding: 0 },\n                dangerouslySetInnerHTML: { __html: '<svg width=\"12\" height=\"12\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\"><path d=\"M18 6 6 18M6 6l12 12\"/></svg>' },\n            }),\n        ]);\n    }));\n}\n\nfunction Bubble({ msg }) {\n    const mine = msg.type === 'sent';\n    const system = msg.type === 'system';\n    if (system) {\n        return h('div', {\n            style: {\n                alignSelf: 'center', maxWidth: '80%', textAlign: 'center', padding: '6px 12px',\n                borderRadius: '9px', background: C.panel2, border: `1px solid ${C.line}`,\n                fontSize: '12px', color: C.ink3, lineHeight: 1.5,\n            },\n        }, msg.message);\n    }\n    return h('div', {\n        style: {\n            alignSelf: mine ? 'flex-end' : 'flex-start', maxWidth: 'min(74%, 560px)',\n            display: 'flex', flexDirection: 'column', gap: '3px',\n        },\n    }, [\n        !mine && h('span', {\n            key: 'who',\n            style: { fontSize: '11.5px', fontWeight: 600, color: C.accent, paddingInlineStart: '3px' },\n        }, msg.senderName || t('group.member')),\n        h('div', {\n            key: 'b',\n            style: {\n                padding: '9px 13px', borderRadius: mine ? '13px 13px 4px 13px' : '13px 13px 13px 4px',\n                background: mine ? 'rgba(var(--sb-orange-rgb), 0.14)' : C.panel2,\n                border: `1px solid ${mine ? 'rgba(var(--sb-orange-rgb), 0.26)' : C.line}`,\n                color: C.ink, fontSize: '14.5px', lineHeight: 1.5, wordBreak: 'break-word', whiteSpace: 'pre-wrap',\n            },\n        }, msg.message),\n        h('span', {\n            key: 't',\n            style: { fontFamily: C.mono, fontSize: '10px', color: C.ink3, alignSelf: mine ? 'flex-end' : 'flex-start', padding: '0 3px' },\n        }, [\n            new Date(msg.timestamp || Date.now()).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }),\n            msg.relayed ? ' \u00B7 relayed' : '',\n        ].join('')),\n    ]);\n}\n\nexport function GroupChatView({\n    group, input, setInput, onSend, onLeave, onRemoveMember, onAddMembers, isAdmin, scrollRef,\n    onStartCall, callActive, callOverlay,\n}) {\n    const ready = group.phase === GROUP_PHASE.READY && group.sasConfirmed;\n    // Only members we are RELAYING to. A member who is offline is not relayed \u2014\n    // they are unreachable, which the member strip already says in its own\n    // words \u2014 and counting them here put a notice about relaying on screen for\n    // a situation where nothing is being relayed at all.\n    const degraded = group.members.some((m) => m.state === MEMBER_STATE.PENDING);\n\n    const submit = (e) => {\n        e.preventDefault();\n        if (!ready || !input.trim()) return;\n        onSend(input);\n    };\n\n    return h('div', {\n        style: {\n            position: 'relative', display: 'flex', flexDirection: 'column',\n            height: '100%', minHeight: 0, background: C.bg,\n        },\n    }, [\n        // Responsive rules the inline styles cannot express. The group header had\n        // none, so on a phone the drawer hamburger \u2014 which is position:fixed at the\n        // top-left corner \u2014 sat directly on top of the group's avatar and name. The\n        // 1:1 header has always reserved that space; this is the same reservation,\n        // plus the safe-area strip an installed web view draws under.\n        h('style', {\n            key: 'head-css',\n            dangerouslySetInnerHTML: {\n                __html: '@media (max-width:1023px){'\n                    + '.sb-group-header{padding-inline-start:58px !important;gap:9px !important;}'\n                    + '}'\n                    + '@media (max-width:600px){'\n                    // Icon-only actions: three labelled buttons and a group name do not\n                    // fit a narrow screen, and the name is the part that must not be cut.\n                    + '.sb-group-header .sb-gh-label{display:none !important;}'\n                    + '.sb-group-header .sb-gh-btn{padding:8px 10px !important;}'\n                    + '}',\n            },\n        }),\n\n        // header\n        h('div', {\n            key: 'head',\n            className: 'sb-group-header',\n            style: {\n                flex: 'none', display: 'flex', alignItems: 'center', gap: '12px',\n                padding: 'var(--sb-safe-top, 0px) 16px 0',\n                minHeight: 'calc(64px + var(--sb-safe-top, 0px))',\n                borderBottom: `1px solid ${C.line}`,\n            },\n        }, [\n            h('span', {\n                key: 'av',\n                style: {\n                    flex: 'none', width: '38px', height: '38px', borderRadius: '11px', display: 'grid',\n                    placeItems: 'center', background: 'rgba(var(--sb-orange-rgb), 0.12)',\n                    border: '1px solid rgba(var(--sb-orange-rgb), 0.24)', color: C.accent,\n                    fontFamily: C.mono, fontSize: '12px', fontWeight: 700,\n                },\n            }, groupInitials(group.name)),\n            h('div', { key: 'meta', style: { flex: 1, minWidth: 0 } }, [\n                h('div', {\n                    key: 'n',\n                    style: { fontSize: '15px', fontWeight: 700, color: C.ink, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' },\n                }, group.name),\n                h('div', {\n                    key: 's',\n                    style: { fontSize: '11.5px', color: degraded ? C.warn : C.ink3, display: 'flex', alignItems: 'center', gap: '5px' },\n                }, [\n                    svg(ICON.users, { key: 'i', width: '13px', height: '13px' }),\n                    t('group.membersCount', { count: group.members.length }),\n                    ready && group.sasCode\n                        ? h('span', { key: 'code', dir: 'ltr', style: { unicodeBidi: 'isolate' } }, t('group.codeSuffix', { code: group.sasCode }))\n                        : '',\n                ]),\n            ]),\n            // Calls are offered only once the group is usable: a call before the\n            // safety code is confirmed would be media on links nobody has\n            // authenticated as belonging to this group.\n            (ready && onStartCall) && h('button', {\n                key: 'callvoice', className: 'sb-gh-btn', onClick: () => onStartCall(false), disabled: callActive,\n                title: t('groupCall.startVoice'), 'aria-label': t('groupCall.startVoice'),\n                style: {\n                    ...btn(false), flex: 'none', padding: '8px 10px', opacity: callActive ? 0.4 : 1,\n                    cursor: callActive ? 'default' : 'pointer',\n                },\n            }, svg(ICON.phone, { key: 'i' })),\n            (ready && onStartCall) && h('button', {\n                key: 'callvideo', className: 'sb-gh-btn', onClick: () => onStartCall(true), disabled: callActive,\n                title: t('groupCall.startVideo'), 'aria-label': t('groupCall.startVideo'),\n                style: {\n                    ...btn(false), flex: 'none', padding: '8px 10px', opacity: callActive ? 0.4 : 1,\n                    cursor: callActive ? 'default' : 'pointer',\n                },\n            }, svg(ICON.video, { key: 'i' })),\n            (isAdmin && onAddMembers && group.members.length < GROUP_LIMITS.MAX_MEMBERS) && h('button', {\n                key: 'add', className: 'sb-gh-btn', onClick: onAddMembers, title: t('group.inviteMore'),\n                style: { ...btn(false), flex: 'none', padding: '8px 12px', fontSize: '12.5px' },\n            }, [\n                svg(ICON.plus, { key: 'i' }),\n                h('span', { key: 'l', className: 'sb-gh-label' }, t('group.add')),\n            ]),\n            h('button', {\n                key: 'leave', className: 'sb-gh-btn', onClick: onLeave, title: t('group.leaveThis'),\n                'aria-label': t('group.leaveThis'),\n                style: { ...btn(false), flex: 'none', padding: '8px 12px', fontSize: '12.5px', color: C.bad, borderColor: 'rgba(var(--sb-red-rgb), 0.3)' },\n            }, [\n                svg(ICON.exit, { key: 'i' }),\n                h('span', { key: 'l', className: 'sb-gh-label' }, t('group.leave')),\n            ]),\n        ]),\n\n        h(MemberStrip, { key: 'strip', group, onRemove: onRemoveMember, isAdmin }),\n\n        degraded && ready && h('div', {\n            key: 'relay-note',\n            style: {\n                flex: 'none', padding: '8px 16px', fontSize: '12px', lineHeight: 1.5, color: C.warn,\n                background: 'rgba(var(--sb-yellow-2-rgb), 0.08)', borderBottom: `1px solid ${C.line}`,\n            },\n        }, t('group.relayNote')),\n\n        // transcript\n        h('div', {\n            key: 'msgs',\n            ref: scrollRef,\n            className: 'msc-scroll',\n            style: {\n                flex: 1, minHeight: 0, overflowY: 'auto', padding: '18px 16px',\n                display: 'flex', flexDirection: 'column', gap: '11px',\n            },\n        }, group.messages.length === 0\n            ? [h('div', {\n                key: 'empty',\n                style: { margin: 'auto', textAlign: 'center', color: C.ink3, fontSize: '13.5px', lineHeight: 1.6, maxWidth: '320px' },\n            }, ready\n                ? t('group.emptyChat')\n                : t('group.sasCompare'))]\n            : group.messages.map((m) => h(Bubble, { key: m.id, msg: m }))),\n\n        // composer\n        h('form', {\n            key: 'composer',\n            onSubmit: submit,\n            style: {\n                flex: 'none', display: 'flex', gap: '9px', padding: '12px 16px',\n                borderTop: `1px solid ${C.line}`, alignItems: 'flex-end',\n            },\n        }, [\n            h('input', {\n                key: 'in',\n                value: input,\n                onChange: (e) => setInput(e.target.value),\n                placeholder: ready ? t('group.message', { name: group.name }) : t('group.confirmFirst'),\n                disabled: !ready,\n                maxLength: GROUP_LIMITS.MAX_BODY_BYTES,\n                style: {\n                    flex: 1, minWidth: 0, padding: '12px 14px', borderRadius: '11px', outline: 'none',\n                    background: C.panel2, border: `1px solid ${C.line2}`, color: C.ink,\n                    fontFamily: 'inherit', fontSize: '14.5px', opacity: ready ? 1 : 0.5,\n                },\n            }),\n            h('button', {\n                key: 'send', type: 'submit', disabled: !ready || !input.trim(), title: t('group.send'),\n                style: {\n                    ...btn(true), flex: 'none', width: '44px', height: '44px', padding: 0, borderRadius: '11px',\n                    opacity: (!ready || !input.trim()) ? 0.4 : 1,\n                },\n            }, svg(ICON.send)),\n        ]),\n\n        // The group call covers the transcript when it is running and renders\n        // nothing when it is not \u2014 the same shape as the 1:1 call overlay.\n        callOverlay,\n    ]);\n}\n", "// GroupCallMedia \u2014 the media half of a group call.\n//\n// WHAT THIS IS\n// ------------\n// A group call in SecureBit is not a conference. There is no mixer, no SFU and\n// no server: it is N-1 ordinary encrypted 1:1 calls, one to each other member,\n// each riding the pairwise session that member already has with us \u2014 a session\n// whose DTLS transport a human authenticated by comparing a safety code. Nobody\n// but the two endpoints of a leg ever holds the keys that leg's audio is under,\n// which is the same guarantee the 1:1 call has, kept N-1 times over rather than\n// traded away for a server that would make the call cheaper.\n//\n// This class owns exactly three things:\n//\n//   1. ONE capture for the whole call. Not one per leg. Seven legs opening\n//      getUserMedia on the same microphone is seven captures of one microphone,\n//      seven camera indicators, and on several devices simply a failure. The\n//      capture is made here and handed to each manager, which attaches its\n//      tracks and is forbidden from stopping them.\n//\n//   2. WHO DIALS. Both ends of a pair would otherwise place a call to each\n//      other at the same moment and negotiate over the top of themselves. The\n//      rule is the whole of the fix: the member with the lexicographically\n//      smaller fingerprint calls, the other answers. Every member computes it\n//      from the same two values and gets the same answer, so exactly one call\n//      is placed per pair with nothing to coordinate.\n//\n//   3. WHAT THE UI SEES. One snapshot covering every leg, so the call renders\n//      as one call rather than as N-1 unrelated ones.\n//\n// WHAT IT DOES NOT OWN\n// --------------------\n// Who is in the call. That is GroupSession's, and it travels as signed group\n// frames that reach members this class can never reach \u2014 a member with no\n// direct link has no leg here, and is shown as \"connecting\" while the mesh\n// builds one, rather than being invisible.\n//\n// Injected rather than imported (`getManager`, `getUserMedia`), for the same\n// reason GroupSession injects its transport: the dialling rule and the leg\n// bookkeeping are the parts worth testing, and they should not need a browser.\n\n/** Per-leg lifecycle, as the UI reads it. */\nexport const LEG_STATE = Object.freeze({\n    UNREACHABLE: 'unreachable', // no direct link yet \u2014 the mesh is still building one\n    CONNECTING: 'connecting',   // a leg exists, media has not started flowing\n    ACTIVE: 'active',           // audio (and video, if any) is flowing\n    FAILED: 'failed',           // the leg was attempted and did not come up\n});\n\n/** Media the leg is actually carrying, for the tile that renders it. */\nconst PHASE_TO_STATE = {\n    idle: LEG_STATE.CONNECTING,\n    outgoing: LEG_STATE.CONNECTING,\n    incoming: LEG_STATE.CONNECTING,\n    connecting: LEG_STATE.CONNECTING,\n    active: LEG_STATE.ACTIVE,\n    ended: LEG_STATE.FAILED,\n};\n\n/**\n * Speech detection thresholds, on the RMS of a 0..1 normalised waveform.\n *\n * Two of them, not one, because a single threshold makes the indicator flicker\n * on every syllable boundary: normal speech crosses any fixed line several times\n * a second. Rising past ON marks someone as speaking; they stay marked until\n * they have been continuously below OFF for HOLD_MS, which is roughly the length\n * of a pause between words.\n */\nexport const SPEAKING = Object.freeze({ ON: 0.05, OFF: 0.025, HOLD_MS: 600, SAMPLE_MS: 120 });\n\n/**\n * How long the answering side waits before dialling the pair itself.\n *\n * Long enough that a working dial has certainly arrived \u2014 offers travel the same\n * data channel the group already uses, so this is seconds of margin, not\n * guesswork \u2014 and short enough that a member who would otherwise be stuck on\n * \"connecting\" for the whole call gets a second chance while the call still\n * matters.\n */\nexport const FALLBACK_DIAL_MS = 8000;\n\n/**\n * A level meter over one MediaStream, built on Web Audio.\n *\n * Web Audio rather than the WebRTC stats API on purpose: `audioLevel` on a\n * receiver is not carried by every browser this app runs in, and where it is,\n * it arrives on the stats interval rather than on demand. An AnalyserNode is\n * available everywhere, reads the actual decoded waveform, and works the same\n * way for the local microphone as for a remote leg \u2014 so \"who is speaking\" is one\n * mechanism rather than two that disagree.\n */\nfunction webAudioLevelMeter(context, stream) {\n    if (!context || !stream) return null;\n    let source;\n    try {\n        source = context.createMediaStreamSource(stream);\n    } catch (_) {\n        return null;   // a stream with no audio track, or a context that is gone\n    }\n    const analyser = context.createAnalyser();\n    analyser.fftSize = 512;\n    analyser.smoothingTimeConstant = 0.2;\n    source.connect(analyser);\n    // Deliberately NOT connected to the destination: playback is the audio\n    // element's job, and routing it here too would play every voice twice.\n    const buffer = new Uint8Array(analyser.fftSize);\n\n    return {\n        read() {\n            analyser.getByteTimeDomainData(buffer);\n            let sum = 0;\n            for (let i = 0; i < buffer.length; i++) {\n                const v = (buffer[i] - 128) / 128;\n                sum += v * v;\n            }\n            return Math.sqrt(sum / buffer.length);\n        },\n        close() {\n            try { source.disconnect(); } catch (_) {}\n            try { analyser.disconnect(); } catch (_) {}\n        },\n    };\n}\n\nexport class GroupCallMedia {\n    /**\n     * @param {object} deps\n     * @param {(sessionId: string) => object|null} deps.getManager  pairwise manager by session id\n     * @param {(constraints: object) => Promise<MediaStream>} [deps.getUserMedia]\n     * @param {() => void} [deps.onChange]  called whenever the snapshot changes\n     * @param {(level: string, message: string, context?: object) => void} [deps.log]\n     */\n    constructor({\n        getManager, getUserMedia = null, createAudioSink = null, createLevelMeter = null,\n        onChange = () => {}, log = () => {},\n    }) {\n        this._getManager = getManager;\n        this._getUserMedia = getUserMedia\n            || ((constraints) => navigator.mediaDevices.getUserMedia(constraints));\n        /**\n         * Where a member's voice actually plays.\n         *\n         * NOT in the call's React tree, deliberately. The tiles unmount whenever\n         * the user switches to another chat, and audio elements that live in\n         * them take the call's sound with them \u2014 a call that goes silent because\n         * somebody looked at a different window is not a call. The controller\n         * owns one detached audio element per leg for the life of that leg, and\n         * the tiles render video only.\n         */\n        this._createAudioSink = createAudioSink\n            || (() => (typeof Audio === 'function' ? new Audio() : null));\n        /**\n         * How loud a stream is right now, for the speaking indicator.\n         *\n         * Injected so the whole hysteresis rule below can be tested without a\n         * browser, and so a platform with no Web Audio simply has no indicator\n         * rather than no call.\n         */\n        this._createLevelMeter = createLevelMeter\n            || ((stream) => webAudioLevelMeter(this._audioContext(), stream));\n        this._onChange = onChange;\n        this._log = log;\n\n        this.callId = null;\n        this.selfFp = '';\n        this.withVideo = false;\n        this.micEnabled = true;\n        this.cameraEnabled = false;\n        this.facingMode = 'user';\n        this.error = null;\n\n        this.localStream = null;\n        /** fp -> { fp, name, sessionId, manager, unsubscribe, sink, state, quality, hasVideo } */\n        this._legs = new Map();\n        /** The participant list as GroupSession last reported it. */\n        this._peers = [];\n        /** Guards flipCamera / setCamera against overlapping captures. */\n        this._busy = false;\n\n        /** Shared AudioContext for every level meter in this call. */\n        this._ctx = null;\n        /** Our own microphone's meter, and whether it is currently carrying speech. */\n        this._selfMeter = null;\n        this.selfSpeaking = false;\n        this._selfQuietSince = 0;\n        /** The polling timer that reads every meter. */\n        this._levelTimer = null;\n    }\n\n    /**\n     * One AudioContext for the whole call, created on first use.\n     *\n     * A context per leg would be several audio graphs and several hardware\n     * callbacks for one conversation, and browsers cap how many a page may hold.\n     * It is resumed rather than assumed: a context created outside a gesture\n     * starts suspended, and a suspended context reads silence forever \u2014 which\n     * would look exactly like nobody ever speaking.\n     */\n    _audioContext() {\n        if (this._ctx) return this._ctx;\n        const Ctor = typeof AudioContext !== 'undefined' ? AudioContext\n            : (typeof webkitAudioContext !== 'undefined' ? webkitAudioContext : null);\n        if (!Ctor) return null;\n        try {\n            this._ctx = new Ctor();\n            if (this._ctx.state === 'suspended') this._ctx.resume().catch(() => {});\n        } catch (_) {\n            this._ctx = null;\n        }\n        return this._ctx;\n    }\n\n    get active() {\n        return this.callId !== null;\n    }\n\n    // -----------------------------------------------------------------------\n    // joining and leaving\n    // -----------------------------------------------------------------------\n\n    /**\n     * Capture, then start building legs.\n     *\n     * The capture comes FIRST and its failure aborts the join, because a call\n     * this device cannot speak into is not a call \u2014 and the failure has to be\n     * reported as a device problem (permission, no microphone, another app\n     * holding it) rather than left to look like the group failed to connect.\n     *\n     * CALL IT WITH NO PEERS to capture without connecting anything, then call\n     * setPeers once the group has been told you are in the call. That ordering\n     * is not cosmetic \u2014 see setPeers.\n     *\n     * @param {{callId: string, selfFp: string, withVideo?: boolean, peers?: object[]}} opts\n     */\n    async join({ callId, selfFp, withVideo = false, peers = [] }) {\n        if (this.callId === callId) { this.setPeers(peers); return; }\n        if (this.callId) await this.leave();\n\n        this.callId = callId;\n        this.selfFp = selfFp;\n        this.withVideo = withVideo === true;\n        this.micEnabled = true;\n        this.cameraEnabled = this.withVideo;\n        this.error = null;\n        this._changed();\n\n        try {\n            this.localStream = await this._getUserMedia({\n                audio: { echoCancellation: true, noiseSuppression: true, autoGainControl: true },\n                video: this.withVideo\n                    ? { facingMode: this.facingMode, width: { ideal: 1280 }, height: { ideal: 720 } }\n                    : false,\n            });\n        } catch (error) {\n            this.callId = null;\n            this.error = mediaErrorCode(error);\n            this._changed();\n            throw error;\n        }\n\n        this._selfMeter = this._createLevelMeter(this.localStream);\n        this._startLevelPolling();\n        this.setPeers(peers);\n    }\n\n    /**\n     * The participant list changed: reconcile the legs against it.\n     *\n     * Called whenever anything moves \u2014 somebody joins, somebody leaves, a member\n     * who was relayed gets a direct link. Idempotent, so the caller can run it\n     * on every group event without tracking what actually differs.\n     *\n     * ORDERING: the group must be told we are in the call BEFORE this runs.\n     * Attaching a leg can place an offer immediately, and an offer that arrives\n     * at a member who has not yet heard we joined lands on a session they do not\n     * yet know is a call leg \u2014 so they ring instead of answering, and the dialler\n     * sits at \"connecting\" for the rest of the call. Announcing first works\n     * because both the join frame and the offer travel the same ordered data\n     * channel, so the join cannot overtake it.\n     *\n     * @param {{fp: string, name: string, sessionId: string|null, self?: boolean}[]} peers\n     */\n    setPeers(peers) {\n        this._peers = Array.isArray(peers) ? peers : [];\n        if (!this.active) return;\n\n        const wanted = new Map();\n        for (const peer of this._peers) {\n            if (!peer || !peer.fp || peer.fp === this.selfFp) continue;\n            wanted.set(peer.fp, peer);\n        }\n\n        // Legs whose member left the call, or whose link moved to a different\n        // session, are torn down first \u2014 a leg on a dead session id would keep a\n        // sender attached to a peer connection nobody is on the other end of.\n        for (const [fp, leg] of [...this._legs]) {\n            const peer = wanted.get(fp);\n            if (!peer || peer.sessionId !== leg.sessionId) this._detach(fp);\n        }\n\n        for (const [fp, peer] of wanted) {\n            const existing = this._legs.get(fp);\n            if (existing) {\n                // A leg that failed is retried on the next reconciliation rather\n                // than being written off for the rest of the call. The usual\n                // cause is transient \u2014 the pairwise session was mid-repair when\n                // the offer was placed \u2014 and without this the member stayed\n                // silent for as long as the call lasted even after their link\n                // came back.\n                if (existing.state === LEG_STATE.FAILED && this._weDial(fp)) this._dial(existing);\n                continue;\n            }\n            if (!peer.sessionId) continue;   // relayed only: no leg to build yet\n            this._attach(fp, peer);\n        }\n\n        this._changed();\n    }\n\n    /** Tear down every leg and release the capture. */\n    async leave() {\n        this._stopLevelPolling();\n        if (this._selfMeter) { try { this._selfMeter.close?.(); } catch (_) {} this._selfMeter = null; }\n        this.selfSpeaking = false;\n        for (const fp of [...this._legs.keys()]) this._detach(fp);\n        if (this._ctx) { try { this._ctx.close?.(); } catch (_) {} this._ctx = null; }\n        if (this.localStream) {\n            for (const track of this.localStream.getTracks()) {\n                try { track.stop(); } catch (_) { /* already ended */ }\n            }\n        }\n        this.localStream = null;\n        this.callId = null;\n        this.selfFp = '';\n        this.withVideo = false;\n        this.cameraEnabled = false;\n        this.micEnabled = true;\n        this._peers = [];\n        this._changed();\n    }\n\n    // -----------------------------------------------------------------------\n    // legs\n    // -----------------------------------------------------------------------\n\n    /**\n     * Who places the call for this pair.\n     *\n     * Both members run this and get opposite answers, so exactly one offer is\n     * made. Comparing fingerprints rather than, say, join order means the answer\n     * does not depend on anything the two members might disagree about.\n     */\n    _weDial(peerFp) {\n        return this.selfFp < peerFp;\n    }\n\n    _attach(fp, peer) {\n        const manager = this._getManager(peer.sessionId);\n        if (!manager) return;\n\n        const leg = {\n            fp,\n            name: peer.name || 'Member',\n            sessionId: peer.sessionId,\n            manager,\n            unsubscribe: null,\n            sink: this._createAudioSink(),\n            meter: null,\n            fallback: null,\n            speaking: false,\n            quietSince: 0,\n            state: LEG_STATE.CONNECTING,\n            quality: null,\n            hasVideo: false,\n        };\n        if (leg.sink) { leg.sink.autoplay = true; leg.sink.muted = false; }\n        this._legs.set(fp, leg);\n\n        // Order matters: the context has to be set before the offer can arrive,\n        // or the answering side rings the user for a call they already joined.\n        try { manager.setCallGroupContext(this.callId); } catch (_) {}\n        try { manager.setExternalMediaStream(this.localStream); } catch (_) {}\n\n        if (typeof manager.addCallStateListener === 'function') {\n            leg.unsubscribe = manager.addCallStateListener((state) => this._onLegState(fp, state));\n        }\n\n        // Start from what the session is ACTUALLY doing. A leg attached to a\n        // manager that is already mid-call \u2014 a member rebound to a link that was\n        // carrying us a moment ago \u2014 would otherwise sit at \"connecting\" until\n        // the next state change happened to come along, which for a call that is\n        // already up may be never.\n        this._onLegState(fp, manager.getCallState?.() || {});\n\n        if (this._weDial(fp)) {\n            this._dial(leg);\n            return;\n        }\n        // We are the answering side, so there is nothing to do but wait \u2014 unless\n        // the offer never comes. That is not hypothetical: the peer's dial can\n        // fail on their side and their retry only runs when a group event happens\n        // to fire. After a grace period long enough that a working dial would\n        // have arrived, take the call ourselves. Only ONE side of a pair ever\n        // does this \u2014 the side that was not going to dial \u2014 so it cannot produce\n        // two offers crossing, and it is skipped outright if anything has reached\n        // this session in the meantime.\n        leg.fallback = setTimeout(() => this._dialFallback(fp), FALLBACK_DIAL_MS);\n    }\n\n    _dialFallback(fp) {\n        const leg = this._legs.get(fp);\n        if (!leg || !this.active) return;\n        leg.fallback = null;\n        const phase = leg.manager.getCallState?.().phase || 'idle';\n        if (phase !== 'idle') return;   // something arrived; leave it alone\n        this._log('info', 'group call leg was never dialled by the peer; dialling it', {});\n        Promise.resolve()\n            .then(() => leg.manager.startCall(this.withVideo))\n            .catch(() => {\n                const live = this._legs.get(fp);\n                if (live === leg) { live.state = LEG_STATE.FAILED; this._changed(); }\n            });\n    }\n\n    /** Place this leg's call. */\n    _dial(leg) {\n        const phase = leg.manager.getCallState?.().phase || 'idle';\n        if (phase !== 'idle') return;\n        leg.state = LEG_STATE.CONNECTING;\n        Promise.resolve()\n            .then(() => leg.manager.startCall(this.withVideo))\n            .catch((error) => {\n                this._log('warn', 'group call leg could not be placed', {\n                    errorType: error?.constructor?.name,\n                });\n                const live = this._legs.get(leg.fp);\n                if (live === leg) { live.state = LEG_STATE.FAILED; this._changed(); }\n            });\n    }\n\n    _detach(fp) {\n        const leg = this._legs.get(fp);\n        if (!leg) return;\n        this._legs.delete(fp);\n        if (leg.fallback) { clearTimeout(leg.fallback); leg.fallback = null; }\n        try { leg.unsubscribe?.(); } catch (_) {}\n        if (leg.sink) {\n            try { leg.sink.pause?.(); } catch (_) {}\n            try { leg.sink.srcObject = null; } catch (_) {}\n        }\n        if (leg.meter) { try { leg.meter.close?.(); } catch (_) {} leg.meter = null; }\n        // End first, then release the borrowed capture and the context: ending\n        // the other way round would have the manager tear down a call it no\n        // longer believes belongs to a group.\n        try { leg.manager.endCall?.(); } catch (_) {}\n        try { leg.manager.setExternalMediaStream?.(null); } catch (_) {}\n        try { leg.manager.setCallGroupContext?.(null); } catch (_) {}\n    }\n\n    _onLegState(fp, state) {\n        const leg = this._legs.get(fp);\n        if (!leg) return;\n        const phase = state?.phase || 'idle';\n        if (leg.fallback && phase !== 'idle') { clearTimeout(leg.fallback); leg.fallback = null; }\n        leg.state = PHASE_TO_STATE[phase] || LEG_STATE.CONNECTING;\n        leg.quality = state?.quality || null;\n        leg.hasVideo = state?.remoteHasVideo === true;\n        this._pumpAudio(leg);\n        this._changed();\n    }\n\n    /**\n     * Keep this leg's audio element pointed at its current inbound stream.\n     *\n     * The manager rebuilds that stream whenever its receivers change \u2014 a track\n     * arriving late, a camera being switched on \u2014 and hands back a NEW\n     * MediaStream each time so a consumer can tell. Reassigning here on every\n     * state change is what keeps a leg audible across those rebuilds; assigning\n     * once at attach time left the first seconds of some calls silent.\n     */\n    _pumpAudio(leg) {\n        if (!leg.sink) return;\n        let stream = null;\n        try { stream = leg.manager.getRemoteMediaStream?.() || null; } catch (_) { return; }\n        if (!stream || leg.sink.srcObject === stream) return;\n        try {\n            leg.sink.srcObject = stream;\n            const played = leg.sink.play?.();\n            if (played && played.catch) played.catch(() => {});\n        } catch (_) { /* an element that will not play is not worth throwing over */ }\n        // The meter follows the stream, not the leg: the manager hands back a new\n        // MediaStream whenever its receivers change, and a meter left on the old\n        // one reads silence from then on.\n        if (leg.meter) { try { leg.meter.close?.(); } catch (_) {} }\n        leg.meter = this._createLevelMeter(stream);\n        leg.speaking = false;\n    }\n\n    // -----------------------------------------------------------------------\n    // who is speaking\n    // -----------------------------------------------------------------------\n\n    _startLevelPolling() {\n        if (this._levelTimer || typeof setInterval !== 'function') return;\n        this._levelTimer = setInterval(() => this._sampleLevels(), SPEAKING.SAMPLE_MS);\n    }\n\n    _stopLevelPolling() {\n        if (this._levelTimer) { clearInterval(this._levelTimer); this._levelTimer = null; }\n    }\n\n    /**\n     * Turn a level into a speaking flag, with hysteresis and a hold.\n     *\n     * `holder` is whatever object carries the flag \u2014 a leg, or this instance for\n     * our own microphone \u2014 so the same rule runs for everyone and the local tile\n     * cannot disagree with a remote one about what counts as talking.\n     */\n    _applyLevel(holder, key, quietKey, level, now) {\n        const speaking = holder[key] === true;\n        if (level >= SPEAKING.ON) {\n            holder[quietKey] = 0;\n            if (!speaking) { holder[key] = true; return true; }\n            return false;\n        }\n        if (!speaking) return false;\n        if (level > SPEAKING.OFF) { holder[quietKey] = 0; return false; }\n        if (!holder[quietKey]) { holder[quietKey] = now; return false; }\n        if (now - holder[quietKey] >= SPEAKING.HOLD_MS) { holder[key] = false; return true; }\n        return false;\n    }\n\n    _sampleLevels() {\n        if (!this.active) return;\n        const now = Date.now();\n        let changed = false;\n\n        // A muted microphone is not speech, whatever the waveform says \u2014 the\n        // track is disabled, so nothing is going out, and showing ourselves as\n        // talking would be telling the user the opposite of what is happening.\n        const selfLevel = (this.micEnabled && this._selfMeter) ? safeRead(this._selfMeter) : 0;\n        if (this._applyLevel(this, 'selfSpeaking', '_selfQuietSince', selfLevel, now)) changed = true;\n\n        for (const leg of this._legs.values()) {\n            const level = leg.meter ? safeRead(leg.meter) : 0;\n            if (this._applyLevel(leg, 'speaking', 'quietSince', level, now)) changed = true;\n        }\n\n        // Only when a flag actually flipped. Pushing a snapshot every 120ms would\n        // re-render the whole call ten times a second for no visible reason.\n        if (changed) this._changed();\n    }\n\n    // -----------------------------------------------------------------------\n    // controls \u2014 applied to every leg at once, because it is one call\n    // -----------------------------------------------------------------------\n\n    setMic(enabled) {\n        this.micEnabled = enabled !== false;\n        if (this.localStream) {\n            for (const track of this.localStream.getAudioTracks()) track.enabled = this.micEnabled;\n        }\n        // Muting clears the speaking mark at once rather than letting it decay\n        // through the hold: the hold exists to ride out pauses in speech, and\n        // pressing mute is not a pause. Half a second of still looking like you\n        // are talking is exactly the half second that matters.\n        if (!this.micEnabled) { this.selfSpeaking = false; this._selfQuietSince = 0; }\n        // The per-leg managers read enabled-ness off the shared tracks, so this\n        // is the whole of it \u2014 but their own call state still carries a mic flag\n        // that a 1:1 UI would render, so keep it honest.\n        for (const leg of this._legs.values()) {\n            try { leg.manager.setMicEnabled?.(this.micEnabled); } catch (_) {}\n        }\n        this._changed();\n    }\n\n    toggleMic() { this.setMic(!this.micEnabled); }\n\n    /**\n     * Turn the camera on or off for the whole call.\n     *\n     * Turning it on when the call started as voice captures a camera track and\n     * adds it to every leg, each of which renegotiates its own connection. That\n     * is N-1 renegotiations for one button, which is the honest cost of having\n     * no server in the middle.\n     */\n    async setCamera(enabled) {\n        if (!this.active || this._busy) return;\n        if (enabled === false) {\n            this.cameraEnabled = false;\n            if (this.localStream) {\n                for (const track of this.localStream.getVideoTracks()) track.enabled = false;\n            }\n            for (const leg of this._legs.values()) {\n                try { leg.manager.setCameraEnabled?.(false); } catch (_) {}\n            }\n            this._changed();\n            return;\n        }\n\n        const existing = this.localStream?.getVideoTracks?.() || [];\n        if (existing.length) {\n            for (const track of existing) track.enabled = true;\n            this.cameraEnabled = true;\n            this.withVideo = true;\n            this._changed();\n            return;\n        }\n\n        this._busy = true;\n        try {\n            const camera = await this._getUserMedia({\n                video: { facingMode: this.facingMode, width: { ideal: 1280 }, height: { ideal: 720 } },\n            });\n            const track = camera.getVideoTracks()[0];\n            if (!track) return;\n            this.localStream.addTrack(track);\n            this.cameraEnabled = true;\n            this.withVideo = true;\n            await Promise.allSettled([...this._legs.values()].map(\n                (leg) => Promise.resolve().then(() => leg.manager.addVideoTrack?.(track)),\n            ));\n        } catch (error) {\n            this.error = mediaErrorCode(error);\n            this.cameraEnabled = false;\n        } finally {\n            this._busy = false;\n            this._changed();\n        }\n    }\n\n    async toggleCamera() { await this.setCamera(!this.cameraEnabled); }\n\n    /** Front/back camera. One capture, swapped into every leg without renegotiating. */\n    async flipCamera() {\n        if (!this.active || this._busy || !this.localStream) return;\n        const old = this.localStream.getVideoTracks()[0];\n        if (!old) return;\n\n        this._busy = true;\n        const previous = this.facingMode;\n        this.facingMode = this.facingMode === 'user' ? 'environment' : 'user';\n        try {\n            const camera = await this._getUserMedia({ video: { facingMode: this.facingMode } });\n            const track = camera.getVideoTracks()[0];\n            if (!track) { this.facingMode = previous; return; }\n            track.enabled = this.cameraEnabled;\n            this.localStream.removeTrack(old);\n            try { old.stop(); } catch (_) {}\n            this.localStream.addTrack(track);\n            await Promise.allSettled([...this._legs.values()].map(\n                (leg) => Promise.resolve().then(() => leg.manager.replaceVideoTrack?.(track)),\n            ));\n        } catch (error) {\n            this.facingMode = previous;\n            this._log('warn', 'group call camera flip failed', { errorType: error?.constructor?.name });\n        } finally {\n            this._busy = false;\n            this._changed();\n        }\n    }\n\n    // -----------------------------------------------------------------------\n    // what the UI reads\n    // -----------------------------------------------------------------------\n\n    getLocalStream() {\n        return this.localStream;\n    }\n\n    /** The inbound stream for one member, or null while their leg is coming up. */\n    getRemoteStream(fp) {\n        const leg = this._legs.get(fp);\n        if (!leg) return null;\n        try { return leg.manager.getRemoteMediaStream?.() || null; } catch (_) { return null; }\n    }\n\n    /**\n     * One call, as one object.\n     *\n     * Every participant appears, including the ones with no leg: a member who is\n     * in the call but reachable only through a relay is CONNECTING, not absent.\n     * Hiding them would make a mesh that is still building look like a member\n     * who declined.\n     */\n    snapshot() {\n        const peers = this._peers\n            .filter((peer) => peer && peer.fp !== this.selfFp)\n            .map((peer) => {\n                const leg = this._legs.get(peer.fp);\n                return {\n                    fp: peer.fp,\n                    name: peer.name || 'Member',\n                    state: leg ? leg.state : LEG_STATE.UNREACHABLE,\n                    quality: leg ? leg.quality : null,\n                    hasVideo: leg ? leg.hasVideo : false,\n                    speaking: leg ? leg.speaking === true : false,\n                };\n            })\n            .sort((a, b) => (a.fp < b.fp ? -1 : a.fp > b.fp ? 1 : 0));\n\n        return {\n            active: this.active,\n            callId: this.callId,\n            withVideo: this.withVideo,\n            micEnabled: this.micEnabled,\n            cameraEnabled: this.cameraEnabled,\n            facingMode: this.facingMode,\n            error: this.error,\n            selfSpeaking: this.selfSpeaking,\n            peers,\n            connected: peers.filter((p) => p.state === LEG_STATE.ACTIVE).length,\n        };\n    }\n\n    _changed() {\n        try { this._onChange(this.snapshot()); } catch (_) {}\n    }\n}\n\n/**\n * A getUserMedia failure, as a code the UI can turn into a sentence.\n *\n * Kept identical to the 1:1 call's vocabulary: these are device and permission\n * problems, and telling them apart from a connection problem is the difference\n * between \"allow the microphone\" and a user staring at a call that looks broken.\n */\n/** A meter that throws is a meter that is gone; it must not take the call with it. */\nfunction safeRead(meter) {\n    try { return meter.read(); } catch (_) { return 0; }\n}\n\nexport function mediaErrorCode(error) {\n    const name = error?.name || '';\n    if (name === 'NotAllowedError' || name === 'SecurityError') return 'permission_denied';\n    if (name === 'NotFoundError' || name === 'OverconstrainedError') return 'device_not_found';\n    if (name === 'NotReadableError' || name === 'AbortError') return 'device_busy';\n    return 'media_failed';\n}\n", "// The geometry of a gallery view.\n//\n// Separated from the component because it is arithmetic, not rendering: it has\n// no React in it, it is the part that was actually wrong when tiles came out\n// tiny on a desktop, and it is the part worth pinning down in a test that does\n// not need a browser to run.\n\n/** Gap between tiles, and the shape each one holds. */\nexport const TILE_GAP = 10;\nexport const TILE_ASPECT = 16 / 9;\n/** Below this a tile stops shrinking and the grid scrolls instead. */\nexport const MIN_TILE_W = 150;\n\n/**\n * How big each tile should be, given the space there actually is.\n *\n * The first version of this picked a column count from the number of people and\n * let CSS divide the width. That is wrong in both directions and it showed:\n * capped, three people on a wide monitor got three small tiles adrift in empty\n * space; uncapped, they got three letterbox strips. Neither is what a call\n * looks like, because neither is looking at the window.\n *\n * So do what a gallery view does: try every column count, work out how large a\n * tile could be at that count \u2014 bounded by the width a column gets AND by the\n * height its row gets, since a tile has a fixed shape and the smaller of the two\n * wins \u2014 and keep whichever count makes the tiles biggest. Two people on a wide\n * screen come out side by side and enormous; six come out three by two; the same\n * six on a phone come out two by three, because there the height is what is\n * plentiful. Nothing is special-cased per device.\n *\n * Pure and exported so the arithmetic can be tested without a browser.\n *\n * @returns {{cols: number, rows: number, tileW: number, tileH: number}}\n */\nexport function gridLayout(count, width, height, {\n    gap = TILE_GAP, aspect = TILE_ASPECT, minWidth = MIN_TILE_W,\n} = {}) {\n    if (count <= 0) return { cols: 0, rows: 0, tileW: 0, tileH: 0 };\n    if (!(width > 0) || !(height > 0)) {\n        // Not measured yet \u2014 first paint, or a container with no layout. Fall\n        // back to a shape that is reasonable rather than to zero-sized tiles.\n        const cols = Math.min(count, count <= 2 ? count : Math.ceil(Math.sqrt(count)));\n        return { cols, rows: Math.ceil(count / cols), tileW: 0, tileH: 0 };\n    }\n\n    let best = { cols: 1, rows: count, tileW: 0, tileH: 0 };\n    for (let cols = 1; cols <= count; cols++) {\n        const rows = Math.ceil(count / cols);\n        const perColumn = (width - gap * (cols - 1)) / cols;\n        const perRow = (height - gap * (rows - 1)) / rows;\n        if (perColumn <= 0 || perRow <= 0) continue;\n        // A tile keeps its aspect ratio, so it is as large as the tighter of the\n        // two constraints allows \u2014 never stretched to fill one of them.\n        const tileW = Math.min(perColumn, perRow * aspect);\n        if (tileW > best.tileW) best = { cols, rows, tileW, tileH: tileW / aspect };\n    }\n\n    if (best.tileW < minWidth) {\n        // Too many people for the space. Stop shrinking and let the grid scroll:\n        // tiles small enough to be unreadable are worse than a scrollbar.\n        best.tileW = minWidth;\n        best.tileH = minWidth / aspect;\n    }\n    return best;\n}\n\n/**\n * The spotlight arrangement: one large tile, the rest in a strip beneath it.\n *\n * A gallery is the right default \u2014 in a call of three or four everyone is worth\n * the same amount of screen. It stops being right the moment someone is\n * presenting, or the moment there are enough people that equal shares means\n * nobody is legible. So a tile can be pinned, and the stage splits: the pinned\n * person takes what is left after a strip of thumbnails, and the strip scrolls\n * sideways rather than shrinking further.\n *\n * The strip's height is a fraction of the stage, floored and capped, because a\n * proportion alone gives useless thumbnails on a phone and absurd ones on a\n * 4K monitor.\n *\n * @returns {{stageH: number, main: {w: number, h: number}, stripH: number, thumbW: number}}\n */\nexport function spotlightLayout(othersCount, width, height, {\n    gap = TILE_GAP, aspect = TILE_ASPECT, minThumb = 92, maxThumb = 168,\n} = {}) {\n    if (!(width > 0) || !(height > 0)) {\n        return { main: { w: 0, h: 0 }, stripH: 0, thumbW: 0 };\n    }\n    if (othersCount <= 0) {\n        const w = Math.min(width, height * aspect);\n        return { main: { w, h: w / aspect }, stripH: 0, thumbW: 0 };\n    }\n\n    const thumbW = Math.max(minThumb, Math.min(maxThumb, Math.round(height * 0.2 * aspect)));\n    const stripH = thumbW / aspect;\n    const mainH = height - stripH - gap;\n    const mainW = Math.min(width, mainH * aspect);\n    // Refuse to split a stage that cannot carry the split. The test is not\n    // \"does it fit\" but \"is it worth it\": a main tile barely larger than the\n    // thumbnails below it spotlights nobody, it just takes a gallery and makes\n    // one cell slightly bigger. Below that the caller falls back to the gallery,\n    // and is told so by a main tile of zero rather than a useless one.\n    if (mainH <= 0 || mainW < thumbW * 2) {\n        return { main: { w: 0, h: 0 }, stripH: 0, thumbW: 0 };\n    }\n    return { main: { w: mainW, h: mainW / aspect }, stripH, thumbW };\n}\n", "import { t } from '../../i18n/index.js';\nimport { LEG_STATE } from '../../group/groupCallMedia.js';\nimport { gridLayout, spotlightLayout, TILE_GAP } from './callLayout.js';\n// Group call surfaces: the ringing prompt, the tile grid, the control bar and\n// the minimized dock.\n//\n// It is deliberately the same visual language as the 1:1 call (CallUI.jsx) \u2014\n// same icons, same control discs, same encrypted badge \u2014 because it is the same\n// thing happening more than once, and a second design would suggest otherwise.\n// What it adds is the part a group call has and a 1:1 call does not: a tile per\n// member, each carrying that member's own connection state, because in a mesh\n// call the connection is per pair and \"the call is fine\" is not a thing anybody\n// can say on behalf of everyone else.\n//\n// Purely presentational. All media and all signalling live in GroupCallMedia\n// and GroupSession; this reads a snapshot and calls back.\n\nconst h = (...args) => React.createElement(...args);\nconst MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\nconst ICON = {\n    lock: '<path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/><rect x=\"4.5\" y=\"11\" width=\"15\" height=\"9\" rx=\"2.2\"/>',\n    minimize: '<path d=\"M9 4v4a1 1 0 0 1-1 1H4M15 4v4a1 1 0 0 0 1 1h4M9 20v-4a1 1 0 0 0-1-1H4M15 20v-4a1 1 0 0 1 1-1h4\"/>',\n    expand: '<path d=\"M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7\"/>',\n    users: '<path d=\"M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19\"/><circle cx=\"10\" cy=\"8\" r=\"3.2\"/><path d=\"M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4\"/><path d=\"M15.5 5.3a3.2 3.2 0 0 1 0 5.4\"/>',\n    micOn: '<rect x=\"9\" y=\"3\" width=\"6\" height=\"11\" rx=\"3\"/><path d=\"M5 11a7 7 0 0 0 14 0\"/><path d=\"M12 18v3\"/>',\n    micOff: '<path d=\"M9 9v-1a3 3 0 0 1 5.1-2.1M15 11v3a3 3 0 0 1-4.6 2.5\"/><path d=\"M5 11a7 7 0 0 0 10.3 6.2M19 11a7 7 0 0 1-.4 2.3\"/><path d=\"M12 18v3\"/><path d=\"M3 3l18 18\"/>',\n    camOn: '<path d=\"M23 7l-7 5 7 5V7z\"/><rect x=\"1\" y=\"5\" width=\"15\" height=\"14\" rx=\"2.5\"/>',\n    camOff: '<path d=\"M16 16H3a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h2l2-2M11 6h2l7-3v14M2 2l20 20\"/>',\n    grid: '<rect x=\"3\" y=\"3\" width=\"7.5\" height=\"7.5\" rx=\"1.6\"/><rect x=\"13.5\" y=\"3\" width=\"7.5\" height=\"7.5\" rx=\"1.6\"/><rect x=\"3\" y=\"13.5\" width=\"7.5\" height=\"7.5\" rx=\"1.6\"/><rect x=\"13.5\" y=\"13.5\" width=\"7.5\" height=\"7.5\" rx=\"1.6\"/>',\n    flip: '<path d=\"M3 7h3l2-2h8l2 2h3v12H3z\"/><path d=\"M9.5 13a2.5 2.5 0 0 1 5 0M14.5 13l-1.3-1.3M14.5 13l1.3-1.3\"/>',\n    phone: '<path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\"/>',\n    phoneHangup: '<path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\" transform=\"rotate(135 12 12)\"/>',\n};\n\nconst svg = (inner, size, sw) => h('span', {\n    style: { display: 'grid', placeItems: 'center', width: size + 'px', height: size + 'px' },\n    dangerouslySetInnerHTML: { __html: `<svg width=\"${size}\" height=\"${size}\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"${sw}\" stroke-linecap=\"round\" stroke-linejoin=\"round\">${inner}</svg>` },\n});\n\nconst ctrlBase = {\n    width: '56px', height: '56px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n    border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.05)',\n    color: 'var(--sb-text-4)', cursor: 'pointer', transition: 'all .15s',\n};\nconst dangerCtrl = { ...ctrlBase, background: 'var(--sb-red-strong-solid)', color: '#fff', border: '1px solid transparent' };\nconst endBtn = {\n    width: '56px', height: '56px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n    border: 'none', background: 'var(--sb-red-strong-solid)', color: '#fff', cursor: 'pointer',\n    boxShadow: '0 8px 24px rgba(var(--sb-red-strong-rgb), 0.35)', transition: 'transform .15s',\n};\nconst minimizeBtn = {\n    width: '36px', height: '36px', borderRadius: '9px', display: 'grid', placeItems: 'center',\n    border: '1px solid rgba(var(--sb-ink), 0.15)', background: 'rgba(0,0,0,0.35)',\n    color: '#fff', cursor: 'pointer', transition: 'all .15s',\n};\n\n// `color` labels the quality in words; `solid` fills the signal bars. A bar is a\n// mark, so it keeps the brand colour in both themes \u2014 see src/styles/theme.css.\nconst QUALITY = {\n    excellent: { bars: 4, color: 'var(--sb-green)', solid: 'var(--sb-green-solid)' },\n    good: { bars: 3, color: 'var(--sb-green)', solid: 'var(--sb-green-solid)' },\n    fair: { bars: 2, color: 'var(--sb-yellow)', solid: 'var(--sb-yellow-solid)' },\n    poor: { bars: 1, color: 'var(--sb-red)', solid: 'var(--sb-red-solid)' },\n};\n\nfunction qualityBars(quality) {\n    const q = QUALITY[quality];\n    if (!q) return null;\n    return h('span', { key: 'q', style: { display: 'inline-flex', alignItems: 'flex-end', gap: '2px', height: '12px' } },\n        [0, 1, 2, 3].map((i) => h('span', {\n            key: i,\n            style: {\n                width: '2.5px', height: (4 + i * 2.6) + 'px', borderRadius: '1px',\n                background: i < q.bars ? q.solid : 'rgba(var(--sb-ink), 0.18)',\n            },\n        })));\n}\n\nfunction initials(name) {\n    const words = String(name || '').trim().split(/\\s+/).filter(Boolean);\n    return ((words[0]?.[0] || '') + (words[1]?.[0] || words[0]?.[1] || '')).toUpperCase() || '#';\n}\n\nconst fmt = (s) => `${String(Math.floor(s / 60)).padStart(2, '0')}:${String(s % 60).padStart(2, '0')}`;\n\n/**\n * The size of an element, kept current as it changes.\n *\n * The layout above needs real numbers, and the only honest source of those is\n * the element itself: the window's size says nothing about a panel inside a\n * sidebar layout, and a call that is resized \u2014 a window dragged wider, a phone\n * turned \u2014 has to re-solve rather than keep the size it was born with.\n */\nfunction useMeasuredSize() {\n    const [size, setSize] = React.useState({ w: 0, h: 0 });\n    // A CALLBACK ref, not an object one, and this is the whole point of the hook.\n    //\n    // With `useRef` the effect's only dependency is the ref object, which never\n    // changes \u2014 so the effect runs exactly once, on mount. The element it wants\n    // to measure is inside a branch that mount does not always render: whoever\n    // JOINS a call sees the \"somebody is calling\" prompt first, and there is no\n    // stage in it. Their effect ran against `null`, never ran again, and the\n    // size stayed 0\u00D70 for the rest of the call while the person who STARTED the\n    // call \u2014 mounted straight into the grid \u2014 measured fine. One user saw a\n    // normal call and the other saw tiles collapsed to the width of their own\n    // labels, from the same code.\n    //\n    // A callback ref is state: React calls it when the node attaches and again\n    // when it detaches, so the effect re-runs the moment there is something to\n    // measure. It also covers the same trip through the minimized dock, which\n    // unmounts the stage and brings it back.\n    const [node, setNode] = React.useState(null);\n    React.useLayoutEffect(() => {\n        if (!node) return undefined;\n        const apply = () => setSize((prev) => (\n            prev.w === node.clientWidth && prev.h === node.clientHeight\n                ? prev                       // same numbers, same object: no re-render\n                : { w: node.clientWidth, h: node.clientHeight }\n        ));\n        apply();   // before paint, so the first frame is already laid out\n        if (typeof ResizeObserver === 'undefined') {\n            window.addEventListener('resize', apply);\n            return () => window.removeEventListener('resize', apply);\n        }\n        const observer = new ResizeObserver(apply);\n        observer.observe(node);\n        return () => observer.disconnect();\n    }, [node]);\n    return [setNode, size];\n}\n\n/**\n * One member's tile.\n *\n * A tile always says what THIS leg is doing, never what the call is doing. In a\n * mesh call one member can be connected while another is still being dialled,\n * and a single shared status line would have to lie about one of them.\n */\nfunction Tile({ peer, stream, self, localStream, cameraEnabled, speaking, tileW, tileH, onSelect, pinned, compact }) {\n    const videoRef = React.useRef(null);\n    const source = self ? localStream : stream;\n    const showVideo = self ? cameraEnabled : peer.hasVideo;\n\n    // Video only. Every tile's <video> is MUTED and the call's audio is played by\n    // GroupCallMedia from elements that are not in this tree \u2014 a tile unmounts\n    // whenever the user opens another chat, and a call must not go silent\n    // because somebody looked at a different window.\n    React.useEffect(() => {\n        const el = videoRef.current;\n        if (!el || !source) return;\n        if (el.srcObject !== source) { el.muted = true; el.srcObject = source; }\n        const played = el.play && el.play();\n        if (played && played.catch) played.catch(() => {});\n    });\n\n    // Nothing to say about our own tile: its name already reads \"You\", and the\n    // status slot repeating it put the same word at both ends of the label row.\n    const statusWord = self\n        ? null\n        : peer.state === LEG_STATE.ACTIVE ? null\n            : peer.state === LEG_STATE.UNREACHABLE ? t('groupCall.waitingLink')\n                : peer.state === LEG_STATE.FAILED ? t('groupCall.legFailed')\n                    : t('groupCall.connecting');\n\n    const avatarPx = Math.max(44, Math.min(148, Math.round((tileH || 180) * 0.42)));\n\n    // The speaking ring is drawn as a border on the tile itself rather than as an\n    // overlay, so it cannot be covered by the video and does not change layout\n    // when it appears \u2014 a tile that resized every time somebody spoke would make\n    // the whole grid twitch.\n    return h('div', {\n        // A tile is a control as well as a picture: clicking it spotlights that\n        // person. Given a role and a key handler rather than wrapped in a button,\n        // so a <video> is not nested inside interactive content.\n        role: onSelect ? 'button' : undefined,\n        tabIndex: onSelect ? 0 : undefined,\n        onClick: onSelect,\n        onKeyDown: onSelect ? (e) => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); onSelect(); } } : undefined,\n        title: pinned ? t('groupCall.unpin', { name: peer.name })\n            : onSelect ? t('groupCall.pin', { name: peer.name })\n                : (speaking ? t('groupCall.speaking', { name: peer.name }) : peer.name),\n        style: {\n            cursor: onSelect ? 'pointer' : 'default',\n            position: 'relative', borderRadius: '14px', overflow: 'hidden', background: 'var(--sb-surface)',\n            border: speaking ? '2px solid var(--sb-green-solid)' : '2px solid rgba(var(--sb-ink), 0.08)',\n            boxShadow: speaking ? '0 0 0 3px rgba(var(--sb-green-rgb), 0.16)' : 'none',\n            transition: 'border-color .12s ease, box-shadow .12s ease',\n            // Sized by the grid, which is the only thing that knows how much\n            // room there is. aspectRatio stays as the fallback for the first\n            // paint, before the container has been measured.\n            // Measured: an exact size. Unmeasured: a shape that is still a tile.\n            // The floor matters more than it looks \u2014 without a minimum a flex item\n            // can shrink to its own text, and one bad containing block turned the\n            // whole call into a cluster of label-sized rectangles. Measurement now\n            // makes the layout GOOD; it is no longer what makes it work at all.\n            flex: tileW ? '0 0 auto' : '1 1 260px',\n            minWidth: tileW ? undefined : '200px',\n            width: tileW ? tileW + 'px' : 'auto',\n            height: tileH ? tileH + 'px' : 'auto',\n            aspectRatio: tileH ? undefined : '16 / 9',\n            display: 'grid', placeItems: 'center',\n        },\n    }, [\n        showVideo\n            ? h('video', {\n                key: 'v', ref: videoRef, autoPlay: true, muted: true, playsInline: true,\n                style: {\n                    position: 'absolute', inset: 0, width: '100%', height: '100%', objectFit: 'cover',\n                    transform: self ? 'scaleX(-1)' : 'none', background: 'var(--sb-bg)',\n                },\n            })\n            : h('div', {\n                key: 'av',\n                style: {\n                    // Proportional to the tile: a fixed disc looks lost in a\n                    // large tile and crowds a small one.\n                    width: avatarPx + 'px', height: avatarPx + 'px',\n                    borderRadius: '50%', display: 'grid', placeItems: 'center',\n                    background: 'radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))',\n                    border: speaking ? '1.5px solid rgba(var(--sb-green-rgb), 0.65)' : '1px solid rgba(var(--sb-ink), 0.1)',\n                    color: speaking ? 'var(--sb-green)' : 'var(--sb-text-4)',\n                    fontFamily: MONO, fontSize: Math.round(avatarPx * 0.3) + 'px', fontWeight: 700,\n                    transition: 'color .12s ease, border-color .12s ease',\n                },\n            }, initials(peer.name)),\n        h('div', {\n            key: 'label',\n            style: {\n                position: 'absolute', insetInline: 0, bottom: 0, display: 'flex', alignItems: 'center',\n                gap: compact ? '4px' : '7px', padding: compact ? '4px 6px' : '8px 10px',\n                background: 'linear-gradient(0deg, rgba(0,0,0,0.7), transparent)',\n            },\n        }, [\n            h('span', {\n                key: 'n',\n                style: {\n                    flex: 1, minWidth: 0, fontSize: compact ? '10.5px' : '12.5px', fontWeight: 700, color: 'var(--sb-text-1)',\n                    whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis',\n                },\n            }, peer.name),\n            speaking && h('span', {\n                key: 'sp', style: { flex: 'none', color: 'var(--sb-green)', display: 'grid', placeItems: 'center' },\n            }, svg(ICON.micOn, compact ? 11 : 13, 2)),\n            (statusWord && !compact) && h('span', {\n                key: 's',\n                style: {\n                    flex: 'none', fontFamily: MONO, fontSize: '10.5px',\n                    color: peer.state === LEG_STATE.FAILED ? 'var(--sb-red)' : 'var(--sb-text-6)',\n                },\n            }, statusWord),\n            (!self && !compact) && qualityBars(peer.quality),\n        ]),\n    ]);\n}\n\n/**\n * The whole group-call surface.\n *\n * Three states, in the order they happen: a prompt when somebody else opened a\n * call we have not joined, the grid while we are in it, and a dock when the user\n * wants the transcript back without hanging up.\n */\nexport function GroupCallUI({\n    call, media, groupName, localStream, getRemoteStream,\n    onJoin, onDismiss, onLeave, onToggleMic, onToggleCamera, onFlipCamera,\n}) {\n    // EVERY hook runs before EVERY early return below, without exception.\n    // Measuring the stage was added underneath one of them, so the first render\n    // that reached the grid ran more hooks than the render before it and React\n    // refused it outright (#310, \"rendered more hooks than during the previous\n    // render\") \u2014 which took the whole call down at the moment it started. The\n    // early returns are what make this file easy to get wrong; keeping the hooks\n    // in one block at the top is what makes it hard.\n    const [minimized, setMinimized] = React.useState(false);\n    const [seconds, setSeconds] = React.useState(0);\n    const [pinned, setPinned] = React.useState(null);\n    const [stageRef, stage] = useMeasuredSize();\n    const joined = !!call?.joined;\n\n    React.useEffect(() => {\n        if (!joined) { setSeconds(0); return undefined; }\n        const started = Date.now();\n        const iv = setInterval(() => setSeconds(Math.floor((Date.now() - started) / 1000)), 1000);\n        return () => clearInterval(iv);\n    }, [joined, call?.callId]);\n\n    React.useEffect(() => { if (!call) setMinimized(false); }, [!call]);\n\n    // A pin is dropped when the call ends, and when the person it points at\n    // leaves \u2014 otherwise the stage would spotlight somebody who is not in the\n    // call any more and the rest of the grid would look mysteriously short.\n    const present = React.useMemo(\n        () => new Set(['self', ...(media?.peers || []).map((p) => p.fp)]),\n        [media],\n    );\n    React.useEffect(() => {\n        if (pinned && !present.has(pinned)) setPinned(null);\n    }, [pinned, present]);\n\n    if (!call) return null;\n\n    const encBadge = h('span', {\n        key: 'enc',\n        style: { display: 'inline-flex', alignItems: 'center', gap: '5px', fontSize: '11.5px', fontWeight: 600, color: 'var(--sb-green)' },\n    }, [svg(ICON.lock, 12, 2), t('call.encryptedShort')]);\n\n    // \u2500\u2500 somebody is calling the group and we have not joined \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (!joined) {\n        return h('div', {\n            style: {\n                position: 'absolute', inset: 0, zIndex: 40, display: 'flex', flexDirection: 'column',\n                background: 'radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)',\n                animation: 'sbExpand .2s ease',\n            },\n        }, [\n            h('div', { key: 'top', style: { flex: 'none', padding: '16px 18px' } },\n                h('span', { style: { display: 'inline-flex', alignItems: 'center', gap: '7px', fontSize: '12px', fontWeight: 600, color: 'var(--sb-green)' } },\n                    [svg(ICON.lock, 13, 2), t('call.encrypted')])),\n            h('div', { key: 'mid', style: { flex: 1, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center', padding: '0 24px', textAlign: 'center' } }, [\n                h('div', {\n                    key: 'av',\n                    style: {\n                        position: 'relative', width: '112px', height: '112px', marginBottom: '26px',\n                        display: 'grid', placeItems: 'center',\n                    },\n                }, [\n                    h('span', { key: 'p1', style: { position: 'absolute', inset: 0, borderRadius: '50%', border: '1.5px solid rgba(var(--sb-orange-rgb), 0.5)', animation: 'sbCallPulse 2s ease-out infinite' } }),\n                    h('span', { key: 'p2', style: { position: 'absolute', inset: 0, borderRadius: '50%', border: '1.5px solid rgba(var(--sb-orange-rgb), 0.4)', animation: 'sbCallPulse 2s ease-out infinite', animationDelay: '1s' } }),\n                    h('div', {\n                        key: 'c',\n                        style: {\n                            width: '96px', height: '96px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n                            background: 'radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))',\n                            border: '1px solid rgba(var(--sb-ink), 0.1)', color: 'var(--sb-text-7)',\n                        },\n                    }, svg(ICON.users, 42, 1.6)),\n                ]),\n                h('div', { key: 'n', style: { fontSize: '22px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, groupName),\n                h('div', { key: 's', style: { fontFamily: MONO, fontSize: '13.5px', color: 'var(--sb-text-6)', marginTop: '8px' } },\n                    call.withVideo\n                        ? t('groupCall.startedVideo', { name: call.startedByName })\n                        : t('groupCall.startedVoice', { name: call.startedByName })),\n                h('div', { key: 'p', style: { fontSize: '12.5px', color: 'var(--sb-text-9)', marginTop: '6px' } },\n                    t('groupCall.inCall', { count: call.participants.length })),\n            ]),\n            h('div', { key: 'ctrls', style: { flex: 'none', display: 'flex', justifyContent: 'center', gap: '48px', padding: '24px 24px 40px' } }, [\n                h('div', { key: 'dec', style: { display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '8px' } }, [\n                    h('button', { key: 'b', onClick: onDismiss, title: t('groupCall.dismiss'), style: { ...endBtn, width: '62px', height: '62px' } }, svg(ICON.phoneHangup, 24, 1.9)),\n                    h('span', { key: 'l', style: { fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-7)' } }, t('groupCall.dismiss')),\n                ]),\n                h('div', { key: 'acc', style: { display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '8px' } }, [\n                    h('button', {\n                        key: 'b', onClick: onJoin, title: t('groupCall.join'),\n                        style: {\n                            width: '62px', height: '62px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n                            border: 'none', background: 'var(--sb-green-solid)', color: 'var(--sb-on-green)', cursor: 'pointer',\n                            boxShadow: '0 8px 24px rgba(var(--sb-green-rgb), 0.35)',\n                        },\n                    }, svg(ICON.phone, 24, 1.9)),\n                    h('span', { key: 'l', style: { fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-7)' } }, t('groupCall.join')),\n                ]),\n            ]),\n        ]);\n    }\n\n    const peers = media?.peers || [];\n    const selfTile = {\n        fp: 'self', name: t('groupCall.you'), state: LEG_STATE.ACTIVE,\n        hasVideo: media?.cameraEnabled, quality: null, speaking: media?.selfSpeaking === true,\n    };\n\n    // \u2500\u2500 minimized dock \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (minimized) {\n        // Collapsed, there are no tiles to carry the indicator, so the one line\n        // the dock has says who is talking instead of how long the call has run.\n        const speakers = peers.filter((p) => p.speaking).map((p) => p.name);\n        const talking = speakers.length === 1 ? speakers[0]\n            : speakers.length > 1 ? speakers.slice(0, 2).join(', ')\n                : (media?.selfSpeaking ? t('groupCall.you') : null);\n        return h('div', {\n            style: {\n                position: 'absolute', bottom: '18px', insetInlineEnd: '18px', zIndex: 40, width: '244px',\n                borderRadius: '14px', overflow: 'hidden', background: 'var(--sb-surface)',\n                border: '1px solid rgba(var(--sb-ink), 0.1)', boxShadow: '0 18px 44px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))',\n                animation: 'sbExpand .18s ease',\n            },\n        }, [\n            h('div', { key: 'bar', style: { display: 'flex', alignItems: 'center', gap: '11px', padding: '11px 12px' } }, [\n                h('span', {\n                    key: 'ic',\n                    style: {\n                        flex: 'none', width: '34px', height: '34px', borderRadius: '9px', display: 'grid',\n                        placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.1)',\n                        border: '1px solid rgba(var(--sb-green-rgb), 0.25)', color: 'var(--sb-green)',\n                    },\n                }, svg(ICON.users, 16, 1.9)),\n                h('div', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                    h('div', { key: 'n', style: { fontSize: '13px', fontWeight: 700, color: 'var(--sb-text-1)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, groupName),\n                    h('div', {\n                        key: 's',\n                        style: {\n                            fontFamily: MONO, fontSize: '11px', color: talking ? 'var(--sb-green)' : 'var(--sb-text-6)',\n                            whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis',\n                        },\n                    }, talking\n                        ? t('groupCall.speaking', { name: talking })\n                        : `${t('groupCall.inCall', { count: call.participants.length })} \u00B7 ${fmt(seconds)}`),\n                ]),\n                h('button', { key: 'exp', onClick: () => setMinimized(false), title: t('call.expand'), style: { flex: 'none', width: '32px', height: '32px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-4)', cursor: 'pointer' } }, svg(ICON.expand, 15, 2)),\n                h('button', { key: 'end', onClick: onLeave, title: t('groupCall.leave'), style: { flex: 'none', width: '32px', height: '32px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-red-strong-solid)', color: '#fff', cursor: 'pointer' } }, svg(ICON.phoneHangup, 15, 2)),\n            ]),\n        ]);\n    }\n\n    // \u2500\u2500 the call itself \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    const tiles = [selfTile, ...peers];\n    const tileFor = (id) => tiles.find((tile) => tile.fp === id) || null;\n    const spotlight = pinned ? tileFor(pinned) : null;\n    const others = spotlight ? tiles.filter((tile) => tile.fp !== spotlight.fp) : [];\n    const spot = spotlight ? spotlightLayout(others.length, stage.w, stage.h) : null;\n    // A stage too short to split honestly falls back to the gallery rather than\n    // rendering a main tile with no height.\n    const spotlit = spotlight && spot && spot.main.w > 0;\n    const layout = gridLayout(tiles.length, stage.w, stage.h);\n\n    const renderTile = (tile, extra = {}) => h(Tile, {\n        key: tile.fp,\n        peer: tile,\n        self: tile.fp === 'self',\n        speaking: tile.speaking === true,\n        localStream,\n        cameraEnabled: media?.cameraEnabled,\n        stream: tile.fp === 'self' ? null : getRemoteStream(tile.fp),\n        ...extra,\n    });\n\n    return h('div', {\n        style: {\n            position: 'absolute', inset: 0, zIndex: 40, display: 'flex', flexDirection: 'column',\n            background: 'var(--sb-bg-deepest)', animation: 'sbExpand .2s ease',\n        },\n    }, [\n        h('div', {\n            key: 'top',\n            style: {\n                flex: 'none', display: 'flex', alignItems: 'flex-start', justifyContent: 'space-between',\n                gap: '14px', padding: '16px 18px 10px',\n            },\n        }, [\n            h('div', { key: 'l', style: { minWidth: 0 } }, [\n                h('div', { key: 'n', style: { fontSize: '17px', fontWeight: 800, letterSpacing: '-0.3px', color: '#fff', overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, groupName),\n                h('div', { key: 's', style: { display: 'inline-flex', alignItems: 'center', gap: '9px', marginTop: '4px' } }, [\n                    h('span', { key: 'd', style: { fontFamily: MONO, fontSize: '12.5px', color: 'var(--sb-text-2)' } }, fmt(seconds)),\n                    encBadge,\n                    h('span', { key: 'c', style: { fontSize: '11.5px', color: 'var(--sb-text-7)' } },\n                        t('groupCall.inCall', { count: call.participants.length })),\n                ]),\n            ]),\n            h('div', { key: 'r', style: { flex: 'none', display: 'flex', alignItems: 'center', gap: '8px' } }, [\n                spotlit && h('button', {\n                    key: 'grid', onClick: () => setPinned(null), title: t('groupCall.showEveryone'),\n                    style: {\n                        height: '36px', padding: '0 12px', borderRadius: '9px', display: 'inline-flex',\n                        alignItems: 'center', gap: '7px', border: '1px solid rgba(var(--sb-ink), 0.15)',\n                        background: 'rgba(0,0,0,0.35)', color: '#fff', cursor: 'pointer',\n                        fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600,\n                    },\n                }, [svg(ICON.grid, 14, 2), t('groupCall.showEveryone')]),\n                h('button', { key: 'min', onClick: () => setMinimized(true), title: t('call.minimize'), style: minimizeBtn }, svg(ICON.minimize, 16, 2)),\n            ]),\n        ]),\n\n        media?.error && h('div', {\n            key: 'err',\n            style: {\n                flex: 'none', margin: '0 18px 10px', padding: '9px 12px', borderRadius: '10px',\n                background: 'rgba(var(--sb-red-rgb), 0.1)', border: '1px solid rgba(var(--sb-red-rgb), 0.28)',\n                color: 'var(--sb-red)', fontSize: '12.5px', lineHeight: 1.5,\n            },\n        }, t(`groupCall.err.${media.error}`)),\n\n        // The stage is what gets measured, so it carries no padding of its own \u2014\n        // padding would be counted as usable room and every tile would come out\n        // slightly too large for the space that is really there.\n        h('div', {\n            key: 'stage',\n            ref: stageRef,\n            className: 'msc-scroll',\n            style: {\n                flex: 1, minHeight: 0, minWidth: 0, overflow: 'auto',\n                // Breathing room as MARGIN, not padding: clientWidth counts\n                // padding as usable space and every tile would come out that\n                // much too wide for the room actually available.\n                margin: '0 14px 6px',\n                // Flex, not grid. A grid with `justify-content: center` sizes its\n                // column to the content, so the row's `width: 100%` had nothing\n                // definite to resolve against and collapsed to the widest label \u2014\n                // which is exactly what the broken screenshot showed. A flex\n                // container keeps a definite content box either way, so a row\n                // asking for the full width gets the full width.\n                // `safe center` centres it without the clipping plain centring\n                // causes once the content overflows: the first row stays\n                // reachable and the stage scrolls as normal.\n                display: 'flex', alignItems: 'safe center', justifyContent: 'safe center',\n            },\n        }, spotlit\n            // \u2500\u2500 spotlight: one person large, the rest in a strip underneath \u2500\u2500\n            ? h('div', {\n                style: {\n                    display: 'flex', flexDirection: 'column', gap: TILE_GAP + 'px',\n                    width: '100%', height: stage.h + 'px', minHeight: 0,\n                },\n            }, [\n                h('div', {\n                    key: 'main',\n                    style: { flex: 'none', display: 'flex', justifyContent: 'center', minHeight: 0 },\n                }, renderTile(spotlight, {\n                    tileW: spot.main.w, tileH: spot.main.h,\n                    pinned: true, onSelect: () => setPinned(null),\n                })),\n                others.length > 0 && h('div', {\n                    key: 'strip',\n                    className: 'msc-scroll',\n                    style: {\n                        flex: 'none', height: spot.stripH + 'px', display: 'flex',\n                        gap: TILE_GAP + 'px', justifyContent: others.length > 4 ? 'flex-start' : 'center',\n                        // The strip scrolls sideways rather than shrinking: past a\n                        // handful of people, thumbnails that keep dividing stop\n                        // being recognisable, which is the whole point of them.\n                        overflowX: 'auto', overflowY: 'hidden',\n                    },\n                }, others.map((tile) => renderTile(tile, {\n                    tileW: spot.thumbW, tileH: spot.stripH, compact: true,\n                    onSelect: () => setPinned(tile.fp),\n                }))),\n            ])\n            // \u2500\u2500 gallery: everyone the same size \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n            : h('div', {\n                // Wrapping flex rather than a grid, for one reason: a call of three\n                // lays out two over one, and in a grid that lone tile is stuck in the\n                // first column with a hole beside it. Fixing the row width to exactly\n                // `cols` tiles makes the wrap land where the layout said it should,\n                // and a short last row centres itself.\n                style: {\n                    display: 'flex', flexWrap: 'wrap', gap: TILE_GAP + 'px',\n                    justifyContent: 'center', alignContent: 'center',\n                    width: layout.tileW\n                        ? (layout.cols * layout.tileW + (layout.cols - 1) * TILE_GAP) + 'px'\n                        : '100%',\n                },\n            }, tiles.map((tile) => renderTile(tile, {\n                tileW: layout.tileW, tileH: layout.tileH,\n                onSelect: () => setPinned(tile.fp),\n            })))),\n\n        h('div', {\n            key: 'ctrls',\n            style: {\n                flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '16px',\n                padding: '16px 20px calc(22px + var(--sb-safe-bottom, env(safe-area-inset-bottom, 0px)))',\n                background: 'linear-gradient(0deg, rgba(0,0,0,0.6), transparent)',\n            },\n        }, [\n            h('button', { key: 'mic', onClick: onToggleMic, title: t('call.mute'), style: media?.micEnabled ? ctrlBase : dangerCtrl },\n                svg(media?.micEnabled ? ICON.micOn : ICON.micOff, 21, 1.9)),\n            h('button', { key: 'cam', onClick: onToggleCamera, title: t('call.camera'), style: media?.cameraEnabled ? ctrlBase : dangerCtrl },\n                svg(media?.cameraEnabled ? ICON.camOn : ICON.camOff, 21, 1.8)),\n            media?.cameraEnabled && h('button', { key: 'flip', onClick: onFlipCamera, title: t('call.flipCamera'), style: ctrlBase }, svg(ICON.flip, 21, 1.8)),\n            h('button', { key: 'end', onClick: onLeave, title: t('groupCall.leave'), style: endBtn }, svg(ICON.phoneHangup, 22, 1.9)),\n        ]),\n    ]);\n}\n\nif (typeof window !== 'undefined') {\n    window.GroupCallUI = GroupCallUI;\n}\n", "import { installDebugWindowHooks } from './utils/debugWindowHooks.js';\nimport { loadIceSettings, saveIceSettings, clearIceSettings } from './network/iceSettingsStore.js';\nimport { startTurnCredentialRefresh } from './network/turnCredentials.js';\nimport {\n    sessionsReducer,\n    createInitialState,\n    createSessionEntry,\n    decorateSessions,\n    monoInitials,\n    statusDot,\n    MY_STATUS_OPTIONS,\n    PRESENCE_DOT,\n    PRESENCE_WORD,\n    SESSION_ACTIONS as SA\n} from './state/sessionsStore.js';\nimport {\n    groupsReducer,\n    createInitialGroupState,\n    createGroupEntry,\n    decorateGroups,\n    GROUP_PHASE,\n    MEMBER_STATE,\n    GROUP_ACTIONS as GA\n} from './state/groupsStore.js';\nimport { GroupSession, GROUP_FRAMES, isGroupFrame, groupFrameType, decodeEnvelope } from './group/GroupSession.js';\nimport { GROUP_LIMITS } from './group/groupCrypto.js';\nimport { createGroupSender } from './group/groupSender.js';\nimport { spring, snapTarget, rubberband, velocityTracker, prefersReducedMotion, SPRING } from './ui/motion.js';\nimport { t, direction, LTR_TEXT } from './i18n/index.js';\nimport { LanguageSuggestion } from './components/ui/LanguageSuggestion.jsx';\n\n// +1 in a left-to-right locale, -1 in a right-to-left one. Only the handful of\n// horizontal transforms that CSS logical properties cannot express need it \u2014\n// everything else mirrors on its own from dir on <html>.\nconst DIR = direction();\n\n// A programmatic smooth scroll is a full-viewport slide, which is exactly what\n// someone who asked for less motion does not want. The jump still happens and\n// still lands in the same place \u2014 it just stops travelling to get there.\nconst scrollBehavior = () => (prefersReducedMotion() ? 'auto' : 'smooth');\n\n// After a chat ends, the start page scrolls to the donation card. The flag covers the\n// usual case where the card only mounts once the chat is gone; the event covers a card\n// that is already on screen. See src/components/ui/DonateCrypto.jsx.\nconst requestDonateScroll = () => {\n    window.__sbScrollToDonate = Date.now();\n    document.dispatchEvent(new CustomEvent('securebit:scroll-to-donate'));\n};\nimport { GroupChatView, GroupSasModal, CreateGroupModal, GroupInviteModal, GroupErrorModal, AddMembersModal } from './components/ui/GroupChat.jsx';\nimport { GroupCallUI } from './components/ui/GroupCallUI.jsx';\nimport { GroupCallMedia, mediaErrorCode } from './group/groupCallMedia.js';\n\n                // \u2500\u2500 Secure chat extras: code blocks, clipboard hygiene \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                // Copy text to the clipboard and (optionally) wipe it after a delay so\n                // copied secrets (keys, commands, codes) don't linger. We only clear\n                // when we can confirm the clipboard still holds exactly what we wrote,\n                // or when the clipboard can't be read back at all \u2014 never clobbering\n                // something the user copied afterwards that we can see is different.\n                const copyToClipboardSecure = async (text, autoClearMs = 0) => {\n                    let ok = false;\n                    try {\n                        await navigator.clipboard.writeText(text);\n                        ok = true;\n                    } catch (e) {\n                        try {\n                            const ta = document.createElement('textarea');\n                            ta.value = text;\n                            ta.style.position = 'fixed';\n                            ta.style.opacity = '0';\n                            document.body.appendChild(ta);\n                            ta.select();\n                            ok = document.execCommand('copy');\n                            document.body.removeChild(ta);\n                        } catch (_) { ok = false; }\n                    }\n                    if (ok && autoClearMs > 0 && navigator.clipboard && navigator.clipboard.writeText) {\n                        setTimeout(async () => {\n                            let current = null;\n                            let readable = true;\n                            try { current = await navigator.clipboard.readText(); }\n                            catch (_) { readable = false; }\n                            if (!readable || current === text) {\n                                try { await navigator.clipboard.writeText(''); } catch (_) {}\n                            }\n                        }, autoClearMs);\n                    }\n                    return ok;\n                };\n\n                // Split a message into plain-text and fenced ``` code segments.\n                // Returns null when there is no fenced code so callers can fast-path.\n                const parseMessageSegments = (text) => {\n                    if (typeof text !== 'string' || text.indexOf('```') === -1) return null;\n                    const segments = [];\n                    const re = /```([a-zA-Z0-9_+#.-]*)\\n?([\\s\\S]*?)```/g;\n                    let last = 0;\n                    let m;\n                    while ((m = re.exec(text)) !== null) {\n                        if (m.index > last) segments.push({ kind: 'text', content: text.slice(last, m.index) });\n                        segments.push({ kind: 'code', lang: (m[1] || '').toLowerCase(), content: m[2].replace(/\\n$/, '') });\n                        last = re.lastIndex;\n                    }\n                    if (last < text.length) segments.push({ kind: 'text', content: text.slice(last) });\n                    return segments.some(s => s.kind === 'code') ? segments : null;\n                };\n\n                // Lightweight, dependency-free syntax highlighter. Returns React nodes\n                // (no innerHTML / dangerouslySetInnerHTML) so it stays CSP-safe and adds\n                // no XSS surface. Language-agnostic: highlights comments, strings,\n                // numbers, common keywords and literals \u2014 good enough for snippets\n                // without shipping a heavy library or allowing remote scripts.\n                const HL_KEYWORDS = new Set([\n                    'const','let','var','function','return','if','else','for','while','do','switch',\n                    'case','break','continue','class','extends','new','this','super','import','export',\n                    'from','as','default','async','await','try','catch','finally','throw','typeof',\n                    'instanceof','delete','yield','in','of','def','elif','lambda','pass','with','global',\n                    'public','private','protected','static','final','void','int','long','float','double',\n                    'char','bool','boolean','string','struct','enum','interface','package','func','fn',\n                    'type','where','select','update','insert','delete','where','and','or','not','end',\n                    'then','fi','done','echo','use','mut','impl','trait','match','module','require'\n                ]);\n                const HL_LITERALS = new Set(['true','false','null','undefined','None','True','False','nil','NaN','Infinity']);\n                const highlightCode = (code) => {\n                    const re = /(\\/\\/[^\\n]*|#[^\\n]*|\\/\\*[\\s\\S]*?\\*\\/|--[^\\n]*)|(`(?:\\\\.|[^`\\\\])*`|\"(?:\\\\.|[^\"\\\\])*\"|'(?:\\\\.|[^'\\\\])*')|(\\b\\d[\\d_.]*(?:[eE][+-]?\\d+)?\\b|\\b0[xX][0-9a-fA-F]+\\b)|([A-Za-z_$][A-Za-z0-9_$]*)/g;\n                    const nodes = [];\n                    let buffer = '';\n                    let last = 0;\n                    let key = 0;\n                    const flush = () => { if (buffer) { nodes.push(buffer); buffer = ''; } };\n                    let m;\n                    while ((m = re.exec(code)) !== null) {\n                        if (m.index > last) buffer += code.slice(last, m.index);\n                        last = re.lastIndex;\n                        let cls = null;\n                        if (m[1]) cls = 'text-gray-500 italic';        // comment\n                        else if (m[2]) cls = 'text-amber-300';         // string\n                        else if (m[3]) cls = 'text-sky-300';           // number\n                        else if (m[4]) {                                // identifier\n                            if (HL_KEYWORDS.has(m[4])) cls = 'text-purple-300';\n                            else if (HL_LITERALS.has(m[4])) cls = 'text-sky-300';\n                        }\n                        if (cls) {\n                            flush();\n                            nodes.push(React.createElement('span', { key: `h${key++}`, className: cls }, m[0]));\n                        } else {\n                            buffer += m[0];\n                        }\n                    }\n                    if (last < code.length) buffer += code.slice(last);\n                    flush();\n                    return nodes;\n                };\n\n                // Fenced-language \u2192 Prism grammar id (with common aliases).\n                const PRISM_ALIAS = {\n                    js: 'javascript', mjs: 'javascript', javascript: 'javascript', node: 'javascript',\n                    ts: 'typescript', typescript: 'typescript', jsx: 'jsx', tsx: 'tsx',\n                    py: 'python', python: 'python', sh: 'bash', shell: 'bash', zsh: 'bash', bash: 'bash',\n                    'c++': 'cpp', cpp: 'cpp', cc: 'cpp', cxx: 'cpp', c: 'c', h: 'c',\n                    cs: 'csharp', csharp: 'csharp', java: 'java', go: 'go', golang: 'go',\n                    rs: 'rust', rust: 'rust', json: 'json', yml: 'yaml', yaml: 'yaml', sql: 'sql',\n                    md: 'markdown', markdown: 'markdown', html: 'markup', xml: 'markup', svg: 'markup', css: 'css'\n                };\n\n                // Monospace code window with a copy button (clipboard auto-clears in 30s).\n                // Syntax highlighting is done by Prism when available. SECURITY: Prism only\n                // TOKENIZES the snippet \u2014 it never executes it. Prism.highlight() HTML-escapes\n                // the input before tokenizing, so the highlighted markup contains no live code\n                // and can't inject scripts (CSP also blocks inline execution). When Prism or the\n                // grammar is missing we fall back to the dependency-free React-node highlighter.\n                const CodeBlock = ({ code, lang }) => {\n                    const [copied, setCopied] = React.useState(false);\n                    const handleCopy = async () => {\n                        const ok = await copyToClipboardSecure(code, 30000);\n                        if (ok) {\n                            setCopied(true);\n                            setTimeout(() => setCopied(false), 2000);\n                        }\n                    };\n                    const norm = PRISM_ALIAS[(lang || '').toLowerCase()] || (lang || '').toLowerCase();\n                    const prism = (typeof window !== 'undefined') ? window.Prism : null;\n                    const grammar = (prism && prism.languages) ? prism.languages[norm] : null;\n                    const usePrism = !!(prism && grammar && typeof prism.highlight === 'function');\n                    let highlightedHtml = null;\n                    if (usePrism) {\n                        try { highlightedHtml = prism.highlight(code, grammar, norm); } catch (_) { highlightedHtml = null; }\n                    }\n                    const displayLang = (usePrism ? norm : (lang || 'code'));\n                    const codeEl = (usePrism && highlightedHtml != null)\n                        // Prism-escaped highlight markup \u2014 safe to inject (no live code).\n                        ? React.createElement('code', { className: 'language-' + norm, dangerouslySetInnerHTML: { __html: highlightedHtml } })\n                        // Fallback: React text nodes, never HTML.\n                        : React.createElement('code', null, highlightCode(code));\n                    return React.createElement('div', {\n                        className: \"my-1 rounded-lg overflow-hidden\",\n                        style: { backgroundColor: 'var(--sb-legacy-1)', border: '0 solid var(--sb-text-3)' }\n                    }, [\n                        React.createElement('div', {\n                            key: 'hdr',\n                            className: \"flex items-center justify-between px-3 py-1.5\",\n                            style: { backgroundColor: 'var(--sb-legacy-2)', border: '0 solid var(--sb-text-3)' }\n                        }, [\n                            React.createElement('span', {\n                                key: 'lang',\n                                className: \"text-[11px] uppercase tracking-wide text-gray-500 font-mono\"\n                            }, displayLang),\n                            React.createElement('button', {\n                                key: 'copy',\n                                onClick: handleCopy,\n                                title: \"Copy \u2014 clipboard auto-clears in 30s\",\n                                className: \"flex items-center text-[11px] text-gray-400 hover:text-green-400 transition-colors\"\n                            }, [\n                                React.createElement('i', {\n                                    key: 'ic',\n                                    className: `${copied ? 'fas fa-check text-green-400' : 'far fa-copy'} me-1`\n                                }),\n                                copied ? t('action.copied') : t('action.copy')\n                            ])\n                        ]),\n                        React.createElement('pre', {\n                            key: 'pre',\n                            className: \"px-3 py-2 overflow-x-auto text-xs leading-relaxed text-gray-200 custom-scrollbar\",\n                            style: { whiteSpace: 'pre', fontFamily: 'ui-monospace, SFMono-Regular, Menlo, Consolas, monospace', margin: 0 }\n                        }, codeEl)\n                    ]);\n                };\n\n                // Render a message body: code windows for fenced blocks, line-preserving\n                // text otherwise. Built from already-sanitized text via React nodes only.\n                const MessageBody = ({ text }) => {\n                    const segments = parseMessageSegments(text);\n                    if (!segments) {\n                        return React.createElement('div', {\n                            className: \"text-sm break-words\",\n                            style: { whiteSpace: 'pre-wrap', wordBreak: 'break-word' }\n                        }, text);\n                    }\n                    return React.createElement('div', { className: \"text-sm\" },\n                        segments.map((seg, i) => seg.kind === 'code'\n                            ? React.createElement(CodeBlock, { key: i, code: seg.content, lang: seg.lang })\n                            : (seg.content.trim()\n                                ? React.createElement('div', {\n                                    key: i,\n                                    className: \"break-words\",\n                                    style: { whiteSpace: 'pre-wrap', wordBreak: 'break-word' }\n                                }, seg.content)\n                                : null)\n                        )\n                    );\n                };\n\n                // Composer toolbar: code / view-once / disappearing.\n                // Borderless icon+label buttons; active state uses the brand orange\n                // (accent-orange). View-once and Timer open a small time picker.\n                const ChatToolbar = ({ codeMode, setCodeMode, viewOnceMode, setViewOnceMode, viewOnceTtl, setViewOnceTtl, disappearTtl, setDisappearTtl }) => {\n                    const [openMenu, setOpenMenu] = React.useState(null); // 'once' | 'timer' | null\n                    const fmt = (s) => s >= 3600 ? `${Math.round(s / 3600)}h` : (s >= 60 ? `${Math.round(s / 60)}m` : `${s}s`);\n\n                    const btnClass = (active) =>\n                        `inline-flex items-center gap-2 h-9 px-3 rounded-lg text-xs font-medium transition-colors duration-150 ${active\n                            ? 'accent-orange bg-orange-500/10'\n                            : 'text-gray-400 hover:text-gray-200 hover:bg-gray-700/40'}`;\n\n                    const pickerItem = (opt, current, onPick) =>\n                        React.createElement('button', {\n                            key: String(opt.value),\n                            type: 'button',\n                            onClick: () => { onPick(opt.value); setOpenMenu(null); },\n                            // Comfortable tap target + readable size on mobile.\n                            className: `w-full text-start px-4 py-3 sm:py-2.5 text-sm flex items-center gap-3 transition-colors ${current === opt.value\n                                ? 'accent-orange bg-orange-500/10'\n                                : 'text-gray-200 hover:bg-gray-700/50 active:bg-gray-700/60'}`\n                        }, [\n                            React.createElement('i', { key: 'i', className: `${opt.icon || 'far fa-clock'} w-4 text-center` }),\n                            React.createElement('span', { key: 'l' }, opt.label)\n                        ]);\n\n                    // Opens UPWARD (bottom:100%) via inline style so it never depends on a\n                    // purgeable utility class and never pushes the composer layout down.\n                    const picker = (options, current, onPick) =>\n                        React.createElement('div', {\n                            className: \"absolute end-0 z-50 min-w-[180px] max-w-[78vw] rounded-xl shadow-2xl overflow-hidden\",\n                            style: { backgroundColor: 'var(--sb-legacy-3)', border: '0 solid var(--sb-text-3)', bottom: '100%', marginBottom: '8px' }\n                        }, options.map(opt => pickerItem(opt, current, onPick)));\n\n                    const labelBtn = (key, { active, icon, label, title, onClick }) =>\n                        React.createElement('button', {\n                            key, type: 'button', onClick, title, 'aria-pressed': !!active,\n                            className: btnClass(active)\n                        }, [\n                            React.createElement('i', { key: 'i', className: `${icon} text-[13px]` }),\n                            React.createElement('span', { key: 'l', className: 'leading-none' }, label)\n                        ]);\n\n                    return React.createElement('div', { className: \"flex items-center gap-1\" }, [\n                        // Invisible backdrop closes any open picker on outside click.\n                        openMenu && React.createElement('div', {\n                            key: 'backdrop',\n                            className: \"fixed inset-0 z-40\",\n                            onClick: () => setOpenMenu(null)\n                        }),\n\n                        // Code \u2014 toggles code mode (expands the input box).\n                        labelBtn('code', {\n                            active: codeMode,\n                            icon: 'fas fa-code',\n                            label: t('msg.code'),\n                            title: t('chat.codeBlock'),\n                            onClick: () => setCodeMode(v => !v)\n                        }),\n\n                        // View once \u2014 pick how long it stays after the peer opens it.\n                        React.createElement('div', { key: 'once', className: 'relative' }, [\n                            labelBtn('once-btn', {\n                                active: viewOnceMode,\n                                icon: 'fas fa-eye-slash',\n                                label: viewOnceMode ? `Once \u00B7 ${fmt(viewOnceTtl)}` : t('chat.viewOnce'),\n                                title: t('chat.viewOnceTitle'),\n                                onClick: () => setOpenMenu(openMenu === 'once' ? null : 'once')\n                            }),\n                            openMenu === 'once' && picker([\n                                { value: 0, label: 'Off', icon: 'fas fa-ban' },\n                                { value: 5, label: '5s after reading' },\n                                { value: 15, label: '15s after reading' },\n                                { value: 30, label: '30s after reading' },\n                                { value: 60, label: '1m after reading' }\n                            ], viewOnceMode ? viewOnceTtl : 0, (v) => {\n                                if (v === 0) { setViewOnceMode(false); }\n                                else { setViewOnceTtl(v); setViewOnceMode(true); }\n                            })\n                        ]),\n\n                        // Timer \u2014 pick the disappearing duration.\n                        React.createElement('div', { key: 'timer', className: 'relative' }, [\n                            labelBtn('timer-btn', {\n                                active: disappearTtl > 0,\n                                icon: 'fas fa-stopwatch',\n                                label: disappearTtl > 0 ? `${t('msg.timer')} \u00B7 ${fmt(disappearTtl)}` : t('msg.timer'),\n                                title: t('chat.disappearing'),\n                                onClick: () => setOpenMenu(openMenu === 'timer' ? null : 'timer')\n                            }),\n                            openMenu === 'timer' && picker([\n                                { value: 0, label: 'Off', icon: 'fas fa-ban' },\n                                { value: 30, label: '30 seconds' },\n                                { value: 300, label: '5 minutes' },\n                                { value: 3600, label: '1 hour' }\n                            ], disappearTtl, (v) => setDisappearTtl(v))\n                        ])\n                    ]);\n                };\n\n                // Enhanced Copy Button with better UX\n                const EnhancedCopyButton = ({ text, className = \"\", children }) => {\n                    const [copied, setCopied] = React.useState(false);\n        \n                    const handleCopy = async () => {\n                        try {\n                            await navigator.clipboard.writeText(text);\n                            setCopied(true);\n                            setTimeout(() => setCopied(false), 2000);\n                        } catch (error) {\n                            console.error('Copy failed:', error);\n                            // Fallback for older browsers\n                            const textArea = document.createElement('textarea');\n                            textArea.value = text;\n                            document.body.appendChild(textArea);\n                            textArea.select();\n                            document.execCommand('copy');\n                            document.body.removeChild(textArea);\n                            setCopied(true);\n                            setTimeout(() => setCopied(false), 2000);\n                        }\n                    };\n        \n                    return React.createElement('button', {\n                        onClick: handleCopy,\n                        className: `${className} transition-all duration-200`\n                    }, [\n                        React.createElement('i', {\n                            key: 'icon',\n                            className: `${copied ? 'fas fa-check accent-green' : 'fas fa-copy text-secondary'} me-2`\n                        }),\n                        copied ? t('chat.copied') : children\n                    ]);\n                };\n        \n                /**\n                 * How many digits a safety code has.\n                 *\n                 * Seven, everywhere: the pairwise code is `n % 10_000_000` padded to\n                 * seven (see the manager's SAS derivation) and the group code is derived\n                 * to the same length. It is stated once here so the two inputs that ask\n                 * for it cannot drift apart from each other or from the real code.\n                 */\n                const SAS_CODE_LENGTH = 7;\n\n                // Verification Component\n                const VerificationStep = ({ verificationCode, onConfirm, onReject, localConfirmed, remoteConfirmed, bothConfirmed }) => {\n                    const [sasInput, setSasInput] = React.useState('');\n                    const [error, setError] = React.useState('');\n                    const normalizedExpectedLength = (verificationCode || '').replace(/[-\\s]/g, '').length;\n                    const normalizedInputLength = sasInput.replace(/[-\\s]/g, '').length;\n                    const canConfirm = !localConfirmed && normalizedExpectedLength > 0 && normalizedInputLength === normalizedExpectedLength;\n\n                    React.useEffect(() => {\n                        setSasInput('');\n                        setError('');\n                    }, [verificationCode]);\n\n                    const handleConfirm = async () => {\n                        try {\n                            setError('');\n                            await onConfirm(sasInput);\n                        } catch (confirmationError) {\n                            setSasInput('');\n                            if (confirmationError?.message === 'SAS_MAX_ATTEMPTS') {\n                                setError(t('sas.tooManyAttempts'));\n                            } else {\n                                setError(t('sas.incorrect'));\n                            }\n                        }\n                    };\n\n                    return React.createElement('div', {\n                        className: \"card-minimal rounded-xl p-6 border-purple-500/20\"\n                    }, [\n                        React.createElement('div', {\n                            key: 'header',\n                            className: \"flex items-center mb-4\"\n                        }, [\n                            React.createElement('div', {\n                                key: 'icon',\n                                className: \"w-10 h-10 bg-purple-500/10 border border-purple-500/20 rounded-lg flex items-center justify-center me-3\"\n                            }, [\n                                React.createElement('i', {\n                                    className: 'fas fa-shield-alt accent-purple'\n                                })\n                            ]),\n                            React.createElement('h3', {\n                                key: 'title',\n                                className: \"text-lg font-medium text-primary\"\n                            }, \"Security verification\")\n                        ]),\n                        React.createElement('div', {\n                            key: 'content',\n                            className: \"space-y-4\"\n                        }, [\n                            React.createElement('p', {\n                                key: 'description',\n                                className: \"text-secondary text-sm\"\n                            }, \"Compare this code with your peer out-of-band, then type the same code below to unlock the chat.\"),\n                            React.createElement('div', {\n                                key: 'code-display',\n                                className: \"text-center\"\n                            }, [\n                                React.createElement('div', {\n                                    key: 'code',\n                                    ...LTR_TEXT,\n                                    className: \"verification-code text-2xl py-4\",\n                                    style: { ...LTR_TEXT.style, textAlign: 'center' }\n                                }, verificationCode)\n                            ]),\n                            React.createElement('div', {\n                                key: 'sas-input-wrap',\n                                className: \"space-y-2\"\n                            }, [\n                                React.createElement('label', {\n                                    key: 'sas-label',\n                                    className: \"block text-sm text-secondary\"\n                                }, \"Enter the verified code\"),\n                                React.createElement('input', {\n                                    key: 'sas-input',\n                                    type: 'text',\n                                    dir: 'ltr',\n                                    value: sasInput,\n                                    // The safety code is seven DIGITS and has been for as\n                                    // long as it has existed (see the manager's SAS\n                                    // derivation). Asking for text opened a full QWERTY\n                                    // keyboard on a phone, where the digits are a shift\n                                    // away \u2014 a keyboard for characters that can never be\n                                    // part of the answer. Non-digits are stripped rather\n                                    // than rejected so a pasted \"123-4567\" still works.\n                                    onChange: (event) => {\n                                        setSasInput(event.target.value.replace(/\\D/g, '').slice(0, SAS_CODE_LENGTH));\n                                        if (error) setError('');\n                                    },\n                                    autoFocus: true,\n                                    autoComplete: 'one-time-code',\n                                    spellCheck: false,\n                                    type: 'text',\n                                    inputMode: 'numeric',\n                                    pattern: '[0-9]*',\n                                    maxLength: SAS_CODE_LENGTH,\n                                    disabled: localConfirmed,\n                                    placeholder: verificationCode ? t('verify.placeholder') : t('verify.waiting'),\n                                    className: \"w-full rounded-lg border border-purple-500/30 bg-black/20 px-4 py-3 text-center text-xl tracking-[0.3em] text-primary focus:border-purple-400 focus:outline-none disabled:cursor-not-allowed disabled:opacity-60\",\n                                    style: { fontFamily: 'monospace' }\n                                }),\n                                error && React.createElement('p', {\n                                    key: 'sas-error',\n                                    className: \"text-sm text-red-400\"\n                                }, error)\n                            ]),\n                            // Verification status indicators\n                            React.createElement('div', {\n                                key: 'verification-status',\n                                className: \"space-y-2\"\n                            }, [\n                                React.createElement('div', {\n                                    key: 'local-status',\n                                    className: `flex items-center justify-between p-2 rounded-lg ${localConfirmed ? 'bg-green-500/10 border border-green-500/20' : 'bg-gray-500/10 border border-gray-500/20'}`\n                                }, [\n                                    React.createElement('span', {\n                                        key: 'local-label',\n                                        className: \"text-sm text-secondary\"\n                                    }, \"Your confirmation:\"),\n                                    React.createElement('div', {\n                                        key: 'local-indicator',\n                                        className: \"flex items-center\"\n                                    }, [\n                                        React.createElement('i', {\n                                            key: 'local-icon',\n                                            className: `fas ${localConfirmed ? 'fa-check-circle text-green-400' : 'fa-clock text-gray-400'} me-2`\n                                        }),\n                                        React.createElement('span', {\n                                            key: 'local-text',\n                                            className: `text-sm ${localConfirmed ? 'text-green-400' : 'text-gray-400'}`\n                                        }, localConfirmed ? t('verify.confirmed') : t('verify.pending'))\n                                    ])\n                                ]),\n                                React.createElement('div', {\n                                    key: 'remote-status',\n                                    className: `flex items-center justify-between p-2 rounded-lg ${remoteConfirmed ? 'bg-green-500/10 border border-green-500/20' : 'bg-gray-500/10 border border-gray-500/20'}`\n                                }, [\n                                    React.createElement('span', {\n                                        key: 'remote-label',\n                                        className: \"text-sm text-secondary\"\n                                    }, \"Peer confirmation:\"),\n                                    React.createElement('div', {\n                                        key: 'remote-indicator',\n                                        className: \"flex items-center\"\n                                    }, [\n                                        React.createElement('i', {\n                                            key: 'remote-icon',\n                                            className: `fas ${remoteConfirmed ? 'fa-check-circle text-green-400' : 'fa-clock text-gray-400'} me-2`\n                                        }),\n                                        React.createElement('span', {\n                                            key: 'remote-text',\n                                            className: `text-sm ${remoteConfirmed ? 'text-green-400' : 'text-gray-400'}`\n                                        }, remoteConfirmed ? t('verify.confirmed') : t('verify.pending'))\n                                    ])\n                                ])\n                            ]),\n                            React.createElement('div', {\n                                key: 'warning',\n                                className: \"p-3 bg-yellow-500/10 border border-yellow-500/20 rounded-lg\"\n                            }, [\n                                React.createElement('p', {\n                                    className: \"text-yellow-400 text-sm flex items-center\"\n                                }, [\n                                    React.createElement('i', {\n                                        className: 'fas fa-exclamation-triangle me-2'\n                                    }),\n                                    t('sas.makeSure')\n                                ])\n                            ]),\n                            React.createElement('div', {\n                                key: 'buttons',\n                                className: \"flex space-x-3\"\n                            }, [\n                                React.createElement('button', {\n                                    key: 'confirm',\n                                    onClick: handleConfirm,\n                                    disabled: !canConfirm,\n                                    className: `flex-1 py-3 px-4 rounded-lg font-medium transition-all duration-200 ${!canConfirm ? 'bg-gray-500/20 text-gray-400 cursor-not-allowed' : 'btn-verify text-white'}`\n                                }, [\n                                    React.createElement('i', {\n                                        className: `fas ${localConfirmed ? 'fa-check-circle' : 'fa-check'} me-2`\n                                    }),\n                                    localConfirmed ? t('verify.confirmed') : t('verify.confirm')\n                                ]),\n                                React.createElement('button', {\n                                    key: 'reject',\n                                    onClick: onReject,\n                                    className: \"flex-1 bg-red-500/10 hover:bg-red-500/20 text-red-400 border border-red-500/20 py-3 px-4 rounded-lg font-medium transition-all duration-200\"\n                                }, [\n                                    React.createElement('i', {\n                                        className: 'fas fa-times me-2'\n                                    }),\n                                    t('sas.noMatch')\n                                ])\n                            ])\n                        ])\n                    ]);\n                };\n        \n                // Grain overlay for the view-once cover (Telegram-style blur + noise).\n                const GRAIN_URL = `url(\"data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20width='100'%20height='100'%3E%3Cfilter%20id='n'%3E%3CfeTurbulence%20type='fractalNoise'%20baseFrequency='0.9'%20numOctaves='2'%20stitchTiles='stitch'/%3E%3C/filter%3E%3Crect%20width='100%25'%20height='100%25'%20filter='url(%23n)'/%3E%3C/svg%3E\")`;\n                const SB_MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\n                // Deterministic fallback waveform when a peer sent no peaks (older builds).\n                const sbGenBars = (seed, n) => {\n                    const out = [];\n                    let s = seed || 1;\n                    for (let i = 0; i < n; i++) {\n                        s = (s * 9301 + 49297) % 233280;\n                        const r = s / 233280;\n                        const env = 0.45 + 0.55 * Math.sin((i / n) * Math.PI);\n                        out.push(Math.max(0.16, Math.min(1, (0.3 + r * 0.7) * env)));\n                    }\n                    return out;\n                };\n                const sbFmtClock = (sec) => {\n                    sec = Math.max(0, Math.round(sec));\n                    const m = Math.floor(sec / 60), s = sec % 60;\n                    return m + ':' + String(s).padStart(2, '0');\n                };\n\n                // \u2500\u2500 Voice message player (bubble body) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                // Play/pause + seekable waveform + duration, plus an upload/download\n                // progress ring while the encrypted audio is still transferring.\n                // Ported 1:1 from the \"MessageBubble\" design, wired to a real <audio>.\n                const VoicePlayer = ({ voice, isMe }) => {\n                    const h = React.createElement;\n                    const [playing, setPlaying] = React.useState(false);\n                    const [progress, setProgress] = React.useState(0);\n                    const [playErr, setPlayErr] = React.useState(false);\n                    const audioRef = React.useRef(null);\n                    const rafRef = React.useRef(null);\n\n                    const v = voice || {};\n                    const dur = Number.isFinite(v.dur) && v.dur > 0 ? v.dur : 8;\n                    const bars = (Array.isArray(v.bars) && v.bars.length) ? v.bars : sbGenBars(dur * 37 + 11, 34);\n                    const src = v.url || null;\n                    const transfer = v.transfer || null;\n                    const transferring = !!transfer && !src;\n                    const failed = !!v.error || playErr;\n                    const dir = transfer ? transfer.dir : null;\n                    const pct = transfer ? Math.max(0, Math.min(100, transfer.pct || 0)) : 100;\n\n                    React.useEffect(() => () => {\n                        if (rafRef.current) cancelAnimationFrame(rafRef.current);\n                        if (audioRef.current) { try { audioRef.current.pause(); } catch (_) {} audioRef.current = null; }\n                    }, []);\n                    // If the audio URL is swapped/removed, reset playback.\n                    React.useEffect(() => {\n                        if (!src && audioRef.current) { try { audioRef.current.pause(); } catch (_) {} audioRef.current = null; setPlaying(false); setProgress(0); }\n                    }, [src]);\n\n                    const pause = () => {\n                        if (audioRef.current) { try { audioRef.current.pause(); } catch (_) {} }\n                        if (rafRef.current) cancelAnimationFrame(rafRef.current);\n                        setPlaying(false);\n                    };\n                    const play = () => {\n                        if (!src) return;\n                        setPlayErr(false);\n                        if (!audioRef.current) {\n                            const a = new Audio();\n                            a.preload = 'auto';\n                            a.addEventListener('timeupdate', () => {\n                                const d = a.duration && isFinite(a.duration) ? a.duration : dur;\n                                if (d) setProgress(Math.min(1, a.currentTime / d));\n                            });\n                            a.addEventListener('ended', () => { setPlaying(false); setProgress(0); });\n                            a.addEventListener('error', () => { setPlaying(false); setPlayErr(true); });\n                            a.src = src;\n                            audioRef.current = a;\n                        }\n                        const p = audioRef.current.play();\n                        if (p && typeof p.then === 'function') {\n                            p.then(() => setPlaying(true)).catch((err) => { console.warn('Voice playback failed:', err && err.name, err && err.message); setPlayErr(true); setPlaying(false); });\n                        } else {\n                            setPlaying(true);\n                        }\n                    };\n                    const toggle = () => {\n                        if (transferring || failed || !src) return;\n                        if (playing) pause(); else play();\n                    };\n                    const seek = (e) => {\n                        if (transferring || failed || !src) return;\n                        const rect = e.currentTarget.getBoundingClientRect();\n                        const p = Math.max(0, Math.min(1, (e.clientX - rect.left) / rect.width));\n                        if (audioRef.current && audioRef.current.duration) audioRef.current.currentTime = p * audioRef.current.duration;\n                        setProgress(p);\n                    };\n\n                    const elapsed = progress * dur;\n                    const circ = 2 * Math.PI * 23;\n                    const playBg = isMe ? 'var(--sb-orange-solid)' : 'rgba(var(--sb-orange-rgb), 0.14)';\n                    const playColor = isMe ? 'var(--sb-on-accent)' : 'var(--sb-orange)';\n\n                    const barEls = bars.map((hgt, i) => {\n                        const played = (i + 0.5) / bars.length <= progress;\n                        let col;\n                        if (transferring) col = isMe ? 'rgba(var(--sb-ink), 0.13)' : 'rgba(var(--sb-ink), 0.1)';\n                        else col = played ? 'var(--sb-orange-solid)' : (isMe ? 'rgba(var(--sb-ink), 0.22)' : 'rgba(var(--sb-ink), 0.16)');\n                        return h('span', { key: i, style: { flex: '1 1 0', minWidth: 0, width: '3px', height: Math.round(6 + hgt * 22) + 'px', borderRadius: '2px', background: col, transition: 'background .12s' } });\n                    });\n\n                    const ring = transferring && h('svg', { key: 'ring', width: 50, height: 50, viewBox: '0 0 50 50', style: { position: 'absolute', inset: 0, transform: 'rotate(-90deg)' } }, [\n                        h('circle', { key: 'bg', cx: 25, cy: 25, r: 23, fill: 'none', stroke: 'rgba(var(--sb-orange-rgb), 0.2)', strokeWidth: 2.5 }),\n                        h('circle', { key: 'fg', cx: 25, cy: 25, r: 23, fill: 'none', stroke: 'var(--sb-orange-solid)', strokeWidth: 2.5, strokeLinecap: 'round', strokeDasharray: circ.toFixed(1), strokeDashoffset: (circ * (1 - pct / 100)).toFixed(1), style: { transition: 'stroke-dashoffset .12s linear' } })\n                    ]);\n\n                    const icon = failed\n                        ? h('i', { className: 'fas fa-triangle-exclamation', style: { fontSize: '14px' } })\n                        : (transferring\n                            ? h('svg', { width: 15, height: 15, viewBox: '0 0 24 24', fill: 'currentColor', style: { opacity: 0.5 } }, h('path', { d: 'M8 5.2v13.6l11-6.8z' }))\n                            : (playing\n                                ? h('svg', { width: 16, height: 16, viewBox: '0 0 24 24', fill: 'currentColor' }, [h('rect', { key: 'a', x: 6, y: 5, width: 4, height: 14, rx: 1.2 }), h('rect', { key: 'b', x: 14, y: 5, width: 4, height: 14, rx: 1.2 })])\n                                : h('svg', { width: 16, height: 16, viewBox: '0 0 24 24', fill: 'currentColor' }, h('path', { d: 'M8 5.2v13.6l11-6.8z' }))));\n\n                    const label = failed ? t('msg.failed') : (transferring ? (dir === 'up' ? t('chat.uploading') : t('chat.downloading')) : t('msg.voice'));\n                    const timeText = transferring ? (pct + '%') : sbFmtClock((playing || progress > 0) ? elapsed : dur);\n\n                    return h('div', { style: { display: 'flex', alignItems: 'center', gap: '13px', padding: '13px 15px 12px' } }, [\n                        h('div', { key: 'pw', style: { position: 'relative', flex: 'none', width: '50px', height: '50px', display: 'grid', placeItems: 'center' } }, [\n                            ring,\n                            h('button', {\n                                key: 'pb', onClick: toggle, title: transferring ? t('chat.transferring') : (playing ? t('msg.pause') : t('msg.play')),\n                                style: { width: '42px', height: '42px', borderRadius: '50%', display: 'grid', placeItems: 'center', border: 'none', background: failed ? 'rgba(var(--sb-red-rgb), 0.15)' : playBg, color: failed ? 'var(--sb-red)' : playColor, cursor: (transferring || failed || !src) ? 'default' : 'pointer', transition: 'transform .15s cubic-bezier(.2,.7,.3,1)' }\n                            }, icon)\n                        ]),\n                        h('div', { key: 'body', style: { flex: 1, minWidth: 0 } }, [\n                            h('div', { key: 'wave', onClick: seek, style: { display: 'flex', alignItems: 'center', gap: '2px', height: '30px', cursor: (transferring || failed || !src) ? 'default' : 'pointer' } }, barEls),\n                            h('div', { key: 'meta', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', marginTop: '6px' } }, [\n                                h('span', { key: 't', style: { fontFamily: SB_MONO, fontSize: '10.5px', fontWeight: 500, color: transferring ? 'var(--sb-orange-3)' : 'var(--sb-text-6)' } }, timeText),\n                                h('span', { key: 'l', style: { fontFamily: SB_MONO, fontSize: '9.5px', fontWeight: 600, color: failed ? 'var(--sb-red)' : (transferring ? 'var(--sb-orange)' : 'var(--sb-text-faint)'), textTransform: 'uppercase', letterSpacing: '0.8px' } }, label)\n                            ])\n                        ])\n                    ]);\n                };\n\n                // \u2500\u2500 Voice recorder (composer) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                // Auto-starts on mount; shows a live mic waveform + timer, with\n                // discard / send controls. Emits (blob, durationSec, waveformPeaks).\n                const VoiceRecorder = ({ onSend, onCancel }) => {\n                    const h = React.createElement;\n                    const MAX_SECONDS = 300; // hard cap so a note never balloons past the size limit\n                    const NBARS = 40;\n                    const [elapsed, setElapsed] = React.useState(0);\n                    const [liveBars, setLiveBars] = React.useState(() => new Array(NBARS).fill(0.06));\n                    const [micError, setMicError] = React.useState(false);\n                    const R = React.useRef({}).current;\n\n                    const teardownGraph = () => {\n                        try { if (R.node) { R.node.disconnect(); if (R.node.port) R.node.port.onmessage = null; R.node.onaudioprocess = null; } } catch (_) {}\n                        try { if (R.srcNode) R.srcNode.disconnect(); } catch (_) {}\n                        try { if (R.sink) R.sink.disconnect(); } catch (_) {}\n                        R.node = R.srcNode = R.sink = null;\n                    };\n                    const cleanup = () => {\n                        if (R.timer) clearInterval(R.timer);\n                        R.timer = null;\n                        teardownGraph();\n                        try { if (R.stream) R.stream.getTracks().forEach(t => t.stop()); } catch (_) {}\n                        try { if (R.ac) R.ac.close(); } catch (_) {}\n                        if (R.wurl) { try { URL.revokeObjectURL(R.wurl); } catch (_) {} R.wurl = null; }\n                        R.stream = R.ac = null;\n                    };\n\n                    const pushPeak = (amp) => {\n                        R.peaks = R.peaks || [];\n                        R.peaks.push(amp);\n                        const now = performance.now();\n                        if (!R.lastDraw || now - R.lastDraw > 55) {\n                            R.lastDraw = now;\n                            setLiveBars(prev => { const live = prev.slice(1); live.push(Math.max(0.08, amp)); return live; });\n                        }\n                    };\n\n                    const downsample = (peaks, n) => {\n                        if (!peaks || !peaks.length) return new Array(n).fill(0.3);\n                        const out = [];\n                        const step = peaks.length / n;\n                        for (let i = 0; i < n; i++) {\n                            const a = Math.floor(i * step), b = Math.max(a + 1, Math.floor((i + 1) * step));\n                            let m = 0;\n                            for (let j = a; j < b && j < peaks.length; j++) m = Math.max(m, peaks[j]);\n                            out.push(Math.max(0.16, Math.min(1, m)));\n                        }\n                        return out;\n                    };\n\n                    // Average-decimate captured PCM to a lower rate (voice-grade),\n                    // keeping the WAV small while staying universally decodable.\n                    const resample = (data, from, to) => {\n                        if (!data || !data.length || to >= from) return data || new Float32Array(0);\n                        const ratio = from / to;\n                        const outLen = Math.floor(data.length / ratio);\n                        const out = new Float32Array(outLen);\n                        for (let i = 0; i < outLen; i++) {\n                            const start = Math.floor(i * ratio), end = Math.min(data.length, Math.floor((i + 1) * ratio));\n                            let s = 0, n = 0;\n                            for (let j = start; j < end; j++) { s += data[j]; n++; }\n                            out[i] = n ? s / n : 0;\n                        }\n                        return out;\n                    };\n                    // Encode mono Float32 samples as a 16-bit PCM WAV blob. WAV plays\n                    // on every platform (incl. iOS/Safari), unlike webm/opus.\n                    const encodeWav = (samples, rate) => {\n                        const buf = new ArrayBuffer(44 + samples.length * 2);\n                        const view = new DataView(buf);\n                        const ws = (o, s) => { for (let i = 0; i < s.length; i++) view.setUint8(o + i, s.charCodeAt(i)); };\n                        ws(0, 'RIFF'); view.setUint32(4, 36 + samples.length * 2, true); ws(8, 'WAVE');\n                        ws(12, 'fmt '); view.setUint32(16, 16, true); view.setUint16(20, 1, true); view.setUint16(22, 1, true);\n                        view.setUint32(24, rate, true); view.setUint32(28, rate * 2, true); view.setUint16(32, 2, true); view.setUint16(34, 16, true);\n                        ws(36, 'data'); view.setUint32(40, samples.length * 2, true);\n                        let o = 44;\n                        for (let i = 0; i < samples.length; i++) { const s = Math.max(-1, Math.min(1, samples[i])); view.setInt16(o, s < 0 ? s * 0x8000 : s * 0x7FFF, true); o += 2; }\n                        return new Blob([buf], { type: 'audio/wav' });\n                    };\n\n                    // Push one captured PCM frame: store it and update the live waveform.\n                    const onPcmFrame = (frame) => {\n                        if (!frame || !frame.length) return;\n                        R.pcm.push(frame);\n                        R.sampleCount = (R.sampleCount || 0) + frame.length;\n                        let sum = 0;\n                        for (let i = 0; i < frame.length; i++) sum += frame[i] * frame[i];\n                        pushPeak(Math.min(1, Math.sqrt(sum / frame.length) * 3.2));\n                    };\n\n                    const finish = (send) => {\n                        if (R.finished) return;\n                        R.finished = true;\n                        if (R.timer) clearInterval(R.timer);\n                        R.timer = null;\n                        const peaks = (R.peaks || []).slice();\n                        const srcRate = (R.ac && R.ac.sampleRate) || 48000;\n                        teardownGraph();\n\n                        let outBlob = null, outDur = 1;\n                        const total = R.sampleCount || 0;\n                        // Require a little real audio so we never ship an empty/silent note.\n                        if (send && R.pcm && R.pcm.length && total > srcRate * 0.2) {\n                            const merged = new Float32Array(total);\n                            let off = 0;\n                            for (const c of R.pcm) { merged.set(c, off); off += c.length; }\n                            const targetRate = 24000;\n                            const out = resample(merged, srcRate, targetRate);\n                            outDur = Math.max(1, Math.round(out.length / targetRate));\n                            outBlob = encodeWav(out, targetRate); // always a valid, universally-playable WAV\n                        }\n\n                        try { if (R.stream) R.stream.getTracks().forEach(t => t.stop()); } catch (_) {}\n                        try { if (R.ac) R.ac.close(); } catch (_) {}\n                        if (R.wurl) { try { URL.revokeObjectURL(R.wurl); } catch (_) {} R.wurl = null; }\n                        R.stream = R.ac = null;\n                        R.pcm = [];\n\n                        if (send && outBlob && outBlob.size > 44) onSend(outBlob, outDur, downsample(peaks, 34));\n                        else if (send) { setMicError(true); R.finished = false; } // captured nothing \u2014 let the user retry/close\n                        else onCancel();\n                    };\n\n                    React.useEffect(() => {\n                        let cancelled = false;\n                        R.finished = false;\n                        R.peaks = [];\n                        R.pcm = [];\n                        R.sampleCount = 0;\n                        R.t0 = performance.now();\n                        R.timer = setInterval(() => {\n                            const e = (performance.now() - R.t0) / 1000;\n                            setElapsed(e);\n                            if (e >= MAX_SECONDS) finish(true);\n                        }, 200);\n\n                        (async () => {\n                            let stream = null;\n                            try {\n                                if (navigator.mediaDevices && navigator.mediaDevices.getUserMedia) {\n                                    stream = await navigator.mediaDevices.getUserMedia({ audio: { channelCount: 1, echoCancellation: true, noiseSuppression: true } });\n                                }\n                            } catch (_) { stream = null; }\n                            if (cancelled) { if (stream) stream.getTracks().forEach(t => t.stop()); return; }\n                            if (!stream) { setMicError(true); if (R.timer) clearInterval(R.timer); return; }\n\n                            R.stream = stream;\n                            // Capture raw PCM directly (no MediaRecorder / no decodeAudioData),\n                            // so we ALWAYS produce a valid WAV that plays on every platform,\n                            // incl. iOS/Safari. Prefer an AudioWorklet; fall back to a\n                            // ScriptProcessor. A muted sink keeps the graph pulling audio\n                            // without routing the mic back to the speakers.\n                            try {\n                                const AC = window.AudioContext || window.webkitAudioContext;\n                                R.ac = new AC();\n                                if (R.ac.state === 'suspended') { try { await R.ac.resume(); } catch (_) {} }\n                                R.srcNode = R.ac.createMediaStreamSource(stream);\n                                R.sink = R.ac.createGain();\n                                R.sink.gain.value = 0;\n\n                                let useWorklet = false;\n                                if (R.ac.audioWorklet && typeof R.ac.audioWorklet.addModule === 'function' && window.AudioWorkletNode) {\n                                    try {\n                                        const code = 'class P extends AudioWorkletProcessor{process(i){const c=i[0]&&i[0][0];if(c){this.port.postMessage(c.slice(0));}return true;}}registerProcessor(\"sb-pcm\",P);';\n                                        R.wurl = URL.createObjectURL(new Blob([code], { type: 'application/javascript' }));\n                                        await R.ac.audioWorklet.addModule(R.wurl);\n                                        if (cancelled) return;\n                                        R.node = new AudioWorkletNode(R.ac, 'sb-pcm');\n                                        R.node.port.onmessage = (e) => onPcmFrame(e.data);\n                                        R.srcNode.connect(R.node);\n                                        R.node.connect(R.sink);\n                                        R.sink.connect(R.ac.destination);\n                                        useWorklet = true;\n                                    } catch (_) { useWorklet = false; }\n                                }\n\n                                if (!useWorklet) {\n                                    const bufSize = 4096;\n                                    R.node = R.ac.createScriptProcessor(bufSize, 1, 1);\n                                    R.node.onaudioprocess = (e) => {\n                                        const inBuf = e.inputBuffer.getChannelData(0);\n                                        onPcmFrame(new Float32Array(inBuf));\n                                    };\n                                    R.srcNode.connect(R.node);\n                                    R.node.connect(R.sink);\n                                    R.sink.connect(R.ac.destination);\n                                }\n                            } catch (_) {\n                                setMicError(true);\n                                if (R.timer) clearInterval(R.timer);\n                            }\n                        })();\n\n                        return () => { cancelled = true; cleanup(); };\n                        // eslint-disable-next-line react-hooks/exhaustive-deps\n                    }, []);\n\n                    if (micError) {\n                        return h('div', { style: { display: 'flex', alignItems: 'center', gap: '12px' } }, [\n                            h('div', { key: 'msg', style: { flex: 1, minWidth: 0, display: 'flex', alignItems: 'center', gap: '9px', height: '46px', padding: '0 16px', borderRadius: '13px', background: 'rgba(var(--sb-red-strong-rgb), 0.06)', border: '1px solid rgba(var(--sb-red-strong-rgb), 0.22)', color: 'var(--sb-red)', fontSize: '13.5px' } }, [\n                                h('i', { key: 'i', className: 'fas fa-microphone-slash', style: { fontSize: '14px' } }),\n                                t('err.noAudio')\n                            ]),\n                            h('button', { key: 'x', onClick: onCancel, title: t('chatHdr.close'), style: { flex: 'none', width: '46px', height: '46px', borderRadius: '50%', display: 'grid', placeItems: 'center', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-6)', cursor: 'pointer' } },\n                                h('i', { className: 'fas fa-xmark', style: { fontSize: '16px' } }))\n                        ]);\n                    }\n\n                    const barEls = liveBars.map((hgt, i) => h('span', { key: i, style: { flex: 'none', width: '3px', height: Math.round(4 + hgt * 24) + 'px', borderRadius: '2px', background: 'var(--sb-red-solid)', opacity: (0.45 + hgt * 0.55) } }));\n\n                    return h('div', { style: { display: 'flex', alignItems: 'center', gap: '12px' } }, [\n                        h('button', {\n                            key: 'cancel', onClick: () => finish(false), title: t('chat.discard'),\n                            style: { flex: 'none', width: '42px', height: '42px', borderRadius: '12px', display: 'grid', placeItems: 'center', border: 'none', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-6)', cursor: 'pointer' }\n                        }, h('i', { className: 'fas fa-trash-can', style: { fontSize: '15px' } })),\n                        h('div', { key: 'bar', style: { flex: 1, minWidth: 0, display: 'flex', alignItems: 'center', gap: '11px', height: '46px', padding: '0 16px', borderRadius: '13px', background: 'rgba(var(--sb-red-strong-rgb), 0.06)', border: '1px solid rgba(var(--sb-red-strong-rgb), 0.22)' } }, [\n                            h('span', { key: 'dot', style: { position: 'relative', flex: 'none', width: '9px', height: '9px' } },\n                                h('span', { style: { position: 'absolute', inset: 0, borderRadius: '50%', background: 'var(--sb-red-solid)', animation: 'vmRec 1.3s ease-in-out infinite' } })),\n                            h('span', { key: 'time', style: { flex: 'none', fontFamily: SB_MONO, fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-1)', minWidth: '42px' } }, sbFmtClock(elapsed)),\n                            h('div', { key: 'wave', style: { flex: 1, minWidth: 0, display: 'flex', alignItems: 'center', justifyContent: 'flex-end', gap: '2px', height: '30px', overflow: 'hidden' } }, barEls)\n                        ]),\n                        h('button', {\n                            key: 'send', onClick: () => finish(true), title: t('chat.sendVoice'),\n                            style: { flex: 'none', width: '46px', height: '46px', borderRadius: '50%', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', cursor: 'pointer', boxShadow: '0 8px 22px rgba(var(--sb-orange-rgb), 0.3)', transition: 'transform .15s cubic-bezier(.2,.7,.3,1)' }\n                        }, h('svg', { width: 20, height: 20, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round' }, [h('path', { key: 'a', d: 'M22 2L11 13' }), h('path', { key: 'b', d: 'M22 2l-7 20-4-9-9-4 20-7z' })]))\n                    ]);\n                };\n\n                // Enhanced Chat Message \u2014 redesigned bubbles (SecureBit Chat design).\n                const EnhancedChatMessage = ({ message, type, timestamp, mid, status, viewOnce, viewOnceTtl, expiresAt, expired, nowTick, canUnsend, onUnsend, onExpire, voice }) => {\n                    const [revealed, setRevealed] = React.useState(false);\n                    const revealTimerRef = React.useRef(null);\n\n                    const formatTime = (ts) => new Date(ts).toLocaleTimeString('en-GB', { hour: '2-digit', minute: '2-digit', second: '2-digit' });\n\n                    React.useEffect(() => () => { if (revealTimerRef.current) clearTimeout(revealTimerRef.current); }, []);\n\n                    // System / notice messages: centered subtle pill. \"notice\" is shown\n                    // in the message flow (e.g. \"connection restored\"); \"system\" lives in\n                    // the handshake log. Notices use a green accent.\n                    if (type === 'system' || type === 'notice') {\n                        const isNotice = type === 'notice';\n                        return React.createElement('div', { className: 'message-slide', style: { display: 'flex', justifyContent: 'center', margin: '4px 0' } },\n                            React.createElement('div', {\n                                style: { maxWidth: '80%', padding: '8px 14px', borderRadius: '10px', border: '1px solid ' + (isNotice ? 'rgba(var(--sb-green-rgb), 0.25)' : 'rgba(var(--sb-orange-rgb), 0.22)'), background: isNotice ? 'rgba(var(--sb-green-rgb), 0.08)' : 'rgba(var(--sb-orange-rgb), 0.08)', color: isNotice ? 'var(--sb-green-soft)' : 'var(--sb-orange-4)', fontSize: '12.5px', textAlign: 'center', lineHeight: 1.5 }\n                            }, message)\n                        );\n                    }\n\n                    const isMe = type === 'sent';\n                    const encrypted = isMe;\n                    const isViewOnce = type === 'received' && viewOnce === true;\n\n                    const remaining = (typeof expiresAt === 'number')\n                        ? Math.max(0, Math.ceil((expiresAt - (nowTick || Date.now())) / 1000))\n                        : null;\n                    const fmtRemaining = (sec) => {\n                        if (sec == null) return '';\n                        const h = Math.floor(sec / 3600), m = Math.floor((sec % 3600) / 60), s = sec % 60;\n                        const pad = (n) => String(n).padStart(2, '0');\n                        return h > 0 ? (h + ':' + pad(m) + ':' + pad(s)) : (m + ':' + pad(s));\n                    };\n\n                    const handleReveal = () => {\n                        if (revealed) return;\n                        setRevealed(true);\n                        const ms = Math.max(1, (typeof viewOnceTtl === 'number' ? viewOnceTtl : 15)) * 1000;\n                        revealTimerRef.current = setTimeout(() => { onExpire && onExpire(); }, ms);\n                    };\n\n                    const radius = isMe ? '14px 14px 4px 14px' : '14px 14px 14px 4px';\n                    const border = isMe ? '1px solid rgba(var(--sb-ink), 0.10)' : '1px solid rgba(var(--sb-ink), 0.06)';\n                    const bg = isMe ? 'var(--sb-surface-3)' : 'var(--sb-surface)';\n\n                    // Expired tombstone (disappearing / view-once) \u2014 content already wiped.\n                    const isExpired = expired === true || (typeof expiresAt === 'number' && (nowTick || Date.now()) >= expiresAt);\n                    if (isExpired) {\n                        return React.createElement('div', {\n                            className: 'message-slide',\n                            style: { display: 'flex', width: '100%', justifyContent: isMe ? 'flex-end' : 'flex-start' }\n                        }, React.createElement('div', { style: { maxWidth: '74%', minWidth: '170px' } },\n                            React.createElement('div', { style: { display: 'flex', alignItems: 'center', gap: '9px', padding: '12px 15px', borderRadius: radius, border: '1px dashed rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.018)' } }, [\n                                React.createElement('i', { key: 'i', className: 'fas fa-clock', style: { color: 'var(--sb-text-9)', fontSize: '13px' } }),\n                                React.createElement('span', { key: 't', style: { fontSize: '13px', color: 'var(--sb-text-9)', fontStyle: 'italic' } }, t('chat.expired'))\n                            ])\n                        ));\n                    }\n\n                    let body;\n                    if (voice) {\n                        body = React.createElement(VoicePlayer, { key: 'voice', voice, isMe });\n                    } else if (isViewOnce && !revealed) {\n                        body = React.createElement('div', {\n                            key: 'cover',\n                            onClick: handleReveal,\n                            style: { position: 'relative', cursor: 'pointer', padding: '12px 15px 10px', overflow: 'hidden' }\n                        }, [\n                            React.createElement('div', { key: 'blur', style: { fontSize: '14.5px', lineHeight: 1.55, color: 'var(--sb-text-5)', filter: 'blur(7px)', userSelect: 'none', pointerEvents: 'none', wordBreak: 'break-word', minHeight: '22px' } }, message),\n                            React.createElement('div', { key: 'grain', style: { position: 'absolute', inset: 0, backgroundImage: GRAIN_URL, backgroundSize: '90px', opacity: 0.18, mixBlendMode: 'screen', pointerEvents: 'none' } }),\n                            React.createElement('div', { key: 'lbl', style: { position: 'absolute', inset: 0, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '7px', pointerEvents: 'none' } }, [\n                                React.createElement('i', { key: 'i', className: 'fas fa-eye-slash', style: { color: 'var(--sb-text-2)', fontSize: '13px' } }),\n                                React.createElement('span', { key: 't', style: { fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-2)', textShadow: '0 1px 5px rgba(0,0,0,0.75)' } }, t('chat.viewOnceTap'))\n                            ])\n                        ]);\n                    } else {\n                        body = React.createElement('div', { key: 'body', style: { padding: '12px 15px 10px', color: 'var(--sb-text-2)' } },\n                            React.createElement(MessageBody, { text: message })\n                        );\n                    }\n\n                    const metaLeft = [\n                        React.createElement('span', { key: 'time', style: { fontFamily: SB_MONO, fontSize: '10.5px', color: 'var(--sb-text-9)' } }, formatTime(timestamp))\n                    ];\n                    // WhatsApp-style delivery state on our own messages.\n                    if (isMe) {\n                        const stCfg = ({\n                            sending: { icon: 'fa-clock', color: 'var(--sb-text-9)', label: t('chat.sending') },\n                            sent: { icon: 'fa-check', color: 'var(--sb-text-7)', label: t('msg.sent') },\n                            // Two GREY ticks = delivered to the peer's device but not yet read.\n                            delivered: { icon: 'fa-check-double', color: 'var(--sb-text-7)', label: t('chat.delivered') },\n                            // Two GREEN ticks = the peer actually opened the chat and read it.\n                            read: { icon: 'fa-check-double', color: 'var(--sb-green)', label: t('msg.read') },\n                            failed: { icon: 'fa-triangle-exclamation', color: 'var(--sb-red)', label: t('chat.notSent') }\n                        })[status || 'sent'] || { icon: 'fa-check', color: 'var(--sb-text-7)', label: t('msg.sent') };\n                        metaLeft.push(React.createElement('span', {\n                            key: 'dlv', title: stCfg.label,\n                            style: { display: 'inline-flex', alignItems: 'center', color: stCfg.color }\n                        }, React.createElement('i', { className: 'fas ' + stCfg.icon, style: { fontSize: '10.5px' } })));\n                    }\n                    if (isViewOnce && revealed) {\n                        metaLeft.push(React.createElement('span', { key: 'vo', style: { display: 'inline-flex', alignItems: 'center', gap: '4px', fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-7)' } }, [\n                            React.createElement('span', { key: 'd', style: { width: '4px', height: '4px', borderRadius: '50%', background: 'var(--sb-text-7)' } }),\n                            t('chat.viewedOnce')\n                        ]));\n                    } else if (remaining !== null) {\n                        metaLeft.push(React.createElement('span', { key: 'ttl', style: { display: 'inline-flex', alignItems: 'center', gap: '4px', fontFamily: SB_MONO, fontSize: '10.5px', fontWeight: 500, color: 'var(--sb-orange)' } }, [\n                            React.createElement('i', { key: 'i', className: 'fas fa-clock', style: { fontSize: '10px' } }),\n                            fmtRemaining(remaining)\n                        ]));\n                    }\n\n                    const metaRight = [];\n                    metaRight.push(React.createElement('span', { key: 'status', style: { display: 'inline-flex', alignItems: 'center', gap: '5px', fontSize: '10.5px', fontWeight: 600, color: 'var(--sb-green)', flex: 'none' } }, [\n                        React.createElement('i', { key: 'i', className: encrypted ? 'fas fa-lock' : 'fas fa-lock-open', style: { fontSize: '10px' } }),\n                        encrypted ? t('chat.encrypted') : t('chat.decrypted')\n                    ]));\n                    // Delete-for-everyone sits AFTER the Encrypted/Decrypted status.\n                    if (canUnsend && isMe && mid) {\n                        metaRight.push(React.createElement('button', {\n                            key: 'unsend', onClick: () => onUnsend && onUnsend(mid), title: t('chat.deleteForEveryone'),\n                            className: 'sb-unsend',\n                            style: { background: 'none', border: 'none', cursor: 'pointer', color: 'var(--sb-text-faint)', fontSize: '11px', padding: 0, lineHeight: 1 }\n                        }, React.createElement('i', { className: 'fas fa-trash-can' })));\n                    }\n\n                    const meta = React.createElement('div', {\n                        key: 'meta',\n                        style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: '14px', padding: '0 15px 10px' }\n                    }, [\n                        React.createElement('div', { key: 'l', style: { display: 'flex', alignItems: 'center', gap: '9px', minWidth: 0 } }, metaLeft),\n                        React.createElement('div', { key: 'r', style: { display: 'flex', alignItems: 'center', gap: '9px', flex: 'none' } }, metaRight)\n                    ]);\n\n                    return React.createElement('div', {\n                        className: 'message-slide',\n                        style: { display: 'flex', width: '100%', justifyContent: isMe ? 'flex-end' : 'flex-start' }\n                    }, [\n                        React.createElement('div', { key: 'wrap', style: { maxWidth: '74%', minWidth: '170px' } },\n                            React.createElement('div', { style: { borderRadius: radius, border: border, background: bg, overflow: 'hidden' } }, [body, meta])\n                        )\n                    ]);\n                };\n        \n                // Enhanced Connection Setup with verification\n                const EnhancedConnectionSetup = ({\n                    messages, \n                    onCreateOffer, \n                    onCreateAnswer, \n                    onConnect, \n                    onClearData,\n                    onVerifyConnection,\n                    connectionStatus,\n                    offerData,\n                    answerData,\n                    offerInput,\n                    setOfferInput,\n                    answerInput,\n                    setAnswerInput,\n                    showOfferStep,\n                    showAnswerStep,\n                    verificationCode,\n                    showVerification,\n                    showQRCode,\n                    qrCodeUrl,\n                    showQRScanner,\n                    setShowQRCode,\n                    setShowQRScanner,\n                    setShowQRScannerModal,\n                    offerPassword,\n                    answerPassword,\n                    localVerificationConfirmed,\n                    remoteVerificationConfirmed,\n                    bothVerificationsConfirmed,\n                    // QR control props\n                    qrFramesTotal,\n                    qrFrameIndex,\n                    qrManualMode,\n                    toggleQrManualMode,\n                    nextQrFrame,\n                    prevQrFrame,\n                    markAnswerCreated,\n                    notificationIntegrationRef,\n                    isGeneratingKeys,\n                    setIsGeneratingKeys,\n                    handleCreateOffer,\n                    relayOnlyMode,\n                    setRelayOnlyMode,\n                    webrtcManagerRef,\n                    showIceSettings,\n                    setShowIceSettings,\n                    iceServersText,\n                    iceSettingsPersisted,\n                    customIceServers,\n                    handleApplyIceSettings,\n                    handleForgetIceSettings,\n                    // When true, render ONLY the create/connect card (no marketing landing,\n                    // no hero) so it slots into the chat column for an additional session.\n                    compact = false\n                }) => {\n                    const [mode, setMode] = React.useState('create');\n                    const [notificationPermissionRequested, setNotificationPermissionRequested] = React.useState(false);\n                    // Local UI state for the redesigned Start Secure screen\n                    const [qrModalOpen, setQrModalOpen] = React.useState(false);\n                    const [copied, setCopied] = React.useState(false);\n                    const [sasInput, setSasInput] = React.useState('');\n                    const [sasError, setSasError] = React.useState('');\n                    const [platformsOpen, setPlatformsOpen] = React.useState(false);\n                    const [codeRevealed, setCodeRevealed] = React.useState(false);\n                    const [genProgress, setGenProgress] = React.useState(0);\n\n                    // Reset the typed SAS whenever a fresh verification code arrives\n                    React.useEffect(() => { setSasInput(''); setSasError(''); }, [verificationCode]);\n                    // Close the QR popup and re-hide (blur) the code whenever the\n                    // exchange step changes \u2014 every new offer/answer starts concealed.\n                    // Verification is also a step change, and the one that matters most:\n                    // the peer has scanned the code and the channel is up, so a QR still\n                    // covering the screen is a one-time credential left on display over\n                    // the safety number the user is now supposed to be reading. The\n                    // offer/answer flags stay set underneath, which is why this cannot\n                    // be left to the !showOfferStep && !showAnswerStep case alone.\n                    React.useEffect(() => {\n                        if (showVerification || (!showOfferStep && !showAnswerStep)) setQrModalOpen(false);\n                        setCodeRevealed(false);\n                    }, [showOfferStep, showAnswerStep, showVerification]);\n                    // Animate the \"Securing your channel\" steps while keys generate.\n                    React.useEffect(() => {\n                        const generating = isGeneratingKeys && !showOfferStep && !showAnswerStep && !showVerification;\n                        if (!generating) { setGenProgress(0); return; }\n                        setGenProgress(0);\n                        let p = 0;\n                        const id = setInterval(() => {\n                            p += 1;\n                            setGenProgress(p);\n                            if (p >= 3) clearInterval(id);\n                        }, 520);\n                        return () => clearInterval(id);\n                    }, [isGeneratingKeys, showOfferStep, showAnswerStep, showVerification]);\n                    // Dismiss the download platforms popover on any outside click\n                    React.useEffect(() => {\n                        if (!platformsOpen) return;\n                        const onDoc = () => setPlatformsOpen(false);\n                        const id = setTimeout(() => document.addEventListener('click', onDoc), 0);\n                        return () => { clearTimeout(id); document.removeEventListener('click', onDoc); };\n                    }, [platformsOpen]);\n\n                    // \"Back\" \u2014 clear the in-progress exchange and return to the intro of\n                    // the current tab. onClearData() resets offer/answer/verification in\n                    // the parent, which flips the derived step back to \"intro\".\n                    const resetToSelect = () => {\n                        setIsGeneratingKeys(false);\n                        setQrModalOpen(false);\n                        onClearData();\n                    };\n        \n                    const handleVerificationConfirm = (userCode) => {\n                        return onVerifyConnection(userCode);\n                    };\n        \n                    const handleVerificationReject = () => {\n                        onVerifyConnection(null, false);\n                    };\n                    \n                    // Request notification permission on first user interaction\n                    const requestNotificationPermissionOnInteraction = async () => {\n                        if (notificationPermissionRequested) {\n                            return; // Already requested\n                        }\n                        \n                        try {\n                            // Check if Notification API is supported\n                            if (!('Notification' in window)) {\n                                return;\n                            }\n                            \n                            // Check if we're in a secure context\n                            if (!window.isSecureContext && window.location.protocol !== 'https:' && window.location.hostname !== 'localhost') {\n                                return;\n                            }\n                            \n                            // Check current permission status\n                            const currentPermission = (typeof Notification !== 'undefined' && Notification) \n                                ? Notification.permission \n                                : 'denied';\n                            \n                            // Only request if permission is default (not granted or denied)\n                            if (currentPermission === 'default' && typeof Notification !== 'undefined' && Notification) {\n                                const permission = await Notification.requestPermission();\n                                \n                                if (permission === 'granted') {\n                                    // Initialize notification integration immediately\n                                    try {\n                                        if (window.NotificationIntegration && webrtcManagerRef.current) {\n                                            const integration = new window.NotificationIntegration(webrtcManagerRef.current);\n                                            await integration.init();\n                                            \n                                            // Store reference for cleanup\n                                            notificationIntegrationRef.current = integration;\n                                        }\n                                    } catch (error) {\n                                        // Handle error silently\n                                    }\n                                    \n                                    // Send welcome notification\n                                    setTimeout(() => {\n                                        try {\n                                            const welcomeNotification = new Notification('SecureBit Chat', {\n                                                body: t('notify.enabledBody'),\n                                                icon: '/logo/icon-192x192.png',\n                                                tag: 'welcome-notification'\n                                            });\n                                            \n                                            welcomeNotification.onclick = () => {\n                                                welcomeNotification.close();\n                                            };\n                                            \n                                            setTimeout(() => {\n                                                welcomeNotification.close();\n                                            }, 5000);\n                                            \n                                        } catch (error) {\n                                            // Handle error silently\n                                        }\n                                    }, 1000);\n                                    \n                                }\n                            } else if (currentPermission === 'granted') {\n                                // Initialize notification integration immediately\n                                try {\n                                    if (window.NotificationIntegration && webrtcManagerRef.current && !notificationIntegrationRef.current) {\n                                        const integration = new window.NotificationIntegration(webrtcManagerRef.current);\n                                        await integration.init();\n                                        \n                                        // Store reference for cleanup\n                                        notificationIntegrationRef.current = integration;\n                                    }\n                                } catch (error) {\n                                    // Handle error silently\n                                }\n                                \n                                // Test notification to confirm it works\n                                setTimeout(() => {\n                                    try {\n                                        const testNotification = new Notification('SecureBit Chat', {\n                                            body: t('notify.workingBody'),\n                                            icon: '/logo/icon-192x192.png',\n                                            tag: 'test-notification'\n                                        });\n                                        \n                                        testNotification.onclick = () => {\n                                            testNotification.close();\n                                        };\n                                        \n                                        setTimeout(() => {\n                                            testNotification.close();\n                                        }, 5000);\n                                    } catch (error) {\n                                        // Handle error silently\n                                    }\n                                }, 1000);\n                            }\n                            \n                            setNotificationPermissionRequested(true);\n                            \n                        } catch (error) {\n                            // Handle error silently\n                        }\n                    };\n        \n                    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                    // Start Secure \u2014 redesigned two-column connection screen.\n                    // Layout/colors/animation from the imported design; wired to the\n                    // app's real crypto handlers. Icons use FontAwesome (house style).\n                    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                    const h = React.createElement;\n                    const C_ORANGE = 'var(--sb-orange)';\n                    const C_GREEN = 'var(--sb-green)';\n                    // The same two accents as a fill rather than as text. A button's\n                    // background and a diagram's strokes are marks: they stay the brand\n                    // colour in both themes, because the ink on them is near-black either\n                    // way. C_ORANGE / C_GREEN above darken in the light theme so accent\n                    // *text* clears 4.5:1 on white, which a fill must not inherit.\n                    const C_ORANGE_SOLID = 'var(--sb-orange-solid)';\n                    const C_GREEN_SOLID = 'var(--sb-green-solid)';\n                    const MONO = SB_MONO;\n\n                    const encode = (data) => {\n                        try {\n                            const min = typeof data === 'object' ? JSON.stringify(data) : (data || '');\n                            if (!min) return '';\n                            if (typeof window.encodeBinaryToPrefixed === 'function') return window.encodeBinaryToPrefixed(min);\n                            if (typeof window.compressToPrefixedGzip === 'function') return window.compressToPrefixedGzip(min);\n                            return min;\n                        } catch { return typeof data === 'object' ? JSON.stringify(data) : (data || ''); }\n                    };\n\n                    // Derived flow step from the parent's real connection state\n                    const isCreate = mode === 'create';\n                    const isGenerating = isGeneratingKeys && !showOfferStep && !showAnswerStep && !showVerification;\n                    const isOfferCred = isCreate && showOfferStep && !showVerification;\n                    const isAnswerCred = !isCreate && showAnswerStep && !showVerification;\n                    const atIntro = !showVerification && !isGenerating && !isOfferCred && !isAnswerCred;\n                    const accent = isCreate ? C_ORANGE : C_GREEN;\n                    // Same pair as a mark: fa() puts `color` on the icon's stroke.\n                    const accentSolid = isCreate ? C_ORANGE_SOLID : C_GREEN_SOLID;\n                    const kicker = showVerification\n                        ? t('step.verification')\n                        : ((isOfferCred || isAnswerCred) ? t('step.exchange') : t('step.open'));\n\n                    const credCode = isCreate ? encode(offerData) : encode(answerData);\n                    const hasInvite = (offerInput || '').trim().length > 0;\n                    const hasAnswer = (answerInput || '').trim().length > 0;\n\n                    const copyCred = async () => {\n                        try {\n                            if (typeof copyToClipboardSecure === 'function') await copyToClipboardSecure(credCode);\n                            else await navigator.clipboard.writeText(credCode);\n                        } catch (e) {}\n                        setCopied(true);\n                        setTimeout(() => setCopied(false), 1600);\n                    };\n\n                    // SAS verification. The length is read off the code we were given\n                    // rather than assumed, so the button enables exactly when the input\n                    // is as long as the real answer.\n                    const normExpected = (verificationCode || '').replace(/[-\\s]/g, '').length;\n                    const normInput = sasInput.replace(/[-\\s]/g, '').length;\n                    const canConfirm = !localVerificationConfirmed && normExpected > 0 && normInput === normExpected;\n                    const handleSasConfirm = async () => {\n                        try {\n                            setSasError('');\n                            await onVerifyConnection(sasInput);\n                        } catch (err) {\n                            setSasInput('');\n                            setSasError(err?.message === 'SAS_MAX_ATTEMPTS'\n                                ? t('sas.tooManyAttempts')\n                                : t('sas.incorrect'));\n                        }\n                    };\n\n                    // Icon set transcribed from the design (inline SVG, not FontAwesome).\n                    // Each entry: stroke-width + the SVG child elements [tag, attrs].\n                    const ICON_DEFS = {\n                        'fa-user': { sw: 1.9, e: [['circle', { cx: 12, cy: 8, r: 3.6 }], ['path', { d: 'M5 20c0-3.5 3-5.5 7-5.5s7 2 7 5.5' }]] },\n                        'fa-lock': { sw: 2, e: [['path', { d: 'M7 11V7a5 5 0 0 1 10 0v4' }], ['rect', { x: 4.5, y: 11, width: 15, height: 9, rx: 2.2 }]] },\n                        'fa-plus': { sw: 2.1, e: [['path', { d: 'M12 5v14M5 12h14' }]] },\n                        'fa-link': { sw: 2, e: [['path', { d: 'M9.5 14.5l5-5M8 11l-2.2 2.2a3.5 3.5 0 0 0 4.95 4.95L13 16M16 13l2.2-2.2a3.5 3.5 0 0 0-4.95-4.95L11 8' }]] },\n                        'fa-bolt': { sw: 2.1, e: [['path', { d: 'M13 2L4.5 13H11l-1 9 8.5-11H12l1-9z' }]] },\n                        'fa-camera': { sw: 1.8, e: [['path', { d: 'M2 8.5V6.5A2.5 2.5 0 0 1 4.5 4h2M17.5 4h2A2.5 2.5 0 0 1 22 6.5v2M22 15.5v2a2.5 2.5 0 0 1-2.5 2.5h-2M6.5 20h-2A2.5 2.5 0 0 1 2 17.5v-2' }], ['circle', { cx: 12, cy: 12, r: 3.2 }]] },\n                        'fa-qrcode': { sw: 1.9, e: [['rect', { x: 3, y: 3, width: 7, height: 7, rx: 1.3 }], ['rect', { x: 14, y: 3, width: 7, height: 7, rx: 1.3 }], ['rect', { x: 3, y: 14, width: 7, height: 7, rx: 1.3 }], ['path', { d: 'M14 14h3v3M21 14v.01M14 21h.01M21 21v-4M17.5 21H21' }]] },\n                        'fa-chevron-right': { sw: 2, e: [['path', { d: 'M9 6l6 6-6 6' }]] },\n                        'fa-chevron-left': { sw: 2, e: [['path', { d: 'M15 6l-6 6 6 6' }]] },\n                        'fa-chevron-down': { sw: 2, e: [['path', { d: 'M6 9l6 6 6-6' }]] },\n                        'fa-circle-notch': { sw: 2, e: [['path', { d: 'M21 12a9 9 0 1 1-6.2-8.6' }]] },\n                        'fa-check': { sw: 2.4, e: [['path', { d: 'M20 6L9 17l-5-5' }]] },\n                        'fa-check-circle': { sw: 2, e: [['circle', { cx: 12, cy: 12, r: 9 }], ['path', { d: 'M8.5 12.4l2.4 2.4 4.6-5' }]] },\n                        'fa-shield-alt': { sw: 1.9, e: [['path', { d: 'M12 2.6l7 3v5.1c0 4.5-3 8.3-7 10.2-4-1.9-7-5.7-7-10.2V5.6l7-3z' }], ['path', { d: 'M9 12l2 2 4-4.1' }]] },\n                        'fa-download': { sw: 2, e: [['path', { d: 'M12 3v12M12 15l-4.5-4.5M12 15l4.5-4.5' }], ['path', { d: 'M4 20h16' }]] },\n                        'fa-clock': { sw: 1.8, e: [['circle', { cx: 12, cy: 13, r: 8 }], ['path', { d: 'M12 9v4l2.5 2M9 2h6' }]] },\n                        'fa-times': { sw: 2.2, e: [['path', { d: 'M18 6L6 18M6 6l12 12' }]] },\n                        'fa-eye': { sw: 1.9, e: [['path', { d: 'M2 12s3.6-7 10-7 10 7 10 7-3.6 7-10 7-10-7-10-7z' }], ['circle', { cx: 12, cy: 12, r: 3 }]] }\n                    };\n                    const fa = (name, opts) => {\n                        opts = opts || {};\n                        const def = ICON_DEFS[name];\n                        if (!def) {\n                            // Fallback to FontAwesome (e.g. fa-sliders-h, kept by preference).\n                            const st = {};\n                            if (opts.color) st.color = opts.color;\n                            if (opts.fontSize) st.fontSize = opts.fontSize;\n                            if (opts.animation) st.animation = opts.animation;\n                            if (opts.style) Object.assign(st, opts.style);\n                            return h('i', { key: opts.key, className: `fas ${name}`, style: st });\n                        }\n                        const size = opts.fontSize ? parseFloat(opts.fontSize) : 16;\n                        const svgStyle = {};\n                        if (opts.animation) { svgStyle.animation = opts.animation; svgStyle.transformOrigin = 'center'; svgStyle.transformBox = 'fill-box'; }\n                        if (opts.style) Object.assign(svgStyle, opts.style);\n                        return h('svg', {\n                            key: opts.key, className: name, width: size, height: size, viewBox: '0 0 24 24',\n                            fill: 'none', stroke: opts.color || 'currentColor',\n                            strokeWidth: def.sw || 2, strokeLinecap: 'round', strokeLinejoin: 'round',\n                            style: svgStyle\n                        }, def.e.map((el, i) => h(el[0], Object.assign({ key: i }, el[1]))));\n                    };\n\n                    // \u2500\u2500 LEFT PANEL \u00B7 branding + animated channel + crypto badges \u2500\u2500\n                    const leftPanel = h('div', {\n                        key: 'left',\n                        className: 'sb-start-left',\n                        style: {\n                            flex: '1.05 1 380px', position: 'relative', overflow: 'hidden',\n                            // Full viewport height even when the panels stack on mobile, so the\n                            // branding column isn't collapsed/cramped (looked broken otherwise).\n                            minHeight: '100vh', boxSizing: 'border-box',\n                            padding: '46px', display: 'flex', flexDirection: 'column',\n                            justifyContent: 'space-between', gap: '36px',\n                            borderInlineEnd: '1px solid rgba(var(--sb-ink), 0.06)',\n                            background: 'radial-gradient(900px 600px at 25% 18%, rgba(var(--sb-orange-rgb), 0.07), transparent 62%), radial-gradient(800px 700px at 80% 92%, rgba(var(--sb-green-rgb), 0.06), transparent 60%), var(--sb-bg-deep)'\n                        }\n                    }, [\n                        h('div', { key: 'herowrap', style: { flex: 1, display: 'flex', flexDirection: 'column', justifyContent: 'center', position: 'relative', zIndex: 2 } },\n                        h('div', { key: 'hero', style: { maxWidth: '560px' } }, [\n                            h('h1', { key: 'h1', style: { margin: '0 0 14px', fontSize: '34px', fontWeight: 800, letterSpacing: '-1.1px', lineHeight: 1.1, color: 'var(--sb-text-1)' } }, [\n                                t('hero.headlineTop'), h('br', { key: 'br' }), t('hero.headlineBottom')\n                            ]),\n                            h('p', { key: 'p', style: { margin: '0 0 38px', fontSize: '14.5px', lineHeight: 1.6, color: 'var(--sb-text-7)', maxWidth: '390px' } },\n                                t('hero.subheading')),\n                            // P2P / mesh animation.\n                            //\n                            // The loop tells the product's story in one shot: a direct line to\n                            // one peer, then two more joining it over 14 seconds \u2014 which is what\n                            // v6.0 actually added. Motion is pure CSS (offset-path along the\n                            // same geometry the lines are drawn from), so there is no rAF loop\n                            // burning battery on a landing page and nothing to tear down.\n                            h('div', { key: 'channel', style: { display: 'flex', alignItems: 'center', gap: '32px', flexWrap: 'wrap' } }, [\n                                h('svg', {\n                                    key: 'svg',\n                                    viewBox: '0 0 380 200',\n                                    role: 'img',\n                                    'aria-label': t('hero.diagramAlt'),\n                                    // Scales down on narrow screens; the labels sit just outside\n                                    // the viewBox, so the box must not clip them.\n                                    style: { display: 'block', width: '100%', maxWidth: '380px', height: 'auto', overflow: 'visible' }\n                                }, [\n                                    // the established 1:1 line\n                                    h('line', { key: 'l0', x1: 30, y1: 100, x2: 330, y2: 100, stroke: C_ORANGE_SOLID, strokeWidth: 1.5, strokeOpacity: 0.75 }),\n                                    h('circle', { key: 'p0', r: 3.6, fill: 'var(--sb-orange-2)', style: { offsetPath: \"path('M30,100 L330,100')\", animation: 'sbTrav 2.8s linear infinite' } }),\n\n                                    // first peer joins\n                                    h('g', { key: 'g1', style: { animation: 'sbIn1 14s linear infinite' } }, [\n                                        h('line', { key: 'a', x1: 30, y1: 100, x2: 250, y2: 26, stroke: C_ORANGE_SOLID, strokeWidth: 1.4, strokeOpacity: 0.7 }),\n                                        h('line', { key: 'b', x1: 250, y1: 26, x2: 330, y2: 100, stroke: C_GREEN_SOLID, strokeWidth: 1.2, strokeOpacity: 0.3 }),\n                                        h('circle', { key: 'p', r: 3.2, fill: 'var(--sb-orange-2)', style: { offsetPath: \"path('M30,100 L250,26')\", animation: 'sbTrav 3s linear .6s infinite' } }),\n                                        h('circle', { key: 'n', cx: 250, cy: 26, r: 5, fill: 'var(--sb-bg-deep)', stroke: 'var(--sb-diag-stroke)', strokeWidth: 1.2 }),\n                                        h('text', { key: 't', x: 250, y: 8, textAnchor: 'middle', fontFamily: MONO, fontSize: 12, fill: 'var(--sb-diag-label)' }, 'mara')\n                                    ]),\n                                    h('circle', { key: 'r1', cx: 250, cy: 26, r: 5, fill: 'none', stroke: C_ORANGE_SOLID, strokeOpacity: 0.6, style: { animation: 'sbRing1 14s linear infinite' } }),\n\n                                    // second peer joins, and the mesh closes\n                                    h('g', { key: 'g2', style: { animation: 'sbIn2 14s linear infinite' } }, [\n                                        h('line', { key: 'a', x1: 30, y1: 100, x2: 250, y2: 174, stroke: C_ORANGE_SOLID, strokeWidth: 1.4, strokeOpacity: 0.7 }),\n                                        h('line', { key: 'b', x1: 250, y1: 174, x2: 330, y2: 100, stroke: C_GREEN_SOLID, strokeWidth: 1.2, strokeOpacity: 0.3 }),\n                                        h('line', { key: 'c', x1: 250, y1: 26, x2: 250, y2: 174, stroke: C_GREEN_SOLID, strokeWidth: 1.2, strokeOpacity: 0.3 }),\n                                        h('circle', { key: 'p', r: 3.2, fill: 'var(--sb-orange-2)', style: { offsetPath: \"path('M30,100 L250,174')\", animation: 'sbTrav 3s linear .3s infinite' } }),\n                                        h('circle', { key: 'q', r: 2.8, fill: C_GREEN_SOLID, style: { offsetPath: \"path('M250,26 L250,174')\", animation: 'sbTrav 3.4s linear 1.2s infinite' } }),\n                                        h('circle', { key: 'n', cx: 250, cy: 174, r: 5, fill: 'var(--sb-bg-deep)', stroke: 'var(--sb-diag-stroke)', strokeWidth: 1.2 }),\n                                        h('text', { key: 't', x: 250, y: 194, textAnchor: 'middle', fontFamily: MONO, fontSize: 12, fill: 'var(--sb-diag-label)' }, 'tobi')\n                                    ]),\n                                    h('circle', { key: 'r2', cx: 250, cy: 174, r: 5, fill: 'none', stroke: C_ORANGE_SOLID, strokeOpacity: 0.6, style: { animation: 'sbRing2 14s linear infinite' } }),\n\n                                    // the two endpoints of the original line\n                                    h('circle', { key: 'pe', cx: 330, cy: 100, r: 5, fill: 'var(--sb-bg-deep)', stroke: 'var(--sb-diag-stroke)', strokeWidth: 1.2 }),\n                                    h('text', { key: 'pt', x: 346, y: 104, fontFamily: MONO, fontSize: 12, fill: 'var(--sb-diag-label)' }, 'peer'),\n                                    h('circle', { key: 'yh', cx: 30, cy: 100, r: 15, fill: C_ORANGE_SOLID, fillOpacity: 0.09 }),\n                                    h('circle', { key: 'yc', cx: 30, cy: 100, r: 6, fill: C_ORANGE_SOLID }),\n                                    h('text', { key: 'yt', x: 30, y: 126, textAnchor: 'middle', fontFamily: MONO, fontSize: 12, fill: 'var(--sb-diag-text)' }, t('mesh.you'))\n                                ]),\n\n                                // the log, timed to the same 14s loop as the nodes appearing\n                                h('div', { key: 'log', style: { display: 'flex', flexDirection: 'column', gap: '12px', fontFamily: MONO, fontSize: '12px', color: 'var(--sb-diag-dim)' } }, [\n                                    h('div', { key: 'r0', style: { animation: 'sbRow0 14s linear infinite' } }, t('mesh.peer')),\n                                    h('div', { key: 'r1', style: { animation: 'sbRow1 14s linear infinite' } }, t('mesh.joined2')),\n                                    h('div', { key: 'r2', style: { animation: 'sbRow2 14s linear infinite' } }, t('mesh.joined3'))\n                                ])\n                            ])\n                        ])),\n                        h('div', { key: 'badges', style: { position: 'relative', zIndex: 2, display: 'flex', flexWrap: 'wrap', gap: '8px' } },\n                            ['ECDH P-384', 'AES-256-GCM', t('sec.pfsShort')].map((label) =>\n                                h('span', { key: label, style: { display: 'inline-flex', alignItems: 'center', gap: '6px', padding: '6px 11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.025)', fontFamily: MONO, fontSize: '11px', fontWeight: 500, color: 'var(--sb-text-6)' } }, [\n                                    h('span', { key: 'dot', style: { width: '5px', height: '5px', borderRadius: '50%', background: C_GREEN_SOLID } }),\n                                    label\n                                ])\n                            )\n                        )\n                    ]);\n\n                    // \u2500\u2500 RIGHT PANEL \u00B7 flow body (varies by step) \u2500\u2500\n                    const segToggle = atIntro && h('div', { key: 'seg', style: { position: 'relative', display: 'flex', padding: '4px', borderRadius: '12px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', marginBottom: '26px' } }, [\n                        h('div', { key: 'ind', style: { position: 'absolute', top: '4px', bottom: '4px', insetInlineStart: '4px', width: 'calc(50% - 4px)', borderRadius: '9px', background: 'rgba(var(--sb-ink), 0.07)', border: '1px solid rgba(var(--sb-ink), 0.08)', transform: isCreate ? 'translateX(0%)' : `translateX(${100 * DIR}%)`, transition: 'transform .26s cubic-bezier(.3,.8,.3,1)' } }),\n                        h('button', { key: 'c', className: 'sb-seg-btn', onClick: () => setMode('create'), style: { position: 'relative', zIndex: 1, flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '11px', border: 'none', background: 'transparent', color: isCreate ? 'var(--sb-text-1)' : 'var(--sb-text-8)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer' } }, [fa('fa-plus', { key: 'i' }), t('action.create')]),\n                        h('button', { key: 'j', className: 'sb-seg-btn', onClick: () => setMode('join'), style: { position: 'relative', zIndex: 1, flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '11px', border: 'none', background: 'transparent', color: !isCreate ? 'var(--sb-text-1)' : 'var(--sb-text-8)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer' } }, [fa('fa-link', { key: 'i' }), t('action.join')])\n                    ]);\n\n                    const backButton = (key) => h('button', { key: key || 'back', className: 'sb-soft-btn', onClick: resetToSelect, style: { display: 'inline-flex', alignItems: 'center', gap: '6px', marginBottom: '14px', paddingBlock: '6px', paddingInlineStart: '8px', paddingInlineEnd: '11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'transparent', color: 'var(--sb-text-6)', fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600, cursor: 'pointer' } }, [fa('fa-chevron-left', { key: 'i' }), t('action.back')]);\n\n                    // credential code block (offer/answer text fallback + copy)\n                    const credBlock = h('div', { key: 'codeblock', style: { borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)', overflow: 'hidden', marginBottom: '16px' } }, [\n                        h('div', { key: 'bar', style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '9px 12px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(0,0,0,0.2)' } }, [\n                            h('span', { key: 'dot', style: { width: '7px', height: '7px', borderRadius: '50%', background: accent } }),\n                            h('span', { key: 'tag', style: { fontFamily: MONO, fontSize: '10.5px', fontWeight: 600, color: 'var(--sb-text-7)' } }, isCreate ? t('cred.offerTag') : t('cred.answerTag')),\n                            h('button', { key: 'copy', onClick: copyCred, style: { marginInlineStart: 'auto', padding: '4px 9px', borderRadius: '6px', border: `1px solid ${copied ? 'rgba(var(--sb-green-rgb), 0.4)' : 'rgba(var(--sb-ink), 0.1)'}`, background: copied ? 'rgba(var(--sb-green-rgb), 0.1)' : 'rgba(var(--sb-ink), 0.04)', color: copied ? C_GREEN : 'var(--sb-text-5)', fontFamily: 'inherit', fontSize: '11px', fontWeight: 600, cursor: 'pointer', transition: 'all .14s' } }, copied ? t('action.copied') : t('action.copy'))\n                        ]),\n                        // The handshake code is sensitive \u2014 keep it blurred until the\n                        // user deliberately reveals it, underscoring that it must be\n                        // shared only over a channel they trust.\n                        h('div', { key: 'codewrap', style: { position: 'relative' } }, [\n                            h('div', { key: 'code', className: 'sb-sc', style: { fontFamily: MONO, fontSize: '11px', lineHeight: 1.55, color: 'var(--sb-text-code)', wordBreak: 'break-all', padding: '11px 12px', maxHeight: '72px', overflowY: 'auto', filter: codeRevealed ? 'none' : 'blur(6px)', userSelect: codeRevealed ? 'text' : 'none', transition: 'filter .2s' } }, credCode),\n                            !codeRevealed && h('button', { key: 'reveal', onClick: () => setCodeRevealed(true), style: { position: 'absolute', inset: 0, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', border: 'none', background: 'rgba(var(--sb-surface-rgb), 0.25)', color: 'var(--sb-text-4)', fontFamily: 'inherit', fontSize: '12px', fontWeight: 600, cursor: 'pointer' } }, [\n                                fa('fa-eye', { key: 'i', fontSize: '15px' }),\n                                t('cred.reveal')\n                            ])\n                        ])\n                    ]);\n\n                    const showQrButton = qrCodeUrl && h('button', { key: 'showqr', onClick: () => setQrModalOpen(true), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '13px', padding: '15px 16px', borderRadius: '14px', border: `1px solid ${isCreate ? 'rgba(var(--sb-orange-rgb), 0.3)' : 'rgba(var(--sb-green-rgb), 0.3)'}`, background: isCreate ? 'rgba(var(--sb-orange-rgb), 0.06)' : 'rgba(var(--sb-green-rgb), 0.06)', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start', marginBottom: '14px' } }, [\n                        h('span', { key: 'ic', style: { flex: 'none', width: '42px', height: '42px', borderRadius: '12px', display: 'grid', placeItems: 'center', background: isCreate ? 'rgba(var(--sb-orange-rgb), 0.12)' : 'rgba(var(--sb-green-rgb), 0.12)', border: `1px solid ${isCreate ? 'rgba(var(--sb-orange-rgb), 0.28)' : 'rgba(var(--sb-green-rgb), 0.28)'}` } }, fa('fa-qrcode', { color: accentSolid, fontSize: '18px' })),\n                        h('span', { key: 'tx', style: { flex: 1 } }, [\n                            h('span', { key: 't', style: { display: 'block', fontSize: '14.5px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('qr.showTitle')),\n                            h('span', { key: 's', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '1px' } }, (qrFramesTotal || 0) > 1 ? t('qr.showSubtitleFrames', { frames: qrFramesTotal }) : t('qr.showSubtitle'))\n                        ]),\n                        fa('fa-chevron-right', { color: 'var(--sb-text-9)' })\n                    ]);\n\n                    let inner;\n                    if (showVerification) {\n                        const verified = bothVerificationsConfirmed;\n                        const cells = (verificationCode || '').split('').map((ch, i) =>\n                            h('div', { key: i, style: { flex: 1, maxWidth: '46px', aspectRatio: '0.82', display: 'grid', placeItems: 'center', borderRadius: '10px', border: '1px solid rgba(var(--sb-green-rgb), 0.25)', background: 'rgba(var(--sb-green-rgb), 0.05)', fontFamily: MONO, fontSize: '22px', fontWeight: 700, color: C_GREEN } }, ch));\n                        inner = h('div', { key: 'verify', style: { animation: 'sbUp .3s ease' } }, [\n                            !verified && backButton('vback'),\n                            h('div', { key: 'head', style: { display: 'flex', alignItems: 'center', gap: '11px', marginBottom: '8px' } }, [\n                                h('div', { key: 'i', style: { width: '34px', height: '34px', flex: 'none', borderRadius: '10px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.1)', border: '1px solid rgba(var(--sb-green-rgb), 0.25)' } }, fa('fa-shield-alt', { color: C_GREEN_SOLID })),\n                                h('h2', { key: 't', style: { margin: 0, fontSize: '21px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, t('verify.title'))\n                            ]),\n                            h('p', { key: 'sub', style: { margin: '0 0 18px', fontSize: '13.5px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, t('verify.desc')),\n                            h('div', { key: 'cells', dir: 'ltr', style: { display: 'flex', gap: '6px', justifyContent: 'center', marginBottom: '20px', flexWrap: 'wrap' } }, cells),\n                            verified\n                                ? h('div', { key: 'ok', style: { display: 'flex', flexDirection: 'column', alignItems: 'center', textAlign: 'center', padding: '24px 16px', borderRadius: '16px', border: '1px solid rgba(var(--sb-green-rgb), 0.25)', background: 'rgba(var(--sb-green-rgb), 0.06)', animation: 'sbUp .3s ease' } }, [\n                                    h('div', { key: 'i', style: { width: '54px', height: '54px', borderRadius: '16px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.14)', border: '1px solid rgba(var(--sb-green-rgb), 0.35)', marginBottom: '14px' } }, fa('fa-check', { color: C_GREEN_SOLID, fontSize: '24px' })),\n                                    h('div', { key: 't', style: { fontSize: '18px', fontWeight: 800, color: 'var(--sb-text-1)' } }, t('verify.verified')),\n                                    h('div', { key: 's', style: { fontSize: '13.5px', color: 'var(--sb-text-7)', marginTop: '5px' } }, t('verify.bothConfirmed'))\n                                ])\n                                : h('div', { key: 'form' }, [\n                                    h('div', { key: 'lbl', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)', marginBottom: '8px' } }, t('verify.enterLabel')),\n                                    h('input', { key: 'in', dir: 'ltr', value: sasInput, onChange: (e) => { setSasInput(e.target.value.replace(/\\D/g, '').slice(0, SAS_CODE_LENGTH)); if (sasError) setSasError(''); }, disabled: localVerificationConfirmed, autoFocus: true, autoComplete: 'one-time-code', spellCheck: false, type: 'text', inputMode: 'numeric', pattern: '[0-9]*', maxLength: SAS_CODE_LENGTH, placeholder: verificationCode ? t('verify.placeholder') : t('verify.waiting'), style: { width: '100%', textAlign: 'center', letterSpacing: '6px', borderRadius: '12px', border: `1px solid ${sasInput.length ? (canConfirm || localVerificationConfirmed ? 'rgba(var(--sb-green-rgb), 0.5)' : 'rgba(var(--sb-ink), 0.14)') : 'rgba(var(--sb-ink), 0.08)'}`, background: 'var(--sb-surface)', color: 'var(--sb-text-1)', fontFamily: MONO, fontSize: '20px', fontWeight: 700, padding: '14px', outline: 'none', marginBottom: sasError ? '8px' : '16px' } }),\n                                    sasError && h('p', { key: 'err', style: { color: 'var(--sb-red)', fontSize: '12.5px', margin: '0 0 16px' } }, sasError),\n                                    h('div', { key: 'status', style: { display: 'flex', flexDirection: 'column', gap: '8px', marginBottom: '16px' } }, [\n                                        h('div', { key: 'you', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', padding: '11px 14px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.06)', background: 'var(--sb-surface)' } }, [\n                                            h('span', { key: 'l', style: { fontSize: '13px', color: 'var(--sb-text-4)', fontWeight: 600 } }, t('verify.yours')),\n                                            h('span', { key: 'v', style: { display: 'inline-flex', alignItems: 'center', gap: '6px', fontSize: '12.5px', fontWeight: 600, color: localVerificationConfirmed ? C_GREEN : 'var(--sb-text-8)' } }, [fa(localVerificationConfirmed ? 'fa-check-circle' : 'fa-clock', { key: 'i' }), localVerificationConfirmed ? t('verify.confirmed') : t('verify.pending')])\n                                        ]),\n                                        h('div', { key: 'peer', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', padding: '11px 14px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.06)', background: 'var(--sb-surface)' } }, [\n                                            h('span', { key: 'l', style: { fontSize: '13px', color: 'var(--sb-text-4)', fontWeight: 600 } }, t('verify.peer')),\n                                            h('span', { key: 'v', style: { display: 'inline-flex', alignItems: 'center', gap: '6px', fontSize: '12.5px', fontWeight: 600, color: remoteVerificationConfirmed ? C_GREEN : 'var(--sb-text-8)' } }, [fa(remoteVerificationConfirmed ? 'fa-check-circle' : 'fa-clock', { key: 'i' }), remoteVerificationConfirmed ? t('verify.confirmed') : t('verify.pending')])\n                                        ])\n                                    ]),\n                                    h('div', { key: 'btns', style: { display: 'flex', gap: '10px' } }, [\n                                        h('button', { key: 'ok', onClick: handleSasConfirm, disabled: !canConfirm, style: { flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '14px', borderRadius: '13px', border: 'none', background: canConfirm ? C_GREEN_SOLID : 'rgba(var(--sb-ink), 0.05)', color: canConfirm ? 'var(--sb-on-green-2)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, cursor: canConfirm ? 'pointer' : 'not-allowed', boxShadow: canConfirm ? '0 8px 24px rgba(var(--sb-green-rgb), 0.25)' : 'none' } }, [fa(localVerificationConfirmed ? 'fa-check-circle' : 'fa-check', { key: 'i' }), localVerificationConfirmed ? t('verify.confirmed') : t('verify.confirm')]),\n                                        h('button', { key: 'no', onClick: handleVerificationReject, style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '7px', padding: '14px 16px', borderRadius: '13px', border: '1px solid rgba(var(--sb-red-rgb), 0.3)', background: 'transparent', color: 'var(--sb-red)', fontFamily: 'inherit', fontSize: '13.5px', fontWeight: 600, cursor: 'pointer' } }, [fa('fa-times', { key: 'i' }), t('verify.mismatch')])\n                                    ])\n                                ])\n                        ]);\n                    } else if (isGenerating) {\n                        const genSteps = [t('handshake.step1'), t('handshake.step2'), t('handshake.step3')];\n                        inner = h('div', { key: 'gen', style: { animation: 'sbUp .28s ease' } }, [\n                            h('div', { key: 'head', style: { display: 'flex', alignItems: 'center', gap: '13px', marginBottom: '22px' } }, [\n                                h('div', { key: 'sp', style: { width: '44px', height: '44px', flex: 'none', display: 'grid', placeItems: 'center' } }, fa('fa-circle-notch', { color: C_ORANGE_SOLID, fontSize: '32px', animation: 'sbSpin 1s linear infinite' })),\n                                h('div', { key: 'tx' }, [\n                                    h('h2', { key: 't', style: { margin: 0, fontSize: '20px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, isCreate ? t('handshake.securingTitle') : t('handshake.answerTitle')),\n                                    h('p', { key: 's', style: { margin: '3px 0 0', fontSize: '13px', color: 'var(--sb-text-7)' } }, t('handshake.securingDesc'))\n                                ])\n                            ]),\n                            h('div', { key: 'steps', style: { display: 'flex', flexDirection: 'column', borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', overflow: 'hidden' } },\n                                genSteps.map((label, i) => {\n                                    const done = genProgress > i;\n                                    const active = genProgress === i;\n                                    return h('div', { key: i, style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '13px 15px', borderTop: i ? '1px solid rgba(var(--sb-ink), 0.05)' : 'none', transition: 'background .3s', background: done ? 'rgba(var(--sb-green-rgb), 0.04)' : 'transparent' } }, [\n                                        h('div', { key: 'd', style: { flex: 'none', width: '20px', height: '20px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: done ? 'rgba(var(--sb-green-rgb), 0.12)' : (active ? 'rgba(var(--sb-orange-rgb), 0.12)' : 'rgba(var(--sb-ink), 0.04)'), border: `1px solid ${done ? 'rgba(var(--sb-green-rgb), 0.3)' : (active ? 'rgba(var(--sb-orange-rgb), 0.3)' : 'rgba(var(--sb-ink), 0.1)')}`, transition: 'all .3s' } },\n                                            done\n                                                ? fa('fa-check', { color: C_GREEN_SOLID, fontSize: '11px' })\n                                                : h('span', { style: { width: '6px', height: '6px', borderRadius: '50%', background: active ? C_ORANGE_SOLID : 'var(--sb-text-faint)', animation: active ? 'sbBlink 1s ease-in-out infinite' : 'none' } })),\n                                        h('span', { key: 'l', style: { fontSize: '13.5px', color: done ? 'var(--sb-text-4)' : (active ? 'var(--sb-text-2)' : 'var(--sb-text-9)'), transition: 'color .3s' } }, label)\n                                    ]);\n                                })\n                            )\n                        ]);\n                    } else if (isOfferCred || isAnswerCred) {\n                        inner = h('div', { key: 'cred', style: { animation: 'sbUp .3s ease' } }, [\n                            backButton('cback'),\n                            h('h2', { key: 'h', style: { margin: '0 0 6px', fontSize: '23px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, isCreate ? t('handshake.shareTitle') : t('handshake.sendAnswerTitle')),\n                            h('p', { key: 'p', style: { margin: '0 0 18px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, isCreate ? t('handshake.shareDesc') : t('handshake.sendAnswerDesc')),\n                            showQrButton,\n                            credBlock,\n                            isOfferCred && h('div', { key: 'offerextra', style: { marginTop: '4px' } }, [\n                                h('div', { key: 'lbl', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)', marginBottom: '8px' } }, t('handshake.thenReceive')),\n                                h('div', { key: 'ta', style: { borderRadius: '12px', border: `1px solid ${hasAnswer ? 'rgba(var(--sb-ink), 0.18)' : 'rgba(var(--sb-ink), 0.07)'}`, background: 'var(--sb-surface)', padding: '11px 14px', marginBottom: '10px' } },\n                                    h('textarea', { dir: 'ltr', value: answerInput, onChange: (e) => { setAnswerInput(e.target.value); if (e.target.value.trim().length > 0 && typeof markAnswerCreated === 'function') markAnswerCreated(); }, rows: 2, placeholder: t('handshake.pasteAnswerPlaceholder'), style: { width: '100%', resize: 'none', border: 'none', outline: 'none', background: 'transparent', color: 'var(--sb-text-3)', fontFamily: MONO, fontSize: '12px', lineHeight: 1.55, minHeight: '44px' } })),\n                                h('div', { key: 'btns', style: { display: 'flex', gap: '10px' } }, [\n                                    h('button', { key: 'scan', className: 'sb-scan-btn', onClick: () => setShowQRScannerModal(true), style: { flex: 'none', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '14px 16px', borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-4)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer' } }, [fa('fa-camera', { key: 'i' }), t('action.scan')]),\n                                    h('button', { key: 'est', onClick: onConnect, disabled: !hasAnswer, style: { flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '14px', borderRadius: '13px', border: 'none', background: hasAnswer ? C_ORANGE_SOLID : 'rgba(var(--sb-ink), 0.05)', color: hasAnswer ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, cursor: hasAnswer ? 'pointer' : 'not-allowed', boxShadow: hasAnswer ? '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' : 'none' } }, t('handshake.establish'))\n                                ])\n                            ]),\n                            isAnswerCred && h('div', { key: 'answerextra', style: { marginTop: '4px', display: 'flex', alignItems: 'center', gap: '10px', padding: '12px 14px', borderRadius: '12px', border: '1px solid rgba(var(--sb-green-rgb), 0.18)', background: 'rgba(var(--sb-green-rgb), 0.05)' } }, [\n                                fa('fa-circle-notch', { key: 'i', color: C_GREEN_SOLID, animation: 'sbSpin 1.4s linear infinite' }),\n                                h('span', { key: 't', style: { fontSize: '13px', color: 'var(--sb-text-4)', fontWeight: 500 } }, t('handshake.answerSentNote'))\n                            ])\n                        ]);\n                    } else if (isCreate) {\n                        // CREATE intro\n                        inner = h('div', { key: 'introC', style: { animation: 'sbUp .28s ease' } }, [\n                            h('h2', { key: 'h', style: { margin: '0 0 6px', fontSize: '23px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, t('intro.createTitle')),\n                            h('p', { key: 'p', style: { margin: '0 0 22px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, t('intro.createDesc')),\n                            h('button', { key: 'gen', className: 'sb-gen-btn', onClick: () => { requestNotificationPermissionOnInteraction(); if (webrtcManagerRef.current) handleCreateOffer(); }, style: { width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '15px', borderRadius: '13px', border: 'none', background: C_ORANGE_SOLID, color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '15px', fontWeight: 700, cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' } }, [fa('fa-bolt', { key: 'i' }), t('intro.createCta')])\n                        ]);\n                    } else {\n                        // JOIN intro\n                        inner = h('div', { key: 'introJ', style: { animation: 'sbUp .28s ease' } }, [\n                            h('h2', { key: 'h', style: { margin: '0 0 6px', fontSize: '23px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, t('intro.joinTitle')),\n                            h('p', { key: 'p', style: { margin: '0 0 16px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, \"Scan your peer's QR with your camera, or paste their invitation code.\"),\n                            h('button', { key: 'scan', className: 'sb-scan-btn', onClick: () => { requestNotificationPermissionOnInteraction(); setShowQRScannerModal(true); }, style: { width: '100%', display: 'flex', alignItems: 'center', gap: '13px', padding: '15px 16px', borderRadius: '14px', border: '1px solid rgba(var(--sb-green-rgb), 0.3)', background: 'rgba(var(--sb-green-rgb), 0.06)', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start', marginBottom: '14px' } }, [\n                                h('span', { key: 'ic', style: { flex: 'none', width: '42px', height: '42px', borderRadius: '12px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.12)', border: '1px solid rgba(var(--sb-green-rgb), 0.28)' } }, fa('fa-camera', { color: C_GREEN_SOLID, fontSize: '18px' })),\n                                h('span', { key: 'tx', style: { flex: 1 } }, [\n                                    h('span', { key: 't', style: { display: 'block', fontSize: '14.5px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('intro.scanTitle')),\n                                    h('span', { key: 's', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '1px' } }, t('intro.scanSubtitle'))\n                                ]),\n                                fa('fa-chevron-right', { color: 'var(--sb-text-9)' })\n                            ]),\n                            h('div', { key: 'or', style: { display: 'flex', alignItems: 'center', gap: '12px', marginBottom: '14px' } }, [\n                                h('span', { key: 'a', style: { flex: 1, height: '1px', background: 'rgba(var(--sb-ink), 0.07)' } }),\n                                h('span', { key: 'm', style: { fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '0.7px' } }, t('intro.orPasteCode')),\n                                h('span', { key: 'b', style: { flex: 1, height: '1px', background: 'rgba(var(--sb-ink), 0.07)' } })\n                            ]),\n                            h('div', { key: 'ta', style: { borderRadius: '13px', border: `1px solid ${hasInvite ? 'rgba(var(--sb-ink), 0.18)' : 'rgba(var(--sb-ink), 0.07)'}`, background: 'var(--sb-surface)', padding: '13px 15px', marginBottom: '12px' } },\n                                h('textarea', { dir: 'ltr', value: offerInput, onChange: (e) => { setOfferInput(e.target.value); if (e.target.value.trim().length > 0 && typeof markAnswerCreated === 'function') markAnswerCreated(); }, rows: 3, placeholder: t('intro.pastePlaceholder'), style: { width: '100%', resize: 'none', border: 'none', outline: 'none', background: 'transparent', color: 'var(--sb-text-3)', fontFamily: MONO, fontSize: '12.5px', lineHeight: 1.6, minHeight: '66px' } })),\n                            h('button', { key: 'connect', onClick: () => { requestNotificationPermissionOnInteraction(); onCreateAnswer(); }, disabled: !hasInvite || connectionStatus === 'connecting', style: { width: '100%', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '14px', borderRadius: '13px', border: 'none', background: (hasInvite && connectionStatus !== 'connecting') ? C_ORANGE_SOLID : 'rgba(var(--sb-ink), 0.05)', color: (hasInvite && connectionStatus !== 'connecting') ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '15px', fontWeight: 700, cursor: (hasInvite && connectionStatus !== 'connecting') ? 'pointer' : 'not-allowed', boxShadow: (hasInvite && connectionStatus !== 'connecting') ? '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' : 'none' } }, connectionStatus === 'connecting' ? t('intro.connecting') : t('intro.connect'))\n                        ]);\n                    }\n\n                    // Desktop downloads (real GitHub release assets) + OS detection.\n                    //\n                    // Keep SB_DESKTOP_VERSION in sync with the constant of the same name in\n                    // src/components/ui/DownloadApps.jsx \u2014 tests/desktop-download-links.test.mjs\n                    // fails the build if the two ever disagree.\n                    //\n                    // The tag is pinned rather than using /releases/latest/download/. Release\n                    // filenames carry the version, and GitHub resolves `latest` by redirecting\n                    // to the newest tag \u2014 so a stale `latest` link becomes\n                    // /download/v0.3.0/SecureBit.Chat_0.1.0_x64-setup.exe, a file that never\n                    // existed, and the download 404s. A pinned tag keeps serving a real\n                    // installer instead.\n                    const SB_DESKTOP_VERSION = '1.0.4';\n                    const SB_DESKTOP_RELEASE = `https://github.com/SecureBitChat/securebit-desktop/releases/download/v${SB_DESKTOP_VERSION}`;\n                    const DOWNLOADS = {\n                        mac: { name: 'macOS', format: '.dmg \u00B7 Apple Silicon & Intel', icon: 'fab fa-apple', url: `${SB_DESKTOP_RELEASE}/SecureBit.Chat_${SB_DESKTOP_VERSION}_x64.dmg` },\n                        win: { name: 'Windows', format: '.exe \u00B7 64-bit installer', icon: 'fab fa-windows', url: `${SB_DESKTOP_RELEASE}/SecureBit.Chat_${SB_DESKTOP_VERSION}_x64-setup.exe` },\n                        linux: { name: 'Linux', format: '.AppImage', icon: 'fab fa-linux', url: `${SB_DESKTOP_RELEASE}/SecureBit.Chat_${SB_DESKTOP_VERSION}_amd64.AppImage` }\n                    };\n                    const detectOS = () => {\n                        const ua = (navigator.userAgent || '') + ' ' + (navigator.platform || '');\n                        if (/Mac|iPhone|iPad|iPod/i.test(ua) && !/Android/i.test(ua)) return 'mac';\n                        if (/Win/i.test(ua)) return 'win';\n                        if (/Linux/i.test(ua) && !/Android/i.test(ua)) return 'linux';\n                        return 'win';\n                    };\n                    const detectedOS = detectOS();\n                    const otherOS = ['mac', 'win', 'linux'].filter((k) => k !== detectedOS);\n                    const dlLink = (url) => { try { window.open(url, '_blank', 'noopener'); } catch (e) {} };\n\n                    const platformsMenu = platformsOpen && h('div', { key: 'platmenu', className: 'sb-platforms-menu', style: { position: 'absolute', insetInlineStart: 0, bottom: 'calc(100% + 10px)', width: '344px', maxWidth: '100%', borderRadius: '16px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'var(--sb-surface)', boxShadow: '0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))', overflow: 'hidden', zIndex: 25, animation: 'sbUp .2s ease' } }, [\n                        h('div', { key: 'mh', style: { display: 'flex', alignItems: 'center', gap: '10px', padding: '14px 16px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                            h('div', { key: 't', style: { flex: 1, lineHeight: 1.2 } }, [\n                                h('div', { key: 'a', style: { fontSize: '14px', fontWeight: 800, color: 'var(--sb-text-1)' } }, t('dl.title')),\n                                h('div', { key: 'b', style: { fontSize: '11.5px', color: 'var(--sb-text-8)' } }, t('dl.free'))\n                            ]),\n                            h('span', { key: 'pill', style: { fontFamily: MONO, fontSize: '10px', fontWeight: 600, color: C_GREEN, padding: '3px 8px', borderRadius: '6px', background: 'rgba(var(--sb-green-rgb), 0.1)', border: '1px solid rgba(var(--sb-green-rgb), 0.22)' } }, t('chat.onWeb'))\n                        ]),\n                        h('div', { key: 'rec', style: { padding: '12px 12px 6px' } },\n                            h('button', { key: 'b', onClick: () => dlLink(DOWNLOADS[detectedOS].url), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '12px', padding: '13px 14px', borderRadius: '12px', border: '1px solid rgba(var(--sb-orange-rgb), 0.4)', background: 'rgba(var(--sb-orange-rgb), 0.08)', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start' } }, [\n                                h('span', { key: 'ic', style: { flex: 'none', display: 'grid', placeItems: 'center', width: '38px', height: '38px', borderRadius: '11px', background: 'rgba(var(--sb-orange-rgb), 0.14)', border: '1px solid rgba(var(--sb-orange-rgb), 0.3)', color: C_ORANGE } }, h('i', { className: DOWNLOADS[detectedOS].icon, style: { fontSize: '17px' } })),\n                                h('span', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                                    h('span', { key: 'n', style: { display: 'block', fontSize: '13.5px', fontWeight: 700, color: 'var(--sb-text-1)' } }, DOWNLOADS[detectedOS].name),\n                                    h('span', { key: 'f', style: { display: 'block', fontSize: '11px', color: 'var(--sb-orange-3)', marginTop: '1px' } }, `Recommended for this device \u00B7 ${DOWNLOADS[detectedOS].format}`)\n                                ]),\n                                fa('fa-download', { color: C_ORANGE_SOLID })\n                            ])),\n                        h('div', { key: 'others', style: { padding: '0 12px 8px', display: 'flex', flexDirection: 'column', gap: '2px' } },\n                            otherOS.map((k) => h('button', { key: k, onClick: () => dlLink(DOWNLOADS[k].url), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '12px', padding: '11px 14px', borderRadius: '11px', border: 'none', background: 'transparent', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start' } }, [\n                                h('span', { key: 'ic', style: { flex: 'none', display: 'grid', placeItems: 'center', width: '34px', height: '34px', borderRadius: '10px', background: 'rgba(var(--sb-ink), 0.04)', border: '1px solid rgba(var(--sb-ink), 0.08)', color: 'var(--sb-text-4)' } }, h('i', { className: DOWNLOADS[k].icon, style: { fontSize: '15px' } })),\n                                h('span', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                                    h('span', { key: 'n', style: { display: 'block', fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-2)' } }, DOWNLOADS[k].name),\n                                    h('span', { key: 'f', style: { display: 'block', fontSize: '11px', color: 'var(--sb-text-8)', marginTop: '1px' } }, DOWNLOADS[k].format)\n                                ]),\n                                fa('fa-download', { color: 'var(--sb-text-7)' })\n                            ]))),\n                        h('div', { key: 'soon', style: { display: 'flex', alignItems: 'center', gap: '9px', padding: '12px 16px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(var(--sb-ink), 0.015)' } }, [\n                            fa('fa-clock', { key: 'i', color: 'var(--sb-text-9)' }),\n                            h('span', { key: 't', style: { fontSize: '11.5px', lineHeight: 1.45, color: 'var(--sb-text-8)' } }, t('dl.soon'))\n                        ])\n                    ]);\n\n                    const footer = h('div', { key: 'footer', className: 'sb-conn-footer', style: { position: 'relative', marginTop: '30px', paddingTop: '18px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: '12px', flexWrap: 'wrap' } }, [\n                        h('button', { key: 'dl', onClick: () => setPlatformsOpen((v) => !v), style: { display: 'inline-flex', alignItems: 'center', gap: '9px', paddingBlock: '8px', paddingInlineStart: '9px', paddingInlineEnd: '13px', borderRadius: '10px', border: `1px solid ${platformsOpen ? 'rgba(var(--sb-orange-rgb), 0.4)' : 'rgba(var(--sb-ink), 0.08)'}`, background: platformsOpen ? 'rgba(var(--sb-orange-rgb), 0.06)' : 'rgba(var(--sb-ink), 0.02)', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', transition: 'all .15s' } }, [\n                            fa('fa-download', { key: 'i', color: C_ORANGE_SOLID }),\n                            h('span', { key: 't', style: { fontSize: '12.5px', fontWeight: 700, color: 'var(--sb-text-2)' } }, t('action.downloadDesktop')),\n                            fa('fa-chevron-down', { key: 'c', color: 'var(--sb-text-9)', style: { fontSize: '11px', transform: platformsOpen ? 'rotate(180deg)' : 'rotate(0deg)', transition: 'transform .2s' } })\n                        ]),\n                        h('button', { key: 'settings', className: 'sb-link', onClick: () => setShowIceSettings && setShowIceSettings(true), style: { display: 'inline-flex', alignItems: 'center', gap: '7px', background: 'none', border: 'none', color: 'var(--sb-text-7)', fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600, cursor: 'pointer' } }, [fa('fa-sliders-h', { key: 'i' }), t('action.advancedSettings')]),\n                        platformsMenu\n                    ]);\n\n                    // Advanced settings overlay \u2014 rendered inside the right column,\n                    // sliding up over it (z-30), exactly as in the design.\n                    const settingsOverlay = (showIceSettings && typeof window !== 'undefined' && window.IceServerSettings)\n                        ? h(window.IceServerSettings, {\n                            key: 'ice-settings',\n                            isOpen: true,\n                            embedded: true,\n                            onClose: () => setShowIceSettings(false),\n                            initial: {\n                                useCustom: Array.isArray(customIceServers) && customIceServers.length > 0,\n                                serversText: iceServersText,\n                                privacyMode: relayOnlyMode ? 'relay-only' : 'standard',\n                                persisted: iceSettingsPersisted\n                            },\n                            hasSaved: iceSettingsPersisted,\n                            onApply: handleApplyIceSettings,\n                            onForget: handleForgetIceSettings\n                        })\n                        : null;\n\n                    const rightPanel = h('div', { key: 'right', style: compact\n                        ? { flex: 1, minWidth: 0, width: '100%', position: 'relative', overflow: 'hidden', display: 'flex', flexDirection: 'column', height: '100%' }\n                        : { flex: '0.95 1 460px', minWidth: 'min(100%, 320px)', position: 'relative', overflow: 'hidden', display: 'flex', flexDirection: 'column', height: '100vh' } }, [\n                        h('div', { key: 'scroll', className: 'custom-scrollbar', style: { flex: 1, overflowY: 'auto', display: 'flex', flexDirection: 'column', padding: '42px 44px' } },\n                            h('div', { style: { maxWidth: '430px', width: '100%', margin: 'auto' } }, [\n                                h('div', { key: 'kicker', style: { fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1px', marginBottom: '10px' } }, kicker),\n                                segToggle,\n                                inner,\n                                footer\n                            ])),\n                        settingsOverlay\n                    ]);\n\n                    // \u2500\u2500 QR display modal (real qrCodeUrl + frame controls) \u2500\u2500\n                    const qrModal = (qrModalOpen && qrCodeUrl) && h('div', { key: 'qrmodal', onClick: () => setQrModalOpen(false), style: { position: 'fixed', inset: 0, zIndex: 50, display: 'flex', alignItems: 'center', justifyContent: 'center', padding: '32px', background: 'rgba(var(--sb-scrim-rgb), 0.82)', backdropFilter: 'blur(10px)', animation: 'sbUp .2s ease' } },\n                        h('div', { onClick: (e) => e.stopPropagation(), style: { width: '100%', maxWidth: '460px', borderRadius: '22px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'var(--sb-bg)', boxShadow: '0 30px 90px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))', overflow: 'hidden' } }, [\n                            h('div', { key: 'head', style: { display: 'flex', alignItems: 'center', gap: '11px', padding: '18px 20px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                                h('span', { key: 'd', style: { width: '9px', height: '9px', borderRadius: '50%', background: accent } }),\n                                h('div', { key: 'tx', style: { flex: 1, lineHeight: 1.2 } }, [\n                                    h('div', { key: 't', style: { fontSize: '15.5px', fontWeight: 800, color: 'var(--sb-text-1)' } }, isCreate ? t('handshake.shareTitle') : t('handshake.sendAnswerTitle')),\n                                    h('div', { key: 's', style: { fontSize: '12px', color: 'var(--sb-text-8)' } }, `${isCreate ? 'offer' : 'answer'} \u00B7 one-time`)\n                                ]),\n                                h('button', { key: 'x', onClick: () => setQrModalOpen(false), style: { width: '32px', height: '32px', display: 'grid', placeItems: 'center', borderRadius: '9px', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-6)', cursor: 'pointer' } }, fa('fa-times'))\n                            ]),\n                            h('div', { key: 'body', style: { padding: '22px 24px 24px' } }, [\n                                h('div', { key: 'qr', style: { position: 'relative', width: '100%', aspectRatio: '1', borderRadius: '18px', overflow: 'hidden', background: '#fff', padding: '18px', display: 'grid', placeItems: 'center' } },\n                                    h('img', { src: qrCodeUrl, alt: t('chatHdr.qrCode'), style: { width: '100%', height: '100%', objectFit: 'contain', display: 'block' } })),\n                                h('div', { key: 'ctrls', style: { display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '12px', marginTop: '18px' } }, [\n                                    (qrFramesTotal || 0) >= 1 && h('div', { key: 'frame', style: { display: 'flex', alignItems: 'center', gap: '9px' } }, [\n                                        h('span', { key: 'l', style: { fontFamily: MONO, fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-6)' } }, `Frame ${Math.max(1, qrFrameIndex || 1)} / ${qrFramesTotal || 1}`),\n                                        h('div', { key: 'dots', style: { display: 'flex', gap: '5px' } }, Array.from({ length: qrFramesTotal || 1 }, (_, i) => h('span', { key: i, style: { width: '7px', height: '7px', borderRadius: '50%', background: (i + 1) === (qrFrameIndex || 1) ? accent : 'rgba(var(--sb-ink), 0.14)', transition: 'background .25s' } })))\n                                    ]),\n                                    (qrFramesTotal || 0) > 1 && h('div', { key: 'nav', style: { display: 'flex', alignItems: 'center', gap: '6px' } }, [\n                                        h('button', { key: 'prev', onClick: prevQrFrame, style: { width: '40px', height: '36px', display: 'grid', placeItems: 'center', borderRadius: '10px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-4)', cursor: 'pointer' } }, fa('fa-chevron-left')),\n                                        h('button', { key: 'auto', onClick: toggleQrManualMode, style: { display: 'inline-flex', alignItems: 'center', gap: '7px', padding: '9px 18px', borderRadius: '10px', border: `1px solid ${qrManualMode ? 'rgba(var(--sb-ink), 0.1)' : 'rgba(var(--sb-orange-rgb), 0.45)'}`, background: qrManualMode ? 'rgba(var(--sb-ink), 0.04)' : 'rgba(var(--sb-orange-rgb), 0.08)', color: qrManualMode ? 'var(--sb-text-6)' : C_ORANGE, fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: 'pointer' } }, qrManualMode ? 'Manual' : 'Auto'),\n                                        h('button', { key: 'next', onClick: nextQrFrame, style: { width: '40px', height: '36px', display: 'grid', placeItems: 'center', borderRadius: '10px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-4)', cursor: 'pointer' } }, fa('fa-chevron-right'))\n                                    ]),\n                                    h('p', { key: 'hint', style: { margin: '2px 0 0', textAlign: 'center', fontSize: '12px', lineHeight: 1.5, color: 'var(--sb-text-9)' } }, (qrFramesTotal || 0) > 1 ? t('handshake.qrHintFrames', { frames: qrFramesTotal }) : t('handshake.qrHint'))\n                                ])\n                            ])\n                        ])\n                    );\n\n                    const hero = h('div', { key: 'hero', style: { display: 'flex', flexWrap: 'wrap', minHeight: '100vh', width: '100%', background: 'var(--sb-bg)', color: 'var(--sb-text-2)' } }, [leftPanel, rightPanel]);\n\n                    // Full-bleed dark bands \u2014 match the design mockups (not clamped to max-w-4xl).\n                    const uniqueSection = atIntro && h(UniqueFeatureSlider, { key: 'unique-features-slider' });\n                    const partnersSection = atIntro && h(BecomePartner, { key: 'become-partner' });\n                    const roadmapSection = atIntro && h(Roadmap, { key: 'roadmap' });\n                    const donateSection = atIntro && h(DonateCrypto, { key: 'donate-crypto' });\n                    const communitySection = atIntro && h(CommunityCTA, { key: 'community-cta' });\n\n                    // Ship the keyframes inside app.js so the animations can never go\n                    // stale against a service-worker-cached components.css.\n                    const keyframeStyle = h('style', { key: 'kf', dangerouslySetInnerHTML: { __html:\n                        '@keyframes sbFlowR{0%{left:4%;opacity:0}12%{opacity:1}88%{opacity:1}100%{left:96%;opacity:0}}' +\n                        '@keyframes sbFlowL{0%{left:96%;opacity:0}12%{opacity:1}88%{opacity:1}100%{left:4%;opacity:0}}' +\n                        '@keyframes sbPulse{0%,100%{transform:translate(-50%,-50%) scale(1);opacity:.5}50%{transform:translate(-50%,-50%) scale(1.5);opacity:0}}' +\n                        '@keyframes sbSpin{to{transform:rotate(360deg)}}' +\n                        '@keyframes sbUp{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}' +\n                        '@keyframes sbNode{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-green-rgb), 0)}50%{box-shadow:0 0 0 6px rgba(var(--sb-green-rgb), .06)}}' +\n                        '@keyframes sbScan{0%{top:8%}100%{top:88%}}' +\n                        '@keyframes sbBlink{0%,100%{opacity:1}50%{opacity:.35}}' +\n                        // P2P / mesh animation (left panel). One 14s loop: the direct line is\n                        // already up, then two peers join it. `sbTrav` moves a dot along the\n                        // same geometry the line is drawn from, via offset-path, so the packet\n                        // and the wire can never drift apart.\n                        '@keyframes sbTrav{0%{offset-distance:0%;opacity:0}15%{opacity:1}80%{opacity:1}100%{offset-distance:100%;opacity:0}}' +\n                        // `r` is animated as a CSS property here. Where a browser does not\n                        // support that the ring simply never expands \u2014 it stays invisible\n                        // behind its own opacity, which is a clean way to lose the flourish.\n                        '@keyframes sbRing1{0%,24%{r:5;opacity:0}26%{opacity:.8}34%{r:22;opacity:0}100%{r:22;opacity:0}}' +\n                        '@keyframes sbRing2{0%,54%{r:5;opacity:0}56%{opacity:.8}64%{r:22;opacity:0}100%{r:22;opacity:0}}' +\n                        '@keyframes sbIn1{0%,24%{opacity:0}27%{opacity:1}100%{opacity:1}}' +\n                        '@keyframes sbIn2{0%,54%{opacity:0}57%{opacity:1}100%{opacity:1}}' +\n                        '@keyframes sbRow0{0%,4%{opacity:0;transform:translateY(4px)}8%{opacity:1;transform:none}100%{opacity:1;transform:none}}' +\n                        '@keyframes sbRow1{0%,25%{opacity:0;transform:translateY(4px)}29%{opacity:1;transform:none}100%{opacity:1;transform:none}}' +\n                        '@keyframes sbRow2{0%,55%{opacity:0;transform:translateY(4px)}59%{opacity:1;transform:none}100%{opacity:1;transform:none}}' +\n                        // A looping diagram is exactly what someone who asked for less motion\n                        // does not want. Hold it on the finished state instead of removing it,\n                        // so the picture still reads as a mesh of three.\n                        '@media (prefers-reduced-motion: reduce){' +\n                          '.sb-start [style*=\"sbTrav\"],.sb-start [style*=\"sbRing\"]{animation:none!important;opacity:0!important}' +\n                          '.sb-start [style*=\"sbIn1\"],.sb-start [style*=\"sbIn2\"],' +\n                          '.sb-start [style*=\"sbRow0\"],.sb-start [style*=\"sbRow1\"],.sb-start [style*=\"sbRow2\"]' +\n                          '{animation:none!important;opacity:1!important;transform:none!important}' +\n                        '}'\n                    } });\n\n                    // Embedded in the chat column (additional session): just the create/connect\n                    // card filling the area \u2014 no hero, no marketing landing.\n                    if (compact) {\n                        return h('div', { className: 'sb-start', style: { flex: 1, minHeight: 0, width: '100%', display: 'flex', flexDirection: 'column', background: 'var(--sb-bg)', color: 'var(--sb-text-2)' } }, [keyframeStyle, rightPanel, qrModal]);\n                    }\n\n                    return h('div', { className: 'sb-start', style: { width: '100%' } }, [keyframeStyle, hero, uniqueSection, partnersSection, roadmapSection, donateSection, communitySection, qrModal]);\n                };\n        \n                // Global scroll function - defined outside components to ensure availability\n                // \u2500\u2500 viewport read-out (?vvdebug=1) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                // A phone cannot be attached to a debugger the way a laptop can, and\n                // the numbers that decide this layout \u2014 how tall the visible rect is,\n                // where it has been moved to, whether the shell followed \u2014 are not\n                // visible in a screenshot of the result. This paints them on top of\n                // the app so one screenshot answers the question. Off unless asked\n                // for by name in the URL; it costs nothing when it is not.\n                function startViewportDebug(vv) {\n                    let on = false;\n                    try { on = new URLSearchParams(window.location.search).get('vvdebug') === '1'; } catch (_) { return null; }\n                    if (!on) return null;\n                    const box = document.createElement('div');\n                    box.setAttribute('data-sb-vvdebug', '');\n                    box.style.cssText = 'position:fixed;top:0;left:0;z-index:2147483647;max-width:100vw;padding:6px 8px;' +\n                        'font:600 10.5px/1.45 ui-monospace,SFMono-Regular,Menlo,monospace;white-space:pre;' +\n                        'color:#fff;background:#000;pointer-events:none;';\n                    document.body.appendChild(box);\n                    const src = (() => {\n                        const el = document.querySelector('script[src*=\"dist/app.js\"]');\n                        return el ? String(el.getAttribute('src') || '').split('?v=')[1] || '?' : '?';\n                    })();\n                    const paint = () => {\n                        const shell = document.querySelector('.sb-app-shell');\n                        const cs = shell ? getComputedStyle(shell) : null;\n                        const r = shell ? shell.getBoundingClientRect() : null;\n                        const root = getComputedStyle(document.documentElement);\n                        box.textContent = [\n                            'build ' + src,\n                            'innerH ' + window.innerHeight + '  scrollY ' + Math.round(window.scrollY),\n                            'vv h ' + (vv ? Math.round(vv.height) : '\u2014') + '  top ' + (vv ? Math.round(vv.offsetTop) : '\u2014') + '  scale ' + (vv ? vv.scale.toFixed(2) : '\u2014'),\n                            'var vh ' + root.getPropertyValue('--sb-vh').trim() + '  vvtop ' + root.getPropertyValue('--sb-vv-top').trim(),\n                            'shell ' + (shell ? (cs.position + ' h' + Math.round(r.height) + ' y' + Math.round(r.top)) : 'ABSENT')\n                        ].join('\\n');\n                        // The read-out must stay readable even when the thing it is\n                        // reporting on has been moved off the screen.\n                        box.style.transform = 'translate3d(0,' + (vv ? Math.round(vv.offsetTop) : 0) + 'px,0)';\n                    };\n                    paint();\n                    const iv = setInterval(paint, 200);\n                    return () => { clearInterval(iv); box.remove(); };\n                }\n\n                const createScrollToBottomFunction = (chatMessagesRef) => {\n                    return () => {\n                        if (chatMessagesRef && chatMessagesRef.current) {\n                            const scrollAttempt = () => {\n                                if (chatMessagesRef.current) {\n                                    chatMessagesRef.current.scrollTo({\n                                        top: chatMessagesRef.current.scrollHeight,\n                                        behavior: scrollBehavior()\n                                    });\n                                }\n                            };\n                            scrollAttempt();\n        \n                            setTimeout(scrollAttempt, 50);\n                            setTimeout(scrollAttempt, 150);\n                            setTimeout(scrollAttempt, 300);\n        \n                            requestAnimationFrame(() => {\n                                setTimeout(scrollAttempt, 100);\n                            });\n                        }\n                    };\n                };\n\n\n            // Runs the real-time cryptographic verification and shows a detailed report\n            // modal (same behaviour the shared header used to provide on click).\n            const runSecurityReport = async (webrtcManager) => {\n                let securityData = null;\n                try {\n                    if (webrtcManager && window.EnhancedSecureCryptoUtils) {\n                        securityData = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(webrtcManager);\n                    }\n                } catch (e) { /* ignore */ }\n                if (!securityData) {\n                    alert('Security verification in progress\u2026\\nPlease wait for real-time cryptographic verification to complete.');\n                    return;\n                }\n\n                // Security verification report \u2014 translated from the Claude Design\n                // component (Security Verification.dc.html): a gauge + live test grid\n                // driven by the real cryptographic results in securityData.\n                const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n                const esc = (s) => String(s).replace(/[&<>\"]/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;' }[c]));\n                // Two forms again: `accent` is read as text, `accentSolid` is drawn \u2014 the\n                // progress ring, the badge fill, the icon strokes. Only the first darkens\n                // in the light theme.\n                const accentSolid = securityData.color === 'orange' ? 'var(--sb-orange-solid)'\n                    : securityData.color === 'yellow' ? 'var(--sb-yellow-solid)'\n                    : securityData.color === 'red' ? 'var(--sb-red-solid)'\n                    : 'var(--sb-green-solid)';\n                const accent = securityData.color === 'orange' ? 'var(--sb-orange)'\n                    : securityData.color === 'yellow' ? 'var(--sb-yellow)'\n                    : securityData.color === 'red' ? 'var(--sb-red)'\n                    : 'var(--sb-green)';\n                const accentRGB = securityData.color === 'orange' ? 'var(--sb-orange-rgb)'\n                    : securityData.color === 'yellow' ? 'var(--sb-yellow-rgb)'\n                    : securityData.color === 'red' ? 'var(--sb-red-rgb)'\n                    : 'var(--sb-green-rgb)';\n                const score = Math.max(0, Math.min(100, Math.round(securityData.score || 0)));\n                const circ = 2 * Math.PI * 56;\n                const dashArray = `${(circ * Math.min(1, score / 100)).toFixed(1)} ${circ.toFixed(1)}`;\n                const level = String(securityData.level || 'SECURE').toUpperCase();\n                const isReal = securityData.isRealData !== false;\n                const entries = securityData.verificationResults ? Object.entries(securityData.verificationResults) : [];\n                const passedCount = Number.isFinite(securityData.passedChecks) ? securityData.passedChecks : entries.filter(([, r]) => r && r.passed).length;\n                const totalCount = Number.isFinite(securityData.totalChecks) ? securityData.totalChecks : entries.length;\n                const verifiedAt = new Date(securityData.timestamp || Date.now()).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit', second: '2-digit', hour12: false });\n\n                // A written name for each check, keyed by its verify* function. Falls back to\n                // the derived title for a check that has not been given one yet.\n                const testTitle = (k) => {\n                    const named = t(`secTest.${k}`);\n                    return named === `secTest.${k}` ? pretty(k) : named;\n                };\n                const pretty = (k) => {\n                    let s = String(k).replace(/^verify/i, '').replace(/([a-z0-9])([A-Z])/g, '$1 $2').replace(/([A-Z]+)([A-Z][a-z])/g, '$1 $2').trim();\n                    s = s.replace(/\\b(ecdh|ecdsa|aes|gcm|hmac|pfs|sas|mitm|asn|dtls|hkdf|spki|oid|p384)\\b/gi, (m) => m.toUpperCase());\n                    return s.charAt(0).toUpperCase() + s.slice(1);\n                };\n\n                const checkIcon = `<svg width=\"17\" height=\"17\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M5 13l4 4 10-11\"/></svg>`;\n                const xIcon = `<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-red-solid)\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M18 6L6 18M6 6l12 12\"/></svg>`;\n                const testsHTML = entries.map(([k, r], i) => {\n                    const passed = !!(r && r.passed);\n                    const raw = (r && r.details) || (passed ? t('sec.testPassed') : t('sec.testFailed'));\n                    // The crypto layer reports in English; translate by the sentence itself,\n                    // which leaves anything not yet translated readable rather than blank.\n                    const looked = t(`secDetail.${raw}`);\n                    const desc = looked === `secDetail.${raw}` ? raw : looked;\n                    const bg = passed ? 'var(--sb-surface)' : 'var(--sb-bg)';\n                    const border = passed ? 'rgba(var(--sb-green-rgb), 0.16)' : 'rgba(var(--sb-red-rgb), 0.18)';\n                    const iconBg = passed ? 'rgba(var(--sb-green-rgb), 0.12)' : 'rgba(var(--sb-red-rgb), 0.1)';\n                    const iconBorder = passed ? 'rgba(var(--sb-green-rgb), 0.26)' : 'rgba(var(--sb-red-rgb), 0.24)';\n                    const titleColor = passed ? 'var(--sb-text-1)' : 'var(--sb-text-4)';\n                    return `<div style=\"display:flex; align-items:flex-start; gap:13px; padding:16px 18px; border-radius:14px; background:${bg}; border:1px solid ${border}; animation:svIn .3s cubic-bezier(.2,.7,.3,1) both; animation-delay:${(i * 0.04).toFixed(2)}s;\">\n                        <span style=\"flex:none; width:34px; height:34px; border-radius:9px; display:grid; place-items:center; background:${iconBg}; border:1px solid ${iconBorder};\">${passed ? checkIcon : xIcon}</span>\n                        <div style=\"flex:1; min-width:0;\">\n                            <div style=\"font-size:14.5px; font-weight:700; letter-spacing:-0.2px; color:${titleColor}; margin-bottom:3px;\">${esc(testTitle(k))}</div>\n                            <div style=\"font-family:${MONO}; font-size:11.5px; line-height:1.45; color:var(--sb-text-7);\">${esc(desc)}</div>\n                        </div>\n                    </div>`;\n                }).join('');\n\n                const modal = document.createElement('div');\n                modal.id = 'sb-security-report';\n                modal.style.cssText = \"position:fixed; inset:0; z-index:10000; display:flex; align-items:center; justify-content:center; padding:24px; background:rgba(var(--sb-scrim-rgb), 0.62); backdrop-filter:blur(4px); -webkit-backdrop-filter:blur(4px); font-family:'Manrope',system-ui,-apple-system,sans-serif; overflow:auto;\";\n                modal.innerHTML = `\n                  <style>@keyframes svIn{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}@keyframes svPulse{0%,100%{opacity:1}50%{opacity:.4}}</style>\n                  <div style=\"position:relative; max-width:960px; width:100%; border-radius:20px; background:radial-gradient(1100px 640px at 50% -6%, rgba(${accentRGB},0.05), transparent 62%), var(--sb-bg); border:1px solid rgba(var(--sb-ink), 0.08); color:var(--sb-text-2); padding:30px; box-shadow:0 30px 70px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k))); animation:svIn .3s cubic-bezier(.2,.7,.3,1); max-height:calc(100vh - 48px); overflow:auto;\">\n                    <button class=\"sv-close\" type=\"button\" title=\"${t('chat.close')}\" style=\"position:absolute; top:16px; inset-inline-end:16px; width:32px; height:32px; border-radius:9px; display:grid; place-items:center; border:1px solid rgba(var(--sb-ink), 0.08); background:rgba(var(--sb-ink), 0.02); color:var(--sb-text-7); cursor:pointer; z-index:2;\">\n                      <svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.1\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"pointer-events:none;\"><path d=\"M6 6l12 12M18 6L6 18\"/></svg>\n                    </button>\n                    <div style=\"position:relative; overflow:hidden; border-radius:18px; background:var(--sb-surface); border:1px solid rgba(var(--sb-ink), 0.07); padding:28px 30px; display:flex; align-items:center; gap:30px; flex-wrap:wrap; margin-bottom:20px;\">\n                      <div style=\"position:absolute; top:0; left:0; right:0; height:1px; background:linear-gradient(90deg, transparent, rgba(${accentRGB},0.6), transparent);\"></div>\n                      <div style=\"position:relative; flex:none; width:128px; height:128px;\">\n                        <svg width=\"128\" height=\"128\" viewBox=\"0 0 128 128\" style=\"transform:rotate(-90deg);\">\n                          <circle cx=\"64\" cy=\"64\" r=\"56\" fill=\"none\" stroke=\"rgba(var(--sb-ink), 0.06)\" stroke-width=\"9\"/>\n                          <circle cx=\"64\" cy=\"64\" r=\"56\" fill=\"none\" stroke=\"${accentSolid}\" stroke-width=\"9\" stroke-linecap=\"round\" stroke-dasharray=\"${dashArray}\"/>\n                        </svg>\n                        <div style=\"position:absolute; inset:0; display:flex; flex-direction:column; align-items:center; justify-content:center;\">\n                          <span style=\"font-size:30px; font-weight:800; letter-spacing:-1px; color:var(--sb-text-1); line-height:1;\">${score}</span>\n                          <span style=\"font-family:${MONO}; font-size:10px; font-weight:600; color:var(--sb-text-9); text-transform:uppercase; letter-spacing:1px; margin-top:4px;\">/ 100 pts</span>\n                        </div>\n                      </div>\n                      <div style=\"flex:1; min-width:240px;\">\n                        <div style=\"font-family:${MONO}; font-size:11px; font-weight:600; color:var(--sb-text-9); text-transform:uppercase; letter-spacing:1.6px; margin-bottom:10px;\">${t('report.title')}</div>\n                        <div style=\"display:flex; align-items:center; gap:12px; margin-bottom:14px; flex-wrap:wrap;\">\n                          <h2 style=\"margin:0; font-size:26px; font-weight:800; letter-spacing:-0.7px; color:var(--sb-text-1);\">Security level: ${esc(level)}</h2>\n                          <span style=\"display:inline-flex; align-items:center; gap:8px; padding:6px 12px; border-radius:9px; background:rgba(${accentRGB},0.12); border:1px solid rgba(${accentRGB},0.3); font-family:${MONO}; font-size:11px; font-weight:700; color:${accent}; text-transform:uppercase; letter-spacing:0.6px;\"><span style=\"width:7px; height:7px; border-radius:50%; background:${accentSolid}; animation:svPulse 2s ease-in-out infinite;\"></span>${t('report.active')}</span>\n                        </div>\n                        <div style=\"display:flex; gap:28px; flex-wrap:wrap;\">\n                          <div><div style=\"font-family:${MONO}; font-size:10px; font-weight:600; color:var(--sb-text-faint); text-transform:uppercase; letter-spacing:1px; margin-bottom:4px;\">${t('report.testsPassed')}</div><div style=\"font-size:15px; font-weight:700; color:var(--sb-text-2);\"><span style=\"color:${accent};\">${passedCount}</span> / ${totalCount}</div></div>\n                          <div><div style=\"font-family:${MONO}; font-size:10px; font-weight:600; color:var(--sb-text-faint); text-transform:uppercase; letter-spacing:1px; margin-bottom:4px;\">${t('report.verifiedAt')}</div><div style=\"font-family:${MONO}; font-size:15px; font-weight:600; color:var(--sb-text-2);\">${esc(verifiedAt)}</div></div>\n                          <div><div style=\"font-family:${MONO}; font-size:10px; font-weight:600; color:var(--sb-text-faint); text-transform:uppercase; letter-spacing:1px; margin-bottom:4px;\">${t('report.source')}</div><div style=\"font-size:15px; font-weight:600; color:var(--sb-text-2);\">${isReal ? t('sec.realTests') : t('sec.simulatedData')}</div></div>\n                        </div>\n                      </div>\n                      <button class=\"sv-rerun\" type=\"button\" style=\"flex:none; display:inline-flex; align-items:center; gap:9px; padding:12px 18px; border-radius:11px; border:1px solid rgba(var(--sb-ink), 0.1); background:rgba(var(--sb-ink), 0.025); color:var(--sb-text-4); font-family:'Manrope',sans-serif; font-size:14px; font-weight:700; cursor:pointer; transition:all .2s;\">\n                        <svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"pointer-events:none;\"><path d=\"M21 12a9 9 0 1 1-3-6.7L21 8\"/><path d=\"M21 3v5h-5\"/></svg>\n                        Re-run\n                      </button>\n                    </div>\n                    <div style=\"display:grid; grid-template-columns:repeat(auto-fit, minmax(248px, 1fr)); gap:12px;\">${testsHTML}</div>\n                    <div style=\"display:flex; align-items:center; gap:12px; margin-top:18px; padding:16px 20px; border-radius:14px; background:rgba(${accentRGB},0.06); border:1px solid rgba(${accentRGB},0.18);\">\n                      <svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"${accentSolid}\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"flex:none;\"><path d=\"M12 3l8 4v5c0 4.5-3.2 7.8-8 9-4.8-1.2-8-4.5-8-9V7l8-4z\"/><path d=\"M9.2 12.2l2 2 3.6-3.8\"/></svg>\n                      <span style=\"font-size:14px; font-weight:600; color:var(--sb-text-2);\">${isReal ? t('sec.realTimeNote') : t('sec.simulatedWarning')}</span>\n                    </div>\n                  </div>`;\n\n                const onKey = (e) => { if (e.key === 'Escape') close(); };\n                const close = () => { if (modal.parentNode) modal.remove(); document.removeEventListener('keydown', onKey); };\n                modal.querySelector('.sv-close').addEventListener('click', close);\n                modal.addEventListener('click', (e) => { if (e.target === modal) close(); });\n                document.addEventListener('keydown', onKey);\n                const rerun = modal.querySelector('.sv-rerun');\n                rerun.addEventListener('mouseenter', () => { rerun.style.borderColor = 'rgba(var(--sb-orange-rgb), 0.45)'; rerun.style.color = 'var(--sb-orange)'; });\n                rerun.addEventListener('mouseleave', () => { rerun.style.borderColor = 'rgba(var(--sb-ink), 0.1)'; rerun.style.color = 'var(--sb-text-4)'; });\n                rerun.addEventListener('click', () => { close(); runSecurityReport(webrtcManager); });\n                document.body.appendChild(modal);\n            };\n\n            // In-chat header matching the SecureBit Chat design: logo + version,\n            // a \"Secure\" pill (click = run the security verification report; the chevron\n            // toggles the network/crypto detail panel), a connection indicator, Disconnect.\n            const SecureBitChatHeader = ({ status, onDisconnect, webrtcManager, title, isOffline, peerPresence, onRenameTitle }) => {\n                const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n                const [showNetwork, setShowNetwork] = React.useState(false);\n                const [sec, setSec] = React.useState(null);\n                const [editingName, setEditingName] = React.useState(false);\n                const [nameDraft, setNameDraft] = React.useState('');\n\n                React.useEffect(() => {\n                    let alive = true;\n                    const fetchSec = async () => {\n                        try {\n                            if (!webrtcManager) return;\n                            let data = null;\n                            if (typeof webrtcManager.getRealSecurityLevel === 'function') data = await webrtcManager.getRealSecurityLevel();\n                            else if (typeof webrtcManager.calculateAndReportSecurityLevel === 'function') data = await webrtcManager.calculateAndReportSecurityLevel();\n                            else if (window.EnhancedSecureCryptoUtils) data = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(webrtcManager);\n                            if (alive && data && data.isRealData !== false) setSec(data);\n                        } catch (e) { /* ignore */ }\n                    };\n                    fetchSec();\n                    const onCalc = (e) => { if (alive && e.detail && e.detail.securityData) setSec(e.detail.securityData); };\n                    document.addEventListener('real-security-calculated', onCalc);\n                    const iv = setInterval(fetchSec, 15000);\n                    return () => { alive = false; clearInterval(iv); document.removeEventListener('real-security-calculated', onCalc); };\n                }, [webrtcManager]);\n\n                // Offline (our device lost connectivity) takes precedence over the P2P state \u2014\n                // the data channel can stay \"open\" after the network drops, so without this the\n                // header would keep saying \"Connected\" while the user is actually offline.\n                const onlineConnected = status === 'connected' || status === 'verified';\n                const dropped = status === 'disconnected' || status === 'peer_disconnected';\n                const connected = onlineConnected && !isOffline;\n                // Dots are marks: the brand accents, not the text-safe ones that darken on white.\n                const connDot = (isOffline || dropped) ? 'var(--sb-red-solid)' : (onlineConnected ? 'var(--sb-green-solid)' : 'var(--sb-yellow-solid)');\n                const connLabel = isOffline\n                    ? t('chat.offline')\n                    : (onlineConnected ? t('status.connected')\n                        : (status === 'peer_disconnected' ? t('status.peerDisconnected')\n                            : (status === 'disconnected' ? t('chat.disconnected') : t('status.connecting'))));\n                const connGlow = (isOffline || dropped) ? '0 0 0 3px rgba(var(--sb-red-rgb), 0.16)' : (onlineConnected ? '0 0 0 3px rgba(var(--sb-green-rgb), 0.16)' : '0 0 0 3px rgba(var(--sb-yellow-rgb), 0.16)');\n                // The avatar dot + subtitle reflect the PEER's advertised availability while connected.\n                const peerDot = (onlineConnected && !isOffline) ? (PRESENCE_DOT[peerPresence] || 'var(--sb-green-solid)') : connDot;\n                const peerPresenceWord = (onlineConnected && !isOffline && peerPresence) ? (PRESENCE_WORD[peerPresence] || null) : null;\n                const startRename = () => { setNameDraft(title || ''); setEditingName(true); };\n                const commitRename = () => { if (typeof onRenameTitle === 'function') onRenameTitle(nameDraft); setEditingName(false); };\n                const renameKey = (e) => { if (e.key === 'Enter') { e.preventDefault(); commitRename(); } else if (e.key === 'Escape') { setEditingName(false); } };\n                const passed = sec && Number.isFinite(sec.passedChecks) ? sec.passedChecks : null;\n                const total = sec && Number.isFinite(sec.totalChecks) ? sec.totalChecks : null;\n                // The security level arrives from the WebRTC layer as an identifier\n                // ('MAXIMUM', 'INITIALIZING'). Translate it where it is shown; anything\n                // without a translation falls through as-is rather than vanishing.\n                const secLevelLabel = (lvl) => {\n                    if (!lvl) return lvl;\n                    const named = t(`secLevel.${lvl}`);\n                    return named === `secLevel.${lvl}` ? lvl : named;\n                };\n                const scoreLabel = (passed != null && total) ? (passed + '/' + total) : (sec ? (sec.score + '%') : '\u2014');\n                const accent = sec\n                    ? (sec.color === 'green' ? 'var(--sb-green)' : sec.color === 'orange' ? 'var(--sb-orange)' : sec.color === 'yellow' ? 'var(--sb-yellow)' : 'var(--sb-red)')\n                    : 'var(--sb-green)';\n\n                const secBtn = React.createElement('div', {\n                    key: 'sec', title: t('sas.runVerification'),\n                    onClick: () => runSecurityReport(webrtcManager),\n                    className: 'sb-secpill',\n                    style: { display: 'flex', alignItems: 'center', gap: '9px', padding: '7px 13px', borderRadius: '9px', border: '1px solid ' + (showNetwork ? 'rgba(var(--sb-ink), 0.16)' : 'rgba(var(--sb-ink), 0.07)'), background: showNetwork ? 'rgba(var(--sb-ink), 0.05)' : 'rgba(var(--sb-ink), 0.02)', cursor: 'pointer', fontFamily: 'inherit', transition: 'all .15s' }\n                }, [\n                    React.createElement('i', { key: 'i', className: 'fas fa-shield-halved', style: { color: accent, fontSize: '13px' } }),\n                    React.createElement('span', { key: 'l', className: 'sb-sec-label', style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-2)' } }, sec ? (secLevelLabel(sec.level) || t('chatHdr.secure')) : t('chatHdr.secure')),\n                    React.createElement('span', { key: 'd', className: 'sb-sec-div', style: { width: '1px', height: '13px', background: 'rgba(var(--sb-ink), 0.12)' } }),\n                    React.createElement('span', { key: 's', className: 'sb-sec-score', style: { fontFamily: MONO, fontSize: '11.5px', fontWeight: 500, color: 'var(--sb-text-7)' } }, scoreLabel),\n                    React.createElement('button', {\n                        key: 'c', type: 'button', title: t('sec.panelTitle'),\n                        onClick: (e) => { e.stopPropagation(); setShowNetwork(v => !v); },\n                        style: { background: 'none', border: 'none', padding: 0, margin: 0, cursor: 'pointer', display: 'grid', placeItems: 'center' }\n                    }, React.createElement('i', { className: 'fas fa-chevron-down', style: { color: 'var(--sb-text-9)', fontSize: '11px', transform: showNetwork ? 'rotate(180deg)' : 'rotate(0deg)', transition: 'transform .2s' } }))\n                ]);\n\n                const headerResponsiveCss = React.createElement('style', { key: 'hdr-css', dangerouslySetInnerHTML: { __html:\n                    // Encrypted call buttons \u2014 green hover per the design.\n                    '.sb-call-btn:not(.sb-call-off):hover{border-color:rgba(var(--sb-green-rgb), 0.45) !important;color:var(--sb-green) !important;background:rgba(var(--sb-green-rgb), 0.07) !important;}' +\n                    // Mobile: leave room for the drawer hamburger and shed non-essential header\n                    // chrome so avatar + name + status + call/Disconnect fit a narrow screen.\n                    '@media (max-width:768px){' +\n                    '.sb-chat-header{padding-inline-start:58px !important;gap:8px !important;}' +\n                    // Remove the security/verification pill on mobile (per request) \u2014 the\n                    // full report is still available from the desktop header.\n                    '.sb-chat-header .sb-secpill{display:none !important;}' +\n                    '.sb-chat-header .sb-conn-text{display:none !important;}' +\n                    '.sb-chat-header .sb-conn{padding:9px !important;}' +\n                    '.sb-chat-header .sb-hdr-sub{display:none !important;}' +\n                    // Disconnect: compact icon-only square, red-tinted, matching the call buttons.\n                    '.sb-chat-header .sb-disconnect{width:40px !important;height:40px !important;padding:0 !important;gap:0 !important;justify-content:center !important;border-radius:9px !important;color:var(--sb-red) !important;border-color:rgba(var(--sb-red-rgb), 0.28) !important;}' +\n                    // The label has to go wherever the button becomes a square. Its own\n                    // rule (.sb-hide-sm, components.css) stops at 560px, so between there\n                    // and 768 the word \"Disconnect\" was still inside a 40px box, shouldering\n                    // the icon off-centre \u2014 the button read as crooked rather than icon-only.\n                    '.sb-chat-header .sb-disconnect .sb-hide-sm{display:none !important;}' +\n                    '}' +\n                    // Composer mode chips: one horizontally-scrollable row instead of wrapping\n                    // to two ugly rows on narrow screens.\n                    '@media (max-width:600px){' +\n                    '.sb-chips{flex-wrap:nowrap !important;justify-content:flex-start !important;overflow-x:auto;-webkit-overflow-scrolling:touch;scrollbar-width:none;}' +\n                    '.sb-chips::-webkit-scrollbar{display:none;}' +\n                    '.sb-chips>*{flex:0 0 auto !important;}' +\n                    '.sb-chips .sb-chips-right{flex-wrap:nowrap !important;}' +\n                    '.sb-chips .sb-chip{white-space:nowrap;}' +\n                    '}' +\n                    '@media (max-width:480px){.sb-chat-header{padding-inline-end:12px !important;}}'\n                } });\n                const header = React.createElement('header', {\n                    // --sb-safe-top is the iOS status-bar strip the installed web view draws\n                    // under (0 in a browser tab). It is added to BOTH the padding and the\n                    // height so the 64px of header content is untouched and only the\n                    // translucent bar grows upward to meet the top edge of the screen.\n                    key: 'hdr', className: 'sb-chat-header', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: '24px', padding: 'var(--sb-safe-top, 0px) 20px var(--sb-bar-extra, 0px)', minHeight: 'calc(var(--sb-bar-h, 64px) + var(--sb-safe-top, 0px) + var(--sb-bar-extra, 0px))', boxSizing: 'border-box', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(var(--sb-bg-rgb), 0.72)', backdropFilter: 'blur(14px)', WebkitBackdropFilter: 'blur(14px)' }\n                }, [\n                    headerResponsiveCss,\n                    // The SecureBit brand/logo lives in the left rail; this header identifies the\n                    // ACTIVE conversation \u2014 avatar monogram + local label + connection status.\n                    React.createElement('div', { key: 'left', style: { display: 'flex', alignItems: 'center', gap: '12px', minWidth: 0 } }, [\n                        React.createElement('div', { key: 'avatar', style: { position: 'relative', flex: 'none', width: '36px', height: '36px', borderRadius: '10px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-ink), 0.05)', border: '1px solid rgba(var(--sb-ink), 0.09)', fontSize: '13px', fontWeight: 700, letterSpacing: '-0.3px', color: 'var(--sb-text-2)' } }, [\n                            monoInitials(title || t('chatHdr.chat')),\n                            React.createElement('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: peerDot, border: '2px solid var(--sb-bg)' } })\n                        ]),\n                        editingName\n                            ? React.createElement('div', { key: 'edit', style: { display: 'flex', flexDirection: 'column', gap: '4px', minWidth: 0 } }, [\n                                React.createElement('div', { key: 'row', style: { display: 'flex', alignItems: 'center', gap: '6px' } }, [\n                                    React.createElement('input', { key: 'in', autoFocus: true, value: nameDraft, maxLength: 32, placeholder: t('chat.nameThis'), onChange: (e) => setNameDraft(e.target.value), onKeyDown: renameKey, onBlur: commitRename, style: { width: '210px', padding: '5px 10px', borderRadius: '8px', border: '1px solid rgba(var(--sb-orange-rgb), 0.55)', background: 'var(--sb-bg)', color: 'var(--sb-text-1)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, outline: 'none' } }),\n                                    React.createElement('button', { key: 'ok', onMouseDown: (e) => e.preventDefault(), onClick: commitRename, title: t('chatHdr.save'), style: { flex: 'none', width: '28px', height: '28px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', cursor: 'pointer' } }, React.createElement('i', { className: 'fas fa-check', style: { fontSize: '12px' } }))\n                                ]),\n                                React.createElement('div', { key: 'hint', style: { fontSize: '11px', color: 'var(--sb-text-faint)' } }, t('chat.localLabel'))\n                            ])\n                            : React.createElement('div', { key: 'txt', style: { lineHeight: 1.2, minWidth: 0 } }, [\n                                React.createElement('div', { key: 'r1', style: { display: 'flex', alignItems: 'center', gap: '7px' } }, [\n                                    React.createElement('span', { key: 'n', style: { fontSize: '15px', fontWeight: 800, letterSpacing: '-0.3px', color: 'var(--sb-text-1)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, title || t('chat.secureChat')),\n                                    React.createElement('button', { key: 'edit', className: 'sb-rename-btn', onClick: startRename, title: t('chat.rename'), style: { flex: 'none', width: '24px', height: '24px', borderRadius: '7px', display: 'grid', placeItems: 'center', border: 'none', background: 'transparent', color: 'var(--sb-text-faint)', cursor: 'pointer' } }, React.createElement('i', { className: 'fas fa-pen', style: { fontSize: '11px' } }))\n                                ]),\n                                React.createElement('div', { key: 'r2', className: 'sb-hdr-sub', style: { fontSize: '11px', color: 'var(--sb-text-9)', fontWeight: 500, whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, isOffline ? t('chat.noNetwork') : (status === 'reconnecting' ? t('flow.restoring') : (peerPresenceWord || (onlineConnected ? t('chatHdr.p2pSub') : (status === 'peer_disconnected' ? t('status.peerDisconnected') : (status === 'disconnected' ? t('chat.disconnected') : t('status.connecting')))))))\n                            ])\n                    ]),\n                    secBtn,\n                    React.createElement('div', { key: 'right', className: 'sb-hdr-right', style: { display: 'flex', alignItems: 'center', gap: '9px' } }, [\n                        // Encrypted call buttons \u2014 enabled only once the session is\n                        // connected AND SAS-verified (the manager enforces the same\n                        // gate; this just reflects it). Media rides the verified\n                        // DTLS-SRTP transport, so calls inherit the E2E encryption.\n                        ...((() => {\n                            const callReady = connected && webrtcManager && webrtcManager.isVerified === true;\n                            const startCall = (video) => {\n                                if (!callReady || !webrtcManager) return;\n                                try { const p = webrtcManager.startCall(video); if (p && p.catch) p.catch(() => {}); }\n                                catch (_) {}\n                            };\n                            // Exact design spec: 40\u00D740, 9px radius, SVG phone/video icons,\n                            // green hover (via the .sb-call-btn CSS rule below).\n                            const callBtnStyle = {\n                                width: '40px', height: '40px', borderRadius: '9px', display: 'grid', placeItems: 'center',\n                                border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'rgba(var(--sb-ink), 0.02)',\n                                color: callReady ? 'var(--sb-text-6)' : 'var(--sb-surface-5)', cursor: callReady ? 'pointer' : 'not-allowed', transition: 'all .15s'\n                            };\n                            const PHONE_SVG = '<svg width=\"17\" height=\"17\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\"/></svg>';\n                            const VIDEO_SVG = '<svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M23 7l-7 5 7 5V7z\"/><rect x=\"1\" y=\"5\" width=\"15\" height=\"14\" rx=\"2.5\"/></svg>';\n                            return [\n                                React.createElement('button', { key: 'call-audio', className: callReady ? 'sb-call-btn' : 'sb-call-btn sb-call-off', disabled: !callReady, onClick: () => startCall(false), title: callReady ? t('chat.startVoiceCall') : t('chat.verifyForCalls'), style: callBtnStyle, dangerouslySetInnerHTML: { __html: PHONE_SVG } }),\n                                React.createElement('button', { key: 'call-video', className: callReady ? 'sb-call-btn' : 'sb-call-btn sb-call-off', disabled: !callReady, onClick: () => startCall(true), title: callReady ? t('chat.startVideoCall') : t('chat.verifyForCalls'), style: callBtnStyle, dangerouslySetInnerHTML: { __html: VIDEO_SVG } })\n                            ];\n                        })()),\n                        React.createElement('div', { key: 'conn', className: 'sb-conn', style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '8px 13px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)' } }, [\n                            React.createElement('span', { key: 'dot', style: { flex: 'none', width: '7px', height: '7px', borderRadius: '50%', background: connDot, boxShadow: connGlow } }),\n                            React.createElement('span', { key: 't', className: 'sb-conn-text', style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-4)' } }, connLabel)\n                        ]),\n                        React.createElement('button', { key: 'dc', onClick: onDisconnect, className: 'sb-disconnect', style: { display: 'flex', alignItems: 'center', gap: '7px', padding: '8px 14px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'transparent', color: 'var(--sb-text-6)', fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: 'pointer', transition: 'all .15s' } }, [\n                            React.createElement('i', { key: 'i', className: 'fas fa-power-off', style: { fontSize: '12px' } }),\n                            React.createElement('span', { key: 't', className: 'sb-hide-sm' }, t('hdr.disconnect'))\n                        ])\n                    ])\n                ]);\n\n                const netPanel = showNetwork && React.createElement('div', {\n                    key: 'net', style: { flex: 'none', padding: '13px 20px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(var(--sb-bg-rgb), 0.72)', backdropFilter: 'blur(14px)', WebkitBackdropFilter: 'blur(14px)' }\n                }, React.createElement('div', { style: { maxWidth: '1000px', margin: '0 auto', display: 'grid', gridTemplateColumns: 'repeat(auto-fit,minmax(140px,1fr))', gap: '14px', fontFamily: MONO } },\n                    [\n                        [t('sec.transport'), 'WebRTC \u00B7 DTLS'],\n                        [t('sec.cipher'), 'AES-256-GCM'],\n                        [t('sec.keyExchange'), 'ECDH P-384'],\n                        [t('sec.security'), scoreLabel + (sec ? (' \u00B7 ' + sec.score + '%') : '')]\n                    ].map(([k, v], i) => React.createElement('div', { key: 'nf' + i }, [\n                        React.createElement('div', { key: 'k', style: { fontSize: '10px', color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '0.6px', marginBottom: '4px' } }, k),\n                        React.createElement('div', { key: 'v', style: { fontSize: '12.5px', color: i === 3 ? accent : 'var(--sb-text-4)', fontWeight: 500 } }, v)\n                    ]))\n                ));\n\n                return React.createElement('div', { style: { flex: 'none' } }, [header, netPanel]);\n            };\n\n\n               const EnhancedChatInterface = ({\n            title,\n            isOffline,\n            peerPresence,\n            onRenameTitle,\n            messages,\n            messageInput,\n            setMessageInput,\n            onSendMessage,\n            onSendVoice,\n            onDisconnect,\n            keyFingerprint,\n            isVerified,\n            chatMessagesRef,\n            scrollToBottom,\n            webrtcManager,\n            status,\n            pendingIncomingFiles = [],\n            onIncomingDecision,\n            // Secure chat extras\n            codeMode,\n            setCodeMode,\n            viewOnceMode,\n            setViewOnceMode,\n            viewOnceTtl,\n            setViewOnceTtl,\n            disappearTtl,\n            setDisappearTtl,\n            nowTick,\n            onUnsendMessage,\n            onMessageExpire\n        }) => {\n            const [showScrollButton, setShowScrollButton] = React.useState(false);\n            const [showFileTransfer, setShowFileTransfer] = React.useState(false);\n            // True only when the user opened the panel to SEND (shows the drop-zone).\n            // Incoming-file auto-open leaves this false, so the receiver sees the\n            // incoming request + receiving progress, not the \"send attachments\" UI.\n            const [fileSendMode, setFileSendMode] = React.useState(false);\n            const [showTimer, setShowTimer] = React.useState(false);\n            const [showOnce, setShowOnce] = React.useState(false);\n            const [showHandshake, setShowHandshake] = React.useState(false);\n            const [isRecording, setIsRecording] = React.useState(false);\n            // Desktop shows mic + send side by side; mobile toggles between them.\n            const [isDesktop, setIsDesktop] = React.useState(() => typeof window !== 'undefined' && !!window.matchMedia && window.matchMedia('(min-width:1024px)').matches);\n            React.useEffect(() => {\n                if (typeof window === 'undefined' || !window.matchMedia) return;\n                const mq = window.matchMedia('(min-width:1024px)');\n                const onCh = () => setIsDesktop(mq.matches);\n                try { mq.addEventListener('change', onCh); } catch (_) { mq.addListener(onCh); }\n                return () => { try { mq.removeEventListener('change', onCh); } catch (_) { mq.removeListener(onCh); } };\n            }, []);\n            const taRef = React.useRef(null);\n\n            // Auto-grow the message textarea (and reset its height after sending).\n            React.useEffect(() => {\n                const el = taRef.current;\n                if (!el || codeMode) return;\n                el.style.height = 'auto';\n                el.style.height = Math.min(el.scrollHeight, 240) + 'px';\n            }, [messageInput, codeMode]);\n\n            // Auto-open the file transfer panel when an incoming request arrives\n            React.useEffect(() => {\n                if (pendingIncomingFiles.length > 0) {\n                    setShowFileTransfer(true);\n                }\n            }, [pendingIncomingFiles.length]);\n\n            // Whether the conversation was sitting at its bottom, remembered from the\n            // last scroll. It has to be remembered rather than measured on demand:\n            // by the time the keyboard has opened the list is already shorter, and\n            // \"how far from the bottom\" then reads as the height of the keyboard for\n            // a view that had not moved at all.\n            const atBottomRef = React.useRef(true);\n\n            // Follow the conversation when the visual viewport resizes \u2014 the keyboard\n            // opening or closing. The list keeps its scrollTop while its height drops\n            // by a few hundred pixels, which leaves whoever tapped the composer\n            // looking at messages from a minute ago.\n            React.useEffect(() => {\n                const vv = (typeof window !== 'undefined') ? window.visualViewport : null;\n                if (!vv) return;\n                const stick = () => {\n                    if (!atBottomRef.current) return;\n                    const el = chatMessagesRef.current;\n                    if (!el) return;\n                    el.scrollTop = el.scrollHeight;\n                };\n                // Twice: once for this frame, once after iOS has finished animating\n                // the keyboard in and settled on a final height.\n                const onResize = () => { requestAnimationFrame(stick); setTimeout(stick, 300); };\n                vv.addEventListener('resize', onResize);\n                return () => vv.removeEventListener('resize', onResize);\n            }, [chatMessagesRef]);\n\n            React.useEffect(() => {\n                if (chatMessagesRef.current && messages.length > 0) {\n                    const { scrollTop, scrollHeight, clientHeight } = chatMessagesRef.current;\n                    const isNearBottom = scrollHeight - scrollTop - clientHeight < 100;\n                    if (isNearBottom) {\n                        const smoothScroll = () => {\n                            if (chatMessagesRef.current) {\n                                chatMessagesRef.current.scrollTo({\n                                    top: chatMessagesRef.current.scrollHeight,\n                                    behavior: scrollBehavior()\n                                });\n                            }\n                        };\n                        smoothScroll();\n                        setTimeout(smoothScroll, 50);\n                        setTimeout(smoothScroll, 150);\n                    }\n                }\n            }, [messages, chatMessagesRef]);\n\n            const handleScroll = () => {\n                if (chatMessagesRef.current) {\n                    const { scrollTop, scrollHeight, clientHeight } = chatMessagesRef.current;\n                    const isNearBottom = scrollHeight - scrollTop - clientHeight < 100;\n                    atBottomRef.current = isNearBottom;\n                    setShowScrollButton(!isNearBottom);\n                }\n            };\n\n            const handleScrollToBottom = () => {\n                atBottomRef.current = true;\n                if (typeof scrollToBottom === 'function') {\n                    scrollToBottom();\n                    setShowScrollButton(false);\n                } else if (chatMessagesRef.current) {\n                    chatMessagesRef.current.scrollTo({ top: chatMessagesRef.current.scrollHeight, behavior: scrollBehavior() });\n                    setShowScrollButton(false);\n                }\n            };\n\n            const handleKeyPress = (e) => {\n                if (e.key !== 'Enter') return;\n                if (codeMode) {\n                    if (e.metaKey || e.ctrlKey) { e.preventDefault(); onSendMessage(); }\n                } else if (!e.shiftKey) {\n                    e.preventDefault();\n                    onSendMessage();\n                }\n            };\n\n            const isFileTransferReady = () => {\n                if (!webrtcManager) return false;\n                const connected = webrtcManager.isConnected ? webrtcManager.isConnected() : false;\n                const verified = webrtcManager.isVerified || false;\n                const hasDataChannel = webrtcManager.dataChannel && webrtcManager.dataChannel.readyState === 'open';\n                return connected && verified && hasDataChannel;\n            };\n\n            // ---- design tokens / helpers ----\n            const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n            const fmtShort = (s) => {\n                if (!s) return '';\n                if (s >= 86400 && s % 86400 === 0) return (s / 86400) + 'd';\n                if (s >= 3600 && s % 3600 === 0) return (s / 3600) + 'h';\n                if (s >= 60) return Math.round(s / 60) + 'm';\n                return s + 's';\n            };\n            const chipStyle = (active) => ({\n                display: 'flex', alignItems: 'center', gap: '6px', padding: '7px 11px', borderRadius: '8px',\n                border: '1px solid ' + (active ? 'rgba(var(--sb-ink), 0.18)' : 'rgba(var(--sb-ink), 0.07)'),\n                background: active ? 'rgba(var(--sb-ink), 0.06)' : 'transparent',\n                color: active ? '#fff' : 'var(--sb-text-6)',\n                fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600, cursor: 'pointer', transition: 'all .15s'\n            });\n            const optStyle = (sel) => ({\n                padding: '6px 12px', borderRadius: '8px',\n                border: '1px solid ' + (sel ? 'rgba(var(--sb-ink), 0.22)' : 'rgba(var(--sb-ink), 0.07)'),\n                background: sel ? 'rgba(var(--sb-ink), 0.07)' : 'transparent',\n                color: sel ? '#fff' : 'var(--sb-text-7)',\n                fontFamily: MONO, fontSize: '12px', fontWeight: 500, cursor: 'pointer', transition: 'all .14s'\n            });\n\n            const timerDefs = [\n                { label: t('msg.off'), v: 0 }, { label: '5s', v: 5 }, { label: '30s', v: 30 },\n                { label: '1m', v: 60 }, { label: '1h', v: 3600 }, { label: '24h', v: 86400 }\n            ];\n            const onceDefs = [\n                { label: t('msg.off'), v: 0 }, { label: '5s', v: 5 }, { label: '10s', v: 10 },\n                { label: '30s', v: 30 }, { label: '1m', v: 60 }\n            ];\n            const onceSelected = viewOnceMode ? viewOnceTtl : 0;\n            const pickTimer = (v) => { setDisappearTtl(v); setShowTimer(false); };\n            const pickOnce = (v) => {\n                if (v === 0) setViewOnceMode(false);\n                else { setViewOnceTtl(v); setViewOnceMode(true); }\n                setShowOnce(false);\n            };\n\n            const hasText = !!(messageInput && messageInput.trim());\n            // Voice recording is offered only over a live, verified channel with a\n            // usable mic API (it rides the same transfer path as files).\n            const canRecord = typeof onSendVoice === 'function'\n                && !isOffline\n                && isFileTransferReady()\n                && typeof navigator !== 'undefined'\n                && navigator.mediaDevices\n                && typeof navigator.mediaDevices.getUserMedia === 'function';\n\n            // System notices are surfaced inside the handshake/connection log card\n            // (matching the design) rather than as bubbles in the message flow.\n            const fmtT = (ts) => { try { return new Date(ts).toLocaleTimeString('en-GB', { hour: '2-digit', minute: '2-digit', second: '2-digit' }); } catch (e) { return ''; } };\n            // Connection log = string-only system notices (a React-element message\n            // would render as \"[object Object]\" in the log, so it's excluded).\n            const systemMessages = messages.filter((m) => m.type === 'system' && typeof m.message === 'string' && m.message.trim());\n            const chatMessages = messages.filter((m) => m.type !== 'system');\n\n            // ---- handshake / connection log card ----\n            const handshakeCard = (isVerified || systemMessages.length > 0) && React.createElement('div', {\n                key: 'handshake',\n                style: { border: '1px solid rgba(var(--sb-ink), 0.07)', borderRadius: '12px', background: 'var(--sb-surface)', overflow: 'hidden' }\n            }, [\n                React.createElement('button', {\n                    key: 'hs-btn', onClick: () => setShowHandshake(v => !v),\n                    style: { width: '100%', display: 'flex', alignItems: 'center', gap: '13px', padding: '14px 16px', background: 'transparent', border: 'none', color: 'inherit', cursor: 'pointer', textAlign: 'start', fontFamily: 'inherit' }\n                }, [\n                    React.createElement('div', { key: 'ic', style: { flex: 'none', width: '30px', height: '30px', display: 'grid', placeItems: 'center' } },\n                        React.createElement('i', { className: 'fas fa-check', style: { color: 'var(--sb-green)', fontSize: '16px' } })\n                    ),\n                    React.createElement('div', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                        React.createElement('div', { key: 't1', style: { fontSize: '13.5px', fontWeight: 600, color: 'var(--sb-text-2)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, t('flow.channelEstablished')),\n                        React.createElement('div', { key: 't2', style: { fontSize: '12px', color: 'var(--sb-text-8)', marginTop: '1px', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, t('sas.verified') + (systemMessages.length ? (' \u00B7 ' + systemMessages.length + (systemMessages.length === 1 ? ' event' : ' events')) : ''))\n                    ]),\n                    React.createElement('i', { key: 'chev', className: 'fas fa-chevron-down', style: { flex: 'none', color: 'var(--sb-text-9)', fontSize: '13px', transform: showHandshake ? 'rotate(180deg)' : 'rotate(0deg)', transition: 'transform .2s' } })\n                ]),\n                showHandshake && React.createElement('div', { key: 'hs-body', style: { paddingTop: '2px', paddingBottom: '14px', paddingInlineStart: '59px', paddingInlineEnd: '16px' } }, [\n                    systemMessages.length > 0 && React.createElement('div', { key: 'steps', className: 'sb-scroll', style: { marginBottom: '12px', maxHeight: '220px', overflowY: 'auto', paddingInlineEnd: '6px' } },\n                        systemMessages.map((m, i) => React.createElement('div', { key: 's' + i, style: { display: 'flex', gap: '11px', padding: '6px 0', borderTop: i === 0 ? 'none' : '1px solid rgba(var(--sb-ink), 0.04)' } }, [\n                            React.createElement('span', { key: 'd', style: { flex: 'none', width: '5px', height: '5px', borderRadius: '50%', background: 'var(--sb-green-solid)', marginTop: '7px', opacity: 0.6 } }),\n                            React.createElement('span', { key: 't', style: { flex: 1, fontSize: '12.5px', color: 'var(--sb-text-6)', lineHeight: 1.5, wordBreak: 'break-word' } }, String(m.message || '').trim()),\n                            React.createElement('span', { key: 'tm', style: { flex: 'none', fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-faint)' } }, fmtT(m.timestamp))\n                        ]))\n                    ),\n                    keyFingerprint && React.createElement('div', { key: 'sn', style: { display: 'flex', alignItems: 'center', gap: '9px', padding: '10px 12px', borderRadius: '9px', background: 'rgba(var(--sb-ink), 0.025)', border: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-lock', style: { color: 'var(--sb-text-7)', fontSize: '12px' } }),\n                        React.createElement('span', { key: 'l', style: { fontSize: '11.5px', color: 'var(--sb-text-7)' } }, t('sas.safetyNumber')),\n                        React.createElement('span', { key: 'v', style: { fontFamily: MONO, fontSize: '12px', color: 'var(--sb-text-4)', letterSpacing: '0.8px', fontWeight: 500, wordBreak: 'break-all' } }, keyFingerprint)\n                    ])\n                ])\n            ]);\n\n            // ---- empty state ----\n            const emptyState = React.createElement('div', { key: 'empty', style: { display: 'flex', alignItems: 'center', justifyContent: 'center', flex: 1, minHeight: '40vh' } },\n                React.createElement('div', { style: { textAlign: 'center', maxWidth: '420px' } }, [\n                    React.createElement('img', { key: 'ic', src: '/logo/securebit-mark.svg', alt: 'SecureBit', style: { width: '60px', height: '60px', objectFit: 'contain', display: 'block', margin: '0 auto 16px' } }),\n                    React.createElement('h3', { key: 't', style: { fontSize: '17px', fontWeight: 700, color: 'var(--sb-text-2)', margin: '0 0 6px' } }, t('flow.channelReady')),\n                    React.createElement('p', { key: 'p', style: { fontSize: '13px', color: 'var(--sb-text-8)', margin: 0 } }, t('chat.e2eeNote'))\n                ])\n            );\n\n            // ---- messages list ----\n            const messagesArea = React.createElement('main', {\n                key: 'main',\n                ref: chatMessagesRef,\n                onScroll: handleScroll,\n                className: 'sb-scroll',\n                style: { flex: 1, overflowY: 'auto', padding: '20px 20px 22px' }\n            }, React.createElement('div', { style: { width: '100%', maxWidth: '1000px', margin: '0 auto', display: 'flex', flexDirection: 'column', gap: '16px', minHeight: '100%' } },\n                chatMessages.length === 0\n                    ? [handshakeCard, emptyState]\n                    : [handshakeCard].concat(chatMessages.map((msg) => React.createElement(EnhancedChatMessage, {\n                        key: msg.id,\n                        message: msg.message,\n                        type: msg.type,\n                        timestamp: msg.timestamp,\n                        mid: msg.mid,\n                        status: msg.status,\n                        viewOnce: msg.viewOnce,\n                        viewOnceTtl: msg.viewOnceTtl,\n                        expiresAt: msg.expiresAt,\n                        expired: msg.expired,\n                        nowTick: nowTick,\n                        canUnsend: typeof onUnsendMessage === 'function',\n                        onUnsend: onUnsendMessage,\n                        onExpire: () => onMessageExpire && onMessageExpire(msg.id),\n                        voice: msg.voice\n                    })))\n            ));\n\n            // ---- option rows ----\n            const timerRow = showTimer && React.createElement('div', { key: 'timer-row', style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: '8px', padding: '10px 12px', marginBottom: '10px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)' } },\n                [React.createElement('span', { key: 'lbl', style: { fontSize: '12px', color: 'var(--sb-text-7)', fontWeight: 600, marginInlineEnd: '4px' } }, t('chat.disappearAfter'))].concat(\n                    timerDefs.map((d) => React.createElement('button', { key: 'td' + d.v, onClick: () => pickTimer(d.v), style: optStyle(disappearTtl === d.v) }, d.label))\n                )\n            );\n            const onceRow = showOnce && React.createElement('div', { key: 'once-row', style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: '8px', padding: '10px 12px', marginBottom: '10px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)' } },\n                [React.createElement('span', { key: 'lbl', style: { fontSize: '12px', color: 'var(--sb-text-7)', fontWeight: 600, marginInlineEnd: '4px' } }, t('chat.visibleFor'))].concat(\n                    onceDefs.map((d) => React.createElement('button', { key: 'od' + d.v, onClick: () => pickOnce(d.v), style: optStyle(onceSelected === d.v) }, d.label))\n                )\n            );\n\n            // ---- file transfer panel ----\n            const filePanel = showFileTransfer && React.createElement('div', { key: 'file-panel', style: { marginBottom: '10px' } },\n                React.createElement(window.FileTransferComponent || (() => React.createElement('div', { style: { padding: '16px', textAlign: 'center', color: 'var(--sb-red)' } }, 'FileTransferComponent not loaded')), {\n                    webrtcManager: webrtcManager,\n                    isConnected: isFileTransferReady(),\n                    pendingIncomingFiles: pendingIncomingFiles,\n                    onIncomingDecision: onIncomingDecision,\n                    showDropzone: fileSendMode\n                })\n            );\n\n            // ---- chips row ----\n            const chipsRow = React.createElement('div', { key: 'chips', className: 'sb-chips', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', flexWrap: 'wrap', gap: '8px', marginBottom: '10px' } }, [\n                React.createElement('button', { key: 'files', onClick: () => {\n                    if (showFileTransfer && fileSendMode) { setShowFileTransfer(false); setFileSendMode(false); }\n                    else { setShowFileTransfer(true); setFileSendMode(true); }\n                }, className: 'sb-chip', style: chipStyle(showFileTransfer && fileSendMode) }, [\n                    React.createElement('i', { key: 'i', className: 'fas fa-paperclip', style: { fontSize: '13px' } }),\n                    (showFileTransfer && fileSendMode) ? t('chat.hideFiles') : t('chat.sendFiles')\n                ]),\n                React.createElement('div', { key: 'right', className: 'sb-chips-right', style: { display: 'flex', alignItems: 'center', gap: '6px', flexWrap: 'wrap' } }, [\n                    React.createElement('button', { key: 'code', onClick: () => setCodeMode(v => !v), className: 'sb-chip', style: chipStyle(codeMode) }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-code', style: { fontSize: '13px' } }), t('msg.code')\n                    ]),\n                    React.createElement('button', { key: 'once', onClick: () => { setShowOnce(v => !v); setShowTimer(false); }, className: 'sb-chip', style: chipStyle(showOnce || viewOnceMode) }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-eye-slash', style: { fontSize: '13px' } }),\n                        viewOnceMode ? (t('chat.viewOncePrefix') + fmtShort(viewOnceTtl)) : t('chat.viewOnce')\n                    ]),\n                    React.createElement('button', { key: 'timer', onClick: () => { setShowTimer(v => !v); setShowOnce(false); }, className: 'sb-chip', style: chipStyle(showTimer || disappearTtl > 0) }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-stopwatch', style: { fontSize: '13px' } }),\n                        disappearTtl > 0 ? (t('chat.timerPrefix') + fmtShort(disappearTtl)) : t('msg.timer')\n                    ])\n                ])\n            ]);\n\n            // ---- code-mode header strip ----\n            const codeStrip = codeMode && React.createElement('div', { key: 'code-strip', style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '8px 14px', border: '1px solid rgba(var(--sb-ink), 0.08)', borderBottom: 'none', borderRadius: '14px 14px 0 0', background: 'var(--sb-surface)' } }, [\n                React.createElement('i', { key: 'i', className: 'fas fa-code', style: { color: 'var(--sb-text-7)', fontSize: '12px' } }),\n                React.createElement('span', { key: 's', style: { fontSize: '11.5px', fontWeight: 600, color: 'var(--sb-text-7)' } }, t('chat.codeHint')),\n                React.createElement('button', { key: 'c', onClick: () => setCodeMode(false), className: 'sb-link', style: { marginInlineStart: 'auto', background: 'none', border: 'none', color: 'var(--sb-text-9)', cursor: 'pointer', fontSize: '11.5px', fontFamily: 'inherit', fontWeight: 600 } }, t('chat.close'))\n            ]);\n\n            // ---- input row ----\n            const sendBtn = React.createElement('button', {\n                key: 'send', onClick: onSendMessage, disabled: !hasText, title: t('chat.send'), className: 'sb-send',\n                style: { flex: 'none', width: '44px', height: '44px', borderRadius: '11px', border: 'none', display: 'grid', placeItems: 'center', cursor: hasText ? 'pointer' : 'default', background: hasText ? 'var(--sb-orange-solid)' : 'rgba(var(--sb-ink), 0.05)', color: hasText ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', transition: 'all .15s' }\n            }, React.createElement('i', { className: 'fas fa-paper-plane sb-mirror-rtl', style: { fontSize: '15px' } }));\n            const micBtn = React.createElement('button', {\n                key: 'mic', onClick: () => setIsRecording(true), title: t('chat.recordVoice'), className: 'sb-send',\n                style: { flex: 'none', width: '44px', height: '44px', borderRadius: '50%', border: 'none', display: 'grid', placeItems: 'center', cursor: 'pointer', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', boxShadow: '0 8px 22px rgba(var(--sb-orange-rgb), 0.3)', transition: 'transform .15s cubic-bezier(.2,.7,.3,1)' }\n            }, React.createElement('svg', { width: 19, height: 19, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 1.9, strokeLinecap: 'round', strokeLinejoin: 'round' }, [\n                React.createElement('rect', { key: 'a', x: 9, y: 3, width: 6, height: 11, rx: 3 }),\n                React.createElement('path', { key: 'b', d: 'M5 11a7 7 0 0 0 14 0' }),\n                React.createElement('path', { key: 'c', d: 'M12 18v3' })\n            ]));\n            // Desktop \u2192 mic + send together (two buttons). Mobile \u2192 mic by default,\n            // swapping to send as soon as the user types text.\n            const trailingButtons = !canRecord\n                ? [sendBtn]\n                : (isDesktop ? [micBtn, sendBtn] : (hasText ? [sendBtn] : [micBtn]));\n\n            const inputRow = React.createElement('div', {\n                key: 'input',\n                style: { display: 'flex', alignItems: 'flex-end', gap: '11px', paddingBlock: '11px', paddingInlineStart: '16px', paddingInlineEnd: '11px', border: '1px solid ' + (hasText ? 'rgba(var(--sb-ink), 0.18)' : 'rgba(var(--sb-ink), 0.08)'), background: 'var(--sb-surface)', borderRadius: codeMode ? '0 0 14px 14px' : '14px', transition: 'border .15s' }\n            }, [\n                React.createElement('div', { key: 'ta-wrap', style: { flex: 1, minWidth: 0 } }, [\n                    React.createElement('textarea', {\n                        key: 'ta',\n                        value: messageInput,\n                        ref: taRef,\n                        onChange: (e) => setMessageInput(e.target.value),\n                        onKeyDown: handleKeyPress,\n                        rows: 1,\n                        maxLength: 2000,\n                        placeholder: codeMode ? t('flow.pasteOrWrite') : t('chat.placeholder'),\n                        className: 'sb-textarea',\n                        style: { width: '100%', minHeight: codeMode ? '120px' : '22px', maxHeight: '240px', resize: 'none', border: 'none', outline: 'none', background: 'transparent', color: 'var(--sb-text-2)', fontFamily: codeMode ? MONO : 'inherit', fontSize: codeMode ? '13px' : '14.5px', lineHeight: 1.55, padding: '6px 0' }\n                    }),\n                    React.createElement('div', { key: 'foot', style: { display: 'flex', alignItems: 'center', gap: '12px', marginTop: '3px' } }, [\n                        React.createElement('span', { key: 'enc', style: { display: 'inline-flex', alignItems: 'center', gap: '5px', fontSize: '11px', color: 'var(--sb-text-faint)' } }, [\n                            React.createElement('i', { key: 'i', className: 'fas fa-lock', style: { color: 'var(--sb-green)', fontSize: '10px' } }),\n                            t('chat.encryptedOnDevice')\n                        ]),\n                        React.createElement('span', { key: 'cnt', style: { fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-faint)', marginInlineStart: 'auto' } }, (messageInput ? messageInput.length : 0) + '/2000')\n                    ])\n                ])\n            ].concat(trailingButtons));\n\n            // While recording, the whole input row is replaced by the recorder bar\n            // (clean row on the composer background, matching the design mockup).\n            const recordingBar = React.createElement('div', { key: 'recbar' },\n                React.createElement(VoiceRecorder, {\n                    onCancel: () => setIsRecording(false),\n                    onSend: (blob, dur, bars) => { setIsRecording(false); if (typeof onSendVoice === 'function') onSendVoice(blob, dur, bars); }\n                })\n            );\n\n            const composer = React.createElement('footer', { key: 'composer', style: { flex: 'none', padding: '12px 20px calc(18px + var(--sb-safe-bottom, env(safe-area-inset-bottom, 0px)))', background: 'var(--sb-bg)', borderTop: '1px solid rgba(var(--sb-ink), 0.05)' } },\n                React.createElement('div', { style: { maxWidth: '1000px', margin: '0 auto' } },\n                    isRecording\n                        ? [recordingBar]\n                        : [timerRow, onceRow, filePanel, chipsRow, codeStrip, inputRow]\n                )\n            );\n\n            const scrollBtn = showScrollButton && React.createElement('button', {\n                key: 'scrollbtn', onClick: handleScrollToBottom,\n                style: { position: 'fixed', insetInlineEnd: '24px', bottom: '150px', width: '44px', height: '44px', borderRadius: '50%', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'var(--sb-surface-3)', color: 'var(--sb-text-4)', display: 'grid', placeItems: 'center', cursor: 'pointer', zIndex: 50, boxShadow: '0 6px 20px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))' }\n            }, React.createElement('i', { className: 'fas fa-arrow-down', style: { fontSize: '15px' } }));\n\n            const chatHeader = React.createElement(SecureBitChatHeader, {\n                key: 'chat-header', status: status, onDisconnect: onDisconnect, webrtcManager: webrtcManager, title: title, isOffline: isOffline, peerPresence: peerPresence, onRenameTitle: onRenameTitle\n            });\n\n            // Encrypted call overlay \u2014 renders nothing when idle; otherwise covers\n            // the chat (expanded) or docks bottom-right (minimized). It subscribes\n            // to the active session manager's call state internally.\n            const callOverlay = window.CallUIComponent && React.createElement(window.CallUIComponent, {\n                key: 'call-overlay', webrtcManager: webrtcManager, peerTitle: title\n            });\n\n            return React.createElement('div', {\n                className: 'chat-container',\n                style: { position: 'relative', display: 'flex', flexDirection: 'column', height: '100vh', background: 'var(--sb-bg)', color: 'var(--sb-text-2)' }\n            }, [chatHeader, messagesArea, scrollBtn, composer, callOverlay]);\n        };\n        \n        \n                // Build a chat message in the shape addMessageWithAutoScroll produces, so the\n                // per-session callbacks can dispatch ADD_MESSAGE without an active-view setter.\n                const buildSessionMessage = (message, type, opts = {}) => ({\n                    message,\n                    type,\n                    id: Date.now() + Math.random(),\n                    timestamp: (typeof opts.timestamp === 'number') ? opts.timestamp : Date.now(),\n                    mid: opts.mid,\n                    status: opts.status,\n                    viewOnce: opts.viewOnce === true,\n                    viewOnceTtl: (typeof opts.viewOnceTtl === 'number') ? opts.viewOnceTtl : 15,\n                    expiresAt: (typeof opts.expiresAt === 'number') ? opts.expiresAt : undefined,\n                    // Encrypted voice note descriptor: { url, dur, bars, transfer, fileId }.\n                    voice: opts.voice || undefined,\n                    fileId: opts.fileId || undefined\n                });\n\n                // Left rail listing every open session (design import: \"Multi Session\n                // Concepts\"). Two desktop states \u2014 expanded (292px) and a collapsed icon dock\n                // (72px) \u2014 plus a mobile slide-out drawer. Pure presentational: all data comes\n                // from decorated session objects, all actions are callbacks.\n                const SB_SVG = {\n                    chevL: '<svg class=\"sb-mirror-rtl\" width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M15 6l-6 6 6 6\"/></svg>',\n                    chevR: '<svg class=\"sb-mirror-rtl\" width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M9 6l6 6-6 6\"/></svg>',\n                    plus: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.1\" stroke-linecap=\"round\"><path d=\"M12 5v14M5 12h14\"/></svg>',\n                    users: '<svg width=\"19\" height=\"19\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19\"/><circle cx=\"10\" cy=\"8\" r=\"3.2\"/><path d=\"M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4\"/><path d=\"M15.5 5.3a3.2 3.2 0 0 1 0 5.4\"/></svg>',\n                    burger: '<svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M4 7h16M4 12h16M4 17h16\"/></svg>'\n                };\n\n                const SessionsSidebar = ({ chats, groups = [], collapsed, drawerOpen, onToggleCollapse, onSelect, onSelectGroup, onNewChat, onNewGroup, onRename, onCloseDrawer, myStatus, onSetStatus }) => {\n                    const h = React.createElement;\n                    const [editingId, setEditingId] = React.useState(null);\n                    const [draft, setDraft] = React.useState('');\n                    const [presenceOpen, setPresenceOpen] = React.useState(false);\n\n                    // \u2500\u2500 Mobile drawer: a gesture, not a toggle \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                    // This used to be `display: none | block`. The drawer existed or it\n                    // did not; there was no in-between, no way to peek at it, and no way\n                    // to change your mind once it was moving. It is dragged now: the\n                    // panel is glued to the finger, resists past its own edge, and on\n                    // release the flick is projected forward to work out whether it was\n                    // being sent home or thrown away. Everything animates on a spring so\n                    // it can be caught again mid-flight and reversed without waiting.\n                    const scrimRef = React.useRef(null);\n                    const panelRef = React.useRef(null);\n                    const animRef = React.useRef(null);\n                    const dragRef = React.useRef(null);\n                    const offsetRef = React.useRef(0);      // px; 0 = open, -width = closed\n                    const openRef = React.useRef(false);    // where the panel is headed\n                    const clickGuardRef = React.useRef(false);\n                    const [drawerMounted, setDrawerMounted] = React.useState(!!drawerOpen);\n\n                    const AXIS_LOCK = 10;   // hysteresis before committing to a direction\n                    const FLICK = 220;      // px/s above which velocity, not position, decides\n\n                    const drawerWidth = () => (panelRef.current && panelRef.current.offsetWidth) || 292;\n\n                    // Written straight to the DOM. Putting a 1:1 drag through React state\n                    // inserts a render between the finger and the pixels, which is exactly\n                    // the latency that makes direct manipulation stop feeling direct.\n                    const paintDrawer = (x) => {\n                        offsetRef.current = x;\n                        const w = drawerWidth();\n                        const progress = Math.min(1, Math.max(0, 1 + x / w));\n                        if (panelRef.current) panelRef.current.style.transform = 'translate3d(' + (x * DIR).toFixed(2) + 'px,0,0)';\n                        if (scrimRef.current) {\n                            scrimRef.current.style.opacity = progress.toFixed(3);\n                            // The blur comes up with the panel rather than being switched\n                            // on at the end: the scrim should read as a material arriving,\n                            // not as a filter someone flipped.\n                            const blur = 'blur(' + (5 * progress).toFixed(2) + 'px)';\n                            scrimRef.current.style.backdropFilter = blur;\n                            scrimRef.current.style.webkitBackdropFilter = blur;\n                        }\n                    };\n\n                    const settleDrawer = (to, velocity) => {\n                        if (animRef.current) animRef.current.stop();\n                        animRef.current = spring({\n                            from: offsetRef.current,\n                            to,\n                            velocity,\n                            // Overshoot has to be earned. A drawer that was flicked carries\n                            // momentum and should land with a little bounce; one that was\n                            // opened by tapping the burger has none, and wobbling would be\n                            // the interface talking to itself.\n                            damping: Math.abs(velocity) > 60 ? SPRING.drawer.damping : SPRING.move.damping,\n                            response: SPRING.drawer.response,\n                            restDelta: 0.5,\n                            restSpeed: 8,\n                            onUpdate: paintDrawer,\n                            onComplete: () => {\n                                paintDrawer(to);\n                                animRef.current = null;\n                                if (to !== 0) setDrawerMounted(false);\n                            }\n                        });\n                    };\n\n                    React.useLayoutEffect(() => {\n                        if (drawerOpen && !drawerMounted) { setDrawerMounted(true); return; }\n                        if (!drawerMounted) return;\n                        if (drawerOpen === openRef.current) return;   // already going there\n                        const w = drawerWidth();\n                        if (drawerOpen && !animRef.current && !dragRef.current) {\n                            // Parked closed: place it off the edge it will leave by, so the\n                            // way in and the way out are the same path.\n                            paintDrawer(-w);\n                        }\n                        openRef.current = drawerOpen;\n                        // Start from the live velocity, never from zero \u2014 reversing a moving\n                        // panel by resetting it to standstill is the \"brick wall\" the user\n                        // feels at exactly the moment they changed their mind.\n                        settleDrawer(drawerOpen ? 0 : -w, animRef.current ? animRef.current.velocity : 0);\n                    }, [drawerOpen, drawerMounted]);\n\n                    React.useEffect(() => () => { if (animRef.current) animRef.current.stop(); }, []);\n\n                    // Handlers live on the scrim alone; pointer events from the panel bubble\n                    // up to it, so one set covers both surfaces and can never double-fire.\n                    const drawerDown = (e) => {\n                        if (e.pointerType === 'mouse' && e.button !== 0) return;\n                        if (dragRef.current) return;\n                        // Cleared here rather than in the click handler: a drag that ends\n                        // outside the scrim produces no click at all, and a guard left\n                        // standing would swallow the next genuine tap-to-dismiss.\n                        clickGuardRef.current = false;\n                        dragRef.current = {\n                            id: e.pointerId,\n                            x0: e.clientX, y0: e.clientY,\n                            // Where they grabbed is where it stays. Re-centring the panel\n                            // under the finger breaks the illusion on the first frame.\n                            base: offsetRef.current,\n                            axis: null,\n                            vel: velocityTracker()\n                        };\n                        dragRef.current.vel.add(e.clientX * DIR, e.timeStamp || performance.now());\n                    };\n\n                    const drawerMove = (e) => {\n                        const d = dragRef.current;\n                        if (!d || e.pointerId !== d.id) return;\n                        const dx = e.clientX - d.x0;\n                        const dy = e.clientY - d.y0;\n                        if (!d.axis) {\n                            // Both gestures are tracked from the first move and the loser is\n                            // only cancelled once intent is unambiguous \u2014 a vertical scroll\n                            // through the chat list must never be stolen by the drawer.\n                            if (Math.abs(dx) < AXIS_LOCK && Math.abs(dy) < AXIS_LOCK) return;\n                            if (Math.abs(dy) >= Math.abs(dx)) { dragRef.current = null; return; }\n                            d.axis = 'x';\n                            if (animRef.current) {\n                                // Take over from wherever it is on screen right now, not from\n                                // where the animation was headed.\n                                d.base = offsetRef.current;\n                                d.x0 = e.clientX;\n                                animRef.current.stop();\n                                animRef.current = null;\n                            }\n                            try { e.currentTarget.setPointerCapture(d.id); } catch (_) {}\n                        }\n                        d.vel.add(e.clientX * DIR, e.timeStamp || performance.now());\n                        const w = drawerWidth();\n                        let x = d.base + (e.clientX - d.x0) * DIR;\n                        // Past the open edge there is nothing left to reveal. Resisting\n                        // reads as \"responsive, but this is the end\"; stopping dead reads\n                        // as the app having frozen.\n                        if (x > 0) x = rubberband(x, w);\n                        else if (x < -w) x = -w + rubberband(x + w, w);\n                        paintDrawer(x);\n                    };\n\n                    const drawerUp = (e) => {\n                        const d = dragRef.current;\n                        if (!d || (e.pointerId !== undefined && e.pointerId !== d.id)) return;\n                        dragRef.current = null;\n                        if (d.axis !== 'x') return;      // a tap: let the click through\n                        clickGuardRef.current = true;    // a drag: the scrim must not also fire\n                        const w = drawerWidth();\n                        const v = d.vel.get(e.timeStamp || performance.now());\n                        // Where the gesture was going, not where it happened to stop.\n                        const open = snapTarget(offsetRef.current, v, [-w, 0], { flick: FLICK }) === 0;\n                        openRef.current = open;\n                        settleDrawer(open ? 0 : -w, v);\n                        if (!open) onCloseDrawer();\n                    };\n\n                    const drawerScrimClick = () => {\n                        if (clickGuardRef.current) { clickGuardRef.current = false; return; }\n                        onCloseDrawer();\n                    };\n                    const startEdit = (c) => (e) => { e.stopPropagation(); setEditingId(c.id); setDraft(c.name); };\n                    const commitEdit = () => { if (editingId) { onRename(editingId, draft); setEditingId(null); } };\n                    const editKey = (e) => {\n                        if (e.key === 'Enter') { e.preventDefault(); commitEdit(); }\n                        else if (e.key === 'Escape') { setEditingId(null); }\n                    };\n                    const renameInput = (extra = {}) => h('input', {\n                        autoFocus: true,\n                        value: draft,\n                        onChange: (e) => setDraft(e.target.value),\n                        onKeyDown: editKey,\n                        onBlur: commitEdit,\n                        onClick: (e) => e.stopPropagation(),\n                        style: Object.assign({ width: '100%', background: 'rgba(var(--sb-ink), 0.06)', border: '1px solid rgba(var(--sb-orange-rgb), 0.5)', borderRadius: '6px', color: 'var(--sb-text-1)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, padding: '2px 6px', outline: 'none' }, extra)\n                    });\n                    const icon = (svg, style) => h('span', { style: Object.assign({ display: 'grid', placeItems: 'center' }, style || {}), dangerouslySetInnerHTML: { __html: svg } });\n                    const avatar = (c, size, ring) => h('div', {\n                        style: { position: 'relative', flex: 'none', width: size + 'px', height: size + 'px', borderRadius: (size >= 44 ? 12 : 11) + 'px', display: 'grid', placeItems: 'center', background: c.active ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.035)', border: '1px solid rgba(var(--sb-ink), ' + (c.active ? '0.14' : '0.07') + ')', fontSize: '13px', fontWeight: 700, letterSpacing: '-0.3px', color: c.active ? 'var(--sb-text-1)' : 'var(--sb-text-6)' }\n                    }, [c.mono, h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: c.dot, border: '2px solid ' + ring } })]);\n\n                    // ---- Expanded list row ----\n                    const expandedRow = (c) => h('div', {\n                        key: c.id,\n                        onClick: () => onSelect(c.id),\n                        style: { position: 'relative', display: 'flex', alignItems: 'center', gap: '12px', padding: '11px 12px', marginBottom: '4px', borderRadius: '11px', background: c.active ? 'var(--sb-surface)' : 'transparent', border: '1px solid ' + (c.active ? 'rgba(var(--sb-ink), 0.08)' : 'transparent'), cursor: 'pointer' }\n                    }, [\n                        c.active && h('span', { key: 'bar', style: { position: 'absolute', insetInlineStart: 0, top: '12px', bottom: '12px', width: '3px', borderStartEndRadius: '3px', borderEndEndRadius: '3px', background: 'var(--sb-orange-solid)' } }),\n                        avatar(c, 38, c.active ? 'var(--sb-surface)' : 'var(--sb-bg-deep)'),\n                        h('div', { key: 'body', style: { flex: 1, minWidth: 0 } }, [\n                            h('div', { key: 'top', style: { display: 'flex', alignItems: 'center', gap: '7px' } }, [\n                                editingId === c.id\n                                    ? renameInput()\n                                    : h('span', {\n                                        key: 'name',\n                                        onDoubleClick: startEdit(c),\n                                        title: t('chat.renameHint'),\n                                        style: { flex: 1, minWidth: 0, fontSize: '14px', fontWeight: c.active ? 700 : 600, letterSpacing: '-0.2px', color: c.active ? 'var(--sb-text-1)' : 'var(--sb-text-4)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' }\n                                    }, c.name),\n                                c.unread && editingId !== c.id && h('span', { key: 'u', style: { flex: 'none', minWidth: '18px', height: '18px', padding: '0 5px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 700 } }, c.unread)\n                            ]),\n                            h('div', { key: 'prev', style: { fontSize: '12px', color: c.active ? 'var(--sb-text-7)' : 'var(--sb-text-9)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, c.preview)\n                        ])\n                    ]);\n\n                    // ---- Collapsed dock item ----\n                    const dockItem = (c) => h('div', { key: c.id, style: { position: 'relative' } }, [\n                        c.active && h('span', { key: 'bar', style: { position: 'absolute', insetInlineStart: '-13px', top: '9px', bottom: '9px', width: '3px', borderStartEndRadius: '3px', borderEndEndRadius: '3px', background: 'var(--sb-orange-solid)' } }),\n                        h('div', {\n                            key: 'tile',\n                            onClick: () => onSelect(c.id),\n                            title: c.name,\n                            style: { position: 'relative', width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', cursor: 'pointer', background: c.active ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.03)', border: '1px solid rgba(var(--sb-ink), ' + (c.active ? '0.14' : '0.07') + ')', fontSize: '13px', fontWeight: 700, letterSpacing: '-0.3px', color: c.active ? 'var(--sb-text-1)' : 'var(--sb-text-6)' }\n                        }, [\n                            c.mono,\n                            h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: c.dot, border: '2.5px solid var(--sb-bg-deep)' } }),\n                            c.unread && h('span', { key: 'u', style: { position: 'absolute', insetInlineStart: '-5px', top: '-5px', minWidth: '17px', height: '17px', padding: '0 4px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '9.5px', fontWeight: 700, border: '2px solid var(--sb-bg-deep)' } }, c.unread)\n                        ])\n                    ]);\n\n                    // Same logo treatment as the landing header (Header.jsx): the mark on a\n                    // transparent background \u2014 no black tile.\n                    const brandMark = (size) => h('div', { style: { width: size + 'px', height: size + 'px', flex: 'none', display: 'grid', placeItems: 'center' } },\n                        h('img', { src: '/logo/securebit-mark.svg', alt: 'SecureBit', style: { width: '100%', height: '100%', objectFit: 'contain', display: 'block' } }));\n                    const collapseBtn = (svg, title) => h('button', { className: 'sb-collapse-btn', onClick: onToggleCollapse, title, style: { width: '30px', height: '30px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'transparent', color: 'var(--sb-text-7)', cursor: 'pointer' }, dangerouslySetInnerHTML: { __html: svg } });\n\n                    // ---- Expanded rail content ----\n                    // ---- Presence (\"You\" status) panel ----\n                    const myMeta = MY_STATUS_OPTIONS.find((o) => o.key === myStatus) || MY_STATUS_OPTIONS[0];\n                    const PRES_SVG = {\n                        user: '<svg width=\"19\" height=\"19\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M18 20v-1.5a4 4 0 0 0-4-4h-4a4 4 0 0 0-4 4V20\"/><circle cx=\"12\" cy=\"8\" r=\"3.6\"/></svg>',\n                        check: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-orange-solid)\" stroke-width=\"2.3\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M5 13l4 4 10-11\"/></svg>',\n                        chevUp: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-text-9)\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M6 15l6-6 6 6\"/></svg>',\n                        lock: '<svg width=\"13\" height=\"13\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/><rect x=\"4.5\" y=\"11\" width=\"15\" height=\"9\" rx=\"2.2\"/></svg>'\n                    };\n                    const presenceMenu = (pos) => (presenceOpen ? h('div', {\n                        key: 'pmenu',\n                        style: Object.assign({ position: 'absolute', zIndex: 30, borderRadius: '14px', background: 'var(--sb-surface)', border: '1px solid rgba(var(--sb-ink), 0.1)', boxShadow: '0 16px 40px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))', padding: '6px' }, pos)\n                    }, [\n                        h('div', { key: 'h', style: { padding: '9px 10px 7px', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '1.2px' } }, t('chat.setStatus')),\n                        ...MY_STATUS_OPTIONS.map((o) => h('button', {\n                            key: o.key,\n                            onClick: () => { onSetStatus(o.key); setPresenceOpen(false); },\n                            style: { width: '100%', display: 'flex', alignItems: 'center', gap: '11px', padding: '9px 10px', borderRadius: '9px', border: 'none', background: 'transparent', cursor: 'pointer', textAlign: 'start' }\n                        }, [\n                            h('span', { key: 'd', style: { flex: 'none', width: '10px', height: '10px', borderRadius: '50%', background: o.dot } }),\n                            h('span', { key: 't', style: { flex: 1, minWidth: 0 } }, [\n                                h('span', { key: 'w', style: { display: 'block', fontSize: '13.5px', fontWeight: 600, color: 'var(--sb-text-2)' } }, o.word),\n                                h('span', { key: 'de', style: { display: 'block', fontSize: '11.5px', color: 'var(--sb-text-9)' } }, o.desc)\n                            ]),\n                            o.key === myStatus && h('span', { key: 'c', style: { flex: 'none', display: 'grid', placeItems: 'center' }, dangerouslySetInnerHTML: { __html: PRES_SVG.check } })\n                        ])),\n                        h('div', { key: 'note', style: { display: 'flex', alignItems: 'flex-start', gap: '8px', margin: '6px 6px 4px', padding: '9px 10px', borderRadius: '9px', background: 'rgba(var(--sb-green-rgb), 0.06)', border: '1px solid rgba(var(--sb-green-rgb), 0.16)' } }, [\n                            h('span', { key: 'i', style: { flex: 'none', marginTop: '1px', display: 'grid' }, dangerouslySetInnerHTML: { __html: PRES_SVG.lock } }),\n                            h('span', { key: 't', style: { fontSize: '11px', lineHeight: 1.45, color: 'var(--sb-text-7)' } }, t('chat.peersOnly'))\n                        ])\n                    ]) : null);\n                    const presencePanelExpanded = h('div', { key: 'you', style: { flex: 'none', position: 'relative', marginTop: '10px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', padding: '10px 12px 12px' } }, [\n                        presenceMenu({ left: '12px', right: '12px', bottom: '64px' }),\n                        h('button', { key: 'btn', onClick: () => setPresenceOpen((v) => !v), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '11px', padding: '7px 8px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(var(--sb-ink), 0.02)', cursor: 'pointer' } }, [\n                            h('div', { key: 'av', style: { position: 'relative', flex: 'none', width: '36px', height: '36px', borderRadius: '10px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-orange-rgb), 0.12)', border: '1px solid rgba(var(--sb-orange-rgb), 0.24)', color: 'var(--sb-orange)' } }, [\n                                h('span', { key: 'i', style: { display: 'grid' }, dangerouslySetInnerHTML: { __html: PRES_SVG.user } }),\n                                h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: myMeta.dot, border: '2px solid var(--sb-bg-deep)' } })\n                            ]),\n                            h('div', { key: 'tx', style: { flex: 1, minWidth: 0, textAlign: 'start' } }, [\n                                h('div', { key: 'y', style: { fontSize: '13.5px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('chatHdr.you')),\n                                h('div', { key: 'w', style: { fontSize: '12px', color: 'var(--sb-text-7)' } }, myMeta.word)\n                            ]),\n                            h('span', { key: 'ch', style: { display: 'grid', placeItems: 'center' }, dangerouslySetInnerHTML: { __html: PRES_SVG.chevUp } })\n                        ])\n                    ]);\n                    const presencePanelCollapsed = h('div', { key: 'you', style: { flex: 'none', position: 'relative', display: 'flex', flexDirection: 'column', alignItems: 'center', padding: '0 0 13px' } }, [\n                        presenceMenu({ insetInlineStart: '60px', bottom: '8px', width: '248px' }),\n                        h('button', { key: 'btn', onClick: () => setPresenceOpen((v) => !v), title: t('chat.yourStatusPrefix') + myMeta.word, style: { position: 'relative', width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', cursor: 'pointer', background: 'rgba(var(--sb-orange-rgb), 0.12)', border: '1px solid rgba(var(--sb-orange-rgb), 0.24)', color: 'var(--sb-orange)' } }, [\n                            h('span', { key: 'i', style: { display: 'grid' }, dangerouslySetInnerHTML: { __html: PRES_SVG.user } }),\n                            h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '12px', height: '12px', borderRadius: '50%', background: myMeta.dot, border: '2.5px solid var(--sb-bg-deep)' } })\n                        ])\n                    ]);\n\n                    const expandedInner = [\n                        h('div', { key: 'head', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'space-between', paddingBlock: 0, paddingInlineStart: '16px', paddingInlineEnd: '12px', height: 'var(--sb-bar-h, 64px)', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                            h('div', { key: 'brand', style: { display: 'flex', alignItems: 'center', gap: '10px' } }, [brandMark(30), h('span', { key: 't', style: { fontSize: '15px', fontWeight: 800, letterSpacing: '-0.3px', color: 'var(--sb-text-1)' } }, 'SecureBit')]),\n                            collapseBtn(SB_SVG.chevL, t('chat.collapse'))\n                        ]),\n                        h('div', { key: 'label', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'space-between', padding: '16px 16px 9px' } }, [\n                            h('span', { key: 'l', style: { fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '1.3px' } }, t('chatHdr.chats')),\n                            h('span', { key: 'c', style: { fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-9)' } }, String(chats.length))\n                        ]),\n                        h('div', { key: 'list', className: 'msc-scroll', style: { flex: 1, overflowY: 'auto', padding: '0 10px' } }, [\n                            ...chats.map(expandedRow),\n                            h('div', { key: 'gh', style: { marginTop: '14px', padding: '0 2px 6px', display: 'flex', alignItems: 'baseline', justifyContent: 'space-between' } }, [\n                                h('span', { key: 'l', style: { fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '1.3px' } }, t('chat.groupChats')),\n                                h('button', {\n                                    key: 'add', onClick: onNewGroup, title: t('chat.newGroup'),\n                                    style: { border: 'none', background: 'transparent', color: 'var(--sb-orange)', cursor: 'pointer', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 700, textTransform: 'uppercase', letterSpacing: '0.9px', padding: 0 }\n                                }, t('chatHdr.newChat'))\n                            ]),\n                            ...(groups.length === 0\n                                ? [h('div', { key: 'gph', onClick: onNewGroup, title: t('chat.createGroup'), style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '11px 12px', borderRadius: '11px', background: 'transparent', border: '1px dashed rgba(var(--sb-ink), 0.09)', cursor: 'pointer' } }, [\n                                    h('div', { key: 'i', style: { flex: 'none', width: '38px', height: '38px', borderRadius: '11px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-ink), 0.025)', border: '1px solid rgba(var(--sb-ink), 0.06)', color: 'var(--sb-text-faint)' }, dangerouslySetInnerHTML: { __html: SB_SVG.users } }),\n                                    h('div', { key: 'b', style: { flex: 1, minWidth: 0 } }, [\n                                        h('div', { key: 't', style: { fontSize: '14px', fontWeight: 600, color: 'var(--sb-text-7)' } }, t('chat.newGroup')),\n                                        h('div', { key: 's', style: { fontSize: '11.5px', color: 'var(--sb-text-faint)' } }, t('chat.meshHint'))\n                                    ])\n                                ])]\n                                : groups.map((g) => h('div', {\n                                    key: g.id,\n                                    onClick: () => onSelectGroup(g.id),\n                                    style: { position: 'relative', display: 'flex', alignItems: 'center', gap: '12px', padding: '11px 12px', marginBottom: '4px', borderRadius: '11px', background: g.active ? 'var(--sb-surface)' : 'transparent', border: '1px solid ' + (g.active ? 'rgba(var(--sb-ink), 0.08)' : 'transparent'), cursor: 'pointer' }\n                                }, [\n                                    g.active && h('span', { key: 'bar', style: { position: 'absolute', insetInlineStart: 0, top: '12px', bottom: '12px', width: '3px', borderStartEndRadius: '3px', borderEndEndRadius: '3px', background: 'var(--sb-orange-solid)' } }),\n                                    avatar(g, 38, g.active ? 'var(--sb-surface)' : 'var(--sb-bg-deep)'),\n                                    h('div', { key: 'body', style: { flex: 1, minWidth: 0 } }, [\n                                        h('div', { key: 'top', style: { display: 'flex', alignItems: 'center', gap: '7px' } }, [\n                                            h('span', { key: 'n', style: { flex: 1, minWidth: 0, fontSize: '14px', fontWeight: g.active ? 700 : 600, letterSpacing: '-0.2px', color: g.active ? 'var(--sb-text-1)' : 'var(--sb-text-4)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, g.name),\n                                            g.unread && h('span', { key: 'u', style: { flex: 'none', minWidth: '18px', height: '18px', padding: '0 5px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 700 } }, g.unread)\n                                        ]),\n                                        h('div', { key: 'prev', style: { fontSize: '12px', color: g.active ? 'var(--sb-text-7)' : 'var(--sb-text-9)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, g.preview)\n                                    ])\n                                ])))\n                        ]),\n                        h('div', { key: 'new', style: { flex: 'none', padding: '12px' } }, h('button', {\n                            onClick: onNewChat,\n                            style: { width: '100%', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '12px', borderRadius: '11px', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' }\n                        }, [icon(SB_SVG.plus, { key: 'p' }), t('chat.newChat')])),\n                        presencePanelExpanded\n                    ];\n\n                    // ---- Collapsed dock content ----\n                    const collapsedInner = [\n                        h('div', { key: 'head', style: { flex: 'none', display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '10px', padding: '13px 0', width: '100%', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [brandMark(32), collapseBtn(SB_SVG.chevR, t('chatHdr.expand'))]),\n                        h('div', { key: 'list', className: 'msc-scroll', style: { flex: 1, overflowY: 'auto', display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '10px', padding: '14px 0', width: '100%' } }, [\n                            ...chats.map(dockItem),\n                            h('div', { key: 'sep', style: { width: '30px', height: '1px', background: 'rgba(var(--sb-ink), 0.07)', margin: '2px 0' } }),\n                            ...groups.map((g) => h('div', { key: g.id, style: { position: 'relative' } }, [\n                                g.active && h('span', { key: 'bar', style: { position: 'absolute', insetInlineStart: '-13px', top: '9px', bottom: '9px', width: '3px', borderStartEndRadius: '3px', borderEndEndRadius: '3px', background: 'var(--sb-orange-solid)' } }),\n                                h('div', {\n                                    key: 'tile', onClick: () => onSelectGroup(g.id), title: g.name + ' \u2014 ' + g.headerSub,\n                                    style: { position: 'relative', width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', cursor: 'pointer', background: g.active ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.03)', border: '1px solid rgba(var(--sb-ink), ' + (g.active ? '0.14' : '0.07') + ')', fontSize: '13px', fontWeight: 700, letterSpacing: '-0.3px', color: g.active ? 'var(--sb-text-1)' : 'var(--sb-text-6)' }\n                                }, [\n                                    g.mono,\n                                    h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: g.dot, border: '2.5px solid var(--sb-bg-deep)' } }),\n                                    g.unread && h('span', { key: 'u', style: { position: 'absolute', insetInlineStart: '-5px', top: '-5px', minWidth: '17px', height: '17px', padding: '0 4px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '9.5px', fontWeight: 700, border: '2px solid var(--sb-bg-deep)' } }, g.unread)\n                                ])\n                            ])),\n                            h('div', { key: 'gph', onClick: onNewGroup, title: t('chat.newGroup'), style: { position: 'relative', width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', cursor: 'pointer', background: 'transparent', border: '1px dashed rgba(var(--sb-ink), 0.1)', color: 'var(--sb-text-faint)' }, dangerouslySetInnerHTML: { __html: SB_SVG.users } })\n                        ]),\n                        h('div', { key: 'new', style: { flex: 'none', padding: '13px 0' } }, h('button', {\n                            onClick: onNewChat, title: t('chat.newChat'),\n                            style: { width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' }, dangerouslySetInnerHTML: { __html: SB_SVG.plus }\n                        })),\n                        presencePanelCollapsed\n                    ];\n\n                    const railWidth = collapsed ? '72px' : '292px';\n                    const railStyle = { flex: 'none', width: railWidth, display: 'flex', flexDirection: 'column', alignItems: collapsed ? 'center' : 'stretch', paddingTop: 'var(--sb-safe-top, 0px)', background: 'var(--sb-bg-deep)', borderInlineEnd: '1px solid rgba(var(--sb-ink), 0.06)' };\n                    const inner = collapsed ? collapsedInner : expandedInner;\n\n                    return h(React.Fragment, null, [\n                        // Responsive behaviour (inline styles can't express media queries).\n                        h('style', { key: 'css', dangerouslySetInnerHTML: { __html: '@media (max-width:1023px){.sb-rail{display:none !important;}.sb-burger{display:grid !important;}}@media (min-width:1024px){.sb-drawer-overlay{display:none !important;}}.sb-mobile-drawer .sb-collapse-btn{display:none !important;}' +\n                            // Dark app background everywhere so mobile safe-areas / overscroll show\n                            // black, not the grey landing background (the \"grey band\" bug).\n                            'html,body{background:var(--sb-bg) !important;overscroll-behavior:none;}' +\n                            // App-shell height tracks the *visual* viewport (--sb-vh, set from the\n                            // VisualViewport API) so the layout shrinks when the on-screen keyboard\n                            // opens \u2014 no grey gap under the composer. Falls back to 100dvh, then 100vh.\n                            // The shell is sized by HEIGHT, not pinned by position.\n                            //\n                            // An earlier attempt used position:fixed with a JS-driven top\n                            // offset. That is the wrong instrument: a fixed element is laid\n                            // out against the layout viewport, which iOS does not shrink for\n                            // the keyboard, so it has to be chased with JS \u2014 and the result\n                            // feels nailed down rather than laid out. The reference iOS chat\n                            // implementations all drive HEIGHT from visualViewport and leave\n                            // positioning alone.\n                            //\n                            // --sb-vh is the visual viewport height; 100dvh is the fallback,\n                            // which is correct on its own everywhere the layout viewport does\n                            // resize for the keyboard (Chrome/Firefox on Android, via\n                            // interactive-widget=resizes-content). WebKit has not implemented\n                            // interactive-widget at all, which is exactly why the JS fallback\n                            // still exists.\n                            //\n                            // min-height:0 is what makes the height above mean anything.\n                            // The shell also carries .minimal-bg, which sets\n                            // min-height:100vh \u2014 and min-height always beats height. On iOS\n                            // `100vh` is the URL-bar-retracted *large* viewport, so with the\n                            // bar showing the shell was pinned ~60-100px taller than the area\n                            // you can actually see. That surplus is precisely what made the\n                            // document scrollable, and a document that scrolls is how the\n                            // header rode away off the top. Everything below \u2014 the visual\n                            // viewport tracking, the dvh fallback \u2014 was inert until this\n                            // floor was removed: --sb-vh could shrink all it liked and the\n                            // shell would not follow it below 100vh.\n                            //\n                            // Sizing alone turned out not to be enough on iOS, and the\n                            // screenshot of the failure is worth writing down: keyboard up,\n                            // the whole app had slid off the top of the screen, only the\n                            // bottom sliver of the composer still showing, and black \u2014 the\n                            // body, past the end of a 400px-tall shell \u2014 filling everything\n                            // down to the keyboard.\n                            //\n                            // That is the *visual* viewport being panned. When the keyboard\n                            // opens, WebKit shrinks the visual viewport and moves it down\n                            // inside the layout viewport (which it never shrinks) to reveal\n                            // the focused field. The shell had correctly shrunk to the top\n                            // var(--sb-vh) of the layout viewport \u2014 and the visible window\n                            // had moved off it. Nothing in CSS can decline that pan, and it\n                            // is not a document scroll, so there is no scrollTop to reset.\n                            //\n                            // So the shell is pinned to the visible rect after all: fixed to\n                            // the layout viewport and translated by visualViewport.offsetTop.\n                            // The earlier objection to pinning stands for what it described \u2014\n                            // chasing the offset with `top`, and recomputing HEIGHT on every\n                            // scroll event, which twitched under the finger. Height still\n                            // moves on resize only. The offset rides a transform on the\n                            // compositor, which is the cheap half, and only it follows the\n                            // pan. --sb-vv-top is 0 everywhere that does not pan (desktop,\n                            // Chrome on Android), so this is inert off iOS.\n                            '.sb-app-shell{height:var(--sb-vh,100dvh) !important;min-height:0 !important;overflow:hidden;position:fixed;top:0;inset-inline:0;transform:translate3d(0,var(--sb-vv-top, 0px),0);}' +\n                            // Pin the header, and nothing else.\n                            //\n                            // Sticky is the whole fix: if an ancestor scrolls \u2014 which is what\n                            // iOS does to lift a focused input above the keyboard \u2014 the header\n                            // holds against the top instead of riding away with the page. An\n                            // earlier version answered this by taking the document's scroll\n                            // away altogether; that broke the connection screen and was a far\n                            // broader change than the problem called for.\n                            '.sb-chat-header{position:sticky;top:0;z-index:20;}' +\n                            // Children fill the shell rather than restating a viewport height,\n                            // which would count the header twice.\n                            // The column carries .minimal-bg too, so it needs the same floor\n                            // removed \u2014 !important rather than relying on this block winning\n                            // on source order, because it is load-bearing.\n                            '.sb-app-col{height:100% !important;min-height:0 !important;}' +\n                            '.chat-container{height:100% !important;min-height:0 !important;}' +\n                            // The message list is the only scroller. min-height:0 is not\n                            // cosmetic: a flex:1 item in a column defaults to min-height:auto,\n                            // refuses to shrink below its content, and pushes the composer off\n                            // the bottom once the conversation is long enough.\n                            '.sb-scroll{min-height:0 !important;overscroll-behavior:contain;-webkit-overflow-scrolling:touch;}' +\n                            // iOS Safari zooms the page when a focused field has font-size < 16px.\n                            // Force 16px on mobile inputs to stop the zoom-and-reflow on tap.\n                            '@media (max-width:768px){textarea,input,select{font-size:16px !important;}}' +\n                            // Declutter the mobile chat header: hide the inline rename pencil (rename\n                            // is still available by double-tapping a chat in the drawer).\n                            '@media (max-width:768px){.sb-rename-btn{display:none !important;}}' } }),\n                        // Desktop rail\n                        h('aside', { key: 'rail', className: 'sb-rail', style: railStyle }, inner),\n                        // Mobile drawer overlay. `touch-action: pan-y` hands vertical\n                        // scrolling back to the browser and keeps the horizontal axis for\n                        // us, so the chat list still scrolls with the drawer open.\n                        h('div', {\n                            key: 'drawer', className: 'sb-drawer-overlay',\n                            ref: scrimRef,\n                            onClick: drawerScrimClick,\n                            onPointerDown: drawerDown,\n                            onPointerMove: drawerMove,\n                            onPointerUp: drawerUp,\n                            onPointerCancel: drawerUp,\n                            style: { position: 'fixed', inset: 0, zIndex: 60, background: 'rgba(var(--sb-scrim-rgb), 0.6)', backdropFilter: 'blur(0px)', WebkitBackdropFilter: 'blur(0px)', opacity: 0, display: drawerMounted ? 'block' : 'none', touchAction: 'pan-y', willChange: 'opacity' }\n                        }, h('aside', { className: 'sb-mobile-drawer', ref: panelRef, onClick: (e) => e.stopPropagation(), style: { position: 'absolute', insetInlineStart: 0, top: 0, bottom: 0, width: 'min(292px, 86vw)', display: 'flex', flexDirection: 'column', paddingTop: 'var(--sb-safe-top, 0px)', background: 'var(--sb-bg-deep)', borderInlineEnd: '1px solid rgba(var(--sb-ink), 0.06)', boxShadow: '0 0 60px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))', touchAction: 'pan-y', willChange: 'transform' } }, [\n                            // Explicit close button \u2014 the drawer's own header only has a\n                            // \"collapse\" chevron (a desktop-rail action), so on mobile there was\n                            // no obvious way to dismiss it. This X closes the drawer reliably.\n                            h('button', { key: 'x', onClick: onCloseDrawer, title: t('chat.closeMenu'), 'aria-label': t('chat.closeMenu'), style: { position: 'absolute', top: 'calc(15px + var(--sb-safe-top, 0px))', insetInlineEnd: '13px', zIndex: 2, width: '34px', height: '34px', borderRadius: '9px', display: 'grid', placeItems: 'center', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-4)', cursor: 'pointer' } }, h('i', { className: 'fas fa-xmark', style: { fontSize: '16px' } })),\n                            expandedInner\n                        ]))\n                    ]);\n                };\n\n                // Main Enhanced Application Component\n                const EnhancedSecureP2PChat = () => {\n\n                    // ============================================\n                    // MULTI-SESSION REGISTRY\n                    // Each conversation is an independent session with its OWN\n                    // EnhancedSecureWebRTCManager (full key/ratchet/SAS isolation). The reducer\n                    // holds serializable per-session state; non-serializable objects (managers,\n                    // notification integrations, offline queues) live in ref-held Maps keyed by\n                    // sessionId and are NEVER shared between sessions. sessionId is local-only.\n                    // ============================================\n                    const [sessionsState, dispatch] = React.useReducer(sessionsReducer, undefined, createInitialState);\n                    const activeSessionId = sessionsState.activeSessionId;\n                    const activeIdRef = React.useRef(null);\n                    activeIdRef.current = activeSessionId;\n                    const active = activeSessionId ? sessionsState.sessions[activeSessionId] : null;\n                    const EMPTY_ARR = React.useRef([]).current;\n\n                    const managersRef = React.useRef(new Map());      // id -> EnhancedSecureWebRTCManager\n                    const integrationsRef = React.useRef(new Map());  // id -> NotificationIntegration\n                    const queuesRef = React.useRef(new Map());        // id -> { incoming:[], outgoing:[] }\n                    // id -> last status seen from the manager. Used to spot the\n                    // reconnecting \u2192 connected edge (a repaired P2P path) without\n                    // going through React state, which manager callbacks can't read.\n                    const statusRef = React.useRef(new Map());\n\n                    // ============================================\n                    // GROUPS (v6.0)\n                    //\n                    // A group is an orchestration layer over the pairwise sessions above: it\n                    // owns no transport and no ratchet, and every group frame leaves through\n                    // an ordinary, already-verified 1:1 channel. The runtime half of a group \u2014\n                    // its ECDSA identity key, the running safety-code ceremony, the imported\n                    // member keys \u2014 lives in groupRuntimesRef and NEVER in the reducer, for the\n                    // same reason the WebRTC managers do not: a reducer clones what it holds.\n                    // ============================================\n                    const [groupsState, groupsDispatch] = React.useReducer(groupsReducer, undefined, createInitialGroupState);\n                    const groupRuntimesRef = React.useRef(new Map()); // gid -> GroupSession\n                    const activeGroupId = groupsState.activeGroupId;\n                    const activeGroup = activeGroupId ? groupsState.groups[activeGroupId] : null;\n                    const activeGroupIdRef = React.useRef(null);\n                    activeGroupIdRef.current = activeGroupId;\n\n                    const [groupInput, setGroupInput] = React.useState('');\n                    const [showCreateGroup, setShowCreateGroup] = React.useState(false);\n                    const [showGroupCode, setShowGroupCode] = React.useState(false);\n                    const [pendingInvite, setPendingInvite] = React.useState(null);\n                    const [groupError, setGroupError] = React.useState(null);\n                    const [showAddMembers, setShowAddMembers] = React.useState(false);\n                    const groupScrollRef = React.useRef(null);\n\n                    // ---- Groups: calls ----\n                    //\n                    // Two pieces of state, deliberately separate. `groupCallState` is what\n                    // the GROUP says \u2014 who opened a call, who is in it \u2014 and it arrives as\n                    // signed frames that reach members we have no direct link to. `groupCallMedia`\n                    // is what THIS DEVICE has actually managed to connect, leg by leg, and it\n                    // can never be better than the mesh underneath it. Rendering them from one\n                    // object would mean either hiding a member the group can see or claiming a\n                    // connection this device does not have.\n                    const [groupCallState, setGroupCallState] = React.useState({}); // gid -> snapshot|null\n                    const [groupCallMediaState, setGroupCallMediaState] = React.useState({});\n                    /** gid -> GroupCallMedia. Held in a ref: it owns a live capture, not state. */\n                    const groupCallMediaRef = React.useRef(new Map());\n                    /** gid -> the call id this device declined, so a dismissed ring stays gone. */\n                    const [dismissedCalls, setDismissedCalls] = React.useState({});\n                    /** gid:callId already badged, so a badge is raised once per call, not per join. */\n                    const announcedCallsRef = React.useRef(new Set());\n\n                    /**\n                     * Put group frames on the wire, paced and serialised per session.\n                     *\n                     * They ride sendMessage \u2014 the same authenticated, ratcheted path chat text\n                     * takes \u2014 so a group frame inherits the session's encryption, replay\n                     * protection and verification gate without a new branch in the transport.\n                     * The receiving side lifts them back out in handleMessage before anything\n                     * reaches a 1:1 transcript. See src/group/groupSender.js for why the pacing\n                     * is not optional.\n                     */\n                    /**\n                     * Connections a group built for itself, by member.\n                     *\n                     * Deliberately NOT in managersRef and NOT in sessionsStore. A mesh link is\n                     * not a chat: it has no transcript, no sidebar row, no file transfers and\n                     * nothing the user opens. Putting it in the session registry would give the\n                     * user seven new \"chats\" the moment a group of eight forms, and every piece\n                     * of chat machinery \u2014 unread badges, presence, the last-session guard \u2014\n                     * would start treating a routing detail as a conversation.\n                     *\n                     * meshSessionId -> { manager, gid, fp, sessionId }\n                     */\n                    const meshLinksRef = React.useRef(new Map());\n\n                    /**\n                     * Who a group could not reach the last time we said so, by group id.\n                     *\n                     * Kept so the \"somebody is offline\" notice is posted when the situation\n                     * changes rather than under every message it affects.\n                     */\n                    const lastUnreachableRef = React.useRef(new Map());\n\n                    const sendGroupFrame = React.useMemo(() => createGroupSender({\n                        // A group frame leaves over whichever kind of link carries that member:\n                        // an ordinary 1:1 chat, or a connection the group dialled itself.\n                        getManager: (sessionId) => managersRef.current.get(sessionId)\n                            || meshLinksRef.current.get(sessionId)?.manager\n                            || null\n                    }), []);\n\n                    const buildGroupMessage = (body, type, extra = {}) => ({\n                        id: Date.now() + Math.random(),\n                        message: body,\n                        type,\n                        timestamp: Date.now(),\n                        ...extra\n                    });\n\n                    /** GroupSession events -> reducer. One emitter per group, bound to its id. */\n                    const groupEmitter = React.useCallback((gid) => (event, payload = {}) => {\n                        switch (event) {\n                            case 'phase':\n                                groupsDispatch({ type: GA.SET_PHASE, id: gid, phase: payload.phase });\n                                break;\n                            case 'members':\n                                groupsDispatch({ type: GA.SET_MEMBERS, id: gid, members: payload.members, epoch: payload.epoch });\n                                // A member whose direct link only just came up can now carry\n                                // media. Nothing about the call roster changed, so this is the\n                                // only event that tells us to build the leg.\n                                syncGroupCallMediaRef.current(gid, null);\n                                break;\n                            case 'roster':\n                                groupsDispatch({ type: GA.RENAME, id: gid, name: payload.name });\n                                break;\n                            case 'sas':\n                                groupsDispatch({ type: GA.SET_SAS, id: gid, code: payload.code });\n                                // A code always needs a human, and the group is blocked until it\n                                // gets one \u2014 so bring that group forward rather than leaving the\n                                // digits behind a button. Activating it here also keeps the modal\n                                // pointed at the right group: the ceremony finishes in a run of\n                                // microtasks that outpaces React's re-render, so a ref updated\n                                // during render is still null at this point and cannot be used to\n                                // decide whether this group is the one on screen.\n                                groupsDispatch({ type: GA.SET_ACTIVE_GROUP, id: gid });\n                                setShowGroupCode(true);\n                                break;\n                            case 'confirmed':\n                                groupsDispatch({ type: GA.CONFIRM_SAS, id: gid });\n                                break;\n                            case 'call':\n                                setGroupCallState((current) => ({ ...current, [gid]: payload.call }));\n                                // The media layer follows the roster: a member who just joined\n                                // needs a leg, one who left needs theirs torn down, and a member\n                                // whose direct link only just came up needs one built now.\n                                syncGroupCallMediaRef.current(gid, payload.call);\n                                if (payload.call && !payload.call.joined && gid !== activeGroupIdRef.current) {\n                                    // A call the user cannot see is still a call: badge the group\n                                    // rather than let it ring in a window nobody has open. Once\n                                    // per call \u2014 every later join and leave emits this event too,\n                                    // and badging on each would count the room, not the call.\n                                    const token = `${gid}:${payload.call.callId}`;\n                                    if (!announcedCallsRef.current.has(token)) {\n                                        announcedCallsRef.current.add(token);\n                                        groupsDispatch({ type: GA.INCREMENT_UNREAD, id: gid });\n                                    }\n                                }\n                                break;\n                            case 'message':\n                                groupsDispatch({\n                                    type: GA.ADD_MESSAGE, id: gid,\n                                    message: buildGroupMessage(payload.body, 'received', {\n                                        senderName: payload.name, senderFp: payload.fp, timestamp: payload.ts,\n                                        relayed: payload.relayed === true\n                                    })\n                                });\n                                if (gid !== activeGroupIdRef.current) {\n                                    groupsDispatch({ type: GA.INCREMENT_UNREAD, id: gid });\n                                }\n                                break;\n                            case 'ended':\n                                // The group is over \u2014 the admin left, or we are the last one\n                                // in it. Remove it instead of leaving a chat nobody can send\n                                // to, which would also keep occupying its members.\n                                destroyGroupRef.current(gid, { announce: false });\n                                break;\n                            case 'add_failed':\n                                // Nothing changed \u2014 the group is exactly as it was, so this is\n                                // a notice rather than an error state.\n                                groupsDispatch({\n                                    type: GA.ADD_MESSAGE, id: gid,\n                                    message: buildGroupMessage(t('err.nobodyAccepted'), 'system')\n                                });\n                                break;\n                            case 'left':\n                                groupsDispatch({\n                                    type: GA.ADD_MESSAGE, id: gid,\n                                    message: buildGroupMessage(`${payload.name} left the group.`, 'system')\n                                });\n                                break;\n                            case 'inconsistency':\n                                // A member sent two different bodies under one sequence number.\n                                // Both signatures are valid, so this is provable rather than\n                                // suspected \u2014 say so in the transcript where everyone can see it.\n                                groupsDispatch({\n                                    type: GA.ADD_MESSAGE, id: gid,\n                                    message: buildGroupMessage(\n                                        `${payload.name} sent conflicting messages to different members. That message was discarded.`,\n                                        'system'\n                                    )\n                                });\n                                break;\n                            case 'error':\n                                groupsDispatch({ type: GA.SET_ERROR, id: gid, error: payload.error });\n                                break;\n                            default:\n                                break;\n                        }\n                    }, []);\n\n                    /**\n                     * Route an inbound group frame.\n                     *\n                     * A frame for a group we do not have is dropped \u2014 with one exception, which\n                     * is how anyone ever joins: an invitation is surfaced to the user, and only\n                     * their acceptance creates the group. Nothing arriving on the wire may\n                     * create group state on its own.\n                     */\n                    const handleGroupFrame = React.useCallback((sessionId, frame) => {\n                        const runtime = groupRuntimesRef.current.get(frame.gid);\n                        if (!runtime) {\n                            if (groupFrameType(frame) === GROUP_FRAMES.INVITE) {\n                                let invite = null;\n                                try { invite = decodeEnvelope(frame); } catch (_) { return; }\n                                setPendingInvite((current) => current || {\n                                    gid: invite.gid,\n                                    name: String(invite.name || 'Group').slice(0, GROUP_LIMITS.MAX_NAME_BYTES),\n                                    frame: invite,\n                                    sessionId\n                                });\n                            }\n                            return;\n                        }\n                        runtime.handleFrame(sessionId, frame).catch((error) => {\n                            // A frame that fails validation is the group's business, not the\n                            // 1:1 chat's: it never reaches the transcript either way.\n                            //\n                            // An error with no code of its own is not one of ours \u2014 a transport\n                            // rejection, a WebCrypto failure \u2014 and collapsing those to a bare\n                            // \"frame_rejected\" threw away the only clue about what happened.\n                            // Keep the message.\n                            const reason = error?.code\n                                || (error?.message ? `frame_rejected: ${String(error.message).slice(0, 120)}` : 'frame_rejected');\n                            groupsDispatch({ type: GA.SET_ERROR, id: frame.gid, error: reason });\n                        });\n                    }, []);\n                    const handleGroupFrameRef = React.useRef(handleGroupFrame);\n                    handleGroupFrameRef.current = handleGroupFrame;\n\n                    /** Mirror a pairwise link's health onto every group that routes through it. */\n                    const syncGroupLinks = React.useCallback((sessionId, connected) => {\n                        for (const runtime of groupRuntimesRef.current.values()) {\n                            try { runtime.setSessionState(sessionId, connected); } catch (_) {}\n                        }\n                    }, []);\n                    const syncGroupLinksRef = React.useRef(syncGroupLinks);\n                    syncGroupLinksRef.current = syncGroupLinks;\n\n                    // Active-session VIEW. The rest of the component (and the child setup/chat\n                    // components) read these names unchanged; the setters dispatch to the active\n                    // session read from activeIdRef at call time, so even memoized callbacks stay\n                    // correct across session switches.\n                    const dispatchActive = React.useCallback((build) => {\n                        const id = activeIdRef.current; if (!id) return;\n                        dispatch(build(id));\n                    }, []);\n\n                    const messages = active ? active.messages : EMPTY_ARR;\n                    const setMessages = React.useCallback((updaterOrArr) => {\n                        const id = activeIdRef.current; if (!id) return;\n                        if (typeof updaterOrArr === 'function') dispatch({ type: SA.SET_MESSAGES, id, updater: updaterOrArr });\n                        else dispatch({ type: SA.SET_MESSAGES, id, messages: updaterOrArr });\n                    }, []);\n\n                    const connectionStatus = active ? active.status : 'disconnected';\n                    const setConnectionStatus = React.useCallback((status) => dispatchActive((id) => ({ type: SA.SET_STATUS, id, status })), [dispatchActive]);\n\n                    const keyFingerprint = active ? active.keyFingerprint : '';\n                    const setKeyFingerprint = React.useCallback((fingerprint) => dispatchActive((id) => ({ type: SA.SET_FINGERPRINT, id, fingerprint })), [dispatchActive]);\n\n                    const verificationCode = active ? active.verificationCode : '';\n                    const setVerificationCode = React.useCallback((code) => dispatchActive((id) => ({ type: SA.SET_VERIFICATION, id, code })), [dispatchActive]);\n\n                    const isVerified = active ? active.sas.isVerified : false;\n                    const setIsVerified = React.useCallback((v) => dispatchActive((id) => ({ type: SA.SET_SAS, id, sas: { isVerified: !!v } })), [dispatchActive]);\n                    const localVerificationConfirmed = active ? active.sas.localConfirmed : false;\n                    const setLocalVerificationConfirmed = React.useCallback((v) => dispatchActive((id) => ({ type: SA.SET_SAS, id, sas: { localConfirmed: !!v } })), [dispatchActive]);\n                    const remoteVerificationConfirmed = active ? active.sas.remoteConfirmed : false;\n                    const setRemoteVerificationConfirmed = React.useCallback((v) => dispatchActive((id) => ({ type: SA.SET_SAS, id, sas: { remoteConfirmed: !!v } })), [dispatchActive]);\n                    const bothVerificationsConfirmed = active ? active.sas.bothConfirmed : false;\n                    const setBothVerificationsConfirmed = React.useCallback((v) => dispatchActive((id) => ({ type: SA.SET_SAS, id, sas: { bothConfirmed: !!v } })), [dispatchActive]);\n\n                    const pendingIncomingFiles = active ? active.pendingIncomingFiles : EMPTY_ARR;\n                    const setPendingIncomingFiles = React.useCallback((updaterOrArr) => {\n                        const id = activeIdRef.current; if (!id) return;\n                        if (typeof updaterOrArr === 'function') dispatch({ type: SA.SET_PENDING_FILES, id, updater: updaterOrArr });\n                        else dispatch({ type: SA.SET_PENDING_FILES, id, files: updaterOrArr });\n                    }, []);\n\n                    // Per-session offer/answer setup flow (preserved when switching chats).\n                    const setupField = (name, fallback) => (active ? active.setup[name] : fallback);\n                    const setSetupField = (name) => React.useCallback((value) => dispatchActive((id) => ({ type: SA.PATCH_SETUP, id, patch: { [name]: value } })), [dispatchActive]);\n                    const offerData = setupField('offerData', '');\n                    const setOfferData = setSetupField('offerData');\n                    const answerData = setupField('answerData', '');\n                    const setAnswerData = setSetupField('answerData');\n                    const offerInput = setupField('offerInput', '');\n                    const setOfferInput = setSetupField('offerInput');\n                    const answerInput = setupField('answerInput', '');\n                    const setAnswerInput = setSetupField('answerInput');\n                    const showOfferStep = setupField('showOfferStep', false);\n                    const setShowOfferStep = setSetupField('showOfferStep');\n                    const showAnswerStep = setupField('showAnswerStep', false);\n                    const setShowAnswerStep = setSetupField('showAnswerStep');\n                    const showVerification = setupField('showVerification', false);\n                    const setShowVerification = setSetupField('showVerification');\n                    const showQRCode = setupField('showQRCode', false);\n                    const setShowQRCode = setSetupField('showQRCode');\n                    const qrCodeUrl = setupField('qrCodeUrl', '');\n                    const setQrCodeUrl = setSetupField('qrCodeUrl');\n                    const isGeneratingKeys = setupField('isGeneratingKeys', false);\n                    const setIsGeneratingKeys = setSetupField('isGeneratingKeys');\n\n                    // Accessor over the ACTIVE session's manager / notification integration.\n                    // Existing `webrtcManagerRef.current.X()` call sites keep working against the\n                    // active session; per-session callbacks use their own captured manager instead.\n                    const webrtcManagerRef = React.useMemo(() => ({\n                        get current() { return managersRef.current.get(activeIdRef.current) || null; },\n                        set current(v) {\n                            const id = activeIdRef.current; if (!id) return;\n                            if (v) managersRef.current.set(id, v); else managersRef.current.delete(id);\n                        }\n                    }), []);\n                    const notificationIntegrationRef = React.useMemo(() => ({\n                        get current() { return integrationsRef.current.get(activeIdRef.current) || null; },\n                        set current(v) {\n                            const id = activeIdRef.current; if (!id) return;\n                            if (v) integrationsRef.current.set(id, v); else integrationsRef.current.delete(id);\n                        }\n                    }), []);\n\n                    // ---- Presence / availability ----\n                    // My status is broadcast E2E over each connected session's data channel\n                    // (sendSystemMessage) and never stored on a server. 'invisible' goes on the\n                    // wire as 'offline' so peers cannot tell. myStatusRef lets the per-session\n                    // callbacks (captured at create time) read the current status.\n                    const [myStatus, setMyStatusState] = React.useState(() => {\n                        try { return localStorage.getItem('securebit_my_status') || 'available'; } catch { return 'available'; }\n                    });\n                    const myStatusRef = React.useRef(myStatus);\n                    myStatusRef.current = myStatus;\n                    const wirePresence = (s) => (s === 'invisible' ? 'offline' : s);\n                    // Presence travels as a normal ENCRYPTED chat message (type 'message') \u2014 that is\n                    // the only inbound path the manager delivers to onMessage; unknown raw system\n                    // types are dropped. handleMessage recognises the {type:'presence'} payload and\n                    // consumes it without displaying it.\n                    const sendPresenceTo = React.useCallback((mgr, s) => {\n                        if (!mgr || typeof mgr.sendMessage !== 'function') return;\n                        try {\n                            if (mgr.isConnected && mgr.isConnected()) {\n                                const p = mgr.sendMessage(JSON.stringify({ type: 'presence', status: wirePresence(s) }));\n                                if (p && typeof p.catch === 'function') p.catch(() => {});\n                            }\n                        } catch (_) {}\n                    }, []);\n                    const setMyStatus = React.useCallback((key) => {\n                        setMyStatusState(key);\n                        try { localStorage.setItem('securebit_my_status', key); } catch {}\n                        for (const mgr of managersRef.current.values()) sendPresenceTo(mgr, key);\n                    }, [sendPresenceTo]);\n\n                    // Secure chat extras: per-message send modes + 1s tick for countdowns.\n                    const [codeMode, setCodeMode] = React.useState(false);\n                    const [viewOnceMode, setViewOnceMode] = React.useState(false);\n                    const [viewOnceTtl, setViewOnceTtl] = React.useState(15); // seconds visible after the peer opens it\n                    const [disappearTtl, setDisappearTtl] = React.useState(0); // seconds; 0 = off (sticky)\n                    const [nowTick, setNowTick] = React.useState(() => Date.now());\n                    // connectionStatus \u2192 per-session status (active-session view, above).\n                    // Offline awareness \u2014 tracks the real online/offline events (which is\n                    // also what a console-simulated `dispatchEvent(new Event('offline'))`\n                    // fires, even when navigator.onLine stays true).\n                    const [isOffline, setIsOffline] = React.useState(typeof navigator !== 'undefined' && navigator.onLine === false);\n                    // Ref mirror so manager callbacks (which close over stale state) always\n                    // read the current offline status. Two queues implement store-and-forward\n                    // over the still-live P2P channel: outgoing waits until WE reconnect,\n                    // incoming waits until WE reconnect before being shown/acked.\n                    const offlineRef = React.useRef(isOffline);\n                    // Offline store-and-forward queues are now per-session (queuesRef, above).\n                    React.useEffect(() => { offlineRef.current = isOffline; }, [isOffline]);\n                    React.useEffect(() => {\n                        const goOffline = () => setIsOffline(true);\n                        const goOnline = () => setIsOffline(false);\n                        // A frozen tab can miss the 'online' edge entirely and would then\n                        // read as offline for the rest of its life. Re-read the real value\n                        // whenever the tab comes back, so the header stops claiming there\n                        // is no network long after there is.\n                        const resync = () => {\n                            if (document.visibilityState !== 'visible') return;\n                            setIsOffline(navigator.onLine === false);\n                        };\n                        window.addEventListener('offline', goOffline);\n                        window.addEventListener('online', goOnline);\n                        document.addEventListener('visibilitychange', resync);\n                        return () => {\n                            window.removeEventListener('offline', goOffline);\n                            window.removeEventListener('online', goOnline);\n                            document.removeEventListener('visibilitychange', resync);\n                        };\n                    }, []);\n\n                    // Keyboard-aware viewport height. iOS Safari does not shrink the layout\n                    // viewport when the on-screen keyboard opens, so a fixed 100dvh shell leaves\n                    // a grey gap under the composer. Mirror the VisualViewport height into a CSS\n                    // var (--sb-vh) that the app shell uses, so the layout tracks the keyboard.\n                    React.useEffect(() => {\n                        const vv = (typeof window !== 'undefined') ? window.visualViewport : null;\n                        const root = document.documentElement;\n                        let lastH = -1, lastInset = '', lastY = -1, raf = 0;\n\n                        // HEIGHT changes only on resize. It deliberately does NOT follow\n                        // `scroll`: on iOS the visual viewport also moves while the URL bar\n                        // collapses and during rubber-banding, so resizing the shell on every\n                        // scroll event made the whole layout twitch under the finger \u2014 which\n                        // is most of what \"the chat layout jumps\" was.\n                        const applyHeight = () => {\n                            const h = Math.round(vv ? vv.height : (window.innerHeight || 0));\n                            if (h && h !== lastH) { lastH = h; root.style.setProperty('--sb-vh', h + 'px'); }\n                        };\n                        // True while something the browser drew \u2014 in practice the on-screen\n                        // keyboard \u2014 is covering a large part of the window.\n                        const keyboardUp = () => !!vv && (window.innerHeight - vv.height) > 120;\n                        // The home-indicator inset must collapse while the keyboard is up.\n                        // Once the shell has shrunk to the visible area, that padding is no\n                        // longer clearing the indicator \u2014 it is just dead space between the\n                        // composer and the keyboard.\n                        const applyInset = () => {\n                            const covered = keyboardUp();\n                            const v = covered ? '0px' : 'env(safe-area-inset-bottom, 0px)';\n                            if (v !== lastInset) { lastInset = v; root.style.setProperty('--sb-safe-bottom', v); }\n                        };\n                        // WHERE the visible rect is, as opposed to how tall it is. iOS pans\n                        // the visual viewport down inside the layout viewport to reveal a\n                        // focused field, and a shell that only knows its height is left\n                        // behind \u2014 off the top of the screen, which is the bug this fixes.\n                        // Only a transform follows this (see --sb-vv-top in the shell rule):\n                        // it is the half cheap enough to run on every scroll event, and rAF\n                        // collapses a burst of them into one write per frame.\n                        //\n                        // The one case that must NOT be followed is a pinch-zoomed page,\n                        // which pans too \u2014 chasing that drags the shell out from under\n                        // whoever is reading. `scale` says so directly. An earlier version\n                        // of this guard asked instead whether the window was much taller\n                        // than the visual viewport, i.e. \"is a keyboard covering us\", which\n                        // assumes iOS never shrinks the layout viewport \u2014 true until it\n                        // isn't, and when it isn't the guard silently turns the whole fix\n                        // off. offsetTop is only ever non-zero when something moved us, so\n                        // it needs no permission to be believed.\n                        const applyOffset = () => {\n                            const zoomed = !!vv && vv.scale > 1.01;\n                            const y = (vv && !zoomed) ? Math.max(0, Math.round(vv.offsetTop)) : 0;\n                            if (y !== lastY) { lastY = y; root.style.setProperty('--sb-vv-top', y + 'px'); }\n                        };\n                        const apply = () => { applyHeight(); applyInset(); applyOffset(); };\n                        const onPan = () => {\n                            if (raf) return;\n                            raf = requestAnimationFrame(() => { raf = 0; applyOffset(); });\n                        };\n\n                        // Focus is the other notice we get, and on iOS 26 it is the more\n                        // reliable one: the pan that reveals a focused field can land after\n                        // the last resize event, and on dismissal the viewport is documented\n                        // not to settle back for a moment. So the offset is re-read a few\n                        // times across the keyboard's own animation rather than once.\n                        const timers = [];\n                        const resettle = () => {\n                            applyOffset();\n                            [60, 180, 360, 600].forEach((ms) => timers.push(setTimeout(() => { applyHeight(); applyInset(); applyOffset(); }, ms)));\n                        };\n\n                        apply();\n                        if (vv) { vv.addEventListener('resize', apply); vv.addEventListener('scroll', onPan); }\n                        window.addEventListener('resize', apply);\n                        window.addEventListener('orientationchange', apply);\n                        window.addEventListener('scroll', onPan, { passive: true });\n                        document.addEventListener('focusin', resettle);\n                        document.addEventListener('focusout', resettle);\n                        const stopDebug = startViewportDebug(vv);\n                        return () => {\n                            if (raf) cancelAnimationFrame(raf);\n                            timers.forEach(clearTimeout);\n                            if (vv) { vv.removeEventListener('resize', apply); vv.removeEventListener('scroll', onPan); }\n                            window.removeEventListener('resize', apply);\n                            window.removeEventListener('orientationchange', apply);\n                            window.removeEventListener('scroll', onPan);\n                            document.removeEventListener('focusin', resettle);\n                            document.removeEventListener('focusout', resettle);\n                            if (stopDebug) stopDebug();\n                        };\n                    }, []);\n                    const [relayOnlyMode, setRelayOnlyMode] = React.useState(() => {\n                        try { return localStorage.getItem('securebit_relay_only_mode') === 'true'; } catch { return false; }\n                    });\n                    // Custom ICE (STUN/TURN) servers \u2014 advanced network settings.\n                    const [customIceServers, setCustomIceServers] = React.useState(null); // null => use public defaults\n                    const [iceServersText, setIceServersText] = React.useState('');\n                    const [iceSettingsPersisted, setIceSettingsPersisted] = React.useState(false);\n                    const [showIceSettings, setShowIceSettings] = React.useState(false);\n\n                    // Load any previously saved (encrypted) custom ICE settings on mount.\n                    React.useEffect(() => {\n                        let cancelled = false;\n                        loadIceSettings().then((saved) => {\n                            if (cancelled || !saved) return;\n                            if (Array.isArray(saved.servers) && saved.servers.length > 0) {\n                                setCustomIceServers(saved.servers);\n                                setIceServersText(JSON.stringify(saved.servers, null, 2));\n                            }\n                            if (saved.privacyMode === 'relay-only') {\n                                setRelayOnlyMode(true);\n                            }\n                            setIceSettingsPersisted(true);\n                        }).catch(() => { /* fail closed: keep defaults */ });\n                        return () => { cancelled = true; };\n                    }, []);\n\n                    // Global entry point: the header gear dispatches this event.\n                    React.useEffect(() => {\n                        const open = () => setShowIceSettings(true);\n                        window.addEventListener('securebit:open-network-settings', open);\n                        return () => window.removeEventListener('securebit:open-network-settings', open);\n                    }, []);\n\n                    const handleApplyIceSettings = React.useCallback((next, persist) => {\n                        const servers = next.useCustom && Array.isArray(next.servers) ? next.servers : null;\n                        setCustomIceServers(servers && servers.length ? servers : null);\n                        setIceServersText(next.serversText || '');\n                        setRelayOnlyMode(next.privacyMode === 'relay-only');\n                        setShowIceSettings(false);\n                        if (persist) {\n                            setIceSettingsPersisted(true);\n                            saveIceSettings({ servers: servers || [], privacyMode: next.privacyMode }).catch(() => { /* surfaced as no-op */ });\n                        } else if (iceSettingsPersisted) {\n                            // User turned persistence off \u2014 remove the stored copy.\n                            setIceSettingsPersisted(false);\n                            clearIceSettings().catch(() => {});\n                        }\n                    }, [iceSettingsPersisted]);\n\n                    const handleForgetIceSettings = React.useCallback(async () => {\n                        await clearIceSettings().catch(() => {});\n                        setIceSettingsPersisted(false);\n                        setCustomIceServers(null);\n                        setIceServersText('');\n                    }, []);\n                    \n                    // Moved scrollToBottom logic to be available globally\n                    const [messageInput, setMessageInput] = React.useState('');\n                    // offerData/answerData/offerInput/answerInput, showOfferStep/showAnswerStep,\n                    // showVerification/showQRCode/qrCodeUrl, isGeneratingKeys \u2192 per-session setup\n                    // slice (declared in the active-session view block above).\n                    const [showQRScanner, setShowQRScanner] = React.useState(false);\n                    const [showQRScannerModal, setShowQRScannerModal] = React.useState(false);\n                    // The QR bundle is fetched on idle after mount (see app-boot.js), so on a\n                    // cold load it can still be in flight when someone opens the scanner. This\n                    // flips when it lands and re-runs the effect that starts the camera;\n                    // without it, opening the modal early left a permanently black viewfinder.\n                    const [qrBundleReady, setQrBundleReady] = React.useState(() => typeof window !== 'undefined' && !!window.Html5Qrcode);\n                    React.useEffect(() => {\n                        if (qrBundleReady) return undefined;\n                        const onReady = () => setQrBundleReady(true);\n                        window.addEventListener('securebit:qr-ready', onReady);\n                        // The event may have fired before this component mounted.\n                        if (window.Html5Qrcode) setQrBundleReady(true);\n                        return () => window.removeEventListener('securebit:qr-ready', onReady);\n                    }, [qrBundleReady]);\n\n                    // isVerified + mutual-verification flags \u2192 per-session SAS slice (above).\n                    const [securityLevel, setSecurityLevel] = React.useState(null);\n                    const [sessionTimeLeft, setSessionTimeLeft] = React.useState(0);\n\n                    // PAKE password states removed - using SAS verification instead\n\n                    // Session state - all security features enabled by default\n                    const [pendingSession, setPendingSession] = React.useState(null);\n\n                    // All security features are enabled by default - no payment required\n                    // pendingIncomingFiles \u2192 per-session slice (above).\n\n\n\n                    // ============================================\n                    // CENTRALIZED CONNECTION STATE MANAGEMENT\n                    // ============================================\n                    \n                    const [connectionState, setConnectionState] = React.useState({\n                        status: 'disconnected',\n                        hasActiveAnswer: false,\n                        answerCreatedAt: null,\n                        isUserInitiatedDisconnect: false\n                    });\n                    \n                    // Centralized connection state handler\n                    const updateConnectionState = (newState, options = {}) => {\n                        const { preserveAnswer = false, isUserAction = false } = options;\n                        \n                        setConnectionState(prev => ({\n                            ...prev,\n                            ...newState,\n                            isUserInitiatedDisconnect: isUserAction,\n                            hasActiveAnswer: preserveAnswer ? prev.hasActiveAnswer : false,\n                            answerCreatedAt: preserveAnswer ? prev.answerCreatedAt : null\n                        }));\n                    };\n                    \n                    // Check if we should preserve answer data\n                    const shouldPreserveAnswerData = () => {\n                        const hasAnswerData = !!answerData || \n                                            (answerInput && typeof answerInput === 'string' && answerInput.trim().length > 0);\n\n                        const hasAnswerQR = qrCodeUrl && typeof qrCodeUrl === 'string' && qrCodeUrl.trim().length > 0;\n                        \n                        const shouldPreserve = (connectionState.hasActiveAnswer && \n                               !connectionState.isUserInitiatedDisconnect) ||\n                               (hasAnswerData && \n                               !connectionState.isUserInitiatedDisconnect) ||\n                               (hasAnswerQR && \n                               !connectionState.isUserInitiatedDisconnect);\n                        \n                        \n                        return shouldPreserve;\n                    };\n                    \n                    // Mark answer as created\n                    const markAnswerCreated = () => {\n                        updateConnectionState({\n                            hasActiveAnswer: true,\n                            answerCreatedAt: Date.now()\n                        });\n                    };\n                    \n                    // webrtcManagerRef / notificationIntegrationRef \u2192 accessors over the active\n                    // session's manager / integration (active-session view block, above).\n\n                    // Development-only debug helpers. Production never exposes\n                    // manager internals or cleanup controls on `window`.\n                    React.useEffect(() => {\n                        return installDebugWindowHooks({\n                            targetWindow: window,\n                            webrtcManagerRef,\n                            onClearData: handleClearData\n                        });\n                    }, []);\n\n                    // Our relay's credential is minted by the site and expires daily;\n                    // fetch one now and keep it renewed. See network/turnCredentials.js.\n                    React.useEffect(() => { startTurnCredentialRefresh(); }, []);\n\n                    const addMessageWithAutoScroll = React.useCallback((message, type, opts = {}) => {\n                        const newId = Date.now() + Math.random();\n                        const newMessage = {\n                            message,\n                            type,\n                            id: newId,\n                            timestamp: (typeof opts.timestamp === 'number') ? opts.timestamp : Date.now(),\n                            mid: opts.mid,\n                            status: opts.status,            // WhatsApp-style: sending | sent | delivered | failed\n                            viewOnce: opts.viewOnce === true,\n                            viewOnceTtl: (typeof opts.viewOnceTtl === 'number') ? opts.viewOnceTtl : 15,\n                            expiresAt: (typeof opts.expiresAt === 'number') ? opts.expiresAt : undefined,\n                            voice: opts.voice || undefined,\n                            fileId: opts.fileId || undefined\n                        };\n\n                        setMessages(prev => {\n                            const updated = [...prev, newMessage];\n                            \n                            setTimeout(() => {\n                                if (chatMessagesRef?.current) {\n                                    const container = chatMessagesRef.current;\n                                    try {\n                                        const { scrollTop, scrollHeight, clientHeight } = container;\n                                        const isNearBottom = scrollHeight - scrollTop - clientHeight < 100;\n                                        \n                                        if (isNearBottom || prev.length === 0) {\n                                            requestAnimationFrame(() => {\n                                                if (container && container.scrollTo) {\n                                                    container.scrollTo({\n                                                        top: container.scrollHeight,\n                                                        behavior: scrollBehavior()\n                                                    });\n                                                }\n                                            });\n                                        }\n                                    } catch (error) {\n                                        console.warn('Scroll error:', error);\n                                        container.scrollTop = container.scrollHeight;\n                                    }\n                                }\n                            }, 50);\n                            \n                            return updated;\n                        });\n                        return newId;\n                    }, []);\n\n                    // Flip a sent message's delivery state (sending \u2192 sent \u2192 delivered, or failed).\n                    const updateMessageStatus = React.useCallback((mid, status) => {\n                        if (!mid) return;\n                        setMessages(prev => prev.map(m => (String(m.mid) === String(mid) && m.type === 'sent') ? { ...m, status } : m));\n                    }, []);\n\n                    // Shallow-merge a partial into one message (matched by local id), used to\n                    // drive voice-note transfer progress and attach the decrypted audio URL.\n                    const patchMessageById = React.useCallback((messageId, patch) => {\n                        if (messageId == null) return;\n                        setMessages(prev => prev.map(m => (String(m.id) === String(messageId))\n                            ? { ...m, ...(typeof patch === 'function' ? patch(m) : patch) }\n                            : m));\n                    }, []);\n                    // Same, matched by fileId (receiver side, where we don't hold the local id yet).\n                    const patchMessageByFileId = React.useCallback((fileId, patch) => {\n                        if (!fileId) return;\n                        setMessages(prev => prev.map(m => (m.fileId && String(m.fileId) === String(fileId))\n                            ? { ...m, ...(typeof patch === 'function' ? patch(m) : patch) }\n                            : m));\n                    }, []);\n\n                    // Drain ONE session's store-and-forward queues: transmit anything queued\n                    // while the link was down, and surface (and acknowledge) anything that\n                    // arrived meanwhile. Called both when the\n                    // browser regains connectivity and when a single session's P2P path is\n                    // repaired by an ICE restart (the two are independent: one chat can be\n                    // reconnecting while the others are fine).\n                    //\n                    // A send is only attempted while the manager reports a usable channel;\n                    // anything that cannot go out right now is put BACK on the queue in its\n                    // original order rather than being marked failed, so a flush that races\n                    // a still-settling path costs nothing but a retry.\n                    const flushSessionQueue = React.useCallback((id) => {\n                        const q = queuesRef.current.get(id);\n                        if (!q) return;\n                        const mgr = managersRef.current.get(id);\n\n                        const out = q.outgoing; q.outgoing = [];\n                        const deferred = [];\n                        for (const item of out) {\n                            if (!mgr || mgr.isConnected?.() !== true) { deferred.push(item); continue; }\n                            try {\n                                const send = mgr.sendMessage?.(item.outText, item.meta);\n                                if (send && typeof send.then === 'function') {\n                                    send.then(() => dispatch({ type: SA.UPDATE_MESSAGE_STATUS, id, mid: item.mid, status: 'delivered' }))\n                                        .catch(() => dispatch({ type: SA.UPDATE_MESSAGE_STATUS, id, mid: item.mid, status: 'failed' }));\n                                }\n                            } catch (_) {\n                                deferred.push(item);\n                            }\n                        }\n                        // Preserve ordering: deferred items go back ahead of anything queued\n                        // while this flush was running.\n                        if (deferred.length) q.outgoing = deferred.concat(q.outgoing);\n\n                        const inc = q.incoming; q.incoming = [];\n                        if (inc.length > 0) {\n                            dispatch({ type: SA.ADD_MESSAGE, id, message: buildSessionMessage(\n                                `Connection restored \u2014 ${inc.length} message${inc.length === 1 ? '' : 's'} received while you were offline.`,\n                                'notice'\n                            ) });\n                        }\n                        const viewing = id === activeIdRef.current && (typeof document === 'undefined' || document.visibilityState === 'visible');\n                        for (const item of inc) {\n                            dispatch({ type: SA.ADD_MESSAGE, id, message: buildSessionMessage(item.message, item.type, item.opts) });\n                            if (item.opts && item.opts.mid && item.type === 'received') {\n                                if (viewing) { try { mgr?.sendDeliveryReceipt?.(item.opts.mid); } catch (_) {} }\n                                else if (q.pendingReadAcks) q.pendingReadAcks.push(item.opts.mid);\n                            }\n                        }\n                    }, []);\n\n                    // When WE come back online: flush every session.\n                    const flushOfflineQueues = React.useCallback(() => {\n                        for (const id of queuesRef.current.keys()) flushSessionQueue(id);\n                    }, [flushSessionQueue]);\n\n                    React.useEffect(() => {\n                        if (isOffline) return;        // the offline \u2192 online edge, when it arrives\n                        flushOfflineQueues();\n                    }, [isOffline, flushOfflineQueues]);\n\n                    // \u2026but never RELY on that edge. The browser's online event is not\n                    // guaranteed: a tab the OS froze can miss it entirely, and then a\n                    // queue drained only on edges stays full forever \u2014 the bug this\n                    // replaces, where a phone showed one tick on every message it sent\n                    // while happily receiving. Poll instead: whenever a session's channel\n                    // is usable and it has something waiting, drain it. Sessions with\n                    // nothing queued cost a map lookup.\n                    React.useEffect(() => {\n                        const timer = setInterval(() => {\n                            for (const [id, q] of queuesRef.current.entries()) {\n                                if (!q.outgoing.length && !q.incoming.length) continue;\n                                const mgr = managersRef.current.get(id);\n                                if (mgr?.isConnected?.() !== true) continue;\n                                if (mgr?.isReconnecting?.() === true) continue;\n                                flushSessionQueue(id);\n                            }\n                        }, 2000);\n                        return () => clearInterval(timer);\n                    }, [flushSessionQueue]);\n\n                    // Update security level based on real verification\n                    const updateSecurityLevel = React.useCallback(async () => {\n                        if (window.isUpdatingSecurity) {\n                            return;\n                        }\n                        \n                        window.isUpdatingSecurity = true;\n                        \n                        try {\n                            if (webrtcManagerRef.current) {\n                                // All security features are enabled by default - always show MAXIMUM level\n                                setSecurityLevel({\n                                    level: 'MAXIMUM',\n                                    score: 100,\n                                    color: 'green',\n                                    details: t('sec.allEnabled'),\n                                    passedChecks: 10,\n                                    totalChecks: 10,\n                                    isRealData: true\n                                });\n                                \n                                if (window.DEBUG_MODE) {\n                                    const currentLevel = webrtcManagerRef.current.ecdhKeyPair && webrtcManagerRef.current.ecdsaKeyPair \n                                        ? await webrtcManagerRef.current.calculateSecurityLevel()\n                                        : {\n                                            level: 'MAXIMUM',\n                                            score: 100,\n                                            sessionType: 'premium',\n                                            passedChecks: 10,\n                                            totalChecks: 10\n                                        };\n                                }\n                            }\n                        } catch (error) {\n                            console.error('Failed to update security level:', error);\n                            setSecurityLevel({\n                                level: 'ERROR',\n                                score: 0,\n                                color: 'red',\n                                details: t('sas.verificationFailed')\n                            });\n                        } finally {\n                            setTimeout(() => {\n                                window.isUpdatingSecurity = false;\n                            }, 2000);\n                        }\n                    }, []);\n        \n                    // Session time ticker removed - sessions are unlimited\n        \n                    // Sessions are unlimited - no expiration handler needed\n        \n                    // All security features are enabled by default - no demo sessions needed\n                    const chatMessagesRef = React.useRef(null);\n        \n                    // Create scroll function using global helper\n                    const scrollToBottom = createScrollToBottomFunction(chatMessagesRef);\n\n                    React.useEffect(() => {\n                        try { localStorage.setItem('securebit_relay_only_mode', String(relayOnlyMode)); } catch {}\n                        if (webrtcManagerRef.current?._config?.webrtc) {\n                            webrtcManagerRef.current._setRelayOnlyMode(relayOnlyMode);\n                        }\n                    }, [relayOnlyMode]);\n                    \n                    // Auto-scroll when messages change\n                    React.useEffect(() => {\n                        if (messages.length > 0 && chatMessagesRef.current) {\n                            scrollToBottom();\n                            setTimeout(scrollToBottom, 50);\n                            setTimeout(scrollToBottom, 150);\n                        }\n                    }, [messages]);\n\n                    // Disappearing-message clock: tick every second (while ANY session has an\n                    // expiry) and prune past-deadline messages \u2014 independently per session, so\n                    // a background conversation's timers keep running too.\n                    const anyExpiring = sessionsState.order.some((id) => (sessionsState.sessions[id]?.messages || []).some((m) => typeof m.expiresAt === 'number'));\n                    const sessionsStateRef = React.useRef(sessionsState);\n                    sessionsStateRef.current = sessionsState;\n                    React.useEffect(() => {\n                        if (!anyExpiring) return;\n                        // Disappearing messages leave a tombstone (content wiped) instead of vanishing.\n                        const expireFn = (prev) => {\n                            const now = Date.now();\n                            let changed = false;\n                            const next = prev.map((m) => {\n                                if (typeof m.expiresAt === 'number' && m.expiresAt <= now && !m.expired) {\n                                    changed = true;\n                                    return { ...m, expired: true, message: '', expiresAt: undefined };\n                                }\n                                return m;\n                            });\n                            return changed ? next : prev;\n                        };\n                        const interval = setInterval(() => {\n                            const now = Date.now();\n                            setNowTick(now);\n                            const st = sessionsStateRef.current;\n                            for (const id of st.order) {\n                                const msgs = st.sessions[id]?.messages || [];\n                                if (msgs.some((m) => typeof m.expiresAt === 'number' && m.expiresAt <= now && !m.expired)) {\n                                    dispatch({ type: SA.SET_MESSAGES, id, updater: expireFn });\n                                }\n                            }\n                        }, 1000);\n                        return () => clearInterval(interval);\n                    }, [anyExpiring]);\n                    \n                    // PAKE password functions removed - using SAS verification instead\n        \n                    // Build a brand-new, fully-isolated session: its own manager, its own\n                    // id-bound callbacks, its own notification integration and offline queues.\n                    // The callback bodies below are the original single-session handlers; the\n                    // id-bound shadow setters declared here redirect every set*/dispatch into\n                    // THIS session's slice, so nothing leaks into another conversation.\n                    const createSession = (opts = {}) => {\n                        const role = opts.role || 'offer';\n                        const entry = createSessionEntry({ role });\n                        const id = entry.id;\n                        dispatch({ type: SA.CREATE_SESSION, entry, activate: opts.activate !== false });\n                        // pendingReadAcks: mids received while this chat was NOT being viewed; the\n                        // read receipt is held back until the user actually opens the conversation.\n                        queuesRef.current.set(id, { incoming: [], outgoing: [], pendingReadAcks: [] });\n\n                        // --- id-bound shadow setters (override the active-session view names) ---\n                        const setMessages = (u) => {\n                            if (typeof u === 'function') dispatch({ type: SA.SET_MESSAGES, id, updater: u });\n                            else dispatch({ type: SA.SET_MESSAGES, id, messages: u });\n                        };\n                        const addMessageWithAutoScroll = (message, type, opts2 = {}) => {\n                            dispatch({ type: SA.ADD_MESSAGE, id, message: buildSessionMessage(message, type, opts2) });\n                            // Background session received a chat message \u2192 bump its unread badge.\n                            if (type === 'received' && id !== activeIdRef.current) {\n                                dispatch({ type: SA.INCREMENT_UNREAD, id });\n                            }\n                        };\n                        const updateMessageStatus = (mid, status) => { if (mid) dispatch({ type: SA.UPDATE_MESSAGE_STATUS, id, mid, status }); };\n                        // Voice-note helpers: merge a partial into a message by local id or by fileId.\n                        const patchMessageById = (messageId, patch) => { if (messageId != null) dispatch({ type: SA.PATCH_MESSAGE, id, messageId, patch }); };\n                        const patchMessageByFileId = (fileId, patch) => { if (fileId) dispatch({ type: SA.PATCH_MESSAGE, id, fileId, patch }); };\n                        const setConnectionStatus = (status) => dispatch({ type: SA.SET_STATUS, id, status });\n                        const setKeyFingerprint = (fingerprint) => dispatch({ type: SA.SET_FINGERPRINT, id, fingerprint });\n                        const setVerificationCode = (code) => dispatch({ type: SA.SET_VERIFICATION, id, code });\n                        const setIsVerified = (v) => dispatch({ type: SA.SET_SAS, id, sas: { isVerified: !!v } });\n                        const setLocalVerificationConfirmed = (v) => dispatch({ type: SA.SET_SAS, id, sas: { localConfirmed: !!v } });\n                        const setRemoteVerificationConfirmed = (v) => dispatch({ type: SA.SET_SAS, id, sas: { remoteConfirmed: !!v } });\n                        const setBothVerificationsConfirmed = (v) => dispatch({ type: SA.SET_SAS, id, sas: { bothConfirmed: !!v } });\n                        const setShowVerification = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { showVerification: !!v } });\n                        const setShowOfferStep = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { showOfferStep: !!v } });\n                        const setShowAnswerStep = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { showAnswerStep: !!v } });\n                        const setShowQRCode = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { showQRCode: !!v } });\n                        const setQrCodeUrl = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { qrCodeUrl: v } });\n                        const setOfferData = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { offerData: v } });\n                        const setAnswerData = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { answerData: v } });\n                        const setOfferInput = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { offerInput: v } });\n                        const setAnswerInput = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { answerInput: v } });\n                        const setPendingIncomingFiles = (u) => {\n                            if (typeof u === 'function') dispatch({ type: SA.SET_PENDING_FILES, id, updater: u });\n                            else dispatch({ type: SA.SET_PENDING_FILES, id, files: u });\n                        };\n                        const sessionQueues = () => queuesRef.current.get(id) || { incoming: [], outgoing: [] };\n\n                        const handleMessage = (message, type, meta) => {\n                            if (typeof message === 'string' && message.trim().startsWith('{')) {\n                                try {\n                                    const parsedMessage = JSON.parse(message);\n                                    // Peer availability update (E2E control message) \u2014 store it for THIS\n                                    // session and never show it in the chat.\n                                    if (parsedMessage.type === 'presence') {\n                                        const st = (parsedMessage.data && parsedMessage.data.status) || parsedMessage.status;\n                                        if (st) dispatch({ type: SA.SET_PEER_PRESENCE, id, presence: st });\n                                        return;\n                                    }\n                                    // Group traffic rides this channel but is never part of the\n                                    // 1:1 conversation. It is lifted out here, before anything\n                                    // can reach the transcript of the chat it travelled over.\n                                    if (isGroupFrame(parsedMessage)) {\n                                        handleGroupFrameRef.current(id, parsedMessage);\n                                        return;\n                                    }\n                                    const blockedTypes = [\n                                        'file_transfer_start',\n                                        'file_transfer_response',\n                                        'file_chunk',\n                                        'chunk_confirmation',\n                                        'file_transfer_complete',\n                                        'file_transfer_error',\n                                        'heartbeat',\n                                        'verification',\n                                        'verification_response',\n                                        'verification_confirmed',\n                                        'verification_both_confirmed',\n                                        'peer_disconnect',\n                                        'key_rotation_signal',\n                                        'key_rotation_ready',\n                                        'security_upgrade',\n                                        'message_delete',\n                                        'message_receipt'\n                                    ];\n                                    if (parsedMessage.type && blockedTypes.includes(parsedMessage.type)) {\n                                        console.log(`Blocked system/file message from chat: ${parsedMessage.type}`);\n                                        return;\n                                    }\n                                    // Defensive unwrap: a plain-message envelope can leak through as\n                                    // raw JSON for some payloads (e.g. fenced code blocks). Show the\n                                    // real text, not {\"type\":\"message\",\"data\":\"```...\"}.\n                                    if (parsedMessage.type === 'message' && typeof parsedMessage.data === 'string') {\n                                        message = parsedMessage.data;\n                                        if (parsedMessage.meta && typeof parsedMessage.meta === 'object') meta = parsedMessage.meta;\n                                    }\n                                } catch (parseError) {\n\n                                }\n                            }\n                            \n                            // Per-message UI metadata from the peer (view-once / disappearing / id).\n                            const opts = {};\n                            if (meta && typeof meta === 'object') {\n                                if (typeof meta.mid === 'string') opts.mid = meta.mid;\n                                if (meta.once === true) {\n                                    opts.viewOnce = true;\n                                    opts.viewOnceTtl = Number.isFinite(meta.onceTtl) ? meta.onceTtl : 15;\n                                }\n                                if (Number.isFinite(meta.ttl) && meta.ttl > 0) {\n                                    opts.expiresAt = Date.now() + meta.ttl * 1000;\n                                }\n                                if (Number.isFinite(meta.ts)) opts.timestamp = meta.ts;\n                            }\n\n                            // If WE are offline, hold the peer's message back: don't show it\n                            // and don't acknowledge it yet, so the sender stays at one check.\n                            // It's surfaced (and acked \u2192 \u2713\u2713) the moment we reconnect.\n                            if (offlineRef.current && type === 'received') {\n                                sessionQueues().incoming.push({ message, type, opts });\n                                return;\n                            }\n\n                            addMessageWithAutoScroll(message, type, opts);\n\n                            // Read receipt: only ack once the user is actually looking at THIS\n                            // conversation (active session + visible tab). Otherwise hold the mid\n                            // back so a message read in a background chat stays \"delivered\" (grey\n                            // \u2713\u2713) on the sender's side \u2014 it flips to green only when this chat is\n                            // opened (see flushReadAcks).\n                            if (opts.mid && type === 'received') {\n                                const beingViewed = id === activeIdRef.current && (typeof document === 'undefined' || document.visibilityState === 'visible');\n                                if (beingViewed) {\n                                    try { manager?.sendDeliveryReceipt?.(opts.mid); } catch (_) {}\n                                } else {\n                                    const q = sessionQueues();\n                                    if (q.pendingReadAcks) q.pendingReadAcks.push(opts.mid);\n                                }\n                            }\n                        };\n\n                        const handleStatusChange = (status) => {\n                            const prevStatus = statusRef.current.get(id);\n                            statusRef.current.set(id, status);\n                            setConnectionStatus(status);\n\n                            // A group routing through this link needs to know whether it is\n                            // usable, so the member strip can show who is actually reachable\n                            // and the router can fall back to a relay for who is not.\n                            syncGroupLinksRef.current(id, status === 'connected' || status === 'verified');\n\n                            // Path repair in progress (ICE restart). The session, its keys and\n                            // its SAS verification all survive, so nothing is reset here \u2014 the\n                            // send path just starts queueing (see `offlineNow` in sendMessage).\n                            if (status === 'reconnecting') return;\n\n                            // Coming back from a repaired path: transmit whatever the user\n                            // sent into the dead channel and surface what was held back.\n                            if (status === 'connected' && prevStatus === 'reconnecting') {\n                                flushSessionQueue(id);\n                            }\n\n                            // Recovery is out of road and there is no manual fallback, so the\n                            // conversation ends here rather than lingering half-alive on screen.\n                            // destroySession wipes the keys with the manager and removes the\n                            // chat and its transcript \u2014 a session whose transport is gone must\n                            // not leave its plaintext sitting in a tab.\n                            if (status === 'recovery_failed') {\n                                setConnectionStatus('disconnected');\n                                if (id === activeIdRef.current) {\n                                    document.dispatchEvent(new CustomEvent('peer-disconnect'));\n                                    document.dispatchEvent(new CustomEvent('disconnected'));\n                                }\n                                // Deferred so the closing notice this session just delivered\n                                // renders before its slice is torn out from under it, and\n                                // skipped while a group still routes through it.\n                                setTimeout(() => {\n                                    if (sessionCarriesGroupMemberRef.current(id)) return;\n                                    destroySession(id);\n                                }, 2500);\n                                return;\n                            }\n\n                            if (status === 'connected') {\n                                document.dispatchEvent(new CustomEvent('new-connection'));\n\n                                // \u041D\u0435 \u0441\u043A\u0440\u044B\u0432\u0430\u0435\u043C \u0432\u0435\u0440\u0438\u0444\u0438\u043A\u0430\u0446\u0438\u044E \u043F\u0440\u0438 'connected' - \u0442\u043E\u043B\u044C\u043A\u043E \u043F\u0440\u0438 'verified'\n                                // setIsVerified(true);\n                                // setShowVerification(false);\n                                if (!window.isUpdatingSecurity) {\n                                    updateSecurityLevel().catch(console.error);\n                                }\n                            } else if (status === 'verifying') {\n                                setShowVerification(true);\n                                if (!window.isUpdatingSecurity) {\n                                    updateSecurityLevel().catch(console.error);\n                                }\n                            } else if (status === 'verified') {\n                                setIsVerified(true);\n                                setShowVerification(false);\n                                setBothVerificationsConfirmed(true);\n                                setConnectionStatus('connected');\n                                // Force immediate update of isVerified state\n                                setTimeout(() => {\n                                    setIsVerified(true);\n                                }, 0);\n                                // Tell the newly-connected peer my current availability (E2E, via\n                                // the normal encrypted message path \u2014 see sendPresenceTo).\n                                try {\n                                    const s = myStatusRef.current === 'invisible' ? 'offline' : myStatusRef.current;\n                                    setTimeout(() => {\n                                        try {\n                                            const p = manager.sendMessage?.(JSON.stringify({ type: 'presence', status: s }));\n                                            if (p && typeof p.catch === 'function') p.catch(() => {});\n                                        } catch (_) {}\n                                    }, 400);\n                                } catch (_) {}\n                                if (!window.isUpdatingSecurity) {\n                                    updateSecurityLevel().catch(console.error);\n                                }\n                            } else if (status === 'connecting') {\n                                if (!window.isUpdatingSecurity) {\n                                    updateSecurityLevel().catch(console.error);\n                                }\n                            } else if (status === 'disconnected') {\n                                // Drop: the manager has cleared its verification (re-establishment\n                                // required), so reset this session's verification flags too \u2014 the\n                                // setup/connect screen then shows so the user can reconnect. We do\n                                // NOT remove the session (that create\u2192destroy\u2192create churn flashed\n                                // the console) and we keep the message history; closing a chat is\n                                // done only via the Disconnect button.\n                                setConnectionStatus('disconnected');\n                                setIsVerified(false);\n                                setShowVerification(false);\n                                setLocalVerificationConfirmed(false);\n                                setRemoteVerificationConfirmed(false);\n                                setBothVerificationsConfirmed(false);\n                                if (id === activeIdRef.current) document.dispatchEvent(new CustomEvent('disconnected'));\n                            } else if (status === 'peer_disconnected') {\n                                if (id === activeIdRef.current) {\n                                    setSessionTimeLeft(0);\n                                    document.dispatchEvent(new CustomEvent('peer-disconnect'));\n                                }\n                                setConnectionStatus('peer_disconnected');\n                                setIsVerified(false);\n                                setShowVerification(false);\n                                setLocalVerificationConfirmed(false);\n                                setRemoteVerificationConfirmed(false);\n                                setBothVerificationsConfirmed(false);\n                                // The peer told us they were leaving, which is terminal: this\n                                // status comes only from an explicit peer_disconnect frame, not\n                                // from a transport drop that an ICE restart might repair. There\n                                // is nothing left to reconnect to, so the chat goes rather than\n                                // sitting in the rail advertising a closing notice as its last\n                                // message. A plain 'disconnected' is deliberately NOT treated\n                                // this way \u2014 that one is recoverable and keeps its history.\n                                // Deferred so the closing notice renders before the slice it\n                                // lives in is torn out \u2014 and skipped entirely if a group is\n                                // built on this session, because a member going offline is not\n                                // the same as them leaving the group. Membership is signed and\n                                // epoch-ordered; a dropped connection does not change it, and\n                                // removing the session would strand the member for good.\n                                setTimeout(() => {\n                                    if (sessionCarriesGroupMemberRef.current(id)) return;\n                                    destroySession(id);\n                                }, 2500);\n                            }\n                        };\n        \n                        const handleKeyExchange = (fingerprint) => {\n                            if (fingerprint === '') {\n                                setKeyFingerprint('');\n                            } else {\n                                setKeyFingerprint(fingerprint);\n                            }\n                        };\n                        \n                        const handleVerificationRequired = (code) => {\n                            if (code === '') {\n                                setVerificationCode('');\n                                setShowVerification(false);\n                            } else {\n                                setVerificationCode(code);\n                                setShowVerification(true);\n                            }\n                        };\n        \n                        const handleVerificationStateChange = (state) => {\n                            setLocalVerificationConfirmed(state.localConfirmed);\n                            setRemoteVerificationConfirmed(state.remoteConfirmed);\n                            setBothVerificationsConfirmed(state.bothConfirmed);\n                        };\n        \n                        // Callback for handling response errors\n                        const handleAnswerError = (errorType, errorMessage) => {\n                            if (errorType === 'replay_attack') {\n                                // Reset the session upon replay attack\n                                    setSessionTimeLeft(0);\n                                setPendingSession(null);\n                                \n                                addMessageWithAutoScroll('\uD83D\uDCA1 Data is outdated. Please create a new invitation or use a current response code.', 'system');\n        \n                                if (typeof console.clear === 'function') {\n                                    console.clear();\n                                }\n                            } else if (errorType === 'security_violation') {\n                                // Reset the session upon security breach\n                                    setSessionTimeLeft(0);\n                                setPendingSession(null);\n                                \n                                addMessageWithAutoScroll(` Security breach: ${errorMessage}`, 'system');\n        \n                                if (typeof console.clear === 'function') {\n                                    console.clear();\n                                }\n                            }\n                        };\n        \n        \n                        if (typeof console.clear === 'function') {\n                            console.clear();\n                        }\n                        \n                        const manager = new EnhancedSecureWebRTCManager(\n                            handleMessage,\n                            handleStatusChange,\n                            handleKeyExchange,\n                            handleVerificationRequired,\n                            handleAnswerError,\n                            handleVerificationStateChange,\n                            {\n                                webrtc: {\n                                    relayOnly: relayOnlyMode,\n                                    // Priority: user's custom servers > operator override > built-in defaults.\n                                    iceServers: (Array.isArray(customIceServers) && customIceServers.length)\n                                        ? customIceServers\n                                        : (Array.isArray(window.SECUREBIT_ICE_SERVERS) ? window.SECUREBIT_ICE_SERVERS : undefined)\n                                }\n                            }\n                        );\n                        managersRef.current.set(id, manager);\n\n                        // Unsend / delete-for-everyone: peer asked us to drop a message.\n                        manager.onMessageDelete = (mid) => {\n                            if (!mid) return;\n                            setMessages(prev => prev.filter(m => String(m.mid) !== String(mid)));\n                        };\n\n                        // Read receipt: the peer actually opened the chat and read it \u2192 green.\n                        // (A receipt is only sent once the recipient is viewing the conversation,\n                        // so background-read messages stay at two grey 'delivered' ticks.)\n                        manager.onMessageDelivered = (mid) => {\n                            updateMessageStatus(mid, 'read');\n                        };\n\n                        // Per-session notification integration (raises OS notifications when the\n                        // tab is hidden; the unread badge handles the in-app, focused case).\n                        if (typeof Notification !== 'undefined' && Notification && Notification.permission === 'granted' && window.NotificationIntegration && !integrationsRef.current.get(id)) {\n                            try {\n                                const integration = new window.NotificationIntegration(manager);\n                                integration.init().then(() => {\n                                    integrationsRef.current.set(id, integration);\n                                }).catch((error) => {\n                                    // Handle error silently\n                                });\n                            } catch (error) {\n                                // Handle error silently\n                            }\n                        }\n\n                        handleMessage(' SecureBit.chat Enhanced Security Edition v5.6.0 - ECDH + DTLS + SAS initialized. Ready to establish a secure connection with ECDH key exchange, DTLS fingerprint verification, and SAS authentication to prevent MITM attacks.', 'system');\n\n                        // Setup file transfer callbacks (id-bound to THIS session's manager).\n                        manager.setFileTransferCallbacks(\n                            // Progress callback \u2014 drives the voice-note upload/download ring.\n                            (progress) => {\n                                if (progress && progress.isVoice) {\n                                    const pct = Math.max(0, Math.min(100, progress.progress || 0));\n                                    const applyPct = (m) => {\n                                        if (!m.voice) return {};\n                                        // Sender clears the ring once every chunk is out (playable\n                                        // from the local copy); receiver keeps it until the audio is\n                                        // assembled and decrypted (onFileReceived attaches the URL).\n                                        if (progress.direction === 'up' && pct >= 100) {\n                                            return { voice: { ...m.voice, transfer: null } };\n                                        }\n                                        return { voice: { ...m.voice, transfer: { dir: progress.direction, pct } } };\n                                    };\n                                    if (progress.direction === 'up' && progress.uiId != null) patchMessageById(progress.uiId, applyPct);\n                                    else if (progress.fileId) patchMessageByFileId(progress.fileId, applyPct);\n                                    return;\n                                }\n                                console.log('File progress:', progress);\n                            },\n\n                            // File received callback. Voice notes play inline (never touch disk);\n                            // ordinary files still auto-save.\n                            (fileData) => {\n                                const isVoice = !!fileData.isVoice || (typeof fileData.mimeType === 'string' && fileData.mimeType.startsWith('audio/'));\n                                if (isVoice) {\n                                    fileData.getObjectURL()\n                                        .then((url) => {\n                                            patchMessageByFileId(fileData.fileId, (m) => ({ voice: { ...(m.voice || {}), url, transfer: null } }));\n                                        })\n                                        .catch((e) => {\n                                            console.error('Voice decode failed:', e);\n                                            patchMessageByFileId(fileData.fileId, (m) => ({ voice: { ...(m.voice || {}), transfer: null, error: true } }));\n                                        });\n                                    return;\n                                }\n\n                                const sizeMb = Math.max(1, Math.round((fileData.fileSize || 0) / (1024 * 1024)));\n\n                                const saveToDisk = async () => {\n                                    const url = await fileData.getObjectURL();\n                                    const a = document.createElement('a');\n                                    a.href = url;\n                                    a.download = fileData.fileName || 'file';\n                                    document.body.appendChild(a);\n                                    a.click();\n                                    a.remove();\n                                    setTimeout(() => fileData.revokeObjectURL(url), 15000);\n                                };\n\n                                saveToDisk()\n                                    .then(() => {\n                                        addMessageWithAutoScroll(`File received & saved: ${fileData.fileName} (${sizeMb} MB)`, 'system');\n                                    })\n                                    .catch((e) => {\n                                        console.error('Auto-save failed:', e);\n                                        addMessageWithAutoScroll(`File received: ${fileData.fileName} (${sizeMb} MB). Open the file panel to download it.`, 'system');\n                                    });\n                            },\n\n                            // Error callback\n                            (error) => {\n                                console.error('File transfer error:', error);\n\n                                if (error.includes(t('err.notReady'))) {\n                                    addMessageWithAutoScroll(` File transfer error: connection not ready. Try again later.`, 'system');\n                                } else if (error.includes(t('err.fileTooLarge'))) {\n                                    addMessageWithAutoScroll(` File is too big. Maximum size: 100 MB`, 'system');\n                                } else {\n                                    addMessageWithAutoScroll(` File transfer error: ${error}`, 'system');\n                                }\n                            },\n\n                            // Incoming file request callback. Voice notes are auto-accepted and\n                            // rendered inline (a receiving bubble appears immediately and tracks\n                            // the download ring); ordinary files still require explicit consent.\n                            (fileRequest) => {\n                                if (fileRequest && fileRequest.isVoice) {\n                                    const v = fileRequest.voice || {};\n                                    addMessageWithAutoScroll('', 'received', {\n                                        voice: {\n                                            dur: Number.isFinite(v.dur) ? v.dur : 0,\n                                            bars: Array.isArray(v.bars) ? v.bars : null,\n                                            transfer: { dir: 'down', pct: 0 },\n                                            url: null\n                                        },\n                                        fileId: fileRequest.fileId\n                                    });\n                                    try { manager.acceptIncomingFile(fileRequest.fileId); } catch (_) {}\n                                    return;\n                                }\n                                setPendingIncomingFiles(prev => {\n                                    if (prev.some(f => f.fileId === fileRequest.fileId)) return prev;\n                                    return [...prev, fileRequest];\n                                });\n                            }\n                        );\n\n                        return id;\n                    };\n\n                    // Keep createSession reachable from non-render callers (new-chat button etc.).\n                    const createSessionRef = React.useRef(createSession);\n                    createSessionRef.current = createSession;\n\n                    // Tear down ONE session completely: its manager (existing key-wipe logic),\n                    // its notification integration and its queues. Other sessions are untouched.\n                    // Re-entrancy guarded: mgr.disconnect() can synchronously re-fire the\n                    // 'disconnected' status callback, which would otherwise recurse back in here.\n                    const destroyingRef = React.useRef(new Set());\n                    /**\n                     * Is this pairwise session carrying a group member?\n                     *\n                     * A group is built out of these sessions, so one of them is not just a\n                     * chat the user can close \u2014 it is the group's only route to that member.\n                     * Tearing it out because the peer went offline would make them permanently\n                     * unreachable AND leave nothing to re-bind when they come back.\n                     */\n                    const sessionCarriesGroupMember = React.useCallback((id) => {\n                        for (const runtime of groupRuntimesRef.current.values()) {\n                            if (runtime.sessionToFp && runtime.sessionToFp.has(id)) return true;\n                        }\n                        return false;\n                    }, []);\n                    const sessionCarriesGroupMemberRef = React.useRef(sessionCarriesGroupMember);\n                    sessionCarriesGroupMemberRef.current = sessionCarriesGroupMember;\n\n                    const destroySession = React.useCallback((id) => {\n                        if (!id || destroyingRef.current.has(id)) return;\n                        destroyingRef.current.add(id);\n                        try {\n                            const mgr = managersRef.current.get(id);\n                            if (mgr) { try { mgr.disconnect(); } catch (_) {} managersRef.current.delete(id); }\n                            const integ = integrationsRef.current.get(id);\n                            if (integ) { try { integ.cleanup?.(); } catch (_) {} integrationsRef.current.delete(id); }\n                            queuesRef.current.delete(id);\n                            statusRef.current.delete(id);\n                            dispatch({ type: SA.REMOVE_SESSION, id });\n                        } finally {\n                            destroyingRef.current.delete(id);\n                        }\n                    }, []);\n\n                    // Always keep at least one session around: when the last chat is removed the\n                    // user lands back on the single-column \"Start Secure\" page with a fresh session.\n                    React.useEffect(() => {\n                        if (sessionsState.order.length === 0) createSessionRef.current({ role: 'offer' });\n                    }, [sessionsState.order.length]);\n\n                    // ---- Sidebar (session list) state + actions ----\n                    const [sidebarCollapsed, setSidebarCollapsed] = React.useState(() => {\n                        try { return localStorage.getItem('securebit_sidebar_collapsed') === 'true'; } catch { return false; }\n                    });\n                    React.useEffect(() => { try { localStorage.setItem('securebit_sidebar_collapsed', String(sidebarCollapsed)); } catch {} }, [sidebarCollapsed]);\n                    const [sidebarDrawerOpen, setSidebarDrawerOpen] = React.useState(false);\n                    const handleSelectSession = React.useCallback((id) => {\n                        dispatch({ type: SA.SET_ACTIVE, id });\n                        dispatch({ type: SA.CLEAR_UNREAD, id });\n                        setSidebarDrawerOpen(false);\n                    }, []);\n                    /**\n                     * Start a new 1:1 chat and put it on screen.\n                     *\n                     * Clearing the active group is the part that matters. One conversation\n                     * owns the column at a time, and a group owns it unconditionally \u2014 so\n                     * from inside a group this button used to create a session that was\n                     * never rendered: no invitation to copy, no way to verify it, no sign\n                     * anything had happened at all.\n                     *\n                     * That made adding somebody to a group impossible in the one case where\n                     * you would want to. A group is built out of chats you have already\n                     * verified, so adding a member means first opening a chat with them \u2014\n                     * and the button that opens one did nothing while a group was in front\n                     * of you. The admin was told there was nobody left to add, and the only\n                     * route to changing that was closed.\n                     */\n                    const handleNewChat = React.useCallback(() => {\n                        groupsDispatch({ type: GA.SET_ACTIVE_GROUP, id: null });\n                        createSessionRef.current({ role: 'offer' });\n                        setSidebarDrawerOpen(false);\n                    }, []);\n                    const handleRenameSession = React.useCallback((id, label) => { dispatch({ type: SA.RENAME, id, label }); }, []);\n\n                    // ---- Groups: the mesh ----\n                    //\n                    // A group starts out as a star: the admin holds a link to everyone and\n                    // nobody else holds a link to anybody. What follows turns that into a mesh\n                    // by having each pair without a link build one, with the descriptors\n                    // travelling over the relay path that already exists.\n                    //\n                    // Nothing here decides WHETHER to dial or WHO dials \u2014 GroupSession owns\n                    // that, and owns the signature that makes a relayed descriptor safe to act\n                    // on. This is only the transport half: make a connection, hand back its\n                    // descriptor, and tear it down when asked.\n\n                    const closeMeshLink = React.useCallback((sessionId) => {\n                        const entry = meshLinksRef.current.get(sessionId);\n                        if (!entry) return;\n                        meshLinksRef.current.delete(sessionId);\n                        try { entry.manager.disconnect(); } catch (_) {}\n                    }, []);\n                    const closeMeshLinkRef = React.useRef(closeMeshLink);\n                    closeMeshLinkRef.current = closeMeshLink;\n\n                    /**\n                     * A manager for one mesh link, wired to the group instead of to a chat.\n                     *\n                     * The callbacks are where a mesh link differs from a 1:1 session. Inbound\n                     * traffic goes to the group router and nowhere else \u2014 a mesh link has no\n                     * transcript for a stray message to land in. And nobody is ever shown a\n                     * verification code: when the in-band exchange completes, the link is\n                     * released on the group's authority instead. See markGroupLinkVerified for\n                     * why that is a move of the guarantee rather than a hole in it.\n                     */\n                    const buildMeshLink = React.useCallback((gid, fp) => {\n                        const sessionId = 'mesh:' + Array.from(crypto.getRandomValues(new Uint8Array(8)))\n                            .map((b) => b.toString(16).padStart(2, '0')).join('');\n                        const entry = { manager: null, gid, fp, sessionId };\n\n                        const onMessage = (message) => {\n                            if (typeof message !== 'string' || !message.trim().startsWith('{')) return;\n                            let parsed;\n                            try { parsed = JSON.parse(message); } catch (_) { return; }\n                            if (isGroupFrame(parsed)) handleGroupFrameRef.current(sessionId, parsed);\n                        };\n\n                        const onStatusChange = (status) => {\n                            // isVerified is the authority, not the status word: the manager\n                            // reports 'connected' at points in its own lifecycle where the link\n                            // is not yet releasable, and a group must not start routing over a\n                            // link whose peer has not proved who it is.\n                            const dead = status === 'disconnected'\n                                || status === 'failed'\n                                || status === 'peer_disconnected'\n                                || status === 'recovery_failed';\n                            syncGroupLinksRef.current(sessionId, !dead && entry.manager?.isVerified === true);\n\n                            // Beyond repair \u2014 the manager has exhausted its own ICE restarts.\n                            // Release the member so the mesh can dial them again through\n                            // whoever can still reach them. This is the difference between a\n                            // mesh that heals and one that only ever degrades: a link dying is\n                            // not the same as the member going away.\n                            if (status === 'recovery_failed' || status === 'failed') {\n                                const runtime = groupRuntimesRef.current.get(gid);\n                                try { runtime?.unbindSession(fp); } catch (_) {}\n                                closeMeshLinkRef.current(sessionId);\n                            }\n                        };\n\n                        const onVerificationRequired = (code) => {\n                            if (!code || !entry.manager) return;\n                            try {\n                                entry.manager.markGroupLinkVerified(`group:${gid}`);\n                            } catch (_) {\n                                // The link cannot be released, so it is no use to the group.\n                                // Dropping it puts the pair back on the relay path, which is\n                                // where they were before the dial started.\n                                closeMeshLinkRef.current(sessionId);\n                                syncGroupLinksRef.current(sessionId, false);\n                            }\n                        };\n\n                        const manager = new EnhancedSecureWebRTCManager(\n                            onMessage,\n                            onStatusChange,\n                            () => {},                  // key exchange: no fingerprint UI to update\n                            onVerificationRequired,\n                            () => {},                  // answer errors surface as a failed dial\n                            () => {},                  // no verification UI to keep in step\n                            {\n                                // A mesh link has no window of its own, so it must not\n                                // announce itself to the application: its lifecycle events\n                                // would reset the header and the connection banner belonging\n                                // to whichever chat the user is actually looking at.\n                                emitGlobalEvents: false,\n                                webrtc: {\n                                    relayOnly: relayOnlyMode,\n                                    iceServers: (Array.isArray(customIceServers) && customIceServers.length)\n                                        ? customIceServers\n                                        : (Array.isArray(window.SECUREBIT_ICE_SERVERS) ? window.SECUREBIT_ICE_SERVERS : undefined)\n                                }\n                            }\n                        );\n                        entry.manager = manager;\n                        meshLinksRef.current.set(sessionId, entry);\n                        return entry;\n                    }, [relayOnlyMode, customIceServers]);\n                    const buildMeshLinkRef = React.useRef(buildMeshLink);\n                    buildMeshLinkRef.current = buildMeshLink;\n\n                    /** The transport half of the mesh, as one group's GroupSession sees it. */\n                    const makeMeshAdapter = React.useCallback((gid) => ({\n                        createOffer: async (fp) => {\n                            const entry = buildMeshLinkRef.current(gid, fp);\n                            try {\n                                const offer = await entry.manager.createSecureOffer();\n                                // Only the compact descriptor fits a group frame. If this build\n                                // ever emits the old handshake, the dial fails and the pair\n                                // stays relayed rather than silently exceeding the budget.\n                                if (!offer || typeof offer.sbq2 !== 'string') {\n                                    throw new Error('mesh dial needs a compact descriptor');\n                                }\n                                return { sessionId: entry.sessionId, descriptor: offer.sbq2 };\n                            } catch (error) {\n                                closeMeshLinkRef.current(entry.sessionId);\n                                throw error;\n                            }\n                        },\n                        createAnswer: async (fp, descriptor) => {\n                            const entry = buildMeshLinkRef.current(gid, fp);\n                            try {\n                                const answer = await entry.manager.createSecureAnswer({ t: 'offer', sbq2: descriptor });\n                                if (!answer || typeof answer.sbq2 !== 'string') {\n                                    throw new Error('mesh answer needs a compact descriptor');\n                                }\n                                return { sessionId: entry.sessionId, descriptor: answer.sbq2 };\n                            } catch (error) {\n                                closeMeshLinkRef.current(entry.sessionId);\n                                throw error;\n                            }\n                        },\n                        acceptAnswer: async (sessionId, descriptor) => {\n                            const entry = meshLinksRef.current.get(sessionId);\n                            if (!entry) throw new Error('that mesh dial is no longer open');\n                            await entry.manager.handleSecureAnswer({ t: 'answer', sbq2: descriptor });\n                        },\n                        close: (sessionId) => closeMeshLinkRef.current(sessionId),\n                        /**\n                         * The key fingerprint of a pairwise session, for link probes.\n                         *\n                         * Both endpoints of a session derive the same value from the shared\n                         * secret and nobody else can, which is exactly what makes it usable as\n                         * proof that a probe was written for THIS link. Only a verified session\n                         * has one worth anything.\n                         */\n                        linkFingerprint: (sessionId) => {\n                            const manager = managersRef.current.get(sessionId)\n                                || meshLinksRef.current.get(sessionId)?.manager\n                                || null;\n                            if (!manager || manager.isVerified !== true) return '';\n                            return typeof manager.keyFingerprint === 'string' ? manager.keyFingerprint : '';\n                        },\n                    }), []);\n\n                    /**\n                     * Offer every verified chat to every ready group as a link it may adopt.\n                     *\n                     * Two members who were already talking before the group existed do not\n                     * need a second connection dialled between them. probeSession is idempotent\n                     * \u2014 it self-limits to one probe per session per epoch and refuses outright\n                     * unless the group is ready \u2014 so running this whenever either registry\n                     * changes costs a map walk and nothing else.\n                     */\n                    React.useEffect(() => {\n                        for (const [gid, runtime] of groupRuntimesRef.current) {\n                            const group = groupsState.groups[gid];\n                            if (!group || group.phase !== GROUP_PHASE.READY || !group.sasConfirmed) continue;\n                            for (const sid of sessionsState.order) {\n                                const session = sessionsState.sessions[sid];\n                                if (!session || !session.sas.isVerified) continue;\n                                runtime.probeSession(sid).catch(() => { /* a probe is an offer, not a request */ });\n                            }\n                        }\n                    }, [groupsState, sessionsState]);\n\n                    // ---- Groups: user actions ----\n\n                    /**\n                     * Only VERIFIED 1:1 chats may become group members.\n                     *\n                     * A group built on an unverified session inherits that session's open\n                     * question \u2014 whether the peer is who they claim \u2014 and then hides it behind\n                     * a group code that looks like it settled the matter. The picker simply\n                     * does not offer them.\n                     */\n                    const groupCandidates = React.useMemo(() => sessionsState.order\n                        .map((id) => sessionsState.sessions[id])\n                        .filter((s) => s && s.sas && s.sas.isVerified)\n                        .map((s) => ({ id: s.id, name: s.peerLabel, mono: monoInitials(s.peerLabel) })),\n                        [sessionsState]);\n\n                    const handleSelectGroup = React.useCallback((gid) => {\n                        groupsDispatch({ type: GA.SET_ACTIVE_GROUP, id: gid });\n                        groupsDispatch({ type: GA.CLEAR_UNREAD, id: gid });\n                        setSidebarDrawerOpen(false);\n                    }, []);\n\n                    const handleCreateGroup = React.useCallback(async ({ name, sessionIds }) => {\n                        setShowCreateGroup(false);\n                        const gid = GroupSession.newId();\n                        const runtime = new GroupSession({\n                            groupId: gid, name, isAdmin: true,\n                            subtle: crypto.subtle,\n                            send: sendGroupFrame,\n                            emit: groupEmitter(gid),\n                            mesh: makeMeshAdapter(gid)\n                        });\n                        groupRuntimesRef.current.set(gid, runtime);\n                        try {\n                            await runtime.init();\n                            groupsDispatch({\n                                type: GA.CREATE_GROUP,\n                                entry: createGroupEntry({\n                                    id: gid, name, selfFp: runtime.selfFp, adminFp: runtime.selfFp,\n                                    isAdmin: true, members: runtime._memberSnapshot()\n                                })\n                            });\n                            await runtime.invite(sessionIds.map((sid) => ({\n                                sessionId: sid,\n                                name: sessionsState.sessions[sid]?.peerLabel || 'Member'\n                            })));\n                        } catch (error) {\n                            groupRuntimesRef.current.delete(gid);\n                            try { runtime.destroy(); } catch (_) {}\n                            groupsDispatch({ type: GA.REMOVE_GROUP, id: gid });\n                            // A group that could not even be announced should not linger as a\n                            // failed row the user has to clean up \u2014 say what went wrong instead.\n                            setGroupError(error?.code === 'invitations_could_not_be_sent'\n                                ? t('err.inviteNotConnectedRetry')\n                                : `The group could not be created (${error?.code || 'unknown error'}).`);\n                        }\n                    }, [sendGroupFrame, groupEmitter, sessionsState]);\n\n                    const handleAcceptInvite = React.useCallback(async () => {\n                        const invite = pendingInvite;\n                        if (!invite) return;\n                        setPendingInvite(null);\n                        const runtime = new GroupSession({\n                            groupId: invite.gid, name: invite.name, isAdmin: false,\n                            subtle: crypto.subtle,\n                            send: sendGroupFrame,\n                            emit: groupEmitter(invite.gid),\n                            mesh: makeMeshAdapter(invite.gid)\n                        });\n                        groupRuntimesRef.current.set(invite.gid, runtime);\n                        try {\n                            await runtime.init();\n                            groupsDispatch({\n                                type: GA.CREATE_GROUP,\n                                entry: createGroupEntry({ id: invite.gid, name: invite.name, selfFp: runtime.selfFp })\n                            });\n                            await runtime.acceptInvite(invite.sessionId, invite.frame);\n                        } catch (error) {\n                            groupRuntimesRef.current.delete(invite.gid);\n                            try { runtime.destroy(); } catch (_) {}\n                            groupsDispatch({ type: GA.SET_ERROR, id: invite.gid, error: error?.code || 'join_failed' });\n                        }\n                    }, [pendingInvite, sendGroupFrame, groupEmitter]);\n\n                    const handleConfirmGroupSas = React.useCallback(() => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        try {\n                            runtime.confirmSas();\n                            setShowGroupCode(false);\n                        } catch (error) {\n                            groupsDispatch({ type: GA.SET_ERROR, id: gid, error: error?.code || 'confirm_failed' });\n                        }\n                    }, []);\n\n                    /** Tear a group down locally and tell whoever we can still reach. */\n                    const destroyGroup = React.useCallback((gid, { announce = true } = {}) => {\n                        const runtime = groupRuntimesRef.current.get(gid);\n                        // A group that is going away takes its call with it \u2014 and the capture\n                        // with that. Released before anything else, because a microphone left\n                        // running after the window it belonged to is gone is the one failure\n                        // here nobody would see happening.\n                        const media = groupCallMediaRef.current.get(gid);\n                        if (media) {\n                            groupCallMediaRef.current.delete(gid);\n                            media.leave().catch(() => {});\n                        }\n                        setGroupCallState((current) => {\n                            const next = { ...current };\n                            delete next[gid];\n                            return next;\n                        });\n                        setGroupCallMediaState((current) => {\n                            const next = { ...current };\n                            delete next[gid];\n                            return next;\n                        });\n                        // Drop the runtime from the registry first, so a new group with the\n                        // same people cannot collide with one that is still tearing down.\n                        groupRuntimesRef.current.delete(gid);\n                        lastUnreachableRef.current.delete(gid);\n                        groupsDispatch({ type: GA.REMOVE_GROUP, id: gid });\n                        setShowGroupCode(false);\n                        if (runtime) {\n                            // Announce BEFORE teardown and wait for it: destroy() clears the\n                            // member map that leave() walks to find recipients, so a leave that\n                            // is merely started can end up addressed to nobody \u2014 and a peer that\n                            // never hears it keeps a group nobody is in.\n                            const done = announce\n                                ? Promise.resolve().then(() => runtime.leave()).catch(() => {})\n                                : Promise.resolve();\n                            done.then(() => { try { runtime.destroy(); } catch (_) {} });\n                        }\n                    }, []);\n\n                    const destroyGroupRef = React.useRef(destroyGroup);\n                    destroyGroupRef.current = destroyGroup;\n\n                    const handleSendGroupMessage = React.useCallback(async (text) => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        const body = String(text || '').trim();\n                        if (!body) return;\n                        setGroupInput('');\n                        try {\n                            const { unreachable } = await runtime.sendText(body);\n                            groupsDispatch({\n                                type: GA.ADD_MESSAGE, id: gid,\n                                message: buildGroupMessage(body, 'sent')\n                            });\n\n                            // A group with no server has nobody to hold a message for a member\n                            // who is offline, so the sender is told rather than left to assume\n                            // it arrived. Told ONCE, though: this used to print under every\n                            // single message for as long as somebody stayed offline, which\n                            // buried the conversation in a notice that said nothing new each\n                            // time. It is repeated only when the answer actually changes \u2014 a\n                            // different member drops, or somebody comes back and then goes.\n                            const signature = unreachable.map((m) => m.fp).sort().join(',');\n                            if (signature !== (lastUnreachableRef.current.get(gid) || '')) {\n                                lastUnreachableRef.current.set(gid, signature);\n                                if (unreachable.length > 0) {\n                                    const names = unreachable.map((m) => m.name);\n                                    const who = names.length === 1\n                                        ? `${names[0]} is`\n                                        : `${names.slice(0, -1).join(', ')} and ${names[names.length - 1]} are`;\n                                    groupsDispatch({\n                                        type: GA.ADD_MESSAGE, id: gid,\n                                        message: buildGroupMessage(\n                                            `${who} offline and will not receive messages until they reconnect.`,\n                                            'system'\n                                        )\n                                    });\n                                }\n                            }\n                        } catch (error) {\n                            groupsDispatch({\n                                type: GA.ADD_MESSAGE, id: gid,\n                                message: buildGroupMessage(`Could not send: ${error?.message || 'unknown error'}`, 'system')\n                            });\n                        }\n                    }, []);\n\n                    /**\n                     * Verified 1:1 chats that could still join the ACTIVE group.\n                     *\n                     * A session already carrying a member is filtered out: inviting the same\n                     * chat twice would have it answer with a second identity key and occupy two\n                     * slots in the safety code.\n                     */\n                    const addCandidates = React.useMemo(() => {\n                        if (!activeGroup) return [];\n                        const taken = new Set(activeGroup.members.map((m) => m.sessionId).filter(Boolean));\n                        return groupCandidates.filter((c) => !taken.has(c.id));\n                    }, [activeGroup, groupCandidates]);\n\n                    const handleAddMembers = React.useCallback(async (sessionIds) => {\n                        setShowAddMembers(false);\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        try {\n                            await runtime.addMembers(sessionIds.map((sid) => ({\n                                sessionId: sid,\n                                name: sessionsState.sessions[sid]?.peerLabel || 'Member'\n                            })));\n                        } catch (error) {\n                            setGroupError(error?.code === 'invitations_could_not_be_sent'\n                                ? t('err.inviteNotConnected')\n                                : error?.code === 'too_many_members'\n                                    ? `A group is limited to ${GROUP_LIMITS.MAX_MEMBERS} members.`\n                                    : `Could not invite (${error?.code || 'unknown error'}).`);\n                        }\n                    }, [sessionsState]);\n\n                    const handleRemoveGroupMember = React.useCallback(async (fp) => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        try {\n                            await runtime.removeMember(fp);\n                        } catch (error) {\n                            groupsDispatch({ type: GA.SET_ERROR, id: gid, error: error?.code || 'remove_failed' });\n                        }\n                    }, []);\n\n                    // ---- Groups: call actions ----\n                    //\n                    // The split throughout: GroupSession decides WHO is in the call and tells\n                    // everyone in signed frames; GroupCallMedia connects the legs it can. A\n                    // failure in the second never rewrites the first \u2014 a member this device\n                    // cannot reach is still in the call, and is shown as such.\n\n                    /** Reconcile one group's media legs against its call roster. */\n                    const syncGroupCallMedia = React.useCallback((gid, callOrNull) => {\n                        const media = groupCallMediaRef.current.get(gid);\n                        if (!media) return;\n                        const runtime = groupRuntimesRef.current.get(gid);\n                        const call = callOrNull !== null ? callOrNull : (runtime?.getCallSnapshot?.() || null);\n\n                        // The call is over, or we are no longer in it: release the capture.\n                        // This is the ONLY place the microphone is let go on a state change,\n                        // so a call that ends while the tab is in the background still stops\n                        // recording.\n                        if (!call || !call.joined || call.callId !== media.callId) {\n                            groupCallMediaRef.current.delete(gid);\n                            media.leave().catch(() => {});\n                            setGroupCallMediaState((current) => {\n                                const next = { ...current };\n                                delete next[gid];\n                                return next;\n                            });\n                            return;\n                        }\n                        media.setPeers(call.participants);\n                    }, []);\n                    const syncGroupCallMediaRef = React.useRef(syncGroupCallMedia);\n                    syncGroupCallMediaRef.current = syncGroupCallMedia;\n\n                    /**\n                     * Build the media controller for a group and capture the microphone.\n                     *\n                     * Capture only \u2014 no legs. Connecting them is a separate step because\n                     * the group has to be told we are in the call FIRST: attaching a leg\n                     * can place an offer straight away, and an offer that overtakes the\n                     * announcement lands on a peer who does not yet know this session is\n                     * a call leg, so they ring instead of answering. See setPeers.\n                     */\n                    const openGroupCallMedia = React.useCallback(async (gid, call) => {\n                        const existing = groupCallMediaRef.current.get(gid);\n                        if (existing && existing.callId === call.callId) {\n                            existing.setPeers(call.participants);\n                            return existing;\n                        }\n                        if (existing) {\n                            groupCallMediaRef.current.delete(gid);\n                            await existing.leave().catch(() => {});\n                        }\n                        const media = new GroupCallMedia({\n                            getManager: (sessionId) => managersRef.current.get(sessionId)\n                                || meshLinksRef.current.get(sessionId)?.manager\n                                || null,\n                            onChange: (snapshot) => {\n                                setGroupCallMediaState((current) => ({ ...current, [gid]: snapshot }));\n                            },\n                        });\n                        groupCallMediaRef.current.set(gid, media);\n                        await media.join({\n                            callId: call.callId,\n                            selfFp: groupsState.groups[gid]?.selfFp || groupRuntimesRef.current.get(gid)?.selfFp || '',\n                            withVideo: call.withVideo,\n                            peers: [],   // legs are connected after the announcement\n                        });\n                        return media;\n                    }, [groupsState]);\n\n                    /**\n                     * Open a call: capture first, announce second.\n                     *\n                     * The order is the whole point, and it is why startCall takes a `prepare`\n                     * hook rather than the app calling the two in sequence. Ringing everybody\n                     * else's device and only then discovering this device has no microphone\n                     * would make one person's permission dialog into everyone's interruption.\n                     */\n                    const handleStartGroupCall = React.useCallback(async (withVideo) => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        try {\n                            await runtime.startCall({\n                                withVideo,\n                                prepare: (call) => openGroupCallMedia(gid, call),\n                            });\n                        } catch (error) {\n                            // The runtime has already rolled the call back; drop whatever the\n                            // capture managed to build so no leg outlives it.\n                            const media = groupCallMediaRef.current.get(gid);\n                            if (media) { groupCallMediaRef.current.delete(gid); media.leave().catch(() => {}); }\n                            const code = error?.code || 'media_failed';\n                            groupsDispatch({\n                                type: GA.ADD_MESSAGE, id: gid,\n                                message: buildGroupMessage(\n                                    code === 'call_in_progress' ? t('groupCall.err.call_in_progress')\n                                        : code === 'not_ready' ? t('groupCall.err.not_ready')\n                                            : t(`groupCall.err.${mediaErrorCode(error)}`),\n                                    'system'\n                                )\n                            });\n                        }\n                    }, [openGroupCallMedia]);\n\n                    const handleJoinGroupCall = React.useCallback(async () => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        const call = runtime?.getCallSnapshot?.();\n                        if (!runtime || !call) return;\n                        try {\n                            // Capture, announce, then connect \u2014 in that order. Capturing\n                            // first means a device with no microphone never tells the group\n                            // it joined; announcing before connecting means our offer cannot\n                            // reach a peer who has not yet heard that we are in the call.\n                            const media = await openGroupCallMedia(gid, { ...call, joined: true });\n                            await runtime.joinCall();\n                            media.setPeers(runtime.getCallSnapshot()?.participants || []);\n                        } catch (error) {\n                            const media = groupCallMediaRef.current.get(gid);\n                            if (media) { groupCallMediaRef.current.delete(gid); media.leave().catch(() => {}); }\n                            groupsDispatch({\n                                type: GA.ADD_MESSAGE, id: gid,\n                                message: buildGroupMessage(t(`groupCall.err.${mediaErrorCode(error)}`), 'system')\n                            });\n                        }\n                    }, [openGroupCallMedia]);\n\n                    /**\n                     * Dismissing is local and silent.\n                     *\n                     * There is no \"declined\" to broadcast: in a group without a server nobody\n                     * is entitled to be told who chose not to pick up, and a decline frame\n                     * would leak exactly that. The call carries on for whoever is in it, and\n                     * this device simply stops showing the prompt.\n                     */\n                    const handleDismissGroupCall = React.useCallback(() => {\n                        const gid = activeGroupIdRef.current;\n                        const call = gid && groupRuntimesRef.current.get(gid)?.getCallSnapshot?.();\n                        if (!call) return;\n                        setDismissedCalls((current) => ({ ...current, [gid]: call.callId }));\n                    }, []);\n\n                    const handleLeaveGroupCall = React.useCallback(async () => {\n                        const gid = activeGroupIdRef.current;\n                        if (!gid) return;\n                        const media = groupCallMediaRef.current.get(gid);\n                        if (media) {\n                            groupCallMediaRef.current.delete(gid);\n                            setGroupCallMediaState((current) => {\n                                const next = { ...current };\n                                delete next[gid];\n                                return next;\n                            });\n                            await media.leave().catch(() => {});\n                        }\n                        try { await groupRuntimesRef.current.get(gid)?.leaveCall(); } catch (_) {}\n                    }, []);\n\n                    const activeGroupMedia = React.useCallback(() => (\n                        activeGroupIdRef.current ? groupCallMediaRef.current.get(activeGroupIdRef.current) : null\n                    ), []);\n\n                    const handleGroupCallMic = React.useCallback(() => { activeGroupMedia()?.toggleMic(); }, [activeGroupMedia]);\n                    const handleGroupCallCamera = React.useCallback(() => { activeGroupMedia()?.toggleCamera(); }, [activeGroupMedia]);\n                    const handleGroupCallFlip = React.useCallback(() => { activeGroupMedia()?.flipCamera(); }, [activeGroupMedia]);\n\n                    // Opening a group clears its badge; new traffic scrolls the transcript.\n                    React.useEffect(() => {\n                        if (!activeGroupId) return;\n                        groupsDispatch({ type: GA.CLEAR_UNREAD, id: activeGroupId });\n                    }, [activeGroupId]);\n                    React.useEffect(() => {\n                        const el = groupScrollRef.current;\n                        if (el) el.scrollTop = el.scrollHeight;\n                    }, [activeGroup && activeGroup.messages.length]);\n\n                    // Every group runtime is torn down with the app so no identity key or\n                    // ceremony nonce outlives the tab.\n                    React.useEffect(() => () => {\n                        // Captures first: a group call holds a live microphone, and it must not\n                        // outlive the app under any teardown order.\n                        for (const media of groupCallMediaRef.current.values()) {\n                            media.leave().catch(() => {});\n                        }\n                        groupCallMediaRef.current.clear();\n                        for (const runtime of groupRuntimesRef.current.values()) {\n                            try { runtime.destroy(); } catch (_) {}\n                        }\n                        groupRuntimesRef.current.clear();\n                        // destroy() closes the links its own group opened; this catches any\n                        // that outlived their group \u2014 a dial whose runtime was already gone\n                        // when its connection finally came up.\n                        for (const sessionId of [...meshLinksRef.current.keys()]) {\n                            closeMeshLinkRef.current(sessionId);\n                        }\n                    }, []);\n                    // Send any held-back read receipts for a session (call when the user opens it).\n                    const flushReadAcks = React.useCallback((id) => {\n                        if (!id) return;\n                        const q = queuesRef.current.get(id);\n                        const mgr = managersRef.current.get(id);\n                        if (!q || !mgr || !q.pendingReadAcks || q.pendingReadAcks.length === 0) return;\n                        const acks = q.pendingReadAcks; q.pendingReadAcks = [];\n                        for (const mid of acks) { try { mgr.sendDeliveryReceipt?.(mid); } catch (_) {} }\n                    }, []);\n                    // Opening a session clears its unread badge and releases its read receipts.\n                    React.useEffect(() => {\n                        if (!activeSessionId) return;\n                        dispatch({ type: SA.CLEAR_UNREAD, id: activeSessionId });\n                        if (typeof document === 'undefined' || document.visibilityState === 'visible') flushReadAcks(activeSessionId);\n                    }, [activeSessionId, flushReadAcks]);\n\n                    // App-level lifecycle: create the first session on mount, wire the global\n                    // tab/unload guards, and on unmount disconnect EVERY live manager.\n                    const didInitRef = React.useRef(false);\n                    React.useEffect(() => {\n                        if (didInitRef.current) return;\n                        didInitRef.current = true;\n\n                        // (The first session is created by the ensure-at-least-one-session effect,\n                        // which also handles re-landing after the last chat is closed.)\n\n                        let isTabSwitching = false;\n                        let tabSwitchTimeout = null;\n\n                        const handleBeforeUnload = (event) => {\n                            if (event.type === 'beforeunload' && !isTabSwitching) {\n                                for (const mgr of managersRef.current.values()) {\n                                    try {\n                                        if (mgr.isConnected && mgr.isConnected()) {\n                                            try { mgr.sendSystemMessage({ type: 'peer_disconnect', reason: 'user_disconnect', timestamp: Date.now() }); } catch (_) {}\n                                            setTimeout(() => { try { mgr.disconnect(); } catch (_) {} }, 100);\n                                        } else {\n                                            mgr.disconnect();\n                                        }\n                                    } catch (_) {}\n                                }\n                            } else if (isTabSwitching) {\n                                event.preventDefault();\n                                event.returnValue = '';\n                            }\n                        };\n\n                        const handleVisibilityChange = () => {\n                            if (document.visibilityState === 'hidden') {\n                                isTabSwitching = true;\n                                if (tabSwitchTimeout) clearTimeout(tabSwitchTimeout);\n                                tabSwitchTimeout = setTimeout(() => { isTabSwitching = false; }, 5000);\n                            } else if (document.visibilityState === 'visible') {\n                                isTabSwitching = false;\n                                if (tabSwitchTimeout) { clearTimeout(tabSwitchTimeout); tabSwitchTimeout = null; }\n                                // Tab regained focus \u2192 release held read receipts for the open chat.\n                                flushReadAcks(activeIdRef.current);\n                            }\n                        };\n\n                        window.addEventListener('beforeunload', handleBeforeUnload);\n                        document.addEventListener('visibilitychange', handleVisibilityChange);\n\n                        return () => {\n                            window.removeEventListener('beforeunload', handleBeforeUnload);\n                            document.removeEventListener('visibilitychange', handleVisibilityChange);\n                            if (tabSwitchTimeout) { clearTimeout(tabSwitchTimeout); tabSwitchTimeout = null; }\n                            for (const mgr of managersRef.current.values()) { try { mgr.disconnect(); } catch (_) {} }\n                            managersRef.current.clear();\n                            for (const integ of integrationsRef.current.values()) { try { integ.cleanup?.(); } catch (_) {} }\n                            integrationsRef.current.clear();\n                            queuesRef.current.clear();\n                            statusRef.current.clear();\n                        };\n                    }, []); // run once\n        \n                    // All security features are enabled by default - no session purchase needed\n        \n                    const compressOfferData = (offerData) => {\n                        try {\n                            // Parse the offer data if it's a string\n                            const offer = typeof offerData === 'string' ? JSON.parse(offerData) : offerData;\n                            \n                            // Create a minimal version with only the most essential data\n                            const minimalOffer = {\n                                type: offer.type,\n                                version: offer.version,\n                                timestamp: offer.timestamp,\n                                sessionId: offer.sessionId,\n                                connectionId: offer.connectionId,\n                                verificationCode: offer.verificationCode,\n                                salt: offer.salt,\n                                // Use only key fingerprints instead of full keys\n                                keyFingerprints: offer.keyFingerprints,\n                                // Add a reference to get full data\n                                fullDataAvailable: true,\n                                compressionLevel: 'minimal'\n                            };\n                            \n                            return JSON.stringify(minimalOffer);\n                        } catch (error) {\n                            console.error('Error compressing offer data:', error);\n                            return offerData; // Return original if compression fails\n                        }\n                    };\n\n                    // NOTE: createQRReference() used to live here. It kept the invitation\n                    // payload in localStorage and put only a reference id in the QR \u2014 which\n                    // could not work across devices, since the payload stayed on the\n                    // sender's machine, and left records behind that nothing cleaned up.\n                    // Removed rather than repaired; QR invitations travel as\n                    // self-contained COSE payloads (see packSecurePayload).\n\n                    const createTemplateOffer = (offer) => {\n                        // Minimal template to keep QR within single image capacity\n                        const templateOffer = {\n                            type: 'enhanced_secure_offer_template',\n                            version: '4.0',\n                            sessionId: offer.sessionId,\n                            connectionId: offer.connectionId,\n                            verificationCode: offer.verificationCode,\n                            timestamp: offer.timestamp,\n                            // Avoid bulky fields (SDP, raw keys); keep only fingerprints and essentials\n                            keyFingerprints: offer.keyFingerprints,\n                            // Keep concise auth hints (omit large nonces)\n                            authChallenge: offer?.authChallenge?.challenge,\n                            // Optionally include a compact capability hint if small\n                            capabilities: Array.isArray(offer.capabilities) && offer.capabilities.length <= 5\n                                ? offer.capabilities\n                                : undefined\n                        };\n                        \n                        return templateOffer;\n                    };\n\n                    // Conservative QR payload limits (characters). Adjust per error correction level.\n                    const MAX_QR_LEN = 800;      // for JSON/plain/gzip\n                    const BIN_MAX_QR_LEN = 400;  // stricter for SB1:bin to improve scan reliability\n                    const [qrFramesTotal, setQrFramesTotal] = React.useState(0);\n                    const [qrFrameIndex, setQrFrameIndex] = React.useState(0);\n                    const [qrManualMode, setQrManualMode] = React.useState(false);\n\n                    // Animated QR state (for multi-chunk COSE)\n                    const qrAnimationRef = React.useRef({ timer: null, chunks: [], idx: 0, active: false });\n                    // Stop any running QR auto-advance when the active session changes, so frames\n                    // are never pushed into the wrong session's setup slice.\n                    React.useEffect(() => () => {\n                        try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); qrAnimationRef.current.timer = null; } } catch {}\n                    }, [activeSessionId]);\n                    const stopQrAnimation = () => {\n                        try { if (qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                        qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                        setQrFrameIndex(0);\n                        setQrFramesTotal(0);\n                        setQrManualMode(false);\n                    };\n\n                    // Render frame at current index (no index mutation)\n                    const renderCurrent = async () => {\n                        const { chunks, idx } = qrAnimationRef.current || {};\n                        if (!chunks || !chunks.length) return;\n                        const current = chunks[idx % chunks.length];\n                        try {\n                            const isDesktop = (typeof window !== 'undefined') && ((window.innerWidth || 0) >= 1024);\n                            const QR_SIZE = isDesktop ? 720 : 512;\n                            const url = await (window.generateQRCode ? window.generateQRCode(current, { errorCorrectionLevel: 'M', margin: 2, size: QR_SIZE }) : Promise.resolve(''));\n                            if (url) setQrCodeUrl(url);\n                        } catch (e) {\n                            console.warn('Animated QR render error (current):', e);\n                        }\n                        setQrFrameIndex(((qrAnimationRef.current?.idx || 0) % (qrAnimationRef.current?.chunks?.length || 1)) + 1);\n                    };\n\n                    // Render current frame, then advance index by 1\n                    const renderAndAdvance = async () => {\n                        await renderCurrent();\n                        const len = qrAnimationRef.current?.chunks?.length || 0;\n                        if (len > 0) {\n                            const nextIdx = ((qrAnimationRef.current?.idx || 0) + 1) % len;\n                            qrAnimationRef.current.idx = nextIdx;\n                            setQrFrameIndex(nextIdx + 1);\n                        }\n                    };\n\n                    const toggleQrManualMode = () => {\n                        const newManualMode = !qrManualMode;\n                        setQrManualMode(newManualMode);\n                        \n                        if (newManualMode) {\n\n                            if (qrAnimationRef.current.timer) {\n                                clearInterval(qrAnimationRef.current.timer);\n                                qrAnimationRef.current.timer = null;\n                            }\n                            console.log('QR Manual mode enabled - auto-scroll stopped');\n                        } else {\n                            if (qrAnimationRef.current.chunks.length > 1) {\n                                const intervalMs = 3000;\n                                qrAnimationRef.current.active = true;\n                                clearInterval(qrAnimationRef.current.timer);\n                                qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                            }\n                            console.log('QR Manual mode disabled - auto-scroll resumed');\n                        }\n                    };\n\n                    const nextQrFrame = async () => {\n                        console.log('\uD83C\uDFAE nextQrFrame called, qrFramesTotal:', qrFramesTotal, 'qrAnimationRef.current:', qrAnimationRef.current);\n                        if (qrAnimationRef.current.chunks.length > 1) {\n                            const nextIdx = (qrAnimationRef.current.idx + 1) % qrAnimationRef.current.chunks.length;\n                            qrAnimationRef.current.idx = nextIdx;\n                            setQrFrameIndex(nextIdx + 1);\n                            console.log('\uD83C\uDFAE Next frame index:', nextIdx + 1);\n                            // Ensure auto-advance timer runs in manual mode too\n                            try { clearInterval(qrAnimationRef.current.timer); } catch {}\n                            qrAnimationRef.current.timer = null;\n                            await renderCurrent();\n                            // If not in manual mode, restart auto timer\n                            if (!qrManualMode && qrAnimationRef.current.chunks.length > 1) {\n                                const intervalMs = 3000;\n                                qrAnimationRef.current.active = true;\n                                qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                            } else {\n                                qrAnimationRef.current.active = false;\n                            }\n                        } else {\n                            console.log('\uD83C\uDFAE No multiple frames to navigate');\n                        }\n                    };\n\n                    const prevQrFrame = async () => {\n                        console.log('\uD83C\uDFAE prevQrFrame called, qrFramesTotal:', qrFramesTotal, 'qrAnimationRef.current:', qrAnimationRef.current);\n                        if (qrAnimationRef.current.chunks.length > 1) {\n                            const prevIdx = (qrAnimationRef.current.idx - 1 + qrAnimationRef.current.chunks.length) % qrAnimationRef.current.chunks.length;\n                            qrAnimationRef.current.idx = prevIdx;\n                            setQrFrameIndex(prevIdx + 1);\n                            console.log('\uD83C\uDFAE Previous frame index:', prevIdx + 1);\n                            try { clearInterval(qrAnimationRef.current.timer); } catch {}\n                            qrAnimationRef.current.timer = null;\n                            await renderCurrent();\n                            if (!qrManualMode && qrAnimationRef.current.chunks.length > 1) {\n                                const intervalMs = 3000;\n                                qrAnimationRef.current.active = true;\n                                qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                            } else {\n                                qrAnimationRef.current.active = false;\n                            }\n                        } else {\n                            console.log('\uD83C\uDFAE No multiple frames to navigate');\n                        }\n                    };\n\n                    // Buffer for assembling scanned COSE chunks\n                    const qrChunksBufferRef = React.useRef({ id: null, total: 0, seen: new Set(), items: [] });\n\n                    const generateQRCode = async (data) => {\n                        try {\n                            const originalSize = typeof data === 'string' ? data.length : JSON.stringify(data).length;\n                            const isDesktop = (typeof window !== 'undefined') && ((window.innerWidth || 0) >= 1024);\n                            const QR_SIZE = isDesktop ? 720 : 512;\n                            \n                            // Try binary format first (CBOR + deflate + base64url)\n                            if (typeof window.generateBinaryQRCodeFromObject === 'function') {\n                                try {\n                                    const obj = typeof data === 'string' ? JSON.parse(data) : data;\n                                    const qrDataUrl = await window.generateBinaryQRCodeFromObject(obj, { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                    if (qrDataUrl) {\n                                        try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                        qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                                        setQrFrameIndex(0);\n                                        setQrFramesTotal(0);\n                                        setQrManualMode(false);\n                                        setQrCodeUrl(qrDataUrl);\n                                        setQrFramesTotal(1);\n                                        setQrFrameIndex(1);\n                                        return;\n                                    }\n                                } catch (e) {\n                                    console.warn('Binary QR generation failed, falling back to compressed:', e?.message || e);\n                                }\n                            }\n                            \n                            // Fallback to compressed JSON\n                            if (typeof window.generateCompressedQRCode === 'function') {\n                                try {\n                                    const payload = typeof data === 'string' ? data : JSON.stringify(data);\n                                    const qrDataUrl = await window.generateCompressedQRCode(payload, { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                    if (qrDataUrl) {\n                                        try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                        qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                                        setQrFrameIndex(0);\n                                        setQrFramesTotal(0);\n                                        setQrManualMode(false);\n                                        setQrCodeUrl(qrDataUrl);\n                                        setQrFramesTotal(1);\n                                        setQrFrameIndex(1);\n                                        return;\n                                    }\n                                } catch (e) {\n                                    console.warn('Compressed QR generation failed, falling back to plain:', e?.message || e);\n                                }\n                            }\n                            \n                            // Final fallback to plain JSON\n                            const payload = typeof data === 'string' ? data : JSON.stringify(data);\n                            if (payload.length <= MAX_QR_LEN) {\n                                if (!window.generateQRCode) throw new Error('QR code generator unavailable');\n                                try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                                setQrFrameIndex(0);\n                                setQrFramesTotal(0);\n                                setQrManualMode(false);\n                                const qrDataUrl = await window.generateQRCode(payload, { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                    setQrCodeUrl(qrDataUrl);\n                                setQrFramesTotal(1);\n                                setQrFrameIndex(1);\n                                    return;\n                            }\n\n                            // Large payload: \u0440\u0430\u0437\u0431\u0438\u0432\u0430\u0435\u043C \u043D\u0430 \u0444\u0440\u0435\u0439\u043C\u044B (plain JSON)\n                            try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                            qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                            setQrFrameIndex(0);\n                            setQrFramesTotal(0);\n                            setQrManualMode(false);\n                            const id = `raw_${Date.now()}_${Math.random().toString(36).slice(2)}`;\n\n                            const TARGET_CHUNKS = 10;\n                            const FRAME_MAX = Math.max(200, Math.floor(payload.length / TARGET_CHUNKS));\n                            const total = Math.ceil(payload.length / FRAME_MAX);\n                            const rawChunks = [];\n                            for (let i = 0; i < total; i++) {\n                                const seq = i + 1;\n                                const part = payload.slice(i * FRAME_MAX, (i + 1) * FRAME_MAX);\n                                rawChunks.push(JSON.stringify({ hdr: { v: 1, id, seq, total, rt: 'raw' }, body: part }));\n                            }\n                            if (!window.generateQRCode) throw new Error('QR code generator unavailable');\n                            if (rawChunks.length === 1) {\n                                const url = await window.generateQRCode(rawChunks[0], { errorCorrectionLevel: 'M', margin: 2, size: QR_SIZE });\n                                setQrCodeUrl(url);\n                                setQrFramesTotal(1);\n                                setQrFrameIndex(1);\n                                    return;\n                                }\n                            qrAnimationRef.current.chunks = rawChunks;\n                            qrAnimationRef.current.idx = 0;\n                            qrAnimationRef.current.active = true;\n                            setQrFramesTotal(rawChunks.length);\n                            setQrFrameIndex(1);\n                                const EC_OPTS = { errorCorrectionLevel: 'M', margin: 2, size: QR_SIZE };\n                                await renderNext();\n\n                                if (!qrManualMode) {\n                                    const intervalMs = 4000; // 4 seconds per frame for better readability\n                                qrAnimationRef.current.active = true;\n                                qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                                }\n                            return;\n                        } catch (error) {\n                            console.error('QR code generation failed:', error);\n                            setMessages(prev => [...prev, {\n                                message: ` QR code generation failed: ${error.message}`,\n                                type: 'error'\n                            }]);\n                        }\n                    };\n\n                    const reconstructFromTemplate = (templateData) => {\n                        // Reconstruct full offer from template\n                        const fullOffer = {\n                            type: \"enhanced_secure_offer\",\n                            version: templateData.version,\n                            timestamp: templateData.timestamp,\n                            sessionId: templateData.sessionId,\n                            connectionId: templateData.connectionId,\n                            verificationCode: templateData.verificationCode,\n                            salt: templateData.salt,\n                            sdp: templateData.sdp,\n                            keyFingerprints: templateData.keyFingerprints,\n                            capabilities: templateData.capabilities,\n                            \n                            // Reconstruct ECDH key object\n                            ecdhPublicKey: {\n                                keyType: \"ECDH\",\n                                keyData: templateData.ecdhKeyData,\n                                timestamp: templateData.timestamp - 1000, // Approximate\n                                version: templateData.version,\n                                signature: templateData.ecdhSignature\n                            },\n                            \n                            // Reconstruct ECDSA key object\n                            ecdsaPublicKey: {\n                                keyType: \"ECDSA\",\n                                keyData: templateData.ecdsaKeyData,\n                                timestamp: templateData.timestamp - 999, // Approximate\n                                version: templateData.version,\n                                signature: templateData.ecdsaSignature\n                            },\n                            \n                            // Reconstruct auth challenge\n                            authChallenge: {\n                                challenge: templateData.authChallenge,\n                                timestamp: templateData.timestamp,\n                                nonce: templateData.authNonce,\n                                version: templateData.version\n                            },\n                            \n                            // Generate security level (can be recalculated)\n                            securityLevel: {\n                                level: \"CRITICAL\",\n                                score: 20,\n                                color: \"red\",\n                                verificationResults: {\n                                    encryption: { passed: false, details: \"Encryption not working\", points: 0 },\n                                    keyExchange: { passed: true, details: \"Simple key exchange verified\", points: 15 },\n                                    messageIntegrity: { passed: false, details: \"Message integrity failed\", points: 0 },\n                                    rateLimiting: { passed: true, details: \"Rate limiting active\", points: 5 },\n                                    ecdsa: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    metadataProtection: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    pfs: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    nestedEncryption: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    packetPadding: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    advancedFeatures: { passed: false, details: \"Premium session required - feature not available\", points: 0 }\n                                },\n                                timestamp: templateData.timestamp,\n                                details: \"Real verification: 20/100 security checks passed (2/4 available)\",\n                                isRealData: true,\n                                passedChecks: 2,\n                                totalChecks: 4,\n                                sessionType: \"demo\",\n                                maxPossibleScore: 50\n                            }\n                        };\n                        \n                        return fullOffer;\n                    };\n\n                    const handleQRScan = async (scannedData) => {\n                        try {\n                            console.log('QR Code scanned:', scannedData.substring(0, 100) + '...');\n                            console.log('Current buffer state:', qrChunksBufferRef.current);\n\n                            // An SBQ2 invitation is ONE frame, always. It has to be\n                            // recognised before any chunk logic runs: the assembler\n                            // below assumes a fixed four-frame split (that is what\n                            // an SB1 payload is cut into) and the fallback branch\n                            // claims every non-JSON string over 100 characters \u2014 a\n                            // 151-character SB2: code matches, is filed as chunk 1\n                            // of 4, and the scanner waits for three frames that do\n                            // not exist.\n                            if (scannedData.startsWith('SB2:') || scannedData.charCodeAt(0) === 0x02) {\n                                qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                if (showOfferStep) {\n                                    setAnswerInput(scannedData);\n                                } else {\n                                    setOfferInput(scannedData);\n                                }\n                                setMessages(prev => [...prev, {\n                                    message: t('flow.invitationCaptured'),\n                                    type: 'success'\n                                }]);\n                                setShowQRScannerModal(false);\n                                return Promise.resolve(true);\n                            }\n\n                            \n                            // Check if this is a binary chunk (starts with SB1:bin: or is a raw binary chunk)\n                            if (scannedData.startsWith('SB1:bin:') || (qrChunksBufferRef.current && qrChunksBufferRef.current.id)) {\n                                console.log('Binary chunk detected:', scannedData.substring(0, 50) + '...');\n                                \n                                // This is a binary chunk - add to buffer\n                                if (!qrChunksBufferRef.current.id) {\n                                    console.log('Initializing buffer for binary chunks');\n                                    // Initialize buffer for binary chunks\n                                    qrChunksBufferRef.current = { \n                                        id: `bin_${Date.now()}`, \n                                        // SB1 payloads are split into exactly four\n                                        // frames by the generator above. SBQ2 never\n                                        // reaches here \u2014 it is one frame and is\n                                        // handled at the top of this function.\n                                        total: 4,\n                                        seen: new Set(), \n                                        items: [],\n                                        lastUpdateMs: Date.now()\n                                    };\n                                }\n                                \n                                // Add chunk to buffer (use data hash as identifier)\n                                const chunkHash = scannedData.substring(0, 50); // Use first 50 chars as hash\n                                \n                                // Check if this chunk was already scanned\n                                if (qrChunksBufferRef.current.seen.has(chunkHash)) {\n                                    console.log(`Chunk already scanned, ignoring...`);\n                                    return Promise.resolve(false);\n                                }\n                                \n                                qrChunksBufferRef.current.seen.add(chunkHash);\n                                qrChunksBufferRef.current.items.push(scannedData);\n                                qrChunksBufferRef.current.lastUpdateMs = Date.now();\n                                \n                                // Emit progress and force re-render\n                                try {\n                                    const uniqueCount = qrChunksBufferRef.current.seen.size;\n                                    document.dispatchEvent(new CustomEvent('qr-scan-progress', { \n                                        detail: { \n                                            id: qrChunksBufferRef.current.id, \n                                            seq: uniqueCount, \n                                            total: qrChunksBufferRef.current.total \n                                        } \n                                    }));\n                                    \n                                    // Force re-render to update progress indicator\n                                    setQrFramesTotal(qrChunksBufferRef.current.total);\n                                    setQrFrameIndex(uniqueCount);\n                                } catch {}\n                                \n                                // Check if we have all chunks\n                                const isComplete = qrChunksBufferRef.current.seen.size >= qrChunksBufferRef.current.total;\n                                console.log(`Chunks collected: ${qrChunksBufferRef.current.seen.size}/${qrChunksBufferRef.current.total}, complete: ${isComplete}`);\n                                \n                                if (!isComplete) {\n                                    // Keep scanner open for more chunks\n                                    console.log(`Scanned chunk ${qrChunksBufferRef.current.seen.size}/${qrChunksBufferRef.current.total}, waiting for more...`);\n                                    return Promise.resolve(false);\n                                }\n                                \n                                // All chunks collected - reconstruct binary data\n                                try {\n                                    const fullBinaryData = qrChunksBufferRef.current.items.join('');\n                                    // Store the original binary data, not decoded JSON\n                                    if (showOfferStep) {\n                                        setAnswerInput(fullBinaryData);\n                                    } else {\n                                        setOfferInput(fullBinaryData);\n                                    }\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: 'All binary chunks captured. Payload reconstructed.', \n                                        type: 'success' \n                                    }]);\n                                    \n                                    // Clear buffer and close scanner\n                                    qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                    setShowQRScannerModal(false);\n                                    return Promise.resolve(true);\n                                } catch (e) {\n                                    console.warn('Binary chunks reconstruction failed:', e);\n                                    return Promise.resolve(false);\n                                }\n                            }\n                            \n                            // Check if this might be a binary chunk (long string without JSON structure)\n                            if (scannedData.length > 100 && !scannedData.startsWith('{') && !scannedData.startsWith('[')) {\n                                console.log('Detected potential binary chunk (long non-JSON string):', scannedData.substring(0, 50) + '...');\n                                \n                                // Initialize buffer if not exists\n                                if (!qrChunksBufferRef.current.id) {\n                                    console.log('Initializing buffer for potential binary chunks');\n                                    qrChunksBufferRef.current = { \n                                        id: `bin_${Date.now()}`, \n                                        // SB1 payloads are split into exactly four\n                                        // frames by the generator above. SBQ2 never\n                                        // reaches here \u2014 it is one frame and is\n                                        // handled at the top of this function.\n                                        total: 4,\n                                        seen: new Set(), \n                                        items: [],\n                                        lastUpdateMs: Date.now()\n                                    };\n                                }\n                                \n                                // Add chunk to buffer (use data hash as identifier)\n                                const chunkHash = scannedData.substring(0, 50); // Use first 50 chars as hash\n                                \n                                // Check if this chunk was already scanned\n                                if (qrChunksBufferRef.current.seen.has(chunkHash)) {\n                                    console.log(`Chunk already scanned, ignoring...`);\n                                    return Promise.resolve(false);\n                                }\n                                \n                                qrChunksBufferRef.current.seen.add(chunkHash);\n                                qrChunksBufferRef.current.items.push(scannedData);\n                                qrChunksBufferRef.current.lastUpdateMs = Date.now();\n                                \n                                // Force re-render to update progress indicator\n                                try {\n                                    const uniqueCount = qrChunksBufferRef.current.seen.size;\n                                    document.dispatchEvent(new CustomEvent('qr-scan-progress', { \n                                        detail: { \n                                            id: qrChunksBufferRef.current.id, \n                                            seq: uniqueCount, \n                                            total: qrChunksBufferRef.current.total \n                                        } \n                                    }));\n                                    \n                                    // Force re-render to update progress indicator\n                                    setQrFramesTotal(qrChunksBufferRef.current.total);\n                                    setQrFrameIndex(uniqueCount);\n                                } catch {}\n                                \n                                // Check if we have all chunks\n                                const isComplete = qrChunksBufferRef.current.seen.size >= qrChunksBufferRef.current.total;\n                                console.log(`Chunks collected: ${qrChunksBufferRef.current.seen.size}/${qrChunksBufferRef.current.total}, complete: ${isComplete}`);\n                                \n                                if (!isComplete) {\n                                    // Keep scanner open for more chunks\n                                    console.log(`Scanned chunk ${qrChunksBufferRef.current.seen.size}/${qrChunksBufferRef.current.total}, waiting for more...`);\n                                    return Promise.resolve(false);\n                                }\n                                \n                                // All chunks collected - reconstruct binary data\n                                try {\n                                    const fullBinaryData = qrChunksBufferRef.current.items.join('');\n                                    // Store the original binary data, not decoded JSON\n                                    if (showOfferStep) {\n                                        setAnswerInput(fullBinaryData);\n                                    } else {\n                                        setOfferInput(fullBinaryData);\n                                    }\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: 'All binary chunks captured. Payload reconstructed.', \n                                        type: 'success' \n                                    }]);\n                                    \n                                    // Clear buffer and close scanner\n                                    qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                    setShowQRScannerModal(false);\n                                    return Promise.resolve(true);\n                                } catch (e) {\n                                    console.warn('Binary chunks reconstruction failed:', e);\n                                    return Promise.resolve(false);\n                                }\n                            }\n                            \n                            // Single QR code - try to decode directly\n                            // Removed verbose debug log\n                            let parsedData;\n                            if (typeof window.decodeAnyPayload === 'function') {\n                                const any = window.decodeAnyPayload(scannedData);\n                                if (typeof any === 'string') {\n                                    parsedData = JSON.parse(any);\n                                } else {\n                                    parsedData = any; // object from binary\n                                }\n                            } else {\n                                const maybeDecompressed = (typeof window.decompressIfNeeded === 'function') ? window.decompressIfNeeded(scannedData) : scannedData;\n                                parsedData = JSON.parse(maybeDecompressed);\n                            }\n                            console.log('Decoded data:', parsedData);\n                            \n                            // QR with hdr/body: COSE or RAW/BIN animated frames\n                            if (parsedData.hdr && parsedData.body) {\n                                const { hdr } = parsedData;\n                                // Initialize/rotate buffer by id\n                                if (!qrChunksBufferRef.current.id || qrChunksBufferRef.current.id !== hdr.id) {\n                                    qrChunksBufferRef.current = { id: hdr.id, total: hdr.total || 1, seen: new Set(), items: [], lastUpdateMs: Date.now() };\n                                    try {\n                                        document.dispatchEvent(new CustomEvent('qr-scan-progress', { detail: { id: hdr.id, seq: 0, total: hdr.total || 1 } }));\n                                    } catch {}\n                                }\n                                // Deduplicate & record\n                                if (!qrChunksBufferRef.current.seen.has(hdr.seq)) {\n                                    qrChunksBufferRef.current.seen.add(hdr.seq);\n                                    qrChunksBufferRef.current.items.push(scannedData);\n                                    qrChunksBufferRef.current.lastUpdateMs = Date.now();\n                                }\n                                // Emit progress based on unique frames captured\n                                try {\n                                    const uniqueCount = qrChunksBufferRef.current.seen.size;\n                                    document.dispatchEvent(new CustomEvent('qr-scan-progress', { detail: { id: hdr.id, seq: uniqueCount, total: qrChunksBufferRef.current.total || hdr.total || 0 } }));\n                                } catch {}\n                                const isComplete = qrChunksBufferRef.current.seen.size >= (qrChunksBufferRef.current.total || 1);\n                                if (!isComplete) {\n                                    // Explicitly keep scanner open\n                                    return Promise.resolve(false);\n                                }\n                                // Completed: decide RAW vs BIN vs COSE\n                                if (hdr.rt === 'raw') {\n                                    try {\n                                        // Sort by seq and concatenate bodies\n                                        const parts = qrChunksBufferRef.current.items\n                                            .map(s => JSON.parse(s))\n                                            .sort((a, b) => (a.hdr.seq || 0) - (b.hdr.seq || 0))\n                                            .map(p => p.body || '');\n                                        const fullText = parts.join('');\n                                        const payloadObj = JSON.parse(fullText);\n                                        if (showOfferStep) {\n                                            setAnswerInput(JSON.stringify(payloadObj, null, 2));\n                                        } else {\n                                            setOfferInput(JSON.stringify(payloadObj, null, 2));\n                                        }\n                                        setMessages(prev => [...prev, { message: 'All frames captured. RAW payload reconstructed.', type: 'success' }]);\n                                        try { document.dispatchEvent(new CustomEvent('qr-scan-complete', { detail: { id: hdr.id } })); } catch {}\n                                        // Close scanner from caller by returning true\n                                        qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                        setShowQRScannerModal(false);\n                                        return Promise.resolve(true);\n                                    } catch (e) {\n                                        console.warn('RAW multi-frame reconstruction failed:', e);\n                                        return Promise.resolve(false);\n                                    }\n                                } else if (hdr.rt === 'bin') {\n                                    try {\n                                        const parts = qrChunksBufferRef.current.items\n                                            .map(s => JSON.parse(s))\n                                            .sort((a, b) => (a.hdr.seq || 0) - (b.hdr.seq || 0))\n                                            .map(p => p.body || '');\n                                        const fullText = parts.join(''); // SB1:bin:...\n                                        let payloadObj;\n                                        if (typeof window.decodeAnyPayload === 'function') {\n                                            const any = window.decodeAnyPayload(fullText);\n                                            payloadObj = (typeof any === 'string') ? JSON.parse(any) : any;\n                                        } else {\n                                            payloadObj = JSON.parse(fullText);\n                                        }\n                                        if (showOfferStep) {\n                                            setAnswerInput(JSON.stringify(payloadObj, null, 2));\n                                        } else {\n                                            setOfferInput(JSON.stringify(payloadObj, null, 2));\n                                        }\n                                        setMessages(prev => [...prev, { message: 'All frames captured. BIN payload reconstructed.', type: 'success' }]);\n                                        try { document.dispatchEvent(new CustomEvent('qr-scan-complete', { detail: { id: hdr.id } })); } catch {}\n                                        qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                        setShowQRScannerModal(false);\n                                        return Promise.resolve(true);\n                                    } catch (e) {\n                                        console.warn('BIN multi-frame reconstruction failed:', e);\n                                        return Promise.resolve(false);\n                                    }\n                                } else if (window.receiveAndProcess) {\n                                    try {\n                                        const results = await window.receiveAndProcess(qrChunksBufferRef.current.items);\n                                    if (results.length > 0) {\n                                        const { payloadObj } = results[0];\n                                        if (showOfferStep) {\n                                            setAnswerInput(JSON.stringify(payloadObj, null, 2));\n                                        } else {\n                                            setOfferInput(JSON.stringify(payloadObj, null, 2));\n                                            }\n                                            setMessages(prev => [...prev, { message: 'All frames captured. COSE payload reconstructed.', type: 'success' }]);\n                                            try { document.dispatchEvent(new CustomEvent('qr-scan-complete', { detail: { id: hdr.id } })); } catch {}\n                                            qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                            setShowQRScannerModal(false);\n                                            return Promise.resolve(true);\n                                        }\n                                    } catch (e) {\n                                        console.warn('COSE multi-chunk processing failed:', e);\n                                    }\n                                    return Promise.resolve(false);\n                                } else {\n                                    return Promise.resolve(false);\n                                }\n                            }\n                            \n                            // Check if this is a template-based QR code\n                            if (parsedData.type === 'enhanced_secure_offer_template') {\n                                console.log('QR scan: Template-based offer detected, reconstructing...');\n                                const fullOffer = reconstructFromTemplate(parsedData);\n                                \n                                // Determine which input to populate based on current mode\n                                if (showOfferStep) {\n                                    // In \"Waiting for peer's response\" mode - populate answerInput\n                                    setAnswerInput(JSON.stringify(fullOffer, null, 2));\n                                    console.log('\uD83D\uDCF1 Template data populated to answerInput (waiting for response mode)');\n                                } else {\n                                    // In \"Paste secure invitation\" mode - populate offerInput\n                                    setOfferInput(JSON.stringify(fullOffer, null, 2));\n                                    console.log('\uD83D\uDCF1 Template data populated to offerInput (paste invitation mode)');\n                                }\n                                setMessages(prev => [...prev, {\n                                    message: '\uD83D\uDCF1 QR code scanned successfully! Full offer reconstructed from template.',\n                                    type: 'success'\n                                }]);\n                                setShowQRScannerModal(false); // Close QR scanner modal\n                                return true;\n                            }\n                            // Reference-based QR codes are no longer produced or read:\n                            // the payload they pointed at lived in the *sender's*\n                            // localStorage, so a scan on the peer's device never had\n                            // anything to resolve, and the records leaked the session's\n                            // SDP, keys and SAS code onto disk forever. See the note\n                            // where createQRReference used to be.\n                            else if (parsedData.type === 'secure_offer_reference') {\n                                setMessages(prev => [...prev, {\n                                    message: t('err.retiredQr'),\n                                    type: 'error'\n                                }]);\n                                return false;\n                            } else {\n                                // If payload was compressed, it's already decompressed above; keep legacy warning only when clearly incomplete\n                                if (!parsedData.sdp && parsedData.type === 'enhanced_secure_offer') {\n                                    setMessages(prev => [...prev, {\n                                        message: t('err.compressedQrNote'),\n                                        type: 'warning'\n                                    }]);\n                                }\n                                \n                                // Determine which input to populate based on current mode\n                                if (showOfferStep) {\n                                    // In \"Waiting for peer's response\" mode - populate answerInput\n                                    console.log('QR scan: Populating answerInput with:', parsedData);\n                                    setAnswerInput(JSON.stringify(parsedData, null, 2));\n                                } else {\n                                    // In \"Paste secure invitation\" mode - populate offerInput\n                                    console.log('QR scan: Populating offerInput with:', parsedData);\n                                    setOfferInput(JSON.stringify(parsedData, null, 2));\n                                }\n                                setMessages(prev => [...prev, {\n                                    message: '\uD83D\uDCF1 QR code scanned successfully!',\n                                    type: 'success'\n                                }]);\n                                setShowQRScannerModal(false);\n                                return true;\n                            }\n                        } catch (error) {\n                            // If not JSON, use as plain text\n                            if (showOfferStep) {\n                                // In \"Waiting for peer's response\" mode - populate answerInput\n                                setAnswerInput(scannedData);\n                            } else {\n                                // In \"Paste secure invitation\" mode - populate offerInput\n                                setOfferInput(scannedData);\n                            }\n                            setMessages(prev => [...prev, {\n                                message: '\uD83D\uDCF1 QR code scanned successfully!',\n                                type: 'success'\n                            }]);\n                            setShowQRScannerModal(false);\n                            return true;\n                        }\n                    };\n\n\n\n        \n                    const handleCreateOffer = async () => {\n                        try {\n                            // All security features are enabled by default\n                            setIsGeneratingKeys(true);\n                            setOfferData('');\n                            setShowOfferStep(false);\n                            setShowQRCode(false);\n                            setQrCodeUrl('');\n                            \n                            const offer = await webrtcManagerRef.current.createSecureOffer();\n                            \n                            // Store offer data directly (no encryption needed with SAS)\n                            setOfferData(offer);\n                            setShowOfferStep(true);\n                            \n                            // Generate QR code with binary format and chunking\n                            const offerString = typeof offer === 'object' ? JSON.stringify(offer) : offer;\n                            try {\n                                if (typeof window.encodeBinaryToPrefixed === 'function') {\n                                    const bin = window.encodeBinaryToPrefixed(offerString);\n                                    // Force chunking into 4 parts - split binary data directly\n                                    const TARGET_CHUNKS = 4;\n                                    let total = TARGET_CHUNKS;\n                                    let FRAME_MAX = Math.max(200, Math.ceil(bin.length / TARGET_CHUNKS));\n                                    if (FRAME_MAX <= 0) FRAME_MAX = 200;\n                                    \n                                    // Ensure we don't exceed TARGET_CHUNKS\n                                    if (bin.length <= FRAME_MAX) {\n                                        total = 1;\n                                        FRAME_MAX = bin.length;\n                                    } else {\n                                        // Recalculate to ensure exactly TARGET_CHUNKS parts\n                                        FRAME_MAX = Math.ceil(bin.length / TARGET_CHUNKS);\n                                        total = TARGET_CHUNKS;\n                                    }\n                                    \n                                    const id = `bin_${Date.now()}_${Math.random().toString(36).slice(2)}`;\n                                    const chunks = [];\n                                    for (let i = 0; i < total; i++) {\n                                        const seq = i + 1;\n                                        const part = bin.slice(i * FRAME_MAX, (i + 1) * FRAME_MAX);\n                                        // Store binary chunks directly without JSON wrapper\n                                        chunks.push(part);\n                                    }\n                                    \n                                    // Seed first frame and start auto-advance immediately\n                                    const isDesktop = (typeof window !== 'undefined') && ((window.innerWidth || 0) >= 1024);\n                                    const QR_SIZE = isDesktop ? 720 : 512;\n                                    if (window.generateQRCode && chunks.length > 0) {\n                                        const firstUrl = await window.generateQRCode(chunks[0], { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                        if (firstUrl) setQrCodeUrl(firstUrl);\n                                    }\n                                    \n                                    // Store precomputed chunks to ref, ready for animation\n                                    try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                    qrAnimationRef.current = { timer: null, chunks, idx: 0, active: true };\n                                    setQrFramesTotal(chunks.length);\n                                    setQrFrameIndex(1);\n                                    setQrManualMode(false);\n                                    \n                                    // Start auto-advance loop for Offer immediately\n                                    const intervalMs = 3000;\n                                    qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                                    \n                                    // Show QR immediately for Offer flow\n                                    try { setShowQRCode(true); } catch {}\n                                } else {\n                                    // Fallback to single QR\n                                    await generateQRCode(offer);\n                                    try { setShowQRCode(true); } catch {}\n                                }\n                            } catch (e) {\n                                console.warn('Offer QR generation failed:', e);\n                            }\n        \n                            const existingMessages = messages.filter(m => \n                                m.type === 'system' && \n                                (m.message.includes(t('flow.invitationCreated')) || m.message.includes(t('flow.sendEncryptedCode')))\n                            );\n                            \n                            if (existingMessages.length === 0) {\n                                setMessages(prev => [...prev, { \n                                    message: t('flow.invitationCreatedBang'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n                                \n                                setMessages(prev => [...prev, { \n                                    message: t('flow.sendInvitation'),\n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n        \n                            }\n        \n                            if (!window.isUpdatingSecurity) {\n                                updateSecurityLevel().catch(console.error);\n                            }\n                                                } catch (error) {\n                                    setMessages(prev => [...prev, { \n                                        message: `Error creating invitation: ${error.message}`, \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n                                } finally {\n                                    setIsGeneratingKeys(false);\n                                }\n                    };\n        \n                    const handleCreateAnswer = async () => {\n                        try {\n                            \n                            if (!offerInput.trim()) {\n                                setMessages(prev => [...prev, { \n                                    message: t('err.needInvitation'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n                                return;\n                            }\n        \n                            try {\n                                setMessages(prev => [...prev, { \n                                    message: t('flow.processingInvitation'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n        \n                                let offer;\n                                try {\n                                    // Prefer binary decode first, then gzip JSON\n                                    if (typeof window.decodeAnyPayload === 'function') {\n                                        const any = window.decodeAnyPayload(offerInput.trim());\n                                        offer = (typeof any === 'string') ? JSON.parse(any) : any;\n                                    } else {\n                                        const rawText = (typeof window.decompressIfNeeded === 'function') ? window.decompressIfNeeded(offerInput.trim()) : offerInput.trim();\n                                        offer = JSON.parse(rawText);\n                                    }\n                                } catch (parseError) {\n                                    throw new Error(`Invalid invitation format: ${parseError.message}`);\n                                }\n        \n                                    if (!offer || typeof offer !== 'object') {\n                                        throw new Error('The invitation must be an object');\n                                    }\n        \n                                    // Support both compact and legacy offer formats\n                                    const isValidOfferType = (offer.t === 'offer') || (offer.type === 'enhanced_secure_offer');\n                                    if (!isValidOfferType) {\n                                        throw new Error('Invalid invitation type. Expected offer or enhanced_secure_offer');\n                                    }\n\n                                    const answer = await webrtcManagerRef.current.createSecureAnswer(offer);\n                                    \n                                    // Store answer data directly (no encryption needed with SAS)\n                                    setAnswerData(answer);\n                                    setShowAnswerStep(true);\n                                    \n                                    // Generate QR code with binary format and chunking\n                                    const answerString = typeof answer === 'object' ? JSON.stringify(answer) : answer;\n                                    try {\n                                        if (typeof window.encodeBinaryToPrefixed === 'function') {\n                                            const bin = window.encodeBinaryToPrefixed(answerString);\n                                            // Force chunking into 4 parts - split binary data directly\n                                            const TARGET_CHUNKS = 4;\n                                            let total = TARGET_CHUNKS;\n                                            let FRAME_MAX = Math.max(200, Math.ceil(bin.length / TARGET_CHUNKS));\n                                            if (FRAME_MAX <= 0) FRAME_MAX = 200;\n                                            \n                                            // Ensure we don't exceed TARGET_CHUNKS\n                                            if (bin.length <= FRAME_MAX) {\n                                                total = 1;\n                                                FRAME_MAX = bin.length;\n                                            } else {\n                                                // Recalculate to ensure exactly TARGET_CHUNKS parts\n                                                FRAME_MAX = Math.ceil(bin.length / TARGET_CHUNKS);\n                                                total = TARGET_CHUNKS;\n                                            }\n                                            \n                                            const id = `ans_${Date.now()}_${Math.random().toString(36).slice(2)}`;\n                                            const chunks = [];\n                                            for (let i = 0; i < total; i++) {\n                                                const seq = i + 1;\n                                                const part = bin.slice(i * FRAME_MAX, (i + 1) * FRAME_MAX);\n                                                // Store binary chunks directly without JSON wrapper\n                                                chunks.push(part);\n                                            }\n                                            \n                                            const isDesktop = (typeof window !== 'undefined') && ((window.innerWidth || 0) >= 1024);\n                                            const QR_SIZE = isDesktop ? 720 : 512;\n                                            if (window.generateQRCode && chunks.length > 0) {\n                                                const firstUrl = await window.generateQRCode(chunks[0], { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                                if (firstUrl) setQrCodeUrl(firstUrl);\n                                            }\n                                            \n                                            try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                            qrAnimationRef.current = { timer: null, chunks, idx: 0, active: true };\n                                            setQrFramesTotal(chunks.length);\n                                            setQrFrameIndex(1);\n                                            setQrManualMode(false);\n                                            \n                                            const intervalMs = 3000;\n                                            qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                                            \n                                            // Show QR immediately for Answer flow\n                                            try { setShowQRCode(true); } catch {}\n                                        } else {\n                                            // Fallback to single QR\n                                            await generateQRCode(answer);\n                                            try { setShowQRCode(true); } catch {}\n                                        }\n                                    } catch (e) {\n                                        console.warn('Answer QR generation failed:', e);\n                                    }\n                                    \n                                    // Mark generated answers as active immediately.\n                                    // `answerInput` is empty on the joiner path\n                                    // because the response was created locally,\n                                    // not pasted by the user.\n                                    if (typeof markAnswerCreated === 'function') {\n                                        markAnswerCreated();\n                                    }\n\n        \n                                const existingResponseMessages = messages.filter(m => \n                                    m.type === 'system' && \n                                    (m.message.includes(t('flow.responseCreated')) || m.message.includes(t('flow.sendTheResponse')))\n                                );\n                                \n                                if (existingResponseMessages.length === 0) {\n                                    setMessages(prev => [...prev, { \n                                        message: t('flow.responseCreatedBang'), \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: t('flow.sendResponse'), \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n        \n                                }\n                                    \n                                    // Update security level after creating answer\n                                    if (!window.isUpdatingSecurity) {\n                                        updateSecurityLevel().catch(console.error);\n                                    }\n                                } catch (error) {\n                                    console.error('Error in handleCreateAnswer:', error);\n                                    setMessages(prev => [...prev, { \n                                        message: `Error processing the invitation: ${error.message}`, \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n                                }\n                        } catch (error) {\n                            console.error('Error in handleCreateAnswer:', error);\n                            setMessages(prev => [...prev, { \n                                message: `Invitation processing error: ${error.message}`, \n                                type: 'system',\n                                id: Date.now(),\n                                timestamp: Date.now()\n                            }]);\n                        }\n                    };\n        \n                    const handleConnect = async () => {\n                        try {\n                            if (!answerInput.trim()) {\n                                setMessages(prev => [...prev, { \n                                    message: t('err.needResponse'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n                                return;\n                            }\n        \n                            try {\n                                setMessages(prev => [...prev, { \n                                    message: t('flow.processingResponse'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n        \n                                let answer;\n                                try {\n                                    // Prefer binary decode first, then gzip JSON\n                                    if (typeof window.decodeAnyPayload === 'function') {\n                                        const anyAnswer = window.decodeAnyPayload(answerInput.trim());\n                                        answer = (typeof anyAnswer === 'string') ? JSON.parse(anyAnswer) : anyAnswer;\n                                    } else {\n                                        const rawText = (typeof window.decompressIfNeeded === 'function') ? window.decompressIfNeeded(answerInput.trim()) : answerInput.trim();\n                                        answer = JSON.parse(rawText);\n                                    }\n                                } catch (parseError) {\n                                    throw new Error(`Invalid response format: ${parseError.message}`);\n                                }\n        \n                                    if (!answer || typeof answer !== 'object') {\n                                        throw new Error('The response must be an object');\n                                    }\n        \n                                    // Support both compact and legacy formats\n                                    const answerType = answer.t || answer.type;\n                                    if (!answerType || (answerType !== 'answer' && answerType !== 'enhanced_secure_answer')) {\n                                        throw new Error('Invalid response type. Expected answer or enhanced_secure_answer');\n                                    }\n\n                                    await webrtcManagerRef.current.handleSecureAnswer(answer);\n                                    \n                                    // All security features are enabled by default - no session activation needed\n                                    if (pendingSession) {\n                                            setPendingSession(null);\n                                            setMessages(prev => [...prev, { \n                                            message: `All security features enabled by default`, \n                                                type: 'system',\n                                                id: Date.now(),\n                                                timestamp: Date.now()\n                                            }]);\n                                    }\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: t('flow.finalizing'), \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n                                    \n                                    // Update security level after handling answer\n                                    if (!window.isUpdatingSecurity) {\n                                        updateSecurityLevel().catch(console.error);\n                                    }\n                                } catch (error) {\n                                    console.error('Error in handleConnect inner try:', error);\n                                    \n                                    // \u0411\u043E\u043B\u0435\u0435 \u0434\u0435\u0442\u0430\u043B\u044C\u043D\u0430\u044F \u043E\u0431\u0440\u0430\u0431\u043E\u0442\u043A\u0430 \u043E\u0448\u0438\u0431\u043E\u043A\n                                    let errorMessage = t('err.setupError');\n                                    if (error.message.includes('CRITICAL SECURITY FAILURE')) {\n                                        if (error.message.includes('ECDH public key structure')) {\n                                            errorMessage = t('err.responseNoKey');\n                                        } else if (error.message.includes('ECDSA public key structure')) {\n                                            errorMessage = t('err.responseNoSignKey');\n                                        } else {\n                                            errorMessage = t('err.securityValidation');\n                                        }\n                                    } else if (error.message.includes('too old') || error.message.includes('replay')) {\n                                        errorMessage = t('err.responseOutdated');\n                                    } else if (error.message.includes('MITM') || error.message.includes('signature')) {\n                                        errorMessage = t('err.securityBreach');\n                                    } else if (error.message.includes('Invalid') || error.message.includes('format')) {\n                                        errorMessage = t('err.responseFormat');\n                                    } else {\n                                        errorMessage = ` ${error.message}`;\n                                    }\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: errorMessage, \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now(),\n                                        showRetryButton: true\n                                    }]);\n\n                                    if (!error.message.includes('too old') && !error.message.includes('replay')) {\n                                        setPendingSession(null);\n                                        setSessionTimeLeft(0);\n                                    }\n\n                                    setConnectionStatus('failed');\n                                    \n                                } \n                        } catch (error) {\n                            console.error('Error in handleConnect outer try:', error);\n\n                            let errorMessage = t('err.setupError');\n                            if (error.message.includes('CRITICAL SECURITY FAILURE')) {\n                                if (error.message.includes('ECDH public key structure')) {\n                                    errorMessage = t('err.responseNoKey');\n                                } else if (error.message.includes('ECDSA public key structure')) {\n                                    errorMessage = t('err.responseNoSignKey');\n                                } else {\n                                    errorMessage = t('err.securityValidation');\n                                }\n                            } else if (error.message.includes('too old') || error.message.includes('replay')) {\n                                errorMessage = t('err.responseOutdated');\n                            } else if (error.message.includes('MITM') || error.message.includes('signature')) {\n                                errorMessage = t('err.securityBreach');\n                            } else if (error.message.includes('Invalid') || error.message.includes('format')) {\n                                errorMessage = t('err.responseFormat');\n                            } else {\n                                errorMessage = `${error.message}`;\n                            }\n                            \n                            setMessages(prev => [...prev, { \n                                message: errorMessage, \n                                type: 'system',\n                                id: Date.now(),\n                                timestamp: Date.now(),\n                                showRetryButton: true\n                            }]);\n\n                            if (!error.message.includes('too old') && !error.message.includes('replay')) {\n                                setPendingSession(null);\n                                setSessionTimeLeft(0);\n                            }\n\n                            setConnectionStatus('failed');\n                        }\n                    };\n        \n                    const handleVerifyConnection = async (userCode, isValid = true) => {\n                        if (isValid) {\n                            webrtcManagerRef.current.confirmVerification(userCode);\n                            // Mark local verification as confirmed\n                            setLocalVerificationConfirmed(true);\n                            \n                            // Initialize notification integration if permission was granted\n                            try {\n                                if (window.NotificationIntegration && webrtcManagerRef.current && !notificationIntegrationRef.current) {\n                                    const integration = new window.NotificationIntegration(webrtcManagerRef.current);\n                                    await integration.init();\n                                    \n                                    // Store reference for cleanup\n                                    notificationIntegrationRef.current = integration;\n                                    \n                                    \n                                    // Check if permission was already granted\n                                    const status = integration.getStatus();\n                                    if (status.permission === 'granted') {\n                                        setMessages(prev => [...prev, { \n                                            message: '\u2713 Notifications enabled - you will receive alerts when the tab is inactive', \n                                            type: 'system',\n                                            id: Date.now(),\n                                            timestamp: Date.now()\n                                        }]);\n                                    } else {\n                                        setMessages(prev => [...prev, { \n                                            message: '\u2139 Notifications disabled - you can enable them using the button on the main page', \n                                            type: 'system',\n                                            id: Date.now(),\n                                            timestamp: Date.now()\n                                        }]);\n                                    }\n                                } else if (notificationIntegrationRef.current) {\n                                } else {\n                                    // Handle error silently\n                                }\n                            } catch (error) {\n                                console.warn('Failed to initialize notifications:', error);\n                                // Don't show error to user, notifications are optional\n                            }\n                        } else {\n                            setMessages(prev => [...prev, { \n                                message: ' Verification rejected. The connection is unsafe! Session reset..', \n                                type: 'system',\n                                id: Date.now(),\n                                timestamp: Date.now()\n                            }]);\n                            \n                            // Clear verification states\n                            setLocalVerificationConfirmed(false);\n                            setRemoteVerificationConfirmed(false);\n                            setBothVerificationsConfirmed(false);\n                            setShowVerification(false);\n                            setVerificationCode('');\n                            \n                            // Reset UI to initial state\n                            setConnectionStatus('disconnected');\n                            setOfferData('');\n                            setAnswerData('');\n                            setOfferInput('');\n                            setAnswerInput('');\n                            setShowOfferStep(false);\n                            setShowAnswerStep(false);\n                            setKeyFingerprint('');\n                            setSecurityLevel(null);\n                            setIsVerified(false);\n                            setMessages([]);\n                            \n                            setSessionTimeLeft(0);\n                            setPendingSession(null);\n                            \n                            // Dispatch disconnected event for SessionTimer\n                            document.dispatchEvent(new CustomEvent('disconnected'));\n                            \n                            handleDisconnect();\n                        }\n                    };\n        \n                    const handleSendMessage = async () => {\n                        if (!messageInput.trim()) {\n                            return;\n                        }\n        \n                        if (!webrtcManagerRef.current) {\n                            return;\n                        }\n\n                        const baseTextEarly = messageInput.trim();\n                        const midEarly = `m_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;\n\n                        // Store-and-forward guard.\n                        //\n                        // The decision is made from the CHANNEL, never from the browser's\n                        // idea of connectivity. `navigator.onLine` and the offline/online\n                        // events report whether a network interface exists, not whether\n                        // anything can be reached \u2014 and a phone that was frozen misses the\n                        // 'online' edge outright. When that happened this side went on\n                        // queueing forever: every message showed one tick and none was ever\n                        // transmitted, while incoming messages kept arriving normally,\n                        // because receiving does not pass through here.\n                        //\n                        // The data channel is the only authority on whether a P2P message\n                        // can go out: open, verified, and not mid-repair.\n                        const mgr = webrtcManagerRef.current;\n                        const channelUsable = mgr?.isConnected?.() === true\n                            && mgr?.isReconnecting?.() !== true;\n                        if (!channelUsable && mgr?.isConnected) {\n                            // Store-and-forward: show one check (sent), keep it in the\n                            // conversation at its original time, and transmit on reconnect.\n                            const outTextOff = codeMode ? '```\\n' + baseTextEarly + '\\n```' : baseTextEarly;\n                            const tsOff = Date.now();\n                            const metaOff = { mid: midEarly, ts: tsOff };\n                            if (viewOnceMode) { metaOff.once = true; metaOff.onceTtl = viewOnceTtl; }\n                            if (disappearTtl > 0) metaOff.ttl = disappearTtl;\n                            const echoOpts = { mid: midEarly, status: 'sent', timestamp: tsOff };\n                            if (disappearTtl > 0) echoOpts.expiresAt = tsOff + disappearTtl * 1000;\n                            addMessageWithAutoScroll(outTextOff, 'sent', echoOpts);\n                            // Queue on the ACTIVE session's outgoing queue (created in createSession);\n                            // guard in case the entry is missing so the echo never gets lost.\n                            const q = queuesRef.current.get(activeIdRef.current);\n                            if (q) q.outgoing.push({ outText: outTextOff, meta: metaOff, mid: midEarly });\n                            setMessageInput('');\n                            if (codeMode) setCodeMode(false);\n                            if (viewOnceMode) setViewOnceMode(false);\n                            return;\n                        }\n\n                        // No manager at all \u2014 there is no session to queue against. This\n                        // used to `return` in silence: the typed text stayed in the box,\n                        // nothing was sent, and nothing said why.\n                        if (!channelUsable) {\n                            addMessageWithAutoScroll(t('chat.notSentReason'), 'system');\n                            return;\n                        }\n\n                        try {\n                            const baseText = baseTextEarly;\n                            // Code mode wraps the text in a fenced block so both sides render\n                            // a code window with a copy button (the marker travels as text).\n                            const outText = codeMode ? '```\\n' + baseText + '\\n```' : baseText;\n\n                            // Shared id lets unsend/disappearing/receipts reference the\n                            // same message on both peers.\n                            const mid = midEarly;\n                            const meta = { mid, ts: Date.now() };        // ts \u2192 recipient shows the original send time\n                            if (viewOnceMode) {                          // applies to the recipient\n                                meta.once = true;\n                                meta.onceTtl = viewOnceTtl;              // seconds visible after opening\n                            }\n                            if (disappearTtl > 0) meta.ttl = disappearTtl; // applies to both sides\n\n                            // Local echo: sender sees their own text normally (view-once is a\n                            // recipient-side control), but disappearing also expires our copy.\n                            // Starts as \"sending\"; flips to \"sent\" once the channel accepts it\n                            // and \"delivered\" when the peer's receipt arrives.\n                            const localOpts = { mid, status: 'sending' };\n                            if (disappearTtl > 0) localOpts.expiresAt = Date.now() + disappearTtl * 1000;\n                            addMessageWithAutoScroll(outText, 'sent', localOpts);\n\n                            try {\n                                await webrtcManagerRef.current.sendMessage(outText, meta);\n                                // Reliable ordered data channel: a resolved send means the peer's\n                                // device received it \u2192 two grey ticks. The peer's read receipt\n                                // (onMessageDelivered) upgrades it to two green ticks ('read').\n                                updateMessageStatus(mid, 'delivered');\n                            } catch (sendErr) {\n                                updateMessageStatus(mid, 'failed');\n                                throw sendErr;\n                            }\n                            setMessageInput('');\n                            // Per-message toggles reset; disappearing stays as a sticky setting.\n                            if (codeMode) setCodeMode(false);\n                            if (viewOnceMode) setViewOnceMode(false);\n                        } catch (error) {\n                            const msg = String(error?.message || error);\n                            if (!/queued for sending|Data channel not ready/i.test(msg)) {\n                                addMessageWithAutoScroll(`Sending error: ${msg}`,'system');\n                            }\n                        }\n                    };\n\n                    // Send an encrypted voice note. The recorded audio rides the exact same\n                    // chunked + AES-GCM file-transfer pipeline as files (so it inherits the\n                    // audited E2E crypto); the duration + waveform peaks travel alongside so\n                    // both peers render the designed voice bubble with an upload/download ring.\n                    const handleSendVoice = async (blob, dur, bars) => {\n                        if (!blob || !webrtcManagerRef.current) return;\n\n                        // Normalise the mime to a bare, allow-listed audio type. The\n                        // recorder emits WAV (universally decodable); we still tolerate\n                        // other encodings defensively.\n                        const rawType = String(blob.type || '').toLowerCase();\n                        let mime = 'audio/wav';\n                        if (rawType.startsWith('audio/webm')) mime = 'audio/webm';\n                        else if (rawType.startsWith('audio/mp4') || rawType.startsWith('audio/x-m4a')) mime = 'audio/mp4';\n                        else if (rawType.startsWith('audio/ogg')) mime = 'audio/ogg';\n                        const ext = mime === 'audio/mp4' ? 'm4a' : (mime === 'audio/ogg' ? 'ogg' : (mime === 'audio/webm' ? 'webm' : 'wav'));\n                        const file = new File([blob], `voice-message.${ext}`, { type: mime });\n\n                        // Local, instantly-playable copy for the sender's own bubble.\n                        let localUrl = null;\n                        try { localUrl = URL.createObjectURL(blob); } catch (_) {}\n\n                        const reconnecting = webrtcManagerRef.current?.isReconnecting?.() === true;\n                        // Voice notes ride the chunked file-transfer path, which has no\n                        // store-and-forward queue \u2014 a partial transfer cannot be resumed\n                        // across a path repair. So they are refused rather than queued,\n                        // but the reason is stated accurately. Judged from the channel, not\n                        // from navigator.onLine, for the same reason as the text path.\n                        const notReady = reconnecting || webrtcManagerRef.current?.isConnected?.() !== true;\n                        if (notReady) {\n                            if (localUrl) { try { URL.revokeObjectURL(localUrl); } catch (_) {} }\n                            addMessageWithAutoScroll(\n                                reconnecting\n                                    ? t('err.voiceRestoring')\n                                    : t('err.voiceNeedsConnection'),\n                                'system'\n                            );\n                            return;\n                        }\n\n                        const voiceMeta = {\n                            dur: Math.max(1, Math.round(dur || 0)),\n                            bars: Array.isArray(bars) ? bars.map(n => Math.round(n * 1000) / 1000) : []\n                        };\n\n                        const localId = addMessageWithAutoScroll('', 'sent', {\n                            voice: { dur: voiceMeta.dur, bars: voiceMeta.bars, url: localUrl, transfer: { dir: 'up', pct: 0 } }\n                        });\n\n                        try {\n                            await webrtcManagerRef.current.sendFile(file, { voice: voiceMeta, uiId: localId });\n                            patchMessageById(localId, (m) => ({ voice: { ...(m.voice || {}), transfer: null } }));\n                        } catch (err) {\n                            patchMessageById(localId, (m) => ({ voice: { ...(m.voice || {}), transfer: null, error: true } }));\n                            const msg = String(err?.message || err);\n                            if (!/queued for sending|Data channel not ready/i.test(msg)) {\n                                addMessageWithAutoScroll(`Voice message failed: ${msg}`, 'system');\n                            }\n                        }\n                    };\n\n                    // Unsend: remove locally and ask the peer to drop it too.\n                    const handleUnsendMessage = React.useCallback((mid) => {\n                        if (!mid) return;\n                        setMessages(prev => prev.filter(m => String(m.mid) !== String(mid)));\n                        try { webrtcManagerRef.current?.sendMessageDelete?.(String(mid)); } catch (_) {}\n                    }, []);\n\n                    // View-once reveal timeout / disappearing expiry: wipe the content and\n                    // leave a \"This message has expired\" tombstone (per the design).\n                    const handleMessageExpire = React.useCallback((id) => {\n                        setMessages(prev => prev.map(m => m.id === id ? { ...m, expired: true, message: '', expiresAt: undefined } : m));\n                    }, []);\n\n                    // Panic wipe: clear the conversation, tear down the session and wipe keys.\n                    const handleClearData = () => {\n                        setOfferData('');\n                        setAnswerData('');\n                        setOfferInput('');\n                        setAnswerInput('');\n                        setShowOfferStep(false);\n                        setIsGeneratingKeys(false);\n\n                        if (!shouldPreserveAnswerData()) {\n                            setShowAnswerStep(false);\n                        }\n                        \n                        setShowVerification(false);\n                        setShowQRCode(false);\n                        setShowQRScanner(false);\n                        setShowQRScannerModal(false);\n                        // Clear QR scanner buffer\n                        qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n\n                        if (!shouldPreserveAnswerData()) {\n                            setQrCodeUrl('');\n                        }\n                        \n                        setVerificationCode('');\n                        setIsVerified(false);\n                        setKeyFingerprint('');\n                        setSecurityLevel(null);\n                        setConnectionStatus('disconnected');\n                        setMessages([]);\n                        setMessageInput('');\n                        \n                        // Clear verification states\n                        setLocalVerificationConfirmed(false);\n                        setRemoteVerificationConfirmed(false);\n                        setBothVerificationsConfirmed(false);\n                        \n                        // PAKE passwords removed - using SAS verification instead \n\n                        if (typeof console.clear === 'function') {\n                            console.clear();\n                        }\n                        \n                        // Cleanup session state\n                        setSessionTimeLeft(0);\n        \n                        setPendingSession(null);\n                        document.dispatchEvent(new CustomEvent('peer-disconnect'));\n                        // Session manager removed - all features enabled by default\n                    };\n        \n                    const handleIncomingDecision = React.useCallback(async (fileId, accepted) => {\n                        try {\n                            if (accepted) {\n                                await webrtcManagerRef.current?.acceptIncomingFile(fileId);\n                            } else {\n                                await webrtcManagerRef.current?.rejectIncomingFile(fileId);\n                            }\n                        } finally {\n                            setPendingIncomingFiles(prev => prev.filter(f => f.fileId !== fileId));\n                        }\n                    }, []);\n\n                    // Disconnect tears down ONLY the active session \u2014 its peerConnection, its\n                    // manager (with the manager's own key-wipe logic) and its notification\n                    // integration. Every other session keeps running untouched. If it was the\n                    // last session we immediately open a fresh blank one so the UI isn't empty.\n                    const handleDisconnect = () => {\n                        try {\n                            const id = activeIdRef.current;\n                            requestDonateScroll();\n                            setSessionTimeLeft(0);\n                            // Global lifecycle events (consumed by any remaining listeners).\n                            document.dispatchEvent(new CustomEvent('peer-disconnect'));\n                            document.dispatchEvent(new CustomEvent('disconnected'));\n                            document.dispatchEvent(new CustomEvent('session-cleanup', {\n                                detail: { timestamp: Date.now(), reason: 'manual_disconnect' }\n                            }));\n                            // Manual disconnect always wipes this chat's data and removes it; the\n                            // ensure-at-least-one-session effect re-opens the landing if it was the\n                            // last one. Siblings keep running untouched.\n                            destroySession(id);\n                            if (typeof console.clear === 'function') console.clear();\n                        } catch (error) {\n                            console.error('Error during disconnect:', error);\n                        }\n                    };\n        \n                    const handleSessionActivated = (session) => {\n                        let message;\n                        if (session.type === 'demo') {\n                            message = ` Demo session activated for 6 minutes. You can create invitations!`;\n                        } else {\n                            message = ` All security features enabled by default. You can create invitations!`;\n                        }\n                        \n                        addMessageWithAutoScroll(message, 'system');\n        \n                    };\n        \n                    // Announce a NEWLY established session only. Coming back from\n                    // 'reconnecting' is the same session resuming \u2014 re-announcing it would\n                    // claim a handshake that never happened and spam the transcript on every\n                    // flaky-network blip.\n                    const prevConnStatusRef = React.useRef(connectionStatus);\n                    React.useEffect(() => {\n                        const resumed = prevConnStatusRef.current === 'reconnecting';\n                        prevConnStatusRef.current = connectionStatus;\n                        if (connectionStatus === 'connected' && isVerified && !resumed) {\n                            addMessageWithAutoScroll(' Secure connection successfully established and verified! You can now communicate safely with full protection against MITM attacks and Perfect Forward Secrecy..', 'system');\n                        }\n                    }, [connectionStatus, isVerified]);\n        \n                    // Chat view requires an ACTIVE verified connection. On an UNRECOVERABLE drop\n                    // the manager clears its verification state (it must be re-established \u2014\n                    // there is no \"keep chatting while disconnected\" in this P2P design), so we\n                    // fall back to the setup screen, which is the re-establish path. The\n                    // conversation history stays in the session either way.\n                    //\n                    // 'reconnecting' is deliberately included: an ICE restart repairs only the\n                    // network path, leaving the keys and the SAS verification intact, so the\n                    // conversation must stay on screen. Throwing the user back to the connect\n                    // screen for a two-second NAT rebind would defeat the recovery entirely \u2014\n                    // the composer keeps working and queues (see the send path's offlineNow).\n                    // `?preview=chat` renders the chat layout with no connection behind it.\n                    // Declared here because the in-chat body class below depends on it.\n                    const previewMode = React.useMemo(() => {\n                        try { return new URLSearchParams(window.location.search).get('preview') === 'chat'; }\n                        catch { return false; }\n                    }, []);\n\n                    const isConnectedAndVerified = (connectionStatus === 'connected' || connectionStatus === 'verified' || connectionStatus === 'reconnecting') && isVerified;\n\n                    // A chat that ends \u2014 the peer leaves, the link drops for good \u2014 lands\n                    // back on the start page; bring the donation card into view there. Only\n                    // for the SAME session going from chatting to not: switching to another\n                    // tab's blank session is not an ending.\n                    const prevChatRef = React.useRef({ id: activeSessionId, live: isConnectedAndVerified });\n                    React.useEffect(() => {\n                        const prev = prevChatRef.current;\n                        prevChatRef.current = { id: activeSessionId, live: isConnectedAndVerified };\n                        if (prev.live && !isConnectedAndVerified && prev.id === activeSessionId) requestDonateScroll();\n                    }, [isConnectedAndVerified, activeSessionId]);\n\n                    // The PWA \"Install app\" pill is a landing-page affordance \u2014 hide it once\n                    // we're inside the chat (CSS: body.sb-in-chat #pwa-install-button).\n                    React.useEffect(() => {\n                        document.body.classList.toggle('sb-in-chat', isConnectedAndVerified || previewMode);\n                        return () => document.body.classList.remove('sb-in-chat');\n                    }, [isConnectedAndVerified, previewMode]);\n        \n                    React.useEffect(() => {\n                        // All security features are enabled by default - no session activation needed\n                        if (isConnectedAndVerified && pendingSession && connectionStatus !== 'failed') {\n                                setPendingSession(null);\n                            setSessionTimeLeft(0); \n                            addMessageWithAutoScroll(' All security features enabled by default', 'system');\n                        }\n                    }, [isConnectedAndVerified, pendingSession, connectionStatus]);\n\n                    // QR Scanner initialization\n                    React.useEffect(() => {\n                        if (showQRScannerModal && window.Html5Qrcode) {\n                            const html5Qrcode = new window.Html5Qrcode(\"qr-reader\");\n                            const config = { \n                                fps: 10\n                                // \u0423\u0431\u0438\u0440\u0430\u0435\u043C qrbox \u0447\u0442\u043E\u0431\u044B \u0438\u0441\u043F\u043E\u043B\u044C\u0437\u043E\u0432\u0430\u0442\u044C \u0432\u0441\u044E \u043E\u0431\u043B\u0430\u0441\u0442\u044C\n                            };\n\n                            let isScanning = true;\n\n                            html5Qrcode.start(\n                                { facingMode: \"environment\" }, // Use back camera\n                                config,\n                                (decodedText, decodedResult) => {\n                                    if (!isScanning) {\n                                        console.log('Scanner stopped, ignoring scan');\n                                        return;\n                                    }\n                                    \n                                    console.log('QR Code scanned:', decodedText);\n                                    console.log('Current buffer state:', qrChunksBufferRef.current);\n                                    \n                                    handleQRScan(decodedText).then((success) => {\n                                        console.log('QR scan result:', success);\n                                        if (success) {\n                                            // Successfully processed - stop scanner and close modal\n                                            console.log('Closing scanner and modal');\n                                            isScanning = false;\n                                            \n                                            // Stop scanner first, then clear\n                                            try {\n                                                console.log('Stopping scanner...');\n                                                html5Qrcode.stop().then(() => {\n                                                    console.log('Scanner stopped, clearing...');\n                                                    html5Qrcode.clear();\n                                                    setShowQRScannerModal(false);\n                                                }).catch((err) => {\n                                                    console.log('Error stopping scanner:', err);\n                                                    // Try to clear anyway\n                                                    try {\n                                                        html5Qrcode.clear();\n                                                    } catch (clearErr) {\n                                                        console.log('Error clearing scanner:', clearErr);\n                                                    }\n                                                    setShowQRScannerModal(false);\n                                                });\n                                            } catch (err) {\n                                                console.log('Error in scanner cleanup:', err);\n                                                setShowQRScannerModal(false);\n                                            }\n                                        } else {\n                                            console.log('Continuing to scan for more chunks...');\n                                        }\n                                    }).catch((error) => {\n                                        console.error('QR scan processing error:', error);\n                                        // Continue scanning on error\n                                    });\n                                },\n                                (error) => {\n                                    // Ignore scanning errors - continue scanning\n                                    if (isScanning) {\n                                        console.log('QR scan error (ignored):', error);\n                                    }\n                                }\n                            ).catch((err) => {\n                                console.error('QR Scanner start error:', err);\n                                // Close modal on start error\n                                setShowQRScannerModal(false);\n                            });\n\n                            return () => {\n                                isScanning = false;\n                                try {\n                                    // Try to stop scanner, but don't worry if it's already stopped\n                                    html5Qrcode.stop().then(() => {\n                                        html5Qrcode.clear();\n                                    }).catch((err) => {\n                                        // Scanner might already be stopped, just clear it\n                                        console.log('Scanner already stopped or error stopping:', err);\n                                        try {\n                                            html5Qrcode.clear();\n                                        } catch (clearErr) {\n                                            console.log('Error clearing scanner in cleanup:', clearErr);\n                                        }\n                                    });\n                                } catch (err) {\n                                    console.log('Error in cleanup:', err);\n                                    // Just try to clear, don't worry about stopping\n                                    try {\n                                        html5Qrcode.clear();\n                                    } catch (clearErr) {\n                                        console.log('Error clearing scanner in cleanup:', clearErr);\n                                    }\n                                }\n                            };\n                        }\n                    }, [showQRScannerModal, qrBundleReady]);\n        \n                    const sessionChats = decorateSessions(sessionsState);\n                    const groupChats = decorateGroups(groupsState);\n                    // The multi-session chrome (left rail + chat column) appears only once there\n                    // is a genuinely WORKING conversation \u2014 a session whose SAS is verified \u2014 or\n                    // when more than one session exists. The whole offer/answer/verification flow\n                    // of the first session (which the manager reports as 'connecting'/'verifying')\n                    // stays on the original single-column \"Start Secure\" screen, exactly as before;\n                    // the rail only shows up after the first secure channel is actually established.\n                    // A group also brings the rail up: it is built out of verified sessions, so\n                    // by the time one exists the single-column setup screen is behind us.\n                    const showSidebar = sessionsState.order.length > 1 || groupsState.order.length > 0 || sessionsState.order.some((id) => {\n                        const s = sessionsState.sessions[id];\n                        return s && s.sas && s.sas.isVerified;\n                    });\n\n                    // Stop the document scrolling while the app shell is up, so the header\n                    // cannot ride off the top. Applied from JS rather than a :has() selector\n                    // because this is load-bearing, and removed again on the landing page,\n                    // which must keep scrolling normally.\n\n\n                    // \u2500\u2500 LAYOUT PREVIEW \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                    // `?preview=chat` renders the real chat components inside the real\n                    // shell with canned content and no WebRTC, so the layout can be\n                    // looked at and iterated on without standing up a connection each\n                    // time. It is presentational only: no peer manager, no keys, no\n                    // network, nothing sendable \u2014 the send handlers are no-ops. It\n                    // cannot be reached by accident, and it is not a way around\n                    // verification, because there is no session behind it to reach.\n                    if (previewMode) {\n                        const previewMessages = [\n                            { message: 'Preview mode \u2014 no connection is open.', type: 'system', id: 1, timestamp: Date.now() - 300000 },\n                            { message: 'This renders the real chat components so the layout can be checked without a handshake.', type: 'received', id: 2, timestamp: Date.now() - 240000 },\n                            { message: 'Header pinned, list scrolls, composer sits above the keyboard.', type: 'sent', id: 3, timestamp: Date.now() - 180000 },\n                            ...Array.from({ length: 30 }, (_, i) => ({\n                                message: 'Filler message ' + (i + 1) + ' \u2014 enough content to make the list scroll.',\n                                type: i % 2 ? 'sent' : 'received',\n                                id: 10 + i,\n                                timestamp: Date.now() - (30 - i) * 5000\n                            }))\n                        ];\n                        const noop = () => {};\n                        return React.createElement('div', {\n                            className: 'minimal-bg sb-app-shell',\n                            style: { display: 'flex', flexDirection: 'row', height: '100vh', width: '100%', overflow: 'hidden' }\n                        }, [\n                            React.createElement(SessionsSidebar, {\n                                key: 'sidebar',\n                                chats: [{ id: 'preview', label: 'Preview peer', unread: 0, active: true, verified: true }],\n                                collapsed: sidebarCollapsed, drawerOpen: sidebarDrawerOpen,\n                                onToggleCollapse: () => setSidebarCollapsed(v => !v),\n                                onSelect: noop, onNewChat: noop, onRename: noop,\n                                onCloseDrawer: () => setSidebarDrawerOpen(false),\n                                myStatus: myStatus, onSetStatus: setMyStatus\n                            }),\n                            React.createElement('button', {\n                                key: 'burger', className: 'sb-burger',\n                                onClick: () => setSidebarDrawerOpen(true),\n                                style: { display: 'none', position: 'fixed', top: 'calc(13px + var(--sb-safe-top, 0px))', insetInlineStart: '13px', zIndex: 55, width: '38px', height: '38px', borderRadius: '10px', placeItems: 'center', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-bg-rgb), 0.9)', color: 'var(--sb-text-4)', cursor: 'pointer' },\n                                dangerouslySetInnerHTML: { __html: SB_SVG.burger }\n                            }),\n                            React.createElement('div', {\n                                key: 'col', className: 'minimal-bg sb-app-col',\n                                style: { flex: 1, minWidth: 0, height: '100vh', overflow: 'hidden', display: 'flex', flexDirection: 'column' }\n                            }, React.createElement('main', { key: 'main' },\n                                React.createElement(EnhancedChatInterface, {\n                                    title: 'Preview peer', isOffline: false, peerPresence: 'available',\n                                    onRenameTitle: noop,\n                                    messages: previewMessages,\n                                    messageInput: messageInput, setMessageInput: setMessageInput,\n                                    onSendMessage: noop, onSendVoice: noop, onDisconnect: noop,\n                                    keyFingerprint: 'preview', isVerified: true,\n                                    chatMessagesRef: chatMessagesRef, scrollToBottom: noop,\n                                    webrtcManager: null, status: 'connected',\n                                    pendingIncomingFiles: [], onIncomingDecision: noop,\n                                    codeMode: codeMode, setCodeMode: setCodeMode,\n                                    viewOnceMode: viewOnceMode, setViewOnceMode: setViewOnceMode,\n                                    viewOnceTtl: viewOnceTtl, setViewOnceTtl: setViewOnceTtl,\n                                    disappearTtl: disappearTtl, setDisappearTtl: setDisappearTtl,\n                                    nowTick: nowTick, onUnsendMessage: noop, onMessageExpire: noop\n                                })\n                            ))\n                        ]);\n                    }\n\n                    return React.createElement('div', {\n                        className: showSidebar ? \"minimal-bg sb-app-shell\" : \"minimal-bg\",\n                        // With the rail visible the app is a fixed-height shell (rail + column\n                        // fill the viewport, design-style). Otherwise it's the scrollable landing.\n                        // flexDirection:'row' is explicit \u2014 the .minimal-bg class forces\n                        // flex-direction:column, which would otherwise stack the rail ABOVE the chat.\n                        // height:100vh is the fallback; .sb-app-shell upgrades it to 100dvh on\n                        // mobile so the shell fits under the browser toolbar (header stays put).\n                        style: showSidebar ? { display: 'flex', flexDirection: 'row', height: '100vh', width: '100%', overflow: 'hidden' } : { minHeight: '100vh' }\n                    }, [\n                        showSidebar && React.createElement(SessionsSidebar, {\n                            key: 'sessions-sidebar',\n                            chats: sessionChats,\n                            groups: groupChats,\n                            collapsed: sidebarCollapsed,\n                            drawerOpen: sidebarDrawerOpen,\n                            onToggleCollapse: () => setSidebarCollapsed(v => !v),\n                            // Picking a 1:1 chat drops the group out of the foreground, and\n                            // vice versa \u2014 one conversation is on screen at a time.\n                            onSelect: (id) => { groupsDispatch({ type: GA.SET_ACTIVE_GROUP, id: null }); handleSelectSession(id); },\n                            onSelectGroup: handleSelectGroup,\n                            onNewChat: handleNewChat,\n                            onNewGroup: () => { setShowCreateGroup(true); setSidebarDrawerOpen(false); },\n                            onRename: handleRenameSession,\n                            onCloseDrawer: () => setSidebarDrawerOpen(false),\n                            myStatus: myStatus,\n                            onSetStatus: setMyStatus\n                        }),\n                        // ---- Group dialogs ----\n                        showCreateGroup && React.createElement(CreateGroupModal, {\n                            key: 'create-group',\n                            candidates: groupCandidates,\n                            relayOnly: relayOnlyMode,\n                            onCreate: handleCreateGroup,\n                            onCancel: () => setShowCreateGroup(false)\n                        }),\n                        pendingInvite && React.createElement(GroupInviteModal, {\n                            key: 'group-invite',\n                            invite: {\n                                name: pendingInvite.name,\n                                fromLabel: sessionsState.sessions[pendingInvite.sessionId]?.peerLabel || 'A verified contact'\n                            },\n                            onAccept: handleAcceptInvite,\n                            onDecline: () => setPendingInvite(null)\n                        }),\n                        groupError && React.createElement(GroupErrorModal, {\n                            key: 'group-error',\n                            message: groupError,\n                            onDismiss: () => setGroupError(null)\n                        }),\n                        (showAddMembers && activeGroup) && React.createElement(AddMembersModal, {\n                            key: 'add-members',\n                            candidates: addCandidates,\n                            remaining: Math.max(0, GROUP_LIMITS.MAX_MEMBERS - activeGroup.members.length),\n                            onAdd: handleAddMembers,\n                            onCancel: () => setShowAddMembers(false)\n                        }),\n                        (showGroupCode && activeGroup) && React.createElement(GroupSasModal, {\n                            key: 'group-sas',\n                            group: activeGroup,\n                            onConfirm: handleConfirmGroupSas,\n                            onCancel: () => {\n                                // Cancelling is a real teardown, not a dismissal: a group whose\n                                // code was not confirmed has authenticated nobody.\n                                if (activeGroup.phase === GROUP_PHASE.READY) setShowGroupCode(false);\n                                else destroyGroup(activeGroup.id);\n                            }\n                        }),\n                        // Mobile-only hamburger that opens the drawer (hidden on desktop via CSS).\n                        showSidebar && React.createElement('button', {\n                            key: 'sb-burger',\n                            className: 'sb-burger',\n                            onClick: () => setSidebarDrawerOpen(true),\n                            style: { display: 'none', position: 'fixed', top: 'calc(13px + var(--sb-safe-top, 0px))', insetInlineStart: '13px', zIndex: 55, width: '38px', height: '38px', borderRadius: '10px', placeItems: 'center', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-bg-rgb), 0.9)', color: 'var(--sb-text-4)', cursor: 'pointer' },\n                            dangerouslySetInnerHTML: { __html: SB_SVG.burger }\n                        }),\n                        React.createElement('div', {\n                            key: 'app-column',\n                            className: showSidebar ? 'minimal-bg sb-app-col' : 'minimal-bg min-h-screen',\n                            style: showSidebar ? { flex: 1, minWidth: 0, height: '100vh', overflow: 'hidden', display: 'flex', flexDirection: 'column' } : {}\n                        }, [\n                        // Advanced network settings now render inside the connection\n                        // screen's right panel (see EnhancedConnectionSetup), matching\n                        // the design's slide-up-within-the-right-column behavior.\n                        // The verified chat renders its own in-chat header (SecureBit Chat\n                        // design); the shared header is shown only on the landing/setup view.\n                        (!isConnectedAndVerified && !showSidebar && window.EnhancedMinimalHeader) && React.createElement(window.EnhancedMinimalHeader, {\n                            key: 'header',\n                            status: connectionStatus,\n                            fingerprint: keyFingerprint,\n                            verificationCode: verificationCode,\n                            onDisconnect: handleDisconnect,\n                            isConnected: isConnectedAndVerified,\n                            securityLevel: securityLevel,\n                            // sessionManager removed - all features enabled by default\n                            webrtcManager: webrtcManagerRef.current\n                        }),\n\n                        // Offered, never forced: the visitor's language decides what this\n                        // bar says, and only a click on it changes the URL. Landing only,\n                        // for the same reason as the switcher \u2014 following it navigates.\n                        (!isConnectedAndVerified && !showSidebar) && React.createElement(LanguageSuggestion, { key: 'lang-suggest' }),\n        \n                        // A group takes the whole column when it is the active conversation.\n                        // It renders its own header and composer, so none of the 1:1 chrome\n                        // (which is bound to a single webrtcManager) applies.\n                        activeGroup && React.createElement('main', {\n                            key: 'group-main',\n                            style: { flex: 1, minHeight: 0, display: 'flex', flexDirection: 'column' }\n                        }, React.createElement(GroupChatView, {\n                            group: activeGroup,\n                            input: groupInput,\n                            setInput: setGroupInput,\n                            onSend: handleSendGroupMessage,\n                            onLeave: () => destroyGroup(activeGroup.id),\n                            onRemoveMember: handleRemoveGroupMember,\n                            onAddMembers: () => setShowAddMembers(true),\n                            isAdmin: activeGroup.isAdmin,\n                            scrollRef: groupScrollRef,\n                            onStartCall: handleStartGroupCall,\n                            callActive: !!groupCallState[activeGroup.id],\n                            // The overlay renders nothing when there is no call, and a\n                            // dismissed ring is treated as no call for this device only \u2014\n                            // the call itself carries on for whoever is in it.\n                            callOverlay: (() => {\n                                const call = groupCallState[activeGroup.id] || null;\n                                if (!call) return null;\n                                if (!call.joined && dismissedCalls[activeGroup.id] === call.callId) return null;\n                                const media = groupCallMediaState[activeGroup.id] || null;\n                                return React.createElement(GroupCallUI, {\n                                    key: 'group-call',\n                                    call,\n                                    media,\n                                    groupName: activeGroup.name,\n                                    localStream: groupCallMediaRef.current.get(activeGroup.id)?.getLocalStream() || null,\n                                    getRemoteStream: (fp) => groupCallMediaRef.current.get(activeGroup.id)?.getRemoteStream(fp) || null,\n                                    onJoin: handleJoinGroupCall,\n                                    onDismiss: handleDismissGroupCall,\n                                    onLeave: handleLeaveGroupCall,\n                                    onToggleMic: handleGroupCallMic,\n                                    onToggleCamera: handleGroupCallCamera,\n                                    onFlipCamera: handleGroupCallFlip\n                                });\n                            })()\n                        })),\n\n                        !activeGroup && React.createElement('main', {\n                            key: 'main'\n                        },\n                            (() => {\n                                return isConnectedAndVerified;\n                            })()\n                                ? (() => {\n                                    return React.createElement(EnhancedChatInterface, {\n                                        title: active ? active.peerLabel : '',\n                                        isOffline: isOffline,\n                                        peerPresence: active ? active.peerPresence : null,\n                                        onRenameTitle: (label) => { if (activeSessionId) dispatch({ type: SA.RENAME, id: activeSessionId, label }); },\n                                        messages: messages,\n                                        messageInput: messageInput,\n                                        setMessageInput: setMessageInput,\n                                        onSendMessage: handleSendMessage,\n                                        onSendVoice: handleSendVoice,\n                                        onDisconnect: handleDisconnect,\n                                        keyFingerprint: keyFingerprint,\n                                        isVerified: isVerified,\n                                        chatMessagesRef: chatMessagesRef,\n                                        scrollToBottom: scrollToBottom,\n                                        webrtcManager: webrtcManagerRef.current,\n                                        status: connectionStatus,\n                                        pendingIncomingFiles: pendingIncomingFiles,\n                                        onIncomingDecision: handleIncomingDecision,\n                                        // Secure chat extras\n                                        codeMode: codeMode,\n                                        setCodeMode: setCodeMode,\n                                        viewOnceMode: viewOnceMode,\n                                        setViewOnceMode: setViewOnceMode,\n                                        viewOnceTtl: viewOnceTtl,\n                                        setViewOnceTtl: setViewOnceTtl,\n                                        disappearTtl: disappearTtl,\n                                        setDisappearTtl: setDisappearTtl,\n                                        nowTick: nowTick,\n                                        onUnsendMessage: handleUnsendMessage,\n                                        onMessageExpire: handleMessageExpire\n                                    });\n                                })()\n                                : React.createElement(EnhancedConnectionSetup, {\n                                    onCreateOffer: handleCreateOffer,\n                                    onCreateAnswer: handleCreateAnswer,\n                                    onConnect: handleConnect,\n                                    onClearData: handleClearData,\n                                    onVerifyConnection: handleVerifyConnection,\n                                    connectionStatus: connectionStatus,\n                                    offerData: offerData,\n                                    answerData: answerData,\n                                    offerInput: offerInput,\n                                    setOfferInput: setOfferInput,\n                                    answerInput: answerInput,\n                                    setAnswerInput: setAnswerInput,\n                                    showOfferStep: showOfferStep,\n                                    showAnswerStep: showAnswerStep,\n                                    verificationCode: verificationCode,\n                                    showVerification: showVerification,\n                                    showQRCode: showQRCode,\n                                    qrCodeUrl: qrCodeUrl,\n                                    showQRScanner: showQRScanner,\n                                    setShowQRCode: setShowQRCode,\n                                    setShowQRScanner: setShowQRScanner,\n                                    setShowQRScannerModal: setShowQRScannerModal,\n                                    messages: messages,\n                                    localVerificationConfirmed: localVerificationConfirmed,\n                                    remoteVerificationConfirmed: remoteVerificationConfirmed,\n                                    bothVerificationsConfirmed: bothVerificationsConfirmed,\n                                    // QR control props\n                                    qrFramesTotal: qrFramesTotal,\n                                    qrFrameIndex: qrFrameIndex,\n                                    qrManualMode: qrManualMode,\n                                    toggleQrManualMode: toggleQrManualMode,\n                                    nextQrFrame: nextQrFrame,\n                                    prevQrFrame: prevQrFrame,\n                                    // PAKE passwords removed - using SAS verification instead\n                                    markAnswerCreated: markAnswerCreated,\n                                    notificationIntegrationRef: notificationIntegrationRef,\n                                    isGeneratingKeys: isGeneratingKeys,\n                                    setIsGeneratingKeys: setIsGeneratingKeys,\n                                    handleCreateOffer: handleCreateOffer,\n                                    relayOnlyMode: relayOnlyMode,\n                                    setRelayOnlyMode: setRelayOnlyMode,\n                                    webrtcManagerRef: webrtcManagerRef,\n                                    showIceSettings: showIceSettings,\n                                    setShowIceSettings: setShowIceSettings,\n                                    iceServersText: iceServersText,\n                                    iceSettingsPersisted: iceSettingsPersisted,\n                                    customIceServers: customIceServers,\n                                    handleApplyIceSettings: handleApplyIceSettings,\n                                    handleForgetIceSettings: handleForgetIceSettings,\n                                    // Render only the create/connect card inside the chat column\n                                    // (an additional session), instead of the full landing.\n                                    compact: showSidebar\n                                })\n                        ),\n                        \n                        // QR Scanner Modal \u2014 camera scan (design import: \"Start Secure\" / Camera scan modal)\n                        showQRScannerModal && (() => {\n                            const closeScanner = () => {\n                                setShowQRScannerModal(false);\n                                // Clear QR scanner buffer\n                                qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                            };\n                            const buf = qrChunksBufferRef.current;\n                            const hasParts = !!(buf && buf.id && buf.total > 1);\n                            const framesText = hasParts\n                                ? `Scanning frames\u2026 ${buf.seen.size} / ${buf.total}`\n                                : t('qr.scanning');\n                            const corner = (k, st) => React.createElement('span', {\n                                key: k,\n                                style: Object.assign({ position: 'absolute', width: '34px', height: '34px', zIndex: 3 }, st)\n                            });\n                            return React.createElement('div', {\n                                key: 'qr-scanner-modal',\n                                onClick: closeScanner,\n                                style: { position: 'fixed', inset: 0, zIndex: 50, display: 'flex', alignItems: 'center', justifyContent: 'center', padding: '32px', background: 'rgba(var(--sb-scrim-rgb), 0.82)', backdropFilter: 'blur(10px)', WebkitBackdropFilter: 'blur(10px)', animation: 'sbUp .2s ease' }\n                            }, [\n                                React.createElement('div', {\n                                    key: 'scanner-container',\n                                    onClick: (e) => e.stopPropagation(),\n                                    style: { width: '100%', maxWidth: '420px', borderRadius: '22px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'var(--sb-bg)', boxShadow: '0 30px 90px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))', overflow: 'hidden' }\n                                }, [\n                                    // Header\n                                    React.createElement('div', {\n                                        key: 'scanner-header',\n                                        style: { display: 'flex', alignItems: 'center', gap: '11px', padding: '18px 20px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' }\n                                    }, [\n                                        React.createElement('span', {\n                                            key: 'scanner-icon',\n                                            style: { display: 'flex' },\n                                            dangerouslySetInnerHTML: { __html: '<svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M2 8.5V6.5A2.5 2.5 0 0 1 4.5 4h2M17.5 4h2A2.5 2.5 0 0 1 22 6.5v2M22 15.5v2a2.5 2.5 0 0 1-2.5 2.5h-2M6.5 20h-2A2.5 2.5 0 0 1 2 17.5v-2\"/><circle cx=\"12\" cy=\"12\" r=\"3.2\"/></svg>' }\n                                        }),\n                                        React.createElement('div', {\n                                            key: 'scanner-titles',\n                                            style: { flex: 1, lineHeight: 1.2 }\n                                        }, [\n                                            React.createElement('div', {\n                                                key: 'scanner-title',\n                                                style: { fontSize: '15.5px', fontWeight: 800, color: 'var(--sb-text-1)' }\n                                            }, t('qr.title')),\n                                            React.createElement('div', {\n                                                key: 'scanner-hint',\n                                                style: { fontSize: '12px', color: 'var(--sb-text-8)' }\n                                            }, t('qr.subtitle'))\n                                        ]),\n                                        React.createElement('button', {\n                                            key: 'close-btn',\n                                            onClick: closeScanner,\n                                            style: { width: '32px', height: '32px', display: 'grid', placeItems: 'center', borderRadius: '9px', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-6)', cursor: 'pointer' }\n                                        }, React.createElement('i', { className: 'fas fa-times' }))\n                                    ]),\n                                    // Body\n                                    React.createElement('div', {\n                                        key: 'scanner-body',\n                                        style: { padding: '22px 24px 24px' }\n                                    }, [\n                                        React.createElement('div', {\n                                            key: 'viewfinder',\n                                            style: { position: 'relative', aspectRatio: '1', borderRadius: '18px', overflow: 'hidden', background: '#000', border: '1px solid rgba(var(--sb-ink), 0.1)' }\n                                        }, [\n                                            React.createElement('div', {\n                                                key: 'vf-bg',\n                                                style: { position: 'absolute', inset: 0, background: 'radial-gradient(circle at 50% 45%, var(--sb-surface-2), #000)' }\n                                            }),\n                                            // Camera video is injected here by Html5Qrcode\n                                            React.createElement('div', {\n                                                key: 'qr-reader',\n                                                id: 'qr-reader',\n                                                style: { position: 'absolute', inset: 0, zIndex: 1 }\n                                            }),\n                                            corner('c-tl', { top: '18px', insetInlineStart: '18px', borderTop: '2.5px solid var(--sb-green-solid)', borderInlineStart: '2.5px solid var(--sb-green-solid)', borderRadius: '8px 0 0 0' }),\n                                            corner('c-tr', { top: '18px', insetInlineEnd: '18px', borderTop: '2.5px solid var(--sb-green-solid)', borderInlineEnd: '2.5px solid var(--sb-green-solid)', borderRadius: '0 8px 0 0' }),\n                                            corner('c-bl', { bottom: '18px', insetInlineStart: '18px', borderBottom: '2.5px solid var(--sb-green-solid)', borderInlineStart: '2.5px solid var(--sb-green-solid)', borderRadius: '0 0 0 8px' }),\n                                            corner('c-br', { bottom: '18px', insetInlineEnd: '18px', borderBottom: '2.5px solid var(--sb-green-solid)', borderInlineEnd: '2.5px solid var(--sb-green-solid)', borderRadius: '0 0 8px 0' }),\n                                            React.createElement('span', {\n                                                key: 'scan-line',\n                                                style: { position: 'absolute', left: '18px', right: '18px', height: '2.5px', zIndex: 2, background: 'linear-gradient(90deg, transparent, var(--sb-green), transparent)', boxShadow: '0 0 16px var(--sb-green)', animation: 'sbScan 1.5s ease-in-out infinite alternate' }\n                                            }),\n                                            React.createElement('div', {\n                                                key: 'scan-status',\n                                                style: { position: 'absolute', bottom: 0, left: 0, right: 0, zIndex: 3, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '14px', background: 'linear-gradient(transparent, rgba(0,0,0,0.6))' }\n                                            }, [\n                                                React.createElement('span', {\n                                                    key: 'spinner',\n                                                    style: { display: 'flex', animation: 'sbSpin 1.4s linear infinite' },\n                                                    dangerouslySetInnerHTML: { __html: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" stroke-width=\"2\" stroke-linecap=\"round\"><path d=\"M21 12a9 9 0 1 1-6.2-8.6\"/></svg>' }\n                                                }),\n                                                React.createElement('span', {\n                                                    key: 'scan-frames',\n                                                    style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-4)' }\n                                                }, framesText)\n                                            ])\n                                        ]),\n                                        React.createElement('p', {\n                                            key: 'scanner-note',\n                                            style: { margin: '16px 0 0', textAlign: 'center', fontSize: '12px', lineHeight: 1.5, color: 'var(--sb-text-9)' }\n                                        }, t('qr.hint'))\n                                    ])\n                                ])\n                            ]);\n                        })()\n                        ])  // end app-column\n                    ]);\n                };\n                // UpdateChecker \u043A\u043E\u043C\u043F\u043E\u043D\u0435\u043D\u0442 \u0434\u043B\u044F \u0430\u0432\u0442\u043E\u043C\u0430\u0442\u0438\u0447\u0435\u0441\u043A\u043E\u0439 \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u043E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u0439\n                const UpdateCheckerWrapper = ({ children }) => {\n                    // \u041F\u0440\u043E\u0432\u0435\u0440\u044F\u0435\u043C \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u043E\u0441\u0442\u044C UpdateChecker\n                    if (typeof window !== 'undefined' && window.UpdateChecker) {\n                        return React.createElement(window.UpdateChecker, {\n                            debug: false\n                        }, children);\n                    }\n                    // Fallback \u0435\u0441\u043B\u0438 UpdateChecker \u043D\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043D\n                    return children;\n                };\n\n                function initializeApp() {\n                    if (window.EnhancedSecureCryptoUtils && window.EnhancedSecureWebRTCManager) {\n                        // \u041E\u0431\u043E\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u043C \u043F\u0440\u0438\u043B\u043E\u0436\u0435\u043D\u0438\u0435 \u0432 UpdateChecker \u0434\u043B\u044F \u0430\u0432\u0442\u043E\u043C\u0430\u0442\u0438\u0447\u0435\u0441\u043A\u043E\u0439 \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u043E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u0439\n                        const AppWithUpdateChecker = React.createElement(UpdateCheckerWrapper, null,\n                            React.createElement(EnhancedSecureP2PChat)\n                        );\n                        ReactDOM.render(AppWithUpdateChecker, document.getElementById('root'));\n                    } else {\n                        console.error('\u041C\u043E\u0434\u0443\u043B\u0438 \u043D\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043D\u044B:', {\n                            hasCrypto: !!window.EnhancedSecureCryptoUtils,\n                            hasWebRTC: !!window.EnhancedSecureWebRTCManager\n                        });\n                    }\n                }\n\n                if (typeof window !== 'undefined') {\n\n                    window.addEventListener('unhandledrejection', (event) => {\n                        console.error('Unhandled promise rejection:', event.reason);\n                        event.preventDefault(); \n                    });\n                    \n\n                    window.addEventListener('error', (event) => {\n                        console.error('Global error:', event.error);\n                        event.preventDefault(); \n                    });\n                    \n                    if (!window.initializeApp) {\n                        window.initializeApp = initializeApp;\n                    }\n                };\n                \n                // Render Enhanced Application with UpdateChecker\n                if (window.EnhancedSecureCryptoUtils && window.EnhancedSecureWebRTCManager) {\n                    const UpdateCheckerWrapper = ({ children }) => {\n                        if (typeof window !== 'undefined' && window.UpdateChecker) {\n                            return React.createElement(window.UpdateChecker, {\n                                debug: false\n                            }, children);\n                        }\n                        return children;\n                    };\n                    const AppWithUpdateChecker = React.createElement(UpdateCheckerWrapper, null,\n                        React.createElement(EnhancedSecureP2PChat)\n                    );\n                    ReactDOM.render(AppWithUpdateChecker, document.getElementById('root'));\n                } else {\n                    ReactDOM.render(React.createElement(EnhancedSecureP2PChat), document.getElementById('root'));\n                }\n"],
-  "mappings": "AAAA,SAASA,GAAwBC,EAAe,WAAW,OAAQ,CAC/D,OAAOA,GAAc,kBAAoB,EAC7C,CAEA,SAASC,GAAwB,CAC7B,aAAAD,EAAe,WAAW,OAC1B,iBAAAE,EACA,YAAAC,EACA,aAAAC,EAAe,IAAM,CACb,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,CAEtB,CACJ,EAAG,CACC,OAAKL,GAAwBC,CAAY,GAIzCA,EAAa,aAAe,IAAM,CAC9BG,EAAY,EACRD,EAAiB,SACjBA,EAAiB,QAAQ,WAAW,CAE5C,EACAF,EAAa,UAAYI,EACzBJ,EAAa,iBAAmBE,EAEzB,IAAM,CACT,OAAOF,EAAa,aACpB,OAAOA,EAAa,UACpB,OAAOA,EAAa,gBACxB,GAhBW,IAAM,CAAC,CAiBtB,CChBA,IAAMK,GAAU,gBAGhB,IAAMC,GAAa,iBACbC,GAAkB,eAGxB,SAASC,IAAc,CACnB,OAAO,OAAO,UAAc,KACxB,OAAO,OAAW,KAClB,CAAC,CAAC,OAAO,MACjB,CAEA,SAASC,IAAS,CACd,OAAO,IAAI,QAAQ,CAACC,EAASC,IAAW,CACpC,IAAIC,EACJ,GAAI,CACAA,EAAU,UAAU,KAAKC,GAAS,CAAU,CAChD,OAASC,EAAO,CACZH,EAAOG,CAAK,EACZ,MACJ,CACAF,EAAQ,gBAAkB,IAAM,CAC5B,IAAMG,EAAKH,EAAQ,OACdG,EAAG,iBAAiB,SAAS,IAAK,GACnCA,EAAG,kBAAkB,IAAK,CAElC,EACAH,EAAQ,UAAY,IAAMF,EAAQE,EAAQ,MAAM,EAChDA,EAAQ,QAAU,IAAMD,EAAOC,EAAQ,KAAK,CAChD,CAAC,CACL,CAEA,SAASI,GAAOD,EAAIE,EAAK,CACrB,OAAO,IAAI,QAAQ,CAACP,EAASC,IAAW,CAEpC,IAAMO,EADKH,EAAG,YAAY,KAAO,UAAU,EAC5B,YAAY,IAAK,EAAE,IAAIE,CAAG,EACzCC,EAAI,UAAY,IAAMR,EAAQQ,EAAI,MAAM,EACxCA,EAAI,QAAU,IAAMP,EAAOO,EAAI,KAAK,CACxC,CAAC,CACL,CAEA,SAASC,GAAOJ,EAAIE,EAAKG,EAAO,CAC5B,OAAO,IAAI,QAAQ,CAACV,EAASC,IAAW,CACpC,IAAMU,EAAKN,EAAG,YAAY,KAAO,WAAW,EAC5CM,EAAG,YAAY,IAAK,EAAE,IAAID,EAAOH,CAAG,EACpCI,EAAG,WAAa,IAAMX,EAAQ,EAC9BW,EAAG,QAAU,IAAMV,EAAOU,EAAG,KAAK,CACtC,CAAC,CACL,CAEA,SAASC,GAAUP,EAAIE,EAAK,CACxB,OAAO,IAAI,QAAQ,CAACP,EAASC,IAAW,CACpC,IAAMU,EAAKN,EAAG,YAAY,KAAO,WAAW,EAC5CM,EAAG,YAAY,IAAK,EAAE,OAAOJ,CAAG,EAChCI,EAAG,WAAa,IAAMX,EAAQ,EAC9BW,EAAG,QAAU,IAAMV,EAAOU,EAAG,KAAK,CACtC,CAAC,CACL,CAEA,eAAeE,GAAqBR,EAAI,CACpC,IAAMS,EAAW,MAAMR,GAAOD,EAAIU,EAAU,EAC5C,GAAID,aAAoB,UACpB,OAAOA,EAEX,IAAMP,EAAM,MAAM,OAAO,OAAO,YAC5B,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,UAAW,SAAS,CACzB,EACA,aAAME,GAAOJ,EAAIU,GAAYR,CAAG,EACzBA,CACX,CAMA,eAAsBS,GAAgBC,EAAU,CAC5C,GAAI,CAACnB,GAAY,EAAG,MAAM,IAAI,MAAM,qDAAqD,EAEzF,IAAMO,EAAK,MAAMN,GAAO,EAClBQ,EAAM,MAAMM,GAAqBR,CAAE,EAEnCa,EAAU,KAAK,UAAU,CAC3B,QAAS,EACT,QAAS,MAAM,QAAQD,GAAU,OAAO,EAAIA,EAAS,QAAU,CAAC,EAChE,YAAaA,GAAU,cAAgB,aAAe,aAAe,UACzE,CAAC,EAEKE,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC9CC,EAAa,MAAM,OAAO,OAAO,QACnC,CAAE,KAAM,UAAW,GAAAD,CAAG,EACtBZ,EACA,IAAI,YAAY,EAAE,OAAOW,CAAO,CACpC,EAEA,MAAMT,GAAOJ,EAAIgB,GAAiB,CAC9B,GAAI,MAAM,KAAKF,CAAE,EACjB,KAAM,MAAM,KAAK,IAAI,WAAWC,CAAU,CAAC,CAC/C,CAAC,CACL,CAOA,eAAsBE,IAAkB,CACpC,GAAI,CAACxB,GAAY,EAAG,OAAO,KAE3B,GAAI,CACA,IAAMO,EAAK,MAAMN,GAAO,EAClBwB,EAAS,MAAMjB,GAAOD,EAAIgB,EAAe,EAC/C,GAAI,CAACE,GAAU,CAAC,MAAM,QAAQA,EAAO,EAAE,GAAK,CAAC,MAAM,QAAQA,EAAO,IAAI,EAClE,OAAO,KAEX,IAAMhB,EAAM,MAAMD,GAAOD,EAAIU,EAAU,EACvC,GAAI,EAAER,aAAe,WAAY,OAAO,KAExC,IAAMiB,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAI,IAAI,WAAWD,EAAO,EAAE,CAAE,EACjDhB,EACA,IAAI,WAAWgB,EAAO,IAAI,CAC9B,EACME,EAAS,KAAK,MAAM,IAAI,YAAY,EAAE,OAAOD,CAAS,CAAC,EAC7D,MAAO,CACH,QAAS,MAAM,QAAQC,EAAO,OAAO,EAAIA,EAAO,QAAU,CAAC,EAC3D,YAAaA,EAAO,cAAgB,aAAe,aAAe,UACtE,CACJ,MAAQ,CAEJ,OAAO,IACX,CACJ,CAGA,eAAsBC,IAAmB,CACrC,GAAK5B,GAAY,EACjB,GAAI,CACA,IAAMO,EAAK,MAAMN,GAAO,EACxB,MAAMa,GAAUP,EAAIgB,EAAe,CACvC,MAAQ,CAER,CACJ,CC9IA,IAAMM,GAAW,wBACXC,GAAkB,CAAC,sBAAuB,gBAAgB,EAGhE,IAAMC,GAAkB,CAAC,IAAQ,IAAY,GAAW,EAExD,SAASC,GAAUC,EAAK,CACpB,IAAMC,EAAI,sBAAsB,KAAK,OAAOD,GAAO,EAAE,EAAE,KAAK,CAAC,EAC7D,OAAOC,EAAIA,EAAE,CAAC,EAAE,YAAY,EAAI,IACpC,CAGO,SAASC,GAAgBC,EAAO,CACnC,MAAI,CAACA,GAAS,OAAOA,GAAU,SAAiB,IACnC,MAAM,QAAQA,EAAM,IAAI,EAAIA,EAAM,KAAO,CAACA,EAAM,IAAI,GACrD,KAAMC,GAAMC,GAAgB,SAASN,GAAUK,CAAC,CAAC,CAAC,CAClE,CAEA,SAASE,GAAaC,EAAO,CACzB,GAAI,OAAOA,GAAU,UAAYA,EAAM,SAAW,GAAKA,EAAM,OAAS,IAAW,MAAO,GACxF,QAASC,EAAI,EAAGA,EAAID,EAAM,OAAQC,IAAK,CACnC,IAAMC,EAAIF,EAAM,WAAWC,CAAC,EAC5B,GAAIC,EAAI,IAAQA,IAAM,IAAM,MAAO,EACvC,CACA,MAAO,EACX,CAOO,SAASC,GAAqBC,EAAMC,EAAM,CAC7C,GAAI,CAAC,MAAM,QAAQD,CAAI,GAAK,CAACC,GAAQ,CAACN,GAAaM,EAAK,QAAQ,GAAK,CAACN,GAAaM,EAAK,UAAU,EAC9F,MAAO,GAEX,IAAIC,EAAU,GACd,QAAWV,KAASQ,EACXT,GAAgBC,CAAK,IAC1BA,EAAM,SAAWS,EAAK,SACtBT,EAAM,WAAaS,EAAK,WACxBC,EAAU,IAEd,GAAI,CAACA,GAAW,MAAM,QAAQD,EAAK,IAAI,EAAG,CAGtC,IAAME,EAAOF,EAAK,KAAK,OAAQR,GAAME,GAAaF,CAAC,GAAKC,GAAgB,SAASN,GAAUK,CAAC,CAAC,CAAC,EAC1FU,EAAK,OAAS,IACdH,EAAK,KAAK,CAAE,KAAAG,EAAM,SAAUF,EAAK,SAAU,WAAYA,EAAK,UAAW,CAAC,EACxEC,EAAU,GAElB,CACA,OAAOA,CACX,CAGO,SAASE,GAAwBC,EAAMC,EAAY,CACtD,IAAMC,EAASF,GAAQ,MAAM,QAAQA,EAAK,UAAU,EAAIA,EAAK,WAAW,CAAC,EAAI,KAC7E,GAAI,CAACE,GAAU,CAACZ,GAAaY,EAAO,QAAQ,GAAK,CAACZ,GAAaY,EAAO,UAAU,EAAG,OAAO,KAE1F,IAAMC,EAAS,OAAO,OAAOD,EAAO,QAAQ,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,EAC3D,GAAI,CAAC,OAAO,SAASC,CAAM,GAAKA,GAAUF,EAAY,OAAO,KAC7D,IAAMG,EAAM,OAAOJ,EAAK,GAAG,EAC3B,MAAO,CACH,KAAM,MAAM,QAAQE,EAAO,IAAI,EAAIA,EAAO,KAAK,MAAM,EAAG,CAAC,EAAI,CAAC,EAC9D,SAAUA,EAAO,SACjB,WAAYA,EAAO,WACnB,OAAAC,EACA,IAAK,OAAO,SAASC,CAAG,GAAKA,EAAM,EAAIA,EAAMD,EAASF,CAC1D,CACJ,CAEA,IAAII,GAAU,GAOP,SAASC,GAA2BC,EAAO,CAAC,EAAG,CAClD,GAAIF,IAAW,OAAO,OAAW,KAAe,OAAO,OAAU,WAAY,OAC7EA,GAAU,GAEV,IAAMG,EAAUD,EAAK,UAAY,IAAM,OAAO,uBAC1CJ,EAAS,EACTC,EAAM,EACNK,EAAQ,KACRC,EAAW,EAETC,EAAYC,GAAO,CACjBH,GAAO,aAAaA,CAAK,EAC7BA,EAAQ,WAAWI,EAASD,CAAE,CAClC,EAEA,eAAeC,GAAU,CACrBJ,EAAQ,KACR,GAAI,CACA,IAAMK,EAAM,MAAM,MAAMC,GAAU,CAAE,OAAQ,OAAQ,MAAO,WAAY,YAAa,MAAO,CAAC,EAC5F,GAAI,CAACD,EAAI,GAAI,MAAM,IAAI,MAAM,QAAQA,EAAI,MAAM,EAAE,EACjD,IAAMlB,EAAOG,GAAwB,MAAMe,EAAI,KAAK,EAAG,KAAK,IAAI,EAAI,GAAI,EACxE,GAAI,CAAClB,EAAM,MAAM,IAAI,MAAM,mBAAmB,EAC9CF,GAAqBc,EAAQ,EAAGZ,CAAI,EACpCO,EAASP,EAAK,OACdQ,EAAMR,EAAK,IACXc,EAAW,EAGXC,EAAS,KAAK,IAAI,GAAIP,EAAM,CAAC,EAAI,GAAI,CACzC,MAAY,CACR,IAAMY,EAAQlC,GAAgB,KAAK,IAAI4B,EAAU5B,GAAgB,OAAS,CAAC,CAAC,EAC5E4B,IACAC,EAASK,CAAK,CAClB,CACJ,CAIA,SAAS,iBAAiB,mBAAoB,IAAM,CAChD,GAAI,SAAS,kBAAoB,UAAW,OAC5C,IAAMC,EAAM,KAAK,IAAI,EAAI,KACrB,CAACd,GAAUA,EAASc,EAAMb,EAAM,IAAGS,EAAQ,CACnD,CAAC,EAEDA,EAAQ,CACZ,CC3IO,IAAMK,GAAoB,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,EACrFC,GAAc,CACvB,GAAM,CACF,SAAY,KACZ,WAAc,UACd,KAAQ,KACR,IAAO,MACP,KAAQ,GACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,UACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,cACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,aACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,+DACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,6CACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,UACZ,WAAc,2BACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,qBACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,uCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,6CACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,iCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,iCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,2BACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,CACJ,EAIaC,GAAuB,CAChC,GAAM,CACF,wBAAyB,0CACzB,uBAAwB,kBACxB,2BAA4B,SAChC,EACA,GAAM,CACF,wBAAyB,wCACzB,uBAAwB,oBACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,kDACzB,uBAAwB,sBACxB,2BAA4B,QAChC,EACA,GAAM,CACF,wBAAyB,8DACzB,uBAAwB,qBACxB,2BAA4B,QAChC,EACA,GAAM,CACF,wBAAyB,oNACzB,uBAAwB,0GACxB,2BAA4B,4CAChC,EACA,GAAM,CACF,wBAAyB,+MACzB,uBAAwB,yFACxB,2BAA4B,4CAChC,EACA,GAAM,CACF,wBAAyB,2EACzB,uBAAwB,uCACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,yGACzB,uBAAwB,wCACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,2KACzB,uBAAwB,yFACxB,2BAA4B,6CAChC,EACA,GAAM,CACF,wBAAyB,gLACzB,uBAAwB,4EACxB,2BAA4B,gCAChC,EACA,GAAM,CACF,wBAAyB,oHACzB,uBAAwB,4EACxB,2BAA4B,gCAChC,EACA,GAAM,CACF,wBAAyB,uKACzB,uBAAwB,mFACxB,2BAA4B,0BAChC,EACA,GAAM,CACF,wBAAyB,+JACzB,uBAAwB,6EACxB,2BAA4B,6CAChC,CACJ,ECpKO,IAAMC,GAAa,CACtB,iBAAkB,WAClB,wBAAyB,0CACzB,uBAAwB,kBACxB,2BAA4B,UAC5B,cAAe,QACf,eAAgB,SAChB,cAAe,QACf,aAAc,OACd,iBAAkB,mBAClB,eAAgB,6BAChB,qBAAsB,iDACtB,cAAe,OACf,gBAAiB,SACjB,kBAAmB,0BACnB,iBAAkB,kBAClB,iBAAkB,mBAClB,mBAAoB,mCACpB,kBAAmB,wCACnB,kBAAmB,qCACnB,eAAgB,yCAChB,kBAAmB,6BACnB,wBAAyB,4KACzB,mBAAoB,oBACpB,qBAAsB,WACtB,iBAAkB,qBAClB,iBAAkB,0BAClB,qBAAsB,UACtB,wBAAyB,kBACzB,sBAAuB,kBACvB,iBAAkB,mIAClB,iBAAkB,CACd,aACA,cACA,QACA,OACJ,EACA,qBAAsB,WACtB,wBAAyB,SACzB,sBAAuB,kBACvB,iBAAkB,oIAClB,iBAAkB,CACd,WACA,UACJ,EACA,qBAAsB,UACtB,wBAAyB,kBACzB,sBAAuB,kBACvB,iBAAkB,iIAClB,iBAAkB,CACd,iBACA,aACJ,EACA,qBAAsB,UACtB,wBAAyB,cACzB,sBAAuB,sBACvB,iBAAkB,6GAClB,iBAAkB,CACd,iBACA,eACJ,EACA,qBAAsB,YACtB,wBAAyB,aACzB,sBAAuB,uBACvB,iBAAkB,qGAClB,iBAAkB,CACd,cACA,SACJ,EACA,mBAAoB,uBACpB,mBAAoB,0BACpB,sBAAuB,uFACvB,sBAAuB,mBACvB,yBAA0B,8EAC1B,yBAA0B,qBAC1B,uBAAwB,mBACxB,sBAAuB,0EACvB,qBAAsB,uBACtB,kBAAmB,sBACnB,kBAAmB,6BACnB,qBAAsB,0HACtB,mBAAoB,0CACpB,mBAAoB,wBACpB,sBAAuB,eACvB,mBAAoB,gBACpB,sBAAuB,yBACvB,kBAAmB,+GACnB,kBAAmB,4EACnB,oBAAqB,uBACrB,mBAAoB,sFACpB,kBAAmB,6BACnB,kBAAmB,iBACnB,kBAAmB,sBACnB,qBAAsB,wCACtB,oBAAqB,gBACrB,yBAA0B,mCAC1B,gBAAiB,UACjB,mBAAoB,mBACpB,mBAAoB,uBACpB,iBAAkB,4CAClB,kBAAmB,aACnB,sBAAuB,CACnB,qCACA,6CACA,6BACA,6BACA,gCACA,cACJ,EACA,mBAAoB,gBACpB,iBAAkB,kDAClB,kBAAmB,cACnB,sBAAuB,CACnB,iCACA,sCACA,oCACA,yBACA,wCACJ,EACA,mBAAoB,oBACpB,iBAAkB,mDAClB,kBAAmB,cACnB,sBAAuB,CACnB,0CACA,2CACA,iCACA,8CACA,gCACJ,EACA,mBAAoB,sBACpB,iBAAkB,6CAClB,kBAAmB,YACnB,sBAAuB,CACnB,oDACA,6CACA,wCACA,uCACA,6CACJ,EACA,mBAAoB,wBACpB,iBAAkB,wCAClB,kBAAmB,cACnB,sBAAuB,CACnB,gDACA,yCACA,oCACA,kCACA,sCACJ,EACA,mBAAoB,4BACpB,iBAAkB,sEAClB,kBAAmB,YACnB,sBAAuB,CACnB,0CACA,0CACA,gCACA,iDACA,4CACA,kCACA,gCACA,gCACA,4BACA,0BACA,sBACA,uBACJ,EACA,mBAAoB,kBACpB,iBAAkB,oDAClB,kBAAmB,aACnB,sBAAuB,CACnB,iCACA,+BACA,oCACA,0BACA,yBACA,+BACA,iBACA,+BACJ,EACA,mBAAoB,uBACpB,iBAAkB,yDAClB,kBAAmB,aACnB,sBAAuB,CACnB,sCACA,qCACA,qCACA,yCACA,oCACA,2BACA,2CACA,uBACJ,EACA,mBAAoB,uBACpB,iBAAkB,qCAClB,kBAAmB,MACnB,sBAAuB,CACnB,uCACA,2CACA,8CACA,oDACA,+CACA,wCACA,qDACA,4CACJ,EACA,oBAAqB,iBACrB,kBAAmB,yCACnB,mBAAoB,UACpB,uBAAwB,CACpB,iCACA,8CACA,kCACA,+BACA,uBACA,yBACA,0BACA,0BACJ,EACA,oBAAqB,4BACrB,kBAAmB,uCACnB,mBAAoB,UACpB,uBAAwB,CACpB,2CACA,8BACA,8BACA,4BACA,6BACA,iCACA,0BACA,6BACJ,EACA,oBAAqB,wBACrB,kBAAmB,8BACnB,mBAAoB,OACpB,uBAAwB,CACpB,oBACA,yBACA,yBACA,iCACA,qBACA,uCACA,+BACA,sBACJ,EACA,oBAAqB,uBACrB,kBAAmB,8BACnB,mBAAoB,QACpB,uBAAwB,CACpB,2BACA,2BACA,wBACA,wCACA,kCACA,uBACA,sBACA,8BACJ,EACA,kBAAmB,iCACnB,kBAAmB,6BACnB,kBAAmB,kCACnB,0BAA2B,wBAC3B,wBAAyB,uBACzB,yBAA0B,kDAC1B,uBAAwB,wBACxB,4BAA6B,wBAC7B,sBAAuB,iFACvB,2BAA4B,4EAC5B,sBAAuB,uBACvB,wBAAyB,+CACzB,mCAAoC,iCACpC,2BAA4B,iFAC5B,mBAAoB,oDACpB,yBAA0B,uGAC1B,eAAgB,wBAChB,cAAe,wHACf,oBAAqB,0BACrB,qBAAsB,iBACtB,iBAAkB,eAClB,mBAAoB,YACpB,kBAAmB,cACnB,eAAgB,oBAChB,cAAe,oBACf,iBAAkB,UAClB,iBAAkB,yBAClB,kBAAmB,mBACnB,uBAAwB,wDACxB,kBAAmB,yBACnB,iBAAkB,uDAClB,cAAe,UACf,cAAe,UACf,YAAa,QACb,eAAgB,iBAChB,eAAgB,uBAChB,mBAAoB,kCACpB,eAAgB,4BAChB,mBAAoB,gCACpB,eAAgB,YAChB,mBAAoB,oCACpB,mBAAoB,oBACpB,kBAAmB,8EACnB,wBAAyB,6DACzB,uBAAwB,oDACxB,YAAa,SACb,qBAAsB,iBACtB,mBAAoB,4CACpB,uBAAwB,uCACxB,mBAAoB,kBACpB,kBAAmB,yFACnB,SAAU,KACV,YAAa,6BACb,gBAAiB,uBACjB,oBAAqB,2BACrB,gBAAiB,SACjB,cAAe,OACf,cAAe,OACf,cAAe,OACf,gBAAiB,SACjB,cAAe,OACf,yBAA0B,uBAC1B,0BAA2B,oBAC3B,gBAAiB,0BACjB,iBAAkB,2BAClB,cAAe,2CACf,WAAY,eACZ,cAAe,gCACf,cAAe,iBACf,UAAW,0FACX,WAAY,MACZ,YAAa,sBACb,eAAgB,sBAChB,eAAgB,sBAChB,YAAa,mBACb,eAAgB,mDAChB,YAAa,qIACb,kBAAmB,2BACnB,iBAAkB,oCAClB,kBAAmB,2BACnB,iBAAkB,uBAClB,eAAgB,6HAChB,kBAAmB,UACnB,WAAY,eACZ,cAAe,gBACf,iBAAkB,kBAClB,iBAAkB,cAClB,gBAAiB,mGACjB,mBAAoB,oGACpB,cAAe,sBACf,kBAAmB,4EACnB,aAAc,eACd,aAAc,SACd,YAAa,QACb,qBAAsB,0CACtB,iBAAkB,+BAClB,eAAgB,mBAChB,cAAe,kDACf,wBAAyB,kBACzB,oBAAqB,cACrB,aAAc,aACd,eAAgB,QAChB,iBAAkB,MAClB,oBAAqB,iBACrB,sBAAuB,oCACvB,0BAA2B,mCAC3B,0BAA2B,4BAC3B,qBAAsB,sBACtB,oBAAqB,2BACrB,eAAgB,0EAChB,qBAAsB,oGACtB,qBAAsB,cACtB,eAAgB,eAChB,kBAAmB,UACnB,oBAAqB,kBACrB,mBAAoB,yFACpB,iBAAkB,sCAClB,iBAAkB,+BAClB,iBAAkB,2CAClB,mBAAoB,mBACpB,wBAAyB,qBACzB,uBAAwB,gJACxB,kBAAmB,8BACnB,iBAAkB,4EAClB,kBAAmB,4BACnB,iBAAkB,8DAClB,kBAAmB,gCACnB,iBAAkB,6EAClB,kBAAmB,kBACnB,iBAAkB,uFAClB,gBAAiB,SACjB,eAAgB,eAChB,kBAAmB,sCACnB,wBAAyB,0DACzB,qBAAsB,mEACtB,qBAAsB,uEACtB,WAAY,iBACZ,iBAAkB,oBAClB,aAAc,UACd,YAAa,SACb,aAAc,iBACd,YAAa,yBACb,gBAAiB,yDACjB,cAAe,gBACf,gBAAiB,wBACjB,cAAe,SACf,cAAe,SACf,gBAAiB,WACjB,gBAAiB,uBACjB,gBAAiB,iBACjB,sBAAuB,wBACvB,qBAAsB,+BACtB,YAAa,iDACb,gBAAiB,gBACjB,qBAAsB,sBACtB,iBAAkB,iBAClB,sBAAuB,YACvB,YAAa,cACb,kBAAmB,mBACnB,eAAgB,gBAChB,cAAe,SACf,eAAgB,UAChB,WAAY,WACZ,cAAe,SACf,iBAAkB,aAClB,qBAAsB,uBACtB,kBAAmB,cACnB,gBAAiB,YACjB,aAAc,QACd,aAAc,QACd,cAAe,SACf,gBAAiB,WACjB,eAAgB,qBAChB,wBAAyB,YACzB,mBAAoB,cACpB,mBAAoB,cACpB,YAAa,YACb,eAAgB,eAChB,aAAc,aACd,aAAc,aACd,oBAAqB,8BACrB,iBAAkB,kGAClB,eAAgB,SAChB,mBAAoB,sBACpB,qBAAsB,wBACtB,mBAAoB,mBACpB,mBAAoB,cACpB,gBAAiB,oFACjB,qBAAsB,kBACtB,eAAgB,SAChB,gBAAiB,UACjB,eAAgB,gBAChB,gBAAiB,iBACjB,cAAe,QACf,kBAAmB,mBACnB,eAAgB,eAChB,cAAe,QACf,kBAAmB,SACnB,gBAAiB,UACjB,gBAAiB,gBACjB,iBAAkB,oBAClB,oBAAqB,0BACrB,mBAAoB,+DACpB,qBAAsB,8BACtB,mBAAoB,gHACpB,qBAAsB,+BACtB,mBAAoB,oBACpB,yBAA0B,0BAC1B,sBAAuB,2CACvB,oBAAqB,8CACrB,kBAAmB,0GACnB,mBAAoB,2IACpB,oBAAqB,qFACrB,mBAAoB,2BACpB,qBAAsB,uFACtB,kBAAmB,2OACnB,qBAAsB,6LACtB,sBAAuB,8GACvB,iBAAkB,2HAClB,uBAAwB,wIACxB,sBAAuB,oBACvB,0BAA2B,0CAC3B,uBAAwB,kGACxB,qBAAsB,kCACtB,gBAAiB,sBACjB,wBAAyB,iEACzB,wBAAyB,8CACzB,wBAAyB,+EACzB,oBAAqB,kEACrB,cAAe,uBACf,kBAAmB,4BACnB,uBAAwB,wCACxB,iBAAkB,aAClB,mBAAoB,YACpB,oBAAqB,gBACrB,sBAAuB,gBACvB,sBAAuB,kBACvB,kBAAmB,cACnB,mBAAoB,eACpB,0BAA2B,oBAC3B,uBAAwB,oBACxB,uBAAwB,2BACxB,qBAAsB,0BACtB,yBAA0B,sBAC1B,yBAA0B,sBAC1B,gBAAiB,2BACjB,oBAAqB,iBACrB,iBAAkB,cAClB,iBAAkB,6BAClB,uBAAwB,4CACxB,6BAA8B,uCAC9B,uBAAwB;AAAA,mEACxB,8BAA+B,sCAC/B,mBAAoB,kCACpB,YAAa,eACb,iBAAkB,aAClB,iBAAkB,aAClB,mBAAoB,uBACpB,iBAAkB,qBAClB,eAAgB,UAChB,iBAAkB,2CAClB,gBAAiB,mEACjB,gBAAiB,YACjB,qBAAsB,+CACtB,sBAAuB,kBACvB,mBAAoB,+BACpB,kBAAmB,cACnB,oBAAqB,+CACrB,sBAAuB,kBACvB,kBAAmB,cACnB,mBAAoB,cACpB,eAAgB,2BAChB,yBAA0B,sBAC1B,eAAgB,UAChB,iBAAkB,YAClB,eAAgB,WAChB,qBAAsB,qEACtB,iBAAkB,YAClB,iBAAkB,YAClB,yBAA0B,2BAC1B,iBAAkB,YAClB,mBAAoB,cACpB,oBAAqB,qBACrB,cAAe,UACf,gBAAiB,WACjB,iBAAkB,aAClB,eAAgB,WAChB,gBAAiB,YACjB,mBAAoB,iBACpB,kBAAmB,cACnB,kBAAmB,cACnB,gBAAiB,iBACjB,cAAe,2BACf,kBAAmB,yBACnB,kBAAmB,8CACnB,iBAAkB,kBAClB,wBAAyB,iBACzB,gBAAiB,8BACjB,eAAgB,UAChB,iBAAkB,+BAClB,sBAAuB,6BACvB,sBAAuB,6BACvB,sBAAuB,qCACvB,gBAAiB,yEACjB,iBAAkB,sEAClB,yBAA0B,4BAC1B,6BAA8B,2CAC9B,uBAAwB,0BACxB,2BAA4B,2BAC5B,sBAAuB,8FACvB,oBAAqB,mGACrB,yBAA0B,0BAC1B,uBAAwB,oBACxB,oBAAqB,4BACrB,4BAA6B,sCAC7B,0BAA2B,oCAC3B,kBAAmB,sCACnB,0BAA2B,6BAC3B,oBAAqB,0BACrB,iBAAkB,6BAClB,0BAA2B,uBAC3B,qBAAsB,iEACtB,mBAAoB,+DACpB,qBAAsB,kDACtB,oBAAqB,uGACrB,wBAAyB,mGACzB,uBAAwB,4DACxB,iBAAkB,yBAClB,eAAgB,uBAChB,qBAAsB,iDACtB,yBAA0B,wDAC1B,gBAAiB,qIACjB,uBAAwB,8EACxB,yBAA0B,0EAC1B,8BAA+B,oGAC/B,qBAAsB,0DACtB,cAAe,iEACf,2BAA4B,4EAC5B,qBAAsB,8EACtB,mBAAoB,iBACpB,mBAAoB,gBACpB,gBAAiB,yDACjB,cAAe,yBACf,eAAgB,qCAChB,sBAAuB,yDACvB,yBAA0B,sBAC1B,eAAgB,wCAChB,sBAAuB,4BACvB,iBAAkB,2BAClB,eAAgB,WAChB,gBAAiB,YACjB,kBAAmB,eACnB,iBAAkB,2CAClB,mBAAoB,8EACpB,uBAAwB,8EACxB,WAAY,qBACZ,UAAW,wBACX,UAAW,yFACX,eAAgB,OAChB,gBAAiB,QACjB,kBAAmB,QACnB,iBAAkB,SAClB,iBAAkB,gCAClB,eAAgB,OAChB,gBAAiB,QACjB,iBAAkB,SAClB,cAAe,MACf,iBAAkB,UAClB,oBAAqB,eACrB,YAAa,OACb,gBAAiB,MACjB,YAAa,MACb,aAAc,OACd,eAAgB,0BAChB,aAAc,SACd,aAAc,QACd,sBAAuB,yCACvB,qBAAsB,YACtB,gBAAiB,OACjB,gBAAiB,OACjB,mBAAoB,UACpB,qBAAsB,YACtB,yBAA0B,uBAC1B,oBAAqB,yBACrB,oBAAqB,iBACrB,yBAA0B,0BAC1B,kBAAmB,SACnB,WAAY,qBACZ,iBAAkB,kBAClB,kBAAmB,mBACnB,oBAAqB,qBACrB,wBAAyB,oBACzB,oBAAqB,eACrB,oBAAqB,OACrB,qBAAsB,gBACtB,yBAA0B,+BAC1B,uBAAwB,kBACxB,qBAAsB,yBACtB,mBAAoB,cACpB,oBAAqB,eACrB,mBAAoB,OACpB,mBAAoB,OACpB,mBAAoB,OACpB,WAAY,OACZ,YAAa,QACb,YAAa,QACb,WAAY,OACZ,WAAY,OACZ,WAAY,OACZ,eAAgB,kCAChB,gBAAiB,SACjB,qBAAsB,eACtB,oBAAqB,cACrB,gBAAiB,SACjB,gCAAiC,oBACjC,gCAAiC,2BACjC,2BAA4B,qBAC5B,iCAAkC,oBAClC,sCAAuC,0BACvC,oBAAqB,0BACrB,iCAAkC,oBAClC,gCAAiC,mBACjC,gCAAiC,mBACjC,mCAAoC,sBACpC,mCAAoC,sBACpC,8BAA+B,iBAC/B,iCAAkC,oBAClC,mCAAoC,uBACpC,6BAA8B,gBAC9B,2BAA4B,wBAC5B,0BAA2B,uBAC3B,mCAAoC,sBACpC,iCAAkC,oBAClC,0BAA2B,kBAC3B,4CAA6C,kCAC7C,qCAAsC,2BACtC,qCAAsC,2BACtC,kCAAmC,wBACnC,kCAAmC,wBACnC,qCAAsC,2BACtC,qCAAsC,2BACtC,wCAAyC,8BACzC,4DAA6D,kDAC7D,uCAAwC,6BACxC,kCAAmC,wBACnC,wCAAyC,8BACzC,uDAAwD,6CACxD,6CAA8C,mCAC9C,gEAAiE,sDACjE,0CAA2C,gCAC3C,mDAAoD,yCACpD,0CAA2C,gCAC3C,mCAAoC,yBACpC,yDAA0D,+CAC1D,qDAAsD,2CACtD,4CAA6C,kCAC7C,wEAAyE,8DACzE,qNAAsN,2MACtN,YAAa,QACb,aAAc,SACd,mBAAoB,yDACpB,uBAAwB,4DACxB,0BAA2B,kEAC3B,yBAA0B,sDAC1B,sBAAuB,+CACvB,oBAAqB,kDACrB,iBAAkB,uCAClB,oBAAqB,gDACrB,gBAAiB,aACjB,kBAAmB,SACnB,oBAAqB,WACrB,iBAAkB,iBAClB,uBAAwB,cACxB,eAAgB,eAChB,cAAe,YACf,eAAgB,QAChB,oBAAqB,yBACrB,kBAAmB,qBACnB,eAAgB,0BAChB,kBAAmB,sBACnB,kBAAmB,cACnB,kBAAmB,+BACnB,qBAAsB,eACtB,iBAAkB,+BAClB,sBAAuB,yBACvB,kBAAmB,6CACnB,mBAAoB,kEACpB,mBAAoB,uBACpB,eAAgB,eAChB,iBAAkB,kBAClB,kBAAmB,kCACnB,mBAAoB,qDACpB,kBAAmB,2BACnB,gBAAiB,wBACjB,iBAAkB,kCAClB,sBAAuB,mDACvB,UAAW,MACX,0BAA2B,2BAC3B,mBAAoB,UACpB,wBAAyB,eACzB,iBAAkB,QAClB,mBAAoB,UACpB,eAAgB,QAChB,qBAAsB,aACtB,oBAAqB,aACrB,iBAAkB,cAClB,aAAc,gBACd,uBAAwB,2BACxB,uBAAwB,2BACxB,iBAAkB,OAClB,oBAAqB,UACrB,kBAAmB,aACnB,gBAAiB,MACjB,uBAAwB,mBACxB,wBAAyB,kCACzB,sBAAuB,oBACvB,yBAA0B,8BAC1B,yBAA0B,8BAC1B,mBAAoB,sBACpB,kCAAmC,8GACnC,iCAAkC,qEAClC,4BAA6B,+FAC7B,6BAA8B,iEAC9B,iCAAkC,gFAClC,0BAA2B,yCAC3B,qBAAsB,qBACtB,gBAAiB,oBACjB,kBAAmB,mBACnB,yBAA0B,WAC1B,cAAe,mBACf,eAAgB,oBAChB,eAAgB,oBAChB,cAAe,mBACf,YAAa,aACb,WAAY,YACZ,YAAa,SACb,oBAAqB,kEACrB,4BAA6B,oDAC7B,mBAAoB,iEACpB,mBAAoB,uBACpB,oBAAqB,wBACrB,2BAA4B,yCAC5B,4BAA6B,uCAC7B,sBAAuB,gBACvB,uBAAwB,gBACxB,4BAA6B,2CAC7B,wBAAyB,0BACzB,0BAA2B,sFAC3B,gCAAiC,mHACjC,mBAAoB,WACpB,uBAAwB,8EACxB,sBAAuB,0EACvB,4BAA6B,8CAC7B,8BAA+B,iDAC/B,gCAAiC,oCACjC,wBAAyB,uDACzB,0BAA2B,+EAC3B,oBAAqB,0CACrB,kBAAmB,yCACnB,uBAAwB,8EACxB,wBAAyB,sDACzB,2BAA4B,+CAC5B,0BAA2B,oGAC3B,oBAAqB,gCACrB,wBAAyB,iEACzB,oBAAqB,8FACrB,gBAAiB,oEACjB,uBAAwB,qDACxB,oBAAqB,4BACrB,iCAAkC,iEAClC,mBAAoB,iDACpB,uBAAwB,iEACxB,sBAAuB,sGACvB,4BAA6B,6FAC7B,+BAAgC,gEAChC,gBAAiB,OACjB,kBAAmB,SACnB,eAAgB,MAChB,gBAAiB,SACjB,yBAA0B,iDAC1B,0BAA2B,yEAC3B,0BAA2B,4LAC3B,sBAAuB,mFACvB,wBAAyB,yBACzB,qBAAsB,8EACtB,uBAAwB,0BACxB,2BAA4B,6DAC5B,2BAA4B,yCAC5B,0BAA2B,sDAC3B,0BAA2B,2CAC3B,oBAAqB,6DACrB,oBAAqB,eACrB,uBAAwB,uFACxB,uBAAwB,eACxB,yBAA0B,qCAC1B,uBAAwB,uCACxB,sBAAuB,mDACvB,4BAA6B,uDAC7B,yBAA0B,qEAC1B,2BAA4B,kBAC5B,sBAAuB,6FACvB,uBAAwB,6CACxB,+BAAgC,iFAChC,kBAAmB,qBACnB,uBAAwB,2FAC5B,EAEMC,GAAW,WAAW,qBAAuB,WAAW,mBAAqB,OAAO,OAAO,IAAI,GACrGA,GAAS,GAAQD,GCn0BjB,IAAME,GAAW,WAAW,qBAAuB,WAAW,mBAAqB,OAAO,OAAO,IAAI,GAGrG,SAASC,GAAWC,EAAM,CACtB,OAAOF,GAASE,CAAI,GAAK,IAC7B,CAEA,IAAMC,GAAc,mBAGb,SAASC,GAAmBC,EAAW,IAAK,CAC/C,IAAMC,EAAU,OAAOD,CAAQ,EAAE,MAAM,GAAG,EAAE,CAAC,EAC7C,OAAOE,GAAkB,SAASD,CAAO,GAAKA,IAAY,KAAiBA,EAAU,IACzF,CAMO,SAASE,GAAoBC,EAAY,CAAC,EAAG,CAChD,QAAWC,KAAOD,EAAW,CACzB,IAAME,EAAQ,OAAOD,CAAG,EAAE,YAAY,EAChCE,EAAQL,GAAkB,KAAML,GAASA,EAAK,YAAY,IAAMS,CAAK,EAC3E,GAAIC,EAAO,OAAOA,EAClB,IAAMC,EAAOF,EAAM,MAAM,GAAG,EAAE,CAAC,EACzBG,EAAUP,GAAkB,KAAML,GAASA,EAAK,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC,IAAMW,CAAI,EAC1F,GAAIC,EAAS,OAAOA,CACxB,CACA,OAAO,IACX,CAOO,SAASC,GAAa,CAAE,SAAAV,EAAW,IAAK,OAAAW,EAAS,KAAM,UAAAP,EAAY,CAAC,CAAE,EAAI,CAAC,EAAG,CACjF,IAAMQ,EAAWb,GAAmBC,CAAQ,EAC5C,OAAIY,IAIAC,GAAab,CAAQ,EAAU,KAE/BW,GAAUT,GAAkB,SAASS,CAAM,EAAUA,EAClDR,GAAoBC,CAAS,GAAK,KAC7C,CAGA,SAASS,GAAab,EAAU,CAC5B,OAAOA,IAAa,KAAOA,IAAa,aAC5C,CAMO,SAASc,GAAWjB,EAAMG,EAAW,IAAK,CAC7C,IAAMe,EAAUhB,GAAmBC,CAAQ,EAErCgB,GADOD,EAAU,OAAOf,CAAQ,EAAE,MAAMe,EAAQ,OAAS,CAAC,EAAI,OAAOf,CAAQ,GACjE,QAAQ,OAAQ,EAAE,EACpC,OAAOH,IAAS,KAAiB,IAAImB,CAAI,GAAK,IAAInB,CAAI,IAAImB,CAAI,EAClE,CAGO,SAASC,GAAepB,EAAM,CACjC,GAAI,CACA,aAAa,QAAQC,GAAaD,CAAI,CAC1C,MAAY,CAEZ,CACJ,CAEO,SAASqB,IAAe,CAC3B,GAAI,CACA,OAAO,aAAa,QAAQpB,EAAW,CAC3C,MAAY,CACR,OAAO,IACX,CACJ,CAOA,IAAIqB,GAAiB,KACd,SAASC,IAAgB,CAC5B,GAAID,GAAgB,OAAOA,GAI3B,IAAME,EAAI,OAAO,OAAW,IAAc,KAAO,OACjD,MAAI,CAACA,GAAK,CAACA,EAAE,SAAiB,MAC9BF,GAAiBT,GAAa,CAC1B,SAAUW,EAAE,SAAS,UAAY,IACjC,OAAQH,GAAa,EACrB,UAAWG,EAAE,WAAW,WAAa,CAAC,CAC1C,CAAC,EACMF,GACX,CAWO,SAASG,GAAUzB,EAAOuB,GAAc,EAAG,CAC9C,OAAOG,GAAY1B,CAAI,GAAG,MAAQ,MAAQ,MAAQ,KACtD,CAEO,SAAS2B,GAAM3B,EAAOuB,GAAc,EAAG,CAC1C,OAAOE,GAAUzB,CAAI,IAAM,KAC/B,CAOO,SAAS4B,GAAU5B,EAAOuB,GAAc,EAAG,CAC9C,OAAOI,GAAM3B,CAAI,EAAI,GAAK,CAC9B,CAmBA,IAAM6B,GAAc,qCAEb,SAASC,IAA4B,CACxC,GAAI,CACA,OAAO,aAAa,QAAQD,EAAW,IAAM,GACjD,MAAY,CACR,MAAO,EACX,CACJ,CAEO,SAASE,IAA0B,CACtC,GAAI,CACA,aAAa,QAAQF,GAAa,GAAG,CACzC,MAAY,CAEZ,CACJ,CAOO,SAASG,GAAgB,CAAE,SAAAC,EAAW,IAAK,UAAAC,EAAY,CAAC,EAAG,OAAAC,EAAS,IAAK,EAAI,CAAC,EAAG,CACpF,IAAMC,EAAQC,GAAmBJ,CAAQ,GAAK,KAIxCK,EAAaC,GAAkB,SAASJ,CAAM,GAAKA,GAAWK,GAAoBN,CAAS,EACjG,OAAOI,GAAaA,IAAcF,EAAQE,EAAY,IAC1D,CAuCO,SAASG,EAAEC,EAAKC,EAAMC,EAASC,GAAc,EAAG,CACnD,IAAMC,EACFC,GAAWH,CAAM,IAAIF,CAAG,GAIxBM,GAAqBJ,CAAM,IAAIF,CAAG,GAClCK,GAAW,IAAc,IAAIL,CAAG,GAChCA,EACJ,OAAKC,EACE,OAAOG,CAAQ,EAAE,QAAQ,aAAc,CAACG,EAAOC,IAClD,OAAO,UAAU,eAAe,KAAKP,EAAMO,CAAI,EAAI,OAAOP,EAAKO,CAAI,CAAC,EAAID,CAC5E,EAHkBH,CAItB,CCxPO,IAAMK,EAAkB,OAAO,OAAO,CACzC,eAAgB,iBAChB,eAAgB,iBAChB,WAAY,aACZ,WAAY,aACZ,gBAAiB,kBACjB,iBAAkB,mBAClB,QAAS,UACT,YAAa,cACb,aAAc,eACd,sBAAuB,wBACvB,cAAe,gBACf,eAAgB,iBAChB,eAAgB,iBAChB,iBAAkB,mBAClB,aAAc,eACd,kBAAmB,oBACnB,YAAa,cACb,OAAQ,SACR,kBAAmB,mBACvB,CAAC,EAIYC,GAAe,CAAE,UAAW,wBAAyB,KAAM,2BAA4B,KAAM,sBAAuB,QAAS,kBAAmB,EAChJC,GAAgB,CAAE,UAAWC,EAAE,oBAAoB,EAAG,KAAMA,EAAE,eAAe,EAAG,KAAMA,EAAE,eAAe,EAAG,QAASA,EAAE,kBAAkB,CAAE,EAEzIC,GAAoB,CAC7B,CAAE,IAAK,YAAa,KAAMD,EAAE,oBAAoB,EAAG,KAAMA,EAAE,wBAAwB,EAAG,IAAK,uBAAwB,EACnH,CAAE,IAAK,OAAQ,KAAMA,EAAE,eAAe,EAAG,KAAMA,EAAE,mBAAmB,EAAG,IAAK,0BAA2B,EACvG,CAAE,IAAK,OAAQ,KAAMA,EAAE,eAAe,EAAG,KAAMA,EAAE,mBAAmB,EAAG,IAAK,qBAAsB,EAClG,CAAE,IAAK,YAAa,KAAMA,EAAE,oBAAoB,EAAG,KAAMA,EAAE,wBAAwB,EAAG,IAAK,kBAAmB,CAClH,EAIO,SAASE,GAAiBC,EAAI,CACjC,IAAMC,EAAM,OAAOD,GAAM,EAAE,EAAE,QAAQ,cAAe,EAAE,EACtD,OAAOH,EAAE,mBAAmB,EAAI,KAAOI,EAAI,MAAM,EAAG,CAAC,GAAK,QAAQ,YAAY,CAClF,CAGO,SAASC,GAAaC,EAAO,CAChC,IAAMC,EAAQ,OAAOD,GAAS,EAAE,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,EAC9DE,EAAID,EAAM,CAAC,IAAI,CAAC,GAAK,GACrBE,EAAIF,EAAM,CAAC,IAAI,CAAC,GAAKA,EAAM,CAAC,IAAI,CAAC,GAAK,GAC5C,OAAQC,EAAIC,GAAG,YAAY,GAAK,UACpC,CAkBO,SAASC,GAAUC,EAAQ,CAC9B,OAAQA,EAAQ,CACZ,IAAK,YACL,IAAK,WACD,OAAOC,EAAE,UAAU,EACvB,IAAK,YACD,OAAOA,EAAE,gBAAgB,EAC7B,IAAK,aACL,IAAK,MACD,OAAOA,EAAE,iBAAiB,EAC9B,IAAK,eACD,OAAOA,EAAE,mBAAmB,EAChC,IAAK,oBACD,OAAOA,EAAE,uBAAuB,EACpC,QACI,OAAOA,EAAE,mBAAmB,CACpC,CACJ,CAEA,SAASC,IAAa,CAClB,MAAO,CACH,UAAW,GACX,WAAY,GACZ,WAAY,GACZ,YAAa,GACb,cAAe,GACf,eAAgB,GAChB,iBAAkB,GAClB,WAAY,GACZ,UAAW,GACX,iBAAkB,GAClB,cAAe,EACf,aAAc,EACd,aAAc,EAClB,CACJ,CAEO,SAASC,GAAmBC,EAAO,CAAC,EAAG,CAC1C,IAAMC,EAAKD,EAAK,KAAO,OAAO,OAAW,KAAe,OAAO,WAAa,OAAO,WAAW,EAAI,OAAO,KAAK,IAAI,CAAC,EAAI,KAAK,OAAO,GACnI,MAAO,CACH,GAAAC,EACA,UAAWD,EAAK,WAAaE,GAAiBD,CAAE,EAChD,cAAe,GACf,UAAWD,EAAK,WAAa,KAAK,IAAI,EACtC,KAAMA,EAAK,MAAQ,QACnB,OAAQA,EAAK,QAAU,MACvB,eAAgB,GAChB,iBAAkB,GAClB,IAAK,CAAE,eAAgB,GAAO,gBAAiB,GAAO,cAAe,GAAO,WAAY,EAAM,EAC9F,SAAU,CAAC,EACX,YAAa,EACb,qBAAsB,CAAC,EACvB,aAAc,KACd,MAAOF,GAAW,CACtB,CACJ,CAEO,SAASK,IAAqB,CACjC,MAAO,CAAE,SAAU,CAAC,EAAG,MAAO,CAAC,EAAG,gBAAiB,IAAK,CAC5D,CAIA,SAASC,GAAaC,EAAOJ,EAAIK,EAAO,CACpC,IAAMC,EAAUF,EAAM,SAASJ,CAAE,EACjC,OAAKM,EACE,CACH,GAAGF,EACH,SAAU,CAAE,GAAGA,EAAM,SAAU,CAACJ,CAAE,EAAG,CAAE,GAAGM,EAAS,GAAGD,CAAM,CAAE,CAClE,EAJqBD,CAKzB,CAEO,SAASG,GAAgBH,EAAOI,EAAQ,CAC3C,IAAMC,EAAIC,EACV,OAAQF,EAAO,KAAM,CACjB,KAAKC,EAAE,eAAgB,CACnB,IAAME,EAAQH,EAAO,OAASV,GAAmBU,CAAM,EACvD,OAAIJ,EAAM,SAASO,EAAM,EAAE,EAAUP,EAC9B,CACH,SAAU,CAAE,GAAGA,EAAM,SAAU,CAACO,EAAM,EAAE,EAAGA,CAAM,EACjD,MAAO,CAAC,GAAGP,EAAM,MAAOO,EAAM,EAAE,EAChC,gBAAiBH,EAAO,WAAa,GAAQJ,EAAM,gBAAkBO,EAAM,EAC/E,CACJ,CAEA,KAAKF,EAAE,eAAgB,CACnB,GAAM,CAAE,GAAAT,CAAG,EAAIQ,EACf,GAAI,CAACJ,EAAM,SAASJ,CAAE,EAAG,OAAOI,EAChC,IAAMQ,EAAW,CAAE,GAAGR,EAAM,QAAS,EACrC,OAAOQ,EAASZ,CAAE,EAClB,IAAMa,EAAQT,EAAM,MAAM,OAAQU,GAAMA,IAAMd,CAAE,EAC5Ce,EAAkBX,EAAM,gBAC5B,GAAIW,IAAoBf,EAAI,CAExB,IAAMgB,EAAaZ,EAAM,MAAM,QAAQJ,CAAE,EACzCe,EAAkBF,EAAM,KAAK,IAAI,EAAGG,EAAa,CAAC,CAAC,GAAKH,EAAM,CAAC,GAAK,IACxE,CACA,MAAO,CAAE,SAAAD,EAAU,MAAAC,EAAO,gBAAAE,CAAgB,CAC9C,CAEA,KAAKN,EAAE,WAEH,MADI,CAACL,EAAM,SAASI,EAAO,EAAE,GACzBJ,EAAM,kBAAoBI,EAAO,GAAWJ,EACzC,CAAE,GAAGA,EAAO,gBAAiBI,EAAO,EAAG,EAGlD,KAAKC,EAAE,WAAY,CACf,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,GAAWA,EAAQ,SAAWE,EAAO,OAAQ,OAAOJ,EAUzD,IAAMC,EAAS,EAHGG,EAAO,SAAW,aAC7BA,EAAO,SAAW,YAClBA,EAAO,SAAW,iBACIF,EAAQ,eAAiB,KAChD,CAAE,OAAQE,EAAO,OAAQ,aAAc,IAAK,EAC5C,CAAE,OAAQA,EAAO,MAAO,EAC9B,OAAOL,GAAaC,EAAOI,EAAO,GAAIH,CAAK,CAC/C,CAEA,KAAKI,EAAE,gBACH,OAAON,GAAaC,EAAOI,EAAO,GAAI,CAAE,eAAgBA,EAAO,WAAY,CAAC,EAEhF,KAAKC,EAAE,iBACH,OAAON,GAAaC,EAAOI,EAAO,GAAI,CAAE,iBAAkBA,EAAO,IAAK,CAAC,EAE3E,KAAKC,EAAE,QAAS,CACZ,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,OAAKF,EACEH,GAAaC,EAAOI,EAAO,GAAI,CAAE,IAAK,CAAE,GAAGF,EAAQ,IAAK,GAAGE,EAAO,GAAI,CAAE,CAAC,EAD3DJ,CAEzB,CAEA,KAAKK,EAAE,YAAa,CAChB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,OAAKF,EACEH,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAU,CAAC,GAAGF,EAAQ,SAAUE,EAAO,OAAO,CAAE,CAAC,EADpEJ,CAEzB,CAEA,KAAKK,EAAE,aAAc,CACjB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMa,EAAO,OAAOT,EAAO,SAAY,WACjCA,EAAO,QAAQF,EAAQ,QAAQ,EAC/BE,EAAO,SACb,OAAOL,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAU,MAAM,QAAQS,CAAI,EAAIA,EAAO,CAAC,CAAE,CAAC,CACvF,CAEA,KAAKR,EAAE,sBAAuB,CAC1B,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAIc,EAAU,GACRC,EAAWb,EAAQ,SAAS,IAAKc,GAC/B,OAAOA,EAAE,GAAG,IAAM,OAAOZ,EAAO,GAAG,GAAKY,EAAE,SAAWZ,EAAO,QAC5DU,EAAU,GACH,CAAE,GAAGE,EAAG,OAAQZ,EAAO,MAAO,GAElCY,CACV,EACD,OAAOF,EAAUf,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAAW,CAAS,CAAC,EAAIf,CACpE,CAEA,KAAKK,EAAE,cAAe,CAIlB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMiB,EAAOb,EAAO,WAAa,KAAO,OAAOA,EAAO,SAAS,EAAI,KAC7Dc,EAAQd,EAAO,KAAO,KAAO,OAAOA,EAAO,GAAG,EAAI,KAClDe,EAAWf,EAAO,QAAU,KAAO,OAAOA,EAAO,MAAM,EAAI,KAC7DU,EAAU,GACRC,EAAWb,EAAQ,SAAS,IAAKc,GAAM,CAIzC,GAAI,EAHSC,GAAQ,MAAQ,OAAOD,EAAE,EAAE,IAAMC,GACtCC,GAAS,MAAQ,OAAOF,EAAE,GAAG,IAAME,GACnCC,GAAY,MAAQH,EAAE,QAAU,MAAQ,OAAOA,EAAE,MAAM,IAAMG,GAC3D,OAAOH,EACjBF,EAAU,GACV,IAAMb,EAAQ,OAAOG,EAAO,OAAU,WAAaA,EAAO,MAAMY,CAAC,EAAIZ,EAAO,MAC5E,MAAO,CAAE,GAAGY,EAAG,GAAGf,CAAM,CAC5B,CAAC,EACD,OAAOa,EAAUf,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAAW,CAAS,CAAC,EAAIf,CACpE,CAEA,KAAKK,EAAE,eAAgB,CACnB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMe,EAAWb,EAAQ,SAAS,OAAQc,GAAM,OAAOA,EAAE,GAAG,IAAM,OAAOZ,EAAO,GAAG,CAAC,EACpF,OAAIW,EAAS,SAAWb,EAAQ,SAAS,OAAeF,EACjDD,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAAW,CAAS,CAAC,CACtD,CAEA,KAAKV,EAAE,eAAgB,CACnB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAIc,EAAU,GACRC,EAAWb,EAAQ,SAAS,IAAKc,GAC/B,OAAOA,EAAE,EAAE,IAAM,OAAOZ,EAAO,SAAS,GAAK,CAACY,EAAE,SAChDF,EAAU,GACH,CAAE,GAAGE,EAAG,QAAS,GAAM,QAAS,GAAI,UAAW,MAAU,GAE7DA,CACV,EACD,OAAOF,EAAUf,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAAW,CAAS,CAAC,EAAIf,CACpE,CAEA,KAAKK,EAAE,iBAAkB,CACrB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,OAAKF,EACEH,GAAaC,EAAOI,EAAO,GAAI,CAAE,YAAaF,EAAQ,YAAc,CAAE,CAAC,EADzDF,CAEzB,CAEA,KAAKK,EAAE,aAAc,CACjB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,MAAI,CAACF,GAAWA,EAAQ,cAAgB,EAAUF,EAC3CD,GAAaC,EAAOI,EAAO,GAAI,CAAE,YAAa,CAAE,CAAC,CAC5D,CAEA,KAAKC,EAAE,kBAAmB,CACtB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMa,EAAO,OAAOT,EAAO,SAAY,WACjCA,EAAO,QAAQF,EAAQ,oBAAoB,EAC3CE,EAAO,MACb,OAAOL,GAAaC,EAAOI,EAAO,GAAI,CAAE,qBAAsB,MAAM,QAAQS,CAAI,EAAIA,EAAO,CAAC,CAAE,CAAC,CACnG,CAEA,KAAKR,EAAE,YAAa,CAChB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,OAAKF,EACEH,GAAaC,EAAOI,EAAO,GAAI,CAAE,MAAO,CAAE,GAAGF,EAAQ,MAAO,GAAGE,EAAO,KAAM,CAAE,CAAC,EADjEJ,CAEzB,CAEA,KAAKK,EAAE,OAAQ,CACX,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMoB,EAAQ,OAAOhB,EAAO,OAAS,EAAE,EAAE,KAAK,GAAKF,EAAQ,UAC3D,OAAOH,GAAaC,EAAOI,EAAO,GAAI,CAAE,UAAWgB,EAAO,cAAe,EAAK,CAAC,CACnF,CAEA,KAAKf,EAAE,kBAAmB,CACtB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,MAAI,CAACF,GAAWA,EAAQ,eAAiBE,EAAO,SAAiBJ,EAC1DD,GAAaC,EAAOI,EAAO,GAAI,CAAE,aAAcA,EAAO,QAAS,CAAC,CAC3E,CAEA,QACI,OAAOJ,CACf,CACJ,CAIO,SAASqB,GAAgBnB,EAASS,EAAiB,CAKtD,IAAMW,EAAc,CAAC,GAAGpB,EAAQ,QAAQ,EAAE,QAAQ,EAAE,KAC/Cc,GAAM,CAACA,EAAE,SAAWA,EAAE,OAAS,WACvB,OAAOA,EAAE,SAAY,UAAYA,EAAE,QAAQ,KAAK,GAAMA,EAAE,MACrE,EACMO,EAAIrB,EAAQ,OACZsB,EAAOD,IAAM,aAAeA,IAAM,WAGlCE,EAAYF,IAAM,cAAgBA,IAAM,aAAeA,IAAM,OAASA,IAAM,eAG9EG,EAAKC,EACLF,GACAC,EAAM,2BACNC,EAAYrC,GAAUiC,CAAC,GAChBC,GACPE,EAAMxB,EAAQ,aAAgB0B,GAAa1B,EAAQ,YAAY,GAAK,mBAAsB,wBAC1FyB,EAAYzB,EAAQ,aAAgB2B,GAAc3B,EAAQ,YAAY,GAAKV,EAAE,iBAAiB,EAAKA,EAAE,UAAU,IAE/GkC,EAAM,sBACNC,EAAYrC,GAAUiC,CAAC,GAE3B,IAAMO,EAAUR,EAAeA,EAAY,MAAQ,0BAAqBA,EAAY,QAAWK,EAC/F,MAAO,CACH,GAAIzB,EAAQ,GACZ,KAAMA,EAAQ,UACd,KAAM6B,GAAa7B,EAAQ,SAAS,EACpC,IAAAwB,EACA,UAAAC,EACA,OAAQzB,EAAQ,OAChB,aAAcA,EAAQ,aACtB,QAAA4B,EACA,OAAQ5B,EAAQ,YAAc,EAAKA,EAAQ,YAAc,GAAK,MAAQ,OAAOA,EAAQ,WAAW,EAAK,KACrG,SAAU,CAAC,CAACA,EAAQ,IAAI,WACxB,OAAQA,EAAQ,KAAOS,EACvB,SAAUT,EAAQ,KAAOS,CAC7B,CACJ,CAEO,SAASqB,GAAiBhC,EAAO,CACpC,OAAOA,EAAM,MACR,IAAKJ,GAAOI,EAAM,SAASJ,CAAE,CAAC,EAC9B,OAAO,OAAO,EACd,IAAK2B,GAAMF,GAAgBE,EAAGvB,EAAM,eAAe,CAAC,CAC7D,CCjUO,IAAMiC,EAAe,OAAO,OAAO,CAGtC,YAAa,EACb,YAAa,EACb,eAAgB,GAChB,YAAa,GACb,aAAc,GACd,kBAAmB,GAGnB,WAAY,EAQZ,eAAgB,IAGhB,UAAW,WACX,eAAgB,IAChB,eAAgB,GAChB,cAAe,IACf,cAAe,GAef,eAAgB,KAChB,mBAAoB,KAcpB,qBAAsB,IAEtB,iBAAkB,GAUlB,cAAe,EACnB,CAAC,EAWYC,GAAe,OAAO,OAAO,CACtC,MAAO,QACP,KAAM,OACN,MAAO,OACX,CAAC,EAGYC,GAAa,OAAO,OAAO,CAAE,MAAO,SAAU,OAAQ,SAAU,CAAC,EAEjEC,GAAa,OAAO,OAAO,CACpC,OAAQ,SACR,IAAK,MACL,OAAQ,SACR,OAAQ,QACZ,CAAC,EAEKC,GAAM,IAAI,YAEVC,GAAN,cAA+B,KAAM,CACjC,YAAYC,EAASC,EAAO,eAAgB,CACxC,MAAMD,CAAO,EACb,KAAK,KAAO,mBACZ,KAAK,KAAOC,CAChB,CACJ,EACMC,GAAO,CAACC,EAAKF,IAAS,CAAE,MAAM,IAAIF,GAAiBI,EAAKF,CAAI,CAAG,EAM9D,SAASG,GAAMC,EAAO,CACzB,IAAMC,EAAOD,aAAiB,WAAaA,EAAQ,IAAI,WAAWA,CAAK,EACnEE,EAAM,GACV,QAASC,EAAI,EAAGA,EAAIF,EAAK,OAAQE,IAAKD,GAAOD,EAAKE,CAAC,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EACjF,OAAOD,CACX,CAEO,SAASE,GAAQC,EAAK,EACrB,OAAOA,GAAQ,UAAYA,EAAI,OAAS,IAAM,GAAK,CAAC,eAAe,KAAKA,CAAG,IAC3ER,GAAK,mBAAoB,SAAS,EAEtC,IAAMK,EAAM,IAAI,WAAWG,EAAI,OAAS,CAAC,EACzC,QAASF,EAAI,EAAGA,EAAID,EAAI,OAAQC,IAAKD,EAAIC,CAAC,EAAI,SAASE,EAAI,OAAOF,EAAI,EAAG,CAAC,EAAG,EAAE,EAC/E,OAAOD,CACX,CAEO,SAASI,GAAMN,EAAO,CACzB,IAAMC,EAAOD,aAAiB,WAAaA,EAAQ,IAAI,WAAWA,CAAK,EACnEO,EAAS,GACb,QAASJ,EAAI,EAAGA,EAAIF,EAAK,OAAQE,IAAKI,GAAU,OAAO,aAAaN,EAAKE,CAAC,CAAC,EAC3E,OAAO,KAAKI,CAAM,CACtB,CAEO,SAASC,GAAQC,EAAK,CAAE,IAAAC,EAAMrB,EAAa,cAAe,EAAI,CAAC,EAAG,CACjE,OAAOoB,GAAQ,UAAUZ,GAAK,sBAAuB,SAAS,EAE9DY,EAAI,OAAS,KAAK,KAAMC,EAAM,EAAK,CAAC,EAAI,GAAGb,GAAK,mCAAoC,SAAS,EACjG,IAAIU,EACJ,GAAI,CACAA,EAAS,KAAKE,CAAG,CACrB,MAAY,CACRZ,GAAK,mBAAoB,SAAS,CACtC,CACA,IAAMK,EAAM,IAAI,WAAWK,EAAO,MAAM,EACxC,QAAS,EAAI,EAAG,EAAIA,EAAO,OAAQ,IAAKL,EAAI,CAAC,EAAIK,EAAO,WAAW,CAAC,EACpE,OAAOL,CACX,CAEO,SAASS,GAAYC,EAAG,CAC3B,OAAO,OAAO,gBAAgB,IAAI,WAAWA,CAAC,CAAC,CACnD,CAGO,SAASC,IAAa,CACzB,OAAOd,GAAMY,GAAYtB,EAAa,cAAc,CAAC,CACzD,CAcA,SAASyB,GAAGC,KAAUC,EAAO,CACzB,IAAMC,EAAS,CAACxB,GAAI,OAAOsB,EAAQ,IAAI,CAAC,EACpCG,EAAQD,EAAO,CAAC,EAAE,OACtB,QAAWE,KAAQH,EAAO,CACtB,IAAMhB,EAAQmB,aAAgB,WAAaA,EACrC,OAAOA,GAAS,SAAW1B,GAAI,OAAO0B,CAAI,EAC1CtB,GAAK,gCAAiC,aAAa,EACnDuB,EAAS,IAAI,WAAW,CAAC,EAC/B,IAAI,SAASA,EAAO,MAAM,EAAE,UAAU,EAAGpB,EAAM,MAAM,EACrDiB,EAAO,KAAKG,EAAQpB,CAAK,EACzBkB,GAAS,EAAIlB,EAAM,MACvB,CACA,IAAME,EAAM,IAAI,WAAWgB,CAAK,EAC5BG,EAAI,EACR,QAAWC,KAAKL,EAAUf,EAAI,IAAIoB,EAAGD,CAAC,EAAGA,GAAKC,EAAE,OAChD,OAAOpB,CACX,CAEA,SAASqB,GAAIX,EAAG,EACR,CAAC,OAAO,UAAUA,CAAC,GAAKA,EAAI,GAAKA,EAAIvB,EAAa,YAAWQ,GAAK,4BAA6B,SAAS,EAC5G,IAAM2B,EAAI,IAAI,WAAW,CAAC,EAC1B,WAAI,SAASA,EAAE,MAAM,EAAE,UAAU,EAAGZ,CAAC,EAC9BY,CACX,CAGA,SAASC,GAAWC,EAAGF,EAAG,CACtB,GAAI,EAAEE,aAAa,aAAe,EAAEF,aAAa,aAAeE,EAAE,SAAWF,EAAE,OAAQ,MAAO,GAC9F,IAAIG,EAAO,EACX,QAASxB,EAAI,EAAGA,EAAIuB,EAAE,OAAQvB,IAAKwB,GAAQD,EAAEvB,CAAC,EAAIqB,EAAErB,CAAC,EACrD,OAAOwB,IAAS,CACpB,CAMO,SAASC,GAAcC,EAAS,CACnC,OAAI,OAAOA,GAAY,UAAYA,EAAQ,SAAWxC,EAAa,eAAiB,GAAK,CAAC,cAAc,KAAKwC,CAAO,IAChHhC,GAAK,qBAAsB,cAAc,EAEtCgC,CACX,CAEO,SAASC,GAAkBC,EAAI,CAClC,OAAI,OAAOA,GAAO,UAAYA,EAAG,SAAW1C,EAAa,kBAAoB,GAAK,CAAC,cAAc,KAAK0C,CAAE,IACpGlC,GAAK,+BAAgC,iBAAiB,EAEnDkC,CACX,CAEO,SAASC,GAAYC,EAAO,CAC/B,OAAI,CAAC,OAAO,UAAUA,CAAK,GAAKA,EAAQ,GAAKA,EAAQ5C,EAAa,YAC9DQ,GAAK,qBAAsB,WAAW,EAEnCoC,CACX,CAEO,SAASC,GAAWC,EAAM,CAC7B,IAAMC,EAAQ,OAAOD,GAAS,SAAWA,EAAO,GAChD,OAAI1C,GAAI,OAAO2C,CAAK,EAAE,OAAS/C,EAAa,gBAAgBQ,GAAK,sBAAuB,UAAU,EAC3FuC,CACX,CAUO,SAASC,GAAsBC,EAAK,CAClC,MAAM,QAAQA,CAAG,GAAGzC,GAAK,8BAA+B,aAAa,EACtEyC,EAAI,OAASjD,EAAa,aAAaQ,GAAK,qCAAsC,aAAa,EAC/FyC,EAAI,OAASjD,EAAa,aAAaQ,GAAK,yBAAyBR,EAAa,WAAW,WAAY,kBAAkB,EAC/H,IAAMkD,EAAO,IAAI,IACjB,QAAWR,KAAMO,EACbR,GAAkBC,CAAE,EAChBQ,EAAK,IAAIR,CAAE,GAAGlC,GAAK,+BAAgC,kBAAkB,EACzE0C,EAAK,IAAIR,CAAE,EAEf,MAAO,CAAC,GAAGO,CAAG,EAAE,KAAK,CACzB,CAaA,eAAsBE,GAAsBC,EAAQ,CAChD,IAAMC,EAAU,MAAMD,EAAO,YACzB,CAAE,KAAM,QAAS,WAAY,OAAQ,EACrC,GACA,CAAC,OAAQ,QAAQ,CACrB,EACME,EAAO,IAAI,WAAW,MAAMF,EAAO,UAAU,OAAQC,EAAQ,SAAS,CAAC,EACvEE,EAAc,MAAMC,GAAgBJ,EAAQE,CAAI,EACtD,MAAO,CAAE,QAAAD,EAAS,KAAAC,EAAM,YAAAC,CAAY,CACxC,CAGA,eAAsBC,GAAgBJ,EAAQE,EAAM,CAChD,OAAI,EAAEA,aAAgB,aAAeA,EAAK,OAAStD,EAAa,gBAAkBsD,EAAK,OAAStD,EAAa,iBACzGQ,GAAK,2BAA4B,UAAU,EAExCE,GAAM,IAAI,WAAW,MAAM0C,EAAO,OAAO,UAAWE,CAAI,CAAC,CAAC,CACrE,CAUA,eAAsBG,GAAqBL,EAAQE,EAAM,CACrD,IAAMC,EAAc,MAAMC,GAAgBJ,EAAQE,CAAI,EAClDI,EACJ,GAAI,CACAA,EAAY,MAAMN,EAAO,UAAU,OAAQE,EAAM,CAAE,KAAM,QAAS,WAAY,OAAQ,EAAG,GAAO,CAAC,QAAQ,CAAC,CAC9G,MAAY,CACR9C,GAAK,sDAAuD,UAAU,CAC1E,CACA,MAAO,CAAE,UAAAkD,EAAW,YAAAH,CAAY,CACpC,CAaA,eAAsBI,GAAgBP,EAAQ,CAAE,QAAAZ,EAAS,MAAAI,EAAO,YAAAW,EAAa,MAAAK,CAAM,EAAG,CAClFrB,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACjBH,GAAkBc,CAAW,GACzB,EAAEK,aAAiB,aAAeA,EAAM,SAAW5D,EAAa,cAChEQ,GAAK,yBAA0B,WAAW,EAE9C,IAAMqD,EAAUpC,GAAG,4BAA6BV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAG7B,GAAQwC,CAAW,EAAGK,CAAK,EACzG,OAAO,IAAI,WAAW,MAAMR,EAAO,OAAO,UAAWS,CAAO,CAAC,CACjE,CAEA,eAAsBC,GAAiBV,EAAQW,EAAYC,EAAQ,CAC/D,GAAI,EAAED,aAAsB,aAAeA,EAAW,SAAW/D,EAAa,aAAc,MAAO,GACnG,IAAIiE,EACJ,GAAI,CACAA,EAAW,MAAMN,GAAgBP,EAAQY,CAAM,CACnD,MAAY,CACR,MAAO,EACX,CACA,OAAO5B,GAAW2B,EAAYE,CAAQ,CAC1C,CAWA,eAAsBC,GAAgBd,EAAQ,CAAE,QAAAZ,EAAS,MAAAI,EAAO,cAAAuB,EAAe,OAAAC,EAASpE,EAAa,UAAW,EAAG,CAC/GuC,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACZ,MAAM,QAAQuB,CAAa,GAAG3D,GAAK,iCAAkC,mBAAmB,GACzF,CAAC,OAAO,UAAU4D,CAAM,GAAKA,EAAS,GAAKA,EAAS,KAAI5D,GAAK,2BAA4B,YAAY,EAEzGwC,GAAsBmB,EAAc,IAAKlC,GAAMA,GAAKA,EAAE,WAAW,CAAC,EAElE,IAAMoC,EAAU,CAAC,GAAGF,CAAa,EAAE,KAAK,CAAC9B,EAAGF,IAAOE,EAAE,YAAcF,EAAE,YAAc,GAAK,CAAE,EACpFR,EAAQ,CAAC,EACf,QAAWM,KAAKoC,GACR,EAAEpC,EAAE,iBAAiB,aAAeA,EAAE,MAAM,SAAWjC,EAAa,cACpEQ,GAAK,+CAAgD,WAAW,EAEpEmB,EAAM,KAAKZ,GAAQkB,EAAE,WAAW,EAAGA,EAAE,KAAK,EAG9C,IAAMqC,EAAM7C,GAAG,yBAA0BV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAG,GAAGjB,CAAK,EACzE4C,EAAO,IAAI,WAAW,MAAMnB,EAAO,OAAO,UAAW3B,GAAG,8BAA+BV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,CAAC,CAAC,CAAC,EAEvH4B,EAAM,KACV,GAAI,CACAA,EAAM,MAAMpB,EAAO,UAAU,MAAOkB,EAAK,OAAQ,GAAO,CAAC,YAAY,CAAC,EACtE,IAAMG,EAAO,MAAMrB,EAAO,WACtB,CAAE,KAAM,OAAQ,KAAM,UAAW,KAAAmB,EAAM,KAAMnE,GAAI,OAAO,wBAAwB,CAAE,EAClFoE,EAAK,EACT,EACME,EAAK,IAAI,SAASD,CAAI,EAGtBlD,EAAImD,EAAG,UAAU,CAAC,EAAI,GAAK,IAAMA,EAAG,UAAU,CAAC,IAAM,IAC3D,OAAO,OAAOnD,EAAI,IAAM6C,CAAM,EAAE,SAASA,EAAQ,GAAG,CACxD,QAAE,CACE,GAAI,CAAEE,EAAI,KAAK,CAAC,CAAG,MAAY,CAAyB,CAC5D,CACJ,CASO,IAAMK,GAAN,KAAuB,CAC1B,YAAY,CAAE,QAAAnC,EAAS,MAAAI,EAAO,gBAAAgC,EAAiB,mBAAAC,CAAmB,EAAG,CACjE,KAAK,QAAUtC,GAAcC,CAAO,EACpC,KAAK,MAAQG,GAAYC,CAAK,EAC9B,KAAK,gBAAkBH,GAAkBmC,CAAe,EACxD,KAAK,QAAU5B,GAAsB6B,CAAkB,EAClD,KAAK,QAAQ,SAAS,KAAK,eAAe,GAC3CrE,GAAK,4CAA6C,cAAc,EAEpE,KAAK,MAAQc,GAAYtB,EAAa,WAAW,EACjD,KAAK,YAAc,IAAI,IACvB,KAAK,OAAS,IAAI,IAClB,KAAK,SAAW,GAChB,KAAK,KAAO,IAChB,CAGA,MAAM,cAAcoD,EAAQ,CACxB,IAAMW,EAAa,MAAMJ,GAAgBP,EAAQ,CAC7C,QAAS,KAAK,QAAS,MAAO,KAAK,MACnC,YAAa,KAAK,gBAAiB,MAAO,KAAK,KACnD,CAAC,EACD,YAAK,YAAY,IAAI,KAAK,gBAAiBW,CAAU,EAC9CA,CACX,CAOA,iBAAiBR,EAAaQ,EAAY,CACtCtB,GAAkBc,CAAW,EACxB,KAAK,QAAQ,SAASA,CAAW,GAAG/C,GAAK,+BAAgC,cAAc,GACxF,EAAEuD,aAAsB,aAAeA,EAAW,SAAW/D,EAAa,eAC1EQ,GAAK,uBAAwB,gBAAgB,EAEjD,IAAMsE,EAAW,KAAK,YAAY,IAAIvB,CAAW,EACjD,OAAIuB,GACK1C,GAAW0C,EAAUf,CAAU,GAAGvD,GAAK,kCAAmC,oBAAoB,EAC5F,KAEX,KAAK,YAAY,IAAI+C,EAAaQ,CAAU,EACrC,GACX,CAEA,IAAI,qBAAsB,CACtB,OAAO,KAAK,QAAQ,MAAOrB,GAAO,KAAK,YAAY,IAAIA,CAAE,CAAC,CAC9D,CASA,QAAS,CACL,OAAK,KAAK,qBACNlC,GAAK,kDAAmD,kBAAkB,EAE9E,KAAK,SAAW,GAChB,KAAK,OAAO,IAAI,KAAK,gBAAiB,KAAK,KAAK,EACzC,KAAK,KAChB,CAGA,MAAM,aAAa4C,EAAQG,EAAaK,EAAO,CAC3CnB,GAAkBc,CAAW,EACxB,KAAK,QAAQ,SAASA,CAAW,GAAG/C,GAAK,2BAA4B,cAAc,EACxF,IAAMuD,EAAa,KAAK,YAAY,IAAIR,CAAW,EACnD,OAAKQ,GAAYvD,GAAK,uCAAwC,2BAA2B,EAC9E,MAAMsD,GAAiBV,EAAQW,EAAY,CAClD,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,YAAAR,EAAa,MAAAK,CAC3D,CAAC,GACQpD,GAAK,+CAAgD,qBAAqB,EACnF,KAAK,OAAO,IAAI+C,EAAaK,CAAK,EAC3B,EACX,CAEA,IAAI,iBAAkB,CAClB,OAAO,KAAK,QAAQ,MAAOlB,GAAO,KAAK,OAAO,IAAIA,CAAE,CAAC,CACzD,CAGA,MAAM,OAAOU,EAAQ,CACjB,OAAK,KAAK,iBAAiB5C,GAAK,gCAAiC,mBAAmB,EACpF,KAAK,KAAO,MAAM0D,GAAgBd,EAAQ,CACtC,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,cAAe,KAAK,QAAQ,IAAKV,IAAQ,CAAE,YAAaA,EAAI,MAAO,KAAK,OAAO,IAAIA,CAAE,CAAE,EAAE,CAC7F,CAAC,EACM,KAAK,IAChB,CAGA,SAAU,CACN,GAAI,CAAE,KAAK,MAAM,KAAK,CAAC,CAAG,MAAY,CAAC,CACvC,QAAWnB,KAAK,KAAK,OAAO,OAAO,EAAK,GAAI,CAAEA,EAAE,KAAK,CAAC,CAAG,MAAY,CAAC,CACtE,KAAK,OAAO,MAAM,EAClB,KAAK,YAAY,MAAM,CAC3B,CACJ,EAeO,SAASwD,GAAgB,CAAE,QAAAvC,EAAS,MAAAI,EAAO,GAAAoC,EAAI,UAAAC,EAAW,KAAAnC,EAAO,EAAG,EAAG,CAC1EP,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACZ,OAAO,OAAOzC,EAAU,EAAE,SAAS6E,CAAE,GAAGxE,GAAK,+BAAgC,QAAQ,EAC1F,IAAM6D,EAAUrB,GAAsBiC,CAAS,EAC/C,OAAOxD,GACH,+BACAV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAGoC,EAAInC,GAAWC,CAAI,EACjD,GAAGuB,EAAQ,IAAK3B,GAAO3B,GAAQ2B,CAAE,CAAC,CACtC,CACJ,CAEA,eAAsBwC,GAAa9B,EAAQ+B,EAAYnB,EAAQ,CAC3D,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYJ,GAAgBf,CAAM,CAAC,EACrG,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsBC,GAAejC,EAAQM,EAAWM,EAAQsB,EAAW,CACvE,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAUkB,GAAgBf,CAAM,CACpC,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CAMA,eAAsB0B,GAASnC,EAAQoC,EAAM,CACzC,IAAM7E,EAAQ,OAAO6E,GAAS,SAAWpF,GAAI,OAAOoF,CAAI,EAAIA,EAC5D,OAAM7E,aAAiB,YAAaH,GAAK,yCAA0C,UAAU,EACzFG,EAAM,OAASX,EAAa,gBAAgBQ,GAAK,uCAAwC,gBAAgB,EACtG,IAAI,WAAW,MAAM4C,EAAO,OAAO,UAAWzC,CAAK,CAAC,CAC/D,CASO,SAAS8E,GAAoB,CAAE,QAAAjD,EAAS,MAAAI,EAAO,IAAA8C,EAAK,SAAAC,EAAU,SAAAC,CAAS,EAAG,CAC7E,OAAArD,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACjBD,GAAY+C,CAAG,EACfjD,GAAkBkD,CAAQ,GACtB,EAAEC,aAAoB,aAAeA,EAAS,SAAW,KAAIpF,GAAK,6BAA8B,eAAe,EAC5GiB,GAAG,6BAA8BV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAGV,GAAIwD,CAAG,EAAG3E,GAAQ4E,CAAQ,EAAGC,CAAQ,CAC/G,CAEA,eAAsBC,GAAiBzC,EAAQ+B,EAAYnB,EAAQ,CAC/D,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYM,GAAoBzB,CAAM,CAAC,EACzG,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsBU,GAAmB1C,EAAQM,EAAWM,EAAQsB,EAAW,CAC3E,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAU4B,GAAoBzB,CAAM,CACxC,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CAkCO,SAASkC,GAAsB,CAAE,QAAAvD,EAAS,MAAAI,EAAO,KAAAoD,EAAM,OAAAC,EAAQ,KAAAC,EAAM,WAAAC,EAAY,MAAAvC,CAAM,EAAG,CAC7F,OAAArB,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACboD,IAAS9F,GAAW,OAAS8F,IAAS9F,GAAW,QACjDM,GAAK,+BAAgC,eAAe,EAExDiC,GAAkBwD,CAAM,EACxBxD,GAAkByD,CAAI,EAClBD,IAAWC,GAAM1F,GAAK,8BAA+B,eAAe,GACpE,OAAO2F,GAAe,UAAYA,EAAW,SAAW,GACrDA,EAAW,OAASnG,EAAa,uBACpCQ,GAAK,0CAA2C,gBAAgB,GAEhE,EAAEoD,aAAiB,aAAeA,EAAM,SAAW5D,EAAa,mBAChEQ,GAAK,8BAA+B,gBAAgB,EAEjDiB,GACH,qCACAV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAGoD,EAC9BjF,GAAQkF,CAAM,EAAGlF,GAAQmF,CAAI,EAC7BC,EAAYvC,CAChB,CACJ,CAEA,eAAsBwC,GAAmBhD,EAAQ+B,EAAYnB,EAAQ,CACjE,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYY,GAAsB/B,CAAM,CAAC,EAC3G,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsBiB,GAAqBjD,EAAQM,EAAWM,EAAQsB,EAAW,CAC7E,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAUkC,GAAsB/B,CAAM,CAC1C,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CAwBO,SAASyC,GAAiB,CAAE,QAAA9D,EAAS,MAAAI,EAAO,GAAAF,EAAI,OAAA6D,CAAO,EAAG,CAC7D,OAAAhE,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACjBH,GAAkBC,CAAE,GAChB,OAAO6D,GAAW,UAAYA,EAAO,SAAW,GAAKA,EAAO,OAAS,MACrE/F,GAAK,2CAA4C,aAAa,EAE3DiB,GAAG,gCAAiCV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAG7B,GAAQ2B,CAAE,EAAG6D,CAAM,CAChG,CAEA,eAAsBC,GAAcpD,EAAQ+B,EAAYnB,EAAQ,CAC5D,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYmB,GAAiBtC,CAAM,CAAC,EACtG,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsBqB,GAAgBrD,EAAQM,EAAWM,EAAQsB,EAAW,CACxE,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAUyC,GAAiBtC,CAAM,CACrC,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CAgBO,SAAS6C,GAAiB,CAAE,QAAAlE,EAAS,MAAAI,EAAO,OAAA+D,EAAQ,OAAAC,EAAQ,GAAAlE,EAAI,IAAAgD,EAAK,UAAAmB,CAAU,EAAG,CACrF,OAAAtE,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACjBkE,GAAaH,CAAM,EACnBhE,GAAY+C,CAAG,EACfjD,GAAkBC,CAAE,EAChBkE,IAAW3G,GAAa,OAAS2G,IAAW3G,GAAa,MAAQ2G,IAAW3G,GAAa,OACzFO,GAAK,sBAAuB,iBAAiB,EAE1CiB,GACH,0BACAV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAG7B,GAAQ4F,CAAM,EAAGC,EAC/C7F,GAAQ2B,CAAE,EAAGR,GAAIwD,CAAG,EAAGmB,IAAc,GAAO,IAAM,GACtD,CACJ,CAEO,SAASC,GAAaH,EAAQ,CACjC,OAAI,OAAOA,GAAW,UAAYA,EAAO,SAAW3G,EAAa,cAAgB,GAAK,CAAC,cAAc,KAAK2G,CAAM,IAC5GnG,GAAK,oBAAqB,aAAa,EAEpCmG,CACX,CAEO,SAASI,IAAY,CACxB,OAAOrG,GAAMY,GAAYtB,EAAa,aAAa,CAAC,CACxD,CAEA,eAAsBgH,GAAc5D,EAAQ+B,EAAYnB,EAAQ,CAC5D,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYuB,GAAiB1C,CAAM,CAAC,EACtG,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsB6B,GAAgB7D,EAAQM,EAAWM,EAAQsB,EAAW,CACxE,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAU6C,GAAiB1C,CAAM,CACrC,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CC/zBO,IAAMqD,GAAgB,OAAO,OAAO,CACvC,aAAc,eACd,aAAc,eACd,iBAAkB,mBAClB,UAAW,YACX,YAAa,cACb,aAAc,eACd,QAAS,UACT,YAAa,cACb,YAAa,cACb,aAAc,eACd,sBAAuB,wBACvB,iBAAkB,mBAClB,aAAc,eACd,OAAQ,SACR,UAAW,WACf,CAAC,EAUYC,EAAc,OAAO,OAAO,CACrC,QAAS,UACT,WAAY,aACZ,UAAW,YACX,aAAc,eACd,MAAO,QACP,OAAQ,QACZ,CAAC,EAGYC,GAAe,OAAO,OAAO,CACtC,KAAM,OACN,OAAQ,SACR,QAAS,UACT,KAAM,MACV,CAAC,EAEYC,GAAmB,CAC5B,CAACF,EAAY,OAAO,EAAGG,EAAE,oBAAoB,EAC7C,CAACH,EAAY,UAAU,EAAGG,EAAE,wBAAwB,EACpD,CAACH,EAAY,SAAS,EAAGG,EAAE,sBAAsB,EACjD,CAACH,EAAY,YAAY,EAAGG,EAAE,oBAAoB,EAClD,CAACH,EAAY,KAAK,EAAGG,EAAE,kBAAkB,EACzC,CAACH,EAAY,MAAM,EAAGG,EAAE,mBAAmB,CAC/C,EAGO,SAASC,GAAcC,EAAM,CAChC,IAAMC,EAAQ,OAAOD,GAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,EAC7DE,EAAID,EAAM,CAAC,IAAI,CAAC,GAAK,GACrBE,EAAIF,EAAM,CAAC,IAAI,CAAC,GAAKA,EAAM,CAAC,IAAI,CAAC,GAAK,GAC5C,OAAQC,EAAIC,GAAG,YAAY,GAAK,IACpC,CAEO,SAASC,GAAiBC,EAAO,CAAC,EAAG,CACxC,MAAO,CACH,GAAIA,EAAK,GACT,KAAMA,EAAK,MAAQ,QACnB,UAAWA,EAAK,WAAa,KAAK,IAAI,EACtC,QAASA,EAAK,SAAW,GACzB,OAAQA,EAAK,QAAU,GACvB,QAAS,CAAC,CAACA,EAAK,QAChB,MAAO,OAAO,UAAUA,EAAK,KAAK,EAAIA,EAAK,MAAQ,EACnD,MAAOA,EAAK,OAASV,EAAY,QAGjC,QAAS,MAAM,QAAQU,EAAK,OAAO,EAAI,CAAC,GAAGA,EAAK,OAAO,EAAE,KAAKC,EAAa,EAAI,CAAC,EAChF,QAAS,GACT,aAAc,GACd,SAAU,CAAC,EACX,YAAa,EACb,MAAO,IACX,CACJ,CAEA,IAAMC,GAAe,IAAI,YAGzB,SAASC,GAAeC,EAAO,CAC3B,IAAIC,EAAM,OAAOD,CAAK,EACtB,KAAOF,GAAa,OAAOG,CAAG,EAAE,OAASC,EAAa,gBAAgBD,EAAMA,EAAI,MAAM,EAAG,EAAE,EAC3F,OAAOA,CACX,CAEA,SAASJ,GAAcJ,EAAGC,EAAG,CACzB,OAAOD,EAAE,GAAKC,EAAE,GAAK,GAAKD,EAAE,GAAKC,EAAE,GAAK,EAAI,CAChD,CAEO,SAASS,IAA0B,CACtC,MAAO,CAAE,OAAQ,CAAC,EAAG,MAAO,CAAC,EAAG,cAAe,IAAK,CACxD,CAGA,SAASC,GAAWC,EAAOC,EAAIC,EAAO,CAClC,IAAMC,EAAQH,EAAM,OAAOC,CAAE,EAC7B,OAAKE,EACE,CAAE,GAAGH,EAAO,OAAQ,CAAE,GAAGA,EAAM,OAAQ,CAACC,CAAE,EAAG,CAAE,GAAGE,EAAO,GAAGD,CAAM,CAAE,CAAE,EAD1DF,CAEvB,CAEO,SAASI,GAAcJ,EAAOK,EAAQ,CACzC,IAAMC,EAAI1B,GACV,OAAQyB,EAAO,KAAM,CACjB,KAAKC,EAAE,aAAc,CACjB,IAAMC,EAAQF,EAAO,OAASf,GAAiBe,CAAM,EACrD,MAAI,CAACE,EAAM,IAAMP,EAAM,OAAOO,EAAM,EAAE,EAAUP,EACzC,CACH,OAAQ,CAAE,GAAGA,EAAM,OAAQ,CAACO,EAAM,EAAE,EAAGA,CAAM,EAC7C,MAAO,CAAC,GAAGP,EAAM,MAAOO,EAAM,EAAE,EAChC,cAAeF,EAAO,WAAa,GAAQL,EAAM,cAAgBO,EAAM,EAC3E,CACJ,CAEA,KAAKD,EAAE,aAAc,CACjB,GAAM,CAAE,GAAAL,CAAG,EAAII,EACf,GAAI,CAACL,EAAM,OAAOC,CAAE,EAAG,OAAOD,EAC9B,IAAMQ,EAAS,CAAE,GAAGR,EAAM,MAAO,EACjC,OAAOQ,EAAOP,CAAE,EAChB,IAAMQ,EAAQT,EAAM,MAAM,OAAQU,GAAMA,IAAMT,CAAE,EAC5CU,EAAgBX,EAAM,cAC1B,GAAIW,IAAkBV,EAAI,CACtB,IAAMW,EAAaZ,EAAM,MAAM,QAAQC,CAAE,EACzCU,EAAgBF,EAAM,KAAK,IAAI,EAAGG,EAAa,CAAC,CAAC,GAAKH,EAAM,CAAC,GAAK,IACtE,CACA,MAAO,CAAE,OAAAD,EAAQ,MAAAC,EAAO,cAAAE,CAAc,CAC1C,CAEA,KAAKL,EAAE,iBAEH,OAAID,EAAO,KAAO,KACPL,EAAM,gBAAkB,KAAOA,EAAQ,CAAE,GAAGA,EAAO,cAAe,IAAK,EAE9E,CAACA,EAAM,OAAOK,EAAO,EAAE,GAAKL,EAAM,gBAAkBK,EAAO,GAAWL,EACnE,CAAE,GAAGA,EAAO,cAAeK,EAAO,EAAG,EAGhD,KAAKC,EAAE,UAAW,CACd,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,GAASA,EAAM,QAAUE,EAAO,MAAO,OAAOL,EAInD,IAAME,EAAQ,CAAE,MAAOG,EAAO,KAAM,EACpC,OAAIA,EAAO,QAAUxB,EAAY,OAASsB,EAAM,eAC5CD,EAAM,aAAe,IAKrBG,EAAO,QAAUxB,EAAY,OAASwB,EAAO,QAAUxB,EAAY,eACnEqB,EAAM,QAAU,IAEhBG,EAAO,QAAUxB,EAAY,SAAQqB,EAAM,MAAQ,MAChDH,GAAWC,EAAOK,EAAO,GAAIH,CAAK,CAC7C,CAEA,KAAKI,EAAE,YAAa,CAChB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EAEnB,IAAME,EAAQ,CAAE,QADA,MAAM,QAAQG,EAAO,OAAO,EAAI,CAAC,GAAGA,EAAO,OAAO,EAAE,KAAKb,EAAa,EAAIW,EAAM,OACxE,EACxB,OAAI,OAAO,UAAUE,EAAO,KAAK,IAAGH,EAAM,MAAQG,EAAO,OAClDN,GAAWC,EAAOK,EAAO,GAAIH,CAAK,CAC7C,CAEA,KAAKI,EAAE,aAAc,CACjB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EACnB,IAAIa,EAAU,GACRC,EAAUX,EAAM,QAAQ,IAAKY,GAAM,CACrC,GAAIA,EAAE,KAAOV,EAAO,GAAI,OAAOU,EAC/B,IAAMC,EAAO,CAAE,GAAGD,EAAG,GAAGV,EAAO,KAAM,EAIrC,OAAI,OAAO,KAAKA,EAAO,KAAK,EAAE,MAAOY,GAAMF,EAAEE,CAAC,IAAMD,EAAKC,CAAC,CAAC,EAAUF,GACrEF,EAAU,GACHG,EACX,CAAC,EACD,OAAOH,EAAUd,GAAWC,EAAOK,EAAO,GAAI,CAAE,QAAAS,CAAQ,CAAC,EAAId,CACjE,CAEA,KAAKM,EAAE,QAAS,CACZ,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,MAAI,CAACF,GAASA,EAAM,UAAYE,EAAO,KAAaL,EAC7CD,GAAWC,EAAOK,EAAO,GAAI,CAAE,QAASA,EAAO,MAAQ,GAAI,aAAc,EAAM,CAAC,CAC3F,CAEA,KAAKC,EAAE,YAAa,CAChB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EAcpC,MAbI,CAACF,GAWD,CAACA,EAAM,SACPA,EAAM,QAAUtB,EAAY,cAC5BsB,EAAM,cAAgBA,EAAM,QAAUtB,EAAY,MAAcmB,EAC7DD,GAAWC,EAAOK,EAAO,GAAI,CAAE,aAAc,GAAM,MAAOxB,EAAY,MAAO,MAAO,IAAK,CAAC,CACrG,CAEA,KAAKyB,EAAE,YAAa,CAChB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,OAAKF,EACEJ,GAAWC,EAAOK,EAAO,GAAI,CAAE,SAAU,CAAC,GAAGF,EAAM,SAAUE,EAAO,OAAO,CAAE,CAAC,EADlEL,CAEvB,CAEA,KAAKM,EAAE,aAAc,CACjB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EACnB,IAAMgB,EAAO,OAAOX,EAAO,SAAY,WAAaA,EAAO,QAAQF,EAAM,QAAQ,EAAIE,EAAO,SAC5F,OAAON,GAAWC,EAAOK,EAAO,GAAI,CAAE,SAAU,MAAM,QAAQW,CAAI,EAAIA,EAAO,CAAC,CAAE,CAAC,CACrF,CAEA,KAAKV,EAAE,sBAAuB,CAC1B,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EACnB,IAAIa,EAAU,GACRK,EAAWf,EAAM,SAAS,IAAKY,GAC7B,OAAOA,EAAE,GAAG,IAAM,OAAOV,EAAO,GAAG,GAAKU,EAAE,SAAWV,EAAO,QAC5DQ,EAAU,GACH,CAAE,GAAGE,EAAG,OAAQV,EAAO,MAAO,GAElCU,CACV,EACD,OAAOF,EAAUd,GAAWC,EAAOK,EAAO,GAAI,CAAE,SAAAa,CAAS,CAAC,EAAIlB,CAClE,CAEA,KAAKM,EAAE,iBAAkB,CACrB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,OAAKF,EACEJ,GAAWC,EAAOK,EAAO,GAAI,CAAE,YAAaF,EAAM,YAAc,CAAE,CAAC,EADvDH,CAEvB,CAEA,KAAKM,EAAE,aAAc,CACjB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,MAAI,CAACF,GAASA,EAAM,cAAgB,EAAUH,EACvCD,GAAWC,EAAOK,EAAO,GAAI,CAAE,YAAa,CAAE,CAAC,CAC1D,CAEA,KAAKC,EAAE,OAAQ,CACX,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EAInB,IAAMd,EAAOQ,GAAe,OAAOW,EAAO,MAAQ,EAAE,EAAE,KAAK,CAAC,GAAKF,EAAM,KACvE,OAAOJ,GAAWC,EAAOK,EAAO,GAAI,CAAE,KAAAnB,CAAK,CAAC,CAChD,CAEA,KAAKoB,EAAE,UAAW,CAEd,GAAI,CADUN,EAAM,OAAOK,EAAO,EAAE,EACxB,OAAOL,EACnB,IAAME,EAAQ,CAAE,MAAOG,EAAO,OAAS,IAAK,EAC5C,OAAIA,EAAO,QAAOH,EAAM,MAAQrB,EAAY,QACrCkB,GAAWC,EAAOK,EAAO,GAAIH,CAAK,CAC7C,CAEA,QACI,OAAOF,CACf,CACJ,CAOO,SAASmB,GAAYhB,EAAO,CAC/B,OAAOA,EAAM,QAAQ,OAAQY,GAAMA,EAAE,QAAUjC,GAAa,MAAQiC,EAAE,QAAUjC,GAAa,MAAM,EAAE,MACzG,CAQO,SAASsC,GAASjB,EAAO,CAC5B,GAAIA,EAAM,QAAUtB,EAAY,MAAO,OAAOE,GAAiBoB,EAAM,KAAK,GAAK,QAC/E,IAAMkB,EAAQlB,EAAM,QAAQ,OACtBmB,EAASH,GAAYhB,CAAK,EAChC,OAAImB,EAASD,EAAc,GAAGC,CAAM,OAAOD,CAAK,aACzC,GAAGA,CAAK,wBACnB,CAEO,SAASE,GAASpB,EAAO,CAC5B,OAAQA,EAAM,MAAO,CACjB,KAAKtB,EAAY,MACb,OAAOsC,GAAYhB,CAAK,EAAIA,EAAM,QAAQ,OAAS,2BAA6B,wBACpF,KAAKtB,EAAY,OACb,MAAO,sBACX,QACI,MAAO,0BACf,CACJ,CAEO,SAAS2C,GAAcrB,EAAOQ,EAAe,CAChD,IAAMc,EAAc,CAAC,GAAGtB,EAAM,QAAQ,EAAE,QAAQ,EAAE,KAC7CY,GAAM,CAACA,EAAE,SAAW,OAAOA,EAAE,SAAY,UAAYA,EAAE,QAAQ,KAAK,CACzE,EACMW,EAAMN,GAASjB,CAAK,EAC1B,MAAO,CACH,GAAIA,EAAM,GACV,KAAM,QACN,KAAMA,EAAM,KACZ,KAAMlB,GAAckB,EAAM,IAAI,EAC9B,IAAKoB,GAASpB,CAAK,EACnB,UAAWuB,EACX,MAAOvB,EAAM,MACb,YAAaA,EAAM,QAAQ,OAC3B,YAAagB,GAAYhB,CAAK,EAC9B,QAASsB,EAAcA,EAAY,QAAUC,EAC7C,OAAQvB,EAAM,YAAc,EAAKA,EAAM,YAAc,GAAK,MAAQ,OAAOA,EAAM,WAAW,EAAK,KAC/F,SAAUA,EAAM,QAAUtB,EAAY,OAASsB,EAAM,aACrD,OAAQA,EAAM,KAAOQ,EACrB,SAAUR,EAAM,KAAOQ,CAC3B,CACJ,CAEO,SAASgB,GAAe3B,EAAO,CAClC,OAAOA,EAAM,MACR,IAAKC,GAAOD,EAAM,OAAOC,CAAE,CAAC,EAC5B,OAAO,OAAO,EACd,IAAK2B,GAAMJ,GAAcI,EAAG5B,EAAM,aAAa,CAAC,CACzD,CCvQO,IAAM6B,GAAe,OAAO,OAAO,CACtC,OAAQ,WACR,MAAO,UACP,OAAQ,WACR,OAAQ,WACR,OAAQ,WACR,OAAQ,WACR,QAAS,QACT,MAAO,UACP,MAAO,UAGP,WAAY,WACZ,YAAa,YACb,WAAY,WAEZ,MAAO,UAGP,KAAM,QACV,CAAC,EAGYC,GAAiB,QAGjBC,GAAoB,OAAO,OAAO,IAAI,IAAI,OAAO,OAAOF,EAAY,CAAC,CAAC,EAE5E,SAASG,GAAaC,EAAQ,CACjC,MAAI,CAACA,GAAU,OAAOA,GAAW,SAAiB,GAC3CA,EAAO,OAASH,IAAkBC,GAAkB,IAAIE,EAAO,IAAI,CAC9E,CAUO,SAASC,GAAeD,EAAQ,CACnC,MAAI,CAACA,GAAU,OAAOA,GAAW,SAAiB,KAC9CA,EAAO,OAASH,GAAuB,OAAOG,EAAO,GAAM,SAAWA,EAAO,EAAI,KAC9EF,GAAkB,IAAIE,EAAO,IAAI,EAAIA,EAAO,KAAO,IAC9D,CAkBO,SAASE,GAAeC,EAAO,CAClC,IAAMC,EAAO,KAAK,UAAUD,CAAK,EAC3BE,EAAUC,GAAM,IAAI,YAAY,EAAE,OAAOF,CAAI,CAAC,EACpD,GAAIC,EAAQ,OAASE,EAAa,mBAC9B,MAAM,IAAIC,EAAkB,2CAA4C,iBAAiB,EAE7F,MAAO,CAAE,KAAMX,GAAgB,IAAKM,EAAM,IAAK,EAAGA,EAAM,KAAM,EAAGE,CAAQ,CAC7E,CAEO,SAASI,GAAeC,EAAU,CACrC,GAAI,CAACA,GAAYA,EAAS,OAASb,GAAgB,OAAOa,EAC1D,IAAMC,EAAM,OAAOD,EAAS,GAAK,EAAE,EACnC,GAAIC,EAAI,OAASJ,EAAa,mBAC1B,MAAM,IAAIC,EAAkB,2CAA4C,iBAAiB,EAE7F,IAAMI,EAAQC,GAAQF,EAAK,CAAE,IAAKJ,EAAa,kBAAmB,CAAC,EAC7DJ,EAAQ,KAAK,MAAM,IAAI,YAAY,EAAE,OAAOS,CAAK,CAAC,EACxD,GAAI,CAACT,GAAS,OAAOA,GAAU,UAAY,CAACL,GAAkB,IAAIK,EAAM,IAAI,EACxE,MAAM,IAAIK,EAAkB,yCAA0C,cAAc,EAIxF,GAAIE,EAAS,KAAOP,EAAM,MAAQO,EAAS,IACvC,MAAM,IAAIF,EAAkB,6CAA8C,cAAc,EAE5F,GAAIE,EAAS,GAAKP,EAAM,OAASO,EAAS,EACtC,MAAM,IAAIF,EAAkB,yCAA0C,cAAc,EAExF,OAAOL,CACX,CAEA,IAAMW,GAAW,OAAO,OAAO,CAI3B,YAAa,IAEb,SAAU,KAMV,aAAc,KAId,cAAe,GACnB,CAAC,EAGKC,GAA4B,EAE5BC,GAAoB,EAEbR,EAAN,cAAgC,KAAM,CACzC,YAAYS,EAASC,EAAO,gBAAiB,CACzC,MAAMD,CAAO,EACb,KAAK,KAAO,oBACZ,KAAK,KAAOC,CAChB,CACJ,EAEaC,GAAN,KAAmB,CAUtB,YAAY,CAAE,QAAAC,EAAS,KAAAC,EAAM,QAAAC,EAAS,OAAAC,EAAQ,KAAAC,EAAM,KAAAC,EAAM,KAAAC,EAAO,KAAM,IAAAC,EAAM,IAAM,CAAC,CAAE,EAAG,CACrF,KAAK,QAAUC,GAAcR,CAAO,EACpC,KAAK,KAAOS,GAAWR,CAAI,EAC3B,KAAK,QAAU,CAAC,CAACC,EACjB,KAAK,OAASC,EACd,KAAK,MAAQC,EACb,KAAK,MAAQC,EACb,KAAK,KAAOE,EAiBZ,KAAK,MAAQD,EAEb,KAAK,SAAW,KAChB,KAAK,MAAQ,EACb,KAAK,QAAU,GACf,KAAK,MAAQI,EAAY,QAGzB,KAAK,QAAU,IAAI,IAEnB,KAAK,YAAc,IAAI,IAEvB,KAAK,SAAW,KAChB,KAAK,QAAU,GACf,KAAK,aAAe,GAEpB,KAAK,IAAM,EAOX,KAAK,WAAa,IAAI,IAEtB,KAAK,QAAU,IAAI,IACnB,KAAK,WAAa,GAElB,KAAK,eAAiB,IAAI,IAc1B,KAAK,iBAAmB,CAAC,EACzB,KAAK,UAAY,GASjB,KAAK,aAAe,IAAI,IAQxB,KAAK,YAAc,KAUnB,KAAK,WAAa,IAAI,IAEtB,KAAK,cAAgB,IAAI,IAEzB,KAAK,cAAgB,IAAI,IAEzB,KAAK,QAAU,IAAI,IAEnB,KAAK,UAAY,KAajB,KAAK,KAAO,KAEZ,KAAK,QAAU,EAEf,KAAK,UAAY,IAAI,GACzB,CAMA,OAAO,OAAQ,CACX,OAAOC,GAAW,CACtB,CAEA,MAAM,MAAO,CACT,OAAI,KAAK,SAAiB,KAAK,UAC/B,KAAK,SAAW,MAAMC,GAAsB,KAAK,MAAM,EACvD,KAAK,QAAQ,IAAI,KAAK,SAAS,YAAa,CACxC,GAAI,KAAK,SAAS,YAClB,KAAM,MACN,KAAM,KAAK,SAAS,KACpB,UAAW,KACX,UAAW,KACX,MAAOC,GAAa,IACxB,CAAC,EACG,KAAK,UAAS,KAAK,QAAU,KAAK,SAAS,aACxC,KAAK,SAChB,CAEA,IAAI,QAAS,CACT,OAAO,KAAK,UAAU,aAAe,EACzC,CAEA,SAAU,CACN,KAAK,WAAa,GAClB,QAAWC,KAAK,KAAK,QAAS,aAAaA,CAAC,EAC5C,KAAK,QAAQ,MAAM,EACnB,GAAI,CAAE,KAAK,UAAU,QAAQ,CAAG,MAAY,CAAC,CAC7C,KAAK,SAAW,KAKhB,QAAWC,KAAa,KAAK,cACzB,GAAI,CAAE,KAAK,OAAO,MAAMA,CAAS,CAAG,MAAY,CAAC,CAErD,KAAK,cAAc,MAAM,EACzB,KAAK,WAAW,MAAM,EACtB,KAAK,cAAc,MAAM,EACzB,KAAK,QAAQ,MAAM,EAEnB,KAAK,KAAO,KACZ,KAAK,UAAU,MAAM,EAErB,KAAK,QAAQ,MAAM,EACnB,KAAK,YAAY,MAAM,EAEvB,KAAK,WAAW,MAAM,EACtB,KAAK,iBAAmB,CAAC,EACzB,KAAK,aAAa,MAAM,EACxB,KAAK,YAAc,KACnB,KAAK,SAAW,IACpB,CAEA,OAAOC,EAAIC,EAAI,CACX,IAAMH,EAAI,WAAW,IAAM,CAAE,KAAK,QAAQ,OAAOA,CAAC,EAAQ,KAAK,YAAYE,EAAG,CAAG,EAAGC,CAAE,EACtF,YAAK,QAAQ,IAAIH,CAAC,EACXA,CACX,CAEA,MAAMhB,EAAM,CACR,GAAI,MAAK,WACT,MAAK,KAAK,OAAQ,wBAAyB,CAAE,KAAAA,CAAK,CAAC,EACnD,KAAK,MAAQY,EAAY,OACzB,GAAI,CAAE,KAAK,UAAU,QAAQ,CAAG,MAAY,CAAC,CAC7C,KAAK,SAAW,KAChB,KAAK,MAAM,QAAS,CAAE,MAAOZ,CAAK,CAAC,EACvC,CAEA,UAAUoB,EAAO,CACT,KAAK,QAAUA,IACnB,KAAK,MAAQA,EAETA,IAAUR,EAAY,QAAO,KAAK,aAAe,IAIjDQ,IAAUR,EAAY,OAASQ,IAAUR,EAAY,eACrD,KAAK,QAAU,IAEnB,KAAK,MAAM,QAAS,CAAE,MAAAQ,CAAM,CAAC,EACjC,CAGA,iBAAkB,CACd,MAAO,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,EAAE,IAAKC,IAAO,CAC1C,GAAIA,EAAE,GAAI,KAAMA,EAAE,KAAM,UAAWA,EAAE,UAAW,MAAOA,EAAE,KAC7D,EAAE,CACN,CAEA,cAAe,CACX,KAAK,WAAW,EAChB,KAAK,MAAM,UAAW,CAAE,QAAS,KAAK,gBAAgB,EAAG,MAAO,KAAK,KAAM,CAAC,CAChF,CAUA,YAAa,CACT,GAAI,CAAC,KAAK,KAAM,OAChB,IAAIC,EAAU,GACd,QAAWC,IAAM,CAAC,GAAG,KAAK,KAAK,YAAY,EAClC,KAAK,QAAQ,IAAIA,CAAE,IAAK,KAAK,KAAK,aAAa,OAAOA,CAAE,EAAGD,EAAU,IAE1E,KAAK,KAAK,aAAa,OAAS,IAAK,KAAK,KAAO,KAAMA,EAAU,IACjEA,GAAS,KAAK,MAAM,OAAQ,CAAE,KAAM,KAAK,gBAAgB,CAAE,CAAC,CACpE,CAOA,cAAe,CACX,MAAO,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,EAAE,OAC7BD,GAAMA,EAAE,QAAUN,GAAa,QAAUM,EAAE,SAChD,CACJ,CASA,UAAUG,EAAM,CACZ,IAAMC,EAAQ,KAAK,QAAQ,IAAI,KAAK,OAAO,EAC3C,OAAIA,GAASA,EAAM,QAAUV,GAAa,QAAUU,EAAM,WAAaA,EAAM,KAAOD,EACzEC,EAEJ,KAAK,aAAa,EAAE,KAAMJ,GAAMA,EAAE,KAAOG,CAAI,GAAK,IAC7D,CAUA,MAAM,MAAMP,EAAWhC,EAAO,CAC1B,OAAO,KAAK,MAAMgC,EAAWjC,GAAeC,CAAK,CAAC,CACtD,CAGA,MAAM,QAAQuC,EAAMvC,EAAO,CACvB,IAAMyC,EAAS,KAAK,QAAQ,IAAIF,CAAI,EACpC,GAAI,CAACE,GAAUA,EAAO,KAAO,KAAK,OAAQ,MAAO,GAEjD,GAAIA,EAAO,QAAUX,GAAa,QAAUW,EAAO,UAC/C,aAAM,KAAK,MAAMA,EAAO,UAAWzC,CAAK,EACjC,GAEX,IAAM0C,EAAQ,KAAK,UAAUH,CAAI,EACjC,OAAKG,GACL,MAAM,KAAK,MAAMA,EAAM,UAAW,CAC9B,KAAMjD,GAAa,MACnB,IAAK,KAAK,QACV,GAAI8C,EACJ,OAAQ,GACR,MAAOvC,CACX,CAAC,EAUMyC,EAAO,QAAUX,GAAa,MAjBlB,EAkBvB,CASA,MAAM,WAAW9B,EAAO,CAAE,QAAA2C,EAAU,CAAC,CAAE,EAAI,CAAC,EAAG,CAC3C,IAAMC,EAAU,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,EAAE,OACpCN,GAAOA,IAAO,KAAK,QAAU,CAACK,EAAQ,SAASL,CAAE,CACtD,EACMO,EAAU,MAAM,QAAQ,WAAWD,EAAQ,IAAKN,GAAO,KAAK,QAAQA,EAAItC,CAAK,CAAC,CAAC,EAC/E8C,EAAc,CAAC,EACjBC,EAAY,EAChB,OAAAF,EAAQ,QAAQ,CAACG,EAAQC,IAAM,CAC3B,GAAID,EAAO,SAAW,aAAeA,EAAO,QAAU,GAAM,CACxDD,GAAa,EACb,MACJ,CACA,IAAMN,EAAS,KAAK,QAAQ,IAAIG,EAAQK,CAAC,CAAC,EAC1CH,EAAY,KAAK,CAAE,GAAIF,EAAQK,CAAC,EAAG,KAAMR,GAAQ,MAAQ,UAAW,CAAC,CACzE,CAAC,EACM,CAAE,UAAAM,EAAW,YAAAD,CAAY,CACpC,CAUA,YAAYR,EAAIN,EAAWkB,EAAQpB,GAAa,OAAQ,CACpD,IAAMW,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,OAAKG,GAKDA,EAAO,WAAaA,EAAO,YAAcT,IACzC,KAAK,YAAY,OAAOS,EAAO,SAAS,EACxC,KAAK,kBAAkBA,EAAO,SAAS,GAE3CA,EAAO,UAAYT,EACnBS,EAAO,MAAQS,EACXlB,GAAW,KAAK,YAAY,IAAIA,EAAWM,CAAE,EACjD,KAAK,aAAa,EACX,IAba,EAcxB,CAWA,cAAcA,EAAI,CACd,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,GAAI,CAACG,GAAU,CAACA,EAAO,UAAW,MAAO,GACzC,IAAMT,EAAYS,EAAO,UACzB,YAAK,YAAY,OAAOT,CAAS,EACjCS,EAAO,UAAY,MACfA,EAAO,QAAUX,GAAa,QAAUW,EAAO,QAAUX,GAAa,QACtEW,EAAO,MAAQX,GAAa,SAEhC,KAAK,kBAAkBE,CAAS,EAChC,KAAK,aAAa,EAIlB,KAAK,sBAAsB,EACpB,EACX,CAGA,gBAAgBA,EAAWmB,EAAW,CAClC,IAAMb,EAAK,KAAK,YAAY,IAAIN,CAAS,EACzC,GAAI,CAACM,EAAI,OACT,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,GAAI,CAACG,GAAUA,EAAO,QAAUX,GAAa,KAAM,OACnD,IAAMsB,EAAOD,EAAYrB,GAAa,OAASA,GAAa,KACxDW,EAAO,QAAUW,IACrBX,EAAO,MAAQW,EACf,KAAK,aAAa,EAOdD,GAAW,KAAK,YAAYb,CAAE,EAIlC,KAAK,sBAAsB,EAC/B,CAqDA,iBAAiBA,EAAIe,EAAM,CAGvB,GAFI,KAAK,YACL,KAAK,WAAW,IAAIf,CAAE,IAAMe,GAC5B,KAAK,QAAUA,EAAK,MAAO,MAAO,GACtC,IAAMZ,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAElC,MADI,GAACG,GACDA,EAAO,WAAaA,EAAO,YAAcY,EAAK,UAEtD,CAGA,aAAaf,EAAIe,EAAMrB,EAAW,CAC1B,KAAK,WAAW,IAAIM,CAAE,IAAMe,IACxBA,EAAK,QAAS,aAAaA,EAAK,KAAK,EAAG,KAAK,QAAQ,OAAOA,EAAK,KAAK,GAC1E,KAAK,WAAW,OAAOf,CAAE,GAE7B,KAAK,cAAc,OAAON,CAAS,EACnC,GAAI,CAAE,KAAK,OAAO,MAAMA,CAAS,CAAG,MAAY,CAAC,CACrD,CAGA,kBAAkBA,EAAW,CACzB,GAAI,GAACA,GAAa,CAAC,KAAK,cAAc,IAAIA,CAAS,GACnD,MAAK,cAAc,OAAOA,CAAS,EACnC,GAAI,CAAE,KAAK,OAAO,MAAMA,CAAS,CAAG,MAAY,CAAC,EACrD,CAGA,YAAYM,EAAI,CACZ,IAAMe,EAAO,KAAK,WAAW,IAAIf,CAAE,EAC9Be,IACDA,EAAK,QAAS,aAAaA,EAAK,KAAK,EAAG,KAAK,QAAQ,OAAOA,EAAK,KAAK,GAC1E,KAAK,WAAW,OAAOf,CAAE,EACzB,KAAK,cAAc,OAAOA,CAAE,EAChC,CAWA,UAAUA,EAAIvB,EAAM,CAAE,SAAAuC,EAAW,EAAK,EAAI,CAAC,EAAG,CAC1C,IAAMD,EAAO,KAAK,WAAW,IAAIf,CAAE,EACnC,GAAIe,EAAM,CACFA,EAAK,QAAS,aAAaA,EAAK,KAAK,EAAG,KAAK,QAAQ,OAAOA,EAAK,KAAK,GAC1E,KAAK,WAAW,OAAOf,CAAE,EACzB,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAG9Be,EAAK,WAAaZ,GAAUA,EAAO,YAAcY,EAAK,UACtD,KAAK,cAAcf,CAAE,EAErB,KAAK,kBAAkBe,EAAK,SAAS,CAE7C,CAEA,IAAME,EAAU,KAAK,cAAc,IAAIjB,CAAE,GAAK,CAAE,SAAU,EAAG,OAAQ,CAAE,EACvEiB,EAAQ,UAAY,EACpBA,EAAQ,OAAS,KAAK,IAAI,EAAI5C,GAAS,cAAgB,IAAM4C,EAAQ,SAAW,GAChF,KAAK,cAAc,IAAIjB,EAAIiB,CAAO,EAClC,KAAK,KAAK,OAAQ,mBAAoB,CAAE,KAAAxC,EAAM,SAAUwC,EAAQ,QAAS,CAAC,EAKtED,GAAY,KAAK,QAAQ,IAAIhB,CAAE,GAC/B,KAAK,QAAQA,EAAI,CACb,KAAM7C,GAAa,WAAY,IAAK,KAAK,QAAS,MAAO,KAAK,MAC9D,KAAM,KAAK,OAAQ,GAAI6C,CAC3B,CAAC,EAAE,MAAM,IAAM,CAAC,CAAC,EAErB,KAAK,sBAAsB,CAC/B,CAUA,YAAa,CACT,QAAWA,IAAM,CAAC,GAAG,KAAK,WAAW,KAAK,CAAC,EAAG,CAC1C,IAAMe,EAAO,KAAK,WAAW,IAAIf,CAAE,EAC/Be,GAAM,QAAS,aAAaA,EAAK,KAAK,EAAG,KAAK,QAAQ,OAAOA,EAAK,KAAK,GAC3E,KAAK,WAAW,OAAOf,CAAE,EACzB,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAC9Be,GAAM,WAAaZ,GAAUA,EAAO,YAAcY,EAAK,UACvD,KAAK,cAAcf,CAAE,EAErB,KAAK,kBAAkBe,GAAM,SAAS,CAE9C,CACA,KAAK,cAAc,MAAM,EACzB,KAAK,QAAQ,MAAM,CACvB,CAUA,uBAAwB,CAChB,KAAK,YAAc,CAAC,KAAK,OAAS,KAAK,YAC3C,KAAK,UAAY,KAAK,OAAO,IAAM,CAC/B,KAAK,UAAY,KACjB,KAAK,cAAc,CACvB,EAAG,CAAC,EACR,CAGA,eAAgB,CAEZ,GADI,KAAK,YAAc,CAAC,KAAK,OACzB,KAAK,QAAU1B,EAAY,OAAS,CAAC,KAAK,aAAc,OAE5D,IAAM6B,EAAM,KAAK,IAAI,EACjBC,EAAW,KAAK,WAAW,KAC3BC,EAAU,IAId,QAAWpB,KAAMqB,GAAsB,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,CAAC,EAAG,CAC9D,GAAIF,GAAY7C,GAA2B,MAC3C,IAAM6B,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAIlC,GAHI,CAACG,GAAUA,EAAO,QAAUX,GAAa,MACzCW,EAAO,WACP,KAAK,WAAW,IAAIH,CAAE,GACtB,EAAE,KAAK,OAASA,GAAK,SAEzB,IAAMiB,EAAU,KAAK,cAAc,IAAIjB,CAAE,EACzC,GAAIiB,EAAS,CACT,GAAIA,EAAQ,UAAY1C,GAAmB,SAC3C,GAAI2C,EAAMD,EAAQ,OAAQ,CAAEG,EAAU,KAAK,IAAIA,EAASH,EAAQ,MAAM,EAAG,QAAU,CACvF,CAGK,KAAK,UAAUjB,CAAE,IAEtBmB,GAAY,EACZ,KAAK,UAAUnB,CAAE,EAAE,MAAM,IAAM,CAAC,CAAC,EACrC,CAGIoB,IAAY,KAAY,CAAC,KAAK,YAC9B,KAAK,UAAY,KAAK,OAAO,IAAM,CAC/B,KAAK,UAAY,KACjB,KAAK,cAAc,CACvB,EAAG,KAAK,IAAI,EAAGA,EAAUF,CAAG,EAAI,EAAE,EAE1C,CAGA,MAAM,UAAUlB,EAAI,CAChB,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,GAAI,CAACG,GAAUA,EAAO,WAAa,KAAK,WAAW,IAAIH,CAAE,EAAG,OAE5D,IAAMsB,EAAQ,KAAK,MACbC,EAAQC,GAAY1D,EAAa,gBAAgB,EAIjDiD,EAAO,CAAE,KAAM,QAAS,UAAW,KAAM,MAAAQ,EAAO,MAAAD,EAAO,MAAO,IAAK,EACzE,KAAK,WAAW,IAAItB,EAAIe,CAAI,EAE5B,GAAI,CACA,IAAMU,EAAO,MAAM,KAAK,MAAM,YAAYzB,CAAE,EACtCN,EAAY+B,GAAQA,EAAK,UACzBC,EAAa,OAAQD,GAAQA,EAAK,YAAe,EAAE,EACzD,GAAI,CAAC/B,GAAa,CAACgC,EAAY,MAAM,IAAI3D,EAAkB,wCAAyC,eAAe,EAGnH,GAAI,CAAC,KAAK,iBAAiBiC,EAAIe,CAAI,EAAG,OAAO,KAAK,aAAaf,EAAIe,EAAMrB,CAAS,EAClFqB,EAAK,UAAYrB,EACjB,KAAK,cAAc,IAAIA,CAAS,EAIhC,KAAK,YAAYM,EAAIN,EAAWF,GAAa,OAAO,EAEpD,IAAMmC,EAAM,MAAMC,GAAmB,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAChF,QAAS,KAAK,QAAS,MAAAN,EAAO,KAAMO,GAAW,MAC/C,OAAQ,KAAK,OAAQ,KAAM7B,EAAI,WAAA0B,EAAY,MAAAH,CAC/C,CAAC,EAMD,GAAI,CALS,MAAM,KAAK,QAAQvB,EAAI,CAChC,KAAM7C,GAAa,WAAY,IAAK,KAAK,QAAS,MAAAmE,EAClD,KAAM,KAAK,OAAQ,GAAItB,EAAI,EAAG0B,EAC9B,EAAG7D,GAAM0D,CAAK,EAAG,IAAK1D,GAAM8D,CAAG,CACnC,CAAC,EACU,MAAM,IAAI5D,EAAkB,6BAA8B,aAAa,EAElFgD,EAAK,MAAQ,KAAK,OAAO,IAAM,KAAK,UAAUf,EAAI,cAAc,EAAG3B,GAAS,YAAY,CAC5F,OAASyD,EAAO,CACZ,KAAK,UAAU9B,EAAI8B,GAAO,MAAQ,aAAa,CACnD,CACJ,CAEA,MAAM,aAAapE,EAAO,CACtB,GAAI,CAAC,KAAK,OAAS,KAAK,WAAY,OACpC,IAAMqE,EAAOC,GAAkB,OAAOtE,EAAM,MAAQ,EAAE,CAAC,EAGvD,GAFIsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,IAAM,KAAK,QACnDuE,GAAYvE,EAAM,KAAK,IAAM,KAAK,OAClC,KAAK,QAAU2B,EAAY,OAAS,CAAC,KAAK,aAAc,OAE5D,IAAMc,EAAS,KAAK,QAAQ,IAAI4B,CAAI,EACpC,GAAI,CAAC5B,GAAU,CAACA,EAAO,UACnB,MAAM,IAAIpC,EAAkB,8BAA+B,cAAc,EAM7E,GAJIoC,EAAO,WACP,KAAK,WAAW,IAAI4B,CAAI,GAGxB,KAAK,OAASA,EAAM,OAExB,IAAML,EAAa,OAAOhE,EAAM,GAAK,EAAE,EACvC,GAAI,CAACgE,GAAcA,EAAW,OAAS5D,EAAa,qBAChD,MAAM,IAAIC,EAAkB,0CAA2C,gBAAgB,EAE3F,IAAMwD,EAAQnD,GAAQ,OAAOV,EAAM,GAAK,EAAE,EAAG,CAAE,IAAKI,EAAa,gBAAiB,CAAC,EAKnF,GAAI,CAJO,MAAMoE,GAAqB,KAAK,OAAQ/B,EAAO,UAAW,CACjE,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,KAAM0B,GAAW,MAC3D,OAAQE,EAAM,KAAM,KAAK,OAAQ,WAAAL,EAAY,MAAAH,CACjD,EAAGnD,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,qCAAsC,eAAe,EAO1F,GADI,KAAK,YAAcoC,EAAO,WAAa,KAAK,WAAW,IAAI4B,CAAI,GAC/DE,GAAYvE,EAAM,KAAK,IAAM,KAAK,MAAO,OAE7C,IAAM4D,EAAQ,KAAK,MACbP,EAAO,CAAE,KAAM,SAAU,UAAW,KAAM,MAAAQ,EAAO,MAAAD,EAAO,MAAO,IAAK,EAC1E,KAAK,WAAW,IAAIS,EAAMhB,CAAI,EAE9B,GAAI,CACA,IAAMU,EAAO,MAAM,KAAK,MAAM,aAAaM,EAAML,CAAU,EACrDhC,EAAY+B,GAAQA,EAAK,UACzBU,EAAS,OAAQV,GAAQA,EAAK,YAAe,EAAE,EACrD,GAAI,CAAC/B,GAAa,CAACyC,EAAQ,MAAM,IAAIpE,EAAkB,oCAAqC,eAAe,EAE3G,GAAI,CAAC,KAAK,iBAAiBgE,EAAMhB,CAAI,EAAG,OAAO,KAAK,aAAagB,EAAMhB,EAAMrB,CAAS,EACtFqB,EAAK,UAAYrB,EACjB,KAAK,cAAc,IAAIA,CAAS,EAChC,KAAK,YAAYqC,EAAMrC,EAAWF,GAAa,OAAO,EAEtD,IAAMmC,EAAM,MAAMC,GAAmB,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAChF,QAAS,KAAK,QAAS,MAAAN,EAAO,KAAMO,GAAW,OAC/C,OAAQ,KAAK,OAAQ,KAAME,EAAM,WAAYI,EAAQ,MAAAZ,CACzD,CAAC,EAMD,GAAI,CALS,MAAM,KAAK,QAAQQ,EAAM,CAClC,KAAM5E,GAAa,YAAa,IAAK,KAAK,QAAS,MAAAmE,EACnD,KAAM,KAAK,OAAQ,GAAIS,EAAM,EAAGI,EAChC,EAAGtE,GAAM0D,CAAK,EAAG,IAAK1D,GAAM8D,CAAG,CACnC,CAAC,EACU,MAAM,IAAI5D,EAAkB,+BAAgC,aAAa,EAEpFgD,EAAK,MAAQ,KAAK,OAAO,IAAM,KAAK,UAAUgB,EAAM,gBAAgB,EAAG1D,GAAS,YAAY,CAChG,OAASyD,EAAO,CACZ,KAAK,UAAUC,EAAMD,GAAO,MAAQ,eAAe,CACvD,CACJ,CAEA,MAAM,cAAcpE,EAAO,CACvB,GAAI,CAAC,KAAK,OAAS,KAAK,WAAY,OACpC,IAAMqE,EAAOC,GAAkB,OAAOtE,EAAM,MAAQ,EAAE,CAAC,EAEvD,GADIsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,IAAM,KAAK,QACnDuE,GAAYvE,EAAM,KAAK,IAAM,KAAK,MAAO,OAE7C,IAAMqD,EAAO,KAAK,WAAW,IAAIgB,CAAI,EACrC,GAAI,CAAChB,GAAQA,EAAK,OAAS,SAAW,CAACA,EAAK,WAAaA,EAAK,QAAU,KAAK,MAAO,OAEpF,IAAMZ,EAAS,KAAK,QAAQ,IAAI4B,CAAI,EACpC,GAAI,CAAC5B,GAAU,CAACA,EAAO,UACnB,MAAM,IAAIpC,EAAkB,gCAAiC,cAAc,EAG/E,IAAM2D,EAAa,OAAOhE,EAAM,GAAK,EAAE,EACvC,GAAI,CAACgE,GAAcA,EAAW,OAAS5D,EAAa,qBAChD,MAAM,IAAIC,EAAkB,0CAA2C,gBAAgB,EAI3F,IAAMwD,EAAQnD,GAAQ,OAAOV,EAAM,GAAK,EAAE,EAAG,CAAE,IAAKI,EAAa,gBAAiB,CAAC,EACnF,GAAIyD,EAAM,SAAWR,EAAK,MAAM,QAAU,CAACQ,EAAM,MAAM,CAACa,EAAGzB,IAAMyB,IAAMrB,EAAK,MAAMJ,CAAC,CAAC,EAChF,MAAM,IAAI5C,EAAkB,gDAAiD,gBAAgB,EAOjG,GAAI,CAJO,MAAMmE,GAAqB,KAAK,OAAQ/B,EAAO,UAAW,CACjE,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,KAAM0B,GAAW,OAC3D,OAAQE,EAAM,KAAM,KAAK,OAAQ,WAAAL,EAAY,MAAAH,CACjD,EAAGnD,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,uCAAwC,eAAe,EAE5F,GAAI,CACA,MAAM,KAAK,MAAM,aAAagD,EAAK,UAAWW,CAAU,CAC5D,OAASI,EAAO,CACZ,KAAK,UAAUC,EAAMD,GAAO,MAAQ,iBAAiB,CACzD,CAGJ,CAEA,aAAapE,EAAO,CAChB,IAAMqE,EAAOC,GAAkB,OAAOtE,EAAM,MAAQ,EAAE,CAAC,EACnDsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,IAAM,KAAK,QAClD,KAAK,WAAW,IAAIqE,CAAI,GAE7B,KAAK,UAAUA,EAAM,eAAgB,CAAE,SAAU,EAAM,CAAC,CAC5D,CAkBA,MAAM,aAAarC,EAAW,CAG1B,OAFI,KAAK,YAAc,CAAC,KAAK,OAAS,CAACA,GACnC,KAAK,QAAUL,EAAY,OAAS,CAAC,KAAK,cAC1C,KAAK,YAAY,IAAIK,CAAS,EAAU,GACrC,KAAK,WAAWA,CAAS,CACpC,CAUA,MAAM,WAAWA,EAAW,CACxB,GAAI,KAAK,YAAc,KAAK,QAAQ,IAAIA,CAAS,EAAG,MAAO,GAC3D,IAAM2C,EAAS,KAAK,iBAAiB3C,CAAS,EAC9C,GAAI,CAAC2C,EAAQ,MAAO,GAEpB,KAAK,QAAQ,IAAI3C,CAAS,EAC1B,IAAMiC,EAAM,MAAMW,GAAc,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAC3E,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,GAAI,KAAK,OAAQ,OAAAD,CAC/D,CAAC,EACD,aAAM,KAAK,MAAM3C,EAAW,CACxB,KAAMvC,GAAa,MAAO,IAAK,KAAK,QAAS,MAAO,KAAK,MACzD,GAAI,KAAK,OAAQ,IAAKU,GAAM8D,CAAG,CACnC,CAAC,EACM,EACX,CAEA,iBAAiBjC,EAAW,CACxB,GAAI,CACA,IAAMM,EAAK,KAAK,OAAO,kBAAkBN,CAAS,EAClD,OAAO,OAAOM,GAAO,UAAYA,EAAG,OAAS,EAAIA,EAAK,EAC1D,MAAY,CACR,MAAO,EACX,CACJ,CAEA,MAAM,SAASN,EAAWhC,EAAO,CAG7B,GAFI,KAAK,YACL,KAAK,QAAU2B,EAAY,OAAS,CAAC,KAAK,cAC1C4C,GAAYvE,EAAM,KAAK,IAAM,KAAK,MAAO,OAE7C,IAAMsC,EAAKgC,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EACnD,GAAIsC,IAAO,KAAK,OAAQ,OACxB,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAIlC,GAHI,CAACG,GAAU,CAACA,EAAO,WACnB,KAAK,YAAY,IAAIT,CAAS,GAE9BS,EAAO,YAEHA,EAAO,QAAUX,GAAa,QAM9B,CAAC,KAAK,WAAW,IAAIQ,CAAE,GAAG,OAMlC,IAAMqC,EAAS,KAAK,iBAAiB3C,CAAS,EAC9C,GAAI,CAAC2C,EAAQ,OAKb,GAAI,CAHO,MAAME,GAAgB,KAAK,OAAQpC,EAAO,UAAW,CAC5D,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,GAAAH,EAAI,OAAAqC,CAClD,EAAGjE,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,sCAAuC,eAAe,EAI3F,KAAK,YAAYiC,CAAE,EACnB,KAAK,YAAYA,EAAIN,EAAWF,GAAa,MAAM,EAQnD,KAAK,WAAWE,CAAS,EAAE,MAAM,IAAM,CAAkC,CAAC,EAE1E,KAAK,sBAAsB,CAC/B,CAUA,MAAM,OAAO8C,EAAO,CAChB,GAAI,CAAC,KAAK,QAAS,MAAM,IAAIzE,EAAkB,yBAA0B,WAAW,EAEpF,GADA,MAAM,KAAK,KAAK,EACZyE,EAAM,OAAS,EAAI1E,EAAa,YAChC,MAAM,IAAIC,EAAkB,yBAAyBD,EAAa,WAAW,WAAY,kBAAkB,EAE/G,KAAK,UAAUuB,EAAY,OAAO,EAElC,QAAWoD,KAAQD,EAAO,KAAK,eAAe,IAAIC,EAAK,UAAWA,EAAK,MAAQ,QAAQ,EAEvF,IAAM/E,EAAQ,CACV,KAAMP,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,KAAM,KAAK,KACX,UAAWU,GAAM,KAAK,SAAS,IAAI,CACvC,EASM0C,EAAU,MAAM,QAAQ,WAAWiC,EAAM,IAAKE,GAAM,KAAK,MAAMA,EAAE,UAAWhF,CAAK,CAAC,CAAC,EACnFiF,EAASpC,EAAQ,OAAQqC,GAAMA,EAAE,SAAW,UAAU,EAC5D,GAAID,EAAO,SAAWH,EAAM,OACxB,WAAK,MAAM,+BAA+B,EACpC,IAAIzE,EACN,mFACA,+BACJ,EAEJ,GAAI4E,EAAO,OAAS,EAAG,CAGnB,IAAME,EAAYL,EAAM,OAAO,CAACM,EAAGnC,IAAMJ,EAAQI,CAAC,EAAE,SAAW,WAAW,EAC1E,QAAW+B,KAAKF,EACPK,EAAU,SAASH,CAAC,GAAG,KAAK,eAAe,OAAOA,EAAE,SAAS,EAEtE,KAAK,MAAM,iBAAkB,CAAE,KAAMG,EAAU,OAAQ,MAAOL,EAAM,MAAO,CAAC,CAChF,CAEA,KAAK,OAAO,IAAM,CACV,KAAK,QAAUnD,EAAY,SAAS,KAAK,MAAM,0BAA0B,CACjF,EAAGhB,GAAS,QAAQ,CACxB,CAGA,MAAM,aAAaqB,EAAWzB,EAAU,CAGpC,IAAMP,EAAQM,GAAeC,CAAQ,EACrC,MAAM,KAAK,KAAK,EAChB,IAAM8E,EAAY3E,GAAQ,OAAOV,EAAM,WAAa,EAAE,CAAC,EACjD,CAAE,UAAAsF,EAAW,YAAAC,CAAY,EAAI,MAAMC,GAAqB,KAAK,OAAQH,CAAS,EACpF,KAAK,QAAUE,EACf,KAAK,MAAQhB,GAAYvE,EAAM,KAAK,EACpC,KAAK,KAAO0B,GAAW1B,EAAM,IAAI,EAEjC,KAAK,QAAQ,IAAIuF,EAAa,CAC1B,GAAIA,EACJ,KAAM,QACN,KAAMF,EACN,UAAAC,EACA,UAAAtD,EACA,MAAOF,GAAa,MACxB,CAAC,EACD,KAAK,YAAY,IAAIE,EAAWuD,CAAW,EAC3C,KAAK,UAAU5D,EAAY,OAAO,EAClC,KAAK,aAAa,EAElB,MAAM,KAAK,MAAMK,EAAW,CACxB,KAAMvC,GAAa,MACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,KAAMU,GAAM,KAAK,SAAS,IAAI,CAClC,CAAC,EAED,KAAK,OAAO,IAAM,CACV,KAAK,QAAUwB,EAAY,SAAS,KAAK,MAAM,sBAAsB,CAC7E,EAAGhB,GAAS,QAAQ,CACxB,CAEA,MAAM,SAASqB,EAAWhC,EAAO,CAC7B,GAAI,CAAC,KAAK,QAAS,OAgBnB,GAAI,CAAC,KAAK,eAAe,IAAIgC,CAAS,EAAG,CACrC,KAAK,KAAK,OAAQ,qCAAsC,CAAE,QAAS,KAAK,OAAQ,CAAC,EACjF,MACJ,CAEA,IAAMyD,EAAO/E,GAAQ,OAAOV,EAAM,MAAQ,EAAE,CAAC,EACvC,CAAE,UAAAsF,EAAW,YAAAC,CAAY,EAAI,MAAMC,GAAqB,KAAK,OAAQC,CAAI,EAC/E,GAAI,OAAK,QAAQ,IAAIF,CAAW,GAAKA,IAAgB,KAAK,QAC1D,IAAI,KAAK,QAAQ,MAAQnF,EAAa,YAAa,MAAM,IAAIC,EAAkB,gBAAiB,kBAAkB,EAclH,GAZA,KAAK,QAAQ,IAAIkF,EAAa,CAC1B,GAAIA,EACJ,KAAM,KAAK,eAAe,IAAIvD,CAAS,GAAK,SAC5C,KAAAyD,EACA,UAAAH,EACA,UAAAtD,EACA,MAAOF,GAAa,MACxB,CAAC,EACD,KAAK,YAAY,IAAIE,EAAWuD,CAAW,EAC3C,KAAK,eAAe,OAAOvD,CAAS,EACpC,KAAK,aAAa,EAEd,KAAK,eAAe,OAAS,EAAG,CAChC,GAAI,KAAK,YAAa,OAAO,KAAK,WAAW,EAC7C,MAAM,KAAK,cAAc0D,GAAW,MAAM,CAC9C,EACJ,CAOA,MAAM,cAAcC,EAAKD,GAAW,IAAK,CACrC,GAAI,CAAC,KAAK,QAAS,MAAM,IAAIrF,EAAkB,sCAAuC,WAAW,EACjG,IAAMuF,EAAYjC,GAAsB,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,CAAC,EAC1DkC,EAAS,CAAE,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,GAAAF,EAAI,UAAAC,EAAW,KAAM,KAAK,IAAK,EACpF3B,EAAM,MAAM6B,GAAa,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAYD,CAAM,EAWpF,QAAWvD,KAAMsD,EAAW,CACxB,IAAMxD,EAAI,KAAK,QAAQ,IAAIE,CAAE,EAC7B,MAAM,KAAK,WAAW,CAClB,KAAM7C,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,GAAA6C,EACA,KAAMF,EAAE,OAAS,MAAQ,QAAUA,EAAE,KACrC,KAAMjC,GAAMiC,EAAE,IAAI,CACtB,CAAC,CACL,CAEA,MAAM,KAAK,WAAW,CAClB,KAAM3C,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,GAAAkG,EACA,KAAM,KAAK,KACX,UAAWxF,GAAM,KAAK,SAAS,IAAI,EACnC,QAASyF,EACT,IAAKzF,GAAM8D,CAAG,CAClB,CAAC,EACD,MAAM,KAAK,eAAe,CAC9B,CAUA,MAAM,aAAajE,EAAO,CAGtB,GAFcuE,GAAYvE,EAAM,KAAK,EACzB,KAAK,OACb,KAAK,aAAa,KAAOI,EAAa,YAAc,EAAG,OAE3D,IAAMqF,EAAO/E,GAAQ,OAAOV,EAAM,MAAQ,EAAE,CAAC,EACvC,CAAE,UAAAsF,EAAW,YAAAC,CAAY,EAAI,MAAMC,GAAqB,KAAK,OAAQC,CAAI,EAC/E,GAAInB,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,IAAMuF,EAC9C,MAAM,IAAIlF,EAAkB,4CAA6C,sBAAsB,EAEnG,KAAK,aAAa,IAAIkF,EAAa,CAAE,KAAAE,EAAM,UAAAH,EAAW,KAAM5D,GAAW1B,EAAM,IAAI,CAAE,CAAC,CACxF,CAWA,MAAM,UAAUgC,EAAWhC,EAAO,CAC9B,IAAM4D,EAAQW,GAAYvE,EAAM,KAAK,EACrC,GAAI,KAAK,QAAS,OAClB,GAAI4D,EAAQ,KAAK,MAAO,MAAM,IAAIvD,EAAkB,8BAA+B,aAAa,EAEhG,IAAMgF,EAAY3E,GAAQ,OAAOV,EAAM,WAAa,EAAE,CAAC,EACjD,CAAE,UAAW+F,EAAU,YAAaC,CAAQ,EAAI,MAAMR,GAAqB,KAAK,OAAQH,CAAS,EACvG,GAAI,KAAK,SAAWW,IAAY,KAAK,QACjC,MAAM,IAAI3F,EAAkB,oDAAqD,aAAa,EAGlG,GAAI,CAAC,MAAM,QAAQL,EAAM,OAAO,EAAG,MAAM,IAAIK,EAAkB,gCAAiC,YAAY,EAC5G,GAAIL,EAAM,QAAQ,OAASI,EAAa,YAAa,MAAM,IAAIC,EAAkB,kCAAmC,kBAAkB,EAEtI,IAAMuF,EAAYjC,GAAsB3D,EAAM,QAAQ,IAAKsC,GAAO,OAAOA,GAAM,EAAE,CAAC,CAAC,EACnF,GAAI,CAACsD,EAAU,SAAS,KAAK,MAAM,EAAG,MAAM,IAAIvF,EAAkB,6BAA8B,cAAc,EAC9G,GAAI,CAACuF,EAAU,SAASI,CAAO,EAAG,MAAM,IAAI3F,EAAkB,qCAAsC,YAAY,EAMhH,IAAM4F,EAAW,CAAC,EAClB,QAAW3D,KAAMsD,EAAW,CACxB,GAAItD,IAAO,KAAK,OAAQ,CACpB2D,EAAS,KAAK,CAAE,GAAA3D,EAAI,KAAM,MAAO,KAAM,KAAK,SAAS,KAAM,UAAW,IAAK,CAAC,EAC5E,QACJ,CACA,IAAM4D,EAAS,KAAK,aAAa,IAAI5D,CAAE,IAAMA,IAAO0D,EAC9C,CAAE,KAAMX,EAAW,UAAWU,EAAU,KAAM,OAAQ,EACtD,MACN,GAAI,CAACG,EAAQ,MAAM,IAAI7F,EAAkB,gDAAiD,oBAAoB,EAC9G4F,EAAS,KAAK,CAAE,GAAA3D,EAAI,KAAM4D,EAAO,KAAM,KAAMA,EAAO,KAAM,UAAWA,EAAO,SAAU,CAAC,CAC3F,CAMA,GAAI,CAJO,MAAMC,GAAe,KAAK,OAAQJ,EAAU,CACnD,QAAS,KAAK,QAAS,MAAAnC,EAAO,GAAI,OAAO5D,EAAM,IAAM,EAAE,EACvD,UAAA4F,EAAW,KAAMlE,GAAW1B,EAAM,IAAI,CAC1C,EAAGU,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,kCAAmC,eAAe,EAIvF,KAAK,MAAQuD,EACb,KAAK,KAAOlC,GAAW1B,EAAM,IAAI,EACjC,KAAK,QAAUgG,EAEf,IAAMI,EAAW,KAAK,QACtB,KAAK,QAAU,IAAI,IACnB,QAAWhE,KAAK6D,EAAU,CACtB,IAAMI,EAAMD,EAAS,IAAIhE,EAAE,EAAE,EAC7B,KAAK,QAAQ,IAAIA,EAAE,GAAI,CACnB,GAAIA,EAAE,GACN,KAAMA,EAAE,KAAO,KAAK,OAAS,MAAQA,EAAE,KACvC,KAAMA,EAAE,KACR,UAAWA,EAAE,KAAO,KAAK,OAAS,KAAOA,EAAE,UAC3C,UAAWiE,GAAK,WAAa,KAC7B,MAAOjE,EAAE,KAAO,KAAK,OAASN,GAAa,KACpCuE,GAAK,QAAUvE,GAAa,OAASA,GAAa,OAASA,GAAa,OACnF,CAAC,CACL,CAEA,OAAW,CAACwE,EAAKhE,CAAE,GAAK,CAAC,GAAG,KAAK,WAAW,EACnC,KAAK,QAAQ,IAAIA,CAAE,GAAG,KAAK,YAAY,OAAOgE,CAAG,EAG1D,KAAK,MAAM,SAAU,CAAE,KAAM,KAAK,KAAM,MAAO,KAAK,MAAO,QAAAN,CAAQ,CAAC,EACpE,KAAK,aAAa,EAClB,MAAM,KAAK,eAAe,CAC9B,CAMA,MAAM,gBAAiB,CACnB,GAAI,CAAE,KAAK,UAAU,QAAQ,CAAG,MAAY,CAAC,CAI7C,KAAK,WAAW,EAChB,KAAK,SAAW,IAAIO,GAAiB,CACjC,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,gBAAiB,KAAK,OACtB,mBAAoB,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,CAC/C,CAAC,EACD,KAAK,UAAU5E,EAAY,UAAU,EAErC,IAAM6E,EAAa,MAAM,KAAK,SAAS,cAAc,KAAK,MAAM,EAahE,MAAM,KAAK,WAAW,CAClB,KAAM/G,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,GAAI,KAAK,OACT,OAAQU,GAAMqG,CAAU,CAC5B,CAAC,EAED,IAAMC,EAAe,KAAK,MAC1B,KAAK,OAAO,IAAM,CACV,KAAK,QAAUA,IACf,KAAK,QAAU9E,EAAY,YAAc,KAAK,QAAUA,EAAY,YACpE,KAAK,MAAM,oBAAoB,CAEvC,EAAGhB,GAAS,WAAW,EAKvB,MAAM,KAAK,sBAAsB,EACjC,MAAM,KAAK,aAAa,CAC5B,CAGA,mBAAmBX,EAAO,CAIlB,KAAK,iBAAiB,QAAUI,EAAa,YAAc,GAC/D,KAAK,iBAAiB,KAAKJ,CAAK,CACpC,CAEA,MAAM,uBAAwB,CAG1B,GAAI,MAAK,UACT,MAAK,UAAY,GACjB,GAAI,CACA,IAAM0G,EAAO,KAAK,iBAClB,KAAK,iBAAmB,CAAC,EACzB,QAAW1G,KAAS0G,EAChB,GAAI,CACI1G,EAAM,OAASP,GAAa,OAAQ,MAAM,KAAK,UAAUO,CAAK,EACzDA,EAAM,OAASP,GAAa,QAAQ,MAAM,KAAK,UAAUO,CAAK,CAC3E,OAASoE,EAAO,CAGZ,KAAK,KAAK,OAAQ,gCAAiC,CAAE,KAAMA,GAAO,IAAK,CAAC,CAC5E,CAER,QAAE,CACE,KAAK,UAAY,EACrB,EACJ,CAEA,MAAM,UAAUpE,EAAO,CACnB,GAAI,CAAC,KAAK,SAAU,OAAO,KAAK,mBAAmBA,CAAK,EACpDuE,GAAYvE,EAAM,KAAK,IAAM,KAAK,QACtC,KAAK,SAAS,iBACVsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EACxCU,GAAQ,OAAOV,EAAM,QAAU,EAAE,EAAG,CAAE,IAAKI,EAAa,YAAa,CAAC,CAC1E,EAEA,MAAM,KAAK,sBAAsB,EACjC,MAAM,KAAK,aAAa,EAC5B,CASA,MAAM,cAAe,CAEjB,GADI,CAAC,KAAK,UAAY,KAAK,SAAS,UAChC,CAAC,KAAK,SAAS,oBAAqB,OAExC,KAAK,UAAUuB,EAAY,SAAS,EACpC,IAAMkC,EAAQ,KAAK,SAAS,OAAO,EACnC,MAAM,KAAK,WAAW,CAClB,KAAMpE,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,GAAI,KAAK,OACT,MAAOU,GAAM0D,CAAK,CACtB,CAAC,EACD,MAAM,KAAK,aAAa,CAC5B,CAEA,MAAM,UAAU7D,EAAO,CACnB,GAAI,CAAC,KAAK,SAAU,OAAO,KAAK,mBAAmBA,CAAK,EACxD,GAAIuE,GAAYvE,EAAM,KAAK,IAAM,KAAK,MAItC,IAAI,CAAC,KAAK,SAAS,YAAY,IAAIsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,CAAC,EACxE,OAAO,KAAK,mBAAmBA,CAAK,EAExC,MAAM,KAAK,SAAS,aAChB,KAAK,OACLsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EACxCU,GAAQ,OAAOV,EAAM,OAAS,EAAE,EAAG,CAAE,IAAKI,EAAa,WAAY,CAAC,CACxE,EACA,MAAM,KAAK,aAAa,EAC5B,CAEA,MAAM,cAAe,CAIjB,GAHI,CAAC,KAAK,UAAY,CAAC,KAAK,SAAS,iBAGjC,KAAK,QAAS,OAClB,IAAMW,EAAO,MAAM,KAAK,SAAS,OAAO,KAAK,MAAM,EACnD,KAAK,UAAUY,EAAY,YAAY,EACvC,KAAK,QAAUZ,EACf,KAAK,MAAM,MAAO,CAAE,KAAAA,CAAK,CAAC,CAC9B,CASA,YAAa,CACT,GAAI,KAAK,QAAUY,EAAY,cAAgB,CAAC,KAAK,QACjD,MAAM,IAAItB,EAAkB,oCAAqC,SAAS,EAE9E,KAAK,aAAe,GACpB,KAAK,MAAQsB,EAAY,MACzB,GAAI,CAAE,KAAK,UAAU,QAAQ,CAAG,MAAY,CAAC,CAC7C,KAAK,SAAW,KAChB,KAAK,MAAM,YAAa,CAAE,QAAS,KAAK,gBAAgB,CAAE,CAAC,EAI3D,KAAK,sBAAsB,CAC/B,CAGA,MAAM,cAAcgF,EAAe,CAC/B,OAAOC,GAAgB,KAAK,OAAQ,CAChC,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,cAAAD,CAC9C,CAAC,CACL,CAMA,MAAM,SAASE,EAAM,CACjB,GAAI,KAAK,QAAUlF,EAAY,OAAS,CAAC,KAAK,aAC1C,MAAM,IAAItB,EAAkB,wCAAyC,WAAW,EAEpF,IAAMyG,EAAO,OAAOD,GAAQ,EAAE,EAC9B,GAAI,CAACC,EAAK,KAAK,EAAG,MAAM,IAAIzG,EAAkB,gBAAiB,OAAO,EAEtE,IAAM0G,EAAM,EAAE,KAAK,IACbC,EAAW,MAAMC,GAAS,KAAK,OAAQH,CAAI,EAC3C7C,EAAM,MAAMiD,GAAiB,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAC9E,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,IAAAH,EAAK,SAAU,KAAK,OAAQ,SAAAC,CAC1E,CAAC,EAEKhH,EAAQ,CACV,KAAMP,GAAa,QACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,IAAAsH,EACA,GAAI,KAAK,OACT,GAAI,KAAK,IAAI,EACb,KAAAD,EACA,IAAK3G,GAAM8D,CAAG,CAClB,EACM,CAAE,UAAAlB,EAAW,YAAAD,CAAY,EAAI,MAAM,KAAK,WAAW9C,CAAK,EAC9D,MAAO,CAAE,IAAA+G,EAAK,UAAAhE,EAAW,MAAO,KAAK,QAAQ,KAAO,EAAG,YAAAD,CAAY,CACvE,CAEA,MAAM,WAAW9C,EAAO,CAAE,QAAAmH,EAAU,EAAM,EAAI,CAAC,EAAG,CAC9C,IAAMvD,EAAQW,GAAYvE,EAAM,KAAK,EAC/B+G,EAAMxC,GAAYvE,EAAM,GAAG,EAC3BoH,EAAW9C,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EAEzD,GAAIoH,IAAa,KAAK,OAAQ,OAC9B,IAAM3E,EAAS,KAAK,QAAQ,IAAI2E,CAAQ,EACxC,GAAI,CAAC3E,GAAU,CAACA,EAAO,UAAW,MAAM,IAAIpC,EAAkB,4BAA6B,cAAc,EAIzG,GAAIuD,IAAU,KAAK,MAAO,MAAM,IAAIvD,EAAkB,6BAA8B,aAAa,EAEjG,IAAMyG,EAAO,OAAO9G,EAAM,MAAQ,EAAE,EAC9BgH,EAAW,MAAMC,GAAS,KAAK,OAAQH,CAAI,EAIjD,GAAI,CAHO,MAAMO,GAAmB,KAAK,OAAQ5E,EAAO,UAAW,CAC/D,QAAS,KAAK,QAAS,MAAAmB,EAAO,IAAAmD,EAAK,SAAAK,EAAU,SAAAJ,CACjD,EAAGtG,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,mCAAoC,eAAe,EAUxF,IAAMiH,EAAW,KAAK,WAAW,IAAIF,CAAQ,GAAK,IAAI,IAChDG,EAAUpH,GAAM6G,CAAQ,EACxBZ,EAAWkB,EAAS,IAAIP,CAAG,EACjC,GAAIX,IAAa,OAAW,CACxB,GAAIA,IAAamB,EAAS,OAC1B,WAAK,MAAM,gBAAiB,CAAE,GAAIH,EAAU,IAAAL,EAAK,KAAMtE,EAAO,IAAK,CAAC,EAC9D,IAAIpC,EAAkB,6DAA8D,kBAAkB,CAChH,CAEAiH,EAAS,IAAIP,EAAKQ,CAAO,EAGrBD,EAAS,KAAO,KAAKA,EAAS,OAAOA,EAAS,KAAK,EAAE,KAAK,EAAE,KAAK,EACrE,KAAK,WAAW,IAAIF,EAAUE,CAAQ,EAEtC,KAAK,MAAM,UAAW,CAClB,GAAIF,EACJ,KAAM3E,EAAO,KACb,KAAAqE,EACA,IAAAC,EACA,GAAI,OAAO,SAAS/G,EAAM,EAAE,EAAIA,EAAM,GAAK,KAAK,IAAI,EAKpD,QAAAmH,CACJ,CAAC,CACL,CAgCA,iBAAkB,CACd,GAAI,CAAC,KAAK,KAAM,OAAO,KACvB,IAAMK,EAAU,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,EACpD,MAAO,CACH,OAAQ,KAAK,KAAK,OAClB,UAAW,KAAK,KAAK,UACrB,cAAe,KAAK,KAAK,YAAc,KAAK,OACtC,MACCA,GAAS,MAAQ,WACxB,UAAW,KAAK,KAAK,UACrB,UAAW,KAAK,KAAK,UACrB,OAAQ,KAAK,KAAK,OAClB,aAAc,CAAC,GAAG,KAAK,KAAK,YAAY,EAAE,IAAKlF,GAAO,CAClD,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,MAAO,CACH,GAAAA,EACA,KAAMA,IAAO,KAAK,OAAS,MAASG,GAAQ,MAAQ,WACpD,KAAMH,IAAO,KAAK,OAClB,UAAWG,GAAQ,WAAa,KAChC,MAAOA,GAAQ,OAASX,GAAa,IACzC,CACJ,CAAC,EAAE,KAAK,CAAC2F,EAAG/C,IAAO+C,EAAE,GAAK/C,EAAE,GAAK,GAAK+C,EAAE,GAAK/C,EAAE,GAAK,EAAI,CAAE,CAC9D,CACJ,CAEA,WAAY,CACR,KAAK,MAAM,OAAQ,CAAE,KAAM,KAAK,gBAAgB,CAAE,CAAC,CACvD,CAEA,eAAgB,CACZ,GAAI,KAAK,QAAU/C,EAAY,OAAS,CAAC,KAAK,aAC1C,MAAM,IAAItB,EAAkB,wCAAyC,WAAW,CAExF,CAGA,MAAM,eAAeqH,EAAQC,EAAQC,EAAW,CAC5C,IAAMb,EAAM,EAAE,KAAK,QACb9C,EAAM,MAAM4D,GAAc,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAC3E,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,OAAAF,EAAQ,OAAAD,EAClD,GAAI,KAAK,OAAQ,IAAAX,EAAK,UAAAa,CAC1B,CAAC,EACD,OAAO,KAAK,WAAW,CACnB,KAAMnI,GAAa,KACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,OAAAkI,EACA,OAAAD,EACA,GAAI,KAAK,OACT,IAAAX,EACA,EAAGa,IAAc,GACjB,GAAI,KAAK,IAAI,EACb,IAAKzH,GAAM8D,CAAG,CAClB,CAAC,CACL,CASA,MAAM,UAAU,CAAE,UAAA2D,EAAY,GAAO,QAAAE,EAAU,IAAK,EAAI,CAAC,EAAG,CAExD,GADA,KAAK,cAAc,EACf,KAAK,KAAM,MAAM,IAAIzH,EAAkB,0CAA2C,kBAAkB,EAExG,IAAMsH,EAASI,GAAU,EACzB,KAAK,KAAO,CACR,OAAAJ,EACA,UAAW,KAAK,OAChB,UAAWC,IAAc,GACzB,UAAW,KAAK,IAAI,EACpB,aAAc,IAAI,IAAI,CAAC,KAAK,MAAM,CAAC,EACnC,OAAQ,EACZ,EACA,KAAK,UAAU,EAIf,KAAK,sBAAsB,EAC3B,GAAI,CAOI,OAAOE,GAAY,YAAY,MAAMA,EAAQ,KAAK,gBAAgB,CAAC,EACvE,GAAM,CAAE,YAAAhF,CAAY,EAAI,MAAM,KAAK,eAAekF,GAAa,MAAOL,EAAQ,KAAK,KAAK,SAAS,EACjG,MAAO,CAAE,OAAAA,EAAQ,YAAA7E,CAAY,CACjC,OAASsB,EAAO,CACZ,WAAK,KAAO,KACZ,KAAK,UAAU,EACTA,CACV,CACJ,CAGA,MAAM,UAAW,CAEb,GADA,KAAK,cAAc,EACf,CAAC,KAAK,KAAM,MAAM,IAAI/D,EAAkB,2BAA4B,SAAS,EACjF,GAAI,KAAK,KAAK,OAAQ,MAAO,CAAE,OAAQ,KAAK,KAAK,OAAQ,YAAa,CAAC,CAAE,EAEzE,KAAK,KAAK,OAAS,GACnB,KAAK,KAAK,aAAa,IAAI,KAAK,MAAM,EACtC,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,GAAM,CAAE,YAAAyC,CAAY,EAAI,MAAM,KAAK,eAAekF,GAAa,KAAM,KAAK,KAAK,OAAQ,KAAK,KAAK,SAAS,EAC1G,MAAO,CAAE,OAAQ,KAAK,KAAK,OAAQ,YAAAlF,CAAY,CACnD,CASA,MAAM,WAAY,CACd,GAAI,CAAC,KAAK,KAAM,OAChB,IAAM6E,EAAS,KAAK,KAAK,OACnBC,EAAY,KAAK,KAAK,UAC5B,KAAK,KAAK,OAAS,GACnB,KAAK,KAAK,aAAa,OAAO,KAAK,MAAM,EACrC,KAAK,KAAK,aAAa,OAAS,IAAG,KAAK,KAAO,MACnD,KAAK,UAAU,EACf,GAAI,CACA,MAAM,KAAK,eAAeI,GAAa,MAAOL,EAAQC,CAAS,CACnE,MAAY,CAA+B,CAC/C,CAWA,cAActF,EAAI,CACV,CAAC,KAAK,MAAQ,CAAC,KAAK,KAAK,aAAa,IAAIA,CAAE,IAChD,KAAK,KAAK,aAAa,OAAOA,CAAE,EAC5B,KAAK,KAAK,aAAa,OAAS,IAAG,KAAK,KAAO,MACnD,KAAK,UAAU,EACnB,CAEA,MAAM,QAAQtC,EAAO,CACjB,IAAM4D,EAAQW,GAAYvE,EAAM,KAAK,EAC/B+G,EAAMxC,GAAYvE,EAAM,GAAG,EAC3BoH,EAAW9C,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EACnD2H,EAASM,GAAa,OAAOjI,EAAM,QAAU,EAAE,CAAC,EAChD0H,EAAS,OAAO1H,EAAM,QAAU,EAAE,EAClC4H,EAAY5H,EAAM,IAAM,GAE9B,GAAIoH,IAAa,KAAK,OAAQ,OAC9B,IAAM3E,EAAS,KAAK,QAAQ,IAAI2E,CAAQ,EACxC,GAAI,CAAC3E,GAAU,CAACA,EAAO,UAAW,MAAM,IAAIpC,EAAkB,+BAAgC,cAAc,EAC5G,GAAIuD,IAAU,KAAK,MAAO,MAAM,IAAIvD,EAAkB,gCAAiC,aAAa,EAMpG,IAAM6H,EAAO,KAAK,UAAU,IAAId,CAAQ,EACxC,GAAIc,IAAS,QAAanB,GAAOmB,EAAM,OAKvC,GAAI,CAHO,MAAMC,GAAgB,KAAK,OAAQ1F,EAAO,UAAW,CAC5D,QAAS,KAAK,QAAS,MAAAmB,EAAO,OAAA+D,EAAQ,OAAAD,EAAQ,GAAIN,EAAU,IAAAL,EAAK,UAAAa,CACrE,EAAGlH,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,sCAAuC,eAAe,EAM3F,GALA,KAAK,UAAU,IAAI+G,EAAUL,CAAG,EAK5B,OAAK,QAAUpF,EAAY,OAAS,CAAC,KAAK,cAE9C,OAAQ+F,EAAQ,CACZ,KAAKM,GAAa,MAAO,CACrB,GAAI,KAAK,MAAQ,KAAK,KAAK,SAAWL,EAAQ,CAK1C,GAAIA,GAAU,KAAK,KAAK,OAAQ,OAGhC,KAAK,KAAO,IAChB,CACK,KAAK,KAUN,KAAK,KAAK,aAAa,IAAIP,CAAQ,EATnC,KAAK,KAAO,CACR,OAAAO,EACA,UAAWP,EACX,UAAAQ,EACA,UAAW,KAAK,IAAI,EACpB,aAAc,IAAI,IAAI,CAACR,CAAQ,CAAC,EAChC,OAAQ,EACZ,EAIJ,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,MACJ,CACA,KAAKY,GAAa,KAAM,CAEpB,GADI,CAAC,KAAK,MAAQ,KAAK,KAAK,SAAWL,GACnC,KAAK,KAAK,aAAa,IAAIP,CAAQ,EAAG,OAC1C,KAAK,KAAK,aAAa,IAAIA,CAAQ,EAG/BQ,IAAW,KAAK,KAAK,UAAY,IACrC,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,MACJ,CACA,KAAKI,GAAa,MAAO,CACrB,GAAI,CAAC,KAAK,MAAQ,KAAK,KAAK,SAAWL,EAAQ,OAC/C,KAAK,cAAcP,CAAQ,EAC3B,MACJ,CACA,QACI,MACR,CACJ,CAcA,MAAM,YAAYpF,EAAWzB,EAAU,CAAE,QAAA4G,EAAU,EAAM,EAAI,CAAC,EAAG,CAE7D,GADI,KAAK,YACL,CAACvH,GAAaW,CAAQ,EAAG,OAC7B,IAAMP,EAAQM,GAAeC,CAAQ,EACrC,GAAI,GAACP,GAAS,CAACL,GAAkB,IAAIK,EAAM,IAAI,IAC3CyB,GAAc,OAAOzB,EAAM,KAAO,EAAE,CAAC,IAAM,KAAK,QAEpD,OAAQA,EAAM,KAAM,CAChB,KAAKP,GAAa,MACd,OAAO,KAAK,SAASuC,EAAWhC,CAAK,EACzC,KAAKP,GAAa,MACd,OAAO,KAAK,SAASuC,EAAWhC,CAAK,EACzC,KAAKP,GAAa,OACd,OAAO,KAAK,aAAaO,CAAK,EAClC,KAAKP,GAAa,OACd,OAAO,KAAK,UAAUuC,EAAWhC,CAAK,EAC1C,KAAKP,GAAa,OACd,OAAO,KAAK,UAAUO,CAAK,EAC/B,KAAKP,GAAa,OACd,OAAO,KAAK,UAAUO,CAAK,EAC/B,KAAKP,GAAa,QACd,OAAO,KAAK,WAAWO,EAAO,CAAE,QAAAmH,CAAQ,CAAC,EAC7C,KAAK1H,GAAa,MACd,OAAO,KAAK,SAASO,CAAK,EAC9B,KAAKP,GAAa,WACd,OAAO,KAAK,aAAaO,CAAK,EAClC,KAAKP,GAAa,YACd,OAAO,KAAK,cAAcO,CAAK,EACnC,KAAKP,GAAa,WACd,OAAO,KAAK,aAAaO,CAAK,EAClC,KAAKP,GAAa,KACd,OAAO,KAAK,QAAQO,CAAK,EAC7B,KAAKP,GAAa,MAGd,OAAO0H,EAAU,OAAY,KAAK,SAASnF,EAAWhC,CAAK,EAC/D,KAAKP,GAAa,OACd,OACJ,QACI,MACR,CACJ,CASA,MAAM,SAASuC,EAAWhC,EAAO,CAC7B,IAAMoI,EAAK9D,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EAC7CqI,EAAQrI,EAAM,MAEpB,GADI,CAACJ,GAAayI,CAAK,GACnBA,EAAM,OAAS5I,GAAa,MAAO,OAEvC,GAAI2I,IAAO,KAAK,OAAQ,OAAO,KAAK,YAAYpG,EAAWqG,EAAO,CAAE,QAAS,EAAK,CAAC,EACnF,GAAIrI,EAAM,SAAW,GAAM,OAE3B,IAAMyC,EAAS,KAAK,QAAQ,IAAI2F,CAAE,EAC9B,CAAC3F,GAAUA,EAAO,QAAUX,GAAa,QAAU,CAACW,EAAO,WAC/D,MAAM,KAAK,MAAMA,EAAO,UAAW,CAAE,GAAGzC,EAAO,OAAQ,EAAK,CAAC,CACjE,CAEA,MAAM,SAASA,EAAO,CAClB,IAAMsC,EAAKgC,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EAC7CyC,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,GAAI,GAACG,GAAUH,IAAO,KAAK,QAS3B,IARA,KAAK,MAAM,OAAQ,CAAE,GAAAA,EAAI,KAAMG,EAAO,IAAK,CAAC,EAC5C,KAAK,cAAcH,CAAE,EAOjB,CAAC,KAAK,SAAWA,IAAO,KAAK,QAAS,CACtC,KAAK,QAAQ,OAAOA,CAAE,EACtB,OAAW,CAACgE,EAAKgC,CAAC,GAAK,CAAC,GAAG,KAAK,WAAW,EAAOA,IAAMhG,GAAI,KAAK,YAAY,OAAOgE,CAAG,EACvF,KAAK,MAAM,QAAS,CAAE,OAAQ,YAAa,CAAC,EAC5C,MACJ,CAIA,GAAK,KAAK,QAEV,MAAK,QAAQ,OAAOhE,CAAE,EACtB,OAAW,CAACgE,EAAKgC,CAAC,GAAK,CAAC,GAAG,KAAK,WAAW,EAAOA,IAAMhG,GAAI,KAAK,YAAY,OAAOgE,CAAG,EAUvF,GALA,KAAK,aAAa,EAKd,KAAK,QAAQ,KAAOlG,EAAa,YAAa,CAC9C,KAAK,MAAM,QAAS,CAAE,OAAQ,kBAAmB,CAAC,EAClD,MACJ,CAEA,KAAK,OAAS,EACd,MAAM,KAAK,cAAcsF,GAAW,MAAM,GAC9C,CASA,MAAM,OAAQ,CACV,GAAI,CACA,MAAM,KAAK,WAAW,CAAE,KAAMjG,GAAa,MAAO,IAAK,KAAK,QAAS,GAAI,KAAK,MAAO,CAAC,CAC1F,MAAY,CAA+B,CAC/C,CAkBA,MAAM,WAAWqF,EAAO,CACpB,GAAI,CAAC,KAAK,QAAS,MAAM,IAAIzE,EAAkB,yBAA0B,WAAW,EACpF,GAAI,CAAC,MAAM,QAAQyE,CAAK,GAAKA,EAAM,SAAW,EAAG,MAAO,GACxD,GAAI,KAAK,YAAa,MAAM,IAAIzE,EAAkB,yCAA0C,eAAe,EAC3G,GAAI,KAAK,QAAQ,KAAOyE,EAAM,OAAS1E,EAAa,YAChD,MAAM,IAAIC,EAAkB,yBAAyBD,EAAa,WAAW,WAAY,kBAAkB,EAM/G,QAAW2E,KAAQD,EACf,GAAI,KAAK,YAAY,IAAIC,EAAK,SAAS,EACnC,MAAM,IAAI1E,EAAkB,8CAA+C,kBAAkB,EAIrG,KAAK,YAAc,CACf,GAAIqF,GAAW,IACf,MAAO,KAAK,MAAQ,EACpB,OAAQ,IAAI,IAAI,KAAK,QAAQ,KAAK,CAAC,CACvC,EACA,QAAWX,KAAQD,EAAO,KAAK,eAAe,IAAIC,EAAK,UAAWA,EAAK,MAAQ,QAAQ,EAIvF,IAAM/E,EAAQ,CACV,KAAMP,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,YAAY,MACxB,KAAM,KAAK,KACX,UAAWU,GAAM,KAAK,SAAS,IAAI,CACvC,EACMoI,EAAQ,KAAK,YACb1F,EAAU,MAAM,QAAQ,WAAWiC,EAAM,IAAKE,GAAM,KAAK,MAAMA,EAAE,UAAWhF,CAAK,CAAC,CAAC,EACnFwI,EAAO3F,EAAQ,OAAQqC,GAAMA,EAAE,SAAW,WAAW,EAAE,OAO7D,GAAIsD,IAAS,EAAG,CACZ,QAAWzD,KAAQD,EAAO,KAAK,eAAe,OAAOC,EAAK,SAAS,EACnE,MAAI,KAAK,cAAgBwD,IAAO,KAAK,YAAc,MAC7C,IAAIlI,EACN,qEACA,+BACJ,CACJ,CAEA,OAAAyE,EAAM,QAAQ,CAACC,EAAM9B,IAAM,CACnBJ,EAAQI,CAAC,EAAE,SAAW,YAAY,KAAK,eAAe,OAAO8B,EAAK,SAAS,CACnF,CAAC,EAGG,KAAK,cAAgBwD,GACrB,KAAK,OAAO,IAAM,CAAM,KAAK,cAAgBA,GAAO,KAAK,WAAW,CAAG,EAAG5H,GAAS,QAAQ,EAExF6H,CACX,CAWA,MAAM,YAAa,CACf,IAAMD,EAAQ,KAAK,YACnB,OAAKA,GACL,KAAK,YAAc,KACnB,KAAK,eAAe,MAAM,EAEX,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,EAAE,OAAQjG,GAAO,CAACiG,EAAM,OAAO,IAAIjG,CAAE,CAAC,EACjE,SAAW,GAClB,KAAK,MAAM,aAAc,CAAE,OAAQ,eAAgB,CAAC,EAC7C,KAGX,KAAK,MAAQiG,EAAM,MACnB,KAAK,aAAa,EAClB,MAAM,KAAK,cAAcA,EAAM,EAAE,EAC1B,KAbY,EAcvB,CAWA,MAAM,aAAajG,EAAI,CACnB,GAAI,CAAC,KAAK,QAAS,MAAM,IAAIjC,EAAkB,iCAAkC,WAAW,EAC5F,GAAIiC,IAAO,KAAK,OAAQ,MAAM,IAAIjC,EAAkB,qCAAsC,YAAY,EACtG,GAAI,CAAC,KAAK,QAAQ,IAAIiC,CAAE,EAAG,MAAO,GAClC,GAAI,KAAK,QAAQ,KAAO,EAAIlC,EAAa,YACrC,MAAM,IAAIC,EAAkB,gEAA4D,mBAAmB,EAE/G,KAAK,QAAQ,OAAOiC,CAAE,EACtB,OAAW,CAACgE,EAAKgC,CAAC,GAAK,CAAC,GAAG,KAAK,WAAW,EAAOA,IAAMhG,GAAI,KAAK,YAAY,OAAOgE,CAAG,EACvF,YAAK,OAAS,EACd,KAAK,aAAa,EAClB,MAAM,KAAK,cAAcZ,GAAW,MAAM,EACnC,EACX,CACJ,EC9lEA,IAAM+C,GAAeC,GAAU,cAAc,KAAKA,GAAO,SAAW,EAAE,EAY/D,SAASC,GAAkB,CAC9B,WAAAC,EACA,MAAAC,EAAQ,IACR,SAAAC,EAAW,EACX,IAAAC,EAAM,IAAM,KAAK,IAAI,EACrB,MAAAC,EAASC,GAAO,IAAI,QAASC,GAAY,WAAWA,EAASD,CAAE,CAAC,CACpE,EAAI,CAAC,EAAG,CAEJ,IAAME,EAAS,IAAI,IAEnB,OAAO,eAA8BC,EAAWC,EAAO,CACnD,IAAMC,EAAUV,EAAWQ,CAAS,EACpC,GAAI,CAACE,GAAW,OAAOA,EAAQ,aAAgB,WAAY,MAAM,IAAI,MAAM,cAAc,EACzF,GAAI,OAAOA,EAAQ,aAAgB,YAAc,CAACA,EAAQ,YAAY,EAClE,MAAM,IAAI,MAAM,cAAc,EAGlC,IAAMC,EAAQJ,EAAO,IAAIC,CAAS,GAAK,CAAE,MAAO,QAAQ,QAAQ,EAAG,OAAQ,CAAE,EACvEI,EAAU,KAAK,UAAUH,CAAK,EAE9BI,EAAMF,EAAM,MAAM,KAAK,SAAY,CACrC,IAAMG,EAAOb,GAASE,EAAI,EAAIQ,EAAM,QAChCG,EAAO,GAAG,MAAMV,EAAMU,CAAI,EAE9B,IAAIC,EAAY,KAChB,QAASC,EAAU,EAAGA,EAAUd,EAAUc,IACtC,GAAI,CACA,aAAMN,EAAQ,YAAYE,CAAO,EACjCD,EAAM,OAASR,EAAI,EACZ,EACX,OAASL,EAAO,CAMZ,GALAiB,EAAYjB,EAKR,CAACD,GAAYC,CAAK,EAAG,MAAMA,EAC/B,MAAMM,EAAMH,GAASe,EAAU,EAAE,CACrC,CAEJ,MAAMD,CACV,CAAC,EAID,OAAAJ,EAAM,MAAQE,EAAI,MAAM,IAAM,CAAC,CAAC,EAChCN,EAAO,IAAIC,EAAWG,CAAK,EACpBE,CACX,CACJ,CCjFO,IAAMI,GAAS,CAGlB,KAAQ,CAAE,QAAS,EAAK,SAAU,EAAI,EAGtC,OAAQ,CAAE,QAAS,GAAK,SAAU,EAAI,EAEtC,OAAQ,CAAE,QAAS,GAAK,SAAU,EAAI,CAC1C,EAKMC,GAAK,EAAI,IACTC,GAAY,KAQX,SAASC,IAAuB,CACnC,GAAI,CACA,OAAO,OAAO,YAAe,YACzB,WAAW,kCAAkC,EAAE,OACvD,MAAY,CACR,MAAO,EACX,CACJ,CAcO,SAASC,GAAQC,EAAUC,EAAmB,KAAO,CACxD,OAAQD,EAAW,IAAQC,GAAoB,EAAIA,EACvD,CAwBO,SAASC,GAAWC,EAAUH,EAAUI,EAAQC,EAAI,CAAC,EAAG,CAC3D,GAAM,CAAE,MAAAC,EAAQ,IAAK,iBAAAL,EAAmB,IAAM,EAAII,EAClD,GAAI,CAACD,GAAU,CAACA,EAAO,OAAQ,OAAOD,EACtC,IAAMI,EAAYJ,EAAWJ,GAAQC,EAAUC,CAAgB,EAC3DO,EAAOJ,EACX,GAAI,KAAK,IAAIJ,CAAQ,EAAIM,EAAO,CAC5B,IAAMG,EAAQL,EAAO,OAAQM,GAAOV,EAAW,EAAIU,GAAKP,EAAWO,GAAKP,CAAS,EAC7EM,EAAM,SAAQD,EAAOC,EAC7B,CACA,OAAOD,EAAK,OACR,CAACG,EAAMD,IAAO,KAAK,IAAIA,EAAIH,CAAS,EAAI,KAAK,IAAII,EAAOJ,CAAS,EAAIG,EAAIC,EACzEH,EAAK,CAAC,CACV,CACJ,CAaO,SAASI,GAAWC,EAAWC,EAAWC,EAAW,IAAM,CAC9D,OAAKD,EACGD,EAAYC,EAAYC,GAAaD,EAAYC,EAAW,KAAK,IAAIF,CAAS,GAD/D,CAE3B,CASO,SAASG,GAAgBC,EAAW,IAAK,CAC5C,IAAMC,EAAU,CAAC,EACjB,MAAO,CACH,IAAIC,EAAOC,EAAO,YAAY,IAAI,EAAG,CAEjC,IADAF,EAAQ,KAAK,CAAE,MAAAC,EAAO,KAAAC,CAAK,CAAC,EACrBF,EAAQ,OAAS,GAAKE,EAAOF,EAAQ,CAAC,EAAE,KAAOD,GAAUC,EAAQ,MAAM,CAClF,EAEA,IAAIG,EAAM,YAAY,IAAI,EAAG,CACzB,GAAIH,EAAQ,OAAS,EAAG,MAAO,GAC/B,IAAMI,EAAOJ,EAAQA,EAAQ,OAAS,CAAC,EAGvC,GAAIG,EAAMC,EAAK,KAAOL,EAAU,MAAO,GACvC,IAAMM,EAAQL,EAAQ,CAAC,EACjBM,GAAMF,EAAK,KAAOC,EAAM,MAAQ,IACtC,OAAIC,GAAM,EAAU,GACZF,EAAK,MAAQC,EAAM,OAASC,CACxC,EACA,OAAQ,CAAEN,EAAQ,OAAS,CAAG,CAClC,CACJ,CAqBO,SAASO,GAAOpB,EAAG,CACtB,GAAM,CACF,KAAAqB,EAAM,GAAAC,EAAI,SAAA3B,EAAW,EACrB,QAAA4B,EAAUjC,GAAO,KAAK,QACtB,SAAAkC,EAAWlC,GAAO,KAAK,SACvB,UAAAmC,EAAY,GAAK,UAAAC,EAAY,GAC7B,qBAAAC,EAAuB,GACvB,SAAAC,EAAU,WAAAC,CACd,EAAI7B,EAEAc,EAAQO,EACRS,EAAMnC,EACNoC,EAAST,EACTU,EAAM,EACNf,EAAO,EACPgB,EAAO,GAELC,GAAS,EAAI,KAAK,GAAMV,EACxBW,GAAOZ,EAEPa,GAAS,IAAM,CACjBH,EAAO,GACPD,EAAM,EACNlB,EAAQiB,EACRD,EAAM,EACFF,GAAUA,EAASd,CAAK,EACxBe,GAAYA,EAAW,CAC/B,EAKA,GAAIF,GAAwBlC,GAAqB,EAC7C,OAAA2C,GAAO,EACA,CACH,IAAI,OAAQ,CAAE,OAAOtB,CAAO,EAC5B,IAAI,UAAW,CAAE,MAAO,EAAG,EAC3B,IAAI,MAAO,CAAE,MAAO,EAAM,EAC1B,SAASuB,EAAM,CAAEN,EAASM,EAAMD,GAAO,CAAG,EAC1C,MAAO,CAAC,CACZ,EAGJ,IAAME,GAAQtB,GAAQ,CAClBgB,EAAM,EACN,IAAMO,EAAQ,KAAK,KAAKvB,EAAMC,GAAQ,IAAMzB,EAAS,EACrDyB,EAAOD,EAKP,IAAIwB,EAAID,EACR,KAAOC,EAAI,GAAG,CACV,IAAMrB,EAAK,KAAK,IAAI5B,GAAIiD,CAAC,EACnBC,EAAQ,CAACP,GAAQA,IAASpB,EAAQiB,GAAU,EAAII,GAAOD,GAAQJ,EACrEA,GAAOW,EAAQtB,EACfL,GAASgB,EAAMX,EACfqB,GAAKrB,CACT,CAEA,GAAI,KAAK,IAAIL,EAAQiB,CAAM,EAAIN,GAAa,KAAK,IAAIK,CAAG,EAAIJ,EAAW,CACnEU,GAAO,EACP,MACJ,CACIR,GAAUA,EAASd,CAAK,EAC5BkB,EAAM,sBAAsBM,EAAI,CACpC,EAEA,OAAArB,EAAO,YAAY,IAAI,EACvBe,EAAM,sBAAsBM,EAAI,EAEzB,CACH,IAAI,OAAQ,CAAE,OAAOxB,CAAO,EAC5B,IAAI,UAAW,CAAE,OAAOgB,CAAK,EAC7B,IAAI,MAAO,CAAE,OAAOG,CAAM,EAQ1B,SAASI,EAAM,CAAEN,EAASM,CAAM,EAChC,MAAO,CACCL,GAAK,qBAAqBA,CAAG,EACjCA,EAAM,EACNC,EAAO,EACX,CACJ,CACJ,CCrOA,IAAMS,GAAqB,IAAM,CAG7B,GAAM,CAACC,CAAM,EAAI,MAAM,SAAS,IACxB,OAAO,OAAW,KAAe,CAAC,OAAO,UACzCC,GAA0B,EAAU,KACjCC,GAAgB,CACnB,SAAU,OAAO,SAAS,UAAY,IACtC,UAAW,OAAO,WAAW,WAAa,CAAC,EAC3C,OAAQC,GAAa,CACzB,CAAC,CACJ,EACK,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,EAAK,EAGtC,CAACC,EAAOC,CAAQ,EAAI,MAAM,SAAS,EAAK,EAQ9C,GANA,MAAM,UAAU,IAAM,CAClB,GAAI,CAACP,EAAQ,OACb,IAAMQ,EAAK,WAAW,IAAMD,EAAS,EAAI,EAAG,GAAG,EAC/C,MAAO,IAAM,aAAaC,CAAE,CAChC,EAAG,CAACR,CAAM,CAAC,EAEP,CAACA,GAAUI,EAAM,OAAO,KAE5B,IAAMK,EAAOC,GAAYV,CAAM,GAAK,CAAC,EAC/BW,EAAMF,EAAK,MAAQ,MAAQ,MAAQ,MACnCG,EAAW,OAAO,OAAW,IAAc,OAAO,SAAS,SAAW,IACtEC,EAAOC,GAAWd,EAAQY,CAAQ,EAClCG,EAAQC,GAAqB,EAE7BC,EAAQ,IAAM,CAChBC,GAAwB,EACxBb,EAAQ,EAAI,CAChB,EAKMc,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,KAAMV,EAAK,UAAYT,EACvB,IAAAW,EACA,MAAO,CAAE,SAAU,OAAQ,WAAY,KAAM,MAAO,mBAAoB,UAAW,OAAQ,CAC/F,EAAGS,EAAE,wBAAyB,KAAMpB,CAAM,CAAC,EAErCqB,EAAO,MAAM,cAAc,IAAK,CAClC,IAAK,MACL,KAAAR,EACA,SAAUJ,EAAK,UAAYT,EAC3B,KAAMS,EAAK,UAAYT,EACvB,IAAAW,EAGA,QAAS,IAAM,CAAEW,GAAetB,CAAM,EAAGkB,GAAwB,CAAG,EACpE,MAAO,CACH,QAAS,cAAe,WAAY,SAAU,IAAK,MACnD,QAAS,WAAY,aAAc,MACnC,OAAQ,6CAA8C,WAAY,mCAClE,MAAO,mBAAoB,SAAU,SAAU,WAAY,IAC3D,eAAgB,OAAQ,WAAY,QACxC,CACJ,EAAGE,EAAE,uBAAwB,KAAMpB,CAAM,CAAC,EAEpCuB,EAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,UACL,KAAM,SACN,QAASN,EAET,aAAcG,EAAE,2BAA4B,KAAMpB,CAAM,EACxD,MAAO,CACH,QAAS,WAAY,aAAc,MACnC,OAAQ,sCAAuC,WAAY,4BAC3D,MAAO,mBAAoB,KAAM,UAAW,SAAU,SAAU,WAAY,IAC5E,OAAQ,UAAW,WAAY,QACnC,CACJ,EAAGoB,EAAE,2BAA4B,KAAMpB,CAAM,CAAC,EAE9C,OAAO,MAAM,cAAc,MAAO,CAE9B,KAAM,SACN,aAAcoB,EAAE,gBAAgB,EAChC,MAAO,CAEH,SAAU,QAAS,OAAQ,OAAQ,iBAAkB,OAAQ,OAAQ,GACrE,SAAU,iCACV,QAAS,OAAQ,cAAe,SAAU,IAAK,OAC/C,QAAS,YAAa,aAAc,OACpC,OAAQ,sCAAuC,WAAY,oBAC3D,UAAW,yEACX,QAASd,EAAQ,EAAI,EACrB,UAAWA,GAASS,EAAQ,OAAS,mBACrC,WAAYA,EAAQ,qBAAuB,2DAG3C,cAAeT,EAAQ,OAAS,MACpC,CACJ,EAAG,CACCa,EACA,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAC/D,EAAG,CAACE,EAAME,CAAO,CAAC,CACtB,CAAC,CACL,EAEA,OAAO,mBAAqBxB,GC3H5B,IAAMyB,EAAI,IAAIC,IAAS,MAAM,cAAc,GAAGA,CAAI,EAE5CC,EAAI,CACN,GAAI,oBACJ,MAAO,oBACP,OAAQ,sBACR,KAAM,4BACN,MAAO,4BACP,IAAK,mBACL,KAAM,oBACN,KAAM,mBAMN,OAAQ,mBACR,KAAM,kBACN,KAAM,qBACN,IAAK,gBACL,YAAa,yBACb,UAAW,wBACX,UAAW,2BACX,SAAU,sBACV,KAAM,2CACV,EAEMC,GAAO,CACT,MAAO,2VACP,KAAM,sNACN,OAAQ,6OACR,EAAG,mKACH,KAAM,iKACN,MAAO,6LACP,MAAO,0bACP,KAAM,8PACN,MAAO,4OACX,EAEMC,GAAM,CAACC,EAAQC,EAAQ,CAAC,IAAMN,EAAE,OAAQ,CAC1C,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,GAAGM,CAAM,EACzD,wBAAyB,CAAE,OAAQD,CAAO,CAC9C,CAAC,EAEKE,GAAM,CAACC,EAAS,MAAW,CAC7B,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,MAC7E,QAAS,YAAa,aAAc,OAAQ,OAAQ,UACpD,WAAY,UAAW,SAAU,OAAQ,WAAY,IACrD,OAAQA,EAAS,OAAS,aAAaN,EAAE,KAAK,GAC9C,WAAYM,EAASN,EAAE,YAAc,cACrC,MAAOM,EAAS,sBAAwBN,EAAE,IAC9C,GAEMO,GAAU,CACZ,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,WAAY,SACtE,WAAY,kCAAmC,eAAgB,YAAa,QAAS,MACzF,EAEMC,GAAO,CACT,MAAO,OAAQ,SAAU,QAAS,WAAYR,EAAE,MAAO,OAAQ,aAAaA,EAAE,IAAI,GAClF,aAAc,OAAQ,QAAS,OAAQ,QAAS,OAAQ,cAAe,SAAU,IAAK,OACtF,UAAW,wEACf,EAGA,SAASS,GAAaC,EAAOC,EAAK,CAC9B,IAAMC,EAAM,IAAI,YACZC,EAAM,OAAOH,CAAK,EACtB,KAAOE,EAAI,OAAOC,CAAG,EAAE,OAASF,GAAKE,EAAMA,EAAI,MAAM,EAAG,EAAE,EAC1D,OAAOA,CACX,CAEA,IAAMC,GAAQ,CACV,WAAYd,EAAE,KAAM,SAAU,OAAQ,WAAY,IAAK,cAAe,QACtE,cAAe,YAAa,MAAOA,EAAE,IACzC,EAwBA,SAASe,GAAYC,EAAO,CACxB,OAAQA,EAAM,MAAO,CACjB,KAAKC,EAAY,QAAS,OAAOC,EAAE,mBAAmB,EACtD,KAAKD,EAAY,WAAY,OAAOC,EAAE,qBAAqB,EAC3D,KAAKD,EAAY,UAAW,OAAOC,EAAE,wBAAwB,EAC7D,KAAKD,EAAY,OAAQ,OAAOE,GAAiBH,EAAM,KAAK,GAAKE,EAAE,oBAAoB,EACvF,QAAS,OAAOA,EAAE,eAAe,CACrC,CACJ,CAGA,IAAMC,GAAmB,CACrB,8BAA+BD,EAAE,uBAAuB,EACxD,yBAA0BA,EAAE,yBAAyB,EACrD,qBAAsBA,EAAE,uBAAuB,EAC/C,mBAAoBA,EAAE,kBAAkB,EACxC,cAAeA,EAAE,uBAAuB,EACxC,YAAaA,EAAE,mBAAmB,EAClC,qBAAsBA,EAAE,sBAAsB,EAC9C,oBAAqBA,EAAE,yBAAyB,EAChD,mBAAoBA,EAAE,wBAAwB,EAC9C,mBAAoBA,EAAE,qBAAqB,EAC3C,aAAcA,EAAE,mBAAmB,EACnC,SAAUA,EAAE,mBAAmB,EAC/B,iBAAkBA,EAAE,gBAAgB,EACpC,gBAAiBA,EAAE,mBAAmB,CAC1C,EAEO,SAASE,GAAc,CAAE,MAAAJ,EAAO,UAAAK,EAAW,SAAAC,CAAS,EAAG,CAC1D,GAAI,CAACN,EAAO,OAAO,KACnB,IAAMO,EAASP,EAAM,QAAUC,EAAY,OACrCO,EAAUR,EAAM,QAAUC,EAAY,cAAgB,CAACD,EAAM,QAEnE,OAAOlB,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,SAAU,aAAc,MAAO,EACnET,EAAE,MAAO,CAAE,MAAOU,EAAK,EAAG,CACtBV,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACpFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,gBAAgB,CAAC,EACzDpB,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,GAAI,CAAE,EAAGgB,EAAM,IAAI,CAC3G,CAAC,EAEDQ,EACM1B,EAAE,MAAO,CACP,IAAK,OACL,MAAO,CACH,QAAS,YAAa,UAAW,SAAU,aAAc,OACzD,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GAAI,MAAOA,EAAE,KAAM,SAAU,MAClF,CACJ,EAAG,CACCF,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CACH,WAAYE,EAAE,KAAM,SAAU,OAAQ,cAAe,MACrD,MAAOuB,EAASvB,EAAE,IAAMA,EAAE,IAC9B,CACJ,EAAG,8BAAS,EACZF,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,UAAW,OAAQ,MAAOyB,EAASvB,EAAE,IAAMA,EAAE,IAAK,CAAE,EAAGe,GAAYC,CAAK,CAAC,EACvGO,GAAUzB,EAAE,MAAO,CACf,IAAK,MACL,MAAO,CAAE,UAAW,MAAO,WAAYE,EAAE,KAAM,SAAU,OAAQ,MAAOA,EAAE,IAAK,CACnF,EAAGgB,EAAM,OAAS,SAAS,CAC/B,CAAC,EACClB,EAAE,MAAO,CACP,IAAK,OACL,MAAO,CACH,QAAS,YAAa,UAAW,SAAU,aAAc,OACzD,WAAY,mCAAoC,OAAQ,2CAC5D,CACJ,EAAGA,EAAE,OAAQ,CAGT,IAAK,MACL,MAAO,CACH,WAAYE,EAAE,KAAM,SAAU,yBAA0B,WAAY,IACpE,cAAe,MAAO,MAAOA,EAAE,YAAa,YAAa,SAC7D,CACJ,EAAGgB,EAAM,OAAO,CAAC,EAErBlB,EAAE,IAAK,CACH,IAAK,MACL,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,KAAM,MAAOE,EAAE,IAAK,CAC5E,EAAG,CACCkB,EAAE,oBAAoB,EAAGpB,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,MAAOE,EAAE,GAAI,CAAE,EAAG,OAAOgB,EAAM,QAAQ,OAAS,CAAC,gBAAgB,EACtH,mGACJ,CAAC,EAEDlB,EAAE,IAAK,CACH,IAAK,OACL,MAAO,CACH,OAAQ,EAAG,QAAS,YAAa,aAAc,MAAO,SAAU,SAAU,WAAY,KACtF,WAAY,gCAAiC,OAAQ,0CAA2C,MAAO,oBAC3G,CACJ,EAAGyB,EACGL,EAAE,sBAAsB,EACxBA,EAAE,kBAAkB,CAAC,EAE3BpB,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAClEA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASwB,EAAU,MAAO,CAAE,GAAGjB,GAAIkB,CAAM,EAAG,KAAMA,EAAS,EAAI,CAAE,CAAE,EACvFA,EAASL,EAAE,aAAa,EAAIA,EAAE,cAAc,CAAC,EACjD,CAACK,GAAUzB,EAAE,SAAU,CACnB,IAAK,KAAM,QAASuB,EAAW,SAAUG,EACzC,MAAO,CAAE,GAAGnB,GAAI,EAAI,EAAG,KAAM,EAAG,QAASmB,EAAU,GAAM,EAAG,OAAQA,EAAU,cAAgB,SAAU,CAC5G,EAAG,CAACtB,GAAID,GAAK,OAAQ,CAAE,IAAK,GAAI,CAAC,EAAGiB,EAAE,mBAAmB,CAAC,CAAC,CAC/D,CAAC,CACL,CAAC,CAAC,CACV,CAaO,SAASO,GAAiB,CAAE,WAAAC,EAAY,UAAAC,EAAW,SAAAC,EAAU,SAAAN,CAAS,EAAG,CAC5E,GAAM,CAACO,EAAMC,CAAO,EAAI,MAAM,SAAS,EAAE,EACnC,CAACC,EAAQC,CAAS,EAAI,MAAM,SAAS,CAAC,CAAC,EACvCrB,EAAMsB,EAAa,YAAc,EAEjCC,EAAUC,GAAOH,EAAWI,GAC9BA,EAAK,SAASD,CAAE,EAAIC,EAAK,OAAQC,GAAMA,IAAMF,CAAE,EACzCC,EAAK,QAAUzB,EAAMyB,EAAO,CAAC,GAAGA,EAAMD,CAAE,CACjD,EAEKG,EAAQT,EAAK,KAAK,EAAE,OAAS,GAAKE,EAAO,QAAU,EAEzD,OAAOjC,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,SAAU,aAAc,MAAO,EACnET,EAAE,MAAO,CAAE,MAAO,CAAE,GAAGU,GAAM,SAAU,OAAQ,CAAE,EAAG,CAChDV,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACpFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,WAAW,CAAC,EACpDpB,EAAE,IAAK,CACH,IAAK,IACL,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,IAAK,MAAOE,EAAE,IAAK,CAC3E,EAAGkB,EAAE,iBAAkB,CAAE,IAAKe,EAAa,WAAY,CAAC,CAAC,CAC7D,CAAC,EAEDnC,EAAE,QAAS,CACP,IAAK,OACL,MAAO+B,EAIP,SAAWU,GAAMT,EAAQrB,GAAa8B,EAAE,OAAO,MAAON,EAAa,cAAc,CAAC,EAClF,YAAaf,EAAE,YAAY,EAC3B,MAAO,CACH,MAAO,OAAQ,QAAS,YAAa,aAAc,OAAQ,QAAS,OACpE,WAAYlB,EAAE,OAAQ,OAAQ,aAAaA,EAAE,KAAK,GAAI,MAAOA,EAAE,IAC/D,WAAY,UAAW,SAAU,QACrC,CACJ,CAAC,EAEDF,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACvFA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,eAAgB,gBAAiB,WAAY,UAAW,CAAE,EAAG,CACxGA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,eAAe,CAAC,EACxDpB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,GAAGgB,GAAO,MAAOiB,EAAO,QAAUpB,EAAMX,EAAE,KAAOA,EAAE,IAAK,CAAE,EACrF,GAAG+B,EAAO,MAAM,MAAMpB,CAAG,EAAE,CACnC,CAAC,EACDe,EAAW,SAAW,EAChB5B,EAAE,MAAO,CACP,IAAK,QACL,MAAO,CACH,QAAS,YAAa,aAAc,OAAQ,UAAW,SACvD,WAAYE,EAAE,OAAQ,OAAQ,cAAcA,EAAE,KAAK,GAAI,MAAOA,EAAE,KAAM,SAAU,OAAQ,WAAY,IACxG,CACJ,EAAGkB,EAAE,kBAAkB,CAAC,EACtBpB,EAAE,MAAO,CACP,IAAK,OACL,UAAW,aACX,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,MAAO,UAAW,QAAS,UAAW,MAAO,CACzG,EAAG4B,EAAW,IAAKc,GAAM,CACrB,IAAMC,EAAKV,EAAO,SAASS,EAAE,EAAE,EACzBE,EAAO,CAACD,GAAMV,EAAO,QAAUpB,EACrC,OAAOb,EAAE,SAAU,CACf,IAAK0C,EAAE,GACP,QAAS,IAAMN,EAAOM,EAAE,EAAE,EAC1B,SAAUE,EACV,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAC7D,aAAc,OAAQ,OAAQA,EAAO,cAAgB,UAAW,UAAW,QAC3E,WAAYD,EAAK,kCAAoC,cACrD,OAAQ,aAAaA,EAAK,mCAAqCzC,EAAE,IAAI,GACrE,QAAS0C,EAAO,GAAM,EAAG,WAAY,SACzC,CACJ,EAAG,CACC5C,EAAE,OAAQ,CACN,IAAK,KACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAC3E,WAAY,SAAU,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GACvE,WAAYA,EAAE,KAAM,SAAU,OAAQ,WAAY,IAAK,MAAOA,EAAE,IACpE,CACJ,EAAGwC,EAAE,IAAI,EACT1C,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,SAAU,OAAQ,MAAOE,EAAE,IAAK,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CAAE,EAAGwC,EAAE,IAAI,EACnK1C,EAAE,OAAQ,CACN,IAAK,OACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAC3D,WAAY2C,EAAKzC,EAAE,YAAc,cACjC,OAAQ,aAAayC,EAAKzC,EAAE,YAAcA,EAAE,KAAK,EACrD,CACJ,CAAC,CACL,CAAC,CACL,CAAC,CAAC,CACV,CAAC,EAMD,CAAC2B,GAAa7B,EAAE,IAAK,CACjB,IAAK,KACL,MAAO,CACH,OAAQ,EAAG,QAAS,YAAa,aAAc,MAAO,SAAU,SAAU,WAAY,KACtF,WAAY,qCAAsC,OAAQ,+CAAgD,MAAO,oBACrH,CACJ,EAAGoB,EAAE,oBAAoB,CAAC,EAE1BpB,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAClEA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASwB,EAAU,MAAO,CAAE,GAAGjB,GAAI,EAAK,EAAG,KAAM,CAAE,CAAE,EAAGa,EAAE,iBAAiB,CAAC,EACpGpB,EAAE,SAAU,CACR,IAAK,KACL,QAAS,IAAMwC,GAASV,EAAS,CAAE,KAAMC,EAAK,KAAK,EAAG,WAAYE,CAAO,CAAC,EAC1E,SAAU,CAACO,EACX,MAAO,CAAE,GAAGjC,GAAI,EAAI,EAAG,KAAM,EAAG,QAASiC,EAAQ,EAAI,GAAK,OAAQA,EAAQ,UAAY,aAAc,CACxG,EAAGpB,EAAE,cAAc,CAAC,CACxB,CAAC,CACL,CAAC,CAAC,CACV,CAcO,SAASyB,GAAgB,CAAE,QAAAC,EAAS,UAAAC,CAAU,EAAG,CACpD,OAAKD,EACE9C,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,cAAe,aAAc,MAAO,EACxET,EAAE,MAAO,CAAE,MAAO,CAAE,GAAGU,GAAM,SAAU,OAAQ,CAAE,EAAG,CAChDV,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,qBAAqB,CAAC,EAC9DpB,EAAE,IAAK,CACH,IAAK,IACL,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,IAAK,CACzE,EAAG4C,CAAO,EACV9C,EAAE,SAAU,CAAE,IAAK,KAAM,QAAS+C,EAAW,MAAOxC,GAAI,EAAI,CAAE,EAAGa,EAAE,aAAa,CAAC,CACrF,CAAC,CAAC,EATe,IAUzB,CAcO,SAAS4B,GAAgB,CAAE,WAAApB,EAAY,UAAAqB,EAAW,MAAAC,EAAO,SAAA1B,CAAS,EAAG,CACxE,GAAM,CAACS,EAAQC,CAAS,EAAI,MAAM,SAAS,CAAC,CAAC,EACvCE,EAAUC,GAAOH,EAAWI,GAC9BA,EAAK,SAASD,CAAE,EAAIC,EAAK,OAAQC,GAAMA,IAAMF,CAAE,EACzCC,EAAK,QAAUW,EAAYX,EAAO,CAAC,GAAGA,EAAMD,CAAE,CACvD,EAED,OAAOrC,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,SAAU,aAAc,MAAO,EACnET,EAAE,MAAO,CAAE,MAAO,CAAE,GAAGU,GAAM,SAAU,OAAQ,CAAE,EAAG,CAChDV,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACpFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,kBAAkB,CAAC,EAC3DpB,EAAE,IAAK,CACH,IAAK,IACL,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,IAAK,MAAOE,EAAE,IAAK,CAC3E,EAAG+C,EAAY,EACT7B,EAAE,gBAAiB,CAAE,UAAA6B,CAAU,CAAC,EAChC7B,EAAE,eAAe,CAAC,CAC5B,CAAC,EAEDQ,EAAW,SAAW,EAChB5B,EAAE,MAAO,CACP,IAAK,QACL,MAAO,CACH,QAAS,YAAa,aAAc,OAAQ,UAAW,SACvD,WAAYE,EAAE,OAAQ,OAAQ,cAAcA,EAAE,KAAK,GAAI,MAAOA,EAAE,KAAM,SAAU,OAAQ,WAAY,IACxG,CACJ,EAAGkB,EAAE,mBAAmB,CAAC,EACvBpB,EAAE,MAAO,CACP,IAAK,OACL,UAAW,aACX,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,MAAO,UAAW,QAAS,UAAW,MAAO,CACzG,EAAG4B,EAAW,IAAKc,GAAM,CACrB,IAAMC,EAAKV,EAAO,SAASS,EAAE,EAAE,EACzBE,EAAO,CAACD,GAAMV,EAAO,QAAUgB,EACrC,OAAOjD,EAAE,SAAU,CACf,IAAK0C,EAAE,GACP,QAAS,IAAMN,EAAOM,EAAE,EAAE,EAC1B,SAAUE,EACV,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAC7D,aAAc,OAAQ,OAAQA,EAAO,cAAgB,UAAW,UAAW,QAC3E,WAAYD,EAAK,kCAAoC,cACrD,OAAQ,aAAaA,EAAK,mCAAqCzC,EAAE,IAAI,GACrE,QAAS0C,EAAO,GAAM,EAAG,WAAY,SACzC,CACJ,EAAG,CACC5C,EAAE,OAAQ,CACN,IAAK,KACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAC3E,WAAY,SAAU,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GACvE,WAAYA,EAAE,KAAM,SAAU,OAAQ,WAAY,IAAK,MAAOA,EAAE,IACpE,CACJ,EAAGwC,EAAE,IAAI,EACT1C,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,SAAU,OAAQ,MAAOE,EAAE,IAAK,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CAAE,EAAGwC,EAAE,IAAI,EACnK1C,EAAE,OAAQ,CACN,IAAK,OACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAC3D,WAAY2C,EAAKzC,EAAE,YAAc,cACjC,OAAQ,aAAayC,EAAKzC,EAAE,YAAcA,EAAE,KAAK,EACrD,CACJ,CAAC,CACL,CAAC,CACL,CAAC,CAAC,EAENF,EAAE,IAAK,CACH,IAAK,OACL,MAAO,CACH,OAAQ,EAAG,QAAS,YAAa,aAAc,MAAO,SAAU,SAAU,WAAY,KACtF,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GAAI,MAAOA,EAAE,IAClE,CACJ,EAAGkB,EAAE,sBAAsB,CAAC,EAE5BpB,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAClEA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASwB,EAAU,MAAO,CAAE,GAAGjB,GAAI,EAAK,EAAG,KAAM,CAAE,CAAE,EAAGa,EAAE,iBAAiB,CAAC,EACpGpB,EAAE,SAAU,CACR,IAAK,KACL,QAAS,IAAMiC,EAAO,QAAUiB,EAAMjB,CAAM,EAC5C,SAAUA,EAAO,SAAW,EAC5B,MAAO,CAAE,GAAG1B,GAAI,EAAI,EAAG,KAAM,EAAG,QAAS0B,EAAO,OAAS,EAAI,GAAK,OAAQA,EAAO,OAAS,UAAY,aAAc,CACxH,EAAGA,EAAO,OAAS,EAAIb,EAAE,qBAAsB,CAAE,MAAOa,EAAO,MAAO,CAAC,EAAIb,EAAE,cAAc,CAAC,CAChG,CAAC,CACL,CAAC,CAAC,CACV,CAMO,SAAS+B,GAAiB,CAAE,OAAAC,EAAQ,SAAAC,EAAU,UAAAC,CAAU,EAAG,CAC9D,OAAKF,EACEpD,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,SAAU,aAAc,MAAO,EACnET,EAAE,MAAO,CAAE,MAAOU,EAAK,EAAG,CACtBV,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACpFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,kBAAkB,CAAC,EAC3DpB,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,GAAI,CAAE,EAAGkD,EAAO,IAAI,CAC5G,CAAC,EACDpD,EAAE,IAAK,CACH,IAAK,IACL,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,KAAM,MAAOE,EAAE,IAAK,CAC5E,EAAG,CACCF,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,MAAOE,EAAE,GAAI,CAAE,EAAGkD,EAAO,SAAS,EAC9D,mHACJ,CAAC,EACDpD,EAAE,IAAK,CACH,IAAK,OACL,MAAO,CACH,OAAQ,EAAG,QAAS,YAAa,aAAc,MAAO,SAAU,SAAU,WAAY,KACtF,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GAAI,MAAOA,EAAE,IAClE,CACJ,EAAGkB,EAAE,gBAAgB,CAAC,EACtBpB,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAClEA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASsD,EAAW,MAAO,CAAE,GAAG/C,GAAI,EAAK,EAAG,KAAM,CAAE,CAAE,EAAGa,EAAE,eAAe,CAAC,EACnGpB,EAAE,SAAU,CAAE,IAAK,IAAK,QAASqD,EAAU,MAAO,CAAE,GAAG9C,GAAI,EAAI,EAAG,KAAM,CAAE,CAAE,EAAGa,EAAE,YAAY,CAAC,CAClG,CAAC,CACL,CAAC,CAAC,EAzBc,IA0BxB,CAMA,SAASmC,GAAY,CAAE,MAAArC,EAAO,SAAAsC,EAAU,QAAAC,CAAQ,EAAG,CAC/C,OAAOzD,EAAE,MAAO,CACZ,UAAW,aACX,MAAO,CACH,QAAS,OAAQ,IAAK,MAAO,QAAS,WAAY,UAAW,OAC7D,aAAc,aAAaE,EAAE,IAAI,GAAI,KAAM,MAC/C,CACJ,EAAGgB,EAAM,QAAQ,IAAKwC,GAAM,CACxB,IAAMC,EAAOD,EAAE,QAAUE,GAAa,KAChCC,EAAOH,EAAE,QAAUE,GAAa,KAChCE,EAAMH,GAAQD,EAAE,QAAUE,GAAa,OAAS1D,EAAE,UAClDwD,EAAE,QAAUE,GAAa,QAAU1D,EAAE,UAAYA,EAAE,SACnD6D,EAAML,EAAE,QAAUE,GAAa,QACrC,OAAO5D,EAAE,OAAQ,CACb,IAAK0D,EAAE,GACP,MAAOC,EAAO,MACRD,EAAE,QAAUE,GAAa,OAASxC,EAAE,kBAAkB,EACtDsC,EAAE,QAAUE,GAAa,QAAUxC,EAAE,oBAAoB,EACzDA,EAAE,sBAAuB,CAAE,KAAMsC,EAAE,IAAK,CAAC,EAC/C,MAAO,CACH,KAAM,OAAQ,QAAS,cAAe,WAAY,SAAU,IAAK,MACjE,QAAS,WAAY,aAAc,OAKnC,WAAYG,EAAO,cAAgB3D,EAAE,OACrC,OAAQ,aAAa2D,EAAO,+BAAiC3D,EAAE,IAAI,GACnE,SAAU,SAAU,MAAOyD,EAAOzD,EAAE,IAAO2D,EAAO3D,EAAE,KAAOA,EAAE,KAC7D,QAAS2D,EAAO,IAAO,CAC3B,CACJ,EAAG,CACC7D,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY8D,CAAI,CAAE,CAAC,EACpG9D,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO6D,EAAO,CAAE,eAAgB,cAAe,EAAI,MAAU,EAAGF,EAAO,MAAQD,EAAE,IAAI,EAC3GG,GAAQ7D,EAAE,OAAQ,CACd,IAAK,MACL,MAAO,CAAE,WAAYE,EAAE,KAAM,SAAU,OAAQ,MAAOA,EAAE,IAAK,cAAe,QAAS,CACzF,EAAG,SAAS,EACZ6D,GAAO3D,GAAID,GAAK,MAAO,CAAE,IAAK,IAAK,MAAOD,EAAE,IAAK,CAAC,EACjDuD,GAAW,CAACE,GAAQH,GAAaxD,EAAE,SAAU,CAC1C,IAAK,IACL,QAAS,IAAMwD,EAASE,EAAE,EAAE,EAC5B,MAAOtC,EAAE,eAAgB,CAAE,KAAMsC,EAAE,IAAK,CAAC,EACzC,MAAO,CAAE,OAAQ,OAAQ,WAAY,cAAe,MAAOxD,EAAE,KAAM,OAAQ,UAAW,QAAS,OAAQ,QAAS,CAAE,EAClH,wBAAyB,CAAE,OAAQ,oKAAqK,CAC5M,CAAC,CACL,CAAC,CACL,CAAC,CAAC,CACN,CAEA,SAAS8D,GAAO,CAAE,IAAAC,CAAI,EAAG,CACrB,IAAMC,EAAOD,EAAI,OAAS,OAE1B,OADeA,EAAI,OAAS,SAEjBjE,EAAE,MAAO,CACZ,MAAO,CACH,UAAW,SAAU,SAAU,MAAO,UAAW,SAAU,QAAS,WACpE,aAAc,MAAO,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GACtE,SAAU,OAAQ,MAAOA,EAAE,KAAM,WAAY,GACjD,CACJ,EAAG+D,EAAI,OAAO,EAEXjE,EAAE,MAAO,CACZ,MAAO,CACH,UAAWkE,EAAO,WAAa,aAAc,SAAU,kBACvD,QAAS,OAAQ,cAAe,SAAU,IAAK,KACnD,CACJ,EAAG,CACC,CAACA,GAAQlE,EAAE,OAAQ,CACf,IAAK,MACL,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAOE,EAAE,OAAQ,mBAAoB,KAAM,CAC7F,EAAG+D,EAAI,YAAc7C,EAAE,cAAc,CAAC,EACtCpB,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CACH,QAAS,WAAY,aAAckE,EAAO,qBAAuB,qBACjE,WAAYA,EAAO,mCAAqChE,EAAE,OAC1D,OAAQ,aAAagE,EAAO,mCAAqChE,EAAE,IAAI,GACvE,MAAOA,EAAE,IAAK,SAAU,SAAU,WAAY,IAAK,UAAW,aAAc,WAAY,UAC5F,CACJ,EAAG+D,EAAI,OAAO,EACdjE,EAAE,OAAQ,CACN,IAAK,IACL,MAAO,CAAE,WAAYE,EAAE,KAAM,SAAU,OAAQ,MAAOA,EAAE,KAAM,UAAWgE,EAAO,WAAa,aAAc,QAAS,OAAQ,CAChI,EAAG,CACC,IAAI,KAAKD,EAAI,WAAa,KAAK,IAAI,CAAC,EAAE,mBAAmB,CAAC,EAAG,CAAE,KAAM,UAAW,OAAQ,SAAU,CAAC,EACnGA,EAAI,QAAU,gBAAe,EACjC,EAAE,KAAK,EAAE,CAAC,CACd,CAAC,CACL,CAEO,SAASE,GAAc,CAC1B,MAAAjD,EAAO,MAAAkD,EAAO,SAAAC,EAAU,OAAAC,EAAQ,QAAAC,EAAS,eAAAC,EAAgB,aAAAC,EAAc,QAAAhB,EAAS,UAAAiB,EAChF,YAAAC,EAAa,WAAAC,EAAY,YAAAC,CAC7B,EAAG,CACC,IAAMrC,EAAQtB,EAAM,QAAUC,EAAY,OAASD,EAAM,aAKnD4D,EAAW5D,EAAM,QAAQ,KAAMwC,GAAMA,EAAE,QAAUE,GAAa,OAAO,EAErEmB,EAAUtC,GAAM,CAClBA,EAAE,eAAe,EACb,GAACD,GAAS,CAAC4B,EAAM,KAAK,IAC1BE,EAAOF,CAAK,CAChB,EAEA,OAAOpE,EAAE,MAAO,CACZ,MAAO,CACH,SAAU,WAAY,QAAS,OAAQ,cAAe,SACtD,OAAQ,OAAQ,UAAW,EAAG,WAAYE,EAAE,EAChD,CACJ,EAAG,CAMCF,EAAE,QAAS,CACP,IAAK,WACL,wBAAyB,CACrB,OAAQ,iPASZ,CACJ,CAAC,EAGDA,EAAE,MAAO,CACL,IAAK,OACL,UAAW,kBACX,MAAO,CACH,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAC1D,QAAS,iCACT,UAAW,uCACX,aAAc,aAAaE,EAAE,IAAI,EACrC,CACJ,EAAG,CACCF,EAAE,OAAQ,CACN,IAAK,KACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAC5E,WAAY,SAAU,WAAY,mCAClC,OAAQ,6CAA8C,MAAOE,EAAE,OAC/D,WAAYA,EAAE,KAAM,SAAU,OAAQ,WAAY,GACtD,CACJ,EAAG8E,GAAc9D,EAAM,IAAI,CAAC,EAC5BlB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvDA,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,IAAK,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CACjI,EAAGgB,EAAM,IAAI,EACblB,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CAAE,SAAU,SAAU,MAAO8E,EAAW5E,EAAE,KAAOA,EAAE,KAAM,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CACtH,EAAG,CACCE,GAAID,GAAK,MAAO,CAAE,IAAK,IAAK,MAAO,OAAQ,OAAQ,MAAO,CAAC,EAC3DiB,EAAE,qBAAsB,CAAE,MAAOF,EAAM,QAAQ,MAAO,CAAC,EACvDsB,GAAStB,EAAM,QACTlB,EAAE,OAAQ,CAAE,IAAK,OAAQ,IAAK,MAAO,MAAO,CAAE,YAAa,SAAU,CAAE,EAAGoB,EAAE,mBAAoB,CAAE,KAAMF,EAAM,OAAQ,CAAC,CAAC,EACxH,EACV,CAAC,CACL,CAAC,EAIAsB,GAASmC,GAAgB3E,EAAE,SAAU,CAClC,IAAK,YAAa,UAAW,YAAa,QAAS,IAAM2E,EAAY,EAAK,EAAG,SAAUC,EACvF,MAAOxD,EAAE,sBAAsB,EAAG,aAAcA,EAAE,sBAAsB,EACxE,MAAO,CACH,GAAGb,GAAI,EAAK,EAAG,KAAM,OAAQ,QAAS,WAAY,QAASqE,EAAa,GAAM,EAC9E,OAAQA,EAAa,UAAY,SACrC,CACJ,EAAGxE,GAAID,GAAK,MAAO,CAAE,IAAK,GAAI,CAAC,CAAC,EAC/BqC,GAASmC,GAAgB3E,EAAE,SAAU,CAClC,IAAK,YAAa,UAAW,YAAa,QAAS,IAAM2E,EAAY,EAAI,EAAG,SAAUC,EACtF,MAAOxD,EAAE,sBAAsB,EAAG,aAAcA,EAAE,sBAAsB,EACxE,MAAO,CACH,GAAGb,GAAI,EAAK,EAAG,KAAM,OAAQ,QAAS,WAAY,QAASqE,EAAa,GAAM,EAC9E,OAAQA,EAAa,UAAY,SACrC,CACJ,EAAGxE,GAAID,GAAK,MAAO,CAAE,IAAK,GAAI,CAAC,CAAC,EAC/BsD,GAAWgB,GAAgBvD,EAAM,QAAQ,OAASiB,EAAa,aAAgBnC,EAAE,SAAU,CACxF,IAAK,MAAO,UAAW,YAAa,QAASyE,EAAc,MAAOrD,EAAE,kBAAkB,EACtF,MAAO,CAAE,GAAGb,GAAI,EAAK,EAAG,KAAM,OAAQ,QAAS,WAAY,SAAU,QAAS,CAClF,EAAG,CACCH,GAAID,GAAK,KAAM,CAAE,IAAK,GAAI,CAAC,EAC3BH,EAAE,OAAQ,CAAE,IAAK,IAAK,UAAW,aAAc,EAAGoB,EAAE,WAAW,CAAC,CACpE,CAAC,EACDpB,EAAE,SAAU,CACR,IAAK,QAAS,UAAW,YAAa,QAASuE,EAAS,MAAOnD,EAAE,iBAAiB,EAClF,aAAcA,EAAE,iBAAiB,EACjC,MAAO,CAAE,GAAGb,GAAI,EAAK,EAAG,KAAM,OAAQ,QAAS,WAAY,SAAU,SAAU,MAAOL,EAAE,IAAK,YAAa,8BAA+B,CAC7I,EAAG,CACCE,GAAID,GAAK,KAAM,CAAE,IAAK,GAAI,CAAC,EAC3BH,EAAE,OAAQ,CAAE,IAAK,IAAK,UAAW,aAAc,EAAGoB,EAAE,aAAa,CAAC,CACtE,CAAC,CACL,CAAC,EAEDpB,EAAEuD,GAAa,CAAE,IAAK,QAAS,MAAArC,EAAO,SAAUsD,EAAgB,QAAAf,CAAQ,CAAC,EAEzEqB,GAAYtC,GAASxC,EAAE,MAAO,CAC1B,IAAK,aACL,MAAO,CACH,KAAM,OAAQ,QAAS,WAAY,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,KAC/E,WAAY,qCAAsC,aAAc,aAAaA,EAAE,IAAI,EACvF,CACJ,EAAGkB,EAAE,iBAAiB,CAAC,EAGvBpB,EAAE,MAAO,CACL,IAAK,OACL,IAAK0E,EACL,UAAW,aACX,MAAO,CACH,KAAM,EAAG,UAAW,EAAG,UAAW,OAAQ,QAAS,YACnD,QAAS,OAAQ,cAAe,SAAU,IAAK,MACnD,CACJ,EAAGxD,EAAM,SAAS,SAAW,EACvB,CAAClB,EAAE,MAAO,CACR,IAAK,QACL,MAAO,CAAE,OAAQ,OAAQ,UAAW,SAAU,MAAOE,EAAE,KAAM,SAAU,SAAU,WAAY,IAAK,SAAU,OAAQ,CACxH,EAAGsC,EACGpB,EAAE,iBAAiB,EACnBA,EAAE,kBAAkB,CAAC,CAAC,EAC1BF,EAAM,SAAS,IAAKwC,GAAM1D,EAAEgE,GAAQ,CAAE,IAAKN,EAAE,GAAI,IAAKA,CAAE,CAAC,CAAC,CAAC,EAGjE1D,EAAE,OAAQ,CACN,IAAK,WACL,SAAU+E,EACV,MAAO,CACH,KAAM,OAAQ,QAAS,OAAQ,IAAK,MAAO,QAAS,YACpD,UAAW,aAAa7E,EAAE,IAAI,GAAI,WAAY,UAClD,CACJ,EAAG,CACCF,EAAE,QAAS,CACP,IAAK,KACL,MAAOoE,EACP,SAAW3B,GAAM4B,EAAS5B,EAAE,OAAO,KAAK,EACxC,YAAaD,EAAQpB,EAAE,gBAAiB,CAAE,KAAMF,EAAM,IAAK,CAAC,EAAIE,EAAE,oBAAoB,EACtF,SAAU,CAACoB,EACX,UAAWL,EAAa,eACxB,MAAO,CACH,KAAM,EAAG,SAAU,EAAG,QAAS,YAAa,aAAc,OAAQ,QAAS,OAC3E,WAAYjC,EAAE,OAAQ,OAAQ,aAAaA,EAAE,KAAK,GAAI,MAAOA,EAAE,IAC/D,WAAY,UAAW,SAAU,SAAU,QAASsC,EAAQ,EAAI,EACpE,CACJ,CAAC,EACDxC,EAAE,SAAU,CACR,IAAK,OAAQ,KAAM,SAAU,SAAU,CAACwC,GAAS,CAAC4B,EAAM,KAAK,EAAG,MAAOhD,EAAE,YAAY,EACrF,MAAO,CACH,GAAGb,GAAI,EAAI,EAAG,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,QAAS,EAAG,aAAc,OACrF,QAAU,CAACiC,GAAS,CAAC4B,EAAM,KAAK,EAAK,GAAM,CAC/C,CACJ,EAAGhE,GAAID,GAAK,IAAI,CAAC,CACrB,CAAC,EAID0E,CACJ,CAAC,CACL,CC5tBO,IAAMI,GAAY,OAAO,OAAO,CACnC,YAAa,cACb,WAAY,aACZ,OAAQ,SACR,OAAQ,QACZ,CAAC,EAGKC,GAAiB,CACnB,KAAMD,GAAU,WAChB,SAAUA,GAAU,WACpB,SAAUA,GAAU,WACpB,WAAYA,GAAU,WACtB,OAAQA,GAAU,OAClB,MAAOA,GAAU,MACrB,EAWaE,GAAW,OAAO,OAAO,CAAE,GAAI,IAAM,IAAK,KAAO,QAAS,IAAK,UAAW,GAAI,CAAC,EAW/EC,GAAmB,IAYhC,SAASC,GAAmBC,EAASC,EAAQ,CACzC,GAAI,CAACD,GAAW,CAACC,EAAQ,OAAO,KAChC,IAAIC,EACJ,GAAI,CACAA,EAASF,EAAQ,wBAAwBC,CAAM,CACnD,MAAY,CACR,OAAO,IACX,CACA,IAAME,EAAWH,EAAQ,eAAe,EACxCG,EAAS,QAAU,IACnBA,EAAS,sBAAwB,GACjCD,EAAO,QAAQC,CAAQ,EAGvB,IAAMC,EAAS,IAAI,WAAWD,EAAS,OAAO,EAE9C,MAAO,CACH,MAAO,CACHA,EAAS,sBAAsBC,CAAM,EACrC,IAAIC,EAAM,EACV,QAASC,EAAI,EAAGA,EAAIF,EAAO,OAAQE,IAAK,CACpC,IAAMC,GAAKH,EAAOE,CAAC,EAAI,KAAO,IAC9BD,GAAOE,EAAIA,CACf,CACA,OAAO,KAAK,KAAKF,EAAMD,EAAO,MAAM,CACxC,EACA,OAAQ,CACJ,GAAI,CAAEF,EAAO,WAAW,CAAG,MAAY,CAAC,CACxC,GAAI,CAAEC,EAAS,WAAW,CAAG,MAAY,CAAC,CAC9C,CACJ,CACJ,CAEO,IAAMK,GAAN,KAAqB,CAQxB,YAAY,CACR,WAAAC,EAAY,aAAAC,EAAe,KAAM,gBAAAC,EAAkB,KAAM,iBAAAC,EAAmB,KAC5E,SAAAC,EAAW,IAAM,CAAC,EAAG,IAAAC,EAAM,IAAM,CAAC,CACtC,EAAG,CACC,KAAK,YAAcL,EACnB,KAAK,cAAgBC,IACZK,GAAgB,UAAU,aAAa,aAAaA,CAAW,GAWxE,KAAK,iBAAmBJ,IAChB,IAAO,OAAO,OAAU,WAAa,IAAI,MAAU,MAQ3D,KAAK,kBAAoBC,IAChBX,GAAWF,GAAmB,KAAK,cAAc,EAAGE,CAAM,GACnE,KAAK,UAAYY,EACjB,KAAK,KAAOC,EAEZ,KAAK,OAAS,KACd,KAAK,OAAS,GACd,KAAK,UAAY,GACjB,KAAK,WAAa,GAClB,KAAK,cAAgB,GACrB,KAAK,WAAa,OAClB,KAAK,MAAQ,KAEb,KAAK,YAAc,KAEnB,KAAK,MAAQ,IAAI,IAEjB,KAAK,OAAS,CAAC,EAEf,KAAK,MAAQ,GAGb,KAAK,KAAO,KAEZ,KAAK,WAAa,KAClB,KAAK,aAAe,GACpB,KAAK,gBAAkB,EAEvB,KAAK,YAAc,IACvB,CAWA,eAAgB,CACZ,GAAI,KAAK,KAAM,OAAO,KAAK,KAC3B,IAAME,EAAO,OAAO,aAAiB,IAAc,aAC5C,OAAO,mBAAuB,IAAc,mBAAqB,KACxE,GAAI,CAACA,EAAM,OAAO,KAClB,GAAI,CACA,KAAK,KAAO,IAAIA,EACZ,KAAK,KAAK,QAAU,aAAa,KAAK,KAAK,OAAO,EAAE,MAAM,IAAM,CAAC,CAAC,CAC1E,MAAY,CACR,KAAK,KAAO,IAChB,CACA,OAAO,KAAK,IAChB,CAEA,IAAI,QAAS,CACT,OAAO,KAAK,SAAW,IAC3B,CAoBA,MAAM,KAAK,CAAE,OAAAC,EAAQ,OAAAC,EAAQ,UAAAC,EAAY,GAAO,MAAAC,EAAQ,CAAC,CAAE,EAAG,CAC1D,GAAI,KAAK,SAAWH,EAAQ,CAAE,KAAK,SAASG,CAAK,EAAG,MAAQ,CACxD,KAAK,QAAQ,MAAM,KAAK,MAAM,EAElC,KAAK,OAASH,EACd,KAAK,OAASC,EACd,KAAK,UAAYC,IAAc,GAC/B,KAAK,WAAa,GAClB,KAAK,cAAgB,KAAK,UAC1B,KAAK,MAAQ,KACb,KAAK,SAAS,EAEd,GAAI,CACA,KAAK,YAAc,MAAM,KAAK,cAAc,CACxC,MAAO,CAAE,iBAAkB,GAAM,iBAAkB,GAAM,gBAAiB,EAAK,EAC/E,MAAO,KAAK,UACN,CAAE,WAAY,KAAK,WAAY,MAAO,CAAE,MAAO,IAAK,EAAG,OAAQ,CAAE,MAAO,GAAI,CAAE,EAC9E,EACV,CAAC,CACL,OAASE,EAAO,CACZ,WAAK,OAAS,KACd,KAAK,MAAQC,GAAeD,CAAK,EACjC,KAAK,SAAS,EACRA,CACV,CAEA,KAAK,WAAa,KAAK,kBAAkB,KAAK,WAAW,EACzD,KAAK,mBAAmB,EACxB,KAAK,SAASD,CAAK,CACvB,CAmBA,SAASA,EAAO,CAEZ,GADA,KAAK,OAAS,MAAM,QAAQA,CAAK,EAAIA,EAAQ,CAAC,EAC1C,CAAC,KAAK,OAAQ,OAElB,IAAMG,EAAS,IAAI,IACnB,QAAWC,KAAQ,KAAK,OAChB,CAACA,GAAQ,CAACA,EAAK,IAAMA,EAAK,KAAO,KAAK,QAC1CD,EAAO,IAAIC,EAAK,GAAIA,CAAI,EAM5B,OAAW,CAACC,EAAIC,CAAG,GAAK,CAAC,GAAG,KAAK,KAAK,EAAG,CACrC,IAAMF,EAAOD,EAAO,IAAIE,CAAE,GACtB,CAACD,GAAQA,EAAK,YAAcE,EAAI,YAAW,KAAK,QAAQD,CAAE,CAClE,CAEA,OAAW,CAACA,EAAID,CAAI,IAAKD,EAAQ,CAC7B,IAAMI,EAAW,KAAK,MAAM,IAAIF,CAAE,EAClC,GAAIE,EAAU,CAONA,EAAS,QAAUhC,GAAU,QAAU,KAAK,QAAQ8B,CAAE,GAAG,KAAK,MAAME,CAAQ,EAChF,QACJ,CACKH,EAAK,WACV,KAAK,QAAQC,EAAID,CAAI,CACzB,CAEA,KAAK,SAAS,CAClB,CAGA,MAAM,OAAQ,CAEV,GADA,KAAK,kBAAkB,EACnB,KAAK,WAAY,CAAE,GAAI,CAAE,KAAK,WAAW,QAAQ,CAAG,MAAY,CAAC,CAAE,KAAK,WAAa,IAAM,CAC/F,KAAK,aAAe,GACpB,QAAWC,IAAM,CAAC,GAAG,KAAK,MAAM,KAAK,CAAC,EAAG,KAAK,QAAQA,CAAE,EACxD,GAAI,KAAK,KAAM,CAAE,GAAI,CAAE,KAAK,KAAK,QAAQ,CAAG,MAAY,CAAC,CAAE,KAAK,KAAO,IAAM,CAC7E,GAAI,KAAK,YACL,QAAWG,KAAS,KAAK,YAAY,UAAU,EAC3C,GAAI,CAAEA,EAAM,KAAK,CAAG,MAAY,CAAsB,CAG9D,KAAK,YAAc,KACnB,KAAK,OAAS,KACd,KAAK,OAAS,GACd,KAAK,UAAY,GACjB,KAAK,cAAgB,GACrB,KAAK,WAAa,GAClB,KAAK,OAAS,CAAC,EACf,KAAK,SAAS,CAClB,CAaA,QAAQC,EAAQ,CACZ,OAAO,KAAK,OAASA,CACzB,CAEA,QAAQJ,EAAID,EAAM,CACd,IAAMM,EAAU,KAAK,YAAYN,EAAK,SAAS,EAC/C,GAAI,CAACM,EAAS,OAEd,IAAMJ,EAAM,CACR,GAAAD,EACA,KAAMD,EAAK,MAAQ,SACnB,UAAWA,EAAK,UAChB,QAAAM,EACA,YAAa,KACb,KAAM,KAAK,iBAAiB,EAC5B,MAAO,KACP,SAAU,KACV,SAAU,GACV,WAAY,EACZ,MAAOnC,GAAU,WACjB,QAAS,KACT,SAAU,EACd,EACI+B,EAAI,OAAQA,EAAI,KAAK,SAAW,GAAMA,EAAI,KAAK,MAAQ,IAC3D,KAAK,MAAM,IAAID,EAAIC,CAAG,EAItB,GAAI,CAAEI,EAAQ,oBAAoB,KAAK,MAAM,CAAG,MAAY,CAAC,CAC7D,GAAI,CAAEA,EAAQ,uBAAuB,KAAK,WAAW,CAAG,MAAY,CAAC,CAarE,GAXI,OAAOA,EAAQ,sBAAyB,aACxCJ,EAAI,YAAcI,EAAQ,qBAAsBC,GAAU,KAAK,YAAYN,EAAIM,CAAK,CAAC,GAQzF,KAAK,YAAYN,EAAIK,EAAQ,eAAe,GAAK,CAAC,CAAC,EAE/C,KAAK,QAAQL,CAAE,EAAG,CAClB,KAAK,MAAMC,CAAG,EACd,MACJ,CASAA,EAAI,SAAW,WAAW,IAAM,KAAK,cAAcD,CAAE,EAAG3B,EAAgB,CAC5E,CAEA,cAAc2B,EAAI,CACd,IAAMC,EAAM,KAAK,MAAM,IAAID,CAAE,EACzB,CAACC,GAAO,CAAC,KAAK,SAClBA,EAAI,SAAW,MACDA,EAAI,QAAQ,eAAe,EAAE,OAAS,UACtC,UACd,KAAK,KAAK,OAAQ,4DAA6D,CAAC,CAAC,EACjF,QAAQ,QAAQ,EACX,KAAK,IAAMA,EAAI,QAAQ,UAAU,KAAK,SAAS,CAAC,EAChD,MAAM,IAAM,CACT,IAAMM,EAAO,KAAK,MAAM,IAAIP,CAAE,EAC1BO,IAASN,IAAOM,EAAK,MAAQrC,GAAU,OAAQ,KAAK,SAAS,EACrE,CAAC,EACT,CAGA,MAAM+B,EAAK,EACOA,EAAI,QAAQ,eAAe,EAAE,OAAS,UACtC,SACdA,EAAI,MAAQ/B,GAAU,WACtB,QAAQ,QAAQ,EACX,KAAK,IAAM+B,EAAI,QAAQ,UAAU,KAAK,SAAS,CAAC,EAChD,MAAOL,GAAU,CACd,KAAK,KAAK,OAAQ,qCAAsC,CACpD,UAAWA,GAAO,aAAa,IACnC,CAAC,EACD,IAAMW,EAAO,KAAK,MAAM,IAAIN,EAAI,EAAE,EAC9BM,IAASN,IAAOM,EAAK,MAAQrC,GAAU,OAAQ,KAAK,SAAS,EACrE,CAAC,EACT,CAEA,QAAQ8B,EAAI,CACR,IAAMC,EAAM,KAAK,MAAM,IAAID,CAAE,EAC7B,GAAKC,EACL,MAAK,MAAM,OAAOD,CAAE,EAChBC,EAAI,WAAY,aAAaA,EAAI,QAAQ,EAAGA,EAAI,SAAW,MAC/D,GAAI,CAAEA,EAAI,cAAc,CAAG,MAAY,CAAC,CACxC,GAAIA,EAAI,KAAM,CACV,GAAI,CAAEA,EAAI,KAAK,QAAQ,CAAG,MAAY,CAAC,CACvC,GAAI,CAAEA,EAAI,KAAK,UAAY,IAAM,MAAY,CAAC,CAClD,CACA,GAAIA,EAAI,MAAO,CAAE,GAAI,CAAEA,EAAI,MAAM,QAAQ,CAAG,MAAY,CAAC,CAAEA,EAAI,MAAQ,IAAM,CAI7E,GAAI,CAAEA,EAAI,QAAQ,UAAU,CAAG,MAAY,CAAC,CAC5C,GAAI,CAAEA,EAAI,QAAQ,yBAAyB,IAAI,CAAG,MAAY,CAAC,CAC/D,GAAI,CAAEA,EAAI,QAAQ,sBAAsB,IAAI,CAAG,MAAY,CAAC,EAChE,CAEA,YAAYD,EAAIM,EAAO,CACnB,IAAML,EAAM,KAAK,MAAM,IAAID,CAAE,EAC7B,GAAI,CAACC,EAAK,OACV,IAAMO,EAAQF,GAAO,OAAS,OAC1BL,EAAI,UAAYO,IAAU,SAAU,aAAaP,EAAI,QAAQ,EAAGA,EAAI,SAAW,MACnFA,EAAI,MAAQ9B,GAAeqC,CAAK,GAAKtC,GAAU,WAC/C+B,EAAI,QAAUK,GAAO,SAAW,KAChCL,EAAI,SAAWK,GAAO,iBAAmB,GACzC,KAAK,WAAWL,CAAG,EACnB,KAAK,SAAS,CAClB,CAWA,WAAWA,EAAK,CACZ,GAAI,CAACA,EAAI,KAAM,OACf,IAAIzB,EAAS,KACb,GAAI,CAAEA,EAASyB,EAAI,QAAQ,uBAAuB,GAAK,IAAM,MAAY,CAAE,MAAQ,CACnF,GAAI,GAACzB,GAAUyB,EAAI,KAAK,YAAczB,GACtC,IAAI,CACAyB,EAAI,KAAK,UAAYzB,EACrB,IAAMiC,EAASR,EAAI,KAAK,OAAO,EAC3BQ,GAAUA,EAAO,OAAOA,EAAO,MAAM,IAAM,CAAC,CAAC,CACrD,MAAY,CAAiE,CAI7E,GAAIR,EAAI,MAAS,GAAI,CAAEA,EAAI,MAAM,QAAQ,CAAG,MAAY,CAAC,CACzDA,EAAI,MAAQ,KAAK,kBAAkBzB,CAAM,EACzCyB,EAAI,SAAW,GACnB,CAMA,oBAAqB,CACb,KAAK,aAAe,OAAO,aAAgB,aAC/C,KAAK,YAAc,YAAY,IAAM,KAAK,cAAc,EAAG7B,GAAS,SAAS,EACjF,CAEA,mBAAoB,CACZ,KAAK,cAAe,cAAc,KAAK,WAAW,EAAG,KAAK,YAAc,KAChF,CASA,YAAYsC,EAAQC,EAAKC,EAAUC,EAAOC,EAAK,CAC3C,IAAMC,EAAWL,EAAOC,CAAG,IAAM,GACjC,OAAIE,GAASzC,GAAS,IAClBsC,EAAOE,CAAQ,EAAI,EACdG,EACE,IADUL,EAAOC,CAAG,EAAI,GAAa,KAG3CI,EACDF,EAAQzC,GAAS,KAAOsC,EAAOE,CAAQ,EAAI,EAAU,IACpDF,EAAOE,CAAQ,EAChBE,EAAMJ,EAAOE,CAAQ,GAAKxC,GAAS,SAAWsC,EAAOC,CAAG,EAAI,GAAc,IACvE,IAFkBD,EAAOE,CAAQ,EAAIE,EAAY,IAFlC,EAK1B,CAEA,eAAgB,CACZ,GAAI,CAAC,KAAK,OAAQ,OAClB,IAAMA,EAAM,KAAK,IAAI,EACjBE,EAAU,GAKRC,EAAa,KAAK,YAAc,KAAK,WAAcC,GAAS,KAAK,UAAU,EAAI,EACjF,KAAK,YAAY,KAAM,eAAgB,kBAAmBD,EAAWH,CAAG,IAAGE,EAAU,IAEzF,QAAWf,KAAO,KAAK,MAAM,OAAO,EAAG,CACnC,IAAMY,EAAQZ,EAAI,MAAQiB,GAASjB,EAAI,KAAK,EAAI,EAC5C,KAAK,YAAYA,EAAK,WAAY,aAAcY,EAAOC,CAAG,IAAGE,EAAU,GAC/E,CAIIA,GAAS,KAAK,SAAS,CAC/B,CAMA,OAAOG,EAAS,CAEZ,GADA,KAAK,WAAaA,IAAY,GAC1B,KAAK,YACL,QAAWhB,KAAS,KAAK,YAAY,eAAe,EAAGA,EAAM,QAAU,KAAK,WAM3E,KAAK,aAAc,KAAK,aAAe,GAAO,KAAK,gBAAkB,GAI1E,QAAWF,KAAO,KAAK,MAAM,OAAO,EAChC,GAAI,CAAEA,EAAI,QAAQ,gBAAgB,KAAK,UAAU,CAAG,MAAY,CAAC,CAErE,KAAK,SAAS,CAClB,CAEA,WAAY,CAAE,KAAK,OAAO,CAAC,KAAK,UAAU,CAAG,CAU7C,MAAM,UAAUkB,EAAS,CACrB,GAAI,CAAC,KAAK,QAAU,KAAK,MAAO,OAChC,GAAIA,IAAY,GAAO,CAEnB,GADA,KAAK,cAAgB,GACjB,KAAK,YACL,QAAWhB,KAAS,KAAK,YAAY,eAAe,EAAGA,EAAM,QAAU,GAE3E,QAAWF,KAAO,KAAK,MAAM,OAAO,EAChC,GAAI,CAAEA,EAAI,QAAQ,mBAAmB,EAAK,CAAG,MAAY,CAAC,CAE9D,KAAK,SAAS,EACd,MACJ,CAEA,IAAMC,EAAW,KAAK,aAAa,iBAAiB,GAAK,CAAC,EAC1D,GAAIA,EAAS,OAAQ,CACjB,QAAWC,KAASD,EAAUC,EAAM,QAAU,GAC9C,KAAK,cAAgB,GACrB,KAAK,UAAY,GACjB,KAAK,SAAS,EACd,MACJ,CAEA,KAAK,MAAQ,GACb,GAAI,CAIA,IAAMA,GAHS,MAAM,KAAK,cAAc,CACpC,MAAO,CAAE,WAAY,KAAK,WAAY,MAAO,CAAE,MAAO,IAAK,EAAG,OAAQ,CAAE,MAAO,GAAI,CAAE,CACzF,CAAC,GACoB,eAAe,EAAE,CAAC,EACvC,GAAI,CAACA,EAAO,OACZ,KAAK,YAAY,SAASA,CAAK,EAC/B,KAAK,cAAgB,GACrB,KAAK,UAAY,GACjB,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,MAAM,OAAO,CAAC,EAAE,IAC7CF,GAAQ,QAAQ,QAAQ,EAAE,KAAK,IAAMA,EAAI,QAAQ,gBAAgBE,CAAK,CAAC,CAC5E,CAAC,CACL,OAASP,EAAO,CACZ,KAAK,MAAQC,GAAeD,CAAK,EACjC,KAAK,cAAgB,EACzB,QAAE,CACE,KAAK,MAAQ,GACb,KAAK,SAAS,CAClB,CACJ,CAEA,MAAM,cAAe,CAAE,MAAM,KAAK,UAAU,CAAC,KAAK,aAAa,CAAG,CAGlE,MAAM,YAAa,CACf,GAAI,CAAC,KAAK,QAAU,KAAK,OAAS,CAAC,KAAK,YAAa,OACrD,IAAMwB,EAAM,KAAK,YAAY,eAAe,EAAE,CAAC,EAC/C,GAAI,CAACA,EAAK,OAEV,KAAK,MAAQ,GACb,IAAMC,EAAW,KAAK,WACtB,KAAK,WAAa,KAAK,aAAe,OAAS,cAAgB,OAC/D,GAAI,CAEA,IAAMlB,GADS,MAAM,KAAK,cAAc,CAAE,MAAO,CAAE,WAAY,KAAK,UAAW,CAAE,CAAC,GAC7D,eAAe,EAAE,CAAC,EACvC,GAAI,CAACA,EAAO,CAAE,KAAK,WAAakB,EAAU,MAAQ,CAClDlB,EAAM,QAAU,KAAK,cACrB,KAAK,YAAY,YAAYiB,CAAG,EAChC,GAAI,CAAEA,EAAI,KAAK,CAAG,MAAY,CAAC,CAC/B,KAAK,YAAY,SAASjB,CAAK,EAC/B,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,MAAM,OAAO,CAAC,EAAE,IAC7CF,GAAQ,QAAQ,QAAQ,EAAE,KAAK,IAAMA,EAAI,QAAQ,oBAAoBE,CAAK,CAAC,CAChF,CAAC,CACL,OAASP,EAAO,CACZ,KAAK,WAAayB,EAClB,KAAK,KAAK,OAAQ,gCAAiC,CAAE,UAAWzB,GAAO,aAAa,IAAK,CAAC,CAC9F,QAAE,CACE,KAAK,MAAQ,GACb,KAAK,SAAS,CAClB,CACJ,CAMA,gBAAiB,CACb,OAAO,KAAK,WAChB,CAGA,gBAAgBI,EAAI,CAChB,IAAMC,EAAM,KAAK,MAAM,IAAID,CAAE,EAC7B,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CAAE,OAAOA,EAAI,QAAQ,uBAAuB,GAAK,IAAM,MAAY,CAAE,OAAO,IAAM,CAC1F,CAUA,UAAW,CACP,IAAMN,EAAQ,KAAK,OACd,OAAQI,GAASA,GAAQA,EAAK,KAAO,KAAK,MAAM,EAChD,IAAKA,GAAS,CACX,IAAME,EAAM,KAAK,MAAM,IAAIF,EAAK,EAAE,EAClC,MAAO,CACH,GAAIA,EAAK,GACT,KAAMA,EAAK,MAAQ,SACnB,MAAOE,EAAMA,EAAI,MAAQ/B,GAAU,YACnC,QAAS+B,EAAMA,EAAI,QAAU,KAC7B,SAAUA,EAAMA,EAAI,SAAW,GAC/B,SAAUA,EAAMA,EAAI,WAAa,GAAO,EAC5C,CACJ,CAAC,EACA,KAAK,CAACqB,EAAGC,IAAOD,EAAE,GAAKC,EAAE,GAAK,GAAKD,EAAE,GAAKC,EAAE,GAAK,EAAI,CAAE,EAE5D,MAAO,CACH,OAAQ,KAAK,OACb,OAAQ,KAAK,OACb,UAAW,KAAK,UAChB,WAAY,KAAK,WACjB,cAAe,KAAK,cACpB,WAAY,KAAK,WACjB,MAAO,KAAK,MACZ,aAAc,KAAK,aACnB,MAAA5B,EACA,UAAWA,EAAM,OAAQ6B,GAAMA,EAAE,QAAUtD,GAAU,MAAM,EAAE,MACjE,CACJ,CAEA,UAAW,CACP,GAAI,CAAE,KAAK,UAAU,KAAK,SAAS,CAAC,CAAG,MAAY,CAAC,CACxD,CACJ,EAUA,SAASgD,GAASO,EAAO,CACrB,GAAI,CAAE,OAAOA,EAAM,KAAK,CAAG,MAAY,CAAE,MAAO,EAAG,CACvD,CAEO,SAAS5B,GAAeD,EAAO,CAClC,IAAM8B,EAAO9B,GAAO,MAAQ,GAC5B,OAAI8B,IAAS,mBAAqBA,IAAS,gBAAwB,oBAC/DA,IAAS,iBAAmBA,IAAS,uBAA+B,mBACpEA,IAAS,oBAAsBA,IAAS,aAAqB,cAC1D,cACX,CCztBO,IAAMC,GAAc,mBAEdC,GAAa,IAuBnB,SAASC,GAAWC,EAAOC,EAAOC,EAAQ,CAC7C,IAAAC,EAAM,GAAU,OAAAC,EAASP,GAAa,SAAAQ,EAAWP,EACrD,EAAI,CAAC,EAAG,CACJ,GAAIE,GAAS,EAAG,MAAO,CAAE,KAAM,EAAG,KAAM,EAAG,MAAO,EAAG,MAAO,CAAE,EAC9D,GAAI,EAAEC,EAAQ,IAAM,EAAEC,EAAS,GAAI,CAG/B,IAAMI,EAAO,KAAK,IAAIN,EAAOA,GAAS,EAAIA,EAAQ,KAAK,KAAK,KAAK,KAAKA,CAAK,CAAC,CAAC,EAC7E,MAAO,CAAE,KAAAM,EAAM,KAAM,KAAK,KAAKN,EAAQM,CAAI,EAAG,MAAO,EAAG,MAAO,CAAE,CACrE,CAEA,IAAIC,EAAO,CAAE,KAAM,EAAG,KAAMP,EAAO,MAAO,EAAG,MAAO,CAAE,EACtD,QAASM,EAAO,EAAGA,GAAQN,EAAOM,IAAQ,CACtC,IAAME,EAAO,KAAK,KAAKR,EAAQM,CAAI,EAC7BG,GAAaR,EAAQE,GAAOG,EAAO,IAAMA,EACzCI,GAAUR,EAASC,GAAOK,EAAO,IAAMA,EAC7C,GAAIC,GAAa,GAAKC,GAAU,EAAG,SAGnC,IAAMC,EAAQ,KAAK,IAAIF,EAAWC,EAASN,CAAM,EAC7CO,EAAQJ,EAAK,QAAOA,EAAO,CAAE,KAAAD,EAAM,KAAAE,EAAM,MAAAG,EAAO,MAAOA,EAAQP,CAAO,EAC9E,CAEA,OAAIG,EAAK,MAAQF,IAGbE,EAAK,MAAQF,EACbE,EAAK,MAAQF,EAAWD,GAErBG,CACX,CAkBO,SAASK,GAAgBC,EAAaZ,EAAOC,EAAQ,CACxD,IAAAC,EAAM,GAAU,OAAAC,EAASP,GAAa,SAAAiB,EAAW,GAAI,SAAAC,EAAW,GACpE,EAAI,CAAC,EAAG,CACJ,GAAI,EAAEd,EAAQ,IAAM,EAAEC,EAAS,GAC3B,MAAO,CAAE,KAAM,CAAE,EAAG,EAAG,EAAG,CAAE,EAAG,OAAQ,EAAG,OAAQ,CAAE,EAExD,GAAIW,GAAe,EAAG,CAClB,IAAMG,EAAI,KAAK,IAAIf,EAAOC,EAASE,CAAM,EACzC,MAAO,CAAE,KAAM,CAAE,EAAAY,EAAG,EAAGA,EAAIZ,CAAO,EAAG,OAAQ,EAAG,OAAQ,CAAE,CAC9D,CAEA,IAAMa,EAAS,KAAK,IAAIH,EAAU,KAAK,IAAIC,EAAU,KAAK,MAAMb,EAAS,GAAME,CAAM,CAAC,CAAC,EACjFc,EAASD,EAASb,EAClBe,EAAQjB,EAASgB,EAASf,EAC1BiB,EAAQ,KAAK,IAAInB,EAAOkB,EAAQf,CAAM,EAM5C,OAAIe,GAAS,GAAKC,EAAQH,EAAS,EACxB,CAAE,KAAM,CAAE,EAAG,EAAG,EAAG,CAAE,EAAG,OAAQ,EAAG,OAAQ,CAAE,EAEjD,CAAE,KAAM,CAAE,EAAGG,EAAO,EAAGA,EAAQhB,CAAO,EAAG,OAAAc,EAAQ,OAAAD,CAAO,CACnE,CCzFA,IAAMI,EAAI,IAAIC,IAAS,MAAM,cAAc,GAAGA,CAAI,EAC5CC,GAAO,mEAEPC,GAAO,CACT,KAAM,4FACN,SAAU,6GACV,OAAQ,qDACR,MAAO,iMACP,MAAO,uGACP,OAAQ,uKACR,MAAO,mFACP,OAAQ,mFACR,KAAM,mOACN,KAAM,6GACN,MAAO,gSACP,YAAa,6TACjB,EAEMC,GAAM,CAACC,EAAOC,EAAMC,IAAOP,EAAE,OAAQ,CACvC,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,MAAOM,EAAO,KAAM,OAAQA,EAAO,IAAK,EACxF,wBAAyB,CAAE,OAAQ,eAAeA,CAAI,aAAaA,CAAI,yEAAyEC,CAAE,oDAAoDF,CAAK,QAAS,CACxN,CAAC,EAEKG,GAAW,CACb,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,qCAAsC,WAAY,4BAC1D,MAAO,mBAAoB,OAAQ,UAAW,WAAY,UAC9D,EACMC,GAAa,CAAE,GAAGD,GAAU,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,uBAAwB,EACrHE,GAAS,CACX,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,OAAQ,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,UACjF,UAAW,kDAAmD,WAAY,gBAC9E,EACMC,GAAc,CAChB,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,sCAAuC,WAAY,mBAC3D,MAAO,OAAQ,OAAQ,UAAW,WAAY,UAClD,EAIMC,GAAU,CACZ,UAAW,CAAE,KAAM,EAAG,MAAO,kBAAmB,MAAO,uBAAwB,EAC/E,KAAM,CAAE,KAAM,EAAG,MAAO,kBAAmB,MAAO,uBAAwB,EAC1E,KAAM,CAAE,KAAM,EAAG,MAAO,mBAAoB,MAAO,wBAAyB,EAC5E,KAAM,CAAE,KAAM,EAAG,MAAO,gBAAiB,MAAO,qBAAsB,CAC1E,EAEA,SAASC,GAAYC,EAAS,CAC1B,IAAMC,EAAIH,GAAQE,CAAO,EACzB,OAAKC,EACEf,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,WAAY,WAAY,IAAK,MAAO,OAAQ,MAAO,CAAE,EAC/G,CAAC,EAAG,EAAG,EAAG,CAAC,EAAE,IAAKgB,GAAMhB,EAAE,OAAQ,CAC9B,IAAKgB,EACL,MAAO,CACH,MAAO,QAAS,OAAS,EAAIA,EAAI,IAAO,KAAM,aAAc,MAC5D,WAAYA,EAAID,EAAE,KAAOA,EAAE,MAAQ,2BACvC,CACJ,CAAC,CAAC,CAAC,EARQ,IASnB,CAEA,SAASE,GAASC,EAAM,CACpB,IAAMC,EAAQ,OAAOD,GAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,EACnE,QAASC,EAAM,CAAC,IAAI,CAAC,GAAK,KAAOA,EAAM,CAAC,IAAI,CAAC,GAAKA,EAAM,CAAC,IAAI,CAAC,GAAK,KAAK,YAAY,GAAK,GAC7F,CAEA,IAAMC,GAAOC,GAAM,GAAG,OAAO,KAAK,MAAMA,EAAI,EAAE,CAAC,EAAE,SAAS,EAAG,GAAG,CAAC,IAAI,OAAOA,EAAI,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,GAUpG,SAASC,IAAkB,CACvB,GAAM,CAAChB,EAAMiB,CAAO,EAAI,MAAM,SAAS,CAAE,EAAG,EAAG,EAAG,CAAE,CAAC,EAiB/C,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,IAAI,EAC3C,aAAM,gBAAgB,IAAM,CACxB,GAAI,CAACD,EAAM,OACX,IAAME,EAAQ,IAAMH,EAASI,GACzBA,EAAK,IAAMH,EAAK,aAAeG,EAAK,IAAMH,EAAK,aACzCG,EACA,CAAE,EAAGH,EAAK,YAAa,EAAGA,EAAK,YAAa,CACrD,EAED,GADAE,EAAM,EACF,OAAO,eAAmB,IAC1B,cAAO,iBAAiB,SAAUA,CAAK,EAChC,IAAM,OAAO,oBAAoB,SAAUA,CAAK,EAE3D,IAAME,EAAW,IAAI,eAAeF,CAAK,EACzC,OAAAE,EAAS,QAAQJ,CAAI,EACd,IAAMI,EAAS,WAAW,CACrC,EAAG,CAACJ,CAAI,CAAC,EACF,CAACC,EAASnB,CAAI,CACzB,CASA,SAASuB,GAAK,CAAE,KAAAC,EAAM,OAAAC,EAAQ,KAAAC,EAAM,YAAAC,EAAa,cAAAC,EAAe,SAAAC,EAAU,MAAAC,EAAO,MAAAC,EAAO,SAAAC,EAAU,OAAAC,EAAQ,QAAAC,CAAQ,EAAG,CACjH,IAAMC,EAAW,MAAM,OAAO,IAAI,EAC5BC,EAASV,EAAOC,EAAcF,EAC9BY,EAAYX,EAAOE,EAAgBJ,EAAK,SAM9C,MAAM,UAAU,IAAM,CAClB,IAAMc,EAAKH,EAAS,QACpB,GAAI,CAACG,GAAM,CAACF,EAAQ,OAChBE,EAAG,YAAcF,IAAUE,EAAG,MAAQ,GAAMA,EAAG,UAAYF,GAC/D,IAAMG,GAASD,EAAG,MAAQA,EAAG,KAAK,EAC9BC,IAAUA,GAAO,OAAOA,GAAO,MAAM,IAAM,CAAC,CAAC,CACrD,CAAC,EAID,IAAMC,EAAad,GAEbF,EAAK,QAAUiB,GAAU,OADzB,KAEIjB,EAAK,QAAUiB,GAAU,YAAcC,EAAE,uBAAuB,EAC5DlB,EAAK,QAAUiB,GAAU,OAASC,EAAE,qBAAqB,EACrDA,EAAE,sBAAsB,EAEpCC,EAAW,KAAK,IAAI,GAAI,KAAK,IAAI,IAAK,KAAK,OAAOZ,GAAS,KAAO,GAAI,CAAC,CAAC,EAM9E,OAAOrC,EAAE,MAAO,CAIZ,KAAMsC,EAAW,SAAW,OAC5B,SAAUA,EAAW,EAAI,OACzB,QAASA,EACT,UAAWA,EAAYY,GAAM,EAAMA,EAAE,MAAQ,SAAWA,EAAE,MAAQ,OAAOA,EAAE,eAAe,EAAGZ,EAAS,EAAK,EAAI,OAC/G,MAAOC,EAASS,EAAE,kBAAmB,CAAE,KAAMlB,EAAK,IAAK,CAAC,EAClDQ,EAAWU,EAAE,gBAAiB,CAAE,KAAMlB,EAAK,IAAK,CAAC,EAC5CK,EAAWa,EAAE,qBAAsB,CAAE,KAAMlB,EAAK,IAAK,CAAC,EAAIA,EAAK,KAC1E,MAAO,CACH,OAAQQ,EAAW,UAAY,UAC/B,SAAU,WAAY,aAAc,OAAQ,SAAU,SAAU,WAAY,oBAC5E,OAAQH,EAAW,kCAAoC,sCACvD,UAAWA,EAAW,4CAA8C,OACpE,WAAY,+CASZ,KAAMC,EAAQ,WAAa,YAC3B,SAAUA,EAAQ,OAAY,QAC9B,MAAOA,EAAQA,EAAQ,KAAO,OAC9B,OAAQC,EAAQA,EAAQ,KAAO,OAC/B,YAAaA,EAAQ,OAAY,SACjC,QAAS,OAAQ,WAAY,QACjC,CACJ,EAAG,CACCM,EACM3C,EAAE,QAAS,CACT,IAAK,IAAK,IAAKyC,EAAU,SAAU,GAAM,MAAO,GAAM,YAAa,GACnE,MAAO,CACH,SAAU,WAAY,MAAO,EAAG,MAAO,OAAQ,OAAQ,OAAQ,UAAW,QAC1E,UAAWT,EAAO,aAAe,OAAQ,WAAY,cACzD,CACJ,CAAC,EACChC,EAAE,MAAO,CACP,IAAK,KACL,MAAO,CAGH,MAAOiD,EAAW,KAAM,OAAQA,EAAW,KAC3C,aAAc,MAAO,QAAS,OAAQ,WAAY,SAClD,WAAY,6EACZ,OAAQd,EAAW,8CAAgD,qCACnE,MAAOA,EAAW,kBAAoB,mBACtC,WAAYjC,GAAM,SAAU,KAAK,MAAM+C,EAAW,EAAG,EAAI,KAAM,WAAY,IAC3E,WAAY,yCAChB,CACJ,EAAGhC,GAASa,EAAK,IAAI,CAAC,EAC1B9B,EAAE,MAAO,CACL,IAAK,QACL,MAAO,CACH,SAAU,WAAY,YAAa,EAAG,OAAQ,EAAG,QAAS,OAAQ,WAAY,SAC9E,IAAKwC,EAAU,MAAQ,MAAO,QAASA,EAAU,UAAY,WAC7D,WAAY,qDAChB,CACJ,EAAG,CACCxC,EAAE,OAAQ,CACN,IAAK,IACL,MAAO,CACH,KAAM,EAAG,SAAU,EAAG,SAAUwC,EAAU,SAAW,SAAU,WAAY,IAAK,MAAO,mBACvF,WAAY,SAAU,SAAU,SAAU,aAAc,UAC5D,CACJ,EAAGV,EAAK,IAAI,EACZK,GAAYnC,EAAE,OAAQ,CAClB,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,kBAAmB,QAAS,OAAQ,WAAY,QAAS,CACtG,EAAGI,GAAID,GAAK,MAAOqC,EAAU,GAAK,GAAI,CAAC,CAAC,EACvCM,GAAc,CAACN,GAAYxC,EAAE,OAAQ,CAClC,IAAK,IACL,MAAO,CACH,KAAM,OAAQ,WAAYE,GAAM,SAAU,SAC1C,MAAO4B,EAAK,QAAUiB,GAAU,OAAS,gBAAkB,kBAC/D,CACJ,EAAGD,CAAU,EACZ,CAACd,GAAQ,CAACQ,GAAY3B,GAAYiB,EAAK,OAAO,CACnD,CAAC,CACL,CAAC,CACL,CASO,SAASqB,GAAY,CACxB,KAAAC,EAAM,MAAAC,EAAO,UAAAC,EAAW,YAAArB,EAAa,gBAAAsB,EACrC,OAAAC,EAAQ,UAAAC,EAAW,QAAAC,EAAS,YAAAC,EAAa,eAAAC,EAAgB,aAAAC,CAC7D,EAAG,CAQC,GAAM,CAACC,EAAWC,CAAY,EAAI,MAAM,SAAS,EAAK,EAChD,CAACC,EAASC,CAAU,EAAI,MAAM,SAAS,CAAC,EACxC,CAAC1B,EAAQ2B,CAAS,EAAI,MAAM,SAAS,IAAI,EACzC,CAACC,GAAUC,EAAK,EAAI9C,GAAgB,EACpC+C,GAAS,CAAC,CAACjB,GAAM,OAEvB,MAAM,UAAU,IAAM,CAClB,GAAI,CAACiB,GAAQ,CAAEJ,EAAW,CAAC,EAAG,MAAkB,CAChD,IAAMK,EAAU,KAAK,IAAI,EACnBC,EAAK,YAAY,IAAMN,EAAW,KAAK,OAAO,KAAK,IAAI,EAAIK,GAAW,GAAI,CAAC,EAAG,GAAI,EACxF,MAAO,IAAM,cAAcC,CAAE,CACjC,EAAG,CAACF,GAAQjB,GAAM,MAAM,CAAC,EAEzB,MAAM,UAAU,IAAM,CAAOA,GAAMW,EAAa,EAAK,CAAG,EAAG,CAAC,CAACX,CAAI,CAAC,EAKlE,IAAMoB,GAAU,MAAM,QAClB,IAAM,IAAI,IAAI,CAAC,OAAQ,IAAInB,GAAO,OAAS,CAAC,GAAG,IAAKoB,GAAMA,EAAE,EAAE,CAAC,CAAC,EAChE,CAACpB,CAAK,CACV,EAKA,GAJA,MAAM,UAAU,IAAM,CACdd,GAAU,CAACiC,GAAQ,IAAIjC,CAAM,GAAG2B,EAAU,IAAI,CACtD,EAAG,CAAC3B,EAAQiC,EAAO,CAAC,EAEhB,CAACpB,EAAM,OAAO,KAElB,IAAMsB,EAAW1E,EAAE,OAAQ,CACvB,IAAK,MACL,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAO,iBAAkB,CACrI,EAAG,CAACI,GAAID,GAAK,KAAM,GAAI,CAAC,EAAG6C,EAAE,qBAAqB,CAAC,CAAC,EAGpD,GAAI,CAACqB,GACD,OAAOrE,EAAE,MAAO,CACZ,MAAO,CACH,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAC5E,WAAY,gHACZ,UAAW,mBACf,CACJ,EAAG,CACCA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,WAAY,CAAE,EACjEA,EAAE,OAAQ,CAAE,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,iBAAkB,CAAE,EACzI,CAACI,GAAID,GAAK,KAAM,GAAI,CAAC,EAAG6C,EAAE,gBAAgB,CAAC,CAAC,CAAC,EACrDhD,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,SAAU,QAAS,SAAU,UAAW,QAAS,CAAE,EAAG,CAC3KA,EAAE,MAAO,CACL,IAAK,KACL,MAAO,CACH,SAAU,WAAY,MAAO,QAAS,OAAQ,QAAS,aAAc,OACrE,QAAS,OAAQ,WAAY,QACjC,CACJ,EAAG,CACCA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,OAAQ,8CAA+C,UAAW,kCAAmC,CAAE,CAAC,EAC7LA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,OAAQ,8CAA+C,UAAW,mCAAoC,eAAgB,IAAK,CAAE,CAAC,EACnNA,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CACH,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,WAAY,6EACZ,OAAQ,qCAAsC,MAAO,kBACzD,CACJ,EAAGI,GAAID,GAAK,MAAO,GAAI,GAAG,CAAC,CAC/B,CAAC,EACDH,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGsD,CAAS,EAClItD,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYE,GAAM,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAC9GkD,EAAK,UACCJ,EAAE,yBAA0B,CAAE,KAAMI,EAAK,aAAc,CAAC,EACxDJ,EAAE,yBAA0B,CAAE,KAAMI,EAAK,aAAc,CAAC,CAAC,EACnEpD,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAC5FgD,EAAE,mBAAoB,CAAE,MAAOI,EAAK,aAAa,MAAO,CAAC,CAAC,CAClE,CAAC,EACDpD,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,eAAgB,SAAU,IAAK,OAAQ,QAAS,gBAAiB,CAAE,EAAG,CACnIA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAC5GA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASyD,EAAW,MAAOT,EAAE,mBAAmB,EAAG,MAAO,CAAE,GAAGtC,GAAQ,MAAO,OAAQ,OAAQ,MAAO,CAAE,EAAGN,GAAID,GAAK,YAAa,GAAI,GAAG,CAAC,EAChKH,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYE,GAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG8C,EAAE,mBAAmB,CAAC,CAC9H,CAAC,EACDhD,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAC5GA,EAAE,SAAU,CACR,IAAK,IAAK,QAASwD,EAAQ,MAAOR,EAAE,gBAAgB,EACpD,MAAO,CACH,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,OAAQ,WAAY,wBAAyB,MAAO,qBAAsB,OAAQ,UAC1F,UAAW,4CACf,CACJ,EAAG5C,GAAID,GAAK,MAAO,GAAI,GAAG,CAAC,EAC3BH,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYE,GAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG8C,EAAE,gBAAgB,CAAC,CAC3H,CAAC,CACL,CAAC,CACL,CAAC,EAGL,IAAM2B,EAAQtB,GAAO,OAAS,CAAC,EACzBuB,EAAW,CACb,GAAI,OAAQ,KAAM5B,EAAE,eAAe,EAAG,MAAOD,GAAU,OACvD,SAAUM,GAAO,cAAe,QAAS,KAAM,SAAUA,GAAO,eAAiB,EACrF,EAGA,GAAIS,EAAW,CAGX,IAAMe,EAAWF,EAAM,OAAQF,IAAMA,GAAE,QAAQ,EAAE,IAAKA,IAAMA,GAAE,IAAI,EAC5DK,EAAUD,EAAS,SAAW,EAAIA,EAAS,CAAC,EAC5CA,EAAS,OAAS,EAAIA,EAAS,MAAM,EAAG,CAAC,EAAE,KAAK,IAAI,EAC/CxB,GAAO,aAAeL,EAAE,eAAe,EAAI,KACtD,OAAOhD,EAAE,MAAO,CACZ,MAAO,CACH,SAAU,WAAY,OAAQ,OAAQ,eAAgB,OAAQ,OAAQ,GAAI,MAAO,QACjF,aAAc,OAAQ,SAAU,SAAU,WAAY,oBACtD,OAAQ,qCAAsC,UAAW,0EACzD,UAAW,oBACf,CACJ,EAAG,CACCA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,WAAY,CAAE,EAAG,CAC1GA,EAAE,OAAQ,CACN,IAAK,KACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAC3E,WAAY,SAAU,WAAY,iCAClC,OAAQ,4CAA6C,MAAO,iBAChE,CACJ,EAAGI,GAAID,GAAK,MAAO,GAAI,GAAG,CAAC,EAC3BH,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACrDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGsD,CAAS,EAC7KtD,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CACH,WAAYE,GAAM,SAAU,OAAQ,MAAO4E,EAAU,kBAAoB,mBACzE,WAAY,SAAU,SAAU,SAAU,aAAc,UAC5D,CACJ,EAAGA,EACG9B,EAAE,qBAAsB,CAAE,KAAM8B,CAAQ,CAAC,EACzC,GAAG9B,EAAE,mBAAoB,CAAE,MAAOI,EAAK,aAAa,MAAO,CAAC,CAAC,SAAMhC,GAAI4C,CAAO,CAAC,EAAE,CAC3F,CAAC,EACDhE,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAM+D,EAAa,EAAK,EAAG,MAAOf,EAAE,aAAa,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAG5C,GAAID,GAAK,OAAQ,GAAI,CAAC,CAAC,EAC3UH,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS0D,EAAS,MAAOV,EAAE,iBAAiB,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,SAAU,CAAE,EAAG5C,GAAID,GAAK,YAAa,GAAI,CAAC,CAAC,CAC3T,CAAC,CACL,CAAC,CACL,CAGA,IAAM4E,EAAQ,CAACH,EAAU,GAAGD,CAAK,EAE3BK,EAAYzC,GADD0C,GAAOF,EAAM,KAAMG,GAASA,EAAK,KAAOD,CAAE,GAAK,MAC7B1C,CAAM,EAAI,KACvC4C,EAASH,EAAYD,EAAM,OAAQG,GAASA,EAAK,KAAOF,EAAU,EAAE,EAAI,CAAC,EACzEI,EAAOJ,EAAYK,GAAgBF,EAAO,OAAQf,GAAM,EAAGA,GAAM,CAAC,EAAI,KAGtEkB,GAAUN,GAAaI,GAAQA,EAAK,KAAK,EAAI,EAC7CG,GAASC,GAAWT,EAAM,OAAQX,GAAM,EAAGA,GAAM,CAAC,EAElDqB,GAAa,CAACP,EAAMQ,EAAQ,CAAC,IAAM1F,EAAE6B,GAAM,CAC7C,IAAKqD,EAAK,GACV,KAAMA,EACN,KAAMA,EAAK,KAAO,OAClB,SAAUA,EAAK,WAAa,GAC5B,YAAAjD,EACA,cAAeoB,GAAO,cACtB,OAAQ6B,EAAK,KAAO,OAAS,KAAO3B,EAAgB2B,EAAK,EAAE,EAC3D,GAAGQ,CACP,CAAC,EAED,OAAO1F,EAAE,MAAO,CACZ,MAAO,CACH,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAC5E,WAAY,uBAAwB,UAAW,mBACnD,CACJ,EAAG,CACCA,EAAE,MAAO,CACL,IAAK,MACL,MAAO,CACH,KAAM,OAAQ,QAAS,OAAQ,WAAY,aAAc,eAAgB,gBACzE,IAAK,OAAQ,QAAS,gBAC1B,CACJ,EAAG,CACCA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,CAAE,CAAE,EAAG,CAC3CA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,OAAQ,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CAAE,EAAGsD,CAAS,EAC1LtD,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,UAAW,KAAM,CAAE,EAAG,CAC1GA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYE,GAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGkB,GAAI4C,CAAO,CAAC,EAChHU,EACA1E,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAC3EgD,EAAE,mBAAoB,CAAE,MAAOI,EAAK,aAAa,MAAO,CAAC,CAAC,CAClE,CAAC,CACL,CAAC,EACDpD,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAC/FsF,IAAWtF,EAAE,SAAU,CACnB,IAAK,OAAQ,QAAS,IAAMkE,EAAU,IAAI,EAAG,MAAOlB,EAAE,wBAAwB,EAC9E,MAAO,CACH,OAAQ,OAAQ,QAAS,SAAU,aAAc,MAAO,QAAS,cACjE,WAAY,SAAU,IAAK,MAAO,OAAQ,sCAC1C,WAAY,mBAAoB,MAAO,OAAQ,OAAQ,UACvD,WAAY,UAAW,SAAU,SAAU,WAAY,GAC3D,CACJ,EAAG,CAAC5C,GAAID,GAAK,KAAM,GAAI,CAAC,EAAG6C,EAAE,wBAAwB,CAAC,CAAC,EACvDhD,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAM+D,EAAa,EAAI,EAAG,MAAOf,EAAE,eAAe,EAAG,MAAOrC,EAAY,EAAGP,GAAID,GAAK,SAAU,GAAI,CAAC,CAAC,CAC3I,CAAC,CACL,CAAC,EAEDkD,GAAO,OAASrD,EAAE,MAAO,CACrB,IAAK,MACL,MAAO,CACH,KAAM,OAAQ,OAAQ,cAAe,QAAS,WAAY,aAAc,OACxE,WAAY,+BAAgC,OAAQ,0CACpD,MAAO,gBAAiB,SAAU,SAAU,WAAY,GAC5D,CACJ,EAAGgD,EAAE,iBAAiBK,EAAM,KAAK,EAAE,CAAC,EAKpCrD,EAAE,MAAO,CACL,IAAK,QACL,IAAKmE,GACL,UAAW,aACX,MAAO,CACH,KAAM,EAAG,UAAW,EAAG,SAAU,EAAG,SAAU,OAI9C,OAAQ,aAUR,QAAS,OAAQ,WAAY,cAAe,eAAgB,aAChE,CACJ,EAAGmB,GAEGtF,EAAE,MAAO,CACP,MAAO,CACH,QAAS,OAAQ,cAAe,SAAU,IAAK,GAAW,KAC1D,MAAO,OAAQ,OAAQoE,GAAM,EAAI,KAAM,UAAW,CACtD,CACJ,EAAG,CACCpE,EAAE,MAAO,CACL,IAAK,OACL,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,eAAgB,SAAU,UAAW,CAAE,CACnF,EAAGyF,GAAWT,EAAW,CACrB,MAAOI,EAAK,KAAK,EAAG,MAAOA,EAAK,KAAK,EACrC,OAAQ,GAAM,SAAU,IAAMlB,EAAU,IAAI,CAChD,CAAC,CAAC,EACFiB,EAAO,OAAS,GAAKnF,EAAE,MAAO,CAC1B,IAAK,QACL,UAAW,aACX,MAAO,CACH,KAAM,OAAQ,OAAQoF,EAAK,OAAS,KAAM,QAAS,OACnD,IAAK,GAAW,KAAM,eAAgBD,EAAO,OAAS,EAAI,aAAe,SAIzE,UAAW,OAAQ,UAAW,QAClC,CACJ,EAAGA,EAAO,IAAKD,GAASO,GAAWP,EAAM,CACrC,MAAOE,EAAK,OAAQ,MAAOA,EAAK,OAAQ,QAAS,GACjD,SAAU,IAAMlB,EAAUgB,EAAK,EAAE,CACrC,CAAC,CAAC,CAAC,CACP,CAAC,EAEClF,EAAE,MAAO,CAMP,MAAO,CACH,QAAS,OAAQ,SAAU,OAAQ,IAAK,GAAW,KACnD,eAAgB,SAAU,aAAc,SACxC,MAAOuF,GAAO,MACPA,GAAO,KAAOA,GAAO,OAASA,GAAO,KAAO,GAAK,GAAY,KAC9D,MACV,CACJ,EAAGR,EAAM,IAAKG,GAASO,GAAWP,EAAM,CACpC,MAAOK,GAAO,MAAO,MAAOA,GAAO,MACnC,SAAU,IAAMrB,EAAUgB,EAAK,EAAE,CACrC,CAAC,CAAC,CAAC,CAAC,EAERlF,EAAE,MAAO,CACL,IAAK,QACL,MAAO,CACH,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,OACpF,QAAS,iFACT,WAAY,qDAChB,CACJ,EAAG,CACCA,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS2D,EAAa,MAAOX,EAAE,WAAW,EAAG,MAAOK,GAAO,WAAa7C,GAAWC,EAAW,EACpHL,GAAIiD,GAAO,WAAalD,GAAK,MAAQA,GAAK,OAAQ,GAAI,GAAG,CAAC,EAC9DH,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS4D,EAAgB,MAAOZ,EAAE,aAAa,EAAG,MAAOK,GAAO,cAAgB7C,GAAWC,EAAW,EAC5HL,GAAIiD,GAAO,cAAgBlD,GAAK,MAAQA,GAAK,OAAQ,GAAI,GAAG,CAAC,EACjEkD,GAAO,eAAiBrD,EAAE,SAAU,CAAE,IAAK,OAAQ,QAAS6D,EAAc,MAAOb,EAAE,iBAAiB,EAAG,MAAOxC,EAAS,EAAGJ,GAAID,GAAK,KAAM,GAAI,GAAG,CAAC,EACjJH,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS0D,EAAS,MAAOV,EAAE,iBAAiB,EAAG,MAAOtC,EAAO,EAAGN,GAAID,GAAK,YAAa,GAAI,GAAG,CAAC,CAC5H,CAAC,CACL,CAAC,CACL,CAEI,OAAO,OAAW,MAClB,OAAO,YAAcgD,IC7hBzB,IAAMwC,GAAMC,GAAU,EAKhBC,GAAiB,IAAOC,GAAqB,EAAI,OAAS,SAK1DC,GAAsB,IAAM,CAC9B,OAAO,mBAAqB,KAAK,IAAI,EACrC,SAAS,cAAc,IAAI,YAAY,4BAA4B,CAAC,CACxE,EAWsBC,GAAwB,MAAOC,EAAMC,EAAc,IAAM,CAC3D,IAAIC,EAAK,GACT,GAAI,CACA,MAAM,UAAU,UAAU,UAAUF,CAAI,EACxCE,EAAK,EACT,MAAY,CACR,GAAI,CACA,IAAMC,EAAK,SAAS,cAAc,UAAU,EAC5CA,EAAG,MAAQH,EACXG,EAAG,MAAM,SAAW,QACpBA,EAAG,MAAM,QAAU,IACnB,SAAS,KAAK,YAAYA,CAAE,EAC5BA,EAAG,OAAO,EACVD,EAAK,SAAS,YAAY,MAAM,EAChC,SAAS,KAAK,YAAYC,CAAE,CAChC,MAAY,CAAED,EAAK,EAAO,CAC9B,CACA,OAAIA,GAAMD,EAAc,GAAK,UAAU,WAAa,UAAU,UAAU,WACpE,WAAW,SAAY,CACnB,IAAIG,EAAU,KACVC,EAAW,GACf,GAAI,CAAED,EAAU,MAAM,UAAU,UAAU,SAAS,CAAG,MAC5C,CAAEC,EAAW,EAAO,CAC9B,GAAI,CAACA,GAAYD,IAAYJ,EACzB,GAAI,CAAE,MAAM,UAAU,UAAU,UAAU,EAAE,CAAG,MAAY,CAAC,CAEpE,EAAGC,CAAW,EAEXC,CACX,EAIMI,GAAwBN,GAAS,CACnC,GAAI,OAAOA,GAAS,UAAYA,EAAK,QAAQ,KAAK,IAAM,GAAI,OAAO,KACnE,IAAMO,EAAW,CAAC,EACZC,EAAK,0CACPC,EAAO,EACPC,EACJ,MAAQA,EAAIF,EAAG,KAAKR,CAAI,KAAO,MACvBU,EAAE,MAAQD,GAAMF,EAAS,KAAK,CAAE,KAAM,OAAQ,QAASP,EAAK,MAAMS,EAAMC,EAAE,KAAK,CAAE,CAAC,EACtFH,EAAS,KAAK,CAAE,KAAM,OAAQ,MAAOG,EAAE,CAAC,GAAK,IAAI,YAAY,EAAG,QAASA,EAAE,CAAC,EAAE,QAAQ,MAAO,EAAE,CAAE,CAAC,EAClGD,EAAOD,EAAG,UAEd,OAAIC,EAAOT,EAAK,QAAQO,EAAS,KAAK,CAAE,KAAM,OAAQ,QAASP,EAAK,MAAMS,CAAI,CAAE,CAAC,EAC1EF,EAAS,KAAKI,GAAKA,EAAE,OAAS,MAAM,EAAIJ,EAAW,IAC9D,EAOMK,GAAc,IAAI,IAAI,CACxB,QAAQ,MAAM,MAAM,WAAW,SAAS,KAAK,OAAO,MAAM,QAAQ,KAAK,SACvE,OAAO,QAAQ,WAAW,QAAQ,UAAU,MAAM,OAAO,QAAQ,SAAS,SAC1E,OAAO,KAAK,UAAU,QAAQ,QAAQ,MAAM,QAAQ,UAAU,QAAQ,SACtE,aAAa,SAAS,QAAQ,KAAK,KAAK,MAAM,OAAO,SAAS,OAAO,OAAO,SAC5E,SAAS,UAAU,YAAY,SAAS,QAAQ,OAAO,MAAM,OAAO,QAAQ,SAC5E,OAAO,OAAO,UAAU,SAAS,SAAS,OAAO,YAAY,UAAU,OAAO,KAC9E,OAAO,QAAQ,SAAS,SAAS,SAAS,SAAS,QAAQ,MAAM,KAAK,MAAM,MAC5E,OAAO,KAAK,OAAO,OAAO,MAAM,MAAM,OAAO,QAAQ,QAAQ,SAAS,SAC1E,CAAC,EACKC,GAAc,IAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,YAAY,OAAO,OAAO,QAAQ,MAAM,MAAM,UAAU,CAAC,EACtGC,GAAiBC,GAAS,CAC5B,IAAMP,EAAK,4LACLQ,EAAQ,CAAC,EACXC,EAAS,GACTR,EAAO,EACPS,EAAM,EACJC,EAAQ,IAAM,CAAMF,IAAUD,EAAM,KAAKC,CAAM,EAAGA,EAAS,GAAM,EACnEP,EACJ,MAAQA,EAAIF,EAAG,KAAKO,CAAI,KAAO,MAAM,CAC7BL,EAAE,MAAQD,IAAMQ,GAAUF,EAAK,MAAMN,EAAMC,EAAE,KAAK,GACtDD,EAAOD,EAAG,UACV,IAAIY,EAAM,KACNV,EAAE,CAAC,EAAGU,EAAM,uBACPV,EAAE,CAAC,EAAGU,EAAM,iBACZV,EAAE,CAAC,EAAGU,EAAM,eACZV,EAAE,CAAC,IACJE,GAAY,IAAIF,EAAE,CAAC,CAAC,EAAGU,EAAM,kBACxBP,GAAY,IAAIH,EAAE,CAAC,CAAC,IAAGU,EAAM,iBAEtCA,GACAD,EAAM,EACNH,EAAM,KAAK,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAIE,GAAK,GAAI,UAAWE,CAAI,EAAGV,EAAE,CAAC,CAAC,CAAC,GAElFO,GAAUP,EAAE,CAAC,CAErB,CACA,OAAID,EAAOM,EAAK,SAAQE,GAAUF,EAAK,MAAMN,CAAI,GACjDU,EAAM,EACCH,CACX,EAGMK,GAAc,CAChB,GAAI,aAAc,IAAK,aAAc,WAAY,aAAc,KAAM,aACrE,GAAI,aAAc,WAAY,aAAc,IAAK,MAAO,IAAK,MAC7D,GAAI,SAAU,OAAQ,SAAU,GAAI,OAAQ,MAAO,OAAQ,IAAK,OAAQ,KAAM,OAC9E,MAAO,MAAO,IAAK,MAAO,GAAI,MAAO,IAAK,MAAO,EAAG,IAAK,EAAG,IAC5D,GAAI,SAAU,OAAQ,SAAU,KAAM,OAAQ,GAAI,KAAM,OAAQ,KAChE,GAAI,OAAQ,KAAM,OAAQ,KAAM,OAAQ,IAAK,OAAQ,KAAM,OAAQ,IAAK,MACxE,GAAI,WAAY,SAAU,WAAY,KAAM,SAAU,IAAK,SAAU,IAAK,SAAU,IAAK,KAC7F,EAQMC,GAAY,CAAC,CAAE,KAAAP,EAAM,KAAAQ,CAAK,IAAM,CAClC,GAAM,CAACC,EAAQC,CAAS,EAAI,MAAM,SAAS,EAAK,EAC1CC,EAAa,SAAY,CAChB,MAAM3B,GAAsBgB,EAAM,GAAK,IAE9CU,EAAU,EAAI,EACd,WAAW,IAAMA,EAAU,EAAK,EAAG,GAAI,EAE/C,EACME,EAAON,IAAaE,GAAQ,IAAI,YAAY,CAAC,IAAMA,GAAQ,IAAI,YAAY,EAC3EK,EAAS,OAAO,OAAW,IAAe,OAAO,MAAQ,KACzDC,EAAWD,GAASA,EAAM,UAAaA,EAAM,UAAUD,CAAI,EAAI,KAC/DG,EAAW,CAAC,EAAEF,GAASC,GAAW,OAAOD,EAAM,WAAc,YAC/DG,EAAkB,KACtB,GAAID,EACA,GAAI,CAAEC,EAAkBH,EAAM,UAAUb,EAAMc,EAASF,CAAI,CAAG,MAAY,CAAEI,EAAkB,IAAM,CAExG,IAAMC,EAAeF,EAAWH,EAAQJ,GAAQ,OAC1CU,EAAUH,GAAYC,GAAmB,KAEzC,MAAM,cAAc,OAAQ,CAAE,UAAW,YAAcJ,EAAM,wBAAyB,CAAE,OAAQI,CAAgB,CAAE,CAAC,EAEnH,MAAM,cAAc,OAAQ,KAAMjB,GAAcC,CAAI,CAAC,EAC3D,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,kCACX,MAAO,CAAE,gBAAiB,qBAAsB,OAAQ,0BAA2B,CACvF,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,MACL,UAAW,gDACX,MAAO,CAAE,gBAAiB,qBAAsB,OAAQ,0BAA2B,CACvF,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,6DACf,EAAGiB,CAAW,EACd,MAAM,cAAc,SAAU,CAC1B,IAAK,OACL,QAASN,EACT,MAAO,2CACP,UAAW,oFACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,KACL,UAAW,GAAGF,EAAS,8BAAgC,aAAa,OACxE,CAAC,EACDA,EAASU,EAAE,eAAe,EAAIA,EAAE,aAAa,CACjD,CAAC,CACL,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,MACL,UAAW,mFACX,MAAO,CAAE,WAAY,MAAO,WAAY,2DAA4D,OAAQ,CAAE,CAClH,EAAGD,CAAM,CACb,CAAC,CACL,EAIME,GAAc,CAAC,CAAE,KAAAnC,CAAK,IAAM,CAC9B,IAAMO,EAAWD,GAAqBN,CAAI,EAC1C,OAAKO,EAME,MAAM,cAAc,MAAO,CAAE,UAAW,SAAU,EACrDA,EAAS,IAAI,CAAC6B,EAAKC,IAAMD,EAAI,OAAS,OAChC,MAAM,cAAcd,GAAW,CAAE,IAAKe,EAAG,KAAMD,EAAI,QAAS,KAAMA,EAAI,IAAK,CAAC,EAC3EA,EAAI,QAAQ,KAAK,EACd,MAAM,cAAc,MAAO,CACzB,IAAKC,EACL,UAAW,cACX,MAAO,CAAE,WAAY,WAAY,UAAW,YAAa,CAC7D,EAAGD,EAAI,OAAO,EACZ,IACV,CACJ,EAhBW,MAAM,cAAc,MAAO,CAC9B,UAAW,sBACX,MAAO,CAAE,WAAY,WAAY,UAAW,YAAa,CAC7D,EAAGpC,CAAI,CAcf,EAiJA,IAAMsC,GAAkB,EA2MxB,IAAMC,GAAY,8TACZC,GAAU,mEAGVC,GAAY,CAACC,EAAMC,IAAM,CAC3B,IAAMC,EAAM,CAAC,EACTC,EAAIH,GAAQ,EAChB,QAAS,EAAI,EAAG,EAAIC,EAAG,IAAK,CACxBE,GAAKA,EAAI,KAAO,OAAS,OACzB,IAAMC,EAAID,EAAI,OACRE,EAAM,IAAO,IAAO,KAAK,IAAK,EAAIJ,EAAK,KAAK,EAAE,EACpDC,EAAI,KAAK,KAAK,IAAI,IAAM,KAAK,IAAI,GAAI,GAAME,EAAI,IAAOC,CAAG,CAAC,CAAC,CAC/D,CACA,OAAOH,CACX,EACMI,GAAcC,GAAQ,CACxBA,EAAM,KAAK,IAAI,EAAG,KAAK,MAAMA,CAAG,CAAC,EACjC,IAAMC,EAAI,KAAK,MAAMD,EAAM,EAAE,EAAGJ,EAAII,EAAM,GAC1C,OAAOC,EAAI,IAAM,OAAOL,CAAC,EAAE,SAAS,EAAG,GAAG,CAC9C,EAMMM,GAAc,CAAC,CAAE,MAAAC,EAAO,KAAAC,CAAK,IAAM,CACrC,IAAMC,EAAI,MAAM,cACV,CAACC,EAASC,CAAU,EAAI,MAAM,SAAS,EAAK,EAC5C,CAACC,EAAUC,CAAW,EAAI,MAAM,SAAS,CAAC,EAC1C,CAACC,EAASC,CAAU,EAAI,MAAM,SAAS,EAAK,EAC5CC,EAAW,MAAM,OAAO,IAAI,EAC5BC,EAAS,MAAM,OAAO,IAAI,EAE1BC,EAAIX,GAAS,CAAC,EACdY,EAAM,OAAO,SAASD,EAAE,GAAG,GAAKA,EAAE,IAAM,EAAIA,EAAE,IAAM,EACpDE,EAAQ,MAAM,QAAQF,EAAE,IAAI,GAAKA,EAAE,KAAK,OAAUA,EAAE,KAAOtB,GAAUuB,EAAM,GAAK,GAAI,EAAE,EACtFE,EAAMH,EAAE,KAAO,KACfI,EAAWJ,EAAE,UAAY,KACzBK,EAAe,CAAC,CAACD,GAAY,CAACD,EAC9BG,GAAS,CAAC,CAACN,EAAE,OAASJ,EACtBW,GAAMH,EAAWA,EAAS,IAAM,KAChCI,GAAMJ,EAAW,KAAK,IAAI,EAAG,KAAK,IAAI,IAAKA,EAAS,KAAO,CAAC,CAAC,EAAI,IAEvE,MAAM,UAAU,IAAM,IAAM,CAExB,GADIL,EAAO,SAAS,qBAAqBA,EAAO,OAAO,EACnDD,EAAS,QAAS,CAAE,GAAI,CAAEA,EAAS,QAAQ,MAAM,CAAG,MAAY,CAAC,CAAEA,EAAS,QAAU,IAAM,CACpG,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CAClB,GAAI,CAACK,GAAOL,EAAS,QAAS,CAAE,GAAI,CAAEA,EAAS,QAAQ,MAAM,CAAG,MAAY,CAAC,CAAEA,EAAS,QAAU,KAAML,EAAW,EAAK,EAAGE,EAAY,CAAC,CAAG,CAC/I,EAAG,CAACQ,CAAG,CAAC,EAER,IAAMM,GAAQ,IAAM,CAChB,GAAIX,EAAS,QAAW,GAAI,CAAEA,EAAS,QAAQ,MAAM,CAAG,MAAY,CAAC,CACjEC,EAAO,SAAS,qBAAqBA,EAAO,OAAO,EACvDN,EAAW,EAAK,CACpB,EACMiB,EAAO,IAAM,CACf,GAAI,CAACP,EAAK,OAEV,GADAN,EAAW,EAAK,EACZ,CAACC,EAAS,QAAS,CACnB,IAAMa,GAAI,IAAI,MACdA,GAAE,QAAU,OACZA,GAAE,iBAAiB,aAAc,IAAM,CACnC,IAAMC,GAAID,GAAE,UAAY,SAASA,GAAE,QAAQ,EAAIA,GAAE,SAAWV,EACxDW,IAAGjB,EAAY,KAAK,IAAI,EAAGgB,GAAE,YAAcC,EAAC,CAAC,CACrD,CAAC,EACDD,GAAE,iBAAiB,QAAS,IAAM,CAAElB,EAAW,EAAK,EAAGE,EAAY,CAAC,CAAG,CAAC,EACxEgB,GAAE,iBAAiB,QAAS,IAAM,CAAElB,EAAW,EAAK,EAAGI,EAAW,EAAI,CAAG,CAAC,EAC1Ec,GAAE,IAAMR,EACRL,EAAS,QAAUa,EACvB,CACA,IAAME,EAAIf,EAAS,QAAQ,KAAK,EAC5Be,GAAK,OAAOA,EAAE,MAAS,WACvBA,EAAE,KAAK,IAAMpB,EAAW,EAAI,CAAC,EAAE,MAAOqB,IAAQ,CAAE,QAAQ,KAAK,yBAA0BA,IAAOA,GAAI,KAAMA,IAAOA,GAAI,OAAO,EAAGjB,EAAW,EAAI,EAAGJ,EAAW,EAAK,CAAG,CAAC,EAEnKA,EAAW,EAAI,CAEvB,EACMsB,EAAS,IAAM,CACbV,GAAgBC,IAAU,CAACH,IAC3BX,EAASiB,GAAM,EAAQC,EAAK,EACpC,EACMM,EAAQC,GAAM,CAChB,GAAIZ,GAAgBC,IAAU,CAACH,EAAK,OACpC,IAAMe,GAAOD,EAAE,cAAc,sBAAsB,EAC7CJ,GAAI,KAAK,IAAI,EAAG,KAAK,IAAI,GAAII,EAAE,QAAUC,GAAK,MAAQA,GAAK,KAAK,CAAC,EACnEpB,EAAS,SAAWA,EAAS,QAAQ,WAAUA,EAAS,QAAQ,YAAce,GAAIf,EAAS,QAAQ,UACvGH,EAAYkB,EAAC,CACjB,EAEMM,EAAUzB,EAAWO,EACrBmB,EAAO,EAAI,KAAK,GAAK,GACrBC,EAAS/B,EAAO,yBAA2B,mCAC3CgC,EAAYhC,EAAO,sBAAwB,mBAE3CiC,EAASrB,EAAK,IAAI,CAACsB,EAAKC,KAAM,CAChC,IAAMC,IAAUD,GAAI,IAAOvB,EAAK,QAAUR,EACtCiC,EACJ,OAAItB,EAAcsB,EAAMrC,EAAO,4BAA8B,2BACxDqC,EAAMD,GAAS,yBAA4BpC,EAAO,4BAA8B,4BAC9EC,EAAE,OAAQ,CAAE,IAAKkC,GAAG,MAAO,CAAE,KAAM,QAAS,SAAU,EAAG,MAAO,MAAO,OAAQ,KAAK,MAAM,EAAID,EAAM,EAAE,EAAI,KAAM,aAAc,MAAO,WAAYG,EAAK,WAAY,iBAAkB,CAAE,CAAC,CAClM,CAAC,EAEKC,GAAOvB,GAAgBd,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,UAAW,gBAAiB,CAAE,EAAG,CACxKA,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,GAAI,EAAG,GAAI,KAAM,OAAQ,OAAQ,kCAAmC,YAAa,GAAI,CAAC,EAC3HA,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,GAAI,EAAG,GAAI,KAAM,OAAQ,OAAQ,yBAA0B,YAAa,IAAK,cAAe,QAAS,gBAAiB6B,EAAK,QAAQ,CAAC,EAAG,kBAAmBA,GAAQ,EAAIZ,GAAM,MAAM,QAAQ,CAAC,EAAG,MAAO,CAAE,WAAY,+BAAgC,CAAE,CAAC,CAC/R,CAAC,EAEKqB,GAAOvB,GACPf,EAAE,IAAK,CAAE,UAAW,8BAA+B,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAC/Ec,EACGd,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,eAAgB,MAAO,CAAE,QAAS,EAAI,CAAE,EAAGA,EAAE,OAAQ,CAAE,EAAG,qBAAsB,CAAC,CAAC,EAC/IC,EACGD,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,cAAe,EAAG,CAACA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,EAAG,EAAG,EAAG,MAAO,EAAG,OAAQ,GAAI,GAAI,GAAI,CAAC,EAAGA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,GAAI,EAAG,EAAG,MAAO,EAAG,OAAQ,GAAI,GAAI,GAAI,CAAC,CAAC,CAAC,EACzNA,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,cAAe,EAAGA,EAAE,OAAQ,CAAE,EAAG,qBAAsB,CAAC,CAAC,EAE/HuC,GAAQxB,GAASyB,EAAE,YAAY,EAAK1B,EAAgBE,KAAQ,KAAOwB,EAAE,gBAAgB,EAAIA,EAAE,kBAAkB,EAAKA,EAAE,WAAW,EAC/HC,EAAW3B,EAAgBG,GAAM,IAAOvB,GAAYO,GAAWE,EAAW,EAAKyB,EAAUlB,CAAG,EAElG,OAAOV,EAAE,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,gBAAiB,CAAE,EAAG,CAC1GA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAAG,CACzIqC,GACArC,EAAE,SAAU,CACR,IAAK,KAAM,QAASwB,EAAQ,MAAOV,EAAe0B,EAAE,mBAAmB,EAAKvC,EAAUuC,EAAE,WAAW,EAAIA,EAAE,UAAU,EACnH,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAYzB,GAAS,gCAAkCe,EAAQ,MAAOf,GAAS,gBAAkBgB,EAAW,OAASjB,GAAgBC,IAAU,CAACH,EAAO,UAAY,UAAW,WAAY,yCAA0C,CAC5V,EAAG0B,EAAI,CACX,CAAC,EACDtC,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvDA,EAAE,MAAO,CAAE,IAAK,OAAQ,QAASyB,EAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,OAAQ,OAAQ,OAASX,GAAgBC,IAAU,CAACH,EAAO,UAAY,SAAU,CAAE,EAAGoB,CAAM,EAC/LhC,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,UAAW,KAAM,CAAE,EAAG,CAC3HA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYd,GAAS,SAAU,SAAU,WAAY,IAAK,MAAO4B,EAAe,qBAAuB,kBAAmB,CAAE,EAAG2B,CAAQ,EACtKzC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYd,GAAS,SAAU,QAAS,WAAY,IAAK,MAAO6B,GAAS,gBAAmBD,EAAe,mBAAqB,uBAAyB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGyB,EAAK,CACzP,CAAC,CACL,CAAC,CACL,CAAC,CACL,EAKMG,GAAgB,CAAC,CAAE,OAAAC,EAAQ,SAAAC,CAAS,IAAM,CAC5C,IAAM5C,EAAI,MAAM,cACV6C,EAAc,IACdC,EAAQ,GACR,CAAClB,EAASmB,CAAU,EAAI,MAAM,SAAS,CAAC,EACxC,CAACC,EAAUC,CAAW,EAAI,MAAM,SAAS,IAAM,IAAI,MAAMH,CAAK,EAAE,KAAK,GAAI,CAAC,EAC1E,CAACI,EAAUC,CAAW,EAAI,MAAM,SAAS,EAAK,EAC9CC,EAAI,MAAM,OAAO,CAAC,CAAC,EAAE,QAErBC,EAAgB,IAAM,CACxB,GAAI,CAAMD,EAAE,OAAQA,EAAE,KAAK,WAAW,EAAOA,EAAE,KAAK,OAAMA,EAAE,KAAK,KAAK,UAAY,MAAMA,EAAE,KAAK,eAAiB,KAAQ,MAAY,CAAC,CACrI,GAAI,CAAMA,EAAE,SAASA,EAAE,QAAQ,WAAW,CAAG,MAAY,CAAC,CAC1D,GAAI,CAAMA,EAAE,MAAMA,EAAE,KAAK,WAAW,CAAG,MAAY,CAAC,CACpDA,EAAE,KAAOA,EAAE,QAAUA,EAAE,KAAO,IAClC,EACME,EAAU,IAAM,CACdF,EAAE,OAAO,cAAcA,EAAE,KAAK,EAClCA,EAAE,MAAQ,KACVC,EAAc,EACd,GAAI,CAAMD,EAAE,QAAQA,EAAE,OAAO,UAAU,EAAE,QAAQZ,GAAKA,EAAE,KAAK,CAAC,CAAG,MAAY,CAAC,CAC9E,GAAI,CAAMY,EAAE,IAAIA,EAAE,GAAG,MAAM,CAAG,MAAY,CAAC,CAC3C,GAAIA,EAAE,KAAM,CAAE,GAAI,CAAE,IAAI,gBAAgBA,EAAE,IAAI,CAAG,MAAY,CAAC,CAAEA,EAAE,KAAO,IAAM,CAC/EA,EAAE,OAASA,EAAE,GAAK,IACtB,EAEMG,EAAYC,GAAQ,CACtBJ,EAAE,MAAQA,EAAE,OAAS,CAAC,EACtBA,EAAE,MAAM,KAAKI,CAAG,EAChB,IAAMC,EAAM,YAAY,IAAI,GACxB,CAACL,EAAE,UAAYK,EAAML,EAAE,SAAW,MAClCA,EAAE,SAAWK,EACbR,EAAYS,GAAQ,CAAE,IAAMC,EAAOD,EAAK,MAAM,CAAC,EAAG,OAAAC,EAAK,KAAK,KAAK,IAAI,IAAMH,CAAG,CAAC,EAAUG,CAAM,CAAC,EAExG,EAEMC,EAAa,CAACC,EAAOxE,IAAM,CAC7B,GAAI,CAACwE,GAAS,CAACA,EAAM,OAAQ,OAAO,IAAI,MAAMxE,CAAC,EAAE,KAAK,EAAG,EACzD,IAAMC,EAAM,CAAC,EACPwE,EAAOD,EAAM,OAASxE,EAC5B,QAAS6C,EAAI,EAAGA,EAAI7C,EAAG6C,IAAK,CACxB,IAAMd,EAAI,KAAK,MAAMc,EAAI4B,CAAI,EAAGC,EAAI,KAAK,IAAI3C,EAAI,EAAG,KAAK,OAAOc,EAAI,GAAK4B,CAAI,CAAC,EAC1ElE,EAAI,EACR,QAASoE,GAAI5C,EAAG4C,GAAID,GAAKC,GAAIH,EAAM,OAAQG,KAAKpE,EAAI,KAAK,IAAIA,EAAGiE,EAAMG,EAAC,CAAC,EACxE1E,EAAI,KAAK,KAAK,IAAI,IAAM,KAAK,IAAI,EAAGM,CAAC,CAAC,CAAC,CAC3C,CACA,OAAON,CACX,EAIM2E,EAAW,CAACC,EAAMC,EAAMC,IAAO,CACjC,GAAI,CAACF,GAAQ,CAACA,EAAK,QAAUE,GAAMD,EAAM,OAAOD,GAAQ,IAAI,aAAa,CAAC,EAC1E,IAAMG,EAAQF,EAAOC,EACfE,EAAS,KAAK,MAAMJ,EAAK,OAASG,CAAK,EACvC/E,EAAM,IAAI,aAAagF,CAAM,EACnC,QAASpC,EAAI,EAAGA,EAAIoC,EAAQpC,IAAK,CAC7B,IAAMqC,EAAQ,KAAK,MAAMrC,EAAImC,CAAK,EAAGG,GAAM,KAAK,IAAIN,EAAK,OAAQ,KAAK,OAAOhC,EAAI,GAAKmC,CAAK,CAAC,EACxF9E,GAAI,EAAGF,GAAI,EACf,QAAS2E,EAAIO,EAAOP,EAAIQ,GAAKR,IAAOzE,IAAK2E,EAAKF,CAAC,EAAG3E,KAClDC,EAAI4C,CAAC,EAAI7C,GAAIE,GAAIF,GAAI,CACzB,CACA,OAAOC,CACX,EAGMmF,GAAY,CAACC,EAASC,IAAS,CACjC,IAAMC,EAAM,IAAI,YAAY,GAAKF,EAAQ,OAAS,CAAC,EAC7CG,EAAO,IAAI,SAASD,CAAG,EACvBE,EAAK,CAACC,EAAGxF,IAAM,CAAE,QAAS2C,GAAI,EAAGA,GAAI3C,EAAE,OAAQ2C,KAAK2C,EAAK,SAASE,EAAI7C,GAAG3C,EAAE,WAAW2C,EAAC,CAAC,CAAG,EACjG4C,EAAG,EAAG,MAAM,EAAGD,EAAK,UAAU,EAAG,GAAKH,EAAQ,OAAS,EAAG,EAAI,EAAGI,EAAG,EAAG,MAAM,EAC7EA,EAAG,GAAI,MAAM,EAAGD,EAAK,UAAU,GAAI,GAAI,EAAI,EAAGA,EAAK,UAAU,GAAI,EAAG,EAAI,EAAGA,EAAK,UAAU,GAAI,EAAG,EAAI,EACrGA,EAAK,UAAU,GAAIF,EAAM,EAAI,EAAGE,EAAK,UAAU,GAAIF,EAAO,EAAG,EAAI,EAAGE,EAAK,UAAU,GAAI,EAAG,EAAI,EAAGA,EAAK,UAAU,GAAI,GAAI,EAAI,EAC5HC,EAAG,GAAI,MAAM,EAAGD,EAAK,UAAU,GAAIH,EAAQ,OAAS,EAAG,EAAI,EAC3D,IAAIK,EAAI,GACR,QAAS7C,EAAI,EAAGA,EAAIwC,EAAQ,OAAQxC,IAAK,CAAE,IAAM3C,EAAI,KAAK,IAAI,GAAI,KAAK,IAAI,EAAGmF,EAAQxC,CAAC,CAAC,CAAC,EAAG2C,EAAK,SAASE,EAAGxF,EAAI,EAAIA,EAAI,MAASA,EAAI,MAAQ,EAAI,EAAGwF,GAAK,CAAG,CAC7J,OAAO,IAAI,KAAK,CAACH,CAAG,EAAG,CAAE,KAAM,WAAY,CAAC,CAChD,EAGMI,GAAcC,GAAU,CAC1B,GAAI,CAACA,GAAS,CAACA,EAAM,OAAQ,OAC7B7B,EAAE,IAAI,KAAK6B,CAAK,EAChB7B,EAAE,aAAeA,EAAE,aAAe,GAAK6B,EAAM,OAC7C,IAAIC,EAAM,EACV,QAAShD,EAAI,EAAGA,EAAI+C,EAAM,OAAQ/C,IAAKgD,GAAOD,EAAM/C,CAAC,EAAI+C,EAAM/C,CAAC,EAChEqB,EAAS,KAAK,IAAI,EAAG,KAAK,KAAK2B,EAAMD,EAAM,MAAM,EAAI,GAAG,CAAC,CAC7D,EAEME,GAAUC,GAAS,CACrB,GAAIhC,EAAE,SAAU,OAChBA,EAAE,SAAW,GACTA,EAAE,OAAO,cAAcA,EAAE,KAAK,EAClCA,EAAE,MAAQ,KACV,IAAMS,GAAST,EAAE,OAAS,CAAC,GAAG,MAAM,EAC9BiC,EAAWjC,EAAE,IAAMA,EAAE,GAAG,YAAe,KAC7CC,EAAc,EAEd,IAAIiC,EAAU,KAAMC,EAAS,EACvBC,EAAQpC,EAAE,aAAe,EAE/B,GAAIgC,GAAQhC,EAAE,KAAOA,EAAE,IAAI,QAAUoC,EAAQH,EAAU,GAAK,CACxD,IAAMI,EAAS,IAAI,aAAaD,CAAK,EACjCE,EAAM,EACV,QAAWC,MAAKvC,EAAE,IAAOqC,EAAO,IAAIE,GAAGD,CAAG,EAAGA,GAAOC,GAAE,OACtD,IAAMC,GAAa,KACbtG,GAAM2E,EAASwB,EAAQJ,EAASO,EAAU,EAChDL,EAAS,KAAK,IAAI,EAAG,KAAK,MAAMjG,GAAI,OAASsG,EAAU,CAAC,EACxDN,EAAUb,GAAUnF,GAAKsG,EAAU,CACvC,CAEA,GAAI,CAAMxC,EAAE,QAAQA,EAAE,OAAO,UAAU,EAAE,QAAQZ,GAAKA,EAAE,KAAK,CAAC,CAAG,MAAY,CAAC,CAC9E,GAAI,CAAMY,EAAE,IAAIA,EAAE,GAAG,MAAM,CAAG,MAAY,CAAC,CAC3C,GAAIA,EAAE,KAAM,CAAE,GAAI,CAAE,IAAI,gBAAgBA,EAAE,IAAI,CAAG,MAAY,CAAC,CAAEA,EAAE,KAAO,IAAM,CAC/EA,EAAE,OAASA,EAAE,GAAK,KAClBA,EAAE,IAAM,CAAC,EAELgC,GAAQE,GAAWA,EAAQ,KAAO,GAAI3C,EAAO2C,EAASC,EAAQ3B,EAAWC,EAAO,EAAE,CAAC,EAC9EuB,GAAQjC,EAAY,EAAI,EAAGC,EAAE,SAAW,IAC5CR,EAAS,CAClB,EA4EA,GA1EA,MAAM,UAAU,IAAM,CAClB,IAAIiD,EAAY,GAChB,OAAAzC,EAAE,SAAW,GACbA,EAAE,MAAQ,CAAC,EACXA,EAAE,IAAM,CAAC,EACTA,EAAE,YAAc,EAChBA,EAAE,GAAK,YAAY,IAAI,EACvBA,EAAE,MAAQ,YAAY,IAAM,CACxB,IAAM1B,GAAK,YAAY,IAAI,EAAI0B,EAAE,IAAM,IACvCL,EAAWrB,CAAC,EACRA,GAAKmB,GAAasC,GAAO,EAAI,CACrC,EAAG,GAAG,GAEL,SAAY,CACT,IAAIW,EAAS,KACb,GAAI,CACI,UAAU,cAAgB,UAAU,aAAa,eACjDA,EAAS,MAAM,UAAU,aAAa,aAAa,CAAE,MAAO,CAAE,aAAc,EAAG,iBAAkB,GAAM,iBAAkB,EAAK,CAAE,CAAC,EAEzI,MAAY,CAAEA,EAAS,IAAM,CAC7B,GAAID,EAAW,CAAMC,GAAQA,EAAO,UAAU,EAAE,QAAQtD,GAAKA,EAAE,KAAK,CAAC,EAAG,MAAQ,CAChF,GAAI,CAACsD,EAAQ,CAAE3C,EAAY,EAAI,EAAOC,EAAE,OAAO,cAAcA,EAAE,KAAK,EAAG,MAAQ,CAE/EA,EAAE,OAAS0C,EAMX,GAAI,CACA,IAAMC,EAAK,OAAO,cAAgB,OAAO,mBAEzC,GADA3C,EAAE,GAAK,IAAI2C,EACP3C,EAAE,GAAG,QAAU,YAAe,GAAI,CAAE,MAAMA,EAAE,GAAG,OAAO,CAAG,MAAY,CAAC,CAC1EA,EAAE,QAAUA,EAAE,GAAG,wBAAwB0C,CAAM,EAC/C1C,EAAE,KAAOA,EAAE,GAAG,WAAW,EACzBA,EAAE,KAAK,KAAK,MAAQ,EAEpB,IAAI4C,EAAa,GACjB,GAAI5C,EAAE,GAAG,cAAgB,OAAOA,EAAE,GAAG,aAAa,WAAc,YAAc,OAAO,iBACjF,GAAI,CACA,IAAM6C,EAAO,+JAGb,GAFA7C,EAAE,KAAO,IAAI,gBAAgB,IAAI,KAAK,CAAC6C,CAAI,EAAG,CAAE,KAAM,wBAAyB,CAAC,CAAC,EACjF,MAAM7C,EAAE,GAAG,aAAa,UAAUA,EAAE,IAAI,EACpCyC,EAAW,OACfzC,EAAE,KAAO,IAAI,iBAAiBA,EAAE,GAAI,QAAQ,EAC5CA,EAAE,KAAK,KAAK,UAAa1B,GAAMsD,GAAWtD,EAAE,IAAI,EAChD0B,EAAE,QAAQ,QAAQA,EAAE,IAAI,EACxBA,EAAE,KAAK,QAAQA,EAAE,IAAI,EACrBA,EAAE,KAAK,QAAQA,EAAE,GAAG,WAAW,EAC/B4C,EAAa,EACjB,MAAY,CAAEA,EAAa,EAAO,CAGjCA,IAED5C,EAAE,KAAOA,EAAE,GAAG,sBAAsB,KAAS,EAAG,CAAC,EACjDA,EAAE,KAAK,eAAkB1B,GAAM,CAC3B,IAAMwE,EAAQxE,EAAE,YAAY,eAAe,CAAC,EAC5CsD,GAAW,IAAI,aAAakB,CAAK,CAAC,CACtC,EACA9C,EAAE,QAAQ,QAAQA,EAAE,IAAI,EACxBA,EAAE,KAAK,QAAQA,EAAE,IAAI,EACrBA,EAAE,KAAK,QAAQA,EAAE,GAAG,WAAW,EAEvC,MAAY,CACRD,EAAY,EAAI,EACZC,EAAE,OAAO,cAAcA,EAAE,KAAK,CACtC,CACJ,GAAG,EAEI,IAAM,CAAEyC,EAAY,GAAMvC,EAAQ,CAAG,CAEhD,EAAG,CAAC,CAAC,EAEDJ,EACA,OAAOlD,EAAE,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CAC/EA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,OAAQ,OAAQ,QAAS,SAAU,aAAc,OAAQ,WAAY,uCAAwC,OAAQ,iDAAkD,MAAO,gBAAiB,SAAU,QAAS,CAAE,EAAG,CAC5TA,EAAE,IAAK,CAAE,IAAK,IAAK,UAAW,0BAA2B,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACtFwC,EAAE,aAAa,CACnB,CAAC,EACDxC,EAAE,SAAU,CAAE,IAAK,IAAK,QAAS4C,EAAU,MAAOJ,EAAE,eAAe,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAC5RxC,EAAE,IAAK,CAAE,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,CAC1E,CAAC,EAGL,IAAMgC,GAASgB,EAAS,IAAI,CAACf,EAAKC,IAAMlC,EAAE,OAAQ,CAAE,IAAKkC,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,MAAO,OAAQ,KAAK,MAAM,EAAID,EAAM,EAAE,EAAI,KAAM,aAAc,MAAO,WAAY,sBAAuB,QAAU,IAAOA,EAAM,GAAM,CAAE,CAAC,CAAC,EAEnO,OAAOjC,EAAE,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CAC/EA,EAAE,SAAU,CACR,IAAK,SAAU,QAAS,IAAMmF,GAAO,EAAK,EAAG,MAAO3C,EAAE,cAAc,EACpE,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAC7N,EAAGxC,EAAE,IAAK,CAAE,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EACzEA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,OAAQ,OAAQ,QAAS,SAAU,aAAc,OAAQ,WAAY,uCAAwC,OAAQ,gDAAiD,CAAE,EAAG,CACjRA,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,MAAO,OAAQ,KAAM,CAAE,EAC/FA,EAAE,OAAQ,CAAE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,WAAY,sBAAuB,UAAW,iCAAkC,CAAE,CAAC,CAAC,EAClKA,EAAE,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,OAAQ,WAAYd,GAAS,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,SAAU,MAAO,CAAE,EAAGQ,GAAWkC,CAAO,CAAC,EAC5K5B,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,WAAY,IAAK,MAAO,OAAQ,OAAQ,SAAU,QAAS,CAAE,EAAGgC,EAAM,CACxL,CAAC,EACDhC,EAAE,SAAU,CACR,IAAK,OAAQ,QAAS,IAAMmF,GAAO,EAAI,EAAG,MAAO3C,EAAE,gBAAgB,EACnE,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,OAAQ,UAAW,UAAW,6CAA8C,WAAY,yCAA0C,CAC5U,EAAGxC,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAAgB,YAAa,EAAG,cAAe,QAAS,eAAgB,OAAQ,EAAG,CAACA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,aAAc,CAAC,EAAGA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,2BAA4B,CAAC,CAAC,CAAC,CAAC,CAC7Q,CAAC,CACL,EAGMmG,GAAsB,CAAC,CAAE,QAAAC,EAAS,KAAAC,EAAM,UAAAC,EAAW,IAAAC,EAAK,OAAAC,EAAQ,SAAAC,EAAU,YAAAC,EAAa,UAAAC,EAAW,QAAAC,EAAS,QAAAC,EAAS,UAAAC,EAAW,SAAAC,EAAU,SAAAC,EAAU,MAAAlH,CAAM,IAAM,CACjK,GAAM,CAACmH,EAAUC,CAAW,EAAI,MAAM,SAAS,EAAK,EAC9CC,EAAiB,MAAM,OAAO,IAAI,EAElCC,GAAcC,GAAO,IAAI,KAAKA,CAAE,EAAE,mBAAmB,QAAS,CAAE,KAAM,UAAW,OAAQ,UAAW,OAAQ,SAAU,CAAC,EAO7H,GALA,MAAM,UAAU,IAAM,IAAM,CAAMF,EAAe,SAAS,aAAaA,EAAe,OAAO,CAAG,EAAG,CAAC,CAAC,EAKjGd,IAAS,UAAYA,IAAS,SAAU,CACxC,IAAMiB,EAAWjB,IAAS,SAC1B,OAAO,MAAM,cAAc,MAAO,CAAE,UAAW,gBAAiB,MAAO,CAAE,QAAS,OAAQ,eAAgB,SAAU,OAAQ,OAAQ,CAAE,EAClI,MAAM,cAAc,MAAO,CACvB,MAAO,CAAE,SAAU,MAAO,QAAS,WAAY,aAAc,OAAQ,OAAQ,cAAgBiB,EAAW,kCAAoC,oCAAqC,WAAYA,EAAW,kCAAoC,mCAAoC,MAAOA,EAAW,uBAAyB,qBAAsB,SAAU,SAAU,UAAW,SAAU,WAAY,GAAI,CAC9Y,EAAGlB,CAAO,CACd,CACJ,CAEA,IAAMrG,GAAOsG,IAAS,OAChBkB,GAAYxH,GACZyH,GAAanB,IAAS,YAAcI,IAAa,GAEjDgB,EAAa,OAAOd,GAAc,SAClC,KAAK,IAAI,EAAG,KAAK,MAAMA,GAAaE,GAAW,KAAK,IAAI,IAAM,GAAI,CAAC,EACnE,KACAa,EAAgB/H,GAAQ,CAC1B,GAAIA,GAAO,KAAM,MAAO,GACxB,IAAMK,EAAI,KAAK,MAAML,EAAM,IAAI,EAAGC,GAAI,KAAK,MAAOD,EAAM,KAAQ,EAAE,EAAGJ,GAAII,EAAM,GACzEgI,EAAOtI,IAAM,OAAOA,EAAC,EAAE,SAAS,EAAG,GAAG,EAC5C,OAAOW,EAAI,EAAKA,EAAI,IAAM2H,EAAI/H,EAAC,EAAI,IAAM+H,EAAIpI,EAAC,EAAMK,GAAI,IAAM+H,EAAIpI,EAAC,CACvE,EAEMqI,EAAe,IAAM,CACvB,GAAIX,EAAU,OACdC,EAAY,EAAI,EAChB,IAAMW,EAAK,KAAK,IAAI,EAAI,OAAOnB,GAAgB,SAAWA,EAAc,EAAG,EAAI,IAC/ES,EAAe,QAAU,WAAW,IAAM,CAAEH,GAAYA,EAAS,CAAG,EAAGa,CAAE,CAC7E,EAEMC,EAAS/H,GAAO,qBAAuB,qBACvCgI,EAAShI,GAAO,sCAAwC,sCACxDiI,EAAKjI,GAAO,sBAAwB,oBAI1C,GADkB6G,IAAY,IAAS,OAAOD,GAAc,WAAaE,GAAW,KAAK,IAAI,IAAMF,EAE/F,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,gBACX,MAAO,CAAE,QAAS,OAAQ,MAAO,OAAQ,eAAgB5G,GAAO,WAAa,YAAa,CAC9F,EAAG,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,SAAU,MAAO,SAAU,OAAQ,CAAE,EAC1E,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc+H,EAAQ,OAAQ,sCAAuC,WAAY,4BAA6B,CAAE,EAAG,CAC9N,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,EACxH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,UAAW,QAAS,CAAE,EAAGtF,EAAE,cAAc,CAAC,CAC5I,CAAC,CACL,CAAC,EAGL,IAAIyF,EACAnI,EACAmI,EAAO,MAAM,cAAcpI,GAAa,CAAE,IAAK,QAAS,MAAAC,EAAO,KAAAC,EAAK,CAAC,EAC9DyH,IAAc,CAACP,EACtBgB,EAAO,MAAM,cAAc,MAAO,CAC9B,IAAK,QACL,QAASL,EACT,MAAO,CAAE,SAAU,WAAY,OAAQ,UAAW,QAAS,iBAAkB,SAAU,QAAS,CACpG,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,SAAU,WAAY,KAAM,MAAO,mBAAoB,OAAQ,YAAa,WAAY,OAAQ,cAAe,OAAQ,UAAW,aAAc,UAAW,MAAO,CAAE,EAAGxB,CAAO,EAC3O,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,gBAAiBnH,GAAW,eAAgB,OAAQ,QAAS,IAAM,aAAc,SAAU,cAAe,MAAO,CAAE,CAAC,EACxM,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,cAAe,MAAO,CAAE,EAAG,CACtL,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,EAC5H,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,4BAA6B,CAAE,EAAGuD,EAAE,kBAAkB,CAAC,CACtL,CAAC,CACL,CAAC,EAEDyF,EAAO,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,iBAAkB,MAAO,kBAAmB,CAAE,EAC7G,MAAM,cAAcC,GAAa,CAAE,KAAM9B,CAAQ,CAAC,CACtD,EAGJ,IAAM+B,GAAW,CACb,MAAM,cAAc,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,WAAYjJ,GAAS,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGkI,GAAWd,CAAS,CAAC,CACrJ,EAEA,GAAIvG,GAAM,CACN,IAAMqI,EAAS,CACX,QAAS,CAAE,KAAM,WAAY,MAAO,mBAAoB,MAAO5F,EAAE,cAAc,CAAE,EACjF,KAAM,CAAE,KAAM,WAAY,MAAO,mBAAoB,MAAOA,EAAE,UAAU,CAAE,EAE1E,UAAW,CAAE,KAAM,kBAAmB,MAAO,mBAAoB,MAAOA,EAAE,gBAAgB,CAAE,EAE5F,KAAM,CAAE,KAAM,kBAAmB,MAAO,kBAAmB,MAAOA,EAAE,UAAU,CAAE,EAChF,OAAQ,CAAE,KAAM,0BAA2B,MAAO,gBAAiB,MAAOA,EAAE,cAAc,CAAE,CAChG,EAAGgE,GAAU,MAAM,GAAK,CAAE,KAAM,WAAY,MAAO,mBAAoB,MAAOhE,EAAE,UAAU,CAAE,EAC5F2F,GAAS,KAAK,MAAM,cAAc,OAAQ,CACtC,IAAK,MAAO,MAAOC,EAAM,MACzB,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,MAAOA,EAAM,KAAM,CAC9E,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,OAASA,EAAM,KAAM,MAAO,CAAE,SAAU,QAAS,CAAE,CAAC,CAAC,CAAC,CACnG,CACIZ,IAAcP,EACdkB,GAAS,KAAK,MAAM,cAAc,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CACxL,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,kBAAmB,CAAE,CAAC,EACrI3F,EAAE,iBAAiB,CACvB,CAAC,CAAC,EACKiF,IAAc,MACrBU,GAAS,KAAK,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,WAAYjJ,GAAS,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CAChN,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAC7FwI,EAAaD,CAAS,CAC1B,CAAC,CAAC,EAGN,IAAMY,GAAY,CAAC,EACnBA,GAAU,KAAK,MAAM,cAAc,OAAQ,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,KAAM,MAAO,CAAE,EAAG,CAC5M,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAWd,GAAY,cAAgB,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAC7HA,GAAY/E,EAAE,gBAAgB,EAAIA,EAAE,gBAAgB,CACxD,CAAC,CAAC,EAEEsE,GAAa/G,IAAQwG,GACrB8B,GAAU,KAAK,MAAM,cAAc,SAAU,CACzC,IAAK,SAAU,QAAS,IAAMtB,GAAYA,EAASR,CAAG,EAAG,MAAO/D,EAAE,wBAAwB,EAC1F,UAAW,YACX,MAAO,CAAE,WAAY,OAAQ,OAAQ,OAAQ,OAAQ,UAAW,MAAO,uBAAwB,SAAU,OAAQ,QAAS,EAAG,WAAY,CAAE,CAC/I,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,kBAAmB,CAAC,CAAC,CAAC,EAGnE,IAAM8F,GAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,IAAK,OAAQ,QAAS,aAAc,CACzH,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,SAAU,CAAE,CAAE,EAAGH,EAAQ,EAC5H,MAAM,cAAc,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,KAAM,MAAO,CAAE,EAAGE,EAAS,CAClI,CAAC,EAED,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,gBACX,MAAO,CAAE,QAAS,OAAQ,MAAO,OAAQ,eAAgBtI,GAAO,WAAa,YAAa,CAC9F,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,MAAO,SAAU,OAAQ,CAAE,EACpF,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,aAAc+H,EAAQ,OAAQC,EAAQ,WAAYC,EAAI,SAAU,QAAS,CAAE,EAAG,CAACC,EAAMK,EAAI,CAAC,CACpI,CACJ,CAAC,CACL,EAGMC,GAA0B,CAAC,CAC7B,SAAAC,EACA,cAAAC,EACA,eAAAC,EACA,UAAAC,EACA,YAAAC,EACA,mBAAAC,EACA,iBAAAC,EACA,UAAAC,EACA,WAAAC,EACA,WAAAC,EACA,cAAAC,EACA,YAAAC,EACA,eAAAC,EACA,cAAAC,EACA,eAAAC,EACA,iBAAAC,EACA,iBAAAC,EACA,WAAAC,GACA,UAAAC,GACA,cAAAC,GACA,cAAAC,GACA,iBAAAC,EACA,sBAAAC,EACA,cAAAC,EACA,eAAAC,EACA,2BAAAC,EACA,4BAAAC,EACA,2BAAAC,EAEA,cAAAC,EACA,aAAAC,GACA,aAAAC,GACA,mBAAAC,GACA,YAAAC,EACA,YAAAC,EACA,kBAAAC,GACA,2BAAAC,GACA,iBAAAC,EACA,oBAAAC,GACA,kBAAAC,GACA,cAAAC,GACA,iBAAAC,GACA,iBAAAC,GACA,gBAAAC,GACA,mBAAAC,GACA,eAAAC,GACA,qBAAAC,GACA,iBAAAC,GACA,uBAAAC,GACA,wBAAAC,GAGA,QAAAC,GAAU,EACd,IAAM,CACF,GAAM,CAACC,GAAMC,EAAO,EAAI,MAAM,SAAS,QAAQ,EACzC,CAACC,GAAiCC,EAAkC,EAAI,MAAM,SAAS,EAAK,EAE5F,CAACC,GAAaC,EAAc,EAAI,MAAM,SAAS,EAAK,EACpD,CAACC,GAAQC,EAAS,EAAI,MAAM,SAAS,EAAK,EAC1C,CAACC,EAAUC,CAAW,EAAI,MAAM,SAAS,EAAE,EAC3C,CAACC,GAAUC,EAAW,EAAI,MAAM,SAAS,EAAE,EAC3C,CAACC,GAAeC,EAAgB,EAAI,MAAM,SAAS,EAAK,EACxD,CAACC,GAAcC,EAAe,EAAI,MAAM,SAAS,EAAK,EACtD,CAACC,GAAaC,EAAc,EAAI,MAAM,SAAS,CAAC,EAGtD,MAAM,UAAU,IAAM,CAAER,EAAY,EAAE,EAAGE,GAAY,EAAE,CAAG,EAAG,CAAC9C,CAAgB,CAAC,EAS/E,MAAM,UAAU,IAAM,EACdC,GAAqB,CAACH,GAAiB,CAACC,IAAiByC,GAAe,EAAK,EACjFU,GAAgB,EAAK,CACzB,EAAG,CAACpD,EAAeC,EAAgBE,CAAgB,CAAC,EAEpD,MAAM,UAAU,IAAM,CAElB,GAAI,EADeoB,GAAoB,CAACvB,GAAiB,CAACC,GAAkB,CAACE,GAC5D,CAAEmD,GAAe,CAAC,EAAG,MAAQ,CAC9CA,GAAe,CAAC,EAChB,IAAIrL,EAAI,EACFsL,GAAK,YAAY,IAAM,CACzBtL,GAAK,EACLqL,GAAerL,CAAC,EACZA,GAAK,GAAG,cAAcsL,EAAE,CAChC,EAAG,GAAG,EACN,MAAO,IAAM,cAAcA,EAAE,CACjC,EAAG,CAAChC,EAAkBvB,EAAeC,EAAgBE,CAAgB,CAAC,EAEtE,MAAM,UAAU,IAAM,CAClB,GAAI,CAAC8C,GAAe,OACpB,IAAMO,EAAQ,IAAMN,GAAiB,EAAK,EACpCK,EAAK,WAAW,IAAM,SAAS,iBAAiB,QAASC,CAAK,EAAG,CAAC,EACxE,MAAO,IAAM,CAAE,aAAaD,CAAE,EAAG,SAAS,oBAAoB,QAASC,CAAK,CAAG,CACnF,EAAG,CAACP,EAAa,CAAC,EAKlB,IAAMQ,GAAgB,IAAM,CACxBjC,GAAoB,EAAK,EACzBkB,GAAe,EAAK,EACpBnD,EAAY,CAChB,EAEMmE,GAA6BC,GACxBnE,EAAmBmE,CAAQ,EAGhCC,GAA2B,IAAM,CACnCpE,EAAmB,KAAM,EAAK,CAClC,EAGMqE,GAA6C,SAAY,CAC3D,GAAI,CAAAtB,GAIJ,GAAI,CAOA,GALI,EAAE,iBAAkB,SAKpB,CAAC,OAAO,iBAAmB,OAAO,SAAS,WAAa,UAAY,OAAO,SAAS,WAAa,YACjG,OAIJ,IAAMuB,EAAqB,OAAO,aAAiB,KAAe,aAC5D,aAAa,WACb,SAGN,GAAIA,IAAsB,WAAa,OAAO,aAAiB,KAAe,cAG1E,GAFmB,MAAM,aAAa,kBAAkB,IAErC,UAAW,CAE1B,GAAI,CACA,GAAI,OAAO,yBAA2BlC,GAAiB,QAAS,CAC5D,IAAMmC,GAAc,IAAI,OAAO,wBAAwBnC,GAAiB,OAAO,EAC/E,MAAMmC,GAAY,KAAK,EAGvBzC,GAA2B,QAAUyC,EACzC,CACJ,MAAgB,CAEhB,CAGA,WAAW,IAAM,CACb,GAAI,CACA,IAAMC,GAAsB,IAAI,aAAa,iBAAkB,CAC3D,KAAM7K,EAAE,oBAAoB,EAC5B,KAAM,yBACN,IAAK,sBACT,CAAC,EAED6K,GAAoB,QAAU,IAAM,CAChCA,GAAoB,MAAM,CAC9B,EAEA,WAAW,IAAM,CACbA,GAAoB,MAAM,CAC9B,EAAG,GAAI,CAEX,MAAgB,CAEhB,CACJ,EAAG,GAAI,CAEX,UACOF,IAAsB,UAAW,CAExC,GAAI,CACA,GAAI,OAAO,yBAA2BlC,GAAiB,SAAW,CAACN,GAA2B,QAAS,CACnG,IAAMyC,EAAc,IAAI,OAAO,wBAAwBnC,GAAiB,OAAO,EAC/E,MAAMmC,EAAY,KAAK,EAGvBzC,GAA2B,QAAUyC,CACzC,CACJ,MAAgB,CAEhB,CAGA,WAAW,IAAM,CACb,GAAI,CACA,IAAME,EAAmB,IAAI,aAAa,iBAAkB,CACxD,KAAM9K,EAAE,oBAAoB,EAC5B,KAAM,yBACN,IAAK,mBACT,CAAC,EAED8K,EAAiB,QAAU,IAAM,CAC7BA,EAAiB,MAAM,CAC3B,EAEA,WAAW,IAAM,CACbA,EAAiB,MAAM,CAC3B,EAAG,GAAI,CACX,MAAgB,CAEhB,CACJ,EAAG,GAAI,CACX,CAEAzB,GAAmC,EAAI,CAE3C,MAAgB,CAEhB,CACJ,EAOM7L,EAAI,MAAM,cACVuN,GAAW,mBACXC,GAAU,kBAMVC,GAAiB,yBACjBC,GAAgB,wBAChBC,GAAOzO,GAEP0O,GAAU1J,GAAS,CACrB,GAAI,CACA,IAAM2J,EAAM,OAAO3J,GAAS,SAAW,KAAK,UAAUA,CAAI,EAAKA,GAAQ,GACvE,OAAK2J,EACD,OAAO,OAAO,wBAA2B,WAAmB,OAAO,uBAAuBA,CAAG,EAC7F,OAAO,OAAO,wBAA2B,WAAmB,OAAO,uBAAuBA,CAAG,EAC1FA,EAHU,EAIrB,MAAQ,CAAE,OAAO,OAAO3J,GAAS,SAAW,KAAK,UAAUA,CAAI,EAAKA,GAAQ,EAAK,CACrF,EAGM4J,GAAWpC,KAAS,SACpBqC,GAAenD,GAAoB,CAACvB,GAAiB,CAACC,GAAkB,CAACE,EACzEwE,GAAcF,IAAYzE,GAAiB,CAACG,EAC5CyE,EAAe,CAACH,IAAYxE,GAAkB,CAACE,EAC/C0E,GAAU,CAAC1E,GAAoB,CAACuE,IAAgB,CAACC,IAAe,CAACC,EACjEE,GAASL,GAAWP,GAAWC,GAE/BY,GAAcN,GAAWL,GAAiBC,GAC1CW,GAAS7E,EACThH,EAAE,mBAAmB,EACnBwL,IAAeC,EAAgBzL,EAAE,eAAe,EAAIA,EAAE,WAAW,EAEnE8L,GAAsBV,GAAXE,GAAkB/E,EAAoBC,CAAX,EACtCuF,IAAatF,GAAc,IAAI,KAAK,EAAE,OAAS,EAC/CuF,IAAarF,GAAe,IAAI,KAAK,EAAE,OAAS,EAEhDsF,GAAW,SAAY,CACzB,GAAI,CACI,OAAOC,IAA0B,WAAY,MAAMA,GAAsBJ,EAAQ,EAChF,MAAM,UAAU,UAAU,UAAUA,EAAQ,CACrD,MAAY,CAAC,CACbrC,GAAU,EAAI,EACd,WAAW,IAAMA,GAAU,EAAK,EAAG,IAAI,CAC3C,EAKM0C,IAAgBpF,GAAoB,IAAI,QAAQ,SAAU,EAAE,EAAE,OAC9DqF,GAAY1C,EAAS,QAAQ,SAAU,EAAE,EAAE,OAC3C2C,GAAa,CAAC5E,GAA8B0E,GAAe,GAAKC,KAAcD,GAC9EG,GAAmB,SAAY,CACjC,GAAI,CACAzC,GAAY,EAAE,EACd,MAAMxD,EAAmBqD,CAAQ,CACrC,OAAS3K,EAAK,CACV4K,EAAY,EAAE,EACdE,GAAY9K,GAAK,UAAY,mBACvBiB,EAAE,qBAAqB,EACvBA,EAAE,eAAe,CAAC,CAC5B,CACJ,EAIMuM,GAAY,CACd,UAAW,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,EAAG,EAAG,GAAI,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,mCAAoC,CAAC,CAAC,CAAE,EACvH,UAAW,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,0BAA2B,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,IAAK,EAAG,GAAI,MAAO,GAAI,OAAQ,EAAG,GAAI,GAAI,CAAC,CAAC,CAAE,EACjI,UAAW,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,kBAAmB,CAAC,CAAC,CAAE,EAC/D,UAAW,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,sGAAuG,CAAC,CAAC,CAAE,EACjJ,UAAW,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,qCAAsC,CAAC,CAAC,CAAE,EAClF,YAAa,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,uIAAwI,CAAC,EAAG,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,GAAI,EAAG,GAAI,CAAC,CAAC,CAAE,EAC9N,YAAa,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,EAAG,EAAG,EAAG,MAAO,EAAG,OAAQ,EAAG,GAAI,GAAI,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,GAAI,EAAG,EAAG,MAAO,EAAG,OAAQ,EAAG,GAAI,GAAI,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,EAAG,EAAG,GAAI,MAAO,EAAG,OAAQ,EAAG,GAAI,GAAI,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,oDAAqD,CAAC,CAAC,CAAE,EAC7Q,mBAAoB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,cAAe,CAAC,CAAC,CAAE,EAClE,kBAAmB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,gBAAiB,CAAC,CAAC,CAAE,EACnE,kBAAmB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,cAAe,CAAC,CAAC,CAAE,EACjE,kBAAmB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,0BAA2B,CAAC,CAAC,CAAE,EAC7E,WAAY,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,iBAAkB,CAAC,CAAC,CAAE,EAC/D,kBAAmB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,GAAI,EAAG,CAAE,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,yBAA0B,CAAC,CAAC,CAAE,EAClH,gBAAiB,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,gEAAiE,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,iBAAkB,CAAC,CAAC,CAAE,EACvJ,cAAe,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,uCAAwC,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,UAAW,CAAC,CAAC,CAAE,EACnH,WAAY,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,GAAI,EAAG,CAAE,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,qBAAsB,CAAC,CAAC,CAAE,EACzG,WAAY,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,sBAAuB,CAAC,CAAC,CAAE,EACpE,SAAU,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,kDAAmD,CAAC,EAAG,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,GAAI,EAAG,CAAE,CAAC,CAAC,CAAE,CACxI,EACMC,GAAK,CAACC,EAAMC,IAAS,CACvBA,EAAOA,GAAQ,CAAC,EAChB,IAAMC,GAAMJ,GAAUE,CAAI,EAC1B,GAAI,CAACE,GAAK,CAEN,IAAMC,GAAK,CAAC,EACZ,OAAIF,EAAK,QAAOE,GAAG,MAAQF,EAAK,OAC5BA,EAAK,WAAUE,GAAG,SAAWF,EAAK,UAClCA,EAAK,YAAWE,GAAG,UAAYF,EAAK,WACpCA,EAAK,OAAO,OAAO,OAAOE,GAAIF,EAAK,KAAK,EACrClP,EAAE,IAAK,CAAE,IAAKkP,EAAK,IAAK,UAAW,OAAOD,CAAI,GAAI,MAAOG,EAAG,CAAC,CACxE,CACA,IAAMC,GAAOH,EAAK,SAAW,WAAWA,EAAK,QAAQ,EAAI,GACnDI,GAAW,CAAC,EAClB,OAAIJ,EAAK,YAAaI,GAAS,UAAYJ,EAAK,UAAWI,GAAS,gBAAkB,SAAUA,GAAS,aAAe,YACpHJ,EAAK,OAAO,OAAO,OAAOI,GAAUJ,EAAK,KAAK,EAC3ClP,EAAE,MAAO,CACZ,IAAKkP,EAAK,IAAK,UAAWD,EAAM,MAAOI,GAAM,OAAQA,GAAM,QAAS,YACpE,KAAM,OAAQ,OAAQH,EAAK,OAAS,eACpC,YAAaC,GAAI,IAAM,EAAG,cAAe,QAAS,eAAgB,QAClE,MAAOG,EACX,EAAGH,GAAI,EAAE,IAAI,CAACI,GAAIrN,KAAMlC,EAAEuP,GAAG,CAAC,EAAG,OAAO,OAAO,CAAE,IAAKrN,EAAE,EAAGqN,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CACvE,EAGMC,GAAYxP,EAAE,MAAO,CACvB,IAAK,OACL,UAAW,gBACX,MAAO,CACH,KAAM,eAAgB,SAAU,WAAY,SAAU,SAGtD,UAAW,QAAS,UAAW,aAC/B,QAAS,OAAQ,QAAS,OAAQ,cAAe,SACjD,eAAgB,gBAAiB,IAAK,OACtC,gBAAiB,sCACjB,WAAY,0MAChB,CACJ,EAAG,CACCA,EAAE,MAAO,CAAE,IAAK,WAAY,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,cAAe,SAAU,eAAgB,SAAU,SAAU,WAAY,OAAQ,CAAE,CAAE,EACpJA,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,OAAQ,CAAE,EAAG,CACpDA,EAAE,KAAM,CAAE,IAAK,KAAM,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CAC1JwC,EAAE,kBAAkB,EAAGxC,EAAE,KAAM,CAAE,IAAK,IAAK,CAAC,EAAGwC,EAAE,qBAAqB,CAC1E,CAAC,EACDxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,SAAU,OAAQ,CAAE,EAChIwC,EAAE,iBAAiB,CAAC,EAQxBxC,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,MAAO,CAAE,EAAG,CAC1GA,EAAE,MAAO,CACL,IAAK,MACL,QAAS,cACT,KAAM,MACN,aAAcwC,EAAE,iBAAiB,EAGjC,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,SAAU,QAAS,OAAQ,OAAQ,SAAU,SAAU,CACrG,EAAG,CAECxC,EAAE,OAAQ,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,GAAI,IAAK,OAAQyN,GAAgB,YAAa,IAAK,cAAe,GAAK,CAAC,EACzHzN,EAAE,SAAU,CAAE,IAAK,KAAM,EAAG,IAAK,KAAM,qBAAsB,MAAO,CAAE,WAAY,2BAA4B,UAAW,6BAA8B,CAAE,CAAC,EAG1JA,EAAE,IAAK,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,2BAA4B,CAAE,EAAG,CACrEA,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,GAAI,GAAI,OAAQyN,GAAgB,YAAa,IAAK,cAAe,EAAI,CAAC,EACtHzN,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,OAAQ0N,GAAe,YAAa,IAAK,cAAe,EAAI,CAAC,EACtH1N,EAAE,SAAU,CAAE,IAAK,IAAK,EAAG,IAAK,KAAM,qBAAsB,MAAO,CAAE,WAAY,0BAA2B,UAAW,+BAAgC,CAAE,CAAC,EAC1JA,EAAE,SAAU,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,GAAI,EAAG,EAAG,KAAM,oBAAqB,OAAQ,wBAAyB,YAAa,GAAI,CAAC,EAC7HA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,IAAK,EAAG,EAAG,WAAY,SAAU,WAAY2N,GAAM,SAAU,GAAI,KAAM,sBAAuB,EAAG,MAAM,CACpI,CAAC,EACD3N,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,IAAK,GAAI,GAAI,EAAG,EAAG,KAAM,OAAQ,OAAQyN,GAAgB,cAAe,GAAK,MAAO,CAAE,UAAW,6BAA8B,CAAE,CAAC,EAG/JzN,EAAE,IAAK,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,2BAA4B,CAAE,EAAG,CACrEA,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,GAAI,IAAK,OAAQyN,GAAgB,YAAa,IAAK,cAAe,EAAI,CAAC,EACvHzN,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,IAAK,GAAI,IAAK,GAAI,IAAK,OAAQ0N,GAAe,YAAa,IAAK,cAAe,EAAI,CAAC,EACvH1N,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,OAAQ0N,GAAe,YAAa,IAAK,cAAe,EAAI,CAAC,EACtH1N,EAAE,SAAU,CAAE,IAAK,IAAK,EAAG,IAAK,KAAM,qBAAsB,MAAO,CAAE,WAAY,2BAA4B,UAAW,+BAAgC,CAAE,CAAC,EAC3JA,EAAE,SAAU,CAAE,IAAK,IAAK,EAAG,IAAK,KAAM0N,GAAe,MAAO,CAAE,WAAY,2BAA4B,UAAW,kCAAmC,CAAE,CAAC,EACvJ1N,EAAE,SAAU,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,IAAK,EAAG,EAAG,KAAM,oBAAqB,OAAQ,wBAAyB,YAAa,GAAI,CAAC,EAC9HA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,IAAK,EAAG,IAAK,WAAY,SAAU,WAAY2N,GAAM,SAAU,GAAI,KAAM,sBAAuB,EAAG,MAAM,CACtI,CAAC,EACD3N,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,IAAK,GAAI,IAAK,EAAG,EAAG,KAAM,OAAQ,OAAQyN,GAAgB,cAAe,GAAK,MAAO,CAAE,UAAW,6BAA8B,CAAE,CAAC,EAGhKzN,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,IAAK,GAAI,IAAK,EAAG,EAAG,KAAM,oBAAqB,OAAQ,wBAAyB,YAAa,GAAI,CAAC,EAC/HA,EAAE,OAAQ,CAAE,IAAK,KAAM,EAAG,IAAK,EAAG,IAAK,WAAY2N,GAAM,SAAU,GAAI,KAAM,sBAAuB,EAAG,MAAM,EAC7G3N,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,IAAK,EAAG,GAAI,KAAMyN,GAAgB,YAAa,GAAK,CAAC,EAC1FzN,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,IAAK,EAAG,EAAG,KAAMyN,EAAe,CAAC,EACtEzN,EAAE,OAAQ,CAAE,IAAK,KAAM,EAAG,GAAI,EAAG,IAAK,WAAY,SAAU,WAAY2N,GAAM,SAAU,GAAI,KAAM,qBAAsB,EAAGnL,EAAE,UAAU,CAAC,CAC5I,CAAC,EAGDxC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,OAAQ,WAAY2N,GAAM,SAAU,OAAQ,MAAO,oBAAqB,CAAE,EAAG,CACxJ3N,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,4BAA6B,CAAE,EAAGwC,EAAE,WAAW,CAAC,EAC1FxC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,4BAA6B,CAAE,EAAGwC,EAAE,cAAc,CAAC,EAC7FxC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,4BAA6B,CAAE,EAAGwC,EAAE,cAAc,CAAC,CACjG,CAAC,CACL,CAAC,CACL,CAAC,CAAC,EACFxC,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,QAAS,OAAQ,SAAU,OAAQ,IAAK,KAAM,CAAE,EAChH,CAAC,aAAc,cAAewC,EAAE,cAAc,CAAC,EAAE,IAAKD,GAClDvC,EAAE,OAAQ,CAAE,IAAKuC,EAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,6BAA8B,WAAYoL,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CAC9S3N,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY0N,EAAc,CAAE,CAAC,EAChHnL,CACJ,CAAC,CACL,CACJ,CACJ,CAAC,EAGKkN,GAAYvB,IAAWlO,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,QAAS,MAAO,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,aAAc,MAAO,CAAE,EAAG,CAChPA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,IAAK,MAAO,OAAQ,MAAO,iBAAkB,MAAO,MAAO,kBAAmB,aAAc,MAAO,WAAY,4BAA6B,OAAQ,sCAAuC,UAAW8N,GAAW,iBAAmB,cAAc,IAAM4B,EAAG,KAAM,WAAY,yCAA0C,CAAE,CAAC,EAChX1P,EAAE,SAAU,CAAE,IAAK,IAAK,UAAW,aAAc,QAAS,IAAM2L,GAAQ,QAAQ,EAAG,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,KAAM,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,OAAQ,OAAQ,WAAY,cAAe,MAAOmC,GAAW,mBAAqB,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAACkB,GAAG,UAAW,CAAE,IAAK,GAAI,CAAC,EAAGxM,EAAE,eAAe,CAAC,CAAC,EAC5cxC,EAAE,SAAU,CAAE,IAAK,IAAK,UAAW,aAAc,QAAS,IAAM2L,GAAQ,MAAM,EAAG,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,KAAM,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,OAAQ,OAAQ,WAAY,cAAe,MAAQmC,GAAgC,mBAArB,mBAAyC,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAACkB,GAAG,UAAW,CAAE,IAAK,GAAI,CAAC,EAAGxM,EAAE,aAAa,CAAC,CAAC,CAC7c,CAAC,EAEKmN,GAAcC,GAAQ5P,EAAE,SAAU,CAAE,IAAK4P,GAAO,OAAQ,UAAW,cAAe,QAAS9C,GAAe,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,aAAc,OAAQ,aAAc,MAAO,mBAAoB,MAAO,iBAAkB,OAAQ,aAAc,MAAO,OAAQ,sCAAuC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAACkC,GAAG,kBAAmB,CAAE,IAAK,GAAI,CAAC,EAAGxM,EAAE,aAAa,CAAC,CAAC,EAGjhBqN,GAAY7P,EAAE,MAAO,CAAE,IAAK,YAAa,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,SAAU,SAAU,aAAc,MAAO,CAAE,EAAG,CACxMA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,sCAAuC,WAAY,iBAAkB,CAAE,EAAG,CAC5LA,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYmO,EAAO,CAAE,CAAC,EACzGnO,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,WAAY2N,GAAM,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGG,GAAWtL,EAAE,eAAe,EAAIA,EAAE,gBAAgB,CAAC,EAC1KxC,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASyO,GAAU,MAAO,CAAE,kBAAmB,OAAQ,QAAS,UAAW,aAAc,MAAO,OAAQ,aAAazC,GAAS,iCAAmC,0BAA0B,GAAI,WAAYA,GAAS,iCAAmC,4BAA6B,MAAOA,GAASwB,GAAU,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,WAAY,UAAW,CAAE,EAAGxB,GAASxJ,EAAE,eAAe,EAAIA,EAAE,aAAa,CAAC,CACxf,CAAC,EAIDxC,EAAE,MAAO,CAAE,IAAK,WAAY,MAAO,CAAE,SAAU,UAAW,CAAE,EAAG,CAC3DA,EAAE,MAAO,CAAE,IAAK,OAAQ,UAAW,QAAS,MAAO,CAAE,WAAY2N,GAAM,SAAU,OAAQ,WAAY,KAAM,MAAO,sBAAuB,UAAW,YAAa,QAAS,YAAa,UAAW,OAAQ,UAAW,OAAQ,OAAQnB,GAAe,OAAS,YAAa,WAAYA,GAAe,OAAS,OAAQ,WAAY,YAAa,CAAE,EAAG8B,EAAQ,EAC5V,CAAC9B,IAAgBxM,EAAE,SAAU,CAAE,IAAK,SAAU,QAAS,IAAMyM,GAAgB,EAAI,EAAG,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,OAAQ,OAAQ,WAAY,oCAAqC,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CACnXuC,GAAG,SAAU,CAAE,IAAK,IAAK,SAAU,MAAO,CAAC,EAC3CxM,EAAE,aAAa,CACnB,CAAC,CACL,CAAC,CACL,CAAC,EAEKsN,GAAepG,IAAa1J,EAAE,SAAU,CAAE,IAAK,SAAU,QAAS,IAAM+L,GAAe,EAAI,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,aAAa+B,GAAW,kCAAoC,gCAAgC,GAAI,WAAYA,GAAW,mCAAqC,kCAAmC,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,UAAW,QAAS,aAAc,MAAO,CAAE,EAAG,CACzgB9N,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY8N,GAAW,mCAAqC,kCAAmC,OAAQ,aAAaA,GAAW,mCAAqC,iCAAiC,EAAG,CAAE,EAAGkB,GAAG,YAAa,CAAE,MAAOZ,GAAa,SAAU,MAAO,CAAC,CAAC,EAChZpO,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,CAAE,CAAE,EAAG,CACzCA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,cAAc,CAAC,EACtIxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,GAAIoK,GAAiB,GAAK,EAAI5H,EAAE,wBAAyB,CAAE,OAAQ4H,CAAc,CAAC,EAAI5H,EAAE,iBAAiB,CAAC,CACjO,CAAC,EACDwM,GAAG,mBAAoB,CAAE,MAAO,kBAAmB,CAAC,CACxD,CAAC,EAEGe,GACJ,GAAIvG,EAAkB,CAClB,IAAMwG,EAAW7F,EACX8F,GAAS1G,GAAoB,IAAI,MAAM,EAAE,EAAE,IAAI,CAAC2G,GAAIhO,KACtDlC,EAAE,MAAO,CAAE,IAAKkC,GAAG,MAAO,CAAE,KAAM,EAAG,SAAU,OAAQ,YAAa,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,OAAQ,4CAA6C,WAAY,kCAAmC,WAAYyL,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAOH,EAAQ,CAAE,EAAG0C,EAAE,CAAC,EAC7TH,GAAQ/P,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,UAAW,eAAgB,CAAE,EAAG,CACvE,CAACgQ,GAAYL,GAAW,OAAO,EAC/B3P,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,aAAc,KAAM,CAAE,EAAG,CAC1GA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,iCAAkC,OAAQ,2CAA4C,CAAE,EAAGgP,GAAG,gBAAiB,CAAE,MAAOtB,EAAc,CAAC,CAAC,EAC5R1N,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,cAAc,CAAC,CACxJ,CAAC,EACDxC,EAAE,IAAK,CAAE,IAAK,MAAO,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,aAAa,CAAC,EACvIxC,EAAE,MAAO,CAAE,IAAK,QAAS,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,eAAgB,SAAU,aAAc,OAAQ,SAAU,MAAO,CAAE,EAAGiQ,CAAK,EACtJD,EACMhQ,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,UAAW,SAAU,QAAS,YAAa,aAAc,OAAQ,OAAQ,4CAA6C,WAAY,kCAAmC,UAAW,eAAgB,CAAE,EAAG,CAClSA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,kCAAmC,OAAQ,4CAA6C,aAAc,MAAO,CAAE,EAAGgP,GAAG,WAAY,CAAE,MAAOtB,GAAe,SAAU,MAAO,CAAC,CAAC,EAClT1N,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,iBAAiB,CAAC,EACpHxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGwC,EAAE,sBAAsB,CAAC,CAChI,CAAC,EACCxC,EAAE,MAAO,CAAE,IAAK,MAAO,EAAG,CACxBA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,aAAc,KAAM,CAAE,EAAGwC,EAAE,mBAAmB,CAAC,EAC/IxC,EAAE,QAAS,CAAE,IAAK,KAAM,IAAK,MAAO,MAAOkM,EAAU,SAAWxK,IAAM,CAAEyK,EAAYzK,GAAE,OAAO,MAAM,QAAQ,MAAO,EAAE,EAAE,MAAM,EAAGyO,EAAe,CAAC,EAAO/D,IAAUC,GAAY,EAAE,CAAG,EAAG,SAAUpC,EAA4B,UAAW,GAAM,aAAc,gBAAiB,WAAY,GAAO,KAAM,OAAQ,UAAW,UAAW,QAAS,SAAU,UAAWkG,GAAiB,YAAa5G,EAAmB/G,EAAE,oBAAoB,EAAIA,EAAE,gBAAgB,EAAG,MAAO,CAAE,MAAO,OAAQ,UAAW,SAAU,cAAe,MAAO,aAAc,OAAQ,OAAQ,aAAa0J,EAAS,OAAU2C,IAAc5E,EAA6B,iCAAmC,4BAA+B,2BAA2B,GAAI,WAAY,oBAAqB,MAAO,mBAAoB,WAAY0D,GAAM,SAAU,OAAQ,WAAY,IAAK,QAAS,OAAQ,QAAS,OAAQ,aAAcvB,GAAW,MAAQ,MAAO,CAAE,CAAC,EAC14BA,IAAYpM,EAAE,IAAK,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,gBAAiB,SAAU,SAAU,OAAQ,UAAW,CAAE,EAAGoM,EAAQ,EACtHpM,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,MAAO,aAAc,MAAO,CAAE,EAAG,CAC/GA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,QAAS,YAAa,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,mBAAoB,CAAE,EAAG,CACpOA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,GAAI,CAAE,EAAGwC,EAAE,cAAc,CAAC,EAClHxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAOiK,EAA6BuD,GAAU,kBAAmB,CAAE,EAAG,CAACwB,GAAG/E,EAA6B,kBAAoB,WAAY,CAAE,IAAK,GAAI,CAAC,EAAGA,EAA6BzH,EAAE,kBAAkB,EAAIA,EAAE,gBAAgB,CAAC,CAAC,CACjW,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,QAAS,YAAa,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,mBAAoB,CAAE,EAAG,CACrOA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,GAAI,CAAE,EAAGwC,EAAE,aAAa,CAAC,EACjHxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAOkK,EAA8BsD,GAAU,kBAAmB,CAAE,EAAG,CAACwB,GAAG9E,EAA8B,kBAAoB,WAAY,CAAE,IAAK,GAAI,CAAC,EAAGA,EAA8B1H,EAAE,kBAAkB,EAAIA,EAAE,gBAAgB,CAAC,CAAC,CACpW,CAAC,CACL,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAC/DA,EAAE,SAAU,CAAE,IAAK,KAAM,QAAS8O,GAAkB,SAAU,CAACD,GAAY,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAYA,GAAanB,GAAgB,4BAA6B,MAAOmB,GAAa,uBAAyB,uBAAwB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQA,GAAa,UAAY,cAAe,UAAWA,GAAa,6CAA+C,MAAO,CAAE,EAAG,CAACG,GAAG/E,EAA6B,kBAAoB,WAAY,CAAE,IAAK,GAAI,CAAC,EAAGA,EAA6BzH,EAAE,kBAAkB,EAAIA,EAAE,gBAAgB,CAAC,CAAC,EACpsBxC,EAAE,SAAU,CAAE,IAAK,KAAM,QAASiN,GAA0B,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,yCAA0C,WAAY,cAAe,MAAO,gBAAiB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAAC+B,GAAG,WAAY,CAAE,IAAK,GAAI,CAAC,EAAGxM,EAAE,iBAAiB,CAAC,CAAC,CAC5b,CAAC,CACL,CAAC,CACT,CAAC,CACL,SAAWuL,GAAc,CACrB,IAAMqC,EAAW,CAAC5N,EAAE,iBAAiB,EAAGA,EAAE,iBAAiB,EAAGA,EAAE,iBAAiB,CAAC,EAClFuN,GAAQ/P,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,UAAW,gBAAiB,CAAE,EAAG,CACrEA,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,aAAc,MAAO,CAAE,EAAG,CAC3GA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAAGgP,GAAG,kBAAmB,CAAE,MAAOvB,GAAgB,SAAU,OAAQ,UAAW,2BAA4B,CAAC,CAAC,EACjOzN,EAAE,MAAO,CAAE,IAAK,IAAK,EAAG,CACpBA,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG8N,GAAWtL,EAAE,yBAAyB,EAAIA,EAAE,uBAAuB,CAAC,EACvMxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,wBAAwB,CAAC,CAC/H,CAAC,CACL,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,SAAU,QAAS,CAAE,EACnMoQ,EAAS,IAAI,CAAC7N,EAAOL,KAAM,CACvB,IAAMmO,GAAO3D,GAAcxK,GACrBoO,GAAS5D,KAAgBxK,GAC/B,OAAOlC,EAAE,MAAO,CAAE,IAAKkC,GAAG,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,UAAWA,GAAI,sCAAwC,OAAQ,WAAY,iBAAkB,WAAYmO,GAAO,kCAAoC,aAAc,CAAE,EAAG,CAChRrQ,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAYqQ,GAAO,kCAAqCC,GAAS,mCAAqC,4BAA8B,OAAQ,aAAaD,GAAO,iCAAoCC,GAAS,kCAAoC,0BAA2B,GAAI,WAAY,SAAU,CAAE,EAC3aD,GACMrB,GAAG,WAAY,CAAE,MAAOtB,GAAe,SAAU,MAAO,CAAC,EACzD1N,EAAE,OAAQ,CAAE,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYsQ,GAAS7C,GAAiB,uBAAwB,UAAW6C,GAAS,kCAAoC,MAAO,CAAE,CAAC,CAAC,EAClNtQ,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAOqQ,GAAO,mBAAsBC,GAAS,mBAAqB,mBAAqB,WAAY,WAAY,CAAE,EAAG/N,CAAK,CAChL,CAAC,CACL,CAAC,CACL,CACJ,CAAC,CACL,MAAWyL,IAAeC,EACtB8B,GAAQ/P,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,UAAW,eAAgB,CAAE,EAAG,CACrE2P,GAAW,OAAO,EAClB3P,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG8N,GAAWtL,EAAE,sBAAsB,EAAIA,EAAE,2BAA2B,CAAC,EAChNxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAG8N,GAAWtL,EAAE,qBAAqB,EAAIA,EAAE,0BAA0B,CAAC,EACtLsN,GACAD,GACA7B,IAAehO,EAAE,MAAO,CAAE,IAAK,aAAc,MAAO,CAAE,UAAW,KAAM,CAAE,EAAG,CACxEA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,aAAc,KAAM,CAAE,EAAGwC,EAAE,uBAAuB,CAAC,EACnJxC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,aAAc,OAAQ,OAAQ,aAAawO,GAAY,4BAA8B,2BAA2B,GAAI,WAAY,oBAAqB,QAAS,YAAa,aAAc,MAAO,CAAE,EAC7NxO,EAAE,WAAY,CAAE,IAAK,MAAO,MAAOmJ,EAAa,SAAWzH,GAAM,CAAE0H,EAAe1H,EAAE,OAAO,KAAK,EAAOA,EAAE,OAAO,MAAM,KAAK,EAAE,OAAS,GAAK,OAAOgJ,IAAsB,YAAYA,GAAkB,CAAG,EAAG,KAAM,EAAG,YAAalI,EAAE,kCAAkC,EAAG,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,cAAe,MAAO,mBAAoB,WAAYmL,GAAM,SAAU,OAAQ,WAAY,KAAM,UAAW,MAAO,CAAE,CAAC,CAAC,EACxd3N,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAC/DA,EAAE,SAAU,CAAE,IAAK,OAAQ,UAAW,cAAe,QAAS,IAAM8J,EAAsB,EAAI,EAAG,MAAO,CAAE,KAAM,OAAQ,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,4BAA6B,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAACkF,GAAG,YAAa,CAAE,IAAK,GAAI,CAAC,EAAGxM,EAAE,aAAa,CAAC,CAAC,EAC5exC,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS2I,EAAW,SAAU,CAAC6F,GAAW,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAYA,GAAYf,GAAiB,4BAA6B,MAAOe,GAAY,sBAAwB,uBAAwB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQA,GAAY,UAAY,cAAe,UAAWA,GAAY,8CAAgD,MAAO,CAAE,EAAGhM,EAAE,qBAAqB,CAAC,CAC7jB,CAAC,CACL,CAAC,EACDyL,GAAgBjO,EAAE,MAAO,CAAE,IAAK,cAAe,MAAO,CAAE,UAAW,MAAO,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,4CAA6C,WAAY,iCAAkC,CAAE,EAAG,CAC9QgP,GAAG,kBAAmB,CAAE,IAAK,IAAK,MAAOtB,GAAe,UAAW,6BAA8B,CAAC,EAClG1N,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,GAAI,CAAE,EAAGwC,EAAE,0BAA0B,CAAC,CAClI,CAAC,CACL,CAAC,EACMsL,GAEPiC,GAAQ/P,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,UAAW,gBAAiB,CAAE,EAAG,CACxEA,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,mBAAmB,CAAC,EACjKxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,kBAAkB,CAAC,EACxIxC,EAAE,SAAU,CAAE,IAAK,MAAO,UAAW,aAAc,QAAS,IAAM,CAAEkN,GAA2C,EAAOjC,GAAiB,SAASH,GAAkB,CAAG,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAY2C,GAAgB,MAAO,sBAAuB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,UAAW,6CAA8C,CAAE,EAAG,CAACuB,GAAG,UAAW,CAAE,IAAK,GAAI,CAAC,EAAGxM,EAAE,iBAAiB,CAAC,CAAC,CAChkB,CAAC,EAGDuN,GAAQ/P,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,UAAW,gBAAiB,CAAE,EAAG,CACxEA,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,iBAAiB,CAAC,EAC/JxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAG,uEAAuE,EAC1LA,EAAE,SAAU,CAAE,IAAK,OAAQ,UAAW,cAAe,QAAS,IAAM,CAAEkN,GAA2C,EAAGpD,EAAsB,EAAI,CAAG,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,2CAA4C,WAAY,kCAAmC,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,UAAW,QAAS,aAAc,MAAO,CAAE,EAAG,CACrd9J,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,kCAAmC,OAAQ,2CAA4C,CAAE,EAAGgP,GAAG,YAAa,CAAE,MAAOtB,GAAe,SAAU,MAAO,CAAC,CAAC,EAC7S1N,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,CAAE,CAAE,EAAG,CACzCA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,iBAAiB,CAAC,EACzIxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGwC,EAAE,oBAAoB,CAAC,CACjJ,CAAC,EACDwM,GAAG,mBAAoB,CAAE,MAAO,kBAAmB,CAAC,CACxD,CAAC,EACDhP,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,aAAc,MAAO,CAAE,EAAG,CACzGA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,OAAQ,MAAO,WAAY,2BAA4B,CAAE,CAAC,EAClGA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGwC,EAAE,mBAAmB,CAAC,EAC/KxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,OAAQ,MAAO,WAAY,2BAA4B,CAAE,CAAC,CACtG,CAAC,EACDA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,aAAc,OAAQ,OAAQ,aAAauO,GAAY,4BAA8B,2BAA2B,GAAI,WAAY,oBAAqB,QAAS,YAAa,aAAc,MAAO,CAAE,EAC7NvO,EAAE,WAAY,CAAE,IAAK,MAAO,MAAOiJ,EAAY,SAAWvH,GAAM,CAAEwH,EAAcxH,EAAE,OAAO,KAAK,EAAOA,EAAE,OAAO,MAAM,KAAK,EAAE,OAAS,GAAK,OAAOgJ,IAAsB,YAAYA,GAAkB,CAAG,EAAG,KAAM,EAAG,YAAalI,EAAE,wBAAwB,EAAG,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,cAAe,MAAO,mBAAoB,WAAYmL,GAAM,SAAU,SAAU,WAAY,IAAK,UAAW,MAAO,CAAE,CAAC,CAAC,EAC7c3N,EAAE,SAAU,CAAE,IAAK,UAAW,QAAS,IAAM,CAAEkN,GAA2C,EAAGxE,EAAe,CAAG,EAAG,SAAU,CAAC6F,IAAazF,IAAqB,aAAc,MAAO,CAAE,MAAO,OAAQ,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAayF,IAAazF,IAAqB,aAAgB2E,GAAiB,4BAA6B,MAAQc,IAAazF,IAAqB,aAAgB,sBAAwB,uBAAwB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAASyF,IAAazF,IAAqB,aAAgB,UAAY,cAAe,UAAYyF,IAAazF,IAAqB,aAAgB,8CAAgD,MAAO,CAAE,EAAGA,IAAqB,aAAetG,EAAE,kBAAkB,EAAIA,EAAE,eAAe,CAAC,CACn4B,CAAC,EAeL,IAAM+N,GAAqB,QACrBC,GAAqB,yEAAyED,EAAkB,GAChHE,GAAY,CACd,IAAK,CAAE,KAAM,QAAS,OAAQ,kCAAgC,KAAM,eAAgB,IAAK,GAAGD,EAAkB,mBAAmBD,EAAkB,UAAW,EAC9J,IAAK,CAAE,KAAM,UAAW,OAAQ,6BAA2B,KAAM,iBAAkB,IAAK,GAAGC,EAAkB,mBAAmBD,EAAkB,gBAAiB,EACnK,MAAO,CAAE,KAAM,QAAS,OAAQ,YAAa,KAAM,eAAgB,IAAK,GAAGC,EAAkB,mBAAmBD,EAAkB,iBAAkB,CACxJ,EAQMG,IAPW,IAAM,CACnB,IAAMC,GAAM,UAAU,WAAa,IAAM,KAAO,UAAU,UAAY,IACtE,MAAI,wBAAwB,KAAKA,CAAE,GAAK,CAAC,WAAW,KAAKA,CAAE,EAAU,MACjE,OAAO,KAAKA,CAAE,EAAU,MACxB,SAAS,KAAKA,CAAE,GAAK,CAAC,WAAW,KAAKA,CAAE,EAAU,QAC/C,KACX,GAC4B,EACtBC,GAAU,CAAC,MAAO,MAAO,OAAO,EAAE,OAAQC,GAAMA,IAAMH,EAAU,EAChEI,GAAUC,GAAQ,CAAE,GAAI,CAAE,OAAO,KAAKA,EAAK,SAAU,UAAU,CAAG,MAAY,CAAC,CAAE,EAEjFC,GAAgB1E,IAAiBtM,EAAE,MAAO,CAAE,IAAK,WAAY,UAAW,oBAAqB,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,OAAQ,oBAAqB,MAAO,QAAS,SAAU,OAAQ,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,oBAAqB,UAAW,0EAA2E,SAAU,SAAU,OAAQ,GAAI,UAAW,eAAgB,CAAE,EAAG,CAC7cA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,qCAAsC,CAAE,EAAG,CAC9JA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,WAAY,GAAI,CAAE,EAAG,CACxDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,UAAU,CAAC,EAC7GxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,SAAS,CAAC,CACjG,CAAC,EACDxC,EAAE,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,WAAY2N,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAOH,GAAS,QAAS,UAAW,aAAc,MAAO,WAAY,iCAAkC,OAAQ,2CAA4C,CAAE,EAAGhL,EAAE,YAAY,CAAC,CAC1Q,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,eAAgB,CAAE,EACvDA,EAAE,SAAU,CAAE,IAAK,IAAK,QAAS,IAAM8Q,GAAOL,GAAUC,EAAU,EAAE,GAAG,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,4CAA6C,WAAY,mCAAoC,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,UAAW,OAAQ,CAAE,EAAG,CACvX1Q,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,mCAAoC,OAAQ,4CAA6C,MAAOuN,EAAS,CAAE,EAAGvN,EAAE,IAAK,CAAE,UAAWyQ,GAAUC,EAAU,EAAE,KAAM,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EAClV1Q,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACtDA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGyQ,GAAUC,EAAU,EAAE,IAAI,EAC/I1Q,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,MAAO,qBAAsB,UAAW,KAAM,CAAE,EAAG,oCAAiCyQ,GAAUC,EAAU,EAAE,MAAM,EAAE,CACzL,CAAC,EACD1B,GAAG,cAAe,CAAE,MAAOvB,EAAe,CAAC,CAC/C,CAAC,CAAC,EACNzN,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,aAAc,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAC7G4Q,GAAQ,IAAKC,GAAM7Q,EAAE,SAAU,CAAE,IAAK6Q,EAAG,QAAS,IAAMC,GAAOL,GAAUI,CAAC,EAAE,GAAG,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,OAAQ,WAAY,cAAe,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,UAAW,OAAQ,CAAE,EAAG,CACrU7Q,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,4BAA6B,OAAQ,sCAAuC,MAAO,kBAAmB,CAAE,EAAGA,EAAE,IAAK,CAAE,UAAWyQ,GAAUI,CAAC,EAAE,KAAM,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EACtU7Q,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACtDA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGyQ,GAAUI,CAAC,EAAE,IAAI,EACpI7Q,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGyQ,GAAUI,CAAC,EAAE,MAAM,CAC3I,CAAC,EACD7B,GAAG,cAAe,CAAE,MAAO,kBAAmB,CAAC,CACnD,CAAC,CAAC,CAAC,EACPhP,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,UAAW,sCAAuC,WAAY,4BAA6B,CAAE,EAAG,CACtMgP,GAAG,WAAY,CAAE,IAAK,IAAK,MAAO,kBAAmB,CAAC,EACtDhP,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,SAAS,CAAC,CACpH,CAAC,CACL,CAAC,EAEKyO,GAASjR,EAAE,MAAO,CAAE,IAAK,SAAU,UAAW,iBAAkB,MAAO,CAAE,SAAU,WAAY,UAAW,OAAQ,WAAY,OAAQ,UAAW,sCAAuC,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,IAAK,OAAQ,SAAU,MAAO,CAAE,EAAG,CACrSA,EAAE,SAAU,CAAE,IAAK,KAAM,QAAS,IAAMuM,GAAkB9L,GAAM,CAACA,CAAC,EAAG,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,aAAc,MAAO,mBAAoB,MAAO,iBAAkB,OAAQ,aAAc,OAAQ,OAAQ,aAAa6L,GAAgB,kCAAoC,2BAA2B,GAAI,WAAYA,GAAgB,mCAAqC,4BAA6B,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,WAAY,UAAW,CAAE,EAAG,CAClgB0C,GAAG,cAAe,CAAE,IAAK,IAAK,MAAOvB,EAAe,CAAC,EACrDzN,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,wBAAwB,CAAC,EAC9HwM,GAAG,kBAAmB,CAAE,IAAK,IAAK,MAAO,mBAAoB,MAAO,CAAE,SAAU,OAAQ,UAAW1C,GAAgB,iBAAmB,eAAgB,WAAY,eAAgB,CAAE,CAAC,CACzL,CAAC,EACDtM,EAAE,SAAU,CAAE,IAAK,WAAY,UAAW,UAAW,QAAS,IAAMmL,IAAsBA,GAAmB,EAAI,EAAG,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,WAAY,OAAQ,OAAQ,OAAQ,MAAO,mBAAoB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAAC6D,GAAG,eAAgB,CAAE,IAAK,GAAI,CAAC,EAAGxM,EAAE,yBAAyB,CAAC,CAAC,EACzYwO,EACJ,CAAC,EAIKE,GAAmBhG,IAAmB,OAAO,OAAW,KAAe,OAAO,kBAC9ElL,EAAE,OAAO,kBAAmB,CAC1B,IAAK,eACL,OAAQ,GACR,SAAU,GACV,QAAS,IAAMmL,GAAmB,EAAK,EACvC,QAAS,CACL,UAAW,MAAM,QAAQG,EAAgB,GAAKA,GAAiB,OAAS,EACxE,YAAaF,GACb,YAAaL,GAAgB,aAAe,WAC5C,UAAWM,EACf,EACA,SAAUA,GACV,QAASE,GACT,SAAUC,EACd,CAAC,EACC,KAEA2F,GAAanR,EAAE,MAAO,CAAE,IAAK,QAAS,MAAOyL,GAC7C,CAAE,KAAM,EAAG,SAAU,EAAG,MAAO,OAAQ,SAAU,WAAY,SAAU,SAAU,QAAS,OAAQ,cAAe,SAAU,OAAQ,MAAO,EAC1I,CAAE,KAAM,eAAgB,SAAU,mBAAoB,SAAU,WAAY,SAAU,SAAU,QAAS,OAAQ,cAAe,SAAU,OAAQ,OAAQ,CAAE,EAAG,CACjKzL,EAAE,MAAO,CAAE,IAAK,SAAU,UAAW,mBAAoB,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,OAAQ,cAAe,SAAU,QAAS,WAAY,CAAE,EAC3JA,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,QAAS,MAAO,OAAQ,OAAQ,MAAO,CAAE,EAAG,CACtEA,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,WAAY2N,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,MAAO,aAAc,MAAO,CAAE,EAAGU,EAAM,EACrMoB,GACAM,GACAkB,EACJ,CAAC,CAAC,EACNC,EACJ,CAAC,EAGKE,GAAWtF,IAAepC,IAAc1J,EAAE,MAAO,CAAE,IAAK,UAAW,QAAS,IAAM+L,GAAe,EAAK,EAAG,MAAO,CAAE,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,QAAS,OAAQ,WAAY,kCAAmC,eAAgB,aAAc,UAAW,eAAgB,CAAE,EACzV/L,EAAE,MAAO,CAAE,QAAU0B,GAAMA,EAAE,gBAAgB,EAAG,MAAO,CAAE,MAAO,OAAQ,SAAU,QAAS,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,eAAgB,UAAW,yEAA0E,SAAU,QAAS,CAAE,EAAG,CACpS1B,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,qCAAsC,CAAE,EAAG,CAChKA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYmO,EAAO,CAAE,CAAC,EACvGnO,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,WAAY,GAAI,CAAE,EAAG,CACzDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG8N,GAAWtL,EAAE,sBAAsB,EAAIA,EAAE,2BAA2B,CAAC,EACvKxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAG,GAAG8N,GAAW,QAAU,QAAQ,gBAAa,CAChI,CAAC,EACD9N,EAAE,SAAU,CAAE,IAAK,IAAK,QAAS,IAAM+L,GAAe,EAAK,EAAG,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,MAAO,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAGiD,GAAG,UAAU,CAAC,CAC/R,CAAC,EACDhP,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,gBAAiB,CAAE,EAAG,CAC5DA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,YAAa,IAAK,aAAc,OAAQ,SAAU,SAAU,WAAY,OAAQ,QAAS,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EACzMA,EAAE,MAAO,CAAE,IAAK0J,GAAW,IAAKlH,EAAE,gBAAgB,EAAG,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,OAAQ,CAAE,CAAC,CAAC,EAC5IxC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,OAAQ,UAAW,MAAO,CAAE,EAAG,EACjIoK,GAAiB,IAAM,GAAKpK,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAClHA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAY2N,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,SAAS,KAAK,IAAI,EAAGtD,IAAgB,CAAC,CAAC,MAAMD,GAAiB,CAAC,EAAE,EACpLpK,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,IAAK,KAAM,CAAE,EAAG,MAAM,KAAK,CAAE,OAAQoK,GAAiB,CAAE,EAAG,CAACiH,EAAGnP,IAAMlC,EAAE,OAAQ,CAAE,IAAKkC,EAAG,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAaA,EAAI,KAAQmI,IAAgB,GAAK8D,GAAS,4BAA6B,WAAY,iBAAkB,CAAE,CAAC,CAAC,CAAC,CACjU,CAAC,GACA/D,GAAiB,GAAK,GAAKpK,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAC/GA,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASyK,EAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAGuE,GAAG,iBAAiB,CAAC,EACpThP,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASuK,GAAoB,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,OAAQ,OAAQ,aAAaD,GAAe,2BAA6B,kCAAkC,GAAI,WAAYA,GAAe,4BAA8B,mCAAoC,MAAOA,GAAe,mBAAqBiD,GAAU,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAGjD,GAAe,SAAW,MAAM,EAChhBtK,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASwK,EAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAGwE,GAAG,kBAAkB,CAAC,CACzT,CAAC,EACDhP,EAAE,IAAK,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,UAAW,UAAW,SAAU,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,GAAIoK,GAAiB,GAAK,EAAI5H,EAAE,yBAA0B,CAAE,OAAQ4H,CAAc,CAAC,EAAI5H,EAAE,kBAAkB,CAAC,CACtP,CAAC,CACL,CAAC,CACL,CAAC,CACL,EAEM8O,GAAOtR,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,UAAW,QAAS,MAAO,OAAQ,WAAY,eAAgB,MAAO,kBAAmB,CAAE,EAAG,CAACwP,GAAW2B,EAAU,CAAC,EAGhMI,GAAgBrD,IAAWlO,EAAE,oBAAqB,CAAE,IAAK,wBAAyB,CAAC,EACnFwR,GAAkBtD,IAAWlO,EAAE,cAAe,CAAE,IAAK,gBAAiB,CAAC,EACvEyR,GAAiBvD,IAAWlO,EAAE,QAAS,CAAE,IAAK,SAAU,CAAC,EACzD0R,GAAgBxD,IAAWlO,EAAE,aAAc,CAAE,IAAK,eAAgB,CAAC,EACnE2R,GAAmBzD,IAAWlO,EAAE,aAAc,CAAE,IAAK,eAAgB,CAAC,EAItE4R,GAAgB5R,EAAE,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OACrE,4yDAgCJ,CAAE,CAAC,EAIH,OAAIyL,GACOzL,EAAE,MAAO,CAAE,UAAW,WAAY,MAAO,CAAE,KAAM,EAAG,UAAW,EAAG,MAAO,OAAQ,QAAS,OAAQ,cAAe,SAAU,WAAY,eAAgB,MAAO,kBAAmB,CAAE,EAAG,CAAC4R,GAAeT,GAAYC,EAAO,CAAC,EAG9NpR,EAAE,MAAO,CAAE,UAAW,WAAY,MAAO,CAAE,MAAO,MAAO,CAAE,EAAG,CAAC4R,GAAeN,GAAMC,GAAeC,GAAiBC,GAAgBC,GAAeC,GAAkBP,EAAO,CAAC,CACxL,EAUA,SAASS,GAAmBC,EAAI,CAC5B,IAAIC,EAAK,GACT,GAAI,CAAEA,EAAK,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,SAAS,IAAM,GAAK,MAAY,CAAE,OAAO,IAAM,CAC1G,GAAI,CAACA,EAAI,OAAO,KAChB,IAAMC,EAAM,SAAS,cAAc,KAAK,EACxCA,EAAI,aAAa,kBAAmB,EAAE,EACtCA,EAAI,MAAM,QAAU,kNAGpB,SAAS,KAAK,YAAYA,CAAG,EAC7B,IAAMpR,GAAO,IAAM,CACf,IAAM2O,EAAK,SAAS,cAAc,4BAA4B,EAC9D,OAAOA,GAAK,OAAOA,EAAG,aAAa,KAAK,GAAK,EAAE,EAAE,MAAM,KAAK,EAAE,CAAC,GAAK,GACxE,GAAG,EACG0C,EAAQ,IAAM,CAChB,IAAMC,EAAQ,SAAS,cAAc,eAAe,EAC9CC,EAAKD,EAAQ,iBAAiBA,CAAK,EAAI,KACvC1S,EAAI0S,EAAQA,EAAM,sBAAsB,EAAI,KAC5CE,EAAO,iBAAiB,SAAS,eAAe,EACtDJ,EAAI,YAAc,CACd,SAAWpR,EACX,UAAY,OAAO,YAAc,aAAe,KAAK,MAAM,OAAO,OAAO,EACzE,SAAWkR,EAAK,KAAK,MAAMA,EAAG,MAAM,EAAI,UAAO,UAAYA,EAAK,KAAK,MAAMA,EAAG,SAAS,EAAI,UAAO,YAAcA,EAAKA,EAAG,MAAM,QAAQ,CAAC,EAAI,UAC3I,UAAYM,EAAK,iBAAiB,SAAS,EAAE,KAAK,EAAI,WAAaA,EAAK,iBAAiB,aAAa,EAAE,KAAK,EAC7G,UAAYF,EAASC,EAAG,SAAW,KAAO,KAAK,MAAM3S,EAAE,MAAM,EAAI,KAAO,KAAK,MAAMA,EAAE,GAAG,EAAK,SACjG,EAAE,KAAK;AAAA,CAAI,EAGXwS,EAAI,MAAM,UAAY,kBAAoBF,EAAK,KAAK,MAAMA,EAAG,SAAS,EAAI,GAAK,OACnF,EACAG,EAAM,EACN,IAAMI,EAAK,YAAYJ,EAAO,GAAG,EACjC,MAAO,IAAM,CAAE,cAAcI,CAAE,EAAGL,EAAI,OAAO,CAAG,CACpD,CAEA,IAAMM,GAAgCC,GAC3B,IAAM,CACT,GAAIA,GAAmBA,EAAgB,QAAS,CAC5C,IAAMC,EAAgB,IAAM,CACpBD,EAAgB,SAChBA,EAAgB,QAAQ,SAAS,CAC7B,IAAKA,EAAgB,QAAQ,aAC7B,SAAUE,GAAe,CAC7B,CAAC,CAET,EACAD,EAAc,EAEd,WAAWA,EAAe,EAAE,EAC5B,WAAWA,EAAe,GAAG,EAC7B,WAAWA,EAAe,GAAG,EAE7B,sBAAsB,IAAM,CACxB,WAAWA,EAAe,GAAG,CACjC,CAAC,CACL,CACJ,EAMFE,GAAoB,MAAOC,GAAkB,CAC/C,IAAIC,EAAe,KACnB,GAAI,CACID,GAAiB,OAAO,4BACxBC,EAAe,MAAM,OAAO,0BAA0B,uBAAuBD,CAAa,EAElG,MAAY,CAAe,CAC3B,GAAI,CAACC,EAAc,CACf,MAAM;AAAA,kEAAuG,EAC7G,MACJ,CAKA,IAAMjF,EAAO,mEACPkF,EAAOtT,GAAM,OAAOA,CAAC,EAAE,QAAQ,UAAYoG,IAAO,CAAE,IAAK,QAAS,IAAK,OAAQ,IAAK,OAAQ,IAAK,QAAS,GAAEA,CAAC,CAAE,EAI/GyI,EAAcwE,EAAa,QAAU,SAAW,yBAChDA,EAAa,QAAU,SAAW,yBAClCA,EAAa,QAAU,MAAQ,sBAC/B,wBACAzE,EAASyE,EAAa,QAAU,SAAW,mBAC3CA,EAAa,QAAU,SAAW,mBAClCA,EAAa,QAAU,MAAQ,gBAC/B,kBACAE,EAAYF,EAAa,QAAU,SAAW,uBAC9CA,EAAa,QAAU,SAAW,uBAClCA,EAAa,QAAU,MAAQ,oBAC/B,sBACAG,EAAQ,KAAK,IAAI,EAAG,KAAK,IAAI,IAAK,KAAK,MAAMH,EAAa,OAAS,CAAC,CAAC,CAAC,EACtE/Q,EAAO,EAAI,KAAK,GAAK,GACrBmR,EAAY,IAAInR,EAAO,KAAK,IAAI,EAAGkR,EAAQ,GAAG,GAAG,QAAQ,CAAC,CAAC,IAAIlR,EAAK,QAAQ,CAAC,CAAC,GAC9EoR,EAAQ,OAAOL,EAAa,OAAS,QAAQ,EAAE,YAAY,EAC3DM,EAASN,EAAa,aAAe,GACrCO,EAAUP,EAAa,oBAAsB,OAAO,QAAQA,EAAa,mBAAmB,EAAI,CAAC,EACjGQ,EAAc,OAAO,SAASR,EAAa,YAAY,EAAIA,EAAa,aAAeO,EAAQ,OAAO,CAAC,CAAC,CAAE3T,CAAC,IAAMA,GAAKA,EAAE,MAAM,EAAE,OAChI6T,EAAa,OAAO,SAAST,EAAa,WAAW,EAAIA,EAAa,YAAcO,EAAQ,OAC5FG,EAAa,IAAI,KAAKV,EAAa,WAAa,KAAK,IAAI,CAAC,EAAE,mBAAmB,CAAC,EAAG,CAAE,KAAM,UAAW,OAAQ,UAAW,OAAQ,UAAW,OAAQ,EAAM,CAAC,EAI3JW,EAAa1C,GAAM,CACrB,IAAM2C,EAAQhR,EAAE,WAAWqO,CAAC,EAAE,EAC9B,OAAO2C,IAAU,WAAW3C,CAAC,GAAK4C,GAAO5C,CAAC,EAAI2C,CAClD,EACMC,GAAU5C,GAAM,CAClB,IAAItR,EAAI,OAAOsR,CAAC,EAAE,QAAQ,WAAY,EAAE,EAAE,QAAQ,qBAAsB,OAAO,EAAE,QAAQ,wBAAyB,OAAO,EAAE,KAAK,EAChI,OAAAtR,EAAIA,EAAE,QAAQ,2EAA6EK,GAAMA,EAAE,YAAY,CAAC,EACzGL,EAAE,OAAO,CAAC,EAAE,YAAY,EAAIA,EAAE,MAAM,CAAC,CAChD,EAEMmU,GAAY,iMACZC,GAAQ,oMACRC,GAAYT,EAAQ,IAAI,CAAC,CAACtC,EAAGrR,CAAC,EAAG0C,IAAM,CACzC,IAAM2R,EAAS,CAAC,EAAErU,GAAKA,EAAE,QACnBsU,GAAOtU,GAAKA,EAAE,UAAaqU,EAASrR,EAAE,gBAAgB,EAAIA,EAAE,gBAAgB,GAG5EuR,GAASvR,EAAE,aAAasR,EAAG,EAAE,EAC7BE,GAAOD,KAAW,aAAaD,EAAG,GAAKA,GAAMC,GAC7C/L,EAAK6L,EAAS,oBAAsB,eACpC9L,EAAS8L,EAAS,kCAAoC,gCACtDI,GAASJ,EAAS,kCAAoC,+BACtDK,GAAaL,EAAS,kCAAoC,gCAC1DM,EAAaN,EAAS,mBAAqB,mBACjD,MAAO,iHAAiH7L,CAAE,sBAAsBD,CAAM,wEAAwE7F,EAAI,KAAM,QAAQ,CAAC,CAAC;AAAA,2IAC3H+R,EAAM,sBAAsBC,EAAU,MAAML,EAASH,GAAYC,EAAK;AAAA;AAAA,0GAEvGQ,CAAU,yBAAyBtB,EAAIU,EAAU1C,CAAC,CAAC,CAAC;AAAA,sDACxGlD,CAAI,kEAAkEkF,EAAImB,EAAI,CAAC;AAAA;AAAA,2BAGrH,CAAC,EAAE,KAAK,EAAE,EAEJI,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,GAAK,qBACXA,EAAM,MAAM,QAAU,qSACtBA,EAAM,UAAY;AAAA;AAAA,6JAE2HtB,CAAS;AAAA,oEAClGtQ,EAAE,YAAY,CAAC;AAAA;AAAA;AAAA;AAAA,+IAI4DsQ,CAAS;AAAA;AAAA;AAAA;AAAA,+EAIzE1E,CAAW,+DAA+D4E,CAAS;AAAA;AAAA;AAAA,uIAG3BD,CAAK;AAAA,qDACvFpF,CAAI;AAAA;AAAA;AAAA;AAAA,kDAIPA,CAAI,mIAAmInL,EAAE,cAAc,CAAC;AAAA;AAAA,kJAExDqQ,EAAII,CAAK,CAAC;AAAA,gJACZH,CAAS,iCAAiCA,CAAS,sBAAsBnF,CAAI,4CAA4CQ,CAAM,wHAAwHC,CAAW,wDAAwD5L,EAAE,eAAe,CAAC;AAAA;AAAA;AAAA,yDAGnamL,CAAI,oIAAoInL,EAAE,oBAAoB,CAAC,kGAAkG2L,CAAM,MAAMiF,CAAW,aAAaC,CAAU;AAAA,yDAC/S1F,CAAI,oIAAoInL,EAAE,mBAAmB,CAAC,iCAAiCmL,CAAI,+DAA+DkF,EAAIS,CAAU,CAAC;AAAA,yDACjR3F,CAAI,oIAAoInL,EAAE,eAAe,CAAC,+EAA+E0Q,EAAS1Q,EAAE,eAAe,EAAIA,EAAE,mBAAmB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uHAQ/NoR,EAAS;AAAA,sJACsBd,CAAS,iCAAiCA,CAAS;AAAA,4FAC7G1E,CAAW;AAAA,+FACR8E,EAAS1Q,EAAE,kBAAkB,EAAIA,EAAE,sBAAsB,CAAC;AAAA;AAAA,0BAIzI,IAAM6R,EAAS3S,GAAM,CAAMA,EAAE,MAAQ,UAAU4S,EAAM,CAAG,EAClDA,EAAQ,IAAM,CAAMF,EAAM,YAAYA,EAAM,OAAO,EAAG,SAAS,oBAAoB,UAAWC,CAAK,CAAG,EAC5GD,EAAM,cAAc,WAAW,EAAE,iBAAiB,QAASE,CAAK,EAChEF,EAAM,iBAAiB,QAAU1S,GAAM,CAAMA,EAAE,SAAW0S,GAAOE,EAAM,CAAG,CAAC,EAC3E,SAAS,iBAAiB,UAAWD,CAAK,EAC1C,IAAME,EAAQH,EAAM,cAAc,WAAW,EAC7CG,EAAM,iBAAiB,aAAc,IAAM,CAAEA,EAAM,MAAM,YAAc,mCAAoCA,EAAM,MAAM,MAAQ,kBAAoB,CAAC,EACpJA,EAAM,iBAAiB,aAAc,IAAM,CAAEA,EAAM,MAAM,YAAc,2BAA4BA,EAAM,MAAM,MAAQ,kBAAoB,CAAC,EAC5IA,EAAM,iBAAiB,QAAS,IAAM,CAAED,EAAM,EAAG5B,GAAkBC,CAAa,CAAG,CAAC,EACpF,SAAS,KAAK,YAAYyB,CAAK,CACnC,EAKMI,GAAsB,CAAC,CAAE,OAAAhO,EAAQ,aAAAiO,EAAc,cAAA9B,EAAe,MAAA+B,EAAO,UAAAC,EAAW,aAAAC,EAAc,cAAAC,CAAc,IAAM,CACpH,IAAMlH,EAAO,mEACP,CAACmH,EAAaC,CAAc,EAAI,MAAM,SAAS,EAAK,EACpD,CAACpV,EAAKqV,CAAM,EAAI,MAAM,SAAS,IAAI,EACnC,CAACC,EAAaC,CAAc,EAAI,MAAM,SAAS,EAAK,EACpD,CAACC,EAAWC,CAAY,EAAI,MAAM,SAAS,EAAE,EAEnD,MAAM,UAAU,IAAM,CAClB,IAAIC,EAAQ,GACNC,GAAW,SAAY,CACzB,GAAI,CACA,GAAI,CAAC3C,EAAe,OACpB,IAAIzO,GAAO,KACP,OAAOyO,EAAc,sBAAyB,WAAYzO,GAAO,MAAMyO,EAAc,qBAAqB,EACrG,OAAOA,EAAc,iCAAoC,WAAYzO,GAAO,MAAMyO,EAAc,gCAAgC,EAChI,OAAO,4BAA2BzO,GAAO,MAAM,OAAO,0BAA0B,uBAAuByO,CAAa,GACzH0C,GAASnR,IAAQA,GAAK,aAAe,IAAO8Q,EAAO9Q,EAAI,CAC/D,MAAY,CAAe,CAC/B,EACAoR,GAAS,EACT,IAAMC,GAAU7T,IAAM,CAAM2T,GAAS3T,GAAE,QAAUA,GAAE,OAAO,cAAcsT,EAAOtT,GAAE,OAAO,YAAY,CAAG,EACvG,SAAS,iBAAiB,2BAA4B6T,EAAM,EAC5D,IAAMlD,GAAK,YAAYiD,GAAU,IAAK,EACtC,MAAO,IAAM,CAAED,EAAQ,GAAO,cAAchD,EAAE,EAAG,SAAS,oBAAoB,2BAA4BkD,EAAM,CAAG,CACvH,EAAG,CAAC5C,CAAa,CAAC,EAKlB,IAAM6C,EAAkBhP,IAAW,aAAeA,IAAW,WACvDiP,GAAUjP,IAAW,gBAAkBA,IAAW,oBAClDkP,GAAYF,GAAmB,CAACb,EAEhCgB,GAAWhB,GAAac,GAAW,sBAAyBD,EAAkB,wBAA0B,yBACxGI,GAAYjB,EACZnS,EAAE,cAAc,EACfgT,EAAkBhT,EAAE,kBAAkB,EAClCgE,IAAW,oBAAsBhE,EAAE,yBAAyB,EACxDgE,IAAW,eAAiBhE,EAAE,mBAAmB,EAAIA,EAAE,mBAAmB,EACnFqT,EAAYlB,GAAac,GAAW,0CAA6CD,EAAkB,4CAA8C,6CAEjJM,EAAWN,GAAmB,CAACb,EAAcoB,GAAanB,CAAY,GAAK,wBAA2Be,GACtGK,EAAoBR,GAAmB,CAACb,GAAaC,GAAiBqB,GAAcrB,CAAY,GAAK,KACrGsB,EAAc,IAAM,CAAEd,EAAaV,GAAS,EAAE,EAAGQ,EAAe,EAAI,CAAG,EACvEiB,EAAe,IAAM,CAAM,OAAOtB,GAAkB,YAAYA,EAAcM,CAAS,EAAGD,EAAe,EAAK,CAAG,EACjHkB,EAAa1U,GAAM,CAAMA,EAAE,MAAQ,SAAWA,EAAE,eAAe,EAAGyU,EAAa,GAAczU,EAAE,MAAQ,UAAYwT,EAAe,EAAK,CAAK,EAC5IrB,EAASlU,GAAO,OAAO,SAASA,EAAI,YAAY,EAAIA,EAAI,aAAe,KACvE6F,EAAQ7F,GAAO,OAAO,SAASA,EAAI,WAAW,EAAIA,EAAI,YAAc,KAIpE0W,GAAiBC,GAAQ,CAC3B,GAAI,CAACA,EAAK,OAAOA,EACjB,IAAM9C,GAAQhR,EAAE,YAAY8T,CAAG,EAAE,EACjC,OAAO9C,KAAU,YAAY8C,CAAG,GAAKA,EAAM9C,EAC/C,EACM+C,GAAc1C,GAAU,MAAQrO,EAAUqO,EAAS,IAAMrO,EAAU7F,EAAOA,EAAI,MAAQ,IAAO,SAC7FwO,GAASxO,EACRA,EAAI,QAAU,QAAU,kBAAoBA,EAAI,QAAU,SAAW,mBAAqBA,EAAI,QAAU,SAAW,mBAAqB,gBACzI,kBAEA6W,EAAS,MAAM,cAAc,MAAO,CACtC,IAAK,MAAO,MAAOhU,EAAE,qBAAqB,EAC1C,QAAS,IAAMkQ,GAAkBC,CAAa,EAC9C,UAAW,aACX,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,cAAgBmC,EAAc,4BAA8B,6BAA8B,WAAYA,EAAc,4BAA8B,4BAA6B,OAAQ,UAAW,WAAY,UAAW,WAAY,UAAW,CAClW,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,uBAAwB,MAAO,CAAE,MAAO3G,GAAQ,SAAU,MAAO,CAAE,CAAC,EACpH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGxO,EAAO0W,GAAc1W,EAAI,KAAK,GAAK6C,EAAE,gBAAgB,EAAKA,EAAE,gBAAgB,CAAC,EAC3N,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,aAAc,MAAO,CAAE,MAAO,MAAO,OAAQ,OAAQ,WAAY,2BAA4B,CAAE,CAAC,EACnJ,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,WAAYmL,EAAM,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG4I,EAAU,EAC5K,MAAM,cAAc,SAAU,CAC1B,IAAK,IAAK,KAAM,SAAU,MAAO/T,EAAE,gBAAgB,EACnD,QAAUd,GAAM,CAAEA,EAAE,gBAAgB,EAAGqT,EAAetU,IAAK,CAACA,EAAC,CAAG,EAChE,MAAO,CAAE,WAAY,OAAQ,OAAQ,OAAQ,QAAS,EAAG,OAAQ,EAAG,OAAQ,UAAW,QAAS,OAAQ,WAAY,QAAS,CACjI,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,sBAAuB,MAAO,CAAE,MAAO,mBAAoB,SAAU,OAAQ,UAAWqU,EAAc,iBAAmB,eAAgB,WAAY,eAAgB,CAAE,CAAC,CAAC,CACtN,CAAC,EAEK2B,EAAsB,MAAM,cAAc,QAAS,CAAE,IAAK,UAAW,wBAAyB,CAAE,OAElG,iuCA6BJ,CAAE,CAAC,EACGC,GAAS,MAAM,cAAc,SAAU,CAKzC,IAAK,MAAO,UAAW,iBAAkB,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,IAAK,OAAQ,QAAS,wDAAyD,UAAW,mFAAoF,UAAW,aAAc,aAAc,sCAAuC,WAAY,+BAAgC,eAAgB,aAAc,qBAAsB,YAAa,CACrf,EAAG,CACCD,EAGA,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,CAAE,CAAE,EAAG,CACpH,MAAM,cAAc,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,4BAA6B,OAAQ,sCAAuC,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG,CACpWE,GAAajC,GAASlS,EAAE,cAAc,CAAC,EACvC,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAYsT,EAAS,OAAQ,wBAAyB,CAAE,CAAC,CAClO,CAAC,EACDb,EACM,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,MAAO,SAAU,CAAE,CAAE,EAAG,CACxH,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACrG,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,UAAW,GAAM,MAAOE,EAAW,UAAW,GAAI,YAAa3S,EAAE,eAAe,EAAG,SAAWd,GAAM0T,EAAa1T,EAAE,OAAO,KAAK,EAAG,UAAW0U,EAAW,OAAQD,EAAc,MAAO,CAAE,MAAO,QAAS,QAAS,WAAY,aAAc,MAAO,OAAQ,6CAA8C,WAAY,eAAgB,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,QAAS,MAAO,CAAE,CAAC,EACrd,MAAM,cAAc,SAAU,CAAE,IAAK,KAAM,YAAczU,GAAMA,EAAE,eAAe,EAAG,QAASyU,EAAc,MAAO3T,EAAE,cAAc,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,OAAQ,SAAU,CAAE,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,CACzb,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,OAAQ,MAAO,sBAAuB,CAAE,EAAGA,EAAE,iBAAiB,CAAC,CAChI,CAAC,EACC,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,WAAY,IAAK,SAAU,CAAE,CAAE,EAAG,CAClF,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACpG,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGkS,GAASlS,EAAE,iBAAiB,CAAC,EAC7O,MAAM,cAAc,SAAU,CAAE,IAAK,OAAQ,UAAW,gBAAiB,QAAS0T,EAAa,MAAO1T,EAAE,aAAa,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,cAAe,MAAO,uBAAwB,OAAQ,SAAU,CAAE,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,aAAc,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,CACja,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,UAAW,aAAc,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,IAAK,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGmS,EAAYnS,EAAE,gBAAgB,EAAKgE,IAAW,eAAiBhE,EAAE,gBAAgB,EAAKwT,IAAqBR,EAAkBhT,EAAE,gBAAgB,EAAKgE,IAAW,oBAAsBhE,EAAE,yBAAyB,EAAKgE,IAAW,eAAiBhE,EAAE,mBAAmB,EAAIA,EAAE,mBAAmB,EAAM,CACzf,CAAC,CACT,CAAC,EACDgU,EACA,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,UAAW,eAAgB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAKlI,IAAK,IAAM,CACP,IAAMI,EAAYlB,IAAa/C,GAAiBA,EAAc,aAAe,GACvEkE,GAAaC,IAAU,CACzB,GAAI,GAACF,GAAa,CAACjE,GACnB,GAAI,CAAE,IAAMrR,GAAIqR,EAAc,UAAUmE,EAAK,EAAOxV,IAAKA,GAAE,OAAOA,GAAE,MAAM,IAAM,CAAC,CAAC,CAAG,MAC3E,CAAC,CACf,EAGMyV,GAAe,CACjB,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,sCAAuC,WAAY,4BAC3D,MAAOH,EAAY,mBAAqB,sBAAuB,OAAQA,EAAY,UAAY,cAAe,WAAY,UAC9H,EAGA,MAAO,CACH,MAAM,cAAc,SAAU,CAAE,IAAK,aAAc,UAAWA,EAAY,cAAgB,0BAA2B,SAAU,CAACA,EAAW,QAAS,IAAMC,GAAU,EAAK,EAAG,MAAOD,EAAYpU,EAAE,qBAAqB,EAAIA,EAAE,qBAAqB,EAAG,MAAOuU,GAAc,wBAAyB,CAAE,OAHtR,ybAGwS,CAAE,CAAC,EACzT,MAAM,cAAc,SAAU,CAAE,IAAK,aAAc,UAAWH,EAAY,cAAgB,0BAA2B,SAAU,CAACA,EAAW,QAAS,IAAMC,GAAU,EAAI,EAAG,MAAOD,EAAYpU,EAAE,qBAAqB,EAAIA,EAAE,qBAAqB,EAAG,MAAOuU,GAAc,wBAAyB,CAAE,OAHrR,4OAGuS,CAAE,CAAC,CAC5T,CACJ,GAAG,EACH,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,UAAW,UAAW,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,2BAA4B,CAAE,EAAG,CAC9P,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYpB,GAAS,UAAWE,CAAS,CAAE,CAAC,EAC/J,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGD,EAAS,CAC3J,CAAC,EACD,MAAM,cAAc,SAAU,CAAE,IAAK,KAAM,QAASnB,EAAc,UAAW,gBAAiB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,WAAY,UAAW,CAAE,EAAG,CAC9Y,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACjG,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,YAAa,EAAGjS,EAAE,gBAAgB,CAAC,CAC1F,CAAC,CACL,CAAC,CACL,CAAC,EAEKwU,GAAWlC,GAAe,MAAM,cAAc,MAAO,CACvD,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,YAAa,aAAc,sCAAuC,WAAY,+BAAgC,eAAgB,aAAc,qBAAsB,YAAa,CAC/N,EAAG,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,SAAU,SAAU,OAAQ,SAAU,QAAS,OAAQ,oBAAqB,qCAAsC,IAAK,OAAQ,WAAYnH,CAAK,CAAE,EACvL,CACI,CAACnL,EAAE,eAAe,EAAG,kBAAe,EACpC,CAACA,EAAE,YAAY,EAAG,aAAa,EAC/B,CAACA,EAAE,iBAAiB,EAAG,YAAY,EACnC,CAACA,EAAE,cAAc,EAAG+T,IAAc5W,EAAO,SAAQA,EAAI,MAAQ,IAAO,GAAG,CAC3E,EAAE,IAAI,CAAC,CAACkR,EAAGpQ,EAAC,EAAGyB,KAAM,MAAM,cAAc,MAAO,CAAE,IAAK,KAAOA,EAAE,EAAG,CAC/D,MAAM,cAAc,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,KAAM,CAAE,EAAG2O,CAAC,EAC3K,MAAM,cAAc,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO3O,KAAM,EAAIiM,GAAS,mBAAoB,WAAY,GAAI,CAAE,EAAG1N,EAAC,CAC5I,CAAC,CAAC,CACN,CAAC,EAED,OAAO,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,KAAM,MAAO,CAAE,EAAG,CAACiW,GAAQM,EAAQ,CAAC,CACrF,EAGSC,GAAwB,CAAC,CAClC,MAAAvC,EACA,UAAAC,EACA,aAAAC,EACA,cAAAC,EACA,SAAArM,EACA,aAAA0O,EACA,gBAAAC,EACA,cAAAC,EACA,YAAAC,EACA,aAAA5C,EACA,eAAA6C,EACA,WAAAC,EACA,gBAAAhF,EACA,eAAAiF,EACA,cAAA7E,EACA,OAAAnM,EACA,qBAAAiR,EAAuB,CAAC,EACxB,mBAAAC,GAEA,SAAAC,GACA,YAAAC,GACA,aAAAC,GACA,gBAAAC,EACA,YAAApR,EACA,eAAAqR,EACA,aAAAC,EACA,gBAAAC,EACA,QAAApR,EACA,gBAAAqR,EACA,gBAAAC,CACJ,IAAM,CACF,GAAM,CAACC,GAAkBC,EAAmB,EAAI,MAAM,SAAS,EAAK,EAC9D,CAACC,GAAkBC,CAAmB,EAAI,MAAM,SAAS,EAAK,EAI9D,CAACC,EAAcC,EAAe,EAAI,MAAM,SAAS,EAAK,EACtD,CAACC,GAAWC,CAAY,EAAI,MAAM,SAAS,EAAK,EAChD,CAACC,GAAUC,EAAW,EAAI,MAAM,SAAS,EAAK,EAC9C,CAACC,GAAeC,EAAgB,EAAI,MAAM,SAAS,EAAK,EACxD,CAACC,GAAaC,EAAc,EAAI,MAAM,SAAS,EAAK,EAEpD,CAACC,GAAWC,EAAY,EAAI,MAAM,SAAS,IAAM,OAAO,OAAW,KAAe,CAAC,CAAC,OAAO,YAAc,OAAO,WAAW,oBAAoB,EAAE,OAAO,EAC9J,MAAM,UAAU,IAAM,CAClB,GAAI,OAAO,OAAW,KAAe,CAAC,OAAO,WAAY,OACzD,IAAMC,EAAK,OAAO,WAAW,oBAAoB,EAC3CC,GAAO,IAAMF,GAAaC,EAAG,OAAO,EAC1C,GAAI,CAAEA,EAAG,iBAAiB,SAAUC,EAAI,CAAG,MAAY,CAAED,EAAG,YAAYC,EAAI,CAAG,CAC/E,MAAO,IAAM,CAAE,GAAI,CAAED,EAAG,oBAAoB,SAAUC,EAAI,CAAG,MAAY,CAAED,EAAG,eAAeC,EAAI,CAAG,CAAE,CAC1G,EAAG,CAAC,CAAC,EACL,IAAMC,GAAQ,MAAM,OAAO,IAAI,EAG/B,MAAM,UAAU,IAAM,CAClB,IAAM/J,EAAK+J,GAAM,QACb,CAAC/J,GAAMoI,KACXpI,EAAG,MAAM,OAAS,OAClBA,EAAG,MAAM,OAAS,KAAK,IAAIA,EAAG,aAAc,GAAG,EAAI,KACvD,EAAG,CAAC2H,EAAcS,EAAQ,CAAC,EAG3B,MAAM,UAAU,IAAM,CACdF,EAAqB,OAAS,GAC9Bc,EAAoB,EAAI,CAEhC,EAAG,CAACd,EAAqB,MAAM,CAAC,EAOhC,IAAM8B,GAAc,MAAM,OAAO,EAAI,EAMrC,MAAM,UAAU,IAAM,CAClB,IAAMzH,EAAM,OAAO,OAAW,IAAe,OAAO,eAAiB,KACrE,GAAI,CAACA,EAAI,OACT,IAAM0H,GAAQ,IAAM,CAChB,GAAI,CAACD,GAAY,QAAS,OAC1B,IAAMhK,GAAKgD,EAAgB,QACtBhD,KACLA,GAAG,UAAYA,GAAG,aACtB,EAGMkK,GAAW,IAAM,CAAE,sBAAsBD,EAAK,EAAG,WAAWA,GAAO,GAAG,CAAG,EAC/E,OAAA1H,EAAG,iBAAiB,SAAU2H,EAAQ,EAC/B,IAAM3H,EAAG,oBAAoB,SAAU2H,EAAQ,CAC1D,EAAG,CAAClH,CAAe,CAAC,EAEpB,MAAM,UAAU,IAAM,CAClB,GAAIA,EAAgB,SAAW/J,EAAS,OAAS,EAAG,CAChD,GAAM,CAAE,UAAAkR,EAAW,aAAAC,GAAc,aAAAC,EAAa,EAAIrH,EAAgB,QAElE,GADqBoH,GAAeD,EAAYE,GAAe,IAC7C,CACd,IAAMC,GAAe,IAAM,CACnBtH,EAAgB,SAChBA,EAAgB,QAAQ,SAAS,CAC7B,IAAKA,EAAgB,QAAQ,aAC7B,SAAUE,GAAe,CAC7B,CAAC,CAET,EACAoH,GAAa,EACb,WAAWA,GAAc,EAAE,EAC3B,WAAWA,GAAc,GAAG,CAChC,CACJ,CACJ,EAAG,CAACrR,EAAU+J,CAAe,CAAC,EAE9B,IAAMuH,GAAe,IAAM,CACvB,GAAIvH,EAAgB,QAAS,CACzB,GAAM,CAAE,UAAAmH,EAAW,aAAAC,GAAc,aAAAC,EAAa,EAAIrH,EAAgB,QAC5DwH,GAAeJ,GAAeD,EAAYE,GAAe,IAC/DL,GAAY,QAAUQ,GACtB1B,GAAoB,CAAC0B,EAAY,CACrC,CACJ,EAEMC,GAAuB,IAAM,CAC/BT,GAAY,QAAU,GAClB,OAAO/B,GAAmB,YAC1BA,EAAe,EACfa,GAAoB,EAAK,GAClB9F,EAAgB,UACvBA,EAAgB,QAAQ,SAAS,CAAE,IAAKA,EAAgB,QAAQ,aAAc,SAAUE,GAAe,CAAE,CAAC,EAC1G4F,GAAoB,EAAK,EAEjC,EAEM4B,GAAkBvY,GAAM,CACtBA,EAAE,MAAQ,UACViW,IACIjW,EAAE,SAAWA,EAAE,WAAWA,EAAE,eAAe,EAAG0V,EAAc,GACxD1V,EAAE,WACVA,EAAE,eAAe,EACjB0V,EAAc,GAEtB,EAEM8C,GAAsB,IAAM,CAC9B,GAAI,CAACvH,EAAe,MAAO,GAC3B,IAAM+C,EAAY/C,EAAc,YAAcA,EAAc,YAAY,EAAI,GACtE3C,GAAW2C,EAAc,YAAc,GACvCwH,GAAiBxH,EAAc,aAAeA,EAAc,YAAY,aAAe,OAC7F,OAAO+C,GAAa1F,IAAYmK,EACpC,EAGMxM,GAAO,mEACPyM,GAAY7a,GACTA,EACDA,GAAK,OAASA,EAAI,QAAU,EAAWA,EAAI,MAAS,IACpDA,GAAK,MAAQA,EAAI,OAAS,EAAWA,EAAI,KAAQ,IACjDA,GAAK,GAAW,KAAK,MAAMA,EAAI,EAAE,EAAI,IAClCA,EAAI,IAJI,GAMb8a,GAAa/J,IAAY,CAC3B,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MACtF,OAAQ,cAAgBA,EAAS,4BAA8B,6BAC/D,WAAYA,EAAS,4BAA8B,cACnD,MAAOA,EAAS,OAAS,mBACzB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,UAAW,WAAY,UAC/F,GACMgK,GAAYC,IAAS,CACvB,QAAS,WAAY,aAAc,MACnC,OAAQ,cAAgBA,EAAM,4BAA8B,6BAC5D,WAAYA,EAAM,4BAA8B,cAChD,MAAOA,EAAM,OAAS,mBACtB,WAAY5M,GAAM,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,WAAY,UACxF,GAEM6M,GAAY,CACd,CAAE,MAAOhY,EAAE,SAAS,EAAG,EAAG,CAAE,EAAG,CAAE,MAAO,KAAM,EAAG,CAAE,EAAG,CAAE,MAAO,MAAO,EAAG,EAAG,EAC5E,CAAE,MAAO,KAAM,EAAG,EAAG,EAAG,CAAE,MAAO,KAAM,EAAG,IAAK,EAAG,CAAE,MAAO,MAAO,EAAG,KAAM,CAC/E,EACMiY,GAAW,CACb,CAAE,MAAOjY,EAAE,SAAS,EAAG,EAAG,CAAE,EAAG,CAAE,MAAO,KAAM,EAAG,CAAE,EAAG,CAAE,MAAO,MAAO,EAAG,EAAG,EAC5E,CAAE,MAAO,MAAO,EAAG,EAAG,EAAG,CAAE,MAAO,KAAM,EAAG,EAAG,CAClD,EACMkY,GAAe7C,GAAenR,EAAc,EAC5CiU,EAAala,GAAM,CAAEwX,EAAgBxX,CAAC,EAAGkY,EAAa,EAAK,CAAG,EAC9DiC,EAAYna,GAAM,CAChBA,IAAM,EAAGqX,EAAgB,EAAK,GAC3BC,EAAetX,CAAC,EAAGqX,EAAgB,EAAI,GAC9Ce,GAAY,EAAK,CACrB,EAEMgC,GAAU,CAAC,EAAE3D,GAAgBA,EAAa,KAAK,GAG/C4D,GAAY,OAAOzD,GAAgB,YAClC,CAAC1C,GACDuF,GAAoB,GACpB,OAAO,UAAc,KACrB,UAAU,cACV,OAAO,UAAU,aAAa,cAAiB,WAIhDa,GAAQ1T,GAAO,CAAE,GAAI,CAAE,OAAO,IAAI,KAAKA,CAAE,EAAE,mBAAmB,QAAS,CAAE,KAAM,UAAW,OAAQ,UAAW,OAAQ,SAAU,CAAC,CAAG,MAAY,CAAE,MAAO,EAAI,CAAE,EAG9J2T,GAAiBxS,EAAS,OAAQ5I,GAAMA,EAAE,OAAS,UAAY,OAAOA,EAAE,SAAY,UAAYA,EAAE,QAAQ,KAAK,CAAC,EAChHqb,GAAezS,EAAS,OAAQ5I,GAAMA,EAAE,OAAS,QAAQ,EAGzDsb,IAAiB3D,GAAcyD,GAAe,OAAS,IAAM,MAAM,cAAc,MAAO,CAC1F,IAAK,YACL,MAAO,CAAE,OAAQ,sCAAuC,aAAc,OAAQ,WAAY,oBAAqB,SAAU,QAAS,CACtI,EAAG,CACC,MAAM,cAAc,SAAU,CAC1B,IAAK,SAAU,QAAS,IAAMjC,GAAiBtY,GAAK,CAACA,CAAC,EACtD,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,WAAY,cAAe,OAAQ,OAAQ,MAAO,UAAW,OAAQ,UAAW,UAAW,QAAS,WAAY,SAAU,CAChO,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAClI,MAAM,cAAc,IAAK,CAAE,UAAW,eAAgB,MAAO,CAAE,MAAO,kBAAmB,SAAU,MAAO,CAAE,CAAC,CACjH,EACA,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvE,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAG+B,EAAE,yBAAyB,CAAC,EACrN,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,UAAW,MAAO,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGA,EAAE,cAAc,GAAKwY,GAAe,OAAU,SAAQA,GAAe,QAAUA,GAAe,SAAW,EAAI,SAAW,WAAc,GAAG,CACrU,CAAC,EACD,MAAM,cAAc,IAAK,CAAE,IAAK,OAAQ,UAAW,sBAAuB,MAAO,CAAE,KAAM,OAAQ,MAAO,mBAAoB,SAAU,OAAQ,UAAWlC,GAAgB,iBAAmB,eAAgB,WAAY,eAAgB,CAAE,CAAC,CAC/O,CAAC,EACDA,IAAiB,MAAM,cAAc,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,WAAY,MAAO,cAAe,OAAQ,mBAAoB,OAAQ,iBAAkB,MAAO,CAAE,EAAG,CACvKkC,GAAe,OAAS,GAAK,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,UAAW,YAAa,MAAO,CAAE,aAAc,OAAQ,UAAW,QAAS,UAAW,OAAQ,iBAAkB,KAAM,CAAE,EAC5LA,GAAe,IAAI,CAACpb,EAAGsC,KAAM,MAAM,cAAc,MAAO,CAAE,IAAK,IAAMA,GAAG,MAAO,CAAE,QAAS,OAAQ,IAAK,OAAQ,QAAS,QAAS,UAAWA,KAAM,EAAI,OAAS,qCAAsC,CAAE,EAAG,CACtM,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,wBAAyB,UAAW,MAAO,QAAS,EAAI,CAAE,CAAC,EACxL,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,SAAU,MAAO,mBAAoB,WAAY,IAAK,UAAW,YAAa,CAAE,EAAG,OAAOtC,EAAE,SAAW,EAAE,EAAE,KAAK,CAAC,EACrL,MAAM,cAAc,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,WAAY+N,GAAM,SAAU,SAAU,MAAO,sBAAuB,CAAE,EAAGoN,GAAKnb,EAAE,SAAS,CAAC,CAC9J,CAAC,CAAC,CACN,EACA0X,GAAkB,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,MAAO,WAAY,6BAA8B,OAAQ,qCAAsC,CAAE,EAAG,CAC1P,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,EACvH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG9U,EAAE,kBAAkB,CAAC,EACzH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYmL,GAAM,SAAU,OAAQ,MAAO,mBAAoB,cAAe,QAAS,WAAY,IAAK,UAAW,WAAY,CAAE,EAAG2J,CAAc,CACvM,CAAC,CACL,CAAC,CACL,CAAC,EAGK6D,GAAa,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,KAAM,EAAG,UAAW,MAAO,CAAE,EACjK,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,UAAW,SAAU,SAAU,OAAQ,CAAE,EAAG,CAC9E,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,IAAK,2BAA4B,IAAK,YAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,QAAS,OAAQ,aAAc,CAAE,CAAC,EACpM,MAAM,cAAc,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAG3Y,EAAE,mBAAmB,CAAC,EAC1J,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,OAAQ,CAAE,CAAE,EAAGA,EAAE,eAAe,CAAC,CAChI,CAAC,CACL,EAGM4Y,GAAe,MAAM,cAAc,OAAQ,CAC7C,IAAK,OACL,IAAK7I,EACL,SAAUuH,GACV,UAAW,YACX,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,gBAAiB,CACnE,EAAG,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,MAAO,OAAQ,SAAU,SAAU,OAAQ,SAAU,QAAS,OAAQ,cAAe,SAAU,IAAK,OAAQ,UAAW,MAAO,CAAE,EACrKmB,GAAa,SAAW,EAClB,CAACC,GAAeC,EAAU,EAC1B,CAACD,EAAa,EAAE,OAAOD,GAAa,IAAKI,GAAQ,MAAM,cAAclV,GAAqB,CACxF,IAAKkV,EAAI,GACT,QAASA,EAAI,QACb,KAAMA,EAAI,KACV,UAAWA,EAAI,UACf,IAAKA,EAAI,IACT,OAAQA,EAAI,OACZ,SAAUA,EAAI,SACd,YAAaA,EAAI,YACjB,UAAWA,EAAI,UACf,QAASA,EAAI,QACb,QAASxU,EACT,UAAW,OAAOqR,GAAoB,WACtC,SAAUA,EACV,SAAU,IAAMC,GAAmBA,EAAgBkD,EAAI,EAAE,EACzD,MAAOA,EAAI,KACf,CAAC,CAAC,CAAC,CACX,CAAC,EAGKC,GAAW5C,IAAa,MAAM,cAAc,MAAO,CAAE,IAAK,YAAa,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,mBAAoB,CAAE,EAC1S,CAAC,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,IAAK,gBAAiB,KAAM,CAAE,EAAGlW,EAAE,qBAAqB,CAAC,CAAC,EAAE,OACrKgY,GAAU,IAAKnZ,GAAM,MAAM,cAAc,SAAU,CAAE,IAAK,KAAOA,EAAE,EAAG,QAAS,IAAMsZ,EAAUtZ,EAAE,CAAC,EAAG,MAAOiZ,GAAStC,IAAiB3W,EAAE,CAAC,CAAE,EAAGA,EAAE,KAAK,CAAC,CAC1J,CACJ,EACMka,GAAU3C,IAAY,MAAM,cAAc,MAAO,CAAE,IAAK,WAAY,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,mBAAoB,CAAE,EACvS,CAAC,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,IAAK,gBAAiB,KAAM,CAAE,EAAGpW,EAAE,iBAAiB,CAAC,CAAC,EAAE,OACjKiY,GAAS,IAAKpZ,GAAM,MAAM,cAAc,SAAU,CAAE,IAAK,KAAOA,EAAE,EAAG,QAAS,IAAMuZ,EAASvZ,EAAE,CAAC,EAAG,MAAOiZ,GAASI,KAAiBrZ,EAAE,CAAC,CAAE,EAAGA,EAAE,KAAK,CAAC,CACxJ,CACJ,EAGMma,GAAYlD,IAAoB,MAAM,cAAc,MAAO,CAAE,IAAK,aAAc,MAAO,CAAE,aAAc,MAAO,CAAE,EAClH,MAAM,cAAc,OAAO,wBAA0B,IAAM,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,UAAW,SAAU,MAAO,eAAgB,CAAE,EAAG,kCAAkC,GAAI,CACrM,cAAe3F,EACf,YAAauH,GAAoB,EACjC,qBAAsBzC,EACtB,mBAAoBC,GACpB,aAAcc,CAClB,CAAC,CACL,EAGMiD,GAAW,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,UAAW,WAAY,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,SAAU,OAAQ,IAAK,MAAO,aAAc,MAAO,CAAE,EAAG,CACxN,MAAM,cAAc,SAAU,CAAE,IAAK,QAAS,QAAS,IAAM,CACrDnD,IAAoBE,GAAgBD,EAAoB,EAAK,EAAGE,GAAgB,EAAK,IAClFF,EAAoB,EAAI,EAAGE,GAAgB,EAAI,EAC1D,EAAG,UAAW,UAAW,MAAO4B,GAAU/B,IAAoBE,CAAY,CAAE,EAAG,CAC3E,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAChGF,IAAoBE,EAAgBhW,EAAE,gBAAgB,EAAIA,EAAE,gBAAgB,CACjF,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,UAAW,iBAAkB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,SAAU,MAAO,CAAE,EAAG,CACtJ,MAAM,cAAc,SAAU,CAAE,IAAK,OAAQ,QAAS,IAAMoV,GAAYnX,GAAK,CAACA,CAAC,EAAG,UAAW,UAAW,MAAO4Z,GAAU1C,EAAQ,CAAE,EAAG,CAClI,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAAGnV,EAAE,UAAU,CAC/G,CAAC,EACD,MAAM,cAAc,SAAU,CAAE,IAAK,OAAQ,QAAS,IAAM,CAAEqW,GAAYpY,GAAK,CAACA,CAAC,EAAGkY,EAAa,EAAK,CAAG,EAAG,UAAW,UAAW,MAAO0B,GAAUzB,IAAYf,EAAY,CAAE,EAAG,CAC5K,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACjGA,GAAgBrV,EAAE,qBAAqB,EAAI4X,GAAS1T,CAAW,EAAKlE,EAAE,eAAe,CACzF,CAAC,EACD,MAAM,cAAc,SAAU,CAAE,IAAK,QAAS,QAAS,IAAM,CAAEmW,EAAalY,GAAK,CAACA,CAAC,EAAGoY,GAAY,EAAK,CAAG,EAAG,UAAW,UAAW,MAAOwB,GAAU3B,IAAaV,EAAe,CAAC,CAAE,EAAG,CAClL,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACjGA,EAAe,EAAKxV,EAAE,kBAAkB,EAAI4X,GAASpC,CAAY,EAAKxV,EAAE,WAAW,CACvF,CAAC,CACL,CAAC,CACL,CAAC,EAGKkZ,EAAY/D,IAAY,MAAM,cAAc,MAAO,CAAE,IAAK,aAAc,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,OAAQ,sCAAuC,aAAc,OAAQ,aAAc,gBAAiB,WAAY,mBAAoB,CAAE,EAAG,CACpS,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,EACvH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGnV,EAAE,eAAe,CAAC,EACvI,MAAM,cAAc,SAAU,CAAE,IAAK,IAAK,QAAS,IAAMoV,GAAY,EAAK,EAAG,UAAW,UAAW,MAAO,CAAE,kBAAmB,OAAQ,WAAY,OAAQ,OAAQ,OAAQ,MAAO,mBAAoB,OAAQ,UAAW,SAAU,SAAU,WAAY,UAAW,WAAY,GAAI,CAAE,EAAGpV,EAAE,YAAY,CAAC,CAC5S,CAAC,EAGKmZ,GAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,OAAQ,QAASvE,EAAe,SAAU,CAACyD,GAAS,MAAOrY,EAAE,WAAW,EAAG,UAAW,UAC3F,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQqY,GAAU,UAAY,UAAW,WAAYA,GAAU,yBAA2B,4BAA6B,MAAOA,GAAU,sBAAwB,uBAAwB,WAAY,UAAW,CACtV,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,mCAAoC,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EACrGe,GAAS,MAAM,cAAc,SAAU,CACzC,IAAK,MAAO,QAAS,IAAM3C,GAAe,EAAI,EAAG,MAAOzW,EAAE,kBAAkB,EAAG,UAAW,UAC1F,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAY,yBAA0B,MAAO,sBAAuB,UAAW,6CAA8C,WAAY,yCAA0C,CAC5U,EAAG,MAAM,cAAc,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAAgB,YAAa,IAAK,cAAe,QAAS,eAAgB,OAAQ,EAAG,CACpL,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,EAAG,EAAG,EAAG,EAAG,MAAO,EAAG,OAAQ,GAAI,GAAI,CAAE,CAAC,EACjF,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,EAAG,sBAAuB,CAAC,EACnE,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,EAAG,UAAW,CAAC,CAC3D,CAAC,CAAC,EAGIqZ,GAAmBf,GAElB5B,GAAY,CAAC0C,GAAQD,EAAO,EAAKd,GAAU,CAACc,EAAO,EAAI,CAACC,EAAM,EAD/D,CAACD,EAAO,EAGRG,GAAW,MAAM,cAAc,MAAO,CACxC,IAAK,QACL,MAAO,CAAE,QAAS,OAAQ,WAAY,WAAY,IAAK,OAAQ,aAAc,OAAQ,mBAAoB,OAAQ,iBAAkB,OAAQ,OAAQ,cAAgBjB,GAAU,4BAA8B,6BAA8B,WAAY,oBAAqB,aAAclD,GAAW,gBAAkB,OAAQ,WAAY,aAAc,CAC3V,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CAC5E,MAAM,cAAc,WAAY,CAC5B,IAAK,KACL,MAAOT,EACP,IAAKoC,GACL,SAAW5X,GAAMyV,EAAgBzV,EAAE,OAAO,KAAK,EAC/C,UAAWuY,GACX,KAAM,EACN,UAAW,IACX,YAAatC,GAAWnV,EAAE,mBAAmB,EAAIA,EAAE,kBAAkB,EACrE,UAAW,cACX,MAAO,CAAE,MAAO,OAAQ,UAAWmV,GAAW,QAAU,OAAQ,UAAW,QAAS,OAAQ,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,cAAe,MAAO,mBAAoB,WAAYA,GAAWhK,GAAO,UAAW,SAAUgK,GAAW,OAAS,SAAU,WAAY,KAAM,QAAS,OAAQ,CACnT,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,UAAW,KAAM,CAAE,EAAG,CACzH,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,MAAO,sBAAuB,CAAE,EAAG,CAC9J,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,MAAO,CAAE,MAAO,kBAAmB,SAAU,MAAO,CAAE,CAAC,EACtHnV,EAAE,wBAAwB,CAC9B,CAAC,EACD,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,WAAYmL,GAAM,SAAU,SAAU,MAAO,uBAAwB,kBAAmB,MAAO,CAAE,GAAIuJ,EAAeA,EAAa,OAAS,GAAK,OAAO,CAC7M,CAAC,CACL,CAAC,CACL,EAAE,OAAO2E,EAAe,CAAC,EAInBE,GAAe,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,EAC5D,MAAM,cAAcrZ,GAAe,CAC/B,SAAU,IAAMuW,GAAe,EAAK,EACpC,OAAQ,CAAC+C,EAAMtb,GAAKC,KAAS,CAAEsY,GAAe,EAAK,EAAO,OAAO5B,GAAgB,YAAYA,EAAY2E,EAAMtb,GAAKC,EAAI,CAAG,CAC/H,CAAC,CACL,EAEMsb,GAAW,MAAM,cAAc,SAAU,CAAE,IAAK,WAAY,MAAO,CAAE,KAAM,OAAQ,QAAS,iFAAkF,WAAY,eAAgB,UAAW,qCAAsC,CAAE,EAC/P,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,SAAU,SAAU,OAAQ,QAAS,CAAE,EACzEjD,GACM,CAAC+C,EAAY,EACb,CAACT,GAAUC,GAASC,GAAWC,GAAUC,EAAWI,EAAQ,CACtE,CACJ,EAEMI,GAAY9D,IAAoB,MAAM,cAAc,SAAU,CAChE,IAAK,YAAa,QAAS4B,GAC3B,MAAO,CAAE,SAAU,QAAS,eAAgB,OAAQ,OAAQ,QAAS,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,OAAQ,qCAAsC,WAAY,sBAAuB,MAAO,mBAAoB,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,OAAQ,GAAI,UAAW,uEAAwE,CAClY,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,oBAAqB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EAEtFmC,GAAa,MAAM,cAAc3H,GAAqB,CACxD,IAAK,cAAe,OAAQhO,EAAQ,aAAciO,EAAc,cAAe9B,EAAe,MAAO+B,EAAO,UAAWC,EAAW,aAAcC,EAAc,cAAeC,CACjL,CAAC,EAKKuH,GAAc,OAAO,iBAAmB,MAAM,cAAc,OAAO,gBAAiB,CACtF,IAAK,eAAgB,cAAezJ,EAAe,UAAW+B,CAClE,CAAC,EAED,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,iBACX,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,cAAe,SAAU,OAAQ,QAAS,WAAY,eAAgB,MAAO,kBAAmB,CACpJ,EAAG,CAACyH,GAAYf,GAAcc,GAAWD,GAAUG,EAAW,CAAC,CACnE,EAKcC,GAAsB,CAACjW,EAASC,EAAM6I,EAAO,CAAC,KAAO,CACvD,QAAA9I,EACA,KAAAC,EACA,GAAI,KAAK,IAAI,EAAI,KAAK,OAAO,EAC7B,UAAY,OAAO6I,EAAK,WAAc,SAAYA,EAAK,UAAY,KAAK,IAAI,EAC5E,IAAKA,EAAK,IACV,OAAQA,EAAK,OACb,SAAUA,EAAK,WAAa,GAC5B,YAAc,OAAOA,EAAK,aAAgB,SAAYA,EAAK,YAAc,GACzE,UAAY,OAAOA,EAAK,WAAc,SAAYA,EAAK,UAAY,OAEnE,MAAOA,EAAK,OAAS,OACrB,OAAQA,EAAK,QAAU,MAC3B,GAMMoN,GAAS,CACX,MAAO,2MACP,MAAO,yMACP,KAAM,iKACN,MAAO,2VACP,OAAQ,6LACZ,EAEMC,GAAkB,CAAC,CAAE,MAAAC,EAAO,OAAAC,EAAS,CAAC,EAAG,UAAAC,EAAW,WAAAC,EAAY,iBAAAC,EAAkB,SAAAC,EAAU,cAAAC,EAAe,UAAAC,EAAW,WAAAC,EAAY,SAAAC,EAAU,cAAAC,EAAe,SAAAC,EAAU,YAAAC,CAAY,IAAM,CACzL,IAAMpd,EAAI,MAAM,cACV,CAACqd,EAAWC,CAAY,EAAI,MAAM,SAAS,IAAI,EAC/C,CAACC,EAAOC,EAAQ,EAAI,MAAM,SAAS,EAAE,EACrC,CAACC,GAAcC,EAAe,EAAI,MAAM,SAAS,EAAK,EAUtDC,GAAW,MAAM,OAAO,IAAI,EAC5BC,EAAW,MAAM,OAAO,IAAI,EAC5BC,EAAU,MAAM,OAAO,IAAI,EAC3BC,EAAU,MAAM,OAAO,IAAI,EAC3BC,EAAY,MAAM,OAAO,CAAC,EAC1BC,EAAU,MAAM,OAAO,EAAK,EAC5BC,EAAgB,MAAM,OAAO,EAAK,EAClC,CAACC,EAAeC,CAAgB,EAAI,MAAM,SAAS,CAAC,CAACxB,CAAU,EAE/DyB,GAAY,GACZC,GAAQ,IAERC,GAAc,IAAOV,EAAS,SAAWA,EAAS,QAAQ,aAAgB,IAK1EW,EAAeC,GAAM,CACvBT,EAAU,QAAUS,EACpB,IAAMC,EAAIH,GAAY,EAChBne,GAAW,KAAK,IAAI,EAAG,KAAK,IAAI,EAAG,EAAIqe,EAAIC,CAAC,CAAC,EAEnD,GADIb,EAAS,UAASA,EAAS,QAAQ,MAAM,UAAY,gBAAkBY,EAAI9O,IAAK,QAAQ,CAAC,EAAI,WAC7FiO,GAAS,QAAS,CAClBA,GAAS,QAAQ,MAAM,QAAUxd,GAAS,QAAQ,CAAC,EAInD,IAAMue,GAAO,SAAW,EAAIve,IAAU,QAAQ,CAAC,EAAI,MACnDwd,GAAS,QAAQ,MAAM,eAAiBe,GACxCf,GAAS,QAAQ,MAAM,qBAAuBe,EAClD,CACJ,EAEMC,EAAe,CAACva,EAAIwa,IAAa,CAC/Bf,EAAQ,SAASA,EAAQ,QAAQ,KAAK,EAC1CA,EAAQ,QAAUgB,GAAO,CACrB,KAAMd,EAAU,QAChB,GAAA3Z,EACA,SAAAwa,EAKA,QAAS,KAAK,IAAIA,CAAQ,EAAI,GAAKE,GAAO,OAAO,QAAUA,GAAO,KAAK,QACvE,SAAUA,GAAO,OAAO,SACxB,UAAW,GACX,UAAW,EACX,SAAUP,EACV,WAAY,IAAM,CACdA,EAAYna,CAAE,EACdyZ,EAAQ,QAAU,KACdzZ,IAAO,GAAG+Z,EAAiB,EAAK,CACxC,CACJ,CAAC,CACL,EAEA,MAAM,gBAAgB,IAAM,CACxB,GAAIxB,GAAc,CAACuB,EAAe,CAAEC,EAAiB,EAAI,EAAG,MAAQ,CAEpE,GADI,CAACD,GACDvB,IAAeqB,EAAQ,QAAS,OACpC,IAAMS,EAAIH,GAAY,EAClB3B,GAAc,CAACkB,EAAQ,SAAW,CAACC,EAAQ,SAG3CS,EAAY,CAACE,CAAC,EAElBT,EAAQ,QAAUrB,EAIlBgC,EAAahC,EAAa,EAAI,CAAC8B,EAAGZ,EAAQ,QAAUA,EAAQ,QAAQ,SAAW,CAAC,CACpF,EAAG,CAAClB,EAAYuB,CAAa,CAAC,EAE9B,MAAM,UAAU,IAAM,IAAM,CAAML,EAAQ,SAASA,EAAQ,QAAQ,KAAK,CAAG,EAAG,CAAC,CAAC,EAIhF,IAAMkB,GAAcrd,GAAM,CAClBA,EAAE,cAAgB,SAAWA,EAAE,SAAW,GAC1Coc,EAAQ,UAIZG,EAAc,QAAU,GACxBH,EAAQ,QAAU,CACd,GAAIpc,EAAE,UACN,GAAIA,EAAE,QAAS,GAAIA,EAAE,QAGrB,KAAMqc,EAAU,QAChB,KAAM,KACN,IAAKiB,GAAgB,CACzB,EACAlB,EAAQ,QAAQ,IAAI,IAAIpc,EAAE,QAAUgO,GAAKhO,EAAE,WAAa,YAAY,IAAI,CAAC,EAC7E,EAEMud,GAAcvd,GAAM,CACtB,IAAML,EAAIyc,EAAQ,QAClB,GAAI,CAACzc,GAAKK,EAAE,YAAcL,EAAE,GAAI,OAChC,IAAM6d,GAAKxd,EAAE,QAAUL,EAAE,GACnB8d,GAAKzd,EAAE,QAAUL,EAAE,GACzB,GAAI,CAACA,EAAE,KAAM,CAIT,GAAI,KAAK,IAAI6d,EAAE,EAAId,IAAa,KAAK,IAAIe,EAAE,EAAIf,GAAW,OAC1D,GAAI,KAAK,IAAIe,EAAE,GAAK,KAAK,IAAID,EAAE,EAAG,CAAEpB,EAAQ,QAAU,KAAM,MAAQ,CACpEzc,EAAE,KAAO,IACLwc,EAAQ,UAGRxc,EAAE,KAAO0c,EAAU,QACnB1c,EAAE,GAAKK,EAAE,QACTmc,EAAQ,QAAQ,KAAK,EACrBA,EAAQ,QAAU,MAEtB,GAAI,CAAEnc,EAAE,cAAc,kBAAkBL,EAAE,EAAE,CAAG,MAAY,CAAC,CAChE,CACAA,EAAE,IAAI,IAAIK,EAAE,QAAUgO,GAAKhO,EAAE,WAAa,YAAY,IAAI,CAAC,EAC3D,IAAM+c,GAAIH,GAAY,EAClBE,GAAInd,EAAE,MAAQK,EAAE,QAAUL,EAAE,IAAMqO,GAIlC8O,GAAI,EAAGA,GAAIY,GAAWZ,GAAGC,EAAC,EACrBD,GAAI,CAACC,KAAGD,GAAI,CAACC,GAAIW,GAAWZ,GAAIC,GAAGA,EAAC,GAC7CF,EAAYC,EAAC,CACjB,EAEMa,EAAY3d,GAAM,CACpB,IAAML,EAAIyc,EAAQ,QAGlB,GAFI,CAACzc,GAAMK,EAAE,YAAc,QAAaA,EAAE,YAAcL,EAAE,KAC1Dyc,EAAQ,QAAU,KACdzc,EAAE,OAAS,KAAK,OACpB4c,EAAc,QAAU,GACxB,IAAMQ,GAAIH,GAAY,EAChB7d,GAAIY,EAAE,IAAI,IAAIK,EAAE,WAAa,YAAY,IAAI,CAAC,EAE9C4d,GAAOC,GAAWxB,EAAU,QAAStd,GAAG,CAAC,CAACge,GAAG,CAAC,EAAG,CAAE,MAAOJ,EAAM,CAAC,IAAM,EAC7EL,EAAQ,QAAUsB,GAClBX,EAAaW,GAAO,EAAI,CAACb,GAAGhe,EAAC,EACxB6e,IAAMpC,EAAc,CAC7B,EAEMsC,GAAmB,IAAM,CAC3B,GAAIvB,EAAc,QAAS,CAAEA,EAAc,QAAU,GAAO,MAAQ,CACpEf,EAAc,CAClB,EACMuC,GAAa9Z,GAAOjE,GAAM,CAAEA,EAAE,gBAAgB,EAAG4b,EAAa3X,EAAE,EAAE,EAAG6X,GAAS7X,EAAE,IAAI,CAAG,EACvF+Z,GAAa,IAAM,CAAMrC,IAAaJ,EAASI,EAAWE,CAAK,EAAGD,EAAa,IAAI,EAAK,EACxFqC,GAAWje,GAAM,CACfA,EAAE,MAAQ,SAAWA,EAAE,eAAe,EAAGge,GAAW,GAC/Che,EAAE,MAAQ,UAAY4b,EAAa,IAAI,CACpD,EACMsC,GAAc,CAACC,EAAQ,CAAC,IAAM7f,EAAE,QAAS,CAC3C,UAAW,GACX,MAAOud,EACP,SAAW7b,GAAM8b,GAAS9b,EAAE,OAAO,KAAK,EACxC,UAAWie,GACX,OAAQD,GACR,QAAUhe,GAAMA,EAAE,gBAAgB,EAClC,MAAO,OAAO,OAAO,CAAE,MAAO,OAAQ,WAAY,4BAA6B,OAAQ,4CAA6C,aAAc,MAAO,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,QAAS,UAAW,QAAS,MAAO,EAAGme,CAAK,CAC9R,CAAC,EACKvd,GAAO,CAACwd,EAAKC,IAAU/f,EAAE,OAAQ,CAAE,MAAO,OAAO,OAAO,CAAE,QAAS,OAAQ,WAAY,QAAS,EAAG+f,GAAS,CAAC,CAAC,EAAG,wBAAyB,CAAE,OAAQD,CAAI,CAAE,CAAC,EAC3JE,GAAS,CAACra,EAAG0J,EAAMhN,KAASrC,EAAE,MAAO,CACvC,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAOqP,EAAO,KAAM,OAAQA,EAAO,KAAM,cAAeA,GAAQ,GAAK,GAAK,IAAM,KAAM,QAAS,OAAQ,WAAY,SAAU,WAAY1J,EAAE,OAAS,4BAA8B,6BAA8B,OAAQ,kCAAoCA,EAAE,OAAS,OAAS,QAAU,IAAK,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,kBAAmB,CACtc,EAAG,CAACA,EAAE,KAAM3F,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY2F,EAAE,IAAK,OAAQ,aAAetD,EAAK,CAAE,CAAC,CAAC,CAAC,EAG7M4d,GAAeta,GAAM3F,EAAE,MAAO,CAChC,IAAK2F,EAAE,GACP,QAAS,IAAMkX,EAASlX,EAAE,EAAE,EAC5B,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,MAAO,aAAc,OAAQ,WAAYA,EAAE,OAAS,oBAAsB,cAAe,OAAQ,cAAgBA,EAAE,OAAS,4BAA8B,eAAgB,OAAQ,SAAU,CACvT,EAAG,CACCA,EAAE,QAAU3F,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,IAAK,OAAQ,OAAQ,OAAQ,MAAO,MAAO,qBAAsB,MAAO,mBAAoB,MAAO,WAAY,wBAAyB,CAAE,CAAC,EACnOggB,GAAOra,EAAG,GAAIA,EAAE,OAAS,oBAAsB,mBAAmB,EAClE3F,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvDA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACnFqd,IAAc1X,EAAE,GACVia,GAAY,EACZ5f,EAAE,OAAQ,CACR,IAAK,OACL,cAAeyf,GAAU9Z,CAAC,EAC1B,MAAOnD,EAAE,iBAAiB,EAC1B,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,SAAU,OAAQ,WAAYmD,EAAE,OAAS,IAAM,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAC9O,EAAGA,EAAE,IAAI,EACbA,EAAE,QAAU0X,IAAc1X,EAAE,IAAM3F,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,SAAU,OAAQ,OAAQ,OAAQ,QAAS,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,6BAA8B,SAAU,OAAQ,WAAY,GAAI,CAAE,EAAG2F,EAAE,MAAM,CAChW,CAAC,EACD3F,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,OAAQ,MAAO2F,EAAE,OAAS,mBAAqB,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGA,EAAE,OAAO,CACnM,CAAC,CACL,CAAC,EAGKua,GAAYva,GAAM3F,EAAE,MAAO,CAAE,IAAK2F,EAAE,GAAI,MAAO,CAAE,SAAU,UAAW,CAAE,EAAG,CAC7EA,EAAE,QAAU3F,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,iBAAkB,QAAS,IAAK,MAAO,OAAQ,MAAO,MAAO,MAAO,qBAAsB,MAAO,mBAAoB,MAAO,WAAY,wBAAyB,CAAE,CAAC,EACvOA,EAAE,MAAO,CACL,IAAK,OACL,QAAS,IAAM6c,EAASlX,EAAE,EAAE,EAC5B,MAAOA,EAAE,KACT,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAYA,EAAE,OAAS,4BAA8B,4BAA6B,OAAQ,kCAAoCA,EAAE,OAAS,OAAS,QAAU,IAAK,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,kBAAmB,CACza,EAAG,CACCA,EAAE,KACF3F,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY2F,EAAE,IAAK,OAAQ,+BAAgC,CAAE,CAAC,EACjNA,EAAE,QAAU3F,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,SAAU,OAAQ,OAAQ,OAAQ,QAAS,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,6BAA8B,SAAU,QAAS,WAAY,IAAK,OAAQ,6BAA8B,CAAE,EAAG2F,EAAE,MAAM,CACja,CAAC,CACL,CAAC,EAIKwa,GAAa9Q,GAASrP,EAAE,MAAO,CAAE,MAAO,CAAE,MAAOqP,EAAO,KAAM,OAAQA,EAAO,KAAM,KAAM,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAC3IrP,EAAE,MAAO,CAAE,IAAK,2BAA4B,IAAK,YAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,OAAQ,CAAE,CAAC,CAAC,EAC/IogB,GAAc,CAACN,EAAKpL,IAAU1U,EAAE,SAAU,CAAE,UAAW,kBAAmB,QAAS4c,EAAkB,MAAAlI,EAAO,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,sCAAuC,WAAY,cAAe,MAAO,mBAAoB,OAAQ,SAAU,EAAG,wBAAyB,CAAE,OAAQoL,CAAI,CAAE,CAAC,EAIpXO,GAASC,GAAkB,KAAMvb,GAAMA,EAAE,MAAQoY,CAAQ,GAAKmD,GAAkB,CAAC,EACjFC,GAAW,CACb,KAAM,sPACN,MAAO,kMACP,OAAQ,wLACR,KAAM,8PACV,EACMC,GAAgBC,GAAShD,GAAezd,EAAE,MAAO,CACnD,IAAK,QACL,MAAO,OAAO,OAAO,CAAE,SAAU,WAAY,OAAQ,GAAI,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,qCAAsC,UAAW,0EAA2E,QAAS,KAAM,EAAGygB,CAAG,CAC7Q,EAAG,CACCzgB,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,eAAgB,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGwC,EAAE,gBAAgB,CAAC,EAC9O,GAAG8d,GAAkB,IAAKvb,GAAM/E,EAAE,SAAU,CACxC,IAAK+E,EAAE,IACP,QAAS,IAAM,CAAEqY,EAAYrY,EAAE,GAAG,EAAG2Y,GAAgB,EAAK,CAAG,EAC7D,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,WAAY,aAAc,MAAO,OAAQ,OAAQ,WAAY,cAAe,OAAQ,UAAW,UAAW,OAAQ,CAC3M,EAAG,CACC1d,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY+E,EAAE,GAAI,CAAE,CAAC,EACtH/E,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACrDA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG+E,EAAE,IAAI,EAC3H/E,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG+E,EAAE,IAAI,CAC/G,CAAC,EACDA,EAAE,MAAQoY,GAAYnd,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,QAAS,EAAG,wBAAyB,CAAE,OAAQugB,GAAS,KAAM,CAAE,CAAC,CACrK,CAAC,CAAC,EACFvgB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,aAAc,IAAK,MAAO,OAAQ,cAAe,QAAS,WAAY,aAAc,MAAO,WAAY,kCAAmC,OAAQ,2CAA4C,CAAE,EAAG,CAC7PA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,UAAW,MAAO,QAAS,MAAO,EAAG,wBAAyB,CAAE,OAAQugB,GAAS,IAAK,CAAE,CAAC,EACtIvgB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,gBAAgB,CAAC,CACzH,CAAC,CACL,CAAC,EAAI,KACCke,GAAwB1gB,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,SAAU,WAAY,UAAW,OAAQ,UAAW,sCAAuC,QAAS,gBAAiB,CAAE,EAAG,CAClMwgB,GAAa,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,MAAO,CAAC,EAC5DxgB,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAM0d,GAAiBjd,GAAM,CAACA,CAAC,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,UAAW,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,4BAA6B,OAAQ,SAAU,CAAE,EAAG,CACtST,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,mCAAoC,OAAQ,6CAA8C,MAAO,kBAAmB,CAAE,EAAG,CAChSA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,MAAO,EAAG,wBAAyB,CAAE,OAAQugB,GAAS,IAAK,CAAE,CAAC,EACtGvgB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAYqgB,GAAO,IAAK,OAAQ,6BAA8B,CAAE,CAAC,CACxN,CAAC,EACDrgB,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,UAAW,OAAQ,CAAE,EAAG,CACzEA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,aAAa,CAAC,EAClHxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAGqgB,GAAO,IAAI,CAC9F,CAAC,EACDrgB,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,QAAS,EAAG,wBAAyB,CAAE,OAAQugB,GAAS,MAAO,CAAE,CAAC,CACnI,CAAC,CACL,CAAC,EACKI,GAAyB3gB,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,SAAU,WAAY,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,QAAS,UAAW,CAAE,EAAG,CACxLwgB,GAAa,CAAE,iBAAkB,OAAQ,OAAQ,MAAO,MAAO,OAAQ,CAAC,EACxExgB,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAM0d,GAAiBjd,GAAM,CAACA,CAAC,EAAG,MAAO+B,EAAE,uBAAuB,EAAI6d,GAAO,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAY,mCAAoC,OAAQ,6CAA8C,MAAO,kBAAmB,CAAE,EAAG,CACrYrgB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,MAAO,EAAG,wBAAyB,CAAE,OAAQugB,GAAS,IAAK,CAAE,CAAC,EACtGvgB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAYqgB,GAAO,IAAK,OAAQ,+BAAgC,CAAE,CAAC,CAC1N,CAAC,CACL,CAAC,EAEKO,GAAgB,CAClB5gB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,aAAc,EAAG,mBAAoB,OAAQ,iBAAkB,OAAQ,OAAQ,wBAAyB,aAAc,qCAAsC,CAAE,EAAG,CACpRA,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CAACmgB,GAAU,EAAE,EAAGngB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG,WAAW,CAAC,CAAC,EACjPogB,GAAY9D,GAAO,MAAO9Z,EAAE,eAAe,CAAC,CAChD,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,QAAS,eAAgB,CAAE,EAAG,CAClJA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGwC,EAAE,eAAe,CAAC,EACrNxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,OAAOwc,EAAM,MAAM,CAAC,CACnK,CAAC,EACDxc,EAAE,MAAO,CAAE,IAAK,OAAQ,UAAW,aAAc,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,QAAS,CAAE,EAAG,CACzG,GAAGwc,EAAM,IAAIyD,EAAW,EACxBjgB,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,OAAQ,QAAS,YAAa,QAAS,OAAQ,WAAY,WAAY,eAAgB,eAAgB,CAAE,EAAG,CAClJA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGwC,EAAE,iBAAiB,CAAC,EACvNxC,EAAE,SAAU,CACR,IAAK,MAAO,QAASgd,EAAY,MAAOxa,EAAE,eAAe,EACzD,MAAO,CAAE,OAAQ,OAAQ,WAAY,cAAe,MAAO,mBAAoB,OAAQ,UAAW,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,cAAe,YAAa,cAAe,QAAS,QAAS,CAAE,CAClP,EAAGA,EAAE,iBAAiB,CAAC,CAC3B,CAAC,EACD,GAAIia,EAAO,SAAW,EAChB,CAACzc,EAAE,MAAO,CAAE,IAAK,MAAO,QAASgd,EAAY,MAAOxa,EAAE,kBAAkB,EAAG,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,WAAY,cAAe,OAAQ,uCAAwC,OAAQ,SAAU,CAAE,EAAG,CACpRxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,6BAA8B,OAAQ,sCAAuC,MAAO,sBAAuB,EAAG,wBAAyB,CAAE,OAAQsc,GAAO,KAAM,CAAE,CAAC,EACrTtc,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACpDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,eAAe,CAAC,EAClHxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,sBAAuB,CAAE,EAAGwC,EAAE,eAAe,CAAC,CAC3G,CAAC,CACL,CAAC,CAAC,EACAia,EAAO,IAAKoE,GAAM7gB,EAAE,MAAO,CACzB,IAAK6gB,EAAE,GACP,QAAS,IAAM/D,EAAc+D,EAAE,EAAE,EACjC,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,MAAO,aAAc,OAAQ,WAAYA,EAAE,OAAS,oBAAsB,cAAe,OAAQ,cAAgBA,EAAE,OAAS,4BAA8B,eAAgB,OAAQ,SAAU,CACvT,EAAG,CACCA,EAAE,QAAU7gB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,IAAK,OAAQ,OAAQ,OAAQ,MAAO,MAAO,qBAAsB,MAAO,mBAAoB,MAAO,WAAY,wBAAyB,CAAE,CAAC,EACnOggB,GAAOa,EAAG,GAAIA,EAAE,OAAS,oBAAsB,mBAAmB,EAClE7gB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvDA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACnFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,SAAU,OAAQ,WAAY6gB,EAAE,OAAS,IAAM,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGA,EAAE,IAAI,EAC3QA,EAAE,QAAU7gB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,SAAU,OAAQ,OAAQ,OAAQ,QAAS,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,6BAA8B,SAAU,OAAQ,WAAY,GAAI,CAAE,EAAG6gB,EAAE,MAAM,CAC1U,CAAC,EACD7gB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,OAAQ,MAAO6gB,EAAE,OAAS,mBAAqB,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGA,EAAE,OAAO,CACnM,CAAC,CACL,CAAC,CAAC,CACV,CAAC,EACD7gB,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,MAAO,CAAE,EAAGA,EAAE,SAAU,CAC3E,QAAS+c,EACT,MAAO,CAAE,MAAO,OAAQ,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,UAAW,6CAA8C,CACjX,EAAG,CAACza,GAAKga,GAAO,KAAM,CAAE,IAAK,GAAI,CAAC,EAAG9Z,EAAE,cAAc,CAAC,CAAC,CAAC,EACxDke,EACJ,EAGMI,GAAiB,CACnB9gB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,OAAQ,QAAS,SAAU,MAAO,OAAQ,aAAc,qCAAsC,CAAE,EAAG,CAACmgB,GAAU,EAAE,EAAGC,GAAY9D,GAAO,MAAO9Z,EAAE,gBAAgB,CAAC,CAAC,CAAC,EACtRxC,EAAE,MAAO,CAAE,IAAK,OAAQ,UAAW,aAAc,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,OAAQ,QAAS,SAAU,MAAO,MAAO,CAAE,EAAG,CACrM,GAAGwc,EAAM,IAAI0D,EAAQ,EACrBlgB,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,OAAQ,OAAQ,MAAO,WAAY,4BAA6B,OAAQ,OAAQ,CAAE,CAAC,EAC1H,GAAGyc,EAAO,IAAKoE,GAAM7gB,EAAE,MAAO,CAAE,IAAK6gB,EAAE,GAAI,MAAO,CAAE,SAAU,UAAW,CAAE,EAAG,CAC1EA,EAAE,QAAU7gB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,iBAAkB,QAAS,IAAK,MAAO,OAAQ,MAAO,MAAO,MAAO,qBAAsB,MAAO,mBAAoB,MAAO,WAAY,wBAAyB,CAAE,CAAC,EACvOA,EAAE,MAAO,CACL,IAAK,OAAQ,QAAS,IAAM8c,EAAc+D,EAAE,EAAE,EAAG,MAAOA,EAAE,KAAO,WAAQA,EAAE,UAC3E,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAYA,EAAE,OAAS,4BAA8B,4BAA6B,OAAQ,kCAAoCA,EAAE,OAAS,OAAS,QAAU,IAAK,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,kBAAmB,CACza,EAAG,CACCA,EAAE,KACF7gB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY6gB,EAAE,IAAK,OAAQ,+BAAgC,CAAE,CAAC,EACjNA,EAAE,QAAU7gB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,SAAU,OAAQ,OAAQ,OAAQ,QAAS,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,6BAA8B,SAAU,QAAS,WAAY,IAAK,OAAQ,6BAA8B,CAAE,EAAG6gB,EAAE,MAAM,CACja,CAAC,CACL,CAAC,CAAC,EACF7gB,EAAE,MAAO,CAAE,IAAK,MAAO,QAASgd,EAAY,MAAOxa,EAAE,eAAe,EAAG,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAY,cAAe,OAAQ,sCAAuC,MAAO,sBAAuB,EAAG,wBAAyB,CAAE,OAAQ8Z,GAAO,KAAM,CAAE,CAAC,CACvX,CAAC,EACDtc,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,QAAS,CAAE,EAAGA,EAAE,SAAU,CAC7E,QAAS+c,EAAW,MAAOva,EAAE,cAAc,EAC3C,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,OAAQ,UAAW,UAAW,6CAA8C,EAAG,wBAAyB,CAAE,OAAQ8Z,GAAO,IAAK,CAC3T,CAAC,CAAC,EACFqE,EACJ,EAGMI,GAAY,CAAE,KAAM,OAAQ,MADhBrE,EAAY,OAAS,QACa,QAAS,OAAQ,cAAe,SAAU,WAAYA,EAAY,SAAW,UAAW,WAAY,0BAA2B,WAAY,oBAAqB,gBAAiB,qCAAsC,EACrQ3M,GAAQ2M,EAAYoE,GAAiBF,GAE3C,OAAO5gB,EAAE,MAAM,SAAU,KAAM,CAE3BA,EAAE,QAAS,CAAE,IAAK,MAAO,wBAAyB,CAAE,OAAQ,23BAuFa,CAAE,CAAC,EAE5EA,EAAE,QAAS,CAAE,IAAK,OAAQ,UAAW,UAAW,MAAO+gB,EAAU,EAAGhR,EAAK,EAIzE/P,EAAE,MAAO,CACL,IAAK,SAAU,UAAW,oBAC1B,IAAK2d,GACL,QAAS6B,GACT,cAAeT,GACf,cAAeE,GACf,YAAaI,EACb,gBAAiBA,EACjB,MAAO,CAAE,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,WAAY,iCAAkC,eAAgB,YAAa,qBAAsB,YAAa,QAAS,EAAG,QAASnB,EAAgB,QAAU,OAAQ,YAAa,QAAS,WAAY,SAAU,CACvQ,EAAGle,EAAE,QAAS,CAAE,UAAW,mBAAoB,IAAK4d,EAAU,QAAUlc,GAAMA,EAAE,gBAAgB,EAAG,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,IAAK,EAAG,OAAQ,EAAG,MAAO,mBAAoB,QAAS,OAAQ,cAAe,SAAU,WAAY,0BAA2B,WAAY,oBAAqB,gBAAiB,sCAAuC,UAAW,sEAAuE,YAAa,QAAS,WAAY,WAAY,CAAE,EAAG,CAIhf1B,EAAE,SAAU,CAAE,IAAK,IAAK,QAASkd,EAAe,MAAO1a,EAAE,gBAAgB,EAAG,aAAcA,EAAE,gBAAgB,EAAG,MAAO,CAAE,SAAU,WAAY,IAAK,uCAAwC,eAAgB,OAAQ,OAAQ,EAAG,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,qCAAsC,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAGxC,EAAE,IAAK,CAAE,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EACpgB4gB,EACJ,CAAC,CAAC,CACN,CAAC,CACL,EAGMI,GAAwB,IAAM,CAUhC,GAAM,CAACC,EAAeC,CAAQ,EAAI,MAAM,WAAWC,GAAiB,OAAWC,EAAkB,EAC3FC,EAAkBJ,EAAc,gBAChCK,EAAc,MAAM,OAAO,IAAI,EACrCA,EAAY,QAAUD,EACtB,IAAM/Q,EAAS+Q,EAAkBJ,EAAc,SAASI,CAAe,EAAI,KACrEE,EAAY,MAAM,OAAO,CAAC,CAAC,EAAE,QAE7BC,EAAc,MAAM,OAAO,IAAI,GAAK,EACpCC,EAAkB,MAAM,OAAO,IAAI,GAAK,EACxCC,EAAY,MAAM,OAAO,IAAI,GAAK,EAIlCC,EAAY,MAAM,OAAO,IAAI,GAAK,EAYlC,CAACC,EAAaC,CAAc,EAAI,MAAM,WAAWC,GAAe,OAAWC,EAAuB,EAClGC,EAAmB,MAAM,OAAO,IAAI,GAAK,EACzCC,EAAgBL,EAAY,cAC5BM,EAAcD,EAAgBL,EAAY,OAAOK,CAAa,EAAI,KAClEE,EAAmB,MAAM,OAAO,IAAI,EAC1CA,EAAiB,QAAUF,EAE3B,GAAM,CAACG,EAAYC,EAAa,EAAI,MAAM,SAAS,EAAE,EAC/C,CAACC,GAAiBC,EAAkB,EAAI,MAAM,SAAS,EAAK,EAC5D,CAACC,GAAeC,CAAgB,EAAI,MAAM,SAAS,EAAK,EACxD,CAACC,EAAeC,CAAgB,EAAI,MAAM,SAAS,IAAI,EACvD,CAACC,EAAYC,CAAa,EAAI,MAAM,SAAS,IAAI,EACjD,CAACC,EAAgBC,CAAiB,EAAI,MAAM,SAAS,EAAK,EAC1DC,EAAiB,MAAM,OAAO,IAAI,EAWlC,CAACC,GAAgBC,EAAiB,EAAI,MAAM,SAAS,CAAC,CAAC,EACvD,CAACC,GAAqBC,CAAsB,EAAI,MAAM,SAAS,CAAC,CAAC,EAEjEC,EAAoB,MAAM,OAAO,IAAI,GAAK,EAE1C,CAACC,GAAgBC,EAAiB,EAAI,MAAM,SAAS,CAAC,CAAC,EAEvDC,EAAoB,MAAM,OAAO,IAAI,GAAK,EAwB1CC,GAAe,MAAM,OAAO,IAAI,GAAK,EAQrCC,GAAqB,MAAM,OAAO,IAAI,GAAK,EAE3CC,GAAiB,MAAM,QAAQ,IAAMC,GAAkB,CAGzD,WAAaC,GAAcrC,EAAY,QAAQ,IAAIqC,CAAS,GACrDJ,GAAa,QAAQ,IAAII,CAAS,GAAG,SACrC,IACX,CAAC,EAAG,CAAC,CAAC,EAEAC,GAAoB,CAAC7b,EAAM5B,EAAMwZ,EAAQ,CAAC,KAAO,CACnD,GAAI,KAAK,IAAI,EAAI,KAAK,OAAO,EAC7B,QAAS5X,EACT,KAAA5B,EACA,UAAW,KAAK,IAAI,EACpB,GAAGwZ,CACP,GAGMkE,GAAe,MAAM,YAAaC,GAAQ,CAACC,EAAOC,EAAU,CAAC,IAAM,CACrE,OAAQD,EAAO,CACX,IAAK,QACDpC,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIH,EAAK,MAAOE,EAAQ,KAAM,CAAC,EACpE,MACJ,IAAK,UACDrC,EAAe,CAAE,KAAMsC,GAAG,YAAa,GAAIH,EAAK,QAASE,EAAQ,QAAS,MAAOA,EAAQ,KAAM,CAAC,EAIhGE,GAAsB,QAAQJ,EAAK,IAAI,EACvC,MACJ,IAAK,SACDnC,EAAe,CAAE,KAAMsC,GAAG,OAAQ,GAAIH,EAAK,KAAME,EAAQ,IAAK,CAAC,EAC/D,MACJ,IAAK,MACDrC,EAAe,CAAE,KAAMsC,GAAG,QAAS,GAAIH,EAAK,KAAME,EAAQ,IAAK,CAAC,EAQhErC,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAIH,CAAI,CAAC,EACrDvB,EAAiB,EAAI,EACrB,MACJ,IAAK,YACDZ,EAAe,CAAE,KAAMsC,GAAG,YAAa,GAAIH,CAAI,CAAC,EAChD,MACJ,IAAK,OAMD,GALAd,GAAmBmB,IAAa,CAAE,GAAGA,EAAS,CAACL,CAAG,EAAGE,EAAQ,IAAK,EAAE,EAIpEE,GAAsB,QAAQJ,EAAKE,EAAQ,IAAI,EAC3CA,EAAQ,MAAQ,CAACA,EAAQ,KAAK,QAAUF,IAAQ7B,EAAiB,QAAS,CAK1E,IAAMmC,EAAQ,GAAGN,CAAG,IAAIE,EAAQ,KAAK,MAAM,GACtCV,EAAkB,QAAQ,IAAIc,CAAK,IACpCd,EAAkB,QAAQ,IAAIc,CAAK,EACnCzC,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAIH,CAAI,CAAC,EAE7D,CACA,MACJ,IAAK,UACDnC,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkBI,EAAQ,KAAM,WAAY,CACjD,WAAYA,EAAQ,KAAM,SAAUA,EAAQ,GAAI,UAAWA,EAAQ,GACnE,QAASA,EAAQ,UAAY,EACjC,CAAC,CACL,CAAC,EACGF,IAAQ7B,EAAiB,SACzBN,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAIH,CAAI,CAAC,EAEzD,MACJ,IAAK,QAIDO,GAAgB,QAAQP,EAAK,CAAE,SAAU,EAAM,CAAC,EAChD,MACJ,IAAK,aAGDnC,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkBthB,EAAE,oBAAoB,EAAG,QAAQ,CAChE,CAAC,EACD,MACJ,IAAK,OACDqf,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkB,GAAGI,EAAQ,IAAI,mBAAoB,QAAQ,CAC1E,CAAC,EACD,MACJ,IAAK,gBAIDrC,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GACL,GAAGI,EAAQ,IAAI,+EACf,QACJ,CACJ,CAAC,EACD,MACJ,IAAK,QACDrC,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIH,EAAK,MAAOE,EAAQ,KAAM,CAAC,EACpE,MACJ,QACI,KACR,CACJ,EAAG,CAAC,CAAC,EAUCM,GAAmB,MAAM,YAAY,CAACX,EAAW5e,IAAU,CAC7D,IAAMwf,EAAUzC,EAAiB,QAAQ,IAAI/c,EAAM,GAAG,EACtD,GAAI,CAACwf,EAAS,CACV,GAAIC,GAAezf,CAAK,IAAM0f,GAAa,OAAQ,CAC/C,IAAIC,EAAS,KACb,GAAI,CAAEA,EAASC,GAAe5f,CAAK,CAAG,MAAY,CAAE,MAAQ,CAC5D0d,EAAkB0B,GAAYA,GAAW,CACrC,IAAKO,EAAO,IACZ,KAAM,OAAOA,EAAO,MAAQ,OAAO,EAAE,MAAM,EAAGE,EAAa,cAAc,EACzE,MAAOF,EACP,UAAAf,CACJ,CAAC,CACL,CACA,MACJ,CACAY,EAAQ,YAAYZ,EAAW5e,CAAK,EAAE,MAAO8f,GAAU,CAQnD,IAAMC,EAASD,GAAO,OACdA,GAAO,QAAU,mBAAmB,OAAOA,EAAM,OAAO,EAAE,MAAM,EAAG,GAAG,CAAC,GAAK,kBACpFlD,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIlf,EAAM,IAAK,MAAO+f,CAAO,CAAC,CACvE,CAAC,CACL,EAAG,CAAC,CAAC,EACCC,GAAsB,MAAM,OAAOT,EAAgB,EACzDS,GAAoB,QAAUT,GAG9B,IAAMU,GAAiB,MAAM,YAAY,CAACrB,EAAWnO,IAAc,CAC/D,QAAW+O,KAAWzC,EAAiB,QAAQ,OAAO,EAClD,GAAI,CAAEyC,EAAQ,gBAAgBZ,EAAWnO,CAAS,CAAG,MAAY,CAAC,CAE1E,EAAG,CAAC,CAAC,EACCyP,GAAoB,MAAM,OAAOD,EAAc,EACrDC,GAAkB,QAAUD,GAM5B,IAAME,GAAiB,MAAM,YAAaC,GAAU,CAChD,IAAMzY,EAAK0U,EAAY,QAAc1U,GACrCsU,EAASmE,EAAMzY,CAAE,CAAC,CACtB,EAAG,CAAC,CAAC,EAECpE,GAAW8H,EAASA,EAAO,SAAWiR,EACtC+D,GAAc,MAAM,YAAaC,GAAiB,CACpD,IAAM3Y,EAAK0U,EAAY,QAAc1U,GACGsU,EAApC,OAAOqE,GAAiB,WAAqB,CAAE,KAAMC,EAAG,aAAc,GAAA5Y,EAAI,QAAS2Y,CAAa,EACtF,CAAE,KAAMC,EAAG,aAAc,GAAA5Y,EAAI,SAAU2Y,CAAa,CADmC,CAEzG,EAAG,CAAC,CAAC,EAECzc,GAAmBwH,EAASA,EAAO,OAAS,eAC5CmV,GAAsB,MAAM,YAAajf,GAAW4e,GAAgBxY,IAAQ,CAAE,KAAM4Y,EAAG,WAAY,GAAA5Y,EAAI,OAAApG,CAAO,EAAE,EAAG,CAAC4e,EAAc,CAAC,EAEnI9N,GAAiBhH,EAASA,EAAO,eAAiB,GAClDoV,GAAoB,MAAM,YAAaC,GAAgBP,GAAgBxY,IAAQ,CAAE,KAAM4Y,EAAG,gBAAiB,GAAA5Y,EAAI,YAAA+Y,CAAY,EAAE,EAAG,CAACP,EAAc,CAAC,EAEhJ7b,GAAmB+G,EAASA,EAAO,iBAAmB,GACtDsV,GAAsB,MAAM,YAAa3f,GAASmf,GAAgBxY,IAAQ,CAAE,KAAM4Y,EAAG,iBAAkB,GAAA5Y,EAAI,KAAA3G,CAAK,EAAE,EAAG,CAACmf,EAAc,CAAC,EAErI7N,GAAajH,EAASA,EAAO,IAAI,WAAa,GAC9CuV,GAAgB,MAAM,YAAaplB,GAAM2kB,GAAgBxY,IAAQ,CAAE,KAAM4Y,EAAG,QAAS,GAAA5Y,EAAI,IAAK,CAAE,WAAY,CAAC,CAACnM,CAAE,CAAE,EAAE,EAAG,CAAC2kB,EAAc,CAAC,EACvInb,GAA6BqG,EAASA,EAAO,IAAI,eAAiB,GAClEwV,EAAgC,MAAM,YAAarlB,GAAM2kB,GAAgBxY,IAAQ,CAAE,KAAM4Y,EAAG,QAAS,GAAA5Y,EAAI,IAAK,CAAE,eAAgB,CAAC,CAACnM,CAAE,CAAE,EAAE,EAAG,CAAC2kB,EAAc,CAAC,EAC3Jlb,EAA8BoG,EAASA,EAAO,IAAI,gBAAkB,GACpEyV,GAAiC,MAAM,YAAatlB,GAAM2kB,GAAgBxY,IAAQ,CAAE,KAAM4Y,EAAG,QAAS,GAAA5Y,EAAI,IAAK,CAAE,gBAAiB,CAAC,CAACnM,CAAE,CAAE,EAAE,EAAG,CAAC2kB,EAAc,CAAC,EAC7Jjb,GAA6BmG,EAASA,EAAO,IAAI,cAAgB,GACjE0V,GAAgC,MAAM,YAAavlB,GAAM2kB,GAAgBxY,IAAQ,CAAE,KAAM4Y,EAAG,QAAS,GAAA5Y,EAAI,IAAK,CAAE,cAAe,CAAC,CAACnM,CAAE,CAAE,EAAE,EAAG,CAAC2kB,EAAc,CAAC,EAE1J3N,GAAuBnH,EAASA,EAAO,qBAAuBiR,EAC9D0E,GAA0B,MAAM,YAAaV,GAAiB,CAChE,IAAM3Y,EAAK0U,EAAY,QAAc1U,GACGsU,EAApC,OAAOqE,GAAiB,WAAqB,CAAE,KAAMC,EAAG,kBAAmB,GAAA5Y,EAAI,QAAS2Y,CAAa,EAC3F,CAAE,KAAMC,EAAG,kBAAmB,GAAA5Y,EAAI,MAAO2Y,CAAa,CADsC,CAE9G,EAAG,CAAC,CAAC,EAGCW,GAAa,CAACjX,EAAMkX,IAAc7V,EAASA,EAAO,MAAMrB,CAAI,EAAIkX,EAChEC,GAAiBnX,GAAS,MAAM,YAAaoX,GAAUjB,GAAgBxY,IAAQ,CAAE,KAAM4Y,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,CAACqC,CAAI,EAAGoX,CAAM,CAAE,EAAE,EAAG,CAACjB,EAAc,CAAC,EACzJrc,GAAYmd,GAAW,YAAa,EAAE,EACtCI,GAAeF,GAAc,WAAW,EACxCpd,GAAakd,GAAW,aAAc,EAAE,EACxCK,GAAgBH,GAAc,YAAY,EAC1Cnd,GAAaid,GAAW,aAAc,EAAE,EACxChd,EAAgBkd,GAAc,YAAY,EAC1Cjd,GAAc+c,GAAW,cAAe,EAAE,EAC1C9c,GAAiBgd,GAAc,aAAa,EAC5C/c,GAAgB6c,GAAW,gBAAiB,EAAK,EACjDM,GAAmBJ,GAAc,eAAe,EAChD9c,GAAiB4c,GAAW,iBAAkB,EAAK,EACnDO,GAAoBL,GAAc,gBAAgB,EAClD5c,GAAmB0c,GAAW,mBAAoB,EAAK,EACvDQ,GAAsBN,GAAc,kBAAkB,EACtD3c,GAAayc,GAAW,aAAc,EAAK,EAC3Ctc,EAAgBwc,GAAc,YAAY,EAC1C1c,GAAYwc,GAAW,YAAa,EAAE,EACtCS,GAAeP,GAAc,WAAW,EACxCxb,GAAmBsb,GAAW,mBAAoB,EAAK,EACvDrb,GAAsBub,GAAc,kBAAkB,EAKtDnb,GAAmB,MAAM,QAAQ,KAAO,CAC1C,IAAI,SAAU,CAAE,OAAOuW,EAAY,QAAQ,IAAIF,EAAY,OAAO,GAAK,IAAM,EAC7E,IAAI,QAAQ7gB,EAAG,CACX,IAAMmM,EAAK0U,EAAY,QAAc1U,IACjCnM,EAAG+gB,EAAY,QAAQ,IAAI5U,EAAInM,CAAC,EAAQ+gB,EAAY,QAAQ,OAAO5U,CAAE,EAC7E,CACJ,GAAI,CAAC,CAAC,EACAjC,GAA6B,MAAM,QAAQ,KAAO,CACpD,IAAI,SAAU,CAAE,OAAO8W,EAAgB,QAAQ,IAAIH,EAAY,OAAO,GAAK,IAAM,EACjF,IAAI,QAAQ7gB,EAAG,CACX,IAAMmM,EAAK0U,EAAY,QAAc1U,IACjCnM,EAAGghB,EAAgB,QAAQ,IAAI7U,EAAInM,CAAC,EAAQghB,EAAgB,QAAQ,OAAO7U,CAAE,EACrF,CACJ,GAAI,CAAC,CAAC,EAOA,CAACuQ,GAAUyJ,EAAgB,EAAI,MAAM,SAAS,IAAM,CACtD,GAAI,CAAE,OAAO,aAAa,QAAQ,qBAAqB,GAAK,WAAa,MAAQ,CAAE,MAAO,WAAa,CAC3G,CAAC,EACKC,GAAc,MAAM,OAAO1J,EAAQ,EACzC0J,GAAY,QAAU1J,GACtB,IAAM2J,GAAgB,GAAO,IAAM,YAAc,UAAY,EAKvDC,GAAiB,MAAM,YAAY,CAACC,EAAKznB,IAAM,CACjD,GAAI,GAACynB,GAAO,OAAOA,EAAI,aAAgB,YACvC,GAAI,CACA,GAAIA,EAAI,aAAeA,EAAI,YAAY,EAAG,CACtC,IAAM1lB,EAAI0lB,EAAI,YAAY,KAAK,UAAU,CAAE,KAAM,WAAY,OAAQF,GAAavnB,CAAC,CAAE,CAAC,CAAC,EACnF+B,GAAK,OAAOA,EAAE,OAAU,YAAYA,EAAE,MAAM,IAAM,CAAC,CAAC,CAC5D,CACJ,MAAY,CAAC,CACjB,EAAG,CAAC,CAAC,EACC2lB,GAAc,MAAM,YAAarX,GAAQ,CAC3CgX,GAAiBhX,CAAG,EACpB,GAAI,CAAE,aAAa,QAAQ,sBAAuBA,CAAG,CAAG,MAAQ,CAAC,CACjE,QAAWoX,KAAOxF,EAAY,QAAQ,OAAO,EAAGuF,GAAeC,EAAKpX,CAAG,CAC3E,EAAG,CAACmX,EAAc,CAAC,EAGb,CAACpP,GAAUC,EAAW,EAAI,MAAM,SAAS,EAAK,EAC9C,CAACC,GAAcC,EAAe,EAAI,MAAM,SAAS,EAAK,EACtD,CAACpR,GAAaqR,EAAc,EAAI,MAAM,SAAS,EAAE,EACjD,CAACC,GAAcC,EAAe,EAAI,MAAM,SAAS,CAAC,EAClD,CAACpR,GAASqgB,EAAU,EAAI,MAAM,SAAS,IAAM,KAAK,IAAI,CAAC,EAKvD,CAACvS,GAAWwS,EAAY,EAAI,MAAM,SAAS,OAAO,UAAc,KAAe,UAAU,SAAW,EAAK,EAKzGC,GAAa,MAAM,OAAOzS,EAAS,EAEzC,MAAM,UAAU,IAAM,CAAEyS,GAAW,QAAUzS,EAAW,EAAG,CAACA,EAAS,CAAC,EACtE,MAAM,UAAU,IAAM,CAClB,IAAM0S,EAAY,IAAMF,GAAa,EAAI,EACnCG,EAAW,IAAMH,GAAa,EAAK,EAKnCI,EAAS,IAAM,CACb,SAAS,kBAAoB,WACjCJ,GAAa,UAAU,SAAW,EAAK,CAC3C,EACA,cAAO,iBAAiB,UAAWE,CAAS,EAC5C,OAAO,iBAAiB,SAAUC,CAAQ,EAC1C,SAAS,iBAAiB,mBAAoBC,CAAM,EAC7C,IAAM,CACT,OAAO,oBAAoB,UAAWF,CAAS,EAC/C,OAAO,oBAAoB,SAAUC,CAAQ,EAC7C,SAAS,oBAAoB,mBAAoBC,CAAM,CAC3D,CACJ,EAAG,CAAC,CAAC,EAML,MAAM,UAAU,IAAM,CAClB,IAAMzV,EAAM,OAAO,OAAW,IAAe,OAAO,eAAiB,KAC/DM,EAAO,SAAS,gBAClBoV,EAAQ,GAAIC,EAAY,GAAIC,EAAQ,GAAIC,EAAM,EAO5CC,EAAc,IAAM,CACtB,IAAM5nB,GAAI,KAAK,MAAM8R,EAAKA,EAAG,OAAU,OAAO,aAAe,CAAE,EAC3D9R,IAAKA,KAAMwnB,IAASA,EAAQxnB,GAAGoS,EAAK,MAAM,YAAY,UAAWpS,GAAI,IAAI,EACjF,EAGM6nB,EAAa,IAAM,CAAC,CAAC/V,GAAO,OAAO,YAAcA,EAAG,OAAU,IAK9DgW,EAAa,IAAM,CAErB,IAAMrnB,GADUonB,EAAW,EACP,MAAQ,mCACxBpnB,KAAMgnB,IAAaA,EAAYhnB,GAAG2R,EAAK,MAAM,YAAY,mBAAoB3R,EAAC,EACtF,EAkBMsnB,GAAc,IAAM,CACtB,IAAMC,GAAS,CAAC,CAAClW,GAAMA,EAAG,MAAQ,KAC5BmW,GAAKnW,GAAM,CAACkW,GAAU,KAAK,IAAI,EAAG,KAAK,MAAMlW,EAAG,SAAS,CAAC,EAAI,EAChEmW,KAAMP,IAASA,EAAQO,GAAG7V,EAAK,MAAM,YAAY,cAAe6V,GAAI,IAAI,EAChF,EACMC,GAAQ,IAAM,CAAEN,EAAY,EAAGE,EAAW,EAAGC,GAAY,CAAG,EAC5DI,GAAQ,IAAM,CACZR,IACJA,EAAM,sBAAsB,IAAM,CAAEA,EAAM,EAAGI,GAAY,CAAG,CAAC,EACjE,EAOMK,GAAS,CAAC,EACVC,GAAW,IAAM,CACnBN,GAAY,EACZ,CAAC,GAAI,IAAK,IAAK,GAAG,EAAE,QAASlgB,IAAOugB,GAAO,KAAK,WAAW,IAAM,CAAER,EAAY,EAAGE,EAAW,EAAGC,GAAY,CAAG,EAAGlgB,EAAE,CAAC,CAAC,CAC1H,EAEAqgB,GAAM,EACFpW,IAAMA,EAAG,iBAAiB,SAAUoW,EAAK,EAAGpW,EAAG,iBAAiB,SAAUqW,EAAK,GACnF,OAAO,iBAAiB,SAAUD,EAAK,EACvC,OAAO,iBAAiB,oBAAqBA,EAAK,EAClD,OAAO,iBAAiB,SAAUC,GAAO,CAAE,QAAS,EAAK,CAAC,EAC1D,SAAS,iBAAiB,UAAWE,EAAQ,EAC7C,SAAS,iBAAiB,WAAYA,EAAQ,EAC9C,IAAMC,GAAYzW,GAAmBC,CAAE,EACvC,MAAO,IAAM,CACL6V,GAAK,qBAAqBA,CAAG,EACjCS,GAAO,QAAQ,YAAY,EACvBtW,IAAMA,EAAG,oBAAoB,SAAUoW,EAAK,EAAGpW,EAAG,oBAAoB,SAAUqW,EAAK,GACzF,OAAO,oBAAoB,SAAUD,EAAK,EAC1C,OAAO,oBAAoB,oBAAqBA,EAAK,EACrD,OAAO,oBAAoB,SAAUC,EAAK,EAC1C,SAAS,oBAAoB,UAAWE,EAAQ,EAChD,SAAS,oBAAoB,WAAYA,EAAQ,EAC7CC,IAAWA,GAAU,CAC7B,CACJ,EAAG,CAAC,CAAC,EACL,GAAM,CAACvd,GAAeC,EAAgB,EAAI,MAAM,SAAS,IAAM,CAC3D,GAAI,CAAE,OAAO,aAAa,QAAQ,2BAA2B,IAAM,MAAQ,MAAQ,CAAE,MAAO,EAAO,CACvG,CAAC,EAEK,CAACM,GAAkBid,EAAmB,EAAI,MAAM,SAAS,IAAI,EAC7D,CAACnd,GAAgBod,EAAiB,EAAI,MAAM,SAAS,EAAE,EACvD,CAACnd,GAAsBod,EAAuB,EAAI,MAAM,SAAS,EAAK,EACtE,CAACvd,GAAiBC,EAAkB,EAAI,MAAM,SAAS,EAAK,EAGlE,MAAM,UAAU,IAAM,CAClB,IAAItF,EAAY,GAChB,OAAA6iB,GAAgB,EAAE,KAAMC,GAAU,CAC1B9iB,GAAa,CAAC8iB,IACd,MAAM,QAAQA,EAAM,OAAO,GAAKA,EAAM,QAAQ,OAAS,IACvDJ,GAAoBI,EAAM,OAAO,EACjCH,GAAkB,KAAK,UAAUG,EAAM,QAAS,KAAM,CAAC,CAAC,GAExDA,EAAM,cAAgB,cACtB3d,GAAiB,EAAI,EAEzByd,GAAwB,EAAI,EAChC,CAAC,EAAE,MAAM,IAAM,CAAmC,CAAC,EAC5C,IAAM,CAAE5iB,EAAY,EAAM,CACrC,EAAG,CAAC,CAAC,EAGL,MAAM,UAAU,IAAM,CAClB,IAAMyZ,EAAO,IAAMnU,GAAmB,EAAI,EAC1C,cAAO,iBAAiB,kCAAmCmU,CAAI,EACxD,IAAM,OAAO,oBAAoB,kCAAmCA,CAAI,CACnF,EAAG,CAAC,CAAC,EAEL,IAAM/T,GAAyB,MAAM,YAAY,CAACqd,EAAMC,IAAY,CAChE,IAAMC,EAAUF,EAAK,WAAa,MAAM,QAAQA,EAAK,OAAO,EAAIA,EAAK,QAAU,KAC/EL,GAAoBO,GAAWA,EAAQ,OAASA,EAAU,IAAI,EAC9DN,GAAkBI,EAAK,aAAe,EAAE,EACxC5d,GAAiB4d,EAAK,cAAgB,YAAY,EAClDzd,GAAmB,EAAK,EACpB0d,GACAJ,GAAwB,EAAI,EAC5BM,GAAgB,CAAE,QAASD,GAAW,CAAC,EAAG,YAAaF,EAAK,WAAY,CAAC,EAAE,MAAM,IAAM,CAA0B,CAAC,GAC3Gvd,KAEPod,GAAwB,EAAK,EAC7BO,GAAiB,EAAE,MAAM,IAAM,CAAC,CAAC,EAEzC,EAAG,CAAC3d,EAAoB,CAAC,EAEnBG,GAA0B,MAAM,YAAY,SAAY,CAC1D,MAAMwd,GAAiB,EAAE,MAAM,IAAM,CAAC,CAAC,EACvCP,GAAwB,EAAK,EAC7BF,GAAoB,IAAI,EACxBC,GAAkB,EAAE,CACxB,EAAG,CAAC,CAAC,EAGC,CAACtR,GAAcC,EAAe,EAAI,MAAM,SAAS,EAAE,EAInD,CAACxN,EAAeE,CAAgB,EAAI,MAAM,SAAS,EAAK,EACxD,CAACof,GAAoBnf,EAAqB,EAAI,MAAM,SAAS,EAAK,EAKlE,CAACof,GAAeC,EAAgB,EAAI,MAAM,SAAS,IAAM,OAAO,OAAW,KAAe,CAAC,CAAC,OAAO,WAAW,EACpH,MAAM,UAAU,IAAM,CAClB,GAAID,GAAe,OACnB,IAAME,EAAU,IAAMD,GAAiB,EAAI,EAC3C,cAAO,iBAAiB,qBAAsBC,CAAO,EAEjD,OAAO,aAAaD,GAAiB,EAAI,EACtC,IAAM,OAAO,oBAAoB,qBAAsBC,CAAO,CACzE,EAAG,CAACF,EAAa,CAAC,EAGlB,GAAM,CAACG,GAAeC,EAAgB,EAAI,MAAM,SAAS,IAAI,EACvD,CAACC,GAAiBC,EAAkB,EAAI,MAAM,SAAS,CAAC,EAKxD,CAACC,GAAgBC,EAAiB,EAAI,MAAM,SAAS,IAAI,EAWzD,CAACC,GAAiBC,EAAkB,EAAI,MAAM,SAAS,CACzD,OAAQ,eACR,gBAAiB,GACjB,gBAAiB,KACjB,0BAA2B,EAC/B,CAAC,EAGKC,GAAwB,CAACC,EAAUC,EAAU,CAAC,IAAM,CACtD,GAAM,CAAE,eAAAC,EAAiB,GAAO,aAAAC,EAAe,EAAM,EAAIF,EAEzDH,GAAmBlmB,IAAS,CACxB,GAAGA,EACH,GAAGomB,EACH,0BAA2BG,EAC3B,gBAAiBD,EAAiBtmB,EAAK,gBAAkB,GACzD,gBAAiBsmB,EAAiBtmB,EAAK,gBAAkB,IAC7D,EAAE,CACN,EAGMwmB,GAA2B,IAAM,CACnC,IAAMC,EAAgB,CAAC,CAACnhB,IACHG,IAAe,OAAOA,IAAgB,UAAYA,GAAY,KAAK,EAAE,OAAS,EAE7FihB,EAAc1gB,IAAa,OAAOA,IAAc,UAAYA,GAAU,KAAK,EAAE,OAAS,EAU5F,OARwBigB,GAAgB,iBACjC,CAACA,GAAgB,2BAChBQ,GACD,CAACR,GAAgB,2BAChBS,GACD,CAACT,GAAgB,yBAI5B,EAGMjf,GAAoB,IAAM,CAC5Bmf,GAAsB,CAClB,gBAAiB,GACjB,gBAAiB,KAAK,IAAI,CAC9B,CAAC,CACL,EAOA,MAAM,UAAU,IACLQ,GAAwB,CAC3B,aAAc,OACd,iBAAApf,GACA,YAAaqf,EACjB,CAAC,EACF,CAAC,CAAC,EAIL,MAAM,UAAU,IAAM,CAAEC,GAA2B,CAAG,EAAG,CAAC,CAAC,EAE3D,IAAMC,GAA2B,MAAM,YAAY,CAACpkB,EAASC,EAAM6I,EAAO,CAAC,IAAM,CAC7E,IAAMub,EAAQ,KAAK,IAAI,EAAI,KAAK,OAAO,EACjCC,EAAa,CACf,QAAAtkB,EACA,KAAAC,EACA,GAAIokB,EACJ,UAAY,OAAOvb,EAAK,WAAc,SAAYA,EAAK,UAAY,KAAK,IAAI,EAC5E,IAAKA,EAAK,IACV,OAAQA,EAAK,OACb,SAAUA,EAAK,WAAa,GAC5B,YAAc,OAAOA,EAAK,aAAgB,SAAYA,EAAK,YAAc,GACzE,UAAY,OAAOA,EAAK,WAAc,SAAYA,EAAK,UAAY,OACnE,MAAOA,EAAK,OAAS,OACrB,OAAQA,EAAK,QAAU,MAC3B,EAEA,OAAAoW,GAAY5hB,GAAQ,CAChB,IAAMinB,EAAU,CAAC,GAAGjnB,EAAMgnB,CAAU,EAEpC,kBAAW,IAAM,CACb,GAAInY,IAAiB,QAAS,CAC1B,IAAMqY,EAAYrY,GAAgB,QAClC,GAAI,CACA,GAAM,CAAE,UAAAmH,EAAW,aAAAC,GAAc,aAAAC,EAAa,EAAIgR,GAC7BjR,GAAeD,EAAYE,GAAe,KAE3ClW,EAAK,SAAW,IAChC,sBAAsB,IAAM,CACpBknB,GAAaA,EAAU,UACvBA,EAAU,SAAS,CACf,IAAKA,EAAU,aACf,SAAUnY,GAAe,CAC7B,CAAC,CAET,CAAC,CAET,OAASsS,EAAO,CACZ,QAAQ,KAAK,gBAAiBA,CAAK,EACnC6F,EAAU,UAAYA,EAAU,YACpC,CACJ,CACJ,EAAG,EAAE,EAEED,CACX,CAAC,EACMF,CACX,EAAG,CAAC,CAAC,EAGCI,GAAsB,MAAM,YAAY,CAACtkB,EAAKC,IAAW,CACtDD,GACL+e,GAAY5hB,GAAQA,EAAK,IAAI9D,GAAM,OAAOA,EAAE,GAAG,IAAM,OAAO2G,CAAG,GAAK3G,EAAE,OAAS,OAAU,CAAE,GAAGA,EAAG,OAAA4G,CAAO,EAAI5G,CAAC,CAAC,CAClH,EAAG,CAAC,CAAC,EAICkrB,GAAmB,MAAM,YAAY,CAACC,EAAWC,IAAU,CACzDD,GAAa,MACjBzF,GAAY5hB,GAAQA,EAAK,IAAI9D,GAAM,OAAOA,EAAE,EAAE,IAAM,OAAOmrB,CAAS,EAC9D,CAAE,GAAGnrB,EAAG,GAAI,OAAOorB,GAAU,WAAaA,EAAMprB,CAAC,EAAIorB,CAAO,EAC5DprB,CAAC,CAAC,CACZ,EAAG,CAAC,CAAC,EAECqrB,GAAuB,MAAM,YAAY,CAACC,EAAQF,IAAU,CACzDE,GACL5F,GAAY5hB,GAAQA,EAAK,IAAI9D,GAAMA,EAAE,QAAU,OAAOA,EAAE,MAAM,IAAM,OAAOsrB,CAAM,EAC3E,CAAE,GAAGtrB,EAAG,GAAI,OAAOorB,GAAU,WAAaA,EAAMprB,CAAC,EAAIorB,CAAO,EAC5DprB,CAAC,CAAC,CACZ,EAAG,CAAC,CAAC,EAaCurB,GAAoB,MAAM,YAAave,GAAO,CAChD,IAAMwe,EAAI1J,EAAU,QAAQ,IAAI9U,CAAE,EAClC,GAAI,CAACwe,EAAG,OACR,IAAMpE,EAAMxF,EAAY,QAAQ,IAAI5U,CAAE,EAEhCtN,EAAM8rB,EAAE,SAAUA,EAAE,SAAW,CAAC,EACtC,IAAMC,EAAW,CAAC,EAClB,QAAWC,KAAQhsB,EAAK,CACpB,GAAI,CAAC0nB,GAAOA,EAAI,cAAc,IAAM,GAAM,CAAEqE,EAAS,KAAKC,CAAI,EAAG,QAAU,CAC3E,GAAI,CACA,IAAMlmB,EAAO4hB,EAAI,cAAcsE,EAAK,QAASA,EAAK,IAAI,EAClDlmB,GAAQ,OAAOA,EAAK,MAAS,YAC7BA,EAAK,KAAK,IAAM8b,EAAS,CAAE,KAAMsE,EAAG,sBAAuB,GAAA5Y,EAAI,IAAK0e,EAAK,IAAK,OAAQ,WAAY,CAAC,CAAC,EAC/F,MAAM,IAAMpK,EAAS,CAAE,KAAMsE,EAAG,sBAAuB,GAAA5Y,EAAI,IAAK0e,EAAK,IAAK,OAAQ,QAAS,CAAC,CAAC,CAE1G,MAAY,CACRD,EAAS,KAAKC,CAAI,CACtB,CACJ,CAGID,EAAS,SAAQD,EAAE,SAAWC,EAAS,OAAOD,EAAE,QAAQ,GAE5D,IAAMG,EAAMH,EAAE,SAAUA,EAAE,SAAW,CAAC,EAClCG,EAAI,OAAS,GACbrK,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,QAASyP,GAC1C,8BAAyBkP,EAAI,MAAM,WAAWA,EAAI,SAAW,EAAI,GAAK,GAAG,oCACzE,QACJ,CAAE,CAAC,EAEP,IAAMC,EAAU5e,IAAO0U,EAAY,UAAY,OAAO,SAAa,KAAe,SAAS,kBAAoB,WAC/G,QAAWgK,KAAQC,EAEf,GADArK,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,QAASyP,GAAoBiP,EAAK,QAASA,EAAK,KAAMA,EAAK,IAAI,CAAE,CAAC,EACnGA,EAAK,MAAQA,EAAK,KAAK,KAAOA,EAAK,OAAS,WAC5C,GAAIE,EAAW,GAAI,CAAExE,GAAK,sBAAsBsE,EAAK,KAAK,GAAG,CAAG,MAAY,CAAC,MACpEF,EAAE,iBAAiBA,EAAE,gBAAgB,KAAKE,EAAK,KAAK,GAAG,CAG5E,EAAG,CAAC,CAAC,EAGCG,GAAqB,MAAM,YAAY,IAAM,CAC/C,QAAW7e,KAAM8U,EAAU,QAAQ,KAAK,EAAGyJ,GAAkBve,CAAE,CACnE,EAAG,CAACue,EAAiB,CAAC,EAEtB,MAAM,UAAU,IAAM,CACdxW,IACJ8W,GAAmB,CACvB,EAAG,CAAC9W,GAAW8W,EAAkB,CAAC,EASlC,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAQ,YAAY,IAAM,CAC5B,OAAW,CAAC9e,EAAIwe,CAAC,IAAK1J,EAAU,QAAQ,QAAQ,EAAG,CAC/C,GAAI,CAAC0J,EAAE,SAAS,QAAU,CAACA,EAAE,SAAS,OAAQ,SAC9C,IAAMpE,EAAMxF,EAAY,QAAQ,IAAI5U,CAAE,EAClCoa,GAAK,cAAc,IAAM,IACzBA,GAAK,iBAAiB,IAAM,IAChCmE,GAAkBve,CAAE,CACxB,CACJ,EAAG,GAAI,EACP,MAAO,IAAM,cAAc8e,CAAK,CACpC,EAAG,CAACP,EAAiB,CAAC,EAGtB,IAAMQ,GAAsB,MAAM,YAAY,SAAY,CACtD,GAAI,QAAO,mBAIX,QAAO,mBAAqB,GAE5B,GAAI,CACA,GAAI1gB,GAAiB,UAEjBqe,GAAiB,CACb,MAAO,UACP,MAAO,IACP,MAAO,QACP,QAAS9mB,EAAE,gBAAgB,EAC3B,aAAc,GACd,YAAa,GACb,WAAY,EAChB,CAAC,EAEG,OAAO,YAAY,CACnB,IAAMopB,EAAe3gB,GAAiB,QAAQ,aAAeA,GAAiB,QAAQ,aAChF,MAAMA,GAAiB,QAAQ,uBAAuB,EACtD,CACE,MAAO,UACP,MAAO,IACP,YAAa,UACb,aAAc,GACd,YAAa,EACjB,CACR,CAER,OAAS8Z,EAAO,CACZ,QAAQ,MAAM,mCAAoCA,CAAK,EACvDuE,GAAiB,CACb,MAAO,QACP,MAAO,EACP,MAAO,MACP,QAAS9mB,EAAE,wBAAwB,CACvC,CAAC,CACL,QAAE,CACE,WAAW,IAAM,CACb,OAAO,mBAAqB,EAChC,EAAG,GAAI,CACX,EACJ,EAAG,CAAC,CAAC,EAOC+P,GAAkB,MAAM,OAAO,IAAI,EAGnCiF,GAAiBlF,GAA6BC,EAAe,EAEnE,MAAM,UAAU,IAAM,CAClB,GAAI,CAAE,aAAa,QAAQ,4BAA6B,OAAOxH,EAAa,CAAC,CAAG,MAAQ,CAAC,CACrFE,GAAiB,SAAS,SAAS,QACnCA,GAAiB,QAAQ,kBAAkBF,EAAa,CAEhE,EAAG,CAACA,EAAa,CAAC,EAGlB,MAAM,UAAU,IAAM,CACdvC,GAAS,OAAS,GAAK+J,GAAgB,UACvCiF,GAAe,EACf,WAAWA,GAAgB,EAAE,EAC7B,WAAWA,GAAgB,GAAG,EAEtC,EAAG,CAAChP,EAAQ,CAAC,EAKb,IAAMqjB,GAAc5K,EAAc,MAAM,KAAMrU,IAAQqU,EAAc,SAASrU,CAAE,GAAG,UAAY,CAAC,GAAG,KAAMhN,GAAM,OAAOA,EAAE,WAAc,QAAQ,CAAC,EACxIksB,GAAmB,MAAM,OAAO7K,CAAa,EACnD6K,GAAiB,QAAU7K,EAC3B,MAAM,UAAU,IAAM,CAClB,GAAI,CAAC4K,GAAa,OAElB,IAAME,EAAYroB,GAAS,CACvB,IAAMD,EAAM,KAAK,IAAI,EACjBuoB,EAAU,GACRpD,EAAOllB,EAAK,IAAK9D,GACf,OAAOA,EAAE,WAAc,UAAYA,EAAE,WAAa6D,GAAO,CAAC7D,EAAE,SAC5DosB,EAAU,GACH,CAAE,GAAGpsB,EAAG,QAAS,GAAM,QAAS,GAAI,UAAW,MAAU,GAE7DA,CACV,EACD,OAAOosB,EAAUpD,EAAOllB,CAC5B,EACMuoB,EAAW,YAAY,IAAM,CAC/B,IAAMxoB,EAAM,KAAK,IAAI,EACrByjB,GAAWzjB,CAAG,EACd,IAAM2L,EAAK0c,GAAiB,QAC5B,QAAWlf,KAAMwC,EAAG,OACHA,EAAG,SAASxC,CAAE,GAAG,UAAY,CAAC,GAClC,KAAMhN,GAAM,OAAOA,EAAE,WAAc,UAAYA,EAAE,WAAa6D,GAAO,CAAC7D,EAAE,OAAO,GACpFshB,EAAS,CAAE,KAAMsE,EAAG,aAAc,GAAA5Y,EAAI,QAASmf,CAAS,CAAC,CAGrE,EAAG,GAAI,EACP,MAAO,IAAM,cAAcE,CAAQ,CACvC,EAAG,CAACJ,EAAW,CAAC,EAShB,IAAMK,GAAgB,CAAChd,EAAO,CAAC,IAAM,CACjC,IAAMid,EAAOjd,EAAK,MAAQ,QACpBkd,EAAQC,GAAmB,CAAE,KAAAF,CAAK,CAAC,EACnCvf,EAAKwf,EAAM,GACjBlL,EAAS,CAAE,KAAMsE,EAAG,eAAgB,MAAA4G,EAAO,SAAUld,EAAK,WAAa,EAAM,CAAC,EAG9EwS,EAAU,QAAQ,IAAI9U,EAAI,CAAE,SAAU,CAAC,EAAG,SAAU,CAAC,EAAG,gBAAiB,CAAC,CAAE,CAAC,EAG7E,IAAM0Y,EAAegH,GAAM,CACMpL,EAAzB,OAAOoL,GAAM,WAAqB,CAAE,KAAM9G,EAAG,aAAc,GAAA5Y,EAAI,QAAS0f,CAAE,EAChE,CAAE,KAAM9G,EAAG,aAAc,GAAA5Y,EAAI,SAAU0f,CAAE,CADwB,CAEnF,EACM9B,EAA2B,CAACpkB,EAASC,GAAMkmB,GAAQ,CAAC,IAAM,CAC5DrL,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,QAASyP,GAAoBjW,EAASC,GAAMkmB,EAAK,CAAE,CAAC,EAErFlmB,KAAS,YAAcuG,IAAO0U,EAAY,SAC1CJ,EAAS,CAAE,KAAMsE,EAAG,iBAAkB,GAAA5Y,CAAG,CAAC,CAElD,EACMie,EAAsB,CAACtkB,EAAKC,KAAW,CAAMD,GAAK2a,EAAS,CAAE,KAAMsE,EAAG,sBAAuB,GAAA5Y,EAAI,IAAArG,EAAK,OAAAC,EAAO,CAAC,CAAG,EAEjHskB,EAAmB,CAACC,EAAWC,KAAU,CAAMD,GAAa,MAAM7J,EAAS,CAAE,KAAMsE,EAAG,cAAe,GAAA5Y,EAAI,UAAAme,EAAW,MAAAC,EAAM,CAAC,CAAG,EAC9HC,EAAuB,CAACC,EAAQF,KAAU,CAAME,GAAQhK,EAAS,CAAE,KAAMsE,EAAG,cAAe,GAAA5Y,EAAI,OAAAse,EAAQ,MAAAF,EAAM,CAAC,CAAG,EACjHvF,GAAuBjf,GAAW0a,EAAS,CAAE,KAAMsE,EAAG,WAAY,GAAA5Y,EAAI,OAAApG,CAAO,CAAC,EAC9Ekf,GAAqBC,GAAgBzE,EAAS,CAAE,KAAMsE,EAAG,gBAAiB,GAAA5Y,EAAI,YAAA+Y,CAAY,CAAC,EAC3FC,GAAuB3f,GAASib,EAAS,CAAE,KAAMsE,EAAG,iBAAkB,GAAA5Y,EAAI,KAAA3G,CAAK,CAAC,EAChF4f,GAAiBplB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,QAAS,GAAA5Y,EAAI,IAAK,CAAE,WAAY,CAAC,CAACnM,CAAE,CAAE,CAAC,EAClFqlB,GAAiCrlB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,QAAS,GAAA5Y,EAAI,IAAK,CAAE,eAAgB,CAAC,CAACnM,CAAE,CAAE,CAAC,EACtGslB,GAAkCtlB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,QAAS,GAAA5Y,EAAI,IAAK,CAAE,gBAAiB,CAAC,CAACnM,CAAE,CAAE,CAAC,EACxGulB,GAAiCvlB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,QAAS,GAAA5Y,EAAI,IAAK,CAAE,cAAe,CAAC,CAACnM,CAAE,CAAE,CAAC,EACrGimB,GAAuBjmB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,iBAAkB,CAAC,CAACnM,CAAE,CAAE,CAAC,EACpG+lB,GAAoB/lB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,cAAe,CAAC,CAACnM,CAAE,CAAE,CAAC,EAC9FgmB,GAAqBhmB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,eAAgB,CAAC,CAACnM,CAAE,CAAE,CAAC,EAChGmJ,GAAiBnJ,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,WAAY,CAAC,CAACnM,CAAE,CAAE,CAAC,EACxFkmB,GAAgBlmB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,UAAWnM,CAAE,CAAE,CAAC,EACpF6lB,GAAgB7lB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,UAAWnM,CAAE,CAAE,CAAC,EACpF8lB,GAAiB9lB,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,WAAYnM,CAAE,CAAE,CAAC,EACtFyI,GAAiBzI,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,WAAYnM,CAAE,CAAE,CAAC,EACtF2I,GAAkB3I,GAAMygB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Y,EAAI,MAAO,CAAE,YAAanM,CAAE,CAAE,CAAC,EACxFwlB,GAA2BqG,GAAM,CACNpL,EAAzB,OAAOoL,GAAM,WAAqB,CAAE,KAAM9G,EAAG,kBAAmB,GAAA5Y,EAAI,QAAS0f,CAAE,EACrE,CAAE,KAAM9G,EAAG,kBAAmB,GAAA5Y,EAAI,MAAO0f,CAAE,CAD2B,CAExF,EACME,GAAgB,IAAM9K,EAAU,QAAQ,IAAI9U,CAAE,GAAK,CAAE,SAAU,CAAC,EAAG,SAAU,CAAC,CAAE,EAEhF6f,GAAgB,CAACrmB,EAASC,GAAMiC,KAAS,CAC3C,GAAI,OAAOlC,GAAY,UAAYA,EAAQ,KAAK,EAAE,WAAW,GAAG,EAC5D,GAAI,CACA,IAAMsmB,GAAgB,KAAK,MAAMtmB,CAAO,EAGxC,GAAIsmB,GAAc,OAAS,WAAY,CACnC,IAAMtd,GAAMsd,GAAc,MAAQA,GAAc,KAAK,QAAWA,GAAc,OAC1Etd,IAAI8R,EAAS,CAAE,KAAMsE,EAAG,kBAAmB,GAAA5Y,EAAI,SAAUwC,EAAG,CAAC,EACjE,MACJ,CAIA,GAAIud,GAAaD,EAAa,EAAG,CAC7BzH,GAAoB,QAAQrY,EAAI8f,EAAa,EAC7C,MACJ,CACA,IAAME,GAAe,CACjB,sBACA,yBACA,aACA,qBACA,yBACA,sBACA,YACA,eACA,wBACA,yBACA,8BACA,kBACA,sBACA,qBACA,mBACA,iBACA,iBACJ,EACA,GAAIF,GAAc,MAAQE,GAAa,SAASF,GAAc,IAAI,EAAG,CACjE,QAAQ,IAAI,0CAA0CA,GAAc,IAAI,EAAE,EAC1E,MACJ,CAIIA,GAAc,OAAS,WAAa,OAAOA,GAAc,MAAS,WAClEtmB,EAAUsmB,GAAc,KACpBA,GAAc,MAAQ,OAAOA,GAAc,MAAS,WAAUpkB,GAAOokB,GAAc,MAE/F,MAAqB,CAErB,CAIJ,IAAMxd,GAAO,CAAC,EAgBd,GAfI5G,IAAQ,OAAOA,IAAS,WACpB,OAAOA,GAAK,KAAQ,WAAU4G,GAAK,IAAM5G,GAAK,KAC9CA,GAAK,OAAS,KACd4G,GAAK,SAAW,GAChBA,GAAK,YAAc,OAAO,SAAS5G,GAAK,OAAO,EAAIA,GAAK,QAAU,IAElE,OAAO,SAASA,GAAK,GAAG,GAAKA,GAAK,IAAM,IACxC4G,GAAK,UAAY,KAAK,IAAI,EAAI5G,GAAK,IAAM,KAEzC,OAAO,SAASA,GAAK,EAAE,IAAG4G,GAAK,UAAY5G,GAAK,KAMpD8e,GAAW,SAAW/gB,KAAS,WAAY,CAC3CmmB,GAAc,EAAE,SAAS,KAAK,CAAE,QAAApmB,EAAS,KAAAC,GAAM,KAAA6I,EAAK,CAAC,EACrD,MACJ,CASA,GAPAsb,EAAyBpkB,EAASC,GAAM6I,EAAI,EAOxCA,GAAK,KAAO7I,KAAS,WAErB,GADoBuG,IAAO0U,EAAY,UAAY,OAAO,SAAa,KAAe,SAAS,kBAAoB,WAE/G,GAAI,CAAEuL,IAAS,sBAAsB3d,GAAK,GAAG,CAAG,MAAY,CAAC,KAC1D,CACH,IAAMkc,GAAIoB,GAAc,EACpBpB,GAAE,iBAAiBA,GAAE,gBAAgB,KAAKlc,GAAK,GAAG,CAC1D,CAER,EAEM4d,GAAsBtmB,GAAW,CACnC,IAAMumB,GAAapL,EAAU,QAAQ,IAAI/U,CAAE,EAY3C,GAXA+U,EAAU,QAAQ,IAAI/U,EAAIpG,CAAM,EAChCif,GAAoBjf,CAAM,EAK1B2e,GAAkB,QAAQvY,EAAIpG,IAAW,aAAeA,IAAW,UAAU,EAKzEA,IAAW,eAaf,IATIA,IAAW,aAAeumB,KAAe,gBACzC5B,GAAkBve,CAAE,EAQpBpG,IAAW,kBAAmB,CAC9Bif,GAAoB,cAAc,EAC9B7Y,IAAO0U,EAAY,UACnB,SAAS,cAAc,IAAI,YAAY,iBAAiB,CAAC,EACzD,SAAS,cAAc,IAAI,YAAY,cAAc,CAAC,GAK1D,WAAW,IAAM,CACT0L,GAA6B,QAAQpgB,CAAE,GAC3CqgB,GAAergB,CAAE,CACrB,EAAG,IAAI,EACP,MACJ,CAEA,GAAIpG,IAAW,YACX,SAAS,cAAc,IAAI,YAAY,gBAAgB,CAAC,EAKnD,OAAO,oBACRmlB,GAAoB,EAAE,MAAM,QAAQ,KAAK,UAEtCnlB,IAAW,YAClBkgB,GAAoB,EAAI,EACnB,OAAO,oBACRiF,GAAoB,EAAE,MAAM,QAAQ,KAAK,UAEtCnlB,IAAW,WAAY,CAC9Bqf,GAAc,EAAI,EAClBa,GAAoB,EAAK,EACzBV,GAA8B,EAAI,EAClCP,GAAoB,WAAW,EAE/B,WAAW,IAAM,CACbI,GAAc,EAAI,CACtB,EAAG,CAAC,EAGJ,GAAI,CACA,IAAMtmB,GAAIsnB,GAAY,UAAY,YAAc,UAAYA,GAAY,QACxE,WAAW,IAAM,CACb,GAAI,CACA,IAAMvlB,GAAIurB,GAAQ,cAAc,KAAK,UAAU,CAAE,KAAM,WAAY,OAAQttB,EAAE,CAAC,CAAC,EAC3E+B,IAAK,OAAOA,GAAE,OAAU,YAAYA,GAAE,MAAM,IAAM,CAAC,CAAC,CAC5D,MAAY,CAAC,CACjB,EAAG,GAAG,CACV,MAAY,CAAC,CACR,OAAO,oBACRqqB,GAAoB,EAAE,MAAM,QAAQ,KAAK,CAEjD,MAAWnlB,IAAW,aACb,OAAO,oBACRmlB,GAAoB,EAAE,MAAM,QAAQ,KAAK,EAEtCnlB,IAAW,gBAOlBif,GAAoB,cAAc,EAClCI,GAAc,EAAK,EACnBa,GAAoB,EAAK,EACzBZ,GAA8B,EAAK,EACnCC,GAA+B,EAAK,EACpCC,GAA8B,EAAK,EAC/BpZ,IAAO0U,EAAY,SAAS,SAAS,cAAc,IAAI,YAAY,cAAc,CAAC,GAC/E9a,IAAW,sBACdoG,IAAO0U,EAAY,UACnBkI,GAAmB,CAAC,EACpB,SAAS,cAAc,IAAI,YAAY,iBAAiB,CAAC,GAE7D/D,GAAoB,mBAAmB,EACvCI,GAAc,EAAK,EACnBa,GAAoB,EAAK,EACzBZ,GAA8B,EAAK,EACnCC,GAA+B,EAAK,EACpCC,GAA8B,EAAK,EAcnC,WAAW,IAAM,CACTgH,GAA6B,QAAQpgB,CAAE,GAC3CqgB,GAAergB,CAAE,CACrB,EAAG,IAAI,GAEf,EAEMsgB,GAAqBvH,GAAgB,CAEnCD,GADAC,IAAgB,GACE,GAEAA,CAFE,CAI5B,EAEMwH,GAA8BlnB,GAAS,CACrCA,IAAS,IACT2f,GAAoB,EAAE,EACtBc,GAAoB,EAAK,IAEzBd,GAAoB3f,CAAI,EACxBygB,GAAoB,EAAI,EAEhC,EAEM0G,GAAiCC,GAAU,CAC7CvH,GAA8BuH,EAAM,cAAc,EAClDtH,GAA+BsH,EAAM,eAAe,EACpDrH,GAA8BqH,EAAM,aAAa,CACrD,EAGMC,GAAoB,CAACC,EAAWC,KAAiB,CAC/CD,IAAc,iBAEV/D,GAAmB,CAAC,EACxBE,GAAkB,IAAI,EAEtBc,EAAyB,6FAAuF,QAAQ,EAEpH,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,GAEX+C,IAAc,uBAEjB/D,GAAmB,CAAC,EACxBE,GAAkB,IAAI,EAEtBc,EAAyB,qBAAqBgD,EAAY,GAAI,QAAQ,EAElE,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,EAG1B,EAGI,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,EAGlB,IAAMX,GAAU,IAAI,4BAChBJ,GACAK,GACAI,GACAC,GACAG,GACAF,GACA,CACI,OAAQ,CACJ,UAAWriB,GAEX,WAAa,MAAM,QAAQO,EAAgB,GAAKA,GAAiB,OAC3DA,GACC,MAAM,QAAQ,OAAO,qBAAqB,EAAI,OAAO,sBAAwB,MACxF,CACJ,CACJ,EAkBA,GAjBAkW,EAAY,QAAQ,IAAI5U,EAAIigB,EAAO,EAGnCA,GAAQ,gBAAmBtmB,GAAQ,CAC1BA,GACL+e,EAAY5hB,IAAQA,GAAK,OAAO9D,IAAK,OAAOA,GAAE,GAAG,IAAM,OAAO2G,CAAG,CAAC,CAAC,CACvE,EAKAsmB,GAAQ,mBAAsBtmB,GAAQ,CAClCskB,EAAoBtkB,EAAK,MAAM,CACnC,EAII,OAAO,aAAiB,KAAe,cAAgB,aAAa,aAAe,WAAa,OAAO,yBAA2B,CAACkb,EAAgB,QAAQ,IAAI7U,CAAE,EACjK,GAAI,CACA,IAAMQ,EAAc,IAAI,OAAO,wBAAwByf,EAAO,EAC9Dzf,EAAY,KAAK,EAAE,KAAK,IAAM,CAC1BqU,EAAgB,QAAQ,IAAI7U,EAAIQ,CAAW,CAC/C,CAAC,EAAE,MAAO2X,IAAU,CAEpB,CAAC,CACL,MAAgB,CAEhB,CAGJ,OAAA0H,GAAc,kOAAmO,QAAQ,EAGzPI,GAAQ,yBAEH1sB,GAAa,CACV,GAAIA,GAAYA,EAAS,QAAS,CAC9B,IAAMc,GAAM,KAAK,IAAI,EAAG,KAAK,IAAI,IAAKd,EAAS,UAAY,CAAC,CAAC,EACvDstB,GAAY7tB,IACTA,GAAE,MAIHO,EAAS,YAAc,MAAQc,IAAO,IAC/B,CAAE,MAAO,CAAE,GAAGrB,GAAE,MAAO,SAAU,IAAK,CAAE,EAE5C,CAAE,MAAO,CAAE,GAAGA,GAAE,MAAO,SAAU,CAAE,IAAKO,EAAS,UAAW,IAAAc,EAAI,CAAE,CAAE,EAPtD,CAAC,EAStBd,EAAS,YAAc,MAAQA,EAAS,MAAQ,KAAM2qB,EAAiB3qB,EAAS,KAAMstB,EAAQ,EACzFttB,EAAS,QAAQ8qB,EAAqB9qB,EAAS,OAAQstB,EAAQ,EACxE,MACJ,CACA,QAAQ,IAAI,iBAAkBttB,CAAQ,CAC1C,EAICutB,GAAa,CAEV,GADgB,CAAC,CAACA,EAAS,SAAY,OAAOA,EAAS,UAAa,UAAYA,EAAS,SAAS,WAAW,QAAQ,EACxG,CACTA,EAAS,aAAa,EACjB,KAAM3c,IAAQ,CACXka,EAAqByC,EAAS,OAAS9tB,KAAO,CAAE,MAAO,CAAE,GAAIA,GAAE,OAAS,CAAC,EAAI,IAAAmR,GAAK,SAAU,IAAK,CAAE,EAAE,CACzG,CAAC,EACA,MAAOrP,IAAM,CACV,QAAQ,MAAM,uBAAwBA,EAAC,EACvCupB,EAAqByC,EAAS,OAAS9tB,KAAO,CAAE,MAAO,CAAE,GAAIA,GAAE,OAAS,CAAC,EAAI,SAAU,KAAM,MAAO,EAAK,CAAE,EAAE,CACjH,CAAC,EACL,MACJ,CAEA,IAAM+tB,GAAS,KAAK,IAAI,EAAG,KAAK,OAAOD,EAAS,UAAY,IAAM,KAAO,KAAK,CAAC,GAE5D,SAAY,CAC3B,IAAM3c,GAAM,MAAM2c,EAAS,aAAa,EAClCtsB,GAAI,SAAS,cAAc,GAAG,EACpCA,GAAE,KAAO2P,GACT3P,GAAE,SAAWssB,EAAS,UAAY,OAClC,SAAS,KAAK,YAAYtsB,EAAC,EAC3BA,GAAE,MAAM,EACRA,GAAE,OAAO,EACT,WAAW,IAAMssB,EAAS,gBAAgB3c,EAAG,EAAG,IAAK,CACzD,GAEW,EACN,KAAK,IAAM,CACRyZ,EAAyB,0BAA0BkD,EAAS,QAAQ,KAAKC,EAAM,OAAQ,QAAQ,CACnG,CAAC,EACA,MAAOjsB,IAAM,CACV,QAAQ,MAAM,oBAAqBA,EAAC,EACpC8oB,EAAyB,kBAAkBkD,EAAS,QAAQ,KAAKC,EAAM,4CAA6C,QAAQ,CAChI,CAAC,CACT,EAGC5I,GAAU,CACP,QAAQ,MAAM,uBAAwBA,CAAK,EAEvCA,EAAM,SAASviB,EAAE,cAAc,CAAC,EAChCgoB,EAAyB,+DAAgE,QAAQ,EAC1FzF,EAAM,SAASviB,EAAE,kBAAkB,CAAC,EAC3CgoB,EAAyB,yCAA0C,QAAQ,EAE3EA,EAAyB,yBAAyBzF,CAAK,GAAI,QAAQ,CAE3E,EAKC6I,GAAgB,CACb,GAAIA,GAAeA,EAAY,QAAS,CACpC,IAAMntB,GAAImtB,EAAY,OAAS,CAAC,EAChCpD,EAAyB,GAAI,WAAY,CACrC,MAAO,CACH,IAAK,OAAO,SAAS/pB,GAAE,GAAG,EAAIA,GAAE,IAAM,EACtC,KAAM,MAAM,QAAQA,GAAE,IAAI,EAAIA,GAAE,KAAO,KACvC,SAAU,CAAE,IAAK,OAAQ,IAAK,CAAE,EAChC,IAAK,IACT,EACA,OAAQmtB,EAAY,MACxB,CAAC,EACD,GAAI,CAAEf,GAAQ,mBAAmBe,EAAY,MAAM,CAAG,MAAY,CAAC,CACnE,MACJ,CACA3H,GAAwBviB,IAChBA,GAAK,KAAKmqB,IAAKA,GAAE,SAAWD,EAAY,MAAM,EAAUlqB,GACrD,CAAC,GAAGA,GAAMkqB,CAAW,CAC/B,CACL,CACJ,EAEOhhB,CACX,EAGMkhB,GAAmB,MAAM,OAAO5B,EAAa,EACnD4B,GAAiB,QAAU5B,GAM3B,IAAM6B,GAAgB,MAAM,OAAO,IAAI,GAAK,EAStCC,GAA4B,MAAM,YAAaphB,GAAO,CACxD,QAAW6X,KAAWzC,EAAiB,QAAQ,OAAO,EAClD,GAAIyC,EAAQ,aAAeA,EAAQ,YAAY,IAAI7X,CAAE,EAAG,MAAO,GAEnE,MAAO,EACX,EAAG,CAAC,CAAC,EACCogB,GAA+B,MAAM,OAAOgB,EAAyB,EAC3EhB,GAA6B,QAAUgB,GAEvC,IAAMf,GAAiB,MAAM,YAAargB,GAAO,CAC7C,GAAI,GAACA,GAAMmhB,GAAc,QAAQ,IAAInhB,CAAE,GACvC,CAAAmhB,GAAc,QAAQ,IAAInhB,CAAE,EAC5B,GAAI,CACA,IAAMoa,EAAMxF,EAAY,QAAQ,IAAI5U,CAAE,EACtC,GAAIoa,EAAK,CAAE,GAAI,CAAEA,EAAI,WAAW,CAAG,MAAY,CAAC,CAAExF,EAAY,QAAQ,OAAO5U,CAAE,CAAG,CAClF,IAAMqhB,EAAQxM,EAAgB,QAAQ,IAAI7U,CAAE,EAC5C,GAAIqhB,EAAO,CAAE,GAAI,CAAEA,EAAM,UAAU,CAAG,MAAY,CAAC,CAAExM,EAAgB,QAAQ,OAAO7U,CAAE,CAAG,CACzF8U,EAAU,QAAQ,OAAO9U,CAAE,EAC3B+U,EAAU,QAAQ,OAAO/U,CAAE,EAC3BsU,EAAS,CAAE,KAAMsE,EAAG,eAAgB,GAAA5Y,CAAG,CAAC,CAC5C,QAAE,CACEmhB,GAAc,QAAQ,OAAOnhB,CAAE,CACnC,EACJ,EAAG,CAAC,CAAC,EAIL,MAAM,UAAU,IAAM,CACdqU,EAAc,MAAM,SAAW,GAAG6M,GAAiB,QAAQ,CAAE,KAAM,OAAQ,CAAC,CACpF,EAAG,CAAC7M,EAAc,MAAM,MAAM,CAAC,EAG/B,GAAM,CAACiN,GAAkBC,EAAmB,EAAI,MAAM,SAAS,IAAM,CACjE,GAAI,CAAE,OAAO,aAAa,QAAQ,6BAA6B,IAAM,MAAQ,MAAQ,CAAE,MAAO,EAAO,CACzG,CAAC,EACD,MAAM,UAAU,IAAM,CAAE,GAAI,CAAE,aAAa,QAAQ,8BAA+B,OAAOD,EAAgB,CAAC,CAAG,MAAQ,CAAC,CAAE,EAAG,CAACA,EAAgB,CAAC,EAC7I,GAAM,CAACE,GAAmBC,EAAoB,EAAI,MAAM,SAAS,EAAK,EAChEC,GAAsB,MAAM,YAAa1hB,GAAO,CAClDsU,EAAS,CAAE,KAAMsE,EAAG,WAAY,GAAA5Y,CAAG,CAAC,EACpCsU,EAAS,CAAE,KAAMsE,EAAG,aAAc,GAAA5Y,CAAG,CAAC,EACtCyhB,GAAqB,EAAK,CAC9B,EAAG,CAAC,CAAC,EAiBCE,GAAgB,MAAM,YAAY,IAAM,CAC1C1M,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAI,IAAK,CAAC,EACtD2J,GAAiB,QAAQ,CAAE,KAAM,OAAQ,CAAC,EAC1CO,GAAqB,EAAK,CAC9B,EAAG,CAAC,CAAC,EACCG,GAAsB,MAAM,YAAY,CAAC5hB,EAAIrK,IAAU,CAAE2e,EAAS,CAAE,KAAMsE,EAAG,OAAQ,GAAA5Y,EAAI,MAAArK,CAAM,CAAC,CAAG,EAAG,CAAC,CAAC,EAcxGksB,GAAgB,MAAM,YAAa5K,GAAc,CACnD,IAAMuI,EAAQ3I,GAAa,QAAQ,IAAII,CAAS,EAChD,GAAKuI,EACL,CAAA3I,GAAa,QAAQ,OAAOI,CAAS,EACrC,GAAI,CAAEuI,EAAM,QAAQ,WAAW,CAAG,MAAY,CAAC,EACnD,EAAG,CAAC,CAAC,EACCsC,GAAmB,MAAM,OAAOD,EAAa,EACnDC,GAAiB,QAAUD,GAY3B,IAAME,GAAgB,MAAM,YAAY,CAAC3K,EAAK4K,IAAO,CACjD,IAAM/K,EAAY,QAAU,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EAC3E,IAAK9f,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAClDqoB,EAAQ,CAAE,QAAS,KAAM,IAAApI,EAAK,GAAA4K,EAAI,UAAA/K,CAAU,EAE5CgL,EAAazoB,GAAY,CAC3B,GAAI,OAAOA,GAAY,UAAY,CAACA,EAAQ,KAAK,EAAE,WAAW,GAAG,EAAG,OACpE,IAAI0oB,GACJ,GAAI,CAAEA,GAAS,KAAK,MAAM1oB,CAAO,CAAG,MAAY,CAAE,MAAQ,CACtDumB,GAAamC,EAAM,GAAG7J,GAAoB,QAAQpB,EAAWiL,EAAM,CAC3E,EAEMC,EAAkBvoB,GAAW,CAK/B,IAAMwoB,GAAOxoB,IAAW,gBACjBA,IAAW,UACXA,IAAW,qBACXA,IAAW,kBAQlB,GAPA2e,GAAkB,QAAQtB,EAAW,CAACmL,IAAQ5C,EAAM,SAAS,aAAe,EAAI,EAO5E5lB,IAAW,mBAAqBA,IAAW,SAAU,CACrD,IAAMie,GAAUzC,EAAiB,QAAQ,IAAIgC,CAAG,EAChD,GAAI,CAAES,IAAS,cAAcmK,CAAE,CAAG,MAAY,CAAC,CAC/CF,GAAiB,QAAQ7K,CAAS,CACtC,CACJ,EAEMoL,EAA0BhpB,GAAS,CACrC,GAAI,GAACA,GAAQ,CAACmmB,EAAM,SACpB,GAAI,CACAA,EAAM,QAAQ,sBAAsB,SAASpI,CAAG,EAAE,CACtD,MAAY,CAIR0K,GAAiB,QAAQ7K,CAAS,EAClCsB,GAAkB,QAAQtB,EAAW,EAAK,CAC9C,CACJ,EAEMgJ,EAAU,IAAI,4BAChBgC,EACAE,EACA,IAAM,CAAC,EACPE,EACA,IAAM,CAAC,EACP,IAAM,CAAC,EACP,CAKI,iBAAkB,GAClB,OAAQ,CACJ,UAAWlkB,GACX,WAAa,MAAM,QAAQO,EAAgB,GAAKA,GAAiB,OAC3DA,GACC,MAAM,QAAQ,OAAO,qBAAqB,EAAI,OAAO,sBAAwB,MACxF,CACJ,CACJ,EACA,OAAA8gB,EAAM,QAAUS,EAChBpJ,GAAa,QAAQ,IAAII,EAAWuI,CAAK,EAClCA,CACX,EAAG,CAACrhB,GAAeO,EAAgB,CAAC,EAC9B4jB,GAAmB,MAAM,OAAOP,EAAa,EACnDO,GAAiB,QAAUP,GAG3B,IAAMQ,GAAkB,MAAM,YAAanL,IAAS,CAChD,YAAa,MAAO4K,GAAO,CACvB,IAAMxC,EAAQ8C,GAAiB,QAAQlL,EAAK4K,CAAE,EAC9C,GAAI,CACA,IAAMQ,EAAQ,MAAMhD,EAAM,QAAQ,kBAAkB,EAIpD,GAAI,CAACgD,GAAS,OAAOA,EAAM,MAAS,SAChC,MAAM,IAAI,MAAM,sCAAsC,EAE1D,MAAO,CAAE,UAAWhD,EAAM,UAAW,WAAYgD,EAAM,IAAK,CAChE,OAASrK,EAAO,CACZ,MAAA2J,GAAiB,QAAQtC,EAAM,SAAS,EAClCrH,CACV,CACJ,EACA,aAAc,MAAO6J,EAAIS,IAAe,CACpC,IAAMjD,EAAQ8C,GAAiB,QAAQlL,EAAK4K,CAAE,EAC9C,GAAI,CACA,IAAMU,EAAS,MAAMlD,EAAM,QAAQ,mBAAmB,CAAE,EAAG,QAAS,KAAMiD,CAAW,CAAC,EACtF,GAAI,CAACC,GAAU,OAAOA,EAAO,MAAS,SAClC,MAAM,IAAI,MAAM,wCAAwC,EAE5D,MAAO,CAAE,UAAWlD,EAAM,UAAW,WAAYkD,EAAO,IAAK,CACjE,OAASvK,EAAO,CACZ,MAAA2J,GAAiB,QAAQtC,EAAM,SAAS,EAClCrH,CACV,CACJ,EACA,aAAc,MAAOlB,EAAWwL,IAAe,CAC3C,IAAMjD,EAAQ3I,GAAa,QAAQ,IAAII,CAAS,EAChD,GAAI,CAACuI,EAAO,MAAM,IAAI,MAAM,kCAAkC,EAC9D,MAAMA,EAAM,QAAQ,mBAAmB,CAAE,EAAG,SAAU,KAAMiD,CAAW,CAAC,CAC5E,EACA,MAAQxL,GAAc6K,GAAiB,QAAQ7K,CAAS,EASxD,gBAAkBA,GAAc,CAC5B,IAAMgJ,EAAUrL,EAAY,QAAQ,IAAIqC,CAAS,GAC1CJ,GAAa,QAAQ,IAAII,CAAS,GAAG,SACrC,KACP,MAAI,CAACgJ,GAAWA,EAAQ,aAAe,GAAa,GAC7C,OAAOA,EAAQ,gBAAmB,SAAWA,EAAQ,eAAiB,EACjF,CACJ,GAAI,CAAC,CAAC,EAWN,MAAM,UAAU,IAAM,CAClB,OAAW,CAAC7I,EAAKS,CAAO,IAAKzC,EAAiB,QAAS,CACnD,IAAMuN,EAAQ3N,EAAY,OAAOoC,CAAG,EACpC,GAAI,GAACuL,GAASA,EAAM,QAAUC,EAAY,OAAS,CAACD,EAAM,cAC1D,QAAWE,KAAOxO,EAAc,MAAO,CACnC,IAAMyO,EAAUzO,EAAc,SAASwO,CAAG,EACtC,CAACC,GAAW,CAACA,EAAQ,IAAI,YAC7BjL,EAAQ,aAAagL,CAAG,EAAE,MAAM,IAAM,CAA2C,CAAC,CACtF,CACJ,CACJ,EAAG,CAAC7N,EAAaX,CAAa,CAAC,EAY/B,IAAM0O,GAAkB,MAAM,QAAQ,IAAM1O,EAAc,MACrD,IAAKrU,GAAOqU,EAAc,SAASrU,CAAE,CAAC,EACtC,OAAQ,GAAM,GAAK,EAAE,KAAO,EAAE,IAAI,UAAU,EAC5C,IAAK,IAAO,CAAE,GAAI,EAAE,GAAI,KAAM,EAAE,UAAW,KAAM+J,GAAa,EAAE,SAAS,CAAE,EAAE,EAC9E,CAACsK,CAAa,CAAC,EAEb2O,GAAoB,MAAM,YAAa5L,GAAQ,CACjDnC,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAIH,CAAI,CAAC,EACrDnC,EAAe,CAAE,KAAMsC,GAAG,aAAc,GAAIH,CAAI,CAAC,EACjDqK,GAAqB,EAAK,CAC9B,EAAG,CAAC,CAAC,EAECwB,GAAoB,MAAM,YAAY,MAAO,CAAE,KAAA5gB,EAAM,WAAA6gB,CAAW,IAAM,CACxEvN,GAAmB,EAAK,EACxB,IAAMyB,EAAM+L,GAAa,MAAM,EACzBtL,EAAU,IAAIsL,GAAa,CAC7B,QAAS/L,EAAK,KAAA/U,EAAM,QAAS,GAC7B,OAAQ,OAAO,OACf,KAAM0U,GACN,KAAMI,GAAaC,CAAG,EACtB,KAAMmL,GAAgBnL,CAAG,CAC7B,CAAC,EACDhC,EAAiB,QAAQ,IAAIgC,EAAKS,CAAO,EACzC,GAAI,CACA,MAAMA,EAAQ,KAAK,EACnB5C,EAAe,CACX,KAAMsC,GAAG,aACT,MAAO6L,GAAiB,CACpB,GAAIhM,EAAK,KAAA/U,EAAM,OAAQwV,EAAQ,OAAQ,QAASA,EAAQ,OACxD,QAAS,GAAM,QAASA,EAAQ,gBAAgB,CACpD,CAAC,CACL,CAAC,EACD,MAAMA,EAAQ,OAAOqL,EAAW,IAAKL,IAAS,CAC1C,UAAWA,EACX,KAAMxO,EAAc,SAASwO,CAAG,GAAG,WAAa,QACpD,EAAE,CAAC,CACP,OAAS1K,EAAO,CACZ/C,EAAiB,QAAQ,OAAOgC,CAAG,EACnC,GAAI,CAAES,EAAQ,QAAQ,CAAG,MAAY,CAAC,CACtC5C,EAAe,CAAE,KAAMsC,GAAG,aAAc,GAAIH,CAAI,CAAC,EAGjDnB,EAAckC,GAAO,OAAS,gCACxBviB,EAAE,6BAA6B,EAC/B,mCAAmCuiB,GAAO,MAAQ,eAAe,IAAI,CAC/E,CACJ,EAAG,CAACpB,GAAgBI,GAAc9C,CAAa,CAAC,EAE1CgP,GAAqB,MAAM,YAAY,SAAY,CACrD,IAAMrL,EAASlC,EACf,GAAI,CAACkC,EAAQ,OACbjC,EAAiB,IAAI,EACrB,IAAM8B,EAAU,IAAIsL,GAAa,CAC7B,QAASnL,EAAO,IAAK,KAAMA,EAAO,KAAM,QAAS,GACjD,OAAQ,OAAO,OACf,KAAMjB,GACN,KAAMI,GAAaa,EAAO,GAAG,EAC7B,KAAMuK,GAAgBvK,EAAO,GAAG,CACpC,CAAC,EACD5C,EAAiB,QAAQ,IAAI4C,EAAO,IAAKH,CAAO,EAChD,GAAI,CACA,MAAMA,EAAQ,KAAK,EACnB5C,EAAe,CACX,KAAMsC,GAAG,aACT,MAAO6L,GAAiB,CAAE,GAAIpL,EAAO,IAAK,KAAMA,EAAO,KAAM,OAAQH,EAAQ,MAAO,CAAC,CACzF,CAAC,EACD,MAAMA,EAAQ,aAAaG,EAAO,UAAWA,EAAO,KAAK,CAC7D,OAASG,EAAO,CACZ/C,EAAiB,QAAQ,OAAO4C,EAAO,GAAG,EAC1C,GAAI,CAAEH,EAAQ,QAAQ,CAAG,MAAY,CAAC,CACtC5C,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIS,EAAO,IAAK,MAAOG,GAAO,MAAQ,aAAc,CAAC,CAC9F,CACJ,EAAG,CAACrC,EAAeiB,GAAgBI,EAAY,CAAC,EAE1CmM,GAAwB,MAAM,YAAY,IAAM,CAClD,IAAMlM,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAKS,EACL,GAAI,CACAA,EAAQ,WAAW,EACnBhC,EAAiB,EAAK,CAC1B,OAASsC,EAAO,CACZlD,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIH,EAAK,MAAOe,GAAO,MAAQ,gBAAiB,CAAC,CAC1F,CACJ,EAAG,CAAC,CAAC,EAGCoL,GAAe,MAAM,YAAY,CAACnM,EAAK,CAAE,SAAAoM,EAAW,EAAK,EAAI,CAAC,IAAM,CACtE,IAAM3L,EAAUzC,EAAiB,QAAQ,IAAIgC,CAAG,EAK1CqM,EAAQhN,EAAkB,QAAQ,IAAIW,CAAG,EAC3CqM,IACAhN,EAAkB,QAAQ,OAAOW,CAAG,EACpCqM,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAEhCnN,GAAmBmB,GAAY,CAC3B,IAAMuE,EAAO,CAAE,GAAGvE,CAAQ,EAC1B,cAAOuE,EAAK5E,CAAG,EACR4E,CACX,CAAC,EACDxF,EAAwBiB,GAAY,CAChC,IAAMuE,EAAO,CAAE,GAAGvE,CAAQ,EAC1B,cAAOuE,EAAK5E,CAAG,EACR4E,CACX,CAAC,EAGD5G,EAAiB,QAAQ,OAAOgC,CAAG,EACnCN,GAAmB,QAAQ,OAAOM,CAAG,EACrCnC,EAAe,CAAE,KAAMsC,GAAG,aAAc,GAAIH,CAAI,CAAC,EACjDvB,EAAiB,EAAK,EAClBgC,IAKa2L,EACP,QAAQ,QAAQ,EAAE,KAAK,IAAM3L,EAAQ,MAAM,CAAC,EAAE,MAAM,IAAM,CAAC,CAAC,EAC5D,QAAQ,QAAQ,GACjB,KAAK,IAAM,CAAE,GAAI,CAAEA,EAAQ,QAAQ,CAAG,MAAY,CAAC,CAAE,CAAC,CAEnE,EAAG,CAAC,CAAC,EAECF,GAAkB,MAAM,OAAO4L,EAAY,EACjD5L,GAAgB,QAAU4L,GAE1B,IAAMG,GAAyB,MAAM,YAAY,MAAOC,GAAS,CAC7D,IAAMvM,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAI,CAACS,EAAS,OACd,IAAMxc,EAAO,OAAOsoB,GAAQ,EAAE,EAAE,KAAK,EACrC,GAAKtoB,EACL,CAAAoa,GAAc,EAAE,EAChB,GAAI,CACA,GAAM,CAAE,YAAAmO,CAAY,EAAI,MAAM/L,EAAQ,SAASxc,CAAI,EACnD4Z,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkB7b,EAAM,MAAM,CAC3C,CAAC,EASD,IAAMwoB,EAAYD,EAAY,IAAK5wB,GAAMA,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,GAAG,EAC9D,GAAI6wB,KAAe/M,GAAmB,QAAQ,IAAIM,CAAG,GAAK,MACtDN,GAAmB,QAAQ,IAAIM,EAAKyM,CAAS,EACzCD,EAAY,OAAS,GAAG,CACxB,IAAME,EAAQF,EAAY,IAAK5wB,GAAMA,EAAE,IAAI,EACrC+wB,EAAMD,EAAM,SAAW,EACvB,GAAGA,EAAM,CAAC,CAAC,MACX,GAAGA,EAAM,MAAM,EAAG,EAAE,EAAE,KAAK,IAAI,CAAC,QAAQA,EAAMA,EAAM,OAAS,CAAC,CAAC,OACrE7O,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GACL,GAAG6M,CAAG,+DACN,QACJ,CACJ,CAAC,CACL,CAER,OAAS5L,EAAO,CACZlD,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkB,mBAAmBiB,GAAO,SAAW,eAAe,GAAI,QAAQ,CAC/F,CAAC,CACL,EACJ,EAAG,CAAC,CAAC,EASC6L,GAAgB,MAAM,QAAQ,IAAM,CACtC,GAAI,CAAC1O,EAAa,MAAO,CAAC,EAC1B,IAAM2O,EAAQ,IAAI,IAAI3O,EAAY,QAAQ,IAAKtiB,GAAMA,EAAE,SAAS,EAAE,OAAO,OAAO,CAAC,EACjF,OAAO+vB,GAAgB,OAAQhqB,GAAM,CAACkrB,EAAM,IAAIlrB,EAAE,EAAE,CAAC,CACzD,EAAG,CAACuc,EAAayN,EAAe,CAAC,EAE3BmB,GAAmB,MAAM,YAAY,MAAOhB,GAAe,CAC7D/M,EAAkB,EAAK,EACvB,IAAMiB,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAKS,EACL,GAAI,CACA,MAAMA,EAAQ,WAAWqL,EAAW,IAAKL,IAAS,CAC9C,UAAWA,EACX,KAAMxO,EAAc,SAASwO,CAAG,GAAG,WAAa,QACpD,EAAE,CAAC,CACP,OAAS1K,EAAO,CACZlC,EAAckC,GAAO,OAAS,gCACxBviB,EAAE,wBAAwB,EAC1BuiB,GAAO,OAAS,mBACZ,yBAAyBD,EAAa,WAAW,YACjD,qBAAqBC,GAAO,MAAQ,eAAe,IAAI,CACrE,CACJ,EAAG,CAAC9D,CAAa,CAAC,EAEZ8P,GAA0B,MAAM,YAAY,MAAOnC,GAAO,CAC5D,IAAM5K,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAKS,EACL,GAAI,CACA,MAAMA,EAAQ,aAAamK,CAAE,CACjC,OAAS7J,EAAO,CACZlD,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIH,EAAK,MAAOe,GAAO,MAAQ,eAAgB,CAAC,CACzF,CACJ,EAAG,CAAC,CAAC,EAUCiM,GAAqB,MAAM,YAAY,CAAChN,EAAKiN,IAAe,CAC9D,IAAMZ,EAAQhN,EAAkB,QAAQ,IAAIW,CAAG,EAC/C,GAAI,CAACqM,EAAO,OACZ,IAAM5L,EAAUzC,EAAiB,QAAQ,IAAIgC,CAAG,EAC1CkN,EAAOD,IAAe,KAAOA,EAAcxM,GAAS,kBAAkB,GAAK,KAMjF,GAAI,CAACyM,GAAQ,CAACA,EAAK,QAAUA,EAAK,SAAWb,EAAM,OAAQ,CACvDhN,EAAkB,QAAQ,OAAOW,CAAG,EACpCqM,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,EAC5BjN,EAAwBiB,GAAY,CAChC,IAAMuE,EAAO,CAAE,GAAGvE,CAAQ,EAC1B,cAAOuE,EAAK5E,CAAG,EACR4E,CACX,CAAC,EACD,MACJ,CACAyH,EAAM,SAASa,EAAK,YAAY,CACpC,EAAG,CAAC,CAAC,EACC9M,GAAwB,MAAM,OAAO4M,EAAkB,EAC7D5M,GAAsB,QAAU4M,GAWhC,IAAMG,GAAqB,MAAM,YAAY,MAAOnN,EAAKkN,IAAS,CAC9D,IAAME,EAAW/N,EAAkB,QAAQ,IAAIW,CAAG,EAClD,GAAIoN,GAAYA,EAAS,SAAWF,EAAK,OACrC,OAAAE,EAAS,SAASF,EAAK,YAAY,EAC5BE,EAEPA,IACA/N,EAAkB,QAAQ,OAAOW,CAAG,EACpC,MAAMoN,EAAS,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAEzC,IAAMf,EAAQ,IAAIgB,GAAe,CAC7B,WAAaxN,GAAcrC,EAAY,QAAQ,IAAIqC,CAAS,GACrDJ,GAAa,QAAQ,IAAII,CAAS,GAAG,SACrC,KACP,SAAWyN,GAAa,CACpBlO,EAAwBiB,IAAa,CAAE,GAAGA,EAAS,CAACL,CAAG,EAAGsN,CAAS,EAAE,CACzE,CACJ,CAAC,EACD,OAAAjO,EAAkB,QAAQ,IAAIW,EAAKqM,CAAK,EACxC,MAAMA,EAAM,KAAK,CACb,OAAQa,EAAK,OACb,OAAQtP,EAAY,OAAOoC,CAAG,GAAG,QAAUhC,EAAiB,QAAQ,IAAIgC,CAAG,GAAG,QAAU,GACxF,UAAWkN,EAAK,UAChB,MAAO,CAAC,CACZ,CAAC,EACMb,CACX,EAAG,CAACzO,CAAW,CAAC,EAUV2P,GAAuB,MAAM,YAAY,MAAOC,GAAc,CAChE,IAAMxN,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAKS,EACL,GAAI,CACA,MAAMA,EAAQ,UAAU,CACpB,UAAA+M,EACA,QAAUN,GAASC,GAAmBnN,EAAKkN,CAAI,CACnD,CAAC,CACL,OAASnM,EAAO,CAGZ,IAAMsL,EAAQhN,EAAkB,QAAQ,IAAIW,CAAG,EAC3CqM,IAAShN,EAAkB,QAAQ,OAAOW,CAAG,EAAGqM,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAChF,IAAMpqB,EAAO8e,GAAO,MAAQ,eAC5BlD,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GACL7d,IAAS,mBAAqBzD,EAAE,gCAAgC,EAC1DyD,IAAS,YAAczD,EAAE,yBAAyB,EAC9CA,EAAE,iBAAiBivB,GAAe1M,CAAK,CAAC,EAAE,EACpD,QACJ,CACJ,CAAC,CACL,CACJ,EAAG,CAACoM,EAAkB,CAAC,EAEjBO,GAAsB,MAAM,YAAY,SAAY,CACtD,IAAM1N,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACjDkN,EAAOzM,GAAS,kBAAkB,EACxC,GAAI,GAACA,GAAW,CAACyM,GACjB,GAAI,CAKA,IAAMb,EAAQ,MAAMc,GAAmBnN,EAAK,CAAE,GAAGkN,EAAM,OAAQ,EAAK,CAAC,EACrE,MAAMzM,EAAQ,SAAS,EACvB4L,EAAM,SAAS5L,EAAQ,gBAAgB,GAAG,cAAgB,CAAC,CAAC,CAChE,OAASM,EAAO,CACZ,IAAMsL,EAAQhN,EAAkB,QAAQ,IAAIW,CAAG,EAC3CqM,IAAShN,EAAkB,QAAQ,OAAOW,CAAG,EAAGqM,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAChFxO,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkBthB,EAAE,iBAAiBivB,GAAe1M,CAAK,CAAC,EAAE,EAAG,QAAQ,CACpF,CAAC,CACL,CACJ,EAAG,CAACoM,EAAkB,CAAC,EAUjBQ,GAAyB,MAAM,YAAY,IAAM,CACnD,IAAM3N,EAAM7B,EAAiB,QACvB+O,EAAOlN,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,GAAG,kBAAkB,EACpEkN,GACL3N,GAAmBc,IAAa,CAAE,GAAGA,EAAS,CAACL,CAAG,EAAGkN,EAAK,MAAO,EAAE,CACvE,EAAG,CAAC,CAAC,EAECU,GAAuB,MAAM,YAAY,SAAY,CACvD,IAAM5N,EAAM7B,EAAiB,QAC7B,GAAI,CAAC6B,EAAK,OACV,IAAMqM,EAAQhN,EAAkB,QAAQ,IAAIW,CAAG,EAC3CqM,IACAhN,EAAkB,QAAQ,OAAOW,CAAG,EACpCZ,EAAwBiB,GAAY,CAChC,IAAMuE,EAAO,CAAE,GAAGvE,CAAQ,EAC1B,cAAOuE,EAAK5E,CAAG,EACR4E,CACX,CAAC,EACD,MAAMyH,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAEtC,GAAI,CAAE,MAAMrO,EAAiB,QAAQ,IAAIgC,CAAG,GAAG,UAAU,CAAG,MAAY,CAAC,CAC7E,EAAG,CAAC,CAAC,EAEC6N,GAAmB,MAAM,YAAY,IACvC1P,EAAiB,QAAUkB,EAAkB,QAAQ,IAAIlB,EAAiB,OAAO,EAAI,KACtF,CAAC,CAAC,EAEC2P,GAAqB,MAAM,YAAY,IAAM,CAAED,GAAiB,GAAG,UAAU,CAAG,EAAG,CAACA,EAAgB,CAAC,EACrGE,GAAwB,MAAM,YAAY,IAAM,CAAEF,GAAiB,GAAG,aAAa,CAAG,EAAG,CAACA,EAAgB,CAAC,EAC3GG,GAAsB,MAAM,YAAY,IAAM,CAAEH,GAAiB,GAAG,WAAW,CAAG,EAAG,CAACA,EAAgB,CAAC,EAG7G,MAAM,UAAU,IAAM,CACb5P,GACLJ,EAAe,CAAE,KAAMsC,GAAG,aAAc,GAAIlC,CAAc,CAAC,CAC/D,EAAG,CAACA,CAAa,CAAC,EAClB,MAAM,UAAU,IAAM,CAClB,IAAM1S,EAAKyT,EAAe,QACtBzT,IAAIA,EAAG,UAAYA,EAAG,aAC9B,EAAG,CAAC2S,GAAeA,EAAY,SAAS,MAAM,CAAC,EAI/C,MAAM,UAAU,IAAM,IAAM,CAGxB,QAAWmO,KAAShN,EAAkB,QAAQ,OAAO,EACjDgN,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,EAEhChN,EAAkB,QAAQ,MAAM,EAChC,QAAWoB,KAAWzC,EAAiB,QAAQ,OAAO,EAClD,GAAI,CAAEyC,EAAQ,QAAQ,CAAG,MAAY,CAAC,CAE1CzC,EAAiB,QAAQ,MAAM,EAI/B,QAAW6B,IAAa,CAAC,GAAGJ,GAAa,QAAQ,KAAK,CAAC,EACnDiL,GAAiB,QAAQ7K,CAAS,CAE1C,EAAG,CAAC,CAAC,EAEL,IAAMoO,GAAgB,MAAM,YAAarlB,GAAO,CAC5C,GAAI,CAACA,EAAI,OACT,IAAMwe,EAAI1J,EAAU,QAAQ,IAAI9U,CAAE,EAC5Boa,EAAMxF,EAAY,QAAQ,IAAI5U,CAAE,EACtC,GAAI,CAACwe,GAAK,CAACpE,GAAO,CAACoE,EAAE,iBAAmBA,EAAE,gBAAgB,SAAW,EAAG,OACxE,IAAM8G,EAAO9G,EAAE,gBAAiBA,EAAE,gBAAkB,CAAC,EACrD,QAAW7kB,KAAO2rB,EAAQ,GAAI,CAAElL,EAAI,sBAAsBzgB,CAAG,CAAG,MAAY,CAAC,CACjF,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CACb8a,IACLH,EAAS,CAAE,KAAMsE,EAAG,aAAc,GAAInE,CAAgB,CAAC,GACnD,OAAO,SAAa,KAAe,SAAS,kBAAoB,YAAW4Q,GAAc5Q,CAAe,EAChH,EAAG,CAACA,EAAiB4Q,EAAa,CAAC,EAInC,IAAME,GAAa,MAAM,OAAO,EAAK,EACrC,MAAM,UAAU,IAAM,CAClB,GAAIA,GAAW,QAAS,OACxBA,GAAW,QAAU,GAKrB,IAAIC,EAAiB,GACjBC,EAAmB,KAEjBC,EAAsBrO,GAAU,CAClC,GAAIA,EAAM,OAAS,gBAAkB,CAACmO,EAClC,QAAWpL,KAAOxF,EAAY,QAAQ,OAAO,EACzC,GAAI,CACA,GAAIwF,EAAI,aAAeA,EAAI,YAAY,EAAG,CACtC,GAAI,CAAEA,EAAI,kBAAkB,CAAE,KAAM,kBAAmB,OAAQ,kBAAmB,UAAW,KAAK,IAAI,CAAE,CAAC,CAAG,MAAY,CAAC,CACzH,WAAW,IAAM,CAAE,GAAI,CAAEA,EAAI,WAAW,CAAG,MAAY,CAAC,CAAE,EAAG,GAAG,CACpE,MACIA,EAAI,WAAW,CAEvB,MAAY,CAAC,MAEVoL,IACPnO,EAAM,eAAe,EACrBA,EAAM,YAAc,GAE5B,EAEMsO,EAAyB,IAAM,CAC7B,SAAS,kBAAoB,UAC7BH,EAAiB,GACbC,GAAkB,aAAaA,CAAgB,EACnDA,EAAmB,WAAW,IAAM,CAAED,EAAiB,EAAO,EAAG,GAAI,GAC9D,SAAS,kBAAoB,YACpCA,EAAiB,GACbC,IAAoB,aAAaA,CAAgB,EAAGA,EAAmB,MAE3EJ,GAAc3Q,EAAY,OAAO,EAEzC,EAEA,cAAO,iBAAiB,eAAgBgR,CAAkB,EAC1D,SAAS,iBAAiB,mBAAoBC,CAAsB,EAE7D,IAAM,CACT,OAAO,oBAAoB,eAAgBD,CAAkB,EAC7D,SAAS,oBAAoB,mBAAoBC,CAAsB,EACnEF,IAAoB,aAAaA,CAAgB,EAAGA,EAAmB,MAC3E,QAAWrL,KAAOxF,EAAY,QAAQ,OAAO,EAAK,GAAI,CAAEwF,EAAI,WAAW,CAAG,MAAY,CAAC,CACvFxF,EAAY,QAAQ,MAAM,EAC1B,QAAWyM,KAASxM,EAAgB,QAAQ,OAAO,EAAK,GAAI,CAAEwM,EAAM,UAAU,CAAG,MAAY,CAAC,CAC9FxM,EAAgB,QAAQ,MAAM,EAC9BC,EAAU,QAAQ,MAAM,EACxBC,EAAU,QAAQ,MAAM,CAC5B,CACJ,EAAG,CAAC,CAAC,EAIL,IAAM6Q,GAAqBzpB,GAAc,CACrC,GAAI,CAEA,IAAMqmB,EAAQ,OAAOrmB,GAAc,SAAW,KAAK,MAAMA,CAAS,EAAIA,EAGhE0pB,EAAe,CACjB,KAAMrD,EAAM,KACZ,QAASA,EAAM,QACf,UAAWA,EAAM,UACjB,UAAWA,EAAM,UACjB,aAAcA,EAAM,aACpB,iBAAkBA,EAAM,iBACxB,KAAMA,EAAM,KAEZ,gBAAiBA,EAAM,gBAEvB,kBAAmB,GACnB,iBAAkB,SACtB,EAEA,OAAO,KAAK,UAAUqD,CAAY,CACtC,OAAS1N,EAAO,CACZ,eAAQ,MAAM,gCAAiCA,CAAK,EAC7Chc,CACX,CACJ,EASM2pB,GAAuBtD,IAEH,CAClB,KAAM,iCACN,QAAS,MACT,UAAWA,EAAM,UACjB,aAAcA,EAAM,aACpB,iBAAkBA,EAAM,iBACxB,UAAWA,EAAM,UAEjB,gBAAiBA,EAAM,gBAEvB,cAAeA,GAAO,eAAe,UAErC,aAAc,MAAM,QAAQA,EAAM,YAAY,GAAKA,EAAM,aAAa,QAAU,EAC1EA,EAAM,aACN,MACV,GAMEuD,GAAa,IACbC,GAAiB,IACjB,CAACxoB,GAAeyoB,EAAgB,EAAI,MAAM,SAAS,CAAC,EACpD,CAACxoB,GAAcyoB,EAAe,EAAI,MAAM,SAAS,CAAC,EAClD,CAACxoB,GAAcyoB,EAAe,EAAI,MAAM,SAAS,EAAK,EAGtDC,EAAiB,MAAM,OAAO,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,CAAC,EAGtF,MAAM,UAAU,IAAM,IAAM,CACxB,GAAI,CAAMA,EAAe,SAAWA,EAAe,QAAQ,QAAS,cAAcA,EAAe,QAAQ,KAAK,EAAGA,EAAe,QAAQ,MAAQ,KAAQ,MAAQ,CAAC,CACrK,EAAG,CAAC3R,CAAe,CAAC,EACpB,IAAM4R,GAAkB,IAAM,CAC1B,GAAI,CAAMD,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAClGA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,CACzB,EAGMG,GAAgB,SAAY,CAC9B,GAAM,CAAE,OAAAC,EAAQ,IAAAC,CAAI,EAAIJ,EAAe,SAAW,CAAC,EACnD,GAAI,CAACG,GAAU,CAACA,EAAO,OAAQ,OAC/B,IAAM9O,EAAU8O,EAAOC,EAAMD,EAAO,MAAM,EAC1C,GAAI,CAEA,IAAME,EADa,OAAO,OAAW,MAAkB,OAAO,YAAc,IAAM,KACtD,IAAM,IAC5BtiB,EAAM,MAAO,OAAO,eAAiB,OAAO,eAAesT,EAAS,CAAE,qBAAsB,IAAK,OAAQ,EAAG,KAAMgP,CAAQ,CAAC,EAAI,QAAQ,QAAQ,EAAE,GACnJtiB,GAAK4V,GAAa5V,CAAG,CAC7B,OAASrP,EAAG,CACR,QAAQ,KAAK,sCAAuCA,CAAC,CACzD,CACAoxB,IAAkBE,EAAe,SAAS,KAAO,IAAMA,EAAe,SAAS,QAAQ,QAAU,GAAM,CAAC,CAC5G,EAGMM,GAAmB,SAAY,CACjC,MAAMJ,GAAc,EACpB,IAAMK,EAAMP,EAAe,SAAS,QAAQ,QAAU,EACtD,GAAIO,EAAM,EAAG,CACT,IAAMC,IAAYR,EAAe,SAAS,KAAO,GAAK,GAAKO,EAC3DP,EAAe,QAAQ,IAAMQ,EAC7BV,GAAgBU,EAAU,CAAC,CAC/B,CACJ,EAEMjpB,GAAqB,IAAM,CAC7B,IAAMkpB,EAAgB,CAACnpB,GACvByoB,GAAgBU,CAAa,EAEzBA,GAEIT,EAAe,QAAQ,QACvB,cAAcA,EAAe,QAAQ,KAAK,EAC1CA,EAAe,QAAQ,MAAQ,MAEnC,QAAQ,IAAI,8CAA8C,IAEtDA,EAAe,QAAQ,OAAO,OAAS,IAEvCA,EAAe,QAAQ,OAAS,GAChC,cAAcA,EAAe,QAAQ,KAAK,EAC1CA,EAAe,QAAQ,MAAQ,YAAYM,GAAkB,GAAU,GAE3E,QAAQ,IAAI,+CAA+C,EAEnE,EAEM9oB,GAAc,SAAY,CAE5B,GADA,QAAQ,IAAI,+CAAyCJ,GAAe,0BAA2B4oB,EAAe,OAAO,EACjHA,EAAe,QAAQ,OAAO,OAAS,EAAG,CAC1C,IAAMQ,GAAWR,EAAe,QAAQ,IAAM,GAAKA,EAAe,QAAQ,OAAO,OACjFA,EAAe,QAAQ,IAAMQ,EAC7BV,GAAgBU,EAAU,CAAC,EAC3B,QAAQ,IAAI,8BAAwBA,EAAU,CAAC,EAE/C,GAAI,CAAE,cAAcR,EAAe,QAAQ,KAAK,CAAG,MAAQ,CAAC,CAC5DA,EAAe,QAAQ,MAAQ,KAC/B,MAAME,GAAc,EAEhB,CAAC5oB,IAAgB0oB,EAAe,QAAQ,OAAO,OAAS,GAExDA,EAAe,QAAQ,OAAS,GAChCA,EAAe,QAAQ,MAAQ,YAAYM,GAAkB,GAAU,GAEvEN,EAAe,QAAQ,OAAS,EAExC,MACI,QAAQ,IAAI,0CAAmC,CAEvD,EAEMvoB,GAAc,SAAY,CAE5B,GADA,QAAQ,IAAI,+CAAyCL,GAAe,0BAA2B4oB,EAAe,OAAO,EACjHA,EAAe,QAAQ,OAAO,OAAS,EAAG,CAC1C,IAAMU,GAAWV,EAAe,QAAQ,IAAM,EAAIA,EAAe,QAAQ,OAAO,QAAUA,EAAe,QAAQ,OAAO,OACxHA,EAAe,QAAQ,IAAMU,EAC7BZ,GAAgBY,EAAU,CAAC,EAC3B,QAAQ,IAAI,kCAA4BA,EAAU,CAAC,EACnD,GAAI,CAAE,cAAcV,EAAe,QAAQ,KAAK,CAAG,MAAQ,CAAC,CAC5DA,EAAe,QAAQ,MAAQ,KAC/B,MAAME,GAAc,EAChB,CAAC5oB,IAAgB0oB,EAAe,QAAQ,OAAO,OAAS,GAExDA,EAAe,QAAQ,OAAS,GAChCA,EAAe,QAAQ,MAAQ,YAAYM,GAAkB,GAAU,GAEvEN,EAAe,QAAQ,OAAS,EAExC,MACI,QAAQ,IAAI,0CAAmC,CAEvD,EAGMW,EAAoB,MAAM,OAAO,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,CAAC,EAEnFC,GAAiB,MAAO1vB,GAAS,CACnC,GAAI,CACA,IAAM2vB,EAAe,OAAO3vB,GAAS,SAAWA,EAAK,OAAS,KAAK,UAAUA,CAAI,EAAE,OAE7EmvB,EADa,OAAO,OAAW,MAAkB,OAAO,YAAc,IAAM,KACtD,IAAM,IAGlC,GAAI,OAAO,OAAO,gCAAmC,WACjD,GAAI,CACA,IAAMS,GAAM,OAAO5vB,GAAS,SAAW,KAAK,MAAMA,CAAI,EAAIA,EACpD6vB,GAAY,MAAM,OAAO,+BAA+BD,GAAK,CAAE,qBAAsB,IAAK,KAAMT,EAAS,OAAQ,CAAE,CAAC,EAC1H,GAAIU,GAAW,CACX,GAAI,CAAMf,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,EACrBpM,GAAaoN,EAAS,EACtBlB,GAAiB,CAAC,EAClBC,GAAgB,CAAC,EACjB,MACJ,CACJ,OAASpxB,GAAG,CACR,QAAQ,KAAK,2DAA4DA,IAAG,SAAWA,EAAC,CAC5F,CAIJ,GAAI,OAAO,OAAO,0BAA6B,WAC3C,GAAI,CACA,IAAMwiB,GAAU,OAAOhgB,GAAS,SAAWA,EAAO,KAAK,UAAUA,CAAI,EAC/D6vB,GAAY,MAAM,OAAO,yBAAyB7P,GAAS,CAAE,qBAAsB,IAAK,KAAMmP,EAAS,OAAQ,CAAE,CAAC,EACxH,GAAIU,GAAW,CACX,GAAI,CAAMf,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,EACrBpM,GAAaoN,EAAS,EACtBlB,GAAiB,CAAC,EAClBC,GAAgB,CAAC,EACjB,MACJ,CACJ,OAASpxB,GAAG,CACR,QAAQ,KAAK,0DAA2DA,IAAG,SAAWA,EAAC,CAC3F,CAIJ,IAAMwiB,EAAU,OAAOhgB,GAAS,SAAWA,EAAO,KAAK,UAAUA,CAAI,EACrE,GAAIggB,EAAQ,QAAUyO,GAAY,CAC9B,GAAI,CAAC,OAAO,eAAgB,MAAM,IAAI,MAAM,+BAA+B,EAC3E,GAAI,CAAMK,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,EACrB,IAAMgB,GAAY,MAAM,OAAO,eAAe7P,EAAS,CAAE,qBAAsB,IAAK,KAAMmP,EAAS,OAAQ,CAAE,CAAC,EAC1G1M,GAAaoN,EAAS,EAC1BlB,GAAiB,CAAC,EAClBC,GAAgB,CAAC,EACb,MACR,CAGA,GAAI,CAAME,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,EACrB,IAAMnmB,EAAK,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,GAG7DonB,EAAY,KAAK,IAAI,IAAK,KAAK,MAAM9P,EAAQ,OAD7B,EACmD,CAAC,EACpE1e,EAAQ,KAAK,KAAK0e,EAAQ,OAAS8P,CAAS,EAC5CC,GAAY,CAAC,EACnB,QAAS/xB,GAAI,EAAGA,GAAIsD,EAAOtD,KAAK,CAC5B,IAAMgyB,GAAMhyB,GAAI,EACViyB,GAAOjQ,EAAQ,MAAMhiB,GAAI8xB,GAAY9xB,GAAI,GAAK8xB,CAAS,EAC7DC,GAAU,KAAK,KAAK,UAAU,CAAE,IAAK,CAAE,EAAG,EAAG,GAAArnB,EAAI,IAAAsnB,GAAK,MAAA1uB,EAAO,GAAI,KAAM,EAAG,KAAM2uB,EAAK,CAAC,CAAC,CAC3F,CACA,GAAI,CAAC,OAAO,eAAgB,MAAM,IAAI,MAAM,+BAA+B,EAC3E,GAAIF,GAAU,SAAW,EAAG,CACxB,IAAMljB,GAAM,MAAM,OAAO,eAAekjB,GAAU,CAAC,EAAG,CAAE,qBAAsB,IAAK,OAAQ,EAAG,KAAMZ,CAAQ,CAAC,EAC7G1M,GAAa5V,EAAG,EAChB8hB,GAAiB,CAAC,EAClBC,GAAgB,CAAC,EACb,MACJ,CACJE,EAAe,QAAQ,OAASiB,GAChCjB,EAAe,QAAQ,IAAM,EAC7BA,EAAe,QAAQ,OAAS,GAChCH,GAAiBoB,GAAU,MAAM,EACjCnB,GAAgB,CAAC,EACb,IAAMsB,GAAU,CAAE,qBAAsB,IAAK,OAAQ,EAAG,KAAMf,CAAQ,EACtE,MAAM,WAAW,EAEZ/oB,KAEL0oB,EAAe,QAAQ,OAAS,GAChCA,EAAe,QAAQ,MAAQ,YAAYM,GAAkB,GAAU,GAE3E,MACJ,OAASvO,EAAO,CACZ,QAAQ,MAAM,6BAA8BA,CAAK,EACjDO,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,+BAA+BqhB,EAAM,OAAO,GACrD,KAAM,OACV,CAAC,CAAC,CACN,CACJ,EAEMsP,GAA2BC,IAEX,CACd,KAAM,wBACN,QAASA,EAAa,QACtB,UAAWA,EAAa,UACxB,UAAWA,EAAa,UACxB,aAAcA,EAAa,aAC3B,iBAAkBA,EAAa,iBAC/B,KAAMA,EAAa,KACnB,IAAKA,EAAa,IAClB,gBAAiBA,EAAa,gBAC9B,aAAcA,EAAa,aAG3B,cAAe,CACX,QAAS,OACT,QAASA,EAAa,YACtB,UAAWA,EAAa,UAAY,IACpC,QAASA,EAAa,QACtB,UAAWA,EAAa,aAC5B,EAGA,eAAgB,CACZ,QAAS,QACT,QAASA,EAAa,aACtB,UAAWA,EAAa,UAAY,IACpC,QAASA,EAAa,QACtB,UAAWA,EAAa,cAC5B,EAGA,cAAe,CACX,UAAWA,EAAa,cACxB,UAAWA,EAAa,UACxB,MAAOA,EAAa,UACpB,QAASA,EAAa,OAC1B,EAGA,cAAe,CACX,MAAO,WACP,MAAO,GACP,MAAO,MACP,oBAAqB,CACjB,WAAY,CAAE,OAAQ,GAAO,QAAS,yBAA0B,OAAQ,CAAE,EAC1E,YAAa,CAAE,OAAQ,GAAM,QAAS,+BAAgC,OAAQ,EAAG,EACjF,iBAAkB,CAAE,OAAQ,GAAO,QAAS,2BAA4B,OAAQ,CAAE,EAClF,aAAc,CAAE,OAAQ,GAAM,QAAS,uBAAwB,OAAQ,CAAE,EACzE,MAAO,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EAChG,mBAAoB,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EAC7G,IAAK,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EAC9F,iBAAkB,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EAC3G,cAAe,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EACxG,iBAAkB,CAAE,OAAQ,GAAO,QAAS,mDAAoD,OAAQ,CAAE,CAC9G,EACA,UAAWA,EAAa,UACxB,QAAS,mEACT,WAAY,GACZ,aAAc,EACd,YAAa,EACb,YAAa,OACb,iBAAkB,EACtB,CACJ,GAKEC,GAAe,MAAOC,GAAgB,CACxC,GAAI,CAYA,GAXA,QAAQ,IAAI,mBAAoBA,EAAY,UAAU,EAAG,GAAG,EAAI,KAAK,EACrE,QAAQ,IAAI,wBAAyBb,EAAkB,OAAO,EAU1Da,EAAY,WAAW,MAAM,GAAKA,EAAY,WAAW,CAAC,IAAM,EAChE,OAAAb,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EACzEtqB,GACAD,GAAeorB,CAAW,EAE1BtrB,EAAcsrB,CAAW,EAE7BlP,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,yBAAyB,EACpC,KAAM,SACV,CAAC,CAAC,EACFsH,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,EAK/B,GAAI0qB,EAAY,WAAW,UAAU,GAAMb,EAAkB,SAAWA,EAAkB,QAAQ,GAAK,CACnG,QAAQ,IAAI,yBAA0Ba,EAAY,UAAU,EAAG,EAAE,EAAI,KAAK,EAGrEb,EAAkB,QAAQ,KAC3B,QAAQ,IAAI,uCAAuC,EAEnDA,EAAkB,QAAU,CACxB,GAAI,OAAO,KAAK,IAAI,CAAC,GAKrB,MAAO,EACP,KAAM,IAAI,IACV,MAAO,CAAC,EACR,aAAc,KAAK,IAAI,CAC3B,GAIJ,IAAMc,EAAYD,EAAY,UAAU,EAAG,EAAE,EAG7C,GAAIb,EAAkB,QAAQ,KAAK,IAAIc,CAAS,EAC5C,eAAQ,IAAI,oCAAoC,EACzC,QAAQ,QAAQ,EAAK,EAGhCd,EAAkB,QAAQ,KAAK,IAAIc,CAAS,EAC5Cd,EAAkB,QAAQ,MAAM,KAAKa,CAAW,EAChDb,EAAkB,QAAQ,aAAe,KAAK,IAAI,EAGlD,GAAI,CACA,IAAMe,EAAcf,EAAkB,QAAQ,KAAK,KACnD,SAAS,cAAc,IAAI,YAAY,mBAAoB,CACvD,OAAQ,CACJ,GAAIA,EAAkB,QAAQ,GAC9B,IAAKe,EACL,MAAOf,EAAkB,QAAQ,KACrC,CACJ,CAAC,CAAC,EAGFd,GAAiBc,EAAkB,QAAQ,KAAK,EAChDb,GAAgB4B,CAAW,CAC/B,MAAQ,CAAC,CAGT,IAAMC,EAAahB,EAAkB,QAAQ,KAAK,MAAQA,EAAkB,QAAQ,MAGpF,GAFA,QAAQ,IAAI,qBAAqBA,EAAkB,QAAQ,KAAK,IAAI,IAAIA,EAAkB,QAAQ,KAAK,eAAegB,CAAU,EAAE,EAE9H,CAACA,EAED,eAAQ,IAAI,iBAAiBhB,EAAkB,QAAQ,KAAK,IAAI,IAAIA,EAAkB,QAAQ,KAAK,uBAAuB,EACnH,QAAQ,QAAQ,EAAK,EAIhC,GAAI,CACA,IAAMiB,EAAiBjB,EAAkB,QAAQ,MAAM,KAAK,EAAE,EAE9D,OAAItqB,GACAD,GAAewrB,CAAc,EAE7B1rB,EAAc0rB,CAAc,EAGhCtP,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,qDACT,KAAM,SACV,CAAC,CAAC,EAGFiwB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7E7pB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,OAASpI,EAAG,CACR,eAAQ,KAAK,uCAAwCA,CAAC,EAC/C,QAAQ,QAAQ,EAAK,CAChC,CACJ,CAGA,GAAI8yB,EAAY,OAAS,KAAO,CAACA,EAAY,WAAW,GAAG,GAAK,CAACA,EAAY,WAAW,GAAG,EAAG,CAC1F,QAAQ,IAAI,0DAA2DA,EAAY,UAAU,EAAG,EAAE,EAAI,KAAK,EAGtGb,EAAkB,QAAQ,KAC3B,QAAQ,IAAI,iDAAiD,EAC7DA,EAAkB,QAAU,CACxB,GAAI,OAAO,KAAK,IAAI,CAAC,GAKrB,MAAO,EACP,KAAM,IAAI,IACV,MAAO,CAAC,EACR,aAAc,KAAK,IAAI,CAC3B,GAIJ,IAAMc,EAAYD,EAAY,UAAU,EAAG,EAAE,EAG7C,GAAIb,EAAkB,QAAQ,KAAK,IAAIc,CAAS,EAC5C,eAAQ,IAAI,oCAAoC,EACzC,QAAQ,QAAQ,EAAK,EAGhCd,EAAkB,QAAQ,KAAK,IAAIc,CAAS,EAC5Cd,EAAkB,QAAQ,MAAM,KAAKa,CAAW,EAChDb,EAAkB,QAAQ,aAAe,KAAK,IAAI,EAGlD,GAAI,CACA,IAAMe,EAAcf,EAAkB,QAAQ,KAAK,KACnD,SAAS,cAAc,IAAI,YAAY,mBAAoB,CACvD,OAAQ,CACJ,GAAIA,EAAkB,QAAQ,GAC9B,IAAKe,EACL,MAAOf,EAAkB,QAAQ,KACrC,CACJ,CAAC,CAAC,EAGFd,GAAiBc,EAAkB,QAAQ,KAAK,EAChDb,GAAgB4B,CAAW,CAC/B,MAAQ,CAAC,CAGT,IAAMC,EAAahB,EAAkB,QAAQ,KAAK,MAAQA,EAAkB,QAAQ,MAGpF,GAFA,QAAQ,IAAI,qBAAqBA,EAAkB,QAAQ,KAAK,IAAI,IAAIA,EAAkB,QAAQ,KAAK,eAAegB,CAAU,EAAE,EAE9H,CAACA,EAED,eAAQ,IAAI,iBAAiBhB,EAAkB,QAAQ,KAAK,IAAI,IAAIA,EAAkB,QAAQ,KAAK,uBAAuB,EACnH,QAAQ,QAAQ,EAAK,EAIhC,GAAI,CACA,IAAMiB,EAAiBjB,EAAkB,QAAQ,MAAM,KAAK,EAAE,EAE9D,OAAItqB,GACAD,GAAewrB,CAAc,EAE7B1rB,EAAc0rB,CAAc,EAGhCtP,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,qDACT,KAAM,SACV,CAAC,CAAC,EAGFiwB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7E7pB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,OAASpI,EAAG,CACR,eAAQ,KAAK,uCAAwCA,CAAC,EAC/C,QAAQ,QAAQ,EAAK,CAChC,CACJ,CAIA,IAAImzB,EACJ,GAAI,OAAO,OAAO,kBAAqB,WAAY,CAC/C,IAAMC,EAAM,OAAO,iBAAiBN,CAAW,EAC3C,OAAOM,GAAQ,SACfD,EAAa,KAAK,MAAMC,CAAG,EAE3BD,EAAaC,CAErB,KAAO,CACH,IAAMC,EAAqB,OAAO,OAAO,oBAAuB,WAAc,OAAO,mBAAmBP,CAAW,EAAIA,EACvHK,EAAa,KAAK,MAAME,CAAiB,CAC7C,CAIA,GAHA,QAAQ,IAAI,gBAAiBF,CAAU,EAGnCA,EAAW,KAAOA,EAAW,KAAM,CACnC,GAAM,CAAE,IAAAG,CAAI,EAAIH,EAEhB,GAAI,CAAClB,EAAkB,QAAQ,IAAMA,EAAkB,QAAQ,KAAOqB,EAAI,GAAI,CAC1ErB,EAAkB,QAAU,CAAE,GAAIqB,EAAI,GAAI,MAAOA,EAAI,OAAS,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,EAAG,aAAc,KAAK,IAAI,CAAE,EACtH,GAAI,CACA,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAIA,EAAI,GAAI,IAAK,EAAG,MAAOA,EAAI,OAAS,CAAE,CAAE,CAAC,CAAC,CACzH,MAAQ,CAAC,CACb,CAEKrB,EAAkB,QAAQ,KAAK,IAAIqB,EAAI,GAAG,IAC3CrB,EAAkB,QAAQ,KAAK,IAAIqB,EAAI,GAAG,EAC1CrB,EAAkB,QAAQ,MAAM,KAAKa,CAAW,EAChDb,EAAkB,QAAQ,aAAe,KAAK,IAAI,GAGtD,GAAI,CACA,IAAMe,EAAcf,EAAkB,QAAQ,KAAK,KACnD,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAIqB,EAAI,GAAI,IAAKN,EAAa,MAAOf,EAAkB,QAAQ,OAASqB,EAAI,OAAS,CAAE,CAAE,CAAC,CAAC,CACtK,MAAQ,CAAC,CAET,GAAI,EADerB,EAAkB,QAAQ,KAAK,OAASA,EAAkB,QAAQ,OAAS,IAG1F,OAAO,QAAQ,QAAQ,EAAK,EAGhC,GAAIqB,EAAI,KAAO,MACX,GAAI,CAMA,IAAMC,EAJQtB,EAAkB,QAAQ,MACnC,IAAIp0B,GAAK,KAAK,MAAMA,CAAC,CAAC,EACtB,KAAK,CAAC6B,EAAG2C,KAAO3C,EAAE,IAAI,KAAO,IAAM2C,EAAE,IAAI,KAAO,EAAE,EAClD,IAAIzC,GAAKA,EAAE,MAAQ,EAAE,EACH,KAAK,EAAE,EACxB4zB,EAAa,KAAK,MAAMD,CAAQ,EAClC5rB,GACAD,GAAe,KAAK,UAAU8rB,EAAY,KAAM,CAAC,CAAC,EAElDhsB,EAAc,KAAK,UAAUgsB,EAAY,KAAM,CAAC,CAAC,EAErD5P,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAAE,QAAS,kDAAmD,KAAM,SAAU,CAAC,CAAC,EAC9G,GAAI,CAAE,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAIsxB,EAAI,EAAG,CAAE,CAAC,CAAC,CAAG,MAAQ,CAAC,CAExG,OAAArB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7E7pB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,OAASpI,EAAG,CACR,eAAQ,KAAK,yCAA0CA,CAAC,EACjD,QAAQ,QAAQ,EAAK,CAChC,SACOszB,EAAI,KAAO,MAClB,GAAI,CAKA,IAAMC,EAJQtB,EAAkB,QAAQ,MACnC,IAAIp0B,GAAK,KAAK,MAAMA,CAAC,CAAC,EACtB,KAAK,CAAC6B,EAAG2C,KAAO3C,EAAE,IAAI,KAAO,IAAM2C,EAAE,IAAI,KAAO,EAAE,EAClD,IAAIzC,GAAKA,EAAE,MAAQ,EAAE,EACH,KAAK,EAAE,EAC1B4zB,EACJ,GAAI,OAAO,OAAO,kBAAqB,WAAY,CAC/C,IAAMJ,EAAM,OAAO,iBAAiBG,CAAQ,EAC5CC,EAAc,OAAOJ,GAAQ,SAAY,KAAK,MAAMA,CAAG,EAAIA,CAC/D,MACII,EAAa,KAAK,MAAMD,CAAQ,EAEhC5rB,GACAD,GAAe,KAAK,UAAU8rB,EAAY,KAAM,CAAC,CAAC,EAElDhsB,EAAc,KAAK,UAAUgsB,EAAY,KAAM,CAAC,CAAC,EAErD5P,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAAE,QAAS,kDAAmD,KAAM,SAAU,CAAC,CAAC,EAC9G,GAAI,CAAE,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAIsxB,EAAI,EAAG,CAAE,CAAC,CAAC,CAAG,MAAQ,CAAC,CACxG,OAAArB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7E7pB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,OAASpI,EAAG,CACR,eAAQ,KAAK,yCAA0CA,CAAC,EACjD,QAAQ,QAAQ,EAAK,CAChC,SACO,OAAO,kBAAmB,CACjC,GAAI,CACA,IAAMyzB,EAAU,MAAM,OAAO,kBAAkBxB,EAAkB,QAAQ,KAAK,EAClF,GAAIwB,EAAQ,OAAS,EAAG,CACpB,GAAM,CAAE,WAAAD,CAAW,EAAIC,EAAQ,CAAC,EAC5B9rB,GACAD,GAAe,KAAK,UAAU8rB,EAAY,KAAM,CAAC,CAAC,EAElDhsB,EAAc,KAAK,UAAUgsB,EAAY,KAAM,CAAC,CAAC,EAEjD5P,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAAE,QAAS,mDAAoD,KAAM,SAAU,CAAC,CAAC,EAC/G,GAAI,CAAE,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAIsxB,EAAI,EAAG,CAAE,CAAC,CAAC,CAAG,MAAQ,CAAC,CACxG,OAAArB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7E7pB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,CACJ,OAASpI,EAAG,CACR,QAAQ,KAAK,sCAAuCA,CAAC,CACzD,CACA,OAAO,QAAQ,QAAQ,EAAK,CAChC,KACI,QAAO,QAAQ,QAAQ,EAAK,CAEpC,CAGA,GAAImzB,EAAW,OAAS,iCAAkC,CACtD,QAAQ,IAAI,2DAA2D,EACvE,IAAMO,EAAYf,GAAwBQ,CAAU,EAGpD,OAAIxrB,IAEAD,GAAe,KAAK,UAAUgsB,EAAW,KAAM,CAAC,CAAC,EACjD,QAAQ,IAAI,8EAAuE,IAGnFlsB,EAAc,KAAK,UAAUksB,EAAW,KAAM,CAAC,CAAC,EAChD,QAAQ,IAAI,yEAAkE,GAElF9P,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,kFACT,KAAM,SACV,CAAC,CAAC,EACFoG,GAAsB,EAAK,EACpB,EACX,KAOK,QAAI+qB,EAAW,OAAS,0BACzBvP,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,eAAe,EAC1B,KAAM,OACV,CAAC,CAAC,EACK,KAGH,CAACqyB,EAAW,KAAOA,EAAW,OAAS,yBACvCvP,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,sBAAsB,EACjC,KAAM,SACV,CAAC,CAAC,EAIF6G,IAEA,QAAQ,IAAI,wCAAyCwrB,CAAU,EAC/DzrB,GAAe,KAAK,UAAUyrB,EAAY,KAAM,CAAC,CAAC,IAGlD,QAAQ,IAAI,uCAAwCA,CAAU,EAC9D3rB,EAAc,KAAK,UAAU2rB,EAAY,KAAM,CAAC,CAAC,GAErDvP,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,0CACT,KAAM,SACV,CAAC,CAAC,EACFoG,GAAsB,EAAK,EACpB,GAEf,MAAgB,CAEZ,OAAIT,GAEAD,GAAeorB,CAAW,EAG1BtrB,EAAcsrB,CAAW,EAE7BlP,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,0CACT,KAAM,SACV,CAAC,CAAC,EACFoG,GAAsB,EAAK,EACpB,EACX,CACJ,EAKMgB,GAAoB,SAAY,CAClC,GAAI,CAEAD,GAAoB,EAAI,EACxByb,GAAa,EAAE,EACfE,GAAiB,EAAK,EACtB5c,EAAc,EAAK,EACnB+c,GAAa,EAAE,EAEf,IAAMyI,EAAQ,MAAMnkB,GAAiB,QAAQ,kBAAkB,EAG/Dqb,GAAa8I,CAAK,EAClB5I,GAAiB,EAAI,EAGrB,IAAM6O,EAAc,OAAOjG,GAAU,SAAW,KAAK,UAAUA,CAAK,EAAIA,EACxE,GAAI,CACA,GAAI,OAAO,OAAO,wBAA2B,WAAY,CACrD,IAAMkG,EAAM,OAAO,uBAAuBD,CAAW,EAE/CE,EAAgB,EAClB/vB,EAAQ+vB,EACRvB,EAAY,KAAK,IAAI,IAAK,KAAK,KAAKsB,EAAI,OAASC,CAAa,CAAC,EAC/DvB,GAAa,IAAGA,EAAY,KAG5BsB,EAAI,QAAUtB,GACdxuB,EAAQ,EACRwuB,EAAYsB,EAAI,SAGhBtB,EAAY,KAAK,KAAKsB,EAAI,OAASC,CAAa,EAChD/vB,EAAQ+vB,GAGZ,IAAM3oB,EAAK,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,GAC7DumB,EAAS,CAAC,EAChB,QAASjxB,GAAI,EAAGA,GAAIsD,EAAOtD,KAAK,CAC5B,IAAMgyB,GAAMhyB,GAAI,EACViyB,GAAOmB,EAAI,MAAMpzB,GAAI8xB,GAAY9xB,GAAI,GAAK8xB,CAAS,EAEzDb,EAAO,KAAKgB,EAAI,CACpB,CAIA,IAAMd,GADa,OAAO,OAAW,MAAkB,OAAO,YAAc,IAAM,KACtD,IAAM,IAClC,GAAI,OAAO,gBAAkBF,EAAO,OAAS,EAAG,CAC5C,IAAMqC,GAAW,MAAM,OAAO,eAAerC,EAAO,CAAC,EAAG,CAAE,qBAAsB,IAAK,KAAME,GAAS,OAAQ,CAAE,CAAC,EAC3GmC,IAAU7O,GAAa6O,EAAQ,CACvC,CAGA,GAAI,CAAMxC,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAAG,EAAQ,IAAK,EAAG,OAAQ,EAAK,EACrEN,GAAiBM,EAAO,MAAM,EAC9BL,GAAgB,CAAC,EACjBC,GAAgB,EAAK,EAGrB,IAAM0C,GAAa,IACnBzC,EAAe,QAAQ,MAAQ,YAAYM,GAAkBmC,EAAU,EAGvE,GAAI,CAAE7rB,EAAc,EAAI,CAAG,MAAQ,CAAC,CACxC,KAAO,CAEH,MAAMgqB,GAAexE,CAAK,EAC1B,GAAI,CAAExlB,EAAc,EAAI,CAAG,MAAQ,CAAC,CACxC,CACJ,OAASlI,EAAG,CACR,QAAQ,KAAK,8BAA+BA,CAAC,CACjD,CAEyB8G,GAAS,OAAO5I,GACrCA,EAAE,OAAS,WACVA,EAAE,QAAQ,SAAS4C,EAAE,wBAAwB,CAAC,GAAK5C,EAAE,QAAQ,SAAS4C,EAAE,wBAAwB,CAAC,EACtG,EAEqB,SAAW,IAC5B8iB,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,4BAA4B,EACvC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF8iB,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,qBAAqB,EAChC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,GAID,OAAO,oBACRmpB,GAAoB,EAAE,MAAM,QAAQ,KAAK,CAEzB,OAAS5G,EAAO,CAC5BO,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,8BAA8BqhB,EAAM,OAAO,GACpD,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,CACN,QAAE,CACEla,GAAoB,EAAK,CAC7B,CACZ,EAEM6qB,GAAqB,SAAY,CACnC,GAAI,CAEA,GAAI,CAACzsB,GAAW,KAAK,EAAG,CACpBqc,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,oBAAoB,EAC/B,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EACF,MACJ,CAEA,GAAI,CACA8iB,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,2BAA2B,EACtC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF,IAAI4sB,EACJ,GAAI,CAEA,GAAI,OAAO,OAAO,kBAAqB,WAAY,CAC/C,IAAM0F,EAAM,OAAO,iBAAiB7rB,GAAW,KAAK,CAAC,EACrDmmB,EAAS,OAAO0F,GAAQ,SAAY,KAAK,MAAMA,CAAG,EAAIA,CAC1D,KAAO,CACH,IAAMa,EAAW,OAAO,OAAO,oBAAuB,WAAc,OAAO,mBAAmB1sB,GAAW,KAAK,CAAC,EAAIA,GAAW,KAAK,EACnImmB,EAAQ,KAAK,MAAMuG,CAAO,CAC9B,CACJ,OAASC,EAAY,CACjB,MAAM,IAAI,MAAM,8BAA8BA,EAAW,OAAO,EAAE,CACtE,CAEI,GAAI,CAACxG,GAAS,OAAOA,GAAU,SAC3B,MAAM,IAAI,MAAM,kCAAkC,EAKtD,GAAI,EADsBA,EAAM,IAAM,SAAaA,EAAM,OAAS,yBAE9D,MAAM,IAAI,MAAM,kEAAkE,EAGtF,IAAME,EAAS,MAAMrkB,GAAiB,QAAQ,mBAAmBmkB,CAAK,EAGtE7I,GAAc+I,CAAM,EACpB7I,GAAkB,EAAI,EAGtB,IAAMoP,EAAe,OAAOvG,GAAW,SAAW,KAAK,UAAUA,CAAM,EAAIA,EAC3E,GAAI,CACA,GAAI,OAAO,OAAO,wBAA2B,WAAY,CACrD,IAAMgG,EAAM,OAAO,uBAAuBO,CAAY,EAEhDN,EAAgB,EAClB/vB,EAAQ+vB,EACRvB,EAAY,KAAK,IAAI,IAAK,KAAK,KAAKsB,EAAI,OAASC,CAAa,CAAC,EAC/DvB,GAAa,IAAGA,EAAY,KAG5BsB,EAAI,QAAUtB,GACdxuB,EAAQ,EACRwuB,EAAYsB,EAAI,SAGhBtB,EAAY,KAAK,KAAKsB,EAAI,OAASC,CAAa,EAChD/vB,EAAQ+vB,GAGZ,IAAM3oB,GAAK,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,GAC7DumB,GAAS,CAAC,EAChB,QAASjxB,GAAI,EAAGA,GAAIsD,EAAOtD,KAAK,CAC5B,IAAMgyB,GAAMhyB,GAAI,EACViyB,GAAOmB,EAAI,MAAMpzB,GAAI8xB,GAAY9xB,GAAI,GAAK8xB,CAAS,EAEzDb,GAAO,KAAKgB,EAAI,CACpB,CAGA,IAAMd,GADa,OAAO,OAAW,MAAkB,OAAO,YAAc,IAAM,KACtD,IAAM,IAClC,GAAI,OAAO,gBAAkBF,GAAO,OAAS,EAAG,CAC5C,IAAMqC,GAAW,MAAM,OAAO,eAAerC,GAAO,CAAC,EAAG,CAAE,qBAAsB,IAAK,KAAME,GAAS,OAAQ,CAAE,CAAC,EAC3GmC,IAAU7O,GAAa6O,EAAQ,CACvC,CAEA,GAAI,CAAMxC,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAAG,GAAQ,IAAK,EAAG,OAAQ,EAAK,EACrEN,GAAiBM,GAAO,MAAM,EAC9BL,GAAgB,CAAC,EACjBC,GAAgB,EAAK,EAErB,IAAM0C,GAAa,IACnBzC,EAAe,QAAQ,MAAQ,YAAYM,GAAkBmC,EAAU,EAGvE,GAAI,CAAE7rB,EAAc,EAAI,CAAG,MAAQ,CAAC,CACxC,KAAO,CAEH,MAAMgqB,GAAetE,CAAM,EAC3B,GAAI,CAAE1lB,EAAc,EAAI,CAAG,MAAQ,CAAC,CACxC,CACJ,OAASlI,EAAG,CACR,QAAQ,KAAK,+BAAgCA,CAAC,CAClD,CAMI,OAAOgJ,IAAsB,YAC7BA,GAAkB,EAIOlC,GAAS,OAAO5I,GAC7CA,EAAE,OAAS,WACVA,EAAE,QAAQ,SAAS4C,EAAE,sBAAsB,CAAC,GAAK5C,EAAE,QAAQ,SAAS4C,EAAE,sBAAsB,CAAC,EAClG,EAE6B,SAAW,IACpC8iB,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,0BAA0B,EACrC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF8iB,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,mBAAmB,EAC9B,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,GAKG,OAAO,oBACRmpB,GAAoB,EAAE,MAAM,QAAQ,KAAK,CAEjD,OAAS5G,EAAO,CACZ,QAAQ,MAAM,+BAAgCA,CAAK,EACnDO,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,oCAAoCqhB,EAAM,OAAO,GAC1D,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,CACN,CACR,OAASA,EAAO,CACZ,QAAQ,MAAM,+BAAgCA,CAAK,EACnDO,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,gCAAgCqhB,EAAM,OAAO,GACtD,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,CACN,CACJ,EAEM+Q,GAAgB,SAAY,CAC9B,GAAI,CACA,GAAI,CAAC3sB,GAAY,KAAK,EAAG,CACrBmc,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,kBAAkB,EAC7B,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EACF,MACJ,CAEA,GAAI,CACA8iB,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,yBAAyB,EACpC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF,IAAI8sB,EACJ,GAAI,CAEA,GAAI,OAAO,OAAO,kBAAqB,WAAY,CAC/C,IAAMyG,EAAY,OAAO,iBAAiB5sB,GAAY,KAAK,CAAC,EAC5DmmB,EAAU,OAAOyG,GAAc,SAAY,KAAK,MAAMA,CAAS,EAAIA,CACvE,KAAO,CACH,IAAMJ,EAAW,OAAO,OAAO,oBAAuB,WAAc,OAAO,mBAAmBxsB,GAAY,KAAK,CAAC,EAAIA,GAAY,KAAK,EACrImmB,EAAS,KAAK,MAAMqG,CAAO,CAC/B,CACJ,OAASC,EAAY,CACjB,MAAM,IAAI,MAAM,4BAA4BA,EAAW,OAAO,EAAE,CACpE,CAEI,GAAI,CAACtG,GAAU,OAAOA,GAAW,SAC7B,MAAM,IAAI,MAAM,gCAAgC,EAIpD,IAAM0G,EAAa1G,EAAO,GAAKA,EAAO,KACtC,GAAI,CAAC0G,GAAeA,IAAe,UAAYA,IAAe,yBAC1D,MAAM,IAAI,MAAM,kEAAkE,EAGtF,MAAM/qB,GAAiB,QAAQ,mBAAmBqkB,CAAM,EAGpD7F,KACIC,GAAkB,IAAI,EACtBpE,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC9B,QAAS,2CACL,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,GAGV4hB,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,iBAAiB,EAC5B,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAGG,OAAO,oBACRmpB,GAAoB,EAAE,MAAM,QAAQ,KAAK,CAEjD,OAAS5G,EAAO,CACZ,QAAQ,MAAM,oCAAqCA,CAAK,EAGxD,IAAIyI,EAAehrB,EAAE,gBAAgB,EACjCuiB,EAAM,QAAQ,SAAS,2BAA2B,EAC9CA,EAAM,QAAQ,SAAS,2BAA2B,EAClDyI,EAAehrB,EAAE,mBAAmB,EAC7BuiB,EAAM,QAAQ,SAAS,4BAA4B,EAC1DyI,EAAehrB,EAAE,uBAAuB,EAExCgrB,EAAehrB,EAAE,wBAAwB,EAEtCuiB,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC3EyI,EAAehrB,EAAE,sBAAsB,EAChCuiB,EAAM,QAAQ,SAAS,MAAM,GAAKA,EAAM,QAAQ,SAAS,WAAW,EAC3EyI,EAAehrB,EAAE,oBAAoB,EAC9BuiB,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC3EyI,EAAehrB,EAAE,oBAAoB,EAErCgrB,EAAe,IAAIzI,EAAM,OAAO,GAGpCO,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS8pB,EACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,EACpB,gBAAiB,EACrB,CAAC,CAAC,EAEE,CAACzI,EAAM,QAAQ,SAAS,SAAS,GAAK,CAACA,EAAM,QAAQ,SAAS,QAAQ,IACtE2E,GAAkB,IAAI,EACtBF,GAAmB,CAAC,GAGxB/D,GAAoB,QAAQ,CAEhC,CACR,OAASV,EAAO,CACZ,QAAQ,MAAM,oCAAqCA,CAAK,EAExD,IAAIyI,EAAehrB,EAAE,gBAAgB,EACjCuiB,EAAM,QAAQ,SAAS,2BAA2B,EAC9CA,EAAM,QAAQ,SAAS,2BAA2B,EAClDyI,EAAehrB,EAAE,mBAAmB,EAC7BuiB,EAAM,QAAQ,SAAS,4BAA4B,EAC1DyI,EAAehrB,EAAE,uBAAuB,EAExCgrB,EAAehrB,EAAE,wBAAwB,EAEtCuiB,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC3EyI,EAAehrB,EAAE,sBAAsB,EAChCuiB,EAAM,QAAQ,SAAS,MAAM,GAAKA,EAAM,QAAQ,SAAS,WAAW,EAC3EyI,EAAehrB,EAAE,oBAAoB,EAC9BuiB,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC3EyI,EAAehrB,EAAE,oBAAoB,EAErCgrB,EAAe,GAAGzI,EAAM,OAAO,GAGnCO,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS8pB,EACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,EACpB,gBAAiB,EACrB,CAAC,CAAC,EAEE,CAACzI,EAAM,QAAQ,SAAS,SAAS,GAAK,CAACA,EAAM,QAAQ,SAAS,QAAQ,IACtE2E,GAAkB,IAAI,EACtBF,GAAmB,CAAC,GAGxB/D,GAAoB,QAAQ,CAChC,CACJ,EAEMwQ,GAAyB,MAAOjpB,EAAUkpB,EAAU,KAAS,CAC/D,GAAIA,EAAS,CACTjrB,GAAiB,QAAQ,oBAAoB+B,CAAQ,EAErD8Y,EAA8B,EAAI,EAGlC,GAAI,CACA,GAAI,OAAO,yBAA2B7a,GAAiB,SAAW,CAACN,GAA2B,QAAS,CACnG,IAAMyC,EAAc,IAAI,OAAO,wBAAwBnC,GAAiB,OAAO,EAC/E,MAAMmC,EAAY,KAAK,EAGvBzC,GAA2B,QAAUyC,EAItBA,EAAY,UAAU,EAC1B,aAAe,UACtBkY,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,kFACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF4hB,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,wFACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,CAEV,MAAWiH,GAA2B,OAI1C,OAASoa,EAAO,CACZ,QAAQ,KAAK,sCAAuCA,CAAK,CAE7D,CACJ,MACIO,GAAY5hB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,oEACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAGFoiB,EAA8B,EAAK,EACnCC,GAA+B,EAAK,EACpCC,GAA8B,EAAK,EACnCU,GAAoB,EAAK,EACzBd,GAAoB,EAAE,EAGtBH,GAAoB,cAAc,EAClCa,GAAa,EAAE,EACfC,GAAc,EAAE,EAChBrd,EAAc,EAAE,EAChBE,GAAe,EAAE,EACjBod,GAAiB,EAAK,EACtBC,GAAkB,EAAK,EACvBf,GAAkB,EAAE,EACpB4D,GAAiB,IAAI,EACrBzD,GAAc,EAAK,EACnBP,GAAY,CAAC,CAAC,EAEdkE,GAAmB,CAAC,EACpBE,GAAkB,IAAI,EAGtB,SAAS,cAAc,IAAI,YAAY,cAAc,CAAC,EAEtDyM,GAAiB,CAEzB,EAEMC,GAAoB,SAAY,CAKlC,GAJI,CAAClf,GAAa,KAAK,GAInB,CAACjM,GAAiB,QAClB,OAGJ,IAAMorB,EAAgBnf,GAAa,KAAK,EAClCof,EAAW,KAAK,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAG,CAAC,CAAC,GAejFtP,EAAM/b,GAAiB,QACvBsrB,EAAgBvP,GAAK,cAAc,IAAM,IACxCA,GAAK,iBAAiB,IAAM,GACnC,GAAI,CAACuP,GAAiBvP,GAAK,YAAa,CAGpC,IAAMwP,EAAa7e,GAAW,QAAU0e,EAAgB,QAAUA,EAC5DI,EAAQ,KAAK,IAAI,EACjBC,EAAU,CAAE,IAAKJ,EAAU,GAAIG,CAAM,EACvC5e,KAAgB6e,EAAQ,KAAO,GAAMA,EAAQ,QAAUhwB,IACvDsR,GAAe,IAAG0e,EAAQ,IAAM1e,IACpC,IAAM2e,EAAW,CAAE,IAAKL,EAAU,OAAQ,OAAQ,UAAWG,CAAM,EAC/Dze,GAAe,IAAG2e,EAAS,UAAYF,EAAQze,GAAe,KAClEwS,GAAyBgM,EAAY,OAAQG,CAAQ,EAGrD,IAAMvL,EAAI1J,EAAU,QAAQ,IAAIJ,EAAY,OAAO,EAC/C8J,GAAGA,EAAE,SAAS,KAAK,CAAE,QAASoL,EAAY,KAAME,EAAS,IAAKJ,CAAS,CAAC,EAC5Enf,GAAgB,EAAE,EACdQ,IAAUC,GAAY,EAAK,EAC3BC,IAAcC,GAAgB,EAAK,EACvC,MACJ,CAKA,GAAI,CAACye,EAAe,CAChB/L,GAAyBhoB,EAAE,oBAAoB,EAAG,QAAQ,EAC1D,MACJ,CAEA,GAAI,CACA,IAAMo0B,EAAWP,EAGXQ,EAAUlf,GAAW,QAAUif,EAAW,QAAUA,EAIpDrwB,EAAM+vB,EACNhuB,EAAO,CAAE,IAAA/B,EAAK,GAAI,KAAK,IAAI,CAAE,EAC/BsR,KACAvP,EAAK,KAAO,GACZA,EAAK,QAAU5B,IAEfsR,GAAe,IAAG1P,EAAK,IAAM0P,IAMjC,IAAM8e,EAAY,CAAE,IAAAvwB,EAAK,OAAQ,SAAU,EACvCyR,GAAe,IAAG8e,EAAU,UAAY,KAAK,IAAI,EAAI9e,GAAe,KACxEwS,GAAyBqM,EAAS,OAAQC,CAAS,EAEnD,GAAI,CACA,MAAM7rB,GAAiB,QAAQ,YAAY4rB,EAASvuB,CAAI,EAIxDuiB,GAAoBtkB,EAAK,WAAW,CACxC,OAASwwB,GAAS,CACd,MAAAlM,GAAoBtkB,EAAK,QAAQ,EAC3BwwB,EACV,CACA5f,GAAgB,EAAE,EAEdQ,IAAUC,GAAY,EAAK,EAC3BC,IAAcC,GAAgB,EAAK,CAC3C,OAASiN,EAAO,CACZ,IAAM1J,EAAM,OAAO0J,GAAO,SAAWA,CAAK,EACrC,6CAA6C,KAAK1J,CAAG,GACtDmP,GAAyB,kBAAkBnP,CAAG,GAAG,QAAQ,CAEjE,CACJ,EAMM2b,GAAkB,MAAOhb,EAAMtb,EAAKC,IAAS,CAC/C,GAAI,CAACqb,GAAQ,CAAC/Q,GAAiB,QAAS,OAKxC,IAAMgsB,EAAU,OAAOjb,EAAK,MAAQ,EAAE,EAAE,YAAY,EAChDkb,EAAO,YACPD,EAAQ,WAAW,YAAY,EAAGC,EAAO,aACpCD,EAAQ,WAAW,WAAW,GAAKA,EAAQ,WAAW,aAAa,EAAGC,EAAO,YAC7ED,EAAQ,WAAW,WAAW,IAAGC,EAAO,aACjD,IAAMC,EAAMD,IAAS,YAAc,MAASA,IAAS,YAAc,MAASA,IAAS,aAAe,OAAS,MACvGE,EAAO,IAAI,KAAK,CAACpb,CAAI,EAAG,iBAAiBmb,CAAG,GAAI,CAAE,KAAMD,CAAK,CAAC,EAGhEG,EAAW,KACf,GAAI,CAAEA,EAAW,IAAI,gBAAgBrb,CAAI,CAAG,MAAY,CAAC,CAEzD,IAAMsb,EAAersB,GAAiB,SAAS,iBAAiB,IAAM,GAOtE,GADiBqsB,GAAgBrsB,GAAiB,SAAS,cAAc,IAAM,GACjE,CACV,GAAIosB,EAAY,GAAI,CAAE,IAAI,gBAAgBA,CAAQ,CAAG,MAAY,CAAC,CAClE7M,GACI8M,EACM90B,EAAE,oBAAoB,EACtBA,EAAE,0BAA0B,EAClC,QACJ,EACA,MACJ,CAEA,IAAM+0B,GAAY,CACd,IAAK,KAAK,IAAI,EAAG,KAAK,MAAM72B,GAAO,CAAC,CAAC,EACrC,KAAM,MAAM,QAAQC,CAAI,EAAIA,EAAK,IAAItB,IAAK,KAAK,MAAMA,GAAI,GAAI,EAAI,GAAI,EAAI,CAAC,CAC9E,EAEMm4B,GAAUhN,GAAyB,GAAI,OAAQ,CACjD,MAAO,CAAE,IAAK+M,GAAU,IAAK,KAAMA,GAAU,KAAM,IAAKF,EAAU,SAAU,CAAE,IAAK,KAAM,IAAK,CAAE,CAAE,CACtG,CAAC,EAED,GAAI,CACA,MAAMpsB,GAAiB,QAAQ,SAASmsB,EAAM,CAAE,MAAOG,GAAW,KAAMC,EAAQ,CAAC,EACjF1M,GAAiB0M,GAAU53B,KAAO,CAAE,MAAO,CAAE,GAAIA,GAAE,OAAS,CAAC,EAAI,SAAU,IAAK,CAAE,EAAE,CACxF,OAAS2B,GAAK,CACVupB,GAAiB0M,GAAU53B,KAAO,CAAE,MAAO,CAAE,GAAIA,GAAE,OAAS,CAAC,EAAI,SAAU,KAAM,MAAO,EAAK,CAAE,EAAE,EACjG,IAAMyb,GAAM,OAAO9Z,IAAK,SAAWA,EAAG,EACjC,6CAA6C,KAAK8Z,EAAG,GACtDmP,GAAyB,yBAAyBnP,EAAG,GAAI,QAAQ,CAEzE,CACJ,EAGMoc,GAAsB,MAAM,YAAalxB,GAAQ,CACnD,GAAKA,EACL,CAAA+e,GAAY5hB,GAAQA,EAAK,OAAO9D,GAAK,OAAOA,EAAE,GAAG,IAAM,OAAO2G,CAAG,CAAC,CAAC,EACnE,GAAI,CAAE0E,GAAiB,SAAS,oBAAoB,OAAO1E,CAAG,CAAC,CAAG,MAAY,CAAC,EACnF,EAAG,CAAC,CAAC,EAICmxB,GAAsB,MAAM,YAAa9qB,GAAO,CAClD0Y,GAAY5hB,GAAQA,EAAK,IAAI9D,GAAKA,EAAE,KAAOgN,EAAK,CAAE,GAAGhN,EAAG,QAAS,GAAM,QAAS,GAAI,UAAW,MAAU,EAAIA,CAAC,CAAC,CACnH,EAAG,CAAC,CAAC,EAGC0qB,GAAkB,IAAM,CAC1BhE,GAAa,EAAE,EACfC,GAAc,EAAE,EAChBrd,EAAc,EAAE,EAChBE,GAAe,EAAE,EACjBod,GAAiB,EAAK,EACtB3b,GAAoB,EAAK,EAEpBqf,GAAyB,GAC1BzD,GAAkB,EAAK,EAG3BC,GAAoB,EAAK,EACzB9c,EAAc,EAAK,EACnBC,EAAiB,EAAK,EACtBC,GAAsB,EAAK,EAE3B6pB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAExEzJ,GAAyB,GAC1BvD,GAAa,EAAE,EAGnBf,GAAoB,EAAE,EACtBC,GAAc,EAAK,EACnBH,GAAkB,EAAE,EACpB4D,GAAiB,IAAI,EACrB7D,GAAoB,cAAc,EAClCH,GAAY,CAAC,CAAC,EACdnO,GAAgB,EAAE,EAGlB2O,EAA8B,EAAK,EACnCC,GAA+B,EAAK,EACpCC,GAA8B,EAAK,EAI/B,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,EAIlBwD,GAAmB,CAAC,EAEpBE,GAAkB,IAAI,EACtB,SAAS,cAAc,IAAI,YAAY,iBAAiB,CAAC,CAE7D,EAEMiO,GAAyB,MAAM,YAAY,MAAOzM,EAAQ0M,IAAa,CACzE,GAAI,CACIA,EACA,MAAM3sB,GAAiB,SAAS,mBAAmBigB,CAAM,EAEzD,MAAMjgB,GAAiB,SAAS,mBAAmBigB,CAAM,CAEjE,QAAE,CACEjF,GAAwBviB,GAAQA,EAAK,OAAOmqB,GAAKA,EAAE,SAAW3C,CAAM,CAAC,CACzE,CACJ,EAAG,CAAC,CAAC,EAMCiL,GAAmB,IAAM,CAC3B,GAAI,CACA,IAAMvpB,EAAK0U,EAAY,QACvBuW,GAAoB,EACpBrO,GAAmB,CAAC,EAEpB,SAAS,cAAc,IAAI,YAAY,iBAAiB,CAAC,EACzD,SAAS,cAAc,IAAI,YAAY,cAAc,CAAC,EACtD,SAAS,cAAc,IAAI,YAAY,kBAAmB,CACtD,OAAQ,CAAE,UAAW,KAAK,IAAI,EAAG,OAAQ,mBAAoB,CACjE,CAAC,CAAC,EAIFyD,GAAergB,CAAE,EACb,OAAO,QAAQ,OAAU,YAAY,QAAQ,MAAM,CAC3D,OAASmY,EAAO,CACZ,QAAQ,MAAM,2BAA4BA,CAAK,CACnD,CACJ,EAEM+S,GAA0BpI,GAAY,CACxC,IAAItpB,EACAspB,EAAQ,OAAS,OACjBtpB,EAAU,qEAEVA,EAAU,yEAGdokB,GAAyBpkB,EAAS,QAAQ,CAE9C,EAMM2xB,GAAoB,MAAM,OAAOjvB,EAAgB,EACvD,MAAM,UAAU,IAAM,CAClB,IAAMkvB,EAAUD,GAAkB,UAAY,eAC9CA,GAAkB,QAAUjvB,GACxBA,KAAqB,aAAeyO,IAAc,CAACygB,GACnDxN,GAAyB,mKAAoK,QAAQ,CAE7M,EAAG,CAAC1hB,GAAkByO,EAAU,CAAC,EAejC,IAAM0gB,GAAc,MAAM,QAAQ,IAAM,CACpC,GAAI,CAAE,OAAO,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,SAAS,IAAM,MAAQ,MAC9E,CAAE,MAAO,EAAO,CAC1B,EAAG,CAAC,CAAC,EAECC,IAA0BpvB,KAAqB,aAAeA,KAAqB,YAAcA,KAAqB,iBAAmByO,GAMzI4gB,GAAc,MAAM,OAAO,CAAE,GAAI9W,EAAiB,KAAM6W,EAAuB,CAAC,EACtF,MAAM,UAAU,IAAM,CAClB,IAAMx0B,EAAOy0B,GAAY,QACzBA,GAAY,QAAU,CAAE,GAAI9W,EAAiB,KAAM6W,EAAuB,EACtEx0B,EAAK,MAAQ,CAACw0B,IAA0Bx0B,EAAK,KAAO2d,GAAiBwW,GAAoB,CACjG,EAAG,CAACK,GAAwB7W,CAAe,CAAC,EAI5C,MAAM,UAAU,KACZ,SAAS,KAAK,UAAU,OAAO,aAAc6W,IAA0BD,EAAW,EAC3E,IAAM,SAAS,KAAK,UAAU,OAAO,YAAY,GACzD,CAACC,GAAwBD,EAAW,CAAC,EAExC,MAAM,UAAU,IAAM,CAEdC,IAA0BzO,IAAkB3gB,KAAqB,WAC7D4gB,GAAkB,IAAI,EAC1BF,GAAmB,CAAC,EACpBgB,GAAyB,4CAA6C,QAAQ,EAEtF,EAAG,CAAC0N,GAAwBzO,GAAgB3gB,EAAgB,CAAC,EAG7D,MAAM,UAAU,IAAM,CAClB,GAAImgB,IAAsB,OAAO,YAAa,CAC1C,IAAMmP,EAAc,IAAI,OAAO,YAAY,WAAW,EAChDC,EAAS,CACX,IAAK,EAET,EAEIC,EAAa,GAEjB,OAAAF,EAAY,MACR,CAAE,WAAY,aAAc,EAC5BC,EACA,CAACE,EAAaC,IAAkB,CAC5B,GAAI,CAACF,EAAY,CACb,QAAQ,IAAI,gCAAgC,EAC5C,MACJ,CAEA,QAAQ,IAAI,mBAAoBC,CAAW,EAC3C,QAAQ,IAAI,wBAAyB5E,EAAkB,OAAO,EAE9DY,GAAagE,CAAW,EAAE,KAAME,GAAY,CAExC,GADA,QAAQ,IAAI,kBAAmBA,CAAO,EAClCA,EAAS,CAET,QAAQ,IAAI,2BAA2B,EACvCH,EAAa,GAGb,GAAI,CACA,QAAQ,IAAI,qBAAqB,EACjCF,EAAY,KAAK,EAAE,KAAK,IAAM,CAC1B,QAAQ,IAAI,8BAA8B,EAC1CA,EAAY,MAAM,EAClBtuB,GAAsB,EAAK,CAC/B,CAAC,EAAE,MAAOvI,GAAQ,CACd,QAAQ,IAAI,0BAA2BA,CAAG,EAE1C,GAAI,CACA62B,EAAY,MAAM,CACtB,OAASM,EAAU,CACf,QAAQ,IAAI,0BAA2BA,CAAQ,CACnD,CACA5uB,GAAsB,EAAK,CAC/B,CAAC,CACL,OAASvI,EAAK,CACV,QAAQ,IAAI,4BAA6BA,CAAG,EAC5CuI,GAAsB,EAAK,CAC/B,CACJ,MACI,QAAQ,IAAI,uCAAuC,CAE3D,CAAC,EAAE,MAAOib,GAAU,CAChB,QAAQ,MAAM,4BAA6BA,CAAK,CAEpD,CAAC,CACL,EACCA,GAAU,CAEHuT,GACA,QAAQ,IAAI,2BAA4BvT,CAAK,CAErD,CACJ,EAAE,MAAOxjB,GAAQ,CACb,QAAQ,MAAM,0BAA2BA,CAAG,EAE5CuI,GAAsB,EAAK,CAC/B,CAAC,EAEM,IAAM,CACTwuB,EAAa,GACb,GAAI,CAEAF,EAAY,KAAK,EAAE,KAAK,IAAM,CAC1BA,EAAY,MAAM,CACtB,CAAC,EAAE,MAAO72B,GAAQ,CAEd,QAAQ,IAAI,6CAA8CA,CAAG,EAC7D,GAAI,CACA62B,EAAY,MAAM,CACtB,OAASM,EAAU,CACf,QAAQ,IAAI,qCAAsCA,CAAQ,CAC9D,CACJ,CAAC,CACL,OAASn3B,EAAK,CACV,QAAQ,IAAI,oBAAqBA,CAAG,EAEpC,GAAI,CACA62B,EAAY,MAAM,CACtB,OAASM,EAAU,CACf,QAAQ,IAAI,qCAAsCA,CAAQ,CAC9D,CACJ,CACJ,CACJ,CACJ,EAAG,CAACzP,GAAoBC,EAAa,CAAC,EAEtC,IAAMyP,GAAeC,GAAiB3X,CAAa,EAC7C4X,GAAaC,GAAelX,CAAW,EASvCmX,GAAc9X,EAAc,MAAM,OAAS,GAAKW,EAAY,MAAM,OAAS,GAAKX,EAAc,MAAM,KAAMrU,GAAO,CACnH,IAAMrN,EAAI0hB,EAAc,SAASrU,CAAE,EACnC,OAAOrN,GAAKA,EAAE,KAAOA,EAAE,IAAI,UAC/B,CAAC,EAgBD,GAAI04B,GAAa,CACb,IAAMe,EAAkB,CACpB,CAAE,QAAS,6CAAyC,KAAM,SAAU,GAAI,EAAG,UAAW,KAAK,IAAI,EAAI,GAAO,EAC1G,CAAE,QAAS,0FAA2F,KAAM,WAAY,GAAI,EAAG,UAAW,KAAK,IAAI,EAAI,IAAO,EAC9J,CAAE,QAAS,iEAAkE,KAAM,OAAQ,GAAI,EAAG,UAAW,KAAK,IAAI,EAAI,IAAO,EACjI,GAAG,MAAM,KAAK,CAAE,OAAQ,EAAG,EAAG,CAAC3nB,EAAGnP,KAAO,CACrC,QAAS,mBAAqBA,EAAI,GAAK,kDACvC,KAAMA,EAAI,EAAI,OAAS,WACvB,GAAI,GAAKA,EACT,UAAW,KAAK,IAAI,GAAK,GAAKA,GAAK,GACvC,EAAE,CACN,EACM+2B,EAAO,IAAM,CAAC,EACpB,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,0BACX,MAAO,CAAE,QAAS,OAAQ,cAAe,MAAO,OAAQ,QAAS,MAAO,OAAQ,SAAU,QAAS,CACvG,EAAG,CACC,MAAM,cAAc1c,GAAiB,CACjC,IAAK,UACL,MAAO,CAAC,CAAE,GAAI,UAAW,MAAO,eAAgB,OAAQ,EAAG,OAAQ,GAAM,SAAU,EAAK,CAAC,EACzF,UAAW2R,GAAkB,WAAYE,GACzC,iBAAkB,IAAMD,GAAoB1tB,GAAK,CAACA,CAAC,EACnD,SAAUw4B,EAAM,UAAWA,EAAM,SAAUA,EAC3C,cAAe,IAAM5K,GAAqB,EAAK,EAC/C,SAAUlR,GAAU,YAAa8J,EACrC,CAAC,EACD,MAAM,cAAc,SAAU,CAC1B,IAAK,SAAU,UAAW,YAC1B,QAAS,IAAMoH,GAAqB,EAAI,EACxC,MAAO,CAAE,QAAS,OAAQ,SAAU,QAAS,IAAK,uCAAwC,iBAAkB,OAAQ,OAAQ,GAAI,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,SAAU,OAAQ,qCAAsC,WAAY,8BAA+B,MAAO,mBAAoB,OAAQ,SAAU,EACjV,wBAAyB,CAAE,OAAQ/R,GAAO,MAAO,CACrD,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,MAAO,UAAW,wBACvB,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,OAAQ,QAAS,SAAU,SAAU,QAAS,OAAQ,cAAe,QAAS,CACjH,EAAG,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,EACzC,MAAM,cAAcrF,GAAuB,CACvC,MAAO,eAAgB,UAAW,GAAO,aAAc,YACvD,cAAegiB,EACf,SAAUD,EACV,aAAc9hB,GAAc,gBAAiBC,GAC7C,cAAe8hB,EAAM,YAAaA,EAAM,aAAcA,EACtD,eAAgB,UAAW,WAAY,GACvC,gBAAiB1mB,GAAiB,eAAgB0mB,EAClD,cAAe,KAAM,OAAQ,YAC7B,qBAAsB,CAAC,EAAG,mBAAoBA,EAC9C,SAAUthB,GAAU,YAAaC,GACjC,aAAcC,GAAc,gBAAiBC,GAC7C,YAAapR,GAAa,eAAgBqR,GAC1C,aAAcC,GAAc,gBAAiBC,GAC7C,QAASpR,GAAS,gBAAiBoyB,EAAM,gBAAiBA,CAC9D,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAEA,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAWF,GAAc,0BAA4B,aAOrD,MAAOA,GAAc,CAAE,QAAS,OAAQ,cAAe,MAAO,OAAQ,QAAS,MAAO,OAAQ,SAAU,QAAS,EAAI,CAAE,UAAW,OAAQ,CAC9I,EAAG,CACCA,IAAe,MAAM,cAAcxc,GAAiB,CAChD,IAAK,mBACL,MAAOoc,GACP,OAAQE,GACR,UAAW3K,GACX,WAAYE,GACZ,iBAAkB,IAAMD,GAAoB1tB,GAAK,CAACA,CAAC,EAGnD,SAAWmM,GAAO,CAAEiV,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAI,IAAK,CAAC,EAAGmK,GAAoB1hB,CAAE,CAAG,EACtG,cAAegjB,GACf,UAAWrB,GACX,WAAY,IAAM,CAAEhM,GAAmB,EAAI,EAAG8L,GAAqB,EAAK,CAAG,EAC3E,SAAUG,GACV,cAAe,IAAMH,GAAqB,EAAK,EAC/C,SAAUlR,GACV,YAAa8J,EACjB,CAAC,EAED3E,IAAmB,MAAM,cAAc4W,GAAkB,CACrD,IAAK,eACL,WAAYvJ,GACZ,UAAW5kB,GACX,SAAU8kB,GACV,SAAU,IAAMtN,GAAmB,EAAK,CAC5C,CAAC,EACDG,GAAiB,MAAM,cAAcyW,GAAkB,CACnD,IAAK,eACL,OAAQ,CACJ,KAAMzW,EAAc,KACpB,UAAWzB,EAAc,SAASyB,EAAc,SAAS,GAAG,WAAa,oBAC7E,EACA,SAAUuN,GACV,UAAW,IAAMtN,EAAiB,IAAI,CAC1C,CAAC,EACDC,GAAc,MAAM,cAAcwW,GAAiB,CAC/C,IAAK,cACL,QAASxW,EACT,UAAW,IAAMC,EAAc,IAAI,CACvC,CAAC,EACAC,GAAkBZ,GAAgB,MAAM,cAAcmX,GAAiB,CACpE,IAAK,cACL,WAAYzI,GACZ,UAAW,KAAK,IAAI,EAAG9L,EAAa,YAAc5C,EAAY,QAAQ,MAAM,EAC5E,MAAO4O,GACP,SAAU,IAAM/N,EAAkB,EAAK,CAC3C,CAAC,EACAP,IAAiBN,GAAgB,MAAM,cAAcoX,GAAe,CACjE,IAAK,YACL,MAAOpX,EACP,UAAWgO,GACX,SAAU,IAAM,CAGRhO,EAAY,QAAUsN,EAAY,MAAO/M,EAAiB,EAAK,EAC9D0N,GAAajO,EAAY,EAAE,CACpC,CACJ,CAAC,EAED6W,IAAe,MAAM,cAAc,SAAU,CACzC,IAAK,YACL,UAAW,YACX,QAAS,IAAM1K,GAAqB,EAAI,EACxC,MAAO,CAAE,QAAS,OAAQ,SAAU,QAAS,IAAK,uCAAwC,iBAAkB,OAAQ,OAAQ,GAAI,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,SAAU,OAAQ,qCAAsC,WAAY,8BAA+B,MAAO,mBAAoB,OAAQ,SAAU,EACjV,wBAAyB,CAAE,OAAQ/R,GAAO,MAAO,CACrD,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,aACL,UAAWyc,GAAc,wBAA0B,0BACnD,MAAOA,GAAc,CAAE,KAAM,EAAG,SAAU,EAAG,OAAQ,QAAS,SAAU,SAAU,QAAS,OAAQ,cAAe,QAAS,EAAI,CAAC,CACpI,EAAG,CAMF,CAACb,IAA0B,CAACa,IAAe,OAAO,uBAA0B,MAAM,cAAc,OAAO,sBAAuB,CAC3H,IAAK,SACL,OAAQjwB,GACR,YAAawO,GACb,iBAAkB/N,GAClB,aAAc4sB,GACd,YAAa+B,GACb,cAAe7O,GAEf,cAAepe,GAAiB,OACpC,CAAC,EAKA,CAACitB,IAA0B,CAACa,IAAgB,MAAM,cAAcQ,GAAoB,CAAE,IAAK,cAAe,CAAC,EAK5GrX,GAAe,MAAM,cAAc,OAAQ,CACvC,IAAK,aACL,MAAO,CAAE,KAAM,EAAG,UAAW,EAAG,QAAS,OAAQ,cAAe,QAAS,CAC7E,EAAG,MAAM,cAAcsX,GAAe,CAClC,MAAOtX,EACP,MAAOE,EACP,SAAUC,GACV,OAAQiO,GACR,QAAS,IAAMH,GAAajO,EAAY,EAAE,EAC1C,eAAgB6O,GAChB,aAAc,IAAMhO,EAAkB,EAAI,EAC1C,QAASb,EAAY,QACrB,UAAWc,EACX,YAAauO,GACb,WAAY,CAAC,CAACtO,GAAef,EAAY,EAAE,EAI3C,aAAc,IAAM,CAChB,IAAMgP,EAAOjO,GAAef,EAAY,EAAE,GAAK,KAE/C,GADI,CAACgP,GACD,CAACA,EAAK,QAAU5N,GAAepB,EAAY,EAAE,IAAMgP,EAAK,OAAQ,OAAO,KAC3E,IAAMb,EAAQlN,GAAoBjB,EAAY,EAAE,GAAK,KACrD,OAAO,MAAM,cAAcuX,GAAa,CACpC,IAAK,aACL,KAAAvI,EACA,MAAAb,EACA,UAAWnO,EAAY,KACvB,YAAamB,EAAkB,QAAQ,IAAInB,EAAY,EAAE,GAAG,eAAe,GAAK,KAChF,gBAAkB0M,GAAOvL,EAAkB,QAAQ,IAAInB,EAAY,EAAE,GAAG,gBAAgB0M,CAAE,GAAK,KAC/F,OAAQ8C,GACR,UAAWC,GACX,QAASC,GACT,YAAaE,GACb,eAAgBC,GAChB,aAAcC,EAClB,CAAC,CACL,GAAG,CACP,CAAC,CAAC,EAEF,CAAC9P,GAAe,MAAM,cAAc,OAAQ,CACxC,IAAK,MACT,EAEegW,GAGI,MAAM,cAAcjhB,GAAuB,CAC9C,MAAO3G,EAASA,EAAO,UAAY,GACnC,UAAWqE,GACX,aAAcrE,EAASA,EAAO,aAAe,KAC7C,cAAgB/N,GAAU,CAAM8e,GAAiBH,EAAS,CAAE,KAAMsE,EAAG,OAAQ,GAAInE,EAAiB,MAAA9e,CAAM,CAAC,CAAG,EAC5G,SAAUiG,GACV,aAAc0O,GACd,gBAAiBC,GACjB,cAAeif,GACf,YAAaY,GACb,aAAcb,GACd,eAAgB7e,GAChB,WAAYC,GACZ,gBAAiBhF,GACjB,eAAgBiF,GAChB,cAAevM,GAAiB,QAChC,OAAQnC,GACR,qBAAsB2O,GACtB,mBAAoBkgB,GAEpB,SAAUhgB,GACV,YAAaC,GACb,aAAcC,GACd,gBAAiBC,GACjB,YAAapR,GACb,eAAgBqR,GAChB,aAAcC,GACd,gBAAiBC,GACjB,QAASpR,GACT,gBAAiB4wB,GACjB,gBAAiBC,EACrB,CAAC,EAEH,MAAM,cAAcnvB,GAAyB,CAC3C,cAAeuC,GACf,eAAgB4qB,GAChB,UAAWI,GACX,YAAaxL,GACb,mBAAoB2L,GACpB,iBAAkBntB,GAClB,UAAWC,GACX,WAAYC,GACZ,WAAYC,GACZ,cAAeC,EACf,YAAaC,GACb,eAAgBC,GAChB,cAAeC,GACf,eAAgBC,GAChB,iBAAkBC,GAClB,iBAAkBC,GAClB,WAAYC,GACZ,UAAWC,GACX,cAAeC,EACf,cAAeC,EACf,iBAAkBC,EAClB,sBAAuBC,GACvB,SAAUtB,GACV,2BAA4ByB,GAC5B,4BAA6BC,EAC7B,2BAA4BC,GAE5B,cAAeC,GACf,aAAcC,GACd,aAAcC,GACd,mBAAoBC,GACpB,YAAaC,GACb,YAAaC,GAEb,kBAAmBC,GACnB,2BAA4BC,GAC5B,iBAAkBC,GAClB,oBAAqBC,GACrB,kBAAmBC,GACnB,cAAeC,GACf,iBAAkBC,GAClB,iBAAkBC,GAClB,gBAAiBC,GACjB,mBAAoBC,GACpB,eAAgBC,GAChB,qBAAsBC,GACtB,iBAAkBC,GAClB,uBAAwBC,GACxB,wBAAyBC,GAGzB,QAASutB,EACb,CAAC,CACT,EAGA9P,KAAuB,IAAM,CACzB,IAAMyQ,EAAe,IAAM,CACvB5vB,GAAsB,EAAK,EAE3B6pB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,CACjF,EACM/uB,EAAM+uB,EAAkB,QAExBgG,EADW,CAAC,EAAE/0B,GAAOA,EAAI,IAAMA,EAAI,MAAQ,GAE3C,yBAAoBA,EAAI,KAAK,IAAI,MAAMA,EAAI,KAAK,GAChDpC,EAAE,aAAa,EACfo3B,EAAS,CAAC/oB,EAAGzB,IAAO,MAAM,cAAc,OAAQ,CAClD,IAAKyB,EACL,MAAO,OAAO,OAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,OAAQ,CAAE,EAAGzB,CAAE,CAC/F,CAAC,EACD,OAAO,MAAM,cAAc,MAAO,CAC9B,IAAK,mBACL,QAASsqB,EACT,MAAO,CAAE,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,QAAS,OAAQ,WAAY,kCAAmC,eAAgB,aAAc,qBAAsB,aAAc,UAAW,eAAgB,CACpR,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,oBACL,QAAUh4B,GAAMA,EAAE,gBAAgB,EAClC,MAAO,CAAE,MAAO,OAAQ,SAAU,QAAS,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,eAAgB,UAAW,yEAA0E,SAAU,QAAS,CACvP,EAAG,CAEC,MAAM,cAAc,MAAO,CACvB,IAAK,iBACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,qCAAsC,CAC3I,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,eACL,MAAO,CAAE,QAAS,MAAO,EACzB,wBAAyB,CAAE,OAAQ,uVAAwV,CAC/X,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,iBACL,MAAO,CAAE,KAAM,EAAG,WAAY,GAAI,CACtC,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,gBACL,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAC5E,EAAGc,EAAE,UAAU,CAAC,EAChB,MAAM,cAAc,MAAO,CACvB,IAAK,eACL,MAAO,CAAE,SAAU,OAAQ,MAAO,kBAAmB,CACzD,EAAGA,EAAE,aAAa,CAAC,CACvB,CAAC,EACD,MAAM,cAAc,SAAU,CAC1B,IAAK,YACL,QAASk3B,EACT,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,MAAO,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAC9M,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,cAAe,CAAC,CAAC,CAC9D,CAAC,EAED,MAAM,cAAc,MAAO,CACvB,IAAK,eACL,MAAO,CAAE,QAAS,gBAAiB,CACvC,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,aACL,MAAO,CAAE,SAAU,WAAY,YAAa,IAAK,aAAc,OAAQ,SAAU,SAAU,WAAY,OAAQ,OAAQ,oCAAqC,CAChK,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,QACL,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,WAAY,+DAAgE,CACzH,CAAC,EAED,MAAM,cAAc,MAAO,CACvB,IAAK,YACL,GAAI,YACJ,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,CAAE,CACvD,CAAC,EACDE,EAAO,OAAQ,CAAE,IAAK,OAAQ,iBAAkB,OAAQ,UAAW,oCAAqC,kBAAmB,oCAAqC,aAAc,WAAY,CAAC,EAC3LA,EAAO,OAAQ,CAAE,IAAK,OAAQ,eAAgB,OAAQ,UAAW,oCAAqC,gBAAiB,oCAAqC,aAAc,WAAY,CAAC,EACvLA,EAAO,OAAQ,CAAE,OAAQ,OAAQ,iBAAkB,OAAQ,aAAc,oCAAqC,kBAAmB,oCAAqC,aAAc,WAAY,CAAC,EACjMA,EAAO,OAAQ,CAAE,OAAQ,OAAQ,eAAgB,OAAQ,aAAc,oCAAqC,gBAAiB,oCAAqC,aAAc,WAAY,CAAC,EAC7L,MAAM,cAAc,OAAQ,CACxB,IAAK,YACL,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,QAAS,OAAQ,EAAG,WAAY,oEAAqE,UAAW,2BAA4B,UAAW,4CAA6C,CAC5Q,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,cACL,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,KAAM,EAAG,MAAO,EAAG,OAAQ,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,WAAY,+CAAgD,CACtO,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,UACL,MAAO,CAAE,QAAS,OAAQ,UAAW,6BAA8B,EACnE,wBAAyB,CAAE,OAAQ,+KAAgL,CACvN,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,cACL,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAC5E,EAAGD,CAAU,CACjB,CAAC,CACL,CAAC,EACD,MAAM,cAAc,IAAK,CACrB,IAAK,eACL,MAAO,CAAE,OAAQ,WAAY,UAAW,SAAU,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CACnH,EAAGn3B,EAAE,SAAS,CAAC,CACnB,CAAC,CACL,CAAC,CACL,CAAC,CACL,GAAG,CACH,CAAC,CACL,CAAC,CACL,EAEMq3B,GAAuB,CAAC,CAAE,SAAAC,CAAS,IAEjC,OAAO,OAAW,KAAe,OAAO,cACjC,MAAM,cAAc,OAAO,cAAe,CAC7C,MAAO,EACX,EAAGA,CAAQ,EAGRA,EAGX,SAASC,IAAgB,CACrB,GAAI,OAAO,2BAA6B,OAAO,4BAA6B,CAExE,IAAMC,EAAuB,MAAM,cAAcH,GAAsB,KACnE,MAAM,cAAc7Y,EAAqB,CAC7C,EACA,SAAS,OAAOgZ,EAAsB,SAAS,eAAe,MAAM,CAAC,CACzE,MACI,QAAQ,MAAM,4GAAwB,CAClC,UAAW,CAAC,CAAC,OAAO,0BACpB,UAAW,CAAC,CAAC,OAAO,2BACxB,CAAC,CAET,CAEI,OAAO,OAAW,MAElB,OAAO,iBAAiB,qBAAuB/V,GAAU,CACrD,QAAQ,MAAM,+BAAgCA,EAAM,MAAM,EAC1DA,EAAM,eAAe,CACzB,CAAC,EAGD,OAAO,iBAAiB,QAAUA,GAAU,CACxC,QAAQ,MAAM,gBAAiBA,EAAM,KAAK,EAC1CA,EAAM,eAAe,CACzB,CAAC,EAEI,OAAO,gBACR,OAAO,cAAgB8V,KAK/B,GAAI,OAAO,2BAA6B,OAAO,4BAA6B,CACxE,IAAMF,EAAuB,CAAC,CAAE,SAAAC,CAAS,IACjC,OAAO,OAAW,KAAe,OAAO,cACjC,MAAM,cAAc,OAAO,cAAe,CAC7C,MAAO,EACX,EAAGA,CAAQ,EAERA,EAELE,EAAuB,MAAM,cAAcH,EAAsB,KACnE,MAAM,cAAc7Y,EAAqB,CAC7C,EACA,SAAS,OAAOgZ,EAAsB,SAAS,eAAe,MAAM,CAAC,CACzE,MACI,SAAS,OAAO,MAAM,cAAchZ,EAAqB,EAAG,SAAS,eAAe,MAAM,CAAC",
-  "names": ["isSecureBitDebugEnabled", "targetWindow", "installDebugWindowHooks", "webrtcManagerRef", "onClearData", "clearConsole", "DB_NAME", "KEY_RECORD", "SETTINGS_RECORD", "isSupported", "openDb", "resolve", "reject", "request", "DB_NAME", "error", "db", "idbGet", "key", "req", "idbPut", "value", "tx", "idbDelete", "getOrCreateDeviceKey", "existing", "KEY_RECORD", "saveIceSettings", "settings", "payload", "iv", "ciphertext", "SETTINGS_RECORD", "loadIceSettings", "record", "plaintext", "parsed", "clearIceSettings", "ENDPOINT", "OWN_RELAY_HOSTS", "RETRY_DELAYS_MS", "relayHost", "url", "m", "isOwnRelayEntry", "entry", "u", "OWN_RELAY_HOSTS", "isCleanField", "value", "i", "c", "applyTurnCredentials", "list", "cred", "updated", "urls", "parseCredentialResponse", "body", "nowSeconds", "server", "expiry", "ttl", "started", "startTurnCredentialRefresh", "opts", "getList", "timer", "failures", "schedule", "ms", "refresh", "res", "ENDPOINT", "delay", "now", "SUPPORTED_LOCALES", "LOCALE_META", "CROSS_LOCALE_STRINGS", "DICTIONARY", "registry", "REGISTRY", "dictionary", "code", "STORAGE_KEY", "localeFromPathname", "pathname", "segment", "SUPPORTED_LOCALES", "localeFromLanguages", "languages", "tag", "lower", "exact", "base", "partial", "detectLocale", "stored", "fromPath", "isLocaleRoot", "localeHref", "current", "tail", "rememberLocale", "storedLocale", "resolvedLocale", "currentLocale", "w", "localeDir", "LOCALE_META", "isRTL", "direction", "SUGGEST_KEY", "localeSuggestionDismissed", "dismissLocaleSuggestion", "suggestedLocale", "pathname", "languages", "stored", "shown", "localeFromPathname", "preferred", "SUPPORTED_LOCALES", "localeFromLanguages", "t", "key", "vars", "locale", "currentLocale", "template", "dictionary", "CROSS_LOCALE_STRINGS", "match", "name", "SESSION_ACTIONS", "PRESENCE_DOT", "PRESENCE_WORD", "t", "MY_STATUS_OPTIONS", "shortLabelFromId", "id", "hex", "monoInitials", "label", "words", "a", "b", "statusSub", "status", "t", "emptySetup", "createSessionEntry", "opts", "id", "shortLabelFromId", "createInitialState", "patchSession", "state", "patch", "session", "sessionsReducer", "action", "A", "SESSION_ACTIONS", "entry", "sessions", "order", "x", "activeSessionId", "removedIdx", "next", "changed", "messages", "m", "byId", "byMid", "byFileId", "label", "decorateSession", "lastMessage", "s", "isUp", "isPending", "dot", "headerSub", "PRESENCE_DOT", "PRESENCE_WORD", "preview", "monoInitials", "decorateSessions", "GROUP_LIMITS", "CALL_ACTIONS", "MESH_KINDS", "MEMBER_OPS", "ENC", "GroupCryptoError", "message", "code", "fail", "msg", "toHex", "bytes", "view", "out", "i", "fromHex", "hex", "toB64", "binary", "fromB64", "b64", "max", "randomBytes", "n", "newGroupId", "lp", "label", "parts", "chunks", "total", "part", "header", "o", "c", "u32", "b", "equalBytes", "a", "diff", "assertGroupId", "groupId", "assertFingerprint", "fp", "assertEpoch", "epoch", "assertName", "name", "value", "canonicalFingerprints", "fps", "seen", "generateGroupIdentity", "subtle", "keyPair", "spki", "fingerprint", "fingerprintSpki", "importMemberIdentity", "publicKey", "buildCommitment", "nonce", "payload", "verifyCommitment", "commitment", "fields", "expected", "computeGroupSas", "contributions", "digits", "ordered", "ikm", "salt", "key", "bits", "dv", "GroupSasCeremony", "selfFingerprint", "memberFingerprints", "existing", "memberOpPayload", "op", "memberFps", "signMemberOp", "privateKey", "sig", "verifyMemberOp", "signature", "hashBody", "body", "groupMessagePayload", "seq", "senderFp", "bodyHash", "signGroupMessage", "verifyGroupMessage", "meshDescriptorPayload", "kind", "fromFp", "toFp", "descriptor", "signMeshDescriptor", "verifyMeshDescriptor", "linkProbePayload", "linkFp", "signLinkProbe", "verifyLinkProbe", "groupCallPayload", "callId", "action", "withVideo", "assertCallId", "newCallId", "signGroupCall", "verifyGroupCall", "GROUP_ACTIONS", "GROUP_PHASE", "MEMBER_STATE", "GROUP_PHASE_WORD", "t", "groupInitials", "name", "words", "a", "b", "createGroupEntry", "opts", "byFingerprint", "NAME_ENCODER", "clampNameBytes", "value", "out", "GROUP_LIMITS", "createInitialGroupState", "patchGroup", "state", "id", "patch", "group", "groupsReducer", "action", "A", "entry", "groups", "order", "x", "activeGroupId", "removedIdx", "changed", "members", "m", "next", "k", "messages", "linkedCount", "groupSub", "total", "linked", "groupDot", "decorateGroup", "lastMessage", "sub", "decorateGroups", "g", "GROUP_FRAMES", "GROUP_ENVELOPE", "GROUP_FRAME_TYPES", "isGroupFrame", "parsed", "groupFrameType", "encodeEnvelope", "frame", "json", "encoded", "toB64", "GROUP_LIMITS", "GroupSessionError", "decodeEnvelope", "envelope", "raw", "bytes", "fromB64", "TIMEOUTS", "MESH_MAX_CONCURRENT_DIALS", "MESH_MAX_ATTEMPTS", "message", "code", "GroupSession", "groupId", "name", "isAdmin", "subtle", "send", "emit", "mesh", "log", "assertGroupId", "assertName", "GROUP_PHASE", "newGroupId", "generateGroupIdentity", "MEMBER_STATE", "t", "sessionId", "fn", "ms", "phase", "m", "changed", "fp", "toFp", "admin", "member", "relay", "exclude", "targets", "results", "unreachable", "delivered", "result", "i", "state", "connected", "next", "dial", "tellPeer", "failure", "now", "inFlight", "soonest", "canonicalFingerprints", "epoch", "nonce", "randomBytes", "link", "descriptor", "sig", "signMeshDescriptor", "MESH_KINDS", "error", "from", "assertFingerprint", "assertEpoch", "verifyMeshDescriptor", "answer", "b", "linkFp", "signLinkProbe", "verifyLinkProbe", "peers", "peer", "p", "failed", "r", "reachable", "_", "adminSpki", "publicKey", "fingerprint", "importMemberIdentity", "spki", "MEMBER_OPS", "op", "memberFps", "fields", "signMemberOp", "adminKey", "adminFp", "imported", "staged", "verifyMemberOp", "previous", "old", "sid", "GroupSasCeremony", "commitment", "epochAtStart", "held", "contributions", "computeGroupSas", "text", "body", "seq", "bodyHash", "hashBody", "signGroupMessage", "relayed", "senderFp", "verifyGroupMessage", "byMember", "hashHex", "starter", "a", "action", "callId", "withVideo", "signGroupCall", "prepare", "newCallId", "CALL_ACTIONS", "assertCallId", "seen", "verifyGroupCall", "to", "inner", "f", "round", "sent", "isRateLimit", "error", "createGroupSender", "getManager", "gapMs", "attempts", "now", "sleep", "ms", "resolve", "queues", "sessionId", "frame", "manager", "queue", "payload", "run", "wait", "lastError", "attempt", "SPRING", "DT", "MAX_FRAME", "prefersReducedMotion", "project", "velocity", "decelerationRate", "snapTarget", "position", "points", "o", "flick", "projected", "pool", "ahead", "p", "best", "rubberband", "overshoot", "dimension", "constant", "velocityTracker", "windowMs", "samples", "value", "time", "now", "last", "first", "dt", "spring", "from", "to", "damping", "response", "restDelta", "restSpeed", "respectReducedMotion", "onUpdate", "onComplete", "vel", "target", "raf", "done", "omega", "zeta", "finish", "next", "step", "frame", "t", "accel", "LanguageSuggestion", "target", "localeSuggestionDismissed", "suggestedLocale", "storedLocale", "gone", "setGone", "shown", "setShown", "id", "meta", "LOCALE_META", "dir", "pathname", "href", "localeHref", "still", "prefersReducedMotion", "close", "dismissLocaleSuggestion", "line", "t", "link", "rememberLocale", "dismiss", "h", "args", "C", "ICON", "svg", "markup", "extra", "btn", "accent", "overlay", "card", "clampToBytes", "value", "max", "enc", "out", "label", "waitingWord", "group", "GROUP_PHASE", "t", "GROUP_ERROR_WORD", "GroupSasModal", "onConfirm", "onCancel", "failed", "waiting", "CreateGroupModal", "candidates", "relayOnly", "onCreate", "name", "setName", "picked", "setPicked", "GROUP_LIMITS", "toggle", "id", "prev", "x", "ready", "e", "c", "on", "full", "GroupErrorModal", "message", "onDismiss", "AddMembersModal", "remaining", "onAdd", "GroupInviteModal", "invite", "onAccept", "onDecline", "MemberStrip", "onRemove", "isAdmin", "m", "self", "MEMBER_STATE", "lost", "dot", "via", "Bubble", "msg", "mine", "GroupChatView", "input", "setInput", "onSend", "onLeave", "onRemoveMember", "onAddMembers", "scrollRef", "onStartCall", "callActive", "callOverlay", "degraded", "submit", "groupInitials", "LEG_STATE", "PHASE_TO_STATE", "SPEAKING", "FALLBACK_DIAL_MS", "webAudioLevelMeter", "context", "stream", "source", "analyser", "buffer", "sum", "i", "v", "GroupCallMedia", "getManager", "getUserMedia", "createAudioSink", "createLevelMeter", "onChange", "log", "constraints", "Ctor", "callId", "selfFp", "withVideo", "peers", "error", "mediaErrorCode", "wanted", "peer", "fp", "leg", "existing", "track", "peerFp", "manager", "state", "live", "phase", "played", "holder", "key", "quietKey", "level", "now", "speaking", "changed", "selfLevel", "safeRead", "enabled", "old", "previous", "a", "b", "p", "meter", "name", "TILE_ASPECT", "MIN_TILE_W", "gridLayout", "count", "width", "height", "gap", "aspect", "minWidth", "cols", "best", "rows", "perColumn", "perRow", "tileW", "spotlightLayout", "othersCount", "minThumb", "maxThumb", "w", "thumbW", "stripH", "mainH", "mainW", "h", "args", "MONO", "ICON", "svg", "inner", "size", "sw", "ctrlBase", "dangerCtrl", "endBtn", "minimizeBtn", "QUALITY", "qualityBars", "quality", "q", "i", "initials", "name", "words", "fmt", "s", "useMeasuredSize", "setSize", "node", "setNode", "apply", "prev", "observer", "Tile", "peer", "stream", "self", "localStream", "cameraEnabled", "speaking", "tileW", "tileH", "onSelect", "pinned", "compact", "videoRef", "source", "showVideo", "el", "played", "statusWord", "LEG_STATE", "t", "avatarPx", "e", "GroupCallUI", "call", "media", "groupName", "getRemoteStream", "onJoin", "onDismiss", "onLeave", "onToggleMic", "onToggleCamera", "onFlipCamera", "minimized", "setMinimized", "seconds", "setSeconds", "setPinned", "stageRef", "stage", "joined", "started", "iv", "present", "p", "encBadge", "peers", "selfTile", "speakers", "talking", "tiles", "spotlight", "id", "tile", "others", "spot", "spotlightLayout", "spotlit", "layout", "gridLayout", "renderTile", "extra", "DIR", "direction", "scrollBehavior", "prefersReducedMotion", "requestDonateScroll", "copyToClipboardSecure", "text", "autoClearMs", "ok", "ta", "current", "readable", "parseMessageSegments", "segments", "re", "last", "m", "s", "HL_KEYWORDS", "HL_LITERALS", "highlightCode", "code", "nodes", "buffer", "key", "flush", "cls", "PRISM_ALIAS", "CodeBlock", "lang", "copied", "setCopied", "handleCopy", "norm", "prism", "grammar", "usePrism", "highlightedHtml", "displayLang", "codeEl", "t", "MessageBody", "seg", "i", "SAS_CODE_LENGTH", "GRAIN_URL", "SB_MONO", "sbGenBars", "seed", "n", "out", "s", "r", "env", "sbFmtClock", "sec", "m", "VoicePlayer", "voice", "isMe", "h", "playing", "setPlaying", "progress", "setProgress", "playErr", "setPlayErr", "audioRef", "rafRef", "v", "dur", "bars", "src", "transfer", "transferring", "failed", "dir", "pct", "pause", "play", "a", "d", "p", "err", "toggle", "seek", "e", "rect", "elapsed", "circ", "playBg", "playColor", "barEls", "hgt", "i", "played", "col", "ring", "icon", "label", "t", "timeText", "VoiceRecorder", "onSend", "onCancel", "MAX_SECONDS", "NBARS", "setElapsed", "liveBars", "setLiveBars", "micError", "setMicError", "R", "teardownGraph", "cleanup", "pushPeak", "amp", "now", "prev", "live", "downsample", "peaks", "step", "b", "j", "resample", "data", "from", "to", "ratio", "outLen", "start", "end", "encodeWav", "samples", "rate", "buf", "view", "ws", "o", "onPcmFrame", "frame", "sum", "finish", "send", "srcRate", "outBlob", "outDur", "total", "merged", "off", "c", "targetRate", "cancelled", "stream", "AC", "useWorklet", "code", "inBuf", "EnhancedChatMessage", "message", "type", "timestamp", "mid", "status", "viewOnce", "viewOnceTtl", "expiresAt", "expired", "nowTick", "canUnsend", "onUnsend", "onExpire", "revealed", "setRevealed", "revealTimerRef", "formatTime", "ts", "isNotice", "encrypted", "isViewOnce", "remaining", "fmtRemaining", "pad", "handleReveal", "ms", "radius", "border", "bg", "body", "MessageBody", "metaLeft", "stCfg", "metaRight", "meta", "EnhancedConnectionSetup", "messages", "onCreateOffer", "onCreateAnswer", "onConnect", "onClearData", "onVerifyConnection", "connectionStatus", "offerData", "answerData", "offerInput", "setOfferInput", "answerInput", "setAnswerInput", "showOfferStep", "showAnswerStep", "verificationCode", "showVerification", "showQRCode", "qrCodeUrl", "showQRScanner", "setShowQRCode", "setShowQRScanner", "setShowQRScannerModal", "offerPassword", "answerPassword", "localVerificationConfirmed", "remoteVerificationConfirmed", "bothVerificationsConfirmed", "qrFramesTotal", "qrFrameIndex", "qrManualMode", "toggleQrManualMode", "nextQrFrame", "prevQrFrame", "markAnswerCreated", "notificationIntegrationRef", "isGeneratingKeys", "setIsGeneratingKeys", "handleCreateOffer", "relayOnlyMode", "setRelayOnlyMode", "webrtcManagerRef", "showIceSettings", "setShowIceSettings", "iceServersText", "iceSettingsPersisted", "customIceServers", "handleApplyIceSettings", "handleForgetIceSettings", "compact", "mode", "setMode", "notificationPermissionRequested", "setNotificationPermissionRequested", "qrModalOpen", "setQrModalOpen", "copied", "setCopied", "sasInput", "setSasInput", "sasError", "setSasError", "platformsOpen", "setPlatformsOpen", "codeRevealed", "setCodeRevealed", "genProgress", "setGenProgress", "id", "onDoc", "resetToSelect", "handleVerificationConfirm", "userCode", "handleVerificationReject", "requestNotificationPermissionOnInteraction", "currentPermission", "integration", "welcomeNotification", "testNotification", "C_ORANGE", "C_GREEN", "C_ORANGE_SOLID", "C_GREEN_SOLID", "MONO", "encode", "min", "isCreate", "isGenerating", "isOfferCred", "isAnswerCred", "atIntro", "accent", "accentSolid", "kicker", "credCode", "hasInvite", "hasAnswer", "copyCred", "copyToClipboardSecure", "normExpected", "normInput", "canConfirm", "handleSasConfirm", "ICON_DEFS", "fa", "name", "opts", "def", "st", "size", "svgStyle", "el", "leftPanel", "segToggle", "DIR", "backButton", "key", "credBlock", "showQrButton", "inner", "verified", "cells", "ch", "SAS_CODE_LENGTH", "genSteps", "done", "active", "SB_DESKTOP_VERSION", "SB_DESKTOP_RELEASE", "DOWNLOADS", "detectedOS", "ua", "otherOS", "k", "dlLink", "url", "platformsMenu", "footer", "settingsOverlay", "rightPanel", "qrModal", "_", "hero", "uniqueSection", "partnersSection", "roadmapSection", "donateSection", "communitySection", "keyframeStyle", "startViewportDebug", "vv", "on", "box", "paint", "shell", "cs", "root", "iv", "createScrollToBottomFunction", "chatMessagesRef", "scrollAttempt", "scrollBehavior", "runSecurityReport", "webrtcManager", "securityData", "esc", "accentRGB", "score", "dashArray", "level", "isReal", "entries", "passedCount", "totalCount", "verifiedAt", "testTitle", "named", "pretty", "checkIcon", "xIcon", "testsHTML", "passed", "raw", "looked", "desc", "iconBg", "iconBorder", "titleColor", "modal", "onKey", "close", "rerun", "SecureBitChatHeader", "onDisconnect", "title", "isOffline", "peerPresence", "onRenameTitle", "showNetwork", "setShowNetwork", "setSec", "editingName", "setEditingName", "nameDraft", "setNameDraft", "alive", "fetchSec", "onCalc", "onlineConnected", "dropped", "connected", "connDot", "connLabel", "connGlow", "peerDot", "PRESENCE_DOT", "peerPresenceWord", "PRESENCE_WORD", "startRename", "commitRename", "renameKey", "secLevelLabel", "lvl", "scoreLabel", "secBtn", "headerResponsiveCss", "header", "monoInitials", "callReady", "startCall", "video", "callBtnStyle", "netPanel", "EnhancedChatInterface", "messageInput", "setMessageInput", "onSendMessage", "onSendVoice", "keyFingerprint", "isVerified", "scrollToBottom", "pendingIncomingFiles", "onIncomingDecision", "codeMode", "setCodeMode", "viewOnceMode", "setViewOnceMode", "setViewOnceTtl", "disappearTtl", "setDisappearTtl", "onUnsendMessage", "onMessageExpire", "showScrollButton", "setShowScrollButton", "showFileTransfer", "setShowFileTransfer", "fileSendMode", "setFileSendMode", "showTimer", "setShowTimer", "showOnce", "setShowOnce", "showHandshake", "setShowHandshake", "isRecording", "setIsRecording", "isDesktop", "setIsDesktop", "mq", "onCh", "taRef", "atBottomRef", "stick", "onResize", "scrollTop", "scrollHeight", "clientHeight", "smoothScroll", "handleScroll", "isNearBottom", "handleScrollToBottom", "handleKeyPress", "isFileTransferReady", "hasDataChannel", "fmtShort", "chipStyle", "optStyle", "sel", "timerDefs", "onceDefs", "onceSelected", "pickTimer", "pickOnce", "hasText", "canRecord", "fmtT", "systemMessages", "chatMessages", "handshakeCard", "emptyState", "messagesArea", "msg", "timerRow", "onceRow", "filePanel", "chipsRow", "codeStrip", "sendBtn", "micBtn", "trailingButtons", "inputRow", "recordingBar", "blob", "composer", "scrollBtn", "chatHeader", "callOverlay", "buildSessionMessage", "SB_SVG", "SessionsSidebar", "chats", "groups", "collapsed", "drawerOpen", "onToggleCollapse", "onSelect", "onSelectGroup", "onNewChat", "onNewGroup", "onRename", "onCloseDrawer", "myStatus", "onSetStatus", "editingId", "setEditingId", "draft", "setDraft", "presenceOpen", "setPresenceOpen", "scrimRef", "panelRef", "animRef", "dragRef", "offsetRef", "openRef", "clickGuardRef", "drawerMounted", "setDrawerMounted", "AXIS_LOCK", "FLICK", "drawerWidth", "paintDrawer", "x", "w", "blur", "settleDrawer", "velocity", "spring", "SPRING", "drawerDown", "velocityTracker", "drawerMove", "dx", "dy", "rubberband", "drawerUp", "open", "snapTarget", "drawerScrimClick", "startEdit", "commitEdit", "editKey", "renameInput", "extra", "svg", "style", "avatar", "expandedRow", "dockItem", "brandMark", "collapseBtn", "myMeta", "MY_STATUS_OPTIONS", "PRES_SVG", "presenceMenu", "pos", "presencePanelExpanded", "presencePanelCollapsed", "expandedInner", "g", "collapsedInner", "railStyle", "EnhancedSecureP2PChat", "sessionsState", "dispatch", "sessionsReducer", "createInitialState", "activeSessionId", "activeIdRef", "EMPTY_ARR", "managersRef", "integrationsRef", "queuesRef", "statusRef", "groupsState", "groupsDispatch", "groupsReducer", "createInitialGroupState", "groupRuntimesRef", "activeGroupId", "activeGroup", "activeGroupIdRef", "groupInput", "setGroupInput", "showCreateGroup", "setShowCreateGroup", "showGroupCode", "setShowGroupCode", "pendingInvite", "setPendingInvite", "groupError", "setGroupError", "showAddMembers", "setShowAddMembers", "groupScrollRef", "groupCallState", "setGroupCallState", "groupCallMediaState", "setGroupCallMediaState", "groupCallMediaRef", "dismissedCalls", "setDismissedCalls", "announcedCallsRef", "meshLinksRef", "lastUnreachableRef", "sendGroupFrame", "createGroupSender", "sessionId", "buildGroupMessage", "groupEmitter", "gid", "event", "payload", "GROUP_ACTIONS", "syncGroupCallMediaRef", "current", "token", "destroyGroupRef", "handleGroupFrame", "runtime", "groupFrameType", "GROUP_FRAMES", "invite", "decodeEnvelope", "GROUP_LIMITS", "error", "reason", "handleGroupFrameRef", "syncGroupLinks", "syncGroupLinksRef", "dispatchActive", "build", "setMessages", "updaterOrArr", "SESSION_ACTIONS", "setConnectionStatus", "setKeyFingerprint", "fingerprint", "setVerificationCode", "setIsVerified", "setLocalVerificationConfirmed", "setRemoteVerificationConfirmed", "setBothVerificationsConfirmed", "setPendingIncomingFiles", "setupField", "fallback", "setSetupField", "value", "setOfferData", "setAnswerData", "setShowOfferStep", "setShowAnswerStep", "setShowVerification", "setQrCodeUrl", "setMyStatusState", "myStatusRef", "wirePresence", "sendPresenceTo", "mgr", "setMyStatus", "setNowTick", "setIsOffline", "offlineRef", "goOffline", "goOnline", "resync", "lastH", "lastInset", "lastY", "raf", "applyHeight", "keyboardUp", "applyInset", "applyOffset", "zoomed", "y", "apply", "onPan", "timers", "resettle", "stopDebug", "setCustomIceServers", "setIceServersText", "setIceSettingsPersisted", "loadIceSettings", "saved", "next", "persist", "servers", "saveIceSettings", "clearIceSettings", "showQRScannerModal", "qrBundleReady", "setQrBundleReady", "onReady", "securityLevel", "setSecurityLevel", "sessionTimeLeft", "setSessionTimeLeft", "pendingSession", "setPendingSession", "connectionState", "setConnectionState", "updateConnectionState", "newState", "options", "preserveAnswer", "isUserAction", "shouldPreserveAnswerData", "hasAnswerData", "hasAnswerQR", "installDebugWindowHooks", "handleClearData", "startTurnCredentialRefresh", "addMessageWithAutoScroll", "newId", "newMessage", "updated", "container", "updateMessageStatus", "patchMessageById", "messageId", "patch", "patchMessageByFileId", "fileId", "flushSessionQueue", "q", "deferred", "item", "inc", "viewing", "flushOfflineQueues", "timer", "updateSecurityLevel", "currentLevel", "anyExpiring", "sessionsStateRef", "expireFn", "changed", "interval", "createSession", "role", "entry", "createSessionEntry", "u", "opts2", "sessionQueues", "handleMessage", "parsedMessage", "isGroupFrame", "blockedTypes", "manager", "handleStatusChange", "prevStatus", "sessionCarriesGroupMemberRef", "destroySession", "handleKeyExchange", "handleVerificationRequired", "handleVerificationStateChange", "state", "handleAnswerError", "errorType", "errorMessage", "applyPct", "fileData", "sizeMb", "fileRequest", "f", "createSessionRef", "destroyingRef", "sessionCarriesGroupMember", "integ", "sidebarCollapsed", "setSidebarCollapsed", "sidebarDrawerOpen", "setSidebarDrawerOpen", "handleSelectSession", "handleNewChat", "handleRenameSession", "closeMeshLink", "closeMeshLinkRef", "buildMeshLink", "fp", "onMessage", "parsed", "onStatusChange", "dead", "onVerificationRequired", "buildMeshLinkRef", "makeMeshAdapter", "offer", "descriptor", "answer", "group", "GROUP_PHASE", "sid", "session", "groupCandidates", "handleSelectGroup", "handleCreateGroup", "sessionIds", "GroupSession", "createGroupEntry", "handleAcceptInvite", "handleConfirmGroupSas", "destroyGroup", "announce", "media", "handleSendGroupMessage", "text", "unreachable", "signature", "names", "who", "addCandidates", "taken", "handleAddMembers", "handleRemoveGroupMember", "syncGroupCallMedia", "callOrNull", "call", "openGroupCallMedia", "existing", "GroupCallMedia", "snapshot", "handleStartGroupCall", "withVideo", "mediaErrorCode", "handleJoinGroupCall", "handleDismissGroupCall", "handleLeaveGroupCall", "activeGroupMedia", "handleGroupCallMic", "handleGroupCallCamera", "handleGroupCallFlip", "flushReadAcks", "acks", "didInitRef", "isTabSwitching", "tabSwitchTimeout", "handleBeforeUnload", "handleVisibilityChange", "compressOfferData", "minimalOffer", "createTemplateOffer", "MAX_QR_LEN", "BIN_MAX_QR_LEN", "setQrFramesTotal", "setQrFrameIndex", "setQrManualMode", "qrAnimationRef", "stopQrAnimation", "renderCurrent", "chunks", "idx", "QR_SIZE", "renderAndAdvance", "len", "nextIdx", "newManualMode", "prevIdx", "qrChunksBufferRef", "generateQRCode", "originalSize", "obj", "qrDataUrl", "FRAME_MAX", "rawChunks", "seq", "part", "EC_OPTS", "reconstructFromTemplate", "templateData", "handleQRScan", "scannedData", "chunkHash", "uniqueCount", "isComplete", "fullBinaryData", "parsedData", "any", "maybeDecompressed", "hdr", "fullText", "payloadObj", "results", "fullOffer", "offerString", "bin", "TARGET_CHUNKS", "firstUrl", "intervalMs", "handleCreateAnswer", "rawText", "parseError", "answerString", "handleConnect", "anyAnswer", "answerType", "handleVerifyConnection", "isValid", "handleDisconnect", "handleSendMessage", "baseTextEarly", "midEarly", "channelUsable", "outTextOff", "tsOff", "metaOff", "echoOpts", "baseText", "outText", "localOpts", "sendErr", "handleSendVoice", "rawType", "mime", "ext", "file", "localUrl", "reconnecting", "voiceMeta", "localId", "handleUnsendMessage", "handleMessageExpire", "handleIncomingDecision", "accepted", "requestDonateScroll", "handleSessionActivated", "prevConnStatusRef", "resumed", "previewMode", "isConnectedAndVerified", "prevChatRef", "html5Qrcode", "config", "isScanning", "decodedText", "decodedResult", "success", "clearErr", "sessionChats", "decorateSessions", "groupChats", "decorateGroups", "showSidebar", "previewMessages", "noop", "CreateGroupModal", "GroupInviteModal", "GroupErrorModal", "AddMembersModal", "GroupSasModal", "LanguageSuggestion", "GroupChatView", "GroupCallUI", "closeScanner", "framesText", "corner", "UpdateCheckerWrapper", "children", "initializeApp", "AppWithUpdateChecker"]
+  "sourcesContent": ["function isSecureBitDebugEnabled(targetWindow = globalThis.window) {\n    return targetWindow?.SECUREBIT_DEBUG === true;\n}\n\nfunction installDebugWindowHooks({\n    targetWindow = globalThis.window,\n    webrtcManagerRef,\n    onClearData,\n    clearConsole = () => {\n        if (typeof console.clear === 'function') {\n            console.clear();\n        }\n    }\n}) {\n    if (!isSecureBitDebugEnabled(targetWindow)) {\n        return () => {};\n    }\n\n    targetWindow.forceCleanup = () => {\n        onClearData();\n        if (webrtcManagerRef.current) {\n            webrtcManagerRef.current.disconnect();\n        }\n    };\n    targetWindow.clearLogs = clearConsole;\n    targetWindow.webrtcManagerRef = webrtcManagerRef;\n\n    return () => {\n        delete targetWindow.forceCleanup;\n        delete targetWindow.clearLogs;\n        delete targetWindow.webrtcManagerRef;\n    };\n}\n\nexport { installDebugWindowHooks, isSecureBitDebugEnabled };\n", "// Persistent, at-rest-encrypted storage for the user's custom ICE (STUN/TURN)\n// configuration. Persistence is OPTIONAL: the UI only calls saveIceSettings when\n// the user explicitly opts in (\"Save on this device\"). Session-only use never\n// touches this store \u2014 the settings live in React state and vanish on reload.\n//\n// At-rest protection model:\n//   - A non-extractable AES-GCM device key is generated once and kept in\n//     IndexedDB. It can never be exported back into JS, so a copy of the\n//     on-disk database is useless without executing code in this exact origin.\n//   - The settings blob (which may contain TURN credentials) is encrypted with\n//     that key before being written.\n//   This protects against disk/profile inspection. It does NOT protect against a\n//   live code-execution compromise of the page (consistent with the project's\n//   stated threat model \u2014 see SECURITY.md). Credentials are never persisted in\n//   plaintext, and the user can delete them at any time via clearIceSettings().\n\nconst DB_NAME = 'securebit-net';\nconst DB_VERSION = 1;\nconst STORE = 'kv';\nconst KEY_RECORD = 'ice-device-key';\nconst SETTINGS_RECORD = 'ice-settings';\nconst SETTINGS_VERSION = 1;\n\nfunction isSupported() {\n    return typeof indexedDB !== 'undefined' &&\n        typeof crypto !== 'undefined' &&\n        !!crypto.subtle;\n}\n\nfunction openDb() {\n    return new Promise((resolve, reject) => {\n        let request;\n        try {\n            request = indexedDB.open(DB_NAME, DB_VERSION);\n        } catch (error) {\n            reject(error);\n            return;\n        }\n        request.onupgradeneeded = () => {\n            const db = request.result;\n            if (!db.objectStoreNames.contains(STORE)) {\n                db.createObjectStore(STORE);\n            }\n        };\n        request.onsuccess = () => resolve(request.result);\n        request.onerror = () => reject(request.error);\n    });\n}\n\nfunction idbGet(db, key) {\n    return new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE, 'readonly');\n        const req = tx.objectStore(STORE).get(key);\n        req.onsuccess = () => resolve(req.result);\n        req.onerror = () => reject(req.error);\n    });\n}\n\nfunction idbPut(db, key, value) {\n    return new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE, 'readwrite');\n        tx.objectStore(STORE).put(value, key);\n        tx.oncomplete = () => resolve();\n        tx.onerror = () => reject(tx.error);\n    });\n}\n\nfunction idbDelete(db, key) {\n    return new Promise((resolve, reject) => {\n        const tx = db.transaction(STORE, 'readwrite');\n        tx.objectStore(STORE).delete(key);\n        tx.oncomplete = () => resolve();\n        tx.onerror = () => reject(tx.error);\n    });\n}\n\nasync function getOrCreateDeviceKey(db) {\n    const existing = await idbGet(db, KEY_RECORD);\n    if (existing instanceof CryptoKey) {\n        return existing;\n    }\n    const key = await crypto.subtle.generateKey(\n        { name: 'AES-GCM', length: 256 },\n        false, // non-extractable\n        ['encrypt', 'decrypt']\n    );\n    await idbPut(db, KEY_RECORD, key);\n    return key;\n}\n\n/**\n * Persist custom ICE settings, encrypted at rest.\n * @param {{ servers: Array, privacyMode: string }} settings\n */\nexport async function saveIceSettings(settings) {\n    if (!isSupported()) throw new Error('Persistent storage is not available in this browser');\n\n    const db = await openDb();\n    const key = await getOrCreateDeviceKey(db);\n\n    const payload = JSON.stringify({\n        version: SETTINGS_VERSION,\n        servers: Array.isArray(settings?.servers) ? settings.servers : [],\n        privacyMode: settings?.privacyMode === 'relay-only' ? 'relay-only' : 'standard'\n    });\n\n    const iv = crypto.getRandomValues(new Uint8Array(12));\n    const ciphertext = await crypto.subtle.encrypt(\n        { name: 'AES-GCM', iv },\n        key,\n        new TextEncoder().encode(payload)\n    );\n\n    await idbPut(db, SETTINGS_RECORD, {\n        iv: Array.from(iv),\n        data: Array.from(new Uint8Array(ciphertext))\n    });\n}\n\n/**\n * Load and decrypt previously saved ICE settings.\n * Fails closed: returns null if absent, unsupported, or undecryptable.\n * @returns {Promise<{ servers: Array, privacyMode: string }|null>}\n */\nexport async function loadIceSettings() {\n    if (!isSupported()) return null;\n\n    try {\n        const db = await openDb();\n        const record = await idbGet(db, SETTINGS_RECORD);\n        if (!record || !Array.isArray(record.iv) || !Array.isArray(record.data)) {\n            return null;\n        }\n        const key = await idbGet(db, KEY_RECORD);\n        if (!(key instanceof CryptoKey)) return null;\n\n        const plaintext = await crypto.subtle.decrypt(\n            { name: 'AES-GCM', iv: new Uint8Array(record.iv) },\n            key,\n            new Uint8Array(record.data)\n        );\n        const parsed = JSON.parse(new TextDecoder().decode(plaintext));\n        return {\n            servers: Array.isArray(parsed.servers) ? parsed.servers : [],\n            privacyMode: parsed.privacyMode === 'relay-only' ? 'relay-only' : 'standard'\n        };\n    } catch {\n        // Corrupted or tampered record: fail closed.\n        return null;\n    }\n}\n\n/** Delete any persisted ICE settings (the device key is left in place). */\nexport async function clearIceSettings() {\n    if (!isSupported()) return;\n    try {\n        const db = await openDb();\n        await idbDelete(db, SETTINGS_RECORD);\n    } catch {\n        // Best-effort deletion; nothing to surface to the user.\n    }\n}\n\nexport async function hasSavedIceSettings() {\n    if (!isSupported()) return false;\n    try {\n        const db = await openDb();\n        const record = await idbGet(db, SETTINGS_RECORD);\n        return !!record;\n    } catch {\n        return false;\n    }\n}\n", "// Keeps the credential for SecureBit's own TURN relay fresh.\n//\n// The relay's credential is no longer something the client carries: it is minted\n// by the site (POST /api/turn-credentials, see deploy/turn-credentials.js) and\n// expires after a day. This module fetches one at startup and again before it\n// runs out, and writes it into the ICE list the connection managers already hold.\n//\n// The update is made IN PLACE on the existing entry objects. Every manager keeps a\n// reference to window.SECUREBIT_ICE_SERVERS rather than a copy, so the next peer\n// connection \u2014 and the next in-band ICE restart, which re-reads the list \u2014 picks\n// up the new credential without anything else having to know it changed.\n//\n// The web build ships no relay entry at all: a TURN entry without a credential\n// is refused by RTCPeerConnection, and a built-in credential is exactly what this\n// replaced. So the first successful fetch ADDS the entry, and later ones renew it.\n// Until then \u2014 or if the site cannot be reached \u2014 connections use STUN only.\n// Only our relay's entries are touched; a TURN server the user configured\n// themselves is never modified.\n\nconst ENDPOINT = '/api/turn-credentials';\nconst OWN_RELAY_HOSTS = ['turn.securebit.chat', '144.172.96.126'];\nconst MAX_FIELD = 512;\n// How long to wait before trying again after a failed fetch.\nconst RETRY_DELAYS_MS = [60_000, 5 * 60_000, 15 * 60_000];\n\nfunction relayHost(url) {\n    const m = /^turns?:([^:?\\s]+)/i.exec(String(url || '').trim());\n    return m ? m[1].toLowerCase() : null;\n}\n\n/** True when an ICE entry points at SecureBit's own relay. */\nexport function isOwnRelayEntry(entry) {\n    if (!entry || typeof entry !== 'object') return false;\n    const urls = Array.isArray(entry.urls) ? entry.urls : [entry.urls];\n    return urls.some((u) => OWN_RELAY_HOSTS.includes(relayHost(u)));\n}\n\nfunction isCleanField(value) {\n    if (typeof value !== 'string' || value.length === 0 || value.length > MAX_FIELD) return false;\n    for (let i = 0; i < value.length; i++) {\n        const c = value.charCodeAt(i);\n        if (c < 0x20 || c === 0x7f) return false;\n    }\n    return true;\n}\n\n/**\n * Write a fresh credential into every own-relay entry of `list`, in place. When\n * the list has no such entry yet and `cred.urls` names our relay, one is added.\n * @returns {boolean} whether anything was updated\n */\nexport function applyTurnCredentials(list, cred) {\n    if (!Array.isArray(list) || !cred || !isCleanField(cred.username) || !isCleanField(cred.credential)) {\n        return false;\n    }\n    let updated = false;\n    for (const entry of list) {\n        if (!isOwnRelayEntry(entry)) continue;\n        entry.username = cred.username;\n        entry.credential = cred.credential;\n        updated = true;\n    }\n    if (!updated && Array.isArray(cred.urls)) {\n        // Only our relay's addresses may come from the response: the endpoint\n        // is trusted to renew a password, not to point connections elsewhere.\n        const urls = cred.urls.filter((u) => isCleanField(u) && OWN_RELAY_HOSTS.includes(relayHost(u)));\n        if (urls.length > 0) {\n            list.push({ urls, username: cred.username, credential: cred.credential });\n            updated = true;\n        }\n    }\n    return updated;\n}\n\n/** Pull the credential out of an endpoint response, or null if it is not usable. */\nexport function parseCredentialResponse(body, nowSeconds) {\n    const server = body && Array.isArray(body.iceServers) ? body.iceServers[0] : null;\n    if (!server || !isCleanField(server.username) || !isCleanField(server.credential)) return null;\n    // coturn REST-API usernames are \"<expiry>:<label>\"; refuse one already expired.\n    const expiry = Number(String(server.username).split(':')[0]);\n    if (!Number.isFinite(expiry) || expiry <= nowSeconds) return null;\n    const ttl = Number(body.ttl);\n    return {\n        urls: Array.isArray(server.urls) ? server.urls.slice(0, 8) : [],\n        username: server.username,\n        credential: server.credential,\n        expiry,\n        ttl: Number.isFinite(ttl) && ttl > 0 ? ttl : expiry - nowSeconds,\n    };\n}\n\nlet started = false;\n\n/**\n * Start keeping the relay credential fresh. Safe to call more than once.\n * @param {object} [opts]\n * @param {() => Array} [opts.getList]  the ICE list to update\n */\nexport function startTurnCredentialRefresh(opts = {}) {\n    if (started || typeof window === 'undefined' || typeof fetch !== 'function') return;\n    started = true;\n\n    const getList = opts.getList || (() => window.SECUREBIT_ICE_SERVERS);\n    let expiry = 0;\n    let ttl = 0;\n    let timer = null;\n    let failures = 0;\n\n    const schedule = (ms) => {\n        if (timer) clearTimeout(timer);\n        timer = setTimeout(refresh, ms);\n    };\n\n    async function refresh() {\n        timer = null;\n        try {\n            const res = await fetch(ENDPOINT, { method: 'POST', cache: 'no-store', credentials: 'omit' });\n            if (!res.ok) throw new Error(`HTTP ${res.status}`);\n            const cred = parseCredentialResponse(await res.json(), Date.now() / 1000);\n            if (!cred) throw new Error('unusable response');\n            applyTurnCredentials(getList(), cred);\n            expiry = cred.expiry;\n            ttl = cred.ttl;\n            failures = 0;\n            // Renew at half-life, so a call started just before renewal still has\n            // hours of validity left for the relay to refresh its allocation.\n            schedule(Math.max(60, ttl / 2) * 1000);\n        } catch (_) {\n            const delay = RETRY_DELAYS_MS[Math.min(failures, RETRY_DELAYS_MS.length - 1)];\n            failures++;\n            schedule(delay);\n        }\n    }\n\n    // Timers are throttled in background tabs and stop while a laptop sleeps; on\n    // coming back, renew straight away if the credential is past its half-life.\n    document.addEventListener('visibilitychange', () => {\n        if (document.visibilityState !== 'visible') return;\n        const now = Date.now() / 1000;\n        if (!expiry || expiry - now < ttl / 2) refresh();\n    });\n\n    refresh();\n}\n", "// Generated by scripts/build-i18n.js from locales/*.json \u2014 do not edit by hand.\n// Add or change strings in locales/<code>.json, then run `npm run build:i18n`.\n\nexport const DEFAULT_LOCALE = \"en\";\nexport const SUPPORTED_LOCALES = [\"en\",\"de\",\"fr\",\"es\",\"uk\",\"ru\",\"zh\",\"ko\",\"hi\",\"ar\",\"he\",\"fa\",\"ur\"];\nexport const LOCALE_META = {\n    \"en\": {\n        \"htmlLang\": \"en\",\n        \"nativeName\": \"English\",\n        \"abbr\": \"EN\",\n        \"dir\": \"ltr\",\n        \"path\": \"/\"\n    },\n    \"de\": {\n        \"htmlLang\": \"de\",\n        \"nativeName\": \"Deutsch\",\n        \"abbr\": \"DE\",\n        \"dir\": \"ltr\",\n        \"path\": \"/de/\"\n    },\n    \"fr\": {\n        \"htmlLang\": \"fr\",\n        \"nativeName\": \"Fran\u00E7ais\",\n        \"abbr\": \"FR\",\n        \"dir\": \"ltr\",\n        \"path\": \"/fr/\"\n    },\n    \"es\": {\n        \"htmlLang\": \"es\",\n        \"nativeName\": \"Espa\u00F1ol\",\n        \"abbr\": \"ES\",\n        \"dir\": \"ltr\",\n        \"path\": \"/es/\"\n    },\n    \"uk\": {\n        \"htmlLang\": \"uk\",\n        \"nativeName\": \"\u0423\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u0430\",\n        \"abbr\": \"UK\",\n        \"dir\": \"ltr\",\n        \"path\": \"/uk/\"\n    },\n    \"ru\": {\n        \"htmlLang\": \"ru\",\n        \"nativeName\": \"\u0420\u0443\u0441\u0441\u043A\u0438\u0439\",\n        \"abbr\": \"RU\",\n        \"dir\": \"ltr\",\n        \"path\": \"/ru/\"\n    },\n    \"zh\": {\n        \"htmlLang\": \"zh-Hans\",\n        \"nativeName\": \"\u7B80\u4F53\u4E2D\u6587\",\n        \"abbr\": \"ZH\",\n        \"dir\": \"ltr\",\n        \"path\": \"/zh/\"\n    },\n    \"ko\": {\n        \"htmlLang\": \"ko\",\n        \"nativeName\": \"\uD55C\uAD6D\uC5B4\",\n        \"abbr\": \"KO\",\n        \"dir\": \"ltr\",\n        \"path\": \"/ko/\"\n    },\n    \"hi\": {\n        \"htmlLang\": \"hi\",\n        \"nativeName\": \"\u0939\u093F\u0928\u094D\u0926\u0940\",\n        \"abbr\": \"HI\",\n        \"dir\": \"ltr\",\n        \"path\": \"/hi/\"\n    },\n    \"ar\": {\n        \"htmlLang\": \"ar\",\n        \"nativeName\": \"\u0627\u0644\u0639\u0631\u0628\u064A\u0629\",\n        \"abbr\": \"AR\",\n        \"dir\": \"rtl\",\n        \"path\": \"/ar/\"\n    },\n    \"he\": {\n        \"htmlLang\": \"he\",\n        \"nativeName\": \"\u05E2\u05D1\u05E8\u05D9\u05EA\",\n        \"abbr\": \"HE\",\n        \"dir\": \"rtl\",\n        \"path\": \"/he/\"\n    },\n    \"fa\": {\n        \"htmlLang\": \"fa\",\n        \"nativeName\": \"\u0641\u0627\u0631\u0633\u06CC\",\n        \"abbr\": \"FA\",\n        \"dir\": \"rtl\",\n        \"path\": \"/fa/\"\n    },\n    \"ur\": {\n        \"htmlLang\": \"ur\",\n        \"nativeName\": \"\u0627\u0631\u062F\u0648\",\n        \"abbr\": \"UR\",\n        \"dir\": \"rtl\",\n        \"path\": \"/ur/\"\n    }\n};\n\n// Strings a page may need for a locale it did not load. See CROSS_LOCALE_KEYS in\n// scripts/build-i18n.js for why this list is short on purpose.\nexport const CROSS_LOCALE_STRINGS = {\n    \"en\": {\n        \"language.suggest.text\": \"This page is also available in English.\",\n        \"language.suggest.cta\": \"Read in English\",\n        \"language.suggest.dismiss\": \"Dismiss\"\n    },\n    \"de\": {\n        \"language.suggest.text\": \"Diese Seite gibt es auch auf Deutsch.\",\n        \"language.suggest.cta\": \"Auf Deutsch lesen\",\n        \"language.suggest.dismiss\": \"Schlie\u00DFen\"\n    },\n    \"fr\": {\n        \"language.suggest.text\": \"Cette page est aussi disponible en fran\u00E7ais.\",\n        \"language.suggest.cta\": \"Lire en fran\u00E7ais\",\n        \"language.suggest.dismiss\": \"Fermer\"\n    },\n    \"es\": {\n        \"language.suggest.text\": \"Esta p\u00E1gina tambi\u00E9n est\u00E1 disponible en espa\u00F1ol.\",\n        \"language.suggest.cta\": \"Leer en espa\u00F1ol\",\n        \"language.suggest.dismiss\": \"Cerrar\"\n    },\n    \"uk\": {\n        \"language.suggest.text\": \"\u0426\u044F \u0441\u0442\u043E\u0440\u0456\u043D\u043A\u0430 \u0442\u0430\u043A\u043E\u0436 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E.\",\n        \"language.suggest.cta\": \"\u0427\u0438\u0442\u0430\u0442\u0438 \u0443\u043A\u0440\u0430\u0457\u043D\u0441\u044C\u043A\u043E\u044E\",\n        \"language.suggest.dismiss\": \"\u0417\u0430\u043A\u0440\u0438\u0442\u0438\"\n    },\n    \"ru\": {\n        \"language.suggest.text\": \"\u042D\u0442\u0430 \u0441\u0442\u0440\u0430\u043D\u0438\u0446\u0430 \u0442\u0430\u043A\u0436\u0435 \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u0430 \u043D\u0430 \u0440\u0443\u0441\u0441\u043A\u043E\u043C.\",\n        \"language.suggest.cta\": \"\u0427\u0438\u0442\u0430\u0442\u044C \u043F\u043E-\u0440\u0443\u0441\u0441\u043A\u0438\",\n        \"language.suggest.dismiss\": \"\u0417\u0430\u043A\u0440\u044B\u0442\u044C\"\n    },\n    \"zh\": {\n        \"language.suggest.text\": \"\u672C\u9875\u9762\u4E5F\u6709\u7B80\u4F53\u4E2D\u6587\u7248\u672C\u3002\",\n        \"language.suggest.cta\": \"\u9605\u8BFB\u7B80\u4F53\u4E2D\u6587\",\n        \"language.suggest.dismiss\": \"\u5173\u95ED\"\n    },\n    \"ko\": {\n        \"language.suggest.text\": \"\uC774 \uD398\uC774\uC9C0\uB294 \uD55C\uAD6D\uC5B4\uB85C\uB3C4 \uBCFC \uC218 \uC788\uC2B5\uB2C8\uB2E4.\",\n        \"language.suggest.cta\": \"\uD55C\uAD6D\uC5B4\uB85C \uBCF4\uAE30\",\n        \"language.suggest.dismiss\": \"\uB2EB\uAE30\"\n    },\n    \"hi\": {\n        \"language.suggest.text\": \"\u092F\u0939 \u092A\u0943\u0937\u094D\u0920 \u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092D\u0940 \u0909\u092A\u0932\u092C\u094D\u0927 \u0939\u0948\u0964\",\n        \"language.suggest.cta\": \"\u0939\u093F\u0928\u094D\u0926\u0940 \u092E\u0947\u0902 \u092A\u0922\u093C\u0947\u0902\",\n        \"language.suggest.dismiss\": \"\u092C\u0902\u0926 \u0915\u0930\u0947\u0902\"\n    },\n    \"ar\": {\n        \"language.suggest.text\": \"\u0647\u0630\u0647 \u0627\u0644\u0635\u0641\u062D\u0629 \u0645\u062A\u0648\u0641\u0631\u0629 \u0623\u064A\u0636\u064B\u0627 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629.\",\n        \"language.suggest.cta\": \"\u0627\u0642\u0631\u0623 \u0628\u0627\u0644\u0639\u0631\u0628\u064A\u0629\",\n        \"language.suggest.dismiss\": \"\u0625\u063A\u0644\u0627\u0642\"\n    },\n    \"he\": {\n        \"language.suggest.text\": \"\u05D4\u05D3\u05E3 \u05D4\u05D6\u05D4 \u05D6\u05DE\u05D9\u05DF \u05D2\u05DD \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA.\",\n        \"language.suggest.cta\": \"\u05DC\u05E7\u05E8\u05D9\u05D0\u05D4 \u05D1\u05E2\u05D1\u05E8\u05D9\u05EA\",\n        \"language.suggest.dismiss\": \"\u05E1\u05D2\u05D9\u05E8\u05D4\"\n    },\n    \"fa\": {\n        \"language.suggest.text\": \"\u0627\u06CC\u0646 \u0635\u0641\u062D\u0647 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC \u0647\u0645 \u062F\u0631 \u062F\u0633\u062A\u0631\u0633 \u0627\u0633\u062A.\",\n        \"language.suggest.cta\": \"\u062E\u0648\u0627\u0646\u062F\u0646 \u0628\u0647 \u0641\u0627\u0631\u0633\u06CC\",\n        \"language.suggest.dismiss\": \"\u0628\u0633\u062A\u0646\"\n    },\n    \"ur\": {\n        \"language.suggest.text\": \"\u06CC\u06C1 \u0635\u0641\u062D\u06C1 \u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u0628\u06BE\u06CC \u062F\u0633\u062A\u06CC\u0627\u0628 \u06C1\u06D2\u06D4\",\n        \"language.suggest.cta\": \"\u0627\u0631\u062F\u0648 \u0645\u06CC\u06BA \u067E\u0691\u06BE\u06CC\u06BA\",\n        \"language.suggest.dismiss\": \"\u0628\u0646\u062F \u06A9\u0631\u06CC\u06BA\"\n    }\n};\n", "// Generated by scripts/build-i18n.js from locales/*.json \u2014 do not edit by hand.\n// Add or change strings in locales/<code>.json, then run `npm run build:i18n`.\n\nexport const DICTIONARY = {\n    \"language.label\": \"Language\",\n    \"language.suggest.text\": \"This page is also available in English.\",\n    \"language.suggest.cta\": \"Read in English\",\n    \"language.suggest.dismiss\": \"Dismiss\",\n    \"theme.label\": \"Theme\",\n    \"theme.system\": \"System\",\n    \"theme.light\": \"Light\",\n    \"theme.dark\": \"Dark\",\n    \"donate.eyebrow\": \"Donate in crypto\",\n    \"donate.title\": \"Keep SecureBit independent\",\n    \"donate.description\": \"Every donation goes to development and audits.\",\n    \"donate.copy\": \"Copy\",\n    \"donate.copied\": \"Copied\",\n    \"donate.net.usdt\": \"USDT \u00B7 Tron (TRC-20)\",\n    \"donate.net.btc\": \"Bitcoin network\",\n    \"donate.net.eth\": \"Ethereum mainnet\",\n    \"donate.warn.usdt\": \"Send only USDT on Tron (TRC-20).\",\n    \"donate.warn.btc\": \"Send only BTC on the Bitcoin network.\",\n    \"donate.warn.eth\": \"Send only ETH on Ethereum mainnet.\",\n    \"donate.qrAlt\": \"QR code of the {coin} donation address\",\n    \"community.title\": \"Join the future of privacy\",\n    \"community.description\": \"SecureBit grows thanks to its community. Your ideas and feedback shape the future of secure communication - built in the open, with complete ASN.1 validation end-to-end.\",\n    \"community.github\": \"GitHub Repository\",\n    \"community.feedback\": \"Feedback\",\n    \"unique.eyebrow\": \"What sets us apart\",\n    \"unique.heading\": \"Why SecureBit is unique\",\n    \"unique.s1.titleTop\": \"Layered\",\n    \"unique.s1.titleBottom\": \"encryption core\",\n    \"unique.s1.collapsed\": \"Encryption core\",\n    \"unique.s1.desc\": \"ECDH P-384 key exchange, AES-256-GCM payloads, ECDSA signatures and full ASN.1 validation - composed into one hardened pipeline.\",\n    \"unique.s1.tags\": [\n        \"ECDH P-384\",\n        \"AES-256-GCM\",\n        \"ECDSA\",\n        \"ASN.1\"\n    ],\n    \"unique.s2.titleTop\": \"Pure P2P\",\n    \"unique.s2.titleBottom\": \"WebRTC\",\n    \"unique.s2.collapsed\": \"Pure P2P WebRTC\",\n    \"unique.s2.desc\": \"Messages travel directly between devices over WebRTC. No relay holds your data - the server only helps two peers find each other.\",\n    \"unique.s2.tags\": [\n        \"DTLS 1.3\",\n        \"No relay\"\n    ],\n    \"unique.s3.titleTop\": \"Perfect\",\n    \"unique.s3.titleBottom\": \"forward secrecy\",\n    \"unique.s3.collapsed\": \"Forward secrecy\",\n    \"unique.s3.desc\": \"Session keys rotate continuously and are discarded after use, so a single compromised key can never unlock past conversations.\",\n    \"unique.s3.tags\": [\n        \"Ephemeral keys\",\n        \"Auto-rotate\"\n    ],\n    \"unique.s4.titleTop\": \"Traffic\",\n    \"unique.s4.titleBottom\": \"obfuscation\",\n    \"unique.s4.collapsed\": \"Traffic obfuscation\",\n    \"unique.s4.desc\": \"Packet sizes and timing are padded and randomized, hiding metadata patterns from anyone watching the wire.\",\n    \"unique.s4.tags\": [\n        \"Packet padding\",\n        \"Timing jitter\"\n    ],\n    \"unique.s5.titleTop\": \"Zero data\",\n    \"unique.s5.titleBottom\": \"collection\",\n    \"unique.s5.collapsed\": \"Zero data collection\",\n    \"unique.s5.desc\": \"No accounts, no logs, no message storage. There is nothing on a server to leak, subpoena, or sell.\",\n    \"unique.s5.tags\": [\n        \"No accounts\",\n        \"No logs\"\n    ],\n    \"partners.eyebrow\": \"Partners & ecosystem\",\n    \"partners.heading\": \"Trusted by our partners\",\n    \"partners.aegis.desc\": \"Capital partner securing confidential financial communications across its portfolio.\",\n    \"partners.aegis.role\": \"Strategic backer\",\n    \"partners.furilabs.desc\": \"Privacy-first Linux phones that ship SecureBit as a default secure channel.\",\n    \"partners.furilabs.role\": \"Technology partner\",\n    \"partners.inviteTitle\": \"Become a partner\",\n    \"partners.inviteDesc\": \"Building privacy hardware or infrastructure? Let's integrate SecureBit.\",\n    \"partners.inviteCta\": \"Start a conversation\",\n    \"roadmap.eyebrow\": \"Development Roadmap\",\n    \"roadmap.heading\": \"The evolution of SecureBit\",\n    \"roadmap.subheading\": \"From the first prototype to a quantum-resistant, decentralized network - with complete ASN.1 validation at every layer.\",\n    \"roadmap.progress\": \"{shipped} of {total} milestones shipped\",\n    \"roadmap.upcoming\": \"{upcoming} on the way\",\n    \"roadmap.keyFeatures\": \"Key features\",\n    \"hero.headlineTop\": \"A direct line\",\n    \"hero.headlineBottom\": \"only you two can read.\",\n    \"hero.subheading\": \"Keys are generated on your device and exchanged peer-to-peer. No accounts, no servers storing your messages.\",\n    \"hero.diagramAlt\": \"A direct encrypted line to one peer, with two more peers joining the mesh\",\n    \"intro.createTitle\": \"Create a new channel\",\n    \"intro.createDesc\": \"Your device generates the keys and a one-time invitation. Nothing touches a server.\",\n    \"intro.createCta\": \"Generate keys & invitation\",\n    \"intro.joinTitle\": \"Join a channel\",\n    \"intro.joinDesc\": \"Scan your peer's QR with your camera, or paste their invitation code.\",\n    \"intro.scanTitle\": \"Scan QR with camera\",\n    \"intro.scanSubtitle\": \"Fastest - point at your peer's screen\",\n    \"intro.orPasteCode\": \"Or paste the code\",\n    \"intro.pastePlaceholder\": \"Paste invitation code here\u2026\",\n    \"intro.connect\": \"Connect\",\n    \"intro.connecting\": \"Processing\u2026\",\n    \"roadmap.r1.title\": \"Start of Development\",\n    \"roadmap.r1.sub\": \"Idea, prototype, and infrastructure setup\",\n    \"roadmap.r1.date\": \"Early 2025\",\n    \"roadmap.r1.features\": [\n        \"Concept and requirements formation\",\n        \"Stack selection: WebRTC, P2P, cryptography\",\n        \"First messaging prototypes\",\n        \"Repository creation and CI\",\n        \"Basic encryption architecture\",\n        \"UX/UI design\"\n    ],\n    \"roadmap.r2.title\": \"Alpha Release\",\n    \"roadmap.r2.sub\": \"First public alpha: basic chat and key exchange\",\n    \"roadmap.r2.date\": \"Spring 2025\",\n    \"roadmap.r2.features\": [\n        \"Basic P2P messaging via WebRTC\",\n        \"Simple E2E encryption (demo scheme)\",\n        \"Stable signaling and reconnection\",\n        \"Minimal UX for testing\",\n        \"Feedback collection from early testers\"\n    ],\n    \"roadmap.r3.title\": \"Security Hardened\",\n    \"roadmap.r3.sub\": \"Security strengthening and stable branch release\",\n    \"roadmap.r3.date\": \"Summer 2025\",\n    \"roadmap.r3.features\": [\n        \"ECDH/ECDSA implementation in production\",\n        \"Perfect Forward Secrecy and key rotation\",\n        \"Improved authentication checks\",\n        \"File encryption and large payload transfers\",\n        \"Audit of basic cryptoprocesses\"\n    ],\n    \"roadmap.r4.title\": \"Scaling & Stability\",\n    \"roadmap.r4.sub\": \"Network scaling and stability improvements\",\n    \"roadmap.r4.date\": \"Fall 2025\",\n    \"roadmap.r4.features\": [\n        \"Optimization of P2P connections and NAT traversal\",\n        \"Reconnection mechanisms and message queues\",\n        \"Reduced battery consumption on mobile\",\n        \"Multi-device synchronization support\",\n        \"Monitoring and logging tools for developers\"\n    ],\n    \"roadmap.r5.title\": \"Privacy-first Release\",\n    \"roadmap.r5.sub\": \"Focus on privacy: minimizing metadata\",\n    \"roadmap.r5.date\": \"Winter 2025\",\n    \"roadmap.r5.features\": [\n        \"Metadata protection and fingerprint reduction\",\n        \"Experiments with onion routing and DHT\",\n        \"Options for anonymous connections\",\n        \"Preparation for open code audit\",\n        \"Improved user verification processes\"\n    ],\n    \"roadmap.r6.title\": \"Enhanced Security Edition\",\n    \"roadmap.r6.sub\": \"18-layer military-grade cryptography with complete ASN.1 validation\",\n    \"roadmap.r6.date\": \"Late 2025\",\n    \"roadmap.r6.features\": [\n        \"ECDH + DTLS + SAS triple-layer security\",\n        \"ECDH P-384 + AES-GCM 256-bit encryption\",\n        \"DTLS fingerprint verification\",\n        \"SAS (Short Authentication String) verification\",\n        \"Perfect Forward Secrecy with key rotation\",\n        \"Enhanced MITM attack prevention\",\n        \"Complete ASN.1 DER validation\",\n        \"OID and EC point verification\",\n        \"SPKI structure validation\",\n        \"P2P WebRTC architecture\",\n        \"Metadata protection\",\n        \"100% open source code\"\n    ],\n    \"roadmap.r7.title\": \"Desktop Edition\",\n    \"roadmap.r7.sub\": \"Native desktop apps for Windows, macOS, and Linux\",\n    \"roadmap.r7.date\": \"Early 2026\",\n    \"roadmap.r7.features\": [\n        \"Windows desktop app (Tauri v2)\",\n        \"macOS desktop app (Tauri v2)\",\n        \"Linux AppImage support (Tauri v2)\",\n        \"Real-time notifications\",\n        \"Automatic reconnection\",\n        \"Cross-device synchronization\",\n        \"Improved UX/UI\",\n        \"Support for files up to 100MB\"\n    ],\n    \"roadmap.r8.title\": \"Secure Voice & Calls\",\n    \"roadmap.r8.sub\": \"Encrypted voice messages, audio calls, and video calls\",\n    \"roadmap.r8.date\": \"Early 2026\",\n    \"roadmap.r8.features\": [\n        \"End-to-end encrypted voice messages\",\n        \"1:1 encrypted audio calls (WebRTC)\",\n        \"1:1 encrypted video calls (WebRTC)\",\n        \"Perfect Forward Secrecy for live media\",\n        \"SRTP/DTLS-protected media streams\",\n        \"In-call SAS verification\",\n        \"Call notifications and auto-reconnection\",\n        \"Low-latency P2P media\"\n    ],\n    \"roadmap.r9.title\": \"Group Communications\",\n    \"roadmap.r9.sub\": \"Group chats with preserved privacy\",\n    \"roadmap.r9.date\": \"Now\",\n    \"roadmap.r9.features\": [\n        \"P2P group chats up to 8 participants\",\n        \"Mesh delivery with signed relay fallback\",\n        \"One group safety code, compared by everyone\",\n        \"Commit-then-reveal ceremony against code grinding\",\n        \"Per-group identity keys, ephemeral by design\",\n        \"Signed membership with epoch ordering\",\n        \"Signed messages, so a split transcript is provable\",\n        \"No server, no shared group key, no history\"\n    ],\n    \"roadmap.r10.title\": \"Mobile Edition\",\n    \"roadmap.r10.sub\": \"Native mobile apps for iOS and Android\",\n    \"roadmap.r10.date\": \"Q2 2027\",\n    \"roadmap.r10.features\": [\n        \"iOS native app (Swift/SwiftUI)\",\n        \"Android native app (Kotlin/Jetpack Compose)\",\n        \"PWA support for mobile browsers\",\n        \"Real-time push notifications\",\n        \"Battery optimization\",\n        \"Mobile-optimized UX/UI\",\n        \"Offline message queuing\",\n        \"Biometric authentication\"\n    ],\n    \"roadmap.r11.title\": \"Quantum-Resistant Edition\",\n    \"roadmap.r11.sub\": \"Protection against quantum computers\",\n    \"roadmap.r11.date\": \"Q4 2027\",\n    \"roadmap.r11.features\": [\n        \"Post-quantum cryptography CRYSTALS-Kyber\",\n        \"SPHINCS+ digital signatures\",\n        \"Hybrid scheme: classic + PQ\",\n        \"Quantum-safe key exchange\",\n        \"Updated hashing algorithms\",\n        \"Migration of existing sessions\",\n        \"Compatibility with v5.x\",\n        \"Quantum-resistant protocols\"\n    ],\n    \"roadmap.r12.title\": \"Decentralized Network\",\n    \"roadmap.r12.sub\": \"Fully decentralized network\",\n    \"roadmap.r12.date\": \"2028\",\n    \"roadmap.r12.features\": [\n        \"Node mesh network\",\n        \"DHT for peer discovery\",\n        \"Built-in onion routing\",\n        \"Tokenomics and node incentives\",\n        \"Governance via DAO\",\n        \"Interoperability with other networks\",\n        \"Cross-platform compatibility\",\n        \"Self-healing network\"\n    ],\n    \"roadmap.r13.title\": \"AI Privacy Assistant\",\n    \"roadmap.r13.sub\": \"AI for privacy and security\",\n    \"roadmap.r13.date\": \"2028+\",\n    \"roadmap.r13.features\": [\n        \"Local AI threat analysis\",\n        \"Automatic MITM detection\",\n        \"Adaptive cryptography\",\n        \"Personalized security recommendations\",\n        \"Zero-knowledge machine learning\",\n        \"Private AI assistant\",\n        \"Predictive security\",\n        \"Autonomous attack protection\"\n    ],\n    \"handshake.step1\": \"Generating ECDH P-384 key pair\",\n    \"handshake.step2\": \"Deriving verification code\",\n    \"handshake.step3\": \"Pinning Perfect Forward Secrecy\",\n    \"handshake.securingTitle\": \"Securing your channel\",\n    \"handshake.answerTitle\": \"Building your answer\",\n    \"handshake.securingDesc\": \"Forging keys strong enough to resist tampering.\",\n    \"handshake.shareTitle\": \"Share your invitation\",\n    \"handshake.sendAnswerTitle\": \"Send back your answer\",\n    \"handshake.shareDesc\": \"Show the QR or send the code to your peer. It is one-time and expires shortly.\",\n    \"handshake.sendAnswerDesc\": \"Give this answer to the channel creator so they can finish the handshake.\",\n    \"handshake.establish\": \"Establish connection\",\n    \"handshake.thenReceive\": \"Then receive the answer your peer sends back\",\n    \"handshake.pasteAnswerPlaceholder\": \"Paste peer's answer code\u2026\",\n    \"handshake.answerSentNote\": \"Waiting for the creator to connect. The chat opens automatically.\",\n    \"handshake.qrHint\": \"Keep this open until your peer captures the code.\",\n    \"handshake.qrHintFrames\": \"The handshake is split across {frames} frames - keep this open until your peer captures all of them.\",\n    \"verify.placeholder\": \"Type code here\",\n    \"verify.confirm\": \"Confirm code\",\n    \"verify.confirmed\": \"Confirmed\",\n    \"verify.pending\": \"Pending\",\n    \"verify.waiting\": \"Waiting for code\u2026\",\n    \"sasv.title\": \"Verify your peer\",\n    \"sasv.titleDone\": \"Peer verified\",\n    \"sasv.desc\": \"Read the code aloud over a call or in person. Continue only if your peer sees the same digits.\",\n    \"sasv.descDone\": \"You both confirmed the same code. The connection is authenticated.\",\n    \"sasv.enter\": \"Enter the code\",\n    \"sasv.match\": \"Match\",\n    \"sasv.noMatch\": \"Doesn't match\",\n    \"sasv.you\": \"You\",\n    \"sasv.peer\": \"Peer\",\n    \"sasv.waitingPeer\": \"Waiting for peer\u2026\",\n    \"sasv.codesDiffer\": \"Codes don't match\",\n    \"sasv.opening\": \"Opening secure chat\",\n    \"pwa.bannerTitle\": \"Install SecureBit.chat\",\n    \"pwa.bannerDesc\": \"Get the native app experience with enhanced security\",\n    \"pwa.install\": \"Install\",\n    \"pwa.dismiss\": \"Dismiss\",\n    \"pwa.close\": \"Close\",\n    \"pwa.iosTitle\": \"Install on iOS\",\n    \"pwa.iosStep1\": \"Tap the Share button\",\n    \"pwa.iosStep1Hint\": \"Usually at the bottom of Safari\",\n    \"pwa.iosStep2\": \"Find \\\"Add to Home Screen\\\"\",\n    \"pwa.iosStep2Hint\": \"Scroll down in the share menu\",\n    \"pwa.iosStep3\": \"Tap \\\"Add\\\"\",\n    \"pwa.iosStep3Hint\": \"Confirm to install SecureBit.chat\",\n    \"pwa.genericTitle\": \"Install SecureBit\",\n    \"pwa.genericDesc\": \"Your browser handles installs its own way. Pick the steps that match yours.\",\n    \"pwa.androidChromeHint\": \"Tap \u22EE in the top corner, then \u201CInstall app\u201D\",\n    \"pwa.androidOtherHint\": \"Tap the menu, then \u201CAdd to Home screen\u201D\",\n    \"pwa.gotIt\": \"Got it\",\n    \"pwa.installedTitle\": \"App Installed!\",\n    \"pwa.installedIos\": \"iOS App installed! Open from home screen.\",\n    \"pwa.installedGeneric\": \"SecureBit.chat is now on your device\",\n    \"pwa.anytimeTitle\": \"Install Anytime\",\n    \"pwa.anytimeDesc\": \"You can still install SecureBit.chat from your browser's menu for the best experience.\",\n    \"pwa.ok\": \"OK\",\n    \"step.open\": \"Step 1 \u00B7 open a channel\",\n    \"step.exchange\": \"Step 2 \u00B7 exchange\",\n    \"step.verification\": \"Step 3 \u00B7 verification\",\n    \"action.create\": \"Create\",\n    \"action.join\": \"Join\",\n    \"action.back\": \"Back\",\n    \"action.copy\": \"Copy\",\n    \"action.copied\": \"Copied\",\n    \"action.scan\": \"Scan\",\n    \"action.downloadDesktop\": \"Download desktop app\",\n    \"action.advancedSettings\": \"Advanced settings\",\n    \"cred.reveal\": \"Click to reveal - keep this code private\",\n    \"cred.orCopy\": \"Or copy the code\",\n    \"qr.title\": \"Scan QR code\",\n    \"qr.subtitle\": \"Point your camera at their QR\",\n    \"qr.scanning\": \"Scanning\u2026\",\n    \"qr.hint\": \"Hold steady until all parts are captured. Camera access is local - nothing is uploaded.\",\n    \"mesh.you\": \"you\",\n    \"mesh.peer\": \"peer \u00B7 session 1\",\n    \"mesh.joined2\": \"mara joined \u00B7 +2\",\n    \"mesh.joined3\": \"tobi joined \u00B7 +3\",\n    \"ice.title\": \"Network settings\",\n    \"ice.subtitle\": \"Configured locally - never shared with your peer\",\n    \"ice.intro\": \"SecureBit uses public STUN servers by default to negotiate the peer-to-peer link. Point it at your own STUN/TURN if you self-host.\",\n    \"ice.publicTitle\": \"Public servers (default)\",\n    \"ice.publicDesc\": \"Zero-config. Good for most users.\",\n    \"ice.customTitle\": \"My own STUN/TURN servers\",\n    \"ice.customDesc\": \"Up to {max} servers.\",\n    \"ice.turnNote\": \"A TURN relay sees both peers' IP and traffic timing - but never message contents, which stay end-to-end encrypted. Prefer \",\n    \"ice.turnNoteTls\": \" (TLS).\",\n    \"ice.test\": \"Test servers\",\n    \"ice.testing\": \"Testing\u2026\",\n    \"ice.relayTitle\": \"Relay-only mode\",\n    \"ice.relayBadge\": \"MAX PRIVACY\",\n    \"ice.relayDesc\": \"Routes all traffic through TURN so your IP is never exposed to the peer. Requires a TURN server.\",\n    \"ice.relayWarning\": \"Relay-only is enabled but no TURN server is configured. The connection will not be able to start.\",\n    \"ice.persist\": \"Save on this device\",\n    \"ice.persistDesc\": \"Stored encrypted in this browser. Leave off to use only for this session.\",\n    \"ice.forget\": \"Forget saved\",\n    \"ice.cancel\": \"Cancel\",\n    \"ice.apply\": \"Apply\",\n    \"ice.errUnavailable\": \"WebRTC is not available in this browser\",\n    \"ice.errInvalid\": \"Invalid server configuration\",\n    \"update.title\": \"Update available\",\n    \"update.desc\": \"A newer version of SecureBit has been detected.\",\n    \"update.currentVersion\": \"Current version\",\n    \"update.newVersion\": \"New version\",\n    \"update.now\": \"Update now\",\n    \"update.later\": \"Later\",\n    \"update.unknown\": \"N/A\",\n    \"update.stepSaving\": \"Saving data...\",\n    \"update.stepSwCaches\": \"Clearing Service Worker caches...\",\n    \"update.stepSwUnregister\": \"Unregistering Service Workers...\",\n    \"update.stepBrowserCache\": \"Clearing browser cache...\",\n    \"update.stepVersion\": \"Updating version...\",\n    \"update.stepReload\": \"Reloading application...\",\n    \"update.error\": \"Update error. Please refresh the page manually (Ctrl+F5 or Cmd+Shift+R)\",\n    \"update.confirmSkip\": \"New version available. Update is recommended for security and stability. Continue without update?\",\n    \"offline.backOnline\": \"Back online\",\n    \"offline.mode\": \"Offline mode\",\n    \"offline.dismiss\": \"Dismiss\",\n    \"offline.lostTitle\": \"Connection lost\",\n    \"offline.lostDesc\": \"SecureBit is now in offline mode. Some features are limited, but your data stays safe.\",\n    \"offline.point1\": \"Your session and keys are preserved\",\n    \"offline.point2\": \"No data is stored on servers\",\n    \"offline.point3\": \"Messages & files sync when you reconnect\",\n    \"offline.continue\": \"Continue offline\",\n    \"offline.restoredTitle\": \"When you reconnect\",\n    \"offline.restoredDesc\": \"A dropped connection costs you nothing. SecureBit queues everything locally and resumes the encrypted session the instant you're back online.\",\n    \"offline.r1Title\": \"Your messages get delivered\",\n    \"offline.r1Desc\": \"Everything you wrote while offline is sent to your contact automatically.\",\n    \"offline.r2Title\": \"Files finish transferring\",\n    \"offline.r2Desc\": \"Uploads resume from where they stopped - no need to resend.\",\n    \"offline.r3Title\": \"Their messages & files arrive\",\n    \"offline.r3Desc\": \"Whatever your contact sent during the outage is delivered to you in order.\",\n    \"offline.r4Title\": \"Nothing is lost\",\n    \"offline.r4Desc\": \"After reconnect there's no gap - the conversation continues exactly where it paused.\",\n    \"offline.gotIt\": \"Got it\",\n    \"qr.showTitle\": \"Show QR code\",\n    \"qr.showSubtitle\": \"Full-screen \u00B7 let your peer scan\",\n    \"qr.showSubtitleFrames\": \"Full-screen \u00B7 let your peer scan all {frames} frames\",\n    \"notify.enabledBody\": \"Notifications enabled! You will receive alerts for new messages.\",\n    \"notify.workingBody\": \"Notifications are working! You will receive alerts for new messages.\",\n    \"pw.label\": \"Password input\",\n    \"pw.placeholder\": \"Enter password...\",\n    \"pw.decrypt\": \"Decrypt\",\n    \"pw.cancel\": \"Cancel\",\n    \"file.title\": \"File transfers\",\n    \"file.drop\": \"Drag & drop files here\",\n    \"file.dropHint\": \"Encrypted end-to-end before transfer \u00B7 up to 100 MB\",\n    \"file.browse\": \"Browse device\",\n    \"file.incoming\": \"Incoming file request\",\n    \"file.accept\": \"Accept\",\n    \"file.reject\": \"Reject\",\n    \"file.download\": \"Download\",\n    \"file.notReady\": \"Connection not ready\",\n    \"file.tooLarge\": \"File too large\",\n    \"file.typeNotAllowed\": \"File type not allowed\",\n    \"file.maxConcurrent\": \"Maximum concurrent transfers\",\n    \"file.gone\": \"This file is no longer available for download.\",\n    \"call.incoming\": \"Incoming call\",\n    \"call.incomingVideo\": \"Incoming video call\",\n    \"call.encrypted\": \"Encrypted call\",\n    \"call.encryptedShort\": \"Encrypted\",\n    \"call.peer\": \"Secure peer\",\n    \"call.connecting\": \"Connecting\u2026\",\n    \"call.ringing\": \"Ringing\u2026\",\n    \"call.accept\": \"Accept\",\n    \"call.decline\": \"Decline\",\n    \"call.end\": \"End call\",\n    \"call.camera\": \"Camera\",\n    \"call.cameraOff\": \"Camera off\",\n    \"call.peerCameraOff\": \"Peer's camera is off\",\n    \"call.flipCamera\": \"Flip camera\",\n    \"call.addVideo\": \"Add video\",\n    \"call.video\": \"Video\",\n    \"call.muted\": \"Muted\",\n    \"call.expand\": \"Expand\",\n    \"call.minimize\": \"Minimize\",\n    \"call.quality\": \"Connection quality\",\n    \"call.qualityExcellent\": \"Excellent\",\n    \"call.videoPrefix\": \"Video \u00B7 \",\n    \"call.voicePrefix\": \"Voice \u00B7 \",\n    \"group.new\": \"New group\",\n    \"group.create\": \"Create group\",\n    \"group.join\": \"Join group\",\n    \"group.name\": \"Group name\",\n    \"group.nameTooLong\": \"The group name is too long.\",\n    \"group.capacity\": \"Up to {max} people, peer to peer. Everyone will compare one safety code before the group opens.\",\n    \"group.invite\": \"Invite\",\n    \"group.inviteMore\": \"Invite more members\",\n    \"group.invitePeople\": \"Invite {count} people\",\n    \"group.invitation\": \"Group invitation\",\n    \"group.addMembers\": \"Add members\",\n    \"group.roomFor\": \"Room for {remaining} more. Everyone will compare a new group code once they join.\",\n    \"group.membersCount\": \"{count} members\",\n    \"group.member\": \"Member\",\n    \"group.members\": \"Members\",\n    \"group.remove\": \"Remove {name}\",\n    \"group.message\": \"Message {name}\",\n    \"group.leave\": \"Leave\",\n    \"group.leaveThis\": \"Leave this group\",\n    \"group.cancel\": \"Cancel group\",\n    \"group.close\": \"Close\",\n    \"group.cancelBtn\": \"Cancel\",\n    \"group.decline\": \"Decline\",\n    \"group.working\": \"Working\u2026\",\n    \"group.sasTitle\": \"Group safety code\",\n    \"group.sasEveryone\": \"Everyone sees this code\",\n    \"group.sasCompare\": \"Compare the group code with every member to open this group.\",\n    \"group.sasReadAloud\": \"Read these digits aloud to \",\n    \"group.sasWarning\": \"If even one member reads a different code, someone is sitting between you. Cancel the group - do not confirm.\",\n    \"group.confirmFirst\": \"Confirm the group code first\",\n    \"group.codeSuffix\": \" \u00B7 code {code}\",\n    \"group.exchangingNonces\": \"Exchanging nonces\u2026\",\n    \"group.waitingCommit\": \"Waiting for every member to commit\u2026\",\n    \"group.waitingJoin\": \"Waiting for the other members to join\u2026\",\n    \"group.emptyChat\": \"Nothing here yet. Messages are signed by their sender and travel over each member's own encrypted link.\",\n    \"group.noVerified\": \"No verified chats yet. Open a 1:1 chat and compare its safety code first - a group is built out of connections you have already checked.\",\n    \"group.noMoreToAdd\": \"No other verified chats to add. Open a 1:1 chat and compare its safety code first.\",\n    \"group.directLink\": \"Direct peer-to-peer link\",\n    \"group.noDirectLink\": \"No direct link yet - messages are relayed by another member while one is being built\",\n    \"group.relayNote\": \"Some members have no direct link to you yet. Their messages travel through another member, who can see that you are talking but cannot read past the signature or change what you said. The group keeps trying to connect them directly.\",\n    \"group.relayOnlyOff\": \"Relay-only mode is off, so each member connects to you directly and learns your IP address - including members somebody else invited. Turn it on in network settings if that matters here.\",\n    \"group.memberOffline\": \"{name} is offline and will not receive messages. They are still a member - removing them re-keys the group.\",\n    \"group.joinNote\": \"Other members will learn your presence in this group. There is no message history to catch up on - a group starts empty.\",\n    \"group.inviteSentNote\": \"The group keeps working until they accept. There is no history for them to catch up on - they will only see what is sent from now on.\",\n    \"group.errNotCreated\": \"Group not created\",\n    \"group.errNobodyAccepted\": \"Nobody accepted the invitation in time.\",\n    \"group.errNothingSent\": \"Nothing was sent and nothing was verified. Close this and try again once everyone is connected.\",\n    \"group.errNotFormed\": \"This group could not be formed.\",\n    \"group.errFull\": \"This group is full.\",\n    \"group.errInviteFailed\": \"The invitation could not be sent - that chat is not connected.\",\n    \"group.errNoMemberList\": \"The group owner never sent the member list.\",\n    \"group.errUnsignedList\": \"The member list was not signed by the group owner. Do not retry - tell them.\",\n    \"group.errNotOwner\": \"Someone other than the group owner tried to change the members.\",\n    \"hdr.tagline\": \"End-to-end encrypted\",\n    \"hdr.netSettings\": \"Advanced network settings\",\n    \"hdr.netSettingsTitle\": \"Advanced network settings (STUN/TURN)\",\n    \"hdr.disconnect\": \"Disconnect\",\n    \"status.connected\": \"Connected\",\n    \"status.connecting\": \"Connecting...\",\n    \"status.notConnected\": \"Not connected\",\n    \"status.reconnecting\": \"Reconnecting...\",\n    \"status.retrying\": \"Retrying...\",\n    \"status.verifying\": \"Verifying...\",\n    \"status.peerDisconnected\": \"Peer disconnected\",\n    \"sec.replayProtection\": \"Replay Protection\",\n    \"sec.messageIntegrity\": \"Message Integrity (HMAC)\",\n    \"sec.forwardSecrecy\": \"Perfect Forward Secrecy\",\n    \"sec.metadataProtection\": \"Metadata Protection\",\n    \"sec.trafficObfuscation\": \"Traffic Obfuscation\",\n    \"sec.realTests\": \"Real Cryptographic Tests\",\n    \"sec.simulatedData\": \"Simulated Data\",\n    \"sec.testPassed\": \"Test passed\",\n    \"sec.testFailed\": \"Test failed or unavailable\",\n    \"sec.verificationDone\": \"Real cryptographic verification completed\",\n    \"sec.verificationInProgress\": \"Security verification in progress...\",\n    \"sec.verificationWait\": \"Security verification in progress...\\nPlease wait for real-time cryptographic verification to complete.\",\n    \"sec.verificationUnavailable\": \"Security verification not available\",\n    \"chat.placeholder\": \"Type an encrypted message\u2026\",\n    \"chat.send\": \"Send message\",\n    \"chat.sendFiles\": \"Send files\",\n    \"chat.hideFiles\": \"Hide files\",\n    \"chat.recordVoice\": \"Record voice message\",\n    \"chat.sendVoice\": \"Send voice message\",\n    \"chat.discard\": \"Discard\",\n    \"chat.codeBlock\": \"Send as a code block (expands the input)\",\n    \"chat.codeHint\": \"Code snippet \u00B7 formatting preserved \u00B7 \u2318\u21B5 to send\",\n    \"chat.viewOnce\": \"View once\",\n    \"chat.viewOnceTitle\": \"View once - vanishes after the peer reads it\",\n    \"chat.viewOncePrefix\": \"View once \u00B7 \",\n    \"chat.viewOnceTap\": \"View once \u00B7 tap to reveal\",\n    \"chat.viewedOnce\": \"Viewed once\",\n    \"chat.disappearing\": \"Disappearing message - deletes on both sides\",\n    \"chat.disappearAfter\": \"Disappear after\",\n    \"chat.visibleFor\": \"Visible for\",\n    \"chat.timerPrefix\": \"Timer \u00B7 \",\n    \"chat.expired\": \"This message has expired\",\n    \"chat.deleteForEveryone\": \"Delete for everyone\",\n    \"chat.sending\": \"Sending\",\n    \"chat.delivered\": \"Delivered\",\n    \"chat.notSent\": \"Not sent\",\n    \"chat.notSentReason\": \"Not sent - the secure channel is not ready. Reconnect to continue.\",\n    \"chat.encrypted\": \"Encrypted\",\n    \"chat.decrypted\": \"Decrypted\",\n    \"chat.encryptedOnDevice\": \"Encrypted on your device\",\n    \"chat.uploading\": \"Uploading\",\n    \"chat.downloading\": \"Downloading\",\n    \"chat.transferring\": \"Transferring\u2026\",\n    \"chat.copied\": \"Copied!\",\n    \"chat.collapse\": \"Collapse\",\n    \"chat.closeMenu\": \"Close menu\",\n    \"chat.newChat\": \"New chat\",\n    \"chat.newGroup\": \"New group\",\n    \"chat.createGroup\": \"Create a group\",\n    \"chat.groupChats\": \"Group chats\",\n    \"chat.secureChat\": \"Secure chat\",\n    \"chat.nameThis\": \"Name this chat\",\n    \"chat.rename\": \"Rename chat (local only)\",\n    \"chat.renameHint\": \"Double-click to rename\",\n    \"chat.localLabel\": \"Local label \u00B7 stored only on this device\",\n    \"chat.setStatus\": \"Set your status\",\n    \"chat.yourStatusPrefix\": \"Your status - \",\n    \"chat.meshHint\": \"Up to 8 peers \u00B7 P2P mesh\",\n    \"chat.offline\": \"Offline\",\n    \"chat.noNetwork\": \"No network \u00B7 reconnecting\",\n    \"chat.startVoiceCall\": \"Start encrypted voice call\",\n    \"chat.startVideoCall\": \"Start encrypted video call\",\n    \"chat.verifyForCalls\": \"Verify the session to enable calls\",\n    \"chat.e2eeNote\": \"Every message is end-to-end encrypted on your device before it leaves.\",\n    \"chat.peersOnly\": \"Sent end-to-end to connected peers only - never stored on a server.\",\n    \"flow.invitationCreated\": \"Secure invitation created\",\n    \"flow.invitationCreatedBang\": \"Secure invitation created and encrypted!\",\n    \"flow.responseCreated\": \"Secure response created\",\n    \"flow.responseCreatedBang\": \"Secure response created!\",\n    \"flow.sendInvitation\": \"Send the invitation code to your interlocutor via a secure channel (voice call, SMS, etc.).\",\n    \"flow.sendResponse\": \"Send the response code to the initiator via a secure channel or let them scan the QR code below.\",\n    \"flow.sendEncryptedCode\": \"Send the encrypted code\",\n    \"flow.sendTheResponse\": \"Send the response\",\n    \"flow.pasteOrWrite\": \"Paste or write code\u2026\",\n    \"flow.processingInvitation\": \"Processing the secure invitation...\",\n    \"flow.processingResponse\": \"Processing the secure response...\",\n    \"flow.finalizing\": \"Finalizing the secure connection...\",\n    \"flow.channelEstablished\": \"Secure channel established\",\n    \"flow.channelReady\": \"Secure channel is ready\",\n    \"flow.restoring\": \"Restoring connection\u2026\",\n    \"flow.invitationCaptured\": \"Invitation captured.\",\n    \"err.needInvitation\": \"You need to insert the invitation code from your interlocutor.\",\n    \"err.needResponse\": \"You need to insert the response code from your interlocutor.\",\n    \"err.responseFormat\": \"Invalid response format - please check the code\",\n    \"err.responseNoKey\": \"Invalid response code - missing or corrupted cryptographic key. Please check the code and try again.\",\n    \"err.responseNoSignKey\": \"Invalid response code - missing signature verification key. Please check the code and try again.\",\n    \"err.responseOutdated\": \"Response data is outdated - please use a fresh invitation\",\n    \"err.setupError\": \"Connection setup error\",\n    \"err.notReady\": \"Connection not ready\",\n    \"err.securityBreach\": \"Security breach detected - connection rejected\",\n    \"err.securityValidation\": \"Security validation failed - possible attack detected\",\n    \"err.retiredQr\": \"This QR code uses a retired format that could not transfer the invitation. Ask your peer to generate a new one, or use copy/paste.\",\n    \"err.compressedQrNote\": \"Compressed QR may omit SDP for brevity. Use copy/paste if connection fails.\",\n    \"err.inviteNotConnected\": \"The invitation could not be sent. That chat is not connected right now.\",\n    \"err.inviteNotConnectedRetry\": \"The invitation could not be sent. That chat is not connected right now - reopen it and try again.\",\n    \"err.nobodyAccepted\": \"Nobody accepted the invitation. The group is unchanged.\",\n    \"err.noAudio\": \"No audio captured - check microphone permission and try again.\",\n    \"err.voiceNeedsConnection\": \"Voice message needs an active secure connection. Reconnect and try again.\",\n    \"err.voiceRestoring\": \"Restoring the connection - try sending the voice message again in a moment.\",\n    \"err.fileTooLarge\": \"File too large\",\n    \"sas.safetyNumber\": \"Safety number\",\n    \"sas.incorrect\": \"Incorrect code. Check it with your peer and try again.\",\n    \"sas.noMatch\": \"The codes do not match\",\n    \"sas.makeSure\": \"Make sure the codes match exactly.\",\n    \"sas.tooManyAttempts\": \"Too many incorrect attempts. Session reset for safety.\",\n    \"sas.verificationFailed\": \"Verification failed\",\n    \"sas.verified\": \"Verified \u00B7 Perfect Forward Secrecy\",\n    \"sas.runVerification\": \"Run security verification\",\n    \"sec.panelTitle\": \"Network & crypto details\",\n    \"sec.security\": \"Security\",\n    \"sec.transport\": \"Transport\",\n    \"sec.keyExchange\": \"Key exchange\",\n    \"sec.allEnabled\": \"All security features enabled by default\",\n    \"sec.realTimeNote\": \"Real-time verification using actual cryptographic functions - no mock data.\",\n    \"sec.simulatedWarning\": \"Warning: connection may not be fully established - values may be simulated.\",\n    \"dl.title\": \"Download SecureBit\",\n    \"dl.free\": \"Free \u00B7 open source\",\n    \"dl.soon\": \"Mobile (iOS, Android) and browser extensions (Chrome, Firefox, Opera) are coming soon.\",\n    \"chatHdr.chat\": \"Chat\",\n    \"chatHdr.chats\": \"Chats\",\n    \"chatHdr.newChat\": \"+ New\",\n    \"chatHdr.secure\": \"Secure\",\n    \"chatHdr.p2pSub\": \"P2P \u00B7 end-to-end encrypted\",\n    \"chatHdr.save\": \"Save\",\n    \"chatHdr.close\": \"Close\",\n    \"chatHdr.expand\": \"Expand\",\n    \"chatHdr.you\": \"You\",\n    \"chatHdr.qrCode\": \"QR code\",\n    \"chat.disconnected\": \"Disconnected\",\n    \"call.mute\": \"Mute\",\n    \"call.endShort\": \"End\",\n    \"group.add\": \"Add\",\n    \"group.send\": \"Send\",\n    \"sec.pfsShort\": \"Perfect Forward Secrecy\",\n    \"sec.cipher\": \"Cipher\",\n    \"chat.close\": \"Close\",\n    \"file.needConnection\": \"File transfer needs an open connection\",\n    \"presence.available\": \"Available\",\n    \"presence.away\": \"Away\",\n    \"presence.busy\": \"Busy\",\n    \"presence.offline\": \"Offline\",\n    \"presence.invisible\": \"Invisible\",\n    \"presence.availableDesc\": \"Online and reachable\",\n    \"presence.awayDesc\": \"Idle \u00B7 stepped away\",\n    \"presence.busyDesc\": \"Do not disturb\",\n    \"presence.invisibleDesc\": \"Appear offline to peers\",\n    \"presence.online\": \"Online\",\n    \"conn.p2p\": \"P2P \u00B7 connected\",\n    \"conn.verifying\": \"Verifying\u2026\",\n    \"conn.connecting\": \"Connecting\u2026\",\n    \"conn.reconnecting\": \"Reconnecting\u2026\",\n    \"conn.peerDisconnected\": \"Peer disconnected\",\n    \"conn.disconnected\": \"Disconnected\",\n    \"chat.defaultLabel\": \"Chat\",\n    \"groupPhase.forming\": \"Forming\u2026\",\n    \"groupPhase.commitments\": \"Exchanging commitments\u2026\",\n    \"groupPhase.revealing\": \"Revealing\u2026\",\n    \"groupPhase.compare\": \"Compare the group code\",\n    \"groupPhase.ready\": \"Group ready\",\n    \"groupPhase.failed\": \"Group failed\",\n    \"call.qualityGood\": \"Good\",\n    \"call.qualityFair\": \"Fair\",\n    \"call.qualityWeak\": \"Weak\",\n    \"msg.code\": \"Code\",\n    \"msg.timer\": \"Timer\",\n    \"msg.voice\": \"Voice\",\n    \"msg.play\": \"Play\",\n    \"msg.sent\": \"Sent\",\n    \"msg.read\": \"Read\",\n    \"report.title\": \"Real-time security verification\",\n    \"report.active\": \"Active\",\n    \"report.testsPassed\": \"Tests passed\",\n    \"report.verifiedAt\": \"Verified at\",\n    \"report.source\": \"Source\",\n    \"secTest.verifyECDHKeyExchange\": \"ECDH key exchange\",\n    \"secTest.verifyECDSASignatures\": \"ECDSA digital signatures\",\n    \"secTest.verifyEncryption\": \"AES-GCM encryption\",\n    \"secTest.verifyMessageIntegrity\": \"Message integrity\",\n    \"secTest.verifyPerfectForwardSecrecy\": \"Perfect forward secrecy\",\n    \"secTest.verifyPFS\": \"Perfect forward secrecy\",\n    \"secTest.verifyReplayProtection\": \"Replay protection\",\n    \"secTest.verifyDTLSFingerprint\": \"DTLS fingerprint\",\n    \"secTest.verifySASVerification\": \"SAS verification\",\n    \"secTest.verifyMetadataProtection\": \"Metadata protection\",\n    \"secTest.verifyTrafficObfuscation\": \"Traffic obfuscation\",\n    \"secTest.verifyPacketPadding\": \"Packet padding\",\n    \"secTest.verifyNestedEncryption\": \"Nested encryption\",\n    \"secTest.verifyNonExtractableKeys\": \"Non-extractable keys\",\n    \"secTest.verifyRateLimiting\": \"Rate limiting\",\n    \"secTest.verifyMutualAuth\": \"Mutual authentication\",\n    \"secTest.verifyAuthProof\": \"Authentication proof\",\n    \"secTest.verifyEnhancedValidation\": \"Enhanced validation\",\n    \"secTest.verifyAdvancedFeatures\": \"Advanced features\",\n    \"secTest.verifySignature\": \"Signature check\",\n    \"secDetail.Security system initializing...\": \"Security system initializing...\",\n    \"secDetail.Nested encryption active\": \"Nested encryption active\",\n    \"secDetail.Nested encryption failed\": \"Nested encryption failed\",\n    \"secDetail.Packet padding active\": \"Packet padding active\",\n    \"secDetail.Packet padding failed\": \"Packet padding failed\",\n    \"secDetail.Advanced features active\": \"Advanced features active\",\n    \"secDetail.Advanced features failed\": \"Advanced features failed\",\n    \"secDetail.No encryption key available\": \"No encryption key available\",\n    \"secDetail.AES-GCM encryption/decryption working correctly\": \"AES-GCM encryption/decryption working correctly\",\n    \"secDetail.No ECDH key pair available\": \"No ECDH key pair available\",\n    \"secDetail.Key derivation failed\": \"Key derivation failed\",\n    \"secDetail.No ECDSA key pair available\": \"No ECDSA key pair available\",\n    \"secDetail.ECDSA digital signatures working correctly\": \"ECDSA digital signatures working correctly\",\n    \"secDetail.MAC key not available or invalid\": \"MAC key not available or invalid\",\n    \"secDetail.Rate limiter did not block a message over the limit\": \"Rate limiter did not block a message over the limit\",\n    \"secDetail.Rate limiter is not available\": \"Rate limiter is not available\",\n    \"secDetail.Replay protection is working correctly\": \"Replay protection is working correctly\",\n    \"secDetail.Replay protection not enabled\": \"Replay protection not enabled\",\n    \"secDetail.SAS code not available\": \"SAS code not available\",\n    \"secDetail.SAS verification code is valid and available\": \"SAS verification code is valid and available\",\n    \"secDetail.Traffic obfuscation is working correctly\": \"Traffic obfuscation is working correctly\",\n    \"secDetail.Traffic obfuscation not enabled\": \"Traffic obfuscation not enabled\",\n    \"secDetail.No non-extractable ephemeral ECDH key pair for this session\": \"No non-extractable ephemeral ECDH key pair for this session\",\n    \"secDetail.Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation\": \"Session-level PFS only: keys are ephemeral per session, but the Double Ratchet is not active for this connection (peer on an older version), so a compromised session key exposes the whole conversation\",\n    \"msg.pause\": \"Pause\",\n    \"msg.failed\": \"Failed\",\n    \"groupErr.timeout\": \"A member stopped responding before the code was ready.\",\n    \"groupErr.keyMismatch\": \"A member's key did not match the identity claimed for it.\",\n    \"groupErr.revealMismatch\": \"A member's revealed value did not match what they committed to.\",\n    \"groupErr.commitChanged\": \"A member changed their commitment part-way through.\",\n    \"groupErr.missingKey\": \"A member was listed whose key never arrived.\",\n    \"groupErr.outsider\": \"A frame arrived from someone outside the group.\",\n    \"groupErr.limit\": \"A group is limited to eight members.\",\n    \"groupErr.tooLarge\": \"A message was too large to send to the group.\",\n    \"fileType.text\": \"Plain text\",\n    \"fileType.images\": \"Images\",\n    \"fileType.archives\": \"Archives\",\n    \"fileType.voice\": \"Voice messages\",\n    \"fileType.unsupported\": \"Unsupported\",\n    \"qrScan.title\": \"Scan QR Code\",\n    \"qrScan.auto\": \"Auto Mode\",\n    \"qrScan.reset\": \"Reset\",\n    \"qrScan.autoScroll\": \"Auto-scrolling enabled\",\n    \"qrScan.starting\": \"Starting camera...\",\n    \"qrScan.point\": \"Point camera at QR code\",\n    \"qrScan.tapFocus\": \"Tap screen to focus\",\n    \"qrScan.focusing\": \"Focusing...\",\n    \"iceErr.notArray\": \"Server list must be an array\",\n    \"iceErr.invalidJson\": \"Invalid JSON\",\n    \"iceErr.tooMany\": \"Too many servers (max {max})\",\n    \"iceErr.invalidEntry\": \"{label}: invalid entry\",\n    \"iceErr.urlCount\": \"{label}: between 1 and {max} URLs required\",\n    \"iceErr.turnCreds\": \"{label}: TURN servers usually require a username and credential\",\n    \"iceUrl.notString\": \"URL must be a string\",\n    \"iceUrl.empty\": \"URL is empty\",\n    \"iceUrl.tooLong\": \"URL is too long\",\n    \"iceUrl.badChars\": \"URL contains invalid characters\",\n    \"iceUrl.badScheme\": \"URL must start with stun:, stuns:, turn: or turns:\",\n    \"iceUrl.badQuery\": \"URL has an invalid query\",\n    \"iceUrl.noHost\": \"URL is missing a host\",\n    \"iceUrl.badHost\": \"URL has an invalid host or port\",\n    \"iceUrl.badTransport\": \"URL query must be transport=udp or transport=tcp\",\n    \"msg.off\": \"Off\",\n    \"file.consentUnavailable\": \"User consent unavailable\",\n    \"secLevel.MAXIMUM\": \"MAXIMUM\",\n    \"secLevel.INITIALIZING\": \"INITIALIZING\",\n    \"secLevel.ERROR\": \"ERROR\",\n    \"secLevel.UNKNOWN\": \"UNKNOWN\",\n    \"status.error\": \"Error\",\n    \"offline.disconnect\": \"Disconnect\",\n    \"offline.learnMore\": \"Learn more\",\n    \"pwa.installApp\": \"Install App\",\n    \"chat.onWeb\": \"You're on Web\",\n    \"groupCall.startVoice\": \"Start a group voice call\",\n    \"groupCall.startVideo\": \"Start a group video call\",\n    \"groupCall.join\": \"Join\",\n    \"groupCall.dismiss\": \"Not now\",\n    \"groupCall.leave\": \"Leave call\",\n    \"groupCall.you\": \"You\",\n    \"groupCall.connecting\": \"Connecting\u2026\",\n    \"groupCall.waitingLink\": \"Waiting for a direct link\u2026\",\n    \"groupCall.legFailed\": \"Could not connect\",\n    \"groupCall.startedVoice\": \"{name} started a voice call\",\n    \"groupCall.startedVideo\": \"{name} started a video call\",\n    \"groupCall.inCall\": \"{count} in the call\",\n    \"groupCall.err.permission_denied\": \"The call could not start - microphone and camera access is blocked. Allow it for this site, then try again.\",\n    \"groupCall.err.device_not_found\": \"The call could not start - no microphone was found on this device.\",\n    \"groupCall.err.device_busy\": \"The call could not start - your microphone is in use by another app. Close it and try again.\",\n    \"groupCall.err.media_failed\": \"The call could not start - the microphone could not be opened.\",\n    \"groupCall.err.call_in_progress\": \"A call is already running in this group. Join it instead of starting another.\",\n    \"groupCall.err.not_ready\": \"Confirm the group code before calling.\",\n    \"groupCall.speaking\": \"{name} is speaking\",\n    \"groupCall.pin\": \"Show {name} large\",\n    \"groupCall.unpin\": \"Back to everyone\",\n    \"groupCall.showEveryone\": \"Everyone\",\n    \"msg.after5s\": \"5s after reading\",\n    \"msg.after15s\": \"15s after reading\",\n    \"msg.after30s\": \"30s after reading\",\n    \"msg.after1m\": \"1m after reading\",\n    \"msg.sec30\": \"30 seconds\",\n    \"msg.min5\": \"5 minutes\",\n    \"msg.hour1\": \"1 hour\",\n    \"desktop.shareDesc\": \"Send the code to your peer. It is one-time and expires shortly.\",\n    \"desktop.invitationCreated\": \"Secure invitation created - send it to your peer.\",\n    \"desktop.joinDesc\": \"Paste your peer's invitation code to build your secure answer.\",\n    \"desktop.offerTag\": \"offer \u00B7 copy text\",\n    \"desktop.answerTag\": \"answer \u00B7 copy text\",\n    \"desktop.offerPlaceholder\": \"Invitation code will appear here\u2026\",\n    \"desktop.answerPlaceholder\": \"Response code will appear here\u2026\",\n    \"desktop.backToChats\": \"Back to chats\",\n    \"desktop.sendFeedback\": \"Send feedback\",\n    \"desktop.callsNeedVerified\": \"Calls require a verified secure channel.\",\n    \"desktop.noOpenChannel\": \"No open secure channel.\",\n    \"desktop.chatCarriesCall\": \"This chat is carrying a group call. Leave the group call before placing a 1:1 call.\",\n    \"desktop.err.permission_denied\": \"The call could not start - microphone and camera access is blocked. Allow it in system settings, then try again.\",\n    \"desktop.language\": \"Language\",\n    \"desktop.languageHint\": \"Applies at once. Messages already sent keep the words they were written in.\",\n    \"desktop.compareCode\": \"Compare the verification code with your peer and confirm if it matches.\",\n    \"desktop.verifyBeforeFiles\": \"Complete verification before sending files.\",\n    \"desktop.verifyBeforeSending\": \"Complete verification before sending messages.\",\n    \"desktop.disconnectedByBackend\": \"Connection securely disconnected.\",\n    \"desktop.restoreFailed\": \"Could not restore the connection. Closing this chat.\",\n    \"desktop.channelNotReady\": \"The data channel is not available yet. Wait for the connection to establish.\",\n    \"desktop.enterCode\": \"Enter the verification code to confirm.\",\n    \"desktop.noOffer\": \"No invitation found. Create one first.\",\n    \"desktop.notInitiator\": \"You did not create this connection, so there is no answer for you to apply.\",\n    \"desktop.decryptFailed\": \"A message could not be decrypted and was discarded.\",\n    \"desktop.badMessageFormat\": \"A malformed frame arrived and was discarded.\",\n    \"desktop.notSentNotReady\": \"Message not sent: the secure channel is not ready. Wait for verification to finish, or reconnect.\",\n    \"desktop.micDenied\": \"Microphone access was denied.\",\n    \"desktop.noChannelWait\": \"No open secure channel - wait for the connection to establish.\",\n    \"desktop.sasFailed\": \"Verification failed. A machine-in-the-middle may be present, so the connection was aborted.\",\n    \"desktop.sasOk\": \"Verification succeeded. This channel is authenticated end to end.\",\n    \"desktop.iceForgotten\": \"Saved servers forgotten. Using public ICE servers.\",\n    \"desktop.icePublic\": \"Using public ICE servers.\",\n    \"desktop.verificationInProgress\": \"Security verification is still running. Wait for it to finish.\",\n    \"desktop.fileGone\": \"This file is no longer available for download.\",\n    \"desktop.codeMismatch\": \"The verification codes do not match. Disconnecting for safety.\",\n    \"desktop.noLocalCode\": \"Verification failed: there is no locally derived code to compare against. Disconnecting for safety.\",\n    \"desktop.protocolViolation\": \"The peer claimed the code was confirmed before you confirmed it. Disconnecting for safety.\",\n    \"desktop.verificationRejected\": \"Verification rejected. The connection was aborted for safety.\",\n    \"secLevel.HIGH\": \"HIGH\",\n    \"secLevel.MEDIUM\": \"MEDIUM\",\n    \"secLevel.LOW\": \"LOW\",\n    \"desktop.rerun\": \"Re-run\",\n    \"desktop.ice.customDesc\": \"Up to {max} servers, one URL per line or JSON.\",\n    \"desktop.ice.persistDesc\": \"Stored locally on this device. Leave off to use only for this session.\",\n    \"desktop.group.leaveNote\": \"The other members are told you left. Nothing about this group is kept on this device afterwards - there is no server holding a copy to rejoin from, so you would need a fresh invitation.\",\n    \"desktop.sec.ecdsaOk\": \"Peer key package signature verified during the handshake (ECDSA P-384 / SHA-384)\",\n    \"desktop.sec.ecdsaNone\": \"No completed handshake\",\n    \"desktop.sec.ecdhOk\": \"Session keys derived from an ephemeral ECDH P-384 exchange via HKDF-SHA-256\",\n    \"desktop.sec.ecdhNone\": \"No session keys derived\",\n    \"desktop.sec.encryptionOk\": \"AES-GCM encryption and decryption verified inside the core\",\n    \"desktop.sec.encryptionNa\": \"The AES-GCM self-test could not be run\",\n    \"desktop.sec.integrityOk\": \"Message integrity verified (AES-GCM authentication)\",\n    \"desktop.sec.integrityNa\": \"The integrity self-test could not be run\",\n    \"desktop.sec.pfsOk\": \"Double Ratchet active - every message has a key of its own\",\n    \"desktop.sec.pfsNa\": \"Not measured\",\n    \"desktop.sec.replayOk\": \"Ratchet message keys are destroyed once used, so a captured frame cannot be replayed\",\n    \"desktop.sec.replayNa\": \"Not measured\",\n    \"desktop.sec.dtlsPinned\": \"Peer DTLS fingerprint pinned: {fp}\",\n    \"desktop.sec.dtlsNone\": \"No remote DTLS fingerprint available\",\n    \"desktop.sec.sasBoth\": \"Both peers confirmed the out-of-band safety code\",\n    \"desktop.sec.sasIncomplete\": \"The safety code has not been confirmed by both peers\",\n    \"desktop.sec.metadataOk\": \"A dedicated metadata key was derived (HKDF metadata-protection-v4)\",\n    \"desktop.sec.metadataNone\": \"No metadata key\",\n    \"desktop.sec.coverOn\": \"Cover traffic active: random fake frames (32-128 B every 15-30 s) on the ratcheted channel\",\n    \"desktop.sec.coverOff\": \"The cover traffic generator is not running\",\n    \"desktop.sec.coverUnsupported\": \"Cover traffic needs a Double Ratchet session (the peer is on an older release)\",\n    \"desktop.tagline\": \"End-to-end freedom\",\n    \"desktop.callsNotHere\": \"Calls are not available in this build yet. Messages, files and group chats work as usual.\"\n};\n\nconst registry = globalThis.__SECUREBIT_I18N__ || (globalThis.__SECUREBIT_I18N__ = Object.create(null));\nregistry[\"en\"] = DICTIONARY;\n", "/**\n * Language selection and string lookup.\n *\n * Every locale is a real page at a real URL (/, /de/, ...), generated at build time,\n * because the app is client-rendered: a language that exists only as a runtime string\n * swap has no URL for a crawler to index. This module is the runtime half \u2014 it decides\n * which locale the current page is, and hands components their strings.\n *\n * The rule that matters: the URL wins over everything. Someone who opens /de/ gets\n * German even if they once chose English here, or a shared link would open in whatever\n * language the recipient happened to pick last, which makes links unshareable.\n */\n\nimport { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALE_META, CROSS_LOCALE_STRINGS } from './generated.js';\n// Side-effect import: loading the default locale's dictionary registers the strings\n// t() falls back to when a translation is missing a key. It is the one dictionary that\n// has to be present on every page, so it is the one that gets bundled.\nimport './dict/default.js';\n\nexport { DEFAULT_LOCALE, SUPPORTED_LOCALES, LOCALE_META };\n\n/**\n * Loaded dictionaries, by locale code.\n *\n * On a global rather than in module scope, and that is the point. index.js exists twice\n * on a page: once bundled inside dist/app.js, and once as raw source, because the PWA\n * install prompt, the PWA manager and the update checker import it directly. Two module\n * instances mean two module-scoped registries, and the /ru/ dictionary loaded by the\n * page would have been invisible to the half of the app that needed it.\n *\n * A page loads its own dictionary through a <script type=\"module\"> that runs before the\n * bundles; every locale other than the default arrives that way. See scripts/build-i18n.js.\n */\nconst REGISTRY = globalThis.__SECUREBIT_I18N__ || (globalThis.__SECUREBIT_I18N__ = Object.create(null));\n\n/** The dictionary for a locale, or an empty one if that locale was never loaded. */\nfunction dictionary(code) {\n    return REGISTRY[code] || null;\n}\n\nconst STORAGE_KEY = 'securebit-locale';\n\n/** The locale a path belongs to, or null for the default locale at the root. */\nexport function localeFromPathname(pathname = '/') {\n    const segment = String(pathname).split('/')[1];\n    return SUPPORTED_LOCALES.includes(segment) && segment !== DEFAULT_LOCALE ? segment : null;\n}\n\n/**\n * Best match for a browser's language list. \"de-AT\" should get German if German is all\n * we have, so the base tag is tried after the full one, in the order the browser gave.\n */\nexport function localeFromLanguages(languages = []) {\n    for (const tag of languages) {\n        const lower = String(tag).toLowerCase();\n        const exact = SUPPORTED_LOCALES.find((code) => code.toLowerCase() === lower);\n        if (exact) return exact;\n        const base = lower.split('-')[0];\n        const partial = SUPPORTED_LOCALES.find((code) => code.toLowerCase().split('-')[0] === base);\n        if (partial) return partial;\n    }\n    return null;\n}\n\n/**\n * Which locale to render, given everything we know. Pure, so the precedence can be\n * tested without a browser: URL, then a previous explicit choice, then the browser's\n * languages, then the default.\n */\nexport function detectLocale({ pathname = '/', stored = null, languages = [] } = {}) {\n    const fromPath = localeFromPathname(pathname);\n    if (fromPath) return fromPath;\n\n    // The root path is the default locale's own page, not an absence of information \u2014\n    // redirecting away from it would break every link to the site's canonical URL.\n    if (isLocaleRoot(pathname)) return DEFAULT_LOCALE;\n\n    if (stored && SUPPORTED_LOCALES.includes(stored)) return stored;\n    return localeFromLanguages(languages) || DEFAULT_LOCALE;\n}\n\n/** True for \"/\" and \"/index.html\" \u2014 the pages the default locale is served from. */\nfunction isLocaleRoot(pathname) {\n    return pathname === '/' || pathname === '/index.html';\n}\n\n/**\n * The URL of the current page in another locale. Switching keeps you where you are\n * rather than dumping you back on the home page.\n */\nexport function localeHref(code, pathname = '/') {\n    const current = localeFromPathname(pathname);\n    const rest = current ? String(pathname).slice(current.length + 1) : String(pathname);\n    const tail = rest.replace(/^\\/+/, '');\n    return code === DEFAULT_LOCALE ? `/${tail}` : `/${code}/${tail}`;\n}\n\n/** Remember an explicit choice. Storage can throw in private mode; a preference is not worth an exception. */\nexport function rememberLocale(code) {\n    try {\n        localStorage.setItem(STORAGE_KEY, code);\n    } catch (_) {\n        // Private mode or blocked storage: the URL still carries the choice.\n    }\n}\n\nexport function storedLocale() {\n    try {\n        return localStorage.getItem(STORAGE_KEY);\n    } catch (_) {\n        return null;\n    }\n}\n\n/**\n * The locale of the page as actually loaded. Resolved once: it cannot change without a\n * navigation, and t() is called dozens of times per render \u2014 re-reading localStorage\n * on each of those would be a synchronous storage hit per string.\n */\nlet resolvedLocale = null;\nexport function currentLocale() {\n    if (resolvedLocale) return resolvedLocale;\n    // A window may exist without the parts this needs: test harnesses and workers both\n    // provide partial shims. Reading through them blindly threw and took the caller with\n    // it, which for t() means a missing string becomes a crash.\n    const w = typeof window === 'undefined' ? null : window;\n    if (!w || !w.location) return DEFAULT_LOCALE;\n    resolvedLocale = detectLocale({\n        pathname: w.location.pathname || '/',\n        stored: storedLocale(),\n        languages: w.navigator?.languages || [],\n    });\n    return resolvedLocale;\n}\n\n/**\n * Writing direction of a locale. Arabic, Hebrew, Persian and Urdu read right to left,\n * and the whole layout \u2014 not just the text \u2014 has to follow: an avatar that sits before\n * a name in English sits after it in Arabic.\n *\n * The generated page already carries dir on <html>, so nothing here needs to apply it\n * at load. This exists for the handful of decisions CSS cannot express on its own \u2014\n * which way an arrow points, which edge a drawer slides in from.\n */\nexport function localeDir(code = currentLocale()) {\n    return LOCALE_META[code]?.dir === 'rtl' ? 'rtl' : 'ltr';\n}\n\nexport function isRTL(code = currentLocale()) {\n    return localeDir(code) === 'rtl';\n}\n\n/**\n * +1 or -1, for arithmetic on a horizontal offset: a swipe threshold, a translate, the\n * side a sheet enters from. `x * direction()` is the whole of what a mirrored gesture\n * needs, and it reads better than an `isRTL ? -x : x` at every call site.\n */\nexport function direction(code = currentLocale()) {\n    return isRTL(code) ? -1 : 1;\n}\n\n/**\n * Force a fragment to be laid out left to right inside right-to-left text.\n *\n * Bidi reordering is done by the browser on the rendered text, and it mangles exactly\n * the strings this app is made of: a key fingerprint, a base64 session descriptor, a\n * URL, a version number. In an RTL paragraph \"a1b2:c3d4\" can come out as \"c3d4:a1b2\" \u2014\n * the characters are all there, so nothing looks broken, and the reader compares the\n * wrong thing against their peer's screen. Any element showing machine text gets these\n * props.\n */\nexport const LTR_TEXT = { dir: 'ltr', style: { unicodeBidi: 'isolate', textAlign: 'start' } };\n\n/**\n * The suggestion is an offer, and an offer that keeps coming back after it was turned\n * down is an ad. One dismissal is remembered for good; storage can be unavailable, in\n * which case the bar simply comes back \u2014 a worse experience, never a broken one.\n */\nconst SUGGEST_KEY = 'securebit-locale-suggest-dismissed';\n\nexport function localeSuggestionDismissed() {\n    try {\n        return localStorage.getItem(SUGGEST_KEY) === '1';\n    } catch (_) {\n        return false;\n    }\n}\n\nexport function dismissLocaleSuggestion() {\n    try {\n        localStorage.setItem(SUGGEST_KEY, '1');\n    } catch (_) {\n        // Nothing to do: the bar reappears next visit, which is not worth an exception.\n    }\n}\n\n/**\n * A locale the visitor would probably rather read, when it is not the one they are on.\n * Used to offer a link, never to redirect: an automatic redirect sends Googlebot \u2014\n * which crawls from one place \u2014 to a single locale and leaves the rest unindexed.\n */\nexport function suggestedLocale({ pathname = '/', languages = [], stored = null } = {}) {\n    const shown = localeFromPathname(pathname) || DEFAULT_LOCALE;\n    // An explicit past choice outranks the browser's list: someone who picked a\n    // language once meant it, and it is exactly when their page does not match that\n    // choice that the offer is worth making.\n    const preferred = (SUPPORTED_LOCALES.includes(stored) && stored) || localeFromLanguages(languages);\n    return preferred && preferred !== shown ? preferred : null;\n}\n\n/**\n * A list-valued string, for the handful of places where the copy is a set of short\n * labels rather than a sentence \u2014 a language may need a different number of them, so\n * the count belongs to the translation, not to the component.\n */\nexport function tList(key, locale = currentLocale()) {\n    const value = dictionary(locale)?.[key] ?? dictionary(DEFAULT_LOCALE)?.[key];\n    return Array.isArray(value) ? value : [];\n}\n\n/**\n * The rows a language switcher renders. Built here rather than in the component so the\n * URLs can be tested without a DOM, and so the switcher stays what it must be: a list\n * of real links. A control that swaps strings in place would leave every language on\n * one URL, which is the thing this whole arrangement exists to avoid.\n */\nexport function languageLinks({ pathname = '/', active = DEFAULT_LOCALE } = {}) {\n    return SUPPORTED_LOCALES.map((code) => ({\n        code,\n        href: localeHref(code, pathname),\n        hrefLang: LOCALE_META[code]?.htmlLang || code,\n        // Listed in its own language: someone looking for German is looking for\n        // \"Deutsch\", not for the English word for it.\n        label: LOCALE_META[code]?.nativeName || code,\n        // Short code for the collapsed switcher.\n        abbr: LOCALE_META[code]?.abbr || code.toUpperCase(),\n        // The row renders a name in its own script, so it needs its own direction:\n        // \"\u0627\u0644\u0639\u0631\u0628\u064A\u0629\" laid out left-to-right is the word spelled backwards.\n        dir: LOCALE_META[code]?.dir || 'ltr',\n        isCurrent: code === active,\n    }));\n}\n\n/**\n * Look up a string. Falls back to the default locale and then to the key itself, so a\n * missing translation shows English rather than blank UI.\n */\nexport function t(key, vars, locale = currentLocale()) {\n    const template =\n        dictionary(locale)?.[key] ??\n        // Asked for a locale whose dictionary is not on this page. Only the language\n        // suggestion does that, and only for the handful of keys it needs, so those\n        // ship for every locale; anything else falls through to the default below.\n        CROSS_LOCALE_STRINGS[locale]?.[key] ??\n        dictionary(DEFAULT_LOCALE)?.[key] ??\n        key;\n    if (!vars) return template;\n    return String(template).replace(/\\{(\\w+)\\}/g, (match, name) =>\n        Object.prototype.hasOwnProperty.call(vars, name) ? String(vars[name]) : match\n    );\n}\n", "import { t } from '../i18n/index.js';\n// Sessions registry for SecureBit.chat multi-session support.\n//\n// Pure, framework-free reducer + helpers. The root React component drives it via\n// React.useReducer; non-serializable per-session objects (the EnhancedSecureWebRTCManager\n// instance, its NotificationIntegration, offline queues, QR-animation timers) live OUTSIDE\n// this state in ref-held Maps keyed by sessionId \u2014 never in here, never shared between\n// sessions. Every reducer case returns fresh objects for the touched session only, so a\n// change to one session can never mutate another (full isolation).\n//\n// sessionId is LOCAL ONLY (crypto.randomUUID). It is never sent to the peer as identity.\n\nexport const SESSION_ACTIONS = Object.freeze({\n    CREATE_SESSION: 'CREATE_SESSION',\n    REMOVE_SESSION: 'REMOVE_SESSION',\n    SET_ACTIVE: 'SET_ACTIVE',\n    SET_STATUS: 'SET_STATUS',\n    SET_FINGERPRINT: 'SET_FINGERPRINT',\n    SET_VERIFICATION: 'SET_VERIFICATION',\n    SET_SAS: 'SET_SAS',\n    ADD_MESSAGE: 'ADD_MESSAGE',\n    SET_MESSAGES: 'SET_MESSAGES',\n    UPDATE_MESSAGE_STATUS: 'UPDATE_MESSAGE_STATUS',\n    PATCH_MESSAGE: 'PATCH_MESSAGE',\n    DELETE_MESSAGE: 'DELETE_MESSAGE',\n    EXPIRE_MESSAGE: 'EXPIRE_MESSAGE',\n    INCREMENT_UNREAD: 'INCREMENT_UNREAD',\n    CLEAR_UNREAD: 'CLEAR_UNREAD',\n    SET_PENDING_FILES: 'SET_PENDING_FILES',\n    PATCH_SETUP: 'PATCH_SETUP',\n    RENAME: 'RENAME',\n    SET_PEER_PRESENCE: 'SET_PEER_PRESENCE'\n});\n\n// Availability presence the PEER advertises to us (sent E2E over the data channel, never\n// stored on a server). 'invisible' is sent on the wire as 'offline' so peers can't tell.\nexport const PRESENCE_DOT = { available: 'var(--sb-green-solid)', away: 'var(--sb-yellow-2-solid)', busy: 'var(--sb-red-solid)', offline: 'var(--sb-text-9)' };\nexport const PRESENCE_WORD = { available: t('presence.available'), away: t('presence.away'), busy: t('presence.busy'), offline: t('presence.offline') };\n// The statuses the local user can pick for themselves (design: Set your status).\nexport const MY_STATUS_OPTIONS = [\n    { key: 'available', word: t('presence.available'), desc: t('presence.availableDesc'), dot: 'var(--sb-green-solid)' },\n    { key: 'away', word: t('presence.away'), desc: t('presence.awayDesc'), dot: 'var(--sb-yellow-2-solid)' },\n    { key: 'busy', word: t('presence.busy'), desc: t('presence.busyDesc'), dot: 'var(--sb-red-solid)' },\n    { key: 'invisible', word: t('presence.invisible'), desc: t('presence.invisibleDesc'), dot: 'var(--sb-text-9)' }\n];\n\n// Short, human-friendly default label derived from the local sessionId. Never the peer's\n// identity \u2014 just something stable to show before the SAS-derived label is available.\nexport function shortLabelFromId(id) {\n    const hex = String(id || '').replace(/[^a-z0-9]/gi, '');\n    return t('chat.defaultLabel') + ' ' + (hex.slice(0, 4) || '0000').toUpperCase();\n}\n\n// Two-letter monogram for the avatar tile (mirrors the design's `mono()` helper).\nexport function monoInitials(label) {\n    const words = String(label || '').trim().split(/\\s+/).filter(Boolean);\n    const a = words[0]?.[0] || '';\n    const b = words[1]?.[0] || words[0]?.[1] || '';\n    return (a + b).toUpperCase() || '\u00B7\u00B7';\n}\n\n// Status \u2192 dot colour (mirrors the design's DOT map).\nexport function statusDot(status) {\n    switch (status) {\n        case 'connected':\n        case 'verified':\n            return 'var(--sb-green-solid)';\n        case 'connecting':\n        case 'verifying':\n        case 'new':\n            return 'var(--sb-yellow-2-solid)';\n        default:\n            return 'var(--sb-red-solid)'; // disconnected / peer_disconnected / lost\n    }\n}\n\n// Status \u2192 header sub-text (mirrors the design's SUB map).\nexport function statusSub(status) {\n    switch (status) {\n        case 'connected':\n        case 'verified':\n            return t('conn.p2p');\n        case 'verifying':\n            return t('conn.verifying');\n        case 'connecting':\n        case 'new':\n            return t('conn.connecting');\n        case 'reconnecting':\n            return t('conn.reconnecting');\n        case 'peer_disconnected':\n            return t('conn.peerDisconnected');\n        default:\n            return t('conn.disconnected');\n    }\n}\n\nfunction emptySetup() {\n    return {\n        offerData: '',\n        answerData: '',\n        offerInput: '',\n        answerInput: '',\n        showOfferStep: false,\n        showAnswerStep: false,\n        showVerification: false,\n        showQRCode: false,\n        qrCodeUrl: '',\n        isGeneratingKeys: false,\n        qrFramesTotal: 0,\n        qrFrameIndex: 0,\n        qrManualMode: false\n    };\n}\n\nexport function createSessionEntry(opts = {}) {\n    const id = opts.id || (typeof crypto !== 'undefined' && crypto.randomUUID ? crypto.randomUUID() : String(Date.now()) + Math.random());\n    return {\n        id,\n        peerLabel: opts.peerLabel || shortLabelFromId(id),\n        labelIsCustom: false, // becomes true once the user renames; blocks SAS auto-relabel\n        createdAt: opts.createdAt || Date.now(),\n        role: opts.role || 'offer', // 'offer' | 'answer'\n        status: opts.status || 'new',\n        keyFingerprint: '',\n        verificationCode: '',\n        sas: { localConfirmed: false, remoteConfirmed: false, bothConfirmed: false, isVerified: false },\n        messages: [],\n        unreadCount: 0,\n        pendingIncomingFiles: [],\n        peerPresence: null, // peer's advertised availability ('available'|'away'|'busy'|'offline'); null = unknown\n        setup: emptySetup()\n    };\n}\n\nexport function createInitialState() {\n    return { sessions: {}, order: [], activeSessionId: null };\n}\n\n// Apply a partial patch to one session, returning a new state with only that session's\n// object replaced. Other sessions keep their identity (referential isolation).\nfunction patchSession(state, id, patch) {\n    const session = state.sessions[id];\n    if (!session) return state;\n    return {\n        ...state,\n        sessions: { ...state.sessions, [id]: { ...session, ...patch } }\n    };\n}\n\nexport function sessionsReducer(state, action) {\n    const A = SESSION_ACTIONS;\n    switch (action.type) {\n        case A.CREATE_SESSION: {\n            const entry = action.entry || createSessionEntry(action);\n            if (state.sessions[entry.id]) return state;\n            return {\n                sessions: { ...state.sessions, [entry.id]: entry },\n                order: [...state.order, entry.id],\n                activeSessionId: action.activate === false ? state.activeSessionId : entry.id\n            };\n        }\n\n        case A.REMOVE_SESSION: {\n            const { id } = action;\n            if (!state.sessions[id]) return state;\n            const sessions = { ...state.sessions };\n            delete sessions[id];\n            const order = state.order.filter((x) => x !== id);\n            let activeSessionId = state.activeSessionId;\n            if (activeSessionId === id) {\n                // Re-point to the previous sibling in display order, else the first remaining.\n                const removedIdx = state.order.indexOf(id);\n                activeSessionId = order[Math.max(0, removedIdx - 1)] || order[0] || null;\n            }\n            return { sessions, order, activeSessionId };\n        }\n\n        case A.SET_ACTIVE: {\n            if (!state.sessions[action.id]) return state;\n            if (state.activeSessionId === action.id) return state;\n            return { ...state, activeSessionId: action.id };\n        }\n\n        case A.SET_STATUS: {\n            const session = state.sessions[action.id];\n            if (!session || session.status === action.status) return state; // no-op if unchanged\n            // Peer presence is only meaningful while connected. Clear it whenever the\n            // session leaves the connected state, so a later reconnect doesn't briefly\n            // re-show the peer's stale status before they re-broadcast their presence.\n            // 'reconnecting' keeps the peer's advertised presence: the session is\n            // still alive, only its network path is being repaired, and blanking\n            // the presence would make a 2-second glitch look like a disconnect.\n            const connected = action.status === 'connected'\n                || action.status === 'verified'\n                || action.status === 'reconnecting';\n            const patch = (!connected && session.peerPresence !== null)\n                ? { status: action.status, peerPresence: null }\n                : { status: action.status };\n            return patchSession(state, action.id, patch);\n        }\n\n        case A.SET_FINGERPRINT:\n            return patchSession(state, action.id, { keyFingerprint: action.fingerprint });\n\n        case A.SET_VERIFICATION:\n            return patchSession(state, action.id, { verificationCode: action.code });\n\n        case A.SET_SAS: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            return patchSession(state, action.id, { sas: { ...session.sas, ...action.sas } });\n        }\n\n        case A.ADD_MESSAGE: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            return patchSession(state, action.id, { messages: [...session.messages, action.message] });\n        }\n\n        case A.SET_MESSAGES: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const next = typeof action.updater === 'function'\n                ? action.updater(session.messages)\n                : action.messages;\n            return patchSession(state, action.id, { messages: Array.isArray(next) ? next : [] });\n        }\n\n        case A.UPDATE_MESSAGE_STATUS: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            let changed = false;\n            const messages = session.messages.map((m) => {\n                if (String(m.mid) === String(action.mid) && m.status !== action.status) {\n                    changed = true;\n                    return { ...m, status: action.status };\n                }\n                return m;\n            });\n            return changed ? patchSession(state, action.id, { messages }) : state;\n        }\n\n        case A.PATCH_MESSAGE: {\n            // Shallow-merge a partial into a single message, matched by local `id`\n            // or `mid` (whichever the caller provides). Used to drive voice-message\n            // transfer progress and to attach the decrypted audio URL on completion.\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const byId = action.messageId != null ? String(action.messageId) : null;\n            const byMid = action.mid != null ? String(action.mid) : null;\n            const byFileId = action.fileId != null ? String(action.fileId) : null;\n            let changed = false;\n            const messages = session.messages.map((m) => {\n                const hit = (byId != null && String(m.id) === byId)\n                    || (byMid != null && String(m.mid) === byMid)\n                    || (byFileId != null && m.fileId != null && String(m.fileId) === byFileId);\n                if (!hit) return m;\n                changed = true;\n                const patch = typeof action.patch === 'function' ? action.patch(m) : action.patch;\n                return { ...m, ...patch };\n            });\n            return changed ? patchSession(state, action.id, { messages }) : state;\n        }\n\n        case A.DELETE_MESSAGE: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const messages = session.messages.filter((m) => String(m.mid) !== String(action.mid));\n            if (messages.length === session.messages.length) return state;\n            return patchSession(state, action.id, { messages });\n        }\n\n        case A.EXPIRE_MESSAGE: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            let changed = false;\n            const messages = session.messages.map((m) => {\n                if (String(m.id) === String(action.messageId) && !m.expired) {\n                    changed = true;\n                    return { ...m, expired: true, message: '', expiresAt: undefined };\n                }\n                return m;\n            });\n            return changed ? patchSession(state, action.id, { messages }) : state;\n        }\n\n        case A.INCREMENT_UNREAD: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            return patchSession(state, action.id, { unreadCount: session.unreadCount + 1 });\n        }\n\n        case A.CLEAR_UNREAD: {\n            const session = state.sessions[action.id];\n            if (!session || session.unreadCount === 0) return state;\n            return patchSession(state, action.id, { unreadCount: 0 });\n        }\n\n        case A.SET_PENDING_FILES: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const next = typeof action.updater === 'function'\n                ? action.updater(session.pendingIncomingFiles)\n                : action.files;\n            return patchSession(state, action.id, { pendingIncomingFiles: Array.isArray(next) ? next : [] });\n        }\n\n        case A.PATCH_SETUP: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            return patchSession(state, action.id, { setup: { ...session.setup, ...action.patch } });\n        }\n\n        case A.RENAME: {\n            const session = state.sessions[action.id];\n            if (!session) return state;\n            const label = String(action.label || '').trim() || session.peerLabel;\n            return patchSession(state, action.id, { peerLabel: label, labelIsCustom: true });\n        }\n\n        case A.SET_PEER_PRESENCE: {\n            const session = state.sessions[action.id];\n            if (!session || session.peerPresence === action.presence) return state;\n            return patchSession(state, action.id, { peerPresence: action.presence });\n        }\n\n        default:\n            return state;\n    }\n}\n\n// Decorate a session into the shape the sidebar/header rendering consumes (avatar monogram,\n// status dot, sub-text, last-message preview, unread badge). Pure derivation \u2014 no state.\nexport function decorateSession(session, activeSessionId) {\n    // System notices are not conversation. Letting them win the preview put\n    // things like \"Enhanced secure connection closed\" in the rail where the last\n    // thing the peer actually said belongs \u2014 and the status line beside it was\n    // already saying the same thing, better.\n    const lastMessage = [...session.messages].reverse().find(\n        (m) => !m.expired && m.type !== 'system'\n            && ((typeof m.message === 'string' && m.message.trim()) || m.voice),\n    );\n    const s = session.status;\n    const isUp = s === 'connected' || s === 'verified';\n    // 'reconnecting' is a live session whose path is being repaired \u2014 amber, not\n    // red: the keys, the SAS verification and the history are all still valid.\n    const isPending = s === 'connecting' || s === 'verifying' || s === 'new' || s === 'reconnecting';\n    // Avatar dot + sub-text: while a session is up, reflect the PEER's advertised presence;\n    // otherwise reflect the connection state (amber = connecting, red = dropped).\n    let dot, headerSub;\n    if (isPending) {\n        dot = 'var(--sb-yellow-2-solid)';\n        headerSub = statusSub(s);\n    } else if (isUp) {\n        dot = session.peerPresence ? (PRESENCE_DOT[session.peerPresence] || 'var(--sb-text-9)') : 'var(--sb-green-solid)';\n        headerSub = session.peerPresence ? (PRESENCE_WORD[session.peerPresence] || t('presence.online')) : t('conn.p2p');\n    } else {\n        dot = 'var(--sb-red-solid)';\n        headerSub = statusSub(s);\n    }\n    const preview = lastMessage ? (lastMessage.voice ? '\uD83C\uDF99 Voice message' : lastMessage.message) : headerSub;\n    return {\n        id: session.id,\n        name: session.peerLabel,\n        mono: monoInitials(session.peerLabel),\n        dot,\n        headerSub,\n        status: session.status,\n        peerPresence: session.peerPresence,\n        preview,\n        unread: session.unreadCount > 0 ? (session.unreadCount > 99 ? '99+' : String(session.unreadCount)) : null,\n        verified: !!session.sas.isVerified,\n        active: session.id === activeSessionId,\n        inactive: session.id !== activeSessionId\n    };\n}\n\nexport function decorateSessions(state) {\n    return state.order\n        .map((id) => state.sessions[id])\n        .filter(Boolean)\n        .map((s) => decorateSession(s, state.activeSessionId));\n}\n", "// Group cryptography for SecureBit.chat.\n//\n// WHY A SEPARATE IDENTITY KEY EXISTS\n// ----------------------------------\n// The pairwise handshake generates a fresh ECDSA key pair per CONNECTION\n// (see createSecureOffer / createSecureAnswer). That is exactly right for 1:1 \u2014\n// there are no accounts, so there is nothing a long-term key should outlive \u2014\n// but it means Alice presents a different identity key to Bob than she presents\n// to Carol. A group cannot be built on that: a membership operation signed\n// toward Bob would be unverifiable by Carol, and there would be nothing stable\n// to put in a group safety code.\n//\n// So a group gets its own ECDSA P-384 key pair, generated per group per device\n// and destroyed with the group. It never touches the pairwise handshake, and it\n// is published to the other members over the ALREADY VERIFIED pairwise channels.\n// That keeps the 1:1 protocol untouched while giving the group one signing key\n// per member for the epoch's lifetime.\n//\n// WHY THE SAFETY CODE IS COMMIT-THEN-REVEAL\n// -----------------------------------------\n// The obvious construction \u2014 hash the sorted set of member key fingerprints and\n// show the digits, the way a Signal safety number works \u2014 is unsafe at the\n// length a group can actually read aloud.\n//\n// The attacker here is a group member who introduces two others and sits in the\n// middle of the pair they could not reach directly. They present key K_b to Bob\n// and K_c to Carol. To go unnoticed they need Bob's digits and Carol's digits to\n// match, and both sets are under their control: they can generate candidate key\n// pairs until the two truncated hashes collide. That is a BIRTHDAY search, not a\n// preimage search \u2014 roughly 10^(d/2) work for d digits. A 7-digit code falls in\n// a few thousand tries. Signal answers this by making the safety number 60\n// digits; nobody reads 60 digits aloud to seven other people.\n//\n// Commit-then-reveal removes the search instead of outrunning it. Every member\n// commits to a secret nonce (publishing only its hash), and only once ALL\n// commitments are in does anyone reveal. The attacker must fix both of their\n// commitments before they can see a single honest nonce, so they cannot steer\n// either digit string \u2014 they are reduced to guessing, once, at 10^-d. Seven\n// digits is then genuinely safe, and it matches the pairwise SAS the users have\n// already been trained to compare.\n//\n// The ordering is the whole security property: revealing before every commitment\n// has arrived hands the attacker exactly the grinding freedom this construction\n// exists to deny. GroupSasCeremony below enforces that transition; nothing else\n// may.\n//\n// WHY GROUP MESSAGES ARE SIGNED\n// -----------------------------\n// Messages fan out over N-1 independent pairwise ratchets, so each recipient\n// authenticates only that the sender's SESSION sent it. A malicious member could\n// send different text to different people under one sequence number and no\n// recipient could tell. A signature over (group, epoch, seq, body hash) with the\n// sender's group identity key makes such a split provable: two valid signatures\n// from one member on one seq are non-repudiable evidence. It does not prevent\n// the split \u2014 nothing without a shared transcript can \u2014 it makes it detectable,\n// which is what a group without a server can honestly offer.\n//\n// This module is pure: SubtleCrypto is injected, no DOM, no network, no state\n// beyond the ceremony object. It parses attacker-controlled input, so every\n// length and range is checked before the value is used.\n\nexport const GROUP_LIMITS = Object.freeze({\n    // Eight is a mesh limit, not a crypto limit: it is where N(N-1)/2 pairwise\n    // connections and N-1 fan-out copies stop being comfortable in a browser.\n    MAX_MEMBERS: 8,\n    MIN_MEMBERS: 2,\n    GROUP_ID_BYTES: 16,\n    NONCE_BYTES: 32,\n    COMMIT_BYTES: 32,\n    FINGERPRINT_BYTES: 32,\n    // Matches the pairwise SAS. Safe at this length only because of the\n    // commit-reveal ordering above \u2014 see the header.\n    SAS_DIGITS: 7,\n    // Bytes, not characters \u2014 and the gap between the two is a real trap. The\n    // create dialog used to cap input at 64 CHARACTERS, so a 36-character\n    // Cyrillic name (\"\u041D\u0430\u0448\u0430 \u0441\u0435\u043A\u0440\u0435\u0442\u043D\u0430\u044F \u0433\u0440\u0443\u043F\u043F\u0430 \u0434\u043B\u044F \u043E\u0431\u0441\u0443\u0436\u0434\u0435\u043D\u0438\u0439\") is 68 bytes and was\n    // accepted by the UI and then rejected here, inside the admin's roster\n    // signing, killing group formation with no visible cause. The dialog now\n    // clamps by bytes, and the budget is generous enough that a normal name in\n    // any script fits.\n    MAX_NAME_BYTES: 128,\n    // Epoch is a uint32 on the wire; a group that changes membership four\n    // billion times has other problems.\n    MAX_EPOCH: 0xffffffff,\n    MAX_SPKI_BYTES: 256,\n    MIN_SPKI_BYTES: 40,\n    MAX_SIG_BYTES: 160,\n    MIN_SIG_BYTES: 48,\n\n    /**\n     * Group frames travel as chat content on a pairwise session, and that path\n     * ends in EnhancedSecureCryptoUtils.sanitizeMessage, which runs DOMPurify and\n     * then truncates to 2000 characters. Truncation would corrupt a frame\n     * silently, so every frame has to fit underneath it after base64 \u2014 see\n     * FRAME_BUDGET_CHARS and the envelope in GroupSession.\n     *\n     * A frame's fixed overhead (group id, epoch, sequence, sender fingerprint,\n     * timestamp, signature, envelope) is roughly 300 bytes, and base64 costs\n     * another third. 1024 bytes of body leaves comfortable headroom, and it is\n     * bytes rather than characters so a message in a non-Latin script is bounded\n     * by the same real budget.\n     */\n    MAX_BODY_BYTES: 1024,\n    FRAME_BUDGET_CHARS: 1800,\n\n    /**\n     * A mesh descriptor as it travels inside a group frame.\n     *\n     * SBQ2 caps a descriptor payload at 512 bytes (LIMITS.MAX_PAYLOAD_BYTES),\n     * which is \"SB2:\" plus 683 base64url characters at the absolute worst. 768\n     * bounds the allocation with room to spare and still leaves the whole frame\n     * \u2014 descriptor, two fingerprints, a nonce and a signature, wrapped in a\n     * relay envelope and base64'd \u2014 under FRAME_BUDGET_CHARS. A descriptor that\n     * somehow does not fit is refused rather than truncated; the pair simply\n     * stays on the relay path, which is the same thing that happens when the\n     * mesh dial fails for any other reason.\n     */\n    MAX_DESCRIPTOR_CHARS: 768,\n    /** Binds an answer to the one dial attempt that asked for it. */\n    MESH_NONCE_BYTES: 16,\n\n    /**\n     * A group call's identifier, in bytes.\n     *\n     * Random rather than derived, and long enough that two members who press\n     * \"call\" at the same instant cannot collide. Everything about a call is\n     * scoped to it: a `join` for one call says nothing about another, and a\n     * `leave` replayed from a finished call cannot end a later one.\n     */\n    CALL_ID_BYTES: 16,\n});\n\n/**\n * What one member is telling the group about a call.\n *\n * There is deliberately no \"end the call for everyone\": a call ends when the\n * last person in it leaves, which is a fact every member can observe from the\n * frames they already have. An explicit end would be a button one member could\n * press to hang up on the others, and nothing in a group without a server makes\n * that person more entitled to it than anybody else.\n */\nexport const CALL_ACTIONS = Object.freeze({\n    START: 'start',   // I have opened a call and I am in it\n    JOIN: 'join',     // I am joining the call already open\n    LEAVE: 'leave',   // I have left; the call ends when nobody is left\n});\n\n/** Which half of a mesh dial a signature covers. */\nexport const MESH_KINDS = Object.freeze({ OFFER: 'moffer', ANSWER: 'manswer' });\n\nexport const MEMBER_OPS = Object.freeze({\n    CREATE: 'create',\n    ADD: 'add',\n    REMOVE: 'remove',\n    RENAME: 'rename',\n});\n\nconst ENC = new TextEncoder();\n\nclass GroupCryptoError extends Error {\n    constructor(message, code = 'group_crypto') {\n        super(message);\n        this.name = 'GroupCryptoError';\n        this.code = code;\n    }\n}\nconst fail = (msg, code) => { throw new GroupCryptoError(msg, code); };\n\n// ---------------------------------------------------------------------------\n// codecs\n// ---------------------------------------------------------------------------\n\nexport function toHex(bytes) {\n    const view = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);\n    let out = '';\n    for (let i = 0; i < view.length; i++) out += view[i].toString(16).padStart(2, '0');\n    return out;\n}\n\nexport function fromHex(hex) {\n    if (typeof hex !== 'string' || hex.length % 2 !== 0 || !/^[0-9a-f]*$/i.test(hex)) {\n        fail('not a hex string', 'bad_hex');\n    }\n    const out = new Uint8Array(hex.length / 2);\n    for (let i = 0; i < out.length; i++) out[i] = parseInt(hex.substr(i * 2, 2), 16);\n    return out;\n}\n\nexport function toB64(bytes) {\n    const view = bytes instanceof Uint8Array ? bytes : new Uint8Array(bytes);\n    let binary = '';\n    for (let i = 0; i < view.length; i++) binary += String.fromCharCode(view[i]);\n    return btoa(binary);\n}\n\nexport function fromB64(b64, { max = GROUP_LIMITS.MAX_SPKI_BYTES } = {}) {\n    if (typeof b64 !== 'string') fail('not a base64 string', 'bad_b64');\n    // Bound BEFORE decoding: base64 expands 3:4, so this caps the allocation.\n    if (b64.length > Math.ceil((max * 4) / 3) + 4) fail('base64 payload exceeds its limit', 'bad_b64');\n    let binary;\n    try {\n        binary = atob(b64);\n    } catch (_) {\n        fail('malformed base64', 'bad_b64');\n    }\n    const out = new Uint8Array(binary.length);\n    for (let i = 0; i < binary.length; i++) out[i] = binary.charCodeAt(i);\n    return out;\n}\n\nexport function randomBytes(n) {\n    return crypto.getRandomValues(new Uint8Array(n));\n}\n\n/** A fresh group id. Shared between members, unlike the local-only sessionId. */\nexport function newGroupId() {\n    return toHex(randomBytes(GROUP_LIMITS.GROUP_ID_BYTES));\n}\n\n// ---------------------------------------------------------------------------\n// canonical encoding\n// ---------------------------------------------------------------------------\n\n/**\n * Length-prefixed concatenation.\n *\n * Everything signed or hashed in this module goes through here, so that no two\n * distinct field sets can ever produce the same bytes. Plain concatenation would\n * let (\"ab\",\"c\") and (\"a\",\"bc\") sign the same payload, which is precisely how a\n * membership operation gets reinterpreted as a different one.\n */\nfunction lp(label, ...parts) {\n    const chunks = [ENC.encode(label + '\\0')];\n    let total = chunks[0].length;\n    for (const part of parts) {\n        const bytes = part instanceof Uint8Array ? part\n            : typeof part === 'string' ? ENC.encode(part)\n            : fail('unsupported payload component', 'bad_payload');\n        const header = new Uint8Array(4);\n        new DataView(header.buffer).setUint32(0, bytes.length);\n        chunks.push(header, bytes);\n        total += 4 + bytes.length;\n    }\n    const out = new Uint8Array(total);\n    let o = 0;\n    for (const c of chunks) { out.set(c, o); o += c.length; }\n    return out;\n}\n\nfunction u32(n) {\n    if (!Number.isInteger(n) || n < 0 || n > GROUP_LIMITS.MAX_EPOCH) fail('value out of uint32 range', 'bad_u32');\n    const b = new Uint8Array(4);\n    new DataView(b.buffer).setUint32(0, n);\n    return b;\n}\n\n/** Constant-time byte comparison. Cheap, and keeps the habit uniform. */\nfunction equalBytes(a, b) {\n    if (!(a instanceof Uint8Array) || !(b instanceof Uint8Array) || a.length !== b.length) return false;\n    let diff = 0;\n    for (let i = 0; i < a.length; i++) diff |= a[i] ^ b[i];\n    return diff === 0;\n}\n\n// ---------------------------------------------------------------------------\n// validation of attacker-supplied values\n// ---------------------------------------------------------------------------\n\nexport function assertGroupId(groupId) {\n    if (typeof groupId !== 'string' || groupId.length !== GROUP_LIMITS.GROUP_ID_BYTES * 2 || !/^[0-9a-f]+$/.test(groupId)) {\n        fail('malformed group id', 'bad_group_id');\n    }\n    return groupId;\n}\n\nexport function assertFingerprint(fp) {\n    if (typeof fp !== 'string' || fp.length !== GROUP_LIMITS.FINGERPRINT_BYTES * 2 || !/^[0-9a-f]+$/.test(fp)) {\n        fail('malformed member fingerprint', 'bad_fingerprint');\n    }\n    return fp;\n}\n\nexport function assertEpoch(epoch) {\n    if (!Number.isInteger(epoch) || epoch < 0 || epoch > GROUP_LIMITS.MAX_EPOCH) {\n        fail('epoch out of range', 'bad_epoch');\n    }\n    return epoch;\n}\n\nexport function assertName(name) {\n    const value = typeof name === 'string' ? name : '';\n    if (ENC.encode(value).length > GROUP_LIMITS.MAX_NAME_BYTES) fail('group name too long', 'bad_name');\n    return value;\n}\n\n/**\n * Canonical member ordering.\n *\n * Sorting by fingerprint \u2014 never by join order, never by however the array\n * arrived \u2014 is what makes every device hash identical bytes. A set that two\n * members order differently produces two different safety codes and the group\n * fails to form for no visible reason.\n */\nexport function canonicalFingerprints(fps) {\n    if (!Array.isArray(fps)) fail('member list is not an array', 'bad_members');\n    if (fps.length < GROUP_LIMITS.MIN_MEMBERS) fail('a group needs at least two members', 'bad_members');\n    if (fps.length > GROUP_LIMITS.MAX_MEMBERS) fail(`a group is limited to ${GROUP_LIMITS.MAX_MEMBERS} members`, 'too_many_members');\n    const seen = new Set();\n    for (const fp of fps) {\n        assertFingerprint(fp);\n        if (seen.has(fp)) fail('duplicate member fingerprint', 'duplicate_member');\n        seen.add(fp);\n    }\n    return [...fps].sort();\n}\n\n// ---------------------------------------------------------------------------\n// group identity key\n// ---------------------------------------------------------------------------\n\n/**\n * A group identity key pair for this device, in this group.\n *\n * Non-extractable private key: it signs and nothing else, and it must not be\n * reachable from a heap dump the way an exportable key is. The public half is\n * exported once, here, because it has to travel to the other members.\n */\nexport async function generateGroupIdentity(subtle) {\n    const keyPair = await subtle.generateKey(\n        { name: 'ECDSA', namedCurve: 'P-384' },\n        false,\n        ['sign', 'verify'],\n    );\n    const spki = new Uint8Array(await subtle.exportKey('spki', keyPair.publicKey));\n    const fingerprint = await fingerprintSpki(subtle, spki);\n    return { keyPair, spki, fingerprint };\n}\n\n/** SHA-256 over the SPKI, hex. The stable name of a member inside a group. */\nexport async function fingerprintSpki(subtle, spki) {\n    if (!(spki instanceof Uint8Array) || spki.length < GROUP_LIMITS.MIN_SPKI_BYTES || spki.length > GROUP_LIMITS.MAX_SPKI_BYTES) {\n        fail('SPKI length out of range', 'bad_spki');\n    }\n    return toHex(new Uint8Array(await subtle.digest('SHA-256', spki)));\n}\n\n/**\n * Import a member's published verifying key.\n *\n * Returns the key AND the fingerprint computed from the bytes we were actually\n * given, never one the sender asserted. A member is identified by what their key\n * hashes to; accepting a claimed fingerprint would let a member occupy someone\n * else's slot in the safety code.\n */\nexport async function importMemberIdentity(subtle, spki) {\n    const fingerprint = await fingerprintSpki(subtle, spki);\n    let publicKey;\n    try {\n        publicKey = await subtle.importKey('spki', spki, { name: 'ECDSA', namedCurve: 'P-384' }, false, ['verify']);\n    } catch (_) {\n        fail('member identity key is not a valid P-384 public key', 'bad_spki');\n    }\n    return { publicKey, fingerprint };\n}\n\n// ---------------------------------------------------------------------------\n// commit / reveal\n// ---------------------------------------------------------------------------\n\n/**\n * Commitment to a member's nonce for one epoch.\n *\n * The group id and epoch are inside the hash so a commitment cannot be replayed\n * into a different group or a later epoch, and the fingerprint is inside so one\n * member cannot claim another member's commitment as their own.\n */\nexport async function buildCommitment(subtle, { groupId, epoch, fingerprint, nonce }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    assertFingerprint(fingerprint);\n    if (!(nonce instanceof Uint8Array) || nonce.length !== GROUP_LIMITS.NONCE_BYTES) {\n        fail('nonce must be 32 bytes', 'bad_nonce');\n    }\n    const payload = lp('securebit/group/commit/v1', fromHex(groupId), u32(epoch), fromHex(fingerprint), nonce);\n    return new Uint8Array(await subtle.digest('SHA-256', payload));\n}\n\nexport async function verifyCommitment(subtle, commitment, fields) {\n    if (!(commitment instanceof Uint8Array) || commitment.length !== GROUP_LIMITS.COMMIT_BYTES) return false;\n    let expected;\n    try {\n        expected = await buildCommitment(subtle, fields);\n    } catch (_) {\n        return false;\n    }\n    return equalBytes(commitment, expected);\n}\n\n/**\n * The digits every member reads aloud.\n *\n * Inputs are the full member set with their revealed nonces, sorted by\n * fingerprint. Every member's key AND every member's nonce is covered, so a\n * substituted key or a substituted nonce anywhere in the group changes the code\n * for the members who received the substitution \u2014 and not for the others, which\n * is the mismatch the humans are there to notice.\n */\nexport async function computeGroupSas(subtle, { groupId, epoch, contributions, digits = GROUP_LIMITS.SAS_DIGITS }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    if (!Array.isArray(contributions)) fail('contributions must be an array', 'bad_contributions');\n    if (!Number.isInteger(digits) || digits < 4 || digits > 12) fail('digit count out of range', 'bad_digits');\n\n    canonicalFingerprints(contributions.map((c) => c && c.fingerprint));\n\n    const ordered = [...contributions].sort((a, b) => (a.fingerprint < b.fingerprint ? -1 : 1));\n    const parts = [];\n    for (const c of ordered) {\n        if (!(c.nonce instanceof Uint8Array) || c.nonce.length !== GROUP_LIMITS.NONCE_BYTES) {\n            fail('every member must contribute a 32-byte nonce', 'bad_nonce');\n        }\n        parts.push(fromHex(c.fingerprint), c.nonce);\n    }\n\n    const ikm = lp('securebit/group/sas/v1', fromHex(groupId), u32(epoch), ...parts);\n    const salt = new Uint8Array(await subtle.digest('SHA-256', lp('securebit/group/sas-salt/v1', fromHex(groupId), u32(epoch))));\n\n    let key = null;\n    try {\n        key = await subtle.importKey('raw', ikm, 'HKDF', false, ['deriveBits']);\n        const bits = await subtle.deriveBits(\n            { name: 'HKDF', hash: 'SHA-256', salt, info: ENC.encode('securebit-group-sas-v1') },\n            key, 64,\n        );\n        const dv = new DataView(bits);\n        // 52 bits of entropy folded into the digits. Staying under 2^53 keeps\n        // this exact in a JS Number; the modulo bias at 10^7 is ~1e-9.\n        const n = dv.getUint32(0) * 2 ** 20 + (dv.getUint32(4) >>> 12);\n        return String(n % 10 ** digits).padStart(digits, '0');\n    } finally {\n        try { ikm.fill(0); } catch (_) { /* not ours to wipe */ }\n    }\n}\n\n/**\n * The commit-reveal state machine.\n *\n * This object exists so that the ordering rule has exactly one implementation.\n * `reveal()` throws until every expected commitment has arrived, and that refusal\n * is the entire security argument for a 7-digit group code \u2014 see the header.\n */\nexport class GroupSasCeremony {\n    constructor({ groupId, epoch, selfFingerprint, memberFingerprints }) {\n        this.groupId = assertGroupId(groupId);\n        this.epoch = assertEpoch(epoch);\n        this.selfFingerprint = assertFingerprint(selfFingerprint);\n        this.members = canonicalFingerprints(memberFingerprints);\n        if (!this.members.includes(this.selfFingerprint)) {\n            fail('the local member is not in the member set', 'not_a_member');\n        }\n        this.nonce = randomBytes(GROUP_LIMITS.NONCE_BYTES);\n        this.commitments = new Map(); // fp -> Uint8Array(32)\n        this.nonces = new Map();      // fp -> Uint8Array(32)\n        this.revealed = false;\n        this.code = null;\n    }\n\n    /** Our own commitment, to be broadcast first. */\n    async ownCommitment(subtle) {\n        const commitment = await buildCommitment(subtle, {\n            groupId: this.groupId, epoch: this.epoch,\n            fingerprint: this.selfFingerprint, nonce: this.nonce,\n        });\n        this.commitments.set(this.selfFingerprint, commitment);\n        return commitment;\n    }\n\n    /**\n     * Record a peer commitment. Rejects anyone outside the member set, and\n     * refuses to overwrite one already recorded \u2014 a second, different commitment\n     * from the same member is an attempt to move after seeing more of the round.\n     */\n    acceptCommitment(fingerprint, commitment) {\n        assertFingerprint(fingerprint);\n        if (!this.members.includes(fingerprint)) fail('commitment from a non-member', 'not_a_member');\n        if (!(commitment instanceof Uint8Array) || commitment.length !== GROUP_LIMITS.COMMIT_BYTES) {\n            fail('malformed commitment', 'bad_commitment');\n        }\n        const existing = this.commitments.get(fingerprint);\n        if (existing) {\n            if (!equalBytes(existing, commitment)) fail('member changed their commitment', 'commitment_changed');\n            return false;\n        }\n        this.commitments.set(fingerprint, commitment);\n        return true;\n    }\n\n    get commitmentsComplete() {\n        return this.members.every((fp) => this.commitments.has(fp));\n    }\n\n    /**\n     * Our nonce \u2014 available ONLY once every commitment is in.\n     *\n     * This is the gate the whole construction rests on. Do not add a caller that\n     * bypasses it, and do not \"helpfully\" relax it when a member is slow: a\n     * timeout must fail the ceremony, never proceed without a commitment.\n     */\n    reveal() {\n        if (!this.commitmentsComplete) {\n            fail('cannot reveal before every member has committed', 'premature_reveal');\n        }\n        this.revealed = true;\n        this.nonces.set(this.selfFingerprint, this.nonce);\n        return this.nonce;\n    }\n\n    /** Record a peer nonce, checking it against the commitment they are bound to. */\n    async acceptReveal(subtle, fingerprint, nonce) {\n        assertFingerprint(fingerprint);\n        if (!this.members.includes(fingerprint)) fail('reveal from a non-member', 'not_a_member');\n        const commitment = this.commitments.get(fingerprint);\n        if (!commitment) fail('reveal arrived before the commitment', 'reveal_without_commitment');\n        const ok = await verifyCommitment(subtle, commitment, {\n            groupId: this.groupId, epoch: this.epoch, fingerprint, nonce,\n        });\n        if (!ok) fail('revealed nonce does not match the commitment', 'commitment_mismatch');\n        this.nonces.set(fingerprint, nonce);\n        return true;\n    }\n\n    get revealsComplete() {\n        return this.members.every((fp) => this.nonces.has(fp));\n    }\n\n    /** The digits, once every nonce is in and verified. */\n    async finish(subtle) {\n        if (!this.revealsComplete) fail('not every member has revealed', 'incomplete_reveal');\n        this.code = await computeGroupSas(subtle, {\n            groupId: this.groupId,\n            epoch: this.epoch,\n            contributions: this.members.map((fp) => ({ fingerprint: fp, nonce: this.nonces.get(fp) })),\n        });\n        return this.code;\n    }\n\n    /** Wipe the nonce material once the code exists or the ceremony is abandoned. */\n    destroy() {\n        try { this.nonce.fill(0); } catch (_) {}\n        for (const n of this.nonces.values()) { try { n.fill(0); } catch (_) {} }\n        this.nonces.clear();\n        this.commitments.clear();\n    }\n}\n\n// ---------------------------------------------------------------------------\n// membership operations\n// ---------------------------------------------------------------------------\n\n/**\n * The bytes a membership change is signed over.\n *\n * The resulting member set is signed in full rather than the delta, so a\n * recipient never has to reconstruct state from a sequence of operations it may\n * have received out of order or incompletely. The epoch is what orders them, and\n * accepting only a strictly greater epoch is what refuses both a replay and a\n * rollback to a set that used to be valid.\n */\nexport function memberOpPayload({ groupId, epoch, op, memberFps, name = '' }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    if (!Object.values(MEMBER_OPS).includes(op)) fail('unknown membership operation', 'bad_op');\n    const ordered = canonicalFingerprints(memberFps);\n    return lp(\n        'securebit/group/member-op/v1',\n        fromHex(groupId), u32(epoch), op, assertName(name),\n        ...ordered.map((fp) => fromHex(fp)),\n    );\n}\n\nexport async function signMemberOp(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, memberOpPayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyMemberOp(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = memberOpPayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// group messages\n// ---------------------------------------------------------------------------\n\nexport async function hashBody(subtle, body) {\n    const bytes = typeof body === 'string' ? ENC.encode(body) : body;\n    if (!(bytes instanceof Uint8Array)) fail('message body must be a string or bytes', 'bad_body');\n    if (bytes.length > GROUP_LIMITS.MAX_BODY_BYTES) fail('message body exceeds the group limit', 'body_too_large');\n    return new Uint8Array(await subtle.digest('SHA-256', bytes));\n}\n\n/**\n * The bytes a group message is signed over.\n *\n * Only the hash of the body is signed, not the body: it keeps the payload a\n * fixed size regardless of message length, and the hash is what a later\n * consistency comparison needs anyway.\n */\nexport function groupMessagePayload({ groupId, epoch, seq, senderFp, bodyHash }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    assertEpoch(seq); // same uint32 range; a per-sender counter\n    assertFingerprint(senderFp);\n    if (!(bodyHash instanceof Uint8Array) || bodyHash.length !== 32) fail('body hash must be 32 bytes', 'bad_body_hash');\n    return lp('securebit/group/message/v1', fromHex(groupId), u32(epoch), u32(seq), fromHex(senderFp), bodyHash);\n}\n\nexport async function signGroupMessage(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, groupMessagePayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyGroupMessage(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = groupMessagePayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// mesh links\n// ---------------------------------------------------------------------------\n//\n// WHY A MESH DESCRIPTOR IS SIGNED WITH THE GROUP IDENTITY KEY\n// -----------------------------------------------------------\n// Two members who have never met have no pairwise channel to introduce\n// themselves over, so their WebRTC descriptors have to travel through a member\n// who CAN reach both \u2014 in practice the admin. That relay is not trusted with\n// the content of the group, and it must not become trusted with the shape of\n// the group's transport either: a relay that could swap a descriptor for its\n// own would sit in the middle of the very link that was built to route around\n// it.\n//\n// The descriptor is therefore signed with the sender's group identity key \u2014\n// the same key whose fingerprint the signed roster names and whose presence the\n// humans confirmed when they compared the group code. A relay can drop a dial\n// or delay it, which costs availability and nothing else. It cannot substitute\n// one, because it cannot produce that signature.\n//\n// The signature covers the direction (offer or answer), BOTH fingerprints and a\n// per-attempt nonce as well as the descriptor bytes:\n//\n//   - the direction stops an offer being replayed back as an answer;\n//   - both fingerprints stop a descriptor addressed to one member being\n//     re-aimed at another;\n//   - the nonce binds an answer to the one dial that asked for it, so an answer\n//     captured from an earlier attempt cannot be replayed into a later one.\n//\n// SBQ2's own expiry check bounds how long a descriptor is usable at all, and\n// the epoch is inside the payload so nothing survives a membership change.\n\nexport function meshDescriptorPayload({ groupId, epoch, kind, fromFp, toFp, descriptor, nonce }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    if (kind !== MESH_KINDS.OFFER && kind !== MESH_KINDS.ANSWER) {\n        fail('unknown mesh descriptor kind', 'bad_mesh_kind');\n    }\n    assertFingerprint(fromFp);\n    assertFingerprint(toFp);\n    if (fromFp === toFp) fail('a member cannot dial itself', 'bad_mesh_peer');\n    if (typeof descriptor !== 'string' || descriptor.length === 0\n        || descriptor.length > GROUP_LIMITS.MAX_DESCRIPTOR_CHARS) {\n        fail('mesh descriptor is missing or oversized', 'bad_descriptor');\n    }\n    if (!(nonce instanceof Uint8Array) || nonce.length !== GROUP_LIMITS.MESH_NONCE_BYTES) {\n        fail('mesh nonce must be 16 bytes', 'bad_mesh_nonce');\n    }\n    return lp(\n        'securebit/group/mesh-descriptor/v1',\n        fromHex(groupId), u32(epoch), kind,\n        fromHex(fromFp), fromHex(toFp),\n        descriptor, nonce,\n    );\n}\n\nexport async function signMeshDescriptor(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, meshDescriptorPayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyMeshDescriptor(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = meshDescriptorPayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\n/**\n * The bytes a link probe is signed over.\n *\n * A probe is how a member says \"the pairwise chat you are reading this on is\n * me, member <fp>\". It exists because two members can perfectly well already\n * hold a verified 1:1 chat with each other before the group was formed, and\n * dialling a second connection between them would be pure waste.\n *\n * The claim has to be authenticated, and it has to be authenticated TO THIS\n * SESSION. A bare signed claim would be replayable: any member could capture\n * one and present it on their own link to impersonate its author, and group\n * traffic meant for that member would then be encrypted to the impersonator's\n * pairwise session, which is a plaintext disclosure and not merely a routing\n * mistake.\n *\n * `linkFp` is what closes that. It is the pairwise session's own key\n * fingerprint \u2014 derived from the ECDH shared secret, so it is known to exactly\n * the two endpoints of that session and to nobody else. A probe replayed onto\n * any other session carries the wrong one and fails to verify. The receiver\n * checks it against the fingerprint IT holds for the session the probe arrived\n * on, never against a value inside the frame.\n */\nexport function linkProbePayload({ groupId, epoch, fp, linkFp }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    assertFingerprint(fp);\n    if (typeof linkFp !== 'string' || linkFp.length === 0 || linkFp.length > 256) {\n        fail('link fingerprint is missing or oversized', 'bad_link_fp');\n    }\n    return lp('securebit/group/link-probe/v1', fromHex(groupId), u32(epoch), fromHex(fp), linkFp);\n}\n\nexport async function signLinkProbe(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, linkProbePayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyLinkProbe(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = linkProbePayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\n/**\n * The bytes a call-control frame is signed over.\n *\n * Call control is membership-visible metadata, not content, but it is signed\n * with the same group identity key for the same reason a message is: a relaying\n * member carries these frames, and a relay that could forge one could put a\n * member into a call they never joined, or take one out of a call they are in,\n * with no way for anyone to tell who did it.\n *\n * `seq` is a per-sender counter over call frames only. It is what makes a\n * captured frame unusable later: a `leave` from a finished call replays with a\n * sequence number the receiver has already passed, and is dropped before its\n * action is ever considered.\n */\nexport function groupCallPayload({ groupId, epoch, callId, action, fp, seq, withVideo }) {\n    assertGroupId(groupId);\n    assertEpoch(epoch);\n    assertCallId(callId);\n    assertEpoch(seq);\n    assertFingerprint(fp);\n    if (action !== CALL_ACTIONS.START && action !== CALL_ACTIONS.JOIN && action !== CALL_ACTIONS.LEAVE) {\n        fail('unknown call action', 'bad_call_action');\n    }\n    return lp(\n        'securebit/group/call/v1',\n        fromHex(groupId), u32(epoch), fromHex(callId), action,\n        fromHex(fp), u32(seq), withVideo === true ? 'v' : 'a',\n    );\n}\n\nexport function assertCallId(callId) {\n    if (typeof callId !== 'string' || callId.length !== GROUP_LIMITS.CALL_ID_BYTES * 2 || !/^[0-9a-f]+$/.test(callId)) {\n        fail('malformed call id', 'bad_call_id');\n    }\n    return callId;\n}\n\nexport function newCallId() {\n    return toHex(randomBytes(GROUP_LIMITS.CALL_ID_BYTES));\n}\n\nexport async function signGroupCall(subtle, privateKey, fields) {\n    const sig = await subtle.sign({ name: 'ECDSA', hash: 'SHA-384' }, privateKey, groupCallPayload(fields));\n    return new Uint8Array(sig);\n}\n\nexport async function verifyGroupCall(subtle, publicKey, fields, signature) {\n    if (!(signature instanceof Uint8Array)\n        || signature.length < GROUP_LIMITS.MIN_SIG_BYTES\n        || signature.length > GROUP_LIMITS.MAX_SIG_BYTES) {\n        return false;\n    }\n    let payload;\n    try {\n        payload = groupCallPayload(fields);\n    } catch (_) {\n        return false;\n    }\n    try {\n        return await subtle.verify({ name: 'ECDSA', hash: 'SHA-384' }, publicKey, signature, payload);\n    } catch (_) {\n        return false;\n    }\n}\n\nexport { GroupCryptoError };\n", "import { t } from '../i18n/index.js';\n// Groups registry for SecureBit.chat.\n//\n// Same contract as sessionsStore.js, and deliberately a SEPARATE reducer rather\n// than a slice bolted onto that one: a group is built out of pairwise sessions\n// but owns none of them, and keeping the two stores apart means adding groups\n// cannot disturb the 1:1 state that every existing test covers.\n//\n// What lives here is only what React renders. The non-serializable half of a\n// group \u2014 its ECDSA identity key pair, the running commit/reveal ceremony, the\n// per-member imported verifying keys, the outbound sequence counter \u2014 lives\n// OUTSIDE this state in a ref-held Map keyed by groupId, exactly the way\n// managersRef holds the WebRTC managers. Key material must never reach a\n// reducer: it would be cloned on every dispatch and retained by React's state\n// history, which is the opposite of what a non-extractable key is for.\n//\n// groupId is SHARED with the other members (it identifies the group on the\n// wire), unlike sessionId, which is local-only. Member identity is the\n// fingerprint of a member's group identity key \u2014 never a session id, and never\n// a name the peer supplied.\n\nimport { GROUP_LIMITS } from '../group/groupCrypto.js';\n\nexport const GROUP_ACTIONS = Object.freeze({\n    CREATE_GROUP: 'CREATE_GROUP',\n    REMOVE_GROUP: 'REMOVE_GROUP',\n    SET_ACTIVE_GROUP: 'SET_ACTIVE_GROUP',\n    SET_PHASE: 'SET_PHASE',\n    SET_MEMBERS: 'SET_MEMBERS',\n    PATCH_MEMBER: 'PATCH_MEMBER',\n    SET_SAS: 'SET_SAS',\n    CONFIRM_SAS: 'CONFIRM_SAS',\n    ADD_MESSAGE: 'ADD_MESSAGE',\n    SET_MESSAGES: 'SET_MESSAGES',\n    UPDATE_MESSAGE_STATUS: 'UPDATE_MESSAGE_STATUS',\n    INCREMENT_UNREAD: 'INCREMENT_UNREAD',\n    CLEAR_UNREAD: 'CLEAR_UNREAD',\n    RENAME: 'RENAME',\n    SET_ERROR: 'SET_ERROR',\n});\n\n/**\n * A group's lifecycle.\n *\n * The order matters and the UI depends on it: nothing may be sent or displayed\n * as group traffic until `ready`, and `ready` is reachable only through\n * `awaiting_sas`, where a human confirmed the code. A group that skips that step\n * is a group whose introduced members were never authenticated by anyone.\n */\nexport const GROUP_PHASE = Object.freeze({\n    FORMING: 'forming',       // members chosen, identity keys being exchanged\n    COMMITTING: 'committing', // commitments in flight\n    REVEALING: 'revealing',   // every commitment in, nonces in flight\n    AWAITING_SAS: 'awaiting_sas', // code computed, waiting for the humans\n    READY: 'ready',           // confirmed; group traffic flows\n    FAILED: 'failed',         // ceremony aborted; nothing flows\n});\n\n/** Per-member link state. 'self' is us; the rest describe the pairwise session. */\nexport const MEMBER_STATE = Object.freeze({\n    SELF: 'self',\n    LINKED: 'linked',   // pairwise session up and SAS-verified\n    PENDING: 'pending', // session exists but is not verified/connected yet\n    LOST: 'lost',       // was linked, connection dropped\n});\n\nexport const GROUP_PHASE_WORD = {\n    [GROUP_PHASE.FORMING]: t('groupPhase.forming'),\n    [GROUP_PHASE.COMMITTING]: t('groupPhase.commitments'),\n    [GROUP_PHASE.REVEALING]: t('groupPhase.revealing'),\n    [GROUP_PHASE.AWAITING_SAS]: t('groupPhase.compare'),\n    [GROUP_PHASE.READY]: t('groupPhase.ready'),\n    [GROUP_PHASE.FAILED]: t('groupPhase.failed'),\n};\n\n/** Two-letter monogram for the group tile. Mirrors monoInitials in sessionsStore. */\nexport function groupInitials(name) {\n    const words = String(name || '').trim().split(/\\s+/).filter(Boolean);\n    const a = words[0]?.[0] || '';\n    const b = words[1]?.[0] || words[0]?.[1] || '';\n    return (a + b).toUpperCase() || '##';\n}\n\nexport function createGroupEntry(opts = {}) {\n    return {\n        id: opts.id,\n        name: opts.name || 'Group',\n        createdAt: opts.createdAt || Date.now(),\n        adminFp: opts.adminFp || '',\n        selfFp: opts.selfFp || '',\n        isAdmin: !!opts.isAdmin,\n        epoch: Number.isInteger(opts.epoch) ? opts.epoch : 1,\n        phase: opts.phase || GROUP_PHASE.FORMING,\n        // members: [{ fp, name, sessionId, state }]. Always stored in canonical\n        // fingerprint order so every device renders the same list.\n        members: Array.isArray(opts.members) ? [...opts.members].sort(byFingerprint) : [],\n        sasCode: '',\n        sasConfirmed: false,\n        messages: [],\n        unreadCount: 0,\n        error: null,\n    };\n}\n\nconst NAME_ENCODER = new TextEncoder();\n\n/** Trim a group name so its UTF-8 encoding fits the protocol's byte budget. */\nfunction clampNameBytes(value) {\n    let out = String(value);\n    while (NAME_ENCODER.encode(out).length > GROUP_LIMITS.MAX_NAME_BYTES) out = out.slice(0, -1);\n    return out;\n}\n\nfunction byFingerprint(a, b) {\n    return a.fp < b.fp ? -1 : a.fp > b.fp ? 1 : 0;\n}\n\nexport function createInitialGroupState() {\n    return { groups: {}, order: [], activeGroupId: null };\n}\n\n/** Patch one group, leaving every sibling referentially untouched. */\nfunction patchGroup(state, id, patch) {\n    const group = state.groups[id];\n    if (!group) return state;\n    return { ...state, groups: { ...state.groups, [id]: { ...group, ...patch } } };\n}\n\nexport function groupsReducer(state, action) {\n    const A = GROUP_ACTIONS;\n    switch (action.type) {\n        case A.CREATE_GROUP: {\n            const entry = action.entry || createGroupEntry(action);\n            if (!entry.id || state.groups[entry.id]) return state;\n            return {\n                groups: { ...state.groups, [entry.id]: entry },\n                order: [...state.order, entry.id],\n                activeGroupId: action.activate === false ? state.activeGroupId : entry.id,\n            };\n        }\n\n        case A.REMOVE_GROUP: {\n            const { id } = action;\n            if (!state.groups[id]) return state;\n            const groups = { ...state.groups };\n            delete groups[id];\n            const order = state.order.filter((x) => x !== id);\n            let activeGroupId = state.activeGroupId;\n            if (activeGroupId === id) {\n                const removedIdx = state.order.indexOf(id);\n                activeGroupId = order[Math.max(0, removedIdx - 1)] || order[0] || null;\n            }\n            return { groups, order, activeGroupId };\n        }\n\n        case A.SET_ACTIVE_GROUP: {\n            // null is legitimate: it means a 1:1 session took the foreground.\n            if (action.id === null) {\n                return state.activeGroupId === null ? state : { ...state, activeGroupId: null };\n            }\n            if (!state.groups[action.id] || state.activeGroupId === action.id) return state;\n            return { ...state, activeGroupId: action.id };\n        }\n\n        case A.SET_PHASE: {\n            const group = state.groups[action.id];\n            if (!group || group.phase === action.phase) return state;\n            // Leaving READY clears the confirmation: a membership change starts a\n            // new epoch with a new code, and a stale \"confirmed\" tick would tell\n            // the user they had checked something they had not.\n            const patch = { phase: action.phase };\n            if (action.phase !== GROUP_PHASE.READY && group.sasConfirmed) {\n                patch.sasConfirmed = false;\n            }\n            // The code is cleared only on the way BACK to a pre-code phase.\n            // AWAITING_SAS is where a code is born, so clearing it there would\n            // erase the digits the user is about to be shown.\n            if (action.phase !== GROUP_PHASE.READY && action.phase !== GROUP_PHASE.AWAITING_SAS) {\n                patch.sasCode = '';\n            }\n            if (action.phase !== GROUP_PHASE.FAILED) patch.error = null;\n            return patchGroup(state, action.id, patch);\n        }\n\n        case A.SET_MEMBERS: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            const members = Array.isArray(action.members) ? [...action.members].sort(byFingerprint) : group.members;\n            const patch = { members };\n            if (Number.isInteger(action.epoch)) patch.epoch = action.epoch;\n            return patchGroup(state, action.id, patch);\n        }\n\n        case A.PATCH_MEMBER: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            let changed = false;\n            const members = group.members.map((m) => {\n                if (m.fp !== action.fp) return m;\n                const next = { ...m, ...action.patch };\n                // Skip the dispatch entirely when nothing actually moved \u2014 link\n                // state churns on every ICE event and would otherwise re-render\n                // the whole group list continuously.\n                if (Object.keys(action.patch).every((k) => m[k] === next[k])) return m;\n                changed = true;\n                return next;\n            });\n            return changed ? patchGroup(state, action.id, { members }) : state;\n        }\n\n        case A.SET_SAS: {\n            const group = state.groups[action.id];\n            if (!group || group.sasCode === action.code) return state;\n            return patchGroup(state, action.id, { sasCode: action.code || '', sasConfirmed: false });\n        }\n\n        case A.CONFIRM_SAS: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            // Refuse the transition unless there is a code to have confirmed AND\n            // the group is actually waiting on that confirmation.\n            //\n            // Checking only for a code was not enough: a ceremony that reached\n            // AWAITING_SAS and then FAILED \u2014 a mismatched commitment, a member\n            // that vanished \u2014 kept its code, so confirming promoted a group whose\n            // verification had demonstrably gone wrong straight to READY. The\n            // phase is what says the code in hand is still the one being asked\n            // about, which mirrors the 1:1 rule that verified state comes only\n            // from the local user acting on something currently true.\n            if (!group.sasCode) return state;\n            if (group.phase !== GROUP_PHASE.AWAITING_SAS) return state;\n            if (group.sasConfirmed && group.phase === GROUP_PHASE.READY) return state;\n            return patchGroup(state, action.id, { sasConfirmed: true, phase: GROUP_PHASE.READY, error: null });\n        }\n\n        case A.ADD_MESSAGE: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            return patchGroup(state, action.id, { messages: [...group.messages, action.message] });\n        }\n\n        case A.SET_MESSAGES: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            const next = typeof action.updater === 'function' ? action.updater(group.messages) : action.messages;\n            return patchGroup(state, action.id, { messages: Array.isArray(next) ? next : [] });\n        }\n\n        case A.UPDATE_MESSAGE_STATUS: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            let changed = false;\n            const messages = group.messages.map((m) => {\n                if (String(m.mid) === String(action.mid) && m.status !== action.status) {\n                    changed = true;\n                    return { ...m, status: action.status };\n                }\n                return m;\n            });\n            return changed ? patchGroup(state, action.id, { messages }) : state;\n        }\n\n        case A.INCREMENT_UNREAD: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            return patchGroup(state, action.id, { unreadCount: group.unreadCount + 1 });\n        }\n\n        case A.CLEAR_UNREAD: {\n            const group = state.groups[action.id];\n            if (!group || group.unreadCount === 0) return state;\n            return patchGroup(state, action.id, { unreadCount: 0 });\n        }\n\n        case A.RENAME: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            // Clamped by BYTES, the unit the protocol enforces. A character slice\n            // against a byte budget lets a name in a multi-byte script through\n            // here and then fails when the roster carrying it is signed.\n            const name = clampNameBytes(String(action.name || '').trim()) || group.name;\n            return patchGroup(state, action.id, { name });\n        }\n\n        case A.SET_ERROR: {\n            const group = state.groups[action.id];\n            if (!group) return state;\n            const patch = { error: action.error || null };\n            if (action.error) patch.phase = GROUP_PHASE.FAILED;\n            return patchGroup(state, action.id, patch);\n        }\n\n        default:\n            return state;\n    }\n}\n\n// ---------------------------------------------------------------------------\n// derivation for rendering\n// ---------------------------------------------------------------------------\n\n/** How many members currently have a usable pairwise link (including us). */\nexport function linkedCount(group) {\n    return group.members.filter((m) => m.state === MEMBER_STATE.SELF || m.state === MEMBER_STATE.LINKED).length;\n}\n\n/**\n * A group is only fully up when every member is reachable. Partial connectivity\n * is shown rather than hidden: in a mesh with no server, a member you cannot\n * reach is a member who is not receiving your messages, and the sender is the\n * only one who can know that.\n */\nexport function groupSub(group) {\n    if (group.phase !== GROUP_PHASE.READY) return GROUP_PHASE_WORD[group.phase] || 'Group';\n    const total = group.members.length;\n    const linked = linkedCount(group);\n    if (linked < total) return `${linked} of ${total} connected`;\n    return `${total} members \u00B7 P2P mesh`;\n}\n\nexport function groupDot(group) {\n    switch (group.phase) {\n        case GROUP_PHASE.READY:\n            return linkedCount(group) < group.members.length ? 'var(--sb-yellow-2-solid)' : 'var(--sb-green-solid)';\n        case GROUP_PHASE.FAILED:\n            return 'var(--sb-red-solid)';\n        default:\n            return 'var(--sb-yellow-2-solid)';\n    }\n}\n\nexport function decorateGroup(group, activeGroupId) {\n    const lastMessage = [...group.messages].reverse().find(\n        (m) => !m.expired && typeof m.message === 'string' && m.message.trim(),\n    );\n    const sub = groupSub(group);\n    return {\n        id: group.id,\n        kind: 'group',\n        name: group.name,\n        mono: groupInitials(group.name),\n        dot: groupDot(group),\n        headerSub: sub,\n        phase: group.phase,\n        memberCount: group.members.length,\n        linkedCount: linkedCount(group),\n        preview: lastMessage ? lastMessage.message : sub,\n        unread: group.unreadCount > 0 ? (group.unreadCount > 99 ? '99+' : String(group.unreadCount)) : null,\n        verified: group.phase === GROUP_PHASE.READY && group.sasConfirmed,\n        active: group.id === activeGroupId,\n        inactive: group.id !== activeGroupId,\n    };\n}\n\nexport function decorateGroups(state) {\n    return state.order\n        .map((id) => state.groups[id])\n        .filter(Boolean)\n        .map((g) => decorateGroup(g, state.activeGroupId));\n}\n", "// GroupSession \u2014 the orchestrator that turns N pairwise sessions into a group.\n//\n// WHAT THIS IS AND IS NOT\n// -----------------------\n// It owns no transport. Every byte it sends leaves through an existing\n// EnhancedSecureWebRTCManager, over a channel that is already SAS-verified and\n// already ratcheted, and arrives having been authenticated by that session. This\n// class adds the group layer on top: who is a member, what epoch it is, what\n// code the humans compare, and which of the N-1 links a given frame should take.\n//\n// It holds the non-serializable half of a group \u2014 the ECDSA identity key pair,\n// the running commit/reveal ceremony, the imported verifying keys \u2014 which is\n// exactly why it lives in a ref-held Map in the app and never inside the\n// reducer. See src/state/groupsStore.js.\n//\n// DELIVERY: DIRECT WHERE POSSIBLE, RELAYED WHERE NOT\n// --------------------------------------------------\n// A full mesh needs N(N-1)/2 pairwise links, and at the moment a group is\n// created only the admin holds a link to everyone. Rather than block the group\n// until every pair is introduced, a frame for a member we cannot reach directly\n// is handed to a member who can reach both of us.\n//\n// That is the STARTING state, not the resting one. Once the group is ready and\n// the safety code has been confirmed, every pair that has no link between it\n// builds one \u2014 see \"the mesh\" below \u2014 and the relay becomes the exception this\n// paragraph always described rather than the way the whole group runs. Until\n// then, and for any pair that cannot connect directly, the relay carries it.\n//\n// This is safe because it is not a trust decision. Group messages and membership\n// operations are signed with the sender's group identity key, and every member\n// holds every other member's verifying key from the signed roster. A relaying\n// member can therefore drop a frame or read a frame \u2014 they are a member of the\n// group, so reading it is what membership already entitles them to \u2014 but they\n// cannot forge one, alter one, or attribute one to somebody else. What relaying\n// costs is metadata (the relay learns who is talking to the group and when) and\n// availability (a relay that goes away takes the indirect paths with it), which\n// is why a direct link is always preferred and the UI shows how many exist.\n//\n// Relaying is single-hop by construction. A frame carries `to`; a member that is\n// not the addressee forwards it once, marked, and a marked frame is never\n// forwarded again. There is no routing table to poison and no loop to form.\n//\n// ORDER OF OPERATIONS\n// -------------------\n//   1. invite    admin sends the group's name and its own identity key\n//   2. hello     each invitee replies with its identity key\n//   3. roster    admin signs the full member set for this epoch and broadcasts it\n//   4. commit    every member commits to a secret nonce\n//   5. reveal    ONLY once every commitment has arrived, nonces are published\n//   6. code      every member computes the same digits and the humans compare\n//   7. ready     group traffic flows\n//   8. mesh      every pair without a link dials one, over the relay path\n//\n// Step 8 is the only one that can fail without the group noticing, and that is\n// deliberate: a pair that cannot connect directly keeps working exactly as it\n// did in step 7.\n//\n// Steps 4 and 5 are what make a seven-digit code safe; the reasoning is in\n// groupCrypto.js and the ordering is enforced by GroupSasCeremony, not here.\n\nimport {\n    GROUP_LIMITS,\n    MEMBER_OPS,\n    MESH_KINDS,\n    GroupSasCeremony,\n    generateGroupIdentity,\n    importMemberIdentity,\n    signMemberOp,\n    verifyMemberOp,\n    hashBody,\n    signGroupMessage,\n    verifyGroupMessage,\n    computeGroupSas,\n    signMeshDescriptor,\n    verifyMeshDescriptor,\n    signLinkProbe,\n    verifyLinkProbe,\n    CALL_ACTIONS,\n    newCallId,\n    assertCallId,\n    signGroupCall,\n    verifyGroupCall,\n    randomBytes,\n    canonicalFingerprints,\n    assertGroupId,\n    assertFingerprint,\n    assertEpoch,\n    assertName,\n    newGroupId,\n    toB64,\n    fromB64,\n} from './groupCrypto.js';\n\nimport { GROUP_PHASE, MEMBER_STATE } from '../state/groupsStore.js';\n\n/** Wire frame types. All group traffic rides the ordinary chat message path. */\nexport const GROUP_FRAMES = Object.freeze({\n    INVITE: 'g_invite',\n    HELLO: 'g_hello',\n    MEMBER: 'g_member',\n    ROSTER: 'g_roster',\n    COMMIT: 'g_commit',\n    REVEAL: 'g_reveal',\n    MESSAGE: 'g_msg',\n    RELAY: 'g_relay',\n    LEAVE: 'g_leave',\n    // Mesh link establishment. These carry SBQ2 descriptors between two members\n    // who have no link yet, over the relay path of a member who can reach both.\n    MESH_OFFER: 'g_moffer',\n    MESH_ANSWER: 'g_manswer',\n    MESH_ABORT: 'g_mabort',\n    // \"The pairwise chat this arrived on is me, member <fp>.\"\n    PROBE: 'g_probe',\n    // Call control: who opened a call, who is in it, who has left. Media never\n    // travels here \u2014 see the call section below.\n    CALL: 'g_call',\n});\n\n/** The outer wrapper every group frame travels inside. See encodeEnvelope. */\nexport const GROUP_ENVELOPE = 'g_env';\n\n/** Every type this module will act on. Anything else is dropped by default. */\nexport const GROUP_FRAME_TYPES = Object.freeze(new Set(Object.values(GROUP_FRAMES)));\n\nexport function isGroupFrame(parsed) {\n    if (!parsed || typeof parsed !== 'object') return false;\n    return parsed.type === GROUP_ENVELOPE || GROUP_FRAME_TYPES.has(parsed.type);\n}\n\n/**\n * The inner type of a frame, without decoding it.\n *\n * Callers outside this module need it for exactly one decision \u2014 whether an\n * arriving frame is an invitation to a group they do not have yet \u2014 and that\n * decision has to be made before any group state exists to decode with. It is a\n * routing hint only; decodeEnvelope re-checks it against the frame it wraps.\n */\nexport function groupFrameType(parsed) {\n    if (!parsed || typeof parsed !== 'object') return null;\n    if (parsed.type === GROUP_ENVELOPE) return typeof parsed.t === 'string' ? parsed.t : null;\n    return GROUP_FRAME_TYPES.has(parsed.type) ? parsed.type : null;\n}\n\n/**\n * Wrap a frame so the pairwise chat path cannot alter it.\n *\n * Group frames ride sendMessage, which sanitises its payload before encrypting:\n * DOMPurify escapes `<`, `>` and `&`, control characters are stripped, runs of\n * blank lines are collapsed, the string is trimmed, and the result is cut to\n * 2000 characters. Every one of those is correct for chat text and fatal for a\n * signed frame \u2014 a body that came back HTML-escaped no longer matches the hash\n * its signature covers, and the message would be rejected as forged.\n *\n * Base64 sidesteps all of it: its alphabet contains nothing DOMPurify rewrites\n * and nothing the sanitiser strips, and it has no whitespace to trim. The group\n * id and the inner type stay outside the encoding so a frame can be routed \u2014\n * and an invitation recognised \u2014 without decoding anything first. Neither\n * reveals more than the peer on that link already knows.\n */\nexport function encodeEnvelope(frame) {\n    const json = JSON.stringify(frame);\n    const encoded = toB64(new TextEncoder().encode(json));\n    if (encoded.length > GROUP_LIMITS.FRAME_BUDGET_CHARS) {\n        throw new GroupSessionError('group frame exceeds the transport budget', 'frame_too_large');\n    }\n    return { type: GROUP_ENVELOPE, gid: frame.gid, t: frame.type, d: encoded };\n}\n\nexport function decodeEnvelope(envelope) {\n    if (!envelope || envelope.type !== GROUP_ENVELOPE) return envelope;\n    const raw = String(envelope.d || '');\n    if (raw.length > GROUP_LIMITS.FRAME_BUDGET_CHARS) {\n        throw new GroupSessionError('group frame exceeds the transport budget', 'frame_too_large');\n    }\n    const bytes = fromB64(raw, { max: GROUP_LIMITS.FRAME_BUDGET_CHARS });\n    const frame = JSON.parse(new TextDecoder().decode(bytes));\n    if (!frame || typeof frame !== 'object' || !GROUP_FRAME_TYPES.has(frame.type)) {\n        throw new GroupSessionError('envelope carried no recognisable frame', 'bad_envelope');\n    }\n    // The routing hints outside the encoding are conveniences, not authority:\n    // if they disagree with the frame they wrap, the frame was tampered with.\n    if (envelope.gid && frame.gid !== envelope.gid) {\n        throw new GroupSessionError('envelope group id does not match its frame', 'bad_envelope');\n    }\n    if (envelope.t && frame.type !== envelope.t) {\n        throw new GroupSessionError('envelope type does not match its frame', 'bad_envelope');\n    }\n    return frame;\n}\n\nconst TIMEOUTS = Object.freeze({\n    // A member that has not committed by now is treated as absent and the\n    // ceremony fails. It must FAIL rather than proceed: proceeding without a\n    // commitment is exactly the grinding freedom the commit round removes.\n    CEREMONY_MS: 60_000,\n    // How long the admin waits for invitees to publish their identity keys.\n    HELLO_MS: 45_000,\n    // How long one mesh dial may stay in flight. It covers a descriptor going\n    // out over a relay hop, an answer coming back, and the whole SBQ2 in-band\n    // exchange completing on the new channel. Generous, because failing early\n    // costs a direct link and gains nothing: the pair keeps working over the\n    // relay the entire time the dial is running.\n    MESH_DIAL_MS: 45_000,\n    // Gap before a failed pair is dialled again, doubling per failure. A pair\n    // that cannot connect is usually a network that will not allow it, and\n    // retrying hard turns one unreachable member into a permanent load.\n    MESH_RETRY_MS: 20_000,\n});\n\n/** How many mesh dials one member will have in flight at once. */\nconst MESH_MAX_CONCURRENT_DIALS = 2;\n/** After this many consecutive failures a pair is left on the relay for good. */\nconst MESH_MAX_ATTEMPTS = 3;\n\nexport class GroupSessionError extends Error {\n    constructor(message, code = 'group_session') {\n        super(message);\n        this.name = 'GroupSessionError';\n        this.code = code;\n    }\n}\n\nexport class GroupSession {\n    /**\n     * @param {object} opts\n     * @param {string} opts.groupId\n     * @param {string} opts.name\n     * @param {boolean} opts.isAdmin\n     * @param {SubtleCrypto} opts.subtle\n     * @param {(sessionId: string, frame: object) => Promise<void>} opts.send\n     * @param {(event: string, payload: object) => void} opts.emit\n     */\n    constructor({ groupId, name, isAdmin, subtle, send, emit, mesh = null, log = () => {} }) {\n        this.groupId = assertGroupId(groupId);\n        this.name = assertName(name);\n        this.isAdmin = !!isAdmin;\n        this.subtle = subtle;\n        this._send = send;\n        this._emit = emit;\n        this._log = log;\n\n        /**\n         * How this group builds a transport it does not have.\n         *\n         * Injected rather than imported, for the same reason SubtleCrypto is:\n         * this class stays free of WebRTC, of the app's manager registry, and of\n         * anything that needs a browser to exist. A group constructed without it\n         * runs exactly as it did before \u2014 every indirect pair simply stays on\n         * the relay path.\n         *\n         *   createOffer(fp)                 -> { sessionId, descriptor }\n         *   createAnswer(fp, descriptor)    -> { sessionId, descriptor }\n         *   acceptAnswer(sessionId, descriptor) -> void\n         *   close(sessionId)                -> void\n         *   linkFingerprint(sessionId)      -> string  (pairwise session's key fp)\n         */\n        this._mesh = mesh;\n\n        this.identity = null;      // { keyPair, spki, fingerprint }\n        this.epoch = 1;\n        this.adminFp = '';\n        this.phase = GROUP_PHASE.FORMING;\n\n        /** fp -> { fp, name, spki, publicKey, sessionId, state } */\n        this.members = new Map();\n        /** sessionId -> fp, so an inbound frame can be attributed to a member. */\n        this.sessionToFp = new Map();\n\n        this.ceremony = null;\n        this.sasCode = '';\n        this.sasConfirmed = false;\n\n        this.seq = 0;\n        /**\n         * Sender fingerprint -> Map(seq -> body hash). Does double duty: it\n         * absorbs the duplicates that fan-out and relay inevitably produce, and\n         * it is what catches a member sending two different bodies under one\n         * sequence number. See _onMessage for why one structure has to do both.\n         */\n        this.transcript = new Map();\n\n        this._timers = new Set();\n        this._destroyed = false;\n        /** Invitees the admin is still waiting on, by sessionId. */\n        this._awaitingHello = new Map();\n\n        /**\n         * Commit and reveal frames that arrived before our own ceremony existed.\n         *\n         * Members start their ceremony when the roster reaches them, and the\n         * roster does not reach everyone at the same instant \u2014 a member on a fast\n         * link routinely broadcasts its commitment before a member on a slow one\n         * has even adopted the roster. Dropping those frames deadlocks the round\n         * for everyone, because the commit set never completes and the reveal\n         * gate never opens. They are held here and drained when the ceremony\n         * starts. Bounded, because the sender of these frames chooses how many to\n         * send.\n         */\n        this._pendingCeremony = [];\n        this._draining = false;\n\n        /**\n         * Member identity keys that arrived ahead of the roster that names them.\n         *\n         * A key frame on its own is an unverified claim, so nothing is applied\n         * from here until the admin's signed roster says which fingerprints are\n         * actually members. Bounded for the same reason as _pendingCeremony.\n         */\n        this._pendingKeys = new Map();\n\n        /**\n         * An in-flight \"add members\" round: which operation it is, the epoch it\n         * will open, and who was already in the group when it started. Held so a\n         * round that nobody answers can be abandoned without having touched the\n         * epoch or the member set \u2014 the group carries on exactly as it was.\n         */\n        this._pendingAdd = null;\n\n        /**\n         * Mesh dials in flight, by peer fingerprint.\n         *\n         * fp -> { role, sessionId, nonce, epoch, timer }. One entry per PAIR,\n         * never per direction: the dialling rule below means only one side of a\n         * pair ever opens a dial, so a second entry for the same peer is a\n         * duplicate to be refused rather than a second attempt to run.\n         */\n        this._meshDials = new Map();\n        /** fp -> { attempts, nextAt }. Backoff for pairs that will not connect. */\n        this._meshFailures = new Map();\n        /** Sessions this group built itself, so destroy() can close them. */\n        this._meshSessions = new Set();\n        /** Sessions a probe has already been sent on, so it is sent once. */\n        this._probed = new Set();\n        /** The coalescing timer for _meshMaintain, or null when none is armed. */\n        this._meshPass = null;\n\n        /**\n         * The call this group is currently holding, or null.\n         *\n         * { callId, startedBy, withVideo, startedAt, participants: Set<fp>, joined }\n         *\n         * `joined` is about US specifically: a call can be running with three\n         * people in it while we have not picked up, and the difference decides\n         * whether this device is capturing a microphone. It is never inferred\n         * from the participant set, because a member could otherwise put us in a\n         * call by naming us in one.\n         */\n        this.call = null;\n        /** Our own counter over call frames. Monotonic; never reset within an epoch. */\n        this.callSeq = 0;\n        /** fp -> highest call sequence seen, so a captured frame cannot be replayed. */\n        this._callSeen = new Map();\n    }\n\n    // -----------------------------------------------------------------------\n    // lifecycle\n    // -----------------------------------------------------------------------\n\n    static newId() {\n        return newGroupId();\n    }\n\n    async init() {\n        if (this.identity) return this.identity;\n        this.identity = await generateGroupIdentity(this.subtle);\n        this.members.set(this.identity.fingerprint, {\n            fp: this.identity.fingerprint,\n            name: 'You',\n            spki: this.identity.spki,\n            publicKey: null, // our own key verifies nothing inbound\n            sessionId: null,\n            state: MEMBER_STATE.SELF,\n        });\n        if (this.isAdmin) this.adminFp = this.identity.fingerprint;\n        return this.identity;\n    }\n\n    get selfFp() {\n        return this.identity?.fingerprint || '';\n    }\n\n    destroy() {\n        this._destroyed = true;\n        for (const t of this._timers) clearTimeout(t);\n        this._timers.clear();\n        try { this.ceremony?.destroy(); } catch (_) {}\n        this.ceremony = null;\n\n        // Connections this group opened are this group's to close. They exist\n        // nowhere in the app's chat list, so nothing else would ever reap them\n        // and a torn-down group would leave live peer connections behind.\n        for (const sessionId of this._meshSessions) {\n            try { this._mesh?.close(sessionId); } catch (_) {}\n        }\n        this._meshSessions.clear();\n        this._meshDials.clear();\n        this._meshFailures.clear();\n        this._probed.clear();\n\n        this.call = null;\n        this._callSeen.clear();\n\n        this.members.clear();\n        this.sessionToFp.clear();\n\n        this.transcript.clear();\n        this._pendingCeremony = [];\n        this._pendingKeys.clear();\n        this._pendingAdd = null;\n        this.identity = null;\n    }\n\n    _timer(fn, ms) {\n        const t = setTimeout(() => { this._timers.delete(t); if (!this._destroyed) fn(); }, ms);\n        this._timers.add(t);\n        return t;\n    }\n\n    _fail(code) {\n        if (this._destroyed) return;\n        this._log('warn', 'group ceremony failed', { code });\n        this.phase = GROUP_PHASE.FAILED;\n        try { this.ceremony?.destroy(); } catch (_) {}\n        this.ceremony = null;\n        this._emit('error', { error: code });\n    }\n\n    _setPhase(phase) {\n        if (this.phase === phase) return;\n        this.phase = phase;\n        // Any phase other than READY means nothing is currently confirmed.\n        if (phase !== GROUP_PHASE.READY) this.sasConfirmed = false;\n        // The code itself only survives from the moment it is computed\n        // (AWAITING_SAS) until the group leaves READY. Clearing it on the way\n        // INTO AWAITING_SAS would erase the digits _maybeFinish just derived.\n        if (phase !== GROUP_PHASE.READY && phase !== GROUP_PHASE.AWAITING_SAS) {\n            this.sasCode = '';\n        }\n        this._emit('phase', { phase });\n    }\n\n    /** The member list in the shape the reducer stores. */\n    _memberSnapshot() {\n        return [...this.members.values()].map((m) => ({\n            fp: m.fp, name: m.name, sessionId: m.sessionId, state: m.state,\n        }));\n    }\n\n    _emitMembers() {\n        this._pruneCall();\n        this._emit('members', { members: this._memberSnapshot(), epoch: this.epoch });\n    }\n\n    /**\n     * Drop anyone from the current call who is no longer a member.\n     *\n     * Membership can change under a call \u2014 the admin removes somebody, a roster\n     * for a new epoch arrives \u2014 and a participant list that outlives the roster\n     * would show a person in the call who is not in the group, which is exactly\n     * the kind of stale claim a group must not make about who can hear it.\n     */\n    _pruneCall() {\n        if (!this.call) return;\n        let changed = false;\n        for (const fp of [...this.call.participants]) {\n            if (!this.members.has(fp)) { this.call.participants.delete(fp); changed = true; }\n        }\n        if (this.call.participants.size === 0) { this.call = null; changed = true; }\n        if (changed) this._emit('call', { call: this.getCallSnapshot() });\n    }\n\n    // -----------------------------------------------------------------------\n    // routing\n    // -----------------------------------------------------------------------\n\n    /** Members we can reach over their own pairwise link right now. */\n    _directPeers() {\n        return [...this.members.values()].filter(\n            (m) => m.state === MEMBER_STATE.LINKED && m.sessionId,\n        );\n    }\n\n    /**\n     * Whoever can carry a frame to a member we cannot reach ourselves.\n     *\n     * The admin is preferred because by construction it holds a link to every\n     * member; any other directly-linked member is a fallback for when the admin\n     * is the one that has gone away.\n     */\n    _relayFor(toFp) {\n        const admin = this.members.get(this.adminFp);\n        if (admin && admin.state === MEMBER_STATE.LINKED && admin.sessionId && admin.fp !== toFp) {\n            return admin;\n        }\n        return this._directPeers().find((m) => m.fp !== toFp) || null;\n    }\n\n    /**\n     * Put a frame on the wire, wrapped.\n     *\n     * Every outbound frame goes through here so the envelope is applied in\n     * exactly one place \u2014 a frame sent raw would be silently mangled by the\n     * chat path's sanitiser rather than rejected, which is the worst way for\n     * this to fail.\n     */\n    async _wire(sessionId, frame) {\n        return this._send(sessionId, encodeEnvelope(frame));\n    }\n\n    /** Send one frame to one member, directly if we can and relayed if we cannot. */\n    async _sendTo(toFp, frame) {\n        const member = this.members.get(toFp);\n        if (!member || member.fp === this.selfFp) return false;\n\n        if (member.state === MEMBER_STATE.LINKED && member.sessionId) {\n            await this._wire(member.sessionId, frame);\n            return true;\n        }\n        const relay = this._relayFor(toFp);\n        if (!relay) return false;\n        await this._wire(relay.sessionId, {\n            type: GROUP_FRAMES.RELAY,\n            gid: this.groupId,\n            to: toFp,\n            hopped: false,\n            inner: frame,\n        });\n\n        // A relay hop is unacknowledged \u2014 we hand the frame to a member who may\n        // or may not be able to reach the target, and nothing comes back either\n        // way. For a member we have never held a link to, that is simply the\n        // normal path and the best that can be said. For one whose link we LOST,\n        // it is a guess: reporting it as delivered would tell the sender their\n        // message arrived when there is no reason to believe it did. The frame\n        // still goes \u2014 the target may be reachable from elsewhere in the mesh \u2014\n        // it just does not count toward the delivery the sender is shown.\n        return member.state !== MEMBER_STATE.LOST;\n    }\n\n    /**\n     * Fan a frame out to every other member. Failures are per-recipient.\n     *\n     * Returns WHO could not be reached as well as how many could, because a\n     * count on its own cannot tell \"Alice is offline\" from \"Bob is offline\" \u2014\n     * and the sender is the only person in a position to know the difference.\n     */\n    async _broadcast(frame, { exclude = [] } = {}) {\n        const targets = [...this.members.keys()].filter(\n            (fp) => fp !== this.selfFp && !exclude.includes(fp),\n        );\n        const results = await Promise.allSettled(targets.map((fp) => this._sendTo(fp, frame)));\n        const unreachable = [];\n        let delivered = 0;\n        results.forEach((result, i) => {\n            if (result.status === 'fulfilled' && result.value === true) {\n                delivered += 1;\n                return;\n            }\n            const member = this.members.get(targets[i]);\n            unreachable.push({ fp: targets[i], name: member?.name || 'A member' });\n        });\n        return { delivered, unreachable };\n    }\n\n    // -----------------------------------------------------------------------\n    // link bookkeeping (driven by the app as pairwise sessions come and go)\n    // -----------------------------------------------------------------------\n\n    /**\n     * Bind a pairwise session to a member. Called for the admin's own invites and\n     * whenever a member is reached over a session for the first time.\n     */\n    bindSession(fp, sessionId, state = MEMBER_STATE.LINKED) {\n        const member = this.members.get(fp);\n        if (!member) return false;\n        // A member never holds two links at once. Rebinding to a new session \u2014\n        // a mesh dial that succeeded where an old link had dropped, or a chat\n        // the user rebuilt by hand \u2014 has to drop the stale mapping, or a frame\n        // arriving on the dead session id would still be attributed to them.\n        if (member.sessionId && member.sessionId !== sessionId) {\n            this.sessionToFp.delete(member.sessionId);\n            this._closeMeshSession(member.sessionId);\n        }\n        member.sessionId = sessionId;\n        member.state = state;\n        if (sessionId) this.sessionToFp.set(sessionId, fp);\n        this._emitMembers();\n        return true;\n    }\n\n    /**\n     * Detach a member from whatever link it was on, back to the relay path.\n     *\n     * Used when a mesh dial fails: the half-built session is closed and the\n     * member returns to being reachable only through someone else, which is\n     * where they were before the dial started. Deliberately does NOT change the\n     * member's state to LOST \u2014 they are not offline, we just have no direct\n     * route to them.\n     */\n    unbindSession(fp) {\n        const member = this.members.get(fp);\n        if (!member || !member.sessionId) return false;\n        const sessionId = member.sessionId;\n        this.sessionToFp.delete(sessionId);\n        member.sessionId = null;\n        if (member.state === MEMBER_STATE.LINKED || member.state === MEMBER_STATE.LOST) {\n            member.state = MEMBER_STATE.PENDING;\n        }\n        this._closeMeshSession(sessionId);\n        this._emitMembers();\n        // The member has no route of their own now, so the mesh should look at\n        // building one. This is what makes a link dying recoverable rather than\n        // permanent: the pair goes back to the relay and dials again.\n        this._scheduleMeshMaintain();\n        return true;\n    }\n\n    /** A pairwise session changed state; reflect it on whichever member owns it. */\n    setSessionState(sessionId, connected) {\n        const fp = this.sessionToFp.get(sessionId);\n        if (!fp) return;\n        const member = this.members.get(fp);\n        if (!member || member.state === MEMBER_STATE.SELF) return;\n        const next = connected ? MEMBER_STATE.LINKED : MEMBER_STATE.LOST;\n        if (member.state === next) return;\n        member.state = next;\n        this._emitMembers();\n\n        // A dial that reached LINKED is finished; stop its timer before it fires\n        // and tears down the very link it was guarding. A link that DROPPED is\n        // also settled \u2014 the dial is over either way \u2014 but the failure counter\n        // is left alone, because a link that worked and then died says nothing\n        // about whether the pair can connect.\n        if (connected) this._settleDial(fp);\n        // Either edge changes the picture: a member who came up may be the relay\n        // some other pair was waiting for, and a member who went down may have\n        // been the only route to somebody.\n        this._scheduleMeshMaintain();\n    }\n\n    // -----------------------------------------------------------------------\n    // the mesh\n    // -----------------------------------------------------------------------\n    //\n    // Every pair that has no link between it dials one, so that the relay path\n    // becomes the exception it was always described as rather than the way the\n    // whole group runs.\n    //\n    // WHO DIALS\n    // ---------\n    // The member with the smaller fingerprint. That is the entire glare\n    // protocol: both sides compute it from the roster they already agree on, so\n    // exactly one side opens each pair and there is no simultaneous-offer case\n    // to resolve. A member that receives an offer from someone it should have\n    // been dialling ITSELF refuses it \u2014 either the peer is confused or somebody\n    // is trying to get two half-open dials fighting over one pair.\n    //\n    // WHEN\n    // ----\n    // Only once the group is READY and the safety code is confirmed. Before\n    // that, the roster's identity keys are keys nobody has vouched for yet, and\n    // a link authenticated by an unconfirmed key is a link authenticated by\n    // nothing. Waiting costs a few seconds of relayed traffic.\n    //\n    // HOW IT IS AUTHENTICATED\n    // -----------------------\n    // The descriptors travel through a relay, so they are signed with the\n    // sender's group identity key and checked against the roster \u2014 see\n    // meshDescriptorPayload in groupCrypto.js for why that is enough and what\n    // it deliberately does not defend against. Once the transport is up, the\n    // SBQ2 in-band exchange runs on it exactly as it does for a 1:1 chat, with\n    // one difference: nobody is asked to compare digits, because the group code\n    // already authenticated the key that signed the descriptor. The app closes\n    // that loop by marking the link verified on the group's authority.\n\n    /**\n     * Is this dial still worth finishing?\n     *\n     * Re-checked after EVERY await inside a dial, and that is not defensive\n     * padding \u2014 both awaits are long. Building a descriptor means gathering ICE,\n     * and verifying a signature is a trip through WebCrypto; either is ample time\n     * for the answer to change.\n     *\n     * The case that made this necessary: a link probe adopts a chat the two\n     * members already had while a dial for the same pair is mid-flight. The\n     * probe binds a link that works. The dial then came back and bound its own\n     * half-built session over the top, downgrading a live link to a pending one\n     * and leaving the pair relaying to each other over a connection that was\n     * never needed. Checking the member's session \u2014 not just our own dial\n     * bookkeeping \u2014 is what catches that.\n     */\n    _dialStillWanted(fp, dial) {\n        if (this._destroyed) return false;\n        if (this._meshDials.get(fp) !== dial) return false;\n        if (this.epoch !== dial.epoch) return false;\n        const member = this.members.get(fp);\n        if (!member) return false;\n        if (member.sessionId && member.sessionId !== dial.sessionId) return false;\n        return true;\n    }\n\n    /** Drop a dial that is no longer wanted, without recording it as a failure. */\n    _abandonDial(fp, dial, sessionId) {\n        if (this._meshDials.get(fp) === dial) {\n            if (dial.timer) { clearTimeout(dial.timer); this._timers.delete(dial.timer); }\n            this._meshDials.delete(fp);\n        }\n        this._meshSessions.delete(sessionId);\n        try { this._mesh?.close(sessionId); } catch (_) {}\n    }\n\n    /** Close and forget a connection this group opened. Never touches a chat. */\n    _closeMeshSession(sessionId) {\n        if (!sessionId || !this._meshSessions.has(sessionId)) return;\n        this._meshSessions.delete(sessionId);\n        try { this._mesh?.close(sessionId); } catch (_) {}\n    }\n\n    /** A dial is over, one way or another. Stops its timer and frees the slot. */\n    _settleDial(fp) {\n        const dial = this._meshDials.get(fp);\n        if (!dial) return;\n        if (dial.timer) { clearTimeout(dial.timer); this._timers.delete(dial.timer); }\n        this._meshDials.delete(fp);\n        this._meshFailures.delete(fp);\n    }\n\n    /**\n     * Give up on one pair, for now.\n     *\n     * The half-built connection is closed and the member goes back to being\n     * reached through somebody else \u2014 which is where they were before the dial\n     * started, so nothing the user can see gets worse. The backoff doubles per\n     * attempt because a pair that cannot connect is usually a network that will\n     * not allow it, and hammering at that produces load rather than links.\n     */\n    _meshFail(fp, code, { tellPeer = true } = {}) {\n        const dial = this._meshDials.get(fp);\n        if (dial) {\n            if (dial.timer) { clearTimeout(dial.timer); this._timers.delete(dial.timer); }\n            this._meshDials.delete(fp);\n            const member = this.members.get(fp);\n            // Only unbind if the member is still on THIS dial's session. If a\n            // real link arrived in the meantime, it is not ours to tear down.\n            if (dial.sessionId && member && member.sessionId === dial.sessionId) {\n                this.unbindSession(fp);\n            } else {\n                this._closeMeshSession(dial.sessionId);\n            }\n        }\n\n        const failure = this._meshFailures.get(fp) || { attempts: 0, nextAt: 0 };\n        failure.attempts += 1;\n        failure.nextAt = Date.now() + TIMEOUTS.MESH_RETRY_MS * 2 ** (failure.attempts - 1);\n        this._meshFailures.set(fp, failure);\n        this._log('warn', 'mesh dial failed', { code, attempts: failure.attempts });\n\n        // Tell the peer so their half of the dial does not sit until it times\n        // out. Best effort by definition \u2014 if we could reach them reliably we\n        // would not be failing.\n        if (tellPeer && this.members.has(fp)) {\n            this._sendTo(fp, {\n                type: GROUP_FRAMES.MESH_ABORT, gid: this.groupId, epoch: this.epoch,\n                from: this.selfFp, to: fp,\n            }).catch(() => {});\n        }\n        this._scheduleMeshMaintain();\n    }\n\n    /**\n     * Cancel every dial in flight and forget every backoff.\n     *\n     * Called when the epoch moves. A dial signed against the old epoch will not\n     * verify against the new one, and a pair that could not connect under the\n     * old membership deserves a fresh chance under the new one. Links that are\n     * already up are untouched \u2014 _onRoster carries them across.\n     */\n    _meshReset() {\n        for (const fp of [...this._meshDials.keys()]) {\n            const dial = this._meshDials.get(fp);\n            if (dial?.timer) { clearTimeout(dial.timer); this._timers.delete(dial.timer); }\n            this._meshDials.delete(fp);\n            const member = this.members.get(fp);\n            if (dial?.sessionId && member && member.sessionId === dial.sessionId) {\n                this.unbindSession(fp);\n            } else {\n                this._closeMeshSession(dial?.sessionId);\n            }\n        }\n        this._meshFailures.clear();\n        this._probed.clear();\n    }\n\n    /**\n     * Ask for a maintenance pass soon rather than now.\n     *\n     * Every edge that could change the answer calls this \u2014 a link coming up, a\n     * dial failing, the code being confirmed \u2014 and several of them fire in a\n     * burst. Coalescing them means one pass sees the settled picture instead of\n     * several passes each acting on a half-updated one.\n     */\n    _scheduleMeshMaintain() {\n        if (this._destroyed || !this._mesh || this._meshPass) return;\n        this._meshPass = this._timer(() => {\n            this._meshPass = null;\n            this._meshMaintain();\n        }, 0);\n    }\n\n    /** Open dials for whoever still has no link, within the concurrency limit. */\n    _meshMaintain() {\n        if (this._destroyed || !this._mesh) return;\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return;\n\n        const now = Date.now();\n        let inFlight = this._meshDials.size;\n        let soonest = Infinity;\n\n        // Fingerprint order, so every member walks the same list and the load of\n        // being dialled is spread the same way everywhere.\n        for (const fp of canonicalFingerprints([...this.members.keys()])) {\n            if (inFlight >= MESH_MAX_CONCURRENT_DIALS) break;\n            const member = this.members.get(fp);\n            if (!member || member.state === MEMBER_STATE.SELF) continue;\n            if (member.sessionId) continue;          // already on a link, or one is being built\n            if (this._meshDials.has(fp)) continue;\n            if (!(this.selfFp < fp)) continue;        // their turn to dial, not ours\n\n            const failure = this._meshFailures.get(fp);\n            if (failure) {\n                if (failure.attempts >= MESH_MAX_ATTEMPTS) continue;\n                if (now < failure.nextAt) { soonest = Math.min(soonest, failure.nextAt); continue; }\n            }\n            // Nothing can carry the offer, so there is no dial to make. When a\n            // relay appears, that link coming up schedules another pass.\n            if (!this._relayFor(fp)) continue;\n\n            inFlight += 1;\n            this._meshDial(fp).catch(() => {});\n        }\n\n        // Re-arm for the earliest pair whose backoff has not expired yet.\n        if (soonest !== Infinity && !this._meshPass) {\n            this._meshPass = this._timer(() => {\n                this._meshPass = null;\n                this._meshMaintain();\n            }, Math.max(0, soonest - now) + 50);\n        }\n    }\n\n    /** Build a descriptor for one peer, sign it, and put it on the relay path. */\n    async _meshDial(fp) {\n        const member = this.members.get(fp);\n        if (!member || member.sessionId || this._meshDials.has(fp)) return;\n\n        const epoch = this.epoch;\n        const nonce = randomBytes(GROUP_LIMITS.MESH_NONCE_BYTES);\n        // The slot is reserved BEFORE the first await. Creating an offer means\n        // gathering ICE, which takes long enough for a second maintenance pass\n        // to run and start a duplicate dial for the same peer.\n        const dial = { role: 'offer', sessionId: null, nonce, epoch, timer: null };\n        this._meshDials.set(fp, dial);\n\n        try {\n            const link = await this._mesh.createOffer(fp);\n            const sessionId = link && link.sessionId;\n            const descriptor = String((link && link.descriptor) || '');\n            if (!sessionId || !descriptor) throw new GroupSessionError('mesh transport produced no descriptor', 'no_descriptor');\n\n            // The world may have moved while ICE was gathering.\n            if (!this._dialStillWanted(fp, dial)) return this._abandonDial(fp, dial, sessionId);\n            dial.sessionId = sessionId;\n            this._meshSessions.add(sessionId);\n            // Bound now, as PENDING: it makes this member's link state\n            // addressable the moment the transport reports in, and PENDING keeps\n            // every frame on the relay path until it actually comes up.\n            this.bindSession(fp, sessionId, MEMBER_STATE.PENDING);\n\n            const sig = await signMeshDescriptor(this.subtle, this.identity.keyPair.privateKey, {\n                groupId: this.groupId, epoch, kind: MESH_KINDS.OFFER,\n                fromFp: this.selfFp, toFp: fp, descriptor, nonce,\n            });\n            const sent = await this._sendTo(fp, {\n                type: GROUP_FRAMES.MESH_OFFER, gid: this.groupId, epoch,\n                from: this.selfFp, to: fp, d: descriptor,\n                n: toB64(nonce), sig: toB64(sig),\n            });\n            if (!sent) throw new GroupSessionError('no route to carry the dial', 'unreachable');\n\n            dial.timer = this._timer(() => this._meshFail(fp, 'dial_timeout'), TIMEOUTS.MESH_DIAL_MS);\n        } catch (error) {\n            this._meshFail(fp, error?.code || 'dial_failed');\n        }\n    }\n\n    async _onMeshOffer(frame) {\n        if (!this._mesh || this._destroyed) return;\n        const from = assertFingerprint(String(frame.from || ''));\n        if (assertFingerprint(String(frame.to || '')) !== this.selfFp) return;\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return;\n\n        const member = this.members.get(from);\n        if (!member || !member.publicKey) {\n            throw new GroupSessionError('mesh dial from a non-member', 'not_a_member');\n        }\n        if (member.sessionId) return;                 // already reachable directly\n        if (this._meshDials.has(from)) return;        // one dial per pair\n        // We are the smaller fingerprint, so dialling this pair is OUR job. An\n        // offer arriving the wrong way round is refused rather than answered.\n        if (this.selfFp < from) return;\n\n        const descriptor = String(frame.d || '');\n        if (!descriptor || descriptor.length > GROUP_LIMITS.MAX_DESCRIPTOR_CHARS) {\n            throw new GroupSessionError('mesh descriptor is missing or oversized', 'bad_descriptor');\n        }\n        const nonce = fromB64(String(frame.n || ''), { max: GROUP_LIMITS.MESH_NONCE_BYTES });\n        const ok = await verifyMeshDescriptor(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch: this.epoch, kind: MESH_KINDS.OFFER,\n            fromFp: from, toFp: this.selfFp, descriptor, nonce,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('mesh dial signature did not verify', 'bad_signature');\n\n        // Re-checked after the signature work: verifying is a trip through\n        // WebCrypto, and a probe can adopt an existing chat for this member in\n        // that window. Answering then would build a second connection to\n        // somebody we are already talking to.\n        if (this._destroyed || member.sessionId || this._meshDials.has(from)) return;\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n\n        const epoch = this.epoch;\n        const dial = { role: 'answer', sessionId: null, nonce, epoch, timer: null };\n        this._meshDials.set(from, dial);\n\n        try {\n            const link = await this._mesh.createAnswer(from, descriptor);\n            const sessionId = link && link.sessionId;\n            const answer = String((link && link.descriptor) || '');\n            if (!sessionId || !answer) throw new GroupSessionError('mesh transport produced no answer', 'no_descriptor');\n\n            if (!this._dialStillWanted(from, dial)) return this._abandonDial(from, dial, sessionId);\n            dial.sessionId = sessionId;\n            this._meshSessions.add(sessionId);\n            this.bindSession(from, sessionId, MEMBER_STATE.PENDING);\n\n            const sig = await signMeshDescriptor(this.subtle, this.identity.keyPair.privateKey, {\n                groupId: this.groupId, epoch, kind: MESH_KINDS.ANSWER,\n                fromFp: this.selfFp, toFp: from, descriptor: answer, nonce,\n            });\n            const sent = await this._sendTo(from, {\n                type: GROUP_FRAMES.MESH_ANSWER, gid: this.groupId, epoch,\n                from: this.selfFp, to: from, d: answer,\n                n: toB64(nonce), sig: toB64(sig),\n            });\n            if (!sent) throw new GroupSessionError('no route to carry the answer', 'unreachable');\n\n            dial.timer = this._timer(() => this._meshFail(from, 'answer_timeout'), TIMEOUTS.MESH_DIAL_MS);\n        } catch (error) {\n            this._meshFail(from, error?.code || 'answer_failed');\n        }\n    }\n\n    async _onMeshAnswer(frame) {\n        if (!this._mesh || this._destroyed) return;\n        const from = assertFingerprint(String(frame.from || ''));\n        if (assertFingerprint(String(frame.to || '')) !== this.selfFp) return;\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n\n        const dial = this._meshDials.get(from);\n        if (!dial || dial.role !== 'offer' || !dial.sessionId || dial.epoch !== this.epoch) return;\n\n        const member = this.members.get(from);\n        if (!member || !member.publicKey) {\n            throw new GroupSessionError('mesh answer from a non-member', 'not_a_member');\n        }\n\n        const descriptor = String(frame.d || '');\n        if (!descriptor || descriptor.length > GROUP_LIMITS.MAX_DESCRIPTOR_CHARS) {\n            throw new GroupSessionError('mesh descriptor is missing or oversized', 'bad_descriptor');\n        }\n        // The nonce we generated for THIS dial, or the answer belongs to another\n        // attempt and is being replayed into this one.\n        const nonce = fromB64(String(frame.n || ''), { max: GROUP_LIMITS.MESH_NONCE_BYTES });\n        if (nonce.length !== dial.nonce.length || !nonce.every((b, i) => b === dial.nonce[i])) {\n            throw new GroupSessionError('mesh answer does not match the dial it claims', 'bad_mesh_nonce');\n        }\n\n        const ok = await verifyMeshDescriptor(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch: this.epoch, kind: MESH_KINDS.ANSWER,\n            fromFp: from, toFp: this.selfFp, descriptor, nonce,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('mesh answer signature did not verify', 'bad_signature');\n\n        try {\n            await this._mesh.acceptAnswer(dial.sessionId, descriptor);\n        } catch (error) {\n            this._meshFail(from, error?.code || 'answer_rejected');\n        }\n        // From here the transport finishes its own handshake; the link is\n        // declared up by setSessionState when it does.\n    }\n\n    _onMeshAbort(frame) {\n        const from = assertFingerprint(String(frame.from || ''));\n        if (assertFingerprint(String(frame.to || '')) !== this.selfFp) return;\n        if (!this._meshDials.has(from)) return;\n        // No abort back \u2014 that is how two peers keep telling each other to stop.\n        this._meshFail(from, 'peer_aborted', { tellPeer: false });\n    }\n\n    // -----------------------------------------------------------------------\n    // link probes\n    // -----------------------------------------------------------------------\n\n    /**\n     * Claim a pairwise chat we already hold as this group's link to a member.\n     *\n     * Two people who were already talking do not need a second connection built\n     * between them, and dialling one anyway would spend a WebRTC negotiation to\n     * arrive back where we started. The app calls this for every verified chat\n     * that is not already carrying a member; whoever is on the other end and is\n     * in this group binds it, and the pair is meshed without dialling anything.\n     *\n     * Sent once per session per epoch. It is a claim about identity, not a\n     * request, so there is nothing to retry.\n     */\n    async probeSession(sessionId) {\n        if (this._destroyed || !this._mesh || !sessionId) return false;\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return false;\n        if (this.sessionToFp.has(sessionId)) return false;\n        return this._sendProbe(sessionId);\n    }\n\n    /**\n     * Sign and send one probe. Once per session per epoch, whatever asked for it.\n     *\n     * Split from probeSession because the two callers disagree about one check:\n     * the app only offers sessions that carry nobody, while an ANSWERING probe\n     * goes out on a session that has just been bound \u2014 by the very probe it is\n     * answering.\n     */\n    async _sendProbe(sessionId) {\n        if (this._destroyed || this._probed.has(sessionId)) return false;\n        const linkFp = this._linkFingerprint(sessionId);\n        if (!linkFp) return false;\n\n        this._probed.add(sessionId);\n        const sig = await signLinkProbe(this.subtle, this.identity.keyPair.privateKey, {\n            groupId: this.groupId, epoch: this.epoch, fp: this.selfFp, linkFp,\n        });\n        await this._wire(sessionId, {\n            type: GROUP_FRAMES.PROBE, gid: this.groupId, epoch: this.epoch,\n            fp: this.selfFp, sig: toB64(sig),\n        });\n        return true;\n    }\n\n    _linkFingerprint(sessionId) {\n        try {\n            const fp = this._mesh?.linkFingerprint?.(sessionId);\n            return typeof fp === 'string' && fp.length > 0 ? fp : '';\n        } catch (_) {\n            return '';\n        }\n    }\n\n    async _onProbe(sessionId, frame) {\n        if (this._destroyed) return;\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return;\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n\n        const fp = assertFingerprint(String(frame.fp || ''));\n        if (fp === this.selfFp) return;\n        const member = this.members.get(fp);\n        if (!member || !member.publicKey) return;\n        if (this.sessionToFp.has(sessionId)) return;  // this session carries someone else\n\n        if (member.sessionId) {\n            // A link that is already carrying traffic is not replaced.\n            if (member.state === MEMBER_STATE.LINKED) return;\n            // But a dial still being built loses to a chat that already works.\n            // The dial is abandoned below; bindSession closes its half-open\n            // connection. Without this the probe would arrive a moment too late\n            // and we would finish building a second connection to somebody we\n            // were already talking to.\n            if (!this._meshDials.has(fp)) return;\n        }\n\n        // The fingerprint of the session the probe ARRIVED on, read locally.\n        // Taking it from the frame would defeat the whole point \u2014 see\n        // linkProbePayload for what this binding is defending against.\n        const linkFp = this._linkFingerprint(sessionId);\n        if (!linkFp) return;\n\n        const ok = await verifyLinkProbe(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch: this.epoch, fp, linkFp,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('link probe signature did not verify', 'bad_signature');\n\n        // A probe only ever arrives on a link that is already up and verified \u2014\n        // it travelled over it \u2014 so this one is LINKED, not PENDING.\n        this._settleDial(fp);\n        this.bindSession(fp, sessionId, MEMBER_STATE.LINKED);\n\n        // Answer in kind, or the adoption is one-sided. The peer now routes to\n        // us over this link, but we are the only ones who know that: without a\n        // probe back they never learn who is on their end, and they would go on\n        // relaying to us through somebody else forever. The once-per-session\n        // guard in _sendProbe is what stops the two sides answering each other\n        // indefinitely.\n        this._sendProbe(sessionId).catch(() => { /* the link works either way */ });\n\n        this._scheduleMeshMaintain();\n    }\n\n    // -----------------------------------------------------------------------\n    // step 1-2: invite / hello\n    // -----------------------------------------------------------------------\n\n    /**\n     * Admin: invite peers we already hold verified 1:1 sessions with.\n     * @param {{sessionId: string, name: string}[]} peers\n     */\n    async invite(peers) {\n        if (!this.isAdmin) throw new GroupSessionError('only the admin invites', 'not_admin');\n        await this.init();\n        if (peers.length + 1 > GROUP_LIMITS.MAX_MEMBERS) {\n            throw new GroupSessionError(`a group is limited to ${GROUP_LIMITS.MAX_MEMBERS} members`, 'too_many_members');\n        }\n        this._setPhase(GROUP_PHASE.FORMING);\n\n        for (const peer of peers) this._awaitingHello.set(peer.sessionId, peer.name || 'Member');\n\n        const frame = {\n            type: GROUP_FRAMES.INVITE,\n            gid: this.groupId,\n            epoch: this.epoch,\n            name: this.name,\n            adminSpki: toB64(this.identity.spki),\n        };\n\n        // Report what actually left the device.\n        //\n        // Swallowing these failures turned a dead link into forty-five seconds of\n        // nothing followed by a generic timeout, which is indistinguishable from\n        // an invitee who simply has not answered. A send that fails for everyone\n        // failed now, and saying so now is the difference between a bug someone\n        // can act on and a group that mysteriously never forms.\n        const results = await Promise.allSettled(peers.map((p) => this._wire(p.sessionId, frame)));\n        const failed = results.filter((r) => r.status === 'rejected');\n        if (failed.length === peers.length) {\n            this._fail('invitations_could_not_be_sent');\n            throw new GroupSessionError(\n                'the invitation could not be sent \u2014 the chat with that peer is not connected',\n                'invitations_could_not_be_sent',\n            );\n        }\n        if (failed.length > 0) {\n            // Some links are down. Those invitees will never send a hello, so the\n            // roster would wait on them forever; drop them from the round.\n            const reachable = peers.filter((_, i) => results[i].status === 'fulfilled');\n            for (const p of peers) {\n                if (!reachable.includes(p)) this._awaitingHello.delete(p.sessionId);\n            }\n            this._emit('partial_invite', { sent: reachable.length, total: peers.length });\n        }\n\n        this._timer(() => {\n            if (this.phase === GROUP_PHASE.FORMING) this._fail('invitees_did_not_respond');\n        }, TIMEOUTS.HELLO_MS);\n    }\n\n    /** Invitee: adopt an invitation and publish our own identity key back. */\n    async acceptInvite(sessionId, envelope) {\n        // The app receives an invitation before any group exists to decode it\n        // with, so it may hand back either the envelope or the frame inside.\n        const frame = decodeEnvelope(envelope);\n        await this.init();\n        const adminSpki = fromB64(String(frame.adminSpki || ''));\n        const { publicKey, fingerprint } = await importMemberIdentity(this.subtle, adminSpki);\n        this.adminFp = fingerprint;\n        this.epoch = assertEpoch(frame.epoch);\n        this.name = assertName(frame.name);\n\n        this.members.set(fingerprint, {\n            fp: fingerprint,\n            name: 'Admin',\n            spki: adminSpki,\n            publicKey,\n            sessionId,\n            state: MEMBER_STATE.LINKED,\n        });\n        this.sessionToFp.set(sessionId, fingerprint);\n        this._setPhase(GROUP_PHASE.FORMING);\n        this._emitMembers();\n\n        await this._wire(sessionId, {\n            type: GROUP_FRAMES.HELLO,\n            gid: this.groupId,\n            epoch: this.epoch,\n            spki: toB64(this.identity.spki),\n        });\n\n        this._timer(() => {\n            if (this.phase === GROUP_PHASE.FORMING) this._fail('roster_never_arrived');\n        }, TIMEOUTS.HELLO_MS);\n    }\n\n    async _onHello(sessionId, frame) {\n        if (!this.isAdmin) return; // only the admin collects identity keys\n\n        // A hello is only ever an ANSWER to an invitation this admin sent, on\n        // the very session it was sent over. Without that check the frame is an\n        // open door: any member \u2014 or anyone else who holds a verified chat with\n        // the admin and has learnt the group id \u2014 could publish an identity key\n        // the admin never invited, and the branch at the end of this method\n        // would then sign and broadcast a roster containing it. \"Only the admin\n        // invites\" has to be enforced here, because this is the only place a\n        // member is created from something that arrived on the wire.\n        //\n        // It also confines the frame to a DIRECT link. A hello can be wrapped in\n        // a relay and handed to the admin by a third party, and _onRelay hands\n        // the inner frame on with the RELAY's session id \u2014 which is never a\n        // session an invitation went out on, so such a frame lands here and\n        // stops.\n        if (!this._awaitingHello.has(sessionId)) {\n            this._log('warn', 'dropped an unsolicited group hello', { groupId: this.groupId });\n            return;\n        }\n\n        const spki = fromB64(String(frame.spki || ''));\n        const { publicKey, fingerprint } = await importMemberIdentity(this.subtle, spki);\n        if (this.members.has(fingerprint) && fingerprint !== this.selfFp) return;\n        if (this.members.size >= GROUP_LIMITS.MAX_MEMBERS) throw new GroupSessionError('group is full', 'too_many_members');\n\n        this.members.set(fingerprint, {\n            fp: fingerprint,\n            name: this._awaitingHello.get(sessionId) || 'Member',\n            spki,\n            publicKey,\n            sessionId,\n            state: MEMBER_STATE.LINKED,\n        });\n        this.sessionToFp.set(sessionId, fingerprint);\n        this._awaitingHello.delete(sessionId);\n        this._emitMembers();\n\n        if (this._awaitingHello.size === 0) {\n            if (this._pendingAdd) return this._finishAdd();\n            await this.publishRoster(MEMBER_OPS.CREATE);\n        }\n    }\n\n    // -----------------------------------------------------------------------\n    // step 3: the signed roster\n    // -----------------------------------------------------------------------\n\n    /** Admin: sign the current member set for this epoch and broadcast it. */\n    async publishRoster(op = MEMBER_OPS.ADD) {\n        if (!this.isAdmin) throw new GroupSessionError('only the admin publishes the roster', 'not_admin');\n        const memberFps = canonicalFingerprints([...this.members.keys()]);\n        const fields = { groupId: this.groupId, epoch: this.epoch, op, memberFps, name: this.name };\n        const sig = await signMemberOp(this.subtle, this.identity.keyPair.privateKey, fields);\n\n        // Member keys go out one frame each, BEFORE the roster that names them.\n        //\n        // They cannot ride inside the roster: eight members' SPKI would put the\n        // frame past the 2000-character ceiling the chat path truncates at, and a\n        // truncated roster fails in the most confusing way possible. Splitting\n        // them costs nothing in security, because the signed roster commits to\n        // the FINGERPRINTS \u2014 a key that arrives separately is checked against the\n        // fingerprint it claims, so a substituted key is refused whichever frame\n        // carried it.\n        for (const fp of memberFps) {\n            const m = this.members.get(fp);\n            await this._broadcast({\n                type: GROUP_FRAMES.MEMBER,\n                gid: this.groupId,\n                epoch: this.epoch,\n                fp,\n                name: m.name === 'You' ? 'Admin' : m.name,\n                spki: toB64(m.spki),\n            });\n        }\n\n        await this._broadcast({\n            type: GROUP_FRAMES.ROSTER,\n            gid: this.groupId,\n            epoch: this.epoch,\n            op,\n            name: this.name,\n            adminSpki: toB64(this.identity.spki),\n            members: memberFps,\n            sig: toB64(sig),\n        });\n        await this._startCeremony();\n    }\n\n    /**\n     * A member's identity key, published ahead of the roster that names them.\n     *\n     * Held in a staging area rather than applied: until the admin's signed roster\n     * arrives, a key frame is an unverified claim about who is in the group. The\n     * fingerprint is derived from the bytes, never taken from the frame, so a\n     * member cannot register a key under someone else's name.\n     */\n    async _onMemberKey(frame) {\n        const epoch = assertEpoch(frame.epoch);\n        if (epoch < this.epoch) return;\n        if (this._pendingKeys.size > GROUP_LIMITS.MAX_MEMBERS * 2) return;\n\n        const spki = fromB64(String(frame.spki || ''));\n        const { publicKey, fingerprint } = await importMemberIdentity(this.subtle, spki);\n        if (assertFingerprint(String(frame.fp || '')) !== fingerprint) {\n            throw new GroupSessionError('member key does not match its fingerprint', 'fingerprint_mismatch');\n        }\n        this._pendingKeys.set(fingerprint, { spki, publicKey, name: assertName(frame.name) });\n    }\n\n    /**\n     * Member: adopt a roster.\n     *\n     * The admin's signature is checked against the key whose fingerprint IS the\n     * admin fingerprint we recorded at invite time \u2014 not against whatever key the\n     * frame happens to carry \u2014 so a member cannot promote itself by attaching its\n     * own key to a roster. The epoch must move forward, which refuses both a\n     * replay and a rollback to a membership that used to be valid.\n     */\n    async _onRoster(sessionId, frame) {\n        const epoch = assertEpoch(frame.epoch);\n        if (this.isAdmin) return; // we authored it\n        if (epoch < this.epoch) throw new GroupSessionError('roster epoch went backwards', 'stale_epoch');\n\n        const adminSpki = fromB64(String(frame.adminSpki || ''));\n        const { publicKey: adminKey, fingerprint: adminFp } = await importMemberIdentity(this.subtle, adminSpki);\n        if (this.adminFp && adminFp !== this.adminFp) {\n            throw new GroupSessionError('roster was signed by someone other than the admin', 'wrong_admin');\n        }\n\n        if (!Array.isArray(frame.members)) throw new GroupSessionError('roster carries no member list', 'bad_roster');\n        if (frame.members.length > GROUP_LIMITS.MAX_MEMBERS) throw new GroupSessionError('roster exceeds the member limit', 'too_many_members');\n\n        const memberFps = canonicalFingerprints(frame.members.map((fp) => String(fp || '')));\n        if (!memberFps.includes(this.selfFp)) throw new GroupSessionError('roster does not include us', 'not_a_member');\n        if (!memberFps.includes(adminFp)) throw new GroupSessionError('roster does not include its author', 'bad_roster');\n\n        // Match each named member to the key frame that arrived ahead of the\n        // roster. A member the admin names but whose key never arrived is a\n        // member we could not verify a single message from, so the roster is\n        // refused outright rather than adopted with a hole in it.\n        const imported = [];\n        for (const fp of memberFps) {\n            if (fp === this.selfFp) {\n                imported.push({ fp, name: 'You', spki: this.identity.spki, publicKey: null });\n                continue;\n            }\n            const staged = this._pendingKeys.get(fp) || (fp === adminFp\n                ? { spki: adminSpki, publicKey: adminKey, name: 'Admin' }\n                : null);\n            if (!staged) throw new GroupSessionError('roster names a member whose key never arrived', 'missing_member_key');\n            imported.push({ fp, name: staged.name, spki: staged.spki, publicKey: staged.publicKey });\n        }\n\n        const ok = await verifyMemberOp(this.subtle, adminKey, {\n            groupId: this.groupId, epoch, op: String(frame.op || ''),\n            memberFps, name: assertName(frame.name),\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('roster signature did not verify', 'bad_signature');\n\n        // Adopt. Existing links are preserved: the session we already hold with\n        // the admin (and with anyone else) stays bound to the same fingerprint.\n        this.epoch = epoch;\n        this.name = assertName(frame.name);\n        this.adminFp = adminFp;\n\n        const previous = this.members;\n        this.members = new Map();\n        for (const m of imported) {\n            const old = previous.get(m.fp);\n            this.members.set(m.fp, {\n                fp: m.fp,\n                name: m.fp === this.selfFp ? 'You' : m.name,\n                spki: m.spki,\n                publicKey: m.fp === this.selfFp ? null : m.publicKey,\n                sessionId: old?.sessionId || null,\n                state: m.fp === this.selfFp ? MEMBER_STATE.SELF\n                    : (old?.state === MEMBER_STATE.LINKED ? MEMBER_STATE.LINKED : MEMBER_STATE.PENDING),\n            });\n        }\n        // Drop session bindings for members who left.\n        for (const [sid, fp] of [...this.sessionToFp]) {\n            if (!this.members.has(fp)) this.sessionToFp.delete(sid);\n        }\n\n        this._emit('roster', { name: this.name, epoch: this.epoch, adminFp });\n        this._emitMembers();\n        await this._startCeremony();\n    }\n\n    // -----------------------------------------------------------------------\n    // steps 4-6: the safety code ceremony\n    // -----------------------------------------------------------------------\n\n    async _startCeremony() {\n        try { this.ceremony?.destroy(); } catch (_) {}\n        // A new round means a new epoch, and every dial in flight was signed\n        // against the old one. Abandon them rather than let them arrive as\n        // signatures that cannot verify; links already up are kept.\n        this._meshReset();\n        this.ceremony = new GroupSasCeremony({\n            groupId: this.groupId,\n            epoch: this.epoch,\n            selfFingerprint: this.selfFp,\n            memberFingerprints: [...this.members.keys()],\n        });\n        this._setPhase(GROUP_PHASE.COMMITTING);\n\n        const commitment = await this.ceremony.ownCommitment(this.subtle);\n\n        // Our commitment goes out BEFORE anything held is replayed, and the order\n        // is load-bearing.\n        //\n        // Draining first can complete the commit round on the spot \u2014 every peer\n        // commitment may already be waiting \u2014 which reveals our nonce and puts a\n        // reveal on the wire ahead of our own commitment. A peer then has a reveal\n        // it cannot check yet and has to hold it until our commitment turns up,\n        // so the round only completes if that one later frame arrives. It made\n        // correctness depend on a peer's buffer instead of on the protocol, and a\n        // single dropped commitment left every member waiting on a nonce that had\n        // already been sent.\n        await this._broadcast({\n            type: GROUP_FRAMES.COMMIT,\n            gid: this.groupId,\n            epoch: this.epoch,\n            fp: this.selfFp,\n            commit: toB64(commitment),\n        });\n\n        const epochAtStart = this.epoch;\n        this._timer(() => {\n            if (this.epoch !== epochAtStart) return;\n            if (this.phase === GROUP_PHASE.COMMITTING || this.phase === GROUP_PHASE.REVEALING) {\n                this._fail('ceremony_timed_out');\n            }\n        }, TIMEOUTS.CEREMONY_MS);\n\n        // Only now replay what arrived before this ceremony existed. Our\n        // commitment is already on the wire, so a reveal this produces can never\n        // outrun it.\n        await this._drainPendingCeremony();\n        await this._maybeReveal();\n    }\n\n    /** Hold a ceremony frame that outran our own roster. See _pendingCeremony. */\n    _holdCeremonyFrame(frame) {\n        // Two frames per member per epoch is all that can legitimately be\n        // outstanding; the cap keeps a chatty member from growing this without\n        // bound while we wait for a roster.\n        if (this._pendingCeremony.length >= GROUP_LIMITS.MAX_MEMBERS * 2) return;\n        this._pendingCeremony.push(frame);\n    }\n\n    async _drainPendingCeremony() {\n        // Re-entrancy guard: draining calls the same handlers that hold frames,\n        // and a frame that is still premature is put back for the next drain.\n        if (this._draining) return;\n        this._draining = true;\n        try {\n            const held = this._pendingCeremony;\n            this._pendingCeremony = [];\n            for (const frame of held) {\n                try {\n                    if (frame.type === GROUP_FRAMES.COMMIT) await this._onCommit(frame);\n                    else if (frame.type === GROUP_FRAMES.REVEAL) await this._onReveal(frame);\n                } catch (error) {\n                    // A held frame that no longer makes sense (wrong epoch, a\n                    // member dropped from the roster) is discarded, not fatal.\n                    this._log('warn', 'held ceremony frame discarded', { code: error?.code });\n                }\n            }\n        } finally {\n            this._draining = false;\n        }\n    }\n\n    async _onCommit(frame) {\n        if (!this.ceremony) return this._holdCeremonyFrame(frame);\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n        this.ceremony.acceptCommitment(\n            assertFingerprint(String(frame.fp || '')),\n            fromB64(String(frame.commit || ''), { max: GROUP_LIMITS.COMMIT_BYTES }),\n        );\n        // A reveal we had to hold may now have the commitment it needs.\n        await this._drainPendingCeremony();\n        await this._maybeReveal();\n    }\n\n    /**\n     * Publish our nonce, but only once every commitment is in.\n     *\n     * The check lives in GroupSasCeremony.reveal(), which throws otherwise. This\n     * method only asks whether the round is complete \u2014 it must never be changed\n     * to reveal on a timer or on a partial round.\n     */\n    async _maybeReveal() {\n        if (!this.ceremony || this.ceremony.revealed) return;\n        if (!this.ceremony.commitmentsComplete) return;\n\n        this._setPhase(GROUP_PHASE.REVEALING);\n        const nonce = this.ceremony.reveal();\n        await this._broadcast({\n            type: GROUP_FRAMES.REVEAL,\n            gid: this.groupId,\n            epoch: this.epoch,\n            fp: this.selfFp,\n            nonce: toB64(nonce),\n        });\n        await this._maybeFinish();\n    }\n\n    async _onReveal(frame) {\n        if (!this.ceremony) return this._holdCeremonyFrame(frame);\n        if (assertEpoch(frame.epoch) !== this.epoch) return;\n        // A reveal can also outrun the commitment it opens, on a link where the\n        // two frames took different paths. Hold it rather than failing the\n        // ceremony for an ordering the network chose.\n        if (!this.ceremony.commitments.has(assertFingerprint(String(frame.fp || '')))) {\n            return this._holdCeremonyFrame(frame);\n        }\n        await this.ceremony.acceptReveal(\n            this.subtle,\n            assertFingerprint(String(frame.fp || '')),\n            fromB64(String(frame.nonce || ''), { max: GROUP_LIMITS.NONCE_BYTES }),\n        );\n        await this._maybeFinish();\n    }\n\n    async _maybeFinish() {\n        if (!this.ceremony || !this.ceremony.revealsComplete) return;\n        // Reached from both _onReveal and _maybeReveal, so it must be idempotent:\n        // the round produces one code and computing it twice is not an error.\n        if (this.sasCode) return;\n        const code = await this.ceremony.finish(this.subtle);\n        this._setPhase(GROUP_PHASE.AWAITING_SAS);\n        this.sasCode = code;\n        this._emit('sas', { code });\n    }\n\n    /**\n     * The humans compared the digits and they matched.\n     *\n     * This is the only path to READY, and it is driven by a user action \u2014 never\n     * by a frame arriving. It mirrors the 1:1 rule: completing a handshake proves\n     * somebody completed it, and only the out-of-band comparison proves who.\n     */\n    confirmSas() {\n        if (this.phase !== GROUP_PHASE.AWAITING_SAS || !this.sasCode) {\n            throw new GroupSessionError('there is no group code to confirm', 'no_code');\n        }\n        this.sasConfirmed = true;\n        this.phase = GROUP_PHASE.READY;\n        try { this.ceremony?.destroy(); } catch (_) {}\n        this.ceremony = null;\n        this._emit('confirmed', { members: this._memberSnapshot() });\n        // The moment the human vouches for the code, the roster's identity keys\n        // become keys worth authenticating a transport with. This is the gate\n        // the whole mesh waits behind.\n        this._scheduleMeshMaintain();\n    }\n\n    /** Recompute the code for the current epoch \u2014 used only by tests and diagnostics. */\n    async _recomputeSas(contributions) {\n        return computeGroupSas(this.subtle, {\n            groupId: this.groupId, epoch: this.epoch, contributions,\n        });\n    }\n\n    // -----------------------------------------------------------------------\n    // step 7: messages\n    // -----------------------------------------------------------------------\n\n    async sendText(text) {\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) {\n            throw new GroupSessionError('the group code has not been confirmed', 'not_ready');\n        }\n        const body = String(text ?? '');\n        if (!body.trim()) throw new GroupSessionError('empty message', 'empty');\n\n        const seq = ++this.seq;\n        const bodyHash = await hashBody(this.subtle, body);\n        const sig = await signGroupMessage(this.subtle, this.identity.keyPair.privateKey, {\n            groupId: this.groupId, epoch: this.epoch, seq, senderFp: this.selfFp, bodyHash,\n        });\n\n        const frame = {\n            type: GROUP_FRAMES.MESSAGE,\n            gid: this.groupId,\n            epoch: this.epoch,\n            seq,\n            fp: this.selfFp,\n            ts: Date.now(),\n            body,\n            sig: toB64(sig),\n        };\n        const { delivered, unreachable } = await this._broadcast(frame);\n        return { seq, delivered, total: this.members.size - 1, unreachable };\n    }\n\n    async _onMessage(frame, { relayed = false } = {}) {\n        const epoch = assertEpoch(frame.epoch);\n        const seq = assertEpoch(frame.seq);\n        const senderFp = assertFingerprint(String(frame.fp || ''));\n\n        if (senderFp === this.selfFp) return; // our own frame came back around\n        const member = this.members.get(senderFp);\n        if (!member || !member.publicKey) throw new GroupSessionError('message from a non-member', 'not_a_member');\n\n        // A message from an epoch we have left is not applied: its signature is\n        // valid but it belongs to a membership that no longer holds.\n        if (epoch !== this.epoch) throw new GroupSessionError('message from another epoch', 'stale_epoch');\n\n        const body = String(frame.body ?? '');\n        const bodyHash = await hashBody(this.subtle, body);\n        const ok = await verifyGroupMessage(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch, seq, senderFp, bodyHash,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('message signature did not verify', 'bad_signature');\n\n        // Transcript consistency AND duplicate suppression, in that order \u2014\n        // which is the whole point. Fan-out plus relay means the same frame\n        // legitimately arrives twice, so a repeat has to be absorbed silently.\n        // But \"same sender, same sequence number\" is NOT enough to call something\n        // a duplicate: a member telling two halves of the group different things\n        // does exactly that, and deduplicating on the key alone would hide the\n        // split this record exists to catch. The body hash is what separates the\n        // two cases.\n        const byMember = this.transcript.get(senderFp) || new Map();\n        const hashHex = toB64(bodyHash);\n        const previous = byMember.get(seq);\n        if (previous !== undefined) {\n            if (previous === hashHex) return; // the same message, arriving again\n            this._emit('inconsistency', { fp: senderFp, seq, name: member.name });\n            throw new GroupSessionError('member sent conflicting messages under one sequence number', 'transcript_split');\n        }\n\n        byMember.set(seq, hashHex);\n        // Bounded per sender. The pairwise ratchet already refuses genuinely old\n        // frames, so this window only has to outlast fan-out and one relay hop.\n        if (byMember.size > 512) byMember.delete(byMember.keys().next().value);\n        this.transcript.set(senderFp, byMember);\n\n        this._emit('message', {\n            fp: senderFp,\n            name: member.name,\n            body,\n            seq,\n            ts: Number.isFinite(frame.ts) ? frame.ts : Date.now(),\n            // Whether this particular copy came straight from its author or was\n            // carried by another member. Worth showing: a relayed message is one\n            // a third member knew the timing of, and the reader is the only one\n            // in a position to notice that is still happening.\n            relayed,\n        });\n    }\n\n    // -----------------------------------------------------------------------\n    // calls\n    // -----------------------------------------------------------------------\n    //\n    // WHAT TRAVELS HERE AND WHAT DOES NOT\n    // -----------------------------------\n    // Only the roster of a call: somebody opened one, somebody joined it,\n    // somebody left. No SDP, no ICE, no audio, no video. Media is carried by the\n    // pairwise sessions themselves \u2014 each member places an ordinary encrypted\n    // call to each other member over the link they already share, so a group\n    // call is N-1 of the 1:1 calls this app already makes, on transports that\n    // were already SAS-verified. There is no mixer, no conference server and no\n    // point at which two people's audio meets anywhere but on a device.\n    //\n    // That is why call control is separate from the media path. Control has to\n    // reach every member, including one who is currently reachable only through\n    // a relay; media can only flow where a direct link exists. Splitting them\n    // means a member with no direct link still SEES the call and can be dialled\n    // into it as the mesh completes, instead of silently missing it.\n    //\n    // WHY THESE FRAMES ARE SIGNED\n    // ---------------------------\n    // A relaying member carries call control for pairs that cannot reach each\n    // other. Unsigned, that member could add somebody to a call they never\n    // joined, or drop somebody who is in one, and nobody could tell it had\n    // happened. Signed with the group identity key, a relay can still refuse to\n    // carry a frame \u2014 the same availability cost relaying always has \u2014 but it\n    // cannot write one.\n\n    /** What the app renders. Null when there is no call. */\n    getCallSnapshot() {\n        if (!this.call) return null;\n        const starter = this.members.get(this.call.startedBy);\n        return {\n            callId: this.call.callId,\n            startedBy: this.call.startedBy,\n            startedByName: this.call.startedBy === this.selfFp\n                ? 'You'\n                : (starter?.name || 'A member'),\n            withVideo: this.call.withVideo,\n            startedAt: this.call.startedAt,\n            joined: this.call.joined,\n            participants: [...this.call.participants].map((fp) => {\n                const member = this.members.get(fp);\n                return {\n                    fp,\n                    name: fp === this.selfFp ? 'You' : (member?.name || 'A member'),\n                    self: fp === this.selfFp,\n                    sessionId: member?.sessionId || null,\n                    state: member?.state || MEMBER_STATE.LOST,\n                };\n            }).sort((a, b) => (a.fp < b.fp ? -1 : a.fp > b.fp ? 1 : 0)),\n        };\n    }\n\n    _emitCall() {\n        this._emit('call', { call: this.getCallSnapshot() });\n    }\n\n    _requireReady() {\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) {\n            throw new GroupSessionError('the group code has not been confirmed', 'not_ready');\n        }\n    }\n\n    /** Sign and fan out one call-control frame. */\n    async _sendCallFrame(action, callId, withVideo) {\n        const seq = ++this.callSeq;\n        const sig = await signGroupCall(this.subtle, this.identity.keyPair.privateKey, {\n            groupId: this.groupId, epoch: this.epoch, callId, action,\n            fp: this.selfFp, seq, withVideo,\n        });\n        return this._broadcast({\n            type: GROUP_FRAMES.CALL,\n            gid: this.groupId,\n            epoch: this.epoch,\n            callId,\n            action,\n            fp: this.selfFp,\n            seq,\n            v: withVideo === true,\n            ts: Date.now(),\n            sig: toB64(sig),\n        });\n    }\n\n    /**\n     * Open a call and put ourselves in it.\n     *\n     * Refused while one is already running: joining the call that exists is what\n     * the user means, and a second concurrent call would split the group into two\n     * rooms that cannot hear each other.\n     */\n    async startCall({ withVideo = false, prepare = null } = {}) {\n        this._requireReady();\n        if (this.call) throw new GroupSessionError('a call is already running in this group', 'call_in_progress');\n\n        const callId = newCallId();\n        this.call = {\n            callId,\n            startedBy: this.selfFp,\n            withVideo: withVideo === true,\n            startedAt: Date.now(),\n            participants: new Set([this.selfFp]),\n            joined: true,\n        };\n        this._emitCall();\n        // Media needs a direct link, so a call is the moment it is most worth\n        // having one. The mesh would get there on its own; this stops the first\n        // seconds of the call being spent waiting for a maintenance pass.\n        this._scheduleMeshMaintain();\n        try {\n            // `prepare` is where the caller opens its microphone, and it runs\n            // BEFORE the group is told anything. Announcing first would ring\n            // everybody else's device for a call this one turns out not to be\n            // able to make \u2014 a denied permission, no microphone, another\n            // application holding it. Failing here costs nobody but the person\n            // who pressed the button.\n            if (typeof prepare === 'function') await prepare(this.getCallSnapshot());\n            const { unreachable } = await this._sendCallFrame(CALL_ACTIONS.START, callId, this.call.withVideo);\n            return { callId, unreachable };\n        } catch (error) {\n            this.call = null;\n            this._emitCall();\n            throw error;\n        }\n    }\n\n    /** Join the call that is already running. */\n    async joinCall() {\n        this._requireReady();\n        if (!this.call) throw new GroupSessionError('there is no call to join', 'no_call');\n        if (this.call.joined) return { callId: this.call.callId, unreachable: [] };\n\n        this.call.joined = true;\n        this.call.participants.add(this.selfFp);\n        this._emitCall();\n        this._scheduleMeshMaintain();\n        const { unreachable } = await this._sendCallFrame(CALL_ACTIONS.JOIN, this.call.callId, this.call.withVideo);\n        return { callId: this.call.callId, unreachable };\n    }\n\n    /**\n     * Leave the call.\n     *\n     * Leaving is always local first: the frame is best effort, because a member\n     * who cannot be reached must not be able to keep us in a call by being\n     * unreachable.\n     */\n    async leaveCall() {\n        if (!this.call) return;\n        const callId = this.call.callId;\n        const withVideo = this.call.withVideo;\n        this.call.joined = false;\n        this.call.participants.delete(this.selfFp);\n        if (this.call.participants.size === 0) this.call = null;\n        this._emitCall();\n        try {\n            await this._sendCallFrame(CALL_ACTIONS.LEAVE, callId, withVideo);\n        } catch (_) { /* leaving is best effort */ }\n    }\n\n    /**\n     * A member is gone (left the call, left the group, or was removed).\n     *\n     * A call with NOBODY in it is over. A call with only us in it is not: that\n     * is exactly the state every call is in for the seconds between opening it\n     * and the first person joining, and ending it there would hang up on\n     * somebody who is on their way in. Leaving is the user's decision, and\n     * leaveCall is the only thing that makes it.\n     */\n    _dropFromCall(fp) {\n        if (!this.call || !this.call.participants.has(fp)) return;\n        this.call.participants.delete(fp);\n        if (this.call.participants.size === 0) this.call = null;\n        this._emitCall();\n    }\n\n    async _onCall(frame) {\n        const epoch = assertEpoch(frame.epoch);\n        const seq = assertEpoch(frame.seq);\n        const senderFp = assertFingerprint(String(frame.fp || ''));\n        const callId = assertCallId(String(frame.callId || ''));\n        const action = String(frame.action || '');\n        const withVideo = frame.v === true;\n\n        if (senderFp === this.selfFp) return;\n        const member = this.members.get(senderFp);\n        if (!member || !member.publicKey) throw new GroupSessionError('call frame from a non-member', 'not_a_member');\n        if (epoch !== this.epoch) throw new GroupSessionError('call frame from another epoch', 'stale_epoch');\n\n        // Replay window first, so a captured frame is dropped before its action\n        // is considered at all. Equal counts as a replay: a sender never reuses\n        // a sequence number, and fan-out duplicates of the same frame are\n        // exactly what this absorbs.\n        const seen = this._callSeen.get(senderFp);\n        if (seen !== undefined && seq <= seen) return;\n\n        const ok = await verifyGroupCall(this.subtle, member.publicKey, {\n            groupId: this.groupId, epoch, callId, action, fp: senderFp, seq, withVideo,\n        }, fromB64(String(frame.sig || ''), { max: GROUP_LIMITS.MAX_SIG_BYTES }));\n        if (!ok) throw new GroupSessionError('call frame signature did not verify', 'bad_signature');\n        this._callSeen.set(senderFp, seq);\n\n        // Nothing about a call may be acted on before the group itself is\n        // usable: a call that arrives mid-ceremony would be a ringing phone for\n        // a group nobody has authenticated yet.\n        if (this.phase !== GROUP_PHASE.READY || !this.sasConfirmed) return;\n\n        switch (action) {\n            case CALL_ACTIONS.START: {\n                if (this.call && this.call.callId !== callId) {\n                    // Two calls opened at once. The lower id wins for everyone,\n                    // because every member compares the same two values and gets\n                    // the same answer \u2014 so the group converges on one room\n                    // instead of splitting into two that cannot hear each other.\n                    if (callId >= this.call.callId) return;\n                    // We are being moved off a call we may be in. Say so, so the\n                    // media layer tears the old one down before building the new.\n                    this.call = null;\n                }\n                if (!this.call) {\n                    this.call = {\n                        callId,\n                        startedBy: senderFp,\n                        withVideo,\n                        startedAt: Date.now(),\n                        participants: new Set([senderFp]),\n                        joined: false,\n                    };\n                } else {\n                    this.call.participants.add(senderFp);\n                }\n                this._emitCall();\n                this._scheduleMeshMaintain();\n                return;\n            }\n            case CALL_ACTIONS.JOIN: {\n                if (!this.call || this.call.callId !== callId) return;\n                if (this.call.participants.has(senderFp)) return;\n                this.call.participants.add(senderFp);\n                // A member joining with video turns the call into one that has\n                // video in it; nobody's own camera is turned on by this.\n                if (withVideo) this.call.withVideo = true;\n                this._emitCall();\n                this._scheduleMeshMaintain();\n                return;\n            }\n            case CALL_ACTIONS.LEAVE: {\n                if (!this.call || this.call.callId !== callId) return;\n                this._dropFromCall(senderFp);\n                return;\n            }\n            default:\n                return;\n        }\n    }\n\n    // -----------------------------------------------------------------------\n    // inbound dispatch\n    // -----------------------------------------------------------------------\n\n    /**\n     * Handle one frame that arrived on a pairwise session.\n     *\n     * Everything here is attacker-supplied in the sense that matters: it comes\n     * from a verified peer, but a group member is only as trustworthy as the\n     * group makes them. Types are matched against an explicit list and anything\n     * unrecognised is dropped rather than passed on.\n     */\n    async handleFrame(sessionId, envelope, { relayed = false } = {}) {\n        if (this._destroyed) return;\n        if (!isGroupFrame(envelope)) return;\n        const frame = decodeEnvelope(envelope);\n        if (!frame || !GROUP_FRAME_TYPES.has(frame.type)) return;\n        if (assertGroupId(String(frame.gid || '')) !== this.groupId) return;\n\n        switch (frame.type) {\n            case GROUP_FRAMES.RELAY:\n                return this._onRelay(sessionId, frame);\n            case GROUP_FRAMES.HELLO:\n                return this._onHello(sessionId, frame);\n            case GROUP_FRAMES.MEMBER:\n                return this._onMemberKey(frame);\n            case GROUP_FRAMES.ROSTER:\n                return this._onRoster(sessionId, frame);\n            case GROUP_FRAMES.COMMIT:\n                return this._onCommit(frame);\n            case GROUP_FRAMES.REVEAL:\n                return this._onReveal(frame);\n            case GROUP_FRAMES.MESSAGE:\n                return this._onMessage(frame, { relayed });\n            case GROUP_FRAMES.LEAVE:\n                return this._onLeave(frame);\n            case GROUP_FRAMES.MESH_OFFER:\n                return this._onMeshOffer(frame);\n            case GROUP_FRAMES.MESH_ANSWER:\n                return this._onMeshAnswer(frame);\n            case GROUP_FRAMES.MESH_ABORT:\n                return this._onMeshAbort(frame);\n            case GROUP_FRAMES.CALL:\n                return this._onCall(frame);\n            case GROUP_FRAMES.PROBE:\n                // A probe is a claim about the link it arrived on, so it is only\n                // meaningful on a direct one. Relayed, it says nothing.\n                return relayed ? undefined : this._onProbe(sessionId, frame);\n            case GROUP_FRAMES.INVITE:\n                return; // handled by the app, which decides whether to join at all\n            default:\n                return;\n        }\n    }\n\n    /**\n     * Single-hop relay.\n     *\n     * A frame addressed to us is unwrapped and handled. A frame addressed to\n     * someone else is forwarded exactly once \u2014 `hopped` makes a second forward\n     * impossible, so there is no loop to form and no path to lengthen.\n     */\n    async _onRelay(sessionId, frame) {\n        const to = assertFingerprint(String(frame.to || ''));\n        const inner = frame.inner;\n        if (!isGroupFrame(inner)) return;\n        if (inner.type === GROUP_FRAMES.RELAY) return; // never nest\n\n        if (to === this.selfFp) return this.handleFrame(sessionId, inner, { relayed: true });\n        if (frame.hopped === true) return; // already relayed once; do not forward again\n\n        const member = this.members.get(to);\n        if (!member || member.state !== MEMBER_STATE.LINKED || !member.sessionId) return;\n        await this._wire(member.sessionId, { ...frame, hopped: true });\n    }\n\n    async _onLeave(frame) {\n        const fp = assertFingerprint(String(frame.fp || ''));\n        const member = this.members.get(fp);\n        if (!member || fp === this.selfFp) return;\n        this._emit('left', { fp, name: member.name });\n        this._dropFromCall(fp);\n\n        // The admin leaving ends the group for everyone else. Nobody else can\n        // sign a roster, so there is no next epoch and no safety code to compare\n        // again \u2014 carrying on would leave a group that looks alive but can never\n        // change membership. Say so and let the app tear it down, so the slot is\n        // free when someone starts a new group with the same people.\n        if (!this.isAdmin && fp === this.adminFp) {\n            this.members.delete(fp);\n            for (const [sid, f] of [...this.sessionToFp]) if (f === fp) this.sessionToFp.delete(sid);\n            this._emit('ended', { reason: 'admin_left' });\n            return;\n        }\n\n        // Only the admin rewrites membership; everyone else waits for the roster\n        // that the admin will publish for the new epoch.\n        if (!this.isAdmin) return;\n\n        this.members.delete(fp);\n        for (const [sid, f] of [...this.sessionToFp]) if (f === fp) this.sessionToFp.delete(sid);\n        // Tell the UI immediately. Dropping the member from this map without\n        // emitting left them on the admin's member strip until some later event\n        // happened to refresh it \u2014 a member who had visibly left still shown as\n        // present, which is exactly the wrong thing for a group to be vague about.\n        this._emitMembers();\n\n        // A group of one is not a group. Publishing a roster for it would throw\n        // out of canonicalFingerprints and abort mid-teardown, leaving the group\n        // stuck in a failed state that still occupies the member.\n        if (this.members.size < GROUP_LIMITS.MIN_MEMBERS) {\n            this._emit('ended', { reason: 'last_member_left' });\n            return;\n        }\n\n        this.epoch += 1;\n        await this.publishRoster(MEMBER_OPS.REMOVE);\n    }\n\n    /**\n     * Tell the group we are leaving, best effort.\n     *\n     * Await this before destroy(): teardown clears the member map this walks to\n     * find recipients, so a leave that is merely started can end up addressed to\n     * nobody \u2014 and a peer that never hears it keeps a group nobody is in.\n     */\n    async leave() {\n        try {\n            await this._broadcast({ type: GROUP_FRAMES.LEAVE, gid: this.groupId, fp: this.selfFp });\n        } catch (_) { /* leaving is best effort */ }\n    }\n\n    /**\n     * Admin: invite more people into a group that is already running.\n     *\n     * The group stays usable throughout. Nothing about the membership changes\n     * until the new members have published their identity keys and a roster for\n     * the next epoch actually goes out \u2014 at which point every member, old and\n     * new, runs a fresh commit/reveal round and compares a new code. That is not\n     * ceremony for its own sake: the safety code covers the member set, so a set\n     * that has changed has a different code, and the old one no longer says\n     * anything about who is in the room.\n     *\n     * If nobody answers, the round is abandoned and the group is left exactly as\n     * it was \u2014 which is why the epoch is not touched until the roster is sent.\n     *\n     * @param {{sessionId: string, name: string}[]} peers\n     */\n    async addMembers(peers) {\n        if (!this.isAdmin) throw new GroupSessionError('only the admin invites', 'not_admin');\n        if (!Array.isArray(peers) || peers.length === 0) return 0;\n        if (this._pendingAdd) throw new GroupSessionError('an invitation round is already running', 'add_in_flight');\n        if (this.members.size + peers.length > GROUP_LIMITS.MAX_MEMBERS) {\n            throw new GroupSessionError(`a group is limited to ${GROUP_LIMITS.MAX_MEMBERS} members`, 'too_many_members');\n        }\n\n        // Refuse a session that is already carrying a member: inviting someone\n        // twice would have them answer with a second identity key and occupy two\n        // slots in the safety code.\n        for (const peer of peers) {\n            if (this.sessionToFp.has(peer.sessionId)) {\n                throw new GroupSessionError('that chat is already a member of this group', 'already_a_member');\n            }\n        }\n\n        this._pendingAdd = {\n            op: MEMBER_OPS.ADD,\n            epoch: this.epoch + 1,\n            before: new Set(this.members.keys()),\n        };\n        for (const peer of peers) this._awaitingHello.set(peer.sessionId, peer.name || 'Member');\n\n        // The invitation already names the epoch the new roster will open, so an\n        // invitee adopts it before anything is signed against it.\n        const frame = {\n            type: GROUP_FRAMES.INVITE,\n            gid: this.groupId,\n            epoch: this._pendingAdd.epoch,\n            name: this.name,\n            adminSpki: toB64(this.identity.spki),\n        };\n        const round = this._pendingAdd;\n        const results = await Promise.allSettled(peers.map((p) => this._wire(p.sessionId, frame)));\n        const sent = results.filter((r) => r.status === 'fulfilled').length;\n\n        // Judge \"nothing was sent\" by the SEND RESULTS, never by what is left in\n        // _awaitingHello. On a fast link the invitee's hello comes back \u2014 and the\n        // whole round completes \u2014 inside the very call that sent the invitation,\n        // so by the time this line runs the queue is legitimately empty. Reading\n        // emptiness as failure aborted rounds that had already succeeded.\n        if (sent === 0) {\n            for (const peer of peers) this._awaitingHello.delete(peer.sessionId);\n            if (this._pendingAdd === round) this._pendingAdd = null;\n            throw new GroupSessionError(\n                'the invitation could not be sent \u2014 that chat is not connected',\n                'invitations_could_not_be_sent',\n            );\n        }\n\n        peers.forEach((peer, i) => {\n            if (results[i].status === 'rejected') this._awaitingHello.delete(peer.sessionId);\n        });\n\n        // The round may already be finished; only arm the timer if it is not.\n        if (this._pendingAdd === round) {\n            this._timer(() => { if (this._pendingAdd === round) this._finishAdd(); }, TIMEOUTS.HELLO_MS);\n        }\n        return sent;\n    }\n\n    /**\n     * Close an add round: publish the new roster, or abandon it.\n     *\n     * Reached either when every invitee has answered or when the wait runs out.\n     * A partial answer is still worth publishing \u2014 the people who did join are\n     * in \u2014 but if nobody joined, the group is left untouched rather than pushed\n     * through a re-keying that would achieve nothing except making everyone\n     * compare a new code.\n     */\n    async _finishAdd() {\n        const round = this._pendingAdd;\n        if (!round) return false;\n        this._pendingAdd = null;\n        this._awaitingHello.clear();\n\n        const joined = [...this.members.keys()].filter((fp) => !round.before.has(fp));\n        if (joined.length === 0) {\n            this._emit('add_failed', { reason: 'nobody_joined' });\n            return false;\n        }\n\n        this.epoch = round.epoch;\n        this._emitMembers();\n        await this.publishRoster(round.op);\n        return true;\n    }\n\n    /**\n     * Admin: remove a member and re-key the group.\n     *\n     * The new epoch is what makes the removal effective \u2014 a new safety code every\n     * remaining member must compare again, and a member set the removed member is\n     * not in. There is no shared group key to rotate because there never was one:\n     * every message travels over pairwise ratchets, so a removed member simply\n     * stops being sent anything.\n     */\n    async removeMember(fp) {\n        if (!this.isAdmin) throw new GroupSessionError('only the admin removes members', 'not_admin');\n        if (fp === this.selfFp) throw new GroupSessionError('the admin cannot remove themselves', 'bad_target');\n        if (!this.members.has(fp)) return false;\n        if (this.members.size - 1 < GROUP_LIMITS.MIN_MEMBERS) {\n            throw new GroupSessionError('a group cannot drop below two members \u2014 leave it instead', 'would_empty_group');\n        }\n        this.members.delete(fp);\n        for (const [sid, f] of [...this.sessionToFp]) if (f === fp) this.sessionToFp.delete(sid);\n        this.epoch += 1;\n        this._emitMembers();\n        await this.publishRoster(MEMBER_OPS.REMOVE);\n        return true;\n    }\n}\n", "// Paced, serialised delivery of group frames over pairwise sessions.\n//\n// WHY THIS EXISTS\n// ---------------\n// A group frame rides `EnhancedSecureWebRTCManager.sendMessage`, which is the\n// right call \u2014 it inherits the session's encryption, ratchet, replay protection\n// and verification gate without adding a second path through the transport. But\n// that path is rate limited, and the accounting is not what it looks like:\n// `sendMessage` checks the limiter and then hands off to `sendSecureMessage`,\n// which checks the SAME shared counter again. One frame therefore spends two of\n// the ten burst slots available per second.\n//\n// Forming a group sends six frames back to back on one session \u2014 invite, two\n// member keys, roster, commit, reveal \u2014 which asks for twelve slots out of ten.\n// The overflow was rejected, and rejected as a plain `Error` with no code, so it\n// surfaced to the user as a meaningless `frame_rejected`; the peer that never\n// received the dropped frame simply waited until the ceremony timed out. Two\n// different symptoms, one cause.\n//\n// The fix belongs here rather than in the limiter. Widening the burst allowance\n// would loosen a control that exists for the 1:1 chat, to suit a caller that can\n// perfectly well wait: five frames a second makes group formation take about a\n// second and a half, which nobody notices.\n//\n// Sends are also SERIALISED per session. The protocol is order-dependent \u2014 a\n// commitment must reach a peer before the reveal that opens it \u2014 and firing\n// several `sendMessage` calls concurrently at one channel puts that ordering at\n// the mercy of the manager's internal mutex.\n//\n// Time is injected so the pacing can be tested without waiting for it.\n\n/**\n * Minimum gap between two group frames on one session, in milliseconds.\n * Two limiter slots per frame against a ten-per-second burst means five frames\n * per second is the real budget; 260ms leaves a little headroom.\n */\nexport const GROUP_SEND_GAP_MS = 260;\n\n/** How many times a rate-limited frame is retried before giving up. */\nexport const GROUP_SEND_ATTEMPTS = 4;\n\nconst isRateLimit = (error) => /rate limit/i.test(error?.message || '');\n\n/**\n * Build the `send` function a GroupSession is constructed with.\n *\n * @param {object} opts\n * @param {(sessionId: string) => object|null} opts.getManager  resolve a live manager\n * @param {number} [opts.gapMs]\n * @param {number} [opts.attempts]\n * @param {() => number} [opts.now]\n * @param {(ms: number) => Promise<void>} [opts.sleep]\n */\nexport function createGroupSender({\n    getManager,\n    gapMs = GROUP_SEND_GAP_MS,\n    attempts = GROUP_SEND_ATTEMPTS,\n    now = () => Date.now(),\n    sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms)),\n} = {}) {\n    /** sessionId -> { chain, lastAt } */\n    const queues = new Map();\n\n    return async function sendGroupFrame(sessionId, frame) {\n        const manager = getManager(sessionId);\n        if (!manager || typeof manager.sendMessage !== 'function') throw new Error('no such link');\n        if (typeof manager.isConnected === 'function' && !manager.isConnected()) {\n            throw new Error('link is down');\n        }\n\n        const queue = queues.get(sessionId) || { chain: Promise.resolve(), lastAt: 0 };\n        const payload = JSON.stringify(frame);\n\n        const run = queue.chain.then(async () => {\n            const wait = gapMs - (now() - queue.lastAt);\n            if (wait > 0) await sleep(wait);\n\n            let lastError = null;\n            for (let attempt = 0; attempt < attempts; attempt++) {\n                try {\n                    await manager.sendMessage(payload);\n                    queue.lastAt = now();\n                    return true;\n                } catch (error) {\n                    lastError = error;\n                    // Only a rate-limit rejection is worth retrying. A closed\n                    // channel or a refused verification gate will not improve by\n                    // being asked again, and retrying would just delay the error\n                    // the caller needs to see.\n                    if (!isRateLimit(error)) throw error;\n                    await sleep(gapMs * (attempt + 1));\n                }\n            }\n            throw lastError;\n        });\n\n        // The chain has to survive a failure. Leaving a rejected promise in it\n        // would wedge every later frame on that session behind the first error.\n        queue.chain = run.catch(() => {});\n        queues.set(sessionId, queue);\n        return run;\n    };\n}\n", "// Motion primitives \u2014 Apple's \"Designing Fluid Interfaces\" physics, on the web.\n//\n// The whole point of this file is that a gesture-driven interface cannot be built\n// out of CSS transitions. A transition runs from a value it captured when it\n// started, for a duration fixed in advance; grab the element halfway through and\n// it either ignores you or snaps. A spring has no duration \u2014 it always integrates\n// from wherever the thing currently *is*, at whatever speed it is currently\n// moving \u2014 so it can be interrupted, re-targeted and reversed mid-flight without\n// a visible seam. Everything here exists to serve that one property.\n//\n// Nothing in here is a dependency. The app ships offline as a PWA and has no\n// bundled animation library; these are ~150 lines of physics instead of ~30KB.\n\n// Apple exposes two designer-facing parameters instead of mass/stiffness/damping:\n//\n//   damping (ratio)  1.0 = critically damped, settles without overshoot.\n//                    < 1.0 overshoots; lower is bouncier.\n//   response (s)     how quickly the value reaches the target. NOT a duration \u2014\n//                    a spring's settle time emerges from the parameters.\n//\n// These are the values Apple ships, and the ones to reach for by default.\nexport const SPRING = {\n    // Move / reposition something. No overshoot: a panel that bounces when it\n    // was not thrown reads as decoration.\n    move:   { damping: 1.0, response: 0.4 },\n    // A sheet or drawer the user dragged. The bounce is earned \u2014 the gesture\n    // carried momentum into it.\n    drawer: { damping: 0.8, response: 0.3 },\n    // Rotation.\n    rotate: { damping: 0.8, response: 0.4 }\n};\n\n// Integration step. Fixed and small, so the same gesture produces the same\n// motion on a 60Hz phone and a 120Hz iPad \u2014 frame-rate must not be a physics\n// parameter.\nconst DT = 1 / 480;\nconst MAX_FRAME = 0.064; // clamp after a stall, or the spring explodes\n\n/**\n * True when the user has asked the system for less motion.\n *\n * Read live rather than cached: the setting can be flipped while the app is\n * open, and a long-lived PWA session would otherwise keep animating.\n */\nexport function prefersReducedMotion() {\n    try {\n        return typeof matchMedia === 'function' &&\n            matchMedia('(prefers-reduced-motion: reduce)').matches;\n    } catch (_) {\n        return false;\n    }\n}\n\n/**\n * Where a flick would come to rest, if you let it decelerate.\n *\n * This is the exponential-decay projection from Apple's sample code, not the\n * textbook v\u00B2/2a. Use it to pick which snap point a gesture was aiming at:\n * snapping to whatever is nearest the *release* point throws away the user's\n * velocity and makes a fast flick feel identical to a slow drag.\n *\n * @param {number} velocity px/s at release\n * @param {number} decelerationRate 0.998 \u2248 normal scroll feel, 0.99 snappier\n * @returns {number} signed distance the gesture would still travel\n */\nexport function project(velocity, decelerationRate = 0.998) {\n    return (velocity / 1000) * decelerationRate / (1 - decelerationRate);\n}\n\n/**\n * Which snap point a release was aiming at.\n *\n * Two rules, in this order:\n *\n *   A deliberate flick is decided by its *direction*. Someone who threw a panel\n *   leftwards meant \"away\", even if they let go while it was still nearer the\n *   open position than the closed one \u2014 position at the moment of release says\n *   nothing about intent when the hand is still moving fast.\n *\n *   A slow drag has no direction worth trusting, so it is decided by where its\n *   remaining momentum would have carried it. That is still not the same as\n *   \"nearest the release point\": a gentle push that was clearly going somewhere\n *   should be allowed to arrive.\n *\n * @param {number} position current value at release\n * @param {number} velocity px/s at release\n * @param {number[]} points the values it is allowed to rest at\n * @param {object} [o]\n * @param {number} [o.flick] px/s above which direction wins over projection\n * @param {number} [o.decelerationRate] passed through to project()\n */\nexport function snapTarget(position, velocity, points, o = {}) {\n    const { flick = 220, decelerationRate = 0.998 } = o;\n    if (!points || !points.length) return position;\n    const projected = position + project(velocity, decelerationRate);\n    let pool = points;\n    if (Math.abs(velocity) > flick) {\n        const ahead = points.filter((p) => (velocity > 0 ? p >= position : p <= position));\n        if (ahead.length) pool = ahead;\n    }\n    return pool.reduce(\n        (best, p) => (Math.abs(p - projected) < Math.abs(best - projected) ? p : best),\n        pool[0]\n    );\n}\n\n/**\n * Progressive resistance past a boundary.\n *\n * A hard stop reads as \"the app froze\". Continuous resistance reads as\n * \"responsive, but there is nothing more this way\" \u2014 the finger keeps moving\n * and the element keeps answering, just less and less.\n *\n * @param {number} overshoot how far past the bound the pointer is (px, signed)\n * @param {number} dimension the size the resistance is scaled against (px)\n * @param {number} constant lower = stiffer\n */\nexport function rubberband(overshoot, dimension, constant = 0.55) {\n    if (!dimension) return 0;\n    return (overshoot * dimension * constant) / (dimension + constant * Math.abs(overshoot));\n}\n\n/**\n * Tracks a short position history so a release can be handed a real velocity.\n *\n * The instantaneous delta between the last two pointer events is far too noisy\n * to animate from \u2014 one stalled frame and a fast flick reports as a dead stop.\n * Averaging over a small trailing window is what makes the handoff invisible.\n */\nexport function velocityTracker(windowMs = 100) {\n    const samples = [];\n    return {\n        add(value, time = performance.now()) {\n            samples.push({ value, time });\n            while (samples.length > 2 && time - samples[0].time > windowMs) samples.shift();\n        },\n        /** @returns {number} px/s over the trailing window */\n        get(now = performance.now()) {\n            if (samples.length < 2) return 0;\n            const last = samples[samples.length - 1];\n            // A pointer that has been still for a while has stopped, whatever\n            // the older samples say.\n            if (now - last.time > windowMs) return 0;\n            const first = samples[0];\n            const dt = (last.time - first.time) / 1000;\n            if (dt <= 0) return 0;\n            return (last.value - first.value) / dt;\n        },\n        reset() { samples.length = 0; }\n    };\n}\n\n/**\n * A spring animation that can be interrupted, re-targeted and reversed.\n *\n * The handle deliberately exposes live `value` and `velocity`: that is what a\n * gesture needs when it grabs a moving element \u2014 it must continue from the\n * *presentation* value, never from the logical target, or the element jumps.\n *\n * @param {object} o\n * @param {number} o.from starting value\n * @param {number} o.to target value\n * @param {number} [o.velocity] initial velocity, px/s \u2014 hand the release velocity here\n * @param {number} [o.damping] 1 = no overshoot, < 1 bounces\n * @param {number} [o.response] seconds to reach the target\n * @param {number} [o.restDelta] how close counts as arrived\n * @param {number} [o.restSpeed] how slow counts as stopped, px/s\n * @param {boolean} [o.respectReducedMotion] jump to the target instead of animating\n * @param {(v:number)=>void} [o.onUpdate]\n * @param {()=>void} [o.onComplete]\n */\nexport function spring(o) {\n    const {\n        from, to, velocity = 0,\n        damping = SPRING.move.damping,\n        response = SPRING.move.response,\n        restDelta = 0.1, restSpeed = 0.5,\n        respectReducedMotion = true,\n        onUpdate, onComplete\n    } = o;\n\n    let value = from;\n    let vel = velocity;\n    let target = to;\n    let raf = 0;\n    let last = 0;\n    let done = false;\n\n    const omega = (2 * Math.PI) / response;\n    const zeta = damping;\n\n    const finish = () => {\n        done = true;\n        raf = 0;\n        value = target;\n        vel = 0;\n        if (onUpdate) onUpdate(value);\n        if (onComplete) onComplete();\n    };\n\n    // Reduced motion means no vestibular travel \u2014 but it does not mean no\n    // feedback. The caller still gets its final value; it is up to the caller\n    // to cross-fade instead of slide.\n    if (respectReducedMotion && prefersReducedMotion()) {\n        finish();\n        return {\n            get value() { return value; },\n            get velocity() { return 0; },\n            get done() { return true; },\n            retarget(next) { target = next; finish(); },\n            stop() {}\n        };\n    }\n\n    const step = (now) => {\n        raf = 0;\n        const frame = Math.min((now - last) / 1000, MAX_FRAME);\n        last = now;\n\n        // Semi-implicit Euler at a fixed sub-step. Explicit Euler at frame size\n        // is unstable for a stiff spring; this stays well inside the stability\n        // bound for every response value we use.\n        let t = frame;\n        while (t > 0) {\n            const dt = Math.min(DT, t);\n            const accel = -omega * omega * (value - target) - 2 * zeta * omega * vel;\n            vel += accel * dt;\n            value += vel * dt;\n            t -= dt;\n        }\n\n        if (Math.abs(value - target) < restDelta && Math.abs(vel) < restSpeed) {\n            finish();\n            return;\n        }\n        if (onUpdate) onUpdate(value);\n        raf = requestAnimationFrame(step);\n    };\n\n    last = performance.now();\n    raf = requestAnimationFrame(step);\n\n    return {\n        get value() { return value; },\n        get velocity() { return vel; },\n        get done() { return done; },\n        /**\n         * Point the spring somewhere else without touching its current velocity.\n         *\n         * This is the anti-\"brick wall\" move. Killing this animation and starting\n         * a new one at velocity 0 puts a discontinuity exactly where the user\n         * reversed direction, which is the moment they are most attentive.\n         */\n        retarget(next) { target = next; },\n        stop() {\n            if (raf) cancelAnimationFrame(raf);\n            raf = 0;\n            done = true;\n        }\n    };\n}\n", "// An offer to switch language \u2014 never a redirect.\n//\n// The tempting version of this feature is to read navigator.language on load and send\n// the visitor to the matching locale. It breaks the site for search engines in a way\n// that is invisible from a browser: Googlebot crawls with a single language (en) from a\n// single place, so a language redirect answers every one of the thirteen locale URLs\n// with the English page. The twelve translations then have no indexable document of\n// their own, the hreflang cluster they are declared in contradicts what the crawler\n// actually receives, and the work of translating the site earns nothing. It is also\n// wrong for people: a link shared into a German group chat has to open in German for\n// everyone who follows it, including the person whose laptop is set to English.\n//\n// So the URL stays authoritative and this bar carries the whole feature. It appears only\n// when the page being read is not the language the visitor probably wants, it says so in\n// that language, and it offers a normal link. Dismissing it is remembered for good.\n//\n// Landing only, like the switcher: following the link is a navigation, and a navigation\n// during a session drops the peer connection.\n\nimport {\n    LOCALE_META,\n    dismissLocaleSuggestion,\n    localeHref,\n    localeSuggestionDismissed,\n    rememberLocale,\n    storedLocale,\n    suggestedLocale,\n    t,\n} from '../../i18n/index.js';\nimport { prefersReducedMotion } from '../../ui/motion.js';\n\nconst LanguageSuggestion = () => {\n    // Resolved once, at mount: the answer cannot change without a navigation, and\n    // re-deriving it on every render would mean a storage read per render.\n    const [target] = React.useState(() => {\n        if (typeof window === 'undefined' || !window.location) return null;\n        if (localeSuggestionDismissed()) return null;\n        return suggestedLocale({\n            pathname: window.location.pathname || '/',\n            languages: window.navigator?.languages || [],\n            stored: storedLocale(),\n        });\n    });\n    const [gone, setGone] = React.useState(false);\n    // Mounted invisible, then raised on the next frame, so the bar arrives rather than\n    // being part of the first paint \u2014 the page's own content should land first.\n    const [shown, setShown] = React.useState(false);\n\n    React.useEffect(() => {\n        if (!target) return undefined;\n        const id = setTimeout(() => setShown(true), 600);\n        return () => clearTimeout(id);\n    }, [target]);\n\n    if (!target || gone) return null;\n\n    const meta = LOCALE_META[target] || {};\n    const dir = meta.dir === 'rtl' ? 'rtl' : 'ltr';\n    const pathname = typeof window !== 'undefined' ? window.location.pathname : '/';\n    const href = localeHref(target, pathname);\n    const still = prefersReducedMotion();\n\n    const close = () => {\n        dismissLocaleSuggestion();\n        setGone(true);\n    };\n\n    // The copy is in the language being offered \u2014 the point of the bar is to be readable\n    // by someone who cannot read the page it sits on. `dir` and `lang` come with it, so\n    // Arabic in this bar is laid out as Arabic even on the English page.\n    const line = React.createElement('div', {\n        key: 'line',\n        lang: meta.htmlLang || target,\n        dir,\n        style: { fontSize: '13px', lineHeight: 1.45, color: 'var(--sb-text-4)', textAlign: 'start' },\n    }, t('language.suggest.text', null, target));\n\n    const link = React.createElement('a', {\n        key: 'cta',\n        href,\n        hrefLang: meta.htmlLang || target,\n        lang: meta.htmlLang || target,\n        dir,\n        // Following the link is an explicit choice, so it is remembered \u2014 the bar has\n        // then done its job and will not be offered again.\n        onClick: () => { rememberLocale(target); dismissLocaleSuggestion(); },\n        style: {\n            display: 'inline-flex', alignItems: 'center', gap: '6px',\n            padding: '7px 12px', borderRadius: '9px',\n            border: '1px solid rgba(var(--sb-orange-rgb), 0.30)', background: 'rgba(var(--sb-orange-rgb), 0.12)',\n            color: 'var(--sb-orange)', fontSize: '12.5px', fontWeight: 600,\n            textDecoration: 'none', whiteSpace: 'nowrap',\n        },\n    }, t('language.suggest.cta', null, target));\n\n    const dismiss = React.createElement('button', {\n        key: 'dismiss',\n        type: 'button',\n        onClick: close,\n        // Labelled in the offered language too: this button is for the same reader.\n        'aria-label': t('language.suggest.dismiss', null, target),\n        style: {\n            padding: '7px 10px', borderRadius: '9px',\n            border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)',\n            color: 'var(--sb-text-7)', font: 'inherit', fontSize: '12.5px', fontWeight: 500,\n            cursor: 'pointer', whiteSpace: 'nowrap',\n        },\n    }, t('language.suggest.dismiss', null, target));\n\n    return React.createElement('div', {\n        // A region rather than a dialog: it interrupts nothing and takes no focus.\n        role: 'region',\n        'aria-label': t('language.label'),\n        style: {\n            // Bottom inline-start, because the install prompt owns the opposite corner.\n            position: 'fixed', bottom: '24px', insetInlineStart: '24px', zIndex: 50,\n            maxWidth: 'min(340px, calc(100vw - 48px))',\n            display: 'flex', flexDirection: 'column', gap: '11px',\n            padding: '14px 16px', borderRadius: '14px',\n            border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)',\n            boxShadow: '0 16px 40px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))',\n            opacity: shown ? 1 : 0,\n            transform: shown || still ? 'none' : 'translateY(10px)',\n            transition: still ? 'opacity .2s linear' : 'opacity .3s ease, transform .3s cubic-bezier(.2,.7,.3,1)',\n            // Invisible and untouchable until raised, so it cannot swallow a tap during\n            // the fade.\n            pointerEvents: shown ? 'auto' : 'none',\n        },\n    }, [\n        line,\n        React.createElement('div', {\n            key: 'actions',\n            style: { display: 'flex', alignItems: 'center', gap: '8px' },\n        }, [link, dismiss]),\n    ]);\n};\n\nwindow.LanguageSuggestion = LanguageSuggestion;\n\nexport { LanguageSuggestion };\n", "import { t } from '../../i18n/index.js';\n// Group chat surfaces: the conversation view, the safety-code ceremony, the\n// create dialog and the inbound invitation.\n//\n// These render from the reducer's group entry and call back into the app; they\n// hold no protocol state and no key material. The safety-code modal is the one\n// piece here that carries security weight, so it is deliberately blunt: it shows\n// the digits, says who has to compare them and how, and offers no way to skip.\n//\n// React is a global in this app (loaded before the bundle), matching app.jsx.\n\nimport { GROUP_PHASE, MEMBER_STATE, groupInitials } from '../../state/groupsStore.js';\nimport { GROUP_LIMITS } from '../../group/groupCrypto.js';\n\nconst h = (...args) => React.createElement(...args);\n\nconst C = {\n    bg: 'var(--sb-bg-deep)',\n    panel: 'var(--sb-surface)',\n    panel2: 'var(--sb-surface-2)',\n    line: 'rgba(var(--sb-ink), 0.07)',\n    line2: 'rgba(var(--sb-ink), 0.13)',\n    ink: 'var(--sb-text-1)',\n    ink2: 'var(--sb-text-5b)',\n    ink3: 'var(--sb-text-9)',\n    // Two forms of each accent. The plain one is for text and darkens in the light\n    // theme so it clears 4.5:1 on white; the -Solid one is for anything painted \u2014 a\n    // button's ground, a checkbox, a dot, the safety code \u2014 and is the brand colour in\n    // both themes, because what sits on it is near-black either way. Reaching for the\n    // wrong one is how every accent button in this file came out brown.\n    accent: 'var(--sb-orange)',\n    good: 'var(--sb-green)',\n    warn: 'var(--sb-yellow-2)',\n    bad: 'var(--sb-red)',\n    accentSolid: 'var(--sb-orange-solid)',\n    goodSolid: 'var(--sb-green-solid)',\n    warnSolid: 'var(--sb-yellow-2-solid)',\n    badSolid: 'var(--sb-red-solid)',\n    mono: \"'JetBrains Mono', ui-monospace, monospace\",\n};\n\nconst ICON = {\n    users: '<svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19\"/><circle cx=\"10\" cy=\"8\" r=\"3.2\"/><path d=\"M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4\"/><path d=\"M15.5 5.3a3.2 3.2 0 0 1 0 5.4\"/></svg>',\n    send: '<svg width=\"17\" height=\"17\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M22 2 11 13\"/><path d=\"m22 2-7 20-4-9-9-4 20-7z\"/></svg>',\n    shield: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M12 22s8-4 8-10V5l-8-3-8 3v7c0 6 8 10 8 10z\"/><path d=\"m9 12 2 2 4-4\"/></svg>',\n    x: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\"><path d=\"M18 6 6 18M6 6l12 12\"/></svg>',\n    plus: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.2\" stroke-linecap=\"round\"><path d=\"M12 5v14M5 12h14\"/></svg>',\n    relay: '<svg width=\"13\" height=\"13\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M4 12h4l3-7 4 14 3-7h2\"/></svg>',\n    phone: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\"/></svg>',\n    exit: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M10 20H6a2 2 0 0 1-2-2V6a2 2 0 0 1 2-2h4\"/><path d=\"m15 16 4-4-4-4\"/><path d=\"M19 12H10\"/></svg>',\n    video: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M23 7l-7 5 7 5V7z\"/><rect x=\"1\" y=\"5\" width=\"15\" height=\"14\" rx=\"2.5\"/></svg>',\n};\n\nconst svg = (markup, extra = {}) => h('span', {\n    style: { display: 'grid', placeItems: 'center', ...extra },\n    dangerouslySetInnerHTML: { __html: markup },\n});\n\nconst btn = (accent = false) => ({\n    display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '8px',\n    padding: '11px 18px', borderRadius: '10px', cursor: 'pointer',\n    fontFamily: 'inherit', fontSize: '14px', fontWeight: 700,\n    border: accent ? 'none' : `1px solid ${C.line2}`,\n    background: accent ? C.accentSolid : 'transparent',\n    color: accent ? 'var(--sb-on-accent)' : C.ink2,\n});\n\nconst overlay = {\n    position: 'fixed', inset: 0, zIndex: 90, display: 'grid', placeItems: 'center',\n    background: 'rgba(var(--sb-scrim-rgb), 0.72)', backdropFilter: 'blur(6px)', padding: '20px',\n};\n\nconst card = {\n    width: '100%', maxWidth: '440px', background: C.panel, border: `1px solid ${C.line}`,\n    borderRadius: '16px', padding: '24px', display: 'flex', flexDirection: 'column', gap: '18px',\n    boxShadow: '0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.5 * var(--sb-shadow-k)))',\n};\n\n/** Trim a string so its UTF-8 encoding fits `max` bytes, never mid-character. */\nfunction clampToBytes(value, max) {\n    const enc = new TextEncoder();\n    let out = String(value);\n    while (enc.encode(out).length > max) out = out.slice(0, -1);\n    return out;\n}\n\nconst label = {\n    fontFamily: C.mono, fontSize: '10px', fontWeight: 700, letterSpacing: '1.3px',\n    textTransform: 'uppercase', color: C.ink3,\n};\n\n// ---------------------------------------------------------------------------\n// the safety-code ceremony\n// ---------------------------------------------------------------------------\n\n/**\n * The group's safety code.\n *\n * Every member sees the same seven digits, and the comparison has to happen over\n * something an attacker cannot impersonate. The copy says so plainly, because\n * this is the step that distinguishes the intended group from a member who\n * introduced two people and sat between them \u2014 the code is the only thing that\n * catches it, and a user who dismisses it has verified nothing.\n */\n/**\n * What to say while there is no code yet.\n *\n * This used to collapse to t('group.exchangingNonces') for every phase that was not\n * COMMITTING \u2014 which included FAILED. A group that had actually died therefore\n * looked identical to one still working, the confirm button stayed disabled, and\n * the only visible symptom was a dialog that never finished. Naming the real\n * state is the difference between a hang and a diagnosis.\n */\nfunction waitingWord(group) {\n    switch (group.phase) {\n        case GROUP_PHASE.FORMING: return t('group.waitingJoin');\n        case GROUP_PHASE.COMMITTING: return t('group.waitingCommit');\n        case GROUP_PHASE.REVEALING: return t('group.exchangingNonces');\n        case GROUP_PHASE.FAILED: return GROUP_ERROR_WORD[group.error] || t('group.errNotFormed');\n        default: return t('group.working');\n    }\n}\n\n/** Failure codes from GroupSession, in words a person can act on. */\nconst GROUP_ERROR_WORD = {\n    invitations_could_not_be_sent: t('group.errInviteFailed'),\n    invitees_did_not_respond: t('group.errNobodyAccepted'),\n    roster_never_arrived: t('group.errNoMemberList'),\n    ceremony_timed_out: t('groupErr.timeout'),\n    bad_signature: t('group.errUnsignedList'),\n    wrong_admin: t('group.errNotOwner'),\n    fingerprint_mismatch: t('groupErr.keyMismatch'),\n    commitment_mismatch: t('groupErr.revealMismatch'),\n    commitment_changed: t('groupErr.commitChanged'),\n    missing_member_key: t('groupErr.missingKey'),\n    not_a_member: t('groupErr.outsider'),\n    bad_name: t('group.nameTooLong'),\n    too_many_members: t('groupErr.limit'),\n    frame_too_large: t('groupErr.tooLarge'),\n};\n\nexport function GroupSasModal({ group, onConfirm, onCancel }) {\n    if (!group) return null;\n    const failed = group.phase === GROUP_PHASE.FAILED;\n    const waiting = group.phase !== GROUP_PHASE.AWAITING_SAS || !group.sasCode;\n\n    return h('div', { style: overlay, role: 'dialog', 'aria-modal': 'true' },\n        h('div', { style: card }, [\n            h('div', { key: 'h', style: { display: 'flex', flexDirection: 'column', gap: '6px' } }, [\n                h('span', { key: 'l', style: label }, t('group.sasTitle')),\n                h('h3', { key: 't', style: { margin: 0, fontSize: '19px', fontWeight: 700, color: C.ink } }, group.name),\n            ]),\n\n            waiting\n                ? h('div', {\n                    key: 'wait',\n                    style: {\n                        padding: '28px 16px', textAlign: 'center', borderRadius: '12px',\n                        background: C.panel2, border: `1px solid ${C.line}`, color: C.ink2, fontSize: '14px',\n                    },\n                }, [\n                    h('div', {\n                        key: 'd',\n                        style: {\n                            fontFamily: C.mono, fontSize: '26px', letterSpacing: '6px',\n                            color: failed ? C.bad : C.ink3,\n                        },\n                    }, '\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7\u00B7'),\n                    h('div', { key: 's', style: { marginTop: '10px', color: failed ? C.bad : C.ink2 } }, waitingWord(group)),\n                    failed && h('div', {\n                        key: 'why',\n                        style: { marginTop: '6px', fontFamily: C.mono, fontSize: '11px', color: C.ink3 },\n                    }, group.error || 'unknown'),\n                ])\n                : h('div', {\n                    key: 'code',\n                    style: {\n                        padding: '22px 16px', textAlign: 'center', borderRadius: '12px',\n                        background: 'rgba(var(--sb-orange-rgb), 0.09)', border: '1px solid rgba(var(--sb-orange-rgb), 0.3)',\n                    },\n                }, h('span', {\n                    // Everyone in the group compares these digits against each other's\n                    // screens, so their order must not depend on the reader's language.\n                    dir: 'ltr',\n                    style: {\n                        fontFamily: C.mono, fontSize: 'clamp(30px, 9vw, 42px)', fontWeight: 700,\n                        letterSpacing: '9px', color: C.accentSolid, unicodeBidi: 'isolate',\n                    },\n                }, group.sasCode)),\n\n            h('p', {\n                key: 'why',\n                style: { margin: 0, fontSize: '13.5px', lineHeight: 1.62, color: C.ink2 },\n            }, [\n                t('group.sasReadAloud'), h('b', { key: 'b', style: { color: C.ink } }, `all ${group.members.length - 1} other members`),\n                ' \u2014 in person, or on a call where you recognise every voice. Everyone must see the same code.',\n            ]),\n\n            h('p', {\n                key: 'warn',\n                style: {\n                    margin: 0, padding: '11px 13px', borderRadius: '9px', fontSize: '12.5px', lineHeight: 1.55,\n                    background: 'rgba(var(--sb-red-rgb), 0.09)', border: '1px solid rgba(var(--sb-red-rgb), 0.26)', color: 'var(--sb-red-soft)',\n                },\n            }, failed\n                ? t('group.errNothingSent')\n                : t('group.sasWarning')),\n\n            h('div', { key: 'actions', style: { display: 'flex', gap: '10px' } }, [\n                h('button', { key: 'c', onClick: onCancel, style: { ...btn(failed), flex: failed ? 2 : 1 } },\n                    failed ? t('group.close') : t('group.cancel')),\n                !failed && h('button', {\n                    key: 'ok', onClick: onConfirm, disabled: waiting,\n                    style: { ...btn(true), flex: 2, opacity: waiting ? 0.4 : 1, cursor: waiting ? 'not-allowed' : 'pointer' },\n                }, [svg(ICON.shield, { key: 'i' }), t('group.sasEveryone')]),\n            ]),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// creating a group\n// ---------------------------------------------------------------------------\n\n/**\n * Pick members from the 1:1 chats that are already verified.\n *\n * Only verified sessions are offered. A group built on an unverified session\n * would inherit that session's uncertainty and hide it behind a group code that\n * looks like it settled the question.\n */\nexport function CreateGroupModal({ candidates, relayOnly, onCreate, onCancel }) {\n    const [name, setName] = React.useState('');\n    const [picked, setPicked] = React.useState([]);\n    const max = GROUP_LIMITS.MAX_MEMBERS - 1; // the creator takes one slot\n\n    const toggle = (id) => setPicked((prev) => (\n        prev.includes(id) ? prev.filter((x) => x !== id)\n            : prev.length >= max ? prev : [...prev, id]\n    ));\n\n    const ready = name.trim().length > 0 && picked.length >= 1;\n\n    return h('div', { style: overlay, role: 'dialog', 'aria-modal': 'true' },\n        h('div', { style: { ...card, maxWidth: '470px' } }, [\n            h('div', { key: 'h', style: { display: 'flex', flexDirection: 'column', gap: '6px' } }, [\n                h('span', { key: 'l', style: label }, t('group.new')),\n                h('p', {\n                    key: 'p',\n                    style: { margin: 0, fontSize: '13.5px', lineHeight: 1.6, color: C.ink2 },\n                }, t('group.capacity', { max: GROUP_LIMITS.MAX_MEMBERS })),\n            ]),\n\n            h('input', {\n                key: 'name',\n                value: name,\n                // Clamped by BYTES, because that is the limit the protocol\n                // enforces. Counting characters here let a Cyrillic name through\n                // the dialog that the admin's roster signing then rejected.\n                onChange: (e) => setName(clampToBytes(e.target.value, GROUP_LIMITS.MAX_NAME_BYTES)),\n                placeholder: t('group.name'),\n                style: {\n                    width: '100%', padding: '12px 14px', borderRadius: '10px', outline: 'none',\n                    background: C.panel2, border: `1px solid ${C.line2}`, color: C.ink,\n                    fontFamily: 'inherit', fontSize: '14.5px',\n                },\n            }),\n\n            h('div', { key: 'pick', style: { display: 'flex', flexDirection: 'column', gap: '9px' } }, [\n                h('div', { key: 'l', style: { display: 'flex', justifyContent: 'space-between', alignItems: 'baseline' } }, [\n                    h('span', { key: 'a', style: label }, t('group.members')),\n                    h('span', { key: 'b', style: { ...label, color: picked.length >= max ? C.warn : C.ink3 } },\n                        `${picked.length} / ${max}`),\n                ]),\n                candidates.length === 0\n                    ? h('div', {\n                        key: 'empty',\n                        style: {\n                            padding: '18px 14px', borderRadius: '10px', textAlign: 'center',\n                            background: C.panel2, border: `1px dashed ${C.line2}`, color: C.ink3, fontSize: '13px', lineHeight: 1.55,\n                        },\n                    }, t('group.noVerified'))\n                    : h('div', {\n                        key: 'list',\n                        className: 'msc-scroll',\n                        style: { display: 'flex', flexDirection: 'column', gap: '6px', maxHeight: '240px', overflowY: 'auto' },\n                    }, candidates.map((c) => {\n                        const on = picked.includes(c.id);\n                        const full = !on && picked.length >= max;\n                        return h('button', {\n                            key: c.id,\n                            onClick: () => toggle(c.id),\n                            disabled: full,\n                            style: {\n                                display: 'flex', alignItems: 'center', gap: '11px', padding: '10px 12px',\n                                borderRadius: '10px', cursor: full ? 'not-allowed' : 'pointer', textAlign: 'start',\n                                background: on ? 'rgba(var(--sb-orange-rgb), 0.1)' : 'transparent',\n                                border: `1px solid ${on ? 'rgba(var(--sb-orange-rgb), 0.32)' : C.line}`,\n                                opacity: full ? 0.4 : 1, fontFamily: 'inherit',\n                            },\n                        }, [\n                            h('span', {\n                                key: 'av',\n                                style: {\n                                    flex: 'none', width: '32px', height: '32px', borderRadius: '9px', display: 'grid',\n                                    placeItems: 'center', background: C.panel2, border: `1px solid ${C.line}`,\n                                    fontFamily: C.mono, fontSize: '11px', fontWeight: 700, color: C.ink2,\n                                },\n                            }, c.mono),\n                            h('span', { key: 'n', style: { flex: 1, minWidth: 0, fontSize: '14px', color: C.ink, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, c.name),\n                            h('span', {\n                                key: 'tick',\n                                style: {\n                                    flex: 'none', width: '18px', height: '18px', borderRadius: '5px',\n                                    background: on ? C.accentSolid : 'transparent',\n                                    border: `1px solid ${on ? C.accentSolid : C.line2}`,\n                                },\n                            }),\n                        ]);\n                    })),\n            ]),\n\n            // A group is a bigger exposure than a 1:1 chat: without a relay, every\n            // member's address is visible to every other member, including people\n            // the user did not personally invite. Say it before they commit, not\n            // after.\n            !relayOnly && h('p', {\n                key: 'ip',\n                style: {\n                    margin: 0, padding: '11px 13px', borderRadius: '9px', fontSize: '12.5px', lineHeight: 1.55,\n                    background: 'rgba(var(--sb-yellow-2-rgb), 0.08)', border: '1px solid rgba(var(--sb-yellow-2-rgb), 0.26)', color: 'var(--sb-yellow-2)',\n                },\n            }, t('group.relayOnlyOff')),\n\n            h('div', { key: 'actions', style: { display: 'flex', gap: '10px' } }, [\n                h('button', { key: 'c', onClick: onCancel, style: { ...btn(false), flex: 1 } }, t('group.cancelBtn')),\n                h('button', {\n                    key: 'ok',\n                    onClick: () => ready && onCreate({ name: name.trim(), sessionIds: picked }),\n                    disabled: !ready,\n                    style: { ...btn(true), flex: 2, opacity: ready ? 1 : 0.4, cursor: ready ? 'pointer' : 'not-allowed' },\n                }, t('group.create')),\n            ]),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// something went wrong forming a group\n// ---------------------------------------------------------------------------\n\n/**\n * Says what failed and what to do about it.\n *\n * Group formation runs across several links at once, so a failure here is\n * usually one dead connection rather than anything the user did wrong. The\n * message names the cause; there is nothing to retry automatically, because a\n * link that is down will still be down a second later.\n */\nexport function GroupErrorModal({ message, onDismiss }) {\n    if (!message) return null;\n    return h('div', { style: overlay, role: 'alertdialog', 'aria-modal': 'true' },\n        h('div', { style: { ...card, maxWidth: '400px' } }, [\n            h('span', { key: 'l', style: label }, t('group.errNotCreated')),\n            h('p', {\n                key: 'm',\n                style: { margin: 0, fontSize: '14px', lineHeight: 1.6, color: C.ink2 },\n            }, message),\n            h('button', { key: 'ok', onClick: onDismiss, style: btn(true) }, t('group.close')),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// adding people to a running group\n// ---------------------------------------------------------------------------\n\n/**\n * Invite more members into an open group.\n *\n * Only verified 1:1 chats that are not already in the group are offered, and the\n * dialog says plainly what adding somebody costs: a new epoch, and a new code\n * that everyone has to compare again. The safety code covers the member set, so\n * a changed set means the old code no longer describes who is in the room.\n */\nexport function AddMembersModal({ candidates, remaining, onAdd, onCancel }) {\n    const [picked, setPicked] = React.useState([]);\n    const toggle = (id) => setPicked((prev) => (\n        prev.includes(id) ? prev.filter((x) => x !== id)\n            : prev.length >= remaining ? prev : [...prev, id]\n    ));\n\n    return h('div', { style: overlay, role: 'dialog', 'aria-modal': 'true' },\n        h('div', { style: { ...card, maxWidth: '440px' } }, [\n            h('div', { key: 'h', style: { display: 'flex', flexDirection: 'column', gap: '6px' } }, [\n                h('span', { key: 'l', style: label }, t('group.addMembers')),\n                h('p', {\n                    key: 'p',\n                    style: { margin: 0, fontSize: '13.5px', lineHeight: 1.6, color: C.ink2 },\n                }, remaining > 0\n                    ? t('group.roomFor', { remaining })\n                    : t('group.errFull')),\n            ]),\n\n            candidates.length === 0\n                ? h('div', {\n                    key: 'empty',\n                    style: {\n                        padding: '18px 14px', borderRadius: '10px', textAlign: 'center',\n                        background: C.panel2, border: `1px dashed ${C.line2}`, color: C.ink3, fontSize: '13px', lineHeight: 1.55,\n                    },\n                }, t('group.noMoreToAdd'))\n                : h('div', {\n                    key: 'list',\n                    className: 'msc-scroll',\n                    style: { display: 'flex', flexDirection: 'column', gap: '6px', maxHeight: '260px', overflowY: 'auto' },\n                }, candidates.map((c) => {\n                    const on = picked.includes(c.id);\n                    const full = !on && picked.length >= remaining;\n                    return h('button', {\n                        key: c.id,\n                        onClick: () => toggle(c.id),\n                        disabled: full,\n                        style: {\n                            display: 'flex', alignItems: 'center', gap: '11px', padding: '10px 12px',\n                            borderRadius: '10px', cursor: full ? 'not-allowed' : 'pointer', textAlign: 'start',\n                            background: on ? 'rgba(var(--sb-orange-rgb), 0.1)' : 'transparent',\n                            border: `1px solid ${on ? 'rgba(var(--sb-orange-rgb), 0.32)' : C.line}`,\n                            opacity: full ? 0.4 : 1, fontFamily: 'inherit',\n                        },\n                    }, [\n                        h('span', {\n                            key: 'av',\n                            style: {\n                                flex: 'none', width: '32px', height: '32px', borderRadius: '9px', display: 'grid',\n                                placeItems: 'center', background: C.panel2, border: `1px solid ${C.line}`,\n                                fontFamily: C.mono, fontSize: '11px', fontWeight: 700, color: C.ink2,\n                            },\n                        }, c.mono),\n                        h('span', { key: 'n', style: { flex: 1, minWidth: 0, fontSize: '14px', color: C.ink, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, c.name),\n                        h('span', {\n                            key: 'tick',\n                            style: {\n                                flex: 'none', width: '18px', height: '18px', borderRadius: '5px',\n                                background: on ? C.accentSolid : 'transparent',\n                                border: `1px solid ${on ? C.accentSolid : C.line2}`,\n                            },\n                        }),\n                    ]);\n                })),\n\n            h('p', {\n                key: 'note',\n                style: {\n                    margin: 0, padding: '11px 13px', borderRadius: '9px', fontSize: '12.5px', lineHeight: 1.55,\n                    background: C.panel2, border: `1px solid ${C.line}`, color: C.ink3,\n                },\n            }, t('group.inviteSentNote')),\n\n            h('div', { key: 'actions', style: { display: 'flex', gap: '10px' } }, [\n                h('button', { key: 'c', onClick: onCancel, style: { ...btn(false), flex: 1 } }, t('group.cancelBtn')),\n                h('button', {\n                    key: 'ok',\n                    onClick: () => picked.length && onAdd(picked),\n                    disabled: picked.length === 0,\n                    style: { ...btn(true), flex: 2, opacity: picked.length ? 1 : 0.4, cursor: picked.length ? 'pointer' : 'not-allowed' },\n                }, picked.length > 1 ? t('group.invitePeople', { count: picked.length }) : t('group.invite')),\n            ]),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// an inbound invitation\n// ---------------------------------------------------------------------------\n\nexport function GroupInviteModal({ invite, onAccept, onDecline }) {\n    if (!invite) return null;\n    return h('div', { style: overlay, role: 'dialog', 'aria-modal': 'true' },\n        h('div', { style: card }, [\n            h('div', { key: 'h', style: { display: 'flex', flexDirection: 'column', gap: '6px' } }, [\n                h('span', { key: 'l', style: label }, t('group.invitation')),\n                h('h3', { key: 't', style: { margin: 0, fontSize: '19px', fontWeight: 700, color: C.ink } }, invite.name),\n            ]),\n            h('p', {\n                key: 'p',\n                style: { margin: 0, fontSize: '13.5px', lineHeight: 1.62, color: C.ink2 },\n            }, [\n                h('b', { key: 'b', style: { color: C.ink } }, invite.fromLabel),\n                ' invited you to a peer-to-peer group. You will compare one safety code with every member before anything is sent.',\n            ]),\n            h('p', {\n                key: 'note',\n                style: {\n                    margin: 0, padding: '11px 13px', borderRadius: '9px', fontSize: '12.5px', lineHeight: 1.55,\n                    background: C.panel2, border: `1px solid ${C.line}`, color: C.ink3,\n                },\n            }, t('group.joinNote')),\n            h('div', { key: 'actions', style: { display: 'flex', gap: '10px' } }, [\n                h('button', { key: 'd', onClick: onDecline, style: { ...btn(false), flex: 1 } }, t('group.decline')),\n                h('button', { key: 'a', onClick: onAccept, style: { ...btn(true), flex: 2 } }, t('group.join')),\n            ]),\n        ]));\n}\n\n// ---------------------------------------------------------------------------\n// the conversation\n// ---------------------------------------------------------------------------\n\nfunction MemberStrip({ group, onRemove, isAdmin }) {\n    return h('div', {\n        className: 'msc-scroll',\n        style: {\n            display: 'flex', gap: '7px', padding: '9px 16px', overflowX: 'auto',\n            borderBottom: `1px solid ${C.line}`, flex: 'none',\n        },\n    }, group.members.map((m) => {\n        const self = m.state === MEMBER_STATE.SELF;\n        const lost = m.state === MEMBER_STATE.LOST;\n        const dot = self || m.state === MEMBER_STATE.LINKED ? C.goodSolid\n            : m.state === MEMBER_STATE.PENDING ? C.warnSolid : C.badSolid;\n        const via = m.state === MEMBER_STATE.PENDING;\n        return h('span', {\n            key: m.fp,\n            title: self ? 'You'\n                : m.state === MEMBER_STATE.LINKED ? t('group.directLink')\n                : m.state === MEMBER_STATE.PENDING ? t('group.noDirectLink')\n                : t('group.memberOffline', { name: m.name }),\n            style: {\n                flex: 'none', display: 'inline-flex', alignItems: 'center', gap: '6px',\n                padding: '5px 10px', borderRadius: '20px',\n                // A member who is offline should not read as one who is present.\n                // They stay listed because membership is a signed, epoch-ordered\n                // fact that a dropped connection does not change \u2014 but the chip\n                // says plainly that nothing sent now reaches them.\n                background: lost ? 'transparent' : C.panel2,\n                border: `1px solid ${lost ? 'rgba(var(--sb-red-rgb), 0.3)' : C.line}`,\n                fontSize: '12.5px', color: self ? C.ink : (lost ? C.ink3 : C.ink2),\n                opacity: lost ? 0.75 : 1,\n            },\n        }, [\n            h('span', { key: 'd', style: { width: '7px', height: '7px', borderRadius: '50%', background: dot } }),\n            h('span', { key: 'n', style: lost ? { textDecoration: 'line-through' } : undefined }, self ? 'You' : m.name),\n            lost && h('span', {\n                key: 'off',\n                style: { fontFamily: C.mono, fontSize: '10px', color: C.bad, letterSpacing: '0.04em' },\n            }, 'offline'),\n            via && svg(ICON.relay, { key: 'r', color: C.warn }),\n            (isAdmin && !self && onRemove) && h('button', {\n                key: 'x',\n                onClick: () => onRemove(m.fp),\n                title: t('group.remove', { name: m.name }),\n                style: { border: 'none', background: 'transparent', color: C.ink3, cursor: 'pointer', display: 'grid', padding: 0 },\n                dangerouslySetInnerHTML: { __html: '<svg width=\"12\" height=\"12\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.4\" stroke-linecap=\"round\"><path d=\"M18 6 6 18M6 6l12 12\"/></svg>' },\n            }),\n        ]);\n    }));\n}\n\nfunction Bubble({ msg }) {\n    const mine = msg.type === 'sent';\n    const system = msg.type === 'system';\n    if (system) {\n        return h('div', {\n            style: {\n                alignSelf: 'center', maxWidth: '80%', textAlign: 'center', padding: '6px 12px',\n                borderRadius: '9px', background: C.panel2, border: `1px solid ${C.line}`,\n                fontSize: '12px', color: C.ink3, lineHeight: 1.5,\n            },\n        }, msg.message);\n    }\n    return h('div', {\n        style: {\n            alignSelf: mine ? 'flex-end' : 'flex-start', maxWidth: 'min(74%, 560px)',\n            display: 'flex', flexDirection: 'column', gap: '3px',\n        },\n    }, [\n        !mine && h('span', {\n            key: 'who',\n            style: { fontSize: '11.5px', fontWeight: 600, color: C.accent, paddingInlineStart: '3px' },\n        }, msg.senderName || t('group.member')),\n        h('div', {\n            key: 'b',\n            style: {\n                padding: '9px 13px', borderRadius: mine ? '13px 13px 4px 13px' : '13px 13px 13px 4px',\n                background: mine ? 'rgba(var(--sb-orange-rgb), 0.14)' : C.panel2,\n                border: `1px solid ${mine ? 'rgba(var(--sb-orange-rgb), 0.26)' : C.line}`,\n                color: C.ink, fontSize: '14.5px', lineHeight: 1.5, wordBreak: 'break-word', whiteSpace: 'pre-wrap',\n            },\n        }, msg.message),\n        h('span', {\n            key: 't',\n            style: { fontFamily: C.mono, fontSize: '10px', color: C.ink3, alignSelf: mine ? 'flex-end' : 'flex-start', padding: '0 3px' },\n        }, [\n            new Date(msg.timestamp || Date.now()).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit' }),\n            msg.relayed ? ' \u00B7 relayed' : '',\n        ].join('')),\n    ]);\n}\n\nexport function GroupChatView({\n    group, input, setInput, onSend, onLeave, onRemoveMember, onAddMembers, isAdmin, scrollRef,\n    onStartCall, callActive, callOverlay,\n}) {\n    const ready = group.phase === GROUP_PHASE.READY && group.sasConfirmed;\n    // Only members we are RELAYING to. A member who is offline is not relayed \u2014\n    // they are unreachable, which the member strip already says in its own\n    // words \u2014 and counting them here put a notice about relaying on screen for\n    // a situation where nothing is being relayed at all.\n    const degraded = group.members.some((m) => m.state === MEMBER_STATE.PENDING);\n\n    const submit = (e) => {\n        e.preventDefault();\n        if (!ready || !input.trim()) return;\n        onSend(input);\n    };\n\n    return h('div', {\n        style: {\n            position: 'relative', display: 'flex', flexDirection: 'column',\n            height: '100%', minHeight: 0, background: C.bg,\n        },\n    }, [\n        // Responsive rules the inline styles cannot express. The group header had\n        // none, so on a phone the drawer hamburger \u2014 which is position:fixed at the\n        // top-left corner \u2014 sat directly on top of the group's avatar and name. The\n        // 1:1 header has always reserved that space; this is the same reservation,\n        // plus the safe-area strip an installed web view draws under.\n        h('style', {\n            key: 'head-css',\n            dangerouslySetInnerHTML: {\n                __html: '@media (max-width:1023px){'\n                    + '.sb-group-header{padding-inline-start:58px !important;gap:9px !important;}'\n                    + '}'\n                    + '@media (max-width:600px){'\n                    // Icon-only actions: three labelled buttons and a group name do not\n                    // fit a narrow screen, and the name is the part that must not be cut.\n                    + '.sb-group-header .sb-gh-label{display:none !important;}'\n                    + '.sb-group-header .sb-gh-btn{padding:8px 10px !important;}'\n                    + '}',\n            },\n        }),\n\n        // header\n        h('div', {\n            key: 'head',\n            className: 'sb-group-header',\n            style: {\n                flex: 'none', display: 'flex', alignItems: 'center', gap: '12px',\n                padding: 'var(--sb-safe-top, 0px) 16px 0',\n                minHeight: 'calc(64px + var(--sb-safe-top, 0px))',\n                borderBottom: `1px solid ${C.line}`,\n            },\n        }, [\n            h('span', {\n                key: 'av',\n                style: {\n                    flex: 'none', width: '38px', height: '38px', borderRadius: '11px', display: 'grid',\n                    placeItems: 'center', background: 'rgba(var(--sb-orange-rgb), 0.12)',\n                    border: '1px solid rgba(var(--sb-orange-rgb), 0.24)', color: C.accent,\n                    fontFamily: C.mono, fontSize: '12px', fontWeight: 700,\n                },\n            }, groupInitials(group.name)),\n            h('div', { key: 'meta', style: { flex: 1, minWidth: 0 } }, [\n                h('div', {\n                    key: 'n',\n                    style: { fontSize: '15px', fontWeight: 700, color: C.ink, overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' },\n                }, group.name),\n                h('div', {\n                    key: 's',\n                    style: { fontSize: '11.5px', color: degraded ? C.warn : C.ink3, display: 'flex', alignItems: 'center', gap: '5px' },\n                }, [\n                    svg(ICON.users, { key: 'i', width: '13px', height: '13px' }),\n                    t('group.membersCount', { count: group.members.length }),\n                    ready && group.sasCode\n                        ? h('span', { key: 'code', dir: 'ltr', style: { unicodeBidi: 'isolate' } }, t('group.codeSuffix', { code: group.sasCode }))\n                        : '',\n                ]),\n            ]),\n            // Calls are offered only once the group is usable: a call before the\n            // safety code is confirmed would be media on links nobody has\n            // authenticated as belonging to this group.\n            (ready && onStartCall) && h('button', {\n                key: 'callvoice', className: 'sb-gh-btn', onClick: () => onStartCall(false), disabled: callActive,\n                title: t('groupCall.startVoice'), 'aria-label': t('groupCall.startVoice'),\n                style: {\n                    ...btn(false), flex: 'none', padding: '8px 10px', opacity: callActive ? 0.4 : 1,\n                    cursor: callActive ? 'default' : 'pointer',\n                },\n            }, svg(ICON.phone, { key: 'i' })),\n            (ready && onStartCall) && h('button', {\n                key: 'callvideo', className: 'sb-gh-btn', onClick: () => onStartCall(true), disabled: callActive,\n                title: t('groupCall.startVideo'), 'aria-label': t('groupCall.startVideo'),\n                style: {\n                    ...btn(false), flex: 'none', padding: '8px 10px', opacity: callActive ? 0.4 : 1,\n                    cursor: callActive ? 'default' : 'pointer',\n                },\n            }, svg(ICON.video, { key: 'i' })),\n            (isAdmin && onAddMembers && group.members.length < GROUP_LIMITS.MAX_MEMBERS) && h('button', {\n                key: 'add', className: 'sb-gh-btn', onClick: onAddMembers, title: t('group.inviteMore'),\n                style: { ...btn(false), flex: 'none', padding: '8px 12px', fontSize: '12.5px' },\n            }, [\n                svg(ICON.plus, { key: 'i' }),\n                h('span', { key: 'l', className: 'sb-gh-label' }, t('group.add')),\n            ]),\n            h('button', {\n                key: 'leave', className: 'sb-gh-btn', onClick: onLeave, title: t('group.leaveThis'),\n                'aria-label': t('group.leaveThis'),\n                style: { ...btn(false), flex: 'none', padding: '8px 12px', fontSize: '12.5px', color: C.bad, borderColor: 'rgba(var(--sb-red-rgb), 0.3)' },\n            }, [\n                svg(ICON.exit, { key: 'i' }),\n                h('span', { key: 'l', className: 'sb-gh-label' }, t('group.leave')),\n            ]),\n        ]),\n\n        h(MemberStrip, { key: 'strip', group, onRemove: onRemoveMember, isAdmin }),\n\n        degraded && ready && h('div', {\n            key: 'relay-note',\n            style: {\n                flex: 'none', padding: '8px 16px', fontSize: '12px', lineHeight: 1.5, color: C.warn,\n                background: 'rgba(var(--sb-yellow-2-rgb), 0.08)', borderBottom: `1px solid ${C.line}`,\n            },\n        }, t('group.relayNote')),\n\n        // transcript\n        h('div', {\n            key: 'msgs',\n            ref: scrollRef,\n            className: 'msc-scroll',\n            style: {\n                flex: 1, minHeight: 0, overflowY: 'auto', padding: '18px 16px',\n                display: 'flex', flexDirection: 'column', gap: '11px',\n            },\n        }, group.messages.length === 0\n            ? [h('div', {\n                key: 'empty',\n                style: { margin: 'auto', textAlign: 'center', color: C.ink3, fontSize: '13.5px', lineHeight: 1.6, maxWidth: '320px' },\n            }, ready\n                ? t('group.emptyChat')\n                : t('group.sasCompare'))]\n            : group.messages.map((m) => h(Bubble, { key: m.id, msg: m }))),\n\n        // composer\n        h('form', {\n            key: 'composer',\n            onSubmit: submit,\n            style: {\n                flex: 'none', display: 'flex', gap: '9px', padding: '12px 16px',\n                borderTop: `1px solid ${C.line}`, alignItems: 'flex-end',\n            },\n        }, [\n            h('input', {\n                key: 'in',\n                value: input,\n                onChange: (e) => setInput(e.target.value),\n                placeholder: ready ? t('group.message', { name: group.name }) : t('group.confirmFirst'),\n                disabled: !ready,\n                maxLength: GROUP_LIMITS.MAX_BODY_BYTES,\n                style: {\n                    flex: 1, minWidth: 0, padding: '12px 14px', borderRadius: '11px', outline: 'none',\n                    background: C.panel2, border: `1px solid ${C.line2}`, color: C.ink,\n                    fontFamily: 'inherit', fontSize: '14.5px', opacity: ready ? 1 : 0.5,\n                },\n            }),\n            h('button', {\n                key: 'send', type: 'submit', disabled: !ready || !input.trim(), title: t('group.send'),\n                style: {\n                    ...btn(true), flex: 'none', width: '44px', height: '44px', padding: 0, borderRadius: '11px',\n                    opacity: (!ready || !input.trim()) ? 0.4 : 1,\n                },\n            }, svg(ICON.send)),\n        ]),\n\n        // The group call covers the transcript when it is running and renders\n        // nothing when it is not \u2014 the same shape as the 1:1 call overlay.\n        callOverlay,\n    ]);\n}\n", "// GroupCallMedia \u2014 the media half of a group call.\n//\n// WHAT THIS IS\n// ------------\n// A group call in SecureBit is not a conference. There is no mixer, no SFU and\n// no server: it is N-1 ordinary encrypted 1:1 calls, one to each other member,\n// each riding the pairwise session that member already has with us \u2014 a session\n// whose DTLS transport a human authenticated by comparing a safety code. Nobody\n// but the two endpoints of a leg ever holds the keys that leg's audio is under,\n// which is the same guarantee the 1:1 call has, kept N-1 times over rather than\n// traded away for a server that would make the call cheaper.\n//\n// This class owns exactly three things:\n//\n//   1. ONE capture for the whole call. Not one per leg. Seven legs opening\n//      getUserMedia on the same microphone is seven captures of one microphone,\n//      seven camera indicators, and on several devices simply a failure. The\n//      capture is made here and handed to each manager, which attaches its\n//      tracks and is forbidden from stopping them.\n//\n//   2. WHO DIALS. Both ends of a pair would otherwise place a call to each\n//      other at the same moment and negotiate over the top of themselves. The\n//      rule is the whole of the fix: the member with the lexicographically\n//      smaller fingerprint calls, the other answers. Every member computes it\n//      from the same two values and gets the same answer, so exactly one call\n//      is placed per pair with nothing to coordinate.\n//\n//   3. WHAT THE UI SEES. One snapshot covering every leg, so the call renders\n//      as one call rather than as N-1 unrelated ones.\n//\n// WHAT IT DOES NOT OWN\n// --------------------\n// Who is in the call. That is GroupSession's, and it travels as signed group\n// frames that reach members this class can never reach \u2014 a member with no\n// direct link has no leg here, and is shown as \"connecting\" while the mesh\n// builds one, rather than being invisible.\n//\n// Injected rather than imported (`getManager`, `getUserMedia`), for the same\n// reason GroupSession injects its transport: the dialling rule and the leg\n// bookkeeping are the parts worth testing, and they should not need a browser.\n\n/** Per-leg lifecycle, as the UI reads it. */\nexport const LEG_STATE = Object.freeze({\n    UNREACHABLE: 'unreachable', // no direct link yet \u2014 the mesh is still building one\n    CONNECTING: 'connecting',   // a leg exists, media has not started flowing\n    ACTIVE: 'active',           // audio (and video, if any) is flowing\n    FAILED: 'failed',           // the leg was attempted and did not come up\n});\n\n/** Media the leg is actually carrying, for the tile that renders it. */\nconst PHASE_TO_STATE = {\n    idle: LEG_STATE.CONNECTING,\n    outgoing: LEG_STATE.CONNECTING,\n    incoming: LEG_STATE.CONNECTING,\n    connecting: LEG_STATE.CONNECTING,\n    active: LEG_STATE.ACTIVE,\n    ended: LEG_STATE.FAILED,\n};\n\n/**\n * Speech detection thresholds, on the RMS of a 0..1 normalised waveform.\n *\n * Two of them, not one, because a single threshold makes the indicator flicker\n * on every syllable boundary: normal speech crosses any fixed line several times\n * a second. Rising past ON marks someone as speaking; they stay marked until\n * they have been continuously below OFF for HOLD_MS, which is roughly the length\n * of a pause between words.\n */\nexport const SPEAKING = Object.freeze({ ON: 0.05, OFF: 0.025, HOLD_MS: 600, SAMPLE_MS: 120 });\n\n/**\n * How long the answering side waits before dialling the pair itself.\n *\n * Long enough that a working dial has certainly arrived \u2014 offers travel the same\n * data channel the group already uses, so this is seconds of margin, not\n * guesswork \u2014 and short enough that a member who would otherwise be stuck on\n * \"connecting\" for the whole call gets a second chance while the call still\n * matters.\n */\nexport const FALLBACK_DIAL_MS = 8000;\n\n/**\n * A level meter over one MediaStream, built on Web Audio.\n *\n * Web Audio rather than the WebRTC stats API on purpose: `audioLevel` on a\n * receiver is not carried by every browser this app runs in, and where it is,\n * it arrives on the stats interval rather than on demand. An AnalyserNode is\n * available everywhere, reads the actual decoded waveform, and works the same\n * way for the local microphone as for a remote leg \u2014 so \"who is speaking\" is one\n * mechanism rather than two that disagree.\n */\nfunction webAudioLevelMeter(context, stream) {\n    if (!context || !stream) return null;\n    let source;\n    try {\n        source = context.createMediaStreamSource(stream);\n    } catch (_) {\n        return null;   // a stream with no audio track, or a context that is gone\n    }\n    const analyser = context.createAnalyser();\n    analyser.fftSize = 512;\n    analyser.smoothingTimeConstant = 0.2;\n    source.connect(analyser);\n    // Deliberately NOT connected to the destination: playback is the audio\n    // element's job, and routing it here too would play every voice twice.\n    const buffer = new Uint8Array(analyser.fftSize);\n\n    return {\n        read() {\n            analyser.getByteTimeDomainData(buffer);\n            let sum = 0;\n            for (let i = 0; i < buffer.length; i++) {\n                const v = (buffer[i] - 128) / 128;\n                sum += v * v;\n            }\n            return Math.sqrt(sum / buffer.length);\n        },\n        close() {\n            try { source.disconnect(); } catch (_) {}\n            try { analyser.disconnect(); } catch (_) {}\n        },\n    };\n}\n\nexport class GroupCallMedia {\n    /**\n     * @param {object} deps\n     * @param {(sessionId: string) => object|null} deps.getManager  pairwise manager by session id\n     * @param {(constraints: object) => Promise<MediaStream>} [deps.getUserMedia]\n     * @param {() => void} [deps.onChange]  called whenever the snapshot changes\n     * @param {(level: string, message: string, context?: object) => void} [deps.log]\n     */\n    constructor({\n        getManager, getUserMedia = null, createAudioSink = null, createLevelMeter = null,\n        onChange = () => {}, log = () => {},\n    }) {\n        this._getManager = getManager;\n        this._getUserMedia = getUserMedia\n            || ((constraints) => navigator.mediaDevices.getUserMedia(constraints));\n        /**\n         * Where a member's voice actually plays.\n         *\n         * NOT in the call's React tree, deliberately. The tiles unmount whenever\n         * the user switches to another chat, and audio elements that live in\n         * them take the call's sound with them \u2014 a call that goes silent because\n         * somebody looked at a different window is not a call. The controller\n         * owns one detached audio element per leg for the life of that leg, and\n         * the tiles render video only.\n         */\n        this._createAudioSink = createAudioSink\n            || (() => (typeof Audio === 'function' ? new Audio() : null));\n        /**\n         * How loud a stream is right now, for the speaking indicator.\n         *\n         * Injected so the whole hysteresis rule below can be tested without a\n         * browser, and so a platform with no Web Audio simply has no indicator\n         * rather than no call.\n         */\n        this._createLevelMeter = createLevelMeter\n            || ((stream) => webAudioLevelMeter(this._audioContext(), stream));\n        this._onChange = onChange;\n        this._log = log;\n\n        this.callId = null;\n        this.selfFp = '';\n        this.withVideo = false;\n        this.micEnabled = true;\n        this.cameraEnabled = false;\n        this.facingMode = 'user';\n        this.error = null;\n\n        this.localStream = null;\n        /** fp -> { fp, name, sessionId, manager, unsubscribe, sink, state, quality, hasVideo } */\n        this._legs = new Map();\n        /** The participant list as GroupSession last reported it. */\n        this._peers = [];\n        /** Guards flipCamera / setCamera against overlapping captures. */\n        this._busy = false;\n\n        /** Shared AudioContext for every level meter in this call. */\n        this._ctx = null;\n        /** Our own microphone's meter, and whether it is currently carrying speech. */\n        this._selfMeter = null;\n        this.selfSpeaking = false;\n        this._selfQuietSince = 0;\n        /** The polling timer that reads every meter. */\n        this._levelTimer = null;\n    }\n\n    /**\n     * One AudioContext for the whole call, created on first use.\n     *\n     * A context per leg would be several audio graphs and several hardware\n     * callbacks for one conversation, and browsers cap how many a page may hold.\n     * It is resumed rather than assumed: a context created outside a gesture\n     * starts suspended, and a suspended context reads silence forever \u2014 which\n     * would look exactly like nobody ever speaking.\n     */\n    _audioContext() {\n        if (this._ctx) return this._ctx;\n        const Ctor = typeof AudioContext !== 'undefined' ? AudioContext\n            : (typeof webkitAudioContext !== 'undefined' ? webkitAudioContext : null);\n        if (!Ctor) return null;\n        try {\n            this._ctx = new Ctor();\n            if (this._ctx.state === 'suspended') this._ctx.resume().catch(() => {});\n        } catch (_) {\n            this._ctx = null;\n        }\n        return this._ctx;\n    }\n\n    get active() {\n        return this.callId !== null;\n    }\n\n    // -----------------------------------------------------------------------\n    // joining and leaving\n    // -----------------------------------------------------------------------\n\n    /**\n     * Capture, then start building legs.\n     *\n     * The capture comes FIRST and its failure aborts the join, because a call\n     * this device cannot speak into is not a call \u2014 and the failure has to be\n     * reported as a device problem (permission, no microphone, another app\n     * holding it) rather than left to look like the group failed to connect.\n     *\n     * CALL IT WITH NO PEERS to capture without connecting anything, then call\n     * setPeers once the group has been told you are in the call. That ordering\n     * is not cosmetic \u2014 see setPeers.\n     *\n     * @param {{callId: string, selfFp: string, withVideo?: boolean, peers?: object[]}} opts\n     */\n    async join({ callId, selfFp, withVideo = false, peers = [] }) {\n        if (this.callId === callId) { this.setPeers(peers); return; }\n        if (this.callId) await this.leave();\n\n        this.callId = callId;\n        this.selfFp = selfFp;\n        this.withVideo = withVideo === true;\n        this.micEnabled = true;\n        this.cameraEnabled = this.withVideo;\n        this.error = null;\n        this._changed();\n\n        try {\n            this.localStream = await this._getUserMedia({\n                audio: { echoCancellation: true, noiseSuppression: true, autoGainControl: true },\n                video: this.withVideo\n                    ? { facingMode: this.facingMode, width: { ideal: 1280 }, height: { ideal: 720 } }\n                    : false,\n            });\n        } catch (error) {\n            this.callId = null;\n            this.error = mediaErrorCode(error);\n            this._changed();\n            throw error;\n        }\n\n        this._selfMeter = this._createLevelMeter(this.localStream);\n        this._startLevelPolling();\n        this.setPeers(peers);\n    }\n\n    /**\n     * The participant list changed: reconcile the legs against it.\n     *\n     * Called whenever anything moves \u2014 somebody joins, somebody leaves, a member\n     * who was relayed gets a direct link. Idempotent, so the caller can run it\n     * on every group event without tracking what actually differs.\n     *\n     * ORDERING: the group must be told we are in the call BEFORE this runs.\n     * Attaching a leg can place an offer immediately, and an offer that arrives\n     * at a member who has not yet heard we joined lands on a session they do not\n     * yet know is a call leg \u2014 so they ring instead of answering, and the dialler\n     * sits at \"connecting\" for the rest of the call. Announcing first works\n     * because both the join frame and the offer travel the same ordered data\n     * channel, so the join cannot overtake it.\n     *\n     * @param {{fp: string, name: string, sessionId: string|null, self?: boolean}[]} peers\n     */\n    setPeers(peers) {\n        this._peers = Array.isArray(peers) ? peers : [];\n        if (!this.active) return;\n\n        const wanted = new Map();\n        for (const peer of this._peers) {\n            if (!peer || !peer.fp || peer.fp === this.selfFp) continue;\n            wanted.set(peer.fp, peer);\n        }\n\n        // Legs whose member left the call, or whose link moved to a different\n        // session, are torn down first \u2014 a leg on a dead session id would keep a\n        // sender attached to a peer connection nobody is on the other end of.\n        for (const [fp, leg] of [...this._legs]) {\n            const peer = wanted.get(fp);\n            if (!peer || peer.sessionId !== leg.sessionId) this._detach(fp);\n        }\n\n        for (const [fp, peer] of wanted) {\n            const existing = this._legs.get(fp);\n            if (existing) {\n                // A leg that failed is retried on the next reconciliation rather\n                // than being written off for the rest of the call. The usual\n                // cause is transient \u2014 the pairwise session was mid-repair when\n                // the offer was placed \u2014 and without this the member stayed\n                // silent for as long as the call lasted even after their link\n                // came back.\n                if (existing.state === LEG_STATE.FAILED && this._weDial(fp)) this._dial(existing);\n                continue;\n            }\n            if (!peer.sessionId) continue;   // relayed only: no leg to build yet\n            this._attach(fp, peer);\n        }\n\n        this._changed();\n    }\n\n    /** Tear down every leg and release the capture. */\n    async leave() {\n        this._stopLevelPolling();\n        if (this._selfMeter) { try { this._selfMeter.close?.(); } catch (_) {} this._selfMeter = null; }\n        this.selfSpeaking = false;\n        for (const fp of [...this._legs.keys()]) this._detach(fp);\n        if (this._ctx) { try { this._ctx.close?.(); } catch (_) {} this._ctx = null; }\n        if (this.localStream) {\n            for (const track of this.localStream.getTracks()) {\n                try { track.stop(); } catch (_) { /* already ended */ }\n            }\n        }\n        this.localStream = null;\n        this.callId = null;\n        this.selfFp = '';\n        this.withVideo = false;\n        this.cameraEnabled = false;\n        this.micEnabled = true;\n        this._peers = [];\n        this._changed();\n    }\n\n    // -----------------------------------------------------------------------\n    // legs\n    // -----------------------------------------------------------------------\n\n    /**\n     * Who places the call for this pair.\n     *\n     * Both members run this and get opposite answers, so exactly one offer is\n     * made. Comparing fingerprints rather than, say, join order means the answer\n     * does not depend on anything the two members might disagree about.\n     */\n    _weDial(peerFp) {\n        return this.selfFp < peerFp;\n    }\n\n    _attach(fp, peer) {\n        const manager = this._getManager(peer.sessionId);\n        if (!manager) return;\n\n        const leg = {\n            fp,\n            name: peer.name || 'Member',\n            sessionId: peer.sessionId,\n            manager,\n            unsubscribe: null,\n            sink: this._createAudioSink(),\n            meter: null,\n            fallback: null,\n            speaking: false,\n            quietSince: 0,\n            state: LEG_STATE.CONNECTING,\n            quality: null,\n            hasVideo: false,\n        };\n        if (leg.sink) { leg.sink.autoplay = true; leg.sink.muted = false; }\n        this._legs.set(fp, leg);\n\n        // Order matters: the context has to be set before the offer can arrive,\n        // or the answering side rings the user for a call they already joined.\n        try { manager.setCallGroupContext(this.callId); } catch (_) {}\n        try { manager.setExternalMediaStream(this.localStream); } catch (_) {}\n\n        if (typeof manager.addCallStateListener === 'function') {\n            leg.unsubscribe = manager.addCallStateListener((state) => this._onLegState(fp, state));\n        }\n\n        // Start from what the session is ACTUALLY doing. A leg attached to a\n        // manager that is already mid-call \u2014 a member rebound to a link that was\n        // carrying us a moment ago \u2014 would otherwise sit at \"connecting\" until\n        // the next state change happened to come along, which for a call that is\n        // already up may be never.\n        this._onLegState(fp, manager.getCallState?.() || {});\n\n        if (this._weDial(fp)) {\n            this._dial(leg);\n            return;\n        }\n        // We are the answering side, so there is nothing to do but wait \u2014 unless\n        // the offer never comes. That is not hypothetical: the peer's dial can\n        // fail on their side and their retry only runs when a group event happens\n        // to fire. After a grace period long enough that a working dial would\n        // have arrived, take the call ourselves. Only ONE side of a pair ever\n        // does this \u2014 the side that was not going to dial \u2014 so it cannot produce\n        // two offers crossing, and it is skipped outright if anything has reached\n        // this session in the meantime.\n        leg.fallback = setTimeout(() => this._dialFallback(fp), FALLBACK_DIAL_MS);\n    }\n\n    _dialFallback(fp) {\n        const leg = this._legs.get(fp);\n        if (!leg || !this.active) return;\n        leg.fallback = null;\n        const phase = leg.manager.getCallState?.().phase || 'idle';\n        if (phase !== 'idle') return;   // something arrived; leave it alone\n        this._log('info', 'group call leg was never dialled by the peer; dialling it', {});\n        Promise.resolve()\n            .then(() => leg.manager.startCall(this.withVideo))\n            .catch(() => {\n                const live = this._legs.get(fp);\n                if (live === leg) { live.state = LEG_STATE.FAILED; this._changed(); }\n            });\n    }\n\n    /** Place this leg's call. */\n    _dial(leg) {\n        const phase = leg.manager.getCallState?.().phase || 'idle';\n        if (phase !== 'idle') return;\n        leg.state = LEG_STATE.CONNECTING;\n        Promise.resolve()\n            .then(() => leg.manager.startCall(this.withVideo))\n            .catch((error) => {\n                this._log('warn', 'group call leg could not be placed', {\n                    errorType: error?.constructor?.name,\n                });\n                const live = this._legs.get(leg.fp);\n                if (live === leg) { live.state = LEG_STATE.FAILED; this._changed(); }\n            });\n    }\n\n    _detach(fp) {\n        const leg = this._legs.get(fp);\n        if (!leg) return;\n        this._legs.delete(fp);\n        if (leg.fallback) { clearTimeout(leg.fallback); leg.fallback = null; }\n        try { leg.unsubscribe?.(); } catch (_) {}\n        if (leg.sink) {\n            try { leg.sink.pause?.(); } catch (_) {}\n            try { leg.sink.srcObject = null; } catch (_) {}\n        }\n        if (leg.meter) { try { leg.meter.close?.(); } catch (_) {} leg.meter = null; }\n        // End first, then release the borrowed capture and the context: ending\n        // the other way round would have the manager tear down a call it no\n        // longer believes belongs to a group.\n        try { leg.manager.endCall?.(); } catch (_) {}\n        try { leg.manager.setExternalMediaStream?.(null); } catch (_) {}\n        try { leg.manager.setCallGroupContext?.(null); } catch (_) {}\n    }\n\n    _onLegState(fp, state) {\n        const leg = this._legs.get(fp);\n        if (!leg) return;\n        const phase = state?.phase || 'idle';\n        if (leg.fallback && phase !== 'idle') { clearTimeout(leg.fallback); leg.fallback = null; }\n        leg.state = PHASE_TO_STATE[phase] || LEG_STATE.CONNECTING;\n        leg.quality = state?.quality || null;\n        leg.hasVideo = state?.remoteHasVideo === true;\n        this._pumpAudio(leg);\n        this._changed();\n    }\n\n    /**\n     * Keep this leg's audio element pointed at its current inbound stream.\n     *\n     * The manager rebuilds that stream whenever its receivers change \u2014 a track\n     * arriving late, a camera being switched on \u2014 and hands back a NEW\n     * MediaStream each time so a consumer can tell. Reassigning here on every\n     * state change is what keeps a leg audible across those rebuilds; assigning\n     * once at attach time left the first seconds of some calls silent.\n     */\n    _pumpAudio(leg) {\n        if (!leg.sink) return;\n        let stream = null;\n        try { stream = leg.manager.getRemoteMediaStream?.() || null; } catch (_) { return; }\n        if (!stream || leg.sink.srcObject === stream) return;\n        try {\n            leg.sink.srcObject = stream;\n            const played = leg.sink.play?.();\n            if (played && played.catch) played.catch(() => {});\n        } catch (_) { /* an element that will not play is not worth throwing over */ }\n        // The meter follows the stream, not the leg: the manager hands back a new\n        // MediaStream whenever its receivers change, and a meter left on the old\n        // one reads silence from then on.\n        if (leg.meter) { try { leg.meter.close?.(); } catch (_) {} }\n        leg.meter = this._createLevelMeter(stream);\n        leg.speaking = false;\n    }\n\n    // -----------------------------------------------------------------------\n    // who is speaking\n    // -----------------------------------------------------------------------\n\n    _startLevelPolling() {\n        if (this._levelTimer || typeof setInterval !== 'function') return;\n        this._levelTimer = setInterval(() => this._sampleLevels(), SPEAKING.SAMPLE_MS);\n    }\n\n    _stopLevelPolling() {\n        if (this._levelTimer) { clearInterval(this._levelTimer); this._levelTimer = null; }\n    }\n\n    /**\n     * Turn a level into a speaking flag, with hysteresis and a hold.\n     *\n     * `holder` is whatever object carries the flag \u2014 a leg, or this instance for\n     * our own microphone \u2014 so the same rule runs for everyone and the local tile\n     * cannot disagree with a remote one about what counts as talking.\n     */\n    _applyLevel(holder, key, quietKey, level, now) {\n        const speaking = holder[key] === true;\n        if (level >= SPEAKING.ON) {\n            holder[quietKey] = 0;\n            if (!speaking) { holder[key] = true; return true; }\n            return false;\n        }\n        if (!speaking) return false;\n        if (level > SPEAKING.OFF) { holder[quietKey] = 0; return false; }\n        if (!holder[quietKey]) { holder[quietKey] = now; return false; }\n        if (now - holder[quietKey] >= SPEAKING.HOLD_MS) { holder[key] = false; return true; }\n        return false;\n    }\n\n    _sampleLevels() {\n        if (!this.active) return;\n        const now = Date.now();\n        let changed = false;\n\n        // A muted microphone is not speech, whatever the waveform says \u2014 the\n        // track is disabled, so nothing is going out, and showing ourselves as\n        // talking would be telling the user the opposite of what is happening.\n        const selfLevel = (this.micEnabled && this._selfMeter) ? safeRead(this._selfMeter) : 0;\n        if (this._applyLevel(this, 'selfSpeaking', '_selfQuietSince', selfLevel, now)) changed = true;\n\n        for (const leg of this._legs.values()) {\n            const level = leg.meter ? safeRead(leg.meter) : 0;\n            if (this._applyLevel(leg, 'speaking', 'quietSince', level, now)) changed = true;\n        }\n\n        // Only when a flag actually flipped. Pushing a snapshot every 120ms would\n        // re-render the whole call ten times a second for no visible reason.\n        if (changed) this._changed();\n    }\n\n    // -----------------------------------------------------------------------\n    // controls \u2014 applied to every leg at once, because it is one call\n    // -----------------------------------------------------------------------\n\n    setMic(enabled) {\n        this.micEnabled = enabled !== false;\n        if (this.localStream) {\n            for (const track of this.localStream.getAudioTracks()) track.enabled = this.micEnabled;\n        }\n        // Muting clears the speaking mark at once rather than letting it decay\n        // through the hold: the hold exists to ride out pauses in speech, and\n        // pressing mute is not a pause. Half a second of still looking like you\n        // are talking is exactly the half second that matters.\n        if (!this.micEnabled) { this.selfSpeaking = false; this._selfQuietSince = 0; }\n        // The per-leg managers read enabled-ness off the shared tracks, so this\n        // is the whole of it \u2014 but their own call state still carries a mic flag\n        // that a 1:1 UI would render, so keep it honest.\n        for (const leg of this._legs.values()) {\n            try { leg.manager.setMicEnabled?.(this.micEnabled); } catch (_) {}\n        }\n        this._changed();\n    }\n\n    toggleMic() { this.setMic(!this.micEnabled); }\n\n    /**\n     * Turn the camera on or off for the whole call.\n     *\n     * Turning it on when the call started as voice captures a camera track and\n     * adds it to every leg, each of which renegotiates its own connection. That\n     * is N-1 renegotiations for one button, which is the honest cost of having\n     * no server in the middle.\n     */\n    async setCamera(enabled) {\n        if (!this.active || this._busy) return;\n        if (enabled === false) {\n            this.cameraEnabled = false;\n            if (this.localStream) {\n                for (const track of this.localStream.getVideoTracks()) track.enabled = false;\n            }\n            for (const leg of this._legs.values()) {\n                try { leg.manager.setCameraEnabled?.(false); } catch (_) {}\n            }\n            this._changed();\n            return;\n        }\n\n        const existing = this.localStream?.getVideoTracks?.() || [];\n        if (existing.length) {\n            for (const track of existing) track.enabled = true;\n            this.cameraEnabled = true;\n            this.withVideo = true;\n            this._changed();\n            return;\n        }\n\n        this._busy = true;\n        try {\n            const camera = await this._getUserMedia({\n                video: { facingMode: this.facingMode, width: { ideal: 1280 }, height: { ideal: 720 } },\n            });\n            const track = camera.getVideoTracks()[0];\n            if (!track) return;\n            this.localStream.addTrack(track);\n            this.cameraEnabled = true;\n            this.withVideo = true;\n            await Promise.allSettled([...this._legs.values()].map(\n                (leg) => Promise.resolve().then(() => leg.manager.addVideoTrack?.(track)),\n            ));\n        } catch (error) {\n            this.error = mediaErrorCode(error);\n            this.cameraEnabled = false;\n        } finally {\n            this._busy = false;\n            this._changed();\n        }\n    }\n\n    async toggleCamera() { await this.setCamera(!this.cameraEnabled); }\n\n    /** Front/back camera. One capture, swapped into every leg without renegotiating. */\n    async flipCamera() {\n        if (!this.active || this._busy || !this.localStream) return;\n        const old = this.localStream.getVideoTracks()[0];\n        if (!old) return;\n\n        this._busy = true;\n        const previous = this.facingMode;\n        this.facingMode = this.facingMode === 'user' ? 'environment' : 'user';\n        try {\n            const camera = await this._getUserMedia({ video: { facingMode: this.facingMode } });\n            const track = camera.getVideoTracks()[0];\n            if (!track) { this.facingMode = previous; return; }\n            track.enabled = this.cameraEnabled;\n            this.localStream.removeTrack(old);\n            try { old.stop(); } catch (_) {}\n            this.localStream.addTrack(track);\n            await Promise.allSettled([...this._legs.values()].map(\n                (leg) => Promise.resolve().then(() => leg.manager.replaceVideoTrack?.(track)),\n            ));\n        } catch (error) {\n            this.facingMode = previous;\n            this._log('warn', 'group call camera flip failed', { errorType: error?.constructor?.name });\n        } finally {\n            this._busy = false;\n            this._changed();\n        }\n    }\n\n    // -----------------------------------------------------------------------\n    // what the UI reads\n    // -----------------------------------------------------------------------\n\n    getLocalStream() {\n        return this.localStream;\n    }\n\n    /** The inbound stream for one member, or null while their leg is coming up. */\n    getRemoteStream(fp) {\n        const leg = this._legs.get(fp);\n        if (!leg) return null;\n        try { return leg.manager.getRemoteMediaStream?.() || null; } catch (_) { return null; }\n    }\n\n    /**\n     * One call, as one object.\n     *\n     * Every participant appears, including the ones with no leg: a member who is\n     * in the call but reachable only through a relay is CONNECTING, not absent.\n     * Hiding them would make a mesh that is still building look like a member\n     * who declined.\n     */\n    snapshot() {\n        const peers = this._peers\n            .filter((peer) => peer && peer.fp !== this.selfFp)\n            .map((peer) => {\n                const leg = this._legs.get(peer.fp);\n                return {\n                    fp: peer.fp,\n                    name: peer.name || 'Member',\n                    state: leg ? leg.state : LEG_STATE.UNREACHABLE,\n                    quality: leg ? leg.quality : null,\n                    hasVideo: leg ? leg.hasVideo : false,\n                    speaking: leg ? leg.speaking === true : false,\n                };\n            })\n            .sort((a, b) => (a.fp < b.fp ? -1 : a.fp > b.fp ? 1 : 0));\n\n        return {\n            active: this.active,\n            callId: this.callId,\n            withVideo: this.withVideo,\n            micEnabled: this.micEnabled,\n            cameraEnabled: this.cameraEnabled,\n            facingMode: this.facingMode,\n            error: this.error,\n            selfSpeaking: this.selfSpeaking,\n            peers,\n            connected: peers.filter((p) => p.state === LEG_STATE.ACTIVE).length,\n        };\n    }\n\n    _changed() {\n        try { this._onChange(this.snapshot()); } catch (_) {}\n    }\n}\n\n/**\n * A getUserMedia failure, as a code the UI can turn into a sentence.\n *\n * Kept identical to the 1:1 call's vocabulary: these are device and permission\n * problems, and telling them apart from a connection problem is the difference\n * between \"allow the microphone\" and a user staring at a call that looks broken.\n */\n/** A meter that throws is a meter that is gone; it must not take the call with it. */\nfunction safeRead(meter) {\n    try { return meter.read(); } catch (_) { return 0; }\n}\n\nexport function mediaErrorCode(error) {\n    const name = error?.name || '';\n    if (name === 'NotAllowedError' || name === 'SecurityError') return 'permission_denied';\n    if (name === 'NotFoundError' || name === 'OverconstrainedError') return 'device_not_found';\n    if (name === 'NotReadableError' || name === 'AbortError') return 'device_busy';\n    return 'media_failed';\n}\n", "// The geometry of a gallery view.\n//\n// Separated from the component because it is arithmetic, not rendering: it has\n// no React in it, it is the part that was actually wrong when tiles came out\n// tiny on a desktop, and it is the part worth pinning down in a test that does\n// not need a browser to run.\n\n/** Gap between tiles, and the shape each one holds. */\nexport const TILE_GAP = 10;\nexport const TILE_ASPECT = 16 / 9;\n/** Below this a tile stops shrinking and the grid scrolls instead. */\nexport const MIN_TILE_W = 150;\n\n/**\n * How big each tile should be, given the space there actually is.\n *\n * The first version of this picked a column count from the number of people and\n * let CSS divide the width. That is wrong in both directions and it showed:\n * capped, three people on a wide monitor got three small tiles adrift in empty\n * space; uncapped, they got three letterbox strips. Neither is what a call\n * looks like, because neither is looking at the window.\n *\n * So do what a gallery view does: try every column count, work out how large a\n * tile could be at that count \u2014 bounded by the width a column gets AND by the\n * height its row gets, since a tile has a fixed shape and the smaller of the two\n * wins \u2014 and keep whichever count makes the tiles biggest. Two people on a wide\n * screen come out side by side and enormous; six come out three by two; the same\n * six on a phone come out two by three, because there the height is what is\n * plentiful. Nothing is special-cased per device.\n *\n * Pure and exported so the arithmetic can be tested without a browser.\n *\n * @returns {{cols: number, rows: number, tileW: number, tileH: number}}\n */\nexport function gridLayout(count, width, height, {\n    gap = TILE_GAP, aspect = TILE_ASPECT, minWidth = MIN_TILE_W,\n} = {}) {\n    if (count <= 0) return { cols: 0, rows: 0, tileW: 0, tileH: 0 };\n    if (!(width > 0) || !(height > 0)) {\n        // Not measured yet \u2014 first paint, or a container with no layout. Fall\n        // back to a shape that is reasonable rather than to zero-sized tiles.\n        const cols = Math.min(count, count <= 2 ? count : Math.ceil(Math.sqrt(count)));\n        return { cols, rows: Math.ceil(count / cols), tileW: 0, tileH: 0 };\n    }\n\n    let best = { cols: 1, rows: count, tileW: 0, tileH: 0 };\n    for (let cols = 1; cols <= count; cols++) {\n        const rows = Math.ceil(count / cols);\n        const perColumn = (width - gap * (cols - 1)) / cols;\n        const perRow = (height - gap * (rows - 1)) / rows;\n        if (perColumn <= 0 || perRow <= 0) continue;\n        // A tile keeps its aspect ratio, so it is as large as the tighter of the\n        // two constraints allows \u2014 never stretched to fill one of them.\n        const tileW = Math.min(perColumn, perRow * aspect);\n        if (tileW > best.tileW) best = { cols, rows, tileW, tileH: tileW / aspect };\n    }\n\n    if (best.tileW < minWidth) {\n        // Too many people for the space. Stop shrinking and let the grid scroll:\n        // tiles small enough to be unreadable are worse than a scrollbar.\n        best.tileW = minWidth;\n        best.tileH = minWidth / aspect;\n    }\n    return best;\n}\n\n/**\n * The spotlight arrangement: one large tile, the rest in a strip beneath it.\n *\n * A gallery is the right default \u2014 in a call of three or four everyone is worth\n * the same amount of screen. It stops being right the moment someone is\n * presenting, or the moment there are enough people that equal shares means\n * nobody is legible. So a tile can be pinned, and the stage splits: the pinned\n * person takes what is left after a strip of thumbnails, and the strip scrolls\n * sideways rather than shrinking further.\n *\n * The strip's height is a fraction of the stage, floored and capped, because a\n * proportion alone gives useless thumbnails on a phone and absurd ones on a\n * 4K monitor.\n *\n * @returns {{stageH: number, main: {w: number, h: number}, stripH: number, thumbW: number}}\n */\nexport function spotlightLayout(othersCount, width, height, {\n    gap = TILE_GAP, aspect = TILE_ASPECT, minThumb = 92, maxThumb = 168,\n} = {}) {\n    if (!(width > 0) || !(height > 0)) {\n        return { main: { w: 0, h: 0 }, stripH: 0, thumbW: 0 };\n    }\n    if (othersCount <= 0) {\n        const w = Math.min(width, height * aspect);\n        return { main: { w, h: w / aspect }, stripH: 0, thumbW: 0 };\n    }\n\n    const thumbW = Math.max(minThumb, Math.min(maxThumb, Math.round(height * 0.2 * aspect)));\n    const stripH = thumbW / aspect;\n    const mainH = height - stripH - gap;\n    const mainW = Math.min(width, mainH * aspect);\n    // Refuse to split a stage that cannot carry the split. The test is not\n    // \"does it fit\" but \"is it worth it\": a main tile barely larger than the\n    // thumbnails below it spotlights nobody, it just takes a gallery and makes\n    // one cell slightly bigger. Below that the caller falls back to the gallery,\n    // and is told so by a main tile of zero rather than a useless one.\n    if (mainH <= 0 || mainW < thumbW * 2) {\n        return { main: { w: 0, h: 0 }, stripH: 0, thumbW: 0 };\n    }\n    return { main: { w: mainW, h: mainW / aspect }, stripH, thumbW };\n}\n", "import { t } from '../../i18n/index.js';\nimport { LEG_STATE } from '../../group/groupCallMedia.js';\nimport { gridLayout, spotlightLayout, TILE_GAP } from './callLayout.js';\n// Group call surfaces: the ringing prompt, the tile grid, the control bar and\n// the minimized dock.\n//\n// It is deliberately the same visual language as the 1:1 call (CallUI.jsx) \u2014\n// same icons, same control discs, same encrypted badge \u2014 because it is the same\n// thing happening more than once, and a second design would suggest otherwise.\n// What it adds is the part a group call has and a 1:1 call does not: a tile per\n// member, each carrying that member's own connection state, because in a mesh\n// call the connection is per pair and \"the call is fine\" is not a thing anybody\n// can say on behalf of everyone else.\n//\n// Purely presentational. All media and all signalling live in GroupCallMedia\n// and GroupSession; this reads a snapshot and calls back.\n\nconst h = (...args) => React.createElement(...args);\nconst MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\nconst ICON = {\n    lock: '<path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/><rect x=\"4.5\" y=\"11\" width=\"15\" height=\"9\" rx=\"2.2\"/>',\n    minimize: '<path d=\"M9 4v4a1 1 0 0 1-1 1H4M15 4v4a1 1 0 0 0 1 1h4M9 20v-4a1 1 0 0 0-1-1H4M15 20v-4a1 1 0 0 1 1-1h4\"/>',\n    expand: '<path d=\"M15 3h6v6M9 21H3v-6M21 3l-7 7M3 21l7-7\"/>',\n    users: '<path d=\"M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19\"/><circle cx=\"10\" cy=\"8\" r=\"3.2\"/><path d=\"M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4\"/><path d=\"M15.5 5.3a3.2 3.2 0 0 1 0 5.4\"/>',\n    micOn: '<rect x=\"9\" y=\"3\" width=\"6\" height=\"11\" rx=\"3\"/><path d=\"M5 11a7 7 0 0 0 14 0\"/><path d=\"M12 18v3\"/>',\n    micOff: '<path d=\"M9 9v-1a3 3 0 0 1 5.1-2.1M15 11v3a3 3 0 0 1-4.6 2.5\"/><path d=\"M5 11a7 7 0 0 0 10.3 6.2M19 11a7 7 0 0 1-.4 2.3\"/><path d=\"M12 18v3\"/><path d=\"M3 3l18 18\"/>',\n    camOn: '<path d=\"M23 7l-7 5 7 5V7z\"/><rect x=\"1\" y=\"5\" width=\"15\" height=\"14\" rx=\"2.5\"/>',\n    camOff: '<path d=\"M16 16H3a1 1 0 0 1-1-1V7a1 1 0 0 1 1-1h2l2-2M11 6h2l7-3v14M2 2l20 20\"/>',\n    grid: '<rect x=\"3\" y=\"3\" width=\"7.5\" height=\"7.5\" rx=\"1.6\"/><rect x=\"13.5\" y=\"3\" width=\"7.5\" height=\"7.5\" rx=\"1.6\"/><rect x=\"3\" y=\"13.5\" width=\"7.5\" height=\"7.5\" rx=\"1.6\"/><rect x=\"13.5\" y=\"13.5\" width=\"7.5\" height=\"7.5\" rx=\"1.6\"/>',\n    flip: '<path d=\"M3 7h3l2-2h8l2 2h3v12H3z\"/><path d=\"M9.5 13a2.5 2.5 0 0 1 5 0M14.5 13l-1.3-1.3M14.5 13l1.3-1.3\"/>',\n    phone: '<path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\"/>',\n    phoneHangup: '<path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\" transform=\"rotate(135 12 12)\"/>',\n};\n\nconst svg = (inner, size, sw) => h('span', {\n    style: { display: 'grid', placeItems: 'center', width: size + 'px', height: size + 'px' },\n    dangerouslySetInnerHTML: { __html: `<svg width=\"${size}\" height=\"${size}\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"${sw}\" stroke-linecap=\"round\" stroke-linejoin=\"round\">${inner}</svg>` },\n});\n\nconst ctrlBase = {\n    width: '56px', height: '56px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n    border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.05)',\n    color: 'var(--sb-text-4)', cursor: 'pointer', transition: 'all .15s',\n};\nconst dangerCtrl = { ...ctrlBase, background: 'var(--sb-red-strong-solid)', color: '#fff', border: '1px solid transparent' };\nconst endBtn = {\n    width: '56px', height: '56px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n    border: 'none', background: 'var(--sb-red-strong-solid)', color: '#fff', cursor: 'pointer',\n    boxShadow: '0 8px 24px rgba(var(--sb-red-strong-rgb), 0.35)', transition: 'transform .15s',\n};\nconst minimizeBtn = {\n    width: '36px', height: '36px', borderRadius: '9px', display: 'grid', placeItems: 'center',\n    border: '1px solid rgba(var(--sb-ink), 0.15)', background: 'rgba(0,0,0,0.35)',\n    color: '#fff', cursor: 'pointer', transition: 'all .15s',\n};\n\n// `color` labels the quality in words; `solid` fills the signal bars. A bar is a\n// mark, so it keeps the brand colour in both themes \u2014 see src/styles/theme.css.\nconst QUALITY = {\n    excellent: { bars: 4, color: 'var(--sb-green)', solid: 'var(--sb-green-solid)' },\n    good: { bars: 3, color: 'var(--sb-green)', solid: 'var(--sb-green-solid)' },\n    fair: { bars: 2, color: 'var(--sb-yellow)', solid: 'var(--sb-yellow-solid)' },\n    poor: { bars: 1, color: 'var(--sb-red)', solid: 'var(--sb-red-solid)' },\n};\n\nfunction qualityBars(quality) {\n    const q = QUALITY[quality];\n    if (!q) return null;\n    return h('span', { key: 'q', style: { display: 'inline-flex', alignItems: 'flex-end', gap: '2px', height: '12px' } },\n        [0, 1, 2, 3].map((i) => h('span', {\n            key: i,\n            style: {\n                width: '2.5px', height: (4 + i * 2.6) + 'px', borderRadius: '1px',\n                background: i < q.bars ? q.solid : 'rgba(var(--sb-ink), 0.18)',\n            },\n        })));\n}\n\nfunction initials(name) {\n    const words = String(name || '').trim().split(/\\s+/).filter(Boolean);\n    return ((words[0]?.[0] || '') + (words[1]?.[0] || words[0]?.[1] || '')).toUpperCase() || '#';\n}\n\nconst fmt = (s) => `${String(Math.floor(s / 60)).padStart(2, '0')}:${String(s % 60).padStart(2, '0')}`;\n\n/**\n * The size of an element, kept current as it changes.\n *\n * The layout above needs real numbers, and the only honest source of those is\n * the element itself: the window's size says nothing about a panel inside a\n * sidebar layout, and a call that is resized \u2014 a window dragged wider, a phone\n * turned \u2014 has to re-solve rather than keep the size it was born with.\n */\nfunction useMeasuredSize() {\n    const [size, setSize] = React.useState({ w: 0, h: 0 });\n    // A CALLBACK ref, not an object one, and this is the whole point of the hook.\n    //\n    // With `useRef` the effect's only dependency is the ref object, which never\n    // changes \u2014 so the effect runs exactly once, on mount. The element it wants\n    // to measure is inside a branch that mount does not always render: whoever\n    // JOINS a call sees the \"somebody is calling\" prompt first, and there is no\n    // stage in it. Their effect ran against `null`, never ran again, and the\n    // size stayed 0\u00D70 for the rest of the call while the person who STARTED the\n    // call \u2014 mounted straight into the grid \u2014 measured fine. One user saw a\n    // normal call and the other saw tiles collapsed to the width of their own\n    // labels, from the same code.\n    //\n    // A callback ref is state: React calls it when the node attaches and again\n    // when it detaches, so the effect re-runs the moment there is something to\n    // measure. It also covers the same trip through the minimized dock, which\n    // unmounts the stage and brings it back.\n    const [node, setNode] = React.useState(null);\n    React.useLayoutEffect(() => {\n        if (!node) return undefined;\n        const apply = () => setSize((prev) => (\n            prev.w === node.clientWidth && prev.h === node.clientHeight\n                ? prev                       // same numbers, same object: no re-render\n                : { w: node.clientWidth, h: node.clientHeight }\n        ));\n        apply();   // before paint, so the first frame is already laid out\n        if (typeof ResizeObserver === 'undefined') {\n            window.addEventListener('resize', apply);\n            return () => window.removeEventListener('resize', apply);\n        }\n        const observer = new ResizeObserver(apply);\n        observer.observe(node);\n        return () => observer.disconnect();\n    }, [node]);\n    return [setNode, size];\n}\n\n/**\n * One member's tile.\n *\n * A tile always says what THIS leg is doing, never what the call is doing. In a\n * mesh call one member can be connected while another is still being dialled,\n * and a single shared status line would have to lie about one of them.\n */\nfunction Tile({ peer, stream, self, localStream, cameraEnabled, speaking, tileW, tileH, onSelect, pinned, compact }) {\n    const videoRef = React.useRef(null);\n    const source = self ? localStream : stream;\n    const showVideo = self ? cameraEnabled : peer.hasVideo;\n\n    // Video only. Every tile's <video> is MUTED and the call's audio is played by\n    // GroupCallMedia from elements that are not in this tree \u2014 a tile unmounts\n    // whenever the user opens another chat, and a call must not go silent\n    // because somebody looked at a different window.\n    React.useEffect(() => {\n        const el = videoRef.current;\n        if (!el || !source) return;\n        if (el.srcObject !== source) { el.muted = true; el.srcObject = source; }\n        const played = el.play && el.play();\n        if (played && played.catch) played.catch(() => {});\n    });\n\n    // Nothing to say about our own tile: its name already reads \"You\", and the\n    // status slot repeating it put the same word at both ends of the label row.\n    const statusWord = self\n        ? null\n        : peer.state === LEG_STATE.ACTIVE ? null\n            : peer.state === LEG_STATE.UNREACHABLE ? t('groupCall.waitingLink')\n                : peer.state === LEG_STATE.FAILED ? t('groupCall.legFailed')\n                    : t('groupCall.connecting');\n\n    const avatarPx = Math.max(44, Math.min(148, Math.round((tileH || 180) * 0.42)));\n\n    // The speaking ring is drawn as a border on the tile itself rather than as an\n    // overlay, so it cannot be covered by the video and does not change layout\n    // when it appears \u2014 a tile that resized every time somebody spoke would make\n    // the whole grid twitch.\n    return h('div', {\n        // A tile is a control as well as a picture: clicking it spotlights that\n        // person. Given a role and a key handler rather than wrapped in a button,\n        // so a <video> is not nested inside interactive content.\n        role: onSelect ? 'button' : undefined,\n        tabIndex: onSelect ? 0 : undefined,\n        onClick: onSelect,\n        onKeyDown: onSelect ? (e) => { if (e.key === 'Enter' || e.key === ' ') { e.preventDefault(); onSelect(); } } : undefined,\n        title: pinned ? t('groupCall.unpin', { name: peer.name })\n            : onSelect ? t('groupCall.pin', { name: peer.name })\n                : (speaking ? t('groupCall.speaking', { name: peer.name }) : peer.name),\n        style: {\n            cursor: onSelect ? 'pointer' : 'default',\n            position: 'relative', borderRadius: '14px', overflow: 'hidden', background: 'var(--sb-surface)',\n            border: speaking ? '2px solid var(--sb-green-solid)' : '2px solid rgba(var(--sb-ink), 0.08)',\n            boxShadow: speaking ? '0 0 0 3px rgba(var(--sb-green-rgb), 0.16)' : 'none',\n            transition: 'border-color .12s ease, box-shadow .12s ease',\n            // Sized by the grid, which is the only thing that knows how much\n            // room there is. aspectRatio stays as the fallback for the first\n            // paint, before the container has been measured.\n            // Measured: an exact size. Unmeasured: a shape that is still a tile.\n            // The floor matters more than it looks \u2014 without a minimum a flex item\n            // can shrink to its own text, and one bad containing block turned the\n            // whole call into a cluster of label-sized rectangles. Measurement now\n            // makes the layout GOOD; it is no longer what makes it work at all.\n            flex: tileW ? '0 0 auto' : '1 1 260px',\n            minWidth: tileW ? undefined : '200px',\n            width: tileW ? tileW + 'px' : 'auto',\n            height: tileH ? tileH + 'px' : 'auto',\n            aspectRatio: tileH ? undefined : '16 / 9',\n            display: 'grid', placeItems: 'center',\n        },\n    }, [\n        showVideo\n            ? h('video', {\n                key: 'v', ref: videoRef, autoPlay: true, muted: true, playsInline: true,\n                style: {\n                    position: 'absolute', inset: 0, width: '100%', height: '100%', objectFit: 'cover',\n                    transform: self ? 'scaleX(-1)' : 'none', background: 'var(--sb-bg)',\n                },\n            })\n            : h('div', {\n                key: 'av',\n                style: {\n                    // Proportional to the tile: a fixed disc looks lost in a\n                    // large tile and crowds a small one.\n                    width: avatarPx + 'px', height: avatarPx + 'px',\n                    borderRadius: '50%', display: 'grid', placeItems: 'center',\n                    background: 'radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))',\n                    border: speaking ? '1.5px solid rgba(var(--sb-green-rgb), 0.65)' : '1px solid rgba(var(--sb-ink), 0.1)',\n                    color: speaking ? 'var(--sb-green)' : 'var(--sb-text-4)',\n                    fontFamily: MONO, fontSize: Math.round(avatarPx * 0.3) + 'px', fontWeight: 700,\n                    transition: 'color .12s ease, border-color .12s ease',\n                },\n            }, initials(peer.name)),\n        h('div', {\n            key: 'label',\n            style: {\n                position: 'absolute', insetInline: 0, bottom: 0, display: 'flex', alignItems: 'center',\n                gap: compact ? '4px' : '7px', padding: compact ? '4px 6px' : '8px 10px',\n                background: 'linear-gradient(0deg, rgba(0,0,0,0.7), transparent)',\n            },\n        }, [\n            h('span', {\n                key: 'n',\n                style: {\n                    flex: 1, minWidth: 0, fontSize: compact ? '10.5px' : '12.5px', fontWeight: 700, color: 'var(--sb-text-1)',\n                    whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis',\n                },\n            }, peer.name),\n            speaking && h('span', {\n                key: 'sp', style: { flex: 'none', color: 'var(--sb-green)', display: 'grid', placeItems: 'center' },\n            }, svg(ICON.micOn, compact ? 11 : 13, 2)),\n            (statusWord && !compact) && h('span', {\n                key: 's',\n                style: {\n                    flex: 'none', fontFamily: MONO, fontSize: '10.5px',\n                    color: peer.state === LEG_STATE.FAILED ? 'var(--sb-red)' : 'var(--sb-text-6)',\n                },\n            }, statusWord),\n            (!self && !compact) && qualityBars(peer.quality),\n        ]),\n    ]);\n}\n\n/**\n * The whole group-call surface.\n *\n * Three states, in the order they happen: a prompt when somebody else opened a\n * call we have not joined, the grid while we are in it, and a dock when the user\n * wants the transcript back without hanging up.\n */\nexport function GroupCallUI({\n    call, media, groupName, localStream, getRemoteStream,\n    onJoin, onDismiss, onLeave, onToggleMic, onToggleCamera, onFlipCamera,\n}) {\n    // EVERY hook runs before EVERY early return below, without exception.\n    // Measuring the stage was added underneath one of them, so the first render\n    // that reached the grid ran more hooks than the render before it and React\n    // refused it outright (#310, \"rendered more hooks than during the previous\n    // render\") \u2014 which took the whole call down at the moment it started. The\n    // early returns are what make this file easy to get wrong; keeping the hooks\n    // in one block at the top is what makes it hard.\n    const [minimized, setMinimized] = React.useState(false);\n    const [seconds, setSeconds] = React.useState(0);\n    const [pinned, setPinned] = React.useState(null);\n    const [stageRef, stage] = useMeasuredSize();\n    const joined = !!call?.joined;\n\n    React.useEffect(() => {\n        if (!joined) { setSeconds(0); return undefined; }\n        const started = Date.now();\n        const iv = setInterval(() => setSeconds(Math.floor((Date.now() - started) / 1000)), 1000);\n        return () => clearInterval(iv);\n    }, [joined, call?.callId]);\n\n    React.useEffect(() => { if (!call) setMinimized(false); }, [!call]);\n\n    // A pin is dropped when the call ends, and when the person it points at\n    // leaves \u2014 otherwise the stage would spotlight somebody who is not in the\n    // call any more and the rest of the grid would look mysteriously short.\n    const present = React.useMemo(\n        () => new Set(['self', ...(media?.peers || []).map((p) => p.fp)]),\n        [media],\n    );\n    React.useEffect(() => {\n        if (pinned && !present.has(pinned)) setPinned(null);\n    }, [pinned, present]);\n\n    if (!call) return null;\n\n    const encBadge = h('span', {\n        key: 'enc',\n        style: { display: 'inline-flex', alignItems: 'center', gap: '5px', fontSize: '11.5px', fontWeight: 600, color: 'var(--sb-green)' },\n    }, [svg(ICON.lock, 12, 2), t('call.encryptedShort')]);\n\n    // \u2500\u2500 somebody is calling the group and we have not joined \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (!joined) {\n        return h('div', {\n            style: {\n                position: 'absolute', inset: 0, zIndex: 40, display: 'flex', flexDirection: 'column',\n                background: 'radial-gradient(680px 460px at 50% 36%, rgba(var(--sb-orange-rgb), 0.08), transparent 70%), var(--sb-bg-deep)',\n                animation: 'sbExpand .2s ease',\n            },\n        }, [\n            h('div', { key: 'top', style: { flex: 'none', padding: '16px 18px' } },\n                h('span', { style: { display: 'inline-flex', alignItems: 'center', gap: '7px', fontSize: '12px', fontWeight: 600, color: 'var(--sb-green)' } },\n                    [svg(ICON.lock, 13, 2), t('call.encrypted')])),\n            h('div', { key: 'mid', style: { flex: 1, display: 'flex', flexDirection: 'column', alignItems: 'center', justifyContent: 'center', padding: '0 24px', textAlign: 'center' } }, [\n                h('div', {\n                    key: 'av',\n                    style: {\n                        position: 'relative', width: '112px', height: '112px', marginBottom: '26px',\n                        display: 'grid', placeItems: 'center',\n                    },\n                }, [\n                    h('span', { key: 'p1', style: { position: 'absolute', inset: 0, borderRadius: '50%', border: '1.5px solid rgba(var(--sb-orange-rgb), 0.5)', animation: 'sbCallPulse 2s ease-out infinite' } }),\n                    h('span', { key: 'p2', style: { position: 'absolute', inset: 0, borderRadius: '50%', border: '1.5px solid rgba(var(--sb-orange-rgb), 0.4)', animation: 'sbCallPulse 2s ease-out infinite', animationDelay: '1s' } }),\n                    h('div', {\n                        key: 'c',\n                        style: {\n                            width: '96px', height: '96px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n                            background: 'radial-gradient(circle at 35% 30%, var(--sb-surface-4), var(--sb-surface))',\n                            border: '1px solid rgba(var(--sb-ink), 0.1)', color: 'var(--sb-text-7)',\n                        },\n                    }, svg(ICON.users, 42, 1.6)),\n                ]),\n                h('div', { key: 'n', style: { fontSize: '22px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, groupName),\n                h('div', { key: 's', style: { fontFamily: MONO, fontSize: '13.5px', color: 'var(--sb-text-6)', marginTop: '8px' } },\n                    call.withVideo\n                        ? t('groupCall.startedVideo', { name: call.startedByName })\n                        : t('groupCall.startedVoice', { name: call.startedByName })),\n                h('div', { key: 'p', style: { fontSize: '12.5px', color: 'var(--sb-text-9)', marginTop: '6px' } },\n                    t('groupCall.inCall', { count: call.participants.length })),\n            ]),\n            h('div', { key: 'ctrls', style: { flex: 'none', display: 'flex', justifyContent: 'center', gap: '48px', padding: '24px 24px 40px' } }, [\n                h('div', { key: 'dec', style: { display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '8px' } }, [\n                    h('button', { key: 'b', onClick: onDismiss, title: t('groupCall.dismiss'), style: { ...endBtn, width: '62px', height: '62px' } }, svg(ICON.phoneHangup, 24, 1.9)),\n                    h('span', { key: 'l', style: { fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-7)' } }, t('groupCall.dismiss')),\n                ]),\n                h('div', { key: 'acc', style: { display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '8px' } }, [\n                    h('button', {\n                        key: 'b', onClick: onJoin, title: t('groupCall.join'),\n                        style: {\n                            width: '62px', height: '62px', borderRadius: '50%', display: 'grid', placeItems: 'center',\n                            border: 'none', background: 'var(--sb-green-solid)', color: 'var(--sb-on-green)', cursor: 'pointer',\n                            boxShadow: '0 8px 24px rgba(var(--sb-green-rgb), 0.35)',\n                        },\n                    }, svg(ICON.phone, 24, 1.9)),\n                    h('span', { key: 'l', style: { fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-7)' } }, t('groupCall.join')),\n                ]),\n            ]),\n        ]);\n    }\n\n    const peers = media?.peers || [];\n    const selfTile = {\n        fp: 'self', name: t('groupCall.you'), state: LEG_STATE.ACTIVE,\n        hasVideo: media?.cameraEnabled, quality: null, speaking: media?.selfSpeaking === true,\n    };\n\n    // \u2500\u2500 minimized dock \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    if (minimized) {\n        // Collapsed, there are no tiles to carry the indicator, so the one line\n        // the dock has says who is talking instead of how long the call has run.\n        const speakers = peers.filter((p) => p.speaking).map((p) => p.name);\n        const talking = speakers.length === 1 ? speakers[0]\n            : speakers.length > 1 ? speakers.slice(0, 2).join(', ')\n                : (media?.selfSpeaking ? t('groupCall.you') : null);\n        return h('div', {\n            style: {\n                position: 'absolute', bottom: '18px', insetInlineEnd: '18px', zIndex: 40, width: '244px',\n                borderRadius: '14px', overflow: 'hidden', background: 'var(--sb-surface)',\n                border: '1px solid rgba(var(--sb-ink), 0.1)', boxShadow: '0 18px 44px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))',\n                animation: 'sbExpand .18s ease',\n            },\n        }, [\n            h('div', { key: 'bar', style: { display: 'flex', alignItems: 'center', gap: '11px', padding: '11px 12px' } }, [\n                h('span', {\n                    key: 'ic',\n                    style: {\n                        flex: 'none', width: '34px', height: '34px', borderRadius: '9px', display: 'grid',\n                        placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.1)',\n                        border: '1px solid rgba(var(--sb-green-rgb), 0.25)', color: 'var(--sb-green)',\n                    },\n                }, svg(ICON.users, 16, 1.9)),\n                h('div', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                    h('div', { key: 'n', style: { fontSize: '13px', fontWeight: 700, color: 'var(--sb-text-1)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, groupName),\n                    h('div', {\n                        key: 's',\n                        style: {\n                            fontFamily: MONO, fontSize: '11px', color: talking ? 'var(--sb-green)' : 'var(--sb-text-6)',\n                            whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis',\n                        },\n                    }, talking\n                        ? t('groupCall.speaking', { name: talking })\n                        : `${t('groupCall.inCall', { count: call.participants.length })} \u00B7 ${fmt(seconds)}`),\n                ]),\n                h('button', { key: 'exp', onClick: () => setMinimized(false), title: t('call.expand'), style: { flex: 'none', width: '32px', height: '32px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-4)', cursor: 'pointer' } }, svg(ICON.expand, 15, 2)),\n                h('button', { key: 'end', onClick: onLeave, title: t('groupCall.leave'), style: { flex: 'none', width: '32px', height: '32px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-red-strong-solid)', color: '#fff', cursor: 'pointer' } }, svg(ICON.phoneHangup, 15, 2)),\n            ]),\n        ]);\n    }\n\n    // \u2500\u2500 the call itself \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n    const tiles = [selfTile, ...peers];\n    const tileFor = (id) => tiles.find((tile) => tile.fp === id) || null;\n    const spotlight = pinned ? tileFor(pinned) : null;\n    const others = spotlight ? tiles.filter((tile) => tile.fp !== spotlight.fp) : [];\n    const spot = spotlight ? spotlightLayout(others.length, stage.w, stage.h) : null;\n    // A stage too short to split honestly falls back to the gallery rather than\n    // rendering a main tile with no height.\n    const spotlit = spotlight && spot && spot.main.w > 0;\n    const layout = gridLayout(tiles.length, stage.w, stage.h);\n\n    const renderTile = (tile, extra = {}) => h(Tile, {\n        key: tile.fp,\n        peer: tile,\n        self: tile.fp === 'self',\n        speaking: tile.speaking === true,\n        localStream,\n        cameraEnabled: media?.cameraEnabled,\n        stream: tile.fp === 'self' ? null : getRemoteStream(tile.fp),\n        ...extra,\n    });\n\n    return h('div', {\n        style: {\n            position: 'absolute', inset: 0, zIndex: 40, display: 'flex', flexDirection: 'column',\n            background: 'var(--sb-bg-deepest)', animation: 'sbExpand .2s ease',\n        },\n    }, [\n        h('div', {\n            key: 'top',\n            style: {\n                flex: 'none', display: 'flex', alignItems: 'flex-start', justifyContent: 'space-between',\n                gap: '14px', padding: '16px 18px 10px',\n            },\n        }, [\n            h('div', { key: 'l', style: { minWidth: 0 } }, [\n                h('div', { key: 'n', style: { fontSize: '17px', fontWeight: 800, letterSpacing: '-0.3px', color: '#fff', overflow: 'hidden', textOverflow: 'ellipsis', whiteSpace: 'nowrap' } }, groupName),\n                h('div', { key: 's', style: { display: 'inline-flex', alignItems: 'center', gap: '9px', marginTop: '4px' } }, [\n                    h('span', { key: 'd', style: { fontFamily: MONO, fontSize: '12.5px', color: 'var(--sb-text-2)' } }, fmt(seconds)),\n                    encBadge,\n                    h('span', { key: 'c', style: { fontSize: '11.5px', color: 'var(--sb-text-7)' } },\n                        t('groupCall.inCall', { count: call.participants.length })),\n                ]),\n            ]),\n            h('div', { key: 'r', style: { flex: 'none', display: 'flex', alignItems: 'center', gap: '8px' } }, [\n                spotlit && h('button', {\n                    key: 'grid', onClick: () => setPinned(null), title: t('groupCall.showEveryone'),\n                    style: {\n                        height: '36px', padding: '0 12px', borderRadius: '9px', display: 'inline-flex',\n                        alignItems: 'center', gap: '7px', border: '1px solid rgba(var(--sb-ink), 0.15)',\n                        background: 'rgba(0,0,0,0.35)', color: '#fff', cursor: 'pointer',\n                        fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600,\n                    },\n                }, [svg(ICON.grid, 14, 2), t('groupCall.showEveryone')]),\n                h('button', { key: 'min', onClick: () => setMinimized(true), title: t('call.minimize'), style: minimizeBtn }, svg(ICON.minimize, 16, 2)),\n            ]),\n        ]),\n\n        media?.error && h('div', {\n            key: 'err',\n            style: {\n                flex: 'none', margin: '0 18px 10px', padding: '9px 12px', borderRadius: '10px',\n                background: 'rgba(var(--sb-red-rgb), 0.1)', border: '1px solid rgba(var(--sb-red-rgb), 0.28)',\n                color: 'var(--sb-red)', fontSize: '12.5px', lineHeight: 1.5,\n            },\n        }, t(`groupCall.err.${media.error}`)),\n\n        // The stage is what gets measured, so it carries no padding of its own \u2014\n        // padding would be counted as usable room and every tile would come out\n        // slightly too large for the space that is really there.\n        h('div', {\n            key: 'stage',\n            ref: stageRef,\n            className: 'msc-scroll',\n            style: {\n                flex: 1, minHeight: 0, minWidth: 0, overflow: 'auto',\n                // Breathing room as MARGIN, not padding: clientWidth counts\n                // padding as usable space and every tile would come out that\n                // much too wide for the room actually available.\n                margin: '0 14px 6px',\n                // Flex, not grid. A grid with `justify-content: center` sizes its\n                // column to the content, so the row's `width: 100%` had nothing\n                // definite to resolve against and collapsed to the widest label \u2014\n                // which is exactly what the broken screenshot showed. A flex\n                // container keeps a definite content box either way, so a row\n                // asking for the full width gets the full width.\n                // `safe center` centres it without the clipping plain centring\n                // causes once the content overflows: the first row stays\n                // reachable and the stage scrolls as normal.\n                display: 'flex', alignItems: 'safe center', justifyContent: 'safe center',\n            },\n        }, spotlit\n            // \u2500\u2500 spotlight: one person large, the rest in a strip underneath \u2500\u2500\n            ? h('div', {\n                style: {\n                    display: 'flex', flexDirection: 'column', gap: TILE_GAP + 'px',\n                    width: '100%', height: stage.h + 'px', minHeight: 0,\n                },\n            }, [\n                h('div', {\n                    key: 'main',\n                    style: { flex: 'none', display: 'flex', justifyContent: 'center', minHeight: 0 },\n                }, renderTile(spotlight, {\n                    tileW: spot.main.w, tileH: spot.main.h,\n                    pinned: true, onSelect: () => setPinned(null),\n                })),\n                others.length > 0 && h('div', {\n                    key: 'strip',\n                    className: 'msc-scroll',\n                    style: {\n                        flex: 'none', height: spot.stripH + 'px', display: 'flex',\n                        gap: TILE_GAP + 'px', justifyContent: others.length > 4 ? 'flex-start' : 'center',\n                        // The strip scrolls sideways rather than shrinking: past a\n                        // handful of people, thumbnails that keep dividing stop\n                        // being recognisable, which is the whole point of them.\n                        overflowX: 'auto', overflowY: 'hidden',\n                    },\n                }, others.map((tile) => renderTile(tile, {\n                    tileW: spot.thumbW, tileH: spot.stripH, compact: true,\n                    onSelect: () => setPinned(tile.fp),\n                }))),\n            ])\n            // \u2500\u2500 gallery: everyone the same size \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n            : h('div', {\n                // Wrapping flex rather than a grid, for one reason: a call of three\n                // lays out two over one, and in a grid that lone tile is stuck in the\n                // first column with a hole beside it. Fixing the row width to exactly\n                // `cols` tiles makes the wrap land where the layout said it should,\n                // and a short last row centres itself.\n                style: {\n                    display: 'flex', flexWrap: 'wrap', gap: TILE_GAP + 'px',\n                    justifyContent: 'center', alignContent: 'center',\n                    width: layout.tileW\n                        ? (layout.cols * layout.tileW + (layout.cols - 1) * TILE_GAP) + 'px'\n                        : '100%',\n                },\n            }, tiles.map((tile) => renderTile(tile, {\n                tileW: layout.tileW, tileH: layout.tileH,\n                onSelect: () => setPinned(tile.fp),\n            })))),\n\n        h('div', {\n            key: 'ctrls',\n            style: {\n                flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '16px',\n                padding: '16px 20px calc(22px + var(--sb-safe-bottom, env(safe-area-inset-bottom, 0px)))',\n                background: 'linear-gradient(0deg, rgba(0,0,0,0.6), transparent)',\n            },\n        }, [\n            h('button', { key: 'mic', onClick: onToggleMic, title: t('call.mute'), style: media?.micEnabled ? ctrlBase : dangerCtrl },\n                svg(media?.micEnabled ? ICON.micOn : ICON.micOff, 21, 1.9)),\n            h('button', { key: 'cam', onClick: onToggleCamera, title: t('call.camera'), style: media?.cameraEnabled ? ctrlBase : dangerCtrl },\n                svg(media?.cameraEnabled ? ICON.camOn : ICON.camOff, 21, 1.8)),\n            media?.cameraEnabled && h('button', { key: 'flip', onClick: onFlipCamera, title: t('call.flipCamera'), style: ctrlBase }, svg(ICON.flip, 21, 1.8)),\n            h('button', { key: 'end', onClick: onLeave, title: t('groupCall.leave'), style: endBtn }, svg(ICON.phoneHangup, 22, 1.9)),\n        ]),\n    ]);\n}\n\nif (typeof window !== 'undefined') {\n    window.GroupCallUI = GroupCallUI;\n}\n", "import { installDebugWindowHooks } from './utils/debugWindowHooks.js';\nimport { loadIceSettings, saveIceSettings, clearIceSettings } from './network/iceSettingsStore.js';\nimport { startTurnCredentialRefresh } from './network/turnCredentials.js';\nimport {\n    sessionsReducer,\n    createInitialState,\n    createSessionEntry,\n    decorateSessions,\n    monoInitials,\n    statusDot,\n    MY_STATUS_OPTIONS,\n    PRESENCE_DOT,\n    PRESENCE_WORD,\n    SESSION_ACTIONS as SA\n} from './state/sessionsStore.js';\nimport {\n    groupsReducer,\n    createInitialGroupState,\n    createGroupEntry,\n    decorateGroups,\n    GROUP_PHASE,\n    MEMBER_STATE,\n    GROUP_ACTIONS as GA\n} from './state/groupsStore.js';\nimport { GroupSession, GROUP_FRAMES, isGroupFrame, groupFrameType, decodeEnvelope } from './group/GroupSession.js';\nimport { GROUP_LIMITS } from './group/groupCrypto.js';\nimport { createGroupSender } from './group/groupSender.js';\nimport { spring, snapTarget, rubberband, velocityTracker, prefersReducedMotion, SPRING } from './ui/motion.js';\nimport { t, direction, LTR_TEXT } from './i18n/index.js';\nimport { LanguageSuggestion } from './components/ui/LanguageSuggestion.jsx';\n\n// +1 in a left-to-right locale, -1 in a right-to-left one. Only the handful of\n// horizontal transforms that CSS logical properties cannot express need it \u2014\n// everything else mirrors on its own from dir on <html>.\nconst DIR = direction();\n\n// A programmatic smooth scroll is a full-viewport slide, which is exactly what\n// someone who asked for less motion does not want. The jump still happens and\n// still lands in the same place \u2014 it just stops travelling to get there.\nconst scrollBehavior = () => (prefersReducedMotion() ? 'auto' : 'smooth');\n\n// After a chat ends, the start page scrolls to the donation card. The flag covers the\n// usual case where the card only mounts once the chat is gone; the event covers a card\n// that is already on screen. See src/components/ui/DonateCrypto.jsx.\nconst requestDonateScroll = () => {\n    window.__sbScrollToDonate = Date.now();\n    document.dispatchEvent(new CustomEvent('securebit:scroll-to-donate'));\n};\nimport { GroupChatView, GroupSasModal, CreateGroupModal, GroupInviteModal, GroupErrorModal, AddMembersModal } from './components/ui/GroupChat.jsx';\nimport { GroupCallUI } from './components/ui/GroupCallUI.jsx';\nimport { GroupCallMedia, mediaErrorCode } from './group/groupCallMedia.js';\n\n                // \u2500\u2500 Secure chat extras: code blocks, clipboard hygiene \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                // Copy text to the clipboard and (optionally) wipe it after a delay so\n                // copied secrets (keys, commands, codes) don't linger. We only clear\n                // when we can confirm the clipboard still holds exactly what we wrote,\n                // or when the clipboard can't be read back at all \u2014 never clobbering\n                // something the user copied afterwards that we can see is different.\n                const copyToClipboardSecure = async (text, autoClearMs = 0) => {\n                    let ok = false;\n                    try {\n                        await navigator.clipboard.writeText(text);\n                        ok = true;\n                    } catch (e) {\n                        try {\n                            const ta = document.createElement('textarea');\n                            ta.value = text;\n                            ta.style.position = 'fixed';\n                            ta.style.opacity = '0';\n                            document.body.appendChild(ta);\n                            ta.select();\n                            ok = document.execCommand('copy');\n                            document.body.removeChild(ta);\n                        } catch (_) { ok = false; }\n                    }\n                    if (ok && autoClearMs > 0 && navigator.clipboard && navigator.clipboard.writeText) {\n                        setTimeout(async () => {\n                            let current = null;\n                            let readable = true;\n                            try { current = await navigator.clipboard.readText(); }\n                            catch (_) { readable = false; }\n                            if (!readable || current === text) {\n                                try { await navigator.clipboard.writeText(''); } catch (_) {}\n                            }\n                        }, autoClearMs);\n                    }\n                    return ok;\n                };\n\n                // Split a message into plain-text and fenced ``` code segments.\n                // Returns null when there is no fenced code so callers can fast-path.\n                const parseMessageSegments = (text) => {\n                    if (typeof text !== 'string' || text.indexOf('```') === -1) return null;\n                    const segments = [];\n                    const re = /```([a-zA-Z0-9_+#.-]*)\\n?([\\s\\S]*?)```/g;\n                    let last = 0;\n                    let m;\n                    while ((m = re.exec(text)) !== null) {\n                        if (m.index > last) segments.push({ kind: 'text', content: text.slice(last, m.index) });\n                        segments.push({ kind: 'code', lang: (m[1] || '').toLowerCase(), content: m[2].replace(/\\n$/, '') });\n                        last = re.lastIndex;\n                    }\n                    if (last < text.length) segments.push({ kind: 'text', content: text.slice(last) });\n                    return segments.some(s => s.kind === 'code') ? segments : null;\n                };\n\n                // Lightweight, dependency-free syntax highlighter. Returns React nodes\n                // (no innerHTML / dangerouslySetInnerHTML) so it stays CSP-safe and adds\n                // no XSS surface. Language-agnostic: highlights comments, strings,\n                // numbers, common keywords and literals \u2014 good enough for snippets\n                // without shipping a heavy library or allowing remote scripts.\n                const HL_KEYWORDS = new Set([\n                    'const','let','var','function','return','if','else','for','while','do','switch',\n                    'case','break','continue','class','extends','new','this','super','import','export',\n                    'from','as','default','async','await','try','catch','finally','throw','typeof',\n                    'instanceof','delete','yield','in','of','def','elif','lambda','pass','with','global',\n                    'public','private','protected','static','final','void','int','long','float','double',\n                    'char','bool','boolean','string','struct','enum','interface','package','func','fn',\n                    'type','where','select','update','insert','delete','where','and','or','not','end',\n                    'then','fi','done','echo','use','mut','impl','trait','match','module','require'\n                ]);\n                const HL_LITERALS = new Set(['true','false','null','undefined','None','True','False','nil','NaN','Infinity']);\n                const highlightCode = (code) => {\n                    const re = /(\\/\\/[^\\n]*|#[^\\n]*|\\/\\*[\\s\\S]*?\\*\\/|--[^\\n]*)|(`(?:\\\\.|[^`\\\\])*`|\"(?:\\\\.|[^\"\\\\])*\"|'(?:\\\\.|[^'\\\\])*')|(\\b\\d[\\d_.]*(?:[eE][+-]?\\d+)?\\b|\\b0[xX][0-9a-fA-F]+\\b)|([A-Za-z_$][A-Za-z0-9_$]*)/g;\n                    const nodes = [];\n                    let buffer = '';\n                    let last = 0;\n                    let key = 0;\n                    const flush = () => { if (buffer) { nodes.push(buffer); buffer = ''; } };\n                    let m;\n                    while ((m = re.exec(code)) !== null) {\n                        if (m.index > last) buffer += code.slice(last, m.index);\n                        last = re.lastIndex;\n                        let cls = null;\n                        if (m[1]) cls = 'text-gray-500 italic';        // comment\n                        else if (m[2]) cls = 'text-amber-300';         // string\n                        else if (m[3]) cls = 'text-sky-300';           // number\n                        else if (m[4]) {                                // identifier\n                            if (HL_KEYWORDS.has(m[4])) cls = 'text-purple-300';\n                            else if (HL_LITERALS.has(m[4])) cls = 'text-sky-300';\n                        }\n                        if (cls) {\n                            flush();\n                            nodes.push(React.createElement('span', { key: `h${key++}`, className: cls }, m[0]));\n                        } else {\n                            buffer += m[0];\n                        }\n                    }\n                    if (last < code.length) buffer += code.slice(last);\n                    flush();\n                    return nodes;\n                };\n\n                // Fenced-language \u2192 Prism grammar id (with common aliases).\n                const PRISM_ALIAS = {\n                    js: 'javascript', mjs: 'javascript', javascript: 'javascript', node: 'javascript',\n                    ts: 'typescript', typescript: 'typescript', jsx: 'jsx', tsx: 'tsx',\n                    py: 'python', python: 'python', sh: 'bash', shell: 'bash', zsh: 'bash', bash: 'bash',\n                    'c++': 'cpp', cpp: 'cpp', cc: 'cpp', cxx: 'cpp', c: 'c', h: 'c',\n                    cs: 'csharp', csharp: 'csharp', java: 'java', go: 'go', golang: 'go',\n                    rs: 'rust', rust: 'rust', json: 'json', yml: 'yaml', yaml: 'yaml', sql: 'sql',\n                    md: 'markdown', markdown: 'markdown', html: 'markup', xml: 'markup', svg: 'markup', css: 'css'\n                };\n\n                // Monospace code window with a copy button (clipboard auto-clears in 30s).\n                // Syntax highlighting is done by Prism when available. SECURITY: Prism only\n                // TOKENIZES the snippet \u2014 it never executes it. Prism.highlight() HTML-escapes\n                // the input before tokenizing, so the highlighted markup contains no live code\n                // and can't inject scripts (CSP also blocks inline execution). When Prism or the\n                // grammar is missing we fall back to the dependency-free React-node highlighter.\n                const CodeBlock = ({ code, lang }) => {\n                    const [copied, setCopied] = React.useState(false);\n                    const handleCopy = async () => {\n                        const ok = await copyToClipboardSecure(code, 30000);\n                        if (ok) {\n                            setCopied(true);\n                            setTimeout(() => setCopied(false), 2000);\n                        }\n                    };\n                    const norm = PRISM_ALIAS[(lang || '').toLowerCase()] || (lang || '').toLowerCase();\n                    const prism = (typeof window !== 'undefined') ? window.Prism : null;\n                    const grammar = (prism && prism.languages) ? prism.languages[norm] : null;\n                    const usePrism = !!(prism && grammar && typeof prism.highlight === 'function');\n                    let highlightedHtml = null;\n                    if (usePrism) {\n                        try { highlightedHtml = prism.highlight(code, grammar, norm); } catch (_) { highlightedHtml = null; }\n                    }\n                    const displayLang = (usePrism ? norm : (lang || 'code'));\n                    const codeEl = (usePrism && highlightedHtml != null)\n                        // Prism-escaped highlight markup \u2014 safe to inject (no live code).\n                        ? React.createElement('code', { className: 'language-' + norm, dangerouslySetInnerHTML: { __html: highlightedHtml } })\n                        // Fallback: React text nodes, never HTML.\n                        : React.createElement('code', null, highlightCode(code));\n                    return React.createElement('div', {\n                        className: \"my-1 rounded-lg overflow-hidden\",\n                        style: { backgroundColor: 'var(--sb-legacy-1)', border: '0 solid var(--sb-text-3)' }\n                    }, [\n                        React.createElement('div', {\n                            key: 'hdr',\n                            className: \"flex items-center justify-between px-3 py-1.5\",\n                            style: { backgroundColor: 'var(--sb-legacy-2)', border: '0 solid var(--sb-text-3)' }\n                        }, [\n                            React.createElement('span', {\n                                key: 'lang',\n                                className: \"text-[11px] uppercase tracking-wide text-gray-500 font-mono\"\n                            }, displayLang),\n                            React.createElement('button', {\n                                key: 'copy',\n                                onClick: handleCopy,\n                                title: \"Copy \u2014 clipboard auto-clears in 30s\",\n                                className: \"flex items-center text-[11px] text-gray-400 hover:text-green-400 transition-colors\"\n                            }, [\n                                React.createElement('i', {\n                                    key: 'ic',\n                                    className: `${copied ? 'fas fa-check text-green-400' : 'far fa-copy'} me-1`\n                                }),\n                                copied ? t('action.copied') : t('action.copy')\n                            ])\n                        ]),\n                        React.createElement('pre', {\n                            key: 'pre',\n                            className: \"px-3 py-2 overflow-x-auto text-xs leading-relaxed text-gray-200 custom-scrollbar\",\n                            style: { whiteSpace: 'pre', fontFamily: 'ui-monospace, SFMono-Regular, Menlo, Consolas, monospace', margin: 0 }\n                        }, codeEl)\n                    ]);\n                };\n\n                // Render a message body: code windows for fenced blocks, line-preserving\n                // text otherwise. Built from already-sanitized text via React nodes only.\n                const MessageBody = ({ text }) => {\n                    const segments = parseMessageSegments(text);\n                    if (!segments) {\n                        return React.createElement('div', {\n                            className: \"text-sm break-words\",\n                            style: { whiteSpace: 'pre-wrap', wordBreak: 'break-word' }\n                        }, text);\n                    }\n                    return React.createElement('div', { className: \"text-sm\" },\n                        segments.map((seg, i) => seg.kind === 'code'\n                            ? React.createElement(CodeBlock, { key: i, code: seg.content, lang: seg.lang })\n                            : (seg.content.trim()\n                                ? React.createElement('div', {\n                                    key: i,\n                                    className: \"break-words\",\n                                    style: { whiteSpace: 'pre-wrap', wordBreak: 'break-word' }\n                                }, seg.content)\n                                : null)\n                        )\n                    );\n                };\n\n                // Composer toolbar: code / view-once / disappearing.\n                // Borderless icon+label buttons; active state uses the brand orange\n                // (accent-orange). View-once and Timer open a small time picker.\n                const ChatToolbar = ({ codeMode, setCodeMode, viewOnceMode, setViewOnceMode, viewOnceTtl, setViewOnceTtl, disappearTtl, setDisappearTtl }) => {\n                    const [openMenu, setOpenMenu] = React.useState(null); // 'once' | 'timer' | null\n                    const fmt = (s) => s >= 3600 ? `${Math.round(s / 3600)}h` : (s >= 60 ? `${Math.round(s / 60)}m` : `${s}s`);\n\n                    const btnClass = (active) =>\n                        `inline-flex items-center gap-2 h-9 px-3 rounded-lg text-xs font-medium transition-colors duration-150 ${active\n                            ? 'accent-orange bg-orange-500/10'\n                            : 'text-gray-400 hover:text-gray-200 hover:bg-gray-700/40'}`;\n\n                    const pickerItem = (opt, current, onPick) =>\n                        React.createElement('button', {\n                            key: String(opt.value),\n                            type: 'button',\n                            onClick: () => { onPick(opt.value); setOpenMenu(null); },\n                            // Comfortable tap target + readable size on mobile.\n                            className: `w-full text-start px-4 py-3 sm:py-2.5 text-sm flex items-center gap-3 transition-colors ${current === opt.value\n                                ? 'accent-orange bg-orange-500/10'\n                                : 'text-gray-200 hover:bg-gray-700/50 active:bg-gray-700/60'}`\n                        }, [\n                            React.createElement('i', { key: 'i', className: `${opt.icon || 'far fa-clock'} w-4 text-center` }),\n                            React.createElement('span', { key: 'l' }, opt.label)\n                        ]);\n\n                    // Opens UPWARD (bottom:100%) via inline style so it never depends on a\n                    // purgeable utility class and never pushes the composer layout down.\n                    const picker = (options, current, onPick) =>\n                        React.createElement('div', {\n                            className: \"absolute end-0 z-50 min-w-[180px] max-w-[78vw] rounded-xl shadow-2xl overflow-hidden\",\n                            style: { backgroundColor: 'var(--sb-legacy-3)', border: '0 solid var(--sb-text-3)', bottom: '100%', marginBottom: '8px' }\n                        }, options.map(opt => pickerItem(opt, current, onPick)));\n\n                    const labelBtn = (key, { active, icon, label, title, onClick }) =>\n                        React.createElement('button', {\n                            key, type: 'button', onClick, title, 'aria-pressed': !!active,\n                            className: btnClass(active)\n                        }, [\n                            React.createElement('i', { key: 'i', className: `${icon} text-[13px]` }),\n                            React.createElement('span', { key: 'l', className: 'leading-none' }, label)\n                        ]);\n\n                    return React.createElement('div', { className: \"flex items-center gap-1\" }, [\n                        // Invisible backdrop closes any open picker on outside click.\n                        openMenu && React.createElement('div', {\n                            key: 'backdrop',\n                            className: \"fixed inset-0 z-40\",\n                            onClick: () => setOpenMenu(null)\n                        }),\n\n                        // Code \u2014 toggles code mode (expands the input box).\n                        labelBtn('code', {\n                            active: codeMode,\n                            icon: 'fas fa-code',\n                            label: t('msg.code'),\n                            title: t('chat.codeBlock'),\n                            onClick: () => setCodeMode(v => !v)\n                        }),\n\n                        // View once \u2014 pick how long it stays after the peer opens it.\n                        React.createElement('div', { key: 'once', className: 'relative' }, [\n                            labelBtn('once-btn', {\n                                active: viewOnceMode,\n                                icon: 'fas fa-eye-slash',\n                                label: viewOnceMode ? `Once \u00B7 ${fmt(viewOnceTtl)}` : t('chat.viewOnce'),\n                                title: t('chat.viewOnceTitle'),\n                                onClick: () => setOpenMenu(openMenu === 'once' ? null : 'once')\n                            }),\n                            openMenu === 'once' && picker([\n                                { value: 0, label: 'Off', icon: 'fas fa-ban' },\n                                { value: 5, label: '5s after reading' },\n                                { value: 15, label: '15s after reading' },\n                                { value: 30, label: '30s after reading' },\n                                { value: 60, label: '1m after reading' }\n                            ], viewOnceMode ? viewOnceTtl : 0, (v) => {\n                                if (v === 0) { setViewOnceMode(false); }\n                                else { setViewOnceTtl(v); setViewOnceMode(true); }\n                            })\n                        ]),\n\n                        // Timer \u2014 pick the disappearing duration.\n                        React.createElement('div', { key: 'timer', className: 'relative' }, [\n                            labelBtn('timer-btn', {\n                                active: disappearTtl > 0,\n                                icon: 'fas fa-stopwatch',\n                                label: disappearTtl > 0 ? `${t('msg.timer')} \u00B7 ${fmt(disappearTtl)}` : t('msg.timer'),\n                                title: t('chat.disappearing'),\n                                onClick: () => setOpenMenu(openMenu === 'timer' ? null : 'timer')\n                            }),\n                            openMenu === 'timer' && picker([\n                                { value: 0, label: 'Off', icon: 'fas fa-ban' },\n                                { value: 30, label: '30 seconds' },\n                                { value: 300, label: '5 minutes' },\n                                { value: 3600, label: '1 hour' }\n                            ], disappearTtl, (v) => setDisappearTtl(v))\n                        ])\n                    ]);\n                };\n\n                // Enhanced Copy Button with better UX\n                const EnhancedCopyButton = ({ text, className = \"\", children }) => {\n                    const [copied, setCopied] = React.useState(false);\n        \n                    const handleCopy = async () => {\n                        try {\n                            await navigator.clipboard.writeText(text);\n                            setCopied(true);\n                            setTimeout(() => setCopied(false), 2000);\n                        } catch (error) {\n                            console.error('Copy failed:', error);\n                            // Fallback for older browsers\n                            const textArea = document.createElement('textarea');\n                            textArea.value = text;\n                            document.body.appendChild(textArea);\n                            textArea.select();\n                            document.execCommand('copy');\n                            document.body.removeChild(textArea);\n                            setCopied(true);\n                            setTimeout(() => setCopied(false), 2000);\n                        }\n                    };\n        \n                    return React.createElement('button', {\n                        onClick: handleCopy,\n                        className: `${className} transition-all duration-200`\n                    }, [\n                        React.createElement('i', {\n                            key: 'icon',\n                            className: `${copied ? 'fas fa-check accent-green' : 'fas fa-copy text-secondary'} me-2`\n                        }),\n                        copied ? t('chat.copied') : children\n                    ]);\n                };\n        \n                /**\n                 * How many digits a safety code has.\n                 *\n                 * Seven, everywhere: the pairwise code is `n % 10_000_000` padded to\n                 * seven (see the manager's SAS derivation) and the group code is derived\n                 * to the same length. It is stated once here so the two inputs that ask\n                 * for it cannot drift apart from each other or from the real code.\n                 */\n                const SAS_CODE_LENGTH = 7;\n\n                // Verification Component\n                const VerificationStep = ({ verificationCode, onConfirm, onReject, localConfirmed, remoteConfirmed, bothConfirmed }) => {\n                    const [sasInput, setSasInput] = React.useState('');\n                    const [error, setError] = React.useState('');\n                    const normalizedExpectedLength = (verificationCode || '').replace(/[-\\s]/g, '').length;\n                    const normalizedInputLength = sasInput.replace(/[-\\s]/g, '').length;\n                    const canConfirm = !localConfirmed && normalizedExpectedLength > 0 && normalizedInputLength === normalizedExpectedLength;\n\n                    React.useEffect(() => {\n                        setSasInput('');\n                        setError('');\n                    }, [verificationCode]);\n\n                    const handleConfirm = async () => {\n                        try {\n                            setError('');\n                            await onConfirm(sasInput);\n                        } catch (confirmationError) {\n                            setSasInput('');\n                            if (confirmationError?.message === 'SAS_MAX_ATTEMPTS') {\n                                setError(t('sas.tooManyAttempts'));\n                            } else {\n                                setError(t('sas.incorrect'));\n                            }\n                        }\n                    };\n\n                    return React.createElement('div', {\n                        className: \"card-minimal rounded-xl p-6 border-purple-500/20\"\n                    }, [\n                        React.createElement('div', {\n                            key: 'header',\n                            className: \"flex items-center mb-4\"\n                        }, [\n                            React.createElement('div', {\n                                key: 'icon',\n                                className: \"w-10 h-10 bg-purple-500/10 border border-purple-500/20 rounded-lg flex items-center justify-center me-3\"\n                            }, [\n                                React.createElement('i', {\n                                    className: 'fas fa-shield-alt accent-purple'\n                                })\n                            ]),\n                            React.createElement('h3', {\n                                key: 'title',\n                                className: \"text-lg font-medium text-primary\"\n                            }, \"Security verification\")\n                        ]),\n                        React.createElement('div', {\n                            key: 'content',\n                            className: \"space-y-4\"\n                        }, [\n                            React.createElement('p', {\n                                key: 'description',\n                                className: \"text-secondary text-sm\"\n                            }, \"Compare this code with your peer out-of-band, then type the same code below to unlock the chat.\"),\n                            React.createElement('div', {\n                                key: 'code-display',\n                                className: \"text-center\"\n                            }, [\n                                React.createElement('div', {\n                                    key: 'code',\n                                    ...LTR_TEXT,\n                                    className: \"verification-code text-2xl py-4\",\n                                    style: { ...LTR_TEXT.style, textAlign: 'center' }\n                                }, verificationCode)\n                            ]),\n                            React.createElement('div', {\n                                key: 'sas-input-wrap',\n                                className: \"space-y-2\"\n                            }, [\n                                React.createElement('label', {\n                                    key: 'sas-label',\n                                    className: \"block text-sm text-secondary\"\n                                }, \"Enter the verified code\"),\n                                React.createElement('input', {\n                                    key: 'sas-input',\n                                    type: 'text',\n                                    dir: 'ltr',\n                                    value: sasInput,\n                                    // The safety code is seven DIGITS and has been for as\n                                    // long as it has existed (see the manager's SAS\n                                    // derivation). Asking for text opened a full QWERTY\n                                    // keyboard on a phone, where the digits are a shift\n                                    // away \u2014 a keyboard for characters that can never be\n                                    // part of the answer. Non-digits are stripped rather\n                                    // than rejected so a pasted \"123-4567\" still works.\n                                    onChange: (event) => {\n                                        setSasInput(event.target.value.replace(/\\D/g, '').slice(0, SAS_CODE_LENGTH));\n                                        if (error) setError('');\n                                    },\n                                    autoFocus: true,\n                                    autoComplete: 'one-time-code',\n                                    spellCheck: false,\n                                    type: 'text',\n                                    inputMode: 'numeric',\n                                    pattern: '[0-9]*',\n                                    maxLength: SAS_CODE_LENGTH,\n                                    disabled: localConfirmed,\n                                    placeholder: verificationCode ? t('verify.placeholder') : t('verify.waiting'),\n                                    className: \"w-full rounded-lg border border-purple-500/30 bg-black/20 px-4 py-3 text-center text-xl tracking-[0.3em] text-primary focus:border-purple-400 focus:outline-none disabled:cursor-not-allowed disabled:opacity-60\",\n                                    style: { fontFamily: 'monospace' }\n                                }),\n                                error && React.createElement('p', {\n                                    key: 'sas-error',\n                                    className: \"text-sm text-red-400\"\n                                }, error)\n                            ]),\n                            // Verification status indicators\n                            React.createElement('div', {\n                                key: 'verification-status',\n                                className: \"space-y-2\"\n                            }, [\n                                React.createElement('div', {\n                                    key: 'local-status',\n                                    className: `flex items-center justify-between p-2 rounded-lg ${localConfirmed ? 'bg-green-500/10 border border-green-500/20' : 'bg-gray-500/10 border border-gray-500/20'}`\n                                }, [\n                                    React.createElement('span', {\n                                        key: 'local-label',\n                                        className: \"text-sm text-secondary\"\n                                    }, \"Your confirmation:\"),\n                                    React.createElement('div', {\n                                        key: 'local-indicator',\n                                        className: \"flex items-center\"\n                                    }, [\n                                        React.createElement('i', {\n                                            key: 'local-icon',\n                                            className: `fas ${localConfirmed ? 'fa-check-circle text-green-400' : 'fa-clock text-gray-400'} me-2`\n                                        }),\n                                        React.createElement('span', {\n                                            key: 'local-text',\n                                            className: `text-sm ${localConfirmed ? 'text-green-400' : 'text-gray-400'}`\n                                        }, localConfirmed ? t('verify.confirmed') : t('verify.pending'))\n                                    ])\n                                ]),\n                                React.createElement('div', {\n                                    key: 'remote-status',\n                                    className: `flex items-center justify-between p-2 rounded-lg ${remoteConfirmed ? 'bg-green-500/10 border border-green-500/20' : 'bg-gray-500/10 border border-gray-500/20'}`\n                                }, [\n                                    React.createElement('span', {\n                                        key: 'remote-label',\n                                        className: \"text-sm text-secondary\"\n                                    }, \"Peer confirmation:\"),\n                                    React.createElement('div', {\n                                        key: 'remote-indicator',\n                                        className: \"flex items-center\"\n                                    }, [\n                                        React.createElement('i', {\n                                            key: 'remote-icon',\n                                            className: `fas ${remoteConfirmed ? 'fa-check-circle text-green-400' : 'fa-clock text-gray-400'} me-2`\n                                        }),\n                                        React.createElement('span', {\n                                            key: 'remote-text',\n                                            className: `text-sm ${remoteConfirmed ? 'text-green-400' : 'text-gray-400'}`\n                                        }, remoteConfirmed ? t('verify.confirmed') : t('verify.pending'))\n                                    ])\n                                ])\n                            ]),\n                            React.createElement('div', {\n                                key: 'warning',\n                                className: \"p-3 bg-yellow-500/10 border border-yellow-500/20 rounded-lg\"\n                            }, [\n                                React.createElement('p', {\n                                    className: \"text-yellow-400 text-sm flex items-center\"\n                                }, [\n                                    React.createElement('i', {\n                                        className: 'fas fa-exclamation-triangle me-2'\n                                    }),\n                                    t('sas.makeSure')\n                                ])\n                            ]),\n                            React.createElement('div', {\n                                key: 'buttons',\n                                className: \"flex space-x-3\"\n                            }, [\n                                React.createElement('button', {\n                                    key: 'confirm',\n                                    onClick: handleConfirm,\n                                    disabled: !canConfirm,\n                                    className: `flex-1 py-3 px-4 rounded-lg font-medium transition-all duration-200 ${!canConfirm ? 'bg-gray-500/20 text-gray-400 cursor-not-allowed' : 'btn-verify text-white'}`\n                                }, [\n                                    React.createElement('i', {\n                                        className: `fas ${localConfirmed ? 'fa-check-circle' : 'fa-check'} me-2`\n                                    }),\n                                    localConfirmed ? t('verify.confirmed') : t('verify.confirm')\n                                ]),\n                                React.createElement('button', {\n                                    key: 'reject',\n                                    onClick: onReject,\n                                    className: \"flex-1 bg-red-500/10 hover:bg-red-500/20 text-red-400 border border-red-500/20 py-3 px-4 rounded-lg font-medium transition-all duration-200\"\n                                }, [\n                                    React.createElement('i', {\n                                        className: 'fas fa-times me-2'\n                                    }),\n                                    t('sas.noMatch')\n                                ])\n                            ])\n                        ])\n                    ]);\n                };\n        \n                // Grain overlay for the view-once cover (Telegram-style blur + noise).\n                const GRAIN_URL = `url(\"data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20width='100'%20height='100'%3E%3Cfilter%20id='n'%3E%3CfeTurbulence%20type='fractalNoise'%20baseFrequency='0.9'%20numOctaves='2'%20stitchTiles='stitch'/%3E%3C/filter%3E%3Crect%20width='100%25'%20height='100%25'%20filter='url(%23n)'/%3E%3C/svg%3E\")`;\n                const SB_MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n\n                // Deterministic fallback waveform when a peer sent no peaks (older builds).\n                const sbGenBars = (seed, n) => {\n                    const out = [];\n                    let s = seed || 1;\n                    for (let i = 0; i < n; i++) {\n                        s = (s * 9301 + 49297) % 233280;\n                        const r = s / 233280;\n                        const env = 0.45 + 0.55 * Math.sin((i / n) * Math.PI);\n                        out.push(Math.max(0.16, Math.min(1, (0.3 + r * 0.7) * env)));\n                    }\n                    return out;\n                };\n                const sbFmtClock = (sec) => {\n                    sec = Math.max(0, Math.round(sec));\n                    const m = Math.floor(sec / 60), s = sec % 60;\n                    return m + ':' + String(s).padStart(2, '0');\n                };\n\n                // \u2500\u2500 Voice message player (bubble body) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                // Play/pause + seekable waveform + duration, plus an upload/download\n                // progress ring while the encrypted audio is still transferring.\n                // Ported 1:1 from the \"MessageBubble\" design, wired to a real <audio>.\n                const VoicePlayer = ({ voice, isMe }) => {\n                    const h = React.createElement;\n                    const [playing, setPlaying] = React.useState(false);\n                    const [progress, setProgress] = React.useState(0);\n                    const [playErr, setPlayErr] = React.useState(false);\n                    const audioRef = React.useRef(null);\n                    const rafRef = React.useRef(null);\n\n                    const v = voice || {};\n                    const dur = Number.isFinite(v.dur) && v.dur > 0 ? v.dur : 8;\n                    const bars = (Array.isArray(v.bars) && v.bars.length) ? v.bars : sbGenBars(dur * 37 + 11, 34);\n                    const src = v.url || null;\n                    const transfer = v.transfer || null;\n                    const transferring = !!transfer && !src;\n                    const failed = !!v.error || playErr;\n                    const dir = transfer ? transfer.dir : null;\n                    const pct = transfer ? Math.max(0, Math.min(100, transfer.pct || 0)) : 100;\n\n                    React.useEffect(() => () => {\n                        if (rafRef.current) cancelAnimationFrame(rafRef.current);\n                        if (audioRef.current) { try { audioRef.current.pause(); } catch (_) {} audioRef.current = null; }\n                    }, []);\n                    // If the audio URL is swapped/removed, reset playback.\n                    React.useEffect(() => {\n                        if (!src && audioRef.current) { try { audioRef.current.pause(); } catch (_) {} audioRef.current = null; setPlaying(false); setProgress(0); }\n                    }, [src]);\n\n                    const pause = () => {\n                        if (audioRef.current) { try { audioRef.current.pause(); } catch (_) {} }\n                        if (rafRef.current) cancelAnimationFrame(rafRef.current);\n                        setPlaying(false);\n                    };\n                    const play = () => {\n                        if (!src) return;\n                        setPlayErr(false);\n                        if (!audioRef.current) {\n                            const a = new Audio();\n                            a.preload = 'auto';\n                            a.addEventListener('timeupdate', () => {\n                                const d = a.duration && isFinite(a.duration) ? a.duration : dur;\n                                if (d) setProgress(Math.min(1, a.currentTime / d));\n                            });\n                            a.addEventListener('ended', () => { setPlaying(false); setProgress(0); });\n                            a.addEventListener('error', () => { setPlaying(false); setPlayErr(true); });\n                            a.src = src;\n                            audioRef.current = a;\n                        }\n                        const p = audioRef.current.play();\n                        if (p && typeof p.then === 'function') {\n                            p.then(() => setPlaying(true)).catch((err) => { console.warn('Voice playback failed:', err && err.name, err && err.message); setPlayErr(true); setPlaying(false); });\n                        } else {\n                            setPlaying(true);\n                        }\n                    };\n                    const toggle = () => {\n                        if (transferring || failed || !src) return;\n                        if (playing) pause(); else play();\n                    };\n                    const seek = (e) => {\n                        if (transferring || failed || !src) return;\n                        const rect = e.currentTarget.getBoundingClientRect();\n                        const p = Math.max(0, Math.min(1, (e.clientX - rect.left) / rect.width));\n                        if (audioRef.current && audioRef.current.duration) audioRef.current.currentTime = p * audioRef.current.duration;\n                        setProgress(p);\n                    };\n\n                    const elapsed = progress * dur;\n                    const circ = 2 * Math.PI * 23;\n                    const playBg = isMe ? 'var(--sb-orange-solid)' : 'rgba(var(--sb-orange-rgb), 0.14)';\n                    const playColor = isMe ? 'var(--sb-on-accent)' : 'var(--sb-orange)';\n\n                    const barEls = bars.map((hgt, i) => {\n                        const played = (i + 0.5) / bars.length <= progress;\n                        let col;\n                        if (transferring) col = isMe ? 'rgba(var(--sb-ink), 0.13)' : 'rgba(var(--sb-ink), 0.1)';\n                        else col = played ? 'var(--sb-orange-solid)' : (isMe ? 'rgba(var(--sb-ink), 0.22)' : 'rgba(var(--sb-ink), 0.16)');\n                        return h('span', { key: i, style: { flex: '1 1 0', minWidth: 0, width: '3px', height: Math.round(6 + hgt * 22) + 'px', borderRadius: '2px', background: col, transition: 'background .12s' } });\n                    });\n\n                    const ring = transferring && h('svg', { key: 'ring', width: 50, height: 50, viewBox: '0 0 50 50', style: { position: 'absolute', inset: 0, transform: 'rotate(-90deg)' } }, [\n                        h('circle', { key: 'bg', cx: 25, cy: 25, r: 23, fill: 'none', stroke: 'rgba(var(--sb-orange-rgb), 0.2)', strokeWidth: 2.5 }),\n                        h('circle', { key: 'fg', cx: 25, cy: 25, r: 23, fill: 'none', stroke: 'var(--sb-orange-solid)', strokeWidth: 2.5, strokeLinecap: 'round', strokeDasharray: circ.toFixed(1), strokeDashoffset: (circ * (1 - pct / 100)).toFixed(1), style: { transition: 'stroke-dashoffset .12s linear' } })\n                    ]);\n\n                    const icon = failed\n                        ? h('i', { className: 'fas fa-triangle-exclamation', style: { fontSize: '14px' } })\n                        : (transferring\n                            ? h('svg', { width: 15, height: 15, viewBox: '0 0 24 24', fill: 'currentColor', style: { opacity: 0.5 } }, h('path', { d: 'M8 5.2v13.6l11-6.8z' }))\n                            : (playing\n                                ? h('svg', { width: 16, height: 16, viewBox: '0 0 24 24', fill: 'currentColor' }, [h('rect', { key: 'a', x: 6, y: 5, width: 4, height: 14, rx: 1.2 }), h('rect', { key: 'b', x: 14, y: 5, width: 4, height: 14, rx: 1.2 })])\n                                : h('svg', { width: 16, height: 16, viewBox: '0 0 24 24', fill: 'currentColor' }, h('path', { d: 'M8 5.2v13.6l11-6.8z' }))));\n\n                    const label = failed ? t('msg.failed') : (transferring ? (dir === 'up' ? t('chat.uploading') : t('chat.downloading')) : t('msg.voice'));\n                    const timeText = transferring ? (pct + '%') : sbFmtClock((playing || progress > 0) ? elapsed : dur);\n\n                    return h('div', { style: { display: 'flex', alignItems: 'center', gap: '13px', padding: '13px 15px 12px' } }, [\n                        h('div', { key: 'pw', style: { position: 'relative', flex: 'none', width: '50px', height: '50px', display: 'grid', placeItems: 'center' } }, [\n                            ring,\n                            h('button', {\n                                key: 'pb', onClick: toggle, title: transferring ? t('chat.transferring') : (playing ? t('msg.pause') : t('msg.play')),\n                                style: { width: '42px', height: '42px', borderRadius: '50%', display: 'grid', placeItems: 'center', border: 'none', background: failed ? 'rgba(var(--sb-red-rgb), 0.15)' : playBg, color: failed ? 'var(--sb-red)' : playColor, cursor: (transferring || failed || !src) ? 'default' : 'pointer', transition: 'transform .15s cubic-bezier(.2,.7,.3,1)' }\n                            }, icon)\n                        ]),\n                        h('div', { key: 'body', style: { flex: 1, minWidth: 0 } }, [\n                            h('div', { key: 'wave', onClick: seek, style: { display: 'flex', alignItems: 'center', gap: '2px', height: '30px', cursor: (transferring || failed || !src) ? 'default' : 'pointer' } }, barEls),\n                            h('div', { key: 'meta', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', marginTop: '6px' } }, [\n                                h('span', { key: 't', style: { fontFamily: SB_MONO, fontSize: '10.5px', fontWeight: 500, color: transferring ? 'var(--sb-orange-3)' : 'var(--sb-text-6)' } }, timeText),\n                                h('span', { key: 'l', style: { fontFamily: SB_MONO, fontSize: '9.5px', fontWeight: 600, color: failed ? 'var(--sb-red)' : (transferring ? 'var(--sb-orange)' : 'var(--sb-text-faint)'), textTransform: 'uppercase', letterSpacing: '0.8px' } }, label)\n                            ])\n                        ])\n                    ]);\n                };\n\n                // \u2500\u2500 Voice recorder (composer) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                // Auto-starts on mount; shows a live mic waveform + timer, with\n                // discard / send controls. Emits (blob, durationSec, waveformPeaks).\n                const VoiceRecorder = ({ onSend, onCancel }) => {\n                    const h = React.createElement;\n                    const MAX_SECONDS = 300; // hard cap so a note never balloons past the size limit\n                    const NBARS = 40;\n                    const [elapsed, setElapsed] = React.useState(0);\n                    const [liveBars, setLiveBars] = React.useState(() => new Array(NBARS).fill(0.06));\n                    const [micError, setMicError] = React.useState(false);\n                    const R = React.useRef({}).current;\n\n                    const teardownGraph = () => {\n                        try { if (R.node) { R.node.disconnect(); if (R.node.port) R.node.port.onmessage = null; R.node.onaudioprocess = null; } } catch (_) {}\n                        try { if (R.srcNode) R.srcNode.disconnect(); } catch (_) {}\n                        try { if (R.sink) R.sink.disconnect(); } catch (_) {}\n                        R.node = R.srcNode = R.sink = null;\n                    };\n                    const cleanup = () => {\n                        if (R.timer) clearInterval(R.timer);\n                        R.timer = null;\n                        teardownGraph();\n                        try { if (R.stream) R.stream.getTracks().forEach(t => t.stop()); } catch (_) {}\n                        try { if (R.ac) R.ac.close(); } catch (_) {}\n                        if (R.wurl) { try { URL.revokeObjectURL(R.wurl); } catch (_) {} R.wurl = null; }\n                        R.stream = R.ac = null;\n                    };\n\n                    const pushPeak = (amp) => {\n                        R.peaks = R.peaks || [];\n                        R.peaks.push(amp);\n                        const now = performance.now();\n                        if (!R.lastDraw || now - R.lastDraw > 55) {\n                            R.lastDraw = now;\n                            setLiveBars(prev => { const live = prev.slice(1); live.push(Math.max(0.08, amp)); return live; });\n                        }\n                    };\n\n                    const downsample = (peaks, n) => {\n                        if (!peaks || !peaks.length) return new Array(n).fill(0.3);\n                        const out = [];\n                        const step = peaks.length / n;\n                        for (let i = 0; i < n; i++) {\n                            const a = Math.floor(i * step), b = Math.max(a + 1, Math.floor((i + 1) * step));\n                            let m = 0;\n                            for (let j = a; j < b && j < peaks.length; j++) m = Math.max(m, peaks[j]);\n                            out.push(Math.max(0.16, Math.min(1, m)));\n                        }\n                        return out;\n                    };\n\n                    // Average-decimate captured PCM to a lower rate (voice-grade),\n                    // keeping the WAV small while staying universally decodable.\n                    const resample = (data, from, to) => {\n                        if (!data || !data.length || to >= from) return data || new Float32Array(0);\n                        const ratio = from / to;\n                        const outLen = Math.floor(data.length / ratio);\n                        const out = new Float32Array(outLen);\n                        for (let i = 0; i < outLen; i++) {\n                            const start = Math.floor(i * ratio), end = Math.min(data.length, Math.floor((i + 1) * ratio));\n                            let s = 0, n = 0;\n                            for (let j = start; j < end; j++) { s += data[j]; n++; }\n                            out[i] = n ? s / n : 0;\n                        }\n                        return out;\n                    };\n                    // Encode mono Float32 samples as a 16-bit PCM WAV blob. WAV plays\n                    // on every platform (incl. iOS/Safari), unlike webm/opus.\n                    const encodeWav = (samples, rate) => {\n                        const buf = new ArrayBuffer(44 + samples.length * 2);\n                        const view = new DataView(buf);\n                        const ws = (o, s) => { for (let i = 0; i < s.length; i++) view.setUint8(o + i, s.charCodeAt(i)); };\n                        ws(0, 'RIFF'); view.setUint32(4, 36 + samples.length * 2, true); ws(8, 'WAVE');\n                        ws(12, 'fmt '); view.setUint32(16, 16, true); view.setUint16(20, 1, true); view.setUint16(22, 1, true);\n                        view.setUint32(24, rate, true); view.setUint32(28, rate * 2, true); view.setUint16(32, 2, true); view.setUint16(34, 16, true);\n                        ws(36, 'data'); view.setUint32(40, samples.length * 2, true);\n                        let o = 44;\n                        for (let i = 0; i < samples.length; i++) { const s = Math.max(-1, Math.min(1, samples[i])); view.setInt16(o, s < 0 ? s * 0x8000 : s * 0x7FFF, true); o += 2; }\n                        return new Blob([buf], { type: 'audio/wav' });\n                    };\n\n                    // Push one captured PCM frame: store it and update the live waveform.\n                    const onPcmFrame = (frame) => {\n                        if (!frame || !frame.length) return;\n                        R.pcm.push(frame);\n                        R.sampleCount = (R.sampleCount || 0) + frame.length;\n                        let sum = 0;\n                        for (let i = 0; i < frame.length; i++) sum += frame[i] * frame[i];\n                        pushPeak(Math.min(1, Math.sqrt(sum / frame.length) * 3.2));\n                    };\n\n                    const finish = (send) => {\n                        if (R.finished) return;\n                        R.finished = true;\n                        if (R.timer) clearInterval(R.timer);\n                        R.timer = null;\n                        const peaks = (R.peaks || []).slice();\n                        const srcRate = (R.ac && R.ac.sampleRate) || 48000;\n                        teardownGraph();\n\n                        let outBlob = null, outDur = 1;\n                        const total = R.sampleCount || 0;\n                        // Require a little real audio so we never ship an empty/silent note.\n                        if (send && R.pcm && R.pcm.length && total > srcRate * 0.2) {\n                            const merged = new Float32Array(total);\n                            let off = 0;\n                            for (const c of R.pcm) { merged.set(c, off); off += c.length; }\n                            const targetRate = 24000;\n                            const out = resample(merged, srcRate, targetRate);\n                            outDur = Math.max(1, Math.round(out.length / targetRate));\n                            outBlob = encodeWav(out, targetRate); // always a valid, universally-playable WAV\n                        }\n\n                        try { if (R.stream) R.stream.getTracks().forEach(t => t.stop()); } catch (_) {}\n                        try { if (R.ac) R.ac.close(); } catch (_) {}\n                        if (R.wurl) { try { URL.revokeObjectURL(R.wurl); } catch (_) {} R.wurl = null; }\n                        R.stream = R.ac = null;\n                        R.pcm = [];\n\n                        if (send && outBlob && outBlob.size > 44) onSend(outBlob, outDur, downsample(peaks, 34));\n                        else if (send) { setMicError(true); R.finished = false; } // captured nothing \u2014 let the user retry/close\n                        else onCancel();\n                    };\n\n                    React.useEffect(() => {\n                        let cancelled = false;\n                        R.finished = false;\n                        R.peaks = [];\n                        R.pcm = [];\n                        R.sampleCount = 0;\n                        R.t0 = performance.now();\n                        R.timer = setInterval(() => {\n                            const e = (performance.now() - R.t0) / 1000;\n                            setElapsed(e);\n                            if (e >= MAX_SECONDS) finish(true);\n                        }, 200);\n\n                        (async () => {\n                            let stream = null;\n                            try {\n                                if (navigator.mediaDevices && navigator.mediaDevices.getUserMedia) {\n                                    stream = await navigator.mediaDevices.getUserMedia({ audio: { channelCount: 1, echoCancellation: true, noiseSuppression: true } });\n                                }\n                            } catch (_) { stream = null; }\n                            if (cancelled) { if (stream) stream.getTracks().forEach(t => t.stop()); return; }\n                            if (!stream) { setMicError(true); if (R.timer) clearInterval(R.timer); return; }\n\n                            R.stream = stream;\n                            // Capture raw PCM directly (no MediaRecorder / no decodeAudioData),\n                            // so we ALWAYS produce a valid WAV that plays on every platform,\n                            // incl. iOS/Safari. Prefer an AudioWorklet; fall back to a\n                            // ScriptProcessor. A muted sink keeps the graph pulling audio\n                            // without routing the mic back to the speakers.\n                            try {\n                                const AC = window.AudioContext || window.webkitAudioContext;\n                                R.ac = new AC();\n                                if (R.ac.state === 'suspended') { try { await R.ac.resume(); } catch (_) {} }\n                                R.srcNode = R.ac.createMediaStreamSource(stream);\n                                R.sink = R.ac.createGain();\n                                R.sink.gain.value = 0;\n\n                                let useWorklet = false;\n                                if (R.ac.audioWorklet && typeof R.ac.audioWorklet.addModule === 'function' && window.AudioWorkletNode) {\n                                    try {\n                                        const code = 'class P extends AudioWorkletProcessor{process(i){const c=i[0]&&i[0][0];if(c){this.port.postMessage(c.slice(0));}return true;}}registerProcessor(\"sb-pcm\",P);';\n                                        R.wurl = URL.createObjectURL(new Blob([code], { type: 'application/javascript' }));\n                                        await R.ac.audioWorklet.addModule(R.wurl);\n                                        if (cancelled) return;\n                                        R.node = new AudioWorkletNode(R.ac, 'sb-pcm');\n                                        R.node.port.onmessage = (e) => onPcmFrame(e.data);\n                                        R.srcNode.connect(R.node);\n                                        R.node.connect(R.sink);\n                                        R.sink.connect(R.ac.destination);\n                                        useWorklet = true;\n                                    } catch (_) { useWorklet = false; }\n                                }\n\n                                if (!useWorklet) {\n                                    const bufSize = 4096;\n                                    R.node = R.ac.createScriptProcessor(bufSize, 1, 1);\n                                    R.node.onaudioprocess = (e) => {\n                                        const inBuf = e.inputBuffer.getChannelData(0);\n                                        onPcmFrame(new Float32Array(inBuf));\n                                    };\n                                    R.srcNode.connect(R.node);\n                                    R.node.connect(R.sink);\n                                    R.sink.connect(R.ac.destination);\n                                }\n                            } catch (_) {\n                                setMicError(true);\n                                if (R.timer) clearInterval(R.timer);\n                            }\n                        })();\n\n                        return () => { cancelled = true; cleanup(); };\n                        // eslint-disable-next-line react-hooks/exhaustive-deps\n                    }, []);\n\n                    if (micError) {\n                        return h('div', { style: { display: 'flex', alignItems: 'center', gap: '12px' } }, [\n                            h('div', { key: 'msg', style: { flex: 1, minWidth: 0, display: 'flex', alignItems: 'center', gap: '9px', height: '46px', padding: '0 16px', borderRadius: '13px', background: 'rgba(var(--sb-red-strong-rgb), 0.06)', border: '1px solid rgba(var(--sb-red-strong-rgb), 0.22)', color: 'var(--sb-red)', fontSize: '13.5px' } }, [\n                                h('i', { key: 'i', className: 'fas fa-microphone-slash', style: { fontSize: '14px' } }),\n                                t('err.noAudio')\n                            ]),\n                            h('button', { key: 'x', onClick: onCancel, title: t('chatHdr.close'), style: { flex: 'none', width: '46px', height: '46px', borderRadius: '50%', display: 'grid', placeItems: 'center', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-6)', cursor: 'pointer' } },\n                                h('i', { className: 'fas fa-xmark', style: { fontSize: '16px' } }))\n                        ]);\n                    }\n\n                    const barEls = liveBars.map((hgt, i) => h('span', { key: i, style: { flex: 'none', width: '3px', height: Math.round(4 + hgt * 24) + 'px', borderRadius: '2px', background: 'var(--sb-red-solid)', opacity: (0.45 + hgt * 0.55) } }));\n\n                    return h('div', { style: { display: 'flex', alignItems: 'center', gap: '12px' } }, [\n                        h('button', {\n                            key: 'cancel', onClick: () => finish(false), title: t('chat.discard'),\n                            style: { flex: 'none', width: '42px', height: '42px', borderRadius: '12px', display: 'grid', placeItems: 'center', border: 'none', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-6)', cursor: 'pointer' }\n                        }, h('i', { className: 'fas fa-trash-can', style: { fontSize: '15px' } })),\n                        h('div', { key: 'bar', style: { flex: 1, minWidth: 0, display: 'flex', alignItems: 'center', gap: '11px', height: '46px', padding: '0 16px', borderRadius: '13px', background: 'rgba(var(--sb-red-strong-rgb), 0.06)', border: '1px solid rgba(var(--sb-red-strong-rgb), 0.22)' } }, [\n                            h('span', { key: 'dot', style: { position: 'relative', flex: 'none', width: '9px', height: '9px' } },\n                                h('span', { style: { position: 'absolute', inset: 0, borderRadius: '50%', background: 'var(--sb-red-solid)', animation: 'vmRec 1.3s ease-in-out infinite' } })),\n                            h('span', { key: 'time', style: { flex: 'none', fontFamily: SB_MONO, fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-1)', minWidth: '42px' } }, sbFmtClock(elapsed)),\n                            h('div', { key: 'wave', style: { flex: 1, minWidth: 0, display: 'flex', alignItems: 'center', justifyContent: 'flex-end', gap: '2px', height: '30px', overflow: 'hidden' } }, barEls)\n                        ]),\n                        h('button', {\n                            key: 'send', onClick: () => finish(true), title: t('chat.sendVoice'),\n                            style: { flex: 'none', width: '46px', height: '46px', borderRadius: '50%', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', cursor: 'pointer', boxShadow: '0 8px 22px rgba(var(--sb-orange-rgb), 0.3)', transition: 'transform .15s cubic-bezier(.2,.7,.3,1)' }\n                        }, h('svg', { width: 20, height: 20, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round' }, [h('path', { key: 'a', d: 'M22 2L11 13' }), h('path', { key: 'b', d: 'M22 2l-7 20-4-9-9-4 20-7z' })]))\n                    ]);\n                };\n\n                // Enhanced Chat Message \u2014 redesigned bubbles (SecureBit Chat design).\n                const EnhancedChatMessage = ({ message, type, timestamp, mid, status, viewOnce, viewOnceTtl, expiresAt, expired, nowTick, canUnsend, onUnsend, onExpire, voice }) => {\n                    const [revealed, setRevealed] = React.useState(false);\n                    const revealTimerRef = React.useRef(null);\n\n                    const formatTime = (ts) => new Date(ts).toLocaleTimeString('en-GB', { hour: '2-digit', minute: '2-digit', second: '2-digit' });\n\n                    React.useEffect(() => () => { if (revealTimerRef.current) clearTimeout(revealTimerRef.current); }, []);\n\n                    // System / notice messages: centered subtle pill. \"notice\" is shown\n                    // in the message flow (e.g. \"connection restored\"); \"system\" lives in\n                    // the handshake log. Notices use a green accent.\n                    if (type === 'system' || type === 'notice') {\n                        const isNotice = type === 'notice';\n                        return React.createElement('div', { className: 'message-slide', style: { display: 'flex', justifyContent: 'center', margin: '4px 0' } },\n                            React.createElement('div', {\n                                style: { maxWidth: '80%', padding: '8px 14px', borderRadius: '10px', border: '1px solid ' + (isNotice ? 'rgba(var(--sb-green-rgb), 0.25)' : 'rgba(var(--sb-orange-rgb), 0.22)'), background: isNotice ? 'rgba(var(--sb-green-rgb), 0.08)' : 'rgba(var(--sb-orange-rgb), 0.08)', color: isNotice ? 'var(--sb-green-soft)' : 'var(--sb-orange-4)', fontSize: '12.5px', textAlign: 'center', lineHeight: 1.5 }\n                            }, message)\n                        );\n                    }\n\n                    const isMe = type === 'sent';\n                    const encrypted = isMe;\n                    const isViewOnce = type === 'received' && viewOnce === true;\n\n                    const remaining = (typeof expiresAt === 'number')\n                        ? Math.max(0, Math.ceil((expiresAt - (nowTick || Date.now())) / 1000))\n                        : null;\n                    const fmtRemaining = (sec) => {\n                        if (sec == null) return '';\n                        const h = Math.floor(sec / 3600), m = Math.floor((sec % 3600) / 60), s = sec % 60;\n                        const pad = (n) => String(n).padStart(2, '0');\n                        return h > 0 ? (h + ':' + pad(m) + ':' + pad(s)) : (m + ':' + pad(s));\n                    };\n\n                    const handleReveal = () => {\n                        if (revealed) return;\n                        setRevealed(true);\n                        const ms = Math.max(1, (typeof viewOnceTtl === 'number' ? viewOnceTtl : 15)) * 1000;\n                        revealTimerRef.current = setTimeout(() => { onExpire && onExpire(); }, ms);\n                    };\n\n                    const radius = isMe ? '14px 14px 4px 14px' : '14px 14px 14px 4px';\n                    const border = isMe ? '1px solid rgba(var(--sb-ink), 0.10)' : '1px solid rgba(var(--sb-ink), 0.06)';\n                    const bg = isMe ? 'var(--sb-surface-3)' : 'var(--sb-surface)';\n\n                    // Expired tombstone (disappearing / view-once) \u2014 content already wiped.\n                    const isExpired = expired === true || (typeof expiresAt === 'number' && (nowTick || Date.now()) >= expiresAt);\n                    if (isExpired) {\n                        return React.createElement('div', {\n                            className: 'message-slide',\n                            style: { display: 'flex', width: '100%', justifyContent: isMe ? 'flex-end' : 'flex-start' }\n                        }, React.createElement('div', { style: { maxWidth: '74%', minWidth: '170px' } },\n                            React.createElement('div', { style: { display: 'flex', alignItems: 'center', gap: '9px', padding: '12px 15px', borderRadius: radius, border: '1px dashed rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.018)' } }, [\n                                React.createElement('i', { key: 'i', className: 'fas fa-clock', style: { color: 'var(--sb-text-9)', fontSize: '13px' } }),\n                                React.createElement('span', { key: 't', style: { fontSize: '13px', color: 'var(--sb-text-9)', fontStyle: 'italic' } }, t('chat.expired'))\n                            ])\n                        ));\n                    }\n\n                    let body;\n                    if (voice) {\n                        body = React.createElement(VoicePlayer, { key: 'voice', voice, isMe });\n                    } else if (isViewOnce && !revealed) {\n                        body = React.createElement('div', {\n                            key: 'cover',\n                            onClick: handleReveal,\n                            style: { position: 'relative', cursor: 'pointer', padding: '12px 15px 10px', overflow: 'hidden' }\n                        }, [\n                            React.createElement('div', { key: 'blur', style: { fontSize: '14.5px', lineHeight: 1.55, color: 'var(--sb-text-5)', filter: 'blur(7px)', userSelect: 'none', pointerEvents: 'none', wordBreak: 'break-word', minHeight: '22px' } }, message),\n                            React.createElement('div', { key: 'grain', style: { position: 'absolute', inset: 0, backgroundImage: GRAIN_URL, backgroundSize: '90px', opacity: 0.18, mixBlendMode: 'screen', pointerEvents: 'none' } }),\n                            React.createElement('div', { key: 'lbl', style: { position: 'absolute', inset: 0, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '7px', pointerEvents: 'none' } }, [\n                                React.createElement('i', { key: 'i', className: 'fas fa-eye-slash', style: { color: 'var(--sb-text-2)', fontSize: '13px' } }),\n                                React.createElement('span', { key: 't', style: { fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-2)', textShadow: '0 1px 5px rgba(0,0,0,0.75)' } }, t('chat.viewOnceTap'))\n                            ])\n                        ]);\n                    } else {\n                        body = React.createElement('div', { key: 'body', style: { padding: '12px 15px 10px', color: 'var(--sb-text-2)' } },\n                            React.createElement(MessageBody, { text: message })\n                        );\n                    }\n\n                    const metaLeft = [\n                        React.createElement('span', { key: 'time', style: { fontFamily: SB_MONO, fontSize: '10.5px', color: 'var(--sb-text-9)' } }, formatTime(timestamp))\n                    ];\n                    // WhatsApp-style delivery state on our own messages.\n                    if (isMe) {\n                        const stCfg = ({\n                            sending: { icon: 'fa-clock', color: 'var(--sb-text-9)', label: t('chat.sending') },\n                            sent: { icon: 'fa-check', color: 'var(--sb-text-7)', label: t('msg.sent') },\n                            // Two GREY ticks = delivered to the peer's device but not yet read.\n                            delivered: { icon: 'fa-check-double', color: 'var(--sb-text-7)', label: t('chat.delivered') },\n                            // Two GREEN ticks = the peer actually opened the chat and read it.\n                            read: { icon: 'fa-check-double', color: 'var(--sb-green)', label: t('msg.read') },\n                            failed: { icon: 'fa-triangle-exclamation', color: 'var(--sb-red)', label: t('chat.notSent') }\n                        })[status || 'sent'] || { icon: 'fa-check', color: 'var(--sb-text-7)', label: t('msg.sent') };\n                        metaLeft.push(React.createElement('span', {\n                            key: 'dlv', title: stCfg.label,\n                            style: { display: 'inline-flex', alignItems: 'center', color: stCfg.color }\n                        }, React.createElement('i', { className: 'fas ' + stCfg.icon, style: { fontSize: '10.5px' } })));\n                    }\n                    if (isViewOnce && revealed) {\n                        metaLeft.push(React.createElement('span', { key: 'vo', style: { display: 'inline-flex', alignItems: 'center', gap: '4px', fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-7)' } }, [\n                            React.createElement('span', { key: 'd', style: { width: '4px', height: '4px', borderRadius: '50%', background: 'var(--sb-text-7)' } }),\n                            t('chat.viewedOnce')\n                        ]));\n                    } else if (remaining !== null) {\n                        metaLeft.push(React.createElement('span', { key: 'ttl', style: { display: 'inline-flex', alignItems: 'center', gap: '4px', fontFamily: SB_MONO, fontSize: '10.5px', fontWeight: 500, color: 'var(--sb-orange)' } }, [\n                            React.createElement('i', { key: 'i', className: 'fas fa-clock', style: { fontSize: '10px' } }),\n                            fmtRemaining(remaining)\n                        ]));\n                    }\n\n                    const metaRight = [];\n                    metaRight.push(React.createElement('span', { key: 'status', style: { display: 'inline-flex', alignItems: 'center', gap: '5px', fontSize: '10.5px', fontWeight: 600, color: 'var(--sb-green)', flex: 'none' } }, [\n                        React.createElement('i', { key: 'i', className: encrypted ? 'fas fa-lock' : 'fas fa-lock-open', style: { fontSize: '10px' } }),\n                        encrypted ? t('chat.encrypted') : t('chat.decrypted')\n                    ]));\n                    // Delete-for-everyone sits AFTER the Encrypted/Decrypted status.\n                    if (canUnsend && isMe && mid) {\n                        metaRight.push(React.createElement('button', {\n                            key: 'unsend', onClick: () => onUnsend && onUnsend(mid), title: t('chat.deleteForEveryone'),\n                            className: 'sb-unsend',\n                            style: { background: 'none', border: 'none', cursor: 'pointer', color: 'var(--sb-text-faint)', fontSize: '11px', padding: 0, lineHeight: 1 }\n                        }, React.createElement('i', { className: 'fas fa-trash-can' })));\n                    }\n\n                    const meta = React.createElement('div', {\n                        key: 'meta',\n                        style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: '14px', padding: '0 15px 10px' }\n                    }, [\n                        React.createElement('div', { key: 'l', style: { display: 'flex', alignItems: 'center', gap: '9px', minWidth: 0 } }, metaLeft),\n                        React.createElement('div', { key: 'r', style: { display: 'flex', alignItems: 'center', gap: '9px', flex: 'none' } }, metaRight)\n                    ]);\n\n                    return React.createElement('div', {\n                        className: 'message-slide',\n                        style: { display: 'flex', width: '100%', justifyContent: isMe ? 'flex-end' : 'flex-start' }\n                    }, [\n                        React.createElement('div', { key: 'wrap', style: { maxWidth: '74%', minWidth: '170px' } },\n                            React.createElement('div', { style: { borderRadius: radius, border: border, background: bg, overflow: 'hidden' } }, [body, meta])\n                        )\n                    ]);\n                };\n        \n                // Enhanced Connection Setup with verification\n                const EnhancedConnectionSetup = ({\n                    messages, \n                    onCreateOffer, \n                    onCreateAnswer, \n                    onConnect, \n                    onClearData,\n                    onVerifyConnection,\n                    connectionStatus,\n                    offerData,\n                    answerData,\n                    offerInput,\n                    setOfferInput,\n                    answerInput,\n                    setAnswerInput,\n                    showOfferStep,\n                    showAnswerStep,\n                    verificationCode,\n                    showVerification,\n                    showQRCode,\n                    qrCodeUrl,\n                    showQRScanner,\n                    setShowQRCode,\n                    setShowQRScanner,\n                    setShowQRScannerModal,\n                    offerPassword,\n                    answerPassword,\n                    localVerificationConfirmed,\n                    remoteVerificationConfirmed,\n                    bothVerificationsConfirmed,\n                    // QR control props\n                    qrFramesTotal,\n                    qrFrameIndex,\n                    qrManualMode,\n                    toggleQrManualMode,\n                    nextQrFrame,\n                    prevQrFrame,\n                    markAnswerCreated,\n                    notificationIntegrationRef,\n                    isGeneratingKeys,\n                    setIsGeneratingKeys,\n                    handleCreateOffer,\n                    relayOnlyMode,\n                    setRelayOnlyMode,\n                    webrtcManagerRef,\n                    showIceSettings,\n                    setShowIceSettings,\n                    iceServersText,\n                    iceSettingsPersisted,\n                    customIceServers,\n                    handleApplyIceSettings,\n                    handleForgetIceSettings,\n                    // When true, render ONLY the create/connect card (no marketing landing,\n                    // no hero) so it slots into the chat column for an additional session.\n                    compact = false\n                }) => {\n                    const [mode, setMode] = React.useState('create');\n                    const [notificationPermissionRequested, setNotificationPermissionRequested] = React.useState(false);\n                    // Local UI state for the redesigned Start Secure screen\n                    const [qrModalOpen, setQrModalOpen] = React.useState(false);\n                    const [copied, setCopied] = React.useState(false);\n                    const [sasInput, setSasInput] = React.useState('');\n                    const [sasError, setSasError] = React.useState('');\n                    const [sasFocused, setSasFocused] = React.useState(false);\n                    const [sasShake, setSasShake] = React.useState(0);\n                    const [platformsOpen, setPlatformsOpen] = React.useState(false);\n                    const [codeRevealed, setCodeRevealed] = React.useState(false);\n                    const [genProgress, setGenProgress] = React.useState(0);\n                    // Countdown on the invitation: the joining side refuses an offer older\n                    // than 30 minutes (MAX_OFFER_AGE in EnhancedSecureWebRTCManager), measured\n                    // from the offer's own timestamp.\n                    const OFFER_TTL_MS = 30 * 60 * 1000;\n                    const offerTs = (offerData && typeof offerData === 'object' && Number(offerData.ts || offerData.timestamp)) || null;\n                    const [nowTick, setNowTick] = React.useState(() => Date.now());\n                    React.useEffect(() => {\n                        if (!showOfferStep || !offerTs) return undefined;\n                        setNowTick(Date.now());\n                        const id = setInterval(() => setNowTick(Date.now()), 1000);\n                        return () => clearInterval(id);\n                    }, [showOfferStep, offerTs]);\n\n                    // Reset the typed SAS whenever a fresh verification code arrives\n                    React.useEffect(() => { setSasInput(''); setSasError(''); }, [verificationCode]);\n                    // Close the QR popup and re-hide (blur) the code whenever the\n                    // exchange step changes \u2014 every new offer/answer starts concealed.\n                    // Verification is also a step change, and the one that matters most:\n                    // the peer has scanned the code and the channel is up, so a QR still\n                    // covering the screen is a one-time credential left on display over\n                    // the safety number the user is now supposed to be reading. The\n                    // offer/answer flags stay set underneath, which is why this cannot\n                    // be left to the !showOfferStep && !showAnswerStep case alone.\n                    React.useEffect(() => {\n                        if (showVerification || (!showOfferStep && !showAnswerStep)) setQrModalOpen(false);\n                        setCodeRevealed(false);\n                    }, [showOfferStep, showAnswerStep, showVerification]);\n                    // Animate the \"Securing your channel\" steps while keys generate.\n                    React.useEffect(() => {\n                        const generating = isGeneratingKeys && !showOfferStep && !showAnswerStep && !showVerification;\n                        if (!generating) { setGenProgress(0); return; }\n                        setGenProgress(0);\n                        let p = 0;\n                        const id = setInterval(() => {\n                            p += 1;\n                            setGenProgress(p);\n                            if (p >= 3) clearInterval(id);\n                        }, 520);\n                        return () => clearInterval(id);\n                    }, [isGeneratingKeys, showOfferStep, showAnswerStep, showVerification]);\n                    // Dismiss the download platforms popover on any outside click\n                    React.useEffect(() => {\n                        if (!platformsOpen) return;\n                        const onDoc = () => setPlatformsOpen(false);\n                        const id = setTimeout(() => document.addEventListener('click', onDoc), 0);\n                        return () => { clearTimeout(id); document.removeEventListener('click', onDoc); };\n                    }, [platformsOpen]);\n\n                    // \"Back\" \u2014 clear the in-progress exchange and return to the intro of\n                    // the current tab. onClearData() resets offer/answer/verification in\n                    // the parent, which flips the derived step back to \"intro\".\n                    const resetToSelect = () => {\n                        setIsGeneratingKeys(false);\n                        setQrModalOpen(false);\n                        onClearData();\n                    };\n        \n                    const handleVerificationConfirm = (userCode) => {\n                        return onVerifyConnection(userCode);\n                    };\n        \n                    const handleVerificationReject = () => {\n                        onVerifyConnection(null, false);\n                    };\n                    \n                    // Request notification permission on first user interaction\n                    const requestNotificationPermissionOnInteraction = async () => {\n                        if (notificationPermissionRequested) {\n                            return; // Already requested\n                        }\n                        \n                        try {\n                            // Check if Notification API is supported\n                            if (!('Notification' in window)) {\n                                return;\n                            }\n                            \n                            // Check if we're in a secure context\n                            if (!window.isSecureContext && window.location.protocol !== 'https:' && window.location.hostname !== 'localhost') {\n                                return;\n                            }\n                            \n                            // Check current permission status\n                            const currentPermission = (typeof Notification !== 'undefined' && Notification) \n                                ? Notification.permission \n                                : 'denied';\n                            \n                            // Only request if permission is default (not granted or denied)\n                            if (currentPermission === 'default' && typeof Notification !== 'undefined' && Notification) {\n                                const permission = await Notification.requestPermission();\n                                \n                                if (permission === 'granted') {\n                                    // Initialize notification integration immediately\n                                    try {\n                                        if (window.NotificationIntegration && webrtcManagerRef.current) {\n                                            const integration = new window.NotificationIntegration(webrtcManagerRef.current);\n                                            await integration.init();\n                                            \n                                            // Store reference for cleanup\n                                            notificationIntegrationRef.current = integration;\n                                        }\n                                    } catch (error) {\n                                        // Handle error silently\n                                    }\n                                    \n                                    // Send welcome notification\n                                    setTimeout(() => {\n                                        try {\n                                            const welcomeNotification = new Notification('SecureBit Chat', {\n                                                body: t('notify.enabledBody'),\n                                                icon: '/logo/icon-192x192.png',\n                                                tag: 'welcome-notification'\n                                            });\n                                            \n                                            welcomeNotification.onclick = () => {\n                                                welcomeNotification.close();\n                                            };\n                                            \n                                            setTimeout(() => {\n                                                welcomeNotification.close();\n                                            }, 5000);\n                                            \n                                        } catch (error) {\n                                            // Handle error silently\n                                        }\n                                    }, 1000);\n                                    \n                                }\n                            } else if (currentPermission === 'granted') {\n                                // Initialize notification integration immediately\n                                try {\n                                    if (window.NotificationIntegration && webrtcManagerRef.current && !notificationIntegrationRef.current) {\n                                        const integration = new window.NotificationIntegration(webrtcManagerRef.current);\n                                        await integration.init();\n                                        \n                                        // Store reference for cleanup\n                                        notificationIntegrationRef.current = integration;\n                                    }\n                                } catch (error) {\n                                    // Handle error silently\n                                }\n                                \n                                // Test notification to confirm it works\n                                setTimeout(() => {\n                                    try {\n                                        const testNotification = new Notification('SecureBit Chat', {\n                                            body: t('notify.workingBody'),\n                                            icon: '/logo/icon-192x192.png',\n                                            tag: 'test-notification'\n                                        });\n                                        \n                                        testNotification.onclick = () => {\n                                            testNotification.close();\n                                        };\n                                        \n                                        setTimeout(() => {\n                                            testNotification.close();\n                                        }, 5000);\n                                    } catch (error) {\n                                        // Handle error silently\n                                    }\n                                }, 1000);\n                            }\n                            \n                            setNotificationPermissionRequested(true);\n                            \n                        } catch (error) {\n                            // Handle error silently\n                        }\n                    };\n        \n                    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                    // Start Secure \u2014 redesigned two-column connection screen.\n                    // Layout/colors/animation from the imported design; wired to the\n                    // app's real crypto handlers. Icons use FontAwesome (house style).\n                    // \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                    const h = React.createElement;\n                    const C_ORANGE = 'var(--sb-orange)';\n                    const C_GREEN = 'var(--sb-green)';\n                    // The same two accents as a fill rather than as text. A button's\n                    // background and a diagram's strokes are marks: they stay the brand\n                    // colour in both themes, because the ink on them is near-black either\n                    // way. C_ORANGE / C_GREEN above darken in the light theme so accent\n                    // *text* clears 4.5:1 on white, which a fill must not inherit.\n                    const C_ORANGE_SOLID = 'var(--sb-orange-solid)';\n                    const C_GREEN_SOLID = 'var(--sb-green-solid)';\n                    const MONO = SB_MONO;\n\n                    const encode = (data) => {\n                        try {\n                            const min = typeof data === 'object' ? JSON.stringify(data) : (data || '');\n                            if (!min) return '';\n                            if (typeof window.encodeBinaryToPrefixed === 'function') return window.encodeBinaryToPrefixed(min);\n                            if (typeof window.compressToPrefixedGzip === 'function') return window.compressToPrefixedGzip(min);\n                            return min;\n                        } catch { return typeof data === 'object' ? JSON.stringify(data) : (data || ''); }\n                    };\n\n                    // Derived flow step from the parent's real connection state\n                    const isCreate = mode === 'create';\n                    const isGenerating = isGeneratingKeys && !showOfferStep && !showAnswerStep && !showVerification;\n                    const isOfferCred = isCreate && showOfferStep && !showVerification;\n                    const isAnswerCred = !isCreate && showAnswerStep && !showVerification;\n                    const atIntro = !showVerification && !isGenerating && !isOfferCred && !isAnswerCred;\n                    const accent = isCreate ? C_ORANGE : C_GREEN;\n                    // Same pair as a mark: fa() puts `color` on the icon's stroke.\n                    const accentSolid = isCreate ? C_ORANGE_SOLID : C_GREEN_SOLID;\n                    const kicker = showVerification\n                        ? t('step.verification')\n                        : ((isOfferCred || isAnswerCred) ? t('step.exchange') : t('step.open'));\n\n                    const credCode = isCreate ? encode(offerData) : encode(answerData);\n                    const hasInvite = (offerInput || '').trim().length > 0;\n                    const hasAnswer = (answerInput || '').trim().length > 0;\n\n                    const copyCred = async () => {\n                        try {\n                            if (typeof copyToClipboardSecure === 'function') await copyToClipboardSecure(credCode);\n                            else await navigator.clipboard.writeText(credCode);\n                        } catch (e) {}\n                        setCopied(true);\n                        setTimeout(() => setCopied(false), 1600);\n                    };\n\n                    // SAS verification. The length is read off the code we were given\n                    // rather than assumed, so the button enables exactly when the input\n                    // is as long as the real answer.\n                    const normExpected = (verificationCode || '').replace(/[-\\s]/g, '').length;\n                    const normInput = sasInput.replace(/[-\\s]/g, '').length;\n                    const canConfirm = !localVerificationConfirmed && normExpected > 0 && normInput === normExpected;\n                    const handleSasConfirm = async () => {\n                        try {\n                            setSasError('');\n                            await onVerifyConnection(sasInput);\n                        } catch (err) {\n                            setSasInput('');\n                            setSasError(err?.message === 'SAS_MAX_ATTEMPTS'\n                                ? t('sas.tooManyAttempts')\n                                : t('sas.incorrect'));\n                        }\n                    };\n\n                    // Icon set transcribed from the design (inline SVG, not FontAwesome).\n                    // Each entry: stroke-width + the SVG child elements [tag, attrs].\n                    const ICON_DEFS = {\n                        'fa-user': { sw: 1.9, e: [['circle', { cx: 12, cy: 8, r: 3.6 }], ['path', { d: 'M5 20c0-3.5 3-5.5 7-5.5s7 2 7 5.5' }]] },\n                        'fa-lock': { sw: 2, e: [['path', { d: 'M7 11V7a5 5 0 0 1 10 0v4' }], ['rect', { x: 4.5, y: 11, width: 15, height: 9, rx: 2.2 }]] },\n                        'fa-plus': { sw: 2.1, e: [['path', { d: 'M12 5v14M5 12h14' }]] },\n                        'fa-link': { sw: 2, e: [['path', { d: 'M9.5 14.5l5-5M8 11l-2.2 2.2a3.5 3.5 0 0 0 4.95 4.95L13 16M16 13l2.2-2.2a3.5 3.5 0 0 0-4.95-4.95L11 8' }]] },\n                        'fa-bolt': { sw: 2.1, e: [['path', { d: 'M13 2L4.5 13H11l-1 9 8.5-11H12l1-9z' }]] },\n                        'fa-camera': { sw: 1.8, e: [['path', { d: 'M2 8.5V6.5A2.5 2.5 0 0 1 4.5 4h2M17.5 4h2A2.5 2.5 0 0 1 22 6.5v2M22 15.5v2a2.5 2.5 0 0 1-2.5 2.5h-2M6.5 20h-2A2.5 2.5 0 0 1 2 17.5v-2' }], ['circle', { cx: 12, cy: 12, r: 3.2 }]] },\n                        'fa-qrcode': { sw: 1.9, e: [['rect', { x: 3, y: 3, width: 7, height: 7, rx: 1.3 }], ['rect', { x: 14, y: 3, width: 7, height: 7, rx: 1.3 }], ['rect', { x: 3, y: 14, width: 7, height: 7, rx: 1.3 }], ['path', { d: 'M14 14h3v3M21 14v.01M14 21h.01M21 21v-4M17.5 21H21' }]] },\n                        'fa-chevron-right': { sw: 2, e: [['path', { d: 'M9 6l6 6-6 6' }]] },\n                        'fa-chevron-left': { sw: 2, e: [['path', { d: 'M15 6l-6 6 6 6' }]] },\n                        'fa-chevron-down': { sw: 2, e: [['path', { d: 'M6 9l6 6 6-6' }]] },\n                        'fa-circle-notch': { sw: 2, e: [['path', { d: 'M21 12a9 9 0 1 1-6.2-8.6' }]] },\n                        'fa-check': { sw: 2.4, e: [['path', { d: 'M20 6L9 17l-5-5' }]] },\n                        'fa-check-circle': { sw: 2, e: [['circle', { cx: 12, cy: 12, r: 9 }], ['path', { d: 'M8.5 12.4l2.4 2.4 4.6-5' }]] },\n                        'fa-shield-alt': { sw: 1.9, e: [['path', { d: 'M12 2.6l7 3v5.1c0 4.5-3 8.3-7 10.2-4-1.9-7-5.7-7-10.2V5.6l7-3z' }], ['path', { d: 'M9 12l2 2 4-4.1' }]] },\n                        'fa-download': { sw: 2, e: [['path', { d: 'M12 3v12M12 15l-4.5-4.5M12 15l4.5-4.5' }], ['path', { d: 'M4 20h16' }]] },\n                        'fa-clock': { sw: 1.8, e: [['circle', { cx: 12, cy: 13, r: 8 }], ['path', { d: 'M12 9v4l2.5 2M9 2h6' }]] },\n                        'fa-times': { sw: 2.2, e: [['path', { d: 'M18 6L6 18M6 6l12 12' }]] },\n                        'fa-eye': { sw: 1.9, e: [['path', { d: 'M2 12s3.6-7 10-7 10 7 10 7-3.6 7-10 7-10-7-10-7z' }], ['circle', { cx: 12, cy: 12, r: 3 }]] }\n                    };\n                    const fa = (name, opts) => {\n                        opts = opts || {};\n                        const def = ICON_DEFS[name];\n                        if (!def) {\n                            // Fallback to FontAwesome (e.g. fa-sliders-h, kept by preference).\n                            const st = {};\n                            if (opts.color) st.color = opts.color;\n                            if (opts.fontSize) st.fontSize = opts.fontSize;\n                            if (opts.animation) st.animation = opts.animation;\n                            if (opts.style) Object.assign(st, opts.style);\n                            return h('i', { key: opts.key, className: `fas ${name}`, style: st });\n                        }\n                        const size = opts.fontSize ? parseFloat(opts.fontSize) : 16;\n                        const svgStyle = {};\n                        if (opts.animation) { svgStyle.animation = opts.animation; svgStyle.transformOrigin = 'center'; svgStyle.transformBox = 'fill-box'; }\n                        if (opts.style) Object.assign(svgStyle, opts.style);\n                        return h('svg', {\n                            key: opts.key, className: name, width: size, height: size, viewBox: '0 0 24 24',\n                            fill: 'none', stroke: opts.color || 'currentColor',\n                            strokeWidth: def.sw || 2, strokeLinecap: 'round', strokeLinejoin: 'round',\n                            style: svgStyle\n                        }, def.e.map((el, i) => h(el[0], Object.assign({ key: i }, el[1]))));\n                    };\n\n                    // \u2500\u2500 LEFT PANEL \u00B7 branding + animated channel + crypto badges \u2500\u2500\n                    const leftPanel = h('div', {\n                        key: 'left',\n                        className: 'sb-start-left',\n                        style: {\n                            flex: '1.05 1 380px', position: 'relative', overflow: 'hidden',\n                            // Full viewport height even when the panels stack on mobile, so the\n                            // branding column isn't collapsed/cramped (looked broken otherwise).\n                            minHeight: '100vh', boxSizing: 'border-box',\n                            padding: '46px', display: 'flex', flexDirection: 'column',\n                            justifyContent: 'space-between', gap: '36px',\n                            borderInlineEnd: '1px solid rgba(var(--sb-ink), 0.06)',\n                            background: 'radial-gradient(900px 600px at 25% 18%, rgba(var(--sb-orange-rgb), 0.07), transparent 62%), radial-gradient(800px 700px at 80% 92%, rgba(var(--sb-green-rgb), 0.06), transparent 60%), var(--sb-bg-deep)'\n                        }\n                    }, [\n                        h('div', { key: 'herowrap', style: { flex: 1, display: 'flex', flexDirection: 'column', justifyContent: 'center', position: 'relative', zIndex: 2 } },\n                        h('div', { key: 'hero', style: { maxWidth: '560px' } }, [\n                            h('h1', { key: 'h1', style: { margin: '0 0 14px', fontSize: '34px', fontWeight: 800, letterSpacing: '-1.1px', lineHeight: 1.1, color: 'var(--sb-text-1)' } }, [\n                                t('hero.headlineTop'), h('br', { key: 'br' }), t('hero.headlineBottom')\n                            ]),\n                            h('p', { key: 'p', style: { margin: '0 0 38px', fontSize: '14.5px', lineHeight: 1.6, color: 'var(--sb-text-7)', maxWidth: '390px' } },\n                                t('hero.subheading')),\n                            // P2P / mesh animation.\n                            //\n                            // The loop tells the product's story in one shot: a direct line to\n                            // one peer, then two more joining it over 14 seconds \u2014 which is what\n                            // v6.0 actually added. Motion is pure CSS (offset-path along the\n                            // same geometry the lines are drawn from), so there is no rAF loop\n                            // burning battery on a landing page and nothing to tear down.\n                            h('div', { key: 'channel', style: { display: 'flex', alignItems: 'center', gap: '32px', flexWrap: 'wrap' } }, [\n                                h('svg', {\n                                    key: 'svg',\n                                    viewBox: '0 0 380 200',\n                                    role: 'img',\n                                    'aria-label': t('hero.diagramAlt'),\n                                    // Scales down on narrow screens; the labels sit just outside\n                                    // the viewBox, so the box must not clip them.\n                                    style: { display: 'block', width: '100%', maxWidth: '380px', height: 'auto', overflow: 'visible' }\n                                }, [\n                                    // the established 1:1 line\n                                    h('line', { key: 'l0', x1: 30, y1: 100, x2: 330, y2: 100, stroke: C_ORANGE_SOLID, strokeWidth: 1.5, strokeOpacity: 0.75 }),\n                                    h('circle', { key: 'p0', r: 3.6, fill: 'var(--sb-orange-2)', style: { offsetPath: \"path('M30,100 L330,100')\", animation: 'sbTrav 2.8s linear infinite' } }),\n\n                                    // first peer joins\n                                    h('g', { key: 'g1', style: { animation: 'sbIn1 14s linear infinite' } }, [\n                                        h('line', { key: 'a', x1: 30, y1: 100, x2: 250, y2: 26, stroke: C_ORANGE_SOLID, strokeWidth: 1.4, strokeOpacity: 0.7 }),\n                                        h('line', { key: 'b', x1: 250, y1: 26, x2: 330, y2: 100, stroke: C_GREEN_SOLID, strokeWidth: 1.2, strokeOpacity: 0.3 }),\n                                        h('circle', { key: 'p', r: 3.2, fill: 'var(--sb-orange-2)', style: { offsetPath: \"path('M30,100 L250,26')\", animation: 'sbTrav 3s linear .6s infinite' } }),\n                                        h('circle', { key: 'n', cx: 250, cy: 26, r: 5, fill: 'var(--sb-bg-deep)', stroke: 'var(--sb-diag-stroke)', strokeWidth: 1.2 }),\n                                        h('text', { key: 't', x: 250, y: 8, textAnchor: 'middle', fontFamily: MONO, fontSize: 12, fill: 'var(--sb-diag-label)' }, 'mara')\n                                    ]),\n                                    h('circle', { key: 'r1', cx: 250, cy: 26, r: 5, fill: 'none', stroke: C_ORANGE_SOLID, strokeOpacity: 0.6, style: { animation: 'sbRing1 14s linear infinite' } }),\n\n                                    // second peer joins, and the mesh closes\n                                    h('g', { key: 'g2', style: { animation: 'sbIn2 14s linear infinite' } }, [\n                                        h('line', { key: 'a', x1: 30, y1: 100, x2: 250, y2: 174, stroke: C_ORANGE_SOLID, strokeWidth: 1.4, strokeOpacity: 0.7 }),\n                                        h('line', { key: 'b', x1: 250, y1: 174, x2: 330, y2: 100, stroke: C_GREEN_SOLID, strokeWidth: 1.2, strokeOpacity: 0.3 }),\n                                        h('line', { key: 'c', x1: 250, y1: 26, x2: 250, y2: 174, stroke: C_GREEN_SOLID, strokeWidth: 1.2, strokeOpacity: 0.3 }),\n                                        h('circle', { key: 'p', r: 3.2, fill: 'var(--sb-orange-2)', style: { offsetPath: \"path('M30,100 L250,174')\", animation: 'sbTrav 3s linear .3s infinite' } }),\n                                        h('circle', { key: 'q', r: 2.8, fill: C_GREEN_SOLID, style: { offsetPath: \"path('M250,26 L250,174')\", animation: 'sbTrav 3.4s linear 1.2s infinite' } }),\n                                        h('circle', { key: 'n', cx: 250, cy: 174, r: 5, fill: 'var(--sb-bg-deep)', stroke: 'var(--sb-diag-stroke)', strokeWidth: 1.2 }),\n                                        h('text', { key: 't', x: 250, y: 194, textAnchor: 'middle', fontFamily: MONO, fontSize: 12, fill: 'var(--sb-diag-label)' }, 'tobi')\n                                    ]),\n                                    h('circle', { key: 'r2', cx: 250, cy: 174, r: 5, fill: 'none', stroke: C_ORANGE_SOLID, strokeOpacity: 0.6, style: { animation: 'sbRing2 14s linear infinite' } }),\n\n                                    // the two endpoints of the original line\n                                    h('circle', { key: 'pe', cx: 330, cy: 100, r: 5, fill: 'var(--sb-bg-deep)', stroke: 'var(--sb-diag-stroke)', strokeWidth: 1.2 }),\n                                    h('text', { key: 'pt', x: 346, y: 104, fontFamily: MONO, fontSize: 12, fill: 'var(--sb-diag-label)' }, 'peer'),\n                                    h('circle', { key: 'yh', cx: 30, cy: 100, r: 15, fill: C_ORANGE_SOLID, fillOpacity: 0.09 }),\n                                    h('circle', { key: 'yc', cx: 30, cy: 100, r: 6, fill: C_ORANGE_SOLID }),\n                                    h('text', { key: 'yt', x: 30, y: 126, textAnchor: 'middle', fontFamily: MONO, fontSize: 12, fill: 'var(--sb-diag-text)' }, t('mesh.you'))\n                                ]),\n\n                                // the log, timed to the same 14s loop as the nodes appearing\n                                h('div', { key: 'log', style: { display: 'flex', flexDirection: 'column', gap: '12px', fontFamily: MONO, fontSize: '12px', color: 'var(--sb-diag-dim)' } }, [\n                                    h('div', { key: 'r0', style: { animation: 'sbRow0 14s linear infinite' } }, t('mesh.peer')),\n                                    h('div', { key: 'r1', style: { animation: 'sbRow1 14s linear infinite' } }, t('mesh.joined2')),\n                                    h('div', { key: 'r2', style: { animation: 'sbRow2 14s linear infinite' } }, t('mesh.joined3'))\n                                ])\n                            ])\n                        ])),\n                        h('div', { key: 'badges', style: { position: 'relative', zIndex: 2, display: 'flex', flexWrap: 'wrap', gap: '8px' } },\n                            ['ECDH P-384', 'AES-256-GCM', t('sec.pfsShort')].map((label) =>\n                                h('span', { key: label, style: { display: 'inline-flex', alignItems: 'center', gap: '6px', padding: '6px 11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.025)', fontFamily: MONO, fontSize: '11px', fontWeight: 500, color: 'var(--sb-text-6)' } }, [\n                                    h('span', { key: 'dot', style: { width: '5px', height: '5px', borderRadius: '50%', background: C_GREEN_SOLID } }),\n                                    label\n                                ])\n                            )\n                        )\n                    ]);\n\n                    // \u2500\u2500 RIGHT PANEL \u00B7 flow body (varies by step) \u2500\u2500\n                    const segToggle = atIntro && h('div', { key: 'seg', style: { position: 'relative', display: 'flex', padding: '4px', borderRadius: '12px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', marginBottom: '26px' } }, [\n                        h('div', { key: 'ind', style: { position: 'absolute', top: '4px', bottom: '4px', insetInlineStart: '4px', width: 'calc(50% - 4px)', borderRadius: '9px', background: 'rgba(var(--sb-ink), 0.07)', border: '1px solid rgba(var(--sb-ink), 0.08)', transform: isCreate ? 'translateX(0%)' : `translateX(${100 * DIR}%)`, transition: 'transform .26s cubic-bezier(.3,.8,.3,1)' } }),\n                        h('button', { key: 'c', className: 'sb-seg-btn', onClick: () => setMode('create'), style: { position: 'relative', zIndex: 1, flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '11px', border: 'none', background: 'transparent', color: isCreate ? 'var(--sb-text-1)' : 'var(--sb-text-8)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer' } }, [fa('fa-plus', { key: 'i' }), t('action.create')]),\n                        h('button', { key: 'j', className: 'sb-seg-btn', onClick: () => setMode('join'), style: { position: 'relative', zIndex: 1, flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '11px', border: 'none', background: 'transparent', color: !isCreate ? 'var(--sb-text-1)' : 'var(--sb-text-8)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer' } }, [fa('fa-link', { key: 'i' }), t('action.join')])\n                    ]);\n\n                    const backButton = (key) => h('button', { key: key || 'back', className: 'sb-soft-btn', onClick: resetToSelect, style: { display: 'inline-flex', alignItems: 'center', gap: '6px', marginBottom: '14px', paddingBlock: '6px', paddingInlineStart: '8px', paddingInlineEnd: '11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'transparent', color: 'var(--sb-text-6)', fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600, cursor: 'pointer' } }, [fa('fa-chevron-left', { key: 'i' }), t('action.back')]);\n\n                    // Invitation card (Share Invitation v3 design): QR preview row on top,\n                    // the text code with copy + countdown below, one bordered surface.\n                    const offerLeft = (isCreate && offerTs) ? Math.max(0, Math.ceil((offerTs + OFFER_TTL_MS - nowTick) / 1000)) : null;\n                    const offerExpires = offerLeft === null ? null : `${Math.floor(offerLeft / 60)}:${String(offerLeft % 60).padStart(2, '0')}`;\n                    const credCard = h('div', { key: 'card', style: { borderRadius: '16px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', overflow: 'hidden', marginBottom: isCreate ? '26px' : '16px' } }, [\n                        qrCodeUrl && h('button', { key: 'showqr', className: 'sb-qr-row', onClick: () => setQrModalOpen(true), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '14px', padding: '14px 16px', border: 'none', background: 'transparent', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start', transition: 'background .15s' } }, [\n                            h('span', { key: 'ic', style: { flex: 'none', width: '48px', height: '48px', padding: '5px', borderRadius: '9px', background: '#fff' } },\n                                h('img', { src: qrCodeUrl, alt: '', style: { width: '100%', height: '100%', objectFit: 'contain', display: 'block', imageRendering: 'pixelated' } })),\n                            h('span', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                                h('span', { key: 't', style: { display: 'block', fontSize: '15px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('qr.showTitle')),\n                                h('span', { key: 's', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '2px' } }, (qrFramesTotal || 0) > 1 ? t('qr.showSubtitleFrames', { frames: qrFramesTotal }) : t('qr.showSubtitle'))\n                            ]),\n                            fa('fa-chevron-right', { color: 'var(--sb-text-9)' })\n                        ]),\n                        qrCodeUrl && h('div', { key: 'div', style: { height: '1px', background: 'rgba(var(--sb-ink), 0.06)' } }),\n                        h('div', { key: 'code', style: { padding: '12px 16px 16px' } }, [\n                            h('div', { key: 'bar', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: '10px', marginBottom: '10px' } }, [\n                                h('span', { key: 'l', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)' } }, t('cred.orCopy')),\n                                h('span', { key: 'r', style: { display: 'flex', alignItems: 'center', gap: '12px' } }, [\n                                    offerExpires && h('span', { key: 'exp', dir: 'ltr', style: { fontFamily: MONO, fontSize: '11px', color: offerLeft < 60 ? 'var(--sb-red)' : 'var(--sb-text-9)' } }, offerExpires),\n                                    h('button', { key: 'copy', className: 'sb-soft-btn', onClick: copyCred, style: { display: 'inline-flex', alignItems: 'center', gap: '6px', padding: '6px 11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.03)', color: 'var(--sb-text-2)', fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 700, cursor: 'pointer' } }, [\n                                        copied && fa('fa-check', { key: 'i', color: C_GREEN_SOLID }),\n                                        copied ? t('action.copied') : t('action.copy')\n                                    ])\n                                ])\n                            ]),\n                            // The handshake code is sensitive \u2014 keep it blurred until the\n                            // user deliberately reveals it, underscoring that it must be\n                            // shared only over a channel they trust.\n                            h('div', { key: 'codewrap', onClick: () => setCodeRevealed((v) => !v), style: { position: 'relative', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.05)', background: 'var(--sb-bg)', overflow: 'hidden', cursor: 'pointer' } }, [\n                                h('div', { key: 'code', dir: 'ltr', className: 'sb-sc', style: { fontFamily: MONO, fontSize: '11.5px', lineHeight: 1.6, color: 'var(--sb-text-code)', wordBreak: 'break-all', padding: '11px 13px', maxHeight: '78px', overflowY: codeRevealed ? 'auto' : 'hidden', filter: codeRevealed ? 'none' : 'blur(5px)', userSelect: codeRevealed ? 'text' : 'none', transition: 'filter .25s' } }, credCode),\n                                !codeRevealed && h('span', { key: 'reveal', style: { position: 'absolute', inset: 0, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '0 12px', textAlign: 'center', color: 'var(--sb-text-3)', fontSize: '12.5px', fontWeight: 600 } }, [\n                                    fa('fa-eye', { key: 'i' }),\n                                    t('cred.reveal')\n                                ])\n                            ])\n                        ])\n                    ]);\n\n                    let inner;\n                    if (showVerification) {\n                        // Transcribed from the Claude Design component (SAS Verification.dc.html),\n                        // without its card: it sits straight in the setup column like the other steps.\n                        const verified = bothVerificationsConfirmed;\n                        const code = (verificationCode || '').replace(/[-\\s]/g, '');\n                        const n = code.length;\n                        const typed = sasInput.replace(/[-\\s]/g, '');\n                        const full = n > 0 && typed.length === n;\n                        // Comparing against the code already on this screen reveals nothing; it\n                        // only spares a typo one of the limited real attempts in onVerifyConnection.\n                        const match = full && typed === code;\n                        const wrong = full && !match;\n                        const youOk = localVerificationConfirmed;\n                        const peerOk = remoteVerificationConfirmed;\n                        const waiting = youOk && !peerOk;\n                        const split = Math.min(3, n);\n                        const confirmable = canConfirm && match;\n                        const check = (k) => h('svg', { key: k, width: 12, height: 12, viewBox: '0 0 24 24', fill: 'none', stroke: 'var(--sb-on-green-2)', strokeWidth: 3.2, strokeLinecap: 'round', strokeLinejoin: 'round' },\n                            h('path', { d: 'M5 12.5l4.2 4.2L19 7', strokeDasharray: 24, style: { animation: 'svDraw .35s ease-out .1s both' } }));\n                        const ring = (ok, soft) => ({\n                            position: 'relative', width: '22px', height: '22px', flex: 'none', borderRadius: '50%', display: 'grid', placeItems: 'center', transition: 'all .3s',\n                            border: `1.5px solid ${ok ? C_GREEN_SOLID : (soft ? 'rgba(var(--sb-green-rgb), 0.5)' : 'rgba(var(--sb-ink), 0.18)')}`,\n                            background: ok ? C_GREEN_SOLID : 'transparent'\n                        });\n                        const who = (k, label) => h('span', { key: k, style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-4)' } }, label);\n\n                        const cells = code.split('').map((_, i) => {\n                            const v = typed[i] || '';\n                            const active = sasFocused && !youOk && i === typed.length && !full;\n                            let border = 'rgba(var(--sb-ink), 0.09)';\n                            let color = 'var(--sb-text-1)';\n                            let anim = 'none';\n                            if (v) { border = 'rgba(var(--sb-ink), 0.2)'; anim = 'otpPop .28s cubic-bezier(.2,.8,.3,1.2) both'; }\n                            if (active) border = 'rgba(var(--sb-orange-rgb), 0.65)';\n                            if (wrong) { border = 'rgba(var(--sb-red-rgb), 0.6)'; color = 'var(--sb-red)'; }\n                            if (match) anim = `otpOk .45s cubic-bezier(.2,.8,.3,1) ${i * 55}ms both`;\n                            return h('span', { key: i, style: {\n                                position: 'relative', flex: 1, minWidth: 0, height: '56px', display: 'grid', placeItems: 'center', borderRadius: '12px',\n                                border: `1px solid ${border}`, background: 'var(--sb-surface)', fontFamily: MONO, fontSize: '22px', fontWeight: 600, color,\n                                transition: 'border-color .15s, color .15s, box-shadow .15s', animation: anim,\n                                marginInlineStart: i === split && n > split ? '10px' : 0,\n                                boxShadow: active ? '0 0 0 3px rgba(var(--sb-orange-rgb), 0.12)' : 'none'\n                            } }, [\n                                v,\n                                active && h('span', { key: 'caret', style: { position: 'absolute', left: '50%', top: '50%', width: '2px', height: '22px', margin: '-11px 0 0 -1px', borderRadius: '1px', background: C_ORANGE_SOLID, animation: 'otpCaret 1s steps(1) infinite' } })\n                            ]);\n                        });\n\n                        inner = h('div', { key: 'verify', style: { animation: 'sbUp .3s ease' } }, [\n                            !verified && backButton('vback'),\n                            h('h2', { key: 't', style: { margin: '0 0 8px', fontSize: '22px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, verified ? t('sasv.titleDone') : t('sasv.title')),\n                            h('p', { key: 'sub', style: { margin: '0 0 24px', fontSize: '13.5px', lineHeight: 1.55, color: 'var(--sb-text-7)', textWrap: 'pretty' } }, verified ? t('sasv.descDone') : t('sasv.desc')),\n                            h('div', { key: 'code', style: { padding: '20px 0 22px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', marginBottom: '22px', textAlign: 'center' } },\n                                h('div', { dir: 'ltr', style: { display: 'inline-flex', alignItems: 'center', gap: '18px', fontFamily: MONO, fontSize: '34px', fontWeight: 600, letterSpacing: '8px', lineHeight: 1, color: verified ? C_GREEN : 'var(--sb-text-1)', transition: 'color .4s' } },\n                                    n ? [h('span', { key: 'a' }, code.slice(0, split)), h('span', { key: 'b' }, code.slice(split))]\n                                      : h('span', { style: { fontSize: '14px', letterSpacing: 0, color: 'var(--sb-text-8)' } }, t('verify.waiting')))),\n                            !verified && h('div', { key: 'form' }, [\n                                h('div', { key: 'lbl', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', marginBottom: '10px' } }, [\n                                    h('span', { key: 'l', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)' } }, t('sasv.enter')),\n                                    h('span', { key: 'h', style: { fontFamily: MONO, fontSize: '11px', transition: 'color .2s', color: full ? (match ? C_GREEN : 'var(--sb-red)') : 'var(--sb-text-faint)' } },\n                                        full ? (match ? t('sasv.match') : t('sasv.noMatch')) : `${typed.length} / ${n || SAS_CODE_LENGTH}`)\n                                ]),\n                                h('label', { key: 'cells', dir: 'ltr', style: { position: 'relative', display: 'flex', gap: '6px', marginBottom: sasError ? '8px' : '18px', cursor: 'text', animation: wrong ? `otpShake .4s ease ${sasShake % 2 ? '0s' : '0.001s'}` : 'none' } }, [\n                                    ...cells,\n                                    h('input', { key: 'in', dir: 'ltr', value: sasInput, disabled: youOk || !n, autoFocus: true, autoComplete: 'one-time-code', spellCheck: false, type: 'text', inputMode: 'numeric', pattern: '[0-9]*', maxLength: n || SAS_CODE_LENGTH, 'aria-label': t('sasv.enter'),\n                                        onChange: (e) => {\n                                            const v = e.target.value.replace(/\\D/g, '').slice(0, n || SAS_CODE_LENGTH);\n                                            if (n && v.length === n && v !== code) setSasShake((k) => k + 1);\n                                            setSasInput(v);\n                                            if (sasError) setSasError('');\n                                        },\n                                        onFocus: () => setSasFocused(true), onBlur: () => setSasFocused(false),\n                                        style: { position: 'absolute', inset: 0, width: '100%', height: '100%', opacity: 0, border: 'none', outline: 'none', background: 'transparent', color: 'transparent', caretColor: 'transparent', fontSize: '16px' } })\n                                ]),\n                                sasError && h('p', { key: 'err', style: { color: 'var(--sb-red)', fontSize: '12.5px', margin: '0 0 16px' } }, sasError)\n                            ]),\n                            h('div', { key: 'link', style: { display: 'flex', alignItems: 'center', gap: '12px', marginBottom: '20px' } }, [\n                                h('div', { key: 'you', style: { display: 'flex', alignItems: 'center', gap: '9px', flex: 'none' } }, [\n                                    h('span', { key: 'r', style: ring(youOk, false) }, youOk && check('c')),\n                                    who('l', t('sasv.you'))\n                                ]),\n                                h('div', { key: 'bar', style: { position: 'relative', flex: 1, height: '2px', borderRadius: '2px', background: 'rgba(var(--sb-ink), 0.08)', overflow: 'hidden' } }, [\n                                    h('div', { key: 'fill', style: { position: 'absolute', insetInlineStart: 0, top: 0, bottom: 0, width: peerOk ? '100%' : (youOk ? '50%' : '0%'), background: C_GREEN_SOLID, transition: 'width .6s cubic-bezier(.4,0,.2,1)' } }),\n                                    waiting && h('div', { key: 'scan', style: { position: 'absolute', top: 0, bottom: 0, width: '30%', background: 'linear-gradient(90deg, transparent, rgba(var(--sb-green-rgb), 0.9), transparent)', animation: 'svScan 1.1s ease-in-out infinite' } })\n                                ]),\n                                h('div', { key: 'peer', style: { display: 'flex', alignItems: 'center', gap: '9px', flex: 'none' } }, [\n                                    who('l', t('sasv.peer')),\n                                    h('span', { key: 'r', style: ring(peerOk, youOk) }, peerOk && check('c'))\n                                ])\n                            ]),\n                            !verified\n                                ? h('div', { key: 'btns' }, [\n                                    h('button', { key: 'ok', onClick: handleSasConfirm, disabled: !confirmable, style: { width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '14px', borderRadius: '13px', border: 'none', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, transition: 'background .25s, color .25s',\n                                        background: youOk ? 'rgba(var(--sb-green-rgb), 0.12)' : (confirmable ? C_GREEN_SOLID : 'rgba(var(--sb-ink), 0.05)'),\n                                        color: youOk ? C_GREEN : (confirmable ? 'var(--sb-on-green-2)' : 'var(--sb-text-faint)'),\n                                        cursor: confirmable ? 'pointer' : 'default' } }, youOk ? t('sasv.waitingPeer') : t('verify.confirm')),\n                                    h('button', { key: 'no', onClick: handleVerificationReject, className: 'sb-sas-mismatch', style: { display: 'flex', alignItems: 'center', justifyContent: 'center', width: '100%', marginTop: '10px', padding: '8px', border: 'none', background: 'transparent', color: 'var(--sb-text-7)', fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: 'pointer', transition: 'color .15s' },\n                                        onMouseEnter: (e) => { e.currentTarget.style.color = 'var(--sb-red)'; }, onMouseLeave: (e) => { e.currentTarget.style.color = 'var(--sb-text-7)'; } }, t('sasv.codesDiffer'))\n                                ])\n                                : h('div', { key: 'opening', style: { animation: 'svFade .35s ease .3s both' } },\n                                    h('div', { style: { display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '10px', padding: '14px 0 4px', fontSize: '13.5px', fontWeight: 600, color: 'var(--sb-text-4)' } }, [\n                                        t('sasv.opening'),\n                                        h('span', { key: 'd', style: { display: 'inline-flex', gap: '4px' } }, [0, 0.15, 0.3].map((d, i) =>\n                                            h('span', { key: i, style: { width: '4px', height: '4px', borderRadius: '50%', background: C_GREEN_SOLID, animation: `svDot 1.2s ease-in-out ${d}s infinite` } })))\n                                    ]))\n                        ]);\n                    } else if (isGenerating) {\n                        const genSteps = [t('handshake.step1'), t('handshake.step2'), t('handshake.step3')];\n                        inner = h('div', { key: 'gen', style: { animation: 'sbUp .28s ease' } }, [\n                            h('div', { key: 'head', style: { display: 'flex', alignItems: 'center', gap: '13px', marginBottom: '22px' } }, [\n                                h('div', { key: 'sp', style: { width: '44px', height: '44px', flex: 'none', display: 'grid', placeItems: 'center' } }, fa('fa-circle-notch', { color: C_ORANGE_SOLID, fontSize: '32px', animation: 'sbSpin 1s linear infinite' })),\n                                h('div', { key: 'tx' }, [\n                                    h('h2', { key: 't', style: { margin: 0, fontSize: '20px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, isCreate ? t('handshake.securingTitle') : t('handshake.answerTitle')),\n                                    h('p', { key: 's', style: { margin: '3px 0 0', fontSize: '13px', color: 'var(--sb-text-7)' } }, t('handshake.securingDesc'))\n                                ])\n                            ]),\n                            h('div', { key: 'steps', style: { display: 'flex', flexDirection: 'column', borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', overflow: 'hidden' } },\n                                genSteps.map((label, i) => {\n                                    const done = genProgress > i;\n                                    const active = genProgress === i;\n                                    return h('div', { key: i, style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '13px 15px', borderTop: i ? '1px solid rgba(var(--sb-ink), 0.05)' : 'none', transition: 'background .3s', background: done ? 'rgba(var(--sb-green-rgb), 0.04)' : 'transparent' } }, [\n                                        h('div', { key: 'd', style: { flex: 'none', width: '20px', height: '20px', borderRadius: '50%', display: 'grid', placeItems: 'center', background: done ? 'rgba(var(--sb-green-rgb), 0.12)' : (active ? 'rgba(var(--sb-orange-rgb), 0.12)' : 'rgba(var(--sb-ink), 0.04)'), border: `1px solid ${done ? 'rgba(var(--sb-green-rgb), 0.3)' : (active ? 'rgba(var(--sb-orange-rgb), 0.3)' : 'rgba(var(--sb-ink), 0.1)')}`, transition: 'all .3s' } },\n                                            done\n                                                ? fa('fa-check', { color: C_GREEN_SOLID, fontSize: '11px' })\n                                                : h('span', { style: { width: '6px', height: '6px', borderRadius: '50%', background: active ? C_ORANGE_SOLID : 'var(--sb-text-faint)', animation: active ? 'sbBlink 1s ease-in-out infinite' : 'none' } })),\n                                        h('span', { key: 'l', style: { fontSize: '13.5px', color: done ? 'var(--sb-text-4)' : (active ? 'var(--sb-text-2)' : 'var(--sb-text-9)'), transition: 'color .3s' } }, label)\n                                    ]);\n                                })\n                            )\n                        ]);\n                    } else if (isOfferCred || isAnswerCred) {\n                        inner = h('div', { key: 'cred', style: { animation: 'sbUp .3s ease' } }, [\n                            backButton('cback'),\n                            h('h2', { key: 'h', style: { margin: '0 0 8px', fontSize: '26px', fontWeight: 800, letterSpacing: '-0.7px', color: 'var(--sb-text-1)' } }, isCreate ? t('handshake.shareTitle') : t('handshake.sendAnswerTitle')),\n                            h('p', { key: 'p', style: { margin: '0 0 24px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, isCreate ? t('handshake.shareDesc') : t('handshake.sendAnswerDesc')),\n                            credCard,\n                            isOfferCred && h('div', { key: 'offerextra' }, [\n                                h('div', { key: 'lbl', style: { fontSize: '13.5px', fontWeight: 600, color: 'var(--sb-text-3)', marginBottom: '10px' } }, t('handshake.thenReceive')),\n                                h('textarea', { key: 'ta', dir: 'ltr', value: answerInput, onChange: (e) => { setAnswerInput(e.target.value); if (e.target.value.trim().length > 0 && typeof markAnswerCreated === 'function') markAnswerCreated(); }, rows: 3, placeholder: t('handshake.pasteAnswerPlaceholder'), style: { display: 'block', width: '100%', resize: 'none', borderRadius: '14px', border: `1px solid ${hasAnswer ? 'rgba(var(--sb-orange-rgb), 0.45)' : 'rgba(var(--sb-ink), 0.08)'}`, background: 'var(--sb-surface)', outline: 'none', color: 'var(--sb-text-2)', fontFamily: MONO, fontSize: '12.5px', lineHeight: 1.5, padding: '13px 15px', marginBottom: '12px', transition: 'border-color .15s' } }),\n                                h('div', { key: 'btns', style: { display: 'flex', gap: '10px' } }, [\n                                    h('button', { key: 'scan', className: 'sb-scan-btn', onClick: () => setShowQRScannerModal(true), style: { flex: 'none', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '0 18px', height: '50px', borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'transparent', color: 'var(--sb-text-2)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer' } }, [\n                                        h('svg', { key: 'i', width: 16, height: 16, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round', 'aria-hidden': true },\n                                            h('path', { d: 'M4 8V5a1 1 0 0 1 1-1h3M16 4h3a1 1 0 0 1 1 1v3M20 16v3a1 1 0 0 1-1 1h-3M8 20H5a1 1 0 0 1-1-1v-3M7 12h10' })),\n                                        t('action.scan')\n                                    ]),\n                                    h('button', { key: 'est', onClick: onConnect, disabled: !hasAnswer, style: { flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', height: '50px', borderRadius: '13px', border: 'none', background: hasAnswer ? C_ORANGE_SOLID : 'rgba(var(--sb-ink), 0.05)', color: hasAnswer ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, cursor: hasAnswer ? 'pointer' : 'not-allowed', transition: 'background .2s, color .2s' } }, t('handshake.establish'))\n                                ])\n                            ]),\n                            isAnswerCred && h('div', { key: 'answerextra', style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '4px 2px' } }, [\n                                h('span', { key: 'i', style: { flex: 'none', width: '16px', height: '16px', borderRadius: '50%', border: '2px solid rgba(var(--sb-ink), 0.1)', borderTopColor: C_ORANGE_SOLID, animation: 'sbSpin .9s linear infinite' } }),\n                                h('span', { key: 't', style: { fontSize: '13px', lineHeight: 1.5, color: 'var(--sb-text-7)' } }, t('handshake.answerSentNote'))\n                            ])\n                        ]);\n                    } else if (isCreate) {\n                        // CREATE intro\n                        inner = h('div', { key: 'introC', style: { animation: 'sbUp .28s ease' } }, [\n                            h('h2', { key: 'h', style: { margin: '0 0 6px', fontSize: '23px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, t('intro.createTitle')),\n                            h('p', { key: 'p', style: { margin: '0 0 22px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, t('intro.createDesc')),\n                            h('button', { key: 'gen', className: 'sb-gen-btn', onClick: () => { requestNotificationPermissionOnInteraction(); if (webrtcManagerRef.current) handleCreateOffer(); }, style: { width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '15px', borderRadius: '13px', border: 'none', background: C_ORANGE_SOLID, color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '15px', fontWeight: 700, cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' } }, [fa('fa-bolt', { key: 'i' }), t('intro.createCta')])\n                        ]);\n                    } else {\n                        // JOIN intro \u2014 same card language as the invitation/answer screens:\n                        // scan row on top, the paste field below, one bordered surface.\n                        const canJoin = hasInvite && connectionStatus !== 'connecting';\n                        inner = h('div', { key: 'introJ', style: { animation: 'sbUp .28s ease' } }, [\n                            h('h2', { key: 'h', style: { margin: '0 0 8px', fontSize: '26px', fontWeight: 800, letterSpacing: '-0.7px', color: 'var(--sb-text-1)' } }, t('intro.joinTitle')),\n                            h('p', { key: 'p', style: { margin: '0 0 24px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, t('intro.joinDesc')),\n                            h('div', { key: 'card', style: { borderRadius: '16px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', overflow: 'hidden', marginBottom: '12px' } }, [\n                                h('button', { key: 'scan', className: 'sb-qr-row', onClick: () => { requestNotificationPermissionOnInteraction(); setShowQRScannerModal(true); }, style: { width: '100%', display: 'flex', alignItems: 'center', gap: '14px', padding: '14px 16px', border: 'none', background: 'transparent', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start', transition: 'background .15s' } }, [\n                                    h('span', { key: 'ic', style: { flex: 'none', width: '48px', height: '48px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-ink), 0.05)', border: '1px solid rgba(var(--sb-ink), 0.08)', color: 'var(--sb-text-2)' } },\n                                        h('svg', { width: 22, height: 22, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round', 'aria-hidden': true },\n                                            h('path', { d: 'M4 8V5a1 1 0 0 1 1-1h3M16 4h3a1 1 0 0 1 1 1v3M20 16v3a1 1 0 0 1-1 1h-3M8 20H5a1 1 0 0 1-1-1v-3M7 12h10' }))),\n                                    h('span', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                                        h('span', { key: 't', style: { display: 'block', fontSize: '15px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('intro.scanTitle')),\n                                        h('span', { key: 's', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '2px' } }, t('intro.scanSubtitle'))\n                                    ]),\n                                    fa('fa-chevron-right', { color: 'var(--sb-text-9)' })\n                                ]),\n                                h('div', { key: 'div', style: { height: '1px', background: 'rgba(var(--sb-ink), 0.06)' } }),\n                                h('div', { key: 'paste', style: { padding: '12px 16px 16px' } }, [\n                                    h('div', { key: 'l', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)', marginBottom: '10px' } }, t('intro.orPasteCode')),\n                                    h('textarea', { key: 'ta', dir: 'ltr', value: offerInput, onChange: (e) => { setOfferInput(e.target.value); if (e.target.value.trim().length > 0 && typeof markAnswerCreated === 'function') markAnswerCreated(); }, rows: 3, placeholder: t('intro.pastePlaceholder'), style: { display: 'block', width: '100%', resize: 'none', borderRadius: '11px', border: `1px solid ${hasInvite ? 'rgba(var(--sb-orange-rgb), 0.45)' : 'rgba(var(--sb-ink), 0.05)'}`, background: 'var(--sb-bg)', outline: 'none', color: 'var(--sb-text-2)', fontFamily: MONO, fontSize: '12.5px', lineHeight: 1.5, padding: '11px 13px', transition: 'border-color .15s' } })\n                                ])\n                            ]),\n                            h('button', { key: 'connect', onClick: () => { requestNotificationPermissionOnInteraction(); onCreateAnswer(); }, disabled: !canJoin, style: { width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', height: '50px', borderRadius: '13px', border: 'none', background: canJoin ? C_ORANGE_SOLID : 'rgba(var(--sb-ink), 0.05)', color: canJoin ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, cursor: canJoin ? 'pointer' : 'not-allowed', transition: 'background .2s, color .2s' } }, connectionStatus === 'connecting' ? t('intro.connecting') : t('intro.connect'))\n                        ]);\n                    }\n\n                    // Desktop downloads (real GitHub release assets) + OS detection.\n                    //\n                    // Keep SB_DESKTOP_VERSION in sync with the constant of the same name in\n                    // src/components/ui/DownloadApps.jsx \u2014 tests/desktop-download-links.test.mjs\n                    // fails the build if the two ever disagree.\n                    //\n                    // The tag is pinned rather than using /releases/latest/download/. Release\n                    // filenames carry the version, and GitHub resolves `latest` by redirecting\n                    // to the newest tag \u2014 so a stale `latest` link becomes\n                    // /download/v0.3.0/SecureBit.Chat_0.1.0_x64-setup.exe, a file that never\n                    // existed, and the download 404s. A pinned tag keeps serving a real\n                    // installer instead.\n                    const SB_DESKTOP_VERSION = '1.0.5';\n                    const SB_DESKTOP_RELEASE = `https://github.com/SecureBitChat/securebit-desktop/releases/download/v${SB_DESKTOP_VERSION}`;\n                    const DOWNLOADS = {\n                        mac: { name: 'macOS', format: '.dmg \u00B7 Apple Silicon & Intel', icon: 'fab fa-apple', url: `${SB_DESKTOP_RELEASE}/SecureBit.Chat_${SB_DESKTOP_VERSION}_x64.dmg` },\n                        win: { name: 'Windows', format: '.exe \u00B7 64-bit installer', icon: 'fab fa-windows', url: `${SB_DESKTOP_RELEASE}/SecureBit.Chat_${SB_DESKTOP_VERSION}_x64-setup.exe` },\n                        linux: { name: 'Linux', format: '.AppImage', icon: 'fab fa-linux', url: `${SB_DESKTOP_RELEASE}/SecureBit.Chat_${SB_DESKTOP_VERSION}_amd64.AppImage` }\n                    };\n                    const detectOS = () => {\n                        const ua = (navigator.userAgent || '') + ' ' + (navigator.platform || '');\n                        if (/Mac|iPhone|iPad|iPod/i.test(ua) && !/Android/i.test(ua)) return 'mac';\n                        if (/Win/i.test(ua)) return 'win';\n                        if (/Linux/i.test(ua) && !/Android/i.test(ua)) return 'linux';\n                        return 'win';\n                    };\n                    const detectedOS = detectOS();\n                    const otherOS = ['mac', 'win', 'linux'].filter((k) => k !== detectedOS);\n                    const dlLink = (url) => { try { window.open(url, '_blank', 'noopener'); } catch (e) {} };\n\n                    const platformsMenu = platformsOpen && h('div', { key: 'platmenu', className: 'sb-platforms-menu', style: { position: 'absolute', insetInlineStart: 0, bottom: 'calc(100% + 10px)', width: '344px', maxWidth: '100%', borderRadius: '16px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'var(--sb-surface)', boxShadow: '0 24px 60px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))', overflow: 'hidden', zIndex: 25, animation: 'sbUp .2s ease' } }, [\n                        h('div', { key: 'mh', style: { display: 'flex', alignItems: 'center', gap: '10px', padding: '14px 16px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                            h('div', { key: 't', style: { flex: 1, lineHeight: 1.2 } }, [\n                                h('div', { key: 'a', style: { fontSize: '14px', fontWeight: 800, color: 'var(--sb-text-1)' } }, t('dl.title')),\n                                h('div', { key: 'b', style: { fontSize: '11.5px', color: 'var(--sb-text-8)' } }, t('dl.free'))\n                            ]),\n                            h('span', { key: 'pill', style: { fontFamily: MONO, fontSize: '10px', fontWeight: 600, color: C_GREEN, padding: '3px 8px', borderRadius: '6px', background: 'rgba(var(--sb-green-rgb), 0.1)', border: '1px solid rgba(var(--sb-green-rgb), 0.22)' } }, t('chat.onWeb'))\n                        ]),\n                        h('div', { key: 'rec', style: { padding: '12px 12px 6px' } },\n                            h('button', { key: 'b', onClick: () => dlLink(DOWNLOADS[detectedOS].url), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '12px', padding: '13px 14px', borderRadius: '12px', border: '1px solid rgba(var(--sb-orange-rgb), 0.4)', background: 'rgba(var(--sb-orange-rgb), 0.08)', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start' } }, [\n                                h('span', { key: 'ic', style: { flex: 'none', display: 'grid', placeItems: 'center', width: '38px', height: '38px', borderRadius: '11px', background: 'rgba(var(--sb-orange-rgb), 0.14)', border: '1px solid rgba(var(--sb-orange-rgb), 0.3)', color: C_ORANGE } }, h('i', { className: DOWNLOADS[detectedOS].icon, style: { fontSize: '17px' } })),\n                                h('span', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                                    h('span', { key: 'n', style: { display: 'block', fontSize: '13.5px', fontWeight: 700, color: 'var(--sb-text-1)' } }, DOWNLOADS[detectedOS].name),\n                                    h('span', { key: 'f', style: { display: 'block', fontSize: '11px', color: 'var(--sb-orange-3)', marginTop: '1px' } }, `Recommended for this device \u00B7 ${DOWNLOADS[detectedOS].format}`)\n                                ]),\n                                fa('fa-download', { color: C_ORANGE_SOLID })\n                            ])),\n                        h('div', { key: 'others', style: { padding: '0 12px 8px', display: 'flex', flexDirection: 'column', gap: '2px' } },\n                            otherOS.map((k) => h('button', { key: k, onClick: () => dlLink(DOWNLOADS[k].url), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '12px', padding: '11px 14px', borderRadius: '11px', border: 'none', background: 'transparent', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start' } }, [\n                                h('span', { key: 'ic', style: { flex: 'none', display: 'grid', placeItems: 'center', width: '34px', height: '34px', borderRadius: '10px', background: 'rgba(var(--sb-ink), 0.04)', border: '1px solid rgba(var(--sb-ink), 0.08)', color: 'var(--sb-text-4)' } }, h('i', { className: DOWNLOADS[k].icon, style: { fontSize: '15px' } })),\n                                h('span', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                                    h('span', { key: 'n', style: { display: 'block', fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-2)' } }, DOWNLOADS[k].name),\n                                    h('span', { key: 'f', style: { display: 'block', fontSize: '11px', color: 'var(--sb-text-8)', marginTop: '1px' } }, DOWNLOADS[k].format)\n                                ]),\n                                fa('fa-download', { color: 'var(--sb-text-7)' })\n                            ]))),\n                        h('div', { key: 'soon', style: { display: 'flex', alignItems: 'center', gap: '9px', padding: '12px 16px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(var(--sb-ink), 0.015)' } }, [\n                            fa('fa-clock', { key: 'i', color: 'var(--sb-text-9)' }),\n                            h('span', { key: 't', style: { fontSize: '11.5px', lineHeight: 1.45, color: 'var(--sb-text-8)' } }, t('dl.soon'))\n                        ])\n                    ]);\n\n                    const footer = h('div', { key: 'footer', className: 'sb-conn-footer', style: { position: 'relative', marginTop: '30px', paddingTop: '18px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: '12px', flexWrap: 'wrap' } }, [\n                        h('button', { key: 'dl', onClick: () => setPlatformsOpen((v) => !v), style: { display: 'inline-flex', alignItems: 'center', gap: '9px', paddingBlock: '8px', paddingInlineStart: '9px', paddingInlineEnd: '13px', borderRadius: '10px', border: `1px solid ${platformsOpen ? 'rgba(var(--sb-orange-rgb), 0.4)' : 'rgba(var(--sb-ink), 0.08)'}`, background: platformsOpen ? 'rgba(var(--sb-orange-rgb), 0.06)' : 'rgba(var(--sb-ink), 0.02)', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', transition: 'all .15s' } }, [\n                            fa('fa-download', { key: 'i', color: C_ORANGE_SOLID }),\n                            h('span', { key: 't', style: { fontSize: '12.5px', fontWeight: 700, color: 'var(--sb-text-2)' } }, t('action.downloadDesktop')),\n                            fa('fa-chevron-down', { key: 'c', color: 'var(--sb-text-9)', style: { fontSize: '11px', transform: platformsOpen ? 'rotate(180deg)' : 'rotate(0deg)', transition: 'transform .2s' } })\n                        ]),\n                        h('button', { key: 'settings', className: 'sb-link', onClick: () => setShowIceSettings && setShowIceSettings(true), style: { display: 'inline-flex', alignItems: 'center', gap: '7px', background: 'none', border: 'none', color: 'var(--sb-text-7)', fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600, cursor: 'pointer' } }, [fa('fa-sliders-h', { key: 'i' }), t('action.advancedSettings')]),\n                        platformsMenu\n                    ]);\n\n                    // Advanced settings overlay \u2014 rendered inside the right column,\n                    // sliding up over it (z-30), exactly as in the design.\n                    const settingsOverlay = (showIceSettings && typeof window !== 'undefined' && window.IceServerSettings)\n                        ? h(window.IceServerSettings, {\n                            key: 'ice-settings',\n                            isOpen: true,\n                            embedded: true,\n                            onClose: () => setShowIceSettings(false),\n                            initial: {\n                                useCustom: Array.isArray(customIceServers) && customIceServers.length > 0,\n                                serversText: iceServersText,\n                                privacyMode: relayOnlyMode ? 'relay-only' : 'standard',\n                                persisted: iceSettingsPersisted\n                            },\n                            hasSaved: iceSettingsPersisted,\n                            onApply: handleApplyIceSettings,\n                            onForget: handleForgetIceSettings\n                        })\n                        : null;\n\n                    const rightPanel = h('div', { key: 'right', style: compact\n                        ? { flex: 1, minWidth: 0, width: '100%', position: 'relative', overflow: 'hidden', display: 'flex', flexDirection: 'column', height: '100%' }\n                        : { flex: '0.95 1 460px', minWidth: 'min(100%, 320px)', position: 'relative', overflow: 'hidden', display: 'flex', flexDirection: 'column', height: '100vh' } }, [\n                        h('div', { key: 'scroll', className: 'custom-scrollbar', style: { flex: 1, overflowY: 'auto', display: 'flex', flexDirection: 'column', padding: '42px 44px' } },\n                            h('div', { style: { maxWidth: '430px', width: '100%', margin: 'auto' } }, [\n                                h('div', { key: 'kicker', style: { fontFamily: MONO, fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '1px', marginBottom: '10px' } }, kicker),\n                                segToggle,\n                                inner,\n                                footer\n                            ])),\n                        settingsOverlay\n                    ]);\n\n                    // \u2500\u2500 QR display modal (real qrCodeUrl + frame controls) \u2500\u2500\n                    const qrModal = (qrModalOpen && qrCodeUrl) && h('div', { key: 'qrmodal', onClick: () => setQrModalOpen(false), style: { position: 'fixed', inset: 0, zIndex: 50, display: 'flex', alignItems: 'center', justifyContent: 'center', padding: '32px', background: 'rgba(var(--sb-scrim-rgb), 0.82)', backdropFilter: 'blur(10px)', animation: 'sbUp .2s ease' } },\n                        h('div', { onClick: (e) => e.stopPropagation(), style: { width: '100%', maxWidth: '460px', borderRadius: '22px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'var(--sb-bg)', boxShadow: '0 30px 90px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))', overflow: 'hidden' } }, [\n                            h('div', { key: 'head', style: { display: 'flex', alignItems: 'center', gap: '11px', padding: '18px 20px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                                h('span', { key: 'd', style: { width: '9px', height: '9px', borderRadius: '50%', background: accent } }),\n                                h('div', { key: 'tx', style: { flex: 1, lineHeight: 1.2 } }, [\n                                    h('div', { key: 't', style: { fontSize: '15.5px', fontWeight: 800, color: 'var(--sb-text-1)' } }, isCreate ? t('handshake.shareTitle') : t('handshake.sendAnswerTitle')),\n                                    h('div', { key: 's', style: { fontSize: '12px', color: 'var(--sb-text-8)' } }, `${isCreate ? 'offer' : 'answer'} \u00B7 one-time`)\n                                ]),\n                                h('button', { key: 'x', onClick: () => setQrModalOpen(false), style: { width: '32px', height: '32px', display: 'grid', placeItems: 'center', borderRadius: '9px', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-6)', cursor: 'pointer' } }, fa('fa-times'))\n                            ]),\n                            h('div', { key: 'body', style: { padding: '22px 24px 24px' } }, [\n                                h('div', { key: 'qr', style: { position: 'relative', width: '100%', aspectRatio: '1', borderRadius: '18px', overflow: 'hidden', background: '#fff', padding: '18px', display: 'grid', placeItems: 'center' } },\n                                    h('img', { src: qrCodeUrl, alt: t('chatHdr.qrCode'), style: { width: '100%', height: '100%', objectFit: 'contain', display: 'block' } })),\n                                h('div', { key: 'ctrls', style: { display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '12px', marginTop: '18px' } }, [\n                                    (qrFramesTotal || 0) >= 1 && h('div', { key: 'frame', style: { display: 'flex', alignItems: 'center', gap: '9px' } }, [\n                                        h('span', { key: 'l', style: { fontFamily: MONO, fontSize: '12px', fontWeight: 600, color: 'var(--sb-text-6)' } }, `Frame ${Math.max(1, qrFrameIndex || 1)} / ${qrFramesTotal || 1}`),\n                                        h('div', { key: 'dots', style: { display: 'flex', gap: '5px' } }, Array.from({ length: qrFramesTotal || 1 }, (_, i) => h('span', { key: i, style: { width: '7px', height: '7px', borderRadius: '50%', background: (i + 1) === (qrFrameIndex || 1) ? accent : 'rgba(var(--sb-ink), 0.14)', transition: 'background .25s' } })))\n                                    ]),\n                                    (qrFramesTotal || 0) > 1 && h('div', { key: 'nav', style: { display: 'flex', alignItems: 'center', gap: '6px' } }, [\n                                        h('button', { key: 'prev', onClick: prevQrFrame, style: { width: '40px', height: '36px', display: 'grid', placeItems: 'center', borderRadius: '10px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-4)', cursor: 'pointer' } }, fa('fa-chevron-left')),\n                                        h('button', { key: 'auto', onClick: toggleQrManualMode, style: { display: 'inline-flex', alignItems: 'center', gap: '7px', padding: '9px 18px', borderRadius: '10px', border: `1px solid ${qrManualMode ? 'rgba(var(--sb-ink), 0.1)' : 'rgba(var(--sb-orange-rgb), 0.45)'}`, background: qrManualMode ? 'rgba(var(--sb-ink), 0.04)' : 'rgba(var(--sb-orange-rgb), 0.08)', color: qrManualMode ? 'var(--sb-text-6)' : C_ORANGE, fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: 'pointer' } }, qrManualMode ? 'Manual' : 'Auto'),\n                                        h('button', { key: 'next', onClick: nextQrFrame, style: { width: '40px', height: '36px', display: 'grid', placeItems: 'center', borderRadius: '10px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-4)', cursor: 'pointer' } }, fa('fa-chevron-right'))\n                                    ]),\n                                    h('p', { key: 'hint', style: { margin: '2px 0 0', textAlign: 'center', fontSize: '12px', lineHeight: 1.5, color: 'var(--sb-text-9)' } }, (qrFramesTotal || 0) > 1 ? t('handshake.qrHintFrames', { frames: qrFramesTotal }) : t('handshake.qrHint'))\n                                ])\n                            ])\n                        ])\n                    );\n\n                    const hero = h('div', { key: 'hero', style: { display: 'flex', flexWrap: 'wrap', minHeight: '100vh', width: '100%', background: 'var(--sb-bg)', color: 'var(--sb-text-2)' } }, [leftPanel, rightPanel]);\n\n                    // Full-bleed dark bands \u2014 match the design mockups (not clamped to max-w-4xl).\n                    const uniqueSection = atIntro && h(UniqueFeatureSlider, { key: 'unique-features-slider' });\n                    const partnersSection = atIntro && h(BecomePartner, { key: 'become-partner' });\n                    const roadmapSection = atIntro && h(Roadmap, { key: 'roadmap' });\n                    const donateSection = atIntro && h(DonateCrypto, { key: 'donate-crypto' });\n                    const communitySection = atIntro && h(CommunityCTA, { key: 'community-cta' });\n\n                    // Ship the keyframes inside app.js so the animations can never go\n                    // stale against a service-worker-cached components.css.\n                    const keyframeStyle = h('style', { key: 'kf', dangerouslySetInnerHTML: { __html:\n                        '@keyframes sbFlowR{0%{left:4%;opacity:0}12%{opacity:1}88%{opacity:1}100%{left:96%;opacity:0}}' +\n                        '@keyframes sbFlowL{0%{left:96%;opacity:0}12%{opacity:1}88%{opacity:1}100%{left:4%;opacity:0}}' +\n                        '@keyframes sbPulse{0%,100%{transform:translate(-50%,-50%) scale(1);opacity:.5}50%{transform:translate(-50%,-50%) scale(1.5);opacity:0}}' +\n                        '@keyframes sbSpin{to{transform:rotate(360deg)}}' +\n                        '@keyframes sbUp{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}' +\n                        '@keyframes sbNode{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-green-rgb), 0)}50%{box-shadow:0 0 0 6px rgba(var(--sb-green-rgb), .06)}}' +\n                        '@keyframes sbScan{0%{top:8%}100%{top:88%}}' +\n                        '@keyframes sbBlink{0%,100%{opacity:1}50%{opacity:.35}}' +\n                        // SAS verification step (SAS Verification.dc.html).\n                        '@keyframes otpPop{0%{transform:translateY(6px) scale(.9);opacity:0}60%{transform:translateY(-1px) scale(1.04);opacity:1}100%{transform:none;opacity:1}}' +\n                        '@keyframes otpOk{0%{transform:none}45%{transform:translateY(-4px)}100%{transform:none;background:rgba(var(--sb-green-rgb),.07);border-color:rgba(var(--sb-green-rgb),.55);color:var(--sb-green)}}' +\n                        '@keyframes otpShake{0%,100%{transform:translateX(0)}20%{transform:translateX(-7px)}40%{transform:translateX(6px)}60%{transform:translateX(-4px)}80%{transform:translateX(2px)}}' +\n                        '@keyframes otpCaret{0%,100%{opacity:1}50%{opacity:0}}' +\n                        '@keyframes svDot{0%,80%,100%{opacity:.25;transform:translateY(0)}40%{opacity:1;transform:translateY(-3px)}}' +\n                        '@keyframes svDraw{from{stroke-dashoffset:24}to{stroke-dashoffset:0}}' +\n                        '@keyframes svScan{from{left:-30%}to{left:100%}}' +\n                        '@keyframes svFade{from{opacity:0;transform:translateY(4px)}to{opacity:1;transform:none}}' +\n                        // P2P / mesh animation (left panel). One 14s loop: the direct line is\n                        // already up, then two peers join it. `sbTrav` moves a dot along the\n                        // same geometry the line is drawn from, via offset-path, so the packet\n                        // and the wire can never drift apart.\n                        '@keyframes sbTrav{0%{offset-distance:0%;opacity:0}15%{opacity:1}80%{opacity:1}100%{offset-distance:100%;opacity:0}}' +\n                        // `r` is animated as a CSS property here. Where a browser does not\n                        // support that the ring simply never expands \u2014 it stays invisible\n                        // behind its own opacity, which is a clean way to lose the flourish.\n                        '@keyframes sbRing1{0%,24%{r:5;opacity:0}26%{opacity:.8}34%{r:22;opacity:0}100%{r:22;opacity:0}}' +\n                        '@keyframes sbRing2{0%,54%{r:5;opacity:0}56%{opacity:.8}64%{r:22;opacity:0}100%{r:22;opacity:0}}' +\n                        '@keyframes sbIn1{0%,24%{opacity:0}27%{opacity:1}100%{opacity:1}}' +\n                        '@keyframes sbIn2{0%,54%{opacity:0}57%{opacity:1}100%{opacity:1}}' +\n                        '@keyframes sbRow0{0%,4%{opacity:0;transform:translateY(4px)}8%{opacity:1;transform:none}100%{opacity:1;transform:none}}' +\n                        '@keyframes sbRow1{0%,25%{opacity:0;transform:translateY(4px)}29%{opacity:1;transform:none}100%{opacity:1;transform:none}}' +\n                        '@keyframes sbRow2{0%,55%{opacity:0;transform:translateY(4px)}59%{opacity:1;transform:none}100%{opacity:1;transform:none}}' +\n                        // A looping diagram is exactly what someone who asked for less motion\n                        // does not want. Hold it on the finished state instead of removing it,\n                        // so the picture still reads as a mesh of three.\n                        '@media (prefers-reduced-motion: reduce){' +\n                          '.sb-start [style*=\"sbTrav\"],.sb-start [style*=\"sbRing\"]{animation:none!important;opacity:0!important}' +\n                          '.sb-start [style*=\"sbIn1\"],.sb-start [style*=\"sbIn2\"],' +\n                          '.sb-start [style*=\"sbRow0\"],.sb-start [style*=\"sbRow1\"],.sb-start [style*=\"sbRow2\"]' +\n                          '{animation:none!important;opacity:1!important;transform:none!important}' +\n                        '}'\n                    } });\n\n                    // Embedded in the chat column (additional session): just the create/connect\n                    // card filling the area \u2014 no hero, no marketing landing.\n                    if (compact) {\n                        return h('div', { className: 'sb-start', style: { flex: 1, minHeight: 0, width: '100%', display: 'flex', flexDirection: 'column', background: 'var(--sb-bg)', color: 'var(--sb-text-2)' } }, [keyframeStyle, rightPanel, qrModal]);\n                    }\n\n                    return h('div', { className: 'sb-start', style: { width: '100%' } }, [keyframeStyle, hero, uniqueSection, partnersSection, roadmapSection, donateSection, communitySection, qrModal]);\n                };\n        \n                // Global scroll function - defined outside components to ensure availability\n                // \u2500\u2500 viewport read-out (?vvdebug=1) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                // A phone cannot be attached to a debugger the way a laptop can, and\n                // the numbers that decide this layout \u2014 how tall the visible rect is,\n                // where it has been moved to, whether the shell followed \u2014 are not\n                // visible in a screenshot of the result. This paints them on top of\n                // the app so one screenshot answers the question. Off unless asked\n                // for by name in the URL; it costs nothing when it is not.\n                function startViewportDebug(vv) {\n                    let on = false;\n                    try { on = new URLSearchParams(window.location.search).get('vvdebug') === '1'; } catch (_) { return null; }\n                    if (!on) return null;\n                    const box = document.createElement('div');\n                    box.setAttribute('data-sb-vvdebug', '');\n                    box.style.cssText = 'position:fixed;top:0;left:0;z-index:2147483647;max-width:100vw;padding:6px 8px;' +\n                        'font:600 10.5px/1.45 ui-monospace,SFMono-Regular,Menlo,monospace;white-space:pre;' +\n                        'color:#fff;background:#000;pointer-events:none;';\n                    document.body.appendChild(box);\n                    const src = (() => {\n                        const el = document.querySelector('script[src*=\"dist/app.js\"]');\n                        return el ? String(el.getAttribute('src') || '').split('?v=')[1] || '?' : '?';\n                    })();\n                    const paint = () => {\n                        const shell = document.querySelector('.sb-app-shell');\n                        const cs = shell ? getComputedStyle(shell) : null;\n                        const r = shell ? shell.getBoundingClientRect() : null;\n                        const root = getComputedStyle(document.documentElement);\n                        box.textContent = [\n                            'build ' + src,\n                            'innerH ' + window.innerHeight + '  scrollY ' + Math.round(window.scrollY),\n                            'vv h ' + (vv ? Math.round(vv.height) : '\u2014') + '  top ' + (vv ? Math.round(vv.offsetTop) : '\u2014') + '  scale ' + (vv ? vv.scale.toFixed(2) : '\u2014'),\n                            'var vh ' + root.getPropertyValue('--sb-vh').trim() + '  vvtop ' + root.getPropertyValue('--sb-vv-top').trim(),\n                            'shell ' + (shell ? (cs.position + ' h' + Math.round(r.height) + ' y' + Math.round(r.top)) : 'ABSENT')\n                        ].join('\\n');\n                        // The read-out must stay readable even when the thing it is\n                        // reporting on has been moved off the screen.\n                        box.style.transform = 'translate3d(0,' + (vv ? Math.round(vv.offsetTop) : 0) + 'px,0)';\n                    };\n                    paint();\n                    const iv = setInterval(paint, 200);\n                    return () => { clearInterval(iv); box.remove(); };\n                }\n\n                const createScrollToBottomFunction = (chatMessagesRef) => {\n                    return () => {\n                        if (chatMessagesRef && chatMessagesRef.current) {\n                            const scrollAttempt = () => {\n                                if (chatMessagesRef.current) {\n                                    chatMessagesRef.current.scrollTo({\n                                        top: chatMessagesRef.current.scrollHeight,\n                                        behavior: scrollBehavior()\n                                    });\n                                }\n                            };\n                            scrollAttempt();\n        \n                            setTimeout(scrollAttempt, 50);\n                            setTimeout(scrollAttempt, 150);\n                            setTimeout(scrollAttempt, 300);\n        \n                            requestAnimationFrame(() => {\n                                setTimeout(scrollAttempt, 100);\n                            });\n                        }\n                    };\n                };\n\n\n            // Runs the real-time cryptographic verification and shows a detailed report\n            // modal (same behaviour the shared header used to provide on click).\n            const runSecurityReport = async (webrtcManager) => {\n                let securityData = null;\n                try {\n                    if (webrtcManager && window.EnhancedSecureCryptoUtils) {\n                        securityData = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(webrtcManager);\n                    }\n                } catch (e) { /* ignore */ }\n                if (!securityData) {\n                    alert('Security verification in progress\u2026\\nPlease wait for real-time cryptographic verification to complete.');\n                    return;\n                }\n\n                // Security verification report \u2014 translated from the Claude Design\n                // component (Security Verification.dc.html): a gauge + live test grid\n                // driven by the real cryptographic results in securityData.\n                const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n                const esc = (s) => String(s).replace(/[&<>\"]/g, (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '\"': '&quot;' }[c]));\n                // Two forms again: `accent` is read as text, `accentSolid` is drawn \u2014 the\n                // progress ring, the badge fill, the icon strokes. Only the first darkens\n                // in the light theme.\n                const accentSolid = securityData.color === 'orange' ? 'var(--sb-orange-solid)'\n                    : securityData.color === 'yellow' ? 'var(--sb-yellow-solid)'\n                    : securityData.color === 'red' ? 'var(--sb-red-solid)'\n                    : 'var(--sb-green-solid)';\n                const accent = securityData.color === 'orange' ? 'var(--sb-orange)'\n                    : securityData.color === 'yellow' ? 'var(--sb-yellow)'\n                    : securityData.color === 'red' ? 'var(--sb-red)'\n                    : 'var(--sb-green)';\n                const accentRGB = securityData.color === 'orange' ? 'var(--sb-orange-rgb)'\n                    : securityData.color === 'yellow' ? 'var(--sb-yellow-rgb)'\n                    : securityData.color === 'red' ? 'var(--sb-red-rgb)'\n                    : 'var(--sb-green-rgb)';\n                const score = Math.max(0, Math.min(100, Math.round(securityData.score || 0)));\n                const circ = 2 * Math.PI * 56;\n                const dashArray = `${(circ * Math.min(1, score / 100)).toFixed(1)} ${circ.toFixed(1)}`;\n                const level = String(securityData.level || 'SECURE').toUpperCase();\n                const isReal = securityData.isRealData !== false;\n                const entries = securityData.verificationResults ? Object.entries(securityData.verificationResults) : [];\n                const passedCount = Number.isFinite(securityData.passedChecks) ? securityData.passedChecks : entries.filter(([, r]) => r && r.passed).length;\n                const totalCount = Number.isFinite(securityData.totalChecks) ? securityData.totalChecks : entries.length;\n                const verifiedAt = new Date(securityData.timestamp || Date.now()).toLocaleTimeString([], { hour: '2-digit', minute: '2-digit', second: '2-digit', hour12: false });\n\n                // A written name for each check, keyed by its verify* function. Falls back to\n                // the derived title for a check that has not been given one yet.\n                const testTitle = (k) => {\n                    const named = t(`secTest.${k}`);\n                    return named === `secTest.${k}` ? pretty(k) : named;\n                };\n                const pretty = (k) => {\n                    let s = String(k).replace(/^verify/i, '').replace(/([a-z0-9])([A-Z])/g, '$1 $2').replace(/([A-Z]+)([A-Z][a-z])/g, '$1 $2').trim();\n                    s = s.replace(/\\b(ecdh|ecdsa|aes|gcm|hmac|pfs|sas|mitm|asn|dtls|hkdf|spki|oid|p384)\\b/gi, (m) => m.toUpperCase());\n                    return s.charAt(0).toUpperCase() + s.slice(1);\n                };\n\n                const checkIcon = `<svg width=\"17\" height=\"17\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M5 13l4 4 10-11\"/></svg>`;\n                const xIcon = `<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-red-solid)\" stroke-width=\"2.4\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M18 6L6 18M6 6l12 12\"/></svg>`;\n                const testsHTML = entries.map(([k, r], i) => {\n                    const passed = !!(r && r.passed);\n                    const raw = (r && r.details) || (passed ? t('sec.testPassed') : t('sec.testFailed'));\n                    // The crypto layer reports in English; translate by the sentence itself,\n                    // which leaves anything not yet translated readable rather than blank.\n                    const looked = t(`secDetail.${raw}`);\n                    const desc = looked === `secDetail.${raw}` ? raw : looked;\n                    const bg = passed ? 'var(--sb-surface)' : 'var(--sb-bg)';\n                    const border = passed ? 'rgba(var(--sb-green-rgb), 0.16)' : 'rgba(var(--sb-red-rgb), 0.18)';\n                    const iconBg = passed ? 'rgba(var(--sb-green-rgb), 0.12)' : 'rgba(var(--sb-red-rgb), 0.1)';\n                    const iconBorder = passed ? 'rgba(var(--sb-green-rgb), 0.26)' : 'rgba(var(--sb-red-rgb), 0.24)';\n                    const titleColor = passed ? 'var(--sb-text-1)' : 'var(--sb-text-4)';\n                    return `<div style=\"display:flex; align-items:flex-start; gap:13px; padding:16px 18px; border-radius:14px; background:${bg}; border:1px solid ${border}; animation:svIn .3s cubic-bezier(.2,.7,.3,1) both; animation-delay:${(i * 0.04).toFixed(2)}s;\">\n                        <span style=\"flex:none; width:34px; height:34px; border-radius:9px; display:grid; place-items:center; background:${iconBg}; border:1px solid ${iconBorder};\">${passed ? checkIcon : xIcon}</span>\n                        <div style=\"flex:1; min-width:0;\">\n                            <div style=\"font-size:14.5px; font-weight:700; letter-spacing:-0.2px; color:${titleColor}; margin-bottom:3px;\">${esc(testTitle(k))}</div>\n                            <div style=\"font-family:${MONO}; font-size:11.5px; line-height:1.45; color:var(--sb-text-7);\">${esc(desc)}</div>\n                        </div>\n                    </div>`;\n                }).join('');\n\n                const modal = document.createElement('div');\n                modal.id = 'sb-security-report';\n                modal.style.cssText = \"position:fixed; inset:0; z-index:10000; display:flex; align-items:center; justify-content:center; padding:24px; background:rgba(var(--sb-scrim-rgb), 0.62); backdrop-filter:blur(4px); -webkit-backdrop-filter:blur(4px); font-family:'Manrope',system-ui,-apple-system,sans-serif; overflow:auto;\";\n                modal.innerHTML = `\n                  <style>@keyframes svIn{from{opacity:0;transform:translateY(8px)}to{opacity:1;transform:translateY(0)}}@keyframes svPulse{0%,100%{opacity:1}50%{opacity:.4}}</style>\n                  <div style=\"position:relative; max-width:960px; width:100%; border-radius:20px; background:radial-gradient(1100px 640px at 50% -6%, rgba(${accentRGB},0.05), transparent 62%), var(--sb-bg); border:1px solid rgba(var(--sb-ink), 0.08); color:var(--sb-text-2); padding:30px; box-shadow:0 30px 70px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k))); animation:svIn .3s cubic-bezier(.2,.7,.3,1); max-height:calc(100vh - 48px); overflow:auto;\">\n                    <button class=\"sv-close\" type=\"button\" title=\"${t('chat.close')}\" style=\"position:absolute; top:16px; inset-inline-end:16px; width:32px; height:32px; border-radius:9px; display:grid; place-items:center; border:1px solid rgba(var(--sb-ink), 0.08); background:rgba(var(--sb-ink), 0.02); color:var(--sb-text-7); cursor:pointer; z-index:2;\">\n                      <svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.1\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"pointer-events:none;\"><path d=\"M6 6l12 12M18 6L6 18\"/></svg>\n                    </button>\n                    <div style=\"position:relative; overflow:hidden; border-radius:18px; background:var(--sb-surface); border:1px solid rgba(var(--sb-ink), 0.07); padding:28px 30px; display:flex; align-items:center; gap:30px; flex-wrap:wrap; margin-bottom:20px;\">\n                      <div style=\"position:absolute; top:0; left:0; right:0; height:1px; background:linear-gradient(90deg, transparent, rgba(${accentRGB},0.6), transparent);\"></div>\n                      <div style=\"position:relative; flex:none; width:128px; height:128px;\">\n                        <svg width=\"128\" height=\"128\" viewBox=\"0 0 128 128\" style=\"transform:rotate(-90deg);\">\n                          <circle cx=\"64\" cy=\"64\" r=\"56\" fill=\"none\" stroke=\"rgba(var(--sb-ink), 0.06)\" stroke-width=\"9\"/>\n                          <circle cx=\"64\" cy=\"64\" r=\"56\" fill=\"none\" stroke=\"${accentSolid}\" stroke-width=\"9\" stroke-linecap=\"round\" stroke-dasharray=\"${dashArray}\"/>\n                        </svg>\n                        <div style=\"position:absolute; inset:0; display:flex; flex-direction:column; align-items:center; justify-content:center;\">\n                          <span style=\"font-size:30px; font-weight:800; letter-spacing:-1px; color:var(--sb-text-1); line-height:1;\">${score}</span>\n                          <span style=\"font-family:${MONO}; font-size:10px; font-weight:600; color:var(--sb-text-9); text-transform:uppercase; letter-spacing:1px; margin-top:4px;\">/ 100 pts</span>\n                        </div>\n                      </div>\n                      <div style=\"flex:1; min-width:240px;\">\n                        <div style=\"font-family:${MONO}; font-size:11px; font-weight:600; color:var(--sb-text-9); text-transform:uppercase; letter-spacing:1.6px; margin-bottom:10px;\">${t('report.title')}</div>\n                        <div style=\"display:flex; align-items:center; gap:12px; margin-bottom:14px; flex-wrap:wrap;\">\n                          <h2 style=\"margin:0; font-size:26px; font-weight:800; letter-spacing:-0.7px; color:var(--sb-text-1);\">Security level: ${esc(level)}</h2>\n                          <span style=\"display:inline-flex; align-items:center; gap:8px; padding:6px 12px; border-radius:9px; background:rgba(${accentRGB},0.12); border:1px solid rgba(${accentRGB},0.3); font-family:${MONO}; font-size:11px; font-weight:700; color:${accent}; text-transform:uppercase; letter-spacing:0.6px;\"><span style=\"width:7px; height:7px; border-radius:50%; background:${accentSolid}; animation:svPulse 2s ease-in-out infinite;\"></span>${t('report.active')}</span>\n                        </div>\n                        <div style=\"display:flex; gap:28px; flex-wrap:wrap;\">\n                          <div><div style=\"font-family:${MONO}; font-size:10px; font-weight:600; color:var(--sb-text-faint); text-transform:uppercase; letter-spacing:1px; margin-bottom:4px;\">${t('report.testsPassed')}</div><div style=\"font-size:15px; font-weight:700; color:var(--sb-text-2);\"><span style=\"color:${accent};\">${passedCount}</span> / ${totalCount}</div></div>\n                          <div><div style=\"font-family:${MONO}; font-size:10px; font-weight:600; color:var(--sb-text-faint); text-transform:uppercase; letter-spacing:1px; margin-bottom:4px;\">${t('report.verifiedAt')}</div><div style=\"font-family:${MONO}; font-size:15px; font-weight:600; color:var(--sb-text-2);\">${esc(verifiedAt)}</div></div>\n                          <div><div style=\"font-family:${MONO}; font-size:10px; font-weight:600; color:var(--sb-text-faint); text-transform:uppercase; letter-spacing:1px; margin-bottom:4px;\">${t('report.source')}</div><div style=\"font-size:15px; font-weight:600; color:var(--sb-text-2);\">${isReal ? t('sec.realTests') : t('sec.simulatedData')}</div></div>\n                        </div>\n                      </div>\n                      <button class=\"sv-rerun\" type=\"button\" style=\"flex:none; display:inline-flex; align-items:center; gap:9px; padding:12px 18px; border-radius:11px; border:1px solid rgba(var(--sb-ink), 0.1); background:rgba(var(--sb-ink), 0.025); color:var(--sb-text-4); font-family:'Manrope',sans-serif; font-size:14px; font-weight:700; cursor:pointer; transition:all .2s;\">\n                        <svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"pointer-events:none;\"><path d=\"M21 12a9 9 0 1 1-3-6.7L21 8\"/><path d=\"M21 3v5h-5\"/></svg>\n                        Re-run\n                      </button>\n                    </div>\n                    <div style=\"display:grid; grid-template-columns:repeat(auto-fit, minmax(248px, 1fr)); gap:12px;\">${testsHTML}</div>\n                    <div style=\"display:flex; align-items:center; gap:12px; margin-top:18px; padding:16px 20px; border-radius:14px; background:rgba(${accentRGB},0.06); border:1px solid rgba(${accentRGB},0.18);\">\n                      <svg width=\"20\" height=\"20\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"${accentSolid}\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\" style=\"flex:none;\"><path d=\"M12 3l8 4v5c0 4.5-3.2 7.8-8 9-4.8-1.2-8-4.5-8-9V7l8-4z\"/><path d=\"M9.2 12.2l2 2 3.6-3.8\"/></svg>\n                      <span style=\"font-size:14px; font-weight:600; color:var(--sb-text-2);\">${isReal ? t('sec.realTimeNote') : t('sec.simulatedWarning')}</span>\n                    </div>\n                  </div>`;\n\n                const onKey = (e) => { if (e.key === 'Escape') close(); };\n                const close = () => { if (modal.parentNode) modal.remove(); document.removeEventListener('keydown', onKey); };\n                modal.querySelector('.sv-close').addEventListener('click', close);\n                modal.addEventListener('click', (e) => { if (e.target === modal) close(); });\n                document.addEventListener('keydown', onKey);\n                const rerun = modal.querySelector('.sv-rerun');\n                rerun.addEventListener('mouseenter', () => { rerun.style.borderColor = 'rgba(var(--sb-orange-rgb), 0.45)'; rerun.style.color = 'var(--sb-orange)'; });\n                rerun.addEventListener('mouseleave', () => { rerun.style.borderColor = 'rgba(var(--sb-ink), 0.1)'; rerun.style.color = 'var(--sb-text-4)'; });\n                rerun.addEventListener('click', () => { close(); runSecurityReport(webrtcManager); });\n                document.body.appendChild(modal);\n            };\n\n            // In-chat header matching the SecureBit Chat design: logo + version,\n            // a \"Secure\" pill (click = run the security verification report; the chevron\n            // toggles the network/crypto detail panel), a connection indicator, Disconnect.\n            const SecureBitChatHeader = ({ status, onDisconnect, webrtcManager, title, isOffline, peerPresence, onRenameTitle }) => {\n                const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n                const [showNetwork, setShowNetwork] = React.useState(false);\n                const [sec, setSec] = React.useState(null);\n                const [editingName, setEditingName] = React.useState(false);\n                const [nameDraft, setNameDraft] = React.useState('');\n\n                React.useEffect(() => {\n                    let alive = true;\n                    const fetchSec = async () => {\n                        try {\n                            if (!webrtcManager) return;\n                            let data = null;\n                            if (typeof webrtcManager.getRealSecurityLevel === 'function') data = await webrtcManager.getRealSecurityLevel();\n                            else if (typeof webrtcManager.calculateAndReportSecurityLevel === 'function') data = await webrtcManager.calculateAndReportSecurityLevel();\n                            else if (window.EnhancedSecureCryptoUtils) data = await window.EnhancedSecureCryptoUtils.calculateSecurityLevel(webrtcManager);\n                            if (alive && data && data.isRealData !== false) setSec(data);\n                        } catch (e) { /* ignore */ }\n                    };\n                    fetchSec();\n                    const onCalc = (e) => { if (alive && e.detail && e.detail.securityData) setSec(e.detail.securityData); };\n                    document.addEventListener('real-security-calculated', onCalc);\n                    const iv = setInterval(fetchSec, 15000);\n                    return () => { alive = false; clearInterval(iv); document.removeEventListener('real-security-calculated', onCalc); };\n                }, [webrtcManager]);\n\n                // Offline (our device lost connectivity) takes precedence over the P2P state \u2014\n                // the data channel can stay \"open\" after the network drops, so without this the\n                // header would keep saying \"Connected\" while the user is actually offline.\n                const onlineConnected = status === 'connected' || status === 'verified';\n                const dropped = status === 'disconnected' || status === 'peer_disconnected';\n                const connected = onlineConnected && !isOffline;\n                // Dots are marks: the brand accents, not the text-safe ones that darken on white.\n                const connDot = (isOffline || dropped) ? 'var(--sb-red-solid)' : (onlineConnected ? 'var(--sb-green-solid)' : 'var(--sb-yellow-solid)');\n                const connLabel = isOffline\n                    ? t('chat.offline')\n                    : (onlineConnected ? t('status.connected')\n                        : (status === 'peer_disconnected' ? t('status.peerDisconnected')\n                            : (status === 'disconnected' ? t('chat.disconnected') : t('status.connecting'))));\n                const connGlow = (isOffline || dropped) ? '0 0 0 3px rgba(var(--sb-red-rgb), 0.16)' : (onlineConnected ? '0 0 0 3px rgba(var(--sb-green-rgb), 0.16)' : '0 0 0 3px rgba(var(--sb-yellow-rgb), 0.16)');\n                // The avatar dot + subtitle reflect the PEER's advertised availability while connected.\n                const peerDot = (onlineConnected && !isOffline) ? (PRESENCE_DOT[peerPresence] || 'var(--sb-green-solid)') : connDot;\n                const peerPresenceWord = (onlineConnected && !isOffline && peerPresence) ? (PRESENCE_WORD[peerPresence] || null) : null;\n                const startRename = () => { setNameDraft(title || ''); setEditingName(true); };\n                const commitRename = () => { if (typeof onRenameTitle === 'function') onRenameTitle(nameDraft); setEditingName(false); };\n                const renameKey = (e) => { if (e.key === 'Enter') { e.preventDefault(); commitRename(); } else if (e.key === 'Escape') { setEditingName(false); } };\n                const passed = sec && Number.isFinite(sec.passedChecks) ? sec.passedChecks : null;\n                const total = sec && Number.isFinite(sec.totalChecks) ? sec.totalChecks : null;\n                // The security level arrives from the WebRTC layer as an identifier\n                // ('MAXIMUM', 'INITIALIZING'). Translate it where it is shown; anything\n                // without a translation falls through as-is rather than vanishing.\n                const secLevelLabel = (lvl) => {\n                    if (!lvl) return lvl;\n                    const named = t(`secLevel.${lvl}`);\n                    return named === `secLevel.${lvl}` ? lvl : named;\n                };\n                const scoreLabel = (passed != null && total) ? (passed + '/' + total) : (sec ? (sec.score + '%') : '\u2014');\n                const accent = sec\n                    ? (sec.color === 'green' ? 'var(--sb-green)' : sec.color === 'orange' ? 'var(--sb-orange)' : sec.color === 'yellow' ? 'var(--sb-yellow)' : 'var(--sb-red)')\n                    : 'var(--sb-green)';\n\n                const secBtn = React.createElement('div', {\n                    key: 'sec', title: t('sas.runVerification'),\n                    onClick: () => runSecurityReport(webrtcManager),\n                    className: 'sb-secpill',\n                    style: { display: 'flex', alignItems: 'center', gap: '9px', padding: '7px 13px', borderRadius: '9px', border: '1px solid ' + (showNetwork ? 'rgba(var(--sb-ink), 0.16)' : 'rgba(var(--sb-ink), 0.07)'), background: showNetwork ? 'rgba(var(--sb-ink), 0.05)' : 'rgba(var(--sb-ink), 0.02)', cursor: 'pointer', fontFamily: 'inherit', transition: 'all .15s' }\n                }, [\n                    React.createElement('i', { key: 'i', className: 'fas fa-shield-halved', style: { color: accent, fontSize: '13px' } }),\n                    React.createElement('span', { key: 'l', className: 'sb-sec-label', style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-2)' } }, sec ? (secLevelLabel(sec.level) || t('chatHdr.secure')) : t('chatHdr.secure')),\n                    React.createElement('span', { key: 'd', className: 'sb-sec-div', style: { width: '1px', height: '13px', background: 'rgba(var(--sb-ink), 0.12)' } }),\n                    React.createElement('span', { key: 's', className: 'sb-sec-score', style: { fontFamily: MONO, fontSize: '11.5px', fontWeight: 500, color: 'var(--sb-text-7)' } }, scoreLabel),\n                    React.createElement('button', {\n                        key: 'c', type: 'button', title: t('sec.panelTitle'),\n                        onClick: (e) => { e.stopPropagation(); setShowNetwork(v => !v); },\n                        style: { background: 'none', border: 'none', padding: 0, margin: 0, cursor: 'pointer', display: 'grid', placeItems: 'center' }\n                    }, React.createElement('i', { className: 'fas fa-chevron-down', style: { color: 'var(--sb-text-9)', fontSize: '11px', transform: showNetwork ? 'rotate(180deg)' : 'rotate(0deg)', transition: 'transform .2s' } }))\n                ]);\n\n                const headerResponsiveCss = React.createElement('style', { key: 'hdr-css', dangerouslySetInnerHTML: { __html:\n                    // Encrypted call buttons \u2014 green hover per the design.\n                    '.sb-call-btn:not(.sb-call-off):hover{border-color:rgba(var(--sb-green-rgb), 0.45) !important;color:var(--sb-green) !important;background:rgba(var(--sb-green-rgb), 0.07) !important;}' +\n                    // Mobile: leave room for the drawer hamburger and shed non-essential header\n                    // chrome so avatar + name + status + call/Disconnect fit a narrow screen.\n                    '@media (max-width:768px){' +\n                    '.sb-chat-header{padding-inline-start:58px !important;gap:8px !important;}' +\n                    // Remove the security/verification pill on mobile (per request) \u2014 the\n                    // full report is still available from the desktop header.\n                    '.sb-chat-header .sb-secpill{display:none !important;}' +\n                    '.sb-chat-header .sb-conn-text{display:none !important;}' +\n                    '.sb-chat-header .sb-conn{padding:9px !important;}' +\n                    '.sb-chat-header .sb-hdr-sub{display:none !important;}' +\n                    // Disconnect: compact icon-only square, red-tinted, matching the call buttons.\n                    '.sb-chat-header .sb-disconnect{width:40px !important;height:40px !important;padding:0 !important;gap:0 !important;justify-content:center !important;border-radius:9px !important;color:var(--sb-red) !important;border-color:rgba(var(--sb-red-rgb), 0.28) !important;}' +\n                    // The label has to go wherever the button becomes a square. Its own\n                    // rule (.sb-hide-sm, components.css) stops at 560px, so between there\n                    // and 768 the word \"Disconnect\" was still inside a 40px box, shouldering\n                    // the icon off-centre \u2014 the button read as crooked rather than icon-only.\n                    '.sb-chat-header .sb-disconnect .sb-hide-sm{display:none !important;}' +\n                    '}' +\n                    // Composer mode chips: one horizontally-scrollable row instead of wrapping\n                    // to two ugly rows on narrow screens.\n                    '@media (max-width:600px){' +\n                    '.sb-chips{flex-wrap:nowrap !important;justify-content:flex-start !important;overflow-x:auto;-webkit-overflow-scrolling:touch;scrollbar-width:none;}' +\n                    '.sb-chips::-webkit-scrollbar{display:none;}' +\n                    '.sb-chips>*{flex:0 0 auto !important;}' +\n                    '.sb-chips .sb-chips-right{flex-wrap:nowrap !important;}' +\n                    '.sb-chips .sb-chip{white-space:nowrap;}' +\n                    '}' +\n                    '@media (max-width:480px){.sb-chat-header{padding-inline-end:12px !important;}}'\n                } });\n                const header = React.createElement('header', {\n                    // --sb-safe-top is the iOS status-bar strip the installed web view draws\n                    // under (0 in a browser tab). It is added to BOTH the padding and the\n                    // height so the 64px of header content is untouched and only the\n                    // translucent bar grows upward to meet the top edge of the screen.\n                    key: 'hdr', className: 'sb-chat-header', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: '24px', padding: 'var(--sb-safe-top, 0px) 20px var(--sb-bar-extra, 0px)', minHeight: 'calc(var(--sb-bar-h, 64px) + var(--sb-safe-top, 0px) + var(--sb-bar-extra, 0px))', boxSizing: 'border-box', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(var(--sb-bg-rgb), 0.72)', backdropFilter: 'blur(14px)', WebkitBackdropFilter: 'blur(14px)' }\n                }, [\n                    headerResponsiveCss,\n                    // The SecureBit brand/logo lives in the left rail; this header identifies the\n                    // ACTIVE conversation \u2014 avatar monogram + local label + connection status.\n                    React.createElement('div', { key: 'left', style: { display: 'flex', alignItems: 'center', gap: '12px', minWidth: 0 } }, [\n                        React.createElement('div', { key: 'avatar', style: { position: 'relative', flex: 'none', width: '36px', height: '36px', borderRadius: '10px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-ink), 0.05)', border: '1px solid rgba(var(--sb-ink), 0.09)', fontSize: '13px', fontWeight: 700, letterSpacing: '-0.3px', color: 'var(--sb-text-2)' } }, [\n                            monoInitials(title || t('chatHdr.chat')),\n                            React.createElement('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: peerDot, border: '2px solid var(--sb-bg)' } })\n                        ]),\n                        editingName\n                            ? React.createElement('div', { key: 'edit', style: { display: 'flex', flexDirection: 'column', gap: '4px', minWidth: 0 } }, [\n                                React.createElement('div', { key: 'row', style: { display: 'flex', alignItems: 'center', gap: '6px' } }, [\n                                    React.createElement('input', { key: 'in', autoFocus: true, value: nameDraft, maxLength: 32, placeholder: t('chat.nameThis'), onChange: (e) => setNameDraft(e.target.value), onKeyDown: renameKey, onBlur: commitRename, style: { width: '210px', padding: '5px 10px', borderRadius: '8px', border: '1px solid rgba(var(--sb-orange-rgb), 0.55)', background: 'var(--sb-bg)', color: 'var(--sb-text-1)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, outline: 'none' } }),\n                                    React.createElement('button', { key: 'ok', onMouseDown: (e) => e.preventDefault(), onClick: commitRename, title: t('chatHdr.save'), style: { flex: 'none', width: '28px', height: '28px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', cursor: 'pointer' } }, React.createElement('i', { className: 'fas fa-check', style: { fontSize: '12px' } }))\n                                ]),\n                                React.createElement('div', { key: 'hint', style: { fontSize: '11px', color: 'var(--sb-text-faint)' } }, t('chat.localLabel'))\n                            ])\n                            : React.createElement('div', { key: 'txt', style: { lineHeight: 1.2, minWidth: 0 } }, [\n                                React.createElement('div', { key: 'r1', style: { display: 'flex', alignItems: 'center', gap: '7px' } }, [\n                                    React.createElement('span', { key: 'n', style: { fontSize: '15px', fontWeight: 800, letterSpacing: '-0.3px', color: 'var(--sb-text-1)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, title || t('chat.secureChat')),\n                                    React.createElement('button', { key: 'edit', className: 'sb-rename-btn', onClick: startRename, title: t('chat.rename'), style: { flex: 'none', width: '24px', height: '24px', borderRadius: '7px', display: 'grid', placeItems: 'center', border: 'none', background: 'transparent', color: 'var(--sb-text-faint)', cursor: 'pointer' } }, React.createElement('i', { className: 'fas fa-pen', style: { fontSize: '11px' } }))\n                                ]),\n                                React.createElement('div', { key: 'r2', className: 'sb-hdr-sub', style: { fontSize: '11px', color: 'var(--sb-text-9)', fontWeight: 500, whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, isOffline ? t('chat.noNetwork') : (status === 'reconnecting' ? t('flow.restoring') : (peerPresenceWord || (onlineConnected ? t('chatHdr.p2pSub') : (status === 'peer_disconnected' ? t('status.peerDisconnected') : (status === 'disconnected' ? t('chat.disconnected') : t('status.connecting')))))))\n                            ])\n                    ]),\n                    secBtn,\n                    React.createElement('div', { key: 'right', className: 'sb-hdr-right', style: { display: 'flex', alignItems: 'center', gap: '9px' } }, [\n                        // Encrypted call buttons \u2014 enabled only once the session is\n                        // connected AND SAS-verified (the manager enforces the same\n                        // gate; this just reflects it). Media rides the verified\n                        // DTLS-SRTP transport, so calls inherit the E2E encryption.\n                        ...((() => {\n                            const callReady = connected && webrtcManager && webrtcManager.isVerified === true;\n                            const startCall = (video) => {\n                                if (!callReady || !webrtcManager) return;\n                                try { const p = webrtcManager.startCall(video); if (p && p.catch) p.catch(() => {}); }\n                                catch (_) {}\n                            };\n                            // Exact design spec: 40\u00D740, 9px radius, SVG phone/video icons,\n                            // green hover (via the .sb-call-btn CSS rule below).\n                            const callBtnStyle = {\n                                width: '40px', height: '40px', borderRadius: '9px', display: 'grid', placeItems: 'center',\n                                border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'rgba(var(--sb-ink), 0.02)',\n                                color: callReady ? 'var(--sb-text-6)' : 'var(--sb-surface-5)', cursor: callReady ? 'pointer' : 'not-allowed', transition: 'all .15s'\n                            };\n                            const PHONE_SVG = '<svg width=\"17\" height=\"17\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M22 16.92v3a2 2 0 0 1-2.18 2 19.8 19.8 0 0 1-8.63-3.07 19.5 19.5 0 0 1-6-6A19.8 19.8 0 0 1 2.12 4.18 2 2 0 0 1 4.11 2h3a2 2 0 0 1 2 1.72c.13.96.36 1.9.7 2.81a2 2 0 0 1-.45 2.11L8.09 9.91a16 16 0 0 0 6 6l1.27-1.27a2 2 0 0 1 2.11-.45c.91.34 1.85.57 2.81.7A2 2 0 0 1 22 16.92z\"/></svg>';\n                            const VIDEO_SVG = '<svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M23 7l-7 5 7 5V7z\"/><rect x=\"1\" y=\"5\" width=\"15\" height=\"14\" rx=\"2.5\"/></svg>';\n                            return [\n                                React.createElement('button', { key: 'call-audio', className: callReady ? 'sb-call-btn' : 'sb-call-btn sb-call-off', disabled: !callReady, onClick: () => startCall(false), title: callReady ? t('chat.startVoiceCall') : t('chat.verifyForCalls'), style: callBtnStyle, dangerouslySetInnerHTML: { __html: PHONE_SVG } }),\n                                React.createElement('button', { key: 'call-video', className: callReady ? 'sb-call-btn' : 'sb-call-btn sb-call-off', disabled: !callReady, onClick: () => startCall(true), title: callReady ? t('chat.startVideoCall') : t('chat.verifyForCalls'), style: callBtnStyle, dangerouslySetInnerHTML: { __html: VIDEO_SVG } })\n                            ];\n                        })()),\n                        React.createElement('div', { key: 'conn', className: 'sb-conn', style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '8px 13px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'rgba(var(--sb-ink), 0.02)' } }, [\n                            React.createElement('span', { key: 'dot', style: { flex: 'none', width: '7px', height: '7px', borderRadius: '50%', background: connDot, boxShadow: connGlow } }),\n                            React.createElement('span', { key: 't', className: 'sb-conn-text', style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-4)' } }, connLabel)\n                        ]),\n                        React.createElement('button', { key: 'dc', onClick: onDisconnect, className: 'sb-disconnect', style: { display: 'flex', alignItems: 'center', gap: '7px', padding: '8px 14px', borderRadius: '9px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'transparent', color: 'var(--sb-text-6)', fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: 'pointer', transition: 'all .15s' } }, [\n                            React.createElement('i', { key: 'i', className: 'fas fa-power-off', style: { fontSize: '12px' } }),\n                            React.createElement('span', { key: 't', className: 'sb-hide-sm' }, t('hdr.disconnect'))\n                        ])\n                    ])\n                ]);\n\n                const netPanel = showNetwork && React.createElement('div', {\n                    key: 'net', style: { flex: 'none', padding: '13px 20px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(var(--sb-bg-rgb), 0.72)', backdropFilter: 'blur(14px)', WebkitBackdropFilter: 'blur(14px)' }\n                }, React.createElement('div', { style: { maxWidth: '1000px', margin: '0 auto', display: 'grid', gridTemplateColumns: 'repeat(auto-fit,minmax(140px,1fr))', gap: '14px', fontFamily: MONO } },\n                    [\n                        [t('sec.transport'), 'WebRTC \u00B7 DTLS'],\n                        [t('sec.cipher'), 'AES-256-GCM'],\n                        [t('sec.keyExchange'), 'ECDH P-384'],\n                        [t('sec.security'), scoreLabel + (sec ? (' \u00B7 ' + sec.score + '%') : '')]\n                    ].map(([k, v], i) => React.createElement('div', { key: 'nf' + i }, [\n                        React.createElement('div', { key: 'k', style: { fontSize: '10px', color: 'var(--sb-text-9)', textTransform: 'uppercase', letterSpacing: '0.6px', marginBottom: '4px' } }, k),\n                        React.createElement('div', { key: 'v', style: { fontSize: '12.5px', color: i === 3 ? accent : 'var(--sb-text-4)', fontWeight: 500 } }, v)\n                    ]))\n                ));\n\n                return React.createElement('div', { style: { flex: 'none' } }, [header, netPanel]);\n            };\n\n\n               const EnhancedChatInterface = ({\n            title,\n            isOffline,\n            peerPresence,\n            onRenameTitle,\n            messages,\n            messageInput,\n            setMessageInput,\n            onSendMessage,\n            onSendVoice,\n            onDisconnect,\n            keyFingerprint,\n            isVerified,\n            chatMessagesRef,\n            scrollToBottom,\n            webrtcManager,\n            status,\n            pendingIncomingFiles = [],\n            onIncomingDecision,\n            // Secure chat extras\n            codeMode,\n            setCodeMode,\n            viewOnceMode,\n            setViewOnceMode,\n            viewOnceTtl,\n            setViewOnceTtl,\n            disappearTtl,\n            setDisappearTtl,\n            nowTick,\n            onUnsendMessage,\n            onMessageExpire\n        }) => {\n            const [showScrollButton, setShowScrollButton] = React.useState(false);\n            const [showFileTransfer, setShowFileTransfer] = React.useState(false);\n            // True only when the user opened the panel to SEND (shows the drop-zone).\n            // Incoming-file auto-open leaves this false, so the receiver sees the\n            // incoming request + receiving progress, not the \"send attachments\" UI.\n            const [fileSendMode, setFileSendMode] = React.useState(false);\n            const [showTimer, setShowTimer] = React.useState(false);\n            const [showOnce, setShowOnce] = React.useState(false);\n            const [showHandshake, setShowHandshake] = React.useState(false);\n            const [isRecording, setIsRecording] = React.useState(false);\n            // Desktop shows mic + send side by side; mobile toggles between them.\n            const [isDesktop, setIsDesktop] = React.useState(() => typeof window !== 'undefined' && !!window.matchMedia && window.matchMedia('(min-width:1024px)').matches);\n            React.useEffect(() => {\n                if (typeof window === 'undefined' || !window.matchMedia) return;\n                const mq = window.matchMedia('(min-width:1024px)');\n                const onCh = () => setIsDesktop(mq.matches);\n                try { mq.addEventListener('change', onCh); } catch (_) { mq.addListener(onCh); }\n                return () => { try { mq.removeEventListener('change', onCh); } catch (_) { mq.removeListener(onCh); } };\n            }, []);\n            const taRef = React.useRef(null);\n\n            // Auto-grow the message textarea (and reset its height after sending).\n            React.useEffect(() => {\n                const el = taRef.current;\n                if (!el || codeMode) return;\n                el.style.height = 'auto';\n                el.style.height = Math.min(el.scrollHeight, 240) + 'px';\n            }, [messageInput, codeMode]);\n\n            // Auto-open the file transfer panel when an incoming request arrives\n            React.useEffect(() => {\n                if (pendingIncomingFiles.length > 0) {\n                    setShowFileTransfer(true);\n                }\n            }, [pendingIncomingFiles.length]);\n\n            // Whether the conversation was sitting at its bottom, remembered from the\n            // last scroll. It has to be remembered rather than measured on demand:\n            // by the time the keyboard has opened the list is already shorter, and\n            // \"how far from the bottom\" then reads as the height of the keyboard for\n            // a view that had not moved at all.\n            const atBottomRef = React.useRef(true);\n\n            // Follow the conversation when the visual viewport resizes \u2014 the keyboard\n            // opening or closing. The list keeps its scrollTop while its height drops\n            // by a few hundred pixels, which leaves whoever tapped the composer\n            // looking at messages from a minute ago.\n            React.useEffect(() => {\n                const vv = (typeof window !== 'undefined') ? window.visualViewport : null;\n                if (!vv) return;\n                const stick = () => {\n                    if (!atBottomRef.current) return;\n                    const el = chatMessagesRef.current;\n                    if (!el) return;\n                    el.scrollTop = el.scrollHeight;\n                };\n                // Twice: once for this frame, once after iOS has finished animating\n                // the keyboard in and settled on a final height.\n                const onResize = () => { requestAnimationFrame(stick); setTimeout(stick, 300); };\n                vv.addEventListener('resize', onResize);\n                return () => vv.removeEventListener('resize', onResize);\n            }, [chatMessagesRef]);\n\n            React.useEffect(() => {\n                if (chatMessagesRef.current && messages.length > 0) {\n                    const { scrollTop, scrollHeight, clientHeight } = chatMessagesRef.current;\n                    const isNearBottom = scrollHeight - scrollTop - clientHeight < 100;\n                    if (isNearBottom) {\n                        const smoothScroll = () => {\n                            if (chatMessagesRef.current) {\n                                chatMessagesRef.current.scrollTo({\n                                    top: chatMessagesRef.current.scrollHeight,\n                                    behavior: scrollBehavior()\n                                });\n                            }\n                        };\n                        smoothScroll();\n                        setTimeout(smoothScroll, 50);\n                        setTimeout(smoothScroll, 150);\n                    }\n                }\n            }, [messages, chatMessagesRef]);\n\n            const handleScroll = () => {\n                if (chatMessagesRef.current) {\n                    const { scrollTop, scrollHeight, clientHeight } = chatMessagesRef.current;\n                    const isNearBottom = scrollHeight - scrollTop - clientHeight < 100;\n                    atBottomRef.current = isNearBottom;\n                    setShowScrollButton(!isNearBottom);\n                }\n            };\n\n            const handleScrollToBottom = () => {\n                atBottomRef.current = true;\n                if (typeof scrollToBottom === 'function') {\n                    scrollToBottom();\n                    setShowScrollButton(false);\n                } else if (chatMessagesRef.current) {\n                    chatMessagesRef.current.scrollTo({ top: chatMessagesRef.current.scrollHeight, behavior: scrollBehavior() });\n                    setShowScrollButton(false);\n                }\n            };\n\n            const handleKeyPress = (e) => {\n                if (e.key !== 'Enter') return;\n                if (codeMode) {\n                    if (e.metaKey || e.ctrlKey) { e.preventDefault(); onSendMessage(); }\n                } else if (!e.shiftKey) {\n                    e.preventDefault();\n                    onSendMessage();\n                }\n            };\n\n            const isFileTransferReady = () => {\n                if (!webrtcManager) return false;\n                const connected = webrtcManager.isConnected ? webrtcManager.isConnected() : false;\n                const verified = webrtcManager.isVerified || false;\n                const hasDataChannel = webrtcManager.dataChannel && webrtcManager.dataChannel.readyState === 'open';\n                return connected && verified && hasDataChannel;\n            };\n\n            // ---- design tokens / helpers ----\n            const MONO = \"'JetBrains Mono', ui-monospace, SFMono-Regular, Menlo, monospace\";\n            const fmtShort = (s) => {\n                if (!s) return '';\n                if (s >= 86400 && s % 86400 === 0) return (s / 86400) + 'd';\n                if (s >= 3600 && s % 3600 === 0) return (s / 3600) + 'h';\n                if (s >= 60) return Math.round(s / 60) + 'm';\n                return s + 's';\n            };\n            const chipStyle = (active) => ({\n                display: 'flex', alignItems: 'center', gap: '6px', padding: '7px 11px', borderRadius: '8px',\n                border: '1px solid ' + (active ? 'rgba(var(--sb-ink), 0.18)' : 'rgba(var(--sb-ink), 0.07)'),\n                background: active ? 'rgba(var(--sb-ink), 0.06)' : 'transparent',\n                color: active ? '#fff' : 'var(--sb-text-6)',\n                fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600, cursor: 'pointer', transition: 'all .15s'\n            });\n            const optStyle = (sel) => ({\n                padding: '6px 12px', borderRadius: '8px',\n                border: '1px solid ' + (sel ? 'rgba(var(--sb-ink), 0.22)' : 'rgba(var(--sb-ink), 0.07)'),\n                background: sel ? 'rgba(var(--sb-ink), 0.07)' : 'transparent',\n                color: sel ? '#fff' : 'var(--sb-text-7)',\n                fontFamily: MONO, fontSize: '12px', fontWeight: 500, cursor: 'pointer', transition: 'all .14s'\n            });\n\n            const timerDefs = [\n                { label: t('msg.off'), v: 0 }, { label: '5s', v: 5 }, { label: '30s', v: 30 },\n                { label: '1m', v: 60 }, { label: '1h', v: 3600 }, { label: '24h', v: 86400 }\n            ];\n            const onceDefs = [\n                { label: t('msg.off'), v: 0 }, { label: '5s', v: 5 }, { label: '10s', v: 10 },\n                { label: '30s', v: 30 }, { label: '1m', v: 60 }\n            ];\n            const onceSelected = viewOnceMode ? viewOnceTtl : 0;\n            const pickTimer = (v) => { setDisappearTtl(v); setShowTimer(false); };\n            const pickOnce = (v) => {\n                if (v === 0) setViewOnceMode(false);\n                else { setViewOnceTtl(v); setViewOnceMode(true); }\n                setShowOnce(false);\n            };\n\n            const hasText = !!(messageInput && messageInput.trim());\n            // Voice recording is offered only over a live, verified channel with a\n            // usable mic API (it rides the same transfer path as files).\n            const canRecord = typeof onSendVoice === 'function'\n                && !isOffline\n                && isFileTransferReady()\n                && typeof navigator !== 'undefined'\n                && navigator.mediaDevices\n                && typeof navigator.mediaDevices.getUserMedia === 'function';\n\n            // System notices are surfaced inside the handshake/connection log card\n            // (matching the design) rather than as bubbles in the message flow.\n            const fmtT = (ts) => { try { return new Date(ts).toLocaleTimeString('en-GB', { hour: '2-digit', minute: '2-digit', second: '2-digit' }); } catch (e) { return ''; } };\n            // Connection log = string-only system notices (a React-element message\n            // would render as \"[object Object]\" in the log, so it's excluded).\n            const systemMessages = messages.filter((m) => m.type === 'system' && typeof m.message === 'string' && m.message.trim());\n            const chatMessages = messages.filter((m) => m.type !== 'system');\n\n            // ---- handshake / connection log card ----\n            const handshakeCard = (isVerified || systemMessages.length > 0) && React.createElement('div', {\n                key: 'handshake',\n                style: { border: '1px solid rgba(var(--sb-ink), 0.07)', borderRadius: '12px', background: 'var(--sb-surface)', overflow: 'hidden' }\n            }, [\n                React.createElement('button', {\n                    key: 'hs-btn', onClick: () => setShowHandshake(v => !v),\n                    style: { width: '100%', display: 'flex', alignItems: 'center', gap: '13px', padding: '14px 16px', background: 'transparent', border: 'none', color: 'inherit', cursor: 'pointer', textAlign: 'start', fontFamily: 'inherit' }\n                }, [\n                    React.createElement('div', { key: 'ic', style: { flex: 'none', width: '30px', height: '30px', display: 'grid', placeItems: 'center' } },\n                        React.createElement('i', { className: 'fas fa-check', style: { color: 'var(--sb-green)', fontSize: '16px' } })\n                    ),\n                    React.createElement('div', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [\n                        React.createElement('div', { key: 't1', style: { fontSize: '13.5px', fontWeight: 600, color: 'var(--sb-text-2)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, t('flow.channelEstablished')),\n                        React.createElement('div', { key: 't2', style: { fontSize: '12px', color: 'var(--sb-text-8)', marginTop: '1px', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, t('sas.verified') + (systemMessages.length ? (' \u00B7 ' + systemMessages.length + (systemMessages.length === 1 ? ' event' : ' events')) : ''))\n                    ]),\n                    React.createElement('i', { key: 'chev', className: 'fas fa-chevron-down', style: { flex: 'none', color: 'var(--sb-text-9)', fontSize: '13px', transform: showHandshake ? 'rotate(180deg)' : 'rotate(0deg)', transition: 'transform .2s' } })\n                ]),\n                showHandshake && React.createElement('div', { key: 'hs-body', style: { paddingTop: '2px', paddingBottom: '14px', paddingInlineStart: '59px', paddingInlineEnd: '16px' } }, [\n                    systemMessages.length > 0 && React.createElement('div', { key: 'steps', className: 'sb-scroll', style: { marginBottom: '12px', maxHeight: '220px', overflowY: 'auto', paddingInlineEnd: '6px' } },\n                        systemMessages.map((m, i) => React.createElement('div', { key: 's' + i, style: { display: 'flex', gap: '11px', padding: '6px 0', borderTop: i === 0 ? 'none' : '1px solid rgba(var(--sb-ink), 0.04)' } }, [\n                            React.createElement('span', { key: 'd', style: { flex: 'none', width: '5px', height: '5px', borderRadius: '50%', background: 'var(--sb-green-solid)', marginTop: '7px', opacity: 0.6 } }),\n                            React.createElement('span', { key: 't', style: { flex: 1, fontSize: '12.5px', color: 'var(--sb-text-6)', lineHeight: 1.5, wordBreak: 'break-word' } }, String(m.message || '').trim()),\n                            React.createElement('span', { key: 'tm', style: { flex: 'none', fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-faint)' } }, fmtT(m.timestamp))\n                        ]))\n                    ),\n                    keyFingerprint && React.createElement('div', { key: 'sn', style: { display: 'flex', alignItems: 'center', gap: '9px', padding: '10px 12px', borderRadius: '9px', background: 'rgba(var(--sb-ink), 0.025)', border: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-lock', style: { color: 'var(--sb-text-7)', fontSize: '12px' } }),\n                        React.createElement('span', { key: 'l', style: { fontSize: '11.5px', color: 'var(--sb-text-7)' } }, t('sas.safetyNumber')),\n                        React.createElement('span', { key: 'v', style: { fontFamily: MONO, fontSize: '12px', color: 'var(--sb-text-4)', letterSpacing: '0.8px', fontWeight: 500, wordBreak: 'break-all' } }, keyFingerprint)\n                    ])\n                ])\n            ]);\n\n            // ---- empty state ----\n            const emptyState = React.createElement('div', { key: 'empty', style: { display: 'flex', alignItems: 'center', justifyContent: 'center', flex: 1, minHeight: '40vh' } },\n                React.createElement('div', { style: { textAlign: 'center', maxWidth: '420px' } }, [\n                    React.createElement('img', { key: 'ic', src: '/logo/securebit-mark.svg', alt: 'SecureBit', style: { width: '60px', height: '60px', objectFit: 'contain', display: 'block', margin: '0 auto 16px' } }),\n                    React.createElement('h3', { key: 't', style: { fontSize: '17px', fontWeight: 700, color: 'var(--sb-text-2)', margin: '0 0 6px' } }, t('flow.channelReady')),\n                    React.createElement('p', { key: 'p', style: { fontSize: '13px', color: 'var(--sb-text-8)', margin: 0 } }, t('chat.e2eeNote'))\n                ])\n            );\n\n            // ---- messages list ----\n            const messagesArea = React.createElement('main', {\n                key: 'main',\n                ref: chatMessagesRef,\n                onScroll: handleScroll,\n                className: 'sb-scroll',\n                style: { flex: 1, overflowY: 'auto', padding: '20px 20px 22px' }\n            }, React.createElement('div', { style: { width: '100%', maxWidth: '1000px', margin: '0 auto', display: 'flex', flexDirection: 'column', gap: '16px', minHeight: '100%' } },\n                chatMessages.length === 0\n                    ? [handshakeCard, emptyState]\n                    : [handshakeCard].concat(chatMessages.map((msg) => React.createElement(EnhancedChatMessage, {\n                        key: msg.id,\n                        message: msg.message,\n                        type: msg.type,\n                        timestamp: msg.timestamp,\n                        mid: msg.mid,\n                        status: msg.status,\n                        viewOnce: msg.viewOnce,\n                        viewOnceTtl: msg.viewOnceTtl,\n                        expiresAt: msg.expiresAt,\n                        expired: msg.expired,\n                        nowTick: nowTick,\n                        canUnsend: typeof onUnsendMessage === 'function',\n                        onUnsend: onUnsendMessage,\n                        onExpire: () => onMessageExpire && onMessageExpire(msg.id),\n                        voice: msg.voice\n                    })))\n            ));\n\n            // ---- option rows ----\n            const timerRow = showTimer && React.createElement('div', { key: 'timer-row', style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: '8px', padding: '10px 12px', marginBottom: '10px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)' } },\n                [React.createElement('span', { key: 'lbl', style: { fontSize: '12px', color: 'var(--sb-text-7)', fontWeight: 600, marginInlineEnd: '4px' } }, t('chat.disappearAfter'))].concat(\n                    timerDefs.map((d) => React.createElement('button', { key: 'td' + d.v, onClick: () => pickTimer(d.v), style: optStyle(disappearTtl === d.v) }, d.label))\n                )\n            );\n            const onceRow = showOnce && React.createElement('div', { key: 'once-row', style: { display: 'flex', flexWrap: 'wrap', alignItems: 'center', gap: '8px', padding: '10px 12px', marginBottom: '10px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)' } },\n                [React.createElement('span', { key: 'lbl', style: { fontSize: '12px', color: 'var(--sb-text-7)', fontWeight: 600, marginInlineEnd: '4px' } }, t('chat.visibleFor'))].concat(\n                    onceDefs.map((d) => React.createElement('button', { key: 'od' + d.v, onClick: () => pickOnce(d.v), style: optStyle(onceSelected === d.v) }, d.label))\n                )\n            );\n\n            // ---- file transfer panel ----\n            const filePanel = showFileTransfer && React.createElement('div', { key: 'file-panel', style: { marginBottom: '10px' } },\n                React.createElement(window.FileTransferComponent || (() => React.createElement('div', { style: { padding: '16px', textAlign: 'center', color: 'var(--sb-red)' } }, 'FileTransferComponent not loaded')), {\n                    webrtcManager: webrtcManager,\n                    isConnected: isFileTransferReady(),\n                    pendingIncomingFiles: pendingIncomingFiles,\n                    onIncomingDecision: onIncomingDecision,\n                    showDropzone: fileSendMode\n                })\n            );\n\n            // ---- chips row ----\n            const chipsRow = React.createElement('div', { key: 'chips', className: 'sb-chips', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', flexWrap: 'wrap', gap: '8px', marginBottom: '10px' } }, [\n                React.createElement('button', { key: 'files', onClick: () => {\n                    if (showFileTransfer && fileSendMode) { setShowFileTransfer(false); setFileSendMode(false); }\n                    else { setShowFileTransfer(true); setFileSendMode(true); }\n                }, className: 'sb-chip', style: chipStyle(showFileTransfer && fileSendMode) }, [\n                    React.createElement('i', { key: 'i', className: 'fas fa-paperclip', style: { fontSize: '13px' } }),\n                    (showFileTransfer && fileSendMode) ? t('chat.hideFiles') : t('chat.sendFiles')\n                ]),\n                React.createElement('div', { key: 'right', className: 'sb-chips-right', style: { display: 'flex', alignItems: 'center', gap: '6px', flexWrap: 'wrap' } }, [\n                    React.createElement('button', { key: 'code', onClick: () => setCodeMode(v => !v), className: 'sb-chip', style: chipStyle(codeMode) }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-code', style: { fontSize: '13px' } }), t('msg.code')\n                    ]),\n                    React.createElement('button', { key: 'once', onClick: () => { setShowOnce(v => !v); setShowTimer(false); }, className: 'sb-chip', style: chipStyle(showOnce || viewOnceMode) }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-eye-slash', style: { fontSize: '13px' } }),\n                        viewOnceMode ? (t('chat.viewOncePrefix') + fmtShort(viewOnceTtl)) : t('chat.viewOnce')\n                    ]),\n                    React.createElement('button', { key: 'timer', onClick: () => { setShowTimer(v => !v); setShowOnce(false); }, className: 'sb-chip', style: chipStyle(showTimer || disappearTtl > 0) }, [\n                        React.createElement('i', { key: 'i', className: 'fas fa-stopwatch', style: { fontSize: '13px' } }),\n                        disappearTtl > 0 ? (t('chat.timerPrefix') + fmtShort(disappearTtl)) : t('msg.timer')\n                    ])\n                ])\n            ]);\n\n            // ---- code-mode header strip ----\n            const codeStrip = codeMode && React.createElement('div', { key: 'code-strip', style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '8px 14px', border: '1px solid rgba(var(--sb-ink), 0.08)', borderBottom: 'none', borderRadius: '14px 14px 0 0', background: 'var(--sb-surface)' } }, [\n                React.createElement('i', { key: 'i', className: 'fas fa-code', style: { color: 'var(--sb-text-7)', fontSize: '12px' } }),\n                React.createElement('span', { key: 's', style: { fontSize: '11.5px', fontWeight: 600, color: 'var(--sb-text-7)' } }, t('chat.codeHint')),\n                React.createElement('button', { key: 'c', onClick: () => setCodeMode(false), className: 'sb-link', style: { marginInlineStart: 'auto', background: 'none', border: 'none', color: 'var(--sb-text-9)', cursor: 'pointer', fontSize: '11.5px', fontFamily: 'inherit', fontWeight: 600 } }, t('chat.close'))\n            ]);\n\n            // ---- input row ----\n            const sendBtn = React.createElement('button', {\n                key: 'send', onClick: onSendMessage, disabled: !hasText, title: t('chat.send'), className: 'sb-send',\n                style: { flex: 'none', width: '44px', height: '44px', borderRadius: '11px', border: 'none', display: 'grid', placeItems: 'center', cursor: hasText ? 'pointer' : 'default', background: hasText ? 'var(--sb-orange-solid)' : 'rgba(var(--sb-ink), 0.05)', color: hasText ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', transition: 'all .15s' }\n            }, React.createElement('i', { className: 'fas fa-paper-plane sb-mirror-rtl', style: { fontSize: '15px' } }));\n            const micBtn = React.createElement('button', {\n                key: 'mic', onClick: () => setIsRecording(true), title: t('chat.recordVoice'), className: 'sb-send',\n                style: { flex: 'none', width: '44px', height: '44px', borderRadius: '50%', border: 'none', display: 'grid', placeItems: 'center', cursor: 'pointer', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', boxShadow: '0 8px 22px rgba(var(--sb-orange-rgb), 0.3)', transition: 'transform .15s cubic-bezier(.2,.7,.3,1)' }\n            }, React.createElement('svg', { width: 19, height: 19, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 1.9, strokeLinecap: 'round', strokeLinejoin: 'round' }, [\n                React.createElement('rect', { key: 'a', x: 9, y: 3, width: 6, height: 11, rx: 3 }),\n                React.createElement('path', { key: 'b', d: 'M5 11a7 7 0 0 0 14 0' }),\n                React.createElement('path', { key: 'c', d: 'M12 18v3' })\n            ]));\n            // Desktop \u2192 mic + send together (two buttons). Mobile \u2192 mic by default,\n            // swapping to send as soon as the user types text.\n            const trailingButtons = !canRecord\n                ? [sendBtn]\n                : (isDesktop ? [micBtn, sendBtn] : (hasText ? [sendBtn] : [micBtn]));\n\n            const inputRow = React.createElement('div', {\n                key: 'input',\n                style: { display: 'flex', alignItems: 'flex-end', gap: '11px', paddingBlock: '11px', paddingInlineStart: '16px', paddingInlineEnd: '11px', border: '1px solid ' + (hasText ? 'rgba(var(--sb-ink), 0.18)' : 'rgba(var(--sb-ink), 0.08)'), background: 'var(--sb-surface)', borderRadius: codeMode ? '0 0 14px 14px' : '14px', transition: 'border .15s' }\n            }, [\n                React.createElement('div', { key: 'ta-wrap', style: { flex: 1, minWidth: 0 } }, [\n                    React.createElement('textarea', {\n                        key: 'ta',\n                        value: messageInput,\n                        ref: taRef,\n                        onChange: (e) => setMessageInput(e.target.value),\n                        onKeyDown: handleKeyPress,\n                        rows: 1,\n                        maxLength: 2000,\n                        placeholder: codeMode ? t('flow.pasteOrWrite') : t('chat.placeholder'),\n                        className: 'sb-textarea',\n                        style: { width: '100%', minHeight: codeMode ? '120px' : '22px', maxHeight: '240px', resize: 'none', border: 'none', outline: 'none', background: 'transparent', color: 'var(--sb-text-2)', fontFamily: codeMode ? MONO : 'inherit', fontSize: codeMode ? '13px' : '14.5px', lineHeight: 1.55, padding: '6px 0' }\n                    }),\n                    React.createElement('div', { key: 'foot', style: { display: 'flex', alignItems: 'center', gap: '12px', marginTop: '3px' } }, [\n                        React.createElement('span', { key: 'enc', style: { display: 'inline-flex', alignItems: 'center', gap: '5px', fontSize: '11px', color: 'var(--sb-text-faint)' } }, [\n                            React.createElement('i', { key: 'i', className: 'fas fa-lock', style: { color: 'var(--sb-green)', fontSize: '10px' } }),\n                            t('chat.encryptedOnDevice')\n                        ]),\n                        React.createElement('span', { key: 'cnt', style: { fontFamily: MONO, fontSize: '10.5px', color: 'var(--sb-text-faint)', marginInlineStart: 'auto' } }, (messageInput ? messageInput.length : 0) + '/2000')\n                    ])\n                ])\n            ].concat(trailingButtons));\n\n            // While recording, the whole input row is replaced by the recorder bar\n            // (clean row on the composer background, matching the design mockup).\n            const recordingBar = React.createElement('div', { key: 'recbar' },\n                React.createElement(VoiceRecorder, {\n                    onCancel: () => setIsRecording(false),\n                    onSend: (blob, dur, bars) => { setIsRecording(false); if (typeof onSendVoice === 'function') onSendVoice(blob, dur, bars); }\n                })\n            );\n\n            const composer = React.createElement('footer', { key: 'composer', style: { flex: 'none', padding: '12px 20px calc(18px + var(--sb-safe-bottom, env(safe-area-inset-bottom, 0px)))', background: 'var(--sb-bg)', borderTop: '1px solid rgba(var(--sb-ink), 0.05)' } },\n                React.createElement('div', { style: { maxWidth: '1000px', margin: '0 auto' } },\n                    isRecording\n                        ? [recordingBar]\n                        : [timerRow, onceRow, filePanel, chipsRow, codeStrip, inputRow]\n                )\n            );\n\n            const scrollBtn = showScrollButton && React.createElement('button', {\n                key: 'scrollbtn', onClick: handleScrollToBottom,\n                style: { position: 'fixed', insetInlineEnd: '24px', bottom: '150px', width: '44px', height: '44px', borderRadius: '50%', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'var(--sb-surface-3)', color: 'var(--sb-text-4)', display: 'grid', placeItems: 'center', cursor: 'pointer', zIndex: 50, boxShadow: '0 6px 20px rgba(var(--sb-shadow-rgb), calc(0.4 * var(--sb-shadow-k)))' }\n            }, React.createElement('i', { className: 'fas fa-arrow-down', style: { fontSize: '15px' } }));\n\n            const chatHeader = React.createElement(SecureBitChatHeader, {\n                key: 'chat-header', status: status, onDisconnect: onDisconnect, webrtcManager: webrtcManager, title: title, isOffline: isOffline, peerPresence: peerPresence, onRenameTitle: onRenameTitle\n            });\n\n            // Encrypted call overlay \u2014 renders nothing when idle; otherwise covers\n            // the chat (expanded) or docks bottom-right (minimized). It subscribes\n            // to the active session manager's call state internally.\n            const callOverlay = window.CallUIComponent && React.createElement(window.CallUIComponent, {\n                key: 'call-overlay', webrtcManager: webrtcManager, peerTitle: title\n            });\n\n            return React.createElement('div', {\n                className: 'chat-container',\n                style: { position: 'relative', display: 'flex', flexDirection: 'column', height: '100vh', background: 'var(--sb-bg)', color: 'var(--sb-text-2)' }\n            }, [chatHeader, messagesArea, scrollBtn, composer, callOverlay]);\n        };\n        \n        \n                // Build a chat message in the shape addMessageWithAutoScroll produces, so the\n                // per-session callbacks can dispatch ADD_MESSAGE without an active-view setter.\n                const buildSessionMessage = (message, type, opts = {}) => ({\n                    message,\n                    type,\n                    id: Date.now() + Math.random(),\n                    timestamp: (typeof opts.timestamp === 'number') ? opts.timestamp : Date.now(),\n                    mid: opts.mid,\n                    status: opts.status,\n                    viewOnce: opts.viewOnce === true,\n                    viewOnceTtl: (typeof opts.viewOnceTtl === 'number') ? opts.viewOnceTtl : 15,\n                    expiresAt: (typeof opts.expiresAt === 'number') ? opts.expiresAt : undefined,\n                    // Encrypted voice note descriptor: { url, dur, bars, transfer, fileId }.\n                    voice: opts.voice || undefined,\n                    fileId: opts.fileId || undefined\n                });\n\n                // Left rail listing every open session (design import: \"Multi Session\n                // Concepts\"). Two desktop states \u2014 expanded (292px) and a collapsed icon dock\n                // (72px) \u2014 plus a mobile slide-out drawer. Pure presentational: all data comes\n                // from decorated session objects, all actions are callbacks.\n                const SB_SVG = {\n                    chevL: '<svg class=\"sb-mirror-rtl\" width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M15 6l-6 6 6 6\"/></svg>',\n                    chevR: '<svg class=\"sb-mirror-rtl\" width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M9 6l6 6-6 6\"/></svg>',\n                    plus: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2.1\" stroke-linecap=\"round\"><path d=\"M12 5v14M5 12h14\"/></svg>',\n                    users: '<svg width=\"19\" height=\"19\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.8\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M16 19v-1.5a3.5 3.5 0 0 0-3.5-3.5h-5A3.5 3.5 0 0 0 4 17.5V19\"/><circle cx=\"10\" cy=\"8\" r=\"3.2\"/><path d=\"M20 19v-1.5a3.5 3.5 0 0 0-2.6-3.4\"/><path d=\"M15.5 5.3a3.2 3.2 0 0 1 0 5.4\"/></svg>',\n                    burger: '<svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M4 7h16M4 12h16M4 17h16\"/></svg>'\n                };\n\n                const SessionsSidebar = ({ chats, groups = [], collapsed, drawerOpen, onToggleCollapse, onSelect, onSelectGroup, onNewChat, onNewGroup, onRename, onCloseDrawer, myStatus, onSetStatus }) => {\n                    const h = React.createElement;\n                    const [editingId, setEditingId] = React.useState(null);\n                    const [draft, setDraft] = React.useState('');\n                    const [presenceOpen, setPresenceOpen] = React.useState(false);\n\n                    // \u2500\u2500 Mobile drawer: a gesture, not a toggle \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                    // This used to be `display: none | block`. The drawer existed or it\n                    // did not; there was no in-between, no way to peek at it, and no way\n                    // to change your mind once it was moving. It is dragged now: the\n                    // panel is glued to the finger, resists past its own edge, and on\n                    // release the flick is projected forward to work out whether it was\n                    // being sent home or thrown away. Everything animates on a spring so\n                    // it can be caught again mid-flight and reversed without waiting.\n                    const scrimRef = React.useRef(null);\n                    const panelRef = React.useRef(null);\n                    const animRef = React.useRef(null);\n                    const dragRef = React.useRef(null);\n                    const offsetRef = React.useRef(0);      // px; 0 = open, -width = closed\n                    const openRef = React.useRef(false);    // where the panel is headed\n                    const clickGuardRef = React.useRef(false);\n                    const [drawerMounted, setDrawerMounted] = React.useState(!!drawerOpen);\n\n                    const AXIS_LOCK = 10;   // hysteresis before committing to a direction\n                    const FLICK = 220;      // px/s above which velocity, not position, decides\n\n                    const drawerWidth = () => (panelRef.current && panelRef.current.offsetWidth) || 292;\n\n                    // Written straight to the DOM. Putting a 1:1 drag through React state\n                    // inserts a render between the finger and the pixels, which is exactly\n                    // the latency that makes direct manipulation stop feeling direct.\n                    const paintDrawer = (x) => {\n                        offsetRef.current = x;\n                        const w = drawerWidth();\n                        const progress = Math.min(1, Math.max(0, 1 + x / w));\n                        if (panelRef.current) panelRef.current.style.transform = 'translate3d(' + (x * DIR).toFixed(2) + 'px,0,0)';\n                        if (scrimRef.current) {\n                            scrimRef.current.style.opacity = progress.toFixed(3);\n                            // The blur comes up with the panel rather than being switched\n                            // on at the end: the scrim should read as a material arriving,\n                            // not as a filter someone flipped.\n                            const blur = 'blur(' + (5 * progress).toFixed(2) + 'px)';\n                            scrimRef.current.style.backdropFilter = blur;\n                            scrimRef.current.style.webkitBackdropFilter = blur;\n                        }\n                    };\n\n                    const settleDrawer = (to, velocity) => {\n                        if (animRef.current) animRef.current.stop();\n                        animRef.current = spring({\n                            from: offsetRef.current,\n                            to,\n                            velocity,\n                            // Overshoot has to be earned. A drawer that was flicked carries\n                            // momentum and should land with a little bounce; one that was\n                            // opened by tapping the burger has none, and wobbling would be\n                            // the interface talking to itself.\n                            damping: Math.abs(velocity) > 60 ? SPRING.drawer.damping : SPRING.move.damping,\n                            response: SPRING.drawer.response,\n                            restDelta: 0.5,\n                            restSpeed: 8,\n                            onUpdate: paintDrawer,\n                            onComplete: () => {\n                                paintDrawer(to);\n                                animRef.current = null;\n                                if (to !== 0) setDrawerMounted(false);\n                            }\n                        });\n                    };\n\n                    React.useLayoutEffect(() => {\n                        if (drawerOpen && !drawerMounted) { setDrawerMounted(true); return; }\n                        if (!drawerMounted) return;\n                        if (drawerOpen === openRef.current) return;   // already going there\n                        const w = drawerWidth();\n                        if (drawerOpen && !animRef.current && !dragRef.current) {\n                            // Parked closed: place it off the edge it will leave by, so the\n                            // way in and the way out are the same path.\n                            paintDrawer(-w);\n                        }\n                        openRef.current = drawerOpen;\n                        // Start from the live velocity, never from zero \u2014 reversing a moving\n                        // panel by resetting it to standstill is the \"brick wall\" the user\n                        // feels at exactly the moment they changed their mind.\n                        settleDrawer(drawerOpen ? 0 : -w, animRef.current ? animRef.current.velocity : 0);\n                    }, [drawerOpen, drawerMounted]);\n\n                    React.useEffect(() => () => { if (animRef.current) animRef.current.stop(); }, []);\n\n                    // Handlers live on the scrim alone; pointer events from the panel bubble\n                    // up to it, so one set covers both surfaces and can never double-fire.\n                    const drawerDown = (e) => {\n                        if (e.pointerType === 'mouse' && e.button !== 0) return;\n                        if (dragRef.current) return;\n                        // Cleared here rather than in the click handler: a drag that ends\n                        // outside the scrim produces no click at all, and a guard left\n                        // standing would swallow the next genuine tap-to-dismiss.\n                        clickGuardRef.current = false;\n                        dragRef.current = {\n                            id: e.pointerId,\n                            x0: e.clientX, y0: e.clientY,\n                            // Where they grabbed is where it stays. Re-centring the panel\n                            // under the finger breaks the illusion on the first frame.\n                            base: offsetRef.current,\n                            axis: null,\n                            vel: velocityTracker()\n                        };\n                        dragRef.current.vel.add(e.clientX * DIR, e.timeStamp || performance.now());\n                    };\n\n                    const drawerMove = (e) => {\n                        const d = dragRef.current;\n                        if (!d || e.pointerId !== d.id) return;\n                        const dx = e.clientX - d.x0;\n                        const dy = e.clientY - d.y0;\n                        if (!d.axis) {\n                            // Both gestures are tracked from the first move and the loser is\n                            // only cancelled once intent is unambiguous \u2014 a vertical scroll\n                            // through the chat list must never be stolen by the drawer.\n                            if (Math.abs(dx) < AXIS_LOCK && Math.abs(dy) < AXIS_LOCK) return;\n                            if (Math.abs(dy) >= Math.abs(dx)) { dragRef.current = null; return; }\n                            d.axis = 'x';\n                            if (animRef.current) {\n                                // Take over from wherever it is on screen right now, not from\n                                // where the animation was headed.\n                                d.base = offsetRef.current;\n                                d.x0 = e.clientX;\n                                animRef.current.stop();\n                                animRef.current = null;\n                            }\n                            try { e.currentTarget.setPointerCapture(d.id); } catch (_) {}\n                        }\n                        d.vel.add(e.clientX * DIR, e.timeStamp || performance.now());\n                        const w = drawerWidth();\n                        let x = d.base + (e.clientX - d.x0) * DIR;\n                        // Past the open edge there is nothing left to reveal. Resisting\n                        // reads as \"responsive, but this is the end\"; stopping dead reads\n                        // as the app having frozen.\n                        if (x > 0) x = rubberband(x, w);\n                        else if (x < -w) x = -w + rubberband(x + w, w);\n                        paintDrawer(x);\n                    };\n\n                    const drawerUp = (e) => {\n                        const d = dragRef.current;\n                        if (!d || (e.pointerId !== undefined && e.pointerId !== d.id)) return;\n                        dragRef.current = null;\n                        if (d.axis !== 'x') return;      // a tap: let the click through\n                        clickGuardRef.current = true;    // a drag: the scrim must not also fire\n                        const w = drawerWidth();\n                        const v = d.vel.get(e.timeStamp || performance.now());\n                        // Where the gesture was going, not where it happened to stop.\n                        const open = snapTarget(offsetRef.current, v, [-w, 0], { flick: FLICK }) === 0;\n                        openRef.current = open;\n                        settleDrawer(open ? 0 : -w, v);\n                        if (!open) onCloseDrawer();\n                    };\n\n                    const drawerScrimClick = () => {\n                        if (clickGuardRef.current) { clickGuardRef.current = false; return; }\n                        onCloseDrawer();\n                    };\n                    const startEdit = (c) => (e) => { e.stopPropagation(); setEditingId(c.id); setDraft(c.name); };\n                    const commitEdit = () => { if (editingId) { onRename(editingId, draft); setEditingId(null); } };\n                    const editKey = (e) => {\n                        if (e.key === 'Enter') { e.preventDefault(); commitEdit(); }\n                        else if (e.key === 'Escape') { setEditingId(null); }\n                    };\n                    const renameInput = (extra = {}) => h('input', {\n                        autoFocus: true,\n                        value: draft,\n                        onChange: (e) => setDraft(e.target.value),\n                        onKeyDown: editKey,\n                        onBlur: commitEdit,\n                        onClick: (e) => e.stopPropagation(),\n                        style: Object.assign({ width: '100%', background: 'rgba(var(--sb-ink), 0.06)', border: '1px solid rgba(var(--sb-orange-rgb), 0.5)', borderRadius: '6px', color: 'var(--sb-text-1)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, padding: '2px 6px', outline: 'none' }, extra)\n                    });\n                    const icon = (svg, style) => h('span', { style: Object.assign({ display: 'grid', placeItems: 'center' }, style || {}), dangerouslySetInnerHTML: { __html: svg } });\n                    const avatar = (c, size, ring) => h('div', {\n                        style: { position: 'relative', flex: 'none', width: size + 'px', height: size + 'px', borderRadius: (size >= 44 ? 12 : 11) + 'px', display: 'grid', placeItems: 'center', background: c.active ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.035)', border: '1px solid rgba(var(--sb-ink), ' + (c.active ? '0.14' : '0.07') + ')', fontSize: '13px', fontWeight: 700, letterSpacing: '-0.3px', color: c.active ? 'var(--sb-text-1)' : 'var(--sb-text-6)' }\n                    }, [c.mono, h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: c.dot, border: '2px solid ' + ring } })]);\n\n                    // ---- Expanded list row ----\n                    const expandedRow = (c) => h('div', {\n                        key: c.id,\n                        onClick: () => onSelect(c.id),\n                        style: { position: 'relative', display: 'flex', alignItems: 'center', gap: '12px', padding: '11px 12px', marginBottom: '4px', borderRadius: '11px', background: c.active ? 'var(--sb-surface)' : 'transparent', border: '1px solid ' + (c.active ? 'rgba(var(--sb-ink), 0.08)' : 'transparent'), cursor: 'pointer' }\n                    }, [\n                        c.active && h('span', { key: 'bar', style: { position: 'absolute', insetInlineStart: 0, top: '12px', bottom: '12px', width: '3px', borderStartEndRadius: '3px', borderEndEndRadius: '3px', background: 'var(--sb-orange-solid)' } }),\n                        avatar(c, 38, c.active ? 'var(--sb-surface)' : 'var(--sb-bg-deep)'),\n                        h('div', { key: 'body', style: { flex: 1, minWidth: 0 } }, [\n                            h('div', { key: 'top', style: { display: 'flex', alignItems: 'center', gap: '7px' } }, [\n                                editingId === c.id\n                                    ? renameInput()\n                                    : h('span', {\n                                        key: 'name',\n                                        onDoubleClick: startEdit(c),\n                                        title: t('chat.renameHint'),\n                                        style: { flex: 1, minWidth: 0, fontSize: '14px', fontWeight: c.active ? 700 : 600, letterSpacing: '-0.2px', color: c.active ? 'var(--sb-text-1)' : 'var(--sb-text-4)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' }\n                                    }, c.name),\n                                c.unread && editingId !== c.id && h('span', { key: 'u', style: { flex: 'none', minWidth: '18px', height: '18px', padding: '0 5px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 700 } }, c.unread)\n                            ]),\n                            h('div', { key: 'prev', style: { fontSize: '12px', color: c.active ? 'var(--sb-text-7)' : 'var(--sb-text-9)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, c.preview)\n                        ])\n                    ]);\n\n                    // ---- Collapsed dock item ----\n                    const dockItem = (c) => h('div', { key: c.id, style: { position: 'relative' } }, [\n                        c.active && h('span', { key: 'bar', style: { position: 'absolute', insetInlineStart: '-13px', top: '9px', bottom: '9px', width: '3px', borderStartEndRadius: '3px', borderEndEndRadius: '3px', background: 'var(--sb-orange-solid)' } }),\n                        h('div', {\n                            key: 'tile',\n                            onClick: () => onSelect(c.id),\n                            title: c.name,\n                            style: { position: 'relative', width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', cursor: 'pointer', background: c.active ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.03)', border: '1px solid rgba(var(--sb-ink), ' + (c.active ? '0.14' : '0.07') + ')', fontSize: '13px', fontWeight: 700, letterSpacing: '-0.3px', color: c.active ? 'var(--sb-text-1)' : 'var(--sb-text-6)' }\n                        }, [\n                            c.mono,\n                            h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: c.dot, border: '2.5px solid var(--sb-bg-deep)' } }),\n                            c.unread && h('span', { key: 'u', style: { position: 'absolute', insetInlineStart: '-5px', top: '-5px', minWidth: '17px', height: '17px', padding: '0 4px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '9.5px', fontWeight: 700, border: '2px solid var(--sb-bg-deep)' } }, c.unread)\n                        ])\n                    ]);\n\n                    // Same logo treatment as the landing header (Header.jsx): the mark on a\n                    // transparent background \u2014 no black tile.\n                    const brandMark = (size) => h('div', { style: { width: size + 'px', height: size + 'px', flex: 'none', display: 'grid', placeItems: 'center' } },\n                        h('img', { src: '/logo/securebit-mark.svg', alt: 'SecureBit', style: { width: '100%', height: '100%', objectFit: 'contain', display: 'block' } }));\n                    const collapseBtn = (svg, title) => h('button', { className: 'sb-collapse-btn', onClick: onToggleCollapse, title, style: { width: '30px', height: '30px', borderRadius: '8px', display: 'grid', placeItems: 'center', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'transparent', color: 'var(--sb-text-7)', cursor: 'pointer' }, dangerouslySetInnerHTML: { __html: svg } });\n\n                    // ---- Expanded rail content ----\n                    // ---- Presence (\"You\" status) panel ----\n                    const myMeta = MY_STATUS_OPTIONS.find((o) => o.key === myStatus) || MY_STATUS_OPTIONS[0];\n                    const PRES_SVG = {\n                        user: '<svg width=\"19\" height=\"19\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"currentColor\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M18 20v-1.5a4 4 0 0 0-4-4h-4a4 4 0 0 0-4 4V20\"/><circle cx=\"12\" cy=\"8\" r=\"3.6\"/></svg>',\n                        check: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-orange-solid)\" stroke-width=\"2.3\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M5 13l4 4 10-11\"/></svg>',\n                        chevUp: '<svg width=\"16\" height=\"16\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-text-9)\" stroke-width=\"2\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M6 15l6-6 6 6\"/></svg>',\n                        lock: '<svg width=\"13\" height=\"13\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M7 11V7a5 5 0 0 1 10 0v4\"/><rect x=\"4.5\" y=\"11\" width=\"15\" height=\"9\" rx=\"2.2\"/></svg>'\n                    };\n                    const presenceMenu = (pos) => (presenceOpen ? h('div', {\n                        key: 'pmenu',\n                        style: Object.assign({ position: 'absolute', zIndex: 30, borderRadius: '14px', background: 'var(--sb-surface)', border: '1px solid rgba(var(--sb-ink), 0.1)', boxShadow: '0 16px 40px rgba(var(--sb-shadow-rgb), calc(0.55 * var(--sb-shadow-k)))', padding: '6px' }, pos)\n                    }, [\n                        h('div', { key: 'h', style: { padding: '9px 10px 7px', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '1.2px' } }, t('chat.setStatus')),\n                        ...MY_STATUS_OPTIONS.map((o) => h('button', {\n                            key: o.key,\n                            onClick: () => { onSetStatus(o.key); setPresenceOpen(false); },\n                            style: { width: '100%', display: 'flex', alignItems: 'center', gap: '11px', padding: '9px 10px', borderRadius: '9px', border: 'none', background: 'transparent', cursor: 'pointer', textAlign: 'start' }\n                        }, [\n                            h('span', { key: 'd', style: { flex: 'none', width: '10px', height: '10px', borderRadius: '50%', background: o.dot } }),\n                            h('span', { key: 't', style: { flex: 1, minWidth: 0 } }, [\n                                h('span', { key: 'w', style: { display: 'block', fontSize: '13.5px', fontWeight: 600, color: 'var(--sb-text-2)' } }, o.word),\n                                h('span', { key: 'de', style: { display: 'block', fontSize: '11.5px', color: 'var(--sb-text-9)' } }, o.desc)\n                            ]),\n                            o.key === myStatus && h('span', { key: 'c', style: { flex: 'none', display: 'grid', placeItems: 'center' }, dangerouslySetInnerHTML: { __html: PRES_SVG.check } })\n                        ])),\n                        h('div', { key: 'note', style: { display: 'flex', alignItems: 'flex-start', gap: '8px', margin: '6px 6px 4px', padding: '9px 10px', borderRadius: '9px', background: 'rgba(var(--sb-green-rgb), 0.06)', border: '1px solid rgba(var(--sb-green-rgb), 0.16)' } }, [\n                            h('span', { key: 'i', style: { flex: 'none', marginTop: '1px', display: 'grid' }, dangerouslySetInnerHTML: { __html: PRES_SVG.lock } }),\n                            h('span', { key: 't', style: { fontSize: '11px', lineHeight: 1.45, color: 'var(--sb-text-7)' } }, t('chat.peersOnly'))\n                        ])\n                    ]) : null);\n                    const presencePanelExpanded = h('div', { key: 'you', style: { flex: 'none', position: 'relative', marginTop: '10px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', padding: '10px 12px 12px' } }, [\n                        presenceMenu({ left: '12px', right: '12px', bottom: '64px' }),\n                        h('button', { key: 'btn', onClick: () => setPresenceOpen((v) => !v), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '11px', padding: '7px 8px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(var(--sb-ink), 0.02)', cursor: 'pointer' } }, [\n                            h('div', { key: 'av', style: { position: 'relative', flex: 'none', width: '36px', height: '36px', borderRadius: '10px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-orange-rgb), 0.12)', border: '1px solid rgba(var(--sb-orange-rgb), 0.24)', color: 'var(--sb-orange)' } }, [\n                                h('span', { key: 'i', style: { display: 'grid' }, dangerouslySetInnerHTML: { __html: PRES_SVG.user } }),\n                                h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: myMeta.dot, border: '2px solid var(--sb-bg-deep)' } })\n                            ]),\n                            h('div', { key: 'tx', style: { flex: 1, minWidth: 0, textAlign: 'start' } }, [\n                                h('div', { key: 'y', style: { fontSize: '13.5px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('chatHdr.you')),\n                                h('div', { key: 'w', style: { fontSize: '12px', color: 'var(--sb-text-7)' } }, myMeta.word)\n                            ]),\n                            h('span', { key: 'ch', style: { display: 'grid', placeItems: 'center' }, dangerouslySetInnerHTML: { __html: PRES_SVG.chevUp } })\n                        ])\n                    ]);\n                    const presencePanelCollapsed = h('div', { key: 'you', style: { flex: 'none', position: 'relative', display: 'flex', flexDirection: 'column', alignItems: 'center', padding: '0 0 13px' } }, [\n                        presenceMenu({ insetInlineStart: '60px', bottom: '8px', width: '248px' }),\n                        h('button', { key: 'btn', onClick: () => setPresenceOpen((v) => !v), title: t('chat.yourStatusPrefix') + myMeta.word, style: { position: 'relative', width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', cursor: 'pointer', background: 'rgba(var(--sb-orange-rgb), 0.12)', border: '1px solid rgba(var(--sb-orange-rgb), 0.24)', color: 'var(--sb-orange)' } }, [\n                            h('span', { key: 'i', style: { display: 'grid' }, dangerouslySetInnerHTML: { __html: PRES_SVG.user } }),\n                            h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '12px', height: '12px', borderRadius: '50%', background: myMeta.dot, border: '2.5px solid var(--sb-bg-deep)' } })\n                        ])\n                    ]);\n\n                    const expandedInner = [\n                        h('div', { key: 'head', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'space-between', paddingBlock: 0, paddingInlineStart: '16px', paddingInlineEnd: '12px', height: 'var(--sb-bar-h, 64px)', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [\n                            h('div', { key: 'brand', style: { display: 'flex', alignItems: 'center', gap: '10px' } }, [brandMark(30), h('span', { key: 't', style: { fontSize: '15px', fontWeight: 800, letterSpacing: '-0.3px', color: 'var(--sb-text-1)' } }, 'SecureBit')]),\n                            collapseBtn(SB_SVG.chevL, t('chat.collapse'))\n                        ]),\n                        h('div', { key: 'label', style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'space-between', padding: '16px 16px 9px' } }, [\n                            h('span', { key: 'l', style: { fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '1.3px' } }, t('chatHdr.chats')),\n                            h('span', { key: 'c', style: { fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-9)' } }, String(chats.length))\n                        ]),\n                        h('div', { key: 'list', className: 'msc-scroll', style: { flex: 1, overflowY: 'auto', padding: '0 10px' } }, [\n                            ...chats.map(expandedRow),\n                            h('div', { key: 'gh', style: { marginTop: '14px', padding: '0 2px 6px', display: 'flex', alignItems: 'baseline', justifyContent: 'space-between' } }, [\n                                h('span', { key: 'l', style: { fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '1.3px' } }, t('chat.groupChats')),\n                                h('button', {\n                                    key: 'add', onClick: onNewGroup, title: t('chat.newGroup'),\n                                    style: { border: 'none', background: 'transparent', color: 'var(--sb-orange)', cursor: 'pointer', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 700, textTransform: 'uppercase', letterSpacing: '0.9px', padding: 0 }\n                                }, t('chatHdr.newChat'))\n                            ]),\n                            ...(groups.length === 0\n                                ? [h('div', { key: 'gph', onClick: onNewGroup, title: t('chat.createGroup'), style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '11px 12px', borderRadius: '11px', background: 'transparent', border: '1px dashed rgba(var(--sb-ink), 0.09)', cursor: 'pointer' } }, [\n                                    h('div', { key: 'i', style: { flex: 'none', width: '38px', height: '38px', borderRadius: '11px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-ink), 0.025)', border: '1px solid rgba(var(--sb-ink), 0.06)', color: 'var(--sb-text-faint)' }, dangerouslySetInnerHTML: { __html: SB_SVG.users } }),\n                                    h('div', { key: 'b', style: { flex: 1, minWidth: 0 } }, [\n                                        h('div', { key: 't', style: { fontSize: '14px', fontWeight: 600, color: 'var(--sb-text-7)' } }, t('chat.newGroup')),\n                                        h('div', { key: 's', style: { fontSize: '11.5px', color: 'var(--sb-text-faint)' } }, t('chat.meshHint'))\n                                    ])\n                                ])]\n                                : groups.map((g) => h('div', {\n                                    key: g.id,\n                                    onClick: () => onSelectGroup(g.id),\n                                    style: { position: 'relative', display: 'flex', alignItems: 'center', gap: '12px', padding: '11px 12px', marginBottom: '4px', borderRadius: '11px', background: g.active ? 'var(--sb-surface)' : 'transparent', border: '1px solid ' + (g.active ? 'rgba(var(--sb-ink), 0.08)' : 'transparent'), cursor: 'pointer' }\n                                }, [\n                                    g.active && h('span', { key: 'bar', style: { position: 'absolute', insetInlineStart: 0, top: '12px', bottom: '12px', width: '3px', borderStartEndRadius: '3px', borderEndEndRadius: '3px', background: 'var(--sb-orange-solid)' } }),\n                                    avatar(g, 38, g.active ? 'var(--sb-surface)' : 'var(--sb-bg-deep)'),\n                                    h('div', { key: 'body', style: { flex: 1, minWidth: 0 } }, [\n                                        h('div', { key: 'top', style: { display: 'flex', alignItems: 'center', gap: '7px' } }, [\n                                            h('span', { key: 'n', style: { flex: 1, minWidth: 0, fontSize: '14px', fontWeight: g.active ? 700 : 600, letterSpacing: '-0.2px', color: g.active ? 'var(--sb-text-1)' : 'var(--sb-text-4)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, g.name),\n                                            g.unread && h('span', { key: 'u', style: { flex: 'none', minWidth: '18px', height: '18px', padding: '0 5px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '10px', fontWeight: 700 } }, g.unread)\n                                        ]),\n                                        h('div', { key: 'prev', style: { fontSize: '12px', color: g.active ? 'var(--sb-text-7)' : 'var(--sb-text-9)', whiteSpace: 'nowrap', overflow: 'hidden', textOverflow: 'ellipsis' } }, g.preview)\n                                    ])\n                                ])))\n                        ]),\n                        h('div', { key: 'new', style: { flex: 'none', padding: '12px' } }, h('button', {\n                            onClick: onNewChat,\n                            style: { width: '100%', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '12px', borderRadius: '11px', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' }\n                        }, [icon(SB_SVG.plus, { key: 'p' }), t('chat.newChat')])),\n                        presencePanelExpanded\n                    ];\n\n                    // ---- Collapsed dock content ----\n                    const collapsedInner = [\n                        h('div', { key: 'head', style: { flex: 'none', display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '10px', padding: '13px 0', width: '100%', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' } }, [brandMark(32), collapseBtn(SB_SVG.chevR, t('chatHdr.expand'))]),\n                        h('div', { key: 'list', className: 'msc-scroll', style: { flex: 1, overflowY: 'auto', display: 'flex', flexDirection: 'column', alignItems: 'center', gap: '10px', padding: '14px 0', width: '100%' } }, [\n                            ...chats.map(dockItem),\n                            h('div', { key: 'sep', style: { width: '30px', height: '1px', background: 'rgba(var(--sb-ink), 0.07)', margin: '2px 0' } }),\n                            ...groups.map((g) => h('div', { key: g.id, style: { position: 'relative' } }, [\n                                g.active && h('span', { key: 'bar', style: { position: 'absolute', insetInlineStart: '-13px', top: '9px', bottom: '9px', width: '3px', borderStartEndRadius: '3px', borderEndEndRadius: '3px', background: 'var(--sb-orange-solid)' } }),\n                                h('div', {\n                                    key: 'tile', onClick: () => onSelectGroup(g.id), title: g.name + ' \u2014 ' + g.headerSub,\n                                    style: { position: 'relative', width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', cursor: 'pointer', background: g.active ? 'rgba(var(--sb-ink), 0.06)' : 'rgba(var(--sb-ink), 0.03)', border: '1px solid rgba(var(--sb-ink), ' + (g.active ? '0.14' : '0.07') + ')', fontSize: '13px', fontWeight: 700, letterSpacing: '-0.3px', color: g.active ? 'var(--sb-text-1)' : 'var(--sb-text-6)' }\n                                }, [\n                                    g.mono,\n                                    h('span', { key: 'dot', style: { position: 'absolute', insetInlineEnd: '-2px', bottom: '-2px', width: '11px', height: '11px', borderRadius: '50%', background: g.dot, border: '2.5px solid var(--sb-bg-deep)' } }),\n                                    g.unread && h('span', { key: 'u', style: { position: 'absolute', insetInlineStart: '-5px', top: '-5px', minWidth: '17px', height: '17px', padding: '0 4px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', fontFamily: \"'JetBrains Mono',monospace\", fontSize: '9.5px', fontWeight: 700, border: '2px solid var(--sb-bg-deep)' } }, g.unread)\n                                ])\n                            ])),\n                            h('div', { key: 'gph', onClick: onNewGroup, title: t('chat.newGroup'), style: { position: 'relative', width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', cursor: 'pointer', background: 'transparent', border: '1px dashed rgba(var(--sb-ink), 0.1)', color: 'var(--sb-text-faint)' }, dangerouslySetInnerHTML: { __html: SB_SVG.users } })\n                        ]),\n                        h('div', { key: 'new', style: { flex: 'none', padding: '13px 0' } }, h('button', {\n                            onClick: onNewChat, title: t('chat.newChat'),\n                            style: { width: '44px', height: '44px', borderRadius: '12px', display: 'grid', placeItems: 'center', border: 'none', background: 'var(--sb-orange-solid)', color: 'var(--sb-on-accent)', cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' }, dangerouslySetInnerHTML: { __html: SB_SVG.plus }\n                        })),\n                        presencePanelCollapsed\n                    ];\n\n                    const railWidth = collapsed ? '72px' : '292px';\n                    const railStyle = { flex: 'none', width: railWidth, display: 'flex', flexDirection: 'column', alignItems: collapsed ? 'center' : 'stretch', paddingTop: 'var(--sb-safe-top, 0px)', background: 'var(--sb-bg-deep)', borderInlineEnd: '1px solid rgba(var(--sb-ink), 0.06)' };\n                    const inner = collapsed ? collapsedInner : expandedInner;\n\n                    return h(React.Fragment, null, [\n                        // Responsive behaviour (inline styles can't express media queries).\n                        h('style', { key: 'css', dangerouslySetInnerHTML: { __html: '@media (max-width:1023px){.sb-rail{display:none !important;}.sb-burger{display:grid !important;}}@media (min-width:1024px){.sb-drawer-overlay{display:none !important;}}.sb-mobile-drawer .sb-collapse-btn{display:none !important;}' +\n                            // Dark app background everywhere so mobile safe-areas / overscroll show\n                            // black, not the grey landing background (the \"grey band\" bug).\n                            'html,body{background:var(--sb-bg) !important;overscroll-behavior:none;}' +\n                            // App-shell height tracks the *visual* viewport (--sb-vh, set from the\n                            // VisualViewport API) so the layout shrinks when the on-screen keyboard\n                            // opens \u2014 no grey gap under the composer. Falls back to 100dvh, then 100vh.\n                            // The shell is sized by HEIGHT, not pinned by position.\n                            //\n                            // An earlier attempt used position:fixed with a JS-driven top\n                            // offset. That is the wrong instrument: a fixed element is laid\n                            // out against the layout viewport, which iOS does not shrink for\n                            // the keyboard, so it has to be chased with JS \u2014 and the result\n                            // feels nailed down rather than laid out. The reference iOS chat\n                            // implementations all drive HEIGHT from visualViewport and leave\n                            // positioning alone.\n                            //\n                            // --sb-vh is the visual viewport height; 100dvh is the fallback,\n                            // which is correct on its own everywhere the layout viewport does\n                            // resize for the keyboard (Chrome/Firefox on Android, via\n                            // interactive-widget=resizes-content). WebKit has not implemented\n                            // interactive-widget at all, which is exactly why the JS fallback\n                            // still exists.\n                            //\n                            // min-height:0 is what makes the height above mean anything.\n                            // The shell also carries .minimal-bg, which sets\n                            // min-height:100vh \u2014 and min-height always beats height. On iOS\n                            // `100vh` is the URL-bar-retracted *large* viewport, so with the\n                            // bar showing the shell was pinned ~60-100px taller than the area\n                            // you can actually see. That surplus is precisely what made the\n                            // document scrollable, and a document that scrolls is how the\n                            // header rode away off the top. Everything below \u2014 the visual\n                            // viewport tracking, the dvh fallback \u2014 was inert until this\n                            // floor was removed: --sb-vh could shrink all it liked and the\n                            // shell would not follow it below 100vh.\n                            //\n                            // Sizing alone turned out not to be enough on iOS, and the\n                            // screenshot of the failure is worth writing down: keyboard up,\n                            // the whole app had slid off the top of the screen, only the\n                            // bottom sliver of the composer still showing, and black \u2014 the\n                            // body, past the end of a 400px-tall shell \u2014 filling everything\n                            // down to the keyboard.\n                            //\n                            // That is the *visual* viewport being panned. When the keyboard\n                            // opens, WebKit shrinks the visual viewport and moves it down\n                            // inside the layout viewport (which it never shrinks) to reveal\n                            // the focused field. The shell had correctly shrunk to the top\n                            // var(--sb-vh) of the layout viewport \u2014 and the visible window\n                            // had moved off it. Nothing in CSS can decline that pan, and it\n                            // is not a document scroll, so there is no scrollTop to reset.\n                            //\n                            // So the shell is pinned to the visible rect after all: fixed to\n                            // the layout viewport and translated by visualViewport.offsetTop.\n                            // The earlier objection to pinning stands for what it described \u2014\n                            // chasing the offset with `top`, and recomputing HEIGHT on every\n                            // scroll event, which twitched under the finger. Height still\n                            // moves on resize only. The offset rides a transform on the\n                            // compositor, which is the cheap half, and only it follows the\n                            // pan. --sb-vv-top is 0 everywhere that does not pan (desktop,\n                            // Chrome on Android), so this is inert off iOS.\n                            '.sb-app-shell{height:var(--sb-vh,100dvh) !important;min-height:0 !important;overflow:hidden;position:fixed;top:0;inset-inline:0;transform:translate3d(0,var(--sb-vv-top, 0px),0);}' +\n                            // Pin the header, and nothing else.\n                            //\n                            // Sticky is the whole fix: if an ancestor scrolls \u2014 which is what\n                            // iOS does to lift a focused input above the keyboard \u2014 the header\n                            // holds against the top instead of riding away with the page. An\n                            // earlier version answered this by taking the document's scroll\n                            // away altogether; that broke the connection screen and was a far\n                            // broader change than the problem called for.\n                            '.sb-chat-header{position:sticky;top:0;z-index:20;}' +\n                            // Children fill the shell rather than restating a viewport height,\n                            // which would count the header twice.\n                            // The column carries .minimal-bg too, so it needs the same floor\n                            // removed \u2014 !important rather than relying on this block winning\n                            // on source order, because it is load-bearing.\n                            '.sb-app-col{height:100% !important;min-height:0 !important;}' +\n                            '.chat-container{height:100% !important;min-height:0 !important;}' +\n                            // The message list is the only scroller. min-height:0 is not\n                            // cosmetic: a flex:1 item in a column defaults to min-height:auto,\n                            // refuses to shrink below its content, and pushes the composer off\n                            // the bottom once the conversation is long enough.\n                            '.sb-scroll{min-height:0 !important;overscroll-behavior:contain;-webkit-overflow-scrolling:touch;}' +\n                            // iOS Safari zooms the page when a focused field has font-size < 16px.\n                            // Force 16px on mobile inputs to stop the zoom-and-reflow on tap.\n                            '@media (max-width:768px){textarea,input,select{font-size:16px !important;}}' +\n                            // Declutter the mobile chat header: hide the inline rename pencil (rename\n                            // is still available by double-tapping a chat in the drawer).\n                            '@media (max-width:768px){.sb-rename-btn{display:none !important;}}' } }),\n                        // Desktop rail\n                        h('aside', { key: 'rail', className: 'sb-rail', style: railStyle }, inner),\n                        // Mobile drawer overlay. `touch-action: pan-y` hands vertical\n                        // scrolling back to the browser and keeps the horizontal axis for\n                        // us, so the chat list still scrolls with the drawer open.\n                        h('div', {\n                            key: 'drawer', className: 'sb-drawer-overlay',\n                            ref: scrimRef,\n                            onClick: drawerScrimClick,\n                            onPointerDown: drawerDown,\n                            onPointerMove: drawerMove,\n                            onPointerUp: drawerUp,\n                            onPointerCancel: drawerUp,\n                            style: { position: 'fixed', inset: 0, zIndex: 60, background: 'rgba(var(--sb-scrim-rgb), 0.6)', backdropFilter: 'blur(0px)', WebkitBackdropFilter: 'blur(0px)', opacity: 0, display: drawerMounted ? 'block' : 'none', touchAction: 'pan-y', willChange: 'opacity' }\n                        }, h('aside', { className: 'sb-mobile-drawer', ref: panelRef, onClick: (e) => e.stopPropagation(), style: { position: 'absolute', insetInlineStart: 0, top: 0, bottom: 0, width: 'min(292px, 86vw)', display: 'flex', flexDirection: 'column', paddingTop: 'var(--sb-safe-top, 0px)', background: 'var(--sb-bg-deep)', borderInlineEnd: '1px solid rgba(var(--sb-ink), 0.06)', boxShadow: '0 0 60px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))', touchAction: 'pan-y', willChange: 'transform' } }, [\n                            // Explicit close button \u2014 the drawer's own header only has a\n                            // \"collapse\" chevron (a desktop-rail action), so on mobile there was\n                            // no obvious way to dismiss it. This X closes the drawer reliably.\n                            h('button', { key: 'x', onClick: onCloseDrawer, title: t('chat.closeMenu'), 'aria-label': t('chat.closeMenu'), style: { position: 'absolute', top: 'calc(15px + var(--sb-safe-top, 0px))', insetInlineEnd: '13px', zIndex: 2, width: '34px', height: '34px', borderRadius: '9px', display: 'grid', placeItems: 'center', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-4)', cursor: 'pointer' } }, h('i', { className: 'fas fa-xmark', style: { fontSize: '16px' } })),\n                            expandedInner\n                        ]))\n                    ]);\n                };\n\n                // Main Enhanced Application Component\n                const EnhancedSecureP2PChat = () => {\n\n                    // ============================================\n                    // MULTI-SESSION REGISTRY\n                    // Each conversation is an independent session with its OWN\n                    // EnhancedSecureWebRTCManager (full key/ratchet/SAS isolation). The reducer\n                    // holds serializable per-session state; non-serializable objects (managers,\n                    // notification integrations, offline queues) live in ref-held Maps keyed by\n                    // sessionId and are NEVER shared between sessions. sessionId is local-only.\n                    // ============================================\n                    const [sessionsState, dispatch] = React.useReducer(sessionsReducer, undefined, createInitialState);\n                    const activeSessionId = sessionsState.activeSessionId;\n                    const activeIdRef = React.useRef(null);\n                    activeIdRef.current = activeSessionId;\n                    const active = activeSessionId ? sessionsState.sessions[activeSessionId] : null;\n                    const EMPTY_ARR = React.useRef([]).current;\n\n                    const managersRef = React.useRef(new Map());      // id -> EnhancedSecureWebRTCManager\n                    const integrationsRef = React.useRef(new Map());  // id -> NotificationIntegration\n                    const queuesRef = React.useRef(new Map());        // id -> { incoming:[], outgoing:[] }\n                    // id -> last status seen from the manager. Used to spot the\n                    // reconnecting \u2192 connected edge (a repaired P2P path) without\n                    // going through React state, which manager callbacks can't read.\n                    const statusRef = React.useRef(new Map());\n\n                    // ============================================\n                    // GROUPS (v6.0)\n                    //\n                    // A group is an orchestration layer over the pairwise sessions above: it\n                    // owns no transport and no ratchet, and every group frame leaves through\n                    // an ordinary, already-verified 1:1 channel. The runtime half of a group \u2014\n                    // its ECDSA identity key, the running safety-code ceremony, the imported\n                    // member keys \u2014 lives in groupRuntimesRef and NEVER in the reducer, for the\n                    // same reason the WebRTC managers do not: a reducer clones what it holds.\n                    // ============================================\n                    const [groupsState, groupsDispatch] = React.useReducer(groupsReducer, undefined, createInitialGroupState);\n                    const groupRuntimesRef = React.useRef(new Map()); // gid -> GroupSession\n                    const activeGroupId = groupsState.activeGroupId;\n                    const activeGroup = activeGroupId ? groupsState.groups[activeGroupId] : null;\n                    const activeGroupIdRef = React.useRef(null);\n                    activeGroupIdRef.current = activeGroupId;\n\n                    const [groupInput, setGroupInput] = React.useState('');\n                    const [showCreateGroup, setShowCreateGroup] = React.useState(false);\n                    const [showGroupCode, setShowGroupCode] = React.useState(false);\n                    const [pendingInvite, setPendingInvite] = React.useState(null);\n                    const [groupError, setGroupError] = React.useState(null);\n                    const [showAddMembers, setShowAddMembers] = React.useState(false);\n                    const groupScrollRef = React.useRef(null);\n\n                    // ---- Groups: calls ----\n                    //\n                    // Two pieces of state, deliberately separate. `groupCallState` is what\n                    // the GROUP says \u2014 who opened a call, who is in it \u2014 and it arrives as\n                    // signed frames that reach members we have no direct link to. `groupCallMedia`\n                    // is what THIS DEVICE has actually managed to connect, leg by leg, and it\n                    // can never be better than the mesh underneath it. Rendering them from one\n                    // object would mean either hiding a member the group can see or claiming a\n                    // connection this device does not have.\n                    const [groupCallState, setGroupCallState] = React.useState({}); // gid -> snapshot|null\n                    const [groupCallMediaState, setGroupCallMediaState] = React.useState({});\n                    /** gid -> GroupCallMedia. Held in a ref: it owns a live capture, not state. */\n                    const groupCallMediaRef = React.useRef(new Map());\n                    /** gid -> the call id this device declined, so a dismissed ring stays gone. */\n                    const [dismissedCalls, setDismissedCalls] = React.useState({});\n                    /** gid:callId already badged, so a badge is raised once per call, not per join. */\n                    const announcedCallsRef = React.useRef(new Set());\n\n                    /**\n                     * Put group frames on the wire, paced and serialised per session.\n                     *\n                     * They ride sendMessage \u2014 the same authenticated, ratcheted path chat text\n                     * takes \u2014 so a group frame inherits the session's encryption, replay\n                     * protection and verification gate without a new branch in the transport.\n                     * The receiving side lifts them back out in handleMessage before anything\n                     * reaches a 1:1 transcript. See src/group/groupSender.js for why the pacing\n                     * is not optional.\n                     */\n                    /**\n                     * Connections a group built for itself, by member.\n                     *\n                     * Deliberately NOT in managersRef and NOT in sessionsStore. A mesh link is\n                     * not a chat: it has no transcript, no sidebar row, no file transfers and\n                     * nothing the user opens. Putting it in the session registry would give the\n                     * user seven new \"chats\" the moment a group of eight forms, and every piece\n                     * of chat machinery \u2014 unread badges, presence, the last-session guard \u2014\n                     * would start treating a routing detail as a conversation.\n                     *\n                     * meshSessionId -> { manager, gid, fp, sessionId }\n                     */\n                    const meshLinksRef = React.useRef(new Map());\n\n                    /**\n                     * Who a group could not reach the last time we said so, by group id.\n                     *\n                     * Kept so the \"somebody is offline\" notice is posted when the situation\n                     * changes rather than under every message it affects.\n                     */\n                    const lastUnreachableRef = React.useRef(new Map());\n\n                    const sendGroupFrame = React.useMemo(() => createGroupSender({\n                        // A group frame leaves over whichever kind of link carries that member:\n                        // an ordinary 1:1 chat, or a connection the group dialled itself.\n                        getManager: (sessionId) => managersRef.current.get(sessionId)\n                            || meshLinksRef.current.get(sessionId)?.manager\n                            || null\n                    }), []);\n\n                    const buildGroupMessage = (body, type, extra = {}) => ({\n                        id: Date.now() + Math.random(),\n                        message: body,\n                        type,\n                        timestamp: Date.now(),\n                        ...extra\n                    });\n\n                    /** GroupSession events -> reducer. One emitter per group, bound to its id. */\n                    const groupEmitter = React.useCallback((gid) => (event, payload = {}) => {\n                        switch (event) {\n                            case 'phase':\n                                groupsDispatch({ type: GA.SET_PHASE, id: gid, phase: payload.phase });\n                                break;\n                            case 'members':\n                                groupsDispatch({ type: GA.SET_MEMBERS, id: gid, members: payload.members, epoch: payload.epoch });\n                                // A member whose direct link only just came up can now carry\n                                // media. Nothing about the call roster changed, so this is the\n                                // only event that tells us to build the leg.\n                                syncGroupCallMediaRef.current(gid, null);\n                                break;\n                            case 'roster':\n                                groupsDispatch({ type: GA.RENAME, id: gid, name: payload.name });\n                                break;\n                            case 'sas':\n                                groupsDispatch({ type: GA.SET_SAS, id: gid, code: payload.code });\n                                // A code always needs a human, and the group is blocked until it\n                                // gets one \u2014 so bring that group forward rather than leaving the\n                                // digits behind a button. Activating it here also keeps the modal\n                                // pointed at the right group: the ceremony finishes in a run of\n                                // microtasks that outpaces React's re-render, so a ref updated\n                                // during render is still null at this point and cannot be used to\n                                // decide whether this group is the one on screen.\n                                groupsDispatch({ type: GA.SET_ACTIVE_GROUP, id: gid });\n                                setShowGroupCode(true);\n                                break;\n                            case 'confirmed':\n                                groupsDispatch({ type: GA.CONFIRM_SAS, id: gid });\n                                break;\n                            case 'call':\n                                setGroupCallState((current) => ({ ...current, [gid]: payload.call }));\n                                // The media layer follows the roster: a member who just joined\n                                // needs a leg, one who left needs theirs torn down, and a member\n                                // whose direct link only just came up needs one built now.\n                                syncGroupCallMediaRef.current(gid, payload.call);\n                                if (payload.call && !payload.call.joined && gid !== activeGroupIdRef.current) {\n                                    // A call the user cannot see is still a call: badge the group\n                                    // rather than let it ring in a window nobody has open. Once\n                                    // per call \u2014 every later join and leave emits this event too,\n                                    // and badging on each would count the room, not the call.\n                                    const token = `${gid}:${payload.call.callId}`;\n                                    if (!announcedCallsRef.current.has(token)) {\n                                        announcedCallsRef.current.add(token);\n                                        groupsDispatch({ type: GA.INCREMENT_UNREAD, id: gid });\n                                    }\n                                }\n                                break;\n                            case 'message':\n                                groupsDispatch({\n                                    type: GA.ADD_MESSAGE, id: gid,\n                                    message: buildGroupMessage(payload.body, 'received', {\n                                        senderName: payload.name, senderFp: payload.fp, timestamp: payload.ts,\n                                        relayed: payload.relayed === true\n                                    })\n                                });\n                                if (gid !== activeGroupIdRef.current) {\n                                    groupsDispatch({ type: GA.INCREMENT_UNREAD, id: gid });\n                                }\n                                break;\n                            case 'ended':\n                                // The group is over \u2014 the admin left, or we are the last one\n                                // in it. Remove it instead of leaving a chat nobody can send\n                                // to, which would also keep occupying its members.\n                                destroyGroupRef.current(gid, { announce: false });\n                                break;\n                            case 'add_failed':\n                                // Nothing changed \u2014 the group is exactly as it was, so this is\n                                // a notice rather than an error state.\n                                groupsDispatch({\n                                    type: GA.ADD_MESSAGE, id: gid,\n                                    message: buildGroupMessage(t('err.nobodyAccepted'), 'system')\n                                });\n                                break;\n                            case 'left':\n                                groupsDispatch({\n                                    type: GA.ADD_MESSAGE, id: gid,\n                                    message: buildGroupMessage(`${payload.name} left the group.`, 'system')\n                                });\n                                break;\n                            case 'inconsistency':\n                                // A member sent two different bodies under one sequence number.\n                                // Both signatures are valid, so this is provable rather than\n                                // suspected \u2014 say so in the transcript where everyone can see it.\n                                groupsDispatch({\n                                    type: GA.ADD_MESSAGE, id: gid,\n                                    message: buildGroupMessage(\n                                        `${payload.name} sent conflicting messages to different members. That message was discarded.`,\n                                        'system'\n                                    )\n                                });\n                                break;\n                            case 'error':\n                                groupsDispatch({ type: GA.SET_ERROR, id: gid, error: payload.error });\n                                break;\n                            default:\n                                break;\n                        }\n                    }, []);\n\n                    /**\n                     * Route an inbound group frame.\n                     *\n                     * A frame for a group we do not have is dropped \u2014 with one exception, which\n                     * is how anyone ever joins: an invitation is surfaced to the user, and only\n                     * their acceptance creates the group. Nothing arriving on the wire may\n                     * create group state on its own.\n                     */\n                    const handleGroupFrame = React.useCallback((sessionId, frame) => {\n                        const runtime = groupRuntimesRef.current.get(frame.gid);\n                        if (!runtime) {\n                            if (groupFrameType(frame) === GROUP_FRAMES.INVITE) {\n                                let invite = null;\n                                try { invite = decodeEnvelope(frame); } catch (_) { return; }\n                                setPendingInvite((current) => current || {\n                                    gid: invite.gid,\n                                    name: String(invite.name || 'Group').slice(0, GROUP_LIMITS.MAX_NAME_BYTES),\n                                    frame: invite,\n                                    sessionId\n                                });\n                            }\n                            return;\n                        }\n                        runtime.handleFrame(sessionId, frame).catch((error) => {\n                            // A frame that fails validation is the group's business, not the\n                            // 1:1 chat's: it never reaches the transcript either way.\n                            //\n                            // An error with no code of its own is not one of ours \u2014 a transport\n                            // rejection, a WebCrypto failure \u2014 and collapsing those to a bare\n                            // \"frame_rejected\" threw away the only clue about what happened.\n                            // Keep the message.\n                            const reason = error?.code\n                                || (error?.message ? `frame_rejected: ${String(error.message).slice(0, 120)}` : 'frame_rejected');\n                            groupsDispatch({ type: GA.SET_ERROR, id: frame.gid, error: reason });\n                        });\n                    }, []);\n                    const handleGroupFrameRef = React.useRef(handleGroupFrame);\n                    handleGroupFrameRef.current = handleGroupFrame;\n\n                    /** Mirror a pairwise link's health onto every group that routes through it. */\n                    const syncGroupLinks = React.useCallback((sessionId, connected) => {\n                        for (const runtime of groupRuntimesRef.current.values()) {\n                            try { runtime.setSessionState(sessionId, connected); } catch (_) {}\n                        }\n                    }, []);\n                    const syncGroupLinksRef = React.useRef(syncGroupLinks);\n                    syncGroupLinksRef.current = syncGroupLinks;\n\n                    // Active-session VIEW. The rest of the component (and the child setup/chat\n                    // components) read these names unchanged; the setters dispatch to the active\n                    // session read from activeIdRef at call time, so even memoized callbacks stay\n                    // correct across session switches.\n                    const dispatchActive = React.useCallback((build) => {\n                        const id = activeIdRef.current; if (!id) return;\n                        dispatch(build(id));\n                    }, []);\n\n                    const messages = active ? active.messages : EMPTY_ARR;\n                    const setMessages = React.useCallback((updaterOrArr) => {\n                        const id = activeIdRef.current; if (!id) return;\n                        if (typeof updaterOrArr === 'function') dispatch({ type: SA.SET_MESSAGES, id, updater: updaterOrArr });\n                        else dispatch({ type: SA.SET_MESSAGES, id, messages: updaterOrArr });\n                    }, []);\n\n                    const connectionStatus = active ? active.status : 'disconnected';\n                    const setConnectionStatus = React.useCallback((status) => dispatchActive((id) => ({ type: SA.SET_STATUS, id, status })), [dispatchActive]);\n\n                    const keyFingerprint = active ? active.keyFingerprint : '';\n                    const setKeyFingerprint = React.useCallback((fingerprint) => dispatchActive((id) => ({ type: SA.SET_FINGERPRINT, id, fingerprint })), [dispatchActive]);\n\n                    const verificationCode = active ? active.verificationCode : '';\n                    const setVerificationCode = React.useCallback((code) => dispatchActive((id) => ({ type: SA.SET_VERIFICATION, id, code })), [dispatchActive]);\n\n                    const isVerified = active ? active.sas.isVerified : false;\n                    const setIsVerified = React.useCallback((v) => dispatchActive((id) => ({ type: SA.SET_SAS, id, sas: { isVerified: !!v } })), [dispatchActive]);\n                    const localVerificationConfirmed = active ? active.sas.localConfirmed : false;\n                    const setLocalVerificationConfirmed = React.useCallback((v) => dispatchActive((id) => ({ type: SA.SET_SAS, id, sas: { localConfirmed: !!v } })), [dispatchActive]);\n                    const remoteVerificationConfirmed = active ? active.sas.remoteConfirmed : false;\n                    const setRemoteVerificationConfirmed = React.useCallback((v) => dispatchActive((id) => ({ type: SA.SET_SAS, id, sas: { remoteConfirmed: !!v } })), [dispatchActive]);\n                    const bothVerificationsConfirmed = active ? active.sas.bothConfirmed : false;\n                    const setBothVerificationsConfirmed = React.useCallback((v) => dispatchActive((id) => ({ type: SA.SET_SAS, id, sas: { bothConfirmed: !!v } })), [dispatchActive]);\n\n                    const pendingIncomingFiles = active ? active.pendingIncomingFiles : EMPTY_ARR;\n                    const setPendingIncomingFiles = React.useCallback((updaterOrArr) => {\n                        const id = activeIdRef.current; if (!id) return;\n                        if (typeof updaterOrArr === 'function') dispatch({ type: SA.SET_PENDING_FILES, id, updater: updaterOrArr });\n                        else dispatch({ type: SA.SET_PENDING_FILES, id, files: updaterOrArr });\n                    }, []);\n\n                    // Per-session offer/answer setup flow (preserved when switching chats).\n                    const setupField = (name, fallback) => (active ? active.setup[name] : fallback);\n                    const setSetupField = (name) => React.useCallback((value) => dispatchActive((id) => ({ type: SA.PATCH_SETUP, id, patch: { [name]: value } })), [dispatchActive]);\n                    const offerData = setupField('offerData', '');\n                    const setOfferData = setSetupField('offerData');\n                    const answerData = setupField('answerData', '');\n                    const setAnswerData = setSetupField('answerData');\n                    const offerInput = setupField('offerInput', '');\n                    const setOfferInput = setSetupField('offerInput');\n                    const answerInput = setupField('answerInput', '');\n                    const setAnswerInput = setSetupField('answerInput');\n                    const showOfferStep = setupField('showOfferStep', false);\n                    const setShowOfferStep = setSetupField('showOfferStep');\n                    const showAnswerStep = setupField('showAnswerStep', false);\n                    const setShowAnswerStep = setSetupField('showAnswerStep');\n                    const showVerification = setupField('showVerification', false);\n                    const setShowVerification = setSetupField('showVerification');\n                    const showQRCode = setupField('showQRCode', false);\n                    const setShowQRCode = setSetupField('showQRCode');\n                    const qrCodeUrl = setupField('qrCodeUrl', '');\n                    const setQrCodeUrl = setSetupField('qrCodeUrl');\n                    const isGeneratingKeys = setupField('isGeneratingKeys', false);\n                    const setIsGeneratingKeys = setSetupField('isGeneratingKeys');\n\n                    // Accessor over the ACTIVE session's manager / notification integration.\n                    // Existing `webrtcManagerRef.current.X()` call sites keep working against the\n                    // active session; per-session callbacks use their own captured manager instead.\n                    const webrtcManagerRef = React.useMemo(() => ({\n                        get current() { return managersRef.current.get(activeIdRef.current) || null; },\n                        set current(v) {\n                            const id = activeIdRef.current; if (!id) return;\n                            if (v) managersRef.current.set(id, v); else managersRef.current.delete(id);\n                        }\n                    }), []);\n                    const notificationIntegrationRef = React.useMemo(() => ({\n                        get current() { return integrationsRef.current.get(activeIdRef.current) || null; },\n                        set current(v) {\n                            const id = activeIdRef.current; if (!id) return;\n                            if (v) integrationsRef.current.set(id, v); else integrationsRef.current.delete(id);\n                        }\n                    }), []);\n\n                    // ---- Presence / availability ----\n                    // My status is broadcast E2E over each connected session's data channel\n                    // (sendSystemMessage) and never stored on a server. 'invisible' goes on the\n                    // wire as 'offline' so peers cannot tell. myStatusRef lets the per-session\n                    // callbacks (captured at create time) read the current status.\n                    const [myStatus, setMyStatusState] = React.useState(() => {\n                        try { return localStorage.getItem('securebit_my_status') || 'available'; } catch { return 'available'; }\n                    });\n                    const myStatusRef = React.useRef(myStatus);\n                    myStatusRef.current = myStatus;\n                    const wirePresence = (s) => (s === 'invisible' ? 'offline' : s);\n                    // Presence travels as a normal ENCRYPTED chat message (type 'message') \u2014 that is\n                    // the only inbound path the manager delivers to onMessage; unknown raw system\n                    // types are dropped. handleMessage recognises the {type:'presence'} payload and\n                    // consumes it without displaying it.\n                    const sendPresenceTo = React.useCallback((mgr, s) => {\n                        if (!mgr || typeof mgr.sendMessage !== 'function') return;\n                        try {\n                            if (mgr.isConnected && mgr.isConnected()) {\n                                const p = mgr.sendMessage(JSON.stringify({ type: 'presence', status: wirePresence(s) }));\n                                if (p && typeof p.catch === 'function') p.catch(() => {});\n                            }\n                        } catch (_) {}\n                    }, []);\n                    const setMyStatus = React.useCallback((key) => {\n                        setMyStatusState(key);\n                        try { localStorage.setItem('securebit_my_status', key); } catch {}\n                        for (const mgr of managersRef.current.values()) sendPresenceTo(mgr, key);\n                    }, [sendPresenceTo]);\n\n                    // Secure chat extras: per-message send modes + 1s tick for countdowns.\n                    const [codeMode, setCodeMode] = React.useState(false);\n                    const [viewOnceMode, setViewOnceMode] = React.useState(false);\n                    const [viewOnceTtl, setViewOnceTtl] = React.useState(15); // seconds visible after the peer opens it\n                    const [disappearTtl, setDisappearTtl] = React.useState(0); // seconds; 0 = off (sticky)\n                    const [nowTick, setNowTick] = React.useState(() => Date.now());\n                    // connectionStatus \u2192 per-session status (active-session view, above).\n                    // Offline awareness \u2014 tracks the real online/offline events (which is\n                    // also what a console-simulated `dispatchEvent(new Event('offline'))`\n                    // fires, even when navigator.onLine stays true).\n                    const [isOffline, setIsOffline] = React.useState(typeof navigator !== 'undefined' && navigator.onLine === false);\n                    // Ref mirror so manager callbacks (which close over stale state) always\n                    // read the current offline status. Two queues implement store-and-forward\n                    // over the still-live P2P channel: outgoing waits until WE reconnect,\n                    // incoming waits until WE reconnect before being shown/acked.\n                    const offlineRef = React.useRef(isOffline);\n                    // Offline store-and-forward queues are now per-session (queuesRef, above).\n                    React.useEffect(() => { offlineRef.current = isOffline; }, [isOffline]);\n                    React.useEffect(() => {\n                        const goOffline = () => setIsOffline(true);\n                        const goOnline = () => setIsOffline(false);\n                        // A frozen tab can miss the 'online' edge entirely and would then\n                        // read as offline for the rest of its life. Re-read the real value\n                        // whenever the tab comes back, so the header stops claiming there\n                        // is no network long after there is.\n                        const resync = () => {\n                            if (document.visibilityState !== 'visible') return;\n                            setIsOffline(navigator.onLine === false);\n                        };\n                        window.addEventListener('offline', goOffline);\n                        window.addEventListener('online', goOnline);\n                        document.addEventListener('visibilitychange', resync);\n                        return () => {\n                            window.removeEventListener('offline', goOffline);\n                            window.removeEventListener('online', goOnline);\n                            document.removeEventListener('visibilitychange', resync);\n                        };\n                    }, []);\n\n                    // Keyboard-aware viewport height. iOS Safari does not shrink the layout\n                    // viewport when the on-screen keyboard opens, so a fixed 100dvh shell leaves\n                    // a grey gap under the composer. Mirror the VisualViewport height into a CSS\n                    // var (--sb-vh) that the app shell uses, so the layout tracks the keyboard.\n                    React.useEffect(() => {\n                        const vv = (typeof window !== 'undefined') ? window.visualViewport : null;\n                        const root = document.documentElement;\n                        let lastH = -1, lastInset = '', lastY = -1, raf = 0;\n\n                        // HEIGHT changes only on resize. It deliberately does NOT follow\n                        // `scroll`: on iOS the visual viewport also moves while the URL bar\n                        // collapses and during rubber-banding, so resizing the shell on every\n                        // scroll event made the whole layout twitch under the finger \u2014 which\n                        // is most of what \"the chat layout jumps\" was.\n                        const applyHeight = () => {\n                            const h = Math.round(vv ? vv.height : (window.innerHeight || 0));\n                            if (h && h !== lastH) { lastH = h; root.style.setProperty('--sb-vh', h + 'px'); }\n                        };\n                        // True while something the browser drew \u2014 in practice the on-screen\n                        // keyboard \u2014 is covering a large part of the window.\n                        const keyboardUp = () => !!vv && (window.innerHeight - vv.height) > 120;\n                        // The home-indicator inset must collapse while the keyboard is up.\n                        // Once the shell has shrunk to the visible area, that padding is no\n                        // longer clearing the indicator \u2014 it is just dead space between the\n                        // composer and the keyboard.\n                        const applyInset = () => {\n                            const covered = keyboardUp();\n                            const v = covered ? '0px' : 'env(safe-area-inset-bottom, 0px)';\n                            if (v !== lastInset) { lastInset = v; root.style.setProperty('--sb-safe-bottom', v); }\n                        };\n                        // WHERE the visible rect is, as opposed to how tall it is. iOS pans\n                        // the visual viewport down inside the layout viewport to reveal a\n                        // focused field, and a shell that only knows its height is left\n                        // behind \u2014 off the top of the screen, which is the bug this fixes.\n                        // Only a transform follows this (see --sb-vv-top in the shell rule):\n                        // it is the half cheap enough to run on every scroll event, and rAF\n                        // collapses a burst of them into one write per frame.\n                        //\n                        // The one case that must NOT be followed is a pinch-zoomed page,\n                        // which pans too \u2014 chasing that drags the shell out from under\n                        // whoever is reading. `scale` says so directly. An earlier version\n                        // of this guard asked instead whether the window was much taller\n                        // than the visual viewport, i.e. \"is a keyboard covering us\", which\n                        // assumes iOS never shrinks the layout viewport \u2014 true until it\n                        // isn't, and when it isn't the guard silently turns the whole fix\n                        // off. offsetTop is only ever non-zero when something moved us, so\n                        // it needs no permission to be believed.\n                        const applyOffset = () => {\n                            const zoomed = !!vv && vv.scale > 1.01;\n                            const y = (vv && !zoomed) ? Math.max(0, Math.round(vv.offsetTop)) : 0;\n                            if (y !== lastY) { lastY = y; root.style.setProperty('--sb-vv-top', y + 'px'); }\n                        };\n                        const apply = () => { applyHeight(); applyInset(); applyOffset(); };\n                        const onPan = () => {\n                            if (raf) return;\n                            raf = requestAnimationFrame(() => { raf = 0; applyOffset(); });\n                        };\n\n                        // Focus is the other notice we get, and on iOS 26 it is the more\n                        // reliable one: the pan that reveals a focused field can land after\n                        // the last resize event, and on dismissal the viewport is documented\n                        // not to settle back for a moment. So the offset is re-read a few\n                        // times across the keyboard's own animation rather than once.\n                        const timers = [];\n                        const resettle = () => {\n                            applyOffset();\n                            [60, 180, 360, 600].forEach((ms) => timers.push(setTimeout(() => { applyHeight(); applyInset(); applyOffset(); }, ms)));\n                        };\n\n                        apply();\n                        if (vv) { vv.addEventListener('resize', apply); vv.addEventListener('scroll', onPan); }\n                        window.addEventListener('resize', apply);\n                        window.addEventListener('orientationchange', apply);\n                        window.addEventListener('scroll', onPan, { passive: true });\n                        document.addEventListener('focusin', resettle);\n                        document.addEventListener('focusout', resettle);\n                        const stopDebug = startViewportDebug(vv);\n                        return () => {\n                            if (raf) cancelAnimationFrame(raf);\n                            timers.forEach(clearTimeout);\n                            if (vv) { vv.removeEventListener('resize', apply); vv.removeEventListener('scroll', onPan); }\n                            window.removeEventListener('resize', apply);\n                            window.removeEventListener('orientationchange', apply);\n                            window.removeEventListener('scroll', onPan);\n                            document.removeEventListener('focusin', resettle);\n                            document.removeEventListener('focusout', resettle);\n                            if (stopDebug) stopDebug();\n                        };\n                    }, []);\n                    const [relayOnlyMode, setRelayOnlyMode] = React.useState(() => {\n                        try { return localStorage.getItem('securebit_relay_only_mode') === 'true'; } catch { return false; }\n                    });\n                    // Custom ICE (STUN/TURN) servers \u2014 advanced network settings.\n                    const [customIceServers, setCustomIceServers] = React.useState(null); // null => use public defaults\n                    const [iceServersText, setIceServersText] = React.useState('');\n                    const [iceSettingsPersisted, setIceSettingsPersisted] = React.useState(false);\n                    const [showIceSettings, setShowIceSettings] = React.useState(false);\n\n                    // Load any previously saved (encrypted) custom ICE settings on mount.\n                    React.useEffect(() => {\n                        let cancelled = false;\n                        loadIceSettings().then((saved) => {\n                            if (cancelled || !saved) return;\n                            if (Array.isArray(saved.servers) && saved.servers.length > 0) {\n                                setCustomIceServers(saved.servers);\n                                setIceServersText(JSON.stringify(saved.servers, null, 2));\n                            }\n                            if (saved.privacyMode === 'relay-only') {\n                                setRelayOnlyMode(true);\n                            }\n                            setIceSettingsPersisted(true);\n                        }).catch(() => { /* fail closed: keep defaults */ });\n                        return () => { cancelled = true; };\n                    }, []);\n\n                    // Global entry point: the header gear dispatches this event.\n                    React.useEffect(() => {\n                        const open = () => setShowIceSettings(true);\n                        window.addEventListener('securebit:open-network-settings', open);\n                        return () => window.removeEventListener('securebit:open-network-settings', open);\n                    }, []);\n\n                    const handleApplyIceSettings = React.useCallback((next, persist) => {\n                        const servers = next.useCustom && Array.isArray(next.servers) ? next.servers : null;\n                        setCustomIceServers(servers && servers.length ? servers : null);\n                        setIceServersText(next.serversText || '');\n                        setRelayOnlyMode(next.privacyMode === 'relay-only');\n                        setShowIceSettings(false);\n                        if (persist) {\n                            setIceSettingsPersisted(true);\n                            saveIceSettings({ servers: servers || [], privacyMode: next.privacyMode }).catch(() => { /* surfaced as no-op */ });\n                        } else if (iceSettingsPersisted) {\n                            // User turned persistence off \u2014 remove the stored copy.\n                            setIceSettingsPersisted(false);\n                            clearIceSettings().catch(() => {});\n                        }\n                    }, [iceSettingsPersisted]);\n\n                    const handleForgetIceSettings = React.useCallback(async () => {\n                        await clearIceSettings().catch(() => {});\n                        setIceSettingsPersisted(false);\n                        setCustomIceServers(null);\n                        setIceServersText('');\n                    }, []);\n                    \n                    // Moved scrollToBottom logic to be available globally\n                    const [messageInput, setMessageInput] = React.useState('');\n                    // offerData/answerData/offerInput/answerInput, showOfferStep/showAnswerStep,\n                    // showVerification/showQRCode/qrCodeUrl, isGeneratingKeys \u2192 per-session setup\n                    // slice (declared in the active-session view block above).\n                    const [showQRScanner, setShowQRScanner] = React.useState(false);\n                    const [showQRScannerModal, setShowQRScannerModal] = React.useState(false);\n                    // The QR bundle is fetched on idle after mount (see app-boot.js), so on a\n                    // cold load it can still be in flight when someone opens the scanner. This\n                    // flips when it lands and re-runs the effect that starts the camera;\n                    // without it, opening the modal early left a permanently black viewfinder.\n                    const [qrBundleReady, setQrBundleReady] = React.useState(() => typeof window !== 'undefined' && !!window.Html5Qrcode);\n                    React.useEffect(() => {\n                        if (qrBundleReady) return undefined;\n                        const onReady = () => setQrBundleReady(true);\n                        window.addEventListener('securebit:qr-ready', onReady);\n                        // The event may have fired before this component mounted.\n                        if (window.Html5Qrcode) setQrBundleReady(true);\n                        return () => window.removeEventListener('securebit:qr-ready', onReady);\n                    }, [qrBundleReady]);\n\n                    // isVerified + mutual-verification flags \u2192 per-session SAS slice (above).\n                    const [securityLevel, setSecurityLevel] = React.useState(null);\n                    const [sessionTimeLeft, setSessionTimeLeft] = React.useState(0);\n\n                    // PAKE password states removed - using SAS verification instead\n\n                    // Session state - all security features enabled by default\n                    const [pendingSession, setPendingSession] = React.useState(null);\n\n                    // All security features are enabled by default - no payment required\n                    // pendingIncomingFiles \u2192 per-session slice (above).\n\n\n\n                    // ============================================\n                    // CENTRALIZED CONNECTION STATE MANAGEMENT\n                    // ============================================\n                    \n                    const [connectionState, setConnectionState] = React.useState({\n                        status: 'disconnected',\n                        hasActiveAnswer: false,\n                        answerCreatedAt: null,\n                        isUserInitiatedDisconnect: false\n                    });\n                    \n                    // Centralized connection state handler\n                    const updateConnectionState = (newState, options = {}) => {\n                        const { preserveAnswer = false, isUserAction = false } = options;\n                        \n                        setConnectionState(prev => ({\n                            ...prev,\n                            ...newState,\n                            isUserInitiatedDisconnect: isUserAction,\n                            hasActiveAnswer: preserveAnswer ? prev.hasActiveAnswer : false,\n                            answerCreatedAt: preserveAnswer ? prev.answerCreatedAt : null\n                        }));\n                    };\n                    \n                    // Check if we should preserve answer data\n                    const shouldPreserveAnswerData = () => {\n                        const hasAnswerData = !!answerData || \n                                            (answerInput && typeof answerInput === 'string' && answerInput.trim().length > 0);\n\n                        const hasAnswerQR = qrCodeUrl && typeof qrCodeUrl === 'string' && qrCodeUrl.trim().length > 0;\n                        \n                        const shouldPreserve = (connectionState.hasActiveAnswer && \n                               !connectionState.isUserInitiatedDisconnect) ||\n                               (hasAnswerData && \n                               !connectionState.isUserInitiatedDisconnect) ||\n                               (hasAnswerQR && \n                               !connectionState.isUserInitiatedDisconnect);\n                        \n                        \n                        return shouldPreserve;\n                    };\n                    \n                    // Mark answer as created\n                    const markAnswerCreated = () => {\n                        updateConnectionState({\n                            hasActiveAnswer: true,\n                            answerCreatedAt: Date.now()\n                        });\n                    };\n                    \n                    // webrtcManagerRef / notificationIntegrationRef \u2192 accessors over the active\n                    // session's manager / integration (active-session view block, above).\n\n                    // Development-only debug helpers. Production never exposes\n                    // manager internals or cleanup controls on `window`.\n                    React.useEffect(() => {\n                        return installDebugWindowHooks({\n                            targetWindow: window,\n                            webrtcManagerRef,\n                            onClearData: handleClearData\n                        });\n                    }, []);\n\n                    // Our relay's credential is minted by the site and expires daily;\n                    // fetch one now and keep it renewed. See network/turnCredentials.js.\n                    React.useEffect(() => { startTurnCredentialRefresh(); }, []);\n\n                    const addMessageWithAutoScroll = React.useCallback((message, type, opts = {}) => {\n                        const newId = Date.now() + Math.random();\n                        const newMessage = {\n                            message,\n                            type,\n                            id: newId,\n                            timestamp: (typeof opts.timestamp === 'number') ? opts.timestamp : Date.now(),\n                            mid: opts.mid,\n                            status: opts.status,            // WhatsApp-style: sending | sent | delivered | failed\n                            viewOnce: opts.viewOnce === true,\n                            viewOnceTtl: (typeof opts.viewOnceTtl === 'number') ? opts.viewOnceTtl : 15,\n                            expiresAt: (typeof opts.expiresAt === 'number') ? opts.expiresAt : undefined,\n                            voice: opts.voice || undefined,\n                            fileId: opts.fileId || undefined\n                        };\n\n                        setMessages(prev => {\n                            const updated = [...prev, newMessage];\n                            \n                            setTimeout(() => {\n                                if (chatMessagesRef?.current) {\n                                    const container = chatMessagesRef.current;\n                                    try {\n                                        const { scrollTop, scrollHeight, clientHeight } = container;\n                                        const isNearBottom = scrollHeight - scrollTop - clientHeight < 100;\n                                        \n                                        if (isNearBottom || prev.length === 0) {\n                                            requestAnimationFrame(() => {\n                                                if (container && container.scrollTo) {\n                                                    container.scrollTo({\n                                                        top: container.scrollHeight,\n                                                        behavior: scrollBehavior()\n                                                    });\n                                                }\n                                            });\n                                        }\n                                    } catch (error) {\n                                        console.warn('Scroll error:', error);\n                                        container.scrollTop = container.scrollHeight;\n                                    }\n                                }\n                            }, 50);\n                            \n                            return updated;\n                        });\n                        return newId;\n                    }, []);\n\n                    // Flip a sent message's delivery state (sending \u2192 sent \u2192 delivered, or failed).\n                    const updateMessageStatus = React.useCallback((mid, status) => {\n                        if (!mid) return;\n                        setMessages(prev => prev.map(m => (String(m.mid) === String(mid) && m.type === 'sent') ? { ...m, status } : m));\n                    }, []);\n\n                    // Shallow-merge a partial into one message (matched by local id), used to\n                    // drive voice-note transfer progress and attach the decrypted audio URL.\n                    const patchMessageById = React.useCallback((messageId, patch) => {\n                        if (messageId == null) return;\n                        setMessages(prev => prev.map(m => (String(m.id) === String(messageId))\n                            ? { ...m, ...(typeof patch === 'function' ? patch(m) : patch) }\n                            : m));\n                    }, []);\n                    // Same, matched by fileId (receiver side, where we don't hold the local id yet).\n                    const patchMessageByFileId = React.useCallback((fileId, patch) => {\n                        if (!fileId) return;\n                        setMessages(prev => prev.map(m => (m.fileId && String(m.fileId) === String(fileId))\n                            ? { ...m, ...(typeof patch === 'function' ? patch(m) : patch) }\n                            : m));\n                    }, []);\n\n                    // Drain ONE session's store-and-forward queues: transmit anything queued\n                    // while the link was down, and surface (and acknowledge) anything that\n                    // arrived meanwhile. Called both when the\n                    // browser regains connectivity and when a single session's P2P path is\n                    // repaired by an ICE restart (the two are independent: one chat can be\n                    // reconnecting while the others are fine).\n                    //\n                    // A send is only attempted while the manager reports a usable channel;\n                    // anything that cannot go out right now is put BACK on the queue in its\n                    // original order rather than being marked failed, so a flush that races\n                    // a still-settling path costs nothing but a retry.\n                    const flushSessionQueue = React.useCallback((id) => {\n                        const q = queuesRef.current.get(id);\n                        if (!q) return;\n                        const mgr = managersRef.current.get(id);\n\n                        const out = q.outgoing; q.outgoing = [];\n                        const deferred = [];\n                        for (const item of out) {\n                            if (!mgr || mgr.isConnected?.() !== true) { deferred.push(item); continue; }\n                            try {\n                                const send = mgr.sendMessage?.(item.outText, item.meta);\n                                if (send && typeof send.then === 'function') {\n                                    send.then(() => dispatch({ type: SA.UPDATE_MESSAGE_STATUS, id, mid: item.mid, status: 'delivered' }))\n                                        .catch(() => dispatch({ type: SA.UPDATE_MESSAGE_STATUS, id, mid: item.mid, status: 'failed' }));\n                                }\n                            } catch (_) {\n                                deferred.push(item);\n                            }\n                        }\n                        // Preserve ordering: deferred items go back ahead of anything queued\n                        // while this flush was running.\n                        if (deferred.length) q.outgoing = deferred.concat(q.outgoing);\n\n                        const inc = q.incoming; q.incoming = [];\n                        if (inc.length > 0) {\n                            dispatch({ type: SA.ADD_MESSAGE, id, message: buildSessionMessage(\n                                `Connection restored \u2014 ${inc.length} message${inc.length === 1 ? '' : 's'} received while you were offline.`,\n                                'notice'\n                            ) });\n                        }\n                        const viewing = id === activeIdRef.current && (typeof document === 'undefined' || document.visibilityState === 'visible');\n                        for (const item of inc) {\n                            dispatch({ type: SA.ADD_MESSAGE, id, message: buildSessionMessage(item.message, item.type, item.opts) });\n                            if (item.opts && item.opts.mid && item.type === 'received') {\n                                if (viewing) { try { mgr?.sendDeliveryReceipt?.(item.opts.mid); } catch (_) {} }\n                                else if (q.pendingReadAcks) q.pendingReadAcks.push(item.opts.mid);\n                            }\n                        }\n                    }, []);\n\n                    // When WE come back online: flush every session.\n                    const flushOfflineQueues = React.useCallback(() => {\n                        for (const id of queuesRef.current.keys()) flushSessionQueue(id);\n                    }, [flushSessionQueue]);\n\n                    React.useEffect(() => {\n                        if (isOffline) return;        // the offline \u2192 online edge, when it arrives\n                        flushOfflineQueues();\n                    }, [isOffline, flushOfflineQueues]);\n\n                    // \u2026but never RELY on that edge. The browser's online event is not\n                    // guaranteed: a tab the OS froze can miss it entirely, and then a\n                    // queue drained only on edges stays full forever \u2014 the bug this\n                    // replaces, where a phone showed one tick on every message it sent\n                    // while happily receiving. Poll instead: whenever a session's channel\n                    // is usable and it has something waiting, drain it. Sessions with\n                    // nothing queued cost a map lookup.\n                    React.useEffect(() => {\n                        const timer = setInterval(() => {\n                            for (const [id, q] of queuesRef.current.entries()) {\n                                if (!q.outgoing.length && !q.incoming.length) continue;\n                                const mgr = managersRef.current.get(id);\n                                if (mgr?.isConnected?.() !== true) continue;\n                                if (mgr?.isReconnecting?.() === true) continue;\n                                flushSessionQueue(id);\n                            }\n                        }, 2000);\n                        return () => clearInterval(timer);\n                    }, [flushSessionQueue]);\n\n                    // Update security level based on real verification\n                    const updateSecurityLevel = React.useCallback(async () => {\n                        if (window.isUpdatingSecurity) {\n                            return;\n                        }\n                        \n                        window.isUpdatingSecurity = true;\n                        \n                        try {\n                            if (webrtcManagerRef.current) {\n                                // All security features are enabled by default - always show MAXIMUM level\n                                setSecurityLevel({\n                                    level: 'MAXIMUM',\n                                    score: 100,\n                                    color: 'green',\n                                    details: t('sec.allEnabled'),\n                                    passedChecks: 10,\n                                    totalChecks: 10,\n                                    isRealData: true\n                                });\n                                \n                                if (window.DEBUG_MODE) {\n                                    const currentLevel = webrtcManagerRef.current.ecdhKeyPair && webrtcManagerRef.current.ecdsaKeyPair \n                                        ? await webrtcManagerRef.current.calculateSecurityLevel()\n                                        : {\n                                            level: 'MAXIMUM',\n                                            score: 100,\n                                            sessionType: 'premium',\n                                            passedChecks: 10,\n                                            totalChecks: 10\n                                        };\n                                }\n                            }\n                        } catch (error) {\n                            console.error('Failed to update security level:', error);\n                            setSecurityLevel({\n                                level: 'ERROR',\n                                score: 0,\n                                color: 'red',\n                                details: t('sas.verificationFailed')\n                            });\n                        } finally {\n                            setTimeout(() => {\n                                window.isUpdatingSecurity = false;\n                            }, 2000);\n                        }\n                    }, []);\n        \n                    // Session time ticker removed - sessions are unlimited\n        \n                    // Sessions are unlimited - no expiration handler needed\n        \n                    // All security features are enabled by default - no demo sessions needed\n                    const chatMessagesRef = React.useRef(null);\n        \n                    // Create scroll function using global helper\n                    const scrollToBottom = createScrollToBottomFunction(chatMessagesRef);\n\n                    React.useEffect(() => {\n                        try { localStorage.setItem('securebit_relay_only_mode', String(relayOnlyMode)); } catch {}\n                        if (webrtcManagerRef.current?._config?.webrtc) {\n                            webrtcManagerRef.current._setRelayOnlyMode(relayOnlyMode);\n                        }\n                    }, [relayOnlyMode]);\n                    \n                    // Auto-scroll when messages change\n                    React.useEffect(() => {\n                        if (messages.length > 0 && chatMessagesRef.current) {\n                            scrollToBottom();\n                            setTimeout(scrollToBottom, 50);\n                            setTimeout(scrollToBottom, 150);\n                        }\n                    }, [messages]);\n\n                    // Disappearing-message clock: tick every second (while ANY session has an\n                    // expiry) and prune past-deadline messages \u2014 independently per session, so\n                    // a background conversation's timers keep running too.\n                    const anyExpiring = sessionsState.order.some((id) => (sessionsState.sessions[id]?.messages || []).some((m) => typeof m.expiresAt === 'number'));\n                    const sessionsStateRef = React.useRef(sessionsState);\n                    sessionsStateRef.current = sessionsState;\n                    React.useEffect(() => {\n                        if (!anyExpiring) return;\n                        // Disappearing messages leave a tombstone (content wiped) instead of vanishing.\n                        const expireFn = (prev) => {\n                            const now = Date.now();\n                            let changed = false;\n                            const next = prev.map((m) => {\n                                if (typeof m.expiresAt === 'number' && m.expiresAt <= now && !m.expired) {\n                                    changed = true;\n                                    return { ...m, expired: true, message: '', expiresAt: undefined };\n                                }\n                                return m;\n                            });\n                            return changed ? next : prev;\n                        };\n                        const interval = setInterval(() => {\n                            const now = Date.now();\n                            setNowTick(now);\n                            const st = sessionsStateRef.current;\n                            for (const id of st.order) {\n                                const msgs = st.sessions[id]?.messages || [];\n                                if (msgs.some((m) => typeof m.expiresAt === 'number' && m.expiresAt <= now && !m.expired)) {\n                                    dispatch({ type: SA.SET_MESSAGES, id, updater: expireFn });\n                                }\n                            }\n                        }, 1000);\n                        return () => clearInterval(interval);\n                    }, [anyExpiring]);\n                    \n                    // PAKE password functions removed - using SAS verification instead\n        \n                    // Build a brand-new, fully-isolated session: its own manager, its own\n                    // id-bound callbacks, its own notification integration and offline queues.\n                    // The callback bodies below are the original single-session handlers; the\n                    // id-bound shadow setters declared here redirect every set*/dispatch into\n                    // THIS session's slice, so nothing leaks into another conversation.\n                    const createSession = (opts = {}) => {\n                        const role = opts.role || 'offer';\n                        const entry = createSessionEntry({ role });\n                        const id = entry.id;\n                        dispatch({ type: SA.CREATE_SESSION, entry, activate: opts.activate !== false });\n                        // pendingReadAcks: mids received while this chat was NOT being viewed; the\n                        // read receipt is held back until the user actually opens the conversation.\n                        queuesRef.current.set(id, { incoming: [], outgoing: [], pendingReadAcks: [] });\n\n                        // --- id-bound shadow setters (override the active-session view names) ---\n                        const setMessages = (u) => {\n                            if (typeof u === 'function') dispatch({ type: SA.SET_MESSAGES, id, updater: u });\n                            else dispatch({ type: SA.SET_MESSAGES, id, messages: u });\n                        };\n                        const addMessageWithAutoScroll = (message, type, opts2 = {}) => {\n                            dispatch({ type: SA.ADD_MESSAGE, id, message: buildSessionMessage(message, type, opts2) });\n                            // Background session received a chat message \u2192 bump its unread badge.\n                            if (type === 'received' && id !== activeIdRef.current) {\n                                dispatch({ type: SA.INCREMENT_UNREAD, id });\n                            }\n                        };\n                        const updateMessageStatus = (mid, status) => { if (mid) dispatch({ type: SA.UPDATE_MESSAGE_STATUS, id, mid, status }); };\n                        // Voice-note helpers: merge a partial into a message by local id or by fileId.\n                        const patchMessageById = (messageId, patch) => { if (messageId != null) dispatch({ type: SA.PATCH_MESSAGE, id, messageId, patch }); };\n                        const patchMessageByFileId = (fileId, patch) => { if (fileId) dispatch({ type: SA.PATCH_MESSAGE, id, fileId, patch }); };\n                        const setConnectionStatus = (status) => dispatch({ type: SA.SET_STATUS, id, status });\n                        const setKeyFingerprint = (fingerprint) => dispatch({ type: SA.SET_FINGERPRINT, id, fingerprint });\n                        const setVerificationCode = (code) => dispatch({ type: SA.SET_VERIFICATION, id, code });\n                        const setIsVerified = (v) => dispatch({ type: SA.SET_SAS, id, sas: { isVerified: !!v } });\n                        const setLocalVerificationConfirmed = (v) => dispatch({ type: SA.SET_SAS, id, sas: { localConfirmed: !!v } });\n                        const setRemoteVerificationConfirmed = (v) => dispatch({ type: SA.SET_SAS, id, sas: { remoteConfirmed: !!v } });\n                        const setBothVerificationsConfirmed = (v) => dispatch({ type: SA.SET_SAS, id, sas: { bothConfirmed: !!v } });\n                        const setShowVerification = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { showVerification: !!v } });\n                        const setShowOfferStep = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { showOfferStep: !!v } });\n                        const setShowAnswerStep = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { showAnswerStep: !!v } });\n                        const setShowQRCode = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { showQRCode: !!v } });\n                        const setQrCodeUrl = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { qrCodeUrl: v } });\n                        const setOfferData = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { offerData: v } });\n                        const setAnswerData = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { answerData: v } });\n                        const setOfferInput = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { offerInput: v } });\n                        const setAnswerInput = (v) => dispatch({ type: SA.PATCH_SETUP, id, patch: { answerInput: v } });\n                        const setPendingIncomingFiles = (u) => {\n                            if (typeof u === 'function') dispatch({ type: SA.SET_PENDING_FILES, id, updater: u });\n                            else dispatch({ type: SA.SET_PENDING_FILES, id, files: u });\n                        };\n                        const sessionQueues = () => queuesRef.current.get(id) || { incoming: [], outgoing: [] };\n\n                        const handleMessage = (message, type, meta) => {\n                            if (typeof message === 'string' && message.trim().startsWith('{')) {\n                                try {\n                                    const parsedMessage = JSON.parse(message);\n                                    // Peer availability update (E2E control message) \u2014 store it for THIS\n                                    // session and never show it in the chat.\n                                    if (parsedMessage.type === 'presence') {\n                                        const st = (parsedMessage.data && parsedMessage.data.status) || parsedMessage.status;\n                                        if (st) dispatch({ type: SA.SET_PEER_PRESENCE, id, presence: st });\n                                        return;\n                                    }\n                                    // Group traffic rides this channel but is never part of the\n                                    // 1:1 conversation. It is lifted out here, before anything\n                                    // can reach the transcript of the chat it travelled over.\n                                    if (isGroupFrame(parsedMessage)) {\n                                        handleGroupFrameRef.current(id, parsedMessage);\n                                        return;\n                                    }\n                                    const blockedTypes = [\n                                        'file_transfer_start',\n                                        'file_transfer_response',\n                                        'file_chunk',\n                                        'chunk_confirmation',\n                                        'file_transfer_complete',\n                                        'file_transfer_error',\n                                        'heartbeat',\n                                        'verification',\n                                        'verification_response',\n                                        'verification_confirmed',\n                                        'verification_both_confirmed',\n                                        'peer_disconnect',\n                                        'key_rotation_signal',\n                                        'key_rotation_ready',\n                                        'security_upgrade',\n                                        'message_delete',\n                                        'message_receipt'\n                                    ];\n                                    if (parsedMessage.type && blockedTypes.includes(parsedMessage.type)) {\n                                        console.log(`Blocked system/file message from chat: ${parsedMessage.type}`);\n                                        return;\n                                    }\n                                    // Defensive unwrap: a plain-message envelope can leak through as\n                                    // raw JSON for some payloads (e.g. fenced code blocks). Show the\n                                    // real text, not {\"type\":\"message\",\"data\":\"```...\"}.\n                                    if (parsedMessage.type === 'message' && typeof parsedMessage.data === 'string') {\n                                        message = parsedMessage.data;\n                                        if (parsedMessage.meta && typeof parsedMessage.meta === 'object') meta = parsedMessage.meta;\n                                    }\n                                } catch (parseError) {\n\n                                }\n                            }\n                            \n                            // Per-message UI metadata from the peer (view-once / disappearing / id).\n                            const opts = {};\n                            if (meta && typeof meta === 'object') {\n                                if (typeof meta.mid === 'string') opts.mid = meta.mid;\n                                if (meta.once === true) {\n                                    opts.viewOnce = true;\n                                    opts.viewOnceTtl = Number.isFinite(meta.onceTtl) ? meta.onceTtl : 15;\n                                }\n                                if (Number.isFinite(meta.ttl) && meta.ttl > 0) {\n                                    opts.expiresAt = Date.now() + meta.ttl * 1000;\n                                }\n                                if (Number.isFinite(meta.ts)) opts.timestamp = meta.ts;\n                            }\n\n                            // If WE are offline, hold the peer's message back: don't show it\n                            // and don't acknowledge it yet, so the sender stays at one check.\n                            // It's surfaced (and acked \u2192 \u2713\u2713) the moment we reconnect.\n                            if (offlineRef.current && type === 'received') {\n                                sessionQueues().incoming.push({ message, type, opts });\n                                return;\n                            }\n\n                            addMessageWithAutoScroll(message, type, opts);\n\n                            // Read receipt: only ack once the user is actually looking at THIS\n                            // conversation (active session + visible tab). Otherwise hold the mid\n                            // back so a message read in a background chat stays \"delivered\" (grey\n                            // \u2713\u2713) on the sender's side \u2014 it flips to green only when this chat is\n                            // opened (see flushReadAcks).\n                            if (opts.mid && type === 'received') {\n                                const beingViewed = id === activeIdRef.current && (typeof document === 'undefined' || document.visibilityState === 'visible');\n                                if (beingViewed) {\n                                    try { manager?.sendDeliveryReceipt?.(opts.mid); } catch (_) {}\n                                } else {\n                                    const q = sessionQueues();\n                                    if (q.pendingReadAcks) q.pendingReadAcks.push(opts.mid);\n                                }\n                            }\n                        };\n\n                        const handleStatusChange = (status) => {\n                            const prevStatus = statusRef.current.get(id);\n                            statusRef.current.set(id, status);\n                            setConnectionStatus(status);\n\n                            // A group routing through this link needs to know whether it is\n                            // usable, so the member strip can show who is actually reachable\n                            // and the router can fall back to a relay for who is not.\n                            syncGroupLinksRef.current(id, status === 'connected' || status === 'verified');\n\n                            // Path repair in progress (ICE restart). The session, its keys and\n                            // its SAS verification all survive, so nothing is reset here \u2014 the\n                            // send path just starts queueing (see `offlineNow` in sendMessage).\n                            if (status === 'reconnecting') return;\n\n                            // Coming back from a repaired path: transmit whatever the user\n                            // sent into the dead channel and surface what was held back.\n                            if (status === 'connected' && prevStatus === 'reconnecting') {\n                                flushSessionQueue(id);\n                            }\n\n                            // Recovery is out of road and there is no manual fallback, so the\n                            // conversation ends here rather than lingering half-alive on screen.\n                            // destroySession wipes the keys with the manager and removes the\n                            // chat and its transcript \u2014 a session whose transport is gone must\n                            // not leave its plaintext sitting in a tab.\n                            if (status === 'recovery_failed') {\n                                setConnectionStatus('disconnected');\n                                if (id === activeIdRef.current) {\n                                    document.dispatchEvent(new CustomEvent('peer-disconnect'));\n                                    document.dispatchEvent(new CustomEvent('disconnected'));\n                                }\n                                // Deferred so the closing notice this session just delivered\n                                // renders before its slice is torn out from under it, and\n                                // skipped while a group still routes through it.\n                                setTimeout(() => {\n                                    if (sessionCarriesGroupMemberRef.current(id)) return;\n                                    destroySession(id);\n                                }, 2500);\n                                return;\n                            }\n\n                            if (status === 'connected') {\n                                document.dispatchEvent(new CustomEvent('new-connection'));\n\n                                // \u041D\u0435 \u0441\u043A\u0440\u044B\u0432\u0430\u0435\u043C \u0432\u0435\u0440\u0438\u0444\u0438\u043A\u0430\u0446\u0438\u044E \u043F\u0440\u0438 'connected' - \u0442\u043E\u043B\u044C\u043A\u043E \u043F\u0440\u0438 'verified'\n                                // setIsVerified(true);\n                                // setShowVerification(false);\n                                if (!window.isUpdatingSecurity) {\n                                    updateSecurityLevel().catch(console.error);\n                                }\n                            } else if (status === 'verifying') {\n                                setShowVerification(true);\n                                if (!window.isUpdatingSecurity) {\n                                    updateSecurityLevel().catch(console.error);\n                                }\n                            } else if (status === 'verified') {\n                                setIsVerified(true);\n                                setShowVerification(false);\n                                setBothVerificationsConfirmed(true);\n                                setConnectionStatus('connected');\n                                // Force immediate update of isVerified state\n                                setTimeout(() => {\n                                    setIsVerified(true);\n                                }, 0);\n                                // Tell the newly-connected peer my current availability (E2E, via\n                                // the normal encrypted message path \u2014 see sendPresenceTo).\n                                try {\n                                    const s = myStatusRef.current === 'invisible' ? 'offline' : myStatusRef.current;\n                                    setTimeout(() => {\n                                        try {\n                                            const p = manager.sendMessage?.(JSON.stringify({ type: 'presence', status: s }));\n                                            if (p && typeof p.catch === 'function') p.catch(() => {});\n                                        } catch (_) {}\n                                    }, 400);\n                                } catch (_) {}\n                                if (!window.isUpdatingSecurity) {\n                                    updateSecurityLevel().catch(console.error);\n                                }\n                            } else if (status === 'connecting') {\n                                if (!window.isUpdatingSecurity) {\n                                    updateSecurityLevel().catch(console.error);\n                                }\n                            } else if (status === 'disconnected') {\n                                // Drop: the manager has cleared its verification (re-establishment\n                                // required), so reset this session's verification flags too \u2014 the\n                                // setup/connect screen then shows so the user can reconnect. We do\n                                // NOT remove the session (that create\u2192destroy\u2192create churn flashed\n                                // the console) and we keep the message history; closing a chat is\n                                // done only via the Disconnect button.\n                                setConnectionStatus('disconnected');\n                                setIsVerified(false);\n                                setShowVerification(false);\n                                setLocalVerificationConfirmed(false);\n                                setRemoteVerificationConfirmed(false);\n                                setBothVerificationsConfirmed(false);\n                                if (id === activeIdRef.current) document.dispatchEvent(new CustomEvent('disconnected'));\n                            } else if (status === 'peer_disconnected') {\n                                if (id === activeIdRef.current) {\n                                    setSessionTimeLeft(0);\n                                    document.dispatchEvent(new CustomEvent('peer-disconnect'));\n                                }\n                                setConnectionStatus('peer_disconnected');\n                                setIsVerified(false);\n                                setShowVerification(false);\n                                setLocalVerificationConfirmed(false);\n                                setRemoteVerificationConfirmed(false);\n                                setBothVerificationsConfirmed(false);\n                                // The peer told us they were leaving, which is terminal: this\n                                // status comes only from an explicit peer_disconnect frame, not\n                                // from a transport drop that an ICE restart might repair. There\n                                // is nothing left to reconnect to, so the chat goes rather than\n                                // sitting in the rail advertising a closing notice as its last\n                                // message. A plain 'disconnected' is deliberately NOT treated\n                                // this way \u2014 that one is recoverable and keeps its history.\n                                // Deferred so the closing notice renders before the slice it\n                                // lives in is torn out \u2014 and skipped entirely if a group is\n                                // built on this session, because a member going offline is not\n                                // the same as them leaving the group. Membership is signed and\n                                // epoch-ordered; a dropped connection does not change it, and\n                                // removing the session would strand the member for good.\n                                setTimeout(() => {\n                                    if (sessionCarriesGroupMemberRef.current(id)) return;\n                                    destroySession(id);\n                                }, 2500);\n                            }\n                        };\n        \n                        const handleKeyExchange = (fingerprint) => {\n                            if (fingerprint === '') {\n                                setKeyFingerprint('');\n                            } else {\n                                setKeyFingerprint(fingerprint);\n                            }\n                        };\n                        \n                        const handleVerificationRequired = (code) => {\n                            if (code === '') {\n                                setVerificationCode('');\n                                setShowVerification(false);\n                            } else {\n                                setVerificationCode(code);\n                                setShowVerification(true);\n                            }\n                        };\n        \n                        const handleVerificationStateChange = (state) => {\n                            setLocalVerificationConfirmed(state.localConfirmed);\n                            setRemoteVerificationConfirmed(state.remoteConfirmed);\n                            setBothVerificationsConfirmed(state.bothConfirmed);\n                        };\n        \n                        // Callback for handling response errors\n                        const handleAnswerError = (errorType, errorMessage) => {\n                            if (errorType === 'replay_attack') {\n                                // Reset the session upon replay attack\n                                    setSessionTimeLeft(0);\n                                setPendingSession(null);\n                                \n                                addMessageWithAutoScroll('\uD83D\uDCA1 Data is outdated. Please create a new invitation or use a current response code.', 'system');\n        \n                                if (typeof console.clear === 'function') {\n                                    console.clear();\n                                }\n                            } else if (errorType === 'security_violation') {\n                                // Reset the session upon security breach\n                                    setSessionTimeLeft(0);\n                                setPendingSession(null);\n                                \n                                addMessageWithAutoScroll(` Security breach: ${errorMessage}`, 'system');\n        \n                                if (typeof console.clear === 'function') {\n                                    console.clear();\n                                }\n                            }\n                        };\n        \n        \n                        if (typeof console.clear === 'function') {\n                            console.clear();\n                        }\n                        \n                        const manager = new EnhancedSecureWebRTCManager(\n                            handleMessage,\n                            handleStatusChange,\n                            handleKeyExchange,\n                            handleVerificationRequired,\n                            handleAnswerError,\n                            handleVerificationStateChange,\n                            {\n                                webrtc: {\n                                    relayOnly: relayOnlyMode,\n                                    // Priority: user's custom servers > operator override > built-in defaults.\n                                    iceServers: (Array.isArray(customIceServers) && customIceServers.length)\n                                        ? customIceServers\n                                        : (Array.isArray(window.SECUREBIT_ICE_SERVERS) ? window.SECUREBIT_ICE_SERVERS : undefined)\n                                }\n                            }\n                        );\n                        managersRef.current.set(id, manager);\n\n                        // Unsend / delete-for-everyone: peer asked us to drop a message.\n                        manager.onMessageDelete = (mid) => {\n                            if (!mid) return;\n                            setMessages(prev => prev.filter(m => String(m.mid) !== String(mid)));\n                        };\n\n                        // Read receipt: the peer actually opened the chat and read it \u2192 green.\n                        // (A receipt is only sent once the recipient is viewing the conversation,\n                        // so background-read messages stay at two grey 'delivered' ticks.)\n                        manager.onMessageDelivered = (mid) => {\n                            updateMessageStatus(mid, 'read');\n                        };\n\n                        // Per-session notification integration (raises OS notifications when the\n                        // tab is hidden; the unread badge handles the in-app, focused case).\n                        if (typeof Notification !== 'undefined' && Notification && Notification.permission === 'granted' && window.NotificationIntegration && !integrationsRef.current.get(id)) {\n                            try {\n                                const integration = new window.NotificationIntegration(manager);\n                                integration.init().then(() => {\n                                    integrationsRef.current.set(id, integration);\n                                }).catch((error) => {\n                                    // Handle error silently\n                                });\n                            } catch (error) {\n                                // Handle error silently\n                            }\n                        }\n\n                        handleMessage(' SecureBit.chat Enhanced Security Edition v5.6.0 - ECDH + DTLS + SAS initialized. Ready to establish a secure connection with ECDH key exchange, DTLS fingerprint verification, and SAS authentication to prevent MITM attacks.', 'system');\n\n                        // Setup file transfer callbacks (id-bound to THIS session's manager).\n                        manager.setFileTransferCallbacks(\n                            // Progress callback \u2014 drives the voice-note upload/download ring.\n                            (progress) => {\n                                if (progress && progress.isVoice) {\n                                    const pct = Math.max(0, Math.min(100, progress.progress || 0));\n                                    const applyPct = (m) => {\n                                        if (!m.voice) return {};\n                                        // Sender clears the ring once every chunk is out (playable\n                                        // from the local copy); receiver keeps it until the audio is\n                                        // assembled and decrypted (onFileReceived attaches the URL).\n                                        if (progress.direction === 'up' && pct >= 100) {\n                                            return { voice: { ...m.voice, transfer: null } };\n                                        }\n                                        return { voice: { ...m.voice, transfer: { dir: progress.direction, pct } } };\n                                    };\n                                    if (progress.direction === 'up' && progress.uiId != null) patchMessageById(progress.uiId, applyPct);\n                                    else if (progress.fileId) patchMessageByFileId(progress.fileId, applyPct);\n                                    return;\n                                }\n                                console.log('File progress:', progress);\n                            },\n\n                            // File received callback. Voice notes play inline (never touch disk);\n                            // ordinary files still auto-save.\n                            (fileData) => {\n                                const isVoice = !!fileData.isVoice || (typeof fileData.mimeType === 'string' && fileData.mimeType.startsWith('audio/'));\n                                if (isVoice) {\n                                    fileData.getObjectURL()\n                                        .then((url) => {\n                                            patchMessageByFileId(fileData.fileId, (m) => ({ voice: { ...(m.voice || {}), url, transfer: null } }));\n                                        })\n                                        .catch((e) => {\n                                            console.error('Voice decode failed:', e);\n                                            patchMessageByFileId(fileData.fileId, (m) => ({ voice: { ...(m.voice || {}), transfer: null, error: true } }));\n                                        });\n                                    return;\n                                }\n\n                                const sizeMb = Math.max(1, Math.round((fileData.fileSize || 0) / (1024 * 1024)));\n\n                                const saveToDisk = async () => {\n                                    const url = await fileData.getObjectURL();\n                                    const a = document.createElement('a');\n                                    a.href = url;\n                                    a.download = fileData.fileName || 'file';\n                                    document.body.appendChild(a);\n                                    a.click();\n                                    a.remove();\n                                    setTimeout(() => fileData.revokeObjectURL(url), 15000);\n                                };\n\n                                saveToDisk()\n                                    .then(() => {\n                                        addMessageWithAutoScroll(`File received & saved: ${fileData.fileName} (${sizeMb} MB)`, 'system');\n                                    })\n                                    .catch((e) => {\n                                        console.error('Auto-save failed:', e);\n                                        addMessageWithAutoScroll(`File received: ${fileData.fileName} (${sizeMb} MB). Open the file panel to download it.`, 'system');\n                                    });\n                            },\n\n                            // Error callback\n                            (error) => {\n                                console.error('File transfer error:', error);\n\n                                if (error.includes(t('err.notReady'))) {\n                                    addMessageWithAutoScroll(` File transfer error: connection not ready. Try again later.`, 'system');\n                                } else if (error.includes(t('err.fileTooLarge'))) {\n                                    addMessageWithAutoScroll(` File is too big. Maximum size: 100 MB`, 'system');\n                                } else {\n                                    addMessageWithAutoScroll(` File transfer error: ${error}`, 'system');\n                                }\n                            },\n\n                            // Incoming file request callback. Voice notes are auto-accepted and\n                            // rendered inline (a receiving bubble appears immediately and tracks\n                            // the download ring); ordinary files still require explicit consent.\n                            (fileRequest) => {\n                                if (fileRequest && fileRequest.isVoice) {\n                                    const v = fileRequest.voice || {};\n                                    addMessageWithAutoScroll('', 'received', {\n                                        voice: {\n                                            dur: Number.isFinite(v.dur) ? v.dur : 0,\n                                            bars: Array.isArray(v.bars) ? v.bars : null,\n                                            transfer: { dir: 'down', pct: 0 },\n                                            url: null\n                                        },\n                                        fileId: fileRequest.fileId\n                                    });\n                                    try { manager.acceptIncomingFile(fileRequest.fileId); } catch (_) {}\n                                    return;\n                                }\n                                setPendingIncomingFiles(prev => {\n                                    if (prev.some(f => f.fileId === fileRequest.fileId)) return prev;\n                                    return [...prev, fileRequest];\n                                });\n                            }\n                        );\n\n                        return id;\n                    };\n\n                    // Keep createSession reachable from non-render callers (new-chat button etc.).\n                    const createSessionRef = React.useRef(createSession);\n                    createSessionRef.current = createSession;\n\n                    // Tear down ONE session completely: its manager (existing key-wipe logic),\n                    // its notification integration and its queues. Other sessions are untouched.\n                    // Re-entrancy guarded: mgr.disconnect() can synchronously re-fire the\n                    // 'disconnected' status callback, which would otherwise recurse back in here.\n                    const destroyingRef = React.useRef(new Set());\n                    /**\n                     * Is this pairwise session carrying a group member?\n                     *\n                     * A group is built out of these sessions, so one of them is not just a\n                     * chat the user can close \u2014 it is the group's only route to that member.\n                     * Tearing it out because the peer went offline would make them permanently\n                     * unreachable AND leave nothing to re-bind when they come back.\n                     */\n                    const sessionCarriesGroupMember = React.useCallback((id) => {\n                        for (const runtime of groupRuntimesRef.current.values()) {\n                            if (runtime.sessionToFp && runtime.sessionToFp.has(id)) return true;\n                        }\n                        return false;\n                    }, []);\n                    const sessionCarriesGroupMemberRef = React.useRef(sessionCarriesGroupMember);\n                    sessionCarriesGroupMemberRef.current = sessionCarriesGroupMember;\n\n                    const destroySession = React.useCallback((id) => {\n                        if (!id || destroyingRef.current.has(id)) return;\n                        destroyingRef.current.add(id);\n                        try {\n                            const mgr = managersRef.current.get(id);\n                            if (mgr) { try { mgr.disconnect(); } catch (_) {} managersRef.current.delete(id); }\n                            const integ = integrationsRef.current.get(id);\n                            if (integ) { try { integ.cleanup?.(); } catch (_) {} integrationsRef.current.delete(id); }\n                            queuesRef.current.delete(id);\n                            statusRef.current.delete(id);\n                            dispatch({ type: SA.REMOVE_SESSION, id });\n                        } finally {\n                            destroyingRef.current.delete(id);\n                        }\n                    }, []);\n\n                    // Always keep at least one session around: when the last chat is removed the\n                    // user lands back on the single-column \"Start Secure\" page with a fresh session.\n                    React.useEffect(() => {\n                        if (sessionsState.order.length === 0) createSessionRef.current({ role: 'offer' });\n                    }, [sessionsState.order.length]);\n\n                    // ---- Sidebar (session list) state + actions ----\n                    const [sidebarCollapsed, setSidebarCollapsed] = React.useState(() => {\n                        try { return localStorage.getItem('securebit_sidebar_collapsed') === 'true'; } catch { return false; }\n                    });\n                    React.useEffect(() => { try { localStorage.setItem('securebit_sidebar_collapsed', String(sidebarCollapsed)); } catch {} }, [sidebarCollapsed]);\n                    const [sidebarDrawerOpen, setSidebarDrawerOpen] = React.useState(false);\n                    const handleSelectSession = React.useCallback((id) => {\n                        dispatch({ type: SA.SET_ACTIVE, id });\n                        dispatch({ type: SA.CLEAR_UNREAD, id });\n                        setSidebarDrawerOpen(false);\n                    }, []);\n                    /**\n                     * Start a new 1:1 chat and put it on screen.\n                     *\n                     * Clearing the active group is the part that matters. One conversation\n                     * owns the column at a time, and a group owns it unconditionally \u2014 so\n                     * from inside a group this button used to create a session that was\n                     * never rendered: no invitation to copy, no way to verify it, no sign\n                     * anything had happened at all.\n                     *\n                     * That made adding somebody to a group impossible in the one case where\n                     * you would want to. A group is built out of chats you have already\n                     * verified, so adding a member means first opening a chat with them \u2014\n                     * and the button that opens one did nothing while a group was in front\n                     * of you. The admin was told there was nobody left to add, and the only\n                     * route to changing that was closed.\n                     */\n                    const handleNewChat = React.useCallback(() => {\n                        groupsDispatch({ type: GA.SET_ACTIVE_GROUP, id: null });\n                        createSessionRef.current({ role: 'offer' });\n                        setSidebarDrawerOpen(false);\n                    }, []);\n                    const handleRenameSession = React.useCallback((id, label) => { dispatch({ type: SA.RENAME, id, label }); }, []);\n\n                    // ---- Groups: the mesh ----\n                    //\n                    // A group starts out as a star: the admin holds a link to everyone and\n                    // nobody else holds a link to anybody. What follows turns that into a mesh\n                    // by having each pair without a link build one, with the descriptors\n                    // travelling over the relay path that already exists.\n                    //\n                    // Nothing here decides WHETHER to dial or WHO dials \u2014 GroupSession owns\n                    // that, and owns the signature that makes a relayed descriptor safe to act\n                    // on. This is only the transport half: make a connection, hand back its\n                    // descriptor, and tear it down when asked.\n\n                    const closeMeshLink = React.useCallback((sessionId) => {\n                        const entry = meshLinksRef.current.get(sessionId);\n                        if (!entry) return;\n                        meshLinksRef.current.delete(sessionId);\n                        try { entry.manager.disconnect(); } catch (_) {}\n                    }, []);\n                    const closeMeshLinkRef = React.useRef(closeMeshLink);\n                    closeMeshLinkRef.current = closeMeshLink;\n\n                    /**\n                     * A manager for one mesh link, wired to the group instead of to a chat.\n                     *\n                     * The callbacks are where a mesh link differs from a 1:1 session. Inbound\n                     * traffic goes to the group router and nowhere else \u2014 a mesh link has no\n                     * transcript for a stray message to land in. And nobody is ever shown a\n                     * verification code: when the in-band exchange completes, the link is\n                     * released on the group's authority instead. See markGroupLinkVerified for\n                     * why that is a move of the guarantee rather than a hole in it.\n                     */\n                    const buildMeshLink = React.useCallback((gid, fp) => {\n                        const sessionId = 'mesh:' + Array.from(crypto.getRandomValues(new Uint8Array(8)))\n                            .map((b) => b.toString(16).padStart(2, '0')).join('');\n                        const entry = { manager: null, gid, fp, sessionId };\n\n                        const onMessage = (message) => {\n                            if (typeof message !== 'string' || !message.trim().startsWith('{')) return;\n                            let parsed;\n                            try { parsed = JSON.parse(message); } catch (_) { return; }\n                            if (isGroupFrame(parsed)) handleGroupFrameRef.current(sessionId, parsed);\n                        };\n\n                        const onStatusChange = (status) => {\n                            // isVerified is the authority, not the status word: the manager\n                            // reports 'connected' at points in its own lifecycle where the link\n                            // is not yet releasable, and a group must not start routing over a\n                            // link whose peer has not proved who it is.\n                            const dead = status === 'disconnected'\n                                || status === 'failed'\n                                || status === 'peer_disconnected'\n                                || status === 'recovery_failed';\n                            syncGroupLinksRef.current(sessionId, !dead && entry.manager?.isVerified === true);\n\n                            // Beyond repair \u2014 the manager has exhausted its own ICE restarts.\n                            // Release the member so the mesh can dial them again through\n                            // whoever can still reach them. This is the difference between a\n                            // mesh that heals and one that only ever degrades: a link dying is\n                            // not the same as the member going away.\n                            if (status === 'recovery_failed' || status === 'failed') {\n                                const runtime = groupRuntimesRef.current.get(gid);\n                                try { runtime?.unbindSession(fp); } catch (_) {}\n                                closeMeshLinkRef.current(sessionId);\n                            }\n                        };\n\n                        const onVerificationRequired = (code) => {\n                            if (!code || !entry.manager) return;\n                            try {\n                                entry.manager.markGroupLinkVerified(`group:${gid}`);\n                            } catch (_) {\n                                // The link cannot be released, so it is no use to the group.\n                                // Dropping it puts the pair back on the relay path, which is\n                                // where they were before the dial started.\n                                closeMeshLinkRef.current(sessionId);\n                                syncGroupLinksRef.current(sessionId, false);\n                            }\n                        };\n\n                        const manager = new EnhancedSecureWebRTCManager(\n                            onMessage,\n                            onStatusChange,\n                            () => {},                  // key exchange: no fingerprint UI to update\n                            onVerificationRequired,\n                            () => {},                  // answer errors surface as a failed dial\n                            () => {},                  // no verification UI to keep in step\n                            {\n                                // A mesh link has no window of its own, so it must not\n                                // announce itself to the application: its lifecycle events\n                                // would reset the header and the connection banner belonging\n                                // to whichever chat the user is actually looking at.\n                                emitGlobalEvents: false,\n                                webrtc: {\n                                    relayOnly: relayOnlyMode,\n                                    iceServers: (Array.isArray(customIceServers) && customIceServers.length)\n                                        ? customIceServers\n                                        : (Array.isArray(window.SECUREBIT_ICE_SERVERS) ? window.SECUREBIT_ICE_SERVERS : undefined)\n                                }\n                            }\n                        );\n                        entry.manager = manager;\n                        meshLinksRef.current.set(sessionId, entry);\n                        return entry;\n                    }, [relayOnlyMode, customIceServers]);\n                    const buildMeshLinkRef = React.useRef(buildMeshLink);\n                    buildMeshLinkRef.current = buildMeshLink;\n\n                    /** The transport half of the mesh, as one group's GroupSession sees it. */\n                    const makeMeshAdapter = React.useCallback((gid) => ({\n                        createOffer: async (fp) => {\n                            const entry = buildMeshLinkRef.current(gid, fp);\n                            try {\n                                const offer = await entry.manager.createSecureOffer();\n                                // Only the compact descriptor fits a group frame. If this build\n                                // ever emits the old handshake, the dial fails and the pair\n                                // stays relayed rather than silently exceeding the budget.\n                                if (!offer || typeof offer.sbq2 !== 'string') {\n                                    throw new Error('mesh dial needs a compact descriptor');\n                                }\n                                return { sessionId: entry.sessionId, descriptor: offer.sbq2 };\n                            } catch (error) {\n                                closeMeshLinkRef.current(entry.sessionId);\n                                throw error;\n                            }\n                        },\n                        createAnswer: async (fp, descriptor) => {\n                            const entry = buildMeshLinkRef.current(gid, fp);\n                            try {\n                                const answer = await entry.manager.createSecureAnswer({ t: 'offer', sbq2: descriptor });\n                                if (!answer || typeof answer.sbq2 !== 'string') {\n                                    throw new Error('mesh answer needs a compact descriptor');\n                                }\n                                return { sessionId: entry.sessionId, descriptor: answer.sbq2 };\n                            } catch (error) {\n                                closeMeshLinkRef.current(entry.sessionId);\n                                throw error;\n                            }\n                        },\n                        acceptAnswer: async (sessionId, descriptor) => {\n                            const entry = meshLinksRef.current.get(sessionId);\n                            if (!entry) throw new Error('that mesh dial is no longer open');\n                            await entry.manager.handleSecureAnswer({ t: 'answer', sbq2: descriptor });\n                        },\n                        close: (sessionId) => closeMeshLinkRef.current(sessionId),\n                        /**\n                         * The key fingerprint of a pairwise session, for link probes.\n                         *\n                         * Both endpoints of a session derive the same value from the shared\n                         * secret and nobody else can, which is exactly what makes it usable as\n                         * proof that a probe was written for THIS link. Only a verified session\n                         * has one worth anything.\n                         */\n                        linkFingerprint: (sessionId) => {\n                            const manager = managersRef.current.get(sessionId)\n                                || meshLinksRef.current.get(sessionId)?.manager\n                                || null;\n                            if (!manager || manager.isVerified !== true) return '';\n                            return typeof manager.keyFingerprint === 'string' ? manager.keyFingerprint : '';\n                        },\n                    }), []);\n\n                    /**\n                     * Offer every verified chat to every ready group as a link it may adopt.\n                     *\n                     * Two members who were already talking before the group existed do not\n                     * need a second connection dialled between them. probeSession is idempotent\n                     * \u2014 it self-limits to one probe per session per epoch and refuses outright\n                     * unless the group is ready \u2014 so running this whenever either registry\n                     * changes costs a map walk and nothing else.\n                     */\n                    React.useEffect(() => {\n                        for (const [gid, runtime] of groupRuntimesRef.current) {\n                            const group = groupsState.groups[gid];\n                            if (!group || group.phase !== GROUP_PHASE.READY || !group.sasConfirmed) continue;\n                            for (const sid of sessionsState.order) {\n                                const session = sessionsState.sessions[sid];\n                                if (!session || !session.sas.isVerified) continue;\n                                runtime.probeSession(sid).catch(() => { /* a probe is an offer, not a request */ });\n                            }\n                        }\n                    }, [groupsState, sessionsState]);\n\n                    // ---- Groups: user actions ----\n\n                    /**\n                     * Only VERIFIED 1:1 chats may become group members.\n                     *\n                     * A group built on an unverified session inherits that session's open\n                     * question \u2014 whether the peer is who they claim \u2014 and then hides it behind\n                     * a group code that looks like it settled the matter. The picker simply\n                     * does not offer them.\n                     */\n                    const groupCandidates = React.useMemo(() => sessionsState.order\n                        .map((id) => sessionsState.sessions[id])\n                        .filter((s) => s && s.sas && s.sas.isVerified)\n                        .map((s) => ({ id: s.id, name: s.peerLabel, mono: monoInitials(s.peerLabel) })),\n                        [sessionsState]);\n\n                    const handleSelectGroup = React.useCallback((gid) => {\n                        groupsDispatch({ type: GA.SET_ACTIVE_GROUP, id: gid });\n                        groupsDispatch({ type: GA.CLEAR_UNREAD, id: gid });\n                        setSidebarDrawerOpen(false);\n                    }, []);\n\n                    const handleCreateGroup = React.useCallback(async ({ name, sessionIds }) => {\n                        setShowCreateGroup(false);\n                        const gid = GroupSession.newId();\n                        const runtime = new GroupSession({\n                            groupId: gid, name, isAdmin: true,\n                            subtle: crypto.subtle,\n                            send: sendGroupFrame,\n                            emit: groupEmitter(gid),\n                            mesh: makeMeshAdapter(gid)\n                        });\n                        groupRuntimesRef.current.set(gid, runtime);\n                        try {\n                            await runtime.init();\n                            groupsDispatch({\n                                type: GA.CREATE_GROUP,\n                                entry: createGroupEntry({\n                                    id: gid, name, selfFp: runtime.selfFp, adminFp: runtime.selfFp,\n                                    isAdmin: true, members: runtime._memberSnapshot()\n                                })\n                            });\n                            await runtime.invite(sessionIds.map((sid) => ({\n                                sessionId: sid,\n                                name: sessionsState.sessions[sid]?.peerLabel || 'Member'\n                            })));\n                        } catch (error) {\n                            groupRuntimesRef.current.delete(gid);\n                            try { runtime.destroy(); } catch (_) {}\n                            groupsDispatch({ type: GA.REMOVE_GROUP, id: gid });\n                            // A group that could not even be announced should not linger as a\n                            // failed row the user has to clean up \u2014 say what went wrong instead.\n                            setGroupError(error?.code === 'invitations_could_not_be_sent'\n                                ? t('err.inviteNotConnectedRetry')\n                                : `The group could not be created (${error?.code || 'unknown error'}).`);\n                        }\n                    }, [sendGroupFrame, groupEmitter, sessionsState]);\n\n                    const handleAcceptInvite = React.useCallback(async () => {\n                        const invite = pendingInvite;\n                        if (!invite) return;\n                        setPendingInvite(null);\n                        const runtime = new GroupSession({\n                            groupId: invite.gid, name: invite.name, isAdmin: false,\n                            subtle: crypto.subtle,\n                            send: sendGroupFrame,\n                            emit: groupEmitter(invite.gid),\n                            mesh: makeMeshAdapter(invite.gid)\n                        });\n                        groupRuntimesRef.current.set(invite.gid, runtime);\n                        try {\n                            await runtime.init();\n                            groupsDispatch({\n                                type: GA.CREATE_GROUP,\n                                entry: createGroupEntry({ id: invite.gid, name: invite.name, selfFp: runtime.selfFp })\n                            });\n                            await runtime.acceptInvite(invite.sessionId, invite.frame);\n                        } catch (error) {\n                            groupRuntimesRef.current.delete(invite.gid);\n                            try { runtime.destroy(); } catch (_) {}\n                            groupsDispatch({ type: GA.SET_ERROR, id: invite.gid, error: error?.code || 'join_failed' });\n                        }\n                    }, [pendingInvite, sendGroupFrame, groupEmitter]);\n\n                    const handleConfirmGroupSas = React.useCallback(() => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        try {\n                            runtime.confirmSas();\n                            setShowGroupCode(false);\n                        } catch (error) {\n                            groupsDispatch({ type: GA.SET_ERROR, id: gid, error: error?.code || 'confirm_failed' });\n                        }\n                    }, []);\n\n                    /** Tear a group down locally and tell whoever we can still reach. */\n                    const destroyGroup = React.useCallback((gid, { announce = true } = {}) => {\n                        const runtime = groupRuntimesRef.current.get(gid);\n                        // A group that is going away takes its call with it \u2014 and the capture\n                        // with that. Released before anything else, because a microphone left\n                        // running after the window it belonged to is gone is the one failure\n                        // here nobody would see happening.\n                        const media = groupCallMediaRef.current.get(gid);\n                        if (media) {\n                            groupCallMediaRef.current.delete(gid);\n                            media.leave().catch(() => {});\n                        }\n                        setGroupCallState((current) => {\n                            const next = { ...current };\n                            delete next[gid];\n                            return next;\n                        });\n                        setGroupCallMediaState((current) => {\n                            const next = { ...current };\n                            delete next[gid];\n                            return next;\n                        });\n                        // Drop the runtime from the registry first, so a new group with the\n                        // same people cannot collide with one that is still tearing down.\n                        groupRuntimesRef.current.delete(gid);\n                        lastUnreachableRef.current.delete(gid);\n                        groupsDispatch({ type: GA.REMOVE_GROUP, id: gid });\n                        setShowGroupCode(false);\n                        if (runtime) {\n                            // Announce BEFORE teardown and wait for it: destroy() clears the\n                            // member map that leave() walks to find recipients, so a leave that\n                            // is merely started can end up addressed to nobody \u2014 and a peer that\n                            // never hears it keeps a group nobody is in.\n                            const done = announce\n                                ? Promise.resolve().then(() => runtime.leave()).catch(() => {})\n                                : Promise.resolve();\n                            done.then(() => { try { runtime.destroy(); } catch (_) {} });\n                        }\n                    }, []);\n\n                    const destroyGroupRef = React.useRef(destroyGroup);\n                    destroyGroupRef.current = destroyGroup;\n\n                    const handleSendGroupMessage = React.useCallback(async (text) => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        const body = String(text || '').trim();\n                        if (!body) return;\n                        setGroupInput('');\n                        try {\n                            const { unreachable } = await runtime.sendText(body);\n                            groupsDispatch({\n                                type: GA.ADD_MESSAGE, id: gid,\n                                message: buildGroupMessage(body, 'sent')\n                            });\n\n                            // A group with no server has nobody to hold a message for a member\n                            // who is offline, so the sender is told rather than left to assume\n                            // it arrived. Told ONCE, though: this used to print under every\n                            // single message for as long as somebody stayed offline, which\n                            // buried the conversation in a notice that said nothing new each\n                            // time. It is repeated only when the answer actually changes \u2014 a\n                            // different member drops, or somebody comes back and then goes.\n                            const signature = unreachable.map((m) => m.fp).sort().join(',');\n                            if (signature !== (lastUnreachableRef.current.get(gid) || '')) {\n                                lastUnreachableRef.current.set(gid, signature);\n                                if (unreachable.length > 0) {\n                                    const names = unreachable.map((m) => m.name);\n                                    const who = names.length === 1\n                                        ? `${names[0]} is`\n                                        : `${names.slice(0, -1).join(', ')} and ${names[names.length - 1]} are`;\n                                    groupsDispatch({\n                                        type: GA.ADD_MESSAGE, id: gid,\n                                        message: buildGroupMessage(\n                                            `${who} offline and will not receive messages until they reconnect.`,\n                                            'system'\n                                        )\n                                    });\n                                }\n                            }\n                        } catch (error) {\n                            groupsDispatch({\n                                type: GA.ADD_MESSAGE, id: gid,\n                                message: buildGroupMessage(`Could not send: ${error?.message || 'unknown error'}`, 'system')\n                            });\n                        }\n                    }, []);\n\n                    /**\n                     * Verified 1:1 chats that could still join the ACTIVE group.\n                     *\n                     * A session already carrying a member is filtered out: inviting the same\n                     * chat twice would have it answer with a second identity key and occupy two\n                     * slots in the safety code.\n                     */\n                    const addCandidates = React.useMemo(() => {\n                        if (!activeGroup) return [];\n                        const taken = new Set(activeGroup.members.map((m) => m.sessionId).filter(Boolean));\n                        return groupCandidates.filter((c) => !taken.has(c.id));\n                    }, [activeGroup, groupCandidates]);\n\n                    const handleAddMembers = React.useCallback(async (sessionIds) => {\n                        setShowAddMembers(false);\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        try {\n                            await runtime.addMembers(sessionIds.map((sid) => ({\n                                sessionId: sid,\n                                name: sessionsState.sessions[sid]?.peerLabel || 'Member'\n                            })));\n                        } catch (error) {\n                            setGroupError(error?.code === 'invitations_could_not_be_sent'\n                                ? t('err.inviteNotConnected')\n                                : error?.code === 'too_many_members'\n                                    ? `A group is limited to ${GROUP_LIMITS.MAX_MEMBERS} members.`\n                                    : `Could not invite (${error?.code || 'unknown error'}).`);\n                        }\n                    }, [sessionsState]);\n\n                    const handleRemoveGroupMember = React.useCallback(async (fp) => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        try {\n                            await runtime.removeMember(fp);\n                        } catch (error) {\n                            groupsDispatch({ type: GA.SET_ERROR, id: gid, error: error?.code || 'remove_failed' });\n                        }\n                    }, []);\n\n                    // ---- Groups: call actions ----\n                    //\n                    // The split throughout: GroupSession decides WHO is in the call and tells\n                    // everyone in signed frames; GroupCallMedia connects the legs it can. A\n                    // failure in the second never rewrites the first \u2014 a member this device\n                    // cannot reach is still in the call, and is shown as such.\n\n                    /** Reconcile one group's media legs against its call roster. */\n                    const syncGroupCallMedia = React.useCallback((gid, callOrNull) => {\n                        const media = groupCallMediaRef.current.get(gid);\n                        if (!media) return;\n                        const runtime = groupRuntimesRef.current.get(gid);\n                        const call = callOrNull !== null ? callOrNull : (runtime?.getCallSnapshot?.() || null);\n\n                        // The call is over, or we are no longer in it: release the capture.\n                        // This is the ONLY place the microphone is let go on a state change,\n                        // so a call that ends while the tab is in the background still stops\n                        // recording.\n                        if (!call || !call.joined || call.callId !== media.callId) {\n                            groupCallMediaRef.current.delete(gid);\n                            media.leave().catch(() => {});\n                            setGroupCallMediaState((current) => {\n                                const next = { ...current };\n                                delete next[gid];\n                                return next;\n                            });\n                            return;\n                        }\n                        media.setPeers(call.participants);\n                    }, []);\n                    const syncGroupCallMediaRef = React.useRef(syncGroupCallMedia);\n                    syncGroupCallMediaRef.current = syncGroupCallMedia;\n\n                    /**\n                     * Build the media controller for a group and capture the microphone.\n                     *\n                     * Capture only \u2014 no legs. Connecting them is a separate step because\n                     * the group has to be told we are in the call FIRST: attaching a leg\n                     * can place an offer straight away, and an offer that overtakes the\n                     * announcement lands on a peer who does not yet know this session is\n                     * a call leg, so they ring instead of answering. See setPeers.\n                     */\n                    const openGroupCallMedia = React.useCallback(async (gid, call) => {\n                        const existing = groupCallMediaRef.current.get(gid);\n                        if (existing && existing.callId === call.callId) {\n                            existing.setPeers(call.participants);\n                            return existing;\n                        }\n                        if (existing) {\n                            groupCallMediaRef.current.delete(gid);\n                            await existing.leave().catch(() => {});\n                        }\n                        const media = new GroupCallMedia({\n                            getManager: (sessionId) => managersRef.current.get(sessionId)\n                                || meshLinksRef.current.get(sessionId)?.manager\n                                || null,\n                            onChange: (snapshot) => {\n                                setGroupCallMediaState((current) => ({ ...current, [gid]: snapshot }));\n                            },\n                        });\n                        groupCallMediaRef.current.set(gid, media);\n                        await media.join({\n                            callId: call.callId,\n                            selfFp: groupsState.groups[gid]?.selfFp || groupRuntimesRef.current.get(gid)?.selfFp || '',\n                            withVideo: call.withVideo,\n                            peers: [],   // legs are connected after the announcement\n                        });\n                        return media;\n                    }, [groupsState]);\n\n                    /**\n                     * Open a call: capture first, announce second.\n                     *\n                     * The order is the whole point, and it is why startCall takes a `prepare`\n                     * hook rather than the app calling the two in sequence. Ringing everybody\n                     * else's device and only then discovering this device has no microphone\n                     * would make one person's permission dialog into everyone's interruption.\n                     */\n                    const handleStartGroupCall = React.useCallback(async (withVideo) => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        if (!runtime) return;\n                        try {\n                            await runtime.startCall({\n                                withVideo,\n                                prepare: (call) => openGroupCallMedia(gid, call),\n                            });\n                        } catch (error) {\n                            // The runtime has already rolled the call back; drop whatever the\n                            // capture managed to build so no leg outlives it.\n                            const media = groupCallMediaRef.current.get(gid);\n                            if (media) { groupCallMediaRef.current.delete(gid); media.leave().catch(() => {}); }\n                            const code = error?.code || 'media_failed';\n                            groupsDispatch({\n                                type: GA.ADD_MESSAGE, id: gid,\n                                message: buildGroupMessage(\n                                    code === 'call_in_progress' ? t('groupCall.err.call_in_progress')\n                                        : code === 'not_ready' ? t('groupCall.err.not_ready')\n                                            : t(`groupCall.err.${mediaErrorCode(error)}`),\n                                    'system'\n                                )\n                            });\n                        }\n                    }, [openGroupCallMedia]);\n\n                    const handleJoinGroupCall = React.useCallback(async () => {\n                        const gid = activeGroupIdRef.current;\n                        const runtime = gid && groupRuntimesRef.current.get(gid);\n                        const call = runtime?.getCallSnapshot?.();\n                        if (!runtime || !call) return;\n                        try {\n                            // Capture, announce, then connect \u2014 in that order. Capturing\n                            // first means a device with no microphone never tells the group\n                            // it joined; announcing before connecting means our offer cannot\n                            // reach a peer who has not yet heard that we are in the call.\n                            const media = await openGroupCallMedia(gid, { ...call, joined: true });\n                            await runtime.joinCall();\n                            media.setPeers(runtime.getCallSnapshot()?.participants || []);\n                        } catch (error) {\n                            const media = groupCallMediaRef.current.get(gid);\n                            if (media) { groupCallMediaRef.current.delete(gid); media.leave().catch(() => {}); }\n                            groupsDispatch({\n                                type: GA.ADD_MESSAGE, id: gid,\n                                message: buildGroupMessage(t(`groupCall.err.${mediaErrorCode(error)}`), 'system')\n                            });\n                        }\n                    }, [openGroupCallMedia]);\n\n                    /**\n                     * Dismissing is local and silent.\n                     *\n                     * There is no \"declined\" to broadcast: in a group without a server nobody\n                     * is entitled to be told who chose not to pick up, and a decline frame\n                     * would leak exactly that. The call carries on for whoever is in it, and\n                     * this device simply stops showing the prompt.\n                     */\n                    const handleDismissGroupCall = React.useCallback(() => {\n                        const gid = activeGroupIdRef.current;\n                        const call = gid && groupRuntimesRef.current.get(gid)?.getCallSnapshot?.();\n                        if (!call) return;\n                        setDismissedCalls((current) => ({ ...current, [gid]: call.callId }));\n                    }, []);\n\n                    const handleLeaveGroupCall = React.useCallback(async () => {\n                        const gid = activeGroupIdRef.current;\n                        if (!gid) return;\n                        const media = groupCallMediaRef.current.get(gid);\n                        if (media) {\n                            groupCallMediaRef.current.delete(gid);\n                            setGroupCallMediaState((current) => {\n                                const next = { ...current };\n                                delete next[gid];\n                                return next;\n                            });\n                            await media.leave().catch(() => {});\n                        }\n                        try { await groupRuntimesRef.current.get(gid)?.leaveCall(); } catch (_) {}\n                    }, []);\n\n                    const activeGroupMedia = React.useCallback(() => (\n                        activeGroupIdRef.current ? groupCallMediaRef.current.get(activeGroupIdRef.current) : null\n                    ), []);\n\n                    const handleGroupCallMic = React.useCallback(() => { activeGroupMedia()?.toggleMic(); }, [activeGroupMedia]);\n                    const handleGroupCallCamera = React.useCallback(() => { activeGroupMedia()?.toggleCamera(); }, [activeGroupMedia]);\n                    const handleGroupCallFlip = React.useCallback(() => { activeGroupMedia()?.flipCamera(); }, [activeGroupMedia]);\n\n                    // Opening a group clears its badge; new traffic scrolls the transcript.\n                    React.useEffect(() => {\n                        if (!activeGroupId) return;\n                        groupsDispatch({ type: GA.CLEAR_UNREAD, id: activeGroupId });\n                    }, [activeGroupId]);\n                    React.useEffect(() => {\n                        const el = groupScrollRef.current;\n                        if (el) el.scrollTop = el.scrollHeight;\n                    }, [activeGroup && activeGroup.messages.length]);\n\n                    // Every group runtime is torn down with the app so no identity key or\n                    // ceremony nonce outlives the tab.\n                    React.useEffect(() => () => {\n                        // Captures first: a group call holds a live microphone, and it must not\n                        // outlive the app under any teardown order.\n                        for (const media of groupCallMediaRef.current.values()) {\n                            media.leave().catch(() => {});\n                        }\n                        groupCallMediaRef.current.clear();\n                        for (const runtime of groupRuntimesRef.current.values()) {\n                            try { runtime.destroy(); } catch (_) {}\n                        }\n                        groupRuntimesRef.current.clear();\n                        // destroy() closes the links its own group opened; this catches any\n                        // that outlived their group \u2014 a dial whose runtime was already gone\n                        // when its connection finally came up.\n                        for (const sessionId of [...meshLinksRef.current.keys()]) {\n                            closeMeshLinkRef.current(sessionId);\n                        }\n                    }, []);\n                    // Send any held-back read receipts for a session (call when the user opens it).\n                    const flushReadAcks = React.useCallback((id) => {\n                        if (!id) return;\n                        const q = queuesRef.current.get(id);\n                        const mgr = managersRef.current.get(id);\n                        if (!q || !mgr || !q.pendingReadAcks || q.pendingReadAcks.length === 0) return;\n                        const acks = q.pendingReadAcks; q.pendingReadAcks = [];\n                        for (const mid of acks) { try { mgr.sendDeliveryReceipt?.(mid); } catch (_) {} }\n                    }, []);\n                    // Opening a session clears its unread badge and releases its read receipts.\n                    React.useEffect(() => {\n                        if (!activeSessionId) return;\n                        dispatch({ type: SA.CLEAR_UNREAD, id: activeSessionId });\n                        if (typeof document === 'undefined' || document.visibilityState === 'visible') flushReadAcks(activeSessionId);\n                    }, [activeSessionId, flushReadAcks]);\n\n                    // App-level lifecycle: create the first session on mount, wire the global\n                    // tab/unload guards, and on unmount disconnect EVERY live manager.\n                    const didInitRef = React.useRef(false);\n                    React.useEffect(() => {\n                        if (didInitRef.current) return;\n                        didInitRef.current = true;\n\n                        // (The first session is created by the ensure-at-least-one-session effect,\n                        // which also handles re-landing after the last chat is closed.)\n\n                        let isTabSwitching = false;\n                        let tabSwitchTimeout = null;\n\n                        const handleBeforeUnload = (event) => {\n                            if (event.type === 'beforeunload' && !isTabSwitching) {\n                                for (const mgr of managersRef.current.values()) {\n                                    try {\n                                        if (mgr.isConnected && mgr.isConnected()) {\n                                            try { mgr.sendSystemMessage({ type: 'peer_disconnect', reason: 'user_disconnect', timestamp: Date.now() }); } catch (_) {}\n                                            setTimeout(() => { try { mgr.disconnect(); } catch (_) {} }, 100);\n                                        } else {\n                                            mgr.disconnect();\n                                        }\n                                    } catch (_) {}\n                                }\n                            } else if (isTabSwitching) {\n                                event.preventDefault();\n                                event.returnValue = '';\n                            }\n                        };\n\n                        const handleVisibilityChange = () => {\n                            if (document.visibilityState === 'hidden') {\n                                isTabSwitching = true;\n                                if (tabSwitchTimeout) clearTimeout(tabSwitchTimeout);\n                                tabSwitchTimeout = setTimeout(() => { isTabSwitching = false; }, 5000);\n                            } else if (document.visibilityState === 'visible') {\n                                isTabSwitching = false;\n                                if (tabSwitchTimeout) { clearTimeout(tabSwitchTimeout); tabSwitchTimeout = null; }\n                                // Tab regained focus \u2192 release held read receipts for the open chat.\n                                flushReadAcks(activeIdRef.current);\n                            }\n                        };\n\n                        window.addEventListener('beforeunload', handleBeforeUnload);\n                        document.addEventListener('visibilitychange', handleVisibilityChange);\n\n                        return () => {\n                            window.removeEventListener('beforeunload', handleBeforeUnload);\n                            document.removeEventListener('visibilitychange', handleVisibilityChange);\n                            if (tabSwitchTimeout) { clearTimeout(tabSwitchTimeout); tabSwitchTimeout = null; }\n                            for (const mgr of managersRef.current.values()) { try { mgr.disconnect(); } catch (_) {} }\n                            managersRef.current.clear();\n                            for (const integ of integrationsRef.current.values()) { try { integ.cleanup?.(); } catch (_) {} }\n                            integrationsRef.current.clear();\n                            queuesRef.current.clear();\n                            statusRef.current.clear();\n                        };\n                    }, []); // run once\n        \n                    // All security features are enabled by default - no session purchase needed\n        \n                    const compressOfferData = (offerData) => {\n                        try {\n                            // Parse the offer data if it's a string\n                            const offer = typeof offerData === 'string' ? JSON.parse(offerData) : offerData;\n                            \n                            // Create a minimal version with only the most essential data\n                            const minimalOffer = {\n                                type: offer.type,\n                                version: offer.version,\n                                timestamp: offer.timestamp,\n                                sessionId: offer.sessionId,\n                                connectionId: offer.connectionId,\n                                verificationCode: offer.verificationCode,\n                                salt: offer.salt,\n                                // Use only key fingerprints instead of full keys\n                                keyFingerprints: offer.keyFingerprints,\n                                // Add a reference to get full data\n                                fullDataAvailable: true,\n                                compressionLevel: 'minimal'\n                            };\n                            \n                            return JSON.stringify(minimalOffer);\n                        } catch (error) {\n                            console.error('Error compressing offer data:', error);\n                            return offerData; // Return original if compression fails\n                        }\n                    };\n\n                    // NOTE: createQRReference() used to live here. It kept the invitation\n                    // payload in localStorage and put only a reference id in the QR \u2014 which\n                    // could not work across devices, since the payload stayed on the\n                    // sender's machine, and left records behind that nothing cleaned up.\n                    // Removed rather than repaired; QR invitations travel as\n                    // self-contained COSE payloads (see packSecurePayload).\n\n                    const createTemplateOffer = (offer) => {\n                        // Minimal template to keep QR within single image capacity\n                        const templateOffer = {\n                            type: 'enhanced_secure_offer_template',\n                            version: '4.0',\n                            sessionId: offer.sessionId,\n                            connectionId: offer.connectionId,\n                            verificationCode: offer.verificationCode,\n                            timestamp: offer.timestamp,\n                            // Avoid bulky fields (SDP, raw keys); keep only fingerprints and essentials\n                            keyFingerprints: offer.keyFingerprints,\n                            // Keep concise auth hints (omit large nonces)\n                            authChallenge: offer?.authChallenge?.challenge,\n                            // Optionally include a compact capability hint if small\n                            capabilities: Array.isArray(offer.capabilities) && offer.capabilities.length <= 5\n                                ? offer.capabilities\n                                : undefined\n                        };\n                        \n                        return templateOffer;\n                    };\n\n                    // Conservative QR payload limits (characters). Adjust per error correction level.\n                    const MAX_QR_LEN = 800;      // for JSON/plain/gzip\n                    const BIN_MAX_QR_LEN = 400;  // stricter for SB1:bin to improve scan reliability\n                    const [qrFramesTotal, setQrFramesTotal] = React.useState(0);\n                    const [qrFrameIndex, setQrFrameIndex] = React.useState(0);\n                    const [qrManualMode, setQrManualMode] = React.useState(false);\n\n                    // Animated QR state (for multi-chunk COSE)\n                    const qrAnimationRef = React.useRef({ timer: null, chunks: [], idx: 0, active: false });\n                    // Stop any running QR auto-advance when the active session changes, so frames\n                    // are never pushed into the wrong session's setup slice.\n                    React.useEffect(() => () => {\n                        try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); qrAnimationRef.current.timer = null; } } catch {}\n                    }, [activeSessionId]);\n                    const stopQrAnimation = () => {\n                        try { if (qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                        qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                        setQrFrameIndex(0);\n                        setQrFramesTotal(0);\n                        setQrManualMode(false);\n                    };\n\n                    // Render frame at current index (no index mutation)\n                    const renderCurrent = async () => {\n                        const { chunks, idx } = qrAnimationRef.current || {};\n                        if (!chunks || !chunks.length) return;\n                        const current = chunks[idx % chunks.length];\n                        try {\n                            const isDesktop = (typeof window !== 'undefined') && ((window.innerWidth || 0) >= 1024);\n                            const QR_SIZE = isDesktop ? 720 : 512;\n                            const url = await (window.generateQRCode ? window.generateQRCode(current, { errorCorrectionLevel: 'M', margin: 2, size: QR_SIZE }) : Promise.resolve(''));\n                            if (url) setQrCodeUrl(url);\n                        } catch (e) {\n                            console.warn('Animated QR render error (current):', e);\n                        }\n                        setQrFrameIndex(((qrAnimationRef.current?.idx || 0) % (qrAnimationRef.current?.chunks?.length || 1)) + 1);\n                    };\n\n                    // Render current frame, then advance index by 1\n                    const renderAndAdvance = async () => {\n                        await renderCurrent();\n                        const len = qrAnimationRef.current?.chunks?.length || 0;\n                        if (len > 0) {\n                            const nextIdx = ((qrAnimationRef.current?.idx || 0) + 1) % len;\n                            qrAnimationRef.current.idx = nextIdx;\n                            setQrFrameIndex(nextIdx + 1);\n                        }\n                    };\n\n                    const toggleQrManualMode = () => {\n                        const newManualMode = !qrManualMode;\n                        setQrManualMode(newManualMode);\n                        \n                        if (newManualMode) {\n\n                            if (qrAnimationRef.current.timer) {\n                                clearInterval(qrAnimationRef.current.timer);\n                                qrAnimationRef.current.timer = null;\n                            }\n                            console.log('QR Manual mode enabled - auto-scroll stopped');\n                        } else {\n                            if (qrAnimationRef.current.chunks.length > 1) {\n                                const intervalMs = 3000;\n                                qrAnimationRef.current.active = true;\n                                clearInterval(qrAnimationRef.current.timer);\n                                qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                            }\n                            console.log('QR Manual mode disabled - auto-scroll resumed');\n                        }\n                    };\n\n                    const nextQrFrame = async () => {\n                        console.log('\uD83C\uDFAE nextQrFrame called, qrFramesTotal:', qrFramesTotal, 'qrAnimationRef.current:', qrAnimationRef.current);\n                        if (qrAnimationRef.current.chunks.length > 1) {\n                            const nextIdx = (qrAnimationRef.current.idx + 1) % qrAnimationRef.current.chunks.length;\n                            qrAnimationRef.current.idx = nextIdx;\n                            setQrFrameIndex(nextIdx + 1);\n                            console.log('\uD83C\uDFAE Next frame index:', nextIdx + 1);\n                            // Ensure auto-advance timer runs in manual mode too\n                            try { clearInterval(qrAnimationRef.current.timer); } catch {}\n                            qrAnimationRef.current.timer = null;\n                            await renderCurrent();\n                            // If not in manual mode, restart auto timer\n                            if (!qrManualMode && qrAnimationRef.current.chunks.length > 1) {\n                                const intervalMs = 3000;\n                                qrAnimationRef.current.active = true;\n                                qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                            } else {\n                                qrAnimationRef.current.active = false;\n                            }\n                        } else {\n                            console.log('\uD83C\uDFAE No multiple frames to navigate');\n                        }\n                    };\n\n                    const prevQrFrame = async () => {\n                        console.log('\uD83C\uDFAE prevQrFrame called, qrFramesTotal:', qrFramesTotal, 'qrAnimationRef.current:', qrAnimationRef.current);\n                        if (qrAnimationRef.current.chunks.length > 1) {\n                            const prevIdx = (qrAnimationRef.current.idx - 1 + qrAnimationRef.current.chunks.length) % qrAnimationRef.current.chunks.length;\n                            qrAnimationRef.current.idx = prevIdx;\n                            setQrFrameIndex(prevIdx + 1);\n                            console.log('\uD83C\uDFAE Previous frame index:', prevIdx + 1);\n                            try { clearInterval(qrAnimationRef.current.timer); } catch {}\n                            qrAnimationRef.current.timer = null;\n                            await renderCurrent();\n                            if (!qrManualMode && qrAnimationRef.current.chunks.length > 1) {\n                                const intervalMs = 3000;\n                                qrAnimationRef.current.active = true;\n                                qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                            } else {\n                                qrAnimationRef.current.active = false;\n                            }\n                        } else {\n                            console.log('\uD83C\uDFAE No multiple frames to navigate');\n                        }\n                    };\n\n                    // Buffer for assembling scanned COSE chunks\n                    const qrChunksBufferRef = React.useRef({ id: null, total: 0, seen: new Set(), items: [] });\n\n                    const generateQRCode = async (data) => {\n                        try {\n                            const originalSize = typeof data === 'string' ? data.length : JSON.stringify(data).length;\n                            const isDesktop = (typeof window !== 'undefined') && ((window.innerWidth || 0) >= 1024);\n                            const QR_SIZE = isDesktop ? 720 : 512;\n                            \n                            // Try binary format first (CBOR + deflate + base64url)\n                            if (typeof window.generateBinaryQRCodeFromObject === 'function') {\n                                try {\n                                    const obj = typeof data === 'string' ? JSON.parse(data) : data;\n                                    const qrDataUrl = await window.generateBinaryQRCodeFromObject(obj, { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                    if (qrDataUrl) {\n                                        try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                        qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                                        setQrFrameIndex(0);\n                                        setQrFramesTotal(0);\n                                        setQrManualMode(false);\n                                        setQrCodeUrl(qrDataUrl);\n                                        setQrFramesTotal(1);\n                                        setQrFrameIndex(1);\n                                        return;\n                                    }\n                                } catch (e) {\n                                    console.warn('Binary QR generation failed, falling back to compressed:', e?.message || e);\n                                }\n                            }\n                            \n                            // Fallback to compressed JSON\n                            if (typeof window.generateCompressedQRCode === 'function') {\n                                try {\n                                    const payload = typeof data === 'string' ? data : JSON.stringify(data);\n                                    const qrDataUrl = await window.generateCompressedQRCode(payload, { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                    if (qrDataUrl) {\n                                        try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                        qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                                        setQrFrameIndex(0);\n                                        setQrFramesTotal(0);\n                                        setQrManualMode(false);\n                                        setQrCodeUrl(qrDataUrl);\n                                        setQrFramesTotal(1);\n                                        setQrFrameIndex(1);\n                                        return;\n                                    }\n                                } catch (e) {\n                                    console.warn('Compressed QR generation failed, falling back to plain:', e?.message || e);\n                                }\n                            }\n                            \n                            // Final fallback to plain JSON\n                            const payload = typeof data === 'string' ? data : JSON.stringify(data);\n                            if (payload.length <= MAX_QR_LEN) {\n                                if (!window.generateQRCode) throw new Error('QR code generator unavailable');\n                                try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                                setQrFrameIndex(0);\n                                setQrFramesTotal(0);\n                                setQrManualMode(false);\n                                const qrDataUrl = await window.generateQRCode(payload, { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                    setQrCodeUrl(qrDataUrl);\n                                setQrFramesTotal(1);\n                                setQrFrameIndex(1);\n                                    return;\n                            }\n\n                            // Large payload: \u0440\u0430\u0437\u0431\u0438\u0432\u0430\u0435\u043C \u043D\u0430 \u0444\u0440\u0435\u0439\u043C\u044B (plain JSON)\n                            try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                            qrAnimationRef.current = { timer: null, chunks: [], idx: 0, active: false };\n                            setQrFrameIndex(0);\n                            setQrFramesTotal(0);\n                            setQrManualMode(false);\n                            const id = `raw_${Date.now()}_${Math.random().toString(36).slice(2)}`;\n\n                            const TARGET_CHUNKS = 10;\n                            const FRAME_MAX = Math.max(200, Math.floor(payload.length / TARGET_CHUNKS));\n                            const total = Math.ceil(payload.length / FRAME_MAX);\n                            const rawChunks = [];\n                            for (let i = 0; i < total; i++) {\n                                const seq = i + 1;\n                                const part = payload.slice(i * FRAME_MAX, (i + 1) * FRAME_MAX);\n                                rawChunks.push(JSON.stringify({ hdr: { v: 1, id, seq, total, rt: 'raw' }, body: part }));\n                            }\n                            if (!window.generateQRCode) throw new Error('QR code generator unavailable');\n                            if (rawChunks.length === 1) {\n                                const url = await window.generateQRCode(rawChunks[0], { errorCorrectionLevel: 'M', margin: 2, size: QR_SIZE });\n                                setQrCodeUrl(url);\n                                setQrFramesTotal(1);\n                                setQrFrameIndex(1);\n                                    return;\n                                }\n                            qrAnimationRef.current.chunks = rawChunks;\n                            qrAnimationRef.current.idx = 0;\n                            qrAnimationRef.current.active = true;\n                            setQrFramesTotal(rawChunks.length);\n                            setQrFrameIndex(1);\n                                const EC_OPTS = { errorCorrectionLevel: 'M', margin: 2, size: QR_SIZE };\n                                await renderNext();\n\n                                if (!qrManualMode) {\n                                    const intervalMs = 4000; // 4 seconds per frame for better readability\n                                qrAnimationRef.current.active = true;\n                                qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                                }\n                            return;\n                        } catch (error) {\n                            console.error('QR code generation failed:', error);\n                            setMessages(prev => [...prev, {\n                                message: ` QR code generation failed: ${error.message}`,\n                                type: 'error'\n                            }]);\n                        }\n                    };\n\n                    const reconstructFromTemplate = (templateData) => {\n                        // Reconstruct full offer from template\n                        const fullOffer = {\n                            type: \"enhanced_secure_offer\",\n                            version: templateData.version,\n                            timestamp: templateData.timestamp,\n                            sessionId: templateData.sessionId,\n                            connectionId: templateData.connectionId,\n                            verificationCode: templateData.verificationCode,\n                            salt: templateData.salt,\n                            sdp: templateData.sdp,\n                            keyFingerprints: templateData.keyFingerprints,\n                            capabilities: templateData.capabilities,\n                            \n                            // Reconstruct ECDH key object\n                            ecdhPublicKey: {\n                                keyType: \"ECDH\",\n                                keyData: templateData.ecdhKeyData,\n                                timestamp: templateData.timestamp - 1000, // Approximate\n                                version: templateData.version,\n                                signature: templateData.ecdhSignature\n                            },\n                            \n                            // Reconstruct ECDSA key object\n                            ecdsaPublicKey: {\n                                keyType: \"ECDSA\",\n                                keyData: templateData.ecdsaKeyData,\n                                timestamp: templateData.timestamp - 999, // Approximate\n                                version: templateData.version,\n                                signature: templateData.ecdsaSignature\n                            },\n                            \n                            // Reconstruct auth challenge\n                            authChallenge: {\n                                challenge: templateData.authChallenge,\n                                timestamp: templateData.timestamp,\n                                nonce: templateData.authNonce,\n                                version: templateData.version\n                            },\n                            \n                            // Generate security level (can be recalculated)\n                            securityLevel: {\n                                level: \"CRITICAL\",\n                                score: 20,\n                                color: \"red\",\n                                verificationResults: {\n                                    encryption: { passed: false, details: \"Encryption not working\", points: 0 },\n                                    keyExchange: { passed: true, details: \"Simple key exchange verified\", points: 15 },\n                                    messageIntegrity: { passed: false, details: \"Message integrity failed\", points: 0 },\n                                    rateLimiting: { passed: true, details: \"Rate limiting active\", points: 5 },\n                                    ecdsa: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    metadataProtection: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    pfs: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    nestedEncryption: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    packetPadding: { passed: false, details: \"Enhanced session required - feature not available\", points: 0 },\n                                    advancedFeatures: { passed: false, details: \"Premium session required - feature not available\", points: 0 }\n                                },\n                                timestamp: templateData.timestamp,\n                                details: \"Real verification: 20/100 security checks passed (2/4 available)\",\n                                isRealData: true,\n                                passedChecks: 2,\n                                totalChecks: 4,\n                                sessionType: \"demo\",\n                                maxPossibleScore: 50\n                            }\n                        };\n                        \n                        return fullOffer;\n                    };\n\n                    const handleQRScan = async (scannedData) => {\n                        try {\n                            console.log('QR Code scanned:', scannedData.substring(0, 100) + '...');\n                            console.log('Current buffer state:', qrChunksBufferRef.current);\n\n                            // An SBQ2 invitation is ONE frame, always. It has to be\n                            // recognised before any chunk logic runs: the assembler\n                            // below assumes a fixed four-frame split (that is what\n                            // an SB1 payload is cut into) and the fallback branch\n                            // claims every non-JSON string over 100 characters \u2014 a\n                            // 151-character SB2: code matches, is filed as chunk 1\n                            // of 4, and the scanner waits for three frames that do\n                            // not exist.\n                            if (scannedData.startsWith('SB2:') || scannedData.charCodeAt(0) === 0x02) {\n                                qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                if (showOfferStep) {\n                                    setAnswerInput(scannedData);\n                                } else {\n                                    setOfferInput(scannedData);\n                                }\n                                setMessages(prev => [...prev, {\n                                    message: t('flow.invitationCaptured'),\n                                    type: 'success'\n                                }]);\n                                setShowQRScannerModal(false);\n                                return Promise.resolve(true);\n                            }\n\n                            \n                            // Check if this is a binary chunk (starts with SB1:bin: or is a raw binary chunk)\n                            if (scannedData.startsWith('SB1:bin:') || (qrChunksBufferRef.current && qrChunksBufferRef.current.id)) {\n                                console.log('Binary chunk detected:', scannedData.substring(0, 50) + '...');\n                                \n                                // This is a binary chunk - add to buffer\n                                if (!qrChunksBufferRef.current.id) {\n                                    console.log('Initializing buffer for binary chunks');\n                                    // Initialize buffer for binary chunks\n                                    qrChunksBufferRef.current = { \n                                        id: `bin_${Date.now()}`, \n                                        // SB1 payloads are split into exactly four\n                                        // frames by the generator above. SBQ2 never\n                                        // reaches here \u2014 it is one frame and is\n                                        // handled at the top of this function.\n                                        total: 4,\n                                        seen: new Set(), \n                                        items: [],\n                                        lastUpdateMs: Date.now()\n                                    };\n                                }\n                                \n                                // Add chunk to buffer (use data hash as identifier)\n                                const chunkHash = scannedData.substring(0, 50); // Use first 50 chars as hash\n                                \n                                // Check if this chunk was already scanned\n                                if (qrChunksBufferRef.current.seen.has(chunkHash)) {\n                                    console.log(`Chunk already scanned, ignoring...`);\n                                    return Promise.resolve(false);\n                                }\n                                \n                                qrChunksBufferRef.current.seen.add(chunkHash);\n                                qrChunksBufferRef.current.items.push(scannedData);\n                                qrChunksBufferRef.current.lastUpdateMs = Date.now();\n                                \n                                // Emit progress and force re-render\n                                try {\n                                    const uniqueCount = qrChunksBufferRef.current.seen.size;\n                                    document.dispatchEvent(new CustomEvent('qr-scan-progress', { \n                                        detail: { \n                                            id: qrChunksBufferRef.current.id, \n                                            seq: uniqueCount, \n                                            total: qrChunksBufferRef.current.total \n                                        } \n                                    }));\n                                    \n                                    // Force re-render to update progress indicator\n                                    setQrFramesTotal(qrChunksBufferRef.current.total);\n                                    setQrFrameIndex(uniqueCount);\n                                } catch {}\n                                \n                                // Check if we have all chunks\n                                const isComplete = qrChunksBufferRef.current.seen.size >= qrChunksBufferRef.current.total;\n                                console.log(`Chunks collected: ${qrChunksBufferRef.current.seen.size}/${qrChunksBufferRef.current.total}, complete: ${isComplete}`);\n                                \n                                if (!isComplete) {\n                                    // Keep scanner open for more chunks\n                                    console.log(`Scanned chunk ${qrChunksBufferRef.current.seen.size}/${qrChunksBufferRef.current.total}, waiting for more...`);\n                                    return Promise.resolve(false);\n                                }\n                                \n                                // All chunks collected - reconstruct binary data\n                                try {\n                                    const fullBinaryData = qrChunksBufferRef.current.items.join('');\n                                    // Store the original binary data, not decoded JSON\n                                    if (showOfferStep) {\n                                        setAnswerInput(fullBinaryData);\n                                    } else {\n                                        setOfferInput(fullBinaryData);\n                                    }\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: 'All binary chunks captured. Payload reconstructed.', \n                                        type: 'success' \n                                    }]);\n                                    \n                                    // Clear buffer and close scanner\n                                    qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                    setShowQRScannerModal(false);\n                                    return Promise.resolve(true);\n                                } catch (e) {\n                                    console.warn('Binary chunks reconstruction failed:', e);\n                                    return Promise.resolve(false);\n                                }\n                            }\n                            \n                            // Check if this might be a binary chunk (long string without JSON structure)\n                            if (scannedData.length > 100 && !scannedData.startsWith('{') && !scannedData.startsWith('[')) {\n                                console.log('Detected potential binary chunk (long non-JSON string):', scannedData.substring(0, 50) + '...');\n                                \n                                // Initialize buffer if not exists\n                                if (!qrChunksBufferRef.current.id) {\n                                    console.log('Initializing buffer for potential binary chunks');\n                                    qrChunksBufferRef.current = { \n                                        id: `bin_${Date.now()}`, \n                                        // SB1 payloads are split into exactly four\n                                        // frames by the generator above. SBQ2 never\n                                        // reaches here \u2014 it is one frame and is\n                                        // handled at the top of this function.\n                                        total: 4,\n                                        seen: new Set(), \n                                        items: [],\n                                        lastUpdateMs: Date.now()\n                                    };\n                                }\n                                \n                                // Add chunk to buffer (use data hash as identifier)\n                                const chunkHash = scannedData.substring(0, 50); // Use first 50 chars as hash\n                                \n                                // Check if this chunk was already scanned\n                                if (qrChunksBufferRef.current.seen.has(chunkHash)) {\n                                    console.log(`Chunk already scanned, ignoring...`);\n                                    return Promise.resolve(false);\n                                }\n                                \n                                qrChunksBufferRef.current.seen.add(chunkHash);\n                                qrChunksBufferRef.current.items.push(scannedData);\n                                qrChunksBufferRef.current.lastUpdateMs = Date.now();\n                                \n                                // Force re-render to update progress indicator\n                                try {\n                                    const uniqueCount = qrChunksBufferRef.current.seen.size;\n                                    document.dispatchEvent(new CustomEvent('qr-scan-progress', { \n                                        detail: { \n                                            id: qrChunksBufferRef.current.id, \n                                            seq: uniqueCount, \n                                            total: qrChunksBufferRef.current.total \n                                        } \n                                    }));\n                                    \n                                    // Force re-render to update progress indicator\n                                    setQrFramesTotal(qrChunksBufferRef.current.total);\n                                    setQrFrameIndex(uniqueCount);\n                                } catch {}\n                                \n                                // Check if we have all chunks\n                                const isComplete = qrChunksBufferRef.current.seen.size >= qrChunksBufferRef.current.total;\n                                console.log(`Chunks collected: ${qrChunksBufferRef.current.seen.size}/${qrChunksBufferRef.current.total}, complete: ${isComplete}`);\n                                \n                                if (!isComplete) {\n                                    // Keep scanner open for more chunks\n                                    console.log(`Scanned chunk ${qrChunksBufferRef.current.seen.size}/${qrChunksBufferRef.current.total}, waiting for more...`);\n                                    return Promise.resolve(false);\n                                }\n                                \n                                // All chunks collected - reconstruct binary data\n                                try {\n                                    const fullBinaryData = qrChunksBufferRef.current.items.join('');\n                                    // Store the original binary data, not decoded JSON\n                                    if (showOfferStep) {\n                                        setAnswerInput(fullBinaryData);\n                                    } else {\n                                        setOfferInput(fullBinaryData);\n                                    }\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: 'All binary chunks captured. Payload reconstructed.', \n                                        type: 'success' \n                                    }]);\n                                    \n                                    // Clear buffer and close scanner\n                                    qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                    setShowQRScannerModal(false);\n                                    return Promise.resolve(true);\n                                } catch (e) {\n                                    console.warn('Binary chunks reconstruction failed:', e);\n                                    return Promise.resolve(false);\n                                }\n                            }\n                            \n                            // Single QR code - try to decode directly\n                            // Removed verbose debug log\n                            let parsedData;\n                            if (typeof window.decodeAnyPayload === 'function') {\n                                const any = window.decodeAnyPayload(scannedData);\n                                if (typeof any === 'string') {\n                                    parsedData = JSON.parse(any);\n                                } else {\n                                    parsedData = any; // object from binary\n                                }\n                            } else {\n                                const maybeDecompressed = (typeof window.decompressIfNeeded === 'function') ? window.decompressIfNeeded(scannedData) : scannedData;\n                                parsedData = JSON.parse(maybeDecompressed);\n                            }\n                            console.log('Decoded data:', parsedData);\n                            \n                            // QR with hdr/body: COSE or RAW/BIN animated frames\n                            if (parsedData.hdr && parsedData.body) {\n                                const { hdr } = parsedData;\n                                // Initialize/rotate buffer by id\n                                if (!qrChunksBufferRef.current.id || qrChunksBufferRef.current.id !== hdr.id) {\n                                    qrChunksBufferRef.current = { id: hdr.id, total: hdr.total || 1, seen: new Set(), items: [], lastUpdateMs: Date.now() };\n                                    try {\n                                        document.dispatchEvent(new CustomEvent('qr-scan-progress', { detail: { id: hdr.id, seq: 0, total: hdr.total || 1 } }));\n                                    } catch {}\n                                }\n                                // Deduplicate & record\n                                if (!qrChunksBufferRef.current.seen.has(hdr.seq)) {\n                                    qrChunksBufferRef.current.seen.add(hdr.seq);\n                                    qrChunksBufferRef.current.items.push(scannedData);\n                                    qrChunksBufferRef.current.lastUpdateMs = Date.now();\n                                }\n                                // Emit progress based on unique frames captured\n                                try {\n                                    const uniqueCount = qrChunksBufferRef.current.seen.size;\n                                    document.dispatchEvent(new CustomEvent('qr-scan-progress', { detail: { id: hdr.id, seq: uniqueCount, total: qrChunksBufferRef.current.total || hdr.total || 0 } }));\n                                } catch {}\n                                const isComplete = qrChunksBufferRef.current.seen.size >= (qrChunksBufferRef.current.total || 1);\n                                if (!isComplete) {\n                                    // Explicitly keep scanner open\n                                    return Promise.resolve(false);\n                                }\n                                // Completed: decide RAW vs BIN vs COSE\n                                if (hdr.rt === 'raw') {\n                                    try {\n                                        // Sort by seq and concatenate bodies\n                                        const parts = qrChunksBufferRef.current.items\n                                            .map(s => JSON.parse(s))\n                                            .sort((a, b) => (a.hdr.seq || 0) - (b.hdr.seq || 0))\n                                            .map(p => p.body || '');\n                                        const fullText = parts.join('');\n                                        const payloadObj = JSON.parse(fullText);\n                                        if (showOfferStep) {\n                                            setAnswerInput(JSON.stringify(payloadObj, null, 2));\n                                        } else {\n                                            setOfferInput(JSON.stringify(payloadObj, null, 2));\n                                        }\n                                        setMessages(prev => [...prev, { message: 'All frames captured. RAW payload reconstructed.', type: 'success' }]);\n                                        try { document.dispatchEvent(new CustomEvent('qr-scan-complete', { detail: { id: hdr.id } })); } catch {}\n                                        // Close scanner from caller by returning true\n                                        qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                        setShowQRScannerModal(false);\n                                        return Promise.resolve(true);\n                                    } catch (e) {\n                                        console.warn('RAW multi-frame reconstruction failed:', e);\n                                        return Promise.resolve(false);\n                                    }\n                                } else if (hdr.rt === 'bin') {\n                                    try {\n                                        const parts = qrChunksBufferRef.current.items\n                                            .map(s => JSON.parse(s))\n                                            .sort((a, b) => (a.hdr.seq || 0) - (b.hdr.seq || 0))\n                                            .map(p => p.body || '');\n                                        const fullText = parts.join(''); // SB1:bin:...\n                                        let payloadObj;\n                                        if (typeof window.decodeAnyPayload === 'function') {\n                                            const any = window.decodeAnyPayload(fullText);\n                                            payloadObj = (typeof any === 'string') ? JSON.parse(any) : any;\n                                        } else {\n                                            payloadObj = JSON.parse(fullText);\n                                        }\n                                        if (showOfferStep) {\n                                            setAnswerInput(JSON.stringify(payloadObj, null, 2));\n                                        } else {\n                                            setOfferInput(JSON.stringify(payloadObj, null, 2));\n                                        }\n                                        setMessages(prev => [...prev, { message: 'All frames captured. BIN payload reconstructed.', type: 'success' }]);\n                                        try { document.dispatchEvent(new CustomEvent('qr-scan-complete', { detail: { id: hdr.id } })); } catch {}\n                                        qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                        setShowQRScannerModal(false);\n                                        return Promise.resolve(true);\n                                    } catch (e) {\n                                        console.warn('BIN multi-frame reconstruction failed:', e);\n                                        return Promise.resolve(false);\n                                    }\n                                } else if (window.receiveAndProcess) {\n                                    try {\n                                        const results = await window.receiveAndProcess(qrChunksBufferRef.current.items);\n                                    if (results.length > 0) {\n                                        const { payloadObj } = results[0];\n                                        if (showOfferStep) {\n                                            setAnswerInput(JSON.stringify(payloadObj, null, 2));\n                                        } else {\n                                            setOfferInput(JSON.stringify(payloadObj, null, 2));\n                                            }\n                                            setMessages(prev => [...prev, { message: 'All frames captured. COSE payload reconstructed.', type: 'success' }]);\n                                            try { document.dispatchEvent(new CustomEvent('qr-scan-complete', { detail: { id: hdr.id } })); } catch {}\n                                            qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                                            setShowQRScannerModal(false);\n                                            return Promise.resolve(true);\n                                        }\n                                    } catch (e) {\n                                        console.warn('COSE multi-chunk processing failed:', e);\n                                    }\n                                    return Promise.resolve(false);\n                                } else {\n                                    return Promise.resolve(false);\n                                }\n                            }\n                            \n                            // Check if this is a template-based QR code\n                            if (parsedData.type === 'enhanced_secure_offer_template') {\n                                console.log('QR scan: Template-based offer detected, reconstructing...');\n                                const fullOffer = reconstructFromTemplate(parsedData);\n                                \n                                // Determine which input to populate based on current mode\n                                if (showOfferStep) {\n                                    // In \"Waiting for peer's response\" mode - populate answerInput\n                                    setAnswerInput(JSON.stringify(fullOffer, null, 2));\n                                    console.log('\uD83D\uDCF1 Template data populated to answerInput (waiting for response mode)');\n                                } else {\n                                    // In \"Paste secure invitation\" mode - populate offerInput\n                                    setOfferInput(JSON.stringify(fullOffer, null, 2));\n                                    console.log('\uD83D\uDCF1 Template data populated to offerInput (paste invitation mode)');\n                                }\n                                setMessages(prev => [...prev, {\n                                    message: '\uD83D\uDCF1 QR code scanned successfully! Full offer reconstructed from template.',\n                                    type: 'success'\n                                }]);\n                                setShowQRScannerModal(false); // Close QR scanner modal\n                                return true;\n                            }\n                            // Reference-based QR codes are no longer produced or read:\n                            // the payload they pointed at lived in the *sender's*\n                            // localStorage, so a scan on the peer's device never had\n                            // anything to resolve, and the records leaked the session's\n                            // SDP, keys and SAS code onto disk forever. See the note\n                            // where createQRReference used to be.\n                            else if (parsedData.type === 'secure_offer_reference') {\n                                setMessages(prev => [...prev, {\n                                    message: t('err.retiredQr'),\n                                    type: 'error'\n                                }]);\n                                return false;\n                            } else {\n                                // If payload was compressed, it's already decompressed above; keep legacy warning only when clearly incomplete\n                                if (!parsedData.sdp && parsedData.type === 'enhanced_secure_offer') {\n                                    setMessages(prev => [...prev, {\n                                        message: t('err.compressedQrNote'),\n                                        type: 'warning'\n                                    }]);\n                                }\n                                \n                                // Determine which input to populate based on current mode\n                                if (showOfferStep) {\n                                    // In \"Waiting for peer's response\" mode - populate answerInput\n                                    console.log('QR scan: Populating answerInput with:', parsedData);\n                                    setAnswerInput(JSON.stringify(parsedData, null, 2));\n                                } else {\n                                    // In \"Paste secure invitation\" mode - populate offerInput\n                                    console.log('QR scan: Populating offerInput with:', parsedData);\n                                    setOfferInput(JSON.stringify(parsedData, null, 2));\n                                }\n                                setMessages(prev => [...prev, {\n                                    message: '\uD83D\uDCF1 QR code scanned successfully!',\n                                    type: 'success'\n                                }]);\n                                setShowQRScannerModal(false);\n                                return true;\n                            }\n                        } catch (error) {\n                            // If not JSON, use as plain text\n                            if (showOfferStep) {\n                                // In \"Waiting for peer's response\" mode - populate answerInput\n                                setAnswerInput(scannedData);\n                            } else {\n                                // In \"Paste secure invitation\" mode - populate offerInput\n                                setOfferInput(scannedData);\n                            }\n                            setMessages(prev => [...prev, {\n                                message: '\uD83D\uDCF1 QR code scanned successfully!',\n                                type: 'success'\n                            }]);\n                            setShowQRScannerModal(false);\n                            return true;\n                        }\n                    };\n\n\n\n        \n                    const handleCreateOffer = async () => {\n                        try {\n                            // All security features are enabled by default\n                            setIsGeneratingKeys(true);\n                            setOfferData('');\n                            setShowOfferStep(false);\n                            setShowQRCode(false);\n                            setQrCodeUrl('');\n                            \n                            const offer = await webrtcManagerRef.current.createSecureOffer();\n                            \n                            // Store offer data directly (no encryption needed with SAS)\n                            setOfferData(offer);\n                            setShowOfferStep(true);\n                            \n                            // Generate QR code with binary format and chunking\n                            const offerString = typeof offer === 'object' ? JSON.stringify(offer) : offer;\n                            try {\n                                if (typeof window.encodeBinaryToPrefixed === 'function') {\n                                    const bin = window.encodeBinaryToPrefixed(offerString);\n                                    // Force chunking into 4 parts - split binary data directly\n                                    const TARGET_CHUNKS = 4;\n                                    let total = TARGET_CHUNKS;\n                                    let FRAME_MAX = Math.max(200, Math.ceil(bin.length / TARGET_CHUNKS));\n                                    if (FRAME_MAX <= 0) FRAME_MAX = 200;\n                                    \n                                    // Ensure we don't exceed TARGET_CHUNKS\n                                    if (bin.length <= FRAME_MAX) {\n                                        total = 1;\n                                        FRAME_MAX = bin.length;\n                                    } else {\n                                        // Recalculate to ensure exactly TARGET_CHUNKS parts\n                                        FRAME_MAX = Math.ceil(bin.length / TARGET_CHUNKS);\n                                        total = TARGET_CHUNKS;\n                                    }\n                                    \n                                    const id = `bin_${Date.now()}_${Math.random().toString(36).slice(2)}`;\n                                    const chunks = [];\n                                    for (let i = 0; i < total; i++) {\n                                        const seq = i + 1;\n                                        const part = bin.slice(i * FRAME_MAX, (i + 1) * FRAME_MAX);\n                                        // Store binary chunks directly without JSON wrapper\n                                        chunks.push(part);\n                                    }\n                                    \n                                    // Seed first frame and start auto-advance immediately\n                                    const isDesktop = (typeof window !== 'undefined') && ((window.innerWidth || 0) >= 1024);\n                                    const QR_SIZE = isDesktop ? 720 : 512;\n                                    if (window.generateQRCode && chunks.length > 0) {\n                                        const firstUrl = await window.generateQRCode(chunks[0], { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                        if (firstUrl) setQrCodeUrl(firstUrl);\n                                    }\n                                    \n                                    // Store precomputed chunks to ref, ready for animation\n                                    try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                    qrAnimationRef.current = { timer: null, chunks, idx: 0, active: true };\n                                    setQrFramesTotal(chunks.length);\n                                    setQrFrameIndex(1);\n                                    setQrManualMode(false);\n                                    \n                                    // Start auto-advance loop for Offer immediately\n                                    const intervalMs = 3000;\n                                    qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                                    \n                                    // Show QR immediately for Offer flow\n                                    try { setShowQRCode(true); } catch {}\n                                } else {\n                                    // Fallback to single QR\n                                    await generateQRCode(offer);\n                                    try { setShowQRCode(true); } catch {}\n                                }\n                            } catch (e) {\n                                console.warn('Offer QR generation failed:', e);\n                            }\n        \n                            const existingMessages = messages.filter(m => \n                                m.type === 'system' && \n                                (m.message.includes(t('flow.invitationCreated')) || m.message.includes(t('flow.sendEncryptedCode')))\n                            );\n                            \n                            if (existingMessages.length === 0) {\n                                setMessages(prev => [...prev, { \n                                    message: t('flow.invitationCreatedBang'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n                                \n                                setMessages(prev => [...prev, { \n                                    message: t('flow.sendInvitation'),\n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n        \n                            }\n        \n                            if (!window.isUpdatingSecurity) {\n                                updateSecurityLevel().catch(console.error);\n                            }\n                                                } catch (error) {\n                                    setMessages(prev => [...prev, { \n                                        message: `Error creating invitation: ${error.message}`, \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n                                } finally {\n                                    setIsGeneratingKeys(false);\n                                }\n                    };\n        \n                    const handleCreateAnswer = async () => {\n                        try {\n                            \n                            if (!offerInput.trim()) {\n                                setMessages(prev => [...prev, { \n                                    message: t('err.needInvitation'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n                                return;\n                            }\n        \n                            try {\n                                setMessages(prev => [...prev, { \n                                    message: t('flow.processingInvitation'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n        \n                                let offer;\n                                try {\n                                    // Prefer binary decode first, then gzip JSON\n                                    if (typeof window.decodeAnyPayload === 'function') {\n                                        const any = window.decodeAnyPayload(offerInput.trim());\n                                        offer = (typeof any === 'string') ? JSON.parse(any) : any;\n                                    } else {\n                                        const rawText = (typeof window.decompressIfNeeded === 'function') ? window.decompressIfNeeded(offerInput.trim()) : offerInput.trim();\n                                        offer = JSON.parse(rawText);\n                                    }\n                                } catch (parseError) {\n                                    throw new Error(`Invalid invitation format: ${parseError.message}`);\n                                }\n        \n                                    if (!offer || typeof offer !== 'object') {\n                                        throw new Error('The invitation must be an object');\n                                    }\n        \n                                    // Support both compact and legacy offer formats\n                                    const isValidOfferType = (offer.t === 'offer') || (offer.type === 'enhanced_secure_offer');\n                                    if (!isValidOfferType) {\n                                        throw new Error('Invalid invitation type. Expected offer or enhanced_secure_offer');\n                                    }\n\n                                    const answer = await webrtcManagerRef.current.createSecureAnswer(offer);\n                                    \n                                    // Store answer data directly (no encryption needed with SAS)\n                                    setAnswerData(answer);\n                                    setShowAnswerStep(true);\n                                    \n                                    // Generate QR code with binary format and chunking\n                                    const answerString = typeof answer === 'object' ? JSON.stringify(answer) : answer;\n                                    try {\n                                        if (typeof window.encodeBinaryToPrefixed === 'function') {\n                                            const bin = window.encodeBinaryToPrefixed(answerString);\n                                            // Force chunking into 4 parts - split binary data directly\n                                            const TARGET_CHUNKS = 4;\n                                            let total = TARGET_CHUNKS;\n                                            let FRAME_MAX = Math.max(200, Math.ceil(bin.length / TARGET_CHUNKS));\n                                            if (FRAME_MAX <= 0) FRAME_MAX = 200;\n                                            \n                                            // Ensure we don't exceed TARGET_CHUNKS\n                                            if (bin.length <= FRAME_MAX) {\n                                                total = 1;\n                                                FRAME_MAX = bin.length;\n                                            } else {\n                                                // Recalculate to ensure exactly TARGET_CHUNKS parts\n                                                FRAME_MAX = Math.ceil(bin.length / TARGET_CHUNKS);\n                                                total = TARGET_CHUNKS;\n                                            }\n                                            \n                                            const id = `ans_${Date.now()}_${Math.random().toString(36).slice(2)}`;\n                                            const chunks = [];\n                                            for (let i = 0; i < total; i++) {\n                                                const seq = i + 1;\n                                                const part = bin.slice(i * FRAME_MAX, (i + 1) * FRAME_MAX);\n                                                // Store binary chunks directly without JSON wrapper\n                                                chunks.push(part);\n                                            }\n                                            \n                                            const isDesktop = (typeof window !== 'undefined') && ((window.innerWidth || 0) >= 1024);\n                                            const QR_SIZE = isDesktop ? 720 : 512;\n                                            if (window.generateQRCode && chunks.length > 0) {\n                                                const firstUrl = await window.generateQRCode(chunks[0], { errorCorrectionLevel: 'M', size: QR_SIZE, margin: 2 });\n                                                if (firstUrl) setQrCodeUrl(firstUrl);\n                                            }\n                                            \n                                            try { if (qrAnimationRef.current && qrAnimationRef.current.timer) { clearInterval(qrAnimationRef.current.timer); } } catch {}\n                                            qrAnimationRef.current = { timer: null, chunks, idx: 0, active: true };\n                                            setQrFramesTotal(chunks.length);\n                                            setQrFrameIndex(1);\n                                            setQrManualMode(false);\n                                            \n                                            const intervalMs = 3000;\n                                            qrAnimationRef.current.timer = setInterval(renderAndAdvance, intervalMs);\n                                            \n                                            // Show QR immediately for Answer flow\n                                            try { setShowQRCode(true); } catch {}\n                                        } else {\n                                            // Fallback to single QR\n                                            await generateQRCode(answer);\n                                            try { setShowQRCode(true); } catch {}\n                                        }\n                                    } catch (e) {\n                                        console.warn('Answer QR generation failed:', e);\n                                    }\n                                    \n                                    // Mark generated answers as active immediately.\n                                    // `answerInput` is empty on the joiner path\n                                    // because the response was created locally,\n                                    // not pasted by the user.\n                                    if (typeof markAnswerCreated === 'function') {\n                                        markAnswerCreated();\n                                    }\n\n        \n                                const existingResponseMessages = messages.filter(m => \n                                    m.type === 'system' && \n                                    (m.message.includes(t('flow.responseCreated')) || m.message.includes(t('flow.sendTheResponse')))\n                                );\n                                \n                                if (existingResponseMessages.length === 0) {\n                                    setMessages(prev => [...prev, { \n                                        message: t('flow.responseCreatedBang'), \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: t('flow.sendResponse'), \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n        \n                                }\n                                    \n                                    // Update security level after creating answer\n                                    if (!window.isUpdatingSecurity) {\n                                        updateSecurityLevel().catch(console.error);\n                                    }\n                                } catch (error) {\n                                    console.error('Error in handleCreateAnswer:', error);\n                                    setMessages(prev => [...prev, { \n                                        message: `Error processing the invitation: ${error.message}`, \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n                                }\n                        } catch (error) {\n                            console.error('Error in handleCreateAnswer:', error);\n                            setMessages(prev => [...prev, { \n                                message: `Invitation processing error: ${error.message}`, \n                                type: 'system',\n                                id: Date.now(),\n                                timestamp: Date.now()\n                            }]);\n                        }\n                    };\n        \n                    const handleConnect = async () => {\n                        try {\n                            if (!answerInput.trim()) {\n                                setMessages(prev => [...prev, { \n                                    message: t('err.needResponse'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n                                return;\n                            }\n        \n                            try {\n                                setMessages(prev => [...prev, { \n                                    message: t('flow.processingResponse'), \n                                    type: 'system',\n                                    id: Date.now(),\n                                    timestamp: Date.now()\n                                }]);\n        \n                                let answer;\n                                try {\n                                    // Prefer binary decode first, then gzip JSON\n                                    if (typeof window.decodeAnyPayload === 'function') {\n                                        const anyAnswer = window.decodeAnyPayload(answerInput.trim());\n                                        answer = (typeof anyAnswer === 'string') ? JSON.parse(anyAnswer) : anyAnswer;\n                                    } else {\n                                        const rawText = (typeof window.decompressIfNeeded === 'function') ? window.decompressIfNeeded(answerInput.trim()) : answerInput.trim();\n                                        answer = JSON.parse(rawText);\n                                    }\n                                } catch (parseError) {\n                                    throw new Error(`Invalid response format: ${parseError.message}`);\n                                }\n        \n                                    if (!answer || typeof answer !== 'object') {\n                                        throw new Error('The response must be an object');\n                                    }\n        \n                                    // Support both compact and legacy formats\n                                    const answerType = answer.t || answer.type;\n                                    if (!answerType || (answerType !== 'answer' && answerType !== 'enhanced_secure_answer')) {\n                                        throw new Error('Invalid response type. Expected answer or enhanced_secure_answer');\n                                    }\n\n                                    await webrtcManagerRef.current.handleSecureAnswer(answer);\n                                    \n                                    // All security features are enabled by default - no session activation needed\n                                    if (pendingSession) {\n                                            setPendingSession(null);\n                                            setMessages(prev => [...prev, { \n                                            message: `All security features enabled by default`, \n                                                type: 'system',\n                                                id: Date.now(),\n                                                timestamp: Date.now()\n                                            }]);\n                                    }\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: t('flow.finalizing'), \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now()\n                                    }]);\n                                    \n                                    // Update security level after handling answer\n                                    if (!window.isUpdatingSecurity) {\n                                        updateSecurityLevel().catch(console.error);\n                                    }\n                                } catch (error) {\n                                    console.error('Error in handleConnect inner try:', error);\n                                    \n                                    // \u0411\u043E\u043B\u0435\u0435 \u0434\u0435\u0442\u0430\u043B\u044C\u043D\u0430\u044F \u043E\u0431\u0440\u0430\u0431\u043E\u0442\u043A\u0430 \u043E\u0448\u0438\u0431\u043E\u043A\n                                    let errorMessage = t('err.setupError');\n                                    if (error.message.includes('CRITICAL SECURITY FAILURE')) {\n                                        if (error.message.includes('ECDH public key structure')) {\n                                            errorMessage = t('err.responseNoKey');\n                                        } else if (error.message.includes('ECDSA public key structure')) {\n                                            errorMessage = t('err.responseNoSignKey');\n                                        } else {\n                                            errorMessage = t('err.securityValidation');\n                                        }\n                                    } else if (error.message.includes('too old') || error.message.includes('replay')) {\n                                        errorMessage = t('err.responseOutdated');\n                                    } else if (error.message.includes('MITM') || error.message.includes('signature')) {\n                                        errorMessage = t('err.securityBreach');\n                                    } else if (error.message.includes('Invalid') || error.message.includes('format')) {\n                                        errorMessage = t('err.responseFormat');\n                                    } else {\n                                        errorMessage = ` ${error.message}`;\n                                    }\n                                    \n                                    setMessages(prev => [...prev, { \n                                        message: errorMessage, \n                                        type: 'system',\n                                        id: Date.now(),\n                                        timestamp: Date.now(),\n                                        showRetryButton: true\n                                    }]);\n\n                                    if (!error.message.includes('too old') && !error.message.includes('replay')) {\n                                        setPendingSession(null);\n                                        setSessionTimeLeft(0);\n                                    }\n\n                                    setConnectionStatus('failed');\n                                    \n                                } \n                        } catch (error) {\n                            console.error('Error in handleConnect outer try:', error);\n\n                            let errorMessage = t('err.setupError');\n                            if (error.message.includes('CRITICAL SECURITY FAILURE')) {\n                                if (error.message.includes('ECDH public key structure')) {\n                                    errorMessage = t('err.responseNoKey');\n                                } else if (error.message.includes('ECDSA public key structure')) {\n                                    errorMessage = t('err.responseNoSignKey');\n                                } else {\n                                    errorMessage = t('err.securityValidation');\n                                }\n                            } else if (error.message.includes('too old') || error.message.includes('replay')) {\n                                errorMessage = t('err.responseOutdated');\n                            } else if (error.message.includes('MITM') || error.message.includes('signature')) {\n                                errorMessage = t('err.securityBreach');\n                            } else if (error.message.includes('Invalid') || error.message.includes('format')) {\n                                errorMessage = t('err.responseFormat');\n                            } else {\n                                errorMessage = `${error.message}`;\n                            }\n                            \n                            setMessages(prev => [...prev, { \n                                message: errorMessage, \n                                type: 'system',\n                                id: Date.now(),\n                                timestamp: Date.now(),\n                                showRetryButton: true\n                            }]);\n\n                            if (!error.message.includes('too old') && !error.message.includes('replay')) {\n                                setPendingSession(null);\n                                setSessionTimeLeft(0);\n                            }\n\n                            setConnectionStatus('failed');\n                        }\n                    };\n        \n                    const handleVerifyConnection = async (userCode, isValid = true) => {\n                        if (isValid) {\n                            webrtcManagerRef.current.confirmVerification(userCode);\n                            // Mark local verification as confirmed\n                            setLocalVerificationConfirmed(true);\n                            \n                            // Initialize notification integration if permission was granted\n                            try {\n                                if (window.NotificationIntegration && webrtcManagerRef.current && !notificationIntegrationRef.current) {\n                                    const integration = new window.NotificationIntegration(webrtcManagerRef.current);\n                                    await integration.init();\n                                    \n                                    // Store reference for cleanup\n                                    notificationIntegrationRef.current = integration;\n                                    \n                                    \n                                    // Check if permission was already granted\n                                    const status = integration.getStatus();\n                                    if (status.permission === 'granted') {\n                                        setMessages(prev => [...prev, { \n                                            message: '\u2713 Notifications enabled - you will receive alerts when the tab is inactive', \n                                            type: 'system',\n                                            id: Date.now(),\n                                            timestamp: Date.now()\n                                        }]);\n                                    } else {\n                                        setMessages(prev => [...prev, { \n                                            message: '\u2139 Notifications disabled - you can enable them using the button on the main page', \n                                            type: 'system',\n                                            id: Date.now(),\n                                            timestamp: Date.now()\n                                        }]);\n                                    }\n                                } else if (notificationIntegrationRef.current) {\n                                } else {\n                                    // Handle error silently\n                                }\n                            } catch (error) {\n                                console.warn('Failed to initialize notifications:', error);\n                                // Don't show error to user, notifications are optional\n                            }\n                        } else {\n                            setMessages(prev => [...prev, { \n                                message: ' Verification rejected. The connection is unsafe! Session reset..', \n                                type: 'system',\n                                id: Date.now(),\n                                timestamp: Date.now()\n                            }]);\n                            \n                            // Clear verification states\n                            setLocalVerificationConfirmed(false);\n                            setRemoteVerificationConfirmed(false);\n                            setBothVerificationsConfirmed(false);\n                            setShowVerification(false);\n                            setVerificationCode('');\n                            \n                            // Reset UI to initial state\n                            setConnectionStatus('disconnected');\n                            setOfferData('');\n                            setAnswerData('');\n                            setOfferInput('');\n                            setAnswerInput('');\n                            setShowOfferStep(false);\n                            setShowAnswerStep(false);\n                            setKeyFingerprint('');\n                            setSecurityLevel(null);\n                            setIsVerified(false);\n                            setMessages([]);\n                            \n                            setSessionTimeLeft(0);\n                            setPendingSession(null);\n                            \n                            // Dispatch disconnected event for SessionTimer\n                            document.dispatchEvent(new CustomEvent('disconnected'));\n                            \n                            handleDisconnect();\n                        }\n                    };\n        \n                    const handleSendMessage = async () => {\n                        if (!messageInput.trim()) {\n                            return;\n                        }\n        \n                        if (!webrtcManagerRef.current) {\n                            return;\n                        }\n\n                        const baseTextEarly = messageInput.trim();\n                        const midEarly = `m_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}`;\n\n                        // Store-and-forward guard.\n                        //\n                        // The decision is made from the CHANNEL, never from the browser's\n                        // idea of connectivity. `navigator.onLine` and the offline/online\n                        // events report whether a network interface exists, not whether\n                        // anything can be reached \u2014 and a phone that was frozen misses the\n                        // 'online' edge outright. When that happened this side went on\n                        // queueing forever: every message showed one tick and none was ever\n                        // transmitted, while incoming messages kept arriving normally,\n                        // because receiving does not pass through here.\n                        //\n                        // The data channel is the only authority on whether a P2P message\n                        // can go out: open, verified, and not mid-repair.\n                        const mgr = webrtcManagerRef.current;\n                        const channelUsable = mgr?.isConnected?.() === true\n                            && mgr?.isReconnecting?.() !== true;\n                        if (!channelUsable && mgr?.isConnected) {\n                            // Store-and-forward: show one check (sent), keep it in the\n                            // conversation at its original time, and transmit on reconnect.\n                            const outTextOff = codeMode ? '```\\n' + baseTextEarly + '\\n```' : baseTextEarly;\n                            const tsOff = Date.now();\n                            const metaOff = { mid: midEarly, ts: tsOff };\n                            if (viewOnceMode) { metaOff.once = true; metaOff.onceTtl = viewOnceTtl; }\n                            if (disappearTtl > 0) metaOff.ttl = disappearTtl;\n                            const echoOpts = { mid: midEarly, status: 'sent', timestamp: tsOff };\n                            if (disappearTtl > 0) echoOpts.expiresAt = tsOff + disappearTtl * 1000;\n                            addMessageWithAutoScroll(outTextOff, 'sent', echoOpts);\n                            // Queue on the ACTIVE session's outgoing queue (created in createSession);\n                            // guard in case the entry is missing so the echo never gets lost.\n                            const q = queuesRef.current.get(activeIdRef.current);\n                            if (q) q.outgoing.push({ outText: outTextOff, meta: metaOff, mid: midEarly });\n                            setMessageInput('');\n                            if (codeMode) setCodeMode(false);\n                            if (viewOnceMode) setViewOnceMode(false);\n                            return;\n                        }\n\n                        // No manager at all \u2014 there is no session to queue against. This\n                        // used to `return` in silence: the typed text stayed in the box,\n                        // nothing was sent, and nothing said why.\n                        if (!channelUsable) {\n                            addMessageWithAutoScroll(t('chat.notSentReason'), 'system');\n                            return;\n                        }\n\n                        try {\n                            const baseText = baseTextEarly;\n                            // Code mode wraps the text in a fenced block so both sides render\n                            // a code window with a copy button (the marker travels as text).\n                            const outText = codeMode ? '```\\n' + baseText + '\\n```' : baseText;\n\n                            // Shared id lets unsend/disappearing/receipts reference the\n                            // same message on both peers.\n                            const mid = midEarly;\n                            const meta = { mid, ts: Date.now() };        // ts \u2192 recipient shows the original send time\n                            if (viewOnceMode) {                          // applies to the recipient\n                                meta.once = true;\n                                meta.onceTtl = viewOnceTtl;              // seconds visible after opening\n                            }\n                            if (disappearTtl > 0) meta.ttl = disappearTtl; // applies to both sides\n\n                            // Local echo: sender sees their own text normally (view-once is a\n                            // recipient-side control), but disappearing also expires our copy.\n                            // Starts as \"sending\"; flips to \"sent\" once the channel accepts it\n                            // and \"delivered\" when the peer's receipt arrives.\n                            const localOpts = { mid, status: 'sending' };\n                            if (disappearTtl > 0) localOpts.expiresAt = Date.now() + disappearTtl * 1000;\n                            addMessageWithAutoScroll(outText, 'sent', localOpts);\n\n                            try {\n                                await webrtcManagerRef.current.sendMessage(outText, meta);\n                                // Reliable ordered data channel: a resolved send means the peer's\n                                // device received it \u2192 two grey ticks. The peer's read receipt\n                                // (onMessageDelivered) upgrades it to two green ticks ('read').\n                                updateMessageStatus(mid, 'delivered');\n                            } catch (sendErr) {\n                                updateMessageStatus(mid, 'failed');\n                                throw sendErr;\n                            }\n                            setMessageInput('');\n                            // Per-message toggles reset; disappearing stays as a sticky setting.\n                            if (codeMode) setCodeMode(false);\n                            if (viewOnceMode) setViewOnceMode(false);\n                        } catch (error) {\n                            const msg = String(error?.message || error);\n                            if (!/queued for sending|Data channel not ready/i.test(msg)) {\n                                addMessageWithAutoScroll(`Sending error: ${msg}`,'system');\n                            }\n                        }\n                    };\n\n                    // Send an encrypted voice note. The recorded audio rides the exact same\n                    // chunked + AES-GCM file-transfer pipeline as files (so it inherits the\n                    // audited E2E crypto); the duration + waveform peaks travel alongside so\n                    // both peers render the designed voice bubble with an upload/download ring.\n                    const handleSendVoice = async (blob, dur, bars) => {\n                        if (!blob || !webrtcManagerRef.current) return;\n\n                        // Normalise the mime to a bare, allow-listed audio type. The\n                        // recorder emits WAV (universally decodable); we still tolerate\n                        // other encodings defensively.\n                        const rawType = String(blob.type || '').toLowerCase();\n                        let mime = 'audio/wav';\n                        if (rawType.startsWith('audio/webm')) mime = 'audio/webm';\n                        else if (rawType.startsWith('audio/mp4') || rawType.startsWith('audio/x-m4a')) mime = 'audio/mp4';\n                        else if (rawType.startsWith('audio/ogg')) mime = 'audio/ogg';\n                        const ext = mime === 'audio/mp4' ? 'm4a' : (mime === 'audio/ogg' ? 'ogg' : (mime === 'audio/webm' ? 'webm' : 'wav'));\n                        const file = new File([blob], `voice-message.${ext}`, { type: mime });\n\n                        // Local, instantly-playable copy for the sender's own bubble.\n                        let localUrl = null;\n                        try { localUrl = URL.createObjectURL(blob); } catch (_) {}\n\n                        const reconnecting = webrtcManagerRef.current?.isReconnecting?.() === true;\n                        // Voice notes ride the chunked file-transfer path, which has no\n                        // store-and-forward queue \u2014 a partial transfer cannot be resumed\n                        // across a path repair. So they are refused rather than queued,\n                        // but the reason is stated accurately. Judged from the channel, not\n                        // from navigator.onLine, for the same reason as the text path.\n                        const notReady = reconnecting || webrtcManagerRef.current?.isConnected?.() !== true;\n                        if (notReady) {\n                            if (localUrl) { try { URL.revokeObjectURL(localUrl); } catch (_) {} }\n                            addMessageWithAutoScroll(\n                                reconnecting\n                                    ? t('err.voiceRestoring')\n                                    : t('err.voiceNeedsConnection'),\n                                'system'\n                            );\n                            return;\n                        }\n\n                        const voiceMeta = {\n                            dur: Math.max(1, Math.round(dur || 0)),\n                            bars: Array.isArray(bars) ? bars.map(n => Math.round(n * 1000) / 1000) : []\n                        };\n\n                        const localId = addMessageWithAutoScroll('', 'sent', {\n                            voice: { dur: voiceMeta.dur, bars: voiceMeta.bars, url: localUrl, transfer: { dir: 'up', pct: 0 } }\n                        });\n\n                        try {\n                            await webrtcManagerRef.current.sendFile(file, { voice: voiceMeta, uiId: localId });\n                            patchMessageById(localId, (m) => ({ voice: { ...(m.voice || {}), transfer: null } }));\n                        } catch (err) {\n                            patchMessageById(localId, (m) => ({ voice: { ...(m.voice || {}), transfer: null, error: true } }));\n                            const msg = String(err?.message || err);\n                            if (!/queued for sending|Data channel not ready/i.test(msg)) {\n                                addMessageWithAutoScroll(`Voice message failed: ${msg}`, 'system');\n                            }\n                        }\n                    };\n\n                    // Unsend: remove locally and ask the peer to drop it too.\n                    const handleUnsendMessage = React.useCallback((mid) => {\n                        if (!mid) return;\n                        setMessages(prev => prev.filter(m => String(m.mid) !== String(mid)));\n                        try { webrtcManagerRef.current?.sendMessageDelete?.(String(mid)); } catch (_) {}\n                    }, []);\n\n                    // View-once reveal timeout / disappearing expiry: wipe the content and\n                    // leave a \"This message has expired\" tombstone (per the design).\n                    const handleMessageExpire = React.useCallback((id) => {\n                        setMessages(prev => prev.map(m => m.id === id ? { ...m, expired: true, message: '', expiresAt: undefined } : m));\n                    }, []);\n\n                    // Panic wipe: clear the conversation, tear down the session and wipe keys.\n                    const handleClearData = () => {\n                        setOfferData('');\n                        setAnswerData('');\n                        setOfferInput('');\n                        setAnswerInput('');\n                        setShowOfferStep(false);\n                        setIsGeneratingKeys(false);\n\n                        if (!shouldPreserveAnswerData()) {\n                            setShowAnswerStep(false);\n                        }\n                        \n                        setShowVerification(false);\n                        setShowQRCode(false);\n                        setShowQRScanner(false);\n                        setShowQRScannerModal(false);\n                        // Clear QR scanner buffer\n                        qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n\n                        if (!shouldPreserveAnswerData()) {\n                            setQrCodeUrl('');\n                        }\n                        \n                        setVerificationCode('');\n                        setIsVerified(false);\n                        setKeyFingerprint('');\n                        setSecurityLevel(null);\n                        setConnectionStatus('disconnected');\n                        setMessages([]);\n                        setMessageInput('');\n                        \n                        // Clear verification states\n                        setLocalVerificationConfirmed(false);\n                        setRemoteVerificationConfirmed(false);\n                        setBothVerificationsConfirmed(false);\n                        \n                        // PAKE passwords removed - using SAS verification instead \n\n                        if (typeof console.clear === 'function') {\n                            console.clear();\n                        }\n                        \n                        // Cleanup session state\n                        setSessionTimeLeft(0);\n        \n                        setPendingSession(null);\n                        document.dispatchEvent(new CustomEvent('peer-disconnect'));\n                        // Session manager removed - all features enabled by default\n                    };\n        \n                    const handleIncomingDecision = React.useCallback(async (fileId, accepted) => {\n                        try {\n                            if (accepted) {\n                                await webrtcManagerRef.current?.acceptIncomingFile(fileId);\n                            } else {\n                                await webrtcManagerRef.current?.rejectIncomingFile(fileId);\n                            }\n                        } finally {\n                            setPendingIncomingFiles(prev => prev.filter(f => f.fileId !== fileId));\n                        }\n                    }, []);\n\n                    // Disconnect tears down ONLY the active session \u2014 its peerConnection, its\n                    // manager (with the manager's own key-wipe logic) and its notification\n                    // integration. Every other session keeps running untouched. If it was the\n                    // last session we immediately open a fresh blank one so the UI isn't empty.\n                    const handleDisconnect = () => {\n                        try {\n                            const id = activeIdRef.current;\n                            requestDonateScroll();\n                            setSessionTimeLeft(0);\n                            // Global lifecycle events (consumed by any remaining listeners).\n                            document.dispatchEvent(new CustomEvent('peer-disconnect'));\n                            document.dispatchEvent(new CustomEvent('disconnected'));\n                            document.dispatchEvent(new CustomEvent('session-cleanup', {\n                                detail: { timestamp: Date.now(), reason: 'manual_disconnect' }\n                            }));\n                            // Manual disconnect always wipes this chat's data and removes it; the\n                            // ensure-at-least-one-session effect re-opens the landing if it was the\n                            // last one. Siblings keep running untouched.\n                            destroySession(id);\n                            if (typeof console.clear === 'function') console.clear();\n                        } catch (error) {\n                            console.error('Error during disconnect:', error);\n                        }\n                    };\n        \n                    const handleSessionActivated = (session) => {\n                        let message;\n                        if (session.type === 'demo') {\n                            message = ` Demo session activated for 6 minutes. You can create invitations!`;\n                        } else {\n                            message = ` All security features enabled by default. You can create invitations!`;\n                        }\n                        \n                        addMessageWithAutoScroll(message, 'system');\n        \n                    };\n        \n                    // Announce a NEWLY established session only. Coming back from\n                    // 'reconnecting' is the same session resuming \u2014 re-announcing it would\n                    // claim a handshake that never happened and spam the transcript on every\n                    // flaky-network blip.\n                    const prevConnStatusRef = React.useRef(connectionStatus);\n                    React.useEffect(() => {\n                        const resumed = prevConnStatusRef.current === 'reconnecting';\n                        prevConnStatusRef.current = connectionStatus;\n                        if (connectionStatus === 'connected' && isVerified && !resumed) {\n                            addMessageWithAutoScroll(' Secure connection successfully established and verified! You can now communicate safely with full protection against MITM attacks and Perfect Forward Secrecy..', 'system');\n                        }\n                    }, [connectionStatus, isVerified]);\n        \n                    // Chat view requires an ACTIVE verified connection. On an UNRECOVERABLE drop\n                    // the manager clears its verification state (it must be re-established \u2014\n                    // there is no \"keep chatting while disconnected\" in this P2P design), so we\n                    // fall back to the setup screen, which is the re-establish path. The\n                    // conversation history stays in the session either way.\n                    //\n                    // 'reconnecting' is deliberately included: an ICE restart repairs only the\n                    // network path, leaving the keys and the SAS verification intact, so the\n                    // conversation must stay on screen. Throwing the user back to the connect\n                    // screen for a two-second NAT rebind would defeat the recovery entirely \u2014\n                    // the composer keeps working and queues (see the send path's offlineNow).\n                    // `?preview=chat` renders the chat layout with no connection behind it.\n                    // Declared here because the in-chat body class below depends on it.\n                    const previewMode = React.useMemo(() => {\n                        try { return new URLSearchParams(window.location.search).get('preview') === 'chat'; }\n                        catch { return false; }\n                    }, []);\n\n                    const isConnectedAndVerified = (connectionStatus === 'connected' || connectionStatus === 'verified' || connectionStatus === 'reconnecting') && isVerified;\n\n                    // A chat that ends \u2014 the peer leaves, the link drops for good \u2014 lands\n                    // back on the start page; bring the donation card into view there. Only\n                    // for the SAME session going from chatting to not: switching to another\n                    // tab's blank session is not an ending.\n                    const prevChatRef = React.useRef({ id: activeSessionId, live: isConnectedAndVerified });\n                    React.useEffect(() => {\n                        const prev = prevChatRef.current;\n                        prevChatRef.current = { id: activeSessionId, live: isConnectedAndVerified };\n                        if (prev.live && !isConnectedAndVerified && prev.id === activeSessionId) requestDonateScroll();\n                    }, [isConnectedAndVerified, activeSessionId]);\n\n                    // The PWA \"Install app\" pill is a landing-page affordance \u2014 hide it once\n                    // we're inside the chat (CSS: body.sb-in-chat #pwa-install-button).\n                    React.useEffect(() => {\n                        document.body.classList.toggle('sb-in-chat', isConnectedAndVerified || previewMode);\n                        return () => document.body.classList.remove('sb-in-chat');\n                    }, [isConnectedAndVerified, previewMode]);\n        \n                    React.useEffect(() => {\n                        // All security features are enabled by default - no session activation needed\n                        if (isConnectedAndVerified && pendingSession && connectionStatus !== 'failed') {\n                                setPendingSession(null);\n                            setSessionTimeLeft(0); \n                            addMessageWithAutoScroll(' All security features enabled by default', 'system');\n                        }\n                    }, [isConnectedAndVerified, pendingSession, connectionStatus]);\n\n                    // QR Scanner initialization\n                    React.useEffect(() => {\n                        if (showQRScannerModal && window.Html5Qrcode) {\n                            const html5Qrcode = new window.Html5Qrcode(\"qr-reader\");\n                            const config = { \n                                fps: 10\n                                // \u0423\u0431\u0438\u0440\u0430\u0435\u043C qrbox \u0447\u0442\u043E\u0431\u044B \u0438\u0441\u043F\u043E\u043B\u044C\u0437\u043E\u0432\u0430\u0442\u044C \u0432\u0441\u044E \u043E\u0431\u043B\u0430\u0441\u0442\u044C\n                            };\n\n                            let isScanning = true;\n\n                            html5Qrcode.start(\n                                { facingMode: \"environment\" }, // Use back camera\n                                config,\n                                (decodedText, decodedResult) => {\n                                    if (!isScanning) {\n                                        console.log('Scanner stopped, ignoring scan');\n                                        return;\n                                    }\n                                    \n                                    console.log('QR Code scanned:', decodedText);\n                                    console.log('Current buffer state:', qrChunksBufferRef.current);\n                                    \n                                    handleQRScan(decodedText).then((success) => {\n                                        console.log('QR scan result:', success);\n                                        if (success) {\n                                            // Successfully processed - stop scanner and close modal\n                                            console.log('Closing scanner and modal');\n                                            isScanning = false;\n                                            \n                                            // Stop scanner first, then clear\n                                            try {\n                                                console.log('Stopping scanner...');\n                                                html5Qrcode.stop().then(() => {\n                                                    console.log('Scanner stopped, clearing...');\n                                                    html5Qrcode.clear();\n                                                    setShowQRScannerModal(false);\n                                                }).catch((err) => {\n                                                    console.log('Error stopping scanner:', err);\n                                                    // Try to clear anyway\n                                                    try {\n                                                        html5Qrcode.clear();\n                                                    } catch (clearErr) {\n                                                        console.log('Error clearing scanner:', clearErr);\n                                                    }\n                                                    setShowQRScannerModal(false);\n                                                });\n                                            } catch (err) {\n                                                console.log('Error in scanner cleanup:', err);\n                                                setShowQRScannerModal(false);\n                                            }\n                                        } else {\n                                            console.log('Continuing to scan for more chunks...');\n                                        }\n                                    }).catch((error) => {\n                                        console.error('QR scan processing error:', error);\n                                        // Continue scanning on error\n                                    });\n                                },\n                                (error) => {\n                                    // Ignore scanning errors - continue scanning\n                                    if (isScanning) {\n                                        console.log('QR scan error (ignored):', error);\n                                    }\n                                }\n                            ).catch((err) => {\n                                console.error('QR Scanner start error:', err);\n                                // Close modal on start error\n                                setShowQRScannerModal(false);\n                            });\n\n                            return () => {\n                                isScanning = false;\n                                try {\n                                    // Try to stop scanner, but don't worry if it's already stopped\n                                    html5Qrcode.stop().then(() => {\n                                        html5Qrcode.clear();\n                                    }).catch((err) => {\n                                        // Scanner might already be stopped, just clear it\n                                        console.log('Scanner already stopped or error stopping:', err);\n                                        try {\n                                            html5Qrcode.clear();\n                                        } catch (clearErr) {\n                                            console.log('Error clearing scanner in cleanup:', clearErr);\n                                        }\n                                    });\n                                } catch (err) {\n                                    console.log('Error in cleanup:', err);\n                                    // Just try to clear, don't worry about stopping\n                                    try {\n                                        html5Qrcode.clear();\n                                    } catch (clearErr) {\n                                        console.log('Error clearing scanner in cleanup:', clearErr);\n                                    }\n                                }\n                            };\n                        }\n                    }, [showQRScannerModal, qrBundleReady]);\n        \n                    const sessionChats = decorateSessions(sessionsState);\n                    const groupChats = decorateGroups(groupsState);\n                    // The multi-session chrome (left rail + chat column) appears only once there\n                    // is a genuinely WORKING conversation \u2014 a session whose SAS is verified \u2014 or\n                    // when more than one session exists. The whole offer/answer/verification flow\n                    // of the first session (which the manager reports as 'connecting'/'verifying')\n                    // stays on the original single-column \"Start Secure\" screen, exactly as before;\n                    // the rail only shows up after the first secure channel is actually established.\n                    // A group also brings the rail up: it is built out of verified sessions, so\n                    // by the time one exists the single-column setup screen is behind us.\n                    const showSidebar = sessionsState.order.length > 1 || groupsState.order.length > 0 || sessionsState.order.some((id) => {\n                        const s = sessionsState.sessions[id];\n                        return s && s.sas && s.sas.isVerified;\n                    });\n\n                    // Stop the document scrolling while the app shell is up, so the header\n                    // cannot ride off the top. Applied from JS rather than a :has() selector\n                    // because this is load-bearing, and removed again on the landing page,\n                    // which must keep scrolling normally.\n\n\n                    // \u2500\u2500 LAYOUT PREVIEW \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n                    // `?preview=chat` renders the real chat components inside the real\n                    // shell with canned content and no WebRTC, so the layout can be\n                    // looked at and iterated on without standing up a connection each\n                    // time. It is presentational only: no peer manager, no keys, no\n                    // network, nothing sendable \u2014 the send handlers are no-ops. It\n                    // cannot be reached by accident, and it is not a way around\n                    // verification, because there is no session behind it to reach.\n                    if (previewMode) {\n                        const previewMessages = [\n                            { message: 'Preview mode \u2014 no connection is open.', type: 'system', id: 1, timestamp: Date.now() - 300000 },\n                            { message: 'This renders the real chat components so the layout can be checked without a handshake.', type: 'received', id: 2, timestamp: Date.now() - 240000 },\n                            { message: 'Header pinned, list scrolls, composer sits above the keyboard.', type: 'sent', id: 3, timestamp: Date.now() - 180000 },\n                            ...Array.from({ length: 30 }, (_, i) => ({\n                                message: 'Filler message ' + (i + 1) + ' \u2014 enough content to make the list scroll.',\n                                type: i % 2 ? 'sent' : 'received',\n                                id: 10 + i,\n                                timestamp: Date.now() - (30 - i) * 5000\n                            }))\n                        ];\n                        const noop = () => {};\n                        return React.createElement('div', {\n                            className: 'minimal-bg sb-app-shell',\n                            style: { display: 'flex', flexDirection: 'row', height: '100vh', width: '100%', overflow: 'hidden' }\n                        }, [\n                            React.createElement(SessionsSidebar, {\n                                key: 'sidebar',\n                                chats: [{ id: 'preview', label: 'Preview peer', unread: 0, active: true, verified: true }],\n                                collapsed: sidebarCollapsed, drawerOpen: sidebarDrawerOpen,\n                                onToggleCollapse: () => setSidebarCollapsed(v => !v),\n                                onSelect: noop, onNewChat: noop, onRename: noop,\n                                onCloseDrawer: () => setSidebarDrawerOpen(false),\n                                myStatus: myStatus, onSetStatus: setMyStatus\n                            }),\n                            React.createElement('button', {\n                                key: 'burger', className: 'sb-burger',\n                                onClick: () => setSidebarDrawerOpen(true),\n                                style: { display: 'none', position: 'fixed', top: 'calc(13px + var(--sb-safe-top, 0px))', insetInlineStart: '13px', zIndex: 55, width: '38px', height: '38px', borderRadius: '10px', placeItems: 'center', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-bg-rgb), 0.9)', color: 'var(--sb-text-4)', cursor: 'pointer' },\n                                dangerouslySetInnerHTML: { __html: SB_SVG.burger }\n                            }),\n                            React.createElement('div', {\n                                key: 'col', className: 'minimal-bg sb-app-col',\n                                style: { flex: 1, minWidth: 0, height: '100vh', overflow: 'hidden', display: 'flex', flexDirection: 'column' }\n                            }, React.createElement('main', { key: 'main' },\n                                React.createElement(EnhancedChatInterface, {\n                                    title: 'Preview peer', isOffline: false, peerPresence: 'available',\n                                    onRenameTitle: noop,\n                                    messages: previewMessages,\n                                    messageInput: messageInput, setMessageInput: setMessageInput,\n                                    onSendMessage: noop, onSendVoice: noop, onDisconnect: noop,\n                                    keyFingerprint: 'preview', isVerified: true,\n                                    chatMessagesRef: chatMessagesRef, scrollToBottom: noop,\n                                    webrtcManager: null, status: 'connected',\n                                    pendingIncomingFiles: [], onIncomingDecision: noop,\n                                    codeMode: codeMode, setCodeMode: setCodeMode,\n                                    viewOnceMode: viewOnceMode, setViewOnceMode: setViewOnceMode,\n                                    viewOnceTtl: viewOnceTtl, setViewOnceTtl: setViewOnceTtl,\n                                    disappearTtl: disappearTtl, setDisappearTtl: setDisappearTtl,\n                                    nowTick: nowTick, onUnsendMessage: noop, onMessageExpire: noop\n                                })\n                            ))\n                        ]);\n                    }\n\n                    return React.createElement('div', {\n                        className: showSidebar ? \"minimal-bg sb-app-shell\" : \"minimal-bg\",\n                        // With the rail visible the app is a fixed-height shell (rail + column\n                        // fill the viewport, design-style). Otherwise it's the scrollable landing.\n                        // flexDirection:'row' is explicit \u2014 the .minimal-bg class forces\n                        // flex-direction:column, which would otherwise stack the rail ABOVE the chat.\n                        // height:100vh is the fallback; .sb-app-shell upgrades it to 100dvh on\n                        // mobile so the shell fits under the browser toolbar (header stays put).\n                        style: showSidebar ? { display: 'flex', flexDirection: 'row', height: '100vh', width: '100%', overflow: 'hidden' } : { minHeight: '100vh' }\n                    }, [\n                        showSidebar && React.createElement(SessionsSidebar, {\n                            key: 'sessions-sidebar',\n                            chats: sessionChats,\n                            groups: groupChats,\n                            collapsed: sidebarCollapsed,\n                            drawerOpen: sidebarDrawerOpen,\n                            onToggleCollapse: () => setSidebarCollapsed(v => !v),\n                            // Picking a 1:1 chat drops the group out of the foreground, and\n                            // vice versa \u2014 one conversation is on screen at a time.\n                            onSelect: (id) => { groupsDispatch({ type: GA.SET_ACTIVE_GROUP, id: null }); handleSelectSession(id); },\n                            onSelectGroup: handleSelectGroup,\n                            onNewChat: handleNewChat,\n                            onNewGroup: () => { setShowCreateGroup(true); setSidebarDrawerOpen(false); },\n                            onRename: handleRenameSession,\n                            onCloseDrawer: () => setSidebarDrawerOpen(false),\n                            myStatus: myStatus,\n                            onSetStatus: setMyStatus\n                        }),\n                        // ---- Group dialogs ----\n                        showCreateGroup && React.createElement(CreateGroupModal, {\n                            key: 'create-group',\n                            candidates: groupCandidates,\n                            relayOnly: relayOnlyMode,\n                            onCreate: handleCreateGroup,\n                            onCancel: () => setShowCreateGroup(false)\n                        }),\n                        pendingInvite && React.createElement(GroupInviteModal, {\n                            key: 'group-invite',\n                            invite: {\n                                name: pendingInvite.name,\n                                fromLabel: sessionsState.sessions[pendingInvite.sessionId]?.peerLabel || 'A verified contact'\n                            },\n                            onAccept: handleAcceptInvite,\n                            onDecline: () => setPendingInvite(null)\n                        }),\n                        groupError && React.createElement(GroupErrorModal, {\n                            key: 'group-error',\n                            message: groupError,\n                            onDismiss: () => setGroupError(null)\n                        }),\n                        (showAddMembers && activeGroup) && React.createElement(AddMembersModal, {\n                            key: 'add-members',\n                            candidates: addCandidates,\n                            remaining: Math.max(0, GROUP_LIMITS.MAX_MEMBERS - activeGroup.members.length),\n                            onAdd: handleAddMembers,\n                            onCancel: () => setShowAddMembers(false)\n                        }),\n                        (showGroupCode && activeGroup) && React.createElement(GroupSasModal, {\n                            key: 'group-sas',\n                            group: activeGroup,\n                            onConfirm: handleConfirmGroupSas,\n                            onCancel: () => {\n                                // Cancelling is a real teardown, not a dismissal: a group whose\n                                // code was not confirmed has authenticated nobody.\n                                if (activeGroup.phase === GROUP_PHASE.READY) setShowGroupCode(false);\n                                else destroyGroup(activeGroup.id);\n                            }\n                        }),\n                        // Mobile-only hamburger that opens the drawer (hidden on desktop via CSS).\n                        showSidebar && React.createElement('button', {\n                            key: 'sb-burger',\n                            className: 'sb-burger',\n                            onClick: () => setSidebarDrawerOpen(true),\n                            style: { display: 'none', position: 'fixed', top: 'calc(13px + var(--sb-safe-top, 0px))', insetInlineStart: '13px', zIndex: 55, width: '38px', height: '38px', borderRadius: '10px', placeItems: 'center', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-bg-rgb), 0.9)', color: 'var(--sb-text-4)', cursor: 'pointer' },\n                            dangerouslySetInnerHTML: { __html: SB_SVG.burger }\n                        }),\n                        React.createElement('div', {\n                            key: 'app-column',\n                            className: showSidebar ? 'minimal-bg sb-app-col' : 'minimal-bg min-h-screen',\n                            style: showSidebar ? { flex: 1, minWidth: 0, height: '100vh', overflow: 'hidden', display: 'flex', flexDirection: 'column' } : {}\n                        }, [\n                        // Advanced network settings now render inside the connection\n                        // screen's right panel (see EnhancedConnectionSetup), matching\n                        // the design's slide-up-within-the-right-column behavior.\n                        // The verified chat renders its own in-chat header (SecureBit Chat\n                        // design); the shared header is shown only on the landing/setup view.\n                        (!isConnectedAndVerified && !showSidebar && window.EnhancedMinimalHeader) && React.createElement(window.EnhancedMinimalHeader, {\n                            key: 'header',\n                            status: connectionStatus,\n                            fingerprint: keyFingerprint,\n                            verificationCode: verificationCode,\n                            onDisconnect: handleDisconnect,\n                            isConnected: isConnectedAndVerified,\n                            securityLevel: securityLevel,\n                            // sessionManager removed - all features enabled by default\n                            webrtcManager: webrtcManagerRef.current\n                        }),\n\n                        // Offered, never forced: the visitor's language decides what this\n                        // bar says, and only a click on it changes the URL. Landing only,\n                        // for the same reason as the switcher \u2014 following it navigates.\n                        (!isConnectedAndVerified && !showSidebar) && React.createElement(LanguageSuggestion, { key: 'lang-suggest' }),\n        \n                        // A group takes the whole column when it is the active conversation.\n                        // It renders its own header and composer, so none of the 1:1 chrome\n                        // (which is bound to a single webrtcManager) applies.\n                        activeGroup && React.createElement('main', {\n                            key: 'group-main',\n                            style: { flex: 1, minHeight: 0, display: 'flex', flexDirection: 'column' }\n                        }, React.createElement(GroupChatView, {\n                            group: activeGroup,\n                            input: groupInput,\n                            setInput: setGroupInput,\n                            onSend: handleSendGroupMessage,\n                            onLeave: () => destroyGroup(activeGroup.id),\n                            onRemoveMember: handleRemoveGroupMember,\n                            onAddMembers: () => setShowAddMembers(true),\n                            isAdmin: activeGroup.isAdmin,\n                            scrollRef: groupScrollRef,\n                            onStartCall: handleStartGroupCall,\n                            callActive: !!groupCallState[activeGroup.id],\n                            // The overlay renders nothing when there is no call, and a\n                            // dismissed ring is treated as no call for this device only \u2014\n                            // the call itself carries on for whoever is in it.\n                            callOverlay: (() => {\n                                const call = groupCallState[activeGroup.id] || null;\n                                if (!call) return null;\n                                if (!call.joined && dismissedCalls[activeGroup.id] === call.callId) return null;\n                                const media = groupCallMediaState[activeGroup.id] || null;\n                                return React.createElement(GroupCallUI, {\n                                    key: 'group-call',\n                                    call,\n                                    media,\n                                    groupName: activeGroup.name,\n                                    localStream: groupCallMediaRef.current.get(activeGroup.id)?.getLocalStream() || null,\n                                    getRemoteStream: (fp) => groupCallMediaRef.current.get(activeGroup.id)?.getRemoteStream(fp) || null,\n                                    onJoin: handleJoinGroupCall,\n                                    onDismiss: handleDismissGroupCall,\n                                    onLeave: handleLeaveGroupCall,\n                                    onToggleMic: handleGroupCallMic,\n                                    onToggleCamera: handleGroupCallCamera,\n                                    onFlipCamera: handleGroupCallFlip\n                                });\n                            })()\n                        })),\n\n                        !activeGroup && React.createElement('main', {\n                            key: 'main'\n                        },\n                            (() => {\n                                return isConnectedAndVerified;\n                            })()\n                                ? (() => {\n                                    return React.createElement(EnhancedChatInterface, {\n                                        title: active ? active.peerLabel : '',\n                                        isOffline: isOffline,\n                                        peerPresence: active ? active.peerPresence : null,\n                                        onRenameTitle: (label) => { if (activeSessionId) dispatch({ type: SA.RENAME, id: activeSessionId, label }); },\n                                        messages: messages,\n                                        messageInput: messageInput,\n                                        setMessageInput: setMessageInput,\n                                        onSendMessage: handleSendMessage,\n                                        onSendVoice: handleSendVoice,\n                                        onDisconnect: handleDisconnect,\n                                        keyFingerprint: keyFingerprint,\n                                        isVerified: isVerified,\n                                        chatMessagesRef: chatMessagesRef,\n                                        scrollToBottom: scrollToBottom,\n                                        webrtcManager: webrtcManagerRef.current,\n                                        status: connectionStatus,\n                                        pendingIncomingFiles: pendingIncomingFiles,\n                                        onIncomingDecision: handleIncomingDecision,\n                                        // Secure chat extras\n                                        codeMode: codeMode,\n                                        setCodeMode: setCodeMode,\n                                        viewOnceMode: viewOnceMode,\n                                        setViewOnceMode: setViewOnceMode,\n                                        viewOnceTtl: viewOnceTtl,\n                                        setViewOnceTtl: setViewOnceTtl,\n                                        disappearTtl: disappearTtl,\n                                        setDisappearTtl: setDisappearTtl,\n                                        nowTick: nowTick,\n                                        onUnsendMessage: handleUnsendMessage,\n                                        onMessageExpire: handleMessageExpire\n                                    });\n                                })()\n                                : React.createElement(EnhancedConnectionSetup, {\n                                    onCreateOffer: handleCreateOffer,\n                                    onCreateAnswer: handleCreateAnswer,\n                                    onConnect: handleConnect,\n                                    onClearData: handleClearData,\n                                    onVerifyConnection: handleVerifyConnection,\n                                    connectionStatus: connectionStatus,\n                                    offerData: offerData,\n                                    answerData: answerData,\n                                    offerInput: offerInput,\n                                    setOfferInput: setOfferInput,\n                                    answerInput: answerInput,\n                                    setAnswerInput: setAnswerInput,\n                                    showOfferStep: showOfferStep,\n                                    showAnswerStep: showAnswerStep,\n                                    verificationCode: verificationCode,\n                                    showVerification: showVerification,\n                                    showQRCode: showQRCode,\n                                    qrCodeUrl: qrCodeUrl,\n                                    showQRScanner: showQRScanner,\n                                    setShowQRCode: setShowQRCode,\n                                    setShowQRScanner: setShowQRScanner,\n                                    setShowQRScannerModal: setShowQRScannerModal,\n                                    messages: messages,\n                                    localVerificationConfirmed: localVerificationConfirmed,\n                                    remoteVerificationConfirmed: remoteVerificationConfirmed,\n                                    bothVerificationsConfirmed: bothVerificationsConfirmed,\n                                    // QR control props\n                                    qrFramesTotal: qrFramesTotal,\n                                    qrFrameIndex: qrFrameIndex,\n                                    qrManualMode: qrManualMode,\n                                    toggleQrManualMode: toggleQrManualMode,\n                                    nextQrFrame: nextQrFrame,\n                                    prevQrFrame: prevQrFrame,\n                                    // PAKE passwords removed - using SAS verification instead\n                                    markAnswerCreated: markAnswerCreated,\n                                    notificationIntegrationRef: notificationIntegrationRef,\n                                    isGeneratingKeys: isGeneratingKeys,\n                                    setIsGeneratingKeys: setIsGeneratingKeys,\n                                    handleCreateOffer: handleCreateOffer,\n                                    relayOnlyMode: relayOnlyMode,\n                                    setRelayOnlyMode: setRelayOnlyMode,\n                                    webrtcManagerRef: webrtcManagerRef,\n                                    showIceSettings: showIceSettings,\n                                    setShowIceSettings: setShowIceSettings,\n                                    iceServersText: iceServersText,\n                                    iceSettingsPersisted: iceSettingsPersisted,\n                                    customIceServers: customIceServers,\n                                    handleApplyIceSettings: handleApplyIceSettings,\n                                    handleForgetIceSettings: handleForgetIceSettings,\n                                    // Render only the create/connect card inside the chat column\n                                    // (an additional session), instead of the full landing.\n                                    compact: showSidebar\n                                })\n                        ),\n                        \n                        // QR Scanner Modal \u2014 camera scan (design import: \"Start Secure\" / Camera scan modal)\n                        showQRScannerModal && (() => {\n                            const closeScanner = () => {\n                                setShowQRScannerModal(false);\n                                // Clear QR scanner buffer\n                                qrChunksBufferRef.current = { id: null, total: 0, seen: new Set(), items: [] };\n                            };\n                            const buf = qrChunksBufferRef.current;\n                            const hasParts = !!(buf && buf.id && buf.total > 1);\n                            const framesText = hasParts\n                                ? `Scanning frames\u2026 ${buf.seen.size} / ${buf.total}`\n                                : t('qr.scanning');\n                            const corner = (k, st) => React.createElement('span', {\n                                key: k,\n                                style: Object.assign({ position: 'absolute', width: '34px', height: '34px', zIndex: 3 }, st)\n                            });\n                            return React.createElement('div', {\n                                key: 'qr-scanner-modal',\n                                onClick: closeScanner,\n                                style: { position: 'fixed', inset: 0, zIndex: 50, display: 'flex', alignItems: 'center', justifyContent: 'center', padding: '32px', background: 'rgba(var(--sb-scrim-rgb), 0.82)', backdropFilter: 'blur(10px)', WebkitBackdropFilter: 'blur(10px)', animation: 'sbUp .2s ease' }\n                            }, [\n                                React.createElement('div', {\n                                    key: 'scanner-container',\n                                    onClick: (e) => e.stopPropagation(),\n                                    style: { width: '100%', maxWidth: '420px', borderRadius: '22px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'var(--sb-bg)', boxShadow: '0 30px 90px rgba(var(--sb-shadow-rgb), calc(0.6 * var(--sb-shadow-k)))', overflow: 'hidden' }\n                                }, [\n                                    // Header\n                                    React.createElement('div', {\n                                        key: 'scanner-header',\n                                        style: { display: 'flex', alignItems: 'center', gap: '11px', padding: '18px 20px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)' }\n                                    }, [\n                                        React.createElement('span', {\n                                            key: 'scanner-icon',\n                                            style: { display: 'flex' },\n                                            dangerouslySetInnerHTML: { __html: '<svg width=\"18\" height=\"18\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" stroke-width=\"1.9\" stroke-linecap=\"round\" stroke-linejoin=\"round\"><path d=\"M2 8.5V6.5A2.5 2.5 0 0 1 4.5 4h2M17.5 4h2A2.5 2.5 0 0 1 22 6.5v2M22 15.5v2a2.5 2.5 0 0 1-2.5 2.5h-2M6.5 20h-2A2.5 2.5 0 0 1 2 17.5v-2\"/><circle cx=\"12\" cy=\"12\" r=\"3.2\"/></svg>' }\n                                        }),\n                                        React.createElement('div', {\n                                            key: 'scanner-titles',\n                                            style: { flex: 1, lineHeight: 1.2 }\n                                        }, [\n                                            React.createElement('div', {\n                                                key: 'scanner-title',\n                                                style: { fontSize: '15.5px', fontWeight: 800, color: 'var(--sb-text-1)' }\n                                            }, t('qr.title')),\n                                            React.createElement('div', {\n                                                key: 'scanner-hint',\n                                                style: { fontSize: '12px', color: 'var(--sb-text-8)' }\n                                            }, t('qr.subtitle'))\n                                        ]),\n                                        React.createElement('button', {\n                                            key: 'close-btn',\n                                            onClick: closeScanner,\n                                            style: { width: '32px', height: '32px', display: 'grid', placeItems: 'center', borderRadius: '9px', border: 'none', background: 'rgba(var(--sb-ink), 0.05)', color: 'var(--sb-text-6)', cursor: 'pointer' }\n                                        }, React.createElement('i', { className: 'fas fa-times' }))\n                                    ]),\n                                    // Body\n                                    React.createElement('div', {\n                                        key: 'scanner-body',\n                                        style: { padding: '22px 24px 24px' }\n                                    }, [\n                                        React.createElement('div', {\n                                            key: 'viewfinder',\n                                            style: { position: 'relative', aspectRatio: '1', borderRadius: '18px', overflow: 'hidden', background: '#000', border: '1px solid rgba(var(--sb-ink), 0.1)' }\n                                        }, [\n                                            React.createElement('div', {\n                                                key: 'vf-bg',\n                                                style: { position: 'absolute', inset: 0, background: 'radial-gradient(circle at 50% 45%, var(--sb-surface-2), #000)' }\n                                            }),\n                                            // Camera video is injected here by Html5Qrcode\n                                            React.createElement('div', {\n                                                key: 'qr-reader',\n                                                id: 'qr-reader',\n                                                style: { position: 'absolute', inset: 0, zIndex: 1 }\n                                            }),\n                                            corner('c-tl', { top: '18px', insetInlineStart: '18px', borderTop: '2.5px solid var(--sb-green-solid)', borderInlineStart: '2.5px solid var(--sb-green-solid)', borderRadius: '8px 0 0 0' }),\n                                            corner('c-tr', { top: '18px', insetInlineEnd: '18px', borderTop: '2.5px solid var(--sb-green-solid)', borderInlineEnd: '2.5px solid var(--sb-green-solid)', borderRadius: '0 8px 0 0' }),\n                                            corner('c-bl', { bottom: '18px', insetInlineStart: '18px', borderBottom: '2.5px solid var(--sb-green-solid)', borderInlineStart: '2.5px solid var(--sb-green-solid)', borderRadius: '0 0 0 8px' }),\n                                            corner('c-br', { bottom: '18px', insetInlineEnd: '18px', borderBottom: '2.5px solid var(--sb-green-solid)', borderInlineEnd: '2.5px solid var(--sb-green-solid)', borderRadius: '0 0 8px 0' }),\n                                            React.createElement('span', {\n                                                key: 'scan-line',\n                                                style: { position: 'absolute', left: '18px', right: '18px', height: '2.5px', zIndex: 2, background: 'linear-gradient(90deg, transparent, var(--sb-green), transparent)', boxShadow: '0 0 16px var(--sb-green)', animation: 'sbScan 1.5s ease-in-out infinite alternate' }\n                                            }),\n                                            React.createElement('div', {\n                                                key: 'scan-status',\n                                                style: { position: 'absolute', bottom: 0, left: 0, right: 0, zIndex: 3, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '14px', background: 'linear-gradient(transparent, rgba(0,0,0,0.6))' }\n                                            }, [\n                                                React.createElement('span', {\n                                                    key: 'spinner',\n                                                    style: { display: 'flex', animation: 'sbSpin 1.4s linear infinite' },\n                                                    dangerouslySetInnerHTML: { __html: '<svg width=\"15\" height=\"15\" viewBox=\"0 0 24 24\" fill=\"none\" stroke=\"var(--sb-green-solid)\" stroke-width=\"2\" stroke-linecap=\"round\"><path d=\"M21 12a9 9 0 1 1-6.2-8.6\"/></svg>' }\n                                                }),\n                                                React.createElement('span', {\n                                                    key: 'scan-frames',\n                                                    style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-4)' }\n                                                }, framesText)\n                                            ])\n                                        ]),\n                                        React.createElement('p', {\n                                            key: 'scanner-note',\n                                            style: { margin: '16px 0 0', textAlign: 'center', fontSize: '12px', lineHeight: 1.5, color: 'var(--sb-text-9)' }\n                                        }, t('qr.hint'))\n                                    ])\n                                ])\n                            ]);\n                        })()\n                        ])  // end app-column\n                    ]);\n                };\n                // UpdateChecker \u043A\u043E\u043C\u043F\u043E\u043D\u0435\u043D\u0442 \u0434\u043B\u044F \u0430\u0432\u0442\u043E\u043C\u0430\u0442\u0438\u0447\u0435\u0441\u043A\u043E\u0439 \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u043E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u0439\n                const UpdateCheckerWrapper = ({ children }) => {\n                    // \u041F\u0440\u043E\u0432\u0435\u0440\u044F\u0435\u043C \u0434\u043E\u0441\u0442\u0443\u043F\u043D\u043E\u0441\u0442\u044C UpdateChecker\n                    if (typeof window !== 'undefined' && window.UpdateChecker) {\n                        return React.createElement(window.UpdateChecker, {\n                            debug: false\n                        }, children);\n                    }\n                    // Fallback \u0435\u0441\u043B\u0438 UpdateChecker \u043D\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043D\n                    return children;\n                };\n\n                function initializeApp() {\n                    if (window.EnhancedSecureCryptoUtils && window.EnhancedSecureWebRTCManager) {\n                        // \u041E\u0431\u043E\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u043C \u043F\u0440\u0438\u043B\u043E\u0436\u0435\u043D\u0438\u0435 \u0432 UpdateChecker \u0434\u043B\u044F \u0430\u0432\u0442\u043E\u043C\u0430\u0442\u0438\u0447\u0435\u0441\u043A\u043E\u0439 \u043F\u0440\u043E\u0432\u0435\u0440\u043A\u0438 \u043E\u0431\u043D\u043E\u0432\u043B\u0435\u043D\u0438\u0439\n                        const AppWithUpdateChecker = React.createElement(UpdateCheckerWrapper, null,\n                            React.createElement(EnhancedSecureP2PChat)\n                        );\n                        ReactDOM.render(AppWithUpdateChecker, document.getElementById('root'));\n                    } else {\n                        console.error('\u041C\u043E\u0434\u0443\u043B\u0438 \u043D\u0435 \u0437\u0430\u0433\u0440\u0443\u0436\u0435\u043D\u044B:', {\n                            hasCrypto: !!window.EnhancedSecureCryptoUtils,\n                            hasWebRTC: !!window.EnhancedSecureWebRTCManager\n                        });\n                    }\n                }\n\n                if (typeof window !== 'undefined') {\n\n                    window.addEventListener('unhandledrejection', (event) => {\n                        console.error('Unhandled promise rejection:', event.reason);\n                        event.preventDefault(); \n                    });\n                    \n\n                    window.addEventListener('error', (event) => {\n                        console.error('Global error:', event.error);\n                        event.preventDefault(); \n                    });\n                    \n                    if (!window.initializeApp) {\n                        window.initializeApp = initializeApp;\n                    }\n                };\n                \n                // Render Enhanced Application with UpdateChecker\n                if (window.EnhancedSecureCryptoUtils && window.EnhancedSecureWebRTCManager) {\n                    const UpdateCheckerWrapper = ({ children }) => {\n                        if (typeof window !== 'undefined' && window.UpdateChecker) {\n                            return React.createElement(window.UpdateChecker, {\n                                debug: false\n                            }, children);\n                        }\n                        return children;\n                    };\n                    const AppWithUpdateChecker = React.createElement(UpdateCheckerWrapper, null,\n                        React.createElement(EnhancedSecureP2PChat)\n                    );\n                    ReactDOM.render(AppWithUpdateChecker, document.getElementById('root'));\n                } else {\n                    ReactDOM.render(React.createElement(EnhancedSecureP2PChat), document.getElementById('root'));\n                }\n"],
+  "mappings": "AAAA,SAASA,GAAwBC,EAAe,WAAW,OAAQ,CAC/D,OAAOA,GAAc,kBAAoB,EAC7C,CAEA,SAASC,GAAwB,CAC7B,aAAAD,EAAe,WAAW,OAC1B,iBAAAE,EACA,YAAAC,EACA,aAAAC,EAAe,IAAM,CACb,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,CAEtB,CACJ,EAAG,CACC,OAAKL,GAAwBC,CAAY,GAIzCA,EAAa,aAAe,IAAM,CAC9BG,EAAY,EACRD,EAAiB,SACjBA,EAAiB,QAAQ,WAAW,CAE5C,EACAF,EAAa,UAAYI,EACzBJ,EAAa,iBAAmBE,EAEzB,IAAM,CACT,OAAOF,EAAa,aACpB,OAAOA,EAAa,UACpB,OAAOA,EAAa,gBACxB,GAhBW,IAAM,CAAC,CAiBtB,CChBA,IAAMK,GAAU,gBAGhB,IAAMC,GAAa,iBACbC,GAAkB,eAGxB,SAASC,IAAc,CACnB,OAAO,OAAO,UAAc,KACxB,OAAO,OAAW,KAClB,CAAC,CAAC,OAAO,MACjB,CAEA,SAASC,IAAS,CACd,OAAO,IAAI,QAAQ,CAACC,EAASC,IAAW,CACpC,IAAIC,EACJ,GAAI,CACAA,EAAU,UAAU,KAAKC,GAAS,CAAU,CAChD,OAASC,EAAO,CACZH,EAAOG,CAAK,EACZ,MACJ,CACAF,EAAQ,gBAAkB,IAAM,CAC5B,IAAMG,EAAKH,EAAQ,OACdG,EAAG,iBAAiB,SAAS,IAAK,GACnCA,EAAG,kBAAkB,IAAK,CAElC,EACAH,EAAQ,UAAY,IAAMF,EAAQE,EAAQ,MAAM,EAChDA,EAAQ,QAAU,IAAMD,EAAOC,EAAQ,KAAK,CAChD,CAAC,CACL,CAEA,SAASI,GAAOD,EAAIE,EAAK,CACrB,OAAO,IAAI,QAAQ,CAACP,EAASC,IAAW,CAEpC,IAAMO,EADKH,EAAG,YAAY,KAAO,UAAU,EAC5B,YAAY,IAAK,EAAE,IAAIE,CAAG,EACzCC,EAAI,UAAY,IAAMR,EAAQQ,EAAI,MAAM,EACxCA,EAAI,QAAU,IAAMP,EAAOO,EAAI,KAAK,CACxC,CAAC,CACL,CAEA,SAASC,GAAOJ,EAAIE,EAAKG,EAAO,CAC5B,OAAO,IAAI,QAAQ,CAACV,EAASC,IAAW,CACpC,IAAMU,EAAKN,EAAG,YAAY,KAAO,WAAW,EAC5CM,EAAG,YAAY,IAAK,EAAE,IAAID,EAAOH,CAAG,EACpCI,EAAG,WAAa,IAAMX,EAAQ,EAC9BW,EAAG,QAAU,IAAMV,EAAOU,EAAG,KAAK,CACtC,CAAC,CACL,CAEA,SAASC,GAAUP,EAAIE,EAAK,CACxB,OAAO,IAAI,QAAQ,CAACP,EAASC,IAAW,CACpC,IAAMU,EAAKN,EAAG,YAAY,KAAO,WAAW,EAC5CM,EAAG,YAAY,IAAK,EAAE,OAAOJ,CAAG,EAChCI,EAAG,WAAa,IAAMX,EAAQ,EAC9BW,EAAG,QAAU,IAAMV,EAAOU,EAAG,KAAK,CACtC,CAAC,CACL,CAEA,eAAeE,GAAqBR,EAAI,CACpC,IAAMS,EAAW,MAAMR,GAAOD,EAAIU,EAAU,EAC5C,GAAID,aAAoB,UACpB,OAAOA,EAEX,IAAMP,EAAM,MAAM,OAAO,OAAO,YAC5B,CAAE,KAAM,UAAW,OAAQ,GAAI,EAC/B,GACA,CAAC,UAAW,SAAS,CACzB,EACA,aAAME,GAAOJ,EAAIU,GAAYR,CAAG,EACzBA,CACX,CAMA,eAAsBS,GAAgBC,EAAU,CAC5C,GAAI,CAACnB,GAAY,EAAG,MAAM,IAAI,MAAM,qDAAqD,EAEzF,IAAMO,EAAK,MAAMN,GAAO,EAClBQ,EAAM,MAAMM,GAAqBR,CAAE,EAEnCa,EAAU,KAAK,UAAU,CAC3B,QAAS,EACT,QAAS,MAAM,QAAQD,GAAU,OAAO,EAAIA,EAAS,QAAU,CAAC,EAChE,YAAaA,GAAU,cAAgB,aAAe,aAAe,UACzE,CAAC,EAEKE,EAAK,OAAO,gBAAgB,IAAI,WAAW,EAAE,CAAC,EAC9CC,EAAa,MAAM,OAAO,OAAO,QACnC,CAAE,KAAM,UAAW,GAAAD,CAAG,EACtBZ,EACA,IAAI,YAAY,EAAE,OAAOW,CAAO,CACpC,EAEA,MAAMT,GAAOJ,EAAIgB,GAAiB,CAC9B,GAAI,MAAM,KAAKF,CAAE,EACjB,KAAM,MAAM,KAAK,IAAI,WAAWC,CAAU,CAAC,CAC/C,CAAC,CACL,CAOA,eAAsBE,IAAkB,CACpC,GAAI,CAACxB,GAAY,EAAG,OAAO,KAE3B,GAAI,CACA,IAAMO,EAAK,MAAMN,GAAO,EAClBwB,EAAS,MAAMjB,GAAOD,EAAIgB,EAAe,EAC/C,GAAI,CAACE,GAAU,CAAC,MAAM,QAAQA,EAAO,EAAE,GAAK,CAAC,MAAM,QAAQA,EAAO,IAAI,EAClE,OAAO,KAEX,IAAMhB,EAAM,MAAMD,GAAOD,EAAIU,EAAU,EACvC,GAAI,EAAER,aAAe,WAAY,OAAO,KAExC,IAAMiB,EAAY,MAAM,OAAO,OAAO,QAClC,CAAE,KAAM,UAAW,GAAI,IAAI,WAAWD,EAAO,EAAE,CAAE,EACjDhB,EACA,IAAI,WAAWgB,EAAO,IAAI,CAC9B,EACME,EAAS,KAAK,MAAM,IAAI,YAAY,EAAE,OAAOD,CAAS,CAAC,EAC7D,MAAO,CACH,QAAS,MAAM,QAAQC,EAAO,OAAO,EAAIA,EAAO,QAAU,CAAC,EAC3D,YAAaA,EAAO,cAAgB,aAAe,aAAe,UACtE,CACJ,MAAQ,CAEJ,OAAO,IACX,CACJ,CAGA,eAAsBC,IAAmB,CACrC,GAAK5B,GAAY,EACjB,GAAI,CACA,IAAMO,EAAK,MAAMN,GAAO,EACxB,MAAMa,GAAUP,EAAIgB,EAAe,CACvC,MAAQ,CAER,CACJ,CC9IA,IAAMM,GAAW,wBACXC,GAAkB,CAAC,sBAAuB,gBAAgB,EAGhE,IAAMC,GAAkB,CAAC,IAAQ,IAAY,GAAW,EAExD,SAASC,GAAUC,EAAK,CACpB,IAAMC,EAAI,sBAAsB,KAAK,OAAOD,GAAO,EAAE,EAAE,KAAK,CAAC,EAC7D,OAAOC,EAAIA,EAAE,CAAC,EAAE,YAAY,EAAI,IACpC,CAGO,SAASC,GAAgBC,EAAO,CACnC,MAAI,CAACA,GAAS,OAAOA,GAAU,SAAiB,IACnC,MAAM,QAAQA,EAAM,IAAI,EAAIA,EAAM,KAAO,CAACA,EAAM,IAAI,GACrD,KAAMC,GAAMC,GAAgB,SAASN,GAAUK,CAAC,CAAC,CAAC,CAClE,CAEA,SAASE,GAAaC,EAAO,CACzB,GAAI,OAAOA,GAAU,UAAYA,EAAM,SAAW,GAAKA,EAAM,OAAS,IAAW,MAAO,GACxF,QAASC,EAAI,EAAGA,EAAID,EAAM,OAAQC,IAAK,CACnC,IAAMC,EAAIF,EAAM,WAAWC,CAAC,EAC5B,GAAIC,EAAI,IAAQA,IAAM,IAAM,MAAO,EACvC,CACA,MAAO,EACX,CAOO,SAASC,GAAqBC,EAAMC,EAAM,CAC7C,GAAI,CAAC,MAAM,QAAQD,CAAI,GAAK,CAACC,GAAQ,CAACN,GAAaM,EAAK,QAAQ,GAAK,CAACN,GAAaM,EAAK,UAAU,EAC9F,MAAO,GAEX,IAAIC,EAAU,GACd,QAAWV,KAASQ,EACXT,GAAgBC,CAAK,IAC1BA,EAAM,SAAWS,EAAK,SACtBT,EAAM,WAAaS,EAAK,WACxBC,EAAU,IAEd,GAAI,CAACA,GAAW,MAAM,QAAQD,EAAK,IAAI,EAAG,CAGtC,IAAME,EAAOF,EAAK,KAAK,OAAQR,GAAME,GAAaF,CAAC,GAAKC,GAAgB,SAASN,GAAUK,CAAC,CAAC,CAAC,EAC1FU,EAAK,OAAS,IACdH,EAAK,KAAK,CAAE,KAAAG,EAAM,SAAUF,EAAK,SAAU,WAAYA,EAAK,UAAW,CAAC,EACxEC,EAAU,GAElB,CACA,OAAOA,CACX,CAGO,SAASE,GAAwBC,EAAMC,EAAY,CACtD,IAAMC,EAASF,GAAQ,MAAM,QAAQA,EAAK,UAAU,EAAIA,EAAK,WAAW,CAAC,EAAI,KAC7E,GAAI,CAACE,GAAU,CAACZ,GAAaY,EAAO,QAAQ,GAAK,CAACZ,GAAaY,EAAO,UAAU,EAAG,OAAO,KAE1F,IAAMC,EAAS,OAAO,OAAOD,EAAO,QAAQ,EAAE,MAAM,GAAG,EAAE,CAAC,CAAC,EAC3D,GAAI,CAAC,OAAO,SAASC,CAAM,GAAKA,GAAUF,EAAY,OAAO,KAC7D,IAAMG,EAAM,OAAOJ,EAAK,GAAG,EAC3B,MAAO,CACH,KAAM,MAAM,QAAQE,EAAO,IAAI,EAAIA,EAAO,KAAK,MAAM,EAAG,CAAC,EAAI,CAAC,EAC9D,SAAUA,EAAO,SACjB,WAAYA,EAAO,WACnB,OAAAC,EACA,IAAK,OAAO,SAASC,CAAG,GAAKA,EAAM,EAAIA,EAAMD,EAASF,CAC1D,CACJ,CAEA,IAAII,GAAU,GAOP,SAASC,GAA2BC,EAAO,CAAC,EAAG,CAClD,GAAIF,IAAW,OAAO,OAAW,KAAe,OAAO,OAAU,WAAY,OAC7EA,GAAU,GAEV,IAAMG,EAAUD,EAAK,UAAY,IAAM,OAAO,uBAC1CJ,EAAS,EACTC,EAAM,EACNK,EAAQ,KACRC,EAAW,EAETC,EAAYC,GAAO,CACjBH,GAAO,aAAaA,CAAK,EAC7BA,EAAQ,WAAWI,EAASD,CAAE,CAClC,EAEA,eAAeC,GAAU,CACrBJ,EAAQ,KACR,GAAI,CACA,IAAMK,EAAM,MAAM,MAAMC,GAAU,CAAE,OAAQ,OAAQ,MAAO,WAAY,YAAa,MAAO,CAAC,EAC5F,GAAI,CAACD,EAAI,GAAI,MAAM,IAAI,MAAM,QAAQA,EAAI,MAAM,EAAE,EACjD,IAAMlB,EAAOG,GAAwB,MAAMe,EAAI,KAAK,EAAG,KAAK,IAAI,EAAI,GAAI,EACxE,GAAI,CAAClB,EAAM,MAAM,IAAI,MAAM,mBAAmB,EAC9CF,GAAqBc,EAAQ,EAAGZ,CAAI,EACpCO,EAASP,EAAK,OACdQ,EAAMR,EAAK,IACXc,EAAW,EAGXC,EAAS,KAAK,IAAI,GAAIP,EAAM,CAAC,EAAI,GAAI,CACzC,MAAY,CACR,IAAMY,EAAQlC,GAAgB,KAAK,IAAI4B,EAAU5B,GAAgB,OAAS,CAAC,CAAC,EAC5E4B,IACAC,EAASK,CAAK,CAClB,CACJ,CAIA,SAAS,iBAAiB,mBAAoB,IAAM,CAChD,GAAI,SAAS,kBAAoB,UAAW,OAC5C,IAAMC,EAAM,KAAK,IAAI,EAAI,KACrB,CAACd,GAAUA,EAASc,EAAMb,EAAM,IAAGS,EAAQ,CACnD,CAAC,EAEDA,EAAQ,CACZ,CC3IO,IAAMK,GAAoB,CAAC,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,KAAK,IAAI,EACrFC,GAAc,CACvB,GAAM,CACF,SAAY,KACZ,WAAc,UACd,KAAQ,KACR,IAAO,MACP,KAAQ,GACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,UACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,cACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,aACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,+DACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,6CACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,UACZ,WAAc,2BACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,qBACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,uCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,6CACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,iCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,iCACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,EACA,GAAM,CACF,SAAY,KACZ,WAAc,2BACd,KAAQ,KACR,IAAO,MACP,KAAQ,MACZ,CACJ,EAIaC,GAAuB,CAChC,GAAM,CACF,wBAAyB,0CACzB,uBAAwB,kBACxB,2BAA4B,SAChC,EACA,GAAM,CACF,wBAAyB,wCACzB,uBAAwB,oBACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,kDACzB,uBAAwB,sBACxB,2BAA4B,QAChC,EACA,GAAM,CACF,wBAAyB,8DACzB,uBAAwB,qBACxB,2BAA4B,QAChC,EACA,GAAM,CACF,wBAAyB,oNACzB,uBAAwB,0GACxB,2BAA4B,4CAChC,EACA,GAAM,CACF,wBAAyB,+MACzB,uBAAwB,yFACxB,2BAA4B,4CAChC,EACA,GAAM,CACF,wBAAyB,2EACzB,uBAAwB,uCACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,yGACzB,uBAAwB,wCACxB,2BAA4B,cAChC,EACA,GAAM,CACF,wBAAyB,2KACzB,uBAAwB,yFACxB,2BAA4B,6CAChC,EACA,GAAM,CACF,wBAAyB,gLACzB,uBAAwB,4EACxB,2BAA4B,gCAChC,EACA,GAAM,CACF,wBAAyB,oHACzB,uBAAwB,4EACxB,2BAA4B,gCAChC,EACA,GAAM,CACF,wBAAyB,uKACzB,uBAAwB,mFACxB,2BAA4B,0BAChC,EACA,GAAM,CACF,wBAAyB,+JACzB,uBAAwB,6EACxB,2BAA4B,6CAChC,CACJ,ECpKO,IAAMC,GAAa,CACtB,iBAAkB,WAClB,wBAAyB,0CACzB,uBAAwB,kBACxB,2BAA4B,UAC5B,cAAe,QACf,eAAgB,SAChB,cAAe,QACf,aAAc,OACd,iBAAkB,mBAClB,eAAgB,6BAChB,qBAAsB,iDACtB,cAAe,OACf,gBAAiB,SACjB,kBAAmB,0BACnB,iBAAkB,kBAClB,iBAAkB,mBAClB,mBAAoB,mCACpB,kBAAmB,wCACnB,kBAAmB,qCACnB,eAAgB,yCAChB,kBAAmB,6BACnB,wBAAyB,4KACzB,mBAAoB,oBACpB,qBAAsB,WACtB,iBAAkB,qBAClB,iBAAkB,0BAClB,qBAAsB,UACtB,wBAAyB,kBACzB,sBAAuB,kBACvB,iBAAkB,mIAClB,iBAAkB,CACd,aACA,cACA,QACA,OACJ,EACA,qBAAsB,WACtB,wBAAyB,SACzB,sBAAuB,kBACvB,iBAAkB,oIAClB,iBAAkB,CACd,WACA,UACJ,EACA,qBAAsB,UACtB,wBAAyB,kBACzB,sBAAuB,kBACvB,iBAAkB,iIAClB,iBAAkB,CACd,iBACA,aACJ,EACA,qBAAsB,UACtB,wBAAyB,cACzB,sBAAuB,sBACvB,iBAAkB,6GAClB,iBAAkB,CACd,iBACA,eACJ,EACA,qBAAsB,YACtB,wBAAyB,aACzB,sBAAuB,uBACvB,iBAAkB,qGAClB,iBAAkB,CACd,cACA,SACJ,EACA,mBAAoB,uBACpB,mBAAoB,0BACpB,sBAAuB,uFACvB,sBAAuB,mBACvB,yBAA0B,8EAC1B,yBAA0B,qBAC1B,uBAAwB,mBACxB,sBAAuB,0EACvB,qBAAsB,uBACtB,kBAAmB,sBACnB,kBAAmB,6BACnB,qBAAsB,0HACtB,mBAAoB,0CACpB,mBAAoB,wBACpB,sBAAuB,eACvB,mBAAoB,gBACpB,sBAAuB,yBACvB,kBAAmB,+GACnB,kBAAmB,4EACnB,oBAAqB,uBACrB,mBAAoB,sFACpB,kBAAmB,6BACnB,kBAAmB,iBACnB,iBAAkB,wEAClB,kBAAmB,sBACnB,qBAAsB,wCACtB,oBAAqB,oBACrB,yBAA0B,mCAC1B,gBAAiB,UACjB,mBAAoB,mBACpB,mBAAoB,uBACpB,iBAAkB,4CAClB,kBAAmB,aACnB,sBAAuB,CACnB,qCACA,6CACA,6BACA,6BACA,gCACA,cACJ,EACA,mBAAoB,gBACpB,iBAAkB,kDAClB,kBAAmB,cACnB,sBAAuB,CACnB,iCACA,sCACA,oCACA,yBACA,wCACJ,EACA,mBAAoB,oBACpB,iBAAkB,mDAClB,kBAAmB,cACnB,sBAAuB,CACnB,0CACA,2CACA,iCACA,8CACA,gCACJ,EACA,mBAAoB,sBACpB,iBAAkB,6CAClB,kBAAmB,YACnB,sBAAuB,CACnB,oDACA,6CACA,wCACA,uCACA,6CACJ,EACA,mBAAoB,wBACpB,iBAAkB,wCAClB,kBAAmB,cACnB,sBAAuB,CACnB,gDACA,yCACA,oCACA,kCACA,sCACJ,EACA,mBAAoB,4BACpB,iBAAkB,sEAClB,kBAAmB,YACnB,sBAAuB,CACnB,0CACA,0CACA,gCACA,iDACA,4CACA,kCACA,gCACA,gCACA,4BACA,0BACA,sBACA,uBACJ,EACA,mBAAoB,kBACpB,iBAAkB,oDAClB,kBAAmB,aACnB,sBAAuB,CACnB,iCACA,+BACA,oCACA,0BACA,yBACA,+BACA,iBACA,+BACJ,EACA,mBAAoB,uBACpB,iBAAkB,yDAClB,kBAAmB,aACnB,sBAAuB,CACnB,sCACA,qCACA,qCACA,yCACA,oCACA,2BACA,2CACA,uBACJ,EACA,mBAAoB,uBACpB,iBAAkB,qCAClB,kBAAmB,MACnB,sBAAuB,CACnB,uCACA,2CACA,8CACA,oDACA,+CACA,wCACA,qDACA,4CACJ,EACA,oBAAqB,iBACrB,kBAAmB,yCACnB,mBAAoB,UACpB,uBAAwB,CACpB,iCACA,8CACA,kCACA,+BACA,uBACA,yBACA,0BACA,0BACJ,EACA,oBAAqB,4BACrB,kBAAmB,uCACnB,mBAAoB,UACpB,uBAAwB,CACpB,2CACA,8BACA,8BACA,4BACA,6BACA,iCACA,0BACA,6BACJ,EACA,oBAAqB,wBACrB,kBAAmB,8BACnB,mBAAoB,OACpB,uBAAwB,CACpB,oBACA,yBACA,yBACA,iCACA,qBACA,uCACA,+BACA,sBACJ,EACA,oBAAqB,uBACrB,kBAAmB,8BACnB,mBAAoB,QACpB,uBAAwB,CACpB,2BACA,2BACA,wBACA,wCACA,kCACA,uBACA,sBACA,8BACJ,EACA,kBAAmB,iCACnB,kBAAmB,6BACnB,kBAAmB,kCACnB,0BAA2B,wBAC3B,wBAAyB,uBACzB,yBAA0B,kDAC1B,uBAAwB,wBACxB,4BAA6B,wBAC7B,sBAAuB,iFACvB,2BAA4B,4EAC5B,sBAAuB,uBACvB,wBAAyB,+CACzB,mCAAoC,iCACpC,2BAA4B,oEAC5B,mBAAoB,oDACpB,yBAA0B,uGAC1B,qBAAsB,iBACtB,iBAAkB,eAClB,mBAAoB,YACpB,iBAAkB,UAClB,iBAAkB,yBAClB,aAAc,mBACd,iBAAkB,gBAClB,YAAa,iGACb,gBAAiB,qEACjB,aAAc,iBACd,aAAc,QACd,eAAgB,gBAChB,WAAY,MACZ,YAAa,OACb,mBAAoB,yBACpB,mBAAoB,oBACpB,eAAgB,sBAChB,kBAAmB,yBACnB,iBAAkB,uDAClB,cAAe,UACf,cAAe,UACf,YAAa,QACb,eAAgB,iBAChB,eAAgB,uBAChB,mBAAoB,kCACpB,eAAgB,4BAChB,mBAAoB,gCACpB,eAAgB,YAChB,mBAAoB,oCACpB,mBAAoB,oBACpB,kBAAmB,8EACnB,wBAAyB,6DACzB,uBAAwB,oDACxB,YAAa,SACb,qBAAsB,iBACtB,mBAAoB,4CACpB,uBAAwB,uCACxB,mBAAoB,kBACpB,kBAAmB,yFACnB,SAAU,KACV,YAAa,6BACb,gBAAiB,uBACjB,oBAAqB,2BACrB,gBAAiB,SACjB,cAAe,OACf,cAAe,OACf,cAAe,OACf,gBAAiB,SACjB,cAAe,OACf,yBAA0B,uBAC1B,0BAA2B,oBAC3B,cAAe,2CACf,cAAe,mBACf,WAAY,eACZ,cAAe,gCACf,cAAe,iBACf,UAAW,0FACX,WAAY,MACZ,YAAa,sBACb,eAAgB,sBAChB,eAAgB,sBAChB,YAAa,mBACb,eAAgB,mDAChB,YAAa,qIACb,kBAAmB,2BACnB,iBAAkB,oCAClB,kBAAmB,2BACnB,iBAAkB,uBAClB,eAAgB,6HAChB,kBAAmB,UACnB,WAAY,eACZ,cAAe,gBACf,iBAAkB,kBAClB,iBAAkB,cAClB,gBAAiB,mGACjB,mBAAoB,oGACpB,cAAe,sBACf,kBAAmB,4EACnB,aAAc,eACd,aAAc,SACd,YAAa,QACb,qBAAsB,0CACtB,iBAAkB,+BAClB,eAAgB,mBAChB,cAAe,kDACf,wBAAyB,kBACzB,oBAAqB,cACrB,aAAc,aACd,eAAgB,QAChB,iBAAkB,MAClB,oBAAqB,iBACrB,sBAAuB,oCACvB,0BAA2B,mCAC3B,0BAA2B,4BAC3B,qBAAsB,sBACtB,oBAAqB,2BACrB,eAAgB,0EAChB,qBAAsB,oGACtB,qBAAsB,cACtB,eAAgB,eAChB,kBAAmB,UACnB,oBAAqB,kBACrB,mBAAoB,yFACpB,iBAAkB,sCAClB,iBAAkB,+BAClB,iBAAkB,2CAClB,mBAAoB,mBACpB,wBAAyB,qBACzB,uBAAwB,gJACxB,kBAAmB,8BACnB,iBAAkB,4EAClB,kBAAmB,4BACnB,iBAAkB,8DAClB,kBAAmB,gCACnB,iBAAkB,6EAClB,kBAAmB,kBACnB,iBAAkB,uFAClB,gBAAiB,SACjB,eAAgB,eAChB,kBAAmB,sCACnB,wBAAyB,0DACzB,qBAAsB,mEACtB,qBAAsB,uEACtB,WAAY,iBACZ,iBAAkB,oBAClB,aAAc,UACd,YAAa,SACb,aAAc,iBACd,YAAa,yBACb,gBAAiB,yDACjB,cAAe,gBACf,gBAAiB,wBACjB,cAAe,SACf,cAAe,SACf,gBAAiB,WACjB,gBAAiB,uBACjB,gBAAiB,iBACjB,sBAAuB,wBACvB,qBAAsB,+BACtB,YAAa,iDACb,gBAAiB,gBACjB,qBAAsB,sBACtB,iBAAkB,iBAClB,sBAAuB,YACvB,YAAa,cACb,kBAAmB,mBACnB,eAAgB,gBAChB,cAAe,SACf,eAAgB,UAChB,WAAY,WACZ,cAAe,SACf,iBAAkB,aAClB,qBAAsB,uBACtB,kBAAmB,cACnB,gBAAiB,YACjB,aAAc,QACd,aAAc,QACd,cAAe,SACf,gBAAiB,WACjB,eAAgB,qBAChB,wBAAyB,YACzB,mBAAoB,cACpB,mBAAoB,cACpB,YAAa,YACb,eAAgB,eAChB,aAAc,aACd,aAAc,aACd,oBAAqB,8BACrB,iBAAkB,kGAClB,eAAgB,SAChB,mBAAoB,sBACpB,qBAAsB,wBACtB,mBAAoB,mBACpB,mBAAoB,cACpB,gBAAiB,oFACjB,qBAAsB,kBACtB,eAAgB,SAChB,gBAAiB,UACjB,eAAgB,gBAChB,gBAAiB,iBACjB,cAAe,QACf,kBAAmB,mBACnB,eAAgB,eAChB,cAAe,QACf,kBAAmB,SACnB,gBAAiB,UACjB,gBAAiB,gBACjB,iBAAkB,oBAClB,oBAAqB,0BACrB,mBAAoB,+DACpB,qBAAsB,8BACtB,mBAAoB,gHACpB,qBAAsB,+BACtB,mBAAoB,oBACpB,yBAA0B,0BAC1B,sBAAuB,2CACvB,oBAAqB,8CACrB,kBAAmB,0GACnB,mBAAoB,2IACpB,oBAAqB,qFACrB,mBAAoB,2BACpB,qBAAsB,uFACtB,kBAAmB,2OACnB,qBAAsB,6LACtB,sBAAuB,8GACvB,iBAAkB,2HAClB,uBAAwB,wIACxB,sBAAuB,oBACvB,0BAA2B,0CAC3B,uBAAwB,kGACxB,qBAAsB,kCACtB,gBAAiB,sBACjB,wBAAyB,iEACzB,wBAAyB,8CACzB,wBAAyB,+EACzB,oBAAqB,kEACrB,cAAe,uBACf,kBAAmB,4BACnB,uBAAwB,wCACxB,iBAAkB,aAClB,mBAAoB,YACpB,oBAAqB,gBACrB,sBAAuB,gBACvB,sBAAuB,kBACvB,kBAAmB,cACnB,mBAAoB,eACpB,0BAA2B,oBAC3B,uBAAwB,oBACxB,uBAAwB,2BACxB,qBAAsB,0BACtB,yBAA0B,sBAC1B,yBAA0B,sBAC1B,gBAAiB,2BACjB,oBAAqB,iBACrB,iBAAkB,cAClB,iBAAkB,6BAClB,uBAAwB,4CACxB,6BAA8B,uCAC9B,uBAAwB;AAAA,mEACxB,8BAA+B,sCAC/B,mBAAoB,kCACpB,YAAa,eACb,iBAAkB,aAClB,iBAAkB,aAClB,mBAAoB,uBACpB,iBAAkB,qBAClB,eAAgB,UAChB,iBAAkB,2CAClB,gBAAiB,mEACjB,gBAAiB,YACjB,qBAAsB,+CACtB,sBAAuB,kBACvB,mBAAoB,+BACpB,kBAAmB,cACnB,oBAAqB,+CACrB,sBAAuB,kBACvB,kBAAmB,cACnB,mBAAoB,cACpB,eAAgB,2BAChB,yBAA0B,sBAC1B,eAAgB,UAChB,iBAAkB,YAClB,eAAgB,WAChB,qBAAsB,qEACtB,iBAAkB,YAClB,iBAAkB,YAClB,yBAA0B,2BAC1B,iBAAkB,YAClB,mBAAoB,cACpB,oBAAqB,qBACrB,cAAe,UACf,gBAAiB,WACjB,iBAAkB,aAClB,eAAgB,WAChB,gBAAiB,YACjB,mBAAoB,iBACpB,kBAAmB,cACnB,kBAAmB,cACnB,gBAAiB,iBACjB,cAAe,2BACf,kBAAmB,yBACnB,kBAAmB,8CACnB,iBAAkB,kBAClB,wBAAyB,iBACzB,gBAAiB,8BACjB,eAAgB,UAChB,iBAAkB,+BAClB,sBAAuB,6BACvB,sBAAuB,6BACvB,sBAAuB,qCACvB,gBAAiB,yEACjB,iBAAkB,sEAClB,yBAA0B,4BAC1B,6BAA8B,2CAC9B,uBAAwB,0BACxB,2BAA4B,2BAC5B,sBAAuB,8FACvB,oBAAqB,mGACrB,yBAA0B,0BAC1B,uBAAwB,oBACxB,oBAAqB,4BACrB,4BAA6B,sCAC7B,0BAA2B,oCAC3B,kBAAmB,sCACnB,0BAA2B,6BAC3B,oBAAqB,0BACrB,iBAAkB,6BAClB,0BAA2B,uBAC3B,qBAAsB,iEACtB,mBAAoB,+DACpB,qBAAsB,kDACtB,oBAAqB,uGACrB,wBAAyB,mGACzB,uBAAwB,4DACxB,iBAAkB,yBAClB,eAAgB,uBAChB,qBAAsB,iDACtB,yBAA0B,wDAC1B,gBAAiB,qIACjB,uBAAwB,8EACxB,yBAA0B,0EAC1B,8BAA+B,oGAC/B,qBAAsB,0DACtB,cAAe,iEACf,2BAA4B,4EAC5B,qBAAsB,8EACtB,mBAAoB,iBACpB,mBAAoB,gBACpB,gBAAiB,yDACjB,cAAe,yBACf,eAAgB,qCAChB,sBAAuB,yDACvB,yBAA0B,sBAC1B,eAAgB,wCAChB,sBAAuB,4BACvB,iBAAkB,2BAClB,eAAgB,WAChB,gBAAiB,YACjB,kBAAmB,eACnB,iBAAkB,2CAClB,mBAAoB,8EACpB,uBAAwB,8EACxB,WAAY,qBACZ,UAAW,wBACX,UAAW,yFACX,eAAgB,OAChB,gBAAiB,QACjB,kBAAmB,QACnB,iBAAkB,SAClB,iBAAkB,gCAClB,eAAgB,OAChB,gBAAiB,QACjB,iBAAkB,SAClB,cAAe,MACf,iBAAkB,UAClB,oBAAqB,eACrB,YAAa,OACb,gBAAiB,MACjB,YAAa,MACb,aAAc,OACd,eAAgB,0BAChB,aAAc,SACd,aAAc,QACd,sBAAuB,yCACvB,qBAAsB,YACtB,gBAAiB,OACjB,gBAAiB,OACjB,mBAAoB,UACpB,qBAAsB,YACtB,yBAA0B,uBAC1B,oBAAqB,yBACrB,oBAAqB,iBACrB,yBAA0B,0BAC1B,kBAAmB,SACnB,WAAY,qBACZ,iBAAkB,kBAClB,kBAAmB,mBACnB,oBAAqB,qBACrB,wBAAyB,oBACzB,oBAAqB,eACrB,oBAAqB,OACrB,qBAAsB,gBACtB,yBAA0B,+BAC1B,uBAAwB,kBACxB,qBAAsB,yBACtB,mBAAoB,cACpB,oBAAqB,eACrB,mBAAoB,OACpB,mBAAoB,OACpB,mBAAoB,OACpB,WAAY,OACZ,YAAa,QACb,YAAa,QACb,WAAY,OACZ,WAAY,OACZ,WAAY,OACZ,eAAgB,kCAChB,gBAAiB,SACjB,qBAAsB,eACtB,oBAAqB,cACrB,gBAAiB,SACjB,gCAAiC,oBACjC,gCAAiC,2BACjC,2BAA4B,qBAC5B,iCAAkC,oBAClC,sCAAuC,0BACvC,oBAAqB,0BACrB,iCAAkC,oBAClC,gCAAiC,mBACjC,gCAAiC,mBACjC,mCAAoC,sBACpC,mCAAoC,sBACpC,8BAA+B,iBAC/B,iCAAkC,oBAClC,mCAAoC,uBACpC,6BAA8B,gBAC9B,2BAA4B,wBAC5B,0BAA2B,uBAC3B,mCAAoC,sBACpC,iCAAkC,oBAClC,0BAA2B,kBAC3B,4CAA6C,kCAC7C,qCAAsC,2BACtC,qCAAsC,2BACtC,kCAAmC,wBACnC,kCAAmC,wBACnC,qCAAsC,2BACtC,qCAAsC,2BACtC,wCAAyC,8BACzC,4DAA6D,kDAC7D,uCAAwC,6BACxC,kCAAmC,wBACnC,wCAAyC,8BACzC,uDAAwD,6CACxD,6CAA8C,mCAC9C,gEAAiE,sDACjE,0CAA2C,gCAC3C,mDAAoD,yCACpD,0CAA2C,gCAC3C,mCAAoC,yBACpC,yDAA0D,+CAC1D,qDAAsD,2CACtD,4CAA6C,kCAC7C,wEAAyE,8DACzE,qNAAsN,2MACtN,YAAa,QACb,aAAc,SACd,mBAAoB,yDACpB,uBAAwB,4DACxB,0BAA2B,kEAC3B,yBAA0B,sDAC1B,sBAAuB,+CACvB,oBAAqB,kDACrB,iBAAkB,uCAClB,oBAAqB,gDACrB,gBAAiB,aACjB,kBAAmB,SACnB,oBAAqB,WACrB,iBAAkB,iBAClB,uBAAwB,cACxB,eAAgB,eAChB,cAAe,YACf,eAAgB,QAChB,oBAAqB,yBACrB,kBAAmB,qBACnB,eAAgB,0BAChB,kBAAmB,sBACnB,kBAAmB,cACnB,kBAAmB,+BACnB,qBAAsB,eACtB,iBAAkB,+BAClB,sBAAuB,yBACvB,kBAAmB,6CACnB,mBAAoB,kEACpB,mBAAoB,uBACpB,eAAgB,eAChB,iBAAkB,kBAClB,kBAAmB,kCACnB,mBAAoB,qDACpB,kBAAmB,2BACnB,gBAAiB,wBACjB,iBAAkB,kCAClB,sBAAuB,mDACvB,UAAW,MACX,0BAA2B,2BAC3B,mBAAoB,UACpB,wBAAyB,eACzB,iBAAkB,QAClB,mBAAoB,UACpB,eAAgB,QAChB,qBAAsB,aACtB,oBAAqB,aACrB,iBAAkB,cAClB,aAAc,gBACd,uBAAwB,2BACxB,uBAAwB,2BACxB,iBAAkB,OAClB,oBAAqB,UACrB,kBAAmB,aACnB,gBAAiB,MACjB,uBAAwB,mBACxB,wBAAyB,kCACzB,sBAAuB,oBACvB,yBAA0B,8BAC1B,yBAA0B,8BAC1B,mBAAoB,sBACpB,kCAAmC,8GACnC,iCAAkC,qEAClC,4BAA6B,+FAC7B,6BAA8B,iEAC9B,iCAAkC,gFAClC,0BAA2B,yCAC3B,qBAAsB,qBACtB,gBAAiB,oBACjB,kBAAmB,mBACnB,yBAA0B,WAC1B,cAAe,mBACf,eAAgB,oBAChB,eAAgB,oBAChB,cAAe,mBACf,YAAa,aACb,WAAY,YACZ,YAAa,SACb,oBAAqB,kEACrB,4BAA6B,oDAC7B,mBAAoB,iEACpB,mBAAoB,uBACpB,oBAAqB,wBACrB,2BAA4B,yCAC5B,4BAA6B,uCAC7B,sBAAuB,gBACvB,uBAAwB,gBACxB,4BAA6B,2CAC7B,wBAAyB,0BACzB,0BAA2B,sFAC3B,gCAAiC,mHACjC,mBAAoB,WACpB,uBAAwB,8EACxB,sBAAuB,0EACvB,4BAA6B,8CAC7B,8BAA+B,iDAC/B,gCAAiC,oCACjC,wBAAyB,uDACzB,0BAA2B,+EAC3B,oBAAqB,0CACrB,kBAAmB,yCACnB,uBAAwB,8EACxB,wBAAyB,sDACzB,2BAA4B,+CAC5B,0BAA2B,oGAC3B,oBAAqB,gCACrB,wBAAyB,iEACzB,oBAAqB,8FACrB,gBAAiB,oEACjB,uBAAwB,qDACxB,oBAAqB,4BACrB,iCAAkC,iEAClC,mBAAoB,iDACpB,uBAAwB,iEACxB,sBAAuB,sGACvB,4BAA6B,6FAC7B,+BAAgC,gEAChC,gBAAiB,OACjB,kBAAmB,SACnB,eAAgB,MAChB,gBAAiB,SACjB,yBAA0B,iDAC1B,0BAA2B,yEAC3B,0BAA2B,4LAC3B,sBAAuB,mFACvB,wBAAyB,yBACzB,qBAAsB,8EACtB,uBAAwB,0BACxB,2BAA4B,6DAC5B,2BAA4B,yCAC5B,0BAA2B,sDAC3B,0BAA2B,2CAC3B,oBAAqB,6DACrB,oBAAqB,eACrB,uBAAwB,uFACxB,uBAAwB,eACxB,yBAA0B,qCAC1B,uBAAwB,uCACxB,sBAAuB,mDACvB,4BAA6B,uDAC7B,yBAA0B,qEAC1B,2BAA4B,kBAC5B,sBAAuB,6FACvB,uBAAwB,6CACxB,+BAAgC,iFAChC,kBAAmB,qBACnB,uBAAwB,2FAC5B,EAEMC,GAAW,WAAW,qBAAuB,WAAW,mBAAqB,OAAO,OAAO,IAAI,GACrGA,GAAS,GAAQD,GCv0BjB,IAAME,GAAW,WAAW,qBAAuB,WAAW,mBAAqB,OAAO,OAAO,IAAI,GAGrG,SAASC,GAAWC,EAAM,CACtB,OAAOF,GAASE,CAAI,GAAK,IAC7B,CAEA,IAAMC,GAAc,mBAGb,SAASC,GAAmBC,EAAW,IAAK,CAC/C,IAAMC,EAAU,OAAOD,CAAQ,EAAE,MAAM,GAAG,EAAE,CAAC,EAC7C,OAAOE,GAAkB,SAASD,CAAO,GAAKA,IAAY,KAAiBA,EAAU,IACzF,CAMO,SAASE,GAAoBC,EAAY,CAAC,EAAG,CAChD,QAAWC,KAAOD,EAAW,CACzB,IAAME,EAAQ,OAAOD,CAAG,EAAE,YAAY,EAChCE,EAAQL,GAAkB,KAAML,GAASA,EAAK,YAAY,IAAMS,CAAK,EAC3E,GAAIC,EAAO,OAAOA,EAClB,IAAMC,EAAOF,EAAM,MAAM,GAAG,EAAE,CAAC,EACzBG,EAAUP,GAAkB,KAAML,GAASA,EAAK,YAAY,EAAE,MAAM,GAAG,EAAE,CAAC,IAAMW,CAAI,EAC1F,GAAIC,EAAS,OAAOA,CACxB,CACA,OAAO,IACX,CAOO,SAASC,GAAa,CAAE,SAAAV,EAAW,IAAK,OAAAW,EAAS,KAAM,UAAAP,EAAY,CAAC,CAAE,EAAI,CAAC,EAAG,CACjF,IAAMQ,EAAWb,GAAmBC,CAAQ,EAC5C,OAAIY,IAIAC,GAAab,CAAQ,EAAU,KAE/BW,GAAUT,GAAkB,SAASS,CAAM,EAAUA,EAClDR,GAAoBC,CAAS,GAAK,KAC7C,CAGA,SAASS,GAAab,EAAU,CAC5B,OAAOA,IAAa,KAAOA,IAAa,aAC5C,CAMO,SAASc,GAAWjB,EAAMG,EAAW,IAAK,CAC7C,IAAMe,EAAUhB,GAAmBC,CAAQ,EAErCgB,GADOD,EAAU,OAAOf,CAAQ,EAAE,MAAMe,EAAQ,OAAS,CAAC,EAAI,OAAOf,CAAQ,GACjE,QAAQ,OAAQ,EAAE,EACpC,OAAOH,IAAS,KAAiB,IAAImB,CAAI,GAAK,IAAInB,CAAI,IAAImB,CAAI,EAClE,CAGO,SAASC,GAAepB,EAAM,CACjC,GAAI,CACA,aAAa,QAAQC,GAAaD,CAAI,CAC1C,MAAY,CAEZ,CACJ,CAEO,SAASqB,IAAe,CAC3B,GAAI,CACA,OAAO,aAAa,QAAQpB,EAAW,CAC3C,MAAY,CACR,OAAO,IACX,CACJ,CAOA,IAAIqB,GAAiB,KACd,SAASC,IAAgB,CAC5B,GAAID,GAAgB,OAAOA,GAI3B,IAAME,EAAI,OAAO,OAAW,IAAc,KAAO,OACjD,MAAI,CAACA,GAAK,CAACA,EAAE,SAAiB,MAC9BF,GAAiBT,GAAa,CAC1B,SAAUW,EAAE,SAAS,UAAY,IACjC,OAAQH,GAAa,EACrB,UAAWG,EAAE,WAAW,WAAa,CAAC,CAC1C,CAAC,EACMF,GACX,CAWO,SAASG,GAAUzB,EAAOuB,GAAc,EAAG,CAC9C,OAAOG,GAAY1B,CAAI,GAAG,MAAQ,MAAQ,MAAQ,KACtD,CAEO,SAAS2B,GAAM3B,EAAOuB,GAAc,EAAG,CAC1C,OAAOE,GAAUzB,CAAI,IAAM,KAC/B,CAOO,SAAS4B,GAAU5B,EAAOuB,GAAc,EAAG,CAC9C,OAAOI,GAAM3B,CAAI,EAAI,GAAK,CAC9B,CAmBA,IAAM6B,GAAc,qCAEb,SAASC,IAA4B,CACxC,GAAI,CACA,OAAO,aAAa,QAAQD,EAAW,IAAM,GACjD,MAAY,CACR,MAAO,EACX,CACJ,CAEO,SAASE,IAA0B,CACtC,GAAI,CACA,aAAa,QAAQF,GAAa,GAAG,CACzC,MAAY,CAEZ,CACJ,CAOO,SAASG,GAAgB,CAAE,SAAAC,EAAW,IAAK,UAAAC,EAAY,CAAC,EAAG,OAAAC,EAAS,IAAK,EAAI,CAAC,EAAG,CACpF,IAAMC,EAAQC,GAAmBJ,CAAQ,GAAK,KAIxCK,EAAaC,GAAkB,SAASJ,CAAM,GAAKA,GAAWK,GAAoBN,CAAS,EACjG,OAAOI,GAAaA,IAAcF,EAAQE,EAAY,IAC1D,CAuCO,SAASG,EAAEC,EAAKC,EAAMC,EAASC,GAAc,EAAG,CACnD,IAAMC,EACFC,GAAWH,CAAM,IAAIF,CAAG,GAIxBM,GAAqBJ,CAAM,IAAIF,CAAG,GAClCK,GAAW,IAAc,IAAIL,CAAG,GAChCA,EACJ,OAAKC,EACE,OAAOG,CAAQ,EAAE,QAAQ,aAAc,CAACG,EAAOC,IAClD,OAAO,UAAU,eAAe,KAAKP,EAAMO,CAAI,EAAI,OAAOP,EAAKO,CAAI,CAAC,EAAID,CAC5E,EAHkBH,CAItB,CCxPO,IAAMK,EAAkB,OAAO,OAAO,CACzC,eAAgB,iBAChB,eAAgB,iBAChB,WAAY,aACZ,WAAY,aACZ,gBAAiB,kBACjB,iBAAkB,mBAClB,QAAS,UACT,YAAa,cACb,aAAc,eACd,sBAAuB,wBACvB,cAAe,gBACf,eAAgB,iBAChB,eAAgB,iBAChB,iBAAkB,mBAClB,aAAc,eACd,kBAAmB,oBACnB,YAAa,cACb,OAAQ,SACR,kBAAmB,mBACvB,CAAC,EAIYC,GAAe,CAAE,UAAW,wBAAyB,KAAM,2BAA4B,KAAM,sBAAuB,QAAS,kBAAmB,EAChJC,GAAgB,CAAE,UAAWC,EAAE,oBAAoB,EAAG,KAAMA,EAAE,eAAe,EAAG,KAAMA,EAAE,eAAe,EAAG,QAASA,EAAE,kBAAkB,CAAE,EAEzIC,GAAoB,CAC7B,CAAE,IAAK,YAAa,KAAMD,EAAE,oBAAoB,EAAG,KAAMA,EAAE,wBAAwB,EAAG,IAAK,uBAAwB,EACnH,CAAE,IAAK,OAAQ,KAAMA,EAAE,eAAe,EAAG,KAAMA,EAAE,mBAAmB,EAAG,IAAK,0BAA2B,EACvG,CAAE,IAAK,OAAQ,KAAMA,EAAE,eAAe,EAAG,KAAMA,EAAE,mBAAmB,EAAG,IAAK,qBAAsB,EAClG,CAAE,IAAK,YAAa,KAAMA,EAAE,oBAAoB,EAAG,KAAMA,EAAE,wBAAwB,EAAG,IAAK,kBAAmB,CAClH,EAIO,SAASE,GAAiBC,EAAI,CACjC,IAAMC,EAAM,OAAOD,GAAM,EAAE,EAAE,QAAQ,cAAe,EAAE,EACtD,OAAOH,EAAE,mBAAmB,EAAI,KAAOI,EAAI,MAAM,EAAG,CAAC,GAAK,QAAQ,YAAY,CAClF,CAGO,SAASC,GAAaC,EAAO,CAChC,IAAMC,EAAQ,OAAOD,GAAS,EAAE,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,EAC9DE,EAAID,EAAM,CAAC,IAAI,CAAC,GAAK,GACrBE,EAAIF,EAAM,CAAC,IAAI,CAAC,GAAKA,EAAM,CAAC,IAAI,CAAC,GAAK,GAC5C,OAAQC,EAAIC,GAAG,YAAY,GAAK,UACpC,CAkBO,SAASC,GAAUC,EAAQ,CAC9B,OAAQA,EAAQ,CACZ,IAAK,YACL,IAAK,WACD,OAAOC,EAAE,UAAU,EACvB,IAAK,YACD,OAAOA,EAAE,gBAAgB,EAC7B,IAAK,aACL,IAAK,MACD,OAAOA,EAAE,iBAAiB,EAC9B,IAAK,eACD,OAAOA,EAAE,mBAAmB,EAChC,IAAK,oBACD,OAAOA,EAAE,uBAAuB,EACpC,QACI,OAAOA,EAAE,mBAAmB,CACpC,CACJ,CAEA,SAASC,IAAa,CAClB,MAAO,CACH,UAAW,GACX,WAAY,GACZ,WAAY,GACZ,YAAa,GACb,cAAe,GACf,eAAgB,GAChB,iBAAkB,GAClB,WAAY,GACZ,UAAW,GACX,iBAAkB,GAClB,cAAe,EACf,aAAc,EACd,aAAc,EAClB,CACJ,CAEO,SAASC,GAAmBC,EAAO,CAAC,EAAG,CAC1C,IAAMC,EAAKD,EAAK,KAAO,OAAO,OAAW,KAAe,OAAO,WAAa,OAAO,WAAW,EAAI,OAAO,KAAK,IAAI,CAAC,EAAI,KAAK,OAAO,GACnI,MAAO,CACH,GAAAC,EACA,UAAWD,EAAK,WAAaE,GAAiBD,CAAE,EAChD,cAAe,GACf,UAAWD,EAAK,WAAa,KAAK,IAAI,EACtC,KAAMA,EAAK,MAAQ,QACnB,OAAQA,EAAK,QAAU,MACvB,eAAgB,GAChB,iBAAkB,GAClB,IAAK,CAAE,eAAgB,GAAO,gBAAiB,GAAO,cAAe,GAAO,WAAY,EAAM,EAC9F,SAAU,CAAC,EACX,YAAa,EACb,qBAAsB,CAAC,EACvB,aAAc,KACd,MAAOF,GAAW,CACtB,CACJ,CAEO,SAASK,IAAqB,CACjC,MAAO,CAAE,SAAU,CAAC,EAAG,MAAO,CAAC,EAAG,gBAAiB,IAAK,CAC5D,CAIA,SAASC,GAAaC,EAAOJ,EAAIK,EAAO,CACpC,IAAMC,EAAUF,EAAM,SAASJ,CAAE,EACjC,OAAKM,EACE,CACH,GAAGF,EACH,SAAU,CAAE,GAAGA,EAAM,SAAU,CAACJ,CAAE,EAAG,CAAE,GAAGM,EAAS,GAAGD,CAAM,CAAE,CAClE,EAJqBD,CAKzB,CAEO,SAASG,GAAgBH,EAAOI,EAAQ,CAC3C,IAAMC,EAAIC,EACV,OAAQF,EAAO,KAAM,CACjB,KAAKC,EAAE,eAAgB,CACnB,IAAME,EAAQH,EAAO,OAASV,GAAmBU,CAAM,EACvD,OAAIJ,EAAM,SAASO,EAAM,EAAE,EAAUP,EAC9B,CACH,SAAU,CAAE,GAAGA,EAAM,SAAU,CAACO,EAAM,EAAE,EAAGA,CAAM,EACjD,MAAO,CAAC,GAAGP,EAAM,MAAOO,EAAM,EAAE,EAChC,gBAAiBH,EAAO,WAAa,GAAQJ,EAAM,gBAAkBO,EAAM,EAC/E,CACJ,CAEA,KAAKF,EAAE,eAAgB,CACnB,GAAM,CAAE,GAAAT,CAAG,EAAIQ,EACf,GAAI,CAACJ,EAAM,SAASJ,CAAE,EAAG,OAAOI,EAChC,IAAMQ,EAAW,CAAE,GAAGR,EAAM,QAAS,EACrC,OAAOQ,EAASZ,CAAE,EAClB,IAAMa,EAAQT,EAAM,MAAM,OAAQU,GAAMA,IAAMd,CAAE,EAC5Ce,EAAkBX,EAAM,gBAC5B,GAAIW,IAAoBf,EAAI,CAExB,IAAMgB,EAAaZ,EAAM,MAAM,QAAQJ,CAAE,EACzCe,EAAkBF,EAAM,KAAK,IAAI,EAAGG,EAAa,CAAC,CAAC,GAAKH,EAAM,CAAC,GAAK,IACxE,CACA,MAAO,CAAE,SAAAD,EAAU,MAAAC,EAAO,gBAAAE,CAAgB,CAC9C,CAEA,KAAKN,EAAE,WAEH,MADI,CAACL,EAAM,SAASI,EAAO,EAAE,GACzBJ,EAAM,kBAAoBI,EAAO,GAAWJ,EACzC,CAAE,GAAGA,EAAO,gBAAiBI,EAAO,EAAG,EAGlD,KAAKC,EAAE,WAAY,CACf,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,GAAWA,EAAQ,SAAWE,EAAO,OAAQ,OAAOJ,EAUzD,IAAMC,EAAS,EAHGG,EAAO,SAAW,aAC7BA,EAAO,SAAW,YAClBA,EAAO,SAAW,iBACIF,EAAQ,eAAiB,KAChD,CAAE,OAAQE,EAAO,OAAQ,aAAc,IAAK,EAC5C,CAAE,OAAQA,EAAO,MAAO,EAC9B,OAAOL,GAAaC,EAAOI,EAAO,GAAIH,CAAK,CAC/C,CAEA,KAAKI,EAAE,gBACH,OAAON,GAAaC,EAAOI,EAAO,GAAI,CAAE,eAAgBA,EAAO,WAAY,CAAC,EAEhF,KAAKC,EAAE,iBACH,OAAON,GAAaC,EAAOI,EAAO,GAAI,CAAE,iBAAkBA,EAAO,IAAK,CAAC,EAE3E,KAAKC,EAAE,QAAS,CACZ,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,OAAKF,EACEH,GAAaC,EAAOI,EAAO,GAAI,CAAE,IAAK,CAAE,GAAGF,EAAQ,IAAK,GAAGE,EAAO,GAAI,CAAE,CAAC,EAD3DJ,CAEzB,CAEA,KAAKK,EAAE,YAAa,CAChB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,OAAKF,EACEH,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAU,CAAC,GAAGF,EAAQ,SAAUE,EAAO,OAAO,CAAE,CAAC,EADpEJ,CAEzB,CAEA,KAAKK,EAAE,aAAc,CACjB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMa,EAAO,OAAOT,EAAO,SAAY,WACjCA,EAAO,QAAQF,EAAQ,QAAQ,EAC/BE,EAAO,SACb,OAAOL,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAU,MAAM,QAAQS,CAAI,EAAIA,EAAO,CAAC,CAAE,CAAC,CACvF,CAEA,KAAKR,EAAE,sBAAuB,CAC1B,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAIc,EAAU,GACRC,EAAWb,EAAQ,SAAS,IAAKc,GAC/B,OAAOA,EAAE,GAAG,IAAM,OAAOZ,EAAO,GAAG,GAAKY,EAAE,SAAWZ,EAAO,QAC5DU,EAAU,GACH,CAAE,GAAGE,EAAG,OAAQZ,EAAO,MAAO,GAElCY,CACV,EACD,OAAOF,EAAUf,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAAW,CAAS,CAAC,EAAIf,CACpE,CAEA,KAAKK,EAAE,cAAe,CAIlB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMiB,EAAOb,EAAO,WAAa,KAAO,OAAOA,EAAO,SAAS,EAAI,KAC7Dc,EAAQd,EAAO,KAAO,KAAO,OAAOA,EAAO,GAAG,EAAI,KAClDe,EAAWf,EAAO,QAAU,KAAO,OAAOA,EAAO,MAAM,EAAI,KAC7DU,EAAU,GACRC,EAAWb,EAAQ,SAAS,IAAKc,GAAM,CAIzC,GAAI,EAHSC,GAAQ,MAAQ,OAAOD,EAAE,EAAE,IAAMC,GACtCC,GAAS,MAAQ,OAAOF,EAAE,GAAG,IAAME,GACnCC,GAAY,MAAQH,EAAE,QAAU,MAAQ,OAAOA,EAAE,MAAM,IAAMG,GAC3D,OAAOH,EACjBF,EAAU,GACV,IAAMb,EAAQ,OAAOG,EAAO,OAAU,WAAaA,EAAO,MAAMY,CAAC,EAAIZ,EAAO,MAC5E,MAAO,CAAE,GAAGY,EAAG,GAAGf,CAAM,CAC5B,CAAC,EACD,OAAOa,EAAUf,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAAW,CAAS,CAAC,EAAIf,CACpE,CAEA,KAAKK,EAAE,eAAgB,CACnB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMe,EAAWb,EAAQ,SAAS,OAAQc,GAAM,OAAOA,EAAE,GAAG,IAAM,OAAOZ,EAAO,GAAG,CAAC,EACpF,OAAIW,EAAS,SAAWb,EAAQ,SAAS,OAAeF,EACjDD,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAAW,CAAS,CAAC,CACtD,CAEA,KAAKV,EAAE,eAAgB,CACnB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAIc,EAAU,GACRC,EAAWb,EAAQ,SAAS,IAAKc,GAC/B,OAAOA,EAAE,EAAE,IAAM,OAAOZ,EAAO,SAAS,GAAK,CAACY,EAAE,SAChDF,EAAU,GACH,CAAE,GAAGE,EAAG,QAAS,GAAM,QAAS,GAAI,UAAW,MAAU,GAE7DA,CACV,EACD,OAAOF,EAAUf,GAAaC,EAAOI,EAAO,GAAI,CAAE,SAAAW,CAAS,CAAC,EAAIf,CACpE,CAEA,KAAKK,EAAE,iBAAkB,CACrB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,OAAKF,EACEH,GAAaC,EAAOI,EAAO,GAAI,CAAE,YAAaF,EAAQ,YAAc,CAAE,CAAC,EADzDF,CAEzB,CAEA,KAAKK,EAAE,aAAc,CACjB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,MAAI,CAACF,GAAWA,EAAQ,cAAgB,EAAUF,EAC3CD,GAAaC,EAAOI,EAAO,GAAI,CAAE,YAAa,CAAE,CAAC,CAC5D,CAEA,KAAKC,EAAE,kBAAmB,CACtB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMa,EAAO,OAAOT,EAAO,SAAY,WACjCA,EAAO,QAAQF,EAAQ,oBAAoB,EAC3CE,EAAO,MACb,OAAOL,GAAaC,EAAOI,EAAO,GAAI,CAAE,qBAAsB,MAAM,QAAQS,CAAI,EAAIA,EAAO,CAAC,CAAE,CAAC,CACnG,CAEA,KAAKR,EAAE,YAAa,CAChB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,OAAKF,EACEH,GAAaC,EAAOI,EAAO,GAAI,CAAE,MAAO,CAAE,GAAGF,EAAQ,MAAO,GAAGE,EAAO,KAAM,CAAE,CAAC,EADjEJ,CAEzB,CAEA,KAAKK,EAAE,OAAQ,CACX,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,GAAI,CAACF,EAAS,OAAOF,EACrB,IAAMoB,EAAQ,OAAOhB,EAAO,OAAS,EAAE,EAAE,KAAK,GAAKF,EAAQ,UAC3D,OAAOH,GAAaC,EAAOI,EAAO,GAAI,CAAE,UAAWgB,EAAO,cAAe,EAAK,CAAC,CACnF,CAEA,KAAKf,EAAE,kBAAmB,CACtB,IAAMH,EAAUF,EAAM,SAASI,EAAO,EAAE,EACxC,MAAI,CAACF,GAAWA,EAAQ,eAAiBE,EAAO,SAAiBJ,EAC1DD,GAAaC,EAAOI,EAAO,GAAI,CAAE,aAAcA,EAAO,QAAS,CAAC,CAC3E,CAEA,QACI,OAAOJ,CACf,CACJ,CAIO,SAASqB,GAAgBnB,EAASS,EAAiB,CAKtD,IAAMW,EAAc,CAAC,GAAGpB,EAAQ,QAAQ,EAAE,QAAQ,EAAE,KAC/Cc,GAAM,CAACA,EAAE,SAAWA,EAAE,OAAS,WACvB,OAAOA,EAAE,SAAY,UAAYA,EAAE,QAAQ,KAAK,GAAMA,EAAE,MACrE,EACMO,EAAIrB,EAAQ,OACZsB,EAAOD,IAAM,aAAeA,IAAM,WAGlCE,EAAYF,IAAM,cAAgBA,IAAM,aAAeA,IAAM,OAASA,IAAM,eAG9EG,EAAKC,EACLF,GACAC,EAAM,2BACNC,EAAYrC,GAAUiC,CAAC,GAChBC,GACPE,EAAMxB,EAAQ,aAAgB0B,GAAa1B,EAAQ,YAAY,GAAK,mBAAsB,wBAC1FyB,EAAYzB,EAAQ,aAAgB2B,GAAc3B,EAAQ,YAAY,GAAKV,EAAE,iBAAiB,EAAKA,EAAE,UAAU,IAE/GkC,EAAM,sBACNC,EAAYrC,GAAUiC,CAAC,GAE3B,IAAMO,EAAUR,EAAeA,EAAY,MAAQ,0BAAqBA,EAAY,QAAWK,EAC/F,MAAO,CACH,GAAIzB,EAAQ,GACZ,KAAMA,EAAQ,UACd,KAAM6B,GAAa7B,EAAQ,SAAS,EACpC,IAAAwB,EACA,UAAAC,EACA,OAAQzB,EAAQ,OAChB,aAAcA,EAAQ,aACtB,QAAA4B,EACA,OAAQ5B,EAAQ,YAAc,EAAKA,EAAQ,YAAc,GAAK,MAAQ,OAAOA,EAAQ,WAAW,EAAK,KACrG,SAAU,CAAC,CAACA,EAAQ,IAAI,WACxB,OAAQA,EAAQ,KAAOS,EACvB,SAAUT,EAAQ,KAAOS,CAC7B,CACJ,CAEO,SAASqB,GAAiBhC,EAAO,CACpC,OAAOA,EAAM,MACR,IAAKJ,GAAOI,EAAM,SAASJ,CAAE,CAAC,EAC9B,OAAO,OAAO,EACd,IAAK2B,GAAMF,GAAgBE,EAAGvB,EAAM,eAAe,CAAC,CAC7D,CCjUO,IAAMiC,EAAe,OAAO,OAAO,CAGtC,YAAa,EACb,YAAa,EACb,eAAgB,GAChB,YAAa,GACb,aAAc,GACd,kBAAmB,GAGnB,WAAY,EAQZ,eAAgB,IAGhB,UAAW,WACX,eAAgB,IAChB,eAAgB,GAChB,cAAe,IACf,cAAe,GAef,eAAgB,KAChB,mBAAoB,KAcpB,qBAAsB,IAEtB,iBAAkB,GAUlB,cAAe,EACnB,CAAC,EAWYC,GAAe,OAAO,OAAO,CACtC,MAAO,QACP,KAAM,OACN,MAAO,OACX,CAAC,EAGYC,GAAa,OAAO,OAAO,CAAE,MAAO,SAAU,OAAQ,SAAU,CAAC,EAEjEC,GAAa,OAAO,OAAO,CACpC,OAAQ,SACR,IAAK,MACL,OAAQ,SACR,OAAQ,QACZ,CAAC,EAEKC,GAAM,IAAI,YAEVC,GAAN,cAA+B,KAAM,CACjC,YAAYC,EAASC,EAAO,eAAgB,CACxC,MAAMD,CAAO,EACb,KAAK,KAAO,mBACZ,KAAK,KAAOC,CAChB,CACJ,EACMC,GAAO,CAACC,EAAKF,IAAS,CAAE,MAAM,IAAIF,GAAiBI,EAAKF,CAAI,CAAG,EAM9D,SAASG,GAAMC,EAAO,CACzB,IAAMC,EAAOD,aAAiB,WAAaA,EAAQ,IAAI,WAAWA,CAAK,EACnEE,EAAM,GACV,QAASC,EAAI,EAAGA,EAAIF,EAAK,OAAQE,IAAKD,GAAOD,EAAKE,CAAC,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,EACjF,OAAOD,CACX,CAEO,SAASE,GAAQC,EAAK,EACrB,OAAOA,GAAQ,UAAYA,EAAI,OAAS,IAAM,GAAK,CAAC,eAAe,KAAKA,CAAG,IAC3ER,GAAK,mBAAoB,SAAS,EAEtC,IAAMK,EAAM,IAAI,WAAWG,EAAI,OAAS,CAAC,EACzC,QAASF,EAAI,EAAGA,EAAID,EAAI,OAAQC,IAAKD,EAAIC,CAAC,EAAI,SAASE,EAAI,OAAOF,EAAI,EAAG,CAAC,EAAG,EAAE,EAC/E,OAAOD,CACX,CAEO,SAASI,GAAMN,EAAO,CACzB,IAAMC,EAAOD,aAAiB,WAAaA,EAAQ,IAAI,WAAWA,CAAK,EACnEO,EAAS,GACb,QAASJ,EAAI,EAAGA,EAAIF,EAAK,OAAQE,IAAKI,GAAU,OAAO,aAAaN,EAAKE,CAAC,CAAC,EAC3E,OAAO,KAAKI,CAAM,CACtB,CAEO,SAASC,GAAQC,EAAK,CAAE,IAAAC,EAAMrB,EAAa,cAAe,EAAI,CAAC,EAAG,CACjE,OAAOoB,GAAQ,UAAUZ,GAAK,sBAAuB,SAAS,EAE9DY,EAAI,OAAS,KAAK,KAAMC,EAAM,EAAK,CAAC,EAAI,GAAGb,GAAK,mCAAoC,SAAS,EACjG,IAAIU,EACJ,GAAI,CACAA,EAAS,KAAKE,CAAG,CACrB,MAAY,CACRZ,GAAK,mBAAoB,SAAS,CACtC,CACA,IAAMK,EAAM,IAAI,WAAWK,EAAO,MAAM,EACxC,QAAS,EAAI,EAAG,EAAIA,EAAO,OAAQ,IAAKL,EAAI,CAAC,EAAIK,EAAO,WAAW,CAAC,EACpE,OAAOL,CACX,CAEO,SAASS,GAAYC,EAAG,CAC3B,OAAO,OAAO,gBAAgB,IAAI,WAAWA,CAAC,CAAC,CACnD,CAGO,SAASC,IAAa,CACzB,OAAOd,GAAMY,GAAYtB,EAAa,cAAc,CAAC,CACzD,CAcA,SAASyB,GAAGC,KAAUC,EAAO,CACzB,IAAMC,EAAS,CAACxB,GAAI,OAAOsB,EAAQ,IAAI,CAAC,EACpCG,EAAQD,EAAO,CAAC,EAAE,OACtB,QAAWE,KAAQH,EAAO,CACtB,IAAMhB,EAAQmB,aAAgB,WAAaA,EACrC,OAAOA,GAAS,SAAW1B,GAAI,OAAO0B,CAAI,EAC1CtB,GAAK,gCAAiC,aAAa,EACnDuB,EAAS,IAAI,WAAW,CAAC,EAC/B,IAAI,SAASA,EAAO,MAAM,EAAE,UAAU,EAAGpB,EAAM,MAAM,EACrDiB,EAAO,KAAKG,EAAQpB,CAAK,EACzBkB,GAAS,EAAIlB,EAAM,MACvB,CACA,IAAME,EAAM,IAAI,WAAWgB,CAAK,EAC5BG,EAAI,EACR,QAAWC,KAAKL,EAAUf,EAAI,IAAIoB,EAAGD,CAAC,EAAGA,GAAKC,EAAE,OAChD,OAAOpB,CACX,CAEA,SAASqB,GAAIX,EAAG,EACR,CAAC,OAAO,UAAUA,CAAC,GAAKA,EAAI,GAAKA,EAAIvB,EAAa,YAAWQ,GAAK,4BAA6B,SAAS,EAC5G,IAAM2B,EAAI,IAAI,WAAW,CAAC,EAC1B,WAAI,SAASA,EAAE,MAAM,EAAE,UAAU,EAAGZ,CAAC,EAC9BY,CACX,CAGA,SAASC,GAAWC,EAAGF,EAAG,CACtB,GAAI,EAAEE,aAAa,aAAe,EAAEF,aAAa,aAAeE,EAAE,SAAWF,EAAE,OAAQ,MAAO,GAC9F,IAAIG,EAAO,EACX,QAASxB,EAAI,EAAGA,EAAIuB,EAAE,OAAQvB,IAAKwB,GAAQD,EAAEvB,CAAC,EAAIqB,EAAErB,CAAC,EACrD,OAAOwB,IAAS,CACpB,CAMO,SAASC,GAAcC,EAAS,CACnC,OAAI,OAAOA,GAAY,UAAYA,EAAQ,SAAWxC,EAAa,eAAiB,GAAK,CAAC,cAAc,KAAKwC,CAAO,IAChHhC,GAAK,qBAAsB,cAAc,EAEtCgC,CACX,CAEO,SAASC,GAAkBC,EAAI,CAClC,OAAI,OAAOA,GAAO,UAAYA,EAAG,SAAW1C,EAAa,kBAAoB,GAAK,CAAC,cAAc,KAAK0C,CAAE,IACpGlC,GAAK,+BAAgC,iBAAiB,EAEnDkC,CACX,CAEO,SAASC,GAAYC,EAAO,CAC/B,OAAI,CAAC,OAAO,UAAUA,CAAK,GAAKA,EAAQ,GAAKA,EAAQ5C,EAAa,YAC9DQ,GAAK,qBAAsB,WAAW,EAEnCoC,CACX,CAEO,SAASC,GAAWC,EAAM,CAC7B,IAAMC,EAAQ,OAAOD,GAAS,SAAWA,EAAO,GAChD,OAAI1C,GAAI,OAAO2C,CAAK,EAAE,OAAS/C,EAAa,gBAAgBQ,GAAK,sBAAuB,UAAU,EAC3FuC,CACX,CAUO,SAASC,GAAsBC,EAAK,CAClC,MAAM,QAAQA,CAAG,GAAGzC,GAAK,8BAA+B,aAAa,EACtEyC,EAAI,OAASjD,EAAa,aAAaQ,GAAK,qCAAsC,aAAa,EAC/FyC,EAAI,OAASjD,EAAa,aAAaQ,GAAK,yBAAyBR,EAAa,WAAW,WAAY,kBAAkB,EAC/H,IAAMkD,EAAO,IAAI,IACjB,QAAWR,KAAMO,EACbR,GAAkBC,CAAE,EAChBQ,EAAK,IAAIR,CAAE,GAAGlC,GAAK,+BAAgC,kBAAkB,EACzE0C,EAAK,IAAIR,CAAE,EAEf,MAAO,CAAC,GAAGO,CAAG,EAAE,KAAK,CACzB,CAaA,eAAsBE,GAAsBC,EAAQ,CAChD,IAAMC,EAAU,MAAMD,EAAO,YACzB,CAAE,KAAM,QAAS,WAAY,OAAQ,EACrC,GACA,CAAC,OAAQ,QAAQ,CACrB,EACME,EAAO,IAAI,WAAW,MAAMF,EAAO,UAAU,OAAQC,EAAQ,SAAS,CAAC,EACvEE,EAAc,MAAMC,GAAgBJ,EAAQE,CAAI,EACtD,MAAO,CAAE,QAAAD,EAAS,KAAAC,EAAM,YAAAC,CAAY,CACxC,CAGA,eAAsBC,GAAgBJ,EAAQE,EAAM,CAChD,OAAI,EAAEA,aAAgB,aAAeA,EAAK,OAAStD,EAAa,gBAAkBsD,EAAK,OAAStD,EAAa,iBACzGQ,GAAK,2BAA4B,UAAU,EAExCE,GAAM,IAAI,WAAW,MAAM0C,EAAO,OAAO,UAAWE,CAAI,CAAC,CAAC,CACrE,CAUA,eAAsBG,GAAqBL,EAAQE,EAAM,CACrD,IAAMC,EAAc,MAAMC,GAAgBJ,EAAQE,CAAI,EAClDI,EACJ,GAAI,CACAA,EAAY,MAAMN,EAAO,UAAU,OAAQE,EAAM,CAAE,KAAM,QAAS,WAAY,OAAQ,EAAG,GAAO,CAAC,QAAQ,CAAC,CAC9G,MAAY,CACR9C,GAAK,sDAAuD,UAAU,CAC1E,CACA,MAAO,CAAE,UAAAkD,EAAW,YAAAH,CAAY,CACpC,CAaA,eAAsBI,GAAgBP,EAAQ,CAAE,QAAAZ,EAAS,MAAAI,EAAO,YAAAW,EAAa,MAAAK,CAAM,EAAG,CAClFrB,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACjBH,GAAkBc,CAAW,GACzB,EAAEK,aAAiB,aAAeA,EAAM,SAAW5D,EAAa,cAChEQ,GAAK,yBAA0B,WAAW,EAE9C,IAAMqD,EAAUpC,GAAG,4BAA6BV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAG7B,GAAQwC,CAAW,EAAGK,CAAK,EACzG,OAAO,IAAI,WAAW,MAAMR,EAAO,OAAO,UAAWS,CAAO,CAAC,CACjE,CAEA,eAAsBC,GAAiBV,EAAQW,EAAYC,EAAQ,CAC/D,GAAI,EAAED,aAAsB,aAAeA,EAAW,SAAW/D,EAAa,aAAc,MAAO,GACnG,IAAIiE,EACJ,GAAI,CACAA,EAAW,MAAMN,GAAgBP,EAAQY,CAAM,CACnD,MAAY,CACR,MAAO,EACX,CACA,OAAO5B,GAAW2B,EAAYE,CAAQ,CAC1C,CAWA,eAAsBC,GAAgBd,EAAQ,CAAE,QAAAZ,EAAS,MAAAI,EAAO,cAAAuB,EAAe,OAAAC,EAASpE,EAAa,UAAW,EAAG,CAC/GuC,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACZ,MAAM,QAAQuB,CAAa,GAAG3D,GAAK,iCAAkC,mBAAmB,GACzF,CAAC,OAAO,UAAU4D,CAAM,GAAKA,EAAS,GAAKA,EAAS,KAAI5D,GAAK,2BAA4B,YAAY,EAEzGwC,GAAsBmB,EAAc,IAAKlC,GAAMA,GAAKA,EAAE,WAAW,CAAC,EAElE,IAAMoC,EAAU,CAAC,GAAGF,CAAa,EAAE,KAAK,CAAC9B,EAAGF,IAAOE,EAAE,YAAcF,EAAE,YAAc,GAAK,CAAE,EACpFR,EAAQ,CAAC,EACf,QAAWM,KAAKoC,GACR,EAAEpC,EAAE,iBAAiB,aAAeA,EAAE,MAAM,SAAWjC,EAAa,cACpEQ,GAAK,+CAAgD,WAAW,EAEpEmB,EAAM,KAAKZ,GAAQkB,EAAE,WAAW,EAAGA,EAAE,KAAK,EAG9C,IAAMqC,EAAM7C,GAAG,yBAA0BV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAG,GAAGjB,CAAK,EACzE4C,EAAO,IAAI,WAAW,MAAMnB,EAAO,OAAO,UAAW3B,GAAG,8BAA+BV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,CAAC,CAAC,CAAC,EAEvH4B,EAAM,KACV,GAAI,CACAA,EAAM,MAAMpB,EAAO,UAAU,MAAOkB,EAAK,OAAQ,GAAO,CAAC,YAAY,CAAC,EACtE,IAAMG,EAAO,MAAMrB,EAAO,WACtB,CAAE,KAAM,OAAQ,KAAM,UAAW,KAAAmB,EAAM,KAAMnE,GAAI,OAAO,wBAAwB,CAAE,EAClFoE,EAAK,EACT,EACME,EAAK,IAAI,SAASD,CAAI,EAGtBlD,EAAImD,EAAG,UAAU,CAAC,EAAI,GAAK,IAAMA,EAAG,UAAU,CAAC,IAAM,IAC3D,OAAO,OAAOnD,EAAI,IAAM6C,CAAM,EAAE,SAASA,EAAQ,GAAG,CACxD,QAAE,CACE,GAAI,CAAEE,EAAI,KAAK,CAAC,CAAG,MAAY,CAAyB,CAC5D,CACJ,CASO,IAAMK,GAAN,KAAuB,CAC1B,YAAY,CAAE,QAAAnC,EAAS,MAAAI,EAAO,gBAAAgC,EAAiB,mBAAAC,CAAmB,EAAG,CACjE,KAAK,QAAUtC,GAAcC,CAAO,EACpC,KAAK,MAAQG,GAAYC,CAAK,EAC9B,KAAK,gBAAkBH,GAAkBmC,CAAe,EACxD,KAAK,QAAU5B,GAAsB6B,CAAkB,EAClD,KAAK,QAAQ,SAAS,KAAK,eAAe,GAC3CrE,GAAK,4CAA6C,cAAc,EAEpE,KAAK,MAAQc,GAAYtB,EAAa,WAAW,EACjD,KAAK,YAAc,IAAI,IACvB,KAAK,OAAS,IAAI,IAClB,KAAK,SAAW,GAChB,KAAK,KAAO,IAChB,CAGA,MAAM,cAAcoD,EAAQ,CACxB,IAAMW,EAAa,MAAMJ,GAAgBP,EAAQ,CAC7C,QAAS,KAAK,QAAS,MAAO,KAAK,MACnC,YAAa,KAAK,gBAAiB,MAAO,KAAK,KACnD,CAAC,EACD,YAAK,YAAY,IAAI,KAAK,gBAAiBW,CAAU,EAC9CA,CACX,CAOA,iBAAiBR,EAAaQ,EAAY,CACtCtB,GAAkBc,CAAW,EACxB,KAAK,QAAQ,SAASA,CAAW,GAAG/C,GAAK,+BAAgC,cAAc,GACxF,EAAEuD,aAAsB,aAAeA,EAAW,SAAW/D,EAAa,eAC1EQ,GAAK,uBAAwB,gBAAgB,EAEjD,IAAMsE,EAAW,KAAK,YAAY,IAAIvB,CAAW,EACjD,OAAIuB,GACK1C,GAAW0C,EAAUf,CAAU,GAAGvD,GAAK,kCAAmC,oBAAoB,EAC5F,KAEX,KAAK,YAAY,IAAI+C,EAAaQ,CAAU,EACrC,GACX,CAEA,IAAI,qBAAsB,CACtB,OAAO,KAAK,QAAQ,MAAOrB,GAAO,KAAK,YAAY,IAAIA,CAAE,CAAC,CAC9D,CASA,QAAS,CACL,OAAK,KAAK,qBACNlC,GAAK,kDAAmD,kBAAkB,EAE9E,KAAK,SAAW,GAChB,KAAK,OAAO,IAAI,KAAK,gBAAiB,KAAK,KAAK,EACzC,KAAK,KAChB,CAGA,MAAM,aAAa4C,EAAQG,EAAaK,EAAO,CAC3CnB,GAAkBc,CAAW,EACxB,KAAK,QAAQ,SAASA,CAAW,GAAG/C,GAAK,2BAA4B,cAAc,EACxF,IAAMuD,EAAa,KAAK,YAAY,IAAIR,CAAW,EACnD,OAAKQ,GAAYvD,GAAK,uCAAwC,2BAA2B,EAC9E,MAAMsD,GAAiBV,EAAQW,EAAY,CAClD,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,YAAAR,EAAa,MAAAK,CAC3D,CAAC,GACQpD,GAAK,+CAAgD,qBAAqB,EACnF,KAAK,OAAO,IAAI+C,EAAaK,CAAK,EAC3B,EACX,CAEA,IAAI,iBAAkB,CAClB,OAAO,KAAK,QAAQ,MAAOlB,GAAO,KAAK,OAAO,IAAIA,CAAE,CAAC,CACzD,CAGA,MAAM,OAAOU,EAAQ,CACjB,OAAK,KAAK,iBAAiB5C,GAAK,gCAAiC,mBAAmB,EACpF,KAAK,KAAO,MAAM0D,GAAgBd,EAAQ,CACtC,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,cAAe,KAAK,QAAQ,IAAKV,IAAQ,CAAE,YAAaA,EAAI,MAAO,KAAK,OAAO,IAAIA,CAAE,CAAE,EAAE,CAC7F,CAAC,EACM,KAAK,IAChB,CAGA,SAAU,CACN,GAAI,CAAE,KAAK,MAAM,KAAK,CAAC,CAAG,MAAY,CAAC,CACvC,QAAWnB,KAAK,KAAK,OAAO,OAAO,EAAK,GAAI,CAAEA,EAAE,KAAK,CAAC,CAAG,MAAY,CAAC,CACtE,KAAK,OAAO,MAAM,EAClB,KAAK,YAAY,MAAM,CAC3B,CACJ,EAeO,SAASwD,GAAgB,CAAE,QAAAvC,EAAS,MAAAI,EAAO,GAAAoC,EAAI,UAAAC,EAAW,KAAAnC,EAAO,EAAG,EAAG,CAC1EP,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACZ,OAAO,OAAOzC,EAAU,EAAE,SAAS6E,CAAE,GAAGxE,GAAK,+BAAgC,QAAQ,EAC1F,IAAM6D,EAAUrB,GAAsBiC,CAAS,EAC/C,OAAOxD,GACH,+BACAV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAGoC,EAAInC,GAAWC,CAAI,EACjD,GAAGuB,EAAQ,IAAK3B,GAAO3B,GAAQ2B,CAAE,CAAC,CACtC,CACJ,CAEA,eAAsBwC,GAAa9B,EAAQ+B,EAAYnB,EAAQ,CAC3D,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYJ,GAAgBf,CAAM,CAAC,EACrG,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsBC,GAAejC,EAAQM,EAAWM,EAAQsB,EAAW,CACvE,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAUkB,GAAgBf,CAAM,CACpC,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CAMA,eAAsB0B,GAASnC,EAAQoC,EAAM,CACzC,IAAM7E,EAAQ,OAAO6E,GAAS,SAAWpF,GAAI,OAAOoF,CAAI,EAAIA,EAC5D,OAAM7E,aAAiB,YAAaH,GAAK,yCAA0C,UAAU,EACzFG,EAAM,OAASX,EAAa,gBAAgBQ,GAAK,uCAAwC,gBAAgB,EACtG,IAAI,WAAW,MAAM4C,EAAO,OAAO,UAAWzC,CAAK,CAAC,CAC/D,CASO,SAAS8E,GAAoB,CAAE,QAAAjD,EAAS,MAAAI,EAAO,IAAA8C,EAAK,SAAAC,EAAU,SAAAC,CAAS,EAAG,CAC7E,OAAArD,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACjBD,GAAY+C,CAAG,EACfjD,GAAkBkD,CAAQ,GACtB,EAAEC,aAAoB,aAAeA,EAAS,SAAW,KAAIpF,GAAK,6BAA8B,eAAe,EAC5GiB,GAAG,6BAA8BV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAGV,GAAIwD,CAAG,EAAG3E,GAAQ4E,CAAQ,EAAGC,CAAQ,CAC/G,CAEA,eAAsBC,GAAiBzC,EAAQ+B,EAAYnB,EAAQ,CAC/D,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYM,GAAoBzB,CAAM,CAAC,EACzG,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsBU,GAAmB1C,EAAQM,EAAWM,EAAQsB,EAAW,CAC3E,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAU4B,GAAoBzB,CAAM,CACxC,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CAkCO,SAASkC,GAAsB,CAAE,QAAAvD,EAAS,MAAAI,EAAO,KAAAoD,EAAM,OAAAC,EAAQ,KAAAC,EAAM,WAAAC,EAAY,MAAAvC,CAAM,EAAG,CAC7F,OAAArB,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACboD,IAAS9F,GAAW,OAAS8F,IAAS9F,GAAW,QACjDM,GAAK,+BAAgC,eAAe,EAExDiC,GAAkBwD,CAAM,EACxBxD,GAAkByD,CAAI,EAClBD,IAAWC,GAAM1F,GAAK,8BAA+B,eAAe,GACpE,OAAO2F,GAAe,UAAYA,EAAW,SAAW,GACrDA,EAAW,OAASnG,EAAa,uBACpCQ,GAAK,0CAA2C,gBAAgB,GAEhE,EAAEoD,aAAiB,aAAeA,EAAM,SAAW5D,EAAa,mBAChEQ,GAAK,8BAA+B,gBAAgB,EAEjDiB,GACH,qCACAV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAGoD,EAC9BjF,GAAQkF,CAAM,EAAGlF,GAAQmF,CAAI,EAC7BC,EAAYvC,CAChB,CACJ,CAEA,eAAsBwC,GAAmBhD,EAAQ+B,EAAYnB,EAAQ,CACjE,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYY,GAAsB/B,CAAM,CAAC,EAC3G,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsBiB,GAAqBjD,EAAQM,EAAWM,EAAQsB,EAAW,CAC7E,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAUkC,GAAsB/B,CAAM,CAC1C,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CAwBO,SAASyC,GAAiB,CAAE,QAAA9D,EAAS,MAAAI,EAAO,GAAAF,EAAI,OAAA6D,CAAO,EAAG,CAC7D,OAAAhE,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACjBH,GAAkBC,CAAE,GAChB,OAAO6D,GAAW,UAAYA,EAAO,SAAW,GAAKA,EAAO,OAAS,MACrE/F,GAAK,2CAA4C,aAAa,EAE3DiB,GAAG,gCAAiCV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAG7B,GAAQ2B,CAAE,EAAG6D,CAAM,CAChG,CAEA,eAAsBC,GAAcpD,EAAQ+B,EAAYnB,EAAQ,CAC5D,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYmB,GAAiBtC,CAAM,CAAC,EACtG,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsBqB,GAAgBrD,EAAQM,EAAWM,EAAQsB,EAAW,CACxE,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAUyC,GAAiBtC,CAAM,CACrC,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CAgBO,SAAS6C,GAAiB,CAAE,QAAAlE,EAAS,MAAAI,EAAO,OAAA+D,EAAQ,OAAAC,EAAQ,GAAAlE,EAAI,IAAAgD,EAAK,UAAAmB,CAAU,EAAG,CACrF,OAAAtE,GAAcC,CAAO,EACrBG,GAAYC,CAAK,EACjBkE,GAAaH,CAAM,EACnBhE,GAAY+C,CAAG,EACfjD,GAAkBC,CAAE,EAChBkE,IAAW3G,GAAa,OAAS2G,IAAW3G,GAAa,MAAQ2G,IAAW3G,GAAa,OACzFO,GAAK,sBAAuB,iBAAiB,EAE1CiB,GACH,0BACAV,GAAQyB,CAAO,EAAGN,GAAIU,CAAK,EAAG7B,GAAQ4F,CAAM,EAAGC,EAC/C7F,GAAQ2B,CAAE,EAAGR,GAAIwD,CAAG,EAAGmB,IAAc,GAAO,IAAM,GACtD,CACJ,CAEO,SAASC,GAAaH,EAAQ,CACjC,OAAI,OAAOA,GAAW,UAAYA,EAAO,SAAW3G,EAAa,cAAgB,GAAK,CAAC,cAAc,KAAK2G,CAAM,IAC5GnG,GAAK,oBAAqB,aAAa,EAEpCmG,CACX,CAEO,SAASI,IAAY,CACxB,OAAOrG,GAAMY,GAAYtB,EAAa,aAAa,CAAC,CACxD,CAEA,eAAsBgH,GAAc5D,EAAQ+B,EAAYnB,EAAQ,CAC5D,IAAMoB,EAAM,MAAMhC,EAAO,KAAK,CAAE,KAAM,QAAS,KAAM,SAAU,EAAG+B,EAAYuB,GAAiB1C,CAAM,CAAC,EACtG,OAAO,IAAI,WAAWoB,CAAG,CAC7B,CAEA,eAAsB6B,GAAgB7D,EAAQM,EAAWM,EAAQsB,EAAW,CACxE,GAAI,EAAEA,aAAqB,aACpBA,EAAU,OAAStF,EAAa,eAChCsF,EAAU,OAAStF,EAAa,cACnC,MAAO,GAEX,IAAI6D,EACJ,GAAI,CACAA,EAAU6C,GAAiB1C,CAAM,CACrC,MAAY,CACR,MAAO,EACX,CACA,GAAI,CACA,OAAO,MAAMZ,EAAO,OAAO,CAAE,KAAM,QAAS,KAAM,SAAU,EAAGM,EAAW4B,EAAWzB,CAAO,CAChG,MAAY,CACR,MAAO,EACX,CACJ,CC/zBO,IAAMqD,GAAgB,OAAO,OAAO,CACvC,aAAc,eACd,aAAc,eACd,iBAAkB,mBAClB,UAAW,YACX,YAAa,cACb,aAAc,eACd,QAAS,UACT,YAAa,cACb,YAAa,cACb,aAAc,eACd,sBAAuB,wBACvB,iBAAkB,mBAClB,aAAc,eACd,OAAQ,SACR,UAAW,WACf,CAAC,EAUYC,EAAc,OAAO,OAAO,CACrC,QAAS,UACT,WAAY,aACZ,UAAW,YACX,aAAc,eACd,MAAO,QACP,OAAQ,QACZ,CAAC,EAGYC,GAAe,OAAO,OAAO,CACtC,KAAM,OACN,OAAQ,SACR,QAAS,UACT,KAAM,MACV,CAAC,EAEYC,GAAmB,CAC5B,CAACF,EAAY,OAAO,EAAGG,EAAE,oBAAoB,EAC7C,CAACH,EAAY,UAAU,EAAGG,EAAE,wBAAwB,EACpD,CAACH,EAAY,SAAS,EAAGG,EAAE,sBAAsB,EACjD,CAACH,EAAY,YAAY,EAAGG,EAAE,oBAAoB,EAClD,CAACH,EAAY,KAAK,EAAGG,EAAE,kBAAkB,EACzC,CAACH,EAAY,MAAM,EAAGG,EAAE,mBAAmB,CAC/C,EAGO,SAASC,GAAcC,EAAM,CAChC,IAAMC,EAAQ,OAAOD,GAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,EAC7DE,EAAID,EAAM,CAAC,IAAI,CAAC,GAAK,GACrBE,EAAIF,EAAM,CAAC,IAAI,CAAC,GAAKA,EAAM,CAAC,IAAI,CAAC,GAAK,GAC5C,OAAQC,EAAIC,GAAG,YAAY,GAAK,IACpC,CAEO,SAASC,GAAiBC,EAAO,CAAC,EAAG,CACxC,MAAO,CACH,GAAIA,EAAK,GACT,KAAMA,EAAK,MAAQ,QACnB,UAAWA,EAAK,WAAa,KAAK,IAAI,EACtC,QAASA,EAAK,SAAW,GACzB,OAAQA,EAAK,QAAU,GACvB,QAAS,CAAC,CAACA,EAAK,QAChB,MAAO,OAAO,UAAUA,EAAK,KAAK,EAAIA,EAAK,MAAQ,EACnD,MAAOA,EAAK,OAASV,EAAY,QAGjC,QAAS,MAAM,QAAQU,EAAK,OAAO,EAAI,CAAC,GAAGA,EAAK,OAAO,EAAE,KAAKC,EAAa,EAAI,CAAC,EAChF,QAAS,GACT,aAAc,GACd,SAAU,CAAC,EACX,YAAa,EACb,MAAO,IACX,CACJ,CAEA,IAAMC,GAAe,IAAI,YAGzB,SAASC,GAAeC,EAAO,CAC3B,IAAIC,EAAM,OAAOD,CAAK,EACtB,KAAOF,GAAa,OAAOG,CAAG,EAAE,OAASC,EAAa,gBAAgBD,EAAMA,EAAI,MAAM,EAAG,EAAE,EAC3F,OAAOA,CACX,CAEA,SAASJ,GAAcJ,EAAGC,EAAG,CACzB,OAAOD,EAAE,GAAKC,EAAE,GAAK,GAAKD,EAAE,GAAKC,EAAE,GAAK,EAAI,CAChD,CAEO,SAASS,IAA0B,CACtC,MAAO,CAAE,OAAQ,CAAC,EAAG,MAAO,CAAC,EAAG,cAAe,IAAK,CACxD,CAGA,SAASC,GAAWC,EAAOC,EAAIC,EAAO,CAClC,IAAMC,EAAQH,EAAM,OAAOC,CAAE,EAC7B,OAAKE,EACE,CAAE,GAAGH,EAAO,OAAQ,CAAE,GAAGA,EAAM,OAAQ,CAACC,CAAE,EAAG,CAAE,GAAGE,EAAO,GAAGD,CAAM,CAAE,CAAE,EAD1DF,CAEvB,CAEO,SAASI,GAAcJ,EAAOK,EAAQ,CACzC,IAAMC,EAAI1B,GACV,OAAQyB,EAAO,KAAM,CACjB,KAAKC,EAAE,aAAc,CACjB,IAAMC,EAAQF,EAAO,OAASf,GAAiBe,CAAM,EACrD,MAAI,CAACE,EAAM,IAAMP,EAAM,OAAOO,EAAM,EAAE,EAAUP,EACzC,CACH,OAAQ,CAAE,GAAGA,EAAM,OAAQ,CAACO,EAAM,EAAE,EAAGA,CAAM,EAC7C,MAAO,CAAC,GAAGP,EAAM,MAAOO,EAAM,EAAE,EAChC,cAAeF,EAAO,WAAa,GAAQL,EAAM,cAAgBO,EAAM,EAC3E,CACJ,CAEA,KAAKD,EAAE,aAAc,CACjB,GAAM,CAAE,GAAAL,CAAG,EAAII,EACf,GAAI,CAACL,EAAM,OAAOC,CAAE,EAAG,OAAOD,EAC9B,IAAMQ,EAAS,CAAE,GAAGR,EAAM,MAAO,EACjC,OAAOQ,EAAOP,CAAE,EAChB,IAAMQ,EAAQT,EAAM,MAAM,OAAQU,GAAMA,IAAMT,CAAE,EAC5CU,EAAgBX,EAAM,cAC1B,GAAIW,IAAkBV,EAAI,CACtB,IAAMW,EAAaZ,EAAM,MAAM,QAAQC,CAAE,EACzCU,EAAgBF,EAAM,KAAK,IAAI,EAAGG,EAAa,CAAC,CAAC,GAAKH,EAAM,CAAC,GAAK,IACtE,CACA,MAAO,CAAE,OAAAD,EAAQ,MAAAC,EAAO,cAAAE,CAAc,CAC1C,CAEA,KAAKL,EAAE,iBAEH,OAAID,EAAO,KAAO,KACPL,EAAM,gBAAkB,KAAOA,EAAQ,CAAE,GAAGA,EAAO,cAAe,IAAK,EAE9E,CAACA,EAAM,OAAOK,EAAO,EAAE,GAAKL,EAAM,gBAAkBK,EAAO,GAAWL,EACnE,CAAE,GAAGA,EAAO,cAAeK,EAAO,EAAG,EAGhD,KAAKC,EAAE,UAAW,CACd,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,GAASA,EAAM,QAAUE,EAAO,MAAO,OAAOL,EAInD,IAAME,EAAQ,CAAE,MAAOG,EAAO,KAAM,EACpC,OAAIA,EAAO,QAAUxB,EAAY,OAASsB,EAAM,eAC5CD,EAAM,aAAe,IAKrBG,EAAO,QAAUxB,EAAY,OAASwB,EAAO,QAAUxB,EAAY,eACnEqB,EAAM,QAAU,IAEhBG,EAAO,QAAUxB,EAAY,SAAQqB,EAAM,MAAQ,MAChDH,GAAWC,EAAOK,EAAO,GAAIH,CAAK,CAC7C,CAEA,KAAKI,EAAE,YAAa,CAChB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EAEnB,IAAME,EAAQ,CAAE,QADA,MAAM,QAAQG,EAAO,OAAO,EAAI,CAAC,GAAGA,EAAO,OAAO,EAAE,KAAKb,EAAa,EAAIW,EAAM,OACxE,EACxB,OAAI,OAAO,UAAUE,EAAO,KAAK,IAAGH,EAAM,MAAQG,EAAO,OAClDN,GAAWC,EAAOK,EAAO,GAAIH,CAAK,CAC7C,CAEA,KAAKI,EAAE,aAAc,CACjB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EACnB,IAAIa,EAAU,GACRC,EAAUX,EAAM,QAAQ,IAAKY,GAAM,CACrC,GAAIA,EAAE,KAAOV,EAAO,GAAI,OAAOU,EAC/B,IAAMC,EAAO,CAAE,GAAGD,EAAG,GAAGV,EAAO,KAAM,EAIrC,OAAI,OAAO,KAAKA,EAAO,KAAK,EAAE,MAAOY,GAAMF,EAAEE,CAAC,IAAMD,EAAKC,CAAC,CAAC,EAAUF,GACrEF,EAAU,GACHG,EACX,CAAC,EACD,OAAOH,EAAUd,GAAWC,EAAOK,EAAO,GAAI,CAAE,QAAAS,CAAQ,CAAC,EAAId,CACjE,CAEA,KAAKM,EAAE,QAAS,CACZ,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,MAAI,CAACF,GAASA,EAAM,UAAYE,EAAO,KAAaL,EAC7CD,GAAWC,EAAOK,EAAO,GAAI,CAAE,QAASA,EAAO,MAAQ,GAAI,aAAc,EAAM,CAAC,CAC3F,CAEA,KAAKC,EAAE,YAAa,CAChB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EAcpC,MAbI,CAACF,GAWD,CAACA,EAAM,SACPA,EAAM,QAAUtB,EAAY,cAC5BsB,EAAM,cAAgBA,EAAM,QAAUtB,EAAY,MAAcmB,EAC7DD,GAAWC,EAAOK,EAAO,GAAI,CAAE,aAAc,GAAM,MAAOxB,EAAY,MAAO,MAAO,IAAK,CAAC,CACrG,CAEA,KAAKyB,EAAE,YAAa,CAChB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,OAAKF,EACEJ,GAAWC,EAAOK,EAAO,GAAI,CAAE,SAAU,CAAC,GAAGF,EAAM,SAAUE,EAAO,OAAO,CAAE,CAAC,EADlEL,CAEvB,CAEA,KAAKM,EAAE,aAAc,CACjB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EACnB,IAAMgB,EAAO,OAAOX,EAAO,SAAY,WAAaA,EAAO,QAAQF,EAAM,QAAQ,EAAIE,EAAO,SAC5F,OAAON,GAAWC,EAAOK,EAAO,GAAI,CAAE,SAAU,MAAM,QAAQW,CAAI,EAAIA,EAAO,CAAC,CAAE,CAAC,CACrF,CAEA,KAAKV,EAAE,sBAAuB,CAC1B,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EACnB,IAAIa,EAAU,GACRK,EAAWf,EAAM,SAAS,IAAKY,GAC7B,OAAOA,EAAE,GAAG,IAAM,OAAOV,EAAO,GAAG,GAAKU,EAAE,SAAWV,EAAO,QAC5DQ,EAAU,GACH,CAAE,GAAGE,EAAG,OAAQV,EAAO,MAAO,GAElCU,CACV,EACD,OAAOF,EAAUd,GAAWC,EAAOK,EAAO,GAAI,CAAE,SAAAa,CAAS,CAAC,EAAIlB,CAClE,CAEA,KAAKM,EAAE,iBAAkB,CACrB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,OAAKF,EACEJ,GAAWC,EAAOK,EAAO,GAAI,CAAE,YAAaF,EAAM,YAAc,CAAE,CAAC,EADvDH,CAEvB,CAEA,KAAKM,EAAE,aAAc,CACjB,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,MAAI,CAACF,GAASA,EAAM,cAAgB,EAAUH,EACvCD,GAAWC,EAAOK,EAAO,GAAI,CAAE,YAAa,CAAE,CAAC,CAC1D,CAEA,KAAKC,EAAE,OAAQ,CACX,IAAMH,EAAQH,EAAM,OAAOK,EAAO,EAAE,EACpC,GAAI,CAACF,EAAO,OAAOH,EAInB,IAAMd,EAAOQ,GAAe,OAAOW,EAAO,MAAQ,EAAE,EAAE,KAAK,CAAC,GAAKF,EAAM,KACvE,OAAOJ,GAAWC,EAAOK,EAAO,GAAI,CAAE,KAAAnB,CAAK,CAAC,CAChD,CAEA,KAAKoB,EAAE,UAAW,CAEd,GAAI,CADUN,EAAM,OAAOK,EAAO,EAAE,EACxB,OAAOL,EACnB,IAAME,EAAQ,CAAE,MAAOG,EAAO,OAAS,IAAK,EAC5C,OAAIA,EAAO,QAAOH,EAAM,MAAQrB,EAAY,QACrCkB,GAAWC,EAAOK,EAAO,GAAIH,CAAK,CAC7C,CAEA,QACI,OAAOF,CACf,CACJ,CAOO,SAASmB,GAAYhB,EAAO,CAC/B,OAAOA,EAAM,QAAQ,OAAQY,GAAMA,EAAE,QAAUjC,GAAa,MAAQiC,EAAE,QAAUjC,GAAa,MAAM,EAAE,MACzG,CAQO,SAASsC,GAASjB,EAAO,CAC5B,GAAIA,EAAM,QAAUtB,EAAY,MAAO,OAAOE,GAAiBoB,EAAM,KAAK,GAAK,QAC/E,IAAMkB,EAAQlB,EAAM,QAAQ,OACtBmB,EAASH,GAAYhB,CAAK,EAChC,OAAImB,EAASD,EAAc,GAAGC,CAAM,OAAOD,CAAK,aACzC,GAAGA,CAAK,wBACnB,CAEO,SAASE,GAASpB,EAAO,CAC5B,OAAQA,EAAM,MAAO,CACjB,KAAKtB,EAAY,MACb,OAAOsC,GAAYhB,CAAK,EAAIA,EAAM,QAAQ,OAAS,2BAA6B,wBACpF,KAAKtB,EAAY,OACb,MAAO,sBACX,QACI,MAAO,0BACf,CACJ,CAEO,SAAS2C,GAAcrB,EAAOQ,EAAe,CAChD,IAAMc,EAAc,CAAC,GAAGtB,EAAM,QAAQ,EAAE,QAAQ,EAAE,KAC7CY,GAAM,CAACA,EAAE,SAAW,OAAOA,EAAE,SAAY,UAAYA,EAAE,QAAQ,KAAK,CACzE,EACMW,EAAMN,GAASjB,CAAK,EAC1B,MAAO,CACH,GAAIA,EAAM,GACV,KAAM,QACN,KAAMA,EAAM,KACZ,KAAMlB,GAAckB,EAAM,IAAI,EAC9B,IAAKoB,GAASpB,CAAK,EACnB,UAAWuB,EACX,MAAOvB,EAAM,MACb,YAAaA,EAAM,QAAQ,OAC3B,YAAagB,GAAYhB,CAAK,EAC9B,QAASsB,EAAcA,EAAY,QAAUC,EAC7C,OAAQvB,EAAM,YAAc,EAAKA,EAAM,YAAc,GAAK,MAAQ,OAAOA,EAAM,WAAW,EAAK,KAC/F,SAAUA,EAAM,QAAUtB,EAAY,OAASsB,EAAM,aACrD,OAAQA,EAAM,KAAOQ,EACrB,SAAUR,EAAM,KAAOQ,CAC3B,CACJ,CAEO,SAASgB,GAAe3B,EAAO,CAClC,OAAOA,EAAM,MACR,IAAKC,GAAOD,EAAM,OAAOC,CAAE,CAAC,EAC5B,OAAO,OAAO,EACd,IAAK2B,GAAMJ,GAAcI,EAAG5B,EAAM,aAAa,CAAC,CACzD,CCvQO,IAAM6B,GAAe,OAAO,OAAO,CACtC,OAAQ,WACR,MAAO,UACP,OAAQ,WACR,OAAQ,WACR,OAAQ,WACR,OAAQ,WACR,QAAS,QACT,MAAO,UACP,MAAO,UAGP,WAAY,WACZ,YAAa,YACb,WAAY,WAEZ,MAAO,UAGP,KAAM,QACV,CAAC,EAGYC,GAAiB,QAGjBC,GAAoB,OAAO,OAAO,IAAI,IAAI,OAAO,OAAOF,EAAY,CAAC,CAAC,EAE5E,SAASG,GAAaC,EAAQ,CACjC,MAAI,CAACA,GAAU,OAAOA,GAAW,SAAiB,GAC3CA,EAAO,OAASH,IAAkBC,GAAkB,IAAIE,EAAO,IAAI,CAC9E,CAUO,SAASC,GAAeD,EAAQ,CACnC,MAAI,CAACA,GAAU,OAAOA,GAAW,SAAiB,KAC9CA,EAAO,OAASH,GAAuB,OAAOG,EAAO,GAAM,SAAWA,EAAO,EAAI,KAC9EF,GAAkB,IAAIE,EAAO,IAAI,EAAIA,EAAO,KAAO,IAC9D,CAkBO,SAASE,GAAeC,EAAO,CAClC,IAAMC,EAAO,KAAK,UAAUD,CAAK,EAC3BE,EAAUC,GAAM,IAAI,YAAY,EAAE,OAAOF,CAAI,CAAC,EACpD,GAAIC,EAAQ,OAASE,EAAa,mBAC9B,MAAM,IAAIC,EAAkB,2CAA4C,iBAAiB,EAE7F,MAAO,CAAE,KAAMX,GAAgB,IAAKM,EAAM,IAAK,EAAGA,EAAM,KAAM,EAAGE,CAAQ,CAC7E,CAEO,SAASI,GAAeC,EAAU,CACrC,GAAI,CAACA,GAAYA,EAAS,OAASb,GAAgB,OAAOa,EAC1D,IAAMC,EAAM,OAAOD,EAAS,GAAK,EAAE,EACnC,GAAIC,EAAI,OAASJ,EAAa,mBAC1B,MAAM,IAAIC,EAAkB,2CAA4C,iBAAiB,EAE7F,IAAMI,EAAQC,GAAQF,EAAK,CAAE,IAAKJ,EAAa,kBAAmB,CAAC,EAC7DJ,EAAQ,KAAK,MAAM,IAAI,YAAY,EAAE,OAAOS,CAAK,CAAC,EACxD,GAAI,CAACT,GAAS,OAAOA,GAAU,UAAY,CAACL,GAAkB,IAAIK,EAAM,IAAI,EACxE,MAAM,IAAIK,EAAkB,yCAA0C,cAAc,EAIxF,GAAIE,EAAS,KAAOP,EAAM,MAAQO,EAAS,IACvC,MAAM,IAAIF,EAAkB,6CAA8C,cAAc,EAE5F,GAAIE,EAAS,GAAKP,EAAM,OAASO,EAAS,EACtC,MAAM,IAAIF,EAAkB,yCAA0C,cAAc,EAExF,OAAOL,CACX,CAEA,IAAMW,GAAW,OAAO,OAAO,CAI3B,YAAa,IAEb,SAAU,KAMV,aAAc,KAId,cAAe,GACnB,CAAC,EAGKC,GAA4B,EAE5BC,GAAoB,EAEbR,EAAN,cAAgC,KAAM,CACzC,YAAYS,EAASC,EAAO,gBAAiB,CACzC,MAAMD,CAAO,EACb,KAAK,KAAO,oBACZ,KAAK,KAAOC,CAChB,CACJ,EAEaC,GAAN,KAAmB,CAUtB,YAAY,CAAE,QAAAC,EAAS,KAAAC,EAAM,QAAAC,EAAS,OAAAC,EAAQ,KAAAC,EAAM,KAAAC,EAAM,KAAAC,EAAO,KAAM,IAAAC,EAAM,IAAM,CAAC,CAAE,EAAG,CACrF,KAAK,QAAUC,GAAcR,CAAO,EACpC,KAAK,KAAOS,GAAWR,CAAI,EAC3B,KAAK,QAAU,CAAC,CAACC,EACjB,KAAK,OAASC,EACd,KAAK,MAAQC,EACb,KAAK,MAAQC,EACb,KAAK,KAAOE,EAiBZ,KAAK,MAAQD,EAEb,KAAK,SAAW,KAChB,KAAK,MAAQ,EACb,KAAK,QAAU,GACf,KAAK,MAAQI,EAAY,QAGzB,KAAK,QAAU,IAAI,IAEnB,KAAK,YAAc,IAAI,IAEvB,KAAK,SAAW,KAChB,KAAK,QAAU,GACf,KAAK,aAAe,GAEpB,KAAK,IAAM,EAOX,KAAK,WAAa,IAAI,IAEtB,KAAK,QAAU,IAAI,IACnB,KAAK,WAAa,GAElB,KAAK,eAAiB,IAAI,IAc1B,KAAK,iBAAmB,CAAC,EACzB,KAAK,UAAY,GASjB,KAAK,aAAe,IAAI,IAQxB,KAAK,YAAc,KAUnB,KAAK,WAAa,IAAI,IAEtB,KAAK,cAAgB,IAAI,IAEzB,KAAK,cAAgB,IAAI,IAEzB,KAAK,QAAU,IAAI,IAEnB,KAAK,UAAY,KAajB,KAAK,KAAO,KAEZ,KAAK,QAAU,EAEf,KAAK,UAAY,IAAI,GACzB,CAMA,OAAO,OAAQ,CACX,OAAOC,GAAW,CACtB,CAEA,MAAM,MAAO,CACT,OAAI,KAAK,SAAiB,KAAK,UAC/B,KAAK,SAAW,MAAMC,GAAsB,KAAK,MAAM,EACvD,KAAK,QAAQ,IAAI,KAAK,SAAS,YAAa,CACxC,GAAI,KAAK,SAAS,YAClB,KAAM,MACN,KAAM,KAAK,SAAS,KACpB,UAAW,KACX,UAAW,KACX,MAAOC,GAAa,IACxB,CAAC,EACG,KAAK,UAAS,KAAK,QAAU,KAAK,SAAS,aACxC,KAAK,SAChB,CAEA,IAAI,QAAS,CACT,OAAO,KAAK,UAAU,aAAe,EACzC,CAEA,SAAU,CACN,KAAK,WAAa,GAClB,QAAWC,KAAK,KAAK,QAAS,aAAaA,CAAC,EAC5C,KAAK,QAAQ,MAAM,EACnB,GAAI,CAAE,KAAK,UAAU,QAAQ,CAAG,MAAY,CAAC,CAC7C,KAAK,SAAW,KAKhB,QAAWC,KAAa,KAAK,cACzB,GAAI,CAAE,KAAK,OAAO,MAAMA,CAAS,CAAG,MAAY,CAAC,CAErD,KAAK,cAAc,MAAM,EACzB,KAAK,WAAW,MAAM,EACtB,KAAK,cAAc,MAAM,EACzB,KAAK,QAAQ,MAAM,EAEnB,KAAK,KAAO,KACZ,KAAK,UAAU,MAAM,EAErB,KAAK,QAAQ,MAAM,EACnB,KAAK,YAAY,MAAM,EAEvB,KAAK,WAAW,MAAM,EACtB,KAAK,iBAAmB,CAAC,EACzB,KAAK,aAAa,MAAM,EACxB,KAAK,YAAc,KACnB,KAAK,SAAW,IACpB,CAEA,OAAOC,EAAIC,EAAI,CACX,IAAMH,EAAI,WAAW,IAAM,CAAE,KAAK,QAAQ,OAAOA,CAAC,EAAQ,KAAK,YAAYE,EAAG,CAAG,EAAGC,CAAE,EACtF,YAAK,QAAQ,IAAIH,CAAC,EACXA,CACX,CAEA,MAAMhB,EAAM,CACR,GAAI,MAAK,WACT,MAAK,KAAK,OAAQ,wBAAyB,CAAE,KAAAA,CAAK,CAAC,EACnD,KAAK,MAAQY,EAAY,OACzB,GAAI,CAAE,KAAK,UAAU,QAAQ,CAAG,MAAY,CAAC,CAC7C,KAAK,SAAW,KAChB,KAAK,MAAM,QAAS,CAAE,MAAOZ,CAAK,CAAC,EACvC,CAEA,UAAUoB,EAAO,CACT,KAAK,QAAUA,IACnB,KAAK,MAAQA,EAETA,IAAUR,EAAY,QAAO,KAAK,aAAe,IAIjDQ,IAAUR,EAAY,OAASQ,IAAUR,EAAY,eACrD,KAAK,QAAU,IAEnB,KAAK,MAAM,QAAS,CAAE,MAAAQ,CAAM,CAAC,EACjC,CAGA,iBAAkB,CACd,MAAO,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,EAAE,IAAKC,IAAO,CAC1C,GAAIA,EAAE,GAAI,KAAMA,EAAE,KAAM,UAAWA,EAAE,UAAW,MAAOA,EAAE,KAC7D,EAAE,CACN,CAEA,cAAe,CACX,KAAK,WAAW,EAChB,KAAK,MAAM,UAAW,CAAE,QAAS,KAAK,gBAAgB,EAAG,MAAO,KAAK,KAAM,CAAC,CAChF,CAUA,YAAa,CACT,GAAI,CAAC,KAAK,KAAM,OAChB,IAAIC,EAAU,GACd,QAAWC,IAAM,CAAC,GAAG,KAAK,KAAK,YAAY,EAClC,KAAK,QAAQ,IAAIA,CAAE,IAAK,KAAK,KAAK,aAAa,OAAOA,CAAE,EAAGD,EAAU,IAE1E,KAAK,KAAK,aAAa,OAAS,IAAK,KAAK,KAAO,KAAMA,EAAU,IACjEA,GAAS,KAAK,MAAM,OAAQ,CAAE,KAAM,KAAK,gBAAgB,CAAE,CAAC,CACpE,CAOA,cAAe,CACX,MAAO,CAAC,GAAG,KAAK,QAAQ,OAAO,CAAC,EAAE,OAC7BD,GAAMA,EAAE,QAAUN,GAAa,QAAUM,EAAE,SAChD,CACJ,CASA,UAAUG,EAAM,CACZ,IAAMC,EAAQ,KAAK,QAAQ,IAAI,KAAK,OAAO,EAC3C,OAAIA,GAASA,EAAM,QAAUV,GAAa,QAAUU,EAAM,WAAaA,EAAM,KAAOD,EACzEC,EAEJ,KAAK,aAAa,EAAE,KAAMJ,GAAMA,EAAE,KAAOG,CAAI,GAAK,IAC7D,CAUA,MAAM,MAAMP,EAAWhC,EAAO,CAC1B,OAAO,KAAK,MAAMgC,EAAWjC,GAAeC,CAAK,CAAC,CACtD,CAGA,MAAM,QAAQuC,EAAMvC,EAAO,CACvB,IAAMyC,EAAS,KAAK,QAAQ,IAAIF,CAAI,EACpC,GAAI,CAACE,GAAUA,EAAO,KAAO,KAAK,OAAQ,MAAO,GAEjD,GAAIA,EAAO,QAAUX,GAAa,QAAUW,EAAO,UAC/C,aAAM,KAAK,MAAMA,EAAO,UAAWzC,CAAK,EACjC,GAEX,IAAM0C,EAAQ,KAAK,UAAUH,CAAI,EACjC,OAAKG,GACL,MAAM,KAAK,MAAMA,EAAM,UAAW,CAC9B,KAAMjD,GAAa,MACnB,IAAK,KAAK,QACV,GAAI8C,EACJ,OAAQ,GACR,MAAOvC,CACX,CAAC,EAUMyC,EAAO,QAAUX,GAAa,MAjBlB,EAkBvB,CASA,MAAM,WAAW9B,EAAO,CAAE,QAAA2C,EAAU,CAAC,CAAE,EAAI,CAAC,EAAG,CAC3C,IAAMC,EAAU,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,EAAE,OACpCN,GAAOA,IAAO,KAAK,QAAU,CAACK,EAAQ,SAASL,CAAE,CACtD,EACMO,EAAU,MAAM,QAAQ,WAAWD,EAAQ,IAAKN,GAAO,KAAK,QAAQA,EAAItC,CAAK,CAAC,CAAC,EAC/E8C,EAAc,CAAC,EACjBC,EAAY,EAChB,OAAAF,EAAQ,QAAQ,CAACG,EAAQC,IAAM,CAC3B,GAAID,EAAO,SAAW,aAAeA,EAAO,QAAU,GAAM,CACxDD,GAAa,EACb,MACJ,CACA,IAAMN,EAAS,KAAK,QAAQ,IAAIG,EAAQK,CAAC,CAAC,EAC1CH,EAAY,KAAK,CAAE,GAAIF,EAAQK,CAAC,EAAG,KAAMR,GAAQ,MAAQ,UAAW,CAAC,CACzE,CAAC,EACM,CAAE,UAAAM,EAAW,YAAAD,CAAY,CACpC,CAUA,YAAYR,EAAIN,EAAWkB,EAAQpB,GAAa,OAAQ,CACpD,IAAMW,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,OAAKG,GAKDA,EAAO,WAAaA,EAAO,YAAcT,IACzC,KAAK,YAAY,OAAOS,EAAO,SAAS,EACxC,KAAK,kBAAkBA,EAAO,SAAS,GAE3CA,EAAO,UAAYT,EACnBS,EAAO,MAAQS,EACXlB,GAAW,KAAK,YAAY,IAAIA,EAAWM,CAAE,EACjD,KAAK,aAAa,EACX,IAba,EAcxB,CAWA,cAAcA,EAAI,CACd,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,GAAI,CAACG,GAAU,CAACA,EAAO,UAAW,MAAO,GACzC,IAAMT,EAAYS,EAAO,UACzB,YAAK,YAAY,OAAOT,CAAS,EACjCS,EAAO,UAAY,MACfA,EAAO,QAAUX,GAAa,QAAUW,EAAO,QAAUX,GAAa,QACtEW,EAAO,MAAQX,GAAa,SAEhC,KAAK,kBAAkBE,CAAS,EAChC,KAAK,aAAa,EAIlB,KAAK,sBAAsB,EACpB,EACX,CAGA,gBAAgBA,EAAWmB,EAAW,CAClC,IAAMb,EAAK,KAAK,YAAY,IAAIN,CAAS,EACzC,GAAI,CAACM,EAAI,OACT,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,GAAI,CAACG,GAAUA,EAAO,QAAUX,GAAa,KAAM,OACnD,IAAMsB,EAAOD,EAAYrB,GAAa,OAASA,GAAa,KACxDW,EAAO,QAAUW,IACrBX,EAAO,MAAQW,EACf,KAAK,aAAa,EAOdD,GAAW,KAAK,YAAYb,CAAE,EAIlC,KAAK,sBAAsB,EAC/B,CAqDA,iBAAiBA,EAAIe,EAAM,CAGvB,GAFI,KAAK,YACL,KAAK,WAAW,IAAIf,CAAE,IAAMe,GAC5B,KAAK,QAAUA,EAAK,MAAO,MAAO,GACtC,IAAMZ,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAElC,MADI,GAACG,GACDA,EAAO,WAAaA,EAAO,YAAcY,EAAK,UAEtD,CAGA,aAAaf,EAAIe,EAAMrB,EAAW,CAC1B,KAAK,WAAW,IAAIM,CAAE,IAAMe,IACxBA,EAAK,QAAS,aAAaA,EAAK,KAAK,EAAG,KAAK,QAAQ,OAAOA,EAAK,KAAK,GAC1E,KAAK,WAAW,OAAOf,CAAE,GAE7B,KAAK,cAAc,OAAON,CAAS,EACnC,GAAI,CAAE,KAAK,OAAO,MAAMA,CAAS,CAAG,MAAY,CAAC,CACrD,CAGA,kBAAkBA,EAAW,CACzB,GAAI,GAACA,GAAa,CAAC,KAAK,cAAc,IAAIA,CAAS,GACnD,MAAK,cAAc,OAAOA,CAAS,EACnC,GAAI,CAAE,KAAK,OAAO,MAAMA,CAAS,CAAG,MAAY,CAAC,EACrD,CAGA,YAAYM,EAAI,CACZ,IAAMe,EAAO,KAAK,WAAW,IAAIf,CAAE,EAC9Be,IACDA,EAAK,QAAS,aAAaA,EAAK,KAAK,EAAG,KAAK,QAAQ,OAAOA,EAAK,KAAK,GAC1E,KAAK,WAAW,OAAOf,CAAE,EACzB,KAAK,cAAc,OAAOA,CAAE,EAChC,CAWA,UAAUA,EAAIvB,EAAM,CAAE,SAAAuC,EAAW,EAAK,EAAI,CAAC,EAAG,CAC1C,IAAMD,EAAO,KAAK,WAAW,IAAIf,CAAE,EACnC,GAAIe,EAAM,CACFA,EAAK,QAAS,aAAaA,EAAK,KAAK,EAAG,KAAK,QAAQ,OAAOA,EAAK,KAAK,GAC1E,KAAK,WAAW,OAAOf,CAAE,EACzB,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAG9Be,EAAK,WAAaZ,GAAUA,EAAO,YAAcY,EAAK,UACtD,KAAK,cAAcf,CAAE,EAErB,KAAK,kBAAkBe,EAAK,SAAS,CAE7C,CAEA,IAAME,EAAU,KAAK,cAAc,IAAIjB,CAAE,GAAK,CAAE,SAAU,EAAG,OAAQ,CAAE,EACvEiB,EAAQ,UAAY,EACpBA,EAAQ,OAAS,KAAK,IAAI,EAAI5C,GAAS,cAAgB,IAAM4C,EAAQ,SAAW,GAChF,KAAK,cAAc,IAAIjB,EAAIiB,CAAO,EAClC,KAAK,KAAK,OAAQ,mBAAoB,CAAE,KAAAxC,EAAM,SAAUwC,EAAQ,QAAS,CAAC,EAKtED,GAAY,KAAK,QAAQ,IAAIhB,CAAE,GAC/B,KAAK,QAAQA,EAAI,CACb,KAAM7C,GAAa,WAAY,IAAK,KAAK,QAAS,MAAO,KAAK,MAC9D,KAAM,KAAK,OAAQ,GAAI6C,CAC3B,CAAC,EAAE,MAAM,IAAM,CAAC,CAAC,EAErB,KAAK,sBAAsB,CAC/B,CAUA,YAAa,CACT,QAAWA,IAAM,CAAC,GAAG,KAAK,WAAW,KAAK,CAAC,EAAG,CAC1C,IAAMe,EAAO,KAAK,WAAW,IAAIf,CAAE,EAC/Be,GAAM,QAAS,aAAaA,EAAK,KAAK,EAAG,KAAK,QAAQ,OAAOA,EAAK,KAAK,GAC3E,KAAK,WAAW,OAAOf,CAAE,EACzB,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAC9Be,GAAM,WAAaZ,GAAUA,EAAO,YAAcY,EAAK,UACvD,KAAK,cAAcf,CAAE,EAErB,KAAK,kBAAkBe,GAAM,SAAS,CAE9C,CACA,KAAK,cAAc,MAAM,EACzB,KAAK,QAAQ,MAAM,CACvB,CAUA,uBAAwB,CAChB,KAAK,YAAc,CAAC,KAAK,OAAS,KAAK,YAC3C,KAAK,UAAY,KAAK,OAAO,IAAM,CAC/B,KAAK,UAAY,KACjB,KAAK,cAAc,CACvB,EAAG,CAAC,EACR,CAGA,eAAgB,CAEZ,GADI,KAAK,YAAc,CAAC,KAAK,OACzB,KAAK,QAAU1B,EAAY,OAAS,CAAC,KAAK,aAAc,OAE5D,IAAM6B,EAAM,KAAK,IAAI,EACjBC,EAAW,KAAK,WAAW,KAC3BC,EAAU,IAId,QAAWpB,KAAMqB,GAAsB,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,CAAC,EAAG,CAC9D,GAAIF,GAAY7C,GAA2B,MAC3C,IAAM6B,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAIlC,GAHI,CAACG,GAAUA,EAAO,QAAUX,GAAa,MACzCW,EAAO,WACP,KAAK,WAAW,IAAIH,CAAE,GACtB,EAAE,KAAK,OAASA,GAAK,SAEzB,IAAMiB,EAAU,KAAK,cAAc,IAAIjB,CAAE,EACzC,GAAIiB,EAAS,CACT,GAAIA,EAAQ,UAAY1C,GAAmB,SAC3C,GAAI2C,EAAMD,EAAQ,OAAQ,CAAEG,EAAU,KAAK,IAAIA,EAASH,EAAQ,MAAM,EAAG,QAAU,CACvF,CAGK,KAAK,UAAUjB,CAAE,IAEtBmB,GAAY,EACZ,KAAK,UAAUnB,CAAE,EAAE,MAAM,IAAM,CAAC,CAAC,EACrC,CAGIoB,IAAY,KAAY,CAAC,KAAK,YAC9B,KAAK,UAAY,KAAK,OAAO,IAAM,CAC/B,KAAK,UAAY,KACjB,KAAK,cAAc,CACvB,EAAG,KAAK,IAAI,EAAGA,EAAUF,CAAG,EAAI,EAAE,EAE1C,CAGA,MAAM,UAAUlB,EAAI,CAChB,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,GAAI,CAACG,GAAUA,EAAO,WAAa,KAAK,WAAW,IAAIH,CAAE,EAAG,OAE5D,IAAMsB,EAAQ,KAAK,MACbC,EAAQC,GAAY1D,EAAa,gBAAgB,EAIjDiD,EAAO,CAAE,KAAM,QAAS,UAAW,KAAM,MAAAQ,EAAO,MAAAD,EAAO,MAAO,IAAK,EACzE,KAAK,WAAW,IAAItB,EAAIe,CAAI,EAE5B,GAAI,CACA,IAAMU,EAAO,MAAM,KAAK,MAAM,YAAYzB,CAAE,EACtCN,EAAY+B,GAAQA,EAAK,UACzBC,EAAa,OAAQD,GAAQA,EAAK,YAAe,EAAE,EACzD,GAAI,CAAC/B,GAAa,CAACgC,EAAY,MAAM,IAAI3D,EAAkB,wCAAyC,eAAe,EAGnH,GAAI,CAAC,KAAK,iBAAiBiC,EAAIe,CAAI,EAAG,OAAO,KAAK,aAAaf,EAAIe,EAAMrB,CAAS,EAClFqB,EAAK,UAAYrB,EACjB,KAAK,cAAc,IAAIA,CAAS,EAIhC,KAAK,YAAYM,EAAIN,EAAWF,GAAa,OAAO,EAEpD,IAAMmC,EAAM,MAAMC,GAAmB,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAChF,QAAS,KAAK,QAAS,MAAAN,EAAO,KAAMO,GAAW,MAC/C,OAAQ,KAAK,OAAQ,KAAM7B,EAAI,WAAA0B,EAAY,MAAAH,CAC/C,CAAC,EAMD,GAAI,CALS,MAAM,KAAK,QAAQvB,EAAI,CAChC,KAAM7C,GAAa,WAAY,IAAK,KAAK,QAAS,MAAAmE,EAClD,KAAM,KAAK,OAAQ,GAAItB,EAAI,EAAG0B,EAC9B,EAAG7D,GAAM0D,CAAK,EAAG,IAAK1D,GAAM8D,CAAG,CACnC,CAAC,EACU,MAAM,IAAI5D,EAAkB,6BAA8B,aAAa,EAElFgD,EAAK,MAAQ,KAAK,OAAO,IAAM,KAAK,UAAUf,EAAI,cAAc,EAAG3B,GAAS,YAAY,CAC5F,OAASyD,EAAO,CACZ,KAAK,UAAU9B,EAAI8B,GAAO,MAAQ,aAAa,CACnD,CACJ,CAEA,MAAM,aAAapE,EAAO,CACtB,GAAI,CAAC,KAAK,OAAS,KAAK,WAAY,OACpC,IAAMqE,EAAOC,GAAkB,OAAOtE,EAAM,MAAQ,EAAE,CAAC,EAGvD,GAFIsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,IAAM,KAAK,QACnDuE,GAAYvE,EAAM,KAAK,IAAM,KAAK,OAClC,KAAK,QAAU2B,EAAY,OAAS,CAAC,KAAK,aAAc,OAE5D,IAAMc,EAAS,KAAK,QAAQ,IAAI4B,CAAI,EACpC,GAAI,CAAC5B,GAAU,CAACA,EAAO,UACnB,MAAM,IAAIpC,EAAkB,8BAA+B,cAAc,EAM7E,GAJIoC,EAAO,WACP,KAAK,WAAW,IAAI4B,CAAI,GAGxB,KAAK,OAASA,EAAM,OAExB,IAAML,EAAa,OAAOhE,EAAM,GAAK,EAAE,EACvC,GAAI,CAACgE,GAAcA,EAAW,OAAS5D,EAAa,qBAChD,MAAM,IAAIC,EAAkB,0CAA2C,gBAAgB,EAE3F,IAAMwD,EAAQnD,GAAQ,OAAOV,EAAM,GAAK,EAAE,EAAG,CAAE,IAAKI,EAAa,gBAAiB,CAAC,EAKnF,GAAI,CAJO,MAAMoE,GAAqB,KAAK,OAAQ/B,EAAO,UAAW,CACjE,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,KAAM0B,GAAW,MAC3D,OAAQE,EAAM,KAAM,KAAK,OAAQ,WAAAL,EAAY,MAAAH,CACjD,EAAGnD,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,qCAAsC,eAAe,EAO1F,GADI,KAAK,YAAcoC,EAAO,WAAa,KAAK,WAAW,IAAI4B,CAAI,GAC/DE,GAAYvE,EAAM,KAAK,IAAM,KAAK,MAAO,OAE7C,IAAM4D,EAAQ,KAAK,MACbP,EAAO,CAAE,KAAM,SAAU,UAAW,KAAM,MAAAQ,EAAO,MAAAD,EAAO,MAAO,IAAK,EAC1E,KAAK,WAAW,IAAIS,EAAMhB,CAAI,EAE9B,GAAI,CACA,IAAMU,EAAO,MAAM,KAAK,MAAM,aAAaM,EAAML,CAAU,EACrDhC,EAAY+B,GAAQA,EAAK,UACzBU,EAAS,OAAQV,GAAQA,EAAK,YAAe,EAAE,EACrD,GAAI,CAAC/B,GAAa,CAACyC,EAAQ,MAAM,IAAIpE,EAAkB,oCAAqC,eAAe,EAE3G,GAAI,CAAC,KAAK,iBAAiBgE,EAAMhB,CAAI,EAAG,OAAO,KAAK,aAAagB,EAAMhB,EAAMrB,CAAS,EACtFqB,EAAK,UAAYrB,EACjB,KAAK,cAAc,IAAIA,CAAS,EAChC,KAAK,YAAYqC,EAAMrC,EAAWF,GAAa,OAAO,EAEtD,IAAMmC,EAAM,MAAMC,GAAmB,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAChF,QAAS,KAAK,QAAS,MAAAN,EAAO,KAAMO,GAAW,OAC/C,OAAQ,KAAK,OAAQ,KAAME,EAAM,WAAYI,EAAQ,MAAAZ,CACzD,CAAC,EAMD,GAAI,CALS,MAAM,KAAK,QAAQQ,EAAM,CAClC,KAAM5E,GAAa,YAAa,IAAK,KAAK,QAAS,MAAAmE,EACnD,KAAM,KAAK,OAAQ,GAAIS,EAAM,EAAGI,EAChC,EAAGtE,GAAM0D,CAAK,EAAG,IAAK1D,GAAM8D,CAAG,CACnC,CAAC,EACU,MAAM,IAAI5D,EAAkB,+BAAgC,aAAa,EAEpFgD,EAAK,MAAQ,KAAK,OAAO,IAAM,KAAK,UAAUgB,EAAM,gBAAgB,EAAG1D,GAAS,YAAY,CAChG,OAASyD,EAAO,CACZ,KAAK,UAAUC,EAAMD,GAAO,MAAQ,eAAe,CACvD,CACJ,CAEA,MAAM,cAAcpE,EAAO,CACvB,GAAI,CAAC,KAAK,OAAS,KAAK,WAAY,OACpC,IAAMqE,EAAOC,GAAkB,OAAOtE,EAAM,MAAQ,EAAE,CAAC,EAEvD,GADIsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,IAAM,KAAK,QACnDuE,GAAYvE,EAAM,KAAK,IAAM,KAAK,MAAO,OAE7C,IAAMqD,EAAO,KAAK,WAAW,IAAIgB,CAAI,EACrC,GAAI,CAAChB,GAAQA,EAAK,OAAS,SAAW,CAACA,EAAK,WAAaA,EAAK,QAAU,KAAK,MAAO,OAEpF,IAAMZ,EAAS,KAAK,QAAQ,IAAI4B,CAAI,EACpC,GAAI,CAAC5B,GAAU,CAACA,EAAO,UACnB,MAAM,IAAIpC,EAAkB,gCAAiC,cAAc,EAG/E,IAAM2D,EAAa,OAAOhE,EAAM,GAAK,EAAE,EACvC,GAAI,CAACgE,GAAcA,EAAW,OAAS5D,EAAa,qBAChD,MAAM,IAAIC,EAAkB,0CAA2C,gBAAgB,EAI3F,IAAMwD,EAAQnD,GAAQ,OAAOV,EAAM,GAAK,EAAE,EAAG,CAAE,IAAKI,EAAa,gBAAiB,CAAC,EACnF,GAAIyD,EAAM,SAAWR,EAAK,MAAM,QAAU,CAACQ,EAAM,MAAM,CAACa,EAAGzB,IAAMyB,IAAMrB,EAAK,MAAMJ,CAAC,CAAC,EAChF,MAAM,IAAI5C,EAAkB,gDAAiD,gBAAgB,EAOjG,GAAI,CAJO,MAAMmE,GAAqB,KAAK,OAAQ/B,EAAO,UAAW,CACjE,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,KAAM0B,GAAW,OAC3D,OAAQE,EAAM,KAAM,KAAK,OAAQ,WAAAL,EAAY,MAAAH,CACjD,EAAGnD,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,uCAAwC,eAAe,EAE5F,GAAI,CACA,MAAM,KAAK,MAAM,aAAagD,EAAK,UAAWW,CAAU,CAC5D,OAASI,EAAO,CACZ,KAAK,UAAUC,EAAMD,GAAO,MAAQ,iBAAiB,CACzD,CAGJ,CAEA,aAAapE,EAAO,CAChB,IAAMqE,EAAOC,GAAkB,OAAOtE,EAAM,MAAQ,EAAE,CAAC,EACnDsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,IAAM,KAAK,QAClD,KAAK,WAAW,IAAIqE,CAAI,GAE7B,KAAK,UAAUA,EAAM,eAAgB,CAAE,SAAU,EAAM,CAAC,CAC5D,CAkBA,MAAM,aAAarC,EAAW,CAG1B,OAFI,KAAK,YAAc,CAAC,KAAK,OAAS,CAACA,GACnC,KAAK,QAAUL,EAAY,OAAS,CAAC,KAAK,cAC1C,KAAK,YAAY,IAAIK,CAAS,EAAU,GACrC,KAAK,WAAWA,CAAS,CACpC,CAUA,MAAM,WAAWA,EAAW,CACxB,GAAI,KAAK,YAAc,KAAK,QAAQ,IAAIA,CAAS,EAAG,MAAO,GAC3D,IAAM2C,EAAS,KAAK,iBAAiB3C,CAAS,EAC9C,GAAI,CAAC2C,EAAQ,MAAO,GAEpB,KAAK,QAAQ,IAAI3C,CAAS,EAC1B,IAAMiC,EAAM,MAAMW,GAAc,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAC3E,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,GAAI,KAAK,OAAQ,OAAAD,CAC/D,CAAC,EACD,aAAM,KAAK,MAAM3C,EAAW,CACxB,KAAMvC,GAAa,MAAO,IAAK,KAAK,QAAS,MAAO,KAAK,MACzD,GAAI,KAAK,OAAQ,IAAKU,GAAM8D,CAAG,CACnC,CAAC,EACM,EACX,CAEA,iBAAiBjC,EAAW,CACxB,GAAI,CACA,IAAMM,EAAK,KAAK,OAAO,kBAAkBN,CAAS,EAClD,OAAO,OAAOM,GAAO,UAAYA,EAAG,OAAS,EAAIA,EAAK,EAC1D,MAAY,CACR,MAAO,EACX,CACJ,CAEA,MAAM,SAASN,EAAWhC,EAAO,CAG7B,GAFI,KAAK,YACL,KAAK,QAAU2B,EAAY,OAAS,CAAC,KAAK,cAC1C4C,GAAYvE,EAAM,KAAK,IAAM,KAAK,MAAO,OAE7C,IAAMsC,EAAKgC,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EACnD,GAAIsC,IAAO,KAAK,OAAQ,OACxB,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAIlC,GAHI,CAACG,GAAU,CAACA,EAAO,WACnB,KAAK,YAAY,IAAIT,CAAS,GAE9BS,EAAO,YAEHA,EAAO,QAAUX,GAAa,QAM9B,CAAC,KAAK,WAAW,IAAIQ,CAAE,GAAG,OAMlC,IAAMqC,EAAS,KAAK,iBAAiB3C,CAAS,EAC9C,GAAI,CAAC2C,EAAQ,OAKb,GAAI,CAHO,MAAME,GAAgB,KAAK,OAAQpC,EAAO,UAAW,CAC5D,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,GAAAH,EAAI,OAAAqC,CAClD,EAAGjE,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,sCAAuC,eAAe,EAI3F,KAAK,YAAYiC,CAAE,EACnB,KAAK,YAAYA,EAAIN,EAAWF,GAAa,MAAM,EAQnD,KAAK,WAAWE,CAAS,EAAE,MAAM,IAAM,CAAkC,CAAC,EAE1E,KAAK,sBAAsB,CAC/B,CAUA,MAAM,OAAO8C,EAAO,CAChB,GAAI,CAAC,KAAK,QAAS,MAAM,IAAIzE,EAAkB,yBAA0B,WAAW,EAEpF,GADA,MAAM,KAAK,KAAK,EACZyE,EAAM,OAAS,EAAI1E,EAAa,YAChC,MAAM,IAAIC,EAAkB,yBAAyBD,EAAa,WAAW,WAAY,kBAAkB,EAE/G,KAAK,UAAUuB,EAAY,OAAO,EAElC,QAAWoD,KAAQD,EAAO,KAAK,eAAe,IAAIC,EAAK,UAAWA,EAAK,MAAQ,QAAQ,EAEvF,IAAM/E,EAAQ,CACV,KAAMP,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,KAAM,KAAK,KACX,UAAWU,GAAM,KAAK,SAAS,IAAI,CACvC,EASM0C,EAAU,MAAM,QAAQ,WAAWiC,EAAM,IAAKE,GAAM,KAAK,MAAMA,EAAE,UAAWhF,CAAK,CAAC,CAAC,EACnFiF,EAASpC,EAAQ,OAAQqC,GAAMA,EAAE,SAAW,UAAU,EAC5D,GAAID,EAAO,SAAWH,EAAM,OACxB,WAAK,MAAM,+BAA+B,EACpC,IAAIzE,EACN,mFACA,+BACJ,EAEJ,GAAI4E,EAAO,OAAS,EAAG,CAGnB,IAAME,EAAYL,EAAM,OAAO,CAACM,EAAGnC,IAAMJ,EAAQI,CAAC,EAAE,SAAW,WAAW,EAC1E,QAAW+B,KAAKF,EACPK,EAAU,SAASH,CAAC,GAAG,KAAK,eAAe,OAAOA,EAAE,SAAS,EAEtE,KAAK,MAAM,iBAAkB,CAAE,KAAMG,EAAU,OAAQ,MAAOL,EAAM,MAAO,CAAC,CAChF,CAEA,KAAK,OAAO,IAAM,CACV,KAAK,QAAUnD,EAAY,SAAS,KAAK,MAAM,0BAA0B,CACjF,EAAGhB,GAAS,QAAQ,CACxB,CAGA,MAAM,aAAaqB,EAAWzB,EAAU,CAGpC,IAAMP,EAAQM,GAAeC,CAAQ,EACrC,MAAM,KAAK,KAAK,EAChB,IAAM8E,EAAY3E,GAAQ,OAAOV,EAAM,WAAa,EAAE,CAAC,EACjD,CAAE,UAAAsF,EAAW,YAAAC,CAAY,EAAI,MAAMC,GAAqB,KAAK,OAAQH,CAAS,EACpF,KAAK,QAAUE,EACf,KAAK,MAAQhB,GAAYvE,EAAM,KAAK,EACpC,KAAK,KAAO0B,GAAW1B,EAAM,IAAI,EAEjC,KAAK,QAAQ,IAAIuF,EAAa,CAC1B,GAAIA,EACJ,KAAM,QACN,KAAMF,EACN,UAAAC,EACA,UAAAtD,EACA,MAAOF,GAAa,MACxB,CAAC,EACD,KAAK,YAAY,IAAIE,EAAWuD,CAAW,EAC3C,KAAK,UAAU5D,EAAY,OAAO,EAClC,KAAK,aAAa,EAElB,MAAM,KAAK,MAAMK,EAAW,CACxB,KAAMvC,GAAa,MACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,KAAMU,GAAM,KAAK,SAAS,IAAI,CAClC,CAAC,EAED,KAAK,OAAO,IAAM,CACV,KAAK,QAAUwB,EAAY,SAAS,KAAK,MAAM,sBAAsB,CAC7E,EAAGhB,GAAS,QAAQ,CACxB,CAEA,MAAM,SAASqB,EAAWhC,EAAO,CAC7B,GAAI,CAAC,KAAK,QAAS,OAgBnB,GAAI,CAAC,KAAK,eAAe,IAAIgC,CAAS,EAAG,CACrC,KAAK,KAAK,OAAQ,qCAAsC,CAAE,QAAS,KAAK,OAAQ,CAAC,EACjF,MACJ,CAEA,IAAMyD,EAAO/E,GAAQ,OAAOV,EAAM,MAAQ,EAAE,CAAC,EACvC,CAAE,UAAAsF,EAAW,YAAAC,CAAY,EAAI,MAAMC,GAAqB,KAAK,OAAQC,CAAI,EAC/E,GAAI,OAAK,QAAQ,IAAIF,CAAW,GAAKA,IAAgB,KAAK,QAC1D,IAAI,KAAK,QAAQ,MAAQnF,EAAa,YAAa,MAAM,IAAIC,EAAkB,gBAAiB,kBAAkB,EAclH,GAZA,KAAK,QAAQ,IAAIkF,EAAa,CAC1B,GAAIA,EACJ,KAAM,KAAK,eAAe,IAAIvD,CAAS,GAAK,SAC5C,KAAAyD,EACA,UAAAH,EACA,UAAAtD,EACA,MAAOF,GAAa,MACxB,CAAC,EACD,KAAK,YAAY,IAAIE,EAAWuD,CAAW,EAC3C,KAAK,eAAe,OAAOvD,CAAS,EACpC,KAAK,aAAa,EAEd,KAAK,eAAe,OAAS,EAAG,CAChC,GAAI,KAAK,YAAa,OAAO,KAAK,WAAW,EAC7C,MAAM,KAAK,cAAc0D,GAAW,MAAM,CAC9C,EACJ,CAOA,MAAM,cAAcC,EAAKD,GAAW,IAAK,CACrC,GAAI,CAAC,KAAK,QAAS,MAAM,IAAIrF,EAAkB,sCAAuC,WAAW,EACjG,IAAMuF,EAAYjC,GAAsB,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,CAAC,EAC1DkC,EAAS,CAAE,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,GAAAF,EAAI,UAAAC,EAAW,KAAM,KAAK,IAAK,EACpF3B,EAAM,MAAM6B,GAAa,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAYD,CAAM,EAWpF,QAAWvD,KAAMsD,EAAW,CACxB,IAAMxD,EAAI,KAAK,QAAQ,IAAIE,CAAE,EAC7B,MAAM,KAAK,WAAW,CAClB,KAAM7C,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,GAAA6C,EACA,KAAMF,EAAE,OAAS,MAAQ,QAAUA,EAAE,KACrC,KAAMjC,GAAMiC,EAAE,IAAI,CACtB,CAAC,CACL,CAEA,MAAM,KAAK,WAAW,CAClB,KAAM3C,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,GAAAkG,EACA,KAAM,KAAK,KACX,UAAWxF,GAAM,KAAK,SAAS,IAAI,EACnC,QAASyF,EACT,IAAKzF,GAAM8D,CAAG,CAClB,CAAC,EACD,MAAM,KAAK,eAAe,CAC9B,CAUA,MAAM,aAAajE,EAAO,CAGtB,GAFcuE,GAAYvE,EAAM,KAAK,EACzB,KAAK,OACb,KAAK,aAAa,KAAOI,EAAa,YAAc,EAAG,OAE3D,IAAMqF,EAAO/E,GAAQ,OAAOV,EAAM,MAAQ,EAAE,CAAC,EACvC,CAAE,UAAAsF,EAAW,YAAAC,CAAY,EAAI,MAAMC,GAAqB,KAAK,OAAQC,CAAI,EAC/E,GAAInB,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,IAAMuF,EAC9C,MAAM,IAAIlF,EAAkB,4CAA6C,sBAAsB,EAEnG,KAAK,aAAa,IAAIkF,EAAa,CAAE,KAAAE,EAAM,UAAAH,EAAW,KAAM5D,GAAW1B,EAAM,IAAI,CAAE,CAAC,CACxF,CAWA,MAAM,UAAUgC,EAAWhC,EAAO,CAC9B,IAAM4D,EAAQW,GAAYvE,EAAM,KAAK,EACrC,GAAI,KAAK,QAAS,OAClB,GAAI4D,EAAQ,KAAK,MAAO,MAAM,IAAIvD,EAAkB,8BAA+B,aAAa,EAEhG,IAAMgF,EAAY3E,GAAQ,OAAOV,EAAM,WAAa,EAAE,CAAC,EACjD,CAAE,UAAW+F,EAAU,YAAaC,CAAQ,EAAI,MAAMR,GAAqB,KAAK,OAAQH,CAAS,EACvG,GAAI,KAAK,SAAWW,IAAY,KAAK,QACjC,MAAM,IAAI3F,EAAkB,oDAAqD,aAAa,EAGlG,GAAI,CAAC,MAAM,QAAQL,EAAM,OAAO,EAAG,MAAM,IAAIK,EAAkB,gCAAiC,YAAY,EAC5G,GAAIL,EAAM,QAAQ,OAASI,EAAa,YAAa,MAAM,IAAIC,EAAkB,kCAAmC,kBAAkB,EAEtI,IAAMuF,EAAYjC,GAAsB3D,EAAM,QAAQ,IAAKsC,GAAO,OAAOA,GAAM,EAAE,CAAC,CAAC,EACnF,GAAI,CAACsD,EAAU,SAAS,KAAK,MAAM,EAAG,MAAM,IAAIvF,EAAkB,6BAA8B,cAAc,EAC9G,GAAI,CAACuF,EAAU,SAASI,CAAO,EAAG,MAAM,IAAI3F,EAAkB,qCAAsC,YAAY,EAMhH,IAAM4F,EAAW,CAAC,EAClB,QAAW3D,KAAMsD,EAAW,CACxB,GAAItD,IAAO,KAAK,OAAQ,CACpB2D,EAAS,KAAK,CAAE,GAAA3D,EAAI,KAAM,MAAO,KAAM,KAAK,SAAS,KAAM,UAAW,IAAK,CAAC,EAC5E,QACJ,CACA,IAAM4D,EAAS,KAAK,aAAa,IAAI5D,CAAE,IAAMA,IAAO0D,EAC9C,CAAE,KAAMX,EAAW,UAAWU,EAAU,KAAM,OAAQ,EACtD,MACN,GAAI,CAACG,EAAQ,MAAM,IAAI7F,EAAkB,gDAAiD,oBAAoB,EAC9G4F,EAAS,KAAK,CAAE,GAAA3D,EAAI,KAAM4D,EAAO,KAAM,KAAMA,EAAO,KAAM,UAAWA,EAAO,SAAU,CAAC,CAC3F,CAMA,GAAI,CAJO,MAAMC,GAAe,KAAK,OAAQJ,EAAU,CACnD,QAAS,KAAK,QAAS,MAAAnC,EAAO,GAAI,OAAO5D,EAAM,IAAM,EAAE,EACvD,UAAA4F,EAAW,KAAMlE,GAAW1B,EAAM,IAAI,CAC1C,EAAGU,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,kCAAmC,eAAe,EAIvF,KAAK,MAAQuD,EACb,KAAK,KAAOlC,GAAW1B,EAAM,IAAI,EACjC,KAAK,QAAUgG,EAEf,IAAMI,EAAW,KAAK,QACtB,KAAK,QAAU,IAAI,IACnB,QAAWhE,KAAK6D,EAAU,CACtB,IAAMI,EAAMD,EAAS,IAAIhE,EAAE,EAAE,EAC7B,KAAK,QAAQ,IAAIA,EAAE,GAAI,CACnB,GAAIA,EAAE,GACN,KAAMA,EAAE,KAAO,KAAK,OAAS,MAAQA,EAAE,KACvC,KAAMA,EAAE,KACR,UAAWA,EAAE,KAAO,KAAK,OAAS,KAAOA,EAAE,UAC3C,UAAWiE,GAAK,WAAa,KAC7B,MAAOjE,EAAE,KAAO,KAAK,OAASN,GAAa,KACpCuE,GAAK,QAAUvE,GAAa,OAASA,GAAa,OAASA,GAAa,OACnF,CAAC,CACL,CAEA,OAAW,CAACwE,EAAKhE,CAAE,GAAK,CAAC,GAAG,KAAK,WAAW,EACnC,KAAK,QAAQ,IAAIA,CAAE,GAAG,KAAK,YAAY,OAAOgE,CAAG,EAG1D,KAAK,MAAM,SAAU,CAAE,KAAM,KAAK,KAAM,MAAO,KAAK,MAAO,QAAAN,CAAQ,CAAC,EACpE,KAAK,aAAa,EAClB,MAAM,KAAK,eAAe,CAC9B,CAMA,MAAM,gBAAiB,CACnB,GAAI,CAAE,KAAK,UAAU,QAAQ,CAAG,MAAY,CAAC,CAI7C,KAAK,WAAW,EAChB,KAAK,SAAW,IAAIO,GAAiB,CACjC,QAAS,KAAK,QACd,MAAO,KAAK,MACZ,gBAAiB,KAAK,OACtB,mBAAoB,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,CAC/C,CAAC,EACD,KAAK,UAAU5E,EAAY,UAAU,EAErC,IAAM6E,EAAa,MAAM,KAAK,SAAS,cAAc,KAAK,MAAM,EAahE,MAAM,KAAK,WAAW,CAClB,KAAM/G,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,GAAI,KAAK,OACT,OAAQU,GAAMqG,CAAU,CAC5B,CAAC,EAED,IAAMC,EAAe,KAAK,MAC1B,KAAK,OAAO,IAAM,CACV,KAAK,QAAUA,IACf,KAAK,QAAU9E,EAAY,YAAc,KAAK,QAAUA,EAAY,YACpE,KAAK,MAAM,oBAAoB,CAEvC,EAAGhB,GAAS,WAAW,EAKvB,MAAM,KAAK,sBAAsB,EACjC,MAAM,KAAK,aAAa,CAC5B,CAGA,mBAAmBX,EAAO,CAIlB,KAAK,iBAAiB,QAAUI,EAAa,YAAc,GAC/D,KAAK,iBAAiB,KAAKJ,CAAK,CACpC,CAEA,MAAM,uBAAwB,CAG1B,GAAI,MAAK,UACT,MAAK,UAAY,GACjB,GAAI,CACA,IAAM0G,EAAO,KAAK,iBAClB,KAAK,iBAAmB,CAAC,EACzB,QAAW1G,KAAS0G,EAChB,GAAI,CACI1G,EAAM,OAASP,GAAa,OAAQ,MAAM,KAAK,UAAUO,CAAK,EACzDA,EAAM,OAASP,GAAa,QAAQ,MAAM,KAAK,UAAUO,CAAK,CAC3E,OAASoE,EAAO,CAGZ,KAAK,KAAK,OAAQ,gCAAiC,CAAE,KAAMA,GAAO,IAAK,CAAC,CAC5E,CAER,QAAE,CACE,KAAK,UAAY,EACrB,EACJ,CAEA,MAAM,UAAUpE,EAAO,CACnB,GAAI,CAAC,KAAK,SAAU,OAAO,KAAK,mBAAmBA,CAAK,EACpDuE,GAAYvE,EAAM,KAAK,IAAM,KAAK,QACtC,KAAK,SAAS,iBACVsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EACxCU,GAAQ,OAAOV,EAAM,QAAU,EAAE,EAAG,CAAE,IAAKI,EAAa,YAAa,CAAC,CAC1E,EAEA,MAAM,KAAK,sBAAsB,EACjC,MAAM,KAAK,aAAa,EAC5B,CASA,MAAM,cAAe,CAEjB,GADI,CAAC,KAAK,UAAY,KAAK,SAAS,UAChC,CAAC,KAAK,SAAS,oBAAqB,OAExC,KAAK,UAAUuB,EAAY,SAAS,EACpC,IAAMkC,EAAQ,KAAK,SAAS,OAAO,EACnC,MAAM,KAAK,WAAW,CAClB,KAAMpE,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,GAAI,KAAK,OACT,MAAOU,GAAM0D,CAAK,CACtB,CAAC,EACD,MAAM,KAAK,aAAa,CAC5B,CAEA,MAAM,UAAU7D,EAAO,CACnB,GAAI,CAAC,KAAK,SAAU,OAAO,KAAK,mBAAmBA,CAAK,EACxD,GAAIuE,GAAYvE,EAAM,KAAK,IAAM,KAAK,MAItC,IAAI,CAAC,KAAK,SAAS,YAAY,IAAIsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,CAAC,EACxE,OAAO,KAAK,mBAAmBA,CAAK,EAExC,MAAM,KAAK,SAAS,aAChB,KAAK,OACLsE,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EACxCU,GAAQ,OAAOV,EAAM,OAAS,EAAE,EAAG,CAAE,IAAKI,EAAa,WAAY,CAAC,CACxE,EACA,MAAM,KAAK,aAAa,EAC5B,CAEA,MAAM,cAAe,CAIjB,GAHI,CAAC,KAAK,UAAY,CAAC,KAAK,SAAS,iBAGjC,KAAK,QAAS,OAClB,IAAMW,EAAO,MAAM,KAAK,SAAS,OAAO,KAAK,MAAM,EACnD,KAAK,UAAUY,EAAY,YAAY,EACvC,KAAK,QAAUZ,EACf,KAAK,MAAM,MAAO,CAAE,KAAAA,CAAK,CAAC,CAC9B,CASA,YAAa,CACT,GAAI,KAAK,QAAUY,EAAY,cAAgB,CAAC,KAAK,QACjD,MAAM,IAAItB,EAAkB,oCAAqC,SAAS,EAE9E,KAAK,aAAe,GACpB,KAAK,MAAQsB,EAAY,MACzB,GAAI,CAAE,KAAK,UAAU,QAAQ,CAAG,MAAY,CAAC,CAC7C,KAAK,SAAW,KAChB,KAAK,MAAM,YAAa,CAAE,QAAS,KAAK,gBAAgB,CAAE,CAAC,EAI3D,KAAK,sBAAsB,CAC/B,CAGA,MAAM,cAAcgF,EAAe,CAC/B,OAAOC,GAAgB,KAAK,OAAQ,CAChC,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,cAAAD,CAC9C,CAAC,CACL,CAMA,MAAM,SAASE,EAAM,CACjB,GAAI,KAAK,QAAUlF,EAAY,OAAS,CAAC,KAAK,aAC1C,MAAM,IAAItB,EAAkB,wCAAyC,WAAW,EAEpF,IAAMyG,EAAO,OAAOD,GAAQ,EAAE,EAC9B,GAAI,CAACC,EAAK,KAAK,EAAG,MAAM,IAAIzG,EAAkB,gBAAiB,OAAO,EAEtE,IAAM0G,EAAM,EAAE,KAAK,IACbC,EAAW,MAAMC,GAAS,KAAK,OAAQH,CAAI,EAC3C7C,EAAM,MAAMiD,GAAiB,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAC9E,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,IAAAH,EAAK,SAAU,KAAK,OAAQ,SAAAC,CAC1E,CAAC,EAEKhH,EAAQ,CACV,KAAMP,GAAa,QACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,IAAAsH,EACA,GAAI,KAAK,OACT,GAAI,KAAK,IAAI,EACb,KAAAD,EACA,IAAK3G,GAAM8D,CAAG,CAClB,EACM,CAAE,UAAAlB,EAAW,YAAAD,CAAY,EAAI,MAAM,KAAK,WAAW9C,CAAK,EAC9D,MAAO,CAAE,IAAA+G,EAAK,UAAAhE,EAAW,MAAO,KAAK,QAAQ,KAAO,EAAG,YAAAD,CAAY,CACvE,CAEA,MAAM,WAAW9C,EAAO,CAAE,QAAAmH,EAAU,EAAM,EAAI,CAAC,EAAG,CAC9C,IAAMvD,EAAQW,GAAYvE,EAAM,KAAK,EAC/B+G,EAAMxC,GAAYvE,EAAM,GAAG,EAC3BoH,EAAW9C,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EAEzD,GAAIoH,IAAa,KAAK,OAAQ,OAC9B,IAAM3E,EAAS,KAAK,QAAQ,IAAI2E,CAAQ,EACxC,GAAI,CAAC3E,GAAU,CAACA,EAAO,UAAW,MAAM,IAAIpC,EAAkB,4BAA6B,cAAc,EAIzG,GAAIuD,IAAU,KAAK,MAAO,MAAM,IAAIvD,EAAkB,6BAA8B,aAAa,EAEjG,IAAMyG,EAAO,OAAO9G,EAAM,MAAQ,EAAE,EAC9BgH,EAAW,MAAMC,GAAS,KAAK,OAAQH,CAAI,EAIjD,GAAI,CAHO,MAAMO,GAAmB,KAAK,OAAQ5E,EAAO,UAAW,CAC/D,QAAS,KAAK,QAAS,MAAAmB,EAAO,IAAAmD,EAAK,SAAAK,EAAU,SAAAJ,CACjD,EAAGtG,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,mCAAoC,eAAe,EAUxF,IAAMiH,EAAW,KAAK,WAAW,IAAIF,CAAQ,GAAK,IAAI,IAChDG,EAAUpH,GAAM6G,CAAQ,EACxBZ,EAAWkB,EAAS,IAAIP,CAAG,EACjC,GAAIX,IAAa,OAAW,CACxB,GAAIA,IAAamB,EAAS,OAC1B,WAAK,MAAM,gBAAiB,CAAE,GAAIH,EAAU,IAAAL,EAAK,KAAMtE,EAAO,IAAK,CAAC,EAC9D,IAAIpC,EAAkB,6DAA8D,kBAAkB,CAChH,CAEAiH,EAAS,IAAIP,EAAKQ,CAAO,EAGrBD,EAAS,KAAO,KAAKA,EAAS,OAAOA,EAAS,KAAK,EAAE,KAAK,EAAE,KAAK,EACrE,KAAK,WAAW,IAAIF,EAAUE,CAAQ,EAEtC,KAAK,MAAM,UAAW,CAClB,GAAIF,EACJ,KAAM3E,EAAO,KACb,KAAAqE,EACA,IAAAC,EACA,GAAI,OAAO,SAAS/G,EAAM,EAAE,EAAIA,EAAM,GAAK,KAAK,IAAI,EAKpD,QAAAmH,CACJ,CAAC,CACL,CAgCA,iBAAkB,CACd,GAAI,CAAC,KAAK,KAAM,OAAO,KACvB,IAAMK,EAAU,KAAK,QAAQ,IAAI,KAAK,KAAK,SAAS,EACpD,MAAO,CACH,OAAQ,KAAK,KAAK,OAClB,UAAW,KAAK,KAAK,UACrB,cAAe,KAAK,KAAK,YAAc,KAAK,OACtC,MACCA,GAAS,MAAQ,WACxB,UAAW,KAAK,KAAK,UACrB,UAAW,KAAK,KAAK,UACrB,OAAQ,KAAK,KAAK,OAClB,aAAc,CAAC,GAAG,KAAK,KAAK,YAAY,EAAE,IAAKlF,GAAO,CAClD,IAAMG,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,MAAO,CACH,GAAAA,EACA,KAAMA,IAAO,KAAK,OAAS,MAASG,GAAQ,MAAQ,WACpD,KAAMH,IAAO,KAAK,OAClB,UAAWG,GAAQ,WAAa,KAChC,MAAOA,GAAQ,OAASX,GAAa,IACzC,CACJ,CAAC,EAAE,KAAK,CAAC2F,EAAG/C,IAAO+C,EAAE,GAAK/C,EAAE,GAAK,GAAK+C,EAAE,GAAK/C,EAAE,GAAK,EAAI,CAAE,CAC9D,CACJ,CAEA,WAAY,CACR,KAAK,MAAM,OAAQ,CAAE,KAAM,KAAK,gBAAgB,CAAE,CAAC,CACvD,CAEA,eAAgB,CACZ,GAAI,KAAK,QAAU/C,EAAY,OAAS,CAAC,KAAK,aAC1C,MAAM,IAAItB,EAAkB,wCAAyC,WAAW,CAExF,CAGA,MAAM,eAAeqH,EAAQC,EAAQC,EAAW,CAC5C,IAAMb,EAAM,EAAE,KAAK,QACb9C,EAAM,MAAM4D,GAAc,KAAK,OAAQ,KAAK,SAAS,QAAQ,WAAY,CAC3E,QAAS,KAAK,QAAS,MAAO,KAAK,MAAO,OAAAF,EAAQ,OAAAD,EAClD,GAAI,KAAK,OAAQ,IAAAX,EAAK,UAAAa,CAC1B,CAAC,EACD,OAAO,KAAK,WAAW,CACnB,KAAMnI,GAAa,KACnB,IAAK,KAAK,QACV,MAAO,KAAK,MACZ,OAAAkI,EACA,OAAAD,EACA,GAAI,KAAK,OACT,IAAAX,EACA,EAAGa,IAAc,GACjB,GAAI,KAAK,IAAI,EACb,IAAKzH,GAAM8D,CAAG,CAClB,CAAC,CACL,CASA,MAAM,UAAU,CAAE,UAAA2D,EAAY,GAAO,QAAAE,EAAU,IAAK,EAAI,CAAC,EAAG,CAExD,GADA,KAAK,cAAc,EACf,KAAK,KAAM,MAAM,IAAIzH,EAAkB,0CAA2C,kBAAkB,EAExG,IAAMsH,EAASI,GAAU,EACzB,KAAK,KAAO,CACR,OAAAJ,EACA,UAAW,KAAK,OAChB,UAAWC,IAAc,GACzB,UAAW,KAAK,IAAI,EACpB,aAAc,IAAI,IAAI,CAAC,KAAK,MAAM,CAAC,EACnC,OAAQ,EACZ,EACA,KAAK,UAAU,EAIf,KAAK,sBAAsB,EAC3B,GAAI,CAOI,OAAOE,GAAY,YAAY,MAAMA,EAAQ,KAAK,gBAAgB,CAAC,EACvE,GAAM,CAAE,YAAAhF,CAAY,EAAI,MAAM,KAAK,eAAekF,GAAa,MAAOL,EAAQ,KAAK,KAAK,SAAS,EACjG,MAAO,CAAE,OAAAA,EAAQ,YAAA7E,CAAY,CACjC,OAASsB,EAAO,CACZ,WAAK,KAAO,KACZ,KAAK,UAAU,EACTA,CACV,CACJ,CAGA,MAAM,UAAW,CAEb,GADA,KAAK,cAAc,EACf,CAAC,KAAK,KAAM,MAAM,IAAI/D,EAAkB,2BAA4B,SAAS,EACjF,GAAI,KAAK,KAAK,OAAQ,MAAO,CAAE,OAAQ,KAAK,KAAK,OAAQ,YAAa,CAAC,CAAE,EAEzE,KAAK,KAAK,OAAS,GACnB,KAAK,KAAK,aAAa,IAAI,KAAK,MAAM,EACtC,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,GAAM,CAAE,YAAAyC,CAAY,EAAI,MAAM,KAAK,eAAekF,GAAa,KAAM,KAAK,KAAK,OAAQ,KAAK,KAAK,SAAS,EAC1G,MAAO,CAAE,OAAQ,KAAK,KAAK,OAAQ,YAAAlF,CAAY,CACnD,CASA,MAAM,WAAY,CACd,GAAI,CAAC,KAAK,KAAM,OAChB,IAAM6E,EAAS,KAAK,KAAK,OACnBC,EAAY,KAAK,KAAK,UAC5B,KAAK,KAAK,OAAS,GACnB,KAAK,KAAK,aAAa,OAAO,KAAK,MAAM,EACrC,KAAK,KAAK,aAAa,OAAS,IAAG,KAAK,KAAO,MACnD,KAAK,UAAU,EACf,GAAI,CACA,MAAM,KAAK,eAAeI,GAAa,MAAOL,EAAQC,CAAS,CACnE,MAAY,CAA+B,CAC/C,CAWA,cAActF,EAAI,CACV,CAAC,KAAK,MAAQ,CAAC,KAAK,KAAK,aAAa,IAAIA,CAAE,IAChD,KAAK,KAAK,aAAa,OAAOA,CAAE,EAC5B,KAAK,KAAK,aAAa,OAAS,IAAG,KAAK,KAAO,MACnD,KAAK,UAAU,EACnB,CAEA,MAAM,QAAQtC,EAAO,CACjB,IAAM4D,EAAQW,GAAYvE,EAAM,KAAK,EAC/B+G,EAAMxC,GAAYvE,EAAM,GAAG,EAC3BoH,EAAW9C,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EACnD2H,EAASM,GAAa,OAAOjI,EAAM,QAAU,EAAE,CAAC,EAChD0H,EAAS,OAAO1H,EAAM,QAAU,EAAE,EAClC4H,EAAY5H,EAAM,IAAM,GAE9B,GAAIoH,IAAa,KAAK,OAAQ,OAC9B,IAAM3E,EAAS,KAAK,QAAQ,IAAI2E,CAAQ,EACxC,GAAI,CAAC3E,GAAU,CAACA,EAAO,UAAW,MAAM,IAAIpC,EAAkB,+BAAgC,cAAc,EAC5G,GAAIuD,IAAU,KAAK,MAAO,MAAM,IAAIvD,EAAkB,gCAAiC,aAAa,EAMpG,IAAM6H,EAAO,KAAK,UAAU,IAAId,CAAQ,EACxC,GAAIc,IAAS,QAAanB,GAAOmB,EAAM,OAKvC,GAAI,CAHO,MAAMC,GAAgB,KAAK,OAAQ1F,EAAO,UAAW,CAC5D,QAAS,KAAK,QAAS,MAAAmB,EAAO,OAAA+D,EAAQ,OAAAD,EAAQ,GAAIN,EAAU,IAAAL,EAAK,UAAAa,CACrE,EAAGlH,GAAQ,OAAOV,EAAM,KAAO,EAAE,EAAG,CAAE,IAAKI,EAAa,aAAc,CAAC,CAAC,EAC/D,MAAM,IAAIC,EAAkB,sCAAuC,eAAe,EAM3F,GALA,KAAK,UAAU,IAAI+G,EAAUL,CAAG,EAK5B,OAAK,QAAUpF,EAAY,OAAS,CAAC,KAAK,cAE9C,OAAQ+F,EAAQ,CACZ,KAAKM,GAAa,MAAO,CACrB,GAAI,KAAK,MAAQ,KAAK,KAAK,SAAWL,EAAQ,CAK1C,GAAIA,GAAU,KAAK,KAAK,OAAQ,OAGhC,KAAK,KAAO,IAChB,CACK,KAAK,KAUN,KAAK,KAAK,aAAa,IAAIP,CAAQ,EATnC,KAAK,KAAO,CACR,OAAAO,EACA,UAAWP,EACX,UAAAQ,EACA,UAAW,KAAK,IAAI,EACpB,aAAc,IAAI,IAAI,CAACR,CAAQ,CAAC,EAChC,OAAQ,EACZ,EAIJ,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,MACJ,CACA,KAAKY,GAAa,KAAM,CAEpB,GADI,CAAC,KAAK,MAAQ,KAAK,KAAK,SAAWL,GACnC,KAAK,KAAK,aAAa,IAAIP,CAAQ,EAAG,OAC1C,KAAK,KAAK,aAAa,IAAIA,CAAQ,EAG/BQ,IAAW,KAAK,KAAK,UAAY,IACrC,KAAK,UAAU,EACf,KAAK,sBAAsB,EAC3B,MACJ,CACA,KAAKI,GAAa,MAAO,CACrB,GAAI,CAAC,KAAK,MAAQ,KAAK,KAAK,SAAWL,EAAQ,OAC/C,KAAK,cAAcP,CAAQ,EAC3B,MACJ,CACA,QACI,MACR,CACJ,CAcA,MAAM,YAAYpF,EAAWzB,EAAU,CAAE,QAAA4G,EAAU,EAAM,EAAI,CAAC,EAAG,CAE7D,GADI,KAAK,YACL,CAACvH,GAAaW,CAAQ,EAAG,OAC7B,IAAMP,EAAQM,GAAeC,CAAQ,EACrC,GAAI,GAACP,GAAS,CAACL,GAAkB,IAAIK,EAAM,IAAI,IAC3CyB,GAAc,OAAOzB,EAAM,KAAO,EAAE,CAAC,IAAM,KAAK,QAEpD,OAAQA,EAAM,KAAM,CAChB,KAAKP,GAAa,MACd,OAAO,KAAK,SAASuC,EAAWhC,CAAK,EACzC,KAAKP,GAAa,MACd,OAAO,KAAK,SAASuC,EAAWhC,CAAK,EACzC,KAAKP,GAAa,OACd,OAAO,KAAK,aAAaO,CAAK,EAClC,KAAKP,GAAa,OACd,OAAO,KAAK,UAAUuC,EAAWhC,CAAK,EAC1C,KAAKP,GAAa,OACd,OAAO,KAAK,UAAUO,CAAK,EAC/B,KAAKP,GAAa,OACd,OAAO,KAAK,UAAUO,CAAK,EAC/B,KAAKP,GAAa,QACd,OAAO,KAAK,WAAWO,EAAO,CAAE,QAAAmH,CAAQ,CAAC,EAC7C,KAAK1H,GAAa,MACd,OAAO,KAAK,SAASO,CAAK,EAC9B,KAAKP,GAAa,WACd,OAAO,KAAK,aAAaO,CAAK,EAClC,KAAKP,GAAa,YACd,OAAO,KAAK,cAAcO,CAAK,EACnC,KAAKP,GAAa,WACd,OAAO,KAAK,aAAaO,CAAK,EAClC,KAAKP,GAAa,KACd,OAAO,KAAK,QAAQO,CAAK,EAC7B,KAAKP,GAAa,MAGd,OAAO0H,EAAU,OAAY,KAAK,SAASnF,EAAWhC,CAAK,EAC/D,KAAKP,GAAa,OACd,OACJ,QACI,MACR,CACJ,CASA,MAAM,SAASuC,EAAWhC,EAAO,CAC7B,IAAMoI,EAAK9D,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EAC7CqI,EAAQrI,EAAM,MAEpB,GADI,CAACJ,GAAayI,CAAK,GACnBA,EAAM,OAAS5I,GAAa,MAAO,OAEvC,GAAI2I,IAAO,KAAK,OAAQ,OAAO,KAAK,YAAYpG,EAAWqG,EAAO,CAAE,QAAS,EAAK,CAAC,EACnF,GAAIrI,EAAM,SAAW,GAAM,OAE3B,IAAMyC,EAAS,KAAK,QAAQ,IAAI2F,CAAE,EAC9B,CAAC3F,GAAUA,EAAO,QAAUX,GAAa,QAAU,CAACW,EAAO,WAC/D,MAAM,KAAK,MAAMA,EAAO,UAAW,CAAE,GAAGzC,EAAO,OAAQ,EAAK,CAAC,CACjE,CAEA,MAAM,SAASA,EAAO,CAClB,IAAMsC,EAAKgC,GAAkB,OAAOtE,EAAM,IAAM,EAAE,CAAC,EAC7CyC,EAAS,KAAK,QAAQ,IAAIH,CAAE,EAClC,GAAI,GAACG,GAAUH,IAAO,KAAK,QAS3B,IARA,KAAK,MAAM,OAAQ,CAAE,GAAAA,EAAI,KAAMG,EAAO,IAAK,CAAC,EAC5C,KAAK,cAAcH,CAAE,EAOjB,CAAC,KAAK,SAAWA,IAAO,KAAK,QAAS,CACtC,KAAK,QAAQ,OAAOA,CAAE,EACtB,OAAW,CAACgE,EAAKgC,CAAC,GAAK,CAAC,GAAG,KAAK,WAAW,EAAOA,IAAMhG,GAAI,KAAK,YAAY,OAAOgE,CAAG,EACvF,KAAK,MAAM,QAAS,CAAE,OAAQ,YAAa,CAAC,EAC5C,MACJ,CAIA,GAAK,KAAK,QAEV,MAAK,QAAQ,OAAOhE,CAAE,EACtB,OAAW,CAACgE,EAAKgC,CAAC,GAAK,CAAC,GAAG,KAAK,WAAW,EAAOA,IAAMhG,GAAI,KAAK,YAAY,OAAOgE,CAAG,EAUvF,GALA,KAAK,aAAa,EAKd,KAAK,QAAQ,KAAOlG,EAAa,YAAa,CAC9C,KAAK,MAAM,QAAS,CAAE,OAAQ,kBAAmB,CAAC,EAClD,MACJ,CAEA,KAAK,OAAS,EACd,MAAM,KAAK,cAAcsF,GAAW,MAAM,GAC9C,CASA,MAAM,OAAQ,CACV,GAAI,CACA,MAAM,KAAK,WAAW,CAAE,KAAMjG,GAAa,MAAO,IAAK,KAAK,QAAS,GAAI,KAAK,MAAO,CAAC,CAC1F,MAAY,CAA+B,CAC/C,CAkBA,MAAM,WAAWqF,EAAO,CACpB,GAAI,CAAC,KAAK,QAAS,MAAM,IAAIzE,EAAkB,yBAA0B,WAAW,EACpF,GAAI,CAAC,MAAM,QAAQyE,CAAK,GAAKA,EAAM,SAAW,EAAG,MAAO,GACxD,GAAI,KAAK,YAAa,MAAM,IAAIzE,EAAkB,yCAA0C,eAAe,EAC3G,GAAI,KAAK,QAAQ,KAAOyE,EAAM,OAAS1E,EAAa,YAChD,MAAM,IAAIC,EAAkB,yBAAyBD,EAAa,WAAW,WAAY,kBAAkB,EAM/G,QAAW2E,KAAQD,EACf,GAAI,KAAK,YAAY,IAAIC,EAAK,SAAS,EACnC,MAAM,IAAI1E,EAAkB,8CAA+C,kBAAkB,EAIrG,KAAK,YAAc,CACf,GAAIqF,GAAW,IACf,MAAO,KAAK,MAAQ,EACpB,OAAQ,IAAI,IAAI,KAAK,QAAQ,KAAK,CAAC,CACvC,EACA,QAAWX,KAAQD,EAAO,KAAK,eAAe,IAAIC,EAAK,UAAWA,EAAK,MAAQ,QAAQ,EAIvF,IAAM/E,EAAQ,CACV,KAAMP,GAAa,OACnB,IAAK,KAAK,QACV,MAAO,KAAK,YAAY,MACxB,KAAM,KAAK,KACX,UAAWU,GAAM,KAAK,SAAS,IAAI,CACvC,EACMoI,EAAQ,KAAK,YACb1F,EAAU,MAAM,QAAQ,WAAWiC,EAAM,IAAKE,GAAM,KAAK,MAAMA,EAAE,UAAWhF,CAAK,CAAC,CAAC,EACnFwI,EAAO3F,EAAQ,OAAQqC,GAAMA,EAAE,SAAW,WAAW,EAAE,OAO7D,GAAIsD,IAAS,EAAG,CACZ,QAAWzD,KAAQD,EAAO,KAAK,eAAe,OAAOC,EAAK,SAAS,EACnE,MAAI,KAAK,cAAgBwD,IAAO,KAAK,YAAc,MAC7C,IAAIlI,EACN,qEACA,+BACJ,CACJ,CAEA,OAAAyE,EAAM,QAAQ,CAACC,EAAM9B,IAAM,CACnBJ,EAAQI,CAAC,EAAE,SAAW,YAAY,KAAK,eAAe,OAAO8B,EAAK,SAAS,CACnF,CAAC,EAGG,KAAK,cAAgBwD,GACrB,KAAK,OAAO,IAAM,CAAM,KAAK,cAAgBA,GAAO,KAAK,WAAW,CAAG,EAAG5H,GAAS,QAAQ,EAExF6H,CACX,CAWA,MAAM,YAAa,CACf,IAAMD,EAAQ,KAAK,YACnB,OAAKA,GACL,KAAK,YAAc,KACnB,KAAK,eAAe,MAAM,EAEX,CAAC,GAAG,KAAK,QAAQ,KAAK,CAAC,EAAE,OAAQjG,GAAO,CAACiG,EAAM,OAAO,IAAIjG,CAAE,CAAC,EACjE,SAAW,GAClB,KAAK,MAAM,aAAc,CAAE,OAAQ,eAAgB,CAAC,EAC7C,KAGX,KAAK,MAAQiG,EAAM,MACnB,KAAK,aAAa,EAClB,MAAM,KAAK,cAAcA,EAAM,EAAE,EAC1B,KAbY,EAcvB,CAWA,MAAM,aAAajG,EAAI,CACnB,GAAI,CAAC,KAAK,QAAS,MAAM,IAAIjC,EAAkB,iCAAkC,WAAW,EAC5F,GAAIiC,IAAO,KAAK,OAAQ,MAAM,IAAIjC,EAAkB,qCAAsC,YAAY,EACtG,GAAI,CAAC,KAAK,QAAQ,IAAIiC,CAAE,EAAG,MAAO,GAClC,GAAI,KAAK,QAAQ,KAAO,EAAIlC,EAAa,YACrC,MAAM,IAAIC,EAAkB,gEAA4D,mBAAmB,EAE/G,KAAK,QAAQ,OAAOiC,CAAE,EACtB,OAAW,CAACgE,EAAKgC,CAAC,GAAK,CAAC,GAAG,KAAK,WAAW,EAAOA,IAAMhG,GAAI,KAAK,YAAY,OAAOgE,CAAG,EACvF,YAAK,OAAS,EACd,KAAK,aAAa,EAClB,MAAM,KAAK,cAAcZ,GAAW,MAAM,EACnC,EACX,CACJ,EC9lEA,IAAM+C,GAAeC,GAAU,cAAc,KAAKA,GAAO,SAAW,EAAE,EAY/D,SAASC,GAAkB,CAC9B,WAAAC,EACA,MAAAC,EAAQ,IACR,SAAAC,EAAW,EACX,IAAAC,EAAM,IAAM,KAAK,IAAI,EACrB,MAAAC,EAASC,GAAO,IAAI,QAASC,GAAY,WAAWA,EAASD,CAAE,CAAC,CACpE,EAAI,CAAC,EAAG,CAEJ,IAAME,EAAS,IAAI,IAEnB,OAAO,eAA8BC,EAAWC,EAAO,CACnD,IAAMC,EAAUV,EAAWQ,CAAS,EACpC,GAAI,CAACE,GAAW,OAAOA,EAAQ,aAAgB,WAAY,MAAM,IAAI,MAAM,cAAc,EACzF,GAAI,OAAOA,EAAQ,aAAgB,YAAc,CAACA,EAAQ,YAAY,EAClE,MAAM,IAAI,MAAM,cAAc,EAGlC,IAAMC,EAAQJ,EAAO,IAAIC,CAAS,GAAK,CAAE,MAAO,QAAQ,QAAQ,EAAG,OAAQ,CAAE,EACvEI,EAAU,KAAK,UAAUH,CAAK,EAE9BI,EAAMF,EAAM,MAAM,KAAK,SAAY,CACrC,IAAMG,EAAOb,GAASE,EAAI,EAAIQ,EAAM,QAChCG,EAAO,GAAG,MAAMV,EAAMU,CAAI,EAE9B,IAAIC,EAAY,KAChB,QAASC,EAAU,EAAGA,EAAUd,EAAUc,IACtC,GAAI,CACA,aAAMN,EAAQ,YAAYE,CAAO,EACjCD,EAAM,OAASR,EAAI,EACZ,EACX,OAASL,EAAO,CAMZ,GALAiB,EAAYjB,EAKR,CAACD,GAAYC,CAAK,EAAG,MAAMA,EAC/B,MAAMM,EAAMH,GAASe,EAAU,EAAE,CACrC,CAEJ,MAAMD,CACV,CAAC,EAID,OAAAJ,EAAM,MAAQE,EAAI,MAAM,IAAM,CAAC,CAAC,EAChCN,EAAO,IAAIC,EAAWG,CAAK,EACpBE,CACX,CACJ,CCjFO,IAAMI,GAAS,CAGlB,KAAQ,CAAE,QAAS,EAAK,SAAU,EAAI,EAGtC,OAAQ,CAAE,QAAS,GAAK,SAAU,EAAI,EAEtC,OAAQ,CAAE,QAAS,GAAK,SAAU,EAAI,CAC1C,EAKMC,GAAK,EAAI,IACTC,GAAY,KAQX,SAASC,IAAuB,CACnC,GAAI,CACA,OAAO,OAAO,YAAe,YACzB,WAAW,kCAAkC,EAAE,OACvD,MAAY,CACR,MAAO,EACX,CACJ,CAcO,SAASC,GAAQC,EAAUC,EAAmB,KAAO,CACxD,OAAQD,EAAW,IAAQC,GAAoB,EAAIA,EACvD,CAwBO,SAASC,GAAWC,EAAUH,EAAUI,EAAQC,EAAI,CAAC,EAAG,CAC3D,GAAM,CAAE,MAAAC,EAAQ,IAAK,iBAAAL,EAAmB,IAAM,EAAII,EAClD,GAAI,CAACD,GAAU,CAACA,EAAO,OAAQ,OAAOD,EACtC,IAAMI,EAAYJ,EAAWJ,GAAQC,EAAUC,CAAgB,EAC3DO,EAAOJ,EACX,GAAI,KAAK,IAAIJ,CAAQ,EAAIM,EAAO,CAC5B,IAAMG,EAAQL,EAAO,OAAQM,GAAOV,EAAW,EAAIU,GAAKP,EAAWO,GAAKP,CAAS,EAC7EM,EAAM,SAAQD,EAAOC,EAC7B,CACA,OAAOD,EAAK,OACR,CAACG,EAAMD,IAAO,KAAK,IAAIA,EAAIH,CAAS,EAAI,KAAK,IAAII,EAAOJ,CAAS,EAAIG,EAAIC,EACzEH,EAAK,CAAC,CACV,CACJ,CAaO,SAASI,GAAWC,EAAWC,EAAWC,EAAW,IAAM,CAC9D,OAAKD,EACGD,EAAYC,EAAYC,GAAaD,EAAYC,EAAW,KAAK,IAAIF,CAAS,GAD/D,CAE3B,CASO,SAASG,GAAgBC,EAAW,IAAK,CAC5C,IAAMC,EAAU,CAAC,EACjB,MAAO,CACH,IAAIC,EAAOC,EAAO,YAAY,IAAI,EAAG,CAEjC,IADAF,EAAQ,KAAK,CAAE,MAAAC,EAAO,KAAAC,CAAK,CAAC,EACrBF,EAAQ,OAAS,GAAKE,EAAOF,EAAQ,CAAC,EAAE,KAAOD,GAAUC,EAAQ,MAAM,CAClF,EAEA,IAAIG,EAAM,YAAY,IAAI,EAAG,CACzB,GAAIH,EAAQ,OAAS,EAAG,MAAO,GAC/B,IAAMI,EAAOJ,EAAQA,EAAQ,OAAS,CAAC,EAGvC,GAAIG,EAAMC,EAAK,KAAOL,EAAU,MAAO,GACvC,IAAMM,EAAQL,EAAQ,CAAC,EACjBM,GAAMF,EAAK,KAAOC,EAAM,MAAQ,IACtC,OAAIC,GAAM,EAAU,GACZF,EAAK,MAAQC,EAAM,OAASC,CACxC,EACA,OAAQ,CAAEN,EAAQ,OAAS,CAAG,CAClC,CACJ,CAqBO,SAASO,GAAOpB,EAAG,CACtB,GAAM,CACF,KAAAqB,EAAM,GAAAC,EAAI,SAAA3B,EAAW,EACrB,QAAA4B,EAAUjC,GAAO,KAAK,QACtB,SAAAkC,EAAWlC,GAAO,KAAK,SACvB,UAAAmC,EAAY,GAAK,UAAAC,EAAY,GAC7B,qBAAAC,EAAuB,GACvB,SAAAC,EAAU,WAAAC,CACd,EAAI7B,EAEAc,EAAQO,EACRS,EAAMnC,EACNoC,EAAST,EACTU,EAAM,EACNf,EAAO,EACPgB,EAAO,GAELC,GAAS,EAAI,KAAK,GAAMV,EACxBW,GAAOZ,EAEPa,GAAS,IAAM,CACjBH,EAAO,GACPD,EAAM,EACNlB,EAAQiB,EACRD,EAAM,EACFF,GAAUA,EAASd,CAAK,EACxBe,GAAYA,EAAW,CAC/B,EAKA,GAAIF,GAAwBlC,GAAqB,EAC7C,OAAA2C,GAAO,EACA,CACH,IAAI,OAAQ,CAAE,OAAOtB,CAAO,EAC5B,IAAI,UAAW,CAAE,MAAO,EAAG,EAC3B,IAAI,MAAO,CAAE,MAAO,EAAM,EAC1B,SAASuB,EAAM,CAAEN,EAASM,EAAMD,GAAO,CAAG,EAC1C,MAAO,CAAC,CACZ,EAGJ,IAAME,GAAQtB,GAAQ,CAClBgB,EAAM,EACN,IAAMO,EAAQ,KAAK,KAAKvB,EAAMC,GAAQ,IAAMzB,EAAS,EACrDyB,EAAOD,EAKP,IAAIwB,EAAID,EACR,KAAOC,EAAI,GAAG,CACV,IAAMrB,EAAK,KAAK,IAAI5B,GAAIiD,CAAC,EACnBC,EAAQ,CAACP,GAAQA,IAASpB,EAAQiB,GAAU,EAAII,GAAOD,GAAQJ,EACrEA,GAAOW,EAAQtB,EACfL,GAASgB,EAAMX,EACfqB,GAAKrB,CACT,CAEA,GAAI,KAAK,IAAIL,EAAQiB,CAAM,EAAIN,GAAa,KAAK,IAAIK,CAAG,EAAIJ,EAAW,CACnEU,GAAO,EACP,MACJ,CACIR,GAAUA,EAASd,CAAK,EAC5BkB,EAAM,sBAAsBM,EAAI,CACpC,EAEA,OAAArB,EAAO,YAAY,IAAI,EACvBe,EAAM,sBAAsBM,EAAI,EAEzB,CACH,IAAI,OAAQ,CAAE,OAAOxB,CAAO,EAC5B,IAAI,UAAW,CAAE,OAAOgB,CAAK,EAC7B,IAAI,MAAO,CAAE,OAAOG,CAAM,EAQ1B,SAASI,EAAM,CAAEN,EAASM,CAAM,EAChC,MAAO,CACCL,GAAK,qBAAqBA,CAAG,EACjCA,EAAM,EACNC,EAAO,EACX,CACJ,CACJ,CCrOA,IAAMS,GAAqB,IAAM,CAG7B,GAAM,CAACC,CAAM,EAAI,MAAM,SAAS,IACxB,OAAO,OAAW,KAAe,CAAC,OAAO,UACzCC,GAA0B,EAAU,KACjCC,GAAgB,CACnB,SAAU,OAAO,SAAS,UAAY,IACtC,UAAW,OAAO,WAAW,WAAa,CAAC,EAC3C,OAAQC,GAAa,CACzB,CAAC,CACJ,EACK,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,EAAK,EAGtC,CAACC,EAAOC,CAAQ,EAAI,MAAM,SAAS,EAAK,EAQ9C,GANA,MAAM,UAAU,IAAM,CAClB,GAAI,CAACP,EAAQ,OACb,IAAMQ,EAAK,WAAW,IAAMD,EAAS,EAAI,EAAG,GAAG,EAC/C,MAAO,IAAM,aAAaC,CAAE,CAChC,EAAG,CAACR,CAAM,CAAC,EAEP,CAACA,GAAUI,EAAM,OAAO,KAE5B,IAAMK,EAAOC,GAAYV,CAAM,GAAK,CAAC,EAC/BW,EAAMF,EAAK,MAAQ,MAAQ,MAAQ,MACnCG,EAAW,OAAO,OAAW,IAAc,OAAO,SAAS,SAAW,IACtEC,EAAOC,GAAWd,EAAQY,CAAQ,EAClCG,EAAQC,GAAqB,EAE7BC,EAAQ,IAAM,CAChBC,GAAwB,EACxBb,EAAQ,EAAI,CAChB,EAKMc,EAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,KAAMV,EAAK,UAAYT,EACvB,IAAAW,EACA,MAAO,CAAE,SAAU,OAAQ,WAAY,KAAM,MAAO,mBAAoB,UAAW,OAAQ,CAC/F,EAAGS,EAAE,wBAAyB,KAAMpB,CAAM,CAAC,EAErCqB,EAAO,MAAM,cAAc,IAAK,CAClC,IAAK,MACL,KAAAR,EACA,SAAUJ,EAAK,UAAYT,EAC3B,KAAMS,EAAK,UAAYT,EACvB,IAAAW,EAGA,QAAS,IAAM,CAAEW,GAAetB,CAAM,EAAGkB,GAAwB,CAAG,EACpE,MAAO,CACH,QAAS,cAAe,WAAY,SAAU,IAAK,MACnD,QAAS,WAAY,aAAc,MACnC,OAAQ,6CAA8C,WAAY,mCAClE,MAAO,mBAAoB,SAAU,SAAU,WAAY,IAC3D,eAAgB,OAAQ,WAAY,QACxC,CACJ,EAAGE,EAAE,uBAAwB,KAAMpB,CAAM,CAAC,EAEpCuB,EAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,UACL,KAAM,SACN,QAASN,EAET,aAAcG,EAAE,2BAA4B,KAAMpB,CAAM,EACxD,MAAO,CACH,QAAS,WAAY,aAAc,MACnC,OAAQ,sCAAuC,WAAY,4BAC3D,MAAO,mBAAoB,KAAM,UAAW,SAAU,SAAU,WAAY,IAC5E,OAAQ,UAAW,WAAY,QACnC,CACJ,EAAGoB,EAAE,2BAA4B,KAAMpB,CAAM,CAAC,EAE9C,OAAO,MAAM,cAAc,MAAO,CAE9B,KAAM,SACN,aAAcoB,EAAE,gBAAgB,EAChC,MAAO,CAEH,SAAU,QAAS,OAAQ,OAAQ,iBAAkB,OAAQ,OAAQ,GACrE,SAAU,iCACV,QAAS,OAAQ,cAAe,SAAU,IAAK,OAC/C,QAAS,YAAa,aAAc,OACpC,OAAQ,sCAAuC,WAAY,oBAC3D,UAAW,yEACX,QAASd,EAAQ,EAAI,EACrB,UAAWA,GAASS,EAAQ,OAAS,mBACrC,WAAYA,EAAQ,qBAAuB,2DAG3C,cAAeT,EAAQ,OAAS,MACpC,CACJ,EAAG,CACCa,EACA,MAAM,cAAc,MAAO,CACvB,IAAK,UACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAC/D,EAAG,CAACE,EAAME,CAAO,CAAC,CACtB,CAAC,CACL,EAEA,OAAO,mBAAqBxB,GC3H5B,IAAMyB,EAAI,IAAIC,IAAS,MAAM,cAAc,GAAGA,CAAI,EAE5CC,EAAI,CACN,GAAI,oBACJ,MAAO,oBACP,OAAQ,sBACR,KAAM,4BACN,MAAO,4BACP,IAAK,mBACL,KAAM,oBACN,KAAM,mBAMN,OAAQ,mBACR,KAAM,kBACN,KAAM,qBACN,IAAK,gBACL,YAAa,yBACb,UAAW,wBACX,UAAW,2BACX,SAAU,sBACV,KAAM,2CACV,EAEMC,GAAO,CACT,MAAO,2VACP,KAAM,sNACN,OAAQ,6OACR,EAAG,mKACH,KAAM,iKACN,MAAO,6LACP,MAAO,0bACP,KAAM,8PACN,MAAO,4OACX,EAEMC,GAAM,CAACC,EAAQC,EAAQ,CAAC,IAAMN,EAAE,OAAQ,CAC1C,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,GAAGM,CAAM,EACzD,wBAAyB,CAAE,OAAQD,CAAO,CAC9C,CAAC,EAEKE,GAAM,CAACC,EAAS,MAAW,CAC7B,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,MAC7E,QAAS,YAAa,aAAc,OAAQ,OAAQ,UACpD,WAAY,UAAW,SAAU,OAAQ,WAAY,IACrD,OAAQA,EAAS,OAAS,aAAaN,EAAE,KAAK,GAC9C,WAAYM,EAASN,EAAE,YAAc,cACrC,MAAOM,EAAS,sBAAwBN,EAAE,IAC9C,GAEMO,GAAU,CACZ,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,WAAY,SACtE,WAAY,kCAAmC,eAAgB,YAAa,QAAS,MACzF,EAEMC,GAAO,CACT,MAAO,OAAQ,SAAU,QAAS,WAAYR,EAAE,MAAO,OAAQ,aAAaA,EAAE,IAAI,GAClF,aAAc,OAAQ,QAAS,OAAQ,QAAS,OAAQ,cAAe,SAAU,IAAK,OACtF,UAAW,wEACf,EAGA,SAASS,GAAaC,EAAOC,EAAK,CAC9B,IAAMC,EAAM,IAAI,YACZC,EAAM,OAAOH,CAAK,EACtB,KAAOE,EAAI,OAAOC,CAAG,EAAE,OAASF,GAAKE,EAAMA,EAAI,MAAM,EAAG,EAAE,EAC1D,OAAOA,CACX,CAEA,IAAMC,GAAQ,CACV,WAAYd,EAAE,KAAM,SAAU,OAAQ,WAAY,IAAK,cAAe,QACtE,cAAe,YAAa,MAAOA,EAAE,IACzC,EAwBA,SAASe,GAAYC,EAAO,CACxB,OAAQA,EAAM,MAAO,CACjB,KAAKC,EAAY,QAAS,OAAOC,EAAE,mBAAmB,EACtD,KAAKD,EAAY,WAAY,OAAOC,EAAE,qBAAqB,EAC3D,KAAKD,EAAY,UAAW,OAAOC,EAAE,wBAAwB,EAC7D,KAAKD,EAAY,OAAQ,OAAOE,GAAiBH,EAAM,KAAK,GAAKE,EAAE,oBAAoB,EACvF,QAAS,OAAOA,EAAE,eAAe,CACrC,CACJ,CAGA,IAAMC,GAAmB,CACrB,8BAA+BD,EAAE,uBAAuB,EACxD,yBAA0BA,EAAE,yBAAyB,EACrD,qBAAsBA,EAAE,uBAAuB,EAC/C,mBAAoBA,EAAE,kBAAkB,EACxC,cAAeA,EAAE,uBAAuB,EACxC,YAAaA,EAAE,mBAAmB,EAClC,qBAAsBA,EAAE,sBAAsB,EAC9C,oBAAqBA,EAAE,yBAAyB,EAChD,mBAAoBA,EAAE,wBAAwB,EAC9C,mBAAoBA,EAAE,qBAAqB,EAC3C,aAAcA,EAAE,mBAAmB,EACnC,SAAUA,EAAE,mBAAmB,EAC/B,iBAAkBA,EAAE,gBAAgB,EACpC,gBAAiBA,EAAE,mBAAmB,CAC1C,EAEO,SAASE,GAAc,CAAE,MAAAJ,EAAO,UAAAK,EAAW,SAAAC,CAAS,EAAG,CAC1D,GAAI,CAACN,EAAO,OAAO,KACnB,IAAMO,EAASP,EAAM,QAAUC,EAAY,OACrCO,EAAUR,EAAM,QAAUC,EAAY,cAAgB,CAACD,EAAM,QAEnE,OAAOlB,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,SAAU,aAAc,MAAO,EACnET,EAAE,MAAO,CAAE,MAAOU,EAAK,EAAG,CACtBV,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACpFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,gBAAgB,CAAC,EACzDpB,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,GAAI,CAAE,EAAGgB,EAAM,IAAI,CAC3G,CAAC,EAEDQ,EACM1B,EAAE,MAAO,CACP,IAAK,OACL,MAAO,CACH,QAAS,YAAa,UAAW,SAAU,aAAc,OACzD,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GAAI,MAAOA,EAAE,KAAM,SAAU,MAClF,CACJ,EAAG,CACCF,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CACH,WAAYE,EAAE,KAAM,SAAU,OAAQ,cAAe,MACrD,MAAOuB,EAASvB,EAAE,IAAMA,EAAE,IAC9B,CACJ,EAAG,8BAAS,EACZF,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,UAAW,OAAQ,MAAOyB,EAASvB,EAAE,IAAMA,EAAE,IAAK,CAAE,EAAGe,GAAYC,CAAK,CAAC,EACvGO,GAAUzB,EAAE,MAAO,CACf,IAAK,MACL,MAAO,CAAE,UAAW,MAAO,WAAYE,EAAE,KAAM,SAAU,OAAQ,MAAOA,EAAE,IAAK,CACnF,EAAGgB,EAAM,OAAS,SAAS,CAC/B,CAAC,EACClB,EAAE,MAAO,CACP,IAAK,OACL,MAAO,CACH,QAAS,YAAa,UAAW,SAAU,aAAc,OACzD,WAAY,mCAAoC,OAAQ,2CAC5D,CACJ,EAAGA,EAAE,OAAQ,CAGT,IAAK,MACL,MAAO,CACH,WAAYE,EAAE,KAAM,SAAU,yBAA0B,WAAY,IACpE,cAAe,MAAO,MAAOA,EAAE,YAAa,YAAa,SAC7D,CACJ,EAAGgB,EAAM,OAAO,CAAC,EAErBlB,EAAE,IAAK,CACH,IAAK,MACL,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,KAAM,MAAOE,EAAE,IAAK,CAC5E,EAAG,CACCkB,EAAE,oBAAoB,EAAGpB,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,MAAOE,EAAE,GAAI,CAAE,EAAG,OAAOgB,EAAM,QAAQ,OAAS,CAAC,gBAAgB,EACtH,mGACJ,CAAC,EAEDlB,EAAE,IAAK,CACH,IAAK,OACL,MAAO,CACH,OAAQ,EAAG,QAAS,YAAa,aAAc,MAAO,SAAU,SAAU,WAAY,KACtF,WAAY,gCAAiC,OAAQ,0CAA2C,MAAO,oBAC3G,CACJ,EAAGyB,EACGL,EAAE,sBAAsB,EACxBA,EAAE,kBAAkB,CAAC,EAE3BpB,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAClEA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASwB,EAAU,MAAO,CAAE,GAAGjB,GAAIkB,CAAM,EAAG,KAAMA,EAAS,EAAI,CAAE,CAAE,EACvFA,EAASL,EAAE,aAAa,EAAIA,EAAE,cAAc,CAAC,EACjD,CAACK,GAAUzB,EAAE,SAAU,CACnB,IAAK,KAAM,QAASuB,EAAW,SAAUG,EACzC,MAAO,CAAE,GAAGnB,GAAI,EAAI,EAAG,KAAM,EAAG,QAASmB,EAAU,GAAM,EAAG,OAAQA,EAAU,cAAgB,SAAU,CAC5G,EAAG,CAACtB,GAAID,GAAK,OAAQ,CAAE,IAAK,GAAI,CAAC,EAAGiB,EAAE,mBAAmB,CAAC,CAAC,CAC/D,CAAC,CACL,CAAC,CAAC,CACV,CAaO,SAASO,GAAiB,CAAE,WAAAC,EAAY,UAAAC,EAAW,SAAAC,EAAU,SAAAN,CAAS,EAAG,CAC5E,GAAM,CAACO,EAAMC,CAAO,EAAI,MAAM,SAAS,EAAE,EACnC,CAACC,EAAQC,CAAS,EAAI,MAAM,SAAS,CAAC,CAAC,EACvCrB,EAAMsB,EAAa,YAAc,EAEjCC,EAAUC,GAAOH,EAAWI,GAC9BA,EAAK,SAASD,CAAE,EAAIC,EAAK,OAAQC,GAAMA,IAAMF,CAAE,EACzCC,EAAK,QAAUzB,EAAMyB,EAAO,CAAC,GAAGA,EAAMD,CAAE,CACjD,EAEKG,EAAQT,EAAK,KAAK,EAAE,OAAS,GAAKE,EAAO,QAAU,EAEzD,OAAOjC,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,SAAU,aAAc,MAAO,EACnET,EAAE,MAAO,CAAE,MAAO,CAAE,GAAGU,GAAM,SAAU,OAAQ,CAAE,EAAG,CAChDV,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACpFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,WAAW,CAAC,EACpDpB,EAAE,IAAK,CACH,IAAK,IACL,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,IAAK,MAAOE,EAAE,IAAK,CAC3E,EAAGkB,EAAE,iBAAkB,CAAE,IAAKe,EAAa,WAAY,CAAC,CAAC,CAC7D,CAAC,EAEDnC,EAAE,QAAS,CACP,IAAK,OACL,MAAO+B,EAIP,SAAWU,GAAMT,EAAQrB,GAAa8B,EAAE,OAAO,MAAON,EAAa,cAAc,CAAC,EAClF,YAAaf,EAAE,YAAY,EAC3B,MAAO,CACH,MAAO,OAAQ,QAAS,YAAa,aAAc,OAAQ,QAAS,OACpE,WAAYlB,EAAE,OAAQ,OAAQ,aAAaA,EAAE,KAAK,GAAI,MAAOA,EAAE,IAC/D,WAAY,UAAW,SAAU,QACrC,CACJ,CAAC,EAEDF,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACvFA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,eAAgB,gBAAiB,WAAY,UAAW,CAAE,EAAG,CACxGA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,eAAe,CAAC,EACxDpB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,GAAGgB,GAAO,MAAOiB,EAAO,QAAUpB,EAAMX,EAAE,KAAOA,EAAE,IAAK,CAAE,EACrF,GAAG+B,EAAO,MAAM,MAAMpB,CAAG,EAAE,CACnC,CAAC,EACDe,EAAW,SAAW,EAChB5B,EAAE,MAAO,CACP,IAAK,QACL,MAAO,CACH,QAAS,YAAa,aAAc,OAAQ,UAAW,SACvD,WAAYE,EAAE,OAAQ,OAAQ,cAAcA,EAAE,KAAK,GAAI,MAAOA,EAAE,KAAM,SAAU,OAAQ,WAAY,IACxG,CACJ,EAAGkB,EAAE,kBAAkB,CAAC,EACtBpB,EAAE,MAAO,CACP,IAAK,OACL,UAAW,aACX,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,MAAO,UAAW,QAAS,UAAW,MAAO,CACzG,EAAG4B,EAAW,IAAKc,GAAM,CACrB,IAAMC,EAAKV,EAAO,SAASS,EAAE,EAAE,EACzBE,EAAO,CAACD,GAAMV,EAAO,QAAUpB,EACrC,OAAOb,EAAE,SAAU,CACf,IAAK0C,EAAE,GACP,QAAS,IAAMN,EAAOM,EAAE,EAAE,EAC1B,SAAUE,EACV,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAC7D,aAAc,OAAQ,OAAQA,EAAO,cAAgB,UAAW,UAAW,QAC3E,WAAYD,EAAK,kCAAoC,cACrD,OAAQ,aAAaA,EAAK,mCAAqCzC,EAAE,IAAI,GACrE,QAAS0C,EAAO,GAAM,EAAG,WAAY,SACzC,CACJ,EAAG,CACC5C,EAAE,OAAQ,CACN,IAAK,KACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAC3E,WAAY,SAAU,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GACvE,WAAYA,EAAE,KAAM,SAAU,OAAQ,WAAY,IAAK,MAAOA,EAAE,IACpE,CACJ,EAAGwC,EAAE,IAAI,EACT1C,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,SAAU,OAAQ,MAAOE,EAAE,IAAK,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CAAE,EAAGwC,EAAE,IAAI,EACnK1C,EAAE,OAAQ,CACN,IAAK,OACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAC3D,WAAY2C,EAAKzC,EAAE,YAAc,cACjC,OAAQ,aAAayC,EAAKzC,EAAE,YAAcA,EAAE,KAAK,EACrD,CACJ,CAAC,CACL,CAAC,CACL,CAAC,CAAC,CACV,CAAC,EAMD,CAAC2B,GAAa7B,EAAE,IAAK,CACjB,IAAK,KACL,MAAO,CACH,OAAQ,EAAG,QAAS,YAAa,aAAc,MAAO,SAAU,SAAU,WAAY,KACtF,WAAY,qCAAsC,OAAQ,+CAAgD,MAAO,oBACrH,CACJ,EAAGoB,EAAE,oBAAoB,CAAC,EAE1BpB,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAClEA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASwB,EAAU,MAAO,CAAE,GAAGjB,GAAI,EAAK,EAAG,KAAM,CAAE,CAAE,EAAGa,EAAE,iBAAiB,CAAC,EACpGpB,EAAE,SAAU,CACR,IAAK,KACL,QAAS,IAAMwC,GAASV,EAAS,CAAE,KAAMC,EAAK,KAAK,EAAG,WAAYE,CAAO,CAAC,EAC1E,SAAU,CAACO,EACX,MAAO,CAAE,GAAGjC,GAAI,EAAI,EAAG,KAAM,EAAG,QAASiC,EAAQ,EAAI,GAAK,OAAQA,EAAQ,UAAY,aAAc,CACxG,EAAGpB,EAAE,cAAc,CAAC,CACxB,CAAC,CACL,CAAC,CAAC,CACV,CAcO,SAASyB,GAAgB,CAAE,QAAAC,EAAS,UAAAC,CAAU,EAAG,CACpD,OAAKD,EACE9C,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,cAAe,aAAc,MAAO,EACxET,EAAE,MAAO,CAAE,MAAO,CAAE,GAAGU,GAAM,SAAU,OAAQ,CAAE,EAAG,CAChDV,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,qBAAqB,CAAC,EAC9DpB,EAAE,IAAK,CACH,IAAK,IACL,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,IAAK,CACzE,EAAG4C,CAAO,EACV9C,EAAE,SAAU,CAAE,IAAK,KAAM,QAAS+C,EAAW,MAAOxC,GAAI,EAAI,CAAE,EAAGa,EAAE,aAAa,CAAC,CACrF,CAAC,CAAC,EATe,IAUzB,CAcO,SAAS4B,GAAgB,CAAE,WAAApB,EAAY,UAAAqB,EAAW,MAAAC,EAAO,SAAA1B,CAAS,EAAG,CACxE,GAAM,CAACS,EAAQC,CAAS,EAAI,MAAM,SAAS,CAAC,CAAC,EACvCE,EAAUC,GAAOH,EAAWI,GAC9BA,EAAK,SAASD,CAAE,EAAIC,EAAK,OAAQC,GAAMA,IAAMF,CAAE,EACzCC,EAAK,QAAUW,EAAYX,EAAO,CAAC,GAAGA,EAAMD,CAAE,CACvD,EAED,OAAOrC,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,SAAU,aAAc,MAAO,EACnET,EAAE,MAAO,CAAE,MAAO,CAAE,GAAGU,GAAM,SAAU,OAAQ,CAAE,EAAG,CAChDV,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACpFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,kBAAkB,CAAC,EAC3DpB,EAAE,IAAK,CACH,IAAK,IACL,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,IAAK,MAAOE,EAAE,IAAK,CAC3E,EAAG+C,EAAY,EACT7B,EAAE,gBAAiB,CAAE,UAAA6B,CAAU,CAAC,EAChC7B,EAAE,eAAe,CAAC,CAC5B,CAAC,EAEDQ,EAAW,SAAW,EAChB5B,EAAE,MAAO,CACP,IAAK,QACL,MAAO,CACH,QAAS,YAAa,aAAc,OAAQ,UAAW,SACvD,WAAYE,EAAE,OAAQ,OAAQ,cAAcA,EAAE,KAAK,GAAI,MAAOA,EAAE,KAAM,SAAU,OAAQ,WAAY,IACxG,CACJ,EAAGkB,EAAE,mBAAmB,CAAC,EACvBpB,EAAE,MAAO,CACP,IAAK,OACL,UAAW,aACX,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,MAAO,UAAW,QAAS,UAAW,MAAO,CACzG,EAAG4B,EAAW,IAAKc,GAAM,CACrB,IAAMC,EAAKV,EAAO,SAASS,EAAE,EAAE,EACzBE,EAAO,CAACD,GAAMV,EAAO,QAAUgB,EACrC,OAAOjD,EAAE,SAAU,CACf,IAAK0C,EAAE,GACP,QAAS,IAAMN,EAAOM,EAAE,EAAE,EAC1B,SAAUE,EACV,MAAO,CACH,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAC7D,aAAc,OAAQ,OAAQA,EAAO,cAAgB,UAAW,UAAW,QAC3E,WAAYD,EAAK,kCAAoC,cACrD,OAAQ,aAAaA,EAAK,mCAAqCzC,EAAE,IAAI,GACrE,QAAS0C,EAAO,GAAM,EAAG,WAAY,SACzC,CACJ,EAAG,CACC5C,EAAE,OAAQ,CACN,IAAK,KACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAC3E,WAAY,SAAU,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GACvE,WAAYA,EAAE,KAAM,SAAU,OAAQ,WAAY,IAAK,MAAOA,EAAE,IACpE,CACJ,EAAGwC,EAAE,IAAI,EACT1C,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,SAAU,OAAQ,MAAOE,EAAE,IAAK,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CAAE,EAAGwC,EAAE,IAAI,EACnK1C,EAAE,OAAQ,CACN,IAAK,OACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAC3D,WAAY2C,EAAKzC,EAAE,YAAc,cACjC,OAAQ,aAAayC,EAAKzC,EAAE,YAAcA,EAAE,KAAK,EACrD,CACJ,CAAC,CACL,CAAC,CACL,CAAC,CAAC,EAENF,EAAE,IAAK,CACH,IAAK,OACL,MAAO,CACH,OAAQ,EAAG,QAAS,YAAa,aAAc,MAAO,SAAU,SAAU,WAAY,KACtF,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GAAI,MAAOA,EAAE,IAClE,CACJ,EAAGkB,EAAE,sBAAsB,CAAC,EAE5BpB,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAClEA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASwB,EAAU,MAAO,CAAE,GAAGjB,GAAI,EAAK,EAAG,KAAM,CAAE,CAAE,EAAGa,EAAE,iBAAiB,CAAC,EACpGpB,EAAE,SAAU,CACR,IAAK,KACL,QAAS,IAAMiC,EAAO,QAAUiB,EAAMjB,CAAM,EAC5C,SAAUA,EAAO,SAAW,EAC5B,MAAO,CAAE,GAAG1B,GAAI,EAAI,EAAG,KAAM,EAAG,QAAS0B,EAAO,OAAS,EAAI,GAAK,OAAQA,EAAO,OAAS,UAAY,aAAc,CACxH,EAAGA,EAAO,OAAS,EAAIb,EAAE,qBAAsB,CAAE,MAAOa,EAAO,MAAO,CAAC,EAAIb,EAAE,cAAc,CAAC,CAChG,CAAC,CACL,CAAC,CAAC,CACV,CAMO,SAAS+B,GAAiB,CAAE,OAAAC,EAAQ,SAAAC,EAAU,UAAAC,CAAU,EAAG,CAC9D,OAAKF,EACEpD,EAAE,MAAO,CAAE,MAAOS,GAAS,KAAM,SAAU,aAAc,MAAO,EACnET,EAAE,MAAO,CAAE,MAAOU,EAAK,EAAG,CACtBV,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAAG,CACpFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOgB,EAAM,EAAGI,EAAE,kBAAkB,CAAC,EAC3DpB,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,GAAI,CAAE,EAAGkD,EAAO,IAAI,CAC5G,CAAC,EACDpD,EAAE,IAAK,CACH,IAAK,IACL,MAAO,CAAE,OAAQ,EAAG,SAAU,SAAU,WAAY,KAAM,MAAOE,EAAE,IAAK,CAC5E,EAAG,CACCF,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,MAAOE,EAAE,GAAI,CAAE,EAAGkD,EAAO,SAAS,EAC9D,mHACJ,CAAC,EACDpD,EAAE,IAAK,CACH,IAAK,OACL,MAAO,CACH,OAAQ,EAAG,QAAS,YAAa,aAAc,MAAO,SAAU,SAAU,WAAY,KACtF,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GAAI,MAAOA,EAAE,IAClE,CACJ,EAAGkB,EAAE,gBAAgB,CAAC,EACtBpB,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAClEA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASsD,EAAW,MAAO,CAAE,GAAG/C,GAAI,EAAK,EAAG,KAAM,CAAE,CAAE,EAAGa,EAAE,eAAe,CAAC,EACnGpB,EAAE,SAAU,CAAE,IAAK,IAAK,QAASqD,EAAU,MAAO,CAAE,GAAG9C,GAAI,EAAI,EAAG,KAAM,CAAE,CAAE,EAAGa,EAAE,YAAY,CAAC,CAClG,CAAC,CACL,CAAC,CAAC,EAzBc,IA0BxB,CAMA,SAASmC,GAAY,CAAE,MAAArC,EAAO,SAAAsC,EAAU,QAAAC,CAAQ,EAAG,CAC/C,OAAOzD,EAAE,MAAO,CACZ,UAAW,aACX,MAAO,CACH,QAAS,OAAQ,IAAK,MAAO,QAAS,WAAY,UAAW,OAC7D,aAAc,aAAaE,EAAE,IAAI,GAAI,KAAM,MAC/C,CACJ,EAAGgB,EAAM,QAAQ,IAAKwC,GAAM,CACxB,IAAMC,EAAOD,EAAE,QAAUE,GAAa,KAChCC,EAAOH,EAAE,QAAUE,GAAa,KAChCE,EAAMH,GAAQD,EAAE,QAAUE,GAAa,OAAS1D,EAAE,UAClDwD,EAAE,QAAUE,GAAa,QAAU1D,EAAE,UAAYA,EAAE,SACnD6D,EAAML,EAAE,QAAUE,GAAa,QACrC,OAAO5D,EAAE,OAAQ,CACb,IAAK0D,EAAE,GACP,MAAOC,EAAO,MACRD,EAAE,QAAUE,GAAa,OAASxC,EAAE,kBAAkB,EACtDsC,EAAE,QAAUE,GAAa,QAAUxC,EAAE,oBAAoB,EACzDA,EAAE,sBAAuB,CAAE,KAAMsC,EAAE,IAAK,CAAC,EAC/C,MAAO,CACH,KAAM,OAAQ,QAAS,cAAe,WAAY,SAAU,IAAK,MACjE,QAAS,WAAY,aAAc,OAKnC,WAAYG,EAAO,cAAgB3D,EAAE,OACrC,OAAQ,aAAa2D,EAAO,+BAAiC3D,EAAE,IAAI,GACnE,SAAU,SAAU,MAAOyD,EAAOzD,EAAE,IAAO2D,EAAO3D,EAAE,KAAOA,EAAE,KAC7D,QAAS2D,EAAO,IAAO,CAC3B,CACJ,EAAG,CACC7D,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY8D,CAAI,CAAE,CAAC,EACpG9D,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO6D,EAAO,CAAE,eAAgB,cAAe,EAAI,MAAU,EAAGF,EAAO,MAAQD,EAAE,IAAI,EAC3GG,GAAQ7D,EAAE,OAAQ,CACd,IAAK,MACL,MAAO,CAAE,WAAYE,EAAE,KAAM,SAAU,OAAQ,MAAOA,EAAE,IAAK,cAAe,QAAS,CACzF,EAAG,SAAS,EACZ6D,GAAO3D,GAAID,GAAK,MAAO,CAAE,IAAK,IAAK,MAAOD,EAAE,IAAK,CAAC,EACjDuD,GAAW,CAACE,GAAQH,GAAaxD,EAAE,SAAU,CAC1C,IAAK,IACL,QAAS,IAAMwD,EAASE,EAAE,EAAE,EAC5B,MAAOtC,EAAE,eAAgB,CAAE,KAAMsC,EAAE,IAAK,CAAC,EACzC,MAAO,CAAE,OAAQ,OAAQ,WAAY,cAAe,MAAOxD,EAAE,KAAM,OAAQ,UAAW,QAAS,OAAQ,QAAS,CAAE,EAClH,wBAAyB,CAAE,OAAQ,oKAAqK,CAC5M,CAAC,CACL,CAAC,CACL,CAAC,CAAC,CACN,CAEA,SAAS8D,GAAO,CAAE,IAAAC,CAAI,EAAG,CACrB,IAAMC,EAAOD,EAAI,OAAS,OAE1B,OADeA,EAAI,OAAS,SAEjBjE,EAAE,MAAO,CACZ,MAAO,CACH,UAAW,SAAU,SAAU,MAAO,UAAW,SAAU,QAAS,WACpE,aAAc,MAAO,WAAYE,EAAE,OAAQ,OAAQ,aAAaA,EAAE,IAAI,GACtE,SAAU,OAAQ,MAAOA,EAAE,KAAM,WAAY,GACjD,CACJ,EAAG+D,EAAI,OAAO,EAEXjE,EAAE,MAAO,CACZ,MAAO,CACH,UAAWkE,EAAO,WAAa,aAAc,SAAU,kBACvD,QAAS,OAAQ,cAAe,SAAU,IAAK,KACnD,CACJ,EAAG,CACC,CAACA,GAAQlE,EAAE,OAAQ,CACf,IAAK,MACL,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAOE,EAAE,OAAQ,mBAAoB,KAAM,CAC7F,EAAG+D,EAAI,YAAc7C,EAAE,cAAc,CAAC,EACtCpB,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CACH,QAAS,WAAY,aAAckE,EAAO,qBAAuB,qBACjE,WAAYA,EAAO,mCAAqChE,EAAE,OAC1D,OAAQ,aAAagE,EAAO,mCAAqChE,EAAE,IAAI,GACvE,MAAOA,EAAE,IAAK,SAAU,SAAU,WAAY,IAAK,UAAW,aAAc,WAAY,UAC5F,CACJ,EAAG+D,EAAI,OAAO,EACdjE,EAAE,OAAQ,CACN,IAAK,IACL,MAAO,CAAE,WAAYE,EAAE,KAAM,SAAU,OAAQ,MAAOA,EAAE,KAAM,UAAWgE,EAAO,WAAa,aAAc,QAAS,OAAQ,CAChI,EAAG,CACC,IAAI,KAAKD,EAAI,WAAa,KAAK,IAAI,CAAC,EAAE,mBAAmB,CAAC,EAAG,CAAE,KAAM,UAAW,OAAQ,SAAU,CAAC,EACnGA,EAAI,QAAU,gBAAe,EACjC,EAAE,KAAK,EAAE,CAAC,CACd,CAAC,CACL,CAEO,SAASE,GAAc,CAC1B,MAAAjD,EAAO,MAAAkD,EAAO,SAAAC,EAAU,OAAAC,EAAQ,QAAAC,EAAS,eAAAC,EAAgB,aAAAC,EAAc,QAAAhB,EAAS,UAAAiB,EAChF,YAAAC,EAAa,WAAAC,EAAY,YAAAC,CAC7B,EAAG,CACC,IAAMrC,EAAQtB,EAAM,QAAUC,EAAY,OAASD,EAAM,aAKnD4D,EAAW5D,EAAM,QAAQ,KAAMwC,GAAMA,EAAE,QAAUE,GAAa,OAAO,EAErEmB,EAAUtC,GAAM,CAClBA,EAAE,eAAe,EACb,GAACD,GAAS,CAAC4B,EAAM,KAAK,IAC1BE,EAAOF,CAAK,CAChB,EAEA,OAAOpE,EAAE,MAAO,CACZ,MAAO,CACH,SAAU,WAAY,QAAS,OAAQ,cAAe,SACtD,OAAQ,OAAQ,UAAW,EAAG,WAAYE,EAAE,EAChD,CACJ,EAAG,CAMCF,EAAE,QAAS,CACP,IAAK,WACL,wBAAyB,CACrB,OAAQ,iPASZ,CACJ,CAAC,EAGDA,EAAE,MAAO,CACL,IAAK,OACL,UAAW,kBACX,MAAO,CACH,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAC1D,QAAS,iCACT,UAAW,uCACX,aAAc,aAAaE,EAAE,IAAI,EACrC,CACJ,EAAG,CACCF,EAAE,OAAQ,CACN,IAAK,KACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAC5E,WAAY,SAAU,WAAY,mCAClC,OAAQ,6CAA8C,MAAOE,EAAE,OAC/D,WAAYA,EAAE,KAAM,SAAU,OAAQ,WAAY,GACtD,CACJ,EAAG8E,GAAc9D,EAAM,IAAI,CAAC,EAC5BlB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvDA,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,IAAK,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CACjI,EAAGgB,EAAM,IAAI,EACblB,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CAAE,SAAU,SAAU,MAAO8E,EAAW5E,EAAE,KAAOA,EAAE,KAAM,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CACtH,EAAG,CACCE,GAAID,GAAK,MAAO,CAAE,IAAK,IAAK,MAAO,OAAQ,OAAQ,MAAO,CAAC,EAC3DiB,EAAE,qBAAsB,CAAE,MAAOF,EAAM,QAAQ,MAAO,CAAC,EACvDsB,GAAStB,EAAM,QACTlB,EAAE,OAAQ,CAAE,IAAK,OAAQ,IAAK,MAAO,MAAO,CAAE,YAAa,SAAU,CAAE,EAAGoB,EAAE,mBAAoB,CAAE,KAAMF,EAAM,OAAQ,CAAC,CAAC,EACxH,EACV,CAAC,CACL,CAAC,EAIAsB,GAASmC,GAAgB3E,EAAE,SAAU,CAClC,IAAK,YAAa,UAAW,YAAa,QAAS,IAAM2E,EAAY,EAAK,EAAG,SAAUC,EACvF,MAAOxD,EAAE,sBAAsB,EAAG,aAAcA,EAAE,sBAAsB,EACxE,MAAO,CACH,GAAGb,GAAI,EAAK,EAAG,KAAM,OAAQ,QAAS,WAAY,QAASqE,EAAa,GAAM,EAC9E,OAAQA,EAAa,UAAY,SACrC,CACJ,EAAGxE,GAAID,GAAK,MAAO,CAAE,IAAK,GAAI,CAAC,CAAC,EAC/BqC,GAASmC,GAAgB3E,EAAE,SAAU,CAClC,IAAK,YAAa,UAAW,YAAa,QAAS,IAAM2E,EAAY,EAAI,EAAG,SAAUC,EACtF,MAAOxD,EAAE,sBAAsB,EAAG,aAAcA,EAAE,sBAAsB,EACxE,MAAO,CACH,GAAGb,GAAI,EAAK,EAAG,KAAM,OAAQ,QAAS,WAAY,QAASqE,EAAa,GAAM,EAC9E,OAAQA,EAAa,UAAY,SACrC,CACJ,EAAGxE,GAAID,GAAK,MAAO,CAAE,IAAK,GAAI,CAAC,CAAC,EAC/BsD,GAAWgB,GAAgBvD,EAAM,QAAQ,OAASiB,EAAa,aAAgBnC,EAAE,SAAU,CACxF,IAAK,MAAO,UAAW,YAAa,QAASyE,EAAc,MAAOrD,EAAE,kBAAkB,EACtF,MAAO,CAAE,GAAGb,GAAI,EAAK,EAAG,KAAM,OAAQ,QAAS,WAAY,SAAU,QAAS,CAClF,EAAG,CACCH,GAAID,GAAK,KAAM,CAAE,IAAK,GAAI,CAAC,EAC3BH,EAAE,OAAQ,CAAE,IAAK,IAAK,UAAW,aAAc,EAAGoB,EAAE,WAAW,CAAC,CACpE,CAAC,EACDpB,EAAE,SAAU,CACR,IAAK,QAAS,UAAW,YAAa,QAASuE,EAAS,MAAOnD,EAAE,iBAAiB,EAClF,aAAcA,EAAE,iBAAiB,EACjC,MAAO,CAAE,GAAGb,GAAI,EAAK,EAAG,KAAM,OAAQ,QAAS,WAAY,SAAU,SAAU,MAAOL,EAAE,IAAK,YAAa,8BAA+B,CAC7I,EAAG,CACCE,GAAID,GAAK,KAAM,CAAE,IAAK,GAAI,CAAC,EAC3BH,EAAE,OAAQ,CAAE,IAAK,IAAK,UAAW,aAAc,EAAGoB,EAAE,aAAa,CAAC,CACtE,CAAC,CACL,CAAC,EAEDpB,EAAEuD,GAAa,CAAE,IAAK,QAAS,MAAArC,EAAO,SAAUsD,EAAgB,QAAAf,CAAQ,CAAC,EAEzEqB,GAAYtC,GAASxC,EAAE,MAAO,CAC1B,IAAK,aACL,MAAO,CACH,KAAM,OAAQ,QAAS,WAAY,SAAU,OAAQ,WAAY,IAAK,MAAOE,EAAE,KAC/E,WAAY,qCAAsC,aAAc,aAAaA,EAAE,IAAI,EACvF,CACJ,EAAGkB,EAAE,iBAAiB,CAAC,EAGvBpB,EAAE,MAAO,CACL,IAAK,OACL,IAAK0E,EACL,UAAW,aACX,MAAO,CACH,KAAM,EAAG,UAAW,EAAG,UAAW,OAAQ,QAAS,YACnD,QAAS,OAAQ,cAAe,SAAU,IAAK,MACnD,CACJ,EAAGxD,EAAM,SAAS,SAAW,EACvB,CAAClB,EAAE,MAAO,CACR,IAAK,QACL,MAAO,CAAE,OAAQ,OAAQ,UAAW,SAAU,MAAOE,EAAE,KAAM,SAAU,SAAU,WAAY,IAAK,SAAU,OAAQ,CACxH,EAAGsC,EACGpB,EAAE,iBAAiB,EACnBA,EAAE,kBAAkB,CAAC,CAAC,EAC1BF,EAAM,SAAS,IAAKwC,GAAM1D,EAAEgE,GAAQ,CAAE,IAAKN,EAAE,GAAI,IAAKA,CAAE,CAAC,CAAC,CAAC,EAGjE1D,EAAE,OAAQ,CACN,IAAK,WACL,SAAU+E,EACV,MAAO,CACH,KAAM,OAAQ,QAAS,OAAQ,IAAK,MAAO,QAAS,YACpD,UAAW,aAAa7E,EAAE,IAAI,GAAI,WAAY,UAClD,CACJ,EAAG,CACCF,EAAE,QAAS,CACP,IAAK,KACL,MAAOoE,EACP,SAAW3B,GAAM4B,EAAS5B,EAAE,OAAO,KAAK,EACxC,YAAaD,EAAQpB,EAAE,gBAAiB,CAAE,KAAMF,EAAM,IAAK,CAAC,EAAIE,EAAE,oBAAoB,EACtF,SAAU,CAACoB,EACX,UAAWL,EAAa,eACxB,MAAO,CACH,KAAM,EAAG,SAAU,EAAG,QAAS,YAAa,aAAc,OAAQ,QAAS,OAC3E,WAAYjC,EAAE,OAAQ,OAAQ,aAAaA,EAAE,KAAK,GAAI,MAAOA,EAAE,IAC/D,WAAY,UAAW,SAAU,SAAU,QAASsC,EAAQ,EAAI,EACpE,CACJ,CAAC,EACDxC,EAAE,SAAU,CACR,IAAK,OAAQ,KAAM,SAAU,SAAU,CAACwC,GAAS,CAAC4B,EAAM,KAAK,EAAG,MAAOhD,EAAE,YAAY,EACrF,MAAO,CACH,GAAGb,GAAI,EAAI,EAAG,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,QAAS,EAAG,aAAc,OACrF,QAAU,CAACiC,GAAS,CAAC4B,EAAM,KAAK,EAAK,GAAM,CAC/C,CACJ,EAAGhE,GAAID,GAAK,IAAI,CAAC,CACrB,CAAC,EAID0E,CACJ,CAAC,CACL,CC5tBO,IAAMI,GAAY,OAAO,OAAO,CACnC,YAAa,cACb,WAAY,aACZ,OAAQ,SACR,OAAQ,QACZ,CAAC,EAGKC,GAAiB,CACnB,KAAMD,GAAU,WAChB,SAAUA,GAAU,WACpB,SAAUA,GAAU,WACpB,WAAYA,GAAU,WACtB,OAAQA,GAAU,OAClB,MAAOA,GAAU,MACrB,EAWaE,GAAW,OAAO,OAAO,CAAE,GAAI,IAAM,IAAK,KAAO,QAAS,IAAK,UAAW,GAAI,CAAC,EAW/EC,GAAmB,IAYhC,SAASC,GAAmBC,EAASC,EAAQ,CACzC,GAAI,CAACD,GAAW,CAACC,EAAQ,OAAO,KAChC,IAAIC,EACJ,GAAI,CACAA,EAASF,EAAQ,wBAAwBC,CAAM,CACnD,MAAY,CACR,OAAO,IACX,CACA,IAAME,EAAWH,EAAQ,eAAe,EACxCG,EAAS,QAAU,IACnBA,EAAS,sBAAwB,GACjCD,EAAO,QAAQC,CAAQ,EAGvB,IAAMC,EAAS,IAAI,WAAWD,EAAS,OAAO,EAE9C,MAAO,CACH,MAAO,CACHA,EAAS,sBAAsBC,CAAM,EACrC,IAAIC,EAAM,EACV,QAASC,EAAI,EAAGA,EAAIF,EAAO,OAAQE,IAAK,CACpC,IAAMC,GAAKH,EAAOE,CAAC,EAAI,KAAO,IAC9BD,GAAOE,EAAIA,CACf,CACA,OAAO,KAAK,KAAKF,EAAMD,EAAO,MAAM,CACxC,EACA,OAAQ,CACJ,GAAI,CAAEF,EAAO,WAAW,CAAG,MAAY,CAAC,CACxC,GAAI,CAAEC,EAAS,WAAW,CAAG,MAAY,CAAC,CAC9C,CACJ,CACJ,CAEO,IAAMK,GAAN,KAAqB,CAQxB,YAAY,CACR,WAAAC,EAAY,aAAAC,EAAe,KAAM,gBAAAC,EAAkB,KAAM,iBAAAC,EAAmB,KAC5E,SAAAC,EAAW,IAAM,CAAC,EAAG,IAAAC,EAAM,IAAM,CAAC,CACtC,EAAG,CACC,KAAK,YAAcL,EACnB,KAAK,cAAgBC,IACZK,GAAgB,UAAU,aAAa,aAAaA,CAAW,GAWxE,KAAK,iBAAmBJ,IAChB,IAAO,OAAO,OAAU,WAAa,IAAI,MAAU,MAQ3D,KAAK,kBAAoBC,IAChBX,GAAWF,GAAmB,KAAK,cAAc,EAAGE,CAAM,GACnE,KAAK,UAAYY,EACjB,KAAK,KAAOC,EAEZ,KAAK,OAAS,KACd,KAAK,OAAS,GACd,KAAK,UAAY,GACjB,KAAK,WAAa,GAClB,KAAK,cAAgB,GACrB,KAAK,WAAa,OAClB,KAAK,MAAQ,KAEb,KAAK,YAAc,KAEnB,KAAK,MAAQ,IAAI,IAEjB,KAAK,OAAS,CAAC,EAEf,KAAK,MAAQ,GAGb,KAAK,KAAO,KAEZ,KAAK,WAAa,KAClB,KAAK,aAAe,GACpB,KAAK,gBAAkB,EAEvB,KAAK,YAAc,IACvB,CAWA,eAAgB,CACZ,GAAI,KAAK,KAAM,OAAO,KAAK,KAC3B,IAAME,EAAO,OAAO,aAAiB,IAAc,aAC5C,OAAO,mBAAuB,IAAc,mBAAqB,KACxE,GAAI,CAACA,EAAM,OAAO,KAClB,GAAI,CACA,KAAK,KAAO,IAAIA,EACZ,KAAK,KAAK,QAAU,aAAa,KAAK,KAAK,OAAO,EAAE,MAAM,IAAM,CAAC,CAAC,CAC1E,MAAY,CACR,KAAK,KAAO,IAChB,CACA,OAAO,KAAK,IAChB,CAEA,IAAI,QAAS,CACT,OAAO,KAAK,SAAW,IAC3B,CAoBA,MAAM,KAAK,CAAE,OAAAC,EAAQ,OAAAC,EAAQ,UAAAC,EAAY,GAAO,MAAAC,EAAQ,CAAC,CAAE,EAAG,CAC1D,GAAI,KAAK,SAAWH,EAAQ,CAAE,KAAK,SAASG,CAAK,EAAG,MAAQ,CACxD,KAAK,QAAQ,MAAM,KAAK,MAAM,EAElC,KAAK,OAASH,EACd,KAAK,OAASC,EACd,KAAK,UAAYC,IAAc,GAC/B,KAAK,WAAa,GAClB,KAAK,cAAgB,KAAK,UAC1B,KAAK,MAAQ,KACb,KAAK,SAAS,EAEd,GAAI,CACA,KAAK,YAAc,MAAM,KAAK,cAAc,CACxC,MAAO,CAAE,iBAAkB,GAAM,iBAAkB,GAAM,gBAAiB,EAAK,EAC/E,MAAO,KAAK,UACN,CAAE,WAAY,KAAK,WAAY,MAAO,CAAE,MAAO,IAAK,EAAG,OAAQ,CAAE,MAAO,GAAI,CAAE,EAC9E,EACV,CAAC,CACL,OAASE,EAAO,CACZ,WAAK,OAAS,KACd,KAAK,MAAQC,GAAeD,CAAK,EACjC,KAAK,SAAS,EACRA,CACV,CAEA,KAAK,WAAa,KAAK,kBAAkB,KAAK,WAAW,EACzD,KAAK,mBAAmB,EACxB,KAAK,SAASD,CAAK,CACvB,CAmBA,SAASA,EAAO,CAEZ,GADA,KAAK,OAAS,MAAM,QAAQA,CAAK,EAAIA,EAAQ,CAAC,EAC1C,CAAC,KAAK,OAAQ,OAElB,IAAMG,EAAS,IAAI,IACnB,QAAWC,KAAQ,KAAK,OAChB,CAACA,GAAQ,CAACA,EAAK,IAAMA,EAAK,KAAO,KAAK,QAC1CD,EAAO,IAAIC,EAAK,GAAIA,CAAI,EAM5B,OAAW,CAACC,EAAIC,CAAG,GAAK,CAAC,GAAG,KAAK,KAAK,EAAG,CACrC,IAAMF,EAAOD,EAAO,IAAIE,CAAE,GACtB,CAACD,GAAQA,EAAK,YAAcE,EAAI,YAAW,KAAK,QAAQD,CAAE,CAClE,CAEA,OAAW,CAACA,EAAID,CAAI,IAAKD,EAAQ,CAC7B,IAAMI,EAAW,KAAK,MAAM,IAAIF,CAAE,EAClC,GAAIE,EAAU,CAONA,EAAS,QAAUhC,GAAU,QAAU,KAAK,QAAQ8B,CAAE,GAAG,KAAK,MAAME,CAAQ,EAChF,QACJ,CACKH,EAAK,WACV,KAAK,QAAQC,EAAID,CAAI,CACzB,CAEA,KAAK,SAAS,CAClB,CAGA,MAAM,OAAQ,CAEV,GADA,KAAK,kBAAkB,EACnB,KAAK,WAAY,CAAE,GAAI,CAAE,KAAK,WAAW,QAAQ,CAAG,MAAY,CAAC,CAAE,KAAK,WAAa,IAAM,CAC/F,KAAK,aAAe,GACpB,QAAWC,IAAM,CAAC,GAAG,KAAK,MAAM,KAAK,CAAC,EAAG,KAAK,QAAQA,CAAE,EACxD,GAAI,KAAK,KAAM,CAAE,GAAI,CAAE,KAAK,KAAK,QAAQ,CAAG,MAAY,CAAC,CAAE,KAAK,KAAO,IAAM,CAC7E,GAAI,KAAK,YACL,QAAWG,KAAS,KAAK,YAAY,UAAU,EAC3C,GAAI,CAAEA,EAAM,KAAK,CAAG,MAAY,CAAsB,CAG9D,KAAK,YAAc,KACnB,KAAK,OAAS,KACd,KAAK,OAAS,GACd,KAAK,UAAY,GACjB,KAAK,cAAgB,GACrB,KAAK,WAAa,GAClB,KAAK,OAAS,CAAC,EACf,KAAK,SAAS,CAClB,CAaA,QAAQC,EAAQ,CACZ,OAAO,KAAK,OAASA,CACzB,CAEA,QAAQJ,EAAID,EAAM,CACd,IAAMM,EAAU,KAAK,YAAYN,EAAK,SAAS,EAC/C,GAAI,CAACM,EAAS,OAEd,IAAMJ,EAAM,CACR,GAAAD,EACA,KAAMD,EAAK,MAAQ,SACnB,UAAWA,EAAK,UAChB,QAAAM,EACA,YAAa,KACb,KAAM,KAAK,iBAAiB,EAC5B,MAAO,KACP,SAAU,KACV,SAAU,GACV,WAAY,EACZ,MAAOnC,GAAU,WACjB,QAAS,KACT,SAAU,EACd,EACI+B,EAAI,OAAQA,EAAI,KAAK,SAAW,GAAMA,EAAI,KAAK,MAAQ,IAC3D,KAAK,MAAM,IAAID,EAAIC,CAAG,EAItB,GAAI,CAAEI,EAAQ,oBAAoB,KAAK,MAAM,CAAG,MAAY,CAAC,CAC7D,GAAI,CAAEA,EAAQ,uBAAuB,KAAK,WAAW,CAAG,MAAY,CAAC,CAarE,GAXI,OAAOA,EAAQ,sBAAyB,aACxCJ,EAAI,YAAcI,EAAQ,qBAAsBC,GAAU,KAAK,YAAYN,EAAIM,CAAK,CAAC,GAQzF,KAAK,YAAYN,EAAIK,EAAQ,eAAe,GAAK,CAAC,CAAC,EAE/C,KAAK,QAAQL,CAAE,EAAG,CAClB,KAAK,MAAMC,CAAG,EACd,MACJ,CASAA,EAAI,SAAW,WAAW,IAAM,KAAK,cAAcD,CAAE,EAAG3B,EAAgB,CAC5E,CAEA,cAAc2B,EAAI,CACd,IAAMC,EAAM,KAAK,MAAM,IAAID,CAAE,EACzB,CAACC,GAAO,CAAC,KAAK,SAClBA,EAAI,SAAW,MACDA,EAAI,QAAQ,eAAe,EAAE,OAAS,UACtC,UACd,KAAK,KAAK,OAAQ,4DAA6D,CAAC,CAAC,EACjF,QAAQ,QAAQ,EACX,KAAK,IAAMA,EAAI,QAAQ,UAAU,KAAK,SAAS,CAAC,EAChD,MAAM,IAAM,CACT,IAAMM,EAAO,KAAK,MAAM,IAAIP,CAAE,EAC1BO,IAASN,IAAOM,EAAK,MAAQrC,GAAU,OAAQ,KAAK,SAAS,EACrE,CAAC,EACT,CAGA,MAAM+B,EAAK,EACOA,EAAI,QAAQ,eAAe,EAAE,OAAS,UACtC,SACdA,EAAI,MAAQ/B,GAAU,WACtB,QAAQ,QAAQ,EACX,KAAK,IAAM+B,EAAI,QAAQ,UAAU,KAAK,SAAS,CAAC,EAChD,MAAOL,GAAU,CACd,KAAK,KAAK,OAAQ,qCAAsC,CACpD,UAAWA,GAAO,aAAa,IACnC,CAAC,EACD,IAAMW,EAAO,KAAK,MAAM,IAAIN,EAAI,EAAE,EAC9BM,IAASN,IAAOM,EAAK,MAAQrC,GAAU,OAAQ,KAAK,SAAS,EACrE,CAAC,EACT,CAEA,QAAQ8B,EAAI,CACR,IAAMC,EAAM,KAAK,MAAM,IAAID,CAAE,EAC7B,GAAKC,EACL,MAAK,MAAM,OAAOD,CAAE,EAChBC,EAAI,WAAY,aAAaA,EAAI,QAAQ,EAAGA,EAAI,SAAW,MAC/D,GAAI,CAAEA,EAAI,cAAc,CAAG,MAAY,CAAC,CACxC,GAAIA,EAAI,KAAM,CACV,GAAI,CAAEA,EAAI,KAAK,QAAQ,CAAG,MAAY,CAAC,CACvC,GAAI,CAAEA,EAAI,KAAK,UAAY,IAAM,MAAY,CAAC,CAClD,CACA,GAAIA,EAAI,MAAO,CAAE,GAAI,CAAEA,EAAI,MAAM,QAAQ,CAAG,MAAY,CAAC,CAAEA,EAAI,MAAQ,IAAM,CAI7E,GAAI,CAAEA,EAAI,QAAQ,UAAU,CAAG,MAAY,CAAC,CAC5C,GAAI,CAAEA,EAAI,QAAQ,yBAAyB,IAAI,CAAG,MAAY,CAAC,CAC/D,GAAI,CAAEA,EAAI,QAAQ,sBAAsB,IAAI,CAAG,MAAY,CAAC,EAChE,CAEA,YAAYD,EAAIM,EAAO,CACnB,IAAML,EAAM,KAAK,MAAM,IAAID,CAAE,EAC7B,GAAI,CAACC,EAAK,OACV,IAAMO,EAAQF,GAAO,OAAS,OAC1BL,EAAI,UAAYO,IAAU,SAAU,aAAaP,EAAI,QAAQ,EAAGA,EAAI,SAAW,MACnFA,EAAI,MAAQ9B,GAAeqC,CAAK,GAAKtC,GAAU,WAC/C+B,EAAI,QAAUK,GAAO,SAAW,KAChCL,EAAI,SAAWK,GAAO,iBAAmB,GACzC,KAAK,WAAWL,CAAG,EACnB,KAAK,SAAS,CAClB,CAWA,WAAWA,EAAK,CACZ,GAAI,CAACA,EAAI,KAAM,OACf,IAAIzB,EAAS,KACb,GAAI,CAAEA,EAASyB,EAAI,QAAQ,uBAAuB,GAAK,IAAM,MAAY,CAAE,MAAQ,CACnF,GAAI,GAACzB,GAAUyB,EAAI,KAAK,YAAczB,GACtC,IAAI,CACAyB,EAAI,KAAK,UAAYzB,EACrB,IAAMiC,EAASR,EAAI,KAAK,OAAO,EAC3BQ,GAAUA,EAAO,OAAOA,EAAO,MAAM,IAAM,CAAC,CAAC,CACrD,MAAY,CAAiE,CAI7E,GAAIR,EAAI,MAAS,GAAI,CAAEA,EAAI,MAAM,QAAQ,CAAG,MAAY,CAAC,CACzDA,EAAI,MAAQ,KAAK,kBAAkBzB,CAAM,EACzCyB,EAAI,SAAW,GACnB,CAMA,oBAAqB,CACb,KAAK,aAAe,OAAO,aAAgB,aAC/C,KAAK,YAAc,YAAY,IAAM,KAAK,cAAc,EAAG7B,GAAS,SAAS,EACjF,CAEA,mBAAoB,CACZ,KAAK,cAAe,cAAc,KAAK,WAAW,EAAG,KAAK,YAAc,KAChF,CASA,YAAYsC,EAAQC,EAAKC,EAAUC,EAAOC,EAAK,CAC3C,IAAMC,EAAWL,EAAOC,CAAG,IAAM,GACjC,OAAIE,GAASzC,GAAS,IAClBsC,EAAOE,CAAQ,EAAI,EACdG,EACE,IADUL,EAAOC,CAAG,EAAI,GAAa,KAG3CI,EACDF,EAAQzC,GAAS,KAAOsC,EAAOE,CAAQ,EAAI,EAAU,IACpDF,EAAOE,CAAQ,EAChBE,EAAMJ,EAAOE,CAAQ,GAAKxC,GAAS,SAAWsC,EAAOC,CAAG,EAAI,GAAc,IACvE,IAFkBD,EAAOE,CAAQ,EAAIE,EAAY,IAFlC,EAK1B,CAEA,eAAgB,CACZ,GAAI,CAAC,KAAK,OAAQ,OAClB,IAAMA,EAAM,KAAK,IAAI,EACjBE,EAAU,GAKRC,EAAa,KAAK,YAAc,KAAK,WAAcC,GAAS,KAAK,UAAU,EAAI,EACjF,KAAK,YAAY,KAAM,eAAgB,kBAAmBD,EAAWH,CAAG,IAAGE,EAAU,IAEzF,QAAWf,KAAO,KAAK,MAAM,OAAO,EAAG,CACnC,IAAMY,EAAQZ,EAAI,MAAQiB,GAASjB,EAAI,KAAK,EAAI,EAC5C,KAAK,YAAYA,EAAK,WAAY,aAAcY,EAAOC,CAAG,IAAGE,EAAU,GAC/E,CAIIA,GAAS,KAAK,SAAS,CAC/B,CAMA,OAAOG,EAAS,CAEZ,GADA,KAAK,WAAaA,IAAY,GAC1B,KAAK,YACL,QAAWhB,KAAS,KAAK,YAAY,eAAe,EAAGA,EAAM,QAAU,KAAK,WAM3E,KAAK,aAAc,KAAK,aAAe,GAAO,KAAK,gBAAkB,GAI1E,QAAWF,KAAO,KAAK,MAAM,OAAO,EAChC,GAAI,CAAEA,EAAI,QAAQ,gBAAgB,KAAK,UAAU,CAAG,MAAY,CAAC,CAErE,KAAK,SAAS,CAClB,CAEA,WAAY,CAAE,KAAK,OAAO,CAAC,KAAK,UAAU,CAAG,CAU7C,MAAM,UAAUkB,EAAS,CACrB,GAAI,CAAC,KAAK,QAAU,KAAK,MAAO,OAChC,GAAIA,IAAY,GAAO,CAEnB,GADA,KAAK,cAAgB,GACjB,KAAK,YACL,QAAWhB,KAAS,KAAK,YAAY,eAAe,EAAGA,EAAM,QAAU,GAE3E,QAAWF,KAAO,KAAK,MAAM,OAAO,EAChC,GAAI,CAAEA,EAAI,QAAQ,mBAAmB,EAAK,CAAG,MAAY,CAAC,CAE9D,KAAK,SAAS,EACd,MACJ,CAEA,IAAMC,EAAW,KAAK,aAAa,iBAAiB,GAAK,CAAC,EAC1D,GAAIA,EAAS,OAAQ,CACjB,QAAWC,KAASD,EAAUC,EAAM,QAAU,GAC9C,KAAK,cAAgB,GACrB,KAAK,UAAY,GACjB,KAAK,SAAS,EACd,MACJ,CAEA,KAAK,MAAQ,GACb,GAAI,CAIA,IAAMA,GAHS,MAAM,KAAK,cAAc,CACpC,MAAO,CAAE,WAAY,KAAK,WAAY,MAAO,CAAE,MAAO,IAAK,EAAG,OAAQ,CAAE,MAAO,GAAI,CAAE,CACzF,CAAC,GACoB,eAAe,EAAE,CAAC,EACvC,GAAI,CAACA,EAAO,OACZ,KAAK,YAAY,SAASA,CAAK,EAC/B,KAAK,cAAgB,GACrB,KAAK,UAAY,GACjB,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,MAAM,OAAO,CAAC,EAAE,IAC7CF,GAAQ,QAAQ,QAAQ,EAAE,KAAK,IAAMA,EAAI,QAAQ,gBAAgBE,CAAK,CAAC,CAC5E,CAAC,CACL,OAASP,EAAO,CACZ,KAAK,MAAQC,GAAeD,CAAK,EACjC,KAAK,cAAgB,EACzB,QAAE,CACE,KAAK,MAAQ,GACb,KAAK,SAAS,CAClB,CACJ,CAEA,MAAM,cAAe,CAAE,MAAM,KAAK,UAAU,CAAC,KAAK,aAAa,CAAG,CAGlE,MAAM,YAAa,CACf,GAAI,CAAC,KAAK,QAAU,KAAK,OAAS,CAAC,KAAK,YAAa,OACrD,IAAMwB,EAAM,KAAK,YAAY,eAAe,EAAE,CAAC,EAC/C,GAAI,CAACA,EAAK,OAEV,KAAK,MAAQ,GACb,IAAMC,EAAW,KAAK,WACtB,KAAK,WAAa,KAAK,aAAe,OAAS,cAAgB,OAC/D,GAAI,CAEA,IAAMlB,GADS,MAAM,KAAK,cAAc,CAAE,MAAO,CAAE,WAAY,KAAK,UAAW,CAAE,CAAC,GAC7D,eAAe,EAAE,CAAC,EACvC,GAAI,CAACA,EAAO,CAAE,KAAK,WAAakB,EAAU,MAAQ,CAClDlB,EAAM,QAAU,KAAK,cACrB,KAAK,YAAY,YAAYiB,CAAG,EAChC,GAAI,CAAEA,EAAI,KAAK,CAAG,MAAY,CAAC,CAC/B,KAAK,YAAY,SAASjB,CAAK,EAC/B,MAAM,QAAQ,WAAW,CAAC,GAAG,KAAK,MAAM,OAAO,CAAC,EAAE,IAC7CF,GAAQ,QAAQ,QAAQ,EAAE,KAAK,IAAMA,EAAI,QAAQ,oBAAoBE,CAAK,CAAC,CAChF,CAAC,CACL,OAASP,EAAO,CACZ,KAAK,WAAayB,EAClB,KAAK,KAAK,OAAQ,gCAAiC,CAAE,UAAWzB,GAAO,aAAa,IAAK,CAAC,CAC9F,QAAE,CACE,KAAK,MAAQ,GACb,KAAK,SAAS,CAClB,CACJ,CAMA,gBAAiB,CACb,OAAO,KAAK,WAChB,CAGA,gBAAgBI,EAAI,CAChB,IAAMC,EAAM,KAAK,MAAM,IAAID,CAAE,EAC7B,GAAI,CAACC,EAAK,OAAO,KACjB,GAAI,CAAE,OAAOA,EAAI,QAAQ,uBAAuB,GAAK,IAAM,MAAY,CAAE,OAAO,IAAM,CAC1F,CAUA,UAAW,CACP,IAAMN,EAAQ,KAAK,OACd,OAAQI,GAASA,GAAQA,EAAK,KAAO,KAAK,MAAM,EAChD,IAAKA,GAAS,CACX,IAAME,EAAM,KAAK,MAAM,IAAIF,EAAK,EAAE,EAClC,MAAO,CACH,GAAIA,EAAK,GACT,KAAMA,EAAK,MAAQ,SACnB,MAAOE,EAAMA,EAAI,MAAQ/B,GAAU,YACnC,QAAS+B,EAAMA,EAAI,QAAU,KAC7B,SAAUA,EAAMA,EAAI,SAAW,GAC/B,SAAUA,EAAMA,EAAI,WAAa,GAAO,EAC5C,CACJ,CAAC,EACA,KAAK,CAACqB,EAAGC,IAAOD,EAAE,GAAKC,EAAE,GAAK,GAAKD,EAAE,GAAKC,EAAE,GAAK,EAAI,CAAE,EAE5D,MAAO,CACH,OAAQ,KAAK,OACb,OAAQ,KAAK,OACb,UAAW,KAAK,UAChB,WAAY,KAAK,WACjB,cAAe,KAAK,cACpB,WAAY,KAAK,WACjB,MAAO,KAAK,MACZ,aAAc,KAAK,aACnB,MAAA5B,EACA,UAAWA,EAAM,OAAQ6B,GAAMA,EAAE,QAAUtD,GAAU,MAAM,EAAE,MACjE,CACJ,CAEA,UAAW,CACP,GAAI,CAAE,KAAK,UAAU,KAAK,SAAS,CAAC,CAAG,MAAY,CAAC,CACxD,CACJ,EAUA,SAASgD,GAASO,EAAO,CACrB,GAAI,CAAE,OAAOA,EAAM,KAAK,CAAG,MAAY,CAAE,MAAO,EAAG,CACvD,CAEO,SAAS5B,GAAeD,EAAO,CAClC,IAAM8B,EAAO9B,GAAO,MAAQ,GAC5B,OAAI8B,IAAS,mBAAqBA,IAAS,gBAAwB,oBAC/DA,IAAS,iBAAmBA,IAAS,uBAA+B,mBACpEA,IAAS,oBAAsBA,IAAS,aAAqB,cAC1D,cACX,CCztBO,IAAMC,GAAc,mBAEdC,GAAa,IAuBnB,SAASC,GAAWC,EAAOC,EAAOC,EAAQ,CAC7C,IAAAC,EAAM,GAAU,OAAAC,EAASP,GAAa,SAAAQ,EAAWP,EACrD,EAAI,CAAC,EAAG,CACJ,GAAIE,GAAS,EAAG,MAAO,CAAE,KAAM,EAAG,KAAM,EAAG,MAAO,EAAG,MAAO,CAAE,EAC9D,GAAI,EAAEC,EAAQ,IAAM,EAAEC,EAAS,GAAI,CAG/B,IAAMI,EAAO,KAAK,IAAIN,EAAOA,GAAS,EAAIA,EAAQ,KAAK,KAAK,KAAK,KAAKA,CAAK,CAAC,CAAC,EAC7E,MAAO,CAAE,KAAAM,EAAM,KAAM,KAAK,KAAKN,EAAQM,CAAI,EAAG,MAAO,EAAG,MAAO,CAAE,CACrE,CAEA,IAAIC,EAAO,CAAE,KAAM,EAAG,KAAMP,EAAO,MAAO,EAAG,MAAO,CAAE,EACtD,QAASM,EAAO,EAAGA,GAAQN,EAAOM,IAAQ,CACtC,IAAME,EAAO,KAAK,KAAKR,EAAQM,CAAI,EAC7BG,GAAaR,EAAQE,GAAOG,EAAO,IAAMA,EACzCI,GAAUR,EAASC,GAAOK,EAAO,IAAMA,EAC7C,GAAIC,GAAa,GAAKC,GAAU,EAAG,SAGnC,IAAMC,EAAQ,KAAK,IAAIF,EAAWC,EAASN,CAAM,EAC7CO,EAAQJ,EAAK,QAAOA,EAAO,CAAE,KAAAD,EAAM,KAAAE,EAAM,MAAAG,EAAO,MAAOA,EAAQP,CAAO,EAC9E,CAEA,OAAIG,EAAK,MAAQF,IAGbE,EAAK,MAAQF,EACbE,EAAK,MAAQF,EAAWD,GAErBG,CACX,CAkBO,SAASK,GAAgBC,EAAaZ,EAAOC,EAAQ,CACxD,IAAAC,EAAM,GAAU,OAAAC,EAASP,GAAa,SAAAiB,EAAW,GAAI,SAAAC,EAAW,GACpE,EAAI,CAAC,EAAG,CACJ,GAAI,EAAEd,EAAQ,IAAM,EAAEC,EAAS,GAC3B,MAAO,CAAE,KAAM,CAAE,EAAG,EAAG,EAAG,CAAE,EAAG,OAAQ,EAAG,OAAQ,CAAE,EAExD,GAAIW,GAAe,EAAG,CAClB,IAAMG,EAAI,KAAK,IAAIf,EAAOC,EAASE,CAAM,EACzC,MAAO,CAAE,KAAM,CAAE,EAAAY,EAAG,EAAGA,EAAIZ,CAAO,EAAG,OAAQ,EAAG,OAAQ,CAAE,CAC9D,CAEA,IAAMa,EAAS,KAAK,IAAIH,EAAU,KAAK,IAAIC,EAAU,KAAK,MAAMb,EAAS,GAAME,CAAM,CAAC,CAAC,EACjFc,EAASD,EAASb,EAClBe,EAAQjB,EAASgB,EAASf,EAC1BiB,EAAQ,KAAK,IAAInB,EAAOkB,EAAQf,CAAM,EAM5C,OAAIe,GAAS,GAAKC,EAAQH,EAAS,EACxB,CAAE,KAAM,CAAE,EAAG,EAAG,EAAG,CAAE,EAAG,OAAQ,EAAG,OAAQ,CAAE,EAEjD,CAAE,KAAM,CAAE,EAAGG,EAAO,EAAGA,EAAQhB,CAAO,EAAG,OAAAc,EAAQ,OAAAD,CAAO,CACnE,CCzFA,IAAMI,EAAI,IAAIC,IAAS,MAAM,cAAc,GAAGA,CAAI,EAC5CC,GAAO,mEAEPC,GAAO,CACT,KAAM,4FACN,SAAU,6GACV,OAAQ,qDACR,MAAO,iMACP,MAAO,uGACP,OAAQ,uKACR,MAAO,mFACP,OAAQ,mFACR,KAAM,mOACN,KAAM,6GACN,MAAO,gSACP,YAAa,6TACjB,EAEMC,GAAM,CAACC,EAAOC,EAAMC,IAAOP,EAAE,OAAQ,CACvC,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,MAAOM,EAAO,KAAM,OAAQA,EAAO,IAAK,EACxF,wBAAyB,CAAE,OAAQ,eAAeA,CAAI,aAAaA,CAAI,yEAAyEC,CAAE,oDAAoDF,CAAK,QAAS,CACxN,CAAC,EAEKG,GAAW,CACb,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,qCAAsC,WAAY,4BAC1D,MAAO,mBAAoB,OAAQ,UAAW,WAAY,UAC9D,EACMC,GAAa,CAAE,GAAGD,GAAU,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,uBAAwB,EACrHE,GAAS,CACX,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,OAAQ,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,UACjF,UAAW,kDAAmD,WAAY,gBAC9E,EACMC,GAAc,CAChB,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,sCAAuC,WAAY,mBAC3D,MAAO,OAAQ,OAAQ,UAAW,WAAY,UAClD,EAIMC,GAAU,CACZ,UAAW,CAAE,KAAM,EAAG,MAAO,kBAAmB,MAAO,uBAAwB,EAC/E,KAAM,CAAE,KAAM,EAAG,MAAO,kBAAmB,MAAO,uBAAwB,EAC1E,KAAM,CAAE,KAAM,EAAG,MAAO,mBAAoB,MAAO,wBAAyB,EAC5E,KAAM,CAAE,KAAM,EAAG,MAAO,gBAAiB,MAAO,qBAAsB,CAC1E,EAEA,SAASC,GAAYC,EAAS,CAC1B,IAAMC,EAAIH,GAAQE,CAAO,EACzB,OAAKC,EACEf,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,WAAY,WAAY,IAAK,MAAO,OAAQ,MAAO,CAAE,EAC/G,CAAC,EAAG,EAAG,EAAG,CAAC,EAAE,IAAKgB,GAAMhB,EAAE,OAAQ,CAC9B,IAAKgB,EACL,MAAO,CACH,MAAO,QAAS,OAAS,EAAIA,EAAI,IAAO,KAAM,aAAc,MAC5D,WAAYA,EAAID,EAAE,KAAOA,EAAE,MAAQ,2BACvC,CACJ,CAAC,CAAC,CAAC,EARQ,IASnB,CAEA,SAASE,GAASC,EAAM,CACpB,IAAMC,EAAQ,OAAOD,GAAQ,EAAE,EAAE,KAAK,EAAE,MAAM,KAAK,EAAE,OAAO,OAAO,EACnE,QAASC,EAAM,CAAC,IAAI,CAAC,GAAK,KAAOA,EAAM,CAAC,IAAI,CAAC,GAAKA,EAAM,CAAC,IAAI,CAAC,GAAK,KAAK,YAAY,GAAK,GAC7F,CAEA,IAAMC,GAAOC,GAAM,GAAG,OAAO,KAAK,MAAMA,EAAI,EAAE,CAAC,EAAE,SAAS,EAAG,GAAG,CAAC,IAAI,OAAOA,EAAI,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,GAUpG,SAASC,IAAkB,CACvB,GAAM,CAAChB,EAAMiB,CAAO,EAAI,MAAM,SAAS,CAAE,EAAG,EAAG,EAAG,CAAE,CAAC,EAiB/C,CAACC,EAAMC,CAAO,EAAI,MAAM,SAAS,IAAI,EAC3C,aAAM,gBAAgB,IAAM,CACxB,GAAI,CAACD,EAAM,OACX,IAAME,EAAQ,IAAMH,EAASI,GACzBA,EAAK,IAAMH,EAAK,aAAeG,EAAK,IAAMH,EAAK,aACzCG,EACA,CAAE,EAAGH,EAAK,YAAa,EAAGA,EAAK,YAAa,CACrD,EAED,GADAE,EAAM,EACF,OAAO,eAAmB,IAC1B,cAAO,iBAAiB,SAAUA,CAAK,EAChC,IAAM,OAAO,oBAAoB,SAAUA,CAAK,EAE3D,IAAME,EAAW,IAAI,eAAeF,CAAK,EACzC,OAAAE,EAAS,QAAQJ,CAAI,EACd,IAAMI,EAAS,WAAW,CACrC,EAAG,CAACJ,CAAI,CAAC,EACF,CAACC,EAASnB,CAAI,CACzB,CASA,SAASuB,GAAK,CAAE,KAAAC,EAAM,OAAAC,EAAQ,KAAAC,EAAM,YAAAC,EAAa,cAAAC,EAAe,SAAAC,EAAU,MAAAC,EAAO,MAAAC,EAAO,SAAAC,EAAU,OAAAC,EAAQ,QAAAC,CAAQ,EAAG,CACjH,IAAMC,EAAW,MAAM,OAAO,IAAI,EAC5BC,EAASV,EAAOC,EAAcF,EAC9BY,EAAYX,EAAOE,EAAgBJ,EAAK,SAM9C,MAAM,UAAU,IAAM,CAClB,IAAMc,EAAKH,EAAS,QACpB,GAAI,CAACG,GAAM,CAACF,EAAQ,OAChBE,EAAG,YAAcF,IAAUE,EAAG,MAAQ,GAAMA,EAAG,UAAYF,GAC/D,IAAMG,GAASD,EAAG,MAAQA,EAAG,KAAK,EAC9BC,IAAUA,GAAO,OAAOA,GAAO,MAAM,IAAM,CAAC,CAAC,CACrD,CAAC,EAID,IAAMC,EAAad,GAEbF,EAAK,QAAUiB,GAAU,OADzB,KAEIjB,EAAK,QAAUiB,GAAU,YAAcC,EAAE,uBAAuB,EAC5DlB,EAAK,QAAUiB,GAAU,OAASC,EAAE,qBAAqB,EACrDA,EAAE,sBAAsB,EAEpCC,EAAW,KAAK,IAAI,GAAI,KAAK,IAAI,IAAK,KAAK,OAAOZ,GAAS,KAAO,GAAI,CAAC,CAAC,EAM9E,OAAOrC,EAAE,MAAO,CAIZ,KAAMsC,EAAW,SAAW,OAC5B,SAAUA,EAAW,EAAI,OACzB,QAASA,EACT,UAAWA,EAAYY,GAAM,EAAMA,EAAE,MAAQ,SAAWA,EAAE,MAAQ,OAAOA,EAAE,eAAe,EAAGZ,EAAS,EAAK,EAAI,OAC/G,MAAOC,EAASS,EAAE,kBAAmB,CAAE,KAAMlB,EAAK,IAAK,CAAC,EAClDQ,EAAWU,EAAE,gBAAiB,CAAE,KAAMlB,EAAK,IAAK,CAAC,EAC5CK,EAAWa,EAAE,qBAAsB,CAAE,KAAMlB,EAAK,IAAK,CAAC,EAAIA,EAAK,KAC1E,MAAO,CACH,OAAQQ,EAAW,UAAY,UAC/B,SAAU,WAAY,aAAc,OAAQ,SAAU,SAAU,WAAY,oBAC5E,OAAQH,EAAW,kCAAoC,sCACvD,UAAWA,EAAW,4CAA8C,OACpE,WAAY,+CASZ,KAAMC,EAAQ,WAAa,YAC3B,SAAUA,EAAQ,OAAY,QAC9B,MAAOA,EAAQA,EAAQ,KAAO,OAC9B,OAAQC,EAAQA,EAAQ,KAAO,OAC/B,YAAaA,EAAQ,OAAY,SACjC,QAAS,OAAQ,WAAY,QACjC,CACJ,EAAG,CACCM,EACM3C,EAAE,QAAS,CACT,IAAK,IAAK,IAAKyC,EAAU,SAAU,GAAM,MAAO,GAAM,YAAa,GACnE,MAAO,CACH,SAAU,WAAY,MAAO,EAAG,MAAO,OAAQ,OAAQ,OAAQ,UAAW,QAC1E,UAAWT,EAAO,aAAe,OAAQ,WAAY,cACzD,CACJ,CAAC,EACChC,EAAE,MAAO,CACP,IAAK,KACL,MAAO,CAGH,MAAOiD,EAAW,KAAM,OAAQA,EAAW,KAC3C,aAAc,MAAO,QAAS,OAAQ,WAAY,SAClD,WAAY,6EACZ,OAAQd,EAAW,8CAAgD,qCACnE,MAAOA,EAAW,kBAAoB,mBACtC,WAAYjC,GAAM,SAAU,KAAK,MAAM+C,EAAW,EAAG,EAAI,KAAM,WAAY,IAC3E,WAAY,yCAChB,CACJ,EAAGhC,GAASa,EAAK,IAAI,CAAC,EAC1B9B,EAAE,MAAO,CACL,IAAK,QACL,MAAO,CACH,SAAU,WAAY,YAAa,EAAG,OAAQ,EAAG,QAAS,OAAQ,WAAY,SAC9E,IAAKwC,EAAU,MAAQ,MAAO,QAASA,EAAU,UAAY,WAC7D,WAAY,qDAChB,CACJ,EAAG,CACCxC,EAAE,OAAQ,CACN,IAAK,IACL,MAAO,CACH,KAAM,EAAG,SAAU,EAAG,SAAUwC,EAAU,SAAW,SAAU,WAAY,IAAK,MAAO,mBACvF,WAAY,SAAU,SAAU,SAAU,aAAc,UAC5D,CACJ,EAAGV,EAAK,IAAI,EACZK,GAAYnC,EAAE,OAAQ,CAClB,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,kBAAmB,QAAS,OAAQ,WAAY,QAAS,CACtG,EAAGI,GAAID,GAAK,MAAOqC,EAAU,GAAK,GAAI,CAAC,CAAC,EACvCM,GAAc,CAACN,GAAYxC,EAAE,OAAQ,CAClC,IAAK,IACL,MAAO,CACH,KAAM,OAAQ,WAAYE,GAAM,SAAU,SAC1C,MAAO4B,EAAK,QAAUiB,GAAU,OAAS,gBAAkB,kBAC/D,CACJ,EAAGD,CAAU,EACZ,CAACd,GAAQ,CAACQ,GAAY3B,GAAYiB,EAAK,OAAO,CACnD,CAAC,CACL,CAAC,CACL,CASO,SAASqB,GAAY,CACxB,KAAAC,EAAM,MAAAC,EAAO,UAAAC,EAAW,YAAArB,EAAa,gBAAAsB,EACrC,OAAAC,EAAQ,UAAAC,EAAW,QAAAC,EAAS,YAAAC,EAAa,eAAAC,EAAgB,aAAAC,CAC7D,EAAG,CAQC,GAAM,CAACC,EAAWC,CAAY,EAAI,MAAM,SAAS,EAAK,EAChD,CAACC,EAASC,CAAU,EAAI,MAAM,SAAS,CAAC,EACxC,CAAC1B,EAAQ2B,CAAS,EAAI,MAAM,SAAS,IAAI,EACzC,CAACC,GAAUC,EAAK,EAAI9C,GAAgB,EACpC+C,GAAS,CAAC,CAACjB,GAAM,OAEvB,MAAM,UAAU,IAAM,CAClB,GAAI,CAACiB,GAAQ,CAAEJ,EAAW,CAAC,EAAG,MAAkB,CAChD,IAAMK,EAAU,KAAK,IAAI,EACnBC,EAAK,YAAY,IAAMN,EAAW,KAAK,OAAO,KAAK,IAAI,EAAIK,GAAW,GAAI,CAAC,EAAG,GAAI,EACxF,MAAO,IAAM,cAAcC,CAAE,CACjC,EAAG,CAACF,GAAQjB,GAAM,MAAM,CAAC,EAEzB,MAAM,UAAU,IAAM,CAAOA,GAAMW,EAAa,EAAK,CAAG,EAAG,CAAC,CAACX,CAAI,CAAC,EAKlE,IAAMoB,GAAU,MAAM,QAClB,IAAM,IAAI,IAAI,CAAC,OAAQ,IAAInB,GAAO,OAAS,CAAC,GAAG,IAAKoB,GAAMA,EAAE,EAAE,CAAC,CAAC,EAChE,CAACpB,CAAK,CACV,EAKA,GAJA,MAAM,UAAU,IAAM,CACdd,GAAU,CAACiC,GAAQ,IAAIjC,CAAM,GAAG2B,EAAU,IAAI,CACtD,EAAG,CAAC3B,EAAQiC,EAAO,CAAC,EAEhB,CAACpB,EAAM,OAAO,KAElB,IAAMsB,EAAW1E,EAAE,OAAQ,CACvB,IAAK,MACL,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAO,iBAAkB,CACrI,EAAG,CAACI,GAAID,GAAK,KAAM,GAAI,CAAC,EAAG6C,EAAE,qBAAqB,CAAC,CAAC,EAGpD,GAAI,CAACqB,GACD,OAAOrE,EAAE,MAAO,CACZ,MAAO,CACH,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAC5E,WAAY,gHACZ,UAAW,mBACf,CACJ,EAAG,CACCA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,WAAY,CAAE,EACjEA,EAAE,OAAQ,CAAE,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,iBAAkB,CAAE,EACzI,CAACI,GAAID,GAAK,KAAM,GAAI,CAAC,EAAG6C,EAAE,gBAAgB,CAAC,CAAC,CAAC,EACrDhD,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,eAAgB,SAAU,QAAS,SAAU,UAAW,QAAS,CAAE,EAAG,CAC3KA,EAAE,MAAO,CACL,IAAK,KACL,MAAO,CACH,SAAU,WAAY,MAAO,QAAS,OAAQ,QAAS,aAAc,OACrE,QAAS,OAAQ,WAAY,QACjC,CACJ,EAAG,CACCA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,OAAQ,8CAA+C,UAAW,kCAAmC,CAAE,CAAC,EAC7LA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,OAAQ,8CAA+C,UAAW,mCAAoC,eAAgB,IAAK,CAAE,CAAC,EACnNA,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CACH,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,WAAY,6EACZ,OAAQ,qCAAsC,MAAO,kBACzD,CACJ,EAAGI,GAAID,GAAK,MAAO,GAAI,GAAG,CAAC,CAC/B,CAAC,EACDH,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGsD,CAAS,EAClItD,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYE,GAAM,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAC9GkD,EAAK,UACCJ,EAAE,yBAA0B,CAAE,KAAMI,EAAK,aAAc,CAAC,EACxDJ,EAAE,yBAA0B,CAAE,KAAMI,EAAK,aAAc,CAAC,CAAC,EACnEpD,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAC5FgD,EAAE,mBAAoB,CAAE,MAAOI,EAAK,aAAa,MAAO,CAAC,CAAC,CAClE,CAAC,EACDpD,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,eAAgB,SAAU,IAAK,OAAQ,QAAS,gBAAiB,CAAE,EAAG,CACnIA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAC5GA,EAAE,SAAU,CAAE,IAAK,IAAK,QAASyD,EAAW,MAAOT,EAAE,mBAAmB,EAAG,MAAO,CAAE,GAAGtC,GAAQ,MAAO,OAAQ,OAAQ,MAAO,CAAE,EAAGN,GAAID,GAAK,YAAa,GAAI,GAAG,CAAC,EAChKH,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYE,GAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG8C,EAAE,mBAAmB,CAAC,CAC9H,CAAC,EACDhD,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAC5GA,EAAE,SAAU,CACR,IAAK,IAAK,QAASwD,EAAQ,MAAOR,EAAE,gBAAgB,EACpD,MAAO,CACH,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,OAAQ,WAAY,wBAAyB,MAAO,qBAAsB,OAAQ,UAC1F,UAAW,4CACf,CACJ,EAAG5C,GAAID,GAAK,MAAO,GAAI,GAAG,CAAC,EAC3BH,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYE,GAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG8C,EAAE,gBAAgB,CAAC,CAC3H,CAAC,CACL,CAAC,CACL,CAAC,EAGL,IAAM2B,EAAQtB,GAAO,OAAS,CAAC,EACzBuB,EAAW,CACb,GAAI,OAAQ,KAAM5B,EAAE,eAAe,EAAG,MAAOD,GAAU,OACvD,SAAUM,GAAO,cAAe,QAAS,KAAM,SAAUA,GAAO,eAAiB,EACrF,EAGA,GAAIS,EAAW,CAGX,IAAMe,EAAWF,EAAM,OAAQF,IAAMA,GAAE,QAAQ,EAAE,IAAKA,IAAMA,GAAE,IAAI,EAC5DK,EAAUD,EAAS,SAAW,EAAIA,EAAS,CAAC,EAC5CA,EAAS,OAAS,EAAIA,EAAS,MAAM,EAAG,CAAC,EAAE,KAAK,IAAI,EAC/CxB,GAAO,aAAeL,EAAE,eAAe,EAAI,KACtD,OAAOhD,EAAE,MAAO,CACZ,MAAO,CACH,SAAU,WAAY,OAAQ,OAAQ,eAAgB,OAAQ,OAAQ,GAAI,MAAO,QACjF,aAAc,OAAQ,SAAU,SAAU,WAAY,oBACtD,OAAQ,qCAAsC,UAAW,0EACzD,UAAW,oBACf,CACJ,EAAG,CACCA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,WAAY,CAAE,EAAG,CAC1GA,EAAE,OAAQ,CACN,IAAK,KACL,MAAO,CACH,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAC3E,WAAY,SAAU,WAAY,iCAClC,OAAQ,4CAA6C,MAAO,iBAChE,CACJ,EAAGI,GAAID,GAAK,MAAO,GAAI,GAAG,CAAC,EAC3BH,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACrDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGsD,CAAS,EAC7KtD,EAAE,MAAO,CACL,IAAK,IACL,MAAO,CACH,WAAYE,GAAM,SAAU,OAAQ,MAAO4E,EAAU,kBAAoB,mBACzE,WAAY,SAAU,SAAU,SAAU,aAAc,UAC5D,CACJ,EAAGA,EACG9B,EAAE,qBAAsB,CAAE,KAAM8B,CAAQ,CAAC,EACzC,GAAG9B,EAAE,mBAAoB,CAAE,MAAOI,EAAK,aAAa,MAAO,CAAC,CAAC,SAAMhC,GAAI4C,CAAO,CAAC,EAAE,CAC3F,CAAC,EACDhE,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAM+D,EAAa,EAAK,EAAG,MAAOf,EAAE,aAAa,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAG5C,GAAID,GAAK,OAAQ,GAAI,CAAC,CAAC,EAC3UH,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS0D,EAAS,MAAOV,EAAE,iBAAiB,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,6BAA8B,MAAO,OAAQ,OAAQ,SAAU,CAAE,EAAG5C,GAAID,GAAK,YAAa,GAAI,CAAC,CAAC,CAC3T,CAAC,CACL,CAAC,CACL,CAGA,IAAM4E,EAAQ,CAACH,EAAU,GAAGD,CAAK,EAE3BK,EAAYzC,GADD0C,GAAOF,EAAM,KAAMG,GAASA,EAAK,KAAOD,CAAE,GAAK,MAC7B1C,CAAM,EAAI,KACvC4C,EAASH,EAAYD,EAAM,OAAQG,GAASA,EAAK,KAAOF,EAAU,EAAE,EAAI,CAAC,EACzEI,EAAOJ,EAAYK,GAAgBF,EAAO,OAAQf,GAAM,EAAGA,GAAM,CAAC,EAAI,KAGtEkB,GAAUN,GAAaI,GAAQA,EAAK,KAAK,EAAI,EAC7CG,GAASC,GAAWT,EAAM,OAAQX,GAAM,EAAGA,GAAM,CAAC,EAElDqB,GAAa,CAACP,EAAMQ,EAAQ,CAAC,IAAM1F,EAAE6B,GAAM,CAC7C,IAAKqD,EAAK,GACV,KAAMA,EACN,KAAMA,EAAK,KAAO,OAClB,SAAUA,EAAK,WAAa,GAC5B,YAAAjD,EACA,cAAeoB,GAAO,cACtB,OAAQ6B,EAAK,KAAO,OAAS,KAAO3B,EAAgB2B,EAAK,EAAE,EAC3D,GAAGQ,CACP,CAAC,EAED,OAAO1F,EAAE,MAAO,CACZ,MAAO,CACH,SAAU,WAAY,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,cAAe,SAC5E,WAAY,uBAAwB,UAAW,mBACnD,CACJ,EAAG,CACCA,EAAE,MAAO,CACL,IAAK,MACL,MAAO,CACH,KAAM,OAAQ,QAAS,OAAQ,WAAY,aAAc,eAAgB,gBACzE,IAAK,OAAQ,QAAS,gBAC1B,CACJ,EAAG,CACCA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,CAAE,CAAE,EAAG,CAC3CA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,OAAQ,SAAU,SAAU,aAAc,WAAY,WAAY,QAAS,CAAE,EAAGsD,CAAS,EAC1LtD,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,UAAW,KAAM,CAAE,EAAG,CAC1GA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYE,GAAM,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGkB,GAAI4C,CAAO,CAAC,EAChHU,EACA1E,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAC3EgD,EAAE,mBAAoB,CAAE,MAAOI,EAAK,aAAa,MAAO,CAAC,CAAC,CAClE,CAAC,CACL,CAAC,EACDpD,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAC/FsF,IAAWtF,EAAE,SAAU,CACnB,IAAK,OAAQ,QAAS,IAAMkE,EAAU,IAAI,EAAG,MAAOlB,EAAE,wBAAwB,EAC9E,MAAO,CACH,OAAQ,OAAQ,QAAS,SAAU,aAAc,MAAO,QAAS,cACjE,WAAY,SAAU,IAAK,MAAO,OAAQ,sCAC1C,WAAY,mBAAoB,MAAO,OAAQ,OAAQ,UACvD,WAAY,UAAW,SAAU,SAAU,WAAY,GAC3D,CACJ,EAAG,CAAC5C,GAAID,GAAK,KAAM,GAAI,CAAC,EAAG6C,EAAE,wBAAwB,CAAC,CAAC,EACvDhD,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAM+D,EAAa,EAAI,EAAG,MAAOf,EAAE,eAAe,EAAG,MAAOrC,EAAY,EAAGP,GAAID,GAAK,SAAU,GAAI,CAAC,CAAC,CAC3I,CAAC,CACL,CAAC,EAEDkD,GAAO,OAASrD,EAAE,MAAO,CACrB,IAAK,MACL,MAAO,CACH,KAAM,OAAQ,OAAQ,cAAe,QAAS,WAAY,aAAc,OACxE,WAAY,+BAAgC,OAAQ,0CACpD,MAAO,gBAAiB,SAAU,SAAU,WAAY,GAC5D,CACJ,EAAGgD,EAAE,iBAAiBK,EAAM,KAAK,EAAE,CAAC,EAKpCrD,EAAE,MAAO,CACL,IAAK,QACL,IAAKmE,GACL,UAAW,aACX,MAAO,CACH,KAAM,EAAG,UAAW,EAAG,SAAU,EAAG,SAAU,OAI9C,OAAQ,aAUR,QAAS,OAAQ,WAAY,cAAe,eAAgB,aAChE,CACJ,EAAGmB,GAEGtF,EAAE,MAAO,CACP,MAAO,CACH,QAAS,OAAQ,cAAe,SAAU,IAAK,GAAW,KAC1D,MAAO,OAAQ,OAAQoE,GAAM,EAAI,KAAM,UAAW,CACtD,CACJ,EAAG,CACCpE,EAAE,MAAO,CACL,IAAK,OACL,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,eAAgB,SAAU,UAAW,CAAE,CACnF,EAAGyF,GAAWT,EAAW,CACrB,MAAOI,EAAK,KAAK,EAAG,MAAOA,EAAK,KAAK,EACrC,OAAQ,GAAM,SAAU,IAAMlB,EAAU,IAAI,CAChD,CAAC,CAAC,EACFiB,EAAO,OAAS,GAAKnF,EAAE,MAAO,CAC1B,IAAK,QACL,UAAW,aACX,MAAO,CACH,KAAM,OAAQ,OAAQoF,EAAK,OAAS,KAAM,QAAS,OACnD,IAAK,GAAW,KAAM,eAAgBD,EAAO,OAAS,EAAI,aAAe,SAIzE,UAAW,OAAQ,UAAW,QAClC,CACJ,EAAGA,EAAO,IAAKD,GAASO,GAAWP,EAAM,CACrC,MAAOE,EAAK,OAAQ,MAAOA,EAAK,OAAQ,QAAS,GACjD,SAAU,IAAMlB,EAAUgB,EAAK,EAAE,CACrC,CAAC,CAAC,CAAC,CACP,CAAC,EAEClF,EAAE,MAAO,CAMP,MAAO,CACH,QAAS,OAAQ,SAAU,OAAQ,IAAK,GAAW,KACnD,eAAgB,SAAU,aAAc,SACxC,MAAOuF,GAAO,MACPA,GAAO,KAAOA,GAAO,OAASA,GAAO,KAAO,GAAK,GAAY,KAC9D,MACV,CACJ,EAAGR,EAAM,IAAKG,GAASO,GAAWP,EAAM,CACpC,MAAOK,GAAO,MAAO,MAAOA,GAAO,MACnC,SAAU,IAAMrB,EAAUgB,EAAK,EAAE,CACrC,CAAC,CAAC,CAAC,CAAC,EAERlF,EAAE,MAAO,CACL,IAAK,QACL,MAAO,CACH,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,OACpF,QAAS,iFACT,WAAY,qDAChB,CACJ,EAAG,CACCA,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS2D,EAAa,MAAOX,EAAE,WAAW,EAAG,MAAOK,GAAO,WAAa7C,GAAWC,EAAW,EACpHL,GAAIiD,GAAO,WAAalD,GAAK,MAAQA,GAAK,OAAQ,GAAI,GAAG,CAAC,EAC9DH,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS4D,EAAgB,MAAOZ,EAAE,aAAa,EAAG,MAAOK,GAAO,cAAgB7C,GAAWC,EAAW,EAC5HL,GAAIiD,GAAO,cAAgBlD,GAAK,MAAQA,GAAK,OAAQ,GAAI,GAAG,CAAC,EACjEkD,GAAO,eAAiBrD,EAAE,SAAU,CAAE,IAAK,OAAQ,QAAS6D,EAAc,MAAOb,EAAE,iBAAiB,EAAG,MAAOxC,EAAS,EAAGJ,GAAID,GAAK,KAAM,GAAI,GAAG,CAAC,EACjJH,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS0D,EAAS,MAAOV,EAAE,iBAAiB,EAAG,MAAOtC,EAAO,EAAGN,GAAID,GAAK,YAAa,GAAI,GAAG,CAAC,CAC5H,CAAC,CACL,CAAC,CACL,CAEI,OAAO,OAAW,MAClB,OAAO,YAAcgD,IC7hBzB,IAAMwC,GAAMC,GAAU,EAKhBC,GAAiB,IAAOC,GAAqB,EAAI,OAAS,SAK1DC,GAAsB,IAAM,CAC9B,OAAO,mBAAqB,KAAK,IAAI,EACrC,SAAS,cAAc,IAAI,YAAY,4BAA4B,CAAC,CACxE,EAWsBC,GAAwB,MAAOC,EAAMC,EAAc,IAAM,CAC3D,IAAIC,EAAK,GACT,GAAI,CACA,MAAM,UAAU,UAAU,UAAUF,CAAI,EACxCE,EAAK,EACT,MAAY,CACR,GAAI,CACA,IAAMC,EAAK,SAAS,cAAc,UAAU,EAC5CA,EAAG,MAAQH,EACXG,EAAG,MAAM,SAAW,QACpBA,EAAG,MAAM,QAAU,IACnB,SAAS,KAAK,YAAYA,CAAE,EAC5BA,EAAG,OAAO,EACVD,EAAK,SAAS,YAAY,MAAM,EAChC,SAAS,KAAK,YAAYC,CAAE,CAChC,MAAY,CAAED,EAAK,EAAO,CAC9B,CACA,OAAIA,GAAMD,EAAc,GAAK,UAAU,WAAa,UAAU,UAAU,WACpE,WAAW,SAAY,CACnB,IAAIG,EAAU,KACVC,EAAW,GACf,GAAI,CAAED,EAAU,MAAM,UAAU,UAAU,SAAS,CAAG,MAC5C,CAAEC,EAAW,EAAO,CAC9B,GAAI,CAACA,GAAYD,IAAYJ,EACzB,GAAI,CAAE,MAAM,UAAU,UAAU,UAAU,EAAE,CAAG,MAAY,CAAC,CAEpE,EAAGC,CAAW,EAEXC,CACX,EAIMI,GAAwBN,GAAS,CACnC,GAAI,OAAOA,GAAS,UAAYA,EAAK,QAAQ,KAAK,IAAM,GAAI,OAAO,KACnE,IAAMO,EAAW,CAAC,EACZC,EAAK,0CACPC,EAAO,EACPC,EACJ,MAAQA,EAAIF,EAAG,KAAKR,CAAI,KAAO,MACvBU,EAAE,MAAQD,GAAMF,EAAS,KAAK,CAAE,KAAM,OAAQ,QAASP,EAAK,MAAMS,EAAMC,EAAE,KAAK,CAAE,CAAC,EACtFH,EAAS,KAAK,CAAE,KAAM,OAAQ,MAAOG,EAAE,CAAC,GAAK,IAAI,YAAY,EAAG,QAASA,EAAE,CAAC,EAAE,QAAQ,MAAO,EAAE,CAAE,CAAC,EAClGD,EAAOD,EAAG,UAEd,OAAIC,EAAOT,EAAK,QAAQO,EAAS,KAAK,CAAE,KAAM,OAAQ,QAASP,EAAK,MAAMS,CAAI,CAAE,CAAC,EAC1EF,EAAS,KAAKI,GAAKA,EAAE,OAAS,MAAM,EAAIJ,EAAW,IAC9D,EAOMK,GAAc,IAAI,IAAI,CACxB,QAAQ,MAAM,MAAM,WAAW,SAAS,KAAK,OAAO,MAAM,QAAQ,KAAK,SACvE,OAAO,QAAQ,WAAW,QAAQ,UAAU,MAAM,OAAO,QAAQ,SAAS,SAC1E,OAAO,KAAK,UAAU,QAAQ,QAAQ,MAAM,QAAQ,UAAU,QAAQ,SACtE,aAAa,SAAS,QAAQ,KAAK,KAAK,MAAM,OAAO,SAAS,OAAO,OAAO,SAC5E,SAAS,UAAU,YAAY,SAAS,QAAQ,OAAO,MAAM,OAAO,QAAQ,SAC5E,OAAO,OAAO,UAAU,SAAS,SAAS,OAAO,YAAY,UAAU,OAAO,KAC9E,OAAO,QAAQ,SAAS,SAAS,SAAS,SAAS,QAAQ,MAAM,KAAK,MAAM,MAC5E,OAAO,KAAK,OAAO,OAAO,MAAM,MAAM,OAAO,QAAQ,QAAQ,SAAS,SAC1E,CAAC,EACKC,GAAc,IAAI,IAAI,CAAC,OAAO,QAAQ,OAAO,YAAY,OAAO,OAAO,QAAQ,MAAM,MAAM,UAAU,CAAC,EACtGC,GAAiBC,GAAS,CAC5B,IAAMP,EAAK,4LACLQ,EAAQ,CAAC,EACXC,EAAS,GACTR,EAAO,EACPS,EAAM,EACJC,EAAQ,IAAM,CAAMF,IAAUD,EAAM,KAAKC,CAAM,EAAGA,EAAS,GAAM,EACnEP,EACJ,MAAQA,EAAIF,EAAG,KAAKO,CAAI,KAAO,MAAM,CAC7BL,EAAE,MAAQD,IAAMQ,GAAUF,EAAK,MAAMN,EAAMC,EAAE,KAAK,GACtDD,EAAOD,EAAG,UACV,IAAIY,EAAM,KACNV,EAAE,CAAC,EAAGU,EAAM,uBACPV,EAAE,CAAC,EAAGU,EAAM,iBACZV,EAAE,CAAC,EAAGU,EAAM,eACZV,EAAE,CAAC,IACJE,GAAY,IAAIF,EAAE,CAAC,CAAC,EAAGU,EAAM,kBACxBP,GAAY,IAAIH,EAAE,CAAC,CAAC,IAAGU,EAAM,iBAEtCA,GACAD,EAAM,EACNH,EAAM,KAAK,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAIE,GAAK,GAAI,UAAWE,CAAI,EAAGV,EAAE,CAAC,CAAC,CAAC,GAElFO,GAAUP,EAAE,CAAC,CAErB,CACA,OAAID,EAAOM,EAAK,SAAQE,GAAUF,EAAK,MAAMN,CAAI,GACjDU,EAAM,EACCH,CACX,EAGMK,GAAc,CAChB,GAAI,aAAc,IAAK,aAAc,WAAY,aAAc,KAAM,aACrE,GAAI,aAAc,WAAY,aAAc,IAAK,MAAO,IAAK,MAC7D,GAAI,SAAU,OAAQ,SAAU,GAAI,OAAQ,MAAO,OAAQ,IAAK,OAAQ,KAAM,OAC9E,MAAO,MAAO,IAAK,MAAO,GAAI,MAAO,IAAK,MAAO,EAAG,IAAK,EAAG,IAC5D,GAAI,SAAU,OAAQ,SAAU,KAAM,OAAQ,GAAI,KAAM,OAAQ,KAChE,GAAI,OAAQ,KAAM,OAAQ,KAAM,OAAQ,IAAK,OAAQ,KAAM,OAAQ,IAAK,MACxE,GAAI,WAAY,SAAU,WAAY,KAAM,SAAU,IAAK,SAAU,IAAK,SAAU,IAAK,KAC7F,EAQMC,GAAY,CAAC,CAAE,KAAAP,EAAM,KAAAQ,CAAK,IAAM,CAClC,GAAM,CAACC,EAAQC,CAAS,EAAI,MAAM,SAAS,EAAK,EAC1CC,EAAa,SAAY,CAChB,MAAM3B,GAAsBgB,EAAM,GAAK,IAE9CU,EAAU,EAAI,EACd,WAAW,IAAMA,EAAU,EAAK,EAAG,GAAI,EAE/C,EACME,EAAON,IAAaE,GAAQ,IAAI,YAAY,CAAC,IAAMA,GAAQ,IAAI,YAAY,EAC3EK,EAAS,OAAO,OAAW,IAAe,OAAO,MAAQ,KACzDC,EAAWD,GAASA,EAAM,UAAaA,EAAM,UAAUD,CAAI,EAAI,KAC/DG,EAAW,CAAC,EAAEF,GAASC,GAAW,OAAOD,EAAM,WAAc,YAC/DG,EAAkB,KACtB,GAAID,EACA,GAAI,CAAEC,EAAkBH,EAAM,UAAUb,EAAMc,EAASF,CAAI,CAAG,MAAY,CAAEI,EAAkB,IAAM,CAExG,IAAMC,EAAeF,EAAWH,EAAQJ,GAAQ,OAC1CU,EAAUH,GAAYC,GAAmB,KAEzC,MAAM,cAAc,OAAQ,CAAE,UAAW,YAAcJ,EAAM,wBAAyB,CAAE,OAAQI,CAAgB,CAAE,CAAC,EAEnH,MAAM,cAAc,OAAQ,KAAMjB,GAAcC,CAAI,CAAC,EAC3D,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,kCACX,MAAO,CAAE,gBAAiB,qBAAsB,OAAQ,0BAA2B,CACvF,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,MACL,UAAW,gDACX,MAAO,CAAE,gBAAiB,qBAAsB,OAAQ,0BAA2B,CACvF,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,OACL,UAAW,6DACf,EAAGiB,CAAW,EACd,MAAM,cAAc,SAAU,CAC1B,IAAK,OACL,QAASN,EACT,MAAO,2CACP,UAAW,oFACf,EAAG,CACC,MAAM,cAAc,IAAK,CACrB,IAAK,KACL,UAAW,GAAGF,EAAS,8BAAgC,aAAa,OACxE,CAAC,EACDA,EAASU,EAAE,eAAe,EAAIA,EAAE,aAAa,CACjD,CAAC,CACL,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,MACL,UAAW,mFACX,MAAO,CAAE,WAAY,MAAO,WAAY,2DAA4D,OAAQ,CAAE,CAClH,EAAGD,CAAM,CACb,CAAC,CACL,EAIME,GAAc,CAAC,CAAE,KAAAnC,CAAK,IAAM,CAC9B,IAAMO,EAAWD,GAAqBN,CAAI,EAC1C,OAAKO,EAME,MAAM,cAAc,MAAO,CAAE,UAAW,SAAU,EACrDA,EAAS,IAAI,CAAC6B,EAAKC,IAAMD,EAAI,OAAS,OAChC,MAAM,cAAcd,GAAW,CAAE,IAAKe,EAAG,KAAMD,EAAI,QAAS,KAAMA,EAAI,IAAK,CAAC,EAC3EA,EAAI,QAAQ,KAAK,EACd,MAAM,cAAc,MAAO,CACzB,IAAKC,EACL,UAAW,cACX,MAAO,CAAE,WAAY,WAAY,UAAW,YAAa,CAC7D,EAAGD,EAAI,OAAO,EACZ,IACV,CACJ,EAhBW,MAAM,cAAc,MAAO,CAC9B,UAAW,sBACX,MAAO,CAAE,WAAY,WAAY,UAAW,YAAa,CAC7D,EAAGpC,CAAI,CAcf,EAiJA,IAAMsC,GAAkB,EA2MxB,IAAMC,GAAY,8TACZC,GAAU,mEAGVC,GAAY,CAACC,EAAMC,IAAM,CAC3B,IAAMC,EAAM,CAAC,EACTC,EAAIH,GAAQ,EAChB,QAAS,EAAI,EAAG,EAAIC,EAAG,IAAK,CACxBE,GAAKA,EAAI,KAAO,OAAS,OACzB,IAAMC,EAAID,EAAI,OACRE,EAAM,IAAO,IAAO,KAAK,IAAK,EAAIJ,EAAK,KAAK,EAAE,EACpDC,EAAI,KAAK,KAAK,IAAI,IAAM,KAAK,IAAI,GAAI,GAAME,EAAI,IAAOC,CAAG,CAAC,CAAC,CAC/D,CACA,OAAOH,CACX,EACMI,GAAcC,GAAQ,CACxBA,EAAM,KAAK,IAAI,EAAG,KAAK,MAAMA,CAAG,CAAC,EACjC,IAAMC,EAAI,KAAK,MAAMD,EAAM,EAAE,EAAGJ,EAAII,EAAM,GAC1C,OAAOC,EAAI,IAAM,OAAOL,CAAC,EAAE,SAAS,EAAG,GAAG,CAC9C,EAMMM,GAAc,CAAC,CAAE,MAAAC,EAAO,KAAAC,CAAK,IAAM,CACrC,IAAMC,EAAI,MAAM,cACV,CAACC,EAASC,CAAU,EAAI,MAAM,SAAS,EAAK,EAC5C,CAACC,EAAUC,CAAW,EAAI,MAAM,SAAS,CAAC,EAC1C,CAACC,EAASC,CAAU,EAAI,MAAM,SAAS,EAAK,EAC5CC,EAAW,MAAM,OAAO,IAAI,EAC5BC,EAAS,MAAM,OAAO,IAAI,EAE1BC,EAAIX,GAAS,CAAC,EACdY,EAAM,OAAO,SAASD,EAAE,GAAG,GAAKA,EAAE,IAAM,EAAIA,EAAE,IAAM,EACpDE,EAAQ,MAAM,QAAQF,EAAE,IAAI,GAAKA,EAAE,KAAK,OAAUA,EAAE,KAAOtB,GAAUuB,EAAM,GAAK,GAAI,EAAE,EACtFE,EAAMH,EAAE,KAAO,KACfI,EAAWJ,EAAE,UAAY,KACzBK,EAAe,CAAC,CAACD,GAAY,CAACD,EAC9BG,GAAS,CAAC,CAACN,EAAE,OAASJ,EACtBW,GAAMH,EAAWA,EAAS,IAAM,KAChCI,GAAMJ,EAAW,KAAK,IAAI,EAAG,KAAK,IAAI,IAAKA,EAAS,KAAO,CAAC,CAAC,EAAI,IAEvE,MAAM,UAAU,IAAM,IAAM,CAExB,GADIL,EAAO,SAAS,qBAAqBA,EAAO,OAAO,EACnDD,EAAS,QAAS,CAAE,GAAI,CAAEA,EAAS,QAAQ,MAAM,CAAG,MAAY,CAAC,CAAEA,EAAS,QAAU,IAAM,CACpG,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CAClB,GAAI,CAACK,GAAOL,EAAS,QAAS,CAAE,GAAI,CAAEA,EAAS,QAAQ,MAAM,CAAG,MAAY,CAAC,CAAEA,EAAS,QAAU,KAAML,EAAW,EAAK,EAAGE,EAAY,CAAC,CAAG,CAC/I,EAAG,CAACQ,CAAG,CAAC,EAER,IAAMM,GAAQ,IAAM,CAChB,GAAIX,EAAS,QAAW,GAAI,CAAEA,EAAS,QAAQ,MAAM,CAAG,MAAY,CAAC,CACjEC,EAAO,SAAS,qBAAqBA,EAAO,OAAO,EACvDN,EAAW,EAAK,CACpB,EACMiB,EAAO,IAAM,CACf,GAAI,CAACP,EAAK,OAEV,GADAN,EAAW,EAAK,EACZ,CAACC,EAAS,QAAS,CACnB,IAAMa,GAAI,IAAI,MACdA,GAAE,QAAU,OACZA,GAAE,iBAAiB,aAAc,IAAM,CACnC,IAAMC,GAAID,GAAE,UAAY,SAASA,GAAE,QAAQ,EAAIA,GAAE,SAAWV,EACxDW,IAAGjB,EAAY,KAAK,IAAI,EAAGgB,GAAE,YAAcC,EAAC,CAAC,CACrD,CAAC,EACDD,GAAE,iBAAiB,QAAS,IAAM,CAAElB,EAAW,EAAK,EAAGE,EAAY,CAAC,CAAG,CAAC,EACxEgB,GAAE,iBAAiB,QAAS,IAAM,CAAElB,EAAW,EAAK,EAAGI,EAAW,EAAI,CAAG,CAAC,EAC1Ec,GAAE,IAAMR,EACRL,EAAS,QAAUa,EACvB,CACA,IAAME,EAAIf,EAAS,QAAQ,KAAK,EAC5Be,GAAK,OAAOA,EAAE,MAAS,WACvBA,EAAE,KAAK,IAAMpB,EAAW,EAAI,CAAC,EAAE,MAAOqB,IAAQ,CAAE,QAAQ,KAAK,yBAA0BA,IAAOA,GAAI,KAAMA,IAAOA,GAAI,OAAO,EAAGjB,EAAW,EAAI,EAAGJ,EAAW,EAAK,CAAG,CAAC,EAEnKA,EAAW,EAAI,CAEvB,EACMsB,EAAS,IAAM,CACbV,GAAgBC,IAAU,CAACH,IAC3BX,EAASiB,GAAM,EAAQC,EAAK,EACpC,EACMM,EAAQC,GAAM,CAChB,GAAIZ,GAAgBC,IAAU,CAACH,EAAK,OACpC,IAAMe,GAAOD,EAAE,cAAc,sBAAsB,EAC7CJ,GAAI,KAAK,IAAI,EAAG,KAAK,IAAI,GAAII,EAAE,QAAUC,GAAK,MAAQA,GAAK,KAAK,CAAC,EACnEpB,EAAS,SAAWA,EAAS,QAAQ,WAAUA,EAAS,QAAQ,YAAce,GAAIf,EAAS,QAAQ,UACvGH,EAAYkB,EAAC,CACjB,EAEMM,EAAUzB,EAAWO,EACrBmB,EAAO,EAAI,KAAK,GAAK,GACrBC,EAAS/B,EAAO,yBAA2B,mCAC3CgC,EAAYhC,EAAO,sBAAwB,mBAE3CiC,EAASrB,EAAK,IAAI,CAACsB,EAAKC,KAAM,CAChC,IAAMC,IAAUD,GAAI,IAAOvB,EAAK,QAAUR,EACtCiC,EACJ,OAAItB,EAAcsB,EAAMrC,EAAO,4BAA8B,2BACxDqC,EAAMD,GAAS,yBAA4BpC,EAAO,4BAA8B,4BAC9EC,EAAE,OAAQ,CAAE,IAAKkC,GAAG,MAAO,CAAE,KAAM,QAAS,SAAU,EAAG,MAAO,MAAO,OAAQ,KAAK,MAAM,EAAID,EAAM,EAAE,EAAI,KAAM,aAAc,MAAO,WAAYG,EAAK,WAAY,iBAAkB,CAAE,CAAC,CAClM,CAAC,EAEKC,GAAOvB,GAAgBd,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,UAAW,gBAAiB,CAAE,EAAG,CACxKA,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,GAAI,EAAG,GAAI,KAAM,OAAQ,OAAQ,kCAAmC,YAAa,GAAI,CAAC,EAC3HA,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,GAAI,EAAG,GAAI,KAAM,OAAQ,OAAQ,yBAA0B,YAAa,IAAK,cAAe,QAAS,gBAAiB6B,EAAK,QAAQ,CAAC,EAAG,kBAAmBA,GAAQ,EAAIZ,GAAM,MAAM,QAAQ,CAAC,EAAG,MAAO,CAAE,WAAY,+BAAgC,CAAE,CAAC,CAC/R,CAAC,EAEKqB,GAAOvB,GACPf,EAAE,IAAK,CAAE,UAAW,8BAA+B,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAC/Ec,EACGd,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,eAAgB,MAAO,CAAE,QAAS,EAAI,CAAE,EAAGA,EAAE,OAAQ,CAAE,EAAG,qBAAsB,CAAC,CAAC,EAC/IC,EACGD,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,cAAe,EAAG,CAACA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,EAAG,EAAG,EAAG,MAAO,EAAG,OAAQ,GAAI,GAAI,GAAI,CAAC,EAAGA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,GAAI,EAAG,EAAG,MAAO,EAAG,OAAQ,GAAI,GAAI,GAAI,CAAC,CAAC,CAAC,EACzNA,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,cAAe,EAAGA,EAAE,OAAQ,CAAE,EAAG,qBAAsB,CAAC,CAAC,EAE/HuC,GAAQxB,GAASyB,EAAE,YAAY,EAAK1B,EAAgBE,KAAQ,KAAOwB,EAAE,gBAAgB,EAAIA,EAAE,kBAAkB,EAAKA,EAAE,WAAW,EAC/HC,EAAW3B,EAAgBG,GAAM,IAAOvB,GAAYO,GAAWE,EAAW,EAAKyB,EAAUlB,CAAG,EAElG,OAAOV,EAAE,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,gBAAiB,CAAE,EAAG,CAC1GA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAAG,CACzIqC,GACArC,EAAE,SAAU,CACR,IAAK,KAAM,QAASwB,EAAQ,MAAOV,EAAe0B,EAAE,mBAAmB,EAAKvC,EAAUuC,EAAE,WAAW,EAAIA,EAAE,UAAU,EACnH,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAYzB,GAAS,gCAAkCe,EAAQ,MAAOf,GAAS,gBAAkBgB,EAAW,OAASjB,GAAgBC,IAAU,CAACH,EAAO,UAAY,UAAW,WAAY,yCAA0C,CAC5V,EAAG0B,EAAI,CACX,CAAC,EACDtC,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvDA,EAAE,MAAO,CAAE,IAAK,OAAQ,QAASyB,EAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,OAAQ,OAAQ,OAASX,GAAgBC,IAAU,CAACH,EAAO,UAAY,SAAU,CAAE,EAAGoB,CAAM,EAC/LhC,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,UAAW,KAAM,CAAE,EAAG,CAC3HA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYd,GAAS,SAAU,SAAU,WAAY,IAAK,MAAO4B,EAAe,qBAAuB,kBAAmB,CAAE,EAAG2B,CAAQ,EACtKzC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYd,GAAS,SAAU,QAAS,WAAY,IAAK,MAAO6B,GAAS,gBAAmBD,EAAe,mBAAqB,uBAAyB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGyB,EAAK,CACzP,CAAC,CACL,CAAC,CACL,CAAC,CACL,EAKMG,GAAgB,CAAC,CAAE,OAAAC,EAAQ,SAAAC,CAAS,IAAM,CAC5C,IAAM5C,EAAI,MAAM,cACV6C,EAAc,IACdC,EAAQ,GACR,CAAClB,EAASmB,CAAU,EAAI,MAAM,SAAS,CAAC,EACxC,CAACC,EAAUC,CAAW,EAAI,MAAM,SAAS,IAAM,IAAI,MAAMH,CAAK,EAAE,KAAK,GAAI,CAAC,EAC1E,CAACI,EAAUC,CAAW,EAAI,MAAM,SAAS,EAAK,EAC9CC,EAAI,MAAM,OAAO,CAAC,CAAC,EAAE,QAErBC,EAAgB,IAAM,CACxB,GAAI,CAAMD,EAAE,OAAQA,EAAE,KAAK,WAAW,EAAOA,EAAE,KAAK,OAAMA,EAAE,KAAK,KAAK,UAAY,MAAMA,EAAE,KAAK,eAAiB,KAAQ,MAAY,CAAC,CACrI,GAAI,CAAMA,EAAE,SAASA,EAAE,QAAQ,WAAW,CAAG,MAAY,CAAC,CAC1D,GAAI,CAAMA,EAAE,MAAMA,EAAE,KAAK,WAAW,CAAG,MAAY,CAAC,CACpDA,EAAE,KAAOA,EAAE,QAAUA,EAAE,KAAO,IAClC,EACME,EAAU,IAAM,CACdF,EAAE,OAAO,cAAcA,EAAE,KAAK,EAClCA,EAAE,MAAQ,KACVC,EAAc,EACd,GAAI,CAAMD,EAAE,QAAQA,EAAE,OAAO,UAAU,EAAE,QAAQZ,GAAKA,EAAE,KAAK,CAAC,CAAG,MAAY,CAAC,CAC9E,GAAI,CAAMY,EAAE,IAAIA,EAAE,GAAG,MAAM,CAAG,MAAY,CAAC,CAC3C,GAAIA,EAAE,KAAM,CAAE,GAAI,CAAE,IAAI,gBAAgBA,EAAE,IAAI,CAAG,MAAY,CAAC,CAAEA,EAAE,KAAO,IAAM,CAC/EA,EAAE,OAASA,EAAE,GAAK,IACtB,EAEMG,EAAYC,GAAQ,CACtBJ,EAAE,MAAQA,EAAE,OAAS,CAAC,EACtBA,EAAE,MAAM,KAAKI,CAAG,EAChB,IAAMC,EAAM,YAAY,IAAI,GACxB,CAACL,EAAE,UAAYK,EAAML,EAAE,SAAW,MAClCA,EAAE,SAAWK,EACbR,EAAYS,GAAQ,CAAE,IAAMC,EAAOD,EAAK,MAAM,CAAC,EAAG,OAAAC,EAAK,KAAK,KAAK,IAAI,IAAMH,CAAG,CAAC,EAAUG,CAAM,CAAC,EAExG,EAEMC,EAAa,CAACC,EAAOxE,IAAM,CAC7B,GAAI,CAACwE,GAAS,CAACA,EAAM,OAAQ,OAAO,IAAI,MAAMxE,CAAC,EAAE,KAAK,EAAG,EACzD,IAAMC,EAAM,CAAC,EACPwE,EAAOD,EAAM,OAASxE,EAC5B,QAAS6C,EAAI,EAAGA,EAAI7C,EAAG6C,IAAK,CACxB,IAAMd,EAAI,KAAK,MAAMc,EAAI4B,CAAI,EAAGC,EAAI,KAAK,IAAI3C,EAAI,EAAG,KAAK,OAAOc,EAAI,GAAK4B,CAAI,CAAC,EAC1ElE,EAAI,EACR,QAASoE,GAAI5C,EAAG4C,GAAID,GAAKC,GAAIH,EAAM,OAAQG,KAAKpE,EAAI,KAAK,IAAIA,EAAGiE,EAAMG,EAAC,CAAC,EACxE1E,EAAI,KAAK,KAAK,IAAI,IAAM,KAAK,IAAI,EAAGM,CAAC,CAAC,CAAC,CAC3C,CACA,OAAON,CACX,EAIM2E,EAAW,CAACC,EAAMC,EAAMC,IAAO,CACjC,GAAI,CAACF,GAAQ,CAACA,EAAK,QAAUE,GAAMD,EAAM,OAAOD,GAAQ,IAAI,aAAa,CAAC,EAC1E,IAAMG,EAAQF,EAAOC,EACfE,EAAS,KAAK,MAAMJ,EAAK,OAASG,CAAK,EACvC/E,EAAM,IAAI,aAAagF,CAAM,EACnC,QAASpC,EAAI,EAAGA,EAAIoC,EAAQpC,IAAK,CAC7B,IAAMqC,EAAQ,KAAK,MAAMrC,EAAImC,CAAK,EAAGG,GAAM,KAAK,IAAIN,EAAK,OAAQ,KAAK,OAAOhC,EAAI,GAAKmC,CAAK,CAAC,EACxF9E,GAAI,EAAGF,GAAI,EACf,QAAS2E,EAAIO,EAAOP,EAAIQ,GAAKR,IAAOzE,IAAK2E,EAAKF,CAAC,EAAG3E,KAClDC,EAAI4C,CAAC,EAAI7C,GAAIE,GAAIF,GAAI,CACzB,CACA,OAAOC,CACX,EAGMmF,GAAY,CAACC,EAASC,IAAS,CACjC,IAAMC,EAAM,IAAI,YAAY,GAAKF,EAAQ,OAAS,CAAC,EAC7CG,EAAO,IAAI,SAASD,CAAG,EACvBE,EAAK,CAACC,EAAGxF,IAAM,CAAE,QAAS2C,GAAI,EAAGA,GAAI3C,EAAE,OAAQ2C,KAAK2C,EAAK,SAASE,EAAI7C,GAAG3C,EAAE,WAAW2C,EAAC,CAAC,CAAG,EACjG4C,EAAG,EAAG,MAAM,EAAGD,EAAK,UAAU,EAAG,GAAKH,EAAQ,OAAS,EAAG,EAAI,EAAGI,EAAG,EAAG,MAAM,EAC7EA,EAAG,GAAI,MAAM,EAAGD,EAAK,UAAU,GAAI,GAAI,EAAI,EAAGA,EAAK,UAAU,GAAI,EAAG,EAAI,EAAGA,EAAK,UAAU,GAAI,EAAG,EAAI,EACrGA,EAAK,UAAU,GAAIF,EAAM,EAAI,EAAGE,EAAK,UAAU,GAAIF,EAAO,EAAG,EAAI,EAAGE,EAAK,UAAU,GAAI,EAAG,EAAI,EAAGA,EAAK,UAAU,GAAI,GAAI,EAAI,EAC5HC,EAAG,GAAI,MAAM,EAAGD,EAAK,UAAU,GAAIH,EAAQ,OAAS,EAAG,EAAI,EAC3D,IAAIK,EAAI,GACR,QAAS7C,EAAI,EAAGA,EAAIwC,EAAQ,OAAQxC,IAAK,CAAE,IAAM3C,EAAI,KAAK,IAAI,GAAI,KAAK,IAAI,EAAGmF,EAAQxC,CAAC,CAAC,CAAC,EAAG2C,EAAK,SAASE,EAAGxF,EAAI,EAAIA,EAAI,MAASA,EAAI,MAAQ,EAAI,EAAGwF,GAAK,CAAG,CAC7J,OAAO,IAAI,KAAK,CAACH,CAAG,EAAG,CAAE,KAAM,WAAY,CAAC,CAChD,EAGMI,GAAcC,GAAU,CAC1B,GAAI,CAACA,GAAS,CAACA,EAAM,OAAQ,OAC7B7B,EAAE,IAAI,KAAK6B,CAAK,EAChB7B,EAAE,aAAeA,EAAE,aAAe,GAAK6B,EAAM,OAC7C,IAAIC,EAAM,EACV,QAAShD,EAAI,EAAGA,EAAI+C,EAAM,OAAQ/C,IAAKgD,GAAOD,EAAM/C,CAAC,EAAI+C,EAAM/C,CAAC,EAChEqB,EAAS,KAAK,IAAI,EAAG,KAAK,KAAK2B,EAAMD,EAAM,MAAM,EAAI,GAAG,CAAC,CAC7D,EAEME,GAAUC,GAAS,CACrB,GAAIhC,EAAE,SAAU,OAChBA,EAAE,SAAW,GACTA,EAAE,OAAO,cAAcA,EAAE,KAAK,EAClCA,EAAE,MAAQ,KACV,IAAMS,GAAST,EAAE,OAAS,CAAC,GAAG,MAAM,EAC9BiC,EAAWjC,EAAE,IAAMA,EAAE,GAAG,YAAe,KAC7CC,EAAc,EAEd,IAAIiC,EAAU,KAAMC,EAAS,EACvBC,EAAQpC,EAAE,aAAe,EAE/B,GAAIgC,GAAQhC,EAAE,KAAOA,EAAE,IAAI,QAAUoC,EAAQH,EAAU,GAAK,CACxD,IAAMI,EAAS,IAAI,aAAaD,CAAK,EACjCE,EAAM,EACV,QAAWC,MAAKvC,EAAE,IAAOqC,EAAO,IAAIE,GAAGD,CAAG,EAAGA,GAAOC,GAAE,OACtD,IAAMC,GAAa,KACbtG,GAAM2E,EAASwB,EAAQJ,EAASO,EAAU,EAChDL,EAAS,KAAK,IAAI,EAAG,KAAK,MAAMjG,GAAI,OAASsG,EAAU,CAAC,EACxDN,EAAUb,GAAUnF,GAAKsG,EAAU,CACvC,CAEA,GAAI,CAAMxC,EAAE,QAAQA,EAAE,OAAO,UAAU,EAAE,QAAQZ,GAAKA,EAAE,KAAK,CAAC,CAAG,MAAY,CAAC,CAC9E,GAAI,CAAMY,EAAE,IAAIA,EAAE,GAAG,MAAM,CAAG,MAAY,CAAC,CAC3C,GAAIA,EAAE,KAAM,CAAE,GAAI,CAAE,IAAI,gBAAgBA,EAAE,IAAI,CAAG,MAAY,CAAC,CAAEA,EAAE,KAAO,IAAM,CAC/EA,EAAE,OAASA,EAAE,GAAK,KAClBA,EAAE,IAAM,CAAC,EAELgC,GAAQE,GAAWA,EAAQ,KAAO,GAAI3C,EAAO2C,EAASC,EAAQ3B,EAAWC,EAAO,EAAE,CAAC,EAC9EuB,GAAQjC,EAAY,EAAI,EAAGC,EAAE,SAAW,IAC5CR,EAAS,CAClB,EA4EA,GA1EA,MAAM,UAAU,IAAM,CAClB,IAAIiD,EAAY,GAChB,OAAAzC,EAAE,SAAW,GACbA,EAAE,MAAQ,CAAC,EACXA,EAAE,IAAM,CAAC,EACTA,EAAE,YAAc,EAChBA,EAAE,GAAK,YAAY,IAAI,EACvBA,EAAE,MAAQ,YAAY,IAAM,CACxB,IAAM1B,GAAK,YAAY,IAAI,EAAI0B,EAAE,IAAM,IACvCL,EAAWrB,CAAC,EACRA,GAAKmB,GAAasC,GAAO,EAAI,CACrC,EAAG,GAAG,GAEL,SAAY,CACT,IAAIW,EAAS,KACb,GAAI,CACI,UAAU,cAAgB,UAAU,aAAa,eACjDA,EAAS,MAAM,UAAU,aAAa,aAAa,CAAE,MAAO,CAAE,aAAc,EAAG,iBAAkB,GAAM,iBAAkB,EAAK,CAAE,CAAC,EAEzI,MAAY,CAAEA,EAAS,IAAM,CAC7B,GAAID,EAAW,CAAMC,GAAQA,EAAO,UAAU,EAAE,QAAQtD,GAAKA,EAAE,KAAK,CAAC,EAAG,MAAQ,CAChF,GAAI,CAACsD,EAAQ,CAAE3C,EAAY,EAAI,EAAOC,EAAE,OAAO,cAAcA,EAAE,KAAK,EAAG,MAAQ,CAE/EA,EAAE,OAAS0C,EAMX,GAAI,CACA,IAAMC,EAAK,OAAO,cAAgB,OAAO,mBAEzC,GADA3C,EAAE,GAAK,IAAI2C,EACP3C,EAAE,GAAG,QAAU,YAAe,GAAI,CAAE,MAAMA,EAAE,GAAG,OAAO,CAAG,MAAY,CAAC,CAC1EA,EAAE,QAAUA,EAAE,GAAG,wBAAwB0C,CAAM,EAC/C1C,EAAE,KAAOA,EAAE,GAAG,WAAW,EACzBA,EAAE,KAAK,KAAK,MAAQ,EAEpB,IAAI4C,EAAa,GACjB,GAAI5C,EAAE,GAAG,cAAgB,OAAOA,EAAE,GAAG,aAAa,WAAc,YAAc,OAAO,iBACjF,GAAI,CACA,IAAM6C,EAAO,+JAGb,GAFA7C,EAAE,KAAO,IAAI,gBAAgB,IAAI,KAAK,CAAC6C,CAAI,EAAG,CAAE,KAAM,wBAAyB,CAAC,CAAC,EACjF,MAAM7C,EAAE,GAAG,aAAa,UAAUA,EAAE,IAAI,EACpCyC,EAAW,OACfzC,EAAE,KAAO,IAAI,iBAAiBA,EAAE,GAAI,QAAQ,EAC5CA,EAAE,KAAK,KAAK,UAAa1B,GAAMsD,GAAWtD,EAAE,IAAI,EAChD0B,EAAE,QAAQ,QAAQA,EAAE,IAAI,EACxBA,EAAE,KAAK,QAAQA,EAAE,IAAI,EACrBA,EAAE,KAAK,QAAQA,EAAE,GAAG,WAAW,EAC/B4C,EAAa,EACjB,MAAY,CAAEA,EAAa,EAAO,CAGjCA,IAED5C,EAAE,KAAOA,EAAE,GAAG,sBAAsB,KAAS,EAAG,CAAC,EACjDA,EAAE,KAAK,eAAkB1B,GAAM,CAC3B,IAAMwE,EAAQxE,EAAE,YAAY,eAAe,CAAC,EAC5CsD,GAAW,IAAI,aAAakB,CAAK,CAAC,CACtC,EACA9C,EAAE,QAAQ,QAAQA,EAAE,IAAI,EACxBA,EAAE,KAAK,QAAQA,EAAE,IAAI,EACrBA,EAAE,KAAK,QAAQA,EAAE,GAAG,WAAW,EAEvC,MAAY,CACRD,EAAY,EAAI,EACZC,EAAE,OAAO,cAAcA,EAAE,KAAK,CACtC,CACJ,GAAG,EAEI,IAAM,CAAEyC,EAAY,GAAMvC,EAAQ,CAAG,CAEhD,EAAG,CAAC,CAAC,EAEDJ,EACA,OAAOlD,EAAE,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CAC/EA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,OAAQ,OAAQ,QAAS,SAAU,aAAc,OAAQ,WAAY,uCAAwC,OAAQ,iDAAkD,MAAO,gBAAiB,SAAU,QAAS,CAAE,EAAG,CAC5TA,EAAE,IAAK,CAAE,IAAK,IAAK,UAAW,0BAA2B,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACtFwC,EAAE,aAAa,CACnB,CAAC,EACDxC,EAAE,SAAU,CAAE,IAAK,IAAK,QAAS4C,EAAU,MAAOJ,EAAE,eAAe,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAC5RxC,EAAE,IAAK,CAAE,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,CAC1E,CAAC,EAGL,IAAMgC,GAASgB,EAAS,IAAI,CAACf,EAAKC,IAAMlC,EAAE,OAAQ,CAAE,IAAKkC,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,MAAO,OAAQ,KAAK,MAAM,EAAID,EAAM,EAAE,EAAI,KAAM,aAAc,MAAO,WAAY,sBAAuB,QAAU,IAAOA,EAAM,GAAM,CAAE,CAAC,CAAC,EAEnO,OAAOjC,EAAE,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CAC/EA,EAAE,SAAU,CACR,IAAK,SAAU,QAAS,IAAMmF,GAAO,EAAK,EAAG,MAAO3C,EAAE,cAAc,EACpE,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAC7N,EAAGxC,EAAE,IAAK,CAAE,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EACzEA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,OAAQ,OAAQ,QAAS,SAAU,aAAc,OAAQ,WAAY,uCAAwC,OAAQ,gDAAiD,CAAE,EAAG,CACjRA,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,MAAO,OAAQ,KAAM,CAAE,EAC/FA,EAAE,OAAQ,CAAE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,aAAc,MAAO,WAAY,sBAAuB,UAAW,iCAAkC,CAAE,CAAC,CAAC,EAClKA,EAAE,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,OAAQ,WAAYd,GAAS,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,SAAU,MAAO,CAAE,EAAGQ,GAAWkC,CAAO,CAAC,EAC5K5B,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,WAAY,IAAK,MAAO,OAAQ,OAAQ,SAAU,QAAS,CAAE,EAAGgC,EAAM,CACxL,CAAC,EACDhC,EAAE,SAAU,CACR,IAAK,OAAQ,QAAS,IAAMmF,GAAO,EAAI,EAAG,MAAO3C,EAAE,gBAAgB,EACnE,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,OAAQ,UAAW,UAAW,6CAA8C,WAAY,yCAA0C,CAC5U,EAAGxC,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAAgB,YAAa,EAAG,cAAe,QAAS,eAAgB,OAAQ,EAAG,CAACA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,aAAc,CAAC,EAAGA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,2BAA4B,CAAC,CAAC,CAAC,CAAC,CAC7Q,CAAC,CACL,EAGMmG,GAAsB,CAAC,CAAE,QAAAC,EAAS,KAAAC,EAAM,UAAAC,EAAW,IAAAC,EAAK,OAAAC,EAAQ,SAAAC,EAAU,YAAAC,EAAa,UAAAC,EAAW,QAAAC,EAAS,QAAAC,EAAS,UAAAC,EAAW,SAAAC,EAAU,SAAAC,EAAU,MAAAlH,CAAM,IAAM,CACjK,GAAM,CAACmH,EAAUC,CAAW,EAAI,MAAM,SAAS,EAAK,EAC9CC,EAAiB,MAAM,OAAO,IAAI,EAElCC,GAAcC,GAAO,IAAI,KAAKA,CAAE,EAAE,mBAAmB,QAAS,CAAE,KAAM,UAAW,OAAQ,UAAW,OAAQ,SAAU,CAAC,EAO7H,GALA,MAAM,UAAU,IAAM,IAAM,CAAMF,EAAe,SAAS,aAAaA,EAAe,OAAO,CAAG,EAAG,CAAC,CAAC,EAKjGd,IAAS,UAAYA,IAAS,SAAU,CACxC,IAAMiB,EAAWjB,IAAS,SAC1B,OAAO,MAAM,cAAc,MAAO,CAAE,UAAW,gBAAiB,MAAO,CAAE,QAAS,OAAQ,eAAgB,SAAU,OAAQ,OAAQ,CAAE,EAClI,MAAM,cAAc,MAAO,CACvB,MAAO,CAAE,SAAU,MAAO,QAAS,WAAY,aAAc,OAAQ,OAAQ,cAAgBiB,EAAW,kCAAoC,oCAAqC,WAAYA,EAAW,kCAAoC,mCAAoC,MAAOA,EAAW,uBAAyB,qBAAsB,SAAU,SAAU,UAAW,SAAU,WAAY,GAAI,CAC9Y,EAAGlB,CAAO,CACd,CACJ,CAEA,IAAMrG,GAAOsG,IAAS,OAChBkB,GAAYxH,GACZyH,GAAanB,IAAS,YAAcI,IAAa,GAEjDgB,EAAa,OAAOd,GAAc,SAClC,KAAK,IAAI,EAAG,KAAK,MAAMA,GAAaE,GAAW,KAAK,IAAI,IAAM,GAAI,CAAC,EACnE,KACAa,EAAgB/H,GAAQ,CAC1B,GAAIA,GAAO,KAAM,MAAO,GACxB,IAAMK,EAAI,KAAK,MAAML,EAAM,IAAI,EAAGC,GAAI,KAAK,MAAOD,EAAM,KAAQ,EAAE,EAAGJ,GAAII,EAAM,GACzEgI,EAAOtI,IAAM,OAAOA,EAAC,EAAE,SAAS,EAAG,GAAG,EAC5C,OAAOW,EAAI,EAAKA,EAAI,IAAM2H,EAAI/H,EAAC,EAAI,IAAM+H,EAAIpI,EAAC,EAAMK,GAAI,IAAM+H,EAAIpI,EAAC,CACvE,EAEMqI,EAAe,IAAM,CACvB,GAAIX,EAAU,OACdC,EAAY,EAAI,EAChB,IAAMW,EAAK,KAAK,IAAI,EAAI,OAAOnB,GAAgB,SAAWA,EAAc,EAAG,EAAI,IAC/ES,EAAe,QAAU,WAAW,IAAM,CAAEH,GAAYA,EAAS,CAAG,EAAGa,CAAE,CAC7E,EAEMC,EAAS/H,GAAO,qBAAuB,qBACvCgI,EAAShI,GAAO,sCAAwC,sCACxDiI,EAAKjI,GAAO,sBAAwB,oBAI1C,GADkB6G,IAAY,IAAS,OAAOD,GAAc,WAAaE,GAAW,KAAK,IAAI,IAAMF,EAE/F,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,gBACX,MAAO,CAAE,QAAS,OAAQ,MAAO,OAAQ,eAAgB5G,GAAO,WAAa,YAAa,CAC9F,EAAG,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,SAAU,MAAO,SAAU,OAAQ,CAAE,EAC1E,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc+H,EAAQ,OAAQ,sCAAuC,WAAY,4BAA6B,CAAE,EAAG,CAC9N,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,EACxH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,UAAW,QAAS,CAAE,EAAGtF,EAAE,cAAc,CAAC,CAC5I,CAAC,CACL,CAAC,EAGL,IAAIyF,EACAnI,EACAmI,EAAO,MAAM,cAAcpI,GAAa,CAAE,IAAK,QAAS,MAAAC,EAAO,KAAAC,EAAK,CAAC,EAC9DyH,IAAc,CAACP,EACtBgB,EAAO,MAAM,cAAc,MAAO,CAC9B,IAAK,QACL,QAASL,EACT,MAAO,CAAE,SAAU,WAAY,OAAQ,UAAW,QAAS,iBAAkB,SAAU,QAAS,CACpG,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,SAAU,WAAY,KAAM,MAAO,mBAAoB,OAAQ,YAAa,WAAY,OAAQ,cAAe,OAAQ,UAAW,aAAc,UAAW,MAAO,CAAE,EAAGxB,CAAO,EAC3O,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,gBAAiBnH,GAAW,eAAgB,OAAQ,QAAS,IAAM,aAAc,SAAU,cAAe,MAAO,CAAE,CAAC,EACxM,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,cAAe,MAAO,CAAE,EAAG,CACtL,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,EAC5H,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,WAAY,4BAA6B,CAAE,EAAGuD,EAAE,kBAAkB,CAAC,CACtL,CAAC,CACL,CAAC,EAEDyF,EAAO,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,iBAAkB,MAAO,kBAAmB,CAAE,EAC7G,MAAM,cAAcC,GAAa,CAAE,KAAM9B,CAAQ,CAAC,CACtD,EAGJ,IAAM+B,GAAW,CACb,MAAM,cAAc,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,WAAYjJ,GAAS,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGkI,GAAWd,CAAS,CAAC,CACrJ,EAEA,GAAIvG,GAAM,CACN,IAAMqI,EAAS,CACX,QAAS,CAAE,KAAM,WAAY,MAAO,mBAAoB,MAAO5F,EAAE,cAAc,CAAE,EACjF,KAAM,CAAE,KAAM,WAAY,MAAO,mBAAoB,MAAOA,EAAE,UAAU,CAAE,EAE1E,UAAW,CAAE,KAAM,kBAAmB,MAAO,mBAAoB,MAAOA,EAAE,gBAAgB,CAAE,EAE5F,KAAM,CAAE,KAAM,kBAAmB,MAAO,kBAAmB,MAAOA,EAAE,UAAU,CAAE,EAChF,OAAQ,CAAE,KAAM,0BAA2B,MAAO,gBAAiB,MAAOA,EAAE,cAAc,CAAE,CAChG,EAAGgE,GAAU,MAAM,GAAK,CAAE,KAAM,WAAY,MAAO,mBAAoB,MAAOhE,EAAE,UAAU,CAAE,EAC5F2F,GAAS,KAAK,MAAM,cAAc,OAAQ,CACtC,IAAK,MAAO,MAAOC,EAAM,MACzB,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,MAAOA,EAAM,KAAM,CAC9E,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,OAASA,EAAM,KAAM,MAAO,CAAE,SAAU,QAAS,CAAE,CAAC,CAAC,CAAC,CACnG,CACIZ,IAAcP,EACdkB,GAAS,KAAK,MAAM,cAAc,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CACxL,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,kBAAmB,CAAE,CAAC,EACrI3F,EAAE,iBAAiB,CACvB,CAAC,CAAC,EACKiF,IAAc,MACrBU,GAAS,KAAK,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,WAAYjJ,GAAS,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CAChN,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAC7FwI,EAAaD,CAAS,CAC1B,CAAC,CAAC,EAGN,IAAMY,GAAY,CAAC,EACnBA,GAAU,KAAK,MAAM,cAAc,OAAQ,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,KAAM,MAAO,CAAE,EAAG,CAC5M,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAWd,GAAY,cAAgB,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAC7HA,GAAY/E,EAAE,gBAAgB,EAAIA,EAAE,gBAAgB,CACxD,CAAC,CAAC,EAEEsE,GAAa/G,IAAQwG,GACrB8B,GAAU,KAAK,MAAM,cAAc,SAAU,CACzC,IAAK,SAAU,QAAS,IAAMtB,GAAYA,EAASR,CAAG,EAAG,MAAO/D,EAAE,wBAAwB,EAC1F,UAAW,YACX,MAAO,CAAE,WAAY,OAAQ,OAAQ,OAAQ,OAAQ,UAAW,MAAO,uBAAwB,SAAU,OAAQ,QAAS,EAAG,WAAY,CAAE,CAC/I,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,kBAAmB,CAAC,CAAC,CAAC,EAGnE,IAAM8F,GAAO,MAAM,cAAc,MAAO,CACpC,IAAK,OACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,IAAK,OAAQ,QAAS,aAAc,CACzH,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,SAAU,CAAE,CAAE,EAAGH,EAAQ,EAC5H,MAAM,cAAc,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,KAAM,MAAO,CAAE,EAAGE,EAAS,CAClI,CAAC,EAED,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,gBACX,MAAO,CAAE,QAAS,OAAQ,MAAO,OAAQ,eAAgBtI,GAAO,WAAa,YAAa,CAC9F,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,MAAO,SAAU,OAAQ,CAAE,EACpF,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,aAAc+H,EAAQ,OAAQC,EAAQ,WAAYC,EAAI,SAAU,QAAS,CAAE,EAAG,CAACC,EAAMK,EAAI,CAAC,CACpI,CACJ,CAAC,CACL,EAGMC,GAA0B,CAAC,CAC7B,SAAAC,EACA,cAAAC,EACA,eAAAC,EACA,UAAAC,EACA,YAAAC,EACA,mBAAAC,EACA,iBAAAC,EACA,UAAAC,EACA,WAAAC,EACA,WAAAC,EACA,cAAAC,EACA,YAAAC,EACA,eAAAC,EACA,cAAAC,EACA,eAAAC,EACA,iBAAAC,EACA,iBAAAC,EACA,WAAAC,GACA,UAAAC,GACA,cAAAC,GACA,cAAAC,GACA,iBAAAC,EACA,sBAAAC,EACA,cAAAC,EACA,eAAAC,EACA,2BAAAC,EACA,4BAAAC,EACA,2BAAAC,EAEA,cAAAC,EACA,aAAAC,GACA,aAAAC,GACA,mBAAAC,GACA,YAAAC,EACA,YAAAC,EACA,kBAAAC,GACA,2BAAAC,GACA,iBAAAC,EACA,oBAAAC,GACA,kBAAAC,GACA,cAAAC,GACA,iBAAAC,GACA,iBAAAC,GACA,gBAAAC,GACA,mBAAAC,GACA,eAAAC,GACA,qBAAAC,GACA,iBAAAC,GACA,uBAAAC,GACA,wBAAAC,GAGA,QAAAC,GAAU,EACd,IAAM,CACF,GAAM,CAACC,GAAMC,EAAO,EAAI,MAAM,SAAS,QAAQ,EACzC,CAACC,GAAiCC,EAAkC,EAAI,MAAM,SAAS,EAAK,EAE5F,CAACC,GAAaC,EAAc,EAAI,MAAM,SAAS,EAAK,EACpD,CAACC,GAAQC,EAAS,EAAI,MAAM,SAAS,EAAK,EAC1C,CAACC,EAAUC,CAAW,EAAI,MAAM,SAAS,EAAE,EAC3C,CAACC,GAAUC,EAAW,EAAI,MAAM,SAAS,EAAE,EAC3C,CAACC,GAAYC,EAAa,EAAI,MAAM,SAAS,EAAK,EAClD,CAACC,GAAUC,EAAW,EAAI,MAAM,SAAS,CAAC,EAC1C,CAACC,GAAeC,EAAgB,EAAI,MAAM,SAAS,EAAK,EACxD,CAACC,GAAcC,EAAe,EAAI,MAAM,SAAS,EAAK,EACtD,CAACC,GAAaC,EAAc,EAAI,MAAM,SAAS,CAAC,EAIhDC,GAAe,KAAU,IACzBC,GAAWlE,GAAa,OAAOA,GAAc,UAAY,OAAOA,EAAU,IAAMA,EAAU,SAAS,GAAM,KACzG,CAAClC,GAASqG,EAAU,EAAI,MAAM,SAAS,IAAM,KAAK,IAAI,CAAC,EAC7D,MAAM,UAAU,IAAM,CAClB,GAAI,CAAC7D,GAAiB,CAAC4D,GAAS,OAChCC,GAAW,KAAK,IAAI,CAAC,EACrB,IAAMC,EAAK,YAAY,IAAMD,GAAW,KAAK,IAAI,CAAC,EAAG,GAAI,EACzD,MAAO,IAAM,cAAcC,CAAE,CACjC,EAAG,CAAC9D,EAAe4D,EAAO,CAAC,EAG3B,MAAM,UAAU,IAAM,CAAEd,EAAY,EAAE,EAAGE,GAAY,EAAE,CAAG,EAAG,CAAC9C,CAAgB,CAAC,EAS/E,MAAM,UAAU,IAAM,EACdC,GAAqB,CAACH,GAAiB,CAACC,IAAiByC,GAAe,EAAK,EACjFc,GAAgB,EAAK,CACzB,EAAG,CAACxD,EAAeC,EAAgBE,CAAgB,CAAC,EAEpD,MAAM,UAAU,IAAM,CAElB,GAAI,EADeoB,GAAoB,CAACvB,GAAiB,CAACC,GAAkB,CAACE,GAC5D,CAAEuD,GAAe,CAAC,EAAG,MAAQ,CAC9CA,GAAe,CAAC,EAChB,IAAIzL,EAAI,EACF6L,GAAK,YAAY,IAAM,CACzB7L,GAAK,EACLyL,GAAezL,CAAC,EACZA,GAAK,GAAG,cAAc6L,EAAE,CAChC,EAAG,GAAG,EACN,MAAO,IAAM,cAAcA,EAAE,CACjC,EAAG,CAACvC,EAAkBvB,EAAeC,EAAgBE,CAAgB,CAAC,EAEtE,MAAM,UAAU,IAAM,CAClB,GAAI,CAACkD,GAAe,OACpB,IAAMU,EAAQ,IAAMT,GAAiB,EAAK,EACpCQ,EAAK,WAAW,IAAM,SAAS,iBAAiB,QAASC,CAAK,EAAG,CAAC,EACxE,MAAO,IAAM,CAAE,aAAaD,CAAE,EAAG,SAAS,oBAAoB,QAASC,CAAK,CAAG,CACnF,EAAG,CAACV,EAAa,CAAC,EAKlB,IAAMW,GAAgB,IAAM,CACxBxC,GAAoB,EAAK,EACzBkB,GAAe,EAAK,EACpBnD,EAAY,CAChB,EAEM0E,GAA6BC,GACxB1E,EAAmB0E,CAAQ,EAGhCC,GAA2B,IAAM,CACnC3E,EAAmB,KAAM,EAAK,CAClC,EAGM4E,GAA6C,SAAY,CAC3D,GAAI,CAAA7B,GAIJ,GAAI,CAOA,GALI,EAAE,iBAAkB,SAKpB,CAAC,OAAO,iBAAmB,OAAO,SAAS,WAAa,UAAY,OAAO,SAAS,WAAa,YACjG,OAIJ,IAAM8B,EAAqB,OAAO,aAAiB,KAAe,aAC5D,aAAa,WACb,SAGN,GAAIA,IAAsB,WAAa,OAAO,aAAiB,KAAe,cAG1E,GAFmB,MAAM,aAAa,kBAAkB,IAErC,UAAW,CAE1B,GAAI,CACA,GAAI,OAAO,yBAA2BzC,GAAiB,QAAS,CAC5D,IAAM0C,GAAc,IAAI,OAAO,wBAAwB1C,GAAiB,OAAO,EAC/E,MAAM0C,GAAY,KAAK,EAGvBhD,GAA2B,QAAUgD,EACzC,CACJ,MAAgB,CAEhB,CAGA,WAAW,IAAM,CACb,GAAI,CACA,IAAMC,GAAsB,IAAI,aAAa,iBAAkB,CAC3D,KAAMpL,EAAE,oBAAoB,EAC5B,KAAM,yBACN,IAAK,sBACT,CAAC,EAEDoL,GAAoB,QAAU,IAAM,CAChCA,GAAoB,MAAM,CAC9B,EAEA,WAAW,IAAM,CACbA,GAAoB,MAAM,CAC9B,EAAG,GAAI,CAEX,MAAgB,CAEhB,CACJ,EAAG,GAAI,CAEX,UACOF,IAAsB,UAAW,CAExC,GAAI,CACA,GAAI,OAAO,yBAA2BzC,GAAiB,SAAW,CAACN,GAA2B,QAAS,CACnG,IAAMgD,EAAc,IAAI,OAAO,wBAAwB1C,GAAiB,OAAO,EAC/E,MAAM0C,EAAY,KAAK,EAGvBhD,GAA2B,QAAUgD,CACzC,CACJ,MAAgB,CAEhB,CAGA,WAAW,IAAM,CACb,GAAI,CACA,IAAME,EAAmB,IAAI,aAAa,iBAAkB,CACxD,KAAMrL,EAAE,oBAAoB,EAC5B,KAAM,yBACN,IAAK,mBACT,CAAC,EAEDqL,EAAiB,QAAU,IAAM,CAC7BA,EAAiB,MAAM,CAC3B,EAEA,WAAW,IAAM,CACbA,EAAiB,MAAM,CAC3B,EAAG,GAAI,CACX,MAAgB,CAEhB,CACJ,EAAG,GAAI,CACX,CAEAhC,GAAmC,EAAI,CAE3C,MAAgB,CAEhB,CACJ,EAOM7L,EAAI,MAAM,cACV8N,GAAW,mBACXC,EAAU,kBAMVC,GAAiB,yBACjBC,GAAgB,wBAChBC,GAAOhP,GAEPiP,GAAUjK,GAAS,CACrB,GAAI,CACA,IAAMkK,EAAM,OAAOlK,GAAS,SAAW,KAAK,UAAUA,CAAI,EAAKA,GAAQ,GACvE,OAAKkK,EACD,OAAO,OAAO,wBAA2B,WAAmB,OAAO,uBAAuBA,CAAG,EAC7F,OAAO,OAAO,wBAA2B,WAAmB,OAAO,uBAAuBA,CAAG,EAC1FA,EAHU,EAIrB,MAAQ,CAAE,OAAO,OAAOlK,GAAS,SAAW,KAAK,UAAUA,CAAI,EAAKA,GAAQ,EAAK,CACrF,EAGMmK,GAAW3C,KAAS,SACpB4C,GAAe1D,GAAoB,CAACvB,GAAiB,CAACC,GAAkB,CAACE,EACzE+E,GAAcF,IAAYhF,GAAiB,CAACG,EAC5CgF,GAAe,CAACH,IAAY/E,GAAkB,CAACE,EAC/CiF,GAAU,CAACjF,GAAoB,CAAC8E,IAAgB,CAACC,IAAe,CAACC,GACjEE,GAASL,GAAWP,GAAWC,EAE/BY,GAAcN,GAAWL,GAAiBC,GAC1CW,GAASpF,EACThH,EAAE,mBAAmB,EACnB+L,IAAeC,GAAgBhM,EAAE,eAAe,EAAIA,EAAE,WAAW,EAEnEqM,GAAsBV,GAAXE,GAAkBtF,EAAoBC,CAAX,EACtC8F,IAAa7F,GAAc,IAAI,KAAK,EAAE,OAAS,EAC/C8F,IAAa5F,GAAe,IAAI,KAAK,EAAE,OAAS,EAEhD6F,GAAW,SAAY,CACzB,GAAI,CACI,OAAOC,IAA0B,WAAY,MAAMA,GAAsBJ,EAAQ,EAChF,MAAM,UAAU,UAAU,UAAUA,EAAQ,CACrD,MAAY,CAAC,CACb5C,GAAU,EAAI,EACd,WAAW,IAAMA,GAAU,EAAK,EAAG,IAAI,CAC3C,EAKMiD,IAAgB3F,GAAoB,IAAI,QAAQ,SAAU,EAAE,EAAE,OAC9D4F,GAAYjD,EAAS,QAAQ,SAAU,EAAE,EAAE,OAC3CkD,GAAa,CAACnF,GAA8BiF,GAAe,GAAKC,KAAcD,GAC9EG,GAAmB,SAAY,CACjC,GAAI,CACAhD,GAAY,EAAE,EACd,MAAMxD,EAAmBqD,CAAQ,CACrC,OAAS3K,EAAK,CACV4K,EAAY,EAAE,EACdE,GAAY9K,GAAK,UAAY,mBACvBiB,EAAE,qBAAqB,EACvBA,EAAE,eAAe,CAAC,CAC5B,CACJ,EAIM8M,GAAY,CACd,UAAW,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,EAAG,EAAG,GAAI,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,mCAAoC,CAAC,CAAC,CAAE,EACvH,UAAW,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,0BAA2B,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,IAAK,EAAG,GAAI,MAAO,GAAI,OAAQ,EAAG,GAAI,GAAI,CAAC,CAAC,CAAE,EACjI,UAAW,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,kBAAmB,CAAC,CAAC,CAAE,EAC/D,UAAW,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,sGAAuG,CAAC,CAAC,CAAE,EACjJ,UAAW,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,qCAAsC,CAAC,CAAC,CAAE,EAClF,YAAa,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,uIAAwI,CAAC,EAAG,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,GAAI,EAAG,GAAI,CAAC,CAAC,CAAE,EAC9N,YAAa,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,EAAG,EAAG,EAAG,MAAO,EAAG,OAAQ,EAAG,GAAI,GAAI,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,GAAI,EAAG,EAAG,MAAO,EAAG,OAAQ,EAAG,GAAI,GAAI,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,EAAG,EAAG,GAAI,MAAO,EAAG,OAAQ,EAAG,GAAI,GAAI,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,oDAAqD,CAAC,CAAC,CAAE,EAC7Q,mBAAoB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,cAAe,CAAC,CAAC,CAAE,EAClE,kBAAmB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,gBAAiB,CAAC,CAAC,CAAE,EACnE,kBAAmB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,cAAe,CAAC,CAAC,CAAE,EACjE,kBAAmB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,0BAA2B,CAAC,CAAC,CAAE,EAC7E,WAAY,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,iBAAkB,CAAC,CAAC,CAAE,EAC/D,kBAAmB,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,GAAI,EAAG,CAAE,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,yBAA0B,CAAC,CAAC,CAAE,EAClH,gBAAiB,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,gEAAiE,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,iBAAkB,CAAC,CAAC,CAAE,EACvJ,cAAe,CAAE,GAAI,EAAG,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,uCAAwC,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,UAAW,CAAC,CAAC,CAAE,EACnH,WAAY,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,GAAI,EAAG,CAAE,CAAC,EAAG,CAAC,OAAQ,CAAE,EAAG,qBAAsB,CAAC,CAAC,CAAE,EACzG,WAAY,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,sBAAuB,CAAC,CAAC,CAAE,EACpE,SAAU,CAAE,GAAI,IAAK,EAAG,CAAC,CAAC,OAAQ,CAAE,EAAG,kDAAmD,CAAC,EAAG,CAAC,SAAU,CAAE,GAAI,GAAI,GAAI,GAAI,EAAG,CAAE,CAAC,CAAC,CAAE,CACxI,EACMC,GAAK,CAACC,EAAMC,IAAS,CACvBA,EAAOA,GAAQ,CAAC,EAChB,IAAMC,GAAMJ,GAAUE,CAAI,EAC1B,GAAI,CAACE,GAAK,CAEN,IAAMC,GAAK,CAAC,EACZ,OAAIF,EAAK,QAAOE,GAAG,MAAQF,EAAK,OAC5BA,EAAK,WAAUE,GAAG,SAAWF,EAAK,UAClCA,EAAK,YAAWE,GAAG,UAAYF,EAAK,WACpCA,EAAK,OAAO,OAAO,OAAOE,GAAIF,EAAK,KAAK,EACrCzP,EAAE,IAAK,CAAE,IAAKyP,EAAK,IAAK,UAAW,OAAOD,CAAI,GAAI,MAAOG,EAAG,CAAC,CACxE,CACA,IAAMC,GAAOH,EAAK,SAAW,WAAWA,EAAK,QAAQ,EAAI,GACnDI,GAAW,CAAC,EAClB,OAAIJ,EAAK,YAAaI,GAAS,UAAYJ,EAAK,UAAWI,GAAS,gBAAkB,SAAUA,GAAS,aAAe,YACpHJ,EAAK,OAAO,OAAO,OAAOI,GAAUJ,EAAK,KAAK,EAC3CzP,EAAE,MAAO,CACZ,IAAKyP,EAAK,IAAK,UAAWD,EAAM,MAAOI,GAAM,OAAQA,GAAM,QAAS,YACpE,KAAM,OAAQ,OAAQH,EAAK,OAAS,eACpC,YAAaC,GAAI,IAAM,EAAG,cAAe,QAAS,eAAgB,QAClE,MAAOG,EACX,EAAGH,GAAI,EAAE,IAAI,CAACI,GAAI5N,KAAMlC,EAAE8P,GAAG,CAAC,EAAG,OAAO,OAAO,CAAE,IAAK5N,EAAE,EAAG4N,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CACvE,EAGMC,GAAY/P,EAAE,MAAO,CACvB,IAAK,OACL,UAAW,gBACX,MAAO,CACH,KAAM,eAAgB,SAAU,WAAY,SAAU,SAGtD,UAAW,QAAS,UAAW,aAC/B,QAAS,OAAQ,QAAS,OAAQ,cAAe,SACjD,eAAgB,gBAAiB,IAAK,OACtC,gBAAiB,sCACjB,WAAY,0MAChB,CACJ,EAAG,CACCA,EAAE,MAAO,CAAE,IAAK,WAAY,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,cAAe,SAAU,eAAgB,SAAU,SAAU,WAAY,OAAQ,CAAE,CAAE,EACpJA,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,OAAQ,CAAE,EAAG,CACpDA,EAAE,KAAM,CAAE,IAAK,KAAM,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CAC1JwC,EAAE,kBAAkB,EAAGxC,EAAE,KAAM,CAAE,IAAK,IAAK,CAAC,EAAGwC,EAAE,qBAAqB,CAC1E,CAAC,EACDxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,SAAU,OAAQ,CAAE,EAChIwC,EAAE,iBAAiB,CAAC,EAQxBxC,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,MAAO,CAAE,EAAG,CAC1GA,EAAE,MAAO,CACL,IAAK,MACL,QAAS,cACT,KAAM,MACN,aAAcwC,EAAE,iBAAiB,EAGjC,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,SAAU,QAAS,OAAQ,OAAQ,SAAU,SAAU,CACrG,EAAG,CAECxC,EAAE,OAAQ,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,GAAI,IAAK,OAAQgO,GAAgB,YAAa,IAAK,cAAe,GAAK,CAAC,EACzHhO,EAAE,SAAU,CAAE,IAAK,KAAM,EAAG,IAAK,KAAM,qBAAsB,MAAO,CAAE,WAAY,2BAA4B,UAAW,6BAA8B,CAAE,CAAC,EAG1JA,EAAE,IAAK,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,2BAA4B,CAAE,EAAG,CACrEA,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,GAAI,GAAI,OAAQgO,GAAgB,YAAa,IAAK,cAAe,EAAI,CAAC,EACtHhO,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,OAAQiO,GAAe,YAAa,IAAK,cAAe,EAAI,CAAC,EACtHjO,EAAE,SAAU,CAAE,IAAK,IAAK,EAAG,IAAK,KAAM,qBAAsB,MAAO,CAAE,WAAY,0BAA2B,UAAW,+BAAgC,CAAE,CAAC,EAC1JA,EAAE,SAAU,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,GAAI,EAAG,EAAG,KAAM,oBAAqB,OAAQ,wBAAyB,YAAa,GAAI,CAAC,EAC7HA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,IAAK,EAAG,EAAG,WAAY,SAAU,WAAYkO,GAAM,SAAU,GAAI,KAAM,sBAAuB,EAAG,MAAM,CACpI,CAAC,EACDlO,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,IAAK,GAAI,GAAI,EAAG,EAAG,KAAM,OAAQ,OAAQgO,GAAgB,cAAe,GAAK,MAAO,CAAE,UAAW,6BAA8B,CAAE,CAAC,EAG/JhO,EAAE,IAAK,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,2BAA4B,CAAE,EAAG,CACrEA,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,GAAI,IAAK,OAAQgO,GAAgB,YAAa,IAAK,cAAe,EAAI,CAAC,EACvHhO,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,IAAK,GAAI,IAAK,GAAI,IAAK,OAAQiO,GAAe,YAAa,IAAK,cAAe,EAAI,CAAC,EACvHjO,EAAE,OAAQ,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,GAAI,GAAI,IAAK,GAAI,IAAK,OAAQiO,GAAe,YAAa,IAAK,cAAe,EAAI,CAAC,EACtHjO,EAAE,SAAU,CAAE,IAAK,IAAK,EAAG,IAAK,KAAM,qBAAsB,MAAO,CAAE,WAAY,2BAA4B,UAAW,+BAAgC,CAAE,CAAC,EAC3JA,EAAE,SAAU,CAAE,IAAK,IAAK,EAAG,IAAK,KAAMiO,GAAe,MAAO,CAAE,WAAY,2BAA4B,UAAW,kCAAmC,CAAE,CAAC,EACvJjO,EAAE,SAAU,CAAE,IAAK,IAAK,GAAI,IAAK,GAAI,IAAK,EAAG,EAAG,KAAM,oBAAqB,OAAQ,wBAAyB,YAAa,GAAI,CAAC,EAC9HA,EAAE,OAAQ,CAAE,IAAK,IAAK,EAAG,IAAK,EAAG,IAAK,WAAY,SAAU,WAAYkO,GAAM,SAAU,GAAI,KAAM,sBAAuB,EAAG,MAAM,CACtI,CAAC,EACDlO,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,IAAK,GAAI,IAAK,EAAG,EAAG,KAAM,OAAQ,OAAQgO,GAAgB,cAAe,GAAK,MAAO,CAAE,UAAW,6BAA8B,CAAE,CAAC,EAGhKhO,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,IAAK,GAAI,IAAK,EAAG,EAAG,KAAM,oBAAqB,OAAQ,wBAAyB,YAAa,GAAI,CAAC,EAC/HA,EAAE,OAAQ,CAAE,IAAK,KAAM,EAAG,IAAK,EAAG,IAAK,WAAYkO,GAAM,SAAU,GAAI,KAAM,sBAAuB,EAAG,MAAM,EAC7GlO,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,IAAK,EAAG,GAAI,KAAMgO,GAAgB,YAAa,GAAK,CAAC,EAC1FhO,EAAE,SAAU,CAAE,IAAK,KAAM,GAAI,GAAI,GAAI,IAAK,EAAG,EAAG,KAAMgO,EAAe,CAAC,EACtEhO,EAAE,OAAQ,CAAE,IAAK,KAAM,EAAG,GAAI,EAAG,IAAK,WAAY,SAAU,WAAYkO,GAAM,SAAU,GAAI,KAAM,qBAAsB,EAAG1L,EAAE,UAAU,CAAC,CAC5I,CAAC,EAGDxC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,OAAQ,WAAYkO,GAAM,SAAU,OAAQ,MAAO,oBAAqB,CAAE,EAAG,CACxJlO,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,4BAA6B,CAAE,EAAGwC,EAAE,WAAW,CAAC,EAC1FxC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,4BAA6B,CAAE,EAAGwC,EAAE,cAAc,CAAC,EAC7FxC,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,4BAA6B,CAAE,EAAGwC,EAAE,cAAc,CAAC,CACjG,CAAC,CACL,CAAC,CACL,CAAC,CAAC,EACFxC,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,QAAS,OAAQ,SAAU,OAAQ,IAAK,KAAM,CAAE,EAChH,CAAC,aAAc,cAAewC,EAAE,cAAc,CAAC,EAAE,IAAKD,GAClDvC,EAAE,OAAQ,CAAE,IAAKuC,EAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,6BAA8B,WAAY2L,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CAC9SlO,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYiO,EAAc,CAAE,CAAC,EAChH1L,CACJ,CAAC,CACL,CACJ,CACJ,CAAC,EAGKyN,GAAYvB,IAAWzO,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,QAAS,MAAO,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,aAAc,MAAO,CAAE,EAAG,CAChPA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,IAAK,MAAO,OAAQ,MAAO,iBAAkB,MAAO,MAAO,kBAAmB,aAAc,MAAO,WAAY,4BAA6B,OAAQ,sCAAuC,UAAWqO,GAAW,iBAAmB,cAAc,IAAM4B,EAAG,KAAM,WAAY,yCAA0C,CAAE,CAAC,EAChXjQ,EAAE,SAAU,CAAE,IAAK,IAAK,UAAW,aAAc,QAAS,IAAM2L,GAAQ,QAAQ,EAAG,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,KAAM,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,OAAQ,OAAQ,WAAY,cAAe,MAAO0C,GAAW,mBAAqB,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAACkB,GAAG,UAAW,CAAE,IAAK,GAAI,CAAC,EAAG/M,EAAE,eAAe,CAAC,CAAC,EAC5cxC,EAAE,SAAU,CAAE,IAAK,IAAK,UAAW,aAAc,QAAS,IAAM2L,GAAQ,MAAM,EAAG,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,KAAM,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,OAAQ,OAAQ,WAAY,cAAe,MAAQ0C,GAAgC,mBAArB,mBAAyC,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAACkB,GAAG,UAAW,CAAE,IAAK,GAAI,CAAC,EAAG/M,EAAE,aAAa,CAAC,CAAC,CAC7c,CAAC,EAEK0N,GAAcC,GAAQnQ,EAAE,SAAU,CAAE,IAAKmQ,GAAO,OAAQ,UAAW,cAAe,QAAS9C,GAAe,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,aAAc,OAAQ,aAAc,MAAO,mBAAoB,MAAO,iBAAkB,OAAQ,aAAc,MAAO,OAAQ,sCAAuC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAACkC,GAAG,kBAAmB,CAAE,IAAK,GAAI,CAAC,EAAG/M,EAAE,aAAa,CAAC,CAAC,EAIjhB4N,GAAa/B,IAAYpB,GAAW,KAAK,IAAI,EAAG,KAAK,MAAMA,GAAUD,GAAenG,IAAW,GAAI,CAAC,EAAI,KACxGwJ,GAAeD,KAAc,KAAO,KAAO,GAAG,KAAK,MAAMA,GAAY,EAAE,CAAC,IAAI,OAAOA,GAAY,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,GACnHE,GAAWtQ,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,SAAU,SAAU,aAAcqO,GAAW,OAAS,MAAO,CAAE,EAAG,CACtN3E,IAAa1J,EAAE,SAAU,CAAE,IAAK,SAAU,UAAW,YAAa,QAAS,IAAM+L,GAAe,EAAI,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,OAAQ,OAAQ,WAAY,cAAe,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,UAAW,QAAS,WAAY,iBAAkB,CAAE,EAAG,CACnW/L,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,QAAS,MAAO,aAAc,MAAO,WAAY,MAAO,CAAE,EACnIA,EAAE,MAAO,CAAE,IAAK0J,GAAW,IAAK,GAAI,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,QAAS,eAAgB,WAAY,CAAE,CAAC,CAAC,EACxJ1J,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACtDA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,cAAc,CAAC,EACpIxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,GAAIoK,GAAiB,GAAK,EAAI5H,EAAE,wBAAyB,CAAE,OAAQ4H,CAAc,CAAC,EAAI5H,EAAE,iBAAiB,CAAC,CACjO,CAAC,EACD+M,GAAG,mBAAoB,CAAE,MAAO,kBAAmB,CAAC,CACxD,CAAC,EACD7F,IAAa1J,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,OAAQ,MAAO,WAAY,2BAA4B,CAAE,CAAC,EACvGA,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,gBAAiB,CAAE,EAAG,CAC5DA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,IAAK,OAAQ,aAAc,MAAO,CAAE,EAAG,CAC3IA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,aAAa,CAAC,EACnHxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CACnFqQ,IAAgBrQ,EAAE,OAAQ,CAAE,IAAK,MAAO,IAAK,MAAO,MAAO,CAAE,WAAYkO,GAAM,SAAU,OAAQ,MAAOkC,GAAY,GAAK,gBAAkB,kBAAmB,CAAE,EAAGC,EAAY,EAC/KrQ,EAAE,SAAU,CAAE,IAAK,OAAQ,UAAW,cAAe,QAASgP,GAAU,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,qCAAsC,WAAY,4BAA6B,MAAO,mBAAoB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CACtXhD,IAAUuD,GAAG,WAAY,CAAE,IAAK,IAAK,MAAOtB,EAAc,CAAC,EAC3DjC,GAASxJ,EAAE,eAAe,EAAIA,EAAE,aAAa,CACjD,CAAC,CACL,CAAC,CACL,CAAC,EAIDxC,EAAE,MAAO,CAAE,IAAK,WAAY,QAAS,IAAM6M,GAAiBpM,GAAM,CAACA,CAAC,EAAG,MAAO,CAAE,SAAU,WAAY,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,eAAgB,SAAU,SAAU,OAAQ,SAAU,CAAE,EAAG,CAC9OT,EAAE,MAAO,CAAE,IAAK,OAAQ,IAAK,MAAO,UAAW,QAAS,MAAO,CAAE,WAAYkO,GAAM,SAAU,SAAU,WAAY,IAAK,MAAO,sBAAuB,UAAW,YAAa,QAAS,YAAa,UAAW,OAAQ,UAAWtB,GAAe,OAAS,SAAU,OAAQA,GAAe,OAAS,YAAa,WAAYA,GAAe,OAAS,OAAQ,WAAY,aAAc,CAAE,EAAGiC,EAAQ,EACpY,CAACjC,IAAgB5M,EAAE,OAAQ,CAAE,IAAK,SAAU,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,SAAU,UAAW,SAAU,MAAO,mBAAoB,SAAU,SAAU,WAAY,GAAI,CAAE,EAAG,CAC1QuP,GAAG,SAAU,CAAE,IAAK,GAAI,CAAC,EACzB/M,EAAE,aAAa,CACnB,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAAC,EAEG+N,GACJ,GAAI/G,EAAkB,CAGlB,IAAMgH,EAAWrG,EACXlE,GAAQsD,GAAoB,IAAI,QAAQ,SAAU,EAAE,EACpDlK,GAAI4G,EAAK,OACTwK,GAAQvE,EAAS,QAAQ,SAAU,EAAE,EACrCwE,GAAOrR,GAAI,GAAKoR,GAAM,SAAWpR,GAGjCsR,GAAQD,IAAQD,KAAUxK,EAC1B2K,GAAQF,IAAQ,CAACC,GACjBE,GAAQ5G,EACR6G,GAAS5G,EACT6G,GAAUF,IAAS,CAACC,GACpBE,GAAQ,KAAK,IAAI,EAAG3R,EAAC,EACrB4R,GAAc7B,IAAcuB,GAC5BO,GAASC,IAAMnR,EAAE,MAAO,CAAE,IAAKmR,GAAG,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,uBAAwB,YAAa,IAAK,cAAe,QAAS,eAAgB,OAAQ,EACjMnR,EAAE,OAAQ,CAAE,EAAG,uBAAwB,gBAAiB,GAAI,MAAO,CAAE,UAAW,+BAAgC,CAAE,CAAC,CAAC,EAClHqC,GAAO,CAAC+O,GAAIC,MAAU,CACxB,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,UAC3I,OAAQ,eAAeD,GAAKnD,GAAiBoD,GAAO,iCAAmC,2BAA4B,GACnH,WAAYD,GAAKnD,GAAgB,aACrC,GACMqD,GAAM,CAACH,GAAG5O,KAAUvC,EAAE,OAAQ,CAAE,IAAKmR,GAAG,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG5O,EAAK,EAExHgP,GAAQtL,EAAK,MAAM,EAAE,EAAE,IAAI,CAACuL,GAAGtP,KAAM,CACvC,IAAMzB,GAAIgQ,GAAMvO,EAAC,GAAK,GAChBuP,GAASnF,IAAc,CAACuE,IAAS3O,KAAMuO,GAAM,QAAU,CAACC,GAC1D3I,GAAS,4BACT2J,GAAQ,mBACRC,GAAO,OACX,OAAIlR,KAAKsH,GAAS,2BAA4B4J,GAAO,+CACjDF,KAAQ1J,GAAS,oCACjB6I,KAAS7I,GAAS,+BAAgC2J,GAAQ,iBAC1Df,KAAOgB,GAAO,uCAAuCzP,GAAI,EAAE,WACxDlC,EAAE,OAAQ,CAAE,IAAKkC,GAAG,MAAO,CAC9B,SAAU,WAAY,KAAM,EAAG,SAAU,EAAG,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,OACjH,OAAQ,aAAa6F,EAAM,GAAI,WAAY,oBAAqB,WAAYmG,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAAwD,GACrH,WAAY,iDAAkD,UAAWC,GACzE,kBAAmBzP,KAAM8O,IAAS3R,GAAI2R,GAAQ,OAAS,EACvD,UAAWS,GAAS,6CAA+C,MACvE,CAAE,EAAG,CACDhR,GACAgR,IAAUzR,EAAE,OAAQ,CAAE,IAAK,QAAS,MAAO,CAAE,SAAU,WAAY,KAAM,MAAO,IAAK,MAAO,MAAO,MAAO,OAAQ,OAAQ,OAAQ,iBAAkB,aAAc,MAAO,WAAYgO,GAAgB,UAAW,+BAAgC,CAAE,CAAC,CACvP,CAAC,CACL,CAAC,EAEDuC,GAAQvQ,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,UAAW,eAAgB,CAAE,EAAG,CACvE,CAACwQ,GAAYN,GAAW,OAAO,EAC/BlQ,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGwQ,EAAWhO,EAAE,gBAAgB,EAAIA,EAAE,YAAY,CAAC,EAC3LxC,EAAE,IAAK,CAAE,IAAK,MAAO,MAAO,CAAE,OAAQ,WAAY,SAAU,SAAU,WAAY,KAAM,MAAO,mBAAoB,SAAU,QAAS,CAAE,EAAGwQ,EAAWhO,EAAE,eAAe,EAAIA,EAAE,WAAW,CAAC,EACzLxC,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,cAAe,UAAW,sCAAuC,aAAc,sCAAuC,aAAc,OAAQ,UAAW,QAAS,CAAE,EACxMA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,OAAQ,WAAYkO,GAAM,SAAU,OAAQ,WAAY,IAAK,cAAe,MAAO,WAAY,EAAG,MAAOsC,EAAWzC,EAAU,mBAAoB,WAAY,WAAY,CAAE,EAC3P1O,GAAI,CAACW,EAAE,OAAQ,CAAE,IAAK,GAAI,EAAGiG,EAAK,MAAM,EAAG+K,EAAK,CAAC,EAAGhR,EAAE,OAAQ,CAAE,IAAK,GAAI,EAAGiG,EAAK,MAAM+K,EAAK,CAAC,CAAC,EAC1FhR,EAAE,OAAQ,CAAE,MAAO,CAAE,SAAU,OAAQ,cAAe,EAAG,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,gBAAgB,CAAC,CAAC,CAAC,EACzH,CAACgO,GAAYxQ,EAAE,MAAO,CAAE,IAAK,MAAO,EAAG,CACnCA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,aAAc,MAAO,CAAE,EAAG,CAC9HA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,YAAY,CAAC,EAClHxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYkO,GAAM,SAAU,OAAQ,WAAY,YAAa,MAAOwC,GAAQC,GAAQ5C,EAAU,gBAAmB,sBAAuB,CAAE,EACrK2C,GAAQC,GAAQnO,EAAE,YAAY,EAAIA,EAAE,cAAc,EAAK,GAAGiO,GAAM,MAAM,MAAMpR,IAAKuS,EAAe,EAAE,CAC1G,CAAC,EACD5R,EAAE,QAAS,CAAE,IAAK,QAAS,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,IAAK,MAAO,aAAcoM,GAAW,MAAQ,OAAQ,OAAQ,OAAQ,UAAWwE,GAAQ,qBAAqBpE,GAAW,EAAI,KAAO,QAAQ,GAAK,MAAO,CAAE,EAAG,CAC/O,GAAG+E,GACHvR,EAAE,QAAS,CAAE,IAAK,KAAM,IAAK,MAAO,MAAOkM,EAAU,SAAU2E,IAAS,CAACxR,GAAG,UAAW,GAAM,aAAc,gBAAiB,WAAY,GAAO,KAAM,OAAQ,UAAW,UAAW,QAAS,SAAU,UAAWA,IAAKuS,GAAiB,aAAcpP,EAAE,YAAY,EAC/P,SAAWd,IAAM,CACb,IAAMjB,GAAIiB,GAAE,OAAO,MAAM,QAAQ,MAAO,EAAE,EAAE,MAAM,EAAGrC,IAAKuS,EAAe,EACrEvS,IAAKoB,GAAE,SAAWpB,IAAKoB,KAAMwF,GAAMwG,GAAa0E,IAAMA,GAAI,CAAC,EAC/DhF,EAAY1L,EAAC,EACT2L,IAAUC,GAAY,EAAE,CAChC,EACA,QAAS,IAAME,GAAc,EAAI,EAAG,OAAQ,IAAMA,GAAc,EAAK,EACrE,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,MAAO,OAAQ,OAAQ,OAAQ,QAAS,EAAG,OAAQ,OAAQ,QAAS,OAAQ,WAAY,cAAe,MAAO,cAAe,WAAY,cAAe,SAAU,MAAO,CAAE,CAAC,CAC7N,CAAC,EACDH,IAAYpM,EAAE,IAAK,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,gBAAiB,SAAU,SAAU,OAAQ,UAAW,CAAE,EAAGoM,EAAQ,CAC1H,CAAC,EACDpM,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,aAAc,MAAO,CAAE,EAAG,CAC3GA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,KAAM,MAAO,CAAE,EAAG,CACjGA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOqC,GAAKwO,GAAO,EAAK,CAAE,EAAGA,IAASK,GAAM,GAAG,CAAC,EACtEI,GAAI,IAAK9O,EAAE,UAAU,CAAC,CAC1B,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,KAAM,EAAG,OAAQ,MAAO,aAAc,MAAO,WAAY,4BAA6B,SAAU,QAAS,CAAE,EAAG,CAChKA,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,IAAK,EAAG,OAAQ,EAAG,MAAO8Q,GAAS,OAAUD,GAAQ,MAAQ,KAAO,WAAY5C,GAAe,WAAY,mCAAoC,CAAE,CAAC,EAC9N8C,IAAW/Q,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,WAAY,IAAK,EAAG,OAAQ,EAAG,MAAO,MAAO,WAAY,mFAAoF,UAAW,kCAAmC,CAAE,CAAC,CACxP,CAAC,EACDA,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,KAAM,MAAO,CAAE,EAAG,CAClGsR,GAAI,IAAK9O,EAAE,WAAW,CAAC,EACvBxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAOqC,GAAKyO,GAAQD,EAAK,CAAE,EAAGC,IAAUI,GAAM,GAAG,CAAC,CAC5E,CAAC,CACL,CAAC,EACAV,EASKxQ,EAAE,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,UAAW,2BAA4B,CAAE,EAC3EA,EAAE,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,OAAQ,QAAS,aAAc,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,CACzLwC,EAAE,cAAc,EAChBxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,cAAe,IAAK,KAAM,CAAE,EAAG,CAAC,EAAG,IAAM,EAAG,EAAE,IAAI,CAACqB,GAAGa,KAC1FlC,EAAE,OAAQ,CAAE,IAAKkC,GAAG,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY+L,GAAe,UAAW,0BAA0B5M,EAAC,YAAa,CAAE,CAAC,CAAC,CAAC,CAC1K,CAAC,CAAC,EAbJrB,EAAE,MAAO,CAAE,IAAK,MAAO,EAAG,CACxBA,EAAE,SAAU,CAAE,IAAK,KAAM,QAASqP,GAAkB,SAAU,CAAC4B,GAAa,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,WAAY,8BAC5S,WAAYJ,GAAQ,kCAAqCI,GAAchD,GAAgB,4BACvF,MAAO4C,GAAQ9C,EAAWkD,GAAc,uBAAyB,uBACjE,OAAQA,GAAc,UAAY,SAAU,CAAE,EAAGJ,GAAQrO,EAAE,kBAAkB,EAAIA,EAAE,gBAAgB,CAAC,EACxGxC,EAAE,SAAU,CAAE,IAAK,KAAM,QAASwN,GAA0B,UAAW,kBAAmB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,MAAO,OAAQ,UAAW,OAAQ,QAAS,MAAO,OAAQ,OAAQ,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,WAAY,YAAa,EAC9X,aAAe9L,IAAM,CAAEA,GAAE,cAAc,MAAM,MAAQ,eAAiB,EAAG,aAAeA,IAAM,CAAEA,GAAE,cAAc,MAAM,MAAQ,kBAAoB,CAAE,EAAGc,EAAE,kBAAkB,CAAC,CACpL,CAAC,CAOT,CAAC,CACL,SAAW8L,GAAc,CACrB,IAAMuD,EAAW,CAACrP,EAAE,iBAAiB,EAAGA,EAAE,iBAAiB,EAAGA,EAAE,iBAAiB,CAAC,EAClF+N,GAAQvQ,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,UAAW,gBAAiB,CAAE,EAAG,CACrEA,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,aAAc,MAAO,CAAE,EAAG,CAC3GA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,KAAM,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAAGuP,GAAG,kBAAmB,CAAE,MAAOvB,GAAgB,SAAU,OAAQ,UAAW,2BAA4B,CAAC,CAAC,EACjOhO,EAAE,MAAO,CAAE,IAAK,IAAK,EAAG,CACpBA,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,EAAG,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGqO,GAAW7L,EAAE,yBAAyB,EAAIA,EAAE,uBAAuB,CAAC,EACvMxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,wBAAwB,CAAC,CAC/H,CAAC,CACL,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,SAAU,QAAS,CAAE,EACnM6R,EAAS,IAAI,CAACtP,EAAOL,KAAM,CACvB,IAAM4P,GAAOhF,GAAc5K,GACrBuP,GAAS3E,KAAgB5K,GAC/B,OAAOlC,EAAE,MAAO,CAAE,IAAKkC,GAAG,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,UAAWA,GAAI,sCAAwC,OAAQ,WAAY,iBAAkB,WAAY4P,GAAO,kCAAoC,aAAc,CAAE,EAAG,CAChR9R,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY8R,GAAO,kCAAqCL,GAAS,mCAAqC,4BAA8B,OAAQ,aAAaK,GAAO,iCAAoCL,GAAS,kCAAoC,0BAA2B,GAAI,WAAY,SAAU,CAAE,EAC3aK,GACMvC,GAAG,WAAY,CAAE,MAAOtB,GAAe,SAAU,MAAO,CAAC,EACzDjO,EAAE,OAAQ,CAAE,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYyR,GAASzD,GAAiB,uBAAwB,UAAWyD,GAAS,kCAAoC,MAAO,CAAE,CAAC,CAAC,EAClNzR,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO8R,GAAO,mBAAsBL,GAAS,mBAAqB,mBAAqB,WAAY,WAAY,CAAE,EAAGlP,CAAK,CAChL,CAAC,CACL,CAAC,CACL,CACJ,CAAC,CACL,SAAWgM,IAAeC,GACtB+B,GAAQvQ,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,UAAW,eAAgB,CAAE,EAAG,CACrEkQ,GAAW,OAAO,EAClBlQ,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGqO,GAAW7L,EAAE,sBAAsB,EAAIA,EAAE,2BAA2B,CAAC,EAChNxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGqO,GAAW7L,EAAE,qBAAqB,EAAIA,EAAE,0BAA0B,CAAC,EACtL8N,GACA/B,IAAevO,EAAE,MAAO,CAAE,IAAK,YAAa,EAAG,CAC3CA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,aAAc,MAAO,CAAE,EAAGwC,EAAE,uBAAuB,CAAC,EACpJxC,EAAE,WAAY,CAAE,IAAK,KAAM,IAAK,MAAO,MAAOmJ,EAAa,SAAWzH,GAAM,CAAE0H,EAAe1H,EAAE,OAAO,KAAK,EAAOA,EAAE,OAAO,MAAM,KAAK,EAAE,OAAS,GAAK,OAAOgJ,IAAsB,YAAYA,GAAkB,CAAG,EAAG,KAAM,EAAG,YAAalI,EAAE,kCAAkC,EAAG,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,OAAQ,aAAauM,GAAY,mCAAqC,2BAA2B,GAAI,WAAY,oBAAqB,QAAS,OAAQ,MAAO,mBAAoB,WAAYb,GAAM,SAAU,SAAU,WAAY,IAAK,QAAS,YAAa,aAAc,OAAQ,WAAY,mBAAoB,CAAE,CAAC,EAC5pBlO,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,IAAK,MAAO,CAAE,EAAG,CAC/DA,EAAE,SAAU,CAAE,IAAK,OAAQ,UAAW,cAAe,QAAS,IAAM8J,EAAsB,EAAI,EAAG,MAAO,CAAE,KAAM,OAAQ,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,SAAU,OAAQ,OAAQ,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CACtb9J,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAAgB,YAAa,EAAG,cAAe,QAAS,eAAgB,QAAS,cAAe,EAAK,EACzLA,EAAE,OAAQ,CAAE,EAAG,wGAAyG,CAAC,CAAC,EAC9HwC,EAAE,aAAa,CACnB,CAAC,EACDxC,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS2I,EAAW,SAAU,CAACoG,GAAW,MAAO,CAAE,KAAM,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,OAAQ,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAYA,GAAYf,GAAiB,4BAA6B,MAAOe,GAAY,sBAAwB,uBAAwB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQA,GAAY,UAAY,cAAe,WAAY,2BAA4B,CAAE,EAAGvM,EAAE,qBAAqB,CAAC,CACthB,CAAC,CACL,CAAC,EACDgM,IAAgBxO,EAAE,MAAO,CAAE,IAAK,cAAe,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,SAAU,CAAE,EAAG,CAChIA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,OAAQ,qCAAsC,eAAgBgO,GAAgB,UAAW,4BAA6B,CAAE,CAAC,EAC1NhO,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,0BAA0B,CAAC,CAClI,CAAC,CACL,CAAC,UACM6L,GAEPkC,GAAQvQ,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,UAAW,gBAAiB,CAAE,EAAG,CACxEA,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,mBAAmB,CAAC,EACjKxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,kBAAkB,CAAC,EACxIxC,EAAE,SAAU,CAAE,IAAK,MAAO,UAAW,aAAc,QAAS,IAAM,CAAEyN,GAA2C,EAAOxC,GAAiB,SAASH,GAAkB,CAAG,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAYkD,GAAgB,MAAO,sBAAuB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,UAAW,6CAA8C,CAAE,EAAG,CAACuB,GAAG,UAAW,CAAE,IAAK,GAAI,CAAC,EAAG/M,EAAE,iBAAiB,CAAC,CAAC,CAChkB,CAAC,MACE,CAGH,IAAMuP,EAAUjD,IAAahG,IAAqB,aAClDyH,GAAQvQ,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,UAAW,gBAAiB,CAAE,EAAG,CACxEA,EAAE,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,UAAW,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,iBAAiB,CAAC,EAC/JxC,EAAE,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,OAAQ,WAAY,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,gBAAgB,CAAC,EACtIxC,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,oBAAqB,SAAU,SAAU,aAAc,MAAO,CAAE,EAAG,CACjLA,EAAE,SAAU,CAAE,IAAK,OAAQ,UAAW,YAAa,QAAS,IAAM,CAAEyN,GAA2C,EAAG3D,EAAsB,EAAI,CAAG,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,OAAQ,OAAQ,WAAY,cAAe,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,UAAW,QAAS,WAAY,iBAAkB,CAAE,EAAG,CAC9Y9J,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,4BAA6B,OAAQ,sCAAuC,MAAO,kBAAmB,CAAE,EACzPA,EAAE,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAAgB,YAAa,EAAG,cAAe,QAAS,eAAgB,QAAS,cAAe,EAAK,EAC/KA,EAAE,OAAQ,CAAE,EAAG,wGAAyG,CAAC,CAAC,CAAC,EACnIA,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACtDA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,iBAAiB,CAAC,EACvIxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGwC,EAAE,oBAAoB,CAAC,CACjJ,CAAC,EACD+M,GAAG,mBAAoB,CAAE,MAAO,kBAAmB,CAAC,CACxD,CAAC,EACDvP,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,OAAQ,MAAO,WAAY,2BAA4B,CAAE,CAAC,EAC1FA,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,gBAAiB,CAAE,EAAG,CAC7DA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,aAAc,MAAO,CAAE,EAAGwC,EAAE,mBAAmB,CAAC,EAC9IxC,EAAE,WAAY,CAAE,IAAK,KAAM,IAAK,MAAO,MAAOiJ,EAAY,SAAWvH,GAAM,CAAEwH,EAAcxH,EAAE,OAAO,KAAK,EAAOA,EAAE,OAAO,MAAM,KAAK,EAAE,OAAS,GAAK,OAAOgJ,IAAsB,YAAYA,GAAkB,CAAG,EAAG,KAAM,EAAG,YAAalI,EAAE,wBAAwB,EAAG,MAAO,CAAE,QAAS,QAAS,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,OAAQ,aAAasM,GAAY,mCAAqC,2BAA2B,GAAI,WAAY,eAAgB,QAAS,OAAQ,MAAO,mBAAoB,WAAYZ,GAAM,SAAU,SAAU,WAAY,IAAK,QAAS,YAAa,WAAY,mBAAoB,CAAE,CAAC,CACznB,CAAC,CACL,CAAC,EACDlO,EAAE,SAAU,CAAE,IAAK,UAAW,QAAS,IAAM,CAAEyN,GAA2C,EAAG/E,EAAe,CAAG,EAAG,SAAU,CAACqJ,EAAS,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,OAAQ,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAYA,EAAU/D,GAAiB,4BAA6B,MAAO+D,EAAU,sBAAwB,uBAAwB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQA,EAAU,UAAY,cAAe,WAAY,2BAA4B,CAAE,EAAGjJ,IAAqB,aAAetG,EAAE,kBAAkB,EAAIA,EAAE,eAAe,CAAC,CAC9oB,CAAC,CACL,CAcA,IAAMwP,GAAqB,QACrBC,GAAqB,yEAAyED,EAAkB,GAChHE,GAAY,CACd,IAAK,CAAE,KAAM,QAAS,OAAQ,kCAAgC,KAAM,eAAgB,IAAK,GAAGD,EAAkB,mBAAmBD,EAAkB,UAAW,EAC9J,IAAK,CAAE,KAAM,UAAW,OAAQ,6BAA2B,KAAM,iBAAkB,IAAK,GAAGC,EAAkB,mBAAmBD,EAAkB,gBAAiB,EACnK,MAAO,CAAE,KAAM,QAAS,OAAQ,YAAa,KAAM,eAAgB,IAAK,GAAGC,EAAkB,mBAAmBD,EAAkB,iBAAkB,CACxJ,EAQMG,IAPW,IAAM,CACnB,IAAMC,GAAM,UAAU,WAAa,IAAM,KAAO,UAAU,UAAY,IACtE,MAAI,wBAAwB,KAAKA,CAAE,GAAK,CAAC,WAAW,KAAKA,CAAE,EAAU,MACjE,OAAO,KAAKA,CAAE,EAAU,MACxB,SAAS,KAAKA,CAAE,GAAK,CAAC,WAAW,KAAKA,CAAE,EAAU,QAC/C,KACX,GAC4B,EACtBC,GAAU,CAAC,MAAO,MAAO,OAAO,EAAE,OAAQlB,GAAMA,IAAMgB,EAAU,EAChEG,GAAUC,GAAQ,CAAE,GAAI,CAAE,OAAO,KAAKA,EAAK,SAAU,UAAU,CAAG,MAAY,CAAC,CAAE,EAEjFC,GAAgB9F,IAAiB1M,EAAE,MAAO,CAAE,IAAK,WAAY,UAAW,oBAAqB,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,OAAQ,oBAAqB,MAAO,QAAS,SAAU,OAAQ,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,oBAAqB,UAAW,0EAA2E,SAAU,SAAU,OAAQ,GAAI,UAAW,eAAgB,CAAE,EAAG,CAC7cA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,qCAAsC,CAAE,EAAG,CAC9JA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,WAAY,GAAI,CAAE,EAAG,CACxDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,UAAU,CAAC,EAC7GxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,SAAS,CAAC,CACjG,CAAC,EACDxC,EAAE,OAAQ,CAAE,IAAK,OAAQ,MAAO,CAAE,WAAYkO,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAOH,EAAS,QAAS,UAAW,aAAc,MAAO,WAAY,iCAAkC,OAAQ,2CAA4C,CAAE,EAAGvL,EAAE,YAAY,CAAC,CAC1Q,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,eAAgB,CAAE,EACvDA,EAAE,SAAU,CAAE,IAAK,IAAK,QAAS,IAAMsS,GAAOJ,GAAUC,EAAU,EAAE,GAAG,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,4CAA6C,WAAY,mCAAoC,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,UAAW,OAAQ,CAAE,EAAG,CACvXnS,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,mCAAoC,OAAQ,4CAA6C,MAAO8N,EAAS,CAAE,EAAG9N,EAAE,IAAK,CAAE,UAAWkS,GAAUC,EAAU,EAAE,KAAM,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EAClVnS,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACtDA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGkS,GAAUC,EAAU,EAAE,IAAI,EAC/InS,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,MAAO,qBAAsB,UAAW,KAAM,CAAE,EAAG,oCAAiCkS,GAAUC,EAAU,EAAE,MAAM,EAAE,CACzL,CAAC,EACD5C,GAAG,cAAe,CAAE,MAAOvB,EAAe,CAAC,CAC/C,CAAC,CAAC,EACNhO,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,QAAS,aAAc,QAAS,OAAQ,cAAe,SAAU,IAAK,KAAM,CAAE,EAC7GqS,GAAQ,IAAKlB,GAAMnR,EAAE,SAAU,CAAE,IAAKmR,EAAG,QAAS,IAAMmB,GAAOJ,GAAUf,CAAC,EAAE,GAAG,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,OAAQ,OAAQ,WAAY,cAAe,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,UAAW,OAAQ,CAAE,EAAG,CACrUnR,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,4BAA6B,OAAQ,sCAAuC,MAAO,kBAAmB,CAAE,EAAGA,EAAE,IAAK,CAAE,UAAWkS,GAAUf,CAAC,EAAE,KAAM,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EACtUnR,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACtDA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGkS,GAAUf,CAAC,EAAE,IAAI,EACpInR,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,OAAQ,MAAO,mBAAoB,UAAW,KAAM,CAAE,EAAGkS,GAAUf,CAAC,EAAE,MAAM,CAC3I,CAAC,EACD5B,GAAG,cAAe,CAAE,MAAO,kBAAmB,CAAC,CACnD,CAAC,CAAC,CAAC,EACPvP,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,UAAW,sCAAuC,WAAY,4BAA6B,CAAE,EAAG,CACtMuP,GAAG,WAAY,CAAE,IAAK,IAAK,MAAO,kBAAmB,CAAC,EACtDvP,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,SAAS,CAAC,CACpH,CAAC,CACL,CAAC,EAEKiQ,GAASzS,EAAE,MAAO,CAAE,IAAK,SAAU,UAAW,iBAAkB,MAAO,CAAE,SAAU,WAAY,UAAW,OAAQ,WAAY,OAAQ,UAAW,sCAAuC,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,IAAK,OAAQ,SAAU,MAAO,CAAE,EAAG,CACrSA,EAAE,SAAU,CAAE,IAAK,KAAM,QAAS,IAAM2M,GAAkBlM,GAAM,CAACA,CAAC,EAAG,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,aAAc,MAAO,mBAAoB,MAAO,iBAAkB,OAAQ,aAAc,OAAQ,OAAQ,aAAaiM,GAAgB,kCAAoC,2BAA2B,GAAI,WAAYA,GAAgB,mCAAqC,4BAA6B,MAAO,UAAW,WAAY,UAAW,OAAQ,UAAW,WAAY,UAAW,CAAE,EAAG,CAClgB6C,GAAG,cAAe,CAAE,IAAK,IAAK,MAAOvB,EAAe,CAAC,EACrDhO,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,wBAAwB,CAAC,EAC9H+M,GAAG,kBAAmB,CAAE,IAAK,IAAK,MAAO,mBAAoB,MAAO,CAAE,SAAU,OAAQ,UAAW7C,GAAgB,iBAAmB,eAAgB,WAAY,eAAgB,CAAE,CAAC,CACzL,CAAC,EACD1M,EAAE,SAAU,CAAE,IAAK,WAAY,UAAW,UAAW,QAAS,IAAMmL,IAAsBA,GAAmB,EAAI,EAAG,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,WAAY,OAAQ,OAAQ,OAAQ,MAAO,mBAAoB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAG,CAACoE,GAAG,eAAgB,CAAE,IAAK,GAAI,CAAC,EAAG/M,EAAE,yBAAyB,CAAC,CAAC,EACzYgQ,EACJ,CAAC,EAIKE,GAAmBxH,IAAmB,OAAO,OAAW,KAAe,OAAO,kBAC9ElL,EAAE,OAAO,kBAAmB,CAC1B,IAAK,eACL,OAAQ,GACR,SAAU,GACV,QAAS,IAAMmL,GAAmB,EAAK,EACvC,QAAS,CACL,UAAW,MAAM,QAAQG,EAAgB,GAAKA,GAAiB,OAAS,EACxE,YAAaF,GACb,YAAaL,GAAgB,aAAe,WAC5C,UAAWM,EACf,EACA,SAAUA,GACV,QAASE,GACT,SAAUC,EACd,CAAC,EACC,KAEAmH,GAAa3S,EAAE,MAAO,CAAE,IAAK,QAAS,MAAOyL,GAC7C,CAAE,KAAM,EAAG,SAAU,EAAG,MAAO,OAAQ,SAAU,WAAY,SAAU,SAAU,QAAS,OAAQ,cAAe,SAAU,OAAQ,MAAO,EAC1I,CAAE,KAAM,eAAgB,SAAU,mBAAoB,SAAU,WAAY,SAAU,SAAU,QAAS,OAAQ,cAAe,SAAU,OAAQ,OAAQ,CAAE,EAAG,CACjKzL,EAAE,MAAO,CAAE,IAAK,SAAU,UAAW,mBAAoB,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,OAAQ,cAAe,SAAU,QAAS,WAAY,CAAE,EAC3JA,EAAE,MAAO,CAAE,MAAO,CAAE,SAAU,QAAS,MAAO,OAAQ,OAAQ,MAAO,CAAE,EAAG,CACtEA,EAAE,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,WAAYkO,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,cAAe,YAAa,cAAe,MAAO,aAAc,MAAO,CAAE,EAAGU,EAAM,EACrMoB,GACAO,GACAkC,EACJ,CAAC,CAAC,EACNC,EACJ,CAAC,EAGKE,GAAW9G,IAAepC,IAAc1J,EAAE,MAAO,CAAE,IAAK,UAAW,QAAS,IAAM+L,GAAe,EAAK,EAAG,MAAO,CAAE,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,QAAS,OAAQ,WAAY,kCAAmC,eAAgB,aAAc,UAAW,eAAgB,CAAE,EACzV/L,EAAE,MAAO,CAAE,QAAU0B,GAAMA,EAAE,gBAAgB,EAAG,MAAO,CAAE,MAAO,OAAQ,SAAU,QAAS,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,eAAgB,UAAW,yEAA0E,SAAU,QAAS,CAAE,EAAG,CACpS1B,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,qCAAsC,CAAE,EAAG,CAChKA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY0O,EAAO,CAAE,CAAC,EACvG1O,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,WAAY,GAAI,CAAE,EAAG,CACzDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGqO,GAAW7L,EAAE,sBAAsB,EAAIA,EAAE,2BAA2B,CAAC,EACvKxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAG,GAAGqO,GAAW,QAAU,QAAQ,gBAAa,CAChI,CAAC,EACDrO,EAAE,SAAU,CAAE,IAAK,IAAK,QAAS,IAAM+L,GAAe,EAAK,EAAG,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,MAAO,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAGwD,GAAG,UAAU,CAAC,CAC/R,CAAC,EACDvP,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,gBAAiB,CAAE,EAAG,CAC5DA,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,YAAa,IAAK,aAAc,OAAQ,SAAU,SAAU,WAAY,OAAQ,QAAS,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EACzMA,EAAE,MAAO,CAAE,IAAK0J,GAAW,IAAKlH,EAAE,gBAAgB,EAAG,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,OAAQ,CAAE,CAAC,CAAC,EAC5IxC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,OAAQ,UAAW,MAAO,CAAE,EAAG,EACjIoK,GAAiB,IAAM,GAAKpK,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAClHA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAYkO,GAAM,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,SAAS,KAAK,IAAI,EAAG7D,IAAgB,CAAC,CAAC,MAAMD,GAAiB,CAAC,EAAE,EACpLpK,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,IAAK,KAAM,CAAE,EAAG,MAAM,KAAK,CAAE,OAAQoK,GAAiB,CAAE,EAAG,CAACoH,EAAGtP,IAAMlC,EAAE,OAAQ,CAAE,IAAKkC,EAAG,MAAO,CAAE,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAaA,EAAI,KAAQmI,IAAgB,GAAKqE,GAAS,4BAA6B,WAAY,iBAAkB,CAAE,CAAC,CAAC,CAAC,CACjU,CAAC,GACAtE,GAAiB,GAAK,GAAKpK,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAC/GA,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASyK,EAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAG8E,GAAG,iBAAiB,CAAC,EACpTvP,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASuK,GAAoB,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,OAAQ,OAAQ,aAAaD,GAAe,2BAA6B,kCAAkC,GAAI,WAAYA,GAAe,4BAA8B,mCAAoC,MAAOA,GAAe,mBAAqBwD,GAAU,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,SAAU,CAAE,EAAGxD,GAAe,SAAW,MAAM,EAChhBtK,EAAE,SAAU,CAAE,IAAK,OAAQ,QAASwK,EAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAG+E,GAAG,kBAAkB,CAAC,CACzT,CAAC,EACDvP,EAAE,IAAK,CAAE,IAAK,OAAQ,MAAO,CAAE,OAAQ,UAAW,UAAW,SAAU,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,GAAIoK,GAAiB,GAAK,EAAI5H,EAAE,yBAA0B,CAAE,OAAQ4H,CAAc,CAAC,EAAI5H,EAAE,kBAAkB,CAAC,CACtP,CAAC,CACL,CAAC,CACL,CAAC,CACL,EAEMqQ,GAAO7S,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,UAAW,QAAS,MAAO,OAAQ,WAAY,eAAgB,MAAO,kBAAmB,CAAE,EAAG,CAAC+P,GAAW4C,EAAU,CAAC,EAGhMG,GAAgBrE,IAAWzO,EAAE,oBAAqB,CAAE,IAAK,wBAAyB,CAAC,EACnF+S,GAAkBtE,IAAWzO,EAAE,cAAe,CAAE,IAAK,gBAAiB,CAAC,EACvEgT,GAAiBvE,IAAWzO,EAAE,QAAS,CAAE,IAAK,SAAU,CAAC,EACzDiT,GAAgBxE,IAAWzO,EAAE,aAAc,CAAE,IAAK,eAAgB,CAAC,EACnEkT,GAAmBzE,IAAWzO,EAAE,aAAc,CAAE,IAAK,eAAgB,CAAC,EAItEmT,GAAgBnT,EAAE,QAAS,CAAE,IAAK,KAAM,wBAAyB,CAAE,OACrE,8pFAyCJ,CAAE,CAAC,EAIH,OAAIyL,GACOzL,EAAE,MAAO,CAAE,UAAW,WAAY,MAAO,CAAE,KAAM,EAAG,UAAW,EAAG,MAAO,OAAQ,QAAS,OAAQ,cAAe,SAAU,WAAY,eAAgB,MAAO,kBAAmB,CAAE,EAAG,CAACmT,GAAeR,GAAYC,EAAO,CAAC,EAG9N5S,EAAE,MAAO,CAAE,UAAW,WAAY,MAAO,CAAE,MAAO,MAAO,CAAE,EAAG,CAACmT,GAAeN,GAAMC,GAAeC,GAAiBC,GAAgBC,GAAeC,GAAkBN,EAAO,CAAC,CACxL,EAUA,SAASQ,GAAmBC,EAAI,CAC5B,IAAIC,EAAK,GACT,GAAI,CAAEA,EAAK,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,SAAS,IAAM,GAAK,MAAY,CAAE,OAAO,IAAM,CAC1G,GAAI,CAACA,EAAI,OAAO,KAChB,IAAMC,EAAM,SAAS,cAAc,KAAK,EACxCA,EAAI,aAAa,kBAAmB,EAAE,EACtCA,EAAI,MAAM,QAAU,kNAGpB,SAAS,KAAK,YAAYA,CAAG,EAC7B,IAAM3S,GAAO,IAAM,CACf,IAAMkP,EAAK,SAAS,cAAc,4BAA4B,EAC9D,OAAOA,GAAK,OAAOA,EAAG,aAAa,KAAK,GAAK,EAAE,EAAE,MAAM,KAAK,EAAE,CAAC,GAAK,GACxE,GAAG,EACG0D,EAAQ,IAAM,CAChB,IAAMC,EAAQ,SAAS,cAAc,eAAe,EAC9CC,EAAKD,EAAQ,iBAAiBA,CAAK,EAAI,KACvCjU,EAAIiU,EAAQA,EAAM,sBAAsB,EAAI,KAC5CE,EAAO,iBAAiB,SAAS,eAAe,EACtDJ,EAAI,YAAc,CACd,SAAW3S,EACX,UAAY,OAAO,YAAc,aAAe,KAAK,MAAM,OAAO,OAAO,EACzE,SAAWyS,EAAK,KAAK,MAAMA,EAAG,MAAM,EAAI,UAAO,UAAYA,EAAK,KAAK,MAAMA,EAAG,SAAS,EAAI,UAAO,YAAcA,EAAKA,EAAG,MAAM,QAAQ,CAAC,EAAI,UAC3I,UAAYM,EAAK,iBAAiB,SAAS,EAAE,KAAK,EAAI,WAAaA,EAAK,iBAAiB,aAAa,EAAE,KAAK,EAC7G,UAAYF,EAASC,EAAG,SAAW,KAAO,KAAK,MAAMlU,EAAE,MAAM,EAAI,KAAO,KAAK,MAAMA,EAAE,GAAG,EAAK,SACjG,EAAE,KAAK;AAAA,CAAI,EAGX+T,EAAI,MAAM,UAAY,kBAAoBF,EAAK,KAAK,MAAMA,EAAG,SAAS,EAAI,GAAK,OACnF,EACAG,EAAM,EACN,IAAMI,EAAK,YAAYJ,EAAO,GAAG,EACjC,MAAO,IAAM,CAAE,cAAcI,CAAE,EAAGL,EAAI,OAAO,CAAG,CACpD,CAEA,IAAMM,GAAgCC,GAC3B,IAAM,CACT,GAAIA,GAAmBA,EAAgB,QAAS,CAC5C,IAAMC,EAAgB,IAAM,CACpBD,EAAgB,SAChBA,EAAgB,QAAQ,SAAS,CAC7B,IAAKA,EAAgB,QAAQ,aAC7B,SAAUE,GAAe,CAC7B,CAAC,CAET,EACAD,EAAc,EAEd,WAAWA,EAAe,EAAE,EAC5B,WAAWA,EAAe,GAAG,EAC7B,WAAWA,EAAe,GAAG,EAE7B,sBAAsB,IAAM,CACxB,WAAWA,EAAe,GAAG,CACjC,CAAC,CACL,CACJ,EAMFE,GAAoB,MAAOC,GAAkB,CAC/C,IAAIC,EAAe,KACnB,GAAI,CACID,GAAiB,OAAO,4BACxBC,EAAe,MAAM,OAAO,0BAA0B,uBAAuBD,CAAa,EAElG,MAAY,CAAe,CAC3B,GAAI,CAACC,EAAc,CACf,MAAM;AAAA,kEAAuG,EAC7G,MACJ,CAKA,IAAMjG,EAAO,mEACPkG,EAAO7U,GAAM,OAAOA,CAAC,EAAE,QAAQ,UAAYoG,IAAO,CAAE,IAAK,QAAS,IAAK,OAAQ,IAAK,OAAQ,IAAK,QAAS,GAAEA,CAAC,CAAE,EAI/GgJ,EAAcwF,EAAa,QAAU,SAAW,yBAChDA,EAAa,QAAU,SAAW,yBAClCA,EAAa,QAAU,MAAQ,sBAC/B,wBACAzF,EAASyF,EAAa,QAAU,SAAW,mBAC3CA,EAAa,QAAU,SAAW,mBAClCA,EAAa,QAAU,MAAQ,gBAC/B,kBACAE,EAAYF,EAAa,QAAU,SAAW,uBAC9CA,EAAa,QAAU,SAAW,uBAClCA,EAAa,QAAU,MAAQ,oBAC/B,sBACAG,EAAQ,KAAK,IAAI,EAAG,KAAK,IAAI,IAAK,KAAK,MAAMH,EAAa,OAAS,CAAC,CAAC,CAAC,EACtEtS,EAAO,EAAI,KAAK,GAAK,GACrB0S,EAAY,IAAI1S,EAAO,KAAK,IAAI,EAAGyS,EAAQ,GAAG,GAAG,QAAQ,CAAC,CAAC,IAAIzS,EAAK,QAAQ,CAAC,CAAC,GAC9E2S,EAAQ,OAAOL,EAAa,OAAS,QAAQ,EAAE,YAAY,EAC3DM,EAASN,EAAa,aAAe,GACrCO,EAAUP,EAAa,oBAAsB,OAAO,QAAQA,EAAa,mBAAmB,EAAI,CAAC,EACjGQ,EAAc,OAAO,SAASR,EAAa,YAAY,EAAIA,EAAa,aAAeO,EAAQ,OAAO,CAAC,CAAC,CAAElV,CAAC,IAAMA,GAAKA,EAAE,MAAM,EAAE,OAChIoV,EAAa,OAAO,SAAST,EAAa,WAAW,EAAIA,EAAa,YAAcO,EAAQ,OAC5FG,EAAa,IAAI,KAAKV,EAAa,WAAa,KAAK,IAAI,CAAC,EAAE,mBAAmB,CAAC,EAAG,CAAE,KAAM,UAAW,OAAQ,UAAW,OAAQ,UAAW,OAAQ,EAAM,CAAC,EAI3JW,EAAa3D,GAAM,CACrB,IAAM4D,EAAQvS,EAAE,WAAW2O,CAAC,EAAE,EAC9B,OAAO4D,IAAU,WAAW5D,CAAC,GAAK6D,GAAO7D,CAAC,EAAI4D,CAClD,EACMC,GAAU7D,GAAM,CAClB,IAAI5R,EAAI,OAAO4R,CAAC,EAAE,QAAQ,WAAY,EAAE,EAAE,QAAQ,qBAAsB,OAAO,EAAE,QAAQ,wBAAyB,OAAO,EAAE,KAAK,EAChI,OAAA5R,EAAIA,EAAE,QAAQ,2EAA6EK,GAAMA,EAAE,YAAY,CAAC,EACzGL,EAAE,OAAO,CAAC,EAAE,YAAY,EAAIA,EAAE,MAAM,CAAC,CAChD,EAEM0V,GAAY,iMACZC,GAAQ,oMACRC,GAAYT,EAAQ,IAAI,CAAC,CAACvD,EAAG3R,CAAC,EAAG0C,IAAM,CACzC,IAAMkT,EAAS,CAAC,EAAE5V,GAAKA,EAAE,QACnB6V,GAAO7V,GAAKA,EAAE,UAAa4V,EAAS5S,EAAE,gBAAgB,EAAIA,EAAE,gBAAgB,GAG5E8S,GAAS9S,EAAE,aAAa6S,EAAG,EAAE,EAC7BE,GAAOD,KAAW,aAAaD,EAAG,GAAKA,GAAMC,GAC7CtN,EAAKoN,EAAS,oBAAsB,eACpCrN,EAASqN,EAAS,kCAAoC,gCACtDI,GAASJ,EAAS,kCAAoC,+BACtDK,GAAaL,EAAS,kCAAoC,gCAC1DM,EAAaN,EAAS,mBAAqB,mBACjD,MAAO,iHAAiHpN,CAAE,sBAAsBD,CAAM,wEAAwE7F,EAAI,KAAM,QAAQ,CAAC,CAAC;AAAA,2IAC3HsT,EAAM,sBAAsBC,EAAU,MAAML,EAASH,GAAYC,EAAK;AAAA;AAAA,0GAEvGQ,CAAU,yBAAyBtB,EAAIU,EAAU3D,CAAC,CAAC,CAAC;AAAA,sDACxGjD,CAAI,kEAAkEkG,EAAImB,EAAI,CAAC;AAAA;AAAA,2BAGrH,CAAC,EAAE,KAAK,EAAE,EAEJI,EAAQ,SAAS,cAAc,KAAK,EAC1CA,EAAM,GAAK,qBACXA,EAAM,MAAM,QAAU,qSACtBA,EAAM,UAAY;AAAA;AAAA,6JAE2HtB,CAAS;AAAA,oEAClG7R,EAAE,YAAY,CAAC;AAAA;AAAA;AAAA;AAAA,+IAI4D6R,CAAS;AAAA;AAAA;AAAA;AAAA,+EAIzE1F,CAAW,+DAA+D4F,CAAS;AAAA;AAAA;AAAA,uIAG3BD,CAAK;AAAA,qDACvFpG,CAAI;AAAA;AAAA;AAAA;AAAA,kDAIPA,CAAI,mIAAmI1L,EAAE,cAAc,CAAC;AAAA;AAAA,kJAExD4R,EAAII,CAAK,CAAC;AAAA,gJACZH,CAAS,iCAAiCA,CAAS,sBAAsBnG,CAAI,4CAA4CQ,CAAM,wHAAwHC,CAAW,wDAAwDnM,EAAE,eAAe,CAAC;AAAA;AAAA;AAAA,yDAGna0L,CAAI,oIAAoI1L,EAAE,oBAAoB,CAAC,kGAAkGkM,CAAM,MAAMiG,CAAW,aAAaC,CAAU;AAAA,yDAC/S1G,CAAI,oIAAoI1L,EAAE,mBAAmB,CAAC,iCAAiC0L,CAAI,+DAA+DkG,EAAIS,CAAU,CAAC;AAAA,yDACjR3G,CAAI,oIAAoI1L,EAAE,eAAe,CAAC,+EAA+EiS,EAASjS,EAAE,eAAe,EAAIA,EAAE,mBAAmB,CAAC;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,uHAQ/N2S,EAAS;AAAA,sJACsBd,CAAS,iCAAiCA,CAAS;AAAA,4FAC7G1F,CAAW;AAAA,+FACR8F,EAASjS,EAAE,kBAAkB,EAAIA,EAAE,sBAAsB,CAAC;AAAA;AAAA,0BAIzI,IAAMoT,EAASlU,GAAM,CAAMA,EAAE,MAAQ,UAAUmU,EAAM,CAAG,EAClDA,EAAQ,IAAM,CAAMF,EAAM,YAAYA,EAAM,OAAO,EAAG,SAAS,oBAAoB,UAAWC,CAAK,CAAG,EAC5GD,EAAM,cAAc,WAAW,EAAE,iBAAiB,QAASE,CAAK,EAChEF,EAAM,iBAAiB,QAAUjU,GAAM,CAAMA,EAAE,SAAWiU,GAAOE,EAAM,CAAG,CAAC,EAC3E,SAAS,iBAAiB,UAAWD,CAAK,EAC1C,IAAME,EAAQH,EAAM,cAAc,WAAW,EAC7CG,EAAM,iBAAiB,aAAc,IAAM,CAAEA,EAAM,MAAM,YAAc,mCAAoCA,EAAM,MAAM,MAAQ,kBAAoB,CAAC,EACpJA,EAAM,iBAAiB,aAAc,IAAM,CAAEA,EAAM,MAAM,YAAc,2BAA4BA,EAAM,MAAM,MAAQ,kBAAoB,CAAC,EAC5IA,EAAM,iBAAiB,QAAS,IAAM,CAAED,EAAM,EAAG5B,GAAkBC,CAAa,CAAG,CAAC,EACpF,SAAS,KAAK,YAAYyB,CAAK,CACnC,EAKMI,GAAsB,CAAC,CAAE,OAAAvP,EAAQ,aAAAwP,EAAc,cAAA9B,EAAe,MAAA+B,EAAO,UAAAC,EAAW,aAAAC,EAAc,cAAAC,CAAc,IAAM,CACpH,IAAMlI,EAAO,mEACP,CAACmI,EAAaC,CAAc,EAAI,MAAM,SAAS,EAAK,EACpD,CAAC3W,EAAK4W,CAAM,EAAI,MAAM,SAAS,IAAI,EACnC,CAACC,EAAaC,CAAc,EAAI,MAAM,SAAS,EAAK,EACpD,CAACC,EAAWC,CAAY,EAAI,MAAM,SAAS,EAAE,EAEnD,MAAM,UAAU,IAAM,CAClB,IAAIC,EAAQ,GACNC,GAAW,SAAY,CACzB,GAAI,CACA,GAAI,CAAC3C,EAAe,OACpB,IAAIhQ,GAAO,KACP,OAAOgQ,EAAc,sBAAyB,WAAYhQ,GAAO,MAAMgQ,EAAc,qBAAqB,EACrG,OAAOA,EAAc,iCAAoC,WAAYhQ,GAAO,MAAMgQ,EAAc,gCAAgC,EAChI,OAAO,4BAA2BhQ,GAAO,MAAM,OAAO,0BAA0B,uBAAuBgQ,CAAa,GACzH0C,GAAS1S,IAAQA,GAAK,aAAe,IAAOqS,EAAOrS,EAAI,CAC/D,MAAY,CAAe,CAC/B,EACA2S,GAAS,EACT,IAAMC,GAAUpV,IAAM,CAAMkV,GAASlV,GAAE,QAAUA,GAAE,OAAO,cAAc6U,EAAO7U,GAAE,OAAO,YAAY,CAAG,EACvG,SAAS,iBAAiB,2BAA4BoV,EAAM,EAC5D,IAAMlD,GAAK,YAAYiD,GAAU,IAAK,EACtC,MAAO,IAAM,CAAED,EAAQ,GAAO,cAAchD,EAAE,EAAG,SAAS,oBAAoB,2BAA4BkD,EAAM,CAAG,CACvH,EAAG,CAAC5C,CAAa,CAAC,EAKlB,IAAM6C,EAAkBvQ,IAAW,aAAeA,IAAW,WACvDwQ,GAAUxQ,IAAW,gBAAkBA,IAAW,oBAClDyQ,GAAYF,GAAmB,CAACb,EAEhCgB,GAAWhB,GAAac,GAAW,sBAAyBD,EAAkB,wBAA0B,yBACxGI,GAAYjB,EACZ1T,EAAE,cAAc,EACfuU,EAAkBvU,EAAE,kBAAkB,EAClCgE,IAAW,oBAAsBhE,EAAE,yBAAyB,EACxDgE,IAAW,eAAiBhE,EAAE,mBAAmB,EAAIA,EAAE,mBAAmB,EACnF4U,EAAYlB,GAAac,GAAW,0CAA6CD,EAAkB,4CAA8C,6CAEjJM,EAAWN,GAAmB,CAACb,EAAcoB,GAAanB,CAAY,GAAK,wBAA2Be,GACtGK,EAAoBR,GAAmB,CAACb,GAAaC,GAAiBqB,GAAcrB,CAAY,GAAK,KACrGsB,EAAc,IAAM,CAAEd,EAAaV,GAAS,EAAE,EAAGQ,EAAe,EAAI,CAAG,EACvEiB,EAAe,IAAM,CAAM,OAAOtB,GAAkB,YAAYA,EAAcM,CAAS,EAAGD,EAAe,EAAK,CAAG,EACjHkB,EAAajW,GAAM,CAAMA,EAAE,MAAQ,SAAWA,EAAE,eAAe,EAAGgW,EAAa,GAAchW,EAAE,MAAQ,UAAY+U,EAAe,EAAK,CAAK,EAC5IrB,EAASzV,GAAO,OAAO,SAASA,EAAI,YAAY,EAAIA,EAAI,aAAe,KACvE6F,EAAQ7F,GAAO,OAAO,SAASA,EAAI,WAAW,EAAIA,EAAI,YAAc,KAIpEiY,GAAiBC,GAAQ,CAC3B,GAAI,CAACA,EAAK,OAAOA,EACjB,IAAM9C,GAAQvS,EAAE,YAAYqV,CAAG,EAAE,EACjC,OAAO9C,KAAU,YAAY8C,CAAG,GAAKA,EAAM9C,EAC/C,EACM+C,GAAc1C,GAAU,MAAQ5P,EAAU4P,EAAS,IAAM5P,EAAU7F,EAAOA,EAAI,MAAQ,IAAO,SAC7F+O,GAAS/O,EACRA,EAAI,QAAU,QAAU,kBAAoBA,EAAI,QAAU,SAAW,mBAAqBA,EAAI,QAAU,SAAW,mBAAqB,gBACzI,kBAEAoY,EAAS,MAAM,cAAc,MAAO,CACtC,IAAK,MAAO,MAAOvV,EAAE,qBAAqB,EAC1C,QAAS,IAAMyR,GAAkBC,CAAa,EAC9C,UAAW,aACX,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,cAAgBmC,EAAc,4BAA8B,6BAA8B,WAAYA,EAAc,4BAA8B,4BAA6B,OAAQ,UAAW,WAAY,UAAW,WAAY,UAAW,CAClW,EAAG,CACC,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,uBAAwB,MAAO,CAAE,MAAO3H,GAAQ,SAAU,MAAO,CAAE,CAAC,EACpH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG/O,EAAOiY,GAAcjY,EAAI,KAAK,GAAK6C,EAAE,gBAAgB,EAAKA,EAAE,gBAAgB,CAAC,EAC3N,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,aAAc,MAAO,CAAE,MAAO,MAAO,OAAQ,OAAQ,WAAY,2BAA4B,CAAE,CAAC,EACnJ,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,WAAY0L,EAAM,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG4J,EAAU,EAC5K,MAAM,cAAc,SAAU,CAC1B,IAAK,IAAK,KAAM,SAAU,MAAOtV,EAAE,gBAAgB,EACnD,QAAUd,GAAM,CAAEA,EAAE,gBAAgB,EAAG4U,EAAe7V,IAAK,CAACA,EAAC,CAAG,EAChE,MAAO,CAAE,WAAY,OAAQ,OAAQ,OAAQ,QAAS,EAAG,OAAQ,EAAG,OAAQ,UAAW,QAAS,OAAQ,WAAY,QAAS,CACjI,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,sBAAuB,MAAO,CAAE,MAAO,mBAAoB,SAAU,OAAQ,UAAW4V,EAAc,iBAAmB,eAAgB,WAAY,eAAgB,CAAE,CAAC,CAAC,CACtN,CAAC,EAEK2B,EAAsB,MAAM,cAAc,QAAS,CAAE,IAAK,UAAW,wBAAyB,CAAE,OAElG,iuCA6BJ,CAAE,CAAC,EACGC,GAAS,MAAM,cAAc,SAAU,CAKzC,IAAK,MAAO,UAAW,iBAAkB,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,IAAK,OAAQ,QAAS,wDAAyD,UAAW,mFAAoF,UAAW,aAAc,aAAc,sCAAuC,WAAY,+BAAgC,eAAgB,aAAc,qBAAsB,YAAa,CACrf,EAAG,CACCD,EAGA,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,SAAU,CAAE,CAAE,EAAG,CACpH,MAAM,cAAc,MAAO,CAAE,IAAK,SAAU,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,4BAA6B,OAAQ,sCAAuC,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG,CACpWE,GAAajC,GAASzT,EAAE,cAAc,CAAC,EACvC,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY6U,EAAS,OAAQ,wBAAyB,CAAE,CAAC,CAClO,CAAC,EACDb,EACM,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,cAAe,SAAU,IAAK,MAAO,SAAU,CAAE,CAAE,EAAG,CACxH,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACrG,MAAM,cAAc,QAAS,CAAE,IAAK,KAAM,UAAW,GAAM,MAAOE,EAAW,UAAW,GAAI,YAAalU,EAAE,eAAe,EAAG,SAAWd,GAAMiV,EAAajV,EAAE,OAAO,KAAK,EAAG,UAAWiW,EAAW,OAAQD,EAAc,MAAO,CAAE,MAAO,QAAS,QAAS,WAAY,aAAc,MAAO,OAAQ,6CAA8C,WAAY,eAAgB,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,QAAS,MAAO,CAAE,CAAC,EACrd,MAAM,cAAc,SAAU,CAAE,IAAK,KAAM,YAAchW,GAAMA,EAAE,eAAe,EAAG,QAASgW,EAAc,MAAOlV,EAAE,cAAc,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,OAAQ,SAAU,CAAE,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,CACzb,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,OAAQ,MAAO,sBAAuB,CAAE,EAAGA,EAAE,iBAAiB,CAAC,CAChI,CAAC,EACC,MAAM,cAAc,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,WAAY,IAAK,SAAU,CAAE,CAAE,EAAG,CAClF,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACpG,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGyT,GAASzT,EAAE,iBAAiB,CAAC,EAC7O,MAAM,cAAc,SAAU,CAAE,IAAK,OAAQ,UAAW,gBAAiB,QAASiV,EAAa,MAAOjV,EAAE,aAAa,EAAG,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,cAAe,MAAO,uBAAwB,OAAQ,SAAU,CAAE,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,aAAc,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,CACja,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,UAAW,aAAc,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,IAAK,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAG0T,EAAY1T,EAAE,gBAAgB,EAAKgE,IAAW,eAAiBhE,EAAE,gBAAgB,EAAK+U,IAAqBR,EAAkBvU,EAAE,gBAAgB,EAAKgE,IAAW,oBAAsBhE,EAAE,yBAAyB,EAAKgE,IAAW,eAAiBhE,EAAE,mBAAmB,EAAIA,EAAE,mBAAmB,EAAM,CACzf,CAAC,CACT,CAAC,EACDuV,EACA,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,UAAW,eAAgB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CAKlI,IAAK,IAAM,CACP,IAAMI,EAAYlB,IAAa/C,GAAiBA,EAAc,aAAe,GACvEkE,GAAaC,IAAU,CACzB,GAAI,GAACF,GAAa,CAACjE,GACnB,GAAI,CAAE,IAAM5S,GAAI4S,EAAc,UAAUmE,EAAK,EAAO/W,IAAKA,GAAE,OAAOA,GAAE,MAAM,IAAM,CAAC,CAAC,CAAG,MAC3E,CAAC,CACf,EAGMgX,GAAe,CACjB,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SACjF,OAAQ,sCAAuC,WAAY,4BAC3D,MAAOH,EAAY,mBAAqB,sBAAuB,OAAQA,EAAY,UAAY,cAAe,WAAY,UAC9H,EAGA,MAAO,CACH,MAAM,cAAc,SAAU,CAAE,IAAK,aAAc,UAAWA,EAAY,cAAgB,0BAA2B,SAAU,CAACA,EAAW,QAAS,IAAMC,GAAU,EAAK,EAAG,MAAOD,EAAY3V,EAAE,qBAAqB,EAAIA,EAAE,qBAAqB,EAAG,MAAO8V,GAAc,wBAAyB,CAAE,OAHtR,ybAGwS,CAAE,CAAC,EACzT,MAAM,cAAc,SAAU,CAAE,IAAK,aAAc,UAAWH,EAAY,cAAgB,0BAA2B,SAAU,CAACA,EAAW,QAAS,IAAMC,GAAU,EAAI,EAAG,MAAOD,EAAY3V,EAAE,qBAAqB,EAAIA,EAAE,qBAAqB,EAAG,MAAO8V,GAAc,wBAAyB,CAAE,OAHrR,4OAGuS,CAAE,CAAC,CAC5T,CACJ,GAAG,EACH,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,UAAW,UAAW,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,2BAA4B,CAAE,EAAG,CAC9P,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAYpB,GAAS,UAAWE,CAAS,CAAE,CAAC,EAC/J,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,eAAgB,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGD,EAAS,CAC3J,CAAC,EACD,MAAM,cAAc,SAAU,CAAE,IAAK,KAAM,QAASnB,EAAc,UAAW,gBAAiB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MAAO,OAAQ,sCAAuC,WAAY,cAAe,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,WAAY,UAAW,CAAE,EAAG,CAC9Y,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACjG,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,UAAW,YAAa,EAAGxT,EAAE,gBAAgB,CAAC,CAC1F,CAAC,CACL,CAAC,CACL,CAAC,EAEK+V,GAAWlC,GAAe,MAAM,cAAc,MAAO,CACvD,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,YAAa,aAAc,sCAAuC,WAAY,+BAAgC,eAAgB,aAAc,qBAAsB,YAAa,CAC/N,EAAG,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,SAAU,SAAU,OAAQ,SAAU,QAAS,OAAQ,oBAAqB,qCAAsC,IAAK,OAAQ,WAAYnI,CAAK,CAAE,EACvL,CACI,CAAC1L,EAAE,eAAe,EAAG,kBAAe,EACpC,CAACA,EAAE,YAAY,EAAG,aAAa,EAC/B,CAACA,EAAE,iBAAiB,EAAG,YAAY,EACnC,CAACA,EAAE,cAAc,EAAGsV,IAAcnY,EAAO,SAAQA,EAAI,MAAQ,IAAO,GAAG,CAC3E,EAAE,IAAI,CAAC,CAACwR,EAAG1Q,EAAC,EAAGyB,KAAM,MAAM,cAAc,MAAO,CAAE,IAAK,KAAOA,EAAE,EAAG,CAC/D,MAAM,cAAc,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,cAAe,YAAa,cAAe,QAAS,aAAc,KAAM,CAAE,EAAGiP,CAAC,EAC3K,MAAM,cAAc,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAOjP,KAAM,EAAIwM,GAAS,mBAAoB,WAAY,GAAI,CAAE,EAAGjO,EAAC,CAC5I,CAAC,CAAC,CACN,CAAC,EAED,OAAO,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,KAAM,MAAO,CAAE,EAAG,CAACwX,GAAQM,EAAQ,CAAC,CACrF,EAGSC,GAAwB,CAAC,CAClC,MAAAvC,EACA,UAAAC,EACA,aAAAC,EACA,cAAAC,EACA,SAAA5N,EACA,aAAAiQ,EACA,gBAAAC,EACA,cAAAC,EACA,YAAAC,EACA,aAAA5C,EACA,eAAA6C,EACA,WAAAC,EACA,gBAAAhF,EACA,eAAAiF,EACA,cAAA7E,EACA,OAAA1N,EACA,qBAAAwS,EAAuB,CAAC,EACxB,mBAAAC,GAEA,SAAAC,GACA,YAAAC,GACA,aAAAC,GACA,gBAAAC,EACA,YAAA3S,EACA,eAAA4S,EACA,aAAAC,EACA,gBAAAC,EACA,QAAA3S,EACA,gBAAA4S,EACA,gBAAAC,CACJ,IAAM,CACF,GAAM,CAACC,GAAkBC,EAAmB,EAAI,MAAM,SAAS,EAAK,EAC9D,CAACC,GAAkBC,CAAmB,EAAI,MAAM,SAAS,EAAK,EAI9D,CAACC,EAAcC,EAAe,EAAI,MAAM,SAAS,EAAK,EACtD,CAACC,GAAWC,CAAY,EAAI,MAAM,SAAS,EAAK,EAChD,CAACC,GAAUC,EAAW,EAAI,MAAM,SAAS,EAAK,EAC9C,CAACC,GAAeC,EAAgB,EAAI,MAAM,SAAS,EAAK,EACxD,CAACC,GAAaC,EAAc,EAAI,MAAM,SAAS,EAAK,EAEpD,CAACC,GAAWC,EAAY,EAAI,MAAM,SAAS,IAAM,OAAO,OAAW,KAAe,CAAC,CAAC,OAAO,YAAc,OAAO,WAAW,oBAAoB,EAAE,OAAO,EAC9J,MAAM,UAAU,IAAM,CAClB,GAAI,OAAO,OAAW,KAAe,CAAC,OAAO,WAAY,OACzD,IAAMC,EAAK,OAAO,WAAW,oBAAoB,EAC3CC,GAAO,IAAMF,GAAaC,EAAG,OAAO,EAC1C,GAAI,CAAEA,EAAG,iBAAiB,SAAUC,EAAI,CAAG,MAAY,CAAED,EAAG,YAAYC,EAAI,CAAG,CAC/E,MAAO,IAAM,CAAE,GAAI,CAAED,EAAG,oBAAoB,SAAUC,EAAI,CAAG,MAAY,CAAED,EAAG,eAAeC,EAAI,CAAG,CAAE,CAC1G,EAAG,CAAC,CAAC,EACL,IAAMC,GAAQ,MAAM,OAAO,IAAI,EAG/B,MAAM,UAAU,IAAM,CAClB,IAAM/K,EAAK+K,GAAM,QACb,CAAC/K,GAAMoJ,KACXpJ,EAAG,MAAM,OAAS,OAClBA,EAAG,MAAM,OAAS,KAAK,IAAIA,EAAG,aAAc,GAAG,EAAI,KACvD,EAAG,CAAC2I,EAAcS,EAAQ,CAAC,EAG3B,MAAM,UAAU,IAAM,CACdF,EAAqB,OAAS,GAC9Bc,EAAoB,EAAI,CAEhC,EAAG,CAACd,EAAqB,MAAM,CAAC,EAOhC,IAAM8B,GAAc,MAAM,OAAO,EAAI,EAMrC,MAAM,UAAU,IAAM,CAClB,IAAMzH,EAAM,OAAO,OAAW,IAAe,OAAO,eAAiB,KACrE,GAAI,CAACA,EAAI,OACT,IAAM0H,GAAQ,IAAM,CAChB,GAAI,CAACD,GAAY,QAAS,OAC1B,IAAMhL,GAAKgE,EAAgB,QACtBhE,KACLA,GAAG,UAAYA,GAAG,aACtB,EAGMkL,GAAW,IAAM,CAAE,sBAAsBD,EAAK,EAAG,WAAWA,GAAO,GAAG,CAAG,EAC/E,OAAA1H,EAAG,iBAAiB,SAAU2H,EAAQ,EAC/B,IAAM3H,EAAG,oBAAoB,SAAU2H,EAAQ,CAC1D,EAAG,CAAClH,CAAe,CAAC,EAEpB,MAAM,UAAU,IAAM,CAClB,GAAIA,EAAgB,SAAWtL,EAAS,OAAS,EAAG,CAChD,GAAM,CAAE,UAAAyS,EAAW,aAAAC,GAAc,aAAAC,EAAa,EAAIrH,EAAgB,QAElE,GADqBoH,GAAeD,EAAYE,GAAe,IAC7C,CACd,IAAMC,GAAe,IAAM,CACnBtH,EAAgB,SAChBA,EAAgB,QAAQ,SAAS,CAC7B,IAAKA,EAAgB,QAAQ,aAC7B,SAAUE,GAAe,CAC7B,CAAC,CAET,EACAoH,GAAa,EACb,WAAWA,GAAc,EAAE,EAC3B,WAAWA,GAAc,GAAG,CAChC,CACJ,CACJ,EAAG,CAAC5S,EAAUsL,CAAe,CAAC,EAE9B,IAAMuH,GAAe,IAAM,CACvB,GAAIvH,EAAgB,QAAS,CACzB,GAAM,CAAE,UAAAmH,EAAW,aAAAC,GAAc,aAAAC,EAAa,EAAIrH,EAAgB,QAC5DwH,GAAeJ,GAAeD,EAAYE,GAAe,IAC/DL,GAAY,QAAUQ,GACtB1B,GAAoB,CAAC0B,EAAY,CACrC,CACJ,EAEMC,GAAuB,IAAM,CAC/BT,GAAY,QAAU,GAClB,OAAO/B,GAAmB,YAC1BA,EAAe,EACfa,GAAoB,EAAK,GAClB9F,EAAgB,UACvBA,EAAgB,QAAQ,SAAS,CAAE,IAAKA,EAAgB,QAAQ,aAAc,SAAUE,GAAe,CAAE,CAAC,EAC1G4F,GAAoB,EAAK,EAEjC,EAEM4B,GAAkB9Z,GAAM,CACtBA,EAAE,MAAQ,UACVwX,IACIxX,EAAE,SAAWA,EAAE,WAAWA,EAAE,eAAe,EAAGiX,EAAc,GACxDjX,EAAE,WACVA,EAAE,eAAe,EACjBiX,EAAc,GAEtB,EAEM8C,GAAsB,IAAM,CAC9B,GAAI,CAACvH,EAAe,MAAO,GAC3B,IAAM+C,EAAY/C,EAAc,YAAcA,EAAc,YAAY,EAAI,GACtE1D,GAAW0D,EAAc,YAAc,GACvCwH,GAAiBxH,EAAc,aAAeA,EAAc,YAAY,aAAe,OAC7F,OAAO+C,GAAazG,IAAYkL,EACpC,EAGMxN,GAAO,mEACPyN,GAAYpc,GACTA,EACDA,GAAK,OAASA,EAAI,QAAU,EAAWA,EAAI,MAAS,IACpDA,GAAK,MAAQA,EAAI,OAAS,EAAWA,EAAI,KAAQ,IACjDA,GAAK,GAAW,KAAK,MAAMA,EAAI,EAAE,EAAI,IAClCA,EAAI,IAJI,GAMbqc,GAAanK,IAAY,CAC3B,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,aAAc,MACtF,OAAQ,cAAgBA,EAAS,4BAA8B,6BAC/D,WAAYA,EAAS,4BAA8B,cACnD,MAAOA,EAAS,OAAS,mBACzB,WAAY,UAAW,SAAU,SAAU,WAAY,IAAK,OAAQ,UAAW,WAAY,UAC/F,GACMoK,GAAYC,IAAS,CACvB,QAAS,WAAY,aAAc,MACnC,OAAQ,cAAgBA,EAAM,4BAA8B,6BAC5D,WAAYA,EAAM,4BAA8B,cAChD,MAAOA,EAAM,OAAS,mBACtB,WAAY5N,GAAM,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,WAAY,UACxF,GAEM6N,GAAY,CACd,CAAE,MAAOvZ,EAAE,SAAS,EAAG,EAAG,CAAE,EAAG,CAAE,MAAO,KAAM,EAAG,CAAE,EAAG,CAAE,MAAO,MAAO,EAAG,EAAG,EAC5E,CAAE,MAAO,KAAM,EAAG,EAAG,EAAG,CAAE,MAAO,KAAM,EAAG,IAAK,EAAG,CAAE,MAAO,MAAO,EAAG,KAAM,CAC/E,EACMwZ,GAAW,CACb,CAAE,MAAOxZ,EAAE,SAAS,EAAG,EAAG,CAAE,EAAG,CAAE,MAAO,KAAM,EAAG,CAAE,EAAG,CAAE,MAAO,MAAO,EAAG,EAAG,EAC5E,CAAE,MAAO,MAAO,EAAG,EAAG,EAAG,CAAE,MAAO,KAAM,EAAG,EAAG,CAClD,EACMyZ,GAAe7C,GAAe1S,EAAc,EAC5CwV,EAAazb,GAAM,CAAE+Y,EAAgB/Y,CAAC,EAAGyZ,EAAa,EAAK,CAAG,EAC9DiC,EAAY1b,GAAM,CAChBA,IAAM,EAAG4Y,EAAgB,EAAK,GAC3BC,EAAe7Y,CAAC,EAAG4Y,EAAgB,EAAI,GAC9Ce,GAAY,EAAK,CACrB,EAEMgC,GAAU,CAAC,EAAE3D,GAAgBA,EAAa,KAAK,GAG/C4D,GAAY,OAAOzD,GAAgB,YAClC,CAAC1C,GACDuF,GAAoB,GACpB,OAAO,UAAc,KACrB,UAAU,cACV,OAAO,UAAU,aAAa,cAAiB,WAIhDa,GAAQjV,GAAO,CAAE,GAAI,CAAE,OAAO,IAAI,KAAKA,CAAE,EAAE,mBAAmB,QAAS,CAAE,KAAM,UAAW,OAAQ,UAAW,OAAQ,SAAU,CAAC,CAAG,MAAY,CAAE,MAAO,EAAI,CAAE,EAG9JkV,GAAiB/T,EAAS,OAAQ5I,GAAMA,EAAE,OAAS,UAAY,OAAOA,EAAE,SAAY,UAAYA,EAAE,QAAQ,KAAK,CAAC,EAChH4c,GAAehU,EAAS,OAAQ5I,GAAMA,EAAE,OAAS,QAAQ,EAGzD6c,IAAiB3D,GAAcyD,GAAe,OAAS,IAAM,MAAM,cAAc,MAAO,CAC1F,IAAK,YACL,MAAO,CAAE,OAAQ,sCAAuC,aAAc,OAAQ,WAAY,oBAAqB,SAAU,QAAS,CACtI,EAAG,CACC,MAAM,cAAc,SAAU,CAC1B,IAAK,SAAU,QAAS,IAAMjC,GAAiB7Z,GAAK,CAACA,CAAC,EACtD,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,WAAY,cAAe,OAAQ,OAAQ,MAAO,UAAW,OAAQ,UAAW,UAAW,QAAS,WAAY,SAAU,CAChO,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAClI,MAAM,cAAc,IAAK,CAAE,UAAW,eAAgB,MAAO,CAAE,MAAO,kBAAmB,SAAU,MAAO,CAAE,CAAC,CACjH,EACA,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvE,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAG+B,EAAE,yBAAyB,CAAC,EACrN,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,UAAW,MAAO,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGA,EAAE,cAAc,GAAK+Z,GAAe,OAAU,SAAQA,GAAe,QAAUA,GAAe,SAAW,EAAI,SAAW,WAAc,GAAG,CACrU,CAAC,EACD,MAAM,cAAc,IAAK,CAAE,IAAK,OAAQ,UAAW,sBAAuB,MAAO,CAAE,KAAM,OAAQ,MAAO,mBAAoB,SAAU,OAAQ,UAAWlC,GAAgB,iBAAmB,eAAgB,WAAY,eAAgB,CAAE,CAAC,CAC/O,CAAC,EACDA,IAAiB,MAAM,cAAc,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,WAAY,MAAO,cAAe,OAAQ,mBAAoB,OAAQ,iBAAkB,MAAO,CAAE,EAAG,CACvKkC,GAAe,OAAS,GAAK,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,UAAW,YAAa,MAAO,CAAE,aAAc,OAAQ,UAAW,QAAS,UAAW,OAAQ,iBAAkB,KAAM,CAAE,EAC5LA,GAAe,IAAI,CAAC3c,EAAGsC,KAAM,MAAM,cAAc,MAAO,CAAE,IAAK,IAAMA,GAAG,MAAO,CAAE,QAAS,OAAQ,IAAK,OAAQ,QAAS,QAAS,UAAWA,KAAM,EAAI,OAAS,qCAAsC,CAAE,EAAG,CACtM,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,MAAO,OAAQ,MAAO,aAAc,MAAO,WAAY,wBAAyB,UAAW,MAAO,QAAS,EAAI,CAAE,CAAC,EACxL,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,SAAU,MAAO,mBAAoB,WAAY,IAAK,UAAW,YAAa,CAAE,EAAG,OAAOtC,EAAE,SAAW,EAAE,EAAE,KAAK,CAAC,EACrL,MAAM,cAAc,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,OAAQ,WAAYsO,GAAM,SAAU,SAAU,MAAO,sBAAuB,CAAE,EAAGoO,GAAK1c,EAAE,SAAS,CAAC,CAC9J,CAAC,CAAC,CACN,EACAiZ,GAAkB,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,MAAO,WAAY,6BAA8B,OAAQ,qCAAsC,CAAE,EAAG,CAC1P,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,EACvH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAGrW,EAAE,kBAAkB,CAAC,EACzH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAY0L,GAAM,SAAU,OAAQ,MAAO,mBAAoB,cAAe,QAAS,WAAY,IAAK,UAAW,WAAY,CAAE,EAAG2K,CAAc,CACvM,CAAC,CACL,CAAC,CACL,CAAC,EAGK6D,GAAa,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,KAAM,EAAG,UAAW,MAAO,CAAE,EACjK,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,UAAW,SAAU,SAAU,OAAQ,CAAE,EAAG,CAC9E,MAAM,cAAc,MAAO,CAAE,IAAK,KAAM,IAAK,2BAA4B,IAAK,YAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,QAAS,OAAQ,aAAc,CAAE,CAAC,EACpM,MAAM,cAAc,KAAM,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAGla,EAAE,mBAAmB,CAAC,EAC1J,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,OAAQ,CAAE,CAAE,EAAGA,EAAE,eAAe,CAAC,CAChI,CAAC,CACL,EAGMma,GAAe,MAAM,cAAc,OAAQ,CAC7C,IAAK,OACL,IAAK7I,EACL,SAAUuH,GACV,UAAW,YACX,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,gBAAiB,CACnE,EAAG,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,MAAO,OAAQ,SAAU,SAAU,OAAQ,SAAU,QAAS,OAAQ,cAAe,SAAU,IAAK,OAAQ,UAAW,MAAO,CAAE,EACrKmB,GAAa,SAAW,EAClB,CAACC,GAAeC,EAAU,EAC1B,CAACD,EAAa,EAAE,OAAOD,GAAa,IAAKI,GAAQ,MAAM,cAAczW,GAAqB,CACxF,IAAKyW,EAAI,GACT,QAASA,EAAI,QACb,KAAMA,EAAI,KACV,UAAWA,EAAI,UACf,IAAKA,EAAI,IACT,OAAQA,EAAI,OACZ,SAAUA,EAAI,SACd,YAAaA,EAAI,YACjB,UAAWA,EAAI,UACf,QAASA,EAAI,QACb,QAAS/V,EACT,UAAW,OAAO4S,GAAoB,WACtC,SAAUA,EACV,SAAU,IAAMC,GAAmBA,EAAgBkD,EAAI,EAAE,EACzD,MAAOA,EAAI,KACf,CAAC,CAAC,CAAC,CACX,CAAC,EAGKC,GAAW5C,IAAa,MAAM,cAAc,MAAO,CAAE,IAAK,YAAa,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,mBAAoB,CAAE,EAC1S,CAAC,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,IAAK,gBAAiB,KAAM,CAAE,EAAGzX,EAAE,qBAAqB,CAAC,CAAC,EAAE,OACrKuZ,GAAU,IAAK1a,GAAM,MAAM,cAAc,SAAU,CAAE,IAAK,KAAOA,EAAE,EAAG,QAAS,IAAM6a,EAAU7a,EAAE,CAAC,EAAG,MAAOwa,GAAStC,IAAiBlY,EAAE,CAAC,CAAE,EAAGA,EAAE,KAAK,CAAC,CAC1J,CACJ,EACMyb,GAAU3C,IAAY,MAAM,cAAc,MAAO,CAAE,IAAK,WAAY,MAAO,CAAE,QAAS,OAAQ,SAAU,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,YAAa,aAAc,OAAQ,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,mBAAoB,CAAE,EACvS,CAAC,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,OAAQ,MAAO,mBAAoB,WAAY,IAAK,gBAAiB,KAAM,CAAE,EAAG3X,EAAE,iBAAiB,CAAC,CAAC,EAAE,OACjKwZ,GAAS,IAAK3a,GAAM,MAAM,cAAc,SAAU,CAAE,IAAK,KAAOA,EAAE,EAAG,QAAS,IAAM8a,EAAS9a,EAAE,CAAC,EAAG,MAAOwa,GAASI,KAAiB5a,EAAE,CAAC,CAAE,EAAGA,EAAE,KAAK,CAAC,CACxJ,CACJ,EAGM0b,GAAYlD,IAAoB,MAAM,cAAc,MAAO,CAAE,IAAK,aAAc,MAAO,CAAE,aAAc,MAAO,CAAE,EAClH,MAAM,cAAc,OAAO,wBAA0B,IAAM,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,QAAS,OAAQ,UAAW,SAAU,MAAO,eAAgB,CAAE,EAAG,kCAAkC,GAAI,CACrM,cAAe3F,EACf,YAAauH,GAAoB,EACjC,qBAAsBzC,EACtB,mBAAoBC,GACpB,aAAcc,CAClB,CAAC,CACL,EAGMiD,GAAW,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,UAAW,WAAY,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,SAAU,OAAQ,IAAK,MAAO,aAAc,MAAO,CAAE,EAAG,CACxN,MAAM,cAAc,SAAU,CAAE,IAAK,QAAS,QAAS,IAAM,CACrDnD,IAAoBE,GAAgBD,EAAoB,EAAK,EAAGE,GAAgB,EAAK,IAClFF,EAAoB,EAAI,EAAGE,GAAgB,EAAI,EAC1D,EAAG,UAAW,UAAW,MAAO4B,GAAU/B,IAAoBE,CAAY,CAAE,EAAG,CAC3E,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAChGF,IAAoBE,EAAgBvX,EAAE,gBAAgB,EAAIA,EAAE,gBAAgB,CACjF,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,UAAW,iBAAkB,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,SAAU,MAAO,CAAE,EAAG,CACtJ,MAAM,cAAc,SAAU,CAAE,IAAK,OAAQ,QAAS,IAAM2W,GAAY1Y,GAAK,CAACA,CAAC,EAAG,UAAW,UAAW,MAAOmb,GAAU1C,EAAQ,CAAE,EAAG,CAClI,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EAAG1W,EAAE,UAAU,CAC/G,CAAC,EACD,MAAM,cAAc,SAAU,CAAE,IAAK,OAAQ,QAAS,IAAM,CAAE4X,GAAY3Z,GAAK,CAACA,CAAC,EAAGyZ,EAAa,EAAK,CAAG,EAAG,UAAW,UAAW,MAAO0B,GAAUzB,IAAYf,EAAY,CAAE,EAAG,CAC5K,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACjGA,GAAgB5W,EAAE,qBAAqB,EAAImZ,GAASjV,CAAW,EAAKlE,EAAE,eAAe,CACzF,CAAC,EACD,MAAM,cAAc,SAAU,CAAE,IAAK,QAAS,QAAS,IAAM,CAAE0X,EAAazZ,GAAK,CAACA,CAAC,EAAG2Z,GAAY,EAAK,CAAG,EAAG,UAAW,UAAW,MAAOwB,GAAU3B,IAAaV,EAAe,CAAC,CAAE,EAAG,CAClL,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,mBAAoB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,EACjGA,EAAe,EAAK/W,EAAE,kBAAkB,EAAImZ,GAASpC,CAAY,EAAK/W,EAAE,WAAW,CACvF,CAAC,CACL,CAAC,CACL,CAAC,EAGKya,GAAY/D,IAAY,MAAM,cAAc,MAAO,CAAE,IAAK,aAAc,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,QAAS,WAAY,OAAQ,sCAAuC,aAAc,OAAQ,aAAc,gBAAiB,WAAY,mBAAoB,CAAE,EAAG,CACpS,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,MAAO,CAAE,MAAO,mBAAoB,SAAU,MAAO,CAAE,CAAC,EACvH,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG1W,EAAE,eAAe,CAAC,EACvI,MAAM,cAAc,SAAU,CAAE,IAAK,IAAK,QAAS,IAAM2W,GAAY,EAAK,EAAG,UAAW,UAAW,MAAO,CAAE,kBAAmB,OAAQ,WAAY,OAAQ,OAAQ,OAAQ,MAAO,mBAAoB,OAAQ,UAAW,SAAU,SAAU,WAAY,UAAW,WAAY,GAAI,CAAE,EAAG3W,EAAE,YAAY,CAAC,CAC5S,CAAC,EAGK0a,GAAU,MAAM,cAAc,SAAU,CAC1C,IAAK,OAAQ,QAASvE,EAAe,SAAU,CAACyD,GAAS,MAAO5Z,EAAE,WAAW,EAAG,UAAW,UAC3F,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ4Z,GAAU,UAAY,UAAW,WAAYA,GAAU,yBAA2B,4BAA6B,MAAOA,GAAU,sBAAwB,uBAAwB,WAAY,UAAW,CACtV,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,mCAAoC,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EACrGe,GAAS,MAAM,cAAc,SAAU,CACzC,IAAK,MAAO,QAAS,IAAM3C,GAAe,EAAI,EAAG,MAAOhY,EAAE,kBAAkB,EAAG,UAAW,UAC1F,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAY,yBAA0B,MAAO,sBAAuB,UAAW,6CAA8C,WAAY,yCAA0C,CAC5U,EAAG,MAAM,cAAc,MAAO,CAAE,MAAO,GAAI,OAAQ,GAAI,QAAS,YAAa,KAAM,OAAQ,OAAQ,eAAgB,YAAa,IAAK,cAAe,QAAS,eAAgB,OAAQ,EAAG,CACpL,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,EAAG,EAAG,EAAG,EAAG,MAAO,EAAG,OAAQ,GAAI,GAAI,CAAE,CAAC,EACjF,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,EAAG,sBAAuB,CAAC,EACnE,MAAM,cAAc,OAAQ,CAAE,IAAK,IAAK,EAAG,UAAW,CAAC,CAC3D,CAAC,CAAC,EAGI4a,GAAmBf,GAElB5B,GAAY,CAAC0C,GAAQD,EAAO,EAAKd,GAAU,CAACc,EAAO,EAAI,CAACC,EAAM,EAD/D,CAACD,EAAO,EAGRG,GAAW,MAAM,cAAc,MAAO,CACxC,IAAK,QACL,MAAO,CAAE,QAAS,OAAQ,WAAY,WAAY,IAAK,OAAQ,aAAc,OAAQ,mBAAoB,OAAQ,iBAAkB,OAAQ,OAAQ,cAAgBjB,GAAU,4BAA8B,6BAA8B,WAAY,oBAAqB,aAAclD,GAAW,gBAAkB,OAAQ,WAAY,aAAc,CAC3V,EAAG,CACC,MAAM,cAAc,MAAO,CAAE,IAAK,UAAW,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CAC5E,MAAM,cAAc,WAAY,CAC5B,IAAK,KACL,MAAOT,EACP,IAAKoC,GACL,SAAWnZ,GAAMgX,EAAgBhX,EAAE,OAAO,KAAK,EAC/C,UAAW8Z,GACX,KAAM,EACN,UAAW,IACX,YAAatC,GAAW1W,EAAE,mBAAmB,EAAIA,EAAE,kBAAkB,EACrE,UAAW,cACX,MAAO,CAAE,MAAO,OAAQ,UAAW0W,GAAW,QAAU,OAAQ,UAAW,QAAS,OAAQ,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,cAAe,MAAO,mBAAoB,WAAYA,GAAWhL,GAAO,UAAW,SAAUgL,GAAW,OAAS,SAAU,WAAY,KAAM,QAAS,OAAQ,CACnT,CAAC,EACD,MAAM,cAAc,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,UAAW,KAAM,CAAE,EAAG,CACzH,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,cAAe,WAAY,SAAU,IAAK,MAAO,SAAU,OAAQ,MAAO,sBAAuB,CAAE,EAAG,CAC9J,MAAM,cAAc,IAAK,CAAE,IAAK,IAAK,UAAW,cAAe,MAAO,CAAE,MAAO,kBAAmB,SAAU,MAAO,CAAE,CAAC,EACtH1W,EAAE,wBAAwB,CAC9B,CAAC,EACD,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,WAAY0L,GAAM,SAAU,SAAU,MAAO,uBAAwB,kBAAmB,MAAO,CAAE,GAAIuK,EAAeA,EAAa,OAAS,GAAK,OAAO,CAC7M,CAAC,CACL,CAAC,CACL,EAAE,OAAO2E,EAAe,CAAC,EAInBE,GAAe,MAAM,cAAc,MAAO,CAAE,IAAK,QAAS,EAC5D,MAAM,cAAc5a,GAAe,CAC/B,SAAU,IAAM8X,GAAe,EAAK,EACpC,OAAQ,CAAC+C,EAAM7c,GAAKC,KAAS,CAAE6Z,GAAe,EAAK,EAAO,OAAO5B,GAAgB,YAAYA,EAAY2E,EAAM7c,GAAKC,EAAI,CAAG,CAC/H,CAAC,CACL,EAEM6c,GAAW,MAAM,cAAc,SAAU,CAAE,IAAK,WAAY,MAAO,CAAE,KAAM,OAAQ,QAAS,iFAAkF,WAAY,eAAgB,UAAW,qCAAsC,CAAE,EAC/P,MAAM,cAAc,MAAO,CAAE,MAAO,CAAE,SAAU,SAAU,OAAQ,QAAS,CAAE,EACzEjD,GACM,CAAC+C,EAAY,EACb,CAACT,GAAUC,GAASC,GAAWC,GAAUC,GAAWI,EAAQ,CACtE,CACJ,EAEMI,GAAY9D,IAAoB,MAAM,cAAc,SAAU,CAChE,IAAK,YAAa,QAAS4B,GAC3B,MAAO,CAAE,SAAU,QAAS,eAAgB,OAAQ,OAAQ,QAAS,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,OAAQ,qCAAsC,WAAY,sBAAuB,MAAO,mBAAoB,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,OAAQ,GAAI,UAAW,uEAAwE,CAClY,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,oBAAqB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EAEtFmC,EAAa,MAAM,cAAc3H,GAAqB,CACxD,IAAK,cAAe,OAAQvP,EAAQ,aAAcwP,EAAc,cAAe9B,EAAe,MAAO+B,EAAO,UAAWC,EAAW,aAAcC,EAAc,cAAeC,CACjL,CAAC,EAKKuH,GAAc,OAAO,iBAAmB,MAAM,cAAc,OAAO,gBAAiB,CACtF,IAAK,eAAgB,cAAezJ,EAAe,UAAW+B,CAClE,CAAC,EAED,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,iBACX,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,cAAe,SAAU,OAAQ,QAAS,WAAY,eAAgB,MAAO,kBAAmB,CACpJ,EAAG,CAACyH,EAAYf,GAAcc,GAAWD,GAAUG,EAAW,CAAC,CACnE,EAKcC,GAAsB,CAACxX,EAASC,EAAMoJ,EAAO,CAAC,KAAO,CACvD,QAAArJ,EACA,KAAAC,EACA,GAAI,KAAK,IAAI,EAAI,KAAK,OAAO,EAC7B,UAAY,OAAOoJ,EAAK,WAAc,SAAYA,EAAK,UAAY,KAAK,IAAI,EAC5E,IAAKA,EAAK,IACV,OAAQA,EAAK,OACb,SAAUA,EAAK,WAAa,GAC5B,YAAc,OAAOA,EAAK,aAAgB,SAAYA,EAAK,YAAc,GACzE,UAAY,OAAOA,EAAK,WAAc,SAAYA,EAAK,UAAY,OAEnE,MAAOA,EAAK,OAAS,OACrB,OAAQA,EAAK,QAAU,MAC3B,GAMMoO,GAAS,CACX,MAAO,2MACP,MAAO,yMACP,KAAM,iKACN,MAAO,2VACP,OAAQ,6LACZ,EAEMC,GAAkB,CAAC,CAAE,MAAAC,EAAO,OAAAC,EAAS,CAAC,EAAG,UAAAC,EAAW,WAAAC,EAAY,iBAAAC,EAAkB,SAAAC,EAAU,cAAAC,EAAe,UAAAC,EAAW,WAAAC,EAAY,SAAAC,EAAU,cAAAC,EAAe,SAAAC,EAAU,YAAAC,CAAY,IAAM,CACzL,IAAM3e,EAAI,MAAM,cACV,CAAC4e,EAAWC,CAAY,EAAI,MAAM,SAAS,IAAI,EAC/C,CAACC,EAAOC,EAAQ,EAAI,MAAM,SAAS,EAAE,EACrC,CAACC,GAAcC,EAAe,EAAI,MAAM,SAAS,EAAK,EAUtDC,GAAW,MAAM,OAAO,IAAI,EAC5BC,EAAW,MAAM,OAAO,IAAI,EAC5BC,EAAU,MAAM,OAAO,IAAI,EAC3BC,EAAU,MAAM,OAAO,IAAI,EAC3BC,EAAY,MAAM,OAAO,CAAC,EAC1BC,EAAU,MAAM,OAAO,EAAK,EAC5BC,EAAgB,MAAM,OAAO,EAAK,EAClC,CAACC,EAAeC,CAAgB,EAAI,MAAM,SAAS,CAAC,CAACxB,CAAU,EAE/DyB,GAAY,GACZC,GAAQ,IAERC,GAAc,IAAOV,EAAS,SAAWA,EAAS,QAAQ,aAAgB,IAK1EW,EAAeC,GAAM,CACvBT,EAAU,QAAUS,EACpB,IAAMC,EAAIH,GAAY,EAChB1f,GAAW,KAAK,IAAI,EAAG,KAAK,IAAI,EAAG,EAAI4f,EAAIC,CAAC,CAAC,EAEnD,GADIb,EAAS,UAASA,EAAS,QAAQ,MAAM,UAAY,gBAAkBY,EAAI9P,IAAK,QAAQ,CAAC,EAAI,WAC7FiP,GAAS,QAAS,CAClBA,GAAS,QAAQ,MAAM,QAAU/e,GAAS,QAAQ,CAAC,EAInD,IAAM8f,GAAO,SAAW,EAAI9f,IAAU,QAAQ,CAAC,EAAI,MACnD+e,GAAS,QAAQ,MAAM,eAAiBe,GACxCf,GAAS,QAAQ,MAAM,qBAAuBe,EAClD,CACJ,EAEMC,EAAe,CAAC9b,EAAI+b,IAAa,CAC/Bf,EAAQ,SAASA,EAAQ,QAAQ,KAAK,EAC1CA,EAAQ,QAAUgB,GAAO,CACrB,KAAMd,EAAU,QAChB,GAAAlb,EACA,SAAA+b,EAKA,QAAS,KAAK,IAAIA,CAAQ,EAAI,GAAKE,GAAO,OAAO,QAAUA,GAAO,KAAK,QACvE,SAAUA,GAAO,OAAO,SACxB,UAAW,GACX,UAAW,EACX,SAAUP,EACV,WAAY,IAAM,CACdA,EAAY1b,CAAE,EACdgb,EAAQ,QAAU,KACdhb,IAAO,GAAGsb,EAAiB,EAAK,CACxC,CACJ,CAAC,CACL,EAEA,MAAM,gBAAgB,IAAM,CACxB,GAAIxB,GAAc,CAACuB,EAAe,CAAEC,EAAiB,EAAI,EAAG,MAAQ,CAEpE,GADI,CAACD,GACDvB,IAAeqB,EAAQ,QAAS,OACpC,IAAMS,EAAIH,GAAY,EAClB3B,GAAc,CAACkB,EAAQ,SAAW,CAACC,EAAQ,SAG3CS,EAAY,CAACE,CAAC,EAElBT,EAAQ,QAAUrB,EAIlBgC,EAAahC,EAAa,EAAI,CAAC8B,EAAGZ,EAAQ,QAAUA,EAAQ,QAAQ,SAAW,CAAC,CACpF,EAAG,CAAClB,EAAYuB,CAAa,CAAC,EAE9B,MAAM,UAAU,IAAM,IAAM,CAAML,EAAQ,SAASA,EAAQ,QAAQ,KAAK,CAAG,EAAG,CAAC,CAAC,EAIhF,IAAMkB,GAAc5e,GAAM,CAClBA,EAAE,cAAgB,SAAWA,EAAE,SAAW,GAC1C2d,EAAQ,UAIZG,EAAc,QAAU,GACxBH,EAAQ,QAAU,CACd,GAAI3d,EAAE,UACN,GAAIA,EAAE,QAAS,GAAIA,EAAE,QAGrB,KAAM4d,EAAU,QAChB,KAAM,KACN,IAAKiB,GAAgB,CACzB,EACAlB,EAAQ,QAAQ,IAAI,IAAI3d,EAAE,QAAUuO,GAAKvO,EAAE,WAAa,YAAY,IAAI,CAAC,EAC7E,EAEM8e,GAAc9e,GAAM,CACtB,IAAML,EAAIge,EAAQ,QAClB,GAAI,CAAChe,GAAKK,EAAE,YAAcL,EAAE,GAAI,OAChC,IAAMof,GAAK/e,EAAE,QAAUL,EAAE,GACnBqf,GAAKhf,EAAE,QAAUL,EAAE,GACzB,GAAI,CAACA,EAAE,KAAM,CAIT,GAAI,KAAK,IAAIof,EAAE,EAAId,IAAa,KAAK,IAAIe,EAAE,EAAIf,GAAW,OAC1D,GAAI,KAAK,IAAIe,EAAE,GAAK,KAAK,IAAID,EAAE,EAAG,CAAEpB,EAAQ,QAAU,KAAM,MAAQ,CACpEhe,EAAE,KAAO,IACL+d,EAAQ,UAGR/d,EAAE,KAAOie,EAAU,QACnBje,EAAE,GAAKK,EAAE,QACT0d,EAAQ,QAAQ,KAAK,EACrBA,EAAQ,QAAU,MAEtB,GAAI,CAAE1d,EAAE,cAAc,kBAAkBL,EAAE,EAAE,CAAG,MAAY,CAAC,CAChE,CACAA,EAAE,IAAI,IAAIK,EAAE,QAAUuO,GAAKvO,EAAE,WAAa,YAAY,IAAI,CAAC,EAC3D,IAAMse,GAAIH,GAAY,EAClBE,GAAI1e,EAAE,MAAQK,EAAE,QAAUL,EAAE,IAAM4O,GAIlC8P,GAAI,EAAGA,GAAIY,GAAWZ,GAAGC,EAAC,EACrBD,GAAI,CAACC,KAAGD,GAAI,CAACC,GAAIW,GAAWZ,GAAIC,GAAGA,EAAC,GAC7CF,EAAYC,EAAC,CACjB,EAEMa,EAAYlf,GAAM,CACpB,IAAML,EAAIge,EAAQ,QAGlB,GAFI,CAAChe,GAAMK,EAAE,YAAc,QAAaA,EAAE,YAAcL,EAAE,KAC1Dge,EAAQ,QAAU,KACdhe,EAAE,OAAS,KAAK,OACpBme,EAAc,QAAU,GACxB,IAAMQ,GAAIH,GAAY,EAChBpf,GAAIY,EAAE,IAAI,IAAIK,EAAE,WAAa,YAAY,IAAI,CAAC,EAE9Cmf,GAAOC,GAAWxB,EAAU,QAAS7e,GAAG,CAAC,CAACuf,GAAG,CAAC,EAAG,CAAE,MAAOJ,EAAM,CAAC,IAAM,EAC7EL,EAAQ,QAAUsB,GAClBX,EAAaW,GAAO,EAAI,CAACb,GAAGvf,EAAC,EACxBogB,IAAMpC,EAAc,CAC7B,EAEMsC,GAAmB,IAAM,CAC3B,GAAIvB,EAAc,QAAS,CAAEA,EAAc,QAAU,GAAO,MAAQ,CACpEf,EAAc,CAClB,EACMuC,GAAarb,GAAOjE,GAAM,CAAEA,EAAE,gBAAgB,EAAGmd,EAAalZ,EAAE,EAAE,EAAGoZ,GAASpZ,EAAE,IAAI,CAAG,EACvFsb,GAAa,IAAM,CAAMrC,IAAaJ,EAASI,EAAWE,CAAK,EAAGD,EAAa,IAAI,EAAK,EACxFqC,GAAWxf,GAAM,CACfA,EAAE,MAAQ,SAAWA,EAAE,eAAe,EAAGuf,GAAW,GAC/Cvf,EAAE,MAAQ,UAAYmd,EAAa,IAAI,CACpD,EACMsC,GAAc,CAACC,EAAQ,CAAC,IAAMphB,EAAE,QAAS,CAC3C,UAAW,GACX,MAAO8e,EACP,SAAWpd,GAAMqd,GAASrd,EAAE,OAAO,KAAK,EACxC,UAAWwf,GACX,OAAQD,GACR,QAAUvf,GAAMA,EAAE,gBAAgB,EAClC,MAAO,OAAO,OAAO,CAAE,MAAO,OAAQ,WAAY,4BAA6B,OAAQ,4CAA6C,aAAc,MAAO,MAAO,mBAAoB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,QAAS,UAAW,QAAS,MAAO,EAAG0f,CAAK,CAC9R,CAAC,EACK9e,GAAO,CAAC+e,EAAKC,IAAUthB,EAAE,OAAQ,CAAE,MAAO,OAAO,OAAO,CAAE,QAAS,OAAQ,WAAY,QAAS,EAAGshB,GAAS,CAAC,CAAC,EAAG,wBAAyB,CAAE,OAAQD,CAAI,CAAE,CAAC,EAC3JE,GAAS,CAAC5b,EAAGiK,EAAMvN,KAASrC,EAAE,MAAO,CACvC,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO4P,EAAO,KAAM,OAAQA,EAAO,KAAM,cAAeA,GAAQ,GAAK,GAAK,IAAM,KAAM,QAAS,OAAQ,WAAY,SAAU,WAAYjK,EAAE,OAAS,4BAA8B,6BAA8B,OAAQ,kCAAoCA,EAAE,OAAS,OAAS,QAAU,IAAK,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,kBAAmB,CACtc,EAAG,CAACA,EAAE,KAAM3F,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY2F,EAAE,IAAK,OAAQ,aAAetD,EAAK,CAAE,CAAC,CAAC,CAAC,EAG7Mmf,GAAe7b,GAAM3F,EAAE,MAAO,CAChC,IAAK2F,EAAE,GACP,QAAS,IAAMyY,EAASzY,EAAE,EAAE,EAC5B,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,MAAO,aAAc,OAAQ,WAAYA,EAAE,OAAS,oBAAsB,cAAe,OAAQ,cAAgBA,EAAE,OAAS,4BAA8B,eAAgB,OAAQ,SAAU,CACvT,EAAG,CACCA,EAAE,QAAU3F,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,IAAK,OAAQ,OAAQ,OAAQ,MAAO,MAAO,qBAAsB,MAAO,mBAAoB,MAAO,WAAY,wBAAyB,CAAE,CAAC,EACnOuhB,GAAO5b,EAAG,GAAIA,EAAE,OAAS,oBAAsB,mBAAmB,EAClE3F,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvDA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACnF4e,IAAcjZ,EAAE,GACVwb,GAAY,EACZnhB,EAAE,OAAQ,CACR,IAAK,OACL,cAAeghB,GAAUrb,CAAC,EAC1B,MAAOnD,EAAE,iBAAiB,EAC1B,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,SAAU,OAAQ,WAAYmD,EAAE,OAAS,IAAM,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAC9O,EAAGA,EAAE,IAAI,EACbA,EAAE,QAAUiZ,IAAcjZ,EAAE,IAAM3F,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,SAAU,OAAQ,OAAQ,OAAQ,QAAS,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,6BAA8B,SAAU,OAAQ,WAAY,GAAI,CAAE,EAAG2F,EAAE,MAAM,CAChW,CAAC,EACD3F,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,OAAQ,MAAO2F,EAAE,OAAS,mBAAqB,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGA,EAAE,OAAO,CACnM,CAAC,CACL,CAAC,EAGK8b,GAAY9b,GAAM3F,EAAE,MAAO,CAAE,IAAK2F,EAAE,GAAI,MAAO,CAAE,SAAU,UAAW,CAAE,EAAG,CAC7EA,EAAE,QAAU3F,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,iBAAkB,QAAS,IAAK,MAAO,OAAQ,MAAO,MAAO,MAAO,qBAAsB,MAAO,mBAAoB,MAAO,WAAY,wBAAyB,CAAE,CAAC,EACvOA,EAAE,MAAO,CACL,IAAK,OACL,QAAS,IAAMoe,EAASzY,EAAE,EAAE,EAC5B,MAAOA,EAAE,KACT,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAYA,EAAE,OAAS,4BAA8B,4BAA6B,OAAQ,kCAAoCA,EAAE,OAAS,OAAS,QAAU,IAAK,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,kBAAmB,CACza,EAAG,CACCA,EAAE,KACF3F,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY2F,EAAE,IAAK,OAAQ,+BAAgC,CAAE,CAAC,EACjNA,EAAE,QAAU3F,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,SAAU,OAAQ,OAAQ,OAAQ,QAAS,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,6BAA8B,SAAU,QAAS,WAAY,IAAK,OAAQ,6BAA8B,CAAE,EAAG2F,EAAE,MAAM,CACja,CAAC,CACL,CAAC,EAIK+b,GAAa9R,GAAS5P,EAAE,MAAO,CAAE,MAAO,CAAE,MAAO4P,EAAO,KAAM,OAAQA,EAAO,KAAM,KAAM,OAAQ,QAAS,OAAQ,WAAY,QAAS,CAAE,EAC3I5P,EAAE,MAAO,CAAE,IAAK,2BAA4B,IAAK,YAAa,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,UAAW,UAAW,QAAS,OAAQ,CAAE,CAAC,CAAC,EAC/I2hB,GAAc,CAACN,EAAKpL,IAAUjW,EAAE,SAAU,CAAE,UAAW,kBAAmB,QAASme,EAAkB,MAAAlI,EAAO,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,sCAAuC,WAAY,cAAe,MAAO,mBAAoB,OAAQ,SAAU,EAAG,wBAAyB,CAAE,OAAQoL,CAAI,CAAE,CAAC,EAIpXO,GAASC,GAAkB,KAAM9c,GAAMA,EAAE,MAAQ2Z,CAAQ,GAAKmD,GAAkB,CAAC,EACjFC,GAAW,CACb,KAAM,sPACN,MAAO,kMACP,OAAQ,wLACR,KAAM,8PACV,EACMC,GAAgBC,GAAShD,GAAehf,EAAE,MAAO,CACnD,IAAK,QACL,MAAO,OAAO,OAAO,CAAE,SAAU,WAAY,OAAQ,GAAI,aAAc,OAAQ,WAAY,oBAAqB,OAAQ,qCAAsC,UAAW,0EAA2E,QAAS,KAAM,EAAGgiB,CAAG,CAC7Q,EAAG,CACChiB,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,eAAgB,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGwC,EAAE,gBAAgB,CAAC,EAC9O,GAAGqf,GAAkB,IAAK9c,GAAM/E,EAAE,SAAU,CACxC,IAAK+E,EAAE,IACP,QAAS,IAAM,CAAE4Z,EAAY5Z,EAAE,GAAG,EAAGka,GAAgB,EAAK,CAAG,EAC7D,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,WAAY,aAAc,MAAO,OAAQ,OAAQ,WAAY,cAAe,OAAQ,UAAW,UAAW,OAAQ,CAC3M,EAAG,CACCjf,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY+E,EAAE,GAAI,CAAE,CAAC,EACtH/E,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACrDA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG+E,EAAE,IAAI,EAC3H/E,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,QAAS,SAAU,SAAU,MAAO,kBAAmB,CAAE,EAAG+E,EAAE,IAAI,CAC/G,CAAC,EACDA,EAAE,MAAQ2Z,GAAY1e,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,QAAS,EAAG,wBAAyB,CAAE,OAAQ8hB,GAAS,KAAM,CAAE,CAAC,CACrK,CAAC,CAAC,EACF9hB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,QAAS,OAAQ,WAAY,aAAc,IAAK,MAAO,OAAQ,cAAe,QAAS,WAAY,aAAc,MAAO,WAAY,kCAAmC,OAAQ,2CAA4C,CAAE,EAAG,CAC7PA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,UAAW,MAAO,QAAS,MAAO,EAAG,wBAAyB,CAAE,OAAQ8hB,GAAS,IAAK,CAAE,CAAC,EACtI9hB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,KAAM,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,gBAAgB,CAAC,CACzH,CAAC,CACL,CAAC,EAAI,KACCyf,GAAwBjiB,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,SAAU,WAAY,UAAW,OAAQ,UAAW,sCAAuC,QAAS,gBAAiB,CAAE,EAAG,CAClM+hB,GAAa,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,MAAO,CAAC,EAC5D/hB,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAMif,GAAiBxe,GAAM,CAACA,CAAC,EAAG,MAAO,CAAE,MAAO,OAAQ,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,UAAW,aAAc,OAAQ,OAAQ,sCAAuC,WAAY,4BAA6B,OAAQ,SAAU,CAAE,EAAG,CACtST,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,mCAAoC,OAAQ,6CAA8C,MAAO,kBAAmB,CAAE,EAAG,CAChSA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,MAAO,EAAG,wBAAyB,CAAE,OAAQ8hB,GAAS,IAAK,CAAE,CAAC,EACtG9hB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY4hB,GAAO,IAAK,OAAQ,6BAA8B,CAAE,CAAC,CACxN,CAAC,EACD5hB,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,UAAW,OAAQ,CAAE,EAAG,CACzEA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,aAAa,CAAC,EAClHxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,MAAO,kBAAmB,CAAE,EAAG4hB,GAAO,IAAI,CAC9F,CAAC,EACD5hB,EAAE,OAAQ,CAAE,IAAK,KAAM,MAAO,CAAE,QAAS,OAAQ,WAAY,QAAS,EAAG,wBAAyB,CAAE,OAAQ8hB,GAAS,MAAO,CAAE,CAAC,CACnI,CAAC,CACL,CAAC,EACKI,GAAyBliB,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,SAAU,WAAY,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,QAAS,UAAW,CAAE,EAAG,CACxL+hB,GAAa,CAAE,iBAAkB,OAAQ,OAAQ,MAAO,MAAO,OAAQ,CAAC,EACxE/hB,EAAE,SAAU,CAAE,IAAK,MAAO,QAAS,IAAMif,GAAiBxe,GAAM,CAACA,CAAC,EAAG,MAAO+B,EAAE,uBAAuB,EAAIof,GAAO,KAAM,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAY,mCAAoC,OAAQ,6CAA8C,MAAO,kBAAmB,CAAE,EAAG,CACrY5hB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,QAAS,MAAO,EAAG,wBAAyB,CAAE,OAAQ8hB,GAAS,IAAK,CAAE,CAAC,EACtG9hB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAY4hB,GAAO,IAAK,OAAQ,+BAAgC,CAAE,CAAC,CAC1N,CAAC,CACL,CAAC,EAEKO,GAAgB,CAClBniB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,aAAc,EAAG,mBAAoB,OAAQ,iBAAkB,OAAQ,OAAQ,wBAAyB,aAAc,qCAAsC,CAAE,EAAG,CACpRA,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,MAAO,CAAE,EAAG,CAAC0hB,GAAU,EAAE,EAAG1hB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAO,kBAAmB,CAAE,EAAG,WAAW,CAAC,CAAC,EACjP2hB,GAAY9D,GAAO,MAAOrb,EAAE,eAAe,CAAC,CAChD,CAAC,EACDxC,EAAE,MAAO,CAAE,IAAK,QAAS,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,WAAY,SAAU,eAAgB,gBAAiB,QAAS,eAAgB,CAAE,EAAG,CAClJA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGwC,EAAE,eAAe,CAAC,EACrNxC,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAG,OAAO+d,EAAM,MAAM,CAAC,CACnK,CAAC,EACD/d,EAAE,MAAO,CAAE,IAAK,OAAQ,UAAW,aAAc,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,QAAS,CAAE,EAAG,CACzG,GAAG+d,EAAM,IAAIyD,EAAW,EACxBxhB,EAAE,MAAO,CAAE,IAAK,KAAM,MAAO,CAAE,UAAW,OAAQ,QAAS,YAAa,QAAS,OAAQ,WAAY,WAAY,eAAgB,eAAgB,CAAE,EAAG,CAClJA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,MAAO,uBAAwB,cAAe,YAAa,cAAe,OAAQ,CAAE,EAAGwC,EAAE,iBAAiB,CAAC,EACvNxC,EAAE,SAAU,CACR,IAAK,MAAO,QAASue,EAAY,MAAO/b,EAAE,eAAe,EACzD,MAAO,CAAE,OAAQ,OAAQ,WAAY,cAAe,MAAO,mBAAoB,OAAQ,UAAW,WAAY,6BAA8B,SAAU,OAAQ,WAAY,IAAK,cAAe,YAAa,cAAe,QAAS,QAAS,CAAE,CAClP,EAAGA,EAAE,iBAAiB,CAAC,CAC3B,CAAC,EACD,GAAIwb,EAAO,SAAW,EAChB,CAAChe,EAAE,MAAO,CAAE,IAAK,MAAO,QAASue,EAAY,MAAO/b,EAAE,kBAAkB,EAAG,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,OAAQ,WAAY,cAAe,OAAQ,uCAAwC,OAAQ,SAAU,CAAE,EAAG,CACpRxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,WAAY,6BAA8B,OAAQ,sCAAuC,MAAO,sBAAuB,EAAG,wBAAyB,CAAE,OAAQ6d,GAAO,KAAM,CAAE,CAAC,EACrT7d,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACpDA,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CAAE,EAAGwC,EAAE,eAAe,CAAC,EAClHxC,EAAE,MAAO,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,SAAU,MAAO,sBAAuB,CAAE,EAAGwC,EAAE,eAAe,CAAC,CAC3G,CAAC,CACL,CAAC,CAAC,EACAwb,EAAO,IAAKoE,GAAMpiB,EAAE,MAAO,CACzB,IAAKoiB,EAAE,GACP,QAAS,IAAM/D,EAAc+D,EAAE,EAAE,EACjC,MAAO,CAAE,SAAU,WAAY,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,MAAO,aAAc,OAAQ,WAAYA,EAAE,OAAS,oBAAsB,cAAe,OAAQ,cAAgBA,EAAE,OAAS,4BAA8B,eAAgB,OAAQ,SAAU,CACvT,EAAG,CACCA,EAAE,QAAUpiB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,IAAK,OAAQ,OAAQ,OAAQ,MAAO,MAAO,qBAAsB,MAAO,mBAAoB,MAAO,WAAY,wBAAyB,CAAE,CAAC,EACnOuhB,GAAOa,EAAG,GAAIA,EAAE,OAAS,oBAAsB,mBAAmB,EAClEpiB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,EAAG,SAAU,CAAE,CAAE,EAAG,CACvDA,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,KAAM,CAAE,EAAG,CACnFA,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,SAAU,OAAQ,WAAYoiB,EAAE,OAAS,IAAM,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGA,EAAE,IAAI,EAC3QA,EAAE,QAAUpiB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,KAAM,OAAQ,SAAU,OAAQ,OAAQ,OAAQ,QAAS,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,6BAA8B,SAAU,OAAQ,WAAY,GAAI,CAAE,EAAGoiB,EAAE,MAAM,CAC1U,CAAC,EACDpiB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,SAAU,OAAQ,MAAOoiB,EAAE,OAAS,mBAAqB,mBAAoB,WAAY,SAAU,SAAU,SAAU,aAAc,UAAW,CAAE,EAAGA,EAAE,OAAO,CACnM,CAAC,CACL,CAAC,CAAC,CACV,CAAC,EACDpiB,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,MAAO,CAAE,EAAGA,EAAE,SAAU,CAC3E,QAASse,EACT,MAAO,CAAE,MAAO,OAAQ,QAAS,cAAe,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,aAAc,OAAQ,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,UAAW,SAAU,OAAQ,WAAY,IAAK,OAAQ,UAAW,UAAW,6CAA8C,CACjX,EAAG,CAAChc,GAAKub,GAAO,KAAM,CAAE,IAAK,GAAI,CAAC,EAAGrb,EAAE,cAAc,CAAC,CAAC,CAAC,EACxDyf,EACJ,EAGMI,GAAiB,CACnBriB,EAAE,MAAO,CAAE,IAAK,OAAQ,MAAO,CAAE,KAAM,OAAQ,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,OAAQ,QAAS,SAAU,MAAO,OAAQ,aAAc,qCAAsC,CAAE,EAAG,CAAC0hB,GAAU,EAAE,EAAGC,GAAY9D,GAAO,MAAOrb,EAAE,gBAAgB,CAAC,CAAC,CAAC,EACtRxC,EAAE,MAAO,CAAE,IAAK,OAAQ,UAAW,aAAc,MAAO,CAAE,KAAM,EAAG,UAAW,OAAQ,QAAS,OAAQ,cAAe,SAAU,WAAY,SAAU,IAAK,OAAQ,QAAS,SAAU,MAAO,MAAO,CAAE,EAAG,CACrM,GAAG+d,EAAM,IAAI0D,EAAQ,EACrBzhB,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,MAAO,OAAQ,OAAQ,MAAO,WAAY,4BAA6B,OAAQ,OAAQ,CAAE,CAAC,EAC1H,GAAGge,EAAO,IAAKoE,GAAMpiB,EAAE,MAAO,CAAE,IAAKoiB,EAAE,GAAI,MAAO,CAAE,SAAU,UAAW,CAAE,EAAG,CAC1EA,EAAE,QAAUpiB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,iBAAkB,QAAS,IAAK,MAAO,OAAQ,MAAO,MAAO,MAAO,qBAAsB,MAAO,mBAAoB,MAAO,WAAY,wBAAyB,CAAE,CAAC,EACvOA,EAAE,MAAO,CACL,IAAK,OAAQ,QAAS,IAAMqe,EAAc+D,EAAE,EAAE,EAAG,MAAOA,EAAE,KAAO,WAAQA,EAAE,UAC3E,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAYA,EAAE,OAAS,4BAA8B,4BAA6B,OAAQ,kCAAoCA,EAAE,OAAS,OAAS,QAAU,IAAK,SAAU,OAAQ,WAAY,IAAK,cAAe,SAAU,MAAOA,EAAE,OAAS,mBAAqB,kBAAmB,CACza,EAAG,CACCA,EAAE,KACFpiB,EAAE,OAAQ,CAAE,IAAK,MAAO,MAAO,CAAE,SAAU,WAAY,eAAgB,OAAQ,OAAQ,OAAQ,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,WAAYoiB,EAAE,IAAK,OAAQ,+BAAgC,CAAE,CAAC,EACjNA,EAAE,QAAUpiB,EAAE,OAAQ,CAAE,IAAK,IAAK,MAAO,CAAE,SAAU,WAAY,iBAAkB,OAAQ,IAAK,OAAQ,SAAU,OAAQ,OAAQ,OAAQ,QAAS,QAAS,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,WAAY,yBAA0B,MAAO,sBAAuB,WAAY,6BAA8B,SAAU,QAAS,WAAY,IAAK,OAAQ,6BAA8B,CAAE,EAAGoiB,EAAE,MAAM,CACja,CAAC,CACL,CAAC,CAAC,EACFpiB,EAAE,MAAO,CAAE,IAAK,MAAO,QAASue,EAAY,MAAO/b,EAAE,eAAe,EAAG,MAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,UAAW,WAAY,cAAe,OAAQ,sCAAuC,MAAO,sBAAuB,EAAG,wBAAyB,CAAE,OAAQqb,GAAO,KAAM,CAAE,CAAC,CACvX,CAAC,EACD7d,EAAE,MAAO,CAAE,IAAK,MAAO,MAAO,CAAE,KAAM,OAAQ,QAAS,QAAS,CAAE,EAAGA,EAAE,SAAU,CAC7E,QAASse,EAAW,MAAO9b,EAAE,cAAc,EAC3C,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,QAAS,OAAQ,WAAY,SAAU,OAAQ,OAAQ,WAAY,yBAA0B,MAAO,sBAAuB,OAAQ,UAAW,UAAW,6CAA8C,EAAG,wBAAyB,CAAE,OAAQqb,GAAO,IAAK,CAC3T,CAAC,CAAC,EACFqE,EACJ,EAGMI,GAAY,CAAE,KAAM,OAAQ,MADhBrE,EAAY,OAAS,QACa,QAAS,OAAQ,cAAe,SAAU,WAAYA,EAAY,SAAW,UAAW,WAAY,0BAA2B,WAAY,oBAAqB,gBAAiB,qCAAsC,EACrQ1N,GAAQ0N,EAAYoE,GAAiBF,GAE3C,OAAOniB,EAAE,MAAM,SAAU,KAAM,CAE3BA,EAAE,QAAS,CAAE,IAAK,MAAO,wBAAyB,CAAE,OAAQ,23BAuFa,CAAE,CAAC,EAE5EA,EAAE,QAAS,CAAE,IAAK,OAAQ,UAAW,UAAW,MAAOsiB,EAAU,EAAG/R,EAAK,EAIzEvQ,EAAE,MAAO,CACL,IAAK,SAAU,UAAW,oBAC1B,IAAKkf,GACL,QAAS6B,GACT,cAAeT,GACf,cAAeE,GACf,YAAaI,EACb,gBAAiBA,EACjB,MAAO,CAAE,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,WAAY,iCAAkC,eAAgB,YAAa,qBAAsB,YAAa,QAAS,EAAG,QAASnB,EAAgB,QAAU,OAAQ,YAAa,QAAS,WAAY,SAAU,CACvQ,EAAGzf,EAAE,QAAS,CAAE,UAAW,mBAAoB,IAAKmf,EAAU,QAAUzd,GAAMA,EAAE,gBAAgB,EAAG,MAAO,CAAE,SAAU,WAAY,iBAAkB,EAAG,IAAK,EAAG,OAAQ,EAAG,MAAO,mBAAoB,QAAS,OAAQ,cAAe,SAAU,WAAY,0BAA2B,WAAY,oBAAqB,gBAAiB,sCAAuC,UAAW,sEAAuE,YAAa,QAAS,WAAY,WAAY,CAAE,EAAG,CAIhf1B,EAAE,SAAU,CAAE,IAAK,IAAK,QAASye,EAAe,MAAOjc,EAAE,gBAAgB,EAAG,aAAcA,EAAE,gBAAgB,EAAG,MAAO,CAAE,SAAU,WAAY,IAAK,uCAAwC,eAAgB,OAAQ,OAAQ,EAAG,MAAO,OAAQ,OAAQ,OAAQ,aAAc,MAAO,QAAS,OAAQ,WAAY,SAAU,OAAQ,qCAAsC,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAAE,EAAGxC,EAAE,IAAK,CAAE,UAAW,eAAgB,MAAO,CAAE,SAAU,MAAO,CAAE,CAAC,CAAC,EACpgBmiB,EACJ,CAAC,CAAC,CACN,CAAC,CACL,EAGMI,GAAwB,IAAM,CAUhC,GAAM,CAACC,EAAeC,CAAQ,EAAI,MAAM,WAAWC,GAAiB,OAAWC,EAAkB,EAC3FC,EAAkBJ,EAAc,gBAChCK,EAAc,MAAM,OAAO,IAAI,EACrCA,EAAY,QAAUD,EACtB,IAAMnR,EAASmR,EAAkBJ,EAAc,SAASI,CAAe,EAAI,KACrEE,EAAY,MAAM,OAAO,CAAC,CAAC,EAAE,QAE7BC,EAAc,MAAM,OAAO,IAAI,GAAK,EACpCC,EAAkB,MAAM,OAAO,IAAI,GAAK,EACxCC,EAAY,MAAM,OAAO,IAAI,GAAK,EAIlCC,EAAY,MAAM,OAAO,IAAI,GAAK,EAYlC,CAACC,EAAaC,CAAc,EAAI,MAAM,WAAWC,GAAe,OAAWC,EAAuB,EAClGC,EAAmB,MAAM,OAAO,IAAI,GAAK,EACzCC,EAAgBL,EAAY,cAC5BM,EAAcD,EAAgBL,EAAY,OAAOK,CAAa,EAAI,KAClEE,EAAmB,MAAM,OAAO,IAAI,EAC1CA,EAAiB,QAAUF,EAE3B,GAAM,CAACG,EAAYC,EAAa,EAAI,MAAM,SAAS,EAAE,EAC/C,CAACC,GAAiBC,EAAkB,EAAI,MAAM,SAAS,EAAK,EAC5D,CAACC,GAAeC,CAAgB,EAAI,MAAM,SAAS,EAAK,EACxD,CAACC,EAAeC,CAAgB,EAAI,MAAM,SAAS,IAAI,EACvD,CAACC,EAAYC,CAAa,EAAI,MAAM,SAAS,IAAI,EACjD,CAACC,EAAgBC,CAAiB,EAAI,MAAM,SAAS,EAAK,EAC1DC,EAAiB,MAAM,OAAO,IAAI,EAWlC,CAACC,GAAgBC,EAAiB,EAAI,MAAM,SAAS,CAAC,CAAC,EACvD,CAACC,GAAqBC,CAAsB,EAAI,MAAM,SAAS,CAAC,CAAC,EAEjEC,EAAoB,MAAM,OAAO,IAAI,GAAK,EAE1C,CAACC,GAAgBC,EAAiB,EAAI,MAAM,SAAS,CAAC,CAAC,EAEvDC,EAAoB,MAAM,OAAO,IAAI,GAAK,EAwB1CC,GAAe,MAAM,OAAO,IAAI,GAAK,EAQrCC,GAAqB,MAAM,OAAO,IAAI,GAAK,EAE3CC,GAAiB,MAAM,QAAQ,IAAMC,GAAkB,CAGzD,WAAaC,GAAcrC,EAAY,QAAQ,IAAIqC,CAAS,GACrDJ,GAAa,QAAQ,IAAII,CAAS,GAAG,SACrC,IACX,CAAC,EAAG,CAAC,CAAC,EAEAC,GAAoB,CAACpd,EAAM5B,EAAM+a,EAAQ,CAAC,KAAO,CACnD,GAAI,KAAK,IAAI,EAAI,KAAK,OAAO,EAC7B,QAASnZ,EACT,KAAA5B,EACA,UAAW,KAAK,IAAI,EACpB,GAAG+a,CACP,GAGMkE,GAAe,MAAM,YAAaC,GAAQ,CAACC,EAAOC,EAAU,CAAC,IAAM,CACrE,OAAQD,EAAO,CACX,IAAK,QACDpC,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIH,EAAK,MAAOE,EAAQ,KAAM,CAAC,EACpE,MACJ,IAAK,UACDrC,EAAe,CAAE,KAAMsC,GAAG,YAAa,GAAIH,EAAK,QAASE,EAAQ,QAAS,MAAOA,EAAQ,KAAM,CAAC,EAIhGE,GAAsB,QAAQJ,EAAK,IAAI,EACvC,MACJ,IAAK,SACDnC,EAAe,CAAE,KAAMsC,GAAG,OAAQ,GAAIH,EAAK,KAAME,EAAQ,IAAK,CAAC,EAC/D,MACJ,IAAK,MACDrC,EAAe,CAAE,KAAMsC,GAAG,QAAS,GAAIH,EAAK,KAAME,EAAQ,IAAK,CAAC,EAQhErC,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAIH,CAAI,CAAC,EACrDvB,EAAiB,EAAI,EACrB,MACJ,IAAK,YACDZ,EAAe,CAAE,KAAMsC,GAAG,YAAa,GAAIH,CAAI,CAAC,EAChD,MACJ,IAAK,OAMD,GALAd,GAAmBmB,IAAa,CAAE,GAAGA,EAAS,CAACL,CAAG,EAAGE,EAAQ,IAAK,EAAE,EAIpEE,GAAsB,QAAQJ,EAAKE,EAAQ,IAAI,EAC3CA,EAAQ,MAAQ,CAACA,EAAQ,KAAK,QAAUF,IAAQ7B,EAAiB,QAAS,CAK1E,IAAMmC,EAAQ,GAAGN,CAAG,IAAIE,EAAQ,KAAK,MAAM,GACtCV,EAAkB,QAAQ,IAAIc,CAAK,IACpCd,EAAkB,QAAQ,IAAIc,CAAK,EACnCzC,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAIH,CAAI,CAAC,EAE7D,CACA,MACJ,IAAK,UACDnC,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkBI,EAAQ,KAAM,WAAY,CACjD,WAAYA,EAAQ,KAAM,SAAUA,EAAQ,GAAI,UAAWA,EAAQ,GACnE,QAASA,EAAQ,UAAY,EACjC,CAAC,CACL,CAAC,EACGF,IAAQ7B,EAAiB,SACzBN,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAIH,CAAI,CAAC,EAEzD,MACJ,IAAK,QAIDO,GAAgB,QAAQP,EAAK,CAAE,SAAU,EAAM,CAAC,EAChD,MACJ,IAAK,aAGDnC,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkB7iB,EAAE,oBAAoB,EAAG,QAAQ,CAChE,CAAC,EACD,MACJ,IAAK,OACD4gB,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkB,GAAGI,EAAQ,IAAI,mBAAoB,QAAQ,CAC1E,CAAC,EACD,MACJ,IAAK,gBAIDrC,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GACL,GAAGI,EAAQ,IAAI,+EACf,QACJ,CACJ,CAAC,EACD,MACJ,IAAK,QACDrC,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIH,EAAK,MAAOE,EAAQ,KAAM,CAAC,EACpE,MACJ,QACI,KACR,CACJ,EAAG,CAAC,CAAC,EAUCM,GAAmB,MAAM,YAAY,CAACX,EAAWngB,IAAU,CAC7D,IAAM+gB,EAAUzC,EAAiB,QAAQ,IAAIte,EAAM,GAAG,EACtD,GAAI,CAAC+gB,EAAS,CACV,GAAIC,GAAehhB,CAAK,IAAMihB,GAAa,OAAQ,CAC/C,IAAIC,EAAS,KACb,GAAI,CAAEA,EAASC,GAAenhB,CAAK,CAAG,MAAY,CAAE,MAAQ,CAC5Dif,EAAkB0B,GAAYA,GAAW,CACrC,IAAKO,EAAO,IACZ,KAAM,OAAOA,EAAO,MAAQ,OAAO,EAAE,MAAM,EAAGE,EAAa,cAAc,EACzE,MAAOF,EACP,UAAAf,CACJ,CAAC,CACL,CACA,MACJ,CACAY,EAAQ,YAAYZ,EAAWngB,CAAK,EAAE,MAAOqhB,GAAU,CAQnD,IAAMC,EAASD,GAAO,OACdA,GAAO,QAAU,mBAAmB,OAAOA,EAAM,OAAO,EAAE,MAAM,EAAG,GAAG,CAAC,GAAK,kBACpFlD,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIzgB,EAAM,IAAK,MAAOshB,CAAO,CAAC,CACvE,CAAC,CACL,EAAG,CAAC,CAAC,EACCC,GAAsB,MAAM,OAAOT,EAAgB,EACzDS,GAAoB,QAAUT,GAG9B,IAAMU,GAAiB,MAAM,YAAY,CAACrB,EAAWnO,IAAc,CAC/D,QAAW+O,KAAWzC,EAAiB,QAAQ,OAAO,EAClD,GAAI,CAAEyC,EAAQ,gBAAgBZ,EAAWnO,CAAS,CAAG,MAAY,CAAC,CAE1E,EAAG,CAAC,CAAC,EACCyP,GAAoB,MAAM,OAAOD,EAAc,EACrDC,GAAkB,QAAUD,GAM5B,IAAME,GAAiB,MAAM,YAAaC,GAAU,CAChD,IAAMzZ,EAAK0V,EAAY,QAAc1V,GACrCsV,EAASmE,EAAMzZ,CAAE,CAAC,CACtB,EAAG,CAAC,CAAC,EAEC3E,GAAWiJ,EAASA,EAAO,SAAWqR,EACtC+D,GAAc,MAAM,YAAaC,GAAiB,CACpD,IAAM3Z,EAAK0V,EAAY,QAAc1V,GACGsV,EAApC,OAAOqE,GAAiB,WAAqB,CAAE,KAAMC,EAAG,aAAc,GAAA5Z,EAAI,QAAS2Z,CAAa,EACtF,CAAE,KAAMC,EAAG,aAAc,GAAA5Z,EAAI,SAAU2Z,CAAa,CADmC,CAEzG,EAAG,CAAC,CAAC,EAEChe,GAAmB2I,EAASA,EAAO,OAAS,eAC5CuV,GAAsB,MAAM,YAAaxgB,GAAWmgB,GAAgBxZ,IAAQ,CAAE,KAAM4Z,EAAG,WAAY,GAAA5Z,EAAI,OAAA3G,CAAO,EAAE,EAAG,CAACmgB,EAAc,CAAC,EAEnI9N,GAAiBpH,EAASA,EAAO,eAAiB,GAClDwV,GAAoB,MAAM,YAAaC,GAAgBP,GAAgBxZ,IAAQ,CAAE,KAAM4Z,EAAG,gBAAiB,GAAA5Z,EAAI,YAAA+Z,CAAY,EAAE,EAAG,CAACP,EAAc,CAAC,EAEhJpd,GAAmBkI,EAASA,EAAO,iBAAmB,GACtD0V,GAAsB,MAAM,YAAalhB,GAAS0gB,GAAgBxZ,IAAQ,CAAE,KAAM4Z,EAAG,iBAAkB,GAAA5Z,EAAI,KAAAlH,CAAK,EAAE,EAAG,CAAC0gB,EAAc,CAAC,EAErI7N,GAAarH,EAASA,EAAO,IAAI,WAAa,GAC9C2V,GAAgB,MAAM,YAAa3mB,GAAMkmB,GAAgBxZ,IAAQ,CAAE,KAAM4Z,EAAG,QAAS,GAAA5Z,EAAI,IAAK,CAAE,WAAY,CAAC,CAAC1M,CAAE,CAAE,EAAE,EAAG,CAACkmB,EAAc,CAAC,EACvI1c,GAA6BwH,EAASA,EAAO,IAAI,eAAiB,GAClE4V,EAAgC,MAAM,YAAa5mB,GAAMkmB,GAAgBxZ,IAAQ,CAAE,KAAM4Z,EAAG,QAAS,GAAA5Z,EAAI,IAAK,CAAE,eAAgB,CAAC,CAAC1M,CAAE,CAAE,EAAE,EAAG,CAACkmB,EAAc,CAAC,EAC3Jzc,EAA8BuH,EAASA,EAAO,IAAI,gBAAkB,GACpE6V,GAAiC,MAAM,YAAa7mB,GAAMkmB,GAAgBxZ,IAAQ,CAAE,KAAM4Z,EAAG,QAAS,GAAA5Z,EAAI,IAAK,CAAE,gBAAiB,CAAC,CAAC1M,CAAE,CAAE,EAAE,EAAG,CAACkmB,EAAc,CAAC,EAC7Jxc,GAA6BsH,EAASA,EAAO,IAAI,cAAgB,GACjE8V,GAAgC,MAAM,YAAa9mB,GAAMkmB,GAAgBxZ,IAAQ,CAAE,KAAM4Z,EAAG,QAAS,GAAA5Z,EAAI,IAAK,CAAE,cAAe,CAAC,CAAC1M,CAAE,CAAE,EAAE,EAAG,CAACkmB,EAAc,CAAC,EAE1J3N,GAAuBvH,EAASA,EAAO,qBAAuBqR,EAC9D0E,GAA0B,MAAM,YAAaV,GAAiB,CAChE,IAAM3Z,EAAK0V,EAAY,QAAc1V,GACGsV,EAApC,OAAOqE,GAAiB,WAAqB,CAAE,KAAMC,EAAG,kBAAmB,GAAA5Z,EAAI,QAAS2Z,CAAa,EAC3F,CAAE,KAAMC,EAAG,kBAAmB,GAAA5Z,EAAI,MAAO2Z,CAAa,CADsC,CAE9G,EAAG,CAAC,CAAC,EAGCW,GAAa,CAACjY,EAAMkY,IAAcjW,EAASA,EAAO,MAAMjC,CAAI,EAAIkY,EAChEC,GAAiBnY,GAAS,MAAM,YAAaoY,GAAUjB,GAAgBxZ,IAAQ,CAAE,KAAM4Z,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,CAACqC,CAAI,EAAGoY,CAAM,CAAE,EAAE,EAAG,CAACjB,EAAc,CAAC,EACzJ5d,GAAY0e,GAAW,YAAa,EAAE,EACtCI,GAAeF,GAAc,WAAW,EACxC3e,GAAaye,GAAW,aAAc,EAAE,EACxCK,GAAgBH,GAAc,YAAY,EAC1C1e,GAAawe,GAAW,aAAc,EAAE,EACxCve,GAAgBye,GAAc,YAAY,EAC1Cxe,GAAcse,GAAW,cAAe,EAAE,EAC1Cre,GAAiBue,GAAc,aAAa,EAC5Cte,GAAgBoe,GAAW,gBAAiB,EAAK,EACjDM,GAAmBJ,GAAc,eAAe,EAChDre,GAAiBme,GAAW,iBAAkB,EAAK,EACnDO,GAAoBL,GAAc,gBAAgB,EAClDne,GAAmBie,GAAW,mBAAoB,EAAK,EACvDQ,EAAsBN,GAAc,kBAAkB,EACtDle,GAAage,GAAW,aAAc,EAAK,EAC3C7d,EAAgB+d,GAAc,YAAY,EAC1Cje,GAAY+d,GAAW,YAAa,EAAE,EACtCS,GAAeP,GAAc,WAAW,EACxC/c,GAAmB6c,GAAW,mBAAoB,EAAK,EACvD5c,GAAsB8c,GAAc,kBAAkB,EAKtD1c,GAAmB,MAAM,QAAQ,KAAO,CAC1C,IAAI,SAAU,CAAE,OAAO8X,EAAY,QAAQ,IAAIF,EAAY,OAAO,GAAK,IAAM,EAC7E,IAAI,QAAQpiB,EAAG,CACX,IAAM0M,EAAK0V,EAAY,QAAc1V,IACjC1M,EAAGsiB,EAAY,QAAQ,IAAI5V,EAAI1M,CAAC,EAAQsiB,EAAY,QAAQ,OAAO5V,CAAE,EAC7E,CACJ,GAAI,CAAC,CAAC,EACAxC,GAA6B,MAAM,QAAQ,KAAO,CACpD,IAAI,SAAU,CAAE,OAAOqY,EAAgB,QAAQ,IAAIH,EAAY,OAAO,GAAK,IAAM,EACjF,IAAI,QAAQpiB,EAAG,CACX,IAAM0M,EAAK0V,EAAY,QAAc1V,IACjC1M,EAAGuiB,EAAgB,QAAQ,IAAI7V,EAAI1M,CAAC,EAAQuiB,EAAgB,QAAQ,OAAO7V,CAAE,EACrF,CACJ,GAAI,CAAC,CAAC,EAOA,CAACuR,GAAUyJ,EAAgB,EAAI,MAAM,SAAS,IAAM,CACtD,GAAI,CAAE,OAAO,aAAa,QAAQ,qBAAqB,GAAK,WAAa,MAAQ,CAAE,MAAO,WAAa,CAC3G,CAAC,EACKC,GAAc,MAAM,OAAO1J,EAAQ,EACzC0J,GAAY,QAAU1J,GACtB,IAAM2J,GAAgB,GAAO,IAAM,YAAc,UAAY,EAKvDC,GAAiB,MAAM,YAAY,CAACC,EAAKhpB,IAAM,CACjD,GAAI,GAACgpB,GAAO,OAAOA,EAAI,aAAgB,YACvC,GAAI,CACA,GAAIA,EAAI,aAAeA,EAAI,YAAY,EAAG,CACtC,IAAMjnB,EAAIinB,EAAI,YAAY,KAAK,UAAU,CAAE,KAAM,WAAY,OAAQF,GAAa9oB,CAAC,CAAE,CAAC,CAAC,EACnF+B,GAAK,OAAOA,EAAE,OAAU,YAAYA,EAAE,MAAM,IAAM,CAAC,CAAC,CAC5D,CACJ,MAAY,CAAC,CACjB,EAAG,CAAC,CAAC,EACCknB,GAAc,MAAM,YAAarY,GAAQ,CAC3CgY,GAAiBhY,CAAG,EACpB,GAAI,CAAE,aAAa,QAAQ,sBAAuBA,CAAG,CAAG,MAAQ,CAAC,CACjE,QAAWoY,KAAOxF,EAAY,QAAQ,OAAO,EAAGuF,GAAeC,EAAKpY,CAAG,CAC3E,EAAG,CAACmY,EAAc,CAAC,EAGb,CAACpP,GAAUC,EAAW,EAAI,MAAM,SAAS,EAAK,EAC9C,CAACC,GAAcC,EAAe,EAAI,MAAM,SAAS,EAAK,EACtD,CAAC3S,GAAa4S,EAAc,EAAI,MAAM,SAAS,EAAE,EACjD,CAACC,GAAcC,EAAe,EAAI,MAAM,SAAS,CAAC,EAClD,CAAC3S,GAASqG,EAAU,EAAI,MAAM,SAAS,IAAM,KAAK,IAAI,CAAC,EAKvD,CAACgJ,GAAWuS,EAAY,EAAI,MAAM,SAAS,OAAO,UAAc,KAAe,UAAU,SAAW,EAAK,EAKzGC,GAAa,MAAM,OAAOxS,EAAS,EAEzC,MAAM,UAAU,IAAM,CAAEwS,GAAW,QAAUxS,EAAW,EAAG,CAACA,EAAS,CAAC,EACtE,MAAM,UAAU,IAAM,CAClB,IAAMyS,EAAY,IAAMF,GAAa,EAAI,EACnCG,EAAW,IAAMH,GAAa,EAAK,EAKnCI,EAAS,IAAM,CACb,SAAS,kBAAoB,WACjCJ,GAAa,UAAU,SAAW,EAAK,CAC3C,EACA,cAAO,iBAAiB,UAAWE,CAAS,EAC5C,OAAO,iBAAiB,SAAUC,CAAQ,EAC1C,SAAS,iBAAiB,mBAAoBC,CAAM,EAC7C,IAAM,CACT,OAAO,oBAAoB,UAAWF,CAAS,EAC/C,OAAO,oBAAoB,SAAUC,CAAQ,EAC7C,SAAS,oBAAoB,mBAAoBC,CAAM,CAC3D,CACJ,EAAG,CAAC,CAAC,EAML,MAAM,UAAU,IAAM,CAClB,IAAMxV,EAAM,OAAO,OAAW,IAAe,OAAO,eAAiB,KAC/DM,EAAO,SAAS,gBAClBmV,EAAQ,GAAIC,EAAY,GAAIC,EAAQ,GAAIC,EAAM,EAO5CC,EAAc,IAAM,CACtB,IAAMlpB,GAAI,KAAK,MAAMqT,EAAKA,EAAG,OAAU,OAAO,aAAe,CAAE,EAC3DrT,IAAKA,KAAM8oB,IAASA,EAAQ9oB,GAAG2T,EAAK,MAAM,YAAY,UAAW3T,GAAI,IAAI,EACjF,EAGMmpB,EAAa,IAAM,CAAC,CAAC9V,GAAO,OAAO,YAAcA,EAAG,OAAU,IAK9D+V,EAAa,IAAM,CAErB,IAAM3oB,GADU0oB,EAAW,EACP,MAAQ,mCACxB1oB,KAAMsoB,IAAaA,EAAYtoB,GAAGkT,EAAK,MAAM,YAAY,mBAAoBlT,EAAC,EACtF,EAkBM4oB,GAAc,IAAM,CACtB,IAAMC,GAAS,CAAC,CAACjW,GAAMA,EAAG,MAAQ,KAC5BkW,GAAKlW,GAAM,CAACiW,GAAU,KAAK,IAAI,EAAG,KAAK,MAAMjW,EAAG,SAAS,CAAC,EAAI,EAChEkW,KAAMP,IAASA,EAAQO,GAAG5V,EAAK,MAAM,YAAY,cAAe4V,GAAI,IAAI,EAChF,EACMC,GAAQ,IAAM,CAAEN,EAAY,EAAGE,EAAW,EAAGC,GAAY,CAAG,EAC5DI,GAAQ,IAAM,CACZR,IACJA,EAAM,sBAAsB,IAAM,CAAEA,EAAM,EAAGI,GAAY,CAAG,CAAC,EACjE,EAOMK,GAAS,CAAC,EACVC,GAAW,IAAM,CACnBN,GAAY,EACZ,CAAC,GAAI,IAAK,IAAK,GAAG,EAAE,QAASxhB,IAAO6hB,GAAO,KAAK,WAAW,IAAM,CAAER,EAAY,EAAGE,EAAW,EAAGC,GAAY,CAAG,EAAGxhB,EAAE,CAAC,CAAC,CAC1H,EAEA2hB,GAAM,EACFnW,IAAMA,EAAG,iBAAiB,SAAUmW,EAAK,EAAGnW,EAAG,iBAAiB,SAAUoW,EAAK,GACnF,OAAO,iBAAiB,SAAUD,EAAK,EACvC,OAAO,iBAAiB,oBAAqBA,EAAK,EAClD,OAAO,iBAAiB,SAAUC,GAAO,CAAE,QAAS,EAAK,CAAC,EAC1D,SAAS,iBAAiB,UAAWE,EAAQ,EAC7C,SAAS,iBAAiB,WAAYA,EAAQ,EAC9C,IAAMC,GAAYxW,GAAmBC,CAAE,EACvC,MAAO,IAAM,CACL4V,GAAK,qBAAqBA,CAAG,EACjCS,GAAO,QAAQ,YAAY,EACvBrW,IAAMA,EAAG,oBAAoB,SAAUmW,EAAK,EAAGnW,EAAG,oBAAoB,SAAUoW,EAAK,GACzF,OAAO,oBAAoB,SAAUD,EAAK,EAC1C,OAAO,oBAAoB,oBAAqBA,EAAK,EACrD,OAAO,oBAAoB,SAAUC,EAAK,EAC1C,SAAS,oBAAoB,UAAWE,EAAQ,EAChD,SAAS,oBAAoB,WAAYA,EAAQ,EAC7CC,IAAWA,GAAU,CAC7B,CACJ,EAAG,CAAC,CAAC,EACL,GAAM,CAAC7e,GAAeC,EAAgB,EAAI,MAAM,SAAS,IAAM,CAC3D,GAAI,CAAE,OAAO,aAAa,QAAQ,2BAA2B,IAAM,MAAQ,MAAQ,CAAE,MAAO,EAAO,CACvG,CAAC,EAEK,CAACM,GAAkBue,EAAmB,EAAI,MAAM,SAAS,IAAI,EAC7D,CAACze,GAAgB0e,EAAiB,EAAI,MAAM,SAAS,EAAE,EACvD,CAACze,GAAsB0e,EAAuB,EAAI,MAAM,SAAS,EAAK,EACtE,CAAC7e,GAAiBC,EAAkB,EAAI,MAAM,SAAS,EAAK,EAGlE,MAAM,UAAU,IAAM,CAClB,IAAItF,EAAY,GAChB,OAAAmkB,GAAgB,EAAE,KAAMC,GAAU,CAC1BpkB,GAAa,CAACokB,IACd,MAAM,QAAQA,EAAM,OAAO,GAAKA,EAAM,QAAQ,OAAS,IACvDJ,GAAoBI,EAAM,OAAO,EACjCH,GAAkB,KAAK,UAAUG,EAAM,QAAS,KAAM,CAAC,CAAC,GAExDA,EAAM,cAAgB,cACtBjf,GAAiB,EAAI,EAEzB+e,GAAwB,EAAI,EAChC,CAAC,EAAE,MAAM,IAAM,CAAmC,CAAC,EAC5C,IAAM,CAAElkB,EAAY,EAAM,CACrC,EAAG,CAAC,CAAC,EAGL,MAAM,UAAU,IAAM,CAClB,IAAMgb,EAAO,IAAM1V,GAAmB,EAAI,EAC1C,cAAO,iBAAiB,kCAAmC0V,CAAI,EACxD,IAAM,OAAO,oBAAoB,kCAAmCA,CAAI,CACnF,EAAG,CAAC,CAAC,EAEL,IAAMtV,GAAyB,MAAM,YAAY,CAAC2e,EAAMC,IAAY,CAChE,IAAMC,EAAUF,EAAK,WAAa,MAAM,QAAQA,EAAK,OAAO,EAAIA,EAAK,QAAU,KAC/EL,GAAoBO,GAAWA,EAAQ,OAASA,EAAU,IAAI,EAC9DN,GAAkBI,EAAK,aAAe,EAAE,EACxClf,GAAiBkf,EAAK,cAAgB,YAAY,EAClD/e,GAAmB,EAAK,EACpBgf,GACAJ,GAAwB,EAAI,EAC5BM,GAAgB,CAAE,QAASD,GAAW,CAAC,EAAG,YAAaF,EAAK,WAAY,CAAC,EAAE,MAAM,IAAM,CAA0B,CAAC,GAC3G7e,KAEP0e,GAAwB,EAAK,EAC7BO,GAAiB,EAAE,MAAM,IAAM,CAAC,CAAC,EAEzC,EAAG,CAACjf,EAAoB,CAAC,EAEnBG,GAA0B,MAAM,YAAY,SAAY,CAC1D,MAAM8e,GAAiB,EAAE,MAAM,IAAM,CAAC,CAAC,EACvCP,GAAwB,EAAK,EAC7BF,GAAoB,IAAI,EACxBC,GAAkB,EAAE,CACxB,EAAG,CAAC,CAAC,EAGC,CAACrR,GAAcC,EAAe,EAAI,MAAM,SAAS,EAAE,EAInD,CAAC/O,GAAeE,EAAgB,EAAI,MAAM,SAAS,EAAK,EACxD,CAAC0gB,GAAoBzgB,EAAqB,EAAI,MAAM,SAAS,EAAK,EAKlE,CAAC0gB,GAAeC,EAAgB,EAAI,MAAM,SAAS,IAAM,OAAO,OAAW,KAAe,CAAC,CAAC,OAAO,WAAW,EACpH,MAAM,UAAU,IAAM,CAClB,GAAID,GAAe,OACnB,IAAME,EAAU,IAAMD,GAAiB,EAAI,EAC3C,cAAO,iBAAiB,qBAAsBC,CAAO,EAEjD,OAAO,aAAaD,GAAiB,EAAI,EACtC,IAAM,OAAO,oBAAoB,qBAAsBC,CAAO,CACzE,EAAG,CAACF,EAAa,CAAC,EAGlB,GAAM,CAACG,GAAeC,EAAgB,EAAI,MAAM,SAAS,IAAI,EACvD,CAACC,GAAiBC,CAAkB,EAAI,MAAM,SAAS,CAAC,EAKxD,CAACC,EAAgBC,EAAiB,EAAI,MAAM,SAAS,IAAI,EAWzD,CAACC,GAAiBC,EAAkB,EAAI,MAAM,SAAS,CACzD,OAAQ,eACR,gBAAiB,GACjB,gBAAiB,KACjB,0BAA2B,EAC/B,CAAC,EAGKC,GAAwB,CAACC,EAAUC,EAAU,CAAC,IAAM,CACtD,GAAM,CAAE,eAAAC,EAAiB,GAAO,aAAAC,EAAe,EAAM,EAAIF,EAEzDH,GAAmBxnB,IAAS,CACxB,GAAGA,EACH,GAAG0nB,EACH,0BAA2BG,EAC3B,gBAAiBD,EAAiB5nB,EAAK,gBAAkB,GACzD,gBAAiB4nB,EAAiB5nB,EAAK,gBAAkB,IAC7D,EAAE,CACN,EAGM8nB,GAA2B,IAAM,CACnC,IAAMC,EAAgB,CAAC,CAACziB,IACHG,IAAe,OAAOA,IAAgB,UAAYA,GAAY,KAAK,EAAE,OAAS,EAE7FuiB,EAAchiB,IAAa,OAAOA,IAAc,UAAYA,GAAU,KAAK,EAAE,OAAS,EAU5F,OARwBuhB,GAAgB,iBACjC,CAACA,GAAgB,2BAChBQ,GACD,CAACR,GAAgB,2BAChBS,GACD,CAACT,GAAgB,yBAI5B,EAGMvgB,GAAoB,IAAM,CAC5BygB,GAAsB,CAClB,gBAAiB,GACjB,gBAAiB,KAAK,IAAI,CAC9B,CAAC,CACL,EAOA,MAAM,UAAU,IACLQ,GAAwB,CAC3B,aAAc,OACd,iBAAA1gB,GACA,YAAa2gB,EACjB,CAAC,EACF,CAAC,CAAC,EAIL,MAAM,UAAU,IAAM,CAAEC,GAA2B,CAAG,EAAG,CAAC,CAAC,EAE3D,IAAMC,GAA2B,MAAM,YAAY,CAAC1lB,EAASC,EAAMoJ,EAAO,CAAC,IAAM,CAC7E,IAAMsc,EAAQ,KAAK,IAAI,EAAI,KAAK,OAAO,EACjCC,EAAa,CACf,QAAA5lB,EACA,KAAAC,EACA,GAAI0lB,EACJ,UAAY,OAAOtc,EAAK,WAAc,SAAYA,EAAK,UAAY,KAAK,IAAI,EAC5E,IAAKA,EAAK,IACV,OAAQA,EAAK,OACb,SAAUA,EAAK,WAAa,GAC5B,YAAc,OAAOA,EAAK,aAAgB,SAAYA,EAAK,YAAc,GACzE,UAAY,OAAOA,EAAK,WAAc,SAAYA,EAAK,UAAY,OACnE,MAAOA,EAAK,OAAS,OACrB,OAAQA,EAAK,QAAU,MAC3B,EAEA,OAAAoX,GAAYnjB,GAAQ,CAChB,IAAMuoB,EAAU,CAAC,GAAGvoB,EAAMsoB,CAAU,EAEpC,kBAAW,IAAM,CACb,GAAIlY,IAAiB,QAAS,CAC1B,IAAMoY,EAAYpY,GAAgB,QAClC,GAAI,CACA,GAAM,CAAE,UAAAmH,EAAW,aAAAC,GAAc,aAAAC,EAAa,EAAI+Q,GAC7BhR,GAAeD,EAAYE,GAAe,KAE3CzX,EAAK,SAAW,IAChC,sBAAsB,IAAM,CACpBwoB,GAAaA,EAAU,UACvBA,EAAU,SAAS,CACf,IAAKA,EAAU,aACf,SAAUlY,GAAe,CAC7B,CAAC,CAET,CAAC,CAET,OAASsS,EAAO,CACZ,QAAQ,KAAK,gBAAiBA,CAAK,EACnC4F,EAAU,UAAYA,EAAU,YACpC,CACJ,CACJ,EAAG,EAAE,EAEED,CACX,CAAC,EACMF,CACX,EAAG,CAAC,CAAC,EAGCI,GAAsB,MAAM,YAAY,CAAC5lB,EAAKC,IAAW,CACtDD,GACLsgB,GAAYnjB,GAAQA,EAAK,IAAI9D,GAAM,OAAOA,EAAE,GAAG,IAAM,OAAO2G,CAAG,GAAK3G,EAAE,OAAS,OAAU,CAAE,GAAGA,EAAG,OAAA4G,CAAO,EAAI5G,CAAC,CAAC,CAClH,EAAG,CAAC,CAAC,EAICwsB,GAAmB,MAAM,YAAY,CAACC,EAAWC,IAAU,CACzDD,GAAa,MACjBxF,GAAYnjB,GAAQA,EAAK,IAAI9D,GAAM,OAAOA,EAAE,EAAE,IAAM,OAAOysB,CAAS,EAC9D,CAAE,GAAGzsB,EAAG,GAAI,OAAO0sB,GAAU,WAAaA,EAAM1sB,CAAC,EAAI0sB,CAAO,EAC5D1sB,CAAC,CAAC,CACZ,EAAG,CAAC,CAAC,EAEC2sB,GAAuB,MAAM,YAAY,CAACC,EAAQF,IAAU,CACzDE,GACL3F,GAAYnjB,GAAQA,EAAK,IAAI9D,GAAMA,EAAE,QAAU,OAAOA,EAAE,MAAM,IAAM,OAAO4sB,CAAM,EAC3E,CAAE,GAAG5sB,EAAG,GAAI,OAAO0sB,GAAU,WAAaA,EAAM1sB,CAAC,EAAI0sB,CAAO,EAC5D1sB,CAAC,CAAC,CACZ,EAAG,CAAC,CAAC,EAaC6sB,GAAoB,MAAM,YAAatf,GAAO,CAChD,IAAMuf,EAAIzJ,EAAU,QAAQ,IAAI9V,CAAE,EAClC,GAAI,CAACuf,EAAG,OACR,IAAMnE,EAAMxF,EAAY,QAAQ,IAAI5V,CAAE,EAEhC7N,EAAMotB,EAAE,SAAUA,EAAE,SAAW,CAAC,EACtC,IAAMC,EAAW,CAAC,EAClB,QAAWC,KAAQttB,EAAK,CACpB,GAAI,CAACipB,GAAOA,EAAI,cAAc,IAAM,GAAM,CAAEoE,EAAS,KAAKC,CAAI,EAAG,QAAU,CAC3E,GAAI,CACA,IAAMxnB,EAAOmjB,EAAI,cAAcqE,EAAK,QAASA,EAAK,IAAI,EAClDxnB,GAAQ,OAAOA,EAAK,MAAS,YAC7BA,EAAK,KAAK,IAAMqd,EAAS,CAAE,KAAMsE,EAAG,sBAAuB,GAAA5Z,EAAI,IAAKyf,EAAK,IAAK,OAAQ,WAAY,CAAC,CAAC,EAC/F,MAAM,IAAMnK,EAAS,CAAE,KAAMsE,EAAG,sBAAuB,GAAA5Z,EAAI,IAAKyf,EAAK,IAAK,OAAQ,QAAS,CAAC,CAAC,CAE1G,MAAY,CACRD,EAAS,KAAKC,CAAI,CACtB,CACJ,CAGID,EAAS,SAAQD,EAAE,SAAWC,EAAS,OAAOD,EAAE,QAAQ,GAE5D,IAAMG,EAAMH,EAAE,SAAUA,EAAE,SAAW,CAAC,EAClCG,EAAI,OAAS,GACbpK,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,QAASyQ,GAC1C,8BAAyBiP,EAAI,MAAM,WAAWA,EAAI,SAAW,EAAI,GAAK,GAAG,oCACzE,QACJ,CAAE,CAAC,EAEP,IAAMC,EAAU3f,IAAO0V,EAAY,UAAY,OAAO,SAAa,KAAe,SAAS,kBAAoB,WAC/G,QAAW+J,KAAQC,EAEf,GADApK,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,QAASyQ,GAAoBgP,EAAK,QAASA,EAAK,KAAMA,EAAK,IAAI,CAAE,CAAC,EACnGA,EAAK,MAAQA,EAAK,KAAK,KAAOA,EAAK,OAAS,WAC5C,GAAIE,EAAW,GAAI,CAAEvE,GAAK,sBAAsBqE,EAAK,KAAK,GAAG,CAAG,MAAY,CAAC,MACpEF,EAAE,iBAAiBA,EAAE,gBAAgB,KAAKE,EAAK,KAAK,GAAG,CAG5E,EAAG,CAAC,CAAC,EAGCG,GAAqB,MAAM,YAAY,IAAM,CAC/C,QAAW5f,KAAM8V,EAAU,QAAQ,KAAK,EAAGwJ,GAAkBtf,CAAE,CACnE,EAAG,CAACsf,EAAiB,CAAC,EAEtB,MAAM,UAAU,IAAM,CACdvW,IACJ6W,GAAmB,CACvB,EAAG,CAAC7W,GAAW6W,EAAkB,CAAC,EASlC,MAAM,UAAU,IAAM,CAClB,IAAMC,EAAQ,YAAY,IAAM,CAC5B,OAAW,CAAC7f,EAAIuf,CAAC,IAAKzJ,EAAU,QAAQ,QAAQ,EAAG,CAC/C,GAAI,CAACyJ,EAAE,SAAS,QAAU,CAACA,EAAE,SAAS,OAAQ,SAC9C,IAAMnE,EAAMxF,EAAY,QAAQ,IAAI5V,CAAE,EAClCob,GAAK,cAAc,IAAM,IACzBA,GAAK,iBAAiB,IAAM,IAChCkE,GAAkBtf,CAAE,CACxB,CACJ,EAAG,GAAI,EACP,MAAO,IAAM,cAAc6f,CAAK,CACpC,EAAG,CAACP,EAAiB,CAAC,EAGtB,IAAMQ,GAAsB,MAAM,YAAY,SAAY,CACtD,GAAI,QAAO,mBAIX,QAAO,mBAAqB,GAE5B,GAAI,CACA,GAAIhiB,GAAiB,UAEjB2f,GAAiB,CACb,MAAO,UACP,MAAO,IACP,MAAO,QACP,QAASpoB,EAAE,gBAAgB,EAC3B,aAAc,GACd,YAAa,GACb,WAAY,EAChB,CAAC,EAEG,OAAO,YAAY,CACnB,IAAM0qB,EAAejiB,GAAiB,QAAQ,aAAeA,GAAiB,QAAQ,aAChF,MAAMA,GAAiB,QAAQ,uBAAuB,EACtD,CACE,MAAO,UACP,MAAO,IACP,YAAa,UACb,aAAc,GACd,YAAa,EACjB,CACR,CAER,OAASqb,EAAO,CACZ,QAAQ,MAAM,mCAAoCA,CAAK,EACvDsE,GAAiB,CACb,MAAO,QACP,MAAO,EACP,MAAO,MACP,QAASpoB,EAAE,wBAAwB,CACvC,CAAC,CACL,QAAE,CACE,WAAW,IAAM,CACb,OAAO,mBAAqB,EAChC,EAAG,GAAI,CACX,EACJ,EAAG,CAAC,CAAC,EAOCsR,GAAkB,MAAM,OAAO,IAAI,EAGnCiF,GAAiBlF,GAA6BC,EAAe,EAEnE,MAAM,UAAU,IAAM,CAClB,GAAI,CAAE,aAAa,QAAQ,4BAA6B,OAAO/I,EAAa,CAAC,CAAG,MAAQ,CAAC,CACrFE,GAAiB,SAAS,SAAS,QACnCA,GAAiB,QAAQ,kBAAkBF,EAAa,CAEhE,EAAG,CAACA,EAAa,CAAC,EAGlB,MAAM,UAAU,IAAM,CACdvC,GAAS,OAAS,GAAKsL,GAAgB,UACvCiF,GAAe,EACf,WAAWA,GAAgB,EAAE,EAC7B,WAAWA,GAAgB,GAAG,EAEtC,EAAG,CAACvQ,EAAQ,CAAC,EAKb,IAAM2kB,GAAc3K,EAAc,MAAM,KAAMrV,IAAQqV,EAAc,SAASrV,CAAE,GAAG,UAAY,CAAC,GAAG,KAAMvN,GAAM,OAAOA,EAAE,WAAc,QAAQ,CAAC,EACxIwtB,GAAmB,MAAM,OAAO5K,CAAa,EACnD4K,GAAiB,QAAU5K,EAC3B,MAAM,UAAU,IAAM,CAClB,GAAI,CAAC2K,GAAa,OAElB,IAAME,EAAY3pB,GAAS,CACvB,IAAMD,EAAM,KAAK,IAAI,EACjB6pB,EAAU,GACRpD,EAAOxmB,EAAK,IAAK9D,GACf,OAAOA,EAAE,WAAc,UAAYA,EAAE,WAAa6D,GAAO,CAAC7D,EAAE,SAC5D0tB,EAAU,GACH,CAAE,GAAG1tB,EAAG,QAAS,GAAM,QAAS,GAAI,UAAW,MAAU,GAE7DA,CACV,EACD,OAAO0tB,EAAUpD,EAAOxmB,CAC5B,EACM6pB,EAAW,YAAY,IAAM,CAC/B,IAAM9pB,EAAM,KAAK,IAAI,EACrByJ,GAAWzJ,CAAG,EACd,IAAMkM,EAAKyd,GAAiB,QAC5B,QAAWjgB,KAAMwC,EAAG,OACHA,EAAG,SAASxC,CAAE,GAAG,UAAY,CAAC,GAClC,KAAMvN,GAAM,OAAOA,EAAE,WAAc,UAAYA,EAAE,WAAa6D,GAAO,CAAC7D,EAAE,OAAO,GACpF6iB,EAAS,CAAE,KAAMsE,EAAG,aAAc,GAAA5Z,EAAI,QAASkgB,CAAS,CAAC,CAGrE,EAAG,GAAI,EACP,MAAO,IAAM,cAAcE,CAAQ,CACvC,EAAG,CAACJ,EAAW,CAAC,EAShB,IAAMK,GAAgB,CAAC/d,EAAO,CAAC,IAAM,CACjC,IAAMge,EAAOhe,EAAK,MAAQ,QACpBie,EAAQC,GAAmB,CAAE,KAAAF,CAAK,CAAC,EACnCtgB,EAAKugB,EAAM,GACjBjL,EAAS,CAAE,KAAMsE,EAAG,eAAgB,MAAA2G,EAAO,SAAUje,EAAK,WAAa,EAAM,CAAC,EAG9EwT,EAAU,QAAQ,IAAI9V,EAAI,CAAE,SAAU,CAAC,EAAG,SAAU,CAAC,EAAG,gBAAiB,CAAC,CAAE,CAAC,EAG7E,IAAM0Z,EAAe+G,GAAM,CACMnL,EAAzB,OAAOmL,GAAM,WAAqB,CAAE,KAAM7G,EAAG,aAAc,GAAA5Z,EAAI,QAASygB,CAAE,EAChE,CAAE,KAAM7G,EAAG,aAAc,GAAA5Z,EAAI,SAAUygB,CAAE,CADwB,CAEnF,EACM9B,EAA2B,CAAC1lB,EAASC,GAAMwnB,GAAQ,CAAC,IAAM,CAC5DpL,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,QAASyQ,GAAoBxX,EAASC,GAAMwnB,EAAK,CAAE,CAAC,EAErFxnB,KAAS,YAAc8G,IAAO0V,EAAY,SAC1CJ,EAAS,CAAE,KAAMsE,EAAG,iBAAkB,GAAA5Z,CAAG,CAAC,CAElD,EACMgf,EAAsB,CAAC5lB,EAAKC,KAAW,CAAMD,GAAKkc,EAAS,CAAE,KAAMsE,EAAG,sBAAuB,GAAA5Z,EAAI,IAAA5G,EAAK,OAAAC,EAAO,CAAC,CAAG,EAEjH4lB,EAAmB,CAACC,EAAWC,KAAU,CAAMD,GAAa,MAAM5J,EAAS,CAAE,KAAMsE,EAAG,cAAe,GAAA5Z,EAAI,UAAAkf,EAAW,MAAAC,EAAM,CAAC,CAAG,EAC9HC,EAAuB,CAACC,EAAQF,KAAU,CAAME,GAAQ/J,EAAS,CAAE,KAAMsE,EAAG,cAAe,GAAA5Z,EAAI,OAAAqf,EAAQ,MAAAF,EAAM,CAAC,CAAG,EACjHtF,GAAuBxgB,GAAWic,EAAS,CAAE,KAAMsE,EAAG,WAAY,GAAA5Z,EAAI,OAAA3G,CAAO,CAAC,EAC9EygB,GAAqBC,GAAgBzE,EAAS,CAAE,KAAMsE,EAAG,gBAAiB,GAAA5Z,EAAI,YAAA+Z,CAAY,CAAC,EAC3FC,GAAuBlhB,GAASwc,EAAS,CAAE,KAAMsE,EAAG,iBAAkB,GAAA5Z,EAAI,KAAAlH,CAAK,CAAC,EAChFmhB,GAAiB3mB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,QAAS,GAAA5Z,EAAI,IAAK,CAAE,WAAY,CAAC,CAAC1M,CAAE,CAAE,CAAC,EAClF4mB,GAAiC5mB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,QAAS,GAAA5Z,EAAI,IAAK,CAAE,eAAgB,CAAC,CAAC1M,CAAE,CAAE,CAAC,EACtG6mB,GAAkC7mB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,QAAS,GAAA5Z,EAAI,IAAK,CAAE,gBAAiB,CAAC,CAAC1M,CAAE,CAAE,CAAC,EACxG8mB,GAAiC9mB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,QAAS,GAAA5Z,EAAI,IAAK,CAAE,cAAe,CAAC,CAAC1M,CAAE,CAAE,CAAC,EACrGwnB,GAAuBxnB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,iBAAkB,CAAC,CAAC1M,CAAE,CAAE,CAAC,EACpGsnB,GAAoBtnB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,cAAe,CAAC,CAAC1M,CAAE,CAAE,CAAC,EAC9FunB,GAAqBvnB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,eAAgB,CAAC,CAAC1M,CAAE,CAAE,CAAC,EAChGmJ,GAAiBnJ,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,WAAY,CAAC,CAAC1M,CAAE,CAAE,CAAC,EACxFynB,GAAgBznB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,UAAW1M,CAAE,CAAE,CAAC,EACpFonB,GAAgBpnB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,UAAW1M,CAAE,CAAE,CAAC,EACpFqnB,GAAiBrnB,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,WAAY1M,CAAE,CAAE,CAAC,EACtFyI,GAAiBzI,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,WAAY1M,CAAE,CAAE,CAAC,EACtF2I,GAAkB3I,GAAMgiB,EAAS,CAAE,KAAMsE,EAAG,YAAa,GAAA5Z,EAAI,MAAO,CAAE,YAAa1M,CAAE,CAAE,CAAC,EACxF+mB,GAA2BoG,GAAM,CACNnL,EAAzB,OAAOmL,GAAM,WAAqB,CAAE,KAAM7G,EAAG,kBAAmB,GAAA5Z,EAAI,QAASygB,CAAE,EACrE,CAAE,KAAM7G,EAAG,kBAAmB,GAAA5Z,EAAI,MAAOygB,CAAE,CAD2B,CAExF,EACME,GAAgB,IAAM7K,EAAU,QAAQ,IAAI9V,CAAE,GAAK,CAAE,SAAU,CAAC,EAAG,SAAU,CAAC,CAAE,EAEhF4gB,GAAgB,CAAC3nB,EAASC,GAAMiC,KAAS,CAC3C,GAAI,OAAOlC,GAAY,UAAYA,EAAQ,KAAK,EAAE,WAAW,GAAG,EAC5D,GAAI,CACA,IAAM4nB,GAAgB,KAAK,MAAM5nB,CAAO,EAGxC,GAAI4nB,GAAc,OAAS,WAAY,CACnC,IAAMre,GAAMqe,GAAc,MAAQA,GAAc,KAAK,QAAWA,GAAc,OAC1Ere,IAAI8S,EAAS,CAAE,KAAMsE,EAAG,kBAAmB,GAAA5Z,EAAI,SAAUwC,EAAG,CAAC,EACjE,MACJ,CAIA,GAAIse,GAAaD,EAAa,EAAG,CAC7BxH,GAAoB,QAAQrZ,EAAI6gB,EAAa,EAC7C,MACJ,CACA,IAAME,GAAe,CACjB,sBACA,yBACA,aACA,qBACA,yBACA,sBACA,YACA,eACA,wBACA,yBACA,8BACA,kBACA,sBACA,qBACA,mBACA,iBACA,iBACJ,EACA,GAAIF,GAAc,MAAQE,GAAa,SAASF,GAAc,IAAI,EAAG,CACjE,QAAQ,IAAI,0CAA0CA,GAAc,IAAI,EAAE,EAC1E,MACJ,CAIIA,GAAc,OAAS,WAAa,OAAOA,GAAc,MAAS,WAClE5nB,EAAU4nB,GAAc,KACpBA,GAAc,MAAQ,OAAOA,GAAc,MAAS,WAAU1lB,GAAO0lB,GAAc,MAE/F,MAAqB,CAErB,CAIJ,IAAMve,GAAO,CAAC,EAgBd,GAfInH,IAAQ,OAAOA,IAAS,WACpB,OAAOA,GAAK,KAAQ,WAAUmH,GAAK,IAAMnH,GAAK,KAC9CA,GAAK,OAAS,KACdmH,GAAK,SAAW,GAChBA,GAAK,YAAc,OAAO,SAASnH,GAAK,OAAO,EAAIA,GAAK,QAAU,IAElE,OAAO,SAASA,GAAK,GAAG,GAAKA,GAAK,IAAM,IACxCmH,GAAK,UAAY,KAAK,IAAI,EAAInH,GAAK,IAAM,KAEzC,OAAO,SAASA,GAAK,EAAE,IAAGmH,GAAK,UAAYnH,GAAK,KAMpDogB,GAAW,SAAWriB,KAAS,WAAY,CAC3CynB,GAAc,EAAE,SAAS,KAAK,CAAE,QAAA1nB,EAAS,KAAAC,GAAM,KAAAoJ,EAAK,CAAC,EACrD,MACJ,CASA,GAPAqc,EAAyB1lB,EAASC,GAAMoJ,EAAI,EAOxCA,GAAK,KAAOpJ,KAAS,WAErB,GADoB8G,IAAO0V,EAAY,UAAY,OAAO,SAAa,KAAe,SAAS,kBAAoB,WAE/G,GAAI,CAAEsL,IAAS,sBAAsB1e,GAAK,GAAG,CAAG,MAAY,CAAC,KAC1D,CACH,IAAMid,GAAIoB,GAAc,EACpBpB,GAAE,iBAAiBA,GAAE,gBAAgB,KAAKjd,GAAK,GAAG,CAC1D,CAER,EAEM2e,GAAsB5nB,GAAW,CACnC,IAAM6nB,GAAanL,EAAU,QAAQ,IAAI/V,CAAE,EAY3C,GAXA+V,EAAU,QAAQ,IAAI/V,EAAI3G,CAAM,EAChCwgB,GAAoBxgB,CAAM,EAK1BkgB,GAAkB,QAAQvZ,EAAI3G,IAAW,aAAeA,IAAW,UAAU,EAKzEA,IAAW,eAaf,IATIA,IAAW,aAAe6nB,KAAe,gBACzC5B,GAAkBtf,CAAE,EAQpB3G,IAAW,kBAAmB,CAC9BwgB,GAAoB,cAAc,EAC9B7Z,IAAO0V,EAAY,UACnB,SAAS,cAAc,IAAI,YAAY,iBAAiB,CAAC,EACzD,SAAS,cAAc,IAAI,YAAY,cAAc,CAAC,GAK1D,WAAW,IAAM,CACTyL,GAA6B,QAAQnhB,CAAE,GAC3CohB,GAAephB,CAAE,CACrB,EAAG,IAAI,EACP,MACJ,CAEA,GAAI3G,IAAW,YACX,SAAS,cAAc,IAAI,YAAY,gBAAgB,CAAC,EAKnD,OAAO,oBACRymB,GAAoB,EAAE,MAAM,QAAQ,KAAK,UAEtCzmB,IAAW,YAClByhB,GAAoB,EAAI,EACnB,OAAO,oBACRgF,GAAoB,EAAE,MAAM,QAAQ,KAAK,UAEtCzmB,IAAW,WAAY,CAC9B4gB,GAAc,EAAI,EAClBa,GAAoB,EAAK,EACzBV,GAA8B,EAAI,EAClCP,GAAoB,WAAW,EAE/B,WAAW,IAAM,CACbI,GAAc,EAAI,CACtB,EAAG,CAAC,EAGJ,GAAI,CACA,IAAM7nB,GAAI6oB,GAAY,UAAY,YAAc,UAAYA,GAAY,QACxE,WAAW,IAAM,CACb,GAAI,CACA,IAAM9mB,GAAI6sB,GAAQ,cAAc,KAAK,UAAU,CAAE,KAAM,WAAY,OAAQ5uB,EAAE,CAAC,CAAC,EAC3E+B,IAAK,OAAOA,GAAE,OAAU,YAAYA,GAAE,MAAM,IAAM,CAAC,CAAC,CAC5D,MAAY,CAAC,CACjB,EAAG,GAAG,CACV,MAAY,CAAC,CACR,OAAO,oBACR2rB,GAAoB,EAAE,MAAM,QAAQ,KAAK,CAEjD,MAAWzmB,IAAW,aACb,OAAO,oBACRymB,GAAoB,EAAE,MAAM,QAAQ,KAAK,EAEtCzmB,IAAW,gBAOlBwgB,GAAoB,cAAc,EAClCI,GAAc,EAAK,EACnBa,GAAoB,EAAK,EACzBZ,GAA8B,EAAK,EACnCC,GAA+B,EAAK,EACpCC,GAA8B,EAAK,EAC/Bpa,IAAO0V,EAAY,SAAS,SAAS,cAAc,IAAI,YAAY,cAAc,CAAC,GAC/Erc,IAAW,sBACd2G,IAAO0V,EAAY,UACnBiI,EAAmB,CAAC,EACpB,SAAS,cAAc,IAAI,YAAY,iBAAiB,CAAC,GAE7D9D,GAAoB,mBAAmB,EACvCI,GAAc,EAAK,EACnBa,GAAoB,EAAK,EACzBZ,GAA8B,EAAK,EACnCC,GAA+B,EAAK,EACpCC,GAA8B,EAAK,EAcnC,WAAW,IAAM,CACT+G,GAA6B,QAAQnhB,CAAE,GAC3CohB,GAAephB,CAAE,CACrB,EAAG,IAAI,GAEf,EAEMqhB,GAAqBtH,GAAgB,CAEnCD,GADAC,IAAgB,GACE,GAEAA,CAFE,CAI5B,EAEMuH,GAA8BxoB,GAAS,CACrCA,IAAS,IACTkhB,GAAoB,EAAE,EACtBc,GAAoB,EAAK,IAEzBd,GAAoBlhB,CAAI,EACxBgiB,GAAoB,EAAI,EAEhC,EAEMyG,GAAiCC,GAAU,CAC7CtH,GAA8BsH,EAAM,cAAc,EAClDrH,GAA+BqH,EAAM,eAAe,EACpDpH,GAA8BoH,EAAM,aAAa,CACrD,EAGMC,GAAoB,CAACC,EAAWC,KAAiB,CAC/CD,IAAc,iBAEV/D,EAAmB,CAAC,EACxBE,GAAkB,IAAI,EAEtBc,EAAyB,6FAAuF,QAAQ,EAEpH,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,GAEX+C,IAAc,uBAEjB/D,EAAmB,CAAC,EACxBE,GAAkB,IAAI,EAEtBc,EAAyB,qBAAqBgD,EAAY,GAAI,QAAQ,EAElE,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,EAG1B,EAGI,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,EAGlB,IAAMX,GAAU,IAAI,4BAChBJ,GACAK,GACAI,GACAC,GACAG,GACAF,GACA,CACI,OAAQ,CACJ,UAAW3jB,GAEX,WAAa,MAAM,QAAQO,EAAgB,GAAKA,GAAiB,OAC3DA,GACC,MAAM,QAAQ,OAAO,qBAAqB,EAAI,OAAO,sBAAwB,MACxF,CACJ,CACJ,EAkBA,GAjBAyX,EAAY,QAAQ,IAAI5V,EAAIghB,EAAO,EAGnCA,GAAQ,gBAAmB5nB,GAAQ,CAC1BA,GACLsgB,EAAYnjB,IAAQA,GAAK,OAAO9D,IAAK,OAAOA,GAAE,GAAG,IAAM,OAAO2G,CAAG,CAAC,CAAC,CACvE,EAKA4nB,GAAQ,mBAAsB5nB,GAAQ,CAClC4lB,EAAoB5lB,EAAK,MAAM,CACnC,EAII,OAAO,aAAiB,KAAe,cAAgB,aAAa,aAAe,WAAa,OAAO,yBAA2B,CAACyc,EAAgB,QAAQ,IAAI7V,CAAE,EACjK,GAAI,CACA,IAAMQ,EAAc,IAAI,OAAO,wBAAwBwgB,EAAO,EAC9DxgB,EAAY,KAAK,EAAE,KAAK,IAAM,CAC1BqV,EAAgB,QAAQ,IAAI7V,EAAIQ,CAAW,CAC/C,CAAC,EAAE,MAAO2Y,IAAU,CAEpB,CAAC,CACL,MAAgB,CAEhB,CAGJ,OAAAyH,GAAc,kOAAmO,QAAQ,EAGzPI,GAAQ,yBAEHhuB,GAAa,CACV,GAAIA,GAAYA,EAAS,QAAS,CAC9B,IAAMc,GAAM,KAAK,IAAI,EAAG,KAAK,IAAI,IAAKd,EAAS,UAAY,CAAC,CAAC,EACvD4uB,GAAYnvB,IACTA,GAAE,MAIHO,EAAS,YAAc,MAAQc,IAAO,IAC/B,CAAE,MAAO,CAAE,GAAGrB,GAAE,MAAO,SAAU,IAAK,CAAE,EAE5C,CAAE,MAAO,CAAE,GAAGA,GAAE,MAAO,SAAU,CAAE,IAAKO,EAAS,UAAW,IAAAc,EAAI,CAAE,CAAE,EAPtD,CAAC,EAStBd,EAAS,YAAc,MAAQA,EAAS,MAAQ,KAAMisB,EAAiBjsB,EAAS,KAAM4uB,EAAQ,EACzF5uB,EAAS,QAAQosB,EAAqBpsB,EAAS,OAAQ4uB,EAAQ,EACxE,MACJ,CACA,QAAQ,IAAI,iBAAkB5uB,CAAQ,CAC1C,EAIC6uB,GAAa,CAEV,GADgB,CAAC,CAACA,EAAS,SAAY,OAAOA,EAAS,UAAa,UAAYA,EAAS,SAAS,WAAW,QAAQ,EACxG,CACTA,EAAS,aAAa,EACjB,KAAMzc,IAAQ,CACXga,EAAqByC,EAAS,OAASpvB,KAAO,CAAE,MAAO,CAAE,GAAIA,GAAE,OAAS,CAAC,EAAI,IAAA2S,GAAK,SAAU,IAAK,CAAE,EAAE,CACzG,CAAC,EACA,MAAO7Q,IAAM,CACV,QAAQ,MAAM,uBAAwBA,EAAC,EACvC6qB,EAAqByC,EAAS,OAASpvB,KAAO,CAAE,MAAO,CAAE,GAAIA,GAAE,OAAS,CAAC,EAAI,SAAU,KAAM,MAAO,EAAK,CAAE,EAAE,CACjH,CAAC,EACL,MACJ,CAEA,IAAMqvB,GAAS,KAAK,IAAI,EAAG,KAAK,OAAOD,EAAS,UAAY,IAAM,KAAO,KAAK,CAAC,GAE5D,SAAY,CAC3B,IAAMzc,GAAM,MAAMyc,EAAS,aAAa,EAClC5tB,GAAI,SAAS,cAAc,GAAG,EACpCA,GAAE,KAAOmR,GACTnR,GAAE,SAAW4tB,EAAS,UAAY,OAClC,SAAS,KAAK,YAAY5tB,EAAC,EAC3BA,GAAE,MAAM,EACRA,GAAE,OAAO,EACT,WAAW,IAAM4tB,EAAS,gBAAgBzc,EAAG,EAAG,IAAK,CACzD,GAEW,EACN,KAAK,IAAM,CACRuZ,EAAyB,0BAA0BkD,EAAS,QAAQ,KAAKC,EAAM,OAAQ,QAAQ,CACnG,CAAC,EACA,MAAOvtB,IAAM,CACV,QAAQ,MAAM,oBAAqBA,EAAC,EACpCoqB,EAAyB,kBAAkBkD,EAAS,QAAQ,KAAKC,EAAM,4CAA6C,QAAQ,CAChI,CAAC,CACT,EAGC3I,GAAU,CACP,QAAQ,MAAM,uBAAwBA,CAAK,EAEvCA,EAAM,SAAS9jB,EAAE,cAAc,CAAC,EAChCspB,EAAyB,+DAAgE,QAAQ,EAC1FxF,EAAM,SAAS9jB,EAAE,kBAAkB,CAAC,EAC3CspB,EAAyB,yCAA0C,QAAQ,EAE3EA,EAAyB,yBAAyBxF,CAAK,GAAI,QAAQ,CAE3E,EAKC4I,GAAgB,CACb,GAAIA,GAAeA,EAAY,QAAS,CACpC,IAAMzuB,GAAIyuB,EAAY,OAAS,CAAC,EAChCpD,EAAyB,GAAI,WAAY,CACrC,MAAO,CACH,IAAK,OAAO,SAASrrB,GAAE,GAAG,EAAIA,GAAE,IAAM,EACtC,KAAM,MAAM,QAAQA,GAAE,IAAI,EAAIA,GAAE,KAAO,KACvC,SAAU,CAAE,IAAK,OAAQ,IAAK,CAAE,EAChC,IAAK,IACT,EACA,OAAQyuB,EAAY,MACxB,CAAC,EACD,GAAI,CAAEf,GAAQ,mBAAmBe,EAAY,MAAM,CAAG,MAAY,CAAC,CACnE,MACJ,CACA1H,GAAwB9jB,IAChBA,GAAK,KAAKyrB,IAAKA,GAAE,SAAWD,EAAY,MAAM,EAAUxrB,GACrD,CAAC,GAAGA,GAAMwrB,CAAW,CAC/B,CACL,CACJ,EAEO/hB,CACX,EAGMiiB,GAAmB,MAAM,OAAO5B,EAAa,EACnD4B,GAAiB,QAAU5B,GAM3B,IAAM6B,GAAgB,MAAM,OAAO,IAAI,GAAK,EAStCC,GAA4B,MAAM,YAAaniB,GAAO,CACxD,QAAW6Y,KAAWzC,EAAiB,QAAQ,OAAO,EAClD,GAAIyC,EAAQ,aAAeA,EAAQ,YAAY,IAAI7Y,CAAE,EAAG,MAAO,GAEnE,MAAO,EACX,EAAG,CAAC,CAAC,EACCmhB,GAA+B,MAAM,OAAOgB,EAAyB,EAC3EhB,GAA6B,QAAUgB,GAEvC,IAAMf,GAAiB,MAAM,YAAaphB,GAAO,CAC7C,GAAI,GAACA,GAAMkiB,GAAc,QAAQ,IAAIliB,CAAE,GACvC,CAAAkiB,GAAc,QAAQ,IAAIliB,CAAE,EAC5B,GAAI,CACA,IAAMob,EAAMxF,EAAY,QAAQ,IAAI5V,CAAE,EACtC,GAAIob,EAAK,CAAE,GAAI,CAAEA,EAAI,WAAW,CAAG,MAAY,CAAC,CAAExF,EAAY,QAAQ,OAAO5V,CAAE,CAAG,CAClF,IAAMoiB,EAAQvM,EAAgB,QAAQ,IAAI7V,CAAE,EAC5C,GAAIoiB,EAAO,CAAE,GAAI,CAAEA,EAAM,UAAU,CAAG,MAAY,CAAC,CAAEvM,EAAgB,QAAQ,OAAO7V,CAAE,CAAG,CACzF8V,EAAU,QAAQ,OAAO9V,CAAE,EAC3B+V,EAAU,QAAQ,OAAO/V,CAAE,EAC3BsV,EAAS,CAAE,KAAMsE,EAAG,eAAgB,GAAA5Z,CAAG,CAAC,CAC5C,QAAE,CACEkiB,GAAc,QAAQ,OAAOliB,CAAE,CACnC,EACJ,EAAG,CAAC,CAAC,EAIL,MAAM,UAAU,IAAM,CACdqV,EAAc,MAAM,SAAW,GAAG4M,GAAiB,QAAQ,CAAE,KAAM,OAAQ,CAAC,CACpF,EAAG,CAAC5M,EAAc,MAAM,MAAM,CAAC,EAG/B,GAAM,CAACgN,GAAkBC,EAAmB,EAAI,MAAM,SAAS,IAAM,CACjE,GAAI,CAAE,OAAO,aAAa,QAAQ,6BAA6B,IAAM,MAAQ,MAAQ,CAAE,MAAO,EAAO,CACzG,CAAC,EACD,MAAM,UAAU,IAAM,CAAE,GAAI,CAAE,aAAa,QAAQ,8BAA+B,OAAOD,EAAgB,CAAC,CAAG,MAAQ,CAAC,CAAE,EAAG,CAACA,EAAgB,CAAC,EAC7I,GAAM,CAACE,GAAmBC,EAAoB,EAAI,MAAM,SAAS,EAAK,EAChEC,GAAsB,MAAM,YAAaziB,GAAO,CAClDsV,EAAS,CAAE,KAAMsE,EAAG,WAAY,GAAA5Z,CAAG,CAAC,EACpCsV,EAAS,CAAE,KAAMsE,EAAG,aAAc,GAAA5Z,CAAG,CAAC,EACtCwiB,GAAqB,EAAK,CAC9B,EAAG,CAAC,CAAC,EAiBCE,GAAgB,MAAM,YAAY,IAAM,CAC1CzM,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAI,IAAK,CAAC,EACtD0J,GAAiB,QAAQ,CAAE,KAAM,OAAQ,CAAC,EAC1CO,GAAqB,EAAK,CAC9B,EAAG,CAAC,CAAC,EACCG,GAAsB,MAAM,YAAY,CAAC3iB,EAAI5K,IAAU,CAAEkgB,EAAS,CAAE,KAAMsE,EAAG,OAAQ,GAAA5Z,EAAI,MAAA5K,CAAM,CAAC,CAAG,EAAG,CAAC,CAAC,EAcxGwtB,GAAgB,MAAM,YAAa3K,GAAc,CACnD,IAAMsI,EAAQ1I,GAAa,QAAQ,IAAII,CAAS,EAChD,GAAKsI,EACL,CAAA1I,GAAa,QAAQ,OAAOI,CAAS,EACrC,GAAI,CAAEsI,EAAM,QAAQ,WAAW,CAAG,MAAY,CAAC,EACnD,EAAG,CAAC,CAAC,EACCsC,GAAmB,MAAM,OAAOD,EAAa,EACnDC,GAAiB,QAAUD,GAY3B,IAAME,GAAgB,MAAM,YAAY,CAAC1K,EAAK2K,IAAO,CACjD,IAAM9K,EAAY,QAAU,MAAM,KAAK,OAAO,gBAAgB,IAAI,WAAW,CAAC,CAAC,CAAC,EAC3E,IAAKrhB,GAAMA,EAAE,SAAS,EAAE,EAAE,SAAS,EAAG,GAAG,CAAC,EAAE,KAAK,EAAE,EAClD2pB,EAAQ,CAAE,QAAS,KAAM,IAAAnI,EAAK,GAAA2K,EAAI,UAAA9K,CAAU,EAE5C+K,EAAa/pB,GAAY,CAC3B,GAAI,OAAOA,GAAY,UAAY,CAACA,EAAQ,KAAK,EAAE,WAAW,GAAG,EAAG,OACpE,IAAIgqB,GACJ,GAAI,CAAEA,GAAS,KAAK,MAAMhqB,CAAO,CAAG,MAAY,CAAE,MAAQ,CACtD6nB,GAAamC,EAAM,GAAG5J,GAAoB,QAAQpB,EAAWgL,EAAM,CAC3E,EAEMC,EAAkB7pB,GAAW,CAK/B,IAAM8pB,GAAO9pB,IAAW,gBACjBA,IAAW,UACXA,IAAW,qBACXA,IAAW,kBAQlB,GAPAkgB,GAAkB,QAAQtB,EAAW,CAACkL,IAAQ5C,EAAM,SAAS,aAAe,EAAI,EAO5ElnB,IAAW,mBAAqBA,IAAW,SAAU,CACrD,IAAMwf,GAAUzC,EAAiB,QAAQ,IAAIgC,CAAG,EAChD,GAAI,CAAES,IAAS,cAAckK,CAAE,CAAG,MAAY,CAAC,CAC/CF,GAAiB,QAAQ5K,CAAS,CACtC,CACJ,EAEMmL,EAA0BtqB,GAAS,CACrC,GAAI,GAACA,GAAQ,CAACynB,EAAM,SACpB,GAAI,CACAA,EAAM,QAAQ,sBAAsB,SAASnI,CAAG,EAAE,CACtD,MAAY,CAIRyK,GAAiB,QAAQ5K,CAAS,EAClCsB,GAAkB,QAAQtB,EAAW,EAAK,CAC9C,CACJ,EAEM+I,EAAU,IAAI,4BAChBgC,EACAE,EACA,IAAM,CAAC,EACPE,EACA,IAAM,CAAC,EACP,IAAM,CAAC,EACP,CAKI,iBAAkB,GAClB,OAAQ,CACJ,UAAWxlB,GACX,WAAa,MAAM,QAAQO,EAAgB,GAAKA,GAAiB,OAC3DA,GACC,MAAM,QAAQ,OAAO,qBAAqB,EAAI,OAAO,sBAAwB,MACxF,CACJ,CACJ,EACA,OAAAoiB,EAAM,QAAUS,EAChBnJ,GAAa,QAAQ,IAAII,EAAWsI,CAAK,EAClCA,CACX,EAAG,CAAC3iB,GAAeO,EAAgB,CAAC,EAC9BklB,GAAmB,MAAM,OAAOP,EAAa,EACnDO,GAAiB,QAAUP,GAG3B,IAAMQ,GAAkB,MAAM,YAAalL,IAAS,CAChD,YAAa,MAAO2K,GAAO,CACvB,IAAMxC,EAAQ8C,GAAiB,QAAQjL,EAAK2K,CAAE,EAC9C,GAAI,CACA,IAAMQ,EAAQ,MAAMhD,EAAM,QAAQ,kBAAkB,EAIpD,GAAI,CAACgD,GAAS,OAAOA,EAAM,MAAS,SAChC,MAAM,IAAI,MAAM,sCAAsC,EAE1D,MAAO,CAAE,UAAWhD,EAAM,UAAW,WAAYgD,EAAM,IAAK,CAChE,OAASpK,EAAO,CACZ,MAAA0J,GAAiB,QAAQtC,EAAM,SAAS,EAClCpH,CACV,CACJ,EACA,aAAc,MAAO4J,EAAIS,IAAe,CACpC,IAAMjD,EAAQ8C,GAAiB,QAAQjL,EAAK2K,CAAE,EAC9C,GAAI,CACA,IAAMU,EAAS,MAAMlD,EAAM,QAAQ,mBAAmB,CAAE,EAAG,QAAS,KAAMiD,CAAW,CAAC,EACtF,GAAI,CAACC,GAAU,OAAOA,EAAO,MAAS,SAClC,MAAM,IAAI,MAAM,wCAAwC,EAE5D,MAAO,CAAE,UAAWlD,EAAM,UAAW,WAAYkD,EAAO,IAAK,CACjE,OAAStK,EAAO,CACZ,MAAA0J,GAAiB,QAAQtC,EAAM,SAAS,EAClCpH,CACV,CACJ,EACA,aAAc,MAAOlB,EAAWuL,IAAe,CAC3C,IAAMjD,EAAQ1I,GAAa,QAAQ,IAAII,CAAS,EAChD,GAAI,CAACsI,EAAO,MAAM,IAAI,MAAM,kCAAkC,EAC9D,MAAMA,EAAM,QAAQ,mBAAmB,CAAE,EAAG,SAAU,KAAMiD,CAAW,CAAC,CAC5E,EACA,MAAQvL,GAAc4K,GAAiB,QAAQ5K,CAAS,EASxD,gBAAkBA,GAAc,CAC5B,IAAM+I,EAAUpL,EAAY,QAAQ,IAAIqC,CAAS,GAC1CJ,GAAa,QAAQ,IAAII,CAAS,GAAG,SACrC,KACP,MAAI,CAAC+I,GAAWA,EAAQ,aAAe,GAAa,GAC7C,OAAOA,EAAQ,gBAAmB,SAAWA,EAAQ,eAAiB,EACjF,CACJ,GAAI,CAAC,CAAC,EAWN,MAAM,UAAU,IAAM,CAClB,OAAW,CAAC5I,EAAKS,CAAO,IAAKzC,EAAiB,QAAS,CACnD,IAAMsN,EAAQ1N,EAAY,OAAOoC,CAAG,EACpC,GAAI,GAACsL,GAASA,EAAM,QAAUC,EAAY,OAAS,CAACD,EAAM,cAC1D,QAAWE,KAAOvO,EAAc,MAAO,CACnC,IAAMwO,EAAUxO,EAAc,SAASuO,CAAG,EACtC,CAACC,GAAW,CAACA,EAAQ,IAAI,YAC7BhL,EAAQ,aAAa+K,CAAG,EAAE,MAAM,IAAM,CAA2C,CAAC,CACtF,CACJ,CACJ,EAAG,CAAC5N,EAAaX,CAAa,CAAC,EAY/B,IAAMyO,GAAkB,MAAM,QAAQ,IAAMzO,EAAc,MACrD,IAAKrV,GAAOqV,EAAc,SAASrV,CAAE,CAAC,EACtC,OAAQ,GAAM,GAAK,EAAE,KAAO,EAAE,IAAI,UAAU,EAC5C,IAAK,IAAO,CAAE,GAAI,EAAE,GAAI,KAAM,EAAE,UAAW,KAAM+K,GAAa,EAAE,SAAS,CAAE,EAAE,EAC9E,CAACsK,CAAa,CAAC,EAEb0O,GAAoB,MAAM,YAAa3L,GAAQ,CACjDnC,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAIH,CAAI,CAAC,EACrDnC,EAAe,CAAE,KAAMsC,GAAG,aAAc,GAAIH,CAAI,CAAC,EACjDoK,GAAqB,EAAK,CAC9B,EAAG,CAAC,CAAC,EAECwB,GAAoB,MAAM,YAAY,MAAO,CAAE,KAAA3hB,EAAM,WAAA4hB,CAAW,IAAM,CACxEtN,GAAmB,EAAK,EACxB,IAAMyB,EAAM8L,GAAa,MAAM,EACzBrL,EAAU,IAAIqL,GAAa,CAC7B,QAAS9L,EAAK,KAAA/V,EAAM,QAAS,GAC7B,OAAQ,OAAO,OACf,KAAM0V,GACN,KAAMI,GAAaC,CAAG,EACtB,KAAMkL,GAAgBlL,CAAG,CAC7B,CAAC,EACDhC,EAAiB,QAAQ,IAAIgC,EAAKS,CAAO,EACzC,GAAI,CACA,MAAMA,EAAQ,KAAK,EACnB5C,EAAe,CACX,KAAMsC,GAAG,aACT,MAAO4L,GAAiB,CACpB,GAAI/L,EAAK,KAAA/V,EAAM,OAAQwW,EAAQ,OAAQ,QAASA,EAAQ,OACxD,QAAS,GAAM,QAASA,EAAQ,gBAAgB,CACpD,CAAC,CACL,CAAC,EACD,MAAMA,EAAQ,OAAOoL,EAAW,IAAKL,IAAS,CAC1C,UAAWA,EACX,KAAMvO,EAAc,SAASuO,CAAG,GAAG,WAAa,QACpD,EAAE,CAAC,CACP,OAASzK,EAAO,CACZ/C,EAAiB,QAAQ,OAAOgC,CAAG,EACnC,GAAI,CAAES,EAAQ,QAAQ,CAAG,MAAY,CAAC,CACtC5C,EAAe,CAAE,KAAMsC,GAAG,aAAc,GAAIH,CAAI,CAAC,EAGjDnB,EAAckC,GAAO,OAAS,gCACxB9jB,EAAE,6BAA6B,EAC/B,mCAAmC8jB,GAAO,MAAQ,eAAe,IAAI,CAC/E,CACJ,EAAG,CAACpB,GAAgBI,GAAc9C,CAAa,CAAC,EAE1C+O,GAAqB,MAAM,YAAY,SAAY,CACrD,IAAMpL,EAASlC,EACf,GAAI,CAACkC,EAAQ,OACbjC,EAAiB,IAAI,EACrB,IAAM8B,EAAU,IAAIqL,GAAa,CAC7B,QAASlL,EAAO,IAAK,KAAMA,EAAO,KAAM,QAAS,GACjD,OAAQ,OAAO,OACf,KAAMjB,GACN,KAAMI,GAAaa,EAAO,GAAG,EAC7B,KAAMsK,GAAgBtK,EAAO,GAAG,CACpC,CAAC,EACD5C,EAAiB,QAAQ,IAAI4C,EAAO,IAAKH,CAAO,EAChD,GAAI,CACA,MAAMA,EAAQ,KAAK,EACnB5C,EAAe,CACX,KAAMsC,GAAG,aACT,MAAO4L,GAAiB,CAAE,GAAInL,EAAO,IAAK,KAAMA,EAAO,KAAM,OAAQH,EAAQ,MAAO,CAAC,CACzF,CAAC,EACD,MAAMA,EAAQ,aAAaG,EAAO,UAAWA,EAAO,KAAK,CAC7D,OAASG,EAAO,CACZ/C,EAAiB,QAAQ,OAAO4C,EAAO,GAAG,EAC1C,GAAI,CAAEH,EAAQ,QAAQ,CAAG,MAAY,CAAC,CACtC5C,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIS,EAAO,IAAK,MAAOG,GAAO,MAAQ,aAAc,CAAC,CAC9F,CACJ,EAAG,CAACrC,EAAeiB,GAAgBI,EAAY,CAAC,EAE1CkM,GAAwB,MAAM,YAAY,IAAM,CAClD,IAAMjM,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAKS,EACL,GAAI,CACAA,EAAQ,WAAW,EACnBhC,EAAiB,EAAK,CAC1B,OAASsC,EAAO,CACZlD,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIH,EAAK,MAAOe,GAAO,MAAQ,gBAAiB,CAAC,CAC1F,CACJ,EAAG,CAAC,CAAC,EAGCmL,GAAe,MAAM,YAAY,CAAClM,EAAK,CAAE,SAAAmM,EAAW,EAAK,EAAI,CAAC,IAAM,CACtE,IAAM1L,EAAUzC,EAAiB,QAAQ,IAAIgC,CAAG,EAK1CoM,EAAQ/M,EAAkB,QAAQ,IAAIW,CAAG,EAC3CoM,IACA/M,EAAkB,QAAQ,OAAOW,CAAG,EACpCoM,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAEhClN,GAAmBmB,GAAY,CAC3B,IAAMsE,EAAO,CAAE,GAAGtE,CAAQ,EAC1B,cAAOsE,EAAK3E,CAAG,EACR2E,CACX,CAAC,EACDvF,EAAwBiB,GAAY,CAChC,IAAMsE,EAAO,CAAE,GAAGtE,CAAQ,EAC1B,cAAOsE,EAAK3E,CAAG,EACR2E,CACX,CAAC,EAGD3G,EAAiB,QAAQ,OAAOgC,CAAG,EACnCN,GAAmB,QAAQ,OAAOM,CAAG,EACrCnC,EAAe,CAAE,KAAMsC,GAAG,aAAc,GAAIH,CAAI,CAAC,EACjDvB,EAAiB,EAAK,EAClBgC,IAKa0L,EACP,QAAQ,QAAQ,EAAE,KAAK,IAAM1L,EAAQ,MAAM,CAAC,EAAE,MAAM,IAAM,CAAC,CAAC,EAC5D,QAAQ,QAAQ,GACjB,KAAK,IAAM,CAAE,GAAI,CAAEA,EAAQ,QAAQ,CAAG,MAAY,CAAC,CAAE,CAAC,CAEnE,EAAG,CAAC,CAAC,EAECF,GAAkB,MAAM,OAAO2L,EAAY,EACjD3L,GAAgB,QAAU2L,GAE1B,IAAMG,GAAyB,MAAM,YAAY,MAAOC,GAAS,CAC7D,IAAMtM,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAI,CAACS,EAAS,OACd,IAAM/d,EAAO,OAAO4pB,GAAQ,EAAE,EAAE,KAAK,EACrC,GAAK5pB,EACL,CAAA2b,GAAc,EAAE,EAChB,GAAI,CACA,GAAM,CAAE,YAAAkO,CAAY,EAAI,MAAM9L,EAAQ,SAAS/d,CAAI,EACnDmb,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkBpd,EAAM,MAAM,CAC3C,CAAC,EASD,IAAM8pB,EAAYD,EAAY,IAAKlyB,GAAMA,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,GAAG,EAC9D,GAAImyB,KAAe9M,GAAmB,QAAQ,IAAIM,CAAG,GAAK,MACtDN,GAAmB,QAAQ,IAAIM,EAAKwM,CAAS,EACzCD,EAAY,OAAS,GAAG,CACxB,IAAME,EAAQF,EAAY,IAAKlyB,GAAMA,EAAE,IAAI,EACrC0R,EAAM0gB,EAAM,SAAW,EACvB,GAAGA,EAAM,CAAC,CAAC,MACX,GAAGA,EAAM,MAAM,EAAG,EAAE,EAAE,KAAK,IAAI,CAAC,QAAQA,EAAMA,EAAM,OAAS,CAAC,CAAC,OACrE5O,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GACL,GAAG/T,CAAG,+DACN,QACJ,CACJ,CAAC,CACL,CAER,OAASgV,EAAO,CACZlD,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkB,mBAAmBiB,GAAO,SAAW,eAAe,GAAI,QAAQ,CAC/F,CAAC,CACL,EACJ,EAAG,CAAC,CAAC,EASC2L,GAAgB,MAAM,QAAQ,IAAM,CACtC,GAAI,CAACxO,EAAa,MAAO,CAAC,EAC1B,IAAMyO,EAAQ,IAAI,IAAIzO,EAAY,QAAQ,IAAK7jB,GAAMA,EAAE,SAAS,EAAE,OAAO,OAAO,CAAC,EACjF,OAAOqxB,GAAgB,OAAQtrB,GAAM,CAACusB,EAAM,IAAIvsB,EAAE,EAAE,CAAC,CACzD,EAAG,CAAC8d,EAAawN,EAAe,CAAC,EAE3BkB,GAAmB,MAAM,YAAY,MAAOf,GAAe,CAC7D9M,EAAkB,EAAK,EACvB,IAAMiB,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAKS,EACL,GAAI,CACA,MAAMA,EAAQ,WAAWoL,EAAW,IAAKL,IAAS,CAC9C,UAAWA,EACX,KAAMvO,EAAc,SAASuO,CAAG,GAAG,WAAa,QACpD,EAAE,CAAC,CACP,OAASzK,EAAO,CACZlC,EAAckC,GAAO,OAAS,gCACxB9jB,EAAE,wBAAwB,EAC1B8jB,GAAO,OAAS,mBACZ,yBAAyBD,EAAa,WAAW,YACjD,qBAAqBC,GAAO,MAAQ,eAAe,IAAI,CACrE,CACJ,EAAG,CAAC9D,CAAa,CAAC,EAEZ4P,GAA0B,MAAM,YAAY,MAAOlC,GAAO,CAC5D,IAAM3K,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAKS,EACL,GAAI,CACA,MAAMA,EAAQ,aAAakK,CAAE,CACjC,OAAS5J,EAAO,CACZlD,EAAe,CAAE,KAAMsC,GAAG,UAAW,GAAIH,EAAK,MAAOe,GAAO,MAAQ,eAAgB,CAAC,CACzF,CACJ,EAAG,CAAC,CAAC,EAUC+L,GAAqB,MAAM,YAAY,CAAC9M,EAAK+M,IAAe,CAC9D,IAAMX,EAAQ/M,EAAkB,QAAQ,IAAIW,CAAG,EAC/C,GAAI,CAACoM,EAAO,OACZ,IAAM3L,EAAUzC,EAAiB,QAAQ,IAAIgC,CAAG,EAC1CgN,EAAOD,IAAe,KAAOA,EAActM,GAAS,kBAAkB,GAAK,KAMjF,GAAI,CAACuM,GAAQ,CAACA,EAAK,QAAUA,EAAK,SAAWZ,EAAM,OAAQ,CACvD/M,EAAkB,QAAQ,OAAOW,CAAG,EACpCoM,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,EAC5BhN,EAAwBiB,GAAY,CAChC,IAAMsE,EAAO,CAAE,GAAGtE,CAAQ,EAC1B,cAAOsE,EAAK3E,CAAG,EACR2E,CACX,CAAC,EACD,MACJ,CACAyH,EAAM,SAASY,EAAK,YAAY,CACpC,EAAG,CAAC,CAAC,EACC5M,GAAwB,MAAM,OAAO0M,EAAkB,EAC7D1M,GAAsB,QAAU0M,GAWhC,IAAMG,GAAqB,MAAM,YAAY,MAAOjN,EAAKgN,IAAS,CAC9D,IAAME,EAAW7N,EAAkB,QAAQ,IAAIW,CAAG,EAClD,GAAIkN,GAAYA,EAAS,SAAWF,EAAK,OACrC,OAAAE,EAAS,SAASF,EAAK,YAAY,EAC5BE,EAEPA,IACA7N,EAAkB,QAAQ,OAAOW,CAAG,EACpC,MAAMkN,EAAS,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAEzC,IAAMd,EAAQ,IAAIe,GAAe,CAC7B,WAAatN,GAAcrC,EAAY,QAAQ,IAAIqC,CAAS,GACrDJ,GAAa,QAAQ,IAAII,CAAS,GAAG,SACrC,KACP,SAAWuN,GAAa,CACpBhO,EAAwBiB,IAAa,CAAE,GAAGA,EAAS,CAACL,CAAG,EAAGoN,CAAS,EAAE,CACzE,CACJ,CAAC,EACD,OAAA/N,EAAkB,QAAQ,IAAIW,EAAKoM,CAAK,EACxC,MAAMA,EAAM,KAAK,CACb,OAAQY,EAAK,OACb,OAAQpP,EAAY,OAAOoC,CAAG,GAAG,QAAUhC,EAAiB,QAAQ,IAAIgC,CAAG,GAAG,QAAU,GACxF,UAAWgN,EAAK,UAChB,MAAO,CAAC,CACZ,CAAC,EACMZ,CACX,EAAG,CAACxO,CAAW,CAAC,EAUVyP,GAAuB,MAAM,YAAY,MAAOC,GAAc,CAChE,IAAMtN,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACvD,GAAKS,EACL,GAAI,CACA,MAAMA,EAAQ,UAAU,CACpB,UAAA6M,EACA,QAAUN,GAASC,GAAmBjN,EAAKgN,CAAI,CACnD,CAAC,CACL,OAASjM,EAAO,CAGZ,IAAMqL,EAAQ/M,EAAkB,QAAQ,IAAIW,CAAG,EAC3CoM,IAAS/M,EAAkB,QAAQ,OAAOW,CAAG,EAAGoM,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAChF,IAAM1rB,EAAOqgB,GAAO,MAAQ,eAC5BlD,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GACLpf,IAAS,mBAAqBzD,EAAE,gCAAgC,EAC1DyD,IAAS,YAAczD,EAAE,yBAAyB,EAC9CA,EAAE,iBAAiBswB,GAAexM,CAAK,CAAC,EAAE,EACpD,QACJ,CACJ,CAAC,CACL,CACJ,EAAG,CAACkM,EAAkB,CAAC,EAEjBO,GAAsB,MAAM,YAAY,SAAY,CACtD,IAAMxN,EAAM7B,EAAiB,QACvBsC,EAAUT,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,EACjDgN,EAAOvM,GAAS,kBAAkB,EACxC,GAAI,GAACA,GAAW,CAACuM,GACjB,GAAI,CAKA,IAAMZ,EAAQ,MAAMa,GAAmBjN,EAAK,CAAE,GAAGgN,EAAM,OAAQ,EAAK,CAAC,EACrE,MAAMvM,EAAQ,SAAS,EACvB2L,EAAM,SAAS3L,EAAQ,gBAAgB,GAAG,cAAgB,CAAC,CAAC,CAChE,OAASM,EAAO,CACZ,IAAMqL,EAAQ/M,EAAkB,QAAQ,IAAIW,CAAG,EAC3CoM,IAAS/M,EAAkB,QAAQ,OAAOW,CAAG,EAAGoM,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAChFvO,EAAe,CACX,KAAMsC,GAAG,YAAa,GAAIH,EAC1B,QAASF,GAAkB7iB,EAAE,iBAAiBswB,GAAexM,CAAK,CAAC,EAAE,EAAG,QAAQ,CACpF,CAAC,CACL,CACJ,EAAG,CAACkM,EAAkB,CAAC,EAUjBQ,GAAyB,MAAM,YAAY,IAAM,CACnD,IAAMzN,EAAM7B,EAAiB,QACvB6O,EAAOhN,GAAOhC,EAAiB,QAAQ,IAAIgC,CAAG,GAAG,kBAAkB,EACpEgN,GACLzN,GAAmBc,IAAa,CAAE,GAAGA,EAAS,CAACL,CAAG,EAAGgN,EAAK,MAAO,EAAE,CACvE,EAAG,CAAC,CAAC,EAECU,GAAuB,MAAM,YAAY,SAAY,CACvD,IAAM1N,EAAM7B,EAAiB,QAC7B,GAAI,CAAC6B,EAAK,OACV,IAAMoM,EAAQ/M,EAAkB,QAAQ,IAAIW,CAAG,EAC3CoM,IACA/M,EAAkB,QAAQ,OAAOW,CAAG,EACpCZ,EAAwBiB,GAAY,CAChC,IAAMsE,EAAO,CAAE,GAAGtE,CAAQ,EAC1B,cAAOsE,EAAK3E,CAAG,EACR2E,CACX,CAAC,EACD,MAAMyH,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,GAEtC,GAAI,CAAE,MAAMpO,EAAiB,QAAQ,IAAIgC,CAAG,GAAG,UAAU,CAAG,MAAY,CAAC,CAC7E,EAAG,CAAC,CAAC,EAEC2N,GAAmB,MAAM,YAAY,IACvCxP,EAAiB,QAAUkB,EAAkB,QAAQ,IAAIlB,EAAiB,OAAO,EAAI,KACtF,CAAC,CAAC,EAECyP,GAAqB,MAAM,YAAY,IAAM,CAAED,GAAiB,GAAG,UAAU,CAAG,EAAG,CAACA,EAAgB,CAAC,EACrGE,GAAwB,MAAM,YAAY,IAAM,CAAEF,GAAiB,GAAG,aAAa,CAAG,EAAG,CAACA,EAAgB,CAAC,EAC3GG,GAAsB,MAAM,YAAY,IAAM,CAAEH,GAAiB,GAAG,WAAW,CAAG,EAAG,CAACA,EAAgB,CAAC,EAG7G,MAAM,UAAU,IAAM,CACb1P,GACLJ,EAAe,CAAE,KAAMsC,GAAG,aAAc,GAAIlC,CAAc,CAAC,CAC/D,EAAG,CAACA,CAAa,CAAC,EAClB,MAAM,UAAU,IAAM,CAClB,IAAM1T,EAAKyU,EAAe,QACtBzU,IAAIA,EAAG,UAAYA,EAAG,aAC9B,EAAG,CAAC2T,GAAeA,EAAY,SAAS,MAAM,CAAC,EAI/C,MAAM,UAAU,IAAM,IAAM,CAGxB,QAAWkO,KAAS/M,EAAkB,QAAQ,OAAO,EACjD+M,EAAM,MAAM,EAAE,MAAM,IAAM,CAAC,CAAC,EAEhC/M,EAAkB,QAAQ,MAAM,EAChC,QAAWoB,KAAWzC,EAAiB,QAAQ,OAAO,EAClD,GAAI,CAAEyC,EAAQ,QAAQ,CAAG,MAAY,CAAC,CAE1CzC,EAAiB,QAAQ,MAAM,EAI/B,QAAW6B,IAAa,CAAC,GAAGJ,GAAa,QAAQ,KAAK,CAAC,EACnDgL,GAAiB,QAAQ5K,CAAS,CAE1C,EAAG,CAAC,CAAC,EAEL,IAAMkO,GAAgB,MAAM,YAAanmB,GAAO,CAC5C,GAAI,CAACA,EAAI,OACT,IAAMuf,EAAIzJ,EAAU,QAAQ,IAAI9V,CAAE,EAC5Bob,EAAMxF,EAAY,QAAQ,IAAI5V,CAAE,EACtC,GAAI,CAACuf,GAAK,CAACnE,GAAO,CAACmE,EAAE,iBAAmBA,EAAE,gBAAgB,SAAW,EAAG,OACxE,IAAM6G,EAAO7G,EAAE,gBAAiBA,EAAE,gBAAkB,CAAC,EACrD,QAAWnmB,KAAOgtB,EAAQ,GAAI,CAAEhL,EAAI,sBAAsBhiB,CAAG,CAAG,MAAY,CAAC,CACjF,EAAG,CAAC,CAAC,EAEL,MAAM,UAAU,IAAM,CACbqc,IACLH,EAAS,CAAE,KAAMsE,EAAG,aAAc,GAAInE,CAAgB,CAAC,GACnD,OAAO,SAAa,KAAe,SAAS,kBAAoB,YAAW0Q,GAAc1Q,CAAe,EAChH,EAAG,CAACA,EAAiB0Q,EAAa,CAAC,EAInC,IAAME,GAAa,MAAM,OAAO,EAAK,EACrC,MAAM,UAAU,IAAM,CAClB,GAAIA,GAAW,QAAS,OACxBA,GAAW,QAAU,GAKrB,IAAIC,EAAiB,GACjBC,EAAmB,KAEjBC,EAAsBnO,GAAU,CAClC,GAAIA,EAAM,OAAS,gBAAkB,CAACiO,EAClC,QAAWlL,KAAOxF,EAAY,QAAQ,OAAO,EACzC,GAAI,CACA,GAAIwF,EAAI,aAAeA,EAAI,YAAY,EAAG,CACtC,GAAI,CAAEA,EAAI,kBAAkB,CAAE,KAAM,kBAAmB,OAAQ,kBAAmB,UAAW,KAAK,IAAI,CAAE,CAAC,CAAG,MAAY,CAAC,CACzH,WAAW,IAAM,CAAE,GAAI,CAAEA,EAAI,WAAW,CAAG,MAAY,CAAC,CAAE,EAAG,GAAG,CACpE,MACIA,EAAI,WAAW,CAEvB,MAAY,CAAC,MAEVkL,IACPjO,EAAM,eAAe,EACrBA,EAAM,YAAc,GAE5B,EAEMoO,EAAyB,IAAM,CAC7B,SAAS,kBAAoB,UAC7BH,EAAiB,GACbC,GAAkB,aAAaA,CAAgB,EACnDA,EAAmB,WAAW,IAAM,CAAED,EAAiB,EAAO,EAAG,GAAI,GAC9D,SAAS,kBAAoB,YACpCA,EAAiB,GACbC,IAAoB,aAAaA,CAAgB,EAAGA,EAAmB,MAE3EJ,GAAczQ,EAAY,OAAO,EAEzC,EAEA,cAAO,iBAAiB,eAAgB8Q,CAAkB,EAC1D,SAAS,iBAAiB,mBAAoBC,CAAsB,EAE7D,IAAM,CACT,OAAO,oBAAoB,eAAgBD,CAAkB,EAC7D,SAAS,oBAAoB,mBAAoBC,CAAsB,EACnEF,IAAoB,aAAaA,CAAgB,EAAGA,EAAmB,MAC3E,QAAWnL,KAAOxF,EAAY,QAAQ,OAAO,EAAK,GAAI,CAAEwF,EAAI,WAAW,CAAG,MAAY,CAAC,CACvFxF,EAAY,QAAQ,MAAM,EAC1B,QAAWwM,KAASvM,EAAgB,QAAQ,OAAO,EAAK,GAAI,CAAEuM,EAAM,UAAU,CAAG,MAAY,CAAC,CAC9FvM,EAAgB,QAAQ,MAAM,EAC9BC,EAAU,QAAQ,MAAM,EACxBC,EAAU,QAAQ,MAAM,CAC5B,CACJ,EAAG,CAAC,CAAC,EAIL,IAAM2Q,GAAqB9qB,GAAc,CACrC,GAAI,CAEA,IAAM2nB,EAAQ,OAAO3nB,GAAc,SAAW,KAAK,MAAMA,CAAS,EAAIA,EAGhE+qB,EAAe,CACjB,KAAMpD,EAAM,KACZ,QAASA,EAAM,QACf,UAAWA,EAAM,UACjB,UAAWA,EAAM,UACjB,aAAcA,EAAM,aACpB,iBAAkBA,EAAM,iBACxB,KAAMA,EAAM,KAEZ,gBAAiBA,EAAM,gBAEvB,kBAAmB,GACnB,iBAAkB,SACtB,EAEA,OAAO,KAAK,UAAUoD,CAAY,CACtC,OAASxN,EAAO,CACZ,eAAQ,MAAM,gCAAiCA,CAAK,EAC7Cvd,CACX,CACJ,EASMgrB,GAAuBrD,IAEH,CAClB,KAAM,iCACN,QAAS,MACT,UAAWA,EAAM,UACjB,aAAcA,EAAM,aACpB,iBAAkBA,EAAM,iBACxB,UAAWA,EAAM,UAEjB,gBAAiBA,EAAM,gBAEvB,cAAeA,GAAO,eAAe,UAErC,aAAc,MAAM,QAAQA,EAAM,YAAY,GAAKA,EAAM,aAAa,QAAU,EAC1EA,EAAM,aACN,MACV,GAMEsD,GAAa,IACbC,GAAiB,IACjB,CAAC7pB,GAAe8pB,EAAgB,EAAI,MAAM,SAAS,CAAC,EACpD,CAAC7pB,GAAc8pB,EAAe,EAAI,MAAM,SAAS,CAAC,EAClD,CAAC7pB,GAAc8pB,EAAe,EAAI,MAAM,SAAS,EAAK,EAGtDC,EAAiB,MAAM,OAAO,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,CAAC,EAGtF,MAAM,UAAU,IAAM,IAAM,CACxB,GAAI,CAAMA,EAAe,SAAWA,EAAe,QAAQ,QAAS,cAAcA,EAAe,QAAQ,KAAK,EAAGA,EAAe,QAAQ,MAAQ,KAAQ,MAAQ,CAAC,CACrK,EAAG,CAACzR,CAAe,CAAC,EACpB,IAAM0R,GAAkB,IAAM,CAC1B,GAAI,CAAMD,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAClGA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,CACzB,EAGMG,GAAgB,SAAY,CAC9B,GAAM,CAAE,OAAAC,EAAQ,IAAAC,CAAI,EAAIJ,EAAe,SAAW,CAAC,EACnD,GAAI,CAACG,GAAU,CAACA,EAAO,OAAQ,OAC/B,IAAM5O,EAAU4O,EAAOC,EAAMD,EAAO,MAAM,EAC1C,GAAI,CAEA,IAAME,EADa,OAAO,OAAW,MAAkB,OAAO,YAAc,IAAM,KACtD,IAAM,IAC5BniB,EAAM,MAAO,OAAO,eAAiB,OAAO,eAAeqT,EAAS,CAAE,qBAAsB,IAAK,OAAQ,EAAG,KAAM8O,CAAQ,CAAC,EAAI,QAAQ,QAAQ,EAAE,GACnJniB,GAAK2V,GAAa3V,CAAG,CAC7B,OAAS7Q,EAAG,CACR,QAAQ,KAAK,sCAAuCA,CAAC,CACzD,CACAyyB,IAAkBE,EAAe,SAAS,KAAO,IAAMA,EAAe,SAAS,QAAQ,QAAU,GAAM,CAAC,CAC5G,EAGMM,GAAmB,SAAY,CACjC,MAAMJ,GAAc,EACpB,IAAMK,EAAMP,EAAe,SAAS,QAAQ,QAAU,EACtD,GAAIO,EAAM,EAAG,CACT,IAAMC,IAAYR,EAAe,SAAS,KAAO,GAAK,GAAKO,EAC3DP,EAAe,QAAQ,IAAMQ,EAC7BV,GAAgBU,EAAU,CAAC,CAC/B,CACJ,EAEMtqB,GAAqB,IAAM,CAC7B,IAAMuqB,EAAgB,CAACxqB,GACvB8pB,GAAgBU,CAAa,EAEzBA,GAEIT,EAAe,QAAQ,QACvB,cAAcA,EAAe,QAAQ,KAAK,EAC1CA,EAAe,QAAQ,MAAQ,MAEnC,QAAQ,IAAI,8CAA8C,IAEtDA,EAAe,QAAQ,OAAO,OAAS,IAEvCA,EAAe,QAAQ,OAAS,GAChC,cAAcA,EAAe,QAAQ,KAAK,EAC1CA,EAAe,QAAQ,MAAQ,YAAYM,GAAkB,GAAU,GAE3E,QAAQ,IAAI,+CAA+C,EAEnE,EAEMnqB,GAAc,SAAY,CAE5B,GADA,QAAQ,IAAI,+CAAyCJ,GAAe,0BAA2BiqB,EAAe,OAAO,EACjHA,EAAe,QAAQ,OAAO,OAAS,EAAG,CAC1C,IAAMQ,GAAWR,EAAe,QAAQ,IAAM,GAAKA,EAAe,QAAQ,OAAO,OACjFA,EAAe,QAAQ,IAAMQ,EAC7BV,GAAgBU,EAAU,CAAC,EAC3B,QAAQ,IAAI,8BAAwBA,EAAU,CAAC,EAE/C,GAAI,CAAE,cAAcR,EAAe,QAAQ,KAAK,CAAG,MAAQ,CAAC,CAC5DA,EAAe,QAAQ,MAAQ,KAC/B,MAAME,GAAc,EAEhB,CAACjqB,IAAgB+pB,EAAe,QAAQ,OAAO,OAAS,GAExDA,EAAe,QAAQ,OAAS,GAChCA,EAAe,QAAQ,MAAQ,YAAYM,GAAkB,GAAU,GAEvEN,EAAe,QAAQ,OAAS,EAExC,MACI,QAAQ,IAAI,0CAAmC,CAEvD,EAEM5pB,GAAc,SAAY,CAE5B,GADA,QAAQ,IAAI,+CAAyCL,GAAe,0BAA2BiqB,EAAe,OAAO,EACjHA,EAAe,QAAQ,OAAO,OAAS,EAAG,CAC1C,IAAMU,GAAWV,EAAe,QAAQ,IAAM,EAAIA,EAAe,QAAQ,OAAO,QAAUA,EAAe,QAAQ,OAAO,OACxHA,EAAe,QAAQ,IAAMU,EAC7BZ,GAAgBY,EAAU,CAAC,EAC3B,QAAQ,IAAI,kCAA4BA,EAAU,CAAC,EACnD,GAAI,CAAE,cAAcV,EAAe,QAAQ,KAAK,CAAG,MAAQ,CAAC,CAC5DA,EAAe,QAAQ,MAAQ,KAC/B,MAAME,GAAc,EAChB,CAACjqB,IAAgB+pB,EAAe,QAAQ,OAAO,OAAS,GAExDA,EAAe,QAAQ,OAAS,GAChCA,EAAe,QAAQ,MAAQ,YAAYM,GAAkB,GAAU,GAEvEN,EAAe,QAAQ,OAAS,EAExC,MACI,QAAQ,IAAI,0CAAmC,CAEvD,EAGMW,EAAoB,MAAM,OAAO,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,CAAC,EAEnFC,GAAiB,MAAO/wB,GAAS,CACnC,GAAI,CACA,IAAMgxB,EAAe,OAAOhxB,GAAS,SAAWA,EAAK,OAAS,KAAK,UAAUA,CAAI,EAAE,OAE7EwwB,EADa,OAAO,OAAW,MAAkB,OAAO,YAAc,IAAM,KACtD,IAAM,IAGlC,GAAI,OAAO,OAAO,gCAAmC,WACjD,GAAI,CACA,IAAMS,GAAM,OAAOjxB,GAAS,SAAW,KAAK,MAAMA,CAAI,EAAIA,EACpDkxB,GAAY,MAAM,OAAO,+BAA+BD,GAAK,CAAE,qBAAsB,IAAK,KAAMT,EAAS,OAAQ,CAAE,CAAC,EAC1H,GAAIU,GAAW,CACX,GAAI,CAAMf,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,EACrBlM,GAAakN,EAAS,EACtBlB,GAAiB,CAAC,EAClBC,GAAgB,CAAC,EACjB,MACJ,CACJ,OAASzyB,GAAG,CACR,QAAQ,KAAK,2DAA4DA,IAAG,SAAWA,EAAC,CAC5F,CAIJ,GAAI,OAAO,OAAO,0BAA6B,WAC3C,GAAI,CACA,IAAM+jB,GAAU,OAAOvhB,GAAS,SAAWA,EAAO,KAAK,UAAUA,CAAI,EAC/DkxB,GAAY,MAAM,OAAO,yBAAyB3P,GAAS,CAAE,qBAAsB,IAAK,KAAMiP,EAAS,OAAQ,CAAE,CAAC,EACxH,GAAIU,GAAW,CACX,GAAI,CAAMf,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,EACrBlM,GAAakN,EAAS,EACtBlB,GAAiB,CAAC,EAClBC,GAAgB,CAAC,EACjB,MACJ,CACJ,OAASzyB,GAAG,CACR,QAAQ,KAAK,0DAA2DA,IAAG,SAAWA,EAAC,CAC3F,CAIJ,IAAM+jB,EAAU,OAAOvhB,GAAS,SAAWA,EAAO,KAAK,UAAUA,CAAI,EACrE,GAAIuhB,EAAQ,QAAUuO,GAAY,CAC9B,GAAI,CAAC,OAAO,eAAgB,MAAM,IAAI,MAAM,+BAA+B,EAC3E,GAAI,CAAMK,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,EACrB,IAAMgB,GAAY,MAAM,OAAO,eAAe3P,EAAS,CAAE,qBAAsB,IAAK,KAAMiP,EAAS,OAAQ,CAAE,CAAC,EAC1GxM,GAAakN,EAAS,EAC1BlB,GAAiB,CAAC,EAClBC,GAAgB,CAAC,EACb,MACR,CAGA,GAAI,CAAME,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAQ,CAAC,EAAG,IAAK,EAAG,OAAQ,EAAM,EAC1EF,GAAgB,CAAC,EACjBD,GAAiB,CAAC,EAClBE,GAAgB,EAAK,EACrB,IAAMjnB,EAAK,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,GAG7DkoB,EAAY,KAAK,IAAI,IAAK,KAAK,MAAM5P,EAAQ,OAD7B,EACmD,CAAC,EACpEjgB,EAAQ,KAAK,KAAKigB,EAAQ,OAAS4P,CAAS,EAC5CC,GAAY,CAAC,EACnB,QAASpzB,GAAI,EAAGA,GAAIsD,EAAOtD,KAAK,CAC5B,IAAMqzB,GAAMrzB,GAAI,EACVszB,GAAO/P,EAAQ,MAAMvjB,GAAImzB,GAAYnzB,GAAI,GAAKmzB,CAAS,EAC7DC,GAAU,KAAK,KAAK,UAAU,CAAE,IAAK,CAAE,EAAG,EAAG,GAAAnoB,EAAI,IAAAooB,GAAK,MAAA/vB,EAAO,GAAI,KAAM,EAAG,KAAMgwB,EAAK,CAAC,CAAC,CAC3F,CACA,GAAI,CAAC,OAAO,eAAgB,MAAM,IAAI,MAAM,+BAA+B,EAC3E,GAAIF,GAAU,SAAW,EAAG,CACxB,IAAM/iB,GAAM,MAAM,OAAO,eAAe+iB,GAAU,CAAC,EAAG,CAAE,qBAAsB,IAAK,OAAQ,EAAG,KAAMZ,CAAQ,CAAC,EAC7GxM,GAAa3V,EAAG,EAChB2hB,GAAiB,CAAC,EAClBC,GAAgB,CAAC,EACb,MACJ,CACJE,EAAe,QAAQ,OAASiB,GAChCjB,EAAe,QAAQ,IAAM,EAC7BA,EAAe,QAAQ,OAAS,GAChCH,GAAiBoB,GAAU,MAAM,EACjCnB,GAAgB,CAAC,EACb,IAAMsB,GAAU,CAAE,qBAAsB,IAAK,OAAQ,EAAG,KAAMf,CAAQ,EACtE,MAAM,WAAW,EAEZpqB,KAEL+pB,EAAe,QAAQ,OAAS,GAChCA,EAAe,QAAQ,MAAQ,YAAYM,GAAkB,GAAU,GAE3E,MACJ,OAASrO,EAAO,CACZ,QAAQ,MAAM,6BAA8BA,CAAK,EACjDO,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,+BAA+B4iB,EAAM,OAAO,GACrD,KAAM,OACV,CAAC,CAAC,CACN,CACJ,EAEMoP,GAA2BC,IAEX,CACd,KAAM,wBACN,QAASA,EAAa,QACtB,UAAWA,EAAa,UACxB,UAAWA,EAAa,UACxB,aAAcA,EAAa,aAC3B,iBAAkBA,EAAa,iBAC/B,KAAMA,EAAa,KACnB,IAAKA,EAAa,IAClB,gBAAiBA,EAAa,gBAC9B,aAAcA,EAAa,aAG3B,cAAe,CACX,QAAS,OACT,QAASA,EAAa,YACtB,UAAWA,EAAa,UAAY,IACpC,QAASA,EAAa,QACtB,UAAWA,EAAa,aAC5B,EAGA,eAAgB,CACZ,QAAS,QACT,QAASA,EAAa,aACtB,UAAWA,EAAa,UAAY,IACpC,QAASA,EAAa,QACtB,UAAWA,EAAa,cAC5B,EAGA,cAAe,CACX,UAAWA,EAAa,cACxB,UAAWA,EAAa,UACxB,MAAOA,EAAa,UACpB,QAASA,EAAa,OAC1B,EAGA,cAAe,CACX,MAAO,WACP,MAAO,GACP,MAAO,MACP,oBAAqB,CACjB,WAAY,CAAE,OAAQ,GAAO,QAAS,yBAA0B,OAAQ,CAAE,EAC1E,YAAa,CAAE,OAAQ,GAAM,QAAS,+BAAgC,OAAQ,EAAG,EACjF,iBAAkB,CAAE,OAAQ,GAAO,QAAS,2BAA4B,OAAQ,CAAE,EAClF,aAAc,CAAE,OAAQ,GAAM,QAAS,uBAAwB,OAAQ,CAAE,EACzE,MAAO,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EAChG,mBAAoB,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EAC7G,IAAK,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EAC9F,iBAAkB,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EAC3G,cAAe,CAAE,OAAQ,GAAO,QAAS,oDAAqD,OAAQ,CAAE,EACxG,iBAAkB,CAAE,OAAQ,GAAO,QAAS,mDAAoD,OAAQ,CAAE,CAC9G,EACA,UAAWA,EAAa,UACxB,QAAS,mEACT,WAAY,GACZ,aAAc,EACd,YAAa,EACb,YAAa,OACb,iBAAkB,EACtB,CACJ,GAKEC,GAAe,MAAOC,GAAgB,CACxC,GAAI,CAYA,GAXA,QAAQ,IAAI,mBAAoBA,EAAY,UAAU,EAAG,GAAG,EAAI,KAAK,EACrE,QAAQ,IAAI,wBAAyBb,EAAkB,OAAO,EAU1Da,EAAY,WAAW,MAAM,GAAKA,EAAY,WAAW,CAAC,IAAM,EAChE,OAAAb,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EACzE3rB,GACAD,GAAeysB,CAAW,EAE1B3sB,GAAc2sB,CAAW,EAE7BhP,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,yBAAyB,EACpC,KAAM,SACV,CAAC,CAAC,EACFsH,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,EAK/B,GAAI+rB,EAAY,WAAW,UAAU,GAAMb,EAAkB,SAAWA,EAAkB,QAAQ,GAAK,CACnG,QAAQ,IAAI,yBAA0Ba,EAAY,UAAU,EAAG,EAAE,EAAI,KAAK,EAGrEb,EAAkB,QAAQ,KAC3B,QAAQ,IAAI,uCAAuC,EAEnDA,EAAkB,QAAU,CACxB,GAAI,OAAO,KAAK,IAAI,CAAC,GAKrB,MAAO,EACP,KAAM,IAAI,IACV,MAAO,CAAC,EACR,aAAc,KAAK,IAAI,CAC3B,GAIJ,IAAMc,EAAYD,EAAY,UAAU,EAAG,EAAE,EAG7C,GAAIb,EAAkB,QAAQ,KAAK,IAAIc,CAAS,EAC5C,eAAQ,IAAI,oCAAoC,EACzC,QAAQ,QAAQ,EAAK,EAGhCd,EAAkB,QAAQ,KAAK,IAAIc,CAAS,EAC5Cd,EAAkB,QAAQ,MAAM,KAAKa,CAAW,EAChDb,EAAkB,QAAQ,aAAe,KAAK,IAAI,EAGlD,GAAI,CACA,IAAMe,EAAcf,EAAkB,QAAQ,KAAK,KACnD,SAAS,cAAc,IAAI,YAAY,mBAAoB,CACvD,OAAQ,CACJ,GAAIA,EAAkB,QAAQ,GAC9B,IAAKe,EACL,MAAOf,EAAkB,QAAQ,KACrC,CACJ,CAAC,CAAC,EAGFd,GAAiBc,EAAkB,QAAQ,KAAK,EAChDb,GAAgB4B,CAAW,CAC/B,MAAQ,CAAC,CAGT,IAAMC,EAAahB,EAAkB,QAAQ,KAAK,MAAQA,EAAkB,QAAQ,MAGpF,GAFA,QAAQ,IAAI,qBAAqBA,EAAkB,QAAQ,KAAK,IAAI,IAAIA,EAAkB,QAAQ,KAAK,eAAegB,CAAU,EAAE,EAE9H,CAACA,EAED,eAAQ,IAAI,iBAAiBhB,EAAkB,QAAQ,KAAK,IAAI,IAAIA,EAAkB,QAAQ,KAAK,uBAAuB,EACnH,QAAQ,QAAQ,EAAK,EAIhC,GAAI,CACA,IAAMiB,EAAiBjB,EAAkB,QAAQ,MAAM,KAAK,EAAE,EAE9D,OAAI3rB,GACAD,GAAe6sB,CAAc,EAE7B/sB,GAAc+sB,CAAc,EAGhCpP,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,qDACT,KAAM,SACV,CAAC,CAAC,EAGFsxB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7ElrB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,OAASpI,EAAG,CACR,eAAQ,KAAK,uCAAwCA,CAAC,EAC/C,QAAQ,QAAQ,EAAK,CAChC,CACJ,CAGA,GAAIm0B,EAAY,OAAS,KAAO,CAACA,EAAY,WAAW,GAAG,GAAK,CAACA,EAAY,WAAW,GAAG,EAAG,CAC1F,QAAQ,IAAI,0DAA2DA,EAAY,UAAU,EAAG,EAAE,EAAI,KAAK,EAGtGb,EAAkB,QAAQ,KAC3B,QAAQ,IAAI,iDAAiD,EAC7DA,EAAkB,QAAU,CACxB,GAAI,OAAO,KAAK,IAAI,CAAC,GAKrB,MAAO,EACP,KAAM,IAAI,IACV,MAAO,CAAC,EACR,aAAc,KAAK,IAAI,CAC3B,GAIJ,IAAMc,EAAYD,EAAY,UAAU,EAAG,EAAE,EAG7C,GAAIb,EAAkB,QAAQ,KAAK,IAAIc,CAAS,EAC5C,eAAQ,IAAI,oCAAoC,EACzC,QAAQ,QAAQ,EAAK,EAGhCd,EAAkB,QAAQ,KAAK,IAAIc,CAAS,EAC5Cd,EAAkB,QAAQ,MAAM,KAAKa,CAAW,EAChDb,EAAkB,QAAQ,aAAe,KAAK,IAAI,EAGlD,GAAI,CACA,IAAMe,EAAcf,EAAkB,QAAQ,KAAK,KACnD,SAAS,cAAc,IAAI,YAAY,mBAAoB,CACvD,OAAQ,CACJ,GAAIA,EAAkB,QAAQ,GAC9B,IAAKe,EACL,MAAOf,EAAkB,QAAQ,KACrC,CACJ,CAAC,CAAC,EAGFd,GAAiBc,EAAkB,QAAQ,KAAK,EAChDb,GAAgB4B,CAAW,CAC/B,MAAQ,CAAC,CAGT,IAAMC,EAAahB,EAAkB,QAAQ,KAAK,MAAQA,EAAkB,QAAQ,MAGpF,GAFA,QAAQ,IAAI,qBAAqBA,EAAkB,QAAQ,KAAK,IAAI,IAAIA,EAAkB,QAAQ,KAAK,eAAegB,CAAU,EAAE,EAE9H,CAACA,EAED,eAAQ,IAAI,iBAAiBhB,EAAkB,QAAQ,KAAK,IAAI,IAAIA,EAAkB,QAAQ,KAAK,uBAAuB,EACnH,QAAQ,QAAQ,EAAK,EAIhC,GAAI,CACA,IAAMiB,EAAiBjB,EAAkB,QAAQ,MAAM,KAAK,EAAE,EAE9D,OAAI3rB,GACAD,GAAe6sB,CAAc,EAE7B/sB,GAAc+sB,CAAc,EAGhCpP,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,qDACT,KAAM,SACV,CAAC,CAAC,EAGFsxB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7ElrB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,OAASpI,EAAG,CACR,eAAQ,KAAK,uCAAwCA,CAAC,EAC/C,QAAQ,QAAQ,EAAK,CAChC,CACJ,CAIA,IAAIw0B,EACJ,GAAI,OAAO,OAAO,kBAAqB,WAAY,CAC/C,IAAMC,EAAM,OAAO,iBAAiBN,CAAW,EAC3C,OAAOM,GAAQ,SACfD,EAAa,KAAK,MAAMC,CAAG,EAE3BD,EAAaC,CAErB,KAAO,CACH,IAAMC,EAAqB,OAAO,OAAO,oBAAuB,WAAc,OAAO,mBAAmBP,CAAW,EAAIA,EACvHK,EAAa,KAAK,MAAME,CAAiB,CAC7C,CAIA,GAHA,QAAQ,IAAI,gBAAiBF,CAAU,EAGnCA,EAAW,KAAOA,EAAW,KAAM,CACnC,GAAM,CAAE,IAAAG,CAAI,EAAIH,EAEhB,GAAI,CAAClB,EAAkB,QAAQ,IAAMA,EAAkB,QAAQ,KAAOqB,EAAI,GAAI,CAC1ErB,EAAkB,QAAU,CAAE,GAAIqB,EAAI,GAAI,MAAOA,EAAI,OAAS,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,EAAG,aAAc,KAAK,IAAI,CAAE,EACtH,GAAI,CACA,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAIA,EAAI,GAAI,IAAK,EAAG,MAAOA,EAAI,OAAS,CAAE,CAAE,CAAC,CAAC,CACzH,MAAQ,CAAC,CACb,CAEKrB,EAAkB,QAAQ,KAAK,IAAIqB,EAAI,GAAG,IAC3CrB,EAAkB,QAAQ,KAAK,IAAIqB,EAAI,GAAG,EAC1CrB,EAAkB,QAAQ,MAAM,KAAKa,CAAW,EAChDb,EAAkB,QAAQ,aAAe,KAAK,IAAI,GAGtD,GAAI,CACA,IAAMe,EAAcf,EAAkB,QAAQ,KAAK,KACnD,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAIqB,EAAI,GAAI,IAAKN,EAAa,MAAOf,EAAkB,QAAQ,OAASqB,EAAI,OAAS,CAAE,CAAE,CAAC,CAAC,CACtK,MAAQ,CAAC,CAET,GAAI,EADerB,EAAkB,QAAQ,KAAK,OAASA,EAAkB,QAAQ,OAAS,IAG1F,OAAO,QAAQ,QAAQ,EAAK,EAGhC,GAAIqB,EAAI,KAAO,MACX,GAAI,CAMA,IAAMC,EAJQtB,EAAkB,QAAQ,MACnC,IAAIz1B,GAAK,KAAK,MAAMA,CAAC,CAAC,EACtB,KAAK,CAAC6B,EAAG2C,KAAO3C,EAAE,IAAI,KAAO,IAAM2C,EAAE,IAAI,KAAO,EAAE,EAClD,IAAIzC,GAAKA,EAAE,MAAQ,EAAE,EACH,KAAK,EAAE,EACxBi1B,EAAa,KAAK,MAAMD,CAAQ,EAClCjtB,GACAD,GAAe,KAAK,UAAUmtB,EAAY,KAAM,CAAC,CAAC,EAElDrtB,GAAc,KAAK,UAAUqtB,EAAY,KAAM,CAAC,CAAC,EAErD1P,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAAE,QAAS,kDAAmD,KAAM,SAAU,CAAC,CAAC,EAC9G,GAAI,CAAE,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAI2yB,EAAI,EAAG,CAAE,CAAC,CAAC,CAAG,MAAQ,CAAC,CAExG,OAAArB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7ElrB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,OAASpI,EAAG,CACR,eAAQ,KAAK,yCAA0CA,CAAC,EACjD,QAAQ,QAAQ,EAAK,CAChC,SACO20B,EAAI,KAAO,MAClB,GAAI,CAKA,IAAMC,EAJQtB,EAAkB,QAAQ,MACnC,IAAIz1B,GAAK,KAAK,MAAMA,CAAC,CAAC,EACtB,KAAK,CAAC6B,EAAG2C,KAAO3C,EAAE,IAAI,KAAO,IAAM2C,EAAE,IAAI,KAAO,EAAE,EAClD,IAAIzC,GAAKA,EAAE,MAAQ,EAAE,EACH,KAAK,EAAE,EAC1Bi1B,EACJ,GAAI,OAAO,OAAO,kBAAqB,WAAY,CAC/C,IAAMJ,EAAM,OAAO,iBAAiBG,CAAQ,EAC5CC,EAAc,OAAOJ,GAAQ,SAAY,KAAK,MAAMA,CAAG,EAAIA,CAC/D,MACII,EAAa,KAAK,MAAMD,CAAQ,EAEhCjtB,GACAD,GAAe,KAAK,UAAUmtB,EAAY,KAAM,CAAC,CAAC,EAElDrtB,GAAc,KAAK,UAAUqtB,EAAY,KAAM,CAAC,CAAC,EAErD1P,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAAE,QAAS,kDAAmD,KAAM,SAAU,CAAC,CAAC,EAC9G,GAAI,CAAE,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAI2yB,EAAI,EAAG,CAAE,CAAC,CAAC,CAAG,MAAQ,CAAC,CACxG,OAAArB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7ElrB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,OAASpI,EAAG,CACR,eAAQ,KAAK,yCAA0CA,CAAC,EACjD,QAAQ,QAAQ,EAAK,CAChC,SACO,OAAO,kBAAmB,CACjC,GAAI,CACA,IAAM80B,EAAU,MAAM,OAAO,kBAAkBxB,EAAkB,QAAQ,KAAK,EAClF,GAAIwB,EAAQ,OAAS,EAAG,CACpB,GAAM,CAAE,WAAAD,CAAW,EAAIC,EAAQ,CAAC,EAC5BntB,GACAD,GAAe,KAAK,UAAUmtB,EAAY,KAAM,CAAC,CAAC,EAElDrtB,GAAc,KAAK,UAAUqtB,EAAY,KAAM,CAAC,CAAC,EAEjD1P,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAAE,QAAS,mDAAoD,KAAM,SAAU,CAAC,CAAC,EAC/G,GAAI,CAAE,SAAS,cAAc,IAAI,YAAY,mBAAoB,CAAE,OAAQ,CAAE,GAAI2yB,EAAI,EAAG,CAAE,CAAC,CAAC,CAAG,MAAQ,CAAC,CACxG,OAAArB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAC7ElrB,GAAsB,EAAK,EACpB,QAAQ,QAAQ,EAAI,CAC/B,CACJ,OAASpI,EAAG,CACR,QAAQ,KAAK,sCAAuCA,CAAC,CACzD,CACA,OAAO,QAAQ,QAAQ,EAAK,CAChC,KACI,QAAO,QAAQ,QAAQ,EAAK,CAEpC,CAGA,GAAIw0B,EAAW,OAAS,iCAAkC,CACtD,QAAQ,IAAI,2DAA2D,EACvE,IAAMO,EAAYf,GAAwBQ,CAAU,EAGpD,OAAI7sB,IAEAD,GAAe,KAAK,UAAUqtB,EAAW,KAAM,CAAC,CAAC,EACjD,QAAQ,IAAI,8EAAuE,IAGnFvtB,GAAc,KAAK,UAAUutB,EAAW,KAAM,CAAC,CAAC,EAChD,QAAQ,IAAI,yEAAkE,GAElF5P,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,kFACT,KAAM,SACV,CAAC,CAAC,EACFoG,GAAsB,EAAK,EACpB,EACX,KAOK,QAAIosB,EAAW,OAAS,0BACzBrP,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,eAAe,EAC1B,KAAM,OACV,CAAC,CAAC,EACK,KAGH,CAAC0zB,EAAW,KAAOA,EAAW,OAAS,yBACvCrP,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,sBAAsB,EACjC,KAAM,SACV,CAAC,CAAC,EAIF6G,IAEA,QAAQ,IAAI,wCAAyC6sB,CAAU,EAC/D9sB,GAAe,KAAK,UAAU8sB,EAAY,KAAM,CAAC,CAAC,IAGlD,QAAQ,IAAI,uCAAwCA,CAAU,EAC9DhtB,GAAc,KAAK,UAAUgtB,EAAY,KAAM,CAAC,CAAC,GAErDrP,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,0CACT,KAAM,SACV,CAAC,CAAC,EACFoG,GAAsB,EAAK,EACpB,GAEf,MAAgB,CAEZ,OAAIT,GAEAD,GAAeysB,CAAW,EAG1B3sB,GAAc2sB,CAAW,EAE7BhP,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,0CACT,KAAM,SACV,CAAC,CAAC,EACFoG,GAAsB,EAAK,EACpB,EACX,CACJ,EAKMgB,GAAoB,SAAY,CAClC,GAAI,CAEAD,GAAoB,EAAI,EACxBgd,GAAa,EAAE,EACfE,GAAiB,EAAK,EACtBne,EAAc,EAAK,EACnBse,GAAa,EAAE,EAEf,IAAMwI,EAAQ,MAAMzlB,GAAiB,QAAQ,kBAAkB,EAG/D4c,GAAa6I,CAAK,EAClB3I,GAAiB,EAAI,EAGrB,IAAM2O,EAAc,OAAOhG,GAAU,SAAW,KAAK,UAAUA,CAAK,EAAIA,EACxE,GAAI,CACA,GAAI,OAAO,OAAO,wBAA2B,WAAY,CACrD,IAAMiG,EAAM,OAAO,uBAAuBD,CAAW,EAE/CE,EAAgB,EAClBpxB,EAAQoxB,EACRvB,EAAY,KAAK,IAAI,IAAK,KAAK,KAAKsB,EAAI,OAASC,CAAa,CAAC,EAC/DvB,GAAa,IAAGA,EAAY,KAG5BsB,EAAI,QAAUtB,GACd7vB,EAAQ,EACR6vB,EAAYsB,EAAI,SAGhBtB,EAAY,KAAK,KAAKsB,EAAI,OAASC,CAAa,EAChDpxB,EAAQoxB,GAGZ,IAAMzpB,EAAK,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,GAC7DqnB,EAAS,CAAC,EAChB,QAAStyB,GAAI,EAAGA,GAAIsD,EAAOtD,KAAK,CAC5B,IAAMqzB,GAAMrzB,GAAI,EACVszB,GAAOmB,EAAI,MAAMz0B,GAAImzB,GAAYnzB,GAAI,GAAKmzB,CAAS,EAEzDb,EAAO,KAAKgB,EAAI,CACpB,CAIA,IAAMd,GADa,OAAO,OAAW,MAAkB,OAAO,YAAc,IAAM,KACtD,IAAM,IAClC,GAAI,OAAO,gBAAkBF,EAAO,OAAS,EAAG,CAC5C,IAAMqC,GAAW,MAAM,OAAO,eAAerC,EAAO,CAAC,EAAG,CAAE,qBAAsB,IAAK,KAAME,GAAS,OAAQ,CAAE,CAAC,EAC3GmC,IAAU3O,GAAa2O,EAAQ,CACvC,CAGA,GAAI,CAAMxC,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAAG,EAAQ,IAAK,EAAG,OAAQ,EAAK,EACrEN,GAAiBM,EAAO,MAAM,EAC9BL,GAAgB,CAAC,EACjBC,GAAgB,EAAK,EAGrB,IAAM0C,GAAa,IACnBzC,EAAe,QAAQ,MAAQ,YAAYM,GAAkBmC,EAAU,EAGvE,GAAI,CAAEltB,EAAc,EAAI,CAAG,MAAQ,CAAC,CACxC,KAAO,CAEH,MAAMqrB,GAAevE,CAAK,EAC1B,GAAI,CAAE9mB,EAAc,EAAI,CAAG,MAAQ,CAAC,CACxC,CACJ,OAASlI,EAAG,CACR,QAAQ,KAAK,8BAA+BA,CAAC,CACjD,CAEyB8G,GAAS,OAAO5I,GACrCA,EAAE,OAAS,WACVA,EAAE,QAAQ,SAAS4C,EAAE,wBAAwB,CAAC,GAAK5C,EAAE,QAAQ,SAAS4C,EAAE,wBAAwB,CAAC,EACtG,EAEqB,SAAW,IAC5BqkB,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,4BAA4B,EACvC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEFqkB,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,qBAAqB,EAChC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,GAID,OAAO,oBACRyqB,GAAoB,EAAE,MAAM,QAAQ,KAAK,CAEzB,OAAS3G,EAAO,CAC5BO,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,8BAA8B4iB,EAAM,OAAO,GACpD,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,CACN,QAAE,CACEzb,GAAoB,EAAK,CAC7B,CACZ,EAEMksB,GAAqB,SAAY,CACnC,GAAI,CAEA,GAAI,CAAC9tB,GAAW,KAAK,EAAG,CACpB4d,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,oBAAoB,EAC/B,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EACF,MACJ,CAEA,GAAI,CACAqkB,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,2BAA2B,EACtC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF,IAAIkuB,EACJ,GAAI,CAEA,GAAI,OAAO,OAAO,kBAAqB,WAAY,CAC/C,IAAMyF,EAAM,OAAO,iBAAiBltB,GAAW,KAAK,CAAC,EACrDynB,EAAS,OAAOyF,GAAQ,SAAY,KAAK,MAAMA,CAAG,EAAIA,CAC1D,KAAO,CACH,IAAMa,EAAW,OAAO,OAAO,oBAAuB,WAAc,OAAO,mBAAmB/tB,GAAW,KAAK,CAAC,EAAIA,GAAW,KAAK,EACnIynB,EAAQ,KAAK,MAAMsG,CAAO,CAC9B,CACJ,OAASC,EAAY,CACjB,MAAM,IAAI,MAAM,8BAA8BA,EAAW,OAAO,EAAE,CACtE,CAEI,GAAI,CAACvG,GAAS,OAAOA,GAAU,SAC3B,MAAM,IAAI,MAAM,kCAAkC,EAKtD,GAAI,EADsBA,EAAM,IAAM,SAAaA,EAAM,OAAS,yBAE9D,MAAM,IAAI,MAAM,kEAAkE,EAGtF,IAAME,EAAS,MAAM3lB,GAAiB,QAAQ,mBAAmBylB,CAAK,EAGtE5I,GAAc8I,CAAM,EACpB5I,GAAkB,EAAI,EAGtB,IAAMkP,EAAe,OAAOtG,GAAW,SAAW,KAAK,UAAUA,CAAM,EAAIA,EAC3E,GAAI,CACA,GAAI,OAAO,OAAO,wBAA2B,WAAY,CACrD,IAAM+F,EAAM,OAAO,uBAAuBO,CAAY,EAEhDN,EAAgB,EAClBpxB,EAAQoxB,EACRvB,EAAY,KAAK,IAAI,IAAK,KAAK,KAAKsB,EAAI,OAASC,CAAa,CAAC,EAC/DvB,GAAa,IAAGA,EAAY,KAG5BsB,EAAI,QAAUtB,GACd7vB,EAAQ,EACR6vB,EAAYsB,EAAI,SAGhBtB,EAAY,KAAK,KAAKsB,EAAI,OAASC,CAAa,EAChDpxB,EAAQoxB,GAGZ,IAAMzpB,GAAK,OAAO,KAAK,IAAI,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,CAAC,CAAC,GAC7DqnB,GAAS,CAAC,EAChB,QAAStyB,GAAI,EAAGA,GAAIsD,EAAOtD,KAAK,CAC5B,IAAMqzB,GAAMrzB,GAAI,EACVszB,GAAOmB,EAAI,MAAMz0B,GAAImzB,GAAYnzB,GAAI,GAAKmzB,CAAS,EAEzDb,GAAO,KAAKgB,EAAI,CACpB,CAGA,IAAMd,GADa,OAAO,OAAW,MAAkB,OAAO,YAAc,IAAM,KACtD,IAAM,IAClC,GAAI,OAAO,gBAAkBF,GAAO,OAAS,EAAG,CAC5C,IAAMqC,GAAW,MAAM,OAAO,eAAerC,GAAO,CAAC,EAAG,CAAE,qBAAsB,IAAK,KAAME,GAAS,OAAQ,CAAE,CAAC,EAC3GmC,IAAU3O,GAAa2O,EAAQ,CACvC,CAEA,GAAI,CAAMxC,EAAe,SAAWA,EAAe,QAAQ,OAAS,cAAcA,EAAe,QAAQ,KAAK,CAAK,MAAQ,CAAC,CAC5HA,EAAe,QAAU,CAAE,MAAO,KAAM,OAAAG,GAAQ,IAAK,EAAG,OAAQ,EAAK,EACrEN,GAAiBM,GAAO,MAAM,EAC9BL,GAAgB,CAAC,EACjBC,GAAgB,EAAK,EAErB,IAAM0C,GAAa,IACnBzC,EAAe,QAAQ,MAAQ,YAAYM,GAAkBmC,EAAU,EAGvE,GAAI,CAAEltB,EAAc,EAAI,CAAG,MAAQ,CAAC,CACxC,KAAO,CAEH,MAAMqrB,GAAerE,CAAM,EAC3B,GAAI,CAAEhnB,EAAc,EAAI,CAAG,MAAQ,CAAC,CACxC,CACJ,OAASlI,EAAG,CACR,QAAQ,KAAK,+BAAgCA,CAAC,CAClD,CAMI,OAAOgJ,IAAsB,YAC7BA,GAAkB,EAIOlC,GAAS,OAAO5I,GAC7CA,EAAE,OAAS,WACVA,EAAE,QAAQ,SAAS4C,EAAE,sBAAsB,CAAC,GAAK5C,EAAE,QAAQ,SAAS4C,EAAE,sBAAsB,CAAC,EAClG,EAE6B,SAAW,IACpCqkB,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,0BAA0B,EACrC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEFqkB,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,mBAAmB,EAC9B,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,GAKG,OAAO,oBACRyqB,GAAoB,EAAE,MAAM,QAAQ,KAAK,CAEjD,OAAS3G,EAAO,CACZ,QAAQ,MAAM,+BAAgCA,CAAK,EACnDO,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,oCAAoC4iB,EAAM,OAAO,GAC1D,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,CACN,CACR,OAASA,EAAO,CACZ,QAAQ,MAAM,+BAAgCA,CAAK,EACnDO,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,gCAAgC4iB,EAAM,OAAO,GACtD,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,CACN,CACJ,EAEM6Q,GAAgB,SAAY,CAC9B,GAAI,CACA,GAAI,CAAChuB,GAAY,KAAK,EAAG,CACrB0d,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,kBAAkB,EAC7B,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EACF,MACJ,CAEA,GAAI,CACAqkB,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,yBAAyB,EACpC,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEF,IAAIouB,EACJ,GAAI,CAEA,GAAI,OAAO,OAAO,kBAAqB,WAAY,CAC/C,IAAMwG,EAAY,OAAO,iBAAiBjuB,GAAY,KAAK,CAAC,EAC5DynB,EAAU,OAAOwG,GAAc,SAAY,KAAK,MAAMA,CAAS,EAAIA,CACvE,KAAO,CACH,IAAMJ,EAAW,OAAO,OAAO,oBAAuB,WAAc,OAAO,mBAAmB7tB,GAAY,KAAK,CAAC,EAAIA,GAAY,KAAK,EACrIynB,EAAS,KAAK,MAAMoG,CAAO,CAC/B,CACJ,OAASC,EAAY,CACjB,MAAM,IAAI,MAAM,4BAA4BA,EAAW,OAAO,EAAE,CACpE,CAEI,GAAI,CAACrG,GAAU,OAAOA,GAAW,SAC7B,MAAM,IAAI,MAAM,gCAAgC,EAIpD,IAAMyG,EAAazG,EAAO,GAAKA,EAAO,KACtC,GAAI,CAACyG,GAAeA,IAAe,UAAYA,IAAe,yBAC1D,MAAM,IAAI,MAAM,kEAAkE,EAGtF,MAAMpsB,GAAiB,QAAQ,mBAAmB2lB,CAAM,EAGpD7F,IACIC,GAAkB,IAAI,EACtBnE,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC9B,QAAS,2CACL,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,GAGVmjB,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASlB,EAAE,iBAAiB,EAC5B,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAGG,OAAO,oBACRyqB,GAAoB,EAAE,MAAM,QAAQ,KAAK,CAEjD,OAAS3G,EAAO,CACZ,QAAQ,MAAM,oCAAqCA,CAAK,EAGxD,IAAIwI,EAAetsB,EAAE,gBAAgB,EACjC8jB,EAAM,QAAQ,SAAS,2BAA2B,EAC9CA,EAAM,QAAQ,SAAS,2BAA2B,EAClDwI,EAAetsB,EAAE,mBAAmB,EAC7B8jB,EAAM,QAAQ,SAAS,4BAA4B,EAC1DwI,EAAetsB,EAAE,uBAAuB,EAExCssB,EAAetsB,EAAE,wBAAwB,EAEtC8jB,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC3EwI,EAAetsB,EAAE,sBAAsB,EAChC8jB,EAAM,QAAQ,SAAS,MAAM,GAAKA,EAAM,QAAQ,SAAS,WAAW,EAC3EwI,EAAetsB,EAAE,oBAAoB,EAC9B8jB,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC3EwI,EAAetsB,EAAE,oBAAoB,EAErCssB,EAAe,IAAIxI,EAAM,OAAO,GAGpCO,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASorB,EACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,EACpB,gBAAiB,EACrB,CAAC,CAAC,EAEE,CAACxI,EAAM,QAAQ,SAAS,SAAS,GAAK,CAACA,EAAM,QAAQ,SAAS,QAAQ,IACtE0E,GAAkB,IAAI,EACtBF,EAAmB,CAAC,GAGxB9D,GAAoB,QAAQ,CAEhC,CACR,OAASV,EAAO,CACZ,QAAQ,MAAM,oCAAqCA,CAAK,EAExD,IAAIwI,EAAetsB,EAAE,gBAAgB,EACjC8jB,EAAM,QAAQ,SAAS,2BAA2B,EAC9CA,EAAM,QAAQ,SAAS,2BAA2B,EAClDwI,EAAetsB,EAAE,mBAAmB,EAC7B8jB,EAAM,QAAQ,SAAS,4BAA4B,EAC1DwI,EAAetsB,EAAE,uBAAuB,EAExCssB,EAAetsB,EAAE,wBAAwB,EAEtC8jB,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC3EwI,EAAetsB,EAAE,sBAAsB,EAChC8jB,EAAM,QAAQ,SAAS,MAAM,GAAKA,EAAM,QAAQ,SAAS,WAAW,EAC3EwI,EAAetsB,EAAE,oBAAoB,EAC9B8jB,EAAM,QAAQ,SAAS,SAAS,GAAKA,EAAM,QAAQ,SAAS,QAAQ,EAC3EwI,EAAetsB,EAAE,oBAAoB,EAErCssB,EAAe,GAAGxI,EAAM,OAAO,GAGnCO,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAASorB,EACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,EACpB,gBAAiB,EACrB,CAAC,CAAC,EAEE,CAACxI,EAAM,QAAQ,SAAS,SAAS,GAAK,CAACA,EAAM,QAAQ,SAAS,QAAQ,IACtE0E,GAAkB,IAAI,EACtBF,EAAmB,CAAC,GAGxB9D,GAAoB,QAAQ,CAChC,CACJ,EAEMsQ,GAAyB,MAAO/pB,EAAUgqB,EAAU,KAAS,CAC/D,GAAIA,EAAS,CACTtsB,GAAiB,QAAQ,oBAAoBsC,CAAQ,EAErD8Z,EAA8B,EAAI,EAGlC,GAAI,CACA,GAAI,OAAO,yBAA2Bpc,GAAiB,SAAW,CAACN,GAA2B,QAAS,CACnG,IAAMgD,EAAc,IAAI,OAAO,wBAAwB1C,GAAiB,OAAO,EAC/E,MAAM0C,EAAY,KAAK,EAGvBhD,GAA2B,QAAUgD,EAItBA,EAAY,UAAU,EAC1B,aAAe,UACtBkZ,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,kFACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAEFmjB,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,wFACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,CAEV,MAAWiH,GAA2B,OAI1C,OAAS2b,EAAO,CACZ,QAAQ,KAAK,sCAAuCA,CAAK,CAE7D,CACJ,MACIO,GAAYnjB,GAAQ,CAAC,GAAGA,EAAM,CAC1B,QAAS,oEACT,KAAM,SACN,GAAI,KAAK,IAAI,EACb,UAAW,KAAK,IAAI,CACxB,CAAC,CAAC,EAGF2jB,EAA8B,EAAK,EACnCC,GAA+B,EAAK,EACpCC,GAA8B,EAAK,EACnCU,EAAoB,EAAK,EACzBd,GAAoB,EAAE,EAGtBH,GAAoB,cAAc,EAClCa,GAAa,EAAE,EACfC,GAAc,EAAE,EAChB5e,GAAc,EAAE,EAChBE,GAAe,EAAE,EACjB2e,GAAiB,EAAK,EACtBC,GAAkB,EAAK,EACvBf,GAAkB,EAAE,EACpB2D,GAAiB,IAAI,EACrBxD,GAAc,EAAK,EACnBP,GAAY,CAAC,CAAC,EAEdiE,EAAmB,CAAC,EACpBE,GAAkB,IAAI,EAGtB,SAAS,cAAc,IAAI,YAAY,cAAc,CAAC,EAEtDwM,GAAiB,CAEzB,EAEMC,GAAoB,SAAY,CAKlC,GAJI,CAAChf,GAAa,KAAK,GAInB,CAACxN,GAAiB,QAClB,OAGJ,IAAMysB,EAAgBjf,GAAa,KAAK,EAClCkf,EAAW,KAAK,KAAK,IAAI,EAAE,SAAS,EAAE,CAAC,IAAI,KAAK,OAAO,EAAE,SAAS,EAAE,EAAE,MAAM,EAAG,CAAC,CAAC,GAejFpP,EAAMtd,GAAiB,QACvB2sB,EAAgBrP,GAAK,cAAc,IAAM,IACxCA,GAAK,iBAAiB,IAAM,GACnC,GAAI,CAACqP,GAAiBrP,GAAK,YAAa,CAGpC,IAAMsP,EAAa3e,GAAW,QAAUwe,EAAgB,QAAUA,EAC5DI,EAAQ,KAAK,IAAI,EACjBC,EAAU,CAAE,IAAKJ,EAAU,GAAIG,CAAM,EACvC1e,KAAgB2e,EAAQ,KAAO,GAAMA,EAAQ,QAAUrxB,IACvD6S,GAAe,IAAGwe,EAAQ,IAAMxe,IACpC,IAAMye,EAAW,CAAE,IAAKL,EAAU,OAAQ,OAAQ,UAAWG,CAAM,EAC/Dve,GAAe,IAAGye,EAAS,UAAYF,EAAQve,GAAe,KAClEuS,GAAyB+L,EAAY,OAAQG,CAAQ,EAGrD,IAAMtL,EAAIzJ,EAAU,QAAQ,IAAIJ,EAAY,OAAO,EAC/C6J,GAAGA,EAAE,SAAS,KAAK,CAAE,QAASmL,EAAY,KAAME,EAAS,IAAKJ,CAAS,CAAC,EAC5Ejf,GAAgB,EAAE,EACdQ,IAAUC,GAAY,EAAK,EAC3BC,IAAcC,GAAgB,EAAK,EACvC,MACJ,CAKA,GAAI,CAACue,EAAe,CAChB9L,GAAyBtpB,EAAE,oBAAoB,EAAG,QAAQ,EAC1D,MACJ,CAEA,GAAI,CACA,IAAMy1B,EAAWP,EAGXQ,EAAUhf,GAAW,QAAU+e,EAAW,QAAUA,EAIpD1xB,EAAMoxB,EACNrvB,EAAO,CAAE,IAAA/B,EAAK,GAAI,KAAK,IAAI,CAAE,EAC/B6S,KACA9Q,EAAK,KAAO,GACZA,EAAK,QAAU5B,IAEf6S,GAAe,IAAGjR,EAAK,IAAMiR,IAMjC,IAAM4e,EAAY,CAAE,IAAA5xB,EAAK,OAAQ,SAAU,EACvCgT,GAAe,IAAG4e,EAAU,UAAY,KAAK,IAAI,EAAI5e,GAAe,KACxEuS,GAAyBoM,EAAS,OAAQC,CAAS,EAEnD,GAAI,CACA,MAAMltB,GAAiB,QAAQ,YAAYitB,EAAS5vB,CAAI,EAIxD6jB,GAAoB5lB,EAAK,WAAW,CACxC,OAAS6xB,GAAS,CACd,MAAAjM,GAAoB5lB,EAAK,QAAQ,EAC3B6xB,EACV,CACA1f,GAAgB,EAAE,EAEdQ,IAAUC,GAAY,EAAK,EAC3BC,IAAcC,GAAgB,EAAK,CAC3C,OAASiN,EAAO,CACZ,IAAM1J,EAAM,OAAO0J,GAAO,SAAWA,CAAK,EACrC,6CAA6C,KAAK1J,CAAG,GACtDkP,GAAyB,kBAAkBlP,CAAG,GAAG,QAAQ,CAEjE,CACJ,EAMMyb,GAAkB,MAAO9a,EAAM7c,EAAKC,IAAS,CAC/C,GAAI,CAAC4c,GAAQ,CAACtS,GAAiB,QAAS,OAKxC,IAAMqtB,EAAU,OAAO/a,EAAK,MAAQ,EAAE,EAAE,YAAY,EAChDgb,EAAO,YACPD,EAAQ,WAAW,YAAY,EAAGC,EAAO,aACpCD,EAAQ,WAAW,WAAW,GAAKA,EAAQ,WAAW,aAAa,EAAGC,EAAO,YAC7ED,EAAQ,WAAW,WAAW,IAAGC,EAAO,aACjD,IAAMC,EAAMD,IAAS,YAAc,MAASA,IAAS,YAAc,MAASA,IAAS,aAAe,OAAS,MACvGE,EAAO,IAAI,KAAK,CAAClb,CAAI,EAAG,iBAAiBib,CAAG,GAAI,CAAE,KAAMD,CAAK,CAAC,EAGhEG,EAAW,KACf,GAAI,CAAEA,EAAW,IAAI,gBAAgBnb,CAAI,CAAG,MAAY,CAAC,CAEzD,IAAMob,EAAe1tB,GAAiB,SAAS,iBAAiB,IAAM,GAOtE,GADiB0tB,GAAgB1tB,GAAiB,SAAS,cAAc,IAAM,GACjE,CACV,GAAIytB,EAAY,GAAI,CAAE,IAAI,gBAAgBA,CAAQ,CAAG,MAAY,CAAC,CAClE5M,GACI6M,EACMn2B,EAAE,oBAAoB,EACtBA,EAAE,0BAA0B,EAClC,QACJ,EACA,MACJ,CAEA,IAAMo2B,GAAY,CACd,IAAK,KAAK,IAAI,EAAG,KAAK,MAAMl4B,GAAO,CAAC,CAAC,EACrC,KAAM,MAAM,QAAQC,CAAI,EAAIA,EAAK,IAAItB,IAAK,KAAK,MAAMA,GAAI,GAAI,EAAI,GAAI,EAAI,CAAC,CAC9E,EAEMw5B,GAAU/M,GAAyB,GAAI,OAAQ,CACjD,MAAO,CAAE,IAAK8M,GAAU,IAAK,KAAMA,GAAU,KAAM,IAAKF,EAAU,SAAU,CAAE,IAAK,KAAM,IAAK,CAAE,CAAE,CACtG,CAAC,EAED,GAAI,CACA,MAAMztB,GAAiB,QAAQ,SAASwtB,EAAM,CAAE,MAAOG,GAAW,KAAMC,EAAQ,CAAC,EACjFzM,GAAiByM,GAAUj5B,KAAO,CAAE,MAAO,CAAE,GAAIA,GAAE,OAAS,CAAC,EAAI,SAAU,IAAK,CAAE,EAAE,CACxF,OAAS2B,GAAK,CACV6qB,GAAiByM,GAAUj5B,KAAO,CAAE,MAAO,CAAE,GAAIA,GAAE,OAAS,CAAC,EAAI,SAAU,KAAM,MAAO,EAAK,CAAE,EAAE,EACjG,IAAMgd,GAAM,OAAOrb,IAAK,SAAWA,EAAG,EACjC,6CAA6C,KAAKqb,EAAG,GACtDkP,GAAyB,yBAAyBlP,EAAG,GAAI,QAAQ,CAEzE,CACJ,EAGMkc,GAAsB,MAAM,YAAavyB,GAAQ,CACnD,GAAKA,EACL,CAAAsgB,GAAYnjB,GAAQA,EAAK,OAAO9D,GAAK,OAAOA,EAAE,GAAG,IAAM,OAAO2G,CAAG,CAAC,CAAC,EACnE,GAAI,CAAE0E,GAAiB,SAAS,oBAAoB,OAAO1E,CAAG,CAAC,CAAG,MAAY,CAAC,EACnF,EAAG,CAAC,CAAC,EAICwyB,GAAsB,MAAM,YAAa5rB,GAAO,CAClD0Z,GAAYnjB,GAAQA,EAAK,IAAI9D,GAAKA,EAAE,KAAOuN,EAAK,CAAE,GAAGvN,EAAG,QAAS,GAAM,QAAS,GAAI,UAAW,MAAU,EAAIA,CAAC,CAAC,CACnH,EAAG,CAAC,CAAC,EAGCgsB,GAAkB,IAAM,CAC1B/D,GAAa,EAAE,EACfC,GAAc,EAAE,EAChB5e,GAAc,EAAE,EAChBE,GAAe,EAAE,EACjB2e,GAAiB,EAAK,EACtBld,GAAoB,EAAK,EAEpB2gB,GAAyB,GAC1BxD,GAAkB,EAAK,EAG3BC,EAAoB,EAAK,EACzBre,EAAc,EAAK,EACnBC,GAAiB,EAAK,EACtBC,GAAsB,EAAK,EAE3BkrB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,EAExExJ,GAAyB,GAC1BtD,GAAa,EAAE,EAGnBf,GAAoB,EAAE,EACtBC,GAAc,EAAK,EACnBH,GAAkB,EAAE,EACpB2D,GAAiB,IAAI,EACrB5D,GAAoB,cAAc,EAClCH,GAAY,CAAC,CAAC,EACdnO,GAAgB,EAAE,EAGlB2O,EAA8B,EAAK,EACnCC,GAA+B,EAAK,EACpCC,GAA8B,EAAK,EAI/B,OAAO,QAAQ,OAAU,YACzB,QAAQ,MAAM,EAIlBuD,EAAmB,CAAC,EAEpBE,GAAkB,IAAI,EACtB,SAAS,cAAc,IAAI,YAAY,iBAAiB,CAAC,CAE7D,EAEMgO,GAAyB,MAAM,YAAY,MAAOxM,EAAQyM,IAAa,CACzE,GAAI,CACIA,EACA,MAAMhuB,GAAiB,SAAS,mBAAmBuhB,CAAM,EAEzD,MAAMvhB,GAAiB,SAAS,mBAAmBuhB,CAAM,CAEjE,QAAE,CACEhF,GAAwB9jB,GAAQA,EAAK,OAAOyrB,GAAKA,EAAE,SAAW3C,CAAM,CAAC,CACzE,CACJ,EAAG,CAAC,CAAC,EAMCgL,GAAmB,IAAM,CAC3B,GAAI,CACA,IAAMrqB,EAAK0V,EAAY,QACvBqW,GAAoB,EACpBpO,EAAmB,CAAC,EAEpB,SAAS,cAAc,IAAI,YAAY,iBAAiB,CAAC,EACzD,SAAS,cAAc,IAAI,YAAY,cAAc,CAAC,EACtD,SAAS,cAAc,IAAI,YAAY,kBAAmB,CACtD,OAAQ,CAAE,UAAW,KAAK,IAAI,EAAG,OAAQ,mBAAoB,CACjE,CAAC,CAAC,EAIFyD,GAAephB,CAAE,EACb,OAAO,QAAQ,OAAU,YAAY,QAAQ,MAAM,CAC3D,OAASmZ,EAAO,CACZ,QAAQ,MAAM,2BAA4BA,CAAK,CACnD,CACJ,EAEM6S,GAA0BnI,GAAY,CACxC,IAAI5qB,EACA4qB,EAAQ,OAAS,OACjB5qB,EAAU,qEAEVA,EAAU,yEAGd0lB,GAAyB1lB,EAAS,QAAQ,CAE9C,EAMMgzB,GAAoB,MAAM,OAAOtwB,EAAgB,EACvD,MAAM,UAAU,IAAM,CAClB,IAAMuwB,EAAUD,GAAkB,UAAY,eAC9CA,GAAkB,QAAUtwB,GACxBA,KAAqB,aAAegQ,IAAc,CAACugB,GACnDvN,GAAyB,mKAAoK,QAAQ,CAE7M,EAAG,CAAChjB,GAAkBgQ,EAAU,CAAC,EAejC,IAAMwgB,GAAc,MAAM,QAAQ,IAAM,CACpC,GAAI,CAAE,OAAO,IAAI,gBAAgB,OAAO,SAAS,MAAM,EAAE,IAAI,SAAS,IAAM,MAAQ,MAC9E,CAAE,MAAO,EAAO,CAC1B,EAAG,CAAC,CAAC,EAECC,IAA0BzwB,KAAqB,aAAeA,KAAqB,YAAcA,KAAqB,iBAAmBgQ,GAMzI0gB,GAAc,MAAM,OAAO,CAAE,GAAI5W,EAAiB,KAAM2W,EAAuB,CAAC,EACtF,MAAM,UAAU,IAAM,CAClB,IAAM71B,EAAO81B,GAAY,QACzBA,GAAY,QAAU,CAAE,GAAI5W,EAAiB,KAAM2W,EAAuB,EACtE71B,EAAK,MAAQ,CAAC61B,IAA0B71B,EAAK,KAAOkf,GAAiBsW,GAAoB,CACjG,EAAG,CAACK,GAAwB3W,CAAe,CAAC,EAI5C,MAAM,UAAU,KACZ,SAAS,KAAK,UAAU,OAAO,aAAc2W,IAA0BD,EAAW,EAC3E,IAAM,SAAS,KAAK,UAAU,OAAO,YAAY,GACzD,CAACC,GAAwBD,EAAW,CAAC,EAExC,MAAM,UAAU,IAAM,CAEdC,IAA0BxO,GAAkBjiB,KAAqB,WAC7DkiB,GAAkB,IAAI,EAC1BF,EAAmB,CAAC,EACpBgB,GAAyB,4CAA6C,QAAQ,EAEtF,EAAG,CAACyN,GAAwBxO,EAAgBjiB,EAAgB,CAAC,EAG7D,MAAM,UAAU,IAAM,CAClB,GAAIyhB,IAAsB,OAAO,YAAa,CAC1C,IAAMkP,EAAc,IAAI,OAAO,YAAY,WAAW,EAChDC,EAAS,CACX,IAAK,EAET,EAEIC,EAAa,GAEjB,OAAAF,EAAY,MACR,CAAE,WAAY,aAAc,EAC5BC,EACA,CAACE,EAAaC,IAAkB,CAC5B,GAAI,CAACF,EAAY,CACb,QAAQ,IAAI,gCAAgC,EAC5C,MACJ,CAEA,QAAQ,IAAI,mBAAoBC,CAAW,EAC3C,QAAQ,IAAI,wBAAyB5E,EAAkB,OAAO,EAE9DY,GAAagE,CAAW,EAAE,KAAME,GAAY,CAExC,GADA,QAAQ,IAAI,kBAAmBA,CAAO,EAClCA,EAAS,CAET,QAAQ,IAAI,2BAA2B,EACvCH,EAAa,GAGb,GAAI,CACA,QAAQ,IAAI,qBAAqB,EACjCF,EAAY,KAAK,EAAE,KAAK,IAAM,CAC1B,QAAQ,IAAI,8BAA8B,EAC1CA,EAAY,MAAM,EAClB3vB,GAAsB,EAAK,CAC/B,CAAC,EAAE,MAAOvI,GAAQ,CACd,QAAQ,IAAI,0BAA2BA,CAAG,EAE1C,GAAI,CACAk4B,EAAY,MAAM,CACtB,OAASM,EAAU,CACf,QAAQ,IAAI,0BAA2BA,CAAQ,CACnD,CACAjwB,GAAsB,EAAK,CAC/B,CAAC,CACL,OAASvI,EAAK,CACV,QAAQ,IAAI,4BAA6BA,CAAG,EAC5CuI,GAAsB,EAAK,CAC/B,CACJ,MACI,QAAQ,IAAI,uCAAuC,CAE3D,CAAC,EAAE,MAAOwc,GAAU,CAChB,QAAQ,MAAM,4BAA6BA,CAAK,CAEpD,CAAC,CACL,EACCA,GAAU,CAEHqT,GACA,QAAQ,IAAI,2BAA4BrT,CAAK,CAErD,CACJ,EAAE,MAAO/kB,GAAQ,CACb,QAAQ,MAAM,0BAA2BA,CAAG,EAE5CuI,GAAsB,EAAK,CAC/B,CAAC,EAEM,IAAM,CACT6vB,EAAa,GACb,GAAI,CAEAF,EAAY,KAAK,EAAE,KAAK,IAAM,CAC1BA,EAAY,MAAM,CACtB,CAAC,EAAE,MAAOl4B,GAAQ,CAEd,QAAQ,IAAI,6CAA8CA,CAAG,EAC7D,GAAI,CACAk4B,EAAY,MAAM,CACtB,OAASM,EAAU,CACf,QAAQ,IAAI,qCAAsCA,CAAQ,CAC9D,CACJ,CAAC,CACL,OAASx4B,EAAK,CACV,QAAQ,IAAI,oBAAqBA,CAAG,EAEpC,GAAI,CACAk4B,EAAY,MAAM,CACtB,OAASM,EAAU,CACf,QAAQ,IAAI,qCAAsCA,CAAQ,CAC9D,CACJ,CACJ,CACJ,CACJ,EAAG,CAACxP,GAAoBC,EAAa,CAAC,EAEtC,IAAMwP,GAAeC,GAAiBzX,CAAa,EAC7C0X,GAAaC,GAAehX,CAAW,EASvCiX,GAAc5X,EAAc,MAAM,OAAS,GAAKW,EAAY,MAAM,OAAS,GAAKX,EAAc,MAAM,KAAMrV,GAAO,CACnH,IAAM5N,EAAIijB,EAAc,SAASrV,CAAE,EACnC,OAAO5N,GAAKA,EAAE,KAAOA,EAAE,IAAI,UAC/B,CAAC,EAgBD,GAAI+5B,GAAa,CACb,IAAMe,EAAkB,CACpB,CAAE,QAAS,6CAAyC,KAAM,SAAU,GAAI,EAAG,UAAW,KAAK,IAAI,EAAI,GAAO,EAC1G,CAAE,QAAS,0FAA2F,KAAM,WAAY,GAAI,EAAG,UAAW,KAAK,IAAI,EAAI,IAAO,EAC9J,CAAE,QAAS,iEAAkE,KAAM,OAAQ,GAAI,EAAG,UAAW,KAAK,IAAI,EAAI,IAAO,EACjI,GAAG,MAAM,KAAK,CAAE,OAAQ,EAAG,EAAG,CAAC7oB,EAAGtP,KAAO,CACrC,QAAS,mBAAqBA,EAAI,GAAK,kDACvC,KAAMA,EAAI,EAAI,OAAS,WACvB,GAAI,GAAKA,EACT,UAAW,KAAK,IAAI,GAAK,GAAKA,GAAK,GACvC,EAAE,CACN,EACMo4B,EAAO,IAAM,CAAC,EACpB,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAW,0BACX,MAAO,CAAE,QAAS,OAAQ,cAAe,MAAO,OAAQ,QAAS,MAAO,OAAQ,SAAU,QAAS,CACvG,EAAG,CACC,MAAM,cAAcxc,GAAiB,CACjC,IAAK,UACL,MAAO,CAAC,CAAE,GAAI,UAAW,MAAO,eAAgB,OAAQ,EAAG,OAAQ,GAAM,SAAU,EAAK,CAAC,EACzF,UAAW0R,GAAkB,WAAYE,GACzC,iBAAkB,IAAMD,GAAoBhvB,GAAK,CAACA,CAAC,EACnD,SAAU65B,EAAM,UAAWA,EAAM,SAAUA,EAC3C,cAAe,IAAM3K,GAAqB,EAAK,EAC/C,SAAUjR,GAAU,YAAa8J,EACrC,CAAC,EACD,MAAM,cAAc,SAAU,CAC1B,IAAK,SAAU,UAAW,YAC1B,QAAS,IAAMmH,GAAqB,EAAI,EACxC,MAAO,CAAE,QAAS,OAAQ,SAAU,QAAS,IAAK,uCAAwC,iBAAkB,OAAQ,OAAQ,GAAI,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,SAAU,OAAQ,qCAAsC,WAAY,8BAA+B,MAAO,mBAAoB,OAAQ,SAAU,EACjV,wBAAyB,CAAE,OAAQ9R,GAAO,MAAO,CACrD,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,MAAO,UAAW,wBACvB,MAAO,CAAE,KAAM,EAAG,SAAU,EAAG,OAAQ,QAAS,SAAU,SAAU,QAAS,OAAQ,cAAe,QAAS,CACjH,EAAG,MAAM,cAAc,OAAQ,CAAE,IAAK,MAAO,EACzC,MAAM,cAAcrF,GAAuB,CACvC,MAAO,eAAgB,UAAW,GAAO,aAAc,YACvD,cAAe8hB,EACf,SAAUD,EACV,aAAc5hB,GAAc,gBAAiBC,GAC7C,cAAe4hB,EAAM,YAAaA,EAAM,aAAcA,EACtD,eAAgB,UAAW,WAAY,GACvC,gBAAiBxmB,GAAiB,eAAgBwmB,EAClD,cAAe,KAAM,OAAQ,YAC7B,qBAAsB,CAAC,EAAG,mBAAoBA,EAC9C,SAAUphB,GAAU,YAAaC,GACjC,aAAcC,GAAc,gBAAiBC,GAC7C,YAAa3S,GAAa,eAAgB4S,GAC1C,aAAcC,GAAc,gBAAiBC,GAC7C,QAAS3S,GAAS,gBAAiByzB,EAAM,gBAAiBA,CAC9D,CAAC,CACL,CAAC,CACL,CAAC,CACL,CAEA,OAAO,MAAM,cAAc,MAAO,CAC9B,UAAWF,GAAc,0BAA4B,aAOrD,MAAOA,GAAc,CAAE,QAAS,OAAQ,cAAe,MAAO,OAAQ,QAAS,MAAO,OAAQ,SAAU,QAAS,EAAI,CAAE,UAAW,OAAQ,CAC9I,EAAG,CACCA,IAAe,MAAM,cAActc,GAAiB,CAChD,IAAK,mBACL,MAAOkc,GACP,OAAQE,GACR,UAAW1K,GACX,WAAYE,GACZ,iBAAkB,IAAMD,GAAoBhvB,GAAK,CAACA,CAAC,EAGnD,SAAW0M,GAAO,CAAEiW,EAAe,CAAE,KAAMsC,GAAG,iBAAkB,GAAI,IAAK,CAAC,EAAGkK,GAAoBziB,CAAE,CAAG,EACtG,cAAe+jB,GACf,UAAWrB,GACX,WAAY,IAAM,CAAE/L,GAAmB,EAAI,EAAG6L,GAAqB,EAAK,CAAG,EAC3E,SAAUG,GACV,cAAe,IAAMH,GAAqB,EAAK,EAC/C,SAAUjR,GACV,YAAa8J,EACjB,CAAC,EAED3E,IAAmB,MAAM,cAAc0W,GAAkB,CACrD,IAAK,eACL,WAAYtJ,GACZ,UAAWlmB,GACX,SAAUomB,GACV,SAAU,IAAMrN,GAAmB,EAAK,CAC5C,CAAC,EACDG,GAAiB,MAAM,cAAcuW,GAAkB,CACnD,IAAK,eACL,OAAQ,CACJ,KAAMvW,EAAc,KACpB,UAAWzB,EAAc,SAASyB,EAAc,SAAS,GAAG,WAAa,oBAC7E,EACA,SAAUsN,GACV,UAAW,IAAMrN,EAAiB,IAAI,CAC1C,CAAC,EACDC,GAAc,MAAM,cAAcsW,GAAiB,CAC/C,IAAK,cACL,QAAStW,EACT,UAAW,IAAMC,EAAc,IAAI,CACvC,CAAC,EACAC,GAAkBZ,GAAgB,MAAM,cAAciX,GAAiB,CACpE,IAAK,cACL,WAAYzI,GACZ,UAAW,KAAK,IAAI,EAAG5L,EAAa,YAAc5C,EAAY,QAAQ,MAAM,EAC5E,MAAO0O,GACP,SAAU,IAAM7N,EAAkB,EAAK,CAC3C,CAAC,EACAP,IAAiBN,GAAgB,MAAM,cAAckX,GAAe,CACjE,IAAK,YACL,MAAOlX,EACP,UAAW+N,GACX,SAAU,IAAM,CAGR/N,EAAY,QAAUqN,EAAY,MAAO9M,EAAiB,EAAK,EAC9DyN,GAAahO,EAAY,EAAE,CACpC,CACJ,CAAC,EAED2W,IAAe,MAAM,cAAc,SAAU,CACzC,IAAK,YACL,UAAW,YACX,QAAS,IAAMzK,GAAqB,EAAI,EACxC,MAAO,CAAE,QAAS,OAAQ,SAAU,QAAS,IAAK,uCAAwC,iBAAkB,OAAQ,OAAQ,GAAI,MAAO,OAAQ,OAAQ,OAAQ,aAAc,OAAQ,WAAY,SAAU,OAAQ,qCAAsC,WAAY,8BAA+B,MAAO,mBAAoB,OAAQ,SAAU,EACjV,wBAAyB,CAAE,OAAQ9R,GAAO,MAAO,CACrD,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,aACL,UAAWuc,GAAc,wBAA0B,0BACnD,MAAOA,GAAc,CAAE,KAAM,EAAG,SAAU,EAAG,OAAQ,QAAS,SAAU,SAAU,QAAS,OAAQ,cAAe,QAAS,EAAI,CAAC,CACpI,EAAG,CAMF,CAACb,IAA0B,CAACa,IAAe,OAAO,uBAA0B,MAAM,cAAc,OAAO,sBAAuB,CAC3H,IAAK,SACL,OAAQtxB,GACR,YAAa+P,GACb,iBAAkBtP,GAClB,aAAciuB,GACd,YAAa+B,GACb,cAAe5O,GAEf,cAAe1f,GAAiB,OACpC,CAAC,EAKA,CAACsuB,IAA0B,CAACa,IAAgB,MAAM,cAAcQ,GAAoB,CAAE,IAAK,cAAe,CAAC,EAK5GnX,GAAe,MAAM,cAAc,OAAQ,CACvC,IAAK,aACL,MAAO,CAAE,KAAM,EAAG,UAAW,EAAG,QAAS,OAAQ,cAAe,QAAS,CAC7E,EAAG,MAAM,cAAcoX,GAAe,CAClC,MAAOpX,EACP,MAAOE,EACP,SAAUC,GACV,OAAQgO,GACR,QAAS,IAAMH,GAAahO,EAAY,EAAE,EAC1C,eAAgB2O,GAChB,aAAc,IAAM9N,EAAkB,EAAI,EAC1C,QAASb,EAAY,QACrB,UAAWc,EACX,YAAaqO,GACb,WAAY,CAAC,CAACpO,GAAef,EAAY,EAAE,EAI3C,aAAc,IAAM,CAChB,IAAM8O,EAAO/N,GAAef,EAAY,EAAE,GAAK,KAE/C,GADI,CAAC8O,GACD,CAACA,EAAK,QAAU1N,GAAepB,EAAY,EAAE,IAAM8O,EAAK,OAAQ,OAAO,KAC3E,IAAMZ,EAAQjN,GAAoBjB,EAAY,EAAE,GAAK,KACrD,OAAO,MAAM,cAAcqX,GAAa,CACpC,IAAK,aACL,KAAAvI,EACA,MAAAZ,EACA,UAAWlO,EAAY,KACvB,YAAamB,EAAkB,QAAQ,IAAInB,EAAY,EAAE,GAAG,eAAe,GAAK,KAChF,gBAAkByM,GAAOtL,EAAkB,QAAQ,IAAInB,EAAY,EAAE,GAAG,gBAAgByM,CAAE,GAAK,KAC/F,OAAQ6C,GACR,UAAWC,GACX,QAASC,GACT,YAAaE,GACb,eAAgBC,GAChB,aAAcC,EAClB,CAAC,CACL,GAAG,CACP,CAAC,CAAC,EAEF,CAAC5P,GAAe,MAAM,cAAc,OAAQ,CACxC,IAAK,MACT,EAEe8V,GAGI,MAAM,cAAc/gB,GAAuB,CAC9C,MAAO/G,EAASA,EAAO,UAAY,GACnC,UAAWyE,GACX,aAAczE,EAASA,EAAO,aAAe,KAC7C,cAAgBlP,GAAU,CAAMqgB,GAAiBH,EAAS,CAAE,KAAMsE,EAAG,OAAQ,GAAInE,EAAiB,MAAArgB,CAAM,CAAC,CAAG,EAC5G,SAAUiG,GACV,aAAciQ,GACd,gBAAiBC,GACjB,cAAe+e,GACf,YAAaY,GACb,aAAcb,GACd,eAAgB3e,GAChB,WAAYC,GACZ,gBAAiBhF,GACjB,eAAgBiF,GAChB,cAAe9N,GAAiB,QAChC,OAAQnC,GACR,qBAAsBkQ,GACtB,mBAAoBggB,GAEpB,SAAU9f,GACV,YAAaC,GACb,aAAcC,GACd,gBAAiBC,GACjB,YAAa3S,GACb,eAAgB4S,GAChB,aAAcC,GACd,gBAAiBC,GACjB,QAAS3S,GACT,gBAAiBiyB,GACjB,gBAAiBC,EACrB,CAAC,EAEH,MAAM,cAAcxwB,GAAyB,CAC3C,cAAeuC,GACf,eAAgBisB,GAChB,UAAWI,GACX,YAAavL,GACb,mBAAoB0L,GACpB,iBAAkBxuB,GAClB,UAAWC,GACX,WAAYC,GACZ,WAAYC,GACZ,cAAeC,GACf,YAAaC,GACb,eAAgBC,GAChB,cAAeC,GACf,eAAgBC,GAChB,iBAAkBC,GAClB,iBAAkBC,GAClB,WAAYC,GACZ,UAAWC,GACX,cAAeC,GACf,cAAeC,EACf,iBAAkBC,GAClB,sBAAuBC,GACvB,SAAUtB,GACV,2BAA4ByB,GAC5B,4BAA6BC,EAC7B,2BAA4BC,GAE5B,cAAeC,GACf,aAAcC,GACd,aAAcC,GACd,mBAAoBC,GACpB,YAAaC,GACb,YAAaC,GAEb,kBAAmBC,GACnB,2BAA4BC,GAC5B,iBAAkBC,GAClB,oBAAqBC,GACrB,kBAAmBC,GACnB,cAAeC,GACf,iBAAkBC,GAClB,iBAAkBC,GAClB,gBAAiBC,GACjB,mBAAoBC,GACpB,eAAgBC,GAChB,qBAAsBC,GACtB,iBAAkBC,GAClB,uBAAwBC,GACxB,wBAAyBC,GAGzB,QAAS4uB,EACb,CAAC,CACT,EAGA7P,KAAuB,IAAM,CACzB,IAAMwQ,EAAe,IAAM,CACvBjxB,GAAsB,EAAK,EAE3BkrB,EAAkB,QAAU,CAAE,GAAI,KAAM,MAAO,EAAG,KAAM,IAAI,IAAO,MAAO,CAAC,CAAE,CACjF,EACMpwB,EAAMowB,EAAkB,QAExBgG,EADW,CAAC,EAAEp2B,GAAOA,EAAI,IAAMA,EAAI,MAAQ,GAE3C,yBAAoBA,EAAI,KAAK,IAAI,MAAMA,EAAI,KAAK,GAChDpC,EAAE,aAAa,EACfy4B,EAAS,CAAC9pB,EAAGxB,IAAO,MAAM,cAAc,OAAQ,CAClD,IAAKwB,EACL,MAAO,OAAO,OAAO,CAAE,SAAU,WAAY,MAAO,OAAQ,OAAQ,OAAQ,OAAQ,CAAE,EAAGxB,CAAE,CAC/F,CAAC,EACD,OAAO,MAAM,cAAc,MAAO,CAC9B,IAAK,mBACL,QAASorB,EACT,MAAO,CAAE,SAAU,QAAS,MAAO,EAAG,OAAQ,GAAI,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,QAAS,OAAQ,WAAY,kCAAmC,eAAgB,aAAc,qBAAsB,aAAc,UAAW,eAAgB,CACpR,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,oBACL,QAAUr5B,GAAMA,EAAE,gBAAgB,EAClC,MAAO,CAAE,MAAO,OAAQ,SAAU,QAAS,aAAc,OAAQ,OAAQ,qCAAsC,WAAY,eAAgB,UAAW,yEAA0E,SAAU,QAAS,CACvP,EAAG,CAEC,MAAM,cAAc,MAAO,CACvB,IAAK,iBACL,MAAO,CAAE,QAAS,OAAQ,WAAY,SAAU,IAAK,OAAQ,QAAS,YAAa,aAAc,qCAAsC,CAC3I,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,eACL,MAAO,CAAE,QAAS,MAAO,EACzB,wBAAyB,CAAE,OAAQ,uVAAwV,CAC/X,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,iBACL,MAAO,CAAE,KAAM,EAAG,WAAY,GAAI,CACtC,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,gBACL,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAC5E,EAAGc,EAAE,UAAU,CAAC,EAChB,MAAM,cAAc,MAAO,CACvB,IAAK,eACL,MAAO,CAAE,SAAU,OAAQ,MAAO,kBAAmB,CACzD,EAAGA,EAAE,aAAa,CAAC,CACvB,CAAC,EACD,MAAM,cAAc,SAAU,CAC1B,IAAK,YACL,QAASu4B,EACT,MAAO,CAAE,MAAO,OAAQ,OAAQ,OAAQ,QAAS,OAAQ,WAAY,SAAU,aAAc,MAAO,OAAQ,OAAQ,WAAY,4BAA6B,MAAO,mBAAoB,OAAQ,SAAU,CAC9M,EAAG,MAAM,cAAc,IAAK,CAAE,UAAW,cAAe,CAAC,CAAC,CAC9D,CAAC,EAED,MAAM,cAAc,MAAO,CACvB,IAAK,eACL,MAAO,CAAE,QAAS,gBAAiB,CACvC,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,aACL,MAAO,CAAE,SAAU,WAAY,YAAa,IAAK,aAAc,OAAQ,SAAU,SAAU,WAAY,OAAQ,OAAQ,oCAAqC,CAChK,EAAG,CACC,MAAM,cAAc,MAAO,CACvB,IAAK,QACL,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,WAAY,+DAAgE,CACzH,CAAC,EAED,MAAM,cAAc,MAAO,CACvB,IAAK,YACL,GAAI,YACJ,MAAO,CAAE,SAAU,WAAY,MAAO,EAAG,OAAQ,CAAE,CACvD,CAAC,EACDE,EAAO,OAAQ,CAAE,IAAK,OAAQ,iBAAkB,OAAQ,UAAW,oCAAqC,kBAAmB,oCAAqC,aAAc,WAAY,CAAC,EAC3LA,EAAO,OAAQ,CAAE,IAAK,OAAQ,eAAgB,OAAQ,UAAW,oCAAqC,gBAAiB,oCAAqC,aAAc,WAAY,CAAC,EACvLA,EAAO,OAAQ,CAAE,OAAQ,OAAQ,iBAAkB,OAAQ,aAAc,oCAAqC,kBAAmB,oCAAqC,aAAc,WAAY,CAAC,EACjMA,EAAO,OAAQ,CAAE,OAAQ,OAAQ,eAAgB,OAAQ,aAAc,oCAAqC,gBAAiB,oCAAqC,aAAc,WAAY,CAAC,EAC7L,MAAM,cAAc,OAAQ,CACxB,IAAK,YACL,MAAO,CAAE,SAAU,WAAY,KAAM,OAAQ,MAAO,OAAQ,OAAQ,QAAS,OAAQ,EAAG,WAAY,oEAAqE,UAAW,2BAA4B,UAAW,4CAA6C,CAC5Q,CAAC,EACD,MAAM,cAAc,MAAO,CACvB,IAAK,cACL,MAAO,CAAE,SAAU,WAAY,OAAQ,EAAG,KAAM,EAAG,MAAO,EAAG,OAAQ,EAAG,QAAS,OAAQ,WAAY,SAAU,eAAgB,SAAU,IAAK,MAAO,QAAS,OAAQ,WAAY,+CAAgD,CACtO,EAAG,CACC,MAAM,cAAc,OAAQ,CACxB,IAAK,UACL,MAAO,CAAE,QAAS,OAAQ,UAAW,6BAA8B,EACnE,wBAAyB,CAAE,OAAQ,+KAAgL,CACvN,CAAC,EACD,MAAM,cAAc,OAAQ,CACxB,IAAK,cACL,MAAO,CAAE,SAAU,SAAU,WAAY,IAAK,MAAO,kBAAmB,CAC5E,EAAGD,CAAU,CACjB,CAAC,CACL,CAAC,EACD,MAAM,cAAc,IAAK,CACrB,IAAK,eACL,MAAO,CAAE,OAAQ,WAAY,UAAW,SAAU,SAAU,OAAQ,WAAY,IAAK,MAAO,kBAAmB,CACnH,EAAGx4B,EAAE,SAAS,CAAC,CACnB,CAAC,CACL,CAAC,CACL,CAAC,CACL,GAAG,CACH,CAAC,CACL,CAAC,CACL,EAEM04B,GAAuB,CAAC,CAAE,SAAAC,CAAS,IAEjC,OAAO,OAAW,KAAe,OAAO,cACjC,MAAM,cAAc,OAAO,cAAe,CAC7C,MAAO,EACX,EAAGA,CAAQ,EAGRA,EAGX,SAASC,IAAgB,CACrB,GAAI,OAAO,2BAA6B,OAAO,4BAA6B,CAExE,IAAMC,EAAuB,MAAM,cAAcH,GAAsB,KACnE,MAAM,cAAc3Y,EAAqB,CAC7C,EACA,SAAS,OAAO8Y,EAAsB,SAAS,eAAe,MAAM,CAAC,CACzE,MACI,QAAQ,MAAM,4GAAwB,CAClC,UAAW,CAAC,CAAC,OAAO,0BACpB,UAAW,CAAC,CAAC,OAAO,2BACxB,CAAC,CAET,CAEI,OAAO,OAAW,MAElB,OAAO,iBAAiB,qBAAuB7V,GAAU,CACrD,QAAQ,MAAM,+BAAgCA,EAAM,MAAM,EAC1DA,EAAM,eAAe,CACzB,CAAC,EAGD,OAAO,iBAAiB,QAAUA,GAAU,CACxC,QAAQ,MAAM,gBAAiBA,EAAM,KAAK,EAC1CA,EAAM,eAAe,CACzB,CAAC,EAEI,OAAO,gBACR,OAAO,cAAgB4V,KAK/B,GAAI,OAAO,2BAA6B,OAAO,4BAA6B,CACxE,IAAMF,EAAuB,CAAC,CAAE,SAAAC,CAAS,IACjC,OAAO,OAAW,KAAe,OAAO,cACjC,MAAM,cAAc,OAAO,cAAe,CAC7C,MAAO,EACX,EAAGA,CAAQ,EAERA,EAELE,EAAuB,MAAM,cAAcH,EAAsB,KACnE,MAAM,cAAc3Y,EAAqB,CAC7C,EACA,SAAS,OAAO8Y,EAAsB,SAAS,eAAe,MAAM,CAAC,CACzE,MACI,SAAS,OAAO,MAAM,cAAc9Y,EAAqB,EAAG,SAAS,eAAe,MAAM,CAAC",
+  "names": ["isSecureBitDebugEnabled", "targetWindow", "installDebugWindowHooks", "webrtcManagerRef", "onClearData", "clearConsole", "DB_NAME", "KEY_RECORD", "SETTINGS_RECORD", "isSupported", "openDb", "resolve", "reject", "request", "DB_NAME", "error", "db", "idbGet", "key", "req", "idbPut", "value", "tx", "idbDelete", "getOrCreateDeviceKey", "existing", "KEY_RECORD", "saveIceSettings", "settings", "payload", "iv", "ciphertext", "SETTINGS_RECORD", "loadIceSettings", "record", "plaintext", "parsed", "clearIceSettings", "ENDPOINT", "OWN_RELAY_HOSTS", "RETRY_DELAYS_MS", "relayHost", "url", "m", "isOwnRelayEntry", "entry", "u", "OWN_RELAY_HOSTS", "isCleanField", "value", "i", "c", "applyTurnCredentials", "list", "cred", "updated", "urls", "parseCredentialResponse", "body", "nowSeconds", "server", "expiry", "ttl", "started", "startTurnCredentialRefresh", "opts", "getList", "timer", "failures", "schedule", "ms", "refresh", "res", "ENDPOINT", "delay", "now", "SUPPORTED_LOCALES", "LOCALE_META", "CROSS_LOCALE_STRINGS", "DICTIONARY", "registry", "REGISTRY", "dictionary", "code", "STORAGE_KEY", "localeFromPathname", "pathname", "segment", "SUPPORTED_LOCALES", "localeFromLanguages", "languages", "tag", "lower", "exact", "base", "partial", "detectLocale", "stored", "fromPath", "isLocaleRoot", "localeHref", "current", "tail", "rememberLocale", "storedLocale", "resolvedLocale", "currentLocale", "w", "localeDir", "LOCALE_META", "isRTL", "direction", "SUGGEST_KEY", "localeSuggestionDismissed", "dismissLocaleSuggestion", "suggestedLocale", "pathname", "languages", "stored", "shown", "localeFromPathname", "preferred", "SUPPORTED_LOCALES", "localeFromLanguages", "t", "key", "vars", "locale", "currentLocale", "template", "dictionary", "CROSS_LOCALE_STRINGS", "match", "name", "SESSION_ACTIONS", "PRESENCE_DOT", "PRESENCE_WORD", "t", "MY_STATUS_OPTIONS", "shortLabelFromId", "id", "hex", "monoInitials", "label", "words", "a", "b", "statusSub", "status", "t", "emptySetup", "createSessionEntry", "opts", "id", "shortLabelFromId", "createInitialState", "patchSession", "state", "patch", "session", "sessionsReducer", "action", "A", "SESSION_ACTIONS", "entry", "sessions", "order", "x", "activeSessionId", "removedIdx", "next", "changed", "messages", "m", "byId", "byMid", "byFileId", "label", "decorateSession", "lastMessage", "s", "isUp", "isPending", "dot", "headerSub", "PRESENCE_DOT", "PRESENCE_WORD", "preview", "monoInitials", "decorateSessions", "GROUP_LIMITS", "CALL_ACTIONS", "MESH_KINDS", "MEMBER_OPS", "ENC", "GroupCryptoError", "message", "code", "fail", "msg", "toHex", "bytes", "view", "out", "i", "fromHex", "hex", "toB64", "binary", "fromB64", "b64", "max", "randomBytes", "n", "newGroupId", "lp", "label", "parts", "chunks", "total", "part", "header", "o", "c", "u32", "b", "equalBytes", "a", "diff", "assertGroupId", "groupId", "assertFingerprint", "fp", "assertEpoch", "epoch", "assertName", "name", "value", "canonicalFingerprints", "fps", "seen", "generateGroupIdentity", "subtle", "keyPair", "spki", "fingerprint", "fingerprintSpki", "importMemberIdentity", "publicKey", "buildCommitment", "nonce", "payload", "verifyCommitment", "commitment", "fields", "expected", "computeGroupSas", "contributions", "digits", "ordered", "ikm", "salt", "key", "bits", "dv", "GroupSasCeremony", "selfFingerprint", "memberFingerprints", "existing", "memberOpPayload", "op", "memberFps", "signMemberOp", "privateKey", "sig", "verifyMemberOp", "signature", "hashBody", "body", "groupMessagePayload", "seq", "senderFp", "bodyHash", "signGroupMessage", "verifyGroupMessage", "meshDescriptorPayload", "kind", "fromFp", "toFp", "descriptor", "signMeshDescriptor", "verifyMeshDescriptor", "linkProbePayload", "linkFp", "signLinkProbe", "verifyLinkProbe", "groupCallPayload", "callId", "action", "withVideo", "assertCallId", "newCallId", "signGroupCall", "verifyGroupCall", "GROUP_ACTIONS", "GROUP_PHASE", "MEMBER_STATE", "GROUP_PHASE_WORD", "t", "groupInitials", "name", "words", "a", "b", "createGroupEntry", "opts", "byFingerprint", "NAME_ENCODER", "clampNameBytes", "value", "out", "GROUP_LIMITS", "createInitialGroupState", "patchGroup", "state", "id", "patch", "group", "groupsReducer", "action", "A", "entry", "groups", "order", "x", "activeGroupId", "removedIdx", "changed", "members", "m", "next", "k", "messages", "linkedCount", "groupSub", "total", "linked", "groupDot", "decorateGroup", "lastMessage", "sub", "decorateGroups", "g", "GROUP_FRAMES", "GROUP_ENVELOPE", "GROUP_FRAME_TYPES", "isGroupFrame", "parsed", "groupFrameType", "encodeEnvelope", "frame", "json", "encoded", "toB64", "GROUP_LIMITS", "GroupSessionError", "decodeEnvelope", "envelope", "raw", "bytes", "fromB64", "TIMEOUTS", "MESH_MAX_CONCURRENT_DIALS", "MESH_MAX_ATTEMPTS", "message", "code", "GroupSession", "groupId", "name", "isAdmin", "subtle", "send", "emit", "mesh", "log", "assertGroupId", "assertName", "GROUP_PHASE", "newGroupId", "generateGroupIdentity", "MEMBER_STATE", "t", "sessionId", "fn", "ms", "phase", "m", "changed", "fp", "toFp", "admin", "member", "relay", "exclude", "targets", "results", "unreachable", "delivered", "result", "i", "state", "connected", "next", "dial", "tellPeer", "failure", "now", "inFlight", "soonest", "canonicalFingerprints", "epoch", "nonce", "randomBytes", "link", "descriptor", "sig", "signMeshDescriptor", "MESH_KINDS", "error", "from", "assertFingerprint", "assertEpoch", "verifyMeshDescriptor", "answer", "b", "linkFp", "signLinkProbe", "verifyLinkProbe", "peers", "peer", "p", "failed", "r", "reachable", "_", "adminSpki", "publicKey", "fingerprint", "importMemberIdentity", "spki", "MEMBER_OPS", "op", "memberFps", "fields", "signMemberOp", "adminKey", "adminFp", "imported", "staged", "verifyMemberOp", "previous", "old", "sid", "GroupSasCeremony", "commitment", "epochAtStart", "held", "contributions", "computeGroupSas", "text", "body", "seq", "bodyHash", "hashBody", "signGroupMessage", "relayed", "senderFp", "verifyGroupMessage", "byMember", "hashHex", "starter", "a", "action", "callId", "withVideo", "signGroupCall", "prepare", "newCallId", "CALL_ACTIONS", "assertCallId", "seen", "verifyGroupCall", "to", "inner", "f", "round", "sent", "isRateLimit", "error", "createGroupSender", "getManager", "gapMs", "attempts", "now", "sleep", "ms", "resolve", "queues", "sessionId", "frame", "manager", "queue", "payload", "run", "wait", "lastError", "attempt", "SPRING", "DT", "MAX_FRAME", "prefersReducedMotion", "project", "velocity", "decelerationRate", "snapTarget", "position", "points", "o", "flick", "projected", "pool", "ahead", "p", "best", "rubberband", "overshoot", "dimension", "constant", "velocityTracker", "windowMs", "samples", "value", "time", "now", "last", "first", "dt", "spring", "from", "to", "damping", "response", "restDelta", "restSpeed", "respectReducedMotion", "onUpdate", "onComplete", "vel", "target", "raf", "done", "omega", "zeta", "finish", "next", "step", "frame", "t", "accel", "LanguageSuggestion", "target", "localeSuggestionDismissed", "suggestedLocale", "storedLocale", "gone", "setGone", "shown", "setShown", "id", "meta", "LOCALE_META", "dir", "pathname", "href", "localeHref", "still", "prefersReducedMotion", "close", "dismissLocaleSuggestion", "line", "t", "link", "rememberLocale", "dismiss", "h", "args", "C", "ICON", "svg", "markup", "extra", "btn", "accent", "overlay", "card", "clampToBytes", "value", "max", "enc", "out", "label", "waitingWord", "group", "GROUP_PHASE", "t", "GROUP_ERROR_WORD", "GroupSasModal", "onConfirm", "onCancel", "failed", "waiting", "CreateGroupModal", "candidates", "relayOnly", "onCreate", "name", "setName", "picked", "setPicked", "GROUP_LIMITS", "toggle", "id", "prev", "x", "ready", "e", "c", "on", "full", "GroupErrorModal", "message", "onDismiss", "AddMembersModal", "remaining", "onAdd", "GroupInviteModal", "invite", "onAccept", "onDecline", "MemberStrip", "onRemove", "isAdmin", "m", "self", "MEMBER_STATE", "lost", "dot", "via", "Bubble", "msg", "mine", "GroupChatView", "input", "setInput", "onSend", "onLeave", "onRemoveMember", "onAddMembers", "scrollRef", "onStartCall", "callActive", "callOverlay", "degraded", "submit", "groupInitials", "LEG_STATE", "PHASE_TO_STATE", "SPEAKING", "FALLBACK_DIAL_MS", "webAudioLevelMeter", "context", "stream", "source", "analyser", "buffer", "sum", "i", "v", "GroupCallMedia", "getManager", "getUserMedia", "createAudioSink", "createLevelMeter", "onChange", "log", "constraints", "Ctor", "callId", "selfFp", "withVideo", "peers", "error", "mediaErrorCode", "wanted", "peer", "fp", "leg", "existing", "track", "peerFp", "manager", "state", "live", "phase", "played", "holder", "key", "quietKey", "level", "now", "speaking", "changed", "selfLevel", "safeRead", "enabled", "old", "previous", "a", "b", "p", "meter", "name", "TILE_ASPECT", "MIN_TILE_W", "gridLayout", "count", "width", "height", "gap", "aspect", "minWidth", "cols", "best", "rows", "perColumn", "perRow", "tileW", "spotlightLayout", "othersCount", "minThumb", "maxThumb", "w", "thumbW", "stripH", "mainH", "mainW", "h", "args", "MONO", "ICON", "svg", "inner", "size", "sw", "ctrlBase", "dangerCtrl", "endBtn", "minimizeBtn", "QUALITY", "qualityBars", "quality", "q", "i", "initials", "name", "words", "fmt", "s", "useMeasuredSize", "setSize", "node", "setNode", "apply", "prev", "observer", "Tile", "peer", "stream", "self", "localStream", "cameraEnabled", "speaking", "tileW", "tileH", "onSelect", "pinned", "compact", "videoRef", "source", "showVideo", "el", "played", "statusWord", "LEG_STATE", "t", "avatarPx", "e", "GroupCallUI", "call", "media", "groupName", "getRemoteStream", "onJoin", "onDismiss", "onLeave", "onToggleMic", "onToggleCamera", "onFlipCamera", "minimized", "setMinimized", "seconds", "setSeconds", "setPinned", "stageRef", "stage", "joined", "started", "iv", "present", "p", "encBadge", "peers", "selfTile", "speakers", "talking", "tiles", "spotlight", "id", "tile", "others", "spot", "spotlightLayout", "spotlit", "layout", "gridLayout", "renderTile", "extra", "DIR", "direction", "scrollBehavior", "prefersReducedMotion", "requestDonateScroll", "copyToClipboardSecure", "text", "autoClearMs", "ok", "ta", "current", "readable", "parseMessageSegments", "segments", "re", "last", "m", "s", "HL_KEYWORDS", "HL_LITERALS", "highlightCode", "code", "nodes", "buffer", "key", "flush", "cls", "PRISM_ALIAS", "CodeBlock", "lang", "copied", "setCopied", "handleCopy", "norm", "prism", "grammar", "usePrism", "highlightedHtml", "displayLang", "codeEl", "t", "MessageBody", "seg", "i", "SAS_CODE_LENGTH", "GRAIN_URL", "SB_MONO", "sbGenBars", "seed", "n", "out", "s", "r", "env", "sbFmtClock", "sec", "m", "VoicePlayer", "voice", "isMe", "h", "playing", "setPlaying", "progress", "setProgress", "playErr", "setPlayErr", "audioRef", "rafRef", "v", "dur", "bars", "src", "transfer", "transferring", "failed", "dir", "pct", "pause", "play", "a", "d", "p", "err", "toggle", "seek", "e", "rect", "elapsed", "circ", "playBg", "playColor", "barEls", "hgt", "i", "played", "col", "ring", "icon", "label", "t", "timeText", "VoiceRecorder", "onSend", "onCancel", "MAX_SECONDS", "NBARS", "setElapsed", "liveBars", "setLiveBars", "micError", "setMicError", "R", "teardownGraph", "cleanup", "pushPeak", "amp", "now", "prev", "live", "downsample", "peaks", "step", "b", "j", "resample", "data", "from", "to", "ratio", "outLen", "start", "end", "encodeWav", "samples", "rate", "buf", "view", "ws", "o", "onPcmFrame", "frame", "sum", "finish", "send", "srcRate", "outBlob", "outDur", "total", "merged", "off", "c", "targetRate", "cancelled", "stream", "AC", "useWorklet", "code", "inBuf", "EnhancedChatMessage", "message", "type", "timestamp", "mid", "status", "viewOnce", "viewOnceTtl", "expiresAt", "expired", "nowTick", "canUnsend", "onUnsend", "onExpire", "revealed", "setRevealed", "revealTimerRef", "formatTime", "ts", "isNotice", "encrypted", "isViewOnce", "remaining", "fmtRemaining", "pad", "handleReveal", "ms", "radius", "border", "bg", "body", "MessageBody", "metaLeft", "stCfg", "metaRight", "meta", "EnhancedConnectionSetup", "messages", "onCreateOffer", "onCreateAnswer", "onConnect", "onClearData", "onVerifyConnection", "connectionStatus", "offerData", "answerData", "offerInput", "setOfferInput", "answerInput", "setAnswerInput", "showOfferStep", "showAnswerStep", "verificationCode", "showVerification", "showQRCode", "qrCodeUrl", "showQRScanner", "setShowQRCode", "setShowQRScanner", "setShowQRScannerModal", "offerPassword", "answerPassword", "localVerificationConfirmed", "remoteVerificationConfirmed", "bothVerificationsConfirmed", "qrFramesTotal", "qrFrameIndex", "qrManualMode", "toggleQrManualMode", "nextQrFrame", "prevQrFrame", "markAnswerCreated", "notificationIntegrationRef", "isGeneratingKeys", "setIsGeneratingKeys", "handleCreateOffer", "relayOnlyMode", "setRelayOnlyMode", "webrtcManagerRef", "showIceSettings", "setShowIceSettings", "iceServersText", "iceSettingsPersisted", "customIceServers", "handleApplyIceSettings", "handleForgetIceSettings", "compact", "mode", "setMode", "notificationPermissionRequested", "setNotificationPermissionRequested", "qrModalOpen", "setQrModalOpen", "copied", "setCopied", "sasInput", "setSasInput", "sasError", "setSasError", "sasFocused", "setSasFocused", "sasShake", "setSasShake", "platformsOpen", "setPlatformsOpen", "codeRevealed", "setCodeRevealed", "genProgress", "setGenProgress", "OFFER_TTL_MS", "offerTs", "setNowTick", "id", "onDoc", "resetToSelect", "handleVerificationConfirm", "userCode", "handleVerificationReject", "requestNotificationPermissionOnInteraction", "currentPermission", "integration", "welcomeNotification", "testNotification", "C_ORANGE", "C_GREEN", "C_ORANGE_SOLID", "C_GREEN_SOLID", "MONO", "encode", "min", "isCreate", "isGenerating", "isOfferCred", "isAnswerCred", "atIntro", "accent", "accentSolid", "kicker", "credCode", "hasInvite", "hasAnswer", "copyCred", "copyToClipboardSecure", "normExpected", "normInput", "canConfirm", "handleSasConfirm", "ICON_DEFS", "fa", "name", "opts", "def", "st", "size", "svgStyle", "el", "leftPanel", "segToggle", "DIR", "backButton", "key", "offerLeft", "offerExpires", "credCard", "inner", "verified", "typed", "full", "match", "wrong", "youOk", "peerOk", "waiting", "split", "confirmable", "check", "k", "ok", "soft", "who", "cells", "_", "active", "color", "anim", "SAS_CODE_LENGTH", "genSteps", "done", "canJoin", "SB_DESKTOP_VERSION", "SB_DESKTOP_RELEASE", "DOWNLOADS", "detectedOS", "ua", "otherOS", "dlLink", "url", "platformsMenu", "footer", "settingsOverlay", "rightPanel", "qrModal", "hero", "uniqueSection", "partnersSection", "roadmapSection", "donateSection", "communitySection", "keyframeStyle", "startViewportDebug", "vv", "on", "box", "paint", "shell", "cs", "root", "iv", "createScrollToBottomFunction", "chatMessagesRef", "scrollAttempt", "scrollBehavior", "runSecurityReport", "webrtcManager", "securityData", "esc", "accentRGB", "score", "dashArray", "level", "isReal", "entries", "passedCount", "totalCount", "verifiedAt", "testTitle", "named", "pretty", "checkIcon", "xIcon", "testsHTML", "passed", "raw", "looked", "desc", "iconBg", "iconBorder", "titleColor", "modal", "onKey", "close", "rerun", "SecureBitChatHeader", "onDisconnect", "title", "isOffline", "peerPresence", "onRenameTitle", "showNetwork", "setShowNetwork", "setSec", "editingName", "setEditingName", "nameDraft", "setNameDraft", "alive", "fetchSec", "onCalc", "onlineConnected", "dropped", "connected", "connDot", "connLabel", "connGlow", "peerDot", "PRESENCE_DOT", "peerPresenceWord", "PRESENCE_WORD", "startRename", "commitRename", "renameKey", "secLevelLabel", "lvl", "scoreLabel", "secBtn", "headerResponsiveCss", "header", "monoInitials", "callReady", "startCall", "video", "callBtnStyle", "netPanel", "EnhancedChatInterface", "messageInput", "setMessageInput", "onSendMessage", "onSendVoice", "keyFingerprint", "isVerified", "scrollToBottom", "pendingIncomingFiles", "onIncomingDecision", "codeMode", "setCodeMode", "viewOnceMode", "setViewOnceMode", "setViewOnceTtl", "disappearTtl", "setDisappearTtl", "onUnsendMessage", "onMessageExpire", "showScrollButton", "setShowScrollButton", "showFileTransfer", "setShowFileTransfer", "fileSendMode", "setFileSendMode", "showTimer", "setShowTimer", "showOnce", "setShowOnce", "showHandshake", "setShowHandshake", "isRecording", "setIsRecording", "isDesktop", "setIsDesktop", "mq", "onCh", "taRef", "atBottomRef", "stick", "onResize", "scrollTop", "scrollHeight", "clientHeight", "smoothScroll", "handleScroll", "isNearBottom", "handleScrollToBottom", "handleKeyPress", "isFileTransferReady", "hasDataChannel", "fmtShort", "chipStyle", "optStyle", "sel", "timerDefs", "onceDefs", "onceSelected", "pickTimer", "pickOnce", "hasText", "canRecord", "fmtT", "systemMessages", "chatMessages", "handshakeCard", "emptyState", "messagesArea", "msg", "timerRow", "onceRow", "filePanel", "chipsRow", "codeStrip", "sendBtn", "micBtn", "trailingButtons", "inputRow", "recordingBar", "blob", "composer", "scrollBtn", "chatHeader", "callOverlay", "buildSessionMessage", "SB_SVG", "SessionsSidebar", "chats", "groups", "collapsed", "drawerOpen", "onToggleCollapse", "onSelect", "onSelectGroup", "onNewChat", "onNewGroup", "onRename", "onCloseDrawer", "myStatus", "onSetStatus", "editingId", "setEditingId", "draft", "setDraft", "presenceOpen", "setPresenceOpen", "scrimRef", "panelRef", "animRef", "dragRef", "offsetRef", "openRef", "clickGuardRef", "drawerMounted", "setDrawerMounted", "AXIS_LOCK", "FLICK", "drawerWidth", "paintDrawer", "x", "w", "blur", "settleDrawer", "velocity", "spring", "SPRING", "drawerDown", "velocityTracker", "drawerMove", "dx", "dy", "rubberband", "drawerUp", "open", "snapTarget", "drawerScrimClick", "startEdit", "commitEdit", "editKey", "renameInput", "extra", "svg", "style", "avatar", "expandedRow", "dockItem", "brandMark", "collapseBtn", "myMeta", "MY_STATUS_OPTIONS", "PRES_SVG", "presenceMenu", "pos", "presencePanelExpanded", "presencePanelCollapsed", "expandedInner", "g", "collapsedInner", "railStyle", "EnhancedSecureP2PChat", "sessionsState", "dispatch", "sessionsReducer", "createInitialState", "activeSessionId", "activeIdRef", "EMPTY_ARR", "managersRef", "integrationsRef", "queuesRef", "statusRef", "groupsState", "groupsDispatch", "groupsReducer", "createInitialGroupState", "groupRuntimesRef", "activeGroupId", "activeGroup", "activeGroupIdRef", "groupInput", "setGroupInput", "showCreateGroup", "setShowCreateGroup", "showGroupCode", "setShowGroupCode", "pendingInvite", "setPendingInvite", "groupError", "setGroupError", "showAddMembers", "setShowAddMembers", "groupScrollRef", "groupCallState", "setGroupCallState", "groupCallMediaState", "setGroupCallMediaState", "groupCallMediaRef", "dismissedCalls", "setDismissedCalls", "announcedCallsRef", "meshLinksRef", "lastUnreachableRef", "sendGroupFrame", "createGroupSender", "sessionId", "buildGroupMessage", "groupEmitter", "gid", "event", "payload", "GROUP_ACTIONS", "syncGroupCallMediaRef", "current", "token", "destroyGroupRef", "handleGroupFrame", "runtime", "groupFrameType", "GROUP_FRAMES", "invite", "decodeEnvelope", "GROUP_LIMITS", "error", "reason", "handleGroupFrameRef", "syncGroupLinks", "syncGroupLinksRef", "dispatchActive", "build", "setMessages", "updaterOrArr", "SESSION_ACTIONS", "setConnectionStatus", "setKeyFingerprint", "fingerprint", "setVerificationCode", "setIsVerified", "setLocalVerificationConfirmed", "setRemoteVerificationConfirmed", "setBothVerificationsConfirmed", "setPendingIncomingFiles", "setupField", "fallback", "setSetupField", "value", "setOfferData", "setAnswerData", "setShowOfferStep", "setShowAnswerStep", "setShowVerification", "setQrCodeUrl", "setMyStatusState", "myStatusRef", "wirePresence", "sendPresenceTo", "mgr", "setMyStatus", "setIsOffline", "offlineRef", "goOffline", "goOnline", "resync", "lastH", "lastInset", "lastY", "raf", "applyHeight", "keyboardUp", "applyInset", "applyOffset", "zoomed", "y", "apply", "onPan", "timers", "resettle", "stopDebug", "setCustomIceServers", "setIceServersText", "setIceSettingsPersisted", "loadIceSettings", "saved", "next", "persist", "servers", "saveIceSettings", "clearIceSettings", "showQRScannerModal", "qrBundleReady", "setQrBundleReady", "onReady", "securityLevel", "setSecurityLevel", "sessionTimeLeft", "setSessionTimeLeft", "pendingSession", "setPendingSession", "connectionState", "setConnectionState", "updateConnectionState", "newState", "options", "preserveAnswer", "isUserAction", "shouldPreserveAnswerData", "hasAnswerData", "hasAnswerQR", "installDebugWindowHooks", "handleClearData", "startTurnCredentialRefresh", "addMessageWithAutoScroll", "newId", "newMessage", "updated", "container", "updateMessageStatus", "patchMessageById", "messageId", "patch", "patchMessageByFileId", "fileId", "flushSessionQueue", "q", "deferred", "item", "inc", "viewing", "flushOfflineQueues", "timer", "updateSecurityLevel", "currentLevel", "anyExpiring", "sessionsStateRef", "expireFn", "changed", "interval", "createSession", "role", "entry", "createSessionEntry", "u", "opts2", "sessionQueues", "handleMessage", "parsedMessage", "isGroupFrame", "blockedTypes", "manager", "handleStatusChange", "prevStatus", "sessionCarriesGroupMemberRef", "destroySession", "handleKeyExchange", "handleVerificationRequired", "handleVerificationStateChange", "state", "handleAnswerError", "errorType", "errorMessage", "applyPct", "fileData", "sizeMb", "fileRequest", "f", "createSessionRef", "destroyingRef", "sessionCarriesGroupMember", "integ", "sidebarCollapsed", "setSidebarCollapsed", "sidebarDrawerOpen", "setSidebarDrawerOpen", "handleSelectSession", "handleNewChat", "handleRenameSession", "closeMeshLink", "closeMeshLinkRef", "buildMeshLink", "fp", "onMessage", "parsed", "onStatusChange", "dead", "onVerificationRequired", "buildMeshLinkRef", "makeMeshAdapter", "offer", "descriptor", "answer", "group", "GROUP_PHASE", "sid", "session", "groupCandidates", "handleSelectGroup", "handleCreateGroup", "sessionIds", "GroupSession", "createGroupEntry", "handleAcceptInvite", "handleConfirmGroupSas", "destroyGroup", "announce", "media", "handleSendGroupMessage", "text", "unreachable", "signature", "names", "addCandidates", "taken", "handleAddMembers", "handleRemoveGroupMember", "syncGroupCallMedia", "callOrNull", "call", "openGroupCallMedia", "existing", "GroupCallMedia", "snapshot", "handleStartGroupCall", "withVideo", "mediaErrorCode", "handleJoinGroupCall", "handleDismissGroupCall", "handleLeaveGroupCall", "activeGroupMedia", "handleGroupCallMic", "handleGroupCallCamera", "handleGroupCallFlip", "flushReadAcks", "acks", "didInitRef", "isTabSwitching", "tabSwitchTimeout", "handleBeforeUnload", "handleVisibilityChange", "compressOfferData", "minimalOffer", "createTemplateOffer", "MAX_QR_LEN", "BIN_MAX_QR_LEN", "setQrFramesTotal", "setQrFrameIndex", "setQrManualMode", "qrAnimationRef", "stopQrAnimation", "renderCurrent", "chunks", "idx", "QR_SIZE", "renderAndAdvance", "len", "nextIdx", "newManualMode", "prevIdx", "qrChunksBufferRef", "generateQRCode", "originalSize", "obj", "qrDataUrl", "FRAME_MAX", "rawChunks", "seq", "part", "EC_OPTS", "reconstructFromTemplate", "templateData", "handleQRScan", "scannedData", "chunkHash", "uniqueCount", "isComplete", "fullBinaryData", "parsedData", "any", "maybeDecompressed", "hdr", "fullText", "payloadObj", "results", "fullOffer", "offerString", "bin", "TARGET_CHUNKS", "firstUrl", "intervalMs", "handleCreateAnswer", "rawText", "parseError", "answerString", "handleConnect", "anyAnswer", "answerType", "handleVerifyConnection", "isValid", "handleDisconnect", "handleSendMessage", "baseTextEarly", "midEarly", "channelUsable", "outTextOff", "tsOff", "metaOff", "echoOpts", "baseText", "outText", "localOpts", "sendErr", "handleSendVoice", "rawType", "mime", "ext", "file", "localUrl", "reconnecting", "voiceMeta", "localId", "handleUnsendMessage", "handleMessageExpire", "handleIncomingDecision", "accepted", "requestDonateScroll", "handleSessionActivated", "prevConnStatusRef", "resumed", "previewMode", "isConnectedAndVerified", "prevChatRef", "html5Qrcode", "config", "isScanning", "decodedText", "decodedResult", "success", "clearErr", "sessionChats", "decorateSessions", "groupChats", "decorateGroups", "showSidebar", "previewMessages", "noop", "CreateGroupModal", "GroupInviteModal", "GroupErrorModal", "AddMembersModal", "GroupSasModal", "LanguageSuggestion", "GroupChatView", "GroupCallUI", "closeScanner", "framesText", "corner", "UpdateCheckerWrapper", "children", "initializeApp", "AppWithUpdateChecker"]
 }
diff --git a/doc/CRYPTOGRAPHY.md b/doc/CRYPTOGRAPHY.md
index 6f47d1a..2a92770 100644
--- a/doc/CRYPTOGRAPHY.md
+++ b/doc/CRYPTOGRAPHY.md
@@ -7,7 +7,7 @@ this document describes.
 
 | | |
 | --- | --- |
-| Release | v6.8.8 |
+| Release | v6.8.12 |
 | Protocol version | 4.1 |
 | Ratchet wire version | 1 |
 
@@ -347,5 +347,5 @@ no leg may stop a capture it borrowed.
 
 ## Scope
 
-This describes the browser implementation as it stands in v6.8.8. It is not a
+This describes the browser implementation as it stands in v6.8.12. It is not a
 substitute for independent cryptographic review.
diff --git a/docs/cryptography/index.html b/docs/cryptography/index.html
index 37d331c..c426832 100644
--- a/docs/cryptography/index.html
+++ b/docs/cryptography/index.html
@@ -153,7 +153,7 @@
         </thead>
         <tbody><tr>
         <td>Release</td>
-        <td>v6.8.8</td>
+        <td>v6.8.12</td>
         </tr>
         <tr>
         <td>Protocol version</td>
@@ -486,7 +486,7 @@
         shared across every leg, and stopped when the call, the group or the tab ends;
         no leg may stop a capture it borrowed.</p>
         <h2 id="scope">Scope</h2>
-        <p>This describes the browser implementation as it stands in v6.8.8. It is not a
+        <p>This describes the browser implementation as it stands in v6.8.12. It is not a
         substitute for independent cryptographic review.</p>
 
         <nav class="more">
diff --git a/es/index.html b/es/index.html
index c22f98f..e0c7236 100644
--- a/es/index.html
+++ b/es/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/es/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/es.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/es.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/fa/index.html b/fa/index.html
index 6ddf4e3..912c78f 100644
--- a/fa/index.html
+++ b/fa/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/fa/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/fa.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/fa.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/fr/index.html b/fr/index.html
index d0ae6ee..31d3355 100644
--- a/fr/index.html
+++ b/fr/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/fr/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/fr.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/fr.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/he/index.html b/he/index.html
index cc6e4d3..6ca4605 100644
--- a/he/index.html
+++ b/he/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/he/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/he.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/he.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/hi/index.html b/hi/index.html
index b65bd2d..944bd3f 100644
--- a/hi/index.html
+++ b/hi/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/hi/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/hi.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/hi.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/index.html b/index.html
index f0405aa..b4c136c 100644
--- a/index.html
+++ b/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,18 +287,18 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -486,12 +486,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/ko/index.html b/ko/index.html
index 2b7cd5f..44ca4f1 100644
--- a/ko/index.html
+++ b/ko/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/ko/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/ko.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/ko.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/locales/ar.json b/locales/ar.json
index 3c6b008..354dd64 100644
--- a/locales/ar.json
+++ b/locales/ar.json
@@ -125,9 +125,10 @@
     "intro.createDesc": "يولّد جهازك المفاتيح ودعوة تُستعمل مرّة واحدة. لا شيء يمرّ عبر خادم.",
     "intro.createCta": "توليد المفاتيح والدعوة",
     "intro.joinTitle": "انضمّ إلى قناة",
+    "intro.joinDesc": "امسح رمز QR الخاص بالطرف الآخر بالكاميرا، أو الصق رمز الدعوة.",
     "intro.scanTitle": "امسح رمز QR بالكاميرا",
     "intro.scanSubtitle": "الأسرع - وجّهها إلى شاشة الطرف الآخر",
-    "intro.orPasteCode": "أو ألصق الرمز",
+    "intro.orPasteCode": "أو الصق الرمز",
     "intro.pastePlaceholder": "ألصق رمز الدعوة هنا…",
     "intro.connect": "اتّصل",
     "intro.connecting": "جارٍ المعالجة…",
@@ -303,22 +304,26 @@
     "handshake.establish": "إنشاء الاتصال",
     "handshake.thenReceive": "ثمّ استقبل الردّ الذي يرسله الطرف الآخر",
     "handshake.pasteAnswerPlaceholder": "ألصق رمز ردّ الطرف الآخر…",
-    "handshake.answerSentNote": "أرسل هذا الردّ إلى المُنشئ ثمّ انتظر - تُفتح الدردشة حالما يتّصل.",
+    "handshake.answerSentNote": "بانتظار اتصال المُنشئ. ستُفتح المحادثة تلقائياً.",
     "handshake.qrHint": "أبقِ هذا مفتوحاً حتى يلتقط الطرف الآخر الرمز.",
     "handshake.qrHintFrames": "المصافحة موزّعة على {frames} إطارات - أبقِ هذا مفتوحاً حتى يلتقطها الطرف الآخر كلّها.",
-    "verify.title": "التحقّق الأمني",
-    "verify.desc": "قارِن رمز الأمان هذا مع الطرف الآخر عبر قناة منفصلة (مكالمة أو لقاء مباشر)، ثمّ اكتبه لفتح الدردشة.",
-    "verify.enterLabel": "أدخل الرمز المُتحقَّق منه",
     "verify.placeholder": "اكتب الرمز هنا",
     "verify.confirm": "تأكيد الرمز",
     "verify.confirmed": "مؤكَّد",
-    "verify.mismatch": "غير متطابقين",
-    "verify.yours": "تأكيدك",
-    "verify.peer": "تأكيد الطرف الآخر",
     "verify.pending": "قيد الانتظار",
     "verify.waiting": "بانتظار الرمز…",
-    "verify.verified": "تمّ التحقّق من القناة",
-    "verify.bothConfirmed": "أكّد الطرفان. جارٍ فتح الدردشة الآمنة…",
+    "sasv.title": "تحقّق من الطرف الآخر",
+    "sasv.titleDone": "تم التحقّق من الطرف الآخر",
+    "sasv.desc": "اقرأ الرمز بصوت عالٍ عبر مكالمة أو وجهًا لوجه. لا تتابع إلا إذا رأى الطرف الآخر الأرقام نفسها.",
+    "sasv.descDone": "أكّدتما كلاكما الرمز نفسه. الاتصال موثَّق.",
+    "sasv.enter": "أدخل الرمز",
+    "sasv.match": "متطابق",
+    "sasv.noMatch": "غير متطابق",
+    "sasv.you": "أنت",
+    "sasv.peer": "الطرف الآخر",
+    "sasv.waitingPeer": "بانتظار الطرف الآخر…",
+    "sasv.codesDiffer": "الرموز غير متطابقة",
+    "sasv.opening": "جارٍ فتح المحادثة الآمنة",
     "pwa.bannerTitle": "ثبّت SecureBit.chat",
     "pwa.bannerDesc": "احصل على تجربة تطبيق أصلي بأمان أعلى",
     "pwa.install": "تثبيت",
@@ -353,9 +358,8 @@
     "action.scan": "مسح",
     "action.downloadDesktop": "نزّل تطبيق سطح المكتب",
     "action.advancedSettings": "إعدادات متقدّمة",
-    "cred.offerTag": "عرض · أو انسخ النصّ",
-    "cred.answerTag": "ردّ · أو انسخ النصّ",
     "cred.reveal": "اضغط للكشف - أبقِ هذا الرمز سرّياً",
+    "cred.orCopy": "أو انسخ الرمز",
     "qr.title": "امسح رمز QR",
     "qr.subtitle": "وجّه كاميرتك إلى رمزهم",
     "qr.scanning": "جارٍ المسح…",
diff --git a/locales/de.json b/locales/de.json
index dd264ee..04c90e4 100644
--- a/locales/de.json
+++ b/locales/de.json
@@ -125,9 +125,10 @@
     "intro.createDesc": "Ihr Gerät erzeugt die Schlüssel und eine einmalige Einladung. Nichts davon berührt einen Server.",
     "intro.createCta": "Schlüssel & Einladung erzeugen",
     "intro.joinTitle": "Kanal beitreten",
+    "intro.joinDesc": "Scannen Sie den QR-Code Ihres Gegenübers mit der Kamera oder fügen Sie seinen Einladungscode ein.",
     "intro.scanTitle": "QR-Code mit der Kamera scannen",
     "intro.scanSubtitle": "Am schnellsten - auf den Bildschirm Ihres Gegenübers halten",
-    "intro.orPasteCode": "oder Code einfügen",
+    "intro.orPasteCode": "Oder den Code einfügen",
     "intro.pastePlaceholder": "Einladungscode hier einfügen …",
     "intro.connect": "Verbinden",
     "intro.connecting": "Wird verarbeitet …",
@@ -303,22 +304,26 @@
     "handshake.establish": "Verbindung herstellen",
     "handshake.thenReceive": "Nehmen Sie danach die Antwort Ihres Gegenübers entgegen",
     "handshake.pasteAnswerPlaceholder": "Antwortcode des Gegenübers einfügen …",
-    "handshake.answerSentNote": "Senden Sie diese Antwort an den Ersteller und warten Sie - der Chat öffnet sich, sobald er sich verbindet.",
+    "handshake.answerSentNote": "Warten, bis sich der Ersteller verbindet. Der Chat öffnet sich automatisch.",
     "handshake.qrHint": "Lassen Sie dies geöffnet, bis Ihr Gegenüber den Code erfasst hat.",
     "handshake.qrHintFrames": "Der Handschlag ist auf {frames} Einzelbilder verteilt - lassen Sie dies geöffnet, bis Ihr Gegenüber alle erfasst hat.",
-    "verify.title": "Sicherheitsprüfung",
-    "verify.desc": "Vergleichen Sie diesen Sicherheitscode über einen anderen Weg mit Ihrem Gegenüber (Anruf oder persönlich) und geben Sie ihn dann ein, um den Chat freizuschalten.",
-    "verify.enterLabel": "Geprüften Code eingeben",
     "verify.placeholder": "Code hier eingeben",
     "verify.confirm": "Code bestätigen",
     "verify.confirmed": "Bestätigt",
-    "verify.mismatch": "Stimmt nicht überein",
-    "verify.yours": "Ihre Bestätigung",
-    "verify.peer": "Bestätigung des Gegenübers",
     "verify.pending": "Ausstehend",
     "verify.waiting": "Warten auf den Code …",
-    "verify.verified": "Kanal geprüft",
-    "verify.bothConfirmed": "Beide Seiten haben bestätigt. Der sichere Chat wird geöffnet …",
+    "sasv.title": "Gegenüber überprüfen",
+    "sasv.titleDone": "Gegenüber verifiziert",
+    "sasv.desc": "Lies den Code bei einem Anruf oder persönlich laut vor. Fahre nur fort, wenn dein Gegenüber dieselben Ziffern sieht.",
+    "sasv.descDone": "Ihr habt beide denselben Code bestätigt. Die Verbindung ist authentifiziert.",
+    "sasv.enter": "Code eingeben",
+    "sasv.match": "Stimmt überein",
+    "sasv.noMatch": "Stimmt nicht überein",
+    "sasv.you": "Du",
+    "sasv.peer": "Gegenüber",
+    "sasv.waitingPeer": "Warte auf Gegenüber…",
+    "sasv.codesDiffer": "Codes stimmen nicht überein",
+    "sasv.opening": "Sicherer Chat wird geöffnet",
     "pwa.bannerTitle": "SecureBit.chat installieren",
     "pwa.bannerDesc": "Die App-Erfahrung mit zusätzlicher Sicherheit",
     "pwa.install": "Installieren",
@@ -353,9 +358,8 @@
     "action.scan": "Scannen",
     "action.downloadDesktop": "Desktop-App laden",
     "action.advancedSettings": "Erweiterte Einstellungen",
-    "cred.offerTag": "Angebot · oder Text kopieren",
-    "cred.answerTag": "Antwort · oder Text kopieren",
     "cred.reveal": "Zum Anzeigen klicken - halten Sie diesen Code geheim",
+    "cred.orCopy": "Oder den Code kopieren",
     "qr.title": "QR-Code scannen",
     "qr.subtitle": "Richten Sie die Kamera auf den QR-Code",
     "qr.scanning": "Wird gescannt …",
diff --git a/locales/en.json b/locales/en.json
index 854e227..201c558 100644
--- a/locales/en.json
+++ b/locales/en.json
@@ -120,9 +120,10 @@
     "intro.createDesc": "Your device generates the keys and a one-time invitation. Nothing touches a server.",
     "intro.createCta": "Generate keys & invitation",
     "intro.joinTitle": "Join a channel",
+    "intro.joinDesc": "Scan your peer's QR with your camera, or paste their invitation code.",
     "intro.scanTitle": "Scan QR with camera",
     "intro.scanSubtitle": "Fastest - point at your peer's screen",
-    "intro.orPasteCode": "or paste code",
+    "intro.orPasteCode": "Or paste the code",
     "intro.pastePlaceholder": "Paste invitation code here…",
     "intro.connect": "Connect",
     "intro.connecting": "Processing…",
@@ -298,22 +299,26 @@
     "handshake.establish": "Establish connection",
     "handshake.thenReceive": "Then receive the answer your peer sends back",
     "handshake.pasteAnswerPlaceholder": "Paste peer's answer code…",
-    "handshake.answerSentNote": "Send this answer to the creator, then wait - the chat opens once they connect.",
+    "handshake.answerSentNote": "Waiting for the creator to connect. The chat opens automatically.",
     "handshake.qrHint": "Keep this open until your peer captures the code.",
     "handshake.qrHintFrames": "The handshake is split across {frames} frames - keep this open until your peer captures all of them.",
-    "verify.title": "Security verification",
-    "verify.desc": "Compare this safety code with your peer over a separate channel (voice / in person), then type it to unlock the chat.",
-    "verify.enterLabel": "Enter the verified code",
     "verify.placeholder": "Type code here",
     "verify.confirm": "Confirm code",
     "verify.confirmed": "Confirmed",
-    "verify.mismatch": "Don't match",
-    "verify.yours": "Your confirmation",
-    "verify.peer": "Peer confirmation",
     "verify.pending": "Pending",
     "verify.waiting": "Waiting for code…",
-    "verify.verified": "Channel verified",
-    "verify.bothConfirmed": "Both parties confirmed. Opening the secure chat…",
+    "sasv.title": "Verify your peer",
+    "sasv.titleDone": "Peer verified",
+    "sasv.desc": "Read the code aloud over a call or in person. Continue only if your peer sees the same digits.",
+    "sasv.descDone": "You both confirmed the same code. The connection is authenticated.",
+    "sasv.enter": "Enter the code",
+    "sasv.match": "Match",
+    "sasv.noMatch": "Doesn't match",
+    "sasv.you": "You",
+    "sasv.peer": "Peer",
+    "sasv.waitingPeer": "Waiting for peer…",
+    "sasv.codesDiffer": "Codes don't match",
+    "sasv.opening": "Opening secure chat",
     "pwa.bannerTitle": "Install SecureBit.chat",
     "pwa.bannerDesc": "Get the native app experience with enhanced security",
     "pwa.install": "Install",
@@ -348,9 +353,8 @@
     "action.scan": "Scan",
     "action.downloadDesktop": "Download desktop app",
     "action.advancedSettings": "Advanced settings",
-    "cred.offerTag": "offer · or copy text",
-    "cred.answerTag": "answer · or copy text",
     "cred.reveal": "Click to reveal - keep this code private",
+    "cred.orCopy": "Or copy the code",
     "qr.title": "Scan QR code",
     "qr.subtitle": "Point your camera at their QR",
     "qr.scanning": "Scanning…",
diff --git a/locales/es.json b/locales/es.json
index 3276fd8..90cf400 100644
--- a/locales/es.json
+++ b/locales/es.json
@@ -125,9 +125,10 @@
     "intro.createDesc": "Tu dispositivo genera las claves y una invitación de un solo uso. Nada de esto pasa por un servidor.",
     "intro.createCta": "Generar claves e invitación",
     "intro.joinTitle": "Unirse a un canal",
+    "intro.joinDesc": "Escanea el QR de tu contacto con la cámara o pega su código de invitación.",
     "intro.scanTitle": "Escanear el QR con la cámara",
     "intro.scanSubtitle": "Lo más rápido: apunta a la pantalla de la otra persona",
-    "intro.orPasteCode": "o pega el código",
+    "intro.orPasteCode": "O pega el código",
     "intro.pastePlaceholder": "Pega aquí el código de invitación…",
     "intro.connect": "Conectar",
     "intro.connecting": "Procesando…",
@@ -303,22 +304,26 @@
     "handshake.establish": "Establecer la conexión",
     "handshake.thenReceive": "Después recibe la respuesta que te devuelva la otra persona",
     "handshake.pasteAnswerPlaceholder": "Pega aquí el código de respuesta…",
-    "handshake.answerSentNote": "Envía esta respuesta a quien creó el canal y espera: el chat se abrirá cuando conecte.",
+    "handshake.answerSentNote": "Esperando a que el creador se conecte. El chat se abrirá automáticamente.",
     "handshake.qrHint": "Mantén esto abierto hasta que la otra persona capture el código.",
     "handshake.qrHintFrames": "El saludo se reparte en {frames} imágenes: mantén esto abierto hasta que las capture todas.",
-    "verify.title": "Verificación de seguridad",
-    "verify.desc": "Compara este código de seguridad con la otra persona por otra vía (voz o en persona) y escríbelo para desbloquear el chat.",
-    "verify.enterLabel": "Introduce el código verificado",
     "verify.placeholder": "Escribe el código aquí",
     "verify.confirm": "Confirmar el código",
     "verify.confirmed": "Confirmado",
-    "verify.mismatch": "No coinciden",
-    "verify.yours": "Tu confirmación",
-    "verify.peer": "Confirmación de la otra persona",
     "verify.pending": "Pendiente",
     "verify.waiting": "Esperando el código…",
-    "verify.verified": "Canal verificado",
-    "verify.bothConfirmed": "Ambas partes han confirmado. Abriendo el chat seguro…",
+    "sasv.title": "Verifica a tu contacto",
+    "sasv.titleDone": "Contacto verificado",
+    "sasv.desc": "Lee el código en voz alta por llamada o en persona. Continúa solo si tu contacto ve los mismos dígitos.",
+    "sasv.descDone": "Ambos confirmasteis el mismo código. La conexión está autenticada.",
+    "sasv.enter": "Introduce el código",
+    "sasv.match": "Coincide",
+    "sasv.noMatch": "No coincide",
+    "sasv.you": "Tú",
+    "sasv.peer": "Contacto",
+    "sasv.waitingPeer": "Esperando a tu contacto…",
+    "sasv.codesDiffer": "Los códigos no coinciden",
+    "sasv.opening": "Abriendo el chat seguro",
     "pwa.bannerTitle": "Instala SecureBit.chat",
     "pwa.bannerDesc": "Disfruta de la experiencia de app nativa con más seguridad",
     "pwa.install": "Instalar",
@@ -353,9 +358,8 @@
     "action.scan": "Escanear",
     "action.downloadDesktop": "Descargar la app de escritorio",
     "action.advancedSettings": "Ajustes avanzados",
-    "cred.offerTag": "oferta · o copia el texto",
-    "cred.answerTag": "respuesta · o copia el texto",
     "cred.reveal": "Haz clic para mostrarlo: mantén este código en privado",
+    "cred.orCopy": "O copia el código",
     "qr.title": "Escanear código QR",
     "qr.subtitle": "Apunta la cámara a su código QR",
     "qr.scanning": "Escaneando…",
diff --git a/locales/fa.json b/locales/fa.json
index c0c57a7..2776803 100644
--- a/locales/fa.json
+++ b/locales/fa.json
@@ -125,9 +125,10 @@
     "intro.createDesc": "دستگاه شما کلیدها و یک دعوت‌نامهٔ یک‌بارمصرف می‌سازد. هیچ‌چیز به سرور نمی‌رسد.",
     "intro.createCta": "ساخت کلید و دعوت‌نامه",
     "intro.joinTitle": "به کانالی بپیوندید",
+    "intro.joinDesc": "QR طرف مقابل را با دوربین اسکن کنید یا کد دعوت او را جای‌گذاری کنید.",
     "intro.scanTitle": "‏QR را با دوربین بخوانید",
     "intro.scanSubtitle": "سریع‌ترین راه - به صفحهٔ همتایتان بگیرید",
-    "intro.orPasteCode": "یا کد را بچسبانید",
+    "intro.orPasteCode": "یا کد را جای‌گذاری کنید",
     "intro.pastePlaceholder": "کد دعوت را اینجا بچسبانید…",
     "intro.connect": "اتصال",
     "intro.connecting": "در حال پردازش…",
@@ -303,22 +304,26 @@
     "handshake.establish": "برقراری اتصال",
     "handshake.thenReceive": "سپس پاسخی را که همتایتان برمی‌گرداند دریافت کنید",
     "handshake.pasteAnswerPlaceholder": "کد پاسخ همتا را بچسبانید…",
-    "handshake.answerSentNote": "این پاسخ را برای سازنده بفرستید و منتظر بمانید - گفتگو به‌محض اتصال او باز می‌شود.",
+    "handshake.answerSentNote": "در انتظار اتصال سازنده. گفتگو به‌طور خودکار باز می‌شود.",
     "handshake.qrHint": "این را باز نگه دارید تا همتایتان کد را بگیرد.",
     "handshake.qrHintFrames": "دست‌دادن میان {frames} فریم پخش شده است - این را باز نگه دارید تا همتایتان همهٔ آن‌ها را بگیرد.",
-    "verify.title": "تأیید امنیتی",
-    "verify.desc": "این کد ایمنی را از راه کانالی جداگانه (تماس صوتی / حضوری) با همتایتان مقایسه کنید، سپس آن را بنویسید تا گفتگو باز شود.",
-    "verify.enterLabel": "کد تأییدشده را وارد کنید",
     "verify.placeholder": "کد را اینجا بنویسید",
     "verify.confirm": "تأیید کد",
     "verify.confirmed": "تأیید شد",
-    "verify.mismatch": "هم‌خوان نیستند",
-    "verify.yours": "تأیید شما",
-    "verify.peer": "تأیید همتا",
     "verify.pending": "در انتظار",
     "verify.waiting": "در انتظار کد…",
-    "verify.verified": "کانال تأیید شد",
-    "verify.bothConfirmed": "هر دو طرف تأیید کردند. گفتگوی امن در حال باز شدن…",
+    "sasv.title": "طرف مقابل را تأیید کنید",
+    "sasv.titleDone": "طرف مقابل تأیید شد",
+    "sasv.desc": "کد را در تماس یا حضوری با صدای بلند بخوانید. فقط وقتی ادامه دهید که طرف مقابل همان ارقام را ببیند.",
+    "sasv.descDone": "هر دو یک کد را تأیید کردید. اتصال احراز هویت شد.",
+    "sasv.enter": "کد را وارد کنید",
+    "sasv.match": "مطابق است",
+    "sasv.noMatch": "مطابق نیست",
+    "sasv.you": "شما",
+    "sasv.peer": "طرف مقابل",
+    "sasv.waitingPeer": "در انتظار طرف مقابل…",
+    "sasv.codesDiffer": "کدها مطابق نیستند",
+    "sasv.opening": "در حال باز کردن گفتگوی امن",
     "pwa.bannerTitle": "‏SecureBit.chat را نصب کنید",
     "pwa.bannerDesc": "تجربهٔ برنامهٔ بومی با امنیت بیشتر",
     "pwa.install": "نصب",
@@ -353,9 +358,8 @@
     "action.scan": "خواندن",
     "action.downloadDesktop": "دریافت برنامهٔ رومیزی",
     "action.advancedSettings": "تنظیمات پیشرفته",
-    "cred.offerTag": "پیشنهاد · یا متن را رونوشت کنید",
-    "cred.answerTag": "پاسخ · یا متن را رونوشت کنید",
     "cred.reveal": "برای نمایش کلیک کنید - این کد را خصوصی نگه دارید",
+    "cred.orCopy": "یا کد را رونوشت کنید",
     "qr.title": "خواندن کد QR",
     "qr.subtitle": "دوربین را به QR آن‌ها بگیرید",
     "qr.scanning": "در حال خواندن…",
diff --git a/locales/fr.json b/locales/fr.json
index 3288f8b..3fcb10d 100644
--- a/locales/fr.json
+++ b/locales/fr.json
@@ -120,9 +120,10 @@
     "intro.createDesc": "Votre appareil génère les clés et une invitation à usage unique. Rien de tout cela ne passe par un serveur.",
     "intro.createCta": "Générer les clés et l'invitation",
     "intro.joinTitle": "Rejoindre un canal",
+    "intro.joinDesc": "Scannez le QR de votre correspondant avec l'appareil photo, ou collez son code d'invitation.",
     "intro.scanTitle": "Scanner le QR avec la caméra",
     "intro.scanSubtitle": "Le plus rapide : visez l'écran de votre correspondant",
-    "intro.orPasteCode": "ou collez le code",
+    "intro.orPasteCode": "Ou collez le code",
     "intro.pastePlaceholder": "Collez ici le code d'invitation…",
     "intro.connect": "Se connecter",
     "intro.connecting": "Traitement…",
@@ -298,22 +299,26 @@
     "handshake.establish": "Établir la connexion",
     "handshake.thenReceive": "Recevez ensuite la réponse que votre correspondant renvoie",
     "handshake.pasteAnswerPlaceholder": "Collez le code de réponse…",
-    "handshake.answerSentNote": "Envoyez cette réponse à la personne qui a créé le canal, puis patientez : la discussion s'ouvre dès qu'elle se connecte.",
+    "handshake.answerSentNote": "En attente de la connexion du créateur. Le chat s'ouvrira automatiquement.",
     "handshake.qrHint": "Gardez ceci ouvert jusqu'à ce que votre correspondant ait capturé le code.",
     "handshake.qrHintFrames": "La poignée de main est répartie sur {frames} images : gardez ceci ouvert jusqu'à ce que votre correspondant les ait toutes capturées.",
-    "verify.title": "Vérification de sécurité",
-    "verify.desc": "Comparez ce code de sécurité avec votre correspondant par un autre canal (voix ou en personne), puis saisissez-le pour ouvrir la discussion.",
-    "verify.enterLabel": "Saisissez le code vérifié",
     "verify.placeholder": "Tapez le code ici",
     "verify.confirm": "Confirmer le code",
     "verify.confirmed": "Confirmé",
-    "verify.mismatch": "Ne correspond pas",
-    "verify.yours": "Votre confirmation",
-    "verify.peer": "Confirmation du correspondant",
     "verify.pending": "En attente",
     "verify.waiting": "En attente du code…",
-    "verify.verified": "Canal vérifié",
-    "verify.bothConfirmed": "Les deux parties ont confirmé. Ouverture de la discussion sécurisée…",
+    "sasv.title": "Vérifiez votre correspondant",
+    "sasv.titleDone": "Correspondant vérifié",
+    "sasv.desc": "Lisez le code à voix haute par appel ou en personne. Ne continuez que si votre correspondant voit les mêmes chiffres.",
+    "sasv.descDone": "Vous avez tous les deux confirmé le même code. La connexion est authentifiée.",
+    "sasv.enter": "Saisissez le code",
+    "sasv.match": "Correspond",
+    "sasv.noMatch": "Ne correspond pas",
+    "sasv.you": "Vous",
+    "sasv.peer": "Correspondant",
+    "sasv.waitingPeer": "En attente du correspondant…",
+    "sasv.codesDiffer": "Les codes ne correspondent pas",
+    "sasv.opening": "Ouverture du chat sécurisé",
     "pwa.bannerTitle": "Installer SecureBit.chat",
     "pwa.bannerDesc": "Profitez de l'expérience d'une application native, avec une sécurité renforcée",
     "pwa.install": "Installer",
@@ -348,9 +353,8 @@
     "action.scan": "Scanner",
     "action.downloadDesktop": "Télécharger l'application",
     "action.advancedSettings": "Réglages avancés",
-    "cred.offerTag": "offre · ou copiez le texte",
-    "cred.answerTag": "réponse · ou copiez le texte",
     "cred.reveal": "Cliquez pour afficher - gardez ce code privé",
+    "cred.orCopy": "Ou copiez le code",
     "qr.title": "Scanner le QR",
     "qr.subtitle": "Visez le QR de votre correspondant",
     "qr.scanning": "Lecture…",
diff --git a/locales/he.json b/locales/he.json
index e25e2cf..8ec4a1d 100644
--- a/locales/he.json
+++ b/locales/he.json
@@ -125,9 +125,10 @@
     "intro.createDesc": "המכשיר שלכם יוצר את המפתחות והזמנה חד־פעמית. שום דבר לא נוגע בשרת.",
     "intro.createCta": "יצירת מפתחות והזמנה",
     "intro.joinTitle": "הצטרפו לערוץ",
+    "intro.joinDesc": "סרקו את קוד ה-QR של הצד השני במצלמה, או הדביקו את קוד ההזמנה.",
     "intro.scanTitle": "סרקו QR עם המצלמה",
     "intro.scanSubtitle": "הכי מהיר - כוונו למסך של העמית",
-    "intro.orPasteCode": "או הדביקו קוד",
+    "intro.orPasteCode": "או הדביקו את הקוד",
     "intro.pastePlaceholder": "הדביקו כאן את קוד ההזמנה…",
     "intro.connect": "התחברו",
     "intro.connecting": "מעבד…",
@@ -303,22 +304,26 @@
     "handshake.establish": "יצירת חיבור",
     "handshake.thenReceive": "ואז קבלו את התשובה שהעמית שולח בחזרה",
     "handshake.pasteAnswerPlaceholder": "הדביקו את קוד התשובה של העמית…",
-    "handshake.answerSentNote": "שלחו את התשובה ליוצר ואז המתינו - הצ'אט נפתח ברגע שהם מתחברים.",
+    "handshake.answerSentNote": "ממתינים שהיוצר יתחבר. הצ'אט ייפתח אוטומטית.",
     "handshake.qrHint": "השאירו פתוח עד שהעמית יקלוט את הקוד.",
     "handshake.qrHintFrames": "לחיצת היד מפוצלת ל-{frames} פריימים - השאירו פתוח עד שהעמית יקלוט את כולם.",
-    "verify.title": "אימות אבטחה",
-    "verify.desc": "השוו את קוד הבטיחות הזה עם העמית בערוץ נפרד (שיחה קולית / פנים אל פנים), ואז הקלידו אותו כדי לפתוח את הצ'אט.",
-    "verify.enterLabel": "הזינו את הקוד המאומת",
     "verify.placeholder": "הקלידו כאן את הקוד",
     "verify.confirm": "אשרו את הקוד",
     "verify.confirmed": "אושר",
-    "verify.mismatch": "לא תואמים",
-    "verify.yours": "האישור שלכם",
-    "verify.peer": "אישור העמית",
     "verify.pending": "ממתין",
     "verify.waiting": "ממתין לקוד…",
-    "verify.verified": "הערוץ אומת",
-    "verify.bothConfirmed": "שני הצדדים אישרו. פותח את הצ'אט המאובטח…",
+    "sasv.title": "אמתו את הצד השני",
+    "sasv.titleDone": "הצד השני אומת",
+    "sasv.desc": "הקריאו את הקוד בקול בשיחה או פנים אל פנים. המשיכו רק אם הצד השני רואה את אותן ספרות.",
+    "sasv.descDone": "שניכם אישרתם את אותו קוד. החיבור מאומת.",
+    "sasv.enter": "הזינו את הקוד",
+    "sasv.match": "תואם",
+    "sasv.noMatch": "לא תואם",
+    "sasv.you": "אתם",
+    "sasv.peer": "הצד השני",
+    "sasv.waitingPeer": "ממתינים לצד השני…",
+    "sasv.codesDiffer": "הקודים לא תואמים",
+    "sasv.opening": "פותחים צ'אט מאובטח",
     "pwa.bannerTitle": "התקינו את SecureBit.chat",
     "pwa.bannerDesc": "קבלו חוויית אפליקציה מקורית עם אבטחה משופרת",
     "pwa.install": "התקנה",
@@ -353,9 +358,8 @@
     "action.scan": "סריקה",
     "action.downloadDesktop": "הורידו את אפליקציית שולחן העבודה",
     "action.advancedSettings": "הגדרות מתקדמות",
-    "cred.offerTag": "הצעה · או העתיקו טקסט",
-    "cred.answerTag": "תשובה · או העתיקו טקסט",
     "cred.reveal": "לחצו לחשיפה - שמרו את הקוד הזה פרטי",
+    "cred.orCopy": "או העתיקו את הקוד",
     "qr.title": "סריקת קוד QR",
     "qr.subtitle": "כוונו את המצלמה ל-QR שלהם",
     "qr.scanning": "סורק…",
diff --git a/locales/hi.json b/locales/hi.json
index d30cc45..7526b8d 100644
--- a/locales/hi.json
+++ b/locales/hi.json
@@ -120,9 +120,10 @@
     "intro.createDesc": "आपका उपकरण कुंजियाँ और एक बार काम आने वाला निमंत्रण बनाता है। इनमें से कुछ भी किसी सर्वर तक नहीं जाता।",
     "intro.createCta": "कुंजियाँ और निमंत्रण बनाएँ",
     "intro.joinTitle": "चैनल में शामिल हों",
+    "intro.joinDesc": "कैमरे से अपने साथी का QR स्कैन करें, या उनका आमंत्रण कोड पेस्ट करें।",
     "intro.scanTitle": "कैमरे से QR स्कैन करें",
     "intro.scanSubtitle": "सबसे तेज़ - सामने वाले की स्क्रीन पर कैमरा रखें",
-    "intro.orPasteCode": "या कोड चिपकाएँ",
+    "intro.orPasteCode": "या कोड पेस्ट करें",
     "intro.pastePlaceholder": "निमंत्रण कोड यहाँ चिपकाएँ…",
     "intro.connect": "जोड़ें",
     "intro.connecting": "प्रक्रिया जारी…",
@@ -298,22 +299,26 @@
     "handshake.establish": "जुड़ाव बनाएँ",
     "handshake.thenReceive": "फिर सामने वाले का भेजा उत्तर लीजिए",
     "handshake.pasteAnswerPlaceholder": "सामने वाले का उत्तर कोड चिपकाएँ…",
-    "handshake.answerSentNote": "यह उत्तर चैनल बनाने वाले को भेजिए और रुकिए - जैसे ही वे जुड़ेंगे, चैट खुल जाएगी।",
+    "handshake.answerSentNote": "निर्माता के जुड़ने की प्रतीक्षा है। चैट अपने-आप खुल जाएगी।",
     "handshake.qrHint": "जब तक सामने वाला कोड पढ़ न ले, इसे खुला रखिए।",
     "handshake.qrHintFrames": "हाथ मिलाना {frames} फ़्रेमों में बँटा है - जब तक सामने वाला सब पढ़ न ले, इसे खुला रखिए।",
-    "verify.title": "सुरक्षा सत्यापन",
-    "verify.desc": "इस सुरक्षा कोड को किसी दूसरे रास्ते से (आवाज़ पर या आमने-सामने) मिलाइए, फिर उसे लिखकर चैट खोलिए।",
-    "verify.enterLabel": "मिलाया हुआ कोड लिखें",
     "verify.placeholder": "कोड यहाँ लिखें",
     "verify.confirm": "कोड पक्का करें",
     "verify.confirmed": "पक्का हुआ",
-    "verify.mismatch": "मेल नहीं खाता",
-    "verify.yours": "आपकी पुष्टि",
-    "verify.peer": "सामने वाले की पुष्टि",
     "verify.pending": "प्रतीक्षा में",
     "verify.waiting": "कोड की प्रतीक्षा…",
-    "verify.verified": "चैनल सत्यापित",
-    "verify.bothConfirmed": "दोनों पक्षों ने पुष्टि कर दी। सुरक्षित चैट खुल रही है…",
+    "sasv.title": "अपने साथी की पुष्टि करें",
+    "sasv.titleDone": "साथी की पुष्टि हो गई",
+    "sasv.desc": "कॉल पर या आमने-सामने कोड ज़ोर से पढ़ें। तभी आगे बढ़ें जब आपके साथी को वही अंक दिखें।",
+    "sasv.descDone": "आप दोनों ने एक ही कोड की पुष्टि की। कनेक्शन प्रमाणित है।",
+    "sasv.enter": "कोड दर्ज करें",
+    "sasv.match": "मेल खाता है",
+    "sasv.noMatch": "मेल नहीं खाता",
+    "sasv.you": "आप",
+    "sasv.peer": "साथी",
+    "sasv.waitingPeer": "साथी की प्रतीक्षा…",
+    "sasv.codesDiffer": "कोड मेल नहीं खाते",
+    "sasv.opening": "सुरक्षित चैट खुल रही है",
     "pwa.bannerTitle": "SecureBit.chat इंस्टॉल करें",
     "pwa.bannerDesc": "बेहतर सुरक्षा के साथ मूल ऐप जैसा अनुभव पाइए",
     "pwa.install": "इंस्टॉल करें",
@@ -348,9 +353,8 @@
     "action.scan": "स्कैन करें",
     "action.downloadDesktop": "डेस्कटॉप ऐप डाउनलोड करें",
     "action.advancedSettings": "उन्नत सेटिंग्स",
-    "cred.offerTag": "निमंत्रण · या पाठ कॉपी करें",
-    "cred.answerTag": "उत्तर · या पाठ कॉपी करें",
     "cred.reveal": "देखने के लिए दबाएँ - यह कोड किसी को न बताएँ",
+    "cred.orCopy": "या कोड कॉपी करें",
     "qr.title": "QR कोड स्कैन करें",
     "qr.subtitle": "कैमरा सामने वाले के QR पर रखें",
     "qr.scanning": "पढ़ा जा रहा है…",
diff --git a/locales/ko.json b/locales/ko.json
index 5232400..6c168ef 100644
--- a/locales/ko.json
+++ b/locales/ko.json
@@ -120,6 +120,7 @@
     "intro.createDesc": "여러분의 기기가 키와 일회용 초대장을 만듭니다. 그 어느 것도 서버를 거치지 않습니다.",
     "intro.createCta": "키와 초대장 만들기",
     "intro.joinTitle": "채널 참여하기",
+    "intro.joinDesc": "카메라로 상대방의 QR을 스캔하거나 초대 코드를 붙여넣으세요.",
     "intro.scanTitle": "카메라로 QR 스캔",
     "intro.scanSubtitle": "가장 빠릅니다 - 상대의 화면을 비추세요",
     "intro.orPasteCode": "또는 코드 붙여넣기",
@@ -298,22 +299,26 @@
     "handshake.establish": "연결 맺기",
     "handshake.thenReceive": "그다음 상대가 보내는 응답을 받으세요",
     "handshake.pasteAnswerPlaceholder": "상대의 응답 코드를 붙여넣으세요…",
-    "handshake.answerSentNote": "이 응답을 만든 사람에게 보내고 기다리세요 - 상대가 연결되면 대화가 열립니다.",
+    "handshake.answerSentNote": "생성자의 연결을 기다리는 중입니다. 채팅이 자동으로 열립니다.",
     "handshake.qrHint": "상대가 코드를 다 읽을 때까지 이 화면을 열어 두세요.",
     "handshake.qrHintFrames": "악수가 {frames}개 화면으로 나뉘어 있습니다 - 상대가 전부 읽을 때까지 열어 두세요.",
-    "verify.title": "보안 확인",
-    "verify.desc": "다른 경로(통화나 대면)로 상대와 이 안전 코드를 대조한 뒤, 입력해서 대화를 여세요.",
-    "verify.enterLabel": "대조한 코드를 입력하세요",
     "verify.placeholder": "여기에 코드 입력",
     "verify.confirm": "코드 확인",
     "verify.confirmed": "확인됨",
-    "verify.mismatch": "일치하지 않음",
-    "verify.yours": "내 확인",
-    "verify.peer": "상대의 확인",
     "verify.pending": "대기 중",
     "verify.waiting": "코드 대기 중…",
-    "verify.verified": "채널 확인 완료",
-    "verify.bothConfirmed": "양쪽 모두 확인했습니다. 안전한 대화를 여는 중…",
+    "sasv.title": "상대방 확인",
+    "sasv.titleDone": "상대방 확인 완료",
+    "sasv.desc": "통화나 대면으로 코드를 소리 내어 읽어 주세요. 상대방이 같은 숫자를 볼 때만 계속하세요.",
+    "sasv.descDone": "두 사람 모두 같은 코드를 확인했습니다. 연결이 인증되었습니다.",
+    "sasv.enter": "코드 입력",
+    "sasv.match": "일치",
+    "sasv.noMatch": "일치하지 않음",
+    "sasv.you": "나",
+    "sasv.peer": "상대방",
+    "sasv.waitingPeer": "상대방을 기다리는 중…",
+    "sasv.codesDiffer": "코드가 일치하지 않음",
+    "sasv.opening": "보안 채팅을 여는 중",
     "pwa.bannerTitle": "SecureBit.chat 설치",
     "pwa.bannerDesc": "보안이 강화된 네이티브 앱 경험을 누리세요",
     "pwa.install": "설치",
@@ -348,9 +353,8 @@
     "action.scan": "스캔",
     "action.downloadDesktop": "데스크톱 앱 내려받기",
     "action.advancedSettings": "고급 설정",
-    "cred.offerTag": "초대 · 또는 텍스트 복사",
-    "cred.answerTag": "응답 · 또는 텍스트 복사",
     "cred.reveal": "눌러서 보기 - 이 코드는 남에게 알리지 마세요",
+    "cred.orCopy": "또는 코드 복사",
     "qr.title": "QR 코드 스캔",
     "qr.subtitle": "상대의 QR에 카메라를 맞추세요",
     "qr.scanning": "읽는 중…",
diff --git a/locales/ru.json b/locales/ru.json
index 43f362a..ecf9487 100644
--- a/locales/ru.json
+++ b/locales/ru.json
@@ -125,9 +125,10 @@
     "intro.createDesc": "Ваше устройство создаёт ключи и одноразовое приглашение. Ничто из этого не попадает на сервер.",
     "intro.createCta": "Создать ключи и приглашение",
     "intro.joinTitle": "Присоединиться к каналу",
+    "intro.joinDesc": "Отсканируйте QR собеседника камерой или вставьте его код приглашения.",
     "intro.scanTitle": "Сканировать QR камерой",
     "intro.scanSubtitle": "Быстрее всего - наведите на экран собеседника",
-    "intro.orPasteCode": "или вставьте код",
+    "intro.orPasteCode": "Или вставьте код",
     "intro.pastePlaceholder": "Вставьте код приглашения сюда…",
     "intro.connect": "Соединиться",
     "intro.connecting": "Обработка…",
@@ -303,22 +304,26 @@
     "handshake.establish": "Установить соединение",
     "handshake.thenReceive": "Затем получите ответ, который пришлёт собеседник",
     "handshake.pasteAnswerPlaceholder": "Вставьте код ответа собеседника…",
-    "handshake.answerSentNote": "Отправьте этот ответ создателю и подождите - чат откроется, как только он подключится.",
+    "handshake.answerSentNote": "Ждём, пока создатель подключится. Чат откроется автоматически.",
     "handshake.qrHint": "Держите это открытым, пока собеседник не считает код.",
     "handshake.qrHintFrames": "Рукопожатие разбито на {frames} кадров - держите это открытым, пока собеседник не считает все.",
-    "verify.title": "Проверка безопасности",
-    "verify.desc": "Сверьте этот код безопасности с собеседником по другому каналу (голосом или лично), затем введите его, чтобы открыть чат.",
-    "verify.enterLabel": "Введите сверенный код",
     "verify.placeholder": "Введите код здесь",
     "verify.confirm": "Подтвердить код",
     "verify.confirmed": "Подтверждено",
-    "verify.mismatch": "Не совпадают",
-    "verify.yours": "Ваше подтверждение",
-    "verify.peer": "Подтверждение собеседника",
     "verify.pending": "Ожидается",
     "verify.waiting": "Ожидание кода…",
-    "verify.verified": "Канал проверен",
-    "verify.bothConfirmed": "Обе стороны подтвердили. Открываем защищённый чат…",
+    "sasv.title": "Проверьте собеседника",
+    "sasv.titleDone": "Собеседник проверен",
+    "sasv.desc": "Прочитайте код вслух по звонку или при встрече. Продолжайте, только если собеседник видит те же цифры.",
+    "sasv.descDone": "Вы оба подтвердили один и тот же код. Соединение подлинное.",
+    "sasv.enter": "Введите код",
+    "sasv.match": "Совпадает",
+    "sasv.noMatch": "Не совпадает",
+    "sasv.you": "Вы",
+    "sasv.peer": "Собеседник",
+    "sasv.waitingPeer": "Ждём собеседника…",
+    "sasv.codesDiffer": "Коды не совпадают",
+    "sasv.opening": "Открываем защищённый чат",
     "pwa.bannerTitle": "Установите SecureBit.chat",
     "pwa.bannerDesc": "Опыт полноценного приложения с усиленной защитой",
     "pwa.install": "Установить",
@@ -353,9 +358,8 @@
     "action.scan": "Сканировать",
     "action.downloadDesktop": "Скачать приложение",
     "action.advancedSettings": "Дополнительные настройки",
-    "cred.offerTag": "предложение · или скопируйте текст",
-    "cred.answerTag": "ответ · или скопируйте текст",
     "cred.reveal": "Нажмите, чтобы показать - держите этот код в тайне",
+    "cred.orCopy": "Или скопируйте код",
     "qr.title": "Сканировать QR-код",
     "qr.subtitle": "Наведите камеру на их QR-код",
     "qr.scanning": "Сканирование…",
diff --git a/locales/uk.json b/locales/uk.json
index 7fab0ae..213a2f4 100644
--- a/locales/uk.json
+++ b/locales/uk.json
@@ -125,9 +125,10 @@
     "intro.createDesc": "Ваш пристрій створює ключі та одноразове запрошення. Ніщо з цього не потрапляє на сервер.",
     "intro.createCta": "Створити ключі та запрошення",
     "intro.joinTitle": "Приєднатися до каналу",
+    "intro.joinDesc": "Відскануйте QR співрозмовника камерою або вставте його код запрошення.",
     "intro.scanTitle": "Сканувати QR камерою",
     "intro.scanSubtitle": "Найшвидше - наведіть на екран співрозмовника",
-    "intro.orPasteCode": "або вставте код",
+    "intro.orPasteCode": "Або вставте код",
     "intro.pastePlaceholder": "Вставте код запрошення сюди…",
     "intro.connect": "З'єднатися",
     "intro.connecting": "Обробка…",
@@ -303,22 +304,26 @@
     "handshake.establish": "Встановити з'єднання",
     "handshake.thenReceive": "Потім отримайте відповідь, яку надішле співрозмовник",
     "handshake.pasteAnswerPlaceholder": "Вставте код відповіді співрозмовника…",
-    "handshake.answerSentNote": "Надішліть цю відповідь створювачу й зачекайте - чат відкриється, щойно він приєднається.",
+    "handshake.answerSentNote": "Чекаємо, поки творець під'єднається. Чат відкриється автоматично.",
     "handshake.qrHint": "Тримайте це відкритим, доки співрозмовник не зчитає код.",
     "handshake.qrHintFrames": "Рукостискання розбите на {frames} кадрів - тримайте це відкритим, доки співрозмовник не зчитає всі.",
-    "verify.title": "Перевірка безпеки",
-    "verify.desc": "Звірте цей код безпеки зі співрозмовником іншим каналом (голосом або особисто), потім введіть його, щоб відкрити чат.",
-    "verify.enterLabel": "Введіть звірений код",
     "verify.placeholder": "Введіть код тут",
     "verify.confirm": "Підтвердити код",
     "verify.confirmed": "Підтверджено",
-    "verify.mismatch": "Не збігаються",
-    "verify.yours": "Ваше підтвердження",
-    "verify.peer": "Підтвердження співрозмовника",
     "verify.pending": "Очікується",
     "verify.waiting": "Очікування коду…",
-    "verify.verified": "Канал перевірено",
-    "verify.bothConfirmed": "Обидві сторони підтвердили. Відкриваємо захищений чат…",
+    "sasv.title": "Перевірте співрозмовника",
+    "sasv.titleDone": "Співрозмовника перевірено",
+    "sasv.desc": "Прочитайте код уголос під час дзвінка або зустрічі. Продовжуйте, лише якщо співрозмовник бачить ті самі цифри.",
+    "sasv.descDone": "Ви обидва підтвердили той самий код. З'єднання справжнє.",
+    "sasv.enter": "Введіть код",
+    "sasv.match": "Збігається",
+    "sasv.noMatch": "Не збігається",
+    "sasv.you": "Ви",
+    "sasv.peer": "Співрозмовник",
+    "sasv.waitingPeer": "Чекаємо на співрозмовника…",
+    "sasv.codesDiffer": "Коди не збігаються",
+    "sasv.opening": "Відкриваємо захищений чат",
     "pwa.bannerTitle": "Встановіть SecureBit.chat",
     "pwa.bannerDesc": "Досвід власного застосунку з посиленим захистом",
     "pwa.install": "Встановити",
@@ -353,9 +358,8 @@
     "action.scan": "Сканувати",
     "action.downloadDesktop": "Завантажити застосунок",
     "action.advancedSettings": "Додаткові налаштування",
-    "cred.offerTag": "пропозиція · або скопіюйте текст",
-    "cred.answerTag": "відповідь · або скопіюйте текст",
     "cred.reveal": "Натисніть, щоб показати - тримайте цей код у таємниці",
+    "cred.orCopy": "Або скопіюйте код",
     "qr.title": "Сканувати QR-код",
     "qr.subtitle": "Наведіть камеру на їхній QR-код",
     "qr.scanning": "Сканування…",
diff --git a/locales/ur.json b/locales/ur.json
index 62b19ca..afdc253 100644
--- a/locales/ur.json
+++ b/locales/ur.json
@@ -125,6 +125,7 @@
     "intro.createDesc": "آپ کا آلہ کلیدیں اور ایک بار کی دعوت بناتا ہے۔ کچھ بھی سرور کو نہیں چھوتا۔",
     "intro.createCta": "کلیدیں اور دعوت بنائیں",
     "intro.joinTitle": "چینل میں شامل ہوں",
+    "intro.joinDesc": "کیمرے سے اپنے ساتھی کا QR اسکین کریں، یا ان کا دعوتی کوڈ چسپاں کریں۔",
     "intro.scanTitle": "کیمرے سے QR پڑھیں",
     "intro.scanSubtitle": "سب سے تیز - ساتھی کی سکرین کی طرف کریں",
     "intro.orPasteCode": "یا کوڈ چسپاں کریں",
@@ -303,22 +304,26 @@
     "handshake.establish": "اتصال قائم کریں",
     "handshake.thenReceive": "پھر وہ جواب وصول کریں جو آپ کا ساتھی واپس بھیجتا ہے",
     "handshake.pasteAnswerPlaceholder": "ساتھی کا جوابی کوڈ چسپاں کریں…",
-    "handshake.answerSentNote": "یہ جواب بنانے والے کو بھیجیں، پھر انتظار کریں - ان کے جڑتے ہی گفتگو کھل جائے گی۔",
+    "handshake.answerSentNote": "تخلیق کار کے جڑنے کا انتظار ہے۔ چیٹ خود بخود کھل جائے گی۔",
     "handshake.qrHint": "یہ اس وقت تک کھلا رکھیں جب تک ساتھی کوڈ نہ پکڑ لے۔",
     "handshake.qrHintFrames": "مصافحہ {frames} فریموں میں بٹا ہے - یہ اس وقت تک کھلا رکھیں جب تک ساتھی سب نہ پکڑ لے۔",
-    "verify.title": "حفاظتی تصدیق",
-    "verify.desc": "یہ حفاظتی کوڈ کسی الگ ذریعے (آواز / بالمشافہ) سے اپنے ساتھی کے ساتھ ملائیں، پھر گفتگو کھولنے کے لیے لکھیں۔",
-    "verify.enterLabel": "تصدیق شدہ کوڈ درج کریں",
     "verify.placeholder": "کوڈ یہاں لکھیں",
     "verify.confirm": "کوڈ کی تصدیق",
     "verify.confirmed": "تصدیق ہو گئی",
-    "verify.mismatch": "مطابقت نہیں",
-    "verify.yours": "آپ کی تصدیق",
-    "verify.peer": "ساتھی کی تصدیق",
     "verify.pending": "زیرِ التوا",
     "verify.waiting": "کوڈ کا انتظار…",
-    "verify.verified": "چینل تصدیق شدہ",
-    "verify.bothConfirmed": "دونوں فریقوں نے تصدیق کی۔ محفوظ گفتگو کھولی جا رہی ہے…",
+    "sasv.title": "اپنے ساتھی کی تصدیق کریں",
+    "sasv.titleDone": "ساتھی کی تصدیق ہو گئی",
+    "sasv.desc": "کال پر یا آمنے سامنے کوڈ بلند آواز سے پڑھیں۔ صرف تب آگے بڑھیں جب آپ کے ساتھی کو وہی ہندسے نظر آئیں۔",
+    "sasv.descDone": "آپ دونوں نے ایک ہی کوڈ کی تصدیق کی۔ کنکشن مستند ہے۔",
+    "sasv.enter": "کوڈ درج کریں",
+    "sasv.match": "مماثل ہے",
+    "sasv.noMatch": "مماثل نہیں",
+    "sasv.you": "آپ",
+    "sasv.peer": "ساتھی",
+    "sasv.waitingPeer": "ساتھی کا انتظار…",
+    "sasv.codesDiffer": "کوڈ مماثل نہیں",
+    "sasv.opening": "محفوظ چیٹ کھل رہی ہے",
     "pwa.bannerTitle": "‏SecureBit.chat نصب کریں",
     "pwa.bannerDesc": "بہتر سلامتی کے ساتھ مقامی ایپ کا تجربہ حاصل کریں",
     "pwa.install": "نصب",
@@ -353,9 +358,8 @@
     "action.scan": "پڑھیں",
     "action.downloadDesktop": "ڈیسک ٹاپ ایپ ڈاؤن لوڈ کریں",
     "action.advancedSettings": "اعلیٰ ترتیبات",
-    "cred.offerTag": "پیشکش · یا متن نقل کریں",
-    "cred.answerTag": "جواب · یا متن نقل کریں",
     "cred.reveal": "دکھانے کے لیے دبائیں - یہ کوڈ نجی رکھیں",
+    "cred.orCopy": "یا کوڈ نقل کریں",
     "qr.title": "‏QR کوڈ پڑھیں",
     "qr.subtitle": "اپنا کیمرہ ان کے QR کی طرف کریں",
     "qr.scanning": "پڑھا جا رہا ہے…",
diff --git a/locales/zh.json b/locales/zh.json
index f2f833c..78a842e 100644
--- a/locales/zh.json
+++ b/locales/zh.json
@@ -120,6 +120,7 @@
     "intro.createDesc": "你的设备会生成密钥和一次性邀请。这些都不会经过任何服务器。",
     "intro.createCta": "生成密钥与邀请",
     "intro.joinTitle": "加入通道",
+    "intro.joinDesc": "用相机扫描对方的二维码，或粘贴对方的邀请代码。",
     "intro.scanTitle": "用摄像头扫描二维码",
     "intro.scanSubtitle": "最快的方式 —— 对准对方的屏幕",
     "intro.orPasteCode": "或粘贴代码",
@@ -298,22 +299,26 @@
     "handshake.establish": "建立连接",
     "handshake.thenReceive": "然后接收对方发回的应答",
     "handshake.pasteAnswerPlaceholder": "粘贴对方的应答码…",
-    "handshake.answerSentNote": "把这段应答发给创建者，然后等待 —— 对方一连上，聊天就会打开。",
+    "handshake.answerSentNote": "正在等待创建者连接。聊天将自动打开。",
     "handshake.qrHint": "在对方读取完代码之前，请保持此界面打开。",
     "handshake.qrHintFrames": "握手被拆成 {frames} 帧 —— 在对方读完全部帧之前，请保持此界面打开。",
-    "verify.title": "安全校验",
-    "verify.desc": "通过另一条渠道（通话或当面）与对方核对这个安全码，然后输入它以解锁聊天。",
-    "verify.enterLabel": "输入核对过的安全码",
     "verify.placeholder": "在此输入安全码",
     "verify.confirm": "确认安全码",
     "verify.confirmed": "已确认",
-    "verify.mismatch": "不一致",
-    "verify.yours": "你的确认",
-    "verify.peer": "对方的确认",
     "verify.pending": "等待中",
     "verify.waiting": "等待安全码…",
-    "verify.verified": "通道已校验",
-    "verify.bothConfirmed": "双方均已确认。正在打开安全聊天…",
+    "sasv.title": "验证对方",
+    "sasv.titleDone": "对方已验证",
+    "sasv.desc": "通过通话或当面大声读出代码。只有对方看到相同的数字时才继续。",
+    "sasv.descDone": "你们双方确认了相同的代码。连接已通过认证。",
+    "sasv.enter": "输入代码",
+    "sasv.match": "一致",
+    "sasv.noMatch": "不一致",
+    "sasv.you": "你",
+    "sasv.peer": "对方",
+    "sasv.waitingPeer": "正在等待对方…",
+    "sasv.codesDiffer": "代码不一致",
+    "sasv.opening": "正在打开安全聊天",
     "pwa.bannerTitle": "安装 SecureBit.chat",
     "pwa.bannerDesc": "获得原生应用般的体验，安全性更进一步",
     "pwa.install": "安装",
@@ -348,9 +353,8 @@
     "action.scan": "扫描",
     "action.downloadDesktop": "下载桌面应用",
     "action.advancedSettings": "高级设置",
-    "cred.offerTag": "邀请 · 或复制文本",
-    "cred.answerTag": "应答 · 或复制文本",
     "cred.reveal": "点击显示 - 请勿泄露此代码",
+    "cred.orCopy": "或复制代码",
     "qr.title": "扫描二维码",
     "qr.subtitle": "把摄像头对准对方的二维码",
     "qr.scanning": "扫描中…",
diff --git a/meta.json b/meta.json
index 0a1a89e..edc91f1 100644
--- a/meta.json
+++ b/meta.json
@@ -1,10 +1,10 @@
 {
-  "version": "1790225533889",
-  "buildVersion": "1790225533889",
-  "appVersion": "6.8.8",
-  "buildTime": "2026-09-24T04:52:13.935Z",
-  "buildId": "1790225533889-eac3009",
-  "gitHash": "eac3009",
+  "version": "1790540575787",
+  "buildVersion": "1790540575787",
+  "appVersion": "6.8.12",
+  "buildTime": "2026-09-27T20:22:55.824Z",
+  "buildId": "1790540575787-cd9d78d",
+  "gitHash": "cd9d78d",
   "generated": true,
-  "generatedAt": "2026-09-24T04:52:13.936Z"
+  "generatedAt": "2026-09-27T20:22:55.825Z"
 }
\ No newline at end of file
diff --git a/package.json b/package.json
index 63e1f4c..6f8edee 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "securebit-chat",
-  "version": "6.8.8",
+  "version": "6.8.12",
   "description": "Secure P2P Communication Application with End-to-End Encryption",
   "main": "index.html",
   "scripts": {
diff --git a/ru/index.html b/ru/index.html
index 12440ef..e3d9a37 100644
--- a/ru/index.html
+++ b/ru/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/ru/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/ru.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/ru.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/sitemap.xml b/sitemap.xml
index c3568fb..b9742dc 100644
--- a/sitemap.xml
+++ b/sitemap.xml
@@ -17,7 +17,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -37,7 +37,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -57,7 +57,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -77,7 +77,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -97,7 +97,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -117,7 +117,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -137,7 +137,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -157,7 +157,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -177,7 +177,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -197,7 +197,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -217,7 +217,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -237,7 +237,7 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
@@ -257,67 +257,67 @@
         <xhtml:link rel="alternate" hreflang="fa" href="https://securebit.chat/fa/"/>
         <xhtml:link rel="alternate" hreflang="ur" href="https://securebit.chat/ur/"/>
         <xhtml:link rel="alternate" hreflang="x-default" href="https://securebit.chat/"/>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>weekly</changefreq>
         <priority>1.0</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/faq/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/architecture/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/cryptography/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/descriptor-sbq2/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/configuration/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/calls/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/api/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/contributing/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
     <url>
         <loc>https://securebit.chat/docs/use-policy/</loc>
-        <lastmod>2026-09-24</lastmod>
+        <lastmod>2026-09-27</lastmod>
         <changefreq>monthly</changefreq>
         <priority>0.7</priority>
     </url>
diff --git a/src/app.jsx b/src/app.jsx
index 1426353..b3ddf5c 100644
--- a/src/app.jsx
+++ b/src/app.jsx
@@ -1170,9 +1170,23 @@ import { GroupCallMedia, mediaErrorCode } from './group/groupCallMedia.js';
                     const [copied, setCopied] = React.useState(false);
                     const [sasInput, setSasInput] = React.useState('');
                     const [sasError, setSasError] = React.useState('');
+                    const [sasFocused, setSasFocused] = React.useState(false);
+                    const [sasShake, setSasShake] = React.useState(0);
                     const [platformsOpen, setPlatformsOpen] = React.useState(false);
                     const [codeRevealed, setCodeRevealed] = React.useState(false);
                     const [genProgress, setGenProgress] = React.useState(0);
+                    // Countdown on the invitation: the joining side refuses an offer older
+                    // than 30 minutes (MAX_OFFER_AGE in EnhancedSecureWebRTCManager), measured
+                    // from the offer's own timestamp.
+                    const OFFER_TTL_MS = 30 * 60 * 1000;
+                    const offerTs = (offerData && typeof offerData === 'object' && Number(offerData.ts || offerData.timestamp)) || null;
+                    const [nowTick, setNowTick] = React.useState(() => Date.now());
+                    React.useEffect(() => {
+                        if (!showOfferStep || !offerTs) return undefined;
+                        setNowTick(Date.now());
+                        const id = setInterval(() => setNowTick(Date.now()), 1000);
+                        return () => clearInterval(id);
+                    }, [showOfferStep, offerTs]);
 
                     // Reset the typed SAS whenever a fresh verification code arrives
                     React.useEffect(() => { setSasInput(''); setSasError(''); }, [verificationCode]);
@@ -1549,72 +1563,151 @@ import { GroupCallMedia, mediaErrorCode } from './group/groupCallMedia.js';
 
                     const backButton = (key) => h('button', { key: key || 'back', className: 'sb-soft-btn', onClick: resetToSelect, style: { display: 'inline-flex', alignItems: 'center', gap: '6px', marginBottom: '14px', paddingBlock: '6px', paddingInlineStart: '8px', paddingInlineEnd: '11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'transparent', color: 'var(--sb-text-6)', fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 600, cursor: 'pointer' } }, [fa('fa-chevron-left', { key: 'i' }), t('action.back')]);
 
-                    // credential code block (offer/answer text fallback + copy)
-                    const credBlock = h('div', { key: 'codeblock', style: { borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.08)', background: 'var(--sb-surface)', overflow: 'hidden', marginBottom: '16px' } }, [
-                        h('div', { key: 'bar', style: { display: 'flex', alignItems: 'center', gap: '8px', padding: '9px 12px', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', background: 'rgba(0,0,0,0.2)' } }, [
-                            h('span', { key: 'dot', style: { width: '7px', height: '7px', borderRadius: '50%', background: accent } }),
-                            h('span', { key: 'tag', style: { fontFamily: MONO, fontSize: '10.5px', fontWeight: 600, color: 'var(--sb-text-7)' } }, isCreate ? t('cred.offerTag') : t('cred.answerTag')),
-                            h('button', { key: 'copy', onClick: copyCred, style: { marginInlineStart: 'auto', padding: '4px 9px', borderRadius: '6px', border: `1px solid ${copied ? 'rgba(var(--sb-green-rgb), 0.4)' : 'rgba(var(--sb-ink), 0.1)'}`, background: copied ? 'rgba(var(--sb-green-rgb), 0.1)' : 'rgba(var(--sb-ink), 0.04)', color: copied ? C_GREEN : 'var(--sb-text-5)', fontFamily: 'inherit', fontSize: '11px', fontWeight: 600, cursor: 'pointer', transition: 'all .14s' } }, copied ? t('action.copied') : t('action.copy'))
+                    // Invitation card (Share Invitation v3 design): QR preview row on top,
+                    // the text code with copy + countdown below, one bordered surface.
+                    const offerLeft = (isCreate && offerTs) ? Math.max(0, Math.ceil((offerTs + OFFER_TTL_MS - nowTick) / 1000)) : null;
+                    const offerExpires = offerLeft === null ? null : `${Math.floor(offerLeft / 60)}:${String(offerLeft % 60).padStart(2, '0')}`;
+                    const credCard = h('div', { key: 'card', style: { borderRadius: '16px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', overflow: 'hidden', marginBottom: isCreate ? '26px' : '16px' } }, [
+                        qrCodeUrl && h('button', { key: 'showqr', className: 'sb-qr-row', onClick: () => setQrModalOpen(true), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '14px', padding: '14px 16px', border: 'none', background: 'transparent', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start', transition: 'background .15s' } }, [
+                            h('span', { key: 'ic', style: { flex: 'none', width: '48px', height: '48px', padding: '5px', borderRadius: '9px', background: '#fff' } },
+                                h('img', { src: qrCodeUrl, alt: '', style: { width: '100%', height: '100%', objectFit: 'contain', display: 'block', imageRendering: 'pixelated' } })),
+                            h('span', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [
+                                h('span', { key: 't', style: { display: 'block', fontSize: '15px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('qr.showTitle')),
+                                h('span', { key: 's', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '2px' } }, (qrFramesTotal || 0) > 1 ? t('qr.showSubtitleFrames', { frames: qrFramesTotal }) : t('qr.showSubtitle'))
+                            ]),
+                            fa('fa-chevron-right', { color: 'var(--sb-text-9)' })
                         ]),
-                        // The handshake code is sensitive — keep it blurred until the
-                        // user deliberately reveals it, underscoring that it must be
-                        // shared only over a channel they trust.
-                        h('div', { key: 'codewrap', style: { position: 'relative' } }, [
-                            h('div', { key: 'code', className: 'sb-sc', style: { fontFamily: MONO, fontSize: '11px', lineHeight: 1.55, color: 'var(--sb-text-code)', wordBreak: 'break-all', padding: '11px 12px', maxHeight: '72px', overflowY: 'auto', filter: codeRevealed ? 'none' : 'blur(6px)', userSelect: codeRevealed ? 'text' : 'none', transition: 'filter .2s' } }, credCode),
-                            !codeRevealed && h('button', { key: 'reveal', onClick: () => setCodeRevealed(true), style: { position: 'absolute', inset: 0, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', border: 'none', background: 'rgba(var(--sb-surface-rgb), 0.25)', color: 'var(--sb-text-4)', fontFamily: 'inherit', fontSize: '12px', fontWeight: 600, cursor: 'pointer' } }, [
-                                fa('fa-eye', { key: 'i', fontSize: '15px' }),
-                                t('cred.reveal')
+                        qrCodeUrl && h('div', { key: 'div', style: { height: '1px', background: 'rgba(var(--sb-ink), 0.06)' } }),
+                        h('div', { key: 'code', style: { padding: '12px 16px 16px' } }, [
+                            h('div', { key: 'bar', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', gap: '10px', marginBottom: '10px' } }, [
+                                h('span', { key: 'l', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)' } }, t('cred.orCopy')),
+                                h('span', { key: 'r', style: { display: 'flex', alignItems: 'center', gap: '12px' } }, [
+                                    offerExpires && h('span', { key: 'exp', dir: 'ltr', style: { fontFamily: MONO, fontSize: '11px', color: offerLeft < 60 ? 'var(--sb-red)' : 'var(--sb-text-9)' } }, offerExpires),
+                                    h('button', { key: 'copy', className: 'sb-soft-btn', onClick: copyCred, style: { display: 'inline-flex', alignItems: 'center', gap: '6px', padding: '6px 11px', borderRadius: '8px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.03)', color: 'var(--sb-text-2)', fontFamily: 'inherit', fontSize: '12.5px', fontWeight: 700, cursor: 'pointer' } }, [
+                                        copied && fa('fa-check', { key: 'i', color: C_GREEN_SOLID }),
+                                        copied ? t('action.copied') : t('action.copy')
+                                    ])
+                                ])
+                            ]),
+                            // The handshake code is sensitive — keep it blurred until the
+                            // user deliberately reveals it, underscoring that it must be
+                            // shared only over a channel they trust.
+                            h('div', { key: 'codewrap', onClick: () => setCodeRevealed((v) => !v), style: { position: 'relative', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.05)', background: 'var(--sb-bg)', overflow: 'hidden', cursor: 'pointer' } }, [
+                                h('div', { key: 'code', dir: 'ltr', className: 'sb-sc', style: { fontFamily: MONO, fontSize: '11.5px', lineHeight: 1.6, color: 'var(--sb-text-code)', wordBreak: 'break-all', padding: '11px 13px', maxHeight: '78px', overflowY: codeRevealed ? 'auto' : 'hidden', filter: codeRevealed ? 'none' : 'blur(5px)', userSelect: codeRevealed ? 'text' : 'none', transition: 'filter .25s' } }, credCode),
+                                !codeRevealed && h('span', { key: 'reveal', style: { position: 'absolute', inset: 0, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '0 12px', textAlign: 'center', color: 'var(--sb-text-3)', fontSize: '12.5px', fontWeight: 600 } }, [
+                                    fa('fa-eye', { key: 'i' }),
+                                    t('cred.reveal')
+                                ])
                             ])
                         ])
                     ]);
 
-                    const showQrButton = qrCodeUrl && h('button', { key: 'showqr', onClick: () => setQrModalOpen(true), style: { width: '100%', display: 'flex', alignItems: 'center', gap: '13px', padding: '15px 16px', borderRadius: '14px', border: `1px solid ${isCreate ? 'rgba(var(--sb-orange-rgb), 0.3)' : 'rgba(var(--sb-green-rgb), 0.3)'}`, background: isCreate ? 'rgba(var(--sb-orange-rgb), 0.06)' : 'rgba(var(--sb-green-rgb), 0.06)', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start', marginBottom: '14px' } }, [
-                        h('span', { key: 'ic', style: { flex: 'none', width: '42px', height: '42px', borderRadius: '12px', display: 'grid', placeItems: 'center', background: isCreate ? 'rgba(var(--sb-orange-rgb), 0.12)' : 'rgba(var(--sb-green-rgb), 0.12)', border: `1px solid ${isCreate ? 'rgba(var(--sb-orange-rgb), 0.28)' : 'rgba(var(--sb-green-rgb), 0.28)'}` } }, fa('fa-qrcode', { color: accentSolid, fontSize: '18px' })),
-                        h('span', { key: 'tx', style: { flex: 1 } }, [
-                            h('span', { key: 't', style: { display: 'block', fontSize: '14.5px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('qr.showTitle')),
-                            h('span', { key: 's', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '1px' } }, (qrFramesTotal || 0) > 1 ? t('qr.showSubtitleFrames', { frames: qrFramesTotal }) : t('qr.showSubtitle'))
-                        ]),
-                        fa('fa-chevron-right', { color: 'var(--sb-text-9)' })
-                    ]);
-
                     let inner;
                     if (showVerification) {
+                        // Transcribed from the Claude Design component (SAS Verification.dc.html),
+                        // without its card: it sits straight in the setup column like the other steps.
                         const verified = bothVerificationsConfirmed;
-                        const cells = (verificationCode || '').split('').map((ch, i) =>
-                            h('div', { key: i, style: { flex: 1, maxWidth: '46px', aspectRatio: '0.82', display: 'grid', placeItems: 'center', borderRadius: '10px', border: '1px solid rgba(var(--sb-green-rgb), 0.25)', background: 'rgba(var(--sb-green-rgb), 0.05)', fontFamily: MONO, fontSize: '22px', fontWeight: 700, color: C_GREEN } }, ch));
+                        const code = (verificationCode || '').replace(/[-\s]/g, '');
+                        const n = code.length;
+                        const typed = sasInput.replace(/[-\s]/g, '');
+                        const full = n > 0 && typed.length === n;
+                        // Comparing against the code already on this screen reveals nothing; it
+                        // only spares a typo one of the limited real attempts in onVerifyConnection.
+                        const match = full && typed === code;
+                        const wrong = full && !match;
+                        const youOk = localVerificationConfirmed;
+                        const peerOk = remoteVerificationConfirmed;
+                        const waiting = youOk && !peerOk;
+                        const split = Math.min(3, n);
+                        const confirmable = canConfirm && match;
+                        const check = (k) => h('svg', { key: k, width: 12, height: 12, viewBox: '0 0 24 24', fill: 'none', stroke: 'var(--sb-on-green-2)', strokeWidth: 3.2, strokeLinecap: 'round', strokeLinejoin: 'round' },
+                            h('path', { d: 'M5 12.5l4.2 4.2L19 7', strokeDasharray: 24, style: { animation: 'svDraw .35s ease-out .1s both' } }));
+                        const ring = (ok, soft) => ({
+                            position: 'relative', width: '22px', height: '22px', flex: 'none', borderRadius: '50%', display: 'grid', placeItems: 'center', transition: 'all .3s',
+                            border: `1.5px solid ${ok ? C_GREEN_SOLID : (soft ? 'rgba(var(--sb-green-rgb), 0.5)' : 'rgba(var(--sb-ink), 0.18)')}`,
+                            background: ok ? C_GREEN_SOLID : 'transparent'
+                        });
+                        const who = (k, label) => h('span', { key: k, style: { fontSize: '13px', fontWeight: 600, color: 'var(--sb-text-4)' } }, label);
+
+                        const cells = code.split('').map((_, i) => {
+                            const v = typed[i] || '';
+                            const active = sasFocused && !youOk && i === typed.length && !full;
+                            let border = 'rgba(var(--sb-ink), 0.09)';
+                            let color = 'var(--sb-text-1)';
+                            let anim = 'none';
+                            if (v) { border = 'rgba(var(--sb-ink), 0.2)'; anim = 'otpPop .28s cubic-bezier(.2,.8,.3,1.2) both'; }
+                            if (active) border = 'rgba(var(--sb-orange-rgb), 0.65)';
+                            if (wrong) { border = 'rgba(var(--sb-red-rgb), 0.6)'; color = 'var(--sb-red)'; }
+                            if (match) anim = `otpOk .45s cubic-bezier(.2,.8,.3,1) ${i * 55}ms both`;
+                            return h('span', { key: i, style: {
+                                position: 'relative', flex: 1, minWidth: 0, height: '56px', display: 'grid', placeItems: 'center', borderRadius: '12px',
+                                border: `1px solid ${border}`, background: 'var(--sb-surface)', fontFamily: MONO, fontSize: '22px', fontWeight: 600, color,
+                                transition: 'border-color .15s, color .15s, box-shadow .15s', animation: anim,
+                                marginInlineStart: i === split && n > split ? '10px' : 0,
+                                boxShadow: active ? '0 0 0 3px rgba(var(--sb-orange-rgb), 0.12)' : 'none'
+                            } }, [
+                                v,
+                                active && h('span', { key: 'caret', style: { position: 'absolute', left: '50%', top: '50%', width: '2px', height: '22px', margin: '-11px 0 0 -1px', borderRadius: '1px', background: C_ORANGE_SOLID, animation: 'otpCaret 1s steps(1) infinite' } })
+                            ]);
+                        });
+
                         inner = h('div', { key: 'verify', style: { animation: 'sbUp .3s ease' } }, [
                             !verified && backButton('vback'),
-                            h('div', { key: 'head', style: { display: 'flex', alignItems: 'center', gap: '11px', marginBottom: '8px' } }, [
-                                h('div', { key: 'i', style: { width: '34px', height: '34px', flex: 'none', borderRadius: '10px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.1)', border: '1px solid rgba(var(--sb-green-rgb), 0.25)' } }, fa('fa-shield-alt', { color: C_GREEN_SOLID })),
-                                h('h2', { key: 't', style: { margin: 0, fontSize: '21px', fontWeight: 800, letterSpacing: '-0.4px', color: 'var(--sb-text-1)' } }, t('verify.title'))
+                            h('h2', { key: 't', style: { margin: '0 0 8px', fontSize: '22px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, verified ? t('sasv.titleDone') : t('sasv.title')),
+                            h('p', { key: 'sub', style: { margin: '0 0 24px', fontSize: '13.5px', lineHeight: 1.55, color: 'var(--sb-text-7)', textWrap: 'pretty' } }, verified ? t('sasv.descDone') : t('sasv.desc')),
+                            h('div', { key: 'code', style: { padding: '20px 0 22px', borderTop: '1px solid rgba(var(--sb-ink), 0.06)', borderBottom: '1px solid rgba(var(--sb-ink), 0.06)', marginBottom: '22px', textAlign: 'center' } },
+                                h('div', { dir: 'ltr', style: { display: 'inline-flex', alignItems: 'center', gap: '18px', fontFamily: MONO, fontSize: '34px', fontWeight: 600, letterSpacing: '8px', lineHeight: 1, color: verified ? C_GREEN : 'var(--sb-text-1)', transition: 'color .4s' } },
+                                    n ? [h('span', { key: 'a' }, code.slice(0, split)), h('span', { key: 'b' }, code.slice(split))]
+                                      : h('span', { style: { fontSize: '14px', letterSpacing: 0, color: 'var(--sb-text-8)' } }, t('verify.waiting')))),
+                            !verified && h('div', { key: 'form' }, [
+                                h('div', { key: 'lbl', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', marginBottom: '10px' } }, [
+                                    h('span', { key: 'l', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)' } }, t('sasv.enter')),
+                                    h('span', { key: 'h', style: { fontFamily: MONO, fontSize: '11px', transition: 'color .2s', color: full ? (match ? C_GREEN : 'var(--sb-red)') : 'var(--sb-text-faint)' } },
+                                        full ? (match ? t('sasv.match') : t('sasv.noMatch')) : `${typed.length} / ${n || SAS_CODE_LENGTH}`)
+                                ]),
+                                h('label', { key: 'cells', dir: 'ltr', style: { position: 'relative', display: 'flex', gap: '6px', marginBottom: sasError ? '8px' : '18px', cursor: 'text', animation: wrong ? `otpShake .4s ease ${sasShake % 2 ? '0s' : '0.001s'}` : 'none' } }, [
+                                    ...cells,
+                                    h('input', { key: 'in', dir: 'ltr', value: sasInput, disabled: youOk || !n, autoFocus: true, autoComplete: 'one-time-code', spellCheck: false, type: 'text', inputMode: 'numeric', pattern: '[0-9]*', maxLength: n || SAS_CODE_LENGTH, 'aria-label': t('sasv.enter'),
+                                        onChange: (e) => {
+                                            const v = e.target.value.replace(/\D/g, '').slice(0, n || SAS_CODE_LENGTH);
+                                            if (n && v.length === n && v !== code) setSasShake((k) => k + 1);
+                                            setSasInput(v);
+                                            if (sasError) setSasError('');
+                                        },
+                                        onFocus: () => setSasFocused(true), onBlur: () => setSasFocused(false),
+                                        style: { position: 'absolute', inset: 0, width: '100%', height: '100%', opacity: 0, border: 'none', outline: 'none', background: 'transparent', color: 'transparent', caretColor: 'transparent', fontSize: '16px' } })
+                                ]),
+                                sasError && h('p', { key: 'err', style: { color: 'var(--sb-red)', fontSize: '12.5px', margin: '0 0 16px' } }, sasError)
                             ]),
-                            h('p', { key: 'sub', style: { margin: '0 0 18px', fontSize: '13.5px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, t('verify.desc')),
-                            h('div', { key: 'cells', dir: 'ltr', style: { display: 'flex', gap: '6px', justifyContent: 'center', marginBottom: '20px', flexWrap: 'wrap' } }, cells),
-                            verified
-                                ? h('div', { key: 'ok', style: { display: 'flex', flexDirection: 'column', alignItems: 'center', textAlign: 'center', padding: '24px 16px', borderRadius: '16px', border: '1px solid rgba(var(--sb-green-rgb), 0.25)', background: 'rgba(var(--sb-green-rgb), 0.06)', animation: 'sbUp .3s ease' } }, [
-                                    h('div', { key: 'i', style: { width: '54px', height: '54px', borderRadius: '16px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.14)', border: '1px solid rgba(var(--sb-green-rgb), 0.35)', marginBottom: '14px' } }, fa('fa-check', { color: C_GREEN_SOLID, fontSize: '24px' })),
-                                    h('div', { key: 't', style: { fontSize: '18px', fontWeight: 800, color: 'var(--sb-text-1)' } }, t('verify.verified')),
-                                    h('div', { key: 's', style: { fontSize: '13.5px', color: 'var(--sb-text-7)', marginTop: '5px' } }, t('verify.bothConfirmed'))
+                            h('div', { key: 'link', style: { display: 'flex', alignItems: 'center', gap: '12px', marginBottom: '20px' } }, [
+                                h('div', { key: 'you', style: { display: 'flex', alignItems: 'center', gap: '9px', flex: 'none' } }, [
+                                    h('span', { key: 'r', style: ring(youOk, false) }, youOk && check('c')),
+                                    who('l', t('sasv.you'))
+                                ]),
+                                h('div', { key: 'bar', style: { position: 'relative', flex: 1, height: '2px', borderRadius: '2px', background: 'rgba(var(--sb-ink), 0.08)', overflow: 'hidden' } }, [
+                                    h('div', { key: 'fill', style: { position: 'absolute', insetInlineStart: 0, top: 0, bottom: 0, width: peerOk ? '100%' : (youOk ? '50%' : '0%'), background: C_GREEN_SOLID, transition: 'width .6s cubic-bezier(.4,0,.2,1)' } }),
+                                    waiting && h('div', { key: 'scan', style: { position: 'absolute', top: 0, bottom: 0, width: '30%', background: 'linear-gradient(90deg, transparent, rgba(var(--sb-green-rgb), 0.9), transparent)', animation: 'svScan 1.1s ease-in-out infinite' } })
+                                ]),
+                                h('div', { key: 'peer', style: { display: 'flex', alignItems: 'center', gap: '9px', flex: 'none' } }, [
+                                    who('l', t('sasv.peer')),
+                                    h('span', { key: 'r', style: ring(peerOk, youOk) }, peerOk && check('c'))
                                 ])
-                                : h('div', { key: 'form' }, [
-                                    h('div', { key: 'lbl', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)', marginBottom: '8px' } }, t('verify.enterLabel')),
-                                    h('input', { key: 'in', dir: 'ltr', value: sasInput, onChange: (e) => { setSasInput(e.target.value.replace(/\D/g, '').slice(0, SAS_CODE_LENGTH)); if (sasError) setSasError(''); }, disabled: localVerificationConfirmed, autoFocus: true, autoComplete: 'one-time-code', spellCheck: false, type: 'text', inputMode: 'numeric', pattern: '[0-9]*', maxLength: SAS_CODE_LENGTH, placeholder: verificationCode ? t('verify.placeholder') : t('verify.waiting'), style: { width: '100%', textAlign: 'center', letterSpacing: '6px', borderRadius: '12px', border: `1px solid ${sasInput.length ? (canConfirm || localVerificationConfirmed ? 'rgba(var(--sb-green-rgb), 0.5)' : 'rgba(var(--sb-ink), 0.14)') : 'rgba(var(--sb-ink), 0.08)'}`, background: 'var(--sb-surface)', color: 'var(--sb-text-1)', fontFamily: MONO, fontSize: '20px', fontWeight: 700, padding: '14px', outline: 'none', marginBottom: sasError ? '8px' : '16px' } }),
-                                    sasError && h('p', { key: 'err', style: { color: 'var(--sb-red)', fontSize: '12.5px', margin: '0 0 16px' } }, sasError),
-                                    h('div', { key: 'status', style: { display: 'flex', flexDirection: 'column', gap: '8px', marginBottom: '16px' } }, [
-                                        h('div', { key: 'you', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', padding: '11px 14px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.06)', background: 'var(--sb-surface)' } }, [
-                                            h('span', { key: 'l', style: { fontSize: '13px', color: 'var(--sb-text-4)', fontWeight: 600 } }, t('verify.yours')),
-                                            h('span', { key: 'v', style: { display: 'inline-flex', alignItems: 'center', gap: '6px', fontSize: '12.5px', fontWeight: 600, color: localVerificationConfirmed ? C_GREEN : 'var(--sb-text-8)' } }, [fa(localVerificationConfirmed ? 'fa-check-circle' : 'fa-clock', { key: 'i' }), localVerificationConfirmed ? t('verify.confirmed') : t('verify.pending')])
-                                        ]),
-                                        h('div', { key: 'peer', style: { display: 'flex', alignItems: 'center', justifyContent: 'space-between', padding: '11px 14px', borderRadius: '11px', border: '1px solid rgba(var(--sb-ink), 0.06)', background: 'var(--sb-surface)' } }, [
-                                            h('span', { key: 'l', style: { fontSize: '13px', color: 'var(--sb-text-4)', fontWeight: 600 } }, t('verify.peer')),
-                                            h('span', { key: 'v', style: { display: 'inline-flex', alignItems: 'center', gap: '6px', fontSize: '12.5px', fontWeight: 600, color: remoteVerificationConfirmed ? C_GREEN : 'var(--sb-text-8)' } }, [fa(remoteVerificationConfirmed ? 'fa-check-circle' : 'fa-clock', { key: 'i' }), remoteVerificationConfirmed ? t('verify.confirmed') : t('verify.pending')])
-                                        ])
-                                    ]),
-                                    h('div', { key: 'btns', style: { display: 'flex', gap: '10px' } }, [
-                                        h('button', { key: 'ok', onClick: handleSasConfirm, disabled: !canConfirm, style: { flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '14px', borderRadius: '13px', border: 'none', background: canConfirm ? C_GREEN_SOLID : 'rgba(var(--sb-ink), 0.05)', color: canConfirm ? 'var(--sb-on-green-2)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, cursor: canConfirm ? 'pointer' : 'not-allowed', boxShadow: canConfirm ? '0 8px 24px rgba(var(--sb-green-rgb), 0.25)' : 'none' } }, [fa(localVerificationConfirmed ? 'fa-check-circle' : 'fa-check', { key: 'i' }), localVerificationConfirmed ? t('verify.confirmed') : t('verify.confirm')]),
-                                        h('button', { key: 'no', onClick: handleVerificationReject, style: { flex: 'none', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '7px', padding: '14px 16px', borderRadius: '13px', border: '1px solid rgba(var(--sb-red-rgb), 0.3)', background: 'transparent', color: 'var(--sb-red)', fontFamily: 'inherit', fontSize: '13.5px', fontWeight: 600, cursor: 'pointer' } }, [fa('fa-times', { key: 'i' }), t('verify.mismatch')])
-                                    ])
+                            ]),
+                            !verified
+                                ? h('div', { key: 'btns' }, [
+                                    h('button', { key: 'ok', onClick: handleSasConfirm, disabled: !confirmable, style: { width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '14px', borderRadius: '13px', border: 'none', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, transition: 'background .25s, color .25s',
+                                        background: youOk ? 'rgba(var(--sb-green-rgb), 0.12)' : (confirmable ? C_GREEN_SOLID : 'rgba(var(--sb-ink), 0.05)'),
+                                        color: youOk ? C_GREEN : (confirmable ? 'var(--sb-on-green-2)' : 'var(--sb-text-faint)'),
+                                        cursor: confirmable ? 'pointer' : 'default' } }, youOk ? t('sasv.waitingPeer') : t('verify.confirm')),
+                                    h('button', { key: 'no', onClick: handleVerificationReject, className: 'sb-sas-mismatch', style: { display: 'flex', alignItems: 'center', justifyContent: 'center', width: '100%', marginTop: '10px', padding: '8px', border: 'none', background: 'transparent', color: 'var(--sb-text-7)', fontFamily: 'inherit', fontSize: '13px', fontWeight: 600, cursor: 'pointer', transition: 'color .15s' },
+                                        onMouseEnter: (e) => { e.currentTarget.style.color = 'var(--sb-red)'; }, onMouseLeave: (e) => { e.currentTarget.style.color = 'var(--sb-text-7)'; } }, t('sasv.codesDiffer'))
                                 ])
+                                : h('div', { key: 'opening', style: { animation: 'svFade .35s ease .3s both' } },
+                                    h('div', { style: { display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '10px', padding: '14px 0 4px', fontSize: '13.5px', fontWeight: 600, color: 'var(--sb-text-4)' } }, [
+                                        t('sasv.opening'),
+                                        h('span', { key: 'd', style: { display: 'inline-flex', gap: '4px' } }, [0, 0.15, 0.3].map((d, i) =>
+                                            h('span', { key: i, style: { width: '4px', height: '4px', borderRadius: '50%', background: C_GREEN_SOLID, animation: `svDot 1.2s ease-in-out ${d}s infinite` } })))
+                                    ]))
                         ]);
                     } else if (isGenerating) {
                         const genSteps = [t('handshake.step1'), t('handshake.step2'), t('handshake.step3')];
@@ -1643,22 +1736,24 @@ import { GroupCallMedia, mediaErrorCode } from './group/groupCallMedia.js';
                     } else if (isOfferCred || isAnswerCred) {
                         inner = h('div', { key: 'cred', style: { animation: 'sbUp .3s ease' } }, [
                             backButton('cback'),
-                            h('h2', { key: 'h', style: { margin: '0 0 6px', fontSize: '23px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, isCreate ? t('handshake.shareTitle') : t('handshake.sendAnswerTitle')),
-                            h('p', { key: 'p', style: { margin: '0 0 18px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, isCreate ? t('handshake.shareDesc') : t('handshake.sendAnswerDesc')),
-                            showQrButton,
-                            credBlock,
-                            isOfferCred && h('div', { key: 'offerextra', style: { marginTop: '4px' } }, [
-                                h('div', { key: 'lbl', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)', marginBottom: '8px' } }, t('handshake.thenReceive')),
-                                h('div', { key: 'ta', style: { borderRadius: '12px', border: `1px solid ${hasAnswer ? 'rgba(var(--sb-ink), 0.18)' : 'rgba(var(--sb-ink), 0.07)'}`, background: 'var(--sb-surface)', padding: '11px 14px', marginBottom: '10px' } },
-                                    h('textarea', { dir: 'ltr', value: answerInput, onChange: (e) => { setAnswerInput(e.target.value); if (e.target.value.trim().length > 0 && typeof markAnswerCreated === 'function') markAnswerCreated(); }, rows: 2, placeholder: t('handshake.pasteAnswerPlaceholder'), style: { width: '100%', resize: 'none', border: 'none', outline: 'none', background: 'transparent', color: 'var(--sb-text-3)', fontFamily: MONO, fontSize: '12px', lineHeight: 1.55, minHeight: '44px' } })),
+                            h('h2', { key: 'h', style: { margin: '0 0 8px', fontSize: '26px', fontWeight: 800, letterSpacing: '-0.7px', color: 'var(--sb-text-1)' } }, isCreate ? t('handshake.shareTitle') : t('handshake.sendAnswerTitle')),
+                            h('p', { key: 'p', style: { margin: '0 0 24px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, isCreate ? t('handshake.shareDesc') : t('handshake.sendAnswerDesc')),
+                            credCard,
+                            isOfferCred && h('div', { key: 'offerextra' }, [
+                                h('div', { key: 'lbl', style: { fontSize: '13.5px', fontWeight: 600, color: 'var(--sb-text-3)', marginBottom: '10px' } }, t('handshake.thenReceive')),
+                                h('textarea', { key: 'ta', dir: 'ltr', value: answerInput, onChange: (e) => { setAnswerInput(e.target.value); if (e.target.value.trim().length > 0 && typeof markAnswerCreated === 'function') markAnswerCreated(); }, rows: 3, placeholder: t('handshake.pasteAnswerPlaceholder'), style: { display: 'block', width: '100%', resize: 'none', borderRadius: '14px', border: `1px solid ${hasAnswer ? 'rgba(var(--sb-orange-rgb), 0.45)' : 'rgba(var(--sb-ink), 0.08)'}`, background: 'var(--sb-surface)', outline: 'none', color: 'var(--sb-text-2)', fontFamily: MONO, fontSize: '12.5px', lineHeight: 1.5, padding: '13px 15px', marginBottom: '12px', transition: 'border-color .15s' } }),
                                 h('div', { key: 'btns', style: { display: 'flex', gap: '10px' } }, [
-                                    h('button', { key: 'scan', className: 'sb-scan-btn', onClick: () => setShowQRScannerModal(true), style: { flex: 'none', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '14px 16px', borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'rgba(var(--sb-ink), 0.04)', color: 'var(--sb-text-4)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer' } }, [fa('fa-camera', { key: 'i' }), t('action.scan')]),
-                                    h('button', { key: 'est', onClick: onConnect, disabled: !hasAnswer, style: { flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '14px', borderRadius: '13px', border: 'none', background: hasAnswer ? C_ORANGE_SOLID : 'rgba(var(--sb-ink), 0.05)', color: hasAnswer ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, cursor: hasAnswer ? 'pointer' : 'not-allowed', boxShadow: hasAnswer ? '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' : 'none' } }, t('handshake.establish'))
+                                    h('button', { key: 'scan', className: 'sb-scan-btn', onClick: () => setShowQRScannerModal(true), style: { flex: 'none', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '8px', padding: '0 18px', height: '50px', borderRadius: '13px', border: '1px solid rgba(var(--sb-ink), 0.1)', background: 'transparent', color: 'var(--sb-text-2)', fontFamily: 'inherit', fontSize: '14px', fontWeight: 700, cursor: 'pointer' } }, [
+                                        h('svg', { key: 'i', width: 16, height: 16, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round', 'aria-hidden': true },
+                                            h('path', { d: 'M4 8V5a1 1 0 0 1 1-1h3M16 4h3a1 1 0 0 1 1 1v3M20 16v3a1 1 0 0 1-1 1h-3M8 20H5a1 1 0 0 1-1-1v-3M7 12h10' })),
+                                        t('action.scan')
+                                    ]),
+                                    h('button', { key: 'est', onClick: onConnect, disabled: !hasAnswer, style: { flex: 1, display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', height: '50px', borderRadius: '13px', border: 'none', background: hasAnswer ? C_ORANGE_SOLID : 'rgba(var(--sb-ink), 0.05)', color: hasAnswer ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, cursor: hasAnswer ? 'pointer' : 'not-allowed', transition: 'background .2s, color .2s' } }, t('handshake.establish'))
                                 ])
                             ]),
-                            isAnswerCred && h('div', { key: 'answerextra', style: { marginTop: '4px', display: 'flex', alignItems: 'center', gap: '10px', padding: '12px 14px', borderRadius: '12px', border: '1px solid rgba(var(--sb-green-rgb), 0.18)', background: 'rgba(var(--sb-green-rgb), 0.05)' } }, [
-                                fa('fa-circle-notch', { key: 'i', color: C_GREEN_SOLID, animation: 'sbSpin 1.4s linear infinite' }),
-                                h('span', { key: 't', style: { fontSize: '13px', color: 'var(--sb-text-4)', fontWeight: 500 } }, t('handshake.answerSentNote'))
+                            isAnswerCred && h('div', { key: 'answerextra', style: { display: 'flex', alignItems: 'center', gap: '12px', padding: '4px 2px' } }, [
+                                h('span', { key: 'i', style: { flex: 'none', width: '16px', height: '16px', borderRadius: '50%', border: '2px solid rgba(var(--sb-ink), 0.1)', borderTopColor: C_ORANGE_SOLID, animation: 'sbSpin .9s linear infinite' } }),
+                                h('span', { key: 't', style: { fontSize: '13px', lineHeight: 1.5, color: 'var(--sb-text-7)' } }, t('handshake.answerSentNote'))
                             ])
                         ]);
                     } else if (isCreate) {
@@ -1669,26 +1764,30 @@ import { GroupCallMedia, mediaErrorCode } from './group/groupCallMedia.js';
                             h('button', { key: 'gen', className: 'sb-gen-btn', onClick: () => { requestNotificationPermissionOnInteraction(); if (webrtcManagerRef.current) handleCreateOffer(); }, style: { width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '15px', borderRadius: '13px', border: 'none', background: C_ORANGE_SOLID, color: 'var(--sb-on-accent)', fontFamily: 'inherit', fontSize: '15px', fontWeight: 700, cursor: 'pointer', boxShadow: '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' } }, [fa('fa-bolt', { key: 'i' }), t('intro.createCta')])
                         ]);
                     } else {
-                        // JOIN intro
+                        // JOIN intro — same card language as the invitation/answer screens:
+                        // scan row on top, the paste field below, one bordered surface.
+                        const canJoin = hasInvite && connectionStatus !== 'connecting';
                         inner = h('div', { key: 'introJ', style: { animation: 'sbUp .28s ease' } }, [
-                            h('h2', { key: 'h', style: { margin: '0 0 6px', fontSize: '23px', fontWeight: 800, letterSpacing: '-0.5px', color: 'var(--sb-text-1)' } }, t('intro.joinTitle')),
-                            h('p', { key: 'p', style: { margin: '0 0 16px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, "Scan your peer's QR with your camera, or paste their invitation code."),
-                            h('button', { key: 'scan', className: 'sb-scan-btn', onClick: () => { requestNotificationPermissionOnInteraction(); setShowQRScannerModal(true); }, style: { width: '100%', display: 'flex', alignItems: 'center', gap: '13px', padding: '15px 16px', borderRadius: '14px', border: '1px solid rgba(var(--sb-green-rgb), 0.3)', background: 'rgba(var(--sb-green-rgb), 0.06)', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start', marginBottom: '14px' } }, [
-                                h('span', { key: 'ic', style: { flex: 'none', width: '42px', height: '42px', borderRadius: '12px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-green-rgb), 0.12)', border: '1px solid rgba(var(--sb-green-rgb), 0.28)' } }, fa('fa-camera', { color: C_GREEN_SOLID, fontSize: '18px' })),
-                                h('span', { key: 'tx', style: { flex: 1 } }, [
-                                    h('span', { key: 't', style: { display: 'block', fontSize: '14.5px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('intro.scanTitle')),
-                                    h('span', { key: 's', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '1px' } }, t('intro.scanSubtitle'))
+                            h('h2', { key: 'h', style: { margin: '0 0 8px', fontSize: '26px', fontWeight: 800, letterSpacing: '-0.7px', color: 'var(--sb-text-1)' } }, t('intro.joinTitle')),
+                            h('p', { key: 'p', style: { margin: '0 0 24px', fontSize: '14px', lineHeight: 1.55, color: 'var(--sb-text-7)' } }, t('intro.joinDesc')),
+                            h('div', { key: 'card', style: { borderRadius: '16px', border: '1px solid rgba(var(--sb-ink), 0.07)', background: 'var(--sb-surface)', overflow: 'hidden', marginBottom: '12px' } }, [
+                                h('button', { key: 'scan', className: 'sb-qr-row', onClick: () => { requestNotificationPermissionOnInteraction(); setShowQRScannerModal(true); }, style: { width: '100%', display: 'flex', alignItems: 'center', gap: '14px', padding: '14px 16px', border: 'none', background: 'transparent', color: 'inherit', fontFamily: 'inherit', cursor: 'pointer', textAlign: 'start', transition: 'background .15s' } }, [
+                                    h('span', { key: 'ic', style: { flex: 'none', width: '48px', height: '48px', borderRadius: '9px', display: 'grid', placeItems: 'center', background: 'rgba(var(--sb-ink), 0.05)', border: '1px solid rgba(var(--sb-ink), 0.08)', color: 'var(--sb-text-2)' } },
+                                        h('svg', { width: 22, height: 22, viewBox: '0 0 24 24', fill: 'none', stroke: 'currentColor', strokeWidth: 2, strokeLinecap: 'round', strokeLinejoin: 'round', 'aria-hidden': true },
+                                            h('path', { d: 'M4 8V5a1 1 0 0 1 1-1h3M16 4h3a1 1 0 0 1 1 1v3M20 16v3a1 1 0 0 1-1 1h-3M8 20H5a1 1 0 0 1-1-1v-3M7 12h10' }))),
+                                    h('span', { key: 'tx', style: { flex: 1, minWidth: 0 } }, [
+                                        h('span', { key: 't', style: { display: 'block', fontSize: '15px', fontWeight: 700, color: 'var(--sb-text-1)' } }, t('intro.scanTitle')),
+                                        h('span', { key: 's', style: { display: 'block', fontSize: '12.5px', color: 'var(--sb-text-7)', marginTop: '2px' } }, t('intro.scanSubtitle'))
+                                    ]),
+                                    fa('fa-chevron-right', { color: 'var(--sb-text-9)' })
                                 ]),
-                                fa('fa-chevron-right', { color: 'var(--sb-text-9)' })
+                                h('div', { key: 'div', style: { height: '1px', background: 'rgba(var(--sb-ink), 0.06)' } }),
+                                h('div', { key: 'paste', style: { padding: '12px 16px 16px' } }, [
+                                    h('div', { key: 'l', style: { fontSize: '12.5px', fontWeight: 600, color: 'var(--sb-text-6)', marginBottom: '10px' } }, t('intro.orPasteCode')),
+                                    h('textarea', { key: 'ta', dir: 'ltr', value: offerInput, onChange: (e) => { setOfferInput(e.target.value); if (e.target.value.trim().length > 0 && typeof markAnswerCreated === 'function') markAnswerCreated(); }, rows: 3, placeholder: t('intro.pastePlaceholder'), style: { display: 'block', width: '100%', resize: 'none', borderRadius: '11px', border: `1px solid ${hasInvite ? 'rgba(var(--sb-orange-rgb), 0.45)' : 'rgba(var(--sb-ink), 0.05)'}`, background: 'var(--sb-bg)', outline: 'none', color: 'var(--sb-text-2)', fontFamily: MONO, fontSize: '12.5px', lineHeight: 1.5, padding: '11px 13px', transition: 'border-color .15s' } })
+                                ])
                             ]),
-                            h('div', { key: 'or', style: { display: 'flex', alignItems: 'center', gap: '12px', marginBottom: '14px' } }, [
-                                h('span', { key: 'a', style: { flex: 1, height: '1px', background: 'rgba(var(--sb-ink), 0.07)' } }),
-                                h('span', { key: 'm', style: { fontSize: '11px', fontWeight: 600, color: 'var(--sb-text-faint)', textTransform: 'uppercase', letterSpacing: '0.7px' } }, t('intro.orPasteCode')),
-                                h('span', { key: 'b', style: { flex: 1, height: '1px', background: 'rgba(var(--sb-ink), 0.07)' } })
-                            ]),
-                            h('div', { key: 'ta', style: { borderRadius: '13px', border: `1px solid ${hasInvite ? 'rgba(var(--sb-ink), 0.18)' : 'rgba(var(--sb-ink), 0.07)'}`, background: 'var(--sb-surface)', padding: '13px 15px', marginBottom: '12px' } },
-                                h('textarea', { dir: 'ltr', value: offerInput, onChange: (e) => { setOfferInput(e.target.value); if (e.target.value.trim().length > 0 && typeof markAnswerCreated === 'function') markAnswerCreated(); }, rows: 3, placeholder: t('intro.pastePlaceholder'), style: { width: '100%', resize: 'none', border: 'none', outline: 'none', background: 'transparent', color: 'var(--sb-text-3)', fontFamily: MONO, fontSize: '12.5px', lineHeight: 1.6, minHeight: '66px' } })),
-                            h('button', { key: 'connect', onClick: () => { requestNotificationPermissionOnInteraction(); onCreateAnswer(); }, disabled: !hasInvite || connectionStatus === 'connecting', style: { width: '100%', display: 'inline-flex', alignItems: 'center', justifyContent: 'center', gap: '9px', padding: '14px', borderRadius: '13px', border: 'none', background: (hasInvite && connectionStatus !== 'connecting') ? C_ORANGE_SOLID : 'rgba(var(--sb-ink), 0.05)', color: (hasInvite && connectionStatus !== 'connecting') ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '15px', fontWeight: 700, cursor: (hasInvite && connectionStatus !== 'connecting') ? 'pointer' : 'not-allowed', boxShadow: (hasInvite && connectionStatus !== 'connecting') ? '0 8px 24px rgba(var(--sb-orange-rgb), 0.28)' : 'none' } }, connectionStatus === 'connecting' ? t('intro.connecting') : t('intro.connect'))
+                            h('button', { key: 'connect', onClick: () => { requestNotificationPermissionOnInteraction(); onCreateAnswer(); }, disabled: !canJoin, style: { width: '100%', display: 'flex', alignItems: 'center', justifyContent: 'center', gap: '9px', height: '50px', borderRadius: '13px', border: 'none', background: canJoin ? C_ORANGE_SOLID : 'rgba(var(--sb-ink), 0.05)', color: canJoin ? 'var(--sb-on-accent)' : 'var(--sb-text-faint)', fontFamily: 'inherit', fontSize: '14.5px', fontWeight: 700, cursor: canJoin ? 'pointer' : 'not-allowed', transition: 'background .2s, color .2s' } }, connectionStatus === 'connecting' ? t('intro.connecting') : t('intro.connect'))
                         ]);
                     }
 
@@ -1704,7 +1803,7 @@ import { GroupCallMedia, mediaErrorCode } from './group/groupCallMedia.js';
                     // /download/v0.3.0/SecureBit.Chat_0.1.0_x64-setup.exe, a file that never
                     // existed, and the download 404s. A pinned tag keeps serving a real
                     // installer instead.
-                    const SB_DESKTOP_VERSION = '1.0.4';
+                    const SB_DESKTOP_VERSION = '1.0.5';
                     const SB_DESKTOP_RELEASE = `https://github.com/SecureBitChat/securebit-desktop/releases/download/v${SB_DESKTOP_VERSION}`;
                     const DOWNLOADS = {
                         mac: { name: 'macOS', format: '.dmg · Apple Silicon & Intel', icon: 'fab fa-apple', url: `${SB_DESKTOP_RELEASE}/SecureBit.Chat_${SB_DESKTOP_VERSION}_x64.dmg` },
@@ -1847,6 +1946,15 @@ import { GroupCallMedia, mediaErrorCode } from './group/groupCallMedia.js';
                         '@keyframes sbNode{0%,100%{box-shadow:0 0 0 0 rgba(var(--sb-green-rgb), 0)}50%{box-shadow:0 0 0 6px rgba(var(--sb-green-rgb), .06)}}' +
                         '@keyframes sbScan{0%{top:8%}100%{top:88%}}' +
                         '@keyframes sbBlink{0%,100%{opacity:1}50%{opacity:.35}}' +
+                        // SAS verification step (SAS Verification.dc.html).
+                        '@keyframes otpPop{0%{transform:translateY(6px) scale(.9);opacity:0}60%{transform:translateY(-1px) scale(1.04);opacity:1}100%{transform:none;opacity:1}}' +
+                        '@keyframes otpOk{0%{transform:none}45%{transform:translateY(-4px)}100%{transform:none;background:rgba(var(--sb-green-rgb),.07);border-color:rgba(var(--sb-green-rgb),.55);color:var(--sb-green)}}' +
+                        '@keyframes otpShake{0%,100%{transform:translateX(0)}20%{transform:translateX(-7px)}40%{transform:translateX(6px)}60%{transform:translateX(-4px)}80%{transform:translateX(2px)}}' +
+                        '@keyframes otpCaret{0%,100%{opacity:1}50%{opacity:0}}' +
+                        '@keyframes svDot{0%,80%,100%{opacity:.25;transform:translateY(0)}40%{opacity:1;transform:translateY(-3px)}}' +
+                        '@keyframes svDraw{from{stroke-dashoffset:24}to{stroke-dashoffset:0}}' +
+                        '@keyframes svScan{from{left:-30%}to{left:100%}}' +
+                        '@keyframes svFade{from{opacity:0;transform:translateY(4px)}to{opacity:1;transform:none}}' +
                         // P2P / mesh animation (left panel). One 14s loop: the direct line is
                         // already up, then two peers join it. `sbTrav` moves a dot along the
                         // same geometry the line is drawn from, via offset-path, so the packet
diff --git a/src/components/ui/DownloadApps.jsx b/src/components/ui/DownloadApps.jsx
index b037332..629f2ef 100644
--- a/src/components/ui/DownloadApps.jsx
+++ b/src/components/ui/DownloadApps.jsx
@@ -5,7 +5,7 @@
 // The tag is pinned rather than using /releases/latest/download/: the filenames
 // carry the version, so a `latest` link 404s the moment a newer release exists,
 // whereas a pinned tag keeps serving a working (if older) installer.
-const DESKTOP_VERSION = '1.0.4';
+const DESKTOP_VERSION = '1.0.5';
 const DESKTOP_RELEASE = `https://github.com/SecureBitChat/securebit-desktop/releases/download/v${DESKTOP_VERSION}`;
 
 const DownloadApps = () => {
diff --git a/src/i18n/dict/ar.js b/src/i18n/dict/ar.js
index 59a66f4..1a7add8 100644
--- a/src/i18n/dict/ar.js
+++ b/src/i18n/dict/ar.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "يولّد جهازك المفاتيح ودعوة تُستعمل مرّة واحدة. لا شيء يمرّ عبر خادم.",
     "intro.createCta": "توليد المفاتيح والدعوة",
     "intro.joinTitle": "انضمّ إلى قناة",
+    "intro.joinDesc": "امسح رمز QR الخاص بالطرف الآخر بالكاميرا، أو الصق رمز الدعوة.",
     "intro.scanTitle": "امسح رمز QR بالكاميرا",
     "intro.scanSubtitle": "الأسرع - وجّهها إلى شاشة الطرف الآخر",
-    "intro.orPasteCode": "أو ألصق الرمز",
+    "intro.orPasteCode": "أو الصق الرمز",
     "intro.pastePlaceholder": "ألصق رمز الدعوة هنا…",
     "intro.connect": "اتّصل",
     "intro.connecting": "جارٍ المعالجة…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "إنشاء الاتصال",
     "handshake.thenReceive": "ثمّ استقبل الردّ الذي يرسله الطرف الآخر",
     "handshake.pasteAnswerPlaceholder": "ألصق رمز ردّ الطرف الآخر…",
-    "handshake.answerSentNote": "أرسل هذا الردّ إلى المُنشئ ثمّ انتظر - تُفتح الدردشة حالما يتّصل.",
+    "handshake.answerSentNote": "بانتظار اتصال المُنشئ. ستُفتح المحادثة تلقائياً.",
     "handshake.qrHint": "أبقِ هذا مفتوحاً حتى يلتقط الطرف الآخر الرمز.",
     "handshake.qrHintFrames": "المصافحة موزّعة على {frames} إطارات - أبقِ هذا مفتوحاً حتى يلتقطها الطرف الآخر كلّها.",
-    "verify.title": "التحقّق الأمني",
-    "verify.desc": "قارِن رمز الأمان هذا مع الطرف الآخر عبر قناة منفصلة (مكالمة أو لقاء مباشر)، ثمّ اكتبه لفتح الدردشة.",
-    "verify.enterLabel": "أدخل الرمز المُتحقَّق منه",
     "verify.placeholder": "اكتب الرمز هنا",
     "verify.confirm": "تأكيد الرمز",
     "verify.confirmed": "مؤكَّد",
-    "verify.mismatch": "غير متطابقين",
-    "verify.yours": "تأكيدك",
-    "verify.peer": "تأكيد الطرف الآخر",
     "verify.pending": "قيد الانتظار",
     "verify.waiting": "بانتظار الرمز…",
-    "verify.verified": "تمّ التحقّق من القناة",
-    "verify.bothConfirmed": "أكّد الطرفان. جارٍ فتح الدردشة الآمنة…",
+    "sasv.title": "تحقّق من الطرف الآخر",
+    "sasv.titleDone": "تم التحقّق من الطرف الآخر",
+    "sasv.desc": "اقرأ الرمز بصوت عالٍ عبر مكالمة أو وجهًا لوجه. لا تتابع إلا إذا رأى الطرف الآخر الأرقام نفسها.",
+    "sasv.descDone": "أكّدتما كلاكما الرمز نفسه. الاتصال موثَّق.",
+    "sasv.enter": "أدخل الرمز",
+    "sasv.match": "متطابق",
+    "sasv.noMatch": "غير متطابق",
+    "sasv.you": "أنت",
+    "sasv.peer": "الطرف الآخر",
+    "sasv.waitingPeer": "بانتظار الطرف الآخر…",
+    "sasv.codesDiffer": "الرموز غير متطابقة",
+    "sasv.opening": "جارٍ فتح المحادثة الآمنة",
     "pwa.bannerTitle": "ثبّت SecureBit.chat",
     "pwa.bannerDesc": "احصل على تجربة تطبيق أصلي بأمان أعلى",
     "pwa.install": "تثبيت",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "مسح",
     "action.downloadDesktop": "نزّل تطبيق سطح المكتب",
     "action.advancedSettings": "إعدادات متقدّمة",
-    "cred.offerTag": "عرض · أو انسخ النصّ",
-    "cred.answerTag": "ردّ · أو انسخ النصّ",
     "cred.reveal": "اضغط للكشف - أبقِ هذا الرمز سرّياً",
+    "cred.orCopy": "أو انسخ الرمز",
     "qr.title": "امسح رمز QR",
     "qr.subtitle": "وجّه كاميرتك إلى رمزهم",
     "qr.scanning": "جارٍ المسح…",
diff --git a/src/i18n/dict/de.js b/src/i18n/dict/de.js
index da3a4d1..18d26f5 100644
--- a/src/i18n/dict/de.js
+++ b/src/i18n/dict/de.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "Ihr Gerät erzeugt die Schlüssel und eine einmalige Einladung. Nichts davon berührt einen Server.",
     "intro.createCta": "Schlüssel & Einladung erzeugen",
     "intro.joinTitle": "Kanal beitreten",
+    "intro.joinDesc": "Scannen Sie den QR-Code Ihres Gegenübers mit der Kamera oder fügen Sie seinen Einladungscode ein.",
     "intro.scanTitle": "QR-Code mit der Kamera scannen",
     "intro.scanSubtitle": "Am schnellsten - auf den Bildschirm Ihres Gegenübers halten",
-    "intro.orPasteCode": "oder Code einfügen",
+    "intro.orPasteCode": "Oder den Code einfügen",
     "intro.pastePlaceholder": "Einladungscode hier einfügen …",
     "intro.connect": "Verbinden",
     "intro.connecting": "Wird verarbeitet …",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "Verbindung herstellen",
     "handshake.thenReceive": "Nehmen Sie danach die Antwort Ihres Gegenübers entgegen",
     "handshake.pasteAnswerPlaceholder": "Antwortcode des Gegenübers einfügen …",
-    "handshake.answerSentNote": "Senden Sie diese Antwort an den Ersteller und warten Sie - der Chat öffnet sich, sobald er sich verbindet.",
+    "handshake.answerSentNote": "Warten, bis sich der Ersteller verbindet. Der Chat öffnet sich automatisch.",
     "handshake.qrHint": "Lassen Sie dies geöffnet, bis Ihr Gegenüber den Code erfasst hat.",
     "handshake.qrHintFrames": "Der Handschlag ist auf {frames} Einzelbilder verteilt - lassen Sie dies geöffnet, bis Ihr Gegenüber alle erfasst hat.",
-    "verify.title": "Sicherheitsprüfung",
-    "verify.desc": "Vergleichen Sie diesen Sicherheitscode über einen anderen Weg mit Ihrem Gegenüber (Anruf oder persönlich) und geben Sie ihn dann ein, um den Chat freizuschalten.",
-    "verify.enterLabel": "Geprüften Code eingeben",
     "verify.placeholder": "Code hier eingeben",
     "verify.confirm": "Code bestätigen",
     "verify.confirmed": "Bestätigt",
-    "verify.mismatch": "Stimmt nicht überein",
-    "verify.yours": "Ihre Bestätigung",
-    "verify.peer": "Bestätigung des Gegenübers",
     "verify.pending": "Ausstehend",
     "verify.waiting": "Warten auf den Code …",
-    "verify.verified": "Kanal geprüft",
-    "verify.bothConfirmed": "Beide Seiten haben bestätigt. Der sichere Chat wird geöffnet …",
+    "sasv.title": "Gegenüber überprüfen",
+    "sasv.titleDone": "Gegenüber verifiziert",
+    "sasv.desc": "Lies den Code bei einem Anruf oder persönlich laut vor. Fahre nur fort, wenn dein Gegenüber dieselben Ziffern sieht.",
+    "sasv.descDone": "Ihr habt beide denselben Code bestätigt. Die Verbindung ist authentifiziert.",
+    "sasv.enter": "Code eingeben",
+    "sasv.match": "Stimmt überein",
+    "sasv.noMatch": "Stimmt nicht überein",
+    "sasv.you": "Du",
+    "sasv.peer": "Gegenüber",
+    "sasv.waitingPeer": "Warte auf Gegenüber…",
+    "sasv.codesDiffer": "Codes stimmen nicht überein",
+    "sasv.opening": "Sicherer Chat wird geöffnet",
     "pwa.bannerTitle": "SecureBit.chat installieren",
     "pwa.bannerDesc": "Die App-Erfahrung mit zusätzlicher Sicherheit",
     "pwa.install": "Installieren",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "Scannen",
     "action.downloadDesktop": "Desktop-App laden",
     "action.advancedSettings": "Erweiterte Einstellungen",
-    "cred.offerTag": "Angebot · oder Text kopieren",
-    "cred.answerTag": "Antwort · oder Text kopieren",
     "cred.reveal": "Zum Anzeigen klicken - halten Sie diesen Code geheim",
+    "cred.orCopy": "Oder den Code kopieren",
     "qr.title": "QR-Code scannen",
     "qr.subtitle": "Richten Sie die Kamera auf den QR-Code",
     "qr.scanning": "Wird gescannt …",
diff --git a/src/i18n/dict/en.js b/src/i18n/dict/en.js
index 0f7b35d..c59bf54 100644
--- a/src/i18n/dict/en.js
+++ b/src/i18n/dict/en.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "Your device generates the keys and a one-time invitation. Nothing touches a server.",
     "intro.createCta": "Generate keys & invitation",
     "intro.joinTitle": "Join a channel",
+    "intro.joinDesc": "Scan your peer's QR with your camera, or paste their invitation code.",
     "intro.scanTitle": "Scan QR with camera",
     "intro.scanSubtitle": "Fastest - point at your peer's screen",
-    "intro.orPasteCode": "or paste code",
+    "intro.orPasteCode": "Or paste the code",
     "intro.pastePlaceholder": "Paste invitation code here…",
     "intro.connect": "Connect",
     "intro.connecting": "Processing…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "Establish connection",
     "handshake.thenReceive": "Then receive the answer your peer sends back",
     "handshake.pasteAnswerPlaceholder": "Paste peer's answer code…",
-    "handshake.answerSentNote": "Send this answer to the creator, then wait - the chat opens once they connect.",
+    "handshake.answerSentNote": "Waiting for the creator to connect. The chat opens automatically.",
     "handshake.qrHint": "Keep this open until your peer captures the code.",
     "handshake.qrHintFrames": "The handshake is split across {frames} frames - keep this open until your peer captures all of them.",
-    "verify.title": "Security verification",
-    "verify.desc": "Compare this safety code with your peer over a separate channel (voice / in person), then type it to unlock the chat.",
-    "verify.enterLabel": "Enter the verified code",
     "verify.placeholder": "Type code here",
     "verify.confirm": "Confirm code",
     "verify.confirmed": "Confirmed",
-    "verify.mismatch": "Don't match",
-    "verify.yours": "Your confirmation",
-    "verify.peer": "Peer confirmation",
     "verify.pending": "Pending",
     "verify.waiting": "Waiting for code…",
-    "verify.verified": "Channel verified",
-    "verify.bothConfirmed": "Both parties confirmed. Opening the secure chat…",
+    "sasv.title": "Verify your peer",
+    "sasv.titleDone": "Peer verified",
+    "sasv.desc": "Read the code aloud over a call or in person. Continue only if your peer sees the same digits.",
+    "sasv.descDone": "You both confirmed the same code. The connection is authenticated.",
+    "sasv.enter": "Enter the code",
+    "sasv.match": "Match",
+    "sasv.noMatch": "Doesn't match",
+    "sasv.you": "You",
+    "sasv.peer": "Peer",
+    "sasv.waitingPeer": "Waiting for peer…",
+    "sasv.codesDiffer": "Codes don't match",
+    "sasv.opening": "Opening secure chat",
     "pwa.bannerTitle": "Install SecureBit.chat",
     "pwa.bannerDesc": "Get the native app experience with enhanced security",
     "pwa.install": "Install",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "Scan",
     "action.downloadDesktop": "Download desktop app",
     "action.advancedSettings": "Advanced settings",
-    "cred.offerTag": "offer · or copy text",
-    "cred.answerTag": "answer · or copy text",
     "cred.reveal": "Click to reveal - keep this code private",
+    "cred.orCopy": "Or copy the code",
     "qr.title": "Scan QR code",
     "qr.subtitle": "Point your camera at their QR",
     "qr.scanning": "Scanning…",
diff --git a/src/i18n/dict/es.js b/src/i18n/dict/es.js
index 640078f..486a017 100644
--- a/src/i18n/dict/es.js
+++ b/src/i18n/dict/es.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "Tu dispositivo genera las claves y una invitación de un solo uso. Nada de esto pasa por un servidor.",
     "intro.createCta": "Generar claves e invitación",
     "intro.joinTitle": "Unirse a un canal",
+    "intro.joinDesc": "Escanea el QR de tu contacto con la cámara o pega su código de invitación.",
     "intro.scanTitle": "Escanear el QR con la cámara",
     "intro.scanSubtitle": "Lo más rápido: apunta a la pantalla de la otra persona",
-    "intro.orPasteCode": "o pega el código",
+    "intro.orPasteCode": "O pega el código",
     "intro.pastePlaceholder": "Pega aquí el código de invitación…",
     "intro.connect": "Conectar",
     "intro.connecting": "Procesando…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "Establecer la conexión",
     "handshake.thenReceive": "Después recibe la respuesta que te devuelva la otra persona",
     "handshake.pasteAnswerPlaceholder": "Pega aquí el código de respuesta…",
-    "handshake.answerSentNote": "Envía esta respuesta a quien creó el canal y espera: el chat se abrirá cuando conecte.",
+    "handshake.answerSentNote": "Esperando a que el creador se conecte. El chat se abrirá automáticamente.",
     "handshake.qrHint": "Mantén esto abierto hasta que la otra persona capture el código.",
     "handshake.qrHintFrames": "El saludo se reparte en {frames} imágenes: mantén esto abierto hasta que las capture todas.",
-    "verify.title": "Verificación de seguridad",
-    "verify.desc": "Compara este código de seguridad con la otra persona por otra vía (voz o en persona) y escríbelo para desbloquear el chat.",
-    "verify.enterLabel": "Introduce el código verificado",
     "verify.placeholder": "Escribe el código aquí",
     "verify.confirm": "Confirmar el código",
     "verify.confirmed": "Confirmado",
-    "verify.mismatch": "No coinciden",
-    "verify.yours": "Tu confirmación",
-    "verify.peer": "Confirmación de la otra persona",
     "verify.pending": "Pendiente",
     "verify.waiting": "Esperando el código…",
-    "verify.verified": "Canal verificado",
-    "verify.bothConfirmed": "Ambas partes han confirmado. Abriendo el chat seguro…",
+    "sasv.title": "Verifica a tu contacto",
+    "sasv.titleDone": "Contacto verificado",
+    "sasv.desc": "Lee el código en voz alta por llamada o en persona. Continúa solo si tu contacto ve los mismos dígitos.",
+    "sasv.descDone": "Ambos confirmasteis el mismo código. La conexión está autenticada.",
+    "sasv.enter": "Introduce el código",
+    "sasv.match": "Coincide",
+    "sasv.noMatch": "No coincide",
+    "sasv.you": "Tú",
+    "sasv.peer": "Contacto",
+    "sasv.waitingPeer": "Esperando a tu contacto…",
+    "sasv.codesDiffer": "Los códigos no coinciden",
+    "sasv.opening": "Abriendo el chat seguro",
     "pwa.bannerTitle": "Instala SecureBit.chat",
     "pwa.bannerDesc": "Disfruta de la experiencia de app nativa con más seguridad",
     "pwa.install": "Instalar",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "Escanear",
     "action.downloadDesktop": "Descargar la app de escritorio",
     "action.advancedSettings": "Ajustes avanzados",
-    "cred.offerTag": "oferta · o copia el texto",
-    "cred.answerTag": "respuesta · o copia el texto",
     "cred.reveal": "Haz clic para mostrarlo: mantén este código en privado",
+    "cred.orCopy": "O copia el código",
     "qr.title": "Escanear código QR",
     "qr.subtitle": "Apunta la cámara a su código QR",
     "qr.scanning": "Escaneando…",
diff --git a/src/i18n/dict/fa.js b/src/i18n/dict/fa.js
index 0241f70..b63cdbb 100644
--- a/src/i18n/dict/fa.js
+++ b/src/i18n/dict/fa.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "دستگاه شما کلیدها و یک دعوت‌نامهٔ یک‌بارمصرف می‌سازد. هیچ‌چیز به سرور نمی‌رسد.",
     "intro.createCta": "ساخت کلید و دعوت‌نامه",
     "intro.joinTitle": "به کانالی بپیوندید",
+    "intro.joinDesc": "QR طرف مقابل را با دوربین اسکن کنید یا کد دعوت او را جای‌گذاری کنید.",
     "intro.scanTitle": "‏QR را با دوربین بخوانید",
     "intro.scanSubtitle": "سریع‌ترین راه - به صفحهٔ همتایتان بگیرید",
-    "intro.orPasteCode": "یا کد را بچسبانید",
+    "intro.orPasteCode": "یا کد را جای‌گذاری کنید",
     "intro.pastePlaceholder": "کد دعوت را اینجا بچسبانید…",
     "intro.connect": "اتصال",
     "intro.connecting": "در حال پردازش…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "برقراری اتصال",
     "handshake.thenReceive": "سپس پاسخی را که همتایتان برمی‌گرداند دریافت کنید",
     "handshake.pasteAnswerPlaceholder": "کد پاسخ همتا را بچسبانید…",
-    "handshake.answerSentNote": "این پاسخ را برای سازنده بفرستید و منتظر بمانید - گفتگو به‌محض اتصال او باز می‌شود.",
+    "handshake.answerSentNote": "در انتظار اتصال سازنده. گفتگو به‌طور خودکار باز می‌شود.",
     "handshake.qrHint": "این را باز نگه دارید تا همتایتان کد را بگیرد.",
     "handshake.qrHintFrames": "دست‌دادن میان {frames} فریم پخش شده است - این را باز نگه دارید تا همتایتان همهٔ آن‌ها را بگیرد.",
-    "verify.title": "تأیید امنیتی",
-    "verify.desc": "این کد ایمنی را از راه کانالی جداگانه (تماس صوتی / حضوری) با همتایتان مقایسه کنید، سپس آن را بنویسید تا گفتگو باز شود.",
-    "verify.enterLabel": "کد تأییدشده را وارد کنید",
     "verify.placeholder": "کد را اینجا بنویسید",
     "verify.confirm": "تأیید کد",
     "verify.confirmed": "تأیید شد",
-    "verify.mismatch": "هم‌خوان نیستند",
-    "verify.yours": "تأیید شما",
-    "verify.peer": "تأیید همتا",
     "verify.pending": "در انتظار",
     "verify.waiting": "در انتظار کد…",
-    "verify.verified": "کانال تأیید شد",
-    "verify.bothConfirmed": "هر دو طرف تأیید کردند. گفتگوی امن در حال باز شدن…",
+    "sasv.title": "طرف مقابل را تأیید کنید",
+    "sasv.titleDone": "طرف مقابل تأیید شد",
+    "sasv.desc": "کد را در تماس یا حضوری با صدای بلند بخوانید. فقط وقتی ادامه دهید که طرف مقابل همان ارقام را ببیند.",
+    "sasv.descDone": "هر دو یک کد را تأیید کردید. اتصال احراز هویت شد.",
+    "sasv.enter": "کد را وارد کنید",
+    "sasv.match": "مطابق است",
+    "sasv.noMatch": "مطابق نیست",
+    "sasv.you": "شما",
+    "sasv.peer": "طرف مقابل",
+    "sasv.waitingPeer": "در انتظار طرف مقابل…",
+    "sasv.codesDiffer": "کدها مطابق نیستند",
+    "sasv.opening": "در حال باز کردن گفتگوی امن",
     "pwa.bannerTitle": "‏SecureBit.chat را نصب کنید",
     "pwa.bannerDesc": "تجربهٔ برنامهٔ بومی با امنیت بیشتر",
     "pwa.install": "نصب",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "خواندن",
     "action.downloadDesktop": "دریافت برنامهٔ رومیزی",
     "action.advancedSettings": "تنظیمات پیشرفته",
-    "cred.offerTag": "پیشنهاد · یا متن را رونوشت کنید",
-    "cred.answerTag": "پاسخ · یا متن را رونوشت کنید",
     "cred.reveal": "برای نمایش کلیک کنید - این کد را خصوصی نگه دارید",
+    "cred.orCopy": "یا کد را رونوشت کنید",
     "qr.title": "خواندن کد QR",
     "qr.subtitle": "دوربین را به QR آن‌ها بگیرید",
     "qr.scanning": "در حال خواندن…",
diff --git a/src/i18n/dict/fr.js b/src/i18n/dict/fr.js
index eb5905a..4adacc3 100644
--- a/src/i18n/dict/fr.js
+++ b/src/i18n/dict/fr.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "Votre appareil génère les clés et une invitation à usage unique. Rien de tout cela ne passe par un serveur.",
     "intro.createCta": "Générer les clés et l'invitation",
     "intro.joinTitle": "Rejoindre un canal",
+    "intro.joinDesc": "Scannez le QR de votre correspondant avec l'appareil photo, ou collez son code d'invitation.",
     "intro.scanTitle": "Scanner le QR avec la caméra",
     "intro.scanSubtitle": "Le plus rapide : visez l'écran de votre correspondant",
-    "intro.orPasteCode": "ou collez le code",
+    "intro.orPasteCode": "Ou collez le code",
     "intro.pastePlaceholder": "Collez ici le code d'invitation…",
     "intro.connect": "Se connecter",
     "intro.connecting": "Traitement…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "Établir la connexion",
     "handshake.thenReceive": "Recevez ensuite la réponse que votre correspondant renvoie",
     "handshake.pasteAnswerPlaceholder": "Collez le code de réponse…",
-    "handshake.answerSentNote": "Envoyez cette réponse à la personne qui a créé le canal, puis patientez : la discussion s'ouvre dès qu'elle se connecte.",
+    "handshake.answerSentNote": "En attente de la connexion du créateur. Le chat s'ouvrira automatiquement.",
     "handshake.qrHint": "Gardez ceci ouvert jusqu'à ce que votre correspondant ait capturé le code.",
     "handshake.qrHintFrames": "La poignée de main est répartie sur {frames} images : gardez ceci ouvert jusqu'à ce que votre correspondant les ait toutes capturées.",
-    "verify.title": "Vérification de sécurité",
-    "verify.desc": "Comparez ce code de sécurité avec votre correspondant par un autre canal (voix ou en personne), puis saisissez-le pour ouvrir la discussion.",
-    "verify.enterLabel": "Saisissez le code vérifié",
     "verify.placeholder": "Tapez le code ici",
     "verify.confirm": "Confirmer le code",
     "verify.confirmed": "Confirmé",
-    "verify.mismatch": "Ne correspond pas",
-    "verify.yours": "Votre confirmation",
-    "verify.peer": "Confirmation du correspondant",
     "verify.pending": "En attente",
     "verify.waiting": "En attente du code…",
-    "verify.verified": "Canal vérifié",
-    "verify.bothConfirmed": "Les deux parties ont confirmé. Ouverture de la discussion sécurisée…",
+    "sasv.title": "Vérifiez votre correspondant",
+    "sasv.titleDone": "Correspondant vérifié",
+    "sasv.desc": "Lisez le code à voix haute par appel ou en personne. Ne continuez que si votre correspondant voit les mêmes chiffres.",
+    "sasv.descDone": "Vous avez tous les deux confirmé le même code. La connexion est authentifiée.",
+    "sasv.enter": "Saisissez le code",
+    "sasv.match": "Correspond",
+    "sasv.noMatch": "Ne correspond pas",
+    "sasv.you": "Vous",
+    "sasv.peer": "Correspondant",
+    "sasv.waitingPeer": "En attente du correspondant…",
+    "sasv.codesDiffer": "Les codes ne correspondent pas",
+    "sasv.opening": "Ouverture du chat sécurisé",
     "pwa.bannerTitle": "Installer SecureBit.chat",
     "pwa.bannerDesc": "Profitez de l'expérience d'une application native, avec une sécurité renforcée",
     "pwa.install": "Installer",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "Scanner",
     "action.downloadDesktop": "Télécharger l'application",
     "action.advancedSettings": "Réglages avancés",
-    "cred.offerTag": "offre · ou copiez le texte",
-    "cred.answerTag": "réponse · ou copiez le texte",
     "cred.reveal": "Cliquez pour afficher - gardez ce code privé",
+    "cred.orCopy": "Ou copiez le code",
     "qr.title": "Scanner le QR",
     "qr.subtitle": "Visez le QR de votre correspondant",
     "qr.scanning": "Lecture…",
diff --git a/src/i18n/dict/he.js b/src/i18n/dict/he.js
index d3adb9b..516d720 100644
--- a/src/i18n/dict/he.js
+++ b/src/i18n/dict/he.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "המכשיר שלכם יוצר את המפתחות והזמנה חד־פעמית. שום דבר לא נוגע בשרת.",
     "intro.createCta": "יצירת מפתחות והזמנה",
     "intro.joinTitle": "הצטרפו לערוץ",
+    "intro.joinDesc": "סרקו את קוד ה-QR של הצד השני במצלמה, או הדביקו את קוד ההזמנה.",
     "intro.scanTitle": "סרקו QR עם המצלמה",
     "intro.scanSubtitle": "הכי מהיר - כוונו למסך של העמית",
-    "intro.orPasteCode": "או הדביקו קוד",
+    "intro.orPasteCode": "או הדביקו את הקוד",
     "intro.pastePlaceholder": "הדביקו כאן את קוד ההזמנה…",
     "intro.connect": "התחברו",
     "intro.connecting": "מעבד…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "יצירת חיבור",
     "handshake.thenReceive": "ואז קבלו את התשובה שהעמית שולח בחזרה",
     "handshake.pasteAnswerPlaceholder": "הדביקו את קוד התשובה של העמית…",
-    "handshake.answerSentNote": "שלחו את התשובה ליוצר ואז המתינו - הצ'אט נפתח ברגע שהם מתחברים.",
+    "handshake.answerSentNote": "ממתינים שהיוצר יתחבר. הצ'אט ייפתח אוטומטית.",
     "handshake.qrHint": "השאירו פתוח עד שהעמית יקלוט את הקוד.",
     "handshake.qrHintFrames": "לחיצת היד מפוצלת ל-{frames} פריימים - השאירו פתוח עד שהעמית יקלוט את כולם.",
-    "verify.title": "אימות אבטחה",
-    "verify.desc": "השוו את קוד הבטיחות הזה עם העמית בערוץ נפרד (שיחה קולית / פנים אל פנים), ואז הקלידו אותו כדי לפתוח את הצ'אט.",
-    "verify.enterLabel": "הזינו את הקוד המאומת",
     "verify.placeholder": "הקלידו כאן את הקוד",
     "verify.confirm": "אשרו את הקוד",
     "verify.confirmed": "אושר",
-    "verify.mismatch": "לא תואמים",
-    "verify.yours": "האישור שלכם",
-    "verify.peer": "אישור העמית",
     "verify.pending": "ממתין",
     "verify.waiting": "ממתין לקוד…",
-    "verify.verified": "הערוץ אומת",
-    "verify.bothConfirmed": "שני הצדדים אישרו. פותח את הצ'אט המאובטח…",
+    "sasv.title": "אמתו את הצד השני",
+    "sasv.titleDone": "הצד השני אומת",
+    "sasv.desc": "הקריאו את הקוד בקול בשיחה או פנים אל פנים. המשיכו רק אם הצד השני רואה את אותן ספרות.",
+    "sasv.descDone": "שניכם אישרתם את אותו קוד. החיבור מאומת.",
+    "sasv.enter": "הזינו את הקוד",
+    "sasv.match": "תואם",
+    "sasv.noMatch": "לא תואם",
+    "sasv.you": "אתם",
+    "sasv.peer": "הצד השני",
+    "sasv.waitingPeer": "ממתינים לצד השני…",
+    "sasv.codesDiffer": "הקודים לא תואמים",
+    "sasv.opening": "פותחים צ'אט מאובטח",
     "pwa.bannerTitle": "התקינו את SecureBit.chat",
     "pwa.bannerDesc": "קבלו חוויית אפליקציה מקורית עם אבטחה משופרת",
     "pwa.install": "התקנה",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "סריקה",
     "action.downloadDesktop": "הורידו את אפליקציית שולחן העבודה",
     "action.advancedSettings": "הגדרות מתקדמות",
-    "cred.offerTag": "הצעה · או העתיקו טקסט",
-    "cred.answerTag": "תשובה · או העתיקו טקסט",
     "cred.reveal": "לחצו לחשיפה - שמרו את הקוד הזה פרטי",
+    "cred.orCopy": "או העתיקו את הקוד",
     "qr.title": "סריקת קוד QR",
     "qr.subtitle": "כוונו את המצלמה ל-QR שלהם",
     "qr.scanning": "סורק…",
diff --git a/src/i18n/dict/hi.js b/src/i18n/dict/hi.js
index c6d11fb..92c0c27 100644
--- a/src/i18n/dict/hi.js
+++ b/src/i18n/dict/hi.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "आपका उपकरण कुंजियाँ और एक बार काम आने वाला निमंत्रण बनाता है। इनमें से कुछ भी किसी सर्वर तक नहीं जाता।",
     "intro.createCta": "कुंजियाँ और निमंत्रण बनाएँ",
     "intro.joinTitle": "चैनल में शामिल हों",
+    "intro.joinDesc": "कैमरे से अपने साथी का QR स्कैन करें, या उनका आमंत्रण कोड पेस्ट करें।",
     "intro.scanTitle": "कैमरे से QR स्कैन करें",
     "intro.scanSubtitle": "सबसे तेज़ - सामने वाले की स्क्रीन पर कैमरा रखें",
-    "intro.orPasteCode": "या कोड चिपकाएँ",
+    "intro.orPasteCode": "या कोड पेस्ट करें",
     "intro.pastePlaceholder": "निमंत्रण कोड यहाँ चिपकाएँ…",
     "intro.connect": "जोड़ें",
     "intro.connecting": "प्रक्रिया जारी…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "जुड़ाव बनाएँ",
     "handshake.thenReceive": "फिर सामने वाले का भेजा उत्तर लीजिए",
     "handshake.pasteAnswerPlaceholder": "सामने वाले का उत्तर कोड चिपकाएँ…",
-    "handshake.answerSentNote": "यह उत्तर चैनल बनाने वाले को भेजिए और रुकिए - जैसे ही वे जुड़ेंगे, चैट खुल जाएगी।",
+    "handshake.answerSentNote": "निर्माता के जुड़ने की प्रतीक्षा है। चैट अपने-आप खुल जाएगी।",
     "handshake.qrHint": "जब तक सामने वाला कोड पढ़ न ले, इसे खुला रखिए।",
     "handshake.qrHintFrames": "हाथ मिलाना {frames} फ़्रेमों में बँटा है - जब तक सामने वाला सब पढ़ न ले, इसे खुला रखिए।",
-    "verify.title": "सुरक्षा सत्यापन",
-    "verify.desc": "इस सुरक्षा कोड को किसी दूसरे रास्ते से (आवाज़ पर या आमने-सामने) मिलाइए, फिर उसे लिखकर चैट खोलिए।",
-    "verify.enterLabel": "मिलाया हुआ कोड लिखें",
     "verify.placeholder": "कोड यहाँ लिखें",
     "verify.confirm": "कोड पक्का करें",
     "verify.confirmed": "पक्का हुआ",
-    "verify.mismatch": "मेल नहीं खाता",
-    "verify.yours": "आपकी पुष्टि",
-    "verify.peer": "सामने वाले की पुष्टि",
     "verify.pending": "प्रतीक्षा में",
     "verify.waiting": "कोड की प्रतीक्षा…",
-    "verify.verified": "चैनल सत्यापित",
-    "verify.bothConfirmed": "दोनों पक्षों ने पुष्टि कर दी। सुरक्षित चैट खुल रही है…",
+    "sasv.title": "अपने साथी की पुष्टि करें",
+    "sasv.titleDone": "साथी की पुष्टि हो गई",
+    "sasv.desc": "कॉल पर या आमने-सामने कोड ज़ोर से पढ़ें। तभी आगे बढ़ें जब आपके साथी को वही अंक दिखें।",
+    "sasv.descDone": "आप दोनों ने एक ही कोड की पुष्टि की। कनेक्शन प्रमाणित है।",
+    "sasv.enter": "कोड दर्ज करें",
+    "sasv.match": "मेल खाता है",
+    "sasv.noMatch": "मेल नहीं खाता",
+    "sasv.you": "आप",
+    "sasv.peer": "साथी",
+    "sasv.waitingPeer": "साथी की प्रतीक्षा…",
+    "sasv.codesDiffer": "कोड मेल नहीं खाते",
+    "sasv.opening": "सुरक्षित चैट खुल रही है",
     "pwa.bannerTitle": "SecureBit.chat इंस्टॉल करें",
     "pwa.bannerDesc": "बेहतर सुरक्षा के साथ मूल ऐप जैसा अनुभव पाइए",
     "pwa.install": "इंस्टॉल करें",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "स्कैन करें",
     "action.downloadDesktop": "डेस्कटॉप ऐप डाउनलोड करें",
     "action.advancedSettings": "उन्नत सेटिंग्स",
-    "cred.offerTag": "निमंत्रण · या पाठ कॉपी करें",
-    "cred.answerTag": "उत्तर · या पाठ कॉपी करें",
     "cred.reveal": "देखने के लिए दबाएँ - यह कोड किसी को न बताएँ",
+    "cred.orCopy": "या कोड कॉपी करें",
     "qr.title": "QR कोड स्कैन करें",
     "qr.subtitle": "कैमरा सामने वाले के QR पर रखें",
     "qr.scanning": "पढ़ा जा रहा है…",
diff --git a/src/i18n/dict/ko.js b/src/i18n/dict/ko.js
index c739d3a..8d48759 100644
--- a/src/i18n/dict/ko.js
+++ b/src/i18n/dict/ko.js
@@ -93,6 +93,7 @@ export const DICTIONARY = {
     "intro.createDesc": "여러분의 기기가 키와 일회용 초대장을 만듭니다. 그 어느 것도 서버를 거치지 않습니다.",
     "intro.createCta": "키와 초대장 만들기",
     "intro.joinTitle": "채널 참여하기",
+    "intro.joinDesc": "카메라로 상대방의 QR을 스캔하거나 초대 코드를 붙여넣으세요.",
     "intro.scanTitle": "카메라로 QR 스캔",
     "intro.scanSubtitle": "가장 빠릅니다 - 상대의 화면을 비추세요",
     "intro.orPasteCode": "또는 코드 붙여넣기",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "연결 맺기",
     "handshake.thenReceive": "그다음 상대가 보내는 응답을 받으세요",
     "handshake.pasteAnswerPlaceholder": "상대의 응답 코드를 붙여넣으세요…",
-    "handshake.answerSentNote": "이 응답을 만든 사람에게 보내고 기다리세요 - 상대가 연결되면 대화가 열립니다.",
+    "handshake.answerSentNote": "생성자의 연결을 기다리는 중입니다. 채팅이 자동으로 열립니다.",
     "handshake.qrHint": "상대가 코드를 다 읽을 때까지 이 화면을 열어 두세요.",
     "handshake.qrHintFrames": "악수가 {frames}개 화면으로 나뉘어 있습니다 - 상대가 전부 읽을 때까지 열어 두세요.",
-    "verify.title": "보안 확인",
-    "verify.desc": "다른 경로(통화나 대면)로 상대와 이 안전 코드를 대조한 뒤, 입력해서 대화를 여세요.",
-    "verify.enterLabel": "대조한 코드를 입력하세요",
     "verify.placeholder": "여기에 코드 입력",
     "verify.confirm": "코드 확인",
     "verify.confirmed": "확인됨",
-    "verify.mismatch": "일치하지 않음",
-    "verify.yours": "내 확인",
-    "verify.peer": "상대의 확인",
     "verify.pending": "대기 중",
     "verify.waiting": "코드 대기 중…",
-    "verify.verified": "채널 확인 완료",
-    "verify.bothConfirmed": "양쪽 모두 확인했습니다. 안전한 대화를 여는 중…",
+    "sasv.title": "상대방 확인",
+    "sasv.titleDone": "상대방 확인 완료",
+    "sasv.desc": "통화나 대면으로 코드를 소리 내어 읽어 주세요. 상대방이 같은 숫자를 볼 때만 계속하세요.",
+    "sasv.descDone": "두 사람 모두 같은 코드를 확인했습니다. 연결이 인증되었습니다.",
+    "sasv.enter": "코드 입력",
+    "sasv.match": "일치",
+    "sasv.noMatch": "일치하지 않음",
+    "sasv.you": "나",
+    "sasv.peer": "상대방",
+    "sasv.waitingPeer": "상대방을 기다리는 중…",
+    "sasv.codesDiffer": "코드가 일치하지 않음",
+    "sasv.opening": "보안 채팅을 여는 중",
     "pwa.bannerTitle": "SecureBit.chat 설치",
     "pwa.bannerDesc": "보안이 강화된 네이티브 앱 경험을 누리세요",
     "pwa.install": "설치",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "스캔",
     "action.downloadDesktop": "데스크톱 앱 내려받기",
     "action.advancedSettings": "고급 설정",
-    "cred.offerTag": "초대 · 또는 텍스트 복사",
-    "cred.answerTag": "응답 · 또는 텍스트 복사",
     "cred.reveal": "눌러서 보기 - 이 코드는 남에게 알리지 마세요",
+    "cred.orCopy": "또는 코드 복사",
     "qr.title": "QR 코드 스캔",
     "qr.subtitle": "상대의 QR에 카메라를 맞추세요",
     "qr.scanning": "읽는 중…",
diff --git a/src/i18n/dict/ru.js b/src/i18n/dict/ru.js
index ea892bc..4169f02 100644
--- a/src/i18n/dict/ru.js
+++ b/src/i18n/dict/ru.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "Ваше устройство создаёт ключи и одноразовое приглашение. Ничто из этого не попадает на сервер.",
     "intro.createCta": "Создать ключи и приглашение",
     "intro.joinTitle": "Присоединиться к каналу",
+    "intro.joinDesc": "Отсканируйте QR собеседника камерой или вставьте его код приглашения.",
     "intro.scanTitle": "Сканировать QR камерой",
     "intro.scanSubtitle": "Быстрее всего - наведите на экран собеседника",
-    "intro.orPasteCode": "или вставьте код",
+    "intro.orPasteCode": "Или вставьте код",
     "intro.pastePlaceholder": "Вставьте код приглашения сюда…",
     "intro.connect": "Соединиться",
     "intro.connecting": "Обработка…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "Установить соединение",
     "handshake.thenReceive": "Затем получите ответ, который пришлёт собеседник",
     "handshake.pasteAnswerPlaceholder": "Вставьте код ответа собеседника…",
-    "handshake.answerSentNote": "Отправьте этот ответ создателю и подождите - чат откроется, как только он подключится.",
+    "handshake.answerSentNote": "Ждём, пока создатель подключится. Чат откроется автоматически.",
     "handshake.qrHint": "Держите это открытым, пока собеседник не считает код.",
     "handshake.qrHintFrames": "Рукопожатие разбито на {frames} кадров - держите это открытым, пока собеседник не считает все.",
-    "verify.title": "Проверка безопасности",
-    "verify.desc": "Сверьте этот код безопасности с собеседником по другому каналу (голосом или лично), затем введите его, чтобы открыть чат.",
-    "verify.enterLabel": "Введите сверенный код",
     "verify.placeholder": "Введите код здесь",
     "verify.confirm": "Подтвердить код",
     "verify.confirmed": "Подтверждено",
-    "verify.mismatch": "Не совпадают",
-    "verify.yours": "Ваше подтверждение",
-    "verify.peer": "Подтверждение собеседника",
     "verify.pending": "Ожидается",
     "verify.waiting": "Ожидание кода…",
-    "verify.verified": "Канал проверен",
-    "verify.bothConfirmed": "Обе стороны подтвердили. Открываем защищённый чат…",
+    "sasv.title": "Проверьте собеседника",
+    "sasv.titleDone": "Собеседник проверен",
+    "sasv.desc": "Прочитайте код вслух по звонку или при встрече. Продолжайте, только если собеседник видит те же цифры.",
+    "sasv.descDone": "Вы оба подтвердили один и тот же код. Соединение подлинное.",
+    "sasv.enter": "Введите код",
+    "sasv.match": "Совпадает",
+    "sasv.noMatch": "Не совпадает",
+    "sasv.you": "Вы",
+    "sasv.peer": "Собеседник",
+    "sasv.waitingPeer": "Ждём собеседника…",
+    "sasv.codesDiffer": "Коды не совпадают",
+    "sasv.opening": "Открываем защищённый чат",
     "pwa.bannerTitle": "Установите SecureBit.chat",
     "pwa.bannerDesc": "Опыт полноценного приложения с усиленной защитой",
     "pwa.install": "Установить",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "Сканировать",
     "action.downloadDesktop": "Скачать приложение",
     "action.advancedSettings": "Дополнительные настройки",
-    "cred.offerTag": "предложение · или скопируйте текст",
-    "cred.answerTag": "ответ · или скопируйте текст",
     "cred.reveal": "Нажмите, чтобы показать - держите этот код в тайне",
+    "cred.orCopy": "Или скопируйте код",
     "qr.title": "Сканировать QR-код",
     "qr.subtitle": "Наведите камеру на их QR-код",
     "qr.scanning": "Сканирование…",
diff --git a/src/i18n/dict/uk.js b/src/i18n/dict/uk.js
index 9a90214..d5f8d2b 100644
--- a/src/i18n/dict/uk.js
+++ b/src/i18n/dict/uk.js
@@ -93,9 +93,10 @@ export const DICTIONARY = {
     "intro.createDesc": "Ваш пристрій створює ключі та одноразове запрошення. Ніщо з цього не потрапляє на сервер.",
     "intro.createCta": "Створити ключі та запрошення",
     "intro.joinTitle": "Приєднатися до каналу",
+    "intro.joinDesc": "Відскануйте QR співрозмовника камерою або вставте його код запрошення.",
     "intro.scanTitle": "Сканувати QR камерою",
     "intro.scanSubtitle": "Найшвидше - наведіть на екран співрозмовника",
-    "intro.orPasteCode": "або вставте код",
+    "intro.orPasteCode": "Або вставте код",
     "intro.pastePlaceholder": "Вставте код запрошення сюди…",
     "intro.connect": "З'єднатися",
     "intro.connecting": "Обробка…",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "Встановити з'єднання",
     "handshake.thenReceive": "Потім отримайте відповідь, яку надішле співрозмовник",
     "handshake.pasteAnswerPlaceholder": "Вставте код відповіді співрозмовника…",
-    "handshake.answerSentNote": "Надішліть цю відповідь створювачу й зачекайте - чат відкриється, щойно він приєднається.",
+    "handshake.answerSentNote": "Чекаємо, поки творець під'єднається. Чат відкриється автоматично.",
     "handshake.qrHint": "Тримайте це відкритим, доки співрозмовник не зчитає код.",
     "handshake.qrHintFrames": "Рукостискання розбите на {frames} кадрів - тримайте це відкритим, доки співрозмовник не зчитає всі.",
-    "verify.title": "Перевірка безпеки",
-    "verify.desc": "Звірте цей код безпеки зі співрозмовником іншим каналом (голосом або особисто), потім введіть його, щоб відкрити чат.",
-    "verify.enterLabel": "Введіть звірений код",
     "verify.placeholder": "Введіть код тут",
     "verify.confirm": "Підтвердити код",
     "verify.confirmed": "Підтверджено",
-    "verify.mismatch": "Не збігаються",
-    "verify.yours": "Ваше підтвердження",
-    "verify.peer": "Підтвердження співрозмовника",
     "verify.pending": "Очікується",
     "verify.waiting": "Очікування коду…",
-    "verify.verified": "Канал перевірено",
-    "verify.bothConfirmed": "Обидві сторони підтвердили. Відкриваємо захищений чат…",
+    "sasv.title": "Перевірте співрозмовника",
+    "sasv.titleDone": "Співрозмовника перевірено",
+    "sasv.desc": "Прочитайте код уголос під час дзвінка або зустрічі. Продовжуйте, лише якщо співрозмовник бачить ті самі цифри.",
+    "sasv.descDone": "Ви обидва підтвердили той самий код. З'єднання справжнє.",
+    "sasv.enter": "Введіть код",
+    "sasv.match": "Збігається",
+    "sasv.noMatch": "Не збігається",
+    "sasv.you": "Ви",
+    "sasv.peer": "Співрозмовник",
+    "sasv.waitingPeer": "Чекаємо на співрозмовника…",
+    "sasv.codesDiffer": "Коди не збігаються",
+    "sasv.opening": "Відкриваємо захищений чат",
     "pwa.bannerTitle": "Встановіть SecureBit.chat",
     "pwa.bannerDesc": "Досвід власного застосунку з посиленим захистом",
     "pwa.install": "Встановити",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "Сканувати",
     "action.downloadDesktop": "Завантажити застосунок",
     "action.advancedSettings": "Додаткові налаштування",
-    "cred.offerTag": "пропозиція · або скопіюйте текст",
-    "cred.answerTag": "відповідь · або скопіюйте текст",
     "cred.reveal": "Натисніть, щоб показати - тримайте цей код у таємниці",
+    "cred.orCopy": "Або скопіюйте код",
     "qr.title": "Сканувати QR-код",
     "qr.subtitle": "Наведіть камеру на їхній QR-код",
     "qr.scanning": "Сканування…",
diff --git a/src/i18n/dict/ur.js b/src/i18n/dict/ur.js
index 1618d5c..43e76c0 100644
--- a/src/i18n/dict/ur.js
+++ b/src/i18n/dict/ur.js
@@ -93,6 +93,7 @@ export const DICTIONARY = {
     "intro.createDesc": "آپ کا آلہ کلیدیں اور ایک بار کی دعوت بناتا ہے۔ کچھ بھی سرور کو نہیں چھوتا۔",
     "intro.createCta": "کلیدیں اور دعوت بنائیں",
     "intro.joinTitle": "چینل میں شامل ہوں",
+    "intro.joinDesc": "کیمرے سے اپنے ساتھی کا QR اسکین کریں، یا ان کا دعوتی کوڈ چسپاں کریں۔",
     "intro.scanTitle": "کیمرے سے QR پڑھیں",
     "intro.scanSubtitle": "سب سے تیز - ساتھی کی سکرین کی طرف کریں",
     "intro.orPasteCode": "یا کوڈ چسپاں کریں",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "اتصال قائم کریں",
     "handshake.thenReceive": "پھر وہ جواب وصول کریں جو آپ کا ساتھی واپس بھیجتا ہے",
     "handshake.pasteAnswerPlaceholder": "ساتھی کا جوابی کوڈ چسپاں کریں…",
-    "handshake.answerSentNote": "یہ جواب بنانے والے کو بھیجیں، پھر انتظار کریں - ان کے جڑتے ہی گفتگو کھل جائے گی۔",
+    "handshake.answerSentNote": "تخلیق کار کے جڑنے کا انتظار ہے۔ چیٹ خود بخود کھل جائے گی۔",
     "handshake.qrHint": "یہ اس وقت تک کھلا رکھیں جب تک ساتھی کوڈ نہ پکڑ لے۔",
     "handshake.qrHintFrames": "مصافحہ {frames} فریموں میں بٹا ہے - یہ اس وقت تک کھلا رکھیں جب تک ساتھی سب نہ پکڑ لے۔",
-    "verify.title": "حفاظتی تصدیق",
-    "verify.desc": "یہ حفاظتی کوڈ کسی الگ ذریعے (آواز / بالمشافہ) سے اپنے ساتھی کے ساتھ ملائیں، پھر گفتگو کھولنے کے لیے لکھیں۔",
-    "verify.enterLabel": "تصدیق شدہ کوڈ درج کریں",
     "verify.placeholder": "کوڈ یہاں لکھیں",
     "verify.confirm": "کوڈ کی تصدیق",
     "verify.confirmed": "تصدیق ہو گئی",
-    "verify.mismatch": "مطابقت نہیں",
-    "verify.yours": "آپ کی تصدیق",
-    "verify.peer": "ساتھی کی تصدیق",
     "verify.pending": "زیرِ التوا",
     "verify.waiting": "کوڈ کا انتظار…",
-    "verify.verified": "چینل تصدیق شدہ",
-    "verify.bothConfirmed": "دونوں فریقوں نے تصدیق کی۔ محفوظ گفتگو کھولی جا رہی ہے…",
+    "sasv.title": "اپنے ساتھی کی تصدیق کریں",
+    "sasv.titleDone": "ساتھی کی تصدیق ہو گئی",
+    "sasv.desc": "کال پر یا آمنے سامنے کوڈ بلند آواز سے پڑھیں۔ صرف تب آگے بڑھیں جب آپ کے ساتھی کو وہی ہندسے نظر آئیں۔",
+    "sasv.descDone": "آپ دونوں نے ایک ہی کوڈ کی تصدیق کی۔ کنکشن مستند ہے۔",
+    "sasv.enter": "کوڈ درج کریں",
+    "sasv.match": "مماثل ہے",
+    "sasv.noMatch": "مماثل نہیں",
+    "sasv.you": "آپ",
+    "sasv.peer": "ساتھی",
+    "sasv.waitingPeer": "ساتھی کا انتظار…",
+    "sasv.codesDiffer": "کوڈ مماثل نہیں",
+    "sasv.opening": "محفوظ چیٹ کھل رہی ہے",
     "pwa.bannerTitle": "‏SecureBit.chat نصب کریں",
     "pwa.bannerDesc": "بہتر سلامتی کے ساتھ مقامی ایپ کا تجربہ حاصل کریں",
     "pwa.install": "نصب",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "پڑھیں",
     "action.downloadDesktop": "ڈیسک ٹاپ ایپ ڈاؤن لوڈ کریں",
     "action.advancedSettings": "اعلیٰ ترتیبات",
-    "cred.offerTag": "پیشکش · یا متن نقل کریں",
-    "cred.answerTag": "جواب · یا متن نقل کریں",
     "cred.reveal": "دکھانے کے لیے دبائیں - یہ کوڈ نجی رکھیں",
+    "cred.orCopy": "یا کوڈ نقل کریں",
     "qr.title": "‏QR کوڈ پڑھیں",
     "qr.subtitle": "اپنا کیمرہ ان کے QR کی طرف کریں",
     "qr.scanning": "پڑھا جا رہا ہے…",
diff --git a/src/i18n/dict/zh.js b/src/i18n/dict/zh.js
index 85abef7..adee39c 100644
--- a/src/i18n/dict/zh.js
+++ b/src/i18n/dict/zh.js
@@ -93,6 +93,7 @@ export const DICTIONARY = {
     "intro.createDesc": "你的设备会生成密钥和一次性邀请。这些都不会经过任何服务器。",
     "intro.createCta": "生成密钥与邀请",
     "intro.joinTitle": "加入通道",
+    "intro.joinDesc": "用相机扫描对方的二维码，或粘贴对方的邀请代码。",
     "intro.scanTitle": "用摄像头扫描二维码",
     "intro.scanSubtitle": "最快的方式 —— 对准对方的屏幕",
     "intro.orPasteCode": "或粘贴代码",
@@ -271,22 +272,26 @@ export const DICTIONARY = {
     "handshake.establish": "建立连接",
     "handshake.thenReceive": "然后接收对方发回的应答",
     "handshake.pasteAnswerPlaceholder": "粘贴对方的应答码…",
-    "handshake.answerSentNote": "把这段应答发给创建者，然后等待 —— 对方一连上，聊天就会打开。",
+    "handshake.answerSentNote": "正在等待创建者连接。聊天将自动打开。",
     "handshake.qrHint": "在对方读取完代码之前，请保持此界面打开。",
     "handshake.qrHintFrames": "握手被拆成 {frames} 帧 —— 在对方读完全部帧之前，请保持此界面打开。",
-    "verify.title": "安全校验",
-    "verify.desc": "通过另一条渠道（通话或当面）与对方核对这个安全码，然后输入它以解锁聊天。",
-    "verify.enterLabel": "输入核对过的安全码",
     "verify.placeholder": "在此输入安全码",
     "verify.confirm": "确认安全码",
     "verify.confirmed": "已确认",
-    "verify.mismatch": "不一致",
-    "verify.yours": "你的确认",
-    "verify.peer": "对方的确认",
     "verify.pending": "等待中",
     "verify.waiting": "等待安全码…",
-    "verify.verified": "通道已校验",
-    "verify.bothConfirmed": "双方均已确认。正在打开安全聊天…",
+    "sasv.title": "验证对方",
+    "sasv.titleDone": "对方已验证",
+    "sasv.desc": "通过通话或当面大声读出代码。只有对方看到相同的数字时才继续。",
+    "sasv.descDone": "你们双方确认了相同的代码。连接已通过认证。",
+    "sasv.enter": "输入代码",
+    "sasv.match": "一致",
+    "sasv.noMatch": "不一致",
+    "sasv.you": "你",
+    "sasv.peer": "对方",
+    "sasv.waitingPeer": "正在等待对方…",
+    "sasv.codesDiffer": "代码不一致",
+    "sasv.opening": "正在打开安全聊天",
     "pwa.bannerTitle": "安装 SecureBit.chat",
     "pwa.bannerDesc": "获得原生应用般的体验，安全性更进一步",
     "pwa.install": "安装",
@@ -321,9 +326,8 @@ export const DICTIONARY = {
     "action.scan": "扫描",
     "action.downloadDesktop": "下载桌面应用",
     "action.advancedSettings": "高级设置",
-    "cred.offerTag": "邀请 · 或复制文本",
-    "cred.answerTag": "应答 · 或复制文本",
     "cred.reveal": "点击显示 - 请勿泄露此代码",
+    "cred.orCopy": "或复制代码",
     "qr.title": "扫描二维码",
     "qr.subtitle": "把摄像头对准对方的二维码",
     "qr.scanning": "扫描中…",
diff --git a/src/styles/components.css b/src/styles/components.css
index 7f9f3ee..8e8964a 100644
--- a/src/styles/components.css
+++ b/src/styles/components.css
@@ -798,6 +798,7 @@ button i {
 .sb-start .sb-sc::-webkit-scrollbar-thumb { background: rgba(var(--sb-ink), 0.1); border-radius: 99px; }
 .sb-seg-btn { transition: color .2s; }
 .sb-soft-btn { transition: all .15s; }
+.sb-qr-row:hover { background: rgba(var(--sb-ink), 0.025) !important; }
 .sb-soft-btn:hover { border-color: rgba(var(--sb-ink), 0.18) !important; color: var(--sb-text-2) !important; }
 .sb-scan-btn:hover { border-color: rgba(var(--sb-green-rgb), 0.5) !important; background: rgba(var(--sb-green-rgb), 0.1) !important; }
 .sb-gen-btn:hover { background: var(--sb-orange-hi) !important; }
diff --git a/sw.js b/sw.js
index 4b08ade..587c683 100644
--- a/sw.js
+++ b/sw.js
@@ -11,7 +11,7 @@ let DYNAMIC_CACHE = 'securebit-pwa-dynamic-v4.7.56';
 // Build stamp — rewritten by scripts/post-build.js on every release so this file's
 // bytes change each deploy. That is what makes the browser detect a new Service Worker,
 // reinstall it, drop stale caches and (via controllerchange) prompt the page to update.
-const SW_BUILD_VERSION = '1790225533889';
+const SW_BUILD_VERSION = '1790540575787';
 
 // Locale subdirectories, rewritten by scripts/build-i18n.js. Each localized page is a
 // separate document at its own URL, so the shell has to be cached and served per
diff --git a/tests/rtl-layout.test.mjs b/tests/rtl-layout.test.mjs
index b3d9b39..4a722c9 100644
--- a/tests/rtl-layout.test.mjs
+++ b/tests/rtl-layout.test.mjs
@@ -176,6 +176,13 @@ function sources() {
     assert.ok(app.slice(cells, cells + 60).includes("dir: 'ltr'"),
         'the safety-code tiles sit in a flex row, so they must be pinned left-to-right');
 
+    // The same code printed large above the tiles, in two groups side by side — another
+    // flex row, so in a right-to-left locale the groups would swap places.
+    const big = app.indexOf("key: 'code', style: { padding: '20px 0 22px'");
+    assert.notEqual(big, -1, 'the large safety-code display is gone — this guard now protects nothing');
+    assert.ok(app.slice(big, big + 400).includes("dir: 'ltr'"),
+        'the large safety-code display must be pinned left-to-right');
+
     // The group code, wherever it is put on screen. A plain `group.sasCode` also appears
     // in guard conditions, which render nothing — so the window looks both ways and only
     // the sites that are actually inside an element have to carry the direction.
diff --git a/uk/index.html b/uk/index.html
index 9e58472..a3857d8 100644
--- a/uk/index.html
+++ b/uk/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/uk/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/uk.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/uk.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/ur/index.html b/ur/index.html
index 64ab30b..65adbbc 100644
--- a/ur/index.html
+++ b/ur/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/ur/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/ur.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/ur.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file
diff --git a/zh/index.html b/zh/index.html
index 3ff71b2..234d939 100644
--- a/zh/index.html
+++ b/zh/index.html
@@ -30,18 +30,18 @@
 
     <!-- PWA Manifest -->
 <link rel="manifest" href="/zh/manifest.json">
-<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+<link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
 
 <!-- Blocking, and above the stylesheet on purpose: this stamps data-theme on <html>
      from localStorage while the parser is still in <head>, so the page paints in the
      chosen theme on the first frame instead of flashing dark and correcting itself.
      Cannot be inline (CSP is script-src 'self') and cannot be a module (deferred). -->
-<script src="/src/scripts/theme-boot.js?v=1790225533889"></script>
+<script src="/src/scripts/theme-boot.js?v=1790540575787"></script>
 
 <!-- Blocking, and in <head> on purpose: beforeinstallprompt fires once and is
      not replayed, so the listener has to exist before Chrome decides the page
      is installable. Deferred/module scripts are already too late. -->
-<script src="/src/scripts/pwa-install-capture.js?v=1790225533889"></script>
+<script src="/src/scripts/pwa-install-capture.js?v=1790540575787"></script>
 
 <!-- PWA Meta Tags -->
 <meta name="mobile-web-app-capable" content="yes">
@@ -116,7 +116,7 @@
     <link rel="apple-touch-startup-image" media="screen and (device-width: 744px) and (device-height: 1133px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="/logo/splash/splash_screens/8.3__iPad_Mini_portrait.png">
     
 <!-- Apple Touch Icons -->
-<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" href="/logo/icon-180x180.png?v=1790540575787">
 <link rel="apple-touch-icon" sizes="57x57" href="/logo/icon-57x57.png">
 <link rel="apple-touch-icon" sizes="60x60" href="/logo/icon-60x60.png">
 <link rel="apple-touch-icon" sizes="72x72" href="/logo/icon-72x72.png">
@@ -125,7 +125,7 @@
 <link rel="apple-touch-icon" sizes="120x120" href="/logo/icon-120x120.png">
 <link rel="apple-touch-icon" sizes="144x144" href="/logo/icon-144x144.png">
 <link rel="apple-touch-icon" sizes="152x152" href="/logo/icon-152x152.png">
-<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790225533889">
+<link rel="apple-touch-icon" sizes="180x180" href="/logo/icon-180x180.png?v=1790540575787">
 
 <!-- Microsoft Tiles -->
 <meta name="msapplication-TileColor" content="#ff6b35">
@@ -264,7 +264,7 @@
     <!-- Render-blocking JS is deferred: classic deferred scripts and module scripts
          both execute in document order after parsing, so React still runs before the
          app modules below, but the parser / first paint is no longer blocked. -->
-    <script defer src="/config/ice-servers.js?v=1790225533889"></script>
+    <script defer src="/config/ice-servers.js?v=1790540575787"></script>
     <script defer src="/libs/react/react.production.min.js"></script>
     <script defer src="/libs/react-dom/react-dom.production.min.js"></script>
     <!-- Prism syntax highlighting (vendored, offline). Tokenizes code as TEXT only —
@@ -278,8 +278,8 @@
          the end of <body>: 21 KB of CSS in total, but eight round trips before the
          browser could paint, which GTmetrix measured at 441 ms on a throttled mobile
          connection. Bytes were never the problem; requests were. -->
-    <link rel="stylesheet" href="/assets/app.css?v=1790225533889">
-    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790225533889">
+    <link rel="stylesheet" href="/assets/app.css?v=1790540575787">
+    <link rel="icon" type="image/x-icon" href="/logo/favicon.ico?v=1790540575787">
     <!-- Preload only the fonts needed for first paint. Inter is one variable file that
          answers for every weight, so there is one to preload rather than the two of five
          copies this used to name. fa-solid covers the bulk of UI icons; fa-regular and
@@ -287,19 +287,19 @@
     <link rel="preload" href="/assets/fontawesome/webfonts/fa-solid-900.subset.woff2" as="font" type="font/woff2" crossorigin>
     <link rel="preload" href="/assets/fonts/inter/files/inter-latin.woff2" as="font" type="font/woff2" crossorigin>
     <!-- Non-critical CSS (FontAwesome ~102KB, Prism) loaded async — no longer blocks paint. -->
-    <script defer src="/src/scripts/load-async-css.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/load-async-css.js?v=1790540575787"></script>
     <noscript>
         <link rel="stylesheet" href="/libs/prism/prism.css">
     </noscript>
-    <script defer src="/src/scripts/fa-check.js?v=1790225533889"></script>
+    <script defer src="/src/scripts/fa-check.js?v=1790540575787"></script>
     <!-- This locale's dictionary, registered before anything can ask for a string.
          Only the default locale's is bundled (src/i18n/index.js imports it, because t()
          falls back to it); every other page loads its own here instead of all thirteen
          riding along inside dist/app.js. Absent on the default locale's own page. -->
-    <script type="module" src="/src/i18n/dict/zh.js?v=1790225533889"></script>
+    <script type="module" src="/src/i18n/dict/zh.js?v=1790540575787"></script>
     <!-- Update Manager - система принудительного обновления -->
-    <script defer src="/src/utils/updateManager.js?v=1790225533889"></script>
-    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790225533889"></script>
+    <script defer src="/src/utils/updateManager.js?v=1790540575787"></script>
+    <script type="module" src="/src/components/UpdateChecker.jsx?v=1790540575787"></script>
     <!-- /dist/qr-local.js is deliberately absent: app-boot.js fetches it once the
          app has mounted and the browser is idle, so the 142 KB it weighs is off the
          first load. src/components/QRScanner.js used to be here too and registered
@@ -487,12 +487,12 @@
   </div>
 </div>
     </div>
-    <script type="module" src="/dist/app-boot.js?v=1790225533889"></script>
-    <script type="module" src="/dist/app.js?v=1790225533889"></script>
+    <script type="module" src="/dist/app-boot.js?v=1790540575787"></script>
+    <script type="module" src="/dist/app.js?v=1790540575787"></script>
 
-<script defer src="/src/scripts/pwa-register.js?v=1790225533889"></script>
-<script src="/src/pwa/install-prompt.js?v=1790225533889" type="module"></script>
-<script src="/src/pwa/pwa-manager.js?v=1790225533889" type="module"></script>
-<script defer src="/src/scripts/pwa-offline-test.js?v=1790225533889"></script>
+<script defer src="/src/scripts/pwa-register.js?v=1790540575787"></script>
+<script src="/src/pwa/install-prompt.js?v=1790540575787" type="module"></script>
+<script src="/src/pwa/pwa-manager.js?v=1790540575787" type="module"></script>
+<script defer src="/src/scripts/pwa-offline-test.js?v=1790540575787"></script>
 </body>
 </html>
\ No newline at end of file